Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/c
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/c	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/c	(working copy)
@@ -0,0 +1,99 @@
+#!/bin/bash
+
+gensched () {
+if [ -f output/sched.rom ];then rm output/sched.rom; fi
+while [ 1 ];do
+	if [ -n "$1" ];then cat sched/$1.dat >> output/sched.rom; else return; fi
+	shift
+done
+}
+
+#enckey="-k 00000000000000000000000000000000"
+
+cd ${0%/*}
+for f in program/*.prog 
+  do if [[ ! $f =~ "bt.prog" && ! $f =~ "patch.prog" && ! $f =~ "sim.prog" ]] ; then progs="$progs $f"; fi; done
+cat program/bt.prog $progs  > output/bt_program23.meta
+
+case $1 in
+s)
+#	gensched sim usb
+	gensched sim
+#	enckey="-k key -i iv"
+	sed '1,4 c define REVD\ndefine ROMCODE\ndefine SIM' -i output/bt_program23.meta;;
+p)
+	echo 'mem_patch00:0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000' > output/sched.rom
+	echo 'mem_lap:00 00 00 00 00 00' >> output/sched.rom
+	sed '3 d' -i output/bt_program23.meta;;
+f)
+	gensched test usb fpga
+	enckey="-k key"
+	sed '2 c define FPGA' -i output/bt_program23.meta;;
+t)
+	echo test;gensched test 109x;;
+d)
+        gensched 109x usb
+	sed '2 c define DONGLE' -i output/bt_program23.meta;;
+m)
+        gensched 109x mouse
+	sed '2 c define MOUSE' -i output/bt_program23.meta;;
+esac
+
+
+for f in format/*.format; do if [[ ! $f =~ "bt.format" && ! $f =~ "command.format" ]] ; then fmts="$fmts $f"; fi; done
+cat format/bt.format $fmts format/command.format > output/bt_format.meta
+perl $UTIL/mergepatch.pl 
+perl $UTIL/memalloc.pl
+cd output
+osiuasm bt_program23 -O-W
+sed 's/\(.*\)\r/\1/' -i bt_program23.meta 
+
+
+defs=( FPGA SIM ROMCODE BLE REVA REVB )
+for i in $(seq 0 $((${#defs[@]} - 1))) ; do
+	grep  "^define ${defs[$i]}$" bt_program23.meta -q
+	tsts[$i]=$?
+done
+
+#for i in $(seq 0 $((${#defs[@]} - 1))) ; do echo test ${tsts[$i]};done
+
+geneep -n $enckey
+
+if [[ $2 == "o" ]];then exit;fi
+
+if [ ${tsts[1]} -eq 0 ] ; then
+	sed '8193,24576d' < romcode.rom > romcode0.rom
+	sed '1,8192d' < romcode.rom > romcode1.rom
+	cp romcode0.rom romcode1.rom ../../sim
+	cp romcode.rom ramcode.rom ../../sim
+	if [ -f eeprom.dat ] ; then cp eeprom.dat ../../sim/ ; fi
+	if [ -f otp.rom ] ; then sed '7 c 1' < otp.rom > ../../sim/otp.rom ; fi
+else
+	if [ ${tsts[0]} -eq 0 ] ; then
+		if [ ${tsts[2]} -eq 0 ] ; then
+			sed '8193,24576d' < romcode.rom > romcode0.rom
+			sed '1,8192d' < romcode.rom > romcode1.rom
+			perl $UTIL/rom2mif.pl < romcode.rom > romcode.mif; mv romcode.mif  ../../fpga/
+			echo fpga
+			if [ -f otp.rom ] ; then perl $UTIL/rom2mif.pl < otp.rom > otp.mif; mv otp.mif ../../fpga/ ; fi
+			if [[ $2 == o ]] ; then exit; fi
+			e ku; e hu ramcode.rom 0
+			e su sched.rom;exit 
+		fi
+#		if [[ $1 == "f" ]] ; then 	../../fpga/p u;sleep 1; e su sched.rom;exit; fi
+	fi
+	if [ ! -s ramcode.rom ] ; then exit; fi
+	if [[ $2 =~ e ]];then 
+		e pu;cd ..;e ep;e ku
+	elif [[ $2 =~ [f] ]];then 
+		e ku;e hu romcode.rom 2000;e hu ramcode.rom 0; e su sched.rom;e ku
+	else
+		if [ -f sched.rom ]; then
+			e ku; e hu ramcode.rom 0;e su sched.rom;e pu;e cu
+		else
+			e ku;e hu
+		fi
+	fi
+fi
+
+cd ..
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/d.bat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/d.bat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/d.bat	(working copy)
@@ -0,0 +1,6 @@
+call do.bat eep
+e pu
+e 8081 10
+e 8075 0000
+e ep
+e ku
\ No newline at end of file
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/do.bat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/do.bat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/do.bat	(working copy)
@@ -0,0 +1,162 @@
+@set FPGA_PATH=fpgajic\fpga
+@set ROM_PATH=.
+@set MV_PATCH=mv\src\yichip
+@set YC_PATCH_FILE=yc_patch_yc1021.h
+@set enc=1
+@set enckey=0000000000000000
+@rem set device_option=shutter
+@rem set device_option=antilost
+@rem set device_option=hci
+@rem set device_option=kb
+@set device_option=mouse
+@rem set device_option=le_kb
+@rem set device_option=dongle
+@rem set device_option=module
+@rem set device_option=prcp
+@rem set device_option=car
+@rem set device_option=remote_car
+@echo off
+
+setlocal enabledelayedexpansion
+for /f %%f in ('dir /b /o program\*.prog') do @if not %%f==bt.prog if not %%f==patch.prog if not %%f==sim.prog set progs=!progs! program\%%f
+type program\bt.prog %progs% > output\bt_program23.meta
+for /f %%f in ('dir /b /o format\*.format') do @if not %%f==bt.format if not %%f==command.format set fmts=!fmts! format\%%f
+type format\bt.format %fmts% format\command.format > output\bt_format.meta
+perl util/mergepatch.pl output/bt_program23.meta
+perl util/memalloc.pl output/bt_format.meta
+
+cd output
+osiuasm bt_program23 -O-W
+
+if "%device_option%" equ "hci" (
+  copy ..\sched\hci_boot.dat ..\output\sched.rom
+) else if "%device_option%" equ "kb" (
+copy ..\sched\ssp.dat + ..\sched\kb.dat +  ..\sched\fpga.dat ..\output\sched.rom
+) else if "%device_option%" equ "le_kb" (
+  copy ..\sched\le_kb.dat + ..\sched\fpga.dat ..\output\sched.rom
+) else if "%device_option%" equ "mouse" (
+  copy ..\sched\109x.dat + ..\sched\mouse.dat ..\output\sched.rom
+) else if "%device_option%" equ "module" (
+  copy ..\sched\DM_module.dat + ..\sched\109x.dat ..\output\sched.rom
+) else if "%device_option%" equ "shutter" (
+  copy ..\sched\shutter.dat + ..\sched\109x.dat ..\output\sched.rom
+) else if "%device_option%" equ "antilost" (
+  copy ..\sched\antilost.dat + ..\sched\109x.dat ..\output\sched.rom
+) else if "%device_option%" equ "dongle" (
+  copy  ..\sched\109x.dat + ..\sched\usb.dat ..\output\sched.rom
+) else if "%device_option%" equ "prcp" (
+  copy ..\sched\Le_prcp.dat + ..\sched\fpga.dat ..\output\sched.rom
+) else if "%device_option%" equ "test" (
+  copy ..\sched\test.dat + ..\sched\fpga.dat ..\output\sched.rom
+) else if "%device_option%" equ "car" (
+  copy ..\sched\car.dat + ..\sched\109x.dat ..\output\sched.rom
+) else if "%device_option%" equ "remote_car" (
+  copy ..\sched\remote_car.dat + ..\sched\109x.dat ..\output\sched.rom
+) else (
+
+cd ..
+echo **********************************
+echo Error: illegal device_option !
+echo **********************************
+goto end
+) 
+
+if "%1" equ "eep" (
+	goto genromrevc
+)else (
+  goto downloadram
+)
+
+:geneeprom
+@rem echo on
+@echo Start to generate EEPROM code
+copy ..\sched\mouse.dat ..\output\sched.rom
+
+..\util\geneep ramcode.rom fwram.rom sched.rom %enc% %enckey% a
+perl ..\util\a1bugfix.pl
+osiuasm bt_program23 -O-W
+..\util\geneep ramcode.rom fwram.rom sched.rom %enc% %enckey% a
+goto gen_eep_end
+
+
+
+
+:genromrevb
+echo off
+@echo Start to generate EEPROM code
+..\..\regedr\geneep ramcode.rom fwram.rom sched.rom %enc% %enckey% b
+goto gen_eep_end
+
+
+:genromrevc
+echo off
+
+perl ..\util\DeleteNote.pl ..\output\sched.rom
+perl ..\util\transform_name2addr.pl ..\output\sched.rom ..\output\sched.rom ..\output\memmap.format
+perl ..\util\sortsched.pl ..\output\sched.rom ..\output\sched.rom
+
+@echo Start to generate EEPROM code
+
+geneep -n ramcode.rom sched.rom 0 %enckey% c
+
+ rem geneep -n -k key.txt
+
+cd ..\output
+
+echo eeprom.dat Generated......
+
+if "%device_option%" equ "module" (
+perl eeprom2hciimage_1021s.pl
+echo bt_patch.bin Generated......
+perl bin2array.pl > bt_patch.h
+echo bt_patch.h Generated......
+)
+
+
+:gen_eep_end
+cd ..
+echo **********************************
+echo EEPROM Generated.
+echo The Device is %device_option%. 
+echo Use command "e ep" to download EEPROM.
+echo **********************************
+goto end
+
+
+
+
+:genrom
+@rem echo on
+perl ..\util\rom2mif.pl romcode
+del ..\..\%FPGA_PATH%\romcode.mif
+copy .\romcode.mif ..\..\%FPGA_PATH%\romcode.mif
+perl ..\util\gen_patch_h.pl >%YC_PATCH_FILE%
+copy .\%YC_PATCH_FILE% ..\..\%MV_PATCH%\%YC_PATCH_FILE%
+copy .\%YC_PATCH_FILE% D:\work\yichip\mv_proj\src\inc\%YC_PATCH_FILE%
+cd ..\..\%FPGA_PATH%
+quartus_cdb btspi -c btspi --update_mif
+quartus_asm --read_settings_files=off --write_settings_files=off btspi -c btspi
+quartus_pgm -c USB-Blaster[USB-0] -m jtag -o "p;.\output\btspi.sof" 
+@echo bitstream_compression=on >1
+@echo memory_map_file=on >> 1
+quartus_cpf -c -o 1 -s EP3C55 -d EPCS16 output\btspi.sof output\btspi.jic  
+@rem quartus_pgm -c USB-Blaster[USB-0] -m jtag -o "pi;.\output\btspi.jic"   
+@del 1
+goto end
+
+
+
+:downloadram
+echo on
+@echo Start to download ram code
+e ku
+e hu
+e su sched.rom
+@echo **********************************
+@echo RAM CODE has been downloaded.
+@echo The Device is %device_option%. 
+@echo **********************************
+cd ..
+
+
+:end
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/Hid.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/Hid.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/Hid.format	(working copy)
@@ -0,0 +1,21 @@
+
+(
+/*HID TYPE*/
+0x01 HID_TYPE_CONTROL
+0x04 HID_TYPE_GET_REPORT
+0x05 HID_TYPE_SET_REPORT
+0x07 HID_TYPE_SET_PROTOCOL
+0x09 HID_TYPE_SET_IDLE
+0x0a HID_TYPE_DATA
+/*HID REPORT ID*/
+0x01 HID_REPORT_ID_KB
+
+0x00 HID_CONTROL_P_NOOPERATION
+0x01 HID_CONTROL_P_HARDRESET
+0x02 HID_CONTROL_P_SOFTRESET
+0x03 HID_CONTROL_P_SUSPEND
+0x04 HID_CONTROL_P_EXITSUSPEND
+0x05 HID_CONTROL_P_VIRTUALCABLEUNPLUG
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app.format	(working copy)
@@ -0,0 +1,324 @@
+
+memalloc(
+
+/* load code */
+1 mem_ucode_status
+2 mem_otp_ucode_flag
+1 mem_spid_tbuf				/* spid buf: 03 addr[23:16] addr[15:8] addr[7:0] */
+0 mem_iicd_tbuf				/* iicd buf: iic_adr addr[15:8] addr[7:0] iic_adr */
+1 mem_addr_hi
+1 mem_addr_mi
+1 mem_addr_lo
+1 mem_iicd_addr
+4 mem_spid_rbuf
+2 mem_ucode_buf
+2 mem_ucode_len
+2 mem_sched_addr
+2 mem_ucode_ptr
+16 mem_ucode_keybuf
+18 mem_check_plap_temp
+
+
+1 mem_reconnect_flag
+1 mem_switch_fail_master_count
+1 mem_app_evt_timer_count
+
+)
+
+xmemalloc(
+1 mem_app_handshake_flag
+2 mem_sniff_param_interval
+2 mem_sniff_param_attempt
+2 mem_sniff_param_timeout
+
+/*App Callback Functons*/
+2 mem_cb_check_wakelock
+2 mem_cb_before_hibernate
+2 mem_cb_before_lpm
+2 mem_cb_le_process
+2 mem_cb_bt_process
+2 mem_cb_idle_process
+2 mem_cb_bb_event_process
+2 mem_cb_discovry_timeout
+2 mem_cb_att_write
+2 mem_cb_ble_transmit
+2 mem_cb_event_timer
+2 mem_cb_bt_set_mult
+2 mem_cb_spi_flash_write_complate
+
+
+
+
+2 mem_eeprom_base
+
+1 mem_unsniff2sniff_timer_count
+//lpm mode
+1 mem_wake_up_delay_timer
+
+1 mem_app_connection_options
+
+//
+2 mem_app_disconn_reason
+2 mem_app_disconn_reason_flag
+4 mem_lpm_delay_after_sniff
+1 mem_xrecord_mode
+
+1 mem_eeprom_block_size
+1 mem_spi_init_clk
+1 mem_spi_init_delay_time
+1 mem_spi_ncs_gpio
+
+2 mem_nv_data_ptr
+1 mem_nv_data_number
+
+2 mem_queue_ptr
+
+1 mem_ui_led_struct_num
+2 mem_ui_led_struct_ptr
+
+//adc
+2 mem_0_5_adc_io_data
+2 mem_1v_adc_hvin_data
+2 mem_2v_adc_vinlpm_data
+2 mem_1v_adc_io_data
+2 mem_5v_adc_hvin_data
+2 mem_3v_adc_vinlpm_data
+2 mem_otp_adc_flag
+2 mem_reference_voltage
+1 mem_adc_config_flag
+1 mem_adc_channel
+2 mem_adc_current_value
+1 mem_adc_power_flag	//bit0:low power falg ; bit1:no power flag
+
+3 mem_spi_write_addr
+2 mem_spi_write_ptr
+2 mem_spi_write_len
+1 mem_spi_write_flash_sm
+1 mem_eeprom_wp_gpio
+2 mem_kscan_ptr
+ifdef SPI_SIMULATE
+//spi gpio config
+0 mem_spi_simulate_struct
+1 mem_spi_simulate_cs_gpio
+1 mem_spi_simulate_sclk_gpio
+1 mem_spi_simulate_mosi_gpio
+1 mem_spi_simulate_miso_gpio
+1 mem_spi_simulate_motion_gpio
+//spi slave read byte
+50 mem_spi_simulate_read_byte_slave
+1 mem_spi_simulate_read_byte_slave_temp
+1 mem_spi_simulate_read_length_slave
+1 mem_spi_simulate_read_length_slave_temp
+//spi slave write byte
+50 mem_spi_simulate_write_byte_slave
+1 mem_spi_simulate_write_byte_slave_temp
+1 mem_spi_simulate_write_byte_slave_temp_temp
+1 mem_spi_simulate_write_length_slave
+1 mem_spi_simulate_write_length_slave_temp
+endif
+
+0 mem_key_num_ptr
+2 mem_keyscan_ptr
+
+2 mem_power_param_ptr
+2 mem_24g_head_ptr
+)
+//adc read
+(
+0 ADC_CONFIG_VINLPM
+1 ADC_CONFIG_HVIN
+2 ADC_CONFIG_GPIO
+)
+
+
+(
+0 QUEUE_OFFSET_EACH_SIZE
+1 QUEUE_OFFSET_LENGTH
+2 QUEUE_OFFSET_CURR_NUM
+3 QUEUE_OFFSET_READ_PTR
+4 QUEUE_OFFSET_WRITE_PTR
+5 QUEUE_OFFSET_ELE_INIT_ADDR
+)
+(
+//Flash Register
+0x05 FLASH_READ_SATUS
+
+// Flash Status Register
+0x00 FLASH_STATUS_WIP
+0X01 FLASH_STATUS_WEL
+0X02 FLASH_STATUS_BP0
+0X03 FLASH_STATUS_BP1
+
+//Flash Write Sm
+0X00 FLASH_SM_NO_BUYS
+0X01 FLASH_SM_START
+0X02 FLASH_SM_ERASE_SECTOR
+0X03 FLASH_SM_WAIT_ERASE_SECTOR
+0X04 FLASH_SM_WRITE_DATA
+0X05 FLASH_SM_WAIT_WRITE_DATA
+
+
+//Flash Command
+0x02 FLASH_COMMAND_WRITE_DATA
+0x03 FLASH_COMMAND_READ_DATA
+0x20 FLASH_COMMAND_SECTOR_ERASE
+)
+
+0x0000 otp_ucode_flag
+0x07f0 otp_ucode_aeskey
+
+/* adc data addr and flag */
+(
+0x07e0 OTP_CHIP_FUNCTIONS
+0x07e2 otp_adc_io_0_5V_addr
+0x07e4 otp_adc_hvin_1V_addr
+0x07e6 otp_adc_vinlpm_2V_addr
+0x07e8 otp_adc_io_1V_addr
+0x07ea otp_adc_hvin_5V_addr
+0x07ec otp_adc_vinlpm_3V_addr
+0x07ee otp_adc_flag_addr
+0xaa55 OTP_ADC_FLAG
+)
+
+/* data stored in eeprom */
+(
+0	eeprom_nv_ram
+
+195	eeprom_module_init_flag//2
+
+)
+
+/*mem_app_handshake_flag*/
+(
+0 APP_HANDSHAKE_NULL
+1 APP_HANDSHAKE_DONE
+
+)
+/*mem_device_option*/
+(
+1 dvc_op_hci
+4 dvc_op_dongle
+5 dvc_op_spp
+6 dvc_op_ukey
+7 dvc_op_ir
+
+9 dvc_op_shutter
+10 dvc_op_module
+11 dvc_op_ble_mouse
+12 dvc_op_ble_kb
+13 dvc_op_ble_prcp
+14 dvc_op_car
+15 dvc_op_AntiLost
+16 dvc_op_remote_car
+255 dvc_op_test
+//device option hight 4
+6 dvc_op_mouse
+7 dvc_op_keyboard
+//device option low 2
+(
+0 MODE_3_MOUSE
+1 MODE_4_MOUSE
+)
+)
+
+(
+3 twspi_sclk
+4 twspi_sdio
+)
+
+(
+4 pan_clk_bit
+5 pan_dat_bit
+6 pan_mov_bit
+)
+
+(
+7 otp_uflag_aes
+6 otp_uflag_skip_eep
+5 otp_uflag_skip_flash
+4 otp_uflag_hci
+)
+
+/* ir command */
+(
+1 ircmd_record
+2 ircmd_play
+3 ircmd_write_pulse
+4 ircmd_write_seq
+5 ircmd_write_next
+
+8 ircmd_test_play
+9 ircmd_test_rec
+
+10 ircmd_report_pulse
+11 ircmd_report_seq
+12 ircmd_report_raw
+
+20 ircmd_screen_on
+21 ircmd_screen_off
+)
+
+(
+7 gpio_active_bit
+)
+(
+2 HID_HANDSHAKE_TIMEOUT
+
+)
+
+(
+1 APP_FLAG_RECONNECT
+)
+(
+5 LPM_WAKE_UP_DELAY_TIMER
+)
+
+
+//mem_app_disconn_reason
+//mem_app_disconn_reason_flag
+//bit map
+(
+2 APP_DISC_RSN_SIZE
+)
+(
+0 APP_DISC_BY_BUTTON
+1 APP_DISC_AFTER_PAIRING
+2 APP_DISC_AFTER_RECONN
+3 APP_DISC_AFTER_SNIFF
+4 APP_DISC_AFTER_SETUP_DONE
+5 APP_DISC_AFTER_HANDSHAKE
+6 APP_DISC_BT
+7 APP_DISC_BLE
+8 APP_DISC_L2CAP_REFUSED
+9 APP_DISC_SWITCH_FAIL
+)
+//eeprom init flag
+(
+	0xaa55 EEPROM_INIT_FLAG
+)
+
+(
+1 KEY_CONF_STRUCT_LEN
+0 KEY_PIN_OFFSET
+)
+
+(
+12000000 PWM_12MHZ
+)
+(
+0 POWER_OFF
+1 POWER_STARTING
+2 POWER_STANDBY
+)
+//power parameter offset(8 byte)
+(
+0 power_state_offset
+1 power_timer_offset
+2 power_off_timeout_offset
+3 power_starting_timeout_offset
+4 power_off_cb_offset
+6 power_starting_cb_offset
+8 power_standby_cb_offset
+10 ui_butten_up_cb_offset
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_antiLost.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_antiLost.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_antiLost.format	(working copy)
@@ -0,0 +1,202 @@
+omemalloc(
+// memblock for cover the variables portion at shutter.format
+2 mem_antl_lpm_interval
+2 mem_antl_adv_interval
+2 mem_antl_slow_adv_lpm_interval
+2 mem_antl_slow_adv_adv_interval
+0 mem_antl_led_style
+1 mem_antl_led_type
+1 mem_antl_led_blink_count
+1 mem_antl_led_gpio
+2 mem_antl_led_on_time
+2 mem_antl_led_off_time
+2 mem_antl_led_cb_on
+2 mem_antl_led_cb_off
+
+0 mem_antl_buzzer_style
+1 mem_antl_buzzer_type
+1 mem_antl_buzzer_blink_count
+1 mem_antl_buzzer_gpio
+2 mem_antl_buzzer_on_time
+2 mem_antl_buzzer_off_time
+2 mem_antl_buzzer_cb_on
+2 mem_antl_buzzer_cb_off
+
+0 mem_antl_fast_adv_led_style
+1 mem_antl_fast_adv_led_type
+1 mem_antl_fast_adv_led_blink_count
+1 mem_antl_fast_adv_led_gpio
+2 mem_antl_fast_adv_led_on_time
+2 mem_antl_fast_adv_led_off_time
+
+0 mem_antl_slow_adv_led_style
+1 mem_antl_slow_adv_led_type
+1 mem_antl_slow_adv_led_blink_count
+1 mem_antl_slow_adv_led_gpio
+2 mem_antl_slow_adv_led_on_time
+2 mem_antl_slow_adv_led_off_time
+
+0 mem_antl_power_starting_led_style
+1 mem_antl_power_starting_led_type
+1 mem_antl_power_starting_led_blink_count
+1 mem_antl_power_starting_led_gpio
+2 mem_antl_power_starting_led_on_time
+2 mem_antl_power_starting_led_off_time
+
+7 mem_antl_power_starting_buzzer_style
+
+0 mem_antl_power_off_led_style
+1 mem_antl_power_off_led_type
+1 mem_antl_power_off_led_link_count
+1 mem_antl_power_off_led_gpio
+2 mem_antl_power_off_led_on_time
+2 mem_antl_power_off_led_off_time
+
+0 mem_antl_power_off_buzzer_style
+1 mem_antl_power_off_buzzer_type
+1 mem_antl_power_off_buzzer_link_count
+1 mem_antl_power_off_buzzer_gpio
+2 mem_antl_power_off_buzzer_on_time
+2 mem_antl_power_off_buzzer_off_time
+
+7 mem_antl_alert_led_stlye
+
+0 mem_antl_alert_buzzer_stlye
+1 mem_antl_alert_buzzer_type
+1 mem_antl_alert_buzzer_blink_count
+1 mem_antl_alert_buzzer_gpio
+2 mem_antl_alert_buzzer_on_time
+2 mem_antl_alert_buzzer_off_time
+
+0 mem_antl_key_led_style
+1 mem_antl_key_led_type
+1 mem_antl_key_led_blink_count
+1 mem_antl_key_led_gpio
+2 mem_antl_key_led_on_time
+2 mem_antl_key_led_off_time
+
+7 mem_antl_key_buzzer_style
+
+1 mem_antl_queue_width
+1 mem_antl_queue_depth
+1 mem_antl_queue_curr_num
+1 mem_antl_queue_read_ptr
+1 mem_antl_queue_write_ptr
+80 mem_antl_queue_buff
+
+1 mem_antl_key_scan_enable
+1 mem_antl_led_num
+4 mem_antl_led_gpio_map
+
+0 mem_antl_power_param
+1 mem_antl_power_state
+1 mem_antl_power_timer
+1 mem_antl_power_off_timeout
+1 mem_antl_power_starting_timeout
+2 mem_antl_power_off_cb
+2 mem_antl_power_starting_cb
+2 mem_antl_power_standby_cb
+2 mem_event_button_up_cb
+
+1 mem_antl_key_num
+2 mem_cb_antl_key
+4 mem_antl_key_conf0
+
+15 mem_antl_key0_press
+15 mem_antl_key0_release
+
+///////
+1 mem_antl_conn_updata_procedure_state
+2 mem_client_characteristic_configuration_descriptor
+///////
+
+
+//100ms timer
+2 mem_adc_timer
+1 mem_antl_conn_update_timer
+1 mem_antl_send_updata_le_param_timer
+////
+
+2 mem_antl_le_sleep_timer
+2 mem_antl_fast_adv_timer
+2 mem_antl_fast_adv_timeout
+2 mem_antl_le_sleep_timeout
+1 mem_double_click_timer
+1 mem_butten_click_cnt
+
+//1 mem_dvc_seq
+/////////anti lost alarm state/////
+1 mem_antl_led_state
+1 mem_antl_buzzer_state
+1 mem_antl_key_state
+1 mem_antl_lost_mode
+1 mem_alarm_config
+1 mem_alarm_config_notfy_cnt
+
+6 mem_buzzer_pwm_conf
+
+
+/////////anti lost battery adc read////////
+2 mem_adc_timeout
+1 mem_voltage_remain_percent
+
+0 mem_battery_calculate_set
+2 mem_battery_full_voltage
+2 mem_battery_empty_voltage
+2 mem_battery_low_voltage
+2 mem_battery_current_voltage
+
+
+2 mem_rx_window_sniff_inc
+2 mem_interval_increment
+
+2 mem_antl_le_interval_min
+2 mem_antl_le_interval_max
+2 mem_antl_le_latency
+2 mem_antl_le_timeout
+2 mem_antl_le_unnormal_interval_min
+2 mem_antl_le_unnormal_interval_max
+2 mem_antl_le_unnormal_latency
+2 mem_antl_le_unnormal_timeout
+
+400 mem_AntiLost_le_att_list
+)
+
+//app new specific
+(
+0 CONN_PARAM_UPDATA_PROCEDURE_NO_INIT
+1 CONN_PARAM_UPDATA_PROCEDURE_STARTING
+2 CONN_PARAM_UPDATA_PROCEDURE_COMPLETE
+3 CONN_PARAM_UPDATA_PROCEDURE_FAILD
+)
+(
+0 NEW_SPEC_HEADER_OFFSET
+2 NEW_SPEC_OPCODE_OFFSET
+3 NEW_SPEC_DLEGTH_OFFSET  //data length offset
+5 NEW_SPEC_DADDR_OFFSET   //data address offset
+)
+(
+1 OPCODE1_BUTTEN_CLICK_ONCE
+2 OPCODE2_BUTTEN_DOUBLE_CLICK
+3 OPCODE3_ANTL_START_ALRAM
+4 OPCODE4_CURRENT_ALARM_STATE
+5 OPCODE5_BATTER_INFORMATION
+7 OPCODE7_ANTL_CONFIG_ALRAM
+)
+(
+0x0a NEW_SPEC_NOTIFY_HANDLE
+0x0b NEW_SPEC_NOTIFICATION_ENABLE_HANDLE
+0x0d NEW_SPEC_WRITE_HANDLE
+)
+//app new specific end
+
+//mem_anti_lost_mode
+(
+0x01 ANTI_LE_ALARM_ON
+0x00 ANTI_LE_ALARM_OFF
+)
+(
+0 NOTIFICATION_ENABLE_BIT
+1 INDICATION_ENABLE_BIT
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_car.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_car.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_car.format	(working copy)
@@ -0,0 +1,287 @@
+
+
+omemalloc(
+1 mem_car_hard_soft_switch
+1 mem_car_queue_each_size
+1 mem_car__queue_length
+
+1 mem_car_queue_curr_num
+1 mem_car_queue_read_ptr
+1 mem_car_queue_write_ptr
+120 mem_car_queue_ele
+
+20 mem_car_pop_queue_buff
+
+1 mem_car_led_num
+10 mem_car_led_map
+
+1 mem_car_style1_led_type
+1 mem_car_style1_blink_count
+1 mem_car_style1_struct_led_gpio
+2 mem_car_style1_on_time
+2 mem_car_style1_off_time
+2 mem_car_style1_cb_ledon
+2 mem_car_style1_cb_ledoff
+
+1 mem_car_style2_led_type
+1 mem_car_style2_blink_count
+1 mem_car_style2_struct_led_gpio
+2 mem_car_style2_on_time
+2 mem_car_style2_off_time
+2 mem_car_style2_cb_ledon
+2 mem_car_style2_cb_ledoff
+
+//////motor
+0 mem_le_receive_data
+2 mem_le_receive_packet_head
+1 mem_le_receive_cmd
+2 mem_le_receive_length
+10 mem_le_receive_payload
+1 mem_le_receive_checksum
+1 mem_motor1_status
+1 mem_motor1_speed
+1 mem_motor2_status
+1 mem_motor2_speed
+1 mem_motor3_status
+1 mem_motor3_speed
+
+0 mem_motor1_pwm_set
+1 mem_motor1_pwm_pin1_set
+1 mem_motor1_pwm_pin2_set
+1 mem_motor1_pwm_pin_set
+1 mem_motor1_pwm_channel_set
+3 mem_motor1_pwm_freq_set
+1 mem_motor1_pwm_dute_set
+0 mem_motor2_pwm_set
+1 mem_motor2_pwm_pin1_set
+1 mem_motor2_pwm_pin2_set
+1 mem_motor2_pwm_pin_set
+1 mem_motor2_pwm_channel_set
+3 mem_motor2_pwm_freq_set
+1 mem_motor2_pwm_dute_set
+0 mem_motor3_pwm_set
+1 mem_motor3_pwm_pin1_set
+1 mem_motor3_pwm_pin2_set
+1 mem_motor3_pwm_pin_set
+1 mem_motor3_pwm_channel_set
+3 mem_motor3_pwm_freq_set
+1 mem_motor3_pwm_dute_set
+
+1 mem_motor_select_p_n
+1 mem_car_motor_status
+1 mem_car_motor_speed
+0 mem_motor_pwm_set
+1 mem_motor_pwm_pin1_set
+1 mem_motor_pwm_pin2_set
+1 mem_motor_pwm_pin_set
+1 mem_motor_pwm_channel_set
+3 mem_motor_pwm_freq_set
+1 mem_motor_pwm_dute_set
+
+1 mem_ir_rx_gpio
+2 mem_ir_data
+2 mem_ir_rx_buf
+4 mem_ir_receive_clkn
+
+3 mem_ir_notify_data
+5 mem_ir_notify_data_head
+2 mem_ir_notify_data_payload
+1 mem_ir_notify_data_check_sum
+1 mem_car_ir_breakdown_check_timer
+1 mem_car_ir_breakdown_flag
+
+0 mem_car_led_control
+1 mem_car_led1_status
+1 mem_car_led2_status
+1 mem_car_led3_status
+1 mem_car_led4_status
+1 mem_car_led5_status
+1 mem_car_led6_status
+1 mem_car_led7_status
+1 mem_car_led8_status
+1 mem_car_led_control_timer
+1 mem_car_led_blink_status
+1 mem_car_led_no
+
+3 mem_car_info_request
+5 mem_car_info_request_head
+8 mem_car_info_request_payload
+1 mem_car_info_request_checksum
+
+0 mem_car_config_param
+1 mem_car_config_setting_flag
+1 mem_car_config_device_select
+1 mem_car_config_motor_layout
+1 mem_car_config_ir_enable
+1 mem_car_config_ir_rx_gpio
+1 mem_car_config_pairing_led_conn_status
+1 mem_car_config_pairing_led_gpio
+1 mem_car_config_led_num
+0 mem_car_config_blood_led_gpio
+1 mem_car_config_blood_led1_gpio
+1 mem_car_config_blood_led2_gpio
+1 mem_car_config_blood_led3_gpio
+1 mem_car_config_blood_led4_gpio
+1 mem_car_config_blood_led5_gpio
+1 mem_car_config_blood_led6_gpio
+1 mem_car_config_blood_led7_gpio
+1 mem_car_config_blood_led8_gpio
+1 mem_car_config_bat_notify_enable
+1 mem_car_config_low_voltage_led_gpio
+1 mem_car_config_low_voltage_percent
+1 mem_car_config_soft_switch_enable
+1 mem_car_config_soft_switch_gpio
+
+1 mem_car_notify_vdd_count
+1 mem_car_notify_vdd_timer
+1 mem_car_notify_vdd_value_last
+1 mem_car_notify_vdd_percent
+1 mem_car_working_flag
+1 mem_low_bat_flag
+
+3 mem_notify_bat_packet
+5 mem_notify_bat_head
+1 mem_notify_bat_payload
+1 mem_notify_bat_check_sum
+
+1 mem_vdd_notify_flag
+2 mem_car_current_vdd_value_temp
+2 mem_car_last_vdd_value
+
+0 mem_vdd_calculate_set
+2 mem_vdd_full_vol
+2 mem_vdd_empty_vol
+2 mem_vdd_low_vol
+2 mem_vdd_now_vol
+
+
+1 mem_car_24g_status
+2 mem_car_24g_no_data_timeout_count
+2 mem_car_24g_no_data_timeout_timer
+
+1 mem_car_24g_ir_receive_attack_count
+1 mem_car_24g_go_die_flag
+1 mem_car_attack_shake_timer
+1 mem_car_attack_shake_flag
+
+0 mem_car_soft_power
+1 mem_car_power_state
+1 mem_car_power_timer
+1 mem_car_power_off_timeout
+1 mem_car_power_starting_timeout
+2 mem_car_power_off_cb
+2 mem_car_power_starting_cb
+2 mem_car_power_standby_cb
+2 mem_car_ui_button_up_cb
+
+
+500 mem_car_le_att_list
+
+1 mem_car_moto1_blank_timer
+1 mem_car_moto2_blank_timer
+1 mem_car_moto3_blank_timer
+1 mem_car_24g_received_pac
+400 mem_24g_car_head_ptr
+)
+
+(
+//20ms
+0x0020	FAST_ADV_INTERVAL_VALUE_CAR
+)
+
+(
+0x14 ATT_CAR_CONTROL_HANDLE
+0x14 ATT_SPEED_SET_HANDLE
+)
+
+
+(
+0 TURN_FRONT
+1 TURN_LEFT
+2 TURN_RIGHT
+0 MOTOR_STOP
+1 GO_FRONT
+2 GO_BACK
+0x6b5a LE_RECEIVE_PACKET_HEAD
+)
+
+(
+0 FLAG_IR_DISABLE
+1 FLAG_IR_ENABLE
+)
+
+(
+0 DEVICE_CAR
+1 DEVICE_TANK
+2 DEVICE_BATTLE_CAR
+3 DEVICE_BATTLE_TANK
+4 DEVICE_REMOTE
+)
+
+(
+0 F_B_MOTOR
+1 L_R_MOTOR
+2 F_B_BATTERY
+3 L_R_BATTERY
+)
+
+
+
+(
+1 SPEED_LEVEL_1
+2 SPEED_LEVEL_2
+3 SPEED_LEVEL_3
+4 SPEED_LEVEL_4
+5 SPEED_LEVEL_5
+6 SPEED_LEVEL_6
+7 SPEED_LEVEL_7
+8 SPEED_LEVEL_8
+9 SPEED_LEVEL_9
+10 SPEED_LEVEL_10
+)
+
+(
+0 PWM0_DUTY_SETTING
+1 PWM1_DUTY_SETTING
+2 PWM2_DUTY_SETTING
+)
+
+(
+1 CAR_CMD_BATTERY
+2 CAR_CMD_OLD_CAR_CONTROL
+3 CAR_CMD_OLD_SPEED_CONTROL
+4 CAR_CMD_L_R_MOTOR_CONTROL
+5 CAR_CMD_F_B_MOTOR_CONTROL
+6 CAR_CMD_IR_CONTROL
+7 CAR_CMD_LED_CONTROL
+8 CAR_CMD_DEVICE_INFO
+)
+
+(
+0 CAR_REMOTE_CHECK_BUTTON
+1 CAR_REMOTE_CHECK_ROCKER
+)
+
+(
+0x11 CAR_NOTIFY_HANDLE
+)
+
+(
+0 LED_OFF
+1 LED_ON
+2 LED_BLINK
+0xFF LED_INVALID
+)
+
+(
+0xFF INVALID_PIN_NUM
+)
+
+
+(
+0 POWER_ON
+1 WORK_PAIRED
+2 WORK_SEARCH
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_light.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_light.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_light.format	(working copy)
@@ -0,0 +1,34 @@
+omemalloc(
+1 mem_light_pwm0
+1 mem_light_pwm1
+1 mem_light_pwm2
+1 mem_light_pwm3
+1 mem_light_pwm4
+1 mem_light_pwm5
+
+1 mem_light_pairing_enable
+2 mem_light_pairing_timer
+1 mem_light_cnum
+1 mem_light_next_record
+80 mem_light_clist
+
+
+1 mem_light_crr_cmd_count
+1 mem_curr_packet_num
+)
+
+(
+0 LIGHT_GROUP0
+)
+
+(
+0 LIGHT_CMD_PWM0
+1 LIGHT_CMD_PWM1
+2 LIGHT_CMD_PWM2
+3 LIGHT_CMD_PWM3
+4 LIGHT_CMD_PWM4
+5 LIGHT_CMD_PWM5
+6 LIGHT_CMD_AUTO_MODE
+0xff LIGHT_CMD_PAIRING
+
+)
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_lightc.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_lightc.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_lightc.format	(working copy)
@@ -0,0 +1,30 @@
+omemalloc(
+1 mem_lightc_led_gpio
+6 mem_lightc_row
+6 mem_lightc_col
+
+1 mem_adv_time
+
+20 mem_cmd0_string
+20 mem_cmd1_string
+20 mem_cmd2_string
+20 mem_cmd3_string
+20 mem_cmd4_string
+20 mem_cmd5_string
+20 mem_cmd6_string
+20 mem_cmd7_string
+20 mem_cmd8_string
+20 mem_cmd9_string
+20 mem_cmd10_string
+20 mem_cmd11_string
+20 mem_cmd12_string
+20 mem_cmd13_string
+20 mem_cmd14_string
+20 mem_cmd15_string
+20 mem_cmd16_string
+20 mem_cmd17_string
+20 mem_cmd18_string
+20 mem_cmd19_string
+20 mem_cmd20_string
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_module.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_module.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_module.format	(working copy)
@@ -0,0 +1,221 @@
+
+omemalloc(	
+	2 mem_soft_version_num
+	1 mem_module_wake_up_gpio
+	1 mem_module_state_gpio
+	1 mem_module_connect_state_gpio
+
+	2 mem_current_packet_length
+	1 mem_module_state
+	
+	1 mem_module_mcu_wake_pin
+	4 mem_module_mcu_wake_delay_us
+
+	1 mem_module_spp_lpm_mult
+	1 mem_module_le_lpm_mult	
+	1 mem_module_bluetooth_stauts_by_command
+
+	//uart
+	2 mem_module_uart_rx_buffer
+	2 mem_module_uart_rx_buffer_end
+	2 mem_module_uart_tx_buffer
+	2 mem_module_uart_tx_buffer_end
+
+	//ADC
+	1 mem_module_read_vdd_flag
+	1 mem_module_read_vdd_count
+	1 mem_module_vdd_quotient
+	1 mem_module_vdd_remainder
+
+	//ble
+	1 mem_module_le_rx_data_len
+	2 mem_module_le_rx_data_address
+	2 mem_module_le_rx_data_handle
+	//ble write handle
+	2 mem_module_data_write_handle
+	2 mem_module_data_write_handle2
+	//flag
+	1 mem_module_flag
+
+	1 mem_module_hci_notify_len
+	2 mem_module_hci_notify_handle
+	2 mem_module_hci_nofiy_addr
+
+	4 mem_last_transmite_clock
+	
+	300 mem_module_uuid_list
+	0 mem_module_uuid_list_end
+	600 mem_module_le_att_list
+	0 mem_module_le_att_list_end
+	0 mem_module_nv_data
+	34 mem_module_nv_data0
+	34 mem_module_nv_data1
+	34 mem_module_nv_data2
+	34 mem_module_nv_data3
+	34 mem_module_nv_data4
+)
+
+
+(//mem_module_flag
+//bit0~bit3 config module function
+0 MODULE_FLAG_UART_FLOW_CONTROL
+1 MODULE_FLAG_BLE_SEND_MTU23
+2 MODULE_FLAG_BLE_DATA_ENCRYPT
+
+//bit4~bit7 module states change
+4 MODULE_FLAG_BLE_DATA_FINISH
+5 MOUDLE_TASK_UNSNIFF
+6 MOUDLE_TASK_SNIFF
+
+)
+
+(
+34 NV_DATA_LEN
+-1 DECREASED_ONE
+)
+
+
+
+(
+	10 FLAG_MODULE_READ_VDD_COUNT
+)
+
+(
+	110  DM_REFCOM_BUFF_LEN
+)
+(
+	0x200 UART_AIR_CONTROL_THRESHOLD
+)
+
+(
+0x01 HCI_DISCARD_PACKET
+0x00 HCI_NOT_DISCARD_PACKET
+)
+
+
+
+(//Command
+0x00 HCI_CMD_SET_BT_ADDR_REQ
+0x01 HCI_CMD_SET_LE_ADDR_REQ
+0x02 HCI_CMD_SET_VISIBILITY_REQ
+0x03 HCI_CMD_SET_BT_NAME_REQ
+0x04 HCI_CMD_SET_LE_NAME_REQ
+0x05 HCI_CMD_SPP_DATA_REQ
+0x09 HCI_CMD_LE_DATA_REQ
+0x0b HCI_CMD_STATUS_IRQ
+0x0c HCI_CMD_SET_PAIRING_REQ
+0x0d HCI_CMD_SET_PINCODE_REQ
+0x0e HCI_CMD_SET_UARTCONTROL_REQ
+0x0f HCI_CMD_SET_UART_BAUD_REQ
+0x10 HCI_CMD_VERSION_REQ
+0x11 HCI_CMD_BT_DISCONNECT
+0x12 HCI_CMD_BLE_DISCONNECT
+0x13 HCI_CMD_DELETE_DEVICE
+0x14 HCI_CMD_CREATE_CONNECT
+0x26 HCI_CMD_SET_NVRAM_REQ
+0x27 HCI_CMD_SLEEP
+0x28 HCI_CMD_CONFIRM_GKEY
+0x29 HCI_CMD_SET_CREDIT_GIVEN
+0x2a HCI_CMD_AUTO_ADV_SCAN
+0x2b HCI_CMD_POWER_REQ
+0x2c HCI_CMD_POWER_SET
+0x30 HCI_CMD_PASSKEY_ENTRY
+0x31 HCI_CMD_SET_GPIO
+0x32 HCI_CMD_READ_GPIO
+0x33 HCI_CMD_LE_SET_PAIRING
+0x34 HCI_CMD_LE_SET_ADV_DATA
+0x35 HCI_CMD_LE_SET_SCAN_DATA
+0x36 HCI_CMD_LE_SEND_CONN_UPDATE_REQ
+0x37 HCI_CMD_LE_SET_ADV_PARM
+0x38 HCI_CMD_LE_START_PAIRING
+0x40 HCI_CMD_SET_WAKE_GPIO
+0x42 HCI_CMD_SET_TX_POWER
+0x43 HCI_CMD_BOOT_VERSION_REQ
+0x48 HCI_CMD_LE_CONFIRM_GKEY
+0x49 HCI_CMD_REJECT_JUSTWORK
+0x51 HCI_CMD_RESET_CHIP_REQ
+
+0x61 HCI_CMD_LE_SET_FIXED_PASSKEY
+
+0xff HCI_TEST_CMD_CLOSE_LPM
+)
+
+(//event
+0x00 HCI_EVENT_SPP_CONN_REP
+0x01 HCI_EVENT_HID_CONN_REP
+0x02 HCI_EVENT_LE_CONN_REP
+0x03 HCI_EVENT_SPP_DIS_REP
+0x04 HCI_EVENT_HID_DIS_REP
+0x05 HCI_EVENT_LE_DIS_REP
+0x06 HCI_EVENT_CMD_RES
+0x07 HCI_EVENT_SPP_DATA_REP
+0x08 HCI_EVENT_LE_DATA_REP
+0x09 HCI_EVENT_STANDBY_REP
+0x0a HCI_EVENT_STATUS_RES
+0x0b HCI_EVENT_FINISH_PACK_NUM
+0X0C HCI_EVENT_SNIFF_MD_CHANGE
+0x0D HCI_EVENT_NVRAM_REP
+0x0e HCI_EVENT_GKEY
+0x0F HCI_EVENT_INVALID_PACKET
+0x10 HCI_EVENT_GET_PASSKEY
+0x11 HCI_EVENT_LE_TK
+0x12 HCI_EVENT_REMOTE_MTU
+0x14 HCI_EVENT_LE_PAIRING_STATE
+0X15 HCI_EVENT_LE_ENCRYPTION_STATE
+0x17 HCI_EVENT_LE_CONNECTION_UPDATE
+0x1d HCI_EVENT_LE_GKEY
+
+)
+
+
+(//command HCI_CMD_SET_GPIO
+//byte 0
+0x00 HCI_CMD_CONFIG_GPIO_INPUT
+0x01 HCI_CMD_CONFIG_GPIO_OUTPUT
+//byte 1 input state
+0x00 GPIO_INPUT_PULLUP
+0x01 GPIO_INPUT_PULLDOWN
+0x02 GPIO_INPUT_HIGH_IMPEDANCE
+)
+
+
+
+(
+0x7e0 OTP_ADDR_RF_PARAM_FIX
+//struct of RF_PARAM_FIX
+// uint8       //length = param_pair_count * 2 
+// uint16     //param-pair-1
+// uint16     //param-pair-2
+// uint16     //param-pair-3
+// uint16     //param-pair-4
+// uint16     //param-pair-5
+// uint16     //param-pair-6
+// uint16     //param-pair-7
+)
+
+(
+0	PAIRING_PINCODE
+1	PAIRING_JUSTWORK
+2	PAIRING_PASSKEY
+3	PAIRING_CONFIRM
+)
+
+
+(
+0x0001	FLAG_BT_PAIRING_SUCCESS
+0x0101	FLAG_BT_PAIRING_FAIL
+0x0080	FLAG_BLE_PAIRING_SUCCESS
+0x0180	FLAG_BLE_PAIRING_FAIL
+)
+
+
+(
+1	FLAG_EVENT_START_ENC
+0	FLAG_EVENT_PAUSE_ENC
+)
+
+(
+	0 MOUDLE_STATE_BT_BIT
+	1 MOUDLE_STATE_BLE_BIT
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_mouse.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_mouse.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_mouse.format	(working copy)
@@ -0,0 +1,435 @@
+
+memalloc(
+2 mem_init_cnt
+)
+//dpi eeprom addr
+
+
+cmemalloc 0(
+// Mouse Work Area
+1 mem_mouse_key
+2 mem_mouse_x
+2 mem_mouse_y
+1 mem_mouse_z
+1 mem_mouse_tz
+1 mem_mouse_xy_h
+1 mem_sensor_shutter_hi
+1 mem_sensor_shutter_lo
+1 mem_sensor_smart_flag
+1 mem_sensor_squal_reg
+1 mem_sensor_iqc
+1 mem_mouse_move_flag
+2 mem_mouse_direct_timeout
+2 mem_mouse_no_data_timeout
+2 mem_mouse_discovery_timer
+2 mem_mouse_direct_timer
+2 mem_mouse_no_data_timer
+2 mem_mouse_blank_data_timer
+1 mem_mouse_send_blank_timer
+
+1 mem_mouse_cpi_count
+1 mem_mouse_dpi_button_state
+
+
+//mouse T wheel
+1 mem_wheel_tb_old_pinlevel
+1 mem_wheel_tb_new_pinlevel
+1 mem_wheel_tog 
+1 mem_mouse_tz_data
+1 mem_mouse_tz_data_count
+1 mem_mouse_tz_data_count1
+
+
+1 mem_mwheel_b_old_pinlevel
+1 mem_mwheel_b_new_pinlevel
+1 mem_mwheel_tog 
+1 mem_mouse_z_data
+1 mem_mouse_z_data_count
+1 mem_mouse_z_data_count1
+
+1 mem_reconn_mode
+1 mem_mouse_statue_led_timer  
+1 mem_le_connect_status_flag
+1 mem_le_start_encrypt_timer
+
+7 mem_device_addr_temp
+
+1 mem_adc_read_timer
+1 mem_adc_low_volatage_led_timer_count
+2 mem_adc_reference_voltage
+1 mem_device_number
+2 mem_mouse_flag
+2 mem_mouse_function_enable
+1 mem_combination_select_device_timer_init
+1 mem_combination_select_device_count
+1 mem_select_device_button_statue
+
+1 mem_combination_ui_button_count
+1 mem_bt_discovey_button_statue
+1 mem_sensor_reset_gpio	
+
+1 mem_sensor_id1
+1 mem_sensor_id2
+//eeprom config param
+1 mem_mouse_dpi_led_delay_count
+1 mem_config_sensor_type
+1 mem_config_sensor_motion
+1 mem_lbutton_gpio
+1 mem_rbutton_gpio
+1 mem_mbutton_gpio
+1 mem_bk_button_gpio
+1 mem_fw_button_gpio
+1 mem_dpi_button_gpio
+1 mem_whee_a_data_gpio
+1 mem_whee_b_data_gpio
+1 mem_whee_ta_data_gpio
+1 mem_whee_tb_data_gpio
+1 mem_config_bt_button_gpio
+1 mem_config_select_device_button_gpio
+1 mem_config_paraing_led_gpio
+1 mem_config_low_voltage_alarm_gpio
+1 mem_config_device1_led_gpio
+1 mem_config_device2_led_gpio
+1 mem_config_device3_led_gpio	
+1 mem_sensor_data_gpio
+1 mem_dpi_led_gpio
+1 mem_config_function_enable
+1 mem_config_sensor_angle
+1 mem_select_sensor_angle_gpio
+1 mem_select_adc_gpio
+0 mem_config_end
+//max length 1f								
+4 mem_btclk_sensor
+1 mem_wire_usb_interval
+1 mem_mouse_mode_flag
+1 mem_usb_addr
+3 mem_flash_base
+1 mem_24g_device_number
+1 mem_24g_enter_lpm_timer
+1 mem_mouse_1step_up_count
+1 mem_mouse_2step_up_count
+2 mem_24g_pairing_timer_count
+
+//adc struct
+0 mem_mouse_vdd_calculate_set
+2 mem_mouse_vdd_full_vol
+2 mem_mouse_vdd_empty_vol
+2 mem_mouse_vdd_low_vol
+2 mem_mouse_vdd_now_vol
+// sensor led 
+1 mem_mouse_sensor_timer_count
+1 mem_sensor_led_style
+
+//led struct
+1 mem_mouse_led_type
+1 mem_mouse_blink_count
+1 mem_mouse_struct_led_gpio
+2 mem_mouse_on_time
+2 mem_mouse_off_time
+2 mem_mouse_cb_ledon
+2 mem_mouse_cb_ledoff
+
+//three devices param
+1 mem_reconn_times
+1 mem_reconn_times_init
+0 mem_mouse_information_start
+1 mem_device_flag
+1 mem_device1_type
+6 mem_device1_addr
+16 mem_device1_link_key
+6 mem_device1_locall_addr
+
+1 mem_device2_type
+6 mem_device2_addr
+16 mem_device2_link_key
+6 mem_device2_locall_addr
+
+1 mem_device3_type
+6 mem_device3_addr
+16 mem_device3_link_key
+6 mem_device3_locall_addr
+2 mem_store_flag
+1 mem_mouse_dpi
+4 mem_mouse_24g_addr
+0 mem_mouse_information_end
+
+0 mem_mouse_dpi_seting
+1 mem_320x_dpi_1
+1 mem_320x_dpi_2
+1 mem_320x_dpi_3
+1 mem_320x_dpi_4
+
+1 mem_3212_dpi_1
+1 mem_3212_dpi_2
+1 mem_3212_dpi_3
+1 mem_3212_dpi_4
+
+1 mem_3610_dpi_1
+1 mem_3610_dpi_2
+1 mem_3610_dpi_3
+1 mem_3610_dpi_4
+
+1 mem_mouse_24g_enter_lpm_enable
+
+//-------------- patch variable ------------------
+2 mem_le_rx_window_inc
+1 mem_empty_count
+13 mem_rf_init_data_new
+
+1 mem_mouse_clear_sensor_data_flag
+1 mem_mouse_null_enter_hibernate_flag
+1 mem_mouse_null_enter_hibernate_timer
+1 mem_mouse_le_reconnect_flag
+
+33 mem_mouse_data_queue
+1 mem_mouse_data_queue_num
+
+2 mem_random_addr_increase_count
+1 mem_mouse_le_conn_param_reject
+1 mem_lpm_mult_init
+64 mem_mouse_le_uuid_sup
+
+1 mem_mouse_wheel_trigger
+1 mem_mouse_wheel_trigger_timer
+
+1 mem_mouse_enter_sniff_count
+1 mem_mouse_send_switch_req_timer
+
+27 mem_le_tx_buffer0_omemalloc
+27 mem_le_tx_buffer1_omemalloc
+27 mem_le_tx_buffer2_omemalloc
+27 mem_le_tx_buffer3_omemalloc
+
+
+646 mem_mouse_uuid_list
+1 mem_lmi_opcode_temp
+
+1 mem_mouse_adc_last_low_voltage_flag
+1 mem_mouse_init_sensor_reset_flag
+
+1 mem_bt_rcvd_switch_req_accept
+1 mem_bt_send_max_slot_req_accept_after_switch
+1 mem_bt_send_lmp_setup_complete
+
+1 mem_l2cap_rcv
+1 mem_mouse_bt_boot_mode
+5 mem_mouse_bt_boot_data
+
+1 mem_mouse_bt_send_first_package_timer
+1 mem_mouse_bt_send_first_package_flag
+
+1 mem_mouse_asm_flag
+2 mem_mouse_x_pre
+2 mem_mouse_y_pre
+
+19 mem_le_adv_swift_pair
+
+1 mem_bt_125hz_cnt
+
+1 mem_mouse_send_secutiry_request_timer
+1 mem_le_send_security_request_flag
+
+1 mem_power_on_flag
+
+
+ifdef MS_MATRIX
+1 mem_m_key
+2 mem_m_x
+2 mem_m_y
+1 mem_m_z
+1 mem_m_tz
+1 mem_24g_matrix_cnt
+endif
+
+)
+
+(
+//SPI GPIO 
+0x19 MOUSE_SPI1_CLK_GPIO
+0x1A MOUSE_SPI1_SDIO_GPIO
+0X1E MOUSE_SPI2_CLK_GPIO
+0X1F MOUSE_SPI2_SDIO_GPIO
+//combination
+0x01 MOUSE_L_BUTTON
+0X02 MOUSE_R_BUTTON
+0X04 MOUSE_M_BUTTON
+0X05 MOUSE_LM_BUTTON
+0X06 MOUSE_RM_BUTTON
+0X07 MOUSE_LMR_BUTTON
+//mouse default gpio
+0x1B MOUSE_DEFAULT_XA_GPIO
+0x1C MOUSE_DEFAULT_XB_GPIO
+
+//ui led blink
+0X00C8  LED_RECONNECT_BLINK //200
+0X0190  LED_DPI_BLINK //400
+0X03E8  LED_DPI_BLINK_FIXED    //1000
+0X03E8  LED_DISCOVERY_BLINK    //1000
+0XFF    LED_LONG_BLINK
+0x05	LED_SENSOR_BLINK_CNT
+//bt mode device number
+0x01 MODE_BT_DEVICE1
+0x02 MODE_BT_DEVICE2
+0x03 MODE_BT_DEVICE3
+0x02 MODE_24G_DEVICE
+//mouse  flag
+0X00 WRITE_REQ_ENABLE_FLAG
+0X01 LL_START_ENC_FLAG
+0X02 LL_PAIRING_SUCCESS_FLAG
+
+
+//mouse_function_flag
+0X04 MOUSE_FLAG_LEN
+//1byte
+0X00 MOUSE_SELECT_DEVICE_FLAG
+0X01 MOUSE_CPI_FLAG
+0X02 MOUSE_BT_CANNEL_RECONN_FLAG
+0X03 MOSUE_24G_PAIRING_FLAG
+0X04 MOUSE_LOW_VOLTAGE_FLAG
+0X05 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG
+0X06 MOUSE_LONG_BT_BUTTON_FLAG
+0X07 MOUSE_STORE_EEPROM_FLAG
+0x08 MOUSE_STATUE_UP_FLAG
+0X09 MOUSE_BT_DISCOVERY_BUTTON_LONG_DOWN_FLAG
+
+
+//3byte
+0X10 MOUSE_ENABLE_USB
+0X11 MOUSE_ENABLE_24G
+0X12 MOUSE_ENABLE_SPI2
+0X13 MOUSE_ENABLE_FLASH
+0X14 MOUSE_ENABLE_EEPROM
+0X15 MOUSE_ENABLE_STATUE_UP_THREE_LED
+0X16 MOUSE_ENABLE_STATUE_UP
+0X17 MOUSE_ENABLE_DPI_LED_BLINK
+//4byte
+0X18 MOUSE_ENABLE_BLE_RANDOM_ADDRE
+0X19 MOUSE_ENABLE_2K_EEPROM
+0X1A MOUSE_ENABLE_ADC
+0X1B MOUSE_ENABLE_INIT_DELAY
+0X1C MOUSE_ENABLE_DISCOVERY_SENSOR_LED
+0X1D MOUSE_ENABLE_AUTO_24G_PARING
+0X1E MOUSE_ENABLE_WAKEUP_FROM_POWER
+0X1F MOUSE_ENABLE_GPIO_CONTROL_ADC_SENSOR
+
+
+
+//mouse dpi level
+0x00 MOUSE_DPI_LEVEL1
+0x01 MOUSE_DPI_LEVEL2
+0x02 MOUSE_DPI_LEVEL3
+0x03 MOUSE_DPI_LEVEL4
+
+
+//mouse sensor angle
+0x00 MOUSE_6CLK_ANGLE
+0X01 MOUSE_9CLK_ANGLE
+0X02 MOUSE_12CLK_ANGLE
+0X03 MOUSE_3CLK_ANGLE
+
+
+//mem_config_function_enable
+0 ENABLE_BT_DISCOVERY_BY_GPIO_LED
+1 ENABLE_MODE_LED
+2 ENABLE_LOW_VOLTAGE_LED
+3 ENABLE_DEVICE_LED
+4 ENABLE_BT_BUTTON
+5 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON
+6 ENABLE_SELECT_DEVICE_BY_SWITCH
+
+0xFF GPIO_DISABLE
+
+
+//DPI button state 
+0x00 DPI_BUTTON_STATE_DOWN
+0x01 DPI_BUTTON_STATE_UP
+
+
+//eeprom address offect
+0X00 MOUSE_INFO_EEPROM_OFFECT
+0X5A MOUSE_DPI_EEPROM_OFFECT	//1byte
+0X5B MOUSE_G24_ADDR_EEPROM_OFFECT	//4bytes
+0X5F MOUSE_RANDOM_ADDR_COUNT_EEPROM_OFFSET	//2bytes
+0X61 MOUSE_DEVICE_MODE_EEPROM_OFFSET	//1byte	
+0X62 MOUSE_EEPROM_MODULE_INIT_FLAG		//eeprom_module_init_flag 2bytes
+
+
+// Sensor id number
+0x30 P32XX_ID1
+0x31 P3065_ID1
+0x3E P3610_ID1
+0x02 P3212_ID2
+0xD1 P3205_TJ3T_ID2
+0XD2 P3204_TJ3L_ID2
+0x54 PKA8_ID2
+0x70 P3065_XY_ID2
+
+
+//Sensor type
+0X00 P3205
+0X01 P3065
+0X02 KA8
+0X03 P3204
+0X04 P3212
+0X05 P3610
+0X06 P3065_XY
+
+
+//p3610 smart enable flag
+0X00 P3610_SMART_ENABLE
+0X01 P3610_SMART_DISABLE
+
+
+//SENSOR REG
+0x00 PAN_REG_PID_L
+0x01 PAN_REG_PID_H
+0x02 PAN_REG_MOTION_STAUS
+0x03 PAN_REG_DELTA_X
+0x04 PAN_REG_DELTA_Y
+0x05 PAN_REG_OPRATION_MODE
+0x06 PAN_REG_CONFIG
+0x07 PAN_REG_IMAGE_QUALITY
+0x08 PAN_REG_OPRATION_STATE
+0x09 PAN_REG_WRITE_PROTECT
+0x0A PAN_REG_SLEEP_1
+0x0B PAN_REG_ENTER_TIME
+0x0C PAN_REG_SLEEP_2
+0x0D PAN_REG_IMAGE_THRESHOLD
+0x0E PAN_REG_IMAGE_RECGNITION
+
+
+0x06 MOUSE_DPI_ADDRESS
+0x05 MOUSE_P3610_DPI_ADDRESS
+0x0D MOUSE_P3212_DPI_XADDRESS
+0x0E MOUSE_P3212_DPI_YADDRESS
+
+
+0x06 MOUSE_FPGA_RF_WORK_DEBUG_GPIO
+0x02 MOUSE_FPGA_DEBUG_GPIO
+
+)
+
+(
+0x01 ADV_FLAG_LIMITED_DISCOVERABLE
+0x04 ADV_FLAG_BREDR_NOT_SUPPORTED
+)
+
+(
+5 TEST_GPIO
+)
+
+(
+1 LE_LPM_DISABLE
+0 LE_LPM_ENABLE
+
+12 LE_INTERVAL_15MS
+9 LE_INTERVAL_11_25MS//11.25ms
+7 LE_INTERVAL_8_75MS//8.75ms
+6 LE_INTERVAL_7_5MS//7.5ms
+
+12 CLASSIC_INTERVAL_7_5MS
+14 CLASSIC_INTERVAL_8_75MS
+18 CLASSIC_INTERVAL_11_25MS
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_remote_car.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_remote_car.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_remote_car.format	(working copy)
@@ -0,0 +1,150 @@
+
+omemalloc(
+1 mem_remote_car_hard_soft_switch
+
+1 mem_remote_car_queue_each_size
+1 mem_remote_car_queue_length
+
+1 mem_remote_car_queue_curr_num
+1 mem_remote_car_queue_read_ptr
+1 mem_remote_car_queue_write_ptr
+90 mem_remote_car_queue_ele
+
+1 mem_remote_style_led_type
+1 mem_remote_style_blink_count
+1 mem_remote_style_struct_led_gpio
+2 mem_remote_style_on_time
+2 mem_remote_style_off_time
+2 mem_remote_style_cb_ledon
+2 mem_remote_style_cb_ledoff
+
+
+1 mem_remote_car_led_num
+8 mem_remote_car_led_map
+
+0 mem_remote_car_keyscan
+1 mem_remote_car_key_num
+2 mem_cb_remote_car_keyscan
+
+0 mem_remote_car_key_conf0
+1 mem_remote_car_key_conf0_pin
+0 mem_remote_car_key_conf1
+1 mem_remote_car_key_conf1_pin
+0 mem_remote_car_key_conf2
+1 mem_remote_car_key_conf2_pin
+0 mem_remote_car_key_conf3
+1 mem_remote_car_key_conf3_pin
+0 mem_remote_car_key_conf4
+1 mem_remote_car_key_conf4_pin
+0 mem_remote_car_key_conf5
+1 mem_remote_car_key_conf5_pin
+0 mem_remote_car_key_conf6
+1 mem_remote_car_key_conf6_pin
+
+
+//rocker
+1 mem_rocker_negative_flag
+1 mem_rocker_work_status
+2 mem_current_vdd_value_default_mid_x
+2 mem_current_vdd_value_default_mid_y
+2 mem_current_vdd_value_default_mid_temp
+2 mem_current_vdd_default_range
+2 mem_rocker_last_status
+0 mem_rocker_status
+1 mem_rocker_x_status
+1 mem_rocker_y_status
+
+0 mem_remote_car_config_param
+1 mem_remote_car_config_setting_flag
+1 mem_remote_car_config_key_map
+1 mem_remote_car_config_layout
+1 mem_remote_car_config_connect_led_gpio
+1 mem_remote_car_config_check_way
+1 mem_remote_car_config_soft_switch_enable
+1 mem_remote_car_config_soft_switch_gpio
+1 mem_remote_car_config_timeout_shutdown_enable
+
+0 mem_remote_car_24g_motor_packet
+1 mem_remote_car_24g_motor_packet_lenght
+2 mem_remote_car_24g_motor_send_packet_head
+1 mem_remote_car_24g_motor_send_cmd
+2 mem_remote_car_24g_motor_send_length
+0 mem_remote_car_24g_motor_send_payload
+2 mem_remote_car_24g_motor1_payload
+2 mem_remote_car_24g_motor2_payload
+2 mem_remote_car_24g_motor3_payload
+1 mem_remote_car_24g_motor_send_checksum
+
+0 mem_remote_car_24g_fire_packet
+1 mem_remote_car_24g_fire_packet_lenght
+2 mem_remote_car_24g_fire_send_packet_head
+1 mem_remote_car_24g_fire_send_cmd
+2 mem_remote_car_24g_fire_send_length
+2 mem_remote_car_24g_fire_send_payload
+1 mem_remote_car_24g_fire_send_checksum
+
+15 mem_remote_car_24g_tx_temp
+
+2 mem_remote_car_no_data_timeout
+2 mem_remote_car_no_data_timer
+
+0 mem_remote_car_soft_power
+1 mem_remote_car_power_state
+1 mem_remote_car_power_timer
+1 mem_remote_car_power_off_timeout
+1 mem_remote_car_power_starting_timeout
+2 mem_remote_car_power_off_cb
+2 mem_remote_car_power_starting_cb
+2 mem_remote_car_power_standby_cb
+
+1 mem_remote_key_status
+1 mem_remote_car_24g_status
+
+1 mem_remote_car_24g_auto_work_step
+1 mem_remote_car_24g_pair_success_flag
+1 mem_remote_car_24g_enter_lpm_enable
+1 mem_remote_car_empty_packet
+400 mem_24g_RC_head_ptr
+)
+
+
+(
+// eeprom config
+0xb0 REMOTE_PARAM_EEPROM_CONFIG_ADDR
+
+)
+
+
+(
+0x00 CONTROL_F_B_MOTOR
+0x02 CONTROL_L_R_MOTOR
+)
+
+(
+0x00 KEY_MAP_TEN
+0x01 KEY_MAP_LR
+)
+
+(
+0x00 CONTROL_F_B_TEN
+0x02 CONTROL_L_R_TEN
+0x03 CONTROL_L_R_LR
+)
+
+(
+0 KEY_CHECK
+1 ROCKER_CHECK
+)
+
+(
+1 MOTOR_POSITIVE
+2 MOTOR_NEGATIVE
+)
+
+(
+0 ROCKER_MIDDLE_KEY
+1 ROCKER_POSITIVE_KEY
+2 ROCKER_NEGATIVE_KEY
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_shutter.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_shutter.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_shutter.format	(working copy)
@@ -0,0 +1,252 @@
+
+
+omemalloc(
+
+////////////////////////////////////
+//shutter common config
+1 mem_shutter_bluetooth_type
+////////////////////////////////////
+
+//shutter config name by GPIO
+1 mem_shutter_config_enable
+2 mem_shutter_config_otp_base_address
+1 mem_shutter_config_size
+1 mem_shutter_config_select_gpio1
+1 mem_shutter_config_select_gpio2
+1 mem_shutter_config_select_gpio3
+
+2 mem_shutter_config_user_otp_address
+2 mem_shutter_config_eeprom_offset_addr
+
+////////
+2 mem_shutter_config_eeprom_start_flag
+1 mem_shutter_config_user_size
+///////
+1 mem_shutter_config_label
+2 mem_shutter_config_otp_addr
+///////////////////////////////////
+
+////////////////////////////////////
+//classic shutter config
+1 mem_classic_shutter_cable_unplug_conut
+1 mem_classic_shutter_hid_disconn_count
+2 mem_classic_shutter_random_mac_offset_addr
+////////////////////////////////////
+
+////////////////////////////////////
+//ble shutter config
+1 mem_ble_shutter_enable_notify
+2 mem_ble_shutter_reconn_dav_interval
+2 mem_ble_shutter_discovery_adv_interval
+2 mem_ble_shutter_reconn_timeout
+2 mem_ble_shutter_reconn_timer
+2 mem_ble_shutter_reconn_blink_on_time
+2 mem_ble_shutter_reconn_blink_off_time
+2 mem_ble_shutter_discovery_blink_on_time
+2 mem_ble_shutter_discovery_blink_off_time
+
+2 mem_ble_shutter_interval_min
+2 mem_ble_shutter_interval_max
+2 mem_ble_shutter_latency
+2 mem_ble_shutter_timeout
+
+2 mem_ble_shutter_interval_min_new
+2 mem_ble_shutter_interval_max_new
+2 mem_ble_shutter_latency_new
+2 mem_ble_shutter_timeout_new
+
+//////////////////shutter sleep timeout//////////////////
+2 mem_classic_shutter_discovery_timeout
+2 mem_classic_shutter_connect_timeout
+2 mem_ble_shutter_discovery_timeout
+2 mem_ble_shutter_connect_timeout
+2 mem_shutter_sleep_timeout
+2 mem_shutter_sleep_timer
+
+/////////////////////////////////////////////////////////////////
+1 mem_shutter_hard_soft_switch_case
+1 mem_shutter_soft_switch_button_gpio
+1 mem_shutter_soft_switch_power_state
+1 mem_shutter_soft_switch_poweron_time
+1 mem_shutter_soft_switch_poweroff_time
+2 mem_shutter_soft_switch_poweron_callback_function
+2 mem_shutter_soft_switch_poweroff_callback_function
+
+
+0 mem_shutter_keyscan
+1 mem_shutter_key_num
+2 mem_cb_shutter_keycan
+1 mem_shutter_key_conf0
+1 mem_shutter_key_conf1
+1 mem_shutter_key_conf2
+1 mem_shutter_key_conf3
+1 mem_shutter_key_conf4
+1 mem_shutter_key_conf5
+1 mem_shutter_key_conf6
+1 mem_shutter_key_conf7
+
+
+5 mem_key0_press
+5 mem_key1_press
+5 mem_key2_press
+5 mem_key3_press
+5 mem_key4_press
+5 mem_key5_press
+5 mem_key6_press
+5 mem_key7_press
+
+5 mem_key0_release	
+5 mem_key1_release
+5 mem_key2_release
+5 mem_key3_release
+5 mem_key4_release
+5 mem_key5_release
+5 mem_key6_release
+5 mem_key7_release
+
+5 mem_ble_data_buffer1
+5 mem_ble_data_buffer2
+5 mem_ble_data_buffer3
+5 mem_ble_data_buffer4
+5 mem_ble_data_buffer5
+5 mem_ble_data_buffer6
+5 mem_ble_data_buffer7
+5 mem_ble_data_buffer8
+50 mem_ble_data_buffer9_58
+
+5 mem_classic_data_buffer
+
+5 mem_classic_data_buffer1
+5 mem_classic_data_buffer2
+5 mem_classic_data_buffer3
+5 mem_classic_data_buffer4
+5 mem_classic_data_buffer5
+5 mem_classic_data_buffer6
+5 mem_classic_data_buffer7
+5 mem_classic_data_buffer8
+50 mem_classic_data_buffer9_58
+
+1 mem_queue_each_size
+1 mem_queue_length
+1 mem_queue_curr_num
+1 mem_queue_read_ptr
+1 mem_queue_write_ptr
+32 mem_queue_ele
+
+
+170 mem_shutter_nv_data
+
+0 mem_shutter_led_struct_app_led
+1 mem_shutter_led_struct_app_led_type
+1 mem_shutter_led_struct_app_led_blink_count
+1 mem_shutter_led_struct_app_led_gpio
+2 mem_shutter_led_struct_app_led_on_time
+2 mem_shutter_led_struct_app_led_off_time
+2 mem_shutter_led_struct_app_led_on_callback
+2 mem_shutter_led_struct_app_led_off_callback
+
+0 mem_shutter_power_off_led_style
+1 mem_shutter_power_off_led_style_type
+1 mem_shutter_power_off_led_style_blink_count
+1 mem_shutter_power_off_led_style_gpio
+2 mem_shutter_power_off_led_style_on_time
+2 mem_shutter_power_off_led_style_off_time
+2 mem_shutter_power_off_led_style_on_callback
+2 mem_shutter_power_off_led_style_off_callback
+
+1 mem_shutter_soft_swtich_botton_down
+11 mem_shutter_soft_swtich_led_struct_temp
+1 mem_shutter_power_off_timeout
+1 mem_shutter_power_off_timer
+
+)
+
+
+
+
+(
+0 BLE_SHUTTER
+1 CLASSIC_SHUTTER
+)
+
+(
+0x0000 NVRAM_EEPROM_OFFSET
+)
+
+(
+0x1b3a SHUTTER_EEPROM_CONFIG_CRC
+)
+
+(
+5 MAX_QUEUE_NUM
+5 SHUTTER_BLE_DATA_BUFFER
+5 SHUTTER_CLASSIC_DATA_BUFFER
+)
+
+
+(
+0x13	GATT_CONSUMER_NOTIFY_HANDLE
+0x14	GATT_CONSUMER_WRITE_HANDLE
+0x17	GATT_KEYBOARD_NOTIFY_HANDLE
+0x18	GATT_KEYBOARD_WRITE_HANDLE
+)
+
+(
+//20ms
+0x0020	FAST_ADV_INTERVAL_VALUE
+//100ms
+0x00a0	SLOW_ADV_INTERVAL_VALUE
+)
+
+
+(
+0 ATT_BIT_NOTIFICATION
+1 ATT_BIT_INDICATION
+)
+///////////////////////////////////////////////////////////////////////////////////////
+
+(
+0 HARD_SWITCH
+1 SOFT_SWITCH
+)
+
+
+(
+1  FLAG_SHUTTER_HID_DISCONN_TIMEOUT
+5 FLAG_SHUTTER_CABLE_UNPLUG_TIMEOUT
+)
+
+(//Data Rom Buffer Addr
+382		BLE_GATT_LIST_SIZE
+487		BT_SDP_LIST_SIZE
+40		BLE_KEY_VALUE_LIST_SIZE
+40		BT_KEY_VALUE_LIST_SIZE
+0x913A	BLE_SHUTTER_GATT_LIST
+0x92B8	CLASSIC_SHUTTER_SDP_LIST
+0x949F	BLE_SHUTTER_KEY_VALUE_LIST
+0x94C7	CLASSIC_SHUTTER_KEY_VALUE_LIST
+)
+
+
+(//soft switch power state
+0		SS_STATE_POWER_UP
+1		SS_STATE_POWER_ON
+2		SS_STATE_POWER_OFF
+)
+
+(
+0		SS_POWER_STATE_OFFSET
+1		SS_POWER_ON_TIME
+2		SS_POWER_OFF_TIME
+3		SS_POWER_ON_CB
+5		SS_POWER_OFF_CB
+
+)
+
+(
+
+0x4FFE SIM_IIC_SCL_GPIO_NUM
+0x4FFF SIM_IIC_SDA_GPIO_NUM
+
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_usb.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_usb.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/app_usb.format	(working copy)
@@ -0,0 +1,203 @@
+
+omemalloc(
+
+)
+
+//class type
+(
+0x00 STANDARD_REQ
+0x01 CLASS_REQ
+0x02 MANUFACTURER_REQ
+)
+//Standard Request Codes
+(
+0x00 GET_STATUS                // Code for Get Status
+0x01 CLEAR_FEATURE             // Code for Clear Feature
+0x03 SET_FEATURE              // Code for Set Feature
+0x05 SET_ADDRESS              // Code for Set Address
+0x06 GET_DESCRIPTOR           // Code for Get Descriptor
+0x07 SET_DESCRIPTOR           // Code for Set Descriptor(not used)
+0x08 GET_CONFIGURATION        // Code for Get Configuration
+0x09 SET_CONFIGURATION        // Code for Set Configuration
+0x0A GET_INTERFACE            // Code for Get Interface
+0x0B SET_INTERFACE            // Code for Set Interface
+0x0C SYNCH_FRAME              // Code for Synch Frame(not used)
+)
+//Standard Descriptor Types
+(
+0x01 DSC_DEVICE               // Device Descriptor
+0x02 DSC_CONFIG               // Configuration Descriptor
+0x03 DSC_STRING               // String Descriptor
+0x04 DSC_INTERFACE            // Interface Descriptor
+0x05 DSC_ENDPOINT             // Endpoint Descriptor
+)
+//HID Descriptor Types
+(
+0x21 DSC_HID			      // HID Class Descriptor
+0x22 DSC_HID_REPORT			  // HID Report Descriptor
+)
+//Define bmRequestType bitmaps
+(
+0x80 IN_DEVICE                // Request made to device,
+                              // direction is IN
+0x00 OUT_DEVICE               // Request made to device,
+                              // direction is OUT
+0x81 IN_INTERFACE             // Request made to interface,
+                              // direction is IN
+0x01 OUT_INTERFACE            // Request made to interface,
+                              // direction is OUT
+0x82 IN_ENDPOINT              // Request made to endpoint,
+                              // direction is IN
+0x02 OUT_ENDPOINT             // Request made to endpoint,
+)
+//HID Request Codes
+(
+0x01 GET_REPORT 		       // Code for Get Report
+0x02 GET_IDLE				   // Code for Get Idle
+0x03 GET_PROTOCOL			   // Code for Get Protocol
+0x09 SET_REPORT				   // Code for Set Report
+0x0A SET_IDLE				   // Code for Set Idle
+0x0B SET_PROTOCOL			   // Code for Set Protocol
+0xF2 HID_REPORT_ID           
+64 EP0_PACKET_SIZE         
+6 EP1_PACKET_SIZE         
+16 HID_REPORT_SIZE         
+0x001B HID_REPORT_DESCRIPTOR_SIZE    
+)
+//math cordic
+(
+0 TYPE_SIN		
+1 TYPE_ATAN	
+2 TYPE_MULT	
+3 TYPE_DIV		
+4 TYPE_ASIN	
+5 TYPE_SQRT	
+6 TYPE_COS		
+7 TYPE_TAN		 
+)
+   
+(
+0 DFIFO0_IN_EMPTY
+1 DFIFO1_IN_EMPTY
+2 DFIFO2_IN_EMPTY
+3 DFIFO3_IN_EMPTY
+4 DFIFO0_OUT_EMPTY
+5 DFIFO1_OUT_EMPTY
+6 DFIFO2_OUT_EMPTY
+7 DFIFO3_OUT_EMPTY
+)
+
+(
+4 USB_STATUS_SETUP
+6 USB_STATUS_NAK
+)
+
+(
+1 USB_GOT_REPORT_REQ
+2 USB_CONNECTED
+3 USB_SLEEP
+4 USB_RESUME
+5 USB_SETIDLE_1
+)
+
+(
+0x10 USB_EP1_KB
+0x20 USB_EP2_MS
+0x21 USB_EP2_MULTIKEY
+0x01 MAC_BOOT_MODE
+0x02 R_KEY
+0x03 LR_KEY
+)
+
+(
+0x8ffa	HID_KBDATA_ADDR
+0x903a	HID_MSDATA_ADDR
+0x90fe	HID_CONFDATA_ADDR
+)
+
+
+(
+0x01ba PC_GET_REPORT
+0x02ba PC_SET_REPORT
+0x0200 PC_SET_REPORT_bValue
+0x0000 PC_SET_REPORT_wIndex
+0x0001 PC_SET_REPORT_bLength
+0xba PC_REPORT_ID
+
+0x01 PC_GET_DATA
+0x00 PC_GET_NONDATA
+)
+
+(
+//--------------------------------------------------
+// Define device states
+0x00 DEV_ATTACHED	// Device is in Attached State
+0x01 DEV_POWERED	// Device is in Powered State
+0x02 DEV_DEFAULT		// Device is in Default State
+0x03 DEV_ADDRESS	// Device is in Addressed State
+0x04 DEV_CONFIGURED	// Device is in Configured State
+0x05 DEV_SUSPENDED	// Device is in Suspended State
+)
+
+(
+// Define wIndex bitmaps
+0x81 IN_EP1                    // Index values used by Set and Clear
+0x01 OUT_EP1                   // commands for Endpoint_Halt
+0x82 IN_EP2              
+0x02 OUT_EP2             
+0x83 IN_EP3              
+0x03 OUT_EP3             
+)
+
+(
+0 EP0_STALL
+1 EP1_IN_STALL
+2 EP1_OUT_STALL
+3 EP2_IN_STALL
+4 EP2_OUT_STALL
+5 EP3_IN_STALL
+6 EP3_OUT_STALL
+)
+
+(
+// Define wValue bitmaps for Standard Feature Selectors
+0x00 ENDPOINT_HALT             // Endpoint_Halt feature selector
+0x01 DEVICE_REMOTE_WAKEUP      // Remote wakeup feature(not used)
+0x00 BOOT_PROTOCOL
+0x01 REPORT_PROTOCOL
+0x01 USB_MAX_NUM_CFG
+)
+
+
+(
+0x1A0 AT_baud_115200
+0x4e2 AT_baud_38400
+0x1388 AT_baud_9600
+)
+
+(
+0x4e00 mem_module_rx_buf//0x400
+0x4fff mem_module_rx_buf_end
+0x1c00 mem_module_tx_buf
+0x1fff mem_module_tx_buf_end
+)
+
+(
+0x01 BIND_ACKPAYLOAD
+0x02 USER_ACKPAYLOAD
+
+0xcf CMD_OTA
+0xc0 CMD_OTA_START
+0xc1 CMD_OTA_DATA
+0xc2 CMD_OTA_EXIT
+0x55 OTA_STA_SUCCESS
+0xaa OTA_STA_FAIL
+)
+
+(
+0 TIMER_NAK
+640 TIMER_NAK_DELAY
+15 TIMER_WAKEUP
+5000 TIMER_WAKEUP_DELAY
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/bt.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/bt.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/bt.format	(working copy)
@@ -0,0 +1,1027 @@
+
+	width = 32
+	const length = 12000
+
+	/* ========= memory ============== */
+memalloc(
+/* 00-0f most frequently used area  */
+1 mem_le_adv_transmit
+1 mem_le_adv_waitcnt
+1 mem_le_adv_rcv
+1 mem_le_req_rcv
+1 mem_le_scanrsp_rcv
+1 mem_le_conn_rcv
+
+1 mem_inquiryscan_waitcnt
+1 mem_inquiryscan_rcvcnt
+1 mem_pagescan_waitcnt
+1 mem_pagescan_rcvcnt
+1 mem_pagescan_rcvfhscnt
+1 mem_slave_rcvcnt
+1 mem_page_transmit
+1 mem_page_rcv
+1 mem_page_rcv_fhs
+1 mem_master_rcvcnt
+
+/* 10-1f debug area */
+1 mem_fhs_wait_counter
+1 mem_newconnto_counter
+1 mem_inquiry_transmit
+1 mem_inquiry_rcv
+1 mem_fw_ver
+1 mem_current_context
+1 mem_le_ch_mapped
+1 mem_last_freq
+1 mem_rssi
+1 mem_rx_type
+2 mem_rx_hec_err
+2 mem_rx_crc_err
+2 mem_context_ptr
+8 mem_display
+8 mem_bcd
+
+		/* context swappable area */
+1 mem_state
+1 mem_mode
+2 mem_tsniff
+4 mem_sniff_anchor
+6 mem_clk_offset
+2 mem_rx_window
+3 mem_plap
+1 mem_puap
+2 mem_pnap
+1 mem_conn_handle
+1 mem_arq
+1 mem_lmp_to_send
+1 mem_lmi_opcode
+1 mem_lmo_reason
+1 mem_op
+1 mem_state_map
+4 mem_supervision_timer
+2 mem_supervision_to
+1 mem_name_offset
+1 mem_key_size
+1 mem_conn_sm
+12 mem_aco
+16 mem_kc
+1 mem_conn_timer
+1 mem_sniff_attempt
+1 mem_sniff_timeout
+2 mem_dsniff
+1 mem_amaddr
+1 mem_lmo_opcode1
+1 mem_lmi_opcode1
+1 mem_lmo_reason1
+1 mem_lmo_tid1
+1 mem_lmo_opcode2
+1 mem_lmi_opcode2
+1 mem_lmo_reason2
+1 mem_lmo_tid2
+
+3 mem_hci_version
+2 mem_acl_pktlen
+1 mem_sco_pktlen
+2 mem_acl_pktcnt
+2 mem_sco_pktcnt
+
+1 mem_current_sniff_attempt
+1 mem_current_sniff_timeout
+1 mem_sniff_timeout_temp
+1 mem_nfreq_index_inq
+1 mem_nfreq_index_page
+1 mem_ninqy_index
+1 mem_fhs_misc
+
+
+
+/* lpo related */
+4 mem_subsniff_instant
+1 mem_subsniff_rate
+2 mem_subsniff_tcmax
+1 mem_subsniff_tsniff
+1 mem_lpm_adjust
+6 mem_sync_clke
+1 mem_lpm_current_mult
+4 mem_gpio_wakeup_low
+4 mem_gpio_wakeup_high
+	
+
+/* sco & esco */
+1 mem_air_mode
+1 mem_sco_asso_handle
+2 mem_sco_handle
+1 mem_esco_desco
+1 mem_esco_type
+1 mem_neogotiation_state
+1 mem_saved_amaddr
+1 mem_esco_arq
+1 mem_esco_saved_arq
+30 mem_sco_obuf
+30 mem_sco_ibuf
+1 mem_sco_poll
+
+
+
+//page
+1 mem_npage_index
+1 mem_page_mode
+4 mem_page_clk
+
+
+/* test related */
+2 mem_tst_pktcnt_sync
+2 mem_tst_pktcnt_hec
+2 mem_tst_pktcnt_crc
+2 mem_tst_pktcnt_dmh
+3 mem_tmp_buffer_head
+80 mem_tmp_buffer
+
+
+1 mem_tester_emulate
+0 mem_temp_payload
+1 test_mode_scenario
+1 test_mode_hopping_mode
+1 test_mode_tx_freq
+1 test_mode_rx_freq
+1 test_mode_power_mode
+1 test_mode_poll_period
+1 test_mode_packet_type
+2 test_mode_data_length
+1 mem_test_mode_old_debug_config
+1 mem_tester_cnt
+
+
+/*temp mem*/
+1 mem_temp_am_addr
+1 mem_temp_arq
+
+//
+2 mem_len
+4 mem_clkn_bt
+4 mem_clke_bt
+4 mem_dpll_clkn
+1 mem_connection_options
+
+1 mem_nameres_cnt
+2 mem_txptr
+2 mem_slot_offset
+
+//extm
+1 extm_fhs_misc
+1 extm_newconn_am_addr
+3 extm_class
+3 extm_lap
+1 extm_uap
+3 extm_nap
+
+
+//debug
+1 mem_debug_config
+1 mem_lch_code
+1 mem_fhs_am_addr
+2 mem_dpll_error
+1 mem_select_list_item
+0 mem_temp_reconn_record
+1 mem_record_bt_mode
+6 mem_temp_lap
+2 mem_list_item_ptr
+
+100 mem_eir
+)
+
+
+xmemalloc(
+/* patch enable 0x4000-0x403f  */
+
+1 mem_patch00
+1 mem_patch01
+1 mem_patch02
+1 mem_patch03
+1 mem_patch04
+1 mem_patch05
+1 mem_patch06
+1 mem_patch07
+1 mem_patch08
+1 mem_patch09
+1 mem_patch0a
+1 mem_patch0b
+1 mem_patch0c
+1 mem_patch0d
+1 mem_patch0e
+1 mem_patch0f
+1 mem_patch10
+1 mem_patch11
+1 mem_patch12
+1 mem_patch13
+1 mem_patch14
+1 mem_patch15
+1 mem_patch16
+1 mem_patch17
+1 mem_patch18
+1 mem_patch19
+1 mem_patch1a
+1 mem_patch1b
+1 mem_patch1c
+1 mem_patch1d
+1 mem_patch1e
+1 mem_patch1f
+1 mem_patch20
+1 mem_patch21
+1 mem_patch22
+1 mem_patch23
+1 mem_patch24
+1 mem_patch25
+1 mem_patch26
+1 mem_patch27
+1 mem_patch28
+1 mem_patch29
+1 mem_patch2a
+1 mem_patch2b
+1 mem_patch2c
+1 mem_patch2d
+1 mem_patch2e
+1 mem_patch2f
+1 mem_patch30
+1 mem_patch31
+1 mem_patch32
+1 mem_patch33
+1 mem_patch34
+1 mem_patch35
+1 mem_patch36
+1 mem_patch37
+1 mem_patch38
+1 mem_patch39
+1 mem_patch3a
+1 mem_patch3b
+1 mem_patch3c
+1 mem_patch3d
+1 mem_patch3e
+1 mem_patch3f
+
+	/* 3 device contexts  */
+80 mem_context
+1 mem_current_amaddr
+1 mem_lpm_mode
+1 mem_device_option
+1 mem_scan_mode
+4 mem_last_clkn
+
+	/* parameters */
+8 mem_features
+3 mem_lap
+1 mem_uap
+2 mem_nap
+1 mem_npage
+3 mem_glap
+3 mem_class
+2 mem_iscan_window
+2 mem_iscan_interval
+2 mem_pscan_window
+2 mem_pscan_interval
+2 mem_page_interval
+2 mem_page_window
+2 mem_page_to
+2 mem_inq_window
+1 mem_fcomp_mul
+1 mem_fcomp_div
+2 mem_rx_window_init
+2 mem_rx_window_sniff
+2 mem_rf_init_ptr
+
+	/* connection related */
+1 mem_last_type
+1 mem_last_type_esco
+1 mem_last_type_saved
+2 mem_retransmission_cnt
+4 mem_next_btclk
+
+1 mem_rf_rccal
+1 mem_handle_num
+1 mem_max_slot
+1 mem_eir_enable
+
+/* AFH related */
+4 mem_afh_instant
+2 mem_afh_error_total
+1 mem_afh_cfg
+1 mem_afh_new_mod
+5 mem_afh_map_lo
+5 mem_afh_map_hi
+1 mem_afh_used
+2 mem_afh_index
+11 mem_afh_map_new
+80 mem_afh_map
+4 mem_afh_timer
+10 mem_afh_classify_channel_map
+
+
+	/* lpm related */
+2 mem_chip_functions
+2 mem_lpm_wake_lock
+2 mem_lpm_interval
+1 mem_lpm_overhead
+1 mem_lpm_hibernate_switch
+1 mem_esco_addr
+1 mem_sniff_unint_lost
+1 mem_ptt
+4 mem_sleep_counter   //should be 0x41fc in REVC
+4 mem_sleep_counter_all
+6 mem_sleep_clkn
+3 mem_sniff_rcv
+3 mem_sniff_lost
+3 mem_clks_per_lpo
+
+1 mem_lpm_mult
+1 mem_lpm_mult_timeout
+1 mem_lpm_mult_cnt
+
+/* 8139-813b lpm_ctrl[31:12] */
+3 mem_lpm_config				
+
+1 mem_lpm_xtalcnt
+1 mem_lpm_buckcnt
+1 mem_lpm_ldocnt
+1 mem_lpm_isogate
+1 mem_lpm_isogate_final
+16 mem_saved_gpio	// should be 0x421e in REVC
+3 mem_saved_gsel
+8 mem_saved_mark
+1 mem_saved_spidctrl
+2 mem_patch_ptr
+2 mem_patch_len
+
+32 mem_timers
+
+/*LINK KEY*/
+1 mem_link_key_exists
+16 mem_link_key
+
+
+/* HCI */
+1 mem_hci_cmd
+1 mem_hci_conn_handle
+3 mem_hci_plap
+1 mem_hci_puap
+2 mem_hci_pnap
+
+/*Peripherals*/
+1 mem_uartd_rxitems_got_data
+1 mem_uartd_rxitems_threshold
+2 mem_uartd_rx_timeout
+
+1 mem_loadcode_times
+
+1 mem_tx_lch
+2 mem_tx_len
+
+1 mem_tx_power
+
+1 mem_context_number
+
+1 mem_250k_freq_enable
+
+ifdef DEBUG_RF_INIT
+1 mem_rf_init_data
+endif
+)
+
+(//bluetooth tx power
+0 TX_POWER_0DB
+1 TX_POWER_3DB
+2 TX_POWER_5DB
+3 TX_POWER_f3DB
+4 TX_POWER_f5DB
+
+0x20 TX_POWER_PAIR
+)
+
+
+ifdef RAM_VERSION
+0x4b17 rom_lpm_sleep
+0x4b1d rom_lpm_enter_sleep
+0x4b16 rom_lpm_write_ctrl
+0x6b1a rom_otpd_read_data
+0x6ada rom_otp_write
+else
+0x3b17 rom_lpm_sleep
+0x59e0 rom_save_ucode
+
+0x4219 rom_mem_lpm_xtalcnt
+0x423b rom_mem_patch_ptr
+0x423d rom_mem_patch_len
+
+0x5b1a rom_otpd_read_data
+0x5ada rom_otp_write
+endif
+	/* context */
+(
+0x01 coffset_mode
+0x02 coffset_tsniff
+0x04 coffset_sniff_anchor
+0x08 coffset_clk_offset
+0x0e coffset_rx_window
+0x10 coffset_plap
+0x16 coffset_conn_handle
+0x17 coffset_arq
+	/* 3.0 only */
+0x18 coffset_lmp_to_send
+0x1b coffset_op
+0x1c coffset_state_map
+	/* le only */
+0x18 coffset_le_ch
+0x19 coffset_le_hop
+0x1a coffset_le_event_cnt
+
+80 context_size
+1 context_num
+)
+
+(
+0 lpm_flag_wake
+1 lpm_flag_loadcode
+)
+
+/* ========= parameters ============== */
+(
+0x0050 param_newconn_arq
+0x0007 param_esco_addr
+0x0010 param_conn_handle
+0x01f0 param_conn_handle_comp
+0x0020 param_newconnto
+0x0008 param_pagerespto
+0x0a00 param_snooze_setup_orig
+0x5353 param_snooze_ahead_orig
+0x00ff param_ninquiry
+0x2000 param_page_to
+0x0005 param_max_slot
+0x0010 param_sco_poll
+
+/* 24Mhz clock setting */
+ifdef CLK24M
+0x1c86 param_tx_setup
+0x0c00 param_rf_setup
+0x0c00 param_conn_access 
+0x1a00 param_rx_setup
+0x0776 param_clke_cal
+0x0a00 param_pll_setup
+4000 param_dpll_start_delay
+else
+/* 12Mhz clock setting */
+0x0e43 param_tx_setup
+0x0600 param_rf_setup
+0x0600 param_conn_access 
+0x03bb param_clke_cal
+0x0500 param_pll_setup		// 120 is minimum
+0x0d00 param_rx_setup	// 114us before sync
+2000 param_dpll_start_delay
+endif
+
+110 param_lpm_fix
+10 param_lpo_extra
+200 param_lpm_adjmax
+
+ifdef SIM
+20 param_hibernate_clks
+3 param_chgpump_delay
+else
+-1 param_hibernate_clks
+3000 param_chgpump_delay
+endif
+
+3 param_featrue_ssp
+0x0101 param_lmpext_ssp_enable
+339 param_acl_pktlen
+30   param_sco_pktlen
+1     param_acl_pktcnt		/*buffer acl pkt cnt*/
+7     param_sco_pktcnt
+
+
+0x8fffff param_features0
+0x9d83fe param_features1  // not support afh
+0x8359     param_features2
+0x000033 param_unap
+0x001177 param_lap
+0x9e8b33 param_glap
+0x002540 param_class//0x180208 //0x002580//402500//240404
+0x12e904 param_hci_version
+0x000a04 param_lmp_version//0x0a04
+0x000a06 param_lmp_version0
+0x12e9 param_lmp_subversion
+0x0012 param_tisw
+0x0012 param_tpsw
+0x1000 param_tisi
+0x0800 param_tpsi
+0x0020 param_page_window
+0x0020 param_inq_window
+0x1c80 param_supervision_to
+39 param_fcomp_div
+2 param_fcomp_mul
+6     param_name_len
+0x535442 param_name
+0x344950 param_name1
+
+
+)
+
+/* ======= packet types  ========= */
+(
+0x0      type_null    
+0x1      type_poll   
+0x2      type_fhs    
+0x3      type_dm1    
+0x4      type_dh1    
+0x5      type_hv1    
+0x6      type_hv2    
+0x7      type_hv3    
+0x8      type_3dh1     
+0x9      type_aux1   
+0xa      type_dm3    
+0xb      type_dh3    
+0xe      type_dm5    
+0xf      type_dh5    
+0x10     type_id
+0x11     type_shutdown
+0x13     type_lmp
+)
+
+/* ========== flag[6] =============== */
+(
+0        always        /* always 1 */
+1        true          /* set/rstn by verify,compare,icompare (true) */
+2        positive      /* set/rstn by all alu operations (opcode = 0x03,0x13,0x0f,0x1f), if alu output >= 0 */
+3        timeout       /* read only, the timeout from timers */
+5        zero          /* set/rstn by all alu operations (opcode = 0x03,0x13,0x0f,0x1f), if alu output == 0 */
+6        crc_failed    /* level, cleared by hop_start */
+7        enable_white  /* outside mux decide whether to load bt_clk or response_X */
+8        enable_parity /* level */
+9        enable_crc    /* level */
+10       enable_hec    /* level */
+11       decode_fec1   /* level */
+12       decode_fec2   /* level */
+13       decode_fec0   /* level */
+14       encrypt       /* level */
+15       crc16       /* for caculate ccitt crc16 */
+16       swfine	/* =0 stop_watch count based on oneslot =1 on 1 clock */
+20       rqst_freq    /* pulse, to start calculating frequency */
+21       recalc        /* pulse, to recalculate the fhs_parity */
+22       init_encrypt  /* pulse, issued to initialize encrption */
+23       mhalfbnd    /* half slot boundary of clke_rt, or when clke_bt[0] toggles */
+24       sync          /* sync found as a result of correlation,set/rstn by correlate opcode */
+25       user10    /* user10 */
+26       kc_p_activate  /* pulse to recalc the kc_p */
+27       encode_fec1   /* level */
+28       encode_fec2   /* level */
+29       encode_fec0   /* level */
+30       packet_end    /* pulse */
+32       is_tx         /* level */
+33       is_rx         /* level */
+34       halfslot     /* pulse, read only, when clkn_bt[0] toggles */
+35       oneslot      /* pulse, read only, when clkn_bt[1] toggles */
+36       mslotbnd     /* pulse, read only, when clke_bt[1] toggles */
+37       expire       /* level, read only, when selected clock source exceed timeup value */
+38       meet         /* level, read only, when selected clock source meet timeup value */
+39       tx_clear     /* level, read only, indicate tx pipe is cleared */
+40       user         /* user0 */
+41       master        /* user1 */
+42       slave2         /* user2 */
+43       wake           /* user3 */
+44       user2        /* user4 */
+45       match         /* user5 */
+46       attempt        /* user6 */
+47       user3          /* user7 */
+48       clknt         /* user8 */
+49	   user7 	/* user9 */
+50       synchronize   /* synchronize lpo and regular version of the clock */
+51       lpo_edge  /* read only, 3 clocks after risling edge of lpo clock */
+52       blank         /* C0 only, means pdata == 0 */
+53       modone          /* set divide operation is done */
+54       le		/* bluetooth 4.0 LE enable */
+55       aes_ready	/* set when aes is ok */
+63       never         /* read only, always 0 */
+)
+
+default flag = always
+
+/* ========== reg[6] =============== */
+(
+0        mark   /* for keeping strobes, more permanent */
+1        type   /* save and verify during rx */     /* rw */
+2        temp   /* general purpose register, 64 bits */
+3        contru  /* contr uart */
+4        am_addr      /* verify during rx, read and send during tx */ /* ro */
+5        contw        /* last mem_addr during write */
+6        contr        /* last mem_addr during read */
+7        queue    /* the index of qset*,qisolate* commands, ie, if queue = 3, qset/qisolate operate on bit3 */
+8        debug    /* can be wired out for observation */
+9        access   /* the 72 bit access word */
+10       contwu   /* contw uart */
+11       timeup        /* when does certain counter expire */
+12       pwindow       /* bit 71-61 of pdata; because on rx, bits shifts in from 71 down */
+13       fhs_parity    /* re-gernated based on bt_adr( {nap,uap,lap} ) when recalc flag is pulsed */
+14       white_init    /* init value of the whitening */
+15       crc24_init        /* init crc24 lfsr, 24 bits */
+16       interrupts    /* set interrupts, 40 bits */
+17       rega          /* general purpose register, 32 bits */
+18       regb          /* general purpose register, 32 bits */
+19       regc          /* general purpose register, 17 bits */
+20       regab         /* concat of {rega,regb}, thus 64 bits */
+21       radio_ctrl   /* radio i/f direct i/o ctrl, check following "radio_ctrl" section */
+21       ctrl_reg     /* 2023 and after */
+22       jtag_addr    /* load jtag address field, lsb */
+23       freq_index   /* 7 bit read only */
+24       jtag_data    /* wdata to and rdata from jtag */
+25       clkn              /* {clkn_bt, clkn_rt} */
+26       clke              /* {clke_bt, clke_rt} */
+27       stop_watch
+28       fhs_misc   /* SR, SP, pscan mode */
+29       fhs_class  /* class field in fhs */
+30       fhs0   /* read only, bit 0-71 of fhs word */
+31       fhs1   /* read only, bit 72-142 of fhs word */
+32       bt_adr /* r/w, the bt_addr to access gen and freq hopping, contain only lap and uap */
+33       bt_clk /* r/w, the bt_clk for freq hopping */
+34       clkn_bt  /* read only, native bluetooth clock, free running 3.2KHz  or controlled by RTHALFSLOT register */
+35       clkn_rt  /* read only, native realtime clock, free running 12MHz, count from 0-3749, or controlled by RTHALFSLOT register */
+36       freq_mode
+/* wire even_train    = freq_mode[4];    // odd even train                            */
+/* wire conn_mode     = 3;    // connection                                           */
+/* wire iqpgscan_mode = 2;    // slave in inquiry and page (not response)             */
+/* wire iqpgresp_mode = 1;    // slave in inquriy and page (response only)            */
+/* wire inqypage_mode = 0;    // master in inquiry and page(response or not response) */
+37       xin   /* x parameter, read only */
+38       N_tx_slot /* the N factor in equations for Xi,Xp,Xprm,Xprs */
+39 	   auxcnt
+40       clke_bt  /* r/w,  external bluetooth clock , free running 3.2KHz or controlled by RTHALFSLOT register */
+41       clke_rt  /* r/w,  external realtime clock, , free running 12MHz, count from 0-3749, or controlled by RTHALFSLOT register */
+43       host_mode         /* generic stuff for kick starts */
+44       lap
+45       uap
+46       nap         
+47       regext		/* r/w extended 12x32bit registers,  indexed by regext_index */
+48       alarm             /* r/w, lpo wake up time, this is also how lpo and current clock keep sync */
+49       lpo_time          /* read only, this is the value to be copied back to clkn/clke after wakeup */
+50       kc_ls             /* secret key,                71: 0 */
+51       kc_ms             /* secret key,               127:72 */
+52       g1l               /* encryption length                */
+53		mask3ff		/* for mask 0x3ff operation */
+54       aes_ctrl		
+56       regext_index   /* index of regext */
+57	     loopcnt
+58      stack			/* current return address */
+59       stack_ptr		/* stack depth */
+61         pc /* direct goto */
+62       null              /* to nowhere */
+63       pdata /* the shift register */
+)
+default reg = pdata
+
+/* regext_index */
+(
+0 regidx_data
+4 regidx_key
+8 regidx_xor
+12 regidx_result
+)
+/* ========== radio_ctrl========= */
+(
+0 TXGFSK
+1 PSK
+2 PSK3M
+3 RESET
+)
+/* assign BPWR = radio_ctrl[0]; */
+/* assign PARAMP = radio_ctrl[1]; */
+/* assign XTALPU = radio_ctrl[2]; */
+/* assign SYNTHPU = radio_ctrl[3]; */
+/* assign TXPU = radio_ctrl[4]; */
+/* assign RXPU = radio_ctrl[5]; */
+/* assign SLCTRL = radio_ctrl[6]; */
+/* assign XTALSEL_MUX_SEL = radio_ctrl[7] */
+
+
+/* =========== destination[4] ============== */
+(
+0 bucket
+1 rxf
+2 back
+3 mod
+)
+default dest = bucket
+
+/* =========== source[4] ============= */
+(
+1 txf
+3 demod
+)
+default source = 0
+
+
+/* ============== mark ============= *//*0 - 47 */
+(
+
+0  mark_fhs_eir  
+1  mark_rxbuf_inuse
+2  mark_tx_l2cap
+3  mark_switch_initiated
+4  mark_accept_switch
+5  mark_loopback
+7  mark_esco
+8  mark_esco_rxok
+9  mark_context
+10 mark_am_addr_broadcast
+11 mark_fhs_already_good
+12 mark_page_trainb
+13 mark_lpm_mult_enable
+14 mark_usb_flag
+15 mark_old_packet
+16 mark_longpacket
+17 mark_testmode
+18 mark_ar2
+19 mark_h5tx_rp
+20 mark_h5tx_crc	
+21 mark_h5tx_retransmit
+22 mark_h5rx_pstart
+23 mark_h5_sync
+24 mark_h5_reinit
+28 mark_inquiry_on
+29 mark_inquiry_state
+30 mark_inquiry_trainb
+31 mark_periodical_diac
+32 mark_all_diac
+33 mark_slave_in_rand_accepted
+34 mark_reconn_recieve_switch
+35 mark_isstr
+36 mark_loadcode
+37 mark_ext_patch
+38 mark_24g
+39 mark_24g_conext
+40 mark_eeprom_size
+// REVAB:max 35, REVC:max 63
+41 mark_ble_tx_md
+42 mark_ble_rx_md
+43 mark_otp_encrypt
+44 mark_first_packet
+45 mark_role_switch_receive_fhs
+)
+
+(
+1 reload_type_otp
+2 reload_type_spi
+3 reload_type_iic
+)
+
+
+/* ============== soft timers ============== */
+(
+0 le_adv_interval_timer
+1 inquiry_length_timer
+2 le_scan_interval_timer
+3 page_length_timer
+4 iscan_interval_timer
+5 pscan_interval_timer
+6 switch_wait_timer
+7 enpt_delay_timer
+8 page_interval_timer
+9 key_scan_timer
+10 smp_pairing_timer
+11  ui_led_blink   //led timer 可扩展
+12  ui_led_blink1
+13 ui_led_blink2
+ 
+)
+
+(
+1 hci_cmd_inquiry
+2 hci_cmd_inquiry_cancel
+3 hci_cmd_remote_name_req
+4 hci_cmd_remote_feature_req
+5 hci_cmd_create_conn
+6 hci_cmd_disconn
+7 hci_cmd_accept_conn
+8 hci_cmd_reject_conn
+9 hci_cmd_pair
+10 hci_cmd_nopair
+11 hci_cmd_linkkey
+12 hci_cmd_nokey
+13 hci_cmd_auth
+14 hci_cmd_stopencrypt
+15 hci_cmd_startencrypt
+16 hci_cmd_setup_sco
+17 hci_cmd_disconn_sco
+18 hci_cmd_in_sniff
+19 hci_cmd_exit_sniff
+20 hci_cmd_remote_version_req
+21 hci_cmd_remote_ext_features_req
+22 hci_cmd_io_cap
+23 hci_cmd_role_discovery
+24 hci_cmd_role_switch
+25 hci_cmd_accept_with_switch
+26 hci_cmd_detach
+27 hci_cmd_le_create_conn
+28 hci_cmd_accept_sco_conn
+80 hci_cmd_wait_remote_feature
+81 hci_cmd_wait_remote_ext_feature
+82 hci_cmd_wait_remote_name
+)
+
+
+
+/* ============== debug ============= */
+(
+0 debug_neg_skew
+1 debug_bitbucket
+2 debug_dont_clear_got_tx
+3 debug_scatter_enabled
+4 debug_tx_fixed_freq
+5 debug_rx_fixed_freq
+6 debug_tx_pattern
+)
+
+/* ============== tester_emulator ============= */
+(
+0 tester_fixed_flow
+1 tester_fixed_flow_polarity
+2 tester_change
+3 tester_exit
+4 tester_pattern_test
+5 tester_whitening_change
+6 tester_fixed_freq
+7 tester_no_whitening
+)
+
+/* ============== mode ==========*/
+(
+0 mode_le
+1 mode_master
+2 afh_enable
+3 afh_change
+4 send_sco_when_slave
+5 first_seqnx
+)
+
+/* ============== state_map ==========*/
+(
+0 smap_lmptidinit
+1 smap_lmptid
+2 smap_encryption
+3 smap_name_res
+4 smap_name_req
+5 smap_edr
+6 smap_rxlmp
+7 smap_rxl2cap
+)
+(
+0 state_inconn
+1 state_insniff
+2 state_insco 
+3 state_inpage
+4 state_conn_comp
+5 state_init_seq
+6 state_combkey
+7 state_linkkey
+)
+(
+0 op_send_sres
+1 op_auth_req
+2 op_inrand_req
+3 op_disconn
+4 op_stop_enc
+5 op_start_enc
+6 op_txl2cap
+7 op_pkt_comp
+)
+
+
+/* ============== arq [3] ================ */
+(
+0 flow
+1 arqn
+2 seqn
+3 wack
+4 flowx              /* out */  /* not really in memory */
+5 arqnx              /* out */
+6 seqnx              /* out */
+7 bcast1             /* first broadcast received */
+)
+
+/* arq          {flow,arqn,seqn}, read/write */
+/* [0] flow r/w  acl full status of the other, store during rx, checked during tx */
+/* [1] arqn r/w  ack of the other during rx (ack tx fifo),                        */
+/* [2] seqn r/w  seqn of the other, check during rx                               */ 
+/* arqx         {flowx,arqnx,seqnx} */
+/* [0] flowx r/o flow back to the other, 1 alow send, 0 not to send, read only tx */
+/* [1] arqnx r/w ack to the other, set by rx, send back on tx                     */
+/* [2] seqnx r/w toggled by arqn, to be send during tx                            */ 
+
+(
+0 llid0
+1 llid1
+2 nesn
+3 sn
+4 md
+5 wak
+)
+
+/* AFH flags */
+(
+0 AFH_CFG_ON
+1 AFH_CFG_TIMER
+2 send_lmp_set_afh
+3 AFH_CFG_REPORT_MODE
+4 AFH_CFG_MASTER_SENT_REQ
+)
+
+/* LLID CODE */
+(	
+1 LLID_L2CAP_CONT
+2 LLID_L2CAP_START
+3 LLID_LMP
+)
+
+/* ============== master_state ==========*/
+(
+0  master_in_idle
+1  master_in_inquiry
+2  master_in_page
+10 master_in_becoming_slave
+15 master_in_conn
+)
+(
+0 newrev_feature_bettx
+1 newrev_feature_betplltx
+2 newrev_feature_skip_retransmit
+3 newrev_feature_init_radio_after_sleep
+4 newrev_feature_no_lpolog
+)
+/*************mem_pincode_state****************/
+(
+0 pincode_state_ilde
+1 pincode_state_wait_pincode
+2 pincode_state_pincode_ready
+)
+
+
+// lpm_write
+(
+1 lpmreg_sel_ctrl
+2 lpmreg_sel_ctrl2
+4 lpmreg_sel_gpiolow
+8 lpmreg_sel_gpiohigh
+16 lpmreg_sel_counter
+)
+
+//scan_mode
+(
+0 inq_scan_mode
+1 page_scan_mode
+2 page_inq_enable
+)
+//mem_neogotiation_state
+(
+ 0 default_neogotiation_state
+ 1 prarm_neogotiation
+)
+
+//mem_lpm_wake_lock
+(
+0 wake_lock_ble_rx
+1 wake_lock_ble_tx
+
+3 wake_lock_key_press
+4 wake_lock_ble_tx_patch
+5 wake_lock_uart_tx
+6 wake_lock_uart_rx
+7 wake_lock_button
+8 wake_lock_cmd
+9 wake_lock_app
+10 wake_lock_lmp_tx
+11 wake_lock_lmp_rx
+12 wake_lock_l2cap_tx
+13 wake_lock_l2cap_rx
+14 wake_lock_ipc_c512bt
+15 wake_lock_ipc_bt2c51
+
+)
+
+(
+0 bt_disabled
+1 ble_disabled
+2 module_disable
+
+)
+
+(
+0x33  REC_3_MODE
+0x34  REC_4_MODE
+0x35  REC_4_MODE_STATIC_ADDRESS
+0x36  REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS
+0x37  REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS
+)
+
+
+//sniff UART_TX UART_RX
+(
+6 UART_WAKEUP_TX
+7 UART_WAKEUP_RX
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/command.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/command.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/command.format	(working copy)
@@ -0,0 +1,1384 @@
+
+/* Parse Command:
+TX: take bits from tx fifo, jam it into shift and a destination (rf,bucket)
+RX: take bits from demod,  jam it into shift and a destination (acl,sco,bucket) */
+
+/* Inject Command:
+TX: 0 into shift, send tail of shift into a destination (rf,bucket)
+RX: 0 into shift, send tail of shift into a destination (acl,sco,bucket) */
+
+format
+  ! 15 romdat
+  % d0
+  % d1
+  % d2
+  % d3
+  [8] d0
+  [8] d1
+  [8] d2
+  [8] d3
+end
+
+format
+  ! 15 enable   /* set flag to 1 */
+  % flag
+  [5] opcode
+  [6] 1
+  [6] flag
+  [6] null
+  [9] 0
+end
+ /* High 5 bytes of channel map */
+format
+  ! 15 pulse   /* set flag to 1 */
+  % flag
+  [5] opcode
+  [6] 1
+  [6] flag
+  [6] null
+  [9] 0
+end
+
+format
+  ! 15 disable   /* set flag to 0 */
+  % flag
+  [5] opcode
+  [6] 2
+  [6] flag
+  [6] null
+  [9] 0
+end
+
+format
+  ! 15 set0  /* set selected bit of reg to 0 */
+  % immediate
+  % reg
+  [5] opcode
+  [6] 9
+  [6] never
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 15 set1  /* set selected bit of reg to 1 */
+  % immediate
+  % reg
+  [5] opcode
+  [6] 9          /* alu op demux */
+  [6] always
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 15 setflag  /* set selected bit of the reg to the polarity of the flag */
+  % flag
+  % immediate
+  % reg
+  [5] opcode
+  [6] 9
+  [6] flag
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 15 nsetflag  /* set the selected bit of the reg to the opposite polarity of the flag */
+  % flag
+  % immediate
+  % reg
+  [5] opcode
+  [6] 0x29
+  [6] flag
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 15 setflip    /* invert the selected bit of the reg */
+  % immediate
+  % reg
+  [5] opcode
+  [6] 10            /* this is alu op */
+  [6] always
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 0x1f qset1      /* demux the lowest 4 bit of queue and OR it with regr into regw */
+  % reg             /* in short, set the bit in reg indexed by queue to 1 */
+  [5] opcode
+  [6] 9
+  [6] always
+  [6] reg
+  [9] 0
+end
+  
+format
+  ! 0x1f qset0      /* demux the lowest 4 bit of queue and AND it with regr into regw */
+  % reg             /* in short, set the bit in reg indexed by queue to 0 */
+  [5] opcode
+  [6] 9
+  [6] never
+  [6] reg
+  [9] 0
+end
+
+format 
+  ! 0x1f qsetflag   /* set the bit in reg index by queue to same as flag */
+  % flag
+  % reg
+  [5] opcode
+  [6] 9
+  [6] flag
+  [6] reg
+  [9] 0
+end
+
+format 
+  ! 0x1f nqsetflag   /* set the bit in the reg index by queue to opposite of flag */
+  % flag
+  % reg
+  [5] opcode
+  [6] 0x29
+  [6] flag
+  [6] reg
+  [9] 0
+end
+
+format
+  ! 0x1f qsetflip      /* flip the bit in reg index by queue */
+  % reg
+  [5] opcode
+  [6] 10
+  [6] always
+  [6] reg
+  [9] 0
+end
+
+format
+  ! 1 parse       /* take bits out of source (sco_tx,tx_buffer,rx-elas) into pdata and dest (sco_rx,rx_fifo,tx-elas) */
+  % source
+  % dest
+  % immediate
+  [5] opcode
+  [4] source      /* voice, data, demod */
+  [2] 0
+  [6] 0    
+  [2] 0           /* parse or inject */ 
+  [4] dest        /* acl, sco, mod, bucket */
+  [9] immediate   /* number of bits to parse off */
+end
+
+format
+  ! 1 inject      /* shift data from pdata into destination (tx-elas,rx_fifo,sco_rx) */
+  % destination
+  % immediate
+  [5] opcode
+  [4] 0
+  [2] 0
+  [6] 1
+  [2] 0
+  [4] destination /* acl,sco,mod,bucket */
+  [9] immediate   /* number of bits to be injected */
+end
+
+format
+  ! 1 iinject
+  % destination
+  % regr
+  [5] opcode
+  [6] regr       /* contain the number of bits to inject */
+  [6] 3
+  [2] 0
+  [4] destination /* acl,sco,mod,bucket */
+  [9] 0 
+end
+
+format
+  ! 1 stuff  /* automatic parse, stuff_counter decrement on every bit until hits zero */
+  % source
+  % destination
+  [5] opcode
+  [4] source
+  [2] 0
+  [6] 2
+  [2] 0
+  [4] destination
+  [9] 0
+end
+
+format    /* force immediate value into registers */
+  ! 3 force
+  % immediate
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 0    /* alu operation force */
+  [6] regw  /* destination register */
+  [9] immediate
+end
+
+format    /* force whatever is on shift_reg to regsiters */
+  ! 0x13 iforce
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 0    /* alu operation force */
+  [6] regw  /* destination register */
+  [9] 0
+end
+
+format    /* force immediate value into registers */
+  ! 3 increase
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 1    /* alu operation add */
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 3 pincrease
+  % immediate
+  [5] opcode
+  [6] -1  /* pdata */
+  [6] 1   /* alu add */
+  [6] -1  /* back to pdata */
+  [9] immediate
+end
+
+format    /* force immediate value into registers */
+  ! 3 and_into
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 2    /* alu operation and into */
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 3 and
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 2    /* alu operation and into */
+  [6] regw
+  [9] immediate
+end
+  
+format
+  ! 0x13 iand    /* pdata & regr -> regw */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 2    /* alu operation and into */
+  [6] regw
+  [9] 0
+end
+  
+
+format    /* and whatever is in shiftreg with reg */
+  ! 0x13 iand_into
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 2    /* alu operation and into */
+  [6] reg
+  [9] 0
+end
+
+format
+  ! 3 or_into
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 3    /* alu operation or into */
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 3 or
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 3    /* alu operation or into */
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 0x13 ior
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 3    /* alu operation or into */
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 0x13 ior_into
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 3    /* alu operation or into */
+  [6] reg
+  [9] 0
+end
+
+format
+  ! 3 skip_to   /* jump to location stored in reg */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 4   /* alu operation copy */
+  [6] rom_addr
+  [9] 0
+end
+
+format
+  ! 3 copy
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 4   /* alu operation copy */
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 deposit   /* copy the register content thru alu to shift register, not prealigned like preload */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 4   /* alu operation copy */
+  [6] -1  /* pdata */
+  [9] 0
+end
+
+format
+  ! 3 icopy     /* copy the shift register lsb content directly to register, not aligned */
+  % regw
+  [5] opcode
+  [6] -1  /* pdata */
+  [6]  4  /* alu copy */
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 add
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 1
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 0x13 iadd       /* regr + pdata -> regw */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 1
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 sub          /* immediate - regr -> regw */
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 12
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 0x13 isub       /* pdata - regr -> regw */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 12
+  [6] regw
+  [9] 0
+end
+
+
+format
+  ! 3 flip
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 5
+  [6] reg
+  [9] immediate
+end
+  
+format
+  ! 0x13 iflip  /* use shift register as immediate to do xor */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 5
+  [6] regw
+  [9] 0
+end
+  
+format
+  ! 3 xor
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 5
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 3 xor_into
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 5
+  [6] reg
+  [9] immediate
+end
+  
+format
+  ! 0x13 ixor  /* pdata xor regr and store result in regw */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 5
+  [6] regw
+  [9] 0
+end
+  
+format
+  ! 3 invert
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 8
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 pinvert    /* invert pdata into itself */
+  [5] opcode
+  [6] -1
+  [6] 8
+  [6] -1
+  [9] 0
+end
+
+format
+  ! 3 div                 /* regr div immediate div */
+  % reg
+  % immediate
+  [5] opcode
+  [6] reg
+  [6] 13                   /* generate diven pulse to div */
+  [6] null
+  [9] immediate
+end
+
+format
+  ! 0x13 idiv           /* pdata div regr data ready at most after 41 nops */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 13                   /* generate diven pulse to div */
+  [6] null
+  [9] 0
+end
+
+format
+  ! 3 remainder            /* harvest div remainder */
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 14
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 quotient             /* harvest div quotient */
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 15
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 6
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift2
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 22
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift3
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 18
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift4
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 35
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift8
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 25
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift16
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 34
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift32
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 30
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 lshift
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 7
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 lshift2
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 23
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 lshift8
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 26
+  [6] regw
+  [9] 0
+end
+
+  
+format
+  ! 3 lshift3
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 19
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 lshift4
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 36
+  [6] regw
+  [9] 0
+end
+  
+
+format
+  ! 3 lshift16
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 32
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 random               /* random number into regw */
+  % reg
+  [5] opcode
+  [6] 0
+  [6] 20
+  [6] reg
+  [9] 0
+end
+
+format                     /* bit reverse within a byte */
+  ! 3 reverse
+  % reg
+  % regw
+  [5] opcode
+  [6] reg
+  [6] 27
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 priority    /* priority encode reg into regw, lsb is the top priority, ie, priority(8'b00010000) = 4 */
+  % reg
+  % regw
+  [5] opcode
+  [6] reg
+  [6] 21
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 7 setsect   /* set a section of pdata */
+  % section    /* 0 sets 17:0 of pdata with set_data, 1 sets 35:18, 2 sets 53:36, 3 sets 71:54 */
+  % set_data
+  [5] opcode
+  [7] 0
+  [2] section
+  [18] set_data
+end
+
+format
+  ! 10 preload   /* load stuff into pdata according to fhs format, check us.v */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 0
+  [6] -1
+  [9] 0
+end
+
+format  /* load register with pdata content, according to fhs format, check us.v */
+  ! 10 ialigned   /* all bits are in position */
+  % regw
+  [5] opcode
+  [6] -1
+  [6] 0
+  [6] regw
+  [9] 0
+end
+
+format  /* load register to another according to fhs format */
+  ! 10 aligned
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 0
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 4 branch
+  % addr
+  % flag
+  [5] opcode
+  [6] 1
+  [6] flag
+  [15] addr
+end
+
+format
+  ! 4 call
+  % addr
+  % flag
+  [5] opcode
+  [6] 2
+  [6] flag
+  [15] addr
+end
+
+format
+  ! 4 rtn
+  % flag
+  [5] opcode
+  [6] 3
+  [6] flag
+  [15] 0
+end
+
+format
+  ! 0x0c store          /* write to memory, data from pdata, address from immediate then mem_ptr */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 0
+  [1] 0
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0c hstore          /* write to memory, data from pdata, address from immediate then mem_ptr */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 1
+  [1] 0
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x1c istore        /* write to memory, data from pdata, address from regr then mem_ptr */
+  % num_bytes
+  % reg
+  [5] opcode
+  [6] reg            /* hold address */
+  [1] 0
+  [1] 0
+  [4] num_bytes
+  [15] 0
+end
+
+format
+  ! 0x0d fetch          /* read from memory, data into pdata, address from immediate then mem_ptr */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 0
+  [1] 0
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0d hfetch          /* read from memory, data into pdata, address from immediate then mem_ptr */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 1
+  [1] 0
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0d crc         /* read from memory, count from loopcnt, put crc result into pdata */
+  % addr
+  [5] opcode
+  [6] 0
+  [1] 0
+  [1] 0
+  [4] 0
+  [15] addr
+end
+
+format
+  ! 0x1d icrc         /* read from memory, address from reg, count from loopcnt, put crc result into pdata */
+  % reg
+  [5] opcode
+  [6] reg             /* hold address */
+  [1] 0
+  [1] 0
+  [4] 0
+  [15] 0
+end
+
+
+format
+  ! 0x1d ifetch         /* read from memory, data into pdata, address from regr then mem_ptr */
+  % num_bytes
+  % reg
+  [5] opcode
+  [6] reg             /* hold address */
+  [1] 0
+  [1] 0
+  [4] num_bytes
+  [15] 0
+end
+
+format
+  ! 0x0c storet          /* write to memory, data from temp, address from immediate won't increment */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 0
+  [1] 1
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0c hstoret          /* write to corereg, data from temp, address from immediate won't increment */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 1
+  [1] 1
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x1c istoret        /* write to memory, data from temp, address from regr won't increment */
+  % num_bytes
+  % reg
+  [5] opcode
+  [6] reg            /* hold address */
+  [1] 0
+  [1] 1
+  [4] num_bytes
+  [15] 0
+end
+
+format
+  ! 0x0d fetcht          /* read from memory, data into temp, address from immediate won't increment */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 0
+  [1] 1
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0d hfetcht          /* read from corereg, data into temp, address from immediate won't increment */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 1
+  [1] 1
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x1d ifetcht         /* read from memory, data into temp, address from regr won't increment */
+  % num_bytes
+  % reg
+  [5] opcode
+  [6] reg             /* hold address */
+  [1] 0
+  [1] 1
+  [4] num_bytes
+  [15] 0
+end
+
+format
+  ! 0x0e jam
+  % immediate
+  % addr
+  [5] opcode
+  [3] 0
+  [16] addr
+  [8] immediate
+end
+
+format			/* 0x242... */
+  ! 4 nbranch
+  % addr
+  % flag
+  [5] opcode
+  [1] 1
+  [5] 1
+  [6] flag
+  [15] addr
+end
+
+format
+  ! 4 ncall
+  % addr
+  % flag
+  [5] opcode
+  [1] 1
+  [5] 2
+  [6] flag
+  [15] addr
+end
+
+format
+  ! 4 nrtn
+  % flag
+  [5] opcode
+  [1] 1
+  [5] 3
+  [6] flag
+  [15] 0
+end
+
+format
+  ! 4 nop
+  % addr  /* no-op for addr+2 clocks */
+  [5] opcode
+  [6] 0     
+  [6] 0     /* always */ 
+  [15] addr
+end
+
+format
+  ! 4 clear_stack
+  [5] opcode
+  [6] 4
+  [6] 0    /* always */
+  [15] 0
+end
+
+format
+  ! 6 until
+  % reg
+  % flag
+  [5] opcode
+  [6] reg
+  [6] flag
+  [6] 1
+  [9] 0
+end
+  
+format
+  ! 6 correlate   /* quit if 1. flag is true 2, regr time up 3, found sync,(cond_true) */
+  % reg          /* expire counter to check against */
+  % flag
+  [5] opcode
+  [6] reg
+  [6] flag
+  [6] 2           /* correlate */
+  [9] 0           
+end
+
+format
+  ! 5 compare   /* sets cond flag,  if reg equals immediate */
+  % immediate
+  % reg
+  % mask
+  [5] opcode
+  [6] reg
+  [3] 0
+  [9] mask
+  [9] immediate
+end
+
+format
+  ! 0x15 icompare   /* sets cond flag,  if reg equals pdata */
+  % mask
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 0
+  [9] mask
+  [9] 0
+end
+
+format   /* sets cond. flag, if reg equals LS half of shift reg with MS half of reg being mask */
+  ! 5 iverify
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 2
+  [18] 0
+end
+
+format
+  ! 0x15 qisolate1
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 3
+  [18] -1
+end
+
+format
+  ! 0x15 qisolate0
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 3
+  [18] 0
+end
+
+	/* REVAB bug: cannot access bit above 35 */
+format
+  ! 5 isolate1
+  % addr
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 3
+  [9] -1
+  [9] addr
+end
+
+format
+  ! 5 isolate0
+  % addr
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 3
+  [9] 0
+  [9] addr
+end
+
+format
+  ! 11 setarg
+  % immediate
+  [5] opcode
+  [27] immediate
+end
+
+format
+  ! 0x1b arg
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [21] immediate
+end
+
+  
+format
+  ! 0 sleep
+  [5] opcode
+  [27] 0
+end
+
+format
+  ! 0 snooze
+  [5] opcode
+  [6] -1
+  [21] 0
+end
+
+format
+  ! 0 revision
+  % rev_num
+  [5] opcode
+  [27] rev_num
+end
+
+format
+  ! 0x18 loop   /* branch when loopcnt is NOT zero, and decrease loopcnt */
+  % addr
+  [5] opcode
+  [4] 4
+  [8] 0
+  [15] addr
+end
+
+format
+  ! 0x18 beq   /* branch when pdata is equal to immediate */
+  % imme
+  % addr
+  [5] opcode
+  [4] 0
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 bne   /* branch when pdata is NOT equal to immediate */
+  % imme
+  % addr
+  [5] opcode
+  [4] 1
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 rtneq   /* return when pdata is equal to immediate */
+  % imme
+  [5] opcode
+  [4] 2
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 0x18 rtnne   /* return when pdata is NOT equal to immediate */
+  % imme
+  [5] opcode
+  [4] 3
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 0x18 bbit1   /* branch when pdata's imme bit is 1 */
+  % imme
+  % addr
+  [5] opcode
+  [4] 5
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 bbit0   /* branch when pdata's imme bit is 0 */
+  % imme
+  % addr
+  [5] opcode
+  [4] 6
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 rtnbit1   /* return when pdata's imme bit is 0 */
+  % imme
+  [5] opcode
+  [4] 7
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 0x18 rtnbit0   /* return when pdata's imme bit is 0 */
+  % imme
+  [5] opcode
+  [4] 8
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 8	bpatch
+  % imme
+  % addr
+  [5] opcode
+  [4] 9
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 8	bpatchx
+  % imme
+  % addr
+  [5] opcode
+  [4] 14
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 bmark1   /* branch when mark's imme bit is 1 */
+  % imme
+  % addr
+  [5] opcode
+  [4] 10
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 bmark0   /* branch when mark's imme bit is 0 */
+  % imme
+  % addr
+  [5] opcode
+  [4] 11
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 rtnmark1   /* return when mark's imme bit is 0 */
+  % imme
+  [5] opcode
+  [4] 12
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 0x18 rtnmark0   /* return when mark's imme bit is 0 */
+  % imme
+  [5] opcode
+  [4] 13
+  [8] imme
+  [15] 0
+end
+
+
+format
+  ! 3 mult                  /* immediate mult regr */  /* the product will be ready 17 clks later */
+  % immediate                                   /* use "product" instruction to get the result */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 16                   /* generate diven pulse to div */
+  [6] null
+  [9] immediate
+end
+
+format
+  ! 0x13 imult           /* pdata mult regr */  /* the product will be ready after 15 nops */
+  % reg                                         /* use product opcode to get the result */
+  [5] opcode
+  [6] reg
+  [6] 16                   /* generate mult pulse to multiplier */
+  [6] null
+  [9] 0
+end
+
+format
+  ! 3 mul32                  /* immediate mult regr */ 
+  % regr
+  % immediate                                  
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 31           
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 0x13 imul32           /* pdata mult regr 32x32=64bit */  
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 31                   
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 product              /* harvest mult product */
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 17
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 byteswap
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 33
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 shasx          /* SHA256 Sx operation, immediate is Sx */
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 28
+  [6] regw
+  [9] immediate
+end
+
+
+format
+  ! 0x13 regexrot 	/* regext[0] <- regext[7], regext[1] <- regext[0], regext[2] <- regext[1] ... */
+  [5] opcode
+  [6] 0
+  [6] 29
+  [6] null
+  [9] 0
+end
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/g24.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/g24.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/g24.format	(working copy)
@@ -0,0 +1,461 @@
+
+cmemalloc 0 (
+34 mem_24g_rxbuf
+32 mem_24g_txbuf
+34 mem_24g_txpayload
+32 mem_24g_rxpayload
+1 mem_24g_rxdata_length
+1 mem_24g_pid
+1 mem_24g_datalen
+1 mem_24g_data_type
+1 mem_24g_txlen
+2 mem_24g_rx_window
+1 mem_24g_ensure
+2 mem_24g_txfail_cnt
+1 mem_24g_get_ack_fail
+1 mem_24g_retry
+1 mem_24g_ch
+1 mem_24g_current_ch_number
+4 mem_24g_paring_addr
+1 mem_24g_pairing_sm
+4 mem_24g_ch_map1
+4 mem_24g_ch_map2
+4 mem_24g_ch_map3
+4 mem_24g_ch_map4
+4 mem_24g_tx_btclk
+1 mem_24g_interval
+1 mem_24g_interval_min
+1 mem_24g_interval_max
+4 mem_24g_addr
+1 mem_24g_abort_pac
+2 mem_24g_check_dongle_times
+
+8 mem_24g_enter_hibernate
+4 mem_24g_device_addr
+1 mem_24g_pac_index
+1 mem_24g_no_ack
+3 mem_24g_sta_crc
+3 mem_24g_last_crc
+1 mem_24g_sta_pid
+1 mem_24g_last_pid
+1 mem_24g_max_retry
+1 mem_24g_mode
+
+34 mem_24g_rxdata_temp
+4 mem_24g_rx_addr
+1 mem_dongle_mode_init
+1 mem_dongle_work_mode
+1 mem_dongle_ms_bind_step
+1 mem_dongle_kb_bind_step
+1 mem_dongle_bind_device_status
+8 mem_24g_bind_payload
+1 mem_24g_abort_packet
+1 mem_24g_rf_laststa
+4 mem_24g_hop_btclk
+1 mem_24g_hop_interval
+1 mem_24g_mode_switch
+1 mem_24g_ackpayload_enable
+1 mem_24g_hop_packet
+1 mem_24g_pair_mode
+1 mem_24g_nodata_timer_enable
+1 mem_24g_time_slice
+8 mem_24g_kb_data_sta_data
+8 mem_24g_kb_data_last_data
+3 mem_24g_kb_multikey_sta_data
+3 mem_24g_kb_multikey_last_data
+1 mem_24g_kb_blank_data_enable
+1 mem_24g_kb_mul_blank_data_enable
+1 mem_24g_ms_blank_data_enable
+4 mem_24g_kb_addr
+4 mem_24g_ms_addr
+
+1 mem_24g_dg_last_ch
+1 mem_24g_dg_ch_number
+1 mem_24g_dg_config_ch_once
+1 mem_24g_kb_last_ch
+1 mem_24g_kb_ch_number
+1 mem_24g_kb_config_ch_once
+1 mem_24g_ms_last_ch
+1 mem_24g_ms_ch_number
+1 mem_24g_ms_config_ch_once
+
+2 mem_24g_syncword
+1 mem_24g_syncword_crc8
+1 mem_24g_get_syncword_crc8
+2 mem_24g_ota_sta_pid
+
+1 mem_tx_power_temp
+
+1 mem_rssi_hex
+1 mem_rssi_noise_avg
+1 mem_rssi_noise_index
+1 mem_rssi_signal_index
+1 mem_rssi_noise_dg_avg
+1 mem_rssi_noise_kb_avg
+1 mem_rssi_noise_ms_avg
+1 mem_rssi_noise_dg_index
+1 mem_rssi_noise_kb_index
+1 mem_rssi_noise_ms_index
+8 mem_rssi_signal_buf
+
+1 mem_queue_ele_num
+2 mem_queue_read
+2 mem_queue_write
+0 mem_queue_start
+32 mem_data_ele0
+32 mem_data_ele1
+32 mem_data_ele2
+0 mem_queue_end
+2 mem_queue_temp
+
+2 mem_cb_24g_data
+1 mem_24g_hop_fastly_cnt
+1 mem_24g_hop_pac_retry
+1 mem_24g_rf_hop_ch
+1 mem_24g_rf_last_sta
+1 mem_24g_rf_work_stage
+1 mem_24g_sync_cnt
+1 mem_power_ctrl_pac_succ_cnt
+1 mem_rssi_avg_received
+1 mem_rssi_hex_received
+1 mem_power_ctrl_level
+
+1 mem_seqi
+1 mem_24g_auto_paring_switch
+1 mem_24g_paccnt
+1 mem_24g_transmit_by_interrupt
+1 mem_24g_transmit_by_interrupt_exit_count
+)
+
+(
+//add
+0   offset_24g_rxbuf
+1   offset_24g_rxbuf_add1
+2   offset_24g_rxbuf_add2
+34  offset_24g_txbuf
+66  offset_24g_txpayload
+100 offset_24g_rxpayload
+102 offset_24g_rxpayload_add2
+132 offset_24g_rxdata_length
+133 offset_24g_pid
+134 offset_24g_datalen
+135 offset_24g_data_type
+136 offset_24g_txlen
+137 offset_24g_rx_window
+139 offset_24g_ensure
+140 offset_24g_txfail_cnt
+141 offset_24g_get_ack_fail
+142 offset_24g_tx_without_int
+143 offset_24g_retry
+144 offset_24g_ch
+145 offset_24g_current_ch_number
+146 offset_24g_paring_addr
+150 offset_24g_pairing_sm
+151 offset_24g_ch_map1
+155 offset_24g_ch_map2
+159 offset_24g_ch_map3
+163 offset_24g_ch_map4
+167 offset_24g_tx_btclk
+171 offset_24g_interval
+172 offset_24g_interval_min
+173 offset_24g_interval_max
+174 offset_24g_addr
+178 offset_24g_abort_pac
+179 offset_24g_sync_pac
+180 offset_24g_hop_pac
+181 offset_24g_check_dongle_times
+182 offset_24g_enter_hibernate
+190 offset_24g_device_addr
+194 offset_24g_pac_index
+195 offset_24g_no_ack
+196 offset_24g_sta_crc
+199 offset_24g_last_crc
+202 offset_24g_sta_pid
+203 offset_24g_last_pid
+204 offset_24g_max_retry
+205 offset_24g_mode
+206 offset_24g_rf_last_sta
+207 offset_24g_rf_hop_ch
+208 offset_24g_sync_cnt
+209 offset_24g_hop_pac_retry
+210 offset_24g_rf_work_stage
+211 offset_24g_hop_fastly_cnt
+212 offset_24g_short_sleep_timer
+216 offset_24g_cb_data
+218 offset_24g_cb_lpm_prepare
+220 offset_24g_cb_lpm_before
+222 offset_24g_cb_rxdata_type1
+224 offset_rssi_signal_index
+225 offset_rssi_signal_avg
+226 offset_rssi_signal_buf
+234 offset_rssi_noise_index
+235 offset_rssi_noise_avg
+236 offset_rssi_noise_buf
+244 offset_rssi_ctrl_threshold_down
+245 offset_rssi_noise_dg_index
+246 offset_rssi_noise_kb_index
+247 offset_rssi_noise_ms_index
+248 offset_rssi_noise_dg_avg
+249 offset_rssi_noise_kb_avg
+250 offset_rssi_noise_ms_avg
+251 offset_tx_power_temp
+252 offset_power_ctrl_packet_cnt
+253 offset_power_ctrl_ack_cnt
+254 offset_power_ctrl_level
+255 offset_power_ctrl_txpwr_level2
+//iadd
+256 offset_power_ctrl_txpwr_level1
+257 offset_power_ctrl_txpwr_level0
+258 offset_power_ctrl_threshold_up
+259 offset_power_ctrl_threshold_down
+260 offset_dongle_mode_init
+261 offset_dongle_work_mode
+262 offset_dongle_ms_bind_step
+263 offset_dongle_kb_bind_step
+264 offset_dongle_bind_device_status
+265 offset_24g_rxdata_temp
+267 offset_24g_rxdata_temp_add2
+268 offset_24g_rxdata_temp_add3
+269 offset_24g_rxdata_temp_add4
+299 offset_24g_rx_addr
+303 offset_24g_bind_payload
+304 offset_24g_bind_payload_add1
+305 offset_24g_bind_payload_add2
+309 offset_24g_rf_laststa
+310 offset_24g_hop_btclk
+314 offset_24g_hop_interval
+315 offset_24g_ackpayload_enable
+316 offset_24g_ackpayload
+348 offset_24g_mode_switch
+349 offset_24g_pair_mode
+350 offset_24g_nodata_timer_enable
+351 offset_24g_time_slice
+352 offset_24g_mouse_addr
+356 offset_24g_kb_addr
+360 offset_24g_kb_data_sta_data
+368 offset_24g_kb_data_last_data
+376 offset_24g_kb_multikey_sta_data
+379 offset_24g_kb_multikey_last_data
+382 offset_24g_kb_blank_data_enable
+383 offset_24g_kb_mul_blank_data_enable
+384 offset_24g_ms_blank_data_enable
+385 offset_24g_dg_last_ch
+386 offset_24g_dg_ch_number
+387 offset_24g_dg_config_ch_once
+388 offset_24g_kb_last_ch
+389 offset_24g_kb_ch_number
+390 offset_24g_kb_config_ch_once
+391 offset_24g_ms_last_ch
+392 offset_24g_ms_ch_number
+393 offset_24g_ms_config_ch_once
+394 offset_24g_pair_txpower
+395 offset_24g_auto_pair_switch
+)
+
+(
+3 QUEUE_ELE_COUNT
+32 QUEUE_ELE_LENGTH
+)
+
+(
+3 retry_24g
+1 NO_ACK_24G
+0 WITH_ACK_24G
+
+0 ENSURE_OFF_24G
+1 ENSURE_ON_24G
+
+0x10 ABORT_DATA
+0x40 RSSI_SENSITIVITY
+
+0x4e G24_PAIR_CH
+)
+
+(
+0 disable_24g
+1 tx_24g
+2 rx_24g
+
+0 bit_ack_24g
+)
+
+//mem_24g_interrupt
+(
+0 rx_dr
+1 rx_sync
+4 tx_ds
+5 tx_fail
+)
+
+//mem_24g_data_type
+(
+0x07 bits_data
+//0-2 data type
+3 bit_abort
+4 bit_hop
+5 bit_sync
+//6-7 channel offset
+)
+
+
+
+//mem_24g_pairing_sm
+(
+0 STATE_24G_PAIRING_NULL
+1 STATE_24G_PAIRING_1
+2 STATE_24G_PAIRING_2
+3 STATE_24G_PAIRING_3
+0X11 STATE_24G_PAIRING_1_WAITING_ACK
+0X12 STATE_24G_PAIRING_2_WAITING_ACK
+0X13 STATE_24G_PAIRING_3_WAITING_ACK
+0XFF STATE_24G_PAIRING_SUCCESS
+)
+
+(
+0 DONGLE_WORK	   		//connect mode normal
+1 DONGLE_BIND			//code pair mode
+2 DONGLE_TEST			//test mode
+3 DONGLE_CODE			//PC_application
+4 DONGLE_PCBA			//PCBA_TEST
+5 DONGLE_DEBUG
+6 DONGLE_MODE_MAX
+7 DONGLE_SEARCH
+0 CLEAR_INIT
+)
+
+(
+0x01 DATATYPE_MOUSE	//mouse
+0x02 DATATYPE_KEYBOARD	//keyboard
+0xAA DATATYPE_BIND		//bind step 1
+0x55 DATATYPE_CONFIG	//bind step 2
+0x22 DATATYPE_OK	//bind step 3
+
+0x01 BIND_MOUSE
+0x02 BIND_KEYBOARD
+)
+
+(
+112 G24_DONGLE_ADDR
+)
+
+(
+0xa0 COMMAND_MODE     //BYTE 0
+0X81 COM_MODE_BIND	//BYTE 1
+0X82 COM_MODE_TEST	//BYTE 1
+)
+(
+0xa1 COMMAND_BIND		//BYTE 0
+0X01 COM_BIND_GET		//1
+0X84 COM_BIND_EXIT		//1
+0XA7 COM_READ_MODE	//1
+)
+(
+0xa2 COMMAND_TEST	//BYTE 0
+0X81 COM_TEST_SC		//	进入单载波
+0x82 COM_TEST_CD		// fcc测试
+0x83 COM_TEST_DAT		// 数据测试
+0X84 COM_TEST_LOW_CH  //低频点
+0X85 COM_TEST_MID_CH	//中频点
+0X86 COM_TEST_HIG_CH	//高频点
+0X87 COM_TEST_SW_HIG	//自动切换频点为高 1mhz
+0X88 COIM_TEST_SW_LOW	//自动切换频点为低 1mhz
+0X89 COM_TEST_SW_STOP	//停止自动切换频点
+0X8A COM_TEST_POW_5		//设置输出功率5dbm
+0X8B COM_TEST_POW_0		//0dbm
+0X8C COM_TEST_POW_N5		//-5dbm
+0X8D COM_TEST_POW_N10		//-10dbm
+0X8E COM_TEST_EXIT			//退出测试模式
+)
+(
+0xa6 COMMAND_CURRENT_PROJECT
+0xa7 COMMAND_CURRENT_MODE
+0xa9 COMMAND_CURRENT_FW_VERSION
+)
+
+//user defined cmd
+(
+0xb0 COMMAND_USER_DEFINED
+)
+
+(
+0x15 PRODUCT_ID
+0 FW_VERSION0
+0 FW_VERSION1
+1 FW_VERSION2
+7 FW_VERSION3
+)
+
+
+(
+8 TIMER_NODATA
+640 TIMER_NODATA_DELAY	//200ms
+
+11 TIMER_MS_BLANK
+320 TIMER_MS_BLANK_DELAY
+
+12 TIMER_KB_MUL_BLANK
+320 TIMER_KB_MUL_BLANK_DELAY
+
+14 TIMER_KB_BLANK
+320 TIMER_KB_BLANK_DELAY
+)
+
+(
+0 KB_NORMAL_REPORT_ID
+1 MS_REPORT_ID
+3 KB_MULTIKEY_REPORT_ID
+)
+
+(
+7 RSSI_BUF_LEN_SIGNAL
+255 RSSI_BUF_LEN_NOISE
+0x50 RSSI_THRESH_NOISE
+
+0x77 RSSI_DIS_MIN_24G
+0x82 RSSI_DIS_MAX_24G
+
+0x75 RSSI_DIS_MIN_BLE
+0x80 RSSI_DIS_MAX_BLE
+)
+
+(
+//power control
+0x01 TXPWR_0DB
+0x02 TXPWR_3DB
+0x04 TXPWR_5DB
+0x10 TXPWR_f5DB
+
+124 POWER_CTRL_MAX_PACKET_CNT
+
+2 POWER_CTRL_LOSSPAC_THRESH_UP0
+0 POWER_CTRL_LOSSPAC_THRESH_DOWN0
+0x20 POWER_CTRL_RSSI_THRESH_DOWN0
+
+5 POWER_CTRL_LOSSPAC_THRESH_UP1
+0 POWER_CTRL_LOSSPAC_THRESH_DOWN1
+0x60 POWER_CTRL_RSSI_THRESH_DOWN1
+
+10 POWER_CTRL_LOSSPAC_THRESH_UP2
+0 POWER_CTRL_LOSSPAC_THRESH_DOWN2
+0x80 POWER_CTRL_RSSI_THRESH_DOWN2
+)
+
+//mem_send_data_24g_short_lpm
+(
+0 SHORT_LPM_STATE_POLLING 	
+1 SHORT_LPM_STATE_DATA
+2 SHORT_LPM_STATE_NODATA
+3 SHORT_LPM_STATE_BUTTON_WHEEL
+)
+
+(
+81000 G24_8125_INTERVAL_PARAM
+78000 G24_78125_INTERVAL_PARAM
+12210 G24_4MS_INTERVAL_PARAM
+)
+
+(
+1 G24_TX_TIMER_INT_ENABLE
+0 G24_TX_TIMER_INT_DISABLE
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/hci.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/hci.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/hci.format	(working copy)
@@ -0,0 +1,570 @@
+
+
+memalloc(
+1 mem_h5rx_ackcnt
+1 mem_check_err_acl_cont
+
+1 mem_rp_packets
+2 mem_packet_type
+
+2 mem_hci_sniff_conn_handle
+2 mem_hci_sniff_max_interval
+2 mem_hci_sniff_min_interval
+2 mem_hci_sniff_attempt
+2 mem_hci_sniff_timeout
+2 mem_voice_setting
+1 mem_retransmission_effort
+2 mem_sco_ptype
+3 mem_extm_uap_restore
+
+2 mem_h5rx_rptr
+1 mem_h5rx_ack
+1 mem_h5tx_ack
+2 mem_h5tx_rptr
+2 mem_h5tx_wptr
+2 mem_h5tx_free
+1 mem_h5rx_tmp
+1 mem_h5tx_seq
+
+2 mem_hci_acl_queue_wptr
+2 mem_hci_acl_queue_rptr
+2 mem_hci_acl_queue_end
+1 mem_hci_acl_queue_wcnt
+1 mem_hci_acl_cnt
+
+2 mem_hci_acl_tx_trigger_wptr //tx via uart
+
+
+1 mem_hci_curr_len
+2 mem_hci_curr_target 
+) 
+
+xmemalloc(
+
+2 mem_baud
+1 mem_hci_lt_rx_state
+)
+
+15 hci_flag_rp
+//mem_hci_options bit map
+(
+1 hci_option_h4
+2 hci_option_protocol2
+3 hci_option_protocol3
+4 hci_option_uart
+5 hci_option_usb
+6 hci_option_phy2
+7 hci_option_phy3
+)
+// UART baud rate @6MHz
+(
+0 uart_ctrl_bit_enable
+3 uart_ctrl_bit_slip_protocol
+
+)
+
+//bit map of core_uart_ctrl
+(
+
+)
+//bit map of core_uart_status
+(
+0 uart_status_tx_fifo_full
+1 uart_status_tx_fifo_empty
+2 uart_status_tx_busy
+3 uart_status_rx_fifo_empty
+
+)
+//HCI H4 LOG related
+(
+0x4850 mem_hci_log
+8 hci_log_size
+100 hci_log_cnt
+
+)
+//HCI H4 Packet TYPE
+(
+0x01 HCI_H4_TYPE_CMD
+0x02 HCI_H4_TYPE_ACL
+0x04 HCI_H4_TYPE_EVENT
+
+)
+// HCI command opcode group field values
+(
+0x01 HCI_OGF_LINK_CONTROL
+0x02 HCI_OGF_LINK_POLICY
+0x03 HCI_OGF_BASEBAND
+0x04 HCI_OGF_INFO
+0x05 HCI_OGF_STATUS
+0x06 HCI_OGF_TEST
+0x08 HCI_OGF_LOW_ENERGY
+0x3e HCI_OGF_LOGO_TESTING
+0x3f HCI_OGF_VENDOR_SPECIFIC
+)
+
+// HCI link control opcode command field values, OGF=1
+(
+0x01 HCI_INQUIRY 
+0x02 HCI_INQUIRY_CANCEL 
+0x03 HCI_PERIODIC_INQUIRY_MODE 
+0x04 HCI_EXIT_PERIODIC_INQUIRY_MODE 
+0x05 HCI_CREATE_CONNECTION 
+0x06 HCI_DISCONNECT 
+0x07 HCI_ADD_SCO_CONNECTION 
+0x08 HCI_CREATE_CONNECTION_CANCEL
+0x09 HCI_ACCEPT_CONNECTION 
+0x0A HCI_REJECT_CONNECTION 
+0x0B HCI_LINK_KEY_REQUEST_REPLY 
+0x0C HCI_LINK_KEY_REQUEST_NEGATIVE_REPLY 
+0x0D HCI_PIN_CODE_REQUEST_REPLY 
+0x0E HCI_PIN_CODE_REQUEST_NEGATIVE_REPLY 
+0x0F HCI_CHANGE_CONNECTION_PACKET_TYPE 
+0x11 HCI_AUTHENTICATION_REQUESTED 
+0x13 HCI_SET_CONNECTION_ENCRYPTION 
+0x15 HCI_CHANGE_CONNECTION_LINK_KEY 
+0x17 HCI_MASTER_LINK_KEY 
+0x19 HCI_REMOTE_NAME_REQUEST 
+0x1A HCI_REMOTE_NAME_REQUEST_CANCEL
+0x1B HCI_READ_REMOTE_SUPPORTED_FEATURES 
+0x1C HCI_READ_REMOTE_EXT_FEATURES 
+0x1D HCI_READ_REMOTE_VERSION_INFORMATION 
+0x1F HCI_READ_CLOCK_OFFSET 
+0x20 HCI_READ_LMP_HANDLE
+0x28 HCI_SETUP_SCO_CONNECTION
+0x29 HCI_ACCEPT_SCO_CONNECTION
+0x2A HCI_REJECT_SCO_CONNECTION
+0x2B HCI_IO_CAP_REQUEST_REPLY
+0x2C HCI_USER_CONFIRMATION_REQUEST_REPLY
+0x2D HCI_USER_CONFIRMATION_REQUEST_NEGATIVE_REPLY
+0x2E HCI_USER_PASSKEY_REQUEST_REPLY
+0x2F HCI_USER_PASSKEY_REQUEST_NEGATIVE_REPLY
+0x30 HCI_REMOTE_OOB_DATA_REQUEST_REPLY
+0x33 HCI_REMOTE_OOB_DATA_REQUEST_NEGATIVE_REPLY
+0x34 HCI_IO_CAPABILITY_REQUEST_NEGATIVE_REPLY
+0x35 HCI_CREATE_PHYSICAL_LINK
+0x36 HCI_ACCEPT_PHYSICAL_LINK
+0x37 HCI_DISCONNECT_PHYSICAL_LINK
+0x38 HCI_CREATE_LOGICAL_LINK
+0x39 HCI_ACCEPT_LOGICAL_LINK
+0x3A HCI_DISCONNECT_LOGICAL_LINK
+0x3B HCI_LOGICAL_LINK_CANCEL
+0x3C HCI_FLOW_SPEC_MODIFY
+0x3D HCI_ENHANCED_SETUP_SYNCHRONOUS_CONNECTION
+0x3E HCI_ENHANCED_ACCEPT_SYNCHRONOUS_CONNECTION_REQUEST
+0x3F HCI_TRUNCATED_PAGE
+0x40 HCI_TRUNCATED_PAGE_CANCEL
+0x41 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST
+0x42 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST_RECEIVE
+0x43 HCI_START_SYNCHRONIZATION_TRAIN
+0x44 HCI_RECEIVE_SYNCHRONIZATION_TRAIN
+0x45 HCI_REMOTE_OOB_EXTENDED_DATA_REQUEST_REPLY
+)
+
+
+// HCI link policy commands OCF value, OGF=2
+(
+0x01 HCI_HOLD_MODE 
+0x03 HCI_SNIFF_MODE 
+0x04 HCI_EXIT_SNIFF_MODE 
+0x05 HCI_PARK_MODE 
+0x06 HCI_EXIT_PARK_MODE 
+0x07 HCI_QOS_SETUP 
+0x09 HCI_ROLE_DISCOVERY 
+0x0B HCI_SWITCH_ROLE 
+0x0C HCI_READ_LINK_POLICY_SETTINGS 
+0x0D HCI_WRITE_LINK_POLICY_SETTINGS 
+0x0e HCI_READ_DEFAULT_LINK_POLICY_SETTINGS
+0x0f HCI_WRITE_DEFAULT_LINK_POLICY_SETTINGS
+0x10 HCI_FLOW_SPECIFICATION
+0x11 HCI_SNIFF_SUBRATING
+)
+
+// HCI host controller and baseband commands OCF values, OGF=3
+(
+0x01 HCI_SET_EVENT_MASK 
+0x03 HCI_RESET 
+0x05 HCI_SET_EVENT_FILTER 
+0x08 HCI_FLUSH 
+0x09 HCI_READ_PIN_TYPE 
+0x0A HCI_WRITE_PIN_TYPE 
+0x0B HCI_CREATE_NEW_UNIT_KEY 
+0x0D HCI_READ_STORED_LINK_KEY 
+0x11 HCI_WRITE_STORED_LINK_KEY 
+0x12 HCI_DELETE_STORED_LINK_KEY 
+0x13 HCI_WRITE_LOCAL_NAME 
+0x14 HCI_READ_LOCAL_NAME 
+0x15 HCI_READ_CONN_ACCEPT_TIMEOUT 
+0x16 HCI_WRITE_CONN_ACCEPT_TIMEOUT 
+0x17 HCI_READ_PAGE_TIMEOUT 
+0x18 HCI_WRITE_PAGE_TIMEOUT 
+0x19 HCI_READ_SCAN_ENABLE 
+0x1A HCI_WRITE_SCAN_ENABLE 
+0x1B HCI_READ_PAGE_SCAN_ACTIVITY 
+0x1C HCI_WRITE_PAGE_SCAN_ACTIVITY 
+0x1D HCI_READ_INQUIRY_SCAN_ACTIVITY 
+0x1E HCI_WRITE_INQUIRY_SCAN_ACTIVITY 
+0x1F HCI_READ_AUTHENTICATION_ENABLE 
+0x20 HCI_WRITE_AUTHENTICATION_ENABLE 
+0x21 HCI_READ_ENCRYPTION_MODE 
+0x22 HCI_WRITE_ENCRYPTION_MODE 
+0x23 HCI_READ_CLASS_OF_DEVICE 
+0x24 HCI_WRITE_CLASS_OF_DEVICE 
+0x25 HCI_READ_VOICE_SETTING 
+0x26 HCI_WRITE_VOICE_SETTING 
+0x27 HCI_READ_AUTOMATIC_FLUSH_TIMEOUT 
+0x28 HCI_WRITE_AUTOMATIC_FLUSH_TIMEOUT 
+0x29 HCI_READ_NUM_BROADCAST_RETRANSMISSIONS 
+0x2A HCI_WRITE_NUM_BROADCAST_RETRANSMISSIONS 
+0x2B HCI_READ_HOLD_MODE_ACTIVITY 
+0x2C HCI_WRITE_HOLD_MODE_ACTIVITY 
+0x2D HCI_READ_TRANSMIT_POWER_LEVEL 
+0x2E HCI_READ_SCO_FLOW_CONTROL_ENABLE 
+0x2F HCI_WRITE_SCO_FLOW_CONTROL_ENABLE 
+0x31 HCI_SET_CONTROLLER_TO_HOST_FLOW_CONTROL 
+0x33 HCI_HOST_BUFFER_SIZE 
+0x35 HCI_HOST_NUM_COMPLETED_PACKETS 
+0x36 HCI_READ_LINK_SUPERVISION_TIMEOUT 
+0x37 HCI_WRITE_LINK_SUPERVISION_TIMEOUT 
+0x38 HCI_READ_NUMBER_OF_SUPPORTED_IAC 
+0x39 HCI_READ_CURRENT_IAC_LAP 
+0x3A HCI_WRITE_CURRENT_IAC_LAP 
+0x3B HCI_READ_PAGE_SCAN_PERIOD_MODE 
+0x3C HCI_WRITE_PAGE_SCAN_PERIOD_MODE 
+0x3D HCI_READ_PAGE_SCAN_MODE 
+0x3E HCI_WRITE_PAGE_SCAN_MODE 
+0x3F HCI_SET_AFH_CHANNEL_CLASSIFICATION 
+
+
+0x42 HCI_READ_INQUIRY_SCAN_TYPE 
+0x43 HCI_WRITE_INQUIRY_SCAN_TYPE 
+0x44 HCI_READ_INQUIRY_MODE 
+0x45 HCI_WRITE_INQUIRY_MODE 
+0x46 HCI_READ_PAGE_SCAN_TYPE 
+0x47 HCI_WRITE_PAGE_SCAN_TYPE 
+
+0x48 HCI_READ_AFH_CHANNEL_ACCESSMENT_MODE 
+0x49 HCI_WRITE_AFH_CHANNEL_ACCESSMENT_MODE 
+0x51 HCI_READ_EXTENDED_INQUIRY_RESPONSE
+0x52 HCI_WRITE_EXTENDED_INQUIRY_RESPONSE
+0x53 HCI_REFRESH_ENCRYPTION_KEY
+0x55 HCI_READ_SIMPLE_PAIRING_MODE
+0x56 HCI_WRITE_SIMPLE_PAIRING_MODE
+0x57 HCI_READ_LOCAL_OOB_DATA
+0x58 HCI_READ_INQUIRY_RESPONSE_TRANSMIT_POWER_LEVEL
+0x59 HCI_WRITE_INQUIRY_TRANSMIT_POWER_LEVEL
+0x60 HCI_SEND_KEYPRESS_NOTIFICATION
+0x5A HCI_READ_DEFAULT_ERRONEOUS_DATA_REPORTING
+0x5B HCI_WRITE_DEFAULT_ERRONEOUS_DATA_REPORTING
+0x5F HCI_ENHANCED_FLUSH
+0x61 HCI_READ_LOGICAL_LINK_ACCEPT_TIMEOUT
+0x62 HCI_WRITE_LOGICAL_LINK_ACCEPT_TIMEOUT
+0x63 HCI_SET_EVENT_MASK_PAGE_2
+0x64 HCI_READ_LOCATION_DATA
+0x65 HCI_WRITE_LOCATION_DATA
+0x66 HCI_READ_FLOW_CONTROL_MODE
+0x67 HCI_WRITE_FLOW_CONTROL_MODE
+0x68 HCI_READ_ENHANCE_TRANSMIT_POWER_LEVEL
+0x69 HCI_READ_BEST_EFFORT_FLUSH_TIMEOUT
+0x6A HCI_WRITE_BEST_EFFORT_FLUSH_TIMEOUT
+0x6B HCI_SHORT_RANGE_MODE
+0x6C HCI_READ_LE_HOST_SUPPORT
+0x6D HCI_WRITE_LE_HOST_SUPPORT
+0x6E HCI_SET_MWS_CHANNEL_PARAMETERS
+0x6F HCI_SET_EXTERNAL_FRAME_CONFIGURATION
+0x70 HCI_SET_MWS_SIGNALING
+0x71 HCI_SET_MWS_TRANSPORT_LAYER
+0x72 HCI_SET_MWS_SCAN_FREQUENCY_TABLE
+0x73 HCI_SET_MWS_PATTERN_CONFIGURATION
+0x74 HCI_SET_RESERVED_LT_ADDR
+0x75 HCI_DELETE_RESERVED_LT_ADDR
+0x76 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST_DATA
+0x77 HCI_READ_SYNCHRONIZATION_TRAIN_PARAMETERS
+0x78 HCI_WRITE_SYNCHRONIZATION_TRAIN_PARAMETERS
+0x79 HCI_READ_SECURE_CONNECTIONS_HOST_SUPPORT
+0x7A HCI_WRITE_SECURE_CONNECTIONS_HOST_SUPPORT
+0x7B HCI_READ_AUTHENTICATED_PAYLOAD_TIMEOUT
+0x7C HCI_WRITE_AUTHENTICATED_PAYLOAD_TIMEOUT
+0x7D HCI_READ_LOCAL_OOB_EXTENDED_DATA
+0x7E HCI_READ_EXTENDED_PAGE_TIMEOUT
+0x7F HCI_WRITE_EXTENDED_PAGE_TIMEOUT
+0x80 HCI_READ_EXTENDED_INQUIRY_LENGTH
+0x81 HCI_WRITE_EXTENDED_INQUIRY_LENGTH
+)
+
+
+// HCI informational parameters OCF values, OGF=4
+(
+0x01 HCI_READ_LOCAL_VERSION_INFORMATION 
+0x02 HCI_READ_LOCAL_SUPPORTED_COMMANDS
+0x03 HCI_READ_LOCAL_SUPPORTED_FEATURES 
+0x04 HCI_READ_LOCAL_EXT_FEATURES 
+0x05 HCI_READ_BUFFER_SIZE 
+0x07 HCI_READ_COUNTRY_CODE 
+0x09 HCI_READ_BD_ADDR 
+0x0A HCI_REJECT_CONNECTION_REQUEST
+0x0B HCI_READ_LOCAL_SUPPORTED_CODECS
+)
+
+// HCI status parameters OCF values, OGF=5
+(
+0x01 HCI_READ_FAILED_CONTACT_COUNTER 
+0x02 HCI_RESET_FAILED_CONTACT_COUNTER 
+0x03 HCI_GET_LINK_QUALITY 
+0x05 HCI_READ_RSSI 
+0x06 HCI_READ_AFH_CHANNEL_MAP
+0x07 HCI_READ_BD_CLOCK
+0x08 HCI_READ_ENCRYPTION_KEY_SIZE
+0x09 HCI_READ_LOCAL_AMP_INFO
+0x0A HCI_READ_LOCAL_AMP_ASSOC
+0x0B HCI_WRITE_REMOTE_AMP_ASSOC
+0x0C HCI_GET_MWS_TRANSPORT_LAYER_CONFIGURATION
+0x0D HCI_SET_TRIGGERED_CLOCK_CAPTURE
+)
+
+// HCI testing command OCF values, OGF=6
+(
+0x01 HCI_READ_LOOPBACK_MODE 
+0x02 HCI_WRITE_LOOPBACK_MODE 
+0x03 HCI_ENABLE_DEVICE_UNDER_TEST_MODE 
+0x04 HCI_WRITE_SIMPLE_PAIRING_DEBUG_MODE
+0x07 HCI_ENABLE_AMP_RECEIVER_REPORTS
+0x08 HCI_AMP_TEST_END
+0x09 HCI_AMP_TEST
+0x0A HCI_WRITE_SECURE_CONNECTIONS_TEST_MODE
+)
+
+// HCI vendor specific command OCF values -OGF=3F
+(
+0x01 HCI_WRITE_BD_ADDR 
+0x02 HCI_READ_INQUIRY_RESPONSE_TIMEOUT 
+0x03 HCI_WRITE_INQUIRY_RESPONSE_TIMEOUT 
+0x04 HCI_READ_PAGE_SCAN_REPETITION_MODE 
+0x05 HCI_WRITE_PAGE_SCAN_REPETITION_MODE 
+0x06 HCI_READ_PAGE_RESPONSE_TIMEOUT 
+0x07 HCI_WRITE_PAGE_RESPONSE_TIMEOUT 
+0x08 HCI_READ_NEW_CONNECTION_TIMEOUT 
+0x09 HCI_WRITE_NEW_CONNECTION_TIMEOUT 
+0x0a HCI_INITIALIZE_BASEBAND 
+0x0b HCI_WRITE_LOCAL_SUPPORTED_FEATURES 
+0x0c HCI_WRITE_PARK_PARAMETERS 
+0x0d HCI_READ_PARK_PARAMETERS 
+0x0e HCI_WRITE_QUALITY_OF_SERVICE 
+0x0f HCI_NOT_USED 
+0x10 HCI_MODIFY_BEACON_PARAMETERS 
+0x11 HCI_UNPARK_USING_PM_ADDR 
+0x12 HCI_WRITE_HOPPING_CHANNELS 
+0x13 HCI_SLEEP_FOREVER_MODE 
+0x14 HCI_WRITE_AUTO_PAGE_SCAN_ENABLE 
+0x15 HCI_READ_AUTO_PAGE_SCAN_ENABLE 
+0x16 HCI_SET_ENCRYPTION_KEY_SIZE 
+0x17 HCI_INVALIDATE_FLASH_AND_REBOOT 
+0x18 HCI_UPDATE_UART_BAUD_RATE 
+0x19 HCI_WRITE_GPIO_1_4_AS_OUTPUT 
+0x1A HCI_WRITE_GPIO_2_LED 
+0x1B HCI_SET_TESTMODE_TYPE 
+0x1C HCI_WRITE_SCO_PCM_INT_PARAM 
+0x1D HCI_READ_SCO_PCM_INT_PARAM 
+0x1E HCI_WRITE_PCM_DATA_FORMAT_PARAM 
+0x1F HCI_READ_PCM_DATA_FORMAT_PARAM 
+0x20 HCI_WRITE_COMFORT_NOISE_PARAM 
+0x21 HCI_READ_COMFORT_NOISE_PARAM 
+0x22 HCI_WRITE_SCO_TS 
+0x23 HCI_READ_SCO_TS 
+0x24 HCI_WRITE_PCM_LOOPBACK_MODE 
+0x25 HCI_READ_PCM_LOOPBACK_MODE 
+0x26 HCI_SET_TRANSMIT_POWER 
+0x27 HCI_SET_SLEEPMODE_PARAM 
+0x28 HCI_READ_SLEEPMODE_PARAM 
+0x29 HCI_SLEEPMODE_CMD 
+0x2A HCI_DELAY_PERIPHERAL_SCO_STARTUP 
+0x2B HCI_WRITE_RECEIVE_ONLY 
+0x2C HCI_WRITE_RATE_CONTROL 
+0x2D HCI_TX_UNMOD_CARRIER 
+0x2E HCI_DOWNLOAD_MINIDRIVER 
+0x2F HCI_CRYSTAL_PPM 
+0x30 HCI_SET_POWER_AMP_BIAS 
+0x31 HCI_SET_HAM_BEHAVIOR 
+0x32 HCI_SET_AFH_BEHAVIOR 
+0x33 HCI_READ_USER_DEFINED_NVRAM 
+0x34 HCI_ENABLE_RADIO 
+0x35 HCI_READ_DIAGNOSTIC_INFO 
+0x36 HCI_GET_HID_DEVICE_LIST 
+0x37 HCI_ADD_HID_DEVICE 
+0x38 HCI_READ_APP_FW_CONFIG_VERSION 
+0x39 HCI_DELETE_HID_DEVICE 
+0x3B HCI_ENABLE_USB_HID_EMULATION 
+// 0x3A available
+// 0x3B available
+0x3C HCI_SEND_LMPDU 
+0x3D HCI_AUTO_PAIR_REQ 
+0x3E HCI_READ_VS_EXTENSION 
+0x3F HCI_WRITE_VS_EXTENSION 
+
+0x77 HCI_OPCODE_FC77
+0x79 HCI_OPCODE_FC79
+0xC4 HCI_DOWNLOAD_PATCH
+0xCC HCI_OPCODE_FCCC
+
+0x00 HCI_VENDOR_CMD_RESET
+0x01 HCI_VENDOR_CMD_CHIPID
+0x02 HCI_VENDOR_CMD_BAUD
+0x03 HCI_VENDOR_CMD_PATCH
+0x04 HCI_VENDOR_CMD_PATCH_DONE
+0x05 HCI_VENDOR_CMD_ECHO
+0x06 HCI_VENDOR_CMD_BDADDR
+
+0x07 HCI_VENDOR_CMD_ENTER_LPM
+0x08 HCI_VENDOR_CMD_COMMU_READY
+
+0x10 HCI_VENDOR_CMD_MEM
+0x11 HCI_VENDOR_CMD_EEP
+
+0X12 HCI_VENDOR_CMD_PATCH_SEC_INIT
+0X13 HCI_VENDOR_CMD_PATCH_SEC
+)
+
+//HCI LE controller command OCF values, OGF=8
+(
+0x01 HCI_LE_SET_EVENT_MASK
+0x02 HCI_LE_READ_BUFFER_SIZE
+0x03 HCI_LE_READ_LOCAL_SUPPORTED_FEATURES
+0x05 HCI_LE_SET_RANDOM_ADDRESS
+0x06 HCI_LE_SET_ADVERTISING_PARAMETERS
+0x07 HCI_LE_READ_ADVERTISING_CHANNEL_TX_POWER
+0x08 HCI_LE_SET_ADVERTISING_DATA
+0x09 HCI_LE_SET_SCAN_RESPONSE_DATA
+0x0A HCI_LE_SET_ADVERTISE_ENABLE
+0x0B HCI_LE_SET_SCAN_PARAMETERS
+0x0C HCI_LE_SET_SCAN_ENABLE
+0x0D HCI_LE_CREATE_CONNECTION
+0x0E HCI_LE_CREATE_CONNECTION_CANCEL
+0x0F HCI_LE_READ_WHITE_LIST_SIZE
+0x10 HCI_LE_CLEAR_WHITE_LIST
+0x11 HCI_LE_ADD_DEVICE_TO_WHITE_LIST
+0x12 HCI_LE_REMOVE_DEVICE_FROM_WHITE_LIST
+0x13 HCI_LE_CONNECTION_UPDATE
+0x14 HCI_LE_SET_HOST_CHANNEL_CLASSIFICATION
+0x15 HCI_LE_READ_CHANNEL_MAP
+0x16 HCI_LE_READ_REMOTE_USED_FEATURES
+0x17 HCI_LE_ENCRYPT
+0x18 HCI_LE_RAND
+0x19 HCI_LE_START_ENCRYPTION
+0x1A HCI_LE_LONG_TERM_KEY_REQUEST_REPLY
+0x1B HCI_LE_LONG_TERM_KEY_REQUEST_NEGATIVE_REPLY
+0x1C HCI_LE_READ_SUPPORTED_STATES
+0x1D HCI_LE_RECEIVER_TEST
+0x1E HCI_LE_TRANSMITTER_TEST
+0x1F HCI_LE_TEST_END
+0x20 HCI_LE_REMOTE_CONNECTION_PARAMETER_REQUEST_REPLY
+0x21 HCI_LE_REMOTE_CONNECTION_PARAMETER_REQUEST_NEGATIVE_REPLY
+)
+// HCI event code
+(
+0x01 HCI_EVENT_INQUIRY_COMPLETE
+0x02 HCI_EVENT_INQUIRY_RESULT
+0x03 HCI_EVENT_CONNECTION_COMPLETE
+0x04 HCI_EVENT_CONNECTION_REQUEST
+0x05 HCI_EVENT_DISCONNECTION_COMPLETE
+0x06 HCI_EVENT_AUTHENTICATION_COMPLETE
+0x07 HCI_EVENT_REMOTE_NAME_REQUEST_COMPLETE
+0x08 HCI_EVENT_ENCRYPTION_CHANGE_COMPLETE
+0x09 HCI_EVENT_CHANGE_CONNECTION_LINK_KEY_COMPLETE
+0x0A HCI_EVENT_MASTER_LINK_KEY_COMPLETE
+0x0B HCI_EVENT_READ_REMOTE_FEATURES_COMPLETE
+0x0C HCI_EVENT_READ_REMOTE_VERSION_INFORMATION_COMPLETE
+0x0D HCI_EVENT_QOS_SETUP_COMPLETE
+0x0E HCI_EVENT_COMMAND_COMPLETE
+0x0F HCI_EVENT_COMMAND_STATUS
+0x10 HCI_EVENT_HARDWARE_ERROR
+0x11 HCI_EVENT_FLUSH_OCCURRED
+0x12 HCI_EVENT_ROLE_CHANGE
+0x13 HCI_EVENT_NUM_COMPLETED_PACKETS
+0x14 HCI_EVENT_MODE_CHANGE
+0x15 HCI_EVENT_RETURN_LINK_KEYS
+0x16 HCI_EVENT_PIN_CODE_REQUEST
+0x17 HCI_EVENT_LINK_KEY_REQUEST
+0x18 HCI_EVENT_LINK_KEY_NOTIFICATION
+0x19 HCI_EVENT_LOOPBACK_COMMAND
+0x1A HCI_EVENT_DATA_BUFFER_OVERFLOW
+0x1B HCI_EVENT_MAX_SLOTS_CHANGE
+0x1C HCI_EVENT_READ_CLOCK_OFFSET_COMPLETE
+0x1D HCI_EVENT_CONNECTION_PACKET_TYPE_CHANGED
+0x1E HCI_EVENT_QOS_VIOLATION
+0x1F HCI_EVENT_PAGE_SCAN_MODE_CHANGE
+0x20 HCI_EVENT_PAGE_SCAN_REPETITION_MODE_CHANGE
+0x21 HCI_EVENT_FLOW_SPECIFICATION_COMPLETE
+0x22 HCI_EVENT_INQUIRY_RESULT_WITHRSSI
+0x23 HCI_EVENT_READ_REMOTE_EXT_FEATURES_COMPLETE
+0x2C HCI_EVENT_SCO_CONNECTION_COMPLETE
+0x2D HCI_EVENT_SCO_CONNECTION_CHANGED
+0x2E HCI_EVENT_SNIFF_SUBRATING
+0x2F HCI_EVENT_EXT_INQUIRY_RESULT
+0x30 HCI_EVENT_ENCRYPT_KEY_REFRESH_COMPLETE
+0x31 HCI_EVENT_IO_CAP_REQ
+0x32 HCI_EVENT_IO_CAP_RESPONSE
+0x33 HCI_EVENT_USER_CONFIRMATION_REQUEST
+0x34 HCI_EVENT_UESR_PASSKEY_REQUEST
+0x35 HCI_EVENT_REMOTE_OOB_DATA_REQUEST
+0x36 HCI_EVENT_SIMPLE_PAIRING_COMPLETE
+0x38 HCI_EVENT_LINK_SUPERVISION_TIMEOUT_CHANGED
+0x39 HCI_EVENT_ENHANCED_FLUSH_COMPLETE
+0x3B HCI_EVENT_USER_PASSKEY_NOTIFICATION
+0x3C HCI_EVENT_KEYPRESS_NOTIFICATION
+0x3D HCI_EVENT_REMOTE_HOST_SUPPORTED_FEATURES_NOTIFICATION 
+0x3E HCI_EVENT_LE_META_EVENT
+0x40 HCI_EVENT_PHYSICAL_LINK_COMPLETE
+0x41 HCI_EVENT_CHANNEL_SELECTED
+0x42 HCI_EVENT_DISCONNECTION_PHYSICAL_LINK_COMPLETE
+0x43 HCI_EVENT_PHYSICAL_LINK_LOSS_EARLY_WARNING
+0x44 HCI_EVENT_PHYSICAL_LINK_RECOVERY
+0x45 HCI_EVENT_LOGICAL_LINK_COMPLETE
+0x46 HCI_EVENT_DISCONNECTION_LOGICAL_LINK_COMPLETE
+0x47 HCI_EVENT_FLOW_SPEC_MODIFY_COMPLETE
+0x48 HCI_EVENT_NUMBER_OF_COMPLETED_DATA_BLOCKS
+0x49 HCI_EVENT_AMP_START_TEST
+0x4A HCI_EVENT_AMP_TEST_END
+0x4B HCI_EVENT_AMP_RECEIVER_REPORT
+0x4C HCI_EVENT_SHORT_RANGE_MODE_CHANGE_COMPLETE
+0x4D HCI_EVENT_AMP_STATUS_CHANGE
+0x4E HCI_EVENT_TRIGGERED_CLOCK_CAPTURE
+0x4F HCI_EVENT_SYNCHRONIZATION_TRAIN_COMPLETE
+0x50 HCI_EVENT_SYNCHRONIZATION_TRAIN_RECEIVED
+0x51 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_RECEIVE
+0x52 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_TIMEOUT
+0x53 HCI_EVENT_TRUNCATED_PAGE_COMPLETE
+0x54 HCI_EVENT_SLAVE_PAGE_RESPONSE_TIMEOUT
+0x55 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_CHANNEL_MAP_CHANGE
+0x56 HCI_EVENT_INQUIRY_RESPONSE_NOTIFICATION
+0x57 HCI_EVENT_AUTHENTICATED_PAYLOAD_TIMEOUT_EXPIRED
+
+0xFE HCI_EVENT_LOGO_TESTING
+0xFF HCI_EVENT_VENDOR_SPECIFIC
+)
+(
+0x01 HCI_VENDOR_EVENT_COMMU_READY
+)
+//HCI LE SUBEVENT CODE
+(
+0x01 HCI_LE_SUBEVENT_CONN_COMPLETE
+0x02 HCI_LE_SUBEVENT_ADV_REPORT
+0x03 HCI_LE_SUBEVENT_CONN_UPDATE_COMPLETE
+0x04 HCI_LE_SUBEVENT_REMOTE_FEATURE_COMPLETE
+0x05 HCI_LE_SUBEVENT_LTK_REQUEST
+0x06 HCI_LE_SUBEVENT_REMOTE_CONN_PARAM_REQ
+)
+
+(
+0x00 HCI_LPM_OFF
+0x01 HCI_LPM_ON
+)
+
+
+(
+33 HOST_WAKE_TIME
+)
+
+(
+1 HCI_RX_WAKE
+0 HCI_RX_READY
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/kscan_peipherals.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/kscan_peipherals.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/kscan_peipherals.format	(working copy)
@@ -0,0 +1,35 @@
+
+
+
+
+
+
+//0 mem_kscan_head_ptr
+//1 mem_col_num
+//1 mem_row_num
+//4 mem_col_conf_pin
+//4 mem_row_conf_pin
+//1 mem_row_count
+//1 mem_count_shift
+//2 mem_kscan_value_temp
+//2 mem_kscan_lastvalue
+//2 mem_kscan_value
+//4 mem_btclk_kscan
+//1 mem_btclk_kscan_interval
+
+
+0x00 KEYSCAN_OFFECT_COL_NUM
+0x01 KEYSCAN_OFFECT_ROW_NUM
+0x02 KEYSCAN_OFFECT_COL_CONF_PIN
+0x06 KEYSCAN_OFFECT_ROW_CONF_PIN
+
+0x0a KEYSCAN_OFFECT_ROW_COUNT
+0x0b KEYSCAN_OFFECT_SHIFT_COUNT
+
+0X0C KEYSCAN_OFFECT_VALUE_TEMP
+0X0E KEYSCAN_OFFECT_LASVALUE
+0X10 KEYSCAN_OFFECT_VALUE
+0x12 KEYSCAN_OFFECT_BTCLK
+0x16 KEYSCAN_OFFECT_BTCLK_INTERVAL
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/l2cap.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/l2cap.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/l2cap.format	(working copy)
@@ -0,0 +1,442 @@
+
+memalloc(
+0 mem_l2cap_mem_start
+// L2CAP RX 
+2 mem_l2cap_rxbuff1_len
+2 mem_l2cap_rxbuff2_len
+2 mem_l2cap_rxbuff_new
+1 mem_l2cap_rxbuff_inuse
+2 mem_l2cap_payload_ptr
+2 mem_l2cap_rx_pkt_length
+2 mem_l2cap_rx_cid
+1 mem_l2cap_rx_done
+
+
+
+// L2CAP TX Signal channel
+2 mem_l2cap_signal_tx_buff_ptr
+2 mem_l2cap_signal_tx_payload_ptr
+2 mem_l2cap_signal_tx_length
+// L2CAP TX SDP channel
+2 mem_sdp_tx_buff_ptr
+2 mem_sdp_tx_payload_ptr
+2 mem_sdp_tx_pkt_length
+// L2CAP TX RFCOMM channel
+2 mem_rfcomm_tx_buff_ptr
+2 mem_rfcomm_tx_payload_ptr
+2 mem_rfcomm_tx_pkt_length
+
+
+
+//L2CAP Util
+
+2 memL2CAP_T1
+
+1 mem_CONTROL_tasks
+1 mem_send_config_req
+
+
+1 mem_config_identifier
+2 mem_config_req_dest_CID
+1 mem_rfcomm_malloc_fail_flag
+
+//L2CAP STATE MACHINE
+1 mem_message_to_uppersm
+1 mem_upper_sm_remote_page
+1 mem_upper_sm_reconn
+1 mem_upper_sm_ss
+
+
+64 mem_tx_malloc_log
+0 mem_l2cap_mem_end
+
+
+2 mem_scid
+2 mem_cmd_length
+2 mem_tt2
+2 mem_tt3
+2 mem_id
+2 mem_psm
+
+
+4 mem_l2cap_sdpres_delay_time
+)
+
+xmemalloc(
+0 mem_l2cap_xmem_start
+//*******************L2CAP TX MULTI-PACKET*********************//
+2 mem_l2cap_tx_multi_offset //0 means single packet
+
+//*******************CHANNEL ID*********************//
+2 mem_sdp_remote_cid
+2 mem_rfcomm_remote_cid
+2 mem_hid_ctrl_remote_cid
+2 mem_hid_int_remote_cid
+//*******************CHANNEL STATE*********************//
+1 mem_sdp_state
+1 mem_rfcomm_state
+1 mem_hid_control_state
+1 mem_hid_interrupt_state
+1 mem_spp_state
+1 mem_ML2CAP_comm_id
+
+//*******************L2CAP malloc********************//
+1 mem_used_map
+0 mem_tx_fifo0
+1 mem_tx_fifo0_map
+2 mem_tx_fifo0_ptr
+0 mem_tx_fifo1
+1 mem_tx_fifo1_map
+2 mem_tx_fifo1_ptr
+0 mem_tx_fifo2
+1 mem_tx_fifo2_map
+2 mem_tx_fifo2_ptr
+0 mem_tx_fifo3
+1 mem_tx_fifo3_map
+2 mem_tx_fifo3_ptr
+0 mem_tx_fifo_end
+256 mem_l2cap_lpm_txbuf
+//*******************MISC*********************//
+1 mem_l2cap_flow_ctrl_flag
+1 mem_l2cap_pending_item
+0 mem_l2cap_xmem_end
+
+)
+
+
+//mem_l2cap_lpm_txbuf
+(
+256 l2cap_lpm_txbuf_len
+)
+
+(
+4 L2CAP_TX_FIFO_SIZE
+8 L2CAP_TX_BUFF_CNT
+
+)
+(
+0x0002 L2CAP_SIG_EXT_FEATRUE
+0x0003 L2CAP_SIG_FIX_FEATRUE
+)
+
+
+(
+0 HS_IDLE
+1 AG_INIT_CALL
+2 HS_INIT_CALL
+)
+(
+0 M_ACL_LINK_ABSENT
+1 M_ACL_LINK_EXIST
+)
+
+(
+0 L2CAP_INUSE_BUFF1
+1 L2CAP_INUSE_BUFF2
+)
+/* upper layer interface w/ lower layer */
+(
+1 MAX_NUM_LINKS_ALLOWED
+1 MAX_NUM_SCO_ALLOWED
+1 ACL_LINK_PRESENT
+0 ACL_LINK_ABSENT
+)
+(
+1 L2CAP_RX_DONE 
+0 L2CAP_RX_CLEAR
+)
+/* Scheduler */
+(
+0 L2CAP_DISCONNECT_INTERRUPT
+1 RFCOMM_wants_service
+2 L2CAP_sig_Tx_buff_full
+3 RFCOMM_Tx_buff_full
+4 SDP_Tx_buff_full
+5 got_complete_L2CAP_pkt	
+6 L2CAP_init_Config_Req
+7 L2CAP_DISCONNECT_CONTROL
+)
+
+/* mem_CONTROL_tasks2 */
+(
+0 UI_NEED_SERVICE
+)
+/* L2CAP logic channel identifiers (2 bytes) p.261 */
+(
+0x0001 L2CAP_signal_channel
+0x0050 L2CAP_SDP_channel
+0x0051 L2CAP_RFCOMM_channel
+0x0052 L2CAP_HID_Control_channel   
+0x0053 L2CAP_HID_Interrupt_channel
+0x0077 L2CAP_AVDTP_signal_channel		//------avdtp
+0x0078 L2CAP_AVDTP_media_channel
+0x0079 L2CAP_AVDTP_report_channel
+0x0080 L2CAP_AVDTP_recovery_channel
+0x00dd L2CAP_AVCTP_Control_channel
+)
+/* L2CAP signalling command codes (1 byte) p.284 */
+(
+0x00 reserved
+0x01 signal_cmd_reject
+0x02 signal_connect_req
+0x03 signal_connect_rsp
+0x04 signal_config_req
+0x05 signal_config_rsp
+0x06 signal_disconnect_req
+0x07 signal_disconnect_rsp
+0x08 signal_echo_req
+0x09 signal_echo_rsp
+0x0a signal_info_req
+0x0b signal_info_rsp
+)
+/* L2CAP signal_command_reject reason code (2 bytes), p.285 */
+(
+0x0000 cmd_not_understood
+0x0001 signalling_MTU_exceeded
+0x0002 invalid_CID_in_req
+)
+/* L2CAP PSM values used in signal_connect_req (2 bytes), p.286 */
+(
+0x0001 PSM_SDP
+0x0003 PSM_RFCOMM
+0x0005 PSM_TCS
+0x0011 PSM_HID_control
+0x0013 PSM_HID_interrupt
+0x0017 PSM_AVCTP
+0x0019 PSM_AVDTP
+)
+/* L2CAP connection response result code (2 bytes), p.288 */
+(
+0x0000 L2CAP_connect_successful
+0x0001 L2CAP_connect_pending
+0x0002 L2CAP_connect_refused_PSM_unsupported
+0x0003 L2CAP_connect_refused_security_block
+0x0004 L2CAP_connect_refused_no_resources
+)
+/* L2CAP connection status values (2 bytes), p.288 */
+(
+0x0000 L2CAP_no_info_available
+0x0001 L2CAP_authentication_pending
+0x0002 L2CAP_authorization_pending
+)
+/* L2CAP configuration response result code (2 bytes), p.292 */
+(
+0x0000 L2CAP_config_success
+0x0001 L2CAP_config_failure_bad_parameters
+0x0002 L2CAP_config_failure_no_reason
+0x0003 L2CAP_config_failure_unknown_options
+)
+/* L2CAP constant definitions */
+(
+128 L2CAP_Rx_buff_size
+48  L2CAP_signal_Tx_buff_size
+128 SDP_Tx_buff_size
+128 RFCOMM_Tx_buff_size
+1 AM_ADDRESS
+3 DM1TYPE
+4 DH1TYPE
+11 DH3TYPE
+8 DVTYPE
+0 channel_state_closed
+1 channel_state_config
+2 channel_state_open
+0x0030 L2CAP_config_MTU_SDP
+0xffff L2CAP_config_ftimeout_SDP
+0x03e3 L2CAP_config_MTU_RFCOMM
+0xffff L2CAP_config_ftimeout_RFCOMM
+260 l2cap_max_pkt_len
+)
+
+(
+0 FAILURE
+1 SUCCESS
+2 IN_PROGRESS
+)
+(
+0x00	IDLE
+0x01	WAIT_4_BB_PAGE
+0x02	WAIT_4_LMP_CONN
+0x03	WAIT_4_SCO_CONN
+0x04	WAIT_4_SCO_KILLED
+)
+
+/*mem_master_mss*/
+(
+0 STOP_ENC
+1 SEND_SWITCH_REQ
+)
+(
+0 HF_HS_READY
+1 HF_AG_READY
+)
+/* mem_hf_state */
+(
+0 HF_STATE_WAITING_RFCOMM_CONN
+1 HF_STATE_HF_SEND_FEATURE
+2 HF_STATE_WAITING_AG_FEATURE_OK
+3 HF_STATE_HF_SEND_INDICATORS
+4 HF_STATE_WAITING_AG_INDICATORS_OK
+5 HF_STATE_HF_SEND_CURR_STATUS
+6 HF_STATE_WAITING_AG_STATUS_OK
+7 HF_STATE_HF_SEND_UPDATE_STATUS
+8 HF_STATE_WAITING_AG_UPDATE_STATUS_OK
+9 HF_STATE_CONNECTED
+0x0a HF_STATE_HF_SEND_RECEIVE_INFO
+0x0b HF_STATE_WAITING_AG_INFO
+0x0c HF_STATE_HF_SEND_AT_CLIP
+0x0d HF_STATE_WAITING_AT_CLIP
+0x0e HF_STATE_HF_SEND_AT_CCWA
+0x0f HF_STATE_WAITING_AT_CCWA
+)
+/*mem_hf_call_state*/
+(
+0 HF_CALL_STATE_INACTIVE
+1 HF_CALL_STATE_SETUP
+2 HF_CALL_STATE_ACTIVE 
+)
+/* mem_pairing_state bit definition */
+(
+0 PAIR_INQUIRY_START
+1 PAIR_INQUIRY_TIME_OUT
+2 PAIR_INQUIRY_FAILED
+3 PAIR_INQUIRY_SUCCESS
+4 PAIR_READY_CONN
+5 PAIR_WAIT_CANCEL_RESPONSE
+6 PAIR_CONN_SUCCESS
+7 PAIR_WAIT_DETACH
+)  
+
+/* mem_pairing_mode bit definition */
+(
+0 FORCE_AUTHENTICATION
+)
+/* mem_hid_protecol_type */
+(
+0 PROTECOL_BOOT /*default*/
+1 PROTECOL_REPORT
+)
+
+/* mem_upper_sm_reconn */
+(
+1 UPPERSM_SEND_SDP_CONN_REQ
+2 UPPERSM_SEND_SDP_CFG_REQ
+3 UPPERSM_SEND_SDP_HF_SS
+4 UPPERSM_SEND_SDP_DISC_REQ
+5 UPPERSM_SEND_RFCOMM_CONN_REQ
+6 UPPERSM_SEND_RFCOMM_CFG_REQ
+7 UPPERSM_SEND_SABM_CMD
+8 UPPERSM_SEND_DISC
+9 UPPERSM_SEND_WAIT
+10 UPPERSM_SEND_HID_CONTROL_CONN_REQ
+11 UPPERSM_SEND_HID_CONTROL_CFG_REQ
+12 UPPERSM_SEND_HID_INTERRUPT_CONN_REQ
+13 UPPERSM_SEND_HID_INTERRUPT_CFG_REQ
+14 UPPERSM_SEND_SDP_HS_SS
+15 UPPERSM_SEND_SDP_PBAP_SS
+16 UPPERSM_SEND_SDP_AVTARG_SS
+)
+/* mem_upper_sm_remote_page */
+(
+1 UPPERSM_RP_SEND_SDP_CONN_REQ
+2 UPPERSM_RP_SEND_SDP_CFG_REQ
+3 UPPERSM_RP_SEND_SDP_HF_SS
+4 UPPERSM_RP_SEND_SDP_HS_SS
+5 UPPERSM_RP_SEND_SDP_PBAP_SS
+6 UPPERSM_RP_SEND_SDP_AVTARG_SS
+7 UPPERSM_RP_SEND_SDP_DISC_REQ
+8 UPPERSM_RP_SEND_AVCTP_CONN_REQ
+9 UPPERSM_RP_SEND_AVCTP_CFG_REQ
+)
+
+/* mem_ML2CAP_flag */
+(
+0 MSCHEDULER_HID_CONTROL_CONN_DONE
+1 MSCHEDULER_HID_INTERRUPT_CONN_DONE
+2 MSCHEDULER_HID_CONTROL_CFG_REQ_DONE
+3 MSCHEDULER_HID_CONTROL_CFG_RSP_DONE
+4 MSCHEDULER_HID_INTERRUPT_CFG_REQ_DONE
+5 MSCHEDULER_HID_INTERRUPT_CFG_RSP_DONE
+6 MSCHEDULER_HID_CONTROL_DISC_DONE
+7 MSCHEDULER_HID_INTERRUPT_DISC_DONE
+)
+/*    ui event    --add by lj*/
+(
+0x00 UI_DATA_EVNET_NONE
+0x01 UI_DATA_EVNET_HID
+0x02 UI_DATA_EVNET_AVDTP_S
+0x03 UI_DATA_EVNET_AVDTP_M
+0x04 UI_DATA_EVNET_AVCTP
+0x05 UI_DATA_EVNET_HS
+0x06 UI_DATA_EVNET_HF
+0x07 UI_DATA_EVNET_SPP
+0x08 UI_DATA_EVNET_OBEX
+)
+/*    ui ack --add by lj*/
+(
+0x00 UI_DATA_TX_NONE
+0x01 UI_DATA_TX_HID
+0x02 UI_DATA_TX_AVDTP_S
+0x03 UI_DATA_TX_AVDTP_M
+0x04 UI_DATA_TX_AVCTP
+0x05 UI_DATA_TX_HS
+0x06 UI_DATA_TX_HF
+0x07 UI_DATA_TX_SPP
+0x08 UI_DATA_TX_OBEX
+0x10 ACL_TX_L2CAP_SIGNAL
+0x11 ACL_TX_SDP
+0x12 ACL_TX_RFCOMM
+
+)
+
+(
+0 L2CAP_SDP_interface_conn
+1 L2CAP_SDP_interface_cfg
+)
+
+(                                   
+0 L2CAP_CHANNEL_STATE_CONN_REQ      
+1 L2CAP_CHANNEL_STATE_CONN_RES      
+2 L2CAP_CHANNEL_STATE_SND_CFG_REQ   
+3 L2CAP_CHANNEL_STATE_SND_CFG_RES   
+4 L2CAP_CHANNEL_STATE_RCV_CFG_REQ   
+5 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+6 L2CAP_CHANNEL_RFCOMM_ONLY_SABM
+7 L2CAP_CHANNEL_RFCOMM_ONLY_UA
+6 L2CAP_CHANNEL_AVDTP_SIGNAL_INIT //set avdtp init complete
+6 L2CAP_CHANNEL_HID_HANDSHAKE_DONE
+0x3f L2CAP_CHANNEL_SETUP_COMPLETE
+0x7f L2CAP_CHANNEL_AVDTP_SIGNAL_COMPLETE
+0xff L2CAP_CHANNEL_RFCOMM_DLCI0_OPENED
+)                                     
+
+/*  AVDTP---lj*/
+(
+0 L2CAP_AVDTP_SIGNAL_CONNECT
+1 L2CAP_AVDTP_SIGNAL_CONFIG
+2 L2CAP_AVDTP_MEDIA_CONNECT
+3 L2CAP_AVDTP_MEDIA_CONFIG
+4 L2CAP_AVDTP_REPORT_CONNECT
+5 L2CAP_AVDTP_REPORT_CONFIG
+6 L2CAP_AVDTP_RECOVERY_CONNECT
+7 L2CAP_AVDTP_RECOVERY_CONFIG
+)
+/*  AVCTP---lj*/
+(
+0 L2CAP_AVCTP_SIGNAL_CONNECT
+1 L2CAP_AVCTP_SIGNAL_CONFIG
+)
+
+127 L2CAP_SIGNAL_MALLOC_SIZE
+
+//1 mem_rfcomm_malloc_fail_flag
+(
+0 RFCOMM_MALLOC_SUCCEED
+1 RFCOMM_MALLOC_FAIL
+)
+
+//mem_l2cap_flow_ctrl_flag
+(
+0 L2CAP_FLOW_CTRL_DISABLE
+1 L2CAP_FLOW_CTRL_ENABLE
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/le.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/le.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/le.format	(working copy)
@@ -0,0 +1,723 @@
+
+memalloc(
+56 mem_le_rxbuf
+262 mem_le_l2capbuf
+
+
+/* security temp */
+4 mem_le_mic
+4 mem_le_peer_mic
+//8 mem_le_skdm
+//8 mem_le_skds
+16 mem_le_peer_ltk
+16 mem_le_mrand
+
+
+/* ========= le context =========== */
+1 mem_le_state
+1 mem_le_mode
+2 mem_le_tsniff
+4 mem_le_anchor
+6 mem_le_clk_offset
+2 mem_le_receive_window
+6 mem_le_plap
+1 mem_le_conn_handle
+1 mem_le_arq
+1 mem_le_ch
+1 mem_le_hop
+2 mem_le_event_count
+4 mem_le_supervision_timer
+2 mem_le_instant
+1 mem_le_channels
+1 mem_le_op
+
+	/* these 3 should NOT be seperated */
+4 mem_le_access
+3 mem_le_crcinit
+1 mem_le_window_size
+
+	/* these 3 should NOT be seperated */
+2 mem_le_slave_latency
+2 mem_le_superto
+5 mem_le_channel_map
+
+2 mem_le_no_using
+1 mem_le_peer_sca
+
+/* should be together */
+1 mem_le_att_opcode
+2 mem_le_att_handle
+
+1 mem_le_err_code
+1 mem_le_ll_pairing_fail_reason
+
+16 mem_le_sk
+
+/* test */
+1 mem_le_testtype
+2 mem_le_test_sync
+2 mem_le_test_pcnt
+
+6 mem_le_rxon_ts
+
+1 mem_le_rx_ll_opcode
+
+2 mem_le_notify_attr_start
+1 mem_le_notify_len
+
+1 mem_cmd_le_create_conn
+
+2 mem_le_cur_attlist_start_ptr
+2 mem_le_cur_handle_start
+2 mem_le_cur_handle_end
+1 mem_le_cur_uuid_length
+16 mem_le_cur_uuid
+
+1 mem_le_curr_att_len
+1 mem_le_search_res
+
+1 mem_le_continue_type
+
+)
+
+
+xmemalloc(
+2 mem_le_dsniff
+
+// parameters
+2 mem_le_conn_interval
+1 mem_le_scan_enable
+2 mem_le_scan_interval
+2 mem_le_scan_window
+
+1 mem_le_adv_enable
+1 mem_le_adv_data_len
+31 mem_le_adv_data
+1 mem_le_scan_data_len
+31 mem_le_scan_data
+
+//modified name
+1 mem_le_name_len
+30 mem_le_name
+
+
+5 mem_le_new_map
+0 mem_le_new_param
+1 mem_le_new_transmitwindowsize
+2 mem_le_new_transmitwindowoffset
+2 mem_le_new_conninterval
+2 mem_le_new_connslavelatency
+2 mem_le_new_connsupervisiontimeout
+
+1 mem_le_txheader
+1 mem_le_txlen
+2 mem_le_txpayload
+2 mem_le_txcid
+1 mem_le_l2cap
+1 mem_le_l2cap_response
+31 mem_le_txbdy
+
+/* smp related */
+5 mem_le_pcnt_tx
+5 mem_le_pcnt_rx
+4 mem_le_last_mic
+4 mem_le_ivm
+4 mem_le_ivs
+16 mem_le_ltk
+1 mem_ltk_exists
+16 mem_le_rconfirm
+16 mem_le_srand
+1 mem_le_iat
+1 mem_le_rat
+1 mem_le_preq
+1 mem_le_preq_iocap
+1 mem_le_preq_oob
+1 mem_le_preq_auth
+1 mem_le_preq_max_keysize
+1 mem_le_preq_init_key_distribution
+1 mem_le_preq_resp_key_distribution
+1 mem_le_pres
+1 mem_le_pres_iocap
+1 mem_le_pres_oob
+1 mem_le_pres_auth
+1 mem_le_pres_max_keysize
+1 mem_le_pres_init_key_distribution
+1 mem_le_pres_resp_key_distribution
+
+/* att related */
+2 mem_le_search_handle_start
+2 mem_le_search_handle_end
+0 mem_le_att_offset
+1 mem_le_search_att_type_length
+16 mem_le_search_att_type
+2 mem_le_notify_handle
+1 mem_le_search_uuid_length
+16 mem_le_search_uuid
+
+
+//START of LE adv parameter structure
+0 mem_le_adv_param
+2 mem_le_adv_interval
+1 mem_le_adv_type
+1 mem_le_adv_own_addr_type
+1 mem_le_adv_direct_addr_type
+6 mem_le_adv_direct_addr
+1 mem_le_adv_channel_map
+//END of LE adv parameter structure
+
+//START of LE conn parameter structure
+0 mem_le_conn_param
+1 mem_le_conn_peer_addr_type
+6 mem_le_conn_peer_addr
+1 mem_le_conn_own_addr_type
+2 mem_le_interval_min
+2 mem_le_interval_max
+2 mem_le_latency
+2 mem_le_timeout
+//START of LE conn parameter structure
+
+//START of LE scan parameter structure
+0 mem_le_scan_params
+1 mem_le_scan_type
+1 mem_le_scan_own_addr_type
+//END of LE scan parameter structure
+
+3 mem_le_lap
+1 mem_le_uap
+2 mem_le_nap
+
+
+2 mem_le_local_mtu
+2 mem_le_remote_mtu
+
+8 mem_le_skdm
+8 mem_le_skds
+
+2 mem_le_init_superto
+2 mem_ui_le_uuid_table
+
+1 mem_le_secure_connect_enable
+1 mem_le_secure_connect_flag
+1 mem_le_sc_calc
+1 mem_le_secure_connect_state
+1 mem_le_sc_confirm_gkey_flag
+1 mem_le_sc_local_key_invalid
+
+
+1 mem_le_pairing_state
+1 mem_le_enc_state
+1 mem_le_pairing_mode
+4 mem_le_tk
+2 mem_le_ediv
+8 mem_le_rand
+16 mem_le_irk
+
+//LE attribute list
+4 mem_le_transmit_window
+
+//ble General configuration 
+1 mem_le_configuration
+16 mem_le_fixed_ltk
+2 mem_le_pairing_handle
+
+//for continue
+2 mem_le_l2cap_size
+1 mem_le_packet_len_recved
+
+//for fifo
+1 mem_le_tx_buff_used
+2 mem_le_tx_ptr0
+2 mem_le_tx_ptr1
+2 mem_le_tx_ptr2
+2 mem_le_tx_ptr3
+
+//ble gatt signaling
+1 mem_le_signaling_identifier
+2 mem_le_l2cap_signaling_conn_param_update_rsp_result
+
+1 mem_le_packet_size
+1 mem_le_packet_llid
+2 mem_le_payload_ptr
+
+1 mem_le_md_count
+
+)
+
+
+(
+0x000001 param_le_features
+0x000a06 param_le_version
+0x1d87 param_le_subversion
+1636 param_sifs
+0x1e0 param_clke_cal_le
+0xa0 param_le_sca
+)
+
+(
+0 DEFAULT_STATES
+1 IPHONE_LOST_LTK
+2 MODULE_LOST_LTK
+3 LTK_NOT_LOST
+)
+
+
+(
+27 LE_MAX_PAKET_LEN
+)
+
+/* advertising channel PDU type */
+(
+0 ADV_IND
+1 ADV_DIRECT_IND
+2 ADV_NONCONN_IND
+3 SCAN_REQ
+4 SCAN_RSP
+5 CONNECT_REQ
+6 ADV_SCAN_IND
+)
+
+(
+0x01	GAP_ADTYPE_FLAGS
+0x02	GAP_ADTYPE_16BIT_MORE
+0x03	GAP_ADTYPE_16BIT_COMPLETE
+0x04	GAP_ADTYPE_32BIT_MORE
+0x05	GAP_ADTYPE_32BIT_COMPLETE
+0x06	GAP_ADTYPE_128BIT_MORE
+0x07	GAP_ADTYPE_128BIT_COMPLETE
+0x08	GAP_ADTYPE_LOCAL_NAME_SHORT
+0x09	GAP_ADTYPE_LOCAL_NAME_COMPLETE
+0x0a	GAP_ADTYPE_POWER_LEVEL
+0xff	GAP_ADTYPE_MANUFACTURER_SPECIFIC
+)
+
+
+	/* LE control packet type */
+	(
+	0x00 LL_CONNECTION_UPDATE_REQ
+	0x01 LL_CHANNEL_MAP_REQ
+	0x02 LL_TERMINATE_IND
+	0x03 LL_ENC_REQ
+	0x04 LL_ENC_RSP
+	0x05 LL_START_ENC_REQ
+	0x06 LL_START_ENC_RSP
+	0x07 LL_UNKNOWN_RSP
+	0x08 LL_FEATURE_REQ
+	0x09 LL_FEATURE_RSP
+	0x0A LL_PAUSE_ENC_REQ
+	0x0B LL_PAUSE_ENC_RSP
+	0x0C LL_VERSION_IND
+	0x0D LL_REJECT_IND
+	0x0E LL_SLAVE_FEATURE_REQ
+	0x0F LL_CONNECTION_PARAM_REQ
+	0x10 LL_CONNECTION_PARAM_RSP
+	0x11 LL_REJECT_IND_EXT
+	0x12 LL_PING_REQ
+	0x13 LL_PING_RSP
+	)
+
+	/* Security Manager Protocol Code */
+	(
+	0x01 SMP_PAIRING_REQUEST
+	0x02 SMP_PAIRING_RESPONSE
+	0x03 SMP_PAIRING_CONFIRM
+	0x04 SMP_PAIRING_RANDOM
+	0x05 SMP_PAIRING_FAILED
+	0x06 SMP_ENCRYPTION_INFORMATION
+	0x07 SMP_MASTER_IDENTIFICATION
+	0x08 SMP_IDENTITY_INFORMATION
+	0x09 SMP_IDENTITY_ADDRESS_INFORMATION
+	0x0A SMP_SIGNING_INFORMATION
+	0x0B SMP_SECURITY_REQUEST
+	0x0c SMP_PAIRING_PUBLIC_KEY
+	0x0d SMP_PAIRING_DHKEY_CHECK
+	)
+
+	/* L2CAP Signaling OPCODE */
+	(
+	0x12 L2CAP_CONNECTION_PARAMETER_UPDATE_REQUEST
+	0x13 L2CAP_CONNECTION_PARAMETER_UPDATE_RESPONSE
+	)
+
+	/* ATT OPCODE */
+	(
+	0x01 ATTOP_ERROR_RESPONSE
+	0x02 ATTOP_EXCHANGE_MTU_REQUEST
+	0x03 ATTOP_EXCHANGE_MTU_RESPONSE
+	0x04 ATTOP_FIND_INFORMATION_REQUEST
+	0x05 ATTOP_FIND_INFORMATION_RESPONSE
+	0x06 ATTOP_FIND_BY_TYPE_VALUE_REQUEST
+	0x07 ATTOP_FIND_BY_TYPE_VALUE_RESPONSE
+	0x08 ATTOP_READ_BY_TYPE_REQUEST
+	0x09 ATTOP_READ_BY_TYPE_RESPONSE
+	0x0A ATTOP_READ_REQUEST
+	0x0B ATTOP_READ_RESPONSE
+	0x0C ATTOP_READ_BLOB_REQUEST
+	0x0D ATTOP_READ_BLOB_RESPONSE
+	0x0E ATTOP_READ_MULTIPLE_REQUEST
+	0x0F ATTOP_READ_MULTIPLE_RESPONSE
+	0x10 ATTOP_READ_BY_GROUP_TYPE_REQUEST
+	0x11 ATTOP_READ_BY_GROUP_TYPE_RESPONSE
+	0x12 ATTOP_WRITE_REQUEST
+	0x13 ATTOP_WRITE_RESPONSE
+	0x16 ATTOP_PREPARE_WRITE_REQUEST
+	0x17 ATTOP_PREPARE_WRITE_RESPONSE
+	0x18 ATTOP_EXECUTE_WRITE_REQUEST
+	0x19 ATTOP_EXECUTE_WRITE_RESPONSE
+	0x1B ATTOP_HANDLE_VALUE_NOTIFICATION
+	0x1D ATTOP_HANDLE_VALUE_INDICATION
+	0x1E ATTOP_HANDLE_VALUE_CONFIRMATION
+	0x52 ATTOP_WRITE_COMMAND
+	0xD2 ATTOP_SIGNED_WRITE_COMMAND
+	0x1f ATTOP_CONTINUE
+	0x9e EMPTY_LE_DATA_PRE
+	0x9f EMPTY_LE_DATA
+	)
+
+	/* ATT error code */
+	(
+	0x01 ATT_ERR_INVALID_HANDLE
+	0x02 ATT_ERR_READ_NOT_PERMITTED
+	0x03 ATT_ERR_WRITE_NOT_PERMITTED
+	0x04 ATT_ERR_INVALID_PDU
+	0x05 ATT_ERR_INSUFFICIENT_AUTHENTICATION
+	0x06 ATT_ERR_REQUEST_NOT_SUPPORTED
+	0x07 ATT_ERR_INVALID_OFFSET
+	0x08 ATT_ERR_INSUFFICIENT_AUTHORIZATION
+	0x09 ATT_ERR_PREPARE_QUEUE_FULL
+	0x0A ATT_ERR_ATTRIBUTE_NOT_FOUND
+	0x0B ATT_ERR_ATTRIBUTE_NOT_LONG
+	0x0C ATT_ERR_INSUFFICIENT_ENCRYPTION_KEY_SIZE
+	0x0D ATT_ERR_INVALID_ATTRIBUTE_VALUE_LENGTH
+	0x0E ATT_ERR_UNLIKELY_ERROR
+	0x0F ATT_ERR_INSUFFICIENT_ENCRYPTION
+	0x10 ATT_ERR_UNSUPPORTED_GROUP_TYPE
+	0x11 ATT_ERR_INSUFFICIENT_RESOURCES
+	)
+	/*	SERVICE UUID	*/
+	(
+	0x1800 UUID_SERVICE_GENERIC_ACC
+	0x1801 UUID_SERVICE_GENERIC_ATT
+	0x180a UUID_SERVICE_DEVICE_INFO
+	0x180f UUID_SERVICE_BATTERY
+	0x1812 UUID_SERVICE_HIDS
+	0x2800 UUID_GATT_PRIMARY_SERVICE
+	0x2801 UUID_GATT_SECONDARY_SERVICE
+	0X2802 UUID_GATT_INCLUDE
+	0X2803 UUID_GATT_CHARACTERISTIC
+	0X2A00 UUID_CHRCTR_DEVICE_NAME
+	0X2A19 UUID_CHRCTR_BATTERY_LEVEL
+	0X2A22 UUID_CHRCTR_KEYBOARD_INPUT
+	0X2A23 UUID_CHRCTR_SYSTEM_ID 
+	0X2A25 UUID_CHRCTR_SERIAL_NUMBER
+	0X2A26 UUID_CHRCTR_FIRMWARE
+	0X2A32 UUID_CHRCTR_KEYBOARD_OUTPUT
+	0X2A33 UUID_CHRCTR_MOUSE_INPUT
+	0X2A4A UUID_CHRCTR_HID_INFO
+	0X2A4B UUID_CHRCTR_REPORT_MAP
+	0X2A4C UUID_CHRCTR_HID_CTRL_POINT
+	0X2A4D UUID_CHRCTR_REPORT
+	0X2A4E UUID_CHRCTR_PROTOCOL_MODE
+	)
+
+	(// pairing failed reason
+	0x00 PAIRING_FAILED_RESERVED
+	0X01 PAIRING_FAILED_PASSKEY_ENTRY_FAILED
+	0X02 PAIRING_FAILED_OOB_NOT_AVAILABLE
+	0X03 PAIRING_FAILED_AUTHENTICATION_REQUIRE
+	0X04 PAIRING_FAILED_CONFIRM_VALUE_FAILED
+	0X05 PAIRING_FAILED_PAIRING_NOT_SUPPORTED
+	0X06 PAIRING_FAILED_ENCRYPTION_KEY_SIZE
+	0X07 PAIRING_FAILED_COMMAND_NOT_SUPPORTED
+	0X08 PAIRING_FAILED_UNSPECIFIED_REASON
+	0X09 PAIRING_FAILED_REPEATED_ATTEMPTS
+	0X0A PAIRING_FAILED_INVALID_PARAMETERS
+	0X0B PAIRING_FAILED_DHKEY_CHECK_FAILED
+	0X0C PAIRING_FAILED_NUMERIC_COMPARISON_FAILED
+	0X0D PAIRING_FAILED_BR_EDR_PAIRING_IN_PROGRESS
+	0X0E PAIRING_FAILED_KEY_DERIVATION_GENERATION_NOT_ALLOWED
+	)
+
+
+	//BLE ErrorCodes
+	(    
+	0x01 ERROR_UNKNOWN_HCI_COMMAND
+	0x02 ERROR_NO_CONNECTION
+	0x03 ERROR_HARDWARE_FAILURE
+	0x04 ERROR_PAGE_TIMEOUT
+	0x05 ERROR_AUTHENTICATION_FAILURE
+	0x06 ERROR_KEY_MISSING
+	0x07 ERROR_MEMORY_FULL
+	0x08 ERROR_CONNECTION_TIMEOUT
+	0x09 ERROR_MAX_CONNECTIONS
+	0x0A ERROR_MAX_SCO_CONNECTIONS
+	0x0B ERROR_MAX_ACL_CONNECTIONS
+	0x0C ERROR_COMMAND_DISALLOWED
+	0x0D ERROR_HOST_REJECT_LIMITED_RESOURCES
+	0x0E ERROR_HOST_REJECT_SECURITY_REASONS
+	0x0F ERROR_HOST_REJECT_REMOTE_IS_ONLY_PERSONAL
+	0x10 ERROR_HOST_TIMEOUT
+	0x11 ERROR_UNSUPPORTED_FEATURE_OR_PARAMETER_VALUE
+	0x12 ERROR_INVALID_HCI_COMMAND_PARAMETERS
+	0x13 ERROR_REMOTE_USER_TERMINATED_CONNECTION
+	0x14 ERROR_REMOTE_LOW_RESOURCES
+	0x15 ERROR_REMOTE_POWERING_OFF
+	0x16 ERROR_CONNECTION_TERMINATED_BY_LOCAL_HOST
+	0x17 ERROR_REPEATED_ATTEMPTS
+	0x18 ERROR_PAIRING_NOT_ALLOWED
+	0x19 ERROR_UNKNOWN_LMP_PDU
+	0x1A ERROR_UNSUPPORTED_REMOTE_FEATURE
+	0x1B ERROR_SCO_OFFSET_REJECTED
+	0x1C ERROR_SCO_INTERVAL_REJECTED
+	0x1D ERROR_SCO_AIR_MODE_REJECTED
+	0x1E ERROR_INVALID_LMP_PARAMETER
+	0x1F ERROR_UNSPECIFIED_ERROR
+	0x20 ERROR_UNSUPPORTED_LMP_PARAMETER_VALUE
+	0x21 ERROR_ROLE_CHANGE_NOT_ALLOWD
+	0x22 ERROR_LMP_RESPONSE_TIMEOUT
+	0x23 ERROR_ERROR_TRANSACTION_COLLISION
+	0x24 ERROR_LMP_PDU_NOT_ALLOWED
+	0x25 ERROR_ENCRYPTION_MODE_NOT_ACCEPTABLE
+	0x26 ERROR_UNIT_KEY_USED
+	0x27 ERROR_QOS_NOT_SUPPORTED
+	0x28 ERROR_INSTANT_PASSED
+	0x29 ERROR_PAIRING_W_UNIT_KEY_NOT_SUPPORTED
+	0x2a ERROR_DIFFERENT_TRANSACTION_COLLISION
+	0x2c ERROR_QOS_UNACCEPTABLE_PARAMETER
+	0x2d ERROR_QOS_REJECTED
+	0x2e ERROR_CHANNEL_CLASSIFICATION_NOT_SUPPORTED
+	0x2f ERROR_INSUFFICIENT_SECURITY
+	0x30 ERROR_PARAMETER_OUT_OF_MANDATORY_PANGE
+	0x32 ERROR_ROLE_SWITCH_PENDING
+	0x34 ERROR_RESERVED_SLOT_VIOLATION
+	0x35 ERROR_ROLE_SWITCH_FAILED
+	0x36 ERROR_EXTENDED_INQUIRY_RESPONSE_TOO_LARGE
+	0x37 ERROR_SIMPLE_PAIRING_NOT_SUPPORTED_BY_HOST
+	0x38 ERROR_HOST_BUSY_PAIRING
+	)
+
+
+	//modified_name
+	(
+	0x14 MAX_NAME_LEN
+	0x16 ADV_DATA_NAME_LEN
+	0X20 SPACE
+	
+	)
+	/* GATT Specifications*/
+	(
+	0X2900 CHARACTERTIC_EXTENDED_PROPERTIES
+	0X2901 CHARACTERTIC_USER_DESCRIPTION
+	0X2902 CLIENT_CHARACTERTIC_CONFIGURATION
+	0X2903 SERVER_CHARACTERTIC_CONFIGURATION
+	0X2904 CHARACTERTIC_PRESENTATION_FORMAT
+	0X2905 CHARACTERTIC_AGGREGATE
+	0X2906 VALID_RANGE
+	0X2907 EXTERNAL_REPORT_REFERENCE
+	0X2908 REPORT_REFERENCE
+	0X290B ENVIR_SENSING_CONFIGURATION
+	0X290C ENVIR_SENSING_MEASUREMENT
+	0X290D ENVIR_SENSING_TRIGGER_SETTING
+	)
+	/* LE L2CAP CID */
+	(
+	0x0004 LE_L2CAP_CID_ATT
+	0x0005 LE_L2CAP_CID_SIGNAL
+	0x0006 LE_L2CAP_CID_SMP
+	)
+
+	//LE address type
+	(
+	0 LE_ADDR_TYPE_PUBLIC
+	1 LE_ADDR_TYPE_RANDOM
+	)
+	//LE address type bitmap
+	(
+	7 LE_RECEIVER_ADDR_BIT
+	6 LE_SENDER_ADDR_BIT
+	)
+	//LE SCAN TYPE
+	(
+	0x00 LE_SCAN_TYPE_PASSIVE //no SCAN_REQ shall be sent
+	0x01 LE_SCAN_TYPE_ACTIVE
+	)
+
+	//LE SCAN ENABLE
+	(
+	0x00 LE_SCAN_DISABLE
+	0x01 LE_SCAN_ENABLE
+	0x0101 LE_ACTIVE_SCAN_ENABLE
+	)
+
+	//LE FIND INFORMATION RESPONSE
+	//THE FORMAT OF THE INFORMATION DATA
+	(
+	0x01 UUID_SIZE_16BIT
+	0x02 UUID_SIZE_128BIT
+	)
+
+	(
+	0x0000 BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_ACCEPTED
+	0x0001 BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_REJECTED
+	)
+
+//	le_state_map 0-2 is reserved for state_inconn,state_insniff and state_sco
+(
+3 lestate_got_first_packet
+4 lestate_encryption
+5 lestate_update_param
+6 lestate_update_map
+)
+
+// 	le mode
+(
+0 lemode_idle
+1 lemode_slave
+3 lemode_master
+)
+
+
+(
+0x01 LLID_CONTINUE
+0x02 LLID_START
+0x03 LLID_LE_LL
+0x01 LLID_EMPTY
+)
+
+(
+4 LE_TX_BUFF_COUNT
+3 LE_TX_BUFF_UPDATE_LOOPCNT //LE_TX_BUFF_COUNT-1
+
+12 LE_MD_MAX_COUNT
+)
+
+
+(
+0 LE_INITATOR_LTK_BIT
+1 LE_INITATOR_IRK_BIT
+2 LE_INITATOR_CSRK_BIT
+)
+
+(
+0x00 LE_PAIRING_MODE_NONE
+0x01 LE_PAIRING_MODE_LAGACY_JUSTWORK
+0x02 LE_PAIRING_MODE_LAGACY_PASSKEY
+0x81 LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK
+0x82 LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC
+0x83 LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY
+
+7 LE_PAIRING_MODE_SECURE_CONNECT_BIT
+)
+
+
+(
+0 FLAG_IOCAP_DISPLAYONLY
+1 FLAG_IOCAP_DISPLAYYESNO
+2 FLAG_IOCAP_KEYBOARDONLY
+3 FLAG_IOCAP_NOINPUTNOOUTPUT
+4 FLAG_IOCAP_KEYBOARDDISPLAY
+
+0x00 FLAG_OOB_DATA_FLAG_NO
+)
+
+(
+0x00 FLAG_LE_NO_BONDING_NO_MITM
+0x01 FLAG_LE_BONDING_NO_MITM
+0x04 FLAG_LE_NO_BONDING_MITM
+0x05 FLAG_LE_BONDING_MITM
+0x09 FLAG_LE_BONDING_NO_MITM_SECURE
+0x0D FLAG_LE_BONDING_MITM_SECURE
+
+2 LE_AUTH_MITM_BIT
+3 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT
+)
+
+(
+0  LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND
+1  LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE
+2  LE_FIND_BY_TYPE_VAL_RES_FOUND_ENDING_HANDLE
+
+)
+
+(
+0 MASTER_PUBLIC_ADDR
+1 MASTER_RANDOM_ADDR
+)
+
+(
+0x06 LE_ERR_PIN_OR_KEY_MISSING
+)
+
+
+(
+96000 TIMER_SMP_PAIRING_TIMEOUT //30S
+)
+//mem_le_pairing_state
+(
+0 FLAG_LE_PAIRING_NULL
+1 FLAG_LE_PAIRING_START
+2 FLAG_LE_PAIRING_SEND_RECURITY_REQ
+3 FLAG_LE_PAIRING_RCV_PAIRING_REQ
+4 FLAG_LE_PAIRING_AUTH
+5 FLAG_LE_PAIRING_AFTER_AUTH
+6 FLAG_LE_PAIRING_SEND_START_ENC_RSP
+7 FLAG_LE_PARING_SEND_ENC_INFORMATION
+8 FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION 
+9 FLAG_LE_PARING_SEND_INDENTITY_INFORMATION
+0xff FLAG_LE_PAIRING_END
+)
+
+
+
+/*LE secure connect state */
+(
+0x00 LE_SC_STAT_NULL
+0x01 LE_SC_STAT_RECEIVE_PUBLIC_KEY
+0x02 LE_SC_STAT_WAIT_SEND_PUBLIC_KEY
+0x03 LE_SC_STAT_SEND_PUBLIC_KEY
+0x04 LE_SC_STAT_RECEIVE_RANDOM
+0x05 LE_SC_STAT_SEND_RANDOM
+0x06 LE_SC_STAT_RECEIVE_DHKEY
+0x07 LE_SC_STAT_WAIT_CONFIRM_GKEY
+0x08 LE_SC_STAT_PASSKEY_WAIT_CONFIRM
+)
+
+
+(
+0 FLAG_LE_SC_CONFRIM_NULL
+1 FLAG_LE_SC_CONFRIM_GKEY_OK
+)
+
+//mem_le_enc_state
+(
+0 FLAG_LE_ENC_NULL
+1 FLAG_LE_RCV_ENC_START
+2 FLAG_LE_ENC_PAUSE
+3 FLAG_LE_RCV_START_ENC_RSP
+4 FLAG_LE_SEND_START_ENC_RSP
+0xff FLAG_LE_ENC_END
+)
+
+(//mem_le_configuration
+//bit0:use fixed key , ble passkey pairing
+0 BIT_BLE_PASSKEY_FIXED_KEY
+//bit1:ble pairing use fixed long term key
+1 BIT_BLE_PAIRING_FIXED_LTK
+//bit2:ble transmit packet will set more data flag
+2 BIT_BLE_TRANSMIT_PACKET_BY_MD
+//bit3:master read handle, with requires an authenticated link
+3 BIT_BLE_READ_AUTH
+//bit4:master write handle, with requires an authenticated link
+4 BIT_BLE_WRITE_AUTH
+//bit5:cannot enter long sleep
+5 BIT_BLE_SHORT_MULT
+
+)
+
+(
+0 BIT_ADV_CHANNEL_MAP_37
+1 BIT_ADV_CHANNEL_MAP_38
+2 BIT_ADV_CHANNEL_MAP_39
+)
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/lmp.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/lmp.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/lmp.format	(working copy)
@@ -0,0 +1,224 @@
+
+memalloc(
+
+1 mem_lmo_header_length
+1 mem_lmo_header_opcode
+17 mem_lmo_payload
+1 mem_lmi_accepted_opcode
+1 mem_disconn_reason_send
+1 mem_tx_fixed_freq
+1 mem_rx_fixed_freq
+1 mem_ext_features_page
+2 mem_lmpext_ssp_enable
+1 mem_remote_sppcap
+
+1 mem_lmp_conn_state
+2 mem_soft_timer
+1 mem_pincode_state
+
+1 mem_sres_tid
+1 mem_accptsco_tid
+
+1 mem_auth_enable
+1 mem_wait_encryption
+
+16 mem_sniff_payload
+4 mem_aurand_send_delay_time
+)
+
+xmemalloc(
+3 mem_lmp_version
+2 mem_lmp_subversion
+1 mem_local_name_length
+3 mem_local_name
+64 mem_local_name2
+1 mem_local_name_end
+1 mem_unsniff2sniff_timer
+1 mem_switch_flag
+1 mem_classic_bt_flag
+)
+
+	(
+	//bit flag:mem_classic_bt_flag
+	0 FLAG_SSP_REJECT_JUSTWORK
+	1 SHORT_MULT_FLAG
+	)
+	
+	(
+	//bit map
+	0 pair_state_inrand
+	1 pair_state_inrand_acpt
+	2 pair_state_send_comb
+	3 pair_state_recv_comb
+	4 pair_state_send_aurand
+	5 pair_state_recv_sres
+	6 pair_state_recv_aurand
+	7 pair_state_send_sres	
+	)
+	/* LMP opcodes */
+	(
+	1 LMP_NAME_REQ 
+	2 LMP_NAME_RES 
+	3 LMP_ACCEPTED 
+	4 LMP_NOT_ACCEPTED 
+	5 LMP_CLKOFFSET_REQ 
+	6 LMP_CLKOFFSET_RES 
+	7 LMP_DETACH 
+	8 LMP_IN_RAND 
+	9 LMP_COMB_KEY 
+	10 LMP_UNIT_KEY 
+	11 LMP_AU_RAND 
+	12 LMP_SRES 
+	13 LMP_TEMP_RAND 
+	14 LMP_TEMP_KEY 
+	15 LMP_ENCRYPTION_MODE_REQ 
+	16 LMP_ENCRYPTION_KEY_SIZE_REQ 
+	17 LMP_START_ENCRYPTION_REQ 
+	18 LMP_STOP_ENCRYPTION_REQ 
+	19 LMP_SWITCH_REQ 
+	20 LMP_HOLD
+	21 LMP_HOLD_REQ
+	23 LMP_SNIFF_REQ 
+	24 LMP_UNSNIFF_REQ 
+	26 LMP_PARK_REQ 
+	27 LMP_SET_BROADCAST_SCAN_WINDOW 
+	28 LMP_MODIFY_BEACON 
+	29 LMP_UNPARK_BD_ADDR_REQ 
+	30 LMP_UNPARK_PM_ADDR_REQ 
+	31 LMP_INCR_POWER_REQ 
+	32 LMP_DECR_POWER_REQ 
+	33 LMP_MAX_POWER 
+	34 LMP_MIN_POWER 
+	35 LMP_AUTO_RATE 
+	36 LMP_PREFERRED_RATE 
+	37 LMP_VERSION_REQ 
+	38 LMP_VERSION_RES 
+	39 LMP_FEATURES_REQ 
+	40 LMP_FEATURES_RES 
+	41 LMP_QUALITY_OF_SERVICE 
+	42 LMP_QUALITY_OF_SERVICE_REQ 
+	43 LMP_SCO_LINK_REQ 
+	44 LMP_REMOVE_SCO_LINK_REQ 
+	45 LMP_MAX_SLOT 
+	46 LMP_MAX_SLOT_REQ 
+	47 LMP_TIMING_ACCURACY_REQ 
+	48 LMP_TIMING_ACCURACY_RES 
+	49 LMP_SETUP_COMPLETE 
+	50 LMP_USE_SEMI_PERMANENT_KEY 
+	51 LMP_HOST_CONNECTION_REQ 
+	52 LMP_SLOT_OFFSET 
+	53 LMP_PAGE_MODE_REQ 
+	54 LMP_PAGE_SCAN_MODE_REQ 
+	55 LMP_SUPERVISION_TIMEOUT 
+	56 LMP_TEST_ACTIVATE
+	57 LMP_TEST_CONTROL
+	58 LMP_ENC_KEY_SIZE_MASK_REQ
+	59 LMP_ENC_KEY_SIZE_MASK_RES
+	60 LMP_SET_AFH
+
+	/* simple pairing support */
+	61 LMP_ENCAPSULATED_HEADER
+	62 LMP_ENCAPSULATED_PAYLOAD
+	63 LMP_SIMPLE_PAIRING_CONFIRM
+	64 LMP_SIMPLE_PAIRING_NUMBER
+	65 LMP_DHKEY_CHECK
+	127 LMP_ESCAPE
+	127 LMP_ESCAPE_4   /* add 2bytes LMP header support  */   
+	)
+	/* LMP EXT opcodes, ORed with bit 7 to make difference to nonEXT */
+	(
+	129 LMP_EXT_ACCEPTED
+	130 LMP_NOT_ACCEPTED_EXT
+	131 LMP_EXT_FEATURES_REQ
+	132 LMP_EXT_FEATURES_RES
+	139 LMP_PACKET_TYPE_TABLE_REQ
+	140 LMP_EXT_ESCO_LINK_REQ
+	141 LMP_EXT_REMOVE_ESCO_REQ
+	144 LMP_EXT_CHN_CLASSIFICATION_REQ
+	145 LMP_EXT_CHN_CLASSIFICATION
+	149 LMP_SNIFF_SUBRATING_REQ
+	150 LMP_SNIFF_SUBRATING_RES
+	151 LMP_PAUSE_ENCRYPTION_REQ
+	152 LMP_RESUME_ENCRYPTION_REQ
+	153 LMP_IO_CAP_REQ
+	154 LMP_IO_CAP_RES
+	)
+	/* LMP reason codes */
+	(
+	0x05 AUTHENTICATION_FAILURE_ERROR
+	0x06 KEY_MISSING
+	0x0b ACL_CONNECTION_ALREADY_EXISTS
+	0x13 OTHER_END_TERMINATED
+	0x15 ABOUT_TO_POEWR_OFF
+	0x16 LOCAL_HOST
+	0x18 PAIRING_NOT_ALLOWED
+	0x19 UNKNOWN_LMP_PDU
+	0x1A UNSUPPORTED_LMP_FEATURE 
+	0x1F UNSPECIFIED_ERROR
+	0x20 UNSUPPORTED_PARAMETERS
+	0x21 SWITCH_NOT_ALLOWED
+	0x23 TRANSACTION_COLLISION
+	0x24 PDU_NOT_ALLOWED
+	0x25 ENCRYPTION_MODE_NOT_ACCEPTABLE
+	0x2e NOT_SUPPORT_CHN_CLASSIFICATION
+	0x37 NOT_SUPPORT_SSP
+	)
+
+	/* test mode scenarios */
+	(
+	0 PAUSE_TEST_MODE
+	1 ZERO_PATTERN
+	2 ONE_PATTERN
+	3 ALT_PATTERN
+	4 PSEUDORANDOM
+	5 CLOSED_LOOP_BACK_ACL
+	6 CLOSED_LOOP_BACK_SCO
+	7 ACL_WITHOUT_WHITENING
+	8 SCO_WITHOUT_WHITENING
+	9 ALT2_PATTERN
+	255 EXIT_TEST_MODE
+	)
+	/* test mode hoppig modes */
+	(
+	0 FIXED_FREQ
+	1 NORMAL_HOP
+	)
+
+	/* mem_lmp_tid indicates which type of LMP will be sent */
+	(
+	0 TID_NORM_REPLY
+	1 TID_NORM_SEND
+	2 TID_ONE
+	3 TID_ZERO
+	4 TID_PAIRING
+	5 TID_ENCRYPTION
+	6 TID_VARIABLE
+	7 TID_RX
+	)
+
+	/* ============== lmp status ==========*/
+	(
+	0 lmp_incoming
+	1 lmp_outgoing
+	2 lmp_reject_msg
+	3 lmp_clear_msg
+	4 upper_reject_msg
+	5 upper_clear_msg
+	)
+
+(
+0x2ee00 TIMER_ONE_MINUTE //96000*2
+80 TIMER_SWITCH_WAITE
+12 TIMER_ENPT_WAITE
+)
+
+(
+0 SWITCH_FLAG_INIT
+1 SWITCH_FLAG_ACCEPT
+2 SWITCH_FLAG_NOT_ACCEPT
+)
+(
+0 NULL_ENCRYP
+1 DONE_ENCRYP
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/memblocks.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/memblocks.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/memblocks.format	(working copy)
@@ -0,0 +1,64 @@
+//
+//
+//Large memory blocks defined in this file.
+//Blocks Shall be defined with absolute address.
+//Blocks' length Shall be specified in comment following Blocks' names.
+//Different blocks MAY be overlap.
+//Blocks defined in this file Shall NOT be overlap with variable in memmap.format.
+
+// USB C51 exchange area
+(
+0xff0 mem_mcmd
+0xff1 mem_mouse_data
+)
+
+//l2cap RX buffers
+(
+0x1000 mem_l2cap_rxbuff1		//0x400
+0x1400 mem_l2cap_rxbuff2		//0x400
+//end address:0x17ff
+)
+//l2cap TX buffers
+(
+0x1800 mem_tx_buff0		//128
+0x1880 mem_tx_buff1		//128
+0x1900 mem_tx_buff2		//128
+0x1980 mem_tx_buff3		//128
+0x1a00 mem_tx_buff4		//128
+0x1a80 mem_tx_buff5		//128
+0x1b00 mem_tx_buff6		//128
+0x1b80 mem_tx_buff7		//128
+//end address: 0x1bff
+)
+
+(
+0x1800 mem_le_tx_buffer0
+0x1900 mem_le_tx_buffer1
+0x1a00 mem_le_tx_buffer2
+0x1b00 mem_le_tx_buffer3
+//end addr:0x1dff
+)
+
+
+//uart buffer
+(
+0x1800 mem_h5rx_buf//0x400
+0x1bff mem_h5rx_buf_end
+0x1c00 mem_h5tx_buf
+0x1fff mem_h5tx_buf_end
+)
+
+
+(
+0x1800 mem_ir_record
+0x1c      mem_ir_record_max
+)
+
+ifndef REVD 
+(
+0x4b00 memk
+)
+
+
+endif
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/patch.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/patch.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/patch.format	(working copy)
@@ -0,0 +1,516 @@
+
+(
+	  0 patch00_0
+	  1 patch00_1
+	  2 patch00_2
+	  3 patch00_3
+	  4 patch00_4
+	  5 patch00_5
+	  6 patch00_6
+	  7 patch00_7
+	  8 patch01_0
+	  9 patch01_1
+	 10 patch01_2
+	 11 patch01_3
+	 12 patch01_4
+	 13 patch01_5
+	 14 patch01_6
+	 15 patch01_7
+	 16 patch02_0
+	 17 patch02_1
+	 18 patch02_2
+	 19 patch02_3
+	 20 patch02_4
+	 21 patch02_5
+	 22 patch02_6
+	 23 patch02_7
+	 24 patch03_0
+	 25 patch03_1
+	 26 patch03_2
+	 27 patch03_3
+	 28 patch03_4
+	 29 patch03_5
+	 30 patch03_6
+	 31 patch03_7
+	 32 patch04_0
+	 33 patch04_1
+	 34 patch04_2
+	 35 patch04_3
+	 36 patch04_4
+	 37 patch04_5
+	 38 patch04_6
+	 39 patch04_7
+	 40 patch05_0
+	 41 patch05_1
+	 42 patch05_2
+	 43 patch05_3
+	 44 patch05_4
+	 45 patch05_5
+	 46 patch05_6
+	 47 patch05_7
+	 48 patch06_0
+	 49 patch06_1
+	 50 patch06_2
+	 51 patch06_3
+	 52 patch06_4
+	 53 patch06_5
+	 54 patch06_6
+	 55 patch06_7
+	 56 patch07_0
+	 57 patch07_1
+	 58 patch07_2
+	 59 patch07_3
+	 60 patch07_4
+	 61 patch07_5
+	 62 patch07_6
+	 63 patch07_7
+	 64 patch08_0
+	 65 patch08_1
+	 66 patch08_2
+	 67 patch08_3
+	 68 patch08_4
+	 69 patch08_5
+	 70 patch08_6
+	 71 patch08_7
+	 72 patch09_0
+	 73 patch09_1
+	 74 patch09_2
+	 75 patch09_3
+	 76 patch09_4
+	 77 patch09_5
+	 78 patch09_6
+	 79 patch09_7
+	 80 patch0a_0
+	 81 patch0a_1
+	 82 patch0a_2
+	 83 patch0a_3
+	 84 patch0a_4
+	 85 patch0a_5
+	 86 patch0a_6
+	 87 patch0a_7
+	 88 patch0b_0
+	 89 patch0b_1
+	 90 patch0b_2
+	 91 patch0b_3
+	 92 patch0b_4
+	 93 patch0b_5
+	 94 patch0b_6
+	 95 patch0b_7
+	 96 patch0c_0
+	 97 patch0c_1
+	 98 patch0c_2
+	 99 patch0c_3
+	100 patch0c_4
+	101 patch0c_5
+	102 patch0c_6
+	103 patch0c_7
+	104 patch0d_0
+	105 patch0d_1
+	106 patch0d_2
+	107 patch0d_3
+	108 patch0d_4
+	109 patch0d_5
+	110 patch0d_6
+	111 patch0d_7
+	112 patch0e_0
+	113 patch0e_1
+	114 patch0e_2
+	115 patch0e_3
+	116 patch0e_4
+	117 patch0e_5
+	118 patch0e_6
+	119 patch0e_7
+	120 patch0f_0
+	121 patch0f_1
+	122 patch0f_2
+	123 patch0f_3
+	124 patch0f_4
+	125 patch0f_5
+	126 patch0f_6
+	127 patch0f_7
+	128 patch10_0
+	129 patch10_1
+	130 patch10_2
+	131 patch10_3
+	132 patch10_4
+	133 patch10_5
+	134 patch10_6
+	135 patch10_7
+	136 patch11_0
+	137 patch11_1
+	138 patch11_2
+	139 patch11_3
+	140 patch11_4
+	141 patch11_5
+	142 patch11_6
+	143 patch11_7
+	144 patch12_0
+	145 patch12_1
+	146 patch12_2
+	147 patch12_3
+	148 patch12_4
+	149 patch12_5
+	150 patch12_6
+	151 patch12_7
+	152 patch13_0
+	153 patch13_1
+	154 patch13_2
+	155 patch13_3
+	156 patch13_4
+	157 patch13_5
+	158 patch13_6
+	159 patch13_7
+	160 patch14_0
+	161 patch14_1
+	162 patch14_2
+	163 patch14_3
+	164 patch14_4
+	165 patch14_5
+	166 patch14_6
+	167 patch14_7
+	168 patch15_0
+	169 patch15_1
+	170 patch15_2
+	171 patch15_3
+	172 patch15_4
+	173 patch15_5
+	174 patch15_6
+	175 patch15_7
+	176 patch16_0
+	177 patch16_1
+	178 patch16_2
+	179 patch16_3
+	180 patch16_4
+	181 patch16_5
+	182 patch16_6
+	183 patch16_7
+	184 patch17_0
+	185 patch17_1
+	186 patch17_2
+	187 patch17_3
+	188 patch17_4
+	189 patch17_5
+	190 patch17_6
+	191 patch17_7
+	192 patch18_0
+	193 patch18_1
+	194 patch18_2
+	195 patch18_3
+	196 patch18_4
+	197 patch18_5
+	198 patch18_6
+	199 patch18_7
+	200 patch19_0
+	201 patch19_1
+	202 patch19_2
+	203 patch19_3
+	204 patch19_4
+	205 patch19_5
+	206 patch19_6
+	207 patch19_7
+	208 patch1a_0
+	209 patch1a_1
+	210 patch1a_2
+	211 patch1a_3
+	212 patch1a_4
+	213 patch1a_5
+	214 patch1a_6
+	215 patch1a_7
+	216 patch1b_0
+	217 patch1b_1
+	218 patch1b_2
+	219 patch1b_3
+	220 patch1b_4
+	221 patch1b_5
+	222 patch1b_6
+	223 patch1b_7
+	224 patch1c_0
+	225 patch1c_1
+	226 patch1c_2
+	227 patch1c_3
+	228 patch1c_4
+	229 patch1c_5
+	230 patch1c_6
+	231 patch1c_7
+	232 patch1d_0
+	233 patch1d_1
+	234 patch1d_2
+	235 patch1d_3
+	236 patch1d_4
+	237 patch1d_5
+	238 patch1d_6
+	239 patch1d_7
+	240 patch1e_0
+	241 patch1e_1
+	242 patch1e_2
+	243 patch1e_3
+	244 patch1e_4
+	245 patch1e_5
+	246 patch1e_6
+	247 patch1e_7
+	248 patch1f_0
+	249 patch1f_1
+	250 patch1f_2
+	251 patch1f_3
+	252 patch1f_4
+	253 patch1f_5
+	254 patch1f_6
+	255 patch1f_7
+	  0 patch20_0
+	  1 patch20_1
+	  2 patch20_2
+	  3 patch20_3
+	  4 patch20_4
+	  5 patch20_5
+	  6 patch20_6
+	  7 patch20_7
+	  8 patch21_0
+	  9 patch21_1
+	 10 patch21_2
+	 11 patch21_3
+	 12 patch21_4
+	 13 patch21_5
+	 14 patch21_6
+	 15 patch21_7
+	 16 patch22_0
+	 17 patch22_1
+	 18 patch22_2
+	 19 patch22_3
+	 20 patch22_4
+	 21 patch22_5
+	 22 patch22_6
+	 23 patch22_7
+	 24 patch23_0
+	 25 patch23_1
+	 26 patch23_2
+	 27 patch23_3
+	 28 patch23_4
+	 29 patch23_5
+	 30 patch23_6
+	 31 patch23_7
+	 32 patch24_0
+	 33 patch24_1
+	 34 patch24_2
+	 35 patch24_3
+	 36 patch24_4
+	 37 patch24_5
+	 38 patch24_6
+	 39 patch24_7
+	 40 patch25_0
+	 41 patch25_1
+	 42 patch25_2
+	 43 patch25_3
+	 44 patch25_4
+	 45 patch25_5
+	 46 patch25_6
+	 47 patch25_7
+	 48 patch26_0
+	 49 patch26_1
+	 50 patch26_2
+	 51 patch26_3
+	 52 patch26_4
+	 53 patch26_5
+	 54 patch26_6
+	 55 patch26_7
+	 56 patch27_0
+	 57 patch27_1
+	 58 patch27_2
+	 59 patch27_3
+	 60 patch27_4
+	 61 patch27_5
+	 62 patch27_6
+	 63 patch27_7
+	 64 patch28_0
+	 65 patch28_1
+	 66 patch28_2
+	 67 patch28_3
+	 68 patch28_4
+	 69 patch28_5
+	 70 patch28_6
+	 71 patch28_7
+	 72 patch29_0
+	 73 patch29_1
+	 74 patch29_2
+	 75 patch29_3
+	 76 patch29_4
+	 77 patch29_5
+	 78 patch29_6
+	 79 patch29_7
+	 80 patch2a_0
+	 81 patch2a_1
+	 82 patch2a_2
+	 83 patch2a_3
+	 84 patch2a_4
+	 85 patch2a_5
+	 86 patch2a_6
+	 87 patch2a_7
+	 88 patch2b_0
+	 89 patch2b_1
+	 90 patch2b_2
+	 91 patch2b_3
+	 92 patch2b_4
+	 93 patch2b_5
+	 94 patch2b_6
+	 95 patch2b_7
+	 96 patch2c_0
+	 97 patch2c_1
+	 98 patch2c_2
+	 99 patch2c_3
+	100 patch2c_4
+	101 patch2c_5
+	102 patch2c_6
+	103 patch2c_7
+	104 patch2d_0
+	105 patch2d_1
+	106 patch2d_2
+	107 patch2d_3
+	108 patch2d_4
+	109 patch2d_5
+	110 patch2d_6
+	111 patch2d_7
+	112 patch2e_0
+	113 patch2e_1
+	114 patch2e_2
+	115 patch2e_3
+	116 patch2e_4
+	117 patch2e_5
+	118 patch2e_6
+	119 patch2e_7
+	120 patch2f_0
+	121 patch2f_1
+	122 patch2f_2
+	123 patch2f_3
+	124 patch2f_4
+	125 patch2f_5
+	126 patch2f_6
+	127 patch2f_7
+	128 patch30_0
+	129 patch30_1
+	130 patch30_2
+	131 patch30_3
+	132 patch30_4
+	133 patch30_5
+	134 patch30_6
+	135 patch30_7
+	136 patch31_0
+	137 patch31_1
+	138 patch31_2
+	139 patch31_3
+	140 patch31_4
+	141 patch31_5
+	142 patch31_6
+	143 patch31_7
+	144 patch32_0
+	145 patch32_1
+	146 patch32_2
+	147 patch32_3
+	148 patch32_4
+	149 patch32_5
+	150 patch32_6
+	151 patch32_7
+	152 patch33_0
+	153 patch33_1
+	154 patch33_2
+	155 patch33_3
+	156 patch33_4
+	157 patch33_5
+	158 patch33_6
+	159 patch33_7
+	160 patch34_0
+	161 patch34_1
+	162 patch34_2
+	163 patch34_3
+	164 patch34_4
+	165 patch34_5
+	166 patch34_6
+	167 patch34_7
+	168 patch35_0
+	169 patch35_1
+	170 patch35_2
+	171 patch35_3
+	172 patch35_4
+	173 patch35_5
+	174 patch35_6
+	175 patch35_7
+	176 patch36_0
+	177 patch36_1
+	178 patch36_2
+	179 patch36_3
+	180 patch36_4
+	181 patch36_5
+	182 patch36_6
+	183 patch36_7
+	184 patch37_0
+	185 patch37_1
+	186 patch37_2
+	187 patch37_3
+	188 patch37_4
+	189 patch37_5
+	190 patch37_6
+	191 patch37_7
+	192 patch38_0
+	193 patch38_1
+	194 patch38_2
+	195 patch38_3
+	196 patch38_4
+	197 patch38_5
+	198 patch38_6
+	199 patch38_7
+	200 patch39_0
+	201 patch39_1
+	202 patch39_2
+	203 patch39_3
+	204 patch39_4
+	205 patch39_5
+	206 patch39_6
+	207 patch39_7
+	208 patch3a_0
+	209 patch3a_1
+	210 patch3a_2
+	211 patch3a_3
+	212 patch3a_4
+	213 patch3a_5
+	214 patch3a_6
+	215 patch3a_7
+	216 patch3b_0
+	217 patch3b_1
+	218 patch3b_2
+	219 patch3b_3
+	220 patch3b_4
+	221 patch3b_5
+	222 patch3b_6
+	223 patch3b_7
+	224 patch3c_0
+	225 patch3c_1
+	226 patch3c_2
+	227 patch3c_3
+	228 patch3c_4
+	229 patch3c_5
+	230 patch3c_6
+	231 patch3c_7
+	232 patch3d_0
+	233 patch3d_1
+	234 patch3d_2
+	235 patch3d_3
+	236 patch3d_4
+	237 patch3d_5
+	238 patch3d_6
+	239 patch3d_7
+	240 patch3e_0
+	241 patch3e_1
+	242 patch3e_2
+	243 patch3e_3
+	244 patch3e_4
+	245 patch3e_5
+	246 patch3e_6
+	247 patch3e_7
+	248 patch3f_0
+	249 patch3f_1
+	250 patch3f_2
+	251 patch3f_3
+	252 patch3f_4
+	253 patch3f_5
+	254 patch3f_6
+	255 patch3f_7
+
+)
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/regs.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/regs.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/regs.format	(working copy)
@@ -0,0 +1,302 @@
+(
+  0x8000 core_chipid
+  0x8003 core_kick
+  0x8005 core_lpm_wr
+  0x8006 core_misc_ctrl
+  0x8007 core_otp_rdata
+  0x8009 core_pcmoutfifo
+  0x8010 core_reset
+  0x8011 core_encrypt
+  0x8015 core_uart_txd
+  0x8022 core_ucode_hi
+  0x8023 core_ucode_ctrl
+  0x8024 core_ucode_low
+  0x8025 core_ucode_data
+  0x8040 core_halfslot
+  0x8042 core_clksel
+  0x8043 core_uart_clksel
+  0x8043 core_config 
+  0x8044 core_xtal_stable_time
+  0x8045 core_otp_addr
+  0x8046 core_otp_din
+  0x8047 core_otp_ctrl
+  0x8048 core_otpd_addr
+  0x804a core_otpd_len
+  0x804b core_otpd_ctrl
+  0x804c core_lpm_reg
+  0x804f core_lpm_isogate
+  0x8050 core_clkoff
+  0x8052 core_uart_baud
+  0x8054 core_uart_rsaddr
+  0x8056 core_uart_readdr
+  0x8058 core_uart_rrptr
+  0x805a core_uart_tsaddr
+  0x805c core_uart_teaddr
+  0x805e core_uart_twptr
+  0x8060 core_uart_trptrp
+  0x8062 core_uart_ctrl
+  0x8063 core_bist_ctrl
+  0x8064 core_pwm_pcnt3
+  0x8066 core_pwm_ncnt3 
+  0x8068 core_pwm_pcnt4
+  0x806a core_pwm_ncnt4
+  0x806c core_pwm_pcnt5
+  0x806e core_pwm_ncnt5
+  0x8070 core_gpio_oe0
+  0x8071 core_gpio_oe1
+  0x8072 core_gpio_oe2
+  0x8073 core_gpio_oe3
+  0x8074 core_gpio_out0
+  0x8075 core_gpio_out1
+  0x8076 core_gpio_out2
+  0x8077 core_gpio_out3
+  0x8078 core_gpio_pu0
+  0x8079 core_gpio_pu1
+  0x807a core_gpio_pu2
+  0x807b core_gpio_pu3
+  0x807c core_gpio_pd0
+  0x807d core_gpio_pd1
+  0x807e core_gpio_pd2
+  0x807f core_gpio_pd3
+  0x8080 core_gpio_sel
+  0x8081 core_gpio_sel1
+  0x8082 core_gpio_sel2
+  0x8083 core_gpio_key0
+  0x8084 core_gpio_key1
+  0x8085 core_gpio_key2
+  0x8086 core_spid_ctrl
+  0x8087 core_spid_delay
+  0x8088 core_spid_txlen
+  0x808a core_spid_txaddr
+  0x808c core_spid_rxaddr
+  0x808e core_spid_rxlen
+  0x8090 core_iicd_ctrl
+  0x8091 core_iicd_scl_low
+  0x8092 core_iicd_scl_high
+  0x8093 core_iicd_start_setup
+  0x8094 core_iicd_start_hold
+  0x8095 core_iicd_stop_setup
+  0x8096 core_iicd_data_setup
+  0x8097 core_iicd_data_hold
+  0x8098 core_iicd_txlen
+  0x809a core_iicd_txaddr
+  0x809c core_iicd_rxaddr
+  0x809e core_iicd_rxlen
+  0x80a0 core_pwm_pcnt0
+  0x80a2 core_pwm_ncnt0
+  0x80a4 core_pwm_pcnt1
+  0x80a6 core_pwm_ncnt1
+  0x80a8 core_pwm_pcnt2
+  0x80aa core_pwm_ncnt2
+  0x80b0 core_enc_ctrl
+  0x80b1 core_cvsd_ctrl
+  0x80b2 core_codec_ctrl
+  0x80b3 core_dec_ctrl
+
+
+
+
+  
+  0x8108 core_misc_status
+  0x8109 core_qdec_cntx
+  0x810a core_qdec_cnty
+  0x810b core_qdec_cntz
+  0x810c core_uart_status
+  0x810d core_uart_rbaud
+  0x810e core_uart_txitems
+  0x8110 core_uart_trptr
+  0x8112 core_uart_rxitems
+  0x8114 core_uart_rdptr
+  0x8116 core_uart_rwptr
+  0x8119 core_kscn_kstat
+  0x811a core_kscn_event
+  0x811b core_kscn_event_num
+  0x811c core_gpio_in
+  0x811d core_gpio_in1
+  0x8124 core_current_otp_addr
+  0x8126 core_otpd_remain
+  0x8128 core_spid_remain
+  0x812a core_iicd_remain
+  0x812c core_dma_status
+  0x812d core_perf_status
+  0x812e core_adc_in
+  0x8134 core_pcminfifo
+  0x8135 core_pcminfifo_remain
+  0x8136 core_pcmoutfifo_remain
+  0x8138 core_lpm_ctrl
+  0x813c core_lpm_xtalcnt
+  0x813d core_lpm_buckcnt
+  0x813e core_lpm_ldocnt
+  0x813f core_lpm_latch
+  0x8140 core_gpio_wakeup_low
+  0x8144 core_gpio_wakeup_high
+  0x8149 core_clk_counter
+  0x8150 core_adc_sum
+// dummy regs  
+
+  0x8203 core_ice_ctrl
+  0x8204 core_ice_status
+  0x8205 core_ice_break0
+  0x8207 core_ice_break1
+  
+  0x8280 core_docd_ctrl
+  0x8288 core_docd_paddr
+  0x828a core_docd_pdata
+
+  0x8300 iic_prer_low		
+  0x8301 iic_slave_addr	
+  0x8302 iic_ctr					
+  0x8303 iic_cr					
+  0x8304 iic_rxr					
+  0x8305 iic_txr					
+  0x8306 iic_sr					
+  0x8307 iic_fifo				
+
+  0x8400   mem_b_box          /* entire bank */
+  0x8500   mem_e_box          /* entire bank */
+  0x8600   mem_l_box          /* entire bank */
+
+ifdef REVD
+  0x8700 memk
+endif
+
+  0x8900 rfen_rx
+  0x8901 rfen_tx
+  0x8902 rfen_mdm
+  0x8903 rfen_sn
+  0x8904 rfen_msc
+  0x8905 rfen_ck
+  0x8906 rfen_adc
+  0x890a  rf_iq_gain
+  0x890b  rf_agc_nsat
+  0x890f  rf_adc_goff
+  0x8912 rf_agc_ctrl
+  0x8914 rfen_ulp
+  0x8973 rfen_chgpump
+  0x894b rf_rx_vctrl_reg1
+  0x894c rf_rx_vctrl_reg2
+  0x894d rf_rx_ib_lna
+  0x894e rf_rx_lna_ctrim
+
+  0x8950 rf_bpf_ctrim
+  0x8951 rf_bpf_ib
+  0x8952 rf_adc_rccal
+  0x8952 rf_rccal_ctrl
+  0x8953 rf_rccal_sel
+  0x8955 rf_tx_pa_ib
+  0x8956 rf_tx_pa_gc
+  0x895f rf_pll_rstn
+  0x8964 rf_sdm_en
+  0x8960 rf_pll_intg
+  0x8961 rf_pll_frac
+  0x8963 rf_pll_frachi
+  0x896c rf_afc_cap
+  0x8967 rf_clkpll_bias
+  0x896f rf_clkpll_en
+  0x8968 rf_clkpll_int
+  0x8969 rf_clkpll_frac
+  0x896d rf_balun_ctrim
+  0x8971 rf_adc_mode
+  0x8972 rf_adc_gc
+  0x8973 rf_adc_ch
+  0x8980 rf_rccal_result
+  0x8981 rf_afc_d2a
+  0x8982 rf_rssi
+
+
+0x8a00 core_usb_config		
+0x8a01 core_usb_int_mask	
+0x8a04 core_usb_addr
+0x8a10 core_usb_trig	
+0x8a11 core_usb_stall		
+0x8a12 core_usb_clear		
+0x8a18 core_usb_ep
+0x8a18 core_usb_dfifo0 
+0x8a19 core_usb_dfifo1  
+0x8a1a core_usb_dfifo2 
+0x8a20 core_usb_ep_len
+0x8a26 core_usb_status		
+0x8a27 core_usb_fifo_empty
+0x8a28 core_usb_fifo_full
+
+
+4 rx_freq_offset
+1 tx_freq_offset
+
+/* bit difinitions */
+  4 whiteoff_bit
+  6 clksel_rc
+  5 clksel_dpll
+  4 clksel_xtal
+  5 adc_rccal
+  0 bpf_rccal
+  1 demod_clkoff
+
+(
+  2 reload_code
+  3 gpio_latch
+  4 enable_retmem
+  7 cold_wake
+  0xef isogate_mask
+  0xe0 cs_mask
+)
+
+// misc ctrl
+(
+  0x01 otpd_start
+  0x02 spid_start
+  0x04 iicd_start
+  0x08 lock_otp
+  0x10 x_sethi
+  0x20 y_sethi
+  0x40 z_sethi
+  0x80 ccnt_start
+)
+// dma status bit
+(
+  0 otpd_crcok
+  1 otpd_done
+  2 spid_crcok
+  3 spid_done
+  4 iicd_crcok
+  5 iicd_done
+  6 iicd_ack
+)
+
+0x8b uart_ctrl_default //BCSP
+0x81 uart_ctrl_h4 //H4
+0x81 uart_ctrl_normal
+0x91 uart_ctrl_5line
+0x81 uart_ctrl_57600
+2 uart_baud_len
+0x00 uartclk_crystal
+0x01 uartclk_dpll
+0x1a0 uart_baud_115200
+0xbb uart_baud_256000
+0x340 uart_baud_57600
+0x34 uart_baud_921600
+0x9c4 uart_baud_9600
+0x2dc6c00 uart_clk
+0x16E3600 uart_clk_24
+
+//core_clkoff
+(
+	0 CLOCK_OFF_AUTH_ROM
+	1 CLOCK_OFF_UC_ROM
+	2 CLOCK_OFF_DEBUG_UART
+	3 CLOCK_OFF_SCHED_RAM
+	4 CLOCK_OFF_TRANCE_FIFO
+	5 CLOCK_OFF_CORDIC
+	6 CLOCK_OFF_OTPD
+	7 CLOCK_OFF_I2C
+	8 CLICK_OFF_8051
+	9 CLOCK_OFF_KEYSCAN
+	0x0a CLOCK_OFF_USB
+	0x0b CLOCK_OFF_QDECODER
+	0x0c CLOCK_OFF_SPI
+	0x0d CLOCK_OFF_PWM
+	0x0e CLOCK_OFF_CODEC
+	0x0f CLOCK_OFF_UART
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/rfcomm.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/rfcomm.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/rfcomm.format	(working copy)
@@ -0,0 +1,391 @@
+/*****************************************************************************/
+/* RCS HEADER -- DO NOT ERASE                                                */
+/* $Author: Administrator $                                                           */
+/* $Id: bt_rfcomm_format.upper,v 1.1 2009-09-28 04:06:17 Administrator Exp $ */
+/* Orisil Technology                                                      */
+/*****************************************************************************/
+
+/**********/
+/* memory */
+/**********/
+
+memalloc(
+1 memRemoteRPNBitRate
+1 memRemotePRNDataBits
+1 memRemotePRNStopBit
+1 memRemotePRNParity
+1 memRemotePRNFlowControl
+1 memRemotePRNXon
+1 memRemotePRNXoff
+
+
+3 mem_mod2div_temp
+2 mem_contw_temp
+2 mem_attrib_list
+
+//rfcomm head
+1 mem_current_adss
+1 mem_current_channel
+1 mem_current_frame_type
+1 mem_current_fcs
+2 mem_current_length
+2 mem_rfcomm_uih_payload_ptr
+
+//rfcomm uih
+1 mem_uih_cmd_type
+2 mem_uih_length
+2 mem_param_payload_ptr
+
+
+//rfcomm modem status
+1 mem_ms_param
+
+//rfcomm pn
+1 mem_pn_credit_flow_type_info
+1 mem_pn_priority
+1 mem_pn_acknowledg_timer
+1 mem_pn_max_retrans
+
+1 mem_rfcomm_send_adss
+1 mem_rfcomm_send_frame_type
+1 mem_rfcomm_send_fcs
+1 mem_rfcomm_send_offset
+
+)
+
+xmemalloc(
+1 mem_pn_dlci
+2 mem_pn_max_frame_size
+
+1 memFCStemp1
+1 memFCStemp2
+1 memFCStemp3
+
+1 mem_rfcomm_initiator
+
+1 mem_remote_spp_channel
+
+1 mem_HIUfcs_SPP
+1 mem_HIUfcs_SPP_WCredits
+
+1 mem_rfcomm_send_more_pkt
+
+1 mem_remote_credits
+1 mem_credit_given
+
+//rfcomm modem status
+1 mem_ms_channel
+
+1 mem_credit_flag
+
+2 mem_rfcomm_max_frame_size
+1 mem_rfcomm_credit_init_data
+
+2 mem_cb_receive_spp_data
+
+2 mem_nl_rx_data_src
+2 mem_nl_rx_len_all
+)
+
+
+(
+0 CREDIT_DISABLE
+1 CREDIT_ENABLE
+)
+
+
+/************************************************************************/
+  
+
+ 
+/************/
+/* constant */
+/************/
+
+/* RFCOMM state for Headset (memRFCOMM_State) */ 
+  (
+    0 RFCOMM_IDLE           /* before the responsor HS receive SABM            */
+    1 RFCOMM_W4_DLCI0_OPEN
+    2 RFCOMM_W4_DLCI0_CLOSE
+    3 RFCOMM_START_DLCI0    /* After respond SABM frame (DLCI=0)               */
+    4 RFCOMM_W4_DLCI_OPEN
+    5 RFCOMM_W4_DLCI_CLOSE
+    6 RFCOMM_DLCI_OPENED    
+   
+  )
+  
+/* RFCOMM timer constants   */
+  (
+    1000  RFCOMM_T1         /* Used by SABM and DISC frames,100*20ms = 20s     */     
+    1000  RFCOMM_T2         /* Used by commands send in UIH on DLCI0,          */
+    300   RFCOMM_T3_RINGON  /* 6s for ring fade time                           */
+  
+  )
+
+/* Command Type */
+  (
+    0x3F RSP_RX_SABM        /*responsor expect SABM from initiator             */
+    0x3F INI_TX_SABM
+	
+    0x73 RSP_TX_UA          /*responsor send out UA command                    */
+    0x73 UA_WFBIT_SET	    /* UA control field with F bit set                 */
+	
+    0xEF RSP_RX_UIH         /*responsor expect UIH from initiator              */
+
+    0xEF RSP_TX_UIH         /*responsor send UIH to initiator                  */
+     
+    0x1F RSP_TX_DM          /*responsor send DM to initiator                   */
+    0x1F DM_WFBIT_SET       /* DM control field with F bit set                 */
+    0x0F DM_WFBIT_CLEAR     /* DM control field with F bit clear               */
+
+    0x53 RSP_RX_DISC        /*responsor expect DISC from initiator             */
+    0x53 INI_TX_DISC	    /*initiator send DISC control type command         */
+     
+    0xFF RSP_RX_UIH_WDATA   /*UIH data with credit flow control info           */
+    
+    
+  )
+
+/* Multiplexor commands and responses frames */
+  (
+    0x83 PN_COMMAND           /* Bit 0 EA C/R Type = 000001         */
+    0x81 PN_RESPONSOR         /* Bit 0 EA C/R Type = 000001         */
+    
+    0xE3 MSC_COMMAND          /* Bit 0 EA C/R Type = 000111         */
+    0xE1 MSC_RESPONSOR
+ 
+    0x13 NSC_COMMAND          /* Bit 0 EA C/R Type = 001000         */
+    0x11 NSC_RESPONSOR        /* Bit 0 EA C/R Type = 001000         */
+
+    0x23 TEST_COMMAND         /* Bit 0 EA C/R Type = 000111         */
+    0x21 TEST_RESPONSOR 
+    
+    0x93 RPN_COMMAND          /* Bit 0 EA C/R Type = 001001         */
+    0x91 RPN_RESPONSOR 
+    
+    0x53 RLS_COMMAND          /* Bit 0 EA C/R Type = 001010         */
+    0x51 RLS_RESPONSOR 
+
+    0xA3 FCON_COMMAND         /* Bit 0 EA C/R Type = 000101         */
+    0xA1 FCON_RESPONSOR 
+    
+    0x63 FCOFF_COMMAND        /* Bit 0 EA C/R Type = 000110         */
+    0x61 FCOFF_RESPONSOR 
+    	
+    0x03 RLS_OVERRUN
+    0x05 RLS_PARITY_ERROR
+    0x09 RLS_FRAMING_ERROR
+  )
+
+/* memLocalCredit */
+  (
+    0x01 RFCOMM_CREDIT
+  )
+
+  (
+  	0x007f RFCOMM_MAX_FRAME_SIZE
+  )
+
+/* UIH received Data length */
+  (
+    0  LENGTH_ZERO
+    
+    6  LENGTH_OK
+    7  LENGTH_HOT
+    8  LENGTH_RING
+    9  LENGTH_ERROR
+    9  LENGTH_AGVOL_ONEBYTE
+    10 LENGTH_AGVOL_TWOBYTE
+    10 LENGTH_VOL_ONEBYTE
+    11 LENGTH_VOL_TWOBYTE
+    12 LENGTH_BRSF
+    13 LENGTH_PLUS_CIEV
+    15 LENGTH_INBANDRING
+    14 LENGTH_CIEV_CALL
+    17 LENGTH_CRING
+    20 LENGTH_BRSF_OK
+    24 LENGTH_CIND0
+    28 LENGTH_CIEV_TWO
+    32 LENGTH_CIND_OK
+    59 LENGTH_CIND_OK2
+    100 LENGTH_DISCARD
+  )
+  
+/************/
+/* flags    */
+/************/
+  
+/* memRFCOMM_L2CAP_Interface */
+  (
+    0 RFCOMM_TX_W4BUF_FLAG    /* Wait for Tx buffer empty flag */
+    1 RFCOMM_CLOSE_LINK_FLAG
+  )
+  
+
+    
+/* memRemoteMSC		*/
+  (
+    0 MSC_EA_BIT
+    1 MSC_FC_BIT
+    2 MSC_RTC_BIT
+    3 MSC_RTR_BIT
+    6 MSC_IC_BIT
+    7 MSC_DV_BIT
+  )
+
+/* memRemoteRLS         */
+  (
+    0x0C OVERRUN_ERROR
+    0x0A PARITY_ERROR
+    0x09 FRAMING_RERROR
+  )
+  
+/* memRemoteRPNBitRate  */
+  (
+    0x00 BITS2400
+    0x01 BITS4800
+    0x02 BITS7200
+    0x03 BITS9600
+    0x04 BITS19200
+    0x05 BITS38400
+    0x06 BITS57600
+    0x07 BITS115200
+    0x08 BITS230400
+  )
+  
+/* memRemotePRNDataBits	*/
+  (
+    0x00 DATABITS5
+    0x01 DATABITS6
+    0x02 DATABITS7
+    0x03 DATABITS8
+  )
+  
+/* memRemotePRNStopBit	*/
+  (
+    0    ONESTOP
+    1    ONEHALFSTOP
+  )
+  
+/* memRemotePRNParity   */
+  (
+    0    ODDPARITY
+    1    EVENPARITY
+    2    MARKPARITY
+    3    SPACEPARITY
+    
+    7    PARITY_ENABLE_BIT
+  )
+
+/* RPN bit mask(in)     */
+  (
+     0   BIT_RATE_MASK_BIT
+     1   DATA_BITS_MASK_BIT
+     2   STOP_BITS_MASK_BIT
+     3   PARITY_MASK_BIT
+     4   PARITY_TYPE_MASK_BIT
+     5   XON_CHAR_MASK_BIT
+     6   XOFF_CHAR_MASK_BIT
+  )
+  
+/* RPN bit mask(in) 2    */
+  (
+     0   XON_XOFF_INPUT_MASK_BIT
+     1   XON_XOFF_OUTPUT_MASK_BIT
+     2	 RTR_INPUT_MASK_BIT
+     3   RTR_OUTPUT_MASK_BIT
+     4   RTC_INPUT_MASK_BIT
+     5   RTC_OUTPUT_MASK_BIT
+
+  )
+
+/* memRFCOMM_Request	*/
+  (
+    0 SEND_MSC_CMD_REQ_FLAG
+    1 SEND_AT_CKPD_REQ_FLAG
+    2 SEND_RING_REQ_FLAG
+    3 SEND_SABM_CMD
+  )
+  
+/* memRFCOMM_Misc_Flag  */
+  (
+    0 MSC_CDM_ALREADY_SEND_FLAG
+    1 CREDIT_FLOW_USED_FLAG
+    2 DONT_EMBEDDED_CREDIT_FLAG 
+    3 MSC_EXCHANGE_DONE_FLAG
+    4 FLOW_CONTROL_FCOFF_BIT            /* set when receive FCoff, clear when FCon   */
+  )
+  
+/* memRemoteMSC		*/
+  (
+    1 FLOW_CONTROL_FC_BIT		/* received MSC FC bits                      */
+  
+  )
+/* Address filed        */
+  (
+    0 ADDR_EA_BIT
+    1 ADDR_CR_BIT
+    2 ADDR_D_BIT
+  )
+//should be same as descripted in SDP
+(
+    1 SPP_SLAVE_CHANNEL
+    7 OBEX_SERVER_CHANNEL
+    8 HF_SERVER_CHANNEL 
+    9 HS_SERVER_CHANNEL
+)
+/* memRFCOMM_Flag */
+(
+	0 USING_HF_PROFILE
+	1 USING_HS_PROFILE
+	2 USING_SPP_PROFILE
+)
+/*RFCOMM Frame Type*/
+(
+	0x3f RFCOMM_FRAME_TYPE_SABM
+	0x73 RFCOMM_FRAME_TYPE_UA
+	0xEF RFCOMM_FRAME_TYPE_UIH
+	0xFF RFCOMM_FRAME_TYPE_UIH_CREDITS
+	0x53 RFCOMM_FRAME_TYPE_DISCONN
+)
+/*RFCOMM UIH CMD TYPE*/
+(
+	0x41 UIH_PARAM_NEG_CMD
+	0x40 UIH_PARAM_NEG_RES
+	0x49 UIH_PARAM_CMD_REMOVE_PORT
+	0x71 UIH_MODEM_STATUS_CMD
+	0x70 UIH_MODEM_STATUS_RES
+)
+
+/*bits in rfcomm address*/
+(
+	0 RFCOMM_ADDRESS_EXT_LEN
+	1 RFCOMM_ADDRESS_CR
+	2 RFCOMM_ADDRESS_DERECTION
+
+
+)
+
+	(                                   
+	0 RFCOMM_CHANNEL_STATE_PN_CMD
+	1 RFCOMM_CHANNEL_STATE_PN_RES
+	2 RFCOMM_CHANNEL_STATE_SABM
+	3 RFCOMM_CHANNEL_STATE_UA
+	4 RFCOMM_CHANNEL_STATE_SND_MS_CMD
+	5 RFCOMM_CHANNEL_STATE_RCV_MS_CMD
+	6 RFCOMM_CHANNEL_STATE_SND_MS_RES
+	7 RFCOMM_CHANNEL_STATE_RCV_MS_RES
+	0xff RFCOMM_CHANNEL_SETUP_COMPLETE
+	) 
+
+	/*mem_rfcomm_send_more_pkt*/
+	(
+	1 MORE_PKT_MSC_CMD_HF
+	2 MORE_PKT_MSC_CMD_HS
+	3 MORE_PKT_MSC_CMD_SPP
+	4 MORE_PKT_MSC_CMD_OBEX
+	)
+
+	(
+	127 RFCOMM_MALLOC_SIZE
+	)
\ No newline at end of file
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/sdp.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/sdp.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/sdp.format	(working copy)
@@ -0,0 +1,70 @@
+
+memalloc(
+0 mem_sdp_mem_start
+8 mem_sdp_uuid_search_ptr
+2 mem_sdp_continue_byte
+1 mem_sdp_pduid
+2 mem_sdp_transactionid
+2 mem_sdp_transactionid_local
+2 mem_sdp_attribute_maxbyte
+2 mem_sdp_record_maxcnt
+4 mem_sdp_record_handle
+1 mem_sdp_LACAP_found
+1 mem_sdp_RFCOMM_found
+0 mem_sdp_handle_list
+32 mem_sdp_attrib_list
+2 mem_sdp_error_code
+2 mem_sdp_all_length
+1 mem_handle_humber
+2 mem_search_uuid
+0 mem_sdp_mem_end
+)
+xmemalloc(
+2 mem_ui_uuid_table
+22 mem_all_uuid_16bits
+34 mem_all_uuid_128bits
+2 mem_sdp_l2capch_ptr
+)
+(
+0 AGORHS_SERVICE
+1 GENAUDIO_SERVICE
+2 HANDSFREE_SERVICE
+)
+(
+0 ATTRIBUTEID_0000
+1 ATTRIBUTEID_0001
+2 ATTRIBUTEID_0004
+3 ATTRIBUTEID_0009
+4 ATTRIBUTEID_0100
+5 ATTRIBUTEID_0302
+6 ATTRIBUTEID_0006
+7 ATTRIBUTEID_0311
+)
+
+(
+0x01 SDP_ERROR_RES
+0x02 SDP_SEARCH_REQ
+0x03 SDP_SEARCH_RES
+0x04 SDP_ATTRIBUTE_REQ
+0x05 SDP_ATTRIBUTE_RES
+0x06 SDP_SEARCHATTRIB_REQ
+0x07 SDP_SEARCHATTRIB_RES
+)
+0x2600 sdp_max_amount
+250 SDP_MALLOC_SIZE
+0x6e sdp_tid_spp //any number
+
+(
+0x1f11 SDP_UUID_HS_AUDIO_GATEWAY
+)
+
+(
+0X09 SDP_ATTRIBUTE_ID
+0x0a SDP_ATTRIBUTE_RANGE
+)
+
+(//mem_sdp_handle_list
+7 SDP_MAX_HANDLE_NUMBER
+)
+
+ 
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/security.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/security.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/security.format	(working copy)
@@ -0,0 +1,141 @@
+
+memalloc(
+/* moved from bt.format for 3dh5 1021bytes packet buffer */
+17 mem_rxbuf
+
+16 mem_random_number
+16 mem_round_key
+16 mem_kinit
+
+16 mem_input_store
+16 mem_x
+15 mem_y
+1 mem_y15
+17 mem_key_store
+1 mem_key_store_end
+2 memp_ar_key
+2 memp_ar_input
+10 mem_ar_hround
+
+
+1 mem_ec_infinite
+2 mem_ec_loopc
+1 mem_aes_cmac_data_length
+
+0 memdat
+/* ecc calculation */
+
+24 mem_ax
+24  mem_ay
+24  mem_az
+24 mem_bx
+0 mem_ax_256 //32 bytes
+24 mem_by
+8 mem_bz
+16 mem_ay_256 // 32 bytes
+16 mem_cx
+8 mem_az_256 // 32 bytes
+23 mem_cy
+1 mem_cy5
+0 mem_bx_256 // 32 bytes
+24 mem_cz
+8  mem_k
+16 mem_by_256 // 31 bytes
+16 mem_align
+
+0 mem_bz_256  //32 bytes
+0 mem_tmp1
+24 memahbak
+8 mem_tmp5
+0 mem_cx_256  //32 bytes
+16 memahsave
+16  mem_tmp2
+0 mem_cy_256  // 32 bytes
+0  memahsave_end 
+1  mem_addr_padding 
+7   mem_addr_value         /* 12 bytes     */ 
+0 mem_tmp3
+5 mem_t1
+3  mem_addr_value_end   
+15 mem_addr_iocap_end
+1 mem_cy5_256 // 1 byte
+0 mem_cz_256 // 32 bytes
+0 mem_tmp0
+8 mem_t0
+16 mem_tmp0a
+8  mem_t2
+16 mem_k_256 //32 bytes
+16 mem_t3
+8  mem_tmp1_256 //32 bytes
+24 mem_t7
+
+
+32 mem_tmp5_256
+32  mem_tmp2_256
+0 mem_tmp3_256
+32 mem_t1_256
+0 mem_tmp0_256
+32 mem_t0_256
+32 mem_t2_256
+32 mem_t3_256
+32 mem_t7_256
+
+24 mem_p		
+24 mem_a
+24 mem_b
+24 mem_gx
+24 mem_gy
+32 memh0
+
+//p256
+//2 mem_ec_loopc_256
+//32 mem_ax_256
+//32 mem_ay_256
+//32 mem_az_256
+//32 mem_bx_256
+//32 mem_by_256
+//32 mem_bz_256
+//32 mem_cx_256
+//31 mem_cy_256
+//1 mem_cy5_256
+//32 mem_cz_256
+//32 mem_k_256
+
+
+//32 mem_tmp1_256
+//32 mem_tmp5_256
+//32  mem_tmp2_256
+
+//0 mem_tmp3_256
+//32 mem_t1_256
+//0 mem_tmp0_256
+//32 mem_t0_256
+//32 mem_t2_256
+//32 mem_t3_256
+//32 mem_t7_256
+
+32 mem_p_256		
+32 mem_a_256
+32 mem_gx_256
+32 mem_gy_256
+//4 mem_le_keyid
+16 mem_le_slat
+
+
+//64 mem_regext
+//1 mem_regext_index
+
+//16 mem_le_mackey
+
+
+//1 mem_AES_CMAC_flag
+//16 mem_AES_CMAC_temp
+//16 mem_AES_CMAC_M_last
+
+//4 mem_le_gkey
+
+//16 mem_le_r
+
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/simple_pairing.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/simple_pairing.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/simple_pairing.format	(working copy)
@@ -0,0 +1,188 @@
+/* simple pairing page */
+
+memalloc(
+
+//4 mem_hci_ssp_mode
+0 mem_sp_state_start
+1 mem_sp_state
+1 mem_master_sp_state
+1 mem_sp_flag
+1 mem_master_sp_flag
+1 mem_sp_calc
+1 mem_sp_dh_ready
+1 mem_sp_localsm
+1 mem_pairing_auth
+
+0 mem_sp_flag_start
+1 mem_sp_local_key_send_count
+1 mem_sp_remote_key_recv_count
+1 mem_sp_remote_key_invalid
+1 mem_sp_dhkey_invalid
+
+
+4 mem_gkey
+
+
+8 mem_le_pubkey_remote_x_256
+0 mem_sp_pubkey_remote
+24 mem_sp_pubkey_remote_x
+0 mem_sp_pubkey_remote_x_end
+8 mem_le_pubkey_remote_y_256
+24 mem_sp_pubkey_remote_y
+
+8 mem_le_dhkey_256
+24 mem_sp_dhkey
+0 mem_sp_dhkey_end
+
+16 mem_sp_random_local
+0 mem_sp_random_local_end
+16 mem_sp_random_remote
+0 mem_sp_random_remote_end
+0 memresult
+0 mem_sp_calc_result
+4 memh
+4 memg
+4 memf
+4 meme
+0 mem_sp_calc_result_high
+4 memd
+4 memc
+4 memb
+4 mema
+16 mem_sp_check_result
+16 mem_sp_confirm_remote
+16 mem_sp_prarm_stack
+)
+
+xmemalloc(
+1 mem_sp_local_key_invalid
+
+
+32 mem_le_private_key_256
+32 mem_le_pubkey_local_x_256
+32 mem_le_pubkey_local_y_256
+
+24 mem_sp_private_key
+0 mem_sp_pubkey_local
+24 mem_sp_pubkey_local_x
+0 mem_sp_pubkey_local_x_end
+24 mem_sp_pubkey_local_y
+
+1 mem_ssp_enable
+3 mem_sp_iocap_local
+3 mem_sp_iocap_remote
+
+1 mem_flag_mode_ssp_pin
+1 mem_ssp_mode_flag
+1 mem_authentication_passkey_times
+1 mem_passkey_1bit
+1 mem_flag_pairing_state
+
+)
+/* simple pairing status flag */
+(
+  0x00   SP_FLAG_STANDBY
+  0x01   SP_FLAG_COMMIT
+  0x02   LE_SP_FLAG_COMMIT_256
+
+)
+
+/* simple pairing calc flag */
+(
+  0x00   SP_CALC_STANDBY
+  0x01   SP_CALC_PUBKEY
+  0x02   SP_CALC_DHKEY
+  0x03   SP_CALC_PUBKEY_256
+  0x04   SP_CALC_DHKEY_256
+)
+
+/* simple pairing state */
+(
+  0x00   SP_STAT_NULL
+  0x01   SP_STAT_KEY_RECV
+  0x02   SP_STAT_KEY_GENERATE
+  0x03   SP_STAT_KEY_SEND
+  0x04   SP_STAT_COMMIT_CALC
+  0x05   SP_STAT_COMMIT_SEND
+  0x06   SP_STAT_RANDOM_RECV
+  0x07   SP_STAT_RANDOM_SEND
+  0x08   SP_STAT_CONFIRM_RECV
+  0x09   SP_STAT_CONFIRM_CHECK
+  0x0A   SP_STAT_CONFIRM_CALC
+  0x0B   SP_STAT_CONFIRM_SEND
+  0x0C   SP_STAT_LINK_KEY_CALC
+  0x0F   SP_STAT_DONE
+  0x10   SP_STAT_FEATURE_EXT_SEND
+  0x11   SP_STAT_GKEY_CALC
+  /*simple pairing master only*/
+  0x12   SP_MASTER_STAT_START_SKIP
+  0x13   SP_MASTER_STAT_START_DONE
+  0x14   SP_STAT_COMMITMENT_COMPARE
+  0x15   SP_STATE_END
+)
+
+
+/* simple paring invalid flag */
+(
+  0x00   SP_KEY_INVALID
+  0x01   SP_KEY_VALID
+  0x03   SP_KEY_VALID_256
+
+)
+
+/* encapsulated defination for P-192 key */
+(
+  0x01  ENCAPSULATED_MAJOR_TYPE_P192
+  0x01  ENCAPSULATED_MINOR_TYPE_P192
+  0x30  ENCAPSULATED_LEN_P192
+)
+
+/* bluetooth 2.1 support flag */
+(
+  0x00  SIMPLE_PAIRING_ENABLE
+  0x01  ENCRYPTION_PAUSE_ENABLE
+  0x02  EXTENDED_INQUIRY_RESPOSE_ENABLE
+  0x03  SNIFF_SUBRATING_ENABLE
+)
+
+/*mem_sp_localsm*/
+(
+  0x00 DEFAULT_STATEMACHINE
+  0x01 LOCAL_STATEMACHINE
+)
+
+(
+ 0x00 DEFALT_PAIRING_AUTH
+ 0x01 PAIRING_AUTH
+)
+
+(
+1 SSP_MODE_SSP_PIN_FLAG
+2 SSP_MODE_PASSKEY_ENTRY_FLAG
+3 SSP_MODE_JUST_WORK_FLAG
+)
+
+(//ssp mode
+0x040003 SSP_MODE_JUST_WORK_IO_CAP_DATA
+0X040001 SSP_MODE_SSP_PIN_IO_CAP_DATA
+0X040002 SSP_MODE_PASSKEY_IO_CAP_DATA
+)
+
+(
+0x00 DISPLAY_ONLY
+0x01 DISPLAY_YESNO
+0x02 KEYBOARD_ONLY
+0x03 NO_INPUT_NO_OUTPUT
+)
+
+(
+7 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT
+6 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT
+0 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT
+)
+(
+1 FLAG_PAIRING_STATE_PAIRING
+0 FLAG_PAIRING_STATE_NOT_PAIRING
+)
+
+  
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/ui.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/ui.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/ui.format	(working copy)
@@ -0,0 +1,448 @@
+/*****************************************************************************/
+/* RCS HEADER -- DO NOT ERASE                                                */
+/* $Author: Administrator $                                                           */
+/* $Id: bt_ui_format.upper,v 1.1 2009-09-28 04:06:17 Administrator Exp $     */
+/************************************************************************/
+
+
+	/* ========= memory ============== */
+memalloc(
+2 mem_UI_data_txbuff_length
+
+1 mem_ipc_skip_continue_proc
+0 mem_ui_timer_temp  //length 4
+4 mem_ipc_rega_temp
+) 
+
+xmemalloc(
+//UI Work area
+1 mem_ipc_lock_bt
+1 mem_ipc_lock_c51
+8 mem_ipc_fifo_bt2c51
+8 mem_ipc_fifo_c512bt
+
+1 mem_ui_button_timer
+1 mem_ui_button_last_state
+4 mem_ui_timer_last_btclk
+2 mem_discovery_timeout_timer_count
+1 mem_hid_handshake_timer_count
+1 memui_reconnect_mode
+2 mem_ui_state_map
+
+//UI Config area
+1 mem_ui_profile_supported
+1 mem_ui_button_timeout
+1 mem_ui_button_gpio
+2 mem_discovery_timeout
+1 mem_pin_length
+16 mem_pin
+
+)
+/************/
+/* constant */
+/************/
+
+//mem_ui_state_map
+(
+0 UI_STATE_BT_CONNECTED
+1 UI_STATE_BT_SETUP_COMPLETE
+2 UI_STATE_BT_HID_CONN
+3 UI_STATE_BT_HID_HANDSHAKE
+4 UI_STATE_BT_SPP_CONN
+5 UI_STATE_BT_SNIFF
+6 UI_STATE_BT_DISCOVERY
+7 UI_STATE_BT_RECONNECT
+8 UI_STATE_BT_SLAVE_ROLE
+9 UI_STATE_BLE_CONNECTED
+10 UI_STATE_BLE_WRITE_RCV
+11 UI_STATE_BLE_ADV
+12 UI_STATE_BTN_DOWN
+)
+
+(
+1 UI_STATE_SPP_NL_AUTO_DISCOVER
+
+)
+
+/* UI state for Headset (memui_HS_State) */ 
+   (
+    0 UI_HEADSET_DISCONNECT
+    1 UI_HEADSET_IDLE                   /* before the responsor HS receive SABM      */
+    2 UI_HEADSET_W4CONNECT
+    3 UI_HEADSET_RINGING
+    4 UI_HEADSET_CONNECTED
+    5 UI_HEADSET_PARING
+  )
+/* memui_BB_State */
+(
+  0 UI_BB_OFF
+  1 UI_BB_IDLE
+  2 UI_BB_DISCOVERY
+  3 UI_BB_CONNECTED_ACTIVE_NO_SCO
+  4 UI_BB_CONNECTED_ACTIVE_WITH_SCO
+  5 UI_BB_CONNECTED_ACTIVE_WAIT_SNIFF
+  6 UI_BB_CONNECTED_SNIFF
+  7 UI_BB_RECONNECT
+  8 UI_BB_CONNECTED_SNIFF_WITH_SCO
+)
+
+/************/
+/* flags    */
+/************/
+  
+/* memui_Misc_Flags */
+  (
+    5 NO_IDLE_TURN_OFF
+    7 ANSWER_RING_FLAG               /* 1 Answer,0 no*/
+  )
+
+/* mem_UI_SCH_Interface */
+  (
+    0  UI_HS_PAIRING 
+    2  UI_REQ_CLOSE_RFCOMM
+    3  UI_LINK_LOST
+    4  UI_REQ_OPEN_SCO
+    6  UI_REQ_CLOSE_SCO
+  )
+  
+/* memui_PassOverKey */
+  (
+    0  ANSWER_RING_BIT
+    0  AG_SEND_RING_BIT
+    1  VOL_UP_BIT
+    2  VOL_DOWN_BIT
+    3  INI_CALL_BIT
+    4  DAIL_LAST_CALL
+    5  END_CALL_BIT
+    6  NOKIA_VOICE_ACTIVE 
+    7  REJECT_CALL_BIT
+  )
+  
+/* memui_reconnect_mode */
+(
+  0 NO_RECONNECTION
+  1 RECONNECT_HID
+  2 RECONNECT_HF
+  3 RECONNECT_HS
+  4 RECONNECT_HID_HF
+  5 RECONNECT_HID_HS
+)
+/* memui_Commands */
+(
+0 BT_CMD_STANDBY
+1 BT_CMD_START_DISCOVERY
+2 BT_CMD_STOP_DISCOVERY
+3 BT_CMD_RECONNECT
+4 BT_CMD_DISCONNECT
+5 BT_CMD_ENTER_SNIFF
+6 BT_CMD_EXIT_SNIFF
+7 BT_CMD_ENTER_SNIFF_SUBRATING
+8 BT_CMD_EXIT_SNIFF_SUBRATING
+9 BT_CMD_SNIFF_TEST
+10 BT_CMD_SET_PIN_CODE
+11 BT_CMD_START_INQUIRY
+12 BT_CMD_STOP_INQUIRY
+13 BT_CMD_START_ADV
+14 BT_CMD_STOP_ADV
+15 BT_CMD_START_DIRECT_ADV
+16 BT_CMD_STOP_DIRECT_ADV
+17 BT_CMD_LE_DISCONNECT
+18 BT_CMD_LE_UPDATE_CONN
+19 BT_CMD_LED_OFF
+20 BT_CMD_LED_ON
+21 BT_CMD_LED_BLINK
+22 BT_CMD_LE_START_CONN
+23 BT_CMD_LE_START_SCAN
+24 BT_CMD_LE_STOP_SCAN
+25 BT_CMD_ENTER_HIBERNATE
+27 BT_CMD_LE_SMP_SECURITY_REQUEST
+29 BT_CMD_ROLE_SWITCH
+30 BT_CMD_BB_RECONN_CANCEL
+31 BT_CMD_STORE_RECONN_INFO_LE
+32 BT_CMD_STORE_RECONN_INFO_BT
+33 BT_CMD_DHKEY_NOT_ACCEPT
+34 BT_CMD_START_24G
+35 BT_CMD_STOP_24G
+36 BT_CMD_PAIR_24G
+37 BT_CMD_STORE_RECONN_INFO
+)
+
+(
+0x00 BT_EVT_NULL
+0x01 BT_EVT_BB_CONNECTED
+0x02 BT_EVT_BB_DISCONNECTED
+0x03 BT_EVT_RECONN_STARTED
+0x04 BT_EVT_RECONN_FAILED
+0x05 BT_EVT_SETUP_COMPLETE
+0x06 BT_EVT_HID_CONNECTED
+0x07 BT_EVT_HID_DISCONNECTED
+0x08 BT_EVT_SPP_CONNECTED
+0x09 BT_EVT_SPP_DISCONNECTED
+0x0A BT_EVT_PINCODE_REQ
+0x0B BT_EVT_ENTER_SNIFF
+0x0C BT_EVT_EXIT_SNIFF
+0x0D BT_EVT_ENTER_SNIFF_SUB
+0x0E BT_EVT_EXIT_SNIFF_SUB
+0x0F BT_EVT_DISCOVERY_STOPED
+0x10 BT_EVT_BUTTON_LONG_PRESSED
+0x12 BT_EVT_HID_HANDSHAKE
+0X13 BT_EVT_RECONN_PAGE_TIMEOUT
+0x14 BT_EVT_LE_CONNECTED
+0X15 BT_EVT_LE_DISCONNECTED
+0x16 BT_EVT_ML2CAP_CONN_REFUSED
+0x17 BT_EVT_BUTTON_ENTER_HIBERNATE
+0x18 BT_EVT_LINKKEY_GENERATE
+0x19 BT_EVT_SWITCH_NOT_ACCEPT
+0x20 BT_EVT_SWITCH_ACCEPT
+0x21 BT_EVT_SNIFF_NOT_ACCEPT
+0x22 BT_EVT_SNIFF_ACCEPT
+0x23 BT_EVT_UNSNIFF_ACCEPT
+0x24 BT_EVT_UNSNIFF_NOT_ACCEPT
+0x25 BT_EVT_BUTTON_ADJUST_DPI
+0x26 BT_EVT_SEND_UNSNIFF_ACCEPT
+0x27 BT_EVT_VIRTUAL_CABLE_UNPLUG
+0x28 BT_EVT_LE_WRITE_REQUEST
+0x29 BT_EVT_LE_ENC_INFO
+0x2a BT_EVT_SWITCH_FAIL_MASTER
+0x2b BT_EVT_SWITCH_SUCCESS_MASTER
+0x2c BT_EVT_BUTTON_DOWN
+0x2d BT_EVT_BUTTON_UP
+0x2e BT_EVT_REMOTE_UNSNIFF
+0x30 BT_EVT_LE_PAIRING_FAIL
+0x31 BT_EVT_LE_PAIRING_SUCCESS
+0x32 BT_EVT_LE_START_ENC
+0X33 BT_EVT_LE_PAUSE_ENC
+0X34 BT_EVT_LE_TK_GENERATE
+0x35 BT_EVT_BT_GKEY_GENERATE
+0x36 BT_EVT_BT_GET_PASSKEY
+0x37 BT_EVT_BT_PAIRING_FAIL
+0x38 BT_EVT_BT_PAIRING_SUCCESS
+0x39 BT_EVT_24G_PAIRING_COMPLETE
+0x3a BT_EVT_24G_ATTEMPT_FAIL
+0x3b BT_EVT_LE_GKEY_GENERATE
+0x3c BT_EVT_24G_ATTEMPT_SUCCESS
+0x3d BT_EVT_STORE_NVRAM
+0x3e BT_EVT_LE_PAIRING_COMPLETE
+0x3F BT_EVT_LE_RECONNECT_COMPLETE
+0x40 BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP
+0x41 BT_EVT_LE_LTK_LOST
+)
+//switch
+(
+0 OFF
+1 ON
+)
+/* memui_mem_lock */
+(
+    0 MEM_UNLOCK
+    1 MEM_LOCK
+)
+/* memui_flag0 */
+(
+    0 UI_USER_DATA_FLAG
+    1 UI_WII_WAITING_SLEEP
+    2 UI_KEYBOARD_SNIFF_SKIP
+)
+/* mem_master_type */
+(
+    0 MTYPE_HID_DEFAULT
+    1 MTYPE_HID_SSP
+    2 MTYPE_SPP
+)
+
+	(	
+	0x01 RECIEVE_SDP_CONN_RES
+	0x02 RECIEVE_SDP_CFG_REQ
+	0x03 RECIEVE_SDP_CFG_RES
+	0x04 RECIEVE_RFCOMM_CONN_RES
+	0x05 RECIEVE_RFCOMM_CFG_REQ
+	0x06 RECIEVE_RFCOMM_CFG_RES
+	0x07 RECIEVE_HID_CTRL_CONN_RES
+	0x08 RECIEVE_HID_CTRL_CFG_REQ
+	0x09 RECIEVE_HID_CTRL_CFG_RES
+	0x0A RECIEVE_HID_INT_CONN_RES
+	0x0B RECIEVE_HID_INT_CFG_REQ
+	0x0C RECIEVE_HID_INT_CFG_RES
+	0x0D RECIEVE_AVCTP_CONN_RES
+	0x0E RECIEVE_AVCTP_CFG_REQ
+	0x0F RECIEVE_AVCTP_CFG_RES
+	0x10 RECIEVE_AVDTP_SIGNAL_CONN_RES
+	0x11 RECIEVE_AVDTP_SIGNAL_CFG_REQ
+	0x12 RECIEVE_AVDTP_SIGNAL_CFG_RES
+	0x13 RECIEVE_AVDTP_MEDIA_CONN_RES
+	0x14 RECIEVE_AVDTP_MEDIA_CFG_REQ
+	0x15 RECIEVE_AVDTP_MEDIA_CFG_RES
+	0x16 RECIEVE_SS_REASULT_HS                  
+	0x17 RECIEVE_SS_REASULT_HF                  
+	0x18 RECIEVE_SS_REASULT_AVTARG		          
+	0x19 RECIEVE_SS_REASULT_OBEX		            
+	0x1A RECIEVE_DLCI0_UA
+	0x1B RECIEVE_HS_PARAM_NEG_RES
+	0x1C RECIEVE_HS_UA
+	0x1D RECIEVE_HS_MODEM_STATUS_RES
+	0x1E RECIEVE_HS_MODEm_STATUS_CMD
+	0x1F RECIEVE_HF_PARAM_NEG_RES   
+	0x20 RECIEVE_HF_UA              
+	0x21 RECIEVE_HF_MODEM_STATUS_RES
+	0x22 RECIEVE_HF_MODEm_STATUS_CMD 
+	0x23 RECIEVE_OBEX_PARAM_NEG_RES     
+	0x24 RECIEVE_OBEX_UA              
+	0x25 RECIEVE_OBEX_MODEM_STATUS_RES
+	0x26 RECIEVE_OBEX_MODEm_STATUS_CMD    
+	0x27 RECIEVE_SPP_PARAM_NEG_RES   
+	0x28 RECIEVE_SPP_UA              
+	0x29 RECIEVE_SPP_MODEM_STATUS_RES
+	0x2A RECIEVE_SPP_MODEm_STATUS_CMD
+	0x2b RECIEVE_SDP_DISCONN_RES
+	)
+
+
+
+	(
+	0 UPPERSM_RP_IDLE
+	1 UPPERSM_RP_SDP_CONN
+	2 UPPERSM_RP_SDP_CONN_WAIT
+	3 UPPERSM_RP_SDP_CFG
+	4 UPPERSM_RP_SDP_CFG_WAIT
+	5 UPPERSM_RP_SS_AVTARG
+	6 UPPERSM_RP_SS_AVTARG_WAIT
+	7 UPPERSM_RP_SS_OBEX
+	8 UPPERSM_RP_SS_OBEX_WAIT
+	9 UPPERSM_RP_SDP_DISCONN
+	10 UPPERSM_RP_SDP_DISCONN_WAIT
+	11 UPPERSM_RP_AVDTP_CONN_WAIT
+	12 UPPERSM_RP_AVCTP_CONN
+	13 UPPERSM_RP_AVCTP_CONN_WAIT
+	14 UPPERSM_RP_AVCTP_CFG
+	15 UPPERSM_RP_AVCTP_CFG_WAIT
+	16 UPPERSM_RP_OBEX_CMD_PN
+	17 UPPERSM_RP_OBEX_CMD_PN_WAIT
+	18 UPPERSM_RP_OBEX_SABM
+	19 UPPERSM_RP_OBEX_SABM_WAIT
+	20 UPPERSM_RP_OBEX_CMD_MS
+	21 UPPERSM_RP_OBEX_CMD_MS_WAIT
+	)
+	(		/*mem_upper_sm_reconn*/
+	0 UPPERSM_RECONN_IDLE		
+	1 UPPERSM_RECONN_SDP_CONN		
+	2 UPPERSM_RECONN_SDP_CONN_WAIT		
+	3 UPPERSM_RECONN_SDP_CFG		
+	4 UPPERSM_RECONN_SDP_CFG_WAIT		
+	5 UPPERSM_RECONN_SS_HS
+	6 UPPERSM_RECONN_SS_HS_WAIT
+	7 UPPERSM_RECONN_SS_HF
+	8 UPPERSM_RECONN_SS_HF_WAIT
+	9 UPPERSM_RECONN_SS_AVTARG		
+	10 UPPERSM_RECONN_SS_AVTARG_WAIT		    
+	11 UPPERSM_RECONN_SS_OBEX		            
+	12 UPPERSM_RECONN_SS_OBEX_WAIT		      
+	13 UPPERSM_RECONN_SDP_DISCONN		        
+	14 UPPERSM_RECONN_SDP_DISCONN_WAIT      
+	15 UPPERSM_RECONN_HID_CTRL_CONN		      
+	16 UPPERSM_RECONN_HID_CTRL_CONN_WAIT		
+	17 UPPERSM_RECONN_HID_CTRL_CFG		      
+	18 UPPERSM_RECONN_HID_CTRL_CFG_WAIT     
+	19 UPPERSM_RECONN_HID_INT_CONN		      
+	20 UPPERSM_RECONN_HID_INT_CONN_WAIT		  
+	21 UPPERSM_RECONN_HID_INT_CFG		        
+	22 UPPERSM_RECONN_HID_INT_CFG_WAIT      
+	23 UPPERSM_RECONN_RFCOMM_CONN		        
+	24 UPPERSM_RECONN_RFCOMM_CONN_WAIT		  
+	25 UPPERSM_RECONN_RFCOMM_CFG		        
+	26 UPPERSM_RECONN_RFCOMM_CFG_WAIT       
+	27 UPPERSM_RECONN_RFCOMM_SABM		        
+	28 UPPERSM_RECONN_RFCOMM_SABM_WAIT		  
+	29 UPPERSM_RECONN_SPP_CMD_PN		        
+	30 UPPERSM_RECONN_SPP_CMD_PN_WAIT		    
+	31 UPPERSM_RECONN_SPP_SABM		          
+	32 UPPERSM_RECONN_SPP_SABM_WAIT		      
+	33 UPPERSM_RECONN_SPP_CMD_MS		        
+	34 UPPERSM_RECONN_SPP_CMD_MS_WAIT       
+	35 UPPERSM_RECONN_HF_CMD_PN		          
+	36 UPPERSM_RECONN_HF_CMD_PN_WAIT		    
+	37 UPPERSM_RECONN_HF_SABM		            
+	38 UPPERSM_RECONN_HF_SABM_WAIT		      
+	39 UPPERSM_RECONN_HF_CMD_MS		          
+	40 UPPERSM_RECONN_HF_CMD_MS_WAIT        
+	41 UPPERSM_RECONN_AVDTPs_CONN		        
+	42 UPPERSM_RECONN_AVDTPs_CONN_WAIT		  
+	43 UPPERSM_RECONN_AVDTPs_CFG		        
+	44 UPPERSM_RECONN_AVDTPs_CFG_WAIT       
+	45 UPPERSM_RECONN_AVDTPm_CONN		        
+	46 UPPERSM_RECONN_AVDTPm_CONN_WAIT		  
+	47 UPPERSM_RECONN_AVDTPm_CFG		        
+	48 UPPERSM_RECONN_AVDTPm_CFG_WAIT       
+	49 UPPERSM_RECONN_AVCTP_CONN		        
+	50 UPPERSM_RECONN_AVCTP_CONN_WAIT		    
+	51 UPPERSM_RECONN_AVCTP_CFG		          
+	52 UPPERSM_RECONN_AVCTP_CFG_WAIT		    
+	53 UPPERSM_RECONN_OBEX_CMD_PN		        
+	54 UPPERSM_RECONN_OBEX_CMD_PN_WAIT		  
+	55 UPPERSM_RECONN_OBEX_SABM		          
+	56 UPPERSM_RECONN_OBEX_SABM_WAIT		    
+	57 UPPERSM_RECONN_OBEX_CMD_MS		        
+	58 UPPERSM_RECONN_OBEX_CMD_MS_WAIT     
+	59 UPPERSM_RECONN_SS_SPP
+	60 UPPERSM_RECONN_SS_SPP_WAIT
+	)
+	(/*mem_UI_profile_supported*/
+	0 support_HID
+	1 support_A2DP
+	2 support_AVRCP
+	3 support_HF
+	4 support_HS
+	5 support_PBAP
+	6 support_SPP
+	)
+	/*mem_upper_sm_ss*/
+	(
+	0 UPPERSM_SS_HS
+	1 UPPERSM_SS_HF
+	2 UPPERSM_SS_AVTARG
+	3 UPPERSM_SS_OBEX
+	)
+
+	(
+	160 UI_HUNDRED_MILLISECOND_TIME
+	0XFF UI_BUTTON_GPIO_DISABLE
+	)
+	(
+	0x01 UI_BB_INCONNECT
+	0x10 UI_BB_DISCONNECT
+	)
+(
+0x00 UI_BUTTON_STATE_DOWN
+0x01 UI_BUTTON_STATE_UP
+)
+
+//mem_ipc_skip_continue_proc
+(
+	0 IPC_CONTINUE_PROCESS
+	1 IPC_SKIP_CONTINUE_PROCESS
+)
+
+
+(//led style struct 
+0 		LED_OFFSET_LED_TYPE
+1 		LED_OFFSET_BLINK_COUNT
+2		LED_OFFSET_LED_GPIO
+3		LED_OFFSET_ON_TIME
+5		LED_OFFSET_OFF_TIME
+7 		LED_OFFSET_CB_LEDON
+9		LED_OFFSET_CB_LEDOFF
+11		LED_OFFSET_LENGTH
+)
+
+(//LED state
+0 UI_LED_STATE_BLINK_STOP
+1 UI_LED_STATE_BLINK_START
+2 UI_LED_STATE_LIGHTING
+3 UI_LED_STATE_DARKING
+4 UI_LED_STATE_BLINK_LIGHTING
+5 UI_LED_STATE_BLINK_DARKING
+
+0xFF LED_INFINITE_FLASH_NUM
+
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/utility.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/utility.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/utility.format	(working copy)
@@ -0,0 +1,257 @@
+/**
+*  @file:bt_utility_format.upper
+*  @author: lei.zhu
+*  utility header file. inlcude timer
+*  Copyright:  (C)Hanlynn Technology    
+*/
+
+memalloc(
+
+/*
+    temp parameter
+*/
+2 mem_hold_contr
+2 mem_hold_contw
+1 mem_fifo_temp
+
+8 mem_pdatatemp
+8 mem_temp //8 bytes
+4 mem_timeup // 4 bytes
+4 mem_rega //4 bytes
+4 mem_regb //4 bytes
+3 mem_regc //3 bytes
+2 mem_contr //2 bytes
+2 mem_contw //2 bytes
+
+1 mem_wakup_from_power_flag
+4 mem_saved_gpio_in
+
+0 mem_shutter_random_mac_data_temp
+0 mem_shutter_config_data_temp
+0 mem_le_adv_channel_map_temp
+0 mem_le_data_len_temp	//1byte
+0 mem_tx_fifo_map_temp
+0 mem_rpn_dlci		//1byte
+0 mem_event_cmd_response_content	//2byte
+0 mem_le_prand		//16byte
+0 mem_AES_CMAC_k	 //16 bytes
+0 mem_regext_index 	//1 bytes
+1 mem_temp_block0
+0 mem_le_data_temp	//15bytes
+15 mem_temp_block1
+0 mem_le_aes_128	//16byte
+0 mem_regext   //64 bytes
+0 mem_AES_CMAC_k1  //16 bytes
+16 mem_temp_block2
+0 mem_AES_CMAC_k2  //16 bytes
+16 mem_temp_block3
+0 mem_AES_CMAC_temp  // 16 bytes
+16 mem_temp_block4
+0 mem_AES_CMAC_M_last // 16 bytes
+1 mem_module_uart_cmd
+1 mem_module_uart_opcode
+1 mem_module_uart_len
+1 mem_module_temp_nl_discard_packet
+12 mem_temp_block5
+0 mem_le_mackey //16 bytes
+0 mem_app_receive_temp
+2 mem_key_value_temp
+2 mem_key_value
+1 mem_key_value_temp1
+1 mem_key_value_temp2
+1 mem_key_value_temp3
+1 mem_key_value_temp4
+1 mem_key_value_temp5
+1 mem_key_value_temp6
+6 mem_temp_block6
+
+1 mem_usb_status
+1 mem_usb_fifo_empty
+1 mem_usb_read_len
+64 mem_usb_rxbuf
+2 mem_bufptr
+1 mem_remain
+20 mem_devicedesc
+2 mem_hidreportdesc_kb
+2 mem_hidreportdesc_m
+100 mem_confdesc
+5 mem_string0
+30 mem_string1
+64 mem_string2
+30 mem_string3
+2 mem_usb_zero_packet
+2 mem_usb_ones_packet
+2 mem_usb_two_packet
+1 mem_usb0_state
+
+1 mem_usb_offline_check_gpio
+1 mem_usb_tx_interval
+
+0 mem_usb_clear_mem_start
+0 mem_usb_setup
+1 mem_usb_setup_bmRequestType
+1 mem_usb_setup_bRequest
+1 mem_usb_setup_bValue
+1 mem_usb_setup_bValueH
+2 mem_usb_setup_wIndex
+1 mem_usb_setup_bLength
+1 mem_usb_setup_bLengthH
+64 mem_usb0_setup
+64 mem_usb0_set_report_data
+64 mem_usb0_get_report_data
+1 mem_usb_state
+1 mem_usb_tx_wait
+1 mem_usb_tx_enable
+1 mem_usb_remote_wakeup
+1 mem_usb_clear_remote_wakeup
+1 mem_usb_ep0_stall_status
+1 mem_usb_ep1_stall_status
+1 mem_usb_ep2_stall_status
+1 mem_usb_ep3_stall_status
+2 mem_dsc_info_data_pointer
+1 mem_dsc_info_len
+1 mem_usb0_data_ready_report
+1 mem_usb_tx_win_enable
+1 mem_usb_tx_mac_enable
+1 mem_usb_device_enumeration_endflag
+1 mem_usb_wakestate_onetime_flag
+1 mem_usb_mac_wakeup_trig
+1 mem_usb_set_high_addr_flag
+1 mem_usb_set_protocol_value
+1 mem_usb_set_protocol_status
+1 mem_usb_get_protocol_flag
+1 mem_usb_idle_flag
+1 mem_usb_idle_rate
+2 mem_usb_setup_bValue_temp
+1 mem_usb0_get_set_report
+1 mem_usb_ep1_data
+1 mem_usb_ep2_data
+1 mem_usb_clear_halt
+16 mem_usb_mouse_data
+16 mem_usb_kb_data
+16 mem_usb_kb_multikey
+8 mem_usb_kb_data_sta_data
+8 mem_usb_kb_data_last_data
+3 mem_usb_kb_multikey_sta_data
+3 mem_usb_kb_multikey_last_data
+1 mem_usb_kb_blank_data_enable
+1 mem_usb_kb_mul_blank_data_enable
+1 mem_usb_test_cnt
+0 mem_usb_clear_mem_end
+1 mem_usb_test_kb
+
+256 mem_rssi_noise_buffer
+256 mem_rssi_noise_dg_buffer
+256 mem_rssi_noise_ms_buffer
+256 mem_rssi_noise_kb_buffer
+32 mem_24g_common_temp
+
+2 mem_data_pre
+2 mem_data_current
+3 mem_data_sum
+
+ifdef DEBUGLOG
+1   mem_debuglog_temp
+1   mem_debuglog_type
+1	mem_debuglog_datalen
+2	mem_debuglog_dataval
+2	mem_debuglog_datatype
+1	mem_debuglog_tail
+8	mem_debuglog_pdata
+endif
+
+)
+
+
+(
+/*mem_util_timer_flag0_7*/
+    0   UTIL_TIMER_0_USED
+    1   UTIL_TIMER_1_USED
+    2   UTIL_TIMER_2_USED
+    3   UTIL_TIMER_3_USED
+    4   UTIL_TIMER_4_USED
+    5   UTIL_TIMER_5_USED
+    6   UTIL_TIMER_6_USED
+    7   UTIL_TIMER_7_USED
+/*mem_util_timer_flag8_15*/
+    0   UTIL_TIMER_8_USED
+    1   UTIL_TIMER_9_USED
+    2   UTIL_TIMER_10_USED
+    3   UTIL_TIMER_11_USED
+    4   UTIL_TIMER_12_USED
+    5   UTIL_TIMER_13_USED
+    6   UTIL_TIMER_14_USED
+    7   UTIL_TIMER_15_USED
+)
+
+//util fifo param
+(
+
+8 UTIL_FIFO_LEN
+-1 UTIL_FIFO_OFFSET
+)
+
+
+(
+	0xAA DEBUGLOG_HEAD
+	0x00 DEBUGLOG_TYPE
+	0x04 DEBUGLOG_LEN
+	0xBB DEBUGLOG_TAIL
+)
+
+(
+	0x1000 DEBUGLOG_DTYPE_CALLBACK
+	0x1001 DEBUGLOG_DTYPE_EVENT
+	0x1002 DEBUGLOG_DTYPE_CMD
+	0x1003 DEBUGLOG_DTYPE_STATUS
+	0x1004 DEBUGLOG_DTYPE_MISC
+	0x1005 DEBUGLOG_DTYPE_CONN_SM
+	0x1006 DEBUGLOG_DTYPE_UPPER_SM
+	0x1007 DEBUGLOG_DTYPE_PARSE_LMP
+	0x1008 DEBUGLOG_DTYPE_SEND_LMP
+)
+
+//DEBUGLOG_DTYPE_CALLBACK
+(
+	0x0000 CALLBACK_24G_DATA
+	0x0001 CALLBACK_LE_PROCESS
+	0x0002 CALLBACK_BT_PROCESS
+	0x0003 CALLBACK_BEFORE_LPM
+	0x0004 CALLBACK_BB_EVENT_PROCESS
+	0x0005 CALLBACK_IDLE_PROCESS
+	0x0006 CALLBACK_BEFORE_HIBERNATE
+	0x0007 CALLBACK_ATT_WRITE
+	0x0008 CALLBACK_EVENT_TIMER
+)
+
+//DEBUGLOG_DTYPE_EVENT
+//(
+
+//)
+
+//DEBUGLOG_DTYPE_CMD
+//(
+
+//)
+
+//DEBUGLOG_DTYPE_STATUS
+(
+	0x0000 STATUS_CODE_WAKE
+	0x0001 STATUS_LPM_WAKE
+	0x0004 STATUS_24G_START 
+)
+//DEBUG_DTYPE_MISC
+(
+	0x0000 MISC_LE_RETRANSMIT
+	0x0001 MISC_LOST_MOUSEDATA
+	0x0002 MISC_TXPOWER_0
+	0x0003 MISC_TXPOWER_1
+	0x0004 MISC_TXPOWER_2
+	0x0006 MISC_PULL_MOUSEDATA
+	0x0007 MISC_PUSH_MOUSEDATA
+	0x0008 MISC_LE_RETRANSMIT_MD
+
+
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/var.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/var.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/format/var.format	(working copy)
@@ -0,0 +1,442 @@
+/************************************************************************/
+/* RCS HEADER -- DO NOT ERASE                                           */
+/* $Author: Administrator $                                                     */
+/* $Id: bt_var.osi,v 1.1 2009-09-28 04:06:18 Administrator Exp $   */
+/* Orisil Technology                                                 */
+/************************************************************************/
+
+
+/* packet types */
+(
+  0x02 FHS_PACKET 
+  0x03 DM1_PACKET 
+  0x03 DM1_LMP_PACKET 
+  0x04 DH1_PACKET 
+  0x05 HV1_PACKET 
+  0x06 HV2_PACKET 
+  0x07 HV3_PACKET 
+  0x08 DV_PACKET 
+  0x09 AUX1_PACKET 
+  0x0a DM3_PACKET 
+  0x0b DH3_PACKET 
+  0x0e DM5_PACKET 
+  0x0f DH5_PACKET 
+)
+
+
+/* mem_lmp_respond */
+(
+  0 RESPOND_TO_ALL
+  1 PASS_EVERYTHING
+  2 PASS_ONLY_UNKNOWNS
+  3 RESPOND_TO_LMPS
+)
+/* SCO algorithm defines */
+(
+  0 ULAW
+  1 ALAW
+  2 CVSD
+)
+/* encryption modes */
+(
+  0 NO_ENCRYPTION
+  1 PT_PT_ENCRYPTION
+  2 PT_BROADCAST_ENCRYPTION
+)
+
+/* bits used in mem_lmp_state1 variable */
+(
+  0 LMP_STATE_DETACH
+  1 LMP_STATE_HOLD
+  2 LMP_STATE_SNIFF
+  3 LMP_STATE_PARK
+  4 LMP_STATE_WAIT_SCO_CREATE
+  5 LMP_STATE_WAIT_SCO_KILL
+  6 LMP_STATE_SCO3
+  7 LMP_STATE_WAIT_SCO_START
+)
+/* mem_lmp_state2 */
+(
+  0 LMP_WAIT_FOR_SNIFF_ACCEPT
+  1 LMP_WAIT_FOR_PARK_ACCEPT
+  2 LMP_SEND_UNPARK_ACCEPTED
+  3 LMP_SEND_ENCRYPTION_START
+  4 LMP_SEND_ENCRYPTION_STOP
+  5 MESSAGE_QUEUE
+  7 LMP_STATE_WAIT_BEACON
+)
+/* mem_lmp_state3 */
+(
+ 0 INQUIRY_STATE_CHECK
+ 1 HOST_DELAY_MESSAGE
+ 2 VARIABLE_DELAY
+ 3 TEST_MODE_START_LOOPBACK
+ 4 TEST_MODE_START_PATTERN
+ 5 PARSE_TEST_CONTROL_MESSAGE
+ 6 H_AUTH_SEND_COMB_KEY
+)
+/* mem_rx_status */
+(
+  0 FROM_MASTER
+)
+/* mem_ms_flag */
+(
+  0 MS_RECEIVE_SWITCH_REQ
+  1 MS_SEND_SETUP_COMPLATE
+)
+/* mem_conn_sm */
+(
+  0 CONN_SM_STANDBY
+  1 CONN_SM_WAIT_PAGE
+  2 CONN_SM_SEND_FEATURES
+  3 CONN_SM_WAIT_FEATURES_RES
+  4 CONN_SM_SEND_CONN_REQ
+  5 CONN_SM_WAIT_CONN_ACCEPT
+  6 CONN_SM_AUTH_PAIR
+  7 CONN_SM_AUTH_PAIR_WAIT
+  8 CONN_SM_WAIT_MUTAL_AUTH
+  9 CONN_SM_ENCRYPT
+  0xa CONN_SM_ENCRYPT_WAIT
+  0xb CONN_SM_ENCRYPT_WAIT_CLEAR
+  0xc CONN_SM_SEND_SETUP_COMPLETE
+  0xd CONN_SM_WAIT_SETUP_COMPLETE 
+  0xe CONN_SM_SEND_SWITCH
+  0xf CONN_SM_DETACH_DELAY
+  0x10 CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION
+  0x11 CONN_SM_DELAY_RESTART_CONNECTION
+  0x12 CONN_SM_SEND_VERSION
+  0X13 CONN_SM_WAIT_VERSION
+  0x14 CONN_SM_SEND_FEATURES_EXT
+  0x15 CONN_SM_WAIT_FEATURES_EXT
+  0x16 CONN_SM_PAIRING
+  0x17 CONN_SM_AUTH
+  0x18 CONN_SM_PAIRING_WAIT
+  0x19 CONN_SM_AUTH_WAIT
+  0x1a CONN_SM_DONE
+  0x1b CONN_SM_WAIT_DONE
+)
+
+/* btStateConn1 */
+(
+  0 CONN_STANDBY
+  1 CONN_MASTER_SEND_CONN_REQ
+  2 CONN_MASTER_WAIT_FOR_CONN_ACCEPTED
+  3 CONN_MASTER_AUTH
+  4 CONN_MASTER_WAIT_FOR_FEATURES
+  5 CONN_MASTER_WAIT_FOR_SETUP_COMPLETE
+  6 CONN_MASTER_WAIT_FOR_MAX_SLOT
+  7 CONN_SLAVE_CONN_REQUESTED
+  8 CONN_SLAVE_WAIT_FOR_SETUP_COMPLETE
+  9 CONN_SLAVE_AUTH
+  10 CONN_USING_HOST_OPCODE
+  11 CONN_SLAVE_AUTH_WAIT
+  12 CONN_SLAVE_ENCRYPT_WAIT
+)
+
+/* mem_lmp_conn_state */
+(
+  0 RECEIVED_CONN_REQ
+  1 SENT_CONN_REQ
+  2 RECEIVED_SETUP_COMPLETE
+  3 SENT_SETUP_COMPLETE
+  4 HOST_CONNECTION_MADE
+  6 INIT_COMPLETE
+  7 SNIFF_NEGOTIATE
+)
+/* btStateAuth1 */
+(
+  0 WAIT_FOR_KINIT
+  1 WAIT_FOR_LKA
+  2 WAIT_FOR_LKB
+  3 WAIT_FOR_SRES
+  4 EXAMINE_RECEIVED_SRES
+  5 SEND_AU_RAND
+  6 WAIT_FOR_KC
+  7 DELAYED_ENCRYPT_RESPONSE
+)
+/* btStateAuth2 */
+(
+  0 SENT_SRES
+  1 RECEIVED_IN_RAND
+  2 SENT_AU_RAND
+  3 AUTHENTICATION_FAILED
+  4 AUTHENTICATION_PASSED
+  5 STARTED_AUTH
+  6 SENT_COMB_KEY
+  7 SENT_IN_RAND
+)
+/* btStateAuth3 */
+(
+  0 RECEIVED_AU_RAND
+  1 RECEIVED_SRES
+  2 MUTUALLY_AUTHENTICATE
+)
+/* btStateHost */
+(
+  0 H_AUTH_STARTED
+  2 H_ENCRYPTION_MODE_REQ_PT
+  3 H_ENCRYPTION_KEY_SIZE
+  4 H_ENCRYPTION_START
+  5 H_ENCRYPTION_STOP
+  6 H_AUTH_SECOND_TRY
+)
+/* btStateEncrypt2 */
+(
+  0 RECEIVED_ENCRYPT_MODE_REQ_PT
+  1 RECEIVED_ENCRYPT_KEY_SIZE
+  2 RECEIVED_ENCRYPT_START
+  3 RECEIVED_ENCRYPT_STOP
+  4 STARTED_ENCRYPT_START
+)
+/* mem_ms_state */
+(
+  0x00 MS_STANDBY
+  0x11 M_MINIT_1
+  0x12 M_MINIT_2
+  0x20 M_SINIT_0
+  0x30 S_MINIT_0
+  0x31 S_MINIT_1
+  0x32 S_MINIT_2
+  0x41 S_SINIT_1
+  0x42 S_SINIT_2
+  0x43 S_SINIT_3
+)
+/* mem_test_mode */
+(
+  0 TEST_MODE_ALLOWED
+  1 TEST_MODE_ACTIVE
+)
+/* values for mem_tester_emulate */
+(
+  0x00 NO_TEST_MODE
+  0x00 CONTINUOUS_TRANSMIT
+  0x10 TRANSMIT_TEST
+  0x08 LOOPBACK
+)
+
+/* mem_tx_misc */
+(
+  1 SEND_TX_ADDR
+)
+/* BBHWREG_page_stat */
+(
+  5 PAGE_MODE_END
+)
+/* host_return_parameters_status codes */
+(
+  0x00 HOST_RETURN_SUCCESS
+  0x01 HOST_RETURN_SLAVE_CANT_ISSUE
+  0x02 HOST_RETURN_NO_CONNECTION
+  0x04 HOST_RETURN_PAGE_TIMEOUT
+  0x05 HOST_RETURN_INQUIRY_TIMEOUT
+  0x08 HOST_RETURN_CONNECTION_TIMEOUT
+  0x09 HOST_RETURN_MAX_NUM_CONNECTIONS
+  0x0a HOST_RETURN_MAX_NUM_SCO
+  0x0b HOST_RETURN_MAX_NUM_ACL
+  0x0c HOST_RETURN_SECURITY_REASONS
+  0x10 HOST_RETURN_HOST_TIMEOUT
+  0x11 HOST_RETURN_UNSUPPORTED_FEATURE_PARAMETER
+  0x13 HOST_RETURN_OTHER_END_USER
+  0x14 HOST_RETURN_OTHER_END_LOW_RESOURCE
+  0x15 HOST_RETURN_OTHER_END_POWER_OFF
+  0x16 HOST_RETURN_LOCAL_HOST
+  0x18 HOST_RETURN_PAIRING_NOT_ALLOWED
+  0x19 HOST_RETURN_UNKNOWN_PDU
+  0x1a HOST_RETURN_UNSUPPORTED_REMOTE_FEATURE
+  0x1d HOST_RETURN_SCO_AIR_MODE_REJECTED
+  0x20 HOST_RETURN_UNSUPPORTED_LMP_VALUE
+  0x21 HOST_RETURN_AUTHENTICATION_FAILURE
+  0x22 HOST_RETURN_CHANGED_EXISTING_SCO
+  0x23 HOST_RETURN_HOST_REJECTED
+  0x24 HOST_RETURN_UNSPECIFIED_ERROR
+  0x25 HOST_RESET
+  0x26 HOST_RETURN_BAD_HANDLE
+
+  0x00 HOST_RETURN_ACCEPT_COMMAND
+  0x01 HOST_RETURN_REJECT_COMMAND
+)
+/* host_present */
+(
+  0 HOST_IS_PRESENT
+  1 BCI_IS_PRESENT
+  2 DONT_INIT_RADIO
+)
+/* mem_master_state */
+(
+  0 MASTER_STATE_STANDBY
+  1 MASTER_INQUIRY
+)
+/* misc */
+(
+  92 SECOND_SWITCH_REQ
+  93 SLAVE_DELAY_DETACH
+  94 MASTER_DELAY_DETACH
+  95 UNSNIFF_DELAY_DETACH
+  0 WE_STARTED_AS_MASTER
+  1 WE_STARTED_AS_SLAVE
+)
+/* mem_host_commands */
+(
+  0x01 HOST_INQUIRY
+  0x02 HOST_INQUIRY_CANCEL
+  0x03 HOST_CREATE_CONNECTION
+  0x04 HOST_DISCONNECT_CONNECTION
+  0x05 HOST_ADD_SCO_REQUEST
+  0x06 HOST_REMOTE_NAME_REQUEST
+  0x07 HOST_WRITE_SUPPORTED_FEATURES
+  0x08 HOST_SET_TX_LEVEL
+  0x09 HOST_SET_RX_LEVEL
+  0x0a HOST_SNIFF_REQUEST
+  0x0b HOST_UNSNIFF_REQUEST
+  0x0c HOST_WRITE_LINK_SUPERVISION_TIMEOUT
+  0x0e HOST_WRITE_SCAN_ENABLE
+  0x0f HOST_READ_AUDIO_QUALITY
+  0x10 HOST_ENABLE_DEVICE_UNDER_TEST
+  0x14 HOST_BUTTON_CONFIGURE
+  0x15 HOST_SET_LOW_BATTERY_LEVEL
+  0x16 HOST_WRITE_LOCAL_NAME
+  0x17 HOST_WRITE_LOCAL_PIN
+  0x18 HOST_KILL_SCO_REQUEST
+  0x19 HOST_QOS_REQ
+
+  0x1a HOST_FEATURES_REQUEST
+  0x1b HOST_VERSION_REQUEST
+  0x1c HOST_TIMING_REQUEST
+  0x1d HOST_CLK_OFFSET_REQUEST
+  0x1e HOST_AUTHENTICATE
+  0x1f HOST_START_ENCRYPTION
+  0x20 HOST_STOP_ENCRYPTION
+  0x21 HOST_HOLD_REQUEST
+  0x22 HOST_HOLD_FORCE
+  0x23 HOST_PARK_REQUEST
+  0x24 HOST_MOD_BEACON
+  0x25 HOST_SET_BROADCAST_SCAN_WINDOW
+  0x26 HOST_UNPARK_PM_REQUEST
+  0x27 HOST_UNPARK_BD_REQUEST
+  0x28 HOST_SLAVE_REQUEST_UNPARK
+  0x29 HOST_DECREASE_POWER_REQUEST
+  0x2a HOST_INCREASE_POWER_REQUEST
+  0x2b HOST_SEND_PREFERRED_RATE
+  0x2c HOST_MAX_SLOT_REQ
+  0x2d HOST_MAX_SLOT_FORCE
+  0x2e HOST_PAGE_MODE_REQUEST
+  0x2f HOST_PAGE_SCAN_MODE_REQUEST
+  0x30 HOST_MASTER_SLAVE_SWITCH
+  0x31 HOST_SEND_AUTO_RATE
+  0x32 HOST_PAGE_CANCEL
+  0x33 HOST_CHANGE_LINK_KEY
+  0x34 HOST_RADIO_READ
+  0x35 HOST_RADIO_WRITE
+  0x36 HOST_REMOTE_SLAVE_INIT_UNPARK_REQUESTED
+
+  0x40 HOST_REMOTE_CONNECTION_REQUESTED
+  0x41 HOST_REMOTE_DETACH
+  0x42 HOST_REMOTE_SCO_CREATE_REQUESTED
+  0x43 HOST_REMOTE_SCO_KILL_REQUESTED
+  0x44 HOST_REMOTE_PARK_REQUESTED
+  0x45 HOST_REMOTE_UNPARK_REQUESTED
+  0x46 HOST_REMOTE_SNIFF_REQUESTED
+  0x47 HOST_REMOTE_UNSNIFF_REQUESTED
+  0x48 HOST_REMOTE_HOLD_REQUESTED
+  0x49 HOST_REMOTE_AUTHENTICATION
+  0x4a HOST_REMOTE_START_ENCRYPTION_REQUESTED
+  0x4b HOST_REMOTE_STOP_ENCRYPTION_REQUESTED
+  0x4c HOST_MODE_CHANGE_EVENT
+  0x4d HOST_REMOTE_TEST_ACTIVATE
+  0x4e HOST_REMOTE_TEST_CONTROL
+  0x4f HOST_REMOTE_TIMING_REQUEST
+)
+/* BCI interface (not used if not compiled in ) */
+(
+  0x01 BCI_INQUIRY
+  0x02 BCI_INQUIRY_CANCEL
+  0x03 BCI_CREATE_CONNECTION
+  0x04 BCI_DISCONNECT
+  0x05 BCI_ADD_SCO_CONNECTION
+  0x06 BCI_REMOTE_NAME_REQUEST
+  0x07 BCI_WRITE_SUPPORTED_FEATURES
+  0x08 BCI_SET_TX_POWER_LEVEL
+  0x09 BCI_SET_RX_POWER_LEVEL
+  0x0a BCI_SNIFF_MODE
+  0x0b BCI_EXIT_SNIFF_MODE
+  0x0c BCI_WRITE_LINK_SUPERVISION_TIMEOUT
+  0x0d BCI_WRITE_PAGE_TIMEOUT
+  0x0e BCI_WRITE_SCAN_ENABLE
+  0x0f BCI_GET_AUDIO_QUALITY
+  0x10 BCI_ENABLE_DEVICE_UNDER_TEST
+  0x11 BCI_SEND_DATA
+  0x12 BCI_REGISTER_SERVICE_RECORD
+  0x13 BCI_SERVICE_SEARCH_ATTRIB_REQ
+  0x14 BCI_BUTTON_CONFIGURE
+  0x15 BCI_SET_LOW_BATTERY_LEVEL
+  0x16 BCI_WRITE_LOCAL_NAME
+  0x17 BCI_WRITE_LOCAL_PIN
+  0x18 BCI_REMOVE_SCO_CONNECTION
+  0x19 BCI_QUALITY_OF_SERVICE
+  0x40 BCI_REMOTE_CONNECTION_REQUEST
+  0x41 BCI_REMOTE_DETACH
+  0x42 BCI_REMOTE_ADD_SCO_REQUEST
+  0x43 BCI_REMOTE_REMOVE_SCO_REQUEST
+  0x44 BCI_REMOTE_PARK_REQUEST
+  0x45 BCI_REMOTE_UNPARK_REQUEST
+  0x46 BCI_REMOTE_SNIFF_REQUEST
+  0x47 BCI_REMOTE_UNSNIFF_REQUEST
+  0x48 BCI_REMOTE_HOLD_REQUEST
+  0x49 BCI_REMOTE_AUTHENTICATION_PAIRING_REQUEST
+  0x4a BCI_REMOTE_START_ENCRYPTION_REQUEST
+  0x4b BCI_REMOTE_STOP_ENCRYPTION_REQUEST
+  0x4c BCI_MODE_CHANGE_EVENT
+)
+/* mode changes */
+(
+  0 MODE_CHANGE_ACTIVE
+  1 MODE_CHANGE_SNIFFING
+  2 MODE_CHANGE_PARKED
+  3 MODE_CHANGE_HOLDING
+  4 MODE_CHANGE_SCO_ADDED
+  5 MODE_CHANGE_SCO_REMOVED
+  6 MODE_CHANGE_ACL_CONNECTION
+  7 MODE_CHANGE_DISCONNECT
+  8 MODE_CHANGE_SCO_CHANGED
+  9 MODE_CHANGE_ENCRYPTING
+  10 MODE_CHANGE_NOT_ENCRYPTING
+  11 MODE_CHANGE_BUTTON_UP
+  12 MODE_CHANGE_BUTTON_DOWN
+  13 MODE_CHANGE_BATTERY_LOW
+  14 MODE_CHANGE_RESET
+  15 MODE_CHANGE_INQUIRY_CANCELED_RMTCMD
+  16 MODE_ACTIVE_MSSWITCH_PASSED
+  17 MODE_ACTIVE_MSSWITCH_FAILED
+)
+/* mem_battery - low nibble is level information, upper nibble is status info */
+(
+  6 BATTERY_CHECK_LEVEL
+  7 BATTERY_SENT_STATUS
+)
+/* mem_radio_version */
+(
+  0x02 RADIO_2001
+  0x12 RADIO_2002
+  0x32 RADIO_2002_DDM
+  0x42 RADIO_1008A1
+  0x52 RADIO_1018A0
+)
+/* mem_slave_initiated_conn */
+(
+  0 SLAVE_INIT_AUTHENTICATION
+  1 SLAVE_INIT_ENCRYPTION
+  2 SLAVE_INIT_MASTER_SLAVE_SWITCH
+)
+/* connection_options */
+(
+  0 CONNECTION_AUTH
+  1 CONNECTION_ENCRYPT
+  2 CONNECTION_SWITCH
+  3 CONNECTION_ACL
+  4 CONNECTION_FEATURE_EXT
+)
+/* mem_debug_config */
+(
+  7 AA_INSERTION
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/bt_format.meta
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/bt_format.meta	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/bt_format.meta	(working copy)
@@ -0,0 +1,9191 @@
+0x4000 mem_patch00
+0x4001 mem_patch01
+0x4002 mem_patch02
+0x4003 mem_patch03
+0x4004 mem_patch04
+0x4005 mem_patch05
+0x4006 mem_patch06
+0x4007 mem_patch07
+0x4008 mem_patch08
+0x4009 mem_patch09
+0x400a mem_patch0a
+0x400b mem_patch0b
+0x400c mem_patch0c
+0x400d mem_patch0d
+0x400e mem_patch0e
+0x400f mem_patch0f
+0x4010 mem_patch10
+0x4011 mem_patch11
+0x4012 mem_patch12
+0x4013 mem_patch13
+0x4014 mem_patch14
+0x4015 mem_patch15
+0x4016 mem_patch16
+0x4017 mem_patch17
+0x4018 mem_patch18
+0x4019 mem_patch19
+0x401a mem_patch1a
+0x401b mem_patch1b
+0x401c mem_patch1c
+0x401d mem_patch1d
+0x401e mem_patch1e
+0x401f mem_patch1f
+0x4020 mem_patch20
+0x4021 mem_patch21
+0x4022 mem_patch22
+0x4023 mem_patch23
+0x4024 mem_patch24
+0x4025 mem_patch25
+0x4026 mem_patch26
+0x4027 mem_patch27
+0x4028 mem_patch28
+0x4029 mem_patch29
+0x402a mem_patch2a
+0x402b mem_patch2b
+0x402c mem_patch2c
+0x402d mem_patch2d
+0x402e mem_patch2e
+0x402f mem_patch2f
+0x4030 mem_patch30
+0x4031 mem_patch31
+0x4032 mem_patch32
+0x4033 mem_patch33
+0x4034 mem_patch34
+0x4035 mem_patch35
+0x4036 mem_patch36
+0x4037 mem_patch37
+0x4038 mem_patch38
+0x4039 mem_patch39
+0x403a mem_patch3a
+0x403b mem_patch3b
+0x403c mem_patch3c
+0x403d mem_patch3d
+0x403e mem_patch3e
+0x403f mem_patch3f
+0x4040 mem_context
+0x4090 mem_current_amaddr
+0x4091 mem_lpm_mode
+0x4092 mem_device_option
+0x4093 mem_scan_mode
+0x4094 mem_last_clkn
+0x4098 mem_features
+0x40a0 mem_lap
+0x40a3 mem_uap
+0x40a4 mem_nap
+0x40a6 mem_npage
+0x40a7 mem_glap
+0x40aa mem_class
+0x40ad mem_iscan_window
+0x40af mem_iscan_interval
+0x40b1 mem_pscan_window
+0x40b3 mem_pscan_interval
+0x40b5 mem_page_interval
+0x40b7 mem_page_window
+0x40b9 mem_page_to
+0x40bb mem_inq_window
+0x40bd mem_fcomp_mul
+0x40be mem_fcomp_div
+0x40bf mem_rx_window_init
+0x40c1 mem_rx_window_sniff
+0x40c3 mem_rf_init_ptr
+0x40c5 mem_last_type
+0x40c6 mem_last_type_esco
+0x40c7 mem_last_type_saved
+0x40c8 mem_retransmission_cnt
+0x40ca mem_next_btclk
+0x40ce mem_rf_rccal
+0x40cf mem_handle_num
+0x40d0 mem_max_slot
+0x40d1 mem_eir_enable
+0x40d2 mem_afh_instant
+0x40d6 mem_afh_error_total
+0x40d8 mem_afh_cfg
+0x40d9 mem_afh_new_mod
+0x40da mem_afh_map_lo
+0x40df mem_afh_map_hi
+0x40e4 mem_afh_used
+0x40e5 mem_afh_index
+0x40e7 mem_afh_map_new
+0x40f2 mem_afh_map
+0x4142 mem_afh_timer
+0x4146 mem_afh_classify_channel_map
+0x4150 mem_chip_functions
+0x4152 mem_lpm_wake_lock
+0x4154 mem_lpm_interval
+0x4156 mem_lpm_overhead
+0x4157 mem_lpm_hibernate_switch
+0x4158 mem_esco_addr
+0x4159 mem_sniff_unint_lost
+0x415a mem_ptt
+0x415b mem_sleep_counter//should be 0x41fc in REVC
+0x415f mem_sleep_counter_all
+0x4163 mem_sleep_clkn
+0x4169 mem_sniff_rcv
+0x416c mem_sniff_lost
+0x416f mem_clks_per_lpo
+0x4172 mem_lpm_mult
+0x4173 mem_lpm_mult_timeout
+0x4174 mem_lpm_mult_cnt
+0x4175 mem_lpm_config
+0x4178 mem_lpm_xtalcnt
+0x4179 mem_lpm_buckcnt
+0x417a mem_lpm_ldocnt
+0x417b mem_lpm_isogate
+0x417c mem_lpm_isogate_final
+0x417d mem_saved_gpio// should be 0x421e in REVC
+0x418d mem_saved_gsel
+0x4190 mem_saved_mark
+0x4198 mem_saved_spidctrl
+0x4199 mem_patch_ptr
+0x419b mem_patch_len
+0x419d mem_timers
+0x41bd mem_link_key_exists
+0x41be mem_link_key
+0x41ce mem_hci_cmd
+0x41cf mem_hci_conn_handle
+0x41d0 mem_hci_plap
+0x41d3 mem_hci_puap
+0x41d4 mem_hci_pnap
+0x41d6 mem_uartd_rxitems_got_data
+0x41d7 mem_uartd_rxitems_threshold
+0x41d8 mem_uartd_rx_timeout
+0x41da mem_loadcode_times
+0x41db mem_tx_lch
+0x41dc mem_tx_len
+0x41de mem_tx_power
+0x41df mem_context_number
+0x41e0 mem_250k_freq_enable
+0x41e1 mem_rf_init_data
+0x41e2 mem_app_handshake_flag
+0x41e3 mem_sniff_param_interval
+0x41e5 mem_sniff_param_attempt
+0x41e7 mem_sniff_param_timeout
+0x41e9 mem_cb_check_wakelock
+0x41eb mem_cb_before_hibernate
+0x41ed mem_cb_before_lpm
+0x41ef mem_cb_le_process
+0x41f1 mem_cb_bt_process
+0x41f3 mem_cb_idle_process
+0x41f5 mem_cb_bb_event_process
+0x41f7 mem_cb_discovry_timeout
+0x41f9 mem_cb_att_write
+0x41fb mem_cb_ble_transmit
+0x41fd mem_cb_event_timer
+0x41ff mem_cb_bt_set_mult
+0x4201 mem_cb_spi_flash_write_complate
+0x4203 mem_eeprom_base
+0x4205 mem_unsniff2sniff_timer_count
+0x4206 mem_wake_up_delay_timer
+0x4207 mem_app_connection_options
+0x4208 mem_app_disconn_reason
+0x420a mem_app_disconn_reason_flag
+0x420c mem_lpm_delay_after_sniff
+0x4210 mem_xrecord_mode
+0x4211 mem_eeprom_block_size
+0x4212 mem_spi_init_clk
+0x4213 mem_spi_init_delay_time
+0x4214 mem_spi_ncs_gpio
+0x4215 mem_nv_data_ptr
+0x4217 mem_nv_data_number
+0x4218 mem_queue_ptr
+0x421a mem_ui_led_struct_num
+0x421b mem_ui_led_struct_ptr
+0x421d mem_0_5_adc_io_data
+0x421f mem_1v_adc_hvin_data
+0x4221 mem_2v_adc_vinlpm_data
+0x4223 mem_1v_adc_io_data
+0x4225 mem_5v_adc_hvin_data
+0x4227 mem_3v_adc_vinlpm_data
+0x4229 mem_otp_adc_flag
+0x422b mem_reference_voltage
+0x422d mem_adc_config_flag
+0x422e mem_adc_channel
+0x422f mem_adc_current_value
+0x4231 mem_adc_power_flag//bit0:low power falg ; bit1:no power flag
+0x4232 mem_spi_write_addr
+0x4235 mem_spi_write_ptr
+0x4237 mem_spi_write_len
+0x4239 mem_spi_write_flash_sm
+0x423a mem_eeprom_wp_gpio
+0x423b mem_kscan_ptr
+0x423d mem_key_num_ptr
+0x423d mem_keyscan_ptr
+0x423f mem_power_param_ptr
+0x4241 mem_24g_head_ptr
+0x4243 mem_baud
+0x4245 mem_hci_lt_rx_state
+0x4246 mem_l2cap_xmem_start
+0x4246 mem_l2cap_tx_multi_offset//0 means single packet
+0x4248 mem_sdp_remote_cid
+0x424a mem_rfcomm_remote_cid
+0x424c mem_hid_ctrl_remote_cid
+0x424e mem_hid_int_remote_cid
+0x4250 mem_sdp_state
+0x4251 mem_rfcomm_state
+0x4252 mem_hid_control_state
+0x4253 mem_hid_interrupt_state
+0x4254 mem_spp_state
+0x4255 mem_ML2CAP_comm_id
+0x4256 mem_used_map
+0x4257 mem_tx_fifo0
+0x4257 mem_tx_fifo0_map
+0x4258 mem_tx_fifo0_ptr
+0x425a mem_tx_fifo1
+0x425a mem_tx_fifo1_map
+0x425b mem_tx_fifo1_ptr
+0x425d mem_tx_fifo2
+0x425d mem_tx_fifo2_map
+0x425e mem_tx_fifo2_ptr
+0x4260 mem_tx_fifo3
+0x4260 mem_tx_fifo3_map
+0x4261 mem_tx_fifo3_ptr
+0x4263 mem_tx_fifo_end
+0x4263 mem_l2cap_lpm_txbuf
+0x4363 mem_l2cap_flow_ctrl_flag
+0x4364 mem_l2cap_pending_item
+0x4365 mem_l2cap_xmem_end
+0x4365 mem_le_dsniff
+0x4367 mem_le_conn_interval
+0x4369 mem_le_scan_enable
+0x436a mem_le_scan_interval
+0x436c mem_le_scan_window
+0x436e mem_le_adv_enable
+0x436f mem_le_adv_data_len
+0x4370 mem_le_adv_data
+0x438f mem_le_scan_data_len
+0x4390 mem_le_scan_data
+0x43af mem_le_name_len
+0x43b0 mem_le_name
+0x43ce mem_le_new_map
+0x43d3 mem_le_new_param
+0x43d3 mem_le_new_transmitwindowsize
+0x43d4 mem_le_new_transmitwindowoffset
+0x43d6 mem_le_new_conninterval
+0x43d8 mem_le_new_connslavelatency
+0x43da mem_le_new_connsupervisiontimeout
+0x43dc mem_le_txheader
+0x43dd mem_le_txlen
+0x43de mem_le_txpayload
+0x43e0 mem_le_txcid
+0x43e2 mem_le_l2cap
+0x43e3 mem_le_l2cap_response
+0x43e4 mem_le_txbdy
+0x4403 mem_le_pcnt_tx
+0x4408 mem_le_pcnt_rx
+0x440d mem_le_last_mic
+0x4411 mem_le_ivm
+0x4415 mem_le_ivs
+0x4419 mem_le_ltk
+0x4429 mem_ltk_exists
+0x442a mem_le_rconfirm
+0x443a mem_le_srand
+0x444a mem_le_iat
+0x444b mem_le_rat
+0x444c mem_le_preq
+0x444d mem_le_preq_iocap
+0x444e mem_le_preq_oob
+0x444f mem_le_preq_auth
+0x4450 mem_le_preq_max_keysize
+0x4451 mem_le_preq_init_key_distribution
+0x4452 mem_le_preq_resp_key_distribution
+0x4453 mem_le_pres
+0x4454 mem_le_pres_iocap
+0x4455 mem_le_pres_oob
+0x4456 mem_le_pres_auth
+0x4457 mem_le_pres_max_keysize
+0x4458 mem_le_pres_init_key_distribution
+0x4459 mem_le_pres_resp_key_distribution
+0x445a mem_le_search_handle_start
+0x445c mem_le_search_handle_end
+0x445e mem_le_att_offset
+0x445e mem_le_search_att_type_length
+0x445f mem_le_search_att_type
+0x446f mem_le_notify_handle
+0x4471 mem_le_search_uuid_length
+0x4472 mem_le_search_uuid
+0x4482 mem_le_adv_param
+0x4482 mem_le_adv_interval
+0x4484 mem_le_adv_type
+0x4485 mem_le_adv_own_addr_type
+0x4486 mem_le_adv_direct_addr_type
+0x4487 mem_le_adv_direct_addr
+0x448d mem_le_adv_channel_map
+0x448e mem_le_conn_param
+0x448e mem_le_conn_peer_addr_type
+0x448f mem_le_conn_peer_addr
+0x4495 mem_le_conn_own_addr_type
+0x4496 mem_le_interval_min
+0x4498 mem_le_interval_max
+0x449a mem_le_latency
+0x449c mem_le_timeout
+0x449e mem_le_scan_params
+0x449e mem_le_scan_type
+0x449f mem_le_scan_own_addr_type
+0x44a0 mem_le_lap
+0x44a3 mem_le_uap
+0x44a4 mem_le_nap
+0x44a6 mem_le_local_mtu
+0x44a8 mem_le_remote_mtu
+0x44aa mem_le_skdm
+0x44b2 mem_le_skds
+0x44ba mem_le_init_superto
+0x44bc mem_ui_le_uuid_table
+0x44be mem_le_secure_connect_enable
+0x44bf mem_le_secure_connect_flag
+0x44c0 mem_le_sc_calc
+0x44c1 mem_le_secure_connect_state
+0x44c2 mem_le_sc_confirm_gkey_flag
+0x44c3 mem_le_sc_local_key_invalid
+0x44c4 mem_le_pairing_state
+0x44c5 mem_le_enc_state
+0x44c6 mem_le_pairing_mode
+0x44c7 mem_le_tk
+0x44cb mem_le_ediv
+0x44cd mem_le_rand
+0x44d5 mem_le_irk
+0x44e5 mem_le_transmit_window
+0x44e9 mem_le_configuration
+0x44ea mem_le_fixed_ltk
+0x44fa mem_le_pairing_handle
+0x44fc mem_le_l2cap_size
+0x44fe mem_le_packet_len_recved
+0x44ff mem_le_tx_buff_used
+0x4500 mem_le_tx_ptr0
+0x4502 mem_le_tx_ptr1
+0x4504 mem_le_tx_ptr2
+0x4506 mem_le_tx_ptr3
+0x4508 mem_le_signaling_identifier
+0x4509 mem_le_l2cap_signaling_conn_param_update_rsp_result
+0x450b mem_le_packet_size
+0x450c mem_le_packet_llid
+0x450d mem_le_payload_ptr
+0x450f mem_le_md_count
+0x4510 mem_lmp_version
+0x4513 mem_lmp_subversion
+0x4515 mem_local_name_length
+0x4516 mem_local_name
+0x4519 mem_local_name2
+0x4559 mem_local_name_end
+0x455a mem_unsniff2sniff_timer
+0x455b mem_switch_flag
+0x455c mem_classic_bt_flag
+0x455d mem_pn_dlci
+0x455e mem_pn_max_frame_size
+0x4560 memFCStemp1
+0x4561 memFCStemp2
+0x4562 memFCStemp3
+0x4563 mem_rfcomm_initiator
+0x4564 mem_remote_spp_channel
+0x4565 mem_HIUfcs_SPP
+0x4566 mem_HIUfcs_SPP_WCredits
+0x4567 mem_rfcomm_send_more_pkt
+0x4568 mem_remote_credits
+0x4569 mem_credit_given
+0x456a mem_ms_channel
+0x456b mem_credit_flag
+0x456c mem_rfcomm_max_frame_size
+0x456e mem_rfcomm_credit_init_data
+0x456f mem_cb_receive_spp_data
+0x4571 mem_nl_rx_data_src
+0x4573 mem_nl_rx_len_all
+0x4575 mem_ui_uuid_table
+0x4577 mem_all_uuid_16bits
+0x458d mem_all_uuid_128bits
+0x45af mem_sdp_l2capch_ptr
+0x45b1 mem_sp_local_key_invalid
+0x45b2 mem_le_private_key_256
+0x45d2 mem_le_pubkey_local_x_256
+0x45f2 mem_le_pubkey_local_y_256
+0x4612 mem_sp_private_key
+0x462a mem_sp_pubkey_local
+0x462a mem_sp_pubkey_local_x
+0x4642 mem_sp_pubkey_local_x_end
+0x4642 mem_sp_pubkey_local_y
+0x465a mem_ssp_enable
+0x465b mem_sp_iocap_local
+0x465e mem_sp_iocap_remote
+0x4661 mem_flag_mode_ssp_pin
+0x4662 mem_ssp_mode_flag
+0x4663 mem_authentication_passkey_times
+0x4664 mem_passkey_1bit
+0x4665 mem_flag_pairing_state
+0x4666 mem_ipc_lock_bt
+0x4667 mem_ipc_lock_c51
+0x4668 mem_ipc_fifo_bt2c51
+0x4670 mem_ipc_fifo_c512bt
+0x4678 mem_ui_button_timer
+0x4679 mem_ui_button_last_state
+0x467a mem_ui_timer_last_btclk
+0x467e mem_discovery_timeout_timer_count
+0x4680 mem_hid_handshake_timer_count
+0x4681 memui_reconnect_mode
+0x4682 mem_ui_state_map
+0x4684 mem_ui_profile_supported
+0x4685 mem_ui_button_timeout
+0x4686 mem_ui_button_gpio
+0x4687 mem_discovery_timeout
+0x4689 mem_pin_length
+0x468a mem_pin
+0x469a mem_antl_lpm_interval
+0x469c mem_antl_adv_interval
+0x469e mem_antl_slow_adv_lpm_interval
+0x46a0 mem_antl_slow_adv_adv_interval
+0x46a2 mem_antl_led_style
+0x46a2 mem_antl_led_type
+0x46a3 mem_antl_led_blink_count
+0x46a4 mem_antl_led_gpio
+0x46a5 mem_antl_led_on_time
+0x46a7 mem_antl_led_off_time
+0x46a9 mem_antl_led_cb_on
+0x46ab mem_antl_led_cb_off
+0x46ad mem_antl_buzzer_style
+0x46ad mem_antl_buzzer_type
+0x46ae mem_antl_buzzer_blink_count
+0x46af mem_antl_buzzer_gpio
+0x46b0 mem_antl_buzzer_on_time
+0x46b2 mem_antl_buzzer_off_time
+0x46b4 mem_antl_buzzer_cb_on
+0x46b6 mem_antl_buzzer_cb_off
+0x46b8 mem_antl_fast_adv_led_style
+0x46b8 mem_antl_fast_adv_led_type
+0x46b9 mem_antl_fast_adv_led_blink_count
+0x46ba mem_antl_fast_adv_led_gpio
+0x46bb mem_antl_fast_adv_led_on_time
+0x46bd mem_antl_fast_adv_led_off_time
+0x46bf mem_antl_slow_adv_led_style
+0x46bf mem_antl_slow_adv_led_type
+0x46c0 mem_antl_slow_adv_led_blink_count
+0x46c1 mem_antl_slow_adv_led_gpio
+0x46c2 mem_antl_slow_adv_led_on_time
+0x46c4 mem_antl_slow_adv_led_off_time
+0x46c6 mem_antl_power_starting_led_style
+0x46c6 mem_antl_power_starting_led_type
+0x46c7 mem_antl_power_starting_led_blink_count
+0x46c8 mem_antl_power_starting_led_gpio
+0x46c9 mem_antl_power_starting_led_on_time
+0x46cb mem_antl_power_starting_led_off_time
+0x46cd mem_antl_power_starting_buzzer_style
+0x46d4 mem_antl_power_off_led_style
+0x46d4 mem_antl_power_off_led_type
+0x46d5 mem_antl_power_off_led_link_count
+0x46d6 mem_antl_power_off_led_gpio
+0x46d7 mem_antl_power_off_led_on_time
+0x46d9 mem_antl_power_off_led_off_time
+0x46db mem_antl_power_off_buzzer_style
+0x46db mem_antl_power_off_buzzer_type
+0x46dc mem_antl_power_off_buzzer_link_count
+0x46dd mem_antl_power_off_buzzer_gpio
+0x46de mem_antl_power_off_buzzer_on_time
+0x46e0 mem_antl_power_off_buzzer_off_time
+0x46e2 mem_antl_alert_led_stlye
+0x46e9 mem_antl_alert_buzzer_stlye
+0x46e9 mem_antl_alert_buzzer_type
+0x46ea mem_antl_alert_buzzer_blink_count
+0x46eb mem_antl_alert_buzzer_gpio
+0x46ec mem_antl_alert_buzzer_on_time
+0x46ee mem_antl_alert_buzzer_off_time
+0x46f0 mem_antl_key_led_style
+0x46f0 mem_antl_key_led_type
+0x46f1 mem_antl_key_led_blink_count
+0x46f2 mem_antl_key_led_gpio
+0x46f3 mem_antl_key_led_on_time
+0x46f5 mem_antl_key_led_off_time
+0x46f7 mem_antl_key_buzzer_style
+0x46fe mem_antl_queue_width
+0x46ff mem_antl_queue_depth
+0x4700 mem_antl_queue_curr_num
+0x4701 mem_antl_queue_read_ptr
+0x4702 mem_antl_queue_write_ptr
+0x4703 mem_antl_queue_buff
+0x4753 mem_antl_key_scan_enable
+0x4754 mem_antl_led_num
+0x4755 mem_antl_led_gpio_map
+0x4759 mem_antl_power_param
+0x4759 mem_antl_power_state
+0x475a mem_antl_power_timer
+0x475b mem_antl_power_off_timeout
+0x475c mem_antl_power_starting_timeout
+0x475d mem_antl_power_off_cb
+0x475f mem_antl_power_starting_cb
+0x4761 mem_antl_power_standby_cb
+0x4763 mem_event_button_up_cb
+0x4765 mem_antl_key_num
+0x4766 mem_cb_antl_key
+0x4768 mem_antl_key_conf0
+0x476c mem_antl_key0_press
+0x477b mem_antl_key0_release
+0x478a mem_antl_conn_updata_procedure_state
+0x478b mem_client_characteristic_configuration_descriptor
+0x478d mem_adc_timer
+0x478f mem_antl_conn_update_timer
+0x4790 mem_antl_send_updata_le_param_timer
+0x4791 mem_antl_le_sleep_timer
+0x4793 mem_antl_fast_adv_timer
+0x4795 mem_antl_fast_adv_timeout
+0x4797 mem_antl_le_sleep_timeout
+0x4799 mem_double_click_timer
+0x479a mem_butten_click_cnt
+0x479b mem_antl_led_state
+0x479c mem_antl_buzzer_state
+0x479d mem_antl_key_state
+0x479e mem_antl_lost_mode
+0x479f mem_alarm_config
+0x47a0 mem_alarm_config_notfy_cnt
+0x47a1 mem_buzzer_pwm_conf
+0x47a7 mem_adc_timeout
+0x47a9 mem_voltage_remain_percent
+0x47aa mem_battery_calculate_set
+0x47aa mem_battery_full_voltage
+0x47ac mem_battery_empty_voltage
+0x47ae mem_battery_low_voltage
+0x47b0 mem_battery_current_voltage
+0x47b2 mem_rx_window_sniff_inc
+0x47b4 mem_interval_increment
+0x47b6 mem_antl_le_interval_min
+0x47b8 mem_antl_le_interval_max
+0x47ba mem_antl_le_latency
+0x47bc mem_antl_le_timeout
+0x47be mem_antl_le_unnormal_interval_min
+0x47c0 mem_antl_le_unnormal_interval_max
+0x47c2 mem_antl_le_unnormal_latency
+0x47c4 mem_antl_le_unnormal_timeout
+0x47c6 mem_AntiLost_le_att_list
+0x469a mem_car_hard_soft_switch
+0x469b mem_car_queue_each_size
+0x469c mem_car__queue_length
+0x469d mem_car_queue_curr_num
+0x469e mem_car_queue_read_ptr
+0x469f mem_car_queue_write_ptr
+0x46a0 mem_car_queue_ele
+0x4718 mem_car_pop_queue_buff
+0x472c mem_car_led_num
+0x472d mem_car_led_map
+0x4737 mem_car_style1_led_type
+0x4738 mem_car_style1_blink_count
+0x4739 mem_car_style1_struct_led_gpio
+0x473a mem_car_style1_on_time
+0x473c mem_car_style1_off_time
+0x473e mem_car_style1_cb_ledon
+0x4740 mem_car_style1_cb_ledoff
+0x4742 mem_car_style2_led_type
+0x4743 mem_car_style2_blink_count
+0x4744 mem_car_style2_struct_led_gpio
+0x4745 mem_car_style2_on_time
+0x4747 mem_car_style2_off_time
+0x4749 mem_car_style2_cb_ledon
+0x474b mem_car_style2_cb_ledoff
+0x474d mem_le_receive_data
+0x474d mem_le_receive_packet_head
+0x474f mem_le_receive_cmd
+0x4750 mem_le_receive_length
+0x4752 mem_le_receive_payload
+0x475c mem_le_receive_checksum
+0x475d mem_motor1_status
+0x475e mem_motor1_speed
+0x475f mem_motor2_status
+0x4760 mem_motor2_speed
+0x4761 mem_motor3_status
+0x4762 mem_motor3_speed
+0x4763 mem_motor1_pwm_set
+0x4763 mem_motor1_pwm_pin1_set
+0x4764 mem_motor1_pwm_pin2_set
+0x4765 mem_motor1_pwm_pin_set
+0x4766 mem_motor1_pwm_channel_set
+0x4767 mem_motor1_pwm_freq_set
+0x476a mem_motor1_pwm_dute_set
+0x476b mem_motor2_pwm_set
+0x476b mem_motor2_pwm_pin1_set
+0x476c mem_motor2_pwm_pin2_set
+0x476d mem_motor2_pwm_pin_set
+0x476e mem_motor2_pwm_channel_set
+0x476f mem_motor2_pwm_freq_set
+0x4772 mem_motor2_pwm_dute_set
+0x4773 mem_motor3_pwm_set
+0x4773 mem_motor3_pwm_pin1_set
+0x4774 mem_motor3_pwm_pin2_set
+0x4775 mem_motor3_pwm_pin_set
+0x4776 mem_motor3_pwm_channel_set
+0x4777 mem_motor3_pwm_freq_set
+0x477a mem_motor3_pwm_dute_set
+0x477b mem_motor_select_p_n
+0x477c mem_car_motor_status
+0x477d mem_car_motor_speed
+0x477e mem_motor_pwm_set
+0x477e mem_motor_pwm_pin1_set
+0x477f mem_motor_pwm_pin2_set
+0x4780 mem_motor_pwm_pin_set
+0x4781 mem_motor_pwm_channel_set
+0x4782 mem_motor_pwm_freq_set
+0x4785 mem_motor_pwm_dute_set
+0x4786 mem_ir_rx_gpio
+0x4787 mem_ir_data
+0x4789 mem_ir_rx_buf
+0x478b mem_ir_receive_clkn
+0x478f mem_ir_notify_data
+0x4792 mem_ir_notify_data_head
+0x4797 mem_ir_notify_data_payload
+0x4799 mem_ir_notify_data_check_sum
+0x479a mem_car_ir_breakdown_check_timer
+0x479b mem_car_ir_breakdown_flag
+0x479c mem_car_led_control
+0x479c mem_car_led1_status
+0x479d mem_car_led2_status
+0x479e mem_car_led3_status
+0x479f mem_car_led4_status
+0x47a0 mem_car_led5_status
+0x47a1 mem_car_led6_status
+0x47a2 mem_car_led7_status
+0x47a3 mem_car_led8_status
+0x47a4 mem_car_led_control_timer
+0x47a5 mem_car_led_blink_status
+0x47a6 mem_car_led_no
+0x47a7 mem_car_info_request
+0x47aa mem_car_info_request_head
+0x47af mem_car_info_request_payload
+0x47b7 mem_car_info_request_checksum
+0x47b8 mem_car_config_param
+0x47b8 mem_car_config_setting_flag
+0x47b9 mem_car_config_device_select
+0x47ba mem_car_config_motor_layout
+0x47bb mem_car_config_ir_enable
+0x47bc mem_car_config_ir_rx_gpio
+0x47bd mem_car_config_pairing_led_conn_status
+0x47be mem_car_config_pairing_led_gpio
+0x47bf mem_car_config_led_num
+0x47c0 mem_car_config_blood_led_gpio
+0x47c0 mem_car_config_blood_led1_gpio
+0x47c1 mem_car_config_blood_led2_gpio
+0x47c2 mem_car_config_blood_led3_gpio
+0x47c3 mem_car_config_blood_led4_gpio
+0x47c4 mem_car_config_blood_led5_gpio
+0x47c5 mem_car_config_blood_led6_gpio
+0x47c6 mem_car_config_blood_led7_gpio
+0x47c7 mem_car_config_blood_led8_gpio
+0x47c8 mem_car_config_bat_notify_enable
+0x47c9 mem_car_config_low_voltage_led_gpio
+0x47ca mem_car_config_low_voltage_percent
+0x47cb mem_car_config_soft_switch_enable
+0x47cc mem_car_config_soft_switch_gpio
+0x47cd mem_car_notify_vdd_count
+0x47ce mem_car_notify_vdd_timer
+0x47cf mem_car_notify_vdd_value_last
+0x47d0 mem_car_notify_vdd_percent
+0x47d1 mem_car_working_flag
+0x47d2 mem_low_bat_flag
+0x47d3 mem_notify_bat_packet
+0x47d6 mem_notify_bat_head
+0x47db mem_notify_bat_payload
+0x47dc mem_notify_bat_check_sum
+0x47dd mem_vdd_notify_flag
+0x47de mem_car_current_vdd_value_temp
+0x47e0 mem_car_last_vdd_value
+0x47e2 mem_vdd_calculate_set
+0x47e2 mem_vdd_full_vol
+0x47e4 mem_vdd_empty_vol
+0x47e6 mem_vdd_low_vol
+0x47e8 mem_vdd_now_vol
+0x47ea mem_car_24g_status
+0x47eb mem_car_24g_no_data_timeout_count
+0x47ed mem_car_24g_no_data_timeout_timer
+0x47ef mem_car_24g_ir_receive_attack_count
+0x47f0 mem_car_24g_go_die_flag
+0x47f1 mem_car_attack_shake_timer
+0x47f2 mem_car_attack_shake_flag
+0x47f3 mem_car_soft_power
+0x47f3 mem_car_power_state
+0x47f4 mem_car_power_timer
+0x47f5 mem_car_power_off_timeout
+0x47f6 mem_car_power_starting_timeout
+0x47f7 mem_car_power_off_cb
+0x47f9 mem_car_power_starting_cb
+0x47fb mem_car_power_standby_cb
+0x47fd mem_car_ui_button_up_cb
+0x47ff mem_car_le_att_list
+0x49f3 mem_car_moto1_blank_timer
+0x49f4 mem_car_moto2_blank_timer
+0x49f5 mem_car_moto3_blank_timer
+0x49f6 mem_car_24g_received_pac
+0x49f7 mem_24g_car_head_ptr
+0x469a mem_light_pwm0
+0x469b mem_light_pwm1
+0x469c mem_light_pwm2
+0x469d mem_light_pwm3
+0x469e mem_light_pwm4
+0x469f mem_light_pwm5
+0x46a0 mem_light_pairing_enable
+0x46a1 mem_light_pairing_timer
+0x46a3 mem_light_cnum
+0x46a4 mem_light_next_record
+0x46a5 mem_light_clist
+0x46f5 mem_light_crr_cmd_count
+0x46f6 mem_curr_packet_num
+0x469a mem_lightc_led_gpio
+0x469b mem_lightc_row
+0x46a1 mem_lightc_col
+0x46a7 mem_adv_time
+0x46a8 mem_cmd0_string
+0x46bc mem_cmd1_string
+0x46d0 mem_cmd2_string
+0x46e4 mem_cmd3_string
+0x46f8 mem_cmd4_string
+0x470c mem_cmd5_string
+0x4720 mem_cmd6_string
+0x4734 mem_cmd7_string
+0x4748 mem_cmd8_string
+0x475c mem_cmd9_string
+0x4770 mem_cmd10_string
+0x4784 mem_cmd11_string
+0x4798 mem_cmd12_string
+0x47ac mem_cmd13_string
+0x47c0 mem_cmd14_string
+0x47d4 mem_cmd15_string
+0x47e8 mem_cmd16_string
+0x47fc mem_cmd17_string
+0x4810 mem_cmd18_string
+0x4824 mem_cmd19_string
+0x4838 mem_cmd20_string
+0x469a mem_soft_version_num
+0x469c mem_module_wake_up_gpio
+0x469d mem_module_state_gpio
+0x469e mem_module_connect_state_gpio
+0x469f mem_current_packet_length
+0x46a1 mem_module_state
+0x46a2 mem_module_mcu_wake_pin
+0x46a3 mem_module_mcu_wake_delay_us
+0x46a7 mem_module_spp_lpm_mult
+0x46a8 mem_module_le_lpm_mult
+0x46a9 mem_module_bluetooth_stauts_by_command
+0x46aa mem_module_uart_rx_buffer
+0x46ac mem_module_uart_rx_buffer_end
+0x46ae mem_module_uart_tx_buffer
+0x46b0 mem_module_uart_tx_buffer_end
+0x46b2 mem_module_read_vdd_flag
+0x46b3 mem_module_read_vdd_count
+0x46b4 mem_module_vdd_quotient
+0x46b5 mem_module_vdd_remainder
+0x46b6 mem_module_le_rx_data_len
+0x46b7 mem_module_le_rx_data_address
+0x46b9 mem_module_le_rx_data_handle
+0x46bb mem_module_data_write_handle
+0x46bd mem_module_data_write_handle2
+0x46bf mem_module_flag
+0x46c0 mem_module_hci_notify_len
+0x46c1 mem_module_hci_notify_handle
+0x46c3 mem_module_hci_nofiy_addr
+0x46c5 mem_last_transmite_clock
+0x46c9 mem_module_uuid_list
+0x47f5 mem_module_uuid_list_end
+0x47f5 mem_module_le_att_list
+0x4a4d mem_module_le_att_list_end
+0x4a4d mem_module_nv_data
+0x4a4d mem_module_nv_data0
+0x4a6f mem_module_nv_data1
+0x4a91 mem_module_nv_data2
+0x4ab3 mem_module_nv_data3
+0x4ad5 mem_module_nv_data4
+0x469a mem_remote_car_hard_soft_switch
+0x469b mem_remote_car_queue_each_size
+0x469c mem_remote_car_queue_length
+0x469d mem_remote_car_queue_curr_num
+0x469e mem_remote_car_queue_read_ptr
+0x469f mem_remote_car_queue_write_ptr
+0x46a0 mem_remote_car_queue_ele
+0x46fa mem_remote_style_led_type
+0x46fb mem_remote_style_blink_count
+0x46fc mem_remote_style_struct_led_gpio
+0x46fd mem_remote_style_on_time
+0x46ff mem_remote_style_off_time
+0x4701 mem_remote_style_cb_ledon
+0x4703 mem_remote_style_cb_ledoff
+0x4705 mem_remote_car_led_num
+0x4706 mem_remote_car_led_map
+0x470e mem_remote_car_keyscan
+0x470e mem_remote_car_key_num
+0x470f mem_cb_remote_car_keyscan
+0x4711 mem_remote_car_key_conf0
+0x4711 mem_remote_car_key_conf0_pin
+0x4712 mem_remote_car_key_conf1
+0x4712 mem_remote_car_key_conf1_pin
+0x4713 mem_remote_car_key_conf2
+0x4713 mem_remote_car_key_conf2_pin
+0x4714 mem_remote_car_key_conf3
+0x4714 mem_remote_car_key_conf3_pin
+0x4715 mem_remote_car_key_conf4
+0x4715 mem_remote_car_key_conf4_pin
+0x4716 mem_remote_car_key_conf5
+0x4716 mem_remote_car_key_conf5_pin
+0x4717 mem_remote_car_key_conf6
+0x4717 mem_remote_car_key_conf6_pin
+0x4718 mem_rocker_negative_flag
+0x4719 mem_rocker_work_status
+0x471a mem_current_vdd_value_default_mid_x
+0x471c mem_current_vdd_value_default_mid_y
+0x471e mem_current_vdd_value_default_mid_temp
+0x4720 mem_current_vdd_default_range
+0x4722 mem_rocker_last_status
+0x4724 mem_rocker_status
+0x4724 mem_rocker_x_status
+0x4725 mem_rocker_y_status
+0x4726 mem_remote_car_config_param
+0x4726 mem_remote_car_config_setting_flag
+0x4727 mem_remote_car_config_key_map
+0x4728 mem_remote_car_config_layout
+0x4729 mem_remote_car_config_connect_led_gpio
+0x472a mem_remote_car_config_check_way
+0x472b mem_remote_car_config_soft_switch_enable
+0x472c mem_remote_car_config_soft_switch_gpio
+0x472d mem_remote_car_config_timeout_shutdown_enable
+0x472e mem_remote_car_24g_motor_packet
+0x472e mem_remote_car_24g_motor_packet_lenght
+0x472f mem_remote_car_24g_motor_send_packet_head
+0x4731 mem_remote_car_24g_motor_send_cmd
+0x4732 mem_remote_car_24g_motor_send_length
+0x4734 mem_remote_car_24g_motor_send_payload
+0x4734 mem_remote_car_24g_motor1_payload
+0x4736 mem_remote_car_24g_motor2_payload
+0x4738 mem_remote_car_24g_motor3_payload
+0x473a mem_remote_car_24g_motor_send_checksum
+0x473b mem_remote_car_24g_fire_packet
+0x473b mem_remote_car_24g_fire_packet_lenght
+0x473c mem_remote_car_24g_fire_send_packet_head
+0x473e mem_remote_car_24g_fire_send_cmd
+0x473f mem_remote_car_24g_fire_send_length
+0x4741 mem_remote_car_24g_fire_send_payload
+0x4743 mem_remote_car_24g_fire_send_checksum
+0x4744 mem_remote_car_24g_tx_temp
+0x4753 mem_remote_car_no_data_timeout
+0x4755 mem_remote_car_no_data_timer
+0x4757 mem_remote_car_soft_power
+0x4757 mem_remote_car_power_state
+0x4758 mem_remote_car_power_timer
+0x4759 mem_remote_car_power_off_timeout
+0x475a mem_remote_car_power_starting_timeout
+0x475b mem_remote_car_power_off_cb
+0x475d mem_remote_car_power_starting_cb
+0x475f mem_remote_car_power_standby_cb
+0x4761 mem_remote_key_status
+0x4762 mem_remote_car_24g_status
+0x4763 mem_remote_car_24g_auto_work_step
+0x4764 mem_remote_car_24g_pair_success_flag
+0x4765 mem_remote_car_24g_enter_lpm_enable
+0x4766 mem_remote_car_empty_packet
+0x4767 mem_24g_RC_head_ptr
+0x469a mem_shutter_bluetooth_type
+0x469b mem_shutter_config_enable
+0x469c mem_shutter_config_otp_base_address
+0x469e mem_shutter_config_size
+0x469f mem_shutter_config_select_gpio1
+0x46a0 mem_shutter_config_select_gpio2
+0x46a1 mem_shutter_config_select_gpio3
+0x46a2 mem_shutter_config_user_otp_address
+0x46a4 mem_shutter_config_eeprom_offset_addr
+0x46a6 mem_shutter_config_eeprom_start_flag
+0x46a8 mem_shutter_config_user_size
+0x46a9 mem_shutter_config_label
+0x46aa mem_shutter_config_otp_addr
+0x46ac mem_classic_shutter_cable_unplug_conut
+0x46ad mem_classic_shutter_hid_disconn_count
+0x46ae mem_classic_shutter_random_mac_offset_addr
+0x46b0 mem_ble_shutter_enable_notify
+0x46b1 mem_ble_shutter_reconn_dav_interval
+0x46b3 mem_ble_shutter_discovery_adv_interval
+0x46b5 mem_ble_shutter_reconn_timeout
+0x46b7 mem_ble_shutter_reconn_timer
+0x46b9 mem_ble_shutter_reconn_blink_on_time
+0x46bb mem_ble_shutter_reconn_blink_off_time
+0x46bd mem_ble_shutter_discovery_blink_on_time
+0x46bf mem_ble_shutter_discovery_blink_off_time
+0x46c1 mem_ble_shutter_interval_min
+0x46c3 mem_ble_shutter_interval_max
+0x46c5 mem_ble_shutter_latency
+0x46c7 mem_ble_shutter_timeout
+0x46c9 mem_ble_shutter_interval_min_new
+0x46cb mem_ble_shutter_interval_max_new
+0x46cd mem_ble_shutter_latency_new
+0x46cf mem_ble_shutter_timeout_new
+0x46d1 mem_classic_shutter_discovery_timeout
+0x46d3 mem_classic_shutter_connect_timeout
+0x46d5 mem_ble_shutter_discovery_timeout
+0x46d7 mem_ble_shutter_connect_timeout
+0x46d9 mem_shutter_sleep_timeout
+0x46db mem_shutter_sleep_timer
+0x46dd mem_shutter_hard_soft_switch_case
+0x46de mem_shutter_soft_switch_button_gpio
+0x46df mem_shutter_soft_switch_power_state
+0x46e0 mem_shutter_soft_switch_poweron_time
+0x46e1 mem_shutter_soft_switch_poweroff_time
+0x46e2 mem_shutter_soft_switch_poweron_callback_function
+0x46e4 mem_shutter_soft_switch_poweroff_callback_function
+0x46e6 mem_shutter_keyscan
+0x46e6 mem_shutter_key_num
+0x46e7 mem_cb_shutter_keycan
+0x46e9 mem_shutter_key_conf0
+0x46ea mem_shutter_key_conf1
+0x46eb mem_shutter_key_conf2
+0x46ec mem_shutter_key_conf3
+0x46ed mem_shutter_key_conf4
+0x46ee mem_shutter_key_conf5
+0x46ef mem_shutter_key_conf6
+0x46f0 mem_shutter_key_conf7
+0x46f1 mem_key0_press
+0x46f6 mem_key1_press
+0x46fb mem_key2_press
+0x4700 mem_key3_press
+0x4705 mem_key4_press
+0x470a mem_key5_press
+0x470f mem_key6_press
+0x4714 mem_key7_press
+0x4719 mem_key0_release
+0x471e mem_key1_release
+0x4723 mem_key2_release
+0x4728 mem_key3_release
+0x472d mem_key4_release
+0x4732 mem_key5_release
+0x4737 mem_key6_release
+0x473c mem_key7_release
+0x4741 mem_ble_data_buffer1
+0x4746 mem_ble_data_buffer2
+0x474b mem_ble_data_buffer3
+0x4750 mem_ble_data_buffer4
+0x4755 mem_ble_data_buffer5
+0x475a mem_ble_data_buffer6
+0x475f mem_ble_data_buffer7
+0x4764 mem_ble_data_buffer8
+0x4769 mem_ble_data_buffer9_58
+0x479b mem_classic_data_buffer
+0x47a0 mem_classic_data_buffer1
+0x47a5 mem_classic_data_buffer2
+0x47aa mem_classic_data_buffer3
+0x47af mem_classic_data_buffer4
+0x47b4 mem_classic_data_buffer5
+0x47b9 mem_classic_data_buffer6
+0x47be mem_classic_data_buffer7
+0x47c3 mem_classic_data_buffer8
+0x47c8 mem_classic_data_buffer9_58
+0x47fa mem_queue_each_size
+0x47fb mem_queue_length
+0x47fc mem_queue_curr_num
+0x47fd mem_queue_read_ptr
+0x47fe mem_queue_write_ptr
+0x47ff mem_queue_ele
+0x481f mem_shutter_nv_data
+0x48c9 mem_shutter_led_struct_app_led
+0x48c9 mem_shutter_led_struct_app_led_type
+0x48ca mem_shutter_led_struct_app_led_blink_count
+0x48cb mem_shutter_led_struct_app_led_gpio
+0x48cc mem_shutter_led_struct_app_led_on_time
+0x48ce mem_shutter_led_struct_app_led_off_time
+0x48d0 mem_shutter_led_struct_app_led_on_callback
+0x48d2 mem_shutter_led_struct_app_led_off_callback
+0x48d4 mem_shutter_power_off_led_style
+0x48d4 mem_shutter_power_off_led_style_type
+0x48d5 mem_shutter_power_off_led_style_blink_count
+0x48d6 mem_shutter_power_off_led_style_gpio
+0x48d7 mem_shutter_power_off_led_style_on_time
+0x48d9 mem_shutter_power_off_led_style_off_time
+0x48db mem_shutter_power_off_led_style_on_callback
+0x48dd mem_shutter_power_off_led_style_off_callback
+0x48df mem_shutter_soft_swtich_botton_down
+0x48e0 mem_shutter_soft_swtich_led_struct_temp
+0x48eb mem_shutter_power_off_timeout
+0x48ec mem_shutter_power_off_timer
+0x469a mem_mouse_key
+0x469b mem_mouse_x
+0x469d mem_mouse_y
+0x469f mem_mouse_z
+0x46a0 mem_mouse_tz
+0x46a1 mem_mouse_xy_h
+0x46a2 mem_sensor_shutter_hi
+0x46a3 mem_sensor_shutter_lo
+0x46a4 mem_sensor_smart_flag
+0x46a5 mem_sensor_squal_reg
+0x46a6 mem_sensor_iqc
+0x46a7 mem_mouse_move_flag
+0x46a8 mem_mouse_direct_timeout
+0x46aa mem_mouse_no_data_timeout
+0x46ac mem_mouse_discovery_timer
+0x46ae mem_mouse_direct_timer
+0x46b0 mem_mouse_no_data_timer
+0x46b2 mem_mouse_blank_data_timer
+0x46b4 mem_mouse_send_blank_timer
+0x46b5 mem_mouse_cpi_count
+0x46b6 mem_mouse_dpi_button_state
+0x46b7 mem_wheel_tb_old_pinlevel
+0x46b8 mem_wheel_tb_new_pinlevel
+0x46b9 mem_wheel_tog
+0x46ba mem_mouse_tz_data
+0x46bb mem_mouse_tz_data_count
+0x46bc mem_mouse_tz_data_count1
+0x46bd mem_mwheel_b_old_pinlevel
+0x46be mem_mwheel_b_new_pinlevel
+0x46bf mem_mwheel_tog
+0x46c0 mem_mouse_z_data
+0x46c1 mem_mouse_z_data_count
+0x46c2 mem_mouse_z_data_count1
+0x46c3 mem_reconn_mode
+0x46c4 mem_mouse_statue_led_timer
+0x46c5 mem_le_connect_status_flag
+0x46c6 mem_le_start_encrypt_timer
+0x46c7 mem_device_addr_temp
+0x46ce mem_adc_read_timer
+0x46cf mem_adc_low_volatage_led_timer_count
+0x46d0 mem_adc_reference_voltage
+0x46d2 mem_device_number
+0x46d3 mem_mouse_flag
+0x46d5 mem_mouse_function_enable
+0x46d7 mem_combination_select_device_timer_init
+0x46d8 mem_combination_select_device_count
+0x46d9 mem_select_device_button_statue
+0x46da mem_combination_ui_button_count
+0x46db mem_bt_discovey_button_statue
+0x46dc mem_sensor_reset_gpio
+0x46dd mem_sensor_id1
+0x46de mem_sensor_id2
+0x46df mem_mouse_dpi_led_delay_count
+0x46e0 mem_config_sensor_type
+0x46e1 mem_config_sensor_motion
+0x46e2 mem_lbutton_gpio
+0x46e3 mem_rbutton_gpio
+0x46e4 mem_mbutton_gpio
+0x46e5 mem_bk_button_gpio
+0x46e6 mem_fw_button_gpio
+0x46e7 mem_dpi_button_gpio
+0x46e8 mem_whee_a_data_gpio
+0x46e9 mem_whee_b_data_gpio
+0x46ea mem_whee_ta_data_gpio
+0x46eb mem_whee_tb_data_gpio
+0x46ec mem_config_bt_button_gpio
+0x46ed mem_config_select_device_button_gpio
+0x46ee mem_config_paraing_led_gpio
+0x46ef mem_config_low_voltage_alarm_gpio
+0x46f0 mem_config_device1_led_gpio
+0x46f1 mem_config_device2_led_gpio
+0x46f2 mem_config_device3_led_gpio
+0x46f3 mem_sensor_data_gpio
+0x46f4 mem_dpi_led_gpio
+0x46f5 mem_config_function_enable
+0x46f6 mem_config_sensor_angle
+0x46f7 mem_select_sensor_angle_gpio
+0x46f8 mem_select_adc_gpio
+0x46f9 mem_config_end
+0x46f9 mem_btclk_sensor
+0x46fd mem_wire_usb_interval
+0x46fe mem_mouse_mode_flag
+0x46ff mem_usb_addr
+0x4700 mem_flash_base
+0x4703 mem_24g_device_number
+0x4704 mem_24g_enter_lpm_timer
+0x4705 mem_mouse_1step_up_count
+0x4706 mem_mouse_2step_up_count
+0x4707 mem_24g_pairing_timer_count
+0x4709 mem_mouse_vdd_calculate_set
+0x4709 mem_mouse_vdd_full_vol
+0x470b mem_mouse_vdd_empty_vol
+0x470d mem_mouse_vdd_low_vol
+0x470f mem_mouse_vdd_now_vol
+0x4711 mem_mouse_sensor_timer_count
+0x4712 mem_sensor_led_style
+0x4713 mem_mouse_led_type
+0x4714 mem_mouse_blink_count
+0x4715 mem_mouse_struct_led_gpio
+0x4716 mem_mouse_on_time
+0x4718 mem_mouse_off_time
+0x471a mem_mouse_cb_ledon
+0x471c mem_mouse_cb_ledoff
+0x471e mem_reconn_times
+0x471f mem_reconn_times_init
+0x4720 mem_mouse_information_start
+0x4720 mem_device_flag
+0x4721 mem_device1_type
+0x4722 mem_device1_addr
+0x4728 mem_device1_link_key
+0x4738 mem_device1_locall_addr
+0x473e mem_device2_type
+0x473f mem_device2_addr
+0x4745 mem_device2_link_key
+0x4755 mem_device2_locall_addr
+0x475b mem_device3_type
+0x475c mem_device3_addr
+0x4762 mem_device3_link_key
+0x4772 mem_device3_locall_addr
+0x4778 mem_store_flag
+0x477a mem_mouse_dpi
+0x477b mem_mouse_24g_addr
+0x477f mem_mouse_information_end
+0x477f mem_mouse_dpi_seting
+0x477f mem_320x_dpi_1
+0x4780 mem_320x_dpi_2
+0x4781 mem_320x_dpi_3
+0x4782 mem_320x_dpi_4
+0x4783 mem_3212_dpi_1
+0x4784 mem_3212_dpi_2
+0x4785 mem_3212_dpi_3
+0x4786 mem_3212_dpi_4
+0x4787 mem_3610_dpi_1
+0x4788 mem_3610_dpi_2
+0x4789 mem_3610_dpi_3
+0x478a mem_3610_dpi_4
+0x478b mem_mouse_24g_enter_lpm_enable
+0x478c mem_le_rx_window_inc
+0x478e mem_empty_count
+0x478f mem_rf_init_data_new
+0x479c mem_mouse_clear_sensor_data_flag
+0x479d mem_mouse_null_enter_hibernate_flag
+0x479e mem_mouse_null_enter_hibernate_timer
+0x479f mem_mouse_le_reconnect_flag
+0x47a0 mem_mouse_data_queue
+0x47c1 mem_mouse_data_queue_num
+0x47c2 mem_random_addr_increase_count
+0x47c4 mem_mouse_le_conn_param_reject
+0x47c5 mem_lpm_mult_init
+0x47c6 mem_mouse_le_uuid_sup
+0x4806 mem_mouse_wheel_trigger
+0x4807 mem_mouse_wheel_trigger_timer
+0x4808 mem_mouse_enter_sniff_count
+0x4809 mem_mouse_send_switch_req_timer
+0x480a mem_le_tx_buffer0_omemalloc
+0x4825 mem_le_tx_buffer1_omemalloc
+0x4840 mem_le_tx_buffer2_omemalloc
+0x485b mem_le_tx_buffer3_omemalloc
+0x4876 mem_mouse_uuid_list
+0x4afc mem_lmi_opcode_temp
+0x4afd mem_mouse_adc_last_low_voltage_flag
+0x4afe mem_mouse_init_sensor_reset_flag
+0x4aff mem_bt_rcvd_switch_req_accept
+0x4b00 mem_bt_send_max_slot_req_accept_after_switch
+0x4b01 mem_bt_send_lmp_setup_complete
+0x4b02 mem_l2cap_rcv
+0x4b03 mem_mouse_bt_boot_mode
+0x4b04 mem_mouse_bt_boot_data
+0x4b09 mem_mouse_bt_send_first_package_timer
+0x4b0a mem_mouse_bt_send_first_package_flag
+0x4b0b mem_mouse_asm_flag
+0x4b0c mem_mouse_x_pre
+0x4b0e mem_mouse_y_pre
+0x4b10 mem_le_adv_swift_pair
+0x4b23 mem_bt_125hz_cnt
+0x4b24 mem_mouse_send_secutiry_request_timer
+0x4b25 mem_le_send_security_request_flag
+0x4b26 mem_power_on_flag
+0x4b27 mem_m_key
+0x4b28 mem_m_x
+0x4b2a mem_m_y
+0x4b2c mem_m_z
+0x4b2d mem_m_tz
+0x4b2e mem_24g_matrix_cnt
+0x4b2f mem_24g_rxbuf
+0x4b51 mem_24g_txbuf
+0x4b71 mem_24g_txpayload
+0x4b93 mem_24g_rxpayload
+0x4bb3 mem_24g_rxdata_length
+0x4bb4 mem_24g_pid
+0x4bb5 mem_24g_datalen
+0x4bb6 mem_24g_data_type
+0x4bb7 mem_24g_txlen
+0x4bb8 mem_24g_rx_window
+0x4bba mem_24g_ensure
+0x4bbb mem_24g_txfail_cnt
+0x4bbd mem_24g_get_ack_fail
+0x4bbe mem_24g_retry
+0x4bbf mem_24g_ch
+0x4bc0 mem_24g_current_ch_number
+0x4bc1 mem_24g_paring_addr
+0x4bc5 mem_24g_pairing_sm
+0x4bc6 mem_24g_ch_map1
+0x4bca mem_24g_ch_map2
+0x4bce mem_24g_ch_map3
+0x4bd2 mem_24g_ch_map4
+0x4bd6 mem_24g_tx_btclk
+0x4bda mem_24g_interval
+0x4bdb mem_24g_interval_min
+0x4bdc mem_24g_interval_max
+0x4bdd mem_24g_addr
+0x4be1 mem_24g_abort_pac
+0x4be2 mem_24g_check_dongle_times
+0x4be4 mem_24g_enter_hibernate
+0x4bec mem_24g_device_addr
+0x4bf0 mem_24g_pac_index
+0x4bf1 mem_24g_no_ack
+0x4bf2 mem_24g_sta_crc
+0x4bf5 mem_24g_last_crc
+0x4bf8 mem_24g_sta_pid
+0x4bf9 mem_24g_last_pid
+0x4bfa mem_24g_max_retry
+0x4bfb mem_24g_mode
+0x4bfc mem_24g_rxdata_temp
+0x4c1e mem_24g_rx_addr
+0x4c22 mem_dongle_mode_init
+0x4c23 mem_dongle_work_mode
+0x4c24 mem_dongle_ms_bind_step
+0x4c25 mem_dongle_kb_bind_step
+0x4c26 mem_dongle_bind_device_status
+0x4c27 mem_24g_bind_payload
+0x4c2f mem_24g_abort_packet
+0x4c30 mem_24g_rf_laststa
+0x4c31 mem_24g_hop_btclk
+0x4c35 mem_24g_hop_interval
+0x4c36 mem_24g_mode_switch
+0x4c37 mem_24g_ackpayload_enable
+0x4c38 mem_24g_hop_packet
+0x4c39 mem_24g_pair_mode
+0x4c3a mem_24g_nodata_timer_enable
+0x4c3b mem_24g_time_slice
+0x4c3c mem_24g_kb_data_sta_data
+0x4c44 mem_24g_kb_data_last_data
+0x4c4c mem_24g_kb_multikey_sta_data
+0x4c4f mem_24g_kb_multikey_last_data
+0x4c52 mem_24g_kb_blank_data_enable
+0x4c53 mem_24g_kb_mul_blank_data_enable
+0x4c54 mem_24g_ms_blank_data_enable
+0x4c55 mem_24g_kb_addr
+0x4c59 mem_24g_ms_addr
+0x4c5d mem_24g_dg_last_ch
+0x4c5e mem_24g_dg_ch_number
+0x4c5f mem_24g_dg_config_ch_once
+0x4c60 mem_24g_kb_last_ch
+0x4c61 mem_24g_kb_ch_number
+0x4c62 mem_24g_kb_config_ch_once
+0x4c63 mem_24g_ms_last_ch
+0x4c64 mem_24g_ms_ch_number
+0x4c65 mem_24g_ms_config_ch_once
+0x4c66 mem_24g_syncword
+0x4c68 mem_24g_syncword_crc8
+0x4c69 mem_24g_get_syncword_crc8
+0x4c6a mem_24g_ota_sta_pid
+0x4c6c mem_tx_power_temp
+0x4c6d mem_rssi_hex
+0x4c6e mem_rssi_noise_avg
+0x4c6f mem_rssi_noise_index
+0x4c70 mem_rssi_signal_index
+0x4c71 mem_rssi_noise_dg_avg
+0x4c72 mem_rssi_noise_kb_avg
+0x4c73 mem_rssi_noise_ms_avg
+0x4c74 mem_rssi_noise_dg_index
+0x4c75 mem_rssi_noise_kb_index
+0x4c76 mem_rssi_noise_ms_index
+0x4c77 mem_rssi_signal_buf
+0x4c7f mem_queue_ele_num
+0x4c80 mem_queue_read
+0x4c82 mem_queue_write
+0x4c84 mem_queue_start
+0x4c84 mem_data_ele0
+0x4ca4 mem_data_ele1
+0x4cc4 mem_data_ele2
+0x4ce4 mem_queue_end
+0x4ce4 mem_queue_temp
+0x4ce6 mem_cb_24g_data
+0x4ce8 mem_24g_hop_fastly_cnt
+0x4ce9 mem_24g_hop_pac_retry
+0x4cea mem_24g_rf_hop_ch
+0x4ceb mem_24g_rf_last_sta
+0x4cec mem_24g_rf_work_stage
+0x4ced mem_24g_sync_cnt
+0x4cee mem_power_ctrl_pac_succ_cnt
+0x4cef mem_rssi_avg_received
+0x4cf0 mem_rssi_hex_received
+0x4cf1 mem_power_ctrl_level
+0x4cf2 mem_seqi
+0x4cf3 mem_24g_auto_paring_switch
+0x4cf4 mem_24g_paccnt
+0x4cf5 mem_24g_transmit_by_interrupt
+0x4cf6 mem_24g_transmit_by_interrupt_exit_count
+
+	width = 32
+	const length = 12000
+
+	/* ========= memory ============== */
+0x0000 mem_le_adv_transmit
+0x0001 mem_le_adv_waitcnt
+0x0002 mem_le_adv_rcv
+0x0003 mem_le_req_rcv
+0x0004 mem_le_scanrsp_rcv
+0x0005 mem_le_conn_rcv
+0x0006 mem_inquiryscan_waitcnt
+0x0007 mem_inquiryscan_rcvcnt
+0x0008 mem_pagescan_waitcnt
+0x0009 mem_pagescan_rcvcnt
+0x000a mem_pagescan_rcvfhscnt
+0x000b mem_slave_rcvcnt
+0x000c mem_page_transmit
+0x000d mem_page_rcv
+0x000e mem_page_rcv_fhs
+0x000f mem_master_rcvcnt
+0x0010 mem_fhs_wait_counter
+0x0011 mem_newconnto_counter
+0x0012 mem_inquiry_transmit
+0x0013 mem_inquiry_rcv
+0x0014 mem_fw_ver
+0x0015 mem_current_context
+0x0016 mem_le_ch_mapped
+0x0017 mem_last_freq
+0x0018 mem_rssi
+0x0019 mem_rx_type
+0x001a mem_rx_hec_err
+0x001c mem_rx_crc_err
+0x001e mem_context_ptr
+0x0020 mem_display
+0x0028 mem_bcd
+0x0030 mem_state
+0x0031 mem_mode
+0x0032 mem_tsniff
+0x0034 mem_sniff_anchor
+0x0038 mem_clk_offset
+0x003e mem_rx_window
+0x0040 mem_plap
+0x0043 mem_puap
+0x0044 mem_pnap
+0x0046 mem_conn_handle
+0x0047 mem_arq
+0x0048 mem_lmp_to_send
+0x0049 mem_lmi_opcode
+0x004a mem_lmo_reason
+0x004b mem_op
+0x004c mem_state_map
+0x004d mem_supervision_timer
+0x0051 mem_supervision_to
+0x0053 mem_name_offset
+0x0054 mem_key_size
+0x0055 mem_conn_sm
+0x0056 mem_aco
+0x0062 mem_kc
+0x0072 mem_conn_timer
+0x0073 mem_sniff_attempt
+0x0074 mem_sniff_timeout
+0x0075 mem_dsniff
+0x0077 mem_amaddr
+0x0078 mem_lmo_opcode1
+0x0079 mem_lmi_opcode1
+0x007a mem_lmo_reason1
+0x007b mem_lmo_tid1
+0x007c mem_lmo_opcode2
+0x007d mem_lmi_opcode2
+0x007e mem_lmo_reason2
+0x007f mem_lmo_tid2
+0x0080 mem_hci_version
+0x0083 mem_acl_pktlen
+0x0085 mem_sco_pktlen
+0x0086 mem_acl_pktcnt
+0x0088 mem_sco_pktcnt
+0x008a mem_current_sniff_attempt
+0x008b mem_current_sniff_timeout
+0x008c mem_sniff_timeout_temp
+0x008d mem_nfreq_index_inq
+0x008e mem_nfreq_index_page
+0x008f mem_ninqy_index
+0x0090 mem_fhs_misc
+0x0091 mem_subsniff_instant
+0x0095 mem_subsniff_rate
+0x0096 mem_subsniff_tcmax
+0x0098 mem_subsniff_tsniff
+0x0099 mem_lpm_adjust
+0x009a mem_sync_clke
+0x00a0 mem_lpm_current_mult
+0x00a1 mem_gpio_wakeup_low
+0x00a5 mem_gpio_wakeup_high
+0x00a9 mem_air_mode
+0x00aa mem_sco_asso_handle
+0x00ab mem_sco_handle
+0x00ad mem_esco_desco
+0x00ae mem_esco_type
+0x00af mem_neogotiation_state
+0x00b0 mem_saved_amaddr
+0x00b1 mem_esco_arq
+0x00b2 mem_esco_saved_arq
+0x00b3 mem_sco_obuf
+0x00d1 mem_sco_ibuf
+0x00ef mem_sco_poll
+0x00f0 mem_npage_index
+0x00f1 mem_page_mode
+0x00f2 mem_page_clk
+0x00f6 mem_tst_pktcnt_sync
+0x00f8 mem_tst_pktcnt_hec
+0x00fa mem_tst_pktcnt_crc
+0x00fc mem_tst_pktcnt_dmh
+0x00fe mem_tmp_buffer_head
+0x0101 mem_tmp_buffer
+0x0151 mem_tester_emulate
+0x0152 mem_temp_payload
+0x0152 test_mode_scenario
+0x0153 test_mode_hopping_mode
+0x0154 test_mode_tx_freq
+0x0155 test_mode_rx_freq
+0x0156 test_mode_power_mode
+0x0157 test_mode_poll_period
+0x0158 test_mode_packet_type
+0x0159 test_mode_data_length
+0x015b mem_test_mode_old_debug_config
+0x015c mem_tester_cnt
+0x015d mem_temp_am_addr
+0x015e mem_temp_arq
+0x015f mem_len
+0x0161 mem_clkn_bt
+0x0165 mem_clke_bt
+0x0169 mem_dpll_clkn
+0x016d mem_connection_options
+0x016e mem_nameres_cnt
+0x016f mem_txptr
+0x0171 mem_slot_offset
+0x0173 extm_fhs_misc
+0x0174 extm_newconn_am_addr
+0x0175 extm_class
+0x0178 extm_lap
+0x017b extm_uap
+0x017c extm_nap
+0x017f mem_debug_config
+0x0180 mem_lch_code
+0x0181 mem_fhs_am_addr
+0x0182 mem_dpll_error
+0x0184 mem_select_list_item
+0x0185 mem_temp_reconn_record
+0x0185 mem_record_bt_mode
+0x0186 mem_temp_lap
+0x018c mem_list_item_ptr
+0x018e mem_eir
+
+
+
+(//bluetooth tx power
+0 TX_POWER_0DB
+1 TX_POWER_3DB
+2 TX_POWER_5DB
+3 TX_POWER_f3DB
+4 TX_POWER_f5DB
+
+0x20 TX_POWER_PAIR
+)
+
+
+0x3b17 rom_lpm_sleep
+0x59e0 rom_save_ucode
+
+0x4219 rom_mem_lpm_xtalcnt
+0x423b rom_mem_patch_ptr
+0x423d rom_mem_patch_len
+
+0x5b1a rom_otpd_read_data
+0x5ada rom_otp_write
+	/* context */
+(
+0x01 coffset_mode
+0x02 coffset_tsniff
+0x04 coffset_sniff_anchor
+0x08 coffset_clk_offset
+0x0e coffset_rx_window
+0x10 coffset_plap
+0x16 coffset_conn_handle
+0x17 coffset_arq
+	/* 3.0 only */
+0x18 coffset_lmp_to_send
+0x1b coffset_op
+0x1c coffset_state_map
+	/* le only */
+0x18 coffset_le_ch
+0x19 coffset_le_hop
+0x1a coffset_le_event_cnt
+
+80 context_size
+1 context_num
+)
+
+(
+0 lpm_flag_wake
+1 lpm_flag_loadcode
+)
+
+/* ========= parameters ============== */
+(
+0x0050 param_newconn_arq
+0x0007 param_esco_addr
+0x0010 param_conn_handle
+0x01f0 param_conn_handle_comp
+0x0020 param_newconnto
+0x0008 param_pagerespto
+0x0a00 param_snooze_setup_orig
+0x5353 param_snooze_ahead_orig
+0x00ff param_ninquiry
+0x2000 param_page_to
+0x0005 param_max_slot
+0x0010 param_sco_poll
+
+/* 24Mhz clock setting */
+/* 12Mhz clock setting */
+0x0e43 param_tx_setup
+0x0600 param_rf_setup
+0x0600 param_conn_access 
+0x03bb param_clke_cal
+0x0500 param_pll_setup		// 120 is minimum
+0x0d00 param_rx_setup	// 114us before sync
+2000 param_dpll_start_delay
+
+110 param_lpm_fix
+10 param_lpo_extra
+200 param_lpm_adjmax
+
+-1 param_hibernate_clks
+3000 param_chgpump_delay
+
+3 param_featrue_ssp
+0x0101 param_lmpext_ssp_enable
+339 param_acl_pktlen
+30   param_sco_pktlen
+1     param_acl_pktcnt		/*buffer acl pkt cnt*/
+7     param_sco_pktcnt
+
+
+0x8fffff param_features0
+0x9d83fe param_features1  // not support afh
+0x8359     param_features2
+0x000033 param_unap
+0x001177 param_lap
+0x9e8b33 param_glap
+0x002540 param_class//0x180208 //0x002580//402500//240404
+0x12e904 param_hci_version
+0x000a04 param_lmp_version//0x0a04
+0x000a06 param_lmp_version0
+0x12e9 param_lmp_subversion
+0x0012 param_tisw
+0x0012 param_tpsw
+0x1000 param_tisi
+0x0800 param_tpsi
+0x0020 param_page_window
+0x0020 param_inq_window
+0x1c80 param_supervision_to
+39 param_fcomp_div
+2 param_fcomp_mul
+6     param_name_len
+0x535442 param_name
+0x344950 param_name1
+
+
+)
+
+/* ======= packet types  ========= */
+(
+0x0      type_null    
+0x1      type_poll   
+0x2      type_fhs    
+0x3      type_dm1    
+0x4      type_dh1    
+0x5      type_hv1    
+0x6      type_hv2    
+0x7      type_hv3    
+0x8      type_3dh1     
+0x9      type_aux1   
+0xa      type_dm3    
+0xb      type_dh3    
+0xe      type_dm5    
+0xf      type_dh5    
+0x10     type_id
+0x11     type_shutdown
+0x13     type_lmp
+)
+
+/* ========== flag[6] =============== */
+(
+0        always        /* always 1 */
+1        true          /* set/rstn by verify,compare,icompare (true) */
+2        positive      /* set/rstn by all alu operations (opcode = 0x03,0x13,0x0f,0x1f), if alu output >= 0 */
+3        timeout       /* read only, the timeout from timers */
+5        zero          /* set/rstn by all alu operations (opcode = 0x03,0x13,0x0f,0x1f), if alu output == 0 */
+6        crc_failed    /* level, cleared by hop_start */
+7        enable_white  /* outside mux decide whether to load bt_clk or response_X */
+8        enable_parity /* level */
+9        enable_crc    /* level */
+10       enable_hec    /* level */
+11       decode_fec1   /* level */
+12       decode_fec2   /* level */
+13       decode_fec0   /* level */
+14       encrypt       /* level */
+15       crc16       /* for caculate ccitt crc16 */
+16       swfine	/* =0 stop_watch count based on oneslot =1 on 1 clock */
+20       rqst_freq    /* pulse, to start calculating frequency */
+21       recalc        /* pulse, to recalculate the fhs_parity */
+22       init_encrypt  /* pulse, issued to initialize encrption */
+23       mhalfbnd    /* half slot boundary of clke_rt, or when clke_bt[0] toggles */
+24       sync          /* sync found as a result of correlation,set/rstn by correlate opcode */
+25       user10    /* user10 */
+26       kc_p_activate  /* pulse to recalc the kc_p */
+27       encode_fec1   /* level */
+28       encode_fec2   /* level */
+29       encode_fec0   /* level */
+30       packet_end    /* pulse */
+32       is_tx         /* level */
+33       is_rx         /* level */
+34       halfslot     /* pulse, read only, when clkn_bt[0] toggles */
+35       oneslot      /* pulse, read only, when clkn_bt[1] toggles */
+36       mslotbnd     /* pulse, read only, when clke_bt[1] toggles */
+37       expire       /* level, read only, when selected clock source exceed timeup value */
+38       meet         /* level, read only, when selected clock source meet timeup value */
+39       tx_clear     /* level, read only, indicate tx pipe is cleared */
+40       user         /* user0 */
+41       master        /* user1 */
+42       slave2         /* user2 */
+43       wake           /* user3 */
+44       user2        /* user4 */
+45       match         /* user5 */
+46       attempt        /* user6 */
+47       user3          /* user7 */
+48       clknt         /* user8 */
+49	   user7 	/* user9 */
+50       synchronize   /* synchronize lpo and regular version of the clock */
+51       lpo_edge  /* read only, 3 clocks after risling edge of lpo clock */
+52       blank         /* C0 only, means pdata == 0 */
+53       modone          /* set divide operation is done */
+54       le		/* bluetooth 4.0 LE enable */
+55       aes_ready	/* set when aes is ok */
+63       never         /* read only, always 0 */
+)
+
+default flag = always
+
+/* ========== reg[6] =============== */
+(
+0        mark   /* for keeping strobes, more permanent */
+1        type   /* save and verify during rx */     /* rw */
+2        temp   /* general purpose register, 64 bits */
+3        contru  /* contr uart */
+4        am_addr      /* verify during rx, read and send during tx */ /* ro */
+5        contw        /* last mem_addr during write */
+6        contr        /* last mem_addr during read */
+7        queue    /* the index of qset*,qisolate* commands, ie, if queue = 3, qset/qisolate operate on bit3 */
+8        debug    /* can be wired out for observation */
+9        access   /* the 72 bit access word */
+10       contwu   /* contw uart */
+11       timeup        /* when does certain counter expire */
+12       pwindow       /* bit 71-61 of pdata; because on rx, bits shifts in from 71 down */
+13       fhs_parity    /* re-gernated based on bt_adr( {nap,uap,lap} ) when recalc flag is pulsed */
+14       white_init    /* init value of the whitening */
+15       crc24_init        /* init crc24 lfsr, 24 bits */
+16       interrupts    /* set interrupts, 40 bits */
+17       rega          /* general purpose register, 32 bits */
+18       regb          /* general purpose register, 32 bits */
+19       regc          /* general purpose register, 17 bits */
+20       regab         /* concat of {rega,regb}, thus 64 bits */
+21       radio_ctrl   /* radio i/f direct i/o ctrl, check following "radio_ctrl" section */
+21       ctrl_reg     /* 2023 and after */
+22       jtag_addr    /* load jtag address field, lsb */
+23       freq_index   /* 7 bit read only */
+24       jtag_data    /* wdata to and rdata from jtag */
+25       clkn              /* {clkn_bt, clkn_rt} */
+26       clke              /* {clke_bt, clke_rt} */
+27       stop_watch
+28       fhs_misc   /* SR, SP, pscan mode */
+29       fhs_class  /* class field in fhs */
+30       fhs0   /* read only, bit 0-71 of fhs word */
+31       fhs1   /* read only, bit 72-142 of fhs word */
+32       bt_adr /* r/w, the bt_addr to access gen and freq hopping, contain only lap and uap */
+33       bt_clk /* r/w, the bt_clk for freq hopping */
+34       clkn_bt  /* read only, native bluetooth clock, free running 3.2KHz  or controlled by RTHALFSLOT register */
+35       clkn_rt  /* read only, native realtime clock, free running 12MHz, count from 0-3749, or controlled by RTHALFSLOT register */
+36       freq_mode
+/* wire even_train    = freq_mode[4];    // odd even train                            */
+/* wire conn_mode     = 3;    // connection                                           */
+/* wire iqpgscan_mode = 2;    // slave in inquiry and page (not response)             */
+/* wire iqpgresp_mode = 1;    // slave in inquriy and page (response only)            */
+/* wire inqypage_mode = 0;    // master in inquiry and page(response or not response) */
+37       xin   /* x parameter, read only */
+38       N_tx_slot /* the N factor in equations for Xi,Xp,Xprm,Xprs */
+39 	   auxcnt
+40       clke_bt  /* r/w,  external bluetooth clock , free running 3.2KHz or controlled by RTHALFSLOT register */
+41       clke_rt  /* r/w,  external realtime clock, , free running 12MHz, count from 0-3749, or controlled by RTHALFSLOT register */
+43       host_mode         /* generic stuff for kick starts */
+44       lap
+45       uap
+46       nap         
+47       regext		/* r/w extended 12x32bit registers,  indexed by regext_index */
+48       alarm             /* r/w, lpo wake up time, this is also how lpo and current clock keep sync */
+49       lpo_time          /* read only, this is the value to be copied back to clkn/clke after wakeup */
+50       kc_ls             /* secret key,                71: 0 */
+51       kc_ms             /* secret key,               127:72 */
+52       g1l               /* encryption length                */
+53		mask3ff		/* for mask 0x3ff operation */
+54       aes_ctrl		
+56       regext_index   /* index of regext */
+57	     loopcnt
+58      stack			/* current return address */
+59       stack_ptr		/* stack depth */
+61         pc /* direct goto */
+62       null              /* to nowhere */
+63       pdata /* the shift register */
+)
+default reg = pdata
+
+/* regext_index */
+(
+0 regidx_data
+4 regidx_key
+8 regidx_xor
+12 regidx_result
+)
+/* ========== radio_ctrl========= */
+(
+0 TXGFSK
+1 PSK
+2 PSK3M
+3 RESET
+)
+/* assign BPWR = radio_ctrl[0]; */
+/* assign PARAMP = radio_ctrl[1]; */
+/* assign XTALPU = radio_ctrl[2]; */
+/* assign SYNTHPU = radio_ctrl[3]; */
+/* assign TXPU = radio_ctrl[4]; */
+/* assign RXPU = radio_ctrl[5]; */
+/* assign SLCTRL = radio_ctrl[6]; */
+/* assign XTALSEL_MUX_SEL = radio_ctrl[7] */
+
+
+/* =========== destination[4] ============== */
+(
+0 bucket
+1 rxf
+2 back
+3 mod
+)
+default dest = bucket
+
+/* =========== source[4] ============= */
+(
+1 txf
+3 demod
+)
+default source = 0
+
+
+/* ============== mark ============= *//*0 - 47 */
+(
+
+0  mark_fhs_eir  
+1  mark_rxbuf_inuse
+2  mark_tx_l2cap
+3  mark_switch_initiated
+4  mark_accept_switch
+5  mark_loopback
+7  mark_esco
+8  mark_esco_rxok
+9  mark_context
+10 mark_am_addr_broadcast
+11 mark_fhs_already_good
+12 mark_page_trainb
+13 mark_lpm_mult_enable
+14 mark_usb_flag
+15 mark_old_packet
+16 mark_longpacket
+17 mark_testmode
+18 mark_ar2
+19 mark_h5tx_rp
+20 mark_h5tx_crc	
+21 mark_h5tx_retransmit
+22 mark_h5rx_pstart
+23 mark_h5_sync
+24 mark_h5_reinit
+28 mark_inquiry_on
+29 mark_inquiry_state
+30 mark_inquiry_trainb
+31 mark_periodical_diac
+32 mark_all_diac
+33 mark_slave_in_rand_accepted
+34 mark_reconn_recieve_switch
+35 mark_isstr
+36 mark_loadcode
+37 mark_ext_patch
+38 mark_24g
+39 mark_24g_conext
+40 mark_eeprom_size
+// REVAB:max 35, REVC:max 63
+41 mark_ble_tx_md
+42 mark_ble_rx_md
+43 mark_otp_encrypt
+44 mark_first_packet
+45 mark_role_switch_receive_fhs
+)
+
+(
+1 reload_type_otp
+2 reload_type_spi
+3 reload_type_iic
+)
+
+
+/* ============== soft timers ============== */
+(
+0 le_adv_interval_timer
+1 inquiry_length_timer
+2 le_scan_interval_timer
+3 page_length_timer
+4 iscan_interval_timer
+5 pscan_interval_timer
+6 switch_wait_timer
+7 enpt_delay_timer
+8 page_interval_timer
+9 key_scan_timer
+10 smp_pairing_timer
+11  ui_led_blink   //led timer 可扩展
+12  ui_led_blink1
+13 ui_led_blink2
+ 
+)
+
+(
+1 hci_cmd_inquiry
+2 hci_cmd_inquiry_cancel
+3 hci_cmd_remote_name_req
+4 hci_cmd_remote_feature_req
+5 hci_cmd_create_conn
+6 hci_cmd_disconn
+7 hci_cmd_accept_conn
+8 hci_cmd_reject_conn
+9 hci_cmd_pair
+10 hci_cmd_nopair
+11 hci_cmd_linkkey
+12 hci_cmd_nokey
+13 hci_cmd_auth
+14 hci_cmd_stopencrypt
+15 hci_cmd_startencrypt
+16 hci_cmd_setup_sco
+17 hci_cmd_disconn_sco
+18 hci_cmd_in_sniff
+19 hci_cmd_exit_sniff
+20 hci_cmd_remote_version_req
+21 hci_cmd_remote_ext_features_req
+22 hci_cmd_io_cap
+23 hci_cmd_role_discovery
+24 hci_cmd_role_switch
+25 hci_cmd_accept_with_switch
+26 hci_cmd_detach
+27 hci_cmd_le_create_conn
+28 hci_cmd_accept_sco_conn
+80 hci_cmd_wait_remote_feature
+81 hci_cmd_wait_remote_ext_feature
+82 hci_cmd_wait_remote_name
+)
+
+
+
+/* ============== debug ============= */
+(
+0 debug_neg_skew
+1 debug_bitbucket
+2 debug_dont_clear_got_tx
+3 debug_scatter_enabled
+4 debug_tx_fixed_freq
+5 debug_rx_fixed_freq
+6 debug_tx_pattern
+)
+
+/* ============== tester_emulator ============= */
+(
+0 tester_fixed_flow
+1 tester_fixed_flow_polarity
+2 tester_change
+3 tester_exit
+4 tester_pattern_test
+5 tester_whitening_change
+6 tester_fixed_freq
+7 tester_no_whitening
+)
+
+/* ============== mode ==========*/
+(
+0 mode_le
+1 mode_master
+2 afh_enable
+3 afh_change
+4 send_sco_when_slave
+5 first_seqnx
+)
+
+/* ============== state_map ==========*/
+(
+0 smap_lmptidinit
+1 smap_lmptid
+2 smap_encryption
+3 smap_name_res
+4 smap_name_req
+5 smap_edr
+6 smap_rxlmp
+7 smap_rxl2cap
+)
+(
+0 state_inconn
+1 state_insniff
+2 state_insco 
+3 state_inpage
+4 state_conn_comp
+5 state_init_seq
+6 state_combkey
+7 state_linkkey
+)
+(
+0 op_send_sres
+1 op_auth_req
+2 op_inrand_req
+3 op_disconn
+4 op_stop_enc
+5 op_start_enc
+6 op_txl2cap
+7 op_pkt_comp
+)
+
+
+/* ============== arq [3] ================ */
+(
+0 flow
+1 arqn
+2 seqn
+3 wack
+4 flowx              /* out */  /* not really in memory */
+5 arqnx              /* out */
+6 seqnx              /* out */
+7 bcast1             /* first broadcast received */
+)
+
+/* arq          {flow,arqn,seqn}, read/write */
+/* [0] flow r/w  acl full status of the other, store during rx, checked during tx */
+/* [1] arqn r/w  ack of the other during rx (ack tx fifo),                        */
+/* [2] seqn r/w  seqn of the other, check during rx                               */ 
+/* arqx         {flowx,arqnx,seqnx} */
+/* [0] flowx r/o flow back to the other, 1 alow send, 0 not to send, read only tx */
+/* [1] arqnx r/w ack to the other, set by rx, send back on tx                     */
+/* [2] seqnx r/w toggled by arqn, to be send during tx                            */ 
+
+(
+0 llid0
+1 llid1
+2 nesn
+3 sn
+4 md
+5 wak
+)
+
+/* AFH flags */
+(
+0 AFH_CFG_ON
+1 AFH_CFG_TIMER
+2 send_lmp_set_afh
+3 AFH_CFG_REPORT_MODE
+4 AFH_CFG_MASTER_SENT_REQ
+)
+
+/* LLID CODE */
+(	
+1 LLID_L2CAP_CONT
+2 LLID_L2CAP_START
+3 LLID_LMP
+)
+
+/* ============== master_state ==========*/
+(
+0  master_in_idle
+1  master_in_inquiry
+2  master_in_page
+10 master_in_becoming_slave
+15 master_in_conn
+)
+(
+0 newrev_feature_bettx
+1 newrev_feature_betplltx
+2 newrev_feature_skip_retransmit
+3 newrev_feature_init_radio_after_sleep
+4 newrev_feature_no_lpolog
+)
+/*************mem_pincode_state****************/
+(
+0 pincode_state_ilde
+1 pincode_state_wait_pincode
+2 pincode_state_pincode_ready
+)
+
+
+// lpm_write
+(
+1 lpmreg_sel_ctrl
+2 lpmreg_sel_ctrl2
+4 lpmreg_sel_gpiolow
+8 lpmreg_sel_gpiohigh
+16 lpmreg_sel_counter
+)
+
+//scan_mode
+(
+0 inq_scan_mode
+1 page_scan_mode
+2 page_inq_enable
+)
+//mem_neogotiation_state
+(
+ 0 default_neogotiation_state
+ 1 prarm_neogotiation
+)
+
+//mem_lpm_wake_lock
+(
+0 wake_lock_ble_rx
+1 wake_lock_ble_tx
+
+3 wake_lock_key_press
+4 wake_lock_ble_tx_patch
+5 wake_lock_uart_tx
+6 wake_lock_uart_rx
+7 wake_lock_button
+8 wake_lock_cmd
+9 wake_lock_app
+10 wake_lock_lmp_tx
+11 wake_lock_lmp_rx
+12 wake_lock_l2cap_tx
+13 wake_lock_l2cap_rx
+14 wake_lock_ipc_c512bt
+15 wake_lock_ipc_bt2c51
+
+)
+
+(
+0 bt_disabled
+1 ble_disabled
+2 module_disable
+
+)
+
+(
+0x33  REC_3_MODE
+0x34  REC_4_MODE
+0x35  REC_4_MODE_STATIC_ADDRESS
+0x36  REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS
+0x37  REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS
+)
+
+
+//sniff UART_TX UART_RX
+(
+6 UART_WAKEUP_TX
+7 UART_WAKEUP_RX
+)
+
+
+
+0x01f2 mem_ucode_status
+0x01f3 mem_otp_ucode_flag
+0x01f5 mem_spid_tbuf/* spid buf: 03 addr[23:16] addr[15:8] addr[7:0] */
+0x01f6 mem_iicd_tbuf/* iicd buf: iic_adr addr[15:8] addr[7:0] iic_adr */
+0x01f6 mem_addr_hi
+0x01f7 mem_addr_mi
+0x01f8 mem_addr_lo
+0x01f9 mem_iicd_addr
+0x01fa mem_spid_rbuf
+0x01fe mem_ucode_buf
+0x0200 mem_ucode_len
+0x0202 mem_sched_addr
+0x0204 mem_ucode_ptr
+0x0206 mem_ucode_keybuf
+0x0216 mem_check_plap_temp
+0x0228 mem_reconnect_flag
+0x0229 mem_switch_fail_master_count
+0x022a mem_app_evt_timer_count
+
+//adc read
+(
+0 ADC_CONFIG_VINLPM
+1 ADC_CONFIG_HVIN
+2 ADC_CONFIG_GPIO
+)
+
+
+(
+0 QUEUE_OFFSET_EACH_SIZE
+1 QUEUE_OFFSET_LENGTH
+2 QUEUE_OFFSET_CURR_NUM
+3 QUEUE_OFFSET_READ_PTR
+4 QUEUE_OFFSET_WRITE_PTR
+5 QUEUE_OFFSET_ELE_INIT_ADDR
+)
+(
+//Flash Register
+0x05 FLASH_READ_SATUS
+
+// Flash Status Register
+0x00 FLASH_STATUS_WIP
+0X01 FLASH_STATUS_WEL
+0X02 FLASH_STATUS_BP0
+0X03 FLASH_STATUS_BP1
+
+//Flash Write Sm
+0X00 FLASH_SM_NO_BUYS
+0X01 FLASH_SM_START
+0X02 FLASH_SM_ERASE_SECTOR
+0X03 FLASH_SM_WAIT_ERASE_SECTOR
+0X04 FLASH_SM_WRITE_DATA
+0X05 FLASH_SM_WAIT_WRITE_DATA
+
+
+//Flash Command
+0x02 FLASH_COMMAND_WRITE_DATA
+0x03 FLASH_COMMAND_READ_DATA
+0x20 FLASH_COMMAND_SECTOR_ERASE
+)
+
+0x0000 otp_ucode_flag
+0x07f0 otp_ucode_aeskey
+
+/* adc data addr and flag */
+(
+0x07e0 OTP_CHIP_FUNCTIONS
+0x07e2 otp_adc_io_0_5V_addr
+0x07e4 otp_adc_hvin_1V_addr
+0x07e6 otp_adc_vinlpm_2V_addr
+0x07e8 otp_adc_io_1V_addr
+0x07ea otp_adc_hvin_5V_addr
+0x07ec otp_adc_vinlpm_3V_addr
+0x07ee otp_adc_flag_addr
+0xaa55 OTP_ADC_FLAG
+)
+
+/* data stored in eeprom */
+(
+0	eeprom_nv_ram
+
+195	eeprom_module_init_flag//2
+
+)
+
+/*mem_app_handshake_flag*/
+(
+0 APP_HANDSHAKE_NULL
+1 APP_HANDSHAKE_DONE
+
+)
+/*mem_device_option*/
+(
+1 dvc_op_hci
+4 dvc_op_dongle
+5 dvc_op_spp
+6 dvc_op_ukey
+7 dvc_op_ir
+
+9 dvc_op_shutter
+10 dvc_op_module
+11 dvc_op_ble_mouse
+12 dvc_op_ble_kb
+13 dvc_op_ble_prcp
+14 dvc_op_car
+15 dvc_op_AntiLost
+16 dvc_op_remote_car
+255 dvc_op_test
+//device option hight 4
+6 dvc_op_mouse
+7 dvc_op_keyboard
+//device option low 2
+(
+0 MODE_3_MOUSE
+1 MODE_4_MOUSE
+)
+)
+
+(
+3 twspi_sclk
+4 twspi_sdio
+)
+
+(
+4 pan_clk_bit
+5 pan_dat_bit
+6 pan_mov_bit
+)
+
+(
+7 otp_uflag_aes
+6 otp_uflag_skip_eep
+5 otp_uflag_skip_flash
+4 otp_uflag_hci
+)
+
+/* ir command */
+(
+1 ircmd_record
+2 ircmd_play
+3 ircmd_write_pulse
+4 ircmd_write_seq
+5 ircmd_write_next
+
+8 ircmd_test_play
+9 ircmd_test_rec
+
+10 ircmd_report_pulse
+11 ircmd_report_seq
+12 ircmd_report_raw
+
+20 ircmd_screen_on
+21 ircmd_screen_off
+)
+
+(
+7 gpio_active_bit
+)
+(
+2 HID_HANDSHAKE_TIMEOUT
+
+)
+
+(
+1 APP_FLAG_RECONNECT
+)
+(
+5 LPM_WAKE_UP_DELAY_TIMER
+)
+
+
+//mem_app_disconn_reason
+//mem_app_disconn_reason_flag
+//bit map
+(
+2 APP_DISC_RSN_SIZE
+)
+(
+0 APP_DISC_BY_BUTTON
+1 APP_DISC_AFTER_PAIRING
+2 APP_DISC_AFTER_RECONN
+3 APP_DISC_AFTER_SNIFF
+4 APP_DISC_AFTER_SETUP_DONE
+5 APP_DISC_AFTER_HANDSHAKE
+6 APP_DISC_BT
+7 APP_DISC_BLE
+8 APP_DISC_L2CAP_REFUSED
+9 APP_DISC_SWITCH_FAIL
+)
+//eeprom init flag
+(
+	0xaa55 EEPROM_INIT_FLAG
+)
+
+(
+1 KEY_CONF_STRUCT_LEN
+0 KEY_PIN_OFFSET
+)
+
+(
+12000000 PWM_12MHZ
+)
+(
+0 POWER_OFF
+1 POWER_STARTING
+2 POWER_STANDBY
+)
+//power parameter offset(8 byte)
+(
+0 power_state_offset
+1 power_timer_offset
+2 power_off_timeout_offset
+3 power_starting_timeout_offset
+4 power_off_cb_offset
+6 power_starting_cb_offset
+8 power_standby_cb_offset
+10 ui_butten_up_cb_offset
+)
+
+
+//app new specific
+(
+0 CONN_PARAM_UPDATA_PROCEDURE_NO_INIT
+1 CONN_PARAM_UPDATA_PROCEDURE_STARTING
+2 CONN_PARAM_UPDATA_PROCEDURE_COMPLETE
+3 CONN_PARAM_UPDATA_PROCEDURE_FAILD
+)
+(
+0 NEW_SPEC_HEADER_OFFSET
+2 NEW_SPEC_OPCODE_OFFSET
+3 NEW_SPEC_DLEGTH_OFFSET  //data length offset
+5 NEW_SPEC_DADDR_OFFSET   //data address offset
+)
+(
+1 OPCODE1_BUTTEN_CLICK_ONCE
+2 OPCODE2_BUTTEN_DOUBLE_CLICK
+3 OPCODE3_ANTL_START_ALRAM
+4 OPCODE4_CURRENT_ALARM_STATE
+5 OPCODE5_BATTER_INFORMATION
+7 OPCODE7_ANTL_CONFIG_ALRAM
+)
+(
+0x0a NEW_SPEC_NOTIFY_HANDLE
+0x0b NEW_SPEC_NOTIFICATION_ENABLE_HANDLE
+0x0d NEW_SPEC_WRITE_HANDLE
+)
+//app new specific end
+
+//mem_anti_lost_mode
+(
+0x01 ANTI_LE_ALARM_ON
+0x00 ANTI_LE_ALARM_OFF
+)
+(
+0 NOTIFICATION_ENABLE_BIT
+1 INDICATION_ENABLE_BIT
+)
+
+
+
+
+(
+//20ms
+0x0020	FAST_ADV_INTERVAL_VALUE_CAR
+)
+
+(
+0x14 ATT_CAR_CONTROL_HANDLE
+0x14 ATT_SPEED_SET_HANDLE
+)
+
+
+(
+0 TURN_FRONT
+1 TURN_LEFT
+2 TURN_RIGHT
+0 MOTOR_STOP
+1 GO_FRONT
+2 GO_BACK
+0x6b5a LE_RECEIVE_PACKET_HEAD
+)
+
+(
+0 FLAG_IR_DISABLE
+1 FLAG_IR_ENABLE
+)
+
+(
+0 DEVICE_CAR
+1 DEVICE_TANK
+2 DEVICE_BATTLE_CAR
+3 DEVICE_BATTLE_TANK
+4 DEVICE_REMOTE
+)
+
+(
+0 F_B_MOTOR
+1 L_R_MOTOR
+2 F_B_BATTERY
+3 L_R_BATTERY
+)
+
+
+
+(
+1 SPEED_LEVEL_1
+2 SPEED_LEVEL_2
+3 SPEED_LEVEL_3
+4 SPEED_LEVEL_4
+5 SPEED_LEVEL_5
+6 SPEED_LEVEL_6
+7 SPEED_LEVEL_7
+8 SPEED_LEVEL_8
+9 SPEED_LEVEL_9
+10 SPEED_LEVEL_10
+)
+
+(
+0 PWM0_DUTY_SETTING
+1 PWM1_DUTY_SETTING
+2 PWM2_DUTY_SETTING
+)
+
+(
+1 CAR_CMD_BATTERY
+2 CAR_CMD_OLD_CAR_CONTROL
+3 CAR_CMD_OLD_SPEED_CONTROL
+4 CAR_CMD_L_R_MOTOR_CONTROL
+5 CAR_CMD_F_B_MOTOR_CONTROL
+6 CAR_CMD_IR_CONTROL
+7 CAR_CMD_LED_CONTROL
+8 CAR_CMD_DEVICE_INFO
+)
+
+(
+0 CAR_REMOTE_CHECK_BUTTON
+1 CAR_REMOTE_CHECK_ROCKER
+)
+
+(
+0x11 CAR_NOTIFY_HANDLE
+)
+
+(
+0 LED_OFF
+1 LED_ON
+2 LED_BLINK
+0xFF LED_INVALID
+)
+
+(
+0xFF INVALID_PIN_NUM
+)
+
+
+(
+0 POWER_ON
+1 WORK_PAIRED
+2 WORK_SEARCH
+)
+
+
+
+(
+0 LIGHT_GROUP0
+)
+
+(
+0 LIGHT_CMD_PWM0
+1 LIGHT_CMD_PWM1
+2 LIGHT_CMD_PWM2
+3 LIGHT_CMD_PWM3
+4 LIGHT_CMD_PWM4
+5 LIGHT_CMD_PWM5
+6 LIGHT_CMD_AUTO_MODE
+0xff LIGHT_CMD_PAIRING
+
+)
+
+
+
+
+(//mem_module_flag
+//bit0~bit3 config module function
+0 MODULE_FLAG_UART_FLOW_CONTROL
+1 MODULE_FLAG_BLE_SEND_MTU23
+2 MODULE_FLAG_BLE_DATA_ENCRYPT
+
+//bit4~bit7 module states change
+4 MODULE_FLAG_BLE_DATA_FINISH
+5 MOUDLE_TASK_UNSNIFF
+6 MOUDLE_TASK_SNIFF
+
+)
+
+(
+34 NV_DATA_LEN
+-1 DECREASED_ONE
+)
+
+
+
+(
+	10 FLAG_MODULE_READ_VDD_COUNT
+)
+
+(
+	110  DM_REFCOM_BUFF_LEN
+)
+(
+	0x200 UART_AIR_CONTROL_THRESHOLD
+)
+
+(
+0x01 HCI_DISCARD_PACKET
+0x00 HCI_NOT_DISCARD_PACKET
+)
+
+
+
+(//Command
+0x00 HCI_CMD_SET_BT_ADDR_REQ
+0x01 HCI_CMD_SET_LE_ADDR_REQ
+0x02 HCI_CMD_SET_VISIBILITY_REQ
+0x03 HCI_CMD_SET_BT_NAME_REQ
+0x04 HCI_CMD_SET_LE_NAME_REQ
+0x05 HCI_CMD_SPP_DATA_REQ
+0x09 HCI_CMD_LE_DATA_REQ
+0x0b HCI_CMD_STATUS_IRQ
+0x0c HCI_CMD_SET_PAIRING_REQ
+0x0d HCI_CMD_SET_PINCODE_REQ
+0x0e HCI_CMD_SET_UARTCONTROL_REQ
+0x0f HCI_CMD_SET_UART_BAUD_REQ
+0x10 HCI_CMD_VERSION_REQ
+0x11 HCI_CMD_BT_DISCONNECT
+0x12 HCI_CMD_BLE_DISCONNECT
+0x13 HCI_CMD_DELETE_DEVICE
+0x14 HCI_CMD_CREATE_CONNECT
+0x26 HCI_CMD_SET_NVRAM_REQ
+0x27 HCI_CMD_SLEEP
+0x28 HCI_CMD_CONFIRM_GKEY
+0x29 HCI_CMD_SET_CREDIT_GIVEN
+0x2a HCI_CMD_AUTO_ADV_SCAN
+0x2b HCI_CMD_POWER_REQ
+0x2c HCI_CMD_POWER_SET
+0x30 HCI_CMD_PASSKEY_ENTRY
+0x31 HCI_CMD_SET_GPIO
+0x32 HCI_CMD_READ_GPIO
+0x33 HCI_CMD_LE_SET_PAIRING
+0x34 HCI_CMD_LE_SET_ADV_DATA
+0x35 HCI_CMD_LE_SET_SCAN_DATA
+0x36 HCI_CMD_LE_SEND_CONN_UPDATE_REQ
+0x37 HCI_CMD_LE_SET_ADV_PARM
+0x38 HCI_CMD_LE_START_PAIRING
+0x40 HCI_CMD_SET_WAKE_GPIO
+0x42 HCI_CMD_SET_TX_POWER
+0x43 HCI_CMD_BOOT_VERSION_REQ
+0x48 HCI_CMD_LE_CONFIRM_GKEY
+0x49 HCI_CMD_REJECT_JUSTWORK
+0x51 HCI_CMD_RESET_CHIP_REQ
+
+0x61 HCI_CMD_LE_SET_FIXED_PASSKEY
+
+0xff HCI_TEST_CMD_CLOSE_LPM
+)
+
+(//event
+0x00 HCI_EVENT_SPP_CONN_REP
+0x01 HCI_EVENT_HID_CONN_REP
+0x02 HCI_EVENT_LE_CONN_REP
+0x03 HCI_EVENT_SPP_DIS_REP
+0x04 HCI_EVENT_HID_DIS_REP
+0x05 HCI_EVENT_LE_DIS_REP
+0x06 HCI_EVENT_CMD_RES
+0x07 HCI_EVENT_SPP_DATA_REP
+0x08 HCI_EVENT_LE_DATA_REP
+0x09 HCI_EVENT_STANDBY_REP
+0x0a HCI_EVENT_STATUS_RES
+0x0b HCI_EVENT_FINISH_PACK_NUM
+0X0C HCI_EVENT_SNIFF_MD_CHANGE
+0x0D HCI_EVENT_NVRAM_REP
+0x0e HCI_EVENT_GKEY
+0x0F HCI_EVENT_INVALID_PACKET
+0x10 HCI_EVENT_GET_PASSKEY
+0x11 HCI_EVENT_LE_TK
+0x12 HCI_EVENT_REMOTE_MTU
+0x14 HCI_EVENT_LE_PAIRING_STATE
+0X15 HCI_EVENT_LE_ENCRYPTION_STATE
+0x17 HCI_EVENT_LE_CONNECTION_UPDATE
+0x1d HCI_EVENT_LE_GKEY
+
+)
+
+
+(//command HCI_CMD_SET_GPIO
+//byte 0
+0x00 HCI_CMD_CONFIG_GPIO_INPUT
+0x01 HCI_CMD_CONFIG_GPIO_OUTPUT
+//byte 1 input state
+0x00 GPIO_INPUT_PULLUP
+0x01 GPIO_INPUT_PULLDOWN
+0x02 GPIO_INPUT_HIGH_IMPEDANCE
+)
+
+
+
+(
+0x7e0 OTP_ADDR_RF_PARAM_FIX
+//struct of RF_PARAM_FIX
+// uint8       //length = param_pair_count * 2 
+// uint16     //param-pair-1
+// uint16     //param-pair-2
+// uint16     //param-pair-3
+// uint16     //param-pair-4
+// uint16     //param-pair-5
+// uint16     //param-pair-6
+// uint16     //param-pair-7
+)
+
+(
+0	PAIRING_PINCODE
+1	PAIRING_JUSTWORK
+2	PAIRING_PASSKEY
+3	PAIRING_CONFIRM
+)
+
+
+(
+0x0001	FLAG_BT_PAIRING_SUCCESS
+0x0101	FLAG_BT_PAIRING_FAIL
+0x0080	FLAG_BLE_PAIRING_SUCCESS
+0x0180	FLAG_BLE_PAIRING_FAIL
+)
+
+
+(
+1	FLAG_EVENT_START_ENC
+0	FLAG_EVENT_PAUSE_ENC
+)
+
+(
+	0 MOUDLE_STATE_BT_BIT
+	1 MOUDLE_STATE_BLE_BIT
+)
+
+
+0x022b mem_init_cnt
+//dpi eeprom addr
+
+
+
+(
+//SPI GPIO 
+0x19 MOUSE_SPI1_CLK_GPIO
+0x1A MOUSE_SPI1_SDIO_GPIO
+0X1E MOUSE_SPI2_CLK_GPIO
+0X1F MOUSE_SPI2_SDIO_GPIO
+//combination
+0x01 MOUSE_L_BUTTON
+0X02 MOUSE_R_BUTTON
+0X04 MOUSE_M_BUTTON
+0X05 MOUSE_LM_BUTTON
+0X06 MOUSE_RM_BUTTON
+0X07 MOUSE_LMR_BUTTON
+//mouse default gpio
+0x1B MOUSE_DEFAULT_XA_GPIO
+0x1C MOUSE_DEFAULT_XB_GPIO
+
+//ui led blink
+0X00C8  LED_RECONNECT_BLINK //200
+0X0190  LED_DPI_BLINK //400
+0X03E8  LED_DPI_BLINK_FIXED    //1000
+0X03E8  LED_DISCOVERY_BLINK    //1000
+0XFF    LED_LONG_BLINK
+0x05	LED_SENSOR_BLINK_CNT
+//bt mode device number
+0x01 MODE_BT_DEVICE1
+0x02 MODE_BT_DEVICE2
+0x03 MODE_BT_DEVICE3
+0x02 MODE_24G_DEVICE
+//mouse  flag
+0X00 WRITE_REQ_ENABLE_FLAG
+0X01 LL_START_ENC_FLAG
+0X02 LL_PAIRING_SUCCESS_FLAG
+
+
+//mouse_function_flag
+0X04 MOUSE_FLAG_LEN
+//1byte
+0X00 MOUSE_SELECT_DEVICE_FLAG
+0X01 MOUSE_CPI_FLAG
+0X02 MOUSE_BT_CANNEL_RECONN_FLAG
+0X03 MOSUE_24G_PAIRING_FLAG
+0X04 MOUSE_LOW_VOLTAGE_FLAG
+0X05 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG
+0X06 MOUSE_LONG_BT_BUTTON_FLAG
+0X07 MOUSE_STORE_EEPROM_FLAG
+0x08 MOUSE_STATUE_UP_FLAG
+0X09 MOUSE_BT_DISCOVERY_BUTTON_LONG_DOWN_FLAG
+
+
+//3byte
+0X10 MOUSE_ENABLE_USB
+0X11 MOUSE_ENABLE_24G
+0X12 MOUSE_ENABLE_SPI2
+0X13 MOUSE_ENABLE_FLASH
+0X14 MOUSE_ENABLE_EEPROM
+0X15 MOUSE_ENABLE_STATUE_UP_THREE_LED
+0X16 MOUSE_ENABLE_STATUE_UP
+0X17 MOUSE_ENABLE_DPI_LED_BLINK
+//4byte
+0X18 MOUSE_ENABLE_BLE_RANDOM_ADDRE
+0X19 MOUSE_ENABLE_2K_EEPROM
+0X1A MOUSE_ENABLE_ADC
+0X1B MOUSE_ENABLE_INIT_DELAY
+0X1C MOUSE_ENABLE_DISCOVERY_SENSOR_LED
+0X1D MOUSE_ENABLE_AUTO_24G_PARING
+0X1E MOUSE_ENABLE_WAKEUP_FROM_POWER
+0X1F MOUSE_ENABLE_GPIO_CONTROL_ADC_SENSOR
+
+
+
+//mouse dpi level
+0x00 MOUSE_DPI_LEVEL1
+0x01 MOUSE_DPI_LEVEL2
+0x02 MOUSE_DPI_LEVEL3
+0x03 MOUSE_DPI_LEVEL4
+
+
+//mouse sensor angle
+0x00 MOUSE_6CLK_ANGLE
+0X01 MOUSE_9CLK_ANGLE
+0X02 MOUSE_12CLK_ANGLE
+0X03 MOUSE_3CLK_ANGLE
+
+
+//mem_config_function_enable
+0 ENABLE_BT_DISCOVERY_BY_GPIO_LED
+1 ENABLE_MODE_LED
+2 ENABLE_LOW_VOLTAGE_LED
+3 ENABLE_DEVICE_LED
+4 ENABLE_BT_BUTTON
+5 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON
+6 ENABLE_SELECT_DEVICE_BY_SWITCH
+
+0xFF GPIO_DISABLE
+
+
+//DPI button state 
+0x00 DPI_BUTTON_STATE_DOWN
+0x01 DPI_BUTTON_STATE_UP
+
+
+//eeprom address offect
+0X00 MOUSE_INFO_EEPROM_OFFECT
+0X5A MOUSE_DPI_EEPROM_OFFECT	//1byte
+0X5B MOUSE_G24_ADDR_EEPROM_OFFECT	//4bytes
+0X5F MOUSE_RANDOM_ADDR_COUNT_EEPROM_OFFSET	//2bytes
+0X61 MOUSE_DEVICE_MODE_EEPROM_OFFSET	//1byte	
+0X62 MOUSE_EEPROM_MODULE_INIT_FLAG		//eeprom_module_init_flag 2bytes
+
+
+// Sensor id number
+0x30 P32XX_ID1
+0x31 P3065_ID1
+0x3E P3610_ID1
+0x02 P3212_ID2
+0xD1 P3205_TJ3T_ID2
+0XD2 P3204_TJ3L_ID2
+0x54 PKA8_ID2
+0x70 P3065_XY_ID2
+
+
+//Sensor type
+0X00 P3205
+0X01 P3065
+0X02 KA8
+0X03 P3204
+0X04 P3212
+0X05 P3610
+0X06 P3065_XY
+
+
+//p3610 smart enable flag
+0X00 P3610_SMART_ENABLE
+0X01 P3610_SMART_DISABLE
+
+
+//SENSOR REG
+0x00 PAN_REG_PID_L
+0x01 PAN_REG_PID_H
+0x02 PAN_REG_MOTION_STAUS
+0x03 PAN_REG_DELTA_X
+0x04 PAN_REG_DELTA_Y
+0x05 PAN_REG_OPRATION_MODE
+0x06 PAN_REG_CONFIG
+0x07 PAN_REG_IMAGE_QUALITY
+0x08 PAN_REG_OPRATION_STATE
+0x09 PAN_REG_WRITE_PROTECT
+0x0A PAN_REG_SLEEP_1
+0x0B PAN_REG_ENTER_TIME
+0x0C PAN_REG_SLEEP_2
+0x0D PAN_REG_IMAGE_THRESHOLD
+0x0E PAN_REG_IMAGE_RECGNITION
+
+
+0x06 MOUSE_DPI_ADDRESS
+0x05 MOUSE_P3610_DPI_ADDRESS
+0x0D MOUSE_P3212_DPI_XADDRESS
+0x0E MOUSE_P3212_DPI_YADDRESS
+
+
+0x06 MOUSE_FPGA_RF_WORK_DEBUG_GPIO
+0x02 MOUSE_FPGA_DEBUG_GPIO
+
+)
+
+(
+0x01 ADV_FLAG_LIMITED_DISCOVERABLE
+0x04 ADV_FLAG_BREDR_NOT_SUPPORTED
+)
+
+(
+5 TEST_GPIO
+)
+
+(
+1 LE_LPM_DISABLE
+0 LE_LPM_ENABLE
+
+12 LE_INTERVAL_15MS
+9 LE_INTERVAL_11_25MS//11.25ms
+7 LE_INTERVAL_8_75MS//8.75ms
+6 LE_INTERVAL_7_5MS//7.5ms
+
+12 CLASSIC_INTERVAL_7_5MS
+14 CLASSIC_INTERVAL_8_75MS
+18 CLASSIC_INTERVAL_11_25MS
+)
+
+
+
+
+
+(
+// eeprom config
+0xb0 REMOTE_PARAM_EEPROM_CONFIG_ADDR
+
+)
+
+
+(
+0x00 CONTROL_F_B_MOTOR
+0x02 CONTROL_L_R_MOTOR
+)
+
+(
+0x00 KEY_MAP_TEN
+0x01 KEY_MAP_LR
+)
+
+(
+0x00 CONTROL_F_B_TEN
+0x02 CONTROL_L_R_TEN
+0x03 CONTROL_L_R_LR
+)
+
+(
+0 KEY_CHECK
+1 ROCKER_CHECK
+)
+
+(
+1 MOTOR_POSITIVE
+2 MOTOR_NEGATIVE
+)
+
+(
+0 ROCKER_MIDDLE_KEY
+1 ROCKER_POSITIVE_KEY
+2 ROCKER_NEGATIVE_KEY
+)
+
+
+
+
+
+
+
+
+(
+0 BLE_SHUTTER
+1 CLASSIC_SHUTTER
+)
+
+(
+0x0000 NVRAM_EEPROM_OFFSET
+)
+
+(
+0x1b3a SHUTTER_EEPROM_CONFIG_CRC
+)
+
+(
+5 MAX_QUEUE_NUM
+5 SHUTTER_BLE_DATA_BUFFER
+5 SHUTTER_CLASSIC_DATA_BUFFER
+)
+
+
+(
+0x13	GATT_CONSUMER_NOTIFY_HANDLE
+0x14	GATT_CONSUMER_WRITE_HANDLE
+0x17	GATT_KEYBOARD_NOTIFY_HANDLE
+0x18	GATT_KEYBOARD_WRITE_HANDLE
+)
+
+(
+//20ms
+0x0020	FAST_ADV_INTERVAL_VALUE
+//100ms
+0x00a0	SLOW_ADV_INTERVAL_VALUE
+)
+
+
+(
+0 ATT_BIT_NOTIFICATION
+1 ATT_BIT_INDICATION
+)
+///////////////////////////////////////////////////////////////////////////////////////
+
+(
+0 HARD_SWITCH
+1 SOFT_SWITCH
+)
+
+
+(
+1  FLAG_SHUTTER_HID_DISCONN_TIMEOUT
+5 FLAG_SHUTTER_CABLE_UNPLUG_TIMEOUT
+)
+
+(//Data Rom Buffer Addr
+382		BLE_GATT_LIST_SIZE
+487		BT_SDP_LIST_SIZE
+40		BLE_KEY_VALUE_LIST_SIZE
+40		BT_KEY_VALUE_LIST_SIZE
+0x913A	BLE_SHUTTER_GATT_LIST
+0x92B8	CLASSIC_SHUTTER_SDP_LIST
+0x949F	BLE_SHUTTER_KEY_VALUE_LIST
+0x94C7	CLASSIC_SHUTTER_KEY_VALUE_LIST
+)
+
+
+(//soft switch power state
+0		SS_STATE_POWER_UP
+1		SS_STATE_POWER_ON
+2		SS_STATE_POWER_OFF
+)
+
+(
+0		SS_POWER_STATE_OFFSET
+1		SS_POWER_ON_TIME
+2		SS_POWER_OFF_TIME
+3		SS_POWER_ON_CB
+5		SS_POWER_OFF_CB
+
+)
+
+(
+
+0x4FFE SIM_IIC_SCL_GPIO_NUM
+0x4FFF SIM_IIC_SDA_GPIO_NUM
+
+)
+
+
+
+//class type
+(
+0x00 STANDARD_REQ
+0x01 CLASS_REQ
+0x02 MANUFACTURER_REQ
+)
+//Standard Request Codes
+(
+0x00 GET_STATUS                // Code for Get Status
+0x01 CLEAR_FEATURE             // Code for Clear Feature
+0x03 SET_FEATURE              // Code for Set Feature
+0x05 SET_ADDRESS              // Code for Set Address
+0x06 GET_DESCRIPTOR           // Code for Get Descriptor
+0x07 SET_DESCRIPTOR           // Code for Set Descriptor(not used)
+0x08 GET_CONFIGURATION        // Code for Get Configuration
+0x09 SET_CONFIGURATION        // Code for Set Configuration
+0x0A GET_INTERFACE            // Code for Get Interface
+0x0B SET_INTERFACE            // Code for Set Interface
+0x0C SYNCH_FRAME              // Code for Synch Frame(not used)
+)
+//Standard Descriptor Types
+(
+0x01 DSC_DEVICE               // Device Descriptor
+0x02 DSC_CONFIG               // Configuration Descriptor
+0x03 DSC_STRING               // String Descriptor
+0x04 DSC_INTERFACE            // Interface Descriptor
+0x05 DSC_ENDPOINT             // Endpoint Descriptor
+)
+//HID Descriptor Types
+(
+0x21 DSC_HID			      // HID Class Descriptor
+0x22 DSC_HID_REPORT			  // HID Report Descriptor
+)
+//Define bmRequestType bitmaps
+(
+0x80 IN_DEVICE                // Request made to device,
+                              // direction is IN
+0x00 OUT_DEVICE               // Request made to device,
+                              // direction is OUT
+0x81 IN_INTERFACE             // Request made to interface,
+                              // direction is IN
+0x01 OUT_INTERFACE            // Request made to interface,
+                              // direction is OUT
+0x82 IN_ENDPOINT              // Request made to endpoint,
+                              // direction is IN
+0x02 OUT_ENDPOINT             // Request made to endpoint,
+)
+//HID Request Codes
+(
+0x01 GET_REPORT 		       // Code for Get Report
+0x02 GET_IDLE				   // Code for Get Idle
+0x03 GET_PROTOCOL			   // Code for Get Protocol
+0x09 SET_REPORT				   // Code for Set Report
+0x0A SET_IDLE				   // Code for Set Idle
+0x0B SET_PROTOCOL			   // Code for Set Protocol
+0xF2 HID_REPORT_ID           
+64 EP0_PACKET_SIZE         
+6 EP1_PACKET_SIZE         
+16 HID_REPORT_SIZE         
+0x001B HID_REPORT_DESCRIPTOR_SIZE    
+)
+//math cordic
+(
+0 TYPE_SIN		
+1 TYPE_ATAN	
+2 TYPE_MULT	
+3 TYPE_DIV		
+4 TYPE_ASIN	
+5 TYPE_SQRT	
+6 TYPE_COS		
+7 TYPE_TAN		 
+)
+   
+(
+0 DFIFO0_IN_EMPTY
+1 DFIFO1_IN_EMPTY
+2 DFIFO2_IN_EMPTY
+3 DFIFO3_IN_EMPTY
+4 DFIFO0_OUT_EMPTY
+5 DFIFO1_OUT_EMPTY
+6 DFIFO2_OUT_EMPTY
+7 DFIFO3_OUT_EMPTY
+)
+
+(
+4 USB_STATUS_SETUP
+6 USB_STATUS_NAK
+)
+
+(
+1 USB_GOT_REPORT_REQ
+2 USB_CONNECTED
+3 USB_SLEEP
+4 USB_RESUME
+5 USB_SETIDLE_1
+)
+
+(
+0x10 USB_EP1_KB
+0x20 USB_EP2_MS
+0x21 USB_EP2_MULTIKEY
+0x01 MAC_BOOT_MODE
+0x02 R_KEY
+0x03 LR_KEY
+)
+
+(
+0x8ffa	HID_KBDATA_ADDR
+0x903a	HID_MSDATA_ADDR
+0x90fe	HID_CONFDATA_ADDR
+)
+
+
+(
+0x01ba PC_GET_REPORT
+0x02ba PC_SET_REPORT
+0x0200 PC_SET_REPORT_bValue
+0x0000 PC_SET_REPORT_wIndex
+0x0001 PC_SET_REPORT_bLength
+0xba PC_REPORT_ID
+
+0x01 PC_GET_DATA
+0x00 PC_GET_NONDATA
+)
+
+(
+//--------------------------------------------------
+// Define device states
+0x00 DEV_ATTACHED	// Device is in Attached State
+0x01 DEV_POWERED	// Device is in Powered State
+0x02 DEV_DEFAULT		// Device is in Default State
+0x03 DEV_ADDRESS	// Device is in Addressed State
+0x04 DEV_CONFIGURED	// Device is in Configured State
+0x05 DEV_SUSPENDED	// Device is in Suspended State
+)
+
+(
+// Define wIndex bitmaps
+0x81 IN_EP1                    // Index values used by Set and Clear
+0x01 OUT_EP1                   // commands for Endpoint_Halt
+0x82 IN_EP2              
+0x02 OUT_EP2             
+0x83 IN_EP3              
+0x03 OUT_EP3             
+)
+
+(
+0 EP0_STALL
+1 EP1_IN_STALL
+2 EP1_OUT_STALL
+3 EP2_IN_STALL
+4 EP2_OUT_STALL
+5 EP3_IN_STALL
+6 EP3_OUT_STALL
+)
+
+(
+// Define wValue bitmaps for Standard Feature Selectors
+0x00 ENDPOINT_HALT             // Endpoint_Halt feature selector
+0x01 DEVICE_REMOTE_WAKEUP      // Remote wakeup feature(not used)
+0x00 BOOT_PROTOCOL
+0x01 REPORT_PROTOCOL
+0x01 USB_MAX_NUM_CFG
+)
+
+
+(
+0x1A0 AT_baud_115200
+0x4e2 AT_baud_38400
+0x1388 AT_baud_9600
+)
+
+(
+0x4e00 mem_module_rx_buf//0x400
+0x4fff mem_module_rx_buf_end
+0x1c00 mem_module_tx_buf
+0x1fff mem_module_tx_buf_end
+)
+
+(
+0x01 BIND_ACKPAYLOAD
+0x02 USER_ACKPAYLOAD
+
+0xcf CMD_OTA
+0xc0 CMD_OTA_START
+0xc1 CMD_OTA_DATA
+0xc2 CMD_OTA_EXIT
+0x55 OTA_STA_SUCCESS
+0xaa OTA_STA_FAIL
+)
+
+(
+0 TIMER_NAK
+640 TIMER_NAK_DELAY
+15 TIMER_WAKEUP
+5000 TIMER_WAKEUP_DELAY
+)
+
+
+
+(
+//add
+0   offset_24g_rxbuf
+1   offset_24g_rxbuf_add1
+2   offset_24g_rxbuf_add2
+34  offset_24g_txbuf
+66  offset_24g_txpayload
+100 offset_24g_rxpayload
+102 offset_24g_rxpayload_add2
+132 offset_24g_rxdata_length
+133 offset_24g_pid
+134 offset_24g_datalen
+135 offset_24g_data_type
+136 offset_24g_txlen
+137 offset_24g_rx_window
+139 offset_24g_ensure
+140 offset_24g_txfail_cnt
+141 offset_24g_get_ack_fail
+142 offset_24g_tx_without_int
+143 offset_24g_retry
+144 offset_24g_ch
+145 offset_24g_current_ch_number
+146 offset_24g_paring_addr
+150 offset_24g_pairing_sm
+151 offset_24g_ch_map1
+155 offset_24g_ch_map2
+159 offset_24g_ch_map3
+163 offset_24g_ch_map4
+167 offset_24g_tx_btclk
+171 offset_24g_interval
+172 offset_24g_interval_min
+173 offset_24g_interval_max
+174 offset_24g_addr
+178 offset_24g_abort_pac
+179 offset_24g_sync_pac
+180 offset_24g_hop_pac
+181 offset_24g_check_dongle_times
+182 offset_24g_enter_hibernate
+190 offset_24g_device_addr
+194 offset_24g_pac_index
+195 offset_24g_no_ack
+196 offset_24g_sta_crc
+199 offset_24g_last_crc
+202 offset_24g_sta_pid
+203 offset_24g_last_pid
+204 offset_24g_max_retry
+205 offset_24g_mode
+206 offset_24g_rf_last_sta
+207 offset_24g_rf_hop_ch
+208 offset_24g_sync_cnt
+209 offset_24g_hop_pac_retry
+210 offset_24g_rf_work_stage
+211 offset_24g_hop_fastly_cnt
+212 offset_24g_short_sleep_timer
+216 offset_24g_cb_data
+218 offset_24g_cb_lpm_prepare
+220 offset_24g_cb_lpm_before
+222 offset_24g_cb_rxdata_type1
+224 offset_rssi_signal_index
+225 offset_rssi_signal_avg
+226 offset_rssi_signal_buf
+234 offset_rssi_noise_index
+235 offset_rssi_noise_avg
+236 offset_rssi_noise_buf
+244 offset_rssi_ctrl_threshold_down
+245 offset_rssi_noise_dg_index
+246 offset_rssi_noise_kb_index
+247 offset_rssi_noise_ms_index
+248 offset_rssi_noise_dg_avg
+249 offset_rssi_noise_kb_avg
+250 offset_rssi_noise_ms_avg
+251 offset_tx_power_temp
+252 offset_power_ctrl_packet_cnt
+253 offset_power_ctrl_ack_cnt
+254 offset_power_ctrl_level
+255 offset_power_ctrl_txpwr_level2
+//iadd
+256 offset_power_ctrl_txpwr_level1
+257 offset_power_ctrl_txpwr_level0
+258 offset_power_ctrl_threshold_up
+259 offset_power_ctrl_threshold_down
+260 offset_dongle_mode_init
+261 offset_dongle_work_mode
+262 offset_dongle_ms_bind_step
+263 offset_dongle_kb_bind_step
+264 offset_dongle_bind_device_status
+265 offset_24g_rxdata_temp
+267 offset_24g_rxdata_temp_add2
+268 offset_24g_rxdata_temp_add3
+269 offset_24g_rxdata_temp_add4
+299 offset_24g_rx_addr
+303 offset_24g_bind_payload
+304 offset_24g_bind_payload_add1
+305 offset_24g_bind_payload_add2
+309 offset_24g_rf_laststa
+310 offset_24g_hop_btclk
+314 offset_24g_hop_interval
+315 offset_24g_ackpayload_enable
+316 offset_24g_ackpayload
+348 offset_24g_mode_switch
+349 offset_24g_pair_mode
+350 offset_24g_nodata_timer_enable
+351 offset_24g_time_slice
+352 offset_24g_mouse_addr
+356 offset_24g_kb_addr
+360 offset_24g_kb_data_sta_data
+368 offset_24g_kb_data_last_data
+376 offset_24g_kb_multikey_sta_data
+379 offset_24g_kb_multikey_last_data
+382 offset_24g_kb_blank_data_enable
+383 offset_24g_kb_mul_blank_data_enable
+384 offset_24g_ms_blank_data_enable
+385 offset_24g_dg_last_ch
+386 offset_24g_dg_ch_number
+387 offset_24g_dg_config_ch_once
+388 offset_24g_kb_last_ch
+389 offset_24g_kb_ch_number
+390 offset_24g_kb_config_ch_once
+391 offset_24g_ms_last_ch
+392 offset_24g_ms_ch_number
+393 offset_24g_ms_config_ch_once
+394 offset_24g_pair_txpower
+395 offset_24g_auto_pair_switch
+)
+
+(
+3 QUEUE_ELE_COUNT
+32 QUEUE_ELE_LENGTH
+)
+
+(
+3 retry_24g
+1 NO_ACK_24G
+0 WITH_ACK_24G
+
+0 ENSURE_OFF_24G
+1 ENSURE_ON_24G
+
+0x10 ABORT_DATA
+0x40 RSSI_SENSITIVITY
+
+0x4e G24_PAIR_CH
+)
+
+(
+0 disable_24g
+1 tx_24g
+2 rx_24g
+
+0 bit_ack_24g
+)
+
+//mem_24g_interrupt
+(
+0 rx_dr
+1 rx_sync
+4 tx_ds
+5 tx_fail
+)
+
+//mem_24g_data_type
+(
+0x07 bits_data
+//0-2 data type
+3 bit_abort
+4 bit_hop
+5 bit_sync
+//6-7 channel offset
+)
+
+
+
+//mem_24g_pairing_sm
+(
+0 STATE_24G_PAIRING_NULL
+1 STATE_24G_PAIRING_1
+2 STATE_24G_PAIRING_2
+3 STATE_24G_PAIRING_3
+0X11 STATE_24G_PAIRING_1_WAITING_ACK
+0X12 STATE_24G_PAIRING_2_WAITING_ACK
+0X13 STATE_24G_PAIRING_3_WAITING_ACK
+0XFF STATE_24G_PAIRING_SUCCESS
+)
+
+(
+0 DONGLE_WORK	   		//connect mode normal
+1 DONGLE_BIND			//code pair mode
+2 DONGLE_TEST			//test mode
+3 DONGLE_CODE			//PC_application
+4 DONGLE_PCBA			//PCBA_TEST
+5 DONGLE_DEBUG
+6 DONGLE_MODE_MAX
+7 DONGLE_SEARCH
+0 CLEAR_INIT
+)
+
+(
+0x01 DATATYPE_MOUSE	//mouse
+0x02 DATATYPE_KEYBOARD	//keyboard
+0xAA DATATYPE_BIND		//bind step 1
+0x55 DATATYPE_CONFIG	//bind step 2
+0x22 DATATYPE_OK	//bind step 3
+
+0x01 BIND_MOUSE
+0x02 BIND_KEYBOARD
+)
+
+(
+112 G24_DONGLE_ADDR
+)
+
+(
+0xa0 COMMAND_MODE     //BYTE 0
+0X81 COM_MODE_BIND	//BYTE 1
+0X82 COM_MODE_TEST	//BYTE 1
+)
+(
+0xa1 COMMAND_BIND		//BYTE 0
+0X01 COM_BIND_GET		//1
+0X84 COM_BIND_EXIT		//1
+0XA7 COM_READ_MODE	//1
+)
+(
+0xa2 COMMAND_TEST	//BYTE 0
+0X81 COM_TEST_SC		//	进入单载波
+0x82 COM_TEST_CD		// fcc测试
+0x83 COM_TEST_DAT		// 数据测试
+0X84 COM_TEST_LOW_CH  //低频点
+0X85 COM_TEST_MID_CH	//中频点
+0X86 COM_TEST_HIG_CH	//高频点
+0X87 COM_TEST_SW_HIG	//自动切换频点为高 1mhz
+0X88 COIM_TEST_SW_LOW	//自动切换频点为低 1mhz
+0X89 COM_TEST_SW_STOP	//停止自动切换频点
+0X8A COM_TEST_POW_5		//设置输出功率5dbm
+0X8B COM_TEST_POW_0		//0dbm
+0X8C COM_TEST_POW_N5		//-5dbm
+0X8D COM_TEST_POW_N10		//-10dbm
+0X8E COM_TEST_EXIT			//退出测试模式
+)
+(
+0xa6 COMMAND_CURRENT_PROJECT
+0xa7 COMMAND_CURRENT_MODE
+0xa9 COMMAND_CURRENT_FW_VERSION
+)
+
+//user defined cmd
+(
+0xb0 COMMAND_USER_DEFINED
+)
+
+(
+0x15 PRODUCT_ID
+0 FW_VERSION0
+0 FW_VERSION1
+1 FW_VERSION2
+7 FW_VERSION3
+)
+
+
+(
+8 TIMER_NODATA
+640 TIMER_NODATA_DELAY	//200ms
+
+11 TIMER_MS_BLANK
+320 TIMER_MS_BLANK_DELAY
+
+12 TIMER_KB_MUL_BLANK
+320 TIMER_KB_MUL_BLANK_DELAY
+
+14 TIMER_KB_BLANK
+320 TIMER_KB_BLANK_DELAY
+)
+
+(
+0 KB_NORMAL_REPORT_ID
+1 MS_REPORT_ID
+3 KB_MULTIKEY_REPORT_ID
+)
+
+(
+7 RSSI_BUF_LEN_SIGNAL
+255 RSSI_BUF_LEN_NOISE
+0x50 RSSI_THRESH_NOISE
+
+0x77 RSSI_DIS_MIN_24G
+0x82 RSSI_DIS_MAX_24G
+
+0x75 RSSI_DIS_MIN_BLE
+0x80 RSSI_DIS_MAX_BLE
+)
+
+(
+//power control
+0x01 TXPWR_0DB
+0x02 TXPWR_3DB
+0x04 TXPWR_5DB
+0x10 TXPWR_f5DB
+
+124 POWER_CTRL_MAX_PACKET_CNT
+
+2 POWER_CTRL_LOSSPAC_THRESH_UP0
+0 POWER_CTRL_LOSSPAC_THRESH_DOWN0
+0x20 POWER_CTRL_RSSI_THRESH_DOWN0
+
+5 POWER_CTRL_LOSSPAC_THRESH_UP1
+0 POWER_CTRL_LOSSPAC_THRESH_DOWN1
+0x60 POWER_CTRL_RSSI_THRESH_DOWN1
+
+10 POWER_CTRL_LOSSPAC_THRESH_UP2
+0 POWER_CTRL_LOSSPAC_THRESH_DOWN2
+0x80 POWER_CTRL_RSSI_THRESH_DOWN2
+)
+
+//mem_send_data_24g_short_lpm
+(
+0 SHORT_LPM_STATE_POLLING 	
+1 SHORT_LPM_STATE_DATA
+2 SHORT_LPM_STATE_NODATA
+3 SHORT_LPM_STATE_BUTTON_WHEEL
+)
+
+(
+81000 G24_8125_INTERVAL_PARAM
+78000 G24_78125_INTERVAL_PARAM
+12210 G24_4MS_INTERVAL_PARAM
+)
+
+(
+1 G24_TX_TIMER_INT_ENABLE
+0 G24_TX_TIMER_INT_DISABLE
+)
+
+
+
+0x022d mem_h5rx_ackcnt
+0x022e mem_check_err_acl_cont
+0x022f mem_rp_packets
+0x0230 mem_packet_type
+0x0232 mem_hci_sniff_conn_handle
+0x0234 mem_hci_sniff_max_interval
+0x0236 mem_hci_sniff_min_interval
+0x0238 mem_hci_sniff_attempt
+0x023a mem_hci_sniff_timeout
+0x023c mem_voice_setting
+0x023e mem_retransmission_effort
+0x023f mem_sco_ptype
+0x0241 mem_extm_uap_restore
+0x0244 mem_h5rx_rptr
+0x0246 mem_h5rx_ack
+0x0247 mem_h5tx_ack
+0x0248 mem_h5tx_rptr
+0x024a mem_h5tx_wptr
+0x024c mem_h5tx_free
+0x024e mem_h5rx_tmp
+0x024f mem_h5tx_seq
+0x0250 mem_hci_acl_queue_wptr
+0x0252 mem_hci_acl_queue_rptr
+0x0254 mem_hci_acl_queue_end
+0x0256 mem_hci_acl_queue_wcnt
+0x0257 mem_hci_acl_cnt
+0x0258 mem_hci_acl_tx_trigger_wptr//tx via uart
+0x025a mem_hci_curr_len
+0x025b mem_hci_curr_target
+
+
+15 hci_flag_rp
+//mem_hci_options bit map
+(
+1 hci_option_h4
+2 hci_option_protocol2
+3 hci_option_protocol3
+4 hci_option_uart
+5 hci_option_usb
+6 hci_option_phy2
+7 hci_option_phy3
+)
+// UART baud rate @6MHz
+(
+0 uart_ctrl_bit_enable
+3 uart_ctrl_bit_slip_protocol
+
+)
+
+//bit map of core_uart_ctrl
+(
+
+)
+//bit map of core_uart_status
+(
+0 uart_status_tx_fifo_full
+1 uart_status_tx_fifo_empty
+2 uart_status_tx_busy
+3 uart_status_rx_fifo_empty
+
+)
+//HCI H4 LOG related
+(
+0x4850 mem_hci_log
+8 hci_log_size
+100 hci_log_cnt
+
+)
+//HCI H4 Packet TYPE
+(
+0x01 HCI_H4_TYPE_CMD
+0x02 HCI_H4_TYPE_ACL
+0x04 HCI_H4_TYPE_EVENT
+
+)
+// HCI command opcode group field values
+(
+0x01 HCI_OGF_LINK_CONTROL
+0x02 HCI_OGF_LINK_POLICY
+0x03 HCI_OGF_BASEBAND
+0x04 HCI_OGF_INFO
+0x05 HCI_OGF_STATUS
+0x06 HCI_OGF_TEST
+0x08 HCI_OGF_LOW_ENERGY
+0x3e HCI_OGF_LOGO_TESTING
+0x3f HCI_OGF_VENDOR_SPECIFIC
+)
+
+// HCI link control opcode command field values, OGF=1
+(
+0x01 HCI_INQUIRY 
+0x02 HCI_INQUIRY_CANCEL 
+0x03 HCI_PERIODIC_INQUIRY_MODE 
+0x04 HCI_EXIT_PERIODIC_INQUIRY_MODE 
+0x05 HCI_CREATE_CONNECTION 
+0x06 HCI_DISCONNECT 
+0x07 HCI_ADD_SCO_CONNECTION 
+0x08 HCI_CREATE_CONNECTION_CANCEL
+0x09 HCI_ACCEPT_CONNECTION 
+0x0A HCI_REJECT_CONNECTION 
+0x0B HCI_LINK_KEY_REQUEST_REPLY 
+0x0C HCI_LINK_KEY_REQUEST_NEGATIVE_REPLY 
+0x0D HCI_PIN_CODE_REQUEST_REPLY 
+0x0E HCI_PIN_CODE_REQUEST_NEGATIVE_REPLY 
+0x0F HCI_CHANGE_CONNECTION_PACKET_TYPE 
+0x11 HCI_AUTHENTICATION_REQUESTED 
+0x13 HCI_SET_CONNECTION_ENCRYPTION 
+0x15 HCI_CHANGE_CONNECTION_LINK_KEY 
+0x17 HCI_MASTER_LINK_KEY 
+0x19 HCI_REMOTE_NAME_REQUEST 
+0x1A HCI_REMOTE_NAME_REQUEST_CANCEL
+0x1B HCI_READ_REMOTE_SUPPORTED_FEATURES 
+0x1C HCI_READ_REMOTE_EXT_FEATURES 
+0x1D HCI_READ_REMOTE_VERSION_INFORMATION 
+0x1F HCI_READ_CLOCK_OFFSET 
+0x20 HCI_READ_LMP_HANDLE
+0x28 HCI_SETUP_SCO_CONNECTION
+0x29 HCI_ACCEPT_SCO_CONNECTION
+0x2A HCI_REJECT_SCO_CONNECTION
+0x2B HCI_IO_CAP_REQUEST_REPLY
+0x2C HCI_USER_CONFIRMATION_REQUEST_REPLY
+0x2D HCI_USER_CONFIRMATION_REQUEST_NEGATIVE_REPLY
+0x2E HCI_USER_PASSKEY_REQUEST_REPLY
+0x2F HCI_USER_PASSKEY_REQUEST_NEGATIVE_REPLY
+0x30 HCI_REMOTE_OOB_DATA_REQUEST_REPLY
+0x33 HCI_REMOTE_OOB_DATA_REQUEST_NEGATIVE_REPLY
+0x34 HCI_IO_CAPABILITY_REQUEST_NEGATIVE_REPLY
+0x35 HCI_CREATE_PHYSICAL_LINK
+0x36 HCI_ACCEPT_PHYSICAL_LINK
+0x37 HCI_DISCONNECT_PHYSICAL_LINK
+0x38 HCI_CREATE_LOGICAL_LINK
+0x39 HCI_ACCEPT_LOGICAL_LINK
+0x3A HCI_DISCONNECT_LOGICAL_LINK
+0x3B HCI_LOGICAL_LINK_CANCEL
+0x3C HCI_FLOW_SPEC_MODIFY
+0x3D HCI_ENHANCED_SETUP_SYNCHRONOUS_CONNECTION
+0x3E HCI_ENHANCED_ACCEPT_SYNCHRONOUS_CONNECTION_REQUEST
+0x3F HCI_TRUNCATED_PAGE
+0x40 HCI_TRUNCATED_PAGE_CANCEL
+0x41 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST
+0x42 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST_RECEIVE
+0x43 HCI_START_SYNCHRONIZATION_TRAIN
+0x44 HCI_RECEIVE_SYNCHRONIZATION_TRAIN
+0x45 HCI_REMOTE_OOB_EXTENDED_DATA_REQUEST_REPLY
+)
+
+
+// HCI link policy commands OCF value, OGF=2
+(
+0x01 HCI_HOLD_MODE 
+0x03 HCI_SNIFF_MODE 
+0x04 HCI_EXIT_SNIFF_MODE 
+0x05 HCI_PARK_MODE 
+0x06 HCI_EXIT_PARK_MODE 
+0x07 HCI_QOS_SETUP 
+0x09 HCI_ROLE_DISCOVERY 
+0x0B HCI_SWITCH_ROLE 
+0x0C HCI_READ_LINK_POLICY_SETTINGS 
+0x0D HCI_WRITE_LINK_POLICY_SETTINGS 
+0x0e HCI_READ_DEFAULT_LINK_POLICY_SETTINGS
+0x0f HCI_WRITE_DEFAULT_LINK_POLICY_SETTINGS
+0x10 HCI_FLOW_SPECIFICATION
+0x11 HCI_SNIFF_SUBRATING
+)
+
+// HCI host controller and baseband commands OCF values, OGF=3
+(
+0x01 HCI_SET_EVENT_MASK 
+0x03 HCI_RESET 
+0x05 HCI_SET_EVENT_FILTER 
+0x08 HCI_FLUSH 
+0x09 HCI_READ_PIN_TYPE 
+0x0A HCI_WRITE_PIN_TYPE 
+0x0B HCI_CREATE_NEW_UNIT_KEY 
+0x0D HCI_READ_STORED_LINK_KEY 
+0x11 HCI_WRITE_STORED_LINK_KEY 
+0x12 HCI_DELETE_STORED_LINK_KEY 
+0x13 HCI_WRITE_LOCAL_NAME 
+0x14 HCI_READ_LOCAL_NAME 
+0x15 HCI_READ_CONN_ACCEPT_TIMEOUT 
+0x16 HCI_WRITE_CONN_ACCEPT_TIMEOUT 
+0x17 HCI_READ_PAGE_TIMEOUT 
+0x18 HCI_WRITE_PAGE_TIMEOUT 
+0x19 HCI_READ_SCAN_ENABLE 
+0x1A HCI_WRITE_SCAN_ENABLE 
+0x1B HCI_READ_PAGE_SCAN_ACTIVITY 
+0x1C HCI_WRITE_PAGE_SCAN_ACTIVITY 
+0x1D HCI_READ_INQUIRY_SCAN_ACTIVITY 
+0x1E HCI_WRITE_INQUIRY_SCAN_ACTIVITY 
+0x1F HCI_READ_AUTHENTICATION_ENABLE 
+0x20 HCI_WRITE_AUTHENTICATION_ENABLE 
+0x21 HCI_READ_ENCRYPTION_MODE 
+0x22 HCI_WRITE_ENCRYPTION_MODE 
+0x23 HCI_READ_CLASS_OF_DEVICE 
+0x24 HCI_WRITE_CLASS_OF_DEVICE 
+0x25 HCI_READ_VOICE_SETTING 
+0x26 HCI_WRITE_VOICE_SETTING 
+0x27 HCI_READ_AUTOMATIC_FLUSH_TIMEOUT 
+0x28 HCI_WRITE_AUTOMATIC_FLUSH_TIMEOUT 
+0x29 HCI_READ_NUM_BROADCAST_RETRANSMISSIONS 
+0x2A HCI_WRITE_NUM_BROADCAST_RETRANSMISSIONS 
+0x2B HCI_READ_HOLD_MODE_ACTIVITY 
+0x2C HCI_WRITE_HOLD_MODE_ACTIVITY 
+0x2D HCI_READ_TRANSMIT_POWER_LEVEL 
+0x2E HCI_READ_SCO_FLOW_CONTROL_ENABLE 
+0x2F HCI_WRITE_SCO_FLOW_CONTROL_ENABLE 
+0x31 HCI_SET_CONTROLLER_TO_HOST_FLOW_CONTROL 
+0x33 HCI_HOST_BUFFER_SIZE 
+0x35 HCI_HOST_NUM_COMPLETED_PACKETS 
+0x36 HCI_READ_LINK_SUPERVISION_TIMEOUT 
+0x37 HCI_WRITE_LINK_SUPERVISION_TIMEOUT 
+0x38 HCI_READ_NUMBER_OF_SUPPORTED_IAC 
+0x39 HCI_READ_CURRENT_IAC_LAP 
+0x3A HCI_WRITE_CURRENT_IAC_LAP 
+0x3B HCI_READ_PAGE_SCAN_PERIOD_MODE 
+0x3C HCI_WRITE_PAGE_SCAN_PERIOD_MODE 
+0x3D HCI_READ_PAGE_SCAN_MODE 
+0x3E HCI_WRITE_PAGE_SCAN_MODE 
+0x3F HCI_SET_AFH_CHANNEL_CLASSIFICATION 
+
+
+0x42 HCI_READ_INQUIRY_SCAN_TYPE 
+0x43 HCI_WRITE_INQUIRY_SCAN_TYPE 
+0x44 HCI_READ_INQUIRY_MODE 
+0x45 HCI_WRITE_INQUIRY_MODE 
+0x46 HCI_READ_PAGE_SCAN_TYPE 
+0x47 HCI_WRITE_PAGE_SCAN_TYPE 
+
+0x48 HCI_READ_AFH_CHANNEL_ACCESSMENT_MODE 
+0x49 HCI_WRITE_AFH_CHANNEL_ACCESSMENT_MODE 
+0x51 HCI_READ_EXTENDED_INQUIRY_RESPONSE
+0x52 HCI_WRITE_EXTENDED_INQUIRY_RESPONSE
+0x53 HCI_REFRESH_ENCRYPTION_KEY
+0x55 HCI_READ_SIMPLE_PAIRING_MODE
+0x56 HCI_WRITE_SIMPLE_PAIRING_MODE
+0x57 HCI_READ_LOCAL_OOB_DATA
+0x58 HCI_READ_INQUIRY_RESPONSE_TRANSMIT_POWER_LEVEL
+0x59 HCI_WRITE_INQUIRY_TRANSMIT_POWER_LEVEL
+0x60 HCI_SEND_KEYPRESS_NOTIFICATION
+0x5A HCI_READ_DEFAULT_ERRONEOUS_DATA_REPORTING
+0x5B HCI_WRITE_DEFAULT_ERRONEOUS_DATA_REPORTING
+0x5F HCI_ENHANCED_FLUSH
+0x61 HCI_READ_LOGICAL_LINK_ACCEPT_TIMEOUT
+0x62 HCI_WRITE_LOGICAL_LINK_ACCEPT_TIMEOUT
+0x63 HCI_SET_EVENT_MASK_PAGE_2
+0x64 HCI_READ_LOCATION_DATA
+0x65 HCI_WRITE_LOCATION_DATA
+0x66 HCI_READ_FLOW_CONTROL_MODE
+0x67 HCI_WRITE_FLOW_CONTROL_MODE
+0x68 HCI_READ_ENHANCE_TRANSMIT_POWER_LEVEL
+0x69 HCI_READ_BEST_EFFORT_FLUSH_TIMEOUT
+0x6A HCI_WRITE_BEST_EFFORT_FLUSH_TIMEOUT
+0x6B HCI_SHORT_RANGE_MODE
+0x6C HCI_READ_LE_HOST_SUPPORT
+0x6D HCI_WRITE_LE_HOST_SUPPORT
+0x6E HCI_SET_MWS_CHANNEL_PARAMETERS
+0x6F HCI_SET_EXTERNAL_FRAME_CONFIGURATION
+0x70 HCI_SET_MWS_SIGNALING
+0x71 HCI_SET_MWS_TRANSPORT_LAYER
+0x72 HCI_SET_MWS_SCAN_FREQUENCY_TABLE
+0x73 HCI_SET_MWS_PATTERN_CONFIGURATION
+0x74 HCI_SET_RESERVED_LT_ADDR
+0x75 HCI_DELETE_RESERVED_LT_ADDR
+0x76 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST_DATA
+0x77 HCI_READ_SYNCHRONIZATION_TRAIN_PARAMETERS
+0x78 HCI_WRITE_SYNCHRONIZATION_TRAIN_PARAMETERS
+0x79 HCI_READ_SECURE_CONNECTIONS_HOST_SUPPORT
+0x7A HCI_WRITE_SECURE_CONNECTIONS_HOST_SUPPORT
+0x7B HCI_READ_AUTHENTICATED_PAYLOAD_TIMEOUT
+0x7C HCI_WRITE_AUTHENTICATED_PAYLOAD_TIMEOUT
+0x7D HCI_READ_LOCAL_OOB_EXTENDED_DATA
+0x7E HCI_READ_EXTENDED_PAGE_TIMEOUT
+0x7F HCI_WRITE_EXTENDED_PAGE_TIMEOUT
+0x80 HCI_READ_EXTENDED_INQUIRY_LENGTH
+0x81 HCI_WRITE_EXTENDED_INQUIRY_LENGTH
+)
+
+
+// HCI informational parameters OCF values, OGF=4
+(
+0x01 HCI_READ_LOCAL_VERSION_INFORMATION 
+0x02 HCI_READ_LOCAL_SUPPORTED_COMMANDS
+0x03 HCI_READ_LOCAL_SUPPORTED_FEATURES 
+0x04 HCI_READ_LOCAL_EXT_FEATURES 
+0x05 HCI_READ_BUFFER_SIZE 
+0x07 HCI_READ_COUNTRY_CODE 
+0x09 HCI_READ_BD_ADDR 
+0x0A HCI_REJECT_CONNECTION_REQUEST
+0x0B HCI_READ_LOCAL_SUPPORTED_CODECS
+)
+
+// HCI status parameters OCF values, OGF=5
+(
+0x01 HCI_READ_FAILED_CONTACT_COUNTER 
+0x02 HCI_RESET_FAILED_CONTACT_COUNTER 
+0x03 HCI_GET_LINK_QUALITY 
+0x05 HCI_READ_RSSI 
+0x06 HCI_READ_AFH_CHANNEL_MAP
+0x07 HCI_READ_BD_CLOCK
+0x08 HCI_READ_ENCRYPTION_KEY_SIZE
+0x09 HCI_READ_LOCAL_AMP_INFO
+0x0A HCI_READ_LOCAL_AMP_ASSOC
+0x0B HCI_WRITE_REMOTE_AMP_ASSOC
+0x0C HCI_GET_MWS_TRANSPORT_LAYER_CONFIGURATION
+0x0D HCI_SET_TRIGGERED_CLOCK_CAPTURE
+)
+
+// HCI testing command OCF values, OGF=6
+(
+0x01 HCI_READ_LOOPBACK_MODE 
+0x02 HCI_WRITE_LOOPBACK_MODE 
+0x03 HCI_ENABLE_DEVICE_UNDER_TEST_MODE 
+0x04 HCI_WRITE_SIMPLE_PAIRING_DEBUG_MODE
+0x07 HCI_ENABLE_AMP_RECEIVER_REPORTS
+0x08 HCI_AMP_TEST_END
+0x09 HCI_AMP_TEST
+0x0A HCI_WRITE_SECURE_CONNECTIONS_TEST_MODE
+)
+
+// HCI vendor specific command OCF values -OGF=3F
+(
+0x01 HCI_WRITE_BD_ADDR 
+0x02 HCI_READ_INQUIRY_RESPONSE_TIMEOUT 
+0x03 HCI_WRITE_INQUIRY_RESPONSE_TIMEOUT 
+0x04 HCI_READ_PAGE_SCAN_REPETITION_MODE 
+0x05 HCI_WRITE_PAGE_SCAN_REPETITION_MODE 
+0x06 HCI_READ_PAGE_RESPONSE_TIMEOUT 
+0x07 HCI_WRITE_PAGE_RESPONSE_TIMEOUT 
+0x08 HCI_READ_NEW_CONNECTION_TIMEOUT 
+0x09 HCI_WRITE_NEW_CONNECTION_TIMEOUT 
+0x0a HCI_INITIALIZE_BASEBAND 
+0x0b HCI_WRITE_LOCAL_SUPPORTED_FEATURES 
+0x0c HCI_WRITE_PARK_PARAMETERS 
+0x0d HCI_READ_PARK_PARAMETERS 
+0x0e HCI_WRITE_QUALITY_OF_SERVICE 
+0x0f HCI_NOT_USED 
+0x10 HCI_MODIFY_BEACON_PARAMETERS 
+0x11 HCI_UNPARK_USING_PM_ADDR 
+0x12 HCI_WRITE_HOPPING_CHANNELS 
+0x13 HCI_SLEEP_FOREVER_MODE 
+0x14 HCI_WRITE_AUTO_PAGE_SCAN_ENABLE 
+0x15 HCI_READ_AUTO_PAGE_SCAN_ENABLE 
+0x16 HCI_SET_ENCRYPTION_KEY_SIZE 
+0x17 HCI_INVALIDATE_FLASH_AND_REBOOT 
+0x18 HCI_UPDATE_UART_BAUD_RATE 
+0x19 HCI_WRITE_GPIO_1_4_AS_OUTPUT 
+0x1A HCI_WRITE_GPIO_2_LED 
+0x1B HCI_SET_TESTMODE_TYPE 
+0x1C HCI_WRITE_SCO_PCM_INT_PARAM 
+0x1D HCI_READ_SCO_PCM_INT_PARAM 
+0x1E HCI_WRITE_PCM_DATA_FORMAT_PARAM 
+0x1F HCI_READ_PCM_DATA_FORMAT_PARAM 
+0x20 HCI_WRITE_COMFORT_NOISE_PARAM 
+0x21 HCI_READ_COMFORT_NOISE_PARAM 
+0x22 HCI_WRITE_SCO_TS 
+0x23 HCI_READ_SCO_TS 
+0x24 HCI_WRITE_PCM_LOOPBACK_MODE 
+0x25 HCI_READ_PCM_LOOPBACK_MODE 
+0x26 HCI_SET_TRANSMIT_POWER 
+0x27 HCI_SET_SLEEPMODE_PARAM 
+0x28 HCI_READ_SLEEPMODE_PARAM 
+0x29 HCI_SLEEPMODE_CMD 
+0x2A HCI_DELAY_PERIPHERAL_SCO_STARTUP 
+0x2B HCI_WRITE_RECEIVE_ONLY 
+0x2C HCI_WRITE_RATE_CONTROL 
+0x2D HCI_TX_UNMOD_CARRIER 
+0x2E HCI_DOWNLOAD_MINIDRIVER 
+0x2F HCI_CRYSTAL_PPM 
+0x30 HCI_SET_POWER_AMP_BIAS 
+0x31 HCI_SET_HAM_BEHAVIOR 
+0x32 HCI_SET_AFH_BEHAVIOR 
+0x33 HCI_READ_USER_DEFINED_NVRAM 
+0x34 HCI_ENABLE_RADIO 
+0x35 HCI_READ_DIAGNOSTIC_INFO 
+0x36 HCI_GET_HID_DEVICE_LIST 
+0x37 HCI_ADD_HID_DEVICE 
+0x38 HCI_READ_APP_FW_CONFIG_VERSION 
+0x39 HCI_DELETE_HID_DEVICE 
+0x3B HCI_ENABLE_USB_HID_EMULATION 
+// 0x3A available
+// 0x3B available
+0x3C HCI_SEND_LMPDU 
+0x3D HCI_AUTO_PAIR_REQ 
+0x3E HCI_READ_VS_EXTENSION 
+0x3F HCI_WRITE_VS_EXTENSION 
+
+0x77 HCI_OPCODE_FC77
+0x79 HCI_OPCODE_FC79
+0xC4 HCI_DOWNLOAD_PATCH
+0xCC HCI_OPCODE_FCCC
+
+0x00 HCI_VENDOR_CMD_RESET
+0x01 HCI_VENDOR_CMD_CHIPID
+0x02 HCI_VENDOR_CMD_BAUD
+0x03 HCI_VENDOR_CMD_PATCH
+0x04 HCI_VENDOR_CMD_PATCH_DONE
+0x05 HCI_VENDOR_CMD_ECHO
+0x06 HCI_VENDOR_CMD_BDADDR
+
+0x07 HCI_VENDOR_CMD_ENTER_LPM
+0x08 HCI_VENDOR_CMD_COMMU_READY
+
+0x10 HCI_VENDOR_CMD_MEM
+0x11 HCI_VENDOR_CMD_EEP
+
+0X12 HCI_VENDOR_CMD_PATCH_SEC_INIT
+0X13 HCI_VENDOR_CMD_PATCH_SEC
+)
+
+//HCI LE controller command OCF values, OGF=8
+(
+0x01 HCI_LE_SET_EVENT_MASK
+0x02 HCI_LE_READ_BUFFER_SIZE
+0x03 HCI_LE_READ_LOCAL_SUPPORTED_FEATURES
+0x05 HCI_LE_SET_RANDOM_ADDRESS
+0x06 HCI_LE_SET_ADVERTISING_PARAMETERS
+0x07 HCI_LE_READ_ADVERTISING_CHANNEL_TX_POWER
+0x08 HCI_LE_SET_ADVERTISING_DATA
+0x09 HCI_LE_SET_SCAN_RESPONSE_DATA
+0x0A HCI_LE_SET_ADVERTISE_ENABLE
+0x0B HCI_LE_SET_SCAN_PARAMETERS
+0x0C HCI_LE_SET_SCAN_ENABLE
+0x0D HCI_LE_CREATE_CONNECTION
+0x0E HCI_LE_CREATE_CONNECTION_CANCEL
+0x0F HCI_LE_READ_WHITE_LIST_SIZE
+0x10 HCI_LE_CLEAR_WHITE_LIST
+0x11 HCI_LE_ADD_DEVICE_TO_WHITE_LIST
+0x12 HCI_LE_REMOVE_DEVICE_FROM_WHITE_LIST
+0x13 HCI_LE_CONNECTION_UPDATE
+0x14 HCI_LE_SET_HOST_CHANNEL_CLASSIFICATION
+0x15 HCI_LE_READ_CHANNEL_MAP
+0x16 HCI_LE_READ_REMOTE_USED_FEATURES
+0x17 HCI_LE_ENCRYPT
+0x18 HCI_LE_RAND
+0x19 HCI_LE_START_ENCRYPTION
+0x1A HCI_LE_LONG_TERM_KEY_REQUEST_REPLY
+0x1B HCI_LE_LONG_TERM_KEY_REQUEST_NEGATIVE_REPLY
+0x1C HCI_LE_READ_SUPPORTED_STATES
+0x1D HCI_LE_RECEIVER_TEST
+0x1E HCI_LE_TRANSMITTER_TEST
+0x1F HCI_LE_TEST_END
+0x20 HCI_LE_REMOTE_CONNECTION_PARAMETER_REQUEST_REPLY
+0x21 HCI_LE_REMOTE_CONNECTION_PARAMETER_REQUEST_NEGATIVE_REPLY
+)
+// HCI event code
+(
+0x01 HCI_EVENT_INQUIRY_COMPLETE
+0x02 HCI_EVENT_INQUIRY_RESULT
+0x03 HCI_EVENT_CONNECTION_COMPLETE
+0x04 HCI_EVENT_CONNECTION_REQUEST
+0x05 HCI_EVENT_DISCONNECTION_COMPLETE
+0x06 HCI_EVENT_AUTHENTICATION_COMPLETE
+0x07 HCI_EVENT_REMOTE_NAME_REQUEST_COMPLETE
+0x08 HCI_EVENT_ENCRYPTION_CHANGE_COMPLETE
+0x09 HCI_EVENT_CHANGE_CONNECTION_LINK_KEY_COMPLETE
+0x0A HCI_EVENT_MASTER_LINK_KEY_COMPLETE
+0x0B HCI_EVENT_READ_REMOTE_FEATURES_COMPLETE
+0x0C HCI_EVENT_READ_REMOTE_VERSION_INFORMATION_COMPLETE
+0x0D HCI_EVENT_QOS_SETUP_COMPLETE
+0x0E HCI_EVENT_COMMAND_COMPLETE
+0x0F HCI_EVENT_COMMAND_STATUS
+0x10 HCI_EVENT_HARDWARE_ERROR
+0x11 HCI_EVENT_FLUSH_OCCURRED
+0x12 HCI_EVENT_ROLE_CHANGE
+0x13 HCI_EVENT_NUM_COMPLETED_PACKETS
+0x14 HCI_EVENT_MODE_CHANGE
+0x15 HCI_EVENT_RETURN_LINK_KEYS
+0x16 HCI_EVENT_PIN_CODE_REQUEST
+0x17 HCI_EVENT_LINK_KEY_REQUEST
+0x18 HCI_EVENT_LINK_KEY_NOTIFICATION
+0x19 HCI_EVENT_LOOPBACK_COMMAND
+0x1A HCI_EVENT_DATA_BUFFER_OVERFLOW
+0x1B HCI_EVENT_MAX_SLOTS_CHANGE
+0x1C HCI_EVENT_READ_CLOCK_OFFSET_COMPLETE
+0x1D HCI_EVENT_CONNECTION_PACKET_TYPE_CHANGED
+0x1E HCI_EVENT_QOS_VIOLATION
+0x1F HCI_EVENT_PAGE_SCAN_MODE_CHANGE
+0x20 HCI_EVENT_PAGE_SCAN_REPETITION_MODE_CHANGE
+0x21 HCI_EVENT_FLOW_SPECIFICATION_COMPLETE
+0x22 HCI_EVENT_INQUIRY_RESULT_WITHRSSI
+0x23 HCI_EVENT_READ_REMOTE_EXT_FEATURES_COMPLETE
+0x2C HCI_EVENT_SCO_CONNECTION_COMPLETE
+0x2D HCI_EVENT_SCO_CONNECTION_CHANGED
+0x2E HCI_EVENT_SNIFF_SUBRATING
+0x2F HCI_EVENT_EXT_INQUIRY_RESULT
+0x30 HCI_EVENT_ENCRYPT_KEY_REFRESH_COMPLETE
+0x31 HCI_EVENT_IO_CAP_REQ
+0x32 HCI_EVENT_IO_CAP_RESPONSE
+0x33 HCI_EVENT_USER_CONFIRMATION_REQUEST
+0x34 HCI_EVENT_UESR_PASSKEY_REQUEST
+0x35 HCI_EVENT_REMOTE_OOB_DATA_REQUEST
+0x36 HCI_EVENT_SIMPLE_PAIRING_COMPLETE
+0x38 HCI_EVENT_LINK_SUPERVISION_TIMEOUT_CHANGED
+0x39 HCI_EVENT_ENHANCED_FLUSH_COMPLETE
+0x3B HCI_EVENT_USER_PASSKEY_NOTIFICATION
+0x3C HCI_EVENT_KEYPRESS_NOTIFICATION
+0x3D HCI_EVENT_REMOTE_HOST_SUPPORTED_FEATURES_NOTIFICATION 
+0x3E HCI_EVENT_LE_META_EVENT
+0x40 HCI_EVENT_PHYSICAL_LINK_COMPLETE
+0x41 HCI_EVENT_CHANNEL_SELECTED
+0x42 HCI_EVENT_DISCONNECTION_PHYSICAL_LINK_COMPLETE
+0x43 HCI_EVENT_PHYSICAL_LINK_LOSS_EARLY_WARNING
+0x44 HCI_EVENT_PHYSICAL_LINK_RECOVERY
+0x45 HCI_EVENT_LOGICAL_LINK_COMPLETE
+0x46 HCI_EVENT_DISCONNECTION_LOGICAL_LINK_COMPLETE
+0x47 HCI_EVENT_FLOW_SPEC_MODIFY_COMPLETE
+0x48 HCI_EVENT_NUMBER_OF_COMPLETED_DATA_BLOCKS
+0x49 HCI_EVENT_AMP_START_TEST
+0x4A HCI_EVENT_AMP_TEST_END
+0x4B HCI_EVENT_AMP_RECEIVER_REPORT
+0x4C HCI_EVENT_SHORT_RANGE_MODE_CHANGE_COMPLETE
+0x4D HCI_EVENT_AMP_STATUS_CHANGE
+0x4E HCI_EVENT_TRIGGERED_CLOCK_CAPTURE
+0x4F HCI_EVENT_SYNCHRONIZATION_TRAIN_COMPLETE
+0x50 HCI_EVENT_SYNCHRONIZATION_TRAIN_RECEIVED
+0x51 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_RECEIVE
+0x52 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_TIMEOUT
+0x53 HCI_EVENT_TRUNCATED_PAGE_COMPLETE
+0x54 HCI_EVENT_SLAVE_PAGE_RESPONSE_TIMEOUT
+0x55 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_CHANNEL_MAP_CHANGE
+0x56 HCI_EVENT_INQUIRY_RESPONSE_NOTIFICATION
+0x57 HCI_EVENT_AUTHENTICATED_PAYLOAD_TIMEOUT_EXPIRED
+
+0xFE HCI_EVENT_LOGO_TESTING
+0xFF HCI_EVENT_VENDOR_SPECIFIC
+)
+(
+0x01 HCI_VENDOR_EVENT_COMMU_READY
+)
+//HCI LE SUBEVENT CODE
+(
+0x01 HCI_LE_SUBEVENT_CONN_COMPLETE
+0x02 HCI_LE_SUBEVENT_ADV_REPORT
+0x03 HCI_LE_SUBEVENT_CONN_UPDATE_COMPLETE
+0x04 HCI_LE_SUBEVENT_REMOTE_FEATURE_COMPLETE
+0x05 HCI_LE_SUBEVENT_LTK_REQUEST
+0x06 HCI_LE_SUBEVENT_REMOTE_CONN_PARAM_REQ
+)
+
+(
+0x00 HCI_LPM_OFF
+0x01 HCI_LPM_ON
+)
+
+
+(
+33 HOST_WAKE_TIME
+)
+
+(
+1 HCI_RX_WAKE
+0 HCI_RX_READY
+)
+
+
+(
+/*HID TYPE*/
+0x01 HID_TYPE_CONTROL
+0x04 HID_TYPE_GET_REPORT
+0x05 HID_TYPE_SET_REPORT
+0x07 HID_TYPE_SET_PROTOCOL
+0x09 HID_TYPE_SET_IDLE
+0x0a HID_TYPE_DATA
+/*HID REPORT ID*/
+0x01 HID_REPORT_ID_KB
+
+0x00 HID_CONTROL_P_NOOPERATION
+0x01 HID_CONTROL_P_HARDRESET
+0x02 HID_CONTROL_P_SOFTRESET
+0x03 HID_CONTROL_P_SUSPEND
+0x04 HID_CONTROL_P_EXITSUSPEND
+0x05 HID_CONTROL_P_VIRTUALCABLEUNPLUG
+)
+
+
+
+
+
+
+
+
+//0 mem_kscan_head_ptr
+//1 mem_col_num
+//1 mem_row_num
+//4 mem_col_conf_pin
+//4 mem_row_conf_pin
+//1 mem_row_count
+//1 mem_count_shift
+//2 mem_kscan_value_temp
+//2 mem_kscan_lastvalue
+//2 mem_kscan_value
+//4 mem_btclk_kscan
+//1 mem_btclk_kscan_interval
+
+
+0x00 KEYSCAN_OFFECT_COL_NUM
+0x01 KEYSCAN_OFFECT_ROW_NUM
+0x02 KEYSCAN_OFFECT_COL_CONF_PIN
+0x06 KEYSCAN_OFFECT_ROW_CONF_PIN
+
+0x0a KEYSCAN_OFFECT_ROW_COUNT
+0x0b KEYSCAN_OFFECT_SHIFT_COUNT
+
+0X0C KEYSCAN_OFFECT_VALUE_TEMP
+0X0E KEYSCAN_OFFECT_LASVALUE
+0X10 KEYSCAN_OFFECT_VALUE
+0x12 KEYSCAN_OFFECT_BTCLK
+0x16 KEYSCAN_OFFECT_BTCLK_INTERVAL
+
+
+
+0x025d mem_l2cap_mem_start
+0x025d mem_l2cap_rxbuff1_len
+0x025f mem_l2cap_rxbuff2_len
+0x0261 mem_l2cap_rxbuff_new
+0x0263 mem_l2cap_rxbuff_inuse
+0x0264 mem_l2cap_payload_ptr
+0x0266 mem_l2cap_rx_pkt_length
+0x0268 mem_l2cap_rx_cid
+0x026a mem_l2cap_rx_done
+0x026b mem_l2cap_signal_tx_buff_ptr
+0x026d mem_l2cap_signal_tx_payload_ptr
+0x026f mem_l2cap_signal_tx_length
+0x0271 mem_sdp_tx_buff_ptr
+0x0273 mem_sdp_tx_payload_ptr
+0x0275 mem_sdp_tx_pkt_length
+0x0277 mem_rfcomm_tx_buff_ptr
+0x0279 mem_rfcomm_tx_payload_ptr
+0x027b mem_rfcomm_tx_pkt_length
+0x027d memL2CAP_T1
+0x027f mem_CONTROL_tasks
+0x0280 mem_send_config_req
+0x0281 mem_config_identifier
+0x0282 mem_config_req_dest_CID
+0x0284 mem_rfcomm_malloc_fail_flag
+0x0285 mem_message_to_uppersm
+0x0286 mem_upper_sm_remote_page
+0x0287 mem_upper_sm_reconn
+0x0288 mem_upper_sm_ss
+0x0289 mem_tx_malloc_log
+0x02c9 mem_l2cap_mem_end
+0x02c9 mem_scid
+0x02cb mem_cmd_length
+0x02cd mem_tt2
+0x02cf mem_tt3
+0x02d1 mem_id
+0x02d3 mem_psm
+0x02d5 mem_l2cap_sdpres_delay_time
+
+
+
+//mem_l2cap_lpm_txbuf
+(
+256 l2cap_lpm_txbuf_len
+)
+
+(
+4 L2CAP_TX_FIFO_SIZE
+8 L2CAP_TX_BUFF_CNT
+
+)
+(
+0x0002 L2CAP_SIG_EXT_FEATRUE
+0x0003 L2CAP_SIG_FIX_FEATRUE
+)
+
+
+(
+0 HS_IDLE
+1 AG_INIT_CALL
+2 HS_INIT_CALL
+)
+(
+0 M_ACL_LINK_ABSENT
+1 M_ACL_LINK_EXIST
+)
+
+(
+0 L2CAP_INUSE_BUFF1
+1 L2CAP_INUSE_BUFF2
+)
+/* upper layer interface w/ lower layer */
+(
+1 MAX_NUM_LINKS_ALLOWED
+1 MAX_NUM_SCO_ALLOWED
+1 ACL_LINK_PRESENT
+0 ACL_LINK_ABSENT
+)
+(
+1 L2CAP_RX_DONE 
+0 L2CAP_RX_CLEAR
+)
+/* Scheduler */
+(
+0 L2CAP_DISCONNECT_INTERRUPT
+1 RFCOMM_wants_service
+2 L2CAP_sig_Tx_buff_full
+3 RFCOMM_Tx_buff_full
+4 SDP_Tx_buff_full
+5 got_complete_L2CAP_pkt	
+6 L2CAP_init_Config_Req
+7 L2CAP_DISCONNECT_CONTROL
+)
+
+/* mem_CONTROL_tasks2 */
+(
+0 UI_NEED_SERVICE
+)
+/* L2CAP logic channel identifiers (2 bytes) p.261 */
+(
+0x0001 L2CAP_signal_channel
+0x0050 L2CAP_SDP_channel
+0x0051 L2CAP_RFCOMM_channel
+0x0052 L2CAP_HID_Control_channel   
+0x0053 L2CAP_HID_Interrupt_channel
+0x0077 L2CAP_AVDTP_signal_channel		//------avdtp
+0x0078 L2CAP_AVDTP_media_channel
+0x0079 L2CAP_AVDTP_report_channel
+0x0080 L2CAP_AVDTP_recovery_channel
+0x00dd L2CAP_AVCTP_Control_channel
+)
+/* L2CAP signalling command codes (1 byte) p.284 */
+(
+0x00 reserved
+0x01 signal_cmd_reject
+0x02 signal_connect_req
+0x03 signal_connect_rsp
+0x04 signal_config_req
+0x05 signal_config_rsp
+0x06 signal_disconnect_req
+0x07 signal_disconnect_rsp
+0x08 signal_echo_req
+0x09 signal_echo_rsp
+0x0a signal_info_req
+0x0b signal_info_rsp
+)
+/* L2CAP signal_command_reject reason code (2 bytes), p.285 */
+(
+0x0000 cmd_not_understood
+0x0001 signalling_MTU_exceeded
+0x0002 invalid_CID_in_req
+)
+/* L2CAP PSM values used in signal_connect_req (2 bytes), p.286 */
+(
+0x0001 PSM_SDP
+0x0003 PSM_RFCOMM
+0x0005 PSM_TCS
+0x0011 PSM_HID_control
+0x0013 PSM_HID_interrupt
+0x0017 PSM_AVCTP
+0x0019 PSM_AVDTP
+)
+/* L2CAP connection response result code (2 bytes), p.288 */
+(
+0x0000 L2CAP_connect_successful
+0x0001 L2CAP_connect_pending
+0x0002 L2CAP_connect_refused_PSM_unsupported
+0x0003 L2CAP_connect_refused_security_block
+0x0004 L2CAP_connect_refused_no_resources
+)
+/* L2CAP connection status values (2 bytes), p.288 */
+(
+0x0000 L2CAP_no_info_available
+0x0001 L2CAP_authentication_pending
+0x0002 L2CAP_authorization_pending
+)
+/* L2CAP configuration response result code (2 bytes), p.292 */
+(
+0x0000 L2CAP_config_success
+0x0001 L2CAP_config_failure_bad_parameters
+0x0002 L2CAP_config_failure_no_reason
+0x0003 L2CAP_config_failure_unknown_options
+)
+/* L2CAP constant definitions */
+(
+128 L2CAP_Rx_buff_size
+48  L2CAP_signal_Tx_buff_size
+128 SDP_Tx_buff_size
+128 RFCOMM_Tx_buff_size
+1 AM_ADDRESS
+3 DM1TYPE
+4 DH1TYPE
+11 DH3TYPE
+8 DVTYPE
+0 channel_state_closed
+1 channel_state_config
+2 channel_state_open
+0x0030 L2CAP_config_MTU_SDP
+0xffff L2CAP_config_ftimeout_SDP
+0x03e3 L2CAP_config_MTU_RFCOMM
+0xffff L2CAP_config_ftimeout_RFCOMM
+260 l2cap_max_pkt_len
+)
+
+(
+0 FAILURE
+1 SUCCESS
+2 IN_PROGRESS
+)
+(
+0x00	IDLE
+0x01	WAIT_4_BB_PAGE
+0x02	WAIT_4_LMP_CONN
+0x03	WAIT_4_SCO_CONN
+0x04	WAIT_4_SCO_KILLED
+)
+
+/*mem_master_mss*/
+(
+0 STOP_ENC
+1 SEND_SWITCH_REQ
+)
+(
+0 HF_HS_READY
+1 HF_AG_READY
+)
+/* mem_hf_state */
+(
+0 HF_STATE_WAITING_RFCOMM_CONN
+1 HF_STATE_HF_SEND_FEATURE
+2 HF_STATE_WAITING_AG_FEATURE_OK
+3 HF_STATE_HF_SEND_INDICATORS
+4 HF_STATE_WAITING_AG_INDICATORS_OK
+5 HF_STATE_HF_SEND_CURR_STATUS
+6 HF_STATE_WAITING_AG_STATUS_OK
+7 HF_STATE_HF_SEND_UPDATE_STATUS
+8 HF_STATE_WAITING_AG_UPDATE_STATUS_OK
+9 HF_STATE_CONNECTED
+0x0a HF_STATE_HF_SEND_RECEIVE_INFO
+0x0b HF_STATE_WAITING_AG_INFO
+0x0c HF_STATE_HF_SEND_AT_CLIP
+0x0d HF_STATE_WAITING_AT_CLIP
+0x0e HF_STATE_HF_SEND_AT_CCWA
+0x0f HF_STATE_WAITING_AT_CCWA
+)
+/*mem_hf_call_state*/
+(
+0 HF_CALL_STATE_INACTIVE
+1 HF_CALL_STATE_SETUP
+2 HF_CALL_STATE_ACTIVE 
+)
+/* mem_pairing_state bit definition */
+(
+0 PAIR_INQUIRY_START
+1 PAIR_INQUIRY_TIME_OUT
+2 PAIR_INQUIRY_FAILED
+3 PAIR_INQUIRY_SUCCESS
+4 PAIR_READY_CONN
+5 PAIR_WAIT_CANCEL_RESPONSE
+6 PAIR_CONN_SUCCESS
+7 PAIR_WAIT_DETACH
+)  
+
+/* mem_pairing_mode bit definition */
+(
+0 FORCE_AUTHENTICATION
+)
+/* mem_hid_protecol_type */
+(
+0 PROTECOL_BOOT /*default*/
+1 PROTECOL_REPORT
+)
+
+/* mem_upper_sm_reconn */
+(
+1 UPPERSM_SEND_SDP_CONN_REQ
+2 UPPERSM_SEND_SDP_CFG_REQ
+3 UPPERSM_SEND_SDP_HF_SS
+4 UPPERSM_SEND_SDP_DISC_REQ
+5 UPPERSM_SEND_RFCOMM_CONN_REQ
+6 UPPERSM_SEND_RFCOMM_CFG_REQ
+7 UPPERSM_SEND_SABM_CMD
+8 UPPERSM_SEND_DISC
+9 UPPERSM_SEND_WAIT
+10 UPPERSM_SEND_HID_CONTROL_CONN_REQ
+11 UPPERSM_SEND_HID_CONTROL_CFG_REQ
+12 UPPERSM_SEND_HID_INTERRUPT_CONN_REQ
+13 UPPERSM_SEND_HID_INTERRUPT_CFG_REQ
+14 UPPERSM_SEND_SDP_HS_SS
+15 UPPERSM_SEND_SDP_PBAP_SS
+16 UPPERSM_SEND_SDP_AVTARG_SS
+)
+/* mem_upper_sm_remote_page */
+(
+1 UPPERSM_RP_SEND_SDP_CONN_REQ
+2 UPPERSM_RP_SEND_SDP_CFG_REQ
+3 UPPERSM_RP_SEND_SDP_HF_SS
+4 UPPERSM_RP_SEND_SDP_HS_SS
+5 UPPERSM_RP_SEND_SDP_PBAP_SS
+6 UPPERSM_RP_SEND_SDP_AVTARG_SS
+7 UPPERSM_RP_SEND_SDP_DISC_REQ
+8 UPPERSM_RP_SEND_AVCTP_CONN_REQ
+9 UPPERSM_RP_SEND_AVCTP_CFG_REQ
+)
+
+/* mem_ML2CAP_flag */
+(
+0 MSCHEDULER_HID_CONTROL_CONN_DONE
+1 MSCHEDULER_HID_INTERRUPT_CONN_DONE
+2 MSCHEDULER_HID_CONTROL_CFG_REQ_DONE
+3 MSCHEDULER_HID_CONTROL_CFG_RSP_DONE
+4 MSCHEDULER_HID_INTERRUPT_CFG_REQ_DONE
+5 MSCHEDULER_HID_INTERRUPT_CFG_RSP_DONE
+6 MSCHEDULER_HID_CONTROL_DISC_DONE
+7 MSCHEDULER_HID_INTERRUPT_DISC_DONE
+)
+/*    ui event    --add by lj*/
+(
+0x00 UI_DATA_EVNET_NONE
+0x01 UI_DATA_EVNET_HID
+0x02 UI_DATA_EVNET_AVDTP_S
+0x03 UI_DATA_EVNET_AVDTP_M
+0x04 UI_DATA_EVNET_AVCTP
+0x05 UI_DATA_EVNET_HS
+0x06 UI_DATA_EVNET_HF
+0x07 UI_DATA_EVNET_SPP
+0x08 UI_DATA_EVNET_OBEX
+)
+/*    ui ack --add by lj*/
+(
+0x00 UI_DATA_TX_NONE
+0x01 UI_DATA_TX_HID
+0x02 UI_DATA_TX_AVDTP_S
+0x03 UI_DATA_TX_AVDTP_M
+0x04 UI_DATA_TX_AVCTP
+0x05 UI_DATA_TX_HS
+0x06 UI_DATA_TX_HF
+0x07 UI_DATA_TX_SPP
+0x08 UI_DATA_TX_OBEX
+0x10 ACL_TX_L2CAP_SIGNAL
+0x11 ACL_TX_SDP
+0x12 ACL_TX_RFCOMM
+
+)
+
+(
+0 L2CAP_SDP_interface_conn
+1 L2CAP_SDP_interface_cfg
+)
+
+(                                   
+0 L2CAP_CHANNEL_STATE_CONN_REQ      
+1 L2CAP_CHANNEL_STATE_CONN_RES      
+2 L2CAP_CHANNEL_STATE_SND_CFG_REQ   
+3 L2CAP_CHANNEL_STATE_SND_CFG_RES   
+4 L2CAP_CHANNEL_STATE_RCV_CFG_REQ   
+5 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+6 L2CAP_CHANNEL_RFCOMM_ONLY_SABM
+7 L2CAP_CHANNEL_RFCOMM_ONLY_UA
+6 L2CAP_CHANNEL_AVDTP_SIGNAL_INIT //set avdtp init complete
+6 L2CAP_CHANNEL_HID_HANDSHAKE_DONE
+0x3f L2CAP_CHANNEL_SETUP_COMPLETE
+0x7f L2CAP_CHANNEL_AVDTP_SIGNAL_COMPLETE
+0xff L2CAP_CHANNEL_RFCOMM_DLCI0_OPENED
+)                                     
+
+/*  AVDTP---lj*/
+(
+0 L2CAP_AVDTP_SIGNAL_CONNECT
+1 L2CAP_AVDTP_SIGNAL_CONFIG
+2 L2CAP_AVDTP_MEDIA_CONNECT
+3 L2CAP_AVDTP_MEDIA_CONFIG
+4 L2CAP_AVDTP_REPORT_CONNECT
+5 L2CAP_AVDTP_REPORT_CONFIG
+6 L2CAP_AVDTP_RECOVERY_CONNECT
+7 L2CAP_AVDTP_RECOVERY_CONFIG
+)
+/*  AVCTP---lj*/
+(
+0 L2CAP_AVCTP_SIGNAL_CONNECT
+1 L2CAP_AVCTP_SIGNAL_CONFIG
+)
+
+127 L2CAP_SIGNAL_MALLOC_SIZE
+
+//1 mem_rfcomm_malloc_fail_flag
+(
+0 RFCOMM_MALLOC_SUCCEED
+1 RFCOMM_MALLOC_FAIL
+)
+
+//mem_l2cap_flow_ctrl_flag
+(
+0 L2CAP_FLOW_CTRL_DISABLE
+1 L2CAP_FLOW_CTRL_ENABLE
+)
+
+
+0x02d9 mem_le_rxbuf
+0x0311 mem_le_l2capbuf
+0x0417 mem_le_mic
+0x041b mem_le_peer_mic
+0x041f mem_le_peer_ltk
+0x042f mem_le_mrand
+0x043f mem_le_state
+0x0440 mem_le_mode
+0x0441 mem_le_tsniff
+0x0443 mem_le_anchor
+0x0447 mem_le_clk_offset
+0x044d mem_le_receive_window
+0x044f mem_le_plap
+0x0455 mem_le_conn_handle
+0x0456 mem_le_arq
+0x0457 mem_le_ch
+0x0458 mem_le_hop
+0x0459 mem_le_event_count
+0x045b mem_le_supervision_timer
+0x045f mem_le_instant
+0x0461 mem_le_channels
+0x0462 mem_le_op
+0x0463 mem_le_access
+0x0467 mem_le_crcinit
+0x046a mem_le_window_size
+0x046b mem_le_slave_latency
+0x046d mem_le_superto
+0x046f mem_le_channel_map
+0x0474 mem_le_no_using
+0x0476 mem_le_peer_sca
+0x0477 mem_le_att_opcode
+0x0478 mem_le_att_handle
+0x047a mem_le_err_code
+0x047b mem_le_ll_pairing_fail_reason
+0x047c mem_le_sk
+0x048c mem_le_testtype
+0x048d mem_le_test_sync
+0x048f mem_le_test_pcnt
+0x0491 mem_le_rxon_ts
+0x0497 mem_le_rx_ll_opcode
+0x0498 mem_le_notify_attr_start
+0x049a mem_le_notify_len
+0x049b mem_cmd_le_create_conn
+0x049c mem_le_cur_attlist_start_ptr
+0x049e mem_le_cur_handle_start
+0x04a0 mem_le_cur_handle_end
+0x04a2 mem_le_cur_uuid_length
+0x04a3 mem_le_cur_uuid
+0x04b3 mem_le_curr_att_len
+0x04b4 mem_le_search_res
+0x04b5 mem_le_continue_type
+
+
+
+
+(
+0x000001 param_le_features
+0x000a06 param_le_version
+0x1d87 param_le_subversion
+1636 param_sifs
+0x1e0 param_clke_cal_le
+0xa0 param_le_sca
+)
+
+(
+0 DEFAULT_STATES
+1 IPHONE_LOST_LTK
+2 MODULE_LOST_LTK
+3 LTK_NOT_LOST
+)
+
+
+(
+27 LE_MAX_PAKET_LEN
+)
+
+/* advertising channel PDU type */
+(
+0 ADV_IND
+1 ADV_DIRECT_IND
+2 ADV_NONCONN_IND
+3 SCAN_REQ
+4 SCAN_RSP
+5 CONNECT_REQ
+6 ADV_SCAN_IND
+)
+
+(
+0x01	GAP_ADTYPE_FLAGS
+0x02	GAP_ADTYPE_16BIT_MORE
+0x03	GAP_ADTYPE_16BIT_COMPLETE
+0x04	GAP_ADTYPE_32BIT_MORE
+0x05	GAP_ADTYPE_32BIT_COMPLETE
+0x06	GAP_ADTYPE_128BIT_MORE
+0x07	GAP_ADTYPE_128BIT_COMPLETE
+0x08	GAP_ADTYPE_LOCAL_NAME_SHORT
+0x09	GAP_ADTYPE_LOCAL_NAME_COMPLETE
+0x0a	GAP_ADTYPE_POWER_LEVEL
+0xff	GAP_ADTYPE_MANUFACTURER_SPECIFIC
+)
+
+
+	/* LE control packet type */
+	(
+	0x00 LL_CONNECTION_UPDATE_REQ
+	0x01 LL_CHANNEL_MAP_REQ
+	0x02 LL_TERMINATE_IND
+	0x03 LL_ENC_REQ
+	0x04 LL_ENC_RSP
+	0x05 LL_START_ENC_REQ
+	0x06 LL_START_ENC_RSP
+	0x07 LL_UNKNOWN_RSP
+	0x08 LL_FEATURE_REQ
+	0x09 LL_FEATURE_RSP
+	0x0A LL_PAUSE_ENC_REQ
+	0x0B LL_PAUSE_ENC_RSP
+	0x0C LL_VERSION_IND
+	0x0D LL_REJECT_IND
+	0x0E LL_SLAVE_FEATURE_REQ
+	0x0F LL_CONNECTION_PARAM_REQ
+	0x10 LL_CONNECTION_PARAM_RSP
+	0x11 LL_REJECT_IND_EXT
+	0x12 LL_PING_REQ
+	0x13 LL_PING_RSP
+	)
+
+	/* Security Manager Protocol Code */
+	(
+	0x01 SMP_PAIRING_REQUEST
+	0x02 SMP_PAIRING_RESPONSE
+	0x03 SMP_PAIRING_CONFIRM
+	0x04 SMP_PAIRING_RANDOM
+	0x05 SMP_PAIRING_FAILED
+	0x06 SMP_ENCRYPTION_INFORMATION
+	0x07 SMP_MASTER_IDENTIFICATION
+	0x08 SMP_IDENTITY_INFORMATION
+	0x09 SMP_IDENTITY_ADDRESS_INFORMATION
+	0x0A SMP_SIGNING_INFORMATION
+	0x0B SMP_SECURITY_REQUEST
+	0x0c SMP_PAIRING_PUBLIC_KEY
+	0x0d SMP_PAIRING_DHKEY_CHECK
+	)
+
+	/* L2CAP Signaling OPCODE */
+	(
+	0x12 L2CAP_CONNECTION_PARAMETER_UPDATE_REQUEST
+	0x13 L2CAP_CONNECTION_PARAMETER_UPDATE_RESPONSE
+	)
+
+	/* ATT OPCODE */
+	(
+	0x01 ATTOP_ERROR_RESPONSE
+	0x02 ATTOP_EXCHANGE_MTU_REQUEST
+	0x03 ATTOP_EXCHANGE_MTU_RESPONSE
+	0x04 ATTOP_FIND_INFORMATION_REQUEST
+	0x05 ATTOP_FIND_INFORMATION_RESPONSE
+	0x06 ATTOP_FIND_BY_TYPE_VALUE_REQUEST
+	0x07 ATTOP_FIND_BY_TYPE_VALUE_RESPONSE
+	0x08 ATTOP_READ_BY_TYPE_REQUEST
+	0x09 ATTOP_READ_BY_TYPE_RESPONSE
+	0x0A ATTOP_READ_REQUEST
+	0x0B ATTOP_READ_RESPONSE
+	0x0C ATTOP_READ_BLOB_REQUEST
+	0x0D ATTOP_READ_BLOB_RESPONSE
+	0x0E ATTOP_READ_MULTIPLE_REQUEST
+	0x0F ATTOP_READ_MULTIPLE_RESPONSE
+	0x10 ATTOP_READ_BY_GROUP_TYPE_REQUEST
+	0x11 ATTOP_READ_BY_GROUP_TYPE_RESPONSE
+	0x12 ATTOP_WRITE_REQUEST
+	0x13 ATTOP_WRITE_RESPONSE
+	0x16 ATTOP_PREPARE_WRITE_REQUEST
+	0x17 ATTOP_PREPARE_WRITE_RESPONSE
+	0x18 ATTOP_EXECUTE_WRITE_REQUEST
+	0x19 ATTOP_EXECUTE_WRITE_RESPONSE
+	0x1B ATTOP_HANDLE_VALUE_NOTIFICATION
+	0x1D ATTOP_HANDLE_VALUE_INDICATION
+	0x1E ATTOP_HANDLE_VALUE_CONFIRMATION
+	0x52 ATTOP_WRITE_COMMAND
+	0xD2 ATTOP_SIGNED_WRITE_COMMAND
+	0x1f ATTOP_CONTINUE
+	0x9e EMPTY_LE_DATA_PRE
+	0x9f EMPTY_LE_DATA
+	)
+
+	/* ATT error code */
+	(
+	0x01 ATT_ERR_INVALID_HANDLE
+	0x02 ATT_ERR_READ_NOT_PERMITTED
+	0x03 ATT_ERR_WRITE_NOT_PERMITTED
+	0x04 ATT_ERR_INVALID_PDU
+	0x05 ATT_ERR_INSUFFICIENT_AUTHENTICATION
+	0x06 ATT_ERR_REQUEST_NOT_SUPPORTED
+	0x07 ATT_ERR_INVALID_OFFSET
+	0x08 ATT_ERR_INSUFFICIENT_AUTHORIZATION
+	0x09 ATT_ERR_PREPARE_QUEUE_FULL
+	0x0A ATT_ERR_ATTRIBUTE_NOT_FOUND
+	0x0B ATT_ERR_ATTRIBUTE_NOT_LONG
+	0x0C ATT_ERR_INSUFFICIENT_ENCRYPTION_KEY_SIZE
+	0x0D ATT_ERR_INVALID_ATTRIBUTE_VALUE_LENGTH
+	0x0E ATT_ERR_UNLIKELY_ERROR
+	0x0F ATT_ERR_INSUFFICIENT_ENCRYPTION
+	0x10 ATT_ERR_UNSUPPORTED_GROUP_TYPE
+	0x11 ATT_ERR_INSUFFICIENT_RESOURCES
+	)
+	/*	SERVICE UUID	*/
+	(
+	0x1800 UUID_SERVICE_GENERIC_ACC
+	0x1801 UUID_SERVICE_GENERIC_ATT
+	0x180a UUID_SERVICE_DEVICE_INFO
+	0x180f UUID_SERVICE_BATTERY
+	0x1812 UUID_SERVICE_HIDS
+	0x2800 UUID_GATT_PRIMARY_SERVICE
+	0x2801 UUID_GATT_SECONDARY_SERVICE
+	0X2802 UUID_GATT_INCLUDE
+	0X2803 UUID_GATT_CHARACTERISTIC
+	0X2A00 UUID_CHRCTR_DEVICE_NAME
+	0X2A19 UUID_CHRCTR_BATTERY_LEVEL
+	0X2A22 UUID_CHRCTR_KEYBOARD_INPUT
+	0X2A23 UUID_CHRCTR_SYSTEM_ID 
+	0X2A25 UUID_CHRCTR_SERIAL_NUMBER
+	0X2A26 UUID_CHRCTR_FIRMWARE
+	0X2A32 UUID_CHRCTR_KEYBOARD_OUTPUT
+	0X2A33 UUID_CHRCTR_MOUSE_INPUT
+	0X2A4A UUID_CHRCTR_HID_INFO
+	0X2A4B UUID_CHRCTR_REPORT_MAP
+	0X2A4C UUID_CHRCTR_HID_CTRL_POINT
+	0X2A4D UUID_CHRCTR_REPORT
+	0X2A4E UUID_CHRCTR_PROTOCOL_MODE
+	)
+
+	(// pairing failed reason
+	0x00 PAIRING_FAILED_RESERVED
+	0X01 PAIRING_FAILED_PASSKEY_ENTRY_FAILED
+	0X02 PAIRING_FAILED_OOB_NOT_AVAILABLE
+	0X03 PAIRING_FAILED_AUTHENTICATION_REQUIRE
+	0X04 PAIRING_FAILED_CONFIRM_VALUE_FAILED
+	0X05 PAIRING_FAILED_PAIRING_NOT_SUPPORTED
+	0X06 PAIRING_FAILED_ENCRYPTION_KEY_SIZE
+	0X07 PAIRING_FAILED_COMMAND_NOT_SUPPORTED
+	0X08 PAIRING_FAILED_UNSPECIFIED_REASON
+	0X09 PAIRING_FAILED_REPEATED_ATTEMPTS
+	0X0A PAIRING_FAILED_INVALID_PARAMETERS
+	0X0B PAIRING_FAILED_DHKEY_CHECK_FAILED
+	0X0C PAIRING_FAILED_NUMERIC_COMPARISON_FAILED
+	0X0D PAIRING_FAILED_BR_EDR_PAIRING_IN_PROGRESS
+	0X0E PAIRING_FAILED_KEY_DERIVATION_GENERATION_NOT_ALLOWED
+	)
+
+
+	//BLE ErrorCodes
+	(    
+	0x01 ERROR_UNKNOWN_HCI_COMMAND
+	0x02 ERROR_NO_CONNECTION
+	0x03 ERROR_HARDWARE_FAILURE
+	0x04 ERROR_PAGE_TIMEOUT
+	0x05 ERROR_AUTHENTICATION_FAILURE
+	0x06 ERROR_KEY_MISSING
+	0x07 ERROR_MEMORY_FULL
+	0x08 ERROR_CONNECTION_TIMEOUT
+	0x09 ERROR_MAX_CONNECTIONS
+	0x0A ERROR_MAX_SCO_CONNECTIONS
+	0x0B ERROR_MAX_ACL_CONNECTIONS
+	0x0C ERROR_COMMAND_DISALLOWED
+	0x0D ERROR_HOST_REJECT_LIMITED_RESOURCES
+	0x0E ERROR_HOST_REJECT_SECURITY_REASONS
+	0x0F ERROR_HOST_REJECT_REMOTE_IS_ONLY_PERSONAL
+	0x10 ERROR_HOST_TIMEOUT
+	0x11 ERROR_UNSUPPORTED_FEATURE_OR_PARAMETER_VALUE
+	0x12 ERROR_INVALID_HCI_COMMAND_PARAMETERS
+	0x13 ERROR_REMOTE_USER_TERMINATED_CONNECTION
+	0x14 ERROR_REMOTE_LOW_RESOURCES
+	0x15 ERROR_REMOTE_POWERING_OFF
+	0x16 ERROR_CONNECTION_TERMINATED_BY_LOCAL_HOST
+	0x17 ERROR_REPEATED_ATTEMPTS
+	0x18 ERROR_PAIRING_NOT_ALLOWED
+	0x19 ERROR_UNKNOWN_LMP_PDU
+	0x1A ERROR_UNSUPPORTED_REMOTE_FEATURE
+	0x1B ERROR_SCO_OFFSET_REJECTED
+	0x1C ERROR_SCO_INTERVAL_REJECTED
+	0x1D ERROR_SCO_AIR_MODE_REJECTED
+	0x1E ERROR_INVALID_LMP_PARAMETER
+	0x1F ERROR_UNSPECIFIED_ERROR
+	0x20 ERROR_UNSUPPORTED_LMP_PARAMETER_VALUE
+	0x21 ERROR_ROLE_CHANGE_NOT_ALLOWD
+	0x22 ERROR_LMP_RESPONSE_TIMEOUT
+	0x23 ERROR_ERROR_TRANSACTION_COLLISION
+	0x24 ERROR_LMP_PDU_NOT_ALLOWED
+	0x25 ERROR_ENCRYPTION_MODE_NOT_ACCEPTABLE
+	0x26 ERROR_UNIT_KEY_USED
+	0x27 ERROR_QOS_NOT_SUPPORTED
+	0x28 ERROR_INSTANT_PASSED
+	0x29 ERROR_PAIRING_W_UNIT_KEY_NOT_SUPPORTED
+	0x2a ERROR_DIFFERENT_TRANSACTION_COLLISION
+	0x2c ERROR_QOS_UNACCEPTABLE_PARAMETER
+	0x2d ERROR_QOS_REJECTED
+	0x2e ERROR_CHANNEL_CLASSIFICATION_NOT_SUPPORTED
+	0x2f ERROR_INSUFFICIENT_SECURITY
+	0x30 ERROR_PARAMETER_OUT_OF_MANDATORY_PANGE
+	0x32 ERROR_ROLE_SWITCH_PENDING
+	0x34 ERROR_RESERVED_SLOT_VIOLATION
+	0x35 ERROR_ROLE_SWITCH_FAILED
+	0x36 ERROR_EXTENDED_INQUIRY_RESPONSE_TOO_LARGE
+	0x37 ERROR_SIMPLE_PAIRING_NOT_SUPPORTED_BY_HOST
+	0x38 ERROR_HOST_BUSY_PAIRING
+	)
+
+
+	//modified_name
+	(
+	0x14 MAX_NAME_LEN
+	0x16 ADV_DATA_NAME_LEN
+	0X20 SPACE
+	
+	)
+	/* GATT Specifications*/
+	(
+	0X2900 CHARACTERTIC_EXTENDED_PROPERTIES
+	0X2901 CHARACTERTIC_USER_DESCRIPTION
+	0X2902 CLIENT_CHARACTERTIC_CONFIGURATION
+	0X2903 SERVER_CHARACTERTIC_CONFIGURATION
+	0X2904 CHARACTERTIC_PRESENTATION_FORMAT
+	0X2905 CHARACTERTIC_AGGREGATE
+	0X2906 VALID_RANGE
+	0X2907 EXTERNAL_REPORT_REFERENCE
+	0X2908 REPORT_REFERENCE
+	0X290B ENVIR_SENSING_CONFIGURATION
+	0X290C ENVIR_SENSING_MEASUREMENT
+	0X290D ENVIR_SENSING_TRIGGER_SETTING
+	)
+	/* LE L2CAP CID */
+	(
+	0x0004 LE_L2CAP_CID_ATT
+	0x0005 LE_L2CAP_CID_SIGNAL
+	0x0006 LE_L2CAP_CID_SMP
+	)
+
+	//LE address type
+	(
+	0 LE_ADDR_TYPE_PUBLIC
+	1 LE_ADDR_TYPE_RANDOM
+	)
+	//LE address type bitmap
+	(
+	7 LE_RECEIVER_ADDR_BIT
+	6 LE_SENDER_ADDR_BIT
+	)
+	//LE SCAN TYPE
+	(
+	0x00 LE_SCAN_TYPE_PASSIVE //no SCAN_REQ shall be sent
+	0x01 LE_SCAN_TYPE_ACTIVE
+	)
+
+	//LE SCAN ENABLE
+	(
+	0x00 LE_SCAN_DISABLE
+	0x01 LE_SCAN_ENABLE
+	0x0101 LE_ACTIVE_SCAN_ENABLE
+	)
+
+	//LE FIND INFORMATION RESPONSE
+	//THE FORMAT OF THE INFORMATION DATA
+	(
+	0x01 UUID_SIZE_16BIT
+	0x02 UUID_SIZE_128BIT
+	)
+
+	(
+	0x0000 BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_ACCEPTED
+	0x0001 BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_REJECTED
+	)
+
+//	le_state_map 0-2 is reserved for state_inconn,state_insniff and state_sco
+(
+3 lestate_got_first_packet
+4 lestate_encryption
+5 lestate_update_param
+6 lestate_update_map
+)
+
+// 	le mode
+(
+0 lemode_idle
+1 lemode_slave
+3 lemode_master
+)
+
+
+(
+0x01 LLID_CONTINUE
+0x02 LLID_START
+0x03 LLID_LE_LL
+0x01 LLID_EMPTY
+)
+
+(
+4 LE_TX_BUFF_COUNT
+3 LE_TX_BUFF_UPDATE_LOOPCNT //LE_TX_BUFF_COUNT-1
+
+12 LE_MD_MAX_COUNT
+)
+
+
+(
+0 LE_INITATOR_LTK_BIT
+1 LE_INITATOR_IRK_BIT
+2 LE_INITATOR_CSRK_BIT
+)
+
+(
+0x00 LE_PAIRING_MODE_NONE
+0x01 LE_PAIRING_MODE_LAGACY_JUSTWORK
+0x02 LE_PAIRING_MODE_LAGACY_PASSKEY
+0x81 LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK
+0x82 LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC
+0x83 LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY
+
+7 LE_PAIRING_MODE_SECURE_CONNECT_BIT
+)
+
+
+(
+0 FLAG_IOCAP_DISPLAYONLY
+1 FLAG_IOCAP_DISPLAYYESNO
+2 FLAG_IOCAP_KEYBOARDONLY
+3 FLAG_IOCAP_NOINPUTNOOUTPUT
+4 FLAG_IOCAP_KEYBOARDDISPLAY
+
+0x00 FLAG_OOB_DATA_FLAG_NO
+)
+
+(
+0x00 FLAG_LE_NO_BONDING_NO_MITM
+0x01 FLAG_LE_BONDING_NO_MITM
+0x04 FLAG_LE_NO_BONDING_MITM
+0x05 FLAG_LE_BONDING_MITM
+0x09 FLAG_LE_BONDING_NO_MITM_SECURE
+0x0D FLAG_LE_BONDING_MITM_SECURE
+
+2 LE_AUTH_MITM_BIT
+3 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT
+)
+
+(
+0  LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND
+1  LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE
+2  LE_FIND_BY_TYPE_VAL_RES_FOUND_ENDING_HANDLE
+
+)
+
+(
+0 MASTER_PUBLIC_ADDR
+1 MASTER_RANDOM_ADDR
+)
+
+(
+0x06 LE_ERR_PIN_OR_KEY_MISSING
+)
+
+
+(
+96000 TIMER_SMP_PAIRING_TIMEOUT //30S
+)
+//mem_le_pairing_state
+(
+0 FLAG_LE_PAIRING_NULL
+1 FLAG_LE_PAIRING_START
+2 FLAG_LE_PAIRING_SEND_RECURITY_REQ
+3 FLAG_LE_PAIRING_RCV_PAIRING_REQ
+4 FLAG_LE_PAIRING_AUTH
+5 FLAG_LE_PAIRING_AFTER_AUTH
+6 FLAG_LE_PAIRING_SEND_START_ENC_RSP
+7 FLAG_LE_PARING_SEND_ENC_INFORMATION
+8 FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION 
+9 FLAG_LE_PARING_SEND_INDENTITY_INFORMATION
+0xff FLAG_LE_PAIRING_END
+)
+
+
+
+/*LE secure connect state */
+(
+0x00 LE_SC_STAT_NULL
+0x01 LE_SC_STAT_RECEIVE_PUBLIC_KEY
+0x02 LE_SC_STAT_WAIT_SEND_PUBLIC_KEY
+0x03 LE_SC_STAT_SEND_PUBLIC_KEY
+0x04 LE_SC_STAT_RECEIVE_RANDOM
+0x05 LE_SC_STAT_SEND_RANDOM
+0x06 LE_SC_STAT_RECEIVE_DHKEY
+0x07 LE_SC_STAT_WAIT_CONFIRM_GKEY
+0x08 LE_SC_STAT_PASSKEY_WAIT_CONFIRM
+)
+
+
+(
+0 FLAG_LE_SC_CONFRIM_NULL
+1 FLAG_LE_SC_CONFRIM_GKEY_OK
+)
+
+//mem_le_enc_state
+(
+0 FLAG_LE_ENC_NULL
+1 FLAG_LE_RCV_ENC_START
+2 FLAG_LE_ENC_PAUSE
+3 FLAG_LE_RCV_START_ENC_RSP
+4 FLAG_LE_SEND_START_ENC_RSP
+0xff FLAG_LE_ENC_END
+)
+
+(//mem_le_configuration
+//bit0:use fixed key , ble passkey pairing
+0 BIT_BLE_PASSKEY_FIXED_KEY
+//bit1:ble pairing use fixed long term key
+1 BIT_BLE_PAIRING_FIXED_LTK
+//bit2:ble transmit packet will set more data flag
+2 BIT_BLE_TRANSMIT_PACKET_BY_MD
+//bit3:master read handle, with requires an authenticated link
+3 BIT_BLE_READ_AUTH
+//bit4:master write handle, with requires an authenticated link
+4 BIT_BLE_WRITE_AUTH
+//bit5:cannot enter long sleep
+5 BIT_BLE_SHORT_MULT
+
+)
+
+(
+0 BIT_ADV_CHANNEL_MAP_37
+1 BIT_ADV_CHANNEL_MAP_38
+2 BIT_ADV_CHANNEL_MAP_39
+)
+
+
+
+
+0x04b6 mem_lmo_header_length
+0x04b7 mem_lmo_header_opcode
+0x04b8 mem_lmo_payload
+0x04c9 mem_lmi_accepted_opcode
+0x04ca mem_disconn_reason_send
+0x04cb mem_tx_fixed_freq
+0x04cc mem_rx_fixed_freq
+0x04cd mem_ext_features_page
+0x04ce mem_lmpext_ssp_enable
+0x04d0 mem_remote_sppcap
+0x04d1 mem_lmp_conn_state
+0x04d2 mem_soft_timer
+0x04d4 mem_pincode_state
+0x04d5 mem_sres_tid
+0x04d6 mem_accptsco_tid
+0x04d7 mem_auth_enable
+0x04d8 mem_wait_encryption
+0x04d9 mem_sniff_payload
+0x04e9 mem_aurand_send_delay_time
+
+
+	(
+	//bit flag:mem_classic_bt_flag
+	0 FLAG_SSP_REJECT_JUSTWORK
+	1 SHORT_MULT_FLAG
+	)
+	
+	(
+	//bit map
+	0 pair_state_inrand
+	1 pair_state_inrand_acpt
+	2 pair_state_send_comb
+	3 pair_state_recv_comb
+	4 pair_state_send_aurand
+	5 pair_state_recv_sres
+	6 pair_state_recv_aurand
+	7 pair_state_send_sres	
+	)
+	/* LMP opcodes */
+	(
+	1 LMP_NAME_REQ 
+	2 LMP_NAME_RES 
+	3 LMP_ACCEPTED 
+	4 LMP_NOT_ACCEPTED 
+	5 LMP_CLKOFFSET_REQ 
+	6 LMP_CLKOFFSET_RES 
+	7 LMP_DETACH 
+	8 LMP_IN_RAND 
+	9 LMP_COMB_KEY 
+	10 LMP_UNIT_KEY 
+	11 LMP_AU_RAND 
+	12 LMP_SRES 
+	13 LMP_TEMP_RAND 
+	14 LMP_TEMP_KEY 
+	15 LMP_ENCRYPTION_MODE_REQ 
+	16 LMP_ENCRYPTION_KEY_SIZE_REQ 
+	17 LMP_START_ENCRYPTION_REQ 
+	18 LMP_STOP_ENCRYPTION_REQ 
+	19 LMP_SWITCH_REQ 
+	20 LMP_HOLD
+	21 LMP_HOLD_REQ
+	23 LMP_SNIFF_REQ 
+	24 LMP_UNSNIFF_REQ 
+	26 LMP_PARK_REQ 
+	27 LMP_SET_BROADCAST_SCAN_WINDOW 
+	28 LMP_MODIFY_BEACON 
+	29 LMP_UNPARK_BD_ADDR_REQ 
+	30 LMP_UNPARK_PM_ADDR_REQ 
+	31 LMP_INCR_POWER_REQ 
+	32 LMP_DECR_POWER_REQ 
+	33 LMP_MAX_POWER 
+	34 LMP_MIN_POWER 
+	35 LMP_AUTO_RATE 
+	36 LMP_PREFERRED_RATE 
+	37 LMP_VERSION_REQ 
+	38 LMP_VERSION_RES 
+	39 LMP_FEATURES_REQ 
+	40 LMP_FEATURES_RES 
+	41 LMP_QUALITY_OF_SERVICE 
+	42 LMP_QUALITY_OF_SERVICE_REQ 
+	43 LMP_SCO_LINK_REQ 
+	44 LMP_REMOVE_SCO_LINK_REQ 
+	45 LMP_MAX_SLOT 
+	46 LMP_MAX_SLOT_REQ 
+	47 LMP_TIMING_ACCURACY_REQ 
+	48 LMP_TIMING_ACCURACY_RES 
+	49 LMP_SETUP_COMPLETE 
+	50 LMP_USE_SEMI_PERMANENT_KEY 
+	51 LMP_HOST_CONNECTION_REQ 
+	52 LMP_SLOT_OFFSET 
+	53 LMP_PAGE_MODE_REQ 
+	54 LMP_PAGE_SCAN_MODE_REQ 
+	55 LMP_SUPERVISION_TIMEOUT 
+	56 LMP_TEST_ACTIVATE
+	57 LMP_TEST_CONTROL
+	58 LMP_ENC_KEY_SIZE_MASK_REQ
+	59 LMP_ENC_KEY_SIZE_MASK_RES
+	60 LMP_SET_AFH
+
+	/* simple pairing support */
+	61 LMP_ENCAPSULATED_HEADER
+	62 LMP_ENCAPSULATED_PAYLOAD
+	63 LMP_SIMPLE_PAIRING_CONFIRM
+	64 LMP_SIMPLE_PAIRING_NUMBER
+	65 LMP_DHKEY_CHECK
+	127 LMP_ESCAPE
+	127 LMP_ESCAPE_4   /* add 2bytes LMP header support  */   
+	)
+	/* LMP EXT opcodes, ORed with bit 7 to make difference to nonEXT */
+	(
+	129 LMP_EXT_ACCEPTED
+	130 LMP_NOT_ACCEPTED_EXT
+	131 LMP_EXT_FEATURES_REQ
+	132 LMP_EXT_FEATURES_RES
+	139 LMP_PACKET_TYPE_TABLE_REQ
+	140 LMP_EXT_ESCO_LINK_REQ
+	141 LMP_EXT_REMOVE_ESCO_REQ
+	144 LMP_EXT_CHN_CLASSIFICATION_REQ
+	145 LMP_EXT_CHN_CLASSIFICATION
+	149 LMP_SNIFF_SUBRATING_REQ
+	150 LMP_SNIFF_SUBRATING_RES
+	151 LMP_PAUSE_ENCRYPTION_REQ
+	152 LMP_RESUME_ENCRYPTION_REQ
+	153 LMP_IO_CAP_REQ
+	154 LMP_IO_CAP_RES
+	)
+	/* LMP reason codes */
+	(
+	0x05 AUTHENTICATION_FAILURE_ERROR
+	0x06 KEY_MISSING
+	0x0b ACL_CONNECTION_ALREADY_EXISTS
+	0x13 OTHER_END_TERMINATED
+	0x15 ABOUT_TO_POEWR_OFF
+	0x16 LOCAL_HOST
+	0x18 PAIRING_NOT_ALLOWED
+	0x19 UNKNOWN_LMP_PDU
+	0x1A UNSUPPORTED_LMP_FEATURE 
+	0x1F UNSPECIFIED_ERROR
+	0x20 UNSUPPORTED_PARAMETERS
+	0x21 SWITCH_NOT_ALLOWED
+	0x23 TRANSACTION_COLLISION
+	0x24 PDU_NOT_ALLOWED
+	0x25 ENCRYPTION_MODE_NOT_ACCEPTABLE
+	0x2e NOT_SUPPORT_CHN_CLASSIFICATION
+	0x37 NOT_SUPPORT_SSP
+	)
+
+	/* test mode scenarios */
+	(
+	0 PAUSE_TEST_MODE
+	1 ZERO_PATTERN
+	2 ONE_PATTERN
+	3 ALT_PATTERN
+	4 PSEUDORANDOM
+	5 CLOSED_LOOP_BACK_ACL
+	6 CLOSED_LOOP_BACK_SCO
+	7 ACL_WITHOUT_WHITENING
+	8 SCO_WITHOUT_WHITENING
+	9 ALT2_PATTERN
+	255 EXIT_TEST_MODE
+	)
+	/* test mode hoppig modes */
+	(
+	0 FIXED_FREQ
+	1 NORMAL_HOP
+	)
+
+	/* mem_lmp_tid indicates which type of LMP will be sent */
+	(
+	0 TID_NORM_REPLY
+	1 TID_NORM_SEND
+	2 TID_ONE
+	3 TID_ZERO
+	4 TID_PAIRING
+	5 TID_ENCRYPTION
+	6 TID_VARIABLE
+	7 TID_RX
+	)
+
+	/* ============== lmp status ==========*/
+	(
+	0 lmp_incoming
+	1 lmp_outgoing
+	2 lmp_reject_msg
+	3 lmp_clear_msg
+	4 upper_reject_msg
+	5 upper_clear_msg
+	)
+
+(
+0x2ee00 TIMER_ONE_MINUTE //96000*2
+80 TIMER_SWITCH_WAITE
+12 TIMER_ENPT_WAITE
+)
+
+(
+0 SWITCH_FLAG_INIT
+1 SWITCH_FLAG_ACCEPT
+2 SWITCH_FLAG_NOT_ACCEPT
+)
+(
+0 NULL_ENCRYP
+1 DONE_ENCRYP
+)
+
+//
+//
+//Large memory blocks defined in this file.
+//Blocks Shall be defined with absolute address.
+//Blocks' length Shall be specified in comment following Blocks' names.
+//Different blocks MAY be overlap.
+//Blocks defined in this file Shall NOT be overlap with variable in memmap.format.
+
+// USB C51 exchange area
+(
+0xff0 mem_mcmd
+0xff1 mem_mouse_data
+)
+
+//l2cap RX buffers
+(
+0x1000 mem_l2cap_rxbuff1		//0x400
+0x1400 mem_l2cap_rxbuff2		//0x400
+//end address:0x17ff
+)
+//l2cap TX buffers
+(
+0x1800 mem_tx_buff0		//128
+0x1880 mem_tx_buff1		//128
+0x1900 mem_tx_buff2		//128
+0x1980 mem_tx_buff3		//128
+0x1a00 mem_tx_buff4		//128
+0x1a80 mem_tx_buff5		//128
+0x1b00 mem_tx_buff6		//128
+0x1b80 mem_tx_buff7		//128
+//end address: 0x1bff
+)
+
+(
+0x1800 mem_le_tx_buffer0
+0x1900 mem_le_tx_buffer1
+0x1a00 mem_le_tx_buffer2
+0x1b00 mem_le_tx_buffer3
+//end addr:0x1dff
+)
+
+
+//uart buffer
+(
+0x1800 mem_h5rx_buf//0x400
+0x1bff mem_h5rx_buf_end
+0x1c00 mem_h5tx_buf
+0x1fff mem_h5tx_buf_end
+)
+
+
+(
+0x1800 mem_ir_record
+0x1c      mem_ir_record_max
+)
+
+
+
+(
+	  0 patch00_0
+	  1 patch00_1
+	  2 patch00_2
+	  3 patch00_3
+	  4 patch00_4
+	  5 patch00_5
+	  6 patch00_6
+	  7 patch00_7
+	  8 patch01_0
+	  9 patch01_1
+	 10 patch01_2
+	 11 patch01_3
+	 12 patch01_4
+	 13 patch01_5
+	 14 patch01_6
+	 15 patch01_7
+	 16 patch02_0
+	 17 patch02_1
+	 18 patch02_2
+	 19 patch02_3
+	 20 patch02_4
+	 21 patch02_5
+	 22 patch02_6
+	 23 patch02_7
+	 24 patch03_0
+	 25 patch03_1
+	 26 patch03_2
+	 27 patch03_3
+	 28 patch03_4
+	 29 patch03_5
+	 30 patch03_6
+	 31 patch03_7
+	 32 patch04_0
+	 33 patch04_1
+	 34 patch04_2
+	 35 patch04_3
+	 36 patch04_4
+	 37 patch04_5
+	 38 patch04_6
+	 39 patch04_7
+	 40 patch05_0
+	 41 patch05_1
+	 42 patch05_2
+	 43 patch05_3
+	 44 patch05_4
+	 45 patch05_5
+	 46 patch05_6
+	 47 patch05_7
+	 48 patch06_0
+	 49 patch06_1
+	 50 patch06_2
+	 51 patch06_3
+	 52 patch06_4
+	 53 patch06_5
+	 54 patch06_6
+	 55 patch06_7
+	 56 patch07_0
+	 57 patch07_1
+	 58 patch07_2
+	 59 patch07_3
+	 60 patch07_4
+	 61 patch07_5
+	 62 patch07_6
+	 63 patch07_7
+	 64 patch08_0
+	 65 patch08_1
+	 66 patch08_2
+	 67 patch08_3
+	 68 patch08_4
+	 69 patch08_5
+	 70 patch08_6
+	 71 patch08_7
+	 72 patch09_0
+	 73 patch09_1
+	 74 patch09_2
+	 75 patch09_3
+	 76 patch09_4
+	 77 patch09_5
+	 78 patch09_6
+	 79 patch09_7
+	 80 patch0a_0
+	 81 patch0a_1
+	 82 patch0a_2
+	 83 patch0a_3
+	 84 patch0a_4
+	 85 patch0a_5
+	 86 patch0a_6
+	 87 patch0a_7
+	 88 patch0b_0
+	 89 patch0b_1
+	 90 patch0b_2
+	 91 patch0b_3
+	 92 patch0b_4
+	 93 patch0b_5
+	 94 patch0b_6
+	 95 patch0b_7
+	 96 patch0c_0
+	 97 patch0c_1
+	 98 patch0c_2
+	 99 patch0c_3
+	100 patch0c_4
+	101 patch0c_5
+	102 patch0c_6
+	103 patch0c_7
+	104 patch0d_0
+	105 patch0d_1
+	106 patch0d_2
+	107 patch0d_3
+	108 patch0d_4
+	109 patch0d_5
+	110 patch0d_6
+	111 patch0d_7
+	112 patch0e_0
+	113 patch0e_1
+	114 patch0e_2
+	115 patch0e_3
+	116 patch0e_4
+	117 patch0e_5
+	118 patch0e_6
+	119 patch0e_7
+	120 patch0f_0
+	121 patch0f_1
+	122 patch0f_2
+	123 patch0f_3
+	124 patch0f_4
+	125 patch0f_5
+	126 patch0f_6
+	127 patch0f_7
+	128 patch10_0
+	129 patch10_1
+	130 patch10_2
+	131 patch10_3
+	132 patch10_4
+	133 patch10_5
+	134 patch10_6
+	135 patch10_7
+	136 patch11_0
+	137 patch11_1
+	138 patch11_2
+	139 patch11_3
+	140 patch11_4
+	141 patch11_5
+	142 patch11_6
+	143 patch11_7
+	144 patch12_0
+	145 patch12_1
+	146 patch12_2
+	147 patch12_3
+	148 patch12_4
+	149 patch12_5
+	150 patch12_6
+	151 patch12_7
+	152 patch13_0
+	153 patch13_1
+	154 patch13_2
+	155 patch13_3
+	156 patch13_4
+	157 patch13_5
+	158 patch13_6
+	159 patch13_7
+	160 patch14_0
+	161 patch14_1
+	162 patch14_2
+	163 patch14_3
+	164 patch14_4
+	165 patch14_5
+	166 patch14_6
+	167 patch14_7
+	168 patch15_0
+	169 patch15_1
+	170 patch15_2
+	171 patch15_3
+	172 patch15_4
+	173 patch15_5
+	174 patch15_6
+	175 patch15_7
+	176 patch16_0
+	177 patch16_1
+	178 patch16_2
+	179 patch16_3
+	180 patch16_4
+	181 patch16_5
+	182 patch16_6
+	183 patch16_7
+	184 patch17_0
+	185 patch17_1
+	186 patch17_2
+	187 patch17_3
+	188 patch17_4
+	189 patch17_5
+	190 patch17_6
+	191 patch17_7
+	192 patch18_0
+	193 patch18_1
+	194 patch18_2
+	195 patch18_3
+	196 patch18_4
+	197 patch18_5
+	198 patch18_6
+	199 patch18_7
+	200 patch19_0
+	201 patch19_1
+	202 patch19_2
+	203 patch19_3
+	204 patch19_4
+	205 patch19_5
+	206 patch19_6
+	207 patch19_7
+	208 patch1a_0
+	209 patch1a_1
+	210 patch1a_2
+	211 patch1a_3
+	212 patch1a_4
+	213 patch1a_5
+	214 patch1a_6
+	215 patch1a_7
+	216 patch1b_0
+	217 patch1b_1
+	218 patch1b_2
+	219 patch1b_3
+	220 patch1b_4
+	221 patch1b_5
+	222 patch1b_6
+	223 patch1b_7
+	224 patch1c_0
+	225 patch1c_1
+	226 patch1c_2
+	227 patch1c_3
+	228 patch1c_4
+	229 patch1c_5
+	230 patch1c_6
+	231 patch1c_7
+	232 patch1d_0
+	233 patch1d_1
+	234 patch1d_2
+	235 patch1d_3
+	236 patch1d_4
+	237 patch1d_5
+	238 patch1d_6
+	239 patch1d_7
+	240 patch1e_0
+	241 patch1e_1
+	242 patch1e_2
+	243 patch1e_3
+	244 patch1e_4
+	245 patch1e_5
+	246 patch1e_6
+	247 patch1e_7
+	248 patch1f_0
+	249 patch1f_1
+	250 patch1f_2
+	251 patch1f_3
+	252 patch1f_4
+	253 patch1f_5
+	254 patch1f_6
+	255 patch1f_7
+	  0 patch20_0
+	  1 patch20_1
+	  2 patch20_2
+	  3 patch20_3
+	  4 patch20_4
+	  5 patch20_5
+	  6 patch20_6
+	  7 patch20_7
+	  8 patch21_0
+	  9 patch21_1
+	 10 patch21_2
+	 11 patch21_3
+	 12 patch21_4
+	 13 patch21_5
+	 14 patch21_6
+	 15 patch21_7
+	 16 patch22_0
+	 17 patch22_1
+	 18 patch22_2
+	 19 patch22_3
+	 20 patch22_4
+	 21 patch22_5
+	 22 patch22_6
+	 23 patch22_7
+	 24 patch23_0
+	 25 patch23_1
+	 26 patch23_2
+	 27 patch23_3
+	 28 patch23_4
+	 29 patch23_5
+	 30 patch23_6
+	 31 patch23_7
+	 32 patch24_0
+	 33 patch24_1
+	 34 patch24_2
+	 35 patch24_3
+	 36 patch24_4
+	 37 patch24_5
+	 38 patch24_6
+	 39 patch24_7
+	 40 patch25_0
+	 41 patch25_1
+	 42 patch25_2
+	 43 patch25_3
+	 44 patch25_4
+	 45 patch25_5
+	 46 patch25_6
+	 47 patch25_7
+	 48 patch26_0
+	 49 patch26_1
+	 50 patch26_2
+	 51 patch26_3
+	 52 patch26_4
+	 53 patch26_5
+	 54 patch26_6
+	 55 patch26_7
+	 56 patch27_0
+	 57 patch27_1
+	 58 patch27_2
+	 59 patch27_3
+	 60 patch27_4
+	 61 patch27_5
+	 62 patch27_6
+	 63 patch27_7
+	 64 patch28_0
+	 65 patch28_1
+	 66 patch28_2
+	 67 patch28_3
+	 68 patch28_4
+	 69 patch28_5
+	 70 patch28_6
+	 71 patch28_7
+	 72 patch29_0
+	 73 patch29_1
+	 74 patch29_2
+	 75 patch29_3
+	 76 patch29_4
+	 77 patch29_5
+	 78 patch29_6
+	 79 patch29_7
+	 80 patch2a_0
+	 81 patch2a_1
+	 82 patch2a_2
+	 83 patch2a_3
+	 84 patch2a_4
+	 85 patch2a_5
+	 86 patch2a_6
+	 87 patch2a_7
+	 88 patch2b_0
+	 89 patch2b_1
+	 90 patch2b_2
+	 91 patch2b_3
+	 92 patch2b_4
+	 93 patch2b_5
+	 94 patch2b_6
+	 95 patch2b_7
+	 96 patch2c_0
+	 97 patch2c_1
+	 98 patch2c_2
+	 99 patch2c_3
+	100 patch2c_4
+	101 patch2c_5
+	102 patch2c_6
+	103 patch2c_7
+	104 patch2d_0
+	105 patch2d_1
+	106 patch2d_2
+	107 patch2d_3
+	108 patch2d_4
+	109 patch2d_5
+	110 patch2d_6
+	111 patch2d_7
+	112 patch2e_0
+	113 patch2e_1
+	114 patch2e_2
+	115 patch2e_3
+	116 patch2e_4
+	117 patch2e_5
+	118 patch2e_6
+	119 patch2e_7
+	120 patch2f_0
+	121 patch2f_1
+	122 patch2f_2
+	123 patch2f_3
+	124 patch2f_4
+	125 patch2f_5
+	126 patch2f_6
+	127 patch2f_7
+	128 patch30_0
+	129 patch30_1
+	130 patch30_2
+	131 patch30_3
+	132 patch30_4
+	133 patch30_5
+	134 patch30_6
+	135 patch30_7
+	136 patch31_0
+	137 patch31_1
+	138 patch31_2
+	139 patch31_3
+	140 patch31_4
+	141 patch31_5
+	142 patch31_6
+	143 patch31_7
+	144 patch32_0
+	145 patch32_1
+	146 patch32_2
+	147 patch32_3
+	148 patch32_4
+	149 patch32_5
+	150 patch32_6
+	151 patch32_7
+	152 patch33_0
+	153 patch33_1
+	154 patch33_2
+	155 patch33_3
+	156 patch33_4
+	157 patch33_5
+	158 patch33_6
+	159 patch33_7
+	160 patch34_0
+	161 patch34_1
+	162 patch34_2
+	163 patch34_3
+	164 patch34_4
+	165 patch34_5
+	166 patch34_6
+	167 patch34_7
+	168 patch35_0
+	169 patch35_1
+	170 patch35_2
+	171 patch35_3
+	172 patch35_4
+	173 patch35_5
+	174 patch35_6
+	175 patch35_7
+	176 patch36_0
+	177 patch36_1
+	178 patch36_2
+	179 patch36_3
+	180 patch36_4
+	181 patch36_5
+	182 patch36_6
+	183 patch36_7
+	184 patch37_0
+	185 patch37_1
+	186 patch37_2
+	187 patch37_3
+	188 patch37_4
+	189 patch37_5
+	190 patch37_6
+	191 patch37_7
+	192 patch38_0
+	193 patch38_1
+	194 patch38_2
+	195 patch38_3
+	196 patch38_4
+	197 patch38_5
+	198 patch38_6
+	199 patch38_7
+	200 patch39_0
+	201 patch39_1
+	202 patch39_2
+	203 patch39_3
+	204 patch39_4
+	205 patch39_5
+	206 patch39_6
+	207 patch39_7
+	208 patch3a_0
+	209 patch3a_1
+	210 patch3a_2
+	211 patch3a_3
+	212 patch3a_4
+	213 patch3a_5
+	214 patch3a_6
+	215 patch3a_7
+	216 patch3b_0
+	217 patch3b_1
+	218 patch3b_2
+	219 patch3b_3
+	220 patch3b_4
+	221 patch3b_5
+	222 patch3b_6
+	223 patch3b_7
+	224 patch3c_0
+	225 patch3c_1
+	226 patch3c_2
+	227 patch3c_3
+	228 patch3c_4
+	229 patch3c_5
+	230 patch3c_6
+	231 patch3c_7
+	232 patch3d_0
+	233 patch3d_1
+	234 patch3d_2
+	235 patch3d_3
+	236 patch3d_4
+	237 patch3d_5
+	238 patch3d_6
+	239 patch3d_7
+	240 patch3e_0
+	241 patch3e_1
+	242 patch3e_2
+	243 patch3e_3
+	244 patch3e_4
+	245 patch3e_5
+	246 patch3e_6
+	247 patch3e_7
+	248 patch3f_0
+	249 patch3f_1
+	250 patch3f_2
+	251 patch3f_3
+	252 patch3f_4
+	253 patch3f_5
+	254 patch3f_6
+	255 patch3f_7
+
+)
+(
+  0x8000 core_chipid
+  0x8003 core_kick
+  0x8005 core_lpm_wr
+  0x8006 core_misc_ctrl
+  0x8007 core_otp_rdata
+  0x8009 core_pcmoutfifo
+  0x8010 core_reset
+  0x8011 core_encrypt
+  0x8015 core_uart_txd
+  0x8022 core_ucode_hi
+  0x8023 core_ucode_ctrl
+  0x8024 core_ucode_low
+  0x8025 core_ucode_data
+  0x8040 core_halfslot
+  0x8042 core_clksel
+  0x8043 core_uart_clksel
+  0x8043 core_config 
+  0x8044 core_xtal_stable_time
+  0x8045 core_otp_addr
+  0x8046 core_otp_din
+  0x8047 core_otp_ctrl
+  0x8048 core_otpd_addr
+  0x804a core_otpd_len
+  0x804b core_otpd_ctrl
+  0x804c core_lpm_reg
+  0x804f core_lpm_isogate
+  0x8050 core_clkoff
+  0x8052 core_uart_baud
+  0x8054 core_uart_rsaddr
+  0x8056 core_uart_readdr
+  0x8058 core_uart_rrptr
+  0x805a core_uart_tsaddr
+  0x805c core_uart_teaddr
+  0x805e core_uart_twptr
+  0x8060 core_uart_trptrp
+  0x8062 core_uart_ctrl
+  0x8063 core_bist_ctrl
+  0x8064 core_pwm_pcnt3
+  0x8066 core_pwm_ncnt3 
+  0x8068 core_pwm_pcnt4
+  0x806a core_pwm_ncnt4
+  0x806c core_pwm_pcnt5
+  0x806e core_pwm_ncnt5
+  0x8070 core_gpio_oe0
+  0x8071 core_gpio_oe1
+  0x8072 core_gpio_oe2
+  0x8073 core_gpio_oe3
+  0x8074 core_gpio_out0
+  0x8075 core_gpio_out1
+  0x8076 core_gpio_out2
+  0x8077 core_gpio_out3
+  0x8078 core_gpio_pu0
+  0x8079 core_gpio_pu1
+  0x807a core_gpio_pu2
+  0x807b core_gpio_pu3
+  0x807c core_gpio_pd0
+  0x807d core_gpio_pd1
+  0x807e core_gpio_pd2
+  0x807f core_gpio_pd3
+  0x8080 core_gpio_sel
+  0x8081 core_gpio_sel1
+  0x8082 core_gpio_sel2
+  0x8083 core_gpio_key0
+  0x8084 core_gpio_key1
+  0x8085 core_gpio_key2
+  0x8086 core_spid_ctrl
+  0x8087 core_spid_delay
+  0x8088 core_spid_txlen
+  0x808a core_spid_txaddr
+  0x808c core_spid_rxaddr
+  0x808e core_spid_rxlen
+  0x8090 core_iicd_ctrl
+  0x8091 core_iicd_scl_low
+  0x8092 core_iicd_scl_high
+  0x8093 core_iicd_start_setup
+  0x8094 core_iicd_start_hold
+  0x8095 core_iicd_stop_setup
+  0x8096 core_iicd_data_setup
+  0x8097 core_iicd_data_hold
+  0x8098 core_iicd_txlen
+  0x809a core_iicd_txaddr
+  0x809c core_iicd_rxaddr
+  0x809e core_iicd_rxlen
+  0x80a0 core_pwm_pcnt0
+  0x80a2 core_pwm_ncnt0
+  0x80a4 core_pwm_pcnt1
+  0x80a6 core_pwm_ncnt1
+  0x80a8 core_pwm_pcnt2
+  0x80aa core_pwm_ncnt2
+  0x80b0 core_enc_ctrl
+  0x80b1 core_cvsd_ctrl
+  0x80b2 core_codec_ctrl
+  0x80b3 core_dec_ctrl
+
+
+
+
+  
+  0x8108 core_misc_status
+  0x8109 core_qdec_cntx
+  0x810a core_qdec_cnty
+  0x810b core_qdec_cntz
+  0x810c core_uart_status
+  0x810d core_uart_rbaud
+  0x810e core_uart_txitems
+  0x8110 core_uart_trptr
+  0x8112 core_uart_rxitems
+  0x8114 core_uart_rdptr
+  0x8116 core_uart_rwptr
+  0x8119 core_kscn_kstat
+  0x811a core_kscn_event
+  0x811b core_kscn_event_num
+  0x811c core_gpio_in
+  0x811d core_gpio_in1
+  0x8124 core_current_otp_addr
+  0x8126 core_otpd_remain
+  0x8128 core_spid_remain
+  0x812a core_iicd_remain
+  0x812c core_dma_status
+  0x812d core_perf_status
+  0x812e core_adc_in
+  0x8134 core_pcminfifo
+  0x8135 core_pcminfifo_remain
+  0x8136 core_pcmoutfifo_remain
+  0x8138 core_lpm_ctrl
+  0x813c core_lpm_xtalcnt
+  0x813d core_lpm_buckcnt
+  0x813e core_lpm_ldocnt
+  0x813f core_lpm_latch
+  0x8140 core_gpio_wakeup_low
+  0x8144 core_gpio_wakeup_high
+  0x8149 core_clk_counter
+  0x8150 core_adc_sum
+// dummy regs  
+
+  0x8203 core_ice_ctrl
+  0x8204 core_ice_status
+  0x8205 core_ice_break0
+  0x8207 core_ice_break1
+  
+  0x8280 core_docd_ctrl
+  0x8288 core_docd_paddr
+  0x828a core_docd_pdata
+
+  0x8300 iic_prer_low		
+  0x8301 iic_slave_addr	
+  0x8302 iic_ctr					
+  0x8303 iic_cr					
+  0x8304 iic_rxr					
+  0x8305 iic_txr					
+  0x8306 iic_sr					
+  0x8307 iic_fifo				
+
+  0x8400   mem_b_box          /* entire bank */
+  0x8500   mem_e_box          /* entire bank */
+  0x8600   mem_l_box          /* entire bank */
+
+  0x8700 memk
+
+  0x8900 rfen_rx
+  0x8901 rfen_tx
+  0x8902 rfen_mdm
+  0x8903 rfen_sn
+  0x8904 rfen_msc
+  0x8905 rfen_ck
+  0x8906 rfen_adc
+  0x890a  rf_iq_gain
+  0x890b  rf_agc_nsat
+  0x890f  rf_adc_goff
+  0x8912 rf_agc_ctrl
+  0x8914 rfen_ulp
+  0x8973 rfen_chgpump
+  0x894b rf_rx_vctrl_reg1
+  0x894c rf_rx_vctrl_reg2
+  0x894d rf_rx_ib_lna
+  0x894e rf_rx_lna_ctrim
+
+  0x8950 rf_bpf_ctrim
+  0x8951 rf_bpf_ib
+  0x8952 rf_adc_rccal
+  0x8952 rf_rccal_ctrl
+  0x8953 rf_rccal_sel
+  0x8955 rf_tx_pa_ib
+  0x8956 rf_tx_pa_gc
+  0x895f rf_pll_rstn
+  0x8964 rf_sdm_en
+  0x8960 rf_pll_intg
+  0x8961 rf_pll_frac
+  0x8963 rf_pll_frachi
+  0x896c rf_afc_cap
+  0x8967 rf_clkpll_bias
+  0x896f rf_clkpll_en
+  0x8968 rf_clkpll_int
+  0x8969 rf_clkpll_frac
+  0x896d rf_balun_ctrim
+  0x8971 rf_adc_mode
+  0x8972 rf_adc_gc
+  0x8973 rf_adc_ch
+  0x8980 rf_rccal_result
+  0x8981 rf_afc_d2a
+  0x8982 rf_rssi
+
+
+0x8a00 core_usb_config		
+0x8a01 core_usb_int_mask	
+0x8a04 core_usb_addr
+0x8a10 core_usb_trig	
+0x8a11 core_usb_stall		
+0x8a12 core_usb_clear		
+0x8a18 core_usb_ep
+0x8a18 core_usb_dfifo0 
+0x8a19 core_usb_dfifo1  
+0x8a1a core_usb_dfifo2 
+0x8a20 core_usb_ep_len
+0x8a26 core_usb_status		
+0x8a27 core_usb_fifo_empty
+0x8a28 core_usb_fifo_full
+
+
+4 rx_freq_offset
+1 tx_freq_offset
+
+/* bit difinitions */
+  4 whiteoff_bit
+  6 clksel_rc
+  5 clksel_dpll
+  4 clksel_xtal
+  5 adc_rccal
+  0 bpf_rccal
+  1 demod_clkoff
+
+(
+  2 reload_code
+  3 gpio_latch
+  4 enable_retmem
+  7 cold_wake
+  0xef isogate_mask
+  0xe0 cs_mask
+)
+
+// misc ctrl
+(
+  0x01 otpd_start
+  0x02 spid_start
+  0x04 iicd_start
+  0x08 lock_otp
+  0x10 x_sethi
+  0x20 y_sethi
+  0x40 z_sethi
+  0x80 ccnt_start
+)
+// dma status bit
+(
+  0 otpd_crcok
+  1 otpd_done
+  2 spid_crcok
+  3 spid_done
+  4 iicd_crcok
+  5 iicd_done
+  6 iicd_ack
+)
+
+0x8b uart_ctrl_default //BCSP
+0x81 uart_ctrl_h4 //H4
+0x81 uart_ctrl_normal
+0x91 uart_ctrl_5line
+0x81 uart_ctrl_57600
+2 uart_baud_len
+0x00 uartclk_crystal
+0x01 uartclk_dpll
+0x1a0 uart_baud_115200
+0xbb uart_baud_256000
+0x340 uart_baud_57600
+0x34 uart_baud_921600
+0x9c4 uart_baud_9600
+0x2dc6c00 uart_clk
+0x16E3600 uart_clk_24
+
+//core_clkoff
+(
+	0 CLOCK_OFF_AUTH_ROM
+	1 CLOCK_OFF_UC_ROM
+	2 CLOCK_OFF_DEBUG_UART
+	3 CLOCK_OFF_SCHED_RAM
+	4 CLOCK_OFF_TRANCE_FIFO
+	5 CLOCK_OFF_CORDIC
+	6 CLOCK_OFF_OTPD
+	7 CLOCK_OFF_I2C
+	8 CLICK_OFF_8051
+	9 CLOCK_OFF_KEYSCAN
+	0x0a CLOCK_OFF_USB
+	0x0b CLOCK_OFF_QDECODER
+	0x0c CLOCK_OFF_SPI
+	0x0d CLOCK_OFF_PWM
+	0x0e CLOCK_OFF_CODEC
+	0x0f CLOCK_OFF_UART
+)
+
+
+/*****************************************************************************/
+/* RCS HEADER -- DO NOT ERASE                                                */
+/* $Author: Administrator $                                                           */
+/* $Id: bt_rfcomm_format.upper,v 1.1 2009-09-28 04:06:17 Administrator Exp $ */
+/* Orisil Technology                                                      */
+/*****************************************************************************/
+
+/**********/
+/* memory */
+/**********/
+
+0x04ed memRemoteRPNBitRate
+0x04ee memRemotePRNDataBits
+0x04ef memRemotePRNStopBit
+0x04f0 memRemotePRNParity
+0x04f1 memRemotePRNFlowControl
+0x04f2 memRemotePRNXon
+0x04f3 memRemotePRNXoff
+0x04f4 mem_mod2div_temp
+0x04f7 mem_contw_temp
+0x04f9 mem_attrib_list
+0x04fb mem_current_adss
+0x04fc mem_current_channel
+0x04fd mem_current_frame_type
+0x04fe mem_current_fcs
+0x04ff mem_current_length
+0x0501 mem_rfcomm_uih_payload_ptr
+0x0503 mem_uih_cmd_type
+0x0504 mem_uih_length
+0x0506 mem_param_payload_ptr
+0x0508 mem_ms_param
+0x0509 mem_pn_credit_flow_type_info
+0x050a mem_pn_priority
+0x050b mem_pn_acknowledg_timer
+0x050c mem_pn_max_retrans
+0x050d mem_rfcomm_send_adss
+0x050e mem_rfcomm_send_frame_type
+0x050f mem_rfcomm_send_fcs
+0x0510 mem_rfcomm_send_offset
+
+
+
+(
+0 CREDIT_DISABLE
+1 CREDIT_ENABLE
+)
+
+
+/************************************************************************/
+  
+
+ 
+/************/
+/* constant */
+/************/
+
+/* RFCOMM state for Headset (memRFCOMM_State) */ 
+  (
+    0 RFCOMM_IDLE           /* before the responsor HS receive SABM            */
+    1 RFCOMM_W4_DLCI0_OPEN
+    2 RFCOMM_W4_DLCI0_CLOSE
+    3 RFCOMM_START_DLCI0    /* After respond SABM frame (DLCI=0)               */
+    4 RFCOMM_W4_DLCI_OPEN
+    5 RFCOMM_W4_DLCI_CLOSE
+    6 RFCOMM_DLCI_OPENED    
+   
+  )
+  
+/* RFCOMM timer constants   */
+  (
+    1000  RFCOMM_T1         /* Used by SABM and DISC frames,100*20ms = 20s     */     
+    1000  RFCOMM_T2         /* Used by commands send in UIH on DLCI0,          */
+    300   RFCOMM_T3_RINGON  /* 6s for ring fade time                           */
+  
+  )
+
+/* Command Type */
+  (
+    0x3F RSP_RX_SABM        /*responsor expect SABM from initiator             */
+    0x3F INI_TX_SABM
+	
+    0x73 RSP_TX_UA          /*responsor send out UA command                    */
+    0x73 UA_WFBIT_SET	    /* UA control field with F bit set                 */
+	
+    0xEF RSP_RX_UIH         /*responsor expect UIH from initiator              */
+
+    0xEF RSP_TX_UIH         /*responsor send UIH to initiator                  */
+     
+    0x1F RSP_TX_DM          /*responsor send DM to initiator                   */
+    0x1F DM_WFBIT_SET       /* DM control field with F bit set                 */
+    0x0F DM_WFBIT_CLEAR     /* DM control field with F bit clear               */
+
+    0x53 RSP_RX_DISC        /*responsor expect DISC from initiator             */
+    0x53 INI_TX_DISC	    /*initiator send DISC control type command         */
+     
+    0xFF RSP_RX_UIH_WDATA   /*UIH data with credit flow control info           */
+    
+    
+  )
+
+/* Multiplexor commands and responses frames */
+  (
+    0x83 PN_COMMAND           /* Bit 0 EA C/R Type = 000001         */
+    0x81 PN_RESPONSOR         /* Bit 0 EA C/R Type = 000001         */
+    
+    0xE3 MSC_COMMAND          /* Bit 0 EA C/R Type = 000111         */
+    0xE1 MSC_RESPONSOR
+ 
+    0x13 NSC_COMMAND          /* Bit 0 EA C/R Type = 001000         */
+    0x11 NSC_RESPONSOR        /* Bit 0 EA C/R Type = 001000         */
+
+    0x23 TEST_COMMAND         /* Bit 0 EA C/R Type = 000111         */
+    0x21 TEST_RESPONSOR 
+    
+    0x93 RPN_COMMAND          /* Bit 0 EA C/R Type = 001001         */
+    0x91 RPN_RESPONSOR 
+    
+    0x53 RLS_COMMAND          /* Bit 0 EA C/R Type = 001010         */
+    0x51 RLS_RESPONSOR 
+
+    0xA3 FCON_COMMAND         /* Bit 0 EA C/R Type = 000101         */
+    0xA1 FCON_RESPONSOR 
+    
+    0x63 FCOFF_COMMAND        /* Bit 0 EA C/R Type = 000110         */
+    0x61 FCOFF_RESPONSOR 
+    	
+    0x03 RLS_OVERRUN
+    0x05 RLS_PARITY_ERROR
+    0x09 RLS_FRAMING_ERROR
+  )
+
+/* memLocalCredit */
+  (
+    0x01 RFCOMM_CREDIT
+  )
+
+  (
+  	0x007f RFCOMM_MAX_FRAME_SIZE
+  )
+
+/* UIH received Data length */
+  (
+    0  LENGTH_ZERO
+    
+    6  LENGTH_OK
+    7  LENGTH_HOT
+    8  LENGTH_RING
+    9  LENGTH_ERROR
+    9  LENGTH_AGVOL_ONEBYTE
+    10 LENGTH_AGVOL_TWOBYTE
+    10 LENGTH_VOL_ONEBYTE
+    11 LENGTH_VOL_TWOBYTE
+    12 LENGTH_BRSF
+    13 LENGTH_PLUS_CIEV
+    15 LENGTH_INBANDRING
+    14 LENGTH_CIEV_CALL
+    17 LENGTH_CRING
+    20 LENGTH_BRSF_OK
+    24 LENGTH_CIND0
+    28 LENGTH_CIEV_TWO
+    32 LENGTH_CIND_OK
+    59 LENGTH_CIND_OK2
+    100 LENGTH_DISCARD
+  )
+  
+/************/
+/* flags    */
+/************/
+  
+/* memRFCOMM_L2CAP_Interface */
+  (
+    0 RFCOMM_TX_W4BUF_FLAG    /* Wait for Tx buffer empty flag */
+    1 RFCOMM_CLOSE_LINK_FLAG
+  )
+  
+
+    
+/* memRemoteMSC		*/
+  (
+    0 MSC_EA_BIT
+    1 MSC_FC_BIT
+    2 MSC_RTC_BIT
+    3 MSC_RTR_BIT
+    6 MSC_IC_BIT
+    7 MSC_DV_BIT
+  )
+
+/* memRemoteRLS         */
+  (
+    0x0C OVERRUN_ERROR
+    0x0A PARITY_ERROR
+    0x09 FRAMING_RERROR
+  )
+  
+/* memRemoteRPNBitRate  */
+  (
+    0x00 BITS2400
+    0x01 BITS4800
+    0x02 BITS7200
+    0x03 BITS9600
+    0x04 BITS19200
+    0x05 BITS38400
+    0x06 BITS57600
+    0x07 BITS115200
+    0x08 BITS230400
+  )
+  
+/* memRemotePRNDataBits	*/
+  (
+    0x00 DATABITS5
+    0x01 DATABITS6
+    0x02 DATABITS7
+    0x03 DATABITS8
+  )
+  
+/* memRemotePRNStopBit	*/
+  (
+    0    ONESTOP
+    1    ONEHALFSTOP
+  )
+  
+/* memRemotePRNParity   */
+  (
+    0    ODDPARITY
+    1    EVENPARITY
+    2    MARKPARITY
+    3    SPACEPARITY
+    
+    7    PARITY_ENABLE_BIT
+  )
+
+/* RPN bit mask(in)     */
+  (
+     0   BIT_RATE_MASK_BIT
+     1   DATA_BITS_MASK_BIT
+     2   STOP_BITS_MASK_BIT
+     3   PARITY_MASK_BIT
+     4   PARITY_TYPE_MASK_BIT
+     5   XON_CHAR_MASK_BIT
+     6   XOFF_CHAR_MASK_BIT
+  )
+  
+/* RPN bit mask(in) 2    */
+  (
+     0   XON_XOFF_INPUT_MASK_BIT
+     1   XON_XOFF_OUTPUT_MASK_BIT
+     2	 RTR_INPUT_MASK_BIT
+     3   RTR_OUTPUT_MASK_BIT
+     4   RTC_INPUT_MASK_BIT
+     5   RTC_OUTPUT_MASK_BIT
+
+  )
+
+/* memRFCOMM_Request	*/
+  (
+    0 SEND_MSC_CMD_REQ_FLAG
+    1 SEND_AT_CKPD_REQ_FLAG
+    2 SEND_RING_REQ_FLAG
+    3 SEND_SABM_CMD
+  )
+  
+/* memRFCOMM_Misc_Flag  */
+  (
+    0 MSC_CDM_ALREADY_SEND_FLAG
+    1 CREDIT_FLOW_USED_FLAG
+    2 DONT_EMBEDDED_CREDIT_FLAG 
+    3 MSC_EXCHANGE_DONE_FLAG
+    4 FLOW_CONTROL_FCOFF_BIT            /* set when receive FCoff, clear when FCon   */
+  )
+  
+/* memRemoteMSC		*/
+  (
+    1 FLOW_CONTROL_FC_BIT		/* received MSC FC bits                      */
+  
+  )
+/* Address filed        */
+  (
+    0 ADDR_EA_BIT
+    1 ADDR_CR_BIT
+    2 ADDR_D_BIT
+  )
+//should be same as descripted in SDP
+(
+    1 SPP_SLAVE_CHANNEL
+    7 OBEX_SERVER_CHANNEL
+    8 HF_SERVER_CHANNEL 
+    9 HS_SERVER_CHANNEL
+)
+/* memRFCOMM_Flag */
+(
+	0 USING_HF_PROFILE
+	1 USING_HS_PROFILE
+	2 USING_SPP_PROFILE
+)
+/*RFCOMM Frame Type*/
+(
+	0x3f RFCOMM_FRAME_TYPE_SABM
+	0x73 RFCOMM_FRAME_TYPE_UA
+	0xEF RFCOMM_FRAME_TYPE_UIH
+	0xFF RFCOMM_FRAME_TYPE_UIH_CREDITS
+	0x53 RFCOMM_FRAME_TYPE_DISCONN
+)
+/*RFCOMM UIH CMD TYPE*/
+(
+	0x41 UIH_PARAM_NEG_CMD
+	0x40 UIH_PARAM_NEG_RES
+	0x49 UIH_PARAM_CMD_REMOVE_PORT
+	0x71 UIH_MODEM_STATUS_CMD
+	0x70 UIH_MODEM_STATUS_RES
+)
+
+/*bits in rfcomm address*/
+(
+	0 RFCOMM_ADDRESS_EXT_LEN
+	1 RFCOMM_ADDRESS_CR
+	2 RFCOMM_ADDRESS_DERECTION
+
+
+)
+
+	(                                   
+	0 RFCOMM_CHANNEL_STATE_PN_CMD
+	1 RFCOMM_CHANNEL_STATE_PN_RES
+	2 RFCOMM_CHANNEL_STATE_SABM
+	3 RFCOMM_CHANNEL_STATE_UA
+	4 RFCOMM_CHANNEL_STATE_SND_MS_CMD
+	5 RFCOMM_CHANNEL_STATE_RCV_MS_CMD
+	6 RFCOMM_CHANNEL_STATE_SND_MS_RES
+	7 RFCOMM_CHANNEL_STATE_RCV_MS_RES
+	0xff RFCOMM_CHANNEL_SETUP_COMPLETE
+	) 
+
+	/*mem_rfcomm_send_more_pkt*/
+	(
+	1 MORE_PKT_MSC_CMD_HF
+	2 MORE_PKT_MSC_CMD_HS
+	3 MORE_PKT_MSC_CMD_SPP
+	4 MORE_PKT_MSC_CMD_OBEX
+	)
+
+	(
+	127 RFCOMM_MALLOC_SIZE
+	)
+0x0511 mem_sdp_mem_start
+0x0511 mem_sdp_uuid_search_ptr
+0x0519 mem_sdp_continue_byte
+0x051b mem_sdp_pduid
+0x051c mem_sdp_transactionid
+0x051e mem_sdp_transactionid_local
+0x0520 mem_sdp_attribute_maxbyte
+0x0522 mem_sdp_record_maxcnt
+0x0524 mem_sdp_record_handle
+0x0528 mem_sdp_LACAP_found
+0x0529 mem_sdp_RFCOMM_found
+0x052a mem_sdp_handle_list
+0x052a mem_sdp_attrib_list
+0x054a mem_sdp_error_code
+0x054c mem_sdp_all_length
+0x054e mem_handle_humber
+0x054f mem_search_uuid
+0x0551 mem_sdp_mem_end
+(
+0 AGORHS_SERVICE
+1 GENAUDIO_SERVICE
+2 HANDSFREE_SERVICE
+)
+(
+0 ATTRIBUTEID_0000
+1 ATTRIBUTEID_0001
+2 ATTRIBUTEID_0004
+3 ATTRIBUTEID_0009
+4 ATTRIBUTEID_0100
+5 ATTRIBUTEID_0302
+6 ATTRIBUTEID_0006
+7 ATTRIBUTEID_0311
+)
+
+(
+0x01 SDP_ERROR_RES
+0x02 SDP_SEARCH_REQ
+0x03 SDP_SEARCH_RES
+0x04 SDP_ATTRIBUTE_REQ
+0x05 SDP_ATTRIBUTE_RES
+0x06 SDP_SEARCHATTRIB_REQ
+0x07 SDP_SEARCHATTRIB_RES
+)
+0x2600 sdp_max_amount
+250 SDP_MALLOC_SIZE
+0x6e sdp_tid_spp //any number
+
+(
+0x1f11 SDP_UUID_HS_AUDIO_GATEWAY
+)
+
+(
+0X09 SDP_ATTRIBUTE_ID
+0x0a SDP_ATTRIBUTE_RANGE
+)
+
+(//mem_sdp_handle_list
+7 SDP_MAX_HANDLE_NUMBER
+)
+
+ 
+
+0x0551 mem_rxbuf
+0x0562 mem_random_number
+0x0572 mem_round_key
+0x0582 mem_kinit
+0x0592 mem_input_store
+0x05a2 mem_x
+0x05b2 mem_y
+0x05c1 mem_y15
+0x05c2 mem_key_store
+0x05d3 mem_key_store_end
+0x05d4 memp_ar_key
+0x05d6 memp_ar_input
+0x05d8 mem_ar_hround
+0x05e2 mem_ec_infinite
+0x05e3 mem_ec_loopc
+0x05e5 mem_aes_cmac_data_length
+0x05e6 memdat
+0x05e6 mem_ax
+0x05fe mem_ay
+0x0616 mem_az
+0x062e mem_bx
+0x0646 mem_ax_256//32 bytes
+0x0646 mem_by
+0x065e mem_bz
+0x0666 mem_ay_256// 32 bytes
+0x0676 mem_cx
+0x0686 mem_az_256// 32 bytes
+0x068e mem_cy
+0x06a5 mem_cy5
+0x06a6 mem_bx_256// 32 bytes
+0x06a6 mem_cz
+0x06be mem_k
+0x06c6 mem_by_256// 31 bytes
+0x06d6 mem_align
+0x06e6 mem_bz_256//32 bytes
+0x06e6 mem_tmp1
+0x06e6 memahbak
+0x06fe mem_tmp5
+0x0706 mem_cx_256//32 bytes
+0x0706 memahsave
+0x0716 mem_tmp2
+0x0726 mem_cy_256// 32 bytes
+0x0726 memahsave_end
+0x0726 mem_addr_padding
+0x0727 mem_addr_value/* 12 bytes     */ 
+0x072e mem_tmp3
+0x072e mem_t1
+0x0733 mem_addr_value_end
+0x0736 mem_addr_iocap_end
+0x0745 mem_cy5_256// 1 byte
+0x0746 mem_cz_256// 32 bytes
+0x0746 mem_tmp0
+0x0746 mem_t0
+0x074e mem_tmp0a
+0x075e mem_t2
+0x0766 mem_k_256//32 bytes
+0x0776 mem_t3
+0x0786 mem_tmp1_256//32 bytes
+0x078e mem_t7
+0x07a6 mem_tmp5_256
+0x07c6 mem_tmp2_256
+0x07e6 mem_tmp3_256
+0x07e6 mem_t1_256
+0x0806 mem_tmp0_256
+0x0806 mem_t0_256
+0x0826 mem_t2_256
+0x0846 mem_t3_256
+0x0866 mem_t7_256
+0x0886 mem_p
+0x089e mem_a
+0x08b6 mem_b
+0x08ce mem_gx
+0x08e6 mem_gy
+0x08fe memh0
+0x091e mem_p_256
+0x093e mem_a_256
+0x095e mem_gx_256
+0x097e mem_gy_256
+0x099e mem_le_slat
+
+
+/* simple pairing page */
+
+0x09ae mem_sp_state_start
+0x09ae mem_sp_state
+0x09af mem_master_sp_state
+0x09b0 mem_sp_flag
+0x09b1 mem_master_sp_flag
+0x09b2 mem_sp_calc
+0x09b3 mem_sp_dh_ready
+0x09b4 mem_sp_localsm
+0x09b5 mem_pairing_auth
+0x09b6 mem_sp_flag_start
+0x09b6 mem_sp_local_key_send_count
+0x09b7 mem_sp_remote_key_recv_count
+0x09b8 mem_sp_remote_key_invalid
+0x09b9 mem_sp_dhkey_invalid
+0x09ba mem_gkey
+0x09be mem_le_pubkey_remote_x_256
+0x09c6 mem_sp_pubkey_remote
+0x09c6 mem_sp_pubkey_remote_x
+0x09de mem_sp_pubkey_remote_x_end
+0x09de mem_le_pubkey_remote_y_256
+0x09e6 mem_sp_pubkey_remote_y
+0x09fe mem_le_dhkey_256
+0x0a06 mem_sp_dhkey
+0x0a1e mem_sp_dhkey_end
+0x0a1e mem_sp_random_local
+0x0a2e mem_sp_random_local_end
+0x0a2e mem_sp_random_remote
+0x0a3e mem_sp_random_remote_end
+0x0a3e memresult
+0x0a3e mem_sp_calc_result
+0x0a3e memh
+0x0a42 memg
+0x0a46 memf
+0x0a4a meme
+0x0a4e mem_sp_calc_result_high
+0x0a4e memd
+0x0a52 memc
+0x0a56 memb
+0x0a5a mema
+0x0a5e mem_sp_check_result
+0x0a6e mem_sp_confirm_remote
+0x0a7e mem_sp_prarm_stack
+
+/* simple pairing status flag */
+(
+  0x00   SP_FLAG_STANDBY
+  0x01   SP_FLAG_COMMIT
+  0x02   LE_SP_FLAG_COMMIT_256
+
+)
+
+/* simple pairing calc flag */
+(
+  0x00   SP_CALC_STANDBY
+  0x01   SP_CALC_PUBKEY
+  0x02   SP_CALC_DHKEY
+  0x03   SP_CALC_PUBKEY_256
+  0x04   SP_CALC_DHKEY_256
+)
+
+/* simple pairing state */
+(
+  0x00   SP_STAT_NULL
+  0x01   SP_STAT_KEY_RECV
+  0x02   SP_STAT_KEY_GENERATE
+  0x03   SP_STAT_KEY_SEND
+  0x04   SP_STAT_COMMIT_CALC
+  0x05   SP_STAT_COMMIT_SEND
+  0x06   SP_STAT_RANDOM_RECV
+  0x07   SP_STAT_RANDOM_SEND
+  0x08   SP_STAT_CONFIRM_RECV
+  0x09   SP_STAT_CONFIRM_CHECK
+  0x0A   SP_STAT_CONFIRM_CALC
+  0x0B   SP_STAT_CONFIRM_SEND
+  0x0C   SP_STAT_LINK_KEY_CALC
+  0x0F   SP_STAT_DONE
+  0x10   SP_STAT_FEATURE_EXT_SEND
+  0x11   SP_STAT_GKEY_CALC
+  /*simple pairing master only*/
+  0x12   SP_MASTER_STAT_START_SKIP
+  0x13   SP_MASTER_STAT_START_DONE
+  0x14   SP_STAT_COMMITMENT_COMPARE
+  0x15   SP_STATE_END
+)
+
+
+/* simple paring invalid flag */
+(
+  0x00   SP_KEY_INVALID
+  0x01   SP_KEY_VALID
+  0x03   SP_KEY_VALID_256
+
+)
+
+/* encapsulated defination for P-192 key */
+(
+  0x01  ENCAPSULATED_MAJOR_TYPE_P192
+  0x01  ENCAPSULATED_MINOR_TYPE_P192
+  0x30  ENCAPSULATED_LEN_P192
+)
+
+/* bluetooth 2.1 support flag */
+(
+  0x00  SIMPLE_PAIRING_ENABLE
+  0x01  ENCRYPTION_PAUSE_ENABLE
+  0x02  EXTENDED_INQUIRY_RESPOSE_ENABLE
+  0x03  SNIFF_SUBRATING_ENABLE
+)
+
+/*mem_sp_localsm*/
+(
+  0x00 DEFAULT_STATEMACHINE
+  0x01 LOCAL_STATEMACHINE
+)
+
+(
+ 0x00 DEFALT_PAIRING_AUTH
+ 0x01 PAIRING_AUTH
+)
+
+(
+1 SSP_MODE_SSP_PIN_FLAG
+2 SSP_MODE_PASSKEY_ENTRY_FLAG
+3 SSP_MODE_JUST_WORK_FLAG
+)
+
+(//ssp mode
+0x040003 SSP_MODE_JUST_WORK_IO_CAP_DATA
+0X040001 SSP_MODE_SSP_PIN_IO_CAP_DATA
+0X040002 SSP_MODE_PASSKEY_IO_CAP_DATA
+)
+
+(
+0x00 DISPLAY_ONLY
+0x01 DISPLAY_YESNO
+0x02 KEYBOARD_ONLY
+0x03 NO_INPUT_NO_OUTPUT
+)
+
+(
+7 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT
+6 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT
+0 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT
+)
+(
+1 FLAG_PAIRING_STATE_PAIRING
+0 FLAG_PAIRING_STATE_NOT_PAIRING
+)
+
+  
+/*****************************************************************************/
+/* RCS HEADER -- DO NOT ERASE                                                */
+/* $Author: Administrator $                                                           */
+/* $Id: bt_ui_format.upper,v 1.1 2009-09-28 04:06:17 Administrator Exp $     */
+/************************************************************************/
+
+
+	/* ========= memory ============== */
+0x0a8e mem_UI_data_txbuff_length
+0x0a90 mem_ipc_skip_continue_proc
+0x0a91 mem_ui_timer_temp//length 4
+0x0a91 mem_ipc_rega_temp
+
+/************/
+/* constant */
+/************/
+
+//mem_ui_state_map
+(
+0 UI_STATE_BT_CONNECTED
+1 UI_STATE_BT_SETUP_COMPLETE
+2 UI_STATE_BT_HID_CONN
+3 UI_STATE_BT_HID_HANDSHAKE
+4 UI_STATE_BT_SPP_CONN
+5 UI_STATE_BT_SNIFF
+6 UI_STATE_BT_DISCOVERY
+7 UI_STATE_BT_RECONNECT
+8 UI_STATE_BT_SLAVE_ROLE
+9 UI_STATE_BLE_CONNECTED
+10 UI_STATE_BLE_WRITE_RCV
+11 UI_STATE_BLE_ADV
+12 UI_STATE_BTN_DOWN
+)
+
+(
+1 UI_STATE_SPP_NL_AUTO_DISCOVER
+
+)
+
+/* UI state for Headset (memui_HS_State) */ 
+   (
+    0 UI_HEADSET_DISCONNECT
+    1 UI_HEADSET_IDLE                   /* before the responsor HS receive SABM      */
+    2 UI_HEADSET_W4CONNECT
+    3 UI_HEADSET_RINGING
+    4 UI_HEADSET_CONNECTED
+    5 UI_HEADSET_PARING
+  )
+/* memui_BB_State */
+(
+  0 UI_BB_OFF
+  1 UI_BB_IDLE
+  2 UI_BB_DISCOVERY
+  3 UI_BB_CONNECTED_ACTIVE_NO_SCO
+  4 UI_BB_CONNECTED_ACTIVE_WITH_SCO
+  5 UI_BB_CONNECTED_ACTIVE_WAIT_SNIFF
+  6 UI_BB_CONNECTED_SNIFF
+  7 UI_BB_RECONNECT
+  8 UI_BB_CONNECTED_SNIFF_WITH_SCO
+)
+
+/************/
+/* flags    */
+/************/
+  
+/* memui_Misc_Flags */
+  (
+    5 NO_IDLE_TURN_OFF
+    7 ANSWER_RING_FLAG               /* 1 Answer,0 no*/
+  )
+
+/* mem_UI_SCH_Interface */
+  (
+    0  UI_HS_PAIRING 
+    2  UI_REQ_CLOSE_RFCOMM
+    3  UI_LINK_LOST
+    4  UI_REQ_OPEN_SCO
+    6  UI_REQ_CLOSE_SCO
+  )
+  
+/* memui_PassOverKey */
+  (
+    0  ANSWER_RING_BIT
+    0  AG_SEND_RING_BIT
+    1  VOL_UP_BIT
+    2  VOL_DOWN_BIT
+    3  INI_CALL_BIT
+    4  DAIL_LAST_CALL
+    5  END_CALL_BIT
+    6  NOKIA_VOICE_ACTIVE 
+    7  REJECT_CALL_BIT
+  )
+  
+/* memui_reconnect_mode */
+(
+  0 NO_RECONNECTION
+  1 RECONNECT_HID
+  2 RECONNECT_HF
+  3 RECONNECT_HS
+  4 RECONNECT_HID_HF
+  5 RECONNECT_HID_HS
+)
+/* memui_Commands */
+(
+0 BT_CMD_STANDBY
+1 BT_CMD_START_DISCOVERY
+2 BT_CMD_STOP_DISCOVERY
+3 BT_CMD_RECONNECT
+4 BT_CMD_DISCONNECT
+5 BT_CMD_ENTER_SNIFF
+6 BT_CMD_EXIT_SNIFF
+7 BT_CMD_ENTER_SNIFF_SUBRATING
+8 BT_CMD_EXIT_SNIFF_SUBRATING
+9 BT_CMD_SNIFF_TEST
+10 BT_CMD_SET_PIN_CODE
+11 BT_CMD_START_INQUIRY
+12 BT_CMD_STOP_INQUIRY
+13 BT_CMD_START_ADV
+14 BT_CMD_STOP_ADV
+15 BT_CMD_START_DIRECT_ADV
+16 BT_CMD_STOP_DIRECT_ADV
+17 BT_CMD_LE_DISCONNECT
+18 BT_CMD_LE_UPDATE_CONN
+19 BT_CMD_LED_OFF
+20 BT_CMD_LED_ON
+21 BT_CMD_LED_BLINK
+22 BT_CMD_LE_START_CONN
+23 BT_CMD_LE_START_SCAN
+24 BT_CMD_LE_STOP_SCAN
+25 BT_CMD_ENTER_HIBERNATE
+27 BT_CMD_LE_SMP_SECURITY_REQUEST
+29 BT_CMD_ROLE_SWITCH
+30 BT_CMD_BB_RECONN_CANCEL
+31 BT_CMD_STORE_RECONN_INFO_LE
+32 BT_CMD_STORE_RECONN_INFO_BT
+33 BT_CMD_DHKEY_NOT_ACCEPT
+34 BT_CMD_START_24G
+35 BT_CMD_STOP_24G
+36 BT_CMD_PAIR_24G
+37 BT_CMD_STORE_RECONN_INFO
+)
+
+(
+0x00 BT_EVT_NULL
+0x01 BT_EVT_BB_CONNECTED
+0x02 BT_EVT_BB_DISCONNECTED
+0x03 BT_EVT_RECONN_STARTED
+0x04 BT_EVT_RECONN_FAILED
+0x05 BT_EVT_SETUP_COMPLETE
+0x06 BT_EVT_HID_CONNECTED
+0x07 BT_EVT_HID_DISCONNECTED
+0x08 BT_EVT_SPP_CONNECTED
+0x09 BT_EVT_SPP_DISCONNECTED
+0x0A BT_EVT_PINCODE_REQ
+0x0B BT_EVT_ENTER_SNIFF
+0x0C BT_EVT_EXIT_SNIFF
+0x0D BT_EVT_ENTER_SNIFF_SUB
+0x0E BT_EVT_EXIT_SNIFF_SUB
+0x0F BT_EVT_DISCOVERY_STOPED
+0x10 BT_EVT_BUTTON_LONG_PRESSED
+0x12 BT_EVT_HID_HANDSHAKE
+0X13 BT_EVT_RECONN_PAGE_TIMEOUT
+0x14 BT_EVT_LE_CONNECTED
+0X15 BT_EVT_LE_DISCONNECTED
+0x16 BT_EVT_ML2CAP_CONN_REFUSED
+0x17 BT_EVT_BUTTON_ENTER_HIBERNATE
+0x18 BT_EVT_LINKKEY_GENERATE
+0x19 BT_EVT_SWITCH_NOT_ACCEPT
+0x20 BT_EVT_SWITCH_ACCEPT
+0x21 BT_EVT_SNIFF_NOT_ACCEPT
+0x22 BT_EVT_SNIFF_ACCEPT
+0x23 BT_EVT_UNSNIFF_ACCEPT
+0x24 BT_EVT_UNSNIFF_NOT_ACCEPT
+0x25 BT_EVT_BUTTON_ADJUST_DPI
+0x26 BT_EVT_SEND_UNSNIFF_ACCEPT
+0x27 BT_EVT_VIRTUAL_CABLE_UNPLUG
+0x28 BT_EVT_LE_WRITE_REQUEST
+0x29 BT_EVT_LE_ENC_INFO
+0x2a BT_EVT_SWITCH_FAIL_MASTER
+0x2b BT_EVT_SWITCH_SUCCESS_MASTER
+0x2c BT_EVT_BUTTON_DOWN
+0x2d BT_EVT_BUTTON_UP
+0x2e BT_EVT_REMOTE_UNSNIFF
+0x30 BT_EVT_LE_PAIRING_FAIL
+0x31 BT_EVT_LE_PAIRING_SUCCESS
+0x32 BT_EVT_LE_START_ENC
+0X33 BT_EVT_LE_PAUSE_ENC
+0X34 BT_EVT_LE_TK_GENERATE
+0x35 BT_EVT_BT_GKEY_GENERATE
+0x36 BT_EVT_BT_GET_PASSKEY
+0x37 BT_EVT_BT_PAIRING_FAIL
+0x38 BT_EVT_BT_PAIRING_SUCCESS
+0x39 BT_EVT_24G_PAIRING_COMPLETE
+0x3a BT_EVT_24G_ATTEMPT_FAIL
+0x3b BT_EVT_LE_GKEY_GENERATE
+0x3c BT_EVT_24G_ATTEMPT_SUCCESS
+0x3d BT_EVT_STORE_NVRAM
+0x3e BT_EVT_LE_PAIRING_COMPLETE
+0x3F BT_EVT_LE_RECONNECT_COMPLETE
+0x40 BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP
+0x41 BT_EVT_LE_LTK_LOST
+)
+//switch
+(
+0 OFF
+1 ON
+)
+/* memui_mem_lock */
+(
+    0 MEM_UNLOCK
+    1 MEM_LOCK
+)
+/* memui_flag0 */
+(
+    0 UI_USER_DATA_FLAG
+    1 UI_WII_WAITING_SLEEP
+    2 UI_KEYBOARD_SNIFF_SKIP
+)
+/* mem_master_type */
+(
+    0 MTYPE_HID_DEFAULT
+    1 MTYPE_HID_SSP
+    2 MTYPE_SPP
+)
+
+	(	
+	0x01 RECIEVE_SDP_CONN_RES
+	0x02 RECIEVE_SDP_CFG_REQ
+	0x03 RECIEVE_SDP_CFG_RES
+	0x04 RECIEVE_RFCOMM_CONN_RES
+	0x05 RECIEVE_RFCOMM_CFG_REQ
+	0x06 RECIEVE_RFCOMM_CFG_RES
+	0x07 RECIEVE_HID_CTRL_CONN_RES
+	0x08 RECIEVE_HID_CTRL_CFG_REQ
+	0x09 RECIEVE_HID_CTRL_CFG_RES
+	0x0A RECIEVE_HID_INT_CONN_RES
+	0x0B RECIEVE_HID_INT_CFG_REQ
+	0x0C RECIEVE_HID_INT_CFG_RES
+	0x0D RECIEVE_AVCTP_CONN_RES
+	0x0E RECIEVE_AVCTP_CFG_REQ
+	0x0F RECIEVE_AVCTP_CFG_RES
+	0x10 RECIEVE_AVDTP_SIGNAL_CONN_RES
+	0x11 RECIEVE_AVDTP_SIGNAL_CFG_REQ
+	0x12 RECIEVE_AVDTP_SIGNAL_CFG_RES
+	0x13 RECIEVE_AVDTP_MEDIA_CONN_RES
+	0x14 RECIEVE_AVDTP_MEDIA_CFG_REQ
+	0x15 RECIEVE_AVDTP_MEDIA_CFG_RES
+	0x16 RECIEVE_SS_REASULT_HS                  
+	0x17 RECIEVE_SS_REASULT_HF                  
+	0x18 RECIEVE_SS_REASULT_AVTARG		          
+	0x19 RECIEVE_SS_REASULT_OBEX		            
+	0x1A RECIEVE_DLCI0_UA
+	0x1B RECIEVE_HS_PARAM_NEG_RES
+	0x1C RECIEVE_HS_UA
+	0x1D RECIEVE_HS_MODEM_STATUS_RES
+	0x1E RECIEVE_HS_MODEm_STATUS_CMD
+	0x1F RECIEVE_HF_PARAM_NEG_RES   
+	0x20 RECIEVE_HF_UA              
+	0x21 RECIEVE_HF_MODEM_STATUS_RES
+	0x22 RECIEVE_HF_MODEm_STATUS_CMD 
+	0x23 RECIEVE_OBEX_PARAM_NEG_RES     
+	0x24 RECIEVE_OBEX_UA              
+	0x25 RECIEVE_OBEX_MODEM_STATUS_RES
+	0x26 RECIEVE_OBEX_MODEm_STATUS_CMD    
+	0x27 RECIEVE_SPP_PARAM_NEG_RES   
+	0x28 RECIEVE_SPP_UA              
+	0x29 RECIEVE_SPP_MODEM_STATUS_RES
+	0x2A RECIEVE_SPP_MODEm_STATUS_CMD
+	0x2b RECIEVE_SDP_DISCONN_RES
+	)
+
+
+
+	(
+	0 UPPERSM_RP_IDLE
+	1 UPPERSM_RP_SDP_CONN
+	2 UPPERSM_RP_SDP_CONN_WAIT
+	3 UPPERSM_RP_SDP_CFG
+	4 UPPERSM_RP_SDP_CFG_WAIT
+	5 UPPERSM_RP_SS_AVTARG
+	6 UPPERSM_RP_SS_AVTARG_WAIT
+	7 UPPERSM_RP_SS_OBEX
+	8 UPPERSM_RP_SS_OBEX_WAIT
+	9 UPPERSM_RP_SDP_DISCONN
+	10 UPPERSM_RP_SDP_DISCONN_WAIT
+	11 UPPERSM_RP_AVDTP_CONN_WAIT
+	12 UPPERSM_RP_AVCTP_CONN
+	13 UPPERSM_RP_AVCTP_CONN_WAIT
+	14 UPPERSM_RP_AVCTP_CFG
+	15 UPPERSM_RP_AVCTP_CFG_WAIT
+	16 UPPERSM_RP_OBEX_CMD_PN
+	17 UPPERSM_RP_OBEX_CMD_PN_WAIT
+	18 UPPERSM_RP_OBEX_SABM
+	19 UPPERSM_RP_OBEX_SABM_WAIT
+	20 UPPERSM_RP_OBEX_CMD_MS
+	21 UPPERSM_RP_OBEX_CMD_MS_WAIT
+	)
+	(		/*mem_upper_sm_reconn*/
+	0 UPPERSM_RECONN_IDLE		
+	1 UPPERSM_RECONN_SDP_CONN		
+	2 UPPERSM_RECONN_SDP_CONN_WAIT		
+	3 UPPERSM_RECONN_SDP_CFG		
+	4 UPPERSM_RECONN_SDP_CFG_WAIT		
+	5 UPPERSM_RECONN_SS_HS
+	6 UPPERSM_RECONN_SS_HS_WAIT
+	7 UPPERSM_RECONN_SS_HF
+	8 UPPERSM_RECONN_SS_HF_WAIT
+	9 UPPERSM_RECONN_SS_AVTARG		
+	10 UPPERSM_RECONN_SS_AVTARG_WAIT		    
+	11 UPPERSM_RECONN_SS_OBEX		            
+	12 UPPERSM_RECONN_SS_OBEX_WAIT		      
+	13 UPPERSM_RECONN_SDP_DISCONN		        
+	14 UPPERSM_RECONN_SDP_DISCONN_WAIT      
+	15 UPPERSM_RECONN_HID_CTRL_CONN		      
+	16 UPPERSM_RECONN_HID_CTRL_CONN_WAIT		
+	17 UPPERSM_RECONN_HID_CTRL_CFG		      
+	18 UPPERSM_RECONN_HID_CTRL_CFG_WAIT     
+	19 UPPERSM_RECONN_HID_INT_CONN		      
+	20 UPPERSM_RECONN_HID_INT_CONN_WAIT		  
+	21 UPPERSM_RECONN_HID_INT_CFG		        
+	22 UPPERSM_RECONN_HID_INT_CFG_WAIT      
+	23 UPPERSM_RECONN_RFCOMM_CONN		        
+	24 UPPERSM_RECONN_RFCOMM_CONN_WAIT		  
+	25 UPPERSM_RECONN_RFCOMM_CFG		        
+	26 UPPERSM_RECONN_RFCOMM_CFG_WAIT       
+	27 UPPERSM_RECONN_RFCOMM_SABM		        
+	28 UPPERSM_RECONN_RFCOMM_SABM_WAIT		  
+	29 UPPERSM_RECONN_SPP_CMD_PN		        
+	30 UPPERSM_RECONN_SPP_CMD_PN_WAIT		    
+	31 UPPERSM_RECONN_SPP_SABM		          
+	32 UPPERSM_RECONN_SPP_SABM_WAIT		      
+	33 UPPERSM_RECONN_SPP_CMD_MS		        
+	34 UPPERSM_RECONN_SPP_CMD_MS_WAIT       
+	35 UPPERSM_RECONN_HF_CMD_PN		          
+	36 UPPERSM_RECONN_HF_CMD_PN_WAIT		    
+	37 UPPERSM_RECONN_HF_SABM		            
+	38 UPPERSM_RECONN_HF_SABM_WAIT		      
+	39 UPPERSM_RECONN_HF_CMD_MS		          
+	40 UPPERSM_RECONN_HF_CMD_MS_WAIT        
+	41 UPPERSM_RECONN_AVDTPs_CONN		        
+	42 UPPERSM_RECONN_AVDTPs_CONN_WAIT		  
+	43 UPPERSM_RECONN_AVDTPs_CFG		        
+	44 UPPERSM_RECONN_AVDTPs_CFG_WAIT       
+	45 UPPERSM_RECONN_AVDTPm_CONN		        
+	46 UPPERSM_RECONN_AVDTPm_CONN_WAIT		  
+	47 UPPERSM_RECONN_AVDTPm_CFG		        
+	48 UPPERSM_RECONN_AVDTPm_CFG_WAIT       
+	49 UPPERSM_RECONN_AVCTP_CONN		        
+	50 UPPERSM_RECONN_AVCTP_CONN_WAIT		    
+	51 UPPERSM_RECONN_AVCTP_CFG		          
+	52 UPPERSM_RECONN_AVCTP_CFG_WAIT		    
+	53 UPPERSM_RECONN_OBEX_CMD_PN		        
+	54 UPPERSM_RECONN_OBEX_CMD_PN_WAIT		  
+	55 UPPERSM_RECONN_OBEX_SABM		          
+	56 UPPERSM_RECONN_OBEX_SABM_WAIT		    
+	57 UPPERSM_RECONN_OBEX_CMD_MS		        
+	58 UPPERSM_RECONN_OBEX_CMD_MS_WAIT     
+	59 UPPERSM_RECONN_SS_SPP
+	60 UPPERSM_RECONN_SS_SPP_WAIT
+	)
+	(/*mem_UI_profile_supported*/
+	0 support_HID
+	1 support_A2DP
+	2 support_AVRCP
+	3 support_HF
+	4 support_HS
+	5 support_PBAP
+	6 support_SPP
+	)
+	/*mem_upper_sm_ss*/
+	(
+	0 UPPERSM_SS_HS
+	1 UPPERSM_SS_HF
+	2 UPPERSM_SS_AVTARG
+	3 UPPERSM_SS_OBEX
+	)
+
+	(
+	160 UI_HUNDRED_MILLISECOND_TIME
+	0XFF UI_BUTTON_GPIO_DISABLE
+	)
+	(
+	0x01 UI_BB_INCONNECT
+	0x10 UI_BB_DISCONNECT
+	)
+(
+0x00 UI_BUTTON_STATE_DOWN
+0x01 UI_BUTTON_STATE_UP
+)
+
+//mem_ipc_skip_continue_proc
+(
+	0 IPC_CONTINUE_PROCESS
+	1 IPC_SKIP_CONTINUE_PROCESS
+)
+
+
+(//led style struct 
+0 		LED_OFFSET_LED_TYPE
+1 		LED_OFFSET_BLINK_COUNT
+2		LED_OFFSET_LED_GPIO
+3		LED_OFFSET_ON_TIME
+5		LED_OFFSET_OFF_TIME
+7 		LED_OFFSET_CB_LEDON
+9		LED_OFFSET_CB_LEDOFF
+11		LED_OFFSET_LENGTH
+)
+
+(//LED state
+0 UI_LED_STATE_BLINK_STOP
+1 UI_LED_STATE_BLINK_START
+2 UI_LED_STATE_LIGHTING
+3 UI_LED_STATE_DARKING
+4 UI_LED_STATE_BLINK_LIGHTING
+5 UI_LED_STATE_BLINK_DARKING
+
+0xFF LED_INFINITE_FLASH_NUM
+
+)
+
+
+/**
+*  @file:bt_utility_format.upper
+*  @author: lei.zhu
+*  utility header file. inlcude timer
+*  Copyright:  (C)Hanlynn Technology    
+*/
+
+0x0a95 mem_hold_contr
+0x0a97 mem_hold_contw
+0x0a99 mem_fifo_temp
+0x0a9a mem_pdatatemp
+0x0aa2 mem_temp//8 bytes
+0x0aaa mem_timeup// 4 bytes
+0x0aae mem_rega//4 bytes
+0x0ab2 mem_regb//4 bytes
+0x0ab6 mem_regc//3 bytes
+0x0ab9 mem_contr//2 bytes
+0x0abb mem_contw//2 bytes
+0x0abd mem_wakup_from_power_flag
+0x0abe mem_saved_gpio_in
+0x0ac2 mem_shutter_random_mac_data_temp
+0x0ac2 mem_shutter_config_data_temp
+0x0ac2 mem_le_adv_channel_map_temp
+0x0ac2 mem_le_data_len_temp//1byte
+0x0ac2 mem_tx_fifo_map_temp
+0x0ac2 mem_rpn_dlci//1byte
+0x0ac2 mem_event_cmd_response_content//2byte
+0x0ac2 mem_le_prand//16byte
+0x0ac2 mem_AES_CMAC_k//16 bytes
+0x0ac2 mem_regext_index//1 bytes
+0x0ac2 mem_temp_block0
+0x0ac3 mem_le_data_temp//15bytes
+0x0ac3 mem_temp_block1
+0x0ad2 mem_le_aes_128//16byte
+0x0ad2 mem_regext//64 bytes
+0x0ad2 mem_AES_CMAC_k1//16 bytes
+0x0ad2 mem_temp_block2
+0x0ae2 mem_AES_CMAC_k2//16 bytes
+0x0ae2 mem_temp_block3
+0x0af2 mem_AES_CMAC_temp// 16 bytes
+0x0af2 mem_temp_block4
+0x0b02 mem_AES_CMAC_M_last// 16 bytes
+0x0b02 mem_module_uart_cmd
+0x0b03 mem_module_uart_opcode
+0x0b04 mem_module_uart_len
+0x0b05 mem_module_temp_nl_discard_packet
+0x0b06 mem_temp_block5
+0x0b12 mem_le_mackey//16 bytes
+0x0b12 mem_app_receive_temp
+0x0b12 mem_key_value_temp
+0x0b14 mem_key_value
+0x0b16 mem_key_value_temp1
+0x0b17 mem_key_value_temp2
+0x0b18 mem_key_value_temp3
+0x0b19 mem_key_value_temp4
+0x0b1a mem_key_value_temp5
+0x0b1b mem_key_value_temp6
+0x0b1c mem_temp_block6
+0x0b22 mem_usb_status
+0x0b23 mem_usb_fifo_empty
+0x0b24 mem_usb_read_len
+0x0b25 mem_usb_rxbuf
+0x0b65 mem_bufptr
+0x0b67 mem_remain
+0x0b68 mem_devicedesc
+0x0b7c mem_hidreportdesc_kb
+0x0b7e mem_hidreportdesc_m
+0x0b80 mem_confdesc
+0x0be4 mem_string0
+0x0be9 mem_string1
+0x0c07 mem_string2
+0x0c47 mem_string3
+0x0c65 mem_usb_zero_packet
+0x0c67 mem_usb_ones_packet
+0x0c69 mem_usb_two_packet
+0x0c6b mem_usb0_state
+0x0c6c mem_usb_offline_check_gpio
+0x0c6d mem_usb_tx_interval
+0x0c6e mem_usb_clear_mem_start
+0x0c6e mem_usb_setup
+0x0c6e mem_usb_setup_bmRequestType
+0x0c6f mem_usb_setup_bRequest
+0x0c70 mem_usb_setup_bValue
+0x0c71 mem_usb_setup_bValueH
+0x0c72 mem_usb_setup_wIndex
+0x0c74 mem_usb_setup_bLength
+0x0c75 mem_usb_setup_bLengthH
+0x0c76 mem_usb0_setup
+0x0cb6 mem_usb0_set_report_data
+0x0cf6 mem_usb0_get_report_data
+0x0d36 mem_usb_state
+0x0d37 mem_usb_tx_wait
+0x0d38 mem_usb_tx_enable
+0x0d39 mem_usb_remote_wakeup
+0x0d3a mem_usb_clear_remote_wakeup
+0x0d3b mem_usb_ep0_stall_status
+0x0d3c mem_usb_ep1_stall_status
+0x0d3d mem_usb_ep2_stall_status
+0x0d3e mem_usb_ep3_stall_status
+0x0d3f mem_dsc_info_data_pointer
+0x0d41 mem_dsc_info_len
+0x0d42 mem_usb0_data_ready_report
+0x0d43 mem_usb_tx_win_enable
+0x0d44 mem_usb_tx_mac_enable
+0x0d45 mem_usb_device_enumeration_endflag
+0x0d46 mem_usb_wakestate_onetime_flag
+0x0d47 mem_usb_mac_wakeup_trig
+0x0d48 mem_usb_set_high_addr_flag
+0x0d49 mem_usb_set_protocol_value
+0x0d4a mem_usb_set_protocol_status
+0x0d4b mem_usb_get_protocol_flag
+0x0d4c mem_usb_idle_flag
+0x0d4d mem_usb_idle_rate
+0x0d4e mem_usb_setup_bValue_temp
+0x0d50 mem_usb0_get_set_report
+0x0d51 mem_usb_ep1_data
+0x0d52 mem_usb_ep2_data
+0x0d53 mem_usb_clear_halt
+0x0d54 mem_usb_mouse_data
+0x0d64 mem_usb_kb_data
+0x0d74 mem_usb_kb_multikey
+0x0d84 mem_usb_kb_data_sta_data
+0x0d8c mem_usb_kb_data_last_data
+0x0d94 mem_usb_kb_multikey_sta_data
+0x0d97 mem_usb_kb_multikey_last_data
+0x0d9a mem_usb_kb_blank_data_enable
+0x0d9b mem_usb_kb_mul_blank_data_enable
+0x0d9c mem_usb_test_cnt
+0x0d9d mem_usb_clear_mem_end
+0x0d9d mem_usb_test_kb
+0x0d9e mem_rssi_noise_buffer
+0x0e9e mem_rssi_noise_dg_buffer
+0x0f9e mem_rssi_noise_ms_buffer
+0x109e mem_rssi_noise_kb_buffer
+0x119e mem_24g_common_temp
+0x11be mem_data_pre
+0x11c0 mem_data_current
+0x11c2 mem_data_sum
+
+
+(
+/*mem_util_timer_flag0_7*/
+    0   UTIL_TIMER_0_USED
+    1   UTIL_TIMER_1_USED
+    2   UTIL_TIMER_2_USED
+    3   UTIL_TIMER_3_USED
+    4   UTIL_TIMER_4_USED
+    5   UTIL_TIMER_5_USED
+    6   UTIL_TIMER_6_USED
+    7   UTIL_TIMER_7_USED
+/*mem_util_timer_flag8_15*/
+    0   UTIL_TIMER_8_USED
+    1   UTIL_TIMER_9_USED
+    2   UTIL_TIMER_10_USED
+    3   UTIL_TIMER_11_USED
+    4   UTIL_TIMER_12_USED
+    5   UTIL_TIMER_13_USED
+    6   UTIL_TIMER_14_USED
+    7   UTIL_TIMER_15_USED
+)
+
+//util fifo param
+(
+
+8 UTIL_FIFO_LEN
+-1 UTIL_FIFO_OFFSET
+)
+
+
+(
+	0xAA DEBUGLOG_HEAD
+	0x00 DEBUGLOG_TYPE
+	0x04 DEBUGLOG_LEN
+	0xBB DEBUGLOG_TAIL
+)
+
+(
+	0x1000 DEBUGLOG_DTYPE_CALLBACK
+	0x1001 DEBUGLOG_DTYPE_EVENT
+	0x1002 DEBUGLOG_DTYPE_CMD
+	0x1003 DEBUGLOG_DTYPE_STATUS
+	0x1004 DEBUGLOG_DTYPE_MISC
+	0x1005 DEBUGLOG_DTYPE_CONN_SM
+	0x1006 DEBUGLOG_DTYPE_UPPER_SM
+	0x1007 DEBUGLOG_DTYPE_PARSE_LMP
+	0x1008 DEBUGLOG_DTYPE_SEND_LMP
+)
+
+//DEBUGLOG_DTYPE_CALLBACK
+(
+	0x0000 CALLBACK_24G_DATA
+	0x0001 CALLBACK_LE_PROCESS
+	0x0002 CALLBACK_BT_PROCESS
+	0x0003 CALLBACK_BEFORE_LPM
+	0x0004 CALLBACK_BB_EVENT_PROCESS
+	0x0005 CALLBACK_IDLE_PROCESS
+	0x0006 CALLBACK_BEFORE_HIBERNATE
+	0x0007 CALLBACK_ATT_WRITE
+	0x0008 CALLBACK_EVENT_TIMER
+)
+
+//DEBUGLOG_DTYPE_EVENT
+//(
+
+//)
+
+//DEBUGLOG_DTYPE_CMD
+//(
+
+//)
+
+//DEBUGLOG_DTYPE_STATUS
+(
+	0x0000 STATUS_CODE_WAKE
+	0x0001 STATUS_LPM_WAKE
+	0x0004 STATUS_24G_START 
+)
+//DEBUG_DTYPE_MISC
+(
+	0x0000 MISC_LE_RETRANSMIT
+	0x0001 MISC_LOST_MOUSEDATA
+	0x0002 MISC_TXPOWER_0
+	0x0003 MISC_TXPOWER_1
+	0x0004 MISC_TXPOWER_2
+	0x0006 MISC_PULL_MOUSEDATA
+	0x0007 MISC_PUSH_MOUSEDATA
+	0x0008 MISC_LE_RETRANSMIT_MD
+
+
+)
+
+
+/************************************************************************/
+/* RCS HEADER -- DO NOT ERASE                                           */
+/* $Author: Administrator $                                                     */
+/* $Id: bt_var.osi,v 1.1 2009-09-28 04:06:18 Administrator Exp $   */
+/* Orisil Technology                                                 */
+/************************************************************************/
+
+
+/* packet types */
+(
+  0x02 FHS_PACKET 
+  0x03 DM1_PACKET 
+  0x03 DM1_LMP_PACKET 
+  0x04 DH1_PACKET 
+  0x05 HV1_PACKET 
+  0x06 HV2_PACKET 
+  0x07 HV3_PACKET 
+  0x08 DV_PACKET 
+  0x09 AUX1_PACKET 
+  0x0a DM3_PACKET 
+  0x0b DH3_PACKET 
+  0x0e DM5_PACKET 
+  0x0f DH5_PACKET 
+)
+
+
+/* mem_lmp_respond */
+(
+  0 RESPOND_TO_ALL
+  1 PASS_EVERYTHING
+  2 PASS_ONLY_UNKNOWNS
+  3 RESPOND_TO_LMPS
+)
+/* SCO algorithm defines */
+(
+  0 ULAW
+  1 ALAW
+  2 CVSD
+)
+/* encryption modes */
+(
+  0 NO_ENCRYPTION
+  1 PT_PT_ENCRYPTION
+  2 PT_BROADCAST_ENCRYPTION
+)
+
+/* bits used in mem_lmp_state1 variable */
+(
+  0 LMP_STATE_DETACH
+  1 LMP_STATE_HOLD
+  2 LMP_STATE_SNIFF
+  3 LMP_STATE_PARK
+  4 LMP_STATE_WAIT_SCO_CREATE
+  5 LMP_STATE_WAIT_SCO_KILL
+  6 LMP_STATE_SCO3
+  7 LMP_STATE_WAIT_SCO_START
+)
+/* mem_lmp_state2 */
+(
+  0 LMP_WAIT_FOR_SNIFF_ACCEPT
+  1 LMP_WAIT_FOR_PARK_ACCEPT
+  2 LMP_SEND_UNPARK_ACCEPTED
+  3 LMP_SEND_ENCRYPTION_START
+  4 LMP_SEND_ENCRYPTION_STOP
+  5 MESSAGE_QUEUE
+  7 LMP_STATE_WAIT_BEACON
+)
+/* mem_lmp_state3 */
+(
+ 0 INQUIRY_STATE_CHECK
+ 1 HOST_DELAY_MESSAGE
+ 2 VARIABLE_DELAY
+ 3 TEST_MODE_START_LOOPBACK
+ 4 TEST_MODE_START_PATTERN
+ 5 PARSE_TEST_CONTROL_MESSAGE
+ 6 H_AUTH_SEND_COMB_KEY
+)
+/* mem_rx_status */
+(
+  0 FROM_MASTER
+)
+/* mem_ms_flag */
+(
+  0 MS_RECEIVE_SWITCH_REQ
+  1 MS_SEND_SETUP_COMPLATE
+)
+/* mem_conn_sm */
+(
+  0 CONN_SM_STANDBY
+  1 CONN_SM_WAIT_PAGE
+  2 CONN_SM_SEND_FEATURES
+  3 CONN_SM_WAIT_FEATURES_RES
+  4 CONN_SM_SEND_CONN_REQ
+  5 CONN_SM_WAIT_CONN_ACCEPT
+  6 CONN_SM_AUTH_PAIR
+  7 CONN_SM_AUTH_PAIR_WAIT
+  8 CONN_SM_WAIT_MUTAL_AUTH
+  9 CONN_SM_ENCRYPT
+  0xa CONN_SM_ENCRYPT_WAIT
+  0xb CONN_SM_ENCRYPT_WAIT_CLEAR
+  0xc CONN_SM_SEND_SETUP_COMPLETE
+  0xd CONN_SM_WAIT_SETUP_COMPLETE 
+  0xe CONN_SM_SEND_SWITCH
+  0xf CONN_SM_DETACH_DELAY
+  0x10 CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION
+  0x11 CONN_SM_DELAY_RESTART_CONNECTION
+  0x12 CONN_SM_SEND_VERSION
+  0X13 CONN_SM_WAIT_VERSION
+  0x14 CONN_SM_SEND_FEATURES_EXT
+  0x15 CONN_SM_WAIT_FEATURES_EXT
+  0x16 CONN_SM_PAIRING
+  0x17 CONN_SM_AUTH
+  0x18 CONN_SM_PAIRING_WAIT
+  0x19 CONN_SM_AUTH_WAIT
+  0x1a CONN_SM_DONE
+  0x1b CONN_SM_WAIT_DONE
+)
+
+/* btStateConn1 */
+(
+  0 CONN_STANDBY
+  1 CONN_MASTER_SEND_CONN_REQ
+  2 CONN_MASTER_WAIT_FOR_CONN_ACCEPTED
+  3 CONN_MASTER_AUTH
+  4 CONN_MASTER_WAIT_FOR_FEATURES
+  5 CONN_MASTER_WAIT_FOR_SETUP_COMPLETE
+  6 CONN_MASTER_WAIT_FOR_MAX_SLOT
+  7 CONN_SLAVE_CONN_REQUESTED
+  8 CONN_SLAVE_WAIT_FOR_SETUP_COMPLETE
+  9 CONN_SLAVE_AUTH
+  10 CONN_USING_HOST_OPCODE
+  11 CONN_SLAVE_AUTH_WAIT
+  12 CONN_SLAVE_ENCRYPT_WAIT
+)
+
+/* mem_lmp_conn_state */
+(
+  0 RECEIVED_CONN_REQ
+  1 SENT_CONN_REQ
+  2 RECEIVED_SETUP_COMPLETE
+  3 SENT_SETUP_COMPLETE
+  4 HOST_CONNECTION_MADE
+  6 INIT_COMPLETE
+  7 SNIFF_NEGOTIATE
+)
+/* btStateAuth1 */
+(
+  0 WAIT_FOR_KINIT
+  1 WAIT_FOR_LKA
+  2 WAIT_FOR_LKB
+  3 WAIT_FOR_SRES
+  4 EXAMINE_RECEIVED_SRES
+  5 SEND_AU_RAND
+  6 WAIT_FOR_KC
+  7 DELAYED_ENCRYPT_RESPONSE
+)
+/* btStateAuth2 */
+(
+  0 SENT_SRES
+  1 RECEIVED_IN_RAND
+  2 SENT_AU_RAND
+  3 AUTHENTICATION_FAILED
+  4 AUTHENTICATION_PASSED
+  5 STARTED_AUTH
+  6 SENT_COMB_KEY
+  7 SENT_IN_RAND
+)
+/* btStateAuth3 */
+(
+  0 RECEIVED_AU_RAND
+  1 RECEIVED_SRES
+  2 MUTUALLY_AUTHENTICATE
+)
+/* btStateHost */
+(
+  0 H_AUTH_STARTED
+  2 H_ENCRYPTION_MODE_REQ_PT
+  3 H_ENCRYPTION_KEY_SIZE
+  4 H_ENCRYPTION_START
+  5 H_ENCRYPTION_STOP
+  6 H_AUTH_SECOND_TRY
+)
+/* btStateEncrypt2 */
+(
+  0 RECEIVED_ENCRYPT_MODE_REQ_PT
+  1 RECEIVED_ENCRYPT_KEY_SIZE
+  2 RECEIVED_ENCRYPT_START
+  3 RECEIVED_ENCRYPT_STOP
+  4 STARTED_ENCRYPT_START
+)
+/* mem_ms_state */
+(
+  0x00 MS_STANDBY
+  0x11 M_MINIT_1
+  0x12 M_MINIT_2
+  0x20 M_SINIT_0
+  0x30 S_MINIT_0
+  0x31 S_MINIT_1
+  0x32 S_MINIT_2
+  0x41 S_SINIT_1
+  0x42 S_SINIT_2
+  0x43 S_SINIT_3
+)
+/* mem_test_mode */
+(
+  0 TEST_MODE_ALLOWED
+  1 TEST_MODE_ACTIVE
+)
+/* values for mem_tester_emulate */
+(
+  0x00 NO_TEST_MODE
+  0x00 CONTINUOUS_TRANSMIT
+  0x10 TRANSMIT_TEST
+  0x08 LOOPBACK
+)
+
+/* mem_tx_misc */
+(
+  1 SEND_TX_ADDR
+)
+/* BBHWREG_page_stat */
+(
+  5 PAGE_MODE_END
+)
+/* host_return_parameters_status codes */
+(
+  0x00 HOST_RETURN_SUCCESS
+  0x01 HOST_RETURN_SLAVE_CANT_ISSUE
+  0x02 HOST_RETURN_NO_CONNECTION
+  0x04 HOST_RETURN_PAGE_TIMEOUT
+  0x05 HOST_RETURN_INQUIRY_TIMEOUT
+  0x08 HOST_RETURN_CONNECTION_TIMEOUT
+  0x09 HOST_RETURN_MAX_NUM_CONNECTIONS
+  0x0a HOST_RETURN_MAX_NUM_SCO
+  0x0b HOST_RETURN_MAX_NUM_ACL
+  0x0c HOST_RETURN_SECURITY_REASONS
+  0x10 HOST_RETURN_HOST_TIMEOUT
+  0x11 HOST_RETURN_UNSUPPORTED_FEATURE_PARAMETER
+  0x13 HOST_RETURN_OTHER_END_USER
+  0x14 HOST_RETURN_OTHER_END_LOW_RESOURCE
+  0x15 HOST_RETURN_OTHER_END_POWER_OFF
+  0x16 HOST_RETURN_LOCAL_HOST
+  0x18 HOST_RETURN_PAIRING_NOT_ALLOWED
+  0x19 HOST_RETURN_UNKNOWN_PDU
+  0x1a HOST_RETURN_UNSUPPORTED_REMOTE_FEATURE
+  0x1d HOST_RETURN_SCO_AIR_MODE_REJECTED
+  0x20 HOST_RETURN_UNSUPPORTED_LMP_VALUE
+  0x21 HOST_RETURN_AUTHENTICATION_FAILURE
+  0x22 HOST_RETURN_CHANGED_EXISTING_SCO
+  0x23 HOST_RETURN_HOST_REJECTED
+  0x24 HOST_RETURN_UNSPECIFIED_ERROR
+  0x25 HOST_RESET
+  0x26 HOST_RETURN_BAD_HANDLE
+
+  0x00 HOST_RETURN_ACCEPT_COMMAND
+  0x01 HOST_RETURN_REJECT_COMMAND
+)
+/* host_present */
+(
+  0 HOST_IS_PRESENT
+  1 BCI_IS_PRESENT
+  2 DONT_INIT_RADIO
+)
+/* mem_master_state */
+(
+  0 MASTER_STATE_STANDBY
+  1 MASTER_INQUIRY
+)
+/* misc */
+(
+  92 SECOND_SWITCH_REQ
+  93 SLAVE_DELAY_DETACH
+  94 MASTER_DELAY_DETACH
+  95 UNSNIFF_DELAY_DETACH
+  0 WE_STARTED_AS_MASTER
+  1 WE_STARTED_AS_SLAVE
+)
+/* mem_host_commands */
+(
+  0x01 HOST_INQUIRY
+  0x02 HOST_INQUIRY_CANCEL
+  0x03 HOST_CREATE_CONNECTION
+  0x04 HOST_DISCONNECT_CONNECTION
+  0x05 HOST_ADD_SCO_REQUEST
+  0x06 HOST_REMOTE_NAME_REQUEST
+  0x07 HOST_WRITE_SUPPORTED_FEATURES
+  0x08 HOST_SET_TX_LEVEL
+  0x09 HOST_SET_RX_LEVEL
+  0x0a HOST_SNIFF_REQUEST
+  0x0b HOST_UNSNIFF_REQUEST
+  0x0c HOST_WRITE_LINK_SUPERVISION_TIMEOUT
+  0x0e HOST_WRITE_SCAN_ENABLE
+  0x0f HOST_READ_AUDIO_QUALITY
+  0x10 HOST_ENABLE_DEVICE_UNDER_TEST
+  0x14 HOST_BUTTON_CONFIGURE
+  0x15 HOST_SET_LOW_BATTERY_LEVEL
+  0x16 HOST_WRITE_LOCAL_NAME
+  0x17 HOST_WRITE_LOCAL_PIN
+  0x18 HOST_KILL_SCO_REQUEST
+  0x19 HOST_QOS_REQ
+
+  0x1a HOST_FEATURES_REQUEST
+  0x1b HOST_VERSION_REQUEST
+  0x1c HOST_TIMING_REQUEST
+  0x1d HOST_CLK_OFFSET_REQUEST
+  0x1e HOST_AUTHENTICATE
+  0x1f HOST_START_ENCRYPTION
+  0x20 HOST_STOP_ENCRYPTION
+  0x21 HOST_HOLD_REQUEST
+  0x22 HOST_HOLD_FORCE
+  0x23 HOST_PARK_REQUEST
+  0x24 HOST_MOD_BEACON
+  0x25 HOST_SET_BROADCAST_SCAN_WINDOW
+  0x26 HOST_UNPARK_PM_REQUEST
+  0x27 HOST_UNPARK_BD_REQUEST
+  0x28 HOST_SLAVE_REQUEST_UNPARK
+  0x29 HOST_DECREASE_POWER_REQUEST
+  0x2a HOST_INCREASE_POWER_REQUEST
+  0x2b HOST_SEND_PREFERRED_RATE
+  0x2c HOST_MAX_SLOT_REQ
+  0x2d HOST_MAX_SLOT_FORCE
+  0x2e HOST_PAGE_MODE_REQUEST
+  0x2f HOST_PAGE_SCAN_MODE_REQUEST
+  0x30 HOST_MASTER_SLAVE_SWITCH
+  0x31 HOST_SEND_AUTO_RATE
+  0x32 HOST_PAGE_CANCEL
+  0x33 HOST_CHANGE_LINK_KEY
+  0x34 HOST_RADIO_READ
+  0x35 HOST_RADIO_WRITE
+  0x36 HOST_REMOTE_SLAVE_INIT_UNPARK_REQUESTED
+
+  0x40 HOST_REMOTE_CONNECTION_REQUESTED
+  0x41 HOST_REMOTE_DETACH
+  0x42 HOST_REMOTE_SCO_CREATE_REQUESTED
+  0x43 HOST_REMOTE_SCO_KILL_REQUESTED
+  0x44 HOST_REMOTE_PARK_REQUESTED
+  0x45 HOST_REMOTE_UNPARK_REQUESTED
+  0x46 HOST_REMOTE_SNIFF_REQUESTED
+  0x47 HOST_REMOTE_UNSNIFF_REQUESTED
+  0x48 HOST_REMOTE_HOLD_REQUESTED
+  0x49 HOST_REMOTE_AUTHENTICATION
+  0x4a HOST_REMOTE_START_ENCRYPTION_REQUESTED
+  0x4b HOST_REMOTE_STOP_ENCRYPTION_REQUESTED
+  0x4c HOST_MODE_CHANGE_EVENT
+  0x4d HOST_REMOTE_TEST_ACTIVATE
+  0x4e HOST_REMOTE_TEST_CONTROL
+  0x4f HOST_REMOTE_TIMING_REQUEST
+)
+/* BCI interface (not used if not compiled in ) */
+(
+  0x01 BCI_INQUIRY
+  0x02 BCI_INQUIRY_CANCEL
+  0x03 BCI_CREATE_CONNECTION
+  0x04 BCI_DISCONNECT
+  0x05 BCI_ADD_SCO_CONNECTION
+  0x06 BCI_REMOTE_NAME_REQUEST
+  0x07 BCI_WRITE_SUPPORTED_FEATURES
+  0x08 BCI_SET_TX_POWER_LEVEL
+  0x09 BCI_SET_RX_POWER_LEVEL
+  0x0a BCI_SNIFF_MODE
+  0x0b BCI_EXIT_SNIFF_MODE
+  0x0c BCI_WRITE_LINK_SUPERVISION_TIMEOUT
+  0x0d BCI_WRITE_PAGE_TIMEOUT
+  0x0e BCI_WRITE_SCAN_ENABLE
+  0x0f BCI_GET_AUDIO_QUALITY
+  0x10 BCI_ENABLE_DEVICE_UNDER_TEST
+  0x11 BCI_SEND_DATA
+  0x12 BCI_REGISTER_SERVICE_RECORD
+  0x13 BCI_SERVICE_SEARCH_ATTRIB_REQ
+  0x14 BCI_BUTTON_CONFIGURE
+  0x15 BCI_SET_LOW_BATTERY_LEVEL
+  0x16 BCI_WRITE_LOCAL_NAME
+  0x17 BCI_WRITE_LOCAL_PIN
+  0x18 BCI_REMOVE_SCO_CONNECTION
+  0x19 BCI_QUALITY_OF_SERVICE
+  0x40 BCI_REMOTE_CONNECTION_REQUEST
+  0x41 BCI_REMOTE_DETACH
+  0x42 BCI_REMOTE_ADD_SCO_REQUEST
+  0x43 BCI_REMOTE_REMOVE_SCO_REQUEST
+  0x44 BCI_REMOTE_PARK_REQUEST
+  0x45 BCI_REMOTE_UNPARK_REQUEST
+  0x46 BCI_REMOTE_SNIFF_REQUEST
+  0x47 BCI_REMOTE_UNSNIFF_REQUEST
+  0x48 BCI_REMOTE_HOLD_REQUEST
+  0x49 BCI_REMOTE_AUTHENTICATION_PAIRING_REQUEST
+  0x4a BCI_REMOTE_START_ENCRYPTION_REQUEST
+  0x4b BCI_REMOTE_STOP_ENCRYPTION_REQUEST
+  0x4c BCI_MODE_CHANGE_EVENT
+)
+/* mode changes */
+(
+  0 MODE_CHANGE_ACTIVE
+  1 MODE_CHANGE_SNIFFING
+  2 MODE_CHANGE_PARKED
+  3 MODE_CHANGE_HOLDING
+  4 MODE_CHANGE_SCO_ADDED
+  5 MODE_CHANGE_SCO_REMOVED
+  6 MODE_CHANGE_ACL_CONNECTION
+  7 MODE_CHANGE_DISCONNECT
+  8 MODE_CHANGE_SCO_CHANGED
+  9 MODE_CHANGE_ENCRYPTING
+  10 MODE_CHANGE_NOT_ENCRYPTING
+  11 MODE_CHANGE_BUTTON_UP
+  12 MODE_CHANGE_BUTTON_DOWN
+  13 MODE_CHANGE_BATTERY_LOW
+  14 MODE_CHANGE_RESET
+  15 MODE_CHANGE_INQUIRY_CANCELED_RMTCMD
+  16 MODE_ACTIVE_MSSWITCH_PASSED
+  17 MODE_ACTIVE_MSSWITCH_FAILED
+)
+/* mem_battery - low nibble is level information, upper nibble is status info */
+(
+  6 BATTERY_CHECK_LEVEL
+  7 BATTERY_SENT_STATUS
+)
+/* mem_radio_version */
+(
+  0x02 RADIO_2001
+  0x12 RADIO_2002
+  0x32 RADIO_2002_DDM
+  0x42 RADIO_1008A1
+  0x52 RADIO_1018A0
+)
+/* mem_slave_initiated_conn */
+(
+  0 SLAVE_INIT_AUTHENTICATION
+  1 SLAVE_INIT_ENCRYPTION
+  2 SLAVE_INIT_MASTER_SLAVE_SWITCH
+)
+/* connection_options */
+(
+  0 CONNECTION_AUTH
+  1 CONNECTION_ENCRYPT
+  2 CONNECTION_SWITCH
+  3 CONNECTION_ACL
+  4 CONNECTION_FEATURE_EXT
+)
+/* mem_debug_config */
+(
+  7 AA_INSERTION
+)
+
+
+/* Parse Command:
+TX: take bits from tx fifo, jam it into shift and a destination (rf,bucket)
+RX: take bits from demod,  jam it into shift and a destination (acl,sco,bucket) */
+
+/* Inject Command:
+TX: 0 into shift, send tail of shift into a destination (rf,bucket)
+RX: 0 into shift, send tail of shift into a destination (acl,sco,bucket) */
+
+format
+  ! 15 romdat
+  % d0
+  % d1
+  % d2
+  % d3
+  [8] d0
+  [8] d1
+  [8] d2
+  [8] d3
+end
+
+format
+  ! 15 enable   /* set flag to 1 */
+  % flag
+  [5] opcode
+  [6] 1
+  [6] flag
+  [6] null
+  [9] 0
+end
+ /* High 5 bytes of channel map */
+format
+  ! 15 pulse   /* set flag to 1 */
+  % flag
+  [5] opcode
+  [6] 1
+  [6] flag
+  [6] null
+  [9] 0
+end
+
+format
+  ! 15 disable   /* set flag to 0 */
+  % flag
+  [5] opcode
+  [6] 2
+  [6] flag
+  [6] null
+  [9] 0
+end
+
+format
+  ! 15 set0  /* set selected bit of reg to 0 */
+  % immediate
+  % reg
+  [5] opcode
+  [6] 9
+  [6] never
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 15 set1  /* set selected bit of reg to 1 */
+  % immediate
+  % reg
+  [5] opcode
+  [6] 9          /* alu op demux */
+  [6] always
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 15 setflag  /* set selected bit of the reg to the polarity of the flag */
+  % flag
+  % immediate
+  % reg
+  [5] opcode
+  [6] 9
+  [6] flag
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 15 nsetflag  /* set the selected bit of the reg to the opposite polarity of the flag */
+  % flag
+  % immediate
+  % reg
+  [5] opcode
+  [6] 0x29
+  [6] flag
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 15 setflip    /* invert the selected bit of the reg */
+  % immediate
+  % reg
+  [5] opcode
+  [6] 10            /* this is alu op */
+  [6] always
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 0x1f qset1      /* demux the lowest 4 bit of queue and OR it with regr into regw */
+  % reg             /* in short, set the bit in reg indexed by queue to 1 */
+  [5] opcode
+  [6] 9
+  [6] always
+  [6] reg
+  [9] 0
+end
+  
+format
+  ! 0x1f qset0      /* demux the lowest 4 bit of queue and AND it with regr into regw */
+  % reg             /* in short, set the bit in reg indexed by queue to 0 */
+  [5] opcode
+  [6] 9
+  [6] never
+  [6] reg
+  [9] 0
+end
+
+format 
+  ! 0x1f qsetflag   /* set the bit in reg index by queue to same as flag */
+  % flag
+  % reg
+  [5] opcode
+  [6] 9
+  [6] flag
+  [6] reg
+  [9] 0
+end
+
+format 
+  ! 0x1f nqsetflag   /* set the bit in the reg index by queue to opposite of flag */
+  % flag
+  % reg
+  [5] opcode
+  [6] 0x29
+  [6] flag
+  [6] reg
+  [9] 0
+end
+
+format
+  ! 0x1f qsetflip      /* flip the bit in reg index by queue */
+  % reg
+  [5] opcode
+  [6] 10
+  [6] always
+  [6] reg
+  [9] 0
+end
+
+format
+  ! 1 parse       /* take bits out of source (sco_tx,tx_buffer,rx-elas) into pdata and dest (sco_rx,rx_fifo,tx-elas) */
+  % source
+  % dest
+  % immediate
+  [5] opcode
+  [4] source      /* voice, data, demod */
+  [2] 0
+  [6] 0    
+  [2] 0           /* parse or inject */ 
+  [4] dest        /* acl, sco, mod, bucket */
+  [9] immediate   /* number of bits to parse off */
+end
+
+format
+  ! 1 inject      /* shift data from pdata into destination (tx-elas,rx_fifo,sco_rx) */
+  % destination
+  % immediate
+  [5] opcode
+  [4] 0
+  [2] 0
+  [6] 1
+  [2] 0
+  [4] destination /* acl,sco,mod,bucket */
+  [9] immediate   /* number of bits to be injected */
+end
+
+format
+  ! 1 iinject
+  % destination
+  % regr
+  [5] opcode
+  [6] regr       /* contain the number of bits to inject */
+  [6] 3
+  [2] 0
+  [4] destination /* acl,sco,mod,bucket */
+  [9] 0 
+end
+
+format
+  ! 1 stuff  /* automatic parse, stuff_counter decrement on every bit until hits zero */
+  % source
+  % destination
+  [5] opcode
+  [4] source
+  [2] 0
+  [6] 2
+  [2] 0
+  [4] destination
+  [9] 0
+end
+
+format    /* force immediate value into registers */
+  ! 3 force
+  % immediate
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 0    /* alu operation force */
+  [6] regw  /* destination register */
+  [9] immediate
+end
+
+format    /* force whatever is on shift_reg to regsiters */
+  ! 0x13 iforce
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 0    /* alu operation force */
+  [6] regw  /* destination register */
+  [9] 0
+end
+
+format    /* force immediate value into registers */
+  ! 3 increase
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 1    /* alu operation add */
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 3 pincrease
+  % immediate
+  [5] opcode
+  [6] -1  /* pdata */
+  [6] 1   /* alu add */
+  [6] -1  /* back to pdata */
+  [9] immediate
+end
+
+format    /* force immediate value into registers */
+  ! 3 and_into
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 2    /* alu operation and into */
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 3 and
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 2    /* alu operation and into */
+  [6] regw
+  [9] immediate
+end
+  
+format
+  ! 0x13 iand    /* pdata & regr -> regw */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 2    /* alu operation and into */
+  [6] regw
+  [9] 0
+end
+  
+
+format    /* and whatever is in shiftreg with reg */
+  ! 0x13 iand_into
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 2    /* alu operation and into */
+  [6] reg
+  [9] 0
+end
+
+format
+  ! 3 or_into
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 3    /* alu operation or into */
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 3 or
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 3    /* alu operation or into */
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 0x13 ior
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 3    /* alu operation or into */
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 0x13 ior_into
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 3    /* alu operation or into */
+  [6] reg
+  [9] 0
+end
+
+format
+  ! 3 skip_to   /* jump to location stored in reg */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 4   /* alu operation copy */
+  [6] rom_addr
+  [9] 0
+end
+
+format
+  ! 3 copy
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 4   /* alu operation copy */
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 deposit   /* copy the register content thru alu to shift register, not prealigned like preload */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 4   /* alu operation copy */
+  [6] -1  /* pdata */
+  [9] 0
+end
+
+format
+  ! 3 icopy     /* copy the shift register lsb content directly to register, not aligned */
+  % regw
+  [5] opcode
+  [6] -1  /* pdata */
+  [6]  4  /* alu copy */
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 add
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 1
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 0x13 iadd       /* regr + pdata -> regw */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 1
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 sub          /* immediate - regr -> regw */
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 12
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 0x13 isub       /* pdata - regr -> regw */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 12
+  [6] regw
+  [9] 0
+end
+
+
+format
+  ! 3 flip
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 5
+  [6] reg
+  [9] immediate
+end
+  
+format
+  ! 0x13 iflip  /* use shift register as immediate to do xor */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 5
+  [6] regw
+  [9] 0
+end
+  
+format
+  ! 3 xor
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 5
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 3 xor_into
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 5
+  [6] reg
+  [9] immediate
+end
+  
+format
+  ! 0x13 ixor  /* pdata xor regr and store result in regw */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 5
+  [6] regw
+  [9] 0
+end
+  
+format
+  ! 3 invert
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 8
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 pinvert    /* invert pdata into itself */
+  [5] opcode
+  [6] -1
+  [6] 8
+  [6] -1
+  [9] 0
+end
+
+format
+  ! 3 div                 /* regr div immediate div */
+  % reg
+  % immediate
+  [5] opcode
+  [6] reg
+  [6] 13                   /* generate diven pulse to div */
+  [6] null
+  [9] immediate
+end
+
+format
+  ! 0x13 idiv           /* pdata div regr data ready at most after 41 nops */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 13                   /* generate diven pulse to div */
+  [6] null
+  [9] 0
+end
+
+format
+  ! 3 remainder            /* harvest div remainder */
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 14
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 quotient             /* harvest div quotient */
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 15
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 6
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift2
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 22
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift3
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 18
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift4
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 35
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift8
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 25
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift16
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 34
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift32
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 30
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 lshift
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 7
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 lshift2
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 23
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 lshift8
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 26
+  [6] regw
+  [9] 0
+end
+
+  
+format
+  ! 3 lshift3
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 19
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 lshift4
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 36
+  [6] regw
+  [9] 0
+end
+  
+
+format
+  ! 3 lshift16
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 32
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 random               /* random number into regw */
+  % reg
+  [5] opcode
+  [6] 0
+  [6] 20
+  [6] reg
+  [9] 0
+end
+
+format                     /* bit reverse within a byte */
+  ! 3 reverse
+  % reg
+  % regw
+  [5] opcode
+  [6] reg
+  [6] 27
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 priority    /* priority encode reg into regw, lsb is the top priority, ie, priority(8'b00010000) = 4 */
+  % reg
+  % regw
+  [5] opcode
+  [6] reg
+  [6] 21
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 7 setsect   /* set a section of pdata */
+  % section    /* 0 sets 17:0 of pdata with set_data, 1 sets 35:18, 2 sets 53:36, 3 sets 71:54 */
+  % set_data
+  [5] opcode
+  [7] 0
+  [2] section
+  [18] set_data
+end
+
+format
+  ! 10 preload   /* load stuff into pdata according to fhs format, check us.v */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 0
+  [6] -1
+  [9] 0
+end
+
+format  /* load register with pdata content, according to fhs format, check us.v */
+  ! 10 ialigned   /* all bits are in position */
+  % regw
+  [5] opcode
+  [6] -1
+  [6] 0
+  [6] regw
+  [9] 0
+end
+
+format  /* load register to another according to fhs format */
+  ! 10 aligned
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 0
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 4 branch
+  % addr
+  % flag
+  [5] opcode
+  [6] 1
+  [6] flag
+  [15] addr
+end
+
+format
+  ! 4 call
+  % addr
+  % flag
+  [5] opcode
+  [6] 2
+  [6] flag
+  [15] addr
+end
+
+format
+  ! 4 rtn
+  % flag
+  [5] opcode
+  [6] 3
+  [6] flag
+  [15] 0
+end
+
+format
+  ! 0x0c store          /* write to memory, data from pdata, address from immediate then mem_ptr */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 0
+  [1] 0
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0c hstore          /* write to memory, data from pdata, address from immediate then mem_ptr */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 1
+  [1] 0
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x1c istore        /* write to memory, data from pdata, address from regr then mem_ptr */
+  % num_bytes
+  % reg
+  [5] opcode
+  [6] reg            /* hold address */
+  [1] 0
+  [1] 0
+  [4] num_bytes
+  [15] 0
+end
+
+format
+  ! 0x0d fetch          /* read from memory, data into pdata, address from immediate then mem_ptr */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 0
+  [1] 0
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0d hfetch          /* read from memory, data into pdata, address from immediate then mem_ptr */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 1
+  [1] 0
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0d crc         /* read from memory, count from loopcnt, put crc result into pdata */
+  % addr
+  [5] opcode
+  [6] 0
+  [1] 0
+  [1] 0
+  [4] 0
+  [15] addr
+end
+
+format
+  ! 0x1d icrc         /* read from memory, address from reg, count from loopcnt, put crc result into pdata */
+  % reg
+  [5] opcode
+  [6] reg             /* hold address */
+  [1] 0
+  [1] 0
+  [4] 0
+  [15] 0
+end
+
+
+format
+  ! 0x1d ifetch         /* read from memory, data into pdata, address from regr then mem_ptr */
+  % num_bytes
+  % reg
+  [5] opcode
+  [6] reg             /* hold address */
+  [1] 0
+  [1] 0
+  [4] num_bytes
+  [15] 0
+end
+
+format
+  ! 0x0c storet          /* write to memory, data from temp, address from immediate won't increment */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 0
+  [1] 1
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0c hstoret          /* write to corereg, data from temp, address from immediate won't increment */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 1
+  [1] 1
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x1c istoret        /* write to memory, data from temp, address from regr won't increment */
+  % num_bytes
+  % reg
+  [5] opcode
+  [6] reg            /* hold address */
+  [1] 0
+  [1] 1
+  [4] num_bytes
+  [15] 0
+end
+
+format
+  ! 0x0d fetcht          /* read from memory, data into temp, address from immediate won't increment */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 0
+  [1] 1
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0d hfetcht          /* read from corereg, data into temp, address from immediate won't increment */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 1
+  [1] 1
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x1d ifetcht         /* read from memory, data into temp, address from regr won't increment */
+  % num_bytes
+  % reg
+  [5] opcode
+  [6] reg             /* hold address */
+  [1] 0
+  [1] 1
+  [4] num_bytes
+  [15] 0
+end
+
+format
+  ! 0x0e jam
+  % immediate
+  % addr
+  [5] opcode
+  [3] 0
+  [16] addr
+  [8] immediate
+end
+
+format			/* 0x242... */
+  ! 4 nbranch
+  % addr
+  % flag
+  [5] opcode
+  [1] 1
+  [5] 1
+  [6] flag
+  [15] addr
+end
+
+format
+  ! 4 ncall
+  % addr
+  % flag
+  [5] opcode
+  [1] 1
+  [5] 2
+  [6] flag
+  [15] addr
+end
+
+format
+  ! 4 nrtn
+  % flag
+  [5] opcode
+  [1] 1
+  [5] 3
+  [6] flag
+  [15] 0
+end
+
+format
+  ! 4 nop
+  % addr  /* no-op for addr+2 clocks */
+  [5] opcode
+  [6] 0     
+  [6] 0     /* always */ 
+  [15] addr
+end
+
+format
+  ! 4 clear_stack
+  [5] opcode
+  [6] 4
+  [6] 0    /* always */
+  [15] 0
+end
+
+format
+  ! 6 until
+  % reg
+  % flag
+  [5] opcode
+  [6] reg
+  [6] flag
+  [6] 1
+  [9] 0
+end
+  
+format
+  ! 6 correlate   /* quit if 1. flag is true 2, regr time up 3, found sync,(cond_true) */
+  % reg          /* expire counter to check against */
+  % flag
+  [5] opcode
+  [6] reg
+  [6] flag
+  [6] 2           /* correlate */
+  [9] 0           
+end
+
+format
+  ! 5 compare   /* sets cond flag,  if reg equals immediate */
+  % immediate
+  % reg
+  % mask
+  [5] opcode
+  [6] reg
+  [3] 0
+  [9] mask
+  [9] immediate
+end
+
+format
+  ! 0x15 icompare   /* sets cond flag,  if reg equals pdata */
+  % mask
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 0
+  [9] mask
+  [9] 0
+end
+
+format   /* sets cond. flag, if reg equals LS half of shift reg with MS half of reg being mask */
+  ! 5 iverify
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 2
+  [18] 0
+end
+
+format
+  ! 0x15 qisolate1
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 3
+  [18] -1
+end
+
+format
+  ! 0x15 qisolate0
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 3
+  [18] 0
+end
+
+	/* REVAB bug: cannot access bit above 35 */
+format
+  ! 5 isolate1
+  % addr
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 3
+  [9] -1
+  [9] addr
+end
+
+format
+  ! 5 isolate0
+  % addr
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 3
+  [9] 0
+  [9] addr
+end
+
+format
+  ! 11 setarg
+  % immediate
+  [5] opcode
+  [27] immediate
+end
+
+format
+  ! 0x1b arg
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [21] immediate
+end
+
+  
+format
+  ! 0 sleep
+  [5] opcode
+  [27] 0
+end
+
+format
+  ! 0 snooze
+  [5] opcode
+  [6] -1
+  [21] 0
+end
+
+format
+  ! 0 revision
+  % rev_num
+  [5] opcode
+  [27] rev_num
+end
+
+format
+  ! 0x18 loop   /* branch when loopcnt is NOT zero, and decrease loopcnt */
+  % addr
+  [5] opcode
+  [4] 4
+  [8] 0
+  [15] addr
+end
+
+format
+  ! 0x18 beq   /* branch when pdata is equal to immediate */
+  % imme
+  % addr
+  [5] opcode
+  [4] 0
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 bne   /* branch when pdata is NOT equal to immediate */
+  % imme
+  % addr
+  [5] opcode
+  [4] 1
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 rtneq   /* return when pdata is equal to immediate */
+  % imme
+  [5] opcode
+  [4] 2
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 0x18 rtnne   /* return when pdata is NOT equal to immediate */
+  % imme
+  [5] opcode
+  [4] 3
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 0x18 bbit1   /* branch when pdata's imme bit is 1 */
+  % imme
+  % addr
+  [5] opcode
+  [4] 5
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 bbit0   /* branch when pdata's imme bit is 0 */
+  % imme
+  % addr
+  [5] opcode
+  [4] 6
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 rtnbit1   /* return when pdata's imme bit is 0 */
+  % imme
+  [5] opcode
+  [4] 7
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 0x18 rtnbit0   /* return when pdata's imme bit is 0 */
+  % imme
+  [5] opcode
+  [4] 8
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 8	bpatch
+  % imme
+  % addr
+  [5] opcode
+  [4] 9
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 8	bpatchx
+  % imme
+  % addr
+  [5] opcode
+  [4] 14
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 bmark1   /* branch when mark's imme bit is 1 */
+  % imme
+  % addr
+  [5] opcode
+  [4] 10
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 bmark0   /* branch when mark's imme bit is 0 */
+  % imme
+  % addr
+  [5] opcode
+  [4] 11
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 rtnmark1   /* return when mark's imme bit is 0 */
+  % imme
+  [5] opcode
+  [4] 12
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 0x18 rtnmark0   /* return when mark's imme bit is 0 */
+  % imme
+  [5] opcode
+  [4] 13
+  [8] imme
+  [15] 0
+end
+
+
+format
+  ! 3 mult                  /* immediate mult regr */  /* the product will be ready 17 clks later */
+  % immediate                                   /* use "product" instruction to get the result */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 16                   /* generate diven pulse to div */
+  [6] null
+  [9] immediate
+end
+
+format
+  ! 0x13 imult           /* pdata mult regr */  /* the product will be ready after 15 nops */
+  % reg                                         /* use product opcode to get the result */
+  [5] opcode
+  [6] reg
+  [6] 16                   /* generate mult pulse to multiplier */
+  [6] null
+  [9] 0
+end
+
+format
+  ! 3 mul32                  /* immediate mult regr */ 
+  % regr
+  % immediate                                  
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 31           
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 0x13 imul32           /* pdata mult regr 32x32=64bit */  
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 31                   
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 product              /* harvest mult product */
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 17
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 byteswap
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 33
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 shasx          /* SHA256 Sx operation, immediate is Sx */
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 28
+  [6] regw
+  [9] immediate
+end
+
+
+format
+  ! 0x13 regexrot 	/* regext[0] <- regext[7], regext[1] <- regext[0], regext[2] <- regext[1] ... */
+  [5] opcode
+  [6] 0
+  [6] 29
+  [6] null
+  [9] 0
+end
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/bt_program23.icode
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/bt_program23.icode	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/bt_program23.icode	(working copy)
@@ -0,0 +1,25773 @@
+ 00000000  0x00000044 bbit1  0x00000008 , 0x00000013 
+ 00000001  0x00000045 beq  0x00000000 , 0x00000028 
+ 00000002  0x00000046 beq  0x00000001 , 0x0000002b 
+ 00000003  0x00000047 beq  0x00000002 , 0x00000033 
+ 00000004  0x00000048 beq  0x00000085 , 0x00000476 
+ 00000005  0x00000049 beq  0x00000089 , 0x00000447 
+ 00000006  0x0000004a beq  0x0000008a , 0x00000478 
+ 00000007  0x0000004b beq  0x000000a1 , 0x0000003c 
+ 00000008  0x0000004c beq  0x000000b1 , 0x00000041 
+ 00000009  0x0000004d beq  0x000000b2 , 0x0000004b 
+ 00000010  0x0000004e beq  0x000000c4 , 0x000002cf 
+ 00000011  0x0000004f beq  0x000000c9 , 0x00000330 
+ 00000012  0x00000050 beq  0x000000ca , 0x00000334 
+ 00000013  0x00000051 beq  0x000000e3 , 0x000003c5 
+ 00000014  0x00000052 beq  0x000000e6 , 0x000003d1 
+ 00000015  0x00000053 beq  0x000000ea , 0x000003da 
+ 00000016  0x00000054 beq  0x000000eb , 0x000003df 
+ 00000017  0x00000055 beq  0x000000ec , 0x000003f0 
+ 00000018  0x00000056 branch  0x00002a8e 
+ 00000019  0x00000058 beq  0x0000003f , 0x00000016 
+ 00000020  0x00000059 beq  0x0000008c , 0x000003f4 
+ 00000021  0x0000005a branch  0x00002a8e 
+ 00000022  0x0000005d jam  0x00000036 , 0x0000890f 
+ 00000023  0x0000005e jam  0x0000005f , 0x0000890b 
+ 00000024  0x0000005f enable  0x00000036 
+ 00000025  0x00000060 jam  0x00000007 , 0x00008914 
+ 00000026  0x00000062 fetch  0x00000001 , 0x000041e0 
+ 00000027  0x00000063 rtn  0x00000034 
+ 00000028  0x00000064 jam  0x000000b8 , 0x0000890a 
+ 00000029  0x00000065 rtn 
+ 00000030  0x00000069 copy  0x0000003f , 0x00000011 
+ 00000031  0x0000006a fetcht  0x00000001 , 0x00004c70 
+ 00000032  0x0000006b setarg  0x00004c77 
+ 00000033  0x0000006c iadd  0x00000002 , 0x00000005 
+ 00000034  0x0000006d copy  0x00000011 , 0x0000003f 
+ 00000035  0x0000006e istore  0x00000001 , 0x00000005 
+ 00000036  0x0000006f increase  0x00000001 , 0x00000002 
+ 00000037  0x00000070 and_into  0x00000007 , 0x00000002 
+ 00000038  0x00000071 storet  0x00000001 , 0x00004c70 
+ 00000039  0x00000072 rtn 
+ 00000040  0x00000075 hfetch  0x00000001 , 0x0000813b 
+ 00000041  0x00000076 store  0x00000001 , 0x00004b26 
+ 00000042  0x00000077 branch  0x00002002 
+ 00000043  0x0000007a arg  0x000009ae , 0x00000005 
+ 00000044  0x0000007b arg  0x0000000c , 0x00000039 
+ 00000045  0x0000007c call  0x00007ed4 
+ 00000046  0x0000007d call  0x00006a03 
+ 00000047  0x0000007e call  0x00005cf6 
+ 00000048  0x0000007f ncall  0x00002c65 , 0x0000002b 
+ 00000049  0x00000080 call  0x00007ccd 
+ 00000050  0x00000081 branch  0x0000200c 
+ 00000051  0x00000084 call  0x000032e3 , 0x0000002b 
+ 00000052  0x00000085 call  0x0000756a 
+ 00000053  0x00000086 call  0x00002b41 , 0x0000002b 
+ 00000054  0x00000088 call  0x000076dc 
+ 00000055  0x00000089 fetch  0x00000001 , 0x0000465a 
+ 00000056  0x0000008a branch  0x00002012 , 0x00000034 
+ 00000057  0x0000008b fetch  0x00000001 , 0x000045b1 
+ 00000058  0x0000008c branch  0x00000036 , 0x00000034 
+ 00000059  0x0000008d branch  0x00002012 
+ 00000060  0x00000090 setarg  0x00000a06 
+ 00000061  0x00000091 store  0x00000003 , 0x00004510 
+ 00000062  0x00000092 setarg  0x00001d87 
+ 00000063  0x00000093 store  0x00000002 , 0x00004513 
+ 00000064  0x00000094 branch  0x00002aa2 
+ 00000065  0x00000097 rtnmark1  0x00000026 
+ 00000066  0x00000098 fetch  0x00000001 , 0x0000479c 
+ 00000067  0x00000099 branch  0x00007fef , 0x00000034 
+ 00000068  0x0000009a fetch  0x00000001 , 0x000047c4 
+ 00000069  0x0000009b beq  0x00000001 , 0x00007fef 
+ 00000070  0x0000009c fetch  0x00000002 , 0x00004248 
+ 00000071  0x0000009d nbranch  0x00007fef , 0x00000034 
+ 00000072  0x0000009e fetch  0x00000001 , 0x00004806 
+ 00000073  0x0000009f nbranch  0x00007fef , 0x00000034 
+ 00000074  0x000000a0 branch  0x00007ff1 
+ 00000075  0x000000a4 rtnmark0  0x00000026 
+ 00000076  0x000000a5 fetch  0x00000001 , 0x00004cf5 
+ 00000077  0x000000a6 beq  0x00000001 , 0x0000005c 
+ 00000078  0x000000a8 call  0x000000e5 
+ 00000079  0x000000a9 nbranch  0x00000071 , 0x00000028 
+ 00000080  0x000000aa call  0x000000cc 
+ 00000081  0x000000ac call  0x00000107 
+ 00000082  0x000000ad fetch  0x00000001 , 0x00004bc5 
+ 00000083  0x000000ae rtnne  0x000000ff 
+ 00000084  0x000000af call  0x0000041a 
+ 00000085  0x000000b1 call  0x00000077 
+ 00000086  0x000000b2 nrtn  0x00000028 
+ 00000087  0x000000b3 call  0x000002c0 
+ 00000088  0x000000b4 setarg  0x0000ec54 
+ 00000089  0x000000b6 call  0x00007f49 
+ 00000090  0x000000b7 storet  0x00000004 , 0x0000415b 
+ 00000091  0x000000b8 branch  0x00002b2a 
+ 00000092  0x000000bb call  0x0000028c 
+ 00000093  0x000000bc nrtn  0x00000028 
+ 00000094  0x000000bd call  0x00000068 
+ 00000095  0x000000be branch  0x0000004e 
+ 00000096  0x000000c0 jam  0x00000000 , 0x00004cf5 
+ 00000097  0x000000c1 jam  0x00000000 , 0x00004cf6 
+ 00000098  0x000000c3 jam  0x00000000 , 0x00004bf0 
+ 00000099  0x000000c4 fetch  0x00000001 , 0x00004bdb 
+ 00000100  0x000000c6 store  0x00000001 , 0x00004bda 
+ 00000101  0x000000c7 rtn 
+ 00000102  0x000000c9 fetch  0x00000001 , 0x00004bdc 
+ 00000103  0x000000ca branch  0x00000064 
+ 00000104  0x000000cc fetch  0x00000001 , 0x00004bf0 
+ 00000105  0x000000cd increase  0x00000001 , 0x0000003f 
+ 00000106  0x000000ce store  0x00000001 , 0x00004bf0 
+ 00000107  0x000000cf beq  0x00000004 , 0x00000066 
+ 00000108  0x000000d0 beq  0x00000005 , 0x00000062 
+ 00000109  0x000000d1 rtn 
+ 00000110  0x000000d3 jam  0x00000001 , 0x00004cf5 
+ 00000111  0x000000d4 jam  0x00000000 , 0x00004cf6 
+ 00000112  0x000000d5 rtn 
+ 00000113  0x000000d8 fetch  0x00000001 , 0x00004be1 
+ 00000114  0x000000d9 call  0x00000080 , 0x00000034 
+ 00000115  0x000000db call  0x00000077 
+ 00000116  0x000000dc nrtn  0x00000028 
+ 00000117  0x000000dd fetch  0x00000003 , 0x00004be4 
+ 00000118  0x000000de branch  0x00000059 
+ 00000119  0x000000e1 enable  0x00000028 
+ 00000120  0x000000e2 call  0x00002afa 
+ 00000121  0x000000e3 fetch  0x00000003 , 0x0000416f 
+ 00000122  0x000000e4 branch  0x00007fe9 , 0x00000034 
+ 00000123  0x000000e5 fetch  0x00000001 , 0x00004091 
+ 00000124  0x000000e6 branch  0x00007fe9 , 0x00000034 
+ 00000125  0x000000e7 fetch  0x00000001 , 0x00004cf5 
+ 00000126  0x000000e8 beq  0x00000001 , 0x00007fe9 
+ 00000127  0x000000e9 branch  0x000002c3 
+ 00000128  0x000000ec jam  0x00000001 , 0x00004be1 
+ 00000129  0x000000ed jam  0x00000000 , 0x00004cea 
+ 00000130  0x000000ee call  0x00000094 
+ 00000131  0x000000ef store  0x00000001 , 0x00004b51 
+ 00000132  0x000000f0 setarg  0x00000000 
+ 00000133  0x000000f1 store  0x00000007 , 0x00004b52 
+ 00000134  0x000000f2 fetch  0x00000004 , 0x00004bec 
+ 00000135  0x000000f3 store  0x00000004 , 0x00004b59 
+ 00000136  0x000000f4 jam  0x0000000c , 0x00004bb5 
+ 00000137  0x000000f5 fetch  0x00000001 , 0x00004bb6 
+ 00000138  0x000000f6 set1  0x00000003 , 0x0000003f 
+ 00000139  0x000000f7 store  0x00000001 , 0x00004bb6 
+ 00000140  0x000000f8 call  0x000000e8 
+ 00000141  0x000000f9 branch  0x00000051 
+ 00000142  0x000000fc call  0x000068a8 
+ 00000143  0x000000fd fetch  0x00000004 , 0x000040a0 
+ 00000144  0x000000fe store  0x00000004 , 0x00004bec 
+ 00000145  0x000000ff rtn 
+ 00000146  0x00000102 jam  0x00000001 , 0x00004ceb 
+ 00000147  0x00000103 jam  0x00000000 , 0x00004ced 
+ 00000148  0x00000105 fetch  0x00000001 , 0x00004bb6 
+ 00000149  0x00000106 and_into  0x00000007 , 0x0000003f 
+ 00000150  0x00000107 store  0x00000001 , 0x00004bb6 
+ 00000151  0x00000108 rtn 
+ 00000152  0x0000010b fetch  0x00000001 , 0x00004bb6 
+ 00000153  0x0000010c set1  0x00000004 , 0x0000003f 
+ 00000154  0x0000010d store  0x00000001 , 0x00004bb6 
+ 00000155  0x0000010f store  0x00000001 , 0x00004b71 
+ 00000156  0x00000110 rtn 
+ 00000157  0x00000112 fetch  0x00000001 , 0x00004bb6 
+ 00000158  0x00000113 set0  0x00000004 , 0x0000003f 
+ 00000159  0x00000114 store  0x00000001 , 0x00004bb6 
+ 00000160  0x00000115 rtn 
+ 00000161  0x00000118 call  0x00000410 
+ 00000162  0x00000119 fetch  0x00000001 , 0x00004cec 
+ 00000163  0x0000011a beq  0x00000001 , 0x000000a6 
+ 00000164  0x0000011b beq  0x00000002 , 0x000000aa 
+ 00000165  0x0000011c rtn 
+ 00000166  0x0000011e jam  0x00000002 , 0x00004ced 
+ 00000167  0x00000120 jam  0x00000000 , 0x00004ce9 
+ 00000168  0x00000121 jam  0x00000000 , 0x00004ceb 
+ 00000169  0x00000122 branch  0x00000094 
+ 00000170  0x00000125 jam  0x00000000 , 0x00004cea 
+ 00000171  0x00000126 branch  0x000000a7 
+ 00000172  0x0000012a fetch  0x00000002 , 0x00004bbb 
+ 00000173  0x0000012b increase  0x00000001 , 0x0000003f 
+ 00000174  0x0000012c store  0x00000002 , 0x00004bbb 
+ 00000175  0x0000012d bbit1  0x00000006 , 0x0000014a 
+ 00000176  0x0000012e fetch  0x00000001 , 0x00004cea 
+ 00000177  0x0000012f beq  0x00000001 , 0x000000b5 
+ 00000178  0x00000130 jam  0x00000001 , 0x00004cea 
+ 00000179  0x00000132 fetch  0x00000001 , 0x00004cea 
+ 00000180  0x00000133 bne  0x00000001 , 0x00000094 
+ 00000181  0x00000135 fetch  0x00000001 , 0x00004ce8 
+ 00000182  0x00000136 increase  0x00000001 , 0x0000003f 
+ 00000183  0x00000137 store  0x00000001 , 0x00004ce8 
+ 00000184  0x00000138 beq  0x00000004 , 0x000000bc 
+ 00000185  0x00000139 call  0x00000204 
+ 00000186  0x0000013a jam  0x00000002 , 0x00004bfa 
+ 00000187  0x0000013b branch  0x00000107 
+ 00000188  0x0000013e call  0x00000410 
+ 00000189  0x0000013f jam  0x00000000 , 0x00004ce8 
+ 00000190  0x00000140 branch  0x00000094 
+ 00000191  0x00000143 jam  0x00000002 , 0x00004ced 
+ 00000192  0x00000145 jam  0x00000001 , 0x00004ceb 
+ 00000193  0x00000146 jam  0x00000000 , 0x00004cea 
+ 00000194  0x00000147 branch  0x00000094 
+ 00000195  0x0000014a fetch  0x00000001 , 0x00004cec 
+ 00000196  0x0000014b beq  0x00000003 , 0x000000c0 
+ 00000197  0x0000014c fetch  0x00000001 , 0x00004bb6 
+ 00000198  0x0000014d isolate0  0x00000004 , 0x0000003f 
+ 00000199  0x0000014e branch  0x00000092 , 0x00000001 
+ 00000200  0x0000014f fetch  0x00000001 , 0x00004cec 
+ 00000201  0x00000150 beq  0x00000001 , 0x000000bf 
+ 00000202  0x00000151 beq  0x00000002 , 0x000000c0 
+ 00000203  0x00000152 rtn 
+ 00000204  0x00000155 fetch  0x00000001 , 0x00004bc5 
+ 00000205  0x00000156 rtnne  0x000000ff 
+ 00000206  0x00000157 call  0x000000d1 
+ 00000207  0x00000158 ncall  0x000000d9 , 0x0000002c 
+ 00000208  0x00000159 rtn 
+ 00000209  0x0000015c disable  0x0000002c 
+ 00000210  0x0000015d fetch  0x00000001 , 0x00004ceb 
+ 00000211  0x0000015e rtnne  0x00000001 
+ 00000212  0x0000015f fetch  0x00000001 , 0x00004ced 
+ 00000213  0x00000160 rtnne  0x00000000 
+ 00000214  0x00000161 jam  0x00000001 , 0x00004cec 
+ 00000215  0x00000162 jam  0x00000004 , 0x00004bfa 
+ 00000216  0x00000163 branch  0x00007feb 
+ 00000217  0x00000166 fetch  0x00000001 , 0x00004ced 
+ 00000218  0x00000167 branch  0x000000e0 , 0x00000034 
+ 00000219  0x00000168 increase  0xffffffff , 0x0000003f 
+ 00000220  0x00000169 store  0x00000001 , 0x00004ced 
+ 00000221  0x0000016a jam  0x00000002 , 0x00004cec 
+ 00000222  0x0000016b jam  0x00000004 , 0x00004bfa 
+ 00000223  0x0000016c branch  0x00000204 
+ 00000224  0x0000016f jam  0x00000003 , 0x00004cec 
+ 00000225  0x00000170 fetch  0x00000001 , 0x00004cea 
+ 00000226  0x00000171 nbranch  0x000000b3 , 0x00000034 
+ 00000227  0x00000172 jam  0x00000002 , 0x00004bfa 
+ 00000228  0x00000173 branch  0x00000204 
+ 00000229  0x00000176 fetch  0x00000001 , 0x00004bc5 
+ 00000230  0x00000177 bne  0x000000ff , 0x0000015e 
+ 00000231  0x00000179 call  0x000000eb 
+ 00000232  0x0000017b call  0x000001f2 
+ 00000233  0x0000017c jam  0x00000001 , 0x00004bba 
+ 00000234  0x0000017d rtn 
+ 00000235  0x00000180 fetch  0x00000002 , 0x00004ce6 
+ 00000236  0x00000181 call  0x00007f9c 
+ 00000237  0x00000182 branch  0x000000f1 , 0x00000028 
+ 00000238  0x00000183 fetch  0x00000007 , 0x00004b52 
+ 00000239  0x00000184 rtn  0x00000034 
+ 00000240  0x00000185 branch  0x00007fe7 
+ 00000241  0x00000187 jam  0x00000000 , 0x00004be1 
+ 00000242  0x00000188 add  0x00000011 , 0x00000001 , 0x0000003f 
+ 00000243  0x00000189 store  0x00000001 , 0x00004bb5 
+ 00000244  0x0000018a call  0x00000094 
+ 00000245  0x0000018b store  0x00000001 , 0x00004b51 
+ 00000246  0x0000018c ifetcht  0x00000001 , 0x00000005 
+ 00000247  0x0000018d ifetch  0x00000001 , 0x00000012 
+ 00000248  0x0000018e ior  0x00000002 , 0x0000003f 
+ 00000249  0x0000018f istore  0x00000001 , 0x00000005 
+ 00000250  0x00000190 increase  0x00000001 , 0x00000012 
+ 00000251  0x00000191 ifetch  0x00000004 , 0x00000012 
+ 00000252  0x00000192 istore  0x00000004 , 0x00000005 
+ 00000253  0x00000193 increase  0x00000004 , 0x00000012 
+ 00000254  0x00000194 arg  0x00004b57 , 0x00000005 
+ 00000255  0x00000195 arg  0x00000002 , 0x00000039 
+ 00000256  0x00000197 ifetch  0x00000001 , 0x00000012 
+ 00000257  0x00000198 ifetcht  0x00000001 , 0x00000005 
+ 00000258  0x00000199 iadd  0x00000002 , 0x0000003f 
+ 00000259  0x0000019a istore  0x00000001 , 0x00000005 
+ 00000260  0x0000019b increase  0x00000001 , 0x00000012 
+ 00000261  0x0000019c loop  0x00000100 
+ 00000262  0x0000019d rtn 
+ 00000263  0x000001a0 jam  0x00000000 , 0x00004bbe 
+ 00000264  0x000001a2 arg  0x00000d00 , 0x0000000b 
+ 00000265  0x000001a3 until  0x00000023 , 0x00000026 
+ 00000266  0x000001a4 call  0x00000123 
+ 00000267  0x000001a5 fetch  0x00000001 , 0x00004bf1 
+ 00000268  0x000001a6 rtneq  0x00000001 
+ 00000269  0x000001a7 nbranch  0x00000132 , 0x00000018 
+ 00000270  0x000001a8 nbranch  0x00000132 , 0x0000002f 
+ 00000271  0x000001a9 call  0x0000011e 
+ 00000272  0x000001aa call  0x0000014e 
+ 00000273  0x000001ab call  0x0000040c 
+ 00000274  0x000001ad fetch  0x00000001 , 0x00004bb4 
+ 00000275  0x000001ae increase  0x00000001 , 0x0000003f 
+ 00000276  0x000001af store  0x00000001 , 0x00004bb4 
+ 00000277  0x000001b0 fetch  0x00000001 , 0x00004bc5 
+ 00000278  0x000001b1 bne  0x000000ff , 0x00000121 
+ 00000279  0x000001b2 call  0x000000c3 
+ 00000280  0x000001b4 setarg  0x00000000 
+ 00000281  0x000001b5 store  0x00000002 , 0x00004bbb 
+ 00000282  0x000001b6 store  0x00000001 , 0x00004bbd 
+ 00000283  0x000001b7 store  0x00000001 , 0x00004ce9 
+ 00000284  0x000001b8 jam  0x00000000 , 0x00004bba 
+ 00000285  0x000001b9 rtn 
+ 00000286  0x000001bc arg  0x00000004 , 0x00000039 
+ 00000287  0x000001bd arg  0x00004b51 , 0x00000005 
+ 00000288  0x000001be branch  0x00007ec6 
+ 00000289  0x000001c1 call  0x00000409 
+ 00000290  0x000001c2 branch  0x00000178 
+ 00000291  0x000001c5 disable  0x0000002f 
+ 00000292  0x000001c6 call  0x0000026b 
+ 00000293  0x000001c9 fetch  0x00000001 , 0x00004bf1 
+ 00000294  0x000001ca beq  0x00000001 , 0x00000130 
+ 00000295  0x000001cb force  0x00000000 , 0x00000015 
+ 00000296  0x000001cc fetch  0x00000004 , 0x00004bdd 
+ 00000297  0x000001cd iforce  0x00000009 
+ 00000298  0x000001ce fetcht  0x00000001 , 0x00000017 
+ 00000299  0x000001cf call  0x0000291f 
+ 00000300  0x000001d0 call  0x00002924 
+ 00000301  0x000001d1 call  0x00000227 
+ 00000302  0x000001d2 call  0x00000263 , 0x0000002f 
+ 00000303  0x000001d3 rtn 
+ 00000304  0x000001d5 call  0x00000263 
+ 00000305  0x000001d6 branch  0x00000112 
+ 00000306  0x000001d9 fetch  0x00000001 , 0x00004bbd 
+ 00000307  0x000001da increase  0x00000001 , 0x0000003f 
+ 00000308  0x000001db store  0x00000001 , 0x00004bbd 
+ 00000309  0x000001dc fetch  0x00000001 , 0x00004bc5 
+ 00000310  0x000001dd bne  0x000000ff , 0x00000146 
+ 00000311  0x000001de fetcht  0x00000001 , 0x00004bbe 
+ 00000312  0x000001df increase  0x00000001 , 0x00000002 
+ 00000313  0x000001e0 storet  0x00000001 , 0x00004bbe 
+ 00000314  0x000001e1 fetch  0x00000001 , 0x00004bfa 
+ 00000315  0x000001e2 isub  0x00000002 , 0x0000003f 
+ 00000316  0x000001e3 nbranch  0x00000108 , 0x00000034 
+ 00000317  0x000001e4 fetch  0x00000001 , 0x00004cec 
+ 00000318  0x000001e5 beq  0x00000003 , 0x000000ac 
+ 00000319  0x000001e6 fetch  0x00000001 , 0x00004ce9 
+ 00000320  0x000001e7 increase  0x00000001 , 0x0000003f 
+ 00000321  0x000001e8 store  0x00000001 , 0x00004ce9 
+ 00000322  0x000001e9 beq  0x00000002 , 0x000000a1 
+ 00000323  0x000001ea call  0x00000098 
+ 00000324  0x000001eb jam  0x00000001 , 0x00004bfa 
+ 00000325  0x000001ec branch  0x00000107 
+ 00000326  0x000001ef fetch  0x00000001 , 0x00004bbd 
+ 00000327  0x000001f0 rtnne  0x000000ff 
+ 00000328  0x000001f1 jam  0x00000000 , 0x00004bbd 
+ 00000329  0x000001f2 branch  0x0000014c 
+ 00000330  0x000001f5 setarg  0x00000000 
+ 00000331  0x000001f6 store  0x00000002 , 0x00004bbb 
+ 00000332  0x000001f8 jam  0x0000003a , 0x00000a99 
+ 00000333  0x000001f9 branch  0x00007d86 
+ 00000334  0x000001fc call  0x000001d7 
+ 00000335  0x000001fd fetch  0x00000001 , 0x00004bb3 
+ 00000336  0x000001fe rtn  0x00000034 
+ 00000337  0x000001ff iforce  0x00000039 
+ 00000338  0x00000200 arg  0x00004b31 , 0x00000006 
+ 00000339  0x00000201 arg  0x00004b93 , 0x00000005 
+ 00000340  0x00000202 branch  0x00007f01 
+ 00000341  0x00000205 set1  0x00000026 , 0x00000000 
+ 00000342  0x00000206 call  0x00000159 
+ 00000343  0x00000208 jam  0x00000001 , 0x00004bc5 
+ 00000344  0x00000209 rtn 
+ 00000345  0x0000020c jam  0x00000020 , 0x000041de 
+ 00000346  0x0000020d jam  0x00000000 , 0x00004bb4 
+ 00000347  0x0000020e jam  0x0000004e , 0x00004bbf 
+ 00000348  0x0000020f fetch  0x00000004 , 0x00004bc1 
+ 00000349  0x00000210 branch  0x000001e4 
+ 00000350  0x00000213 fetch  0x00000001 , 0x00004bba 
+ 00000351  0x00000214 beq  0x00000001 , 0x00007fe7 
+ 00000352  0x00000215 fetch  0x00000001 , 0x00004bc5 
+ 00000353  0x00000216 beq  0x00000001 , 0x00000165 
+ 00000354  0x00000217 beq  0x00000002 , 0x00000168 
+ 00000355  0x00000218 beq  0x00000003 , 0x0000016b 
+ 00000356  0x00000219 branch  0x00002a8c 
+ 00000357  0x0000021c jam  0x00000011 , 0x00004bc5 
+ 00000358  0x0000021d jam  0x000000aa , 0x0000119e 
+ 00000359  0x0000021e branch  0x0000016d 
+ 00000360  0x00000220 jam  0x00000012 , 0x00004bc5 
+ 00000361  0x00000221 jam  0x00000055 , 0x0000119e 
+ 00000362  0x00000222 branch  0x0000016d 
+ 00000363  0x00000224 jam  0x00000013 , 0x00004bc5 
+ 00000364  0x00000225 jam  0x00000022 , 0x0000119e 
+ 00000365  0x00000227 fetch  0x00000001 , 0x00004bb6 
+ 00000366  0x00000228 and_into  0x00000007 , 0x0000003f 
+ 00000367  0x00000229 store  0x00000001 , 0x0000119f 
+ 00000368  0x0000022a fetch  0x00000004 , 0x00004bec 
+ 00000369  0x0000022b store  0x00000004 , 0x000011a0 
+ 00000370  0x0000022d jam  0x00000000 , 0x000011a4 
+ 00000371  0x0000022e arg  0x0000119e , 0x00000011 
+ 00000372  0x0000022f arg  0x00000007 , 0x00000002 
+ 00000373  0x00000230 call  0x000001d2 
+ 00000374  0x00000231 call  0x000000e8 
+ 00000375  0x00000232 branch  0x00007fe7 
+ 00000376  0x00000235 fetch  0x00000001 , 0x00004bc5 
+ 00000377  0x00000236 rtneq  0x000000ff 
+ 00000378  0x00000237 beq  0x00000011 , 0x0000017e 
+ 00000379  0x00000238 beq  0x00000012 , 0x00000180 
+ 00000380  0x00000239 beq  0x00000013 , 0x00000182 
+ 00000381  0x0000023a rtn 
+ 00000382  0x0000023e jam  0x00000002 , 0x00004bc5 
+ 00000383  0x0000023f branch  0x00000118 
+ 00000384  0x00000241 jam  0x00000003 , 0x00004bc5 
+ 00000385  0x00000242 branch  0x00000118 
+ 00000386  0x00000244 jam  0x000000ff , 0x00004bc5 
+ 00000387  0x00000245 jam  0x00000039 , 0x00000a99 
+ 00000388  0x00000246 call  0x00007d86 
+ 00000389  0x00000247 fetch  0x00000004 , 0x00004b95 
+ 00000390  0x00000248 call  0x000001e4 
+ 00000391  0x00000249 branch  0x00000118 
+ 00000392  0x0000024c set0  0x00000026 , 0x00000000 
+ 00000393  0x0000024d call  0x000001c8 
+ 00000394  0x0000024e fetch  0x00000001 , 0x00004bc5 
+ 00000395  0x0000024f rtnne  0x000000ff 
+ 00000396  0x00000250 call  0x0000019d 
+ 00000397  0x00000252 setarg  0x00000000 
+ 00000398  0x00000253 store  0x00000002 , 0x00004be2 
+ 00000399  0x00000255 call  0x00002afa 
+ 00000400  0x00000256 nop  0x000007d0 
+ 00000401  0x00000257 fetch  0x00000001 , 0x00004be2 
+ 00000402  0x00000258 beq  0x000000ff , 0x0000014c 
+ 00000403  0x00000259 call  0x00000123 
+ 00000404  0x0000025a nbranch  0x000001a6 , 0x00000018 
+ 00000405  0x0000025b nbranch  0x000001a6 , 0x0000002f 
+ 00000406  0x0000025d set1  0x00000026 , 0x00000000 
+ 00000407  0x0000025e setarg  0x00000000 
+ 00000408  0x0000025f store  0x00000002 , 0x00004be2 
+ 00000409  0x00000260 jam  0x0000003c , 0x00000a99 
+ 00000410  0x00000261 call  0x00007d86 
+ 00000411  0x00000262 call  0x0000011e 
+ 00000412  0x00000263 branch  0x0000006e 
+ 00000413  0x00000266 jam  0x000000ff , 0x0000119e 
+ 00000414  0x00000267 fetch  0x00000001 , 0x00004bb6 
+ 00000415  0x00000268 store  0x00000001 , 0x0000119f 
+ 00000416  0x00000269 fetch  0x00000004 , 0x00004bec 
+ 00000417  0x0000026a store  0x00000004 , 0x000011a0 
+ 00000418  0x0000026b arg  0x00000006 , 0x00000002 
+ 00000419  0x0000026c arg  0x0000119e , 0x00000011 
+ 00000420  0x0000026d call  0x000001d2 
+ 00000421  0x0000026e branch  0x000001f2 
+ 00000422  0x00000271 fetch  0x00000002 , 0x00004be2 
+ 00000423  0x00000272 increase  0x00000001 , 0x0000003f 
+ 00000424  0x00000273 store  0x00000002 , 0x00004be2 
+ 00000425  0x00000274 call  0x00000204 
+ 00000426  0x00000275 branch  0x0000018f 
+ 00000427  0x00000278 set0  0x00000026 , 0x00000000 
+ 00000428  0x00000279 call  0x000001c6 
+ 00000429  0x0000027a call  0x0000019d 
+ 00000430  0x0000027c jam  0x00000000 , 0x00004be2 
+ 00000431  0x0000027e call  0x00002afa 
+ 00000432  0x0000027f nop  0x000007d0 
+ 00000433  0x00000280 fetch  0x00000001 , 0x00004be2 
+ 00000434  0x00000281 beq  0x000000ff , 0x0000014c 
+ 00000435  0x00000282 call  0x00000123 
+ 00000436  0x00000283 nbranch  0x000001bc , 0x00000018 
+ 00000437  0x00000284 nbranch  0x000001bc , 0x0000002f 
+ 00000438  0x00000285 call  0x0000014e 
+ 00000439  0x00000286 fetch  0x00000004 , 0x00004bdd 
+ 00000440  0x00000287 fetcht  0x00000004 , 0x00004bc1 
+ 00000441  0x00000288 isub  0x00000002 , 0x0000003e 
+ 00000442  0x00000289 branch  0x00000155 , 0x00000005 
+ 00000443  0x0000028a branch  0x00000196 
+ 00000444  0x0000028d fetch  0x00000001 , 0x00004be2 
+ 00000445  0x0000028e increase  0x00000001 , 0x0000003f 
+ 00000446  0x0000028f store  0x00000001 , 0x00004be2 
+ 00000447  0x00000290 fetch  0x00000001 , 0x00004cf3 
+ 00000448  0x00000291 increase  0x00000001 , 0x0000003f 
+ 00000449  0x00000292 and_into  0x00000001 , 0x0000003f 
+ 00000450  0x00000293 store  0x00000001 , 0x00004cf3 
+ 00000451  0x00000294 beq  0x00000000 , 0x000001ca 
+ 00000452  0x00000295 beq  0x00000001 , 0x000001cc 
+ 00000453  0x00000296 rtn 
+ 00000454  0x00000299 jam  0x00000020 , 0x000041de 
+ 00000455  0x0000029a call  0x0000032b 
+ 00000456  0x0000029c call  0x000001e5 
+ 00000457  0x0000029d branch  0x00000204 
+ 00000458  0x000002a0 call  0x000001c6 
+ 00000459  0x000002a1 branch  0x000001af 
+ 00000460  0x000002a4 call  0x00000159 
+ 00000461  0x000002a5 branch  0x000001af 
+ 00000462  0x000002a8 set0  0x00000026 , 0x00000000 
+ 00000463  0x000002a9 call  0x000053ce 
+ 00000464  0x000002ab arg  0x00000003 , 0x00000007 
+ 00000465  0x000002ac branch  0x000043d2 
+ 00000466  0x000002af storet  0x00000001 , 0x00004bb5 
+ 00000467  0x000002b0 copy  0x00000002 , 0x00000039 
+ 00000468  0x000002b1 arg  0x00004b51 , 0x00000005 
+ 00000469  0x000002b2 copy  0x00000011 , 0x00000006 
+ 00000470  0x000002b3 branch  0x00007f01 
+ 00000471  0x000002b7 fetch  0x00000001 , 0x00004b30 
+ 00000472  0x000002b8 rshift3  0x0000003f , 0x0000003f 
+ 00000473  0x000002b9 store  0x00000001 , 0x00004bb3 
+ 00000474  0x000002bb increase  0x00000001 , 0x0000003f 
+ 00000475  0x000002bc arg  0x00004b30 , 0x00000006 
+ 00000476  0x000002bd iadd  0x00000006 , 0x00000006 
+ 00000477  0x000002be ifetch  0x00000003 , 0x00000006 
+ 00000478  0x000002bf store  0x00000003 , 0x00004bf2 
+ 00000479  0x000002c1 fetch  0x00000001 , 0x00004b30 
+ 00000480  0x000002c2 rshift  0x0000003f , 0x0000003f 
+ 00000481  0x000002c3 and  0x0000003f , 0x00000003 , 0x0000003f 
+ 00000482  0x000002c4 store  0x00000001 , 0x00004bf8 
+ 00000483  0x000002c5 rtn 
+ 00000484  0x000002c8 store  0x00000004 , 0x00004bdd 
+ 00000485  0x000002cb arg  0x00000000 , 0x00000011 
+ 00000486  0x000002cc arg  0x00000004 , 0x00000039 
+ 00000487  0x000002cd arg  0x00004bdd , 0x00000006 
+ 00000488  0x000002cf ifetch  0x00000001 , 0x00000006 
+ 00000489  0x000002d0 iadd  0x00000011 , 0x00000011 
+ 00000490  0x000002d1 loop  0x000001e8 
+ 00000491  0x000002d2 copy  0x00000011 , 0x0000003f 
+ 00000492  0x000002d3 store  0x00000002 , 0x00004c66 
+ 00000493  0x000002d4 fetch  0x00000001 , 0x00004c66 
+ 00000494  0x000002d5 fetcht  0x00000001 , 0x00004c67 
+ 00000495  0x000002d6 iadd  0x00000002 , 0x0000003f 
+ 00000496  0x000002d7 store  0x00000001 , 0x00004c68 
+ 00000497  0x000002d8 rtn 
+ 00000498  0x000002dd fetch  0x00000001 , 0x00004bb5 
+ 00000499  0x000002de increase  0x00000002 , 0x0000003f 
+ 00000500  0x000002df store  0x00000001 , 0x00004bb7 
+ 00000501  0x000002e1 fetch  0x00000001 , 0x00004bb6 
+ 00000502  0x000002e2 store  0x00000001 , 0x00004b71 
+ 00000503  0x000002e4 fetch  0x00000001 , 0x00004bb5 
+ 00000504  0x000002e5 lshift3  0x0000003f , 0x0000003f 
+ 00000505  0x000002e6 fetcht  0x00000001 , 0x00004bb4 
+ 00000506  0x000002e7 and  0x00000002 , 0x00000003 , 0x00000002 
+ 00000507  0x000002e8 lshift  0x00000002 , 0x00000002 
+ 00000508  0x000002e9 ior  0x00000002 , 0x0000003f 
+ 00000509  0x000002ea fetcht  0x00000001 , 0x00004bf1 
+ 00000510  0x000002eb iadd  0x00000002 , 0x0000003f 
+ 00000511  0x000002ec istore  0x00000001 , 0x00000005 
+ 00000512  0x000002ee fetch  0x00000001 , 0x00004bb5 
+ 00000513  0x000002ef iforce  0x00000039 
+ 00000514  0x000002f0 arg  0x00004b51 , 0x00000006 
+ 00000515  0x000002f1 branch  0x00007f01 
+ 00000516  0x000002f4 fetcht  0x00000001 , 0x00004bc0 
+ 00000517  0x000002f5 call  0x00000208 
+ 00000518  0x000002f6 storet  0x00000001 , 0x00004bc0 
+ 00000519  0x000002f7 rtn 
+ 00000520  0x000002fa call  0x0000020c 
+ 00000521  0x000002fb increase  0x00000001 , 0x00000002 
+ 00000522  0x000002fc and_into  0x00000003 , 0x00000002 
+ 00000523  0x000002fd rtn 
+ 00000524  0x00000300 fetch  0x00000001 , 0x00004bdd 
+ 00000525  0x00000301 and_into  0x00000003 , 0x0000003f 
+ 00000526  0x00000302 mul32  0x0000003f , 0x00000004 , 0x00000011 
+ 00000527  0x00000303 setarg  0x00004bc6 
+ 00000528  0x00000304 iadd  0x00000011 , 0x0000003f 
+ 00000529  0x00000305 iadd  0x00000002 , 0x00000006 
+ 00000530  0x00000306 ifetch  0x00000001 , 0x00000006 
+ 00000531  0x00000307 store  0x00000001 , 0x00004bbf 
+ 00000532  0x00000308 rtn 
+ 00000533  0x0000030b disable  0x00000009 
+ 00000534  0x0000030c disable  0x00000007 
+ 00000535  0x0000030d setarg  0x00555555 
+ 00000536  0x0000030e iforce  0x0000000f 
+ 00000537  0x0000030f fetch  0x00000001 , 0x00004bbf 
+ 00000538  0x00000310 reverse  0x0000003f , 0x00000002 
+ 00000539  0x00000311 set1  0x00000001 , 0x00000002 
+ 00000540  0x00000312 rshift  0x00000002 , 0x0000000e 
+ 00000541  0x00000313 rtn 
+ 00000542  0x00000316 call  0x000053c4 
+ 00000543  0x00000317 fetch  0x00000004 , 0x00004bdd 
+ 00000544  0x00000318 iforce  0x00000009 
+ 00000545  0x00000319 call  0x00002918 
+ 00000546  0x0000031a fetcht  0x00000001 , 0x00004bbf 
+ 00000547  0x0000031b call  0x0000291f 
+ 00000548  0x0000031c setarg  0x00000500 
+ 00000549  0x0000031d call  0x00002a8f 
+ 00000550  0x0000031e call  0x00002924 
+ 00000551  0x00000322 call  0x00000215 
+ 00000552  0x00000323 disable  0x0000002f 
+ 00000553  0x00000324 enable  0x0000000d 
+ 00000554  0x00000325 enable  0x00000021 
+ 00000555  0x00000326 disable  0x00000020 
+ 00000556  0x00000327 enable  0x00000010 
+ 00000557  0x00000328 fetch  0x00000002 , 0x00004bb8 
+ 00000558  0x00000329 iforce  0x0000001b 
+ 00000559  0x0000032a correlate  0x0000003e , 0x00000003 
+ 00000560  0x0000032b nbranch  0x00000267 , 0x00000018 
+ 00000561  0x0000032e disable  0x0000000d 
+ 00000562  0x0000032f enable  0x0000000b 
+ 00000563  0x00000330 enable  0x00000007 
+ 00000564  0x00000331 enable  0x00000009 
+ 00000565  0x00000332 call  0x00000260 
+ 00000566  0x00000333 store  0x00000001 , 0x00004c69 
+ 00000567  0x00000334 fetcht  0x00000001 , 0x00004c68 
+ 00000568  0x00000335 isub  0x00000002 , 0x0000003e 
+ 00000569  0x00000336 nbranch  0x00000263 , 0x00000005 
+ 00000570  0x00000337 call  0x00000260 
+ 00000571  0x00000338 store  0x00000001 , 0x00004b2f 
+ 00000572  0x00000339 fetch  0x00000001 , 0x00004bfb 
+ 00000573  0x0000033a sub  0x0000003f , 0x00000002 , 0x0000003e 
+ 00000574  0x0000033b branch  0x00000243 , 0x00000005 
+ 00000575  0x0000033c fetch  0x00000001 , 0x00004b2f 
+ 00000576  0x0000033d fetcht  0x00000001 , 0x00004bb6 
+ 00000577  0x0000033e icompare  0x00000007 , 0x00000002 
+ 00000578  0x0000033f nbranch  0x00000263 , 0x00000001 
+ 00000579  0x00000341 call  0x00000260 
+ 00000580  0x00000342 istore  0x00000001 , 0x00000005 
+ 00000581  0x00000343 rshift3  0x0000003f , 0x0000003f 
+ 00000582  0x00000344 and  0x0000003f , 0x0000001f , 0x00000039 
+ 00000583  0x00000345 branch  0x0000024b , 0x00000005 
+ 00000584  0x00000347 call  0x00000260 
+ 00000585  0x00000348 istore  0x00000001 , 0x00000005 
+ 00000586  0x00000349 loop  0x00000248 
+ 00000587  0x0000034c copy  0x00000005 , 0x00000011 
+ 00000588  0x0000034d call  0x00000260 
+ 00000589  0x0000034e store  0x00000001 , 0x00004cf0 
+ 00000590  0x0000034f copy  0x00000011 , 0x00000005 
+ 00000591  0x00000350 parse  0x00000003 , 0x00000000 , 0x00000018 
+ 00000592  0x00000351 enable  0x00000010 
+ 00000593  0x00000352 arg  0x00000664 , 0x0000001b 
+ 00000594  0x00000353 rshift32  0x0000003f , 0x0000003f 
+ 00000595  0x00000354 rshift16  0x0000003f , 0x0000003f 
+ 00000596  0x00000355 istore  0x00000003 , 0x00000005 
+ 00000597  0x00000356 disable  0x0000000b 
+ 00000598  0x00000357 branch  0x00000263 , 0x00000006 
+ 00000599  0x0000035a enable  0x0000002f 
+ 00000600  0x0000035b fetch  0x00000001 , 0x00000017 
+ 00000601  0x0000035c add  0x0000003f , 0x00000000 , 0x00000011 
+ 00000602  0x0000035d call  0x00002981 
+ 00000603  0x0000035e disable  0x0000000d 
+ 00000604  0x0000035f call  0x00002918 
+ 00000605  0x00000360 fetch  0x00000001 , 0x00004cf0 
+ 00000606  0x00000361 call  0x0000001e 
+ 00000607  0x00000362 rtn 
+ 00000608  0x00000365 parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00000609  0x00000366 rshift3  0x0000000c , 0x0000003f 
+ 00000610  0x00000367 rtn 
+ 00000611  0x0000036a disable  0x0000001b 
+ 00000612  0x0000036b disable  0x0000000b 
+ 00000613  0x0000036c call  0x0000264d 
+ 00000614  0x0000036d rtn 
+ 00000615  0x00000370 branch  0x00000263 
+ 00000616  0x00000373 call  0x00002918 
+ 00000617  0x00000374 fetcht  0x00000001 , 0x00004bbf 
+ 00000618  0x00000375 branch  0x00002933 
+ 00000619  0x00000378 call  0x000053c4 
+ 00000620  0x00000379 fetch  0x00000004 , 0x00004bdd 
+ 00000621  0x0000037a iforce  0x00000009 
+ 00000622  0x0000037b call  0x00000215 
+ 00000623  0x0000037c call  0x00000268 
+ 00000624  0x0000037d set1  0x00000000 , 0x00000015 
+ 00000625  0x0000037e enable  0x0000001d 
+ 00000626  0x0000037f enable  0x00000020 
+ 00000627  0x00000380 disable  0x00000021 
+ 00000628  0x00000383 rshift16  0x00000009 , 0x0000003f 
+ 00000629  0x00000384 rshift8  0x0000003f , 0x0000003f 
+ 00000630  0x00000385 rshift4  0x0000003f , 0x0000003f 
+ 00000631  0x00000386 inject  0x00000003 , 0x00000028 
+ 00000632  0x00000387 disable  0x0000001d 
+ 00000633  0x00000388 enable  0x0000001b 
+ 00000634  0x00000389 enable  0x00000007 
+ 00000635  0x0000038a enable  0x00000009 
+ 00000636  0x0000038b fetch  0x00000001 , 0x00004c68 
+ 00000637  0x0000038c inject  0x00000003 , 0x00000008 
+ 00000638  0x0000038d fetch  0x00000001 , 0x00004bb7 
+ 00000639  0x0000038e iforce  0x00000039 
+ 00000640  0x0000038f arg  0x00004b71 , 0x00000006 
+ 00000641  0x00000391 ifetch  0x00000001 , 0x00000006 
+ 00000642  0x00000392 inject  0x00000003 , 0x00000008 
+ 00000643  0x00000393 loop  0x00000281 
+ 00000644  0x00000396 enable  0x00000008 
+ 00000645  0x00000397 inject  0x00000003 , 0x00000018 
+ 00000646  0x00000398 disable  0x00000008 
+ 00000647  0x00000399 until  0x0000003e , 0x00000027 
+ 00000648  0x0000039a nop  0x00000064 
+ 00000649  0x0000039b disable  0x0000001d 
+ 00000650  0x0000039c disable  0x0000001b 
+ 00000651  0x0000039d rtn 
+ 00000652  0x000003a0 call  0x00007fe9 
+ 00000653  0x000003a1 fetcht  0x00000004 , 0x00004bd6 
+ 00000654  0x000003a2 copy  0x00000022 , 0x0000003f 
+ 00000655  0x000003a3 isub  0x00000002 , 0x0000003e 
+ 00000656  0x000003a4 ncall  0x00002d18 , 0x00000002 
+ 00000657  0x000003a5 copy  0x0000003f , 0x00000012 
+ 00000658  0x000003a6 fetch  0x00000004 , 0x00004bd6 
+ 00000659  0x000003a7 fetcht  0x00000001 , 0x00004bda 
+ 00000660  0x000003a8 iadd  0x00000002 , 0x00000002 
+ 00000661  0x000003a9 copy  0x00000012 , 0x0000003f 
+ 00000662  0x000003aa isub  0x00000002 , 0x0000003e 
+ 00000663  0x000003ab nrtn  0x00000002 
+ 00000664  0x000003ac set0  0x0000001c , 0x0000003f 
+ 00000665  0x000003ad store  0x00000004 , 0x00004bd6 
+ 00000666  0x000003ae branch  0x00007fe7 
+ 00000667  0x000003b1 call  0x000029bb 
+ 00000668  0x000003b2 rtn  0x00000034 
+ 00000669  0x000003b3 fetcht  0x00000001 , 0x00004c6f 
+ 00000670  0x000003b4 arg  0x00000d9e , 0x00000011 
+ 00000671  0x000003b5 call  0x000002a2 
+ 00000672  0x000003b6 storet  0x00000001 , 0x00004c6f 
+ 00000673  0x000003b7 rtn 
+ 00000674  0x000003ba copy  0x00000011 , 0x0000003f 
+ 00000675  0x000003bb iadd  0x00000002 , 0x00000005 
+ 00000676  0x000003bc fetch  0x00000001 , 0x00000018 
+ 00000677  0x000003bd istore  0x00000001 , 0x00000005 
+ 00000678  0x000003be increase  0x00000001 , 0x00000002 
+ 00000679  0x000003bf and_into  0x00000007 , 0x00000002 
+ 00000680  0x000003c0 rtn 
+ 00000681  0x000003c2 arg  0x00000000 , 0x00000002 
+ 00000682  0x000003c3 arg  0x00000008 , 0x00000039 
+ 00000683  0x000003c4 copy  0x00000011 , 0x00000006 
+ 00000684  0x000003c6 ifetch  0x00000001 , 0x00000006 
+ 00000685  0x000003c7 iadd  0x00000002 , 0x00000002 
+ 00000686  0x000003c8 loop  0x000002ac 
+ 00000687  0x000003c9 rshift3  0x00000002 , 0x0000003f 
+ 00000688  0x000003ca copy  0x0000003f , 0x00000002 
+ 00000689  0x000003cb rtnmark0  0x00000026 
+ 00000690  0x000003cd div  0x0000003f , 0x0000000a 
+ 00000691  0x000003ce call  0x00007f86 
+ 00000692  0x000003cf quotient  0x0000003f 
+ 00000693  0x000003d0 lshift4  0x0000003f , 0x0000003f 
+ 00000694  0x000003d1 remainder  0x00000002 
+ 00000695  0x000003d2 ior  0x00000002 , 0x00000002 
+ 00000696  0x000003d3 rtn 
+ 00000697  0x000003d4 rtn 
+ 00000698  0x000003d8 rtnmark1  0x00000026 
+ 00000699  0x000003d9 call  0x000002c3 
+ 00000700  0x000003da fetch  0x00000001 , 0x00004040 
+ 00000701  0x000003db bbit0  0x00000000 , 0x000002c0 
+ 00000702  0x000003dc fetch  0x00000001 , 0x000000a0 
+ 00000703  0x000003dd nrtn  0x00000034 
+ 00000704  0x000003df setarg  0x00000000 
+ 00000705  0x000003e0 store  0x00000008 , 0x000000a1 
+ 00000706  0x000003e1 rtn 
+ 00000707  0x000003e4 call  0x000002cc 
+ 00000708  0x000003e5 call  0x000002c0 
+ 00000709  0x000003e7 call  0x00003ebf 
+ 00000710  0x000003e8 hfetch  0x00000004 , 0x00008070 
+ 00000711  0x000003e9 hfetcht  0x00000004 , 0x00008078 
+ 00000712  0x000003ea ior  0x00000002 , 0x00000002 
+ 00000713  0x000003eb invert  0x00000002 , 0x00000002 
+ 00000714  0x000003ec hstoret  0x00000004 , 0x0000807c 
+ 00000715  0x000003ed rtn 
+ 00000716  0x000003f0 fetch  0x00000001 , 0x00004afe 
+ 00000717  0x000003f1 rtn  0x00000034 
+ 00000718  0x000003f2 branch  0x000003c6 
+ 00000719  0x000003f5 call  0x00003416 
+ 00000720  0x000003f6 branch  0x000002d7 , 0x0000002b 
+ 00000721  0x000003f7 fetch  0x00000001 , 0x000041de 
+ 00000722  0x000003f8 store  0x00000001 , 0x00004c6c 
+ 00000723  0x000003f9 call  0x00000409 
+ 00000724  0x000003fa fetch  0x00000001 , 0x00004685 
+ 00000725  0x000003fb store  0x00000001 , 0x000046da 
+ 00000726  0x000003fc call  0x000043ca 
+ 00000727  0x000003fe call  0x000002dc 
+ 00000728  0x000003ff branch  0x000074b9 
+ 00000729  0x00000402 fetch  0x00000001 , 0x00004c6c 
+ 00000730  0x00000403 store  0x00000001 , 0x000041de 
+ 00000731  0x00000404 rtn 
+ 00000732  0x00000407 ncall  0x0000031b , 0x0000002b 
+ 00000733  0x00000408 call  0x000002fa 
+ 00000734  0x00000409 rtn  0x0000002b 
+ 00000735  0x0000040a call  0x00000350 
+ 00000736  0x0000040b fetch  0x00000001 , 0x00004b26 
+ 00000737  0x0000040c bbit1  0x00000002 , 0x000002e4 
+ 00000738  0x0000040d call  0x00004083 
+ 00000739  0x0000040e beq  0x00000005 , 0x000002e8 
+ 00000740  0x00000410 branch  0x00000338 
+ 00000741  0x00000413 call  0x000002d9 
+ 00000742  0x00000414 fetch  0x00000001 , 0x00004210 
+ 00000743  0x00000415 rtn 
+ 00000744  0x0000041a fetch  0x00000004 , 0x000046d3 
+ 00000745  0x0000041b rtnbit0  0x00000011 
+ 00000746  0x0000041c rtnbit1  0x00000003 
+ 00000747  0x0000041d rtnmark1  0x00000026 
+ 00000748  0x0000041e call  0x00004482 
+ 00000749  0x0000041f arg  0x00000003 , 0x00000007 
+ 00000750  0x00000420 call  0x000043ce 
+ 00000751  0x00000421 setarg  0x00000000 
+ 00000752  0x00000422 store  0x00000002 , 0x000046ae 
+ 00000753  0x00000423 store  0x00000001 , 0x000046b4 
+ 00000754  0x00000424 store  0x00000002 , 0x00004be2 
+ 00000755  0x00000425 call  0x000042ca 
+ 00000756  0x00000426 branch  0x00000155 
+ 00000757  0x00000429 fetch  0x00000004 , 0x000046d3 
+ 00000758  0x0000042a bbit0  0x00000014 , 0x00003d66 
+ 00000759  0x0000042b fetch  0x00000001 , 0x0000477a 
+ 00000760  0x0000042c beq  0x000000ff , 0x00003d66 
+ 00000761  0x0000042d branch  0x00003d80 
+ 00000762  0x00000430 jam  0x00000076 , 0x00004212 
+ 00000763  0x00000431 branch  0x00003d36 
+ 00000764  0x00000434 call  0x000002fa 
+ 00000765  0x00000435 call  0x000040c0 
+ 00000766  0x00000436 fetch  0x00000001 , 0x000046e0 
+ 00000767  0x00000437 beq  0x00000005 , 0x000040d5 
+ 00000768  0x00000439 call  0x000040d9 
+ 00000769  0x0000043a beq  0x00000030 , 0x0000030a 
+ 00000770  0x0000043b beq  0x00000031 , 0x0000030c 
+ 00000771  0x0000043c call  0x000040d1 
+ 00000772  0x0000043d nop  0x000003e8 
+ 00000773  0x0000043e branch  0x00000300 
+ 00000774  0x00000441 jam  0x00000001 , 0x00004afe 
+ 00000775  0x00000442 call  0x0000640f 
+ 00000776  0x00000443 call  0x000002fc 
+ 00000777  0x00000444 branch  0x00006411 
+ 00000778  0x00000447 call  0x00000311 
+ 00000779  0x00000448 branch  0x000040e0 
+ 00000780  0x0000044c call  0x00000311 
+ 00000781  0x0000044d fetch  0x00000001 , 0x000046de 
+ 00000782  0x0000044e beq  0x00000070 , 0x000040e8 
+ 00000783  0x0000044f jam  0x00000001 , 0x000046e0 
+ 00000784  0x00000450 rtn 
+ 00000785  0x00000453 setarg  0x00008006 
+ 00000786  0x00000454 call  0x00006413 
+ 00000787  0x00000455 nop  0x00002ee0 
+ 00000788  0x00000456 branch  0x000002f5 
+ 00000789  0x00000458 setarg  0x00000006 
+ 00000790  0x00000459 call  0x00006414 
+ 00000791  0x0000045a or  0x0000003f , 0x00000008 , 0x0000003f 
+ 00000792  0x0000045b lshift8  0x0000003f , 0x0000003f 
+ 00000793  0x0000045c add  0x0000003f , 0x00000006 , 0x0000003f 
+ 00000794  0x0000045d branch  0x00006413 
+ 00000795  0x00000460 call  0x0000008e 
+ 00000796  0x00000462 hfetch  0x00000001 , 0x00008a00 
+ 00000797  0x00000463 set0  0x00000004 , 0x0000003f 
+ 00000798  0x00000464 hstore  0x00000001 , 0x00008a00 
+ 00000799  0x00000465 call  0x00003e1e 
+ 00000800  0x00000467 setarg  0x00001802 
+ 00000801  0x00000468 store  0x00000002 , 0x000040bd 
+ 00000802  0x0000046a setarg  0x00000000 
+ 00000803  0x0000046b store  0x00000002 , 0x00004154 
+ 00000804  0x0000046c call  0x00003e54 
+ 00000805  0x0000046e call  0x0000659c 
+ 00000806  0x0000046f fetch  0x00000004 , 0x000046d3 
+ 00000807  0x00000470 isolate1  0x00000019 , 0x0000003f 
+ 00000808  0x00000471 ncall  0x000065c2 , 0x00000001 
+ 00000809  0x00000472 call  0x0000443f 
+ 00000810  0x00000473 call  0x0000032d 
+ 00000811  0x00000475 call  0x00000376 
+ 00000812  0x00000476 branch  0x000065df 
+ 00000813  0x0000047a call  0x000033c4 
+ 00000814  0x0000047b branch  0x00004316 , 0x00000005 
+ 00000815  0x0000047c branch  0x00003dcb 
+ 00000816  0x0000047f arg  0x00000002 , 0x00000002 
+ 00000817  0x00000480 arg  0x00000aaa , 0x00000011 
+ 00000818  0x00000481 arg  0x00000062 , 0x00000012 
+ 00000819  0x00000482 branch  0x000065d1 
+ 00000820  0x00000485 arg  0x00000002 , 0x00000002 
+ 00000821  0x00000486 arg  0x00000a9a , 0x00000011 
+ 00000822  0x00000487 arg  0x00000062 , 0x00000012 
+ 00000823  0x00000488 branch  0x000033c8 
+ 00000824  0x0000048b branch  0x000001ab 
+ 00000825  0x0000048c fetch  0x00000004 , 0x000046d3 
+ 00000826  0x0000048d bbit0  0x0000001e , 0x00000340 
+ 00000827  0x0000048e fetch  0x00000001 , 0x00000abd 
+ 00000828  0x0000048f isolate0  0x00000003 , 0x0000003f 
+ 00000829  0x00000490 nbranch  0x00000340 , 0x00000001 
+ 00000830  0x00000491 call  0x000002fc 
+ 00000831  0x00000492 call  0x00000315 
+ 00000832  0x00000494 fetch  0x00000001 , 0x0000471f 
+ 00000833  0x00000495 store  0x00000001 , 0x0000471e 
+ 00000834  0x0000049a fetch  0x00000004 , 0x000046d3 
+ 00000835  0x0000049b rtnbit0  0x00000011 
+ 00000836  0x0000049c call  0x00000347 
+ 00000837  0x0000049d branch  0x000001ab , 0x00000028 
+ 00000838  0x0000049e branch  0x00000188 
+ 00000839  0x000004a1 arg  0x00000002 , 0x00000039 
+ 00000840  0x000004a2 arg  0x00004bdd , 0x00000006 
+ 00000841  0x000004a4 call  0x00007fe7 
+ 00000842  0x000004a5 setarg  0x0000ffff 
+ 00000843  0x000004a7 ifetcht  0x00000002 , 0x00000006 
+ 00000844  0x000004a8 isub  0x00000002 , 0x0000003e 
+ 00000845  0x000004a9 ncall  0x00007fe9 , 0x00000005 
+ 00000846  0x000004aa loop  0x0000034b 
+ 00000847  0x000004ab rtn 
+ 00000848  0x000004ae setarg  0x00000367 
+ 00000849  0x000004af store  0x00000002 , 0x000041f5 
+ 00000850  0x000004b0 setarg  0x00000355 
+ 00000851  0x000004b1 store  0x00000002 , 0x00004ce6 
+ 00000852  0x000004b3 rtn 
+ 00000853  0x000004b6 branch  0x0000035a 
+ 00000854  0x000004b9 call  0x00004401 
+ 00000855  0x000004ba fetch  0x00000002 , 0x0000469f 
+ 00000856  0x000004bb rtn  0x00000034 
+ 00000857  0x000004bc branch  0x0000006e 
+ 00000858  0x000004bf call  0x0000047c 
+ 00000859  0x000004c0 branch  0x00000357 
+ 00000860  0x000004c5 fetch  0x00000002 , 0x0000469f 
+ 00000861  0x000004c6 rtn  0x00000034 
+ 00000862  0x000004c7 jam  0x00000001 , 0x00004806 
+ 00000863  0x000004c8 jam  0x00000002 , 0x00004807 
+ 00000864  0x000004c9 rtn 
+ 00000865  0x000004cd call  0x00005814 
+ 00000866  0x000004ce jam  0x00000001 , 0x0000479c 
+ 00000867  0x000004cf branch  0x00000311 
+ 00000868  0x000004d2 call  0x00007e34 
+ 00000869  0x000004d3 call  0x00003d6a 
+ 00000870  0x000004d4 branch  0x00003ee0 
+ 00000871  0x000004d7 copy  0x00000013 , 0x0000003f 
+ 00000872  0x000004d8 beq  0x00000039 , 0x0000036c 
+ 00000873  0x000004d9 beq  0x0000003a , 0x0000037a 
+ 00000874  0x000004da beq  0x0000003c , 0x00000385 
+ 00000875  0x000004db branch  0x0000417d 
+ 00000876  0x000004e1 jam  0x00000001 , 0x0000478b 
+ 00000877  0x000004e2 arg  0x00000003 , 0x00000007 
+ 00000878  0x000004e3 call  0x000043d2 
+ 00000879  0x000004e4 setarg  0x00000000 
+ 00000880  0x000004e5 store  0x00000002 , 0x00004707 
+ 00000881  0x000004e6 jam  0x00000000 , 0x000046a7 
+ 00000882  0x000004e8 call  0x0000405d 
+ 00000883  0x000004ea call  0x0000006e 
+ 00000884  0x000004eb call  0x00000376 
+ 00000885  0x000004ec branch  0x000065d1 
+ 00000886  0x000004ef arg  0x00004bdd , 0x00000011 
+ 00000887  0x000004f0 arg  0x0000005b , 0x00000012 
+ 00000888  0x000004f1 arg  0x00000004 , 0x00000002 
+ 00000889  0x000004f2 rtn 
+ 00000890  0x000004f5 jam  0x00000000 , 0x00004cf5 
+ 00000891  0x000004f6 call  0x000002d9 
+ 00000892  0x000004f7 call  0x000001ce 
+ 00000893  0x000004f8 branch  0x0000659a 
+ 00000894  0x000004f9 jam  0x00000000 , 0x000041bd 
+ 00000895  0x000004fa call  0x00004316 
+ 00000896  0x000004fb arg  0x00000003 , 0x00000039 
+ 00000897  0x000004fc arg  0x00004722 , 0x00000006 
+ 00000898  0x000004fd call  0x00000349 
+ 00000899  0x000004fe branch  0x000003c2 , 0x00000028 
+ 00000900  0x000004ff branch  0x000002e5 
+ 00000901  0x00000502 branch  0x00003f8d 
+ 00000902  0x00000506 enable  0x00000028 
+ 00000903  0x00000507 hfetch  0x00000004 , 0x00008138 
+ 00000904  0x00000508 setflag  0x00000028 , 0x0000001a , 0x0000003f 
+ 00000905  0x00000509 hstore  0x00000004 , 0x0000804c 
+ 00000906  0x0000050a call  0x00002c21 
+ 00000907  0x0000050b call  0x00000390 
+ 00000908  0x0000050c call  0x000074bd 
+ 00000909  0x0000050d call  0x00004482 
+ 00000910  0x0000050e call  0x00003e9f 
+ 00000911  0x0000050f branch  0x000002c5 
+ 00000912  0x00000512 fetch  0x00000001 , 0x00004afe 
+ 00000913  0x00000513 rtn  0x00000034 
+ 00000914  0x00000514 jam  0x00000000 , 0x00004afe 
+ 00000915  0x00000515 branch  0x00000315 
+ 00000916  0x00000519 call  0x00000399 
+ 00000917  0x0000051a call  0x000003b9 
+ 00000918  0x0000051b call  0x0000039e 
+ 00000919  0x0000051c call  0x00004234 
+ 00000920  0x0000051d branch  0x0000423a 
+ 00000921  0x00000523 arg  0x00004807 , 0x00000013 
+ 00000922  0x00000524 arg  0x0000039c , 0x00000012 
+ 00000923  0x00000525 branch  0x0000336d 
+ 00000924  0x00000527 jam  0x00000000 , 0x00004806 
+ 00000925  0x00000528 rtn 
+ 00000926  0x0000052b fetch  0x00000001 , 0x000046f5 
+ 00000927  0x0000052c bbit1  0x00000004 , 0x00004394 
+ 00000928  0x0000052e call  0x00004083 
+ 00000929  0x0000052f beq  0x00000007 , 0x000003aa 
+ 00000930  0x00000531 fetch  0x00000001 , 0x00004685 
+ 00000931  0x00000532 store  0x00000001 , 0x000046da 
+ 00000932  0x00000533 fetch  0x00000001 , 0x000046db 
+ 00000933  0x00000534 rtneq  0x00000001 
+ 00000934  0x00000535 jam  0x00000001 , 0x000046db 
+ 00000935  0x00000536 arg  0x00000009 , 0x00000007 
+ 00000936  0x00000537 call  0x000043d2 
+ 00000937  0x00000538 branch  0x000043ca 
+ 00000938  0x0000053a jam  0x00000028 , 0x0000479e 
+ 00000939  0x0000053b call  0x000003ad 
+ 00000940  0x0000053c branch  0x000043b0 
+ 00000941  0x0000053f arg  0x000046da , 0x00000013 
+ 00000942  0x00000540 arg  0x000003b0 , 0x00000012 
+ 00000943  0x00000541 branch  0x0000336d 
+ 00000944  0x00000544 fetch  0x00000002 , 0x00004682 
+ 00000945  0x00000545 isolate1  0x0000000b , 0x0000003f 
+ 00000946  0x00000546 call  0x000042d4 , 0x00000001 
+ 00000947  0x00000547 fetch  0x00000002 , 0x00004682 
+ 00000948  0x00000548 isolate1  0x00000007 , 0x0000003f 
+ 00000949  0x00000549 call  0x00004392 , 0x00000001 
+ 00000950  0x0000054a arg  0x00000009 , 0x00000007 
+ 00000951  0x0000054b call  0x000043ce 
+ 00000952  0x0000054c branch  0x000043b8 
+ 00000953  0x0000054f fetch  0x00000001 , 0x0000479d 
+ 00000954  0x00000550 rtn  0x00000034 
+ 00000955  0x00000551 fetch  0x00000001 , 0x0000479e 
+ 00000956  0x00000552 branch  0x000003c0 , 0x00000034 
+ 00000957  0x00000553 increase  0xffffffff , 0x0000003f 
+ 00000958  0x00000554 store  0x00000001 , 0x0000479e 
+ 00000959  0x00000555 rtn 
+ 00000960  0x00000557 jam  0x00000000 , 0x0000479d 
+ 00000961  0x00000558 branch  0x0000340a 
+ 00000962  0x0000055a jam  0x00000001 , 0x0000479d 
+ 00000963  0x0000055b jam  0x00000028 , 0x0000479e 
+ 00000964  0x0000055c rtn 
+ 00000965  0x00000561 call  0x0000424a 
+ 00000966  0x00000563 fetch  0x00000001 , 0x000046e0 
+ 00000967  0x00000564 beq  0x00000006 , 0x000003c9 
+ 00000968  0x00000565 branch  0x00003d81 
+ 00000969  0x00000568 fetch  0x00000001 , 0x0000477a 
+ 00000970  0x00000569 call  0x000003cf , 0x00000034 
+ 00000971  0x0000056a fetch  0x00000001 , 0x0000477a 
+ 00000972  0x0000056b beq  0x00000001 , 0x00003d8a 
+ 00000973  0x0000056d beq  0x00000003 , 0x00003d8e 
+ 00000974  0x0000056e branch  0x00003d8c 
+ 00000975  0x00000570 jam  0x00000001 , 0x0000477a 
+ 00000976  0x00000571 rtn 
+ 00000977  0x00000574 disable  0x00000028 
+ 00000978  0x00000575 setarg  0x00000000 
+ 00000979  0x00000576 store  0x00000006 , 0x0000469b 
+ 00000980  0x00000577 call  0x00003fb5 
+ 00000981  0x00000578 call  0x00004079 
+ 00000982  0x00000579 call  0x0000407e 
+ 00000983  0x0000057a call  0x00004099 
+ 00000984  0x0000057b nrtn  0x00000028 
+ 00000985  0x0000057c branch  0x00003fa0 
+ 00000986  0x0000057f jam  0x00000000 , 0x0000479d 
+ 00000987  0x00000580 jam  0x00000000 , 0x0000479e 
+ 00000988  0x00000581 isolate1  0x00000026 , 0x00000000 
+ 00000989  0x00000582 call  0x000001ce , 0x00000001 
+ 00000990  0x00000583 branch  0x0000426d 
+ 00000991  0x00000587 call  0x000002d9 
+ 00000992  0x00000588 jam  0x00000000 , 0x0000479c 
+ 00000993  0x00000589 fetch  0x00000002 , 0x00004682 
+ 00000994  0x0000058a bbit1  0x0000000b , 0x000003e5 
+ 00000995  0x0000058b fetch  0x00000004 , 0x000046d3 
+ 00000996  0x0000058c bbit0  0x00000018 , 0x000003e5 
+ 00000997  0x0000058e call  0x00003418 
+ 00000998  0x0000058f fetch  0x00000002 , 0x00004687 
+ 00000999  0x00000590 store  0x00000002 , 0x000046ac 
+ 00001000  0x00000591 jam  0x00000006 , 0x0000016d 
+ 00001001  0x00000592 setarg  0x00000000 
+ 00001002  0x00000593 store  0x00000002 , 0x000046b0 
+ 00001003  0x00000594 store  0x00000002 , 0x000046ae 
+ 00001004  0x00000595 arg  0x00000007 , 0x00000007 
+ 00001005  0x00000596 call  0x000043ce 
+ 00001006  0x00000597 call  0x000043ca 
+ 00001007  0x00000598 branch  0x000042c4 
+ 00001008  0x0000059c setarg  0x00000000 
+ 00001009  0x0000059d store  0x00000002 , 0x000046ac 
+ 00001010  0x0000059e call  0x00000311 
+ 00001011  0x0000059f branch  0x000042cb 
+ 00001012  0x000005a3 hfetch  0x00000001 , 0x00008077 
+ 00001013  0x000005a4 and_into  0x000000fd , 0x0000003f 
+ 00001014  0x000005a5 hstore  0x00000001 , 0x00008077 
+ 00001015  0x000005a6 hfetcht  0x00000001 , 0x00008073 
+ 00001016  0x000005a7 or_into  0x00000002 , 0x00000002 
+ 00001017  0x000005a8 hstoret  0x00000001 , 0x00008073 
+ 00001018  0x000005a9 call  0x000063ee 
+ 00001019  0x000005aa and_into  0x000000fd , 0x00000002 
+ 00001020  0x000005ab nop  0x0000000d 
+ 00001021  0x000005ac call  0x000063f2 
+ 00001022  0x000005ad hstoret  0x00000001 , 0x00008073 
+ 00001023  0x000005ae rtn 
+ 00001024  0x000005b1 call  0x000062bc 
+ 00001025  0x000005b2 nbranch  0x00007ddb , 0x00000034 
+ 00001026  0x000005b3 fetch  0x00000001 , 0x00000a99 
+ 00001027  0x000005b4 bmark0  0x00000009 , 0x00007dd6 
+ 00001028  0x000005b5 beq  0x00000012 , 0x00000406 
+ 00001029  0x000005b6 branch  0x00007dca 
+ 00001030  0x000005b9 call  0x00005890 
+ 00001031  0x000005ba nrtn  0x00000034 
+ 00001032  0x000005bb branch  0x00005abf 
+ 00001033  0x000005c0 jam  0x00000001 , 0x00004cf1 
+ 00001034  0x000005c1 jam  0x00000000 , 0x00004cee 
+ 00001035  0x000005c2 rtn 
+ 00001036  0x000005c4 fetch  0x00000001 , 0x00004cee 
+ 00001037  0x000005c5 increase  0x00000001 , 0x0000003f 
+ 00001038  0x000005c6 store  0x00000001 , 0x00004cee 
+ 00001039  0x000005c7 rtn 
+ 00001040  0x000005c9 fetch  0x00000001 , 0x00004cee 
+ 00001041  0x000005ca sub  0x0000003f , 0x00000002 , 0x0000003e 
+ 00001042  0x000005cb ncall  0x00000418 , 0x00000002 
+ 00001043  0x000005cc fetch  0x00000001 , 0x00004cee 
+ 00001044  0x000005cd rtneq  0x00000000 
+ 00001045  0x000005ce increase  0xffffffff , 0x0000003f 
+ 00001046  0x000005cf store  0x00000001 , 0x00004cee 
+ 00001047  0x000005d0 rtn 
+ 00001048  0x000005d2 jam  0x00000003 , 0x00004cee 
+ 00001049  0x000005d3 rtn 
+ 00001050  0x000005d6 rtn 
+ 00001051  0x000005d7 fetch  0x00000002 , 0x00004682 
+ 00001052  0x000005d8 rtnbit1  0x0000000b 
+ 00001053  0x000005d9 rtnbit1  0x00000007 
+ 00001054  0x000005da rtnbit1  0x00000006 
+ 00001055  0x000005dc arg  0x00004c77 , 0x00000011 
+ 00001056  0x000005dd call  0x000002a9 
+ 00001057  0x000005de storet  0x00000001 , 0x00004cef 
+ 00001058  0x000005e0 setarg  0x00000082 
+ 00001059  0x000005e1 bmark1  0x00000026 , 0x00000425 
+ 00001060  0x000005e2 setarg  0x00000080 
+ 00001061  0x000005e4 isub  0x00000002 , 0x0000003e 
+ 00001062  0x000005e5 nbranch  0x0000043d , 0x00000002 
+ 00001063  0x000005e7 fetch  0x00000001 , 0x00004cee 
+ 00001064  0x000005e8 sub  0x0000003f , 0x00000002 , 0x0000003e 
+ 00001065  0x000005e9 nbranch  0x0000042d , 0x00000002 
+ 00001066  0x000005ea fetch  0x00000001 , 0x00004cee 
+ 00001067  0x000005eb beq  0x00000000 , 0x0000043e 
+ 00001068  0x000005ec rtn 
+ 00001069  0x000005ef fetch  0x00000001 , 0x00004cee 
+ 00001070  0x000005f0 rtnne  0x00000020 
+ 00001071  0x000005f1 jam  0x00000000 , 0x00004cee 
+ 00001072  0x000005f3 fetcht  0x00000001 , 0x00004cef 
+ 00001073  0x000005f4 setarg  0x00000077 
+ 00001074  0x000005f5 bmark1  0x00000026 , 0x00000434 
+ 00001075  0x000005f6 setarg  0x00000075 
+ 00001076  0x000005f8 isub  0x00000002 , 0x0000003e 
+ 00001077  0x000005f9 nrtn  0x00000002 
+ 00001078  0x000005fa fetch  0x00000001 , 0x00004cf1 
+ 00001079  0x000005fb beq  0x00000000 , 0x00000445 
+ 00001080  0x000005fc increase  0xffffffff , 0x0000003f 
+ 00001081  0x000005fd store  0x00000001 , 0x00004cf1 
+ 00001082  0x000005fe beq  0x00000000 , 0x00000445 
+ 00001083  0x00000601 jam  0x00000000 , 0x000041de 
+ 00001084  0x00000602 rtn 
+ 00001085  0x00000605 jam  0x00000000 , 0x00004cee 
+ 00001086  0x00000607 fetch  0x00000001 , 0x00004cf1 
+ 00001087  0x00000608 beq  0x00000002 , 0x00000443 
+ 00001088  0x00000609 increase  0x00000001 , 0x0000003f 
+ 00001089  0x0000060a store  0x00000001 , 0x00004cf1 
+ 00001090  0x0000060b beq  0x00000001 , 0x0000043b 
+ 00001091  0x0000060e jam  0x00000002 , 0x000041de 
+ 00001092  0x0000060f rtn 
+ 00001093  0x00000612 jam  0x00000004 , 0x000041de 
+ 00001094  0x00000613 rtn 
+ 00001095  0x00000617 storet  0x00000001 , 0x00000017 
+ 00001096  0x00000618 add  0x00000002 , 0x00000000 , 0x00000011 
+ 00001097  0x00000619 call  0x00002981 
+ 00001098  0x0000061a setarg  0x00000500 
+ 00001099  0x0000061b call  0x00002a8f 
+ 00001100  0x0000061d jam  0x00000001 , 0x00008906 
+ 00001101  0x0000061e jam  0x0000003c , 0x00008900 
+ 00001102  0x0000061f jam  0x000000e0 , 0x00008901 
+ 00001103  0x00000620 nop  0x0000000a 
+ 00001104  0x00000621 jam  0x00000001 , 0x00008902 
+ 00001105  0x00000622 jam  0x0000003d , 0x00008902 
+ 00001106  0x00000623 nop  0x0000000a 
+ 00001107  0x00000624 jam  0x000000b7 , 0x00008903 
+ 00001108  0x00000625 nop  0x0000000a 
+ 00001109  0x00000626 jam  0x0000007d , 0x00008902 
+ 00001110  0x00000627 fetch  0x00000001 , 0x000041de 
+ 00001111  0x0000062a beq  0x00000002 , 0x0000045f 
+ 00001112  0x0000062c beq  0x00000004 , 0x00000464 
+ 00001113  0x0000062d beq  0x00000020 , 0x00000473 
+ 00001114  0x00000630 call  0x00000469 
+ 00001115  0x00000632 jam  0x000000d0 , 0x00008955 
+ 00001116  0x00000633 jam  0x000000e0 , 0x00008956 
+ 00001117  0x00000635 jam  0x0000006c , 0x00008958 
+ 00001118  0x00000637 branch  0x0000294b 
+ 00001119  0x00000644 call  0x0000046e 
+ 00001120  0x00000646 jam  0x000000d0 , 0x00008955 
+ 00001121  0x00000647 jam  0x000000e0 , 0x00008956 
+ 00001122  0x00000649 jam  0x0000003c , 0x00008958 
+ 00001123  0x0000064b branch  0x00002953 
+ 00001124  0x00000658 call  0x00000469 
+ 00001125  0x0000065a jam  0x000000d0 , 0x00008955 
+ 00001126  0x0000065b jam  0x000000c0 , 0x00008956 
+ 00001127  0x0000065d jam  0x0000006c , 0x00008958 
+ 00001128  0x0000065f branch  0x0000295b 
+ 00001129  0x00000662 jam  0x0000005b , 0x0000894c 
+ 00001130  0x00000663 jam  0x00000096 , 0x0000894d 
+ 00001131  0x00000664 jam  0x0000002c , 0x0000894e 
+ 00001132  0x00000665 jam  0x00000046 , 0x0000894f 
+ 00001133  0x00000666 rtn 
+ 00001134  0x00000669 jam  0x000000fb , 0x0000894c 
+ 00001135  0x0000066a jam  0x000000ef , 0x0000894d 
+ 00001136  0x0000066b jam  0x000000ec , 0x0000894e 
+ 00001137  0x0000066c jam  0x0000005e , 0x0000894f 
+ 00001138  0x0000066d rtn 
+ 00001139  0x00000671 jam  0x000000c5 , 0x00008956 
+ 00001140  0x00000672 jam  0x000000d0 , 0x00008955 
+ 00001141  0x00000673 rtn 
+ 00001142  0x00000676 force  0x00000008 , 0x00000015 
+ 00001143  0x00000677 branch  0x000028fa 
+ 00001144  0x0000067a jam  0x000000e6 , 0x00008968 
+ 00001145  0x0000067b call  0x00002978 
+ 00001146  0x0000067c jam  0x00000005 , 0x00008042 
+ 00001147  0x0000067d rtn 
+ 00001148  0x00000689 fetch  0x00000001 , 0x00004b2e 
+ 00001149  0x0000068a increase  0x00000001 , 0x0000003f 
+ 00001150  0x0000068b store  0x00000001 , 0x00004b2e 
+ 00001151  0x0000068c sub  0x0000003f , 0x00000032 , 0x0000003e 
+ 00001152  0x0000068d branch  0x00000488 , 0x00000002 
+ 00001153  0x0000068e sub  0x0000003f , 0x00000064 , 0x0000003e 
+ 00001154  0x0000068f branch  0x00000493 , 0x00000002 
+ 00001155  0x00000690 sub  0x0000003f , 0x00000096 , 0x0000003e 
+ 00001156  0x00000691 branch  0x0000049b , 0x00000002 
+ 00001157  0x00000692 sub  0x0000003f , 0x000000c8 , 0x0000003e 
+ 00001158  0x00000693 branch  0x000004a3 , 0x00000002 
+ 00001159  0x00000694 rtn 
+ 00001160  0x00000696 setarg  0x00000005 
+ 00001161  0x00000697 store  0x00000002 , 0x00004b28 
+ 00001162  0x00000698 setarg  0x00000000 
+ 00001163  0x00000699 store  0x00000002 , 0x00004b2a 
+ 00001164  0x0000069a store  0x00000001 , 0x00004b2c 
+ 00001165  0x0000069b store  0x00000001 , 0x00004b27 
+ 00001166  0x0000069c store  0x00000001 , 0x00004b2d 
+ 00001167  0x0000069e enable  0x00000028 
+ 00001168  0x0000069f arg  0x00000007 , 0x00000011 
+ 00001169  0x000006a0 arg  0x00004b27 , 0x00000012 
+ 00001170  0x000006a1 rtn 
+ 00001171  0x000006a3 setarg  0x00000005 
+ 00001172  0x000006a4 store  0x00000002 , 0x00004b2a 
+ 00001173  0x000006a5 setarg  0x00000000 
+ 00001174  0x000006a6 store  0x00000002 , 0x00004b28 
+ 00001175  0x000006a7 store  0x00000001 , 0x00004b2c 
+ 00001176  0x000006a8 store  0x00000001 , 0x00004b27 
+ 00001177  0x000006a9 store  0x00000001 , 0x00004b2d 
+ 00001178  0x000006aa branch  0x0000048f 
+ 00001179  0x000006ac setarg  0x0000fffb 
+ 00001180  0x000006ad store  0x00000002 , 0x00004b28 
+ 00001181  0x000006ae setarg  0x00000000 
+ 00001182  0x000006af store  0x00000002 , 0x00004b2a 
+ 00001183  0x000006b0 store  0x00000001 , 0x00004b2c 
+ 00001184  0x000006b1 store  0x00000001 , 0x00004b27 
+ 00001185  0x000006b2 store  0x00000001 , 0x00004b2d 
+ 00001186  0x000006b3 branch  0x0000048f 
+ 00001187  0x000006b5 fetch  0x00000001 , 0x00004b2e 
+ 00001188  0x000006b6 beq  0x000000c8 , 0x000004ad 
+ 00001189  0x000006b7 setarg  0x0000fffb 
+ 00001190  0x000006b8 store  0x00000002 , 0x00004b2a 
+ 00001191  0x000006b9 setarg  0x00000000 
+ 00001192  0x000006ba store  0x00000002 , 0x00004b28 
+ 00001193  0x000006bb store  0x00000001 , 0x00004b2c 
+ 00001194  0x000006bc store  0x00000001 , 0x00004b27 
+ 00001195  0x000006bd store  0x00000001 , 0x00004b2d 
+ 00001196  0x000006be branch  0x0000048f 
+ 00001197  0x000006c0 jam  0x00000000 , 0x00004b2e 
+ 00001198  0x000006c1 branch  0x000004a5 
+ 00008192  0x000006cb call  0x00002abc 
+ 00008193  0x000006ce bpatch  0x00000000 , 0x00004000 
+ 00008194  0x000006cf clear_stack 
+ 00008195  0x000006d0 call  0x0000640d 
+ 00008196  0x000006d1 call  0x0000296c 
+ 00008197  0x000006d2 call  0x000065a3 
+ 00008198  0x000006d3 call  0x00002a96 
+ 00008199  0x000006d4 call  0x00004d6a 
+ 00008200  0x000006d5 bpatch  0x00000001 , 0x00004000 
+ 00008201  0x000006d6 call  0x00006a03 
+ 00008202  0x000006d7 call  0x00005cf6 
+ 00008203  0x000006d8 call  0x00007ccc 
+ 00008204  0x000006d9 call  0x000032d8 
+ 00008205  0x000006da ncall  0x0000689c , 0x0000002b 
+ 00008206  0x000006db bpatch  0x00000002 , 0x00004000 
+ 00008207  0x000006dc call  0x000032e3 , 0x0000002b 
+ 00008208  0x000006dd call  0x0000756a 
+ 00008209  0x000006df call  0x00002b41 , 0x0000002b 
+ 00008210  0x000006e1 bpatch  0x00000003 , 0x00004000 
+ 00008211  0x000006e2 call  0x000076dc 
+ 00008212  0x000006e3 call  0x00007aaf 
+ 00008213  0x000006e4 call  0x0000756d 
+ 00008214  0x000006e5 call  0x0000535c 
+ 00008215  0x000006e6 bpatch  0x00000004 , 0x00004000 
+ 00008216  0x000006e7 call  0x00002038 
+ 00008217  0x000006e8 call  0x000032ed 
+ 00008218  0x000006e9 call  0x0000208f 
+ 00008219  0x000006ea call  0x000022f8 
+ 00008220  0x000006eb call  0x0000236a 
+ 00008221  0x000006ec call  0x00002021 
+ 00008222  0x000006ed call  0x00002b6a 
+ 00008223  0x000006ee call  0x00002c72 
+ 00008224  0x000006ef branch  0x00002012 
+ 00008225  0x000006f2 call  0x00002026 
+ 00008226  0x000006f3 rtnmark0  0x00000009 
+ 00008227  0x000006f4 set0  0x00000009 , 0x00000000 
+ 00008228  0x000006f5 call  0x00002223 
+ 00008229  0x000006f6 branch  0x000053ce 
+ 00008230  0x000006f9 bpatch  0x00000005 , 0x00004000 
+ 00008231  0x000006fa call  0x0000225e 
+ 00008232  0x000006fb nbranch  0x0000202f , 0x00000005 
+ 00008233  0x000006fc call  0x0000220a 
+ 00008234  0x000006fd add  0x00000011 , 0x00000001 , 0x00000006 
+ 00008235  0x000006fe ifetch  0x00000001 , 0x00000006 
+ 00008236  0x000006ff bbit1  0x00000000 , 0x00005360 
+ 00008237  0x00000700 bbit1  0x00000001 , 0x00002166 
+ 00008238  0x00000701 branch  0x000023cf 
+ 00008239  0x00000703 call  0x0000222b 
+ 00008240  0x00000704 copy  0x00000039 , 0x0000003e 
+ 00008241  0x00000705 rtn  0x00000005 
+ 00008242  0x00000706 call  0x0000220a 
+ 00008243  0x00000707 fetch  0x00000001 , 0x00000030 
+ 00008244  0x00000708 bbit1  0x00000003 , 0x000020d3 
+ 00008245  0x00000709 fetch  0x00000001 , 0x00000031 
+ 00008246  0x0000070a bbit1  0x00000001 , 0x00002166 
+ 00008247  0x0000070b branch  0x000023cf 
+ 00008248  0x00000714 fetch  0x00000001 , 0x000041ce 
+ 00008249  0x00000715 rtn  0x00000034 
+ 00008250  0x00000716 beq  0x00000001 , 0x00002048 
+ 00008251  0x00000717 beq  0x00000002 , 0x0000204d 
+ 00008252  0x00000718 beq  0x00000003 , 0x00002050 
+ 00008253  0x00000719 beq  0x00000005 , 0x00002055 
+ 00008254  0x0000071a beq  0x0000001b , 0x00002045 
+ 00008255  0x0000071b call  0x00002257 
+ 00008256  0x0000071c rtn  0x00000005 
+ 00008257  0x0000071d call  0x0000225a 
+ 00008258  0x0000071e rtn  0x00000005 
+ 00008259  0x00000720 jam  0x00000000 , 0x000041ce 
+ 00008260  0x00000721 rtn 
+ 00008261  0x00000724 jam  0x0000001b , 0x0000049b 
+ 00008262  0x00000725 jam  0x00000000 , 0x000041ce 
+ 00008263  0x00000726 rtn 
+ 00008264  0x00000729 set1  0x0000001c , 0x00000000 
+ 00008265  0x0000072a set0  0x0000001e , 0x00000000 
+ 00008266  0x0000072b jam  0x000000ff , 0x0000008f 
+ 00008267  0x0000072c jam  0x0000001f , 0x0000008d 
+ 00008268  0x0000072d branch  0x00002043 
+ 00008269  0x00000730 set0  0x0000001c , 0x00000000 
+ 00008270  0x00000731 force  0x00000000 , 0x0000001b 
+ 00008271  0x00000732 branch  0x00002043 
+ 00008272  0x00000735 call  0x0000225a 
+ 00008273  0x00000736 rtn  0x00000005 
+ 00008274  0x00000737 force  0x00000001 , 0x00000002 
+ 00008275  0x00000738 jam  0x00000005 , 0x0000016e 
+ 00008276  0x00000739 branch  0x0000205c 
+ 00008277  0x0000073c bpatch  0x00000006 , 0x00004000 
+ 00008278  0x0000073e fetch  0x00000006 , 0x000041d0 
+ 00008279  0x0000073f branch  0x00002043 , 0x00000034 
+ 00008280  0x00000740 jam  0x00000001 , 0x00004681 
+ 00008281  0x00000742 jam  0x00000003 , 0x00000055 
+ 00008282  0x00000743 branch  0x0000205b 
+ 00008283  0x00000746 force  0x00000025 , 0x00000002 
+ 00008284  0x00000748 bpatch  0x00000007 , 0x00004000 
+ 00008285  0x00000749 fetch  0x00000001 , 0x000000f1 
+ 00008286  0x0000074a branch  0x00002062 , 0x00000034 
+ 00008287  0x0000074b lshift3  0x0000003f , 0x0000003f 
+ 00008288  0x0000074c lshift4  0x0000003f , 0x0000003f 
+ 00008289  0x0000074d increase  0xffffffff , 0x0000003f 
+ 00008290  0x0000074f store  0x00000001 , 0x000040a6 
+ 00008291  0x00000750 store  0x00000001 , 0x000000f0 
+ 00008292  0x00000751 jam  0x0000001f , 0x0000008e 
+ 00008293  0x00000752 set0  0x0000000c , 0x00000000 
+ 00008294  0x00000753 call  0x0000223b 
+ 00008295  0x00000754 nbranch  0x00002083 , 0x00000005 
+ 00008296  0x00000755 call  0x00002a6f 
+ 00008297  0x00000756 store  0x00000001 , 0x00000077 
+ 00008298  0x00000757 storet  0x00000001 , 0x0000007c 
+ 00008299  0x00000758 fetch  0x00000006 , 0x000041d0 
+ 00008300  0x00000759 store  0x00000006 , 0x00000040 
+ 00008301  0x0000075a bpatch  0x00000008 , 0x00004001 
+ 00008302  0x0000075b call  0x00007f15 
+ 00008303  0x0000075c force  0x00000000 , 0x0000003f 
+ 00008304  0x0000075d compare  0x00000001 , 0x00000002 , 0x000000ff 
+ 00008305  0x0000075e nsetflag  0x00000001 , 0x00000005 , 0x0000003f 
+ 00008306  0x0000075f set1  0x00000003 , 0x0000003f 
+ 00008307  0x00000760 store  0x00000001 , 0x00000030 
+ 00008308  0x00000761 jam  0x00000003 , 0x00000a99 
+ 00008309  0x00000762 call  0x00007d86 
+ 00008310  0x00000763 force  0x00000000 , 0x0000003f 
+ 00008311  0x00000764 setflag  0x00000001 , 0x00000004 , 0x0000003f 
+ 00008312  0x00000765 store  0x00000001 , 0x0000004c 
+ 00008313  0x00000766 setarg  0x00000000 
+ 00008314  0x00000767 set1  0x00000001 , 0x0000003f 
+ 00008315  0x00000768 store  0x00000001 , 0x00000031 
+ 00008316  0x00000769 enable  0x00000029 
+ 00008317  0x0000076a call  0x00002223 
+ 00008318  0x0000076b disable  0x00000029 
+ 00008319  0x0000076c force  0x00000003 , 0x00000007 
+ 00008320  0x0000076d fetch  0x00000002 , 0x000040b9 
+ 00008321  0x0000076e call  0x00007f08 
+ 00008322  0x0000076f branch  0x00002043 
+ 00008323  0x00000771 bpatch  0x00000009 , 0x00004001 
+ 00008324  0x00000772 fetch  0x00000006 , 0x000041d0 
+ 00008325  0x00000773 store  0x00000006 , 0x00000040 
+ 00008326  0x00000774 compare  0x00000001 , 0x00000002 , 0x000000ff 
+ 00008327  0x00000775 branch  0x00002089 , 0x00000001 
+ 00008328  0x00000776 branch  0x00002043 
+ 00008329  0x00000778 arg  0x00000101 , 0x00000005 
+ 00008330  0x00000779 arg  0x00000008 , 0x00000039 
+ 00008331  0x0000077a call  0x00007ec6 
+ 00008332  0x0000077b jam  0x00000004 , 0x00000a99 
+ 00008333  0x0000077c call  0x00007d86 
+ 00008334  0x0000077d branch  0x00002043 
+ 00008335  0x00000785 rtnmark0  0x0000001c 
+ 00008336  0x00000786 force  0x00000001 , 0x00000007 
+ 00008337  0x00000787 call  0x00007f16 
+ 00008338  0x00000788 nsetflag  0x00000034 , 0x0000001c , 0x00000000 
+ 00008339  0x00000789 nbranch  0x00002095 , 0x00000034 
+ 00008340  0x0000078a rtn 
+ 00008341  0x0000078f bpatch  0x0000000a , 0x00004001 
+ 00008342  0x00000790 fetcht  0x00000002 , 0x000040bb 
+ 00008343  0x00000791 force  0x00000004 , 0x00000007 
+ 00008344  0x00000792 call  0x0000271c 
+ 00008345  0x00000793 rtn  0x00000028 
+ 00008346  0x00000794 call  0x000028a4 
+ 00008347  0x00000795 force  0x00000000 , 0x00000024 
+ 00008348  0x00000797 rtn  0x00000003 
+ 00008349  0x00000798 set0  0x0000000b , 0x00000000 
+ 00008350  0x00000799 set0  0x00000000 , 0x00000000 
+ 00008351  0x0000079b add  0x00000022 , 0x00000001 , 0x00000021 
+ 00008352  0x0000079c isolate1  0x0000001e , 0x00000000 
+ 00008353  0x0000079d setflag  0x00000001 , 0x00000002 , 0x00000024 
+ 00008354  0x0000079e compare  0x00000000 , 0x00000021 , 0x00000002 
+ 00008355  0x0000079f nbranch  0x000020be , 0x00000001 
+ 00008356  0x000007a2 bpatch  0x0000000b , 0x00004001 
+ 00008357  0x000007a3 fetch  0x00000001 , 0x00000012 
+ 00008358  0x000007a4 increase  0x00000001 , 0x0000003f 
+ 00008359  0x000007a5 store  0x00000001 , 0x00000012 
+ 00008360  0x000007a6 call  0x000028d8 
+ 00008361  0x000007a7 call  0x000028d2 
+ 00008362  0x000007a8 call  0x000028f2 
+ 00008363  0x000007a9 call  0x00002a51 
+ 00008364  0x000007aa call  0x00002a56 
+ 00008365  0x000007ab call  0x00002a64 
+ 00008366  0x000007ac call  0x0000264d 
+ 00008367  0x000007ad call  0x000020b1 
+ 00008368  0x000007ae branch  0x0000209c 
+ 00008369  0x000007b1 bpatch  0x0000000c , 0x00004001 
+ 00008370  0x000007b2 fetch  0x00000001 , 0x0000008d 
+ 00008371  0x000007b3 increase  0xffffffff , 0x0000003f 
+ 00008372  0x000007b4 store  0x00000001 , 0x0000008d 
+ 00008373  0x000007b5 rtn  0x00000002 
+ 00008374  0x000007b6 jam  0x0000001f , 0x0000008d 
+ 00008375  0x000007b7 fetch  0x00000001 , 0x0000008f 
+ 00008376  0x000007b8 increase  0xffffffff , 0x0000003f 
+ 00008377  0x000007b9 store  0x00000001 , 0x0000008f 
+ 00008378  0x000007ba rtn  0x00000002 
+ 00008379  0x000007bb setflip  0x0000001e , 0x00000000 
+ 00008380  0x000007bc jam  0x000000ff , 0x0000008f 
+ 00008381  0x000007bd rtn 
+ 00008382  0x000007c0 bpatch  0x0000000d , 0x00004001 
+ 00008383  0x000007c1 call  0x000028d8 
+ 00008384  0x000007c2 call  0x000028cc 
+ 00008385  0x000007c3 call  0x000028f2 
+ 00008386  0x000007c4 call  0x00002a5b 
+ 00008387  0x000007c5 call  0x000029eb 
+ 00008388  0x000007c6 call  0x00002a0d 
+ 00008389  0x000007c7 branch  0x000020c8 , 0x00000018 
+ 00008390  0x000007c8 call  0x000020b1 
+ 00008391  0x000007c9 branch  0x0000209f 
+ 00008392  0x000007cb bpatch  0x0000000e , 0x00004001 
+ 00008393  0x000007cc call  0x000029bb 
+ 00008394  0x000007cd call  0x00002a6b 
+ 00008395  0x000007ce call  0x0000251e 
+ 00008396  0x000007cf set0  0x00000001 , 0x00000000 
+ 00008397  0x000007d0 rtnmark0  0x0000000b 
+ 00008398  0x000007d2 bpatch  0x0000000f , 0x00004001 
+ 00008399  0x000007d4 fetch  0x00000001 , 0x00000013 
+ 00008400  0x000007d5 increase  0x00000001 , 0x0000003f 
+ 00008401  0x000007d6 store  0x00000001 , 0x00000013 
+ 00008402  0x000007d7 rtn 
+ 00008403  0x000007e0 bpatch  0x00000010 , 0x00004002 
+ 00008404  0x000007e1 enable  0x00000029 
+ 00008405  0x000007e2 enable  0x00000030 
+ 00008406  0x000007e3 fetch  0x00000002 , 0x000040b5 
+ 00008407  0x000007e4 branch  0x000020db , 0x00000034 
+ 00008408  0x000007e5 force  0x00000008 , 0x00000007 
+ 00008409  0x000007e6 call  0x00007f16 
+ 00008410  0x000007e7 nrtn  0x00000034 
+ 00008411  0x000007e9 bpatch  0x00000011 , 0x00004002 
+ 00008412  0x000007ea fetcht  0x00000002 , 0x000040b7 
+ 00008413  0x000007eb force  0x00000028 , 0x00000007 
+ 00008414  0x000007ec call  0x0000271c 
+ 00008415  0x000007ed branch  0x00002114 , 0x00000028 
+ 00008416  0x000007ee force  0x00000003 , 0x00000007 
+ 00008417  0x000007ef call  0x00007f16 
+ 00008418  0x000007f0 nbranch  0x000020f0 , 0x00000034 
+ 00008419  0x000007f1 fetch  0x00000001 , 0x0000004c 
+ 00008420  0x000007f2 bbit1  0x00000004 , 0x000020e6 
+ 00008421  0x000007f3 branch  0x000020e9 
+ 00008422  0x000007f5 arg  0x00000101 , 0x00000005 
+ 00008423  0x000007f6 arg  0x00000008 , 0x00000039 
+ 00008424  0x000007f7 call  0x00007ec6 
+ 00008425  0x000007f9 bpatch  0x00000012 , 0x00004002 
+ 00008426  0x000007fa jam  0x00000000 , 0x00000030 
+ 00008427  0x000007fb call  0x00005cf7 
+ 00008428  0x000007fc jam  0x00000000 , 0x00004681 
+ 00008429  0x000007fd jam  0x00000013 , 0x00000a99 
+ 00008430  0x000007fe call  0x00007d86 
+ 00008431  0x000007ff branch  0x00002114 
+ 00008432  0x00000802 bpatch  0x00000013 , 0x00004002 
+ 00008433  0x00000803 force  0x00000000 , 0x0000000b 
+ 00008434  0x00000804 until  0x00000023 , 0x00000026 
+ 00008435  0x00000805 fetch  0x00000001 , 0x000000f2 
+ 00008436  0x00000806 increase  0xffffffff , 0x0000003f 
+ 00008437  0x00000807 ixor  0x00000022 , 0x0000003f 
+ 00008438  0x00000808 compare  0x00000000 , 0x0000003f , 0x00000003 
+ 00008439  0x00000809 nbranch  0x000020f0 , 0x00000001 
+ 00008440  0x0000080a deposit  0x00000004 
+ 00008441  0x0000080b store  0x00000001 , 0x00000181 
+ 00008442  0x0000080c force  0x00000000 , 0x00000026 
+ 00008443  0x0000080d force  0x00000000 , 0x00000024 
+ 00008444  0x00000810 bpatch  0x00000014 , 0x00004002 
+ 00008445  0x00000811 branch  0x00002114 , 0x00000003 
+ 00008446  0x00000812 call  0x000028dc 
+ 00008447  0x00000813 arg  0x00000600 , 0x0000000b 
+ 00008448  0x00000814 until  0x00000023 , 0x00000026 
+ 00008449  0x00000816 bpatch  0x00000015 , 0x00004002 
+ 00008450  0x00000817 fetch  0x00000004 , 0x000000f2 
+ 00008451  0x00000818 iforce  0x00000021 
+ 00008452  0x00000819 increase  0x00000001 , 0x0000003f 
+ 00008453  0x0000081a store  0x00000004 , 0x000000f2 
+ 00008454  0x0000081b isolate1  0x0000000c , 0x00000000 
+ 00008455  0x0000081c setflag  0x00000001 , 0x00000002 , 0x00000024 
+ 00008456  0x0000081d compare  0x00000000 , 0x00000021 , 0x00000002 
+ 00008457  0x0000081e nbranch  0x00002128 , 0x00000001 
+ 00008458  0x0000081f fetch  0x00000001 , 0x0000000c 
+ 00008459  0x00000820 increase  0x00000001 , 0x0000003f 
+ 00008460  0x00000821 store  0x00000001 , 0x0000000c 
+ 00008461  0x00000822 call  0x000028d2 
+ 00008462  0x00000823 call  0x00002a51 
+ 00008463  0x00000824 call  0x00002a56 
+ 00008464  0x00000825 call  0x00002a64 
+ 00008465  0x00000826 call  0x0000264d 
+ 00008466  0x00000827 call  0x0000211a 
+ 00008467  0x00000828 branch  0x000020fc 
+ 00008468  0x0000082a bpatch  0x00000016 , 0x00004002 
+ 00008469  0x0000082b disable  0x00000029 
+ 00008470  0x0000082c fetch  0x00000002 , 0x000040b5 
+ 00008471  0x0000082d rtn  0x00000034 
+ 00008472  0x0000082e force  0x00000008 , 0x00000007 
+ 00008473  0x0000082f branch  0x00007f08 
+ 00008474  0x00000832 bpatch  0x00000017 , 0x00004002 
+ 00008475  0x00000833 fetch  0x00000001 , 0x0000008e 
+ 00008476  0x00000834 increase  0xffffffff , 0x0000003f 
+ 00008477  0x00000835 store  0x00000001 , 0x0000008e 
+ 00008478  0x00000836 rtn  0x00000002 
+ 00008479  0x00000837 jam  0x0000001f , 0x0000008e 
+ 00008480  0x00000838 fetch  0x00000001 , 0x000000f0 
+ 00008481  0x00000839 increase  0xffffffff , 0x0000003f 
+ 00008482  0x0000083a store  0x00000001 , 0x000000f0 
+ 00008483  0x0000083b rtn  0x00000002 
+ 00008484  0x0000083c setflip  0x0000000c , 0x00000000 
+ 00008485  0x0000083d fetch  0x00000001 , 0x000040a6 
+ 00008486  0x0000083e store  0x00000001 , 0x000000f0 
+ 00008487  0x0000083f rtn 
+ 00008488  0x00000842 bpatch  0x00000018 , 0x00004003 
+ 00008489  0x00000843 call  0x000028cc 
+ 00008490  0x00000844 call  0x00002a5b 
+ 00008491  0x00000845 call  0x000029eb 
+ 00008492  0x00000846 call  0x00002a0d 
+ 00008493  0x00000847 branch  0x00002130 , 0x00000018 
+ 00008494  0x00000848 call  0x0000211a 
+ 00008495  0x00000849 branch  0x00002101 
+ 00008496  0x0000084b call  0x0000264d 
+ 00008497  0x0000084c fetch  0x00000001 , 0x0000000d 
+ 00008498  0x0000084d increase  0x00000001 , 0x0000003f 
+ 00008499  0x0000084e store  0x00000001 , 0x0000000d 
+ 00008500  0x0000084f force  0x00000000 , 0x0000001b 
+ 00008501  0x00000850 fetch  0x00000004 , 0x000000f2 
+ 00008502  0x00000852 bpatch  0x00000019 , 0x00004003 
+ 00008503  0x00000853 call  0x00002a4f 
+ 00008504  0x00000854 call  0x000028dc 
+ 00008505  0x00000855 increase  0x00000001 , 0x00000026 
+ 00008506  0x00000857 and_into  0x000001fd , 0x00000021 
+ 00008507  0x00000858 and_into  0x000001fc , 0x00000024 
+ 00008508  0x00000859 call  0x000028d2 
+ 00008509  0x0000085a call  0x00002a51 
+ 00008510  0x0000085b call  0x00002a56 
+ 00008511  0x0000085c call  0x00002a64 
+ 00008512  0x0000085d deposit  0x00000022 
+ 00008513  0x0000085e store  0x00000004 , 0x00000161 
+ 00008514  0x0000085f force  0x00000000 , 0x00000004 
+ 00008515  0x00000860 force  0x00000002 , 0x00000001 
+ 00008516  0x00000861 call  0x00002a6b 
+ 00008517  0x00000862 call  0x00002766 
+ 00008518  0x00000864 bpatch  0x0000001a , 0x00004003 
+ 00008519  0x00000865 call  0x00002a4d 
+ 00008520  0x00000866 or_into  0x00000002 , 0x00000021 
+ 00008521  0x00000867 and_into  0x000001fc , 0x00000024 
+ 00008522  0x00000868 call  0x000028cc 
+ 00008523  0x00000869 call  0x00002a5b 
+ 00008524  0x0000086a call  0x000029eb 
+ 00008525  0x0000086b call  0x00002a0d 
+ 00008526  0x0000086c call  0x0000264d , 0x00000018 
+ 00008527  0x0000086d branch  0x00002155 , 0x00000018 
+ 00008528  0x0000086e fetch  0x00000001 , 0x00000010 
+ 00008529  0x0000086f branch  0x000020fc , 0x00000034 
+ 00008530  0x00000870 increase  0xffffffff , 0x0000003f 
+ 00008531  0x00000871 store  0x00000001 , 0x00000010 
+ 00008532  0x00000872 branch  0x00002136 
+ 00008533  0x00000875 bpatch  0x0000001b , 0x00004003 
+ 00008534  0x00000876 fetch  0x00000001 , 0x0000000e 
+ 00008535  0x00000877 increase  0x00000001 , 0x0000003f 
+ 00008536  0x00000878 store  0x00000001 , 0x0000000e 
+ 00008537  0x00000879 call  0x00002435 
+ 00008538  0x0000087b call  0x000022f2 
+ 00008539  0x0000087c branch  0x0000215f , 0x00000018 
+ 00008540  0x0000087d call  0x00002455 
+ 00008541  0x0000087e nbranch  0x0000215a , 0x00000034 
+ 00008542  0x0000087f branch  0x000020fc 
+ 00008543  0x00000882 bpatch  0x0000001c , 0x00004003 
+ 00008544  0x00000883 fetch  0x00000001 , 0x00000030 
+ 00008545  0x00000884 set0  0x00000003 , 0x0000003f 
+ 00008546  0x00000885 store  0x00000001 , 0x00000030 
+ 00008547  0x00000886 call  0x00002440 
+ 00008548  0x00000887 disable  0x00000029 
+ 00008549  0x00000888 rtn 
+ 00008550  0x0000088c bpatch  0x0000001d , 0x00004003 
+ 00008551  0x0000088d enable  0x00000029 
+ 00008552  0x0000088e enable  0x00000030 
+ 00008553  0x0000088f call  0x000021e1 
+ 00008554  0x00000890 rtn  0x00000028 
+ 00008555  0x00000891 call  0x00002c69 
+ 00008556  0x00000892 call  0x00002a4f 
+ 00008557  0x00000893 add  0x00000022 , 0x00000001 , 0x00000021 
+ 00008558  0x00000894 call  0x000028e2 
+ 00008559  0x00000895 force  0x00000003 , 0x00000024 
+ 00008560  0x00000896 call  0x00006cc2 
+ 00008561  0x00000897 call  0x00002489 
+ 00008562  0x00000898 call  0x000028d2 
+ 00008563  0x00000899 call  0x00002a51 
+ 00008564  0x0000089a call  0x00002a56 
+ 00008565  0x0000089b call  0x00002a64 
+ 00008566  0x0000089c call  0x00002762 
+ 00008567  0x0000089e bpatch  0x0000001e , 0x00004003 
+ 00008568  0x0000089f call  0x00005d08 
+ 00008569  0x000008a0 call  0x000022e4 
+ 00008570  0x000008a1 nbranch  0x00002180 , 0x0000002d 
+ 00008571  0x000008a2 call  0x00002a88 
+ 00008572  0x000008a3 call  0x00002728 
+ 00008573  0x000008a4 fetch  0x00000001 , 0x0000000f 
+ 00008574  0x000008a5 increase  0x00000001 , 0x0000003f 
+ 00008575  0x000008a6 store  0x00000001 , 0x0000000f 
+ 00008576  0x000008a8 bpatch  0x0000001f , 0x00004003 
+ 00008577  0x000008a9 call  0x00006caa 
+ 00008578  0x000008aa call  0x0000218b 
+ 00008579  0x000008ab nrtn  0x00000029 
+ 00008580  0x000008ac call  0x000026f3 
+ 00008581  0x000008ad nbranch  0x00002188 , 0x00000034 
+ 00008582  0x000008af disable  0x00000029 
+ 00008583  0x000008b0 rtn 
+ 00008584  0x000008b3 call  0x00002489 
+ 00008585  0x000008b4 call  0x000022da 
+ 00008586  0x000008b5 branch  0x00002177 
+ 00008587  0x000008b9 branch  0x0000218e , 0x0000002d 
+ 00008588  0x000008ba call  0x00002a7f 
+ 00008589  0x000008bb branch  0x0000219c , 0x00000002 
+ 00008590  0x000008bd call  0x000021a7 
+ 00008591  0x000008be nbranch  0x0000219c , 0x00000028 
+ 00008592  0x000008bf fetch  0x00000001 , 0x0000004c 
+ 00008593  0x000008c0 rtnbit0  0x00000004 
+ 00008594  0x000008c1 rtnbit1  0x00000003 
+ 00008595  0x000008c2 fetch  0x00000001 , 0x0000004b 
+ 00008596  0x000008c3 rtnbit1  0x00000003 
+ 00008597  0x000008c4 call  0x000021ae 
+ 00008598  0x000008c5 nrtn  0x00000034 
+ 00008599  0x000008c6 fetch  0x00000001 , 0x0000016e 
+ 00008600  0x000008c7 increase  0xffffffff , 0x0000003f 
+ 00008601  0x000008c8 store  0x00000001 , 0x0000016e 
+ 00008602  0x000008c9 nrtn  0x00000034 
+ 00008603  0x000008ca branch  0x00006006 
+ 00008604  0x000008cd bpatch  0x00000020 , 0x00004004 
+ 00008605  0x000008ce call  0x0000245d 
+ 00008606  0x000008cf disable  0x00000029 
+ 00008607  0x000008d0 fetch  0x00000001 , 0x0000004c 
+ 00008608  0x000008d1 bbit1  0x00000004 , 0x000021a2 
+ 00008609  0x000008d2 rtn 
+ 00008610  0x000008d5 fetch  0x00000001 , 0x0000004c 
+ 00008611  0x000008d6 rtnbit1  0x00000003 
+ 00008612  0x000008d8 arg  0x00000101 , 0x00000005 
+ 00008613  0x000008d9 arg  0x00000008 , 0x00000039 
+ 00008614  0x000008da branch  0x00007ec6 
+ 00008615  0x000008dd bpatch  0x00000021 , 0x00004004 
+ 00008616  0x000008de enable  0x00000028 
+ 00008617  0x000008df fetch  0x00000001 , 0x0000004b 
+ 00008618  0x000008e0 rtnbit0  0x00000003 
+ 00008619  0x000008e1 call  0x000021ae 
+ 00008620  0x000008e2 nrtn  0x00000034 
+ 00008621  0x000008e3 branch  0x00007fe9 
+ 00008622  0x000008e6 fetch  0x00000001 , 0x00000072 
+ 00008623  0x000008e7 increase  0xffffffff , 0x0000003f 
+ 00008624  0x000008e8 store  0x00000001 , 0x00000072 
+ 00008625  0x000008e9 rtn 
+ 00008626  0x000008ec bpatch  0x00000022 , 0x00004004 
+ 00008627  0x000008ed fetch  0x00000001 , 0x00000030 
+ 00008628  0x000008ee bbit1  0x00000007 , 0x000021bb 
+ 00008629  0x000008ef fetch  0x00000001 , 0x000009b5 
+ 00008630  0x000008f0 branch  0x000021bb , 0x00000034 
+ 00008631  0x000008f1 jam  0x00000000 , 0x000009b5 
+ 00008632  0x000008f2 jam  0x00000018 , 0x00000a99 
+ 00008633  0x000008f3 call  0x00007d86 
+ 00008634  0x000008f4 branch  0x000021bb 
+ 00008635  0x000008f6 bpatch  0x00000023 , 0x00004004 
+ 00008636  0x000008f7 call  0x00002254 
+ 00008637  0x000008f8 fetch  0x00000001 , 0x00000030 
+ 00008638  0x000008f9 set1  0x00000007 , 0x0000003f 
+ 00008639  0x000008fa store  0x00000001 , 0x00000030 
+ 00008640  0x000008fb jam  0x00000001 , 0x000041bd 
+ 00008641  0x000008fc fetch  0x00000001 , 0x00000055 
+ 00008642  0x000008fd bne  0x00000016 , 0x000021c3 
+ 00008643  0x000008ff rtn 
+ 00008644  0x00000902 jam  0x00000001 , 0x000009b5 
+ 00008645  0x00000904 fetch  0x00000001 , 0x00000030 
+ 00008646  0x00000905 set0  0x00000007 , 0x0000003f 
+ 00008647  0x00000906 store  0x00000001 , 0x00000030 
+ 00008648  0x00000907 rtn 
+ 00008649  0x0000090c bpatch  0x00000024 , 0x00004004 
+ 00008650  0x0000090d disable  0x00000028 
+ 00008651  0x0000090e fetch  0x00000002 , 0x00000032 
+ 00008652  0x0000090f arg  0x0000ffff , 0x00000002 
+ 00008653  0x00000910 isub  0x00000002 , 0x0000003e 
+ 00008654  0x00000911 nrtn  0x00000005 
+ 00008655  0x00000912 fetch  0x00000004 , 0x00000034 
+ 00008656  0x00000913 branch  0x000021d3 , 0x00000030 
+ 00008657  0x00000914 isub  0x00000028 , 0x0000003f 
+ 00008658  0x00000915 branch  0x000021d4 
+ 00008659  0x00000917 isub  0x00000022 , 0x0000003f 
+ 00008660  0x00000919 sub  0x0000003f , 0x00000004 , 0x0000003e 
+ 00008661  0x0000091a nrtn  0x00000002 
+ 00008662  0x0000091b force  0x00000000 , 0x0000003f 
+ 00008663  0x0000091c store  0x00000002 , 0x00000032 
+ 00008664  0x0000091d branch  0x00007fe7 
+ 00008665  0x00000922 copy  0x0000003f , 0x00000002 
+ 00008666  0x00000923 bpatch  0x00000025 , 0x00004004 
+ 00008667  0x00000924 storet  0x00000004 , 0x00000034 
+ 00008668  0x00000926 jam  0x00000001 , 0x0000455b 
+ 00008669  0x00000927 setarg  0x0000ffff 
+ 00008670  0x00000928 store  0x00000002 , 0x00000032 
+ 00008671  0x00000929 jam  0x00000001 , 0x00000073 
+ 00008672  0x0000092a rtn 
+ 00008673  0x0000092e bpatch  0x00000026 , 0x00004004 
+ 00008674  0x0000092f call  0x000021c9 
+ 00008675  0x00000930 nrtn  0x00000028 
+ 00008676  0x00000931 disable  0x00000028 
+ 00008677  0x00000932 jam  0x00000020 , 0x00000011 
+ 00008678  0x00000933 set0  0x0000000b , 0x00000000 
+ 00008679  0x00000935 call  0x00002a4f 
+ 00008680  0x00000936 call  0x000022e6 
+ 00008681  0x00000937 bmark1  0x0000000b , 0x000021f4 
+ 00008682  0x00000938 call  0x00002455 
+ 00008683  0x00000939 nbranch  0x000021e7 , 0x00000034 
+ 00008684  0x0000093b bpatch  0x00000027 , 0x00004004 
+ 00008685  0x0000093c disable  0x00000028 
+ 00008686  0x0000093d deposit  0x00000022 
+ 00008687  0x0000093e store  0x00000004 , 0x000040ca 
+ 00008688  0x0000093f enable  0x00000030 
+ 00008689  0x00000940 enable  0x00000029 
+ 00008690  0x00000941 jam  0x0000002a , 0x00000a99 
+ 00008691  0x00000942 branch  0x00007d86 
+ 00008692  0x00000945 bpatch  0x00000028 , 0x00004005 
+ 00008693  0x00000946 call  0x00002a4d 
+ 00008694  0x00000947 arg  0x00000010 , 0x00000001 
+ 00008695  0x00000948 call  0x000022dc 
+ 00008696  0x00000949 disable  0x00000030 
+ 00008697  0x0000094a disable  0x00000029 
+ 00008698  0x0000094b call  0x00002818 
+ 00008699  0x0000094c call  0x00002435 
+ 00008700  0x0000094e bpatch  0x00000029 , 0x00004005 
+ 00008701  0x0000094f call  0x0000247c 
+ 00008702  0x00000950 branch  0x00002202 , 0x0000002d 
+ 00008703  0x00000951 call  0x00002455 
+ 00008704  0x00000952 nbranch  0x000021fc , 0x00000034 
+ 00008705  0x00000953 branch  0x000021ec 
+ 00008706  0x00000955 fetch  0x00000001 , 0x00000031 
+ 00008707  0x00000956 set0  0x00000001 , 0x0000003f 
+ 00008708  0x00000957 store  0x00000001 , 0x00000031 
+ 00008709  0x00000958 call  0x00002a88 
+ 00008710  0x00000959 call  0x00002841 
+ 00008711  0x0000095a enable  0x00000028 
+ 00008712  0x0000095b jam  0x0000002b , 0x00000a99 
+ 00008713  0x0000095c branch  0x00007d86 
+ 00008714  0x00000962 bpatch  0x0000002a , 0x00004005 
+ 00008715  0x00000963 set1  0x00000009 , 0x00000000 
+ 00008716  0x00000964 deposit  0x00000011 
+ 00008717  0x00000965 store  0x00000002 , 0x0000001e 
+ 00008718  0x00000966 force  0x00000050 , 0x00000039 
+ 00008719  0x00000967 arg  0x0000043f , 0x00000005 
+ 00008720  0x00000968 add  0x00000011 , 0x00000001 , 0x00000006 
+ 00008721  0x00000969 ifetch  0x00000001 , 0x00000006 
+ 00008722  0x0000096a copy  0x00000011 , 0x00000006 
+ 00008723  0x0000096b bbit1  0x00000000 , 0x00007f01 
+ 00008724  0x0000096c arg  0x00000030 , 0x00000005 
+ 00008725  0x0000096d call  0x00007f01 
+ 00008726  0x0000096e disable  0x0000002e 
+ 00008727  0x0000096f fetch  0x00000001 , 0x00000077 
+ 00008728  0x00000970 iforce  0x00000004 
+ 00008729  0x00000971 jam  0x00000001 , 0x0000008a 
+ 00008730  0x00000972 branch  0x0000221c , 0x00000029 
+ 00008731  0x00000973 jam  0x00000001 , 0x0000008a 
+ 00008732  0x00000975 fetch  0x00000001 , 0x00000030 
+ 00008733  0x00000976 rtnbit0  0x00000001 
+ 00008734  0x00000977 fetch  0x00000001 , 0x00000073 
+ 00008735  0x00000978 store  0x00000001 , 0x0000008a 
+ 00008736  0x00000979 fetch  0x00000001 , 0x00000074 
+ 00008737  0x0000097a store  0x00000001 , 0x0000008b 
+ 00008738  0x0000097b rtn 
+ 00008739  0x0000097e bpatch  0x0000002b , 0x00004005 
+ 00008740  0x0000097f fetch  0x00000002 , 0x0000001e 
+ 00008741  0x00000980 iforce  0x00000005 
+ 00008742  0x00000981 force  0x00000050 , 0x00000039 
+ 00008743  0x00000982 arg  0x0000043f , 0x00000006 
+ 00008744  0x00000983 branch  0x00007f01 , 0x00000036 
+ 00008745  0x00000984 arg  0x00000030 , 0x00000006 
+ 00008746  0x00000985 branch  0x00007f01 
+ 00008747  0x0000098a arg  0x00000001 , 0x00000039 
+ 00008748  0x0000098b fetcht  0x00000001 , 0x00000015 
+ 00008749  0x0000098d increase  0x00000001 , 0x00000002 
+ 00008750  0x0000098e compare  0x00000001 , 0x00000002 , 0x000000ff 
+ 00008751  0x0000098f nbranch  0x00002231 , 0x00000001 
+ 00008752  0x00000990 arg  0x00000000 , 0x00000002 
+ 00008753  0x00000992 storet  0x00000001 , 0x00000015 
+ 00008754  0x00000993 mul32  0x00000002 , 0x00000050 , 0x0000003f 
+ 00008755  0x00000994 arg  0x00004040 , 0x00000011 
+ 00008756  0x00000995 iadd  0x00000011 , 0x00000011 
+ 00008757  0x00000996 ifetch  0x00000001 , 0x00000011 
+ 00008758  0x00000997 bbit1  0x00000001 , 0x00002239 
+ 00008759  0x00000998 rtnbit1  0x00000000 
+ 00008760  0x00000999 rtnbit1  0x00000003 
+ 00008761  0x0000099b loop  0x0000222d 
+ 00008762  0x0000099c rtn 
+ 00008763  0x0000099f bpatch  0x0000002c , 0x00004005 
+ 00008764  0x000009a0 arg  0x0000226a , 0x00000013 
+ 00008765  0x000009a1 call  0x00002261 
+ 00008766  0x000009a2 nrtn  0x00000005 
+ 00008767  0x000009a3 deposit  0x00000011 
+ 00008768  0x000009a4 store  0x00000002 , 0x0000001e 
+ 00008769  0x000009a5 force  0x00000000 , 0x0000003e 
+ 00008770  0x000009a6 rtn 
+ 00008771  0x000009ab call  0x00002725 
+ 00008772  0x000009ac branch  0x0000224b , 0x00000001 
+ 00008773  0x000009ad fetch  0x00000002 , 0x0000001e 
+ 00008774  0x000009ae add  0x0000003f , 0x00000017 , 0x00000005 
+ 00008775  0x000009af fetch  0x00000001 , 0x00000047 
+ 00008776  0x000009b0 istore  0x00000001 , 0x00000005 
+ 00008777  0x000009b1 arg  0x000022aa , 0x00000013 
+ 00008778  0x000009b2 branch  0x00002261 
+ 00008779  0x000009b5 fetch  0x00000001 , 0x00000047 
+ 00008780  0x000009b6 isolate1  0x00000003 , 0x0000003f 
+ 00008781  0x000009b7 branch  0x00002250 , 0x00000001 
+ 00008782  0x000009b8 force  0x00000001 , 0x0000003e 
+ 00008783  0x000009b9 rtn 
+ 00008784  0x000009bb force  0x00000000 , 0x0000003e 
+ 00008785  0x000009bc rtn 
+ 00008786  0x000009c0 arg  0x000022a7 , 0x00000013 
+ 00008787  0x000009c1 branch  0x00002261 
+ 00008788  0x000009c4 fetcht  0x00000002 , 0x0000001e 
+ 00008789  0x000009c5 arg  0x000022cf , 0x00000013 
+ 00008790  0x000009c6 branch  0x00002261 
+ 00008791  0x000009cb fetcht  0x00000001 , 0x000041cf 
+ 00008792  0x000009cd arg  0x00002275 , 0x00000013 
+ 00008793  0x000009ce branch  0x00002261 
+ 00008794  0x000009d1 bpatch  0x0000002d , 0x00004005 
+ 00008795  0x000009d2 fetcht  0x00000006 , 0x000041d0 
+ 00008796  0x000009d4 arg  0x0000226e , 0x00000013 
+ 00008797  0x000009d5 branch  0x00002261 
+ 00008798  0x000009d8 arg  0x0000227b , 0x00000013 
+ 00008799  0x000009d9 branch  0x00002261 
+ 00008800  0x000009dc arg  0x000022c6 , 0x00000013 
+ 00008801  0x000009de bpatch  0x0000002e , 0x00004005 
+ 00008802  0x000009df arg  0x00004040 , 0x00000011 
+ 00008803  0x000009e0 arg  0x00000001 , 0x00000039 
+ 00008804  0x000009e2 ifetch  0x00000001 , 0x00000011 
+ 00008805  0x000009e3 copy  0x00000013 , 0x0000003d 
+ 00008806  0x000009e5 increase  0x00000050 , 0x00000011 
+ 00008807  0x000009e6 loop  0x00002264 
+ 00008808  0x000009e7 force  0x00000001 , 0x0000003e 
+ 00008809  0x000009e8 rtn 
+ 00008810  0x000009eb bbit1  0x00000000 , 0x00002266 
+ 00008811  0x000009ec bbit1  0x00000003 , 0x00002266 
+ 00008812  0x000009ed force  0x00000000 , 0x0000003e 
+ 00008813  0x000009ee rtn 
+ 00008814  0x000009f1 bbit1  0x00000003 , 0x00002270 
+ 00008815  0x000009f2 bbit0  0x00000000 , 0x00002266 
+ 00008816  0x000009f4 add  0x00000011 , 0x00000010 , 0x00000006 
+ 00008817  0x000009f5 ifetch  0x00000006 , 0x00000006 
+ 00008818  0x000009f6 isub  0x00000002 , 0x0000003e 
+ 00008819  0x000009f7 rtn  0x00000005 
+ 00008820  0x000009f8 branch  0x00002266 
+ 00008821  0x000009fb bbit0  0x00000000 , 0x00002266 
+ 00008822  0x000009fc add  0x00000011 , 0x00000016 , 0x00000006 
+ 00008823  0x000009fd ifetch  0x00000001 , 0x00000006 
+ 00008824  0x000009fe isub  0x00000002 , 0x0000003e 
+ 00008825  0x000009ff rtn  0x00000005 
+ 00008826  0x00000a00 branch  0x00002266 
+ 00008827  0x00000a03 bbit0  0x00000001 , 0x00002266 
+ 00008828  0x00000a05 call  0x000022b3 
+ 00008829  0x00000a06 call  0x00002297 
+ 00008830  0x00000a07 isub  0x00000002 , 0x0000003f 
+ 00008831  0x00000a08 increase  0x00000001 , 0x0000003f 
+ 00008832  0x00000a09 branch  0x00002291 , 0x00000002 
+ 00008833  0x00000a0a copy  0x00000006 , 0x00000012 
+ 00008834  0x00000a0b store  0x00000009 , 0x00000aa2 
+ 00008835  0x00000a0c fetch  0x00000001 , 0x000044c0 
+ 00008836  0x00000a0d nbranch  0x00002289 , 0x00000034 
+ 00008837  0x00000a0e fetch  0x00000009 , 0x00000aa2 
+ 00008838  0x00000a0f copy  0x00000012 , 0x00000006 
+ 00008839  0x00000a10 increase  0x00000005 , 0x0000003f 
+ 00008840  0x00000a11 branch  0x0000228c 
+ 00008841  0x00000a13 fetch  0x00000009 , 0x00000aa2 
+ 00008842  0x00000a14 copy  0x00000012 , 0x00000006 
+ 00008843  0x00000a15 increase  0x00000014 , 0x0000003f 
+ 00008844  0x00000a17 nbranch  0x00002266 , 0x00000002 
+ 00008845  0x00000a19 copy  0x00000002 , 0x00000021 
+ 00008846  0x00000a1a call  0x000022bf 
+ 00008847  0x00000a1b force  0x00000000 , 0x0000003e 
+ 00008848  0x00000a1c rtn 
+ 00008849  0x00000a20 iforce  0x00000012 
+ 00008850  0x00000a21 add  0x00000011 , 0x00000002 , 0x00000006 
+ 00008851  0x00000a22 ifetch  0x00000002 , 0x00000006 
+ 00008852  0x00000a23 branch  0x0000228d , 0x00000034 
+ 00008853  0x00000a24 call  0x000022bf 
+ 00008854  0x00000a25 branch  0x0000227c 
+ 00008855  0x00000a28 rshift16  0x0000003f , 0x0000000b 
+ 00008856  0x00000a29 rshift8  0x0000000b , 0x0000000b 
+ 00008857  0x00000a2a branch  0x000022a1 , 0x00000005 
+ 00008858  0x00000a2b compare  0x0000000f , 0x0000000b , 0x0000000f 
+ 00008859  0x00000a2c nrtn  0x00000001 
+ 00008860  0x00000a2d rshift16  0x00000002 , 0x0000000b 
+ 00008861  0x00000a2e rshift8  0x0000000b , 0x0000000b 
+ 00008862  0x00000a2f nrtn  0x00000005 
+ 00008863  0x00000a30 set1  0x0000001c , 0x00000002 
+ 00008864  0x00000a31 rtn 
+ 00008865  0x00000a33 rshift16  0x00000002 , 0x0000000b 
+ 00008866  0x00000a34 rshift8  0x0000000b , 0x0000000b 
+ 00008867  0x00000a35 compare  0x0000000f , 0x0000000b , 0x0000000f 
+ 00008868  0x00000a36 nrtn  0x00000001 
+ 00008869  0x00000a37 set1  0x0000001c , 0x0000003f 
+ 00008870  0x00000a38 rtn 
+ 00008871  0x00000a3b bbit0  0x00000000 , 0x00002266 
+ 00008872  0x00000a3c force  0x00000000 , 0x0000003e 
+ 00008873  0x00000a3d rtn 
+ 00008874  0x00000a40 bbit0  0x00000000 , 0x00002266 
+ 00008875  0x00000a41 add  0x00000011 , 0x00000001 , 0x00000006 
+ 00008876  0x00000a42 ifetch  0x00000001 , 0x00000006 
+ 00008877  0x00000a43 bbit1  0x00000000 , 0x00002266 
+ 00008878  0x00000a44 add  0x00000011 , 0x00000017 , 0x00000006 
+ 00008879  0x00000a45 ifetch  0x00000001 , 0x00000006 
+ 00008880  0x00000a46 bbit0  0x00000003 , 0x00002266 
+ 00008881  0x00000a47 force  0x00000000 , 0x0000003e 
+ 00008882  0x00000a48 rtn 
+ 00008883  0x00000a4b add  0x00000011 , 0x00000001 , 0x00000006 
+ 00008884  0x00000a4c ifetcht  0x00000001 , 0x00000006 
+ 00008885  0x00000a4d deposit  0x00000022 
+ 00008886  0x00000a4e isolate1  0x00000001 , 0x00000002 
+ 00008887  0x00000a4f add  0x00000011 , 0x00000004 , 0x00000006 
+ 00008888  0x00000a50 ifetcht  0x00000004 , 0x00000006 
+ 00008889  0x00000a51 rtn  0x00000001 
+ 00008890  0x00000a52 add  0x00000011 , 0x00000008 , 0x00000006 
+ 00008891  0x00000a53 ifetch  0x00000006 , 0x00000006 
+ 00008892  0x00000a54 call  0x00002854 
+ 00008893  0x00000a55 deposit  0x00000028 
+ 00008894  0x00000a56 rtn 
+ 00008895  0x00000a59 add  0x00000011 , 0x00000002 , 0x00000006 
+ 00008896  0x00000a5a add  0x00000011 , 0x00000004 , 0x00000005 
+ 00008897  0x00000a5b ifetch  0x00000002 , 0x00000006 
+ 00008898  0x00000a5c iadd  0x00000002 , 0x0000000b 
+ 00008899  0x00000a5d deposit  0x0000000b 
+ 00008900  0x00000a5e istore  0x00000004 , 0x00000005 
+ 00008901  0x00000a5f branch  0x00005449 
+ 00008902  0x00000a63 bbit0  0x00000001 , 0x00002266 
+ 00008903  0x00000a64 call  0x000022b3 
+ 00008904  0x00000a65 iadd  0x0000001b , 0x0000003f 
+ 00008905  0x00000a66 iadd  0x0000001b , 0x0000003f 
+ 00008906  0x00000a67 iadd  0x00000007 , 0x0000003f 
+ 00008907  0x00000a68 isub  0x00000002 , 0x0000003e 
+ 00008908  0x00000a69 nbranch  0x00002266 , 0x00000002 
+ 00008909  0x00000a6a force  0x00000000 , 0x0000003e 
+ 00008910  0x00000a6b rtn 
+ 00008911  0x00000a6e bbit0  0x00000000 , 0x00002266 
+ 00008912  0x00000a6f deposit  0x00000002 
+ 00008913  0x00000a70 isub  0x00000011 , 0x0000003e 
+ 00008914  0x00000a71 branch  0x00002266 , 0x0000003e 
+ 00008915  0x00000a72 add  0x00000011 , 0x00000001 , 0x00000006 
+ 00008916  0x00000a73 ifetch  0x00000001 , 0x00000006 
+ 00008917  0x00000a74 bbit1  0x00000000 , 0x00002266 
+ 00008918  0x00000a75 ifetch  0x00000001 , 0x00000011 
+ 00008919  0x00000a76 set0  0x00000007 , 0x0000003f 
+ 00008920  0x00000a77 istore  0x00000001 , 0x00000011 
+ 00008921  0x00000a78 branch  0x00002266 
+ 00008922  0x00000a7c bpatch  0x0000002f , 0x00004005 
+ 00008923  0x00000a7d call  0x00002a4f 
+ 00008924  0x00000a7f add  0x00000022 , 0x00000001 , 0x00000021 
+ 00008925  0x00000a80 call  0x000028e2 
+ 00008926  0x00000a81 force  0x00000003 , 0x00000024 
+ 00008927  0x00000a82 call  0x000028d2 
+ 00008928  0x00000a83 call  0x00002a51 
+ 00008929  0x00000a84 call  0x00002a56 
+ 00008930  0x00000a85 call  0x00002a64 
+ 00008931  0x00000a86 branch  0x00002762 
+ 00008932  0x00000a89 bpatch  0x00000030 , 0x00004006 
+ 00008933  0x00000a8a call  0x00002a4d 
+ 00008934  0x00000a8c add  0x00000022 , 0x00000001 , 0x00000021 
+ 00008935  0x00000a8d call  0x000028e2 
+ 00008936  0x00000a8e force  0x00000003 , 0x00000024 
+ 00008937  0x00000a8f call  0x000028cc 
+ 00008938  0x00000a90 call  0x0000242a 
+ 00008939  0x00000a91 call  0x000029f1 
+ 00008940  0x00000a92 call  0x00002a5b 
+ 00008941  0x00000a93 call  0x000029eb 
+ 00008942  0x00000a95 call  0x00002a0d 
+ 00008943  0x00000a96 nrtn  0x00000018 
+ 00008944  0x00000a97 call  0x000029bb 
+ 00008945  0x00000a98 branch  0x0000251c 
+ 00008946  0x00000a9d bpatch  0x00000031 , 0x00004006 
+ 00008947  0x00000a9e fetch  0x00000001 , 0x00000181 
+ 00008948  0x00000a9f iforce  0x00000004 
+ 00008949  0x00000aa0 force  0x00000001 , 0x00000001 
+ 00008950  0x00000aa1 call  0x000022da 
+ 00008951  0x00000aa2 branch  0x000022e4 
+ 00008952  0x00000aae fetch  0x00000001 , 0x00004093 
+ 00008953  0x00000aaf rtnbit0  0x00000000 
+ 00008954  0x00000ab0 force  0x00000004 , 0x00000007 
+ 00008955  0x00000ab1 call  0x00007f16 
+ 00008956  0x00000ab2 nrtn  0x00000034 
+ 00008957  0x00000ab3 fetcht  0x00000002 , 0x000040ad 
+ 00008958  0x00000ab4 force  0x00000004 , 0x00000007 
+ 00008959  0x00000ab5 call  0x0000271c 
+ 00008960  0x00000ab6 rtn  0x00000028 
+ 00008961  0x00000ab7 call  0x00002308 
+ 00008962  0x00000ab8 force  0x00000004 , 0x00000007 
+ 00008963  0x00000ab9 fetch  0x00000002 , 0x000040af 
+ 00008964  0x00000aba nbranch  0x00007f08 , 0x00000018 
+ 00008965  0x00000abb random  0x0000003f 
+ 00008966  0x00000abc iand  0x00000035 , 0x0000003f 
+ 00008967  0x00000abd branch  0x00007f08 
+ 00008968  0x00000ac1 bpatch  0x00000032 , 0x00004006 
+ 00008969  0x00000ac2 jam  0x00000000 , 0x00000181 
+ 00008970  0x00000ac3 disable  0x00000030 
+ 00008971  0x00000ac4 disable  0x0000002e 
+ 00008972  0x00000ac5 call  0x000028a4 
+ 00008973  0x00000ac6 and  0x00000022 , 0x000001fc , 0x00000021 
+ 00008974  0x00000ac7 force  0x00000001 , 0x00000024 
+ 00008975  0x00000ac8 call  0x000028d8 
+ 00008976  0x00000ac9 call  0x000028cc 
+ 00008977  0x00000aca setflip  0x0000001d , 0x00000000 
+ 00008978  0x00000acb fetch  0x00000001 , 0x00000006 
+ 00008979  0x00000acc increase  0x00000001 , 0x0000003f 
+ 00008980  0x00000acd store  0x00000001 , 0x00000006 
+ 00008981  0x00000ace call  0x000028f2 
+ 00008982  0x00000acf call  0x000029eb 
+ 00008983  0x00000ad0 call  0x00002a14 
+ 00008984  0x00000ad1 nrtn  0x00000018 
+ 00008985  0x00000ad2 bpatch  0x00000033 , 0x00004006 
+ 00008986  0x00000ad3 force  0x00000000 , 0x0000001b 
+ 00008987  0x00000ad4 call  0x000028f9 
+ 00008988  0x00000ad5 fetch  0x00000001 , 0x00000007 
+ 00008989  0x00000ad6 increase  0x00000001 , 0x0000003f 
+ 00008990  0x00000ad7 store  0x00000001 , 0x00000007 
+ 00008991  0x00000ad8 call  0x000028d8 
+ 00008992  0x00000ad9 call  0x00002a4d 
+ 00008993  0x00000ada or_into  0x00000002 , 0x00000021 
+ 00008994  0x00000adb force  0x00000001 , 0x00000024 
+ 00008995  0x00000adc call  0x000028d2 
+ 00008996  0x00000add call  0x000028f2 
+ 00008997  0x00000ade call  0x00002a51 
+ 00008998  0x00000adf call  0x00002a5f 
+ 00008999  0x00000ae0 deposit  0x00000022 
+ 00009000  0x00000ae1 store  0x00000004 , 0x00000161 
+ 00009001  0x00000ae2 call  0x00002a64 
+ 00009002  0x00000ae3 force  0x00000002 , 0x00000001 
+ 00009003  0x00000ae4 force  0x00000000 , 0x00000004 
+ 00009004  0x00000ae5 call  0x00002a6b 
+ 00009005  0x00000ae6 call  0x00002766 
+ 00009006  0x00000ae7 call  0x00002332 
+ 00009007  0x00000ae8 and_into  0x000001fd , 0x00000021 
+ 00009008  0x00000ae9 increase  0x00000001 , 0x00000026 
+ 00009009  0x00000aea rtn 
+ 00009010  0x00000aed bpatch  0x00000034 , 0x00004006 
+ 00009011  0x00000aee fetch  0x00000001 , 0x000040d1 
+ 00009012  0x00000aef rtn  0x00000034 
+ 00009013  0x00000af0 arg  0x0000018e , 0x00000005 
+ 00009014  0x00000af1 fetch  0x00000001 , 0x00004515 
+ 00009015  0x00000af2 copy  0x0000003f , 0x00000039 
+ 00009016  0x00000af3 increase  0x00000001 , 0x0000003f 
+ 00009017  0x00000af4 istore  0x00000001 , 0x00000005 
+ 00009018  0x00000af5 copy  0x00000005 , 0x00000002 
+ 00009019  0x00000af6 increase  0x00000001 , 0x0000003f 
+ 00009020  0x00000af7 store  0x00000002 , 0x000041dc 
+ 00009021  0x00000af8 copy  0x00000002 , 0x00000005 
+ 00009022  0x00000af9 setarg  0x00000009 
+ 00009023  0x00000afa istore  0x00000001 , 0x00000005 
+ 00009024  0x00000afb arg  0x00004516 , 0x00000006 
+ 00009025  0x00000afc call  0x00007f01 
+ 00009026  0x00000afe arg  0x0000458d , 0x00000013 
+ 00009027  0x00000aff arg  0x00000004 , 0x00000039 
+ 00009028  0x00000b00 call  0x00002354 
+ 00009029  0x00000b01 arg  0x00004577 , 0x00000013 
+ 00009030  0x00000b02 arg  0x00000001 , 0x00000039 
+ 00009031  0x00000b03 call  0x00002354 
+ 00009032  0x00000b05 force  0x0000000a , 0x00000001 
+ 00009033  0x00000b06 jam  0x00000002 , 0x000041db 
+ 00009034  0x00000b07 setarg  0x0000018e 
+ 00009035  0x00000b08 store  0x00000002 , 0x0000016f 
+ 00009036  0x00000b09 call  0x00002a4d 
+ 00009037  0x00000b0a call  0x000028d2 
+ 00009038  0x00000b0b call  0x00002a51 
+ 00009039  0x00000b0c call  0x00002a5f 
+ 00009040  0x00000b0d call  0x00002a64 
+ 00009041  0x00000b0e call  0x00002a6b 
+ 00009042  0x00000b0f call  0x00002766 
+ 00009043  0x00000b10 rtn 
+ 00009044  0x00000b14 copy  0x00000005 , 0x00000002 
+ 00009045  0x00000b15 copy  0x00000013 , 0x00000006 
+ 00009046  0x00000b16 ifetch  0x00000001 , 0x00000006 
+ 00009047  0x00000b17 rtn  0x00000034 
+ 00009048  0x00000b19 lshift  0x0000003f , 0x0000003f 
+ 00009049  0x00000b1a loop  0x00002358 
+ 00009050  0x00000b1b copy  0x0000003f , 0x00000011 
+ 00009051  0x00000b1c increase  0x00000002 , 0x0000003f 
+ 00009052  0x00000b1d copy  0x0000003f , 0x00000007 
+ 00009053  0x00000b1e fetch  0x00000002 , 0x000041dc 
+ 00009054  0x00000b1f iadd  0x00000007 , 0x0000003f 
+ 00009055  0x00000b20 store  0x00000002 , 0x000041dc 
+ 00009056  0x00000b21 copy  0x00000002 , 0x00000005 
+ 00009057  0x00000b22 copy  0x00000011 , 0x0000003f 
+ 00009058  0x00000b23 increase  0x00000001 , 0x0000003f 
+ 00009059  0x00000b24 istore  0x00000001 , 0x00000005 
+ 00009060  0x00000b25 copy  0x00000013 , 0x00000006 
+ 00009061  0x00000b26 ifetch  0x00000001 , 0x00000006 
+ 00009062  0x00000b27 ifetch  0x00000001 , 0x00000006 
+ 00009063  0x00000b28 istore  0x00000001 , 0x00000005 
+ 00009064  0x00000b29 copy  0x00000011 , 0x00000039 
+ 00009065  0x00000b2a branch  0x00007f01 
+ 00009066  0x00000b31 fetch  0x00000001 , 0x00004093 
+ 00009067  0x00000b32 rtnbit0  0x00000001 
+ 00009068  0x00000b33 force  0x00000005 , 0x00000007 
+ 00009069  0x00000b34 call  0x00007f16 
+ 00009070  0x00000b35 nrtn  0x00000034 
+ 00009071  0x00000b36 fetcht  0x00000002 , 0x000040b1 
+ 00009072  0x00000b37 force  0x00000028 , 0x00000007 
+ 00009073  0x00000b38 call  0x0000271c 
+ 00009074  0x00000b39 rtn  0x00000028 
+ 00009075  0x00000b3a force  0x00000000 , 0x00000004 
+ 00009076  0x00000b3b jam  0x00000008 , 0x00000010 
+ 00009077  0x00000b3c set0  0x0000000b , 0x00000000 
+ 00009078  0x00000b3d call  0x0000237a 
+ 00009079  0x00000b3e force  0x00000005 , 0x00000007 
+ 00009080  0x00000b3f fetch  0x00000002 , 0x000040b3 
+ 00009081  0x00000b40 branch  0x00007f08 
+ 00009082  0x00000b44 bpatch  0x00000035 , 0x00004006 
+ 00009083  0x00000b45 disable  0x00000030 
+ 00009084  0x00000b46 call  0x000028a4 
+ 00009085  0x00000b47 fetch  0x00000001 , 0x00000008 
+ 00009086  0x00000b48 increase  0x00000001 , 0x0000003f 
+ 00009087  0x00000b49 store  0x00000001 , 0x00000008 
+ 00009088  0x00000b4a force  0x00000000 , 0x00000026 
+ 00009089  0x00000b4b call  0x000028e2 
+ 00009090  0x00000b4c add  0x00000022 , 0x00000001 , 0x00000021 
+ 00009091  0x00000b4d force  0x00000002 , 0x00000024 
+ 00009092  0x00000b4e bpatch  0x00000036 , 0x00004006 
+ 00009093  0x00000b4f call  0x000028cc 
+ 00009094  0x00000b50 call  0x000029eb 
+ 00009095  0x00000b51 call  0x00002a14 
+ 00009096  0x00000b52 nrtn  0x00000018 
+ 00009097  0x00000b53 call  0x000028f9 
+ 00009098  0x00000b54 fetch  0x00000001 , 0x00000009 
+ 00009099  0x00000b55 increase  0x00000001 , 0x0000003f 
+ 00009100  0x00000b56 store  0x00000001 , 0x00000009 
+ 00009101  0x00000b57 force  0x00000000 , 0x0000001b 
+ 00009102  0x00000b58 call  0x00002a4d 
+ 00009103  0x00000b59 or_into  0x00000002 , 0x00000021 
+ 00009104  0x00000b5a force  0x00000001 , 0x00000024 
+ 00009105  0x00000b5b call  0x000028d2 
+ 00009106  0x00000b5c call  0x00002a51 
+ 00009107  0x00000b5d call  0x00002a5f 
+ 00009108  0x00000b5e call  0x00002a64 
+ 00009109  0x00000b5f call  0x0000264d 
+ 00009110  0x00000b60 force  0x00000000 , 0x00000004 
+ 00009111  0x00000b61 arg  0x00000600 , 0x0000000b 
+ 00009112  0x00000b62 until  0x00000029 , 0x00000026 
+ 00009113  0x00000b63 or_into  0x00000003 , 0x00000028 
+ 00009114  0x00000b64 and_into  0x000001fd , 0x00000021 
+ 00009115  0x00000b66 bpatch  0x00000037 , 0x00004006 
+ 00009116  0x00000b67 increase  0x00000001 , 0x00000026 
+ 00009117  0x00000b68 call  0x000028cc 
+ 00009118  0x00000b69 call  0x000029eb 
+ 00009119  0x00000b6a call  0x00002a07 
+ 00009120  0x00000b6b nbranch  0x000023a4 , 0x00000018 
+ 00009121  0x00000b6c call  0x00002a6b 
+ 00009122  0x00000b6d call  0x0000251e 
+ 00009123  0x00000b6e bmark1  0x0000000b , 0x000023ab 
+ 00009124  0x00000b70 bpatch  0x00000038 , 0x00004007 
+ 00009125  0x00000b71 fetch  0x00000001 , 0x00000010 
+ 00009126  0x00000b72 rtn  0x00000034 
+ 00009127  0x00000b73 increase  0xffffffff , 0x0000003f 
+ 00009128  0x00000b74 store  0x00000001 , 0x00000010 
+ 00009129  0x00000b75 call  0x00002a4f 
+ 00009130  0x00000b76 branch  0x0000239b 
+ 00009131  0x00000b7a bpatch  0x00000039 , 0x00004007 
+ 00009132  0x00000b7b set0  0x00000001 , 0x00000028 
+ 00009133  0x00000b7c set1  0x00000000 , 0x00000028 
+ 00009134  0x00000b7d fetch  0x00000001 , 0x0000000a 
+ 00009135  0x00000b7e increase  0x00000001 , 0x0000003f 
+ 00009136  0x00000b7f store  0x00000001 , 0x0000000a 
+ 00009137  0x00000b80 call  0x00002a4d 
+ 00009138  0x00000b81 or_into  0x00000002 , 0x00000021 
+ 00009139  0x00000b82 call  0x000028d2 
+ 00009140  0x00000b83 call  0x00002a51 
+ 00009141  0x00000b84 call  0x00002a5f 
+ 00009142  0x00000b85 call  0x00002a64 
+ 00009143  0x00000b86 call  0x0000264d 
+ 00009144  0x00000b88 compare  0x00000003 , 0x00000028 , 0x00000003 
+ 00009145  0x00000b89 branch  0x000023bc , 0x00000001 
+ 00009146  0x00000b8a until  0x0000003e , 0x00000017 
+ 00009147  0x00000b8b branch  0x000023b8 
+ 00009148  0x00000b8d fetch  0x00000004 , 0x00000165 
+ 00009149  0x00000b8e or_into  0x00000003 , 0x0000003f 
+ 00009150  0x00000b8f icopy  0x00000028 
+ 00009151  0x00000b92 bpatch  0x0000003a , 0x00004007 
+ 00009152  0x00000b93 fetch  0x00000006 , 0x00000178 
+ 00009153  0x00000b94 store  0x00000006 , 0x00000040 
+ 00009154  0x00000b95 call  0x00002435 
+ 00009155  0x00000b97 call  0x0000247c 
+ 00009156  0x00000b98 branch  0x000023c8 , 0x0000002d 
+ 00009157  0x00000b99 call  0x00002455 
+ 00009158  0x00000b9a nbranch  0x000023c3 , 0x00000034 
+ 00009159  0x00000b9b rtn 
+ 00009160  0x00000b9f bpatch  0x0000003b , 0x00004007 
+ 00009161  0x00000ba0 call  0x00002440 
+ 00009162  0x00000ba1 call  0x0000223b 
+ 00009163  0x00000ba2 nrtn  0x00000005 
+ 00009164  0x00000ba3 jam  0x00000000 , 0x00000031 
+ 00009165  0x00000ba4 call  0x00002841 
+ 00009166  0x00000ba5 branch  0x00002223 
+ 00009167  0x00000bab bpatch  0x0000003c , 0x00004007 
+ 00009168  0x00000bac call  0x00002850 
+ 00009169  0x00000bad call  0x000023f3 
+ 00009170  0x00000bae rtn  0x00000028 
+ 00009171  0x00000bb0 bpatch  0x0000003d , 0x00004007 
+ 00009172  0x00000bb1 call  0x00002c69 
+ 00009173  0x00000bb2 call  0x00006caa 
+ 00009174  0x00000bb3 call  0x00002514 
+ 00009175  0x00000bb4 nbranch  0x000023e2 , 0x0000002d 
+ 00009176  0x00000bb5 call  0x00002a88 
+ 00009177  0x00000bb6 call  0x00006cc2 
+ 00009178  0x00000bb7 call  0x00002489 
+ 00009179  0x00000bb8 call  0x00002757 
+ 00009180  0x00000bb9 call  0x00002728 
+ 00009181  0x00000bba call  0x00005d08 
+ 00009182  0x00000bbb fetch  0x00000001 , 0x0000000b 
+ 00009183  0x00000bbc increase  0x00000001 , 0x0000003f 
+ 00009184  0x00000bbd store  0x00000001 , 0x0000000b 
+ 00009185  0x00000bbe call  0x00002841 
+ 00009186  0x00000bc0 bpatch  0x0000003e , 0x00004007 
+ 00009187  0x00000bc1 call  0x00002bb1 
+ 00009188  0x00000bc2 call  0x00002a7f 
+ 00009189  0x00000bc3 branch  0x000023eb , 0x00000002 
+ 00009190  0x00000bc4 call  0x000021a7 
+ 00009191  0x00000bc5 nbranch  0x000023eb , 0x00000028 
+ 00009192  0x00000bc6 call  0x000026f3 
+ 00009193  0x00000bc7 nbranch  0x000023d3 , 0x00000034 
+ 00009194  0x00000bc8 rtn 
+ 00009195  0x00000bcb bpatch  0x0000003f , 0x00004007 
+ 00009196  0x00000bcc jam  0x00000000 , 0x00000151 
+ 00009197  0x00000bcd jam  0x00000000 , 0x0000017f 
+ 00009198  0x00000bce call  0x0000245d 
+ 00009199  0x00000bcf set0  0x00000011 , 0x00000000 
+ 00009200  0x00000bd0 call  0x00007fb0 
+ 00009201  0x00000bd1 fetch  0x00000001 , 0x00000030 
+ 00009202  0x00000bd2 rtn 
+ 00009203  0x00000bd6 bpatch  0x00000040 , 0x00004008 
+ 00009204  0x00000bd7 call  0x000021c9 
+ 00009205  0x00000bd8 nrtn  0x00000028 
+ 00009206  0x00000bd9 copy  0x00000004 , 0x00000002 
+ 00009207  0x00000bda call  0x00002a6f 
+ 00009208  0x00000bdb store  0x00000001 , 0x00000181 
+ 00009209  0x00000bdc copy  0x00000002 , 0x00000004 
+ 00009210  0x00000bdd jam  0x00000020 , 0x00000011 
+ 00009211  0x00000bdf bpatch  0x00000041 , 0x00004008 
+ 00009212  0x00000be0 call  0x00002a4f 
+ 00009213  0x00000be1 force  0x00000002 , 0x00000001 
+ 00009214  0x00000be2 call  0x0000274f 
+ 00009215  0x00000be3 deposit  0x00000022 
+ 00009216  0x00000be4 store  0x00000004 , 0x00000161 
+ 00009217  0x00000be5 call  0x00002762 
+ 00009218  0x00000be6 call  0x00002a4d 
+ 00009219  0x00000be7 enable  0x0000002f 
+ 00009220  0x00000be8 call  0x000024f6 
+ 00009221  0x00000be9 branch  0x0000240d , 0x00000018 
+ 00009222  0x00000bea call  0x000028f9 
+ 00009223  0x00000beb call  0x00002455 
+ 00009224  0x00000bec nbranch  0x000023fb , 0x00000034 
+ 00009225  0x00000bed rtnmark0  0x00000004 
+ 00009226  0x00000bee jam  0x00000034 , 0x0000007c 
+ 00009227  0x00000bef set1  0x00000003 , 0x00000000 
+ 00009228  0x00000bf0 rtn 
+ 00009229  0x00000bf2 enable  0x00000030 
+ 00009230  0x00000bf3 call  0x00002435 
+ 00009231  0x00000bf4 call  0x000028a4 
+ 00009232  0x00000bf6 bpatch  0x00000042 , 0x00004008 
+ 00009233  0x00000bf7 call  0x000022f2 
+ 00009234  0x00000bf8 branch  0x00002419 , 0x00000018 
+ 00009235  0x00000bf9 call  0x00002455 
+ 00009236  0x00000bfa nbranch  0x00002410 , 0x00000034 
+ 00009237  0x00000bfb disable  0x00000030 
+ 00009238  0x00000bfc deposit  0x00000028 
+ 00009239  0x00000bfd store  0x00000004 , 0x000040ca 
+ 00009240  0x00000bfe rtn 
+ 00009241  0x00000c00 enable  0x00000029 
+ 00009242  0x00000c01 bmark0  0x00000004 , 0x0000241f 
+ 00009243  0x00000c02 set0  0x00000004 , 0x00000000 
+ 00009244  0x00000c03 jam  0x00000003 , 0x0000007c 
+ 00009245  0x00000c04 jam  0x00000033 , 0x0000007d 
+ 00009246  0x00000c05 call  0x000062f8 
+ 00009247  0x00000c07 deposit  0x00000004 
+ 00009248  0x00000c08 store  0x00000001 , 0x00000077 
+ 00009249  0x00000c09 force  0x00000000 , 0x0000003f 
+ 00009250  0x00000c0a store  0x00000006 , 0x00000038 
+ 00009251  0x00000c0b fetch  0x00000001 , 0x00000031 
+ 00009252  0x00000c0c set1  0x00000001 , 0x0000003f 
+ 00009253  0x00000c0d store  0x00000001 , 0x00000031 
+ 00009254  0x00000c0e call  0x00002a88 
+ 00009255  0x00000c0f disable  0x00000029 
+ 00009256  0x00000c10 enable  0x00000028 
+ 00009257  0x00000c11 rtn 
+ 00009258  0x00000c16 bpatch  0x00000043 , 0x00004008 
+ 00009259  0x00000c17 disable  0x0000002d 
+ 00009260  0x00000c18 set0  0x00000005 , 0x00000000 
+ 00009261  0x00000c19 set0  0x0000000a , 0x00000000 
+ 00009262  0x00000c1a set0  0x00000010 , 0x00000000 
+ 00009263  0x00000c1b set0  0x0000000f , 0x00000000 
+ 00009264  0x00000c1c fetch  0x00000001 , 0x00000047 
+ 00009265  0x00000c1d set0  0x00000005 , 0x0000003f 
+ 00009266  0x00000c1e set1  0x00000004 , 0x0000003f 
+ 00009267  0x00000c1f store  0x00000001 , 0x00000047 
+ 00009268  0x00000c20 rtn 
+ 00009269  0x00000c23 bpatch  0x00000044 , 0x00004008 
+ 00009270  0x00000c24 jam  0x00000020 , 0x00000011 
+ 00009271  0x00000c25 jam  0x00000050 , 0x00000047 
+ 00009272  0x00000c26 fetch  0x00000002 , 0x000040bf 
+ 00009273  0x00000c27 store  0x00000002 , 0x0000003e 
+ 00009274  0x00000c28 deposit  0x00000022 
+ 00009275  0x00000c29 store  0x00000004 , 0x000040ca 
+ 00009276  0x00000c2a rtn  0x00000030 
+ 00009277  0x00000c2b deposit  0x00000028 
+ 00009278  0x00000c2c store  0x00000004 , 0x000040ca 
+ 00009279  0x00000c2d rtn 
+ 00009280  0x00000c30 bpatch  0x00000045 , 0x00004008 
+ 00009281  0x00000c31 call  0x00005d04 
+ 00009282  0x00000c32 call  0x00002459 
+ 00009283  0x00000c33 store  0x00000001 , 0x00000046 
+ 00009284  0x00000c34 setarg  0x00000000 
+ 00009285  0x00000c35 store  0x00000002 , 0x0000025d 
+ 00009286  0x00000c36 setarg  0x00001c80 
+ 00009287  0x00000c37 store  0x00000002 , 0x00000051 
+ 00009288  0x00000c38 fetch  0x00000001 , 0x00000030 
+ 00009289  0x00000c39 set1  0x00000000 , 0x0000003f 
+ 00009290  0x00000c3a store  0x00000001 , 0x00000030 
+ 00009291  0x00000c3b jam  0x00000000 , 0x0000004b 
+ 00009292  0x00000c3c jam  0x00000000 , 0x0000004c 
+ 00009293  0x00000c3d jam  0x00000000 , 0x000000a0 
+ 00009294  0x00000c3e branch  0x00002a88 
+ 00009295  0x00000c42 bpatch  0x00000046 , 0x00004008 
+ 00009296  0x00000c43 force  0x00000000 , 0x0000003f 
+ 00009297  0x00000c44 store  0x00000008 , 0x000041be 
+ 00009298  0x00000c45 istore  0x00000008 , 0x00000005 
+ 00009299  0x00000c46 call  0x000021c5 
+ 00009300  0x00000c47 branch  0x00002254 
+ 00009301  0x00000c4a fetch  0x00000001 , 0x00000011 
+ 00009302  0x00000c4b increase  0xffffffff , 0x0000003f 
+ 00009303  0x00000c4c store  0x00000001 , 0x00000011 
+ 00009304  0x00000c4d rtn 
+ 00009305  0x00000c50 fetch  0x00000001 , 0x000040cf 
+ 00009306  0x00000c51 increase  0x00000001 , 0x0000003f 
+ 00009307  0x00000c52 store  0x00000001 , 0x000040cf 
+ 00009308  0x00000c53 rtn 
+ 00009309  0x00000c57 bpatch  0x00000047 , 0x00004008 
+ 00009310  0x00000c58 fetch  0x00000001 , 0x000041ce 
+ 00009311  0x00000c59 beq  0x00000003 , 0x00002462 
+ 00009312  0x00000c5a fetch  0x00000001 , 0x00000048 
+ 00009313  0x00000c5b bne  0x00000001 , 0x00002466 
+ 00009314  0x00000c5d call  0x00004d06 
+ 00009315  0x00000c5e nbranch  0x00002466 , 0x00000005 
+ 00009316  0x00000c5f call  0x000021a4 
+ 00009317  0x00000c60 jam  0x00000000 , 0x000041ce 
+ 00009318  0x00000c62 bpatch  0x00000048 , 0x00004009 
+ 00009319  0x00000c63 call  0x000033af 
+ 00009320  0x00000c64 call  0x000026e9 
+ 00009321  0x00000c65 jam  0x00000002 , 0x00000a99 
+ 00009322  0x00000c66 call  0x00007d86 
+ 00009323  0x00000c67 call  0x00005cf7 
+ 00009324  0x00000c68 call  0x00004d6b 
+ 00009325  0x00000c69 call  0x0000757d 
+ 00009326  0x00000c6a fetch  0x00000001 , 0x00000030 
+ 00009327  0x00000c6b set0  0x00000000 
+ 00009328  0x00000c6c store  0x00000001 , 0x00000030 
+ 00009329  0x00000c6d jam  0x00000000 , 0x00004681 
+ 00009330  0x00000c6f fetch  0x00000001 , 0x0000004c 
+ 00009331  0x00000c70 compare  0x00000000 , 0x0000003f , 0x000000c0 
+ 00009332  0x00000c71 branch  0x00002476 , 0x00000001 
+ 00009333  0x00000c72 set0  0x00000001 , 0x00000000 
+ 00009334  0x00000c74 fetch  0x00000001 , 0x00000047 
+ 00009335  0x00000c75 bbit0  0x00000003 , 0x00002478 
+ 00009336  0x00000c77 fetch  0x00000001 , 0x0000004b 
+ 00009337  0x00000c78 rtnbit0  0x00000006 
+ 00009338  0x00000c79 set0  0x00000002 , 0x00000000 
+ 00009339  0x00000c7a rtn 
+ 00009340  0x00000c7d bpatch  0x00000049 , 0x00004009 
+ 00009341  0x00000c7e fetch  0x00000001 , 0x00000174 
+ 00009342  0x00000c7f rtn  0x00000034 
+ 00009343  0x00000c80 icopy  0x00000004 
+ 00009344  0x00000c81 call  0x00002514 
+ 00009345  0x00000c82 nrtn  0x0000002d 
+ 00009346  0x00000c83 force  0x00000000 , 0x00000001 
+ 00009347  0x00000c84 call  0x00002757 
+ 00009348  0x00000c85 deposit  0x00000004 
+ 00009349  0x00000c86 store  0x00000001 , 0x00000077 
+ 00009350  0x00000c87 force  0x00000000 , 0x0000003f 
+ 00009351  0x00000c88 store  0x00000001 , 0x00000174 
+ 00009352  0x00000c89 rtn 
+ 00009353  0x00000c90 bpatch  0x0000004a , 0x00004009 
+ 00009354  0x00000c91 fetch  0x00000001 , 0x00000030 
+ 00009355  0x00000c92 bbit0  0x00000002 , 0x00002496 
+ 00009356  0x00000c93 force  0x00000007 , 0x00000001 
+ 00009357  0x00000c94 bmark0  0x00000007 , 0x00002495 
+ 00009358  0x00000c95 call  0x00002725 
+ 00009359  0x00000c96 nbranch  0x00002496 , 0x00000001 
+ 00009360  0x00000c97 branch  0x00002496 , 0x0000002e 
+ 00009361  0x00000c98 call  0x000024c1 
+ 00009362  0x00000c99 setarg  0x00000002 
+ 00009363  0x00000c9a store  0x00000002 , 0x000040c8 
+ 00009364  0x00000c9b rtn 
+ 00009365  0x00000c9d nrtn  0x0000002e 
+ 00009366  0x00000c9f bpatch  0x0000004b , 0x00004009 
+ 00009367  0x00000ca0 call  0x00002243 
+ 00009368  0x00000ca1 nbranch  0x000024a7 , 0x00000005 
+ 00009369  0x00000ca2 fetch  0x00000001 , 0x00000047 
+ 00009370  0x00000ca3 bbit0  0x00000003 , 0x000024b0 
+ 00009371  0x00000ca5 bmark1  0x00000005 , 0x000024b4 
+ 00009372  0x00000ca6 fetch  0x00000001 , 0x0000017f 
+ 00009373  0x00000ca7 bbit1  0x00000006 , 0x000024ba 
+ 00009374  0x00000ca8 fetch  0x00000002 , 0x000040c8 
+ 00009375  0x00000ca9 increase  0xffffffff , 0x0000003f 
+ 00009376  0x00000caa store  0x00000002 , 0x000040c8 
+ 00009377  0x00000cab branch  0x000024a5 , 0x00000034 
+ 00009378  0x00000cac fetch  0x00000001 , 0x000040c5 
+ 00009379  0x00000cad iforce  0x00000001 
+ 00009380  0x00000cae rtn 
+ 00009381  0x00000cb1 bpatch  0x0000004c , 0x00004009 
+ 00009382  0x00000cb2 call  0x00002687 
+ 00009383  0x00000cb4 call  0x00002725 
+ 00009384  0x00000cb5 branch  0x000024b0 , 0x00000001 
+ 00009385  0x00000cb6 call  0x0000600a 
+ 00009386  0x00000cb7 branch  0x000024be , 0x00000028 
+ 00009387  0x00000cb8 fetch  0x00000001 , 0x0000004b 
+ 00009388  0x00000cb9 bbit1  0x00000006 , 0x000024c0 
+ 00009389  0x00000cba bmark1  0x00000005 , 0x000024b4 
+ 00009390  0x00000cbb fetch  0x00000001 , 0x0000017f 
+ 00009391  0x00000cbc bbit1  0x00000006 , 0x000024ba 
+ 00009392  0x00000cbe force  0x00000001 , 0x00000001 
+ 00009393  0x00000cbf rtn  0x00000029 
+ 00009394  0x00000cc0 force  0x00000000 , 0x00000001 
+ 00009395  0x00000cc1 rtn 
+ 00009396  0x00000cc3 bpatch  0x0000004d , 0x00004009 
+ 00009397  0x00000cc4 fetch  0x00000001 , 0x00000019 
+ 00009398  0x00000cc5 iforce  0x00000001 
+ 00009399  0x00000cc6 rtnne  0x00000001 
+ 00009400  0x00000cc7 force  0x00000000 , 0x00000001 
+ 00009401  0x00000cc8 rtn 
+ 00009402  0x00000cca fetch  0x00000001 , 0x00000158 
+ 00009403  0x00000ccb and  0x0000003f , 0x0000000f , 0x00000001 
+ 00009404  0x00000ccc set1  0x00000005 , 0x00000000 
+ 00009405  0x00000ccd rtn 
+ 00009406  0x00000ccf force  0x00000013 , 0x00000001 
+ 00009407  0x00000cd0 branch  0x000024c1 
+ 00009408  0x00000cd2 call  0x000024ca 
+ 00009409  0x00000cd5 bpatch  0x0000004e , 0x00004009 
+ 00009410  0x00000cd6 fetcht  0x00000001 , 0x00000047 
+ 00009411  0x00000cd7 set1  0x00000003 , 0x00000002 
+ 00009412  0x00000cd8 storet  0x00000001 , 0x00000047 
+ 00009413  0x00000cd9 deposit  0x00000001 
+ 00009414  0x00000cda store  0x00000001 , 0x000040c5 
+ 00009415  0x00000cdb setarg  0x0000ffff 
+ 00009416  0x00000cdc store  0x00000002 , 0x000040c8 
+ 00009417  0x00000cdd rtn 
+ 00009418  0x00000ce0 bpatch  0x0000004f , 0x00004009 
+ 00009419  0x00000ce1 fetch  0x00000001 , 0x0000004c 
+ 00009420  0x00000ce2 isolate1  0x00000005 , 0x0000003f 
+ 00009421  0x00000ce3 fetch  0x00000002 , 0x000041dc 
+ 00009422  0x00000ce4 branch  0x000024e0 , 0x00000001 
+ 00009423  0x00000ce5 force  0x00000003 , 0x00000001 
+ 00009424  0x00000ce6 sub  0x0000003f , 0x00000011 , 0x0000003e 
+ 00009425  0x00000ce7 rtn  0x00000002 
+ 00009426  0x00000ce8 force  0x00000004 , 0x00000001 
+ 00009427  0x00000ce9 sub  0x0000003f , 0x0000001b , 0x0000003e 
+ 00009428  0x00000cea rtn  0x00000002 
+ 00009429  0x00000ceb force  0x0000000a , 0x00000001 
+ 00009430  0x00000cec sub  0x0000003f , 0x00000079 , 0x0000003e 
+ 00009431  0x00000ced rtn  0x00000002 
+ 00009432  0x00000cee force  0x0000000b , 0x00000001 
+ 00009433  0x00000cef sub  0x0000003f , 0x000000b7 , 0x0000003e 
+ 00009434  0x00000cf0 rtn  0x00000002 
+ 00009435  0x00000cf1 force  0x0000000e , 0x00000001 
+ 00009436  0x00000cf2 sub  0x0000003f , 0x000000e0 , 0x0000003e 
+ 00009437  0x00000cf3 rtn  0x00000002 
+ 00009438  0x00000cf4 force  0x0000000f , 0x00000001 
+ 00009439  0x00000cf5 rtn 
+ 00009440  0x00000cf7 force  0x00000003 , 0x00000001 
+ 00009441  0x00000cf8 sub  0x0000003f , 0x00000011 , 0x0000003e 
+ 00009442  0x00000cf9 rtn  0x00000002 
+ 00009443  0x00000cfa force  0x00000004 , 0x00000001 
+ 00009444  0x00000cfb sub  0x0000003f , 0x00000036 , 0x0000003e 
+ 00009445  0x00000cfc rtn  0x00000002 
+ 00009446  0x00000cfd force  0x0000000a , 0x00000001 
+ 00009447  0x00000cfe arg  0x0000016f , 0x00000002 
+ 00009448  0x00000cff isub  0x00000002 , 0x0000003e 
+ 00009449  0x00000d00 nrtn  0x00000002 
+ 00009450  0x00000d01 force  0x0000000e , 0x00000001 
+ 00009451  0x00000d02 arg  0x000002a7 , 0x00000002 
+ 00009452  0x00000d03 isub  0x00000002 , 0x0000003e 
+ 00009453  0x00000d04 nrtn  0x00000002 
+ 00009454  0x00000d05 force  0x0000000f , 0x00000001 
+ 00009455  0x00000d06 rtn 
+ 00009456  0x00000d10 fetch  0x00000001 , 0x00000030 
+ 00009457  0x00000d11 bbit0  0x00000001 , 0x000024f5 
+ 00009458  0x00000d12 fetch  0x00000002 , 0x00000032 
+ 00009459  0x00000d13 branch  0x000024f5 , 0x00000034 
+ 00009460  0x00000d14 nbranch  0x000024f7 , 0x0000002e 
+ 00009461  0x00000d16 call  0x00002a4f 
+ 00009462  0x00000d18 add  0x00000028 , 0x00000001 , 0x00000021 
+ 00009463  0x00000d1a enable  0x00000010 
+ 00009464  0x00000d1b fetch  0x00000002 , 0x0000003e 
+ 00009465  0x00000d1c rshift  0x0000003f , 0x0000003f 
+ 00009466  0x00000d1d arg  0x00000500 , 0x00000002 
+ 00009467  0x00000d1e iadd  0x00000002 , 0x0000003f 
+ 00009468  0x00000d1f call  0x00002a24 
+ 00009469  0x00000d20 call  0x000028ea 
+ 00009470  0x00000d21 force  0x00000003 , 0x00000024 
+ 00009471  0x00000d22 call  0x000028cc 
+ 00009472  0x00000d23 call  0x0000242a 
+ 00009473  0x00000d24 call  0x000029f1 
+ 00009474  0x00000d25 bpatch  0x00000050 , 0x0000400a 
+ 00009475  0x00000d26 fetch  0x00000002 , 0x0000003e 
+ 00009476  0x00000d27 rshift  0x0000003f , 0x0000003f 
+ 00009477  0x00000d28 call  0x00002a24 
+ 00009478  0x00000d29 call  0x000029eb 
+ 00009479  0x00000d2a enable  0x0000000d 
+ 00009480  0x00000d2b fetch  0x00000002 , 0x0000003e 
+ 00009481  0x00000d2c arg  0x000003bb , 0x00000002 
+ 00009482  0x00000d2d iadd  0x00000002 , 0x0000001b 
+ 00009483  0x00000d2e correlate  0x0000003e , 0x00000003 
+ 00009484  0x00000d2f copy  0x0000001a , 0x00000002 
+ 00009485  0x00000d30 storet  0x00000006 , 0x0000009a 
+ 00009486  0x00000d31 disable  0x0000000d 
+ 00009487  0x00000d32 nrtn  0x00000018 
+ 00009488  0x00000d33 arg  0x000003bb , 0x00000029 
+ 00009489  0x00000d34 copy  0x00000021 , 0x00000028 
+ 00009490  0x00000d35 branch  0x00002b05 , 0x0000002b 
+ 00009491  0x00000d36 rtn 
+ 00009492  0x00000d3a bpatch  0x00000051 , 0x0000400a 
+ 00009493  0x00000d3b call  0x000024f0 
+ 00009494  0x00000d3c nbranch  0x000028f9 , 0x00000018 
+ 00009495  0x00000d3d call  0x000029bb 
+ 00009496  0x00000d3e bmark0  0x00000011 , 0x0000251c 
+ 00009497  0x00000d3f fetch  0x00000002 , 0x000000f6 
+ 00009498  0x00000d40 increase  0x00000001 , 0x0000003f 
+ 00009499  0x00000d41 store  0x00000002 , 0x000000f6 
+ 00009500  0x00000d43 rshift  0x00000021 , 0x00000002 
+ 00009501  0x00000d44 or  0x00000002 , 0x00000040 , 0x0000000e 
+ 00009502  0x00000d46 bpatch  0x00000052 , 0x0000400a 
+ 00009503  0x00000d47 enable  0x00000007 
+ 00009504  0x00000d48 enable  0x0000000a 
+ 00009505  0x00000d49 enable  0x0000000b 
+ 00009506  0x00000d4a parse  0x00000003 , 0x00000000 , 0x00000003 
+ 00009507  0x00000d4b rshift8  0x0000000c , 0x0000003f 
+ 00009508  0x00000d4c store  0x00000001 , 0x0000015d 
+ 00009509  0x00000d4d parse  0x00000003 , 0x00000000 , 0x00000004 
+ 00009510  0x00000d4e inject  0x00000000 , 0x00000007 
+ 00009511  0x00000d4f copy  0x0000000c , 0x0000003f 
+ 00009512  0x00000d50 store  0x00000001 , 0x00000019 
+ 00009513  0x00000d51 parse  0x00000003 , 0x00000000 , 0x00000003 
+ 00009514  0x00000d52 rshift8  0x0000000c , 0x0000003f 
+ 00009515  0x00000d53 store  0x00000001 , 0x0000015e 
+ 00009516  0x00000d54 fetch  0x00000001 , 0x00000019 
+ 00009517  0x00000d55 sub  0x0000003f , 0x00000003 , 0x0000003e 
+ 00009518  0x00000d56 branch  0x00002533 , 0x00000002 
+ 00009519  0x00000d57 beq  0x00000007 , 0x00002533 
+ 00009520  0x00000d58 fetch  0x00000001 , 0x0000004c 
+ 00009521  0x00000d59 isolate1  0x00000005 , 0x0000003f 
+ 00009522  0x00000d5a setflag  0x00000001 , 0x00000001 , 0x00000015 
+ 00009523  0x00000d5c bpatch  0x00000053 , 0x0000400a 
+ 00009524  0x00000d5d parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00009525  0x00000d5e disable  0x0000000b 
+ 00009526  0x00000d5f disable  0x0000000a 
+ 00009527  0x00000d60 branch  0x00002631 , 0x00000006 
+ 00009528  0x00000d61 bmark0  0x00000011 , 0x0000253c 
+ 00009529  0x00000d62 fetch  0x00000002 , 0x000000f8 
+ 00009530  0x00000d63 increase  0x00000001 , 0x0000003f 
+ 00009531  0x00000d64 store  0x00000002 , 0x000000f8 
+ 00009532  0x00000d66 bpatch  0x00000054 , 0x0000400a 
+ 00009533  0x00000d67 fetch  0x00000001 , 0x0000015d 
+ 00009534  0x00000d68 compare  0x00000000 , 0x0000003f , 0x00000007 
+ 00009535  0x00000d69 setflag  0x00000001 , 0x0000000a , 0x00000000 
+ 00009536  0x00000d6a branch  0x0000254c , 0x00000001 
+ 00009537  0x00000d6b icompare  0x00000007 , 0x00000004 
+ 00009538  0x00000d6c branch  0x0000254b , 0x00000001 
+ 00009539  0x00000d6d bmark0  0x00000007 , 0x0000264d 
+ 00009540  0x00000d6e fetcht  0x00000001 , 0x000000b0 
+ 00009541  0x00000d6f icompare  0x00000007 , 0x00000002 
+ 00009542  0x00000d70 nbranch  0x0000264d , 0x00000001 
+ 00009543  0x00000d71 fetch  0x00000001 , 0x00000047 
+ 00009544  0x00000d72 set0  0x00000005 , 0x0000003f 
+ 00009545  0x00000d73 set1  0x00000004 , 0x0000003f 
+ 00009546  0x00000d74 store  0x00000001 , 0x00000047 
+ 00009547  0x00000d76 enable  0x0000002d 
+ 00009548  0x00000d78 bpatch  0x00000055 , 0x0000400a 
+ 00009549  0x00000d79 fetch  0x00000001 , 0x00000019 
+ 00009550  0x00000d7a icopy  0x00000001 
+ 00009551  0x00000d7b bmark1  0x0000000a , 0x0000255b 
+ 00009552  0x00000d7c fetcht  0x00000001 , 0x0000015e 
+ 00009553  0x00000d7d fetch  0x00000001 , 0x00000047 
+ 00009554  0x00000d7e set0  0x00000000 , 0x0000003f 
+ 00009555  0x00000d7f isolate1  0x00000000 , 0x00000002 
+ 00009556  0x00000d80 setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00009557  0x00000d81 isolate1  0x00000001 , 0x00000002 
+ 00009558  0x00000d82 setflag  0x00000001 , 0x00000001 , 0x0000003f 
+ 00009559  0x00000d83 store  0x00000001 , 0x00000047 
+ 00009560  0x00000d84 isolate0  0x00000001 , 0x00000002 
+ 00009561  0x00000d85 branch  0x0000255b , 0x00000001 
+ 00009562  0x00000d86 call  0x00002687 
+ 00009563  0x00000d88 bpatch  0x00000056 , 0x0000400a 
+ 00009564  0x00000d89 arg  0x00000000 , 0x00000002 
+ 00009565  0x00000d8a call  0x00002a1c 
+ 00009566  0x00000d8b and  0x00000001 , 0x0000000f , 0x0000003f 
+ 00009567  0x00000d8c beq  0x00000001 , 0x00002587 
+ 00009568  0x00000d8d beq  0x00000000 , 0x0000264d 
+ 00009569  0x00000d8e beq  0x00000002 , 0x00002659 
+ 00009570  0x00000d8f fetcht  0x00000001 , 0x0000015e 
+ 00009571  0x00000d90 fetch  0x00000001 , 0x00000047 
+ 00009572  0x00000d91 icompare  0x00000004 , 0x00000002 
+ 00009573  0x00000d92 nbranch  0x00002569 , 0x00000001 
+ 00009574  0x00000d93 bmark0  0x0000000a , 0x00002568 
+ 00009575  0x00000d94 bbit0  0x00000007 , 0x00002569 
+ 00009576  0x00000d96 set1  0x0000000f , 0x00000000 
+ 00009577  0x00000d98 bpatch  0x00000057 , 0x0000400a 
+ 00009578  0x00000d99 deposit  0x00000001 
+ 00009579  0x00000d9a beq  0x00000003 , 0x00002589 
+ 00009580  0x00000d9b beq  0x00000004 , 0x0000258d 
+ 00009581  0x00000d9c beq  0x00000007 , 0x00002578 
+ 00009582  0x00000d9d beq  0x00000008 , 0x0000258c 
+ 00009583  0x00000d9e arg  0x00000004 , 0x00000002 
+ 00009584  0x00000d9f call  0x00002a1c 
+ 00009585  0x00000da0 beq  0x0000000a , 0x00002588 
+ 00009586  0x00000da1 beq  0x0000000b , 0x0000258b 
+ 00009587  0x00000da2 arg  0x00000008 , 0x00000002 
+ 00009588  0x00000da3 call  0x00002a1c 
+ 00009589  0x00000da4 beq  0x0000000e , 0x00002588 
+ 00009590  0x00000da5 beq  0x0000000f , 0x0000258b 
+ 00009591  0x00000da6 rtn 
+ 00009592  0x00000daa bpatch  0x00000058 , 0x0000400b 
+ 00009593  0x00000dab enable  0x0000000d 
+ 00009594  0x00000dac enable  0x00000009 
+ 00009595  0x00000dad enable  0x0000000e 
+ 00009596  0x00000dae arg  0x000000d1 , 0x00000005 
+ 00009597  0x00000daf force  0x0000001e , 0x00000039 
+ 00009598  0x00000db1 parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00009599  0x00000db2 rshift3  0x0000000c , 0x0000003f 
+ 00009600  0x00000db3 istore  0x00000001 , 0x00000005 
+ 00009601  0x00000db4 loop  0x0000257e 
+ 00009602  0x00000db5 bmark0  0x00000007 , 0x0000264d 
+ 00009603  0x00000db6 parse  0x00000003 , 0x00000000 , 0x00000010 
+ 00009604  0x00000db7 nsetflag  0x00000006 , 0x00000008 , 0x00000000 
+ 00009605  0x00000db8 branch  0x0000263d , 0x00000006 
+ 00009606  0x00000db9 branch  0x00002620 
+ 00009607  0x00000dbd branch  0x0000264d 
+ 00009608  0x00000dc1 set1  0x00000010 , 0x00000000 
+ 00009609  0x00000dc3 enable  0x0000000c 
+ 00009610  0x00000dc4 branch  0x0000258e 
+ 00009611  0x00000dc8 set1  0x00000010 , 0x00000000 
+ 00009612  0x00000dca set1  0x00000002 , 0x00000015 
+ 00009613  0x00000dcc enable  0x0000000d 
+ 00009614  0x00000dce bpatch  0x00000059 , 0x0000400b 
+ 00009615  0x00000dcf bmark1  0x00000001 , 0x0000264d 
+ 00009616  0x00000dd0 isolate0  0x00000001 , 0x00000015 
+ 00009617  0x00000dd1 branch  0x0000259a , 0x00000001 
+ 00009618  0x00000dd2 disable  0x00000007 
+ 00009619  0x00000dd3 enable  0x0000000d 
+ 00009620  0x00000dd4 disable  0x0000000c 
+ 00009621  0x00000dd5 add  0x00000022 , 0x00000002 , 0x0000000b 
+ 00009622  0x00000dd6 correlate  0x00000022 , 0x00000026 
+ 00009623  0x00000dd7 nbranch  0x0000263d , 0x00000018 
+ 00009624  0x00000dd8 set1  0x00000010 , 0x00000000 
+ 00009625  0x00000dd9 enable  0x00000007 
+ 00009626  0x00000ddb bpatch  0x0000005a , 0x0000400b 
+ 00009627  0x00000ddc enable  0x0000000e 
+ 00009628  0x00000ddd enable  0x00000009 
+ 00009629  0x00000dde parse  0x00000003 , 0x00000000 , 0x00000003 
+ 00009630  0x00000ddf rshift8  0x0000000c , 0x0000003f 
+ 00009631  0x00000de0 store  0x00000001 , 0x00000180 
+ 00009632  0x00000de1 parse  0x00000003 , 0x00000000 , 0x00000005 
+ 00009633  0x00000de2 bmark1  0x00000010 , 0x000025a5 
+ 00009634  0x00000de3 rshift3  0x0000000c , 0x00000039 
+ 00009635  0x00000de4 rshift3  0x00000039 , 0x00000039 
+ 00009636  0x00000de5 branch  0x000025a8 
+ 00009637  0x00000de7 parse  0x00000003 , 0x00000000 , 0x00000005 
+ 00009638  0x00000de8 rshift  0x0000000c , 0x00000039 
+ 00009639  0x00000de9 parse  0x00000003 , 0x00000000 , 0x00000003 
+ 00009640  0x00000deb bpatch  0x0000005b , 0x0000400b 
+ 00009641  0x00000dec deposit  0x00000039 
+ 00009642  0x00000ded store  0x00000002 , 0x0000015f 
+ 00009643  0x00000dee branch  0x000025e8 , 0x00000034 
+ 00009644  0x00000def isub  0x00000035 , 0x0000003e 
+ 00009645  0x00000df0 branch  0x0000263d , 0x00000002 
+ 00009646  0x00000df1 bpatch  0x0000005c , 0x0000400b 
+ 00009647  0x00000df2 set0  0x00000000 , 0x00000000 
+ 00009648  0x00000df3 fetch  0x00000001 , 0x00000180 
+ 00009649  0x00000df4 and_into  0x00000003 , 0x0000003f 
+ 00009650  0x00000df5 arg  0x00000551 , 0x00000005 
+ 00009651  0x00000df6 beq  0x00000003 , 0x000025ba 
+ 00009652  0x00000df7 bmark1  0x00000011 , 0x000025e4 
+ 00009653  0x00000df9 fetch  0x00000001 , 0x00000180 
+ 00009654  0x00000dfa and_into  0x00000003 , 0x0000003f 
+ 00009655  0x00000dfb beq  0x00000002 , 0x000025bf 
+ 00009656  0x00000dfc beq  0x00000001 , 0x000025d3 
+ 00009657  0x00000dfd branch  0x0000263d 
+ 00009658  0x00000e00 fetch  0x00000002 , 0x0000015f 
+ 00009659  0x00000e01 sub  0x0000003f , 0x00000070 , 0x0000003e 
+ 00009660  0x00000e02 nbranch  0x0000263d , 0x00000002 
+ 00009661  0x00000e03 bmark1  0x0000000f , 0x00002620 
+ 00009662  0x00000e04 branch  0x000025e4 
+ 00009663  0x00000e08 bpatch  0x0000005d , 0x0000400b 
+ 00009664  0x00000e09 bmark1  0x0000000f , 0x00002620 
+ 00009665  0x00000e0a fetch  0x00000002 , 0x0000015f 
+ 00009666  0x00000e0b arg  0x000002e0 , 0x00000002 
+ 00009667  0x00000e0c isub  0x00000002 , 0x0000003e 
+ 00009668  0x00000e0d branch  0x0000263d , 0x00000002 
+ 00009669  0x00000e0e fetch  0x00000001 , 0x00000263 
+ 00009670  0x00000e0f bbit0  0x00000000 , 0x000025c9 
+ 00009671  0x00000e10 bbit0  0x00000001 , 0x000025ce 
+ 00009672  0x00000e11 branch  0x0000264d 
+ 00009673  0x00000e13 jam  0x00000001 , 0x00000261 
+ 00009674  0x00000e14 fetch  0x00000002 , 0x0000025d 
+ 00009675  0x00000e15 bne  0x00000000 , 0x0000264d 
+ 00009676  0x00000e16 arg  0x00001000 , 0x00000005 
+ 00009677  0x00000e17 branch  0x000025e4 
+ 00009678  0x00000e19 jam  0x00000002 , 0x00000261 
+ 00009679  0x00000e1a fetch  0x00000002 , 0x0000025f 
+ 00009680  0x00000e1b bne  0x00000000 , 0x0000264d 
+ 00009681  0x00000e1c arg  0x00001400 , 0x00000005 
+ 00009682  0x00000e1d branch  0x000025e4 
+ 00009683  0x00000e20 bpatch  0x0000005e , 0x0000400b 
+ 00009684  0x00000e21 bmark1  0x0000000f , 0x00002620 
+ 00009685  0x00000e22 fetch  0x00000002 , 0x0000015f 
+ 00009686  0x00000e23 arg  0x000002e0 , 0x00000002 
+ 00009687  0x00000e24 isub  0x00000002 , 0x0000003e 
+ 00009688  0x00000e25 branch  0x0000263d , 0x00000002 
+ 00009689  0x00000e26 fetch  0x00000001 , 0x00000261 
+ 00009690  0x00000e27 beq  0x00000001 , 0x000025dd 
+ 00009691  0x00000e28 beq  0x00000002 , 0x000025e1 
+ 00009692  0x00000e29 branch  0x0000264d 
+ 00009693  0x00000e2b arg  0x00001000 , 0x00000005 
+ 00009694  0x00000e2c fetch  0x00000002 , 0x0000025d 
+ 00009695  0x00000e2d iadd  0x00000005 , 0x00000005 
+ 00009696  0x00000e2e branch  0x000025e4 
+ 00009697  0x00000e30 arg  0x00001400 , 0x00000005 
+ 00009698  0x00000e31 fetch  0x00000002 , 0x0000025f 
+ 00009699  0x00000e32 iadd  0x00000005 , 0x00000005 
+ 00009700  0x00000e34 parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00009701  0x00000e35 rshift3  0x0000000c , 0x0000003f 
+ 00009702  0x00000e36 istore  0x00000001 , 0x00000005 
+ 00009703  0x00000e37 loop  0x000025e4 
+ 00009704  0x00000e39 bpatch  0x0000005f , 0x0000400b 
+ 00009705  0x00000e3a parse  0x00000003 , 0x00000000 , 0x00000010 
+ 00009706  0x00000e3b branch  0x00002637 , 0x00000006 
+ 00009707  0x00000e3c fetch  0x00000001 , 0x00004363 
+ 00009708  0x00000e3d beq  0x00000001 , 0x0000264d 
+ 00009709  0x00000e3e bmark1  0x00000011 , 0x0000260d 
+ 00009710  0x00000e3f bmark1  0x0000000f , 0x0000264a 
+ 00009711  0x00000e40 fetch  0x00000001 , 0x00000180 
+ 00009712  0x00000e41 compare  0x00000003 , 0x0000003f , 0x00000003 
+ 00009713  0x00000e42 branch  0x0000260d , 0x00000001 
+ 00009714  0x00000e43 fetch  0x00000002 , 0x0000015f 
+ 00009715  0x00000e44 branch  0x0000260d , 0x00000034 
+ 00009716  0x00000e45 bpatch  0x00000060 , 0x0000400c 
+ 00009717  0x00000e46 fetch  0x00000001 , 0x00000261 
+ 00009718  0x00000e47 beq  0x00000001 , 0x000025f9 
+ 00009719  0x00000e48 beq  0x00000002 , 0x00002603 
+ 00009720  0x00000e49 branch  0x00002a8c 
+ 00009721  0x00000e4b fetch  0x00000002 , 0x0000025d 
+ 00009722  0x00000e4c fetcht  0x00000002 , 0x0000015f 
+ 00009723  0x00000e4d iadd  0x00000002 , 0x0000003f 
+ 00009724  0x00000e4e store  0x00000002 , 0x0000025d 
+ 00009725  0x00000e4f beq  0x00000000 , 0x00002a8c 
+ 00009726  0x00000e50 fetcht  0x00000002 , 0x00001000 
+ 00009727  0x00000e51 increase  0x00000004 , 0x00000002 
+ 00009728  0x00000e52 isub  0x00000002 , 0x0000003e 
+ 00009729  0x00000e53 call  0x00002747 , 0x00000005 
+ 00009730  0x00000e54 branch  0x0000260d 
+ 00009731  0x00000e56 fetch  0x00000002 , 0x0000025f 
+ 00009732  0x00000e57 fetcht  0x00000002 , 0x0000015f 
+ 00009733  0x00000e58 iadd  0x00000002 , 0x0000003f 
+ 00009734  0x00000e59 store  0x00000002 , 0x0000025f 
+ 00009735  0x00000e5a beq  0x00000000 , 0x00002a8c 
+ 00009736  0x00000e5b fetcht  0x00000002 , 0x00001400 
+ 00009737  0x00000e5c add  0x00000002 , 0x00000004 , 0x00000002 
+ 00009738  0x00000e5d isub  0x00000002 , 0x0000003e 
+ 00009739  0x00000e5e call  0x0000274b , 0x00000005 
+ 00009740  0x00000e5f branch  0x0000260d 
+ 00009741  0x00000e61 bpatch  0x00000061 , 0x0000400c 
+ 00009742  0x00000e62 fetcht  0x00000001 , 0x0000004c 
+ 00009743  0x00000e63 fetch  0x00000001 , 0x00000180 
+ 00009744  0x00000e64 compare  0x00000003 , 0x0000003f , 0x00000003 
+ 00009745  0x00000e65 setflag  0x00000001 , 0x00000006 , 0x00000002 
+ 00009746  0x00000e66 nsetflag  0x00000001 , 0x00000007 , 0x00000002 
+ 00009747  0x00000e67 storet  0x00000001 , 0x0000004c 
+ 00009748  0x00000e68 nbranch  0x00002616 , 0x00000001 
+ 00009749  0x00000e69 set1  0x00000001 , 0x00000000 
+ 00009750  0x00000e6b bmark0  0x00000011 , 0x00002620 
+ 00009751  0x00000e6c isolate1  0x00000006 , 0x00000002 
+ 00009752  0x00000e6d branch  0x00002620 , 0x00000001 
+ 00009753  0x00000e6e fetch  0x00000002 , 0x000000fa 
+ 00009754  0x00000e6f increase  0x00000001 , 0x0000003f 
+ 00009755  0x00000e70 store  0x00000002 , 0x000000fa 
+ 00009756  0x00000e71 set1  0x00000005 , 0x00000000 
+ 00009757  0x00000e72 set0  0x00000007 , 0x00000002 
+ 00009758  0x00000e73 set0  0x00000001 , 0x00000000 
+ 00009759  0x00000e74 storet  0x00000001 , 0x0000004c 
+ 00009760  0x00000e76 bpatch  0x00000062 , 0x0000400c 
+ 00009761  0x00000e77 fetcht  0x00000001 , 0x0000015e 
+ 00009762  0x00000e78 fetch  0x00000001 , 0x00000047 
+ 00009763  0x00000e79 set1  0x00000005 , 0x0000003f 
+ 00009764  0x00000e7a isolate1  0x00000002 , 0x00000002 
+ 00009765  0x00000e7b setflag  0x00000001 , 0x00000002 , 0x0000003f 
+ 00009766  0x00000e7c isolate1  0x0000000a , 0x00000000 
+ 00009767  0x00000e7d setflag  0x00000001 , 0x00000007 , 0x0000003f 
+ 00009768  0x00000e7e store  0x00000001 , 0x00000047 
+ 00009769  0x00000e7f fetch  0x00000002 , 0x0000015f 
+ 00009770  0x00000e80 nbranch  0x0000264d , 0x00000034 
+ 00009771  0x00000e81 fetch  0x00000001 , 0x0000004c 
+ 00009772  0x00000e82 set0  0x00000007 , 0x0000003f 
+ 00009773  0x00000e83 store  0x00000001 , 0x0000004c 
+ 00009774  0x00000e84 fetch  0x00000001 , 0x00000180 
+ 00009775  0x00000e85 compare  0x00000001 , 0x0000003f , 0x00000007 
+ 00009776  0x00000e87 branch  0x0000264d 
+ 00009777  0x00000e8a bpatch  0x00000063 , 0x0000400c 
+ 00009778  0x00000e8b disable  0x0000002d 
+ 00009779  0x00000e8c fetch  0x00000002 , 0x0000001a 
+ 00009780  0x00000e8d increase  0x00000001 , 0x0000003f 
+ 00009781  0x00000e8e store  0x00000002 , 0x0000001a 
+ 00009782  0x00000e8f branch  0x0000264d 
+ 00009783  0x00000e91 fetch  0x00000002 , 0x0000001c 
+ 00009784  0x00000e92 increase  0x00000001 , 0x0000003f 
+ 00009785  0x00000e93 store  0x00000002 , 0x0000001c 
+ 00009786  0x00000e94 call  0x0000263e 
+ 00009787  0x00000e95 bmark0  0x00000011 , 0x0000263d 
+ 00009788  0x00000e96 set1  0x00000005 , 0x00000000 
+ 00009789  0x00000e98 branch  0x0000264d 
+ 00009790  0x00000e9b bpatch  0x00000064 , 0x0000400c 
+ 00009791  0x00000e9c fetch  0x00000001 , 0x00000180 
+ 00009792  0x00000e9d compare  0x00000003 , 0x0000003f , 0x00000003 
+ 00009793  0x00000e9e nbranch  0x00002646 , 0x00000001 
+ 00009794  0x00000ea0 fetcht  0x00000001 , 0x0000004c 
+ 00009795  0x00000ea1 set0  0x00000006 , 0x00000002 
+ 00009796  0x00000ea2 storet  0x00000001 , 0x0000004c 
+ 00009797  0x00000ea3 rtn 
+ 00009798  0x00000ea7 fetcht  0x00000001 , 0x0000004c 
+ 00009799  0x00000ea8 set0  0x00000007 , 0x00000002 
+ 00009800  0x00000ea9 storet  0x00000001 , 0x0000004c 
+ 00009801  0x00000eaa branch  0x00004c0b 
+ 00009802  0x00000ead fetch  0x00000001 , 0x00000047 
+ 00009803  0x00000eae set1  0x00000005 , 0x0000003f 
+ 00009804  0x00000eaf store  0x00000001 , 0x00000047 
+ 00009805  0x00000eb1 bpatch  0x00000065 , 0x0000400c 
+ 00009806  0x00000eb2 disable  0x0000001d 
+ 00009807  0x00000eb3 disable  0x0000001c 
+ 00009808  0x00000eb4 disable  0x0000000d 
+ 00009809  0x00000eb5 disable  0x0000000c 
+ 00009810  0x00000eb6 disable  0x00000009 
+ 00009811  0x00000eb7 disable  0x0000000e 
+ 00009812  0x00000eb8 disable  0x00000007 
+ 00009813  0x00000eb9 branch  0x000028f9 , 0x00000021 
+ 00009814  0x00000eba until  0x0000003e , 0x00000027 
+ 00009815  0x00000ebb nop  0x00000064 
+ 00009816  0x00000ebc branch  0x000028f9 
+ 00009817  0x00000ebf bpatch  0x00000066 , 0x0000400c 
+ 00009818  0x00000ec0 enable  0x00000009 
+ 00009819  0x00000ec1 enable  0x0000000c 
+ 00009820  0x00000ec2 parse  0x00000003 , 0x00000000 , 0x00000048 
+ 00009821  0x00000ec3 isolate1  0x0000003a , 0x0000003f 
+ 00009822  0x00000ec4 setflag  0x00000001 , 0x00000000 , 0x00000000 
+ 00009823  0x00000ec5 copy  0x00000020 , 0x00000002 
+ 00009824  0x00000ec6 ialigned  0x00000020 
+ 00009825  0x00000ec7 ialigned  0x0000001e 
+ 00009826  0x00000ec8 pulse  0x00000015 
+ 00009827  0x00000ec9 setsect  0x00000002 , 0x000fffff 
+ 00009828  0x00000eca setsect  0x00000003 , 0x0000ffff 
+ 00009829  0x00000ecb nop  0x00000020 
+ 00009830  0x00000ecc iverify  0x0000000d 
+ 00009831  0x00000ecd deposit  0x0000002c 
+ 00009832  0x00000ece store  0x00000003 , 0x00000178 
+ 00009833  0x00000ecf deposit  0x0000002d 
+ 00009834  0x00000ed0 store  0x00000001 , 0x0000017b 
+ 00009835  0x00000ed1 copy  0x00000002 , 0x00000020 
+ 00009836  0x00000ed2 branch  0x0000266e , 0x00000001 
+ 00009837  0x00000ed3 branch  0x0000263d 
+ 00009838  0x00000ed5 bpatch  0x00000067 , 0x0000400c 
+ 00009839  0x00000ed6 parse  0x00000003 , 0x00000000 , 0x00000048 
+ 00009840  0x00000ed7 ialigned  0x0000001f 
+ 00009841  0x00000ed8 ialigned  0x00000004 
+ 00009842  0x00000ed9 ialigned  0x0000002e 
+ 00009843  0x00000eda ialigned  0x00000012 
+ 00009844  0x00000edb force  0x00000000 , 0x0000003f 
+ 00009845  0x00000edc parse  0x00000003 , 0x00000000 , 0x00000010 
+ 00009846  0x00000edd branch  0x0000263d , 0x00000006 
+ 00009847  0x00000ede setarg  0x0ffffffc 
+ 00009848  0x00000edf iand  0x00000012 , 0x0000003f 
+ 00009849  0x00000ee0 store  0x00000004 , 0x00000165 
+ 00009850  0x00000ee1 deposit  0x0000001d 
+ 00009851  0x00000ee2 store  0x00000003 , 0x00000175 
+ 00009852  0x00000ee3 deposit  0x0000001c 
+ 00009853  0x00000ee4 store  0x00000001 , 0x00000173 
+ 00009854  0x00000ee5 deposit  0x00000004 
+ 00009855  0x00000ee6 store  0x00000001 , 0x00000174 
+ 00009856  0x00000ee7 deposit  0x0000002e 
+ 00009857  0x00000ee8 store  0x00000002 , 0x0000017c 
+ 00009858  0x00000ee9 deposit  0x00000021 
+ 00009859  0x00000eea inject  0x00000001 , 0x00000020 
+ 00009860  0x00000eeb compare  0x00000002 , 0x00000001 , 0x0000000f 
+ 00009861  0x00000eec setflag  0x00000001 , 0x0000000b , 0x00000000 
+ 00009862  0x00000eed branch  0x0000264d 
+ 00009863  0x00000ef0 bpatch  0x00000068 , 0x0000400d 
+ 00009864  0x00000ef1 fetch  0x00000001 , 0x00000047 
+ 00009865  0x00000ef2 rtnbit0  0x00000003 
+ 00009866  0x00000ef3 set0  0x00000003 , 0x0000003f 
+ 00009867  0x00000ef4 setflip  0x00000006 , 0x0000003f 
+ 00009868  0x00000ef5 store  0x00000001 , 0x00000047 
+ 00009869  0x00000ef6 fetch  0x00000001 , 0x000040c5 
+ 00009870  0x00000ef7 beq  0x00000013 , 0x0000269c 
+ 00009871  0x00000ef8 rtneq  0x00000007 
+ 00009872  0x00000ef9 fetch  0x00000001 , 0x0000004b 
+ 00009873  0x00000efa rtnbit0  0x00000006 , 0x0000003f 
+ 00009874  0x00000efb set0  0x00000006 , 0x0000003f 
+ 00009875  0x00000efc set1  0x00000007 , 0x0000003f 
+ 00009876  0x00000efd store  0x00000001 , 0x0000004b 
+ 00009877  0x00000efe set0  0x00000002 , 0x00000000 
+ 00009878  0x00000eff fetch  0x00000002 , 0x00004246 
+ 00009879  0x00000f00 nrtn  0x00000034 
+ 00009880  0x00000f01 fetch  0x00000001 , 0x0000004b 
+ 00009881  0x00000f02 set0  0x00000007 , 0x0000003f 
+ 00009882  0x00000f03 store  0x00000001 , 0x0000004b 
+ 00009883  0x00000f04 branch  0x0000525d 
+ 00009884  0x00000f07 bpatch  0x00000069 , 0x0000400d 
+ 00009885  0x00000f08 fetch  0x00000001 , 0x000004b7 
+ 00009886  0x00000f09 rshift  0x0000003f , 0x0000003f 
+ 00009887  0x00000f0a beq  0x00000011 , 0x000026b8 
+ 00009888  0x00000f0b beq  0x00000012 , 0x000026c0 
+ 00009889  0x00000f0c beq  0x00000018 , 0x000026e9 
+ 00009890  0x00000f0d beq  0x0000007f , 0x000026a8 
+ 00009891  0x00000f0e rtnne  0x00000003 
+ 00009892  0x00000f0f fetch  0x00000001 , 0x000004b8 
+ 00009893  0x00000f10 beq  0x0000002b , 0x000026b0 
+ 00009894  0x00000f11 beq  0x00000011 , 0x000026ab 
+ 00009895  0x00000f12 rtn 
+ 00009896  0x00000f15 fetch  0x00000001 , 0x000004b8 
+ 00009897  0x00000f16 set1  0x00000007 , 0x0000003f 
+ 00009898  0x00000f17 rtn 
+ 00009899  0x00000f19 rtn  0x00000029 
+ 00009900  0x00000f1a fetch  0x00000001 , 0x00000030 
+ 00009901  0x00000f1b rtnbit1  0x00000004 
+ 00009902  0x00000f1c jam  0x00000031 , 0x0000007c 
+ 00009903  0x00000f1d rtn 
+ 00009904  0x00000f21 rtn  0x00000029 
+ 00009905  0x00000f22 fetch  0x00000001 , 0x00000031 
+ 00009906  0x00000f23 isolate1  0x00000004 , 0x0000003f 
+ 00009907  0x00000f24 branch  0x000026b5 , 0x00000001 
+ 00009908  0x00000f26 rtn 
+ 00009909  0x00000f28 set0  0x00000004 , 0x0000003f 
+ 00009910  0x00000f29 store  0x00000001 , 0x00000031 
+ 00009911  0x00000f2a rtn 
+ 00009912  0x00000f2d bpatch  0x0000006a , 0x0000400d 
+ 00009913  0x00000f2e fetch  0x00000001 , 0x0000004c 
+ 00009914  0x00000f2f set1  0x00000002 , 0x0000003f 
+ 00009915  0x00000f30 store  0x00000001 , 0x0000004c 
+ 00009916  0x00000f31 jam  0x00000001 , 0x00008011 
+ 00009917  0x00000f32 fetch  0x00000001 , 0x00000030 
+ 00009918  0x00000f33 isolate1  0x00000004 , 0x0000003f 
+ 00009919  0x00000f34 rtn 
+ 00009920  0x00000f37 bpatch  0x0000006b , 0x0000400d 
+ 00009921  0x00000f38 fetch  0x00000001 , 0x0000004c 
+ 00009922  0x00000f39 set0  0x00000002 , 0x0000003f 
+ 00009923  0x00000f3a store  0x00000001 , 0x0000004c 
+ 00009924  0x00000f3b jam  0x00000000 , 0x00008011 
+ 00009925  0x00000f3c rtn 
+ 00009926  0x00000f40 bpatch  0x0000006c , 0x0000400d 
+ 00009927  0x00000f41 copy  0x00000022 , 0x0000003f 
+ 00009928  0x00000f42 store  0x00000004 , 0x0000420c 
+ 00009929  0x00000f43 add  0x00000022 , 0x00000003 , 0x00000011 
+ 00009930  0x00000f44 branch  0x000026cc , 0x00000029 
+ 00009931  0x00000f45 add  0x00000028 , 0x00000003 , 0x00000011 
+ 00009932  0x00000f47 fetcht  0x00000002 , 0x00000032 
+ 00009933  0x00000f48 deposit  0x00000011 
+ 00009934  0x00000f49 set0  0x0000001b , 0x0000003f 
+ 00009935  0x00000f4a idiv  0x00000002 
+ 00009936  0x00000f4b fetch  0x00000002 , 0x00000075 
+ 00009937  0x00000f4c call  0x00007f86 
+ 00009938  0x00000f4d remainder  0x00000013 
+ 00009939  0x00000f4e isub  0x00000013 , 0x0000003f 
+ 00009940  0x00000f4f branch  0x000026d6 , 0x00000002 
+ 00009941  0x00000f50 iadd  0x00000002 , 0x0000003f 
+ 00009942  0x00000f52 iadd  0x00000011 , 0x0000003f 
+ 00009943  0x00000f53 store  0x00000004 , 0x00000034 
+ 00009944  0x00000f54 jam  0x00000000 , 0x0000455b 
+ 00009945  0x00000f55 fetch  0x00000001 , 0x00000030 
+ 00009946  0x00000f56 set1  0x00000001 , 0x0000003f 
+ 00009947  0x00000f57 store  0x00000001 , 0x00000030 
+ 00009948  0x00000f58 fetch  0x00000001 , 0x00000073 
+ 00009949  0x00000f59 store  0x00000001 , 0x0000008a 
+ 00009950  0x00000f5a setarg  0x00000000 
+ 00009951  0x00000f5b store  0x00000003 , 0x00004169 
+ 00009952  0x00000f5c store  0x00000003 , 0x0000416c 
+ 00009953  0x00000f5d store  0x00000001 , 0x00004159 
+ 00009954  0x00000f5e jam  0x0000000b , 0x00000a99 
+ 00009955  0x00000f5f call  0x00007d86 
+ 00009956  0x00000f60 fetch  0x00000002 , 0x000040c1 
+ 00009957  0x00000f61 store  0x00000002 , 0x0000003e 
+ 00009958  0x00000f62 nrtn  0x00000029 
+ 00009959  0x00000f63 add  0x00000004 , 0xffffffff , 0x00000007 
+ 00009960  0x00000f64 rtn 
+ 00009961  0x00000f67 bpatch  0x0000006d , 0x0000400d 
+ 00009962  0x00000f68 fetch  0x00000001 , 0x00000030 
+ 00009963  0x00000f69 rtnbit0  0x00000001 
+ 00009964  0x00000f6a set0  0x00000001 , 0x0000003f 
+ 00009965  0x00000f6b store  0x00000001 , 0x00000030 
+ 00009966  0x00000f6c fetch  0x00000002 , 0x000040bf 
+ 00009967  0x00000f6d store  0x00000002 , 0x0000003e 
+ 00009968  0x00000f6e disable  0x0000002b 
+ 00009969  0x00000f6f jam  0x0000000c , 0x00000a99 
+ 00009970  0x00000f70 branch  0x00007d86 
+ 00009971  0x00000f74 bpatch  0x0000006e , 0x0000400d 
+ 00009972  0x00000f75 enable  0x0000002e 
+ 00009973  0x00000f76 fetch  0x00000001 , 0x00000030 
+ 00009974  0x00000f77 bbit1  0x00000001 , 0x00002700 
+ 00009975  0x00000f78 rtnmark1  0x00000011 
+ 00009976  0x00000f79 fetch  0x00000001 , 0x00000047 
+ 00009977  0x00000f7a rtnbit1  0x00000003 
+ 00009978  0x00000f7b fetch  0x00000001 , 0x00000048 
+ 00009979  0x00000f7c nrtn  0x00000034 
+ 00009980  0x00000f7d fetch  0x00000001 , 0x0000004b 
+ 00009981  0x00000f7e rtnbit1  0x00000006 
+ 00009982  0x00000f80 force  0x00000000 , 0x0000003f 
+ 00009983  0x00000f81 rtn 
+ 00009984  0x00000f84 bbit0  0x00000002 , 0x0000270f 
+ 00009985  0x00000f85 fetch  0x00000001 , 0x0000008a 
+ 00009986  0x00000f86 beq  0x00000002 , 0x00002706 
+ 00009987  0x00000f87 fetch  0x00000001 , 0x00000047 
+ 00009988  0x00000f88 bbit1  0x00000003 , 0x00002718 
+ 00009989  0x00000f89 bmark0  0x00000008 , 0x00002718 
+ 00009990  0x00000f8b nbranch  0x00002718 , 0x00000029 
+ 00009991  0x00000f8c fetch  0x00000001 , 0x00000048 
+ 00009992  0x00000f8d nbranch  0x00002718 , 0x00000034 
+ 00009993  0x00000f8f fetch  0x00000001 , 0x000000ef 
+ 00009994  0x00000f90 increase  0xffffffff , 0x0000003f 
+ 00009995  0x00000f91 store  0x00000001 , 0x000000ef 
+ 00009996  0x00000f92 nbranch  0x000026fe , 0x00000034 
+ 00009997  0x00000f93 jam  0x00000010 , 0x000000ef 
+ 00009998  0x00000f94 branch  0x00002718 
+ 00009999  0x00000f9c fetch  0x00000001 , 0x0000008a 
+ 00010000  0x00000f9d bne  0x00000001 , 0x00002718 
+ 00010001  0x00000f9e fetch  0x00000001 , 0x0000008b 
+ 00010002  0x00000f9f branch  0x00002718 , 0x00000034 
+ 00010003  0x00000fa0 increase  0xffffffff , 0x0000003f 
+ 00010004  0x00000fa1 store  0x00000001 , 0x0000008b 
+ 00010005  0x00000fa2 fetch  0x00000001 , 0x00000047 
+ 00010006  0x00000fa3 rtnbit1  0x00000003 
+ 00010007  0x00000fa4 nrtn  0x0000002d 
+ 00010008  0x00000fa6 fetch  0x00000001 , 0x0000008a 
+ 00010009  0x00000fa7 increase  0xffffffff , 0x0000003f 
+ 00010010  0x00000fa8 store  0x00000001 , 0x0000008a 
+ 00010011  0x00000fa9 rtn 
+ 00010012  0x00000fb5 bpatch  0x0000006f , 0x0000400d 
+ 00010013  0x00000fb6 disable  0x00000010 
+ 00010014  0x00000fb7 copy  0x00000002 , 0x0000001b 
+ 00010015  0x00000fb8 call  0x00002260 
+ 00010016  0x00000fb9 disable  0x00000028 
+ 00010017  0x00000fba nrtn  0x00000005 
+ 00010018  0x00000fbb force  0x00000000 , 0x0000001b 
+ 00010019  0x00000fbc enable  0x00000028 
+ 00010020  0x00000fbd rtn 
+ 00010021  0x00000fc1 fetch  0x00000001 , 0x00004158 
+ 00010022  0x00000fc2 icompare  0x000000ff , 0x00000004 
+ 00010023  0x00000fc3 rtn 
+ 00010024  0x00000fc7 bpatch  0x00000070 , 0x0000400e 
+ 00010025  0x00000fc8 set0  0x00000001 , 0x00000000 
+ 00010026  0x00000fca jam  0x00000000 , 0x0000026a 
+ 00010027  0x00000fcb fetch  0x00000001 , 0x00000263 
+ 00010028  0x00000fcc rtn  0x00000034 
+ 00010029  0x00000fcd isolate1  0x00000000 , 0x0000003f 
+ 00010030  0x00000fce arg  0x00001000 , 0x00000006 
+ 00010031  0x00000fcf call  0x00004d79 , 0x00000001 
+ 00010032  0x00000fd0 bpatch  0x00000071 , 0x0000400e 
+ 00010033  0x00000fd1 fetch  0x00000001 , 0x0000026a 
+ 00010034  0x00000fd2 beq  0x00000001 , 0x0000273b 
+ 00010035  0x00000fd4 jam  0x00000000 , 0x0000026a 
+ 00010036  0x00000fd5 fetch  0x00000001 , 0x00000263 
+ 00010037  0x00000fd6 rtnbit0  0x00000001 
+ 00010038  0x00000fd7 arg  0x00001400 , 0x00000006 
+ 00010039  0x00000fd8 call  0x00004d79 
+ 00010040  0x00000fd9 fetch  0x00000001 , 0x0000026a 
+ 00010041  0x00000fda beq  0x00000001 , 0x00002741 
+ 00010042  0x00000fdb rtn 
+ 00010043  0x00000fde fetch  0x00000001 , 0x00000263 
+ 00010044  0x00000fdf set0  0x00000000 , 0x0000003f 
+ 00010045  0x00000fe0 store  0x00000001 , 0x00000263 
+ 00010046  0x00000fe1 setarg  0x00000000 
+ 00010047  0x00000fe2 store  0x00000002 , 0x0000025d 
+ 00010048  0x00000fe3 rtn 
+ 00010049  0x00000fe5 fetch  0x00000001 , 0x00000263 
+ 00010050  0x00000fe6 set0  0x00000001 , 0x0000003f 
+ 00010051  0x00000fe7 store  0x00000001 , 0x00000263 
+ 00010052  0x00000fe8 setarg  0x00000000 
+ 00010053  0x00000fe9 store  0x00000002 , 0x0000025f 
+ 00010054  0x00000fea rtn 
+ 00010055  0x00000fed fetch  0x00000001 , 0x00000263 
+ 00010056  0x00000fee set1  0x00000000 , 0x0000003f 
+ 00010057  0x00000fef store  0x00000001 , 0x00000263 
+ 00010058  0x00000ff0 rtn 
+ 00010059  0x00000ff3 fetch  0x00000001 , 0x00000263 
+ 00010060  0x00000ff4 set1  0x00000001 , 0x0000003f 
+ 00010061  0x00000ff5 store  0x00000001 , 0x00000263 
+ 00010062  0x00000ff6 rtn 
+ 00010063  0x00000ffd bpatch  0x00000072 , 0x0000400e 
+ 00010064  0x00000ffe add  0x00000028 , 0x00000001 , 0x00000021 
+ 00010065  0x00000fff call  0x000028ea 
+ 00010066  0x00001000 force  0x00000003 , 0x00000024 
+ 00010067  0x00001001 call  0x000028d2 
+ 00010068  0x00001002 call  0x00002a51 
+ 00010069  0x00001003 call  0x00002a5f 
+ 00010070  0x00001004 branch  0x00002a64 
+ 00010071  0x00001008 bpatch  0x00000073 , 0x0000400e 
+ 00010072  0x00001009 call  0x00002a4d 
+ 00010073  0x0000100a deposit  0x00000028 
+ 00010074  0x0000100b fetcht  0x00000004 , 0x000040ca 
+ 00010075  0x0000100c isub  0x00000002 , 0x0000003f 
+ 00010076  0x0000100d rtnne  0x00000001 
+ 00010077  0x0000100e compare  0x00000000 , 0x00000001 , 0x0000001f 
+ 00010078  0x0000100f nbranch  0x00002761 , 0x00000001 
+ 00010079  0x00001010 fetch  0x00000001 , 0x00000019 
+ 00010080  0x00001011 rtn  0x00000034 
+ 00010081  0x00001013 call  0x0000274f 
+ 00010082  0x00001015 compare  0x00000010 , 0x00000001 , 0x0000001f 
+ 00010083  0x00001016 branch  0x0000264d , 0x00000001 
+ 00010084  0x00001017 rshift  0x00000021 , 0x00000002 
+ 00010085  0x00001018 or  0x00000002 , 0x00000040 , 0x0000000e 
+ 00010086  0x0000101a bpatch  0x00000074 , 0x0000400e 
+ 00010087  0x0000101b enable  0x00000007 
+ 00010088  0x0000101c enable  0x0000000a 
+ 00010089  0x0000101d enable  0x0000001b 
+ 00010090  0x0000101e set0  0x00000010 , 0x00000000 
+ 00010091  0x0000101f deposit  0x00000004 
+ 00010092  0x00001020 inject  0x00000003 , 0x00000003 
+ 00010093  0x00001021 deposit  0x00000001 
+ 00010094  0x00001022 inject  0x00000003 , 0x00000004 
+ 00010095  0x00001023 fetch  0x00000001 , 0x00000047 
+ 00010096  0x00001024 inject  0x00000000 , 0x00000004 
+ 00010097  0x00001025 inject  0x00000003 , 0x00000003 
+ 00010098  0x00001026 enable  0x00000008 
+ 00010099  0x00001027 inject  0x00000003 , 0x00000008 
+ 00010100  0x00001028 disable  0x0000001b 
+ 00010101  0x00001029 disable  0x00000008 
+ 00010102  0x0000102a disable  0x0000000a 
+ 00010103  0x0000102b set0  0x00000002 , 0x00000015 
+ 00010104  0x0000102c arg  0x00000000 , 0x00000002 
+ 00010105  0x0000102d call  0x00002a1c 
+ 00010106  0x0000102e bpatch  0x00000075 , 0x0000400e 
+ 00010107  0x0000102f and  0x00000001 , 0x0000001f , 0x0000003f 
+ 00010108  0x00001030 beq  0x00000013 , 0x000027b4 
+ 00010109  0x00001031 beq  0x00000000 , 0x0000264d 
+ 00010110  0x00001032 beq  0x00000001 , 0x0000264d 
+ 00010111  0x00001033 beq  0x00000002 , 0x00002797 
+ 00010112  0x00001034 beq  0x00000003 , 0x000027c5 
+ 00010113  0x00001035 beq  0x00000004 , 0x000027cb 
+ 00010114  0x00001036 beq  0x00000007 , 0x0000278c 
+ 00010115  0x00001037 beq  0x00000008 , 0x000027ca 
+ 00010116  0x00001038 arg  0x00000004 , 0x00000002 
+ 00010117  0x00001039 call  0x00002a1c 
+ 00010118  0x0000103a beq  0x0000000a , 0x000027c7 
+ 00010119  0x0000103b beq  0x0000000b , 0x000027cd 
+ 00010120  0x0000103c arg  0x00000008 , 0x00000002 
+ 00010121  0x0000103d call  0x00002a1c 
+ 00010122  0x0000103e beq  0x0000000f , 0x000027cd 
+ 00010123  0x0000103f branch  0x000027c7 
+ 00010124  0x00001043 bpatch  0x00000076 , 0x0000400e 
+ 00010125  0x00001044 enable  0x0000001d 
+ 00010126  0x00001045 enable  0x00000009 
+ 00010127  0x00001046 enable  0x0000000e 
+ 00010128  0x00001047 force  0x0000001e , 0x00000039 
+ 00010129  0x00001048 arg  0x000000b3 , 0x00000006 
+ 00010130  0x0000104a ifetch  0x00000001 , 0x00000006 
+ 00010131  0x0000104b inject  0x00000003 , 0x00000008 
+ 00010132  0x0000104c loop  0x00002792 
+ 00010133  0x0000104d bmark1  0x00000007 , 0x000027f7 
+ 00010134  0x0000104e branch  0x0000264d 
+ 00010135  0x00001051 bpatch  0x00000077 , 0x0000400e 
+ 00010136  0x00001052 fetch  0x00000001 , 0x00000181 
+ 00010137  0x00001053 icopy  0x00000004 
+ 00010138  0x00001054 fetch  0x00000001 , 0x00000090 
+ 00010139  0x00001055 icopy  0x0000001c 
+ 00010140  0x00001056 fetch  0x00000003 , 0x000040aa 
+ 00010141  0x00001057 icopy  0x0000001d 
+ 00010142  0x00001058 fetch  0x00000002 , 0x000040a4 
+ 00010143  0x00001059 icopy  0x0000002e 
+ 00010144  0x0000105a enable  0x00000009 
+ 00010145  0x0000105b enable  0x0000001c 
+ 00010146  0x0000105c copy  0x00000020 , 0x00000011 
+ 00010147  0x0000105d call  0x000028e2 
+ 00010148  0x0000105e pulse  0x00000015 
+ 00010149  0x0000105f nop  0x00000020 
+ 00010150  0x00001060 copy  0x00000021 , 0x0000000b 
+ 00010151  0x00001061 fetch  0x00000004 , 0x00000161 
+ 00010152  0x00001062 icopy  0x00000021 
+ 00010153  0x00001063 preload  0x0000001e 
+ 00010154  0x00001064 set1  0x0000003a , 0x0000003f 
+ 00010155  0x00001065 inject  0x00000003 , 0x00000048 
+ 00010156  0x00001066 preload  0x0000001f 
+ 00010157  0x00001067 inject  0x00000003 , 0x00000048 
+ 00010158  0x00001068 copy  0x0000000b , 0x00000021 
+ 00010159  0x00001069 copy  0x00000011 , 0x00000020 
+ 00010160  0x0000106a enable  0x00000008 
+ 00010161  0x0000106b inject  0x00000003 , 0x00000010 
+ 00010162  0x0000106c disable  0x00000008 
+ 00010163  0x0000106d branch  0x0000264d 
+ 00010164  0x00001070 bpatch  0x00000078 , 0x0000400f 
+ 00010165  0x00001071 enable  0x0000000e 
+ 00010166  0x00001072 enable  0x00000009 
+ 00010167  0x00001073 enable  0x0000001c 
+ 00010168  0x00001074 fetch  0x00000001 , 0x000004b6 
+ 00010169  0x00001075 and  0x0000003f , 0x000001f8 , 0x00000002 
+ 00010170  0x00001076 arg  0x000004b6 , 0x00000006 
+ 00010171  0x00001077 increase  0x00000008 , 0x00000002 
+ 00010172  0x00001079 add  0x00000002 , 0xffffffb8 , 0x00000013 
+ 00010173  0x0000107a nbranch  0x000027c2 , 0x00000002 
+ 00010174  0x0000107b ifetch  0x00000009 , 0x00000006 
+ 00010175  0x0000107c inject  0x00000003 , 0x00000048 
+ 00010176  0x0000107d copy  0x00000013 , 0x00000002 
+ 00010177  0x0000107e branch  0x000027bc 
+ 00010178  0x00001080 ifetch  0x00000009 , 0x00000006 
+ 00010179  0x00001081 iinject  0x00000003 , 0x00000002 
+ 00010180  0x00001082 branch  0x000027f7 
+ 00010181  0x00001085 enable  0x0000001c 
+ 00010182  0x00001086 branch  0x000027d0 
+ 00010183  0x00001089 enable  0x0000001c 
+ 00010184  0x0000108a set1  0x00000010 , 0x00000000 
+ 00010185  0x0000108b branch  0x000027d0 
+ 00010186  0x0000108e set1  0x00000002 , 0x00000015 
+ 00010187  0x00001090 enable  0x0000001d 
+ 00010188  0x00001091 branch  0x000027d0 
+ 00010189  0x00001095 set1  0x00000002 , 0x00000015 
+ 00010190  0x00001096 enable  0x0000001d 
+ 00010191  0x00001097 set1  0x00000010 , 0x00000000 
+ 00010192  0x0000109a bpatch  0x00000079 , 0x0000400f 
+ 00010193  0x0000109b fetch  0x00000001 , 0x0000004c 
+ 00010194  0x0000109c bbit0  0x00000005 , 0x000027e5 
+ 00010195  0x0000109d sub  0x00000001 , 0x00000003 , 0x0000003e 
+ 00010196  0x0000109e branch  0x000027e5 , 0x00000002 
+ 00010197  0x0000109f disable  0x0000000e 
+ 00010198  0x000010a0 disable  0x0000001c 
+ 00010199  0x000010a1 enable  0x0000001d 
+ 00010200  0x000010a2 disable  0x00000007 
+ 00010201  0x000010a3 set1  0x00000001 , 0x00000015 
+ 00010202  0x000010a4 isolate1  0x00000002 , 0x00000015 
+ 00010203  0x000010a5 branch  0x000027df , 0x00000001 
+ 00010204  0x000010a6 setarg  0x000abeee 
+ 00010205  0x000010a7 inject  0x00000003 , 0x00000014 
+ 00010206  0x000010a8 branch  0x000027e3 
+ 00010207  0x000010aa setarg  0x005faeba 
+ 00010208  0x000010ab inject  0x00000003 , 0x00000018 
+ 00010209  0x000010ac setarg  0x00000012 
+ 00010210  0x000010ad inject  0x00000003 , 0x00000006 
+ 00010211  0x000010af enable  0x00000007 
+ 00010212  0x000010b0 set1  0x00000010 , 0x00000000 
+ 00010213  0x000010b2 enable  0x0000000e 
+ 00010214  0x000010b3 enable  0x00000009 
+ 00010215  0x000010b4 bmark1  0x00000005 , 0x00002800 
+ 00010216  0x000010b5 fetch  0x00000001 , 0x000041db 
+ 00010217  0x000010b6 inject  0x00000003 , 0x00000003 
+ 00010218  0x000010b7 fetch  0x00000002 , 0x000041dc 
+ 00010219  0x000010b8 iforce  0x00000039 
+ 00010220  0x000010b9 bmark1  0x00000010 , 0x000027ef 
+ 00010221  0x000010ba inject  0x00000003 , 0x00000005 
+ 00010222  0x000010bb branch  0x000027f0 
+ 00010223  0x000010bd inject  0x00000003 , 0x0000000d 
+ 00010224  0x000010bf deposit  0x00000039 
+ 00010225  0x000010c0 branch  0x000027f7 , 0x00000034 
+ 00010226  0x000010c1 fetch  0x00000002 , 0x0000016f 
+ 00010227  0x000010c2 iforce  0x00000006 
+ 00010228  0x000010c4 ifetch  0x00000001 , 0x00000006 
+ 00010229  0x000010c5 inject  0x00000003 , 0x00000008 
+ 00010230  0x000010c6 loop  0x000027f4 
+ 00010231  0x000010ca enable  0x00000008 
+ 00010232  0x000010cb inject  0x00000003 , 0x00000010 
+ 00010233  0x000010cc disable  0x00000008 
+ 00010234  0x000010cd call  0x000024c1 
+ 00010235  0x000010ce fetch  0x00000001 , 0x0000004c 
+ 00010236  0x000010cf bbit0  0x00000005 , 0x0000264d 
+ 00010237  0x000010d0 force  0x00000000 , 0x0000003f 
+ 00010238  0x000010d1 inject  0x00000003 , 0x00000006 
+ 00010239  0x000010d2 branch  0x0000264d 
+ 00010240  0x000010d6 bpatch  0x0000007a , 0x0000400f 
+ 00010241  0x000010d7 bmark1  0x00000010 , 0x00002808 
+ 00010242  0x000010d9 fetch  0x00000001 , 0x00000180 
+ 00010243  0x000010da inject  0x00000003 , 0x00000003 
+ 00010244  0x000010db fetch  0x00000001 , 0x0000015f 
+ 00010245  0x000010dc iforce  0x00000013 
+ 00010246  0x000010dd inject  0x00000003 , 0x00000005 
+ 00010247  0x000010de branch  0x0000280d 
+ 00010248  0x000010e0 fetch  0x00000001 , 0x00000180 
+ 00010249  0x000010e1 inject  0x00000003 , 0x00000003 
+ 00010250  0x000010e2 fetch  0x00000002 , 0x0000015f 
+ 00010251  0x000010e3 iforce  0x00000013 
+ 00010252  0x000010e4 inject  0x00000003 , 0x0000000d 
+ 00010253  0x000010e6 arg  0x00000551 , 0x00000006 
+ 00010254  0x000010e8 copy  0x00000013 , 0x0000003e 
+ 00010255  0x000010e9 branch  0x00002814 , 0x00000005 
+ 00010256  0x000010ea ifetch  0x00000001 , 0x00000006 
+ 00010257  0x000010eb inject  0x00000003 , 0x00000008 
+ 00010258  0x000010ec increase  0xffffffff , 0x00000013 
+ 00010259  0x000010ed branch  0x0000280e 
+ 00010260  0x000010ef fetch  0x00000002 , 0x000000fc 
+ 00010261  0x000010f0 increase  0x00000001 , 0x0000003f 
+ 00010262  0x000010f1 store  0x00000002 , 0x000000fc 
+ 00010263  0x000010f2 branch  0x000027f7 
+ 00010264  0x000010f6 fetch  0x00000004 , 0x00000165 
+ 00010265  0x000010f7 add  0x0000003f , 0x00000007 , 0x00000011 
+ 00010266  0x000010f8 fetch  0x00000002 , 0x00000171 
+ 00010267  0x000010f9 nbranch  0x0000281e , 0x00000034 
+ 00010268  0x000010fa increase  0xfffffffd , 0x00000011 
+ 00010269  0x000010fb branch  0x00002826 
+ 00010270  0x000010fd mul32  0x0000003f , 0x0000000c , 0x0000003f 
+ 00010271  0x000010fe hfetcht  0x00000002 , 0x00008040 
+ 00010272  0x000010ff increase  0x00000001 , 0x00000002 
+ 00010273  0x00001101 isub  0x00000002 , 0x0000003f 
+ 00010274  0x00001102 nbranch  0x00002825 , 0x00000002 
+ 00010275  0x00001103 increase  0xffffffff , 0x00000011 
+ 00010276  0x00001104 branch  0x00002821 
+ 00010277  0x00001106 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00010278  0x00001108 until  0x0000003e , 0x00000023 
+ 00010279  0x00001109 compare  0x00000000 , 0x00000022 , 0x00000003 
+ 00010280  0x0000110a nbranch  0x00002826 , 0x00000001 
+ 00010281  0x0000110b iforce  0x00000029 
+ 00010282  0x0000110c copy  0x00000011 , 0x00000028 
+ 00010283  0x0000110d iforce  0x00000029 
+ 00010284  0x0000110e rtn 
+ 00010285  0x00001112 bpatch  0x0000007b , 0x0000400f 
+ 00010286  0x00001113 until  0x0000003e , 0x00000022 
+ 00010287  0x00001114 deposit  0x0000001a 
+ 00010288  0x00001115 iforce  0x00000006 
+ 00010289  0x00001116 rshift16 , 0x0000003f , 0x0000003f 
+ 00010290  0x00001117 isub  0x00000022 , 0x00000039 
+ 00010291  0x00001118 and_into  0x00000003 , 0x00000039 
+ 00010292  0x00001119 nbranch  0x00002837 , 0x00000005 
+ 00010293  0x0000111a force  0x00000000 , 0x0000003f 
+ 00010294  0x0000111b branch  0x0000283b 
+ 00010295  0x0000111d arg  0x00000ea6 , 0x00000002 
+ 00010296  0x0000111e force  0x00000000 , 0x0000003f 
+ 00010297  0x00001120 iadd  0x00000002 , 0x0000003f 
+ 00010298  0x00001121 loop  0x00002839 
+ 00010299  0x00001123 iadd  0x00000006 , 0x0000003f 
+ 00010300  0x00001124 div  0x0000003f , 0x0000000c 
+ 00010301  0x00001125 call  0x00007f86 
+ 00010302  0x00001126 quotient  0x0000003f 
+ 00010303  0x00001127 store  0x00000002 , 0x00000171 
+ 00010304  0x00001128 rtn 
+ 00010305  0x0000112b bpatch  0x0000007c , 0x0000400f 
+ 00010306  0x0000112c deposit  0x0000001a 
+ 00010307  0x0000112d copy  0x00000019 , 0x00000002 
+ 00010308  0x0000112e isub  0x00000002 , 0x0000003e 
+ 00010309  0x0000112f nsetflag  0x00000002 , 0x0000002c , 0x0000003f 
+ 00010310  0x00001130 isub  0x00000002 , 0x00000002 
+ 00010311  0x00001131 setarg  0x00000ea6 
+ 00010312  0x00001132 isolate0  0x0000000f , 0x00000002 
+ 00010313  0x00001133 branch  0x0000284c , 0x00000001 
+ 00010314  0x00001134 setarg  0xffff0ea6 
+ 00010315  0x00001135 iadd  0x00000002 , 0x00000002 
+ 00010316  0x00001137 storet  0x00000006 , 0x00000447 
+ 00010317  0x00001138 rtn  0x00000036 
+ 00010318  0x00001139 storet  0x00000006 , 0x00000038 
+ 00010319  0x0000113a rtn 
+ 00010320  0x0000113d disable  0x00000030 
+ 00010321  0x0000113e fetch  0x00000006 , 0x00000447 
+ 00010322  0x0000113f branch  0x00002854 , 0x00000036 
+ 00010323  0x00001140 fetch  0x00000006 , 0x00000038 
+ 00010324  0x00001142 iadd  0x00000019 , 0x00000030 
+ 00010325  0x00001143 increase  0x0000000a , 0x00000030 
+ 00010326  0x00001144 setarg  0x00000ea6 
+ 00010327  0x00001145 isub  0x00000030 , 0x0000003f 
+ 00010328  0x00001146 isolate0  0x0000000f , 0x0000003f 
+ 00010329  0x00001147 branch  0x0000285e , 0x00000001 
+ 00010330  0x00001148 setarg  0x0000f15a 
+ 00010331  0x00001149 iadd  0x00000030 , 0x00000030 
+ 00010332  0x0000114b copy  0x00000030 , 0x0000001a 
+ 00010333  0x0000114c rtn 
+ 00010334  0x0000114e force  0x00000000 , 0x0000003e 
+ 00010335  0x0000114f branch  0x0000285c 
+ 00010336  0x00001157 bpatch  0x0000007d , 0x0000400f 
+ 00010337  0x00001158 call  0x00002918 
+ 00010338  0x00001159 copy  0x00000021 , 0x0000003f 
+ 00010339  0x0000115a and_into  0x00000180 , 0x0000003f 
+ 00010340  0x0000115b compare  0x00000003 , 0x00000024 , 0x00000007 
+ 00010341  0x0000115c nbranch  0x00002869 , 0x00000001 
+ 00010342  0x0000115d rshift3  0x0000003f , 0x0000003f 
+ 00010343  0x0000115e iadd  0x00000017 , 0x0000003f 
+ 00010344  0x0000115f branch  0x0000286a 
+ 00010345  0x00001161 copy  0x00000017 , 0x0000003f 
+ 00010346  0x00001163 div  0x0000003f , 0x0000004f 
+ 00010347  0x00001164 pulse  0x00000015 
+ 00010348  0x00001165 call  0x00007f86 
+ 00010349  0x00001166 remainder  0x00000011 
+ 00010350  0x00001167 add  0x00000011 , 0xffffffd8 , 0x00000002 
+ 00010351  0x00001168 branch  0x00002872 , 0x00000002 
+ 00010352  0x00001169 lshift  0x00000011 , 0x00000002 
+ 00010353  0x0000116a branch  0x00002874 
+ 00010354  0x0000116c lshift  0x00000002 , 0x00000002 
+ 00010355  0x0000116d increase  0x00000001 , 0x00000002 
+ 00010356  0x0000116f bpatch  0x0000007e , 0x0000400f 
+ 00010357  0x00001170 fetch  0x00000001 , 0x00000031 
+ 00010358  0x00001171 bbit0  0x00000003 , 0x00002885 
+ 00010359  0x00001173 fetch  0x00000004 , 0x000040d2 
+ 00010360  0x00001174 isub  0x00000021 , 0x0000003e 
+ 00010361  0x00001175 branch  0x00002885 , 0x00000002 
+ 00010362  0x00001176 call  0x000028a4 
+ 00010363  0x00001177 fetch  0x00000001 , 0x000040d9 
+ 00010364  0x00001178 rtn  0x00000034 
+ 00010365  0x00001179 fetch  0x00000001 , 0x00000031 
+ 00010366  0x0000117a set1  0x00000002 , 0x0000003f 
+ 00010367  0x0000117b store  0x00000001 , 0x00000031 
+ 00010368  0x0000117c fetch  0x00000005 , 0x000040e7 
+ 00010369  0x0000117d store  0x00000005 , 0x000040da 
+ 00010370  0x0000117e ifetch  0x00000005 , 0x00000006 
+ 00010371  0x0000117f store  0x00000005 , 0x000040df 
+ 00010372  0x00001180 call  0x000028a9 
+ 00010373  0x00001182 fetch  0x00000001 , 0x00000031 
+ 00010374  0x00001183 rtnbit0  0x00000002 
+ 00010375  0x00001184 isolate1  0x00000001 , 0x00000021 
+ 00010376  0x00001185 branch  0x000028a1 , 0x00000001 
+ 00010377  0x00001186 rshift3  0x00000002 , 0x00000011 
+ 00010378  0x00001187 and  0x00000002 , 0x00000007 , 0x00000007 
+ 00010379  0x00001188 setarg  0x000040da 
+ 00010380  0x00001189 iadd  0x00000011 , 0x00000011 
+ 00010381  0x0000118a ifetch  0x00000001 , 0x00000011 
+ 00010382  0x0000118b qisolate0  0x0000003f 
+ 00010383  0x0000118c branch  0x00002892 , 0x00000001 
+ 00010384  0x0000118d deposit  0x00000002 
+ 00010385  0x0000118e branch  0x0000289e 
+ 00010386  0x00001190 fetch  0x00000001 , 0x000040e4 
+ 00010387  0x00001191 iforce  0x00000012 
+ 00010388  0x00001192 deposit  0x00000021 
+ 00010389  0x00001193 and_into  0x00000180 , 0x0000003f 
+ 00010390  0x00001194 rshift3  0x0000003f , 0x0000003f 
+ 00010391  0x00001195 iadd  0x00000017 , 0x0000003f 
+ 00010392  0x00001196 idiv  0x00000012 
+ 00010393  0x00001197 setarg  0x000040f2 
+ 00010394  0x00001198 call  0x00007f86 
+ 00010395  0x00001199 remainder  0x00000011 
+ 00010396  0x0000119a iadd  0x00000011 , 0x00000006 
+ 00010397  0x0000119b ifetch  0x00000001 , 0x00000006 
+ 00010398  0x0000119d store  0x00000001 , 0x000040e5 
+ 00010399  0x0000119e iforce  0x00000002 
+ 00010400  0x0000119f rtn 
+ 00010401  0x000011a2 fetch  0x00000001 , 0x000040e5 
+ 00010402  0x000011a3 iforce  0x00000002 
+ 00010403  0x000011a4 rtn 
+ 00010404  0x000011a7 fetch  0x00000001 , 0x00000031 
+ 00010405  0x000011a8 set0  0x00000002 , 0x0000003f 
+ 00010406  0x000011a9 set0  0x00000003 , 0x0000003f 
+ 00010407  0x000011aa store  0x00000001 , 0x00000031 
+ 00010408  0x000011ab rtn 
+ 00010409  0x000011b2 bpatch  0x0000007f , 0x0000400f 
+ 00010410  0x000011b3 arg  0x000040f2 , 0x00000005 
+ 00010411  0x000011b4 force  0x0000000a , 0x00000039 
+ 00010412  0x000011b5 call  0x00007ec6 
+ 00010413  0x000011b6 arg  0x000040f2 , 0x00000005 
+ 00010414  0x000011b7 force  0x00000000 , 0x00000013 
+ 00010415  0x000011b8 force  0x00000002 , 0x00000007 
+ 00010416  0x000011ba fetch  0x00000005 , 0x000040da 
+ 00010417  0x000011bb iforce  0x00000002 
+ 00010418  0x000011bc compare  0x00000002 , 0x00000007 , 0x000000ff 
+ 00010419  0x000011bd branch  0x000028b5 , 0x00000001 
+ 00010420  0x000011be rshift  0x00000002 , 0x00000002 
+ 00010421  0x000011c0 isolate0  0x00000000 , 0x00000002 
+ 00010422  0x000011c1 branch  0x000028b9 , 0x00000001 
+ 00010423  0x000011c2 deposit  0x00000013 
+ 00010424  0x000011c3 istore  0x00000001 , 0x00000005 
+ 00010425  0x000011c5 rshift2  0x00000002 , 0x00000002 
+ 00010426  0x000011c6 increase  0x00000002 , 0x00000013 
+ 00010427  0x000011c7 compare  0x00000028 , 0x00000013 , 0x000000fe 
+ 00010428  0x000011c8 nbranch  0x000028c2 , 0x00000001 
+ 00010429  0x000011c9 fetch  0x00000005 , 0x000040df 
+ 00010430  0x000011ca iforce  0x00000002 
+ 00010431  0x000011cb compare  0x00000002 , 0x00000007 , 0x000000ff 
+ 00010432  0x000011cc branch  0x000028c2 , 0x00000001 
+ 00010433  0x000011cd rshift  0x00000002 , 0x00000002 
+ 00010434  0x000011cf sub  0x00000013 , 0x0000004e , 0x0000003e 
+ 00010435  0x000011d0 branch  0x000028b5 , 0x00000002 
+ 00010436  0x000011d1 force  0x00000001 , 0x00000013 
+ 00010437  0x000011d2 increase  0xffffffff , 0x00000007 
+ 00010438  0x000011d3 nbranch  0x000028b0 , 0x00000005 
+ 00010439  0x000011d4 arg  0x000040f2 , 0x00000011 
+ 00010440  0x000011d5 deposit  0x00000005 
+ 00010441  0x000011d6 isub  0x00000011 , 0x0000003f 
+ 00010442  0x000011d7 store  0x00000001 , 0x000040e4 
+ 00010443  0x000011d8 rtn 
+ 00010444  0x000011db bpatch  0x00000080 , 0x00004010 
+ 00010445  0x000011dc call  0x00002860 
+ 00010446  0x000011dd fetch  0x00000001 , 0x0000017f 
+ 00010447  0x000011de bbit0  0x00000005 , 0x000028d1 
+ 00010448  0x000011df fetcht  0x00000001 , 0x000004cc 
+ 00010449  0x000011e1 branch  0x0000291f 
+ 00010450  0x000011e5 bpatch  0x00000081 , 0x00004010 
+ 00010451  0x000011e6 call  0x00002860 
+ 00010452  0x000011e7 fetch  0x00000001 , 0x0000017f 
+ 00010453  0x000011e8 bbit0  0x00000004 , 0x000028d7 
+ 00010454  0x000011e9 fetcht  0x00000001 , 0x000004cb 
+ 00010455  0x000011eb branch  0x00002933 
+ 00010456  0x000011ef force  0x00000000 , 0x0000002d 
+ 00010457  0x000011f0 fetch  0x00000003 , 0x000040a7 
+ 00010458  0x000011f1 iforce  0x0000002c 
+ 00010459  0x000011f2 rtn 
+ 00010460  0x000011f5 bpatch  0x00000082 , 0x00004010 
+ 00010461  0x000011f6 fetch  0x00000001 , 0x000041d3 
+ 00010462  0x000011f7 icopy  0x0000002d 
+ 00010463  0x000011f8 fetch  0x00000003 , 0x000041d0 
+ 00010464  0x000011f9 icopy  0x0000002c 
+ 00010465  0x000011fa rtn 
+ 00010466  0x000011fd bpatch  0x00000083 , 0x00004010 
+ 00010467  0x000011fe fetch  0x00000002 , 0x000040a4 
+ 00010468  0x000011ff icopy  0x0000002e 
+ 00010469  0x00001200 fetch  0x00000001 , 0x000040a3 
+ 00010470  0x00001201 icopy  0x0000002d 
+ 00010471  0x00001202 fetch  0x00000003 , 0x000040a0 
+ 00010472  0x00001203 icopy  0x0000002c 
+ 00010473  0x00001204 rtn 
+ 00010474  0x00001207 bpatch  0x00000084 , 0x00004010 
+ 00010475  0x00001208 fetch  0x00000002 , 0x00000044 
+ 00010476  0x00001209 icopy  0x0000002e 
+ 00010477  0x0000120a fetch  0x00000001 , 0x00000043 
+ 00010478  0x0000120b icopy  0x0000002d 
+ 00010479  0x0000120c fetch  0x00000003 , 0x00000040 
+ 00010480  0x0000120d icopy  0x0000002c 
+ 00010481  0x0000120e rtn 
+ 00010482  0x00001212 bmark1  0x00000020 , 0x000028f5 
+ 00010483  0x00001213 rtnmark0  0x0000001d 
+ 00010484  0x00001214 rtnmark0  0x0000001f 
+ 00010485  0x00001216 and_into  0xffffff00 , 0x0000002c 
+ 00010486  0x00001217 pulse  0x00000015 
+ 00010487  0x00001218 nop  0x00000020 
+ 00010488  0x00001219 rtn 
+ 00010489  0x0000121d bpatch  0x00000085 , 0x00004010 
+ 00010490  0x0000121e branch  0x0000290a , 0x00000021 
+ 00010491  0x0000121f jam  0x000000d4 , 0x00008955 
+ 00010492  0x00001220 nop  0x00000004 
+ 00010493  0x00001221 jam  0x000000d2 , 0x00008955 
+ 00010494  0x00001222 nop  0x00000004 
+ 00010495  0x00001223 jam  0x000000d1 , 0x00008955 
+ 00010496  0x00001224 nop  0x00000004 
+ 00010497  0x00001225 fetch  0x00000001 , 0x000041de 
+ 00010498  0x00001226 beq  0x00000000 , 0x00002908 
+ 00010499  0x00001227 beq  0x00000001 , 0x00002915 
+ 00010500  0x00001228 beq  0x00000002 , 0x00002908 
+ 00010501  0x00001229 beq  0x00000003 , 0x00002915 
+ 00010502  0x0000122a beq  0x00000004 , 0x00002915 
+ 00010503  0x0000122b beq  0x00000020 , 0x00002915 
+ 00010504  0x0000122e jam  0x000000d0 , 0x00008955 
+ 00010505  0x0000122f jam  0x000000e0 , 0x00008956 
+ 00010506  0x00001231 force  0x00000000 , 0x00000015 
+ 00010507  0x00001232 disable  0x00000021 
+ 00010508  0x00001233 disable  0x00000020 
+ 00010509  0x00001234 pulse  0x0000001e 
+ 00010510  0x00001235 jam  0x00000000 , 0x00008902 
+ 00010511  0x00001236 jam  0x00000000 , 0x00008901 
+ 00010512  0x00001237 jam  0x00000000 , 0x00008900 
+ 00010513  0x00001238 jam  0x00000000 , 0x00008903 
+ 00010514  0x00001239 jam  0x00000070 , 0x00008904 
+ 00010515  0x0000123a jam  0x00000000 , 0x00008906 
+ 00010516  0x0000123b rtn 
+ 00010517  0x00001241 jam  0x000000d0 , 0x00008955 
+ 00010518  0x00001242 jam  0x000000c0 , 0x00008956 
+ 00010519  0x00001243 branch  0x0000290a 
+ 00010520  0x00001246 bpatch  0x00000086 , 0x00004010 
+ 00010521  0x00001247 jam  0x00000000 , 0x00008902 
+ 00010522  0x00001248 jam  0x00000000 , 0x00008901 
+ 00010523  0x00001249 jam  0x00000018 , 0x00008900 
+ 00010524  0x0000124a jam  0x000000a7 , 0x00008903 
+ 00010525  0x0000124b jam  0x0000007f , 0x00008904 
+ 00010526  0x0000124c rtn 
+ 00010527  0x0000124f bpatch  0x00000087 , 0x00004010 
+ 00010528  0x00001251 storet  0x00000001 , 0x00000017 
+ 00010529  0x00001252 add  0x00000002 , 0x00000004 , 0x00000011 
+ 00010530  0x00001253 jam  0x00000007 , 0x0000896d 
+ 00010531  0x00001254 branch  0x00002981 
+ 00010532  0x00001256 bpatch  0x00000088 , 0x00004011 
+ 00010533  0x00001257 jam  0x000000cf , 0x00008901 
+ 00010534  0x00001258 nop  0x0000000a 
+ 00010535  0x00001259 jam  0x000000ff , 0x00008900 
+ 00010536  0x0000125a jam  0x000000af , 0x00008903 
+ 00010537  0x0000125b jam  0x000000ff , 0x00008904 
+ 00010538  0x0000125c nop  0x0000000a 
+ 00010539  0x0000125d jam  0x000000a0 , 0x00008902 
+ 00010540  0x0000125e rtn 
+ 00010541  0x00001261 fetch  0x00000001 , 0x000041e0 
+ 00010542  0x00001262 branch  0x00002931 , 0x00000034 
+ 00010543  0x00001264 add  0x00000002 , 0x00000002 , 0x00000011 
+ 00010544  0x00001265 rtn 
+ 00010545  0x00001267 add  0x00000002 , 0x00000000 , 0x00000011 
+ 00010546  0x00001268 rtn 
+ 00010547  0x0000126b bpatch  0x00000089 , 0x00004011 
+ 00010548  0x0000126c storet  0x00000001 , 0x00000017 
+ 00010549  0x0000126d call  0x0000292d 
+ 00010550  0x0000126e call  0x00002981 
+ 00010551  0x0000126f setarg  0x00000500 
+ 00010552  0x00001270 call  0x00002a8f 
+ 00010553  0x00001272 jam  0x00000001 , 0x00008906 
+ 00010554  0x00001273 jam  0x0000003c , 0x00008900 
+ 00010555  0x00001274 jam  0x000000e0 , 0x00008901 
+ 00010556  0x00001275 jam  0x00000012 , 0x0000896d 
+ 00010557  0x00001276 nop  0x0000000a 
+ 00010558  0x00001277 jam  0x00000001 , 0x00008902 
+ 00010559  0x00001278 jam  0x0000003d , 0x00008902 
+ 00010560  0x00001279 nop  0x0000000a 
+ 00010561  0x0000127a jam  0x000000b7 , 0x00008903 
+ 00010562  0x0000127b nop  0x0000000a 
+ 00010563  0x0000127c jam  0x0000007f , 0x00008902 
+ 00010564  0x0000127e fetch  0x00000001 , 0x000041de 
+ 00010565  0x0000127f beq  0x00000000 , 0x0000294b 
+ 00010566  0x00001280 beq  0x00000001 , 0x0000294f 
+ 00010567  0x00001281 beq  0x00000002 , 0x00002953 
+ 00010568  0x00001282 beq  0x00000003 , 0x00002957 
+ 00010569  0x00001283 beq  0x00000004 , 0x0000295b 
+ 00010570  0x00001284 beq  0x00000020 , 0x0000295f 
+ 00010571  0x00001286 jam  0x000000f0 , 0x00008956 
+ 00010572  0x00001287 call  0x00002965 
+ 00010573  0x00001288 jam  0x000000d8 , 0x00008955 
+ 00010574  0x00001289 rtn 
+ 00010575  0x0000128c jam  0x000000df , 0x00008956 
+ 00010576  0x0000128d call  0x00002965 
+ 00010577  0x0000128e jam  0x000000df , 0x00008955 
+ 00010578  0x0000128f rtn 
+ 00010579  0x00001292 jam  0x000000ff , 0x00008956 
+ 00010580  0x00001293 call  0x00002965 
+ 00010581  0x00001294 jam  0x000000df , 0x00008955 
+ 00010582  0x00001295 rtn 
+ 00010583  0x00001297 jam  0x000000ce , 0x00008956 
+ 00010584  0x00001298 call  0x00002965 
+ 00010585  0x00001299 jam  0x000000d8 , 0x00008955 
+ 00010586  0x0000129a rtn 
+ 00010587  0x0000129d jam  0x000000cb , 0x00008956 
+ 00010588  0x0000129e call  0x00002965 
+ 00010589  0x0000129f jam  0x000000d8 , 0x00008955 
+ 00010590  0x000012a0 rtn 
+ 00010591  0x000012a3 jam  0x000000d0 , 0x00008955 
+ 00010592  0x000012a4 jam  0x000000c0 , 0x00008956 
+ 00010593  0x000012a5 jam  0x0000004c , 0x00008957 
+ 00010594  0x000012a6 jam  0x0000006c , 0x00008958 
+ 00010595  0x000012a7 jam  0x00000050 , 0x00008959 
+ 00010596  0x000012a8 rtn 
+ 00010597  0x000012ab nop  0x00000004 
+ 00010598  0x000012ac jam  0x000000d1 , 0x00008955 
+ 00010599  0x000012ad nop  0x00000004 
+ 00010600  0x000012ae jam  0x000000d2 , 0x00008955 
+ 00010601  0x000012af nop  0x00000004 
+ 00010602  0x000012b0 jam  0x000000d4 , 0x00008955 
+ 00010603  0x000012b1 rtn 
+ 00010604  0x000012b5 jam  0x00000006 , 0x00008042 
+ 00010605  0x000012b7 fetch  0x00000002 , 0x000040c3 
+ 00010606  0x000012b8 bbit0  0x0000000e , 0x0000296d 
+ 00010607  0x000012b9 iforce  0x00000006 
+ 00010608  0x000012ba arg  0x00008900 , 0x00000002 
+ 00010609  0x000012bc ifetch  0x00000001 , 0x00000006 
+ 00010610  0x000012bd beq  0x000000ff , 0x00002977 
+ 00010611  0x000012be ior  0x00000002 , 0x00000005 
+ 00010612  0x000012bf ifetch  0x00000001 , 0x00000006 
+ 00010613  0x000012c0 istore  0x00000001 , 0x00000005 
+ 00010614  0x000012c1 branch  0x00002971 
+ 00010615  0x000012c3 bpatch  0x0000008a , 0x00004011 
+ 00010616  0x000012c4 call  0x00002be5 
+ 00010617  0x000012c5 call  0x000029c9 
+ 00010618  0x000012c7 setarg  0x000007d0 
+ 00010619  0x000012c8 iadd  0x00000022 , 0x0000003f 
+ 00010620  0x000012c9 store  0x00000004 , 0x00000169 
+ 00010621  0x000012ca set1  0x00000003 , 0x00000015 
+ 00010622  0x000012cb force  0x00000000 , 0x00000015 
+ 00010623  0x000012cc ncall  0x00002998 , 0x0000002b 
+ 00010624  0x000012cd branch  0x000029ab 
+ 00010625  0x000012d1 bpatch  0x0000008b , 0x00004011 
+ 00010626  0x000012d2 setarg  0x00000960 
+ 00010627  0x000012d3 iadd  0x00000011 , 0x00000002 
+ 00010628  0x000012d4 fetch  0x00000001 , 0x000040bd 
+ 00010629  0x000012d5 jam  0x00000004 , 0x0000895f 
+ 00010630  0x000012d6 imul32  0x00000002 , 0x0000003f 
+ 00010631  0x000012d7 fetcht  0x00000001 , 0x000040be 
+ 00010632  0x000012d8 idiv  0x00000002 
+ 00010633  0x000012d9 call  0x00007f86 
+ 00010634  0x000012da quotient  0x00000011 
+ 00010635  0x000012db remainder  0x0000003f 
+ 00010636  0x000012dc lshift16  0x0000003f , 0x0000003f 
+ 00010637  0x000012dd lshift4  0x0000003f , 0x0000003f 
+ 00010638  0x000012de idiv  0x00000002 
+ 00010639  0x000012df call  0x00007f86 
+ 00010640  0x000012e0 quotient  0x0000003f 
+ 00010641  0x000012e1 lshift8  0x0000003f , 0x0000003f 
+ 00010642  0x000012e2 lshift  0x0000003f , 0x0000003f 
+ 00010643  0x000012e3 ior  0x00000011 , 0x0000003f 
+ 00010644  0x000012e4 hstore  0x00000004 , 0x00008960 
+ 00010645  0x000012e5 jam  0x00000044 , 0x0000895f 
+ 00010646  0x000012e6 jam  0x000000c4 , 0x0000895f 
+ 00010647  0x000012e7 rtn 
+ 00010648  0x000012eb bpatch  0x0000008c , 0x00004011 
+ 00010649  0x000012ec jam  0x00000002 , 0x00008906 
+ 00010650  0x000012ed setarg  0x0003d090 
+ 00010651  0x000012ee call  0x00002a8f 
+ 00010652  0x000012ef jam  0x0000007f , 0x00008900 
+ 00010653  0x000012f0 nop  0x00000082 
+ 00010654  0x000012f1 jam  0x00000030 , 0x00008952 
+ 00010655  0x000012f2 jam  0x000000d0 , 0x00008901 
+ 00010656  0x000012f3 jam  0x00000070 , 0x00008952 
+ 00010657  0x000012f4 jam  0x000000f0 , 0x00008952 
+ 00010658  0x000012f5 force  0x00000032 , 0x00000039 
+ 00010659  0x000012f7 hfetch  0x00000001 , 0x00008980 
+ 00010660  0x000012f8 bbit1  0x00000005 , 0x000029a6 
+ 00010661  0x000012f9 loop  0x000029a3 
+ 00010662  0x000012fb store  0x00000001 , 0x000040ce 
+ 00010663  0x000012fc jam  0x00000000 , 0x00008901 
+ 00010664  0x000012fd jam  0x00000000 , 0x00008900 
+ 00010665  0x000012fe jam  0x00000000 , 0x00008906 
+ 00010666  0x000012ff rtn 
+ 00010667  0x00001302 bpatch  0x0000008d , 0x00004011 
+ 00010668  0x00001303 fetch  0x00000001 , 0x000040ce 
+ 00010669  0x00001304 set1  0x00000005 , 0x0000003f 
+ 00010670  0x00001305 hstore  0x00000001 , 0x00008952 
+ 00010671  0x00001306 hfetcht  0x00000001 , 0x00008950 
+ 00010672  0x00001307 and_into  0x00000007 , 0x00000002 
+ 00010673  0x00001308 lshift3  0x0000003f , 0x0000003f 
+ 00010674  0x00001309 ior  0x00000002 , 0x0000003f 
+ 00010675  0x0000130a hstore  0x00000001 , 0x00008950 
+ 00010676  0x0000130b hfetch  0x00000001 , 0x00008951 
+ 00010677  0x0000130c set0  0x00000000 , 0x0000003f 
+ 00010678  0x0000130d hstore  0x00000001 , 0x00008951 
+ 00010679  0x0000130e hfetch  0x00000001 , 0x00008952 
+ 00010680  0x0000130f set0  0x00000005 , 0x0000003f 
+ 00010681  0x00001310 hstore  0x00000001 , 0x00008952 
+ 00010682  0x00001311 rtn 
+ 00010683  0x00001314 bpatch  0x0000008e , 0x00004011 
+ 00010684  0x00001315 hfetch  0x00000002 , 0x00008981 
+ 00010685  0x00001316 rshift4  0x0000003f , 0x0000003f 
+ 00010686  0x00001317 rshift3  0x0000003f , 0x0000003f 
+ 00010687  0x00001318 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00010688  0x0000131a and_into  0x000000ff , 0x0000003f 
+ 00010689  0x0000131b div  0x0000003f , 0x0000000a 
+ 00010690  0x0000131c call  0x00007f86 
+ 00010691  0x0000131d quotient  0x0000003f 
+ 00010692  0x0000131e lshift4  0x0000003f , 0x0000003f 
+ 00010693  0x0000131f remainder  0x00000002 
+ 00010694  0x00001320 ior  0x00000002 , 0x0000003f 
+ 00010695  0x00001321 store  0x00000001 , 0x00000018 
+ 00010696  0x00001322 rtn 
+ 00010697  0x00001326 jam  0x00000006 , 0x00008042 
+ 00010698  0x00001327 hfetch  0x00000001 , 0x0000896b 
+ 00010699  0x00001328 set0  0x00000004 , 0x0000003f 
+ 00010700  0x00001329 set0  0x00000005 , 0x0000003f 
+ 00010701  0x0000132a hstore  0x00000001 , 0x0000896b 
+ 00010702  0x0000132b jam  0x00000000 , 0x00008905 
+ 00010703  0x0000132c jam  0x00000000 , 0x00008904 
+ 00010704  0x0000132d jam  0x00000070 , 0x00008904 
+ 00010705  0x0000132e jam  0x000000ff , 0x00008905 
+ 00010706  0x0000132f hfetch  0x00000001 , 0x0000896b 
+ 00010707  0x00001330 set1  0x00000004 , 0x0000003f 
+ 00010708  0x00001331 set1  0x00000005 , 0x0000003f 
+ 00010709  0x00001332 hstore  0x00000001 , 0x0000896b 
+ 00010710  0x00001333 call  0x000029e9 
+ 00010711  0x00001334 hfetch  0x00000001 , 0x00008968 
+ 00010712  0x00001335 set1  0x00000007 , 0x0000003f 
+ 00010713  0x00001336 hstore  0x00000001 , 0x00008968 
+ 00010714  0x00001337 set0  0x00000007 , 0x0000003f 
+ 00010715  0x00001338 hstore  0x00000001 , 0x00008968 
+ 00010716  0x00001339 set1  0x00000007 , 0x0000003f 
+ 00010717  0x0000133a hstore  0x00000001 , 0x00008968 
+ 00010718  0x0000133b jam  0x00000005 , 0x00008042 
+ 00010719  0x0000133c nop  0x00000001 
+ 00010720  0x0000133d jam  0x00000004 , 0x00008042 
+ 00010721  0x0000133e hfetch  0x00000001 , 0x0000896b 
+ 00010722  0x0000133f and_into  0x000000cf , 0x0000003f 
+ 00010723  0x00001340 hstore  0x00000001 , 0x0000896b 
+ 00010724  0x00001341 or_into  0x00000030 , 0x0000003f 
+ 00010725  0x00001342 hstore  0x00000001 , 0x0000896b 
+ 00010726  0x00001343 rtn 
+ 00010727  0x00001347 setarg  0x00000f0f 
+ 00010728  0x00001348 branch  0x00002c18 
+ 00010729  0x0000134b setarg  0x0000080f 
+ 00010730  0x0000134c branch  0x00002c18 
+ 00010731  0x00001351 bpatch  0x0000008f , 0x00004011 
+ 00010732  0x00001352 call  0x00002924 
+ 00010733  0x00001353 disable  0x00000020 
+ 00010734  0x00001354 enable  0x00000021 
+ 00010735  0x00001355 pulse  0x00000016 
+ 00010736  0x00001356 rtn 
+ 00010737  0x00001359 bpatch  0x00000090 , 0x00004012 
+ 00010738  0x0000135a fetch  0x00000001 , 0x0000004c 
+ 00010739  0x0000135b isolate1  0x00000002 , 0x0000003f 
+ 00010740  0x0000135c setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00010741  0x0000135d hstore  0x00000001 , 0x00008011 
+ 00010742  0x0000135e arg  0x00000062 , 0x00000006 
+ 00010743  0x0000135f ifetch  0x00000009 , 0x00000006 
+ 00010744  0x00001360 iforce  0x00000032 
+ 00010745  0x00001361 ifetch  0x00000007 , 0x00000006 
+ 00010746  0x00001362 iforce  0x00000033 
+ 00010747  0x00001363 fetch  0x00000001 , 0x00000054 
+ 00010748  0x00001364 add  0x0000003f , 0xffffffff , 0x00000034 
+ 00010749  0x00001365 pulse  0x0000001a 
+ 00010750  0x00001366 rtn 
+ 00010751  0x00001369 deposit  0x0000001a 
+ 00010752  0x0000136a store  0x00000006 , 0x0000009a 
+ 00010753  0x0000136b disable  0x0000000d 
+ 00010754  0x0000136c nbranch  0x000028f9 , 0x00000018 
+ 00010755  0x0000136d arg  0x000003bb , 0x00000029 
+ 00010756  0x0000136e increase  0x00000001 , 0x00000028 
+ 00010757  0x0000136f and_into  0x000001fc , 0x00000028 
+ 00010758  0x00001370 rtn 
+ 00010759  0x00001375 enable  0x0000000d 
+ 00010760  0x00001377 correlate  0x0000003e , 0x00000017 
+ 00010761  0x00001378 branch  0x000029ff , 0x00000018 
+ 00010762  0x00001379 compare  0x00000002 , 0x00000028 , 0x00000002 
+ 00010763  0x0000137a nbranch  0x00002a08 , 0x00000001 
+ 00010764  0x0000137b branch  0x000029ff 
+ 00010765  0x0000137e bpatch  0x00000091 , 0x00004012 
+ 00010766  0x0000137f arg  0x00000600 , 0x0000000b 
+ 00010767  0x00001380 enable  0x0000000d 
+ 00010768  0x00001381 correlate  0x00000023 , 0x00000026 
+ 00010769  0x00001382 disable  0x0000000d 
+ 00010770  0x00001383 nbranch  0x000028f9 , 0x00000018 
+ 00010771  0x00001384 rtn 
+ 00010772  0x00001387 bpatch  0x00000092 , 0x00004012 
+ 00010773  0x00001388 enable  0x0000000d 
+ 00010774  0x00001389 correlate  0x0000003e , 0x00000003 
+ 00010775  0x0000138a disable  0x0000000d 
+ 00010776  0x0000138b nbranch  0x000028f9 , 0x00000018 
+ 00010777  0x0000138c arg  0x000003bb , 0x00000029 
+ 00010778  0x0000138d and_into  0x000001fc , 0x00000028 
+ 00010779  0x0000138e rtn 
+ 00010780  0x00001392 bpatch  0x00000093 , 0x00004012 
+ 00010781  0x00001393 iforce  0x00000011 
+ 00010782  0x00001394 deposit  0x00000021 
+ 00010783  0x00001395 iadd  0x00000002 , 0x0000000b 
+ 00010784  0x00001396 copy  0x0000000b , 0x0000003f 
+ 00010785  0x00001397 store  0x00000004 , 0x000040ca 
+ 00010786  0x00001398 deposit  0x00000011 
+ 00010787  0x00001399 rtn 
+ 00010788  0x0000139d copy  0x0000003f , 0x00000002 
+ 00010789  0x0000139e bpatch  0x00000094 , 0x00004012 
+ 00010790  0x0000139f copy  0x00000002 , 0x0000003f 
+ 00010791  0x000013a0 call  0x00007f50 
+ 00010792  0x000013a1 lshift16  0x00000021 , 0x0000003f 
+ 00010793  0x000013a2 set1  0x0000002c , 0x0000003f 
+ 00010794  0x000013a3 call  0x00007f39 
+ 00010795  0x000013a4 set0  0x0000002c , 0x0000003f 
+ 00010796  0x000013a5 call  0x00002a77 
+ 00010797  0x000013a6 call  0x00007f39 
+ 00010798  0x000013a7 rtn  0x00000028 
+ 00010799  0x000013a8 call  0x00007f43 
+ 00010800  0x000013a9 iforce  0x0000001b 
+ 00010801  0x000013aa until  0x0000003e , 0x00000003 
+ 00010802  0x000013ab rtn 
+ 00010803  0x000013af bpatch  0x00000095 , 0x00004012 
+ 00010804  0x000013b0 branch  0x00002a38 , 0x00000030 
+ 00010805  0x000013b1 until  0x00000029 , 0x00000026 
+ 00010806  0x000013b3 copy  0x00000028 , 0x00000002 
+ 00010807  0x000013b4 branch  0x00002a3b 
+ 00010808  0x000013b6 branch  0x00002a3a , 0x0000002e 
+ 00010809  0x000013b7 until  0x00000023 , 0x00000026 
+ 00010810  0x000013b9 copy  0x00000022 , 0x00000002 
+ 00010811  0x000013bb branch  0x00002a47 , 0x00000028 
+ 00010812  0x000013bc compare  0x00000001 , 0x00000002 , 0x00000003 
+ 00010813  0x000013bd nbranch  0x00002a33 , 0x00000001 
+ 00010814  0x000013bf bpatch  0x00000096 , 0x00004012 
+ 00010815  0x000013c0 fetch  0x00000001 , 0x00000030 
+ 00010816  0x000013c1 rtnbit0  0x00000000 
+ 00010817  0x000013c2 fetch  0x00000004 , 0x000040ca 
+ 00010818  0x000013c3 isub  0x00000002 , 0x0000003f 
+ 00010819  0x000013c4 nrtn  0x00000002 
+ 00010820  0x000013c5 sub  0x0000003f , 0x000000ff , 0x0000003e 
+ 00010821  0x000013c6 branch  0x00002a33 , 0x00000002 
+ 00010822  0x000013c7 rtn 
+ 00010823  0x000013c9 compare  0x00000003 , 0x00000002 , 0x00000003 
+ 00010824  0x000013ca nbranch  0x00002a33 , 0x00000001 
+ 00010825  0x000013cb branch  0x00002a3e 
+ 00010826  0x000013ce bpatch  0x00000097 , 0x00004012 
+ 00010827  0x000013cf arg  0x00000600 , 0x0000000b 
+ 00010828  0x000013d0 branch  0x00002a33 
+ 00010829  0x000013d3 disable  0x00000028 
+ 00010830  0x000013d4 branch  0x00002a4a 
+ 00010831  0x000013d7 enable  0x00000028 
+ 00010832  0x000013d8 branch  0x00002a4a 
+ 00010833  0x000013db bpatch  0x00000098 , 0x00004013 
+ 00010834  0x000013dc call  0x000029f1 
+ 00010835  0x000013dd disable  0x00000021 
+ 00010836  0x000013de enable  0x00000020 
+ 00010837  0x000013df rtn 
+ 00010838  0x000013e4 bpatch  0x00000099 , 0x00004013 
+ 00010839  0x000013e5 arg  0x00000e43 , 0x0000000b 
+ 00010840  0x000013e6 until  0x00000023 , 0x00000026 
+ 00010841  0x000013e7 pulse  0x00000016 
+ 00010842  0x000013e8 rtn 
+ 00010843  0x000013eb bpatch  0x0000009a , 0x00004013 
+ 00010844  0x000013ec arg  0x00000d00 , 0x0000000b 
+ 00010845  0x000013ed until  0x00000023 , 0x00000026 
+ 00010846  0x000013ee rtn 
+ 00010847  0x000013f2 bpatch  0x0000009b , 0x00004013 
+ 00010848  0x000013f3 arg  0x00000e43 , 0x0000000b 
+ 00010849  0x000013f4 until  0x00000029 , 0x00000026 
+ 00010850  0x000013f5 pulse  0x00000016 
+ 00010851  0x000013f6 rtn 
+ 00010852  0x000013f9 bpatch  0x0000009c , 0x00004013 
+ 00010853  0x000013fa preload  0x00000009 
+ 00010854  0x000013fb enable  0x0000001d 
+ 00010855  0x000013fc set1  0x00000000 , 0x00000015 
+ 00010856  0x000013fd inject  0x00000003 , 0x00000048 
+ 00010857  0x000013fe disable  0x0000001d 
+ 00010858  0x000013ff rtn 
+ 00010859  0x00001403 copy  0x00000025 , 0x00000002 
+ 00010860  0x00001404 or_into  0x00000060 , 0x00000002 
+ 00010861  0x00001405 copy  0x00000002 , 0x0000000e 
+ 00010862  0x00001406 rtn 
+ 00010863  0x0000140c bpatch  0x0000009d , 0x00004013 
+ 00010864  0x0000140d fetch  0x00000001 , 0x00004090 
+ 00010865  0x0000140e increase  0x00000001 , 0x0000003f 
+ 00010866  0x0000140f bne  0x00000007 , 0x00002a74 
+ 00010867  0x00001410 force  0x00000001 , 0x0000003f 
+ 00010868  0x00001412 store  0x00000001 , 0x00004090 
+ 00010869  0x00001413 iforce  0x00000004 
+ 00010870  0x00001414 rtn 
+ 00010871  0x00001417 copy  0x00000019 , 0x00000002 
+ 00010872  0x00001418 rtn  0x00000029 
+ 00010873  0x00001419 copy  0x0000001a , 0x00000002 
+ 00010874  0x0000141a rtn 
+ 00010875  0x0000141d deposit  0x00000022 
+ 00010876  0x0000141e rtn  0x00000029 
+ 00010877  0x0000141f deposit  0x00000028 
+ 00010878  0x00001420 rtn 
+ 00010879  0x00001424 bpatch  0x0000009e , 0x00004013 
+ 00010880  0x00001425 fetcht  0x00000004 , 0x0000004d 
+ 00010881  0x00001426 call  0x00002a7b 
+ 00010882  0x00001427 isub  0x00000002 , 0x0000000b 
+ 00010883  0x00001428 deposit  0x0000000b 
+ 00010884  0x00001429 fetcht  0x00000002 , 0x00000051 
+ 00010885  0x0000142a lshift  0x00000002 , 0x00000002 
+ 00010886  0x0000142b isub  0x00000002 , 0x0000003f 
+ 00010887  0x0000142c rtn 
+ 00010888  0x0000142f bpatch  0x0000009f , 0x00004013 
+ 00010889  0x00001430 call  0x00002a7b 
+ 00010890  0x00001431 store  0x00000004 , 0x0000004d 
+ 00010891  0x00001432 rtn 
+ 00010892  0x00001435 bpatch  0x000000a0 , 0x00004014 
+ 00010893  0x00001436 branch  0x00002a8c 
+ 00010894  0x00001439 branch  0x00002a8e 
+ 00010895  0x0000143c rtn  0x00000034 
+ 00010896  0x0000143e rshift  0x0000003f , 0x0000003f 
+ 00010897  0x0000143f increase  0xfffffffd , 0x0000003f 
+ 00010898  0x00001441 increase  0xffffffff , 0x0000003f 
+ 00010899  0x00001442 nbranch  0x00002a92 , 0x00000005 
+ 00010900  0x00001443 force  0x00000000 , 0x0000003f 
+ 00010901  0x00001444 rtn 
+ 00010902  0x0000144a arg  0x00000010 , 0x00000039 
+ 00010903  0x0000144b arg  0x00000000 , 0x00000005 
+ 00010904  0x0000144c call  0x00007ec6 
+ 00010905  0x0000144d arg  0x0000043f , 0x00000005 
+ 00010906  0x0000144e arg  0x0000000a , 0x00000039 
+ 00010907  0x0000144f call  0x00007ec6 
+ 00010908  0x00001450 jam  0x00000000 , 0x000009b2 
+ 00010909  0x00001451 jam  0x00000000 , 0x00000a99 
+ 00010910  0x00001452 jam  0x00000000 , 0x0000048c 
+ 00010911  0x00001453 jam  0x00000000 , 0x0000017f 
+ 00010912  0x00001454 jam  0x00000000 , 0x000004d1 
+ 00010913  0x00001455 bpatch  0x000000a1 , 0x00004014 
+ 00010914  0x00001456 jam  0x00000000 , 0x0000016d 
+ 00010915  0x00001457 jam  0x00000000 , 0x00000151 
+ 00010916  0x00001458 jam  0x00000000 , 0x0000015c 
+ 00010917  0x00001459 setarg  0x009e8b33 
+ 00010918  0x0000145a store  0x00000003 , 0x000040a7 
+ 00010919  0x0000145b setarg  0x00000153 
+ 00010920  0x0000145c store  0x00000002 , 0x00000083 
+ 00010921  0x0000145d jam  0x0000001e , 0x00000085 
+ 00010922  0x0000145e jam  0x00000001 , 0x00000086 
+ 00010923  0x0000145f jam  0x00000007 , 0x00000088 
+ 00010924  0x00001460 setarg  0x0012e904 
+ 00010925  0x00001461 store  0x00000003 , 0x00000080 
+ 00010926  0x00001466 jam  0x00000060 , 0x00000090 
+ 00010927  0x00001467 jam  0x00000005 , 0x000040d0 
+ 00010928  0x00001468 jam  0x00000002 , 0x00000014 
+ 00010929  0x00001469 fetch  0x00000001 , 0x0000465a 
+ 00010930  0x0000146a ncall  0x000074c1 , 0x00000034 
+ 00010931  0x0000146b fetch  0x00000001 , 0x000044be 
+ 00010932  0x0000146c ncall  0x00007518 , 0x00000034 
+ 00010933  0x0000146d bpatch  0x000000a2 , 0x00004014 
+ 00010934  0x0000146e rtn  0x0000002b 
+ 00010935  0x0000146f setarg  0x00000000 
+ 00010936  0x00001470 store  0x00000002 , 0x000041dc 
+ 00010937  0x00001471 rshift  0x00000022 , 0x0000003f 
+ 00010938  0x00001472 store  0x00000004 , 0x00004094 
+ 00010939  0x00001473 rtn 
+ 00010940  0x0000147b setarg  0x0000ee21 
+ 00010941  0x0000147c hstore  0x00000002 , 0x00008050 
+ 00010942  0x0000147d hfetch  0x00000004 , 0x0000811c 
+ 00010943  0x0000147e store  0x00000004 , 0x00000abe 
+ 00010944  0x0000147f hfetch  0x00000001 , 0x0000813e 
+ 00010945  0x00001480 store  0x00000001 , 0x00000abd 
+ 00010946  0x00001481 bbit0  0x00000003 , 0x0000645b 
+ 00010947  0x00001482 enable  0x0000002b 
+ 00010948  0x00001483 bbit0  0x00000007 , 0x00002acc 
+ 00010949  0x00001484 disable  0x0000002b 
+ 00010950  0x00001485 deposit  0x00000027 
+ 00010951  0x00001486 nbranch  0x00002acc , 0x00000034 
+ 00010952  0x00001487 hfetch  0x00000001 , 0x0000813b 
+ 00010953  0x00001488 bbit1  0x00000002 , 0x00002acc 
+ 00010954  0x00001489 arg  0xffffffff , 0x00000002 
+ 00010955  0x0000148a branch  0x00002b3c 
+ 00010956  0x0000148c hfetch  0x00000003 , 0x0000813c 
+ 00010957  0x0000148d hstore  0x00000003 , 0x0000804c 
+ 00010958  0x0000148e ifetch  0x00000001 , 0x00000006 
+ 00010959  0x0000148f or_into  0x000000ef , 0x0000003f 
+ 00010960  0x00001490 istore  0x00000001 , 0x00000005 
+ 00010961  0x00001491 call  0x00002c23 
+ 00010962  0x00001492 hfetch  0x00000001 , 0x0000804f 
+ 00010963  0x00001493 set1  0x00000004 , 0x0000003f 
+ 00010964  0x00001494 hstore  0x00000001 , 0x0000804f 
+ 00010965  0x00001495 call  0x00002c23 
+ 00010966  0x00001496 call  0x00002adf , 0x0000002b 
+ 00010967  0x00001497 hfetch  0x00000001 , 0x0000804e 
+ 00010968  0x00001498 set0  0x00000003 , 0x0000003f 
+ 00010969  0x00001499 hstore  0x00000001 , 0x0000804e 
+ 00010970  0x0000149a call  0x00002c23 
+ 00010971  0x0000149b nbranch  0x0000645b , 0x0000002b 
+ 00010972  0x0000149c rtnmark0  0x0000002b 
+ 00010973  0x0000149d jam  0x00000008 , 0x00008006 
+ 00010974  0x0000149e rtn 
+ 00010975  0x000014a1 fetch  0x00000001 , 0x00004198 
+ 00010976  0x000014a2 hstore  0x00000001 , 0x00008086 
+ 00010977  0x000014a3 fetch  0x00000003 , 0x0000418d 
+ 00010978  0x000014a4 hstore  0x00000003 , 0x00008080 
+ 00010979  0x000014a5 fetch  0x00000004 , 0x00004181 
+ 00010980  0x000014a6 hstore  0x00000004 , 0x00008074 
+ 00010981  0x000014a7 fetch  0x00000004 , 0x0000417d 
+ 00010982  0x000014a8 hstore  0x00000004 , 0x00008070 
+ 00010983  0x000014a9 fetch  0x00000008 , 0x00004185 
+ 00010984  0x000014aa hstore  0x00000008 , 0x00008078 
+ 00010985  0x000014ab fetch  0x00000008 , 0x00004190 
+ 00010986  0x000014ac iforce  0x00000000 
+ 00010987  0x000014ad hfetch  0x00000008 , 0x00008140 
+ 00010988  0x000014ae store  0x00000008 , 0x000000a1 
+ 00010989  0x000014af call  0x000064ca 
+ 00010990  0x000014b0 rtn 
+ 00010991  0x000014b3 deposit  0x00000000 
+ 00010992  0x000014b4 store  0x00000008 , 0x00004190 
+ 00010993  0x000014b5 hfetch  0x00000008 , 0x00008070 
+ 00010994  0x000014b6 store  0x00000008 , 0x0000417d 
+ 00010995  0x000014b7 ifetch  0x00000008 , 0x00000006 
+ 00010996  0x000014b8 istore  0x00000008 , 0x00000005 
+ 00010997  0x000014b9 hfetch  0x00000003 , 0x00008080 
+ 00010998  0x000014ba store  0x00000003 , 0x0000418d 
+ 00010999  0x000014bb hfetch  0x00000001 , 0x00008086 
+ 00011000  0x000014bc store  0x00000001 , 0x00004198 
+ 00011001  0x000014bd branch  0x00002c29 
+ 00011002  0x000014c0 hfetch  0x00000001 , 0x00008063 
+ 00011003  0x000014c1 nbranch  0x00002b00 , 0x00000034 
+ 00011004  0x000014c2 fetch  0x00000003 , 0x0000416f 
+ 00011005  0x000014c3 nrtn  0x00000034 
+ 00011006  0x000014c4 jam  0x000000c0 , 0x00008063 
+ 00011007  0x000014c5 jam  0x00000080 , 0x00008006 
+ 00011008  0x000014c7 hfetch  0x00000001 , 0x0000812d 
+ 00011009  0x000014c8 rtnbit0  0x00000001 
+ 00011010  0x000014c9 hfetch  0x00000003 , 0x00008149 
+ 00011011  0x000014ca store  0x00000003 , 0x0000416f 
+ 00011012  0x000014cb rtn 
+ 00011013  0x000014d0 bpatch  0x000000a3 , 0x00004014 
+ 00011014  0x000014d1 deposit  0x0000001a 
+ 00011015  0x000014d2 call  0x00007f37 
+ 00011016  0x000014d3 fetcht  0x00000004 , 0x0000415f 
+ 00011017  0x000014d4 sub  0x00000002 , 0x000000ff , 0x0000003e 
+ 00011018  0x000014d5 rtn  0x00000002 
+ 00011019  0x000014d6 lshift8  0x0000003f , 0x0000003f 
+ 00011020  0x000014d7 lshift4  0x0000003f , 0x0000003f 
+ 00011021  0x000014d8 idiv  0x00000002 
+ 00011022  0x000014d9 call  0x00007f86 
+ 00011023  0x000014da quotient  0x0000003f 
+ 00011024  0x000014db arg  0x000000c8 , 0x00000002 
+ 00011025  0x000014dc call  0x00007f91 
+ 00011026  0x000014dd store  0x00000001 , 0x00000099 
+ 00011027  0x000014de nbranch  0x00002b15 , 0x00000028 
+ 00011028  0x000014df sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00011029  0x000014e1 fetcht  0x00000003 , 0x0000416f 
+ 00011030  0x000014e2 iadd  0x00000002 , 0x0000003f 
+ 00011031  0x000014e3 store  0x00000003 , 0x0000416f 
+ 00011032  0x000014e5 setarg  0x00000000 
+ 00011033  0x000014e6 store  0x00000004 , 0x0000415f 
+ 00011034  0x000014e7 rtn 
+ 00011035  0x000014ec fetch  0x00000001 , 0x00004177 
+ 00011036  0x000014ed set1  0x00000002 , 0x0000003f 
+ 00011037  0x000014ee store  0x00000001 , 0x00004177 
+ 00011038  0x000014ef branch  0x00002b23 
+ 00011039  0x000014f4 arg  0xffffffff , 0x00000002 
+ 00011040  0x000014f5 fetch  0x00000001 , 0x00004176 
+ 00011041  0x000014f6 set0  0x00000007 , 0x0000003f 
+ 00011042  0x000014f7 store  0x00000001 , 0x00004176 
+ 00011043  0x000014f9 bpatch  0x000000a4 , 0x00004014 
+ 00011044  0x000014fa call  0x00002c29 
+ 00011045  0x000014fb fetch  0x00000001 , 0x00004157 
+ 00011046  0x000014fc store  0x00000001 , 0x0000417c 
+ 00011047  0x000014fd fetch  0x00000001 , 0x0000417a 
+ 00011048  0x000014fe set1  0x00000007 , 0x0000003f 
+ 00011049  0x000014ff store  0x00000001 , 0x0000417a 
+ 00011050  0x00001503 bpatch  0x000000a5 , 0x00004014 
+ 00011051  0x00001504 call  0x000029e7 
+ 00011052  0x00001505 fetch  0x00000004 , 0x0000415f 
+ 00011053  0x00001506 iadd  0x00000002 , 0x0000003f 
+ 00011054  0x00001507 store  0x00000004 , 0x0000415f 
+ 00011055  0x00001508 call  0x00002aef 
+ 00011056  0x00001509 fetch  0x00000005 , 0x00004178 
+ 00011057  0x0000150a hstore  0x00000004 , 0x0000804c 
+ 00011058  0x0000150b rshift32  0x0000003f , 0x00000011 
+ 00011059  0x0000150c until  0x0000003e , 0x00000033 
+ 00011060  0x0000150d deposit  0x00000019 
+ 00011061  0x0000150e store  0x00000006 , 0x00004163 
+ 00011062  0x0000150f jam  0x00000002 , 0x00008005 
+ 00011063  0x00001510 until  0x0000003e , 0x00000033 
+ 00011064  0x00001511 until  0x0000003e , 0x00000033 
+ 00011065  0x00001512 deposit  0x00000011 
+ 00011066  0x00001513 hstore  0x00000001 , 0x0000804f 
+ 00011067  0x00001514 jam  0x00000002 , 0x00008005 
+ 00011068  0x00001516 until  0x0000003e , 0x00000033 
+ 00011069  0x00001517 until  0x0000003e , 0x00000033 
+ 00011070  0x00001518 hstoret  0x00000004 , 0x0000804c 
+ 00011071  0x00001519 jam  0x00000010 , 0x00008005 
+ 00011072  0x0000151a until  0x0000003e , 0x0000003f 
+ 00011073  0x00001520 bpatch  0x000000a6 , 0x00004014 
+ 00011074  0x00001521 setarg  0x00000000 
+ 00011075  0x00001522 copy  0x00000027 , 0x0000003e 
+ 00011076  0x00001523 branch  0x00002b4c , 0x00000005 
+ 00011077  0x00001524 hfetch  0x00000001 , 0x0000813c 
+ 00011078  0x00001525 hfetcht  0x00000001 , 0x0000813d 
+ 00011079  0x00001526 isub  0x00000002 , 0x0000003e 
+ 00011080  0x00001527 branch  0x00002b4a , 0x00000002 
+ 00011081  0x00001528 deposit  0x00000002 
+ 00011082  0x0000152a isub  0x00000027 , 0x0000003f 
+ 00011083  0x0000152b increase  0x00000001 , 0x0000003f 
+ 00011084  0x0000152d increase  0x00000008 , 0x0000003f 
+ 00011085  0x0000152e until  0x0000003e , 0x00000033 
+ 00011086  0x0000152f iadd  0x00000031 , 0x0000003f 
+ 00011087  0x00001530 fetcht  0x00000004 , 0x0000415b 
+ 00011088  0x00001531 iadd  0x00000002 , 0x0000003f 
+ 00011089  0x00001532 fetcht  0x00000003 , 0x0000416f 
+ 00011090  0x00001533 imul32  0x00000002 , 0x0000003f 
+ 00011091  0x00001534 rshift8  0x0000003f , 0x0000003f 
+ 00011092  0x00001535 rshift4  0x0000003f , 0x0000003f 
+ 00011093  0x00001536 increase  0x0000006e , 0x0000003f 
+ 00011094  0x00001537 arg  0x00000ea6 , 0x00000002 
+ 00011095  0x00001538 idiv  0x00000002 
+ 00011096  0x00001539 call  0x00007f86 
+ 00011097  0x0000153a quotient  0x0000003f 
+ 00011098  0x0000153b lshift16  0x0000003f , 0x0000003f 
+ 00011099  0x0000153c remainder  0x00000002 
+ 00011100  0x0000153d ior  0x00000002 , 0x0000003f 
+ 00011101  0x0000153e fetcht  0x00000006 , 0x00004163 
+ 00011102  0x0000153f call  0x00007f2c 
+ 00011103  0x00001540 copy  0x00000002 , 0x00000019 
+ 00011104  0x00001541 fetch  0x00000006 , 0x00004048 
+ 00011105  0x00001542 call  0x00002854 
+ 00011106  0x00001543 deposit  0x0000001a 
+ 00011107  0x00001544 store  0x00000006 , 0x00000a9a 
+ 00011108  0x00001545 deposit  0x00000027 
+ 00011109  0x00001546 istore  0x00000001 , 0x00000005 
+ 00011110  0x00001547 hfetch  0x00000001 , 0x0000811d 
+ 00011111  0x00001548 or_into  0x000000f0 , 0x0000003f 
+ 00011112  0x00001549 istore  0x00000001 , 0x00000005 
+ 00011113  0x0000154a rtn 
+ 00011114  0x0000154d bpatch  0x000000a7 , 0x00004014 
+ 00011115  0x0000154e call  0x00002afa 
+ 00011116  0x0000154f fetch  0x00000003 , 0x0000416f 
+ 00011117  0x00001550 rtn  0x00000034 
+ 00011118  0x00001551 fetch  0x00000001 , 0x00004091 
+ 00011119  0x00001552 rtn  0x00000034 
+ 00011120  0x00001553 fetch  0x00000001 , 0x0000465a 
+ 00011121  0x00001554 branch  0x00002b74 , 0x00000034 
+ 00011122  0x00001555 fetch  0x00000001 , 0x000045b1 
+ 00011123  0x00001556 rtn  0x00000034 
+ 00011124  0x00001558 fetch  0x00000001 , 0x000044c0 
+ 00011125  0x00001559 nrtn  0x00000034 
+ 00011126  0x0000155a call  0x00002c3a 
+ 00011127  0x0000155b nrtn  0x00000034 
+ 00011128  0x0000155c fetch  0x00000001 , 0x00004040 
+ 00011129  0x0000155d compare  0x00000003 , 0x0000003f , 0x00000007 
+ 00011130  0x0000155e nbranch  0x00002b9d , 0x00000001 
+ 00011131  0x0000155f fetch  0x00000002 , 0x00004042 
+ 00011132  0x00001560 rtn  0x00000034 
+ 00011133  0x00001561 rtn  0x0000002b 
+ 00011134  0x00001562 bpatch  0x000000a8 , 0x00004015 
+ 00011135  0x00001564 fetcht  0x00000001 , 0x000000a0 
+ 00011136  0x00001565 fetch  0x00000002 , 0x00004042 
+ 00011137  0x00001566 imul32  0x00000002 , 0x0000003f 
+ 00011138  0x00001567 rshift4  0x00000002 , 0x00000002 
+ 00011139  0x00001568 rshift2  0x00000002 , 0x00000002 
+ 00011140  0x00001569 isub  0x00000002 , 0x0000003f 
+ 00011141  0x0000156a fetcht  0x00000004 , 0x00004044 
+ 00011142  0x0000156b iadd  0x00000002 , 0x0000003f 
+ 00011143  0x0000156c fetcht  0x00000001 , 0x00004156 
+ 00011144  0x0000156d isub  0x00000002 , 0x0000003f 
+ 00011145  0x0000156e lshift16  0x0000003f , 0x00000030 
+ 00011146  0x0000156f bpatch  0x000000a9 , 0x00004015 
+ 00011147  0x00001570 fetch  0x00000002 , 0x0000404e 
+ 00011148  0x00001571 rshift  0x0000003f , 0x0000003f 
+ 00011149  0x00001572 call  0x00007f50 
+ 00011150  0x00001573 deposit  0x00000030 
+ 00011151  0x00001574 call  0x00007f39 
+ 00011152  0x00001575 copy  0x0000001a , 0x00000002 
+ 00011153  0x00001576 call  0x00007f37 
+ 00011154  0x00001577 rtn  0x00000028 
+ 00011155  0x00001579 call  0x00007f49 
+ 00011156  0x0000157b bpatch  0x000000aa , 0x00004015 
+ 00011157  0x0000157c fetch  0x00000001 , 0x00004178 
+ 00011158  0x0000157d isub  0x00000002 , 0x0000003e 
+ 00011159  0x0000157e branch  0x00002b18 , 0x00000002 
+ 00011160  0x0000157f storet  0x00000004 , 0x0000415b 
+ 00011161  0x00001580 call  0x00003328 
+ 00011162  0x00001581 call  0x000052fb 
+ 00011163  0x00001582 fetcht  0x00000004 , 0x0000415b 
+ 00011164  0x00001583 branch  0x00002b2a 
+ 00011165  0x00001586 bpatch  0x000000ab , 0x00004015 
+ 00011166  0x00001587 fetch  0x00000001 , 0x00004040 
+ 00011167  0x00001588 rtnbit1  0x00000000 
+ 00011168  0x00001589 rtnbit1  0x00000003 
+ 00011169  0x0000158a fetch  0x00000001 , 0x0000465a 
+ 00011170  0x0000158b branch  0x00002ba5 , 0x00000034 
+ 00011171  0x0000158c fetch  0x00000001 , 0x000045b1 
+ 00011172  0x0000158d rtn  0x00000034 
+ 00011173  0x0000158f bpatch  0x000000ac , 0x00004015 
+ 00011174  0x00001590 fetch  0x00000001 , 0x0000436e 
+ 00011175  0x00001591 nbranch  0x00002baa , 0x00000034 
+ 00011176  0x00001592 fetch  0x00000001 , 0x00004093 
+ 00011177  0x00001593 rtn  0x00000034 
+ 00011178  0x00001595 fetch  0x00000002 , 0x00004154 
+ 00011179  0x00001596 rtn  0x00000034 
+ 00011180  0x00001598 fetcht  0x00000001 , 0x00004156 
+ 00011181  0x00001599 isub  0x00000002 , 0x0000003f 
+ 00011182  0x0000159a arg  0x00001d4c , 0x00000002 
+ 00011183  0x0000159b imul32  0x00000002 , 0x0000003f 
+ 00011184  0x0000159c branch  0x00002b93 
+ 00011185  0x0000159f bpatch  0x000000ad , 0x00004015 
+ 00011186  0x000015a0 disable  0x0000002b 
+ 00011187  0x000015a1 fetch  0x00000001 , 0x00000030 
+ 00011188  0x000015a2 rtnbit0  0x00000001 
+ 00011189  0x000015a3 nbranch  0x00002bd0 , 0x0000002d 
+ 00011190  0x000015a4 call  0x00002bcb 
+ 00011191  0x000015a5 fetch  0x00000002 , 0x000040c1 
+ 00011192  0x000015a6 store  0x00000002 , 0x0000003e 
+ 00011193  0x000015a7 fetch  0x00000001 , 0x00000047 
+ 00011194  0x000015a8 bbit1  0x00000003 , 0x00002bde 
+ 00011195  0x000015a9 bmark0  0x0000000d , 0x00002bde 
+ 00011196  0x000015aa call  0x00005274 
+ 00011197  0x000015ab nbranch  0x00002bde , 0x00000034 
+ 00011198  0x000015ac fetch  0x00000001 , 0x0000455c 
+ 00011199  0x000015ad bbit1  0x00000001 , 0x00002bde 
+ 00011200  0x000015af jam  0x00000000 , 0x000000a0 
+ 00011201  0x000015b0 bmark0  0x0000000d , 0x00002bde 
+ 00011202  0x000015b1 fetch  0x00000001 , 0x00004174 
+ 00011203  0x000015b2 branch  0x00002be2 , 0x00000034 
+ 00011204  0x000015b3 increase  0xffffffff , 0x0000003f 
+ 00011205  0x000015b4 store  0x00000001 , 0x00004174 
+ 00011206  0x000015b5 rtn 
+ 00011207  0x000015b9 arg  0x00000001 , 0x00000007 
+ 00011208  0x000015ba branch  0x000060cd 
+ 00011209  0x000015bd arg  0x00000001 , 0x00000007 
+ 00011210  0x000015be branch  0x000060d1 
+ 00011211  0x000015c3 jam  0x00000000 , 0x00004159 
+ 00011212  0x000015c4 fetch  0x00000003 , 0x00004169 
+ 00011213  0x000015c5 increase  0x00000001 , 0x0000003f 
+ 00011214  0x000015c6 store  0x00000003 , 0x00004169 
+ 00011215  0x000015c7 rtn 
+ 00011216  0x000015ca bpatch  0x000000ae , 0x00004015 
+ 00011217  0x000015cb fetcht  0x00000002 , 0x000040c1 
+ 00011218  0x000015cc rshift  0x00000002 , 0x00000002 
+ 00011219  0x000015cd fetch  0x00000002 , 0x0000003e 
+ 00011220  0x000015ce iadd  0x00000002 , 0x0000003f 
+ 00011221  0x000015cf store  0x00000002 , 0x0000003e 
+ 00011222  0x000015d1 jam  0x00000000 , 0x000000a0 
+ 00011223  0x000015d2 fetch  0x00000003 , 0x0000416c 
+ 00011224  0x000015d3 increase  0x00000001 , 0x0000003f 
+ 00011225  0x000015d4 store  0x00000003 , 0x0000416c 
+ 00011226  0x000015d5 fetch  0x00000001 , 0x00004159 
+ 00011227  0x000015d6 increase  0x00000001 , 0x0000003f 
+ 00011228  0x000015d7 store  0x00000001 , 0x00004159 
+ 00011229  0x000015d8 rtn 
+ 00011230  0x000015db jam  0x00000000 , 0x000000a0 
+ 00011231  0x000015dc fetch  0x00000001 , 0x00004173 
+ 00011232  0x000015dd store  0x00000001 , 0x00004174 
+ 00011233  0x000015de rtn 
+ 00011234  0x000015e1 fetcht  0x00000001 , 0x00004172 
+ 00011235  0x000015e2 storet  0x00000001 , 0x000000a0 
+ 00011236  0x000015e3 rtn 
+ 00011237  0x000015e6 bpatch  0x000000af , 0x00004015 
+ 00011238  0x000015e7 fetch  0x00000001 , 0x00004178 
+ 00011239  0x000015e8 nrtn  0x00000034 
+ 00011240  0x000015e9 jam  0x00000006 , 0x00008042 
+ 00011241  0x000015ea setarg  0x00000f0c 
+ 00011242  0x000015eb call  0x00002c18 
+ 00011243  0x000015ec setarg  0x00030d40 
+ 00011244  0x000015ed call  0x00002a8f 
+ 00011245  0x000015ee until  0x0000003e , 0x00000033 
+ 00011246  0x000015ef copy  0x00000031 , 0x00000030 
+ 00011247  0x000015f0 call  0x000029e7 
+ 00011248  0x000015f1 jam  0x00000004 , 0x00008042 
+ 00011249  0x000015f2 nop  0x0000000a 
+ 00011250  0x000015f3 until  0x0000003e , 0x00000033 
+ 00011251  0x000015f4 deposit  0x00000031 
+ 00011252  0x000015f5 isub  0x00000030 , 0x0000003f 
+ 00011253  0x000015f6 increase  0x00000030 , 0x0000003f 
+ 00011254  0x000015f7 arg  0x000000ff , 0x00000002 
+ 00011255  0x000015f8 call  0x00007f91 
+ 00011256  0x000015f9 store  0x00000001 , 0x00004178 
+ 00011257  0x000015fa nop  0x00007530 
+ 00011258  0x000015fb nop  0x00007530 
+ 00011259  0x000015fc nop  0x00007530 
+ 00011260  0x000015fd rtn 
+ 00011261  0x00001600 fetch  0x00000001 , 0x00004178 
+ 00011262  0x00001601 nrtn  0x00000034 
+ 00011263  0x00001602 jam  0x000000ff , 0x00008044 
+ 00011264  0x00001603 jam  0x00000006 , 0x00008042 
+ 00011265  0x00001604 call  0x000029e7 
+ 00011266  0x00001605 setarg  0x000003e8 
+ 00011267  0x00001606 iadd  0x00000031 , 0x00000030 
+ 00011268  0x00001607 snooze 
+ 00011269  0x00001608 deposit  0x00000031 
+ 00011270  0x00001609 nop  0x00002ee0 
+ 00011271  0x0000160a nop  0x00002ee0 
+ 00011272  0x0000160b nop  0x00002ee0 
+ 00011273  0x0000160c nop  0x00002ee0 
+ 00011274  0x0000160d nop  0x00002ee0 
+ 00011275  0x0000160e nop  0x00002ee0 
+ 00011276  0x0000160f nop  0x00002ee0 
+ 00011277  0x00001610 nop  0x00002ee0 
+ 00011278  0x00001611 nop  0x00002ee0 
+ 00011279  0x00001612 isub  0x00000030 , 0x0000003f 
+ 00011280  0x00001613 add  0x0000003f , 0x00000030 , 0x0000003f 
+ 00011281  0x00001614 arg  0x000000ff , 0x00000002 
+ 00011282  0x00001615 call  0x00007f91 
+ 00011283  0x00001616 store  0x00000001 , 0x00004178 
+ 00011284  0x00001617 nop  0x00007530 
+ 00011285  0x00001618 nop  0x00007530 
+ 00011286  0x00001619 nop  0x00007530 
+ 00011287  0x0000161a rtn 
+ 00011288  0x00001620 arg  0x00000fff , 0x00000005 
+ 00011289  0x00001621 iand  0x00000005 , 0x00000005 
+ 00011290  0x00001622 fetch  0x00000001 , 0x00004175 
+ 00011291  0x00001623 and_into  0x000000f0 , 0x0000003f 
+ 00011292  0x00001624 lshift8  0x0000003f , 0x0000003f 
+ 00011293  0x00001625 ior  0x00000005 , 0x0000003f 
+ 00011294  0x00001626 hstore  0x00000002 , 0x0000804c 
+ 00011295  0x00001627 ifetch  0x00000002 , 0x00000006 
+ 00011296  0x00001628 istore  0x00000002 , 0x00000005 
+ 00011297  0x0000162b setarg  0x00000001 
+ 00011298  0x0000162c branch  0x00002c24 
+ 00011299  0x0000162f setarg  0x00000002 
+ 00011300  0x00001631 until  0x0000003e , 0x00000033 
+ 00011301  0x00001632 hstore  0x00000001 , 0x00008005 
+ 00011302  0x00001633 until  0x0000003e , 0x00000033 
+ 00011303  0x00001634 until  0x0000003e , 0x00000033 
+ 00011304  0x00001635 rtn 
+ 00011305  0x00001639 bpatch  0x000000b0 , 0x00004016 
+ 00011306  0x0000163a fetch  0x00000004 , 0x000000a1 
+ 00011307  0x0000163b hstore  0x00000004 , 0x0000804c 
+ 00011308  0x0000163c setarg  0x00000004 
+ 00011309  0x0000163d call  0x00002c24 
+ 00011310  0x0000163e fetch  0x00000004 , 0x000000a5 
+ 00011311  0x0000163f hstore  0x00000004 , 0x0000804c 
+ 00011312  0x00001640 setarg  0x00000008 
+ 00011313  0x00001641 branch  0x00002c24 
+ 00011314  0x00001644 fetch  0x00000002 , 0x00004152 
+ 00011315  0x00001645 qset1  0x0000003f 
+ 00011316  0x00001646 store  0x00000002 , 0x00004152 
+ 00011317  0x00001647 rtn 
+ 00011318  0x0000164a fetch  0x00000002 , 0x00004152 
+ 00011319  0x0000164b qset0  0x0000003f 
+ 00011320  0x0000164c store  0x00000002 , 0x00004152 
+ 00011321  0x0000164d rtn 
+ 00011322  0x00001652 bpatch  0x000000b1 , 0x00004016 
+ 00011323  0x00001653 call  0x00003326 
+ 00011324  0x00001654 fetch  0x00000002 , 0x00004152 
+ 00011325  0x00001655 copy  0x0000003f , 0x00000011 
+ 00011326  0x00001656 fetch  0x00000001 , 0x0000004c 
+ 00011327  0x00001657 isolate1  0x00000006 , 0x0000003f 
+ 00011328  0x00001658 setflag  0x00000001 , 0x0000000b , 0x00000011 
+ 00011329  0x00001659 fetch  0x00000001 , 0x00000078 
+ 00011330  0x0000165a fetcht  0x00000001 , 0x0000007c 
+ 00011331  0x0000165b iadd  0x00000002 , 0x0000003f 
+ 00011332  0x0000165c fetcht  0x00000001 , 0x00000048 
+ 00011333  0x0000165d iadd  0x00000002 , 0x0000003f 
+ 00011334  0x0000165e nsetflag  0x00000034 , 0x0000000a , 0x00000011 
+ 00011335  0x0000165f fetch  0x00000001 , 0x000044ff 
+ 00011336  0x00001660 nsetflag  0x00000034 , 0x00000001 , 0x00000011 
+ 00011337  0x00001661 fetch  0x00000002 , 0x0000025d 
+ 00011338  0x00001662 fetcht  0x00000002 , 0x0000025f 
+ 00011339  0x00001663 iadd  0x00000002 , 0x0000003f 
+ 00011340  0x00001664 nsetflag  0x00000034 , 0x0000000d , 0x00000011 
+ 00011341  0x00001665 fetch  0x00000008 , 0x00004668 
+ 00011342  0x00001666 nsetflag  0x00000034 , 0x0000000f , 0x00000011 
+ 00011343  0x00001667 fetch  0x00000008 , 0x00004670 
+ 00011344  0x00001668 nsetflag  0x00000034 , 0x0000000e , 0x00000011 
+ 00011345  0x00001669 fetch  0x00000001 , 0x000041ce 
+ 00011346  0x0000166a nsetflag  0x00000034 , 0x00000008 , 0x00000011 
+ 00011347  0x0000166b fetch  0x00000001 , 0x00004092 
+ 00011348  0x0000166c compare  0x0000000a , 0x0000003f , 0x000000ff 
+ 00011349  0x0000166d call  0x00002c5b , 0x00000001 
+ 00011350  0x0000166e setarg  0xfffffff8 
+ 00011351  0x0000166f iand  0x00000011 , 0x00000011 
+ 00011352  0x00001670 copy  0x00000011 , 0x0000003f 
+ 00011353  0x00001671 store  0x00000002 , 0x00004152 
+ 00011354  0x00001672 rtn 
+ 00011355  0x00001675 hfetch  0x00000002 , 0x00008112 
+ 00011356  0x00001676 nsetflag  0x00000034 , 0x00000006 , 0x00000011 
+ 00011357  0x00001677 hfetch  0x00000002 , 0x0000810e 
+ 00011358  0x00001678 nsetflag  0x00000034 , 0x00000005 , 0x00000011 
+ 00011359  0x00001679 rtn 
+ 00011360  0x0000167c hfetch  0x00000004 , 0x00008138 
+ 00011361  0x0000167d set0  0x0000001b , 0x0000003f 
+ 00011362  0x0000167e hstore  0x00000004 , 0x0000804c 
+ 00011363  0x0000167f call  0x00002c21 
+ 00011364  0x00001680 branch  0x00002a8c 
+ 00011365  0x00001683 hfetch  0x00000004 , 0x0000813c 
+ 00011366  0x00001684 set0  0x00000014 , 0x0000003f 
+ 00011367  0x00001685 hstore  0x00000004 , 0x0000804c 
+ 00011368  0x00001686 branch  0x00002c23 
+ 00011369  0x00001689 fetch  0x00000002 , 0x00004150 
+ 00011370  0x0000168a bbit1  0x00000000 , 0x00002a8c 
+ 00011371  0x0000168b rtn 
+ 00011372  0x0000168d fetch  0x00000002 , 0x00004150 
+ 00011373  0x0000168e bbit1  0x00000001 , 0x00002a8c 
+ 00011374  0x0000168f rtn 
+ 00011375  0x00001691 fetch  0x00000002 , 0x00004150 
+ 00011376  0x00001692 bbit1  0x00000002 , 0x00002a8c 
+ 00011377  0x00001693 rtn 
+ 00011378  0x000016d1 bpatch  0x000000b2 , 0x00004016 
+ 00011379  0x000016d2 call  0x00002c7a 
+ 00011380  0x000016d3 add  0x00000013 , 0x000000cd , 0x00000012 
+ 00011381  0x000016d4 ifetch  0x00000001 , 0x00000012 
+ 00011382  0x000016d6 rtneq  0x00000000 
+ 00011383  0x000016d7 beq  0x00000001 , 0x00002d06 
+ 00011384  0x000016d8 beq  0x00000002 , 0x00002c7f 
+ 00011385  0x000016d9 rtn 
+ 00011386  0x000016dc fetcht  0x00000002 , 0x00004241 
+ 00011387  0x000016dd copy  0x00000002 , 0x00000013 
+ 00011388  0x000016de rtn 
+ 00011389  0x000016e1 call  0x00002f3d 
+ 00011390  0x000016e2 branch  0x0000307d 
+ 00011391  0x000016e5 call  0x00003084 
+ 00011392  0x000016e6 call  0x0000305a 
+ 00011393  0x000016e7 call  0x0000305e 
+ 00011394  0x000016e8 branch  0x000030a2 
+ 00011395  0x000016ee call  0x00003231 
+ 00011396  0x000016ef setarg  0x0000004e 
+ 00011397  0x000016f0 call  0x0000322f 
+ 00011398  0x000016f1 call  0x000032ba 
+ 00011399  0x000016f4 add  0x00000013 , 0x00000092 , 0x00000011 
+ 00011400  0x000016f5 ifetch  0x00000004 , 0x00000011 
+ 00011401  0x000016f6 branch  0x0000322c 
+ 00011402  0x000016f9 call  0x00002c7a 
+ 00011403  0x000016fa add  0x00000013 , 0x00000091 , 0x00000012 
+ 00011404  0x000016fb ifetcht  0x00000001 , 0x00000012 
+ 00011405  0x000016fd call  0x00002c90 
+ 00011406  0x000016fe add  0x00000013 , 0x00000091 , 0x00000005 
+ 00011407  0x00001700 branch  0x00002e56 
+ 00011408  0x00001703 call  0x00002c94 
+ 00011409  0x00001704 increase  0x00000001 , 0x00000002 
+ 00011410  0x00001705 and_into  0x00000003 , 0x00000002 
+ 00011411  0x00001706 rtn 
+ 00011412  0x00001709 add  0x00000013 , 0x000000ae , 0x00000012 
+ 00011413  0x0000170a ifetch  0x00000001 , 0x00000012 
+ 00011414  0x0000170c and_into  0x00000003 , 0x0000003f 
+ 00011415  0x0000170d mul32  0x0000003f , 0x00000004 , 0x00000011 
+ 00011416  0x0000170e add  0x00000013 , 0x00000097 , 0x0000003f 
+ 00011417  0x00001710 iadd  0x00000011 , 0x0000003f 
+ 00011418  0x00001711 iadd  0x00000002 , 0x00000006 
+ 00011419  0x00001712 ifetch  0x00000001 , 0x00000006 
+ 00011420  0x00001714 branch  0x0000322f 
+ 00011421  0x00001717 call  0x0000326c 
+ 00011422  0x00001718 call  0x0000666a 
+ 00011423  0x00001719 setarg  0x000007e2 
+ 00011424  0x0000171a arg  0x00000aa2 , 0x00000011 
+ 00011425  0x0000171b arg  0x00000004 , 0x00000002 
+ 00011426  0x0000171c call  0x000066b3 
+ 00011427  0x0000171d call  0x0000666d 
+ 00011428  0x0000171e fetch  0x00000004 , 0x00000aa2 
+ 00011429  0x0000171f call  0x00003227 
+ 00011430  0x00001721 nrtn  0x00000034 
+ 00011431  0x00001722 fetch  0x00000004 , 0x000040a0 
+ 00011432  0x00001724 branch  0x00003227 
+ 00011433  0x00001727 call  0x00003241 
+ 00011434  0x00001729 setarg  0x00000000 
+ 00011435  0x0000172a call  0x0000323f 
+ 00011436  0x0000172d call  0x0000323a 
+ 00011437  0x0000172f and_into  0x00000007 , 0x0000003f 
+ 00011438  0x00001731 branch  0x0000323c 
+ 00011439  0x00001734 call  0x0000323a 
+ 00011440  0x00001736 set1  0x00000004 , 0x0000003f 
+ 00011441  0x00001737 call  0x0000323c 
+ 00011442  0x0000173a branch  0x00003235 
+ 00011443  0x0000173d call  0x0000325d 
+ 00011444  0x0000173f beq  0x00000001 , 0x00002cb7 
+ 00011445  0x00001740 beq  0x00000002 , 0x00002cbc 
+ 00011446  0x00001741 rtn 
+ 00011447  0x00001744 call  0x0000323e 
+ 00011448  0x00001747 add  0x00000013 , 0x000000d1 , 0x00000005 
+ 00011449  0x00001748 call  0x000032d6 
+ 00011450  0x0000174a call  0x00003242 
+ 00011451  0x0000174c branch  0x00002cac 
+ 00011452  0x0000174f call  0x0000325a 
+ 00011453  0x00001751 branch  0x00002cb8 
+ 00011454  0x00001754 add  0x00000013 , 0x0000008c , 0x00000011 
+ 00011455  0x00001755 ifetch  0x00000001 , 0x00000011 
+ 00011456  0x00001757 increase  0x00000001 , 0x0000003f 
+ 00011457  0x00001758 add  0x00000013 , 0x0000008c , 0x00000005 
+ 00011458  0x00001759 istore  0x00000001 , 0x00000005 
+ 00011459  0x0000175b beq  0x00000020 , 0x00002dd2 
+ 00011460  0x0000175c call  0x00003258 
+ 00011461  0x0000175e beq  0x00000001 , 0x00002cca 
+ 00011462  0x0000175f setarg  0x00000001 
+ 00011463  0x00001760 call  0x0000325b 
+ 00011464  0x00001763 call  0x00003258 
+ 00011465  0x00001765 bne  0x00000001 , 0x00002cac 
+ 00011466  0x00001767 add  0x00000013 , 0x000000d3 , 0x00000011 
+ 00011467  0x00001768 ifetch  0x00000001 , 0x00000011 
+ 00011468  0x0000176a increase  0x00000001 , 0x0000003f 
+ 00011469  0x0000176b call  0x00002cd5 
+ 00011470  0x0000176d beq  0x00000004 , 0x00002cd2 
+ 00011471  0x0000176e call  0x00002c8a 
+ 00011472  0x0000176f call  0x00002d04 
+ 00011473  0x00001771 branch  0x00002d8f 
+ 00011474  0x00001774 call  0x00002cd4 
+ 00011475  0x00001776 branch  0x00002cac 
+ 00011476  0x00001779 setarg  0x00000000 
+ 00011477  0x0000177b add  0x00000013 , 0x000000d3 , 0x00000005 
+ 00011478  0x0000177c branch  0x000032b4 
+ 00011479  0x0000177f call  0x0000323e 
+ 00011480  0x00001782 call  0x0000325a 
+ 00011481  0x00001784 call  0x00003241 
+ 00011482  0x00001786 branch  0x00002cac 
+ 00011483  0x00001789 call  0x0000325d 
+ 00011484  0x0000178b beq  0x00000003 , 0x00002cd8 
+ 00011485  0x0000178c call  0x0000323a 
+ 00011486  0x0000178e isolate0  0x00000004 , 0x0000003f 
+ 00011487  0x0000178f branch  0x00002ca9 , 0x00000001 
+ 00011488  0x00001790 call  0x0000325d 
+ 00011489  0x00001792 beq  0x00000001 , 0x00002cd7 
+ 00011490  0x00001793 beq  0x00000002 , 0x00002cd8 
+ 00011491  0x00001794 rtn 
+ 00011492  0x00001797 call  0x00003253 
+ 00011493  0x00001799 rtnne  0x000000ff 
+ 00011494  0x0000179a call  0x00002ce9 
+ 00011495  0x0000179b ncall  0x00002cf4 , 0x0000002c 
+ 00011496  0x0000179c rtn 
+ 00011497  0x0000179f disable  0x0000002c 
+ 00011498  0x000017a0 add  0x00000013 , 0x000000ce , 0x00000011 
+ 00011499  0x000017a1 ifetch  0x00000001 , 0x00000011 
+ 00011500  0x000017a3 rtnne  0x00000001 
+ 00011501  0x000017a4 add  0x00000013 , 0x000000d0 , 0x00000011 
+ 00011502  0x000017a5 ifetch  0x00000001 , 0x00000011 
+ 00011503  0x000017a7 rtnne  0x00000000 
+ 00011504  0x000017a8 setarg  0x00000001 
+ 00011505  0x000017a9 call  0x00002cfd 
+ 00011506  0x000017ab call  0x00003237 
+ 00011507  0x000017ad branch  0x00007feb 
+ 00011508  0x000017b0 add  0x00000013 , 0x000000d0 , 0x00000011 
+ 00011509  0x000017b1 ifetch  0x00000001 , 0x00000011 
+ 00011510  0x000017b3 branch  0x00002cff , 0x00000034 
+ 00011511  0x000017b4 increase  0xffffffff , 0x0000003f 
+ 00011512  0x000017b5 call  0x0000323f 
+ 00011513  0x000017b7 setarg  0x00000002 
+ 00011514  0x000017b8 call  0x00002cfd 
+ 00011515  0x000017ba call  0x00002c8a 
+ 00011516  0x000017bc branch  0x00003237 
+ 00011517  0x000017bf add  0x00000013 , 0x000000d2 , 0x00000005 
+ 00011518  0x000017c0 branch  0x000032b4 
+ 00011519  0x000017c4 setarg  0x00000003 
+ 00011520  0x000017c5 call  0x00002cfd 
+ 00011521  0x000017c7 call  0x00003258 
+ 00011522  0x000017c9 nbranch  0x00002cc8 , 0x00000034 
+ 00011523  0x000017ca call  0x00002c8a 
+ 00011524  0x000017cd setarg  0x00000002 
+ 00011525  0x000017ce branch  0x00003238 
+ 00011526  0x000017d1 rtnmark0  0x00000026 
+ 00011527  0x000017d2 set1  0x00000027 , 0x00000000 
+ 00011528  0x000017d3 bpatch  0x000000b3 , 0x00004016 
+ 00011529  0x000017d4 add  0x00000013 , 0x0000008e , 0x00000011 
+ 00011530  0x000017d5 ifetch  0x00000001 , 0x00000011 
+ 00011531  0x000017d7 beq  0x00000001 , 0x00002d0f 
+ 00011532  0x000017d8 call  0x0000306a 
+ 00011533  0x000017d9 nbranch  0x00002d16 , 0x00000028 
+ 00011534  0x000017da call  0x00002d1b 
+ 00011535  0x000017dc add  0x00000013 , 0x0000008e , 0x00000005 
+ 00011536  0x000017dd call  0x000032d6 
+ 00011537  0x000017df call  0x00002d2c 
+ 00011538  0x000017e0 nbranch  0x00002d7d , 0x00000028 
+ 00011539  0x000017e1 call  0x00002ce4 
+ 00011540  0x000017e3 call  0x00002d8f 
+ 00011541  0x000017e4 call  0x00002e7a 
+ 00011542  0x000017e6 set0  0x00000027 , 0x00000000 
+ 00011543  0x000017e7 rtn 
+ 00011544  0x000017ea rtn  0x00000005 
+ 00011545  0x000017eb set1  0x0000001c , 0x0000003f 
+ 00011546  0x000017ec rtn 
+ 00011547  0x000017ef add  0x00000013 , 0x000000c2 , 0x00000011 
+ 00011548  0x000017f0 ifetch  0x00000001 , 0x00000011 
+ 00011549  0x000017f2 increase  0x00000001 , 0x0000003f 
+ 00011550  0x000017f3 add  0x00000013 , 0x000000c2 , 0x00000005 
+ 00011551  0x000017f4 istore  0x00000001 , 0x00000005 
+ 00011552  0x000017f6 beq  0x00000004 , 0x00002d23 
+ 00011553  0x000017f7 beq  0x00000005 , 0x00002d27 
+ 00011554  0x000017f8 rtn 
+ 00011555  0x000017fa add  0x00000013 , 0x000000ad , 0x00000011 
+ 00011556  0x000017fb ifetch  0x00000001 , 0x00000011 
+ 00011557  0x000017ff add  0x00000013 , 0x000000ab , 0x00000005 
+ 00011558  0x00001800 branch  0x000032b4 
+ 00011559  0x00001803 add  0x00000013 , 0x000000c2 , 0x00000005 
+ 00011560  0x00001804 call  0x000032d6 
+ 00011561  0x00001806 add  0x00000013 , 0x000000ac , 0x00000011 
+ 00011562  0x00001807 ifetch  0x00000001 , 0x00000011 
+ 00011563  0x00001809 branch  0x00002d25 
+ 00011564  0x0000180c call  0x00003253 
+ 00011565  0x0000180e bne  0x000000ff , 0x00002eb1 
+ 00011566  0x0000180f bpatch  0x000000b4 , 0x00004016 
+ 00011567  0x00001810 call  0x00002d3a 
+ 00011568  0x00001811 nbranch  0x00002d36 , 0x00000028 
+ 00011569  0x00001812 call  0x00002d53 
+ 00011570  0x00001813 call  0x00002e71 
+ 00011571  0x00001816 setarg  0x00000001 
+ 00011572  0x00001818 add  0x00000013 , 0x0000008b , 0x00000005 
+ 00011573  0x00001819 branch  0x000032b4 
+ 00011574  0x0000181c add  0x00000013 , 0x0000008b , 0x00000011 
+ 00011575  0x0000181d ifetch  0x00000001 , 0x00000011 
+ 00011576  0x0000181f beq  0x00000001 , 0x00007fe7 
+ 00011577  0x00001820 rtn 
+ 00011578  0x00001824 add  0x00000013 , 0x000000d8 , 0x00000002 
+ 00011579  0x00001825 ifetch  0x00000002 , 0x00000002 
+ 00011580  0x00001827 call  0x00007f9c 
+ 00011581  0x00001828 nrtn  0x00000028 
+ 00011582  0x00001829 copy  0x00000011 , 0x0000003f 
+ 00011583  0x0000182a store  0x00000001 , 0x00000aae 
+ 00011584  0x0000182b add  0x00000013 , 0x000000b2 , 0x00000005 
+ 00011585  0x0000182c call  0x000032d6 
+ 00011586  0x0000182e call  0x00002cac 
+ 00011587  0x0000182f store  0x00000001 , 0x0000119e 
+ 00011588  0x00001830 fetch  0x00000001 , 0x00000aae 
+ 00011589  0x00001831 copy  0x0000003f , 0x00000011 
+ 00011590  0x00001832 add  0x00000011 , 0x00000001 , 0x00000002 
+ 00011591  0x00001833 arg  0x0000119f , 0x00000005 
+ 00011592  0x00001834 copy  0x00000011 , 0x00000039 
+ 00011593  0x00001835 copy  0x00000012 , 0x00000006 
+ 00011594  0x00001836 call  0x00007f01 
+ 00011595  0x00001837 arg  0x0000119e , 0x00000011 
+ 00011596  0x00001839 rtnmark0  0x00000027 
+ 00011597  0x0000183a add  0x00000013 , 0x00000086 , 0x00000005 
+ 00011598  0x0000183b istoret  0x00000001 , 0x00000005 
+ 00011599  0x0000183d copy  0x00000002 , 0x00000039 
+ 00011600  0x0000183e add  0x00000013 , 0x00000022 , 0x00000005 
+ 00011601  0x00001840 copy  0x00000011 , 0x00000006 
+ 00011602  0x00001841 branch  0x00007f01 
+ 00011603  0x00001845 add  0x00000013 , 0x00000086 , 0x00000011 
+ 00011604  0x00001846 ifetch  0x00000001 , 0x00000011 
+ 00011605  0x00001848 increase  0x00000002 , 0x0000003f 
+ 00011606  0x00001849 add  0x00000013 , 0x00000088 , 0x00000005 
+ 00011607  0x0000184a istore  0x00000001 , 0x00000005 
+ 00011608  0x0000184d call  0x0000323a 
+ 00011609  0x0000184f call  0x00003235 
+ 00011610  0x00001852 add  0x00000013 , 0x00000086 , 0x00000011 
+ 00011611  0x00001853 ifetch  0x00000001 , 0x00000011 
+ 00011612  0x00001855 lshift3  0x0000003f , 0x0000003f 
+ 00011613  0x00001856 add  0x00000013 , 0x00000085 , 0x00000011 
+ 00011614  0x00001857 ifetcht  0x00000001 , 0x00000011 
+ 00011615  0x00001859 and  0x00000002 , 0x00000003 , 0x00000002 
+ 00011616  0x0000185a lshift  0x00000002 , 0x00000002 
+ 00011617  0x0000185b ior  0x00000002 , 0x0000003f 
+ 00011618  0x0000185c add  0x00000013 , 0x000000c3 , 0x00000011 
+ 00011619  0x0000185d ifetcht  0x00000001 , 0x00000011 
+ 00011620  0x0000185f iadd  0x00000002 , 0x0000003f 
+ 00011621  0x00001860 istore  0x00000001 , 0x00000005 
+ 00011622  0x00001862 add  0x00000013 , 0x00000086 , 0x00000011 
+ 00011623  0x00001863 ifetch  0x00000001 , 0x00000011 
+ 00011624  0x00001865 iforce  0x00000039 
+ 00011625  0x00001866 add  0x00000013 , 0x00000022 , 0x00000006 
+ 00011626  0x00001868 branch  0x00007f01 
+ 00011627  0x0000186b call  0x0000324f 
+ 00011628  0x0000186d call  0x0000325a 
+ 00011629  0x0000186f call  0x00002e6d 
+ 00011630  0x00001870 call  0x00002cac 
+ 00011631  0x00001871 store  0x00000001 , 0x0000119e 
+ 00011632  0x00001872 call  0x00002d77 
+ 00011633  0x00001873 call  0x0000323a 
+ 00011634  0x00001875 set1  0x00000003 , 0x0000003f 
+ 00011635  0x00001876 call  0x0000323c 
+ 00011636  0x00001878 call  0x00002d53 
+ 00011637  0x00001879 call  0x00002d33 
+ 00011638  0x0000187a branch  0x00002d14 
+ 00011639  0x0000187d store  0x00000001 , 0x0000119f 
+ 00011640  0x0000187e call  0x00003224 
+ 00011641  0x00001880 store  0x00000004 , 0x000011a0 
+ 00011642  0x00001881 arg  0x00000006 , 0x00000002 
+ 00011643  0x00001882 arg  0x0000119e , 0x00000011 
+ 00011644  0x00001883 branch  0x00002d4c 
+ 00011645  0x00001886 add  0x00000013 , 0x000000b2 , 0x00000011 
+ 00011646  0x00001887 ifetch  0x00000001 , 0x00000011 
+ 00011647  0x00001889 branch  0x00002d6b , 0x00000034 
+ 00011648  0x0000188c add  0x00000013 , 0x000000da , 0x00000011 
+ 00011649  0x0000188d ifetch  0x00000002 , 0x00000011 
+ 00011650  0x0000188f branch  0x00007f9c 
+ 00011651  0x00001892 call  0x00002c7a 
+ 00011652  0x00001894 call  0x00002afa 
+ 00011653  0x00001895 fetch  0x00000003 , 0x0000416f 
+ 00011654  0x00001896 rtn  0x00000034 
+ 00011655  0x00001897 add  0x00000013 , 0x000000dc , 0x00000002 
+ 00011656  0x00001898 ifetch  0x00000002 , 0x00000002 
+ 00011657  0x0000189a call  0x00007f9c 
+ 00011658  0x0000189b add  0x00000013 , 0x000000b6 , 0x00000002 
+ 00011659  0x0000189c ifetch  0x00000008 , 0x00000002 
+ 00011660  0x0000189d call  0x00007f49 
+ 00011661  0x0000189e storet  0x00000004 , 0x0000415b 
+ 00011662  0x0000189f branch  0x00002b2a 
+ 00011663  0x000018a2 call  0x00002c7a 
+ 00011664  0x000018a3 add  0x00000013 , 0x0000008f , 0x00000005 
+ 00011665  0x000018a4 call  0x000032d6 
+ 00011666  0x000018a7 call  0x00002da4 
+ 00011667  0x000018a8 nbranch  0x00002dae , 0x00000018 
+ 00011668  0x000018a9 nbranch  0x00002dae , 0x0000002f 
+ 00011669  0x000018aa call  0x00002dd6 
+ 00011670  0x000018ab call  0x00002e75 
+ 00011671  0x000018ad call  0x00002c7a 
+ 00011672  0x000018ae add  0x00000013 , 0x00000085 , 0x00000011 
+ 00011673  0x000018af ifetch  0x00000001 , 0x00000011 
+ 00011674  0x000018b1 increase  0x00000001 , 0x0000003f 
+ 00011675  0x000018b2 call  0x00003232 
+ 00011676  0x000018b4 call  0x00003253 
+ 00011677  0x000018b6 bne  0x000000ff , 0x00002ed0 
+ 00011678  0x000018b7 call  0x00002cdb 
+ 00011679  0x000018b9 setarg  0x00000000 
+ 00011680  0x000018ba add  0x00000013 , 0x0000008c , 0x00000005 
+ 00011681  0x000018bb istore  0x00000002 , 0x00000005 
+ 00011682  0x000018bf setarg  0x00000000 
+ 00011683  0x000018c0 branch  0x00002d34 
+ 00011684  0x000018c4 disable  0x0000002f 
+ 00011685  0x000018c5 call  0x00002df7 
+ 00011686  0x000018c6 call  0x00002c7a 
+ 00011687  0x000018c7 add  0x00000013 , 0x000000c3 , 0x00000011 
+ 00011688  0x000018c8 ifetch  0x00000001 , 0x00000011 
+ 00011689  0x000018ca beq  0x00000001 , 0x00002dac 
+ 00011690  0x000018cb call  0x00002e11 
+ 00011691  0x000018cc branch  0x00002e45 
+ 00011692  0x000018ce call  0x00002e45 
+ 00011693  0x000018cf branch  0x00002d97 
+ 00011694  0x000018d3 bpatch  0x000000b5 , 0x00004016 
+ 00011695  0x000018d4 add  0x00000013 , 0x0000008d , 0x00000011 
+ 00011696  0x000018d5 ifetch  0x00000001 , 0x00000011 
+ 00011697  0x000018d7 increase  0x00000001 , 0x0000003f 
+ 00011698  0x000018d8 add  0x00000013 , 0x0000008d , 0x00000005 
+ 00011699  0x000018d9 istore  0x00000001 , 0x00000005 
+ 00011700  0x000018db call  0x00003253 
+ 00011701  0x000018dd bne  0x000000ff , 0x00002dcc 
+ 00011702  0x000018de add  0x00000013 , 0x0000008f , 0x00000011 
+ 00011703  0x000018df ifetcht  0x00000001 , 0x00000011 
+ 00011704  0x000018e1 increase  0x00000001 , 0x00000002 
+ 00011705  0x000018e2 add  0x00000013 , 0x0000008f , 0x00000005 
+ 00011706  0x000018e3 istoret  0x00000001 , 0x00000005 
+ 00011707  0x000018e5 add  0x00000013 , 0x000000cc , 0x00000011 
+ 00011708  0x000018e6 ifetch  0x00000001 , 0x00000011 
+ 00011709  0x000018e8 isub  0x00000002 , 0x0000003f 
+ 00011710  0x000018e9 nbranch  0x00002d92 , 0x00000034 
+ 00011711  0x000018ea bpatch  0x000000b6 , 0x00004016 
+ 00011712  0x000018eb call  0x0000325d 
+ 00011713  0x000018ed beq  0x00000003 , 0x00002cbe 
+ 00011714  0x000018ee add  0x00000013 , 0x000000d1 , 0x00000011 
+ 00011715  0x000018ef ifetch  0x00000001 , 0x00000011 
+ 00011716  0x000018f1 increase  0x00000001 , 0x0000003f 
+ 00011717  0x000018f2 add  0x00000013 , 0x000000d1 , 0x00000005 
+ 00011718  0x000018f3 istore  0x00000001 , 0x00000005 
+ 00011719  0x000018f5 beq  0x00000002 , 0x00002cb3 
+ 00011720  0x000018f6 call  0x00002caf 
+ 00011721  0x000018f7 setarg  0x00000001 
+ 00011722  0x000018f8 call  0x00003238 
+ 00011723  0x000018fa branch  0x00002d8f 
+ 00011724  0x000018fd add  0x00000013 , 0x0000008d , 0x00000011 
+ 00011725  0x000018fe ifetch  0x00000001 , 0x00000011 
+ 00011726  0x00001900 rtnne  0x000000ff 
+ 00011727  0x00001901 add  0x00000013 , 0x0000008d , 0x00000005 
+ 00011728  0x00001902 call  0x000032d6 
+ 00011729  0x00001904 branch  0x00002dd4 
+ 00011730  0x00001907 add  0x00000013 , 0x0000008c , 0x00000005 
+ 00011731  0x00001908 call  0x000032d6 
+ 00011732  0x0000190b jam  0x0000003a , 0x00000a99 
+ 00011733  0x0000190c branch  0x00007d86 
+ 00011734  0x0000190f call  0x00002dde 
+ 00011735  0x00001910 add  0x00000013 , 0x00000084 , 0x00000011 
+ 00011736  0x00001911 ifetch  0x00000001 , 0x00000011 
+ 00011737  0x00001913 rtn  0x00000034 
+ 00011738  0x00001914 iforce  0x00000039 
+ 00011739  0x00001915 add  0x00000013 , 0x00000002 , 0x00000006 
+ 00011740  0x00001917 add  0x00000013 , 0x00000064 , 0x00000005 
+ 00011741  0x00001919 branch  0x00007f01 
+ 00011742  0x0000191e call  0x0000325f 
+ 00011743  0x00001920 rshift3  0x0000003f , 0x0000003f 
+ 00011744  0x00001921 add  0x00000013 , 0x00000084 , 0x00000005 
+ 00011745  0x00001922 istore  0x00000001 , 0x00000005 
+ 00011746  0x00001925 increase  0x00000001 , 0x0000003f 
+ 00011747  0x00001926 add  0x00000013 , 0x00000001 , 0x00000006 
+ 00011748  0x00001928 iadd  0x00000006 , 0x00000006 
+ 00011749  0x00001929 ifetch  0x00000003 , 0x00000006 
+ 00011750  0x0000192a add  0x00000013 , 0x000000c4 , 0x00000005 
+ 00011751  0x0000192b istore  0x00000003 , 0x00000005 
+ 00011752  0x0000192e call  0x0000325f 
+ 00011753  0x00001930 rshift  0x0000003f , 0x0000003f 
+ 00011754  0x00001931 and  0x0000003f , 0x00000003 , 0x0000003f 
+ 00011755  0x00001932 add  0x00000013 , 0x000000ca , 0x00000005 
+ 00011756  0x00001933 istore  0x00000001 , 0x00000005 
+ 00011757  0x00001935 rtn 
+ 00011758  0x00001938 disable  0x00000009 
+ 00011759  0x00001939 disable  0x00000007 
+ 00011760  0x0000193a setarg  0x00555555 
+ 00011761  0x0000193b iforce  0x0000000f 
+ 00011762  0x0000193c rtn 
+ 00011763  0x0000193f call  0x00002918 
+ 00011764  0x00001940 add  0x00000013 , 0x00000090 , 0x00000011 
+ 00011765  0x00001941 ifetcht  0x00000001 , 0x00000011 
+ 00011766  0x00001943 branch  0x00002933 
+ 00011767  0x00001946 call  0x00002dee 
+ 00011768  0x00001947 call  0x00002df3 
+ 00011769  0x00001948 set1  0x00000000 , 0x00000015 
+ 00011770  0x00001949 enable  0x0000001d 
+ 00011771  0x0000194a enable  0x00000020 
+ 00011772  0x0000194b disable  0x00000021 
+ 00011773  0x0000194c call  0x000053c4 
+ 00011774  0x0000194d call  0x0000322a 
+ 00011775  0x0000194f iforce  0x00000009 
+ 00011776  0x00001950 inject  0x00000003 , 0x00000020 
+ 00011777  0x00001951 enable  0x00000009 
+ 00011778  0x00001952 add  0x00000013 , 0x00000088 , 0x00000011 
+ 00011779  0x00001953 ifetch  0x00000001 , 0x00000011 
+ 00011780  0x00001955 iforce  0x00000039 
+ 00011781  0x00001956 add  0x00000013 , 0x00000042 , 0x00000006 
+ 00011782  0x00001959 ifetch  0x00000001 , 0x00000006 
+ 00011783  0x0000195a inject  0x00000003 , 0x00000008 
+ 00011784  0x0000195b loop  0x00002e06 
+ 00011785  0x0000195c enable  0x00000008 
+ 00011786  0x0000195d inject  0x00000003 , 0x00000018 
+ 00011787  0x0000195e disable  0x00000008 
+ 00011788  0x0000195f until  0x0000003e , 0x00000027 
+ 00011789  0x00001960 bpatch  0x000000b7 , 0x00004016 
+ 00011790  0x00001961 nop  0x00000064 
+ 00011791  0x00001962 disable  0x0000001d 
+ 00011792  0x00001963 rtn 
+ 00011793  0x00001966 disable  0x0000002f 
+ 00011794  0x00001967 force  0x00000000 , 0x00000015 
+ 00011795  0x00001968 add  0x00000013 , 0x00000090 , 0x00000011 
+ 00011796  0x00001969 ifetcht  0x00000001 , 0x00000011 
+ 00011797  0x0000196b call  0x0000291f 
+ 00011798  0x0000196c call  0x00002924 
+ 00011799  0x0000196e call  0x00002dee 
+ 00011800  0x0000196f enable  0x0000000d 
+ 00011801  0x00001970 enable  0x00000021 
+ 00011802  0x00001971 disable  0x00000020 
+ 00011803  0x00001972 call  0x000053c4 
+ 00011804  0x00001973 call  0x0000322a 
+ 00011805  0x00001975 iforce  0x00000009 
+ 00011806  0x00001976 enable  0x00000010 
+ 00011807  0x00001977 add  0x00000013 , 0x00000089 , 0x00000011 
+ 00011808  0x00001978 ifetch  0x00000002 , 0x00000011 
+ 00011809  0x0000197a iforce  0x0000001b 
+ 00011810  0x0000197b correlate  0x0000003e , 0x00000003 
+ 00011811  0x0000197c nbranch  0x00002e4d , 0x00000018 
+ 00011812  0x0000197d enable  0x00000009 
+ 00011813  0x0000197e parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00011814  0x0000197f rshift3  0x0000000c , 0x0000003f 
+ 00011815  0x00001980 add  0x00000013 , 0x00000000 , 0x00000005 
+ 00011816  0x00001981 istore  0x00000001 , 0x00000005 
+ 00011817  0x00001983 add  0x00000013 , 0x000000cd , 0x00000011 
+ 00011818  0x00001984 ifetch  0x00000001 , 0x00000011 
+ 00011819  0x00001986 beq  0x00000002 , 0x00002e33 
+ 00011820  0x00001987 bpatch  0x000000b8 , 0x00004017 
+ 00011821  0x00001988 add  0x00000013 , 0x00000000 , 0x00000011 
+ 00011822  0x00001989 ifetch  0x00000001 , 0x00000011 
+ 00011823  0x0000198b add  0x00000013 , 0x00000087 , 0x00000011 
+ 00011824  0x0000198c ifetcht  0x00000001 , 0x00000011 
+ 00011825  0x0000198e icompare  0x00000007 , 0x00000002 
+ 00011826  0x0000198f nbranch  0x00002e45 , 0x00000001 
+ 00011827  0x00001991 parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00011828  0x00001992 rshift3  0x0000000c , 0x0000003f 
+ 00011829  0x00001993 istore  0x00000001 , 0x00000005 
+ 00011830  0x00001994 rshift3  0x0000003f , 0x0000003f 
+ 00011831  0x00001995 and  0x0000003f , 0x0000001f , 0x00000039 
+ 00011832  0x00001996 branch  0x00002e3d , 0x00000005 
+ 00011833  0x00001998 parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00011834  0x00001999 rshift3  0x0000000c , 0x0000003f 
+ 00011835  0x0000199a istore  0x00000001 , 0x00000005 
+ 00011836  0x0000199b loop  0x00002e39 
+ 00011837  0x0000199d parse  0x00000003 , 0x00000000 , 0x00000018 
+ 00011838  0x0000199e rshift32  0x0000003f , 0x0000003f 
+ 00011839  0x0000199f rshift16  0x0000003f , 0x0000003f 
+ 00011840  0x000019a0 istore  0x00000003 , 0x00000005 
+ 00011841  0x000019a1 branch  0x00002e45 , 0x00000006 
+ 00011842  0x000019a2 enable  0x0000002f 
+ 00011843  0x000019a3 disable  0x0000000d 
+ 00011844  0x000019a4 rtn 
+ 00011845  0x000019a8 disable  0x0000001d 
+ 00011846  0x000019a9 disable  0x0000000d 
+ 00011847  0x000019aa disable  0x00000009 
+ 00011848  0x000019ab disable  0x00000007 
+ 00011849  0x000019ac branch  0x000028f9 , 0x00000021 
+ 00011850  0x000019ad until  0x0000003e , 0x00000027 
+ 00011851  0x000019ae nop  0x00000064 
+ 00011852  0x000019af branch  0x000028f9 
+ 00011853  0x000019b2 call  0x00002e4f 
+ 00011854  0x000019b3 branch  0x00002e45 
+ 00011855  0x000019b6 call  0x000029bb 
+ 00011856  0x000019b7 rtn  0x00000034 
+ 00011857  0x000019b8 add  0x00000013 , 0x000000ea , 0x00000011 
+ 00011858  0x000019b9 ifetcht  0x00000001 , 0x00000011 
+ 00011859  0x000019bb arg  0x00000d9e , 0x00000011 
+ 00011860  0x000019bd call  0x00002e58 
+ 00011861  0x000019be add  0x00000013 , 0x000000ea , 0x00000005 
+ 00011862  0x000019c1 istoret  0x00000001 , 0x00000005 
+ 00011863  0x000019c2 rtn 
+ 00011864  0x000019c5 arg  0x000000ff , 0x00000012 
+ 00011865  0x000019c6 branch  0x00002e5a 
+ 00011866  0x000019d9 copy  0x00000011 , 0x0000003f 
+ 00011867  0x000019da iadd  0x00000002 , 0x00000005 
+ 00011868  0x000019db fetch  0x00000001 , 0x00000018 
+ 00011869  0x000019dc istore  0x00000001 , 0x00000005 
+ 00011870  0x000019dd increase  0x00000001 , 0x00000002 
+ 00011871  0x000019de copy  0x00000012 , 0x0000003f 
+ 00011872  0x000019df iand_into  0x00000002 
+ 00011873  0x000019e0 rtn 
+ 00011874  0x000019e3 arg  0x00000000 , 0x00000002 
+ 00011875  0x000019e4 copy  0x00000011 , 0x00000006 
+ 00011876  0x000019e6 ifetch  0x00000001 , 0x00000006 
+ 00011877  0x000019e7 iadd  0x00000002 , 0x00000002 
+ 00011878  0x000019e8 loop  0x00002e64 
+ 00011879  0x000019e9 rshift8  0x00000002 , 0x00000002 
+ 00011880  0x000019ea rtn 
+ 00011881  0x000019ed call  0x00002c7a 
+ 00011882  0x000019ee call  0x00002e9f 
+ 00011883  0x000019ef setarg  0x00000001 
+ 00011884  0x000019f0 call  0x00003272 
+ 00011885  0x000019f3 setarg  0x00000000 
+ 00011886  0x000019f4 call  0x00002e73 
+ 00011887  0x000019f6 istore  0x00000001 , 0x00000005 
+ 00011888  0x000019f8 rtn 
+ 00011889  0x000019fb call  0x00003270 
+ 00011890  0x000019fd increase  0x00000001 , 0x0000003f 
+ 00011891  0x00001a00 add  0x00000013 , 0x000000fc , 0x00000005 
+ 00011892  0x00001a01 branch  0x000032b4 
+ 00011893  0x00001a06 add  0x00000013 , 0x000000fd , 0x00000011 
+ 00011894  0x00001a07 ifetch  0x00000001 , 0x00000011 
+ 00011895  0x00001a08 increase  0x00000001 , 0x0000003f 
+ 00011896  0x00001a09 add  0x00000013 , 0x000000fd , 0x00000005 
+ 00011897  0x00001a0a branch  0x000032b4 
+ 00011898  0x00001a0d bpatch  0x000000b9 , 0x00004017 
+ 00011899  0x00001a0e call  0x00003270 
+ 00011900  0x00001a10 sub  0x0000003f , 0x0000007c , 0x0000003e 
+ 00011901  0x00001a11 rtn  0x00000002 
+ 00011902  0x00001a12 add  0x00000013 , 0x000000fd , 0x00000011 
+ 00011903  0x00001a13 ifetcht  0x00000001 , 0x00000011 
+ 00011904  0x00001a15 isub  0x00000002 , 0x00000002 
+ 00011905  0x00001a16 call  0x00002e6d 
+ 00011906  0x00001a17 setarg  0x00000102 
+ 00011907  0x00001a18 iadd  0x00000013 , 0x00000011 
+ 00011908  0x00001a19 ifetch  0x00000001 , 0x00000011 
+ 00011909  0x00001a1b isub  0x00000002 , 0x0000003e 
+ 00011910  0x00001a1c nbranch  0x00002e8d , 0x00000002 
+ 00011911  0x00001a1d setarg  0x00000103 
+ 00011912  0x00001a1e iadd  0x00000013 , 0x00000011 
+ 00011913  0x00001a1f ifetch  0x00000001 , 0x00000011 
+ 00011914  0x00001a21 isub  0x00000002 , 0x0000003e 
+ 00011915  0x00001a22 branch  0x00002e99 , 0x00000002 
+ 00011916  0x00001a23 rtn 
+ 00011917  0x00001a26 add  0x00000013 , 0x000000fe , 0x00000011 
+ 00011918  0x00001a27 ifetch  0x00000001 , 0x00000011 
+ 00011919  0x00001a29 beq  0x00000002 , 0x00002e93 
+ 00011920  0x00001a2a increase  0x00000001 , 0x0000003f 
+ 00011921  0x00001a2b call  0x00003272 
+ 00011922  0x00001a2d beq  0x00000001 , 0x00002e9f 
+ 00011923  0x00001a2f setarg  0x0000000a 
+ 00011924  0x00001a30 call  0x000032b0 
+ 00011925  0x00001a32 setarg  0x00000000 
+ 00011926  0x00001a33 call  0x000032b2 
+ 00011927  0x00001a36 add  0x00000013 , 0x000000ff , 0x00000011 
+ 00011928  0x00001a38 branch  0x00002ea5 
+ 00011929  0x00001a3b add  0x00000013 , 0x000000fe , 0x00000011 
+ 00011930  0x00001a3c ifetch  0x00000001 , 0x00000011 
+ 00011931  0x00001a3e beq  0x00000000 , 0x00002ea7 
+ 00011932  0x00001a3f increase  0xffffffff , 0x0000003f 
+ 00011933  0x00001a40 call  0x00003272 
+ 00011934  0x00001a42 beq  0x00000000 , 0x00002ea7 
+ 00011935  0x00001a47 setarg  0x00000005 
+ 00011936  0x00001a48 call  0x000032b0 
+ 00011937  0x00001a4a setarg  0x00000000 
+ 00011938  0x00001a4b call  0x000032b2 
+ 00011939  0x00001a4e setarg  0x00000100 
+ 00011940  0x00001a50 iadd  0x00000013 , 0x00000011 
+ 00011941  0x00001a52 ifetch  0x00000001 , 0x00000011 
+ 00011942  0x00001a54 branch  0x0000326a 
+ 00011943  0x00001a59 setarg  0x00000002 
+ 00011944  0x00001a5a call  0x000032b0 
+ 00011945  0x00001a5c setarg  0x00000000 
+ 00011946  0x00001a5d call  0x000032b2 
+ 00011947  0x00001a60 setarg  0x00000101 
+ 00011948  0x00001a62 branch  0x00002ea4 
+ 00011949  0x00001a71 set1  0x00000026 , 0x00000000 
+ 00011950  0x00001a72 call  0x00002c83 
+ 00011951  0x00001a75 setarg  0x00000001 
+ 00011952  0x00001a76 branch  0x00003256 
+ 00011953  0x00001a79 add  0x00000013 , 0x0000008b , 0x00000011 
+ 00011954  0x00001a7a ifetch  0x00000001 , 0x00000011 
+ 00011955  0x00001a7c beq  0x00000001 , 0x00007fe7 
+ 00011956  0x00001a7d call  0x00003253 
+ 00011957  0x00001a7f beq  0x00000001 , 0x00002eb9 
+ 00011958  0x00001a80 beq  0x00000002 , 0x00002ebd 
+ 00011959  0x00001a81 beq  0x00000003 , 0x00002ec1 
+ 00011960  0x00001a82 branch  0x00002a8c 
+ 00011961  0x00001a85 setarg  0x00000011 
+ 00011962  0x00001a86 call  0x00003256 
+ 00011963  0x00001a88 jam  0x000000aa , 0x0000119e 
+ 00011964  0x00001a89 branch  0x00002ec4 
+ 00011965  0x00001a8b setarg  0x00000012 
+ 00011966  0x00001a8c call  0x00003256 
+ 00011967  0x00001a8e jam  0x00000055 , 0x0000119e 
+ 00011968  0x00001a8f branch  0x00002ec4 
+ 00011969  0x00001a91 setarg  0x00000013 
+ 00011970  0x00001a92 call  0x00003256 
+ 00011971  0x00001a94 jam  0x00000022 , 0x0000119e 
+ 00011972  0x00001a96 call  0x0000323a 
+ 00011973  0x00001a98 and_into  0x00000007 , 0x0000003f 
+ 00011974  0x00001a99 store  0x00000001 , 0x0000119f 
+ 00011975  0x00001a9a call  0x00003224 
+ 00011976  0x00001a9c store  0x00000004 , 0x000011a0 
+ 00011977  0x00001a9e jam  0x00000000 , 0x000011a4 
+ 00011978  0x00001a9f arg  0x0000119e , 0x00000011 
+ 00011979  0x00001aa0 arg  0x00000007 , 0x00000002 
+ 00011980  0x00001aa1 call  0x00002d4c 
+ 00011981  0x00001aa2 call  0x00002d53 
+ 00011982  0x00001aa3 call  0x00002d33 
+ 00011983  0x00001aa4 branch  0x00007fe7 
+ 00011984  0x00001aa7 call  0x00003253 
+ 00011985  0x00001aa9 rtneq  0x000000ff 
+ 00011986  0x00001aaa beq  0x00000011 , 0x00002ed6 
+ 00011987  0x00001aab beq  0x00000012 , 0x00002ed9 
+ 00011988  0x00001aac beq  0x00000013 , 0x00002edc 
+ 00011989  0x00001aad rtn 
+ 00011990  0x00001ab0 setarg  0x00000002 
+ 00011991  0x00001ab1 call  0x00003256 
+ 00011992  0x00001ab3 branch  0x00002d9f 
+ 00011993  0x00001ab5 setarg  0x00000003 
+ 00011994  0x00001ab6 call  0x00003256 
+ 00011995  0x00001ab8 branch  0x00002d9f 
+ 00011996  0x00001aba setarg  0x000000ff 
+ 00011997  0x00001abb call  0x00003256 
+ 00011998  0x00001abd jam  0x00000039 , 0x00000a99 
+ 00011999  0x00001abe call  0x00007d86 
+ 00012000  0x00001abf add  0x00000013 , 0x00000066 , 0x00000011 
+ 00012001  0x00001ac0 ifetch  0x00000004 , 0x00000011 
+ 00012002  0x00001ac2 call  0x0000322c 
+ 00012003  0x00001ac4 branch  0x00002d9f 
+ 00012004  0x00001ac7 set0  0x00000026 , 0x00000000 
+ 00012005  0x00001ac8 call  0x00002f08 
+ 00012006  0x00001ac9 call  0x00002f22 
+ 00012007  0x00001acb call  0x00003263 
+ 00012008  0x00001acd nop  0x000007d0 
+ 00012009  0x00001ace call  0x00003261 
+ 00012010  0x00001acf beq  0x000000ff , 0x00002dd4 
+ 00012011  0x00001ad0 call  0x00002da4 
+ 00012012  0x00001ad1 nbranch  0x00002efa , 0x00000018 
+ 00012013  0x00001ad2 nbranch  0x00002efa , 0x0000002f 
+ 00012014  0x00001ad3 call  0x00002dd6 
+ 00012015  0x00001ad4 call  0x00002c7a 
+ 00012016  0x00001ad5 add  0x00000013 , 0x00000092 , 0x00000011 
+ 00012017  0x00001ad6 ifetcht  0x00000004 , 0x00000011 
+ 00012018  0x00001ad7 call  0x000030be 
+ 00012019  0x00001ad8 branch  0x00002ead , 0x00000005 
+ 00012020  0x00001ad9 call  0x00002c7a 
+ 00012021  0x00001ada add  0x00000013 , 0x00000066 , 0x00000011 
+ 00012022  0x00001adb ifetch  0x00000004 , 0x00000011 
+ 00012023  0x00001adc beq  0x00000000 , 0x00002ee7 
+ 00012024  0x00001add call  0x0000322c 
+ 00012025  0x00001ade branch  0x00002f1c 
+ 00012026  0x00001ae1 call  0x00003261 
+ 00012027  0x00001ae2 increase  0x00000001 , 0x0000003f 
+ 00012028  0x00001ae3 call  0x00003264 
+ 00012029  0x00001ae5 call  0x00002f04 
+ 00012030  0x00001ae6 increase  0x00000001 , 0x0000003f 
+ 00012031  0x00001ae7 and_into  0x00000001 , 0x0000003f 
+ 00012032  0x00001ae8 call  0x00002f06 
+ 00012033  0x00001ae9 beq  0x00000000 , 0x00002f0c 
+ 00012034  0x00001aea beq  0x00000001 , 0x00002f0e 
+ 00012035  0x00001aeb rtn 
+ 00012036  0x00001aee setarg  0x0000018b 
+ 00012037  0x00001aef branch  0x000032d0 
+ 00012038  0x00001af1 arg  0x0000018b , 0x00000011 
+ 00012039  0x00001af2 branch  0x000032b3 
+ 00012040  0x00001af5 call  0x00003267 
+ 00012041  0x00001af6 call  0x00003224 
+ 00012042  0x00001af7 call  0x0000322c 
+ 00012043  0x00001af8 branch  0x00002c8a 
+ 00012044  0x00001afb call  0x00002f08 
+ 00012045  0x00001afc branch  0x00002ee8 
+ 00012046  0x00001aff call  0x00002c83 
+ 00012047  0x00001b00 branch  0x00002ee8 
+ 00012048  0x00001b04 set0  0x00000026 , 0x00000000 
+ 00012049  0x00001b05 call  0x00002c8a 
+ 00012050  0x00001b06 call  0x00003253 
+ 00012051  0x00001b08 rtnne  0x000000ff 
+ 00012052  0x00001b09 call  0x00002f22 
+ 00012053  0x00001b0a call  0x00003263 
+ 00012054  0x00001b0d nop  0x000007d0 
+ 00012055  0x00001b0e call  0x00003261 
+ 00012056  0x00001b10 beq  0x000000ff , 0x00002dd4 
+ 00012057  0x00001b11 call  0x00002da4 
+ 00012058  0x00001b12 nbranch  0x00002f27 , 0x00000018 
+ 00012059  0x00001b13 nbranch  0x00002f27 , 0x0000002f 
+ 00012060  0x00001b15 set1  0x00000026 , 0x00000000 
+ 00012061  0x00001b16 call  0x00003263 
+ 00012062  0x00001b17 setarg  0x000000ff 
+ 00012063  0x00001b18 call  0x00003256 
+ 00012064  0x00001b1a jam  0x0000003c , 0x00000a99 
+ 00012065  0x00001b1b branch  0x00007d86 
+ 00012066  0x00001b1e set1  0x00000027 , 0x00000000 
+ 00012067  0x00001b1f jam  0x000000ff , 0x0000119e 
+ 00012068  0x00001b20 call  0x0000323a 
+ 00012069  0x00001b22 call  0x00002d77 
+ 00012070  0x00001b23 branch  0x00002d53 
+ 00012071  0x00001b26 call  0x00003261 
+ 00012072  0x00001b28 increase  0x00000001 , 0x0000003f 
+ 00012073  0x00001b29 call  0x00003264 
+ 00012074  0x00001b2b call  0x00002c8a 
+ 00012075  0x00001b2c branch  0x00002f16 
+ 00012076  0x00001b2f call  0x00003267 
+ 00012077  0x00001b32 setarg  0x000000ff 
+ 00012078  0x00001b33 call  0x00003256 
+ 00012079  0x00001b35 branch  0x00002f10 
+ 00012080  0x00001b3f bpatch  0x000000ba , 0x00004017 
+ 00012081  0x00001b40 call  0x00002c7a 
+ 00012082  0x00001b41 setarg  0x000031b0 
+ 00012083  0x00001b42 add  0x00000013 , 0x000000de , 0x00000005 
+ 00012084  0x00001b43 istore  0x00000002 , 0x00000005 
+ 00012085  0x00001b45 call  0x00002f3d 
+ 00012086  0x00001b46 call  0x000048ea 
+ 00012087  0x00001b47 call  0x000032b6 
+ 00012088  0x00001b49 bpatch  0x000000bb , 0x00004017 
+ 00012089  0x00001b4a beq  0x00000000 , 0x00003055 
+ 00012090  0x00001b4b beq  0x00000001 , 0x00002f45 
+ 00012091  0x00001b4c beq  0x0000000f , 0x00002f41 
+ 00012092  0x00001b4d branch  0x00002a8c 
+ 00012093  0x00001b50 call  0x0000326c 
+ 00012094  0x00001b51 arg  0x00000080 , 0x00000039 
+ 00012095  0x00001b52 arg  0x00000d9e , 0x00000005 
+ 00012096  0x00001b53 branch  0x00007ec6 
+ 00012097  0x00001b56 call  0x00002f4c 
+ 00012098  0x00001b58 call  0x00002f4f 
+ 00012099  0x00001b59 call  0x000048d3 
+ 00012100  0x00001b5a branch  0x00002f42 
+ 00012101  0x00001b5d bpatch  0x000000bc , 0x00004017 
+ 00012102  0x00001b5e call  0x00002f4c 
+ 00012103  0x00001b60 call  0x00002f4f 
+ 00012104  0x00001b61 call  0x00002fbd 
+ 00012105  0x00001b62 call  0x000048d3 
+ 00012106  0x00001b63 call  0x00003019 
+ 00012107  0x00001b64 branch  0x00002f47 
+ 00012108  0x00001b6a call  0x00003291 
+ 00012109  0x00001b6b call  0x00003296 
+ 00012110  0x00001b6c branch  0x00003299 
+ 00012111  0x00001b6f call  0x0000328f 
+ 00012112  0x00001b71 rtnne  0x00000000 
+ 00012113  0x00001b73 call  0x00002f55 
+ 00012114  0x00001b74 call  0x00002f65 
+ 00012115  0x00001b75 call  0x0000316b 
+ 00012116  0x00001b76 branch  0x00002f96 
+ 00012117  0x00001b79 call  0x00003294 
+ 00012118  0x00001b7b rtnbit1  0x00000000 
+ 00012119  0x00001b7c set1  0x00000000 , 0x0000003f 
+ 00012120  0x00001b7d call  0x00003297 
+ 00012121  0x00001b7f call  0x00003267 
+ 00012122  0x00001b82 call  0x00003299 
+ 00012123  0x00001b84 jam  0x00000000 , 0x00000d38 
+ 00012124  0x00001b85 call  0x0000324f 
+ 00012125  0x00001b87 call  0x00002f61 
+ 00012126  0x00001b89 add  0x00000013 , 0x00000000 , 0x00000005 
+ 00012127  0x00001b8b arg  0x00000042 , 0x00000039 
+ 00012128  0x00001b8c branch  0x00007ed4 
+ 00012129  0x00001b8f call  0x00003231 
+ 00012130  0x00001b91 call  0x0000327d 
+ 00012131  0x00001b93 call  0x0000322c 
+ 00012132  0x00001b95 branch  0x00002c8a 
+ 00012133  0x00001b98 bpatch  0x000000bd , 0x00004017 
+ 00012134  0x00001b99 call  0x0000324c 
+ 00012135  0x00001b9b beq  0x00000001 , 0x00002f8d 
+ 00012136  0x00001b9c call  0x00003245 
+ 00012137  0x00001b9e beq  0x00000001 , 0x00002c8a 
+ 00012138  0x00001b9f setarg  0x00000136 
+ 00012139  0x00001ba0 iadd  0x00000013 , 0x00000011 
+ 00012140  0x00001ba1 ifetcht  0x00000004 , 0x00000011 
+ 00012141  0x00001ba3 copy  0x00000022 , 0x0000003f 
+ 00012142  0x00001ba4 isub  0x00000002 , 0x0000003e 
+ 00012143  0x00001ba5 ncall  0x00002d18 , 0x00000002 
+ 00012144  0x00001ba6 copy  0x0000003f , 0x00000012 
+ 00012145  0x00001ba7 setarg  0x00000136 
+ 00012146  0x00001ba8 iadd  0x00000013 , 0x00000011 
+ 00012147  0x00001ba9 ifetch  0x00000004 , 0x00000011 
+ 00012148  0x00001baa copy  0x0000003f , 0x00000002 
+ 00012149  0x00001bac setarg  0x0000013a 
+ 00012150  0x00001bad iadd  0x00000013 , 0x00000011 
+ 00012151  0x00001bae copy  0x00000002 , 0x0000003f 
+ 00012152  0x00001baf ifetcht  0x00000001 , 0x00000011 
+ 00012153  0x00001bb1 iadd  0x00000002 , 0x00000002 
+ 00012154  0x00001bb2 copy  0x00000012 , 0x0000003f 
+ 00012155  0x00001bb3 isub  0x00000002 , 0x0000003e 
+ 00012156  0x00001bb4 nrtn  0x00000002 
+ 00012157  0x00001bb5 set0  0x0000001c , 0x0000003f 
+ 00012158  0x00001bb6 setarg  0x00000136 
+ 00012159  0x00001bb7 iadd  0x00000013 , 0x00000005 
+ 00012160  0x00001bb8 istore  0x00000004 , 0x00000005 
+ 00012161  0x00001bbb call  0x00002c8a 
+ 00012162  0x00001bbc call  0x00003278 
+ 00012163  0x00001bbe increase  0x00000001 , 0x0000003f 
+ 00012164  0x00001bbf call  0x0000327b 
+ 00012165  0x00001bc1 rtnne  0x00000002 
+ 00012166  0x00001bc2 call  0x0000327a 
+ 00012167  0x00001bc6 branch  0x0000324f 
+ 00012168  0x00001bc9 copy  0x00000022 , 0x0000003f 
+ 00012169  0x00001bca arg  0x00000136 , 0x00000011 
+ 00012170  0x00001bcb call  0x000032bf 
+ 00012171  0x00001bcc istore  0x00000004 , 0x00000005 
+ 00012172  0x00001bd0 branch  0x0000327a 
+ 00012173  0x00001bd3 arg  0x00000d9e , 0x00000011 
+ 00012174  0x00001bd4 call  0x00002f94 
+ 00012175  0x00001bd5 add  0x00000013 , 0x000000eb , 0x00000005 
+ 00012176  0x00001bd6 istoret  0x00000001 , 0x00000005 
+ 00012177  0x00001bd8 sub  0x00000002 , 0x00000050 , 0x0000003e 
+ 00012178  0x00001bd9 nrtn  0x00000002 
+ 00012179  0x00001bda branch  0x00002c8a 
+ 00012180  0x00001bdd arg  0x00000100 , 0x00000039 
+ 00012181  0x00001bde branch  0x00002e62 
+ 00012182  0x00001be1 call  0x00002f99 
+ 00012183  0x00001be2 call  0x00002fa5 
+ 00012184  0x00001be3 branch  0x00002fb1 
+ 00012185  0x00001be6 setarg  0x00000180 
+ 00012186  0x00001be7 call  0x000032d0 
+ 00012187  0x00001be9 rtn  0x00000034 
+ 00012188  0x00001bea arg  0x0000000b , 0x00000007 
+ 00012189  0x00001beb call  0x00007f16 
+ 00012190  0x00001bec nrtn  0x00000034 
+ 00012191  0x00001bed call  0x000032a7 
+ 00012192  0x00001bf0 setarg  0x00000001 
+ 00012193  0x00001bf1 store  0x00000001 , 0x00000d54 
+ 00012194  0x00001bf2 setarg  0x00000000 
+ 00012195  0x00001bf3 istore  0x00000007 , 0x00000005 
+ 00012196  0x00001bf4 branch  0x000031b8 
+ 00012197  0x00001bf7 setarg  0x0000017e 
+ 00012198  0x00001bf8 call  0x000032d0 
+ 00012199  0x00001bfa rtn  0x00000034 
+ 00012200  0x00001bfb arg  0x0000000e , 0x00000007 
+ 00012201  0x00001bfc call  0x00007f16 
+ 00012202  0x00001bfd nrtn  0x00000034 
+ 00012203  0x00001bfe call  0x000032aa 
+ 00012204  0x00001c01 arg  0x00000d64 , 0x00000005 
+ 00012205  0x00001c02 arg  0x00000002 , 0x00000039 
+ 00012206  0x00001c03 call  0x00007ec6 
+ 00012207  0x00001c04 jam  0x00000000 , 0x00000d64 
+ 00012208  0x00001c05 branch  0x000031ed 
+ 00012209  0x00001c08 setarg  0x0000017f 
+ 00012210  0x00001c09 call  0x000032d0 
+ 00012211  0x00001c0b rtn  0x00000034 
+ 00012212  0x00001c0c arg  0x0000000c , 0x00000007 
+ 00012213  0x00001c0d call  0x00007f16 
+ 00012214  0x00001c0e nrtn  0x00000034 
+ 00012215  0x00001c0f call  0x000032ad 
+ 00012216  0x00001c12 arg  0x00000d74 , 0x00000005 
+ 00012217  0x00001c13 arg  0x00000002 , 0x00000039 
+ 00012218  0x00001c14 call  0x00007ec6 
+ 00012219  0x00001c15 jam  0x00000003 , 0x00000d74 
+ 00012220  0x00001c16 branch  0x00003207 
+ 00012221  0x00001c19 call  0x0000328f 
+ 00012222  0x00001c1b rtnne  0x00000001 
+ 00012223  0x00001c1c call  0x00002fc1 
+ 00012224  0x00001c1d branch  0x00002fcb 
+ 00012225  0x00001c20 call  0x00003294 
+ 00012226  0x00001c22 rtnbit1  0x00000001 
+ 00012227  0x00001c23 set1  0x00000001 , 0x0000003f 
+ 00012228  0x00001c24 call  0x00003297 
+ 00012229  0x00001c26 call  0x0000329c 
+ 00012230  0x00001c28 call  0x00002c83 
+ 00012231  0x00001c29 setarg  0x00000000 
+ 00012232  0x00001c2a arg  0x00000106 , 0x00000011 
+ 00012233  0x00001c2b call  0x000032bf 
+ 00012234  0x00001c2d branch  0x000032c5 
+ 00012235  0x00001c30 call  0x0000316e 
+ 00012236  0x00001c31 nbranch  0x00002f5e , 0x0000002f 
+ 00012237  0x00001c32 add  0x00000013 , 0x00000000 , 0x00000006 
+ 00012238  0x00001c33 setarg  0x00000109 
+ 00012239  0x00001c34 iadd  0x00000013 , 0x00000005 
+ 00012240  0x00001c35 arg  0x00000008 , 0x00000039 
+ 00012241  0x00001c36 call  0x00007f01 
+ 00012242  0x00001c37 setarg  0x0000010b 
+ 00012243  0x00001c38 call  0x000032d0 
+ 00012244  0x00001c39 beq  0x000000aa , 0x00002fd9 
+ 00012245  0x00001c3a beq  0x00000055 , 0x00002fed 
+ 00012246  0x00001c3b beq  0x00000022 , 0x00003001 
+ 00012247  0x00001c3c beq  0x000000ff , 0x00003212 
+ 00012248  0x00001c3d branch  0x00002f5e 
+ 00012249  0x00001c40 call  0x000032bd 
+ 00012250  0x00001c41 beq  0x00000001 , 0x00002fdd 
+ 00012251  0x00001c42 beq  0x00000002 , 0x00002fe8 
+ 00012252  0x00001c43 rtn 
+ 00012253  0x00001c45 setarg  0x00000001 
+ 00012254  0x00001c46 call  0x00002ff7 
+ 00012255  0x00001c49 setarg  0x00000001 
+ 00012256  0x00001c4a call  0x00003289 
+ 00012257  0x00001c4d setarg  0x00000080 
+ 00012258  0x00001c4e arg  0x00000130 , 0x00000011 
+ 00012259  0x00001c4f call  0x000032b3 
+ 00012260  0x00001c51 call  0x0000327d 
+ 00012261  0x00001c53 arg  0x00000131 , 0x00000011 
+ 00012262  0x00001c54 call  0x000032bf 
+ 00012263  0x00001c56 branch  0x0000322d 
+ 00012264  0x00001c59 setarg  0x00000001 
+ 00012265  0x00001c5a call  0x00002fff 
+ 00012266  0x00001c5d setarg  0x00000002 
+ 00012267  0x00001c5e call  0x00003289 
+ 00012268  0x00001c60 branch  0x00002fe1 
+ 00012269  0x00001c63 call  0x000032bd 
+ 00012270  0x00001c64 beq  0x00000001 , 0x00002ff1 
+ 00012271  0x00001c65 beq  0x00000002 , 0x00002ff9 
+ 00012272  0x00001c66 rtn 
+ 00012273  0x00001c68 call  0x00002fdf 
+ 00012274  0x00001c69 setarg  0x00000106 
+ 00012275  0x00001c6a call  0x000032d0 
+ 00012276  0x00001c6c beq  0x00000001 , 0x00002ff6 
+ 00012277  0x00001c6d rtn 
+ 00012278  0x00001c6f setarg  0x00000002 
+ 00012279  0x00001c72 arg  0x00000106 , 0x00000011 
+ 00012280  0x00001c73 branch  0x000032b3 
+ 00012281  0x00001c76 call  0x00002fea 
+ 00012282  0x00001c77 setarg  0x00000107 
+ 00012283  0x00001c78 call  0x000032d0 
+ 00012284  0x00001c7a beq  0x00000001 , 0x00002ffe 
+ 00012285  0x00001c7b rtn 
+ 00012286  0x00001c7d setarg  0x00000002 
+ 00012287  0x00001c80 arg  0x00000107 , 0x00000011 
+ 00012288  0x00001c81 branch  0x000032b3 
+ 00012289  0x00001c84 call  0x000032bd 
+ 00012290  0x00001c85 beq  0x00000001 , 0x00003005 
+ 00012291  0x00001c86 beq  0x00000002 , 0x00003011 
+ 00012292  0x00001c87 rtn 
+ 00012293  0x00001c89 setarg  0x00000106 
+ 00012294  0x00001c8a call  0x000032d0 
+ 00012295  0x00001c8c beq  0x00000002 , 0x00003009 
+ 00012296  0x00001c8d rtn 
+ 00012297  0x00001c8f call  0x0000328b 
+ 00012298  0x00001c91 or_into  0x00000001 , 0x0000003f 
+ 00012299  0x00001c92 call  0x0000328d 
+ 00012300  0x00001c95 setarg  0x00000000 
+ 00012301  0x00001c96 setarg  0x00000106 
+ 00012302  0x00001c97 iadd  0x00000013 , 0x00000005 
+ 00012303  0x00001c98 istore  0x00000002 , 0x00000005 
+ 00012304  0x00001c99 branch  0x00002f5e 
+ 00012305  0x00001c9c setarg  0x00000107 
+ 00012306  0x00001c9d call  0x000032d0 
+ 00012307  0x00001c9f bne  0x00000000 , 0x00003015 
+ 00012308  0x00001ca0 rtn 
+ 00012309  0x00001ca2 call  0x0000328b 
+ 00012310  0x00001ca4 or_into  0x00000002 , 0x0000003f 
+ 00012311  0x00001ca5 call  0x0000328d 
+ 00012312  0x00001ca7 branch  0x0000300c 
+ 00012313  0x00001cab fetch  0x00000001 , 0x00000d50 
+ 00012314  0x00001cac rtn  0x00000034 
+ 00012315  0x00001cad jam  0x00000000 , 0x00000d50 
+ 00012316  0x00001cae fetch  0x00000002 , 0x00000d4e 
+ 00012317  0x00001caf arg  0x000002ba , 0x00000002 
+ 00012318  0x00001cb0 isub  0x00000002 , 0x0000003e 
+ 00012319  0x00001cb1 nrtn  0x00000005 
+ 00012320  0x00001cb3 fetch  0x00000001 , 0x00000cb6 
+ 00012321  0x00001cb4 rtnne  0x000000ba 
+ 00012322  0x00001cb5 fetch  0x00000001 , 0x00000cb7 
+ 00012323  0x00001cb6 bpatch  0x000000be , 0x00004017 
+ 00012324  0x00001cb7 beq  0x000000a0 , 0x0000303b 
+ 00012325  0x00001cb8 beq  0x000000a1 , 0x0000302c 
+ 00012326  0x00001cb9 beq  0x000000a6 , 0x00003041 
+ 00012327  0x00001cba beq  0x000000a7 , 0x00003043 
+ 00012328  0x00001cbb beq  0x000000a9 , 0x00003049 
+ 00012329  0x00001cbc beq  0x000000b0 , 0x0000304d 
+ 00012330  0x00001cbe jam  0x00000000 , 0x00000d42 
+ 00012331  0x00001cbf rtn 
+ 00012332  0x00001cc1 fetch  0x00000001 , 0x00000cb8 
+ 00012333  0x00001cc2 beq  0x00000001 , 0x00003031 
+ 00012334  0x00001cc3 beq  0x00000084 , 0x00003034 
+ 00012335  0x00001cc4 beq  0x000000a7 , 0x00003039 
+ 00012336  0x00001cc5 branch  0x0000302a 
+ 00012337  0x00001cc7 call  0x0000328b 
+ 00012338  0x00001cc9 store  0x00000001 , 0x00000cf7 
+ 00012339  0x00001cca branch  0x0000303f 
+ 00012340  0x00001ccc call  0x00003291 
+ 00012341  0x00001cce call  0x00003296 
+ 00012342  0x00001cd0 call  0x0000328b 
+ 00012343  0x00001cd2 store  0x00000001 , 0x00000cf7 
+ 00012344  0x00001cd3 branch  0x0000303f 
+ 00012345  0x00001cd7 jam  0x000000a1 , 0x00000cf7 
+ 00012346  0x00001cd8 branch  0x0000303f 
+ 00012347  0x00001cdb fetch  0x00000001 , 0x00000cb8 
+ 00012348  0x00001cdc beq  0x00000081 , 0x0000303e 
+ 00012349  0x00001cde branch  0x0000302a 
+ 00012350  0x00001ce2 call  0x00003090 
+ 00012351  0x00001ce4 jam  0x00000001 , 0x00000d42 
+ 00012352  0x00001ce5 rtn 
+ 00012353  0x00001ceb jam  0x00000015 , 0x00000cf7 
+ 00012354  0x00001cec branch  0x0000303f 
+ 00012355  0x00001cef call  0x0000328f 
+ 00012356  0x00001cf1 beq  0x00000000 , 0x00003047 
+ 00012357  0x00001cf2 beq  0x00000001 , 0x00003039 
+ 00012358  0x00001cf4 rtn 
+ 00012359  0x00001cf6 jam  0x000000a0 , 0x00000cf7 
+ 00012360  0x00001cf7 branch  0x0000303f 
+ 00012361  0x00001cfd jam  0x00000000 , 0x00000cf7 
+ 00012362  0x00001cfe jam  0x00000000 , 0x00000cf8 
+ 00012363  0x00001cff jam  0x00000001 , 0x00000cf9 
+ 00012364  0x00001d00 branch  0x0000303f 
+ 00012365  0x00001d04 call  0x0000329c 
+ 00012366  0x00001d05 fetch  0x00000001 , 0x00000cb8 
+ 00012367  0x00001d06 increase  0x00000002 , 0x0000003f 
+ 00012368  0x00001d07 copy  0x0000003f , 0x00000039 
+ 00012369  0x00001d08 arg  0x00000cb6 , 0x00000006 
+ 00012370  0x00001d09 setarg  0x0000013c 
+ 00012371  0x00001d0a iadd  0x00000013 , 0x00000005 
+ 00012372  0x00001d0b branch  0x00007f01 
+ 00012373  0x00001d0f bpatch  0x000000bf , 0x00004017 
+ 00012374  0x00001d10 call  0x0000307d 
+ 00012375  0x00001d12 call  0x00002c7f 
+ 00012376  0x00001d13 call  0x000048d3 
+ 00012377  0x00001d14 branch  0x00003057 
+ 00012378  0x00001d17 call  0x0000328f 
+ 00012379  0x00001d19 rtnne  0x00000000 
+ 00012380  0x00001d1a call  0x00002f51 
+ 00012381  0x00001d1b branch  0x00003098 
+ 00012382  0x00001d1e call  0x0000328f 
+ 00012383  0x00001d20 rtnne  0x00000001 
+ 00012384  0x00001d21 call  0x00002fc1 
+ 00012385  0x00001d22 call  0x00002fcb 
+ 00012386  0x00001d23 call  0x0000328b 
+ 00012387  0x00001d25 rtn  0x00000034 
+ 00012388  0x00001d26 call  0x00003286 
+ 00012389  0x00001d28 call  0x00002f4c 
+ 00012390  0x00001d29 call  0x00003093 
+ 00012391  0x00001d2b setarg  0x00000000 
+ 00012392  0x00001d2c add  0x00000013 , 0x000000a7 , 0x00000005 
+ 00012393  0x00001d2e branch  0x0000322d 
+ 00012394  0x00001d31 call  0x00007fe9 
+ 00012395  0x00001d32 add  0x00000013 , 0x000000a7 , 0x00000011 
+ 00012396  0x00001d33 ifetcht  0x00000004 , 0x00000011 
+ 00012397  0x00001d35 copy  0x00000022 , 0x0000003f 
+ 00012398  0x00001d36 isub  0x00000002 , 0x0000003e 
+ 00012399  0x00001d37 ncall  0x00002d18 , 0x00000002 
+ 00012400  0x00001d38 copy  0x0000003f , 0x00000012 
+ 00012401  0x00001d39 add  0x00000013 , 0x000000a7 , 0x00000011 
+ 00012402  0x00001d3a ifetch  0x00000004 , 0x00000011 
+ 00012403  0x00001d3c add  0x00000013 , 0x000000ab , 0x00000011 
+ 00012404  0x00001d3d ifetcht  0x00000001 , 0x00000011 
+ 00012405  0x00001d3f iadd  0x00000002 , 0x00000002 
+ 00012406  0x00001d40 copy  0x00000012 , 0x0000003f 
+ 00012407  0x00001d41 isub  0x00000002 , 0x0000003e 
+ 00012408  0x00001d42 nrtn  0x00000002 
+ 00012409  0x00001d43 set0  0x0000001c , 0x0000003f 
+ 00012410  0x00001d44 add  0x00000013 , 0x000000a7 , 0x00000005 
+ 00012411  0x00001d45 istore  0x00000004 , 0x00000005 
+ 00012412  0x00001d47 branch  0x00007fe7 
+ 00012413  0x00001d4a setarg  0x00000001 
+ 00012414  0x00001d4b call  0x00003287 
+ 00012415  0x00001d4d call  0x00003283 
+ 00012416  0x00001d4f setarg  0x000000ff 
+ 00012417  0x00001d50 add  0x00000013 , 0x000000ab , 0x00000005 
+ 00012418  0x00001d51 istore  0x00000001 , 0x00000005 
+ 00012419  0x00001d53 branch  0x00003067 
+ 00012420  0x00001d56 setarg  0x0000015c 
+ 00012421  0x00001d57 call  0x000032d0 
+ 00012422  0x00001d59 rtn  0x00000034 
+ 00012423  0x00001d5a call  0x0000306a 
+ 00012424  0x00001d5b nrtn  0x00000028 
+ 00012425  0x00001d5c call  0x00003281 
+ 00012426  0x00001d5e increase  0x00000001 , 0x0000003f 
+ 00012427  0x00001d5f and_into  0x00000001 , 0x0000003f 
+ 00012428  0x00001d60 call  0x00003284 
+ 00012429  0x00001d62 beq  0x00000000 , 0x00002f4c 
+ 00012430  0x00001d63 beq  0x00000001 , 0x00003090 
+ 00012431  0x00001d64 rtn 
+ 00012432  0x00001d6a setarg  0x00000001 
+ 00012433  0x00001d6b call  0x00003292 
+ 00012434  0x00001d6c branch  0x00003296 
+ 00012435  0x00001d6f setarg  0x00000001 
+ 00012436  0x00001d70 call  0x000032a5 
+ 00012437  0x00001d73 setarg  0x00000280 
+ 00012438  0x00001d74 arg  0x00000008 , 0x00000007 
+ 00012439  0x00001d75 branch  0x00007f08 
+ 00012440  0x00001d78 call  0x000032a2 
+ 00012441  0x00001d7a rtn  0x00000034 
+ 00012442  0x00001d7b arg  0x00000008 , 0x00000007 
+ 00012443  0x00001d7c call  0x00007f16 
+ 00012444  0x00001d7d nrtn  0x00000034 
+ 00012445  0x00001d7e call  0x000032a4 
+ 00012446  0x00001d81 setarg  0x00000007 
+ 00012447  0x00001d82 call  0x00003292 
+ 00012448  0x00001d84 call  0x00003296 
+ 00012449  0x00001d86 branch  0x00002f5e 
+ 00012450  0x00001d89 bpatch  0x000000c0 , 0x00004018 
+ 00012451  0x00001d8a call  0x0000328f 
+ 00012452  0x00001d8c rtnne  0x00000007 
+ 00012453  0x00001d8d call  0x000030cb 
+ 00012454  0x00001d8e call  0x000030e0 
+ 00012455  0x00001d8f call  0x0000316e 
+ 00012456  0x00001d90 nbranch  0x00002f5e , 0x0000002f 
+ 00012457  0x00001d92 call  0x000030bc 
+ 00012458  0x00001d93 call  0x00003172 , 0x00000005 
+ 00012459  0x00001d97 call  0x00002f4c 
+ 00012460  0x00001d98 call  0x00003294 
+ 00012461  0x00001d9a set1  0x00000000 , 0x0000003f 
+ 00012462  0x00001d9b call  0x00003297 
+ 00012463  0x00001d9d call  0x00002f5e 
+ 00012464  0x00001d9e call  0x00003093 
+ 00012465  0x00001d9f call  0x000030bc 
+ 00012466  0x00001da0 branch  0x000030c1 , 0x00000005 
+ 00012467  0x00001da1 setarg  0x00000164 
+ 00012468  0x00001da2 call  0x000032d3 
+ 00012469  0x00001da4 call  0x000030be 
+ 00012470  0x00001da5 branch  0x000030c5 , 0x00000005 
+ 00012471  0x00001da6 setarg  0x00000160 
+ 00012472  0x00001da7 call  0x000032d3 
+ 00012473  0x00001da9 call  0x000030be 
+ 00012474  0x00001daa branch  0x000030c8 , 0x00000005 
+ 00012475  0x00001dab rtn 
+ 00012476  0x00001dae setarg  0x0000012b 
+ 00012477  0x00001daf call  0x000032d3 
+ 00012478  0x00001db2 call  0x0000322a 
+ 00012479  0x00001db4 isub  0x00000002 , 0x0000003e 
+ 00012480  0x00001db5 rtn 
+ 00012481  0x00001db8 setarg  0x00000182 
+ 00012482  0x00001db9 call  0x000032d0 
+ 00012483  0x00001dbd add  0x00000013 , 0x00000091 , 0x00000005 
+ 00012484  0x00001dbe branch  0x000032b4 
+ 00012485  0x00001dc1 setarg  0x00000185 
+ 00012486  0x00001dc2 call  0x000032d0 
+ 00012487  0x00001dc4 branch  0x000030c3 
+ 00012488  0x00001dc6 setarg  0x00000188 
+ 00012489  0x00001dc7 call  0x000032d0 
+ 00012490  0x00001dc9 branch  0x000030c3 
+ 00012491  0x00001dcc call  0x00003294 
+ 00012492  0x00001dce rtnbit1  0x00000007 
+ 00012493  0x00001dcf set1  0x00000007 , 0x0000003f 
+ 00012494  0x00001dd0 call  0x00003297 
+ 00012495  0x00001dd2 call  0x00003283 
+ 00012496  0x00001dd4 call  0x0000329c 
+ 00012497  0x00001dd6 setarg  0x00000000 
+ 00012498  0x00001dd7 add  0x00000013 , 0x000000f5 , 0x00000005 
+ 00012499  0x00001dd8 istore  0x00000003 , 0x00000005 
+ 00012500  0x00001dda arg  0x00000183 , 0x00000011 
+ 00012501  0x00001ddb call  0x000032bf 
+ 00012502  0x00001ddc istore  0x00000007 , 0x00000005 
+ 00012503  0x00001ddf call  0x000030bc 
+ 00012504  0x00001de0 nrtn  0x00000005 
+ 00012505  0x00001de1 add  0x00000013 , 0x00000091 , 0x00000011 
+ 00012506  0x00001de2 ifetch  0x00000001 , 0x00000011 
+ 00012507  0x00001de4 arg  0x00000182 , 0x00000011 
+ 00012508  0x00001de5 call  0x000032b3 
+ 00012509  0x00001de7 add  0x00000013 , 0x00000090 , 0x00000011 
+ 00012510  0x00001de8 ifetch  0x00000001 , 0x00000011 
+ 00012511  0x00001deb branch  0x0000314a 
+ 00012512  0x00001dee bpatch  0x000000c1 , 0x00004018 
+ 00012513  0x00001def call  0x00003281 
+ 00012514  0x00001df1 increase  0x00000001 , 0x0000003f 
+ 00012515  0x00001df2 and_into  0x00000003 , 0x0000003f 
+ 00012516  0x00001df3 call  0x00003284 
+ 00012517  0x00001df6 beq  0x00000000 , 0x0000310e 
+ 00012518  0x00001df7 beq  0x00000001 , 0x00003132 
+ 00012519  0x00001df8 beq  0x00000002 , 0x000030ea 
+ 00012520  0x00001df9 beq  0x00000003 , 0x00003132 
+ 00012521  0x00001dfa rtn 
+ 00012522  0x00001dfd call  0x00002fdf 
+ 00012523  0x00001dfe setarg  0x00000160 
+ 00012524  0x00001dff call  0x0000327e 
+ 00012525  0x00001e01 branch  0x000030e0 , 0x00000034 
+ 00012526  0x00001e02 call  0x0000322c 
+ 00012527  0x00001e04 setarg  0x00000189 
+ 00012528  0x00001e05 call  0x000032d0 
+ 00012529  0x00001e07 call  0x00003108 , 0x00000034 
+ 00012530  0x00001e08 setarg  0x00000187 
+ 00012531  0x00001e09 call  0x000032d0 
+ 00012532  0x00001e0b call  0x0000322f 
+ 00012533  0x00001e0d add  0x00000013 , 0x000000f7 , 0x00000011 
+ 00012534  0x00001e0e ifetcht  0x00000001 , 0x00000011 
+ 00012535  0x00001e10 arg  0x00000f9e , 0x00000011 
+ 00012536  0x00001e11 call  0x00002e58 
+ 00012537  0x00001e12 add  0x00000013 , 0x000000f7 , 0x00000005 
+ 00012538  0x00001e13 istoret  0x00000001 , 0x00000005 
+ 00012539  0x00001e15 call  0x00002f94 
+ 00012540  0x00001e16 add  0x00000013 , 0x000000fa , 0x00000005 
+ 00012541  0x00001e17 istoret  0x00000001 , 0x00000005 
+ 00012542  0x00001e19 sub  0x00000002 , 0x00000050 , 0x0000003e 
+ 00012543  0x00001e1a nrtn  0x00000002 
+ 00012544  0x00001e1b setarg  0x00000188 
+ 00012545  0x00001e1c call  0x00003275 
+ 00012546  0x00001e1e call  0x00002c90 
+ 00012547  0x00001e1f arg  0x00000188 , 0x00000011 
+ 00012548  0x00001e20 call  0x000032c8 
+ 00012549  0x00001e21 istoret  0x00000001 , 0x00000005 
+ 00012550  0x00001e25 arg  0x00000187 , 0x00000011 
+ 00012551  0x00001e26 branch  0x000032b3 
+ 00012552  0x00001e29 setarg  0x00000001 
+ 00012553  0x00001e2a arg  0x00000189 , 0x00000011 
+ 00012554  0x00001e2b call  0x000032b3 
+ 00012555  0x00001e2d arg  0x00000000 , 0x00000002 
+ 00012556  0x00001e2e call  0x00002c94 
+ 00012557  0x00001e31 branch  0x00003106 
+ 00012558  0x00001e34 call  0x00002fea 
+ 00012559  0x00001e35 setarg  0x00000164 
+ 00012560  0x00001e36 call  0x0000327e 
+ 00012561  0x00001e38 branch  0x000030e0 , 0x00000034 
+ 00012562  0x00001e39 call  0x0000322c 
+ 00012563  0x00001e3b setarg  0x00000186 
+ 00012564  0x00001e3c call  0x000032d0 
+ 00012565  0x00001e3e call  0x0000312c , 0x00000034 
+ 00012566  0x00001e3f setarg  0x00000184 
+ 00012567  0x00001e40 call  0x000032d0 
+ 00012568  0x00001e42 call  0x0000322f 
+ 00012569  0x00001e44 add  0x00000013 , 0x000000f6 , 0x00000011 
+ 00012570  0x00001e45 ifetcht  0x00000001 , 0x00000011 
+ 00012571  0x00001e47 arg  0x0000109e , 0x00000011 
+ 00012572  0x00001e48 call  0x00002e58 
+ 00012573  0x00001e49 add  0x00000013 , 0x000000f6 , 0x00000005 
+ 00012574  0x00001e4a istoret  0x00000001 , 0x00000005 
+ 00012575  0x00001e4c call  0x00002f94 
+ 00012576  0x00001e4d add  0x00000013 , 0x000000f9 , 0x00000005 
+ 00012577  0x00001e4e istoret  0x00000001 , 0x00000005 
+ 00012578  0x00001e50 sub  0x00000002 , 0x00000050 , 0x0000003e 
+ 00012579  0x00001e51 nrtn  0x00000002 
+ 00012580  0x00001e52 setarg  0x00000185 
+ 00012581  0x00001e53 call  0x00003275 
+ 00012582  0x00001e55 call  0x00002c90 
+ 00012583  0x00001e56 arg  0x00000185 , 0x00000011 
+ 00012584  0x00001e57 call  0x000032c8 
+ 00012585  0x00001e58 istoret  0x00000001 , 0x00000005 
+ 00012586  0x00001e5c arg  0x00000184 , 0x00000011 
+ 00012587  0x00001e5d branch  0x000032b3 
+ 00012588  0x00001e60 setarg  0x00000001 
+ 00012589  0x00001e61 arg  0x00000186 , 0x00000011 
+ 00012590  0x00001e62 call  0x000032b3 
+ 00012591  0x00001e64 arg  0x00000000 , 0x00000002 
+ 00012592  0x00001e65 call  0x00002c94 
+ 00012593  0x00001e68 branch  0x0000312a 
+ 00012594  0x00001e6b call  0x00002fdf 
+ 00012595  0x00001e6c call  0x0000327d 
+ 00012596  0x00001e6e call  0x0000322c 
+ 00012597  0x00001e70 setarg  0x00000183 
+ 00012598  0x00001e71 call  0x000032d0 
+ 00012599  0x00001e73 call  0x0000314c , 0x00000034 
+ 00012600  0x00001e74 call  0x0000314f 
+ 00012601  0x00001e75 add  0x00000013 , 0x000000f5 , 0x00000011 
+ 00012602  0x00001e76 ifetcht  0x00000001 , 0x00000011 
+ 00012603  0x00001e78 arg  0x00000e9e , 0x00000011 
+ 00012604  0x00001e79 call  0x00002e58 
+ 00012605  0x00001e7a add  0x00000013 , 0x000000f5 , 0x00000005 
+ 00012606  0x00001e7b istoret  0x00000001 , 0x00000005 
+ 00012607  0x00001e7d call  0x00002f94 
+ 00012608  0x00001e7e add  0x00000013 , 0x000000f8 , 0x00000005 
+ 00012609  0x00001e7f istoret  0x00000001 , 0x00000005 
+ 00012610  0x00001e81 sub  0x00000002 , 0x00000050 , 0x0000003e 
+ 00012611  0x00001e82 nrtn  0x00000002 
+ 00012612  0x00001e83 setarg  0x00000182 
+ 00012613  0x00001e84 call  0x00003275 
+ 00012614  0x00001e86 call  0x00002c90 
+ 00012615  0x00001e87 arg  0x00000182 , 0x00000011 
+ 00012616  0x00001e88 call  0x000032c8 
+ 00012617  0x00001e89 istoret  0x00000001 , 0x00000005 
+ 00012618  0x00001e8e arg  0x00000181 , 0x00000011 
+ 00012619  0x00001e8f branch  0x000032b3 
+ 00012620  0x00001e97 setarg  0x00000001 
+ 00012621  0x00001e98 arg  0x00000183 , 0x00000011 
+ 00012622  0x00001e99 call  0x000032b3 
+ 00012623  0x00001e9b setarg  0x00000181 
+ 00012624  0x00001e9c call  0x000032d0 
+ 00012625  0x00001e9d branch  0x0000322f 
+ 00012626  0x00001ea2 add  0x00000013 , 0x00000000 , 0x00000011 
+ 00012627  0x00001ea3 ifetch  0x00000001 , 0x00000011 
+ 00012628  0x00001ea5 call  0x0000323c 
+ 00012629  0x00001ea8 call  0x00002dde 
+ 00012630  0x00001eaa call  0x0000325f 
+ 00012631  0x00001eac isolate1  0x00000000 , 0x0000003f 
+ 00012632  0x00001ead branch  0x0000315c , 0x00000001 
+ 00012633  0x00001eaf call  0x0000315d 
+ 00012634  0x00001eb0 call  0x00002d53 
+ 00012635  0x00001eb1 call  0x00002df7 
+ 00012636  0x00001eb3 branch  0x00002e45 
+ 00012637  0x00001eb6 bpatch  0x000000c2 , 0x00004018 
+ 00012638  0x00001eb7 add  0x00000013 , 0x00000086 , 0x00000005 
+ 00012639  0x00001eb8 call  0x000032d6 
+ 00012640  0x00001eba setarg  0x0000013b 
+ 00012641  0x00001ebb call  0x000032d0 
+ 00012642  0x00001ebd rtn  0x00000034 
+ 00012643  0x00001ebe setarg  0x00000006 
+ 00012644  0x00001ebf add  0x00000013 , 0x00000086 , 0x00000005 
+ 00012645  0x00001ec0 istore  0x00000001 , 0x00000005 
+ 00012646  0x00001ec2 arg  0x00000006 , 0x00000039 
+ 00012647  0x00001ec3 setarg  0x0000012f 
+ 00012648  0x00001ec4 iadd  0x00000013 , 0x00000006 
+ 00012649  0x00001ec6 add  0x00000013 , 0x00000022 , 0x00000005 
+ 00012650  0x00001ec8 branch  0x00007f01 
+ 00012651  0x00001ecc call  0x0000316e 
+ 00012652  0x00001ecd nbranch  0x00002f5e , 0x0000002f 
+ 00012653  0x00001ece branch  0x00003172 
+ 00012654  0x00001ed1 call  0x00002f5e 
+ 00012655  0x00001ed2 call  0x00002e11 
+ 00012656  0x00001ed3 nrtn  0x0000002f 
+ 00012657  0x00001ed4 branch  0x00003152 
+ 00012658  0x00001ed7 bpatch  0x000000c3 , 0x00004018 
+ 00012659  0x00001ed8 call  0x00003188 
+ 00012660  0x00001ed9 nbranch  0x00002f5e , 0x00000028 
+ 00012661  0x00001eda add  0x00000013 , 0x00000084 , 0x00000011 
+ 00012662  0x00001edb ifetch  0x00000001 , 0x00000011 
+ 00012663  0x00001edd branch  0x00002f5e , 0x00000034 
+ 00012664  0x00001ede increase  0x00000002 , 0x0000003f 
+ 00012665  0x00001edf iforce  0x00000039 
+ 00012666  0x00001ee0 add  0x00000013 , 0x00000000 , 0x00000006 
+ 00012667  0x00001ee2 setarg  0x00000109 
+ 00012668  0x00001ee3 iadd  0x00000013 , 0x00000005 
+ 00012669  0x00001ee5 call  0x00007f01 
+ 00012670  0x00001ee6 call  0x00003286 
+ 00012671  0x00001ee8 call  0x000032b6 
+ 00012672  0x00001eea call  0x00003093 , 0x00000034 
+ 00012673  0x00001eeb setarg  0x0000010b 
+ 00012674  0x00001eec call  0x000032d0 
+ 00012675  0x00001eee beq  0x00000001 , 0x0000319e 
+ 00012676  0x00001eef beq  0x00000002 , 0x000031c6 
+ 00012677  0x00001ef0 beq  0x00000003 , 0x000031f2 
+ 00012678  0x00001ef1 beq  0x000000ff , 0x00003212 
+ 00012679  0x00001ef2 branch  0x00002f5e 
+ 00012680  0x00001ef5 call  0x00002c7a 
+ 00012681  0x00001ef6 call  0x00007fe9 
+ 00012682  0x00001ef7 add  0x00000013 , 0x000000ca , 0x00000011 
+ 00012683  0x00001ef8 ifetch  0x00000001 , 0x00000011 
+ 00012684  0x00001efa add  0x00000013 , 0x000000cb , 0x00000011 
+ 00012685  0x00001efb ifetcht  0x00000001 , 0x00000011 
+ 00012686  0x00001efd isub  0x00000002 , 0x0000003e 
+ 00012687  0x00001efe ncall  0x00007fe7 , 0x00000005 
+ 00012688  0x00001eff add  0x00000013 , 0x000000ca , 0x00000011 
+ 00012689  0x00001f00 ifetch  0x00000001 , 0x00000011 
+ 00012690  0x00001f02 add  0x00000013 , 0x000000cb , 0x00000005 
+ 00012691  0x00001f03 istore  0x00000001 , 0x00000005 
+ 00012692  0x00001f05 add  0x00000013 , 0x000000c4 , 0x00000011 
+ 00012693  0x00001f06 ifetch  0x00000003 , 0x00000011 
+ 00012694  0x00001f08 add  0x00000013 , 0x000000c7 , 0x00000011 
+ 00012695  0x00001f09 ifetcht  0x00000003 , 0x00000011 
+ 00012696  0x00001f0b isub  0x00000002 , 0x0000003e 
+ 00012697  0x00001f0c ncall  0x00007fe7 , 0x00000005 
+ 00012698  0x00001f0d add  0x00000013 , 0x000000c4 , 0x00000011 
+ 00012699  0x00001f0e ifetch  0x00000003 , 0x00000011 
+ 00012700  0x00001f10 add  0x00000013 , 0x000000c7 , 0x00000005 
+ 00012701  0x00001f12 branch  0x000032c5 
+ 00012702  0x00001f15 call  0x00002f88 
+ 00012703  0x00001f16 call  0x0000324c 
+ 00012704  0x00001f17 store  0x00000001 , 0x00000aa2 
+ 00012705  0x00001f19 call  0x00003274 
+ 00012706  0x00001f1a fetch  0x00000001 , 0x00000aa2 
+ 00012707  0x00001f1c isolate1  0x00000003 , 0x00000002 
+ 00012708  0x00001f1d setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00012709  0x00001f1e add  0x00000013 , 0x000000b2 , 0x00000005 
+ 00012710  0x00001f1f istore  0x00000001 , 0x00000005 
+ 00012711  0x00001f21 beq  0x00000001 , 0x00003216 
+ 00012712  0x00001f22 call  0x00003245 
+ 00012713  0x00001f24 call  0x00003274 
+ 00012714  0x00001f26 isolate1  0x00000004 , 0x00000002 
+ 00012715  0x00001f27 setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00012716  0x00001f28 call  0x00003249 
+ 00012717  0x00001f2a add  0x00000013 , 0x000000de , 0x00000011 
+ 00012718  0x00001f2b ifetch  0x00000002 , 0x00000011 
+ 00012719  0x00001f2d branch  0x00007f9c 
+ 00012720  0x00001f30 setarg  0x00000001 
+ 00012721  0x00001f31 store  0x00000001 , 0x00000d54 
+ 00012722  0x00001f32 call  0x0000329e 
+ 00012723  0x00001f34 istore  0x00000007 , 0x00000005 
+ 00012724  0x00001f35 call  0x0000329e 
+ 00012725  0x00001f37 ncall  0x000031bd , 0x00000034 
+ 00012726  0x00001f38 call  0x0000329e 
+ 00012727  0x00001f3a call  0x000031c2 , 0x00000034 
+ 00012728  0x00001f3c jam  0x00000020 , 0x00000d52 
+ 00012729  0x00001f3e fetch  0x00000001 , 0x00000d38 
+ 00012730  0x00001f3f set1  0x00000002 , 0x0000003f 
+ 00012731  0x00001f40 store  0x00000001 , 0x00000d38 
+ 00012732  0x00001f41 rtn 
+ 00012733  0x00001f44 setarg  0x00000001 
+ 00012734  0x00001f45 call  0x000032a8 
+ 00012735  0x00001f48 setarg  0x00000140 
+ 00012736  0x00001f49 arg  0x0000000b , 0x00000007 
+ 00012737  0x00001f4a branch  0x00007f08 
+ 00012738  0x00001f4c call  0x000032a7 
+ 00012739  0x00001f4f setarg  0x00000000 
+ 00012740  0x00001f50 arg  0x0000000b , 0x00000007 
+ 00012741  0x00001f51 branch  0x00007f08 
+ 00012742  0x00001f54 call  0x00003274 
+ 00012743  0x00001f56 isolate1  0x00000003 , 0x00000002 
+ 00012744  0x00001f57 branch  0x0000321b , 0x00000001 
+ 00012745  0x00001f58 arg  0x00000d64 , 0x00000005 
+ 00012746  0x00001f59 call  0x000031e0 
+ 00012747  0x00001f5a fetch  0x00000008 , 0x00000d64 
+ 00012748  0x00001f5b ncall  0x000031e4 , 0x00000034 
+ 00012749  0x00001f5c fetch  0x00000008 , 0x00000d64 
+ 00012750  0x00001f5d call  0x000031e9 , 0x00000034 
+ 00012751  0x00001f5e call  0x00002c7a 
+ 00012752  0x00001f5f fetch  0x00000008 , 0x00000d64 
+ 00012753  0x00001f60 arg  0x00000168 , 0x00000011 
+ 00012754  0x00001f61 call  0x000032bf 
+ 00012755  0x00001f62 istore  0x00000008 , 0x00000005 
+ 00012756  0x00001f64 setarg  0x00000170 
+ 00012757  0x00001f65 iadd  0x00000013 , 0x00000011 
+ 00012758  0x00001f66 ifetcht  0x00000008 , 0x00000011 
+ 00012759  0x00001f68 isub  0x00000002 , 0x0000003e 
+ 00012760  0x00001f69 ncall  0x000031ed , 0x00000005 
+ 00012761  0x00001f6a setarg  0x00000168 
+ 00012762  0x00001f6b iadd  0x00000013 , 0x00000011 
+ 00012763  0x00001f6c ifetch  0x00000008 , 0x00000011 
+ 00012764  0x00001f6e arg  0x00000170 , 0x00000011 
+ 00012765  0x00001f6f call  0x000032bf 
+ 00012766  0x00001f70 istore  0x00000008 , 0x00000005 
+ 00012767  0x00001f72 branch  0x00002f5e 
+ 00012768  0x00001f75 setarg  0x0000010b 
+ 00012769  0x00001f76 iadd  0x00000013 , 0x00000006 
+ 00012770  0x00001f78 arg  0x00000009 , 0x00000039 
+ 00012771  0x00001f79 branch  0x00007ff3 
+ 00012772  0x00001f7c setarg  0x00000001 
+ 00012773  0x00001f7d call  0x000032ab 
+ 00012774  0x00001f80 setarg  0x00000140 
+ 00012775  0x00001f81 arg  0x0000000e , 0x00000007 
+ 00012776  0x00001f82 branch  0x00007f08 
+ 00012777  0x00001f85 call  0x000032aa 
+ 00012778  0x00001f88 setarg  0x00000000 
+ 00012779  0x00001f89 arg  0x0000000e , 0x00000007 
+ 00012780  0x00001f8a branch  0x00007f08 
+ 00012781  0x00001f8e jam  0x00000010 , 0x00000d51 
+ 00012782  0x00001f8f fetch  0x00000001 , 0x00000d38 
+ 00012783  0x00001f90 set1  0x00000001 , 0x0000003f 
+ 00012784  0x00001f91 store  0x00000001 , 0x00000d38 
+ 00012785  0x00001f92 rtn 
+ 00012786  0x00001f95 arg  0x00000d74 , 0x00000005 
+ 00012787  0x00001f96 call  0x000031e0 
+ 00012788  0x00001f97 fetch  0x00000002 , 0x00000d75 
+ 00012789  0x00001f98 ncall  0x00003209 , 0x00000034 
+ 00012790  0x00001f99 fetch  0x00000002 , 0x00000d75 
+ 00012791  0x00001f9a call  0x0000320e , 0x00000034 
+ 00012792  0x00001f9b call  0x00002c7a 
+ 00012793  0x00001f9c fetch  0x00000003 , 0x00000d74 
+ 00012794  0x00001f9d arg  0x00000178 , 0x00000011 
+ 00012795  0x00001f9e call  0x000032c4 
+ 00012796  0x00001fa0 setarg  0x0000017b 
+ 00012797  0x00001fa1 iadd  0x00000013 , 0x00000011 
+ 00012798  0x00001fa2 ifetcht  0x00000003 , 0x00000011 
+ 00012799  0x00001fa4 isub  0x00000002 , 0x0000003e 
+ 00012800  0x00001fa5 ncall  0x00003207 , 0x00000005 
+ 00012801  0x00001fa6 setarg  0x00000178 
+ 00012802  0x00001fa7 iadd  0x00000013 , 0x00000011 
+ 00012803  0x00001fa8 ifetch  0x00000003 , 0x00000011 
+ 00012804  0x00001faa arg  0x0000017b , 0x00000011 
+ 00012805  0x00001fab call  0x000032c4 
+ 00012806  0x00001fad branch  0x00002f5e 
+ 00012807  0x00001fb0 jam  0x00000021 , 0x00000d52 
+ 00012808  0x00001fb1 branch  0x000031b9 
+ 00012809  0x00001fb4 setarg  0x00000001 
+ 00012810  0x00001fb5 call  0x000032ae 
+ 00012811  0x00001fb8 setarg  0x00000140 
+ 00012812  0x00001fb9 arg  0x0000000c , 0x00000007 
+ 00012813  0x00001fba branch  0x00007f08 
+ 00012814  0x00001fbd call  0x000032ad 
+ 00012815  0x00001fc0 setarg  0x00000000 
+ 00012816  0x00001fc1 arg  0x0000000c , 0x00000007 
+ 00012817  0x00001fc2 branch  0x00007f08 
+ 00012818  0x00001fc5 call  0x000032bd 
+ 00012819  0x00001fc7 beq  0x00000001 , 0x00003216 
+ 00012820  0x00001fc8 beq  0x00000002 , 0x0000321b 
+ 00012821  0x00001fc9 rtn 
+ 00012822  0x00001fcb setarg  0x0000010d 
+ 00012823  0x00001fcc call  0x0000327e 
+ 00012824  0x00001fcd arg  0x00000160 , 0x00000011 
+ 00012825  0x00001fce call  0x000032bf 
+ 00012826  0x00001fd1 branch  0x0000322d 
+ 00012827  0x00001fd4 setarg  0x0000010d 
+ 00012828  0x00001fd5 call  0x0000327e 
+ 00012829  0x00001fd6 arg  0x00000164 , 0x00000011 
+ 00012830  0x00001fd7 call  0x000032bf 
+ 00012831  0x00001fda branch  0x0000322d 
+ 00012832  0x00001fdd call  0x00002c7a 
+ 00012833  0x00001fde add  0x00000013 , 0x000000cd , 0x00000005 
+ 00012834  0x00001fdf istore  0x00000001 , 0x00000005 
+ 00012835  0x00001fe0 rtn 
+ 00012836  0x00001fe3 call  0x00002c7a 
+ 00012837  0x00001fe4 add  0x00000013 , 0x000000be , 0x00000011 
+ 00012838  0x00001fe5 branch  0x0000327f 
+ 00012839  0x00001fe7 call  0x00002c7a 
+ 00012840  0x00001fe8 add  0x00000013 , 0x000000be , 0x00000005 
+ 00012841  0x00001fe9 branch  0x0000322d 
+ 00012842  0x00001fec add  0x00000013 , 0x000000ae , 0x00000011 
+ 00012843  0x00001fed branch  0x0000327f 
+ 00012844  0x00001fef add  0x00000013 , 0x000000ae , 0x00000005 
+ 00012845  0x00001ff1 istore  0x00000004 , 0x00000005 
+ 00012846  0x00001ff2 rtn 
+ 00012847  0x00001ff5 add  0x00000013 , 0x00000090 , 0x00000005 
+ 00012848  0x00001ff6 branch  0x000032b4 
+ 00012849  0x00001ff9 setarg  0x00000000 
+ 00012850  0x00001ffb call  0x00002c7a 
+ 00012851  0x00001ffc add  0x00000013 , 0x00000085 , 0x00000005 
+ 00012852  0x00001ffd branch  0x000032b4 
+ 00012853  0x00002000 add  0x00000013 , 0x00000042 , 0x00000005 
+ 00012854  0x00002001 branch  0x000032b4 
+ 00012855  0x00002004 setarg  0x00000004 
+ 00012856  0x00002006 add  0x00000013 , 0x000000cc , 0x00000005 
+ 00012857  0x00002007 branch  0x000032b4 
+ 00012858  0x0000200a add  0x00000013 , 0x00000087 , 0x00000011 
+ 00012859  0x0000200b branch  0x000032d1 
+ 00012860  0x0000200d add  0x00000013 , 0x00000087 , 0x00000005 
+ 00012861  0x0000200e branch  0x000032b4 
+ 00012862  0x00002011 setarg  0x00000002 
+ 00012863  0x00002013 add  0x00000013 , 0x000000d0 , 0x00000005 
+ 00012864  0x00002014 branch  0x000032b4 
+ 00012865  0x00002017 setarg  0x00000001 
+ 00012866  0x00002019 call  0x00002c7a 
+ 00012867  0x0000201a add  0x00000013 , 0x000000ce , 0x00000005 
+ 00012868  0x0000201b branch  0x000032b4 
+ 00012869  0x0000201e call  0x00002c7a 
+ 00012870  0x0000201f add  0x00000013 , 0x000000b4 , 0x00000011 
+ 00012871  0x00002020 branch  0x000032d1 
+ 00012872  0x00002022 setarg  0x00000001 
+ 00012873  0x00002024 call  0x00002c7a 
+ 00012874  0x00002025 add  0x00000013 , 0x000000b4 , 0x00000005 
+ 00012875  0x00002026 branch  0x000032b4 
+ 00012876  0x00002029 call  0x00002c7a 
+ 00012877  0x0000202a add  0x00000013 , 0x000000b2 , 0x00000011 
+ 00012878  0x0000202b branch  0x000032d1 
+ 00012879  0x0000202d setarg  0x00000001 
+ 00012880  0x0000202f call  0x00002c7a 
+ 00012881  0x00002030 add  0x00000013 , 0x000000b2 , 0x00000005 
+ 00012882  0x00002031 branch  0x000032b4 
+ 00012883  0x00002034 call  0x00002c7a 
+ 00012884  0x00002035 add  0x00000013 , 0x00000096 , 0x00000011 
+ 00012885  0x00002036 branch  0x000032d1 
+ 00012886  0x00002038 add  0x00000013 , 0x00000096 , 0x00000005 
+ 00012887  0x00002039 branch  0x000032b4 
+ 00012888  0x0000203c add  0x00000013 , 0x000000cf , 0x00000011 
+ 00012889  0x0000203d branch  0x000032d1 
+ 00012890  0x0000203f setarg  0x00000000 
+ 00012891  0x00002041 add  0x00000013 , 0x000000cf , 0x00000005 
+ 00012892  0x00002042 branch  0x000032b4 
+ 00012893  0x00002045 add  0x00000013 , 0x000000d2 , 0x00000011 
+ 00012894  0x00002046 branch  0x000032d1 
+ 00012895  0x00002049 add  0x00000013 , 0x00000001 , 0x00000011 
+ 00012896  0x0000204a branch  0x000032d1 
+ 00012897  0x0000204d add  0x00000013 , 0x000000b5 , 0x00000011 
+ 00012898  0x0000204e branch  0x000032d1 
+ 00012899  0x00002050 setarg  0x00000000 
+ 00012900  0x00002052 call  0x00002c7a 
+ 00012901  0x00002053 add  0x00000013 , 0x000000b5 , 0x00000005 
+ 00012902  0x00002054 branch  0x000032b4 
+ 00012903  0x00002057 call  0x00002c7a 
+ 00012904  0x00002058 add  0x00000013 , 0x000000fb , 0x00000011 
+ 00012905  0x00002059 ifetch  0x00000001 , 0x00000011 
+ 00012906  0x0000205b store  0x00000001 , 0x000041de 
+ 00012907  0x0000205c rtn 
+ 00012908  0x0000205f call  0x00002c7a 
+ 00012909  0x00002060 fetch  0x00000001 , 0x000041de 
+ 00012910  0x00002062 add  0x00000013 , 0x000000fb , 0x00000005 
+ 00012911  0x00002063 branch  0x000032b4 
+ 00012912  0x00002066 add  0x00000013 , 0x000000fc , 0x00000011 
+ 00012913  0x00002067 branch  0x000032d1 
+ 00012914  0x0000206a add  0x00000013 , 0x000000fe , 0x00000005 
+ 00012915  0x0000206b branch  0x000032b4 
+ 00012916  0x0000206e setarg  0x00000109 
+ 00012917  0x00002070 iadd  0x00000013 , 0x00000011 
+ 00012918  0x00002071 ifetcht  0x00000001 , 0x00000011 
+ 00012919  0x00002072 rtn 
+ 00012920  0x00002075 setarg  0x00000135 
+ 00012921  0x00002076 branch  0x000032d0 
+ 00012922  0x00002078 setarg  0x00000000 
+ 00012923  0x0000207a arg  0x00000135 , 0x00000011 
+ 00012924  0x0000207b branch  0x000032b3 
+ 00012925  0x0000207e setarg  0x0000012b 
+ 00012926  0x00002080 call  0x000032cd 
+ 00012927  0x00002082 ifetch  0x00000004 , 0x00000011 
+ 00012928  0x00002083 rtn 
+ 00012929  0x00002086 setarg  0x0000015f 
+ 00012930  0x00002087 branch  0x000032d0 
+ 00012931  0x00002089 setarg  0x00000000 
+ 00012932  0x0000208b arg  0x0000015f , 0x00000011 
+ 00012933  0x0000208c branch  0x000032b3 
+ 00012934  0x0000208f setarg  0x00000000 
+ 00012935  0x00002091 arg  0x0000015c , 0x00000011 
+ 00012936  0x00002092 branch  0x000032b3 
+ 00012937  0x00002095 arg  0x0000012f , 0x00000011 
+ 00012938  0x00002096 branch  0x000032b3 
+ 00012939  0x00002099 setarg  0x00000108 
+ 00012940  0x0000209a branch  0x000032d0 
+ 00012941  0x0000209c arg  0x00000108 , 0x00000011 
+ 00012942  0x0000209d branch  0x000032b3 
+ 00012943  0x000020a0 setarg  0x00000105 
+ 00012944  0x000020a1 branch  0x000032d0 
+ 00012945  0x000020a3 setarg  0x00000000 
+ 00012946  0x000020a5 arg  0x00000105 , 0x00000011 
+ 00012947  0x000020a6 branch  0x000032b3 
+ 00012948  0x000020a9 setarg  0x00000104 
+ 00012949  0x000020aa branch  0x000032d0 
+ 00012950  0x000020ac setarg  0x00000000 
+ 00012951  0x000020ae arg  0x00000104 , 0x00000011 
+ 00012952  0x000020af branch  0x000032b3 
+ 00012953  0x000020b2 setarg  0x00000000 
+ 00012954  0x000020b4 arg  0x0000013b , 0x00000011 
+ 00012955  0x000020b5 branch  0x000032b3 
+ 00012956  0x000020b7 setarg  0x00000001 
+ 00012957  0x000020b8 branch  0x0000329a 
+ 00012958  0x000020bb setarg  0x0000010c 
+ 00012959  0x000020bc call  0x000032cd 
+ 00012960  0x000020bd ifetch  0x00000007 , 0x00000011 
+ 00012961  0x000020be rtn 
+ 00012962  0x000020c1 setarg  0x0000015e 
+ 00012963  0x000020c2 branch  0x000032d0 
+ 00012964  0x000020c4 setarg  0x00000000 
+ 00012965  0x000020c6 arg  0x0000015e , 0x00000011 
+ 00012966  0x000020c7 branch  0x000032b3 
+ 00012967  0x000020ca setarg  0x00000000 
+ 00012968  0x000020cc arg  0x00000180 , 0x00000011 
+ 00012969  0x000020cd branch  0x000032b3 
+ 00012970  0x000020d0 setarg  0x00000000 
+ 00012971  0x000020d2 arg  0x0000017e , 0x00000011 
+ 00012972  0x000020d3 branch  0x000032b3 
+ 00012973  0x000020d6 setarg  0x00000000 
+ 00012974  0x000020d8 arg  0x0000017f , 0x00000011 
+ 00012975  0x000020d9 branch  0x000032b3 
+ 00012976  0x000020dc arg  0x00000102 , 0x00000011 
+ 00012977  0x000020dd branch  0x000032b3 
+ 00012978  0x000020e0 arg  0x00000103 , 0x00000011 
+ 00012979  0x000020e2 call  0x000032c7 
+ 00012980  0x000020e4 istore  0x00000001 , 0x00000005 
+ 00012981  0x000020e5 rtn 
+ 00012982  0x000020e8 setarg  0x0000015d 
+ 00012983  0x000020e9 branch  0x000032d0 
+ 00012984  0x000020ec arg  0x0000015d , 0x00000011 
+ 00012985  0x000020ed branch  0x000032b3 
+ 00012986  0x000020f0 setarg  0x0000018a 
+ 00012987  0x000020f1 call  0x000032d0 
+ 00012988  0x000020f2 branch  0x0000326a 
+ 00012989  0x000020f5 setarg  0x0000010c 
+ 00012990  0x000020f6 branch  0x000032d0 
+ 00012991  0x000020f9 copy  0x0000003f , 0x00000002 
+ 00012992  0x000020fa copy  0x00000011 , 0x0000003f 
+ 00012993  0x000020fb iadd  0x00000013 , 0x00000005 
+ 00012994  0x000020fc copy  0x00000002 , 0x0000003f 
+ 00012995  0x000020fd rtn 
+ 00012996  0x00002100 call  0x000032bf 
+ 00012997  0x00002102 istore  0x00000003 , 0x00000005 
+ 00012998  0x00002103 rtn 
+ 00012999  0x00002106 call  0x00002c7a 
+ 00013000  0x00002108 copy  0x0000003f , 0x00000012 
+ 00013001  0x00002109 copy  0x00000011 , 0x0000003f 
+ 00013002  0x0000210a iadd  0x00000013 , 0x00000005 
+ 00013003  0x0000210b copy  0x00000012 , 0x0000003f 
+ 00013004  0x0000210c rtn 
+ 00013005  0x0000210f call  0x00002c7a 
+ 00013006  0x00002110 iadd  0x00000013 , 0x00000011 
+ 00013007  0x00002111 rtn 
+ 00013008  0x00002114 call  0x000032cd 
+ 00013009  0x00002116 ifetch  0x00000001 , 0x00000011 
+ 00013010  0x00002117 rtn 
+ 00013011  0x0000211a call  0x000032cd 
+ 00013012  0x0000211b ifetcht  0x00000004 , 0x00000011 
+ 00013013  0x0000211c rtn 
+ 00013014  0x0000211f setarg  0x00000000 
+ 00013015  0x00002120 branch  0x000032b4 
+ 00013016  0x00002125 bpatch  0x000000c4 , 0x00004018 
+ 00013017  0x00002126 fetch  0x00000001 , 0x00004092 
+ 00013018  0x00002127 branch  0x000032d8 , 0x00000034 
+ 00013019  0x00002129 beq  0x00000004 , 0x00002f30 
+ 00013020  0x0000212a beq  0x0000000f , 0x00003436 
+ 00013021  0x0000212b beq  0x00000009 , 0x000045de 
+ 00013022  0x0000212c beq  0x0000000a , 0x0000392a 
+ 00013023  0x0000212d beq  0x0000000e , 0x000035bf 
+ 00013024  0x0000212e beq  0x00000010 , 0x000044a4 
+ 00013025  0x0000212f bbit1  0x00000006 , 0x00003d00 
+ 00013026  0x00002130 rtn 
+ 00013027  0x00002133 bpatch  0x000000c5 , 0x00004018 
+ 00013028  0x00002134 jam  0x00000000 , 0x00000151 
+ 00013029  0x00002135 jam  0x00000000 , 0x0000017f 
+ 00013030  0x00002136 jam  0x00000000 , 0x00000180 
+ 00013031  0x00002137 setarg  0x00000000 
+ 00013032  0x00002138 store  0x00000005 , 0x000009ae 
+ 00013033  0x00002139 fetch  0x00000001 , 0x00004092 
+ 00013034  0x0000213a branch  0x000032e3 , 0x00000034 
+ 00013035  0x0000213b beq  0x0000000a , 0x00003962 
+ 00013036  0x0000213d rtn 
+ 00013037  0x00002141 call  0x00007cd1 
+ 00013038  0x00002142 call  0x00007d9c 
+ 00013039  0x00002143 call  0x000032f6 
+ 00013040  0x00002144 fetch  0x00000002 , 0x000041f3 
+ 00013041  0x00002145 branch  0x00007f9c 
+ 00013042  0x00002148 fetch  0x00000002 , 0x000041f1 
+ 00013043  0x00002149 branch  0x00007f9c 
+ 00013044  0x0000214c fetch  0x00000002 , 0x000041ef 
+ 00013045  0x0000214d branch  0x00007f9c 
+ 00013046  0x00002150 bpatch  0x000000c6 , 0x00004018 
+ 00013047  0x00002152 arg  0x00004668 , 0x00000011 
+ 00013048  0x00002153 call  0x00007fc4 
+ 00013049  0x00002154 rtn  0x00000034 
+ 00013050  0x00002156 copy  0x0000003f , 0x00000013 
+ 00013051  0x00002157 call  0x000032ff 
+ 00013052  0x00002158 branch  0x00003324 
+ 00013053  0x0000215b arg  0x00000000 , 0x00000013 
+ 00013054  0x0000215c rtn 
+ 00013055  0x00002162 beq  0x00000001 , 0x00003311 
+ 00013056  0x00002163 beq  0x00000010 , 0x00003357 
+ 00013057  0x00002164 beq  0x00000005 , 0x00003335 
+ 00013058  0x00002165 beq  0x00000012 , 0x0000333c 
+ 00013059  0x00002166 beq  0x00000006 , 0x00003353 
+ 00013060  0x00002167 beq  0x00000004 , 0x00003394 
+ 00013061  0x00002168 beq  0x00000002 , 0x00003399 
+ 00013062  0x00002169 beq  0x00000013 , 0x00003394 
+ 00013063  0x0000216a beq  0x00000014 , 0x0000334b 
+ 00013064  0x0000216b beq  0x00000015 , 0x0000334f 
+ 00013065  0x0000216c beq  0x00000003 , 0x0000332e 
+ 00013066  0x0000216d beq  0x0000000b , 0x00003340 
+ 00013067  0x0000216e beq  0x0000000c , 0x00003347 
+ 00013068  0x00002170 beq  0x00000016 , 0x0000335b 
+ 00013069  0x00002171 beq  0x00000018 , 0x0000332a 
+ 00013070  0x00002172 beq  0x0000002a , 0x0000331a 
+ 00013071  0x00002173 beq  0x0000002b , 0x00003318 
+ 00013072  0x00002174 rtn 
+ 00013073  0x00002178 fetch  0x00000002 , 0x00004682 
+ 00013074  0x00002179 set1  0x00000000 , 0x0000003f 
+ 00013075  0x0000217a store  0x00000002 , 0x00004682 
+ 00013076  0x0000217b fetch  0x00000002 , 0x0000420a 
+ 00013077  0x0000217c set0  0x00000000 , 0x0000003f 
+ 00013078  0x0000217d store  0x00000002 , 0x0000420a 
+ 00013079  0x0000217e rtn 
+ 00013080  0x00002181 jam  0x00000000 , 0x00000229 
+ 00013081  0x00002182 rtn 
+ 00013082  0x00002185 fetch  0x00000001 , 0x00000229 
+ 00013083  0x00002186 increase  0x00000001 , 0x0000003f 
+ 00013084  0x00002187 store  0x00000001 , 0x00000229 
+ 00013085  0x00002188 sub  0x0000003f , 0x00000001 , 0x0000003e 
+ 00013086  0x00002189 branch  0x000033df , 0x00000002 
+ 00013087  0x0000218a jam  0x00000000 , 0x00000229 
+ 00013088  0x0000218b fetch  0x00000002 , 0x0000420a 
+ 00013089  0x0000218c set1  0x00000009 , 0x0000003f 
+ 00013090  0x0000218d store  0x00000002 , 0x0000420a 
+ 00013091  0x0000218e branch  0x000033e9 
+ 00013092  0x00002191 fetch  0x00000002 , 0x000041f5 
+ 00013093  0x00002192 branch  0x00007f9c 
+ 00013094  0x00002195 fetch  0x00000002 , 0x000041e9 
+ 00013095  0x00002196 branch  0x00007f9c 
+ 00013096  0x00002199 fetch  0x00000002 , 0x000041ed 
+ 00013097  0x0000219a branch  0x00007f9c 
+ 00013098  0x0000219d fetch  0x00000002 , 0x0000420a 
+ 00013099  0x0000219e set1  0x00000001 , 0x0000003f 
+ 00013100  0x0000219f store  0x00000002 , 0x0000420a 
+ 00013101  0x000021a0 branch  0x00003412 
+ 00013102  0x000021a3 fetch  0x00000002 , 0x00004682 
+ 00013103  0x000021a4 set1  0x00000007 , 0x0000003f 
+ 00013104  0x000021a5 store  0x00000002 , 0x00004682 
+ 00013105  0x000021a6 fetch  0x00000002 , 0x0000420a 
+ 00013106  0x000021a7 set1  0x00000002 , 0x0000003f 
+ 00013107  0x000021a8 store  0x00000002 , 0x0000420a 
+ 00013108  0x000021a9 rtn 
+ 00013109  0x000021ac fetch  0x00000002 , 0x00004682 
+ 00013110  0x000021ad set1  0x00000001 , 0x0000003f 
+ 00013111  0x000021ae store  0x00000002 , 0x00004682 
+ 00013112  0x000021af fetch  0x00000002 , 0x0000420a 
+ 00013113  0x000021b0 set1  0x00000004 , 0x0000003f 
+ 00013114  0x000021b1 store  0x00000002 , 0x0000420a 
+ 00013115  0x000021b2 rtn 
+ 00013116  0x000021b5 fetch  0x00000002 , 0x00004682 
+ 00013117  0x000021b6 set1  0x00000003 , 0x0000003f 
+ 00013118  0x000021b7 store  0x00000002 , 0x00004682 
+ 00013119  0x000021b8 rtn 
+ 00013120  0x000021bb fetch  0x00000002 , 0x00004682 
+ 00013121  0x000021bc set1  0x00000005 , 0x0000003f 
+ 00013122  0x000021bd store  0x00000002 , 0x00004682 
+ 00013123  0x000021be fetch  0x00000002 , 0x0000420a 
+ 00013124  0x000021bf set1  0x00000003 , 0x0000003f 
+ 00013125  0x000021c0 store  0x00000002 , 0x0000420a 
+ 00013126  0x000021c1 rtn 
+ 00013127  0x000021c4 fetch  0x00000002 , 0x00004682 
+ 00013128  0x000021c5 set0  0x00000005 , 0x0000003f 
+ 00013129  0x000021c6 store  0x00000002 , 0x00004682 
+ 00013130  0x000021c7 rtn 
+ 00013131  0x000021ca fetch  0x00000002 , 0x00004682 
+ 00013132  0x000021cb set1  0x00000009 , 0x0000003f 
+ 00013133  0x000021cc store  0x00000002 , 0x00004682 
+ 00013134  0x000021cd rtn 
+ 00013135  0x000021d0 fetch  0x00000002 , 0x00004682 
+ 00013136  0x000021d1 set0  0x00000009 , 0x0000003f 
+ 00013137  0x000021d2 store  0x00000002 , 0x00004682 
+ 00013138  0x000021d3 branch  0x00003418 
+ 00013139  0x000021d6 fetch  0x00000002 , 0x00004682 
+ 00013140  0x000021d7 set1  0x00000002 , 0x0000003f 
+ 00013141  0x000021d8 store  0x00000002 , 0x00004682 
+ 00013142  0x000021d9 rtn 
+ 00013143  0x000021dc fetch  0x00000002 , 0x0000420a 
+ 00013144  0x000021dd set1  0x00000000 , 0x0000003f 
+ 00013145  0x000021de store  0x00000002 , 0x0000420a 
+ 00013146  0x000021df rtn 
+ 00013147  0x000021e2 fetch  0x00000002 , 0x0000420a 
+ 00013148  0x000021e3 set1  0x00000008 , 0x0000003f 
+ 00013149  0x000021e4 store  0x00000002 , 0x0000420a 
+ 00013150  0x000021e5 branch  0x000033e9 
+ 00013151  0x000021e9 bpatch  0x000000c7 , 0x00004018 
+ 00013152  0x000021ea store  0x00000001 , 0x0000022a 
+ 00013153  0x000021ec fetch  0x00000001 , 0x0000022a 
+ 00013154  0x000021ed rtn  0x00000034 
+ 00013155  0x000021ee increase  0xffffffff , 0x0000003f 
+ 00013156  0x000021ef store  0x00000001 , 0x0000022a 
+ 00013157  0x000021f0 call  0x00007cdd 
+ 00013158  0x000021f1 call  0x000033d6 
+ 00013159  0x000021f2 call  0x00003387 
+ 00013160  0x000021f3 call  0x0000338d 
+ 00013161  0x000021f4 call  0x0000651b 
+ 00013162  0x000021f5 fetch  0x00000002 , 0x000041fd 
+ 00013163  0x000021f6 call  0x00007f9c 
+ 00013164  0x000021f7 branch  0x00003361 
+ 00013165  0x000021fd ifetch  0x00000001 , 0x00000013 
+ 00013166  0x000021fe rtn  0x00000034 
+ 00013167  0x000021ff pincrease  0xffffffff 
+ 00013168  0x00002200 istore  0x00000001 , 0x00000013 
+ 00013169  0x00002201 nrtn  0x00000034 
+ 00013170  0x00002202 copy  0x00000012 , 0x0000003f 
+ 00013171  0x00002203 branch  0x00007f9c 
+ 00013172  0x00002208 ifetch  0x00000002 , 0x00000013 
+ 00013173  0x00002209 rtn  0x00000034 
+ 00013174  0x0000220a pincrease  0xffffffff 
+ 00013175  0x0000220b istore  0x00000002 , 0x00000013 
+ 00013176  0x0000220c nrtn  0x00000034 
+ 00013177  0x0000220d copy  0x00000012 , 0x0000003f 
+ 00013178  0x0000220e branch  0x00007f9c 
+ 00013179  0x00002211 fetcht  0x00000002 , 0x0000423f 
+ 00013180  0x00002212 add  0x00000002 , 0x00000001 , 0x00000013 
+ 00013181  0x00002213 arg  0x0000337f , 0x00000012 
+ 00013182  0x00002214 branch  0x0000336d 
+ 00013183  0x00002217 call  0x0000342d 
+ 00013184  0x00002218 beq  0x00000001 , 0x00003382 
+ 00013185  0x0000221a branch  0x0000340a 
+ 00013186  0x0000221c setarg  0x00000002 
+ 00013187  0x0000221d istore  0x00000001 , 0x00000013 
+ 00013188  0x0000221e add  0x00000002 , 0x00000008 , 0x00000012 
+ 00013189  0x00002220 ifetch  0x00000002 , 0x00000012 
+ 00013190  0x00002221 branch  0x00007f9c 
+ 00013191  0x00002224 arg  0x00004205 , 0x00000013 
+ 00013192  0x00002225 arg  0x0000338a , 0x00000012 
+ 00013193  0x00002226 branch  0x0000336d 
+ 00013194  0x00002229 call  0x00002252 
+ 00013195  0x0000222a branch  0x0000340e , 0x00000005 
+ 00013196  0x0000222b rtn 
+ 00013197  0x0000222f arg  0x0000467e , 0x00000013 
+ 00013198  0x00002230 arg  0x00003390 , 0x00000012 
+ 00013199  0x00002231 branch  0x00003374 
+ 00013200  0x00002234 call  0x000033f0 
+ 00013201  0x00002235 call  0x00003408 
+ 00013202  0x00002236 fetch  0x00000002 , 0x000041f7 
+ 00013203  0x00002237 branch  0x00007f9c 
+ 00013204  0x0000223b call  0x000033ac 
+ 00013205  0x0000223d fetch  0x00000002 , 0x00004682 
+ 00013206  0x0000223e set0  0x00000007 , 0x0000003f 
+ 00013207  0x0000223f store  0x00000002 , 0x00004682 
+ 00013208  0x00002240 rtn 
+ 00013209  0x00002243 jam  0x00000000 , 0x00004205 
+ 00013210  0x00002244 fetch  0x00000002 , 0x00004682 
+ 00013211  0x00002245 bbit1  0x00000007 , 0x0000339e 
+ 00013212  0x00002246 isolate0  0x00000001 , 0x0000003f 
+ 00013213  0x00002247 call  0x000032fd , 0x00000001 
+ 00013214  0x00002249 bpatch  0x000000c8 , 0x00004019 
+ 00013215  0x0000224a fetch  0x00000002 , 0x00004682 
+ 00013216  0x0000224b set0  0x00000000 , 0x0000003f 
+ 00013217  0x0000224c set0  0x00000001 , 0x0000003f 
+ 00013218  0x0000224d set0  0x00000002 , 0x0000003f 
+ 00013219  0x0000224e set0  0x00000003 , 0x0000003f 
+ 00013220  0x0000224f set0  0x00000007 , 0x0000003f 
+ 00013221  0x00002250 store  0x00000002 , 0x00004682 
+ 00013222  0x00002251 branch  0x00003418 
+ 00013223  0x00002254 call  0x000033a9 
+ 00013224  0x00002255 branch  0x0000340a 
+ 00013225  0x00002259 setarg  0x00000000 
+ 00013226  0x0000225a store  0x00000002 , 0x00004208 
+ 00013227  0x0000225b rtn 
+ 00013228  0x0000225d setarg  0x00000000 
+ 00013229  0x0000225e store  0x00000002 , 0x0000420a 
+ 00013230  0x0000225f rtn 
+ 00013231  0x00002262 fetch  0x00000002 , 0x0000420a 
+ 00013232  0x00002263 store  0x00000002 , 0x00004208 
+ 00013233  0x00002264 setarg  0x00000000 
+ 00013234  0x00002265 store  0x00000002 , 0x0000420a 
+ 00013235  0x00002266 rtn 
+ 00013236  0x00002269 fetch  0x00000002 , 0x0000420a 
+ 00013237  0x0000226a set1  0x00000007 , 0x0000003f 
+ 00013238  0x0000226b store  0x00000002 , 0x00004208 
+ 00013239  0x0000226c setarg  0x00000000 
+ 00013240  0x0000226d store  0x00000002 , 0x0000420a 
+ 00013241  0x0000226e rtn 
+ 00013242  0x00002277 fetch  0x00000001 , 0x00004682 
+ 00013243  0x00002278 isolate1  0x00000005 , 0x0000003f 
+ 00013244  0x00002279 rtn 
+ 00013245  0x00002282 setarg  0x0000aa55 
+ 00013246  0x00002284 store  0x00000002 , 0x00000aaa 
+ 00013247  0x00002285 bpatch  0x000000c9 , 0x00004019 
+ 00013248  0x00002286 arg  0x00000002 , 0x00000002 
+ 00013249  0x00002287 arg  0x00000aaa , 0x00000011 
+ 00013250  0x00002288 arg  0x000000c3 , 0x00000012 
+ 00013251  0x00002289 branch  0x00006606 
+ 00013252  0x0000228d bpatch  0x000000ca , 0x00004019 
+ 00013253  0x0000228e arg  0x00000002 , 0x00000002 
+ 00013254  0x0000228f arg  0x00000a9a , 0x00000011 
+ 00013255  0x00002290 arg  0x000000c3 , 0x00000012 
+ 00013256  0x00002291 call  0x000065df 
+ 00013257  0x00002292 fetch  0x00000002 , 0x00000a9a 
+ 00013258  0x00002293 arg  0x0000aa55 , 0x00000002 
+ 00013259  0x00002294 isub  0x00000002 , 0x0000003e 
+ 00013260  0x00002295 rtn 
+ 00013261  0x00002299 fetch  0x00000001 , 0x0000455a 
+ 00013262  0x0000229a store  0x00000001 , 0x00004205 
+ 00013263  0x0000229b rtn 
+ 00013264  0x0000229e arg  0x00000009 , 0x00000007 
+ 00013265  0x0000229f branch  0x00002c32 
+ 00013266  0x000022a2 arg  0x00000009 , 0x00000007 
+ 00013267  0x000022a3 branch  0x00002c36 
+ 00013268  0x000022a6 jam  0x00000005 , 0x00004206 
+ 00013269  0x000022a7 branch  0x000033d0 
+ 00013270  0x000022aa arg  0x00004206 , 0x00000013 
+ 00013271  0x000022ab arg  0x000033d2 , 0x00000012 
+ 00013272  0x000022ac branch  0x0000336d 
+ 00013273  0x000022af jam  0x00000001 , 0x00004363 
+ 00013274  0x000022b0 rtn 
+ 00013275  0x000022b3 jam  0x00000000 , 0x00004363 
+ 00013276  0x000022b4 rtn 
+ 00013277  0x000022b7 jam  0x0000000a , 0x00000a99 
+ 00013278  0x000022b8 branch  0x00007d8f 
+ 00013279  0x000022bb jam  0x0000001d , 0x00000a99 
+ 00013280  0x000022bc branch  0x00007d8f 
+ 00013281  0x000022bf bpatch  0x000000cb , 0x00004019 
+ 00013282  0x000022c0 fetch  0x00000001 , 0x00004207 
+ 00013283  0x000022c1 store  0x00000001 , 0x0000016d 
+ 00013284  0x000022c2 jam  0x00000001 , 0x00000228 
+ 00013285  0x000022c3 jam  0x00000003 , 0x00000a99 
+ 00013286  0x000022c4 branch  0x00007d8f 
+ 00013287  0x000022c7 jam  0x0000001e , 0x00000a99 
+ 00013288  0x000022c8 branch  0x00007d8f 
+ 00013289  0x000022cb jam  0x00000004 , 0x00000a99 
+ 00013290  0x000022cc branch  0x00007d8f 
+ 00013291  0x000022cf fetch  0x00000002 , 0x00004687 
+ 00013292  0x000022d0 store  0x00000002 , 0x0000467e 
+ 00013293  0x000022d2 call  0x00003404 
+ 00013294  0x000022d4 jam  0x00000001 , 0x00000a99 
+ 00013295  0x000022d5 branch  0x00007d8f 
+ 00013296  0x000022d8 setarg  0x00000000 
+ 00013297  0x000022d9 store  0x00000002 , 0x0000467e 
+ 00013298  0x000022da jam  0x00000002 , 0x00000a99 
+ 00013299  0x000022db branch  0x00007d8f 
+ 00013300  0x000022de jam  0x0000000f , 0x00000a99 
+ 00013301  0x000022df branch  0x00007d8f 
+ 00013302  0x000022e2 jam  0x00000010 , 0x00000a99 
+ 00013303  0x000022e3 branch  0x00007d8f 
+ 00013304  0x000022e6 jam  0x0000000e , 0x00000a99 
+ 00013305  0x000022e7 branch  0x00007d8f 
+ 00013306  0x000022ea jam  0x0000000d , 0x00000a99 
+ 00013307  0x000022eb branch  0x00007d8f 
+ 00013308  0x000022ee jam  0x00000017 , 0x00000a99 
+ 00013309  0x000022ef branch  0x00007d8f 
+ 00013310  0x000022f2 jam  0x00000018 , 0x00000a99 
+ 00013311  0x000022f3 branch  0x00007d8f 
+ 00013312  0x000022f6 jam  0x00000016 , 0x00000a99 
+ 00013313  0x000022f7 branch  0x00007d8f 
+ 00013314  0x000022fa jam  0x00000011 , 0x00000a99 
+ 00013315  0x000022fb branch  0x00007d8f 
+ 00013316  0x000022fe jam  0x00000015 , 0x00000a99 
+ 00013317  0x000022ff branch  0x00007d8f 
+ 00013318  0x00002302 jam  0x00000014 , 0x00000a99 
+ 00013319  0x00002303 branch  0x00007d8f 
+ 00013320  0x00002307 jam  0x00000013 , 0x00000a99 
+ 00013321  0x00002308 branch  0x00007d8f 
+ 00013322  0x0000230b jam  0x00000019 , 0x00000a99 
+ 00013323  0x0000230c branch  0x00007d8f 
+ 00013324  0x0000230f jam  0x00000006 , 0x00000a99 
+ 00013325  0x00002310 branch  0x00007d8f 
+ 00013326  0x00002313 jam  0x00000005 , 0x00000a99 
+ 00013327  0x00002314 branch  0x00007d8f 
+ 00013328  0x00002317 jam  0x0000001f , 0x00000a99 
+ 00013329  0x00002318 branch  0x00007d8f 
+ 00013330  0x0000231b jam  0x00000020 , 0x00000a99 
+ 00013331  0x0000231c branch  0x00007d8f 
+ 00013332  0x0000231f jam  0x00000025 , 0x00000a99 
+ 00013333  0x00002320 branch  0x00007d8f 
+ 00013334  0x00002323 set1  0x0000000d , 0x00000000 
+ 00013335  0x00002324 rtn 
+ 00013336  0x00002327 set0  0x0000000d , 0x00000000 
+ 00013337  0x00002328 rtn 
+ 00013338  0x0000233d call  0x0000342d 
+ 00013339  0x0000233e beq  0x00000002 , 0x00003424 
+ 00013340  0x00002340 setarg  0x00000001 
+ 00013341  0x00002341 istore  0x00000001 , 0x00000013 
+ 00013342  0x00002342 add  0x00000002 , 0x00000003 , 0x00000011 
+ 00013343  0x00002343 add  0x00000002 , 0x00000006 , 0x00000012 
+ 00013344  0x00002345 ifetcht  0x00000001 , 0x00000011 
+ 00013345  0x00002346 increase  0x00000001 , 0x00000013 
+ 00013346  0x00002347 istoret  0x00000001 , 0x00000013 
+ 00013347  0x00002348 branch  0x00003385 
+ 00013348  0x0000234b setarg  0x00000000 
+ 00013349  0x0000234c istore  0x00000001 , 0x00000013 
+ 00013350  0x0000234d fetch  0x00000002 , 0x00004682 
+ 00013351  0x0000234e bbit0  0x00000009 , 0x00003429 
+ 00013352  0x0000234f call  0x00003402 
+ 00013353  0x00002351 fetcht  0x00000002 , 0x0000423f 
+ 00013354  0x00002352 add  0x00000002 , 0x00000002 , 0x00000011 
+ 00013355  0x00002353 add  0x00000002 , 0x00000004 , 0x00000012 
+ 00013356  0x00002354 branch  0x00003420 
+ 00013357  0x00002357 fetcht  0x00000002 , 0x0000423f 
+ 00013358  0x00002358 add  0x00000002 , 0x00000000 , 0x00000013 
+ 00013359  0x00002359 ifetch  0x00000001 , 0x00000013 
+ 00013360  0x0000235a rtn 
+ 00013361  0x0000235d call  0x0000342d 
+ 00013362  0x0000235e bne  0x00000000 , 0x00003434 
+ 00013363  0x0000235f branch  0x0000340a 
+ 00013364  0x00002361 add  0x00000002 , 0x0000000a , 0x00000012 
+ 00013365  0x00002362 branch  0x00003385 
+ 00013366  0x00002365 rtn  0x0000002b 
+ 00013367  0x00002366 jam  0x00000000 , 0x00008081 
+ 00013368  0x00002367 setarg  0x00003463 
+ 00013369  0x00002368 store  0x00000002 , 0x000041eb 
+ 00013370  0x00002369 setarg  0x0000696c 
+ 00013371  0x0000236a store  0x00000002 , 0x000041ed 
+ 00013372  0x0000236b setarg  0x000034f5 
+ 00013373  0x0000236c store  0x00000002 , 0x000041f3 
+ 00013374  0x0000236d setarg  0x000034f4 
+ 00013375  0x0000236e store  0x00000002 , 0x000041ef 
+ 00013376  0x0000236f setarg  0x0000347e 
+ 00013377  0x00002370 store  0x00000002 , 0x000041f5 
+ 00013378  0x00002371 setarg  0x000034b2 
+ 00013379  0x00002372 store  0x00000002 , 0x000041fd 
+ 00013380  0x00002373 setarg  0x00003465 
+ 00013381  0x00002374 store  0x00000002 , 0x000041fb 
+ 00013382  0x00002375 setarg  0x00003470 
+ 00013383  0x00002376 store  0x00000002 , 0x000041e9 
+ 00013384  0x00002377 setarg  0x00003501 
+ 00013385  0x00002378 store  0x00000002 , 0x000041f9 
+ 00013386  0x00002379 bpatch  0x000000cc , 0x00004019 
+ 00013387  0x0000237a call  0x0000359b 
+ 00013388  0x0000237b call  0x00006948 
+ 00013389  0x0000237c call  0x000035ad 
+ 00013390  0x0000237d call  0x00007d08 
+ 00013391  0x0000237e call  0x00007cd3 
+ 00013392  0x0000237f setarg  0x0000350b 
+ 00013393  0x00002380 store  0x00000002 , 0x00004766 
+ 00013394  0x00002381 setarg  0x000034fc 
+ 00013395  0x00002382 store  0x00000002 , 0x0000475d 
+ 00013396  0x00002383 setarg  0x000034f8 
+ 00013397  0x00002384 store  0x00000002 , 0x0000475f 
+ 00013398  0x00002385 setarg  0x0000346c 
+ 00013399  0x00002386 store  0x00000002 , 0x00004761 
+ 00013400  0x00002387 setarg  0x000035a2 
+ 00013401  0x00002388 store  0x00000002 , 0x000046a9 
+ 00013402  0x00002389 setarg  0x000035a4 
+ 00013403  0x0000238a store  0x00000002 , 0x000046ab 
+ 00013404  0x0000238b setarg  0x000035a9 
+ 00013405  0x0000238c store  0x00000002 , 0x000046b4 
+ 00013406  0x0000238d setarg  0x000035a6 
+ 00013407  0x0000238e store  0x00000002 , 0x000046b6 
+ 00013408  0x0000238f fetch  0x00000002 , 0x00004682 
+ 00013409  0x00002390 rtnbit1  0x0000000c 
+ 00013410  0x00002391 branch  0x0000340a 
+ 00013411  0x00002394 call  0x00003586 
+ 00013412  0x00002395 branch  0x0000340a 
+ 00013413  0x00002398 call  0x00005892 
+ 00013414  0x00002399 nrtn  0x00000034 
+ 00013415  0x0000239a arg  0x00000b06 , 0x00000011 
+ 00013416  0x0000239b call  0x00007e54 
+ 00013417  0x0000239c nrtn  0x00000028 
+ 00013418  0x0000239d arg  0x00000b06 , 0x00000006 
+ 00013419  0x0000239e branch  0x00004746 
+ 00013420  0x000023a1 fetch  0x00000002 , 0x00004797 
+ 00013421  0x000023a2 store  0x00000002 , 0x00004791 
+ 00013422  0x000023a3 jam  0x00000001 , 0x00004753 
+ 00013423  0x000023a4 branch  0x0000358f 
+ 00013424  0x000023a7 fetch  0x00000001 , 0x0000479d 
+ 00013425  0x000023a8 beq  0x00000001 , 0x00003479 
+ 00013426  0x000023a9 fetch  0x00000002 , 0x00004682 
+ 00013427  0x000023aa bbit0  0x00000009 , 0x00003479 
+ 00013428  0x000023ab fetch  0x00000001 , 0x0000479e 
+ 00013429  0x000023ac beq  0x00000001 , 0x000033d0 
+ 00013430  0x000023ad fetch  0x00000001 , 0x00004700 
+ 00013431  0x000023ae nbranch  0x000033d0 , 0x00000034 
+ 00013432  0x000023af branch  0x000033d2 
+ 00013433  0x000023b2 fetch  0x00000001 , 0x0000479b 
+ 00013434  0x000023b3 fetcht  0x00000001 , 0x0000479c 
+ 00013435  0x000023b4 ior  0x00000002 , 0x0000003f 
+ 00013436  0x000023b5 beq  0x00000001 , 0x000033d0 
+ 00013437  0x000023b6 branch  0x000033d2 
+ 00013438  0x000023b9 copy  0x00000013 , 0x0000003f 
+ 00013439  0x000023ba beq  0x0000002d , 0x00003431 
+ 00013440  0x000023bb beq  0x00000010 , 0x0000341a 
+ 00013441  0x000023bc beq  0x00000014 , 0x000034df 
+ 00013442  0x000023bd beq  0x00000015 , 0x000034e8 
+ 00013443  0x000023be beq  0x00000040 , 0x00003485 
+ 00013444  0x000023bf rtn 
+ 00013445  0x000023c1 fetch  0x00000002 , 0x00004509 
+ 00013446  0x000023c2 beq  0x00000001 , 0x0000348c 
+ 00013447  0x000023c4 fetch  0x00000002 , 0x000043d8 
+ 00013448  0x000023c5 branch  0x000034a2 , 0x00000034 
+ 00013449  0x000023c7 jam  0x00000002 , 0x0000478a 
+ 00013450  0x000023c8 jam  0x0000003c , 0x0000478f 
+ 00013451  0x000023c9 rtn 
+ 00013452  0x000023cc fetch  0x00000002 , 0x0000449a 
+ 00013453  0x000023cd branch  0x000034a0 , 0x00000034 
+ 00013454  0x000023cf jam  0x00000001 , 0x0000478a 
+ 00013455  0x000023d0 fetcht  0x00000002 , 0x000047b4 
+ 00013456  0x000023d1 fetch  0x00000002 , 0x00004496 
+ 00013457  0x000023d2 iadd  0x00000002 , 0x0000003f 
+ 00013458  0x000023d3 store  0x00000002 , 0x00004496 
+ 00013459  0x000023d4 copy  0x0000003f , 0x00000011 
+ 00013460  0x000023d5 fetch  0x00000002 , 0x00004498 
+ 00013461  0x000023d6 iadd  0x00000002 , 0x0000003f 
+ 00013462  0x000023d7 store  0x00000002 , 0x00004498 
+ 00013463  0x000023d8 iadd  0x00000011 , 0x0000003f 
+ 00013464  0x000023d9 rshift  0x0000003f , 0x00000002 
+ 00013465  0x000023da fetch  0x00000002 , 0x000047c0 
+ 00013466  0x000023db idiv  0x00000002 
+ 00013467  0x000023dc call  0x00007f86 
+ 00013468  0x000023dd quotient  0x0000003f 
+ 00013469  0x000023de store  0x00000002 , 0x0000449a 
+ 00013470  0x000023df jam  0x00000001 , 0x00004790 
+ 00013471  0x000023e0 rtn 
+ 00013472  0x000023e2 jam  0x00000003 , 0x0000478a 
+ 00013473  0x000023e3 rtn 
+ 00013474  0x000023e6 jam  0x00000000 , 0x00004172 
+ 00013475  0x000023e7 jam  0x00000000 , 0x00004790 
+ 00013476  0x000023e8 fetch  0x00000002 , 0x000043d6 
+ 00013477  0x000023e9 fetcht  0x00000002 , 0x000047be 
+ 00013478  0x000023ea isub  0x00000002 , 0x0000003e 
+ 00013479  0x000023eb setflag  0x00000002 , 0x00000000 , 0x00000011 
+ 00013480  0x000023ec fetch  0x00000002 , 0x000047c0 
+ 00013481  0x000023ed fetcht  0x00000002 , 0x000043d6 
+ 00013482  0x000023ee isub  0x00000002 , 0x0000003f 
+ 00013483  0x000023ef setflag  0x00000002 , 0x00000001 , 0x00000011 
+ 00013484  0x000023f0 compare  0x00000003 , 0x00000011 , 0x00000003 
+ 00013485  0x000023f1 rtn  0x00000001 
+ 00013486  0x000023f2 fetch  0x00000008 , 0x000047be 
+ 00013487  0x000023f3 store  0x00000008 , 0x00004496 
+ 00013488  0x000023f4 jam  0x00000001 , 0x00004790 
+ 00013489  0x000023f5 rtn 
+ 00013490  0x000023fa call  0x0000337b 
+ 00013491  0x000023fb call  0x000034b9 
+ 00013492  0x000023fc call  0x000034be 
+ 00013493  0x000023fd call  0x000034d5 
+ 00013494  0x000023fe call  0x000034ca 
+ 00013495  0x000023ff call  0x000034c4 
+ 00013496  0x00002400 branch  0x000034d9 
+ 00013497  0x00002404 arg  0x00004799 , 0x00000013 
+ 00013498  0x00002405 arg  0x000034bc , 0x00000012 
+ 00013499  0x00002406 branch  0x0000336d 
+ 00013500  0x00002408 jam  0x00000000 , 0x0000479a 
+ 00013501  0x00002409 rtn 
+ 00013502  0x0000240b arg  0x00004793 , 0x00000013 
+ 00013503  0x0000240c arg  0x000034c1 , 0x00000012 
+ 00013504  0x0000240d branch  0x00003374 
+ 00013505  0x0000240f arg  0x000046bf , 0x00000013 
+ 00013506  0x00002410 arg  0x0000469e , 0x00000012 
+ 00013507  0x00002411 branch  0x00003591 
+ 00013508  0x00002415 arg  0x0000478f , 0x00000013 
+ 00013509  0x00002416 arg  0x000034c7 , 0x00000012 
+ 00013510  0x00002417 branch  0x0000336d 
+ 00013511  0x0000241a fetch  0x00000002 , 0x0000449a 
+ 00013512  0x0000241b store  0x00000001 , 0x00004172 
+ 00013513  0x0000241c rtn 
+ 00013514  0x0000241e arg  0x00004790 , 0x00000013 
+ 00013515  0x0000241f arg  0x000034cd , 0x00000012 
+ 00013516  0x00002420 branch  0x0000336d 
+ 00013517  0x00002422 fetch  0x00000001 , 0x0000043f 
+ 00013518  0x00002423 compare  0x00000000 , 0x0000003f , 0x00000060 
+ 00013519  0x00002424 nbranch  0x000034d3 , 0x00000001 
+ 00013520  0x00002425 jam  0x00000001 , 0x0000478a 
+ 00013521  0x00002426 call  0x00003416 
+ 00013522  0x00002427 branch  0x00005abf 
+ 00013523  0x00002429 jam  0x00000001 , 0x00004790 
+ 00013524  0x0000242a rtn 
+ 00013525  0x0000242d arg  0x00004791 , 0x00000013 
+ 00013526  0x0000242e arg  0x000034d8 , 0x00000012 
+ 00013527  0x0000242f branch  0x00003374 
+ 00013528  0x00002433 branch  0x0000341a 
+ 00013529  0x00002438 arg  0x0000478d , 0x00000013 
+ 00013530  0x00002439 arg  0x000034dc , 0x00000012 
+ 00013531  0x0000243a branch  0x00003374 
+ 00013532  0x0000243c fetch  0x00000002 , 0x000047a7 
+ 00013533  0x0000243d store  0x00000002 , 0x0000478d 
+ 00013534  0x0000243e branch  0x000035af 
+ 00013535  0x00002442 fetch  0x00000002 , 0x000047a7 
+ 00013536  0x00002443 store  0x00000002 , 0x0000478d 
+ 00013537  0x00002444 setarg  0x00000000 
+ 00013538  0x00002445 store  0x00000002 , 0x00004793 
+ 00013539  0x00002446 store  0x00000002 , 0x00004791 
+ 00013540  0x00002447 call  0x0000355c 
+ 00013541  0x00002448 call  0x00003586 
+ 00013542  0x00002449 jam  0x00000000 , 0x00004172 
+ 00013543  0x0000244a branch  0x000033f8 
+ 00013544  0x00002450 setarg  0x00000000 
+ 00013545  0x00002451 store  0x00000004 , 0x0000478d 
+ 00013546  0x00002452 store  0x00000003 , 0x0000478a 
+ 00013547  0x00002453 store  0x00000002 , 0x00004509 
+ 00013548  0x00002455 jam  0x00000001 , 0x000047a0 
+ 00013549  0x00002456 fetch  0x00000002 , 0x00004797 
+ 00013550  0x00002457 store  0x00000002 , 0x00004791 
+ 00013551  0x00002458 call  0x00007e38 
+ 00013552  0x00002459 fetch  0x00000001 , 0x00004759 
+ 00013553  0x0000245a rtneq  0x00000000 
+ 00013554  0x0000245b call  0x0000358f 
+ 00013555  0x0000245c branch  0x0000356e 
+ 00013556  0x00002461 branch  0x00003508 
+ 00013557  0x00002465 fetch  0x00000001 , 0x00004759 
+ 00013558  0x00002466 rtnne  0x00000002 
+ 00013559  0x00002467 branch  0x00003508 
+ 00013560  0x0000246d arg  0x000046cd , 0x00000013 
+ 00013561  0x0000246e call  0x00003582 
+ 00013562  0x0000246f arg  0x000046c6 , 0x00000013 
+ 00013563  0x00002471 branch  0x00003584 
+ 00013564  0x00002474 jam  0x00000000 , 0x0000436e 
+ 00013565  0x00002475 arg  0x000046db , 0x00000013 
+ 00013566  0x00002476 call  0x00003582 
+ 00013567  0x00002477 arg  0x000046d4 , 0x00000013 
+ 00013568  0x00002478 branch  0x000034fb 
+ 00013569  0x0000247b fetch  0x00000001 , 0x00000477 
+ 00013570  0x0000247c beq  0x00000012 , 0x00003504 
+ 00013571  0x0000247d rtn 
+ 00013572  0x0000247f fetch  0x00000002 , 0x00000478 
+ 00013573  0x00002481 beq  0x0000000d , 0x00003536 
+ 00013574  0x00002482 beq  0x0000000b , 0x00003571 
+ 00013575  0x00002483 rtn 
+ 00013576  0x00002489 fetch  0x00000001 , 0x00004753 
+ 00013577  0x0000248a rtn  0x00000034 
+ 00013578  0x0000248b branch  0x00006978 
+ 00013579  0x00002490 copy  0x00000011 , 0x0000003f 
+ 00013580  0x00002491 branch  0x00003510 , 0x00000034 
+ 00013581  0x00002493 copy  0x00000007 , 0x0000003f 
+ 00013582  0x00002494 beq  0x00000000 , 0x00003513 
+ 00013583  0x00002495 rtn 
+ 00013584  0x00002497 copy  0x00000007 , 0x0000003f 
+ 00013585  0x00002498 beq  0x00000000 , 0x0000351b 
+ 00013586  0x00002499 rtn 
+ 00013587  0x0000249c jam  0x00000001 , 0x0000479d 
+ 00013588  0x0000249d arg  0x000046f7 , 0x00000013 
+ 00013589  0x0000249e call  0x00003582 
+ 00013590  0x0000249f arg  0x000046f0 , 0x00000013 
+ 00013591  0x000024a0 call  0x00003584 
+ 00013592  0x000024a1 fetch  0x00000002 , 0x00004682 
+ 00013593  0x000024a2 bbit0  0x00000009 , 0x00003532 
+ 00013594  0x000024a3 branch  0x00003521 
+ 00013595  0x000024a6 jam  0x00000000 , 0x0000479d 
+ 00013596  0x000024a7 branch  0x0000351d 
+ 00013597  0x000024ac fetch  0x00000001 , 0x0000479a 
+ 00013598  0x000024ad rtnne  0x00000001 
+ 00013599  0x000024ae jam  0x00000005 , 0x00004799 
+ 00013600  0x000024af rtn 
+ 00013601  0x000024b2 fetch  0x00000001 , 0x0000479a 
+ 00013602  0x000024b3 pincrease  0x00000001 
+ 00013603  0x000024b4 store  0x00000001 , 0x0000479a 
+ 00013604  0x000024b5 beq  0x00000001 , 0x00003527 
+ 00013605  0x000024b6 beq  0x00000002 , 0x0000352b 
+ 00013606  0x000024b7 rtn 
+ 00013607  0x000024b9 call  0x0000355c 
+ 00013608  0x000024ba jam  0x00000001 , 0x00004771 
+ 00013609  0x000024bb arg  0x0000476c , 0x00000013 
+ 00013610  0x000024bc branch  0x00003544 
+ 00013611  0x000024be jam  0x00000000 , 0x0000479a 
+ 00013612  0x000024bf jam  0x00000002 , 0x00004771 
+ 00013613  0x000024c0 arg  0x0000476c , 0x00000013 
+ 00013614  0x000024c1 call  0x00003544 
+ 00013615  0x000024c2 fetch  0x00000001 , 0x0000479e 
+ 00013616  0x000024c3 beq  0x00000001 , 0x00003551 
+ 00013617  0x000024c4 rtn 
+ 00013618  0x000024c7 fetch  0x00000002 , 0x00004797 
+ 00013619  0x000024c8 store  0x00000002 , 0x00004791 
+ 00013620  0x000024c9 call  0x0000355c 
+ 00013621  0x000024ca branch  0x0000358f 
+ 00013622  0x000024ce bpatch  0x000000cd , 0x00004019 
+ 00013623  0x000024cf call  0x000036fc 
+ 00013624  0x000024d0 ifetch  0x00000001 , 0x00000011 
+ 00013625  0x000024d1 beq  0x00000003 , 0x0000353c 
+ 00013626  0x000024d2 beq  0x00000007 , 0x00003540 
+ 00013627  0x000024d3 rtn 
+ 00013628  0x000024d6 fetch  0x00000001 , 0x0000479e 
+ 00013629  0x000024d7 beq  0x00000000 , 0x00003551 
+ 00013630  0x000024d8 beq  0x00000001 , 0x0000355c 
+ 00013631  0x000024d9 rtn 
+ 00013632  0x000024dc ifetch  0x00000001 , 0x00000012 
+ 00013633  0x000024dd beq  0x00000001 , 0x00003564 
+ 00013634  0x000024de beq  0x00000000 , 0x00003569 
+ 00013635  0x000024df rtn 
+ 00013636  0x000024e7 bpatch  0x000000ce , 0x00004019 
+ 00013637  0x000024e8 fetch  0x00000001 , 0x0000478b 
+ 00013638  0x000024e9 isolate1  0x00000000 , 0x0000003f 
+ 00013639  0x000024ea nrtn  0x00000001 
+ 00013640  0x000024eb add  0x00000013 , 0x00000006 , 0x00000006 
+ 00013641  0x000024ec ifetch  0x00000002 , 0x00000006 
+ 00013642  0x000024ed byteswap  0x0000003f , 0x0000003f 
+ 00013643  0x000024ee add  0x0000003f , 0x00000005 , 0x00000039 
+ 00013644  0x000024ef add  0x00000013 , 0x00000003 , 0x00000006 
+ 00013645  0x000024f0 call  0x000036f0 
+ 00013646  0x000024f1 istore  0x00000001 , 0x00000006 
+ 00013647  0x000024f2 copy  0x00000013 , 0x00000011 
+ 00013648  0x000024f3 branch  0x00007e3d 
+ 00013649  0x000024fa fetch  0x00000001 , 0x00004759 
+ 00013650  0x000024fb rtn  0x00000034 
+ 00013651  0x000024fc jam  0x00000001 , 0x0000479e 
+ 00013652  0x000024fd arg  0x000046e9 , 0x00000013 
+ 00013653  0x000024fe call  0x00003582 
+ 00013654  0x000024ff arg  0x000046e2 , 0x00000013 
+ 00013655  0x00002500 call  0x00003584 
+ 00013656  0x00002501 jam  0x00000004 , 0x00004780 
+ 00013657  0x00002502 jam  0x00000001 , 0x00004783 
+ 00013658  0x00002503 arg  0x0000477b , 0x00000013 
+ 00013659  0x00002504 branch  0x00003544 
+ 00013660  0x00002506 fetch  0x00000001 , 0x0000479e 
+ 00013661  0x00002507 rtn  0x00000034 
+ 00013662  0x00002508 jam  0x00000000 , 0x0000479e 
+ 00013663  0x00002509 call  0x00003586 
+ 00013664  0x0000250a jam  0x00000004 , 0x00004780 
+ 00013665  0x0000250b jam  0x00000000 , 0x00004783 
+ 00013666  0x0000250c arg  0x0000477b , 0x00000013 
+ 00013667  0x0000250d branch  0x00003544 
+ 00013668  0x00002510 jam  0x00000001 , 0x0000479f 
+ 00013669  0x00002511 jam  0x00000007 , 0x00004780 
+ 00013670  0x00002512 jam  0x00000001 , 0x00004783 
+ 00013671  0x00002513 arg  0x0000477b , 0x00000013 
+ 00013672  0x00002514 branch  0x00003544 
+ 00013673  0x00002516 jam  0x00000000 , 0x0000479f 
+ 00013674  0x00002517 jam  0x00000007 , 0x00004780 
+ 00013675  0x00002518 jam  0x00000000 , 0x00004783 
+ 00013676  0x00002519 arg  0x0000477b , 0x00000013 
+ 00013677  0x0000251a branch  0x00003544 
+ 00013678  0x0000251c fetch  0x00000001 , 0x0000479f 
+ 00013679  0x0000251d rtn  0x00000034 
+ 00013680  0x0000251e branch  0x00003551 
+ 00013681  0x00002521 ifetch  0x00000002 , 0x00000011 
+ 00013682  0x00002522 store  0x00000002 , 0x0000478b 
+ 00013683  0x00002523 isolate1  0x00000000 , 0x0000003f 
+ 00013684  0x00002524 nrtn  0x00000001 
+ 00013685  0x00002525 fetch  0x00000001 , 0x000047a0 
+ 00013686  0x00002526 rtn  0x00000034 
+ 00013687  0x00002527 jam  0x00000000 , 0x000047a0 
+ 00013688  0x00002528 fetch  0x00000008 , 0x000047b6 
+ 00013689  0x00002529 store  0x00000008 , 0x00004496 
+ 00013690  0x0000252a jam  0x00000002 , 0x00004790 
+ 00013691  0x0000252b call  0x000035af 
+ 00013692  0x0000252c call  0x000035b9 
+ 00013693  0x0000252d jam  0x00000007 , 0x00004780 
+ 00013694  0x0000252e fetch  0x00000001 , 0x0000479f 
+ 00013695  0x0000252f store  0x00000001 , 0x00004783 
+ 00013696  0x00002530 arg  0x0000477b , 0x00000013 
+ 00013697  0x00002531 branch  0x00003544 
+ 00013698  0x00002536 arg  0x00000001 , 0x00000011 
+ 00013699  0x00002537 branch  0x00003585 
+ 00013700  0x00002539 arg  0x00000000 , 0x00000011 
+ 00013701  0x0000253b branch  0x0000358c 
+ 00013702  0x0000253e arg  0x00000000 , 0x00000011 
+ 00013703  0x0000253f call  0x00007d19 
+ 00013704  0x00002540 arg  0x00000001 , 0x00000011 
+ 00013705  0x00002541 call  0x00007d19 
+ 00013706  0x00002542 fetch  0x00000001 , 0x000047a1 
+ 00013707  0x00002543 branch  0x000069d7 
+ 00013708  0x00002546 call  0x00007d04 
+ 00013709  0x00002547 arg  0x00000007 , 0x00000039 
+ 00013710  0x00002548 branch  0x00007d26 
+ 00013711  0x0000254d arg  0x000046b8 , 0x00000013 
+ 00013712  0x0000254e arg  0x0000469a , 0x00000012 
+ 00013713  0x00002550 call  0x00003596 
+ 00013714  0x00002551 call  0x00003584 
+ 00013715  0x00002552 fetch  0x00000002 , 0x00004795 
+ 00013716  0x00002553 store  0x00000002 , 0x00004793 
+ 00013717  0x00002554 branch  0x000033fa 
+ 00013718  0x00002557 ifetch  0x00000002 , 0x00000012 
+ 00013719  0x00002558 store  0x00000002 , 0x00004154 
+ 00013720  0x00002559 ifetch  0x00000002 , 0x00000006 
+ 00013721  0x0000255a store  0x00000002 , 0x00004482 
+ 00013722  0x0000255b rtn 
+ 00013723  0x0000255e arg  0x00000000 , 0x00000011 
+ 00013724  0x0000255f call  0x000069a6 
+ 00013725  0x00002560 fetch  0x00000006 , 0x000047a1 
+ 00013726  0x00002561 store  0x00000006 , 0x00000a9a 
+ 00013727  0x00002562 call  0x000069ae 
+ 00013728  0x00002563 fetch  0x00000001 , 0x000047a1 
+ 00013729  0x00002564 branch  0x000069d7 
+ 00013730  0x00002567 jam  0x00000001 , 0x0000479b 
+ 00013731  0x00002568 rtn 
+ 00013732  0x0000256a jam  0x00000000 , 0x0000479b 
+ 00013733  0x0000256b rtn 
+ 00013734  0x00002570 jam  0x00000000 , 0x0000479c 
+ 00013735  0x00002571 fetch  0x00000001 , 0x000047a1 
+ 00013736  0x00002572 branch  0x000069d7 
+ 00013737  0x00002575 jam  0x00000001 , 0x0000479c 
+ 00013738  0x00002576 fetch  0x00000006 , 0x000047a1 
+ 00013739  0x00002577 store  0x00000006 , 0x00000a9a 
+ 00013740  0x00002578 branch  0x000069ae 
+ 00013741  0x0000257d jam  0x00000000 , 0x0000422d 
+ 00013742  0x0000257e branch  0x000068a8 
+ 00013743  0x00002581 call  0x000068eb 
+ 00013744  0x00002582 call  0x00006908 
+ 00013745  0x00002583 store  0x00000002 , 0x000047b0 
+ 00013746  0x00002584 arg  0x000047aa , 0x00000011 
+ 00013747  0x00002585 call  0x00006930 
+ 00013748  0x00002586 store  0x00000001 , 0x000047a9 
+ 00013749  0x00002587 beq  0x00000000 , 0x000035be 
+ 00013750  0x00002588 sub  0x0000003f , 0x00000064 , 0x0000003e 
+ 00013751  0x00002589 nbranch  0x000035bc , 0x00000002 
+ 00013752  0x0000258a store  0x00000001 , 0x00004783 
+ 00013753  0x0000258c jam  0x00000005 , 0x00004780 
+ 00013754  0x0000258d arg  0x0000477b , 0x00000013 
+ 00013755  0x0000258e branch  0x00003544 
+ 00013756  0x00002590 jam  0x00000064 , 0x00004783 
+ 00013757  0x00002591 branch  0x000035b9 
+ 00013758  0x00002594 branch  0x0000341a 
+ 00013759  0x00002599 rtn  0x0000002b 
+ 00013760  0x0000259a hfetch  0x00000001 , 0x00008081 
+ 00013761  0x0000259b and_into  0x000000f0 , 0x0000003f 
+ 00013762  0x0000259c hstore  0x00000001 , 0x00008081 
+ 00013763  0x0000259d setarg  0x00003631 
+ 00013764  0x0000259e store  0x00000002 , 0x000041eb 
+ 00013765  0x000025a0 setarg  0x00003633 
+ 00013766  0x000025a1 store  0x00000002 , 0x000041ed 
+ 00013767  0x000025a3 setarg  0x0000340a 
+ 00013768  0x000025a4 store  0x00000002 , 0x000041f7 
+ 00013769  0x000025a6 setarg  0x00003635 
+ 00013770  0x000025a7 store  0x00000002 , 0x000041f3 
+ 00013771  0x000025a9 setarg  0x0000364b 
+ 00013772  0x000025aa store  0x00000002 , 0x000041f5 
+ 00013773  0x000025ac setarg  0x000033d0 
+ 00013774  0x000025ad store  0x00000002 , 0x000041e9 
+ 00013775  0x000025af setarg  0x000036f6 
+ 00013776  0x000025b0 store  0x00000002 , 0x000041f9 
+ 00013777  0x000025b2 setarg  0x0000367a 
+ 00013778  0x000025b3 store  0x00000002 , 0x000041fd 
+ 00013779  0x000025b5 call  0x00002c7a 
+ 00013780  0x000025b6 setarg  0x00003722 
+ 00013781  0x000025b7 add  0x00000013 , 0x000000de , 0x00000005 
+ 00013782  0x000025b8 istore  0x00000002 , 0x00000005 
+ 00013783  0x000025ba setarg  0x000035ed 
+ 00013784  0x000025bb store  0x00000002 , 0x0000475b 
+ 00013785  0x000025bd setarg  0x000035ef 
+ 00013786  0x000025be store  0x00000002 , 0x0000475f 
+ 00013787  0x000025c0 bpatch  0x000000cf , 0x00004019 
+ 00013788  0x000025c1 call  0x00003628 
+ 00013789  0x000025c2 call  0x00007e38 
+ 00013790  0x000025c3 jam  0x00000002 , 0x00004172 
+ 00013791  0x000025c4 jam  0x00000000 , 0x000049f6 
+ 00013792  0x000025c5 fetch  0x00000001 , 0x000047cb 
+ 00013793  0x000025c6 store  0x00000001 , 0x0000469a 
+ 00013794  0x000025c7 beq  0x00000000 , 0x000035ee 
+ 00013795  0x000025c8 fetch  0x00000001 , 0x000047cc 
+ 00013796  0x000025c9 store  0x00000001 , 0x00004686 
+ 00013797  0x000025ca jam  0x00000000 , 0x0000436e 
+ 00013798  0x000025cc call  0x0000360f 
+ 00013799  0x000025cd call  0x00007cd3 
+ 00013800  0x000025ce call  0x00007cdd 
+ 00013801  0x000025cf jam  0x00000001 , 0x000047f3 
+ 00013802  0x000025d0 fetch  0x00000002 , 0x00004682 
+ 00013803  0x000025d1 rtnbit1  0x0000000c 
+ 00013804  0x000025d2 branch  0x0000340a 
+ 00013805  0x000025d5 branch  0x0000360f 
+ 00013806  0x000025d8 jam  0x00000002 , 0x000047f3 
+ 00013807  0x000025da jam  0x00000001 , 0x0000436e 
+ 00013808  0x000025db call  0x0000360f 
+ 00013809  0x000025dc arg  0x00000000 , 0x00000011 
+ 00013810  0x000025dd call  0x00007d1e 
+ 00013811  0x000025df setarg  0x00000020 
+ 00013812  0x000025e0 call  0x000046f0 
+ 00013813  0x000025e2 arg  0x000043b7 , 0x00000005 
+ 00013814  0x000025e3 fetch  0x00000001 , 0x000044a0 
+ 00013815  0x000025e5 and  0x0000003f , 0x000000f0 , 0x00000002 
+ 00013816  0x000025e6 rshift4  0x00000002 , 0x00000002 
+ 00013817  0x000025e7 call  0x00003609 
+ 00013818  0x000025e8 istoret  0x00000001 , 0x00000005 
+ 00013819  0x000025e9 and  0x0000003f , 0x0000000f , 0x00000002 
+ 00013820  0x000025ea call  0x00003609 
+ 00013821  0x000025eb istoret  0x00000001 , 0x00000005 
+ 00013822  0x000025ec call  0x000057a6 
+ 00013823  0x000025ed fetcht  0x00000001 , 0x000043af 
+ 00013824  0x000025ee copy  0x00000002 , 0x00000039 
+ 00013825  0x000025ef arg  0x00004372 , 0x00000005 
+ 00013826  0x000025f0 arg  0x000043b0 , 0x00000006 
+ 00013827  0x000025f1 call  0x00007f01 
+ 00013828  0x000025f3 fetcht  0x00000001 , 0x000043af 
+ 00013829  0x000025f4 copy  0x00000002 , 0x00000039 
+ 00013830  0x000025f5 arg  0x00004392 , 0x00000005 
+ 00013831  0x000025f6 arg  0x000043b0 , 0x00000006 
+ 00013832  0x000025f7 branch  0x00007f01 
+ 00013833  0x000025f9 sub  0x00000002 , 0x00000009 , 0x0000003e 
+ 00013834  0x000025fa branch  0x0000360d , 0x00000002 
+ 00013835  0x000025fb add  0x00000002 , 0x00000037 , 0x00000002 
+ 00013836  0x000025fc rtn 
+ 00013837  0x000025fe add  0x00000002 , 0x00000030 , 0x00000002 
+ 00013838  0x000025ff rtn 
+ 00013839  0x00002602 fetch  0x00000001 , 0x000047c0 
+ 00013840  0x00002603 bne  0x000000ff , 0x00003621 
+ 00013841  0x00002605 fetch  0x00000001 , 0x000047be 
+ 00013842  0x00002606 bne  0x000000ff , 0x00003624 
+ 00013843  0x00002608 fetch  0x00000001 , 0x000047c9 
+ 00013844  0x00002609 bne  0x000000ff , 0x00003626 
+ 00013845  0x0000260b fetch  0x00000001 , 0x0000472c 
+ 00013846  0x0000260c copy  0x0000003f , 0x00000039 
+ 00013847  0x0000260d setarg  0x0000472d 
+ 00013848  0x0000260e copy  0x0000003f , 0x00000011 
+ 00013849  0x00002610 copy  0x00000011 , 0x00000006 
+ 00013850  0x00002611 ifetch  0x00000001 , 0x00000006 
+ 00013851  0x00002612 copy  0x00000006 , 0x00000011 
+ 00013852  0x00002613 beq  0x000000ff , 0x0000361f 
+ 00013853  0x00002614 copy  0x0000003f , 0x00000002 
+ 00013854  0x00002615 call  0x0000680e 
+ 00013855  0x00002617 loop  0x00003619 
+ 00013856  0x00002619 rtn 
+ 00013857  0x0000261b fetch  0x00000008 , 0x000047c0 
+ 00013858  0x0000261c store  0x00000008 , 0x0000472f 
+ 00013859  0x0000261d branch  0x00003611 
+ 00013860  0x0000261f store  0x00000001 , 0x0000472d 
+ 00013861  0x00002620 branch  0x00003613 
+ 00013862  0x00002622 store  0x00000001 , 0x0000472e 
+ 00013863  0x00002623 branch  0x00003615 
+ 00013864  0x00002627 arg  0x00000000 , 0x00000011 
+ 00013865  0x00002628 call  0x000069a6 
+ 00013866  0x00002629 call  0x000037e4 
+ 00013867  0x0000262a call  0x00002c7d 
+ 00013868  0x0000262b branch  0x0000362d 
+ 00013869  0x0000262e jam  0x00000064 , 0x000047cf 
+ 00013870  0x0000262f fetch  0x00000001 , 0x000047c9 
+ 00013871  0x00002630 store  0x00000001 , 0x00004744 
+ 00013872  0x00002631 branch  0x000068a8 
+ 00013873  0x00002634 call  0x00006835 
+ 00013874  0x00002635 branch  0x0000696c 
+ 00013875  0x00002638 branch  0x0000696c 
+ 00013876  0x0000263d branch  0x00006978 
+ 00013877  0x00002640 call  0x00003642 
+ 00013878  0x00002641 call  0x000037ee 
+ 00013879  0x00002642 call  0x00003639 
+ 00013880  0x00002643 branch  0x00003634 
+ 00013881  0x00002646 fetch  0x00000002 , 0x00004682 
+ 00013882  0x00002647 rtnbit1  0x00000009 
+ 00013883  0x00002648 fetch  0x00000001 , 0x000049f6 
+ 00013884  0x00002649 beq  0x00000001 , 0x0000363e 
+ 00013885  0x0000264a rtn 
+ 00013886  0x0000264c fetch  0x00000001 , 0x000047ea 
+ 00013887  0x0000264d rtneq  0x00000001 
+ 00013888  0x0000264e jam  0x00000001 , 0x000047ea 
+ 00013889  0x0000264f branch  0x00003654 
+ 00013890  0x00002652 fetch  0x00000002 , 0x00004682 
+ 00013891  0x00002653 rtnbit0  0x00000009 
+ 00013892  0x00002654 call  0x00005892 
+ 00013893  0x00002655 nrtn  0x00000034 
+ 00013894  0x00002656 arg  0x00004718 , 0x00000011 
+ 00013895  0x00002657 call  0x00007e54 
+ 00013896  0x00002658 nrtn  0x00000028 
+ 00013897  0x00002659 arg  0x00004718 , 0x00000006 
+ 00013898  0x0000265a branch  0x00004746 
+ 00013899  0x0000265d copy  0x00000013 , 0x0000003f 
+ 00013900  0x0000265e beq  0x0000002d , 0x00003431 
+ 00013901  0x0000265f beq  0x00000010 , 0x0000341a 
+ 00013902  0x00002660 beq  0x00000014 , 0x00003651 
+ 00013903  0x00002661 beq  0x00000015 , 0x00003660 
+ 00013904  0x00002662 rtn 
+ 00013905  0x00002665 setarg  0x00000000 
+ 00013906  0x00002666 call  0x00003220 
+ 00013907  0x00002667 branch  0x00003656 
+ 00013908  0x00002669 fetch  0x00000002 , 0x000047eb 
+ 00013909  0x0000266a store  0x00000002 , 0x000047ed 
+ 00013910  0x0000266c jam  0x00000014 , 0x000047ce 
+ 00013911  0x0000266d jam  0x00000000 , 0x00004091 
+ 00013912  0x0000266e call  0x000033f8 
+ 00013913  0x0000266f call  0x00003416 
+ 00013914  0x00002670 fetch  0x00000001 , 0x000047bd 
+ 00013915  0x00002671 beq  0x00000001 , 0x0000365e 
+ 00013916  0x00002673 arg  0x00000000 , 0x00000011 
+ 00013917  0x00002674 branch  0x00007d14 
+ 00013918  0x00002676 arg  0x00000000 , 0x00000011 
+ 00013919  0x00002677 branch  0x00007d19 
+ 00013920  0x0000267a setarg  0x00000002 
+ 00013921  0x0000267b call  0x00003220 
+ 00013922  0x0000267d setarg  0x00000000 
+ 00013923  0x0000267e store  0x00000005 , 0x0000479c 
+ 00013924  0x0000267f setarg  0x00000004 
+ 00013925  0x00002680 call  0x000069d7 
+ 00013926  0x00002681 setarg  0x00000005 
+ 00013927  0x00002682 call  0x000069d7 
+ 00013928  0x00002683 setarg  0x00000014 
+ 00013929  0x00002684 call  0x000069d7 
+ 00013930  0x00002685 setarg  0x00000015 
+ 00013931  0x00002686 call  0x000069d7 
+ 00013932  0x00002687 setarg  0x00000016 
+ 00013933  0x00002688 call  0x000069d7 
+ 00013934  0x00002689 setarg  0x00000007 
+ 00013935  0x0000268a call  0x000069d7 
+ 00013936  0x0000268b call  0x00007e38 
+ 00013937  0x0000268c jam  0x0000000a , 0x0000475e 
+ 00013938  0x0000268d jam  0x0000000a , 0x00004760 
+ 00013939  0x0000268e jam  0x0000000a , 0x00004762 
+ 00013940  0x00002690 jam  0x00000002 , 0x00004172 
+ 00013941  0x00002691 arg  0x00000000 , 0x00000011 
+ 00013942  0x00002692 call  0x00007d1e 
+ 00013943  0x00002694 setarg  0x00000020 
+ 00013944  0x00002695 call  0x000046f0 
+ 00013945  0x00002696 branch  0x000033fa 
+ 00013946  0x0000269a call  0x0000373b 
+ 00013947  0x0000269b call  0x0000373e 
+ 00013948  0x0000269c call  0x00003741 
+ 00013949  0x0000269d call  0x0000337b 
+ 00013950  0x0000269e call  0x000036c8 
+ 00013951  0x0000269f call  0x000036a1 
+ 00013952  0x000026a0 call  0x0000368a 
+ 00013953  0x000026a1 call  0x00003683 
+ 00013954  0x000026a2 branch  0x0000368f 
+ 00013955  0x000026a5 arg  0x0000479a , 0x00000013 
+ 00013956  0x000026a6 arg  0x00003686 , 0x00000012 
+ 00013957  0x000026a7 branch  0x0000336d 
+ 00013958  0x000026a9 call  0x00003847 
+ 00013959  0x000026aa nrtn  0x00000001 
+ 00013960  0x000026ab jam  0x00000001 , 0x0000479b 
+ 00013961  0x000026ac rtn 
+ 00013962  0x000026af arg  0x000047ed , 0x00000013 
+ 00013963  0x000026b0 arg  0x0000368d , 0x00000012 
+ 00013964  0x000026b1 branch  0x00003374 
+ 00013965  0x000026b3 jam  0x00000002 , 0x000047ea 
+ 00013966  0x000026b4 branch  0x00003662 
+ 00013967  0x000026b7 arg  0x000047f1 , 0x00000013 
+ 00013968  0x000026b8 arg  0x00003692 , 0x00000012 
+ 00013969  0x000026b9 branch  0x0000336d 
+ 00013970  0x000026bb fetch  0x00000001 , 0x000047f2 
+ 00013971  0x000026bc branch  0x0000369e , 0x00000034 
+ 00013972  0x000026bd jam  0x00000002 , 0x000047f1 
+ 00013973  0x000026be jam  0x00000000 , 0x000047f2 
+ 00013974  0x000026bf setarg  0x00000a02 
+ 00013975  0x000026c0 store  0x00000002 , 0x00004752 
+ 00013976  0x000026c1 fetch  0x00000001 , 0x000047b9 
+ 00013977  0x000026c2 beq  0x00000003 , 0x0000369b 
+ 00013978  0x000026c4 branch  0x00003762 
+ 00013979  0x000026c6 setarg  0x00000a02 
+ 00013980  0x000026c7 store  0x00000002 , 0x00004754 
+ 00013981  0x000026c8 branch  0x00003762 
+ 00013982  0x000026ca setarg  0x00000000 
+ 00013983  0x000026cb store  0x00000004 , 0x00004752 
+ 00013984  0x000026cc branch  0x00003762 
+ 00013985  0x000026cf fetch  0x00000001 , 0x000047c8 
+ 00013986  0x000026d0 rtn  0x00000034 
+ 00013987  0x000026d1 fetch  0x00000002 , 0x00004682 
+ 00013988  0x000026d2 bbit0  0x00000009 , 0x000036c6 
+ 00013989  0x000026d3 arg  0x000047ce , 0x00000013 
+ 00013990  0x000026d4 arg  0x000036a8 , 0x00000012 
+ 00013991  0x000026d5 branch  0x0000336d 
+ 00013992  0x000026d7 fetch  0x00000001 , 0x000047cd 
+ 00013993  0x000026d8 store  0x00000001 , 0x000047ce 
+ 00013994  0x000026d9 fetch  0x00000001 , 0x000047d1 
+ 00013995  0x000026da nrtn  0x00000034 
+ 00013996  0x000026dc call  0x000068eb 
+ 00013997  0x000026dd call  0x00006908 
+ 00013998  0x000026de store  0x00000002 , 0x000047e8 
+ 00013999  0x000026df arg  0x000047e2 , 0x00000011 
+ 00014000  0x000026e0 call  0x00006930 
+ 00014001  0x000026e1 fetcht  0x00000001 , 0x000047cf 
+ 00014002  0x000026e2 isub  0x00000002 , 0x0000003e 
+ 00014003  0x000026e3 branch  0x000036b6 , 0x00000002 
+ 00014004  0x000026e4 store  0x00000001 , 0x000047cf 
+ 00014005  0x000026e5 copy  0x0000003f , 0x00000002 
+ 00014006  0x000026e7 storet  0x00000001 , 0x000047d0 
+ 00014007  0x000026e8 fetch  0x00000001 , 0x000047ca 
+ 00014008  0x000026e9 isub  0x00000002 , 0x0000003e 
+ 00014009  0x000026ea call  0x000036c1 , 0x00000002 
+ 00014010  0x000026eb storet  0x00000001 , 0x000047db 
+ 00014011  0x000026ec arg  0x00000006 , 0x00000039 
+ 00014012  0x000026ed arg  0x000047d6 , 0x00000006 
+ 00014013  0x000026ee call  0x000036f0 
+ 00014014  0x000026ef store  0x00000001 , 0x000047dc 
+ 00014015  0x000026f0 arg  0x000047d3 , 0x00000011 
+ 00014016  0x000026f1 branch  0x00007e3d 
+ 00014017  0x000026f3 fetch  0x00000001 , 0x000047d2 
+ 00014018  0x000026f4 nrtn  0x00000034 
+ 00014019  0x000026f5 jam  0x00000001 , 0x000047d2 
+ 00014020  0x000026f6 arg  0x00000001 , 0x00000011 
+ 00014021  0x000026f7 branch  0x00007d1e 
+ 00014022  0x000026f9 arg  0x00000001 , 0x00000011 
+ 00014023  0x000026fa branch  0x00007d19 
+ 00014024  0x000026fd arg  0x000047a4 , 0x00000013 
+ 00014025  0x000026fe arg  0x000036cb , 0x00000012 
+ 00014026  0x000026ff branch  0x0000336d 
+ 00014027  0x00002701 jam  0x00000005 , 0x000047a4 
+ 00014028  0x00002702 jam  0x00000000 , 0x000047a6 
+ 00014029  0x00002703 fetch  0x00000001 , 0x000047a5 
+ 00014030  0x00002704 beq  0x00000001 , 0x000036ee 
+ 00014031  0x00002705 beq  0x00000000 , 0x000036ec 
+ 00014032  0x00002707 arg  0x0000479c , 0x00000006 
+ 00014033  0x00002708 copy  0x00000006 , 0x00000011 
+ 00014034  0x00002709 arg  0x00000008 , 0x00000039 
+ 00014035  0x0000270b copy  0x00000011 , 0x00000006 
+ 00014036  0x0000270c ifetch  0x00000001 , 0x00000006 
+ 00014037  0x0000270d copy  0x00000006 , 0x00000011 
+ 00014038  0x0000270e beq  0x00000000 , 0x000036e3 
+ 00014039  0x0000270f beq  0x00000001 , 0x000036e6 
+ 00014040  0x00002710 beq  0x00000002 , 0x000036e9 
+ 00014041  0x00002712 fetch  0x00000001 , 0x000047a6 
+ 00014042  0x00002713 increase  0x00000001 , 0x0000003f 
+ 00014043  0x00002714 store  0x00000001 , 0x000047a6 
+ 00014044  0x00002715 loop  0x000036d3 
+ 00014045  0x00002716 rtn 
+ 00014046  0x00002718 fetch  0x00000001 , 0x000047a6 
+ 00014047  0x00002719 arg  0x000047c0 , 0x00000012 
+ 00014048  0x0000271a iadd  0x00000012 , 0x00000012 
+ 00014049  0x0000271b ifetcht  0x00000001 , 0x00000012 
+ 00014050  0x0000271c rtn 
+ 00014051  0x0000271e call  0x000036de 
+ 00014052  0x0000271f call  0x00006825 
+ 00014053  0x00002720 branch  0x000036d9 
+ 00014054  0x00002722 call  0x000036de 
+ 00014055  0x00002723 call  0x00006829 
+ 00014056  0x00002724 branch  0x000036d9 
+ 00014057  0x00002726 fetch  0x00000001 , 0x000047a5 
+ 00014058  0x00002727 beq  0x00000001 , 0x000036e3 
+ 00014059  0x00002728 branch  0x000036e6 
+ 00014060  0x0000272a jam  0x00000001 , 0x000047a5 
+ 00014061  0x0000272b branch  0x000036d0 
+ 00014062  0x0000272d jam  0x00000000 , 0x000047a5 
+ 00014063  0x0000272e branch  0x000036d0 
+ 00014064  0x00002733 arg  0x00000000 , 0x00000011 
+ 00014065  0x00002735 ifetch  0x00000001 , 0x00000006 
+ 00014066  0x00002736 iadd  0x00000011 , 0x00000011 
+ 00014067  0x00002737 loop  0x000036f1 
+ 00014068  0x00002739 and  0x00000011 , 0x000000ff , 0x0000003f 
+ 00014069  0x0000273a rtn 
+ 00014070  0x0000273d fetch  0x00000001 , 0x00000477 
+ 00014071  0x0000273e beq  0x00000012 , 0x000036f9 
+ 00014072  0x0000273f rtn 
+ 00014073  0x00002741 fetch  0x00000002 , 0x00000478 
+ 00014074  0x00002742 beq  0x00000014 , 0x00003710 
+ 00014075  0x00002743 rtn 
+ 00014076  0x00002750 bpatch  0x000000d0 , 0x0000401a 
+ 00014077  0x00002751 ifetch  0x00000005 , 0x00000011 
+ 00014078  0x00002752 store  0x00000005 , 0x00000b12 
+ 00014079  0x00002753 fetch  0x00000002 , 0x00000b12 
+ 00014080  0x00002754 arg  0x00006b5a , 0x00000002 
+ 00014081  0x00002755 isub  0x00000002 , 0x0000003e 
+ 00014082  0x00002756 nrtn  0x00000005 
+ 00014083  0x00002757 fetch  0x00000002 , 0x00000b15 
+ 00014084  0x00002758 byteswap  0x0000003f , 0x0000003f 
+ 00014085  0x00002759 store  0x00000002 , 0x00000b15 
+ 00014086  0x0000275a copy  0x0000003f , 0x00000039 
+ 00014087  0x0000275b increase  0x00000005 , 0x00000011 
+ 00014088  0x0000275c copy  0x00000011 , 0x00000006 
+ 00014089  0x0000275d arg  0x00000b17 , 0x00000005 
+ 00014090  0x0000275e call  0x00007f01 
+ 00014091  0x0000275f ifetch  0x00000001 , 0x00000006 
+ 00014092  0x00002760 store  0x00000001 , 0x00000b21 
+ 00014093  0x00002761 arg  0x00000b14 , 0x00000011 
+ 00014094  0x00002762 arg  0x00000b17 , 0x00000012 
+ 00014095  0x00002763 rtn 
+ 00014096  0x00002766 setarg  0x00000000 
+ 00014097  0x00002767 store  0x00000005 , 0x00004752 
+ 00014098  0x00002768 store  0x00000005 , 0x00004757 
+ 00014099  0x00002769 call  0x000036fc 
+ 00014100  0x0000276a copy  0x00000012 , 0x00000006 
+ 00014101  0x0000276b arg  0x00004752 , 0x00000005 
+ 00014102  0x0000276c arg  0x0000000a , 0x00000039 
+ 00014103  0x0000276d call  0x00007f01 
+ 00014104  0x0000276f bpatch  0x000000d1 , 0x0000401a 
+ 00014105  0x00002770 ifetch  0x00000001 , 0x00000011 
+ 00014106  0x00002771 beq  0x00000002 , 0x0000374a 
+ 00014107  0x00002772 beq  0x00000003 , 0x0000375c 
+ 00014108  0x00002773 beq  0x00000004 , 0x00003762 
+ 00014109  0x00002774 beq  0x00000005 , 0x00003762 
+ 00014110  0x00002775 beq  0x00000006 , 0x000037b1 
+ 00014111  0x00002776 beq  0x00000007 , 0x00003849 
+ 00014112  0x00002777 beq  0x00000008 , 0x0000384c 
+ 00014113  0x00002778 rtn 
+ 00014114  0x0000277b fetch  0x00000002 , 0x00004682 
+ 00014115  0x0000277c rtnbit1  0x00000009 
+ 00014116  0x0000277e fetch  0x00000002 , 0x000047eb 
+ 00014117  0x0000277f store  0x00000002 , 0x000047ed 
+ 00014118  0x00002781 jam  0x00000001 , 0x000049f6 
+ 00014119  0x00002783 setarg  0x0000010c 
+ 00014120  0x00002784 call  0x000032cd 
+ 00014121  0x00002785 call  0x00003710 
+ 00014122  0x00002787 fetch  0x00000001 , 0x00000b14 
+ 00014123  0x00002788 beq  0x00000004 , 0x0000372e 
+ 00014124  0x00002789 beq  0x00000005 , 0x0000372e 
+ 00014125  0x0000278a rtn 
+ 00014126  0x0000278c fetch  0x00000001 , 0x00004752 
+ 00014127  0x0000278d ncall  0x00003735 , 0x00000034 
+ 00014128  0x0000278e fetch  0x00000001 , 0x00004754 
+ 00014129  0x0000278f ncall  0x00003737 , 0x00000034 
+ 00014130  0x00002790 fetch  0x00000001 , 0x00004756 
+ 00014131  0x00002791 ncall  0x00003739 , 0x00000034 
+ 00014132  0x00002792 rtn 
+ 00014133  0x00002795 jam  0x00000005 , 0x000049f3 
+ 00014134  0x00002796 rtn 
+ 00014135  0x00002798 jam  0x00000005 , 0x000049f4 
+ 00014136  0x00002799 rtn 
+ 00014137  0x0000279b jam  0x00000005 , 0x000049f5 
+ 00014138  0x0000279c rtn 
+ 00014139  0x0000279f arg  0x000049f3 , 0x00000013 
+ 00014140  0x000027a0 arg  0x00003744 , 0x00000012 
+ 00014141  0x000027a1 branch  0x0000336d 
+ 00014142  0x000027a3 arg  0x000049f4 , 0x00000013 
+ 00014143  0x000027a4 arg  0x00003746 , 0x00000012 
+ 00014144  0x000027a5 branch  0x0000336d 
+ 00014145  0x000027a7 arg  0x000049f5 , 0x00000013 
+ 00014146  0x000027a8 arg  0x00003748 , 0x00000012 
+ 00014147  0x000027a9 branch  0x0000336d 
+ 00014148  0x000027ac jam  0x00000000 , 0x00004752 
+ 00014149  0x000027ad branch  0x00003762 
+ 00014150  0x000027af jam  0x00000000 , 0x00004754 
+ 00014151  0x000027b0 branch  0x00003762 
+ 00014152  0x000027b2 jam  0x00000000 , 0x00004756 
+ 00014153  0x000027b3 branch  0x00003762 
+ 00014154  0x000027b9 call  0x0000374c 
+ 00014155  0x000027ba branch  0x0000374f 
+ 00014156  0x000027bc fetch  0x00000001 , 0x00004752 
+ 00014157  0x000027bd store  0x00000001 , 0x0000475f 
+ 00014158  0x000027be branch  0x00003773 
+ 00014159  0x000027c0 fetch  0x00000001 , 0x0000475e 
+ 00014160  0x000027c1 call  0x00003754 
+ 00014161  0x000027c2 fetch  0x00000001 , 0x00004753 
+ 00014162  0x000027c3 store  0x00000001 , 0x0000475d 
+ 00014163  0x000027c4 branch  0x00003770 
+ 00014164  0x000027c6 beq  0x00000002 , 0x00003758 
+ 00014165  0x000027c7 beq  0x00000003 , 0x0000375a 
+ 00014166  0x000027c8 store  0x00000001 , 0x0000475e 
+ 00014167  0x000027c9 rtn 
+ 00014168  0x000027cb jam  0x00000005 , 0x0000475e 
+ 00014169  0x000027cc rtn 
+ 00014170  0x000027ce jam  0x0000000a , 0x0000475e 
+ 00014171  0x000027cf rtn 
+ 00014172  0x000027d1 fetch  0x00000001 , 0x00004752 
+ 00014173  0x000027d2 call  0x00003754 
+ 00014174  0x000027d3 fetch  0x00000001 , 0x0000475e 
+ 00014175  0x000027d4 call  0x0000379e 
+ 00014176  0x000027d5 call  0x000037a1 
+ 00014177  0x000027d6 branch  0x000069c4 
+ 00014178  0x000027d9 fetch  0x00000001 , 0x000047f0 
+ 00014179  0x000027da nrtn  0x00000034 
+ 00014180  0x000027db fetch  0x00000006 , 0x00004752 
+ 00014181  0x000027dc store  0x00000006 , 0x0000475d 
+ 00014182  0x000027dd fetch  0x00000001 , 0x0000475e 
+ 00014183  0x000027de fetcht  0x00000001 , 0x00004760 
+ 00014184  0x000027df iand  0x00000002 , 0x0000003f 
+ 00014185  0x000027e0 fetcht  0x00000001 , 0x00004762 
+ 00014186  0x000027e1 iand  0x00000002 , 0x0000003f 
+ 00014187  0x000027e2 call  0x00003779 , 0x00000034 
+ 00014188  0x000027e3 bpatch  0x000000d2 , 0x0000401a 
+ 00014189  0x000027e4 call  0x00003770 
+ 00014190  0x000027e5 call  0x00003773 
+ 00014191  0x000027e6 branch  0x00003776 
+ 00014192  0x000027e8 arg  0x00004763 , 0x00000012 
+ 00014193  0x000027e9 arg  0x0000475d , 0x00000006 
+ 00014194  0x000027ea branch  0x0000377b 
+ 00014195  0x000027ec arg  0x0000476b , 0x00000012 
+ 00014196  0x000027ed arg  0x0000475f , 0x00000006 
+ 00014197  0x000027ee branch  0x0000377b 
+ 00014198  0x000027f0 arg  0x00004773 , 0x00000012 
+ 00014199  0x000027f1 arg  0x00004761 , 0x00000006 
+ 00014200  0x000027f2 branch  0x0000377b 
+ 00014201  0x000027f4 jam  0x00000000 , 0x000047d1 
+ 00014202  0x000027f5 rtn 
+ 00014203  0x000027f8 ifetch  0x00000001 , 0x00000006 
+ 00014204  0x000027f9 beq  0x00000000 , 0x00003787 
+ 00014205  0x000027fa beq  0x00000001 , 0x00003780 
+ 00014206  0x000027fb beq  0x00000002 , 0x00003782 
+ 00014207  0x000027fc rtn 
+ 00014208  0x000027fe jam  0x00000000 , 0x0000477b 
+ 00014209  0x000027ff branch  0x00003783 
+ 00014210  0x00002801 jam  0x00000001 , 0x0000477b 
+ 00014211  0x00002802 ifetch  0x00000001 , 0x00000006 
+ 00014212  0x00002803 store  0x00000001 , 0x0000477d 
+ 00014213  0x00002804 ifetch  0x00000008 , 0x00000012 
+ 00014214  0x00002805 branch  0x0000378c 
+ 00014215  0x00002808 ifetch  0x00000001 , 0x00000012 
+ 00014216  0x00002809 call  0x000069d7 
+ 00014217  0x0000280a increase  0x00000001 , 0x00000012 
+ 00014218  0x0000280b ifetch  0x00000001 , 0x00000012 
+ 00014219  0x0000280c branch  0x000069d7 
+ 00014220  0x0000280e store  0x00000008 , 0x0000477e 
+ 00014221  0x0000280f jam  0x00000001 , 0x000047d1 
+ 00014222  0x00002810 fetch  0x00000001 , 0x0000477b 
+ 00014223  0x00002811 beq  0x00000000 , 0x0000379a 
+ 00014224  0x00002813 fetch  0x00000001 , 0x0000477f 
+ 00014225  0x00002814 store  0x00000001 , 0x00004780 
+ 00014226  0x00002815 fetch  0x00000001 , 0x0000477e 
+ 00014227  0x00002817 call  0x000069d7 
+ 00014228  0x00002818 fetch  0x00000001 , 0x0000477d 
+ 00014229  0x00002819 call  0x0000379e 
+ 00014230  0x0000281a store  0x00000001 , 0x00004785 
+ 00014231  0x0000281b fetch  0x00000006 , 0x00004780 
+ 00014232  0x0000281c store  0x00000006 , 0x00000a9a 
+ 00014233  0x0000281d branch  0x000069ae 
+ 00014234  0x0000281f fetch  0x00000001 , 0x0000477e 
+ 00014235  0x00002820 store  0x00000001 , 0x00004780 
+ 00014236  0x00002821 fetch  0x00000001 , 0x0000477f 
+ 00014237  0x00002822 branch  0x00003793 
+ 00014238  0x00002825 mul32  0x0000003f , 0x00000005 , 0x0000003f 
+ 00014239  0x00002826 add  0x0000003f , 0x00000032 , 0x0000003f 
+ 00014240  0x00002827 rtn 
+ 00014241  0x00002829 arg  0x00002ee0 , 0x00000002 
+ 00014242  0x0000282a imul32  0x00000002 , 0x0000003f 
+ 00014243  0x0000282b div  0x0000003f , 0x00000064 
+ 00014244  0x0000282c call  0x00007f86 
+ 00014245  0x0000282d quotient  0x00000002 
+ 00014246  0x0000282e copy  0x00000002 , 0x00000011 
+ 00014247  0x0000282f setarg  0x00002ee0 
+ 00014248  0x00002830 isub  0x00000002 , 0x00000012 
+ 00014249  0x00002831 rtn 
+ 00014250  0x00002835 hfetch  0x00000001 , 0x00008082 
+ 00014251  0x00002836 set1  0x00000002 , 0x0000003f 
+ 00014252  0x00002837 hstore  0x00000001 , 0x00008082 
+ 00014253  0x00002838 setarg  0x0000009e 
+ 00014254  0x00002839 hstore  0x00000002 , 0x00008068 
+ 00014255  0x0000283a hstore  0x00000002 , 0x0000806a 
+ 00014256  0x0000283b rtn 
+ 00014257  0x0000283e fetch  0x00000001 , 0x000047f0 
+ 00014258  0x0000283f nrtn  0x00000034 
+ 00014259  0x00002840 fetch  0x00000002 , 0x00004752 
+ 00014260  0x00002841 store  0x00000002 , 0x00004787 
+ 00014261  0x00002842 fetch  0x00000001 , 0x000047ea 
+ 00014262  0x00002843 bne  0x00000001 , 0x000037b9 
+ 00014263  0x00002844 fetch  0x00000002 , 0x000044a0 
+ 00014264  0x00002845 store  0x00000002 , 0x00004787 
+ 00014265  0x00002847 bpatch  0x000000d3 , 0x0000401a 
+ 00014266  0x00002848 call  0x000037aa 
+ 00014267  0x00002849 call  0x000037dc 
+ 00014268  0x0000284a setarg  0x0000bb80 
+ 00014269  0x0000284b call  0x00002a8f 
+ 00014270  0x0000284c call  0x000037e0 
+ 00014271  0x0000284d setarg  0x00001c20 
+ 00014272  0x0000284e call  0x00002a8f 
+ 00014273  0x0000284f arg  0x00000010 , 0x00000039 
+ 00014274  0x00002851 call  0x000037dc 
+ 00014275  0x00002852 fetch  0x00000002 , 0x00004787 
+ 00014276  0x00002853 bbit1  0x00000000 , 0x000037c9 
+ 00014277  0x00002854 setarg  0x00001c20 
+ 00014278  0x00002855 call  0x00002a8f 
+ 00014279  0x00002856 call  0x000037e0 
+ 00014280  0x00002857 branch  0x000037cc 
+ 00014281  0x0000285a setarg  0x00003840 
+ 00014282  0x0000285b call  0x00002a8f 
+ 00014283  0x0000285c call  0x000037e0 
+ 00014284  0x0000285e setarg  0x00001c20 
+ 00014285  0x0000285f call  0x00002a8f 
+ 00014286  0x00002860 fetch  0x00000002 , 0x00004787 
+ 00014287  0x00002861 rshift  0x0000003f , 0x0000003f 
+ 00014288  0x00002862 store  0x00000002 , 0x00004787 
+ 00014289  0x00002863 loop  0x000037c2 
+ 00014290  0x00002865 jam  0x00000002 , 0x000047f1 
+ 00014291  0x00002866 jam  0x00000001 , 0x000047f2 
+ 00014292  0x00002867 setarg  0x00000a01 
+ 00014293  0x00002868 store  0x00000002 , 0x00004752 
+ 00014294  0x00002869 fetch  0x00000001 , 0x000047b9 
+ 00014295  0x0000286a beq  0x00000003 , 0x000037d9 
+ 00014296  0x0000286c branch  0x00003762 
+ 00014297  0x0000286e setarg  0x00000a01 
+ 00014298  0x0000286f store  0x00000002 , 0x00004754 
+ 00014299  0x00002870 branch  0x00003762 
+ 00014300  0x00002873 hfetch  0x00000001 , 0x00008085 
+ 00014301  0x00002874 or_into  0x00000040 , 0x0000003f 
+ 00014302  0x00002875 hstore  0x00000001 , 0x00008085 
+ 00014303  0x00002876 rtn 
+ 00014304  0x00002878 hfetch  0x00000001 , 0x00008085 
+ 00014305  0x00002879 and_into  0x000000bf , 0x0000003f 
+ 00014306  0x0000287a hstore  0x00000001 , 0x00008085 
+ 00014307  0x0000287b rtn 
+ 00014308  0x0000287e fetch  0x00000001 , 0x000047bb 
+ 00014309  0x0000287f rtneq  0x00000000 
+ 00014310  0x00002880 call  0x00002c65 
+ 00014311  0x00002881 fetcht  0x00000001 , 0x000047bc 
+ 00014312  0x00002882 storet  0x00000001 , 0x00004786 
+ 00014313  0x00002883 call  0x000067fb 
+ 00014314  0x00002884 call  0x00003847 
+ 00014315  0x00002885 nrtn  0x00000001 
+ 00014316  0x00002886 jam  0x00000001 , 0x0000479a 
+ 00014317  0x00002887 rtn 
+ 00014318  0x0000288a fetch  0x00000001 , 0x000047bb 
+ 00014319  0x0000288b rtneq  0x00000000 
+ 00014320  0x0000288c fetch  0x00000001 , 0x0000479b 
+ 00014321  0x0000288d nrtn  0x00000034 
+ 00014322  0x0000288e fetch  0x00000002 , 0x00004682 
+ 00014323  0x0000288f bbit1  0x00000009 , 0x000037f6 
+ 00014324  0x00002890 fetch  0x00000001 , 0x000047ea 
+ 00014325  0x00002891 rtnne  0x00000001 
+ 00014326  0x00002893 bpatch  0x000000d4 , 0x0000401a 
+ 00014327  0x00002894 call  0x00003847 
+ 00014328  0x00002895 nrtn  0x00000001 
+ 00014329  0x00002896 setarg  0x00008ca0 
+ 00014330  0x00002897 call  0x00002a8f 
+ 00014331  0x00002898 call  0x00003847 
+ 00014332  0x00002899 nrtn  0x00000001 
+ 00014333  0x0000289a call  0x0000383f 
+ 00014334  0x0000289c call  0x00003842 
+ 00014335  0x0000289d nrtn  0x00000002 
+ 00014336  0x0000289e call  0x00003847 
+ 00014337  0x0000289f branch  0x000037fe , 0x00000001 
+ 00014338  0x000028a0 arg  0x00000000 , 0x00000011 
+ 00014339  0x000028a1 arg  0x00000010 , 0x00000039 
+ 00014340  0x000028a2 call  0x0000383f 
+ 00014341  0x000028a4 call  0x00003842 
+ 00014342  0x000028a5 nrtn  0x00000002 
+ 00014343  0x000028a6 call  0x00003847 
+ 00014344  0x000028a7 nbranch  0x00003805 , 0x00000001 
+ 00014345  0x000028a8 setarg  0x00002a30 
+ 00014346  0x000028a9 call  0x00002a8f 
+ 00014347  0x000028aa call  0x00003847 
+ 00014348  0x000028ab branch  0x00003812 , 0x00000001 
+ 00014349  0x000028ad setarg  0x00000000 
+ 00014350  0x000028ae rshift  0x00000011 , 0x00000011 
+ 00014351  0x000028af ior  0x00000011 , 0x00000011 
+ 00014352  0x000028b0 loop  0x00003805 
+ 00014353  0x000028b1 branch  0x0000381b 
+ 00014354  0x000028b3 setarg  0x00008000 
+ 00014355  0x000028b4 rshift  0x00000011 , 0x00000011 
+ 00014356  0x000028b5 ior  0x00000011 , 0x00000011 
+ 00014357  0x000028b6 call  0x0000383f 
+ 00014358  0x000028b8 call  0x00003842 
+ 00014359  0x000028b9 nrtn  0x00000002 
+ 00014360  0x000028ba call  0x00003847 
+ 00014361  0x000028bb branch  0x00003816 , 0x00000001 
+ 00014362  0x000028bc loop  0x00003805 
+ 00014363  0x000028be bpatch  0x000000d5 , 0x0000401a 
+ 00014364  0x000028bf copy  0x00000011 , 0x0000003f 
+ 00014365  0x000028c0 store  0x00000002 , 0x00004789 
+ 00014366  0x000028c1 store  0x00000002 , 0x00004797 
+ 00014367  0x000028c2 fetch  0x00000001 , 0x000047ea 
+ 00014368  0x000028c3 beq  0x00000001 , 0x00003827 
+ 00014369  0x000028c5 arg  0x00000007 , 0x00000039 
+ 00014370  0x000028c6 arg  0x00004792 , 0x00000006 
+ 00014371  0x000028c7 call  0x000036f0 
+ 00014372  0x000028c8 store  0x00000001 , 0x00004799 
+ 00014373  0x000028c9 arg  0x0000478f , 0x00000011 
+ 00014374  0x000028ca branch  0x00007e3d 
+ 00014375  0x000028cd fetch  0x00000001 , 0x000047ef 
+ 00014376  0x000028ce increase  0x00000001 , 0x0000003f 
+ 00014377  0x000028cf store  0x00000001 , 0x000047ef 
+ 00014378  0x000028d0 div  0x0000003f , 0x00000002 
+ 00014379  0x000028d1 call  0x00007f86 
+ 00014380  0x000028d2 quotient  0x00000002 
+ 00014381  0x000028d3 remainder  0x0000003f 
+ 00014382  0x000028d4 nbranch  0x00003838 , 0x00000034 
+ 00014383  0x000028d6 fetch  0x00000001 , 0x000047bf 
+ 00014384  0x000028d7 isub  0x00000002 , 0x0000003e 
+ 00014385  0x000028d8 call  0x0000383d , 0x00000005 
+ 00014386  0x000028d9 arg  0x0000479c , 0x0000003f 
+ 00014387  0x000028da increase  0xffffffff , 0x00000002 
+ 00014388  0x000028db iadd  0x00000002 , 0x00000011 
+ 00014389  0x000028dc arg  0x00000000 , 0x0000003f 
+ 00014390  0x000028dd istore  0x00000001 , 0x00000011 
+ 00014391  0x000028de rtn 
+ 00014392  0x000028e0 arg  0x0000479c , 0x0000003f 
+ 00014393  0x000028e1 iadd  0x00000002 , 0x00000011 
+ 00014394  0x000028e2 arg  0x00000002 , 0x0000003f 
+ 00014395  0x000028e3 istore  0x00000001 , 0x00000011 
+ 00014396  0x000028e4 rtn 
+ 00014397  0x000028e6 jam  0x00000001 , 0x000047f0 
+ 00014398  0x000028e7 rtn 
+ 00014399  0x000028e9 copy  0x00000022 , 0x0000003f 
+ 00014400  0x000028ea store  0x00000004 , 0x0000478b 
+ 00014401  0x000028eb rtn 
+ 00014402  0x000028ed copy  0x00000022 , 0x0000003f 
+ 00014403  0x000028ee fetcht  0x00000004 , 0x0000478b 
+ 00014404  0x000028ef isub  0x00000002 , 0x0000003f 
+ 00014405  0x000028f0 sub  0x0000003f , 0x000000c8 , 0x0000003e 
+ 00014406  0x000028f1 rtn 
+ 00014407  0x000028f4 fetcht  0x00000001 , 0x00004786 
+ 00014408  0x000028f5 branch  0x0000681d 
+ 00014409  0x000028f8 fetch  0x00000008 , 0x00004752 
+ 00014410  0x000028f9 store  0x00000008 , 0x0000479c 
+ 00014411  0x000028fa rtn 
+ 00014412  0x000028fd fetch  0x00000001 , 0x000047b9 
+ 00014413  0x000028fe store  0x00000001 , 0x000047af 
+ 00014414  0x000028ff fetch  0x00000001 , 0x000047ba 
+ 00014415  0x00002900 store  0x00000001 , 0x000047b0 
+ 00014416  0x00002901 fetch  0x00000001 , 0x000047bb 
+ 00014417  0x00002902 store  0x00000001 , 0x000047b1 
+ 00014418  0x00002903 arg  0x0000000d , 0x00000039 
+ 00014419  0x00002904 arg  0x000047aa , 0x00000006 
+ 00014420  0x00002905 call  0x000036f0 
+ 00014421  0x00002906 store  0x00000001 , 0x000047b7 
+ 00014422  0x00002907 arg  0x000047a7 , 0x00000011 
+ 00014423  0x00002908 branch  0x00007e3d 
+ 00014424  0x0000290f call  0x000065c2 
+ 00014425  0x00002910 jam  0x0000007a , 0x000046f6 
+ 00014426  0x00002911 call  0x0000386d 
+ 00014427  0x00002912 call  0x00003867 
+ 00014428  0x00002913 setarg  0x00003860 
+ 00014429  0x00002914 store  0x00000002 , 0x000041fd 
+ 00014430  0x00002915 arg  0x00000000 , 0x00000011 
+ 00014431  0x00002916 branch  0x000069a6 
+ 00014432  0x00002919 fetch  0x00000002 , 0x000046a1 
+ 00014433  0x0000291a rtn  0x00000034 
+ 00014434  0x0000291b increase  0xffffffff , 0x0000003f 
+ 00014435  0x0000291c store  0x00000002 , 0x000046a1 
+ 00014436  0x0000291d rtnne  0x00000000 
+ 00014437  0x0000291e jam  0x00000000 , 0x000046a0 
+ 00014438  0x0000291f rtn 
+ 00014439  0x00002922 bpatch  0x000000d6 , 0x0000401a 
+ 00014440  0x00002923 fetch  0x00000001 , 0x000046a4 
+ 00014441  0x00002924 sub  0x0000003f , 0x00000028 , 0x0000003e 
+ 00014442  0x00002925 rtn  0x00000002 
+ 00014443  0x00002926 jam  0x00000000 , 0x000046a4 
+ 00014444  0x00002927 rtn 
+ 00014445  0x0000292a arg  0x000046a4 , 0x00000011 
+ 00014446  0x0000292b arg  0x00000000 , 0x00000012 
+ 00014447  0x0000292c arg  0x00000051 , 0x00000002 
+ 00014448  0x0000292d branch  0x000065df 
+ 00014449  0x00002931 disable  0x00000028 
+ 00014450  0x00002932 fetch  0x00000001 , 0x000046a3 
+ 00014451  0x00002933 copy  0x0000003f , 0x00000039 
+ 00014452  0x00002935 arg  0x000046a5 , 0x00000011 
+ 00014453  0x00002936 copy  0x00000013 , 0x00000012 
+ 00014454  0x00002938 bpatch  0x000000d7 , 0x0000401a 
+ 00014455  0x00002939 call  0x0000387c 
+ 00014456  0x0000293a branch  0x00007fe7 , 0x00000005 
+ 00014457  0x0000293c increase  0x00000004 , 0x00000011 
+ 00014458  0x0000293d loop  0x00003876 
+ 00014459  0x0000293e rtn 
+ 00014460  0x00002942 bpatch  0x000000d8 , 0x0000401b 
+ 00014461  0x00002943 ifetch  0x00000003 , 0x00000011 
+ 00014462  0x00002944 ifetcht  0x00000003 , 0x00000012 
+ 00014463  0x00002945 isub  0x00000002 , 0x0000003e 
+ 00014464  0x00002946 rtn 
+ 00014465  0x00002949 bpatch  0x000000d9 , 0x0000401b 
+ 00014466  0x0000294a ifetch  0x00000003 , 0x00000011 
+ 00014467  0x0000294b ifetcht  0x00000003 , 0x00000012 
+ 00014468  0x0000294c isub  0x00000002 , 0x0000003e 
+ 00014469  0x0000294d nrtn  0x00000005 
+ 00014470  0x0000294e ifetch  0x00000001 , 0x00000006 
+ 00014471  0x0000294f sub  0x0000003f , 0x00000000 , 0x0000003e 
+ 00014472  0x00002950 rtn  0x00000005 
+ 00014473  0x00002951 add  0x00000011 , 0x00000003 , 0x00000006 
+ 00014474  0x00002952 ifetcht  0x00000001 , 0x00000006 
+ 00014475  0x00002953 isub  0x00000002 , 0x0000003e 
+ 00014476  0x00002954 rtn 
+ 00014477  0x00002958 bpatch  0x000000da , 0x0000401b 
+ 00014478  0x00002959 disable  0x00000028 
+ 00014479  0x0000295a fetch  0x00000001 , 0x000046a3 
+ 00014480  0x0000295b copy  0x0000003f , 0x00000039 
+ 00014481  0x0000295d arg  0x000046a5 , 0x00000011 
+ 00014482  0x0000295e copy  0x00000013 , 0x00000012 
+ 00014483  0x00002960 call  0x00003881 
+ 00014484  0x00002961 branch  0x00007fe7 , 0x00000005 
+ 00014485  0x00002962 increase  0x00000004 , 0x00000011 
+ 00014486  0x00002963 loop  0x00003893 
+ 00014487  0x00002964 rtn 
+ 00014488  0x00002968 fetch  0x00000001 , 0x00000004 
+ 00014489  0x00002969 increase  0x00000001 , 0x0000003f 
+ 00014490  0x0000296a store  0x00000001 , 0x00000004 
+ 00014491  0x0000296b arg  0x000002e5 , 0x00000013 
+ 00014492  0x0000296e ifetch  0x00000002 , 0x00000013 
+ 00014493  0x0000296f arg  0x000055aa , 0x00000002 
+ 00014494  0x00002970 isub  0x00000002 , 0x0000003e 
+ 00014495  0x00002971 nrtn  0x00000005 
+ 00014496  0x00002972 copy  0x00000006 , 0x00000013 
+ 00014497  0x00002973 ifetcht  0x00000003 , 0x00000013 
+ 00014498  0x00002974 setarg  0x00ffffff 
+ 00014499  0x00002975 isub  0x00000002 , 0x0000003e 
+ 00014500  0x00002976 branch  0x000038a8 , 0x00000005 
+ 00014501  0x00002977 call  0x0000388d 
+ 00014502  0x00002978 branch  0x000038a8 , 0x00000028 
+ 00014503  0x00002979 rtn 
+ 00014504  0x0000297c bpatch  0x000000db , 0x0000401b 
+ 00014505  0x0000297d increase  0x00000004 , 0x00000013 
+ 00014506  0x0000297e ifetch  0x00000001 , 0x00000013 
+ 00014507  0x0000297f fetcht  0x00000001 , 0x000046f6 
+ 00014508  0x00002980 isub  0x00000002 , 0x0000003e 
+ 00014509  0x00002981 rtn  0x00000005 
+ 00014510  0x00002982 store  0x00000001 , 0x000046f6 
+ 00014511  0x00002983 fetch  0x00000001 , 0x00000003 
+ 00014512  0x00002984 increase  0x00000001 , 0x0000003f 
+ 00014513  0x00002985 store  0x00000001 , 0x00000003 
+ 00014514  0x00002987 increase  0x00000001 , 0x00000013 
+ 00014515  0x00002988 ifetch  0x00000001 , 0x00000013 
+ 00014516  0x00002989 store  0x00000001 , 0x000046f5 
+ 00014517  0x0000298a copy  0x0000003f , 0x00000039 
+ 00014518  0x0000298b rtn  0x00000034 
+ 00014519  0x0000298d ifetch  0x00000001 , 0x00000006 
+ 00014520  0x0000298e beq  0x00000000 , 0x000038c2 
+ 00014521  0x0000298f beq  0x00000001 , 0x000038cf 
+ 00014522  0x00002990 beq  0x00000002 , 0x000038d4 
+ 00014523  0x00002991 beq  0x00000003 , 0x000038d9 
+ 00014524  0x00002992 beq  0x00000004 , 0x000038de 
+ 00014525  0x00002993 beq  0x00000005 , 0x000038e3 
+ 00014526  0x00002994 beq  0x00000006 , 0x000038e8 
+ 00014527  0x00002995 beq  0x000000ff , 0x000038ea 
+ 00014528  0x00002996 loop  0x000038b7 
+ 00014529  0x00002997 rtn 
+ 00014530  0x0000299a copy  0x00000006 , 0x00000013 
+ 00014531  0x0000299b fetch  0x00000001 , 0x0000469a 
+ 00014532  0x0000299c store  0x00000001 , 0x00000a9a 
+ 00014533  0x0000299d arg  0x00000000 , 0x00000002 
+ 00014534  0x0000299f storet  0x00000001 , 0x00000a9b 
+ 00014535  0x000029a0 setarg  0x00002710 
+ 00014536  0x000029a1 store  0x00000003 , 0x00000a9c 
+ 00014537  0x000029a2 ifetch  0x00000001 , 0x00000013 
+ 00014538  0x000029a3 store  0x00000001 , 0x00000a9f 
+ 00014539  0x000029a4 call  0x000069ae 
+ 00014540  0x000029a5 and  0x00000013 , 0x00000001 , 0x00000006 
+ 00014541  0x000029a6 loop  0x000038b7 
+ 00014542  0x000029a7 rtn 
+ 00014543  0x000029a9 copy  0x00000013 , 0x00000006 
+ 00014544  0x000029aa fetch  0x00000001 , 0x0000469b 
+ 00014545  0x000029ab store  0x00000001 , 0x00000a9a 
+ 00014546  0x000029ac arg  0x00000001 , 0x00000002 
+ 00014547  0x000029ad branch  0x000038c6 
+ 00014548  0x000029af copy  0x00000013 , 0x00000006 
+ 00014549  0x000029b0 fetch  0x00000001 , 0x0000469c 
+ 00014550  0x000029b1 store  0x00000001 , 0x00000a9a 
+ 00014551  0x000029b2 arg  0x00000002 , 0x00000002 
+ 00014552  0x000029b3 branch  0x000038c6 
+ 00014553  0x000029b5 copy  0x00000013 , 0x00000006 
+ 00014554  0x000029b6 fetch  0x00000001 , 0x0000469d 
+ 00014555  0x000029b7 store  0x00000001 , 0x00000a9a 
+ 00014556  0x000029b8 arg  0x00000003 , 0x00000002 
+ 00014557  0x000029b9 branch  0x000038c6 
+ 00014558  0x000029bb copy  0x00000013 , 0x00000006 
+ 00014559  0x000029bc fetch  0x00000001 , 0x0000469e 
+ 00014560  0x000029bd store  0x00000001 , 0x00000a9a 
+ 00014561  0x000029be arg  0x00000004 , 0x00000002 
+ 00014562  0x000029bf branch  0x000038c6 
+ 00014563  0x000029c1 copy  0x00000013 , 0x00000006 
+ 00014564  0x000029c2 fetch  0x00000001 , 0x0000469f 
+ 00014565  0x000029c3 store  0x00000001 , 0x00000a9a 
+ 00014566  0x000029c4 arg  0x00000005 , 0x00000002 
+ 00014567  0x000029c5 branch  0x000038c6 
+ 00014568  0x000029c8 ifetch  0x00000001 , 0x00000006 
+ 00014569  0x000029c9 rtn 
+ 00014570  0x000029cc copy  0x00000006 , 0x00000013 
+ 00014571  0x000029cd fetch  0x00000001 , 0x000046a0 
+ 00014572  0x000029ce bne  0x00000001 , 0x000038ee 
+ 00014573  0x000029cf call  0x000038f0 
+ 00014574  0x000029d1 and  0x00000013 , 0x00000004 , 0x00000006 
+ 00014575  0x000029d2 rtn 
+ 00014576  0x000029d4 bpatch  0x000000dc , 0x0000401b 
+ 00014577  0x000029d5 call  0x00003871 
+ 00014578  0x000029d6 branch  0x000038fe , 0x00000028 
+ 00014579  0x000029d7 fetch  0x00000001 , 0x000046a4 
+ 00014580  0x000029d8 copy  0x0000003f , 0x00000002 
+ 00014581  0x000029d9 increase  0x00000001 , 0x0000003f 
+ 00014582  0x000029da store  0x00000001 , 0x000046a4 
+ 00014583  0x000029db call  0x00003867 
+ 00014584  0x000029dc lshift2  0x00000002 , 0x00000002 
+ 00014585  0x000029dd setarg  0x000046a5 
+ 00014586  0x000029de iadd  0x00000002 , 0x00000005 
+ 00014587  0x000029df ifetch  0x00000004 , 0x00000013 
+ 00014588  0x000029e0 istore  0x00000004 , 0x00000005 
+ 00014589  0x000029e1 branch  0x00003903 
+ 00014590  0x000029e3 add  0x00000013 , 0x00000003 , 0x00000006 
+ 00014591  0x000029e4 ifetch  0x00000001 , 0x00000006 
+ 00014592  0x000029e5 rtn  0x00000034 
+ 00014593  0x000029e6 ifetch  0x00000004 , 0x00000013 
+ 00014594  0x000029e7 istore  0x00000004 , 0x00000011 
+ 00014595  0x000029e9 arg  0x000046a4 , 0x00000011 
+ 00014596  0x000029ea arg  0x00000000 , 0x00000012 
+ 00014597  0x000029eb arg  0x00000051 , 0x00000002 
+ 00014598  0x000029ec branch  0x00006606 
+ 00014599  0x000029f4 fetcht  0x00000001 , 0x0000469a 
+ 00014600  0x000029f5 call  0x00006825 
+ 00014601  0x000029f6 rtn 
+ 00014602  0x000029fc fetcht  0x00000001 , 0x0000469a 
+ 00014603  0x000029fd call  0x00006829 
+ 00014604  0x00002a00 fetcht  0x00000001 , 0x0000469a 
+ 00014605  0x00002a01 call  0x00006825 
+ 00014606  0x00002a04 call  0x0000391d 
+ 00014607  0x00002a06 fetch  0x00000001 , 0x000046a7 
+ 00014608  0x00002a07 nrtn  0x00000034 
+ 00014609  0x00002a09 call  0x00002c29 
+ 00014610  0x00002a0a hfetch  0x00000004 , 0x00008138 
+ 00014611  0x00002a0b set0  0x0000000f , 0x0000003f 
+ 00014612  0x00002a0c hstore  0x00000004 , 0x0000804c 
+ 00014613  0x00002a0d call  0x00002c21 
+ 00014614  0x00002a0e arg  0xffffffff , 0x00000002 
+ 00014615  0x00002a0f branch  0x00002b2a 
+ 00014616  0x00002a12 fetch  0x00000001 , 0x000046a7 
+ 00014617  0x00002a13 branch  0x000056f9 , 0x00000034 
+ 00014618  0x00002a14 increase  0xffffffff , 0x0000003f 
+ 00014619  0x00002a15 store  0x00000001 , 0x000046a7 
+ 00014620  0x00002a16 branch  0x000056f9 
+ 00014621  0x00002a19 mul32  0x0000003f , 0x00000014 , 0x0000003f 
+ 00014622  0x00002a1a arg  0x000046a8 , 0x00000006 
+ 00014623  0x00002a1b iadd  0x00000006 , 0x00000006 
+ 00014624  0x00002a1c ifetch  0x00000001 , 0x00000006 
+ 00014625  0x00002a1d rtn  0x00000034 
+ 00014626  0x00002a1e copy  0x0000003f , 0x00000011 
+ 00014627  0x00002a1f copy  0x00000011 , 0x00000039 
+ 00014628  0x00002a20 arg  0x00004372 , 0x00000005 
+ 00014629  0x00002a21 call  0x00007f01 
+ 00014630  0x00002a22 copy  0x00000011 , 0x0000003f 
+ 00014631  0x00002a23 increase  0x00000002 , 0x0000003f 
+ 00014632  0x00002a24 store  0x00000001 , 0x0000436f 
+ 00014633  0x00002a25 rtn 
+ 00014634  0x00002a2e rtn  0x0000002b 
+ 00014635  0x00002a2f call  0x000057a3 
+ 00014636  0x00002a30 call  0x000068a8 
+ 00014637  0x00002a31 setarg  0x00003982 
+ 00014638  0x00002a32 store  0x00000002 , 0x000041f3 
+ 00014639  0x00002a33 setarg  0x0000396e 
+ 00014640  0x00002a34 store  0x00000002 , 0x000041f1 
+ 00014641  0x00002a35 setarg  0x00003986 
+ 00014642  0x00002a36 store  0x00000002 , 0x000041f5 
+ 00014643  0x00002a37 setarg  0x0000396d 
+ 00014644  0x00002a38 store  0x00000002 , 0x000041ef 
+ 00014645  0x00002a39 setarg  0x00003969 
+ 00014646  0x00002a3a store  0x00000002 , 0x000041e9 
+ 00014647  0x00002a3b setarg  0x00003ab7 
+ 00014648  0x00002a3c store  0x00000002 , 0x000041fb 
+ 00014649  0x00002a3d setarg  0x00003c32 
+ 00014650  0x00002a3e store  0x00000002 , 0x0000456f 
+ 00014651  0x00002a3f setarg  0x00003cc2 
+ 00014652  0x00002a40 store  0x00000002 , 0x000041f9 
+ 00014653  0x00002a41 setarg  0x00003cd7 
+ 00014654  0x00002a42 store  0x00000002 , 0x000041fd 
+ 00014655  0x00002a44 call  0x0000397f 
+ 00014656  0x00002a45 bpatch  0x000000dd , 0x0000401b 
+ 00014657  0x00002a46 call  0x00003945 
+ 00014658  0x00002a47 call  0x00003964 
+ 00014659  0x00002a48 call  0x00002c6f 
+ 00014660  0x00002a49 branch  0x00003c48 
+ 00014661  0x00002a4d fetch  0x00000004 , 0x000046aa 
+ 00014662  0x00002a4e hstore  0x00000004 , 0x00008054 
+ 00014663  0x00002a50 fetch  0x00000004 , 0x000046ae 
+ 00014664  0x00002a51 hstore  0x00000004 , 0x0000805a 
+ 00014665  0x00002a53 hfetch  0x00000001 , 0x00008081 
+ 00014666  0x00002a54 or_into  0x00000004 , 0x0000003f 
+ 00014667  0x00002a55 and_into  0x000000fc , 0x0000003f 
+ 00014668  0x00002a56 hstore  0x00000001 , 0x00008081 
+ 00014669  0x00002a57 jam  0x00000000 , 0x00008062 
+ 00014670  0x00002a59 fetch  0x00000002 , 0x000046aa 
+ 00014671  0x00002a5a hstore  0x00000002 , 0x00008058 
+ 00014672  0x00002a5b fetch  0x00000002 , 0x000046ae 
+ 00014673  0x00002a5c hstore  0x00000002 , 0x0000805e 
+ 00014674  0x00002a5d hstore  0x00000002 , 0x00008060 
+ 00014675  0x00002a5f hfetch  0x00000004 , 0x00008078 
+ 00014676  0x00002a60 set1  0x00000007 , 0x0000003f 
+ 00014677  0x00002a61 hstore  0x00000004 , 0x00008078 
+ 00014678  0x00002a63 hfetch  0x00000002 , 0x00008050 
+ 00014679  0x00002a64 set0  0x0000000f , 0x0000003f 
+ 00014680  0x00002a65 hstore  0x00000002 , 0x00008050 
+ 00014681  0x00002a66 call  0x000066ce 
+ 00014682  0x00002a67 jam  0x00000000 , 0x00008043 
+ 00014683  0x00002a68 jam  0x00000081 , 0x00008062 
+ 00014684  0x00002a6a fetch  0x00000001 , 0x000046bf 
+ 00014685  0x00002a6b isolate1  0x00000000 , 0x0000003f 
+ 00014686  0x00002a6c hfetcht  0x00000001 , 0x00008062 
+ 00014687  0x00002a6d setflag  0x00000001 , 0x00000004 , 0x00000002 
+ 00014688  0x00002a6e hstoret  0x00000001 , 0x00008062 
+ 00014689  0x00002a6f rtn 
+ 00014690  0x00002a74 call  0x0000397f 
+ 00014691  0x00002a75 branch  0x00003945 
+ 00014692  0x00002a7d fetcht  0x00000001 , 0x0000469e 
+ 00014693  0x00002a7e call  0x0000680e 
+ 00014694  0x00002a7f call  0x000039e6 
+ 00014695  0x00002a81 fetcht  0x00000001 , 0x0000469c 
+ 00014696  0x00002a82 branch  0x000067fb 
+ 00014697  0x00002a85 fetcht  0x00000001 , 0x0000469c 
+ 00014698  0x00002a86 call  0x0000681d 
+ 00014699  0x00002a87 nbranch  0x000033d2 , 0x00000001 
+ 00014700  0x00002a88 branch  0x000033d0 
+ 00014701  0x00002a8c rtn 
+ 00014702  0x00002a8f call  0x00003970 
+ 00014703  0x00002a90 branch  0x00003ce9 
+ 00014704  0x00002a93 fetch  0x00000001 , 0x00004682 
+ 00014705  0x00002a94 bbit0  0x00000004 , 0x0000397f 
+ 00014706  0x00002a95 bpatch  0x000000de , 0x0000401b 
+ 00014707  0x00002a96 setarg  0x00003eff 
+ 00014708  0x00002a97 fetcht  0x00000004 , 0x000046c5 
+ 00014709  0x00002a98 iadd  0x00000002 , 0x00000002 
+ 00014710  0x00002a99 copy  0x00000022 , 0x0000003f 
+ 00014711  0x00002a9a isub  0x00000002 , 0x0000003e 
+ 00014712  0x00002a9b nrtn  0x00000002 
+ 00014713  0x00002a9c fetch  0x00000002 , 0x00004682 
+ 00014714  0x00002a9d bbit1  0x00000005 , 0x0000397f 
+ 00014715  0x00002a9e fetch  0x00000001 , 0x000046bf 
+ 00014716  0x00002a9f rtnbit1  0x00000006 
+ 00014717  0x00002aa0 call  0x00003cec 
+ 00014718  0x00002aa1 call  0x0000340e 
+ 00014719  0x00002aa3 copy  0x00000022 , 0x0000003f 
+ 00014720  0x00002aa4 store  0x00000004 , 0x000046c5 
+ 00014721  0x00002aa5 rtn 
+ 00014722  0x00002aa9 call  0x00003ce9 
+ 00014723  0x00002aaa call  0x0000526e 
+ 00014724  0x00002aab nrtn  0x00000034 
+ 00014725  0x00002aac branch  0x000039eb 
+ 00014726  0x00002ab0 copy  0x00000013 , 0x0000003f 
+ 00014727  0x00002ab1 beq  0x00000001 , 0x000039d4 
+ 00014728  0x00002ab2 beq  0x00000002 , 0x000039a3 
+ 00014729  0x00002ab3 beq  0x00000004 , 0x000039d7 
+ 00014730  0x00002ab4 beq  0x00000005 , 0x000039c4 
+ 00014731  0x00002ab5 beq  0x00000008 , 0x000039aa 
+ 00014732  0x00002ab6 beq  0x00000009 , 0x000039b1 
+ 00014733  0x00002ab7 beq  0x0000000a , 0x000039c9 
+ 00014734  0x00002ab8 beq  0x0000000b , 0x000039b6 
+ 00014735  0x00002ab9 beq  0x0000000c , 0x000039c2 
+ 00014736  0x00002aba beq  0x00000013 , 0x000039d7 
+ 00014737  0x00002abb beq  0x00000014 , 0x000039cf 
+ 00014738  0x00002abc beq  0x00000015 , 0x000039c6 
+ 00014739  0x00002abd beq  0x00000021 , 0x000039ca 
+ 00014740  0x00002abe beq  0x00000023 , 0x000039cb 
+ 00014741  0x00002abf beq  0x00000024 , 0x000039ce 
+ 00014742  0x00002ac0 beq  0x00000030 , 0x00003c8a 
+ 00014743  0x00002ac1 beq  0x00000031 , 0x00003c8c 
+ 00014744  0x00002ac2 beq  0x00000032 , 0x00003c9a 
+ 00014745  0x00002ac3 beq  0x00000033 , 0x00003c98 
+ 00014746  0x00002ac4 beq  0x00000034 , 0x00003c84 
+ 00014747  0x00002ac5 beq  0x00000035 , 0x00003c73 
+ 00014748  0x00002ac6 beq  0x00000036 , 0x00003c82 
+ 00014749  0x00002ac7 beq  0x00000037 , 0x00003c8e 
+ 00014750  0x00002ac8 beq  0x00000038 , 0x00003c90 
+ 00014751  0x00002ac9 beq  0x0000003b , 0x00003ca1 
+ 00014752  0x00002aca beq  0x0000003d , 0x00003c6a 
+ 00014753  0x00002acb beq  0x00000041 , 0x000039d9 
+ 00014754  0x00002acc rtn 
+ 00014755  0x00002ad0 call  0x0000397f 
+ 00014756  0x00002ad1 fetch  0x00000001 , 0x00004665 
+ 00014757  0x00002ad2 ncall  0x00003c8e , 0x00000034 
+ 00014758  0x00002ad3 call  0x000039d7 
+ 00014759  0x00002ad4 fetch  0x00000002 , 0x00004682 
+ 00014760  0x00002ad5 rtnbit0  0x00000004 
+ 00014761  0x00002ad6 branch  0x000039b1 
+ 00014762  0x00002ad9 fetch  0x00000002 , 0x00004682 
+ 00014763  0x00002ada set1  0x00000004 , 0x0000003f 
+ 00014764  0x00002adb store  0x00000002 , 0x00004682 
+ 00014765  0x00002adc fetch  0x00000001 , 0x000046a7 
+ 00014766  0x00002add store  0x00000001 , 0x00004172 
+ 00014767  0x00002ade call  0x000039e6 
+ 00014768  0x00002adf branch  0x00003c1d 
+ 00014769  0x00002ae4 fetch  0x00000002 , 0x00004682 
+ 00014770  0x00002ae5 rtnbit0  0x00000004 
+ 00014771  0x00002ae6 set0  0x00000004 , 0x0000003f 
+ 00014772  0x00002ae7 store  0x00000002 , 0x00004682 
+ 00014773  0x00002ae8 branch  0x00003c21 
+ 00014774  0x00002aee call  0x0000397f 
+ 00014775  0x00002af1 fetch  0x00000002 , 0x00004042 
+ 00014776  0x00002af2 rshift  0x0000003f , 0x0000003f 
+ 00014777  0x00002af3 fetcht  0x00000002 , 0x000041e3 
+ 00014778  0x00002af4 isub  0x00000002 , 0x0000003e 
+ 00014779  0x00002af5 nbranch  0x000039bd , 0x00000005 
+ 00014780  0x00002af6 branch  0x00003416 
+ 00014781  0x00002af8 fetch  0x00000001 , 0x000046bf 
+ 00014782  0x00002af9 rtnbit1  0x00000005 
+ 00014783  0x00002afa hfetch  0x00000002 , 0x00008112 
+ 00014784  0x00002afb ncall  0x00003cf0 , 0x00000034 
+ 00014785  0x00002afc branch  0x0000340c 
+ 00014786  0x00002aff call  0x00003cee 
+ 00014787  0x00002b00 branch  0x00003418 
+ 00014788  0x00002b03 call  0x0000397f 
+ 00014789  0x00002b04 branch  0x000039dd 
+ 00014790  0x00002b07 call  0x00005816 
+ 00014791  0x00002b08 call  0x000039d7 
+ 00014792  0x00002b09 branch  0x00003c23 
+ 00014793  0x00002b0c branch  0x000033dd 
+ 00014794  0x00002b10 branch  0x00003cee 
+ 00014795  0x00002b14 fetch  0x00000001 , 0x000046bf 
+ 00014796  0x00002b15 bbit0  0x00000005 , 0x0000340e 
+ 00014797  0x00002b16 branch  0x00003cf2 
+ 00014798  0x00002b1a branch  0x00003cf2 
+ 00014799  0x00002b1e call  0x000058ba 
+ 00014800  0x00002b1f call  0x000039dd 
+ 00014801  0x00002b20 fetch  0x00000001 , 0x000046a8 
+ 00014802  0x00002b21 store  0x00000001 , 0x00004172 
+ 00014803  0x00002b22 branch  0x00003c1f 
+ 00014804  0x00002b26 jam  0x00000000 , 0x00004661 
+ 00014805  0x00002b27 call  0x00003cee 
+ 00014806  0x00002b28 branch  0x00003cf2 
+ 00014807  0x00002b2d call  0x00003a52 
+ 00014808  0x00002b2e branch  0x000039db 
+ 00014809  0x00002b32 call  0x00005cc9 
+ 00014810  0x00002b33 branch  0x00005b02 
+ 00014811  0x00002b37 fetcht  0x00000001 , 0x0000469e 
+ 00014812  0x00002b38 branch  0x00006829 
+ 00014813  0x00002b3b call  0x000039df 
+ 00014814  0x00002b3c branch  0x000039e6 
+ 00014815  0x00002b3f fetch  0x00000001 , 0x000046a1 
+ 00014816  0x00002b40 isolate1  0x00000000 , 0x0000003f 
+ 00014817  0x00002b41 call  0x000033f0 , 0x00000001 
+ 00014818  0x00002b42 fetch  0x00000001 , 0x000046a1 
+ 00014819  0x00002b43 isolate1  0x00000001 , 0x0000003f 
+ 00014820  0x00002b44 call  0x000033f8 , 0x00000001 
+ 00014821  0x00002b45 rtn 
+ 00014822  0x00002b47 fetcht  0x00000001 , 0x0000469e 
+ 00014823  0x00002b48 branch  0x00006825 
+ 00014824  0x00002b4b fetch  0x00000001 , 0x0000456b 
+ 00014825  0x00002b4c rtneq  0x00000000 
+ 00014826  0x00002b4d branch  0x00006c28 
+ 00014827  0x00002b50 hfetch  0x00000001 , 0x0000810c 
+ 00014828  0x00002b51 bbit1  0x00000003 , 0x000039e8 
+ 00014829  0x00002b52 call  0x000066cb 
+ 00014830  0x00002b53 ifetch  0x00000001 , 0x00000003 
+ 00014831  0x00002b54 bne  0x00000001 , 0x00003a01 
+ 00014832  0x00002b55 hfetch  0x00000002 , 0x00008112 
+ 00014833  0x00002b56 sub  0x0000003f , 0x00000002 , 0x0000003e 
+ 00014834  0x00002b57 rtn  0x00000002 
+ 00014835  0x00002b58 ifetch  0x00000001 , 0x00000003 
+ 00014836  0x00002b59 store  0x00000001 , 0x00000b03 
+ 00014837  0x00002b5a ifetcht  0x00000001 , 0x00000003 
+ 00014838  0x00002b5b copy  0x00000003 , 0x00000011 
+ 00014839  0x00002b5c storet  0x00000001 , 0x00000b04 
+ 00014840  0x00002b5d add  0x00000002 , 0x00000003 , 0x00000002 
+ 00014841  0x00002b5e hfetch  0x00000002 , 0x00008112 
+ 00014842  0x00002b5f isub  0x00000002 , 0x00000002 
+ 00014843  0x00002b60 nrtn  0x00000002 
+ 00014844  0x00002b61 jam  0x00000001 , 0x00000b05 
+ 00014845  0x00002b62 call  0x00003a17 
+ 00014846  0x00002b63 fetch  0x00000001 , 0x00000b05 
+ 00014847  0x00002b64 rtneq  0x00000000 
+ 00014848  0x00002b65 branch  0x00003a12 
+ 00014849  0x00002b68 call  0x00007ec1 
+ 00014850  0x00002b69 call  0x00003c79 
+ 00014851  0x00002b6a branch  0x00003a04 
+ 00014852  0x00002b6e bpatch  0x000000df , 0x0000401b 
+ 00014853  0x00002b6f hfetch  0x00000002 , 0x00008112 
+ 00014854  0x00002b70 rtn  0x00000034 
+ 00014855  0x00002b71 call  0x000066cb 
+ 00014856  0x00002b72 ifetch  0x00000001 , 0x00000003 
+ 00014857  0x00002b73 sub  0x0000003f , 0x00000001 , 0x0000003e 
+ 00014858  0x00002b74 ncall  0x00003a16 , 0x00000005 
+ 00014859  0x00002b75 nbranch  0x00003a04 , 0x00000005 
+ 00014860  0x00002b76 ifetch  0x00000001 , 0x00000003 
+ 00014861  0x00002b77 rtneq  0x00000005 
+ 00014862  0x00002b78 rtneq  0x00000029 
+ 00014863  0x00002b79 increase  0xffffffff , 0x00000003 
+ 00014864  0x00002b7a call  0x00003a16 
+ 00014865  0x00002b7b branch  0x00003a04 
+ 00014866  0x00002b7e call  0x000066cb 
+ 00014867  0x00002b7f increase  0x00000002 , 0x00000003 
+ 00014868  0x00002b80 ifetch  0x00000001 , 0x00000003 
+ 00014869  0x00002b81 iadd  0x00000003 , 0x00000003 
+ 00014870  0x00002b83 branch  0x000066c8 
+ 00014871  0x00002b87 bpatch  0x000000e0 , 0x0000401c 
+ 00014872  0x00002b88 fetch  0x00000001 , 0x00000b03 
+ 00014873  0x00002b89 beq  0x00000000 , 0x00003a3f 
+ 00014874  0x00002b8a beq  0x00000001 , 0x00003a44 
+ 00014875  0x00002b8b beq  0x00000002 , 0x00003a49 
+ 00014876  0x00002b8c beq  0x00000003 , 0x00003a5f 
+ 00014877  0x00002b8d beq  0x00000004 , 0x00003a6b 
+ 00014878  0x00002b8e beq  0x00000005 , 0x00003a75 
+ 00014879  0x00002b8f beq  0x00000009 , 0x00003a9a 
+ 00014880  0x00002b90 beq  0x0000000b , 0x00003ad7 
+ 00014881  0x00002b91 beq  0x0000000c , 0x00003ad8 
+ 00014882  0x00002b92 beq  0x0000000d , 0x00003aec 
+ 00014883  0x00002b93 beq  0x0000000e , 0x00003af4 
+ 00014884  0x00002b94 beq  0x0000000f , 0x00003afa 
+ 00014885  0x00002b95 beq  0x00000010 , 0x00003b06 
+ 00014886  0x00002b96 beq  0x00000011 , 0x00003b0e 
+ 00014887  0x00002b97 beq  0x00000012 , 0x00003b12 
+ 00014888  0x00002b98 beq  0x00000026 , 0x00003b16 
+ 00014889  0x00002b99 beq  0x00000028 , 0x00003b1d 
+ 00014890  0x00002b9a beq  0x00000029 , 0x00003b2d 
+ 00014891  0x00002b9b beq  0x0000002a , 0x00003b36 
+ 00014892  0x00002b9c beq  0x0000002b , 0x00003b69 
+ 00014893  0x00002b9d beq  0x0000002c , 0x00003b6f 
+ 00014894  0x00002b9e beq  0x00000030 , 0x00003b76 
+ 00014895  0x00002b9f beq  0x00000031 , 0x00003b7c 
+ 00014896  0x00002ba0 beq  0x00000032 , 0x00003b90 
+ 00014897  0x00002ba1 beq  0x00000033 , 0x00003b98 
+ 00014898  0x00002ba2 beq  0x00000034 , 0x00003bbb 
+ 00014899  0x00002ba3 beq  0x00000035 , 0x00003bc4 
+ 00014900  0x00002ba4 beq  0x00000036 , 0x00003bcd 
+ 00014901  0x00002ba5 beq  0x00000037 , 0x00003bd7 
+ 00014902  0x00002ba6 beq  0x00000038 , 0x00003bda 
+ 00014903  0x00002ba7 beq  0x00000040 , 0x00003be2 
+ 00014904  0x00002ba8 beq  0x00000042 , 0x00003bec 
+ 00014905  0x00002ba9 beq  0x00000048 , 0x00003bf1 
+ 00014906  0x00002baa beq  0x00000049 , 0x00003bfc 
+ 00014907  0x00002bab beq  0x00000051 , 0x00003c02 
+ 00014908  0x00002bac beq  0x00000061 , 0x00003c06 
+ 00014909  0x00002bad beq  0x000000ff , 0x00003c15 
+ 00014910  0x00002bae branch  0x00003c17 
+ 00014911  0x00002bb4 fetch  0x00000001 , 0x00000b04 
+ 00014912  0x00002bb5 bne  0x00000006 , 0x00003c17 
+ 00014913  0x00002bb6 ifetch  0x00000006 , 0x00000003 
+ 00014914  0x00002bb7 store  0x00000006 , 0x000040a0 
+ 00014915  0x00002bb8 branch  0x00003c1a 
+ 00014916  0x00002bbc fetch  0x00000001 , 0x00000b04 
+ 00014917  0x00002bbd bne  0x00000006 , 0x00003c17 
+ 00014918  0x00002bbe ifetch  0x00000006 , 0x00000003 
+ 00014919  0x00002bbf store  0x00000006 , 0x000044a0 
+ 00014920  0x00002bc0 branch  0x00003c1a 
+ 00014921  0x00002bc5 fetch  0x00000001 , 0x00000b04 
+ 00014922  0x00002bc6 bne  0x00000001 , 0x00003c17 
+ 00014923  0x00002bc7 copy  0x00000011 , 0x00000003 
+ 00014924  0x00002bc8 call  0x00003c1a 
+ 00014925  0x00002bc9 ifetcht  0x00000001 , 0x00000003 
+ 00014926  0x00002bca storet  0x00000001 , 0x000046a9 
+ 00014927  0x00002bcb fetch  0x00000002 , 0x00004682 
+ 00014928  0x00002bcc rtnbit1  0x00000009 
+ 00014929  0x00002bcd rtnbit1  0x00000000 
+ 00014930  0x00002bcf fetch  0x00000001 , 0x000046a1 
+ 00014931  0x00002bd0 isolate1  0x00000000 , 0x0000003f 
+ 00014932  0x00002bd1 nbranch  0x00003a58 , 0x00000001 
+ 00014933  0x00002bd2 fetcht  0x00000001 , 0x000046a9 
+ 00014934  0x00002bd3 and  0x00000002 , 0x00000003 , 0x0000003f 
+ 00014935  0x00002bd4 store  0x00000001 , 0x00004093 
+ 00014936  0x00002bd6 fetch  0x00000001 , 0x000046a1 
+ 00014937  0x00002bd7 isolate1  0x00000001 , 0x0000003f 
+ 00014938  0x00002bd8 nrtn  0x00000001 
+ 00014939  0x00002bd9 fetcht  0x00000001 , 0x000046a9 
+ 00014940  0x00002bda isolate1  0x00000002 , 0x00000002 
+ 00014941  0x00002bdb branch  0x000033fa , 0x00000001 
+ 00014942  0x00002bdc branch  0x000033f8 
+ 00014943  0x00002be1 fetch  0x00000001 , 0x00000b04 
+ 00014944  0x00002be2 sub  0x0000003f , 0x00000043 , 0x0000003e 
+ 00014945  0x00002be3 nbranch  0x00003c17 , 0x00000002 
+ 00014946  0x00002be4 store  0x00000001 , 0x00004515 
+ 00014947  0x00002be5 arg  0x00000008 , 0x00000039 
+ 00014948  0x00002be6 call  0x00007ec6 
+ 00014949  0x00002be7 fetch  0x00000001 , 0x00000b04 
+ 00014950  0x00002be8 copy  0x0000003f , 0x00000039 
+ 00014951  0x00002be9 copy  0x00000011 , 0x00000003 
+ 00014952  0x00002bea arg  0x00004516 , 0x00000005 
+ 00014953  0x00002beb call  0x000066ea 
+ 00014954  0x00002bec branch  0x00003c1a 
+ 00014955  0x00002bf1 fetch  0x00000001 , 0x00000b04 
+ 00014956  0x00002bf2 sub  0x0000003f , 0x0000001d , 0x0000003e 
+ 00014957  0x00002bf3 nbranch  0x00003c17 , 0x00000002 
+ 00014958  0x00002bf4 store  0x00000001 , 0x000043af 
+ 00014959  0x00002bf5 copy  0x0000003f , 0x00000039 
+ 00014960  0x00002bf6 copy  0x00000011 , 0x00000003 
+ 00014961  0x00002bf7 arg  0x000043b0 , 0x00000005 
+ 00014962  0x00002bf8 call  0x000066ea 
+ 00014963  0x00002bf9 call  0x000057a3 
+ 00014964  0x00002bfa branch  0x00003c1a 
+ 00014965  0x00002bff fetch  0x00000001 , 0x00004682 
+ 00014966  0x00002c00 bbit0  0x00000004 , 0x00003c17 
+ 00014967  0x00002c01 call  0x000033ba 
+ 00014968  0x00002c02 branch  0x00003a86 , 0x00000001 
+ 00014969  0x00002c03 jam  0x00000000 , 0x00000b05 
+ 00014970  0x00002c05 call  0x0000397f 
+ 00014971  0x00002c06 fetch  0x00000001 , 0x00004568 
+ 00014972  0x00002c07 rtn  0x00000034 
+ 00014973  0x00002c08 fetch  0x00000002 , 0x00004573 
+ 00014974  0x00002c09 bne  0x00000000 , 0x00003a84 
+ 00014975  0x00002c0a fetch  0x00000001 , 0x00000b04 
+ 00014976  0x00002c0b store  0x00000002 , 0x00004573 
+ 00014977  0x00002c0d copy  0x00000011 , 0x00000003 
+ 00014978  0x00002c10 copy  0x00000003 , 0x0000003f 
+ 00014979  0x00002c11 store  0x00000002 , 0x00004571 
+ 00014980  0x00002c13 call  0x00003a88 
+ 00014981  0x00002c14 branch  0x00006c4d 
+ 00014982  0x00002c17 jam  0x00000000 , 0x00000b05 
+ 00014983  0x00002c18 branch  0x00003cd1 
+ 00014984  0x00002c1b call  0x00003a8e 
+ 00014985  0x00002c1c fetch  0x00000002 , 0x00004573 
+ 00014986  0x00002c1d fetcht  0x00000002 , 0x0000469f 
+ 00014987  0x00002c1e isub  0x00000002 , 0x0000003f 
+ 00014988  0x00002c1f store  0x00000002 , 0x00004573 
+ 00014989  0x00002c20 rtn 
+ 00014990  0x00002c23 fetch  0x00000002 , 0x00004573 
+ 00014991  0x00002c24 arg  0x0000006e , 0x00000002 
+ 00014992  0x00002c25 call  0x00007fdd 
+ 00014993  0x00002c26 fetcht  0x00000002 , 0x0000456c 
+ 00014994  0x00002c27 call  0x00007fdd 
+ 00014995  0x00002c28 fetcht  0x00000002 , 0x0000455e 
+ 00014996  0x00002c29 call  0x00007fdd 
+ 00014997  0x00002c2a store  0x00000002 , 0x0000469f 
+ 00014998  0x00002c2b rtn 
+ 00014999  0x00002c2e jam  0x00000001 , 0x00000b05 
+ 00015000  0x00002c2f jam  0x00000005 , 0x00000b03 
+ 00015001  0x00002c30 branch  0x00003c1a 
+ 00015002  0x00002c35 fetch  0x00000002 , 0x00004682 
+ 00015003  0x00002c36 bbit0  0x00000009 , 0x00003c17 
+ 00015004  0x00002c37 call  0x00003ad4 
+ 00015005  0x00002c38 branch  0x00003c17 , 0x00000028 
+ 00015006  0x00002c39 jam  0x00000000 , 0x00000b05 
+ 00015007  0x00002c3a fetch  0x00000001 , 0x000046bf 
+ 00015008  0x00002c3b bbit1  0x00000004 , 0x00003ab4 
+ 00015009  0x00002c3c fetch  0x00000001 , 0x000046c0 
+ 00015010  0x00002c3d nrtn  0x00000034 
+ 00015011  0x00002c3e jam  0x00000001 , 0x00000b05 
+ 00015012  0x00002c3f ifetch  0x00000002 , 0x00000003 
+ 00015013  0x00002c40 store  0x00000002 , 0x000046c1 
+ 00015014  0x00002c41 copy  0x00000003 , 0x0000003f 
+ 00015015  0x00002c42 store  0x00000002 , 0x000046c3 
+ 00015016  0x00002c43 fetch  0x00000001 , 0x00000b04 
+ 00015017  0x00002c44 pincrease  0xfffffffe 
+ 00015018  0x00002c45 nbranch  0x00003c17 , 0x00000002 
+ 00015019  0x00002c46 branch  0x00003c17 , 0x00000005 
+ 00015020  0x00002c47 store  0x00000001 , 0x000046c0 
+ 00015021  0x00002c48 jam  0x00000000 , 0x00000b05 
+ 00015022  0x00002c49 call  0x00005814 
+ 00015023  0x00002c4a call  0x00003ab7 
+ 00015024  0x00002c4b call  0x00003ab7 
+ 00015025  0x00002c4c call  0x00003ab7 
+ 00015026  0x00002c4d fetch  0x00000001 , 0x000046bf 
+ 00015027  0x00002c4e rtnbit0  0x00000004 
+ 00015028  0x00002c50 jam  0x00000001 , 0x00000b05 
+ 00015029  0x00002c51 call  0x00003cf6 
+ 00015030  0x00002c52 branch  0x00003c1a 
+ 00015031  0x00002c55 fetch  0x00000001 , 0x000046c0 
+ 00015032  0x00002c56 rtn  0x00000034 
+ 00015033  0x00002c57 call  0x00005892 
+ 00015034  0x00002c58 nrtn  0x00000034 
+ 00015035  0x00002c59 call  0x00003acf 
+ 00015036  0x00002c5a bpatch  0x000000e1 , 0x0000401c 
+ 00015037  0x00002c5b add  0x00000002 , 0xfffffffd , 0x0000003f 
+ 00015038  0x00002c5c fetcht  0x00000001 , 0x000046c0 
+ 00015039  0x00002c5d call  0x00007fdd 
+ 00015040  0x00002c5e copy  0x0000003f , 0x00000011 
+ 00015041  0x00002c5f copy  0x00000002 , 0x0000003f 
+ 00015042  0x00002c60 isub  0x00000011 , 0x0000003f 
+ 00015043  0x00002c61 store  0x00000001 , 0x000046c0 
+ 00015044  0x00002c62 fetcht  0x00000002 , 0x000046c1 
+ 00015045  0x00002c63 call  0x00005a64 
+ 00015046  0x00002c64 fetch  0x00000002 , 0x000046c3 
+ 00015047  0x00002c65 copy  0x0000003f , 0x00000003 
+ 00015048  0x00002c66 copy  0x00000011 , 0x00000039 
+ 00015049  0x00002c67 call  0x000066ea 
+ 00015050  0x00002c68 copy  0x00000003 , 0x0000003f 
+ 00015051  0x00002c69 store  0x00000002 , 0x000046c3 
+ 00015052  0x00002c6a fetch  0x00000001 , 0x000046c0 
+ 00015053  0x00002c6b nrtn  0x00000034 
+ 00015054  0x00002c6c branch  0x00003cf4 
+ 00015055  0x00002c71 arg  0x00000017 , 0x00000002 
+ 00015056  0x00002c72 fetch  0x00000001 , 0x000046bf 
+ 00015057  0x00002c73 rtnbit1  0x00000001 
+ 00015058  0x00002c74 fetcht  0x00000002 , 0x000044a8 
+ 00015059  0x00002c75 rtn 
+ 00015060  0x00002c78 fetch  0x00000001 , 0x000046bf 
+ 00015061  0x00002c79 bbit1  0x00000002 , 0x00005a42 
+ 00015062  0x00002c7a branch  0x00007fe9 
+ 00015063  0x00002c7f branch  0x00003c4c 
+ 00015064  0x00002c84 copy  0x00000011 , 0x00000003 
+ 00015065  0x00002c85 ifetch  0x00000001 , 0x00000003 
+ 00015066  0x00002c86 beq  0x00000000 , 0x00003adf 
+ 00015067  0x00002c87 beq  0x00000001 , 0x00003ae2 
+ 00015068  0x00002c88 beq  0x00000002 , 0x00003ae8 
+ 00015069  0x00002c89 beq  0x00000003 , 0x00003aea 
+ 00015070  0x00002c8a branch  0x00003c17 
+ 00015071  0x00002c8c call  0x0000612b 
+ 00015072  0x00002c8d jam  0x00000000 , 0x0000465a 
+ 00015073  0x00002c8e branch  0x00003c1a 
+ 00015074  0x00002c90 setarg  0x00040003 
+ 00015075  0x00002c92 store  0x00000003 , 0x0000465b 
+ 00015076  0x00002c93 store  0x00000001 , 0x00004662 
+ 00015077  0x00002c94 call  0x00006124 
+ 00015078  0x00002c95 jam  0x00000001 , 0x0000465a 
+ 00015079  0x00002c96 branch  0x00003c1a 
+ 00015080  0x00002c98 setarg  0x00040002 
+ 00015081  0x00002c99 branch  0x00003ae3 
+ 00015082  0x00002c9c setarg  0x00040001 
+ 00015083  0x00002c9d branch  0x00003ae3 
+ 00015084  0x00002ca1 fetch  0x00000001 , 0x00000b04 
+ 00015085  0x00002ca2 sub  0x0000003f , 0x00000010 , 0x0000003e 
+ 00015086  0x00002ca3 nbranch  0x00003c17 , 0x00000002 
+ 00015087  0x00002ca4 store  0x00000001 , 0x00004689 
+ 00015088  0x00002ca5 copy  0x0000003f , 0x00000039 
+ 00015089  0x00002ca6 arg  0x0000468a , 0x00000005 
+ 00015090  0x00002ca7 call  0x000066fd 
+ 00015091  0x00002ca8 branch  0x00003c1a 
+ 00015092  0x00002cad copy  0x00000011 , 0x00000003 
+ 00015093  0x00002cae ifetch  0x00000001 , 0x00000003 
+ 00015094  0x00002caf hfetcht  0x00000001 , 0x00008062 
+ 00015095  0x00002cb0 nsetflag  0x00000034 , 0x00000004 , 0x00000002 
+ 00015096  0x00002cb1 hstoret  0x00000001 , 0x00008062 
+ 00015097  0x00002cb2 branch  0x00003c1a 
+ 00015098  0x00002cb7 fetch  0x00000001 , 0x00000b04 
+ 00015099  0x00002cb8 copy  0x0000003f , 0x00000039 
+ 00015100  0x00002cb9 copy  0x00000011 , 0x00000003 
+ 00015101  0x00002cba call  0x00007f58 
+ 00015102  0x00002cbb setarg  0x016e3600 
+ 00015103  0x00002cbc idiv  0x00000002 
+ 00015104  0x00002cbd call  0x00007f86 
+ 00015105  0x00002cbe quotient  0x0000003f 
+ 00015106  0x00002cc0 store  0x00000002 , 0x00004243 
+ 00015107  0x00002cc1 call  0x00003c1a 
+ 00015108  0x00002cc2 call  0x00007f9e 
+ 00015109  0x00002cc3 branch  0x000066ce 
+ 00015110  0x00002cc8 arg  0x00000002 , 0x00000011 
+ 00015111  0x00002cc9 arg  0x0000469a , 0x00000012 
+ 00015112  0x00002cca arg  0x00000000 , 0x00000002 
+ 00015113  0x00002ccb branch  0x00003c25 
+ 00015114  0x00002ccd store  0x00000002 , 0x00000ac2 
+ 00015115  0x00002cce arg  0x00000ac2 , 0x00000012 
+ 00015116  0x00002ccf arg  0x00000000 , 0x00000002 
+ 00015117  0x00002cd0 branch  0x00003c25 
+ 00015118  0x00002cd5 fetch  0x00000002 , 0x00004682 
+ 00015119  0x00002cd6 bbit0  0x00000000 , 0x00003c17 
+ 00015120  0x00002cd8 call  0x00003c1a 
+ 00015121  0x00002cd9 branch  0x000033e9 
+ 00015122  0x00002cde fetch  0x00000002 , 0x00004682 
+ 00015123  0x00002cdf bbit0  0x00000009 , 0x00003c17 
+ 00015124  0x00002ce1 call  0x00003c1a 
+ 00015125  0x00002ce2 branch  0x00003402 
+ 00015126  0x00002ce9 fetch  0x00000001 , 0x00000b04 
+ 00015127  0x00002cea copy  0x0000003f , 0x00000039 
+ 00015128  0x00002ceb copy  0x00000011 , 0x00000003 
+ 00015129  0x00002cec fetch  0x00000002 , 0x00004215 
+ 00015130  0x00002ced icopy  0x00000005 
+ 00015131  0x00002cee call  0x000066ea 
+ 00015132  0x00002cef branch  0x00003c1a 
+ 00015133  0x00002cf4 fetch  0x00000001 , 0x00004682 
+ 00015134  0x00002cf5 bbit0  0x00000000 , 0x00003c17 
+ 00015135  0x00002cf6 ifetch  0x00000001 , 0x00000003 
+ 00015136  0x00002cf7 fetcht  0x00000001 , 0x00004661 
+ 00015137  0x00002cf8 setflag  0x00000034 , 0x00000000 , 0x00000002 
+ 00015138  0x00002cf9 set1  0x00000007 , 0x00000002 
+ 00015139  0x00002cfa storet  0x00000001 , 0x00004661 
+ 00015140  0x00002cfc call  0x00003c1a 
+ 00015141  0x00002cfe fetch  0x00000001 , 0x00004661 
+ 00015142  0x00002cff bbit1  0x00000006 , 0x00003b2b 
+ 00015143  0x00002d00 rtn 
+ 00015144  0x00002d03 jam  0x00000000 , 0x00004661 
+ 00015145  0x00002d04 jam  0x00000021 , 0x00000a99 
+ 00015146  0x00002d05 branch  0x00007d8f 
+ 00015147  0x00002d09 bbit1  0x00000000 , 0x00005f95 
+ 00015148  0x00002d0a branch  0x00003b28 
+ 00015149  0x00002d0f fetch  0x00000001 , 0x00004682 
+ 00015150  0x00002d10 rtnbit0  0x00000004 
+ 00015151  0x00002d11 fetch  0x00000001 , 0x0000456b 
+ 00015152  0x00002d12 rtneq  0x00000000 
+ 00015153  0x00002d13 ifetch  0x00000001 , 0x00000003 
+ 00015154  0x00002d14 fetcht  0x00000001 , 0x00004569 
+ 00015155  0x00002d15 iadd  0x00000002 , 0x00000002 
+ 00015156  0x00002d16 storet  0x00000001 , 0x00004569 
+ 00015157  0x00002d17 rtn 
+ 00015158  0x00002d1c arg  0x00000040 , 0x00000039 
+ 00015159  0x00002d1d arg  0x0000436f , 0x00000005 
+ 00015160  0x00002d1e call  0x00007ed4 
+ 00015161  0x00002d1f setarg  0x00000000 
+ 00015162  0x00002d20 store  0x00000001 , 0x00000ab2 
+ 00015163  0x00002d21 copy  0x00000011 , 0x00000003 
+ 00015164  0x00002d23 copy  0x00000003 , 0x0000003f 
+ 00015165  0x00002d24 store  0x00000002 , 0x00000ab6 
+ 00015166  0x00002d25 call  0x00003b64 
+ 00015167  0x00002d27 fetch  0x00000001 , 0x00000ab2 
+ 00015168  0x00002d28 fetcht  0x00000001 , 0x00000aa2 
+ 00015169  0x00002d29 increase  0x00000001 , 0x00000002 
+ 00015170  0x00002d2a iadd  0x00000002 , 0x0000003f 
+ 00015171  0x00002d2b store  0x00000001 , 0x00000ab2 
+ 00015172  0x00002d2d sub  0x0000003f , 0x0000001f , 0x0000003e 
+ 00015173  0x00002d2e nbranch  0x00003b50 , 0x00000002 
+ 00015174  0x00002d30 fetcht  0x00000001 , 0x0000436f 
+ 00015175  0x00002d31 setarg  0x00004370 
+ 00015176  0x00002d32 iadd  0x00000002 , 0x0000003f 
+ 00015177  0x00002d33 store  0x00000002 , 0x00000abb 
+ 00015178  0x00002d34 fetcht  0x00000001 , 0x00000aa2 
+ 00015179  0x00002d35 increase  0x00000001 , 0x00000002 
+ 00015180  0x00002d36 fetch  0x00000001 , 0x0000436f 
+ 00015181  0x00002d37 iadd  0x00000002 , 0x0000003f 
+ 00015182  0x00002d38 store  0x00000001 , 0x0000436f 
+ 00015183  0x00002d39 branch  0x00003b59 
+ 00015184  0x00002d3b fetcht  0x00000001 , 0x0000438f 
+ 00015185  0x00002d3c setarg  0x00004390 
+ 00015186  0x00002d3d iadd  0x00000002 , 0x0000003f 
+ 00015187  0x00002d3e store  0x00000002 , 0x00000abb 
+ 00015188  0x00002d3f fetcht  0x00000001 , 0x00000aa2 
+ 00015189  0x00002d40 increase  0x00000001 , 0x00000002 
+ 00015190  0x00002d41 fetch  0x00000001 , 0x0000438f 
+ 00015191  0x00002d42 iadd  0x00000002 , 0x0000003f 
+ 00015192  0x00002d43 store  0x00000001 , 0x0000438f 
+ 00015193  0x00002d45 fetch  0x00000002 , 0x00000abb 
+ 00015194  0x00002d46 copy  0x0000003f , 0x00000005 
+ 00015195  0x00002d47 fetch  0x00000002 , 0x00000ab6 
+ 00015196  0x00002d48 copy  0x0000003f , 0x00000003 
+ 00015197  0x00002d4a copy  0x00000002 , 0x00000039 
+ 00015198  0x00002d4b call  0x000066ea 
+ 00015199  0x00002d4d fetch  0x00000001 , 0x00000b04 
+ 00015200  0x00002d4e fetcht  0x00000001 , 0x00000ab2 
+ 00015201  0x00002d4f isub  0x00000002 , 0x0000003e 
+ 00015202  0x00002d50 nbranch  0x00003b3c , 0x00000005 
+ 00015203  0x00002d51 branch  0x00003c1a 
+ 00015204  0x00002d55 ifetch  0x00000001 , 0x00000003 
+ 00015205  0x00002d56 store  0x00000001 , 0x00000aa2 
+ 00015206  0x00002d57 ifetch  0x00000001 , 0x00000003 
+ 00015207  0x00002d58 store  0x00000001 , 0x00000aae 
+ 00015208  0x00002d59 rtn 
+ 00015209  0x00002d5e arg  0x00000000 , 0x00000002 
+ 00015210  0x00002d5f arg  0x00000002 , 0x00000011 
+ 00015211  0x00002d60 fetch  0x00000002 , 0x000046b4 
+ 00015212  0x00002d61 store  0x00000002 , 0x00000ac2 
+ 00015213  0x00002d62 arg  0x00000ac2 , 0x00000012 
+ 00015214  0x00002d63 branch  0x00003c25 
+ 00015215  0x00002d68 fetch  0x00000001 , 0x00000b04 
+ 00015216  0x00002d69 bne  0x00000001 , 0x00003c17 
+ 00015217  0x00002d6a ifetch  0x00000001 , 0x00000003 
+ 00015218  0x00002d6b store  0x00000001 , 0x000046b2 
+ 00015219  0x00002d6c setarg  0x00000000 
+ 00015220  0x00002d6d store  0x00000002 , 0x000046b4 
+ 00015221  0x00002d6e branch  0x00003c1a 
+ 00015222  0x00002d73 ifetch  0x00000004 , 0x00000003 
+ 00015223  0x00002d74 store  0x00000004 , 0x0000468a 
+ 00015224  0x00002d75 jam  0x00000004 , 0x00004689 
+ 00015225  0x00002d76 jam  0x00000000 , 0x00004663 
+ 00015226  0x00002d77 call  0x00003c1a 
+ 00015227  0x00002d78 branch  0x00005f31 
+ 00015228  0x00002d7d fetch  0x00000001 , 0x00000b04 
+ 00015229  0x00002d7e bne  0x00000003 , 0x00003c17 
+ 00015230  0x00002d7f ifetch  0x00000001 , 0x00000003 
+ 00015231  0x00002d80 beq  0x00000000 , 0x00003b82 
+ 00015232  0x00002d81 beq  0x00000001 , 0x00003b8a 
+ 00015233  0x00002d82 branch  0x00003c17 
+ 00015234  0x00002d85 ifetcht  0x00000001 , 0x00000003 
+ 00015235  0x00002d86 ifetch  0x00000001 , 0x00000003 
+ 00015236  0x00002d87 beq  0x00000002 , 0x00003b88 
+ 00015237  0x00002d88 nsetflag  0x00000034 , 0x00000007 , 0x00000002 
+ 00015238  0x00002d89 call  0x000067fb 
+ 00015239  0x00002d8a branch  0x00003c1a 
+ 00015240  0x00002d8d call  0x00006806 
+ 00015241  0x00002d8e branch  0x00003c1a 
+ 00015242  0x00002d91 ifetcht  0x00000001 , 0x00000003 
+ 00015243  0x00002d92 call  0x00006812 
+ 00015244  0x00002d93 ifetch  0x00000001 , 0x00000003 
+ 00015245  0x00002d94 isolate1  0x00000000 , 0x0000003f 
+ 00015246  0x00002d95 call  0x0000682c 
+ 00015247  0x00002d96 branch  0x00003c1a 
+ 00015248  0x00002d9b fetch  0x00000001 , 0x00000b04 
+ 00015249  0x00002d9c bne  0x00000001 , 0x00003c17 
+ 00015250  0x00002d9d ifetcht  0x00000001 , 0x00000003 
+ 00015251  0x00002d9e call  0x0000681d 
+ 00015252  0x00002d9f setarg  0x00000000 
+ 00015253  0x00002da0 nsetflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00015254  0x00002da1 arg  0x00000001 , 0x00000011 
+ 00015255  0x00002da2 branch  0x00003b0a 
+ 00015256  0x00002da7 copy  0x00000011 , 0x00000003 
+ 00015257  0x00002da8 ifetch  0x00000001 , 0x00000003 
+ 00015258  0x00002da9 copy  0x0000003f , 0x00000002 
+ 00015259  0x00002daa beq  0x00000081 , 0x00003ba3 
+ 00015260  0x00002dab beq  0x00000082 , 0x00003ba8 
+ 00015261  0x00002dac beq  0x00000083 , 0x00003bae 
+ 00015262  0x00002dad store  0x00000001 , 0x000044c6 
+ 00015263  0x00002dae beq  0x00000000 , 0x00003bb3 
+ 00015264  0x00002daf beq  0x00000001 , 0x00003bb6 
+ 00015265  0x00002db0 beq  0x00000002 , 0x00003bb8 
+ 00015266  0x00002db1 branch  0x00003c17 
+ 00015267  0x00002db4 fetch  0x00000001 , 0x000044be 
+ 00015268  0x00002db5 branch  0x00003c17 , 0x00000034 
+ 00015269  0x00002db6 storet  0x00000001 , 0x000044c6 
+ 00015270  0x00002db7 jam  0x0000000d , 0x00004456 
+ 00015271  0x00002db8 branch  0x00003bb4 
+ 00015272  0x00002dba fetch  0x00000001 , 0x000044be 
+ 00015273  0x00002dbb branch  0x00003c17 , 0x00000034 
+ 00015274  0x00002dbc storet  0x00000001 , 0x000044c6 
+ 00015275  0x00002dbd jam  0x0000000d , 0x00004456 
+ 00015276  0x00002dbe jam  0x00000001 , 0x00004454 
+ 00015277  0x00002dbf branch  0x00003c1a 
+ 00015278  0x00002dc1 fetch  0x00000001 , 0x000044be 
+ 00015279  0x00002dc2 branch  0x00003c17 , 0x00000034 
+ 00015280  0x00002dc3 storet  0x00000001 , 0x000044c6 
+ 00015281  0x00002dc4 jam  0x0000000d , 0x00004456 
+ 00015282  0x00002dc5 branch  0x00003bb9 
+ 00015283  0x00002dc7 jam  0x00000000 , 0x00004456 
+ 00015284  0x00002dc9 jam  0x00000003 , 0x00004454 
+ 00015285  0x00002dca branch  0x00003c1a 
+ 00015286  0x00002dcc jam  0x00000005 , 0x00004456 
+ 00015287  0x00002dcd branch  0x00003bb4 
+ 00015288  0x00002dcf jam  0x00000005 , 0x00004456 
+ 00015289  0x00002dd1 jam  0x00000000 , 0x00004454 
+ 00015290  0x00002dd2 branch  0x00003c1a 
+ 00015291  0x00002dd7 fetch  0x00000001 , 0x00000b04 
+ 00015292  0x00002dd8 sub  0x0000003f , 0x0000001f , 0x0000003e 
+ 00015293  0x00002dd9 nbranch  0x00003c17 , 0x00000002 
+ 00015294  0x00002dda store  0x00000001 , 0x0000436f 
+ 00015295  0x00002ddb copy  0x0000003f , 0x00000039 
+ 00015296  0x00002ddc copy  0x00000011 , 0x00000003 
+ 00015297  0x00002ddd arg  0x00004370 , 0x00000005 
+ 00015298  0x00002dde call  0x000066ea 
+ 00015299  0x00002ddf branch  0x00003c1a 
+ 00015300  0x00002de4 fetch  0x00000001 , 0x00000b04 
+ 00015301  0x00002de5 sub  0x0000003f , 0x0000001f , 0x0000003e 
+ 00015302  0x00002de6 nbranch  0x00003c17 , 0x00000002 
+ 00015303  0x00002de7 store  0x00000001 , 0x0000438f 
+ 00015304  0x00002de8 copy  0x0000003f , 0x00000039 
+ 00015305  0x00002de9 copy  0x00000011 , 0x00000003 
+ 00015306  0x00002dea arg  0x00004390 , 0x00000005 
+ 00015307  0x00002deb call  0x000066ea 
+ 00015308  0x00002dec branch  0x00003c1a 
+ 00015309  0x00002df1 fetch  0x00000002 , 0x00004682 
+ 00015310  0x00002df2 bbit0  0x00000009 , 0x00003c17 
+ 00015311  0x00002df3 fetch  0x00000001 , 0x00000b04 
+ 00015312  0x00002df4 bne  0x00000008 , 0x00003c17 
+ 00015313  0x00002df5 copy  0x00000011 , 0x00000003 
+ 00015314  0x00002df6 ifetch  0x00000008 , 0x00000003 
+ 00015315  0x00002df7 store  0x00000008 , 0x00004496 
+ 00015316  0x00002df8 jam  0x00000012 , 0x00000a99 
+ 00015317  0x00002df9 call  0x00007d8f 
+ 00015318  0x00002dfa branch  0x00003c1a 
+ 00015319  0x00002dff ifetch  0x00000002 , 0x00000003 
+ 00015320  0x00002e00 store  0x00000002 , 0x00004482 
+ 00015321  0x00002e01 branch  0x00003c1a 
+ 00015322  0x00002e06 fetch  0x00000001 , 0x000044c6 
+ 00015323  0x00002e07 branch  0x00003c17 , 0x00000034 
+ 00015324  0x00002e08 fetch  0x00000001 , 0x000044c4 
+ 00015325  0x00002e09 bne  0x00000000 , 0x00003c17 
+ 00015326  0x00002e0a fetch  0x00000001 , 0x000044c5 
+ 00015327  0x00002e0b bne  0x00000000 , 0x00003c17 
+ 00015328  0x00002e0c call  0x00007e25 
+ 00015329  0x00002e0d branch  0x00003c1a 
+ 00015330  0x00002e12 fetch  0x00000001 , 0x00000b04 
+ 00015331  0x00002e13 bne  0x00000005 , 0x00003c17 
+ 00015332  0x00002e14 ifetch  0x00000001 , 0x00000003 
+ 00015333  0x00002e15 store  0x00000001 , 0x000046a2 
+ 00015334  0x00002e16 ifetch  0x00000004 , 0x00000003 
+ 00015335  0x00002e17 store  0x00000004 , 0x000046a3 
+ 00015336  0x00002e18 fetcht  0x00000001 , 0x000046a2 
+ 00015337  0x00002e19 call  0x0000680e 
+ 00015338  0x00002e1a call  0x00003cbc 
+ 00015339  0x00002e1b branch  0x00003c1a 
+ 00015340  0x00002e20 fetch  0x00000001 , 0x00000b04 
+ 00015341  0x00002e21 bne  0x00000001 , 0x00003c17 
+ 00015342  0x00002e22 ifetch  0x00000001 , 0x00000003 
+ 00015343  0x00002e23 store  0x00000001 , 0x000041de 
+ 00015344  0x00002e24 branch  0x00003c1a 
+ 00015345  0x00002e29 ifetch  0x00000001 , 0x00000003 
+ 00015346  0x00002e2a beq  0x00000001 , 0x00003bfa 
+ 00015347  0x00002e2b fetch  0x00000001 , 0x000044c1 
+ 00015348  0x00002e2c beq  0x00000003 , 0x00003bf8 
+ 00015349  0x00002e2d beq  0x00000006 , 0x00003bf8 
+ 00015350  0x00002e2e beq  0x00000007 , 0x00003bf8 
+ 00015351  0x00002e2f branch  0x00003c17 
+ 00015352  0x00002e31 jam  0x00000001 , 0x000044c2 
+ 00015353  0x00002e32 branch  0x00003c1a 
+ 00015354  0x00002e35 call  0x00005b53 
+ 00015355  0x00002e36 branch  0x00003c1a 
+ 00015356  0x00002e3b fetch  0x00000001 , 0x00000b04 
+ 00015357  0x00002e3c bne  0x00000001 , 0x00003c17 
+ 00015358  0x00002e3d call  0x00003c1a 
+ 00015359  0x00002e3e ifetch  0x00000001 , 0x00000003 
+ 00015360  0x00002e3f branch  0x000060cb , 0x00000034 
+ 00015361  0x00002e40 branch  0x000060c9 
+ 00015362  0x00002e45 call  0x00003c1a 
+ 00015363  0x00002e46 call  0x00007f9e 
+ 00015364  0x00002e47 jam  0x00000001 , 0x00008010 
+ 00015365  0x00002e48 branch  0x00002a8e 
+ 00015366  0x00002e4d fetch  0x00000001 , 0x00000b04 
+ 00015367  0x00002e4e beq  0x00000000 , 0x00003c17 
+ 00015368  0x00002e4f ifetch  0x00000001 , 0x00000003 
+ 00015369  0x00002e50 branch  0x00003c13 , 0x00000034 
+ 00015370  0x00002e51 fetch  0x00000001 , 0x00000b04 
+ 00015371  0x00002e52 bne  0x00000005 , 0x00003c17 
+ 00015372  0x00002e53 ifetch  0x00000004 , 0x00000003 
+ 00015373  0x00002e54 arg  0x000f4240 , 0x00000002 
+ 00015374  0x00002e55 isub  0x00000002 , 0x0000003e 
+ 00015375  0x00002e56 branch  0x00003c17 , 0x00000002 
+ 00015376  0x00002e57 store  0x00000004 , 0x000044c7 
+ 00015377  0x00002e58 call  0x0000580c 
+ 00015378  0x00002e59 branch  0x00003c1a 
+ 00015379  0x00002e5c call  0x0000580e 
+ 00015380  0x00002e5d branch  0x00003c1a 
+ 00015381  0x00002e62 jam  0x00000000 , 0x00004091 
+ 00015382  0x00002e63 branch  0x00003c1a 
+ 00015383  0x00002e69 arg  0x00000001 , 0x00000002 
+ 00015384  0x00002e6a arg  0x00000000 , 0x00000011 
+ 00015385  0x00002e6b branch  0x00003c25 
+ 00015386  0x00002e6f arg  0x00000000 , 0x00000002 
+ 00015387  0x00002e70 arg  0x00000000 , 0x00000011 
+ 00015388  0x00002e71 branch  0x00003c25 
+ 00015389  0x00002e76 jam  0x00000000 , 0x00000b03 
+ 00015390  0x00002e77 branch  0x00003c49 
+ 00015391  0x00002e7c jam  0x00000002 , 0x00000b03 
+ 00015392  0x00002e7d branch  0x00003c49 
+ 00015393  0x00002e82 jam  0x00000003 , 0x00000b03 
+ 00015394  0x00002e83 branch  0x00003c49 
+ 00015395  0x00002e88 jam  0x00000005 , 0x00000b03 
+ 00015396  0x00002e89 branch  0x00003c49 
+ 00015397  0x00002e92 fetch  0x00000001 , 0x00000b03 
+ 00015398  0x00002e93 copy  0x0000003f , 0x00000013 
+ 00015399  0x00002e94 jam  0x00000006 , 0x00000b03 
+ 00015400  0x00002e95 setarg  0x00000002 
+ 00015401  0x00002e96 iadd  0x00000011 , 0x0000003f 
+ 00015402  0x00002e97 call  0x00003ca7 
+ 00015403  0x00002e98 copy  0x00000013 , 0x0000003f 
+ 00015404  0x00002e99 istore  0x00000001 , 0x0000000a 
+ 00015405  0x00002e9a istoret  0x00000001 , 0x0000000a 
+ 00015406  0x00002e9b copy  0x00000011 , 0x00000039 
+ 00015407  0x00002e9c copy  0x00000012 , 0x00000006 
+ 00015408  0x00002e9d call  0x000066e4 
+ 00015409  0x00002e9e branch  0x000066c5 
+ 00015410  0x00002ea4 call  0x0000397f 
+ 00015411  0x00002ea5 jam  0x00000007 , 0x00000b03 
+ 00015412  0x00002ea6 fetch  0x00000001 , 0x000004ff 
+ 00015413  0x00002ea7 rtn  0x00000034 
+ 00015414  0x00002ea8 call  0x00003ca7 
+ 00015415  0x00002ea9 fetch  0x00000001 , 0x000004ff 
+ 00015416  0x00002eaa copy  0x0000003f , 0x00000039 
+ 00015417  0x00002eab fetch  0x00000002 , 0x00000501 
+ 00015418  0x00002eac copy  0x0000003f , 0x00000006 
+ 00015419  0x00002ead call  0x000066d1 
+ 00015420  0x00002eae branch  0x000066c5 
+ 00015421  0x00002eb3 jam  0x00000008 , 0x00000b03 
+ 00015422  0x00002eb4 fetch  0x00000001 , 0x000046b6 
+ 00015423  0x00002eb5 icopy  0x00000039 
+ 00015424  0x00002eb6 increase  0x00000002 , 0x0000003f 
+ 00015425  0x00002eb7 call  0x00003ca7 
+ 00015426  0x00002eb8 fetch  0x00000002 , 0x000046b9 
+ 00015427  0x00002eb9 istore  0x00000002 , 0x0000000a 
+ 00015428  0x00002eba fetch  0x00000002 , 0x000046b7 
+ 00015429  0x00002ebb icopy  0x00000006 
+ 00015430  0x00002ebc call  0x000066d1 
+ 00015431  0x00002ebd branch  0x000066c5 
+ 00015432  0x00002ec2 jam  0x00000009 , 0x00000b03 
+ 00015433  0x00002ec4 setarg  0x00000000 
+ 00015434  0x00002ec5 call  0x00003ca7 
+ 00015435  0x00002ec6 branch  0x000066c5 
+ 00015436  0x00002ecb jam  0x0000000a , 0x00000b03 
+ 00015437  0x00002ecc setarg  0x00000001 
+ 00015438  0x00002ecd call  0x00003ca7 
+ 00015439  0x00002ecf call  0x00003c5d 
+ 00015440  0x00002ed1 fetch  0x00000002 , 0x00004682 
+ 00015441  0x00002ed2 arg  0x00000002 , 0x00000007 
+ 00015442  0x00002ed3 qisolate1  0x0000003f 
+ 00015443  0x00002ed4 setflag  0x00000001 , 0x00000003 , 0x00000002 
+ 00015444  0x00002ed6 arg  0x00000009 , 0x00000007 
+ 00015445  0x00002ed7 qisolate1  0x0000003f 
+ 00015446  0x00002ed8 setflag  0x00000001 , 0x00000005 , 0x00000002 
+ 00015447  0x00002eda fetch  0x00000001 , 0x00004682 
+ 00015448  0x00002edb arg  0x00000004 , 0x00000007 
+ 00015449  0x00002edc qisolate1  0x0000003f 
+ 00015450  0x00002edd setflag  0x00000001 , 0x00000004 , 0x00000002 
+ 00015451  0x00002edf istoret  0x00000001 , 0x0000000a 
+ 00015452  0x00002ee0 branch  0x000066c5 
+ 00015453  0x00002ee5 arg  0x00000000 , 0x00000002 
+ 00015454  0x00002ee6 fetch  0x00000001 , 0x00004093 
+ 00015455  0x00002ee7 arg  0x00000000 , 0x00000007 
+ 00015456  0x00002ee8 qisolate1  0x0000003f 
+ 00015457  0x00002ee9 setflag  0x00000001 , 0x00000000 , 0x00000002 
+ 00015458  0x00002eea arg  0x00000001 , 0x00000007 
+ 00015459  0x00002eeb qisolate1  0x0000003f 
+ 00015460  0x00002eec setflag  0x00000001 , 0x00000001 , 0x00000002 
+ 00015461  0x00002eee fetch  0x00000001 , 0x0000436e 
+ 00015462  0x00002eef arg  0x00000000 , 0x00000007 
+ 00015463  0x00002ef0 qisolate1  0x0000003f 
+ 00015464  0x00002ef1 setflag  0x00000001 , 0x00000002 , 0x00000002 
+ 00015465  0x00002ef2 rtn 
+ 00015466  0x00002ef7 jam  0x0000000d , 0x00000b03 
+ 00015467  0x00002ef8 fetch  0x00000001 , 0x00004217 
+ 00015468  0x00002ef9 mul32  0x0000003f , 0x00000022 , 0x0000003f 
+ 00015469  0x00002efa icopy  0x00000039 
+ 00015470  0x00002efb call  0x00003ca7 
+ 00015471  0x00002efc fetch  0x00000002 , 0x00004215 
+ 00015472  0x00002efd icopy  0x00000006 
+ 00015473  0x00002efe call  0x000066d1 
+ 00015474  0x00002eff branch  0x000066c5 
+ 00015475  0x00002f04 jam  0x0000000e , 0x00000b03 
+ 00015476  0x00002f05 setarg  0x00000004 
+ 00015477  0x00002f06 call  0x00003ca7 
+ 00015478  0x00002f07 fetch  0x00000004 , 0x000009ba 
+ 00015479  0x00002f08 istore  0x00000004 , 0x0000000a 
+ 00015480  0x00002f09 branch  0x000066c5 
+ 00015481  0x00002f0e jam  0x0000000f , 0x00000b03 
+ 00015482  0x00002f0f hfetch  0x00000002 , 0x00008112 
+ 00015483  0x00002f10 arg  0x000000ff , 0x00000002 
+ 00015484  0x00002f11 call  0x00007fdd 
+ 00015485  0x00002f12 copy  0x0000003f , 0x00000039 
+ 00015486  0x00002f13 call  0x00003ca7 
+ 00015487  0x00002f14 call  0x000066cb 
+ 00015488  0x00002f15 call  0x00006703 
+ 00015489  0x00002f16 branch  0x000066c5 
+ 00015490  0x00002f1b jam  0x00000010 , 0x00000b03 
+ 00015491  0x00002f1c branch  0x00003c49 
+ 00015492  0x00002f21 jam  0x00000011 , 0x00000b03 
+ 00015493  0x00002f22 setarg  0x00000004 
+ 00015494  0x00002f23 call  0x00003ca7 
+ 00015495  0x00002f24 fetch  0x00000004 , 0x000044c7 
+ 00015496  0x00002f25 istore  0x00000004 , 0x0000000a 
+ 00015497  0x00002f26 branch  0x000066c5 
+ 00015498  0x00002f2b arg  0x00000180 , 0x00000011 
+ 00015499  0x00002f2c branch  0x00003c91 
+ 00015500  0x00002f2f arg  0x00000080 , 0x00000011 
+ 00015501  0x00002f30 branch  0x00003c91 
+ 00015502  0x00002f33 arg  0x00000101 , 0x00000011 
+ 00015503  0x00002f34 branch  0x00003c91 
+ 00015504  0x00002f37 arg  0x00000001 , 0x00000011 
+ 00015505  0x00002f3a jam  0x00000000 , 0x00004661 
+ 00015506  0x00002f3b jam  0x00000014 , 0x00000b03 
+ 00015507  0x00002f3c setarg  0x00000002 
+ 00015508  0x00002f3d call  0x00003ca7 
+ 00015509  0x00002f3e copy  0x00000011 , 0x0000003f 
+ 00015510  0x00002f3f istore  0x00000002 , 0x0000000a 
+ 00015511  0x00002f40 branch  0x000066c5 
+ 00015512  0x00002f45 arg  0x00000000 , 0x00000013 
+ 00015513  0x00002f46 branch  0x00003c9b 
+ 00015514  0x00002f49 arg  0x00000001 , 0x00000013 
+ 00015515  0x00002f4c jam  0x00000015 , 0x00000b03 
+ 00015516  0x00002f4d setarg  0x00000001 
+ 00015517  0x00002f4e call  0x00003ca7 
+ 00015518  0x00002f4f copy  0x00000013 , 0x0000003f 
+ 00015519  0x00002f50 istore  0x00000001 , 0x0000000a 
+ 00015520  0x00002f51 branch  0x000066c5 
+ 00015521  0x00002f56 jam  0x0000001d , 0x00000b03 
+ 00015522  0x00002f57 setarg  0x00000004 
+ 00015523  0x00002f58 call  0x00003ca7 
+ 00015524  0x00002f59 fetch  0x00000004 , 0x000009ba 
+ 00015525  0x00002f5a istore  0x00000004 , 0x0000000a 
+ 00015526  0x00002f5b branch  0x000066c5 
+ 00015527  0x00002f67 jam  0x00000002 , 0x00000b02 
+ 00015528  0x00002f68 store  0x00000001 , 0x00000b04 
+ 00015529  0x00002f69 storet  0x00000008 , 0x00000aa2 
+ 00015530  0x00002f6a bpatch  0x000000e2 , 0x0000401c 
+ 00015531  0x00002f6b call  0x00003cb1 
+ 00015532  0x00002f6c fetcht  0x00000008 , 0x00000aa2 
+ 00015533  0x00002f6d call  0x000066c2 
+ 00015534  0x00002f6e fetch  0x00000003 , 0x00000b02 
+ 00015535  0x00002f6f istore  0x00000003 , 0x0000000a 
+ 00015536  0x00002f70 rtn 
+ 00015537  0x00002f74 call  0x00003cba 
+ 00015538  0x00002f75 rtn  0x00000001 
+ 00015539  0x00002f77 call  0x00003cb8 
+ 00015540  0x00002f78 fetch  0x00000004 , 0x000046a3 
+ 00015541  0x00002f79 rshift2  0x0000003f , 0x0000003f 
+ 00015542  0x00002f7a rtn  0x00000034 
+ 00015543  0x00002f7b branch  0x00003cbe 
+ 00015544  0x00002f7f fetcht  0x00000001 , 0x000046a2 
+ 00015545  0x00002f80 branch  0x00006829 
+ 00015546  0x00002f83 fetcht  0x00000001 , 0x000046a2 
+ 00015547  0x00002f84 branch  0x0000681b 
+ 00015548  0x00002f87 fetcht  0x00000001 , 0x000046a2 
+ 00015549  0x00002f88 branch  0x00006825 
+ 00015550  0x00002f8c increase  0xffffffff , 0x0000003f 
+ 00015551  0x00002f8d nop  0x00000026 
+ 00015552  0x00002f8e nbranch  0x00003cbe , 0x00000034 
+ 00015553  0x00002f8f rtn 
+ 00015554  0x00002f99 call  0x00003ad4 
+ 00015555  0x00002f9a rtn  0x00000028 
+ 00015556  0x00002f9b copy  0x00000011 , 0x0000003f 
+ 00015557  0x00002f9c store  0x00000002 , 0x000046b7 
+ 00015558  0x00002f9d copy  0x00000012 , 0x0000003f 
+ 00015559  0x00002f9e store  0x00000001 , 0x000046b6 
+ 00015560  0x00002f9f fetch  0x00000002 , 0x00000478 
+ 00015561  0x00002fa0 fetcht  0x00000002 , 0x000046bb 
+ 00015562  0x00002fa1 isub  0x00000002 , 0x0000003e 
+ 00015563  0x00002fa2 branch  0x00003ccf , 0x00000005 
+ 00015564  0x00002fa3 fetcht  0x00000002 , 0x000046bd 
+ 00015565  0x00002fa4 isub  0x00000002 , 0x0000003e 
+ 00015566  0x00002fa5 nrtn  0x00000005 
+ 00015567  0x00002fa7 store  0x00000002 , 0x000046b9 
+ 00015568  0x00002fa8 branch  0x00003c3d 
+ 00015569  0x00002fae fetch  0x00000001 , 0x000046bf 
+ 00015570  0x00002faf rtnbit1  0x00000005 
+ 00015571  0x00002fb0 call  0x00003cf0 
+ 00015572  0x00002fb1 branch  0x0000340c 
+ 00015573  0x00002fb5 jam  0x00000002 , 0x00004172 
+ 00015574  0x00002fb6 rtn 
+ 00015575  0x00002fbb branch  0x00003cd8 
+ 00015576  0x00002fbe fetch  0x00000001 , 0x000046b2 
+ 00015577  0x00002fbf rtn  0x00000034 
+ 00015578  0x00002fc0 fetch  0x00000001 , 0x000046b3 
+ 00015579  0x00002fc1 rtn  0x00000034 
+ 00015580  0x00002fc2 increase  0xffffffff , 0x0000003f 
+ 00015581  0x00002fc3 store  0x00000001 , 0x000046b3 
+ 00015582  0x00002fc4 nrtn  0x00000034 
+ 00015583  0x00002fc5 jam  0x0000000a , 0x000046b3 
+ 00015584  0x00002fc6 call  0x000068eb 
+ 00015585  0x00002fc7 call  0x00006908 
+ 00015586  0x00002fc8 div  0x0000003f , 0x00000064 
+ 00015587  0x00002fc9 call  0x00007f86 
+ 00015588  0x00002fca quotient  0x0000003f 
+ 00015589  0x00002fcb remainder  0x00000002 
+ 00015590  0x00002fcc store  0x00000001 , 0x000046b4 
+ 00015591  0x00002fcd storet  0x00000001 , 0x000046b5 
+ 00015592  0x00002fce rtn 
+ 00015593  0x00002fd2 call  0x00007fb4 
+ 00015594  0x00002fd3 branch  0x000033d9 , 0x00000002 
+ 00015595  0x00002fd4 branch  0x000033db 
+ 00015596  0x00002fd9 arg  0x00000006 , 0x00000007 
+ 00015597  0x00002fda branch  0x00003cfc 
+ 00015598  0x00002fdd arg  0x00000006 , 0x00000007 
+ 00015599  0x00002fde branch  0x00003cf8 
+ 00015600  0x00002fe1 arg  0x00000005 , 0x00000007 
+ 00015601  0x00002fe2 branch  0x00003cfc 
+ 00015602  0x00002fe5 arg  0x00000005 , 0x00000007 
+ 00015603  0x00002fe6 branch  0x00003cf8 
+ 00015604  0x00002fe9 arg  0x00000004 , 0x00000007 
+ 00015605  0x00002fea branch  0x00003cfc 
+ 00015606  0x00002fed arg  0x00000004 , 0x00000007 
+ 00015607  0x00002fee branch  0x00003cf8 
+ 00015608  0x00002ff1 fetch  0x00000001 , 0x000046bf 
+ 00015609  0x00002ff2 qset0  0x0000003f 
+ 00015610  0x00002ff3 store  0x00000001 , 0x000046bf 
+ 00015611  0x00002ff4 rtn 
+ 00015612  0x00002ff7 fetch  0x00000001 , 0x000046bf 
+ 00015613  0x00002ff8 qset1  0x0000003f 
+ 00015614  0x00002ff9 store  0x00000001 , 0x000046bf 
+ 00015615  0x00002ffa rtn 
+ 00015616  0x00003005 call  0x00003d39 
+ 00015617  0x00003006 call  0x0000640f 
+ 00015618  0x00003007 call  0x000040c6 
+ 00015619  0x00003008 call  0x00003d66 
+ 00015620  0x00003009 call  0x00006411 
+ 00015621  0x0000300a rtn  0x0000002b 
+ 00015622  0x0000300b call  0x00003d16 
+ 00015623  0x0000300c call  0x00003d19 
+ 00015624  0x0000300f fetch  0x00000004 , 0x000046d3 
+ 00015625  0x00003010 rtnbit1  0x00000010 
+ 00015626  0x00003011 call  0x00003d4e 
+ 00015627  0x00003012 rtnmark1  0x00000026 
+ 00015628  0x00003013 fetch  0x00000002 , 0x00004682 
+ 00015629  0x00003014 bbit1  0x0000000c , 0x000042b0 
+ 00015630  0x00003015 branch  0x000042a2 
+ 00015631  0x00003019 fetch  0x00000004 , 0x000046d3 
+ 00015632  0x0000301a rtnbit0  0x0000001b 
+ 00015633  0x0000301b arg  0x00000014 , 0x00000039 
+ 00015634  0x0000301d setarg  0x00030d40 
+ 00015635  0x0000301e call  0x00002a8f 
+ 00015636  0x0000301f loop  0x00007ec1 
+ 00015637  0x00003020 rtn 
+ 00015638  0x00003024 fetch  0x00000004 , 0x000046d3 
+ 00015639  0x00003025 rtnbit0  0x00000010 
+ 00015640  0x00003026 branch  0x000048ea 
+ 00015641  0x0000302a setarg  0x0000416d 
+ 00015642  0x0000302b store  0x00000002 , 0x000041ef 
+ 00015643  0x0000302c setarg  0x00003f77 
+ 00015644  0x0000302d store  0x00000002 , 0x000041f1 
+ 00015645  0x0000302e setarg  0x00003ebb 
+ 00015646  0x0000302f store  0x00000002 , 0x000041ed 
+ 00015647  0x00003030 setarg  0x0000417c 
+ 00015648  0x00003031 store  0x00000002 , 0x000041f5 
+ 00015649  0x00003032 setarg  0x00003de3 
+ 00015650  0x00003033 store  0x00000002 , 0x000041f3 
+ 00015651  0x00003034 setarg  0x00003eb3 
+ 00015652  0x00003035 store  0x00000002 , 0x000041eb 
+ 00015653  0x00003036 setarg  0x00003d5b 
+ 00015654  0x00003037 store  0x00000002 , 0x000041f9 
+ 00015655  0x00003039 call  0x00002c7a 
+ 00015656  0x0000303a setarg  0x00004401 
+ 00015657  0x0000303b add  0x00000013 , 0x000000d8 , 0x00000005 
+ 00015658  0x0000303c istore  0x00000002 , 0x00000005 
+ 00015659  0x0000303d setarg  0x00004406 
+ 00015660  0x0000303e add  0x00000013 , 0x000000da , 0x00000005 
+ 00015661  0x0000303f istore  0x00000002 , 0x00000005 
+ 00015662  0x00003040 setarg  0x00003ebf 
+ 00015663  0x00003041 add  0x00000013 , 0x000000dc , 0x00000005 
+ 00015664  0x00003042 istore  0x00000002 , 0x00000005 
+ 00015665  0x00003044 setarg  0x000041f9 
+ 00015666  0x00003045 store  0x00000002 , 0x000041fd 
+ 00015667  0x00003046 setarg  0x00003d36 
+ 00015668  0x00003047 store  0x00000002 , 0x00004201 
+ 00015669  0x00003048 rtn 
+ 00015670  0x0000304b fetch  0x00000004 , 0x000046d3 
+ 00015671  0x0000304c bbit0  0x00000012 , 0x000064d7 
+ 00015672  0x0000304d branch  0x000064da 
+ 00015673  0x00003050 rtn  0x0000002b 
+ 00015674  0x00003051 call  0x00002c9d 
+ 00015675  0x00003052 call  0x00003e6e 
+ 00015676  0x00003053 call  0x00003e1e 
+ 00015677  0x00003054 call  0x00003e54 
+ 00015678  0x00003055 call  0x00005810 
+ 00015679  0x00003056 call  0x00005839 
+ 00015680  0x00003057 call  0x0000582c 
+ 00015681  0x00003058 call  0x00005818 
+ 00015682  0x00003059 fetch  0x00000004 , 0x000046d3 
+ 00015683  0x0000305a bbit1  0x00000014 , 0x00003d46 
+ 00015684  0x0000305b bbit1  0x00000013 , 0x00004414 
+ 00015685  0x0000305c rtn 
+ 00015686  0x0000305f call  0x0000659c 
+ 00015687  0x00003060 fetch  0x00000004 , 0x000046d3 
+ 00015688  0x00003061 isolate1  0x00000019 , 0x0000003f 
+ 00015689  0x00003062 ncall  0x000065c2 , 0x00000001 
+ 00015690  0x00003063 call  0x0000443f 
+ 00015691  0x00003064 call  0x00003dc9 
+ 00015692  0x00003065 call  0x000041aa 
+ 00015693  0x00003066 branch  0x000065df 
+ 00015694  0x00003069 fetch  0x00000004 , 0x000046d3 
+ 00015695  0x0000306a bbit0  0x0000001e , 0x00003d53 
+ 00015696  0x0000306b fetch  0x00000001 , 0x00000abd 
+ 00015697  0x0000306c isolate0  0x00000003 , 0x0000003f 
+ 00015698  0x0000306d nrtn  0x00000001 
+ 00015699  0x0000306f fetch  0x00000001 , 0x0000471f 
+ 00015700  0x00003070 store  0x00000001 , 0x0000471e 
+ 00015701  0x00003071 fetch  0x00000001 , 0x000046f5 
+ 00015702  0x00003072 rtnbit1  0x00000006 
+ 00015703  0x00003074 fetch  0x00000004 , 0x000046d3 
+ 00015704  0x00003075 rtnbit0  0x00000011 
+ 00015705  0x00003076 bbit1  0x0000001d , 0x00002ee4 
+ 00015706  0x00003077 branch  0x00002f2c 
+ 00015707  0x00003079 fetch  0x00000001 , 0x00000478 
+ 00015708  0x0000307a sub  0x0000003f , 0x0000001a , 0x0000003f 
+ 00015709  0x0000307b nrtn  0x00000005 
+ 00015710  0x0000307c jam  0x00000012 , 0x00000a99 
+ 00015711  0x0000307d call  0x00007d8f 
+ 00015712  0x0000307f arg  0x00000000 , 0x00000007 
+ 00015713  0x00003080 branch  0x000041b9 
+ 00015714  0x00003083 fetch  0x00000001 , 0x000046b6 
+ 00015715  0x00003084 rtneq  0x00000001 
+ 00015716  0x00003085 jam  0x00000001 , 0x000046b6 
+ 00015717  0x00003086 rtn 
+ 00015718  0x00003088 fetch  0x00000001 , 0x000046e1 
+ 00015719  0x00003089 and  0x0000003f , 0x0000000f , 0x0000003f 
+ 00015720  0x0000308a store  0x00000001 , 0x0000477a 
+ 00015721  0x0000308b branch  0x00003d80 
+ 00015722  0x0000308f fetcht  0x00000001 , 0x000046e7 
+ 00015723  0x00003090 call  0x0000681d 
+ 00015724  0x00003091 nbranch  0x00003d62 , 0x00000001 
+ 00015725  0x00003093 fetch  0x00000001 , 0x000046b6 
+ 00015726  0x00003094 rtneq  0x00000000 
+ 00015727  0x00003095 jam  0x00000000 , 0x000046b6 
+ 00015728  0x00003096 fetch  0x00000001 , 0x0000477a 
+ 00015729  0x00003097 increase  0x00000001 , 0x0000003f 
+ 00015730  0x00003098 and  0x0000003f , 0x00000003 , 0x0000003f 
+ 00015731  0x00003099 store  0x00000001 , 0x0000477a 
+ 00015732  0x0000309a call  0x00003d7e 
+ 00015733  0x0000309b fetch  0x00000004 , 0x000046d3 
+ 00015734  0x0000309c bbit1  0x00000014 , 0x0000443b 
+ 00015735  0x0000309d bbit1  0x00000013 , 0x00003d79 
+ 00015736  0x0000309e rtn 
+ 00015737  0x000030a0 arg  0x0000001e , 0x00000002 
+ 00015738  0x000030a1 call  0x0000680e 
+ 00015739  0x000030a2 arg  0x0000001f , 0x00000002 
+ 00015740  0x000030a3 call  0x0000680e 
+ 00015741  0x000030a4 branch  0x00004435 
+ 00015742  0x000030a7 bpatch  0x000000e3 , 0x0000401c 
+ 00015743  0x000030a8 call  0x0000424a 
+ 00015744  0x000030a9 fetch  0x00000001 , 0x000046e0 
+ 00015745  0x000030aa beq  0x00000005 , 0x00003daa 
+ 00015746  0x000030ab beq  0x00000004 , 0x00003d96 
+ 00015747  0x000030ac fetch  0x00000001 , 0x0000477a 
+ 00015748  0x000030ad beq  0x00000000 , 0x00003d8a 
+ 00015749  0x000030ae beq  0x00000001 , 0x00003d88 
+ 00015750  0x000030af beq  0x00000002 , 0x00003d8c 
+ 00015751  0x000030b0 beq  0x00000003 , 0x00003d8e 
+ 00015752  0x000030b2 fetch  0x00000001 , 0x00004780 
+ 00015753  0x000030b3 branch  0x00003dbe 
+ 00015754  0x000030b5 fetch  0x00000001 , 0x0000477f 
+ 00015755  0x000030b6 branch  0x00003dbe 
+ 00015756  0x000030b8 fetch  0x00000001 , 0x00004781 
+ 00015757  0x000030b9 branch  0x00003dbe 
+ 00015758  0x000030bb fetch  0x00000001 , 0x00004782 
+ 00015759  0x000030bc branch  0x00003dbe 
+ 00015760  0x000030be fetch  0x00000001 , 0x000046e0 
+ 00015761  0x000030bf rtneq  0x00000006 
+ 00015762  0x000030c0 fetch  0x00000001 , 0x000046b5 
+ 00015763  0x000030c1 increase  0x00000001 , 0x0000003f 
+ 00015764  0x000030c2 store  0x00000001 , 0x000046b5 
+ 00015765  0x000030c3 rtn 
+ 00015766  0x000030c6 fetch  0x00000001 , 0x0000477a 
+ 00015767  0x000030c7 beq  0x00000000 , 0x00003d9d 
+ 00015768  0x000030c8 beq  0x00000001 , 0x00003d9b 
+ 00015769  0x000030c9 beq  0x00000002 , 0x00003d9f 
+ 00015770  0x000030ca beq  0x00000003 , 0x00003da1 
+ 00015771  0x000030cc fetch  0x00000001 , 0x00004784 
+ 00015772  0x000030cd branch  0x00003da2 
+ 00015773  0x000030cf fetch  0x00000001 , 0x00004783 
+ 00015774  0x000030d0 branch  0x00003da2 
+ 00015775  0x000030d2 fetch  0x00000001 , 0x00004785 
+ 00015776  0x000030d3 branch  0x00003da2 
+ 00015777  0x000030d5 fetch  0x00000001 , 0x00004786 
+ 00015778  0x000030d7 store  0x00000001 , 0x000046b5 
+ 00015779  0x000030d8 lshift8  0x0000003f , 0x0000003f 
+ 00015780  0x000030d9 copy  0x0000003f , 0x00000011 
+ 00015781  0x000030da add  0x0000003f , 0x0000000d , 0x0000003f 
+ 00015782  0x000030db call  0x00006413 
+ 00015783  0x000030dc copy  0x00000011 , 0x0000003f 
+ 00015784  0x000030dd add  0x0000003f , 0x0000000e , 0x0000003f 
+ 00015785  0x000030de branch  0x00006413 
+ 00015786  0x000030e1 fetch  0x00000001 , 0x0000477a 
+ 00015787  0x000030e2 beq  0x00000000 , 0x00003db1 
+ 00015788  0x000030e3 beq  0x00000001 , 0x00003daf 
+ 00015789  0x000030e4 beq  0x00000002 , 0x00003db3 
+ 00015790  0x000030e5 beq  0x00000003 , 0x00003db5 
+ 00015791  0x000030e7 fetch  0x00000001 , 0x00004788 
+ 00015792  0x000030e8 branch  0x00003db6 
+ 00015793  0x000030ea fetch  0x00000001 , 0x00004787 
+ 00015794  0x000030eb branch  0x00003db6 
+ 00015795  0x000030ed fetch  0x00000001 , 0x00004789 
+ 00015796  0x000030ee branch  0x00003db6 
+ 00015797  0x000030f0 fetch  0x00000001 , 0x0000478a 
+ 00015798  0x000030f2 store  0x00000001 , 0x000046b5 
+ 00015799  0x000030f3 call  0x000040c0 
+ 00015800  0x000030f4 fetch  0x00000001 , 0x000046b5 
+ 00015801  0x000030f6 add  0x0000003f , 0x00000080 , 0x0000003f 
+ 00015802  0x000030f7 lshift8  0x0000003f , 0x0000003f 
+ 00015803  0x000030f8 add  0x0000003f , 0x00000005 , 0x0000003f 
+ 00015804  0x000030f9 copy  0x0000003f , 0x00000011 
+ 00015805  0x000030fa branch  0x0000415a 
+ 00015806  0x000030fd store  0x00000001 , 0x000046b5 
+ 00015807  0x000030fe call  0x00003d90 
+ 00015808  0x000030ff fetch  0x00000001 , 0x000046b5 
+ 00015809  0x00003100 setarg  0x00000006 
+ 00015810  0x00003101 call  0x00006414 
+ 00015811  0x00003102 and  0x0000003f , 0x000000f8 , 0x00000002 
+ 00015812  0x00003103 fetch  0x00000001 , 0x000046b5 
+ 00015813  0x00003104 iadd  0x00000002 , 0x0000003f 
+ 00015814  0x00003105 lshift8  0x0000003f , 0x0000003f 
+ 00015815  0x00003106 add  0x0000003f , 0x00000006 , 0x0000003f 
+ 00015816  0x00003107 branch  0x00006413 
+ 00015817  0x0000310b call  0x000033c4 
+ 00015818  0x0000310c branch  0x00004316 , 0x00000005 
+ 00015819  0x0000310d call  0x0000441c 
+ 00015820  0x0000310e call  0x000042e4 
+ 00015821  0x0000310f branch  0x000033bd 
+ 00015822  0x00003113 fetch  0x00000002 , 0x00004707 
+ 00015823  0x00003114 rtn  0x00000034 
+ 00015824  0x00003115 fetch  0x00000004 , 0x000046d3 
+ 00015825  0x00003116 rtnbit0  0x00000011 
+ 00015826  0x00003117 rtnbit1  0x00000003 
+ 00015827  0x00003118 rtnmark1  0x00000026 
+ 00015828  0x00003119 call  0x00004083 
+ 00015829  0x0000311a rtnne  0x00000007 
+ 00015830  0x0000311b call  0x00004482 
+ 00015831  0x0000311c arg  0x00000003 , 0x00000007 
+ 00015832  0x0000311d call  0x000043ce 
+ 00015833  0x0000311e setarg  0x00000000 
+ 00015834  0x0000311f store  0x00000002 , 0x000046ae 
+ 00015835  0x00003120 store  0x00000001 , 0x000046b4 
+ 00015836  0x00003121 call  0x00003263 
+ 00015837  0x00003123 fetch  0x00000002 , 0x00004682 
+ 00015838  0x00003124 bbit1  0x00000007 , 0x00004392 
+ 00015839  0x00003125 bbit1  0x00000009 , 0x00003402 
+ 00015840  0x00003126 bbit1  0x00000000 , 0x000033e9 
+ 00015841  0x00003127 call  0x000042ca 
+ 00015842  0x00003128 branch  0x00002ead 
+ 00015843  0x0000312c call  0x00003dce 
+ 00015844  0x0000312d call  0x00007e34 
+ 00015845  0x0000312e call  0x00003d6a 
+ 00015846  0x0000312f call  0x00003de9 
+ 00015847  0x00003130 call  0x00003ee0 
+ 00015848  0x00003131 branch  0x00003df7 
+ 00015849  0x00003133 fetch  0x00000004 , 0x000046d3 
+ 00015850  0x00003134 rtnbit0  0x00000010 
+ 00015851  0x00003135 call  0x000048d3 
+ 00015852  0x00003136 branch  0x000048fd 
+ 00015853  0x00003139 hfetch  0x00000001 , 0x00008a04 
+ 00015854  0x0000313a bbit0  0x00000007 , 0x00003df1 
+ 00015855  0x0000313b bbit1  0x00000007 , 0x00003df4 
+ 00015856  0x0000313c rtn 
+ 00015857  0x0000313e fetch  0x00000001 , 0x000046ff 
+ 00015858  0x0000313f rtnbit0  0x00000007 
+ 00015859  0x00003140 branch  0x0000659a 
+ 00015860  0x00003142 fetch  0x00000001 , 0x000046ff 
+ 00015861  0x00003143 rtnbit1  0x00000007 
+ 00015862  0x00003144 branch  0x00004381 
+ 00015863  0x00003147 call  0x00003ded 
+ 00015864  0x00003148 hfetch  0x00000001 , 0x00008a04 
+ 00015865  0x00003149 store  0x00000001 , 0x000046ff 
+ 00015866  0x0000314a rtnbit0  0x00000007 
+ 00015867  0x0000314b call  0x00003e07 
+ 00015868  0x0000314c fetch  0x00000004 , 0x000046f9 
+ 00015869  0x0000314d fetcht  0x00000001 , 0x000046fd 
+ 00015870  0x0000314e iadd  0x00000002 , 0x00000002 
+ 00015871  0x0000314f copy  0x00000022 , 0x0000003f 
+ 00015872  0x00003150 isub  0x00000002 , 0x0000003e 
+ 00015873  0x00003151 nrtn  0x00000002 
+ 00015874  0x00003152 store  0x00000004 , 0x000046f9 
+ 00015875  0x00003153 call  0x00003f97 
+ 00015876  0x00003154 nrtn  0x00000028 
+ 00015877  0x00003155 jam  0x00000004 , 0x00000d38 
+ 00015878  0x00003156 branch  0x00003e0f 
+ 00015879  0x00003159 fetcht  0x00000004 , 0x000046f9 
+ 00015880  0x0000315a copy  0x00000022 , 0x0000003f 
+ 00015881  0x0000315b isub  0x00000002 , 0x0000003e 
+ 00015882  0x0000315c ncall  0x00003e0c , 0x00000002 
+ 00015883  0x0000315d rtn 
+ 00015884  0x0000315f setarg  0x00000000 
+ 00015885  0x00003160 store  0x00000004 , 0x000046f9 
+ 00015886  0x00003161 rtn 
+ 00015887  0x00003166 fetch  0x00000001 , 0x00000d38 
+ 00015888  0x00003167 rtnbit0  0x00000002 
+ 00015889  0x00003168 branch  0x00003e12 
+ 00015890  0x0000316a hfetch  0x00000001 , 0x00008a04 
+ 00015891  0x0000316b rtnbit0  0x00000007 
+ 00015892  0x0000316c jam  0x00000020 , 0x00000d52 
+ 00015893  0x0000316d setarg  0x00000001 
+ 00015894  0x0000316e store  0x00000001 , 0x00000d54 
+ 00015895  0x0000316f fetch  0x00000007 , 0x0000469a 
+ 00015896  0x00003170 istore  0x00000007 , 0x00000005 
+ 00015897  0x00003171 rtn 
+ 00015898  0x00003175 hfetch  0x00000002 , 0x00008050 
+ 00015899  0x00003176 set0  0x0000000b , 0x0000003f 
+ 00015900  0x00003177 hstore  0x00000002 , 0x00008050 
+ 00015901  0x00003178 rtn 
+ 00015902  0x0000317b setarg  0x00008c00 
+ 00015903  0x0000317c store  0x00000002 , 0x00004575 
+ 00015904  0x0000317d setarg  0x00008e7a 
+ 00015905  0x0000317e store  0x00000002 , 0x000044bc 
+ 00015906  0x0000317f setarg  0x00002402 
+ 00015907  0x00003180 store  0x00000002 , 0x000040bd 
+ 00015908  0x00003181 setarg  0x00002580 
+ 00015909  0x00003182 store  0x00000003 , 0x000040aa 
+ 00015910  0x00003183 jam  0x00000003 , 0x00004173 
+ 00015911  0x00003184 jam  0x00000008 , 0x00004156 
+ 00015912  0x00003185 jam  0x00000001 , 0x000046d9 
+ 00015913  0x00003186 setarg  0x00000200 
+ 00015914  0x00003187 store  0x00000002 , 0x00004154 
+ 00015915  0x00003188 jam  0x00000017 , 0x000044a6 
+ 00015916  0x00003189 jam  0x00000017 , 0x000044a8 
+ 00015917  0x0000318b setarg  0x00000a77 
+ 00015918  0x0000318c store  0x00000002 , 0x00004212 
+ 00015919  0x0000319c setsect  0x00000000 , 0x00000306 
+ 00015920  0x0000319d setsect  0x00000001 , 0x00004440 
+ 00015921  0x0000319e setsect  0x00000002 , 0x00010000 
+ 00015922  0x0000319f setsect  0x00000003 , 0x00004408 
+ 00015923  0x000031a0 store  0x00000009 , 0x00004577 
+ 00015924  0x000031a1 setsect  0x00000000 , 0x00001224 
+ 00015925  0x000031a2 setsect  0x00000001 , 0x00004000 
+ 00015926  0x000031a3 setsect  0x00000002 , 0x00000000 
+ 00015927  0x000031a4 istore  0x00000005 , 0x00000005 
+ 00015928  0x000031a6 setsect  0x00000000 , 0x0003ffff 
+ 00015929  0x000031a7 setsect  0x00000001 , 0x0002fe23 
+ 00015930  0x000031a8 setsect  0x00000002 , 0x000199d9 
+ 00015931  0x000031a9 setsect  0x00000003 , 0x0000020d 
+ 00015932  0x000031aa store  0x00000008 , 0x00004098 
+ 00015933  0x000031ac setarg  0x0000012c 
+ 00015934  0x000031ad store  0x00000002 , 0x00004707 
+ 00015935  0x000031ae call  0x000057a3 
+ 00015936  0x000031af fetch  0x00000004 , 0x000046d3 
+ 00015937  0x000031b0 rtnbit0  0x0000001f 
+ 00015938  0x000031b1 call  0x00003e44 
+ 00015939  0x000031b2 branch  0x00003e4c 
+ 00015940  0x000031b5 fetcht  0x00000001 , 0x000046f7 
+ 00015941  0x000031b6 call  0x000067fb 
+ 00015942  0x000031b7 fetcht  0x00000001 , 0x000046f7 
+ 00015943  0x000031b8 call  0x0000681d 
+ 00015944  0x000031b9 jam  0x00000003 , 0x000046f6 
+ 00015945  0x000031ba rtn  0x00000001 
+ 00015946  0x000031bb jam  0x00000002 , 0x000046f6 
+ 00015947  0x000031bc rtn 
+ 00015948  0x000031bf fetcht  0x00000001 , 0x000046f8 
+ 00015949  0x000031c0 call  0x000067fb 
+ 00015950  0x000031c1 fetcht  0x00000001 , 0x000046f8 
+ 00015951  0x000031c2 call  0x0000681d 
+ 00015952  0x000031c3 jam  0x00000000 , 0x0000422d 
+ 00015953  0x000031c4 rtn  0x00000001 
+ 00015954  0x000031c5 jam  0x00000002 , 0x0000422d 
+ 00015955  0x000031c6 rtn 
+ 00015956  0x000031ca fetch  0x00000001 , 0x0000422d 
+ 00015957  0x000031cb beq  0x00000000 , 0x00003e59 
+ 00015958  0x000031cc beq  0x00000001 , 0x00003e62 
+ 00015959  0x000031cd beq  0x00000002 , 0x00003e6b 
+ 00015960  0x000031ce branch  0x00003e59 
+ 00015961  0x000031d1 fetcht  0x00000002 , 0x00004221 
+ 00015962  0x000031d2 fetch  0x00000002 , 0x00004227 
+ 00015963  0x000031d3 isub  0x00000002 , 0x0000003f 
+ 00015964  0x000031d4 mul32  0x0000003f , 0x00000014 , 0x0000003f 
+ 00015965  0x000031d5 div  0x0000003f , 0x00000064 
+ 00015966  0x000031d6 call  0x00007f86 
+ 00015967  0x000031d7 quotient  0x0000003f 
+ 00015968  0x000031d8 store  0x00000002 , 0x000046d0 
+ 00015969  0x000031d9 rtn 
+ 00015970  0x000031db fetcht  0x00000002 , 0x0000421f 
+ 00015971  0x000031dc fetch  0x00000002 , 0x00004225 
+ 00015972  0x000031dd isub  0x00000002 , 0x0000003f 
+ 00015973  0x000031de mul32  0x0000003f , 0x000000e6 , 0x0000003f 
+ 00015974  0x000031df div  0x0000003f , 0x00000190 
+ 00015975  0x000031e0 call  0x00007f86 
+ 00015976  0x000031e1 quotient  0x0000003f 
+ 00015977  0x000031e2 store  0x00000002 , 0x000046d0 
+ 00015978  0x000031e3 rtn 
+ 00015979  0x000031e5 fetch  0x00000002 , 0x00004223 
+ 00015980  0x000031e6 store  0x00000002 , 0x000046d0 
+ 00015981  0x000031e7 rtn 
+ 00015982  0x000031e9 fetcht  0x00000001 , 0x0000423a 
+ 00015983  0x000031ea call  0x0000680e 
+ 00015984  0x000031eb call  0x000048fb 
+ 00015985  0x000031ec fetcht  0x00000001 , 0x000046e2 
+ 00015986  0x000031ed call  0x000067fb 
+ 00015987  0x000031ee fetcht  0x00000001 , 0x000046e3 
+ 00015988  0x000031ef call  0x000067fb 
+ 00015989  0x000031f0 fetcht  0x00000001 , 0x000046e4 
+ 00015990  0x000031f1 call  0x000067fb 
+ 00015991  0x000031f2 fetcht  0x00000001 , 0x000046f3 
+ 00015992  0x000031f3 call  0x000067fb 
+ 00015993  0x000031f5 fetcht  0x00000001 , 0x000046dc 
+ 00015994  0x000031f6 call  0x0000680e 
+ 00015995  0x000031f8 fetcht  0x00000001 , 0x000046e8 
+ 00015996  0x000031f9 call  0x000067fb 
+ 00015997  0x000031fb fetcht  0x00000001 , 0x000046e9 
+ 00015998  0x000031fc call  0x000067fb 
+ 00015999  0x000031fe fetcht  0x00000001 , 0x000046ea 
+ 00016000  0x000031ff call  0x000067fb 
+ 00016001  0x00003200 fetcht  0x00000001 , 0x000046eb 
+ 00016002  0x00003201 call  0x000067fb 
+ 00016003  0x00003203 fetcht  0x00000001 , 0x000046e5 
+ 00016004  0x00003204 call  0x000067fb 
+ 00016005  0x00003205 fetcht  0x00000001 , 0x000046e6 
+ 00016006  0x00003206 call  0x000067fb 
+ 00016007  0x00003208 fetcht  0x00000001 , 0x000046ef 
+ 00016008  0x00003209 call  0x0000680e 
+ 00016009  0x0000320b fetcht  0x00000001 , 0x000046f0 
+ 00016010  0x0000320c call  0x0000680e 
+ 00016011  0x0000320e fetcht  0x00000001 , 0x000046f1 
+ 00016012  0x0000320f call  0x0000680e 
+ 00016013  0x00003211 fetcht  0x00000001 , 0x000046f2 
+ 00016014  0x00003212 call  0x0000680e 
+ 00016015  0x00003214 fetcht  0x00000001 , 0x000046f4 
+ 00016016  0x00003215 call  0x0000680e 
+ 00016017  0x00003217 fetcht  0x00000001 , 0x000046ed 
+ 00016018  0x00003218 call  0x000067fb 
+ 00016019  0x0000321a fetcht  0x00000001 , 0x000046ec 
+ 00016020  0x0000321b call  0x000067fb 
+ 00016021  0x0000321d fetcht  0x00000001 , 0x000046e7 
+ 00016022  0x0000321e branch  0x000067fb 
+ 00016023  0x00003221 fetcht  0x00000001 , 0x000046e8 
+ 00016024  0x00003222 call  0x000067dd 
+ 00016025  0x00003223 fetcht  0x00000001 , 0x000046e9 
+ 00016026  0x00003224 call  0x000067dd 
+ 00016027  0x00003225 fetcht  0x00000001 , 0x000046ea 
+ 00016028  0x00003226 call  0x000067dd 
+ 00016029  0x00003227 fetcht  0x00000001 , 0x000046eb 
+ 00016030  0x00003228 branch  0x000067dd 
+ 00016031  0x0000322b fetcht  0x00000001 , 0x000046e8 
+ 00016032  0x0000322c call  0x00003ea7 
+ 00016033  0x0000322d fetcht  0x00000001 , 0x000046e9 
+ 00016034  0x0000322e call  0x00003ea7 
+ 00016035  0x0000322f fetcht  0x00000001 , 0x000046ea 
+ 00016036  0x00003230 call  0x00003ea7 
+ 00016037  0x00003231 fetcht  0x00000001 , 0x000046eb 
+ 00016038  0x00003232 branch  0x00003ea7 
+ 00016039  0x00003235 sub  0x00000002 , 0x000000ff , 0x0000003e 
+ 00016040  0x00003236 rtn  0x00000005 
+ 00016041  0x00003237 and  0x00000002 , 0x0000007f , 0x00000007 
+ 00016042  0x00003238 hfetch  0x00000004 , 0x0000811c 
+ 00016043  0x00003239 qisolate1  0x0000003f 
+ 00016044  0x0000323a hfetch  0x00000004 , 0x00008078 
+ 00016045  0x0000323b qsetflag  0x00000001 , 0x0000003f 
+ 00016046  0x0000323c hstore  0x00000004 , 0x00008078 
+ 00016047  0x0000323d hfetch  0x00000004 , 0x0000807c 
+ 00016048  0x0000323e nqsetflag  0x00000001 , 0x0000003f 
+ 00016049  0x0000323f hstore  0x00000004 , 0x0000807c 
+ 00016050  0x00003240 rtn 
+ 00016051  0x00003243 enable  0x00000028 
+ 00016052  0x00003244 hfetch  0x00000004 , 0x00008138 
+ 00016053  0x00003245 setflag  0x00000028 , 0x0000001a , 0x0000003f 
+ 00016054  0x00003246 hstore  0x00000004 , 0x0000804c 
+ 00016055  0x00003247 call  0x00002c21 
+ 00016056  0x00003248 call  0x00004482 
+ 00016057  0x00003249 call  0x00003e9f 
+ 00016058  0x0000324b branch  0x00003ebf 
+ 00016059  0x00003250 call  0x00003ebf 
+ 00016060  0x00003251 fetch  0x00000001 , 0x000000a0 
+ 00016061  0x00003252 nrtn  0x00000034 
+ 00016062  0x00003253 branch  0x000067ed 
+ 00016063  0x00003256 call  0x00003ee0 
+ 00016064  0x00003257 arg  0x00000019 , 0x00000002 
+ 00016065  0x00003258 fetch  0x00000004 , 0x000046d3 
+ 00016066  0x00003259 isolate1  0x00000012 , 0x0000003f 
+ 00016067  0x0000325a call  0x00003ede , 0x00000001 
+ 00016068  0x0000325b call  0x0000680e 
+ 00016069  0x0000325c call  0x000063ee 
+ 00016070  0x00003260 fetcht  0x00000001 , 0x000046e2 
+ 00016071  0x00003261 call  0x000067dd 
+ 00016072  0x00003262 fetcht  0x00000001 , 0x000046e3 
+ 00016073  0x00003263 call  0x000067dd 
+ 00016074  0x00003264 fetcht  0x00000001 , 0x000046e4 
+ 00016075  0x00003265 call  0x000067dd 
+ 00016076  0x00003267 fetcht  0x00000001 , 0x000046e5 
+ 00016077  0x00003268 call  0x000067dd 
+ 00016078  0x00003269 fetcht  0x00000001 , 0x000046e6 
+ 00016079  0x0000326a call  0x000067dd 
+ 00016080  0x0000326b fetcht  0x00000001 , 0x000046e7 
+ 00016081  0x0000326c call  0x000067dd 
+ 00016082  0x0000326d fetcht  0x00000001 , 0x000046ed 
+ 00016083  0x0000326e call  0x000067dd 
+ 00016084  0x0000326f fetcht  0x00000001 , 0x000046e8 
+ 00016085  0x00003270 call  0x000067dd 
+ 00016086  0x00003271 fetcht  0x00000001 , 0x000046e9 
+ 00016087  0x00003272 call  0x000067dd 
+ 00016088  0x00003273 fetcht  0x00000001 , 0x000046ea 
+ 00016089  0x00003274 call  0x000067dd 
+ 00016090  0x00003275 fetcht  0x00000001 , 0x000046eb 
+ 00016091  0x00003276 call  0x000067dd 
+ 00016092  0x00003277 fetcht  0x00000001 , 0x000046f3 
+ 00016093  0x00003278 branch  0x000067e1 
+ 00016094  0x0000327d arg  0x0000001e , 0x00000002 
+ 00016095  0x0000327e rtn 
+ 00016096  0x00003281 bpatch  0x000000e4 , 0x0000401c 
+ 00016097  0x00003282 call  0x00003eee 
+ 00016098  0x00003283 call  0x00003f36 
+ 00016099  0x00003284 fetch  0x00000001 , 0x000046b8 
+ 00016100  0x00003285 fetcht  0x00000001 , 0x000046b7 
+ 00016101  0x00003286 store  0x00000001 , 0x000046b7 
+ 00016102  0x00003287 isub  0x00000002 , 0x0000003e 
+ 00016103  0x00003288 nbranch  0x000033d4 , 0x00000005 
+ 00016104  0x00003289 fetch  0x00000001 , 0x000046be 
+ 00016105  0x0000328a fetcht  0x00000001 , 0x000046bd 
+ 00016106  0x0000328b store  0x00000001 , 0x000046bd 
+ 00016107  0x0000328c isub  0x00000002 , 0x0000003e 
+ 00016108  0x0000328d nbranch  0x000033d4 , 0x00000005 
+ 00016109  0x0000328e rtn 
+ 00016110  0x00003290 fetch  0x00000001 , 0x000046ea 
+ 00016111  0x00003291 rtneq  0x000000ff 
+ 00016112  0x00003292 arg  0x00000000 , 0x00000011 
+ 00016113  0x00003293 fetcht  0x00000001 , 0x000046ea 
+ 00016114  0x00003294 call  0x0000681d 
+ 00016115  0x00003295 setflag  0x00000001 , 0x00000000 , 0x00000011 
+ 00016116  0x00003296 fetcht  0x00000001 , 0x000046eb 
+ 00016117  0x00003297 call  0x0000681d 
+ 00016118  0x00003298 setflag  0x00000001 , 0x00000001 , 0x00000011 
+ 00016119  0x00003299 copy  0x00000011 , 0x0000003f 
+ 00016120  0x0000329a store  0x00000001 , 0x000046b8 
+ 00016121  0x0000329b beq  0x00000001 , 0x00003efe 
+ 00016122  0x0000329c beq  0x00000002 , 0x00003f02 
+ 00016123  0x0000329d fetch  0x00000001 , 0x000046b9 
+ 00016124  0x0000329e bbit1  0x00000007 , 0x00003f0e 
+ 00016125  0x0000329f rtn 
+ 00016126  0x000032a2 fetch  0x00000001 , 0x000046b7 
+ 00016127  0x000032a3 beq  0x00000000 , 0x00003f06 
+ 00016128  0x000032a4 beq  0x00000003 , 0x00003f08 
+ 00016129  0x000032a5 rtn 
+ 00016130  0x000032a7 fetch  0x00000001 , 0x000046b7 
+ 00016131  0x000032a8 beq  0x00000000 , 0x00003f0a 
+ 00016132  0x000032a9 beq  0x00000003 , 0x00003f0c 
+ 00016133  0x000032aa rtn 
+ 00016134  0x000032ac jam  0x00000082 , 0x000046b9 
+ 00016135  0x000032ad rtn 
+ 00016136  0x000032af jam  0x00000081 , 0x000046b9 
+ 00016137  0x000032b0 rtn 
+ 00016138  0x000032b2 jam  0x00000080 , 0x000046b9 
+ 00016139  0x000032b3 rtn 
+ 00016140  0x000032b5 jam  0x00000083 , 0x000046b9 
+ 00016141  0x000032b6 rtn 
+ 00016142  0x000032b8 fetch  0x00000001 , 0x000046b9 
+ 00016143  0x000032b9 set0  0x00000007 , 0x0000003f 
+ 00016144  0x000032ba store  0x00000001 , 0x000046b9 
+ 00016145  0x000032bb beq  0x00000000 , 0x00003f16 
+ 00016146  0x000032bc beq  0x00000001 , 0x00003f19 
+ 00016147  0x000032bd beq  0x00000002 , 0x00003f1c 
+ 00016148  0x000032be beq  0x00000003 , 0x00003f1f 
+ 00016149  0x000032bf rtn 
+ 00016150  0x000032c1 fetch  0x00000001 , 0x000046b8 
+ 00016151  0x000032c2 beq  0x00000003 , 0x00003f22 
+ 00016152  0x000032c3 rtn 
+ 00016153  0x000032c5 fetch  0x00000001 , 0x000046b8 
+ 00016154  0x000032c6 beq  0x00000000 , 0x00003f22 
+ 00016155  0x000032c7 rtn 
+ 00016156  0x000032c9 fetch  0x00000001 , 0x000046b8 
+ 00016157  0x000032ca beq  0x00000003 , 0x00003f2c 
+ 00016158  0x000032cb rtn 
+ 00016159  0x000032cd fetch  0x00000001 , 0x000046b8 
+ 00016160  0x000032ce beq  0x00000000 , 0x00003f2c 
+ 00016161  0x000032cf rtn 
+ 00016162  0x000032d1 fetch  0x00000001 , 0x000046bc 
+ 00016163  0x000032d2 increase  0x00000001 , 0x0000003f 
+ 00016164  0x000032d3 store  0x00000001 , 0x000046bc 
+ 00016165  0x000032d4 sub  0x0000003f , 0x00000001 , 0x0000003e 
+ 00016166  0x000032d5 rtn  0x00000002 
+ 00016167  0x000032d6 jam  0x00000000 , 0x000046bc 
+ 00016168  0x000032d7 fetch  0x00000001 , 0x000046ba 
+ 00016169  0x000032d8 increase  0x00000001 , 0x0000003f 
+ 00016170  0x000032d9 store  0x00000001 , 0x000046ba 
+ 00016171  0x000032da rtn 
+ 00016172  0x000032dc fetch  0x00000001 , 0x000046bb 
+ 00016173  0x000032dd increase  0x00000001 , 0x0000003f 
+ 00016174  0x000032de store  0x00000001 , 0x000046bb 
+ 00016175  0x000032df sub  0x0000003f , 0x00000001 , 0x0000003e 
+ 00016176  0x000032e0 rtn  0x00000002 
+ 00016177  0x000032e1 jam  0x00000000 , 0x000046bb 
+ 00016178  0x000032e2 fetch  0x00000001 , 0x000046ba 
+ 00016179  0x000032e3 increase  0xffffffff , 0x0000003f 
+ 00016180  0x000032e4 store  0x00000001 , 0x000046ba 
+ 00016181  0x000032e5 rtn 
+ 00016182  0x000032e9 fetch  0x00000001 , 0x000046e8 
+ 00016183  0x000032ea rtneq  0x000000ff 
+ 00016184  0x000032eb arg  0x00000000 , 0x00000011 
+ 00016185  0x000032ec fetcht  0x00000001 , 0x000046e8 
+ 00016186  0x000032ed call  0x0000681d 
+ 00016187  0x000032ee setflag  0x00000001 , 0x00000000 , 0x00000011 
+ 00016188  0x000032ef fetcht  0x00000001 , 0x000046e9 
+ 00016189  0x000032f0 call  0x0000681d 
+ 00016190  0x000032f1 setflag  0x00000001 , 0x00000001 , 0x00000011 
+ 00016191  0x000032f2 copy  0x00000011 , 0x0000003f 
+ 00016192  0x000032f3 store  0x00000001 , 0x000046be 
+ 00016193  0x000032f4 beq  0x00000001 , 0x00003f46 
+ 00016194  0x000032f5 beq  0x00000002 , 0x00003f4a 
+ 00016195  0x000032f6 fetch  0x00000001 , 0x000046bf 
+ 00016196  0x000032f7 bbit1  0x00000007 , 0x00003f56 
+ 00016197  0x000032f8 rtn 
+ 00016198  0x000032fb fetch  0x00000001 , 0x000046bd 
+ 00016199  0x000032fc beq  0x00000000 , 0x00003f4e 
+ 00016200  0x000032fd beq  0x00000003 , 0x00003f50 
+ 00016201  0x000032fe rtn 
+ 00016202  0x00003300 fetch  0x00000001 , 0x000046bd 
+ 00016203  0x00003301 beq  0x00000000 , 0x00003f52 
+ 00016204  0x00003302 beq  0x00000003 , 0x00003f54 
+ 00016205  0x00003303 rtn 
+ 00016206  0x00003305 jam  0x00000082 , 0x000046bf 
+ 00016207  0x00003306 rtn 
+ 00016208  0x00003308 jam  0x00000081 , 0x000046bf 
+ 00016209  0x00003309 rtn 
+ 00016210  0x0000330b jam  0x00000080 , 0x000046bf 
+ 00016211  0x0000330c rtn 
+ 00016212  0x0000330e jam  0x00000083 , 0x000046bf 
+ 00016213  0x0000330f rtn 
+ 00016214  0x00003311 fetch  0x00000001 , 0x000046bf 
+ 00016215  0x00003312 set0  0x00000007 , 0x0000003f 
+ 00016216  0x00003313 store  0x00000001 , 0x000046bf 
+ 00016217  0x00003314 beq  0x00000000 , 0x00003f5e 
+ 00016218  0x00003315 beq  0x00000001 , 0x00003f61 
+ 00016219  0x00003316 beq  0x00000002 , 0x00003f64 
+ 00016220  0x00003317 beq  0x00000003 , 0x00003f67 
+ 00016221  0x00003318 rtn 
+ 00016222  0x0000331a fetch  0x00000001 , 0x000046be 
+ 00016223  0x0000331b beq  0x00000003 , 0x00003f6a 
+ 00016224  0x0000331c rtn 
+ 00016225  0x0000331e fetch  0x00000001 , 0x000046be 
+ 00016226  0x0000331f beq  0x00000000 , 0x00003f6a 
+ 00016227  0x00003320 rtn 
+ 00016228  0x00003322 fetch  0x00000001 , 0x000046be 
+ 00016229  0x00003323 beq  0x00000003 , 0x00003f6f 
+ 00016230  0x00003324 rtn 
+ 00016231  0x00003326 fetch  0x00000001 , 0x000046be 
+ 00016232  0x00003327 beq  0x00000000 , 0x00003f6f 
+ 00016233  0x00003328 rtn 
+ 00016234  0x0000332a jam  0x00000000 , 0x000046c2 
+ 00016235  0x0000332b fetch  0x00000001 , 0x000046c0 
+ 00016236  0x0000332c increase  0x00000001 , 0x0000003f 
+ 00016237  0x0000332d store  0x00000001 , 0x000046c0 
+ 00016238  0x0000332e rtn 
+ 00016239  0x00003330 jam  0x00000000 , 0x000046c1 
+ 00016240  0x00003331 fetch  0x00000001 , 0x000046c0 
+ 00016241  0x00003332 increase  0xffffffff , 0x0000003f 
+ 00016242  0x00003333 store  0x00000001 , 0x000046c0 
+ 00016243  0x00003334 rtn 
+ 00016244  0x00003338 setarg  0x00000002 
+ 00016245  0x00003339 store  0x00000001 , 0x00004680 
+ 00016246  0x0000333a rtn 
+ 00016247  0x0000333d fetch  0x00000001 , 0x000041e2 
+ 00016248  0x0000333e rtn  0x00000034 
+ 00016249  0x0000333f call  0x00005271 
+ 00016250  0x00003340 nrtn  0x00000034 
+ 00016251  0x00003341 fetch  0x00000004 , 0x000046d3 
+ 00016252  0x00003342 bbit1  0x00000003 , 0x00003f8a 
+ 00016253  0x00003343 bbit1  0x00000000 , 0x00003f8a 
+ 00016254  0x00003344 bbit1  0x00000005 , 0x00003f8a 
+ 00016255  0x00003345 call  0x00003f97 
+ 00016256  0x00003346 nrtn  0x00000028 
+ 00016257  0x00003348 arg  0x00000009 , 0x00000011 
+ 00016258  0x00003349 call  0x00004d63 
+ 00016259  0x0000334a fetch  0x00000002 , 0x0000424e 
+ 00016260  0x0000334b istore  0x00000002 , 0x00000005 
+ 00016261  0x0000334c setarg  0x000002a1 
+ 00016262  0x0000334d istore  0x00000002 , 0x00000005 
+ 00016263  0x0000334e fetch  0x00000007 , 0x0000469a 
+ 00016264  0x0000334f istore  0x00000007 , 0x00000005 
+ 00016265  0x00003350 rtn 
+ 00016266  0x00003354 setarg  0x00000000 
+ 00016267  0x00003355 store  0x00000007 , 0x0000469a 
+ 00016268  0x00003356 branch  0x00003f81 
+ 00016269  0x0000335a fetch  0x00000002 , 0x000046aa 
+ 00016270  0x0000335b store  0x00000002 , 0x000046b0 
+ 00016271  0x0000335c rtn 
+ 00016272  0x00003360 bpatch  0x000000e5 , 0x0000401c 
+ 00016273  0x00003361 arg  0x00000007 , 0x00000011 
+ 00016274  0x00003362 fetcht  0x00000002 , 0x0000446f 
+ 00016275  0x00003363 call  0x00005a64 
+ 00016276  0x00003364 fetch  0x00000007 , 0x0000469a 
+ 00016277  0x00003365 istore  0x00000007 , 0x00000005 
+ 00016278  0x00003366 rtn 
+ 00016279  0x00003369 bpatch  0x000000e6 , 0x0000401c 
+ 00016280  0x0000336a disable  0x00000028 
+ 00016281  0x0000336b setarg  0x00000000 
+ 00016282  0x0000336c store  0x00000006 , 0x0000469b 
+ 00016283  0x0000336d call  0x00003fb5 
+ 00016284  0x0000336e call  0x00004079 
+ 00016285  0x0000336f call  0x0000407e 
+ 00016286  0x00003370 call  0x00004099 
+ 00016287  0x00003371 nrtn  0x00000028 
+ 00016288  0x00003372 call  0x00003f8d 
+ 00016289  0x00003373 arg  0x00000008 , 0x00000007 
+ 00016290  0x00003374 branch  0x000043ce 
+ 00016291  0x00003377 fetch  0x00000002 , 0x0000469b 
+ 00016292  0x00003378 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00016293  0x00003379 store  0x00000002 , 0x0000469b 
+ 00016294  0x0000337a branch  0x00007fe7 
+ 00016295  0x0000337c fetch  0x00000002 , 0x0000469d 
+ 00016296  0x0000337d sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00016297  0x0000337e store  0x00000002 , 0x0000469d 
+ 00016298  0x0000337f branch  0x00007fe7 
+ 00016299  0x00003381 fetch  0x00000002 , 0x0000469d 
+ 00016300  0x00003382 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00016301  0x00003383 store  0x00000002 , 0x0000469d 
+ 00016302  0x00003384 fetch  0x00000002 , 0x0000469b 
+ 00016303  0x00003385 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00016304  0x00003386 store  0x00000002 , 0x0000469b 
+ 00016305  0x00003387 call  0x00004002 
+ 00016306  0x00003388 branch  0x00007fe7 
+ 00016307  0x0000338a call  0x00004002 
+ 00016308  0x0000338b branch  0x00007fe7 
+ 00016309  0x0000338d fetch  0x00000001 , 0x00004239 
+ 00016310  0x0000338e rtnne  0x00000000 
+ 00016311  0x0000338f fetch  0x00000001 , 0x000046e0 
+ 00016312  0x00003390 beq  0x00000000 , 0x00003fe2 
+ 00016313  0x00003391 beq  0x00000001 , 0x00003fe2 
+ 00016314  0x00003392 beq  0x00000002 , 0x00003fe2 
+ 00016315  0x00003393 beq  0x00000003 , 0x00003fe2 
+ 00016316  0x00003394 beq  0x00000004 , 0x00003fc4 
+ 00016317  0x00003395 beq  0x00000005 , 0x00004010 
+ 00016318  0x00003396 beq  0x00000006 , 0x00003fe2 
+ 00016319  0x00003397 branch  0x00003fe2 
+ 00016320  0x0000339a fetch  0x00000001 , 0x000046a7 
+ 00016321  0x0000339b call  0x0000405d , 0x00000034 
+ 00016322  0x0000339c jam  0x00000001 , 0x000046a7 
+ 00016323  0x0000339d rtn 
+ 00016324  0x000033a1 call  0x00003fc0 
+ 00016325  0x000033a2 fetcht  0x00000001 , 0x000046f3 
+ 00016326  0x000033a3 call  0x0000681d 
+ 00016327  0x000033a4 nrtn  0x00000001 
+ 00016328  0x000033a5 setarg  0x00000000 
+ 00016329  0x000033a6 call  0x00006414 
+ 00016330  0x000033a7 bne  0x00000030 , 0x000040d1 
+ 00016331  0x000033a8 setarg  0x00000002 
+ 00016332  0x000033a9 call  0x00006414 
+ 00016333  0x000033aa rtnbit0  0x00000007 
+ 00016334  0x000033ab call  0x0000405d 
+ 00016335  0x000033ac call  0x00003fde 
+ 00016336  0x000033ad store  0x00000001 , 0x000046a1 
+ 00016337  0x000033ae rshift4  0x0000003f , 0x0000003f 
+ 00016338  0x000033af call  0x00004169 
+ 00016339  0x000033b0 store  0x00000001 , 0x0000469c 
+ 00016340  0x000033b1 fetch  0x00000001 , 0x000046a1 
+ 00016341  0x000033b2 and  0x0000003f , 0x0000000f , 0x0000003f 
+ 00016342  0x000033b3 call  0x00004169 
+ 00016343  0x000033b4 store  0x00000001 , 0x0000469e 
+ 00016344  0x000033b5 fetch  0x00000001 , 0x000046f6 
+ 00016345  0x000033b6 beq  0x00000000 , 0x00003fa3 
+ 00016346  0x000033b7 beq  0x00000001 , 0x00003fab 
+ 00016347  0x000033b8 beq  0x00000002 , 0x00003fa7 
+ 00016348  0x000033b9 beq  0x00000003 , 0x00003fb3 
+ 00016349  0x000033ba rtn 
+ 00016350  0x000033bd setarg  0x00000012 
+ 00016351  0x000033be branch  0x00006414 
+ 00016352  0x000033c1 beq  0x00000031 , 0x00003fea 
+ 00016353  0x000033c2 branch  0x000040d1 
+ 00016354  0x000033c5 call  0x00003fc0 
+ 00016355  0x000033c6 disable  0x00000028 
+ 00016356  0x000033c7 fetcht  0x00000001 , 0x000046f3 
+ 00016357  0x000033c8 call  0x0000681d 
+ 00016358  0x000033c9 nrtn  0x00000001 
+ 00016359  0x000033ca setarg  0x00000000 
+ 00016360  0x000033cb call  0x00006414 
+ 00016361  0x000033cc bne  0x00000030 , 0x00003fe0 
+ 00016362  0x000033ce setarg  0x00000002 
+ 00016363  0x000033cf call  0x00006414 
+ 00016364  0x000033d0 rtnbit0  0x00000007 
+ 00016365  0x000033d1 call  0x0000405d 
+ 00016366  0x000033d2 fetch  0x00000001 , 0x0000469b 
+ 00016367  0x000033d3 call  0x00004165 
+ 00016368  0x000033d4 store  0x00000002 , 0x0000469b 
+ 00016369  0x000033d5 fetch  0x00000001 , 0x0000469d 
+ 00016370  0x000033d6 call  0x00004165 
+ 00016371  0x000033d7 store  0x00000002 , 0x0000469d 
+ 00016372  0x000033d8 fetch  0x00000001 , 0x000046f6 
+ 00016373  0x000033d9 beq  0x00000000 , 0x00003ffa 
+ 00016374  0x000033da beq  0x00000001 , 0x00003ffc 
+ 00016375  0x000033db beq  0x00000002 , 0x00003ffe 
+ 00016376  0x000033dc beq  0x00000003 , 0x00004000 
+ 00016377  0x000033dd rtn 
+ 00016378  0x000033e0 call  0x00003fa3 
+ 00016379  0x000033e1 branch  0x000040b3 
+ 00016380  0x000033e3 call  0x00003fab 
+ 00016381  0x000033e4 branch  0x000040b3 
+ 00016382  0x000033e6 call  0x00003fa7 
+ 00016383  0x000033e7 branch  0x000040b3 
+ 00016384  0x000033e9 call  0x00003fb3 
+ 00016385  0x000033ea branch  0x000040b3 
+ 00016386  0x000033ed fetch  0x00000002 , 0x0000469d 
+ 00016387  0x000033ee fetcht  0x00000002 , 0x0000469b 
+ 00016388  0x000033ef store  0x00000002 , 0x0000469b 
+ 00016389  0x000033f0 storet  0x00000002 , 0x0000469d 
+ 00016390  0x000033f1 rtn 
+ 00016391  0x000033f4 call  0x0000640f 
+ 00016392  0x000033f5 nop  0x00000064 
+ 00016393  0x000033f6 copy  0x00000012 , 0x0000003f 
+ 00016394  0x000033f7 call  0x00006414 
+ 00016395  0x000033f8 copy  0x0000003f , 0x00000012 
+ 00016396  0x000033f9 call  0x00006411 
+ 00016397  0x000033fa nop  0x00000064 
+ 00016398  0x000033fb copy  0x00000012 , 0x0000003f 
+ 00016399  0x000033fc rtn 
+ 00016400  0x000033fe disable  0x00000028 
+ 00016401  0x000033ff fetcht  0x00000001 , 0x000046f3 
+ 00016402  0x00003400 call  0x0000681d 
+ 00016403  0x00003401 nrtn  0x00000001 
+ 00016404  0x00003402 arg  0x00000002 , 0x00000012 
+ 00016405  0x00003403 call  0x00004007 
+ 00016406  0x00003404 rtnbit0  0x00000007 
+ 00016407  0x00003405 arg  0x00000000 , 0x00000012 
+ 00016408  0x00003406 call  0x00004007 
+ 00016409  0x00003407 store  0x00000001 , 0x000046dd 
+ 00016410  0x00003408 bne  0x0000003e , 0x00004145 
+ 00016411  0x00003409 fetch  0x00000001 , 0x000046a7 
+ 00016412  0x0000340a call  0x00004039 , 0x00000034 
+ 00016413  0x0000340b jam  0x00000001 , 0x000046a7 
+ 00016414  0x0000340c call  0x00004039 
+ 00016415  0x0000340d fetch  0x00000001 , 0x000046a1 
+ 00016416  0x0000340e rshift4  0x0000003f , 0x0000003f 
+ 00016417  0x0000340f call  0x00004169 
+ 00016418  0x00003410 store  0x00000001 , 0x0000469c 
+ 00016419  0x00003411 fetch  0x00000001 , 0x000046a1 
+ 00016420  0x00003412 and  0x0000003f , 0x0000000f , 0x0000003f 
+ 00016421  0x00003413 call  0x00004169 
+ 00016422  0x00003414 store  0x00000001 , 0x0000469e 
+ 00016423  0x00003415 fetch  0x00000001 , 0x000046f6 
+ 00016424  0x00003416 beq  0x00000000 , 0x00004031 
+ 00016425  0x00003417 beq  0x00000001 , 0x00004035 
+ 00016426  0x00003418 beq  0x00000002 , 0x00004033 
+ 00016427  0x00003419 beq  0x00000003 , 0x00004037 
+ 00016428  0x0000341a rtn 
+ 00016429  0x0000341d fetch  0x00000001 , 0x000046a4 
+ 00016430  0x0000341e beq  0x00000000 , 0x00004051 
+ 00016431  0x0000341f beq  0x00000001 , 0x00004045 
+ 00016432  0x00003420 rtn 
+ 00016433  0x00003424 call  0x00003fa3 
+ 00016434  0x00003425 branch  0x0000402d 
+ 00016435  0x00003428 call  0x00003fa7 
+ 00016436  0x00003429 branch  0x0000402d 
+ 00016437  0x0000342c call  0x00003fab 
+ 00016438  0x0000342d branch  0x0000402d 
+ 00016439  0x00003430 call  0x00003fb3 
+ 00016440  0x00003431 branch  0x0000402d 
+ 00016441  0x00003434 call  0x0000640f 
+ 00016442  0x00003435 call  0x0000405d 
+ 00016443  0x00003436 arg  0x00000005 , 0x0000003f 
+ 00016444  0x00003437 call  0x00006414 
+ 00016445  0x00003438 store  0x00000001 , 0x000046a1 
+ 00016446  0x00003439 arg  0x00000007 , 0x0000003f 
+ 00016447  0x0000343a call  0x00006414 
+ 00016448  0x0000343b store  0x00000001 , 0x000046a2 
+ 00016449  0x0000343c arg  0x00000008 , 0x0000003f 
+ 00016450  0x0000343d call  0x00006414 
+ 00016451  0x0000343e store  0x00000001 , 0x000046a3 
+ 00016452  0x0000343f branch  0x00006411 
+ 00016453  0x00003443 fetch  0x00000001 , 0x000046a2 
+ 00016454  0x00003444 rtnne  0x00000000 
+ 00016455  0x00003445 fetch  0x00000001 , 0x000046a3 
+ 00016456  0x00003446 sub  0x0000003f , 0x0000002d , 0x0000003e 
+ 00016457  0x00003447 rtn  0x00000002 
+ 00016458  0x00003448 jam  0x00000000 , 0x000046a4 
+ 00016459  0x00003449 setarg  0x0000ba41 
+ 00016460  0x0000344a call  0x00006405 
+ 00016461  0x0000344b setarg  0x00000032 
+ 00016462  0x0000344c call  0x00006405 
+ 00016463  0x0000344d setarg  0x0000b541 
+ 00016464  0x0000344e branch  0x00006405 
+ 00016465  0x00003450 fetch  0x00000001 , 0x000046a2 
+ 00016466  0x00003451 rtnne  0x00000000 
+ 00016467  0x00003452 fetch  0x00000001 , 0x000046a3 
+ 00016468  0x00003453 sub  0x0000003f , 0x0000002d , 0x0000003e 
+ 00016469  0x00003454 nrtn  0x00000002 
+ 00016470  0x00003455 jam  0x00000001 , 0x000046a4 
+ 00016471  0x00003456 setarg  0x0000ba41 
+ 00016472  0x00003457 call  0x00006405 
+ 00016473  0x00003458 setarg  0x00008032 
+ 00016474  0x00003459 call  0x00006405 
+ 00016475  0x0000345a setarg  0x0000b541 
+ 00016476  0x0000345b branch  0x00006405 
+ 00016477  0x00003460 arg  0x00000003 , 0x0000003f 
+ 00016478  0x00003461 call  0x00006414 
+ 00016479  0x00003462 store  0x00000002 , 0x0000469b 
+ 00016480  0x00003463 arg  0x00000004 , 0x0000003f 
+ 00016481  0x00003464 call  0x00006414 
+ 00016482  0x00003465 store  0x00000002 , 0x0000469d 
+ 00016483  0x00003466 rtn 
+ 00016484  0x00003469 arg  0x0000001b , 0x00000002 
+ 00016485  0x0000346a call  0x000067fb 
+ 00016486  0x0000346b arg  0x0000001b , 0x00000002 
+ 00016487  0x0000346c call  0x0000681d 
+ 00016488  0x0000346d rtn  0x00000001 
+ 00016489  0x0000346e hfetch  0x00000001 , 0x00008109 
+ 00016490  0x0000346f set1  0x00000004 , 0x0000003f 
+ 00016491  0x00003470 hstore  0x00000001 , 0x00008109 
+ 00016492  0x00003471 rtn 
+ 00016493  0x00003474 fetcht  0x00000001 , 0x000046c0 
+ 00016494  0x00003475 hfetch  0x00000001 , 0x00008109 
+ 00016495  0x00003476 iadd  0x00000002 , 0x0000003f 
+ 00016496  0x00003477 rtn  0x00000034 
+ 00016497  0x00003478 store  0x00000001 , 0x0000469f 
+ 00016498  0x00003479 jam  0x00000000 , 0x000046c0 
+ 00016499  0x0000347a branch  0x00007fe7 
+ 00016500  0x0000347c fetcht  0x00000001 , 0x000046c0 
+ 00016501  0x0000347d hfetch  0x00000001 , 0x00008109 
+ 00016502  0x0000347e iadd  0x00000002 , 0x0000003f 
+ 00016503  0x0000347f store  0x00000001 , 0x000046c0 
+ 00016504  0x00003480 rtn 
+ 00016505  0x00003482 fetch  0x00000001 , 0x000046c0 
+ 00016506  0x00003483 rtn  0x00000034 
+ 00016507  0x00003484 store  0x00000001 , 0x0000469f 
+ 00016508  0x00003485 jam  0x00000000 , 0x000046c0 
+ 00016509  0x00003486 branch  0x00007fe7 
+ 00016510  0x00003489 fetch  0x00000001 , 0x000046ba 
+ 00016511  0x0000348a rtn  0x00000034 
+ 00016512  0x0000348b store  0x00000001 , 0x000046a0 
+ 00016513  0x0000348c jam  0x00000000 , 0x000046ba 
+ 00016514  0x0000348d branch  0x00007fe7 
+ 00016515  0x00003490 arg  0x00000000 , 0x00000011 
+ 00016516  0x00003491 fetcht  0x00000001 , 0x000046e2 
+ 00016517  0x00003492 call  0x0000681d 
+ 00016518  0x00003493 setflag  0x00000001 , 0x00000000 , 0x00000011 
+ 00016519  0x00003494 fetcht  0x00000001 , 0x000046e3 
+ 00016520  0x00003495 call  0x0000681d 
+ 00016521  0x00003496 setflag  0x00000001 , 0x00000001 , 0x00000011 
+ 00016522  0x00003497 fetcht  0x00000001 , 0x000046e4 
+ 00016523  0x00003498 call  0x0000681d 
+ 00016524  0x00003499 setflag  0x00000001 , 0x00000002 , 0x00000011 
+ 00016525  0x0000349a call  0x00004090 
+ 00016526  0x0000349b copy  0x00000011 , 0x0000003f 
+ 00016527  0x0000349c rtn 
+ 00016528  0x0000349e fetch  0x00000001 , 0x000046e5 
+ 00016529  0x0000349f rtneq  0x000000ff 
+ 00016530  0x000034a0 fetcht  0x00000001 , 0x000046e5 
+ 00016531  0x000034a1 call  0x0000681d 
+ 00016532  0x000034a2 setflag  0x00000001 , 0x00000003 , 0x00000011 
+ 00016533  0x000034a3 fetcht  0x00000001 , 0x000046e6 
+ 00016534  0x000034a4 call  0x0000681d 
+ 00016535  0x000034a5 setflag  0x00000001 , 0x00000004 , 0x00000011 
+ 00016536  0x000034a6 rtn 
+ 00016537  0x000034a9 call  0x00004083 
+ 00016538  0x000034aa call  0x000040a8 
+ 00016539  0x000034ab call  0x000040a3 
+ 00016540  0x000034ac copy  0x00000011 , 0x0000003f 
+ 00016541  0x000034ad fetcht  0x00000001 , 0x0000469a 
+ 00016542  0x000034ae store  0x00000001 , 0x0000469a 
+ 00016543  0x000034af ixor  0x00000002 , 0x0000003f 
+ 00016544  0x000034b0 sub  0x0000003f , 0x00000000 , 0x0000003e 
+ 00016545  0x000034b1 rtn  0x00000005 
+ 00016546  0x000034b2 branch  0x00007fe7 
+ 00016547  0x000034b5 rtnmark0  0x00000026 
+ 00016548  0x000034b6 copy  0x00000011 , 0x0000003f 
+ 00016549  0x000034b7 rtn  0x00000034 
+ 00016550  0x000034b8 store  0x00000001 , 0x0000469a 
+ 00016551  0x000034b9 branch  0x00007fe7 
+ 00016552  0x000034bd fetch  0x00000002 , 0x00004682 
+ 00016553  0x000034be bbit1  0x00000009 , 0x000040ad 
+ 00016554  0x000034bf fetch  0x00000002 , 0x00004682 
+ 00016555  0x000034c0 bbit1  0x00000000 , 0x000040b0 
+ 00016556  0x000034c1 rtn 
+ 00016557  0x000034c3 copy  0x00000011 , 0x0000003f 
+ 00016558  0x000034c4 nbranch  0x00005820 , 0x00000034 
+ 00016559  0x000034c5 branch  0x00005822 
+ 00016560  0x000034c7 copy  0x00000011 , 0x0000003f 
+ 00016561  0x000034c8 nbranch  0x00002bc7 , 0x00000034 
+ 00016562  0x000034c9 branch  0x00002bc9 
+ 00016563  0x000034cd bpatch  0x000000e7 , 0x0000401c 
+ 00016564  0x000034ce arg  0x0000001a , 0x00000002 
+ 00016565  0x000034cf fetch  0x00000004 , 0x000046d3 
+ 00016566  0x000034d0 isolate1  0x00000012 , 0x0000003f 
+ 00016567  0x000034d1 call  0x000040be , 0x00000001 
+ 00016568  0x000034d2 call  0x0000681d 
+ 00016569  0x000034d3 rtn  0x00000001 
+ 00016570  0x000034d4 setarg  0x0000000a 
+ 00016571  0x000034d5 call  0x00006414 
+ 00016572  0x000034d6 nop  0x000003e8 
+ 00016573  0x000034d7 branch  0x000040b3 
+ 00016574  0x000034d9 arg  0x0000001f , 0x00000002 
+ 00016575  0x000034da rtn 
+ 00016576  0x000034dd fetch  0x00000004 , 0x000046d3 
+ 00016577  0x000034de bbit1  0x00000012 , 0x000040c4 
+ 00016578  0x000034e0 arg  0x0000001a , 0x00000002 
+ 00016579  0x000034e1 branch  0x000067fe 
+ 00016580  0x000034e3 arg  0x0000001f , 0x00000002 
+ 00016581  0x000034e4 branch  0x000067fe 
+ 00016582  0x000034e8 call  0x00003d36 
+ 00016583  0x000034e9 rtn  0x0000002b 
+ 00016584  0x000034ea call  0x000040c0 
+ 00016585  0x000034eb fetch  0x00000001 , 0x000046e0 
+ 00016586  0x000034ec beq  0x00000005 , 0x000040d5 
+ 00016587  0x000034ee call  0x000040d9 
+ 00016588  0x000034ef beq  0x00000030 , 0x000040e0 
+ 00016589  0x000034f0 beq  0x00000031 , 0x000040ea 
+ 00016590  0x000034f1 call  0x000040d1 
+ 00016591  0x000034f2 nop  0x000003e8 
+ 00016592  0x000034f3 branch  0x000040cb 
+ 00016593  0x000034f5 bpatch  0x000000e8 , 0x0000401d 
+ 00016594  0x000034f6 fetch  0x00000004 , 0x000046d3 
+ 00016595  0x000034f7 bbit1  0x00000012 , 0x000063e0 
+ 00016596  0x000034f8 branch  0x000063d1 
+ 00016597  0x000034fb call  0x000040d9 
+ 00016598  0x000034fc beq  0x0000003e , 0x0000414b 
+ 00016599  0x000034fd call  0x00004145 
+ 00016600  0x000034fe branch  0x000040d5 
+ 00016601  0x00003501 setarg  0x00000001 
+ 00016602  0x00003502 call  0x00006414 
+ 00016603  0x00003503 store  0x00000001 , 0x000046de 
+ 00016604  0x00003504 setarg  0x00000000 
+ 00016605  0x00003505 call  0x00006414 
+ 00016606  0x00003506 store  0x00000001 , 0x000046dd 
+ 00016607  0x00003507 rtn 
+ 00016608  0x00003509 fetch  0x00000001 , 0x000046de 
+ 00016609  0x0000350a beq  0x000000d1 , 0x00004139 
+ 00016610  0x0000350b beq  0x000000d2 , 0x000040f8 
+ 00016611  0x0000350c beq  0x00000002 , 0x000040ee 
+ 00016612  0x0000350d beq  0x00000054 , 0x000040e6 
+ 00016613  0x0000350e rtn 
+ 00016614  0x00003510 jam  0x00000002 , 0x000046e0 
+ 00016615  0x00003511 rtn 
+ 00016616  0x00003513 jam  0x00000006 , 0x000046e0 
+ 00016617  0x00003514 rtn 
+ 00016618  0x00003516 fetch  0x00000001 , 0x000046de 
+ 00016619  0x00003517 beq  0x00000070 , 0x000040e8 
+ 00016620  0x00003518 jam  0x00000001 , 0x000046e0 
+ 00016621  0x00003519 rtn 
+ 00016622  0x0000351b jam  0x00000004 , 0x000046e0 
+ 00016623  0x0000351c call  0x000040f6 
+ 00016624  0x0000351d setarg  0x00003426 
+ 00016625  0x0000351e call  0x00006413 
+ 00016626  0x0000351f setarg  0x00000419 
+ 00016627  0x00003520 call  0x00006413 
+ 00016628  0x00003522 setarg  0x00000009 
+ 00016629  0x00003523 branch  0x00006413 
+ 00016630  0x00003525 setarg  0x00005a09 
+ 00016631  0x00003526 branch  0x00006413 
+ 00016632  0x00003529 jam  0x00000003 , 0x000046e0 
+ 00016633  0x0000352a call  0x000040f6 
+ 00016634  0x0000352b setarg  0x00000f0d 
+ 00016635  0x0000352c call  0x00006413 
+ 00016636  0x0000352d setarg  0x0000e31d 
+ 00016637  0x0000352e call  0x00006413 
+ 00016638  0x0000352f setarg  0x0000d27d 
+ 00016639  0x00003530 call  0x00006413 
+ 00016640  0x00003531 call  0x00004102 
+ 00016641  0x00003532 branch  0x0000411a 
+ 00016642  0x00003535 setarg  0x0000351b 
+ 00016643  0x00003536 call  0x00006413 
+ 00016644  0x00003537 setarg  0x0000b428 
+ 00016645  0x00003538 call  0x00006413 
+ 00016646  0x00003539 setarg  0x00004629 
+ 00016647  0x0000353a call  0x00006413 
+ 00016648  0x0000353b setarg  0x0000962a 
+ 00016649  0x0000353c call  0x00006413 
+ 00016650  0x0000353d setarg  0x00008c2b 
+ 00016651  0x0000353e call  0x00006413 
+ 00016652  0x0000353f setarg  0x00006e2c 
+ 00016653  0x00003540 call  0x00006413 
+ 00016654  0x00003541 setarg  0x0000642d 
+ 00016655  0x00003542 call  0x00006413 
+ 00016656  0x00003543 setarg  0x00005f38 
+ 00016657  0x00003544 call  0x00006413 
+ 00016658  0x00003545 setarg  0x00000f39 
+ 00016659  0x00003546 call  0x00006413 
+ 00016660  0x00003547 setarg  0x0000323a 
+ 00016661  0x00003548 call  0x00006413 
+ 00016662  0x00003549 setarg  0x0000473b 
+ 00016663  0x0000354a call  0x00006413 
+ 00016664  0x0000354b setarg  0x00001042 
+ 00016665  0x0000354c branch  0x00006413 
+ 00016666  0x0000354e setarg  0x00002e54 
+ 00016667  0x0000354f call  0x00006413 
+ 00016668  0x00003550 setarg  0x0000f255 
+ 00016669  0x00003551 call  0x00006413 
+ 00016670  0x00003552 setarg  0x0000f461 
+ 00016671  0x00003553 call  0x00006413 
+ 00016672  0x00003554 setarg  0x00007063 
+ 00016673  0x00003555 call  0x00006413 
+ 00016674  0x00003556 setarg  0x00005275 
+ 00016675  0x00003557 call  0x00006413 
+ 00016676  0x00003558 setarg  0x00004176 
+ 00016677  0x00003559 call  0x00006413 
+ 00016678  0x0000355a setarg  0x0000ed77 
+ 00016679  0x0000355b call  0x00006413 
+ 00016680  0x0000355c setarg  0x00002378 
+ 00016681  0x0000355d call  0x00006413 
+ 00016682  0x0000355e setarg  0x00004679 
+ 00016683  0x0000355f call  0x00006413 
+ 00016684  0x00003560 setarg  0x0000e57a 
+ 00016685  0x00003561 call  0x00006413 
+ 00016686  0x00003562 setarg  0x0000487c 
+ 00016687  0x00003563 call  0x00006413 
+ 00016688  0x00003564 setarg  0x0000777e 
+ 00016689  0x00003565 call  0x00006413 
+ 00016690  0x00003566 setarg  0x0000017f 
+ 00016691  0x00003567 call  0x00006413 
+ 00016692  0x00003568 setarg  0x0000000b 
+ 00016693  0x00003569 call  0x00006413 
+ 00016694  0x0000356a setarg  0x0000007f 
+ 00016695  0x0000356b call  0x00006413 
+ 00016696  0x0000356c branch  0x000040f4 
+ 00016697  0x00003570 jam  0x00000000 , 0x000046e0 
+ 00016698  0x00003571 call  0x000040f6 
+ 00016699  0x00003572 setarg  0x0000100d 
+ 00016700  0x00003573 call  0x00006413 
+ 00016701  0x00003574 setarg  0x0000ed1d 
+ 00016702  0x00003575 call  0x00006413 
+ 00016703  0x00003576 setarg  0x0000807d 
+ 00016704  0x00003577 call  0x00006413 
+ 00016705  0x00003578 call  0x00004102 
+ 00016706  0x00003579 setarg  0x00000943 
+ 00016707  0x0000357a call  0x00006413 
+ 00016708  0x0000357b branch  0x0000411a 
+ 00016709  0x0000357f fetcht  0x00000001 , 0x000046dc 
+ 00016710  0x00003580 call  0x00006829 
+ 00016711  0x00003581 call  0x00007ec1 
+ 00016712  0x00003582 fetcht  0x00000001 , 0x000046dc 
+ 00016713  0x00003583 call  0x00006825 
+ 00016714  0x00003584 branch  0x00007ec1 
+ 00016715  0x00003587 jam  0x00000005 , 0x000046e0 
+ 00016716  0x00003588 setarg  0x0000ba41 
+ 00016717  0x00003589 call  0x00006405 
+ 00016718  0x0000358a setarg  0x00000d11 
+ 00016719  0x0000358b call  0x00006405 
+ 00016720  0x0000358c setarg  0x0000041b 
+ 00016721  0x0000358d call  0x00006405 
+ 00016722  0x0000358e setarg  0x0000041c 
+ 00016723  0x0000358f call  0x00006405 
+ 00016724  0x00003590 setarg  0x00000f1d 
+ 00016725  0x00003591 call  0x00006405 
+ 00016726  0x00003592 setarg  0x00000032 
+ 00016727  0x00003593 call  0x00006405 
+ 00016728  0x00003594 setarg  0x0000b541 
+ 00016729  0x00003595 branch  0x00006405 
+ 00016730  0x0000359a setarg  0x0000ba41 
+ 00016731  0x0000359b call  0x00006405 
+ 00016732  0x0000359c nop  0x00000fa0 
+ 00016733  0x0000359d setarg  0x0000ff7f 
+ 00016734  0x0000359e call  0x00006405 
+ 00016735  0x0000359f copy  0x00000011 , 0x0000003f 
+ 00016736  0x000035a0 call  0x00006405 
+ 00016737  0x000035a1 setarg  0x0000007f 
+ 00016738  0x000035a2 call  0x00006405 
+ 00016739  0x000035a3 setarg  0x0000b541 
+ 00016740  0x000035a4 branch  0x00006405 
+ 00016741  0x000035a7 rtnbit0  0x00000007 
+ 00016742  0x000035a8 arg  0x0000ff00 , 0x00000002 
+ 00016743  0x000035a9 ior  0x00000002 , 0x0000003f 
+ 00016744  0x000035aa rtn 
+ 00016745  0x000035ad rtnbit0  0x00000003 
+ 00016746  0x000035ae arg  0x000000f0 , 0x00000002 
+ 00016747  0x000035af ior  0x00000002 , 0x0000003f 
+ 00016748  0x000035b0 rtn 
+ 00016749  0x000035b4 call  0x00005892 
+ 00016750  0x000035b5 nrtn  0x00000034 
+ 00016751  0x000035b6 fetch  0x00000001 , 0x000046c5 
+ 00016752  0x000035b7 and  0x0000003f , 0x00000003 , 0x0000003f 
+ 00016753  0x000035b8 rtnne  0x00000003 
+ 00016754  0x000035b9 fetch  0x00000004 , 0x000046d3 
+ 00016755  0x000035ba bbit1  0x00000003 , 0x00004179 
+ 00016756  0x000035bb bbit1  0x00000000 , 0x00004179 
+ 00016757  0x000035bc bbit1  0x00000005 , 0x00004179 
+ 00016758  0x000035bd call  0x00003f97 
+ 00016759  0x000035be nrtn  0x00000028 
+ 00016760  0x000035bf branch  0x00003f90 
+ 00016761  0x000035c2 setarg  0x00000000 
+ 00016762  0x000035c3 store  0x00000007 , 0x0000469a 
+ 00016763  0x000035c4 branch  0x00003f90 
+ 00016764  0x000035c7 copy  0x00000013 , 0x0000003f 
+ 00016765  0x000035c8 beq  0x00000014 , 0x000041c3 
+ 00016766  0x000035c9 beq  0x00000001 , 0x000042ca 
+ 00016767  0x000035ca beq  0x00000015 , 0x000041d9 
+ 00016768  0x000035cb beq  0x00000002 , 0x000041d9 
+ 00016769  0x000035cc beq  0x00000005 , 0x000041d6 
+ 00016770  0x000035cd beq  0x00000010 , 0x0000426c 
+ 00016771  0x000035ce beq  0x00000012 , 0x0000429b 
+ 00016772  0x000035cf beq  0x00000006 , 0x000041d5 
+ 00016773  0x000035d0 beq  0x00000004 , 0x000041cc 
+ 00016774  0x000035d1 beq  0x00000013 , 0x000041cc 
+ 00016775  0x000035d2 beq  0x0000000a , 0x000041ca 
+ 00016776  0x000035d3 beq  0x0000002e , 0x000033cd 
+ 00016777  0x000035d4 beq  0x00000031 , 0x000041b4 
+ 00016778  0x000035d5 beq  0x00000032 , 0x000041b6 
+ 00016779  0x000035d6 beq  0x0000003e , 0x00004191 
+ 00016780  0x000035d7 beq  0x00000027 , 0x0000438e 
+ 00016781  0x000035d8 beq  0x00000039 , 0x0000419c 
+ 00016782  0x000035d9 beq  0x0000003a , 0x00004192 
+ 00016783  0x000035da beq  0x0000003c , 0x0000419a 
+ 00016784  0x000035db rtn 
+ 00016785  0x000035df branch  0x00003410 
+ 00016786  0x000035e2 jam  0x00000001 , 0x0000478b 
+ 00016787  0x000035e3 fetch  0x00000001 , 0x0000471e 
+ 00016788  0x000035e4 nbranch  0x00004492 , 0x00000034 
+ 00016789  0x000035e5 fetch  0x00000001 , 0x00004720 
+ 00016790  0x000035e6 fetcht  0x00000001 , 0x00004703 
+ 00016791  0x000035e7 isub  0x00000002 , 0x0000003e 
+ 00016792  0x000035e8 branch  0x0000340a , 0x00000005 
+ 00016793  0x000035e9 rtn 
+ 00016794  0x000035eb jam  0x00000001 , 0x0000478b 
+ 00016795  0x000035ec rtn 
+ 00016796  0x000035ee jam  0x00000001 , 0x0000478b 
+ 00016797  0x000035ef arg  0x00000003 , 0x00000007 
+ 00016798  0x000035f0 call  0x000043d2 
+ 00016799  0x000035f1 setarg  0x00000000 
+ 00016800  0x000035f2 store  0x00000002 , 0x00004707 
+ 00016801  0x000035f3 jam  0x00000000 , 0x000046a7 
+ 00016802  0x000035f5 fetch  0x00000001 , 0x000046e0 
+ 00016803  0x000035f6 sub  0x0000003f , 0x00000005 , 0x0000003e 
+ 00016804  0x000035f7 call  0x00004039 , 0x00000005 
+ 00016805  0x000035f8 ncall  0x0000405d , 0x00000005 
+ 00016806  0x000035fa fetch  0x00000001 , 0x00000004 , 0x000046d3 
+ 00016807  0x000035fb bbit1  0x00000013 , 0x000041af 
+ 00016808  0x000035fc call  0x000041aa 
+ 00016809  0x000035fd branch  0x000065d1 
+ 00016810  0x00003600 call  0x00002c7a 
+ 00016811  0x00003601 add  0x00000013 , 0x000000ae , 0x00000011 
+ 00016812  0x00003602 arg  0x0000005b , 0x00000012 
+ 00016813  0x00003603 arg  0x00000004 , 0x00000002 
+ 00016814  0x00003604 rtn 
+ 00016815  0x00003607 call  0x00002c7a 
+ 00016816  0x00003608 add  0x00000013 , 0x000000ae , 0x00000012 
+ 00016817  0x00003609 ifetch  0x00000001 , 0x00000012 
+ 00016818  0x0000360a store  0x00000001 , 0x0000477b 
+ 00016819  0x0000360b branch  0x00004435 
+ 00016820  0x0000360f arg  0x00000002 , 0x00000007 
+ 00016821  0x00003610 branch  0x000041b9 
+ 00016822  0x00003612 jam  0x00000002 , 0x000046c6 
+ 00016823  0x00003613 arg  0x00000001 , 0x00000007 
+ 00016824  0x00003614 branch  0x000041b9 
+ 00016825  0x00003618 fetch  0x00000001 , 0x000046c5 
+ 00016826  0x00003619 qset1  0x0000003f 
+ 00016827  0x0000361a store  0x00000001 , 0x000046c5 
+ 00016828  0x0000361b rtn 
+ 00016829  0x0000361e fetch  0x00000001 , 0x000046c5 
+ 00016830  0x0000361f qset0  0x0000003f 
+ 00016831  0x00003620 store  0x00000001 , 0x000046c5 
+ 00016832  0x00003621 rtn 
+ 00016833  0x00003623 jam  0x00000000 , 0x000046c5 
+ 00016834  0x00003624 rtn 
+ 00016835  0x00003627 fetch  0x00000002 , 0x0000420a 
+ 00016836  0x00003628 set0  0x00000000 , 0x0000003f 
+ 00016837  0x00003629 store  0x00000002 , 0x0000420a 
+ 00016838  0x0000362a setarg  0x00000000 
+ 00016839  0x0000362b store  0x00000002 , 0x000046ae 
+ 00016840  0x0000362c call  0x00003f8d 
+ 00016841  0x0000362d branch  0x000042ca 
+ 00016842  0x00003630 call  0x000063cb 
+ 00016843  0x00003631 branch  0x000033dd 
+ 00016844  0x00003634 fetch  0x00000001 , 0x0000471e 
+ 00016845  0x00003635 nbranch  0x00004492 , 0x00000034 
+ 00016846  0x00003636 fetch  0x00000002 , 0x00004682 
+ 00016847  0x00003637 bbit1  0x0000000c , 0x000042b0 
+ 00016848  0x00003638 fetch  0x00000004 , 0x000046d3 
+ 00016849  0x00003639 bbit1  0x00000000 , 0x000041d7 
+ 00016850  0x0000363a bbit1  0x00000005 , 0x000042b0 
+ 00016851  0x0000363b bbit1  0x00000003 , 0x00002ead 
+ 00016852  0x0000363c branch  0x000033a7 
+ 00016853  0x00003640 branch  0x00003f74 
+ 00016854  0x00003643 rtn 
+ 00016855  0x00003646 call  0x000043c0 
+ 00016856  0x00003647 branch  0x0000659a 
+ 00016857  0x0000364a bpatch  0x000000e9 , 0x0000401d 
+ 00016858  0x0000364b call  0x000041e7 
+ 00016859  0x0000364c fetch  0x00000004 , 0x000046d3 
+ 00016860  0x0000364d bbit1  0x00000000 , 0x000041d7 
+ 00016861  0x0000364e bbit1  0x00000003 , 0x00002ead 
+ 00016862  0x0000364f fetch  0x00000001 , 0x0000471e 
+ 00016863  0x00003650 nbranch  0x00004492 , 0x00000034 
+ 00016864  0x00003651 fetch  0x00000002 , 0x00004208 
+ 00016865  0x00003652 bbit1  0x00000007 , 0x000041f5 
+ 00016866  0x00003653 bbit1  0x00000000 , 0x000033a9 
+ 00016867  0x00003654 bbit1  0x00000001 , 0x000041ef 
+ 00016868  0x00003655 bbit1  0x00000002 , 0x000041f2 
+ 00016869  0x00003656 bbit1  0x00000003 , 0x000041f2 
+ 00016870  0x00003657 branch  0x000042b0 
+ 00016871  0x00003659 setarg  0x00000000 
+ 00016872  0x0000365a store  0x00000008 , 0x000046b7 
+ 00016873  0x0000365b istore  0x00000004 , 0x00000005 
+ 00016874  0x0000365c jam  0x00000000 , 0x000046b4 
+ 00016875  0x0000365d jam  0x00000000 , 0x000046a7 
+ 00016876  0x0000365e jam  0x00000000 , 0x000041e2 
+ 00016877  0x0000365f jam  0x00000000 , 0x00004429 
+ 00016878  0x00003660 rtn 
+ 00016879  0x00003663 bbit1  0x00000005 , 0x000041f2 
+ 00016880  0x00003664 bbit1  0x00000003 , 0x000041f2 
+ 00016881  0x00003665 branch  0x000042b0 
+ 00016882  0x00003667 fetch  0x00000002 , 0x00004682 
+ 00016883  0x00003668 bbit1  0x0000000c , 0x000042b0 
+ 00016884  0x00003669 branch  0x000033a7 
+ 00016885  0x0000366c call  0x000041c1 
+ 00016886  0x0000366d fetch  0x00000002 , 0x00004208 
+ 00016887  0x0000366e bbit1  0x00000000 , 0x000033a9 
+ 00016888  0x0000366f branch  0x000033a7 
+ 00016889  0x00003672 call  0x000043d6 
+ 00016890  0x00003673 call  0x00004243 
+ 00016891  0x00003674 call  0x00004246 
+ 00016892  0x00003675 call  0x00004250 
+ 00016893  0x00003676 call  0x0000445d 
+ 00016894  0x00003678 call  0x00004443 
+ 00016895  0x00003679 call  0x00004333 
+ 00016896  0x0000367a call  0x000043a5 
+ 00016897  0x0000367b call  0x000043eb 
+ 00016898  0x0000367c call  0x00004209 
+ 00016899  0x0000367d call  0x00004231 
+ 00016900  0x0000367e call  0x00004234 
+ 00016901  0x0000367f call  0x00004237 
+ 00016902  0x00003680 call  0x0000423a 
+ 00016903  0x00003681 call  0x0000423d 
+ 00016904  0x00003682 branch  0x00004240 
+ 00016905  0x00003687 fetch  0x00000001 , 0x00004711 
+ 00016906  0x00003688 rtn  0x00000034 
+ 00016907  0x00003689 increase  0xffffffff , 0x0000003f 
+ 00016908  0x0000368a store  0x00000001 , 0x00004711 
+ 00016909  0x0000368b nrtn  0x00000034 
+ 00016910  0x0000368c branch  0x0000420f 
+ 00016911  0x0000368e fetch  0x00000001 , 0x00004712 
+ 00016912  0x0000368f rtneq  0x00000000 
+ 00016913  0x00003690 beq  0x00000005 , 0x00004216 
+ 00016914  0x00003692 call  0x00004225 
+ 00016915  0x00003693 jam  0x00000005 , 0x00004712 
+ 00016916  0x00003694 jam  0x00000005 , 0x00004711 
+ 00016917  0x00003695 rtn 
+ 00016918  0x00003697 call  0x0000422c 
+ 00016919  0x00003698 jam  0x00000004 , 0x00004712 
+ 00016920  0x00003699 jam  0x00000005 , 0x00004711 
+ 00016921  0x0000369a rtn 
+ 00016922  0x0000369e setarg  0x00008006 
+ 00016923  0x0000369f call  0x00006413 
+ 00016924  0x000036a0 nop  0x000003e8 
+ 00016925  0x000036a1 jam  0x00000000 , 0x00004711 
+ 00016926  0x000036a2 jam  0x00000000 , 0x00004712 
+ 00016927  0x000036a3 branch  0x000040e0 
+ 00016928  0x000036a6 setarg  0x0000a006 
+ 00016929  0x000036a7 call  0x00006413 
+ 00016930  0x000036a8 setarg  0x0000a005 
+ 00016931  0x000036a9 branch  0x00006413 
+ 00016932  0x000036ab jam  0x00000000 , 0x00004711 
+ 00016933  0x000036ad fetch  0x00000001 , 0x000046e0 
+ 00016934  0x000036ae beq  0x00000004 , 0x00004220 
+ 00016935  0x000036af setarg  0x00000106 
+ 00016936  0x000036b0 call  0x00006413 
+ 00016937  0x000036b1 setarg  0x0000a105 
+ 00016938  0x000036b2 branch  0x00006413 
+ 00016939  0x000036b5 jam  0x00000000 , 0x00004711 
+ 00016940  0x000036b7 setarg  0x00000906 
+ 00016941  0x000036b8 branch  0x00006413 
+ 00016942  0x000036ba jam  0x00000005 , 0x00004711 
+ 00016943  0x000036bb jam  0x00000001 , 0x00004712 
+ 00016944  0x000036bc rtn 
+ 00016945  0x000036bf arg  0x00004680 , 0x00000013 
+ 00016946  0x000036c0 arg  0x0000429b , 0x00000012 
+ 00016947  0x000036c1 branch  0x0000336d 
+ 00016948  0x000036c4 arg  0x000046ac , 0x00000013 
+ 00016949  0x000036c5 arg  0x00004264 , 0x00000012 
+ 00016950  0x000036c6 branch  0x00003374 
+ 00016951  0x000036c9 arg  0x000046ae , 0x00000013 
+ 00016952  0x000036ca arg  0x00004266 , 0x00000012 
+ 00016953  0x000036cb branch  0x00003374 
+ 00016954  0x000036ce arg  0x000046b0 , 0x00000013 
+ 00016955  0x000036cf arg  0x0000426a , 0x00000012 
+ 00016956  0x000036d0 branch  0x00003374 
+ 00016957  0x000036d3 arg  0x000046c4 , 0x00000013 
+ 00016958  0x000036d4 arg  0x00004478 , 0x00000012 
+ 00016959  0x000036d5 branch  0x0000336d 
+ 00016960  0x000036da arg  0x000046c6 , 0x00000013 
+ 00016961  0x000036db arg  0x0000425e , 0x00000012 
+ 00016962  0x000036dc branch  0x0000336d 
+ 00016963  0x000036df arg  0x00004704 , 0x00000013 
+ 00016964  0x000036e0 arg  0x00004249 , 0x00000012 
+ 00016965  0x000036e1 branch  0x0000336d 
+ 00016966  0x000036e4 arg  0x00004707 , 0x00000013 
+ 00016967  0x000036e5 arg  0x00004249 , 0x00000012 
+ 00016968  0x000036e6 branch  0x00003374 
+ 00016969  0x000036e9 rtn 
+ 00016970  0x000036ed fetch  0x00000004 , 0x000046d3 
+ 00016971  0x000036ee rtnbit0  0x00000017 
+ 00016972  0x000036ef jam  0x0000000a , 0x000046df 
+ 00016973  0x000036f0 fetch  0x00000001 , 0x000046f4 
+ 00016974  0x000036f1 store  0x00000001 , 0x00004715 
+ 00016975  0x000036f2 rtn 
+ 00016976  0x000036f6 arg  0x000046df , 0x00000013 
+ 00016977  0x000036f7 arg  0x00004253 , 0x00000012 
+ 00016978  0x000036f8 branch  0x0000336d 
+ 00016979  0x000036fa fetch  0x00000001 , 0x000046f4 
+ 00016980  0x000036fb store  0x00000001 , 0x00004715 
+ 00016981  0x000036fc setarg  0x00000190 
+ 00016982  0x000036fd store  0x00000002 , 0x00004716 
+ 00016983  0x000036fe store  0x00000002 , 0x00004718 
+ 00016984  0x000036ff arg  0x00000000 , 0x00000011 
+ 00016985  0x00003700 fetcht  0x00000001 , 0x0000477a 
+ 00016986  0x00003701 increase  0x00000001 , 0x00000002 
+ 00016987  0x00003702 storet  0x00000001 , 0x00004714 
+ 00016988  0x00003703 jam  0x00000001 , 0x00004713 
+ 00016989  0x00003704 rtn 
+ 00016990  0x00003707 fetch  0x00000001 , 0x000046c5 
+ 00016991  0x00003708 rtnbit1  0x00000002 
+ 00016992  0x00003709 jam  0x00000012 , 0x00000a99 
+ 00016993  0x0000370a call  0x00007d8f 
+ 00016994  0x0000370b arg  0x00000000 , 0x00000007 
+ 00016995  0x0000370c branch  0x000041b9 
+ 00016996  0x00003710 call  0x000042ca 
+ 00016997  0x00003711 branch  0x0000340a 
+ 00016998  0x00003714 call  0x000033f6 
+ 00016999  0x00003715 fetch  0x00000001 , 0x0000471e 
+ 00017000  0x00003716 nbranch  0x00004492 , 0x00000034 
+ 00017001  0x00003717 branch  0x0000340a 
+ 00017002  0x0000371a bmark1  0x00000026 , 0x00007e1d 
+ 00017003  0x0000371b branch  0x00004386 
+ 00017004  0x00003720 bpatch  0x000000ea , 0x0000401d 
+ 00017005  0x00003721 jam  0x00000000 , 0x000046b4 
+ 00017006  0x00003722 call  0x00004386 
+ 00017007  0x00003723 call  0x000041c1 
+ 00017008  0x00003724 branch  0x000042b0 
+ 00017009  0x00003729 fetch  0x00000006 , 0x000041d0 
+ 00017010  0x0000372a branch  0x000033eb , 0x00000034 
+ 00017011  0x0000372b call  0x0000427e 
+ 00017012  0x0000372c jam  0x00000017 , 0x0000016d 
+ 00017013  0x0000372d fetch  0x00000001 , 0x0000465a 
+ 00017014  0x0000372e nbranch  0x000033e1 , 0x00000034 
+ 00017015  0x0000372f jam  0x00000004 , 0x0000016d 
+ 00017016  0x00003730 branch  0x000033e1 
+ 00017017  0x00003733 fetch  0x00000002 , 0x000046a8 
+ 00017018  0x00003734 store  0x00000002 , 0x000046ae 
+ 00017019  0x00003735 call  0x0000427e 
+ 00017020  0x00003736 call  0x00003418 
+ 00017021  0x00003737 branch  0x00007df4 
+ 00017022  0x0000373a setarg  0x000000c8 
+ 00017023  0x0000373b store  0x00000002 , 0x00004716 
+ 00017024  0x0000373c store  0x00000002 , 0x00004718 
+ 00017025  0x0000373d branch  0x00004285 
+ 00017026  0x00003740 setarg  0x000003e8 
+ 00017027  0x00003741 store  0x00000002 , 0x00004716 
+ 00017028  0x00003742 store  0x00000002 , 0x00004718 
+ 00017029  0x00003744 fetch  0x00000001 , 0x00004720 
+ 00017030  0x00003745 beq  0x00000001 , 0x0000428a 
+ 00017031  0x00003746 beq  0x00000002 , 0x0000428c 
+ 00017032  0x00003747 beq  0x00000003 , 0x0000428e 
+ 00017033  0x00003748 rtn 
+ 00017034  0x0000374a fetch  0x00000001 , 0x000046f0 
+ 00017035  0x0000374b branch  0x0000428f 
+ 00017036  0x0000374d fetch  0x00000001 , 0x000046f1 
+ 00017037  0x0000374e branch  0x0000428f 
+ 00017038  0x00003750 fetch  0x00000001 , 0x000046f2 
+ 00017039  0x00003752 store  0x00000001 , 0x00000aa2 
+ 00017040  0x00003753 call  0x00004482 
+ 00017041  0x00003754 fetch  0x00000001 , 0x00000aa2 
+ 00017042  0x00003755 store  0x00000001 , 0x00004715 
+ 00017043  0x00003756 arg  0x00000000 , 0x00000011 
+ 00017044  0x00003757 jam  0x00000001 , 0x00004713 
+ 00017045  0x00003758 branch  0x00007d1e 
+ 00017046  0x0000375b arg  0x00000000 , 0x00000011 
+ 00017047  0x0000375c branch  0x00007d19 
+ 00017048  0x0000375e arg  0x00000000 , 0x00000011 
+ 00017049  0x0000375f branch  0x00007d14 
+ 00017050  0x00003762 branch  0x000041c1 
+ 00017051  0x00003765 jam  0x00000001 , 0x000041e2 
+ 00017052  0x00003766 call  0x00003416 
+ 00017053  0x00003767 call  0x00003412 
+ 00017054  0x00003768 setarg  0x00000000 
+ 00017055  0x00003769 store  0x00000002 , 0x0000467e 
+ 00017056  0x0000376a store  0x00000001 , 0x00004680 
+ 00017057  0x0000376b branch  0x0000340e 
+ 00017058  0x0000376e call  0x0000435f 
+ 00017059  0x0000376f fetch  0x00000001 , 0x00004720 
+ 00017060  0x00003770 fetcht  0x00000001 , 0x00004703 
+ 00017061  0x00003771 isub  0x00000002 , 0x0000003e 
+ 00017062  0x00003772 branch  0x000042ab , 0x00000005 
+ 00017063  0x00003773 fetch  0x00000001 , 0x00004210 
+ 00017064  0x00003774 beq  0x00000033 , 0x00004271 
+ 00017065  0x00003775 beq  0x00000034 , 0x00004279 
+ 00017066  0x00003776 branch  0x000042b0 
+ 00017067  0x00003778 call  0x00003d57 
+ 00017068  0x00003779 rtnmark1  0x00000026 
+ 00017069  0x0000377a fetch  0x00000001 , 0x0000471e 
+ 00017070  0x0000377b nbranch  0x00004492 , 0x00000034 
+ 00017071  0x0000377c rtn 
+ 00017072  0x0000377f bpatch  0x000000eb , 0x0000401d 
+ 00017073  0x00003780 fetch  0x00000002 , 0x00004682 
+ 00017074  0x00003781 bbit1  0x0000000b , 0x000042b7 
+ 00017075  0x00003782 fetch  0x00000004 , 0x000046d3 
+ 00017076  0x00003783 bbit0  0x00000018 , 0x000042b7 
+ 00017077  0x00003784 random  0x0000003f 
+ 00017078  0x00003785 store  0x00000001 , 0x000044a1 
+ 00017079  0x00003787 call  0x00003418 
+ 00017080  0x00003788 fetch  0x00000002 , 0x00004687 
+ 00017081  0x00003789 store  0x00000002 , 0x000046ac 
+ 00017082  0x0000378a jam  0x00000006 , 0x0000016d 
+ 00017083  0x0000378b setarg  0x00000000 
+ 00017084  0x0000378c store  0x00000002 , 0x000046b0 
+ 00017085  0x0000378d store  0x00000002 , 0x000046ae 
+ 00017086  0x0000378e arg  0x00000007 , 0x00000007 
+ 00017087  0x0000378f call  0x000043ce 
+ 00017088  0x00003790 call  0x000043ca 
+ 00017089  0x00003791 fetch  0x00000001 , 0x00004092 
+ 00017090  0x00003792 isolate1  0x00000001 , 0x0000003f 
+ 00017091  0x00003793 call  0x00007df4 , 0x00000001 
+ 00017092  0x00003794 fetch  0x00000001 , 0x00004092 
+ 00017093  0x00003795 isolate1  0x00000000 , 0x0000003f 
+ 00017094  0x00003796 call  0x00007ddd , 0x00000001 
+ 00017095  0x00003797 fetch  0x00000004 , 0x000046d3 
+ 00017096  0x00003798 bbit1  0x0000001c , 0x0000422e 
+ 00017097  0x00003799 branch  0x00004282 
+ 00017098  0x0000379c bpatch  0x000000ec , 0x0000401d 
+ 00017099  0x0000379d fetch  0x00000001 , 0x00004092 
+ 00017100  0x0000379e isolate1  0x00000001 , 0x0000003f 
+ 00017101  0x0000379f call  0x000042d4 , 0x00000001 
+ 00017102  0x000037a0 fetch  0x00000001 , 0x00004092 
+ 00017103  0x000037a1 isolate1  0x00000000 , 0x0000003f 
+ 00017104  0x000037a2 call  0x000042d7 , 0x00000001 
+ 00017105  0x000037a3 fetch  0x00000004 , 0x000046d3 
+ 00017106  0x000037a4 bbit1  0x0000001c , 0x0000421a 
+ 00017107  0x000037a5 branch  0x00004482 
+ 00017108  0x000037a7 setarg  0x00000000 
+ 00017109  0x000037a8 store  0x00000002 , 0x000046ae 
+ 00017110  0x000037a9 branch  0x00007dfa 
+ 00017111  0x000037ab setarg  0x00000000 
+ 00017112  0x000037ac store  0x00000002 , 0x000046ac 
+ 00017113  0x000037ad branch  0x00007de2 
+ 00017114  0x000037b4 fetch  0x00000004 , 0x000046d3 
+ 00017115  0x000037b5 rtnbit0  0x00000007 
+ 00017116  0x000037b6 arg  0x00000007 , 0x00000007 
+ 00017117  0x000037b7 call  0x000043d2 
+ 00017118  0x000037b8 call  0x000042e8 
+ 00017119  0x000037ba call  0x000042fb 
+ 00017120  0x000037bb fetch  0x00000004 , 0x000046d3 
+ 00017121  0x000037bc bbit1  0x00000013 , 0x00004435 
+ 00017122  0x000037bd bbit1  0x00000014 , 0x000042e4 
+ 00017123  0x000037be rtn 
+ 00017124  0x000037c0 arg  0x00000058 , 0x00000002 
+ 00017125  0x000037c1 arg  0x00004720 , 0x00000011 
+ 00017126  0x000037c2 arg  0x00000000 , 0x00000012 
+ 00017127  0x000037c3 branch  0x000065d1 
+ 00017128  0x000037c6 fetch  0x00000001 , 0x00000185 
+ 00017129  0x000037c7 beq  0x00000034 , 0x000042ec 
+ 00017130  0x000037c8 beq  0x00000033 , 0x000042ef 
+ 00017131  0x000037c9 rtn 
+ 00017132  0x000037cb store  0x00000001 , 0x000046c7 
+ 00017133  0x000037cc fetch  0x00000006 , 0x0000044f 
+ 00017134  0x000037cd branch  0x000042f1 
+ 00017135  0x000037cf store  0x00000001 , 0x000046c7 
+ 00017136  0x000037d0 fetch  0x00000006 , 0x00000040 
+ 00017137  0x000037d2 store  0x00000006 , 0x000046c8 
+ 00017138  0x000037d3 fetch  0x00000007 , 0x000046c7 
+ 00017139  0x000037d4 arg  0x00004721 , 0x00000006 
+ 00017140  0x000037d5 arg  0x00000003 , 0x00000039 
+ 00017141  0x000037d7 ifetcht  0x00000007 , 0x00000006 
+ 00017142  0x000037d8 isub  0x00000002 , 0x0000003e 
+ 00017143  0x000037d9 branch  0x00004310 , 0x00000005 
+ 00017144  0x000037da increase  0x00000016 , 0x00000006 
+ 00017145  0x000037db loop  0x000042f5 
+ 00017146  0x000037dc rtn 
+ 00017147  0x000037de arg  0x00004721 , 0x00000011 
+ 00017148  0x000037df fetch  0x00000001 , 0x00004720 
+ 00017149  0x000037e0 increase  0xffffffff , 0x0000003f 
+ 00017150  0x000037e1 mul32  0x0000003f , 0x0000001d , 0x0000003f 
+ 00017151  0x000037e2 iadd  0x00000011 , 0x00000011 
+ 00017152  0x000037e3 fetch  0x00000001 , 0x00000185 
+ 00017153  0x000037e4 istore  0x00000001 , 0x00000011 
+ 00017154  0x000037e5 beq  0x00000034 , 0x00004305 
+ 00017155  0x000037e6 beq  0x00000033 , 0x0000430c 
+ 00017156  0x000037e7 rtn 
+ 00017157  0x000037ea fetch  0x00000006 , 0x0000044f 
+ 00017158  0x000037eb istore  0x00000006 , 0x00000005 
+ 00017159  0x000037ec arg  0x00004419 , 0x00000006 
+ 00017160  0x000037ed call  0x00007ebf 
+ 00017161  0x000037ee fetch  0x00000006 , 0x000044a0 
+ 00017162  0x000037ef istore  0x00000006 , 0x00000005 
+ 00017163  0x000037f0 rtn 
+ 00017164  0x000037f2 fetch  0x00000006 , 0x00000040 
+ 00017165  0x000037f3 istore  0x00000006 , 0x00000005 
+ 00017166  0x000037f4 arg  0x000041be , 0x00000006 
+ 00017167  0x000037f5 branch  0x00007ebf 
+ 00017168  0x000037f8 increase  0xfffffffa , 0x00000006 
+ 00017169  0x000037f9 copy  0x00000006 , 0x00000005 
+ 00017170  0x000037fa fetcht  0x00000006 , 0x000046c8 
+ 00017171  0x000037fb increase  0x00000003 , 0x00000002 
+ 00017172  0x000037fc istoret  0x00000006 , 0x00000005 
+ 00017173  0x000037fd rtn 
+ 00017174  0x00003802 arg  0x00000058 , 0x00000002 
+ 00017175  0x00003803 arg  0x00004720 , 0x00000011 
+ 00017176  0x00003804 arg  0x00000000 , 0x00000012 
+ 00017177  0x00003805 call  0x000065df 
+ 00017178  0x00003807 arg  0x00004721 , 0x00000011 
+ 00017179  0x00003808 fetch  0x00000001 , 0x00004720 
+ 00017180  0x00003809 fetcht  0x00000001 , 0x00004703 
+ 00017181  0x0000380a isub  0x00000002 , 0x0000003e 
+ 00017182  0x0000380b rtn  0x00000005 
+ 00017183  0x0000380c increase  0xffffffff , 0x0000003f 
+ 00017184  0x0000380d mul32  0x0000003f , 0x0000001d , 0x0000003f 
+ 00017185  0x0000380e iadd  0x00000011 , 0x00000011 
+ 00017186  0x0000380f ifetch  0x00000001 , 0x00000011 
+ 00017187  0x00003810 store  0x00000001 , 0x00004210 
+ 00017188  0x00003811 beq  0x00000033 , 0x00004327 
+ 00017189  0x00003812 beq  0x00000034 , 0x0000432c 
+ 00017190  0x00003813 rtn 
+ 00017191  0x00003816 ifetch  0x00000006 , 0x00000006 
+ 00017192  0x00003818 store  0x00000006 , 0x000041d0 
+ 00017193  0x00003819 arg  0x000041be , 0x00000005 
+ 00017194  0x0000381a call  0x00007ebf 
+ 00017195  0x0000381b branch  0x000067d7 
+ 00017196  0x0000381e ifetch  0x00000006 , 0x00000006 
+ 00017197  0x00003820 store  0x00000006 , 0x000041d0 
+ 00017198  0x00003821 arg  0x00004419 , 0x00000005 
+ 00017199  0x00003822 call  0x00007ebf 
+ 00017200  0x00003823 ifetch  0x00000006 , 0x00000006 
+ 00017201  0x00003824 store  0x00000006 , 0x000044a0 
+ 00017202  0x00003825 rtn 
+ 00017203  0x00003829 fetch  0x00000001 , 0x000046f5 
+ 00017204  0x0000382a bbit1  0x00000005 , 0x00004349 
+ 00017205  0x0000382b bbit1  0x00000006 , 0x00004359 
+ 00017206  0x0000382c branch  0x00004337 
+ 00017207  0x0000382f call  0x00004083 
+ 00017208  0x00003830 beq  0x00000006 , 0x0000433e 
+ 00017209  0x00003832 jam  0x0000001e , 0x000046d8 
+ 00017210  0x00003833 fetch  0x00000001 , 0x000046d9 
+ 00017211  0x00003834 rtneq  0x00000001 
+ 00017212  0x00003835 jam  0x00000001 , 0x000046d9 
+ 00017213  0x00003836 rtn 
+ 00017214  0x00003839 call  0x00004343 
+ 00017215  0x0000383a fetch  0x00000001 , 0x000046d9 
+ 00017216  0x0000383b rtneq  0x00000000 
+ 00017217  0x0000383c jam  0x00000000 , 0x000046d9 
+ 00017218  0x0000383d branch  0x000043c0 
+ 00017219  0x00003840 fetch  0x00000001 , 0x000046d8 
+ 00017220  0x00003841 rtn  0x00000034 
+ 00017221  0x00003842 pincrease  0xffffffff 
+ 00017222  0x00003843 store  0x00000001 , 0x000046d8 
+ 00017223  0x00003844 nrtn  0x00000034 
+ 00017224  0x00003845 branch  0x00004370 
+ 00017225  0x00003848 fetch  0x00000001 , 0x000046ed 
+ 00017226  0x00003849 rtneq  0x000000ff 
+ 00017227  0x0000384a fetcht  0x00000001 , 0x000046ed 
+ 00017228  0x0000384b call  0x0000681d 
+ 00017229  0x0000384c branch  0x00004354 , 0x00000001 
+ 00017230  0x0000384e fetch  0x00000001 , 0x000046d9 
+ 00017231  0x0000384f rtneq  0x00000001 
+ 00017232  0x00003850 jam  0x00000001 , 0x000046d9 
+ 00017233  0x00003851 fetch  0x00000004 , 0x000046d3 
+ 00017234  0x00003852 rtnbit1  0x00000006 
+ 00017235  0x00003853 branch  0x00004370 
+ 00017236  0x00003856 fetch  0x00000001 , 0x000046d9 
+ 00017237  0x00003857 rtneq  0x00000000 
+ 00017238  0x00003858 jam  0x00000000 , 0x000046d9 
+ 00017239  0x00003859 arg  0x00000006 , 0x00000007 
+ 00017240  0x0000385a branch  0x000043d2 
+ 00017241  0x0000385f fetch  0x00000001 , 0x00000004 , 0x000046d3 
+ 00017242  0x00003860 rtnbit0  0x00000006 
+ 00017243  0x00003861 fetch  0x00000001 , 0x00004720 
+ 00017244  0x00003862 beq  0x00000001 , 0x00004369 
+ 00017245  0x00003863 beq  0x00000002 , 0x0000436c 
+ 00017246  0x00003864 rtn 
+ 00017247  0x00003866 fetch  0x00000001 , 0x00000004 , 0x000046d3 
+ 00017248  0x00003867 rtnbit0  0x00000006 
+ 00017249  0x00003868 fetcht  0x00000001 , 0x000046ed 
+ 00017250  0x00003869 call  0x0000681d 
+ 00017251  0x0000386a branch  0x00004366 , 0x00000001 
+ 00017252  0x0000386c jam  0x00000001 , 0x00004720 
+ 00017253  0x0000386d rtn 
+ 00017254  0x0000386f fetch  0x00000001 , 0x00004703 
+ 00017255  0x00003870 store  0x00000001 , 0x00004720 
+ 00017256  0x00003871 rtn 
+ 00017257  0x00003873 fetcht  0x00000001 , 0x000046ed 
+ 00017258  0x00003874 nbranch  0x00004370 , 0x00000001 
+ 00017259  0x00003875 rtn 
+ 00017260  0x00003877 fetcht  0x00000001 , 0x000046ed 
+ 00017261  0x00003878 call  0x0000681d 
+ 00017262  0x00003879 branch  0x00004354 , 0x00000001 
+ 00017263  0x0000387a rtn 
+ 00017264  0x00003880 fetcht  0x00000001 , 0x00004720 
+ 00017265  0x00003881 increase  0x00000001 , 0x00000002 
+ 00017266  0x00003882 fetch  0x00000001 , 0x000046d2 
+ 00017267  0x00003883 isub  0x00000002 , 0x0000003e 
+ 00017268  0x00003884 ncall  0x000043cc , 0x00000002 
+ 00017269  0x00003885 storet  0x00000001 , 0x00004720 
+ 00017270  0x00003886 jam  0x00000000 , 0x000041bd 
+ 00017271  0x00003887 call  0x0000437a 
+ 00017272  0x00003888 call  0x000043c0 
+ 00017273  0x0000388a branch  0x0000437e 
+ 00017274  0x0000388d arg  0x00000001 , 0x00000002 
+ 00017275  0x0000388e arg  0x00004720 , 0x00000011 
+ 00017276  0x0000388f arg  0x00000000 , 0x00000012 
+ 00017277  0x00003890 branch  0x00006606 
+ 00017278  0x00003893 call  0x00004381 
+ 00017279  0x00003894 call  0x000043c2 
+ 00017280  0x00003895 branch  0x000041d7 
+ 00017281  0x00003897 fetch  0x00000002 , 0x00004682 
+ 00017282  0x00003898 bbit1  0x00000007 , 0x00004392 
+ 00017283  0x00003899 bbit1  0x00000009 , 0x00003402 
+ 00017284  0x0000389a bbit1  0x00000000 , 0x000033e9 
+ 00017285  0x0000389b branch  0x000042ca 
+ 00017286  0x0000389e bpatch  0x000000ed , 0x0000401d 
+ 00017287  0x0000389f setarg  0x00000000 
+ 00017288  0x000038a0 store  0x00000002 , 0x000046b0 
+ 00017289  0x000038a1 fetch  0x00000002 , 0x00004682 
+ 00017290  0x000038a2 bbit1  0x00000009 , 0x00003402 
+ 00017291  0x000038a3 fetch  0x00000002 , 0x00004682 
+ 00017292  0x000038a4 bbit1  0x00000000 , 0x000033e9 
+ 00017293  0x000038a5 rtn 
+ 00017294  0x000038a8 setarg  0x00000001 
+ 00017295  0x000038a9 store  0x00000006 , 0x00000040 
+ 00017296  0x000038aa jam  0x00000033 , 0x00000185 
+ 00017297  0x000038ab branch  0x000042df 
+ 00017298  0x000038af call  0x000043c4 
+ 00017299  0x000038b0 branch  0x00007e2f 
+ 00017300  0x000038b3 fetch  0x00000001 , 0x000046ec 
+ 00017301  0x000038b4 rtneq  0x000000ff 
+ 00017302  0x000038b5 fetcht  0x00000001 , 0x000046ec 
+ 00017303  0x000038b6 call  0x0000681d 
+ 00017304  0x000038b7 branch  0x0000439f , 0x00000001 
+ 00017305  0x000038b9 fetch  0x00000001 , 0x00004685 
+ 00017306  0x000038ba store  0x00000001 , 0x000046da 
+ 00017307  0x000038bb fetch  0x00000001 , 0x000046db 
+ 00017308  0x000038bc rtneq  0x00000001 
+ 00017309  0x000038bd jam  0x00000001 , 0x000046db 
+ 00017310  0x000038be branch  0x000043ca 
+ 00017311  0x000038c0 call  0x000043b5 
+ 00017312  0x000038c1 fetch  0x00000001 , 0x000046db 
+ 00017313  0x000038c2 rtneq  0x00000000 
+ 00017314  0x000038c3 jam  0x00000000 , 0x000046db 
+ 00017315  0x000038c4 call  0x00007e2f 
+ 00017316  0x000038c5 branch  0x000043c8 
+ 00017317  0x000038c9 fetch  0x00000001 , 0x000046f5 
+ 00017318  0x000038ca bbit1  0x00000004 , 0x00004394 
+ 00017319  0x000038cc call  0x00004083 
+ 00017320  0x000038cd beq  0x00000007 , 0x000043af 
+ 00017321  0x000038cf fetch  0x00000001 , 0x00004685 
+ 00017322  0x000038d0 store  0x00000001 , 0x000046da 
+ 00017323  0x000038d1 fetch  0x00000001 , 0x000046db 
+ 00017324  0x000038d2 rtneq  0x00000001 
+ 00017325  0x000038d3 jam  0x00000001 , 0x000046db 
+ 00017326  0x000038d4 branch  0x000043ca 
+ 00017327  0x000038d8 call  0x000043b5 
+ 00017328  0x000038d9 fetch  0x00000001 , 0x000046db 
+ 00017329  0x000038da rtneq  0x00000000 
+ 00017330  0x000038db jam  0x00000000 , 0x000046db 
+ 00017331  0x000038dc call  0x00007e2f 
+ 00017332  0x000038dd branch  0x000043c8 
+ 00017333  0x000038e0 arg  0x000046da , 0x00000013 
+ 00017334  0x000038e1 arg  0x000043b8 , 0x00000012 
+ 00017335  0x000038e2 branch  0x0000336d 
+ 00017336  0x000038e5 arg  0x00000006 , 0x00000007 
+ 00017337  0x000038e6 call  0x000043ce 
+ 00017338  0x000038e7 call  0x00003357 
+ 00017339  0x000038e8 branch  0x0000426c 
+ 00017340  0x000038ec arg  0x00000001 , 0x00000007 
+ 00017341  0x000038ed branch  0x000043ce 
+ 00017342  0x000038ef arg  0x00000001 , 0x00000007 
+ 00017343  0x000038f0 branch  0x000043d2 
+ 00017344  0x000038f2 arg  0x00000000 , 0x00000007 
+ 00017345  0x000038f3 branch  0x000043ce 
+ 00017346  0x000038f5 arg  0x00000000 , 0x00000007 
+ 00017347  0x000038f6 branch  0x000043d2 
+ 00017348  0x000038f8 arg  0x00000002 , 0x00000007 
+ 00017349  0x000038f9 branch  0x000043ce 
+ 00017350  0x000038fb arg  0x00000002 , 0x00000007 
+ 00017351  0x000038fc branch  0x000043d2 
+ 00017352  0x000038fe arg  0x00000005 , 0x00000007 
+ 00017353  0x000038ff branch  0x000043ce 
+ 00017354  0x00003901 arg  0x00000005 , 0x00000007 
+ 00017355  0x00003902 branch  0x000043d2 
+ 00017356  0x00003907 arg  0x00000001 , 0x00000002 
+ 00017357  0x00003908 rtn 
+ 00017358  0x0000390b fetch  0x00000004 , 0x000046d3 
+ 00017359  0x0000390c qset1  0x0000003f 
+ 00017360  0x0000390d store  0x00000004 , 0x000046d3 
+ 00017361  0x0000390e rtn 
+ 00017362  0x00003911 fetch  0x00000004 , 0x000046d3 
+ 00017363  0x00003912 qset0  0x0000003f 
+ 00017364  0x00003913 store  0x00000004 , 0x000046d3 
+ 00017365  0x00003914 rtn 
+ 00017366  0x00003917 fetch  0x00000004 , 0x000046d3 
+ 00017367  0x00003918 rtnbit0  0x0000001a 
+ 00017368  0x00003919 fetch  0x00000001 , 0x000046ce 
+ 00017369  0x0000391a increase  0x00000001 , 0x0000003f 
+ 00017370  0x0000391b store  0x00000001 , 0x000046ce 
+ 00017371  0x0000391c sub  0x0000003f , 0x0000000a , 0x0000003e 
+ 00017372  0x0000391d rtn  0x00000002 
+ 00017373  0x0000391e jam  0x00000000 , 0x000046ce 
+ 00017374  0x0000391f call  0x000068eb 
+ 00017375  0x00003920 call  0x00006908 
+ 00017376  0x00003921 store  0x00000002 , 0x0000470f 
+ 00017377  0x00003922 arg  0x00004709 , 0x00000011 
+ 00017378  0x00003923 call  0x00006930 
+ 00017379  0x00003924 fetch  0x00000001 , 0x00004231 
+ 00017380  0x00003925 bbit1  0x00000001 , 0x000044a0 
+ 00017381  0x00003926 bbit0  0x00000000 , 0x000043e9 
+ 00017382  0x00003927 branch  0x000043e7 
+ 00017383  0x00003929 arg  0x00000004 , 0x00000007 
+ 00017384  0x0000392a branch  0x000043ce 
+ 00017385  0x0000392c arg  0x00000004 , 0x00000007 
+ 00017386  0x0000392d branch  0x000043d2 
+ 00017387  0x00003930 fetch  0x00000004 , 0x000046d3 
+ 00017388  0x00003931 rtnbit0  0x00000004 
+ 00017389  0x00003932 fetch  0x00000001 , 0x000046ef 
+ 00017390  0x00003933 store  0x00000001 , 0x00004715 
+ 00017391  0x00003934 fetch  0x00000001 , 0x000046cf 
+ 00017392  0x00003935 pincrease  0x00000001 
+ 00017393  0x00003936 store  0x00000001 , 0x000046cf 
+ 00017394  0x00003937 sub  0x0000003f , 0x00000014 , 0x0000003e 
+ 00017395  0x00003938 ncall  0x000043f9 , 0x00000002 
+ 00017396  0x00003939 beq  0x00000002 , 0x000043fb 
+ 00017397  0x0000393a beq  0x00000004 , 0x000043fe 
+ 00017398  0x0000393b beq  0x00000006 , 0x000043fb 
+ 00017399  0x0000393c beq  0x00000008 , 0x000043fe 
+ 00017400  0x0000393d rtn 
+ 00017401  0x0000393f jam  0x00000001 , 0x000046cf 
+ 00017402  0x00003940 branch  0x000043fe 
+ 00017403  0x00003942 arg  0x00000000 , 0x00000011 
+ 00017404  0x00003943 jam  0x00000002 , 0x00004713 
+ 00017405  0x00003944 branch  0x00007d14 
+ 00017406  0x00003946 arg  0x00000000 , 0x00000011 
+ 00017407  0x00003947 jam  0x00000002 , 0x00004713 
+ 00017408  0x00003948 branch  0x00007d19 
+ 00017409  0x0000394b call  0x00003f97 
+ 00017410  0x0000394c nrtn  0x00000028 
+ 00017411  0x0000394d arg  0x00000007 , 0x00000011 
+ 00017412  0x0000394e arg  0x0000469a , 0x00000012 
+ 00017413  0x0000394f rtn 
+ 00017414  0x00003952 fetch  0x00000001 , 0x0000478b 
+ 00017415  0x00003953 rtn  0x00000034 
+ 00017416  0x00003955 fetcht  0x00000001 , 0x000046e7 
+ 00017417  0x00003956 call  0x0000681d 
+ 00017418  0x00003957 call  0x00004410 , 0x00000001 
+ 00017419  0x00003958 fetch  0x00000001 , 0x00004704 
+ 00017420  0x00003959 nrtn  0x00000034 
+ 00017421  0x0000395a call  0x00004083 
+ 00017422  0x0000395b nrtn  0x00000034 
+ 00017423  0x0000395c branch  0x00002d83 
+ 00017424  0x0000395f fetch  0x00000001 , 0x000046e7 
+ 00017425  0x00003960 rtneq  0x000000ff 
+ 00017426  0x00003961 jam  0x0000000a , 0x00004704 
+ 00017427  0x00003962 rtn 
+ 00017428  0x00003966 call  0x00004423 
+ 00017429  0x00003967 fetch  0x00000002 , 0x00004778 
+ 00017430  0x00003968 arg  0x0000aa55 , 0x00000002 
+ 00017431  0x00003969 isub  0x00000002 , 0x0000003e 
+ 00017432  0x0000396a branch  0x0000442b , 0x00000005 
+ 00017433  0x0000396b storet  0x00000002 , 0x00004778 
+ 00017434  0x0000396c call  0x0000441c 
+ 00017435  0x0000396d branch  0x00004435 
+ 00017436  0x0000396f fetch  0x00000006 , 0x000044a0 
+ 00017437  0x00003970 store  0x00000006 , 0x00004738 
+ 00017438  0x00003971 add  0x0000003f , 0x00000100 , 0x0000003f 
+ 00017439  0x00003972 store  0x00000006 , 0x00004755 
+ 00017440  0x00003973 add  0x0000003f , 0x00000100 , 0x0000003f 
+ 00017441  0x00003974 store  0x00000006 , 0x00004772 
+ 00017442  0x00003975 rtn 
+ 00017443  0x00003979 setarg  0x00004778 
+ 00017444  0x0000397a arg  0x00004720 , 0x00000002 
+ 00017445  0x0000397b isub  0x00000002 , 0x00000002 
+ 00017446  0x0000397c fetch  0x00000003 , 0x00004700 
+ 00017447  0x0000397d iadd  0x00000002 , 0x0000003f 
+ 00017448  0x0000397e arg  0x00000002 , 0x00000002 
+ 00017449  0x0000397f arg  0x00004778 , 0x00000011 
+ 00017450  0x00003980 branch  0x00006562 
+ 00017451  0x00003984 setarg  0x0000477f 
+ 00017452  0x00003985 arg  0x00004720 , 0x00000002 
+ 00017453  0x00003986 isub  0x00000002 , 0x00000002 
+ 00017454  0x00003987 fetch  0x00000003 , 0x00004700 
+ 00017455  0x00003988 arg  0x00004720 , 0x00000011 
+ 00017456  0x00003989 call  0x00006562 
+ 00017457  0x0000398a call  0x0000431a 
+ 00017458  0x0000398b fetch  0x00000004 , 0x0000477b 
+ 00017459  0x0000398c call  0x00002c7a 
+ 00017460  0x0000398d branch  0x0000322c 
+ 00017461  0x00003990 setarg  0x0000477f 
+ 00017462  0x00003991 arg  0x00004720 , 0x00000002 
+ 00017463  0x00003992 isub  0x00000002 , 0x00000002 
+ 00017464  0x00003993 arg  0x00004720 , 0x00000011 
+ 00017465  0x00003994 fetch  0x00000003 , 0x00004700 
+ 00017466  0x00003995 branch  0x00006514 
+ 00017467  0x00003998 arg  0x00000001 , 0x00000002 
+ 00017468  0x00003999 arg  0x0000477a , 0x00000011 
+ 00017469  0x0000399a arg  0x0000005a , 0x00000012 
+ 00017470  0x0000399b branch  0x000065d1 
+ 00017471  0x0000399e arg  0x00000001 , 0x00000002 
+ 00017472  0x0000399f arg  0x0000477a , 0x00000011 
+ 00017473  0x000039a0 arg  0x0000005a , 0x00000012 
+ 00017474  0x000039a1 branch  0x000065df 
+ 00017475  0x000039a4 rtnmark1  0x00000026 
+ 00017476  0x000039a5 fetch  0x00000004 , 0x000046d3 
+ 00017477  0x000039a6 rtnbit0  0x00000016 
+ 00017478  0x000039a7 fetch  0x00000001 , 0x00004705 
+ 00017479  0x000039a8 pincrease  0x00000001 
+ 00017480  0x000039a9 and  0x0000003f , 0x00000007 , 0x0000003f 
+ 00017481  0x000039aa store  0x00000001 , 0x00004705 
+ 00017482  0x000039ab rtnne  0x00000007 
+ 00017483  0x000039ac fetch  0x00000002 , 0x00004682 
+ 00017484  0x000039ad bbit1  0x00000000 , 0x0000444f 
+ 00017485  0x000039ae bbit1  0x00000009 , 0x0000444f 
+ 00017486  0x000039af rtn 
+ 00017487  0x000039b5 bpatch  0x000000ee , 0x0000401d 
+ 00017488  0x000039b6 fetch  0x00000001 , 0x00004706 
+ 00017489  0x000039b7 nrtn  0x00000034 
+ 00017490  0x000039b8 fetch  0x00000004 , 0x000046d3 
+ 00017491  0x000039b9 rtnbit0  0x00000008 
+ 00017492  0x000039ba fetch  0x00000001 , 0x000046a5 
+ 00017493  0x000039bb call  0x000063fb 
+ 00017494  0x000039bc store  0x00000001 , 0x000046a6 
+ 00017495  0x000039bd sub  0x0000003f , 0x00000010 , 0x0000003e 
+ 00017496  0x000039be branch  0x0000445b , 0x00000002 
+ 00017497  0x000039bf jam  0x00000000 , 0x00004706 
+ 00017498  0x000039c0 rtn 
+ 00017499  0x000039c3 jam  0x0000001e , 0x00004706 
+ 00017500  0x000039c4 rtn 
+ 00017501  0x000039c6 arg  0x00004706 , 0x00000013 
+ 00017502  0x000039c7 arg  0x00004460 , 0x00000012 
+ 00017503  0x000039c8 branch  0x0000336d 
+ 00017504  0x000039cb fetch  0x00000001 , 0x000046a5 
+ 00017505  0x000039cc call  0x00006414 
+ 00017506  0x000039cd sub  0x0000003f , 0x00000010 , 0x0000003e 
+ 00017507  0x000039ce nrtn  0x00000002 
+ 00017508  0x000039cf fetch  0x00000004 , 0x000046d3 
+ 00017509  0x000039d0 rtnbit0  0x00000008 
+ 00017510  0x000039d1 arg  0x00000008 , 0x00000007 
+ 00017511  0x000039d2 call  0x000043d2 
+ 00017512  0x000039d3 jam  0x00000000 , 0x00004172 
+ 00017513  0x000039d4 jam  0x0000001e , 0x000046c4 
+ 00017514  0x000039d5 call  0x00004482 
+ 00017515  0x000039d6 fetch  0x00000004 , 0x000046d3 
+ 00017516  0x000039d7 bbit1  0x00000015 , 0x00004471 
+ 00017517  0x000039d9 fetch  0x00000001 , 0x00004720 
+ 00017518  0x000039da beq  0x00000001 , 0x00004489 
+ 00017519  0x000039db beq  0x00000002 , 0x00004476 
+ 00017520  0x000039dc rtn 
+ 00017521  0x000039de fetch  0x00000001 , 0x00004720 
+ 00017522  0x000039df beq  0x00000001 , 0x00004489 
+ 00017523  0x000039e0 beq  0x00000002 , 0x0000448c 
+ 00017524  0x000039e1 beq  0x00000003 , 0x0000448f 
+ 00017525  0x000039e2 rtn 
+ 00017526  0x000039e5 fetch  0x00000001 , 0x000046f0 
+ 00017527  0x000039e6 branch  0x0000428f 
+ 00017528  0x000039eb jam  0x00000020 , 0x00004172 
+ 00017529  0x000039ec branch  0x00004482 
+ 00017530  0x000039f1 fetch  0x00000001 , 0x000046f0 
+ 00017531  0x000039f2 rtneq  0x000000ff 
+ 00017532  0x000039f3 store  0x00000001 , 0x00004715 
+ 00017533  0x000039f4 branch  0x00004296 
+ 00017534  0x000039f7 fetch  0x00000001 , 0x000046f1 
+ 00017535  0x000039f8 rtneq  0x000000ff 
+ 00017536  0x000039f9 store  0x00000001 , 0x00004715 
+ 00017537  0x000039fa branch  0x00004296 
+ 00017538  0x000039fd call  0x00004296 
+ 00017539  0x000039fe call  0x0000447a 
+ 00017540  0x000039ff call  0x0000447e 
+ 00017541  0x00003a01 fetch  0x00000001 , 0x000046f2 
+ 00017542  0x00003a02 rtneq  0x000000ff 
+ 00017543  0x00003a03 store  0x00000001 , 0x00004715 
+ 00017544  0x00003a04 branch  0x00004296 
+ 00017545  0x00003a07 fetch  0x00000001 , 0x000046f0 
+ 00017546  0x00003a08 store  0x00000001 , 0x00004715 
+ 00017547  0x00003a09 branch  0x00004298 
+ 00017548  0x00003a0b fetch  0x00000001 , 0x000046f1 
+ 00017549  0x00003a0c store  0x00000001 , 0x00004715 
+ 00017550  0x00003a0d branch  0x00004298 
+ 00017551  0x00003a0f fetch  0x00000001 , 0x000046f2 
+ 00017552  0x00003a10 store  0x00000001 , 0x00004715 
+ 00017553  0x00003a11 branch  0x00004298 
+ 00017554  0x00003a16 bpatch  0x000000ef , 0x0000401d 
+ 00017555  0x00003a17 fetch  0x00000001 , 0x0000471e 
+ 00017556  0x00003a18 increase  0xffffffff , 0x0000003f 
+ 00017557  0x00003a19 store  0x00000001 , 0x0000471e 
+ 00017558  0x00003a1a fetcht  0x00000001 , 0x00004720 
+ 00017559  0x00003a1b increase  0x00000001 , 0x00000002 
+ 00017560  0x00003a1c fetch  0x00000001 , 0x000046d2 
+ 00017561  0x00003a1d isub  0x00000002 , 0x0000003e 
+ 00017562  0x00003a1e ncall  0x000043cc , 0x00000002 
+ 00017563  0x00003a1f storet  0x00000001 , 0x00004720 
+ 00017564  0x00003a20 jam  0x00000000 , 0x000041bd 
+ 00017565  0x00003a21 call  0x0000437a 
+ 00017566  0x00003a22 call  0x000042fb 
+ 00017567  0x00003a23 branch  0x000042a2 
+ 00017568  0x00003a26 call  0x00004482 
+ 00017569  0x00003a27 setarg  0x00000000 
+ 00017570  0x00003a28 store  0x00000008 , 0x000000a1 
+ 00017571  0x00003a29 branch  0x00002b1f 
+ 00017572  0x00003a35 rtn  0x0000002b 
+ 00017573  0x00003a36 hfetch  0x00000001 , 0x00008081 
+ 00017574  0x00003a37 and_into  0x000000f0 , 0x0000003f 
+ 00017575  0x00003a38 hstore  0x00000001 , 0x00008081 
+ 00017576  0x00003a39 call  0x00006948 
+ 00017577  0x00003a3a setarg  0x000044e6 
+ 00017578  0x00003a3b store  0x00000002 , 0x000041eb 
+ 00017579  0x00003a3d setarg  0x000044e9 
+ 00017580  0x00003a3e store  0x00000002 , 0x000041ed 
+ 00017581  0x00003a40 setarg  0x000044ef 
+ 00017582  0x00003a41 store  0x00000002 , 0x000041f3 
+ 00017583  0x00003a43 setarg  0x000044f2 
+ 00017584  0x00003a44 store  0x00000002 , 0x000041f5 
+ 00017585  0x00003a46 setarg  0x000033d0 
+ 00017586  0x00003a47 store  0x00000002 , 0x000041e9 
+ 00017587  0x00003a49 call  0x00002c7a 
+ 00017588  0x00003a4a setarg  0x000045c2 
+ 00017589  0x00003a4b add  0x00000013 , 0x000000d8 , 0x00000005 
+ 00017590  0x00003a4c istore  0x00000002 , 0x00000005 
+ 00017591  0x00003a4e setarg  0x000044ea 
+ 00017592  0x00003a4f add  0x00000013 , 0x000000da , 0x00000005 
+ 00017593  0x00003a50 istore  0x00000002 , 0x00000005 
+ 00017594  0x00003a52 setarg  0x000044e9 
+ 00017595  0x00003a53 add  0x00000013 , 0x000000dc , 0x00000005 
+ 00017596  0x00003a54 istore  0x00000002 , 0x00000005 
+ 00017597  0x00003a56 setarg  0x0000450e 
+ 00017598  0x00003a57 store  0x00000002 , 0x000041fd 
+ 00017599  0x00003a59 setarg  0x000044da 
+ 00017600  0x00003a5a store  0x00000002 , 0x0000475b 
+ 00017601  0x00003a5c setarg  0x000044d6 
+ 00017602  0x00003a5d store  0x00000002 , 0x0000475f 
+ 00017603  0x00003a5f setarg  0x00004560 
+ 00017604  0x00003a60 store  0x00000002 , 0x0000470f 
+ 00017605  0x00003a62 bpatch  0x000000f0 , 0x0000401e 
+ 00017606  0x00003a63 call  0x000044e2 
+ 00017607  0x00003a64 call  0x00007e38 
+ 00017608  0x00003a65 jam  0x00000002 , 0x00004172 
+ 00017609  0x00003a66 fetch  0x00000001 , 0x0000472b 
+ 00017610  0x00003a67 store  0x00000001 , 0x0000469a 
+ 00017611  0x00003a68 beq  0x00000000 , 0x000044d5 
+ 00017612  0x00003a69 fetch  0x00000001 , 0x0000472c 
+ 00017613  0x00003a6a store  0x00000001 , 0x00004686 
+ 00017614  0x00003a6c call  0x000044db 
+ 00017615  0x00003a6d call  0x00007cd3 
+ 00017616  0x00003a6e call  0x00007cdd 
+ 00017617  0x00003a6f jam  0x00000001 , 0x00004757 
+ 00017618  0x00003a70 fetch  0x00000002 , 0x00004682 
+ 00017619  0x00003a71 rtnbit1  0x0000000c 
+ 00017620  0x00003a72 branch  0x0000340a 
+ 00017621  0x00003a77 jam  0x00000002 , 0x00004757 
+ 00017622  0x00003a79 call  0x000044db 
+ 00017623  0x00003a7b arg  0x00000000 , 0x00000011 
+ 00017624  0x00003a7c call  0x00007d1e 
+ 00017625  0x00003a7e branch  0x00002ee4 
+ 00017626  0x00003a81 branch  0x000044db 
+ 00017627  0x00003a84 bpatch  0x000000f1 , 0x0000401e 
+ 00017628  0x00003a85 fetch  0x00000001 , 0x00004729 
+ 00017629  0x00003a86 bne  0x000000ff , 0x000044e0 
+ 00017630  0x00003a88 fetcht  0x00000001 , 0x00004706 
+ 00017631  0x00003a89 branch  0x0000680e 
+ 00017632  0x00003a8b store  0x00000001 , 0x00004706 
+ 00017633  0x00003a8c branch  0x000044de 
+ 00017634  0x00003a90 call  0x00002c9d 
+ 00017635  0x00003a91 fetch  0x00000002 , 0x00004753 
+ 00017636  0x00003a92 store  0x00000002 , 0x00004755 
+ 00017637  0x00003a93 branch  0x00004515 
+ 00017638  0x00003a9b call  0x00006835 
+ 00017639  0x00003a9c call  0x000044e9 
+ 00017640  0x00003a9d branch  0x0000340a 
+ 00017641  0x00003aa0 branch  0x0000696c 
+ 00017642  0x00003aa3 fetch  0x00000001 , 0x00004765 
+ 00017643  0x00003aa4 rtn  0x00000034 
+ 00017644  0x00003aa6 branch  0x00002d83 
+ 00017645  0x00003aa9 rtn 
+ 00017646  0x00003aac branch  0x00006978 
+ 00017647  0x00003aaf call  0x00004544 
+ 00017648  0x00003ab0 call  0x00004503 
+ 00017649  0x00003ab1 branch  0x000044ee 
+ 00017650  0x00003ab4 copy  0x00000013 , 0x0000003f 
+ 00017651  0x00003ab5 beq  0x0000002d , 0x00003431 
+ 00017652  0x00003ab6 beq  0x00000010 , 0x0000341a 
+ 00017653  0x00003ab7 beq  0x00000039 , 0x000044fb 
+ 00017654  0x00003ab8 beq  0x0000003c , 0x000044ff 
+ 00017655  0x00003ab9 beq  0x0000003a , 0x000044f9 
+ 00017656  0x00003aba rtn 
+ 00017657  0x00003abd jam  0x00000001 , 0x00004765 
+ 00017658  0x00003abe rtn 
+ 00017659  0x00003ac1 jam  0x00000001 , 0x00004765 
+ 00017660  0x00003ac2 jam  0x00000001 , 0x00004763 
+ 00017661  0x00003ac3 jam  0x00000001 , 0x00004764 
+ 00017662  0x00003ac4 rtn 
+ 00017663  0x00003ac7 jam  0x00000001 , 0x00004765 
+ 00017664  0x00003ac8 jam  0x00000001 , 0x00004763 
+ 00017665  0x00003ac9 jam  0x00000001 , 0x00004764 
+ 00017666  0x00003aca rtn 
+ 00017667  0x00003acd fetch  0x00000001 , 0x00004763 
+ 00017668  0x00003ace rtneq  0x00000000 
+ 00017669  0x00003acf fetch  0x00000001 , 0x00004762 
+ 00017670  0x00003ad0 rtneq  0x00000001 
+ 00017671  0x00003ad1 jam  0x00000001 , 0x00004762 
+ 00017672  0x00003ad3 arg  0x00000000 , 0x00000011 
+ 00017673  0x00003ad4 branch  0x00007d19 
+ 00017674  0x00003ad6 arg  0x00000000 , 0x00000011 
+ 00017675  0x00003ad7 call  0x00007d19 
+ 00017676  0x00003ad8 call  0x000044db 
+ 00017677  0x00003ad9 branch  0x0000340a 
+ 00017678  0x00003adc call  0x0000337b 
+ 00017679  0x00003add branch  0x00004510 
+ 00017680  0x00003ae0 fetch  0x00000001 , 0x0000472d 
+ 00017681  0x00003ae1 rtn  0x00000034 
+ 00017682  0x00003ae2 arg  0x00004755 , 0x00000013 
+ 00017683  0x00003ae3 arg  0x0000450a , 0x00000012 
+ 00017684  0x00003ae4 branch  0x00003374 
+ 00017685  0x00003ae8 call  0x0000451a 
+ 00017686  0x00003ae9 storet  0x00000002 , 0x0000471a 
+ 00017687  0x00003aea call  0x0000451f 
+ 00017688  0x00003aeb storet  0x00000002 , 0x0000471c 
+ 00017689  0x00003aec rtn 
+ 00017690  0x00003aef fetch  0x00000002 , 0x0000471a 
+ 00017691  0x00003af0 store  0x00000002 , 0x0000471e 
+ 00017692  0x00003af1 call  0x00004540 
+ 00017693  0x00003af2 call  0x00004525 
+ 00017694  0x00003af3 store  0x00000001 , 0x00004724 
+ 00017695  0x00003af5 fetch  0x00000002 , 0x0000471c 
+ 00017696  0x00003af6 store  0x00000002 , 0x0000471e 
+ 00017697  0x00003af7 call  0x00004542 
+ 00017698  0x00003af8 call  0x00004525 
+ 00017699  0x00003af9 store  0x00000001 , 0x00004725 
+ 00017700  0x00003afa rtn 
+ 00017701  0x00003afc fetch  0x00000002 , 0x00004720 
+ 00017702  0x00003afd copy  0x0000003f , 0x00000011 
+ 00017703  0x00003afe fetch  0x00000002 , 0x0000471e 
+ 00017704  0x00003aff call  0x0000452e 
+ 00017705  0x00003b00 fetch  0x00000001 , 0x00004719 
+ 00017706  0x00003b01 nbranch  0x00004537 , 0x00000034 
+ 00017707  0x00003b02 nrtn  0x00000002 
+ 00017708  0x00003b03 fetcht  0x00000002 , 0x0000471e 
+ 00017709  0x00003b04 rtn 
+ 00017710  0x00003b06 isub  0x00000002 , 0x0000003f 
+ 00017711  0x00003b07 branch  0x00004534 , 0x00000002 
+ 00017712  0x00003b08 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00017713  0x00003b09 jam  0x00000001 , 0x00004718 
+ 00017714  0x00003b0a isub  0x00000011 , 0x0000003e 
+ 00017715  0x00003b0b rtn 
+ 00017716  0x00003b0d jam  0x00000000 , 0x00004718 
+ 00017717  0x00003b0e isub  0x00000011 , 0x0000003e 
+ 00017718  0x00003b0f rtn 
+ 00017719  0x00003b11 nbranch  0x0000453e , 0x00000002 
+ 00017720  0x00003b12 fetch  0x00000001 , 0x00004718 
+ 00017721  0x00003b13 nbranch  0x0000453c , 0x00000034 
+ 00017722  0x00003b15 setarg  0x00000001 
+ 00017723  0x00003b16 rtn 
+ 00017724  0x00003b18 setarg  0x00000002 
+ 00017725  0x00003b19 rtn 
+ 00017726  0x00003b1b setarg  0x00000000 
+ 00017727  0x00003b1c rtn 
+ 00017728  0x00003b1e jam  0x00000033 , 0x0000422e 
+ 00017729  0x00003b1f branch  0x000068eb 
+ 00017730  0x00003b21 jam  0x00000034 , 0x0000422e 
+ 00017731  0x00003b22 branch  0x000068eb 
+ 00017732  0x00003b26 fetch  0x00000001 , 0x0000472a 
+ 00017733  0x00003b27 rtnne  0x00000001 
+ 00017734  0x00003b29 bpatch  0x000000f2 , 0x0000401e 
+ 00017735  0x00003b2a jam  0x00000001 , 0x00004719 
+ 00017736  0x00003b2b call  0x0000451a 
+ 00017737  0x00003b2c fetch  0x00000002 , 0x00004724 
+ 00017738  0x00003b2d fetcht  0x00000002 , 0x00004722 
+ 00017739  0x00003b2e isub  0x00000002 , 0x0000003e 
+ 00017740  0x00003b2f rtn  0x00000005 
+ 00017741  0x00003b30 store  0x00000002 , 0x00004722 
+ 00017742  0x00003b31 call  0x00004550 
+ 00017743  0x00003b32 branch  0x00004554 
+ 00017744  0x00003b35 fetch  0x00000001 , 0x00004724 
+ 00017745  0x00003b36 branch  0x0000455a , 0x00000034 
+ 00017746  0x00003b37 increase  0xffffffff , 0x0000003f 
+ 00017747  0x00003b38 branch  0x00004557 
+ 00017748  0x00003b3a fetch  0x00000001 , 0x00004725 
+ 00017749  0x00003b3b branch  0x0000455d , 0x00000034 
+ 00017750  0x00003b3c increase  0x00000001 , 0x0000003f 
+ 00017751  0x00003b3e copy  0x0000003f , 0x00000007 
+ 00017752  0x00003b3f arg  0x00000001 , 0x00000011 
+ 00017753  0x00003b40 branch  0x00004560 
+ 00017754  0x00003b43 arg  0x00000000 , 0x00000007 
+ 00017755  0x00003b44 arg  0x00000000 , 0x00000011 
+ 00017756  0x00003b45 branch  0x00004560 
+ 00017757  0x00003b47 arg  0x00000002 , 0x00000007 
+ 00017758  0x00003b48 arg  0x00000000 , 0x00000011 
+ 00017759  0x00003b49 branch  0x00004560 
+ 00017760  0x00003b4c copy  0x00000011 , 0x0000003f 
+ 00017761  0x00003b4d store  0x00000001 , 0x00004761 
+ 00017762  0x00003b4e fetch  0x00000001 , 0x00004763 
+ 00017763  0x00003b4f beq  0x00000000 , 0x00002ee4 
+ 00017764  0x00003b50 fetch  0x00000002 , 0x00004753 
+ 00017765  0x00003b51 store  0x00000002 , 0x00004755 
+ 00017766  0x00003b52 fetch  0x00000001 , 0x00004761 
+ 00017767  0x00003b53 branch  0x00004580 , 0x00000034 
+ 00017768  0x00003b55 bpatch  0x000000f3 , 0x0000401e 
+ 00017769  0x00003b56 arg  0x00000000 , 0x00000011 
+ 00017770  0x00003b57 call  0x00007d14 
+ 00017771  0x00003b59 copy  0x00000007 , 0x0000003f 
+ 00017772  0x00003b5a beq  0x00000004 , 0x000045a3 
+ 00017773  0x00003b5b beq  0x00000005 , 0x000045a5 
+ 00017774  0x00003b5c beq  0x00000006 , 0x000045a7 
+ 00017775  0x00003b60 call  0x0000458b 
+ 00017776  0x00003b61 beq  0x00000000 , 0x00004574 
+ 00017777  0x00003b62 beq  0x00000002 , 0x0000457a 
+ 00017778  0x00003b63 beq  0x00000003 , 0x00004574 
+ 00017779  0x00003b64 rtn 
+ 00017780  0x00003b67 copy  0x00000007 , 0x0000003f 
+ 00017781  0x00003b68 beq  0x00000000 , 0x0000458f 
+ 00017782  0x00003b69 beq  0x00000001 , 0x00004591 
+ 00017783  0x00003b6a beq  0x00000002 , 0x00004593 
+ 00017784  0x00003b6b beq  0x00000003 , 0x00004595 
+ 00017785  0x00003b6c rtn 
+ 00017786  0x00003b6f copy  0x00000007 , 0x0000003f 
+ 00017787  0x00003b70 beq  0x00000000 , 0x00004597 
+ 00017788  0x00003b71 beq  0x00000001 , 0x0000459a 
+ 00017789  0x00003b72 beq  0x00000002 , 0x0000459d 
+ 00017790  0x00003b73 beq  0x00000003 , 0x000045a0 
+ 00017791  0x00003b74 rtn 
+ 00017792  0x00003b77 bpatch  0x000000f4 , 0x0000401e 
+ 00017793  0x00003b78 arg  0x00000000 , 0x00000011 
+ 00017794  0x00003b79 call  0x00007d19 
+ 00017795  0x00003b7b copy  0x00000007 , 0x0000003f 
+ 00017796  0x00003b7c beq  0x00000004 , 0x000045bc 
+ 00017797  0x00003b7d beq  0x00000005 , 0x000045bc 
+ 00017798  0x00003b81 call  0x0000458b 
+ 00017799  0x00003b82 beq  0x00000000 , 0x000045a9 
+ 00017800  0x00003b83 beq  0x00000002 , 0x000045af 
+ 00017801  0x00003b84 beq  0x00000003 , 0x000045a9 
+ 00017802  0x00003b85 rtn 
+ 00017803  0x00003b88 fetch  0x00000001 , 0x00004728 
+ 00017804  0x00003b89 fetcht  0x00000001 , 0x00004727 
+ 00017805  0x00003b8a ior  0x00000002 , 0x0000003f 
+ 00017806  0x00003b8b rtn 
+ 00017807  0x00003b8f jam  0x00000001 , 0x00004734 
+ 00017808  0x00003b90 branch  0x000045be 
+ 00017809  0x00003b92 jam  0x00000002 , 0x00004734 
+ 00017810  0x00003b93 branch  0x000045be 
+ 00017811  0x00003b95 jam  0x00000001 , 0x00004736 
+ 00017812  0x00003b96 branch  0x000045be 
+ 00017813  0x00003b98 jam  0x00000002 , 0x00004736 
+ 00017814  0x00003b99 branch  0x000045be 
+ 00017815  0x00003b9d jam  0x00000001 , 0x00004734 
+ 00017816  0x00003b9e jam  0x00000001 , 0x00004736 
+ 00017817  0x00003b9f branch  0x000045be 
+ 00017818  0x00003ba1 jam  0x00000002 , 0x00004734 
+ 00017819  0x00003ba2 jam  0x00000002 , 0x00004736 
+ 00017820  0x00003ba3 branch  0x000045be 
+ 00017821  0x00003ba5 jam  0x00000002 , 0x00004734 
+ 00017822  0x00003ba6 jam  0x00000001 , 0x00004736 
+ 00017823  0x00003ba7 branch  0x000045be 
+ 00017824  0x00003ba9 jam  0x00000001 , 0x00004734 
+ 00017825  0x00003baa jam  0x00000002 , 0x00004736 
+ 00017826  0x00003bab branch  0x000045be 
+ 00017827  0x00003baf jam  0x00000001 , 0x00004738 
+ 00017828  0x00003bb0 branch  0x000045be 
+ 00017829  0x00003bb2 jam  0x00000002 , 0x00004738 
+ 00017830  0x00003bb3 branch  0x000045be 
+ 00017831  0x00003bb6 jam  0x00000001 , 0x00004741 
+ 00017832  0x00003bb7 branch  0x000045c0 
+ 00017833  0x00003bba copy  0x00000007 , 0x0000003f 
+ 00017834  0x00003bbb beq  0x00000000 , 0x000045b5 
+ 00017835  0x00003bbc beq  0x00000001 , 0x000045b5 
+ 00017836  0x00003bbd beq  0x00000002 , 0x000045b7 
+ 00017837  0x00003bbe beq  0x00000003 , 0x000045b7 
+ 00017838  0x00003bbf rtn 
+ 00017839  0x00003bc2 copy  0x00000007 , 0x0000003f 
+ 00017840  0x00003bc3 beq  0x00000000 , 0x000045b9 
+ 00017841  0x00003bc4 beq  0x00000001 , 0x000045b9 
+ 00017842  0x00003bc5 beq  0x00000002 , 0x000045b9 
+ 00017843  0x00003bc6 beq  0x00000003 , 0x000045b9 
+ 00017844  0x00003bc7 rtn 
+ 00017845  0x00003bcb jam  0x00000000 , 0x00004734 
+ 00017846  0x00003bcc branch  0x000045be 
+ 00017847  0x00003bcf jam  0x00000000 , 0x00004736 
+ 00017848  0x00003bd0 branch  0x000045be 
+ 00017849  0x00003bd6 jam  0x00000000 , 0x00004734 
+ 00017850  0x00003bd7 jam  0x00000000 , 0x00004736 
+ 00017851  0x00003bd8 branch  0x000045be 
+ 00017852  0x00003bdc jam  0x00000000 , 0x00004738 
+ 00017853  0x00003bdd branch  0x000045be 
+ 00017854  0x00003be0 arg  0x0000472e , 0x00000011 
+ 00017855  0x00003be1 branch  0x00007e3d 
+ 00017856  0x00003be3 arg  0x0000473b , 0x00000011 
+ 00017857  0x00003be4 branch  0x00007e3d 
+ 00017858  0x00003be7 fetch  0x00000001 , 0x00004764 
+ 00017859  0x00003be8 beq  0x00000001 , 0x000045cc 
+ 00017860  0x00003be9 arg  0x00004744 , 0x00000011 
+ 00017861  0x00003bea call  0x00007e54 
+ 00017862  0x00003beb nbranch  0x000045d1 , 0x00000028 
+ 00017863  0x00003bed arg  0x00004744 , 0x00000006 
+ 00017864  0x00003bee ifetch  0x00000001 , 0x00000006 
+ 00017865  0x00003bef copy  0x0000003f , 0x00000011 
+ 00017866  0x00003bf0 arg  0x00004745 , 0x00000012 
+ 00017867  0x00003bf3 rtn 
+ 00017868  0x00003bf6 jam  0x00000000 , 0x00004764 
+ 00017869  0x00003bf7 enable  0x00000028 
+ 00017870  0x00003bf8 arg  0x00000001 , 0x00000011 
+ 00017871  0x00003bf9 arg  0x00004766 , 0x00000012 
+ 00017872  0x00003bfa rtn 
+ 00017873  0x00003bfd fetch  0x00000001 , 0x00004747 
+ 00017874  0x00003bfe beq  0x00000004 , 0x000045d5 
+ 00017875  0x00003bff beq  0x00000005 , 0x000045d5 
+ 00017876  0x00003c00 rtn 
+ 00017877  0x00003c02 fetch  0x00000001 , 0x0000474a 
+ 00017878  0x00003c03 nbranch  0x000045dc , 0x00000034 
+ 00017879  0x00003c04 fetch  0x00000001 , 0x0000474c 
+ 00017880  0x00003c05 nbranch  0x000045dc , 0x00000034 
+ 00017881  0x00003c06 fetch  0x00000001 , 0x0000474e 
+ 00017882  0x00003c07 nbranch  0x000045dc , 0x00000034 
+ 00017883  0x00003c08 rtn 
+ 00017884  0x00003c0a enable  0x00000028 
+ 00017885  0x00003c0b branch  0x000045c7 
+ 00017886  0x00003c14 rtn  0x0000002b 
+ 00017887  0x00003c15 hfetch  0x00000001 , 0x00008081 
+ 00017888  0x00003c16 and_into  0x000000fc , 0x0000003f 
+ 00017889  0x00003c17 hstore  0x00000001 , 0x00008081 
+ 00017890  0x00003c18 setarg  0x000046b4 
+ 00017891  0x00003c19 store  0x00000002 , 0x000041eb 
+ 00017892  0x00003c1b setarg  0x000046b3 
+ 00017893  0x00003c1c store  0x00000002 , 0x000041ed 
+ 00017894  0x00003c1e setarg  0x0000340a 
+ 00017895  0x00003c1f store  0x00000002 , 0x000041f7 
+ 00017896  0x00003c21 setarg  0x000046b1 
+ 00017897  0x00003c22 store  0x00000002 , 0x000041f3 
+ 00017898  0x00003c24 setarg  0x00004612 
+ 00017899  0x00003c25 store  0x00000002 , 0x000041f5 
+ 00017900  0x00003c27 setarg  0x0000460c 
+ 00017901  0x00003c28 store  0x00000002 , 0x000041e9 
+ 00017902  0x00003c2a setarg  0x0000476a 
+ 00017903  0x00003c2b store  0x00000002 , 0x000041f9 
+ 00017904  0x00003c2d setarg  0x00004686 
+ 00017905  0x00003c2e store  0x00000002 , 0x000041fd 
+ 00017906  0x00003c30 setarg  0x00004729 
+ 00017907  0x00003c31 store  0x00000002 , 0x000046e7 
+ 00017908  0x00003c33 setarg  0x00004806 
+ 00017909  0x00003c34 store  0x00000002 , 0x000046e2 
+ 00017910  0x00003c35 setarg  0x00004807 
+ 00017911  0x00003c36 store  0x00000002 , 0x000046e4 
+ 00017912  0x00003c38 call  0x000057a3 
+ 00017913  0x00003c39 call  0x000047da 
+ 00017914  0x00003c3a call  0x00004788 
+ 00017915  0x00003c3b call  0x0000476d 
+ 00017916  0x00003c3c call  0x00006948 
+ 00017917  0x00003c3d call  0x0000477a 
+ 00017918  0x00003c3e call  0x00007e38 
+ 00017919  0x00003c3f call  0x00007d08 
+ 00017920  0x00003c40 call  0x00004793 
+ 00017921  0x00003c41 call  0x000047c7 
+ 00017922  0x00003c43 bpatch  0x000000f5 , 0x0000401e 
+ 00017923  0x00003c44 call  0x0000464f 
+ 00017924  0x00003c45 fetch  0x00000001 , 0x000046dd 
+ 00017925  0x00003c46 beq  0x00000000 , 0x00004609 
+ 00017926  0x00003c47 fetch  0x00000001 , 0x000046de 
+ 00017927  0x00003c48 store  0x00000001 , 0x00004686 
+ 00017928  0x00003c49 branch  0x0000480e 
+ 00017929  0x00003c4d jam  0x000000ff , 0x00004686 
+ 00017930  0x00003c4e jam  0x00000001 , 0x000046df 
+ 00017931  0x00003c4f branch  0x000046d9 
+ 00017932  0x00003c54 fetch  0x00000001 , 0x000046df 
+ 00017933  0x00003c55 beq  0x00000002 , 0x000033d0 
+ 00017934  0x00003c56 call  0x0000527e 
+ 00017935  0x00003c57 fetch  0x00000001 , 0x00004256 
+ 00017936  0x00003c58 nbranch  0x000033d0 , 0x00000034 
+ 00017937  0x00003c59 branch  0x000033d2 
+ 00017938  0x00003c5e copy  0x00000013 , 0x0000003f 
+ 00017939  0x00003c60 beq  0x00000001 , 0x00004626 
+ 00017940  0x00003c61 beq  0x00000002 , 0x00004629 
+ 00017941  0x00003c62 beq  0x00000004 , 0x00004631 
+ 00017942  0x00003c63 beq  0x00000005 , 0x00004633 
+ 00017943  0x00003c64 beq  0x00000006 , 0x00004635 
+ 00017944  0x00003c65 beq  0x00000007 , 0x00004638 
+ 00017945  0x00003c66 beq  0x00000012 , 0x0000463c 
+ 00017946  0x00003c67 beq  0x00000013 , 0x00004644 
+ 00017947  0x00003c68 beq  0x00000027 , 0x00004645 
+ 00017948  0x00003c69 beq  0x0000002e , 0x00004648 
+ 00017949  0x00003c6a beq  0x0000003d , 0x00004649 
+ 00017950  0x00003c6c beq  0x00000014 , 0x00004658 
+ 00017951  0x00003c6d beq  0x00000015 , 0x0000465c 
+ 00017952  0x00003c6e beq  0x0000003f , 0x0000465f 
+ 00017953  0x00003c6f beq  0x00000040 , 0x00004665 
+ 00017954  0x00003c71 beq  0x00000010 , 0x0000466b 
+ 00017955  0x00003c72 beq  0x0000002c , 0x0000466c 
+ 00017956  0x00003c73 beq  0x0000002d , 0x00004677 
+ 00017957  0x00003c74 rtn 
+ 00017958  0x00003c7a jam  0x00000000 , 0x000046ad 
+ 00017959  0x00003c7b jam  0x00000000 , 0x000046ac 
+ 00017960  0x00003c7c rtn 
+ 00017961  0x00003c80 call  0x0000462b 
+ 00017962  0x00003c81 branch  0x00004631 
+ 00017963  0x00003c84 jam  0x00000000 , 0x000041e2 
+ 00017964  0x00003c85 jam  0x00000000 , 0x00004680 
+ 00017965  0x00003c86 jam  0x00000000 , 0x00004205 
+ 00017966  0x00003c87 jam  0x00000000 , 0x000046ac 
+ 00017967  0x00003c88 jam  0x00000000 , 0x000046ad 
+ 00017968  0x00003c89 branch  0x00007e38 
+ 00017969  0x00003c8d call  0x000033a9 
+ 00017970  0x00003c8e branch  0x000046c2 
+ 00017971  0x00003c92 call  0x000046b6 
+ 00017972  0x00003c93 branch  0x00003408 
+ 00017973  0x00003c97 setarg  0x00000002 
+ 00017974  0x00003c98 store  0x00000001 , 0x00004680 
+ 00017975  0x00003c99 rtn 
+ 00017976  0x00003c9d jam  0x00000000 , 0x000046ac 
+ 00017977  0x00003c9e setarg  0x00000001 
+ 00017978  0x00003c9f store  0x00000001 , 0x000046ad 
+ 00017979  0x00003ca0 rtn 
+ 00017980  0x00003ca4 fetch  0x00000001 , 0x000041e2 
+ 00017981  0x00003ca5 rtneq  0x00000001 
+ 00017982  0x00003ca6 jam  0x00000001 , 0x000041e2 
+ 00017983  0x00003ca7 call  0x00003416 
+ 00017984  0x00003ca8 call  0x00003414 
+ 00017985  0x00003ca9 call  0x000046b6 
+ 00017986  0x00003caa call  0x00003408 
+ 00017987  0x00003cab branch  0x0000340e 
+ 00017988  0x00003caf branch  0x00004631 
+ 00017989  0x00003cb3 setarg  0x00000005 
+ 00017990  0x00003cb4 store  0x00000001 , 0x000046ac 
+ 00017991  0x00003cb5 rtn 
+ 00017992  0x00003cb9 branch  0x000033cd 
+ 00017993  0x00003cbe arg  0x00000000 , 0x00000012 
+ 00017994  0x00003cbf fetch  0x00000001 , 0x00004217 
+ 00017995  0x00003cc0 mul32  0x0000003f , 0x00000022 , 0x00000002 
+ 00017996  0x00003cc1 fetch  0x00000002 , 0x00004215 
+ 00017997  0x00003cc2 copy  0x0000003f , 0x00000011 
+ 00017998  0x00003cc3 branch  0x00006606 
+ 00017999  0x00003cc6 arg  0x00000000 , 0x00000012 
+ 00018000  0x00003cc7 fetch  0x00000001 , 0x0000469a 
+ 00018001  0x00003cc8 rtnbit0  0x00000001 
+ 00018002  0x00003cc9 fetch  0x00000001 , 0x00004217 
+ 00018003  0x00003cca rtn  0x00000034 
+ 00018004  0x00003ccb mul32  0x0000003f , 0x00000022 , 0x00000002 
+ 00018005  0x00003ccc fetch  0x00000002 , 0x00004215 
+ 00018006  0x00003ccd copy  0x0000003f , 0x00000011 
+ 00018007  0x00003cce branch  0x000065df 
+ 00018008  0x00003cd3 call  0x000046b6 
+ 00018009  0x00003cd4 setarg  0x00000000 
+ 00018010  0x00003cd5 store  0x00000002 , 0x000046b7 
+ 00018011  0x00003cd6 branch  0x00003408 
+ 00018012  0x00003cda call  0x00007e38 
+ 00018013  0x00003cdb jam  0x00000000 , 0x000046b0 
+ 00018014  0x00003cdc branch  0x000046d9 
+ 00018015  0x00003ce0 call  0x00007e38 
+ 00018016  0x00003ce1 jam  0x00000001 , 0x000046b0 
+ 00018017  0x00003ce2 fetch  0x00000008 , 0x000046c1 
+ 00018018  0x00003ce3 store  0x00000008 , 0x00004496 
+ 00018019  0x00003ce4 call  0x00003416 
+ 00018020  0x00003ce5 branch  0x00005abf 
+ 00018021  0x00003ce9 fetch  0x00000002 , 0x00004509 
+ 00018022  0x00003cea rtneq  0x00000000 
+ 00018023  0x00003ceb fetch  0x00000008 , 0x000046c9 
+ 00018024  0x00003cec rtn  0x00000034 
+ 00018025  0x00003ced store  0x00000008 , 0x00004496 
+ 00018026  0x00003cee branch  0x00005abf 
+ 00018027  0x00003cf3 branch  0x0000481f 
+ 00018028  0x00003cf6 fetch  0x00000001 , 0x000046dd 
+ 00018029  0x00003cf7 rtneq  0x00000000 
+ 00018030  0x00003cf8 fetch  0x00000001 , 0x000046df 
+ 00018031  0x00003cf9 rtnne  0x00000001 
+ 00018032  0x00003cfa call  0x00004672 
+ 00018033  0x00003cfb branch  0x00003406 
+ 00018034  0x00003cfe jam  0x00000001 , 0x000048df 
+ 00018035  0x00003cff arg  0x0000000b , 0x00000039 
+ 00018036  0x00003d00 arg  0x000048e0 , 0x00000005 
+ 00018037  0x00003d01 arg  0x000048c9 , 0x00000006 
+ 00018038  0x00003d02 branch  0x00007f01 
+ 00018039  0x00003d05 fetch  0x00000001 , 0x000046dd 
+ 00018040  0x00003d06 rtneq  0x00000000 
+ 00018041  0x00003d07 fetch  0x00000001 , 0x000046df 
+ 00018042  0x00003d08 beq  0x00000001 , 0x0000467c 
+ 00018043  0x00003d09 branch  0x0000481b 
+ 00018044  0x00003d0c fetch  0x00000001 , 0x000048df 
+ 00018045  0x00003d0d rtnne  0x00000001 
+ 00018046  0x00003d0e jam  0x00000000 , 0x000048df 
+ 00018047  0x00003d0f fetch  0x00000002 , 0x00004682 
+ 00018048  0x00003d10 bbit1  0x00000000 , 0x00003408 
+ 00018049  0x00003d11 bbit1  0x00000009 , 0x00003408 
+ 00018050  0x00003d12 arg  0x0000000b , 0x00000039 
+ 00018051  0x00003d13 arg  0x000048e0 , 0x00000006 
+ 00018052  0x00003d14 arg  0x000048c9 , 0x00000005 
+ 00018053  0x00003d15 branch  0x00007f01 
+ 00018054  0x00003d1c call  0x0000468c 
+ 00018055  0x00003d1f call  0x00004693 
+ 00018056  0x00003d22 call  0x0000469e 
+ 00018057  0x00003d23 call  0x000046a6 
+ 00018058  0x00003d24 call  0x000046a9 
+ 00018059  0x00003d27 branch  0x000046ac 
+ 00018060  0x00003d2c arg  0x000046db , 0x00000013 
+ 00018061  0x00003d2d arg  0x0000468f , 0x00000012 
+ 00018062  0x00003d2e branch  0x00003374 
+ 00018063  0x00003d30 jam  0x00000002 , 0x000046df 
+ 00018064  0x00003d31 call  0x00003408 
+ 00018065  0x00003d32 call  0x000046f4 
+ 00018066  0x00003d33 branch  0x0000480b 
+ 00018067  0x00003d37 arg  0x000048ec , 0x00000013 
+ 00018068  0x00003d38 arg  0x00004696 , 0x00000012 
+ 00018069  0x00003d39 branch  0x0000336d 
+ 00018070  0x00003d3c fetch  0x00000002 , 0x00004682 
+ 00018071  0x00003d3d bbit1  0x00000009 , 0x0000480b 
+ 00018072  0x00003d3e bbit1  0x00000000 , 0x0000480b 
+ 00018073  0x00003d3f fetch  0x00000001 , 0x000048c9 
+ 00018074  0x00003d40 beq  0x00000001 , 0x0000480b 
+ 00018075  0x00003d41 beq  0x00000004 , 0x0000480b 
+ 00018076  0x00003d42 beq  0x00000005 , 0x0000480b 
+ 00018077  0x00003d43 branch  0x0000340a 
+ 00018078  0x00003d48 arg  0x000046ac , 0x00000013 
+ 00018079  0x00003d49 arg  0x000046a1 , 0x00000012 
+ 00018080  0x00003d4a branch  0x0000336d 
+ 00018081  0x00003d4d fetch  0x00000001 , 0x0000027f 
+ 00018082  0x00003d4e set1  0x00000000 , 0x0000003f 
+ 00018083  0x00003d4f set1  0x00000007 , 0x0000003f 
+ 00018084  0x00003d50 store  0x00000001 , 0x0000027f 
+ 00018085  0x00003d51 rtn 
+ 00018086  0x00003d54 arg  0x00004680 , 0x00000013 
+ 00018087  0x00003d55 arg  0x0000463c , 0x00000012 
+ 00018088  0x00003d56 branch  0x0000336d 
+ 00018089  0x00003d59 arg  0x000046ad , 0x00000013 
+ 00018090  0x00003d5a arg  0x000033e9 , 0x00000012 
+ 00018091  0x00003d5b branch  0x0000336d 
+ 00018092  0x00003d61 fetch  0x00000001 , 0x000046df 
+ 00018093  0x00003d62 rtnne  0x00000001 
+ 00018094  0x00003d63 arg  0x000046b7 , 0x00000013 
+ 00018095  0x00003d64 arg  0x000046c2 , 0x00000012 
+ 00018096  0x00003d65 branch  0x00003374 
+ 00018097  0x00003d69 call  0x0000473a 
+ 00018098  0x00003d6a branch  0x00006978 
+ 00018099  0x00003d6e branch  0x0000696c 
+ 00018100  0x00003d71 call  0x00006835 
+ 00018101  0x00003d72 branch  0x000046b3 
+ 00018102  0x00003d79 fetch  0x00000001 , 0x0000469a 
+ 00018103  0x00003d7a bbit1  0x00000001 , 0x000046be 
+ 00018104  0x00003d7b bbit1  0x00000000 , 0x000046ba 
+ 00018105  0x00003d7c rtn 
+ 00018106  0x00003d7f fetch  0x00000002 , 0x000046d7 
+ 00018107  0x00003d80 store  0x00000002 , 0x000046d9 
+ 00018108  0x00003d81 store  0x00000002 , 0x000046db 
+ 00018109  0x00003d82 branch  0x000033f8 
+ 00018110  0x00003d85 fetch  0x00000002 , 0x000046d3 
+ 00018111  0x00003d86 store  0x00000002 , 0x000046d9 
+ 00018112  0x00003d87 store  0x00000002 , 0x000046db 
+ 00018113  0x00003d88 branch  0x000033f0 
+ 00018114  0x00003d8b fetch  0x00000001 , 0x000046df 
+ 00018115  0x00003d8c rtnne  0x00000001 
+ 00018116  0x00003d8d fetch  0x00000001 , 0x0000469a 
+ 00018117  0x00003d8e bbit1  0x00000001 , 0x000046c8 
+ 00018118  0x00003d8f bbit1  0x00000000 , 0x000046cc 
+ 00018119  0x00003d90 rtn 
+ 00018120  0x00003d93 fetch  0x00000002 , 0x000046d1 ,
+ 00018121  0x00003d94 store  0x00000002 , 0x000046d9 
+ 00018122  0x00003d95 store  0x00000002 , 0x000046db 
+ 00018123  0x00003d96 branch  0x000033eb 
+ 00018124  0x00003d99 fetch  0x00000002 , 0x00004682 
+ 00018125  0x00003d9a rtnbit1  0x00000009 
+ 00018126  0x00003d9b fetch  0x00000002 , 0x000046d5 
+ 00018127  0x00003d9c store  0x00000002 , 0x000046d9 
+ 00018128  0x00003d9d store  0x00000002 , 0x000046db 
+ 00018129  0x00003d9e fetch  0x00000002 , 0x000046b3 
+ 00018130  0x00003d9f call  0x000046f0 
+ 00018131  0x00003da0 call  0x00003404 
+ 00018132  0x00003da1 fetch  0x00000004 , 0x000046bd 
+ 00018133  0x00003da2 store  0x00000004 , 0x000048cc 
+ 00018134  0x00003da3 fetch  0x00000002 , 0x00004682 
+ 00018135  0x00003da4 rtnbit1  0x0000000b 
+ 00018136  0x00003da5 branch  0x000033fa 
+ 00018137  0x00003da9 fetch  0x00000001 , 0x000046df 
+ 00018138  0x00003daa rtnne  0x00000001 
+ 00018139  0x00003dab fetch  0x00000001 , 0x0000469a 
+ 00018140  0x00003dac bbit1  0x00000001 , 0x000046df 
+ 00018141  0x00003dad bbit1  0x00000000 , 0x000046e4 
+ 00018142  0x00003dae rtn 
+ 00018143  0x00003db1 call  0x000046f8 
+ 00018144  0x00003db2 branch  0x000046c2 , 0x00000034 
+ 00018145  0x00003db3 call  0x00003406 
+ 00018146  0x00003db4 call  0x000033f0 
+ 00018147  0x00003db5 branch  0x000033e1 
+ 00018148  0x00003db8 fetch  0x00000002 , 0x000046b7 
+ 00018149  0x00003db9 fetcht  0x00000002 , 0x000046b5 
+ 00018150  0x00003dba storet  0x00000002 , 0x000046b7 
+ 00018151  0x00003dbb nrtn  0x00000034 
+ 00018152  0x00003dbc fetch  0x00000002 , 0x000046b1 
+ 00018153  0x00003dbd call  0x000046f0 
+ 00018154  0x00003dbe call  0x00003404 
+ 00018155  0x00003dbf fetch  0x00000004 , 0x000046b9 
+ 00018156  0x00003dc0 store  0x00000004 , 0x000048cc 
+ 00018157  0x00003dc1 fetch  0x00000002 , 0x00004682 
+ 00018158  0x00003dc2 rtnbit1  0x0000000b 
+ 00018159  0x00003dc3 branch  0x000033fa 
+ 00018160  0x00003dc7 store  0x00000002 , 0x00004154 
+ 00018161  0x00003dc8 increase  0xfffffffc , 0x0000003f 
+ 00018162  0x00003dc9 store  0x00000002 , 0x00004482 
+ 00018163  0x00003dca rtn 
+ 00018164  0x00003dce fetch  0x00000002 , 0x00004682 
+ 00018165  0x00003dcf bbit1  0x00000009 , 0x00003402 
+ 00018166  0x00003dd0 bbit1  0x00000000 , 0x000033e9 
+ 00018167  0x00003dd1 branch  0x000046b6 
+ 00018168  0x00003dd6 fetch  0x00000001 , 0x00004217 
+ 00018169  0x00003dd7 copy  0x0000003f , 0x00000039 
+ 00018170  0x00003dd8 fetch  0x00000002 , 0x00004215 
+ 00018171  0x00003dd9 copy  0x0000003f , 0x00000011 
+ 00018172  0x00003ddb ifetch  0x00000002 , 0x00000011 
+ 00018173  0x00003ddc beq  0x00000000 , 0x00004701 
+ 00018174  0x00003ddd increase  0x00000022 , 0x00000011 
+ 00018175  0x00003dde loop  0x000046fc 
+ 00018176  0x00003ddf branch  0x00007ff1 
+ 00018177  0x00003de2 ifetch  0x00000006 , 0x00000006 
+ 00018178  0x00003de3 store  0x00000006 , 0x000041d0 
+ 00018179  0x00003de4 increase  0x0000000a , 0x00000006 
+ 00018180  0x00003de5 arg  0x000041be , 0x00000005 
+ 00018181  0x00003de6 call  0x00007ebf 
+ 00018182  0x00003de7 call  0x000067d7 
+ 00018183  0x00003de8 branch  0x00007fef 
+ 00018184  0x00003def call  0x00007fe9 
+ 00018185  0x00003df0 fetch  0x00000002 , 0x00004682 
+ 00018186  0x00003df1 bbit1  0x00000000 , 0x0000470d 
+ 00018187  0x00003df2 bbit1  0x00000009 , 0x00004710 
+ 00018188  0x00003df3 rtn 
+ 00018189  0x00003df6 fetch  0x00000001 , 0x00004253 
+ 00018190  0x00003df7 rtnne  0x0000003f 
+ 00018191  0x00003df8 branch  0x00007fe7 
+ 00018192  0x00003dfb fetch  0x00000001 , 0x000046b0 
+ 00018193  0x00003dfc rtn  0x00000034 
+ 00018194  0x00003dfd branch  0x00007fe7 
+ 00018195  0x00003e03 call  0x00007fe9 
+ 00018196  0x00003e04 fetch  0x00000002 , 0x00004682 
+ 00018197  0x00003e05 rtnbit1  0x00000000 
+ 00018198  0x00003e06 rtnbit1  0x00000009 
+ 00018199  0x00003e07 branch  0x00007fe7 
+ 00018200  0x00003e0c fetch  0x00000001 , 0x0000469a 
+ 00018201  0x00003e0d bbit1  0x00000001 , 0x0000471c 
+ 00018202  0x00003e0e bbit1  0x00000000 , 0x0000471f 
+ 00018203  0x00003e0f rtn 
+ 00018204  0x00003e12 fetch  0x00000001 , 0x00004093 
+ 00018205  0x00003e13 rtnne  0x00000003 
+ 00018206  0x00003e14 branch  0x000046d9 
+ 00018207  0x00003e17 branch  0x000046d9 
+ 00018208  0x00003e1b disable  0x0000002c 
+ 00018209  0x00003e1c fetch  0x00000002 , 0x000046d9 
+ 00018210  0x00003e1d store  0x00000002 , 0x000046db 
+ 00018211  0x00003e1f call  0x00004713 
+ 00018212  0x00003e20 branch  0x00004718 , 0x00000028 
+ 00018213  0x00003e22 call  0x00004708 
+ 00018214  0x00003e23 nrtn  0x00000028 
+ 00018215  0x00003e24 enable  0x0000002c 
+ 00018216  0x00003e25 rtn 
+ 00018217  0x00003e2a call  0x00004720 
+ 00018218  0x00003e2b nrtn  0x0000002c 
+ 00018219  0x00003e2c deposit  0x00000011 
+ 00018220  0x00003e2d branch  0x00004730 , 0x00000034 
+ 00018221  0x00003e2f call  0x00003406 
+ 00018222  0x00003e30 arg  0x000046f1 , 0x00000013 
+ 00018223  0x00003e31 branch  0x00004732 
+ 00018224  0x00003e34 call  0x00003408 
+ 00018225  0x00003e35 arg  0x00004719 , 0x00000013 
+ 00018226  0x00003e38 arg  0x00000005 , 0x0000003f 
+ 00018227  0x00003e39 imul32  0x00000007 , 0x0000003f 
+ 00018228  0x00003e3a iadd  0x00000013 , 0x00000013 
+ 00018229  0x00003e3e ifetch  0x00000001 , 0x00000013 
+ 00018230  0x00003e3f rtn  0x00000034 
+ 00018231  0x00003e40 call  0x00004762 
+ 00018232  0x00003e41 increase  0x00000001 , 0x00000013 
+ 00018233  0x00003e42 branch  0x00004735 
+ 00018234  0x00003e46 fetch  0x00000002 , 0x00004682 
+ 00018235  0x00003e47 bbit1  0x00000009 , 0x0000473e 
+ 00018236  0x00003e48 bbit1  0x00000000 , 0x0000474e 
+ 00018237  0x00003e49 rtn 
+ 00018238  0x00003e4c call  0x00005892 
+ 00018239  0x00003e4d nrtn  0x00000034 
+ 00018240  0x00003e4e call  0x00004765 
+ 00018241  0x00003e4f nrtn  0x00000028 
+ 00018242  0x00003e50 pincrease  0xffffffff 
+ 00018243  0x00003e51 mul32  0x0000003f , 0x00000005 , 0x0000003f 
+ 00018244  0x00003e52 arg  0x00004741 , 0x00000002 
+ 00018245  0x00003e53 iadd  0x00000002 , 0x00000006 
+ 00018246  0x00003e55 ifetch  0x00000001 , 0x00000006 
+ 00018247  0x00003e56 copy  0x0000003f , 0x00000011 
+ 00018248  0x00003e57 ifetcht  0x00000002 , 0x00000006 
+ 00018249  0x00003e58 call  0x00007ea5 
+ 00018250  0x00003e59 call  0x00005a64 
+ 00018251  0x00003e5a copy  0x00000011 , 0x00000039 
+ 00018252  0x00003e5b call  0x00007e9f 
+ 00018253  0x00003e5c branch  0x00007f01 
+ 00018254  0x00003e60 call  0x00005271 
+ 00018255  0x00003e61 nrtn  0x00000034 
+ 00018256  0x00003e62 call  0x00004765 
+ 00018257  0x00003e63 nrtn  0x00000028 
+ 00018258  0x00003e64 pincrease  0xffffffff 
+ 00018259  0x00003e65 mul32  0x0000003f , 0x00000005 , 0x0000003f 
+ 00018260  0x00003e66 arg  0x000047a0 , 0x00000002 
+ 00018261  0x00003e67 iadd  0x00000002 , 0x00000006 
+ 00018262  0x00003e68 ifetch  0x00000005 , 0x00000006 
+ 00018263  0x00003e69 store  0x00000005 , 0x0000479b 
+ 00018264  0x00003e6b fetch  0x00000001 , 0x0000479b 
+ 00018265  0x00003e6c copy  0x0000003f , 0x00000011 
+ 00018266  0x00003e6d call  0x00004d63 
+ 00018267  0x00003e6e fetch  0x00000002 , 0x0000424e 
+ 00018268  0x00003e6f istore  0x00000002 , 0x00000005 
+ 00018269  0x00003e70 setarg  0x000000a1 
+ 00018270  0x00003e71 istore  0x00000001 , 0x00000005 
+ 00018271  0x00003e72 fetch  0x00000004 , 0x0000479c 
+ 00018272  0x00003e73 istore  0x00000009 , 0x00000005 
+ 00018273  0x00003e74 rtn 
+ 00018274  0x00003e79 store  0x00000001 , 0x00000a9a 
+ 00018275  0x00003e7a arg  0x00000a9a , 0x00000011 
+ 00018276  0x00003e7b branch  0x00007e3d 
+ 00018277  0x00003e7e arg  0x00000a9a , 0x00000011 
+ 00018278  0x00003e7f call  0x00007e54 
+ 00018279  0x00003e80 nrtn  0x00000028 
+ 00018280  0x00003e81 fetch  0x00000001 , 0x00000a9a 
+ 00018281  0x00003e82 rtn 
+ 00018282  0x00003e86 fetch  0x00000002 , 0x00000478 
+ 00018283  0x00003e87 beq  0x00000018 , 0x0000465f 
+ 00018284  0x00003e88 rtn 
+ 00018285  0x00003e8b setarg  0x00000002 
+ 00018286  0x00003e8c store  0x00000001 , 0x000048eb 
+ 00018287  0x00003e8e setarg  0x00200008 
+ 00018288  0x00003e8f store  0x00000004 , 0x000046c1 
+ 00018289  0x00003e90 setarg  0x012c0005 
+ 00018290  0x00003e91 istore  0x00000004 , 0x00000005 
+ 00018291  0x00003e94 jam  0x00000017 , 0x000044a6 
+ 00018292  0x00003e97 setarg  0x0000001b 
+ 00018293  0x00003e98 store  0x00000002 , 0x000044fa 
+ 00018294  0x00003e99 call  0x00005810 
+ 00018295  0x00003e9a call  0x0000582c 
+ 00018296  0x00003e9b call  0x00005839 
+ 00018297  0x00003e9c branch  0x00005818 
+ 00018298  0x00003ea1 arg  0x00000028 , 0x00000039 
+ 00018299  0x00003ea2 arg  0x00004741 , 0x00000005 
+ 00018300  0x00003ea3 arg  0x0000949f , 0x00000006 
+ 00018301  0x00003ea4 call  0x00007ef4 
+ 00018302  0x00003ea5 arg  0x00000028 , 0x00000039 
+ 00018303  0x00003ea6 arg  0x000047a0 , 0x00000005 
+ 00018304  0x00003ea7 arg  0x000094c7 , 0x00000006 
+ 00018305  0x00003ea8 branch  0x00007ef4 
+ 00018306  0x00003eac arg  0x0000017e , 0x00000039 
+ 00018307  0x00003ead arg  0x0000913a , 0x00000006 
+ 00018308  0x00003eae branch  0x00007ef4 
+ 00018309  0x00003eb2 arg  0x000001e7 , 0x00000039 
+ 00018310  0x00003eb3 arg  0x000092b8 , 0x00000006 
+ 00018311  0x00003eb4 branch  0x00007ef4 
+ 00018312  0x00003eb9 call  0x000047ae 
+ 00018313  0x00003eba nrtn  0x00000028 
+ 00018314  0x00003ebb fetch  0x00000001 , 0x0000469f 
+ 00018315  0x00003ebc call  0x00004790 
+ 00018316  0x00003ebd fetch  0x00000001 , 0x000046a0 
+ 00018317  0x00003ebe call  0x00004790 
+ 00018318  0x00003ebf fetch  0x00000001 , 0x000046a1 
+ 00018319  0x00003ec0 branch  0x00004790 
+ 00018320  0x00003ec3 rtn  0x00000034 
+ 00018321  0x00003ec4 or  0x0000003f , 0x00000080 , 0x00000002 
+ 00018322  0x00003ec5 branch  0x000067f9 
+ 00018323  0x00003ec9 call  0x000047ae 
+ 00018324  0x00003eca nrtn  0x00000028 
+ 00018325  0x00003ecb call  0x00004797 
+ 00018326  0x00003ecc branch  0x000047b4 
+ 00018327  0x00003ecf arg  0x00000000 , 0x00000011 
+ 00018328  0x00003ed0 fetch  0x00000001 , 0x0000469f 
+ 00018329  0x00003ed1 call  0x000047a9 
+ 00018330  0x00003ed2 nsetflag  0x00000034 , 0x00000000 , 0x00000011 
+ 00018331  0x00003ed3 fetch  0x00000001 , 0x000046a0 
+ 00018332  0x00003ed4 call  0x000047a9 
+ 00018333  0x00003ed5 nsetflag  0x00000034 , 0x00000001 , 0x00000011 
+ 00018334  0x00003ed6 fetch  0x00000001 , 0x000046a1 
+ 00018335  0x00003ed7 call  0x000047a9 
+ 00018336  0x00003ed8 nsetflag  0x00000034 , 0x00000002 , 0x00000011 
+ 00018337  0x00003ed9 copy  0x00000011 , 0x0000003f 
+ 00018338  0x00003eda store  0x00000001 , 0x000046a9 
+ 00018339  0x00003edb fetch  0x00000001 , 0x0000469e 
+ 00018340  0x00003edc imul32  0x00000011 , 0x0000003f 
+ 00018341  0x00003edd fetcht  0x00000002 , 0x0000469c 
+ 00018342  0x00003ede iadd  0x00000002 , 0x0000003f 
+ 00018343  0x00003edf store  0x00000002 , 0x000046aa 
+ 00018344  0x00003ee0 rtn 
+ 00018345  0x00003ee3 rtn  0x00000034 
+ 00018346  0x00003ee4 or  0x0000003f , 0x00000080 , 0x00000002 
+ 00018347  0x00003ee5 call  0x0000681d 
+ 00018348  0x00003ee6 nbranch  0x00007ff1 , 0x00000001 
+ 00018349  0x00003ee7 branch  0x00007fef 
+ 00018350  0x00003eeb call  0x00007fe9 
+ 00018351  0x00003eec fetch  0x00000001 , 0x000046a8 
+ 00018352  0x00003eed nrtn  0x00000034 
+ 00018353  0x00003eee fetch  0x00000001 , 0x0000469b 
+ 00018354  0x00003eef rtn  0x00000034 
+ 00018355  0x00003ef0 branch  0x00007fe7 
+ 00018356  0x00003ef4 call  0x0000666a 
+ 00018357  0x00003ef5 fetch  0x00000002 , 0x000046aa 
+ 00018358  0x00003ef6 arg  0x00000ac2 , 0x00000011 
+ 00018359  0x00003ef7 fetcht  0x00000001 , 0x0000469e 
+ 00018360  0x00003ef8 call  0x000066b3 
+ 00018361  0x00003ef9 call  0x0000666d 
+ 00018362  0x00003efb fetch  0x00000001 , 0x00000ac2 
+ 00018363  0x00003efc copy  0x0000003f , 0x00000039 
+ 00018364  0x00003efd store  0x00000001 , 0x000043af 
+ 00018365  0x00003efe call  0x00007ef4 
+ 00018366  0x00003eff fetch  0x00000001 , 0x00000ac2 
+ 00018367  0x00003f00 copy  0x0000003f , 0x00000039 
+ 00018368  0x00003f01 store  0x00000001 , 0x00004515 
+ 00018369  0x00003f02 call  0x00007ef4 
+ 00018370  0x00003f03 ifetch  0x00000001 , 0x00000006 
+ 00018371  0x00003f04 store  0x00000001 , 0x000046e6 
+ 00018372  0x00003f05 ifetch  0x00000001 , 0x00000006 
+ 00018373  0x00003f06 store  0x00000001 , 0x000046dd 
+ 00018374  0x00003f07 rtn 
+ 00018375  0x00003f0b fetch  0x00000001 , 0x0000469a 
+ 00018376  0x00003f0c rtnbit0  0x00000001 
+ 00018377  0x00003f0d arg  0x00000003 , 0x00000002 
+ 00018378  0x00003f0e fetch  0x00000002 , 0x000046a4 
+ 00018379  0x00003f0f copy  0x0000003f , 0x00000012 
+ 00018380  0x00003f10 arg  0x000046a6 , 0x00000011 
+ 00018381  0x00003f11 call  0x000065df 
+ 00018382  0x00003f12 fetcht  0x00000002 , 0x000046a6 
+ 00018383  0x00003f13 setarg  0x00001b3a 
+ 00018384  0x00003f14 isub  0x00000002 , 0x0000003e 
+ 00018385  0x00003f15 nrtn  0x00000005 
+ 00018386  0x00003f16 fetch  0x00000001 , 0x000046a8 
+ 00018387  0x00003f17 rtn  0x00000034 
+ 00018388  0x00003f18 copy  0x0000003f , 0x00000002 
+ 00018389  0x00003f19 fetch  0x00000002 , 0x000046a4 
+ 00018390  0x00003f1a add  0x0000003f , 0x00000003 , 0x00000012 
+ 00018391  0x00003f1b arg  0x00000ac2 , 0x00000011 
+ 00018392  0x00003f1c call  0x000065df 
+ 00018393  0x00003f1d branch  0x000047e8 
+ 00018394  0x00003f20 fetch  0x00000002 , 0x000046a2 
+ 00018395  0x00003f21 rtn  0x00000034 
+ 00018396  0x00003f22 call  0x0000666a 
+ 00018397  0x00003f23 arg  0x00000001 , 0x00000002 
+ 00018398  0x00003f24 arg  0x000046a8 , 0x00000011 
+ 00018399  0x00003f25 call  0x000066b3 
+ 00018400  0x00003f27 fetch  0x00000001 , 0x000046a8 
+ 00018401  0x00003f28 rtn  0x00000034 
+ 00018402  0x00003f2a fetch  0x00000002 , 0x000046a2 
+ 00018403  0x00003f2b pincrease  0x00000001 
+ 00018404  0x00003f2c arg  0x00000ac2 , 0x00000011 
+ 00018405  0x00003f2d fetcht  0x00000001 , 0x000046a8 
+ 00018406  0x00003f2e call  0x000066b3 
+ 00018407  0x00003f2f call  0x0000666d 
+ 00018408  0x00003f31 call  0x000047ba 
+ 00018409  0x00003f33 ifetch  0x00000002 , 0x00000006 
+ 00018410  0x00003f34 rtn  0x00000034 
+ 00018411  0x00003f35 copy  0x0000003f , 0x00000005 
+ 00018412  0x00003f36 ifetcht  0x00000001 , 0x00000006 
+ 00018413  0x00003f37 copy  0x00000002 , 0x00000039 
+ 00018414  0x00003f38 call  0x00007f01 
+ 00018415  0x00003f39 branch  0x000047e9 
+ 00018416  0x00003f3e fetch  0x00000001 , 0x0000469a 
+ 00018417  0x00003f3f rtnbit0  0x00000001 
+ 00018418  0x00003f40 fetch  0x00000002 , 0x000046ae 
+ 00018419  0x00003f41 copy  0x0000003f , 0x00000012 
+ 00018420  0x00003f42 arg  0x00000004 , 0x00000002 
+ 00018421  0x00003f43 arg  0x00000ac2 , 0x00000011 
+ 00018422  0x00003f44 call  0x000065df 
+ 00018423  0x00003f45 fetch  0x00000001 , 0x00000ac2 
+ 00018424  0x00003f46 bne  0x00000001 , 0x000047f9 
+ 00018425  0x00003f48 setarg  0x00000001 
+ 00018426  0x00003f49 store  0x00000001 , 0x00000ac2 
+ 00018427  0x00003f4a force  0x00000003 , 0x00000039 
+ 00018428  0x00003f4b call  0x0000630d 
+ 00018429  0x00003f4c fetch  0x00000002 , 0x000046ae 
+ 00018430  0x00003f4d copy  0x0000003f , 0x00000012 
+ 00018431  0x00003f4e arg  0x00000004 , 0x00000002 
+ 00018432  0x00003f4f arg  0x00000ac2 , 0x00000011 
+ 00018433  0x00003f50 call  0x00006606 
+ 00018434  0x00003f52 fetch  0x00000003 , 0x00000ac3 
+ 00018435  0x00003f53 store  0x00000003 , 0x000040a0 
+ 00018436  0x00003f54 store  0x00000003 , 0x000044a0 
+ 00018437  0x00003f55 rtn 
+ 00018438  0x00003f59 branch  0x000046d9 
+ 00018439  0x00003f5d arg  0x00000000 , 0x00000011 
+ 00018440  0x00003f5e arg  0x000048d4 , 0x00000013 
+ 00018441  0x00003f5f call  0x00007d24 
+ 00018442  0x00003f60 call  0x000046f4 
+ 00018443  0x00003f62 fetch  0x00000001 , 0x000048eb 
+ 00018444  0x00003f63 store  0x00000001 , 0x000048ec 
+ 00018445  0x00003f64 rtn 
+ 00018446  0x00003f69 setarg  0x00000000 
+ 00018447  0x00003f6a call  0x00004816 
+ 00018448  0x00003f6b jam  0x00000001 , 0x00004679 
+ 00018449  0x00003f6c call  0x00007cd3 
+ 00018450  0x00003f6d call  0x00007cdd 
+ 00018451  0x00003f6e fetch  0x00000002 , 0x00004682 
+ 00018452  0x00003f6f rtnbit1  0x0000000c 
+ 00018453  0x00003f70 branch  0x0000340a 
+ 00018454  0x00003f73 fetcht  0x00000002 , 0x0000423f 
+ 00018455  0x00003f74 istore  0x00000001 , 0x00000002 
+ 00018456  0x00003f75 ifetch  0x00000001 , 0x00000005 
+ 00018457  0x00003f76 store  0x00000001 , 0x00004685 
+ 00018458  0x00003f77 rtn 
+ 00018459  0x00003f7b fetch  0x00000002 , 0x0000423f 
+ 00018460  0x00003f7c ifetch  0x00000001 , 0x0000003f 
+ 00018461  0x00003f7d rtnne  0x00000000 
+ 00018462  0x00003f7e branch  0x0000340a 
+ 00018463  0x00003f82 fetcht  0x00000002 , 0x0000423f 
+ 00018464  0x00003f83 ifetch  0x00000001 , 0x00000002 
+ 00018465  0x00003f84 beq  0x00000001 , 0x0000482a 
+ 00018466  0x00003f86 setarg  0x00000001 
+ 00018467  0x00003f87 fetcht  0x00000002 , 0x0000423f 
+ 00018468  0x00003f88 istore  0x00000001 , 0x00000002 
+ 00018469  0x00003f89 add  0x00000002 , 0x00000002 , 0x00000006 
+ 00018470  0x00003f8a ifetch  0x00000001 , 0x00000006 
+ 00018471  0x00003f8b istore  0x00000001 , 0x00004685 
+ 00018472  0x00003f8c ifetch  0x00000002 , 0x00000006 
+ 00018473  0x00003f8d branch  0x00007f9c 
+ 00018474  0x00003f90 setarg  0x00000002 
+ 00018475  0x00003f91 call  0x00004816 
+ 00018476  0x00003f92 add  0x00000002 , 0x00000005 , 0x00000006 
+ 00018477  0x00003f93 ifetch  0x00000002 , 0x00000006 
+ 00018478  0x00003f94 branch  0x0000340a , 0x00000034 
+ 00018479  0x00003f95 branch  0x00007f9c 
+ 00018480  0x00003f9c store  0x00000006 , 0x00000101 
+ 00018481  0x00003f9d fetch  0x00000001 , 0x00000101 
+ 00018482  0x00003f9e store  0x00000001 , 0x0000010c 
+ 00018483  0x00003f9f ifetch  0x00000001 , 0x00000006 
+ 00018484  0x00003fa0 store  0x00000001 , 0x0000010b 
+ 00018485  0x00003fa1 ifetch  0x00000001 , 0x00000006 
+ 00018486  0x00003fa2 store  0x00000001 , 0x0000010a 
+ 00018487  0x00003fa3 ifetch  0x00000001 , 0x00000006 
+ 00018488  0x00003fa4 store  0x00000001 , 0x00000109 
+ 00018489  0x00003fa5 ifetch  0x00000001 , 0x00000006 
+ 00018490  0x00003fa6 store  0x00000001 , 0x00000108 
+ 00018491  0x00003fa7 ifetch  0x00000001 , 0x00000006 
+ 00018492  0x00003fa8 store  0x00000001 , 0x00000107 
+ 00018493  0x00003fa9 fetch  0x00000006 , 0x00000107 
+ 00018494  0x00003faa rtn 
+ 00018495  0x00003fad call  0x000068a2 
+ 00018496  0x00003fae fetch  0x00000001 , 0x00004223 
+ 00018497  0x00003faf store  0x00000001 , 0x000044a0 
+ 00018498  0x00003fb0 fetch  0x00000001 , 0x00004225 
+ 00018499  0x00003fb1 istore  0x00000001 , 0x00000005 
+ 00018500  0x00003fb2 fetch  0x00000001 , 0x00004227 
+ 00018501  0x00003fb3 istore  0x00000001 , 0x00000005 
+ 00018502  0x00003fb4 fetch  0x00000003 , 0x000044a0 
+ 00018503  0x00003fb5 store  0x00000003 , 0x000040a0 
+ 00018504  0x00003fb6 rtn 
+ 00018505  0x00003fc3 fetch  0x00000002 , 0x00004203 
+ 00018506  0x00003fc4 iadd  0x00000012 , 0x0000003f 
+ 00018507  0x00003fc5 byteswap  0x0000003f , 0x0000003f 
+ 00018508  0x00003fc6 store  0x00000002 , 0x000001f7 
+ 00018509  0x00003fc7 copy  0x00000002 , 0x00000012 
+ 00018510  0x00003fc9 call  0x0000489b 
+ 00018511  0x00003fca setarg  0x000000a0 
+ 00018512  0x00003fcb call  0x0000488d 
+ 00018513  0x00003fcc fetch  0x00000001 , 0x000001f7 
+ 00018514  0x00003fcd call  0x0000488d 
+ 00018515  0x00003fce bmark1  0x00000028 , 0x00004856 
+ 00018516  0x00003fcf fetch  0x00000001 , 0x000001f8 
+ 00018517  0x00003fd0 call  0x0000488d 
+ 00018518  0x00003fd2 call  0x000048a1 
+ 00018519  0x00003fd4 call  0x0000489b 
+ 00018520  0x00003fd5 setarg  0x000000a1 
+ 00018521  0x00003fd6 call  0x0000488d 
+ 00018522  0x00003fd9 call  0x0000487f 
+ 00018523  0x00003fda istore  0x00000001 , 0x00000011 
+ 00018524  0x00003fdb increase  0x00000001 , 0x00000011 
+ 00018525  0x00003fdc increase  0xffffffff , 0x00000012 
+ 00018526  0x00003fdd nbranch  0x0000485a , 0x00000005 
+ 00018527  0x00003fde branch  0x000048a1 
+ 00018528  0x00003fea byteswap  0x00000012 , 0x0000003f 
+ 00018529  0x00003feb store  0x00000002 , 0x000001f7 
+ 00018530  0x00003fec copy  0x00000002 , 0x00000012 
+ 00018531  0x00003fee call  0x0000489b 
+ 00018532  0x00003fef setarg  0x000000a0 
+ 00018533  0x00003ff0 call  0x0000488d 
+ 00018534  0x00003ff2 fetch  0x00000001 , 0x000001f7 
+ 00018535  0x00003ff3 call  0x0000488d 
+ 00018536  0x00003ff4 bmark1  0x00000028 , 0x0000486b 
+ 00018537  0x00003ff5 fetch  0x00000001 , 0x000001f8 
+ 00018538  0x00003ff6 call  0x0000488d 
+ 00018539  0x00003ff8 ifetch  0x00000001 , 0x00000011 
+ 00018540  0x00003ff9 call  0x0000488d 
+ 00018541  0x00003ffa increase  0x00000001 , 0x00000011 
+ 00018542  0x00003ffb increase  0xffffffff , 0x00000012 
+ 00018543  0x00003ffc nbranch  0x0000486b , 0x00000005 
+ 00018544  0x00003ffd branch  0x000048a1 
+ 00018545  0x00004002 arg  0x0000000a , 0x00000039 
+ 00018546  0x00004003 call  0x000048be 
+ 00018547  0x00004004 call  0x000048a6 
+ 00018548  0x00004005 call  0x000048d2 
+ 00018549  0x00004007 call  0x000048c7 
+ 00018550  0x00004008 branch  0x000048a9 , 0x00000034 
+ 00018551  0x00004009 loop  0x00004875 
+ 00018552  0x0000400a branch  0x000048a9 
+ 00018553  0x0000400f call  0x000048a9 
+ 00018554  0x00004010 call  0x000048af 
+ 00018555  0x00004011 call  0x000048d2 
+ 00018556  0x00004012 call  0x000048a6 
+ 00018557  0x00004013 call  0x000048d2 
+ 00018558  0x00004014 branch  0x000048a9 
+ 00018559  0x0000401a arg  0x00000008 , 0x00000039 
+ 00018560  0x0000401b arg  0x00000000 , 0x00000013 
+ 00018561  0x0000401c call  0x000048be 
+ 00018562  0x0000401e call  0x000048a6 
+ 00018563  0x0000401f call  0x000048d2 
+ 00018564  0x00004020 lshift  0x00000013 , 0x00000013 
+ 00018565  0x00004021 call  0x000048c7 
+ 00018566  0x00004022 iadd  0x00000013 , 0x00000013 
+ 00018567  0x00004023 call  0x000048d2 
+ 00018568  0x00004024 call  0x000048a9 
+ 00018569  0x00004025 loop  0x00004882 
+ 00018570  0x00004026 call  0x00004879 
+ 00018571  0x00004027 copy  0x00000013 , 0x0000003f 
+ 00018572  0x00004028 rtn 
+ 00018573  0x0000402d arg  0x00000008 , 0x00000039 
+ 00018574  0x0000402e copy  0x0000003f , 0x00000013 
+ 00018575  0x0000402f call  0x000048a9 
+ 00018576  0x00004031 isolate1  0x00000007 , 0x00000013 
+ 00018577  0x00004032 call  0x000048ac , 0x00000001 
+ 00018578  0x00004033 ncall  0x000048af , 0x00000001 
+ 00018579  0x00004034 lshift  0x00000013 , 0x00000013 
+ 00018580  0x00004035 call  0x000048d2 
+ 00018581  0x00004036 call  0x000048a6 
+ 00018582  0x00004037 call  0x000048d2 
+ 00018583  0x00004038 call  0x000048a9 
+ 00018584  0x00004039 call  0x000048d2 
+ 00018585  0x0000403a loop  0x00004890 
+ 00018586  0x0000403b branch  0x00004871 
+ 00018587  0x00004040 call  0x000048ac 
+ 00018588  0x00004041 call  0x000048a6 
+ 00018589  0x00004042 call  0x000048d2 
+ 00018590  0x00004043 call  0x000048af 
+ 00018591  0x00004044 call  0x000048d2 
+ 00018592  0x00004045 branch  0x000048a9 
+ 00018593  0x0000404a call  0x000048af 
+ 00018594  0x0000404b call  0x000048a6 
+ 00018595  0x0000404c call  0x000048d2 
+ 00018596  0x0000404d call  0x000048ac 
+ 00018597  0x0000404e branch  0x000048d2 
+ 00018598  0x00004053 enable  0x00000028 
+ 00018599  0x00004054 fetch  0x00000001 , 0x00004ffe 
+ 00018600  0x00004055 branch  0x000048b2 
+ 00018601  0x00004059 disable  0x00000028 
+ 00018602  0x0000405a fetch  0x00000001 , 0x00004ffe 
+ 00018603  0x0000405b branch  0x000048b2 
+ 00018604  0x0000405f enable  0x00000028 
+ 00018605  0x00004060 fetch  0x00000001 , 0x00004fff 
+ 00018606  0x00004061 branch  0x000048b2 
+ 00018607  0x00004065 disable  0x00000028 
+ 00018608  0x00004066 fetch  0x00000001 , 0x00004fff 
+ 00018609  0x00004067 branch  0x000048b2 
+ 00018610  0x0000406d and  0x0000003f , 0x00000007 , 0x00000007 
+ 00018611  0x0000406e rshift3  0x0000003f , 0x0000003f 
+ 00018612  0x0000406f arg  0x00008070 , 0x00000002 
+ 00018613  0x00004070 iadd  0x00000002 , 0x00000002 
+ 00018614  0x00004071 ifetch  0x00000001 , 0x00000002 
+ 00018615  0x00004072 qset1  0x0000003f 
+ 00018616  0x00004073 istore  0x00000001 , 0x00000002 
+ 00018617  0x00004074 increase  0x00000004 , 0x00000002 
+ 00018618  0x00004075 ifetch  0x00000001 , 0x00000002 
+ 00018619  0x00004076 qsetflag  0x00000028 , 0x0000003f 
+ 00018620  0x00004077 istore  0x00000001 , 0x00000002 
+ 00018621  0x00004078 rtn 
+ 00018622  0x0000407c fetch  0x00000001 , 0x00004fff 
+ 00018623  0x0000407d and  0x0000003f , 0x00000007 , 0x00000007 
+ 00018624  0x0000407e rshift3  0x0000003f , 0x0000003f 
+ 00018625  0x0000407f arg  0x00008070 , 0x00000002 
+ 00018626  0x00004080 iadd  0x00000002 , 0x00000002 
+ 00018627  0x00004081 ifetch  0x00000001 , 0x00000002 
+ 00018628  0x00004082 qset0  0x0000003f 
+ 00018629  0x00004083 istore  0x00000001 , 0x00000002 
+ 00018630  0x00004084 rtn 
+ 00018631  0x0000408a nop  0x00000004 
+ 00018632  0x0000408b fetch  0x00000001 , 0x00004fff 
+ 00018633  0x0000408c and  0x0000003f , 0x00000007 , 0x00000007 
+ 00018634  0x0000408d rshift3  0x0000003f , 0x0000003f 
+ 00018635  0x0000408e arg  0x0000811c , 0x00000002 
+ 00018636  0x0000408f iadd  0x00000002 , 0x00000002 
+ 00018637  0x00004090 setarg  0x00000000 
+ 00018638  0x00004091 ifetcht  0x00000001 , 0x00000002 
+ 00018639  0x00004092 qisolate1  0x00000002 
+ 00018640  0x00004093 setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00018641  0x00004094 rtn 
+ 00018642  0x00004099 rtn 
+ 00018643  0x000040a0 bpatch  0x000000f6 , 0x0000401e 
+ 00018644  0x000040a1 hfetch  0x00000001 , 0x00008a26 
+ 00018645  0x000040a2 isolate1  0x00000007 , 0x0000003f 
+ 00018646  0x000040a3 call  0x000048ea , 0x00000001 
+ 00018647  0x000040a4 call  0x0000492e 
+ 00018648  0x000040a5 hfetch  0x00000001 , 0x00008a26 
+ 00018649  0x000040a6 store  0x00000001 , 0x00000b22 
+ 00018650  0x000040a7 hfetch  0x00000001 , 0x00008a27 
+ 00018651  0x000040a8 store  0x00000001 , 0x00000b23 
+ 00018652  0x000040a9 hstore  0x00000001 , 0x00008a27 
+ 00018653  0x000040aa pinvert 
+ 00018654  0x000040ab fetcht  0x00000001 , 0x00000d37 
+ 00018655  0x000040ac iand  0x00000002 , 0x0000003f 
+ 00018656  0x000040ad store  0x00000001 , 0x00000d37 
+ 00018657  0x000040ae jam  0x000000e0 , 0x00008a26 
+ 00018658  0x000040af fetch  0x00000001 , 0x00000b23 
+ 00018659  0x000040b0 compare  0x00000001 , 0x0000003f , 0x00000001 
+ 00018660  0x000040b1 call  0x00004941 , 0x00000001 
+ 00018661  0x000040b2 fetch  0x00000001 , 0x00000b22 
+ 00018662  0x000040b3 compare  0x00000001 , 0x0000003f , 0x00000001 
+ 00018663  0x000040b4 call  0x0000494a , 0x00000001 
+ 00018664  0x000040b5 call  0x00004b61 
+ 00018665  0x000040b6 branch  0x00004903 
+ 00018666  0x000040b9 bpatch  0x000000f7 , 0x0000401e 
+ 00018667  0x000040ba call  0x00004919 
+ 00018668  0x000040bb jam  0x00000000 , 0x00008a00 
+ 00018669  0x000040bc nop  0x00002710 
+ 00018670  0x000040bd jam  0x000000c0 , 0x00008a10 
+ 00018671  0x000040be hfetch  0x00000002 , 0x00008050 
+ 00018672  0x000040bf set0  0x0000000a , 0x0000003f 
+ 00018673  0x000040c0 hstore  0x00000002 , 0x00008050 
+ 00018674  0x000040c1 jam  0x0000003c , 0x00008a00 
+ 00018675  0x000040c2 jam  0x000000ff , 0x00008a26 
+ 00018676  0x000040c3 jam  0x000000ff , 0x00008a27 
+ 00018677  0x000040c4 jam  0x00000000 , 0x00008a04 
+ 00018678  0x000040c5 jam  0x00000002 , 0x00000c6b 
+ 00018679  0x000040c6 setarg  0x00000d9d 
+ 00018680  0x000040c7 arg  0x00000c6e , 0x00000005 
+ 00018681  0x000040c8 isub  0x00000005 , 0x00000039 
+ 00018682  0x000040c9 branch  0x00007ed4 
+ 00018683  0x000040cc fetcht  0x00000001 , 0x00000c6c 
+ 00018684  0x000040cd branch  0x000067fb 
+ 00018685  0x000040cf fetch  0x00000001 , 0x00000d45 
+ 00018686  0x000040d0 rtn  0x00000034 
+ 00018687  0x000040d1 fetcht  0x00000001 , 0x00000c6c 
+ 00018688  0x000040d2 call  0x0000681d 
+ 00018689  0x000040d3 branch  0x000048ea , 0x00000001 
+ 00018690  0x000040d4 rtn 
+ 00018691  0x000040d8 arg  0x00000000 , 0x00000007 
+ 00018692  0x000040d9 call  0x00007f16 
+ 00018693  0x000040da nrtn  0x00000034 
+ 00018694  0x000040db fetch  0x00000001 , 0x00000d46 
+ 00018695  0x000040dc nrtn  0x00000034 
+ 00018696  0x000040dd fetch  0x00000001 , 0x00000d45 
+ 00018697  0x000040de ncall  0x00004bb7 , 0x00000034 
+ 00018698  0x000040df rtn 
+ 00018699  0x000040e2 arg  0x00000b68 , 0x00000005 
+ 00018700  0x000040e3 setsect  0x00000000 , 0x00011212 
+ 00018701  0x000040e4 setsect  0x00000001 , 0x00008000 
+ 00018702  0x000040e5 setsect  0x00000002 , 0x00000000 
+ 00018703  0x000040e6 setsect  0x00000003 , 0x00010000 
+ 00018704  0x000040e7 istore  0x00000009 , 0x00000005 
+ 00018705  0x000040e8 setsect  0x00000000 , 0x00022412 
+ 00018706  0x000040e9 setsect  0x00000001 , 0x00008604 
+ 00018707  0x000040ea setsect  0x00000002 , 0x00001000 
+ 00018708  0x000040eb setsect  0x00000003 , 0x00000008 
+ 00018709  0x000040ec istore  0x00000009 , 0x00000005 
+ 00018710  0x000040ed setsect  0x00000000 , 0x00000001 
+ 00018711  0x000040ee istore  0x00000001 , 0x00000005 
+ 00018712  0x000040ef rtn 
+ 00018713  0x000040f2 jam  0x00000002 , 0x00000c6b 
+ 00018714  0x000040f3 setarg  0x00000000 
+ 00018715  0x000040f4 store  0x00000001 , 0x00000b67 
+ 00018716  0x000040f5 store  0x00000002 , 0x00000c65 
+ 00018717  0x000040f6 pincrease  0x00000001 
+ 00018718  0x000040f7 store  0x00000002 , 0x00000c67 
+ 00018719  0x000040f8 pincrease  0x00000001 
+ 00018720  0x000040f9 store  0x00000002 , 0x00000c69 
+ 00018721  0x000040fa setarg  0x00008ffa 
+ 00018722  0x000040fb store  0x00000002 , 0x00000b7c 
+ 00018723  0x000040fc setarg  0x0000903a 
+ 00018724  0x000040fd store  0x00000002 , 0x00000b7e 
+ 00018725  0x000040fe arg  0x00000b80 , 0x00000005 
+ 00018726  0x000040ff arg  0x000090fe , 0x00000006 
+ 00018727  0x00004100 call  0x00007eb3 
+ 00018728  0x00004101 fetch  0x00000001 , 0x00000c6d 
+ 00018729  0x00004102 ncall  0x0000492b , 0x00000034 
+ 00018730  0x00004103 branch  0x0000490b 
+ 00018731  0x00004106 store  0x00000001 , 0x00000ba2 
+ 00018732  0x00004107 store  0x00000001 , 0x00000bbb 
+ 00018733  0x00004108 rtn 
+ 00018734  0x0000410a hfetch  0x00000001 , 0x00008a26 
+ 00018735  0x0000410b bbit1  0x00000006 , 0x00004931 
+ 00018736  0x0000410c rtn 
+ 00018737  0x0000410f call  0x00004936 
+ 00018738  0x00004110 call  0x00007f15 
+ 00018739  0x00004111 setarg  0x00000280 
+ 00018740  0x00004112 arg  0x00000000 , 0x00000007 
+ 00018741  0x00004113 branch  0x00007f08 
+ 00018742  0x00004116 fetch  0x00000001 , 0x00000d36 
+ 00018743  0x00004117 bne  0x00000002 , 0x0000493b 
+ 00018744  0x00004118 jam  0x00000000 , 0x00000d46 
+ 00018745  0x00004119 jam  0x00000000 , 0x00000d47 
+ 00018746  0x0000411a rtn 
+ 00018747  0x0000411c fetch  0x00000001 , 0x00000d53 
+ 00018748  0x0000411d rtn  0x00000034 
+ 00018749  0x0000411e jam  0x00000000 , 0x00000d53 
+ 00018750  0x0000411f jam  0x00000002 , 0x00000d36 
+ 00018751  0x00004120 jam  0x00000001 , 0x00000d45 
+ 00018752  0x00004121 rtn 
+ 00018753  0x00004124 jam  0x00000001 , 0x00008a27 
+ 00018754  0x00004125 branch  0x00004b37 
+ 00018755  0x00004128 fetch  0x00000001 , 0x00000b22 
+ 00018756  0x00004129 bbit1  0x00000004 , 0x00004955 
+ 00018757  0x0000412a rtn 
+ 00018758  0x0000412d hfetch  0x00000001 , 0x00008a18 
+ 00018759  0x0000412e istore  0x00000001 , 0x00000005 
+ 00018760  0x0000412f loop  0x00004946 
+ 00018761  0x00004130 rtn 
+ 00018762  0x00004133 bpatch  0x000000f8 , 0x0000401f 
+ 00018763  0x00004134 jam  0x00000011 , 0x00008a26 
+ 00018764  0x00004135 hfetch  0x00000001 , 0x00008a20 
+ 00018765  0x00004136 store  0x00000001 , 0x00000b24 
+ 00018766  0x00004137 copy  0x0000003f , 0x00000039 
+ 00018767  0x00004138 branch  0x00004943 , 0x00000034 
+ 00018768  0x00004139 arg  0x00000c6e , 0x00000005 
+ 00018769  0x0000413a call  0x00004946 
+ 00018770  0x0000413b fetch  0x00000001 , 0x00000b24 
+ 00018771  0x0000413c sub  0x0000003f , 0x00000007 , 0x0000003e 
+ 00018772  0x0000413d rtn  0x00000002 
+ 00018773  0x0000413f fetch  0x00000001 , 0x00000c6e 
+ 00018774  0x00004140 and_into  0x00000080 , 0x0000003f 
+ 00018775  0x00004141 beq  0x00000080 , 0x0000495a 
+ 00018776  0x00004142 beq  0x00000000 , 0x00004962 
+ 00018777  0x00004143 branch  0x00002a8c 
+ 00018778  0x00004146 fetch  0x00000001 , 0x00000c6e 
+ 00018779  0x00004147 rshift4  0x0000003f , 0x0000003f 
+ 00018780  0x00004148 rshift  0x0000003f , 0x0000003f 
+ 00018781  0x00004149 and_into  0x00000003 , 0x0000003f 
+ 00018782  0x0000414a beq  0x00000000 , 0x0000496a 
+ 00018783  0x0000414b beq  0x00000001 , 0x00004970 
+ 00018784  0x0000414c beq  0x00000002 , 0x00004975 
+ 00018785  0x0000414d branch  0x00002a8c 
+ 00018786  0x00004150 fetch  0x00000001 , 0x00000c6e 
+ 00018787  0x00004151 rshift4  0x0000003f , 0x0000003f 
+ 00018788  0x00004152 rshift  0x0000003f , 0x0000003f 
+ 00018789  0x00004153 and_into  0x00000003 , 0x0000003f 
+ 00018790  0x00004154 beq  0x00000000 , 0x00004976 
+ 00018791  0x00004155 beq  0x00000001 , 0x0000497e 
+ 00018792  0x00004156 beq  0x00000002 , 0x00004983 
+ 00018793  0x00004157 branch  0x00002a8c 
+ 00018794  0x0000415a fetch  0x00000001 , 0x00000c6f 
+ 00018795  0x0000415b beq  0x00000008 , 0x0000498a 
+ 00018796  0x0000415c beq  0x00000006 , 0x000049a0 
+ 00018797  0x0000415d beq  0x0000000a , 0x000049ea 
+ 00018798  0x0000415e beq  0x00000000 , 0x000049fc 
+ 00018799  0x0000415f branch  0x00004984 
+ 00018800  0x00004162 fetch  0x00000001 , 0x00000c6f 
+ 00018801  0x00004163 beq  0x00000002 , 0x00004a2f 
+ 00018802  0x00004164 beq  0x00000001 , 0x00004a33 
+ 00018803  0x00004165 beq  0x00000003 , 0x00004a45 
+ 00018804  0x00004166 branch  0x00004984 
+ 00018805  0x00004169 branch  0x00004984 
+ 00018806  0x0000416c fetch  0x00000001 , 0x00000c6f 
+ 00018807  0x0000416d beq  0x00000001 , 0x00004a4f 
+ 00018808  0x0000416e beq  0x00000003 , 0x00004a79 
+ 00018809  0x0000416f beq  0x00000005 , 0x00004aa3 
+ 00018810  0x00004170 beq  0x00000009 , 0x00004abc 
+ 00018811  0x00004171 beq  0x0000000b , 0x00004ad7 
+ 00018812  0x00004172 beq  0x00000007 , 0x00004984 
+ 00018813  0x00004173 branch  0x00004984 
+ 00018814  0x00004176 fetch  0x00000001 , 0x00000c6f 
+ 00018815  0x00004177 beq  0x0000000a , 0x00004ae8 
+ 00018816  0x00004178 beq  0x00000009 , 0x00004af9 
+ 00018817  0x00004179 beq  0x0000000b , 0x00004b11 
+ 00018818  0x0000417a branch  0x00004984 
+ 00018819  0x0000417d branch  0x00004984 
+ 00018820  0x00004180 hfetch  0x00000001 , 0x00008a11 
+ 00018821  0x00004181 set1  0x00000000 , 0x0000003f 
+ 00018822  0x00004182 hstore  0x00000001 , 0x00008a11 
+ 00018823  0x00004183 branch  0x00004988 
+ 00018824  0x00004186 jam  0x00000040 , 0x00008a12 
+ 00018825  0x00004187 rtn 
+ 00018826  0x0000418a fetch  0x00000001 , 0x00000c6e 
+ 00018827  0x0000418b bne  0x00000080 , 0x00004984 
+ 00018828  0x0000418c fetch  0x00000001 , 0x00000c72 
+ 00018829  0x0000418d bne  0x00000000 , 0x00004984 
+ 00018830  0x0000418e fetch  0x00000001 , 0x00000c73 
+ 00018831  0x0000418f bne  0x00000000 , 0x00004984 
+ 00018832  0x00004190 fetch  0x00000001 , 0x00000c74 
+ 00018833  0x00004191 bne  0x00000001 , 0x00004984 
+ 00018834  0x00004192 fetch  0x00000001 , 0x00000c75 
+ 00018835  0x00004193 bne  0x00000000 , 0x00004984 
+ 00018836  0x00004194 fetch  0x00000001 , 0x00000c70 
+ 00018837  0x00004195 bne  0x00000000 , 0x00004984 
+ 00018838  0x00004196 fetch  0x00000001 , 0x00000c71 
+ 00018839  0x00004197 bne  0x00000000 , 0x00004984 
+ 00018840  0x00004198 fetch  0x00000001 , 0x00000c6b 
+ 00018841  0x00004199 beq  0x00000004 , 0x0000499c 
+ 00018842  0x0000419a beq  0x00000003 , 0x0000499e 
+ 00018843  0x0000419b branch  0x00004984 
+ 00018844  0x0000419e arg  0x00000001 , 0x00000012 
+ 00018845  0x0000419f branch  0x00004a14 
+ 00018846  0x000041a2 arg  0x00000001 , 0x00000012 
+ 00018847  0x000041a3 branch  0x00004a12 
+ 00018848  0x000041a6 bpatch  0x000000f9 , 0x0000401f 
+ 00018849  0x000041a7 set0  0x00000023 , 0x00000000 
+ 00018850  0x000041a8 fetch  0x00000001 , 0x00000c71 
+ 00018851  0x000041a9 beq  0x00000001 , 0x000049b6 
+ 00018852  0x000041aa beq  0x00000002 , 0x000049cf 
+ 00018853  0x000041ab beq  0x00000003 , 0x000049d2 
+ 00018854  0x000041ac beq  0x00000021 , 0x000049a9 
+ 00018855  0x000041ad beq  0x00000022 , 0x000049e0 
+ 00018856  0x000041ae branch  0x00004984 
+ 00018857  0x000041b1 jam  0x00000000 , 0x00000d4b 
+ 00018858  0x000041b2 fetch  0x00000001 , 0x00000c72 
+ 00018859  0x000041b3 beq  0x00000000 , 0x000049ae 
+ 00018860  0x000041b4 beq  0x00000001 , 0x000049b2 
+ 00018861  0x000041b5 branch  0x00004984 
+ 00018862  0x000041b8 arg  0x00000b93 , 0x00000011 
+ 00018863  0x000041b9 ifetch  0x00000001 , 0x00000011 
+ 00018864  0x000041ba iforce  0x00000012 
+ 00018865  0x000041bb branch  0x00004b21 
+ 00018866  0x000041be arg  0x00000bac , 0x00000011 
+ 00018867  0x000041bf ifetch  0x00000001 , 0x00000011 
+ 00018868  0x000041c0 iforce  0x00000012 
+ 00018869  0x000041c1 branch  0x00004b21 
+ 00018870  0x000041c7 fetch  0x00000001 , 0x00000d48 
+ 00018871  0x000041c8 ncall  0x000049c7 , 0x00000034 
+ 00018872  0x000041c9 setarg  0x00000b68 
+ 00018873  0x000041ca fetcht  0x00000001 , 0x00000b68 
+ 00018874  0x000041cc store  0x00000002 , 0x00000d3f 
+ 00018875  0x000041cd storet  0x00000001 , 0x00000d41 
+ 00018876  0x000041ce fetch  0x00000001 , 0x00000c74 
+ 00018877  0x000041cf isub  0x00000002 , 0x0000003e 
+ 00018878  0x000041d0 nbranch  0x000049c5 , 0x00000002 
+ 00018879  0x000041d2 fetch  0x00000001 , 0x00000d41 
+ 00018880  0x000041d4 iforce  0x00000012 
+ 00018881  0x000041d5 fetch  0x00000002 , 0x00000d3f 
+ 00018882  0x000041d6 add  0x0000003f , 0x00000001 , 0x0000003f 
+ 00018883  0x000041d7 iforce  0x00000011 
+ 00018884  0x000041d8 branch  0x00004b21 
+ 00018885  0x000041da fetch  0x00000001 , 0x00000c74 
+ 00018886  0x000041db branch  0x000049c0 
+ 00018887  0x000041de hfetch  0x00000001 , 0x00008a04 
+ 00018888  0x000041df ncall  0x000049cb , 0x00000034 
+ 00018889  0x000041e0 jam  0x00000000 , 0x00000d48 
+ 00018890  0x000041e1 rtn 
+ 00018891  0x000041e3 hfetch  0x00000001 , 0x00008a04 
+ 00018892  0x000041e4 set1  0x00000007 , 0x0000003f 
+ 00018893  0x000041e5 hstore  0x00000001 , 0x00008a04 
+ 00018894  0x000041e6 rtn 
+ 00018895  0x000041e9 setarg  0x00000b80 
+ 00018896  0x000041ea fetcht  0x00000001 , 0x00000b80 
+ 00018897  0x000041eb branch  0x000049ba 
+ 00018898  0x000041ee fetch  0x00000001 , 0x00000c70 
+ 00018899  0x000041ef sub  0x0000003f , 0x00000003 , 0x0000003e 
+ 00018900  0x000041f0 nbranch  0x00004984 , 0x00000002 
+ 00018901  0x000041f1 fetch  0x00000001 , 0x00000c70 
+ 00018902  0x000041f2 arg  0x00000be4 , 0x00000011 
+ 00018903  0x000041f3 beq  0x00000000 , 0x00004b1e 
+ 00018904  0x000041f4 set1  0x00000023 , 0x00000000 
+ 00018905  0x000041f5 arg  0x00000be9 , 0x00000011 
+ 00018906  0x000041f6 beq  0x00000001 , 0x00004b1e 
+ 00018907  0x000041f7 arg  0x00000c07 , 0x00000011 
+ 00018908  0x000041f8 beq  0x00000002 , 0x00004b1e 
+ 00018909  0x000041f9 arg  0x00000c47 , 0x00000011 
+ 00018910  0x000041fa beq  0x00000003 , 0x00004b1e 
+ 00018911  0x000041fb rtn 
+ 00018912  0x000041fe fetch  0x00000002 , 0x00000c72 
+ 00018913  0x000041ff beq  0x00000001 , 0x000049e5 
+ 00018914  0x00004200 fetch  0x00000002 , 0x00000b7c 
+ 00018915  0x00004201 copy  0x0000003f , 0x00000011 
+ 00018916  0x00004203 branch  0x00004b1e 
+ 00018917  0x00004205 jam  0x00000001 , 0x00000d45 
+ 00018918  0x00004206 jam  0x00000001 , 0x00000d36 
+ 00018919  0x00004207 fetch  0x00000002 , 0x00000b7e 
+ 00018920  0x00004208 copy  0x0000003f , 0x00000011 
+ 00018921  0x0000420a branch  0x00004b1e 
+ 00018922  0x0000420e fetch  0x00000001 , 0x00000c6b 
+ 00018923  0x0000420f bne  0x00000004 , 0x00004984 
+ 00018924  0x00004210 fetch  0x00000001 , 0x00000c6e 
+ 00018925  0x00004211 bne  0x00000081 , 0x00004984 
+ 00018926  0x00004212 fetch  0x00000001 , 0x00000c70 
+ 00018927  0x00004213 bne  0x00000000 , 0x00004984 
+ 00018928  0x00004214 fetch  0x00000001 , 0x00000c71 
+ 00018929  0x00004215 bne  0x00000000 , 0x00004984 
+ 00018930  0x00004216 fetch  0x00000001 , 0x00000c74 
+ 00018931  0x00004217 bne  0x00000001 , 0x00004984 
+ 00018932  0x00004218 fetch  0x00000001 , 0x00000c75 
+ 00018933  0x00004219 bne  0x00000000 , 0x00004984 
+ 00018934  0x0000421a fetch  0x00000001 , 0x00000c72 
+ 00018935  0x0000421b bne  0x00000000 , 0x00004984 
+ 00018936  0x0000421c fetch  0x00000001 , 0x00000c73 
+ 00018937  0x0000421d bne  0x00000000 , 0x00004984 
+ 00018938  0x0000421e arg  0x00000001 , 0x00000012 
+ 00018939  0x0000421f branch  0x00004a12 
+ 00018940  0x00004223 fetch  0x00000001 , 0x00000c6b 
+ 00018941  0x00004224 beq  0x00000002 , 0x00004984 
+ 00018942  0x00004225 fetch  0x00000001 , 0x00000c70 
+ 00018943  0x00004226 bne  0x00000000 , 0x00004984 
+ 00018944  0x00004227 fetch  0x00000001 , 0x00000c71 
+ 00018945  0x00004228 bne  0x00000000 , 0x00004984 
+ 00018946  0x00004229 fetch  0x00000001 , 0x00000c74 
+ 00018947  0x0000422a bne  0x00000002 , 0x00004984 
+ 00018948  0x0000422b fetch  0x00000001 , 0x00000c75 
+ 00018949  0x0000422c bne  0x00000000 , 0x00004984 
+ 00018950  0x0000422d fetch  0x00000001 , 0x00000c73 
+ 00018951  0x0000422e bne  0x00000000 , 0x00004984 
+ 00018952  0x0000422f fetch  0x00000001 , 0x00000c6e 
+ 00018953  0x00004230 beq  0x00000080 , 0x00004a0d 
+ 00018954  0x00004231 beq  0x00000081 , 0x00004a18 
+ 00018955  0x00004232 beq  0x00000082 , 0x00004a1c 
+ 00018956  0x00004233 branch  0x00004984 
+ 00018957  0x00004236 fetch  0x00000001 , 0x00000c72 
+ 00018958  0x00004237 bne  0x00000000 , 0x00004984 
+ 00018959  0x00004238 arg  0x00000002 , 0x00000012 
+ 00018960  0x00004239 fetch  0x00000001 , 0x00000d39 
+ 00018961  0x0000423a beq  0x00000001 , 0x00004a16 
+ 00018962  0x0000423d arg  0x00000c65 , 0x00000011 
+ 00018963  0x0000423e branch  0x00004b21 
+ 00018964  0x00004240 arg  0x00000c67 , 0x00000011 
+ 00018965  0x00004241 branch  0x00004b21 
+ 00018966  0x00004243 arg  0x00000c69 , 0x00000011 
+ 00018967  0x00004244 branch  0x00004b21 
+ 00018968  0x00004247 fetch  0x00000001 , 0x00000c6b 
+ 00018969  0x00004248 bne  0x00000004 , 0x00004984 
+ 00018970  0x00004249 arg  0x00000002 , 0x00000012 
+ 00018971  0x0000424a branch  0x00004a12 
+ 00018972  0x0000424d fetch  0x00000001 , 0x00000c6b 
+ 00018973  0x0000424e bne  0x00000004 , 0x00004984 
+ 00018974  0x0000424f fetch  0x00000001 , 0x00000c72 
+ 00018975  0x00004250 beq  0x00000081 , 0x00004a29 
+ 00018976  0x00004251 beq  0x00000082 , 0x00004a2b 
+ 00018977  0x00004252 beq  0x00000083 , 0x00004a2d 
+ 00018978  0x00004253 and_into  0x0000007f , 0x0000003f 
+ 00018979  0x00004254 beq  0x00000000 , 0x00004a25 
+ 00018980  0x00004255 branch  0x00004984 
+ 00018981  0x00004258 fetch  0x00000001 , 0x00000d3b 
+ 00018982  0x0000425a arg  0x00000002 , 0x00000012 
+ 00018983  0x0000425b beq  0x00000001 , 0x00004a14 
+ 00018984  0x0000425c branch  0x00004a12 
+ 00018985  0x0000425e fetch  0x00000001 , 0x00000d3c 
+ 00018986  0x0000425f branch  0x00004a26 
+ 00018987  0x00004261 fetch  0x00000001 , 0x00000d3d 
+ 00018988  0x00004262 branch  0x00004a26 
+ 00018989  0x00004264 fetch  0x00000001 , 0x00000d3e 
+ 00018990  0x00004265 branch  0x00004a26 
+ 00018991  0x00004268 jam  0x00000001 , 0x00000d4c 
+ 00018992  0x00004269 arg  0x00000d4d , 0x00000011 
+ 00018993  0x0000426a arg  0x00000001 , 0x00000012 
+ 00018994  0x0000426b branch  0x00004b21 
+ 00018995  0x0000426e fetch  0x00000002 , 0x00000c70 
+ 00018996  0x0000426f arg  0x000001ba , 0x00000002 
+ 00018997  0x00004270 isub  0x00000002 , 0x0000003e 
+ 00018998  0x00004271 nbranch  0x00004984 , 0x00000005 
+ 00018999  0x00004272 set0  0x00000023 , 0x00000000 
+ 00019000  0x00004274 fetch  0x00000001 , 0x00000d42 
+ 00019001  0x00004275 nbranch  0x00004a42 , 0x00000034 
+ 00019002  0x00004276 jam  0x00000000 , 0x00000cf6 
+ 00019003  0x00004278 fetch  0x00000001 , 0x00000c74 
+ 00019004  0x00004279 iforce  0x00000012 
+ 00019005  0x0000427a arg  0x00000cf6 , 0x00000011 
+ 00019006  0x0000427b call  0x00004b21 
+ 00019007  0x0000427d arg  0x00000cf6 , 0x00000005 
+ 00019008  0x0000427e arg  0x00000008 , 0x00000039 
+ 00019009  0x0000427f branch  0x00007ec6 
+ 00019010  0x00004281 jam  0x00000000 , 0x00000d42 
+ 00019011  0x00004282 jam  0x00000001 , 0x00000cf6 
+ 00019012  0x00004283 branch  0x00004a3b 
+ 00019013  0x00004286 fetch  0x00000001 , 0x00000c74 
+ 00019014  0x00004287 bne  0x00000001 , 0x00004984 
+ 00019015  0x00004288 jam  0x00000001 , 0x00000d4b 
+ 00019016  0x00004289 arg  0x00000001 , 0x00000012 
+ 00019017  0x0000428a fetch  0x00000001 , 0x00000d49 
+ 00019018  0x0000428b beq  0x00000000 , 0x00004a4d 
+ 00019019  0x0000428c beq  0x00000001 , 0x00004a4e 
+ 00019020  0x0000428d branch  0x00004a12 
+ 00019021  0x0000428f branch  0x00004a14 
+ 00019022  0x00004291 branch  0x00004a12 
+ 00019023  0x00004297 fetch  0x00000001 , 0x00000c6b 
+ 00019024  0x00004298 bne  0x00000004 , 0x00004984 
+ 00019025  0x00004299 fetch  0x00000001 , 0x00000c74 
+ 00019026  0x0000429a bne  0x00000000 , 0x00004984 
+ 00019027  0x0000429b fetch  0x00000001 , 0x00000c75 
+ 00019028  0x0000429c bne  0x00000000 , 0x00004984 
+ 00019029  0x0000429d fetch  0x00000001 , 0x00000c71 
+ 00019030  0x0000429e bne  0x00000000 , 0x00004984 
+ 00019031  0x0000429f fetch  0x00000001 , 0x00000c73 
+ 00019032  0x000042a0 bne  0x00000000 , 0x00004984 
+ 00019033  0x000042a1 fetch  0x00000001 , 0x00000c6e 
+ 00019034  0x000042a2 beq  0x00000000 , 0x00004a5e 
+ 00019035  0x000042a3 beq  0x00000001 , 0x00004a66 
+ 00019036  0x000042a4 beq  0x00000002 , 0x00004a67 
+ 00019037  0x000042a5 branch  0x00004984 
+ 00019038  0x000042a8 fetch  0x00000001 , 0x00000c70 
+ 00019039  0x000042a9 bne  0x00000001 , 0x00004984 
+ 00019040  0x000042aa hfetch  0x00000001 , 0x00008a00 
+ 00019041  0x000042ab set0  0x00000007 , 0x0000003f 
+ 00019042  0x000042ac hstore  0x00000001 , 0x00008a00 
+ 00019043  0x000042ad jam  0x00000000 , 0x00000d39 
+ 00019044  0x000042ae jam  0x00000001 , 0x00000d3a 
+ 00019045  0x000042af branch  0x00004988 
+ 00019046  0x000042b2 branch  0x00004984 
+ 00019047  0x000042b5 fetch  0x00000001 , 0x00000c70 
+ 00019048  0x000042b6 bne  0x00000000 , 0x00004984 
+ 00019049  0x000042b7 fetch  0x00000001 , 0x00000c72 
+ 00019050  0x000042b8 beq  0x00000081 , 0x00004a72 
+ 00019051  0x000042b9 beq  0x00000082 , 0x00004a75 
+ 00019052  0x000042ba beq  0x00000083 , 0x00004a77 
+ 00019053  0x000042bb and_into  0x0000007f , 0x0000003f 
+ 00019054  0x000042bc beq  0x00000000 , 0x00004a70 
+ 00019055  0x000042bd branch  0x00004984 
+ 00019056  0x000042c0 jam  0x00000000 , 0x00000d3b 
+ 00019057  0x000042c1 branch  0x00004988 
+ 00019058  0x000042c3 jam  0x00000000 , 0x00000d3c 
+ 00019059  0x000042c5 jam  0x00000001 , 0x00000d53 
+ 00019060  0x000042c6 branch  0x00004988 
+ 00019061  0x000042c8 jam  0x00000000 , 0x00000d3d 
+ 00019062  0x000042c9 branch  0x00004a73 
+ 00019063  0x000042cb jam  0x00000000 , 0x00000d3e 
+ 00019064  0x000042cc branch  0x00004a73 
+ 00019065  0x000042d0 fetch  0x00000001 , 0x00000c74 
+ 00019066  0x000042d1 bne  0x00000000 , 0x00004984 
+ 00019067  0x000042d2 fetch  0x00000001 , 0x00000c75 
+ 00019068  0x000042d3 bne  0x00000000 , 0x00004984 
+ 00019069  0x000042d4 fetch  0x00000001 , 0x00000c6e 
+ 00019070  0x000042d5 beq  0x00000000 , 0x00004a82 
+ 00019071  0x000042d6 beq  0x00000001 , 0x00004a8f 
+ 00019072  0x000042d7 beq  0x00000002 , 0x00004a90 
+ 00019073  0x000042d8 branch  0x00004984 
+ 00019074  0x000042db fetch  0x00000001 , 0x00000c70 
+ 00019075  0x000042dc bne  0x00000001 , 0x00004984 
+ 00019076  0x000042dd hfetch  0x00000001 , 0x00008a00 
+ 00019077  0x000042de set1  0x00000007 , 0x0000003f 
+ 00019078  0x000042df hstore  0x00000001 , 0x00008a00 
+ 00019079  0x000042e0 jam  0x00000001 , 0x00000d39 
+ 00019080  0x000042e1 jam  0x00000003 , 0x00000d36 
+ 00019081  0x000042e2 jam  0x00000000 , 0x00000d43 
+ 00019082  0x000042e3 call  0x00004988 
+ 00019083  0x000042e5 call  0x00007f15 
+ 00019084  0x000042e6 setarg  0x00001388 
+ 00019085  0x000042e7 arg  0x0000000f , 0x00000007 
+ 00019086  0x000042e8 branch  0x00007f08 
+ 00019087  0x000042eb branch  0x00004984 
+ 00019088  0x000042ee fetch  0x00000001 , 0x00000c70 
+ 00019089  0x000042ef bne  0x00000000 , 0x00004984 
+ 00019090  0x000042f0 fetch  0x00000001 , 0x00000c71 
+ 00019091  0x000042f1 bne  0x00000000 , 0x00004984 
+ 00019092  0x000042f2 fetch  0x00000001 , 0x00000c72 
+ 00019093  0x000042f3 beq  0x00000081 , 0x00004a9d 
+ 00019094  0x000042f4 beq  0x00000082 , 0x00004a9f 
+ 00019095  0x000042f5 beq  0x00000083 , 0x00004aa1 
+ 00019096  0x000042f6 and_into  0x0000007f , 0x0000003f 
+ 00019097  0x000042f7 beq  0x00000000 , 0x00004a9b 
+ 00019098  0x000042f8 branch  0x00004984 
+ 00019099  0x000042fb jam  0x00000001 , 0x00000d3b 
+ 00019100  0x000042fc branch  0x00004988 
+ 00019101  0x000042fe jam  0x00000001 , 0x00000d3c 
+ 00019102  0x000042ff branch  0x00004988 
+ 00019103  0x00004301 jam  0x00000001 , 0x00000d3d 
+ 00019104  0x00004302 branch  0x00004988 
+ 00019105  0x00004304 jam  0x00000001 , 0x00000d3e 
+ 00019106  0x00004305 branch  0x00004988 
+ 00019107  0x00004309 fetch  0x00000001 , 0x00000c6e 
+ 00019108  0x0000430a bne  0x00000000 , 0x00004984 
+ 00019109  0x0000430b fetch  0x00000001 , 0x00000c72 
+ 00019110  0x0000430c bne  0x00000000 , 0x00004984 
+ 00019111  0x0000430d fetch  0x00000001 , 0x00000c73 
+ 00019112  0x0000430e bne  0x00000000 , 0x00004984 
+ 00019113  0x0000430f fetch  0x00000001 , 0x00000c74 
+ 00019114  0x00004310 bne  0x00000000 , 0x00004984 
+ 00019115  0x00004311 fetch  0x00000001 , 0x00000c75 
+ 00019116  0x00004312 bne  0x00000000 , 0x00004984 
+ 00019117  0x00004313 fetch  0x00000001 , 0x00000c71 
+ 00019118  0x00004314 bne  0x00000000 , 0x00004984 
+ 00019119  0x00004315 fetch  0x00000001 , 0x00000c70 
+ 00019120  0x00004316 and_into  0x00000080 , 0x0000003f 
+ 00019121  0x00004317 bne  0x00000000 , 0x00004984 
+ 00019122  0x00004318 fetch  0x00000001 , 0x00000c70 
+ 00019123  0x00004319 bne  0x00000000 , 0x00004aba 
+ 00019124  0x0000431b jam  0x00000002 , 0x00000c6b 
+ 00019125  0x0000431d fetch  0x00000001 , 0x00000c70 
+ 00019126  0x0000431e hstore  0x00000001 , 0x00008a04 
+ 00019127  0x0000431f call  0x00004988 
+ 00019128  0x00004320 jam  0x00000001 , 0x00000d48 
+ 00019129  0x00004321 rtn 
+ 00019130  0x00004323 jam  0x00000003 , 0x00000c6b 
+ 00019131  0x00004324 branch  0x00004ab5 
+ 00019132  0x00004328 fetch  0x00000001 , 0x00000c6b 
+ 00019133  0x00004329 beq  0x00000002 , 0x00004984 
+ 00019134  0x0000432a fetch  0x00000001 , 0x00000c6e 
+ 00019135  0x0000432b bne  0x00000000 , 0x00004984 
+ 00019136  0x0000432c fetch  0x00000001 , 0x00000c72 
+ 00019137  0x0000432d bne  0x00000000 , 0x00004984 
+ 00019138  0x0000432e fetch  0x00000001 , 0x00000c73 
+ 00019139  0x0000432f bne  0x00000000 , 0x00004984 
+ 00019140  0x00004330 fetch  0x00000001 , 0x00000c74 
+ 00019141  0x00004331 bne  0x00000000 , 0x00004984 
+ 00019142  0x00004332 fetch  0x00000001 , 0x00000c75 
+ 00019143  0x00004333 bne  0x00000000 , 0x00004984 
+ 00019144  0x00004334 fetch  0x00000001 , 0x00000c71 
+ 00019145  0x00004335 bne  0x00000000 , 0x00004984 
+ 00019146  0x00004336 fetch  0x00000001 , 0x00000c70 
+ 00019147  0x00004337 sub  0x0000003f , 0x00000001 , 0x0000003e 
+ 00019148  0x00004338 nbranch  0x00004984 , 0x00000002 
+ 00019149  0x00004339 fetch  0x00000001 , 0x00000c6b 
+ 00019150  0x0000433a beq  0x00000003 , 0x00004ad1 
+ 00019151  0x0000433b beq  0x00000004 , 0x00004ad1 
+ 00019152  0x0000433c branch  0x00004984 
+ 00019153  0x00004340 fetch  0x00000001 , 0x00000c70 
+ 00019154  0x00004341 beq  0x00000000 , 0x00004ad5 
+ 00019155  0x00004342 jam  0x00000004 , 0x00000c6b 
+ 00019156  0x00004343 branch  0x00004988 
+ 00019157  0x00004345 jam  0x00000003 , 0x00000c6b 
+ 00019158  0x00004346 branch  0x00004988 
+ 00019159  0x0000434a fetch  0x00000001 , 0x00000c6b 
+ 00019160  0x0000434b bne  0x00000004 , 0x00004984 
+ 00019161  0x0000434c fetch  0x00000001 , 0x00000c6e 
+ 00019162  0x0000434d bne  0x00000001 , 0x00004984 
+ 00019163  0x0000434e fetch  0x00000001 , 0x00000c70 
+ 00019164  0x0000434f bne  0x00000000 , 0x00004984 
+ 00019165  0x00004350 fetch  0x00000001 , 0x00000c71 
+ 00019166  0x00004351 bne  0x00000000 , 0x00004984 
+ 00019167  0x00004352 fetch  0x00000001 , 0x00000c74 
+ 00019168  0x00004353 bne  0x00000000 , 0x00004984 
+ 00019169  0x00004354 fetch  0x00000001 , 0x00000c75 
+ 00019170  0x00004355 bne  0x00000000 , 0x00004984 
+ 00019171  0x00004356 fetch  0x00000001 , 0x00000c72 
+ 00019172  0x00004357 bne  0x00000000 , 0x00004984 
+ 00019173  0x00004358 fetch  0x00000001 , 0x00000c73 
+ 00019174  0x00004359 bne  0x00000000 , 0x00004984 
+ 00019175  0x0000435a branch  0x00004988 
+ 00019176  0x0000435e jam  0x00000001 , 0x00000d4c 
+ 00019177  0x0000435f fetch  0x00000001 , 0x00000c71 
+ 00019178  0x00004360 store  0x00000001 , 0x00000d4d 
+ 00019179  0x00004361 fetch  0x00000001 , 0x00000c72 
+ 00019180  0x00004362 sub  0x0000003f , 0x00000001 , 0x0000003e 
+ 00019181  0x00004363 call  0x00004af5 , 0x00000005 
+ 00019182  0x00004364 fetch  0x00000001 , 0x00000d36 
+ 00019183  0x00004365 bne  0x00000004 , 0x00004988 
+ 00019184  0x00004366 jam  0x00000002 , 0x00000d36 
+ 00019185  0x00004367 call  0x00004988 
+ 00019186  0x00004368 nop  0x00007530 
+ 00019187  0x00004369 nop  0x00007530 
+ 00019188  0x0000436a rtn 
+ 00019189  0x0000436c jam  0x00000001 , 0x00000d45 
+ 00019190  0x0000436d jam  0x00000000 , 0x00000d3a 
+ 00019191  0x0000436e jam  0x00000004 , 0x00000d36 
+ 00019192  0x0000436f rtn 
+ 00019193  0x00004373 jam  0x00000001 , 0x00000d50 
+ 00019194  0x00004374 call  0x00004b03 
+ 00019195  0x00004375 fetch  0x00000002 , 0x00000c70 
+ 00019196  0x00004376 store  0x00000002 , 0x00000d4e 
+ 00019197  0x00004377 fetch  0x00000001 , 0x00000c74 
+ 00019198  0x00004378 iforce  0x00000039 
+ 00019199  0x00004379 arg  0x00000c76 , 0x00000006 
+ 00019200  0x0000437a arg  0x00000cb6 , 0x00000005 
+ 00019201  0x0000437b call  0x00007f01 
+ 00019202  0x0000437c branch  0x00004988 
+ 00019203  0x0000437f fetch  0x00000002 , 0x00000c70 
+ 00019204  0x00004380 arg  0x00000200 , 0x00000002 
+ 00019205  0x00004381 isub  0x00000002 , 0x0000003e 
+ 00019206  0x00004382 nrtn  0x00000005 
+ 00019207  0x00004383 fetch  0x00000002 , 0x00000c72 
+ 00019208  0x00004384 arg  0x00000000 , 0x00000002 
+ 00019209  0x00004385 isub  0x00000002 , 0x0000003e 
+ 00019210  0x00004386 nrtn  0x00000005 
+ 00019211  0x00004387 fetch  0x00000002 , 0x00000c74 
+ 00019212  0x00004388 arg  0x00000001 , 0x00000002 
+ 00019213  0x00004389 isub  0x00000002 , 0x0000003e 
+ 00019214  0x0000438a nrtn  0x00000005 
+ 00019215  0x0000438b jam  0x00000001 , 0x00000d43 
+ 00019216  0x0000438c rtn 
+ 00019217  0x00004390 fetch  0x00000001 , 0x00000c74 
+ 00019218  0x00004391 bne  0x00000000 , 0x00004984 
+ 00019219  0x00004392 fetch  0x00000001 , 0x00000c70 
+ 00019220  0x00004393 beq  0x00000000 , 0x00004b17 
+ 00019221  0x00004394 beq  0x00000001 , 0x00004b1a 
+ 00019222  0x00004395 branch  0x00004984 
+ 00019223  0x00004397 jam  0x00000000 , 0x00000d4a 
+ 00019224  0x00004398 jam  0x00000001 , 0x00000d49 
+ 00019225  0x00004399 branch  0x00004988 
+ 00019226  0x0000439b jam  0x00000001 , 0x00000d44 
+ 00019227  0x0000439c jam  0x00000001 , 0x00000d4a 
+ 00019228  0x0000439d jam  0x00000000 , 0x00000d49 
+ 00019229  0x0000439e branch  0x00004988 
+ 00019230  0x000043a2 ifetch  0x00000001 , 0x00000011 
+ 00019231  0x000043a3 iforce  0x00000012 
+ 00019232  0x000043a4 increase  0x00000001 , 0x00000011 
+ 00019233  0x000043a7 bpatch  0x000000fa , 0x0000401f 
+ 00019234  0x000043a8 bmark0  0x00000023 , 0x00004b2c 
+ 00019235  0x000043a9 add  0x00000012 , 0x00000001 , 0x0000003f 
+ 00019236  0x000043aa lshift  0x0000003f , 0x0000003f 
+ 00019237  0x000043ab hstore  0x00000001 , 0x00008a18 
+ 00019238  0x000043ac jam  0x00000003 , 0x00008a18 
+ 00019239  0x000043ad fetch  0x00000001 , 0x00000c74 
+ 00019240  0x000043ae increase  0xfffffffe , 0x0000003f 
+ 00019241  0x000043af rshift  0x0000003f , 0x0000003f 
+ 00019242  0x000043b0 store  0x00000001 , 0x00000c74 
+ 00019243  0x000043b1 beq  0x00000000 , 0x00004b35 
+ 00019244  0x000043b3 fetch  0x00000002 , 0x00000c74 
+ 00019245  0x000043b4 isub  0x00000012 , 0x0000003e 
+ 00019246  0x000043b5 branch  0x00004b30 , 0x00000002 
+ 00019247  0x000043b6 copy  0x0000003f , 0x00000012 
+ 00019248  0x000043b8 deposit  0x00000011 
+ 00019249  0x000043b9 store  0x00000002 , 0x00000b65 
+ 00019250  0x000043ba deposit  0x00000012 
+ 00019251  0x000043bb store  0x00000001 , 0x00000b67 
+ 00019252  0x000043bc branch  0x00004b37 
+ 00019253  0x000043bf arg  0x00000000 , 0x00000007 
+ 00019254  0x000043c0 branch  0x00004b57 
+ 00019255  0x000043c4 bpatch  0x000000fb , 0x0000401f 
+ 00019256  0x000043c5 fetch  0x00000001 , 0x00000b67 
+ 00019257  0x000043c6 rtn  0x00000034 
+ 00019258  0x000043c7 copy  0x0000003f , 0x00000039 
+ 00019259  0x000043c8 sub  0x0000003f , 0x00000040 , 0x0000003e 
+ 00019260  0x000043c9 branch  0x00004b3e , 0x00000002 
+ 00019261  0x000043ca arg  0x00000040 , 0x00000039 
+ 00019262  0x000043cc fetch  0x00000001 , 0x00000b67 
+ 00019263  0x000043cd isub  0x00000039 , 0x0000003f 
+ 00019264  0x000043ce store  0x00000001 , 0x00000b67 
+ 00019265  0x000043cf fetch  0x00000002 , 0x00000b65 
+ 00019266  0x000043d0 copy  0x0000003f , 0x00000006 
+ 00019267  0x000043d2 ifetch  0x00000001 , 0x00000006 
+ 00019268  0x000043d3 hstore  0x00000001 , 0x00008a18 
+ 00019269  0x000043d4 bmark0  0x00000023 , 0x00004b47 
+ 00019270  0x000043d5 jam  0x00000000 , 0x00008a18 
+ 00019271  0x000043d7 loop  0x00004b43 
+ 00019272  0x000043d8 copy  0x00000006 , 0x0000003f 
+ 00019273  0x000043d9 store  0x00000002 , 0x00000b65 
+ 00019274  0x000043da arg  0x00000000 , 0x00000007 
+ 00019275  0x000043db call  0x00004b57 
+ 00019276  0x000043dc fetch  0x00000001 , 0x00000b67 
+ 00019277  0x000043dd nrtn  0x00000034 
+ 00019278  0x000043de fetch  0x00000001 , 0x00000d36 
+ 00019279  0x000043df rtnne  0x00000001 
+ 00019280  0x000043e0 jam  0x00000002 , 0x00000d36 
+ 00019281  0x000043e1 rtn 
+ 00019282  0x000043e5 arg  0x00008a19 , 0x00000011 
+ 00019283  0x000043e6 arg  0x00000001 , 0x00000007 
+ 00019284  0x000043e8 ifetch  0x00000001 , 0x00000006 
+ 00019285  0x000043e9 istore  0x00000001 , 0x00000011 
+ 00019286  0x000043ea loop  0x00004b54 
+ 00019287  0x000043ec setarg  0x00000000 
+ 00019288  0x000043ed qset1  0x0000003f 
+ 00019289  0x000043ee hstore  0x00000001 , 0x00008a10 
+ 00019290  0x000043ef fetcht  0x00000001 , 0x00000d37 
+ 00019291  0x000043f0 ior  0x00000002 , 0x0000003f 
+ 00019292  0x000043f1 store  0x00000001 , 0x00000d37 
+ 00019293  0x000043f2 rtn 
+ 00019294  0x000043f5 arg  0x00000002 , 0x00000007 
+ 00019295  0x000043f6 arg  0x00008a1a , 0x00000011 
+ 00019296  0x000043f7 branch  0x00004b54 
+ 00019297  0x000043fa bpatch  0x000000fc , 0x0000401f 
+ 00019298  0x000043fb fetch  0x00000001 , 0x00000d38 
+ 00019299  0x000043fc rtn  0x00000034 
+ 00019300  0x000043fd fetch  0x00000001 , 0x00000d37 
+ 00019301  0x000043fe nbranch  0x00004bac , 0x00000034 
+ 00019302  0x000043ff fetch  0x00000001 , 0x00000d45 
+ 00019303  0x00004400 branch  0x00004b86 , 0x00000034 
+ 00019304  0x00004401 fetch  0x00000001 , 0x00000d36 
+ 00019305  0x00004402 beq  0x00000003 , 0x00004bbf 
+ 00019306  0x00004403 bne  0x00000002 , 0x00004b86 
+ 00019307  0x00004404 fetch  0x00000001 , 0x00000d3a 
+ 00019308  0x00004405 nbranch  0x00004b86 , 0x00000034 
+ 00019309  0x00004406 call  0x00004b6f 
+ 00019310  0x00004407 branch  0x00004b7a 
+ 00019311  0x0000440a fetch  0x00000001 , 0x00000d38 
+ 00019312  0x0000440b rtnbit0  0x00000001 
+ 00019313  0x0000440c fetch  0x00000001 , 0x00000d37 
+ 00019314  0x0000440d rtnbit1  0x00000001 
+ 00019315  0x0000440e fetch  0x00000001 , 0x00000d38 
+ 00019316  0x0000440f set0  0x00000001 , 0x0000003f 
+ 00019317  0x00004410 store  0x00000001 , 0x00000d38 
+ 00019318  0x00004411 fetch  0x00000001 , 0x00000d51 
+ 00019319  0x00004412 rtn  0x00000034 
+ 00019320  0x00004413 beq  0x00000010 , 0x00004ba8 
+ 00019321  0x00004414 branch  0x00002a8c 
+ 00019322  0x00004417 fetch  0x00000001 , 0x00000d38 
+ 00019323  0x00004418 rtnbit0  0x00000002 
+ 00019324  0x00004419 fetch  0x00000001 , 0x00000d37 
+ 00019325  0x0000441a rtnbit1  0x00000002 
+ 00019326  0x0000441b fetch  0x00000001 , 0x00000d38 
+ 00019327  0x0000441c set0  0x00000002 , 0x0000003f 
+ 00019328  0x0000441d store  0x00000001 , 0x00000d38 
+ 00019329  0x0000441e fetch  0x00000001 , 0x00000d52 
+ 00019330  0x0000441f rtn  0x00000034 
+ 00019331  0x00004420 beq  0x00000020 , 0x00004b89 
+ 00019332  0x00004421 beq  0x00000021 , 0x00004ba4 
+ 00019333  0x00004422 branch  0x00002a8c 
+ 00019334  0x00004426 arg  0x00000d54 , 0x00000005 
+ 00019335  0x00004427 arg  0x00000006 , 0x00000039 
+ 00019336  0x00004428 branch  0x00007ec6 
+ 00019337  0x0000442b fetch  0x00000001 , 0x00000d4c 
+ 00019338  0x0000442c fetcht  0x00000001 , 0x00000d4b 
+ 00019339  0x0000442d iand  0x00000002 , 0x0000003f 
+ 00019340  0x0000442e branch  0x00004ba0 , 0x00000034 
+ 00019341  0x0000442f fetcht  0x00000001 , 0x00000d4a 
+ 00019342  0x00004430 iadd  0x00000002 , 0x0000003f 
+ 00019343  0x00004431 beq  0x00000001 , 0x00004b91 
+ 00019344  0x00004432 branch  0x00004ba0 
+ 00019345  0x00004435 jam  0x00000000 , 0x00000d52 
+ 00019346  0x00004437 fetch  0x00000001 , 0x00000d55 
+ 00019347  0x00004438 beq  0x00000002 , 0x00004ba1 
+ 00019348  0x00004439 beq  0x00000003 , 0x00004ba1 
+ 00019349  0x0000443a fetch  0x00000001 , 0x00000d55 
+ 00019350  0x0000443b store  0x00000001 , 0x00000d54 
+ 00019351  0x0000443c fetch  0x00000001 , 0x00000d56 
+ 00019352  0x0000443d istore  0x00000001 , 0x00000005 
+ 00019353  0x0000443e fetch  0x00000001 , 0x00000d58 
+ 00019354  0x0000443f istore  0x00000001 , 0x00000005 
+ 00019355  0x00004440 fetch  0x00000001 , 0x00000d5a 
+ 00019356  0x00004441 istore  0x00000001 , 0x00000005 
+ 00019357  0x00004442 arg  0x00000004 , 0x00000039 
+ 00019358  0x00004443 arg  0x00000d54 , 0x00000006 
+ 00019359  0x00004444 branch  0x00004b5e 
+ 00019360  0x00004447 jam  0x00000000 , 0x00000d52 
+ 00019361  0x00004449 arg  0x00000008 , 0x00000039 
+ 00019362  0x0000444a arg  0x00000d54 , 0x00000006 
+ 00019363  0x0000444b branch  0x00004b5e 
+ 00019364  0x0000444e jam  0x00000000 , 0x00000d52 
+ 00019365  0x0000444f arg  0x00000003 , 0x00000039 
+ 00019366  0x00004450 arg  0x00000d74 , 0x00000006 
+ 00019367  0x00004451 branch  0x00004b5e 
+ 00019368  0x00004454 jam  0x00000000 , 0x00000d51 
+ 00019369  0x00004455 arg  0x00000008 , 0x00000039 
+ 00019370  0x00004456 arg  0x00000d64 , 0x00000006 
+ 00019371  0x00004457 branch  0x00004b52 
+ 00019372  0x0000445a fetch  0x00000001 , 0x00000d36 
+ 00019373  0x0000445b beq  0x00000003 , 0x00004bb0 
+ 00019374  0x0000445c beq  0x00000002 , 0x00004bb2 
+ 00019375  0x0000445d rtn 
+ 00019376  0x0000445f jam  0x00000000 , 0x00000d37 
+ 00019377  0x00004460 rtn 
+ 00019378  0x00004462 hfetch  0x00000001 , 0x00008a00 
+ 00019379  0x00004463 set1  0x00000007 , 0x0000003f 
+ 00019380  0x00004464 hstore  0x00000001 , 0x00008a00 
+ 00019381  0x00004465 jam  0x00000001 , 0x00000d47 
+ 00019382  0x00004466 rtn 
+ 00019383  0x00004469 fetch  0x00000001 , 0x00000d36 
+ 00019384  0x0000446a rtneq  0x00000003 
+ 00019385  0x0000446b beq  0x00000002 , 0x00004bbb 
+ 00019386  0x0000446c rtn 
+ 00019387  0x0000446e fetch  0x00000001 , 0x00000d47 
+ 00019388  0x0000446f rtn  0x00000034 
+ 00019389  0x00004470 jam  0x00000001 , 0x00000d46 
+ 00019390  0x00004471 branch  0x00004bc2 
+ 00019391  0x00004474 arg  0x0000000f , 0x00000007 
+ 00019392  0x00004475 call  0x00007f16 
+ 00019393  0x00004476 nrtn  0x00000034 
+ 00019394  0x00004478 hfetch  0x00000001 , 0x00008a00 
+ 00019395  0x00004479 rtnbit0  0x00000007 
+ 00019396  0x0000447a jam  0x000000fc , 0x00008a00 
+ 00019397  0x0000447b nop  0x00007530 
+ 00019398  0x0000447c jam  0x0000003c , 0x00008a00 
+ 00019399  0x0000447d rtn 
+ 00019400  0x00004485 bpatch  0x000000fd , 0x0000401f 
+ 00019401  0x00004486 fetch  0x00000001 , 0x000041ce 
+ 00019402  0x00004487 nrtn  0x00000034 
+ 00019403  0x00004489 call  0x00004bce 
+ 00019404  0x0000448a ncall  0x00004be6 , 0x00000028 
+ 00019405  0x0000448b rtn 
+ 00019406  0x0000448e bpatch  0x000000fe , 0x0000401f 
+ 00019407  0x0000448f copy  0x00000003 , 0x00000011 
+ 00019408  0x00004490 arg  0x00000004 , 0x00000002 
+ 00019409  0x00004491 ifetch  0x00000001 , 0x00000003 
+ 00019410  0x00004492 beq  0x00000001 , 0x00004bd8 
+ 00019411  0x00004493 increase  0x00000001 , 0x00000002 
+ 00019412  0x00004494 beq  0x00000002 , 0x00004bd8 
+ 00019413  0x00004495 copy  0x00000003 , 0x0000003f 
+ 00019414  0x00004496 hstore  0x00000002 , 0x00008058 
+ 00019415  0x00004497 rtn 
+ 00019416  0x00004499 hfetch  0x00000002 , 0x00008112 
+ 00019417  0x0000449a isub  0x00000002 , 0x0000003e 
+ 00019418  0x0000449b nbranch  0x00004bd8 , 0x00000002 
+ 00019419  0x0000449d disable  0x00000028 
+ 00019420  0x0000449e copy  0x00000011 , 0x00000003 
+ 00019421  0x0000449f call  0x00004bee 
+ 00019422  0x000044a0 iadd  0x00000002 , 0x00000002 
+ 00019423  0x000044a2 hfetch  0x00000002 , 0x00008112 
+ 00019424  0x000044a3 isub  0x00000002 , 0x0000003e 
+ 00019425  0x000044a4 nbranch  0x00004bdf , 0x00000002 
+ 00019426  0x000044a5 copy  0x00000011 , 0x00000003 
+ 00019427  0x000044a6 ifetch  0x00000001 , 0x00000003 
+ 00019428  0x000044a7 beq  0x00000001 , 0x00004c3f 
+ 00019429  0x000044a8 branch  0x00002a8c 
+ 00019430  0x000044ab bpatch  0x000000ff , 0x0000401f 
+ 00019431  0x000044ac hfetch  0x00000002 , 0x00008058 
+ 00019432  0x000044ad iforce  0x00000003 
+ 00019433  0x000044ae call  0x00004bee 
+ 00019434  0x000044af iadd  0x00000003 , 0x00000003 
+ 00019435  0x000044b0 deposit  0x00000003 
+ 00019436  0x000044b1 hstore  0x00000002 , 0x00008058 
+ 00019437  0x000044b2 rtn 
+ 00019438  0x000044b8 ifetch  0x00000001 , 0x00000003 
+ 00019439  0x000044b9 increase  0x00000002 , 0x00000003 
+ 00019440  0x000044ba beq  0x00000002 , 0x00004bf3 
+ 00019441  0x000044bb ifetch  0x00000001 , 0x00000003 
+ 00019442  0x000044bc rtn 
+ 00019443  0x000044be ifetch  0x00000002 , 0x00000003 
+ 00019444  0x000044bf rtn 
+ 00019445  0x000044c2 hfetch  0x00000002 , 0x0000805e 
+ 00019446  0x000044c3 increase  0xfffffffb , 0x0000000a 
+ 00019447  0x000044c4 iadd  0x0000000a , 0x0000000a 
+ 00019448  0x000044c5 rtn 
+ 00019449  0x000044c8 arg  0x00000004 , 0x00000002 
+ 00019450  0x000044c9 branch  0x00004bfc 
+ 00019451  0x000044cb arg  0x00000002 , 0x00000002 
+ 00019452  0x000044cd bpatchx  0x00000000 , 0x00004020 
+ 00019453  0x000044ce increase  0x00000001 , 0x00000039 
+ 00019454  0x000044cf hfetch  0x00000002 , 0x0000805e 
+ 00019455  0x000044d0 copy  0x0000003f , 0x0000000a 
+ 00019456  0x000044d1 copy  0x00000039 , 0x0000003f 
+ 00019457  0x000044d2 istoret  0x00000001 , 0x0000000a 
+ 00019458  0x000044d3 increase  0xffffffff , 0x0000003f 
+ 00019459  0x000044d4 iadd  0x0000000a , 0x0000000a 
+ 00019460  0x000044d5 copy  0x0000000a , 0x0000003f 
+ 00019461  0x000044d6 store  0x00000002 , 0x00000258 
+ 00019462  0x000044d7 copy  0x00000002 , 0x0000003f 
+ 00019463  0x000044d8 rtneq  0x00000002 
+ 00019464  0x000044d9 fetch  0x00000002 , 0x00000258 
+ 00019465  0x000044da hstore  0x00000002 , 0x0000805e 
+ 00019466  0x000044db branch  0x00004c0b 
+ 00019467  0x000044df setarg  0x00000000 
+ 00019468  0x000044e0 store  0x00000002 , 0x00000258 
+ 00019469  0x000044e1 rtn 
+ 00019470  0x000044e9 rtn  0x0000002b 
+ 00019471  0x000044ea setarg  0x00004d28 
+ 00019472  0x000044eb store  0x00000002 , 0x000041f3 
+ 00019473  0x000044ed setarg  0x000001a0 
+ 00019474  0x000044ee store  0x00000002 , 0x00004243 
+ 00019475  0x000044f0 setarg  0x00001800 
+ 00019476  0x000044f1 hstore  0x00000002 , 0x00008054 
+ 00019477  0x000044f2 setarg  0x00001bff 
+ 00019478  0x000044f3 hstore  0x00000002 , 0x00008056 
+ 00019479  0x000044f4 setarg  0x00001c00 
+ 00019480  0x000044f5 hstore  0x00000002 , 0x0000805a 
+ 00019481  0x000044f6 call  0x00004c28 
+ 00019482  0x000044f8 jam  0x00000000 , 0x00008062 
+ 00019483  0x000044f9 setarg  0x00001c00 
+ 00019484  0x000044fa hstore  0x00000002 , 0x0000805e 
+ 00019485  0x000044fb hstore  0x00000002 , 0x00008060 
+ 00019486  0x000044fc setarg  0x00001800 
+ 00019487  0x000044fd hstore  0x00000002 , 0x00008058 
+ 00019488  0x000044fe store  0x00000002 , 0x00000244 
+ 00019489  0x00004500 hfetch  0x00000002 , 0x00008050 
+ 00019490  0x00004501 set0  0x0000000f , 0x0000003f 
+ 00019491  0x00004502 hstore  0x00000002 , 0x00008050 
+ 00019492  0x00004503 call  0x000066ce 
+ 00019493  0x00004504 jam  0x00000001 , 0x00008043 
+ 00019494  0x00004505 jam  0x00000081 , 0x00008062 
+ 00019495  0x00004506 rtn 
+ 00019496  0x00004509 setarg  0x00001fff 
+ 00019497  0x0000450a hstore  0x00000002 , 0x0000805c 
+ 00019498  0x0000450b hfetch  0x00000001 , 0x00008081 
+ 00019499  0x0000450c or_into  0x00000007 , 0x0000003f 
+ 00019500  0x0000450d hstore  0x00000001 , 0x00008081 
+ 00019501  0x0000450e rtn 
+ 00019502  0x00004512 bpatchx  0x00000001 , 0x00004020 
+ 00019503  0x00004513 hfetch  0x00000001 , 0x0000810c 
+ 00019504  0x00004514 iforce  0x00000012 
+ 00019505  0x00004515 bbit0  0x00000003 , 0x00004c37 
+ 00019506  0x00004516 hfetch  0x00000002 , 0x00008112 
+ 00019507  0x00004517 iforce  0x00000013 
+ 00019508  0x00004518 arg  0x0000044f , 0x00000002 
+ 00019509  0x00004519 isub  0x00000002 , 0x0000003e 
+ 00019510  0x0000451a nrtn  0x00000005 
+ 00019511  0x0000451c hfetch  0x00000002 , 0x00008058 
+ 00019512  0x0000451d iforce  0x00000003 
+ 00019513  0x0000451e branch  0x00004bc8 
+ 00019514  0x00004521 hfetcht  0x00000001 , 0x0000810c 
+ 00019515  0x00004522 isolate1  0x00000006 , 0x00000002 
+ 00019516  0x00004523 branch  0x00004c3a , 0x00000001 
+ 00019517  0x00004524 hstore  0x00000001 , 0x00008015 
+ 00019518  0x00004525 rtn 
+ 00019519  0x00004528 bpatchx  0x00000002 , 0x00004020 
+ 00019520  0x00004529 fetch  0x00000001 , 0x000041ce 
+ 00019521  0x0000452a branch  0x00004c44 , 0x00000034 
+ 00019522  0x0000452b enable  0x00000028 
+ 00019523  0x0000452c rtn 
+ 00019524  0x0000452e ifetch  0x00000002 , 0x00000003 
+ 00019525  0x0000452f iforce  0x00000030 
+ 00019526  0x00004530 iforce  0x00000007 
+ 00019527  0x00004531 ifetch  0x00000001 , 0x00000003 
+ 00019528  0x00004532 iforce  0x00000002 
+ 00019529  0x00004533 rshift2  0x00000030 , 0x0000003f 
+ 00019530  0x00004534 rshift8  0x0000003f , 0x0000003f 
+ 00019531  0x00004535 beq  0x0000003f , 0x00004c4d 
+ 00019532  0x00004536 rtn 
+ 00019533  0x0000453a bpatchx  0x00000003 , 0x00004020 
+ 00019534  0x0000453b deposit  0x00000007 
+ 00019535  0x0000453c beq  0x00000000 , 0x00004cdc 
+ 00019536  0x0000453d beq  0x00000001 , 0x00004c66 
+ 00019537  0x0000453e beq  0x00000002 , 0x00004c6b 
+ 00019538  0x0000453f beq  0x00000003 , 0x00004c7a 
+ 00019539  0x00004540 beq  0x00000004 , 0x00004cb3 
+ 00019540  0x00004541 beq  0x00000005 , 0x00004cdc 
+ 00019541  0x00004542 beq  0x00000006 , 0x00004cc6 
+ 00019542  0x00004543 beq  0x00000007 , 0x00004c5c 
+ 00019543  0x00004545 beq  0x00000010 , 0x00004cc9 
+ 00019544  0x00004546 beq  0x00000011 , 0x00004cd1 
+ 00019545  0x00004547 beq  0x00000012 , 0x00004ca5 
+ 00019546  0x00004548 beq  0x00000013 , 0x00004c85 
+ 00019547  0x00004549 branch  0x00004cdc 
+ 00019548  0x0000454c call  0x00004cdc 
+ 00019549  0x0000454d call  0x00007f9e 
+ 00019550  0x0000454e call  0x0000688c 
+ 00019551  0x00004550 call  0x000033d2 
+ 00019552  0x00004551 call  0x000033d9 
+ 00019553  0x00004552 branch  0x0000688f 
+ 00019554  0x00004555 jam  0x00000000 , 0x00004245 
+ 00019555  0x00004556 call  0x000033d0 
+ 00019556  0x00004557 call  0x00004c13 
+ 00019557  0x00004558 branch  0x000033db 
+ 00019558  0x0000455b call  0x00004cf2 
+ 00019559  0x0000455c hfetch  0x00000002 , 0x00008000 
+ 00019560  0x0000455d istore  0x00000002 , 0x0000000a 
+ 00019561  0x0000455e force  0x00000006 , 0x00000039 
+ 00019562  0x0000455f branch  0x00004cdd 
+ 00019563  0x00004562 ifetch  0x00000002 , 0x00000003 
+ 00019564  0x00004563 store  0x00000002 , 0x00004243 
+ 00019565  0x00004564 hstore  0x00000002 , 0x00008052 
+ 00019566  0x00004565 rtn 
+ 00019567  0x0000456a ifetch  0x00000001 , 0x00000003 
+ 00019568  0x0000456b copy  0x0000003f , 0x00000002 
+ 00019569  0x0000456c hstore  0x00000001 , 0x00008024 
+ 00019570  0x0000456d ifetch  0x00000001 , 0x00000003 
+ 00019571  0x0000456e iadd  0x00000002 , 0x00000002 
+ 00019572  0x0000456f set1  0x00000007 , 0x0000003f 
+ 00019573  0x00004570 hstore  0x00000001 , 0x00008023 
+ 00019574  0x00004571 ifetch  0x00000001 , 0x00000003 
+ 00019575  0x00004572 iadd  0x00000002 , 0x00000002 
+ 00019576  0x00004573 copy  0x0000003f , 0x00000039 
+ 00019577  0x00004574 rtn 
+ 00019578  0x00004577 bmark1  0x0000002b , 0x00004cc4 
+ 00019579  0x00004578 call  0x00004c6f 
+ 00019580  0x0000457a ifetch  0x00000001 , 0x00000003 
+ 00019581  0x0000457b hstore  0x00000001 , 0x00008025 
+ 00019582  0x0000457c iadd  0x00000002 , 0x00000002 
+ 00019583  0x0000457d loop  0x00004c7c 
+ 00019584  0x0000457f and  0x00000002 , 0x000000ff , 0x00000002 
+ 00019585  0x00004580 ifetch  0x00000001 , 0x00000003 
+ 00019586  0x00004581 isub  0x00000002 , 0x0000003e 
+ 00019587  0x00004582 nbranch  0x00004cc4 , 0x00000005 
+ 00019588  0x00004583 branch  0x00004cdc 
+ 00019589  0x00004587 bmark0  0x0000002b , 0x00004cc4 
+ 00019590  0x00004588 call  0x00004c6f 
+ 00019591  0x00004589 store  0x00000008 , 0x00000a9a 
+ 00019592  0x0000458b call  0x00007422 
+ 00019593  0x0000458c arg  0x00000010 , 0x00000039 
+ 00019594  0x0000458d arg  0x00000ac2 , 0x00000005 
+ 00019595  0x0000458e call  0x00004ca0 
+ 00019596  0x0000458f storet  0x00000008 , 0x00000aa2 
+ 00019597  0x00004590 arg  0x00000ad2 , 0x00000005 
+ 00019598  0x00004591 call  0x00007497 
+ 00019599  0x00004592 arg  0x00000ad2 , 0x00000011 
+ 00019600  0x00004593 arg  0x00000ac2 , 0x00000012 
+ 00019601  0x00004594 arg  0x00000ae2 , 0x00000005 
+ 00019602  0x00004595 call  0x00007352 
+ 00019603  0x00004596 arg  0x00000010 , 0x00000039 
+ 00019604  0x00004597 arg  0x00000ae2 , 0x00000006 
+ 00019605  0x00004598 call  0x00004c9c 
+ 00019606  0x00004599 fetcht  0x00000008 , 0x00000aa2 
+ 00019607  0x0000459a fetch  0x00000008 , 0x00000a9a 
+ 00019608  0x0000459b increase  0xfffffff0 , 0x0000003f 
+ 00019609  0x0000459c store  0x00000008 , 0x00000a9a 
+ 00019610  0x0000459d nbranch  0x00004c88 , 0x00000034 
+ 00019611  0x0000459e branch  0x00004c80 
+ 00019612  0x000045a1 ifetch  0x00000001 , 0x00000006 
+ 00019613  0x000045a2 hstore  0x00000001 , 0x00008025 
+ 00019614  0x000045a3 loop  0x00004c9c 
+ 00019615  0x000045a4 rtn 
+ 00019616  0x000045a7 ifetch  0x00000001 , 0x00000003 
+ 00019617  0x000045a8 istore  0x00000001 , 0x00000005 
+ 00019618  0x000045a9 iadd  0x00000002 , 0x00000002 
+ 00019619  0x000045aa loop  0x00004ca0 
+ 00019620  0x000045ab rtn 
+ 00019621  0x000045ae bmark0  0x0000002b , 0x00004cc4 
+ 00019622  0x000045af arg  0x00000000 , 0x00000002 
+ 00019623  0x000045b0 arg  0x00000010 , 0x00000039 
+ 00019624  0x000045b1 arg  0x00000ac2 , 0x00000005 
+ 00019625  0x000045b2 call  0x00004ca0 
+ 00019626  0x000045b3 hfetch  0x00000001 , 0x00008085 
+ 00019627  0x000045b4 and_into  0x000000fd , 0x0000003f 
+ 00019628  0x000045b5 hstore  0x00000001 , 0x00008085 
+ 00019629  0x000045b6 arg  0x00000ac2 , 0x00000006 
+ 00019630  0x000045b7 arg  0x00000010 , 0x00000039 
+ 00019631  0x000045b8 call  0x00007478 
+ 00019632  0x000045b9 call  0x00007428 
+ 00019633  0x000045ba call  0x00007491 
+ 00019634  0x000045bb branch  0x00004c80 
+ 00019635  0x000045bf arg  0x00000020 , 0x00000039 
+ 00019636  0x000045c0 arg  0x00004000 , 0x00000005 
+ 00019637  0x000045c1 arg  0x00000000 , 0x00000002 
+ 00019638  0x000045c3 ifetch  0x00000001 , 0x00000003 
+ 00019639  0x000045c4 istore  0x00000001 , 0x00000005 
+ 00019640  0x000045c5 iadd  0x00000002 , 0x00000002 
+ 00019641  0x000045c6 loop  0x00004cb6 
+ 00019642  0x000045c7 and  0x00000002 , 0x000000ff , 0x00000002 
+ 00019643  0x000045c8 ifetch  0x00000001 , 0x00000003 
+ 00019644  0x000045c9 isub  0x00000002 , 0x0000003e 
+ 00019645  0x000045ca nbranch  0x00004cc4 , 0x00000005 
+ 00019646  0x000045cb jam  0x00000000 , 0x00008023 
+ 00019647  0x000045cc call  0x00004cdc 
+ 00019648  0x000045cd call  0x00004be6 
+ 00019649  0x000045ce call  0x000064a3 
+ 00019650  0x000045cf call  0x00007f9e 
+ 00019651  0x000045d0 branch  0x00002001 
+ 00019652  0x000045d3 jam  0x00000000 , 0x00008023 
+ 00019653  0x000045d4 branch  0x00002000 
+ 00019654  0x000045d7 ifetch  0x00000006 , 0x00000003 
+ 00019655  0x000045d8 store  0x00000006 , 0x000040a0 
+ 00019656  0x000045d9 branch  0x00004cdc 
+ 00019657  0x000045dd ifetch  0x00000001 , 0x00000003 
+ 00019658  0x000045de store  0x00000001 , 0x0000025a 
+ 00019659  0x000045df copy  0x0000003f , 0x00000039 
+ 00019660  0x000045e0 ifetch  0x00000002 , 0x00000003 
+ 00019661  0x000045e1 store  0x00000002 , 0x0000025b 
+ 00019662  0x000045e2 copy  0x0000003f , 0x00000005 
+ 00019663  0x000045e3 call  0x000066fd 
+ 00019664  0x000045e4 branch  0x00004cdc 
+ 00019665  0x000045e8 ifetch  0x00000001 , 0x00000003 
+ 00019666  0x000045e9 store  0x00000001 , 0x0000025a 
+ 00019667  0x000045ea copy  0x0000003f , 0x00000039 
+ 00019668  0x000045eb ifetch  0x00000002 , 0x00000003 
+ 00019669  0x000045ec store  0x00000002 , 0x0000025b 
+ 00019670  0x000045ed arg  0x00001000 , 0x00000005 
+ 00019671  0x000045ee call  0x000066fd 
+ 00019672  0x000045ef fetcht  0x00000001 , 0x0000025a 
+ 00019673  0x000045f0 arg  0x00001000 , 0x00000011 
+ 00019674  0x000045f1 fetch  0x00000002 , 0x0000025b 
+ 00019675  0x000045f2 branch  0x00006608 
+ 00019676  0x000045f8 force  0x00000004 , 0x00000039 
+ 00019677  0x000045fa call  0x00004cf4 
+ 00019678  0x000045fb force  0x00000001 , 0x0000003f 
+ 00019679  0x000045fc istore  0x00000001 , 0x0000000a 
+ 00019680  0x000045fd deposit  0x00000030 
+ 00019681  0x000045fe istore  0x00000003 , 0x0000000a 
+ 00019682  0x000045ff force  0x0000000e , 0x00000007 
+ 00019683  0x00004601 bpatchx  0x00000004 , 0x00004020 
+ 00019684  0x00004602 call  0x00004cf6 
+ 00019685  0x00004603 deposit  0x00000007 
+ 00019686  0x00004604 istore  0x00000001 , 0x0000000a 
+ 00019687  0x00004605 deposit  0x00000039 
+ 00019688  0x00004606 istore  0x00000001 , 0x0000000a 
+ 00019689  0x00004608 force  0x00000005 , 0x00000007 
+ 00019690  0x00004609 increase  0x00000002 , 0x00000039 
+ 00019691  0x0000460b branch  0x00004bf9 
+ 00019692  0x0000460e force  0x000000ff , 0x00000007 
+ 00019693  0x0000460f call  0x00004cf4 
+ 00019694  0x00004610 setarg  0x00000001 
+ 00019695  0x00004611 istore  0x00000001 , 0x0000000a 
+ 00019696  0x00004612 force  0x00000001 , 0x00000039 
+ 00019697  0x00004613 branch  0x00004ce3 
+ 00019698  0x00004616 force  0x0000000c , 0x0000000a 
+ 00019699  0x00004617 branch  0x00004cf7 
+ 00019700  0x0000461a force  0x00000008 , 0x0000000a 
+ 00019701  0x0000461b branch  0x00004cf7 
+ 00019702  0x0000461e force  0x00000006 , 0x0000000a 
+ 00019703  0x00004620 branch  0x00004bf5 
+ 00019704  0x00004625 pulse  0x0000000f 
+ 00019705  0x00004626 enable  0x00000009 
+ 00019706  0x00004628 ifetch  0x00000001 , 0x0000000a 
+ 00019707  0x00004629 inject  0x00000000 , 0x00000008 
+ 00019708  0x0000462a loop  0x00004cfa 
+ 00019709  0x0000462b enable  0x00000008 
+ 00019710  0x0000462c inject  0x00000000 , 0x00000010 
+ 00019711  0x0000462d disable  0x00000008 
+ 00019712  0x0000462e disable  0x00000009 
+ 00019713  0x0000462f disable  0x0000000f 
+ 00019714  0x00004630 byteswap  0x0000003f , 0x0000003f 
+ 00019715  0x00004631 rtn 
+ 00019716  0x00004636 jam  0x00000000 , 0x000041ce 
+ 00019717  0x00004637 rtn 
+ 00019718  0x00004639 fetch  0x00000006 , 0x000041d0 
+ 00019719  0x0000463a fetcht  0x00000006 , 0x00000040 
+ 00019720  0x0000463b isub  0x00000002 , 0x0000003e 
+ 00019721  0x0000463c rtn 
+ 00019722  0x00004642 fetch  0x00000001 , 0x0000004b 
+ 00019723  0x00004643 bbit1  0x00000002 , 0x00004d0f 
+ 00019724  0x00004644 call  0x000062ef 
+ 00019725  0x00004645 jam  0x00000008 , 0x0000007c 
+ 00019726  0x00004646 branch  0x00004d04 
+ 00019727  0x00004648 set0  0x00000002 , 0x0000003f 
+ 00019728  0x00004649 store  0x00000001 , 0x0000004b 
+ 00019729  0x0000464a call  0x00006001 
+ 00019730  0x0000464b setarg  0x00000000 
+ 00019731  0x0000464c setflag  0x00000029 , 0x00000001 , 0x0000003f 
+ 00019732  0x0000464d store  0x00000001 , 0x0000007f 
+ 00019733  0x0000464e branch  0x00004d04 
+ 00019734  0x0000464f rtn 
+ 00019735  0x00004651 jam  0x00000017 , 0x0000007c 
+ 00019736  0x00004652 arg  0x000004d9 , 0x00000005 
+ 00019737  0x00004653 setarg  0x00000000 
+ 00019738  0x00004654 isolate1  0x0000001b , 0x00000028 
+ 00019739  0x00004655 setflag  0x00000001 , 0x00000001 , 0x0000003f 
+ 00019740  0x00004656 istore  0x00000001 , 0x00000005 
+ 00019741  0x00004657 setarg  0x00000000 
+ 00019742  0x00004658 istore  0x00000002 , 0x00000005 
+ 00019743  0x00004659 fetch  0x00000002 , 0x000041e3 
+ 00019744  0x0000465a istore  0x00000002 , 0x00000005 
+ 00019745  0x0000465b fetch  0x00000001 , 0x000041e5 
+ 00019746  0x0000465c istore  0x00000002 , 0x00000005 
+ 00019747  0x0000465d fetch  0x00000001 , 0x000041e7 
+ 00019748  0x0000465e istore  0x00000002 , 0x00000005 
+ 00019749  0x0000465f branch  0x00004d04 
+ 00019750  0x00004662 jam  0x00000018 , 0x0000007c 
+ 00019751  0x00004663 branch  0x00004d04 
+ 00019752  0x00004666 call  0x00006899 
+ 00019753  0x00004667 rtn  0x00000001 
+ 00019754  0x00004668 arg  0x00000007 , 0x00000002 
+ 00019755  0x00004669 call  0x0000681d 
+ 00019756  0x0000466a nbranch  0x00004d2f , 0x00000001 
+ 00019757  0x0000466b jam  0x00000001 , 0x00004245 
+ 00019758  0x0000466c rtn 
+ 00019759  0x0000466e fetch  0x00000001 , 0x00004245 
+ 00019760  0x0000466f rtnne  0x00000001 
+ 00019761  0x00004670 call  0x00004c62 
+ 00019762  0x00004671 branch  0x00004cec 
+ 00019763  0x00004680 bpatchx  0x00000005 , 0x00004020 
+ 00019764  0x00004681 fetch  0x00000002 , 0x00000264 
+ 00019765  0x00004682 copy  0x0000003f , 0x00000006 
+ 00019766  0x00004683 ifetch  0x00000001 , 0x00000006 
+ 00019767  0x00004684 and  0x0000003f , 0x0000000f , 0x00000002 
+ 00019768  0x00004685 rshift4  0x0000003f , 0x0000003f 
+ 00019769  0x00004686 beq  0x00000009 , 0x00004d53 
+ 00019770  0x00004687 beq  0x00000007 , 0x00004d53 
+ 00019771  0x00004688 beq  0x0000000a , 0x00004d5f 
+ 00019772  0x00004689 beq  0x00000005 , 0x00004d4b 
+ 00019773  0x0000468a beq  0x00000001 , 0x00004d3f 
+ 00019774  0x0000468b rtn 
+ 00019775  0x0000468e copy  0x00000002 , 0x0000003f 
+ 00019776  0x0000468f beq  0x00000005 , 0x00004d43 
+ 00019777  0x00004690 beq  0x00000003 , 0x00004d4a 
+ 00019778  0x00004691 rtn 
+ 00019779  0x00004694 jam  0x00000027 , 0x00000a99 
+ 00019780  0x00004695 call  0x00007d86 
+ 00019781  0x00004696 fetch  0x00000001 , 0x00004092 
+ 00019782  0x00004697 rtnbit0  0x00000006 
+ 00019783  0x00004698 copy  0x00000002 , 0x0000003f 
+ 00019784  0x00004699 beq  0x00000005 , 0x0000438e 
+ 00019785  0x0000469a rtn 
+ 00019786  0x0000469c rtn 
+ 00019787  0x0000469f call  0x00004d5f 
+ 00019788  0x000046a0 arg  0x00000001 , 0x00000011 
+ 00019789  0x000046a1 call  0x00004d63 
+ 00019790  0x000046a2 fetch  0x00000002 , 0x0000424c 
+ 00019791  0x000046a3 istore  0x00000002 , 0x00000005 
+ 00019792  0x000046a4 setarg  0x00000000 
+ 00019793  0x000046a5 istore  0x00000001 , 0x00000005 
+ 00019794  0x000046a6 rtn 
+ 00019795  0x000046a9 arg  0x00000001 , 0x00000011 
+ 00019796  0x000046aa call  0x00004d63 
+ 00019797  0x000046ab fetch  0x00000002 , 0x0000424c 
+ 00019798  0x000046ac istore  0x00000002 , 0x00000005 
+ 00019799  0x000046ad setarg  0x00000000 
+ 00019800  0x000046ae istore  0x00000001 , 0x00000005 
+ 00019801  0x000046af jam  0x00000001 , 0x00000a8e 
+ 00019802  0x000046b0 fetch  0x00000001 , 0x00004252 
+ 00019803  0x000046b1 set1  0x00000006 
+ 00019804  0x000046b2 store  0x00000001 , 0x00004252 
+ 00019805  0x000046b3 jam  0x00000012 , 0x00000a99 
+ 00019806  0x000046b4 branch  0x00007d86 
+ 00019807  0x000046b7 ifetch  0x00000001 , 0x00000006 
+ 00019808  0x000046b8 beq  0x00000001 , 0x00004d62 
+ 00019809  0x000046b9 rtn 
+ 00019810  0x000046bc rtn 
+ 00019811  0x000046c0 call  0x00005240 
+ 00019812  0x000046c1 copy  0x00000011 , 0x00000002 
+ 00019813  0x000046c2 storet  0x00000001 , 0x00000a8e 
+ 00019814  0x000046c3 copy  0x0000003f , 0x00000005 
+ 00019815  0x000046c4 copy  0x00000011 , 0x0000003f 
+ 00019816  0x000046c5 istore  0x00000002 , 0x00000005 
+ 00019817  0x000046c6 rtn 
+ 00019818  0x000046d8 branch  0x00004d6f , 0x0000002b 
+ 00019819  0x000046da setarg  0x00004365 
+ 00019820  0x000046db arg  0x00004246 , 0x00000005 
+ 00019821  0x000046dc isub  0x00000005 , 0x00000039 
+ 00019822  0x000046dd call  0x00007ed4 
+ 00019823  0x000046df bpatchx  0x00000006 , 0x00004020 
+ 00019824  0x000046e0 setarg  0x00000551 
+ 00019825  0x000046e1 arg  0x00000511 , 0x00000005 
+ 00019826  0x000046e2 isub  0x00000005 , 0x00000039 
+ 00019827  0x000046e3 call  0x00007ed4 
+ 00019828  0x000046e4 setarg  0x000002c9 
+ 00019829  0x000046e5 arg  0x0000025d , 0x00000005 
+ 00019830  0x000046e6 isub  0x00000005 , 0x00000039 
+ 00019831  0x000046e7 call  0x00007ed4 
+ 00019832  0x000046e8 branch  0x00005318 
+ 00019833  0x000046eb bpatchx  0x00000007 , 0x00004020 
+ 00019834  0x000046ec copy  0x00000006 , 0x00000002 
+ 00019835  0x000046ef copy  0x00000002 , 0x00000006 
+ 00019836  0x000046f0 ifetch  0x00000002 , 0x00000006 
+ 00019837  0x000046f1 store  0x00000002 , 0x00000266 
+ 00019838  0x000046f2 ifetch  0x00000002 , 0x00000006 
+ 00019839  0x000046f3 store  0x00000002 , 0x00000268 
+ 00019840  0x000046f4 deposit  0x00000006 
+ 00019841  0x000046f5 store  0x00000002 , 0x00000264 
+ 00019842  0x000046f6 fetch  0x00000001 , 0x00004681 
+ 00019843  0x000046f7 beq  0x00000000 , 0x00004d85 
+ 00019844  0x000046f8 branch  0x000050ef 
+ 00019845  0x000046fb fetch  0x00000002 , 0x00000266 
+ 00019846  0x000046fc branch  0x00004dfc , 0x00000034 
+ 00019847  0x000046fd bpatchx  0x00000008 , 0x00004021 
+ 00019848  0x000046fe fetch  0x00000001 , 0x00000268 
+ 00019849  0x000046ff beq  0x00000001 , 0x00004d9d 
+ 00019850  0x00004701 beq  0x00000050 , 0x00004de0 
+ 00019851  0x00004702 beq  0x00000051 , 0x00004df5 
+ 00019852  0x00004703 beq  0x00000052 , 0x00004df3 
+ 00019853  0x00004704 beq  0x00000053 , 0x00004df3 
+ 00019854  0x00004705 branch  0x00004dfc 
+ 00019855  0x0000470a bpatchx  0x00000009 , 0x00004021 
+ 00019856  0x0000470b call  0x0000527e 
+ 00019857  0x0000470c fetch  0x00000001 , 0x00004256 
+ 00019858  0x0000470d beq  0x00000000 , 0x00004d9b 
+ 00019859  0x0000470e beq  0x00000001 , 0x00004d9b 
+ 00019860  0x0000470f beq  0x00000002 , 0x00004d9b 
+ 00019861  0x00004710 beq  0x00000003 , 0x00004d9b 
+ 00019862  0x00004711 beq  0x00000081 , 0x00004d9b 
+ 00019863  0x00004712 beq  0x000000c0 , 0x00004d9b 
+ 00019864  0x00004713 beq  0x00000080 , 0x00004d9b 
+ 00019865  0x00004714 beq  0x00000040 , 0x00004d9b 
+ 00019866  0x00004715 rtn 
+ 00019867  0x00004718 setarg  0x00000000 
+ 00019868  0x00004719 rtn 
+ 00019869  0x0000471d call  0x00004d8f 
+ 00019870  0x0000471e nrtn  0x00000034 
+ 00019871  0x00004720 call  0x000052b8 
+ 00019872  0x00004721 call  0x00004e01 
+ 00019873  0x00004722 fetcht  0x00000002 , 0x0000026f 
+ 00019874  0x00004723 branch  0x00004dfb , 0x00000034 
+ 00019875  0x00004724 call  0x000052c1 
+ 00019876  0x00004725 fetch  0x00000002 , 0x0000026f 
+ 00019877  0x00004726 istore  0x00000002 , 0x00000005 
+ 00019878  0x00004727 force  0x00000001 , 0x0000003f 
+ 00019879  0x00004728 istore  0x00000002 , 0x00000005 
+ 00019880  0x00004729 branch  0x00004dfc 
+ 00019881  0x0000472c fetch  0x00000001 , 0x00004364 
+ 00019882  0x0000472d rtn  0x00000034 
+ 00019883  0x0000472e copy  0x0000003f , 0x00000011 
+ 00019884  0x0000472f bpatchx  0x0000000a , 0x00004021 
+ 00019885  0x00004730 fetch  0x00000004 , 0x000002d5 
+ 00019886  0x00004731 arg  0x00000100 , 0x00000002 
+ 00019887  0x00004732 iadd  0x00000002 , 0x00000002 
+ 00019888  0x00004733 copy  0x00000022 , 0x0000003f 
+ 00019889  0x00004734 isub  0x00000002 , 0x0000003e 
+ 00019890  0x00004735 nrtn  0x00000002 
+ 00019891  0x00004736 jam  0x00000000 , 0x00004364 
+ 00019892  0x00004737 copy  0x00000011 , 0x0000003f 
+ 00019893  0x00004738 beq  0x00000050 , 0x00004db7 
+ 00019894  0x00004739 branch  0x00002a8c 
+ 00019895  0x0000473b arg  0x00000000 , 0x00000008 
+ 00019896  0x0000473c call  0x000052b8 
+ 00019897  0x0000473d call  0x00004e7a 
+ 00019898  0x0000473e call  0x000052c3 
+ 00019899  0x0000473f call  0x00007ea8 
+ 00019900  0x00004740 call  0x00004ead 
+ 00019901  0x00004741 call  0x000052c1 
+ 00019902  0x00004743 setarg  0x0000000c 
+ 00019903  0x00004744 istore  0x00000002 , 0x00000005 
+ 00019904  0x00004745 force  0x00000001 , 0x0000003f 
+ 00019905  0x00004746 istore  0x00000002 , 0x00000005 
+ 00019906  0x00004747 branch  0x00004dfc 
+ 00019907  0x0000474c bpatchx  0x0000000b , 0x00004021 
+ 00019908  0x0000474d fetch  0x00000002 , 0x00000275 
+ 00019909  0x0000474e increase  0x00000004 , 0x0000003f 
+ 00019910  0x0000474f rshift4  0x0000003f , 0x0000003f 
+ 00019911  0x00004750 rshift3  0x0000003f , 0x0000003f 
+ 00019912  0x00004751 add  0x0000003f , 0x00000001 , 0x00000002 
+ 00019913  0x00004752 arg  0x00004260 , 0x00000006 
+ 00019914  0x00004753 ifetch  0x00000003 , 0x00000006 
+ 00019915  0x00004754 rtn  0x00000034 
+ 00019916  0x00004755 store  0x00000003 , 0x00000ac2 
+ 00019917  0x00004756 fetch  0x00000001 , 0x00000ac2 
+ 00019918  0x00004757 copy  0x0000003f , 0x00000011 
+ 00019919  0x00004758 call  0x00004dd3 
+ 00019920  0x00004759 copy  0x00000012 , 0x0000003f 
+ 00019921  0x0000475a store  0x00000001 , 0x00004260 
+ 00019922  0x0000475b rtn 
+ 00019923  0x0000475e arg  0x00000000 , 0x00000007 
+ 00019924  0x0000475f arg  0x00000000 , 0x00000012 
+ 00019925  0x00004762 sub  0x00000007 , 0x00000007 , 0x0000003e 
+ 00019926  0x00004763 nrtn  0x00000002 
+ 00019927  0x00004764 qisolate1  0x00000011 
+ 00019928  0x00004765 branch  0x00004dda , 0x00000001 
+ 00019929  0x00004766 branch  0x00004dde 
+ 00019930  0x00004769 copy  0x00000002 , 0x0000003f 
+ 00019931  0x0000476a branch  0x00004dde , 0x00000034 
+ 00019932  0x0000476b qset1  0x00000012 
+ 00019933  0x0000476c increase  0xffffffff , 0x00000002 
+ 00019934  0x0000476f increase  0x00000001 , 0x00000007 
+ 00019935  0x00004770 branch  0x00004dd5 
+ 00019936  0x00004773 call  0x00005274 
+ 00019937  0x00004774 nrtn  0x00000034 
+ 00019938  0x00004775 call  0x00004d8f 
+ 00019939  0x00004776 nrtn  0x00000034 
+ 00019940  0x00004777 call  0x000052c5 
+ 00019941  0x00004778 call  0x00006e11 
+ 00019942  0x00004779 call  0x00004dc3 
+ 00019943  0x0000477a branch  0x00004dec 
+ 00019944  0x0000477e call  0x00005274 
+ 00019945  0x0000477f nrtn  0x00000034 
+ 00019946  0x00004780 call  0x000052c5 
+ 00019947  0x00004781 call  0x00006e11 
+ 00019948  0x00004783 call  0x000052ce 
+ 00019949  0x00004784 fetch  0x00000002 , 0x00000275 
+ 00019950  0x00004785 branch  0x00004dfb , 0x00000034 
+ 00019951  0x00004786 istore  0x00000002 , 0x00000005 
+ 00019952  0x00004787 fetch  0x00000002 , 0x00004248 
+ 00019953  0x00004788 istore  0x00000002 , 0x00000005 
+ 00019954  0x00004789 branch  0x00004dfc 
+ 00019955  0x0000478c call  0x00004d33 
+ 00019956  0x0000478d branch  0x00004dfc 
+ 00019957  0x00004790 bpatchx  0x0000000c , 0x00004021 
+ 00019958  0x00004791 jam  0x00000000 , 0x00000284 
+ 00019959  0x00004792 call  0x00006a8a 
+ 00019960  0x00004793 fetch  0x00000001 , 0x00000284 
+ 00019961  0x00004794 rtneq  0x00000001 
+ 00019962  0x00004795 branch  0x00004dfc 
+ 00019963  0x00004797 call  0x00005264 
+ 00019964  0x0000479a setarg  0x00000000 
+ 00019965  0x0000479b store  0x00000002 , 0x00000266 
+ 00019966  0x0000479c store  0x00000002 , 0x00000268 
+ 00019967  0x0000479d jam  0x00000001 , 0x0000026a 
+ 00019968  0x0000479e rtn 
+ 00019969  0x000047a1 bpatchx  0x0000000d , 0x00004021 
+ 00019970  0x000047a2 call  0x000052c3 
+ 00019971  0x000047a3 force  0x00000000 , 0x00000012 
+ 00019972  0x000047a4 fetch  0x00000002 , 0x00000266 
+ 00019973  0x000047a5 copy  0x0000003f , 0x00000013 
+ 00019974  0x000047a6 fetch  0x00000002 , 0x00000264 
+ 00019975  0x000047a7 iforce  0x00000006 
+ 00019976  0x000047a9 call  0x00004e10 
+ 00019977  0x000047aa deposit  0x00000013 
+ 00019978  0x000047ab increase  0xfffffffc , 0x00000013 
+ 00019979  0x000047ac increase  0xfffffffc , 0x0000003f 
+ 00019980  0x000047ad nbranch  0x00004e08 , 0x00000034 
+ 00019981  0x000047ae copy  0x00000012 , 0x0000003f 
+ 00019982  0x000047af store  0x00000002 , 0x0000026f 
+ 00019983  0x000047b0 rtn 
+ 00019984  0x000047b3 bpatchx  0x0000000e , 0x00004021 
+ 00019985  0x000047b4 ifetch  0x00000001 , 0x00000006 
+ 00019986  0x000047b5 beq  0x00000001 , 0x00004e49 
+ 00019987  0x000047b6 beq  0x00000002 , 0x00004e51 
+ 00019988  0x000047b7 beq  0x00000003 , 0x00004ed5 
+ 00019989  0x000047b8 beq  0x00000004 , 0x00004f05 
+ 00019990  0x000047b9 beq  0x00000005 , 0x00004fa2 
+ 00019991  0x000047ba beq  0x00000006 , 0x00004fcb 
+ 00019992  0x000047bb beq  0x00000007 , 0x0000501b 
+ 00019993  0x000047bc beq  0x00000008 , 0x00005050 
+ 00019994  0x000047bd beq  0x00000009 , 0x00005060 
+ 00019995  0x000047be beq  0x0000000a , 0x00004e1f 
+ 00019996  0x000047bf beq  0x0000000b , 0x00005061 
+ 00019997  0x000047c0 call  0x00005062 
+ 00019998  0x000047c2 rtn 
+ 00019999  0x000047c5 ifetch  0x00000001 , 0x00000006 
+ 00020000  0x000047c6 copy  0x0000003f , 0x00000007 
+ 00020001  0x000047c7 ifetch  0x00000002 , 0x00000006 
+ 00020002  0x000047c8 copy  0x0000003f , 0x00000011 
+ 00020003  0x000047c9 copy  0x00000013 , 0x0000003f 
+ 00020004  0x000047ca isub  0x00000011 , 0x00000013 
+ 00020005  0x000047cb setarg  0x0000000b 
+ 00020006  0x000047cc istore  0x00000001 , 0x00000005 
+ 00020007  0x000047cd copy  0x00000007 , 0x0000003f 
+ 00020008  0x000047ce istore  0x00000001 , 0x00000005 
+ 00020009  0x000047cf ifetch  0x00000002 , 0x00000006 
+ 00020010  0x000047d1 beq  0x00000002 , 0x00004e2d 
+ 00020011  0x000047d2 beq  0x00000003 , 0x00004e33 
+ 00020012  0x000047d3 rtn 
+ 00020013  0x000047d5 setarg  0x00020008 
+ 00020014  0x000047d6 istore  0x00000006 , 0x00000005 
+ 00020015  0x000047d7 setarg  0x00000280 
+ 00020016  0x000047d8 istore  0x00000004 , 0x00000005 
+ 00020017  0x000047d9 force  0x0000000c , 0x0000003f 
+ 00020018  0x000047da branch  0x00004e38 
+ 00020019  0x000047dc setarg  0x0003000c 
+ 00020020  0x000047dd istore  0x00000006 , 0x00000005 
+ 00020021  0x000047de setarg  0x00000006 
+ 00020022  0x000047df istore  0x00000008 , 0x00000005 
+ 00020023  0x000047e0 force  0x00000010 , 0x0000003f 
+ 00020024  0x000047e2 iadd  0x00000012 , 0x00000012 
+ 00020025  0x000047e3 branch  0x00004e1e 
+ 00020026  0x000047e6 ifetch  0x00000001 , 0x00000006 
+ 00020027  0x000047e7 copy  0x0000003f , 0x00000007 
+ 00020028  0x000047e8 ifetch  0x00000002 , 0x00000006 
+ 00020029  0x000047e9 copy  0x0000003f , 0x00000011 
+ 00020030  0x000047ea ifetch  0x00000002 , 0x00000006 
+ 00020031  0x000047eb store  0x00000002 , 0x00000aa2 
+ 00020032  0x000047ec copy  0x00000013 , 0x0000003f 
+ 00020033  0x000047ed isub  0x00000011 , 0x00000013 
+ 00020034  0x000047ee call  0x000052c3 
+ 00020035  0x000047ef setarg  0x0000000b 
+ 00020036  0x000047f0 istore  0x00000001 , 0x00000005 
+ 00020037  0x000047f1 copy  0x00000007 , 0x0000003f 
+ 00020038  0x000047f2 istore  0x00000001 , 0x00000005 
+ 00020039  0x000047f3 fetch  0x00000002 , 0x00000aa2 
+ 00020040  0x000047f4 branch  0x00004e2a 
+ 00020041  0x000047f9 ifetch  0x00000001 , 0x00000006 
+ 00020042  0x000047fa copy  0x0000003f , 0x00000007 
+ 00020043  0x000047fb ifetch  0x00000002 , 0x00000006 
+ 00020044  0x000047fc copy  0x0000003f , 0x00000011 
+ 00020045  0x000047fd iadd  0x00000006 , 0x00000006 
+ 00020046  0x000047fe copy  0x00000013 , 0x0000003f 
+ 00020047  0x000047ff isub  0x00000011 , 0x00000013 
+ 00020048  0x00004801 branch  0x00004e1e 
+ 00020049  0x00004804 call  0x00007ea8 
+ 00020050  0x00004807 call  0x00007ead 
+ 00020051  0x00004808 arg  0x00000000 , 0x00000008 
+ 00020052  0x00004809 ifetch  0x00000001 , 0x00000006 
+ 00020053  0x0000480a copy  0x0000003f , 0x00000007 
+ 00020054  0x0000480b ifetch  0x00000002 , 0x00000006 
+ 00020055  0x0000480c copy  0x0000003f , 0x00000011 
+ 00020056  0x0000480d ifetch  0x00000002 , 0x00000006 
+ 00020057  0x0000480e copy  0x0000003f , 0x00000002 
+ 00020058  0x0000480f ifetch  0x00000002 , 0x00000006 
+ 00020059  0x00004810 copy  0x0000003f , 0x0000000b 
+ 00020060  0x00004811 bpatchx  0x0000000f , 0x00004021 
+ 00020061  0x00004812 copy  0x00000002 , 0x0000003f 
+ 00020062  0x00004813 beq  0x00000001 , 0x00004e64 
+ 00020063  0x00004814 beq  0x00000003 , 0x00004e86 
+ 00020064  0x00004815 beq  0x00000011 , 0x00004e92 
+ 00020065  0x00004816 beq  0x00000013 , 0x00004e9d 
+ 00020066  0x00004817 call  0x00005062 
+ 00020067  0x00004818 branch  0x00004ed4 
+ 00020068  0x0000481b call  0x00007ea8 
+ 00020069  0x0000481c arg  0x00000050 , 0x00000002 
+ 00020070  0x0000481d fetch  0x00000002 , 0x00004248 
+ 00020071  0x0000481e nbranch  0x00004ece , 0x00000034 
+ 00020072  0x0000481f copy  0x0000000b , 0x0000003f 
+ 00020073  0x00004820 store  0x00000002 , 0x00004248 
+ 00020074  0x00004821 copy  0x00000022 , 0x0000003f 
+ 00020075  0x00004822 store  0x00000004 , 0x000002d5 
+ 00020076  0x00004823 call  0x00004e6e 
+ 00020077  0x00004824 branch  0x00004ea9 
+ 00020078  0x00004827 storet  0x00000002 , 0x000002d3 
+ 00020079  0x00004828 deposit  0x0000000b 
+ 00020080  0x00004829 store  0x00000002 , 0x000002c9 
+ 00020081  0x0000482a deposit  0x00000011 
+ 00020082  0x0000482b store  0x00000002 , 0x000002cb 
+ 00020083  0x0000482c deposit  0x00000012 
+ 00020084  0x0000482d store  0x00000002 , 0x000002cd 
+ 00020085  0x0000482e deposit  0x00000013 
+ 00020086  0x0000482f store  0x00000002 , 0x000002cf 
+ 00020087  0x00004830 deposit  0x00000007 
+ 00020088  0x00004831 store  0x00000002 , 0x000002d1 
+ 00020089  0x00004832 rtn 
+ 00020090  0x00004835 fetcht  0x00000002 , 0x000002d3 
+ 00020091  0x00004836 fetch  0x00000002 , 0x000002c9 
+ 00020092  0x00004837 copy  0x0000003f , 0x0000000b 
+ 00020093  0x00004838 fetch  0x00000002 , 0x000002cb 
+ 00020094  0x00004839 copy  0x0000003f , 0x00000011 
+ 00020095  0x0000483a fetch  0x00000002 , 0x000002cd 
+ 00020096  0x0000483b copy  0x0000003f , 0x00000012 
+ 00020097  0x0000483c fetch  0x00000002 , 0x000002cf 
+ 00020098  0x0000483d copy  0x0000003f , 0x00000013 
+ 00020099  0x0000483e fetch  0x00000002 , 0x000002d1 
+ 00020100  0x0000483f copy  0x0000003f , 0x00000007 
+ 00020101  0x00004840 rtn 
+ 00020102  0x00004843 call  0x00007ea8 
+ 00020103  0x00004844 setarg  0x00000051 
+ 00020104  0x00004845 arg  0x00000051 , 0x00000002 
+ 00020105  0x00004846 fetch  0x00000002 , 0x0000424a 
+ 00020106  0x00004847 nbranch  0x00004ece , 0x00000034 
+ 00020107  0x00004848 copy  0x0000000b , 0x0000003f 
+ 00020108  0x00004849 store  0x00000002 , 0x0000424a 
+ 00020109  0x0000484a fetch  0x00000001 , 0x00004251 
+ 00020110  0x0000484b set1  0x00000000 , 0x0000003f 
+ 00020111  0x0000484c set1  0x00000001 , 0x0000003f 
+ 00020112  0x0000484d store  0x00000001 , 0x00004251 
+ 00020113  0x0000484e branch  0x00004eb1 
+ 00020114  0x00004850 call  0x00007ea8 
+ 00020115  0x00004851 arg  0x00000052 , 0x00000002 
+ 00020116  0x00004852 fetch  0x00000002 , 0x0000424c 
+ 00020117  0x00004853 nbranch  0x00004ece , 0x00000034 
+ 00020118  0x00004854 copy  0x0000000b , 0x0000003f 
+ 00020119  0x00004855 store  0x00000002 , 0x0000424c 
+ 00020120  0x00004856 fetch  0x00000001 , 0x00004252 
+ 00020121  0x00004857 set1  0x00000000 , 0x0000003f 
+ 00020122  0x00004858 set1  0x00000001 , 0x0000003f 
+ 00020123  0x00004859 store  0x00000001 , 0x00004252 
+ 00020124  0x0000485a branch  0x00004eb1 
+ 00020125  0x0000485c call  0x00007ea8 
+ 00020126  0x0000485d deposit  0x0000001a 
+ 00020127  0x0000485e arg  0x00000053 , 0x00000002 
+ 00020128  0x0000485f fetch  0x00000002 , 0x0000424e 
+ 00020129  0x00004860 nbranch  0x00004ece , 0x00000034 
+ 00020130  0x00004861 copy  0x0000000b , 0x0000003f 
+ 00020131  0x00004862 store  0x00000002 , 0x0000424e 
+ 00020132  0x00004863 fetch  0x00000001 , 0x00004253 
+ 00020133  0x00004864 set1  0x00000000 , 0x0000003f 
+ 00020134  0x00004865 set1  0x00000001 , 0x0000003f 
+ 00020135  0x00004866 store  0x00000001 , 0x00004253 
+ 00020136  0x00004867 branch  0x00004eb1 
+ 00020137  0x0000486a setarg  0x00000001 
+ 00020138  0x0000486b store  0x00000002 , 0x0000027d 
+ 00020139  0x0000486c jam  0x00000050 , 0x00004364 
+ 00020140  0x0000486d branch  0x00004eb3 
+ 00020141  0x0000486f fetch  0x00000001 , 0x00004250 
+ 00020142  0x00004870 set1  0x00000000 , 0x0000003f 
+ 00020143  0x00004871 set1  0x00000001 , 0x0000003f 
+ 00020144  0x00004872 store  0x00000001 , 0x00004250 
+ 00020145  0x00004874 setarg  0x00000000 
+ 00020146  0x00004875 store  0x00000002 , 0x0000027d 
+ 00020147  0x00004877 bpatchx  0x00000010 , 0x00004022 
+ 00020148  0x00004878 call  0x00007ead 
+ 00020149  0x00004879 setarg  0x00000003 
+ 00020150  0x0000487a istore  0x00000001 , 0x00000005 
+ 00020151  0x0000487b copy  0x00000007 , 0x0000003f 
+ 00020152  0x0000487c istore  0x00000001 , 0x00000005 
+ 00020153  0x0000487d setarg  0x00000008 
+ 00020154  0x0000487e istore  0x00000002 , 0x00000005 
+ 00020155  0x0000487f copy  0x00000002 , 0x0000003f 
+ 00020156  0x00004880 istore  0x00000002 , 0x00000005 
+ 00020157  0x00004881 copy  0x0000000b , 0x0000003f 
+ 00020158  0x00004882 istore  0x00000002 , 0x00000005 
+ 00020159  0x00004883 fetch  0x00000002 , 0x0000027d 
+ 00020160  0x00004884 beq  0x00000001 , 0x00004ec9 
+ 00020161  0x00004885 isolate0  0x00000000 , 0x00000008 
+ 00020162  0x00004886 branch  0x00004ec4 , 0x00000001 
+ 00020163  0x00004887 setarg  0x00000004 
+ 00020164  0x00004889 istore  0x00000002 , 0x00000005 
+ 00020165  0x0000488a force  0x00000000 , 0x0000003f 
+ 00020166  0x0000488b istore  0x00000002 , 0x00000005 
+ 00020167  0x0000488c setarg  0x0000000c 
+ 00020168  0x0000488d branch  0x00004ed0 
+ 00020169  0x0000488f istore  0x00000002 , 0x00000005 
+ 00020170  0x00004890 force  0x00000002 , 0x0000003f 
+ 00020171  0x00004891 istore  0x00000002 , 0x00000005 
+ 00020172  0x00004892 setarg  0x0000000c 
+ 00020173  0x00004893 branch  0x00004ed0 
+ 00020174  0x00004896 set1  0x00000000 , 0x00000008 
+ 00020175  0x00004897 branch  0x00004eb1 
+ 00020176  0x00004899 iadd  0x00000012 , 0x00000012 
+ 00020177  0x0000489a copy  0x00000013 , 0x0000003f 
+ 00020178  0x0000489b isub  0x00000011 , 0x00000013 
+ 00020179  0x0000489c branch  0x00004ed4 
+ 00020180  0x0000489e branch  0x00004e1e 
+ 00020181  0x000048a1 ifetch  0x00000001 , 0x00000006 
+ 00020182  0x000048a2 copy  0x0000003f , 0x00000007 
+ 00020183  0x000048a3 ifetch  0x00000002 , 0x00000006 
+ 00020184  0x000048a4 copy  0x0000003f , 0x00000011 
+ 00020185  0x000048a5 copy  0x00000013 , 0x0000003f 
+ 00020186  0x000048a6 isub  0x00000011 , 0x00000013 
+ 00020187  0x000048a7 ifetch  0x00000002 , 0x00000006 
+ 00020188  0x000048a8 copy  0x0000003f , 0x0000000b 
+ 00020189  0x000048a9 ifetch  0x00000002 , 0x00000006 
+ 00020190  0x000048aa copy  0x0000003f , 0x00000002 
+ 00020191  0x000048ab bpatchx  0x00000011 , 0x00004022 
+ 00020192  0x000048ac setarg  0x00000050 
+ 00020193  0x000048ad isub  0x00000002 , 0x0000003e 
+ 00020194  0x000048ae branch  0x00004eed , 0x00000005 
+ 00020195  0x000048af setarg  0x00000051 
+ 00020196  0x000048b0 isub  0x00000002 , 0x0000003e 
+ 00020197  0x000048b1 branch  0x00004ef3 , 0x00000005 
+ 00020198  0x000048b2 setarg  0x00000052 
+ 00020199  0x000048b3 isub  0x00000002 , 0x0000003e 
+ 00020200  0x000048b4 branch  0x00004eff , 0x00000005 
+ 00020201  0x000048b5 setarg  0x00000053 
+ 00020202  0x000048b6 isub  0x00000002 , 0x0000003e 
+ 00020203  0x000048b7 branch  0x00004ef9 , 0x00000005 
+ 00020204  0x000048b8 rtn 
+ 00020205  0x000048bb copy  0x0000000b , 0x0000003f 
+ 00020206  0x000048bc store  0x00000002 , 0x00004248 
+ 00020207  0x000048bd fetch  0x00000001 , 0x00004250 
+ 00020208  0x000048be set1  0x00000001 , 0x0000003f 
+ 00020209  0x000048bf store  0x00000001 , 0x00004250 
+ 00020210  0x000048c0 branch  0x00004e1e 
+ 00020211  0x000048c2 copy  0x0000000b , 0x0000003f 
+ 00020212  0x000048c3 store  0x00000002 , 0x0000424a 
+ 00020213  0x000048c4 fetch  0x00000001 , 0x00004251 
+ 00020214  0x000048c5 set1  0x00000001 , 0x0000003f 
+ 00020215  0x000048c6 store  0x00000001 , 0x00004251 
+ 00020216  0x000048c7 rtn 
+ 00020217  0x000048c9 copy  0x0000000b , 0x0000003f 
+ 00020218  0x000048ca store  0x00000002 , 0x0000424c 
+ 00020219  0x000048cb fetch  0x00000001 , 0x00004253 
+ 00020220  0x000048cc set1  0x00000001 , 0x0000003f 
+ 00020221  0x000048cd store  0x00000001 , 0x00004253 
+ 00020222  0x000048ce rtn 
+ 00020223  0x000048d0 copy  0x0000000b , 0x0000003f 
+ 00020224  0x000048d1 store  0x00000002 , 0x0000424e 
+ 00020225  0x000048d2 fetch  0x00000001 , 0x00004252 
+ 00020226  0x000048d3 set1  0x00000001 , 0x0000003f 
+ 00020227  0x000048d4 store  0x00000001 , 0x00004252 
+ 00020228  0x000048d5 rtn 
+ 00020229  0x000048d8 ifetch  0x00000001 , 0x00000006 
+ 00020230  0x000048d9 copy  0x0000003f , 0x00000007 
+ 00020231  0x000048da ifetch  0x00000002 , 0x00000006 
+ 00020232  0x000048db copy  0x0000003f , 0x00000011 
+ 00020233  0x000048dc copy  0x00000013 , 0x0000003f 
+ 00020234  0x000048dd isub  0x00000011 , 0x00000013 
+ 00020235  0x000048de ifetch  0x00000002 , 0x00000006 
+ 00020236  0x000048df copy  0x0000003f , 0x00000002 
+ 00020237  0x000048e0 copy  0x00000002 , 0x00000011 
+ 00020238  0x000048e1 bpatchx  0x00000012 , 0x00004022 
+ 00020239  0x000048e2 setarg  0x00000050 
+ 00020240  0x000048e3 isub  0x00000002 , 0x0000003e 
+ 00020241  0x000048e4 branch  0x00004f1c , 0x00000005 
+ 00020242  0x000048e5 setarg  0x00000051 
+ 00020243  0x000048e6 isub  0x00000002 , 0x0000003e 
+ 00020244  0x000048e7 branch  0x00004f3a , 0x00000005 
+ 00020245  0x000048e8 setarg  0x00000052 
+ 00020246  0x000048e9 isub  0x00000002 , 0x0000003e 
+ 00020247  0x000048ea branch  0x00004f26 , 0x00000005 
+ 00020248  0x000048eb setarg  0x00000053 
+ 00020249  0x000048ec isub  0x00000002 , 0x0000003e 
+ 00020250  0x000048ed branch  0x00004f30 , 0x00000005 
+ 00020251  0x000048ee branch  0x00005062 
+ 00020252  0x000048f1 copy  0x00000005 , 0x0000000b 
+ 00020253  0x000048f2 fetch  0x00000001 , 0x00004250 
+ 00020254  0x000048f3 set1  0x00000004 , 0x0000003f 
+ 00020255  0x000048f4 set1  0x00000003 , 0x0000003f 
+ 00020256  0x000048f6 store  0x00000001 , 0x00004250 
+ 00020257  0x000048f7 copy  0x0000000b , 0x00000005 
+ 00020258  0x000048f8 arg  0x00000050 , 0x0000000b 
+ 00020259  0x000048f9 fetch  0x00000002 , 0x00004248 
+ 00020260  0x000048fa copy  0x0000003f , 0x00000002 
+ 00020261  0x000048fb branch  0x00004f43 
+ 00020262  0x000048fd copy  0x00000005 , 0x0000000b 
+ 00020263  0x000048fe fetch  0x00000001 , 0x00004252 
+ 00020264  0x000048ff set1  0x00000004 , 0x0000003f 
+ 00020265  0x00004900 set1  0x00000003 , 0x0000003f 
+ 00020266  0x00004902 store  0x00000001 , 0x00004252 
+ 00020267  0x00004903 copy  0x0000000b , 0x00000005 
+ 00020268  0x00004904 arg  0x00000052 , 0x0000000b 
+ 00020269  0x00004905 fetch  0x00000002 , 0x0000424c 
+ 00020270  0x00004906 copy  0x0000003f , 0x00000002 
+ 00020271  0x00004907 branch  0x00004f43 
+ 00020272  0x00004909 copy  0x00000005 , 0x0000000b 
+ 00020273  0x0000490a fetch  0x00000001 , 0x00004253 
+ 00020274  0x0000490b set1  0x00000004 , 0x0000003f 
+ 00020275  0x0000490c set1  0x00000003 , 0x0000003f 
+ 00020276  0x0000490e store  0x00000001 , 0x00004253 
+ 00020277  0x0000490f copy  0x0000000b , 0x00000005 
+ 00020278  0x00004910 arg  0x00000053 , 0x0000000b 
+ 00020279  0x00004911 fetch  0x00000002 , 0x0000424e 
+ 00020280  0x00004912 copy  0x0000003f , 0x00000002 
+ 00020281  0x00004913 branch  0x00004f43 
+ 00020282  0x00004915 copy  0x00000005 , 0x0000000b 
+ 00020283  0x00004916 fetch  0x00000001 , 0x00004251 
+ 00020284  0x00004917 set1  0x00000004 , 0x0000003f 
+ 00020285  0x00004918 set1  0x00000003 , 0x0000003f 
+ 00020286  0x0000491a store  0x00000001 , 0x00004251 
+ 00020287  0x0000491c copy  0x0000000b , 0x00000005 
+ 00020288  0x0000491d arg  0x00000051 , 0x0000000b 
+ 00020289  0x0000491e fetch  0x00000002 , 0x0000424a 
+ 00020290  0x0000491f copy  0x0000003f , 0x00000002 
+ 00020291  0x00004921 bpatchx  0x00000013 , 0x00004022 
+ 00020292  0x00004922 setarg  0x00000005 
+ 00020293  0x00004923 istore  0x00000001 , 0x00000005 
+ 00020294  0x00004924 copy  0x00000007 , 0x0000003f 
+ 00020295  0x00004925 istore  0x00000001 , 0x00000005 
+ 00020296  0x00004926 setarg  0x00000006 
+ 00020297  0x00004927 istore  0x00000002 , 0x00000005 
+ 00020298  0x00004928 copy  0x00000002 , 0x0000003f 
+ 00020299  0x00004929 istore  0x00000002 , 0x00000005 
+ 00020300  0x0000492a force  0x00000000 , 0x0000003f 
+ 00020301  0x0000492b istore  0x00000002 , 0x00000005 
+ 00020302  0x0000492c force  0x00000000 , 0x0000003f 
+ 00020303  0x0000492d istore  0x00000002 , 0x00000005 
+ 00020304  0x0000492e force  0x0000000a , 0x0000003f 
+ 00020305  0x0000492f iadd  0x00000012 , 0x00000012 
+ 00020306  0x00004931 storet  0x00000002 , 0x00000282 
+ 00020307  0x00004932 copy  0x00000007 , 0x0000003f 
+ 00020308  0x00004933 store  0x00000001 , 0x00000281 
+ 00020309  0x00004934 force  0x00000050 , 0x0000003f 
+ 00020310  0x00004935 icompare  0x000000ff , 0x0000000b 
+ 00020311  0x00004936 branch  0x00004f59 , 0x00000001 
+ 00020312  0x00004937 increase  0x00000001 , 0x0000003f 
+ 00020313  0x0000493a rtn 
+ 00020314  0x0000493c disable  0x00000028 
+ 00020315  0x0000493d rtnbit1  0x00000002 , 0x0000003f 
+ 00020316  0x0000493e rtnbit0  0x00000000 , 0x0000003f 
+ 00020317  0x0000493f rtnbit0  0x00000001 , 0x0000003f 
+ 00020318  0x00004940 set1  0x00000002 , 0x0000003f 
+ 00020319  0x00004941 copy  0x00000006 , 0x00000005 
+ 00020320  0x00004942 increase  0xffffffff , 0x00000005 
+ 00020321  0x00004943 istore  0x00000001 , 0x00000005 
+ 00020322  0x00004944 enable  0x00000028 
+ 00020323  0x00004945 rtn 
+ 00020324  0x00004948 fetch  0x00000001 , 0x00004250 
+ 00020325  0x00004949 call  0x00004f5a 
+ 00020326  0x0000494a nbranch  0x00004f6b , 0x00000028 
+ 00020327  0x0000494b jam  0x00000050 , 0x00000280 
+ 00020328  0x0000494c fetch  0x00000002 , 0x00004248 
+ 00020329  0x0000494d store  0x00000002 , 0x00000282 
+ 00020330  0x0000494e branch  0x00004f7f 
+ 00020331  0x00004950 fetch  0x00000001 , 0x00004251 
+ 00020332  0x00004951 call  0x00004f5a 
+ 00020333  0x00004952 nbranch  0x00004f72 , 0x00000028 
+ 00020334  0x00004953 jam  0x00000051 , 0x00000280 
+ 00020335  0x00004954 fetch  0x00000002 , 0x0000424a 
+ 00020336  0x00004955 store  0x00000002 , 0x00000282 
+ 00020337  0x00004956 branch  0x00004f7f 
+ 00020338  0x00004958 fetch  0x00000001 , 0x00004252 
+ 00020339  0x00004959 call  0x00004f5a 
+ 00020340  0x0000495a nbranch  0x00004f79 , 0x00000028 
+ 00020341  0x0000495b jam  0x00000052 , 0x00000280 
+ 00020342  0x0000495c fetch  0x00000002 , 0x0000424c 
+ 00020343  0x0000495d store  0x00000002 , 0x00000282 
+ 00020344  0x0000495e branch  0x00004f7f 
+ 00020345  0x00004960 fetch  0x00000001 , 0x00004253 
+ 00020346  0x00004961 call  0x00004f5a 
+ 00020347  0x00004962 nrtn  0x00000028 
+ 00020348  0x00004963 jam  0x00000053 , 0x00000280 
+ 00020349  0x00004964 fetch  0x00000002 , 0x0000424e 
+ 00020350  0x00004965 store  0x00000002 , 0x00000282 
+ 00020351  0x00004969 bpatchx  0x00000014 , 0x00004022 
+ 00020352  0x0000496a call  0x0000523a 
+ 00020353  0x0000496b call  0x000052b8 
+ 00020354  0x0000496c force  0x00000000 , 0x00000012 
+ 00020355  0x0000496d call  0x000052c3 
+ 00020356  0x0000496e force  0x00000004 , 0x0000003f 
+ 00020357  0x0000496f istore  0x00000001 , 0x00000005 
+ 00020358  0x00004970 fetch  0x00000001 , 0x00004255 
+ 00020359  0x00004971 istore  0x00000001 , 0x00000005 
+ 00020360  0x00004972 setarg  0x00000008 
+ 00020361  0x00004973 istore  0x00000002 , 0x00000005 
+ 00020362  0x00004974 fetch  0x00000002 , 0x00000282 
+ 00020363  0x00004975 istore  0x00000002 , 0x00000005 
+ 00020364  0x00004976 setarg  0x00000000 
+ 00020365  0x00004977 istore  0x00000002 , 0x00000005 
+ 00020366  0x00004978 force  0x00000001 , 0x0000003f 
+ 00020367  0x00004979 istore  0x00000001 , 0x00000005 
+ 00020368  0x0000497a force  0x00000002 , 0x0000003f 
+ 00020369  0x0000497b istore  0x00000001 , 0x00000005 
+ 00020370  0x0000497c fetch  0x00000001 , 0x00000280 
+ 00020371  0x0000497d beq  0x00000051 , 0x00004f97 
+ 00020372  0x0000497e setarg  0x00000030 
+ 00020373  0x0000497f istore  0x00000002 , 0x00000005 
+ 00020374  0x00004980 branch  0x00004f99 
+ 00020375  0x00004982 setarg  0x000003e3 
+ 00020376  0x00004983 istore  0x00000002 , 0x00000005 
+ 00020377  0x00004985 arg  0x0000000c , 0x00000002 
+ 00020378  0x00004986 storet  0x00000002 , 0x0000026f 
+ 00020379  0x00004987 call  0x000052c1 
+ 00020380  0x00004988 fetch  0x00000002 , 0x0000026f 
+ 00020381  0x00004989 istore  0x00000002 , 0x00000005 
+ 00020382  0x0000498a force  0x00000001 , 0x0000003f 
+ 00020383  0x0000498b istore  0x00000002 , 0x00000005 
+ 00020384  0x0000498c jam  0x00000000 , 0x00000280 
+ 00020385  0x0000498e branch  0x00004e1e 
+ 00020386  0x00004991 increase  0x00000001 , 0x00000006 
+ 00020387  0x00004992 ifetch  0x00000002 , 0x00000006 
+ 00020388  0x00004993 copy  0x0000003f , 0x00000011 
+ 00020389  0x00004994 copy  0x00000013 , 0x0000003f 
+ 00020390  0x00004995 isub  0x00000011 , 0x00000013 
+ 00020391  0x00004996 ifetch  0x00000002 , 0x00000006 
+ 00020392  0x00004997 copy  0x0000003f , 0x00000011 
+ 00020393  0x00004998 bpatchx  0x00000015 , 0x00004022 
+ 00020394  0x00004999 setarg  0x00000050 
+ 00020395  0x0000499a isub  0x00000011 , 0x0000003e 
+ 00020396  0x0000499b branch  0x00004fba , 0x00000005 
+ 00020397  0x0000499c setarg  0x00000051 
+ 00020398  0x0000499d isub  0x00000011 , 0x0000003e 
+ 00020399  0x0000499e branch  0x00004fbe , 0x00000005 
+ 00020400  0x0000499f setarg  0x00000052 
+ 00020401  0x000049a0 isub  0x00000011 , 0x0000003e 
+ 00020402  0x000049a1 branch  0x00004fc2 , 0x00000005 
+ 00020403  0x000049a2 setarg  0x00000053 
+ 00020404  0x000049a3 isub  0x00000011 , 0x0000003e 
+ 00020405  0x000049a4 branch  0x00004fc6 , 0x00000005 
+ 00020406  0x000049a5 increase  0x00000002 , 0x00000006 
+ 00020407  0x000049a6 ifetch  0x00000002 , 0x00000006 
+ 00020408  0x000049a7 iforce  0x0000003e 
+ 00020409  0x000049a8 branch  0x00004e1e 
+ 00020410  0x000049aa fetch  0x00000001 , 0x00004250 
+ 00020411  0x000049ab set1  0x00000005 , 0x0000003f 
+ 00020412  0x000049ac store  0x00000001 , 0x00004250 
+ 00020413  0x000049ad branch  0x00004e1e 
+ 00020414  0x000049af fetch  0x00000001 , 0x00004251 
+ 00020415  0x000049b0 set1  0x00000005 , 0x0000003f 
+ 00020416  0x000049b1 store  0x00000001 , 0x00004251 
+ 00020417  0x000049b2 branch  0x00004e1e 
+ 00020418  0x000049b4 fetch  0x00000001 , 0x00004252 
+ 00020419  0x000049b5 set1  0x00000005 , 0x0000003f 
+ 00020420  0x000049b6 store  0x00000001 , 0x00004252 
+ 00020421  0x000049b7 branch  0x00004e1e 
+ 00020422  0x000049b9 fetch  0x00000001 , 0x00004253 
+ 00020423  0x000049ba set1  0x00000005 , 0x0000003f 
+ 00020424  0x000049bb store  0x00000001 , 0x00004253 
+ 00020425  0x000049bc jam  0x00000006 , 0x00000a99 
+ 00020426  0x000049bd branch  0x00007d86 
+ 00020427  0x000049c2 ifetch  0x00000001 , 0x00000006 
+ 00020428  0x000049c3 copy  0x0000003f , 0x00000007 
+ 00020429  0x000049c4 ifetch  0x00000002 , 0x00000006 
+ 00020430  0x000049c5 copy  0x0000003f , 0x00000011 
+ 00020431  0x000049c6 copy  0x00000013 , 0x0000003f 
+ 00020432  0x000049c7 isub  0x00000011 , 0x00000013 
+ 00020433  0x000049c8 ifetch  0x00000002 , 0x00000006 
+ 00020434  0x000049c9 copy  0x0000003f , 0x00000011 
+ 00020435  0x000049ca ifetch  0x00000002 , 0x00000006 
+ 00020436  0x000049cb copy  0x0000003f , 0x0000000b 
+ 00020437  0x000049cc copy  0x00000011 , 0x00000002 
+ 00020438  0x000049cd call  0x00007ea8 
+ 00020439  0x000049ce bpatchx  0x00000016 , 0x00004022 
+ 00020440  0x000049cf setarg  0x00000050 
+ 00020441  0x000049d0 isub  0x00000002 , 0x0000003e 
+ 00020442  0x000049d1 branch  0x00004ff2 , 0x00000005 
+ 00020443  0x000049d2 setarg  0x00000051 
+ 00020444  0x000049d3 isub  0x00000002 , 0x0000003e 
+ 00020445  0x000049d4 branch  0x00005002 , 0x00000005 
+ 00020446  0x000049d5 setarg  0x00000052 
+ 00020447  0x000049d6 isub  0x00000002 , 0x0000003e 
+ 00020448  0x000049d7 branch  0x00004fe6 , 0x00000005 
+ 00020449  0x000049d8 setarg  0x00000053 
+ 00020450  0x000049d9 isub  0x00000002 , 0x0000003e 
+ 00020451  0x000049da branch  0x00004fec , 0x00000005 
+ 00020452  0x000049db call  0x00005062 
+ 00020453  0x000049dc branch  0x00005017 
+ 00020454  0x000049de copy  0x0000000b , 0x00000002 
+ 00020455  0x000049df fetch  0x00000002 , 0x0000424c 
+ 00020456  0x000049e0 isub  0x00000002 , 0x0000003e 
+ 00020457  0x000049e1 branch  0x00004ff8 , 0x00000005 
+ 00020458  0x000049e2 call  0x00005062 
+ 00020459  0x000049e3 branch  0x00005017 
+ 00020460  0x000049e5 copy  0x0000000b , 0x00000002 
+ 00020461  0x000049e6 fetch  0x00000002 , 0x0000424e 
+ 00020462  0x000049e7 isub  0x00000002 , 0x0000003e 
+ 00020463  0x000049e8 branch  0x00004ffa , 0x00000005 
+ 00020464  0x000049e9 call  0x00005062 
+ 00020465  0x000049ea branch  0x00005017 
+ 00020466  0x000049ed copy  0x0000000b , 0x00000002 
+ 00020467  0x000049ee fetch  0x00000002 , 0x00004248 
+ 00020468  0x000049ef isub  0x00000002 , 0x0000003e 
+ 00020469  0x000049f0 branch  0x00004ffe , 0x00000005 
+ 00020470  0x000049f1 call  0x00005062 
+ 00020471  0x000049f2 branch  0x00005017 
+ 00020472  0x000049f4 call  0x00005079 
+ 00020473  0x000049f5 branch  0x0000500a 
+ 00020474  0x000049f7 call  0x0000507f 
+ 00020475  0x000049f8 fetch  0x00000002 , 0x0000424c 
+ 00020476  0x000049f9 branch  0x0000500a , 0x00000034 
+ 00020477  0x00004a01 branch  0x0000500a 
+ 00020478  0x00004a04 call  0x00005074 
+ 00020479  0x00004a05 fetch  0x00000001 , 0x00000288 
+ 00020480  0x00004a06 nbranch  0x0000500a , 0x00000034 
+ 00020481  0x00004a09 branch  0x0000500a 
+ 00020482  0x00004a0b copy  0x0000000b , 0x00000002 
+ 00020483  0x00004a0c fetch  0x00000002 , 0x0000424a 
+ 00020484  0x00004a0d isub  0x00000002 , 0x0000003e 
+ 00020485  0x00004a0e branch  0x00005008 , 0x00000005 
+ 00020486  0x00004a0f call  0x00005062 
+ 00020487  0x00004a10 branch  0x00005017 
+ 00020488  0x00004a12 call  0x0000506f 
+ 00020489  0x00004a13 branch  0x0000500a 
+ 00020490  0x00004a15 call  0x00007ead 
+ 00020491  0x00004a16 setarg  0x00000007 
+ 00020492  0x00004a17 istore  0x00000001 , 0x00000005 
+ 00020493  0x00004a18 copy  0x00000007 , 0x0000003f 
+ 00020494  0x00004a19 istore  0x00000001 , 0x00000005 
+ 00020495  0x00004a1a setarg  0x00000004 
+ 00020496  0x00004a1b istore  0x00000002 , 0x00000005 
+ 00020497  0x00004a1c copy  0x00000011 , 0x0000003f 
+ 00020498  0x00004a1d istore  0x00000002 , 0x00000005 
+ 00020499  0x00004a1e copy  0x0000000b , 0x0000003f 
+ 00020500  0x00004a1f istore  0x00000002 , 0x00000005 
+ 00020501  0x00004a20 force  0x00000008 , 0x0000003f 
+ 00020502  0x00004a21 branch  0x00005019 
+ 00020503  0x00004a23 call  0x00007ead 
+ 00020504  0x00004a24 branch  0x00005019 
+ 00020505  0x00004a26 iadd  0x00000012 , 0x00000012 
+ 00020506  0x00004a27 branch  0x00004e1e 
+ 00020507  0x00004a29 ifetch  0x00000001 , 0x00000006 
+ 00020508  0x00004a2a copy  0x0000003f , 0x00000007 
+ 00020509  0x00004a2b ifetch  0x00000002 , 0x00000006 
+ 00020510  0x00004a2c copy  0x0000003f , 0x00000011 
+ 00020511  0x00004a2d copy  0x00000013 , 0x0000003f 
+ 00020512  0x00004a2e isub  0x00000011 , 0x00000013 
+ 00020513  0x00004a2f ifetch  0x00000002 , 0x00000006 
+ 00020514  0x00004a30 copy  0x0000003f , 0x0000000b 
+ 00020515  0x00004a31 ifetch  0x00000002 , 0x00000006 
+ 00020516  0x00004a32 copy  0x0000003f , 0x00000002 
+ 00020517  0x00004a33 call  0x00007ea8 
+ 00020518  0x00004a34 bpatchx  0x00000017 , 0x00004022 
+ 00020519  0x00004a35 setarg  0x00000050 
+ 00020520  0x00004a36 isub  0x00000002 , 0x0000003e 
+ 00020521  0x00004a37 branch  0x00005035 , 0x00000005 
+ 00020522  0x00004a38 setarg  0x00000051 
+ 00020523  0x00004a39 isub  0x00000002 , 0x0000003e 
+ 00020524  0x00004a3a branch  0x0000503b , 0x00000005 
+ 00020525  0x00004a3b setarg  0x00000052 
+ 00020526  0x00004a3c isub  0x00000002 , 0x0000003e 
+ 00020527  0x00004a3d branch  0x00005041 , 0x00000005 
+ 00020528  0x00004a3e setarg  0x00000053 
+ 00020529  0x00004a3f isub  0x00000002 , 0x0000003e 
+ 00020530  0x00004a40 branch  0x00005047 , 0x00000005 
+ 00020531  0x00004a41 call  0x00005062 
+ 00020532  0x00004a42 branch  0x0000504f 
+ 00020533  0x00004a44 copy  0x00000002 , 0x00000011 
+ 00020534  0x00004a45 copy  0x0000000b , 0x00000002 
+ 00020535  0x00004a46 fetch  0x00000002 , 0x00004248 
+ 00020536  0x00004a47 isub  0x00000002 , 0x0000003e 
+ 00020537  0x00004a48 call  0x00005074 , 0x00000005 
+ 00020538  0x00004a49 branch  0x0000504d 
+ 00020539  0x00004a4b copy  0x00000002 , 0x00000011 
+ 00020540  0x00004a4c copy  0x0000000b , 0x00000002 
+ 00020541  0x00004a4d fetch  0x00000002 , 0x0000424a 
+ 00020542  0x00004a4e isub  0x00000002 , 0x0000003e 
+ 00020543  0x00004a4f call  0x0000506f , 0x00000005 
+ 00020544  0x00004a50 branch  0x0000504d 
+ 00020545  0x00004a52 copy  0x00000002 , 0x00000011 
+ 00020546  0x00004a53 copy  0x0000000b , 0x00000002 
+ 00020547  0x00004a54 fetch  0x00000002 , 0x0000424c 
+ 00020548  0x00004a55 isub  0x00000002 , 0x0000003e 
+ 00020549  0x00004a56 call  0x00005079 , 0x00000005 
+ 00020550  0x00004a57 branch  0x0000504d 
+ 00020551  0x00004a59 copy  0x00000002 , 0x00000011 
+ 00020552  0x00004a5a copy  0x0000000b , 0x00000002 
+ 00020553  0x00004a5b fetch  0x00000002 , 0x0000424e 
+ 00020554  0x00004a5c isub  0x00000002 , 0x0000003e 
+ 00020555  0x00004a5d call  0x0000507f , 0x00000005 
+ 00020556  0x00004a5e branch  0x0000504d 
+ 00020557  0x00004a60 call  0x00007ead 
+ 00020558  0x00004a61 branch  0x00004e1e 
+ 00020559  0x00004a63 branch  0x00004e1e 
+ 00020560  0x00004a67 ifetch  0x00000001 , 0x00000006 
+ 00020561  0x00004a68 copy  0x0000003f , 0x00000007 
+ 00020562  0x00004a69 ifetch  0x00000002 , 0x00000006 
+ 00020563  0x00004a6a copy  0x0000003f , 0x00000011 
+ 00020564  0x00004a6b iadd  0x00000006 , 0x00000006 
+ 00020565  0x00004a6c setarg  0x00000009 
+ 00020566  0x00004a6d istore  0x00000001 , 0x00000005 
+ 00020567  0x00004a6e copy  0x00000007 , 0x0000003f 
+ 00020568  0x00004a6f istore  0x00000001 , 0x00000005 
+ 00020569  0x00004a70 force  0x00000000 , 0x0000003f 
+ 00020570  0x00004a71 istore  0x00000002 , 0x00000005 
+ 00020571  0x00004a72 force  0x00000004 , 0x0000003f 
+ 00020572  0x00004a73 iadd  0x00000012 , 0x00000012 
+ 00020573  0x00004a74 copy  0x00000013 , 0x0000003f 
+ 00020574  0x00004a75 isub  0x00000011 , 0x00000013 
+ 00020575  0x00004a76 branch  0x00004e1e 
+ 00020576  0x00004a78 branch  0x00004e1e 
+ 00020577  0x00004a7b branch  0x00004e1e 
+ 00020578  0x00004a7d force  0x00000000 , 0x00000012 
+ 00020579  0x00004a7e call  0x000052c3 
+ 00020580  0x00004a7f setarg  0x00000001 
+ 00020581  0x00004a80 istore  0x00000001 , 0x00000005 
+ 00020582  0x00004a81 copy  0x00000007 , 0x0000003f 
+ 00020583  0x00004a82 istore  0x00000001 , 0x00000005 
+ 00020584  0x00004a83 setarg  0x00000002 
+ 00020585  0x00004a84 istore  0x00000002 , 0x00000005 
+ 00020586  0x00004a85 setarg  0x00000000 
+ 00020587  0x00004a86 istore  0x00000002 , 0x00000005 
+ 00020588  0x00004a87 increase  0x00000006 , 0x00000012 
+ 00020589  0x00004a88 arg  0x00000004 , 0x00000013 
+ 00020590  0x00004a89 branch  0x00004e1e 
+ 00020591  0x00004a8e setarg  0x00000000 
+ 00020592  0x00004a8f store  0x00000002 , 0x0000027b 
+ 00020593  0x00004a90 store  0x00000002 , 0x0000424a 
+ 00020594  0x00004a91 jam  0x00000000 , 0x00004251 
+ 00020595  0x00004a92 rtn 
+ 00020596  0x00004a94 setarg  0x00000000 
+ 00020597  0x00004a95 store  0x00000002 , 0x00000275 
+ 00020598  0x00004a96 store  0x00000002 , 0x00004248 
+ 00020599  0x00004a97 jam  0x00000000 , 0x00004250 
+ 00020600  0x00004a98 rtn 
+ 00020601  0x00004a9a setarg  0x00000000 
+ 00020602  0x00004a9b store  0x00000002 , 0x0000424c 
+ 00020603  0x00004a9c jam  0x00000000 , 0x00004252 
+ 00020604  0x00004a9d fetch  0x00000001 , 0x00004253 
+ 00020605  0x00004a9e beq  0x00000000 , 0x00005085 
+ 00020606  0x00004a9f rtn 
+ 00020607  0x00004aa2 setarg  0x00000000 
+ 00020608  0x00004aa3 store  0x00000002 , 0x0000424e 
+ 00020609  0x00004aa4 jam  0x00000000 , 0x00004253 
+ 00020610  0x00004aa5 fetch  0x00000001 , 0x00004252 
+ 00020611  0x00004aa6 beq  0x00000000 , 0x00005085 
+ 00020612  0x00004aa7 rtn 
+ 00020613  0x00004aaa jam  0x00000007 , 0x00000a99 
+ 00020614  0x00004aab branch  0x00007d86 
+ 00020615  0x00004aae fetch  0x00000001 , 0x0000027f 
+ 00020616  0x00004aaf set0  0x00000000 , 0x0000003f 
+ 00020617  0x00004ab0 store  0x00000001 , 0x0000027f 
+ 00020618  0x00004ab1 fetch  0x00000002 , 0x0000424e 
+ 00020619  0x00004ab2 rtn  0x00000034 
+ 00020620  0x00004ab3 call  0x000052b8 
+ 00020621  0x00004ab4 fetch  0x00000002 , 0x0000424e 
+ 00020622  0x00004ab5 copy  0x0000003f , 0x00000011 
+ 00020623  0x00004ab6 force  0x00000053 , 0x00000012 
+ 00020624  0x00004ab7 branch  0x0000509a 
+ 00020625  0x00004ab9 fetch  0x00000001 , 0x0000027f 
+ 00020626  0x00004aba set0  0x00000007 , 0x0000003f 
+ 00020627  0x00004abb store  0x00000001 , 0x0000027f 
+ 00020628  0x00004abc fetch  0x00000002 , 0x0000424c 
+ 00020629  0x00004abd rtn  0x00000034 
+ 00020630  0x00004abe call  0x000052b8 
+ 00020631  0x00004abf fetch  0x00000002 , 0x0000424c 
+ 00020632  0x00004ac0 copy  0x0000003f , 0x00000011 
+ 00020633  0x00004ac1 force  0x00000052 , 0x00000012 
+ 00020634  0x00004ac3 call  0x0000523a 
+ 00020635  0x00004ac4 call  0x000052c3 
+ 00020636  0x00004ac5 force  0x00000006 , 0x0000003f 
+ 00020637  0x00004ac6 istore  0x00000001 , 0x00000005 
+ 00020638  0x00004ac7 fetch  0x00000001 , 0x00004255 
+ 00020639  0x00004ac8 istore  0x00000001 , 0x00000005 
+ 00020640  0x00004ac9 setarg  0x00000004 
+ 00020641  0x00004aca istore  0x00000002 , 0x00000005 
+ 00020642  0x00004acb copy  0x00000011 , 0x0000003f 
+ 00020643  0x00004acc istore  0x00000002 , 0x00000005 
+ 00020644  0x00004acd copy  0x00000012 , 0x0000003f 
+ 00020645  0x00004ace istore  0x00000002 , 0x00000005 
+ 00020646  0x00004acf force  0x00000008 , 0x00000002 
+ 00020647  0x00004ad0 branch  0x000050de 
+ 00020648  0x00004ad3 bpatchx  0x00000018 , 0x00004023 
+ 00020649  0x00004ad4 call  0x0000523a 
+ 00020650  0x00004ad5 call  0x000052c3 
+ 00020651  0x00004ad6 setarg  0x00000002 
+ 00020652  0x00004ad7 istore  0x00000001 , 0x00000005 
+ 00020653  0x00004ad8 fetch  0x00000001 , 0x00004255 
+ 00020654  0x00004ad9 istore  0x00000001 , 0x00000005 
+ 00020655  0x00004ada setarg  0x00000004 
+ 00020656  0x00004adb istore  0x00000002 , 0x00000005 
+ 00020657  0x00004adc copy  0x00000002 , 0x0000003f 
+ 00020658  0x00004add istore  0x00000002 , 0x00000005 
+ 00020659  0x00004ade copy  0x0000000b , 0x0000003f 
+ 00020660  0x00004adf istore  0x00000002 , 0x00000005 
+ 00020661  0x00004ae0 arg  0x00000008 , 0x00000002 
+ 00020662  0x00004ae1 branch  0x000050de 
+ 00020663  0x00004ae3 bpatchx  0x00000019 , 0x00004023 
+ 00020664  0x00004ae4 call  0x0000523a 
+ 00020665  0x00004ae5 call  0x000052c3 
+ 00020666  0x00004ae6 setarg  0x00000004 
+ 00020667  0x00004ae7 istore  0x00000001 , 0x00000005 
+ 00020668  0x00004ae8 fetch  0x00000001 , 0x00004255 
+ 00020669  0x00004ae9 istore  0x00000001 , 0x00000005 
+ 00020670  0x00004aea setarg  0x00000008 
+ 00020671  0x00004aeb istore  0x00000002 , 0x00000005 
+ 00020672  0x00004aed copy  0x00000002 , 0x0000003f 
+ 00020673  0x00004aef istore  0x00000002 , 0x00000005 
+ 00020674  0x00004af0 setarg  0x00000000 
+ 00020675  0x00004af1 istore  0x00000002 , 0x00000005 
+ 00020676  0x00004af2 setarg  0x00000001 
+ 00020677  0x00004af3 istore  0x00000001 , 0x00000005 
+ 00020678  0x00004af4 setarg  0x00000002 
+ 00020679  0x00004af5 istore  0x00000001 , 0x00000005 
+ 00020680  0x00004af6 setarg  0x000003e3 
+ 00020681  0x00004af7 istore  0x00000002 , 0x00000005 
+ 00020682  0x00004af8 arg  0x0000000c , 0x00000002 
+ 00020683  0x00004af9 branch  0x000050de 
+ 00020684  0x00004afb bpatchx  0x0000001a , 0x00004023 
+ 00020685  0x00004afc call  0x0000523a 
+ 00020686  0x00004afd call  0x000052c3 
+ 00020687  0x00004afe setarg  0x00000006 
+ 00020688  0x00004aff istore  0x00000001 , 0x00000005 
+ 00020689  0x00004b00 fetch  0x00000001 , 0x00004255 
+ 00020690  0x00004b01 increase  0x00000001 , 0x0000003f 
+ 00020691  0x00004b02 copy  0x00000005 , 0x00000011 
+ 00020692  0x00004b03 store  0x00000001 , 0x00004255 
+ 00020693  0x00004b04 copy  0x00000011 , 0x00000005 
+ 00020694  0x00004b05 istore  0x00000001 , 0x00000005 
+ 00020695  0x00004b06 setarg  0x00000004 
+ 00020696  0x00004b07 istore  0x00000002 , 0x00000005 
+ 00020697  0x00004b08 copy  0x00000002 , 0x0000003f 
+ 00020698  0x00004b09 istore  0x00000002 , 0x00000005 
+ 00020699  0x00004b0a copy  0x0000000b , 0x0000003f 
+ 00020700  0x00004b0b istore  0x00000002 , 0x00000005 
+ 00020701  0x00004b0c arg  0x00000008 , 0x00000002 
+ 00020702  0x00004b10 storet  0x00000002 , 0x0000026f 
+ 00020703  0x00004b11 copy  0x00000002 , 0x0000003f 
+ 00020704  0x00004b12 branch  0x00005264 , 0x00000034 
+ 00020705  0x00004b13 call  0x000052c1 
+ 00020706  0x00004b14 fetch  0x00000002 , 0x0000026f 
+ 00020707  0x00004b15 istore  0x00000002 , 0x00000005 
+ 00020708  0x00004b16 force  0x00000001 , 0x0000003f 
+ 00020709  0x00004b17 istore  0x00000002 , 0x00000005 
+ 00020710  0x00004b18 rtn 
+ 00020711  0x00004b1b fetch  0x00000002 , 0x00000275 
+ 00020712  0x00004b1c branch  0x00002a8c , 0x00000034 
+ 00020713  0x00004b1d call  0x000052ce 
+ 00020714  0x00004b1e fetch  0x00000002 , 0x00000275 
+ 00020715  0x00004b1f istore  0x00000002 , 0x00000005 
+ 00020716  0x00004b20 fetch  0x00000002 , 0x00004248 
+ 00020717  0x00004b21 istore  0x00000002 , 0x00000005 
+ 00020718  0x00004b22 rtn 
+ 00020719  0x00004b24 fetch  0x00000002 , 0x00000266 
+ 00020720  0x00004b25 branch  0x00004dfc , 0x00000034 
+ 00020721  0x00004b26 bpatchx  0x0000001b , 0x00004023 
+ 00020722  0x00004b27 fetch  0x00000001 , 0x00000268 
+ 00020723  0x00004b28 beq  0x00000001 , 0x000050f9 
+ 00020724  0x00004b29 beq  0x00000050 , 0x00004de8 
+ 00020725  0x00004b2a beq  0x00000051 , 0x00004df5 
+ 00020726  0x00004b2b beq  0x00000052 , 0x00004df3 
+ 00020727  0x00004b2c beq  0x00000053 , 0x00004df3 
+ 00020728  0x00004b2d branch  0x00004dfc 
+ 00020729  0x00004b30 bpatchx  0x0000001c , 0x00004023 
+ 00020730  0x00004b31 call  0x000052b8 
+ 00020731  0x00004b32 force  0x00000000 , 0x00000012 
+ 00020732  0x00004b33 call  0x000052c3 
+ 00020733  0x00004b34 copy  0x0000003f , 0x00000005 
+ 00020734  0x00004b35 fetch  0x00000002 , 0x00000266 
+ 00020735  0x00004b36 copy  0x0000003f , 0x00000013 
+ 00020736  0x00004b37 fetch  0x00000002 , 0x00000264 
+ 00020737  0x00004b38 iforce  0x00000006 
+ 00020738  0x00004b3a call  0x00005108 
+ 00020739  0x00004b3b increase  0xfffffffc , 0x00000013 
+ 00020740  0x00004b3c nbranch  0x00005102 , 0x00000005 
+ 00020741  0x00004b3d copy  0x00000012 , 0x00000002 
+ 00020742  0x00004b3e call  0x000050de 
+ 00020743  0x00004b3f branch  0x00004dfc 
+ 00020744  0x00004b42 ifetch  0x00000001 , 0x00000006 
+ 00020745  0x00004b43 beq  0x00000002 , 0x00005113 
+ 00020746  0x00004b44 beq  0x00000001 , 0x00005116 
+ 00020747  0x00004b45 beq  0x00000003 , 0x00005120 
+ 00020748  0x00004b46 beq  0x00000005 , 0x0000515c 
+ 00020749  0x00004b47 beq  0x00000004 , 0x0000518e 
+ 00020750  0x00004b48 beq  0x00000007 , 0x00005213 
+ 00020751  0x00004b49 beq  0x00000006 , 0x000051e1 
+ 00020752  0x00004b4a beq  0x00000008 , 0x00005050 
+ 00020753  0x00004b4b beq  0x0000000a , 0x00004e3a 
+ 00020754  0x00004b4c branch  0x0000522e 
+ 00020755  0x00004b4f call  0x00007ea8 
+ 00020756  0x00004b51 call  0x00007ead 
+ 00020757  0x00004b52 branch  0x00004e51 
+ 00020758  0x00004b54 ifetch  0x00000001 , 0x00000006 
+ 00020759  0x00004b55 copy  0x0000003f , 0x00000007 
+ 00020760  0x00004b56 ifetch  0x00000002 , 0x00000006 
+ 00020761  0x00004b57 copy  0x0000003f , 0x00000011 
+ 00020762  0x00004b58 copy  0x00000013 , 0x0000003f 
+ 00020763  0x00004b59 isub  0x00000011 , 0x00000013 
+ 00020764  0x00004b5b ifetch  0x00000001 , 0x00000006 
+ 00020765  0x00004b5c increase  0xffffffff , 0x00000011 
+ 00020766  0x00004b5d nbranch  0x0000511c , 0x00000005 
+ 00020767  0x00004b5e rtn 
+ 00020768  0x00004b60 ifetch  0x00000001 , 0x00000006 
+ 00020769  0x00004b61 copy  0x0000003f , 0x00000007 
+ 00020770  0x00004b62 ifetch  0x00000002 , 0x00000006 
+ 00020771  0x00004b63 copy  0x0000003f , 0x00000011 
+ 00020772  0x00004b64 ifetch  0x00000002 , 0x00000006 
+ 00020773  0x00004b65 copy  0x0000003f , 0x0000000b 
+ 00020774  0x00004b66 ifetch  0x00000002 , 0x00000006 
+ 00020775  0x00004b67 copy  0x0000003f , 0x00000002 
+ 00020776  0x00004b68 ifetch  0x00000002 , 0x00000006 
+ 00020777  0x00004b69 sub  0x0000003f , 0x00000000 , 0x0000003e 
+ 00020778  0x00004b6a branch  0x00005132 , 0x00000005 
+ 00020779  0x00004b6b beq  0x00000002 , 0x0000512e 
+ 00020780  0x00004b6c beq  0x00000004 , 0x0000512e 
+ 00020781  0x00004b6d branch  0x00005130 
+ 00020782  0x00004b6f jam  0x00000016 , 0x00000a99 
+ 00020783  0x00004b70 call  0x00007d86 
+ 00020784  0x00004b72 ifetch  0x00000002 , 0x00000006 
+ 00020785  0x00004b73 branch  0x00005159 
+ 00020786  0x00004b75 call  0x00007ea8 
+ 00020787  0x00004b79 bpatchx  0x0000001d , 0x00004023 
+ 00020788  0x00004b7a setarg  0x00000050 
+ 00020789  0x00004b7b isub  0x00000002 , 0x0000003e 
+ 00020790  0x00004b7c branch  0x00005141 , 0x00000005 
+ 00020791  0x00004b7d setarg  0x00000051 
+ 00020792  0x00004b7e isub  0x00000002 , 0x0000003e 
+ 00020793  0x00004b7f branch  0x00005147 , 0x00000005 
+ 00020794  0x00004b80 setarg  0x00000053 
+ 00020795  0x00004b81 isub  0x00000002 , 0x0000003e 
+ 00020796  0x00004b82 branch  0x00005153 , 0x00000005 
+ 00020797  0x00004b83 setarg  0x00000052 
+ 00020798  0x00004b84 isub  0x00000002 , 0x0000003e 
+ 00020799  0x00004b85 branch  0x0000514d , 0x00000005 
+ 00020800  0x00004b86 branch  0x00005159 
+ 00020801  0x00004b88 copy  0x0000000b , 0x0000003f 
+ 00020802  0x00004b89 store  0x00000002 , 0x00004248 
+ 00020803  0x00004b8a fetch  0x00000001 , 0x00004250 
+ 00020804  0x00004b8b set1  0x00000001 
+ 00020805  0x00004b8c store  0x00000001 , 0x00004250 
+ 00020806  0x00004b8d branch  0x00005158 
+ 00020807  0x00004b8f copy  0x0000000b , 0x0000003f 
+ 00020808  0x00004b90 store  0x00000002 , 0x0000424a 
+ 00020809  0x00004b91 fetch  0x00000001 , 0x00004251 
+ 00020810  0x00004b92 set1  0x00000001 
+ 00020811  0x00004b93 store  0x00000001 , 0x00004251 
+ 00020812  0x00004b94 branch  0x00005158 
+ 00020813  0x00004b96 copy  0x0000000b , 0x0000003f 
+ 00020814  0x00004b97 store  0x00000002 , 0x0000424c 
+ 00020815  0x00004b98 fetch  0x00000001 , 0x00004252 
+ 00020816  0x00004b99 set1  0x00000001 
+ 00020817  0x00004b9a store  0x00000001 , 0x00004252 
+ 00020818  0x00004b9b branch  0x00005158 
+ 00020819  0x00004b9d copy  0x0000000b , 0x0000003f 
+ 00020820  0x00004b9e store  0x00000002 , 0x0000424e 
+ 00020821  0x00004b9f fetch  0x00000001 , 0x00004253 
+ 00020822  0x00004ba0 set1  0x00000001 
+ 00020823  0x00004ba1 store  0x00000001 , 0x00004253 
+ 00020824  0x00004ba5 call  0x00007ead 
+ 00020825  0x00004ba7 copy  0x00000013 , 0x0000003f 
+ 00020826  0x00004ba8 isub  0x00000011 , 0x00000013 
+ 00020827  0x00004ba9 rtn 
+ 00020828  0x00004bac ifetch  0x00000001 , 0x00000006 
+ 00020829  0x00004bad copy  0x0000003f , 0x00000007 
+ 00020830  0x00004bae ifetch  0x00000002 , 0x00000006 
+ 00020831  0x00004baf copy  0x0000003f , 0x00000011 
+ 00020832  0x00004bb0 copy  0x00000013 , 0x0000003f 
+ 00020833  0x00004bb1 isub  0x00000011 , 0x00000013 
+ 00020834  0x00004bb2 ifetch  0x00000002 , 0x00000006 
+ 00020835  0x00004bb3 copy  0x0000003f , 0x0000000b 
+ 00020836  0x00004bb4 ifetch  0x00000002 , 0x00000006 
+ 00020837  0x00004bb5 ifetch  0x00000002 , 0x00000006 
+ 00020838  0x00004bb6 nbranch  0x00005188 , 0x00000034 
+ 00020839  0x00004bb7 call  0x00007ea8 
+ 00020840  0x00004bbb copy  0x0000000b , 0x00000002 
+ 00020841  0x00004bbc bpatchx  0x0000001e , 0x00004023 
+ 00020842  0x00004bbd setarg  0x00000050 
+ 00020843  0x00004bbe isub  0x00000002 , 0x0000003e 
+ 00020844  0x00004bbf branch  0x00005176 , 0x00000005 
+ 00020845  0x00004bc0 setarg  0x00000051 
+ 00020846  0x00004bc1 isub  0x00000002 , 0x0000003e 
+ 00020847  0x00004bc2 branch  0x0000517a , 0x00000005 
+ 00020848  0x00004bc3 setarg  0x00000052 
+ 00020849  0x00004bc4 isub  0x00000002 , 0x0000003e 
+ 00020850  0x00004bc5 branch  0x0000517e , 0x00000005 
+ 00020851  0x00004bc6 setarg  0x00000053 
+ 00020852  0x00004bc7 isub  0x00000002 , 0x0000003e 
+ 00020853  0x00004bc8 branch  0x00005182 , 0x00000005 
+ 00020854  0x00004bca fetch  0x00000001 , 0x00004250 
+ 00020855  0x00004bcb set1  0x00000005 
+ 00020856  0x00004bcc store  0x00000001 , 0x00004250 
+ 00020857  0x00004bcd rtn 
+ 00020858  0x00004bcf fetch  0x00000001 , 0x00004251 
+ 00020859  0x00004bd0 set1  0x00000005 
+ 00020860  0x00004bd1 store  0x00000001 , 0x00004251 
+ 00020861  0x00004bd2 rtn 
+ 00020862  0x00004bd4 fetch  0x00000001 , 0x00004252 
+ 00020863  0x00004bd5 set1  0x00000005 
+ 00020864  0x00004bd6 store  0x00000001 , 0x00004252 
+ 00020865  0x00004bd7 rtn 
+ 00020866  0x00004bd9 fetch  0x00000001 , 0x00004253 
+ 00020867  0x00004bda set1  0x00000005 
+ 00020868  0x00004bdb store  0x00000001 , 0x00004253 
+ 00020869  0x00004bdc jam  0x00000006 , 0x00000a99 
+ 00020870  0x00004bdd branch  0x00007d86 
+ 00020871  0x00004be1 call  0x00007ead 
+ 00020872  0x00004be3 increase  0xfffffffa , 0x00000011 
+ 00020873  0x00004be5 branch  0x0000518d , 0x00000005 
+ 00020874  0x00004be6 increase  0x00000001 , 0x00000006 
+ 00020875  0x00004be7 increase  0xffffffff , 0x00000011 
+ 00020876  0x00004be8 branch  0x00005189 
+ 00020877  0x00004bea rtn 
+ 00020878  0x00004bec ifetch  0x00000001 , 0x00000006 
+ 00020879  0x00004bed copy  0x0000003f , 0x00000007 
+ 00020880  0x00004bee ifetch  0x00000002 , 0x00000006 
+ 00020881  0x00004bef copy  0x0000003f , 0x00000011 
+ 00020882  0x00004bf0 copy  0x00000013 , 0x0000003f 
+ 00020883  0x00004bf1 isub  0x00000011 , 0x00000013 
+ 00020884  0x00004bf2 ifetch  0x00000002 , 0x00000006 
+ 00020885  0x00004bf3 increase  0x00000002 , 0x00000006 
+ 00020886  0x00004bf4 copy  0x0000003f , 0x00000002 
+ 00020887  0x00004bf5 setarg  0x00000005 
+ 00020888  0x00004bf6 istore  0x00000001 , 0x00000005 
+ 00020889  0x00004bf7 copy  0x00000007 , 0x0000003f 
+ 00020890  0x00004bf8 istore  0x00000001 , 0x00000005 
+ 00020891  0x00004bf9 increase  0x00000002 , 0x00000011 
+ 00020892  0x00004bfa copy  0x00000011 , 0x0000003f 
+ 00020893  0x00004bfb istore  0x00000002 , 0x00000005 
+ 00020894  0x00004bfc call  0x00007ea8 
+ 00020895  0x00004bfd bpatchx  0x0000001f , 0x00004023 
+ 00020896  0x00004bfe setarg  0x00000050 
+ 00020897  0x00004bff isub  0x00000002 , 0x0000003e 
+ 00020898  0x00004c00 branch  0x000051ad , 0x00000005 
+ 00020899  0x00004c01 setarg  0x00000051 
+ 00020900  0x00004c02 isub  0x00000002 , 0x0000003e 
+ 00020901  0x00004c03 branch  0x000051be , 0x00000005 
+ 00020902  0x00004c04 setarg  0x00000052 
+ 00020903  0x00004c05 isub  0x00000002 , 0x0000003e 
+ 00020904  0x00004c06 branch  0x000051c4 , 0x00000005 
+ 00020905  0x00004c07 setarg  0x00000053 
+ 00020906  0x00004c08 isub  0x00000002 , 0x0000003e 
+ 00020907  0x00004c09 branch  0x000051ca , 0x00000005 
+ 00020908  0x00004c0a branch  0x000051cf 
+ 00020909  0x00004c0c fetch  0x00000001 , 0x00004250 
+ 00020910  0x00004c0d set1  0x00000004 , 0x0000003f 
+ 00020911  0x00004c0e set1  0x00000003 , 0x0000003f 
+ 00020912  0x00004c0f store  0x00000001 , 0x00004250 
+ 00020913  0x00004c10 bbit1  0x00000002 , 0x000051bb 
+ 00020914  0x00004c11 fetcht  0x00000001 , 0x0000027f 
+ 00020915  0x00004c12 set1  0x00000006 , 0x00000002 
+ 00020916  0x00004c13 storet  0x00000001 , 0x0000027f 
+ 00020917  0x00004c14 copy  0x00000007 , 0x0000003f 
+ 00020918  0x00004c15 increase  0x00000001 , 0x0000003f 
+ 00020919  0x00004c16 store  0x00000001 , 0x00000281 
+ 00020920  0x00004c17 fetch  0x00000001 , 0x00004250 
+ 00020921  0x00004c18 set1  0x00000002 , 0x0000003f 
+ 00020922  0x00004c19 store  0x00000001 , 0x00004250 
+ 00020923  0x00004c1b fetch  0x00000002 , 0x00004248 
+ 00020924  0x00004c1c store  0x00000002 , 0x00000282 
+ 00020925  0x00004c1d branch  0x000051cf 
+ 00020926  0x00004c1f fetch  0x00000001 , 0x00004251 
+ 00020927  0x00004c20 set1  0x00000004 , 0x0000003f 
+ 00020928  0x00004c21 set1  0x00000003 , 0x0000003f 
+ 00020929  0x00004c22 store  0x00000001 , 0x00004251 
+ 00020930  0x00004c23 fetch  0x00000002 , 0x0000424a 
+ 00020931  0x00004c24 branch  0x000051cf 
+ 00020932  0x00004c26 fetch  0x00000001 , 0x00004252 
+ 00020933  0x00004c27 set1  0x00000004 , 0x0000003f 
+ 00020934  0x00004c28 set1  0x00000003 , 0x0000003f 
+ 00020935  0x00004c29 store  0x00000001 , 0x00004252 
+ 00020936  0x00004c2a fetch  0x00000002 , 0x0000424c 
+ 00020937  0x00004c2b branch  0x000051cf 
+ 00020938  0x00004c2d fetch  0x00000001 , 0x00004253 
+ 00020939  0x00004c2e set1  0x00000004 , 0x0000003f 
+ 00020940  0x00004c2f set1  0x00000003 , 0x0000003f 
+ 00020941  0x00004c30 store  0x00000001 , 0x00004253 
+ 00020942  0x00004c31 fetch  0x00000002 , 0x0000424e 
+ 00020943  0x00004c35 copy  0x0000003f , 0x0000000b 
+ 00020944  0x00004c36 call  0x00007ead 
+ 00020945  0x00004c38 copy  0x0000000b , 0x0000003f 
+ 00020946  0x00004c3a istore  0x00000002 , 0x00000005 
+ 00020947  0x00004c3b force  0x00000000 , 0x0000003f 
+ 00020948  0x00004c3c istore  0x00000002 , 0x00000005 
+ 00020949  0x00004c3d force  0x00000000 , 0x0000003f 
+ 00020950  0x00004c3e istore  0x00000002 , 0x00000005 
+ 00020951  0x00004c3f force  0x0000000a , 0x0000003f 
+ 00020952  0x00004c40 iadd  0x00000012 , 0x00000012 
+ 00020953  0x00004c41 increase  0xfffffffa , 0x00000011 
+ 00020954  0x00004c43 branch  0x000051e0 , 0x00000005 
+ 00020955  0x00004c44 ifetch  0x00000001 , 0x00000006 
+ 00020956  0x00004c45 istore  0x00000001 , 0x00000005 
+ 00020957  0x00004c46 increase  0x00000001 , 0x00000012 
+ 00020958  0x00004c47 increase  0xffffffff , 0x00000011 
+ 00020959  0x00004c48 branch  0x000051da 
+ 00020960  0x00004c4a rtn 
+ 00020961  0x00004c4c ifetch  0x00000001 , 0x00000006 
+ 00020962  0x00004c4d copy  0x0000003f , 0x00000007 
+ 00020963  0x00004c4e ifetch  0x00000002 , 0x00000006 
+ 00020964  0x00004c4f copy  0x0000003f , 0x00000011 
+ 00020965  0x00004c50 copy  0x00000013 , 0x0000003f 
+ 00020966  0x00004c51 isub  0x00000011 , 0x00000013 
+ 00020967  0x00004c53 ifetch  0x00000002 , 0x00000006 
+ 00020968  0x00004c54 copy  0x0000003f , 0x00000011 
+ 00020969  0x00004c55 ifetch  0x00000002 , 0x00000006 
+ 00020970  0x00004c56 copy  0x0000003f , 0x0000000b 
+ 00020971  0x00004c57 call  0x00007ea8 
+ 00020972  0x00004c58 bpatchx  0x00000020 , 0x00004024 
+ 00020973  0x00004c59 setarg  0x00000050 
+ 00020974  0x00004c5a copy  0x00000011 , 0x00000002 
+ 00020975  0x00004c5b isub  0x00000002 , 0x0000003e 
+ 00020976  0x00004c5c branch  0x000051fa , 0x00000005 
+ 00020977  0x00004c5d setarg  0x00000052 
+ 00020978  0x00004c5e copy  0x00000011 , 0x00000002 
+ 00020979  0x00004c5f isub  0x00000002 , 0x0000003e 
+ 00020980  0x00004c60 branch  0x000051ff , 0x00000005 
+ 00020981  0x00004c61 setarg  0x00000053 
+ 00020982  0x00004c62 copy  0x00000011 , 0x00000002 
+ 00020983  0x00004c63 isub  0x00000002 , 0x0000003e 
+ 00020984  0x00004c64 branch  0x00005201 , 0x00000005 
+ 00020985  0x00004c65 branch  0x00005203 
+ 00020986  0x00004c67 setarg  0x00000000 
+ 00020987  0x00004c68 store  0x00000002 , 0x00000275 
+ 00020988  0x00004c69 store  0x00000002 , 0x00004248 
+ 00020989  0x00004c6a store  0x00000001 , 0x00004250 
+ 00020990  0x00004c6b branch  0x00005205 
+ 00020991  0x00004c6d call  0x00005079 
+ 00020992  0x00004c6e branch  0x00005205 
+ 00020993  0x00004c70 call  0x0000507f 
+ 00020994  0x00004c76 branch  0x00005205 
+ 00020995  0x00004c78 setarg  0x00000000 
+ 00020996  0x00004c79 store  0x00000002 , 0x0000027b 
+ 00020997  0x00004c7b call  0x00007ead 
+ 00020998  0x00004c7c setarg  0x00000007 
+ 00020999  0x00004c7d istore  0x00000001 , 0x00000005 
+ 00021000  0x00004c7e copy  0x00000007 , 0x0000003f 
+ 00021001  0x00004c7f istore  0x00000001 , 0x00000005 
+ 00021002  0x00004c80 setarg  0x00000004 
+ 00021003  0x00004c81 istore  0x00000002 , 0x00000005 
+ 00021004  0x00004c82 copy  0x00000011 , 0x0000003f 
+ 00021005  0x00004c83 istore  0x00000002 , 0x00000005 
+ 00021006  0x00004c84 copy  0x0000000b , 0x0000003f 
+ 00021007  0x00004c85 istore  0x00000002 , 0x00000005 
+ 00021008  0x00004c86 force  0x00000008 , 0x0000003f 
+ 00021009  0x00004c87 iadd  0x00000012 , 0x00000012 
+ 00021010  0x00004c88 rtn 
+ 00021011  0x00004c8b ifetch  0x00000001 , 0x00000006 
+ 00021012  0x00004c8c copy  0x0000003f , 0x00000007 
+ 00021013  0x00004c8d ifetch  0x00000002 , 0x00000006 
+ 00021014  0x00004c8e copy  0x0000003f , 0x00000011 
+ 00021015  0x00004c8f ifetch  0x00000002 , 0x00000006 
+ 00021016  0x00004c90 copy  0x0000003f , 0x0000000b 
+ 00021017  0x00004c91 ifetch  0x00000002 , 0x00000006 
+ 00021018  0x00004c92 copy  0x0000003f , 0x00000002 
+ 00021019  0x00004c93 call  0x00007ea8 
+ 00021020  0x00004c94 bpatchx  0x00000021 , 0x00004024 
+ 00021021  0x00004c95 fetch  0x00000001 , 0x00004255 
+ 00021022  0x00004c96 icompare  0x000000ff , 0x00000007 
+ 00021023  0x00004c97 nbranch  0x0000522a , 0x00000001 
+ 00021024  0x00004c98 setarg  0x00000050 
+ 00021025  0x00004c99 isub  0x00000002 , 0x0000003e 
+ 00021026  0x00004c9a branch  0x00005227 , 0x00000005 
+ 00021027  0x00004c9b setarg  0x00000051 
+ 00021028  0x00004c9c isub  0x00000002 , 0x0000003e 
+ 00021029  0x00004c9d branch  0x0000522a , 0x00000005 
+ 00021030  0x00004c9e branch  0x0000522a 
+ 00021031  0x00004ca0 jam  0x00000000 , 0x00004248 
+ 00021032  0x00004ca1 jam  0x00000000 , 0x00004250 
+ 00021033  0x00004ca2 branch  0x0000522a 
+ 00021034  0x00004ca7 call  0x00007ead 
+ 00021035  0x00004ca8 copy  0x00000013 , 0x0000003f 
+ 00021036  0x00004ca9 isub  0x00000011 , 0x00000013 
+ 00021037  0x00004caa rtn 
+ 00021038  0x00004cad setarg  0x00000001 
+ 00021039  0x00004cae istore  0x00000001 , 0x00000005 
+ 00021040  0x00004caf ifetch  0x00000001 , 0x00000006 
+ 00021041  0x00004cb0 istore  0x00000001 , 0x00000005 
+ 00021042  0x00004cb1 setarg  0x00000002 
+ 00021043  0x00004cb2 istore  0x00000002 , 0x00000005 
+ 00021044  0x00004cb3 setarg  0x00000000 
+ 00021045  0x00004cb4 istore  0x00000002 , 0x00000005 
+ 00021046  0x00004cb5 setarg  0x00000006 
+ 00021047  0x00004cb6 iadd  0x00000012 , 0x00000012 
+ 00021048  0x00004cb7 force  0x00000004 , 0x00000013 
+ 00021049  0x00004cb8 rtn 
+ 00021050  0x00004cbc fetch  0x00000001 , 0x00004255 
+ 00021051  0x00004cbd increase  0x00000001 , 0x0000003f 
+ 00021052  0x00004cbe bne  0x00000000 , 0x0000523e 
+ 00021053  0x00004cbf increase  0x00000001 , 0x0000003f 
+ 00021054  0x00004cc1 store  0x00000001 , 0x00004255 
+ 00021055  0x00004cc2 rtn 
+ 00021056  0x00004ccd bpatchx  0x00000022 , 0x00004024 
+ 00021057  0x00004cce arg  0x00000000 , 0x00000012 
+ 00021058  0x00004ccf call  0x0000526e 
+ 00021059  0x00004cd0 nbranch  0x00002a8c , 0x00000034 
+ 00021060  0x00004cd1 call  0x0000527e 
+ 00021061  0x00004cd2 arg  0x00001800 , 0x00000012 
+ 00021062  0x00004cd3 arg  0x00000000 , 0x00000007 
+ 00021063  0x00004cd5 fetcht  0x00000001 , 0x00004256 
+ 00021064  0x00004cd6 qisolate1  0x00000002 
+ 00021065  0x00004cd7 branch  0x0000524f , 0x00000001 
+ 00021066  0x00004cd8 call  0x000052a0 
+ 00021067  0x00004cd9 sub  0x0000000b , 0x00000000 , 0x0000003e 
+ 00021068  0x00004cda branch  0x0000524f , 0x00000002 
+ 00021069  0x00004cdb call  0x00005288 
+ 00021070  0x00004cdc branch  0x00005255 
+ 00021071  0x00004cde increase  0x00000080 , 0x00000012 
+ 00021072  0x00004cdf increase  0x00000001 , 0x00000007 
+ 00021073  0x00004ce0 setarg  0x00000008 
+ 00021074  0x00004ce1 isub  0x00000007 , 0x0000003e 
+ 00021075  0x00004ce2 branch  0x00005247 , 0x00000002 
+ 00021076  0x00004ce3 arg  0x00000000 , 0x00000012 
+ 00021077  0x00004ce5 copy  0x00000012 , 0x0000003f 
+ 00021078  0x00004ce6 branch  0x00002a8c , 0x00000034 
+ 00021079  0x00004ce7 rtn 
+ 00021080  0x00004cf0 bpatchx  0x00000023 , 0x00004024 
+ 00021081  0x00004cf1 call  0x00005277 
+ 00021082  0x00004cf2 increase  0x00000001 , 0x00000006 
+ 00021083  0x00004cf3 ifetch  0x00000002 , 0x00000006 
+ 00021084  0x00004cf4 rtn 
+ 00021085  0x00004cfb bpatchx  0x00000024 , 0x00004024 
+ 00021086  0x00004cfc call  0x00005277 
+ 00021087  0x00004cfd copy  0x00000006 , 0x00000005 
+ 00021088  0x00004cfe copy  0x00000006 , 0x00000002 
+ 00021089  0x00004cff setarg  0x00000000 
+ 00021090  0x00004d00 istore  0x00000003 , 0x00000005 
+ 00021091  0x00004d01 rtn 
+ 00021092  0x00004d07 bpatchx  0x00000025 , 0x00004024 
+ 00021093  0x00004d08 call  0x00005274 
+ 00021094  0x00004d09 branch  0x00002a8c , 0x00000034 
+ 00021095  0x00004d0a fetch  0x00000003 , 0x0000425d 
+ 00021096  0x00004d0b store  0x00000003 , 0x00004260 
+ 00021097  0x00004d0c fetch  0x00000003 , 0x0000425a 
+ 00021098  0x00004d0d store  0x00000003 , 0x0000425d 
+ 00021099  0x00004d0e fetch  0x00000003 , 0x00004257 
+ 00021100  0x00004d0f store  0x00000003 , 0x0000425a 
+ 00021101  0x00004d10 rtn 
+ 00021102  0x00004d17 bpatchx  0x00000026 , 0x00004024 
+ 00021103  0x00004d18 fetch  0x00000003 , 0x00004257 
+ 00021104  0x00004d19 rtn 
+ 00021105  0x00004d20 bpatchx  0x00000027 , 0x00004024 
+ 00021106  0x00004d21 fetch  0x00000003 , 0x0000425a 
+ 00021107  0x00004d22 rtn 
+ 00021108  0x00004d29 bpatchx  0x00000028 , 0x00004025 
+ 00021109  0x00004d2a fetch  0x00000003 , 0x00004260 
+ 00021110  0x00004d2b rtn 
+ 00021111  0x00004d31 call  0x00005274 
+ 00021112  0x00004d32 branch  0x00002a8c , 0x00000034 
+ 00021113  0x00004d33 arg  0x00004257 , 0x00000006 
+ 00021114  0x00004d35 ifetch  0x00000003 , 0x00000006 
+ 00021115  0x00004d36 branch  0x0000527a , 0x00000034 
+ 00021116  0x00004d37 increase  0xfffffffd , 0x00000006 
+ 00021117  0x00004d38 rtn 
+ 00021118  0x00004d40 bpatchx  0x00000029 , 0x00004025 
+ 00021119  0x00004d41 arg  0x00000004 , 0x00000039 
+ 00021120  0x00004d42 arg  0x00004257 , 0x00000006 
+ 00021121  0x00004d43 arg  0x00000000 , 0x00000002 
+ 00021122  0x00004d45 ifetch  0x00000003 , 0x00000006 
+ 00021123  0x00004d46 and  0x0000003f , 0x000000ff , 0x0000003f 
+ 00021124  0x00004d47 ior  0x00000002 , 0x00000002 
+ 00021125  0x00004d48 loop  0x00005282 
+ 00021126  0x00004d49 storet  0x00000001 , 0x00004256 
+ 00021127  0x00004d4a rtn 
+ 00021128  0x00004d53 bpatchx  0x0000002a , 0x00004025 
+ 00021129  0x00004d54 call  0x0000526e 
+ 00021130  0x00004d55 nbranch  0x00002a8c , 0x00000034 
+ 00021131  0x00004d56 call  0x00005274 
+ 00021132  0x00004d57 branch  0x00005295 , 0x00000034 
+ 00021133  0x00004d58 fetch  0x00000003 , 0x0000425a 
+ 00021134  0x00004d59 store  0x00000003 , 0x00004257 
+ 00021135  0x00004d5a ifetch  0x00000003 , 0x00000006 
+ 00021136  0x00004d5b istore  0x00000003 , 0x00000005 
+ 00021137  0x00004d5c ifetch  0x00000003 , 0x00000006 
+ 00021138  0x00004d5d istore  0x00000003 , 0x00000005 
+ 00021139  0x00004d5e setarg  0x00000000 
+ 00021140  0x00004d5f istore  0x00000003 , 0x00000005 
+ 00021141  0x00004d61 arg  0x00000000 , 0x00000002 
+ 00021142  0x00004d62 copy  0x0000000b , 0x0000003f 
+ 00021143  0x00004d63 iadd  0x00000007 , 0x0000003f 
+ 00021144  0x00004d65 qset1  0x00000002 
+ 00021145  0x00004d66 increase  0x00000001 , 0x00000007 
+ 00021146  0x00004d67 isub  0x00000007 , 0x0000003e 
+ 00021147  0x00004d68 nbranch  0x00005298 , 0x00000005 
+ 00021148  0x00004d6a lshift8  0x00000012 , 0x0000003f 
+ 00021149  0x00004d6b ior  0x00000002 , 0x0000003f 
+ 00021150  0x00004d6c store  0x00000003 , 0x00004260 
+ 00021151  0x00004d6d rtn 
+ 00021152  0x00004d78 bpatchx  0x0000002b , 0x00004025 
+ 00021153  0x00004d79 call  0x0000527e 
+ 00021154  0x00004d7a copy  0x00000007 , 0x00000013 
+ 00021155  0x00004d7b arg  0x00000000 , 0x00000002 
+ 00021156  0x00004d7c arg  0x00000000 , 0x0000000b 
+ 00021157  0x00004d7f copy  0x00000007 , 0x0000003f 
+ 00021158  0x00004d80 beq  0x00000008 , 0x000052b0 
+ 00021159  0x00004d81 fetch  0x00000001 , 0x00004256 
+ 00021160  0x00004d82 qisolate1  0x0000003f 
+ 00021161  0x00004d83 branch  0x000052b0 , 0x00000001 
+ 00021162  0x00004d84 increase  0x00000080 , 0x00000002 
+ 00021163  0x00004d85 increase  0x00000001 , 0x00000007 
+ 00021164  0x00004d86 copy  0x00000011 , 0x0000003f 
+ 00021165  0x00004d87 isub  0x00000002 , 0x0000003e 
+ 00021166  0x00004d88 branch  0x000052b0 , 0x00000005 
+ 00021167  0x00004d89 branch  0x000052a5 , 0x00000002 
+ 00021168  0x00004d8b copy  0x00000002 , 0x0000003f 
+ 00021169  0x00004d8c isub  0x00000011 , 0x0000003e 
+ 00021170  0x00004d8d nbranch  0x000052b6 , 0x00000002 
+ 00021171  0x00004d8e copy  0x00000007 , 0x0000003f 
+ 00021172  0x00004d8f copy  0x00000013 , 0x00000002 
+ 00021173  0x00004d90 isub  0x00000002 , 0x0000000b 
+ 00021174  0x00004d92 copy  0x00000013 , 0x00000007 
+ 00021175  0x00004d93 rtn 
+ 00021176  0x00004d97 bpatchx  0x0000002c , 0x00004025 
+ 00021177  0x00004d98 arg  0x0000007f , 0x00000011 
+ 00021178  0x00004d99 call  0x00005240 
+ 00021179  0x00004d9a store  0x00000002 , 0x0000026b 
+ 00021180  0x00004d9b increase  0x00000004 , 0x0000003f 
+ 00021181  0x00004d9c store  0x00000002 , 0x0000026d 
+ 00021182  0x00004d9d setarg  0x00000000 
+ 00021183  0x00004d9e store  0x00000002 , 0x0000026f 
+ 00021184  0x00004d9f rtn 
+ 00021185  0x00004da2 fetch  0x00000002 , 0x0000026b 
+ 00021186  0x00004da3 branch  0x000052e2 
+ 00021187  0x00004da6 fetch  0x00000002 , 0x0000026d 
+ 00021188  0x00004da7 branch  0x000052e2 
+ 00021189  0x00004dab bpatchx  0x0000002d , 0x00004025 
+ 00021190  0x00004dac arg  0x000000fa , 0x00000011 
+ 00021191  0x00004dad call  0x00005240 
+ 00021192  0x00004dae store  0x00000002 , 0x00000271 
+ 00021193  0x00004daf increase  0x00000004 , 0x0000003f 
+ 00021194  0x00004db0 store  0x00000002 , 0x00000273 
+ 00021195  0x00004db1 setarg  0x00000000 
+ 00021196  0x00004db2 store  0x00000002 , 0x00000275 
+ 00021197  0x00004db3 rtn 
+ 00021198  0x00004db6 fetch  0x00000002 , 0x00000271 
+ 00021199  0x00004db7 branch  0x000052e2 
+ 00021200  0x00004dba fetch  0x00000002 , 0x00000273 
+ 00021201  0x00004dbb branch  0x000052e2 
+ 00021202  0x00004dbf bpatchx  0x0000002e , 0x00004025 
+ 00021203  0x00004dc0 call  0x00007e7c 
+ 00021204  0x00004dc1 jam  0x00000001 , 0x00000284 
+ 00021205  0x00004dc2 call  0x0000526e 
+ 00021206  0x00004dc3 nrtn  0x00000034 
+ 00021207  0x00004dc4 arg  0x0000007f , 0x00000011 
+ 00021208  0x00004dc5 call  0x00005240 
+ 00021209  0x00004dc6 store  0x00000002 , 0x00000277 
+ 00021210  0x00004dc7 increase  0x00000004 , 0x0000003f 
+ 00021211  0x00004dc8 store  0x00000002 , 0x00000279 
+ 00021212  0x00004dc9 setarg  0x00000000 
+ 00021213  0x00004dca store  0x00000002 , 0x0000027b 
+ 00021214  0x00004dcb jam  0x00000000 , 0x00000284 
+ 00021215  0x00004dcc branch  0x00007e8c 
+ 00021216  0x00004dcf fetch  0x00000002 , 0x00000277 
+ 00021217  0x00004dd0 branch  0x000052e2 
+ 00021218  0x00004dd3 branch  0x00002a8c , 0x00000034 
+ 00021219  0x00004dd4 copy  0x0000003f , 0x00000005 
+ 00021220  0x00004dd5 rtn 
+ 00021221  0x00004dd9 bpatchx  0x0000002f , 0x00004025 
+ 00021222  0x00004dda arg  0x00000000 , 0x00000012 
+ 00021223  0x00004ddb arg  0x00004257 , 0x00000011 
+ 00021224  0x00004ddc increase  0xfffffffe , 0x00000011 
+ 00021225  0x00004dde increase  0x00000002 , 0x00000011 
+ 00021226  0x00004ddf setarg  0x00004263 
+ 00021227  0x00004de0 isub  0x00000011 , 0x0000003e 
+ 00021228  0x00004de1 branch  0x000052f5 , 0x00000005 
+ 00021229  0x00004de2 ifetch  0x00000001 , 0x00000011 
+ 00021230  0x00004de3 increase  0x00000001 , 0x00000011 
+ 00021231  0x00004de4 branch  0x000052e9 , 0x00000034 
+ 00021232  0x00004de5 ifetcht  0x00000002 , 0x00000011 
+ 00021233  0x00004de6 ifetch  0x00000002 , 0x00000002 
+ 00021234  0x00004de7 iadd  0x00000012 , 0x00000012 
+ 00021235  0x00004de8 increase  0x00000004 , 0x00000012 
+ 00021236  0x00004de9 branch  0x000052e9 
+ 00021237  0x00004deb copy  0x00000012 , 0x0000003f 
+ 00021238  0x00004dec rtn 
+ 00021239  0x00004df0 arg  0x0000000c , 0x00000007 
+ 00021240  0x00004df1 branch  0x00002c32 
+ 00021241  0x00004df4 arg  0x0000000c , 0x00000007 
+ 00021242  0x00004df5 branch  0x00002c36 
+ 00021243  0x00004df8 bpatchx  0x00000030 , 0x00004026 
+ 00021244  0x00004df9 call  0x0000527e 
+ 00021245  0x00004dfa fetch  0x00000001 , 0x00004256 
+ 00021246  0x00004dfb rtn  0x00000034 
+ 00021247  0x00004dfc call  0x000052e5 
+ 00021248  0x00004dfd arg  0x00000100 , 0x00000002 
+ 00021249  0x00004dfe isub  0x00000002 , 0x0000003e 
+ 00021250  0x00004dff branch  0x000052f7 , 0x00000002 
+ 00021251  0x00004e00 call  0x000052f9 
+ 00021252  0x00004e01 arg  0x00004263 , 0x00000005 
+ 00021253  0x00004e02 arg  0x00004257 , 0x00000011 
+ 00021254  0x00004e04 setarg  0x00004263 
+ 00021255  0x00004e05 isub  0x00000011 , 0x0000003e 
+ 00021256  0x00004e06 rtn  0x00000005 
+ 00021257  0x00004e07 ifetch  0x00000001 , 0x00000011 
+ 00021258  0x00004e08 increase  0x00000001 , 0x00000011 
+ 00021259  0x00004e09 nbranch  0x0000530f , 0x00000034 
+ 00021260  0x00004e0a istore  0x00000002 , 0x00000005 
+ 00021261  0x00004e0b increase  0x00000002 , 0x00000011 
+ 00021262  0x00004e0c branch  0x00005306 
+ 00021263  0x00004e0e ifetch  0x00000002 , 0x00000011 
+ 00021264  0x00004e0f increase  0x00000002 , 0x00000011 
+ 00021265  0x00004e10 copy  0x0000003f , 0x00000006 
+ 00021266  0x00004e11 ifetch  0x00000002 , 0x00000006 
+ 00021267  0x00004e12 istore  0x00000002 , 0x00000005 
+ 00021268  0x00004e13 copy  0x0000003f , 0x00000039 
+ 00021269  0x00004e14 increase  0x00000002 , 0x00000039 
+ 00021270  0x00004e15 call  0x00007f01 
+ 00021271  0x00004e16 branch  0x00005306 
+ 00021272  0x00004e19 bpatchx  0x00000031 , 0x00004026 
+ 00021273  0x00004e1a call  0x0000527e 
+ 00021274  0x00004e1b fetch  0x00000001 , 0x00004256 
+ 00021275  0x00004e1c rtn  0x00000034 
+ 00021276  0x00004e1d arg  0x00004258 , 0x00000011 
+ 00021277  0x00004e1e increase  0xfffffffd , 0x00000011 
+ 00021278  0x00004e1f arg  0x00004263 , 0x00000006 
+ 00021279  0x00004e21 increase  0x00000003 , 0x00000011 
+ 00021280  0x00004e22 setarg  0x00004264 
+ 00021281  0x00004e23 isub  0x00000011 , 0x0000003e 
+ 00021282  0x00004e24 rtn  0x00000005 
+ 00021283  0x00004e25 ifetch  0x00000002 , 0x00000006 
+ 00021284  0x00004e26 branch  0x0000531f , 0x00000034 
+ 00021285  0x00004e27 increase  0x00000004 , 0x0000003f 
+ 00021286  0x00004e28 copy  0x0000003f , 0x00000039 
+ 00021287  0x00004e29 copy  0x00000006 , 0x00000012 
+ 00021288  0x00004e2a ifetch  0x00000002 , 0x00000011 
+ 00021289  0x00004e2b copy  0x0000003f , 0x00000005 
+ 00021290  0x00004e2c copy  0x00000012 , 0x00000006 
+ 00021291  0x00004e2d increase  0xfffffffe , 0x00000006 
+ 00021292  0x00004e2e call  0x00007f01 
+ 00021293  0x00004e2f branch  0x0000531f 
+ 00021294  0x00004e3a bpatchx  0x00000032 , 0x00004026 
+ 00021295  0x00004e3b disable  0x0000002b 
+ 00021296  0x00004e3c jam  0x00000001 , 0x00000455 
+ 00021297  0x00004e3d jam  0x00000003 , 0x0000043f 
+ 00021298  0x00004e3e jam  0x00000001 , 0x00000456 
+ 00021299  0x00004e3f setarg  0xffffffff 
+ 00021300  0x00004e40 store  0x00000002 , 0x00000459 
+ 00021301  0x00004e41 force  0x00000000 , 0x0000003f 
+ 00021302  0x00004e42 store  0x00000001 , 0x00000457 
+ 00021303  0x00004e43 store  0x00000001 , 0x00000462 
+ 00021304  0x00004e44 store  0x00000003 , 0x00004169 
+ 00021305  0x00004e45 store  0x00000003 , 0x0000416c 
+ 00021306  0x00004e46 store  0x00000005 , 0x00004403 
+ 00021307  0x00004e47 set1  0x00000027 , 0x0000003f 
+ 00021308  0x00004e48 store  0x00000005 , 0x00004408 
+ 00021309  0x00004e49 jam  0x00000001 , 0x000043dc 
+ 00021310  0x00004e4a jam  0x00000000 , 0x000043dd 
+ 00021311  0x00004e4b branch  0x000056ed 
+ 00021312  0x00004e4e bpatchx  0x00000033 , 0x00004026 
+ 00021313  0x00004e4f enable  0x00000029 
+ 00021314  0x00004e50 jam  0x00000003 , 0x00000440 
+ 00021315  0x00004e51 jam  0x00000001 , 0x00000478 
+ 00021316  0x00004e52 jam  0x00000001 , 0x0000445a 
+ 00021317  0x00004e53 setarg  0x0000ffff 
+ 00021318  0x00004e54 store  0x00000002 , 0x0000445c 
+ 00021319  0x00004e55 force  0x00000000 , 0x0000003f 
+ 00021320  0x00004e56 store  0x00000005 , 0x00004408 
+ 00021321  0x00004e57 set1  0x00000027 , 0x0000003f 
+ 00021322  0x00004e58 store  0x00000005 , 0x00004403 
+ 00021323  0x00004e59 branch  0x0000532e 
+ 00021324  0x00004e5d bpatchx  0x00000034 , 0x00004026 
+ 00021325  0x00004e5e disable  0x00000029 
+ 00021326  0x00004e5f setarg  0x00000017 
+ 00021327  0x00004e60 store  0x00000002 , 0x000044a8 
+ 00021328  0x00004e61 jam  0x00000001 , 0x00000440 
+ 00021329  0x00004e62 jam  0x00000000 , 0x0000436e 
+ 00021330  0x00004e63 jam  0x00000000 , 0x000000a0 
+ 00021331  0x00004e64 jam  0x00000000 , 0x000044c4 
+ 00021332  0x00004e65 jam  0x00000000 , 0x000044c5 
+ 00021333  0x00004e66 fetch  0x00000002 , 0x0000046d 
+ 00021334  0x00004e67 store  0x00000002 , 0x000044ba 
+ 00021335  0x00004e68 fetch  0x00000002 , 0x00000441 
+ 00021336  0x00004e69 mul32  0x0000003f , 0x00000005 , 0x0000003f 
+ 00021337  0x00004e6a rshift4  0x0000003f , 0x0000003f 
+ 00021338  0x00004e6b store  0x00000002 , 0x0000046d 
+ 00021339  0x00004e6c branch  0x0000532e 
+ 00021340  0x00004e73 call  0x000053c4 
+ 00021341  0x00004e74 call  0x000055e8 
+ 00021342  0x00004e75 call  0x000056f0 
+ 00021343  0x00004e76 branch  0x000053ce 
+ 00021344  0x00004e79 bpatchx  0x00000035 , 0x00004026 
+ 00021345  0x00004e7a call  0x000053c4 
+ 00021346  0x00004e7b call  0x000032f4 
+ 00021347  0x00004e7c fetch  0x00000001 , 0x00000440 
+ 00021348  0x00004e7d beq  0x00000003 , 0x00005366 
+ 00021349  0x00004e7e branch  0x0000537a 
+ 00021350  0x00004e85 bpatchx  0x00000036 , 0x00004026 
+ 00021351  0x00004e86 enable  0x00000029 
+ 00021352  0x00004e87 call  0x000056e4 
+ 00021353  0x00004e88 branch  0x00005377 , 0x00000002 
+ 00021354  0x00004e89 call  0x00002c6c 
+ 00021355  0x00004e8a call  0x00005413 
+ 00021356  0x00004e8b call  0x0000561e 
+ 00021357  0x00004e8c disable  0x0000002d 
+ 00021358  0x00004e8d call  0x000054bf 
+ 00021359  0x00004e8e nrtn  0x0000002d 
+ 00021360  0x00004e8f bpatchx  0x00000037 , 0x00004026 
+ 00021361  0x00004e90 fetch  0x00000001 , 0x00000005 
+ 00021362  0x00004e91 increase  0x00000001 , 0x0000003f 
+ 00021363  0x00004e92 store  0x00000001 , 0x00000005 
+ 00021364  0x00004e93 call  0x000055aa 
+ 00021365  0x00004e94 disable  0x00000029 
+ 00021366  0x00004e95 rtn 
+ 00021367  0x00004e98 call  0x000053a9 
+ 00021368  0x00004e99 disable  0x00000029 
+ 00021369  0x00004e9a rtn 
+ 00021370  0x00004ea0 bpatchx  0x00000038 , 0x00004027 
+ 00021371  0x00004ea1 jam  0x00000000 , 0x0000450f 
+ 00021372  0x00004ea2 call  0x00007aaf 
+ 00021373  0x00004ea3 call  0x00005c18 
+ 00021374  0x00004ea4 disable  0x0000002e 
+ 00021375  0x00004ea5 call  0x000056e4 
+ 00021376  0x00004ea6 branch  0x000053a9 , 0x00000002 
+ 00021377  0x00004ea7 call  0x00002c6c 
+ 00021378  0x00004ea8 call  0x00005413 
+ 00021379  0x00004ea9 call  0x00005489 
+ 00021380  0x00004eaa nbranch  0x0000539b , 0x00000018 
+ 00021381  0x00004eab call  0x000053b7 
+ 00021382  0x00004eac branch  0x00005388 , 0x0000002d 
+ 00021383  0x00004ead branch  0x00005395 
+ 00021384  0x00004eb1 bpatchx  0x00000039 , 0x00004027 
+ 00021385  0x00004eb2 fetch  0x00000001 , 0x0000450f 
+ 00021386  0x00004eb3 pincrease  0x00000001 
+ 00021387  0x00004eb4 store  0x00000001 , 0x0000450f 
+ 00021388  0x00004eb5 beq  0x0000000c , 0x00005395 
+ 00021389  0x00004eb6 call  0x000055aa 
+ 00021390  0x00004eb7 call  0x0000561e 
+ 00021391  0x00004eb8 call  0x000054c7 
+ 00021392  0x00004eb9 call  0x0000567e 
+ 00021393  0x00004eba fetch  0x00000002 , 0x000041fb 
+ 00021394  0x00004ebb call  0x00007f9c 
+ 00021395  0x00004ebc call  0x000053a0 
+ 00021396  0x00004ebd branch  0x000053a4 , 0x00000028 
+ 00021397  0x00004ebf bpatchx  0x0000003a , 0x00004027 
+ 00021398  0x00004ec0 call  0x00005be4 
+ 00021399  0x00004ec1 call  0x00005bdb 
+ 00021400  0x00004ec2 call  0x00007d9c 
+ 00021401  0x00004ec3 fetch  0x00000001 , 0x00000462 
+ 00021402  0x00004ec4 bbit1  0x00000003 , 0x000053a9 
+ 00021403  0x00004ec6 bpatchx  0x0000003b , 0x00004027 
+ 00021404  0x00004ec7 call  0x000057f4 
+ 00021405  0x00004ec8 call  0x0000559d 
+ 00021406  0x00004ec9 call  0x00005575 
+ 00021407  0x00004eca branch  0x00002841 
+ 00021408  0x00004ece disable  0x00000028 
+ 00021409  0x00004ecf bmark1  0x0000002a , 0x00007fe7 
+ 00021410  0x00004ed0 bmark1  0x00000029 , 0x00007fe7 
+ 00021411  0x00004ed1 rtn 
+ 00021412  0x00004ed5 bpatchx  0x0000003c , 0x00004027 
+ 00021413  0x00004ed6 enable  0x0000002e 
+ 00021414  0x00004ed7 call  0x000054c1 
+ 00021415  0x00004ed8 branch  0x00005388 , 0x0000002d 
+ 00021416  0x00004ed9 branch  0x00005395 
+ 00021417  0x00004edf bpatchx  0x0000003d , 0x00004027 
+ 00021418  0x00004ee0 call  0x000053af 
+ 00021419  0x00004ee1 call  0x000033b4 
+ 00021420  0x00004ee2 call  0x00007a77 
+ 00021421  0x00004ee3 jam  0x00000015 , 0x00000a99 
+ 00021422  0x00004ee4 branch  0x00007d86 
+ 00021423  0x00004ee7 setarg  0x00000000 
+ 00021424  0x00004ee8 store  0x00000009 , 0x000044ff 
+ 00021425  0x00004ee9 jam  0x00000000 , 0x00000455 
+ 00021426  0x00004eea jam  0x00000000 , 0x00000440 
+ 00021427  0x00004eeb jam  0x00000000 , 0x0000043f 
+ 00021428  0x00004eec jam  0x00000000 , 0x000044c5 
+ 00021429  0x00004eed jam  0x00000000 , 0x000044c4 
+ 00021430  0x00004eee rtn 
+ 00021431  0x00004ef1 bpatchx  0x0000003e , 0x00004027 
+ 00021432  0x00004ef2 fetch  0x00000001 , 0x00000005 
+ 00021433  0x00004ef3 increase  0x00000001 , 0x0000003f 
+ 00021434  0x00004ef4 store  0x00000001 , 0x00000005 
+ 00021435  0x00004ef5 fetch  0x00000001 , 0x0000043f 
+ 00021436  0x00004ef6 rtnbit1  0x00000003 
+ 00021437  0x00004ef7 set1  0x00000003 
+ 00021438  0x00004ef8 store  0x00000001 , 0x0000043f 
+ 00021439  0x00004ef9 fetch  0x00000002 , 0x000044ba 
+ 00021440  0x00004efa store  0x00000002 , 0x0000046d 
+ 00021441  0x00004efb setarg  0x00000000 
+ 00021442  0x00004efc store  0x00000004 , 0x000044e5 
+ 00021443  0x00004efd rtn 
+ 00021444  0x00004f01 bpatchx  0x0000003f , 0x00004027 
+ 00021445  0x00004f02 jam  0x00000036 , 0x0000890f 
+ 00021446  0x00004f03 jam  0x0000005f , 0x0000890b 
+ 00021447  0x00004f04 enable  0x00000036 
+ 00021448  0x00004f05 jam  0x00000007 , 0x00008914 
+ 00021449  0x00004f06 call  0x00002c6c 
+ 00021450  0x00004f07 fetch  0x00000001 , 0x000041e0 
+ 00021451  0x00004f08 rtn  0x00000034 
+ 00021452  0x00004f09 jam  0x000000b8 , 0x0000890a 
+ 00021453  0x00004f0a rtn 
+ 00021454  0x00004f0d bpatchx  0x00000040 , 0x00004028 
+ 00021455  0x00004f0e jam  0x0000002e , 0x0000890f 
+ 00021456  0x00004f0f jam  0x000000ff , 0x0000890b 
+ 00021457  0x00004f10 disable  0x00000036 
+ 00021458  0x00004f11 jam  0x00000003 , 0x00008914 
+ 00021459  0x00004f12 arg  0x00000000 , 0x0000001b 
+ 00021460  0x00004f13 rtn 
+ 00021461  0x00004f16 disable  0x00000009 
+ 00021462  0x00004f17 disable  0x00000007 
+ 00021463  0x00004f18 fetch  0x00000003 , 0x00000467 
+ 00021464  0x00004f19 iforce  0x0000000f 
+ 00021465  0x00004f1a fetch  0x00000001 , 0x00000016 
+ 00021466  0x00004f1b reverse  0x0000003f , 0x00000002 
+ 00021467  0x00004f1c set1  0x00000001 , 0x00000002 
+ 00021468  0x00004f1d rshift  0x00000002 , 0x0000000e 
+ 00021469  0x00004f1e rtn 
+ 00021470  0x00004f22 call  0x000053e6 
+ 00021471  0x00004f23 call  0x0000291f 
+ 00021472  0x00004f24 setarg  0x00000500 
+ 00021473  0x00004f25 call  0x00002a8f 
+ 00021474  0x00004f26 branch  0x00002924 
+ 00021475  0x00004f29 branch  0x00002939 , 0x0000002d 
+ 00021476  0x00004f2b call  0x000053e6 
+ 00021477  0x00004f2c branch  0x00002933 
+ 00021478  0x00004f2e bpatchx  0x00000041 , 0x00004028 
+ 00021479  0x00004f2f call  0x00002918 
+ 00021480  0x00004f30 fetch  0x00000001 , 0x0000048c 
+ 00021481  0x00004f31 nbranch  0x000053f9 , 0x00000034 
+ 00021482  0x00004f32 fetch  0x00000001 , 0x00000016 
+ 00021483  0x00004f33 sub  0x0000003f , 0x00000024 , 0x0000003e 
+ 00021484  0x00004f34 branch  0x000053f3 , 0x00000002 
+ 00021485  0x00004f35 force  0x00000000 , 0x00000002 
+ 00021486  0x00004f36 rtneq  0x00000025 
+ 00021487  0x00004f37 force  0x00000018 , 0x00000002 
+ 00021488  0x00004f38 rtneq  0x00000026 
+ 00021489  0x00004f39 force  0x0000004e , 0x00000002 
+ 00021490  0x00004f3a rtn 
+ 00021491  0x00004f3d sub  0x0000003f , 0x0000000a , 0x0000003e 
+ 00021492  0x00004f3e branch  0x000053f6 , 0x00000002 
+ 00021493  0x00004f3f increase  0x00000001 , 0x0000003f 
+ 00021494  0x00004f42 lshift  0x0000003f , 0x0000003f 
+ 00021495  0x00004f43 add  0x0000003f , 0x00000002 , 0x00000002 
+ 00021496  0x00004f44 rtn 
+ 00021497  0x00004f47 fetch  0x00000001 , 0x00000016 
+ 00021498  0x00004f48 lshift  0x0000003f , 0x00000002 
+ 00021499  0x00004f49 rtn 
+ 00021500  0x00004f4c arg  0x000001f4 , 0x00000002 
+ 00021501  0x00004f4d rtn  0x00000034 
+ 00021502  0x00004f4e arg  0x000000fa , 0x00000002 
+ 00021503  0x00004f4f rtneq  0x00000001 
+ 00021504  0x00004f50 arg  0x00000096 , 0x00000002 
+ 00021505  0x00004f51 rtneq  0x00000002 
+ 00021506  0x00004f52 arg  0x00000064 , 0x00000002 
+ 00021507  0x00004f53 rtneq  0x00000003 
+ 00021508  0x00004f54 arg  0x0000004b , 0x00000002 
+ 00021509  0x00004f55 rtneq  0x00000004 
+ 00021510  0x00004f56 arg  0x00000032 , 0x00000002 
+ 00021511  0x00004f57 rtneq  0x00000005 
+ 00021512  0x00004f58 arg  0x00000028 , 0x00000002 
+ 00021513  0x00004f59 rtneq  0x00000006 
+ 00021514  0x00004f5a arg  0x00000014 , 0x00000002 
+ 00021515  0x00004f5b rtn 
+ 00021516  0x00004f60 setarg  0x008e89be 
+ 00021517  0x00004f61 lshift8  0x0000003f , 0x0000003f 
+ 00021518  0x00004f62 or_into  0x000000d6 , 0x0000003f 
+ 00021519  0x00004f63 iforce  0x00000009 
+ 00021520  0x00004f64 setarg  0x00555555 
+ 00021521  0x00004f65 store  0x00000003 , 0x00000467 
+ 00021522  0x00004f66 rtn 
+ 00021523  0x00004f69 bpatchx  0x00000042 , 0x00004028 
+ 00021524  0x00004f6a enable  0x00000010 
+ 00021525  0x00004f6b fetch  0x00000004 , 0x00000463 
+ 00021526  0x00004f6c iforce  0x00000009 
+ 00021527  0x00004f6d call  0x00005466 
+ 00021528  0x00004f6e setarg  0x00000200 
+ 00021529  0x00004f6f branch  0x0000541c , 0x00000029 
+ 00021530  0x00004f70 fetch  0x00000002 , 0x0000044d 
+ 00021531  0x00004f71 rshift  0x0000003f , 0x0000003f 
+ 00021532  0x00004f73 arg  0x00000500 , 0x00000002 
+ 00021533  0x00004f74 iadd  0x00000002 , 0x0000003f 
+ 00021534  0x00004f75 call  0x00002a24 
+ 00021535  0x00004f76 deposit  0x0000001a 
+ 00021536  0x00004f77 store  0x00000006 , 0x00000491 
+ 00021537  0x00004f78 rtn 
+ 00021538  0x00004f7b bpatchx  0x00000043 , 0x00004028 
+ 00021539  0x00004f7c fetch  0x00000001 , 0x00000016 
+ 00021540  0x00004f7d beq  0x00000025 , 0x00005428 
+ 00021541  0x00004f7e beq  0x00000026 , 0x0000542e 
+ 00021542  0x00004f7f beq  0x00000027 , 0x00005434 
+ 00021543  0x00004f80 branch  0x00005434 
+ 00021544  0x00004f83 fetcht  0x00000001 , 0x0000448d 
+ 00021545  0x00004f84 isolate1  0x00000001 , 0x00000002 
+ 00021546  0x00004f85 branch  0x0000543f , 0x00000001 
+ 00021547  0x00004f86 isolate1  0x00000002 , 0x00000002 
+ 00021548  0x00004f87 branch  0x00005444 , 0x00000001 
+ 00021549  0x00004f88 branch  0x0000543a 
+ 00021550  0x00004f8c fetcht  0x00000001 , 0x0000448d 
+ 00021551  0x00004f8d isolate1  0x00000002 , 0x00000002 
+ 00021552  0x00004f8e branch  0x00005444 , 0x00000001 
+ 00021553  0x00004f8f isolate1  0x00000000 , 0x00000002 
+ 00021554  0x00004f90 branch  0x0000543a , 0x00000001 
+ 00021555  0x00004f91 branch  0x0000543f 
+ 00021556  0x00004f95 fetcht  0x00000001 , 0x0000448d 
+ 00021557  0x00004f96 isolate1  0x00000000 , 0x00000002 
+ 00021558  0x00004f97 branch  0x0000543a , 0x00000001 
+ 00021559  0x00004f98 isolate1  0x00000001 , 0x00000002 
+ 00021560  0x00004f99 branch  0x0000543f , 0x00000001 
+ 00021561  0x00004f9a branch  0x00005444 
+ 00021562  0x00004f9f jam  0x00000025 , 0x00000016 
+ 00021563  0x00004fa0 fetch  0x00000001 , 0x00000ac2 
+ 00021564  0x00004fa1 set1  0x00000000 , 0x0000003f 
+ 00021565  0x00004fa2 store  0x00000001 , 0x00000ac2 
+ 00021566  0x00004fa3 rtn 
+ 00021567  0x00004fa6 jam  0x00000026 , 0x00000016 
+ 00021568  0x00004fa7 fetch  0x00000001 , 0x00000ac2 
+ 00021569  0x00004fa8 set1  0x00000001 , 0x0000003f 
+ 00021570  0x00004fa9 store  0x00000001 , 0x00000ac2 
+ 00021571  0x00004faa rtn 
+ 00021572  0x00004fad jam  0x00000027 , 0x00000016 
+ 00021573  0x00004fae fetch  0x00000001 , 0x00000ac2 
+ 00021574  0x00004faf set1  0x00000002 , 0x0000003f 
+ 00021575  0x00004fb0 store  0x00000001 , 0x00000ac2 
+ 00021576  0x00004fb1 rtn 
+ 00021577  0x00004fb6 bpatchx  0x00000044 , 0x00004028 
+ 00021578  0x00004fb7 add  0x00000011 , 0x00000001 , 0x00000006 
+ 00021579  0x00004fb8 ifetch  0x00000001 , 0x00000006 
+ 00021580  0x00004fb9 rtnbit0  0x00000000 
+ 00021581  0x00004fba add  0x00000011 , 0x0000001a , 0x00000005 
+ 00021582  0x00004fbb ifetch  0x00000002 , 0x00000005 
+ 00021583  0x00004fbc increase  0x00000001 , 0x0000003f 
+ 00021584  0x00004fbd istore  0x00000002 , 0x00000005 
+ 00021585  0x00004fbe add  0x00000011 , 0x00000019 , 0x00000006 
+ 00021586  0x00004fbf ifetch  0x00000001 , 0x00000006 
+ 00021587  0x00004fc0 add  0x00000011 , 0x00000018 , 0x00000005 
+ 00021588  0x00004fc1 ifetcht  0x00000001 , 0x00000005 
+ 00021589  0x00004fc2 iadd  0x00000002 , 0x0000003f 
+ 00021590  0x00004fc3 sub  0x0000003f , 0x00000024 , 0x0000003e 
+ 00021591  0x00004fc4 branch  0x00005459 , 0x00000002 
+ 00021592  0x00004fc5 increase  0xffffffdb , 0x0000003f 
+ 00021593  0x00004fc7 istore  0x00000001 , 0x00000005 
+ 00021594  0x00004fc8 rtn 
+ 00021595  0x00004fcc bpatchx  0x00000045 , 0x00004028 
+ 00021596  0x00004fcd fetch  0x00000005 , 0x0000046f 
+ 00021597  0x00004fce force  0x00000000 , 0x00000002 
+ 00021598  0x00004fcf force  0x00000025 , 0x00000039 
+ 00021599  0x00004fd1 bbit0  0x00000000 , 0x00005461 
+ 00021600  0x00004fd2 increase  0x00000001 , 0x00000002 
+ 00021601  0x00004fd4 rshift  0x0000003f , 0x0000003f 
+ 00021602  0x00004fd5 loop  0x0000545f 
+ 00021603  0x00004fd6 add  0x00000002 , 0xffffffff , 0x0000003f 
+ 00021604  0x00004fd7 store  0x00000001 , 0x00000461 
+ 00021605  0x00004fd8 rtn 
+ 00021606  0x00004fdb bpatchx  0x00000046 , 0x00004028 
+ 00021607  0x00004fdc fetch  0x00000001 , 0x00000457 
+ 00021608  0x00004fdd iforce  0x00000007 
+ 00021609  0x00004fde fetcht  0x00000005 , 0x0000046f 
+ 00021610  0x00004fdf qisolate1  0x00000002 
+ 00021611  0x00004fe0 branch  0x0000547c , 0x00000001 
+ 00021612  0x00004fe2 bpatchx  0x00000047 , 0x00004028 
+ 00021613  0x00004fe3 fetch  0x00000001 , 0x00000461 
+ 00021614  0x00004fe4 isub  0x00000007 , 0x0000003f 
+ 00021615  0x00004fe5 branch  0x00005472 , 0x00000002 
+ 00021616  0x00004fe6 sub  0x0000003f , 0xffffffff , 0x00000007 
+ 00021617  0x00004fe7 branch  0x0000546c 
+ 00021618  0x00004fe9 copy  0x00000007 , 0x00000039 
+ 00021619  0x00004fea force  0x00000000 , 0x00000007 
+ 00021620  0x00004fec qisolate1  0x00000002 
+ 00021621  0x00004fed branch  0x00005477 , 0x00000001 
+ 00021622  0x00004fee increase  0x00000001 , 0x00000039 
+ 00021623  0x00004ff0 deposit  0x00000039 
+ 00021624  0x00004ff1 branch  0x0000547c , 0x00000034 
+ 00021625  0x00004ff2 increase  0x00000001 , 0x00000007 
+ 00021626  0x00004ff3 increase  0xffffffff , 0x00000039 
+ 00021627  0x00004ff4 branch  0x00005474 
+ 00021628  0x00004ff6 deposit  0x00000007 
+ 00021629  0x00004ff7 store  0x00000001 , 0x00000016 
+ 00021630  0x00004ff8 rtn 
+ 00021631  0x00004ffc branch  0x00005482 , 0x00000029 
+ 00021632  0x00004ffd until  0x0000003e , 0x00000003 
+ 00021633  0x00004ffe rtn 
+ 00021634  0x00005001 arg  0x00000ea0 , 0x0000000b 
+ 00021635  0x00005002 until  0x00000023 , 0x00000026 
+ 00021636  0x00005003 rtn 
+ 00021637  0x00005006 disable  0x00000010 
+ 00021638  0x00005007 fetch  0x00000002 , 0x0000436c 
+ 00021639  0x00005008 copy  0x0000003f , 0x0000000b 
+ 00021640  0x00005009 branch  0x0000548e 
+ 00021641  0x0000500d bpatchx  0x00000048 , 0x00004029 
+ 00021642  0x0000500e enable  0x00000010 
+ 00021643  0x0000500f fetch  0x00000002 , 0x0000044d 
+ 00021644  0x00005010 fetcht  0x00000004 , 0x000044e5 
+ 00021645  0x00005011 iadd  0x00000002 , 0x0000000b 
+ 00021646  0x00005013 call  0x000053de 
+ 00021647  0x00005015 bpatchx  0x00000049 , 0x00004029 
+ 00021648  0x00005016 call  0x000053d5 
+ 00021649  0x00005017 disable  0x0000002d 
+ 00021650  0x00005018 enable  0x0000000d 
+ 00021651  0x00005019 enable  0x00000021 
+ 00021652  0x0000501a disable  0x00000020 
+ 00021653  0x0000501b copy  0x0000000b , 0x0000001b 
+ 00021654  0x0000501c correlate  0x0000003e , 0x00000003 
+ 00021655  0x0000501d branch  0x0000549a , 0x0000002e 
+ 00021656  0x0000501e copy  0x0000001a , 0x00000002 
+ 00021657  0x0000501f storet  0x00000006 , 0x0000009a 
+ 00021658  0x00005021 nbranch  0x0000264d , 0x00000018 
+ 00021659  0x00005022 branch  0x000054a1 , 0x0000002e 
+ 00021660  0x00005023 arg  0x000001e0 , 0x00000029 
+ 00021661  0x00005024 copy  0x00000021 , 0x00000028 
+ 00021662  0x00005025 fetch  0x00000001 , 0x0000043f 
+ 00021663  0x00005026 bbit0  0x00000003 , 0x000054a1 
+ 00021664  0x00005027 call  0x00002b05 , 0x0000002b 
+ 00021665  0x00005029 bpatchx  0x0000004a , 0x00004029 
+ 00021666  0x0000502a call  0x000029bb 
+ 00021667  0x0000502b enable  0x00000007 
+ 00021668  0x0000502c enable  0x00000009 
+ 00021669  0x0000502d parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00021670  0x0000502e rshift3  0x0000000c , 0x0000003f 
+ 00021671  0x0000502f store  0x00000001 , 0x000002d9 
+ 00021672  0x00005030 parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00021673  0x00005031 rshift3  0x0000000c , 0x0000003f 
+ 00021674  0x00005032 istore  0x00000001 , 0x00000005 
+ 00021675  0x00005033 and  0x0000003f , 0x0000003f , 0x00000039 
+ 00021676  0x00005034 branch  0x000054b1 , 0x00000005 
+ 00021677  0x00005037 parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00021678  0x00005038 rshift3  0x0000000c , 0x0000003f 
+ 00021679  0x00005039 istore  0x00000001 , 0x00000005 
+ 00021680  0x0000503a loop  0x000054ad 
+ 00021681  0x0000503d bpatchx  0x0000004b , 0x00004029 
+ 00021682  0x0000503e parse  0x00000003 , 0x00000000 , 0x00000018 
+ 00021683  0x0000503f enable  0x00000010 
+ 00021684  0x00005040 arg  0x00000664 , 0x0000001b 
+ 00021685  0x00005041 rshift32  0x0000003f , 0x0000003f 
+ 00021686  0x00005042 rshift16  0x0000003f , 0x0000003f 
+ 00021687  0x00005043 istore  0x00000003 , 0x00000005 
+ 00021688  0x00005044 branch  0x0000264d , 0x00000006 
+ 00021689  0x00005045 enable  0x0000002d 
+ 00021690  0x00005046 fetch  0x00000001 , 0x00000017 
+ 00021691  0x00005047 add  0x0000003f , 0x00000000 , 0x00000011 
+ 00021692  0x00005048 call  0x00002981 
+ 00021693  0x00005049 disable  0x0000000d 
+ 00021694  0x0000504a branch  0x00002918 
+ 00021695  0x0000504d bpatchx  0x0000004c , 0x00004029 
+ 00021696  0x0000504e call  0x000054c9 
+ 00021697  0x00005050 fetcht  0x00000001 , 0x00000017 
+ 00021698  0x00005051 call  0x0000291f 
+ 00021699  0x00005052 call  0x00002924 
+ 00021700  0x00005053 enable  0x00000010 
+ 00021701  0x00005054 arg  0x0000157c , 0x0000000b 
+ 00021702  0x00005055 branch  0x0000548f 
+ 00021703  0x00005058 call  0x000054c9 
+ 00021704  0x00005059 branch  0x0000264d 
+ 00021705  0x0000505c bpatchx  0x0000004d , 0x00004029 
+ 00021706  0x0000505d call  0x000053d5 
+ 00021707  0x0000505e call  0x000053e3 
+ 00021708  0x0000505f branch  0x000054cd 
+ 00021709  0x00005062 set1  0x00000000 , 0x00000015 
+ 00021710  0x00005063 enable  0x0000001d 
+ 00021711  0x00005064 enable  0x00000020 
+ 00021712  0x00005065 disable  0x00000021 
+ 00021713  0x00005066 call  0x0000547f 
+ 00021714  0x00005067 rshift16  0x00000009 , 0x0000003f 
+ 00021715  0x00005068 rshift8  0x0000003f , 0x0000003f 
+ 00021716  0x00005069 rshift4  0x0000003f , 0x0000003f 
+ 00021717  0x0000506a inject  0x00000003 , 0x00000028 
+ 00021718  0x0000506b enable  0x00000007 
+ 00021719  0x0000506c enable  0x00000009 
+ 00021720  0x0000506d bpatchx  0x0000004e , 0x00004029 
+ 00021721  0x0000506e fetch  0x00000001 , 0x000043dc 
+ 00021722  0x0000506f inject  0x00000003 , 0x00000008 
+ 00021723  0x00005070 ifetch  0x00000001 , 0x00000006 
+ 00021724  0x00005071 and  0x0000003f , 0x0000003f , 0x00000039 
+ 00021725  0x00005072 inject  0x00000003 , 0x00000008 
+ 00021726  0x00005073 branch  0x000054e2 , 0x00000005 
+ 00021727  0x00005075 ifetch  0x00000001 , 0x00000006 
+ 00021728  0x00005076 inject  0x00000003 , 0x00000008 
+ 00021729  0x00005077 loop  0x000054df 
+ 00021730  0x0000507a enable  0x00000008 
+ 00021731  0x0000507b inject  0x00000003 , 0x00000018 
+ 00021732  0x0000507c disable  0x00000008 
+ 00021733  0x0000507d until  0x0000003e , 0x00000027 
+ 00021734  0x0000507e nop  0x00000064 
+ 00021735  0x0000507f disable  0x0000001d 
+ 00021736  0x00005080 rtn 
+ 00021737  0x00005083 bpatchx  0x0000004f , 0x00004029 
+ 00021738  0x00005084 fetch  0x00000001 , 0x00004484 
+ 00021739  0x00005085 beq  0x00000001 , 0x000054f9 
+ 00021740  0x00005086 fetch  0x00000001 , 0x00004485 
+ 00021741  0x00005087 lshift4  0x0000003f , 0x0000003f 
+ 00021742  0x00005088 lshift2  0x0000003f , 0x0000003f 
+ 00021743  0x00005089 store  0x00000001 , 0x000043dc 
+ 00021744  0x0000508a fetcht  0x00000001 , 0x0000436f 
+ 00021745  0x0000508b add  0x00000002 , 0x00000006 , 0x0000003f 
+ 00021746  0x0000508c store  0x00000001 , 0x000043dd 
+ 00021747  0x0000508d fetch  0x00000006 , 0x000044a0 
+ 00021748  0x0000508e store  0x00000006 , 0x000043de 
+ 00021749  0x0000508f copy  0x00000002 , 0x00000039 
+ 00021750  0x00005090 arg  0x00004370 , 0x00000006 
+ 00021751  0x00005091 call  0x00007ef4 
+ 00021752  0x00005092 branch  0x00005504 
+ 00021753  0x00005094 fetch  0x00000001 , 0x00004486 
+ 00021754  0x00005095 lshift4  0x0000003f , 0x0000003f 
+ 00021755  0x00005096 lshift2  0x0000003f , 0x0000003f 
+ 00021756  0x00005097 increase  0x00000001 , 0x0000003f 
+ 00021757  0x00005098 store  0x00000001 , 0x000043dc 
+ 00021758  0x00005099 setarg  0x0000000c 
+ 00021759  0x0000509a store  0x00000001 , 0x000043dd 
+ 00021760  0x0000509b fetch  0x00000006 , 0x000044a0 
+ 00021761  0x0000509c store  0x00000006 , 0x000043de 
+ 00021762  0x0000509d fetch  0x00000006 , 0x000041d0 
+ 00021763  0x0000509e istore  0x00000006 , 0x00000005 
+ 00021764  0x000050a0 bpatchx  0x00000050 , 0x0000402a 
+ 00021765  0x000050a1 fetch  0x00000001 , 0x00000000 
+ 00021766  0x000050a2 increase  0x00000001 , 0x0000003f 
+ 00021767  0x000050a3 store  0x00000001 , 0x00000000 
+ 00021768  0x000050a4 arg  0x00000708 , 0x0000001b 
+ 00021769  0x000050a5 disable  0x0000002d 
+ 00021770  0x000050a6 branch  0x000054bf 
+ 00021771  0x000050a9 bpatchx  0x00000051 , 0x0000402a 
+ 00021772  0x000050aa fetch  0x00000001 , 0x0000449e 
+ 00021773  0x000050ab rtnne  0x00000001 
+ 00021774  0x000050ac fetch  0x00000001 , 0x00000000 
+ 00021775  0x000050ad increase  0x00000001 , 0x0000003f 
+ 00021776  0x000050ae store  0x00000001 , 0x00000000 
+ 00021777  0x000050af arg  0x00000c03 , 0x00000002 
+ 00021778  0x000050b0 fetch  0x00000001 , 0x0000449f 
+ 00021779  0x000050b1 nsetflag  0x00000034 , 0x00000006 , 0x00000002 
+ 00021780  0x000050b2 copy  0x00000011 , 0x0000003f 
+ 00021781  0x000050b3 nsetflag  0x00000034 , 0x00000007 , 0x00000002 
+ 00021782  0x000050b4 storet  0x00000002 , 0x000043dc 
+ 00021783  0x000050b5 fetch  0x00000006 , 0x000044a0 
+ 00021784  0x000050b6 istore  0x00000006 , 0x00000005 
+ 00021785  0x000050b7 fetch  0x00000006 , 0x0000044f 
+ 00021786  0x000050b8 istore  0x00000006 , 0x00000005 
+ 00021787  0x000050b9 branch  0x000054bf 
+ 00021788  0x000050bd bpatchx  0x00000052 , 0x0000402a 
+ 00021789  0x000050be arg  0x00000004 , 0x00000002 
+ 00021790  0x000050bf fetch  0x00000001 , 0x00004485 
+ 00021791  0x000050c0 nsetflag  0x00000034 , 0x00000006 , 0x00000002 
+ 00021792  0x000050c1 storet  0x00000001 , 0x000043dc 
+ 00021793  0x000050c2 fetcht  0x00000001 , 0x0000438f 
+ 00021794  0x000050c3 add  0x00000002 , 0x00000006 , 0x0000003f 
+ 00021795  0x000050c4 store  0x00000001 , 0x000043dd 
+ 00021796  0x000050c5 fetch  0x00000006 , 0x000044a0 
+ 00021797  0x000050c6 store  0x00000006 , 0x000043de 
+ 00021798  0x000050c7 arg  0x00004390 , 0x00000006 
+ 00021799  0x000050c8 copy  0x00000002 , 0x00000039 
+ 00021800  0x000050c9 call  0x00007ef4 
+ 00021801  0x000050ca call  0x000054c7 
+ 00021802  0x000050cb branch  0x00005706 
+ 00021803  0x000050ce bpatchx  0x00000053 , 0x0000402a 
+ 00021804  0x000050cf force  0xffffffff , 0x0000003f 
+ 00021805  0x000050d0 setsect  0x00000002 , 0x00000001 
+ 00021806  0x000050d1 store  0x00000005 , 0x0000046f 
+ 00021807  0x000050d2 call  0x0000545b 
+ 00021808  0x000050d3 force  0x00000004 , 0x00000039 
+ 00021809  0x000050d4 arg  0x00000463 , 0x00000005 
+ 00021810  0x000050d5 call  0x0000630d 
+ 00021811  0x000050d6 fetch  0x00000002 , 0x0000449c 
+ 00021812  0x000050d7 store  0x00000002 , 0x0000046d 
+ 00021813  0x000050d9 random  0x0000003f 
+ 00021814  0x000050da and_into  0x0000000f , 0x0000003f 
+ 00021815  0x000050db sub  0x0000003f , 0x00000004 , 0x0000003e 
+ 00021816  0x000050dc branch  0x00005535 , 0x00000002 
+ 00021817  0x000050dd store  0x00000001 , 0x00000458 
+ 00021818  0x000050de store  0x00000001 , 0x000006e6 
+ 00021819  0x000050df bpatchx  0x00000054 , 0x0000402a 
+ 00021820  0x000050e0 fetcht  0x00000002 , 0x00004367 
+ 00021821  0x000050e1 storet  0x00000002 , 0x00000441 
+ 00021822  0x000050e2 copy  0x00000002 , 0x00000013 
+ 00021823  0x000050e3 add  0x00000022 , 0x00000007 , 0x0000003f 
+ 00021824  0x000050e4 idiv  0x00000013 
+ 00021825  0x000050e5 call  0x00007f86 
+ 00021826  0x000050e6 remainder  0x00000011 
+ 00021827  0x000050e7 isub  0x00000011 , 0x0000003f 
+ 00021828  0x000050e8 iadd  0x00000013 , 0x0000003f 
+ 00021829  0x000050e9 fetcht  0x00000002 , 0x00004365 
+ 00021830  0x000050ea iadd  0x00000002 , 0x0000003f 
+ 00021831  0x000050eb store  0x00000004 , 0x00000443 
+ 00021832  0x000050ec isub  0x00000022 , 0x00000011 
+ 00021833  0x000050ed increase  0xfffffffa , 0x00000011 
+ 00021834  0x000050ee arg  0x00002205 , 0x00000012 
+ 00021835  0x000050ef fetch  0x00000001 , 0x00004495 
+ 00021836  0x000050f0 nsetflag  0x00000034 , 0x00000006 , 0x00000012 
+ 00021837  0x000050f1 fetch  0x00000001 , 0x0000448e 
+ 00021838  0x000050f2 nsetflag  0x00000034 , 0x00000007 , 0x00000012 
+ 00021839  0x000050f3 copy  0x00000012 , 0x0000003f 
+ 00021840  0x000050f4 store  0x00000002 , 0x000043dc 
+ 00021841  0x000050f5 fetch  0x00000006 , 0x000044a0 
+ 00021842  0x000050f6 istore  0x00000006 , 0x00000005 
+ 00021843  0x000050f7 fetch  0x00000006 , 0x0000044f 
+ 00021844  0x000050f8 istore  0x00000006 , 0x00000005 
+ 00021845  0x000050f9 fetch  0x00000004 , 0x00000463 
+ 00021846  0x000050fa istore  0x00000004 , 0x00000005 
+ 00021847  0x000050fb random  0x0000003f 
+ 00021848  0x000050fc istore  0x00000002 , 0x00000005 
+ 00021849  0x000050fd random  0x0000003f 
+ 00021850  0x000050fe istore  0x00000001 , 0x00000005 
+ 00021851  0x000050ff force  0x00000002 , 0x0000003f 
+ 00021852  0x00005100 istore  0x00000001 , 0x00000005 
+ 00021853  0x00005101 rshift2  0x00000011 , 0x0000003f 
+ 00021854  0x00005102 istore  0x00000002 , 0x00000005 
+ 00021855  0x00005103 rshift2  0x00000013 , 0x0000003f 
+ 00021856  0x00005104 istore  0x00000002 , 0x00000005 
+ 00021857  0x00005105 bpatchx  0x00000055 , 0x0000402a 
+ 00021858  0x00005106 setarg  0x00000000 
+ 00021859  0x00005107 istore  0x00000002 , 0x00000005 
+ 00021860  0x00005108 fetch  0x00000002 , 0x0000449c 
+ 00021861  0x00005109 istore  0x00000002 , 0x00000005 
+ 00021862  0x0000510a fetch  0x00000005 , 0x0000046f 
+ 00021863  0x0000510b istore  0x00000005 , 0x00000005 
+ 00021864  0x0000510c fetch  0x00000001 , 0x00000458 
+ 00021865  0x0000510d arg  0x000000a0 , 0x00000002 
+ 00021866  0x0000510e ior  0x00000002 , 0x0000003f 
+ 00021867  0x0000510f istore  0x00000001 , 0x00000005 
+ 00021868  0x00005110 call  0x000054c7 
+ 00021869  0x00005111 setarg  0x000043dc 
+ 00021870  0x00005112 add  0x0000003f , 0x00000012 , 0x00000006 
+ 00021871  0x00005113 ifetch  0x00000003 , 0x00000006 
+ 00021872  0x00005114 store  0x00000003 , 0x00000467 
+ 00021873  0x00005115 rtn 
+ 00021874  0x00005118 bpatchx  0x00000056 , 0x0000402a 
+ 00021875  0x00005119 disable  0x00000029 
+ 00021876  0x0000511a branch  0x0000540c 
+ 00021877  0x0000511f fetch  0x00000001 , 0x0000043f 
+ 00021878  0x00005120 rtnbit0  0x00000005 
+ 00021879  0x00005121 fetch  0x00000002 , 0x00000459 
+ 00021880  0x00005122 fetcht  0x00000002 , 0x0000045f 
+ 00021881  0x00005123 isub  0x00000002 , 0x0000003f 
+ 00021882  0x00005124 nrtn  0x00000002 
+ 00021883  0x00005125 store  0x00000002 , 0x00000a9a 
+ 00021884  0x00005126 bpatchx  0x00000057 , 0x0000402a 
+ 00021885  0x00005127 fetch  0x00000001 , 0x0000043f 
+ 00021886  0x00005128 set0  0x00000005 , 0x0000003f 
+ 00021887  0x00005129 set0  0x00000003 , 0x0000003f 
+ 00021888  0x0000512a store  0x00000001 , 0x0000043f 
+ 00021889  0x0000512b fetch  0x00000004 , 0x00000443 
+ 00021890  0x0000512c fetcht  0x00000002 , 0x00000441 
+ 00021891  0x0000512d storet  0x00000002 , 0x00000aa2 
+ 00021892  0x0000512e isub  0x00000002 , 0x00000011 
+ 00021893  0x0000512f bpatchx  0x00000058 , 0x0000402b 
+ 00021894  0x00005130 fetch  0x00000001 , 0x000043d3 
+ 00021895  0x00005131 store  0x00000001 , 0x0000046a 
+ 00021896  0x00005132 ifetcht  0x00000002 , 0x00000006 
+ 00021897  0x00005133 ifetch  0x00000002 , 0x00000006 
+ 00021898  0x00005134 lshift2  0x0000003f , 0x0000003f 
+ 00021899  0x00005135 store  0x00000002 , 0x00000441 
+ 00021900  0x00005136 lshift2  0x00000002 , 0x00000002 
+ 00021901  0x00005137 iadd  0x00000002 , 0x0000003f 
+ 00021902  0x00005138 ifetcht  0x00000004 , 0x00000006 
+ 00021903  0x00005139 storet  0x00000004 , 0x0000046b 
+ 00021904  0x0000513a iadd  0x00000011 , 0x0000003f 
+ 00021905  0x0000513b copy  0x0000003f , 0x00000014 
+ 00021906  0x0000513c fetch  0x00000002 , 0x00000441 
+ 00021907  0x0000513d fetcht  0x00000002 , 0x00000aa2 
+ 00021908  0x0000513e isub  0x00000002 , 0x0000003f 
+ 00021909  0x0000513f fetcht  0x00000002 , 0x00000a9a 
+ 00021910  0x00005140 imul32  0x00000002 , 0x0000003f 
+ 00021911  0x00005141 iadd  0x00000014 , 0x0000003f 
+ 00021912  0x00005142 store  0x00000004 , 0x00000443 
+ 00021913  0x00005143 call  0x00005713 
+ 00021914  0x00005144 fetch  0x00000002 , 0x0000046d 
+ 00021915  0x00005145 store  0x00000002 , 0x000044ba 
+ 00021916  0x00005146 rtn 
+ 00021917  0x0000514a bpatchx  0x00000059 , 0x0000402b 
+ 00021918  0x0000514b fetch  0x00000001 , 0x0000043f 
+ 00021919  0x0000514c rtnbit0  0x00000006 
+ 00021920  0x0000514d fetch  0x00000002 , 0x00000459 
+ 00021921  0x0000514e fetcht  0x00000002 , 0x0000045f 
+ 00021922  0x0000514f isub  0x00000002 , 0x0000003f 
+ 00021923  0x00005150 nrtn  0x00000002 
+ 00021924  0x00005151 fetch  0x00000001 , 0x0000043f 
+ 00021925  0x00005152 set0  0x00000006 , 0x0000003f 
+ 00021926  0x00005153 store  0x00000001 , 0x0000043f 
+ 00021927  0x00005154 fetch  0x00000005 , 0x000043ce 
+ 00021928  0x00005155 store  0x00000005 , 0x0000046f 
+ 00021929  0x00005156 branch  0x0000545b 
+ 00021930  0x0000515a bpatchx  0x0000005a , 0x0000402b 
+ 00021931  0x0000515b call  0x000056ed 
+ 00021932  0x0000515c call  0x000055c0 
+ 00021933  0x0000515d fetch  0x00000001 , 0x000002d9 
+ 00021934  0x0000515e isolate1  0x00000004 , 0x0000003f 
+ 00021935  0x0000515f setflag  0x00000001 , 0x0000002a , 0x00000000 
+ 00021936  0x00005160 rshift  0x0000003f , 0x0000003f 
+ 00021937  0x00005161 ixor  0x00000002 , 0x0000003f 
+ 00021938  0x00005162 isolate1  0x00000002 , 0x0000003f 
+ 00021939  0x00005163 setflag  0x00000001 , 0x0000000f , 0x00000000 
+ 00021940  0x00005164 rtnmark1  0x0000000f 
+ 00021941  0x00005165 fetch  0x00000001 , 0x000002da 
+ 00021942  0x00005166 branch  0x000055bc , 0x00000034 
+ 00021943  0x00005167 fetch  0x00000001 , 0x0000043f 
+ 00021944  0x00005168 bbit0  0x00000004 , 0x000055bc 
+ 00021945  0x00005169 call  0x0000748d 
+ 00021946  0x0000516a call  0x000073fb 
+ 00021947  0x0000516b nrtn  0x00000034 
+ 00021948  0x0000516d fetcht  0x00000001 , 0x00000456 
+ 00021949  0x0000516e setflip  0x00000002 , 0x00000002 
+ 00021950  0x0000516f storet  0x00000001 , 0x00000456 
+ 00021951  0x00005170 rtn 
+ 00021952  0x00005174 bpatchx  0x0000005b , 0x0000402b 
+ 00021953  0x00005175 fetcht  0x00000001 , 0x00000456 
+ 00021954  0x00005176 isolate0  0x00000005 , 0x00000002 
+ 00021955  0x00005177 rtn  0x00000001 
+ 00021956  0x00005178 fetch  0x00000001 , 0x000002d9 
+ 00021957  0x00005179 lshift  0x0000003f , 0x0000003f 
+ 00021958  0x0000517a ixor  0x00000002 , 0x0000003f 
+ 00021959  0x0000517b rtnbit0  0x00000003 
+ 00021960  0x0000517c set0  0x00000005 , 0x00000002 
+ 00021961  0x0000517d setflip  0x00000003 , 0x00000002 
+ 00021962  0x0000517e storet  0x00000001 , 0x00000456 
+ 00021963  0x0000517f compare  0x00000003 , 0x00000002 , 0x00000003 
+ 00021964  0x00005180 nrtn  0x00000001 
+ 00021965  0x00005181 fetch  0x00000001 , 0x000043de 
+ 00021966  0x00005182 beq  0x00000005 , 0x000055d2 
+ 00021967  0x00005183 fetch  0x00000001 , 0x000044c5 
+ 00021968  0x00005184 beq  0x00000002 , 0x000055d6 
+ 00021969  0x00005185 rtn 
+ 00021970  0x00005189 fetch  0x00000001 , 0x0000043f 
+ 00021971  0x0000518a set1  0x00000004 , 0x0000003f 
+ 00021972  0x0000518b store  0x00000001 , 0x0000043f 
+ 00021973  0x0000518c rtn 
+ 00021974  0x0000518f bpatchx  0x0000005c , 0x0000402b 
+ 00021975  0x00005190 jam  0x00000000 , 0x000044c5 
+ 00021976  0x00005191 arg  0x00000000 , 0x0000003f 
+ 00021977  0x00005192 store  0x00000004 , 0x0000440d 
+ 00021978  0x00005193 store  0x00000005 , 0x00004403 
+ 00021979  0x00005194 set1  0x00000027 , 0x0000003f 
+ 00021980  0x00005195 store  0x00000005 , 0x00004408 
+ 00021981  0x00005196 fetch  0x00000001 , 0x0000043f 
+ 00021982  0x00005197 set0  0x00000004 , 0x0000003f 
+ 00021983  0x00005198 store  0x00000001 , 0x0000043f 
+ 00021984  0x00005199 rtn 
+ 00021985  0x0000519d bpatchx  0x0000005d , 0x0000402b 
+ 00021986  0x0000519e call  0x00005422 
+ 00021987  0x0000519f call  0x00005485 
+ 00021988  0x000051a0 fetch  0x00000001 , 0x00000001 
+ 00021989  0x000051a1 increase  0x00000001 , 0x0000003f 
+ 00021990  0x000051a2 store  0x00000001 , 0x00000001 
+ 00021991  0x000051a3 rtn 
+ 00021992  0x000051a7 bpatchx  0x0000005e , 0x0000402b 
+ 00021993  0x000051a8 fetch  0x00000001 , 0x00004369 
+ 00021994  0x000051a9 rtnne  0x00000001 
+ 00021995  0x000051aa arg  0x00000002 , 0x00000007 
+ 00021996  0x000051ab call  0x00007f16 
+ 00021997  0x000051ac nrtn  0x00000034 
+ 00021998  0x000051ad fetch  0x00000002 , 0x0000436a 
+ 00021999  0x000051ae fetcht  0x00000002 , 0x0000436c 
+ 00022000  0x000051af isub  0x00000002 , 0x0000003f 
+ 00022001  0x000051b0 arg  0x00000002 , 0x00000007 
+ 00022002  0x000051b1 call  0x00007f08 
+ 00022003  0x000051b2 disable  0x00000029 
+ 00022004  0x000051b3 call  0x00005572 
+ 00022005  0x000051b4 call  0x000055e1 
+ 00022006  0x000051b5 nrtn  0x0000002d 
+ 00022007  0x000051b6 bpatchx  0x0000005f , 0x0000402b 
+ 00022008  0x000051b7 fetch  0x00000006 , 0x000002db 
+ 00022009  0x000051b8 store  0x00000006 , 0x0000044f 
+ 00022010  0x000051bb fetch  0x00000001 , 0x00000002 
+ 00022011  0x000051bc increase  0x00000001 , 0x0000003f 
+ 00022012  0x000051bd store  0x00000001 , 0x00000002 
+ 00022013  0x000051be call  0x00005608 
+ 00022014  0x000051bf rtn  0x00000029 
+ 00022015  0x000051c0 call  0x0000550b 
+ 00022016  0x000051c1 nrtn  0x0000002d 
+ 00022017  0x000051c2 bpatchx  0x00000060 , 0x0000402c 
+ 00022018  0x000051c3 fetch  0x00000001 , 0x00000004 
+ 00022019  0x000051c4 increase  0x00000001 , 0x0000003f 
+ 00022020  0x000051c5 store  0x00000001 , 0x00000004 
+ 00022021  0x000051c6 fetch  0x00000009 , 0x000002e1 
+ 00022022  0x000051c7 store  0x00000009 , 0x00000101 
+ 00022023  0x000051c8 rtn 
+ 00022024  0x000051cb bpatchx  0x00000061 , 0x0000402c 
+ 00022025  0x000051cc fetch  0x00000001 , 0x0000049b 
+ 00022026  0x000051cd rtnne  0x0000001b 
+ 00022027  0x000051ce fetch  0x00000006 , 0x0000044f 
+ 00022028  0x000051cf fetcht  0x00000006 , 0x0000448f 
+ 00022029  0x000051d0 isub  0x00000002 , 0x0000003e 
+ 00022030  0x000051d1 nrtn  0x00000005 
+ 00022031  0x000051d2 call  0x0000223b 
+ 00022032  0x000051d3 nrtn  0x00000005 
+ 00022033  0x000051d4 call  0x0000552b 
+ 00022034  0x000051d5 call  0x00005340 
+ 00022035  0x000051d6 bpatchx  0x00000062 , 0x0000402c 
+ 00022036  0x000051d7 jam  0x00000000 , 0x000041ce 
+ 00022037  0x000051d8 jam  0x00000000 , 0x00000476 
+ 00022038  0x000051d9 jam  0x00000000 , 0x00004369 
+ 00022039  0x000051da jam  0x00000000 , 0x0000049b 
+ 00022040  0x000051db branch  0x00002223 
+ 00022041  0x000051de arg  0x00000001 , 0x00000011 
+ 00022042  0x000051df fetch  0x00000001 , 0x000002d9 
+ 00022043  0x000051e0 rtnbit1  0x00000006 
+ 00022044  0x000051e1 arg  0x00000000 , 0x00000011 
+ 00022045  0x000051e2 rtn 
+ 00022046  0x000051e7 bpatchx  0x00000063 , 0x0000402c 
+ 00022047  0x000051e8 fetch  0x00000001 , 0x00000456 
+ 00022048  0x000051e9 rtnbit1  0x00000005 
+ 00022049  0x000051ea call  0x00005642 
+ 00022050  0x000051eb call  0x00005873 
+ 00022051  0x000051ec branch  0x00005664 , 0x00000034 
+ 00022052  0x000051ed ifetch  0x00000001 , 0x00000006 
+ 00022053  0x000051ee ifetcht  0x00000001 , 0x00000006 
+ 00022054  0x000051ef copy  0x00000002 , 0x00000011 
+ 00022055  0x000051f0 isub  0x00000011 , 0x0000003f 
+ 00022056  0x000051f1 arg  0x0000001b , 0x00000002 
+ 00022057  0x000051f2 call  0x00007fdd 
+ 00022058  0x000051f3 copy  0x0000003f , 0x00000002 
+ 00022059  0x000051f4 ifetch  0x00000001 , 0x00000006 
+ 00022060  0x000051f5 copy  0x0000003f , 0x00000001 
+ 00022061  0x000051f6 copy  0x00000011 , 0x0000003f 
+ 00022062  0x000051f7 iadd  0x00000006 , 0x00000006 
+ 00022063  0x000051f8 arg  0x000043de , 0x00000005 
+ 00022064  0x000051f9 copy  0x00000002 , 0x00000039 
+ 00022065  0x000051fa call  0x00007f01 
+ 00022066  0x000051fb call  0x00005654 
+ 00022067  0x000051fc call  0x00005666 
+ 00022068  0x000051fe call  0x00005873 
+ 00022069  0x000051ff ifetch  0x00000001 , 0x00000006 
+ 00022070  0x00005200 copy  0x0000003f , 0x00000011 
+ 00022071  0x00005201 copy  0x00000006 , 0x00000013 
+ 00022072  0x00005202 ifetcht  0x00000001 , 0x00000006 
+ 00022073  0x00005203 copy  0x00000002 , 0x00000012 
+ 00022074  0x00005204 isub  0x00000012 , 0x0000003f 
+ 00022075  0x00005205 arg  0x0000001b , 0x00000002 
+ 00022076  0x00005206 call  0x00007fdd 
+ 00022077  0x00005207 iadd  0x00000012 , 0x0000003f 
+ 00022078  0x00005208 istore  0x00000001 , 0x00000013 
+ 00022079  0x00005209 isub  0x00000011 , 0x0000003e 
+ 00022080  0x0000520a nrtn  0x00000005 
+ 00022081  0x0000520b branch  0x00005896 
+ 00022082  0x0000520f call  0x00005649 
+ 00022083  0x00005210 rtnmark1  0x00000029 
+ 00022084  0x00005211 fetch  0x00000001 , 0x000044e9 
+ 00022085  0x00005212 bbit0  0x00000002 , 0x00005652 
+ 00022086  0x00005213 call  0x00005876 
+ 00022087  0x00005214 branch  0x00005652 , 0x00000034 
+ 00022088  0x00005215 branch  0x00005650 
+ 00022089  0x00005219 call  0x00005873 
+ 00022090  0x0000521a branch  0x00005652 , 0x00000034 
+ 00022091  0x0000521b ifetch  0x00000001 , 0x00000006 
+ 00022092  0x0000521c ifetcht  0x00000001 , 0x00000006 
+ 00022093  0x0000521d isub  0x00000002 , 0x0000003f 
+ 00022094  0x0000521e sub  0x0000003f , 0x0000001b , 0x0000003e 
+ 00022095  0x0000521f branch  0x00005652 , 0x00000002 
+ 00022096  0x00005221 set1  0x00000029 , 0x00000000 
+ 00022097  0x00005222 rtn 
+ 00022098  0x00005225 set0  0x00000029 , 0x00000000 
+ 00022099  0x00005226 rtn 
+ 00022100  0x00005229 copy  0x00000011 , 0x0000003f 
+ 00022101  0x0000522a rtn  0x00000034 
+ 00022102  0x0000522b arg  0x00000001 , 0x00000001 
+ 00022103  0x0000522c rtn 
+ 00022104  0x00005230 bpatchx  0x00000064 , 0x0000402c 
+ 00022105  0x00005231 increase  0x00000001 , 0x00000002 
+ 00022106  0x00005232 call  0x0000576a 
+ 00022107  0x00005233 increase  0xfffffffe , 0x00000006 
+ 00022108  0x00005234 ifetch  0x00000002 , 0x00000006 
+ 00022109  0x00005235 arg  0x00002902 , 0x00000002 
+ 00022110  0x00005236 isub  0x00000002 , 0x0000003e 
+ 00022111  0x00005237 nrtn  0x00000005 
+ 00022112  0x00005238 increase  0x00000001 , 0x00000006 
+ 00022113  0x00005239 copy  0x00000006 , 0x00000011 
+ 00022114  0x0000523a ifetch  0x00000001 , 0x00000006 
+ 00022115  0x0000523b rtn 
+ 00022116  0x0000523f force  0x00000000 , 0x00000002 
+ 00022117  0x00005240 force  0x00000001 , 0x00000001 
+ 00022118  0x00005243 bpatchx  0x00000065 , 0x0000402c 
+ 00022119  0x00005244 storet  0x00000001 , 0x000043dd 
+ 00022120  0x00005245 fetcht  0x00000001 , 0x00000456 
+ 00022121  0x00005246 set1  0x00000005 , 0x00000002 
+ 00022122  0x00005247 and  0x00000002 , 0x000000fc , 0x0000003f 
+ 00022123  0x00005248 ior  0x00000001 , 0x0000003f 
+ 00022124  0x00005249 store  0x00000001 , 0x00000456 
+ 00022125  0x0000524a and_into  0x0000001f , 0x0000003f 
+ 00022126  0x0000524b isolate1  0x00000029 , 0x00000000 
+ 00022127  0x0000524c setflag  0x00000001 , 0x00000004 , 0x0000003f 
+ 00022128  0x0000524d store  0x00000001 , 0x000043dc 
+ 00022129  0x0000524f fetch  0x00000001 , 0x000043dc 
+ 00022130  0x00005250 compare  0x00000001 , 0x00000001 , 0x00000003 
+ 00022131  0x00005251 nbranch  0x00005676 , 0x00000001 
+ 00022132  0x00005252 fetch  0x00000001 , 0x000043dd 
+ 00022133  0x00005253 rtn  0x00000034 
+ 00022134  0x00005255 fetch  0x00000001 , 0x0000043f 
+ 00022135  0x00005256 rtnbit0  0x00000004 
+ 00022136  0x00005257 call  0x0000748d 
+ 00022137  0x00005258 branch  0x000073e3 
+ 00022138  0x0000525c arg  0x00000000 , 0x00000007 
+ 00022139  0x0000525d branch  0x00002c32 
+ 00022140  0x00005260 arg  0x00000000 , 0x00000007 
+ 00022141  0x00005261 branch  0x00002c36 
+ 00022142  0x00005265 bpatchx  0x00000066 , 0x0000402c 
+ 00022143  0x00005266 rtnmark1  0x0000000f 
+ 00022144  0x00005267 call  0x00005890 
+ 00022145  0x00005268 nrtn  0x00000034 
+ 00022146  0x00005269 fetch  0x00000001 , 0x000002d9 
+ 00022147  0x0000526a and  0x0000003f , 0x00000003 , 0x0000003f 
+ 00022148  0x0000526b store  0x00000001 , 0x0000450c 
+ 00022149  0x0000526c ifetch  0x00000001 , 0x00000006 
+ 00022150  0x0000526d and  0x0000003f , 0x0000001f , 0x0000003f 
+ 00022151  0x0000526e store  0x00000001 , 0x0000450b 
+ 00022152  0x0000526f rtn  0x00000034 
+ 00022153  0x00005270 copy  0x00000006 , 0x0000003f 
+ 00022154  0x00005271 store  0x00000002 , 0x0000450d 
+ 00022155  0x00005272 fetch  0x00000001 , 0x0000450c 
+ 00022156  0x00005273 beq  0x00000003 , 0x00005c64 
+ 00022157  0x00005275 call  0x0000569a 
+ 00022158  0x00005276 nbranch  0x0000567a , 0x00000028 
+ 00022159  0x00005277 call  0x0000567c 
+ 00022160  0x00005278 fetch  0x00000002 , 0x0000450d 
+ 00022161  0x00005279 copy  0x0000003f , 0x00000006 
+ 00022162  0x0000527a ifetch  0x00000002 , 0x00000006 
+ 00022163  0x0000527b store  0x00000002 , 0x000044fc 
+ 00022164  0x0000527c bpatchx  0x00000067 , 0x0000402c 
+ 00022165  0x0000527d ifetch  0x00000002 , 0x00000006 
+ 00022166  0x0000527e beq  0x00000004 , 0x000058ab 
+ 00022167  0x0000527f beq  0x00000006 , 0x00005af4 
+ 00022168  0x00005280 beq  0x00000005 , 0x00005ab6 
+ 00022169  0x00005281 rtn 
+ 00022170  0x00005285 fetch  0x00000001 , 0x0000450c 
+ 00022171  0x00005286 beq  0x00000002 , 0x000056a9 
+ 00022172  0x00005287 beq  0x00000001 , 0x000056c1 
+ 00022173  0x00005288 rtn 
+ 00022174  0x0000528e call  0x00007fe7 
+ 00022175  0x0000528f arg  0x00000004 , 0x00000002 
+ 00022176  0x00005290 isub  0x0000003f , 0x0000003e 
+ 00022177  0x00005291 rtn  0x00000005 
+ 00022178  0x00005292 arg  0x00000005 , 0x00000002 
+ 00022179  0x00005293 isub  0x0000003f , 0x0000003e 
+ 00022180  0x00005294 rtn  0x00000005 
+ 00022181  0x00005295 arg  0x00000006 , 0x00000002 
+ 00022182  0x00005296 isub  0x0000003f , 0x0000003e 
+ 00022183  0x00005297 rtn  0x00000005 
+ 00022184  0x00005298 branch  0x00007fe9 
+ 00022185  0x0000529c fetch  0x00000002 , 0x0000450d 
+ 00022186  0x0000529d copy  0x0000003f , 0x00000006 
+ 00022187  0x0000529e ifetch  0x00000002 , 0x00000006 
+ 00022188  0x0000529f store  0x00000002 , 0x000044fc 
+ 00022189  0x000052a0 ifetch  0x00000002 , 0x00000006 
+ 00022190  0x000052a1 call  0x0000569e 
+ 00022191  0x000052a2 nrtn  0x00000028 
+ 00022192  0x000052a3 fetcht  0x00000001 , 0x0000450b 
+ 00022193  0x000052a4 storet  0x00000001 , 0x000044fe 
+ 00022194  0x000052a5 fetch  0x00000002 , 0x000044fc 
+ 00022195  0x000052a6 increase  0x00000004 , 0x0000003f 
+ 00022196  0x000052a7 isub  0x00000002 , 0x0000003e 
+ 00022197  0x000052a8 branch  0x00007fe7 , 0x00000005 
+ 00022198  0x000052a9 fetch  0x00000001 , 0x0000450b 
+ 00022199  0x000052aa copy  0x0000003f , 0x00000039 
+ 00022200  0x000052ab arg  0x00000311 , 0x00000005 
+ 00022201  0x000052ac fetch  0x00000002 , 0x0000450d 
+ 00022202  0x000052ad copy  0x0000003f , 0x00000006 
+ 00022203  0x000052ae call  0x00007f01 
+ 00022204  0x000052af branch  0x00007fe9 
+ 00022205  0x000052b5 call  0x00007fe7 
+ 00022206  0x000052b6 fetch  0x00000001 , 0x000044fe 
+ 00022207  0x000052b7 nrtn  0x00000034 
+ 00022208  0x000052b8 branch  0x00007fe9 
+ 00022209  0x000052bb call  0x000056bd 
+ 00022210  0x000052bc nrtn  0x00000028 
+ 00022211  0x000052bd fetch  0x00000001 , 0x000044fe 
+ 00022212  0x000052be arg  0x00000311 , 0x00000005 
+ 00022213  0x000052bf iadd  0x00000005 , 0x00000011 
+ 00022214  0x000052c0 fetcht  0x00000001 , 0x0000450b 
+ 00022215  0x000052c1 iadd  0x00000002 , 0x0000003f 
+ 00022216  0x000052c2 store  0x00000001 , 0x000044fe 
+ 00022217  0x000052c3 fetch  0x00000001 , 0x0000450b 
+ 00022218  0x000052c4 copy  0x0000003f , 0x00000039 
+ 00022219  0x000052c5 copy  0x00000011 , 0x00000005 
+ 00022220  0x000052c6 fetch  0x00000002 , 0x0000450d 
+ 00022221  0x000052c7 copy  0x0000003f , 0x00000006 
+ 00022222  0x000052c8 call  0x00007ef4 
+ 00022223  0x000052c9 setarg  0x00000311 
+ 00022224  0x000052ca store  0x00000002 , 0x0000450d 
+ 00022225  0x000052cb fetch  0x00000002 , 0x000044fc 
+ 00022226  0x000052cc increase  0x00000004 , 0x0000003f 
+ 00022227  0x000052cd fetcht  0x00000001 , 0x000044fe 
+ 00022228  0x000052ce isub  0x00000002 , 0x0000003e 
+ 00022229  0x000052cf branch  0x00007fe7 , 0x00000005 
+ 00022230  0x000052d0 branch  0x00007fe9 
+ 00022231  0x000052d7 call  0x00007ea5 
+ 00022232  0x000052d8 arg  0x0000445e , 0x00000005 
+ 00022233  0x000052da fetch  0x00000002 , 0x000044fc 
+ 00022234  0x000052db increase  0xfffffffb , 0x0000003f 
+ 00022235  0x000052dd istore  0x00000001 , 0x00000005 
+ 00022236  0x000052de copy  0x0000003f , 0x00000039 
+ 00022237  0x000052df call  0x00007e9f 
+ 00022238  0x000052e0 branch  0x00007ef4 
+ 00022239  0x000052e3 call  0x00007ea5 
+ 00022240  0x000052e4 arg  0x00004471 , 0x00000005 
+ 00022241  0x000052e5 branch  0x000056d9 
+ 00022242  0x000052ea fetch  0x00000002 , 0x000041f9 
+ 00022243  0x000052eb branch  0x00007f9c 
+ 00022244  0x000052ee fetcht  0x00000004 , 0x0000045b 
+ 00022245  0x000052ef call  0x00002a7b 
+ 00022246  0x000052f0 isub  0x00000002 , 0x0000000b 
+ 00022247  0x000052f1 deposit  0x0000000b 
+ 00022248  0x000052f2 fetcht  0x00000002 , 0x0000046d 
+ 00022249  0x000052f3 lshift4  0x00000002 , 0x00000002 
+ 00022250  0x000052f4 lshift  0x00000002 , 0x00000002 
+ 00022251  0x000052f5 isub  0x00000002 , 0x0000003f 
+ 00022252  0x000052f6 rtn 
+ 00022253  0x000052f9 call  0x00002a7b 
+ 00022254  0x000052fa store  0x00000004 , 0x0000045b 
+ 00022255  0x000052fb rtn 
+ 00022256  0x000052ff jam  0x00000024 , 0x00000016 
+ 00022257  0x00005300 jam  0x00000000 , 0x00000ac2 
+ 00022258  0x00005302 bpatchx  0x00000068 , 0x0000402d 
+ 00022259  0x00005303 fetch  0x00000001 , 0x0000436e 
+ 00022260  0x00005304 rtn  0x00000034 
+ 00022261  0x00005305 arg  0x00000000 , 0x00000007 
+ 00022262  0x00005306 call  0x00007f16 
+ 00022263  0x00005307 nrtn  0x00000034 
+ 00022264  0x00005308 bpatchx  0x00000069 , 0x0000402d 
+ 00022265  0x0000530a disable  0x00000029 
+ 00022266  0x0000530b enable  0x00000010 
+ 00022267  0x0000530c call  0x00005572 
+ 00022268  0x0000530d call  0x00005422 
+ 00022269  0x0000530e call  0x000054e9 
+ 00022270  0x0000530f nbranch  0x00005706 , 0x0000002d 
+ 00022271  0x00005310 fetch  0x00000001 , 0x00000003 
+ 00022272  0x00005311 increase  0x00000001 , 0x0000003f 
+ 00022273  0x00005312 store  0x00000001 , 0x00000003 
+ 00022274  0x00005313 fetch  0x00000001 , 0x000002d9 
+ 00022275  0x00005314 and  0x0000003f , 0x0000000f , 0x0000003f 
+ 00022276  0x00005315 beq  0x00000003 , 0x0000551c 
+ 00022277  0x00005316 beq  0x00000005 , 0x00005728 
+ 00022278  0x00005318 bpatchx  0x0000006a , 0x0000402d 
+ 00022279  0x00005319 random  0x0000003f 
+ 00022280  0x0000531a arg  0x000001ff , 0x00000002 
+ 00022281  0x0000531b iand  0x00000002 , 0x0000003f 
+ 00022282  0x0000531c add  0x0000003f , 0x000000fa , 0x0000003f 
+ 00022283  0x0000531d call  0x00003cbe 
+ 00022284  0x0000531e fetch  0x00000001 , 0x00000ac2 
+ 00022285  0x0000531f fetcht  0x00000001 , 0x0000448d 
+ 00022286  0x00005320 isub  0x00000002 , 0x0000003e 
+ 00022287  0x00005321 nbranch  0x000056f2 , 0x00000005 
+ 00022288  0x00005322 arg  0x00000000 , 0x00000007 
+ 00022289  0x00005323 fetch  0x00000002 , 0x00004482 
+ 00022290  0x00005324 branch  0x00007f08 
+ 00022291  0x00005328 bpatchx  0x0000006b , 0x0000402d 
+ 00022292  0x00005329 fetch  0x00000001 , 0x00000476 
+ 00022293  0x0000532a call  0x000053fc 
+ 00022294  0x0000532b fetch  0x00000002 , 0x00000441 
+ 00022295  0x0000532c imul32  0x00000002 , 0x0000003f 
+ 00022296  0x0000532d arg  0x00000177 , 0x00000002 
+ 00022297  0x0000532e imul32  0x00000002 , 0x0000003f 
+ 00022298  0x0000532f arg  0x000186a0 , 0x00000002 
+ 00022299  0x00005330 idiv  0x00000002 
+ 00022300  0x00005331 fetch  0x00000001 , 0x0000046a 
+ 00022301  0x00005332 arg  0x00004e20 , 0x00000002 
+ 00022302  0x00005333 imul32  0x00000002 , 0x0000003f 
+ 00022303  0x00005334 iadd  0x00000002 , 0x0000003f 
+ 00022304  0x00005335 store  0x00000004 , 0x000044e5 
+ 00022305  0x00005336 bpatchx  0x0000006c , 0x0000402d 
+ 00022306  0x00005337 fetch  0x00000002 , 0x000040c1 
+ 00022307  0x00005338 call  0x00007f86 
+ 00022308  0x00005339 quotient  0x00000002 
+ 00022309  0x0000533a iadd  0x00000002 , 0x0000003f 
+ 00022310  0x0000533b store  0x00000002 , 0x0000044d 
+ 00022311  0x0000533c rtn 
+ 00022312  0x0000533f bpatchx  0x0000006d , 0x0000402d 
+ 00022313  0x00005340 fetch  0x00000006 , 0x000002e1 
+ 00022314  0x00005341 fetcht  0x00000006 , 0x000044a0 
+ 00022315  0x00005342 isub  0x00000002 , 0x0000003e 
+ 00022316  0x00005343 nrtn  0x00000005 
+ 00022317  0x00005344 call  0x00005619 
+ 00022318  0x00005345 copy  0x00000011 , 0x0000003f 
+ 00022319  0x00005346 store  0x00000001 , 0x0000448e 
+ 00022320  0x00005347 fetch  0x00000007 , 0x000002ee 
+ 00022321  0x00005348 store  0x00000007 , 0x00000101 
+ 00022322  0x00005349 ifetch  0x00000008 , 0x00000006 
+ 00022323  0x0000534a istore  0x00000008 , 0x00000005 
+ 00022324  0x0000534b fetch  0x00000006 , 0x000002db 
+ 00022325  0x0000534c store  0x00000006 , 0x0000044f 
+ 00022326  0x0000534d increase  0x00000006 , 0x00000006 
+ 00022327  0x0000534e ifetch  0x00000008 , 0x00000006 
+ 00022328  0x0000534f store  0x00000008 , 0x00000463 
+ 00022329  0x00005350 ifetcht  0x00000002 , 0x00000006 
+ 00022330  0x00005351 bpatchx  0x0000006e , 0x0000402d 
+ 00022331  0x00005352 lshift2  0x00000002 , 0x00000002 
+ 00022332  0x00005353 ifetch  0x00000002 , 0x00000006 
+ 00022333  0x00005354 lshift2  0x0000003f , 0x0000003f 
+ 00022334  0x00005355 store  0x00000002 , 0x00000441 
+ 00022335  0x00005356 store  0x00000004 , 0x00000443 
+ 00022336  0x00005357 isub  0x00000002 , 0x0000003f 
+ 00022337  0x00005358 add  0x0000003f , 0xfffffffe , 0x00000028 
+ 00022338  0x00005359 ifetch  0x00000009 , 0x00000006 
+ 00022339  0x0000535a store  0x00000009 , 0x0000046b 
+ 00022340  0x0000535b bpatchx  0x0000006f , 0x0000402d 
+ 00022341  0x0000535c ifetch  0x00000001 , 0x00000006 
+ 00022342  0x0000535d rshift4  0x0000003f , 0x00000002 
+ 00022343  0x0000535e rshift  0x00000002 , 0x00000002 
+ 00022344  0x0000535f storet  0x00000001 , 0x00000476 
+ 00022345  0x00005360 and_into  0x0000001f , 0x0000003f 
+ 00022346  0x00005361 store  0x00000001 , 0x00000458 
+ 00022347  0x00005362 call  0x00005713 
+ 00022348  0x00005363 call  0x0000545b 
+ 00022349  0x00005364 call  0x0000534c 
+ 00022350  0x00005365 call  0x0000223b 
+ 00022351  0x00005366 nrtn  0x00000005 
+ 00022352  0x00005367 bpatchx  0x00000070 , 0x0000402e 
+ 00022353  0x00005368 call  0x00002841 
+ 00022354  0x00005369 call  0x00005ad3 
+ 00022355  0x0000536a jam  0x00000014 , 0x00000a99 
+ 00022356  0x0000536b call  0x00007d86 
+ 00022357  0x0000536c branch  0x00002223 
+ 00022358  0x00005370 bpatchx  0x00000071 , 0x0000402e 
+ 00022359  0x00005371 fetch  0x00000002 , 0x0000445a 
+ 00022360  0x00005372 iforce  0x00000012 
+ 00022361  0x00005373 fetch  0x00000002 , 0x0000445c 
+ 00022362  0x00005374 iforce  0x00000013 
+ 00022363  0x00005375 fetch  0x00000002 , 0x000044bc 
+ 00022364  0x00005376 iforce  0x00000006 
+ 00022365  0x00005377 enable  0x00000028 
+ 00022366  0x00005378 rtn 
+ 00022367  0x0000537c ifetch  0x00000002 , 0x00000006 
+ 00022368  0x0000537d rtn  0x00000034 
+ 00022369  0x0000537e isub  0x00000012 , 0x0000003e 
+ 00022370  0x0000537f nrtn  0x00000002 
+ 00022371  0x00005380 isub  0x00000013 , 0x0000003e 
+ 00022372  0x00005381 rtn  0x00000005 
+ 00022373  0x00005382 branch  0x00005768 , 0x00000002 
+ 00022374  0x00005383 force  0x00000001 , 0x0000003e 
+ 00022375  0x00005384 rtn 
+ 00022376  0x00005386 force  0x00000000 , 0x0000003f 
+ 00022377  0x00005387 rtn 
+ 00022378  0x0000538c call  0x0000576d 
+ 00022379  0x0000538d branch  0x00005779 , 0x00000005 
+ 00022380  0x0000538e rtn 
+ 00022381  0x00005391 bpatchx  0x00000072 , 0x0000402e 
+ 00022382  0x00005392 fetch  0x00000002 , 0x000044bc 
+ 00022383  0x00005393 iforce  0x00000006 
+ 00022384  0x00005395 ifetch  0x00000002 , 0x00000006 
+ 00022385  0x00005396 rtn  0x00000034 
+ 00022386  0x00005397 isub  0x00000002 , 0x0000003e 
+ 00022387  0x00005398 rtn  0x00000005 
+ 00022388  0x00005399 ifetch  0x00000001 , 0x00000006 
+ 00022389  0x0000539a iadd  0x00000006 , 0x00000006 
+ 00022390  0x0000539b ifetch  0x00000001 , 0x00000006 
+ 00022391  0x0000539c iadd  0x00000006 , 0x00000006 
+ 00022392  0x0000539d branch  0x00005770 
+ 00022393  0x0000539f ifetch  0x00000001 , 0x00000006 
+ 00022394  0x000053a0 iadd  0x00000006 , 0x00000006 
+ 00022395  0x000053a1 rtn 
+ 00022396  0x000053a6 bpatchx  0x00000073 , 0x0000402e 
+ 00022397  0x000053a7 fetch  0x00000002 , 0x000044bc 
+ 00022398  0x000053a8 iforce  0x00000006 
+ 00022399  0x000053aa ifetch  0x00000002 , 0x00000006 
+ 00022400  0x000053ab rtn  0x00000034 
+ 00022401  0x000053ac ifetch  0x00000001 , 0x00000006 
+ 00022402  0x000053ad iadd  0x00000006 , 0x00000006 
+ 00022403  0x000053ae increase  0xfffffffe , 0x00000006 
+ 00022404  0x000053af ifetch  0x00000002 , 0x00000006 
+ 00022405  0x000053b0 isub  0x00000002 , 0x0000003e 
+ 00022406  0x000053b1 rtn  0x00000005 
+ 00022407  0x000053b2 ifetch  0x00000001 , 0x00000006 
+ 00022408  0x000053b3 iadd  0x00000006 , 0x00000006 
+ 00022409  0x000053b4 branch  0x0000577f 
+ 00022410  0x000053b9 fetch  0x00000002 , 0x0000049c 
+ 00022411  0x000053ba branch  0x0000578e 
+ 00022412  0x000053bd bpatchx  0x00000074 , 0x0000402e 
+ 00022413  0x000053be fetch  0x00000002 , 0x000044bc 
+ 00022414  0x000053c0 iforce  0x00000006 
+ 00022415  0x000053c1 copy  0x00000002 , 0x00000011 
+ 00022416  0x000053c3 ifetch  0x00000002 , 0x00000006 
+ 00022417  0x000053c4 branch  0x00005799 , 0x00000034 
+ 00022418  0x000053c5 isub  0x00000011 , 0x0000003e 
+ 00022419  0x000053c6 branch  0x0000579a , 0x00000005 
+ 00022420  0x000053c7 ifetch  0x00000001 , 0x00000006 
+ 00022421  0x000053c8 iadd  0x00000006 , 0x00000006 
+ 00022422  0x000053c9 ifetch  0x00000001 , 0x00000006 
+ 00022423  0x000053ca iadd  0x00000006 , 0x00000006 
+ 00022424  0x000053cb branch  0x00005790 
+ 00022425  0x000053cd branch  0x00007fef 
+ 00022426  0x000053d0 ifetch  0x00000001 , 0x00000006 
+ 00022427  0x000053d1 store  0x00000001 , 0x000004a2 
+ 00022428  0x000053d2 copy  0x0000003f , 0x00000039 
+ 00022429  0x000053d3 arg  0x000004a3 , 0x00000005 
+ 00022430  0x000053d4 call  0x00007ef4 
+ 00022431  0x000053d5 ifetch  0x00000001 , 0x00000006 
+ 00022432  0x000053d6 store  0x00000001 , 0x000004b3 
+ 00022433  0x000053d7 call  0x00007ea5 
+ 00022434  0x000053d8 branch  0x00007ff1 
+ 00022435  0x000053dc bpatchx  0x00000075 , 0x0000402e 
+ 00022436  0x000053dd call  0x000057a6 
+ 00022437  0x000053de branch  0x000057b8 
+ 00022438  0x000053e1 arg  0x00002a00 , 0x00000002 
+ 00022439  0x000053e2 call  0x0000577c 
+ 00022440  0x000053e3 rtn  0x00000034 
+ 00022441  0x000053e4 ifetch  0x00000001 , 0x00000006 
+ 00022442  0x000053e5 copy  0x00000006 , 0x00000005 
+ 00022443  0x000053e6 fetcht  0x00000001 , 0x000043af 
+ 00022444  0x000053e7 copy  0x00000002 , 0x00000039 
+ 00022445  0x000053e8 isub  0x00000002 , 0x0000003e 
+ 00022446  0x000053e9 nbranch  0x000057b5 , 0x00000002 
+ 00022447  0x000053ea isub  0x00000002 , 0x00000002 
+ 00022448  0x000053eb arg  0x000043b0 , 0x00000006 
+ 00022449  0x000053ec call  0x00007f01 
+ 00022450  0x000053ed copy  0x00000002 , 0x00000039 
+ 00022451  0x000053ee ncall  0x000057f0 , 0x00000005 
+ 00022452  0x000053ef rtn 
+ 00022453  0x000053f1 copy  0x0000003f , 0x00000039 
+ 00022454  0x000053f2 arg  0x000043b0 , 0x00000006 
+ 00022455  0x000053f3 branch  0x00007ef4 
+ 00022456  0x000053f7 arg  0x0000438f , 0x00000013 
+ 00022457  0x000053f8 arg  0x00004370 , 0x00000011 
+ 00022458  0x000053f9 call  0x000057c5 
+ 00022459  0x000053fa setarg  0x00000000 
+ 00022460  0x000053fb setflag  0x00000028 , 0x00000000 , 0x0000003f 
+ 00022461  0x000053fc store  0x00000001 , 0x00000a9a 
+ 00022462  0x000053fd arg  0x000043af , 0x00000013 
+ 00022463  0x000053fe arg  0x00004390 , 0x00000011 
+ 00022464  0x000053ff call  0x000057c5 
+ 00022465  0x00005400 rtn  0x00000028 
+ 00022466  0x00005401 fetch  0x00000001 , 0x00000a9a 
+ 00022467  0x00005402 branch  0x00002a8c , 0x00000034 
+ 00022468  0x00005403 rtn 
+ 00022469  0x00005407 bpatchx  0x00000076 , 0x0000402e 
+ 00022470  0x00005408 call  0x00007fe7 
+ 00022471  0x00005409 call  0x00007eda 
+ 00022472  0x0000540a arg  0x00000000 , 0x00000012 
+ 00022473  0x0000540b arg  0x00000ac3 , 0x00000005 
+ 00022474  0x0000540c call  0x000057df 
+ 00022475  0x0000540d fetch  0x00000001 , 0x000043af 
+ 00022476  0x0000540e add  0x0000003f , 0x00000001 , 0x00000002 
+ 00022477  0x0000540f iadd  0x00000012 , 0x00000011 
+ 00022478  0x00005410 increase  0x00000002 , 0x00000011 
+ 00022479  0x00005411 sub  0x00000011 , 0x0000001f , 0x0000003e 
+ 00022480  0x00005412 nbranch  0x000057dd , 0x00000002 
+ 00022481  0x00005413 istoret  0x00000001 , 0x00000005 
+ 00022482  0x00005414 arg  0x00000009 , 0x00000002 
+ 00022483  0x00005415 istoret  0x00000001 , 0x00000005 
+ 00022484  0x00005416 iforce  0x00000039 
+ 00022485  0x00005417 call  0x00007ef4 
+ 00022486  0x00005418 copy  0x00000011 , 0x00000012 
+ 00022487  0x0000541a deposit  0x00000012 
+ 00022488  0x0000541b store  0x00000001 , 0x00000ac2 
+ 00022489  0x0000541c arg  0x00000ac2 , 0x00000006 
+ 00022490  0x0000541d setarg  0xffffffe0 
+ 00022491  0x0000541e iadd  0x00000013 , 0x00000005 
+ 00022492  0x0000541f branch  0x00007ebd 
+ 00022493  0x00005422 call  0x00007fe9 
+ 00022494  0x00005423 branch  0x000057d7 
+ 00022495  0x00005426 ifetch  0x00000001 , 0x00000011 
+ 00022496  0x00005427 rtn  0x00000034 
+ 00022497  0x00005428 pincrease  0x00000001 
+ 00022498  0x00005429 ifetcht  0x00000001 , 0x00000006 
+ 00022499  0x0000542a sub  0x00000002 , 0x00000009 , 0x0000003e 
+ 00022500  0x0000542b branch  0x000057ee , 0x00000005 
+ 00022501  0x0000542c iadd  0x00000012 , 0x00000012 
+ 00022502  0x0000542d copy  0x00000011 , 0x00000006 
+ 00022503  0x0000542e iforce  0x00000039 
+ 00022504  0x0000542f call  0x00007ef4 
+ 00022505  0x00005430 copy  0x00000006 , 0x00000011 
+ 00022506  0x00005432 deposit  0x00000011 
+ 00022507  0x00005433 isub  0x00000013 , 0x0000003e 
+ 00022508  0x00005434 rtn  0x00000002 
+ 00022509  0x00005435 branch  0x000057df 
+ 00022510  0x00005438 iadd  0x00000011 , 0x00000011 
+ 00022511  0x00005439 branch  0x000057ea 
+ 00022512  0x0000543d setarg  0x00000020 
+ 00022513  0x0000543e istore  0x00000001 , 0x00000005 
+ 00022514  0x0000543f loop  0x000057f0 
+ 00022515  0x00005440 rtn 
+ 00022516  0x00005444 bpatchx  0x00000077 , 0x0000402e 
+ 00022517  0x00005445 disable  0x0000002b 
+ 00022518  0x00005446 branch  0x000057f8 , 0x0000002e 
+ 00022519  0x00005447 nbranch  0x00005806 , 0x0000002d 
+ 00022520  0x00005449 call  0x00002bcb 
+ 00022521  0x0000544a fetch  0x00000002 , 0x000040c1 
+ 00022522  0x0000544b store  0x00000002 , 0x0000044d 
+ 00022523  0x0000544d nbranch  0x00002bde , 0x0000002d 
+ 00022524  0x0000544e bmark1  0x0000000f , 0x00002bde 
+ 00022525  0x00005450 fetch  0x00000001 , 0x0000450b 
+ 00022526  0x00005451 nbranch  0x00002bde , 0x00000034 
+ 00022527  0x00005452 fetch  0x00000001 , 0x000043dd 
+ 00022528  0x00005453 nbranch  0x00002bde , 0x00000034 
+ 00022529  0x00005455 fetch  0x00000001 , 0x000044e9 
+ 00022530  0x00005456 bbit1  0x00000005 , 0x00002bde 
+ 00022531  0x00005458 fetch  0x00000001 , 0x0000043f 
+ 00022532  0x00005459 bbit1  0x00000005 , 0x00002bde 
+ 00022533  0x0000545a branch  0x00002bc0 
+ 00022534  0x0000545d fetcht  0x00000002 , 0x000040c1 
+ 00022535  0x0000545e rshift  0x00000002 , 0x00000002 
+ 00022536  0x0000545f fetch  0x00000002 , 0x0000044d 
+ 00022537  0x00005460 iadd  0x00000002 , 0x0000003f 
+ 00022538  0x00005461 store  0x00000002 , 0x0000044d 
+ 00022539  0x00005462 branch  0x00002bd6 
+ 00022540  0x00005466 arg  0x00000000 , 0x00000007 
+ 00022541  0x00005467 branch  0x00005824 
+ 00022542  0x0000546a arg  0x00000000 , 0x00000007 
+ 00022543  0x0000546b branch  0x00005828 
+ 00022544  0x0000546e arg  0x00000001 , 0x00000007 
+ 00022545  0x0000546f branch  0x00005824 
+ 00022546  0x00005472 arg  0x00000001 , 0x00000007 
+ 00022547  0x00005473 branch  0x00005828 
+ 00022548  0x00005476 arg  0x00000002 , 0x00000007 
+ 00022549  0x00005477 branch  0x00005824 
+ 00022550  0x0000547a arg  0x00000002 , 0x00000007 
+ 00022551  0x0000547b branch  0x00005828 
+ 00022552  0x0000547e arg  0x00000003 , 0x00000007 
+ 00022553  0x0000547f branch  0x00005824 
+ 00022554  0x00005482 arg  0x00000003 , 0x00000007 
+ 00022555  0x00005483 branch  0x00005828 
+ 00022556  0x00005486 arg  0x00000004 , 0x00000007 
+ 00022557  0x00005487 branch  0x00005824 
+ 00022558  0x0000548a arg  0x00000004 , 0x00000007 
+ 00022559  0x0000548b branch  0x00005828 
+ 00022560  0x0000548e arg  0x00000005 , 0x00000007 
+ 00022561  0x0000548f branch  0x00005824 
+ 00022562  0x00005492 arg  0x00000005 , 0x00000007 
+ 00022563  0x00005493 branch  0x00005828 
+ 00022564  0x00005497 fetch  0x00000001 , 0x000044e9 
+ 00022565  0x00005498 qset1  0x0000003f 
+ 00022566  0x00005499 store  0x00000001 , 0x000044e9 
+ 00022567  0x0000549a rtn 
+ 00022568  0x0000549d fetch  0x00000001 , 0x000044e9 
+ 00022569  0x0000549e qset0  0x0000003f 
+ 00022570  0x0000549f store  0x00000001 , 0x000044e9 
+ 00022571  0x000054a0 rtn 
+ 00022572  0x000054a3 setarg  0x00112233 
+ 00022573  0x000054a4 store  0x00000003 , 0x000044ea 
+ 00022574  0x000054a5 setarg  0x00445566 
+ 00022575  0x000054a6 istore  0x00000003 , 0x00000005 
+ 00022576  0x000054a7 setarg  0x00778899 
+ 00022577  0x000054a8 istore  0x00000003 , 0x00000005 
+ 00022578  0x000054a9 setarg  0x00001122 
+ 00022579  0x000054aa istore  0x00000003 , 0x00000005 
+ 00022580  0x000054ab setarg  0x00334455 
+ 00022581  0x000054ac istore  0x00000003 , 0x00000005 
+ 00022582  0x000054ad setarg  0x00000066 
+ 00022583  0x000054ae istore  0x00000001 , 0x00000005 
+ 00022584  0x000054af rtn 
+ 00022585  0x000054b3 setarg  0x01000302 
+ 00022586  0x000054b4 store  0x00000004 , 0x00004453 
+ 00022587  0x000054b5 setarg  0x00010010 
+ 00022588  0x000054b6 store  0x00000003 , 0x00004457 
+ 00022589  0x000054b7 jam  0x00000001 , 0x000044c6 
+ 00022590  0x000054b8 rtn 
+ 00022591  0x000054bd arg  0x00000000 , 0x00000011 
+ 00022592  0x000054be arg  0x00000001 , 0x00000001 
+ 00022593  0x000054bf branch  0x00005850 
+ 00022594  0x000054c4 arg  0x00000003 , 0x00000001 
+ 00022595  0x000054c5 call  0x00005850 
+ 00022596  0x000054c6 copy  0x00000012 , 0x0000003f 
+ 00022597  0x000054c7 istore  0x00000001 , 0x00000005 
+ 00022598  0x000054c8 rtn 
+ 00022599  0x000054cd force  0x00000002 , 0x00000001 
+ 00022600  0x000054ce increase  0x00000004 , 0x00000011 
+ 00022601  0x000054cf call  0x00005850 
+ 00022602  0x000054d0 increase  0xfffffffc , 0x00000011 
+ 00022603  0x000054d1 copy  0x00000011 , 0x0000003f 
+ 00022604  0x000054d2 istore  0x00000002 , 0x00000005 
+ 00022605  0x000054d3 copy  0x00000012 , 0x0000003f 
+ 00022606  0x000054d4 istore  0x00000002 , 0x00000005 
+ 00022607  0x000054d5 rtn 
+ 00022608  0x000054da sub  0x00000011 , 0x000000f0 , 0x0000003e 
+ 00022609  0x000054db nbranch  0x00002a8c , 0x00000002 
+ 00022610  0x000054dc fetch  0x00000001 , 0x000044ff 
+ 00022611  0x000054dd arg  0x00000001 , 0x00000002 
+ 00022612  0x000054de arg  0x00000004 , 0x00000039 
+ 00022613  0x000054e0 iand  0x00000002 , 0x0000003e 
+ 00022614  0x000054e1 branch  0x0000585a , 0x00000005 
+ 00022615  0x000054e2 lshift  0x00000002 , 0x00000002 
+ 00022616  0x000054e3 loop  0x00005855 
+ 00022617  0x000054e4 branch  0x00002a8c 
+ 00022618  0x000054e6 ixor  0x00000002 , 0x0000003f 
+ 00022619  0x000054e7 store  0x00000001 , 0x000044ff 
+ 00022620  0x000054e8 sub  0x00000039 , 0x00000004 , 0x0000003f 
+ 00022621  0x000054e9 lshift4  0x0000003f , 0x0000003f 
+ 00022622  0x000054ea lshift4  0x0000003f , 0x0000003f 
+ 00022623  0x000054eb arg  0x00001800 , 0x00000002 
+ 00022624  0x000054ec iadd  0x00000002 , 0x00000002 
+ 00022625  0x000054ee arg  0x00000000 , 0x00000039 
+ 00022626  0x000054ef arg  0x00004500 , 0x00000006 
+ 00022627  0x000054f1 ifetch  0x00000002 , 0x00000006 
+ 00022628  0x000054f2 branch  0x00005869 , 0x00000034 
+ 00022629  0x000054f3 copy  0x00000039 , 0x0000003f 
+ 00022630  0x000054f4 increase  0x00000001 , 0x00000039 
+ 00022631  0x000054f5 bne  0x00000004 , 0x00005863 
+ 00022632  0x000054f6 branch  0x00002a8c 
+ 00022633  0x000054fa increase  0xfffffffe , 0x00000006 
+ 00022634  0x000054fb istoret  0x00000002 , 0x00000006 
+ 00022635  0x000054fc copy  0x00000002 , 0x00000005 
+ 00022636  0x000054fd copy  0x00000011 , 0x0000003f 
+ 00022637  0x000054fe istore  0x00000001 , 0x00000005 
+ 00022638  0x000054ff setarg  0x00000000 
+ 00022639  0x00005500 istore  0x00000001 , 0x00000005 
+ 00022640  0x00005501 copy  0x00000001 , 0x0000003f 
+ 00022641  0x00005502 istore  0x00000001 , 0x00000005 
+ 00022642  0x00005503 rtn 
+ 00022643  0x00005508 fetch  0x00000002 , 0x00004500 
+ 00022644  0x00005509 copy  0x0000003f , 0x00000006 
+ 00022645  0x0000550a rtn 
+ 00022646  0x0000550d fetch  0x00000002 , 0x00004502 
+ 00022647  0x0000550e copy  0x0000003f , 0x00000006 
+ 00022648  0x0000550f rtn 
+ 00022649  0x00005512 call  0x0000587c 
+ 00022650  0x00005513 copy  0x0000003f , 0x00000006 
+ 00022651  0x00005514 rtn 
+ 00022652  0x00005516 fetch  0x00000002 , 0x00004506 
+ 00022653  0x00005517 nrtn  0x00000034 
+ 00022654  0x00005518 fetch  0x00000002 , 0x00004504 
+ 00022655  0x00005519 nrtn  0x00000034 
+ 00022656  0x0000551a fetch  0x00000002 , 0x00004502 
+ 00022657  0x0000551b nrtn  0x00000034 
+ 00022658  0x0000551c fetch  0x00000002 , 0x00004500 
+ 00022659  0x0000551d rtn 
+ 00022660  0x00005520 call  0x00005873 
+ 00022661  0x00005521 increase  0x00000003 , 0x00000006 
+ 00022662  0x00005522 rtn 
+ 00022663  0x00005525 call  0x00005873 
+ 00022664  0x00005526 increase  0x00000007 , 0x00000006 
+ 00022665  0x00005527 rtn 
+ 00022666  0x0000552a call  0x00005879 
+ 00022667  0x0000552b increase  0x00000007 , 0x00000006 
+ 00022668  0x0000552c rtn 
+ 00022669  0x0000552f call  0x00005879 
+ 00022670  0x00005530 increase  0x00000003 , 0x00000006 
+ 00022671  0x00005531 rtn 
+ 00022672  0x00005536 fetch  0x00000002 , 0x00004506 
+ 00022673  0x00005537 rtn 
+ 00022674  0x0000553b fetch  0x00000002 , 0x00004504 
+ 00022675  0x0000553c rtn 
+ 00022676  0x00005540 fetch  0x00000002 , 0x00004500 
+ 00022677  0x00005541 rtn 
+ 00022678  0x00005545 fetch  0x00000002 , 0x00004500 
+ 00022679  0x00005546 arg  0x00001800 , 0x00000002 
+ 00022680  0x00005547 isub  0x00000002 , 0x0000003f 
+ 00022681  0x00005548 rshift4  0x0000003f , 0x0000003f 
+ 00022682  0x00005549 rshift4  0x0000003f , 0x00000007 
+ 00022683  0x0000554a fetch  0x00000001 , 0x000044ff 
+ 00022684  0x0000554b qset0  0x0000003f 
+ 00022685  0x0000554c store  0x00000001 , 0x000044ff 
+ 00022686  0x0000554d arg  0x00000000 , 0x00000039 
+ 00022687  0x0000554f lshift  0x00000039 , 0x0000003f 
+ 00022688  0x00005550 arg  0x00004502 , 0x00000002 
+ 00022689  0x00005551 iadd  0x00000002 , 0x00000002 
+ 00022690  0x00005552 ifetch  0x00000002 , 0x00000002 
+ 00022691  0x00005553 increase  0xfffffffe , 0x00000002 
+ 00022692  0x00005554 istore  0x00000002 , 0x00000002 
+ 00022693  0x00005555 copy  0x00000039 , 0x0000003f 
+ 00022694  0x00005556 increase  0x00000001 , 0x00000039 
+ 00022695  0x00005557 bne  0x00000003 , 0x0000589f 
+ 00022696  0x00005558 setarg  0x00000000 
+ 00022697  0x00005559 istore  0x00000002 , 0x00000002 
+ 00022698  0x0000555a rtn 
+ 00022699  0x00005561 ifetch  0x00000003 , 0x00000006 
+ 00022700  0x00005562 store  0x00000003 , 0x00000477 
+ 00022701  0x00005563 beq  0x00000002 , 0x000058c1 
+ 00022702  0x00005564 beq  0x00000003 , 0x000058c9 
+ 00022703  0x00005565 beq  0x00000004 , 0x000058cc 
+ 00022704  0x00005566 beq  0x00000006 , 0x000058f2 
+ 00022705  0x00005567 beq  0x00000008 , 0x0000593f 
+ 00022706  0x00005568 beq  0x0000000a , 0x000059bc 
+ 00022707  0x00005569 beq  0x0000000c , 0x000059e4 
+ 00022708  0x0000556a beq  0x00000010 , 0x000059fa 
+ 00022709  0x0000556b beq  0x00000012 , 0x00005a2f 
+ 00022710  0x0000556c beq  0x00000016 , 0x00005a48 
+ 00022711  0x0000556d beq  0x00000018 , 0x00005a5b 
+ 00022712  0x0000556e beq  0x00000052 , 0x00005a60 
+ 00022713  0x0000556f rtn 
+ 00022714  0x00005573 force  0x00000003 , 0x00000011 
+ 00022715  0x00005574 call  0x00005a82 
+ 00022716  0x00005575 setarg  0x00000002 
+ 00022717  0x00005576 istore  0x00000001 , 0x00000005 
+ 00022718  0x00005577 fetch  0x00000002 , 0x000044a6 
+ 00022719  0x00005578 istore  0x00000002 , 0x00000005 
+ 00022720  0x00005579 rtn 
+ 00022721  0x0000557d call  0x000058c9 
+ 00022722  0x0000557f force  0x00000003 , 0x00000011 
+ 00022723  0x00005580 call  0x00005a82 
+ 00022724  0x00005581 setarg  0x00000003 
+ 00022725  0x00005582 istore  0x00000001 , 0x00000005 
+ 00022726  0x00005583 fetch  0x00000002 , 0x000044a6 
+ 00022727  0x00005584 istore  0x00000002 , 0x00000005 
+ 00022728  0x00005585 rtn 
+ 00022729  0x00005588 rshift8  0x0000003f , 0x0000003f 
+ 00022730  0x00005589 store  0x00000002 , 0x000044a8 
+ 00022731  0x0000558a rtn 
+ 00022732  0x0000558d call  0x00005ab1 
+ 00022733  0x0000558e call  0x00007fe7 
+ 00022734  0x0000558f branch  0x000058cf 
+ 00022735  0x00005592 arg  0x00000003 , 0x0000000b 
+ 00022736  0x00005593 call  0x00005756 
+ 00022737  0x00005595 call  0x0000575f 
+ 00022738  0x00005596 branch  0x000058f0 , 0x00000034 
+ 00022739  0x00005597 nbranch  0x000058ed , 0x00000002 
+ 00022740  0x00005598 increase  0xfffffffe , 0x00000006 
+ 00022741  0x00005599 call  0x00007ea5 
+ 00022742  0x0000559a call  0x00007e9c 
+ 00022743  0x0000559b nbranch  0x000058e1 , 0x00000028 
+ 00022744  0x0000559c call  0x00007e85 
+ 00022745  0x0000559d call  0x00007fe9 
+ 00022746  0x0000559e force  0x00000014 , 0x00000011 
+ 00022747  0x0000559f call  0x00005a82 
+ 00022748  0x000055a0 call  0x00007e95 
+ 00022749  0x000055a1 setarg  0x00000005 
+ 00022750  0x000055a2 istore  0x00000001 , 0x00000005 
+ 00022751  0x000055a3 setarg  0x00000001 
+ 00022752  0x000055a4 istore  0x00000001 , 0x00000005 
+ 00022753  0x000055a6 call  0x00007e9f 
+ 00022754  0x000055a7 ifetch  0x00000002 , 0x00000006 
+ 00022755  0x000055a8 istore  0x00000002 , 0x00000005 
+ 00022756  0x000055a9 ifetch  0x00000001 , 0x00000006 
+ 00022757  0x000055aa copy  0x0000003f , 0x00000039 
+ 00022758  0x000055ab call  0x00007f01 
+ 00022759  0x000055ac call  0x00007ea2 
+ 00022760  0x000055ad increase  0xffffffff , 0x0000000b 
+ 00022761  0x000055ae branch  0x000058f0 , 0x00000005 
+ 00022762  0x000055b0 ifetch  0x00000001 , 0x00000006 
+ 00022763  0x000055b1 iadd  0x00000006 , 0x00000006 
+ 00022764  0x000055b2 branch  0x000058d1 
+ 00022765  0x000055b4 ifetch  0x00000001 , 0x00000006 
+ 00022766  0x000055b5 iadd  0x00000006 , 0x00000006 
+ 00022767  0x000055b6 branch  0x000058ea 
+ 00022768  0x000055b8 branch  0x00005a76 , 0x00000028 
+ 00022769  0x000055b9 branch  0x00005aa5 
+ 00022770  0x000055bd call  0x00005ab1 
+ 00022771  0x000055be ifetch  0x00000002 , 0x00000006 
+ 00022772  0x000055bf store  0x00000002 , 0x00004472 
+ 00022773  0x000055c0 call  0x00007ea5 
+ 00022774  0x000055c1 arg  0x0000445e , 0x00000005 
+ 00022775  0x000055c2 fetch  0x00000002 , 0x000044fc 
+ 00022776  0x000055c3 increase  0xfffffff9 , 0x0000003f 
+ 00022777  0x000055c4 call  0x000056db 
+ 00022778  0x000055c5 branch  0x00005905 
+ 00022779  0x000055c9 disable  0x00000028 
+ 00022780  0x000055ca fetcht  0x00000002 , 0x0000445a 
+ 00022781  0x000055cb fetch  0x00000002 , 0x0000445c 
+ 00022782  0x000055cc isub  0x00000002 , 0x0000003e 
+ 00022783  0x000055cd nbranch  0x00005902 , 0x00000002 
+ 00022784  0x000055ce deposit  0x00000002 
+ 00022785  0x000055cf rtnne  0x00000000 
+ 00022786  0x000055d1 enable  0x00000028 
+ 00022787  0x000055d2 jam  0x00000001 , 0x0000047a 
+ 00022788  0x000055d3 branch  0x00005a77 
+ 00022789  0x000055d7 call  0x000058fb 
+ 00022790  0x000055d8 rtn  0x00000028 
+ 00022791  0x000055d9 fetcht  0x00000002 , 0x00004472 
+ 00022792  0x000055da setarg  0x00002800 
+ 00022793  0x000055db isub  0x00000002 , 0x0000003e 
+ 00022794  0x000055dc branch  0x0000590c , 0x00000005 
+ 00022795  0x000055dd branch  0x00005a76 
+ 00022796  0x000055e1 jam  0x00000000 , 0x000004b4 
+ 00022797  0x000055e2 fetcht  0x00000002 , 0x0000445a 
+ 00022798  0x000055e3 storet  0x00000002 , 0x00000aa2 
+ 00022799  0x000055e4 call  0x0000578c 
+ 00022800  0x000055e5 nbranch  0x00005a76 , 0x00000034 
+ 00022801  0x000055e7 fetcht  0x00000002 , 0x00000aa2 
+ 00022802  0x000055e8 call  0x0000578c 
+ 00022803  0x000055e9 nbranch  0x00005925 , 0x00000034 
+ 00022804  0x000055ea copy  0x00000006 , 0x00000011 
+ 00022805  0x000055eb fetch  0x00000001 , 0x000004b3 
+ 00022806  0x000055ec copy  0x0000003f , 0x00000039 
+ 00022807  0x000055ed fetcht  0x00000001 , 0x0000445e 
+ 00022808  0x000055ee isub  0x00000002 , 0x0000003e 
+ 00022809  0x000055ef nbranch  0x00005921 , 0x00000005 
+ 00022810  0x000055f0 arg  0x0000445f , 0x00000012 
+ 00022811  0x000055f1 call  0x00007f88 
+ 00022812  0x000055f3 branch  0x00005928 , 0x00000005 
+ 00022813  0x000055f5 fetch  0x00000002 , 0x000004a3 
+ 00022814  0x000055f6 fetcht  0x00000002 , 0x00004472 
+ 00022815  0x000055f7 isub  0x00000002 , 0x0000003e 
+ 00022816  0x000055f8 branch  0x00005930 , 0x00000005 
+ 00022817  0x000055fa fetch  0x00000002 , 0x00000aa2 
+ 00022818  0x000055fb increase  0x00000001 , 0x0000003f 
+ 00022819  0x000055fc store  0x00000002 , 0x00000aa2 
+ 00022820  0x000055fd branch  0x00005911 
+ 00022821  0x00005600 fetch  0x00000001 , 0x000004b4 
+ 00022822  0x00005601 beq  0x00000001 , 0x00005930 
+ 00022823  0x00005602 branch  0x00005a76 
+ 00022824  0x00005606 fetch  0x00000002 , 0x000004a3 
+ 00022825  0x00005607 fetcht  0x00000002 , 0x00004472 
+ 00022826  0x00005608 isub  0x00000002 , 0x0000003e 
+ 00022827  0x00005609 nbranch  0x00005921 , 0x00000005 
+ 00022828  0x0000560a jam  0x00000001 , 0x000004b4 
+ 00022829  0x0000560c fetcht  0x00000002 , 0x00000aa2 
+ 00022830  0x0000560d storet  0x00000002 , 0x0000049e 
+ 00022831  0x0000560e branch  0x00005921 
+ 00022832  0x00005611 fetch  0x00000001 , 0x000004b4 
+ 00022833  0x00005612 beq  0x00000000 , 0x00005921 
+ 00022834  0x00005613 jam  0x00000002 , 0x000004b4 
+ 00022835  0x00005614 fetcht  0x00000002 , 0x00000aa2 
+ 00022836  0x00005615 increase  0xffffffff , 0x00000002 
+ 00022837  0x00005616 storet  0x00000002 , 0x000004a0 
+ 00022838  0x00005619 arg  0x00000005 , 0x00000011 
+ 00022839  0x0000561a call  0x00005a82 
+ 00022840  0x0000561b setarg  0x00000007 
+ 00022841  0x0000561c istore  0x00000001 , 0x00000005 
+ 00022842  0x0000561d fetch  0x00000002 , 0x0000049e 
+ 00022843  0x0000561e istore  0x00000002 , 0x00000005 
+ 00022844  0x0000561f fetch  0x00000002 , 0x000004a0 
+ 00022845  0x00005620 istore  0x00000002 , 0x00000005 
+ 00022846  0x00005621 rtn 
+ 00022847  0x00005626 call  0x00005ab1 
+ 00022848  0x00005627 call  0x000056df 
+ 00022849  0x00005628 branch  0x00005942 
+ 00022850  0x0000562b fetcht  0x00000002 , 0x0000445a 
+ 00022851  0x0000562c storet  0x00000002 , 0x00000aa2 
+ 00022852  0x0000562d call  0x00005756 
+ 00022853  0x0000562e call  0x0000576d 
+ 00022854  0x0000562f increase  0xfffffffe , 0x00000006 
+ 00022855  0x00005630 copy  0x00000006 , 0x0000003f 
+ 00022856  0x00005631 store  0x00000002 , 0x0000049c 
+ 00022857  0x00005633 fetcht  0x00000002 , 0x00004472 
+ 00022858  0x00005634 setarg  0x00002a00 
+ 00022859  0x00005635 isub  0x00000002 , 0x0000003e 
+ 00022860  0x00005636 branch  0x000059a8 , 0x00000005 
+ 00022861  0x00005637 setarg  0x00002803 
+ 00022862  0x00005638 isub  0x00000002 , 0x0000003e 
+ 00022863  0x00005639 nbranch  0x00005990 , 0x00000005 
+ 00022864  0x0000563a arg  0x00000002 , 0x0000000b 
+ 00022865  0x0000563c call  0x00005a88 
+ 00022866  0x0000563d nbranch  0x0000596d , 0x00000002 
+ 00022867  0x0000563e fetcht  0x00000002 , 0x00000aa2 
+ 00022868  0x0000563f call  0x0000578a 
+ 00022869  0x00005640 beq  0x00000001 , 0x0000596d 
+ 00022870  0x00005641 call  0x00005a94 
+ 00022871  0x00005642 nbranch  0x0000596b , 0x00000005 
+ 00022872  0x00005643 nbranch  0x0000596f , 0x00000028 
+ 00022873  0x00005644 disable  0x00000028 
+ 00022874  0x00005645 arg  0x00000014 , 0x00000011 
+ 00022875  0x00005646 call  0x00005a82 
+ 00022876  0x00005647 setarg  0x00000009 
+ 00022877  0x00005648 istore  0x00000001 , 0x00000005 
+ 00022878  0x00005649 copy  0x00000005 , 0x00000030 
+ 00022879  0x0000564a increase  0x00000001 , 0x00000005 
+ 00022880  0x0000564c call  0x0000597d 
+ 00022881  0x0000564d call  0x00005a84 
+ 00022882  0x0000564e call  0x0000578a 
+ 00022883  0x0000564f call  0x00005984 
+ 00022884  0x00005650 fetch  0x00000001 , 0x000004a2 
+ 00022885  0x00005651 increase  0x00000005 , 0x0000003f 
+ 00022886  0x00005652 istore  0x00000001 , 0x00000030 
+ 00022887  0x00005653 fetch  0x00000001 , 0x000004a2 
+ 00022888  0x00005654 beq  0x00000010 , 0x0000596d 
+ 00022889  0x00005655 increase  0xffffffff , 0x0000000b 
+ 00022890  0x00005656 branch  0x0000596d , 0x00000005 
+ 00022891  0x00005658 call  0x00005a84 
+ 00022892  0x00005659 branch  0x00005951 
+ 00022893  0x0000565b branch  0x00005a76 , 0x00000028 
+ 00022894  0x0000565c branch  0x00005aa5 
+ 00022895  0x0000565f call  0x00005a97 
+ 00022896  0x00005660 call  0x00005a84 
+ 00022897  0x00005661 call  0x0000578a 
+ 00022898  0x00005662 fetch  0x00000001 , 0x000004a2 
+ 00022899  0x00005663 beq  0x00000010 , 0x0000596d 
+ 00022900  0x00005665 call  0x00007e9c 
+ 00022901  0x00005666 fetch  0x00000002 , 0x00000aa2 
+ 00022902  0x00005667 increase  0xffffffff , 0x0000003f 
+ 00022903  0x00005668 istore  0x00000002 , 0x00000005 
+ 00022904  0x00005669 call  0x00005aa1 
+ 00022905  0x0000566a call  0x00005984 
+ 00022906  0x0000566b increase  0xffffffff , 0x0000000b 
+ 00022907  0x0000566c branch  0x0000596d , 0x00000005 
+ 00022908  0x0000566d branch  0x0000596b 
+ 00022909  0x00005671 fetch  0x00000002 , 0x00000aa2 
+ 00022910  0x00005672 istore  0x00000002 , 0x00000005 
+ 00022911  0x00005674 fetch  0x00000001 , 0x000004b3 
+ 00022912  0x00005675 copy  0x0000003f , 0x00000039 
+ 00022913  0x00005676 call  0x00007e9f 
+ 00022914  0x00005677 call  0x00007ef4 
+ 00022915  0x00005678 branch  0x00007ea2 
+ 00022916  0x0000567a call  0x00007e9c 
+ 00022917  0x0000567b fetch  0x00000002 , 0x00000aa2 
+ 00022918  0x0000567c istore  0x00000002 , 0x00000005 
+ 00022919  0x0000567d call  0x00007ea2 
+ 00022920  0x0000567e fetch  0x00000001 , 0x000004a2 
+ 00022921  0x0000567f copy  0x0000003f , 0x00000039 
+ 00022922  0x00005680 call  0x00007e9c 
+ 00022923  0x00005681 call  0x00007e9f 
+ 00022924  0x00005682 isub  0x00000039 , 0x00000006 
+ 00022925  0x00005683 increase  0xffffffff , 0x00000006 
+ 00022926  0x00005684 call  0x00007ef4 
+ 00022927  0x00005685 branch  0x00007ea2 
+ 00022928  0x0000568a fetcht  0x00000002 , 0x0000445a 
+ 00022929  0x0000568b storet  0x00000002 , 0x00000aa2 
+ 00022930  0x0000568d call  0x00005a88 
+ 00022931  0x0000568e nbranch  0x00005a76 , 0x00000002 
+ 00022932  0x0000568f call  0x0000578a 
+ 00022933  0x00005690 beq  0x00000001 , 0x00005a76 
+ 00022934  0x00005691 call  0x00005a94 
+ 00022935  0x00005692 nbranch  0x000059a6 , 0x00000005 
+ 00022936  0x00005695 arg  0x00000014 , 0x00000011 
+ 00022937  0x00005696 call  0x00005a82 
+ 00022938  0x00005697 setarg  0x00000009 
+ 00022939  0x00005698 istore  0x00000001 , 0x00000005 
+ 00022940  0x00005699 fetch  0x00000001 , 0x000004b3 
+ 00022941  0x0000569a copy  0x0000003f , 0x00000039 
+ 00022942  0x0000569b increase  0x00000002 , 0x0000003f 
+ 00022943  0x0000569c istore  0x00000001 , 0x00000005 
+ 00022944  0x0000569d fetch  0x00000002 , 0x00000aa2 
+ 00022945  0x0000569e istore  0x00000002 , 0x00000005 
+ 00022946  0x0000569f call  0x00007e9f 
+ 00022947  0x000056a0 call  0x00007ef4 
+ 00022948  0x000056a1 call  0x00007ea2 
+ 00022949  0x000056a2 branch  0x00005aa5 
+ 00022950  0x000056a5 call  0x00005a84 
+ 00022951  0x000056a6 branch  0x00005992 
+ 00022952  0x000056aa arg  0x00002a00 , 0x00000002 
+ 00022953  0x000056ab call  0x0000577c 
+ 00022954  0x000056ac rtn  0x00000034 
+ 00022955  0x000056ad increase  0xfffffffb , 0x00000006 
+ 00022956  0x000056ae ifetch  0x00000002 , 0x00000006 
+ 00022957  0x000056af store  0x00000002 , 0x00000aa2 
+ 00022958  0x000056b0 arg  0x00000014 , 0x00000011 
+ 00022959  0x000056b1 call  0x00005a82 
+ 00022960  0x000056b2 setarg  0x00000009 
+ 00022961  0x000056b3 istore  0x00000001 , 0x00000005 
+ 00022962  0x000056b4 fetch  0x00000001 , 0x000043af 
+ 00022963  0x000056b5 copy  0x0000003f , 0x00000039 
+ 00022964  0x000056b6 increase  0x00000002 , 0x0000003f 
+ 00022965  0x000056b7 istore  0x00000001 , 0x00000005 
+ 00022966  0x000056b8 fetch  0x00000002 , 0x00000aa2 
+ 00022967  0x000056b9 istore  0x00000002 , 0x00000005 
+ 00022968  0x000056ba arg  0x000043b0 , 0x00000006 
+ 00022969  0x000056bb call  0x00007ef4 
+ 00022970  0x000056bc call  0x00007ea2 
+ 00022971  0x000056bd branch  0x00005aa5 
+ 00022972  0x000056c2 fetcht  0x00000002 , 0x00000478 
+ 00022973  0x000056c3 fetch  0x00000001 , 0x000044e9 
+ 00022974  0x000056c4 bbit1  0x00000003 , 0x000059dd 
+ 00022975  0x000056c7 call  0x0000576a 
+ 00022976  0x000056c8 branch  0x00005a76 , 0x00000034 
+ 00022977  0x000056c9 increase  0xfffffffe , 0x00000006 
+ 00022978  0x000056ca ifetch  0x00000002 , 0x00000006 
+ 00022979  0x000056cb arg  0x00002a00 , 0x00000002 
+ 00022980  0x000056cc isub  0x00000002 , 0x0000003e 
+ 00022981  0x000056cd branch  0x000059d3 , 0x00000005 
+ 00022982  0x000056ce ifetch  0x00000001 , 0x00000006 
+ 00022983  0x000056cf sub  0x0000003f , 0x00000016 , 0x0000003e 
+ 00022984  0x000056d0 branch  0x000059ca , 0x00000002 
+ 00022985  0x000056d1 force  0x00000016 , 0x0000003f 
+ 00022986  0x000056d3 copy  0x0000003f , 0x00000013 
+ 00022987  0x000056d4 call  0x00007ea5 
+ 00022988  0x000056d5 add  0x00000013 , 0x00000001 , 0x00000011 
+ 00022989  0x000056d6 call  0x00005a82 
+ 00022990  0x000056d7 setarg  0x0000000b 
+ 00022991  0x000056d8 istore  0x00000001 , 0x00000005 
+ 00022992  0x000056d9 copy  0x00000013 , 0x00000039 
+ 00022993  0x000056da call  0x00007e9f 
+ 00022994  0x000056db branch  0x00007f01 
+ 00022995  0x000056de call  0x00007ea5 
+ 00022996  0x000056df fetch  0x00000001 , 0x000043af 
+ 00022997  0x000056e0 add  0x0000003f , 0x00000001 , 0x00000011 
+ 00022998  0x000056e1 call  0x00005a82 
+ 00022999  0x000056e2 setarg  0x0000000b 
+ 00023000  0x000056e3 istore  0x00000001 , 0x00000005 
+ 00023001  0x000056e4 fetch  0x00000001 , 0x000043af 
+ 00023002  0x000056e5 copy  0x0000003f , 0x00000039 
+ 00023003  0x000056e6 arg  0x000043b0 , 0x00000006 
+ 00023004  0x000056e7 branch  0x00007f01 
+ 00023005  0x000056eb fetch  0x00000002 , 0x000044fa 
+ 00023006  0x000056ec isub  0x00000002 , 0x0000003e 
+ 00023007  0x000056ed nbranch  0x000059bf , 0x00000005 
+ 00023008  0x000056ef call  0x00005a42 
+ 00023009  0x000056f0 nbranch  0x000059bf , 0x00000028 
+ 00023010  0x000056f1 jam  0x00000005 , 0x0000047a 
+ 00023011  0x000056f2 branch  0x00005a77 
+ 00023012  0x000056f6 ifetch  0x00000002 , 0x00000006 
+ 00023013  0x000056f7 store  0x00000002 , 0x0000445e 
+ 00023014  0x000056f9 arg  0x00000014 , 0x00000011 
+ 00023015  0x000056fa call  0x00005a82 
+ 00023016  0x000056fb setarg  0x0000000d 
+ 00023017  0x000056fc istore  0x00000001 , 0x00000005 
+ 00023018  0x000056fd fetch  0x00000002 , 0x0000445e 
+ 00023019  0x000056fe iforce  0x00000011 
+ 00023020  0x000056ff fetcht  0x00000002 , 0x00000478 
+ 00023021  0x00005700 call  0x0000576a 
+ 00023022  0x00005701 branch  0x00005a76 , 0x00000034 
+ 00023023  0x00005702 ifetch  0x00000001 , 0x00000006 
+ 00023024  0x00005703 isub  0x00000011 , 0x00000039 
+ 00023025  0x00005704 nbranch  0x00005a76 , 0x00000002 
+ 00023026  0x00005705 sub  0x00000039 , 0x00000016 , 0x0000003e 
+ 00023027  0x00005706 branch  0x000059f5 , 0x00000002 
+ 00023028  0x00005707 force  0x00000016 , 0x00000039 
+ 00023029  0x00005709 deposit  0x00000011 
+ 00023030  0x0000570a iadd  0x00000006 , 0x00000006 
+ 00023031  0x0000570b call  0x00007ef4 
+ 00023032  0x0000570c call  0x00007ea2 
+ 00023033  0x0000570d branch  0x00005aa5 
+ 00023034  0x00005711 call  0x00005ab1 
+ 00023035  0x00005712 call  0x000056d7 
+ 00023036  0x00005713 branch  0x000059fd 
+ 00023037  0x00005719 arg  0x00000002 , 0x0000000b 
+ 00023038  0x0000571a fetcht  0x00000002 , 0x0000445a 
+ 00023039  0x0000571e storet  0x00000002 , 0x00000aa2 
+ 00023040  0x0000571f call  0x00005756 
+ 00023041  0x00005720 call  0x0000576d 
+ 00023042  0x00005721 increase  0xfffffffe , 0x00000006 
+ 00023043  0x00005722 copy  0x00000006 , 0x0000003f 
+ 00023044  0x00005723 store  0x00000002 , 0x0000049c 
+ 00023045  0x00005725 call  0x00005a88 
+ 00023046  0x00005726 nbranch  0x00005a25 , 0x00000002 
+ 00023047  0x00005727 fetcht  0x00000002 , 0x00000aa2 
+ 00023048  0x00005728 call  0x0000578a 
+ 00023049  0x00005729 beq  0x00000001 , 0x00005a28 
+ 00023050  0x0000572b call  0x00005a8c 
+ 00023051  0x0000572c nbranch  0x00005a23 , 0x00000005 
+ 00023052  0x0000572d copy  0x0000000b , 0x0000003f 
+ 00023053  0x0000572e beq  0x00000000 , 0x00005a28 
+ 00023054  0x0000572f nbranch  0x00005a19 , 0x00000028 
+ 00023055  0x00005730 disable  0x00000028 
+ 00023056  0x00005732 arg  0x00000014 , 0x00000011 
+ 00023057  0x00005733 call  0x00005a82 
+ 00023058  0x00005734 setarg  0x00000011 
+ 00023059  0x00005735 istore  0x00000001 , 0x00000005 
+ 00023060  0x00005736 fetch  0x00000001 , 0x000004b3 
+ 00023061  0x00005737 increase  0x00000004 , 0x0000003f 
+ 00023062  0x00005738 istore  0x00000001 , 0x00000005 
+ 00023063  0x00005739 call  0x00007ea2 
+ 00023064  0x0000573a branch  0x00005a1f 
+ 00023065  0x0000573c fetch  0x00000001 , 0x000004b3 
+ 00023066  0x0000573d beq  0x00000010 , 0x00005a28 
+ 00023067  0x0000573e fetch  0x00000002 , 0x00000aa2 
+ 00023068  0x0000573f increase  0xffffffff , 0x0000003f 
+ 00023069  0x00005740 store  0x00000002 , 0x000004a0 
+ 00023070  0x00005741 call  0x00005a9c 
+ 00023071  0x00005743 fetch  0x00000002 , 0x00000aa2 
+ 00023072  0x00005744 store  0x00000002 , 0x0000049e 
+ 00023073  0x00005745 call  0x00005a97 
+ 00023074  0x00005746 increase  0xffffffff , 0x0000000b 
+ 00023075  0x00005749 call  0x00005a84 
+ 00023076  0x0000574a branch  0x00005a05 
+ 00023077  0x0000574d fetch  0x00000002 , 0x00000aa2 
+ 00023078  0x0000574e store  0x00000002 , 0x000004a0 
+ 00023079  0x0000574f branch  0x00005a2c 
+ 00023080  0x00005751 fetch  0x00000002 , 0x00000aa2 
+ 00023081  0x00005752 increase  0xffffffff , 0x0000003f 
+ 00023082  0x00005753 store  0x00000002 , 0x000004a0 
+ 00023083  0x00005754 branch  0x00005a2c 
+ 00023084  0x00005756 branch  0x00005a76 , 0x00000028 
+ 00023085  0x00005757 call  0x00005a9c 
+ 00023086  0x00005758 branch  0x00005aa5 
+ 00023087  0x0000575e copy  0x00000006 , 0x00000011 
+ 00023088  0x0000575f fetch  0x00000002 , 0x000044fc 
+ 00023089  0x00005760 add  0x0000003f , 0xfffffffd , 0x00000012 
+ 00023090  0x00005761 call  0x000056e2 
+ 00023091  0x00005763 fetch  0x00000001 , 0x000044e9 
+ 00023092  0x00005764 bbit0  0x00000004 , 0x00005a3d 
+ 00023093  0x00005766 fetcht  0x00000002 , 0x00000478 
+ 00023094  0x00005767 fetch  0x00000002 , 0x000044fa 
+ 00023095  0x00005768 isub  0x00000002 , 0x0000003e 
+ 00023096  0x00005769 nbranch  0x00005a3d , 0x00000005 
+ 00023097  0x0000576a call  0x00005a42 
+ 00023098  0x0000576b nbranch  0x00005a3d , 0x00000028 
+ 00023099  0x0000576c jam  0x00000005 , 0x0000047a 
+ 00023100  0x0000576d branch  0x00005a77 
+ 00023101  0x00005770 force  0x00000001 , 0x00000011 
+ 00023102  0x00005771 call  0x00005a82 
+ 00023103  0x00005772 setarg  0x00000013 
+ 00023104  0x00005773 istore  0x00000001 , 0x00000005 
+ 00023105  0x00005774 rtn 
+ 00023106  0x00005777 call  0x00007fe9 
+ 00023107  0x00005778 fetch  0x00000001 , 0x000044c6 
+ 00023108  0x00005779 rtneq  0x00000000 
+ 00023109  0x0000577a fetch  0x00000001 , 0x00004040 
+ 00023110  0x0000577b rtnbit1  0x00000004 
+ 00023111  0x0000577c branch  0x00007fe7 
+ 00023112  0x00005780 add  0x00000006 , 0x00000002 , 0x00000011 
+ 00023113  0x00005781 fetch  0x00000002 , 0x000044fc 
+ 00023114  0x00005782 add  0x0000003f , 0xfffffffb , 0x00000012 
+ 00023115  0x00005783 call  0x000056e2 
+ 00023116  0x00005784 branch  0x00005a4d 
+ 00023117  0x00005788 fetch  0x00000002 , 0x000044fc 
+ 00023118  0x00005789 copy  0x0000003f , 0x00000011 
+ 00023119  0x0000578a call  0x00005a82 
+ 00023120  0x0000578b setarg  0x00000017 
+ 00023121  0x0000578c istore  0x00000001 , 0x00000005 
+ 00023122  0x0000578d fetch  0x00000002 , 0x00000478 
+ 00023123  0x0000578e istore  0x00000002 , 0x00000005 
+ 00023124  0x0000578f fetch  0x00000002 , 0x000044fc 
+ 00023125  0x00005790 add  0x0000003f , 0xfffffffb , 0x00000039 
+ 00023126  0x00005791 fetch  0x00000002 , 0x0000450d 
+ 00023127  0x00005792 add  0x0000003f , 0x00000007 , 0x00000006 
+ 00023128  0x00005793 ifetch  0x00000002 , 0x00000006 
+ 00023129  0x00005794 istore  0x00000002 , 0x00000005 
+ 00023130  0x00005795 branch  0x00007ef4 
+ 00023131  0x0000579c force  0x00000001 , 0x00000011 
+ 00023132  0x0000579d call  0x00005a82 
+ 00023133  0x0000579e setarg  0x00000019 
+ 00023134  0x0000579f istore  0x00000001 , 0x00000005 
+ 00023135  0x000057a0 rtn 
+ 00023136  0x000057a5 copy  0x00000006 , 0x00000011 
+ 00023137  0x000057a6 fetch  0x00000002 , 0x000044fc 
+ 00023138  0x000057a7 add  0x0000003f , 0xfffffffd , 0x00000012 
+ 00023139  0x000057a8 branch  0x000056e2 
+ 00023140  0x000057ae copy  0x00000002 , 0x00000013 
+ 00023141  0x000057af increase  0x00000003 , 0x00000011 
+ 00023142  0x000057b0 call  0x00005a82 
+ 00023143  0x000057b1 increase  0xfffffffd , 0x00000011 
+ 00023144  0x000057b2 setarg  0x0000001b 
+ 00023145  0x000057b3 istore  0x00000001 , 0x00000005 
+ 00023146  0x000057b4 copy  0x00000013 , 0x00000002 
+ 00023147  0x000057b5 istoret  0x00000002 , 0x00000005 
+ 00023148  0x000057b6 rtn 
+ 00023149  0x000057ba copy  0x00000002 , 0x00000013 
+ 00023150  0x000057bb increase  0x00000003 , 0x00000011 
+ 00023151  0x000057bc call  0x00005a82 
+ 00023152  0x000057bd increase  0xfffffffd , 0x00000011 
+ 00023153  0x000057be setarg  0x0000001d 
+ 00023154  0x000057bf istore  0x00000001 , 0x00000005 
+ 00023155  0x000057c0 copy  0x00000013 , 0x00000002 
+ 00023156  0x000057c1 istoret  0x00000002 , 0x00000005 
+ 00023157  0x000057c2 rtn 
+ 00023158  0x000057c8 jam  0x0000000a , 0x0000047a 
+ 00023159  0x000057ca force  0x00000005 , 0x00000011 
+ 00023160  0x000057cb call  0x00005a82 
+ 00023161  0x000057cc setarg  0x00000001 
+ 00023162  0x000057cd istore  0x00000001 , 0x00000005 
+ 00023163  0x000057ce fetch  0x00000001 , 0x00000477 
+ 00023164  0x000057cf istore  0x00000001 , 0x00000005 
+ 00023165  0x000057d0 fetch  0x00000002 , 0x00000478 
+ 00023166  0x000057d1 istore  0x00000002 , 0x00000005 
+ 00023167  0x000057d2 fetch  0x00000001 , 0x0000047a 
+ 00023168  0x000057d3 istore  0x00000001 , 0x00000005 
+ 00023169  0x000057d4 rtn 
+ 00023170  0x000057d8 force  0x00000004 , 0x00000012 
+ 00023171  0x000057d9 branch  0x00005847 
+ 00023172  0x000057dd fetcht  0x00000002 , 0x00000aa2 
+ 00023173  0x000057de increase  0x00000001 , 0x00000002 
+ 00023174  0x000057df storet  0x00000002 , 0x00000aa2 
+ 00023175  0x000057e0 rtn 
+ 00023176  0x000057e3 fetcht  0x00000002 , 0x00000aa2 
+ 00023177  0x000057e4 fetch  0x00000002 , 0x0000445c 
+ 00023178  0x000057e5 isub  0x00000002 , 0x0000003e 
+ 00023179  0x000057e6 rtn 
+ 00023180  0x000057ea fetcht  0x00000001 , 0x0000445e 
+ 00023181  0x000057eb arg  0x0000445f , 0x00000011 
+ 00023182  0x000057ed fetch  0x00000001 , 0x000004a2 
+ 00023183  0x000057ee copy  0x0000003f , 0x00000039 
+ 00023184  0x000057ef isub  0x00000002 , 0x0000003e 
+ 00023185  0x000057f0 nrtn  0x00000005 
+ 00023186  0x000057f1 arg  0x000004a3 , 0x00000012 
+ 00023187  0x000057f2 branch  0x00007f88 
+ 00023188  0x000057f5 fetcht  0x00000001 , 0x00004471 
+ 00023189  0x000057f6 arg  0x00004472 , 0x00000011 
+ 00023190  0x000057f7 branch  0x00005a8e 
+ 00023191  0x000057fb fetch  0x00000001 , 0x000004b3 
+ 00023192  0x000057fc store  0x00000001 , 0x00000101 
+ 00023193  0x000057fd copy  0x0000003f , 0x00000039 
+ 00023194  0x000057fe call  0x00007e9f 
+ 00023195  0x000057ff branch  0x00007ef4 
+ 00023196  0x00005803 call  0x00007e9c 
+ 00023197  0x00005804 fetch  0x00000002 , 0x0000049e 
+ 00023198  0x00005805 istore  0x00000002 , 0x00000005 
+ 00023199  0x00005806 fetch  0x00000002 , 0x000004a0 
+ 00023200  0x00005807 istore  0x00000002 , 0x00000005 
+ 00023201  0x00005809 fetch  0x00000001 , 0x00000101 
+ 00023202  0x0000580a copy  0x0000003f , 0x00000039 
+ 00023203  0x0000580b call  0x00007ef4 
+ 00023204  0x0000580c branch  0x00007ea2 
+ 00023205  0x00005811 call  0x00007e9c 
+ 00023206  0x00005812 call  0x0000588a 
+ 00023207  0x00005813 copy  0x00000005 , 0x0000003f 
+ 00023208  0x00005814 isub  0x00000006 , 0x00000011 
+ 00023209  0x00005815 call  0x0000588d 
+ 00023210  0x00005816 copy  0x00000011 , 0x0000003f 
+ 00023211  0x00005817 istore  0x00000002 , 0x00000006 
+ 00023212  0x00005818 increase  0x00000004 , 0x00000011 
+ 00023213  0x00005819 call  0x00005879 
+ 00023214  0x0000581a copy  0x00000011 , 0x0000003f 
+ 00023215  0x0000581b istore  0x00000001 , 0x00000006 
+ 00023216  0x0000581c rtn 
+ 00023217  0x00005820 rshift8  0x0000003f , 0x0000003f 
+ 00023218  0x00005821 store  0x00000002 , 0x0000445a 
+ 00023219  0x00005822 ifetch  0x00000002 , 0x00000006 
+ 00023220  0x00005823 store  0x00000002 , 0x0000445c 
+ 00023221  0x00005824 rtn 
+ 00023222  0x0000582a ifetch  0x00000001 , 0x00000006 
+ 00023223  0x0000582b ifetcht  0x00000001 , 0x00000006 
+ 00023224  0x0000582c ifetcht  0x00000002 , 0x00000006 
+ 00023225  0x0000582d beq  0x00000013 , 0x00005abb 
+ 00023226  0x0000582e rtn 
+ 00023227  0x00005830 ifetch  0x00000002 , 0x00000006 
+ 00023228  0x00005831 store  0x00000002 , 0x00004509 
+ 00023229  0x00005832 jam  0x00000040 , 0x00000a99 
+ 00023230  0x00005833 branch  0x00007d86 
+ 00023231  0x0000583a arg  0x0000000c , 0x00000011 
+ 00023232  0x0000583b arg  0x00000012 , 0x00000013 
+ 00023233  0x0000583c call  0x00005ac7 
+ 00023234  0x0000583d setarg  0x00000008 
+ 00023235  0x0000583e istore  0x00000002 , 0x00000005 
+ 00023236  0x0000583f fetch  0x00000008 , 0x00004496 
+ 00023237  0x00005840 istore  0x00000008 , 0x00000005 
+ 00023238  0x00005841 rtn 
+ 00023239  0x00005846 call  0x00005acf 
+ 00023240  0x00005847 arg  0x00000005 , 0x00000012 
+ 00023241  0x00005848 call  0x00005847 
+ 00023242  0x00005849 copy  0x00000013 , 0x0000003f 
+ 00023243  0x0000584a istore  0x00000001 , 0x00000005 
+ 00023244  0x0000584b fetch  0x00000001 , 0x00004508 
+ 00023245  0x0000584c istore  0x00000001 , 0x00000005 
+ 00023246  0x0000584d rtn 
+ 00023247  0x00005851 fetch  0x00000001 , 0x00004508 
+ 00023248  0x00005853 pincrease  0x00000001 
+ 00023249  0x00005854 store  0x00000001 , 0x00004508 
+ 00023250  0x00005855 rtnne  0x00000000 
+ 00023251  0x00005858 jam  0x00000001 , 0x00004508 
+ 00023252  0x00005859 rtn 
+ 00023253  0x0000585f fetch  0x00000001 , 0x000044c6 
+ 00023254  0x00005860 beq  0x00000000 , 0x00005ae4 
+ 00023255  0x00005861 beq  0x00000001 , 0x00005ae7 
+ 00023256  0x00005862 beq  0x00000002 , 0x00005ae9 
+ 00023257  0x00005863 beq  0x00000081 , 0x00005add 
+ 00023258  0x00005864 beq  0x00000082 , 0x00005adf 
+ 00023259  0x00005865 beq  0x00000083 , 0x00005ae2 
+ 00023260  0x00005866 rtn 
+ 00023261  0x00005869 jam  0x0000000d , 0x00004456 
+ 00023262  0x0000586a branch  0x00005ae5 
+ 00023263  0x0000586c jam  0x0000000d , 0x00004456 
+ 00023264  0x0000586d jam  0x00000001 , 0x00004454 
+ 00023265  0x0000586e rtn 
+ 00023266  0x00005870 jam  0x0000000d , 0x00004456 
+ 00023267  0x00005871 branch  0x00005aea 
+ 00023268  0x00005873 jam  0x00000000 , 0x00004456 
+ 00023269  0x00005875 jam  0x00000003 , 0x00004454 
+ 00023270  0x00005876 rtn 
+ 00023271  0x00005878 jam  0x00000005 , 0x00004456 
+ 00023272  0x00005879 branch  0x00005ae5 
+ 00023273  0x0000587b jam  0x00000005 , 0x00004456 
+ 00023274  0x0000587d jam  0x00000000 , 0x00004454 
+ 00023275  0x0000587e rtn 
+ 00023276  0x00005882 fetch  0x00000001 , 0x00004456 
+ 00023277  0x00005883 set1  0x00000003 , 0x0000003f 
+ 00023278  0x00005884 store  0x00000001 , 0x00004456 
+ 00023279  0x00005885 rtn 
+ 00023280  0x00005887 fetch  0x00000001 , 0x00004456 
+ 00023281  0x00005888 set0  0x00000003 , 0x0000003f 
+ 00023282  0x00005889 store  0x00000001 , 0x00004456 
+ 00023283  0x0000588a rtn 
+ 00023284  0x0000588d ifetch  0x00000001 , 0x00000006 
+ 00023285  0x0000588e beq  0x00000001 , 0x00005b09 
+ 00023286  0x00005890 beq  0x00000003 , 0x00005b30 
+ 00023287  0x00005891 beq  0x00000004 , 0x00005b4d 
+ 00023288  0x00005892 beq  0x00000005 , 0x00005b5a 
+ 00023289  0x00005893 beq  0x00000006 , 0x00005b80 
+ 00023290  0x00005894 beq  0x00000007 , 0x00005bc4 
+ 00023291  0x00005895 beq  0x00000008 , 0x00005baf 
+ 00023292  0x00005896 beq  0x00000009 , 0x00005bc0 
+ 00023293  0x00005897 beq  0x0000000a , 0x00005bc4 
+ 00023294  0x00005898 beq  0x0000000b , 0x00005bc4 
+ 00023295  0x00005899 beq  0x0000000c , 0x00005bc5 
+ 00023296  0x0000589a beq  0x0000000d , 0x00005bca 
+ 00023297  0x0000589b rtn 
+ 00023298  0x000058a0 force  0x00000002 , 0x00000011 
+ 00023299  0x000058a1 call  0x00005c62 
+ 00023300  0x000058a2 setarg  0x0000000b 
+ 00023301  0x000058a3 istore  0x00000001 , 0x00000005 
+ 00023302  0x000058a4 fetch  0x00000001 , 0x00004456 
+ 00023303  0x000058a5 istore  0x00000001 , 0x00000005 
+ 00023304  0x000058a6 rtn 
+ 00023305  0x000058a9 store  0x00000001 , 0x0000444c 
+ 00023306  0x000058aa ifetch  0x00000006 , 0x00000006 
+ 00023307  0x000058ab istore  0x00000006 , 0x00000005 
+ 00023308  0x000058ac fetch  0x00000001 , 0x000044c6 
+ 00023309  0x000058ad beq  0x00000000 , 0x00005b5f 
+ 00023310  0x000058ae call  0x00005b2b 
+ 00023311  0x000058af call  0x00005b26 
+ 00023312  0x000058b0 jam  0x00000003 , 0x000044c4 
+ 00023313  0x000058b1 fetch  0x00000001 , 0x0000444d 
+ 00023314  0x000058b2 beq  0x00000000 , 0x00005b18 
+ 00023315  0x000058b3 beq  0x00000001 , 0x00005b18 
+ 00023316  0x000058b4 beq  0x00000003 , 0x00005b18 
+ 00023317  0x000058b5 fetch  0x00000001 , 0x000044c6 
+ 00023318  0x000058b6 beq  0x00000002 , 0x00005b1b 
+ 00023319  0x000058b7 rtneq  0x00000083 
+ 00023320  0x000058b9 arg  0x00000000 , 0x0000003f 
+ 00023321  0x000058ba store  0x00000004 , 0x000044c7 
+ 00023322  0x000058bb rtn 
+ 00023323  0x000058be fetch  0x00000001 , 0x000044e9 
+ 00023324  0x000058bf bbit1  0x00000000 , 0x00005b24 
+ 00023325  0x000058c1 arg  0x000044c7 , 0x00000011 
+ 00023326  0x000058c2 copy  0x00000011 , 0x00000005 
+ 00023327  0x000058c3 arg  0x00000003 , 0x00000039 
+ 00023328  0x000058c4 call  0x0000630d 
+ 00023329  0x000058c5 fetch  0x00000002 , 0x000044c9 
+ 00023330  0x000058c6 and_into  0x00000007 , 0x0000003f 
+ 00023331  0x000058c7 store  0x00000002 , 0x000044c9 
+ 00023332  0x000058c9 jam  0x00000034 , 0x00000a99 
+ 00023333  0x000058ca branch  0x00007d86 
+ 00023334  0x000058cd fetch  0x00000001 , 0x0000444f 
+ 00023335  0x000058ce rtnbit1  0x00000003 
+ 00023336  0x000058cf fetch  0x00000001 , 0x000044c6 
+ 00023337  0x000058d0 rtnbit0  0x00000007 
+ 00023338  0x000058d1 branch  0x00003402 
+ 00023339  0x000058d4 force  0x00000007 , 0x00000011 
+ 00023340  0x000058d5 call  0x00005c62 
+ 00023341  0x000058d6 fetch  0x00000007 , 0x00004453 
+ 00023342  0x000058d7 istore  0x00000007 , 0x00000005 
+ 00023343  0x000058d8 rtn 
+ 00023344  0x000058dc copy  0x00000006 , 0x00000011 
+ 00023345  0x000058dd fetch  0x00000001 , 0x000044c6 
+ 00023346  0x000058de beq  0x00000083 , 0x00005b37 
+ 00023347  0x000058df copy  0x00000011 , 0x00000006 
+ 00023348  0x000058e0 arg  0x0000442a , 0x00000005 
+ 00023349  0x000058e1 call  0x00007ebf 
+ 00023350  0x000058e2 branch  0x00005b3d 
+ 00023351  0x000058e4 copy  0x00000011 , 0x00000006 
+ 00023352  0x000058e5 arg  0x0000442a , 0x00000005 
+ 00023353  0x000058e6 call  0x00007ebf 
+ 00023354  0x000058e7 jam  0x00000002 , 0x000044bf 
+ 00023355  0x000058e8 jam  0x00000008 , 0x000044c1 
+ 00023356  0x000058e9 rtn 
+ 00023357  0x000058ed fetch  0x00000001 , 0x000044c6 
+ 00023358  0x000058ee bbit1  0x00000007 , 0x00005b45 
+ 00023359  0x000058ef call  0x0000739c 
+ 00023360  0x000058f0 force  0x00000011 , 0x00000011 
+ 00023361  0x000058f1 call  0x00005c62 
+ 00023362  0x000058f2 setarg  0x00000003 
+ 00023363  0x000058f3 istore  0x00000001 , 0x00000005 
+ 00023364  0x000058f4 branch  0x00007497 
+ 00023365  0x000058f8 arg  0x0000443a , 0x00000005 
+ 00023366  0x000058f9 call  0x0000630c 
+ 00023367  0x000058fa call  0x000071c5 
+ 00023368  0x000058fb force  0x00000011 , 0x00000011 
+ 00023369  0x000058fc call  0x00005c62 
+ 00023370  0x000058fd setarg  0x00000003 
+ 00023371  0x000058fe istore  0x00000001 , 0x00000005 
+ 00023372  0x000058ff branch  0x00007201 
+ 00023373  0x00005904 copy  0x00000006 , 0x00000011 
+ 00023374  0x00005905 fetch  0x00000001 , 0x000044c6 
+ 00023375  0x00005906 bbit1  0x00000007 , 0x00005b61 
+ 00023376  0x00005907 copy  0x00000011 , 0x00000006 
+ 00023377  0x00005908 call  0x00007394 
+ 00023378  0x00005909 branch  0x00005b75 , 0x00000005 
+ 00023379  0x0000590b jam  0x00000004 , 0x0000047b 
+ 00023380  0x0000590d force  0x00000002 , 0x00000011 
+ 00023381  0x0000590e call  0x00005c62 
+ 00023382  0x0000590f setarg  0x00000005 
+ 00023383  0x00005910 istore  0x00000001 , 0x00000005 
+ 00023384  0x00005911 fetch  0x00000001 , 0x0000047b 
+ 00023385  0x00005912 istore  0x00000001 , 0x00000005 
+ 00023386  0x00005914 force  0x0000000a , 0x00000007 
+ 00023387  0x00005915 call  0x00007f07 
+ 00023388  0x00005916 jam  0x00000000 , 0x000044c4 
+ 00023389  0x00005917 jam  0x00000030 , 0x00000a99 
+ 00023390  0x00005918 branch  0x00007d86 
+ 00023391  0x0000591b jam  0x00000005 , 0x0000047b 
+ 00023392  0x0000591c branch  0x00005b54 
+ 00023393  0x00005920 arg  0x0000042f , 0x00000005 
+ 00023394  0x00005921 copy  0x00000011 , 0x00000006 
+ 00023395  0x00005922 call  0x00007ebf 
+ 00023396  0x00005923 fetch  0x00000001 , 0x000044c6 
+ 00023397  0x00005924 beq  0x00000083 , 0x00005b6c 
+ 00023398  0x00005925 call  0x0000714f 
+ 00023399  0x00005928 call  0x00005b7a 
+ 00023400  0x00005929 fetch  0x00000001 , 0x000044c6 
+ 00023401  0x0000592a rtnne  0x00000082 
+ 00023402  0x0000592b jam  0x0000003b , 0x00000a99 
+ 00023403  0x0000592c branch  0x00007d86 
+ 00023404  0x0000592f call  0x000071ba 
+ 00023405  0x00005930 arg  0x00000af2 , 0x00000005 
+ 00023406  0x00005931 call  0x00007201 
+ 00023407  0x00005932 arg  0x00000af2 , 0x00000011 
+ 00023408  0x00005933 arg  0x0000442a , 0x00000012 
+ 00023409  0x00005934 arg  0x00000010 , 0x00000039 
+ 00023410  0x00005935 call  0x00007f88 
+ 00023411  0x00005936 nbranch  0x00005b53 , 0x00000005 
+ 00023412  0x00005937 branch  0x00005b7a 
+ 00023413  0x0000593a call  0x00007390 
+ 00023414  0x0000593b jam  0x00000031 , 0x00000a99 
+ 00023415  0x0000593c call  0x00007d86 
+ 00023416  0x0000593d jam  0x00000001 , 0x00004429 
+ 00023417  0x0000593e jam  0x00000005 , 0x000044c4 
+ 00023418  0x00005941 force  0x00000011 , 0x00000011 
+ 00023419  0x00005942 call  0x00005c62 
+ 00023420  0x00005943 setarg  0x00000004 
+ 00023421  0x00005944 istore  0x00000001 , 0x00000005 
+ 00023422  0x00005945 arg  0x0000443a , 0x00000006 
+ 00023423  0x00005946 branch  0x00007ebf 
+ 00023424  0x00005949 arg  0x0000041f , 0x00000005 
+ 00023425  0x0000594a branch  0x00007ebf 
+ 00023426  0x0000594d force  0x00000011 , 0x00000011 
+ 00023427  0x0000594e call  0x00005c62 
+ 00023428  0x0000594f setarg  0x00000006 
+ 00023429  0x00005950 istore  0x00000001 , 0x00000005 
+ 00023430  0x00005951 fetch  0x00000001 , 0x000044e9 
+ 00023431  0x00005952 bbit1  0x00000001 , 0x00005b8a 
+ 00023432  0x00005953 arg  0x00004419 , 0x00000006 
+ 00023433  0x00005954 branch  0x00007ebf 
+ 00023434  0x00005957 arg  0x000044ea , 0x00000006 
+ 00023435  0x00005958 branch  0x00007ebf 
+ 00023436  0x0000595c arg  0x000044cb , 0x00000005 
+ 00023437  0x0000595d force  0x0000000a , 0x00000039 
+ 00023438  0x0000595e call  0x0000630d 
+ 00023439  0x0000595f force  0x0000000b , 0x00000011 
+ 00023440  0x00005960 call  0x00005c62 
+ 00023441  0x00005961 setarg  0x00000007 
+ 00023442  0x00005962 istore  0x00000001 , 0x00000005 
+ 00023443  0x00005963 fetch  0x00000002 , 0x000044cb 
+ 00023444  0x00005964 istore  0x00000002 , 0x00000005 
+ 00023445  0x00005965 fetch  0x00000008 , 0x000044cd 
+ 00023446  0x00005966 istore  0x00000008 , 0x00000005 
+ 00023447  0x00005967 rtn 
+ 00023448  0x0000596a force  0x00000011 , 0x00000011 
+ 00023449  0x0000596b call  0x00005c62 
+ 00023450  0x0000596c setarg  0x00000008 
+ 00023451  0x0000596d istore  0x00000001 , 0x00000005 
+ 00023452  0x0000596e setarg  0x00000000 
+ 00023453  0x0000596f istore  0x00000008 , 0x00000005 
+ 00023454  0x00005970 istore  0x00000008 , 0x00000005 
+ 00023455  0x00005971 rtn 
+ 00023456  0x00005975 force  0x00000008 , 0x00000011 
+ 00023457  0x00005976 call  0x00005c62 
+ 00023458  0x00005977 setarg  0x00000009 
+ 00023459  0x00005978 istore  0x00000001 , 0x00000005 
+ 00023460  0x00005979 fetch  0x00000001 , 0x00004495 
+ 00023461  0x0000597a istore  0x00000001 , 0x00000005 
+ 00023462  0x0000597b fetch  0x00000006 , 0x000044a0 
+ 00023463  0x0000597c istore  0x00000006 , 0x00000005 
+ 00023464  0x0000597d rtn 
+ 00023465  0x00005981 jam  0x00000008 , 0x0000047b 
+ 00023466  0x00005982 branch  0x00005b54 
+ 00023467  0x00005985 fetch  0x00000001 , 0x00004458 
+ 00023468  0x00005986 fetcht  0x00000001 , 0x00004458 
+ 00023469  0x00005987 iand  0x00000002 , 0x0000003f 
+ 00023470  0x00005988 rtn 
+ 00023471  0x0000598b arg  0x000044d5 , 0x00000005 
+ 00023472  0x0000598c call  0x00007ebf 
+ 00023473  0x0000598d call  0x00005bab 
+ 00023474  0x0000598e isolate0  0x00000001 , 0x0000003f 
+ 00023475  0x0000598f branch  0x00005ba9 , 0x00000001 
+ 00023476  0x00005990 fetch  0x00000001 , 0x00004092 
+ 00023477  0x00005991 rtnne  0x0000000a 
+ 00023478  0x00005992 call  0x00005bb9 
+ 00023479  0x00005993 nrtn  0x00000028 
+ 00023480  0x00005994 branch  0x00003410 
+ 00023481  0x00005998 call  0x00007fe9 
+ 00023482  0x00005999 fetch  0x00000001 , 0x0000448e 
+ 00023483  0x0000599a rtneq  0x00000000 
+ 00023484  0x0000599b fetch  0x00000001 , 0x00000454 
+ 00023485  0x0000599c compare  0x000000c0 , 0x0000003f , 0x000000c0 
+ 00023486  0x0000599d rtn  0x00000001 
+ 00023487  0x0000599e branch  0x00007fe7 
+ 00023488  0x000059a1 call  0x00005bab 
+ 00023489  0x000059a2 isolate0  0x00000001 , 0x0000003f 
+ 00023490  0x000059a3 branch  0x00005ba9 , 0x00000001 
+ 00023491  0x000059a4 rtn 
+ 00023492  0x000059a9 rtn 
+ 00023493  0x000059ac arg  0x000009be , 0x00000005 
+ 00023494  0x000059ad call  0x00007eb3 
+ 00023495  0x000059ae jam  0x00000002 , 0x000044bf 
+ 00023496  0x000059af jam  0x00000001 , 0x000044c1 
+ 00023497  0x000059b0 rtn 
+ 00023498  0x000059b3 arg  0x00000a6e , 0x00000005 
+ 00023499  0x000059b4 call  0x00007ebf 
+ 00023500  0x000059b5 jam  0x00000006 , 0x000044c1 
+ 00023501  0x000059b6 jam  0x00000002 , 0x000044bf 
+ 00023502  0x000059b7 rtn 
+ 00023503  0x000059ba force  0x00000041 , 0x00000011 
+ 00023504  0x000059bb call  0x00005c62 
+ 00023505  0x000059bc setarg  0x0000000c 
+ 00023506  0x000059bd istore  0x00000001 , 0x00000005 
+ 00023507  0x000059be arg  0x000045d2 , 0x00000006 
+ 00023508  0x000059bf branch  0x00007eb3 
+ 00023509  0x000059c2 call  0x00007166 
+ 00023510  0x000059c3 force  0x00000011 , 0x00000011 
+ 00023511  0x000059c4 call  0x00005c62 
+ 00023512  0x000059c5 setarg  0x0000000d 
+ 00023513  0x000059c6 istore  0x00000001 , 0x00000005 
+ 00023514  0x000059c7 branch  0x00007201 
+ 00023515  0x000059cb fetch  0x00000001 , 0x000044c4 
+ 00023516  0x000059cc rtneq  0x000000ff 
+ 00023517  0x000059cd arg  0x00000003 , 0x00000002 
+ 00023518  0x000059ce isub  0x00000002 , 0x0000003e 
+ 00023519  0x000059cf nrtn  0x00000002 
+ 00023520  0x000059d0 arg  0x0000000a , 0x00000007 
+ 00023521  0x000059d1 call  0x00007f16 
+ 00023522  0x000059d2 nrtn  0x00000034 
+ 00023523  0x000059d3 branch  0x00005ba9 
+ 00023524  0x000059d6 bpatchx  0x00000078 , 0x0000402f 
+ 00023525  0x000059d7 fetch  0x00000001 , 0x000044c4 
+ 00023526  0x000059d8 beq  0x00000000 , 0x00005bef 
+ 00023527  0x000059d9 beq  0x00000001 , 0x00005bf5 
+ 00023528  0x000059da beq  0x00000002 , 0x00005bef 
+ 00023529  0x000059db beq  0x00000003 , 0x00005bf7 
+ 00023530  0x000059dc beq  0x00000005 , 0x00005bfb 
+ 00023531  0x000059dd beq  0x00000007 , 0x00005c07 
+ 00023532  0x000059de beq  0x00000008 , 0x00005c09 
+ 00023533  0x000059df beq  0x00000009 , 0x00005c10 
+ 00023534  0x000059e0 rtn 
+ 00023535  0x000059e4 fetch  0x00000001 , 0x000044c5 
+ 00023536  0x000059e5 rtnne  0x00000004 
+ 00023537  0x000059e6 jam  0x000000ff , 0x000044c5 
+ 00023538  0x000059e7 jam  0x000000ff , 0x000044c4 
+ 00023539  0x000059e8 jam  0x0000003f , 0x00000a99 
+ 00023540  0x000059e9 branch  0x00007d86 
+ 00023541  0x000059ed jam  0x00000002 , 0x000044c4 
+ 00023542  0x000059ee branch  0x00005b02 
+ 00023543  0x000059f1 jam  0x00000004 , 0x000044c4 
+ 00023544  0x000059f2 setarg  0x00017700 
+ 00023545  0x000059f3 arg  0x0000000a , 0x00000007 
+ 00023546  0x000059f4 branch  0x00007f08 
+ 00023547  0x000059f7 fetch  0x00000001 , 0x000044c5 
+ 00023548  0x000059f8 beq  0x00000004 , 0x00005bfe 
+ 00023549  0x000059f9 rtn 
+ 00023550  0x000059fc jam  0x00000007 , 0x000044c4 
+ 00023551  0x000059fd jam  0x00000029 , 0x00000a99 
+ 00023552  0x000059fe call  0x00007d86 
+ 00023553  0x000059ff call  0x00005b82 
+ 00023554  0x00005a00 fetch  0x00000001 , 0x00004092 
+ 00023555  0x00005a01 rtnne  0x0000000a 
+ 00023556  0x00005a02 call  0x00005bb9 
+ 00023557  0x00005a03 rtn  0x00000028 
+ 00023558  0x00005a04 branch  0x00003410 
+ 00023559  0x00005a08 jam  0x00000008 , 0x000044c4 
+ 00023560  0x00005a09 branch  0x00005b8c 
+ 00023561  0x00005a0c fetch  0x00000001 , 0x00004452 
+ 00023562  0x00005a0d fetcht  0x00000001 , 0x00004459 
+ 00023563  0x00005a0e iand  0x00000002 , 0x0000003f 
+ 00023564  0x00005a0f isolate0  0x00000001 , 0x0000003f 
+ 00023565  0x00005a10 branch  0x00005c12 , 0x00000001 
+ 00023566  0x00005a11 jam  0x00000009 , 0x000044c4 
+ 00023567  0x00005a12 branch  0x00005b98 
+ 00023568  0x00005a15 call  0x00005ba0 
+ 00023569  0x00005a16 branch  0x00005c12 
+ 00023570  0x00005a1a force  0x0000000a , 0x00000007 
+ 00023571  0x00005a1b call  0x00007f07 
+ 00023572  0x00005a1c jam  0x000000ff , 0x000044c5 
+ 00023573  0x00005a1d jam  0x000000ff , 0x000044c4 
+ 00023574  0x00005a1e jam  0x0000003e , 0x00000a99 
+ 00023575  0x00005a1f branch  0x00007d86 
+ 00023576  0x00005a24 bpatchx  0x00000079 , 0x0000402f 
+ 00023577  0x00005a25 fetch  0x00000001 , 0x000044c6 
+ 00023578  0x00005a26 rtnbit0  0x00000007 
+ 00023579  0x00005a27 fetch  0x00000001 , 0x000044bf 
+ 00023580  0x00005a28 rtnne  0x00000002 
+ 00023581  0x00005a29 jam  0x00000000 , 0x000044bf 
+ 00023582  0x00005a2a fetch  0x00000001 , 0x000044c1 
+ 00023583  0x00005a2b beq  0x00000001 , 0x00005c58 
+ 00023584  0x00005a2c beq  0x00000002 , 0x00005c5f 
+ 00023585  0x00005a2d beq  0x00000003 , 0x00005c52 
+ 00023586  0x00005a2e beq  0x00000006 , 0x00005c39 
+ 00023587  0x00005a2f beq  0x00000007 , 0x00005c30 
+ 00023588  0x00005a30 beq  0x00000008 , 0x00005c26 
+ 00023589  0x00005a31 rtn 
+ 00023590  0x00005a35 fetch  0x00000001 , 0x00004663 
+ 00023591  0x00005a36 copy  0x0000003f , 0x00000007 
+ 00023592  0x00005a37 increase  0x00000001 , 0x0000003f 
+ 00023593  0x00005a38 store  0x00000001 , 0x00004663 
+ 00023594  0x00005a39 fetch  0x00000004 , 0x000044c7 
+ 00023595  0x00005a3a qisolate1  0x0000003f 
+ 00023596  0x00005a3b setarg  0x00000080 
+ 00023597  0x00005a3c setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00023598  0x00005a3d store  0x00000001 , 0x00004664 
+ 00023599  0x00005a3e branch  0x00005c55 
+ 00023600  0x00005a41 fetch  0x00000001 , 0x000044c2 
+ 00023601  0x00005a42 jam  0x00000000 , 0x000044c2 
+ 00023602  0x00005a43 beq  0x00000001 , 0x00005c35 
+ 00023603  0x00005a44 jam  0x00000002 , 0x000044bf 
+ 00023604  0x00005a45 rtn 
+ 00023605  0x00005a48 jam  0x00000031 , 0x00000a99 
+ 00023606  0x00005a49 call  0x00007d86 
+ 00023607  0x00005a4a jam  0x00000005 , 0x000044c4 
+ 00023608  0x00005a4b branch  0x00005bd5 
+ 00023609  0x00005a4e fetch  0x00000001 , 0x000009b9 
+ 00023610  0x00005a4f beq  0x00000003 , 0x00005c3d 
+ 00023611  0x00005a50 jam  0x00000002 , 0x000044bf 
+ 00023612  0x00005a51 rtn 
+ 00023613  0x00005a54 call  0x0000718d 
+ 00023614  0x00005a58 fetch  0x00000001 , 0x000044c6 
+ 00023615  0x00005a59 beq  0x00000083 , 0x00005c41 
+ 00023616  0x00005a5a call  0x00005b18 
+ 00023617  0x00005a5c call  0x0000717a 
+ 00023618  0x00005a5d arg  0x00000af2 , 0x00000011 
+ 00023619  0x00005a5e arg  0x00000a6e , 0x00000012 
+ 00023620  0x00005a5f arg  0x00000010 , 0x00000039 
+ 00023621  0x00005a60 call  0x00007f88 
+ 00023622  0x00005a61 branch  0x00005c49 , 0x00000005 
+ 00023623  0x00005a63 jam  0x0000000b , 0x0000047b 
+ 00023624  0x00005a64 branch  0x00005b54 
+ 00023625  0x00005a68 call  0x00007595 
+ 00023626  0x00005a69 nbranch  0x00005c47 , 0x00000005 
+ 00023627  0x00005a6a jam  0x00000001 , 0x00004429 
+ 00023628  0x00005a6b fetch  0x00000001 , 0x000044c6 
+ 00023629  0x00005a6c beq  0x00000081 , 0x00005c35 
+ 00023630  0x00005a6d beq  0x00000083 , 0x00005c35 
+ 00023631  0x00005a6e jam  0x00000002 , 0x000044bf 
+ 00023632  0x00005a6f jam  0x00000007 , 0x000044c1 
+ 00023633  0x00005a70 rtn 
+ 00023634  0x00005a73 fetch  0x00000001 , 0x000044c6 
+ 00023635  0x00005a74 beq  0x00000083 , 0x00005c56 
+ 00023636  0x00005a75 jam  0x00000000 , 0x00004664 
+ 00023637  0x00005a77 branch  0x00005b3d 
+ 00023638  0x00005a7d jam  0x00000000 , 0x00004663 
+ 00023639  0x00005a7e branch  0x00005b1b 
+ 00023640  0x00005a82 jam  0x00000002 , 0x000044bf 
+ 00023641  0x00005a83 fetch  0x00000001 , 0x000044c3 
+ 00023642  0x00005a84 beq  0x00000003 , 0x00005c5c 
+ 00023643  0x00005a86 rtn 
+ 00023644  0x00005a89 jam  0x00000002 , 0x000044c1 
+ 00023645  0x00005a8a jam  0x00000000 , 0x000009b9 
+ 00023646  0x00005a8b branch  0x00007a99 
+ 00023647  0x00005a8e jam  0x00000002 , 0x000044bf 
+ 00023648  0x00005a8f jam  0x00000003 , 0x000044c1 
+ 00023649  0x00005a90 branch  0x00005bcf 
+ 00023650  0x00005a95 force  0x00000006 , 0x00000012 
+ 00023651  0x00005a96 branch  0x00005847 
+ 00023652  0x00005a9b fetch  0x00000001 , 0x000002db 
+ 00023653  0x00005a9c beq  0x00000000 , 0x00005c7b 
+ 00023654  0x00005a9d beq  0x00000001 , 0x00005c83 
+ 00023655  0x00005a9e beq  0x00000002 , 0x00005c8e 
+ 00023656  0x00005a9f beq  0x00000003 , 0x00005caa 
+ 00023657  0x00005aa0 beq  0x00000004 , 0x00005ce1 
+ 00023658  0x00005aa1 beq  0x00000005 , 0x00005ce6 
+ 00023659  0x00005aa2 beq  0x00000006 , 0x00005cea 
+ 00023660  0x00005aa3 beq  0x00000007 , 0x00005cf5 
+ 00023661  0x00005aa4 beq  0x00000008 , 0x00005c99 
+ 00023662  0x00005aa5 beq  0x00000009 , 0x00005cf5 
+ 00023663  0x00005aa6 beq  0x0000000a , 0x00005cef 
+ 00023664  0x00005aa7 beq  0x0000000b , 0x00005cf5 
+ 00023665  0x00005aa8 beq  0x0000000c , 0x00005c9f 
+ 00023666  0x00005aa9 beq  0x0000000d , 0x00005cf5 
+ 00023667  0x00005aaa beq  0x00000012 , 0x00005ca6 
+ 00023668  0x00005aab beq  0x00000013 , 0x00005cf5 
+ 00023669  0x00005aac arg  0x00000002 , 0x00000011 
+ 00023670  0x00005aad arg  0x00000007 , 0x00000012 
+ 00023671  0x00005aae call  0x00005842 
+ 00023672  0x00005aaf fetch  0x00000001 , 0x000002db 
+ 00023673  0x00005ab0 istore  0x00000001 , 0x00000005 
+ 00023674  0x00005ab1 rtn 
+ 00023675  0x00005ab5 ifetch  0x00000009 , 0x00000006 
+ 00023676  0x00005ab6 store  0x00000009 , 0x000043d3 
+ 00023677  0x00005ab7 ifetch  0x00000002 , 0x00000006 
+ 00023678  0x00005ab8 store  0x00000002 , 0x0000045f 
+ 00023679  0x00005ab9 fetch  0x00000001 , 0x0000043f 
+ 00023680  0x00005aba set1  0x00000005 , 0x0000003f 
+ 00023681  0x00005abb store  0x00000001 , 0x0000043f 
+ 00023682  0x00005abc rtn 
+ 00023683  0x00005abf ifetch  0x00000005 , 0x00000006 
+ 00023684  0x00005ac0 store  0x00000005 , 0x000043ce 
+ 00023685  0x00005ac1 ifetch  0x00000002 , 0x00000006 
+ 00023686  0x00005ac2 store  0x00000002 , 0x0000045f 
+ 00023687  0x00005ac3 fetcht  0x00000002 , 0x00000459 
+ 00023688  0x00005ac4 isub  0x00000002 , 0x0000003e 
+ 00023689  0x00005ac5 nbranch  0x00005c8e , 0x00000002 
+ 00023690  0x00005ac6 fetch  0x00000001 , 0x0000043f 
+ 00023691  0x00005ac7 set1  0x00000006 , 0x0000003f 
+ 00023692  0x00005ac8 store  0x00000001 , 0x0000043f 
+ 00023693  0x00005ac9 rtn 
+ 00023694  0x00005acd setarg  0x00000014 
+ 00023695  0x00005ace store  0x00000002 , 0x0000046d 
+ 00023696  0x00005acf store  0x00000002 , 0x000044ba 
+ 00023697  0x00005ad0 rtn 
+ 00023698  0x00005ad3 arg  0x00000013 , 0x00000013 
+ 00023699  0x00005ad7 arg  0x00000002 , 0x00000011 
+ 00023700  0x00005ad8 arg  0x00000002 , 0x00000012 
+ 00023701  0x00005ad9 call  0x00005842 
+ 00023702  0x00005ada copy  0x00000013 , 0x0000003f 
+ 00023703  0x00005adb istore  0x00000001 , 0x00000005 
+ 00023704  0x00005adc rtn 
+ 00023705  0x00005ae1 arg  0x00000009 , 0x00000011 
+ 00023706  0x00005ae2 arg  0x00000009 , 0x00000012 
+ 00023707  0x00005ae3 call  0x00005842 
+ 00023708  0x00005ae4 setarg  0x00000001 
+ 00023709  0x00005ae5 istore  0x00000008 , 0x00000005 
+ 00023710  0x00005ae6 rtn 
+ 00023711  0x00005aea rtn  0x00000029 
+ 00023712  0x00005aec arg  0x00000006 , 0x00000011 
+ 00023713  0x00005aed arg  0x0000000c , 0x00000012 
+ 00023714  0x00005aee call  0x00005842 
+ 00023715  0x00005aef fetch  0x00000005 , 0x00004510 
+ 00023716  0x00005af0 istore  0x00000005 , 0x00000005 
+ 00023717  0x00005af1 rtn 
+ 00023718  0x00005af5 arg  0x00000013 , 0x00000012 
+ 00023719  0x00005af6 branch  0x00005ca8 
+ 00023720  0x00005afa arg  0x00000001 , 0x00000011 
+ 00023721  0x00005afb branch  0x00005842 
+ 00023722  0x00005aff ifetch  0x00000008 , 0x00000006 
+ 00023723  0x00005b00 store  0x00000008 , 0x000044cd 
+ 00023724  0x00005b01 ifetch  0x00000002 , 0x00000006 
+ 00023725  0x00005b02 store  0x00000002 , 0x000044cb 
+ 00023726  0x00005b03 ifetch  0x00000008 , 0x00000006 
+ 00023727  0x00005b04 store  0x00000008 , 0x000044aa 
+ 00023728  0x00005b05 ifetch  0x00000004 , 0x00000006 
+ 00023729  0x00005b06 store  0x00000004 , 0x00004411 
+ 00023730  0x00005b07 call  0x00005ccf 
+ 00023731  0x00005b08 bpatchx  0x0000007a , 0x0000402f 
+ 00023732  0x00005b09 fetch  0x00000001 , 0x000044c4 
+ 00023733  0x00005b0a beq  0x00000005 , 0x00005cbc 
+ 00023734  0x00005b0b fetch  0x00000001 , 0x000044e9 
+ 00023735  0x00005b0c bbit1  0x00000001 , 0x00005cbf 
+ 00023736  0x00005b0d fetch  0x00000001 , 0x00004217 
+ 00023737  0x00005b0e ncall  0x000067be , 0x00000034 
+ 00023738  0x00005b0f fetch  0x00000001 , 0x00004429 
+ 00023739  0x00005b10 beq  0x00000000 , 0x00005cc4 
+ 00023740  0x00005b12 jam  0x00000001 , 0x000044c5 
+ 00023741  0x00005b13 call  0x00005cdd 
+ 00023742  0x00005b14 branch  0x000073a2 
+ 00023743  0x00005b17 jam  0x00000001 , 0x00004429 
+ 00023744  0x00005b18 arg  0x000044ea , 0x00000006 
+ 00023745  0x00005b19 arg  0x00004419 , 0x00000005 
+ 00023746  0x00005b1a call  0x00007ebf 
+ 00023747  0x00005b1b branch  0x00005cbc 
+ 00023748  0x00005b1f bpatchx  0x0000007b , 0x0000402f 
+ 00023749  0x00005b20 jam  0x00000000 , 0x000044c5 
+ 00023750  0x00005b21 jam  0x00000000 , 0x000044c4 
+ 00023751  0x00005b22 jam  0x00000041 , 0x00000a99 
+ 00023752  0x00005b23 branch  0x00007d86 
+ 00023753  0x00005b26 arg  0x00000002 , 0x00000011 
+ 00023754  0x00005b27 arg  0x0000000d , 0x00000012 
+ 00023755  0x00005b28 call  0x00005842 
+ 00023756  0x00005b29 setarg  0x00000006 
+ 00023757  0x00005b2a istore  0x00000001 , 0x00000005 
+ 00023758  0x00005b2b rtn 
+ 00023759  0x00005b2e arg  0x000044b2 , 0x00000005 
+ 00023760  0x00005b2f force  0x00000008 , 0x00000039 
+ 00023761  0x00005b30 call  0x0000630d 
+ 00023762  0x00005b31 arg  0x00004415 , 0x00000005 
+ 00023763  0x00005b32 force  0x00000004 , 0x00000039 
+ 00023764  0x00005b33 call  0x0000630d 
+ 00023765  0x00005b34 arg  0x0000000d , 0x00000011 
+ 00023766  0x00005b35 arg  0x00000004 , 0x00000012 
+ 00023767  0x00005b36 call  0x00005842 
+ 00023768  0x00005b37 fetch  0x00000008 , 0x000044b2 
+ 00023769  0x00005b38 istore  0x00000008 , 0x00000005 
+ 00023770  0x00005b39 fetch  0x00000004 , 0x00004415 
+ 00023771  0x00005b3a istore  0x00000004 , 0x00000005 
+ 00023772  0x00005b3b rtn 
+ 00023773  0x00005b3e arg  0x00000005 , 0x00000012 
+ 00023774  0x00005b3f branch  0x00005ca8 
+ 00023775  0x00005b42 arg  0x00000006 , 0x00000012 
+ 00023776  0x00005b43 branch  0x00005ca8 
+ 00023777  0x00005b47 ifetch  0x00000008 , 0x00000006 
+ 00023778  0x00005b48 store  0x00000008 , 0x000044b2 
+ 00023779  0x00005b49 ifetch  0x00000004 , 0x00000006 
+ 00023780  0x00005b4a store  0x00000004 , 0x00004415 
+ 00023781  0x00005b4b branch  0x000073a2 
+ 00023782  0x00005b4e fetch  0x00000001 , 0x0000043f 
+ 00023783  0x00005b4f set1  0x00000004 , 0x0000003f 
+ 00023784  0x00005b50 store  0x00000001 , 0x0000043f 
+ 00023785  0x00005b51 rtn 
+ 00023786  0x00005b54 rtn  0x00000029 
+ 00023787  0x00005b55 jam  0x00000032 , 0x00000a99 
+ 00023788  0x00005b56 call  0x00007d86 
+ 00023789  0x00005b57 jam  0x00000004 , 0x000044c5 
+ 00023790  0x00005b58 branch  0x00005cdf 
+ 00023791  0x00005b5b jam  0x00000002 , 0x000044c5 
+ 00023792  0x00005b5c call  0x00005cf3 
+ 00023793  0x00005b5d jam  0x00000033 , 0x00000a99 
+ 00023794  0x00005b5e branch  0x00007d86 
+ 00023795  0x00005b61 arg  0x0000000b , 0x00000012 
+ 00023796  0x00005b62 branch  0x00005ca8 
+ 00023797  0x00005b6a rtn 
+ 00023798  0x00005b72 rtn  0x0000002b 
+ 00023799  0x00005b74 bpatchx  0x0000007c , 0x0000402f 
+ 00023800  0x00005b75 setarg  0x00000000 
+ 00023801  0x00005b76 store  0x00000001 , 0x00000048 
+ 00023802  0x00005b77 store  0x00000001 , 0x00000055 
+ 00023803  0x00005b78 store  0x00000001 , 0x00000078 
+ 00023804  0x00005b79 store  0x00000001 , 0x0000007c 
+ 00023805  0x00005b7a store  0x00000001 , 0x00004158 
+ 00023806  0x00005b7b store  0x00000001 , 0x000004d7 
+ 00023807  0x00005b7c store  0x00000001 , 0x0000016d 
+ 00023808  0x00005b7d store  0x00000001 , 0x000009b5 
+ 00023809  0x00005b7e jam  0x00000000 , 0x0000455b 
+ 00023810  0x00005b7f jam  0x00000000 , 0x00000229 
+ 00023811  0x00005b80 jam  0x00000000 , 0x000004d8 
+ 00023812  0x00005b82 jam  0x00000000 , 0x000009b5 
+ 00023813  0x00005b83 jam  0x00000000 , 0x000009b4 
+ 00023814  0x00005b84 jam  0x00000000 , 0x000004d1 
+ 00023815  0x00005b87 rtn 
+ 00023816  0x00005b8a bpatchx  0x0000007d , 0x0000402f 
+ 00023817  0x00005b8b call  0x000062ff , 0x00000029 
+ 00023818  0x00005b8c ncall  0x00006303 , 0x00000029 
+ 00023819  0x00005b8d call  0x000062bc 
+ 00023820  0x00005b8e nrtn  0x00000034 
+ 00023821  0x00005b8f fetch  0x00000001 , 0x0000004c 
+ 00023822  0x00005b90 rtnbit0  0x00000006 
+ 00023823  0x00005b91 set0  0x00000006 , 0x0000003f 
+ 00023824  0x00005b92 set0  0x00000001 , 0x00000000 
+ 00023825  0x00005b93 store  0x00000001 , 0x0000004c 
+ 00023826  0x00005b94 fetch  0x00000001 , 0x00000551 
+ 00023827  0x00005b95 fetcht  0x00000001 , 0x0000004c 
+ 00023828  0x00005b96 isolate1  0x00000000 , 0x0000003f 
+ 00023829  0x00005b97 setflag  0x00000001 , 0x00000001 , 0x00000002 
+ 00023830  0x00005b98 storet  0x00000001 , 0x0000004c 
+ 00023831  0x00005b99 and_into  0x00000002 , 0x00000002 
+ 00023832  0x00005b9a storet  0x00000001 , 0x0000007f 
+ 00023833  0x00005b9b fetcht  0x00000001 , 0x0000004c 
+ 00023834  0x00005b9c rshift  0x0000003f , 0x0000003f 
+ 00023835  0x00005b9d store  0x00000001 , 0x0000007d 
+ 00023836  0x00005b9e bpatchx  0x0000007e , 0x0000402f 
+ 00023837  0x00005b9f fetch  0x00000001 , 0x0000007d 
+ 00023838  0x00005ba0 beq  0x0000007f , 0x00005d66 
+ 00023839  0x00005ba1 beq  0x00000003 , 0x00005db1 
+ 00023840  0x00005ba2 beq  0x00000004 , 0x00005dc2 
+ 00023841  0x00005ba3 beq  0x0000003c , 0x00005d59 
+ 00023842  0x00005ba4 beq  0x00000005 , 0x00005d55 
+ 00023843  0x00005ba5 beq  0x0000000f , 0x00005fa8 
+ 00023844  0x00005ba6 beq  0x00000010 , 0x00005e24 
+ 00023845  0x00005ba7 beq  0x00000023 , 0x00005e42 
+ 00023846  0x00005ba8 beq  0x00000039 , 0x00005fc1 
+ 00023847  0x00005ba9 beq  0x00000038 , 0x00005fbc 
+ 00023848  0x00005baa beq  0x00000031 , 0x00005e27 
+ 00023849  0x00005bab beq  0x00000037 , 0x00005eb0 
+ 00023850  0x00005bac beq  0x00000027 , 0x00005eac 
+ 00023851  0x00005bad beq  0x00000033 , 0x00005ea9 
+ 00023852  0x00005bae beq  0x00000025 , 0x00005eae 
+ 00023853  0x00005baf beq  0x00000026 , 0x00005e3e 
+ 00023854  0x00005bb0 beq  0x00000007 , 0x00005e36 
+ 00023855  0x00005bb1 beq  0x0000002d , 0x00005e2d 
+ 00023856  0x00005bb2 beq  0x0000002e , 0x00005e2e 
+ 00023857  0x00005bb3 beq  0x00000001 , 0x00005ea5 
+ 00023858  0x00005bb4 beq  0x00000002 , 0x00005e90 
+ 00023859  0x00005bb5 beq  0x00000028 , 0x00005fb3 
+ 00023860  0x00005bb6 beq  0x00000009 , 0x00005e86 
+ 00023861  0x00005bb7 beq  0x0000000b , 0x00005e5f 
+ 00023862  0x00005bb8 beq  0x00000008 , 0x00005e43 
+ 00023863  0x00005bb9 beq  0x0000000c , 0x00005e6a 
+ 00023864  0x00005bba beq  0x0000001f , 0x00005e3a 
+ 00023865  0x00005bbb beq  0x00000020 , 0x00005e3c 
+ 00023866  0x00005bbc beq  0x00000021 , 0x00005eca 
+ 00023867  0x00005bbd beq  0x00000022 , 0x00005eca 
+ 00023868  0x00005bbe beq  0x00000035 , 0x00005ecb 
+ 00023869  0x00005bbf beq  0x00000036 , 0x00005ecc 
+ 00023870  0x00005bc0 beq  0x00000024 , 0x00005eca 
+ 00023871  0x00005bc1 beq  0x00000034 , 0x00005ecd 
+ 00023872  0x00005bc2 beq  0x00000017 , 0x00005ed6 
+ 00023873  0x00005bc3 beq  0x00000011 , 0x00005ef2 
+ 00023874  0x00005bc4 beq  0x00000012 , 0x00005ef6 
+ 00023875  0x00005bc5 beq  0x00000013 , 0x00005ef8 
+ 00023876  0x00005bc6 beq  0x0000000d , 0x00005f0a 
+ 00023877  0x00005bc7 beq  0x0000000e , 0x00005f0a 
+ 00023878  0x00005bc8 beq  0x0000002f , 0x00005eaa 
+ 00023879  0x00005bc9 beq  0x00000030 , 0x00005f0a 
+ 00023880  0x00005bca beq  0x0000000a , 0x00005f0a 
+ 00023881  0x00005bcb beq  0x00000018 , 0x00005f0b 
+ 00023882  0x00005bcc beq  0x00000032 , 0x00005f0a 
+ 00023883  0x00005bcd beq  0x0000003d , 0x00005f10 
+ 00023884  0x00005bce beq  0x0000003e , 0x00005f51 
+ 00023885  0x00005bcf beq  0x0000003f , 0x00005f4b 
+ 00023886  0x00005bd0 beq  0x00000040 , 0x00005f78 
+ 00023887  0x00005bd1 beq  0x00000041 , 0x00005f8a 
+ 00023888  0x00005bd2 beq  0x00000006 , 0x00005fa7 
+ 00023889  0x00005bd3 beq  0x0000003a , 0x00005d57 
+ 00023890  0x00005bd7 jam  0x00000019 , 0x0000007e 
+ 00023891  0x00005bd9 jam  0x00000004 , 0x0000007c 
+ 00023892  0x00005bda rtn 
+ 00023893  0x00005bdd jam  0x00000006 , 0x0000007c 
+ 00023894  0x00005bde rtn 
+ 00023895  0x00005be1 jam  0x0000003b , 0x0000007c 
+ 00023896  0x00005be2 rtn 
+ 00023897  0x00005be5 fetch  0x00000004 , 0x00000552 
+ 00023898  0x00005be6 lshift  0x0000003f , 0x0000003f 
+ 00023899  0x00005be7 store  0x00000004 , 0x000040d2 
+ 00023900  0x00005be8 fetch  0x00000001 , 0x00000556 
+ 00023901  0x00005be9 store  0x00000001 , 0x000040d9 
+ 00023902  0x00005bea fetch  0x00000005 , 0x00000557 
+ 00023903  0x00005beb store  0x00000005 , 0x000040e7 
+ 00023904  0x00005bec fetch  0x00000005 , 0x0000055c 
+ 00023905  0x00005bed istore  0x00000005 , 0x00000005 
+ 00023906  0x00005bee fetch  0x00000001 , 0x00000031 
+ 00023907  0x00005bef set1  0x00000003 , 0x0000003f 
+ 00023908  0x00005bf0 store  0x00000001 , 0x00000031 
+ 00023909  0x00005bf1 rtn 
+ 00023910  0x00005bf3 bpatchx  0x0000007f , 0x0000402f 
+ 00023911  0x00005bf4 fetch  0x00000001 , 0x00000552 
+ 00023912  0x00005bf5 set1  0x00000007 , 0x0000003f 
+ 00023913  0x00005bf6 store  0x00000001 , 0x0000007d 
+ 00023914  0x00005bf7 beq  0x00000081 , 0x00005d88 
+ 00023915  0x00005bf8 beq  0x00000082 , 0x00005d8d 
+ 00023916  0x00005bf9 beq  0x00000095 , 0x00005eb1 
+ 00023917  0x00005bfa beq  0x00000096 , 0x00005eca 
+ 00023918  0x00005bfb beq  0x0000008b , 0x00005ebf 
+ 00023919  0x00005bfc beq  0x00000083 , 0x00005da5 
+ 00023920  0x00005bfd beq  0x00000084 , 0x00005da7 
+ 00023921  0x00005bfe beq  0x00000090 , 0x00005d7a 
+ 00023922  0x00005bff beq  0x00000097 , 0x00005d9e 
+ 00023923  0x00005c00 beq  0x00000098 , 0x00005da3 
+ 00023924  0x00005c01 beq  0x00000099 , 0x00005d7d 
+ 00023925  0x00005c02 beq  0x0000009a , 0x00005d80 
+ 00023926  0x00005c03 rtneq  0x00000084 
+ 00023927  0x00005c07 jam  0x00000082 , 0x0000007c 
+ 00023928  0x00005c08 jam  0x00000019 , 0x0000007e 
+ 00023929  0x00005c0a rtn 
+ 00023930  0x00005c0c jam  0x00000082 , 0x0000007c 
+ 00023931  0x00005c0d jam  0x0000002e , 0x0000007e 
+ 00023932  0x00005c0e rtn 
+ 00023933  0x00005c11 call  0x00005d82 
+ 00023934  0x00005c12 jam  0x0000009a , 0x0000007c 
+ 00023935  0x00005c13 rtn 
+ 00023936  0x00005c16 call  0x00005d82 
+ 00023937  0x00005c17 branch  0x00005d86 
+ 00023938  0x00005c1a arg  0x0000465e , 0x00000005 
+ 00023939  0x00005c1b fetch  0x00000003 , 0x00000553 
+ 00023940  0x00005c1c istore  0x00000003 , 0x00000005 
+ 00023941  0x00005c1d rtn 
+ 00023942  0x00005c20 branch  0x000076d8 , 0x00000001 
+ 00023943  0x00005c21 rtn 
+ 00023944  0x00005c23 fetch  0x00000001 , 0x00000554 
+ 00023945  0x00005c24 set1  0x00000007 , 0x0000003f 
+ 00023946  0x00005c25 store  0x00000001 , 0x000004c9 
+ 00023947  0x00005c26 beq  0x0000008b , 0x00005d92 
+ 00023948  0x00005c27 rtn 
+ 00023949  0x00005c2b fetch  0x00000001 , 0x00000554 
+ 00023950  0x00005c2c set1  0x00000007 , 0x0000003f 
+ 00023951  0x00005c2d store  0x00000001 , 0x000004c9 
+ 00023952  0x00005c2e beq  0x0000008b , 0x00005d96 
+ 00023953  0x00005c2f rtn 
+ 00023954  0x00005c32 fetch  0x00000001 , 0x0000415a 
+ 00023955  0x00005c33 fetcht  0x00000001 , 0x0000004c 
+ 00023956  0x00005c34 nsetflag  0x00000034 , 0x00000005 , 0x00000002 
+ 00023957  0x00005c35 storet  0x00000001 , 0x0000004c 
+ 00023958  0x00005c37 fetch  0x00000001 , 0x00000030 
+ 00023959  0x00005c38 rtnbit0  0x00000005 
+ 00023960  0x00005c39 set0  0x00000005 , 0x0000003f 
+ 00023961  0x00005c3a store  0x00000001 , 0x00000030 
+ 00023962  0x00005c3b fetch  0x00000001 , 0x000004d7 
+ 00023963  0x00005c3c nrtn  0x00000034 
+ 00023964  0x00005c3d jam  0x00000031 , 0x0000007c 
+ 00023965  0x00005c3e rtn 
+ 00023966  0x00005c41 nbranch  0x00005da1 , 0x00000029 
+ 00023967  0x00005c42 jam  0x00000012 , 0x0000007c 
+ 00023968  0x00005c43 branch  0x000062eb 
+ 00023969  0x00005c46 jam  0x00000097 , 0x0000007c 
+ 00023970  0x00005c47 rtn 
+ 00023971  0x00005c4c call  0x000062eb 
+ 00023972  0x00005c4d branch  0x00005ffe 
+ 00023973  0x00005c50 jam  0x00000084 , 0x0000007c 
+ 00023974  0x00005c51 rtn 
+ 00023975  0x00005c54 fetcht  0x00000001 , 0x00000555 
+ 00023976  0x00005c55 and  0x00000002 , 0x00000001 , 0x00000002 
+ 00023977  0x00005c56 storet  0x00000001 , 0x000004d0 
+ 00023978  0x00005c57 fetch  0x00000001 , 0x000041ce 
+ 00023979  0x00005c58 bne  0x00000051 , 0x00005dad 
+ 00023980  0x00005c59 jam  0x00000000 , 0x000041ce 
+ 00023981  0x00005c5b fetch  0x00000001 , 0x00000055 
+ 00023982  0x00005c5c rtnne  0x00000015 
+ 00023983  0x00005c5d jam  0x00000004 , 0x00000055 
+ 00023984  0x00005c5e branch  0x0000631b 
+ 00023985  0x00005c61 bpatchx  0x00000080 , 0x00004030 
+ 00023986  0x00005c62 fetch  0x00000001 , 0x00000552 
+ 00023987  0x00005c63 store  0x00000001 , 0x000004c9 
+ 00023988  0x00005c64 beq  0x00000033 , 0x00005dd8 
+ 00023989  0x00005c65 beq  0x00000008 , 0x00005de7 
+ 00023990  0x00005c66 beq  0x0000000f , 0x00005dee 
+ 00023991  0x00005c67 beq  0x00000010 , 0x00005df4 
+ 00023992  0x00005c68 beq  0x00000011 , 0x00005df5 
+ 00023993  0x00005c69 beq  0x00000012 , 0x00005dfd 
+ 00023994  0x00005c6a beq  0x00000018 , 0x00005e13 
+ 00023995  0x00005c6b beq  0x00000017 , 0x00005e16 
+ 00023996  0x00005c6c beq  0x00000013 , 0x00005dcf 
+ 00023997  0x00005c6e beq  0x0000003d , 0x00005f1e 
+ 00023998  0x00005c6f beq  0x0000003e , 0x00005f6a 
+ 00023999  0x00005c70 beq  0x00000040 , 0x00005f20 
+ 00024000  0x00005c71 beq  0x00000041 , 0x00005f3d 
+ 00024001  0x00005c72 rtn 
+ 00024002  0x00005c75 bpatchx  0x00000081 , 0x00004030 
+ 00024003  0x00005c76 fetch  0x00000001 , 0x00000552 
+ 00024004  0x00005c77 store  0x00000001 , 0x000004c9 
+ 00024005  0x00005c78 beq  0x00000001 , 0x00005e0a 
+ 00024006  0x00005c79 beq  0x00000033 , 0x00005de2 
+ 00024007  0x00005c7a beq  0x0000000b , 0x00005dfe 
+ 00024008  0x00005c7b beq  0x00000008 , 0x00005e01 
+ 00024009  0x00005c7c beq  0x00000013 , 0x00005dd2 
+ 00024010  0x00005c7e beq  0x00000040 , 0x00005e0b 
+ 00024011  0x00005c7f beq  0x00000041 , 0x00005e0e 
+ 00024012  0x00005c80 beq  0x00000018 , 0x00005e11 
+ 00024013  0x00005c81 beq  0x00000017 , 0x00005e22 
+ 00024014  0x00005c82 rtn 
+ 00024015  0x00005c85 jam  0x00000020 , 0x00000a99 
+ 00024016  0x00005c86 call  0x00007d86 
+ 00024017  0x00005c87 branch  0x000021dc 
+ 00024018  0x00005c89 jam  0x00000019 , 0x00000a99 
+ 00024019  0x00005c8a call  0x00007d86 
+ 00024020  0x00005c8b jam  0x00000002 , 0x0000455b 
+ 00024021  0x00005c8c setarg  0x00000050 
+ 00024022  0x00005c8d arg  0x00000006 , 0x00000007 
+ 00024023  0x00005c8e branch  0x00007f08 
+ 00024024  0x00005c94 fetch  0x00000001 , 0x000004d1 
+ 00024025  0x00005c95 set1  0x00000000 , 0x0000003f 
+ 00024026  0x00005c96 store  0x00000001 , 0x000004d1 
+ 00024027  0x00005c97 jam  0x00000001 , 0x00000a99 
+ 00024028  0x00005c98 call  0x00007d86 
+ 00024029  0x00005c99 jam  0x0000008b , 0x0000007c 
+ 00024030  0x00005c9d fetch  0x00000001 , 0x00000055 
+ 00024031  0x00005c9e bne  0x00000005 , 0x00005d07 
+ 00024032  0x00005ca1 jam  0x00000006 , 0x00000055 
+ 00024033  0x00005ca2 rtn 
+ 00024034  0x00005cab jam  0x0000000b , 0x000004ca 
+ 00024035  0x00005cac jam  0x00000007 , 0x0000007c 
+ 00024036  0x00005cae jam  0x00000000 , 0x00000055 
+ 00024037  0x00005cb0 branch  0x00005d07 , 0x00000001 
+ 00024038  0x00005cb1 rtn 
+ 00024039  0x00005cb4 fetch  0x00000001 , 0x000041bd 
+ 00024040  0x00005cb5 nrtn  0x00000034 
+ 00024041  0x00005cb6 call  0x0000244f 
+ 00024042  0x00005cb7 call  0x00005ffc 
+ 00024043  0x00005cb8 rtn  0x00000029 
+ 00024044  0x00005cb9 set1  0x00000021 , 0x00000000 
+ 00024045  0x00005cba rtn 
+ 00024046  0x00005cbd nrtn  0x00000029 
+ 00024047  0x00005cbe jam  0x00000010 , 0x0000007c 
+ 00024048  0x00005cbf fetch  0x00000001 , 0x0000004c 
+ 00024049  0x00005cc0 rtnbit0  0x00000002 
+ 00024050  0x00005cc1 jam  0x00000012 , 0x0000007c 
+ 00024051  0x00005cc2 rtn 
+ 00024052  0x00005cc5 branch  0x00005ffe 
+ 00024053  0x00005cc8 call  0x00006059 
+ 00024054  0x00005cc9 fetch  0x00000001 , 0x00000030 
+ 00024055  0x00005cca rtnbit1  0x00000004 
+ 00024056  0x00005ccb jam  0x00000031 , 0x0000007c 
+ 00024057  0x00005ccc fetch  0x00000001 , 0x00000055 
+ 00024058  0x00005ccd rtnne  0x0000000a 
+ 00024059  0x00005cce jam  0x0000000b , 0x00000055 
+ 00024060  0x00005ccf rtn 
+ 00024061  0x00005cd9 rtn 
+ 00024062  0x00005cdd jam  0x00000007 , 0x0000007c 
+ 00024063  0x00005cde jam  0x00000013 , 0x000004ca 
+ 00024064  0x00005cdf rtn 
+ 00024065  0x00005ce2 fetch  0x00000001 , 0x00000553 
+ 00024066  0x00005ce3 beq  0x00000006 , 0x00005e07 
+ 00024067  0x00005ce4 rtnne  0x00000018 
+ 00024068  0x00005ce5 jam  0x00000018 , 0x000004ca 
+ 00024069  0x00005ce6 jam  0x00000007 , 0x0000007c 
+ 00024070  0x00005ce7 rtn 
+ 00024071  0x00005ce9 jam  0x00000006 , 0x000004ca 
+ 00024072  0x00005cea jam  0x00000007 , 0x0000007c 
+ 00024073  0x00005ceb rtn 
+ 00024074  0x00005cee rtn 
+ 00024075  0x00005cf1 jam  0x00000000 , 0x000009ae 
+ 00024076  0x00005cf2 jam  0x00000007 , 0x0000007c 
+ 00024077  0x00005cf3 branch  0x00005d07 
+ 00024078  0x00005cf6 jam  0x00000000 , 0x000009ae 
+ 00024079  0x00005cf7 jam  0x00000007 , 0x0000007c 
+ 00024080  0x00005cf8 branch  0x00005d07 
+ 00024081  0x00005cfa jam  0x00000024 , 0x00000a99 
+ 00024082  0x00005cfb branch  0x00007d86 
+ 00024083  0x00005cfe jam  0x00000023 , 0x00000a99 
+ 00024084  0x00005cff call  0x00007d86 
+ 00024085  0x00005d00 branch  0x000026e9 
+ 00024086  0x00005d03 jam  0x00000022 , 0x00000a99 
+ 00024087  0x00005d04 call  0x00007d86 
+ 00024088  0x00005d05 setarg  0x00000000 
+ 00024089  0x00005d06 store  0x00000002 , 0x00000075 
+ 00024090  0x00005d07 fetch  0x00000002 , 0x000041e3 
+ 00024091  0x00005d08 lshift  0x0000003f , 0x0000003f 
+ 00024092  0x00005d09 store  0x00000002 , 0x00000032 
+ 00024093  0x00005d0a fetch  0x00000001 , 0x000041e5 
+ 00024094  0x00005d0b store  0x00000001 , 0x00000073 
+ 00024095  0x00005d0c fetch  0x00000001 , 0x000041e7 
+ 00024096  0x00005d0d store  0x00000001 , 0x00000074 
+ 00024097  0x00005d0e branch  0x000026c6 
+ 00024098  0x00005d11 jam  0x00000021 , 0x00000a99 
+ 00024099  0x00005d12 branch  0x00007d86 
+ 00024100  0x00005d15 fetcht  0x00000001 , 0x00000552 
+ 00024101  0x00005d16 storet  0x00000001 , 0x00000054 
+ 00024102  0x00005d17 branch  0x00005e38 
+ 00024103  0x00005d1a fetch  0x00000001 , 0x000004d1 
+ 00024104  0x00005d1b set1  0x00000002 , 0x0000003f 
+ 00024105  0x00005d1c store  0x00000001 , 0x000004d1 
+ 00024106  0x00005d1d rtnbit1  0x00000003 
+ 00024107  0x00005d1e jam  0x00000031 , 0x0000007c 
+ 00024108  0x00005d1f branch  0x00005d07 
+ 00024109  0x00005d24 rtn 
+ 00024110  0x00005d27 fetch  0x00000001 , 0x000040d0 
+ 00024111  0x00005d28 fetcht  0x00000001 , 0x00000552 
+ 00024112  0x00005d29 isub  0x00000002 , 0x0000003e 
+ 00024113  0x00005d2b branch  0x00005e38 , 0x00000002 
+ 00024114  0x00005d2c jam  0x00000004 , 0x0000007c 
+ 00024115  0x00005d2d jam  0x0000001f , 0x0000007e 
+ 00024116  0x00005d2e jam  0x0000002e , 0x0000007d 
+ 00024117  0x00005d2f rtn 
+ 00024118  0x00005d32 call  0x00006157 
+ 00024119  0x00005d33 branch  0x00005e38 
+ 00024120  0x00005d36 jam  0x00000003 , 0x0000007c 
+ 00024121  0x00005d37 rtn 
+ 00024122  0x00005d3a jam  0x00000021 , 0x0000007c 
+ 00024123  0x00005d3b rtn 
+ 00024124  0x00005d3e jam  0x00000022 , 0x0000007c 
+ 00024125  0x00005d3f rtn 
+ 00024126  0x00005d42 fetch  0x00000001 , 0x00000055 
+ 00024127  0x00005d43 rtneq  0x00000013 
+ 00024128  0x00005d45 jam  0x00000002 , 0x00000055 
+ 00024129  0x00005d47 rtn 
+ 00024130  0x00005d4b rtn 
+ 00024131  0x00005d4e call  0x00005ff9 
+ 00024132  0x00005d4f jam  0x00000001 , 0x000004d4 
+ 00024133  0x00005d50 jam  0x0000000a , 0x00000a99 
+ 00024134  0x00005d51 call  0x00007d86 
+ 00024135  0x00005d53 call  0x000062f3 
+ 00024136  0x00005d54 nbranch  0x00006001 , 0x00000001 
+ 00024137  0x00005d56 nbranch  0x00005e4e , 0x00000029 
+ 00024138  0x00005d57 jam  0x00000004 , 0x0000007c 
+ 00024139  0x00005d58 jam  0x00000008 , 0x0000007d 
+ 00024140  0x00005d59 jam  0x00000023 , 0x0000007e 
+ 00024141  0x00005d5a rtn 
+ 00024142  0x00005d5c fetch  0x00000001 , 0x0000004b 
+ 00024143  0x00005d5d set1  0x00000002 , 0x0000003f 
+ 00024144  0x00005d5e store  0x00000001 , 0x0000004b 
+ 00024145  0x00005d5f rtn 
+ 00024146  0x00005d63 fetcht  0x00000001 , 0x0000004c 
+ 00024147  0x00005d64 nsetflag  0x00000034 , 0x00000001 , 0x00000002 
+ 00024148  0x00005d65 storet  0x00000001 , 0x0000004c 
+ 00024149  0x00005d66 rtn 
+ 00024150  0x00005d6a fetch  0x00000001 , 0x0000007f 
+ 00024151  0x00005d6b rshift  0x0000003f , 0x0000003f 
+ 00024152  0x00005d6c and_into  0x00000001 , 0x0000003f 
+ 00024153  0x00005d6d rtn 
+ 00024154  0x00005d70 fetch  0x00000001 , 0x00004217 
+ 00024155  0x00005d71 rtn  0x00000034 
+ 00024156  0x00005d72 fetch  0x00000001 , 0x000009b5 
+ 00024157  0x00005d73 call  0x000067b2 , 0x00000034 
+ 00024158  0x00005d74 rtn 
+ 00024159  0x00005d77 call  0x00005e5a 
+ 00024160  0x00005d78 call  0x00005e56 
+ 00024161  0x00005d79 store  0x00000001 , 0x000004d5 
+ 00024162  0x00005d7a call  0x00005ff9 
+ 00024163  0x00005d7b jam  0x0000000c , 0x0000007c 
+ 00024164  0x00005d7c fetch  0x00000001 , 0x000041bd 
+ 00024165  0x00005d7d nrtn  0x00000034 
+ 00024166  0x00005d7e fetch  0x00000001 , 0x00000030 
+ 00024167  0x00005d7f rtnbit1  0x00000006 
+ 00024168  0x00005d80 jam  0x00000006 , 0x0000007e 
+ 00024169  0x00005d81 branch  0x00005d53 
+ 00024170  0x00005d84 arg  0x00000040 , 0x00000011 
+ 00024171  0x00005d85 call  0x00007288 
+ 00024172  0x00005d86 fetch  0x00000004 , 0x00000552 
+ 00024173  0x00005d87 fetcht  0x00000004 , 0x00000592 
+ 00024174  0x00005d88 isub  0x00000002 , 0x0000003e 
+ 00024175  0x00005d89 branch  0x00005e73 , 0x00000005 
+ 00024176  0x00005d8a jam  0x00000007 , 0x0000007c 
+ 00024177  0x00005d8b jam  0x00000005 , 0x000004ca 
+ 00024178  0x00005d8c rtn 
+ 00024179  0x00005d8e call  0x00005e77 
+ 00024180  0x00005d8f fetch  0x00000001 , 0x0000465a 
+ 00024181  0x00005d90 branch  0x00005f3e , 0x00000034 
+ 00024182  0x00005d91 rtn 
+ 00024183  0x00005d95 call  0x00007386 
+ 00024184  0x00005d96 call  0x000021b2 
+ 00024185  0x00005d97 fetch  0x00000001 , 0x0000004b 
+ 00024186  0x00005d98 isolate1  0x00000001 , 0x0000003f 
+ 00024187  0x00005d99 set0  0x00000001 , 0x0000003f 
+ 00024188  0x00005d9a store  0x00000001 , 0x0000004b 
+ 00024189  0x00005d9b fetch  0x00000001 , 0x00000055 
+ 00024190  0x00005d9c beq  0x00000019 , 0x00005e81 
+ 00024191  0x00005d9d beq  0x00000018 , 0x00005e81 
+ 00024192  0x00005d9e rtn 
+ 00024193  0x00005da0 fetch  0x00000001 , 0x000009b5 
+ 00024194  0x00005da1 rtnne  0x00000000 
+ 00024195  0x00005da2 fetch  0x00000001 , 0x0000004c 
+ 00024196  0x00005da3 rtnbit1  0x00000002 
+ 00024197  0x00005da4 branch  0x000063b1 
+ 00024198  0x00005da7 arg  0x00000552 , 0x00000011 
+ 00024199  0x00005da8 arg  0x00000582 , 0x00000012 
+ 00024200  0x00005da9 arg  0x00000562 , 0x00000005 
+ 00024201  0x00005daa call  0x00007352 
+ 00024202  0x00005dab arg  0x00000040 , 0x00000011 
+ 00024203  0x00005dac call  0x00006311 
+ 00024204  0x00005dad jam  0x0000000b , 0x0000007c 
+ 00024205  0x00005dae fetch  0x00000001 , 0x00000030 
+ 00024206  0x00005daf bbit0  0x00000006 , 0x00005ffc 
+ 00024207  0x00005db0 rtn 
+ 00024208  0x00005db3 fetch  0x00000002 , 0x0000015f 
+ 00024209  0x00005db4 add  0x0000003f , 0xfffffffd , 0x00000039 
+ 00024210  0x00005db5 fetcht  0x00000001 , 0x00000552 
+ 00024211  0x00005db6 setarg  0x00000101 
+ 00024212  0x00005db7 iadd  0x00000002 , 0x00000005 
+ 00024213  0x00005db8 arg  0x00000554 , 0x00000006 
+ 00024214  0x00005db9 call  0x00007f01 
+ 00024215  0x00005dba fetcht  0x00000001 , 0x00000053 
+ 00024216  0x00005dbb fetch  0x00000001 , 0x00000553 
+ 00024217  0x00005dbc isub  0x00000002 , 0x0000003f 
+ 00024218  0x00005dbd sub  0x0000003f , 0x0000000e , 0x0000003e 
+ 00024219  0x00005dbe branch  0x00005ea0 , 0x00000002 
+ 00024220  0x00005dbf add  0x00000002 , 0x0000000e , 0x0000003f 
+ 00024221  0x00005dc0 store  0x00000001 , 0x00000053 
+ 00024222  0x00005dc1 jam  0x00000001 , 0x0000007c 
+ 00024223  0x00005dc2 rtn 
+ 00024224  0x00005dc4 fetch  0x00000001 , 0x0000004c 
+ 00024225  0x00005dc5 set1  0x00000003 , 0x0000003f 
+ 00024226  0x00005dc6 store  0x00000001 , 0x0000004c 
+ 00024227  0x00005dc7 bbit1  0x00000004 , 0x00006006 
+ 00024228  0x00005dc8 rtn 
+ 00024229  0x00005dca fetch  0x00000001 , 0x00000552 
+ 00024230  0x00005dcb store  0x00000001 , 0x0000007d 
+ 00024231  0x00005dcc jam  0x00000002 , 0x0000007c 
+ 00024232  0x00005dcd rtn 
+ 00024233  0x00005dd0 branch  0x00005e38 
+ 00024234  0x00005dd3 jam  0x00000030 , 0x0000007c 
+ 00024235  0x00005dd4 rtn 
+ 00024236  0x00005dd7 jam  0x00000028 , 0x0000007c 
+ 00024237  0x00005dd8 rtn 
+ 00024238  0x00005ddb jam  0x00000026 , 0x0000007c 
+ 00024239  0x00005ddc rtn 
+ 00024240  0x00005de1 rtn 
+ 00024241  0x00005de6 fetch  0x00000002 , 0x00000032 
+ 00024242  0x00005de7 iforce  0x00000002 
+ 00024243  0x00005de8 fetch  0x00000001 , 0x00000553 
+ 00024244  0x00005de9 store  0x00000001 , 0x00000095 
+ 00024245  0x00005dea imul32  0x00000002 , 0x00000002 
+ 00024246  0x00005deb fetch  0x00000002 , 0x00000554 
+ 00024247  0x00005dec lshift  0x0000003f , 0x0000003f 
+ 00024248  0x00005ded store  0x00000002 , 0x00000096 
+ 00024249  0x00005dee fetch  0x00000004 , 0x00000556 
+ 00024250  0x00005def lshift  0x0000003f , 0x0000003f 
+ 00024251  0x00005df0 store  0x00000004 , 0x00000091 
+ 00024252  0x00005df2 deposit  0x00000002 
+ 00024253  0x00005df3 store  0x00000002 , 0x00000098 
+ 00024254  0x00005df4 rtn 
+ 00024255  0x00005df6 fetcht  0x00000001 , 0x0000415a 
+ 00024256  0x00005df7 fetch  0x00000001 , 0x00000553 
+ 00024257  0x00005df8 ixor  0x00000002 , 0x0000003e 
+ 00024258  0x00005df9 nbranch  0x00005d77 , 0x00000005 
+ 00024259  0x00005dfa isolate1  0x00000000 , 0x0000003f 
+ 00024260  0x00005dfb fetch  0x00000001 , 0x0000004c 
+ 00024261  0x00005dfc setflag  0x00000001 , 0x00000005 , 0x0000003f 
+ 00024262  0x00005dfd store  0x00000001 , 0x0000004c 
+ 00024263  0x00005dfe jam  0x00000081 , 0x0000007c 
+ 00024264  0x00005dff jam  0x0000008b , 0x0000007d 
+ 00024265  0x00005e00 rtn 
+ 00024266  0x00005e07 rtn 
+ 00024267  0x00005e0a branch  0x00005e38 
+ 00024268  0x00005e0e branch  0x00005e38 
+ 00024269  0x00005e13 fetch  0x00000002 , 0x00000552 
+ 00024270  0x00005e14 store  0x00000002 , 0x00000171 
+ 00024271  0x00005e15 rtn 
+ 00024272  0x00005e18 fetch  0x00000002 , 0x00000555 
+ 00024273  0x00005e19 fetcht  0x00000001 , 0x00004172 
+ 00024274  0x00005e1a imul32  0x00000002 , 0x0000003f 
+ 00024275  0x00005e1b arg  0x00000640 , 0x00000002 
+ 00024276  0x00005e1c isub  0x00000002 , 0x0000003e 
+ 00024277  0x00005e1e rtn 
+ 00024278  0x00005e21 fetch  0x00000002 , 0x00000557 
+ 00024279  0x00005e22 branch  0x00005ef0 , 0x00000034 
+ 00024280  0x00005e23 call  0x00005ed0 
+ 00024281  0x00005e24 branch  0x00005ef0 , 0x00000002 
+ 00024282  0x00005e25 fetch  0x00000001 , 0x00004092 
+ 00024283  0x00005e26 sub  0x0000003f , 0x0000000a , 0x0000003e 
+ 00024284  0x00005e27 call  0x00003cd5 , 0x00000005 
+ 00024285  0x00005e28 fetch  0x00000001 , 0x00000030 
+ 00024286  0x00005e29 bbit1  0x00000001 , 0x00005ef0 
+ 00024287  0x00005e2a fetch  0x00000002 , 0x00000553 
+ 00024288  0x00005e2b lshift  0x0000003f , 0x0000003f 
+ 00024289  0x00005e2c store  0x00000002 , 0x00000075 
+ 00024290  0x00005e2d fetch  0x00000002 , 0x00000555 
+ 00024291  0x00005e2e lshift  0x0000003f , 0x0000003f 
+ 00024292  0x00005e2f store  0x00000002 , 0x00000032 
+ 00024293  0x00005e30 fetch  0x00000002 , 0x00000557 
+ 00024294  0x00005e31 store  0x00000001 , 0x00000073 
+ 00024295  0x00005e32 iforce  0x00000002 
+ 00024296  0x00005e33 fetch  0x00000002 , 0x00000559 
+ 00024297  0x00005e34 store  0x00000001 , 0x00000074 
+ 00024298  0x00005e35 isub  0x00000002 , 0x0000003e 
+ 00024299  0x00005e36 nbranch  0x00005eed , 0x00000002 
+ 00024300  0x00005e37 store  0x00000001 , 0x00000073 
+ 00024301  0x00005e3a jam  0x00000003 , 0x0000007c 
+ 00024302  0x00005e3b jam  0x00000017 , 0x0000007d 
+ 00024303  0x00005e3c rtn 
+ 00024304  0x00005e3f jam  0x00000024 , 0x0000007e 
+ 00024305  0x00005e40 branch  0x00005d53 
+ 00024306  0x00005e43 call  0x00005e38 
+ 00024307  0x00005e44 call  0x00005ff9 
+ 00024308  0x00005e45 call  0x0000728b 
+ 00024309  0x00005e46 branch  0x000026b8 
+ 00024310  0x00005e49 call  0x00005e38 
+ 00024311  0x00005e4a branch  0x000026c0 
+ 00024312  0x00005e4e fetch  0x00000004 , 0x00000552 
+ 00024313  0x00005e4f lshift  0x0000003f , 0x0000003f 
+ 00024314  0x00005e51 branch  0x00005f04 , 0x00000029 
+ 00024315  0x00005e52 fetcht  0x00000001 , 0x000041bd 
+ 00024316  0x00005e53 nbranch  0x00005f01 , 0x00000034 
+ 00024317  0x00005e55 jam  0x00000004 , 0x0000007c 
+ 00024318  0x00005e56 jam  0x00000013 , 0x0000007d 
+ 00024319  0x00005e57 jam  0x00000024 , 0x0000007e 
+ 00024320  0x00005e58 rtn 
+ 00024321  0x00005e5a jam  0x00000034 , 0x0000007c 
+ 00024322  0x00005e5b jam  0x00000000 , 0x00000055 
+ 00024323  0x00005e5c branch  0x000021d9 
+ 00024324  0x00005e5f call  0x000021d9 
+ 00024325  0x00005e60 set1  0x00000022 , 0x00000000 
+ 00024326  0x00005e61 fetch  0x00000001 , 0x0000016d 
+ 00024327  0x00005e62 set0  0x00000002 , 0x0000003f 
+ 00024328  0x00005e63 store  0x00000001 , 0x0000016d 
+ 00024329  0x00005e64 branch  0x00005e38 
+ 00024330  0x00005e6d rtn 
+ 00024331  0x00005e71 jam  0x00000003 , 0x0000007c 
+ 00024332  0x00005e72 jam  0x00000018 , 0x0000007d 
+ 00024333  0x00005e73 jam  0x0000002e , 0x00000a99 
+ 00024334  0x00005e74 call  0x00007d86 
+ 00024335  0x00005e75 branch  0x000026e9 
+ 00024336  0x00005e78 fetch  0x00000001 , 0x00000552 
+ 00024337  0x00005e79 bne  0x00000001 , 0x00005f1c 
+ 00024338  0x00005e7a fetch  0x00000001 , 0x00000553 
+ 00024339  0x00005e7b bne  0x00000001 , 0x00005f1c 
+ 00024340  0x00005e7c fetch  0x00000001 , 0x00000554 
+ 00024341  0x00005e7d bne  0x00000030 , 0x00005f1c 
+ 00024342  0x00005e7e call  0x000062fc 
+ 00024343  0x00005e7f branch  0x00005f19 , 0x00000001 
+ 00024344  0x00005e80 jam  0x00000001 , 0x000009ae 
+ 00024345  0x00005e82 jam  0x00000003 , 0x0000007c 
+ 00024346  0x00005e83 jam  0x0000003d , 0x0000007d 
+ 00024347  0x00005e84 branch  0x00005d07 
+ 00024348  0x00005e87 jam  0x00000024 , 0x0000007e 
+ 00024349  0x00005e88 branch  0x00005d53 
+ 00024350  0x00005e8d jam  0x0000003e , 0x0000007c 
+ 00024351  0x00005e8f rtn 
+ 00024352  0x00005e91 fetch  0x00000001 , 0x00004662 
+ 00024353  0x00005e92 beq  0x00000001 , 0x00005f27 
+ 00024354  0x00005e93 beq  0x00000002 , 0x00005f2b 
+ 00024355  0x00005e95 call  0x000062fc 
+ 00024356  0x00005e96 rtn  0x00000001 
+ 00024357  0x00005e97 jam  0x00000008 , 0x000009ae 
+ 00024358  0x00005e98 rtn 
+ 00024359  0x00005e9b call  0x00007962 
+ 00024360  0x00005e9c jam  0x00000035 , 0x00000a99 
+ 00024361  0x00005e9d call  0x00007d86 
+ 00024362  0x00005e9e branch  0x00005f23 
+ 00024363  0x00005ea2 call  0x000062fc 
+ 00024364  0x00005ea3 rtn  0x00000001 
+ 00024365  0x00005ea4 fetch  0x00000001 , 0x00004663 
+ 00024366  0x00005ea5 beq  0x00000013 , 0x00005f3b 
+ 00024367  0x00005ea6 increase  0x00000001 , 0x0000003f 
+ 00024368  0x00005ea7 store  0x00000001 , 0x00004663 
+ 00024369  0x00005eab jam  0x00000001 , 0x000009b0 
+ 00024370  0x00005eac jam  0x00000004 , 0x000009ae 
+ 00024371  0x00005ead fetch  0x00000001 , 0x00004663 
+ 00024372  0x00005eae copy  0x0000003f , 0x00000007 
+ 00024373  0x00005eaf fetch  0x00000006 , 0x0000468a 
+ 00024374  0x00005eb0 qisolate1  0x0000003f 
+ 00024375  0x00005eb1 setarg  0x00000080 
+ 00024376  0x00005eb2 setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00024377  0x00005eb3 store  0x00000001 , 0x00004664 
+ 00024378  0x00005eb4 rtn 
+ 00024379  0x00005eb7 jam  0x00000008 , 0x000009ae 
+ 00024380  0x00005eb8 rtn 
+ 00024381  0x00005ebb call  0x00005f43 
+ 00024382  0x00005ebd fetch  0x00000001 , 0x00004665 
+ 00024383  0x00005ebe rtn  0x00000034 
+ 00024384  0x00005ebf jam  0x00000000 , 0x00004665 
+ 00024385  0x00005ec0 jam  0x00000038 , 0x00000a99 
+ 00024386  0x00005ec1 branch  0x00007d86 
+ 00024387  0x00005ec6 call  0x000062fc 
+ 00024388  0x00005ec7 ncall  0x00007965 , 0x00000001 
+ 00024389  0x00005ec8 call  0x00007975 , 0x00000001 
+ 00024390  0x00005ec9 call  0x000062fc 
+ 00024391  0x00005eca rtn  0x00000001 
+ 00024392  0x00005ecb jam  0x0000000c , 0x000009ae 
+ 00024393  0x00005ecc jam  0x00000001 , 0x000009b0 
+ 00024394  0x00005ecd rtn 
+ 00024395  0x00005ed0 arg  0x00000a6e , 0x00000005 
+ 00024396  0x00005ed1 arg  0x00000552 , 0x00000006 
+ 00024397  0x00005ed2 call  0x00007ebf 
+ 00024398  0x00005ed3 fetch  0x00000001 , 0x00004662 
+ 00024399  0x00005ed4 rtneq  0x00000002 
+ 00024400  0x00005ed5 branch  0x000076d8 
+ 00024401  0x00005ed8 fetch  0x00000001 , 0x000009af 
+ 00024402  0x00005ed9 beq  0x00000007 , 0x00005f55 
+ 00024403  0x00005eda fetch  0x00000001 , 0x000009ae 
+ 00024404  0x00005edb bne  0x00000001 , 0x00005f68 
+ 00024405  0x00005edd fetch  0x00000001 , 0x000009b7 
+ 00024406  0x00005ede sub  0x0000003f , 0x00000020 , 0x00000005 
+ 00024407  0x00005edf nbranch  0x00005f68 , 0x00000002 
+ 00024408  0x00005ee0 arg  0x000009c6 , 0x00000005 
+ 00024409  0x00005ee1 iadd  0x00000005 , 0x00000005 
+ 00024410  0x00005ee2 fetch  0x00000008 , 0x00000552 
+ 00024411  0x00005ee3 istore  0x00000008 , 0x00000005 
+ 00024412  0x00005ee4 fetch  0x00000008 , 0x0000055a 
+ 00024413  0x00005ee5 istore  0x00000008 , 0x00000005 
+ 00024414  0x00005ee6 fetch  0x00000001 , 0x000009b7 
+ 00024415  0x00005ee7 increase  0x00000010 , 0x0000003f 
+ 00024416  0x00005ee8 store  0x00000001 , 0x000009b7 
+ 00024417  0x00005ee9 bne  0x00000030 , 0x00005e38 
+ 00024418  0x00005eeb call  0x000062fc 
+ 00024419  0x00005eec branch  0x00005e38 , 0x00000001 
+ 00024420  0x00005eed jam  0x00000001 , 0x000009b8 
+ 00024421  0x00005eee jam  0x00000002 , 0x000009ae 
+ 00024422  0x00005eef jam  0x00000001 , 0x000009b0 
+ 00024423  0x00005ef0 branch  0x00005e38 
+ 00024424  0x00005ef2 jam  0x00000024 , 0x0000007e 
+ 00024425  0x00005ef3 branch  0x00005d53 
+ 00024426  0x00005ef5 fetch  0x00000001 , 0x000009b6 
+ 00024427  0x00005ef6 beq  0x00000030 , 0x00005f6e 
+ 00024428  0x00005ef7 jam  0x0000003e , 0x0000007c 
+ 00024429  0x00005ef8 branch  0x00005d07 
+ 00024430  0x00005efb call  0x000062fc 
+ 00024431  0x00005efc branch  0x00005f77 , 0x00000001 
+ 00024432  0x00005efd fetch  0x00000001 , 0x00004662 
+ 00024433  0x00005efe beq  0x00000002 , 0x00005f75 
+ 00024434  0x00005eff jam  0x00000001 , 0x000009b0 
+ 00024435  0x00005f00 jam  0x00000004 , 0x000009ae 
+ 00024436  0x00005f01 branch  0x00005d07 
+ 00024437  0x00005f04 jam  0x00000036 , 0x00000a99 
+ 00024438  0x00005f05 branch  0x00007d86 
+ 00024439  0x00005f0a branch  0x00005d07 
+ 00024440  0x00005f0d fetch  0x00000001 , 0x000009af 
+ 00024441  0x00005f0e beq  0x00000007 , 0x00005f7c 
+ 00024442  0x00005f0f fetch  0x00000001 , 0x000009ae 
+ 00024443  0x00005f10 bne  0x00000006 , 0x00005f88 
+ 00024444  0x00005f12 arg  0x00000a2e , 0x00000005 
+ 00024445  0x00005f13 fetch  0x00000008 , 0x00000552 
+ 00024446  0x00005f14 istore  0x00000008 , 0x00000005 
+ 00024447  0x00005f15 fetch  0x00000008 , 0x0000055a 
+ 00024448  0x00005f16 istore  0x00000008 , 0x00000005 
+ 00024449  0x00005f17 call  0x000062fc 
+ 00024450  0x00005f18 branch  0x00005f86 , 0x00000001 
+ 00024451  0x00005f19 jam  0x00000007 , 0x000009ae 
+ 00024452  0x00005f1a jam  0x00000001 , 0x000009b0 
+ 00024453  0x00005f1b branch  0x00005e38 
+ 00024454  0x00005f1d jam  0x00000004 , 0x000009af 
+ 00024455  0x00005f1e branch  0x000076d8 
+ 00024456  0x00005f22 jam  0x00000024 , 0x0000007e 
+ 00024457  0x00005f23 branch  0x00005d53 
+ 00024458  0x00005f26 fetch  0x00000001 , 0x000009af 
+ 00024459  0x00005f27 beq  0x0000000b , 0x00005f8e 
+ 00024460  0x00005f28 fetch  0x00000001 , 0x000009ae 
+ 00024461  0x00005f29 bne  0x00000008 , 0x00005f9d 
+ 00024462  0x00005f2b arg  0x00000a5e , 0x00000005 
+ 00024463  0x00005f2c arg  0x00000552 , 0x00000006 
+ 00024464  0x00005f2d call  0x00007ebf 
+ 00024465  0x00005f2e call  0x000062fc 
+ 00024466  0x00005f2f branch  0x00005f9a , 0x00000001 
+ 00024467  0x00005f30 fetch  0x00000001 , 0x00004662 
+ 00024468  0x00005f31 beq  0x00000001 , 0x00005f9f 
+ 00024469  0x00005f33 jam  0x00000000 , 0x00004661 
+ 00024470  0x00005f34 jam  0x00000009 , 0x000009ae 
+ 00024471  0x00005f35 jam  0x00000001 , 0x000009b0 
+ 00024472  0x00005f36 jam  0x00000041 , 0x0000007d 
+ 00024473  0x00005f37 branch  0x00005d07 
+ 00024474  0x00005f3a jam  0x00000009 , 0x000009af 
+ 00024475  0x00005f3b jam  0x00000001 , 0x000009b1 
+ 00024476  0x00005f3c branch  0x00005d07 
+ 00024477  0x00005f3e jam  0x00000024 , 0x0000007e 
+ 00024478  0x00005f3f branch  0x00005d53 
+ 00024479  0x00005f42 fetch  0x00000001 , 0x00004661 
+ 00024480  0x00005f43 bbit1  0x00000007 , 0x00005fa4 
+ 00024481  0x00005f44 set1  0x00000006 , 0x0000003f 
+ 00024482  0x00005f45 store  0x00000001 , 0x00004661 
+ 00024483  0x00005f46 rtn 
+ 00024484  0x00005f49 bbit1  0x00000000 , 0x00005f95 
+ 00024485  0x00005f4a jam  0x00000000 , 0x00004661 
+ 00024486  0x00005f4b branch  0x00005f9d 
+ 00024487  0x00005f4f branch  0x00005d07 
+ 00024488  0x00005f52 fetch  0x00000001 , 0x0000016d 
+ 00024489  0x00005f53 set0  0x00000001 
+ 00024490  0x00005f54 store  0x00000001 , 0x0000016d 
+ 00024491  0x00005f55 call  0x00005e38 
+ 00024492  0x00005f56 nrtn  0x00000029 
+ 00024493  0x00005f57 fetch  0x00000001 , 0x00000552 
+ 00024494  0x00005f58 fetcht  0x00000001 , 0x0000004b 
+ 00024495  0x00005f59 setflag  0x00000034 , 0x00000004 , 0x00000002 
+ 00024496  0x00005f5a nsetflag  0x00000034 , 0x00000005 , 0x00000002 
+ 00024497  0x00005f5b storet  0x00000001 , 0x0000004b 
+ 00024498  0x00005f5c rtn 
+ 00024499  0x00005f5f fetcht  0x00000008 , 0x00000552 
+ 00024500  0x00005f61 fetch  0x00000001 , 0x00000055 
+ 00024501  0x00005f62 rtnne  0x00000003 
+ 00024502  0x00005f64 fetch  0x00000001 , 0x0000016d 
+ 00024503  0x00005f65 bbit0  0x00000004 , 0x00005fba 
+ 00024504  0x00005f67 jam  0x00000014 , 0x00000055 
+ 00024505  0x00005f68 rtn 
+ 00024506  0x00005f6a jam  0x00000004 , 0x00000055 
+ 00024507  0x00005f6b rtn 
+ 00024508  0x00005f6d fetch  0x00000001 , 0x0000017f 
+ 00024509  0x00005f6e store  0x00000001 , 0x0000015b 
+ 00024510  0x00005f6f jam  0x00000003 , 0x0000007c 
+ 00024511  0x00005f70 jam  0x00000038 , 0x0000007d 
+ 00024512  0x00005f71 rtn 
+ 00024513  0x00005f75 jam  0x00000003 , 0x0000007c 
+ 00024514  0x00005f76 jam  0x00000039 , 0x0000007d 
+ 00024515  0x00005f77 force  0x00000009 , 0x00000039 
+ 00024516  0x00005f78 arg  0x00000552 , 0x00000006 
+ 00024517  0x00005f79 arg  0x00000152 , 0x00000005 
+ 00024518  0x00005f7b ifetch  0x00000001 , 0x00000006 
+ 00024519  0x00005f7c xor_into  0x00000055 , 0x0000003f 
+ 00024520  0x00005f7d istore  0x00000001 , 0x00000005 
+ 00024521  0x00005f7e loop  0x00005fc6 
+ 00024522  0x00005f7f fetch  0x00000001 , 0x00000152 
+ 00024523  0x00005f80 fetcht  0x00000001 , 0x00000151 
+ 00024524  0x00005f81 set0  0x00000007 , 0x00000002 
+ 00024525  0x00005f82 set0  0x00000004 , 0x00000002 
+ 00024526  0x00005f83 beq  0x000000ff , 0x00005fda 
+ 00024527  0x00005f84 beq  0x00000000 , 0x00005ff3 
+ 00024528  0x00005f85 beq  0x00000005 , 0x00005fe7 
+ 00024529  0x00005f86 beq  0x00000007 , 0x00005fe6 
+ 00024530  0x00005f87 beq  0x00000006 , 0x00005fe7 
+ 00024531  0x00005f88 beq  0x00000008 , 0x00005fe6 
+ 00024532  0x00005f89 beq  0x00000001 , 0x00005fdf 
+ 00024533  0x00005f8a beq  0x00000002 , 0x00005fdf 
+ 00024534  0x00005f8b beq  0x00000003 , 0x00005fdf 
+ 00024535  0x00005f8c beq  0x00000009 , 0x00005fdf 
+ 00024536  0x00005f8d beq  0x00000004 , 0x00005fdf 
+ 00024537  0x00005f8e rtn 
+ 00024538  0x00005f91 fetch  0x00000001 , 0x00000151 
+ 00024539  0x00005f92 set1  0x00000003 , 0x0000003f 
+ 00024540  0x00005f93 set1  0x00000002 , 0x0000003f 
+ 00024541  0x00005f94 store  0x00000001 , 0x00000151 
+ 00024542  0x00005f95 rtn 
+ 00024543  0x00005f97 set1  0x00000004 , 0x00000002 
+ 00024544  0x00005f98 jam  0x00000005 , 0x00000180 
+ 00024545  0x00005f99 fetch  0x00000002 , 0x00000159 
+ 00024546  0x00005f9a iforce  0x00000039 
+ 00024547  0x00005f9b store  0x00000002 , 0x0000015f 
+ 00024548  0x00005f9c arg  0x00000551 , 0x00000005 
+ 00024549  0x00005f9d call  0x00007f73 
+ 00024550  0x00005f9f set1  0x00000007 , 0x00000002 
+ 00024551  0x00005fa1 set1  0x00000002 , 0x00000002 
+ 00024552  0x00005fa2 force  0x00000000 , 0x0000003f 
+ 00024553  0x00005fa3 store  0x00000001 , 0x0000000b 
+ 00024554  0x00005fa4 store  0x00000002 , 0x000000fa 
+ 00024555  0x00005fa5 store  0x00000002 , 0x000000fc 
+ 00024556  0x00005fa6 store  0x00000002 , 0x000000f8 
+ 00024557  0x00005fa7 store  0x00000002 , 0x000000f6 
+ 00024558  0x00005fa8 fetch  0x00000001 , 0x00000153 
+ 00024559  0x00005fa9 compare  0x00000000 , 0x0000003f , 0x000000ff 
+ 00024560  0x00005faa setflag  0x00000001 , 0x00000006 , 0x00000002 
+ 00024561  0x00005fab storet  0x00000001 , 0x00000151 
+ 00024562  0x00005fac rtn 
+ 00024563  0x00005faf set0  0x00000011 , 0x00000000 
+ 00024564  0x00005fb0 jam  0x00000000 , 0x00000151 
+ 00024565  0x00005fb1 fetch  0x00000001 , 0x0000017f 
+ 00024566  0x00005fb2 set0  0x00000006 , 0x0000003f 
+ 00024567  0x00005fb3 store  0x00000001 , 0x0000017f 
+ 00024568  0x00005fb4 rtn 
+ 00024569  0x00005fbb arg  0x00000552 , 0x00000006 
+ 00024570  0x00005fbc arg  0x00000562 , 0x00000005 
+ 00024571  0x00005fbd branch  0x00007ebf 
+ 00024572  0x00005fc0 jam  0x00000009 , 0x0000007c 
+ 00024573  0x00005fc1 rtn 
+ 00024574  0x00005fc4 nrtn  0x00000029 
+ 00024575  0x00005fc5 jam  0x00000011 , 0x0000007c 
+ 00024576  0x00005fc6 rtn 
+ 00024577  0x00005fc9 arg  0x000040a0 , 0x00000011 
+ 00024578  0x00005fca call  0x00007255 
+ 00024579  0x00005fcb jam  0x00000003 , 0x0000007c 
+ 00024580  0x00005fcc jam  0x00000008 , 0x0000007d 
+ 00024581  0x00005fcd rtn 
+ 00024582  0x00005fd0 jam  0x0000000a , 0x00000072 
+ 00024583  0x00005fd1 jam  0x00000007 , 0x0000007c 
+ 00024584  0x00005fd2 jam  0x00000016 , 0x000004ca 
+ 00024585  0x00005fd3 rtn 
+ 00024586  0x00005fda bpatchx  0x00000082 , 0x00004030 
+ 00024587  0x00005fdb disable  0x00000028 
+ 00024588  0x00005fdc call  0x000062c1 
+ 00024589  0x00005fdd fetch  0x00000001 , 0x00000048 
+ 00024590  0x00005fde rtn  0x00000034 
+ 00024591  0x00005fe3 bbit1  0x00000007 , 0x0000603f 
+ 00024592  0x00005fe5 beq  0x00000001 , 0x0000616f 
+ 00024593  0x00005fe6 beq  0x00000002 , 0x000060e4 
+ 00024594  0x00005fe7 beq  0x00000003 , 0x0000604a 
+ 00024595  0x00005fe8 beq  0x00000004 , 0x00006060 
+ 00024596  0x00005fe9 beq  0x00000027 , 0x000061db 
+ 00024597  0x00005fea beq  0x00000028 , 0x00006108 
+ 00024598  0x00005feb beq  0x00000030 , 0x000060f4 
+ 00024599  0x00005fec beq  0x00000025 , 0x000061d6 
+ 00024600  0x00005fed beq  0x00000026 , 0x00006103 
+ 00024601  0x00005fee beq  0x00000031 , 0x000061c3 
+ 00024602  0x00005fef beq  0x00000037 , 0x0000616a 
+ 00024603  0x00005ff0 beq  0x00000033 , 0x0000615c 
+ 00024604  0x00005ff1 beq  0x00000008 , 0x00006259 
+ 00024605  0x00005ff2 beq  0x00000009 , 0x0000624f 
+ 00024606  0x00005ff3 beq  0x0000000b , 0x00006264 
+ 00024607  0x00005ff4 beq  0x0000000c , 0x0000626d 
+ 00024608  0x00005ff5 beq  0x0000000f , 0x00006162 
+ 00024609  0x00005ff6 beq  0x00000010 , 0x00006292 
+ 00024610  0x00005ff7 beq  0x00000011 , 0x00006288 
+ 00024611  0x00005ff8 beq  0x00000007 , 0x00006152 
+ 00024612  0x00005ff9 beq  0x0000002a , 0x0000617e 
+ 00024613  0x00005ffa beq  0x0000000a , 0x0000617f 
+ 00024614  0x00005ffc beq  0x0000001f , 0x000061bc 
+ 00024615  0x00005ffd beq  0x00000006 , 0x000060f9 
+ 00024616  0x00005ffe beq  0x00000021 , 0x0000615f 
+ 00024617  0x00005fff beq  0x0000002d , 0x000061b2 
+ 00024618  0x00006000 beq  0x0000002e , 0x000061b7 
+ 00024619  0x00006001 beq  0x00000022 , 0x0000615f 
+ 00024620  0x00006002 beq  0x00000034 , 0x00006180 
+ 00024621  0x00006003 beq  0x00000013 , 0x00006195 
+ 00024622  0x00006004 beq  0x00000017 , 0x000061a4 
+ 00024623  0x00006005 beq  0x00000012 , 0x0000628f 
+ 00024624  0x00006006 beq  0x0000002f , 0x000061aa 
+ 00024625  0x00006007 beq  0x00000018 , 0x000061af 
+ 00024626  0x00006008 beq  0x0000003d , 0x000061ff 
+ 00024627  0x00006009 beq  0x0000003e , 0x0000620b 
+ 00024628  0x0000600a beq  0x0000003f , 0x0000621d 
+ 00024629  0x0000600b beq  0x00000040 , 0x00006227 
+ 00024630  0x0000600c beq  0x00000041 , 0x0000623c 
+ 00024631  0x0000600d beq  0x00000023 , 0x0000624b 
+ 00024632  0x0000600e beq  0x0000003b , 0x00006246 
+ 00024633  0x00006010 beq  0x00000005 , 0x0000624c 
+ 00024634  0x00006011 beq  0x00000029 , 0x0000624d 
+ 00024635  0x00006012 beq  0x00000038 , 0x0000624e 
+ 00024636  0x00006013 beq  0x00000039 , 0x00006175 
+ 00024637  0x00006015 branch  0x00002a8c 
+ 00024638  0x00006016 rtn 
+ 00024639  0x00006018 beq  0x00000081 , 0x0000606d 
+ 00024640  0x00006019 beq  0x00000084 , 0x00006099 
+ 00024641  0x0000601a beq  0x00000082 , 0x00006076 
+ 00024642  0x0000601b beq  0x00000083 , 0x0000610d 
+ 00024643  0x0000601c beq  0x0000008b , 0x00006118 
+ 00024644  0x0000601d beq  0x00000097 , 0x0000614e 
+ 00024645  0x0000601e beq  0x00000099 , 0x000060d5 
+ 00024646  0x0000601f beq  0x0000009a , 0x000060a4 
+ 00024647  0x00006020 beq  0x00000095 , 0x000060da 
+ 00024648  0x00006021 beq  0x00000096 , 0x000060db 
+ 00024649  0x00006022 branch  0x00002a8c 
+ 00024650  0x00006029 force  0x00000002 , 0x0000003f 
+ 00024651  0x0000602a call  0x00006298 
+ 00024652  0x0000602b fetch  0x00000001 , 0x00000049 
+ 00024653  0x0000602c istore  0x00000001 , 0x00000005 
+ 00024654  0x0000602d call  0x000062a7 
+ 00024655  0x0000602e bpatchx  0x00000083 , 0x00004030 
+ 00024656  0x0000602f fetch  0x00000001 , 0x00000049 
+ 00024657  0x00006030 beq  0x00000008 , 0x00006080 
+ 00024658  0x00006031 beq  0x0000000f , 0x00006084 
+ 00024659  0x00006032 beq  0x00000010 , 0x0000608f 
+ 00024660  0x00006033 beq  0x00000017 , 0x0000605f 
+ 00024661  0x00006034 beq  0x00000033 , 0x00006092 
+ 00024662  0x00006035 beq  0x00000041 , 0x00006098 
+ 00024663  0x00006036 beq  0x00000011 , 0x00006059 
+ 00024664  0x00006037 rtn 
+ 00024665  0x0000603a fetch  0x00000001 , 0x00000055 
+ 00024666  0x0000603b rtn  0x00000034 
+ 00024667  0x0000603c jam  0x0000001b , 0x00000055 
+ 00024668  0x0000603d setarg  0x0000000c 
+ 00024669  0x0000603e arg  0x00000007 , 0x00000007 
+ 00024670  0x0000603f branch  0x00007f08 
+ 00024671  0x00006042 branch  0x000026c6 
+ 00024672  0x00006044 force  0x00000003 , 0x0000003f 
+ 00024673  0x00006045 call  0x00006298 
+ 00024674  0x00006046 fetch  0x00000001 , 0x00000049 
+ 00024675  0x00006047 beq  0x0000000b , 0x00006068 
+ 00024676  0x00006048 istore  0x00000001 , 0x00000005 
+ 00024677  0x00006049 fetch  0x00000001 , 0x0000004a 
+ 00024678  0x0000604a istore  0x00000001 , 0x00000005 
+ 00024679  0x0000604b branch  0x000062a7 
+ 00024680  0x0000604e istore  0x00000001 , 0x00000005 
+ 00024681  0x0000604f fetch  0x00000001 , 0x0000004a 
+ 00024682  0x00006050 istore  0x00000001 , 0x00000005 
+ 00024683  0x00006051 arg  0x000004d5 , 0x00000002 
+ 00024684  0x00006052 branch  0x000062e2 
+ 00024685  0x00006055 force  0x00000004 , 0x00000007 
+ 00024686  0x00006056 call  0x000062a0 
+ 00024687  0x00006057 setarg  0x0000007f 
+ 00024688  0x00006058 istore  0x00000001 , 0x00000005 
+ 00024689  0x00006059 fetch  0x00000001 , 0x00000049 
+ 00024690  0x0000605a set0  0x00000007 , 0x0000003f 
+ 00024691  0x0000605b istore  0x00000001 , 0x00000005 
+ 00024692  0x0000605c fetch  0x00000001 , 0x00000049 
+ 00024693  0x0000605d branch  0x000062a7 
+ 00024694  0x00006060 force  0x00000005 , 0x00000007 
+ 00024695  0x00006061 call  0x000062a0 
+ 00024696  0x00006062 setarg  0x0000007f 
+ 00024697  0x00006063 istore  0x00000001 , 0x00000005 
+ 00024698  0x00006064 fetch  0x00000001 , 0x00000049 
+ 00024699  0x00006065 set0  0x00000007 , 0x0000003f 
+ 00024700  0x00006066 istore  0x00000001 , 0x00000005 
+ 00024701  0x00006067 fetch  0x00000001 , 0x0000004a 
+ 00024702  0x00006068 istore  0x00000001 , 0x00000005 
+ 00024703  0x00006069 branch  0x000062a7 
+ 00024704  0x0000606d call  0x0000244f 
+ 00024705  0x0000606e call  0x000062f3 
+ 00024706  0x0000606f rtn  0x00000001 
+ 00024707  0x00006070 branch  0x00005ffc 
+ 00024708  0x00006073 fetch  0x00000001 , 0x0000004b 
+ 00024709  0x00006074 bbit1  0x00000005 , 0x0000608b 
+ 00024710  0x00006075 rtnbit0  0x00000004 
+ 00024711  0x00006076 jam  0x00000012 , 0x0000007c 
+ 00024712  0x00006077 set0  0x00000004 , 0x0000003f 
+ 00024713  0x00006078 call  0x000062eb 
+ 00024714  0x00006079 branch  0x0000608d 
+ 00024715  0x0000607b jam  0x00000010 , 0x0000007c 
+ 00024716  0x0000607c set0  0x00000005 , 0x0000003f 
+ 00024717  0x0000607e store  0x00000001 , 0x0000004b 
+ 00024718  0x0000607f rtn 
+ 00024719  0x00006082 call  0x000062fc 
+ 00024720  0x00006083 branch  0x00005ffe , 0x00000001 
+ 00024721  0x00006084 rtn 
+ 00024722  0x00006087 jam  0x0000008b , 0x0000007c 
+ 00024723  0x00006089 fetch  0x00000001 , 0x000004d1 
+ 00024724  0x0000608a set1  0x00000000 , 0x0000003f 
+ 00024725  0x0000608b store  0x00000001 , 0x000004d1 
+ 00024726  0x0000608c jam  0x00000001 , 0x00000a99 
+ 00024727  0x0000608d branch  0x00007d86 
+ 00024728  0x00006091 rtn 
+ 00024729  0x00006096 force  0x0000000c , 0x00000007 
+ 00024730  0x00006097 call  0x000062a0 
+ 00024731  0x00006098 setarg  0x00000001 
+ 00024732  0x00006099 istore  0x00000001 , 0x00000005 
+ 00024733  0x0000609a fetch  0x00000002 , 0x000004ce 
+ 00024734  0x0000609b istore  0x00000002 , 0x00000005 
+ 00024735  0x0000609c setarg  0x00000000 
+ 00024736  0x0000609d istore  0x00000003 , 0x00000005 
+ 00024737  0x0000609e setarg  0x00000000 
+ 00024738  0x0000609f istore  0x00000004 , 0x00000005 
+ 00024739  0x000060a0 branch  0x000062b0 
+ 00024740  0x000060a2 force  0x00000005 , 0x00000007 
+ 00024741  0x000060a3 call  0x000062a0 
+ 00024742  0x000060a4 fetch  0x00000003 , 0x0000465b 
+ 00024743  0x000060a5 istore  0x00000003 , 0x00000005 
+ 00024744  0x000060a6 call  0x000062b0 
+ 00024745  0x000060a7 jam  0x00000001 , 0x00004665 
+ 00024746  0x000060a8 fetch  0x00000001 , 0x0000465b 
+ 00024747  0x000060a9 beq  0x00000001 , 0x000060b5 
+ 00024748  0x000060aa beq  0x00000002 , 0x000060af 
+ 00024749  0x000060ab beq  0x00000003 , 0x000060bb 
+ 00024750  0x000060ac rtn 
+ 00024751  0x000060af fetch  0x00000001 , 0x0000465e 
+ 00024752  0x000060b0 beq  0x00000000 , 0x000060c7 
+ 00024753  0x000060b1 beq  0x00000001 , 0x000060c7 
+ 00024754  0x000060b2 beq  0x00000002 , 0x000060c7 
+ 00024755  0x000060b3 beq  0x00000003 , 0x000060c1 
+ 00024756  0x000060b4 rtn 
+ 00024757  0x000060b8 fetch  0x00000001 , 0x0000465e 
+ 00024758  0x000060b9 beq  0x00000000 , 0x000060c1 
+ 00024759  0x000060ba beq  0x00000001 , 0x000060c5 
+ 00024760  0x000060bb beq  0x00000002 , 0x000060c7 
+ 00024761  0x000060bc beq  0x00000003 , 0x000060c1 
+ 00024762  0x000060bd rtn 
+ 00024763  0x000060c1 fetch  0x00000001 , 0x0000465e 
+ 00024764  0x000060c2 beq  0x00000000 , 0x000060c1 
+ 00024765  0x000060c3 beq  0x00000001 , 0x000060c1 
+ 00024766  0x000060c4 beq  0x00000002 , 0x000060c1 
+ 00024767  0x000060c5 beq  0x00000003 , 0x000060c1 
+ 00024768  0x000060c6 rtn 
+ 00024769  0x000060d0 jam  0x00000003 , 0x00004662 
+ 00024770  0x000060d1 fetch  0x00000001 , 0x0000455c 
+ 00024771  0x000060d2 bbit1  0x00000000 , 0x000033e9 
+ 00024772  0x000060d3 rtn 
+ 00024773  0x000060d7 jam  0x00000001 , 0x00004662 
+ 00024774  0x000060d8 rtn 
+ 00024775  0x000060df jam  0x00000002 , 0x00004662 
+ 00024776  0x000060e0 rtn 
+ 00024777  0x000060e4 arg  0x00000000 , 0x00000007 
+ 00024778  0x000060e5 branch  0x000060cd 
+ 00024779  0x000060e8 arg  0x00000000 , 0x00000007 
+ 00024780  0x000060e9 branch  0x000060d1 
+ 00024781  0x000060ec fetch  0x00000001 , 0x0000455c 
+ 00024782  0x000060ed qset1  0x0000003f 
+ 00024783  0x000060ee store  0x00000001 , 0x0000455c 
+ 00024784  0x000060ef rtn 
+ 00024785  0x000060f2 fetch  0x00000001 , 0x0000455c 
+ 00024786  0x000060f3 qset0  0x0000003f 
+ 00024787  0x000060f4 store  0x00000001 , 0x0000455c 
+ 00024788  0x000060f5 rtn 
+ 00024789  0x000060f9 force  0x00000005 , 0x00000007 
+ 00024790  0x000060fa call  0x000062a0 
+ 00024791  0x000060fb fetch  0x00000003 , 0x0000465b 
+ 00024792  0x000060fc istore  0x00000003 , 0x00000005 
+ 00024793  0x000060fd branch  0x000062b2 
+ 00024794  0x00006102 rtn 
+ 00024795  0x00006104 force  0x00000009 , 0x00000007 
+ 00024796  0x00006105 call  0x000062a0 
+ 00024797  0x00006106 fetch  0x00000001 , 0x00000095 
+ 00024798  0x00006107 istore  0x00000001 , 0x00000005 
+ 00024799  0x00006108 fetch  0x00000002 , 0x00000096 
+ 00024800  0x00006109 istore  0x00000002 , 0x00000005 
+ 00024801  0x0000610a fetch  0x00000004 , 0x00000091 
+ 00024802  0x0000610b istore  0x00000004 , 0x00000005 
+ 00024803  0x0000610c branch  0x000062b0 
+ 00024804  0x0000610f force  0x00000011 , 0x0000003f 
+ 00024805  0x00006110 call  0x00006298 
+ 00024806  0x00006111 fetch  0x00000001 , 0x00000049 
+ 00024807  0x00006112 copy  0x0000003f , 0x00000002 
+ 00024808  0x00006113 beq  0x00000000 , 0x000060ec 
+ 00024809  0x00006114 beq  0x0000000e , 0x000060ec 
+ 00024810  0x00006115 beq  0x0000001c , 0x000060ec 
+ 00024811  0x00006116 rtn 
+ 00024812  0x00006118 istore  0x00000001 , 0x00000005 
+ 00024813  0x00006119 fetch  0x00000001 , 0x00004515 
+ 00024814  0x0000611a istore  0x00000001 , 0x00000005 
+ 00024815  0x0000611b arg  0x0000000e , 0x00000039 
+ 00024816  0x0000611c setarg  0x00004516 
+ 00024817  0x0000611d iadd  0x00000002 , 0x00000006 
+ 00024818  0x0000611e call  0x00007f01 
+ 00024819  0x0000611f branch  0x000062b0 
+ 00024820  0x00006123 force  0x00000003 , 0x0000003f 
+ 00024821  0x00006124 call  0x00006298 
+ 00024822  0x00006125 setarg  0x00000114 
+ 00024823  0x00006126 istore  0x00000002 , 0x00000005 
+ 00024824  0x00006127 branch  0x000062b0 
+ 00024825  0x0000612b force  0x00000003 , 0x0000003f 
+ 00024826  0x0000612c call  0x00006298 
+ 00024827  0x0000612d fetch  0x00000004 , 0x00000165 
+ 00024828  0x0000612e isub  0x00000022 , 0x0000003f 
+ 00024829  0x0000612f branch  0x000060ff , 0x00000029 
+ 00024830  0x00006130 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00024831  0x00006133 rshift2  0x0000003f , 0x0000003f 
+ 00024832  0x00006134 set0  0x0000000f , 0x0000003f 
+ 00024833  0x00006135 istore  0x00000002 , 0x00000005 
+ 00024834  0x00006136 branch  0x000062b0 
+ 00024835  0x00006139 force  0x00000006 , 0x0000003f 
+ 00024836  0x0000613a call  0x00006298 
+ 00024837  0x0000613b fetch  0x00000005 , 0x00004510 
+ 00024838  0x0000613c istore  0x00000005 , 0x00000005 
+ 00024839  0x0000613d branch  0x000062b0 
+ 00024840  0x00006140 force  0x00000009 , 0x0000003f 
+ 00024841  0x00006141 call  0x00006298 
+ 00024842  0x00006142 fetch  0x00000008 , 0x00004098 
+ 00024843  0x00006143 istore  0x00000008 , 0x00000005 
+ 00024844  0x00006144 branch  0x000062b0 
+ 00024845  0x0000614c force  0x0000000c , 0x00000007 
+ 00024846  0x0000614d call  0x000062a0 
+ 00024847  0x0000614e setarg  0x00000001 
+ 00024848  0x0000614f istore  0x00000001 , 0x00000005 
+ 00024849  0x00006150 fetch  0x00000002 , 0x000004ce 
+ 00024850  0x00006151 istore  0x00000002 , 0x00000005 
+ 00024851  0x00006152 setarg  0x00000000 
+ 00024852  0x00006153 istore  0x00000003 , 0x00000005 
+ 00024853  0x00006154 setarg  0x00000000 
+ 00024854  0x00006155 istore  0x00000004 , 0x00000005 
+ 00024855  0x00006156 branch  0x000062b2 
+ 00024856  0x00006159 force  0x00000003 , 0x00000007 
+ 00024857  0x0000615a call  0x000062a0 
+ 00024858  0x0000615b fetch  0x00000001 , 0x0000415a 
+ 00024859  0x0000615c istore  0x00000001 , 0x00000005 
+ 00024860  0x0000615d disable  0x00000028 
+ 00024861  0x0000615e call  0x000062b2 
+ 00024862  0x0000615f nrtn  0x00000028 
+ 00024863  0x00006160 nrtn  0x00000029 
+ 00024864  0x00006161 fetch  0x00000001 , 0x000040d8 
+ 00024865  0x00006162 rtnbit0  0x00000000 
+ 00024866  0x00006163 call  0x00006132 
+ 00024867  0x00006164 branch  0x0000613c 
+ 00024868  0x00006168 bpatchx  0x00000084 , 0x00004030 
+ 00024869  0x00006169 fetch  0x00000001 , 0x0000409e 
+ 00024870  0x0000616a set1  0x00000003 , 0x0000003f 
+ 00024871  0x0000616b store  0x00000001 , 0x0000409e 
+ 00024872  0x0000616c setarg  0x00000101 
+ 00024873  0x0000616d store  0x00000002 , 0x000004ce 
+ 00024874  0x0000616e rtn 
+ 00024875  0x00006171 bpatchx  0x00000085 , 0x00004030 
+ 00024876  0x00006172 fetch  0x00000001 , 0x0000409e 
+ 00024877  0x00006173 set0  0x00000003 , 0x0000003f 
+ 00024878  0x00006174 store  0x00000001 , 0x0000409e 
+ 00024879  0x00006175 setarg  0x00000000 
+ 00024880  0x00006176 store  0x00000002 , 0x000004ce 
+ 00024881  0x00006177 rtn 
+ 00024882  0x0000617a jam  0x00000003 , 0x000040d8 
+ 00024883  0x0000617b setarg  0x00000000 
+ 00024884  0x0000617c store  0x00000004 , 0x00004142 
+ 00024885  0x0000617d arg  0x000040da , 0x00000005 
+ 00024886  0x0000617e call  0x00006140 
+ 00024887  0x0000617f arg  0x000040e7 , 0x00000005 
+ 00024888  0x00006180 call  0x00006140 
+ 00024889  0x00006181 arg  0x00004146 , 0x00000005 
+ 00024890  0x00006182 call  0x00006140 
+ 00024891  0x00006183 branch  0x00006147 
+ 00024892  0x00006185 arg  0x000040e7 , 0x00000005 
+ 00024893  0x00006186 call  0x00006140 
+ 00024894  0x00006187 call  0x00006147 
+ 00024895  0x00006188 branch  0x0000614a 
+ 00024896  0x0000618c setarg  0x00ffffff 
+ 00024897  0x0000618d istore  0x00000003 , 0x00000005 
+ 00024898  0x0000618e istore  0x00000003 , 0x00000005 
+ 00024899  0x0000618f istore  0x00000003 , 0x00000005 
+ 00024900  0x00006190 setarg  0x0000007f 
+ 00024901  0x00006191 istore  0x00000001 , 0x00000005 
+ 00024902  0x00006192 rtn 
+ 00024903  0x00006194 setarg  0x00000000 
+ 00024904  0x00006195 store  0x00000002 , 0x000040d6 
+ 00024905  0x00006196 rtn 
+ 00024906  0x00006198 fetch  0x00000001 , 0x000040d8 
+ 00024907  0x00006199 set1  0x00000002 , 0x0000003f 
+ 00024908  0x0000619a store  0x00000001 , 0x000040d8 
+ 00024909  0x0000619b rtn 
+ 00024910  0x0000619f force  0x00000002 , 0x00000007 
+ 00024911  0x000061a0 call  0x000062a0 
+ 00024912  0x000061a1 nbranch  0x000062b0 , 0x00000029 
+ 00024913  0x000061a3 branch  0x000062b2 
+ 00024914  0x000061a8 force  0x00000002 , 0x0000003f 
+ 00024915  0x000061a9 call  0x00006298 
+ 00024916  0x000061aa fetch  0x00000001 , 0x000004ca 
+ 00024917  0x000061ab istore  0x00000001 , 0x00000005 
+ 00024918  0x000061ac call  0x000062b2 
+ 00024919  0x000061ae fetch  0x00000001 , 0x0000004b 
+ 00024920  0x000061af set1  0x00000003 , 0x0000003f 
+ 00024921  0x000061b0 store  0x00000001 , 0x0000004b 
+ 00024922  0x000061b1 jam  0x00000032 , 0x00000072 
+ 00024923  0x000061b2 rtn 
+ 00024924  0x000061b6 force  0x00000001 , 0x0000003f 
+ 00024925  0x000061b7 call  0x00006298 
+ 00024926  0x000061b8 branch  0x000062b2 
+ 00024927  0x000061ba force  0x00000001 , 0x0000003f 
+ 00024928  0x000061bb call  0x00006298 
+ 00024929  0x000061bc branch  0x000062b0 
+ 00024930  0x000061c0 force  0x00000002 , 0x0000003f 
+ 00024931  0x000061c1 call  0x00006298 
+ 00024932  0x000061c2 fetch  0x00000001 , 0x0000004c 
+ 00024933  0x000061c3 isolate0  0x00000002 , 0x0000003f 
+ 00024934  0x000061c4 setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00024935  0x000061c5 and_into  0x00000001 , 0x0000003f 
+ 00024936  0x000061c6 istore  0x00000001 , 0x00000005 
+ 00024937  0x000061c7 branch  0x000062b2 
+ 00024938  0x000061cb force  0x00000003 , 0x0000003f 
+ 00024939  0x000061cc call  0x00006298 
+ 00024940  0x000061cd fetch  0x00000002 , 0x00000051 
+ 00024941  0x000061ce istore  0x00000002 , 0x00000005 
+ 00024942  0x000061cf branch  0x000062b2 
+ 00024943  0x000061d2 jam  0x000000fa , 0x00000072 
+ 00024944  0x000061d3 force  0x00000002 , 0x0000003f 
+ 00024945  0x000061d4 call  0x00006298 
+ 00024946  0x000061d5 fetch  0x00000001 , 0x00000053 
+ 00024947  0x000061d6 istore  0x00000001 , 0x00000005 
+ 00024948  0x000061d7 branch  0x000062b2 
+ 00024949  0x000061da force  0x0000000a , 0x0000003f 
+ 00024950  0x000061db call  0x00006298 
+ 00024951  0x000061dc arg  0x00000152 , 0x00000006 
+ 00024952  0x000061dd force  0x00000009 , 0x00000039 
+ 00024953  0x000061df ifetch  0x00000001 , 0x00000006 
+ 00024954  0x000061e0 xor_into  0x00000055 , 0x0000003f 
+ 00024955  0x000061e1 istore  0x00000001 , 0x00000005 
+ 00024956  0x000061e2 loop  0x00006179 
+ 00024957  0x000061e3 branch  0x000062b2 
+ 00024958  0x000061e6 branch  0x000062b2 
+ 00024959  0x000061e8 branch  0x000062b2 
+ 00024960  0x000061eb rtn  0x00000029 
+ 00024961  0x000061ec call  0x0000282d 
+ 00024962  0x000061ed force  0x00000009 , 0x0000003f 
+ 00024963  0x000061ee call  0x00006298 
+ 00024964  0x000061ef fetch  0x00000002 , 0x00000171 
+ 00024965  0x000061f0 istore  0x00000002 , 0x00000005 
+ 00024966  0x000061f1 fetch  0x00000003 , 0x000040a0 
+ 00024967  0x000061f2 istore  0x00000003 , 0x00000005 
+ 00024968  0x000061f3 fetch  0x00000001 , 0x000040a3 
+ 00024969  0x000061f4 istore  0x00000001 , 0x00000005 
+ 00024970  0x000061f5 fetch  0x00000002 , 0x000040a4 
+ 00024971  0x000061f6 istore  0x00000002 , 0x00000005 
+ 00024972  0x000061f7 bmark0  0x00000003 , 0x00006191 
+ 00024973  0x000061f8 set0  0x00000003 , 0x00000000 
+ 00024974  0x000061f9 call  0x000062b2 
+ 00024975  0x000061fa jam  0x00000013 , 0x0000007c 
+ 00024976  0x000061fb rtn 
+ 00024977  0x000061fd call  0x000062b0 
+ 00024978  0x000061fe jam  0x00000003 , 0x0000007c 
+ 00024979  0x000061ff jam  0x00000013 , 0x0000007d 
+ 00024980  0x00006200 rtn 
+ 00024981  0x00006203 arg  0x00000200 , 0x00000002 
+ 00024982  0x00006204 branch  0x00006199 , 0x00000029 
+ 00024983  0x00006205 deposit  0x00000028 
+ 00024984  0x00006206 branch  0x0000619a 
+ 00024985  0x00006208 deposit  0x00000022 
+ 00024986  0x0000620a deposit  0x00000021 
+ 00024987  0x0000620b iadd  0x00000002 , 0x0000003f 
+ 00024988  0x0000620c and_into  0x000001fc , 0x0000003f 
+ 00024989  0x0000620d store  0x00000004 , 0x00000034 
+ 00024990  0x0000620e force  0x00000005 , 0x0000003f 
+ 00024991  0x0000620f call  0x00006298 
+ 00024992  0x00006210 fetch  0x00000004 , 0x00000034 
+ 00024993  0x00006211 rshift  0x0000003f , 0x0000003f 
+ 00024994  0x00006212 istore  0x00000004 , 0x00000005 
+ 00024995  0x00006213 branch  0x000062b2 
+ 00024996  0x00006216 force  0x0000000a , 0x0000003f 
+ 00024997  0x00006217 call  0x00006298 
+ 00024998  0x00006218 arg  0x000004d9 , 0x00000006 
+ 00024999  0x00006219 ifetch  0x00000009 , 0x00000006 
+ 00025000  0x0000621a istore  0x00000009 , 0x00000005 
+ 00025001  0x0000621b branch  0x000062b2 
+ 00025002  0x00006220 force  0x00000003 , 0x0000003f 
+ 00025003  0x00006221 call  0x00006298 
+ 00025004  0x00006222 setarg  0x00000114 
+ 00025005  0x00006223 istore  0x00000002 , 0x00000005 
+ 00025006  0x00006224 branch  0x000062b2 
+ 00025007  0x00006228 force  0x00000001 , 0x0000003f 
+ 00025008  0x00006229 call  0x00006298 
+ 00025009  0x00006232 branch  0x000062b2 
+ 00025010  0x00006236 force  0x00000002 , 0x0000003f 
+ 00025011  0x00006237 call  0x00006298 
+ 00025012  0x00006238 fetch  0x00000001 , 0x000040d0 
+ 00025013  0x00006239 istore  0x00000001 , 0x00000005 
+ 00025014  0x0000623a branch  0x000062b2 
+ 00025015  0x0000623e force  0x00000002 , 0x0000003f 
+ 00025016  0x0000623f call  0x00006298 
+ 00025017  0x00006240 setarg  0x00000005 
+ 00025018  0x00006241 istore  0x00000001 , 0x00000005 
+ 00025019  0x00006242 branch  0x000062b2 
+ 00025020  0x00006246 force  0x00000002 , 0x0000003f 
+ 00025021  0x00006247 call  0x00006298 
+ 00025022  0x00006248 setarg  0x00000000 
+ 00025023  0x00006249 istore  0x00000001 , 0x00000005 
+ 00025024  0x0000624a branch  0x000062b2 
+ 00025025  0x0000624e jam  0x0000002e , 0x0000007c 
+ 00025026  0x0000624f rtn 
+ 00025027  0x00006251 fetch  0x00000001 , 0x00004092 
+ 00025028  0x00006252 sub  0x0000003f , 0x0000000a , 0x0000003e 
+ 00025029  0x00006253 call  0x000061c1 , 0x00000005 
+ 00025030  0x00006254 fetch  0x00000001 , 0x00000030 
+ 00025031  0x00006255 set1  0x00000004 , 0x0000003f 
+ 00025032  0x00006256 store  0x00000001 , 0x00000030 
+ 00025033  0x00006257 copy  0x00000022 , 0x0000003f 
+ 00025034  0x00006258 store  0x00000004 , 0x000004e9 
+ 00025035  0x00006259 fetch  0x00000001 , 0x000004d1 
+ 00025036  0x0000625a bbit1  0x00000003 , 0x000061d4 
+ 00025037  0x0000625b set1  0x00000003 , 0x0000003f 
+ 00025038  0x0000625c store  0x00000001 , 0x000004d1 
+ 00025039  0x0000625d jam  0x00000005 , 0x00000a99 
+ 00025040  0x0000625e call  0x00007d86 
+ 00025041  0x0000625f force  0x00000001 , 0x0000003f 
+ 00025042  0x00006260 call  0x00006298 
+ 00025043  0x00006261 branch  0x000062b2 
+ 00025044  0x00006263 jam  0x00000000 , 0x00000048 
+ 00025045  0x00006264 rtn 
+ 00025046  0x00006267 force  0x00000006 , 0x0000003f 
+ 00025047  0x00006268 call  0x00006298 
+ 00025048  0x00006269 fetch  0x00000005 , 0x00004510 
+ 00025049  0x0000626a istore  0x00000005 , 0x00000005 
+ 00025050  0x0000626b branch  0x000062b2 
+ 00025051  0x0000626e force  0x00000009 , 0x0000003f 
+ 00025052  0x0000626f call  0x00006298 
+ 00025053  0x00006270 fetch  0x00000008 , 0x00004098 
+ 00025054  0x00006271 istore  0x00000008 , 0x00000005 
+ 00025055  0x00006272 branch  0x000062b2 
+ 00025056  0x00006275 jam  0x00000001 , 0x000009b1 
+ 00025057  0x00006276 fetch  0x00000001 , 0x000045b1 
+ 00025058  0x00006277 rtnne  0x00000001 
+ 00025059  0x00006278 jam  0x00000013 , 0x000009af 
+ 00025060  0x00006279 rtn 
+ 00025061  0x0000627c call  0x000062ef 
+ 00025062  0x0000627d jam  0x00000099 , 0x0000007c 
+ 00025063  0x0000627e jam  0x00000003 , 0x000009af 
+ 00025064  0x0000627f rtn 
+ 00025065  0x00006283 call  0x000062ef 
+ 00025066  0x00006284 jam  0x0000003d , 0x0000007c 
+ 00025067  0x00006285 jam  0x00000007 , 0x000009af 
+ 00025068  0x00006286 rtn 
+ 00025069  0x00006289 arg  0x00000a4e , 0x00000011 
+ 00025070  0x0000628a arg  0x00000a6e , 0x00000012 
+ 00025071  0x0000628b arg  0x00000010 , 0x00000039 
+ 00025072  0x0000628c call  0x00007f88 
+ 00025073  0x0000628d branch  0x000061f7 , 0x00000005 
+ 00025074  0x0000628e jam  0x00000000 , 0x000009af 
+ 00025075  0x0000628f call  0x000076da 
+ 00025076  0x00006290 jam  0x00000024 , 0x0000007e 
+ 00025077  0x00006291 jam  0x00000040 , 0x0000007d 
+ 00025078  0x00006292 branch  0x00005d53 
+ 00025079  0x00006294 jam  0x0000000a , 0x000009af 
+ 00025080  0x00006295 call  0x000076d8 
+ 00025081  0x00006296 jam  0x00000040 , 0x0000007d 
+ 00025082  0x00006297 branch  0x00005e38 
+ 00025083  0x0000629c jam  0x00000040 , 0x0000007c 
+ 00025084  0x0000629d rtn 
+ 00025085  0x000062a4 jam  0x0000003d , 0x0000007c 
+ 00025086  0x000062a6 rtn 
+ 00025087  0x000062ad jam  0x00000000 , 0x000009b6 
+ 00025088  0x000062ae force  0x00000004 , 0x0000003f 
+ 00025089  0x000062af call  0x00006298 
+ 00025090  0x000062b0 force  0x00000001 , 0x0000003f 
+ 00025091  0x000062b1 istore  0x00000001 , 0x00000005 
+ 00025092  0x000062b2 force  0x00000001 , 0x0000003f 
+ 00025093  0x000062b3 istore  0x00000001 , 0x00000005 
+ 00025094  0x000062b4 force  0x00000030 , 0x0000003f 
+ 00025095  0x000062b5 istore  0x00000001 , 0x00000005 
+ 00025096  0x000062b6 call  0x000062fc 
+ 00025097  0x000062b7 branch  0x000062b2 , 0x00000001 
+ 00025098  0x000062b8 branch  0x000062b0 
+ 00025099  0x000062bc force  0x00000011 , 0x0000003f 
+ 00025100  0x000062bd call  0x00006298 
+ 00025101  0x000062be fetch  0x00000001 , 0x000009b6 
+ 00025102  0x000062bf arg  0x0000462a , 0x00000006 
+ 00025103  0x000062c0 iadd  0x00000006 , 0x00000006 
+ 00025104  0x000062c1 ifetch  0x00000008 , 0x00000006 
+ 00025105  0x000062c2 istore  0x00000008 , 0x00000005 
+ 00025106  0x000062c3 ifetch  0x00000008 , 0x00000006 
+ 00025107  0x000062c4 istore  0x00000008 , 0x00000005 
+ 00025108  0x000062c5 fetch  0x00000001 , 0x000009b6 
+ 00025109  0x000062c6 increase  0x00000010 , 0x0000003f 
+ 00025110  0x000062c7 store  0x00000001 , 0x000009b6 
+ 00025111  0x000062c8 call  0x000062fc 
+ 00025112  0x000062c9 branch  0x000062b2 , 0x00000001 
+ 00025113  0x000062ca branch  0x000062b0 
+ 00025114  0x000062ce jam  0x00000006 , 0x000009ae 
+ 00025115  0x000062cf jam  0x0000003f , 0x0000007c 
+ 00025116  0x000062d0 rtn 
+ 00025117  0x000062d4 force  0x00000011 , 0x0000003f 
+ 00025118  0x000062d5 call  0x00006298 
+ 00025119  0x000062d6 arg  0x00000a4e , 0x00000006 
+ 00025120  0x000062d7 ifetch  0x00000008 , 0x00000006 
+ 00025121  0x000062d8 istore  0x00000008 , 0x00000005 
+ 00025122  0x000062d9 ifetch  0x00000008 , 0x00000006 
+ 00025123  0x000062da istore  0x00000008 , 0x00000005 
+ 00025124  0x000062db branch  0x000062b0 
+ 00025125  0x000062de jam  0x00000040 , 0x0000007c 
+ 00025126  0x000062df rtn 
+ 00025127  0x000062e3 call  0x000062fc 
+ 00025128  0x000062e4 call  0x00007612 , 0x00000001 
+ 00025129  0x000062e5 force  0x00000011 , 0x0000003f 
+ 00025130  0x000062e6 call  0x00006298 
+ 00025131  0x000062e7 arg  0x00000a1e , 0x00000006 
+ 00025132  0x000062e8 ifetch  0x00000008 , 0x00000006 
+ 00025133  0x000062e9 istore  0x00000008 , 0x00000005 
+ 00025134  0x000062ea ifetch  0x00000008 , 0x00000006 
+ 00025135  0x000062eb istore  0x00000008 , 0x00000005 
+ 00025136  0x000062ec call  0x000062fc 
+ 00025137  0x000062ed nbranch  0x000062b0 , 0x00000001 
+ 00025138  0x000062ee branch  0x000062b2 , 0x00000001 
+ 00025139  0x000062f2 jam  0x0000000f , 0x000009af 
+ 00025140  0x000062f4 call  0x000062ef 
+ 00025141  0x000062f5 jam  0x0000000b , 0x0000007c 
+ 00025142  0x000062f6 call  0x00006307 
+ 00025143  0x000062f7 branch  0x0000764e , 0x00000001 
+ 00025144  0x000062f8 branch  0x00007658 
+ 00025145  0x000062fa call  0x000062eb 
+ 00025146  0x000062fc jam  0x00000041 , 0x0000007c 
+ 00025147  0x000062fd rtn 
+ 00025148  0x00006300 force  0x00000011 , 0x0000003f 
+ 00025149  0x00006301 call  0x00006298 
+ 00025150  0x00006302 arg  0x00000a4e , 0x00000006 
+ 00025151  0x00006303 ifetch  0x00000008 , 0x00000006 
+ 00025152  0x00006304 istore  0x00000008 , 0x00000005 
+ 00025153  0x00006305 ifetch  0x00000008 , 0x00000006 
+ 00025154  0x00006306 istore  0x00000008 , 0x00000005 
+ 00025155  0x00006307 call  0x000062fc 
+ 00025156  0x00006308 nbranch  0x000062b0 , 0x00000001 
+ 00025157  0x00006309 branch  0x000062b2 , 0x00000001 
+ 00025158  0x0000630c force  0x00000003 , 0x0000003f 
+ 00025159  0x0000630d call  0x00006298 
+ 00025160  0x0000630e setarg  0x0000fffe 
+ 00025161  0x0000630f istore  0x00000002 , 0x00000005 
+ 00025162  0x00006310 branch  0x000062b0 
+ 00025163  0x00006313 branch  0x000062b2 
+ 00025164  0x00006315 branch  0x000062b2 
+ 00025165  0x00006317 branch  0x000062b2 
+ 00025166  0x00006319 branch  0x000062b2 
+ 00025167  0x0000631f call  0x0000630b 
+ 00025168  0x00006320 arg  0x000040a0 , 0x00000011 
+ 00025169  0x00006321 call  0x00006311 
+ 00025170  0x00006322 force  0x00000011 , 0x0000003f 
+ 00025171  0x00006323 call  0x00006298 
+ 00025172  0x00006324 arg  0x00000582 , 0x00000011 
+ 00025173  0x00006325 arg  0x00000562 , 0x00000012 
+ 00025174  0x00006326 call  0x00007352 
+ 00025175  0x00006327 nbranch  0x000062a7 , 0x00000029 
+ 00025176  0x00006328 branch  0x000062ad 
+ 00025177  0x0000632b call  0x0000630b 
+ 00025178  0x0000632c arg  0x00000040 , 0x00000011 
+ 00025179  0x0000632d call  0x00007255 
+ 00025180  0x0000632f force  0x00000011 , 0x0000003f 
+ 00025181  0x00006330 call  0x00006298 
+ 00025182  0x00006331 arg  0x00000562 , 0x00000006 
+ 00025183  0x00006332 call  0x00007ebf 
+ 00025184  0x00006333 fetch  0x00000001 , 0x00000055 
+ 00025185  0x00006334 beq  0x00000019 , 0x000062b2 
+ 00025186  0x00006335 beq  0x00000018 , 0x000062b2 
+ 00025187  0x00006336 branch  0x000062ad 
+ 00025188  0x00006339 fetch  0x00000001 , 0x000009b5 
+ 00025189  0x0000633a branch  0x0000626a , 0x00000034 
+ 00025190  0x0000633b call  0x000062fc 
+ 00025191  0x0000633c call  0x000062ef , 0x00000001 
+ 00025192  0x0000633d ncall  0x000062eb , 0x00000001 
+ 00025193  0x0000633e branch  0x0000626b 
+ 00025194  0x00006340 call  0x000062ef 
+ 00025195  0x00006342 call  0x0000630b 
+ 00025196  0x00006343 branch  0x0000625c 
+ 00025197  0x00006346 arg  0x000040a0 , 0x00000011 
+ 00025198  0x00006347 call  0x00007288 
+ 00025199  0x00006348 force  0x00000005 , 0x0000003f 
+ 00025200  0x00006349 call  0x00006298 
+ 00025201  0x0000634a fetch  0x00000004 , 0x00000592 
+ 00025202  0x0000634b istore  0x00000004 , 0x00000005 
+ 00025203  0x0000634c arg  0x000004d5 , 0x00000002 
+ 00025204  0x0000634d call  0x000062e2 
+ 00025205  0x0000634e call  0x00007386 
+ 00025206  0x0000634f call  0x000062fc 
+ 00025207  0x00006350 branch  0x0000627c , 0x00000001 
+ 00025208  0x00006351 jam  0x00000001 , 0x000004d8 
+ 00025209  0x00006352 fetch  0x00000001 , 0x000009b5 
+ 00025210  0x00006353 rtn  0x00000034 
+ 00025211  0x00006354 jam  0x0000000b , 0x0000007c 
+ 00025212  0x00006356 fetch  0x00000001 , 0x000041bd 
+ 00025213  0x00006357 rtn  0x00000034 
+ 00025214  0x00006359 call  0x000062fc 
+ 00025215  0x0000635a nbranch  0x00006284 , 0x00000001 
+ 00025216  0x0000635b fetch  0x00000001 , 0x000004d7 
+ 00025217  0x0000635c rtn  0x00000034 
+ 00025218  0x0000635d jam  0x0000000f , 0x0000007c 
+ 00025219  0x0000635e rtn 
+ 00025220  0x00006360 rtnmark0  0x00000021 
+ 00025221  0x00006361 set0  0x00000021 , 0x00000000 
+ 00025222  0x00006362 jam  0x0000000f , 0x0000007c 
+ 00025223  0x00006363 rtn 
+ 00025224  0x00006368 call  0x0000630b 
+ 00025225  0x00006369 call  0x0000728b 
+ 00025226  0x0000636a force  0x00000011 , 0x0000003f 
+ 00025227  0x0000636b call  0x00006298 
+ 00025228  0x0000636c arg  0x00000562 , 0x00000006 
+ 00025229  0x0000636d call  0x00007ebf 
+ 00025230  0x0000636e branch  0x000062ad 
+ 00025231  0x00006371 force  0x00000001 , 0x0000003f 
+ 00025232  0x00006372 call  0x00006298 
+ 00025233  0x00006373 branch  0x000062ad 
+ 00025234  0x00006376 force  0x00000002 , 0x0000003f 
+ 00025235  0x00006377 call  0x00006298 
+ 00025236  0x00006378 force  0x00000010 , 0x0000003f 
+ 00025237  0x00006379 istore  0x00000001 , 0x00000005 
+ 00025238  0x0000637a store  0x00000001 , 0x00000054 
+ 00025239  0x0000637b branch  0x000062ad 
+ 00025240  0x0000637f lshift3  0x0000003f , 0x0000003f 
+ 00025241  0x00006380 or_into  0x00000007 , 0x0000003f 
+ 00025242  0x00006381 store  0x00000001 , 0x000004b6 
+ 00025243  0x00006382 arg  0x00000011 , 0x00000039 
+ 00025244  0x00006383 arg  0x000004b8 , 0x00000005 
+ 00025245  0x00006384 call  0x00007ed4 
+ 00025246  0x00006385 arg  0x000004b8 , 0x00000005 
+ 00025247  0x00006386 rtn 
+ 00025248  0x00006389 and  0x0000003f , 0x0000007f , 0x00000011 
+ 00025249  0x0000638a jam  0x0000007f , 0x00000048 
+ 00025250  0x0000638b deposit  0x00000007 
+ 00025251  0x0000638c call  0x00006298 
+ 00025252  0x0000638d deposit  0x00000011 
+ 00025253  0x0000638e istore  0x00000001 , 0x00000005 
+ 00025254  0x0000638f rtn 
+ 00025255  0x00006392 fetch  0x00000001 , 0x00000048 
+ 00025256  0x00006393 lshift  0x0000003f , 0x0000003f 
+ 00025257  0x00006394 fetcht  0x00000001 , 0x0000004c 
+ 00025258  0x00006395 isolate1  0x00000001 , 0x00000002 
+ 00025259  0x00006396 setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00025260  0x00006397 branch  0x000062b7 
+ 00025261  0x0000639b fetcht  0x00000001 , 0x0000004c 
+ 00025262  0x0000639c and_into  0x00000001 , 0x00000002 
+ 00025263  0x0000639d branch  0x000062b3 
+ 00025264  0x000063a0 force  0x00000000 , 0x00000002 
+ 00025265  0x000063a1 branch  0x000062b3 
+ 00025266  0x000063a4 force  0x00000001 , 0x00000002 
+ 00025267  0x000063a6 fetch  0x00000001 , 0x00000048 
+ 00025268  0x000063a7 lshift  0x0000003f , 0x0000003f 
+ 00025269  0x000063a8 setflag  0x00000029 , 0x00000000 , 0x0000003f 
+ 00025270  0x000063a9 ixor  0x00000002 , 0x0000003f 
+ 00025271  0x000063ab store  0x00000001 , 0x000004b7 
+ 00025272  0x000063ac jam  0x00000000 , 0x00000048 
+ 00025273  0x000063ad call  0x000062c7 
+ 00025274  0x000063ae enable  0x00000028 
+ 00025275  0x000063af rtn 
+ 00025276  0x000063b3 fetch  0x00000001 , 0x0000007c 
+ 00025277  0x000063b4 rtn  0x00000034 
+ 00025278  0x000063b5 call  0x000062c1 
+ 00025279  0x000063b6 fetch  0x00000001 , 0x0000007c 
+ 00025280  0x000063b7 rtn 
+ 00025281  0x000063ba bpatchx  0x00000086 , 0x00004030 
+ 00025282  0x000063bb fetch  0x00000001 , 0x00000048 
+ 00025283  0x000063bc branch  0x000062c7 , 0x00000034 
+ 00025284  0x000063bd fetch  0x00000001 , 0x00000078 
+ 00025285  0x000063be nrtn  0x00000034 
+ 00025286  0x000063bf branch  0x000062d1 
+ 00025287  0x000063c1 fetch  0x00000001 , 0x00000078 
+ 00025288  0x000063c2 branch  0x000062d7 , 0x00000034 
+ 00025289  0x000063c3 fetch  0x00000003 , 0x00000078 
+ 00025290  0x000063c4 store  0x00000003 , 0x00000048 
+ 00025291  0x000063c5 fetcht  0x00000001 , 0x0000007b 
+ 00025292  0x000063c6 fetch  0x00000001 , 0x0000004c 
+ 00025293  0x000063c7 set0  0x00000001 , 0x0000003f 
+ 00025294  0x000063c8 ior  0x00000002 , 0x0000003f 
+ 00025295  0x000063c9 store  0x00000001 , 0x0000004c 
+ 00025296  0x000063ca jam  0x00000000 , 0x00000078 
+ 00025297  0x000063cc fetch  0x00000001 , 0x0000007c 
+ 00025298  0x000063cd rtn  0x00000034 
+ 00025299  0x000063ce fetch  0x00000004 , 0x0000007c 
+ 00025300  0x000063cf store  0x00000004 , 0x00000078 
+ 00025301  0x000063d0 jam  0x00000000 , 0x0000007c 
+ 00025302  0x000063d1 rtn 
+ 00025303  0x000063d3 fetch  0x00000001 , 0x0000007c 
+ 00025304  0x000063d4 rtn  0x00000034 
+ 00025305  0x000063d5 fetch  0x00000003 , 0x0000007c 
+ 00025306  0x000063d6 store  0x00000003 , 0x00000048 
+ 00025307  0x000063d7 fetcht  0x00000001 , 0x0000007f 
+ 00025308  0x000063d8 fetch  0x00000001 , 0x0000004c 
+ 00025309  0x000063d9 set0  0x00000001 , 0x0000003f 
+ 00025310  0x000063da ior  0x00000002 , 0x0000003f 
+ 00025311  0x000063db store  0x00000001 , 0x0000004c 
+ 00025312  0x000063dc jam  0x00000000 , 0x0000007c 
+ 00025313  0x000063dd rtn 
+ 00025314  0x000063e1 bpatchx  0x00000087 , 0x00004030 
+ 00025315  0x000063e2 fetch  0x00000001 , 0x0000004c 
+ 00025316  0x000063e3 copy  0x0000003f , 0x00000013 
+ 00025317  0x000063e4 ifetch  0x00000001 , 0x00000002 
+ 00025318  0x000063e5 call  0x00005e52 
+ 00025319  0x000063e6 call  0x000062a7 
+ 00025320  0x000063e7 copy  0x00000013 , 0x0000003f 
+ 00025321  0x000063e8 store  0x00000001 , 0x0000004c 
+ 00025322  0x000063e9 rtn 
+ 00025323  0x000063ec fetcht  0x00000001 , 0x0000004c 
+ 00025324  0x000063ed set0  0x00000000 , 0x00000002 
+ 00025325  0x000063ee storet  0x00000001 , 0x0000004c 
+ 00025326  0x000063ef rtn 
+ 00025327  0x000063f2 fetcht  0x00000001 , 0x0000004c 
+ 00025328  0x000063f3 set1  0x00000000 , 0x00000002 
+ 00025329  0x000063f4 storet  0x00000001 , 0x0000004c 
+ 00025330  0x000063f5 rtn 
+ 00025331  0x000063f9 nsetflag  0x00000029 , 0x00000001 , 0x0000003f 
+ 00025332  0x000063fa fetcht  0x00000001 , 0x0000004c 
+ 00025333  0x000063fb ixor  0x00000002 , 0x0000003f 
+ 00025334  0x000063fc isolate1  0x00000001 , 0x0000003f 
+ 00025335  0x000063fd rtn 
+ 00025336  0x00006401 fetch  0x00000001 , 0x0000004c 
+ 00025337  0x00006402 setflag  0x00000029 , 0x00000001 , 0x0000003f 
+ 00025338  0x00006403 store  0x00000001 , 0x0000004c 
+ 00025339  0x00006404 rtn 
+ 00025340  0x00006408 fetch  0x00000001 , 0x000009b4 
+ 00025341  0x00006409 compare  0x00000001 , 0x0000003f , 0x0000007f 
+ 00025342  0x0000640a rtn 
+ 00025343  0x0000640c fetch  0x00000001 , 0x000009b4 
+ 00025344  0x0000640d set1  0x00000007 , 0x0000003f 
+ 00025345  0x0000640e store  0x00000001 , 0x000009b4 
+ 00025346  0x0000640f rtn 
+ 00025347  0x00006411 fetch  0x00000001 , 0x000009b4 
+ 00025348  0x00006412 set0  0x00000007 , 0x0000003f 
+ 00025349  0x00006413 store  0x00000001 , 0x000009b4 
+ 00025350  0x00006414 rtn 
+ 00025351  0x00006416 fetch  0x00000001 , 0x000009b4 
+ 00025352  0x00006417 isolate1  0x00000007 , 0x0000003f 
+ 00025353  0x00006418 store  0x00000001 , 0x000009b4 
+ 00025354  0x00006419 rtn 
+ 00025355  0x0000641d arg  0x00000562 , 0x00000005 
+ 00025356  0x0000641f force  0x00000010 , 0x00000039 
+ 00025357  0x00006422 random  0x0000003f 
+ 00025358  0x00006423 istore  0x00000001 , 0x00000005 
+ 00025359  0x00006424 loop  0x0000630d 
+ 00025360  0x00006425 rtn 
+ 00025361  0x00006428 call  0x00007259 
+ 00025362  0x00006429 arg  0x000041be , 0x00000011 
+ 00025363  0x0000642a arg  0x00000592 , 0x00000012 
+ 00025364  0x0000642b ifetch  0x00000008 , 0x00000011 
+ 00025365  0x0000642c fetcht  0x00000001 , 0x00000030 
+ 00025366  0x0000642d nsetflag  0x00000034 , 0x00000006 , 0x00000002 
+ 00025367  0x0000642e storet  0x00000001 , 0x00000030 
+ 00025368  0x0000642f copy  0x00000011 , 0x00000005 
+ 00025369  0x00006430 call  0x00007352 
+ 00025370  0x00006431 branch  0x000021c4 
+ 00025371  0x00006439 bpatchx  0x00000088 , 0x00004031 
+ 00025372  0x0000643b call  0x000062bc 
+ 00025373  0x0000643c nrtn  0x00000034 
+ 00025374  0x0000643e fetch  0x00000001 , 0x00000055 
+ 00025375  0x0000643f rtn  0x00000034 
+ 00025376  0x00006443 beq  0x00000004 , 0x0000636f 
+ 00025377  0x00006444 beq  0x00000005 , 0x00006374 
+ 00025378  0x00006445 beq  0x00000002 , 0x00006366 
+ 00025379  0x00006446 beq  0x00000003 , 0x0000637c 
+ 00025380  0x00006447 beq  0x0000000e , 0x00006369 
+ 00025381  0x00006448 beq  0x00000006 , 0x00006398 
+ 00025382  0x00006449 beq  0x00000007 , 0x000063b0 
+ 00025383  0x0000644a beq  0x00000009 , 0x000063b1 
+ 00025384  0x0000644b beq  0x0000000a , 0x000063ba 
+ 00025385  0x0000644c beq  0x0000000b , 0x000063be 
+ 00025386  0x0000644d beq  0x0000000c , 0x00006386 
+ 00025387  0x0000644e beq  0x0000000d , 0x00006389 
+ 00025388  0x0000644f beq  0x0000000f , 0x0000638f 
+ 00025389  0x00006450 beq  0x00000012 , 0x00006359 
+ 00025390  0x00006451 beq  0x00000013 , 0x0000637c 
+ 00025391  0x00006452 beq  0x00000010 , 0x0000635c 
+ 00025392  0x00006453 beq  0x00000014 , 0x00006356 
+ 00025393  0x00006454 beq  0x00000015 , 0x0000637c 
+ 00025394  0x00006455 beq  0x00000016 , 0x00006350 
+ 00025395  0x00006456 beq  0x00000018 , 0x00006355 
+ 00025396  0x00006457 beq  0x00000017 , 0x00006349 
+ 00025397  0x00006458 beq  0x00000019 , 0x0000634f 
+ 00025398  0x00006459 beq  0x0000001a , 0x0000633a 
+ 00025399  0x0000645a beq  0x0000001b , 0x00006344 
+ 00025400  0x0000645b jam  0x00000000 , 0x00000055 
+ 00025401  0x0000645d rtn 
+ 00025402  0x0000645f fetch  0x00000001 , 0x000004d1 
+ 00025403  0x00006460 rtnbit0  0x00000002 
+ 00025404  0x00006461 rtnbit0  0x00000003 
+ 00025405  0x00006462 jam  0x00000000 , 0x00000055 
+ 00025406  0x00006463 call  0x00006340 
+ 00025407  0x00006464 branch  0x00006cef 
+ 00025408  0x00006467 fetch  0x00000001 , 0x0000016d 
+ 00025409  0x00006468 rtnbit0  0x00000001 
+ 00025410  0x00006469 jam  0x0000000a , 0x00000055 
+ 00025411  0x0000646a rtn 
+ 00025412  0x0000646d arg  0x00000007 , 0x00000007 
+ 00025413  0x0000646e call  0x00007f16 
+ 00025414  0x0000646f nrtn  0x00000034 
+ 00025415  0x00006470 jam  0x0000001a , 0x00000055 
+ 00025416  0x00006471 rtn 
+ 00025417  0x00006474 fetch  0x00000001 , 0x0000016d 
+ 00025418  0x00006475 set0  0x00000000 , 0x0000003f 
+ 00025419  0x00006476 store  0x00000001 , 0x0000016d 
+ 00025420  0x00006477 jam  0x00000019 , 0x00000055 
+ 00025421  0x00006478 jam  0x0000000b , 0x0000007c 
+ 00025422  0x00006479 rtn 
+ 00025423  0x0000647b rtn 
+ 00025424  0x0000647d fetch  0x00000001 , 0x000004d4 
+ 00025425  0x0000647e rtnne  0x00000002 
+ 00025426  0x0000647f call  0x000063c0 
+ 00025427  0x00006480 jam  0x00000018 , 0x00000055 
+ 00025428  0x00006481 rtn 
+ 00025429  0x00006484 rtn 
+ 00025430  0x00006486 jam  0x00000015 , 0x00000055 
+ 00025431  0x00006487 jam  0x00000083 , 0x0000007c 
+ 00025432  0x00006488 rtn 
+ 00025433  0x0000648a jam  0x00000013 , 0x00000055 
+ 00025434  0x0000648b jam  0x00000025 , 0x0000007c 
+ 00025435  0x0000648c rtn 
+ 00025436  0x0000648f fetch  0x00000001 , 0x0000455b 
+ 00025437  0x00006490 rtneq  0x00000000 
+ 00025438  0x00006491 beq  0x00000001 , 0x00006364 
+ 00025439  0x00006492 arg  0x00000006 , 0x00000007 
+ 00025440  0x00006493 call  0x00007f16 
+ 00025441  0x00006494 nrtn  0x00000034 
+ 00025442  0x00006495 jam  0x00000000 , 0x0000455b 
+ 00025443  0x00006496 branch  0x0000637d 
+ 00025444  0x00006498 rtn  0x00000029 
+ 00025445  0x00006499 branch  0x00006398 
+ 00025446  0x0000649c jam  0x00000003 , 0x00000055 
+ 00025447  0x0000649d jam  0x00000027 , 0x0000007c 
+ 00025448  0x0000649e rtn 
+ 00025449  0x000064a0 jam  0x00000013 , 0x0000007c 
+ 00025450  0x000064a1 set1  0x00000003 , 0x00000000 
+ 00025451  0x000064a2 jam  0x00000005 , 0x00000055 
+ 00025452  0x000064a3 setarg  0x000001ff 
+ 00025453  0x000064a4 store  0x00000002 , 0x000004d2 
+ 00025454  0x000064a5 rtn 
+ 00025455  0x000064a7 jam  0x00000005 , 0x00000055 
+ 00025456  0x000064a8 jam  0x000000ff , 0x000004d2 
+ 00025457  0x000064a9 set0  0x00000022 , 0x00000000 
+ 00025458  0x000064aa jam  0x00000033 , 0x0000007c 
+ 00025459  0x000064ab branch  0x00005d04 
+ 00025460  0x000064ad rtnmark1  0x00000022 
+ 00025461  0x000064ae fetch  0x00000002 , 0x000004d2 
+ 00025462  0x000064af sub  0x0000003f , 0x00000001 , 0x0000003f 
+ 00025463  0x000064b0 branch  0x0000637a , 0x00000005 
+ 00025464  0x000064b1 store  0x00000002 , 0x000004d2 
+ 00025465  0x000064b2 rtn 
+ 00025466  0x000064b4 jam  0x0000000e , 0x00000055 
+ 00025467  0x000064b5 rtn 
+ 00025468  0x000064b8 rtn 
+ 00025469  0x000064bb fetch  0x00000001 , 0x000004d1 
+ 00025470  0x000064bc rtnbit0  0x00000003 
+ 00025471  0x000064bd rtnbit0  0x00000002 
+ 00025472  0x000064be fetch  0x00000001 , 0x0000016d 
+ 00025473  0x000064bf set0  0x00000002 , 0x0000003f 
+ 00025474  0x000064c0 store  0x00000001 , 0x0000016d 
+ 00025475  0x000064c1 jam  0x00000013 , 0x0000007c 
+ 00025476  0x000064c2 jam  0x00000010 , 0x00000055 
+ 00025477  0x000064c3 rtn 
+ 00025478  0x000064c6 jam  0x0000000d , 0x00000055 
+ 00025479  0x000064c7 jam  0x00000031 , 0x0000007c 
+ 00025480  0x000064c8 rtn 
+ 00025481  0x000064cb fetch  0x00000001 , 0x000004d1 
+ 00025482  0x000064cc rtnbit0  0x00000002 
+ 00025483  0x000064cd jam  0x00000000 , 0x00000055 
+ 00025484  0x000064cf rtn 
+ 00025485  0x000064d1 jam  0x00000006 , 0x00000055 
+ 00025486  0x000064d2 rtn 
+ 00025487  0x000064d5 fetch  0x00000001 , 0x000004d2 
+ 00025488  0x000064d6 increase  0xffffffff , 0x0000003f 
+ 00025489  0x000064d7 branch  0x00006394 , 0x00000034 
+ 00025490  0x000064d8 store  0x00000001 , 0x000004d2 
+ 00025491  0x000064d9 rtn 
+ 00025492  0x000064db jam  0x00000007 , 0x0000007c 
+ 00025493  0x000064dc jam  0x00000016 , 0x000004ca 
+ 00025494  0x000064dd jam  0x00000000 , 0x00000055 
+ 00025495  0x000064de rtn 
+ 00025496  0x000064e1 fetch  0x00000001 , 0x0000016d 
+ 00025497  0x000064e2 bbit1  0x00000002 , 0x0000637d 
+ 00025498  0x000064e3 bbit1  0x00000000 , 0x0000639d 
+ 00025499  0x000064e5 jam  0x0000001a , 0x00000055 
+ 00025500  0x000064e6 rtn 
+ 00025501  0x000064e8 fetch  0x00000001 , 0x000041bd 
+ 00025502  0x000064e9 branch  0x000063a9 , 0x00000034 
+ 00025503  0x000064ea fetch  0x00000001 , 0x000004d1 
+ 00025504  0x000064eb rtnbit0  0x00000003 
+ 00025505  0x000064ec rtnbit0  0x00000002 
+ 00025506  0x000064ed fetch  0x00000004 , 0x000004e9 
+ 00025507  0x000064ee arg  0x00000064 , 0x00000002 
+ 00025508  0x000064ef iadd  0x00000002 , 0x00000002 
+ 00025509  0x000064f0 copy  0x00000022 , 0x0000003f 
+ 00025510  0x000064f1 isub  0x00000002 , 0x0000003e 
+ 00025511  0x000064f2 nrtn  0x00000002 
+ 00025512  0x000064f3 branch  0x00006349 
+ 00025513  0x000064f8 jam  0x00000016 , 0x00000055 
+ 00025514  0x000064f9 jam  0x00000004 , 0x00004689 
+ 00025515  0x000064fa setarg  0x00003030 
+ 00025516  0x000064fb store  0x00000002 , 0x0000468a 
+ 00025517  0x000064fc istore  0x00000002 , 0x00000005 
+ 00025518  0x000064fd jam  0x00000002 , 0x000004d4 
+ 00025519  0x000064fe branch  0x00006350 
+ 00025520  0x00006501 rtn 
+ 00025521  0x00006503 fetch  0x00000001 , 0x0000016d 
+ 00025522  0x00006504 bbit1  0x00000001 , 0x000063b5 
+ 00025523  0x00006505 jam  0x0000001a , 0x00000055 
+ 00025524  0x00006506 rtn 
+ 00025525  0x00006509 fetch  0x00000001 , 0x0000016d 
+ 00025526  0x0000650a set0  0x00000001 , 0x0000003f 
+ 00025527  0x0000650b store  0x00000001 , 0x0000016d 
+ 00025528  0x0000650c jam  0x0000000f , 0x0000007c 
+ 00025529  0x0000650d rtn 
+ 00025530  0x00006510 fetch  0x00000001 , 0x000004d8 
+ 00025531  0x00006511 rtn  0x00000034 
+ 00025532  0x00006512 jam  0x00000000 , 0x00000055 
+ 00025533  0x00006513 branch  0x000063b5 
+ 00025534  0x00006516 jam  0x0000000c , 0x00000055 
+ 00025535  0x00006517 rtn 
+ 00025536  0x0000651a fetch  0x00000001 , 0x0000004b 
+ 00025537  0x0000651b bbit1  0x00000002 , 0x000063c5 
+ 00025538  0x0000651c call  0x000062ef 
+ 00025539  0x0000651d jam  0x00000008 , 0x0000007c 
+ 00025540  0x0000651e branch  0x00004d04 
+ 00025541  0x00006520 fetch  0x00000001 , 0x0000004b 
+ 00025542  0x00006521 set0  0x00000002 , 0x0000003f 
+ 00025543  0x00006522 store  0x00000001 , 0x0000004b 
+ 00025544  0x00006523 call  0x00006001 
+ 00025545  0x00006524 call  0x000062f8 
+ 00025546  0x00006525 branch  0x00004d04 
+ 00025547  0x00006528 setarg  0x00000004 
+ 00025548  0x00006529 store  0x00000001 , 0x00004689 
+ 00025549  0x0000652a setarg  0x00003030 
+ 00025550  0x0000652b istore  0x00000002 , 0x00000005 
+ 00025551  0x0000652c istore  0x00000002 , 0x00000005 
+ 00025552  0x0000652d rtn 
+ 00025553  0x00006534 bpatchx  0x0000008c , 0x00004031 
+ 00025554  0x00006535 hfetch  0x00000001 , 0x00008073 
+ 00025555  0x00006536 arg  0x00000006 , 0x00000002 
+ 00025556  0x00006537 ior  0x00000002 , 0x0000003f 
+ 00025557  0x00006538 hstore  0x00000001 , 0x00008073 
+ 00025558  0x00006539 hfetch  0x00000001 , 0x00008077 
+ 00025559  0x0000653a ior  0x00000002 , 0x0000003f 
+ 00025560  0x0000653b hstore  0x00000001 , 0x00008077 
+ 00025561  0x0000653c call  0x000063ee 
+ 00025562  0x0000653d hfetch  0x00000001 , 0x00008077 
+ 00025563  0x0000653e set0  0x00000001 , 0x0000003f 
+ 00025564  0x0000653f set0  0x00000002 , 0x0000003f 
+ 00025565  0x00006540 hstore  0x00000001 , 0x00008077 
+ 00025566  0x00006541 nop  0x0000001e 
+ 00025567  0x00006542 branch  0x000063f2 
+ 00025568  0x00006545 hfetch  0x00000001 , 0x00008073 
+ 00025569  0x00006546 arg  0x000000c0 , 0x00000002 
+ 00025570  0x00006547 ior  0x00000002 , 0x0000003f 
+ 00025571  0x00006548 hstore  0x00000001 , 0x00008073 
+ 00025572  0x00006549 hfetch  0x00000001 , 0x00008077 
+ 00025573  0x0000654a ior  0x00000002 , 0x0000003f 
+ 00025574  0x0000654b hstore  0x00000001 , 0x00008077 
+ 00025575  0x0000654c call  0x000063ee 
+ 00025576  0x0000654d hfetch  0x00000001 , 0x00008077 
+ 00025577  0x0000654e set0  0x00000006 , 0x0000003f 
+ 00025578  0x0000654f set0  0x00000007 , 0x0000003f 
+ 00025579  0x00006550 hstore  0x00000001 , 0x00008077 
+ 00025580  0x00006551 nop  0x0000001e 
+ 00025581  0x00006552 branch  0x000063f6 
+ 00025582  0x00006555 hfetch  0x00000001 , 0x00008081 
+ 00025583  0x00006556 and  0x0000003f , 0x000000fc , 0x0000003f 
+ 00025584  0x00006557 hstore  0x00000001 , 0x00008081 
+ 00025585  0x00006558 rtn 
+ 00025586  0x0000655a hfetch  0x00000001 , 0x00008081 
+ 00025587  0x0000655b or  0x0000003f , 0x00000001 , 0x0000003f 
+ 00025588  0x0000655c hstore  0x00000001 , 0x00008081 
+ 00025589  0x0000655d rtn 
+ 00025590  0x0000655f hfetch  0x00000001 , 0x00008081 
+ 00025591  0x00006560 or  0x0000003f , 0x00000003 , 0x0000003f 
+ 00025592  0x00006561 set0  0x00000004 , 0x0000003f 
+ 00025593  0x00006562 hstore  0x00000001 , 0x00008081 
+ 00025594  0x00006563 rtn 
+ 00025595  0x00006568 copy  0x0000003f , 0x00000012 
+ 00025596  0x00006569 call  0x0000640f 
+ 00025597  0x0000656a nop  0x00000064 
+ 00025598  0x0000656b copy  0x00000012 , 0x0000003f 
+ 00025599  0x0000656c call  0x00006414 
+ 00025600  0x0000656d copy  0x0000003f , 0x00000012 
+ 00025601  0x0000656e call  0x00006411 
+ 00025602  0x0000656f nop  0x00000064 
+ 00025603  0x00006570 copy  0x00000012 , 0x0000003f 
+ 00025604  0x00006571 rtn 
+ 00025605  0x00006574 copy  0x0000003f , 0x00000012 
+ 00025606  0x00006575 call  0x0000640f 
+ 00025607  0x00006576 nop  0x00000064 
+ 00025608  0x00006577 copy  0x00000012 , 0x0000003f 
+ 00025609  0x00006578 call  0x00006413 
+ 00025610  0x00006579 call  0x00006411 
+ 00025611  0x0000657a nop  0x00000064 
+ 00025612  0x0000657b rtn 
+ 00025613  0x0000657f fetcht  0x00000001 , 0x00004214 
+ 00025614  0x00006580 branch  0x0000680e 
+ 00025615  0x00006584 fetcht  0x00000001 , 0x00004214 
+ 00025616  0x00006585 branch  0x00006829 
+ 00025617  0x00006589 fetcht  0x00000001 , 0x00004214 
+ 00025618  0x0000658a branch  0x00006825 
+ 00025619  0x0000658e branch  0x000064ec 
+ 00025620  0x00006591 branch  0x000064f3 
+ 00025621  0x00006599 nbranch  0x00006419 , 0x00000028 
+ 00025622  0x0000659a hfetch  0x00000001 , 0x00008085 
+ 00025623  0x0000659b or_into  0x00000002 , 0x0000003f 
+ 00025624  0x0000659c hstore  0x00000001 , 0x00008085 
+ 00025625  0x0000659e copy  0x00000002 , 0x0000003e 
+ 00025626  0x0000659f branch  0x0000641c , 0x00000005 
+ 00025627  0x000065a0 copy  0x00000013 , 0x0000003d 
+ 00025628  0x000065a2 isolate0  0x00000000 , 0x0000003e 
+ 00025629  0x000065a3 branch  0x000064b9 
+ 00025630  0x000065a7 force  0x00000004 , 0x00000002 
+ 00025631  0x000065a9 arg  0x000001fe , 0x00000011 
+ 00025632  0x000065aa hfetch  0x00000001 , 0x00008085 
+ 00025633  0x000065ab and_into  0x000000fd , 0x0000003f 
+ 00025634  0x000065ac hstore  0x00000001 , 0x00008085 
+ 00025635  0x000065ad call  0x00006419 
+ 00025636  0x000065ae arg  0x000055aa , 0x00000011 
+ 00025637  0x000065af fetch  0x00000002 , 0x000001fe 
+ 00025638  0x000065b0 ifetcht  0x00000002 , 0x00000006 
+ 00025639  0x000065b1 isub  0x00000011 , 0x0000003e 
+ 00025640  0x000065b2 rtn 
+ 00025641  0x000065b5 arg  0x00000002 , 0x00000002 
+ 00025642  0x000065b6 arg  0x00000204 , 0x00000011 
+ 00025643  0x000065b7 call  0x00006419 
+ 00025644  0x000065b8 fetch  0x00000002 , 0x00000204 
+ 00025645  0x000065b9 store  0x00000002 , 0x000001f7 
+ 00025646  0x000065ba call  0x00006430 , 0x00000028 
+ 00025647  0x000065bb rtn 
+ 00025648  0x000065be arg  0x00000010 , 0x00000002 
+ 00025649  0x000065bf arg  0x00000206 , 0x00000011 
+ 00025650  0x000065c0 hfetch  0x00000001 , 0x00008085 
+ 00025651  0x000065c1 and_into  0x000000fd , 0x0000003f 
+ 00025652  0x000065c2 hstore  0x00000001 , 0x00008085 
+ 00025653  0x000065c3 call  0x00006419 
+ 00025654  0x000065c4 arg  0x00000206 , 0x00000006 
+ 00025655  0x000065c5 arg  0x00000010 , 0x00000039 
+ 00025656  0x000065c6 call  0x00007478 
+ 00025657  0x000065c7 call  0x00007428 
+ 00025658  0x000065c8 call  0x00007491 
+ 00025659  0x000065c9 branch  0x00007422 
+ 00025660  0x000065cc disable  0x0000002d 
+ 00025661  0x000065cd call  0x0000641e 
+ 00025662  0x000065ce nrtn  0x00000005 
+ 00025663  0x000065cf enable  0x0000002d 
+ 00025664  0x000065d0 jam  0x00000080 , 0x00008023 
+ 00025665  0x000065d1 jam  0x00000000 , 0x00008022 
+ 00025666  0x000065d2 jam  0x00000000 , 0x00008024 
+ 00025667  0x000065d3 arg  0x00008025 , 0x00000011 
+ 00025668  0x000065d4 call  0x00006415 
+ 00025669  0x000065d5 jam  0x00000000 , 0x00008023 
+ 00025670  0x000065d7 arg  0x00000006 , 0x00000002 
+ 00025671  0x000065d8 call  0x0000641f 
+ 00025672  0x000065d9 nrtn  0x00000005 
+ 00025673  0x000065da ifetch  0x00000002 , 0x00000006 
+ 00025674  0x000065db iforce  0x00000011 
+ 00025675  0x000065dc call  0x00006419 
+ 00025676  0x000065dd branch  0x00006446 
+ 00025677  0x000065e2 call  0x00007f99 
+ 00025678  0x000065e3 setarg  0x00001000 
+ 00025679  0x000065e4 store  0x00000002 , 0x000001f7 
+ 00025680  0x000065e5 arg  0x000065e5 , 0x00000013 
+ 00025681  0x000065e6 arg  0x00000002 , 0x00000039 
+ 00025682  0x000065e8 call  0x0000641e 
+ 00025683  0x000065e9 nrtn  0x00000005 
+ 00025684  0x000065ea fetch  0x00000002 , 0x000001f7 
+ 00025685  0x000065eb byteswap  0x0000003f , 0x0000003f 
+ 00025686  0x000065ec iadd  0x00000002 , 0x0000003f 
+ 00025687  0x000065ed byteswap  0x0000003f , 0x0000003f 
+ 00025688  0x000065ee store  0x00000002 , 0x000001f7 
+ 00025689  0x000065ef loop  0x00006452 
+ 00025690  0x000065f0 branch  0x00006446 
+ 00025691  0x000065f3 call  0x00007f99 
+ 00025692  0x000065f4 disable  0x00000028 
+ 00025693  0x000065f5 call  0x0000666a 
+ 00025694  0x000065f6 setarg  0x00000000 
+ 00025695  0x000065f7 arg  0x000001f3 , 0x00000011 
+ 00025696  0x000065f8 arg  0x00000002 , 0x00000002 
+ 00025697  0x000065f9 call  0x000066b3 
+ 00025698  0x000065fa fetch  0x00000002 , 0x000001f3 
+ 00025699  0x000065fb bbit0  0x00000007 , 0x0000646e 
+ 00025700  0x000065fc jam  0x00000025 , 0x00008050 
+ 00025701  0x000065fd setarg  0x000007f0 
+ 00025702  0x000065fe arg  0x00000206 , 0x00000011 
+ 00025703  0x000065ff arg  0x00000010 , 0x00000002 
+ 00025704  0x00006600 call  0x000066b3 
+ 00025705  0x00006601 jam  0x00000008 , 0x00008006 
+ 00025706  0x00006602 set1  0x0000002b , 0x00000000 
+ 00025707  0x00006603 arg  0x00000206 , 0x00000006 
+ 00025708  0x00006604 call  0x00007484 
+ 00025709  0x00006605 enable  0x00000028 
+ 00025710  0x00006607 jam  0x00000000 , 0x000041da 
+ 00025711  0x00006609 call  0x000064b0 
+ 00025712  0x0000660a fetch  0x00000002 , 0x000001f3 
+ 00025713  0x0000660b byteswap  0x0000003f , 0x0000003f 
+ 00025714  0x0000660c arg  0x000007ff , 0x00000002 
+ 00025715  0x0000660d iand  0x00000002 , 0x0000003f 
+ 00025716  0x0000660e branch  0x0000647b , 0x00000005 
+ 00025717  0x0000660f call  0x0000666f 
+ 00025718  0x00006610 arg  0x000066b8 , 0x00000013 
+ 00025719  0x00006611 call  0x00006430 , 0x00000028 
+ 00025720  0x00006612 call  0x0000643c 
+ 00025721  0x00006613 fetch  0x00000001 , 0x000001f2 
+ 00025722  0x00006614 bbit0  0x00000000 , 0x0000646f 
+ 00025723  0x00006617 call  0x0000666d 
+ 00025724  0x00006618 jam  0x00000000 , 0x000041da 
+ 00025725  0x0000661a call  0x000064b0 
+ 00025726  0x0000661b call  0x000065c2 
+ 00025727  0x0000661c fetch  0x00000001 , 0x000001f3 
+ 00025728  0x0000661d bbit1  0x00000006 , 0x0000648e 
+ 00025729  0x0000661e call  0x000064aa 
+ 00025730  0x0000661f nbranch  0x00006486 , 0x0000002d 
+ 00025731  0x00006620 fetch  0x00000001 , 0x000001f2 
+ 00025732  0x00006621 bbit0  0x00000000 , 0x0000647d 
+ 00025733  0x00006622 branch  0x0000649b 
+ 00025734  0x00006624 call  0x000065bf 
+ 00025735  0x00006625 fetch  0x00000001 , 0x000001f3 
+ 00025736  0x00006626 bbit1  0x00000006 , 0x0000648e 
+ 00025737  0x00006627 call  0x000064aa 
+ 00025738  0x00006628 nbranch  0x0000648e , 0x0000002d 
+ 00025739  0x00006629 fetch  0x00000001 , 0x000001f2 
+ 00025740  0x0000662a bbit0  0x00000000 , 0x0000647d 
+ 00025741  0x0000662b branch  0x0000649b 
+ 00025742  0x0000662e jam  0x00000000 , 0x000041da 
+ 00025743  0x00006630 call  0x000064b0 
+ 00025744  0x00006631 fetch  0x00000001 , 0x000001f3 
+ 00025745  0x00006632 bbit1  0x00000005 , 0x0000649b 
+ 00025746  0x00006633 setarg  0x00000000 
+ 00025747  0x00006634 store  0x00000003 , 0x000001f6 
+ 00025748  0x00006635 call  0x00006502 
+ 00025749  0x00006636 arg  0x00006578 , 0x00000013 
+ 00025750  0x00006637 call  0x00006429 
+ 00025751  0x00006638 call  0x0000643c 
+ 00025752  0x00006639 nbranch  0x0000649b , 0x0000002d 
+ 00025753  0x0000663a fetch  0x00000001 , 0x000001f2 
+ 00025754  0x0000663b bbit0  0x00000000 , 0x0000648f 
+ 00025755  0x0000663e bmark1  0x0000002b , 0x0000649d 
+ 00025756  0x0000663f call  0x000064a3 
+ 00025757  0x00006641 fetch  0x00000001 , 0x000001f3 
+ 00025758  0x00006642 bbit0  0x00000004 , 0x000064a3 
+ 00025759  0x00006643 jam  0x00000021 , 0x00008050 
+ 00025760  0x00006644 call  0x00004c0e 
+ 00025761  0x00006646 call  0x00004c2e 
+ 00025762  0x00006647 branch  0x000064a1 
+ 00025763  0x0000664a setarg  0x00000000 
+ 00025764  0x0000664b store  0x00000008 , 0x00000206 
+ 00025765  0x0000664c store  0x00000008 , 0x0000020e 
+ 00025766  0x0000664d force  0x00000004 , 0x00000038 
+ 00025767  0x0000664e call  0x00007492 
+ 00025768  0x0000664f jam  0x00000021 , 0x00008050 
+ 00025769  0x00006650 rtn 
+ 00025770  0x00006654 setarg  0x00000000 
+ 00025771  0x00006655 store  0x00000002 , 0x000001f7 
+ 00025772  0x00006656 arg  0x000065e5 , 0x00000013 
+ 00025773  0x00006657 call  0x000065a3 
+ 00025774  0x00006658 call  0x00006429 
+ 00025775  0x00006659 branch  0x0000643c 
+ 00025776  0x0000665d fetch  0x00000001 , 0x000041da 
+ 00025777  0x0000665e increase  0x00000001 , 0x0000003f 
+ 00025778  0x0000665f sub  0x0000003f , 0x00000003 , 0x0000003e 
+ 00025779  0x00006660 nbranch  0x000064b6 , 0x00000002 
+ 00025780  0x00006661 store  0x00000001 , 0x000041da 
+ 00025781  0x00006662 rtn 
+ 00025782  0x00006665 call  0x000064a3 
+ 00025783  0x00006666 call  0x00007fa1 
+ 00025784  0x00006667 rtn 
+ 00025785  0x0000666c fetch  0x00000001 , 0x000001f2 
+ 00025786  0x0000666d lshift  0x0000003f , 0x0000003f 
+ 00025787  0x0000666e setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00025788  0x0000666f isolate0  0x0000000f , 0x00000011 
+ 00025789  0x00006670 rtn  0x00000001 
+ 00025790  0x00006671 store  0x00000001 , 0x000001f2 
+ 00025791  0x00006672 rtn 
+ 00025792  0x00006676 hfetch  0x00000001 , 0x00008085 
+ 00025793  0x00006677 rtnbit0  0x00000001 
+ 00025794  0x00006678 branch  0x000064c6 
+ 00025795  0x0000667a hfetch  0x00000001 , 0x0000812c 
+ 00025796  0x0000667b qisolate1  0x0000003f 
+ 00025797  0x0000667c rtn  0x00000001 
+ 00025798  0x0000667e hfetch  0x00000001 , 0x00008108 
+ 00025799  0x0000667f bbit0  0x00000001 , 0x000064c3 
+ 00025800  0x00006680 call  0x00007422 
+ 00025801  0x00006681 branch  0x000064c3 
+ 00025802  0x00006686 fetch  0x00000002 , 0x00004199 
+ 00025803  0x00006687 rtn  0x00000034 
+ 00025804  0x00006688 jam  0x00000080 , 0x00008023 
+ 00025805  0x00006689 jam  0x00000000 , 0x00008022 
+ 00025806  0x0000668a jam  0x00000000 , 0x00008024 
+ 00025807  0x0000668b fetcht  0x00000002 , 0x0000419b 
+ 00025808  0x0000668c lshift2  0x00000002 , 0x00000039 
+ 00025809  0x0000668d iforce  0x00000006 
+ 00025810  0x0000668f ifetch  0x00000001 , 0x00000006 
+ 00025811  0x00006690 hstore  0x00000001 , 0x00008025 
+ 00025812  0x00006691 loop  0x000064d2 
+ 00025813  0x00006692 jam  0x00000000 , 0x00008023 
+ 00025814  0x00006693 rtn 
+ 00025815  0x00006699 bpatchx  0x0000008d , 0x00004031 
+ 00025816  0x0000669a call  0x000064dd 
+ 00025817  0x0000669b branch  0x000063f2 
+ 00025818  0x0000669e call  0x000064dd 
+ 00025819  0x0000669f call  0x000063ee 
+ 00025820  0x000066a0 branch  0x000063f6 
+ 00025821  0x000066a3 fetch  0x00000001 , 0x00004212 
+ 00025822  0x000066a4 hstore  0x00000001 , 0x00008086 
+ 00025823  0x000066a5 fetch  0x00000001 , 0x00004213 
+ 00025824  0x000066a6 hstore  0x00000001 , 0x00008087 
+ 00025825  0x000066a7 setarg  0x000001f5 
+ 00025826  0x000066a8 hstore  0x00000002 , 0x0000808a 
+ 00025827  0x000066a9 setarg  0x000001fa 
+ 00025828  0x000066aa hstore  0x00000002 , 0x0000808c 
+ 00025829  0x000066ab branch  0x000063ee 
+ 00025830  0x000066ae hfetch  0x00000001 , 0x00008086 
+ 00025831  0x000066af set1  0x00000007 , 0x0000003f 
+ 00025832  0x000066b0 hstore  0x00000001 , 0x00008086 
+ 00025833  0x000066b1 set0  0x00000007 , 0x0000003f 
+ 00025834  0x000066b2 hstore  0x00000001 , 0x00008086 
+ 00025835  0x000066b3 rtn 
+ 00025836  0x000066b8 set1  0x00000007 , 0x0000003f 
+ 00025837  0x000066b9 store  0x00000002 , 0x000001f5 
+ 00025838  0x000066ba bpatchx  0x0000008e , 0x00004031 
+ 00025839  0x000066bb jam  0x00000002 , 0x00008088 
+ 00025840  0x000066bc jam  0x00000000 , 0x0000808e 
+ 00025841  0x000066bd jam  0x00000002 , 0x00008006 
+ 00025842  0x000066be branch  0x000064fc 
+ 00025843  0x000066c2 force  0x00000001 , 0x00000002 
+ 00025844  0x000066c6 store  0x00000001 , 0x000001f5 
+ 00025845  0x000066c7 bpatchx  0x0000008f , 0x00004031 
+ 00025846  0x000066c8 jam  0x00000001 , 0x00008088 
+ 00025847  0x000066c9 hstoret  0x00000002 , 0x0000808e 
+ 00025848  0x000066ca jam  0x00000002 , 0x00008006 
+ 00025849  0x000066cb call  0x000064fc 
+ 00025850  0x000066cc fetch  0x00000001 , 0x000001fa 
+ 00025851  0x000066cd rtn 
+ 00025852  0x000066d0 fetch  0x00000002 , 0x000040d6 
+ 00025853  0x000066d1 increase  0x00000001 , 0x0000003f 
+ 00025854  0x000066d2 store  0x00000002 , 0x000040d6 
+ 00025855  0x000066d3 hfetch  0x00000001 , 0x0000812c 
+ 00025856  0x000066d4 bbit0  0x00000003 , 0x000064fc 
+ 00025857  0x000066d5 rtn 
+ 00025858  0x000066d8 jam  0x00000040 , 0x00008086 
+ 00025859  0x000066d9 jam  0x00000000 , 0x00008087 
+ 00025860  0x000066da hfetch  0x00000001 , 0x00008081 
+ 00025861  0x000066db set0  0x00000000 , 0x0000003f 
+ 00025862  0x000066dc set1  0x00000001 , 0x0000003f 
+ 00025863  0x000066dd hstore  0x00000001 , 0x00008081 
+ 00025864  0x000066de setarg  0x00000000 
+ 00025865  0x000066df store  0x00000004 , 0x000001f5 
+ 00025866  0x000066e0 rtn 
+ 00025867  0x000066e4 setarg  0x00000000 
+ 00025868  0x000066e5 hstore  0x00000002 , 0x0000808e 
+ 00025869  0x000066e6 setarg  0x00000001 
+ 00025870  0x000066e7 hstore  0x00000002 , 0x00008088 
+ 00025871  0x000066e8 setarg  0x000001f5 
+ 00025872  0x000066e9 hstore  0x00000002 , 0x0000808a 
+ 00025873  0x000066ea jam  0x00000006 , 0x000001f5 
+ 00025874  0x000066eb jam  0x00000002 , 0x00008006 
+ 00025875  0x000066ec branch  0x000064fc 
+ 00025876  0x000066fc disable  0x00000028 
+ 00025877  0x000066fd copy  0x0000003f , 0x00000012 
+ 00025878  0x000066fe fetch  0x00000001 , 0x00004239 
+ 00025879  0x000066ff rtnne  0x00000000 
+ 00025880  0x00006700 enable  0x00000028 
+ 00025881  0x00006701 copy  0x00000012 , 0x0000003f 
+ 00025882  0x00006702 branch  0x00006522 
+ 00025883  0x00006706 fetch  0x00000001 , 0x00004239 
+ 00025884  0x00006707 beq  0x00000001 , 0x00006522 
+ 00025885  0x00006708 beq  0x00000002 , 0x00006528 
+ 00025886  0x00006709 beq  0x00000003 , 0x00006530 
+ 00025887  0x0000670a beq  0x00000004 , 0x00006537 
+ 00025888  0x0000670b beq  0x00000005 , 0x0000653d 
+ 00025889  0x0000670c rtn 
+ 00025890  0x0000670f store  0x00000003 , 0x00004232 
+ 00025891  0x00006710 copy  0x00000011 , 0x0000003f 
+ 00025892  0x00006711 store  0x00000002 , 0x00004235 
+ 00025893  0x00006712 storet  0x00000002 , 0x00004237 
+ 00025894  0x00006713 jam  0x00000002 , 0x00004239 
+ 00025895  0x00006714 branch  0x00006502 
+ 00025896  0x00006716 call  0x00006502 
+ 00025897  0x00006717 jam  0x00000003 , 0x00004239 
+ 00025898  0x00006718 call  0x0000650b 
+ 00025899  0x00006719 arg  0x000001f5 , 0x00000011 
+ 00025900  0x0000671a fetch  0x00000003 , 0x00004232 
+ 00025901  0x0000671b jam  0x00000004 , 0x00008088 
+ 00025902  0x0000671c arg  0x00000020 , 0x00000002 
+ 00025903  0x0000671d branch  0x00006556 
+ 00025904  0x00006720 call  0x00006502 
+ 00025905  0x00006721 call  0x0000650b 
+ 00025906  0x00006722 setarg  0x00000005 
+ 00025907  0x00006723 call  0x000064f3 
+ 00025908  0x00006724 rtnbit1  0x00000000 
+ 00025909  0x00006725 jam  0x00000004 , 0x00004239 
+ 00025910  0x00006726 rtn 
+ 00025911  0x00006728 call  0x00006502 
+ 00025912  0x00006729 jam  0x00000005 , 0x00004239 
+ 00025913  0x0000672a call  0x0000650b 
+ 00025914  0x0000672b call  0x0000654a 
+ 00025915  0x0000672c call  0x00006552 
+ 00025916  0x0000672d branch  0x00006545 
+ 00025917  0x0000672f call  0x00006502 
+ 00025918  0x00006730 call  0x0000650b 
+ 00025919  0x00006731 setarg  0x00000005 
+ 00025920  0x00006732 call  0x000064f3 
+ 00025921  0x00006733 rtnbit1  0x00000000 
+ 00025922  0x00006734 jam  0x00000000 , 0x00004239 
+ 00025923  0x00006735 fetch  0x00000002 , 0x00004201 
+ 00025924  0x00006736 branch  0x00007f9c 
+ 00025925  0x00006738 fetch  0x00000004 , 0x00000aa2 
+ 00025926  0x00006739 fetcht  0x00000002 , 0x00004235 
+ 00025927  0x0000673a increase  0xfffffffc , 0x00000002 
+ 00025928  0x0000673b istore  0x00000004 , 0x00000002 
+ 00025929  0x0000673c rtn 
+ 00025930  0x0000673e fetcht  0x00000002 , 0x00004235 
+ 00025931  0x0000673f copy  0x00000002 , 0x00000011 
+ 00025932  0x00006740 increase  0xfffffffc , 0x00000002 
+ 00025933  0x00006741 ifetch  0x00000004 , 0x00000002 
+ 00025934  0x00006742 store  0x00000004 , 0x00000aa2 
+ 00025935  0x00006743 fetcht  0x00000002 , 0x00004237 
+ 00025936  0x00006744 fetch  0x00000003 , 0x00004232 
+ 00025937  0x00006745 rtn 
+ 00025938  0x0000674a increase  0x00000004 , 0x00000002 
+ 00025939  0x0000674b hstoret  0x00000002 , 0x00008088 
+ 00025940  0x0000674c arg  0x00000002 , 0x00000002 
+ 00025941  0x0000674d increase  0xfffffffc , 0x00000011 
+ 00025942  0x00006750 istoret  0x00000001 , 0x00000011 
+ 00025943  0x00006751 rshift16  0x0000003f , 0x00000002 
+ 00025944  0x00006752 istoret  0x00000001 , 0x00000005 
+ 00025945  0x00006753 rshift8  0x0000003f , 0x00000002 
+ 00025946  0x00006754 istoret  0x00000001 , 0x00000005 
+ 00025947  0x00006755 istore  0x00000001 , 0x00000005 
+ 00025948  0x00006756 deposit  0x00000011 
+ 00025949  0x00006757 hstore  0x00000002 , 0x0000808a 
+ 00025950  0x00006758 setarg  0x00000000 
+ 00025951  0x00006759 hstore  0x00000002 , 0x0000808e 
+ 00025952  0x0000675a jam  0x00000002 , 0x00008006 
+ 00025953  0x0000675b branch  0x000064fc 
+ 00025954  0x00006760 hstoret  0x00000002 , 0x0000808e 
+ 00025955  0x00006761 rshift16  0x0000003f , 0x00000002 
+ 00025956  0x00006762 storet  0x00000001 , 0x000001f6 
+ 00025957  0x00006763 rshift8  0x0000003f , 0x00000002 
+ 00025958  0x00006764 storet  0x00000001 , 0x000001f7 
+ 00025959  0x00006765 store  0x00000001 , 0x000001f8 
+ 00025960  0x00006766 setarg  0x00000004 
+ 00025961  0x00006767 hstore  0x00000002 , 0x00008088 
+ 00025962  0x00006768 jam  0x00000003 , 0x000001f5 
+ 00025963  0x00006769 setarg  0x000001f5 
+ 00025964  0x0000676a hstore  0x00000002 , 0x0000808a 
+ 00025965  0x0000676b deposit  0x00000011 
+ 00025966  0x0000676c hstore  0x00000002 , 0x0000808c 
+ 00025967  0x0000676d hfetch  0x00000001 , 0x00008086 
+ 00025968  0x0000676e isolate0  0x0000000f , 0x00000011 
+ 00025969  0x0000676f setflag  0x00000001 , 0x00000006 , 0x0000003f 
+ 00025970  0x00006770 hstore  0x00000001 , 0x00008086 
+ 00025971  0x00006771 jam  0x00000002 , 0x00008006 
+ 00025972  0x00006773 hfetch  0x00000001 , 0x0000812c 
+ 00025973  0x00006774 bbit1  0x00000007 , 0x00006574 
+ 00025974  0x00006775 arg  0x00000003 , 0x00000007 
+ 00025975  0x00006776 branch  0x000064fc 
+ 00025976  0x0000677b hstoret  0x00000002 , 0x0000808e 
+ 00025977  0x0000677c setarg  0x00000004 
+ 00025978  0x0000677d hstore  0x00000002 , 0x00008088 
+ 00025979  0x0000677e jam  0x00000003 , 0x000001f5 
+ 00025980  0x0000677f setarg  0x000001f5 
+ 00025981  0x00006780 hstore  0x00000002 , 0x0000808a 
+ 00025982  0x00006781 deposit  0x00000011 
+ 00025983  0x00006782 hstore  0x00000002 , 0x0000808c 
+ 00025984  0x00006783 hfetch  0x00000001 , 0x00008086 
+ 00025985  0x00006784 isolate0  0x0000000f , 0x00000011 
+ 00025986  0x00006785 setflag  0x00000001 , 0x00000006 , 0x0000003f 
+ 00025987  0x00006786 hstore  0x00000001 , 0x00008086 
+ 00025988  0x00006787 jam  0x00000002 , 0x00008006 
+ 00025989  0x00006789 hfetch  0x00000001 , 0x0000812c 
+ 00025990  0x0000678a bbit1  0x00000007 , 0x00006585 
+ 00025991  0x0000678b arg  0x00000003 , 0x00000007 
+ 00025992  0x0000678c call  0x000064c0 
+ 00025993  0x0000678d call  0x000064fc 
+ 00025994  0x0000678e isolate1  0x00000002 , 0x0000003f 
+ 00025995  0x0000678f call  0x000064b9 
+ 00025996  0x00006790 fetch  0x00000001 , 0x000001f6 
+ 00025997  0x00006791 lshift16  0x0000003f , 0x00000012 
+ 00025998  0x00006792 fetch  0x00000001 , 0x000001f7 
+ 00025999  0x00006793 lshift8  0x0000003f , 0x0000003f 
+ 00026000  0x00006794 ior  0x00000012 , 0x00000012 
+ 00026001  0x00006795 fetch  0x00000001 , 0x000001f8 
+ 00026002  0x00006796 ior  0x00000012 , 0x0000003f 
+ 00026003  0x00006797 iadd  0x00000002 , 0x0000003f 
+ 00026004  0x00006798 store  0x00000001 , 0x000001f8 
+ 00026005  0x00006799 rshift8  0x0000003f , 0x0000003f 
+ 00026006  0x0000679a store  0x00000001 , 0x000001f7 
+ 00026007  0x0000679b rshift8  0x0000003f , 0x0000003f 
+ 00026008  0x0000679c store  0x00000001 , 0x000001f6 
+ 00026009  0x0000679d rtn 
+ 00026010  0x000067a3 jam  0x00000001 , 0x00008010 
+ 00026011  0x000067a4 rtn 
+ 00026012  0x000067ab jam  0x0000000c , 0x00008091 
+ 00026013  0x000067ac jam  0x0000000d , 0x00008092 
+ 00026014  0x000067ad jam  0x0000000d , 0x00008093 
+ 00026015  0x000067ae jam  0x0000000d , 0x00008094 
+ 00026016  0x000067af jam  0x0000000d , 0x00008095 
+ 00026017  0x000067b0 jam  0x0000000c , 0x00008096 
+ 00026018  0x000067b1 branch  0x000065a9 
+ 00026019  0x000067b5 jam  0x00000005 , 0x00008091 
+ 00026020  0x000067b6 jam  0x00000007 , 0x00008092 
+ 00026021  0x000067b7 jam  0x00000007 , 0x00008093 
+ 00026022  0x000067b8 jam  0x00000007 , 0x00008094 
+ 00026023  0x000067b9 jam  0x00000007 , 0x00008095 
+ 00026024  0x000067ba jam  0x00000005 , 0x00008096 
+ 00026025  0x000067bc hfetch  0x00000001 , 0x0000807b 
+ 00026026  0x000067bd or_into  0x000000c0 , 0x0000003f 
+ 00026027  0x000067be hstore  0x00000001 , 0x0000807b 
+ 00026028  0x000067bf hfetch  0x00000001 , 0x00008081 
+ 00026029  0x000067c0 or_into  0x00000010 , 0x0000003f 
+ 00026030  0x000067c1 hstore  0x00000001 , 0x00008081 
+ 00026031  0x000067c2 rtn 
+ 00026032  0x000067c7 hfetch  0x00000001 , 0x0000812c 
+ 00026033  0x000067c8 bbit0  0x00000005 , 0x000065b0 
+ 00026034  0x000067c9 rtn 
+ 00026035  0x000067d2 hstore  0x00000002 , 0x00008098 
+ 00026036  0x000067d3 deposit  0x00000011 
+ 00026037  0x000067d4 hstore  0x00000002 , 0x0000809a 
+ 00026038  0x000067d5 deposit  0x00000012 
+ 00026039  0x000067d6 hstore  0x00000002 , 0x0000809c 
+ 00026040  0x000067d7 deposit  0x00000002 
+ 00026041  0x000067d8 hstore  0x00000002 , 0x0000809e 
+ 00026042  0x000067d9 arg  0x00000001 , 0x00000002 
+ 00026043  0x000067da nsetflag  0x00000034 , 0x00000001 , 0x00000002 
+ 00026044  0x000067db hstore  0x00000001 , 0x00008090 
+ 00026045  0x000067dc jam  0x00000004 , 0x00008006 
+ 00026046  0x000067dd branch  0x000065b0 
+ 00026047  0x000067e1 set1  0x00000028 , 0x00000000 
+ 00026048  0x000067e2 jam  0x00000008 , 0x00004211 
+ 00026049  0x000067e3 rtn 
+ 00026050  0x000067e6 set0  0x00000028 , 0x00000000 
+ 00026051  0x000067e7 jam  0x00000020 , 0x00004211 
+ 00026052  0x000067e8 rtn 
+ 00026053  0x000067ec fetch  0x00000001 , 0x00004203 
+ 00026054  0x000067ed iadd  0x00000012 , 0x0000003f 
+ 00026055  0x000067ee store  0x00000001 , 0x000001f7 
+ 00026056  0x000067ef branch  0x000065cc 
+ 00026057  0x000067f2 fetch  0x00000002 , 0x000001f7 
+ 00026058  0x000067f3 byteswap  0x0000003f , 0x0000003f 
+ 00026059  0x000067f4 store  0x00000001 , 0x000001f7 
+ 00026060  0x000067fa setarg  0x00000003 
+ 00026061  0x000067fb hstore  0x00000002 , 0x00008098 
+ 00026062  0x000067fc jam  0x000000a0 , 0x000001f6 
+ 00026063  0x000067fd jam  0x000000a1 , 0x000001f8 
+ 00026064  0x000067fe branch  0x000065eb 
+ 00026065  0x00006805 storet  0x00000002 , 0x00000aa2 
+ 00026066  0x00006806 call  0x000065d6 
+ 00026067  0x00006807 fetcht  0x00000002 , 0x00000aa2 
+ 00026068  0x00006808 call  0x00006606 
+ 00026069  0x00006809 branch  0x000065dd 
+ 00026070  0x0000680c fetch  0x00000001 , 0x0000423a 
+ 00026071  0x0000680d rtneq  0x000000ff 
+ 00026072  0x0000680e bbit0  0x00000006 , 0x000065db 
+ 00026073  0x0000680f setarg  0x000249f0 
+ 00026074  0x00006810 call  0x00002a8f 
+ 00026075  0x00006812 fetcht  0x00000001 , 0x0000423a 
+ 00026076  0x00006813 branch  0x00006829 
+ 00026077  0x00006816 fetcht  0x00000001 , 0x0000423a 
+ 00026078  0x00006817 branch  0x00006825 
+ 00026079  0x0000681d bpatchx  0x00000090 , 0x00004032 
+ 00026080  0x0000681e bmark1  0x00000028 , 0x000065c5 
+ 00026081  0x0000681f fetch  0x00000002 , 0x00004203 
+ 00026082  0x00006820 iadd  0x00000012 , 0x0000003f 
+ 00026083  0x00006821 byteswap  0x0000003f , 0x0000003f 
+ 00026084  0x00006822 store  0x00000002 , 0x000001f7 
+ 00026085  0x00006826 bpatchx  0x00000091 , 0x00004032 
+ 00026086  0x00006827 bmark1  0x00000028 , 0x000065c9 
+ 00026087  0x00006828 setarg  0x00000004 
+ 00026088  0x00006829 hstore  0x00000002 , 0x00008098 
+ 00026089  0x0000682a jam  0x000000a0 , 0x000001f6 
+ 00026090  0x0000682b jam  0x000000a1 , 0x000001f9 
+ 00026091  0x0000682d setarg  0x000001f6 
+ 00026092  0x0000682e hstore  0x00000002 , 0x0000809a 
+ 00026093  0x0000682f hstoret  0x00000002 , 0x0000809e 
+ 00026094  0x00006830 deposit  0x00000011 
+ 00026095  0x00006831 hstore  0x00000002 , 0x0000809c 
+ 00026096  0x00006832 setarg  0x00000002 
+ 00026097  0x00006833 isolate0  0x0000000f , 0x00000011 
+ 00026098  0x00006834 setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00026099  0x00006835 hstore  0x00000001 , 0x00008090 
+ 00026100  0x00006836 jam  0x00000004 , 0x00008006 
+ 00026101  0x00006837 arg  0x00000005 , 0x00000007 
+ 00026102  0x00006838 call  0x000064c0 
+ 00026103  0x00006839 call  0x000065b0 
+ 00026104  0x0000683a isolate1  0x00000004 , 0x0000003f 
+ 00026105  0x0000683b call  0x000064b9 
+ 00026106  0x0000683c bmark1  0x00000028 , 0x00006601 
+ 00026107  0x0000683d fetch  0x00000002 , 0x000001f7 
+ 00026108  0x0000683e byteswap  0x0000003f , 0x0000003f 
+ 00026109  0x0000683f iadd  0x00000002 , 0x0000003f 
+ 00026110  0x00006840 byteswap  0x0000003f , 0x0000003f 
+ 00026111  0x00006841 store  0x00000002 , 0x000001f7 
+ 00026112  0x00006842 rtn 
+ 00026113  0x00006845 fetch  0x00000001 , 0x000001f7 
+ 00026114  0x00006846 iadd  0x00000002 , 0x0000003f 
+ 00026115  0x00006847 byteswap  0x0000003f , 0x0000003f 
+ 00026116  0x00006848 store  0x00000002 , 0x000001f7 
+ 00026117  0x00006849 rtn 
+ 00026118  0x00006850 fetch  0x00000002 , 0x00004203 
+ 00026119  0x00006851 iadd  0x00000012 , 0x0000003f 
+ 00026120  0x00006855 store  0x00000002 , 0x00000a9a 
+ 00026121  0x00006856 bpatchx  0x00000092 , 0x00004032 
+ 00026122  0x00006857 storet  0x00000002 , 0x00000aa2 
+ 00026123  0x00006858 copy  0x00000011 , 0x0000003f 
+ 00026124  0x00006859 store  0x00000002 , 0x00000ab9 
+ 00026125  0x0000685b call  0x0000661d 
+ 00026126  0x0000685d fetcht  0x00000002 , 0x00000ab2 
+ 00026127  0x0000685e fetch  0x00000002 , 0x00000ab9 
+ 00026128  0x0000685f copy  0x0000003f , 0x00000011 
+ 00026129  0x00006860 fetch  0x00000002 , 0x00000a9a 
+ 00026130  0x00006862 call  0x0000663d 
+ 00026131  0x00006864 fetch  0x00000002 , 0x00000ab2 
+ 00026132  0x00006865 fetcht  0x00000002 , 0x00000ab9 
+ 00026133  0x00006866 iadd  0x00000002 , 0x00000002 
+ 00026134  0x00006867 storet  0x00000002 , 0x00000ab9 
+ 00026135  0x00006868 fetcht  0x00000002 , 0x00000a9a 
+ 00026136  0x00006869 iadd  0x00000002 , 0x00000002 
+ 00026137  0x0000686a storet  0x00000002 , 0x00000a9a 
+ 00026138  0x0000686b fetch  0x00000002 , 0x00000aa2 
+ 00026139  0x0000686c nbranch  0x0000660d , 0x00000034 
+ 00026140  0x0000686d rtn 
+ 00026141  0x00006876 bpatchx  0x00000093 , 0x00004032 
+ 00026142  0x00006877 fetch  0x00000001 , 0x00004211 
+ 00026143  0x00006878 increase  0xffffffff , 0x0000003f 
+ 00026144  0x00006879 fetcht  0x00000002 , 0x00000a9a 
+ 00026145  0x0000687a ior  0x00000002 , 0x0000003f 
+ 00026146  0x0000687b increase  0x00000001 , 0x0000003f 
+ 00026147  0x0000687c store  0x00000003 , 0x00000ab6 
+ 00026148  0x0000687e fetch  0x00000002 , 0x00000aa2 
+ 00026149  0x0000687f iadd  0x00000002 , 0x0000003f 
+ 00026150  0x00006881 fetcht  0x00000003 , 0x00000ab6 
+ 00026151  0x00006882 isub  0x00000002 , 0x0000003f 
+ 00026152  0x00006883 nbranch  0x0000662f , 0x00000002 
+ 00026153  0x00006884 store  0x00000002 , 0x00000aa2 
+ 00026154  0x00006885 fetch  0x00000003 , 0x00000ab6 
+ 00026155  0x00006886 fetcht  0x00000002 , 0x00000a9a 
+ 00026156  0x00006887 isub  0x00000002 , 0x0000003f 
+ 00026157  0x00006888 store  0x00000002 , 0x00000ab2 
+ 00026158  0x00006889 rtn 
+ 00026159  0x0000688b fetch  0x00000002 , 0x00000aa2 
+ 00026160  0x0000688c store  0x00000002 , 0x00000ab2 
+ 00026161  0x0000688d setarg  0x00000000 
+ 00026162  0x0000688e store  0x00000002 , 0x00000aa2 
+ 00026163  0x0000688f rtn 
+ 00026164  0x00006892 increase  0x00000002 , 0x00000002 
+ 00026165  0x00006893 hstoret  0x00000002 , 0x00008098 
+ 00026166  0x00006894 increase  0xfffffffe , 0x00000011 
+ 00026167  0x00006895 ifetcht  0x00000003 , 0x00000011 
+ 00026168  0x00006896 copy  0x00000002 , 0x00000012 
+ 00026169  0x00006897 arg  0x000000a0 , 0x00000002 
+ 00026170  0x00006898 istoret  0x00000001 , 0x00000011 
+ 00026171  0x0000689a istore  0x00000001 , 0x00000005 
+ 00026172  0x0000689b branch  0x0000664a 
+ 00026173  0x0000689f copy  0x0000003f , 0x00000012 
+ 00026174  0x000068a0 bpatchx  0x00000094 , 0x00004032 
+ 00026175  0x000068a1 bmark1  0x00000028 , 0x00006634 
+ 00026176  0x000068a2 copy  0x00000012 , 0x0000003f 
+ 00026177  0x000068a3 increase  0x00000003 , 0x00000002 
+ 00026178  0x000068a4 hstoret  0x00000002 , 0x00008098 
+ 00026179  0x000068a5 increase  0xfffffffd , 0x00000011 
+ 00026180  0x000068a6 ifetcht  0x00000003 , 0x00000011 
+ 00026181  0x000068a7 copy  0x00000002 , 0x00000012 
+ 00026182  0x000068a8 arg  0x000000a0 , 0x00000002 
+ 00026183  0x000068a9 istoret  0x00000001 , 0x00000011 
+ 00026184  0x000068aa byteswap  0x0000003f , 0x0000003f 
+ 00026185  0x000068ab istore  0x00000002 , 0x00000005 
+ 00026186  0x000068ad deposit  0x00000011 
+ 00026187  0x000068ae hstore  0x00000002 , 0x0000809a 
+ 00026188  0x000068af setarg  0x00000000 
+ 00026189  0x000068b0 hstore  0x00000002 , 0x0000809e 
+ 00026190  0x000068b1 jam  0x00000001 , 0x00008090 
+ 00026191  0x000068b2 jam  0x00000004 , 0x00008006 
+ 00026192  0x000068b3 call  0x000065b0 
+ 00026193  0x000068b4 copy  0x00000012 , 0x0000003f 
+ 00026194  0x000068b5 istore  0x00000003 , 0x00000011 
+ 00026195  0x000068b8 bpatchx  0x00000095 , 0x00004032 
+ 00026196  0x000068b9 jam  0x00000000 , 0x000001f9 
+ 00026197  0x000068bb setarg  0x00000001 
+ 00026198  0x000068bc hstore  0x00000002 , 0x00008098 
+ 00026199  0x000068bd jam  0x000000a0 , 0x000001f6 
+ 00026200  0x000068be setarg  0x000001f6 
+ 00026201  0x000068bf hstore  0x00000002 , 0x0000809a 
+ 00026202  0x000068c0 setarg  0x00000000 
+ 00026203  0x000068c1 hstore  0x00000002 , 0x0000809e 
+ 00026204  0x000068c2 hstore  0x00000002 , 0x0000809c 
+ 00026205  0x000068c3 setarg  0x00000003 
+ 00026206  0x000068c4 hstore  0x00000001 , 0x00008090 
+ 00026207  0x000068c5 jam  0x00000004 , 0x00008006 
+ 00026208  0x000068c6 call  0x000065b0 
+ 00026209  0x000068c7 hfetch  0x00000001 , 0x0000812c 
+ 00026210  0x000068c8 rtnbit0  0x00000006 
+ 00026211  0x000068c9 nop  0x000005dc 
+ 00026212  0x000068ca fetch  0x00000001 , 0x000001f9 
+ 00026213  0x000068cb increase  0x00000001 , 0x0000003f 
+ 00026214  0x000068cc store  0x00000001 , 0x000001f9 
+ 00026215  0x000068cd sub  0x0000003f , 0x00000028 , 0x0000003e 
+ 00026216  0x000068ce nrtn  0x00000002 
+ 00026217  0x000068cf branch  0x00006655 
+ 00026218  0x000068d4 jam  0x00000070 , 0x00008973 
+ 00026219  0x000068d5 nop  0x00000bb8 
+ 00026220  0x000068d6 rtn 
+ 00026221  0x000068d9 jam  0x00000030 , 0x00008973 
+ 00026222  0x000068da rtn 
+ 00026223  0x000068dd lshift3  0x0000003f , 0x0000003f 
+ 00026224  0x000068de hstore  0x00000002 , 0x00008045 
+ 00026225  0x000068df jam  0x00000000 , 0x0000804b 
+ 00026226  0x000068e0 rtn 
+ 00026227  0x000068e4 call  0x0000666f 
+ 00026228  0x000068e5 call  0x000066a0 
+ 00026229  0x000068e7 ifetcht  0x00000001 , 0x00000011 
+ 00026230  0x000068e8 increase  0x00000001 , 0x00000011 
+ 00026231  0x000068e9 force  0x00000000 , 0x00000007 
+ 00026232  0x000068eb qisolate0  0x00000002 
+ 00026233  0x000068ec branch  0x00006697 , 0x00000001 
+ 00026234  0x000068ed hfetch  0x00000001 , 0x00008046 
+ 00026235  0x000068ee set1  0x00000006 , 0x0000003f 
+ 00026236  0x000068ef set1  0x00000007 , 0x0000003f 
+ 00026237  0x000068f0 hstore  0x00000001 , 0x00008046 
+ 00026238  0x000068f1 jam  0x00000002 , 0x00008047 
+ 00026239  0x000068f2 jam  0x00000082 , 0x00008047 
+ 00026240  0x000068f3 set0  0x00000007 , 0x0000003f 
+ 00026241  0x000068f4 hstore  0x00000001 , 0x00008046 
+ 00026242  0x000068f5 jam  0x0000008a , 0x00008047 
+ 00026243  0x000068f6 nop  0x0000000b 
+ 00026244  0x000068f7 jam  0x000000ca , 0x00008047 
+ 00026245  0x000068f8 nop  0x00000021 
+ 00026246  0x000068f9 jam  0x0000004a , 0x00008047 
+ 00026247  0x000068fa nop  0x0000002c 
+ 00026248  0x000068fb jam  0x000000ca , 0x00008047 
+ 00026249  0x000068fc nop  0x00000016 
+ 00026250  0x000068fd jam  0x0000008a , 0x00008047 
+ 00026251  0x000068fe nop  0x00000021 
+ 00026252  0x000068ff jam  0x00000082 , 0x00008047 
+ 00026253  0x00006900 nop  0x00000001 
+ 00026254  0x00006901 jam  0x00000092 , 0x00008047 
+ 00026255  0x00006902 nop  0x0000000a 
+ 00026256  0x00006903 jam  0x000000b2 , 0x00008047 
+ 00026257  0x00006904 hfetch  0x00000001 , 0x00008007 
+ 00026258  0x00006905 jam  0x00000092 , 0x00008047 
+ 00026259  0x00006906 nop  0x00000001 
+ 00026260  0x00006907 jam  0x00000082 , 0x00008047 
+ 00026261  0x00006908 qisolate0  0x0000003f 
+ 00026262  0x00006909 branch  0x00006678 , 0x00000001 
+ 00026263  0x0000690b hfetch  0x00000002 , 0x00008045 
+ 00026264  0x0000690c increase  0x00000001 , 0x0000003f 
+ 00026265  0x0000690d hstore  0x00000002 , 0x00008045 
+ 00026266  0x0000690e increase  0x00000001 , 0x00000007 
+ 00026267  0x0000690f compare  0x00000008 , 0x00000007 , 0x0000000f 
+ 00026268  0x00006910 nbranch  0x00006678 , 0x00000001 
+ 00026269  0x00006911 loop  0x00006675 
+ 00026270  0x00006912 jam  0x00000083 , 0x00008047 
+ 00026271  0x00006913 rtn 
+ 00026272  0x00006916 jam  0x00000082 , 0x00008047 
+ 00026273  0x00006917 nop  0x0000000c 
+ 00026274  0x00006918 jam  0x00000080 , 0x00008047 
+ 00026275  0x00006919 jam  0x00000082 , 0x00008047 
+ 00026276  0x0000691a nop  0x00000096 
+ 00026277  0x0000691b rtn 
+ 00026278  0x0000691f call  0x000066a0 
+ 00026279  0x00006920 jam  0x000000a2 , 0x00008047 
+ 00026280  0x00006921 deposit  0x00000011 
+ 00026281  0x00006922 hstore  0x00000002 , 0x00008048 
+ 00026282  0x00006923 set1  0x0000000b , 0x00000002 
+ 00026283  0x00006924 isolate0  0x0000000f , 0x0000003f 
+ 00026284  0x00006925 setflag  0x00000001 , 0x0000000f , 0x00000002 
+ 00026285  0x00006926 hstoret  0x00000002 , 0x0000804a 
+ 00026286  0x00006927 jam  0x00000001 , 0x00008006 
+ 00026287  0x00006928 rtn 
+ 00026288  0x0000692b hfetch  0x00000001 , 0x0000812c 
+ 00026289  0x0000692c bbit0  0x00000001 , 0x000066b0 
+ 00026290  0x0000692d rtn 
+ 00026291  0x00006931 call  0x0000666f 
+ 00026292  0x00006932 call  0x000066a6 
+ 00026293  0x00006933 call  0x000066b0 
+ 00026294  0x00006934 jam  0x00000083 , 0x00008047 
+ 00026295  0x00006935 rtn 
+ 00026296  0x0000693b hfetch  0x00000002 , 0x00008124 
+ 00026297  0x0000693c hstore  0x00000002 , 0x00008045 
+ 00026298  0x0000693d call  0x000066a6 
+ 00026299  0x0000693e arg  0x00000001 , 0x00000007 
+ 00026300  0x0000693f call  0x000064c0 
+ 00026301  0x00006940 call  0x000066b0 
+ 00026302  0x00006941 isolate1  0x00000000 , 0x0000003f 
+ 00026303  0x00006942 call  0x000064b9 
+ 00026304  0x00006943 jam  0x00000083 , 0x00008047 
+ 00026305  0x00006944 rtn 
+ 00026306  0x00006948 hfetch  0x00000002 , 0x0000805e 
+ 00026307  0x00006949 iforce  0x0000000a 
+ 00026308  0x0000694a rtn 
+ 00026309  0x0000694d deposit  0x0000000a 
+ 00026310  0x0000694e hstore  0x00000002 , 0x0000805e 
+ 00026311  0x0000694f rtn 
+ 00026312  0x00006952 deposit  0x00000003 
+ 00026313  0x00006953 hstore  0x00000002 , 0x00008058 
+ 00026314  0x00006954 rtn 
+ 00026315  0x00006957 hfetch  0x00000002 , 0x00008058 
+ 00026316  0x00006958 copy  0x0000003f , 0x00000003 
+ 00026317  0x00006959 rtn 
+ 00026318  0x0000695c fetch  0x00000002 , 0x00004243 
+ 00026319  0x0000695d hstore  0x00000002 , 0x00008052 
+ 00026320  0x0000695e rtn 
+ 00026321  0x00006961 deposit  0x00000039 
+ 00026322  0x00006962 rtn  0x00000034 
+ 00026323  0x00006964 increase  0xfffffff8 , 0x00000039 
+ 00026324  0x00006965 call  0x000066de , 0x00000002 
+ 00026325  0x00006966 rtn  0x00000005 
+ 00026326  0x00006967 branch  0x000066d3 , 0x00000002 
+ 00026327  0x00006968 increase  0x00000008 , 0x00000039 
+ 00026328  0x0000696a increase  0xfffffffc , 0x00000039 
+ 00026329  0x0000696b call  0x000066e1 , 0x00000002 
+ 00026330  0x0000696c rtn  0x00000005 
+ 00026331  0x0000696d branch  0x000066d8 , 0x00000002 
+ 00026332  0x0000696e increase  0x00000004 , 0x00000039 
+ 00026333  0x0000696f branch  0x000066e4 
+ 00026334  0x00006972 ifetch  0x00000008 , 0x00000006 
+ 00026335  0x00006973 istore  0x00000008 , 0x0000000a 
+ 00026336  0x00006974 rtn 
+ 00026337  0x00006977 ifetch  0x00000004 , 0x00000006 
+ 00026338  0x00006978 istore  0x00000004 , 0x0000000a 
+ 00026339  0x00006979 rtn 
+ 00026340  0x0000697c deposit  0x00000039 
+ 00026341  0x0000697d rtn  0x00000034 
+ 00026342  0x0000697f ifetch  0x00000001 , 0x00000006 
+ 00026343  0x00006980 istore  0x00000001 , 0x0000000a 
+ 00026344  0x00006981 loop  0x000066e6 
+ 00026345  0x00006982 rtn 
+ 00026346  0x00006985 deposit  0x00000039 
+ 00026347  0x00006986 rtn  0x00000034 
+ 00026348  0x00006988 increase  0xfffffff8 , 0x00000039 
+ 00026349  0x00006989 call  0x000066f7 , 0x00000002 
+ 00026350  0x0000698a rtn  0x00000005 
+ 00026351  0x0000698b branch  0x000066ec , 0x00000002 
+ 00026352  0x0000698c increase  0x00000008 , 0x00000039 
+ 00026353  0x0000698e increase  0xfffffffc , 0x00000039 
+ 00026354  0x0000698f call  0x000066fa , 0x00000002 
+ 00026355  0x00006990 rtn  0x00000005 
+ 00026356  0x00006991 branch  0x000066f1 , 0x00000002 
+ 00026357  0x00006992 increase  0x00000004 , 0x00000039 
+ 00026358  0x00006993 branch  0x000066fd 
+ 00026359  0x00006996 ifetch  0x00000008 , 0x00000003 
+ 00026360  0x00006997 istore  0x00000008 , 0x00000005 
+ 00026361  0x00006998 rtn 
+ 00026362  0x0000699b ifetch  0x00000004 , 0x00000003 
+ 00026363  0x0000699c istore  0x00000004 , 0x00000005 
+ 00026364  0x0000699d rtn 
+ 00026365  0x000069a1 deposit  0x00000039 
+ 00026366  0x000069a2 rtn  0x00000034 
+ 00026367  0x000069a4 ifetch  0x00000001 , 0x00000003 
+ 00026368  0x000069a5 istore  0x00000001 , 0x00000005 
+ 00026369  0x000069a6 loop  0x000066ff 
+ 00026370  0x000069a7 rtn 
+ 00026371  0x000069ab deposit  0x00000039 
+ 00026372  0x000069ac rtn  0x00000034 
+ 00026373  0x000069ae ifetch  0x00000001 , 0x00000003 
+ 00026374  0x000069af istore  0x00000001 , 0x0000000a 
+ 00026375  0x000069b0 loop  0x00006705 
+ 00026376  0x000069b1 rtn 
+ 00026377  0x000069b7 jam  0x0000003d , 0x00000a99 
+ 00026378  0x000069b8 branch  0x00007d86 
+ 00026379  0x000069bc bpatchx  0x00000096 , 0x00004032 
+ 00026380  0x000069bd fetch  0x00000001 , 0x00004217 
+ 00026381  0x000069be rtn  0x00000034 
+ 00026382  0x000069bf call  0x000067a3 
+ 00026383  0x000069c0 call  0x000067a9 , 0x00000005 
+ 00026384  0x000069c1 call  0x0000673e 
+ 00026385  0x000069c3 fetch  0x00000001 , 0x00004217 
+ 00026386  0x000069c4 icopy  0x00000013 
+ 00026387  0x000069c5 fetcht  0x00000002 , 0x00004215 
+ 00026388  0x000069c6 storet  0x00000002 , 0x0000018c 
+ 00026389  0x000069c8 copy  0x00000013 , 0x0000003f 
+ 00026390  0x000069c9 branch  0x00006709 , 0x00000034 
+ 00026391  0x000069ca increase  0xffffffff , 0x00000013 
+ 00026392  0x000069cb copy  0x00000002 , 0x00000011 
+ 00026393  0x000069cc ifetch  0x00000001 , 0x00000011 
+ 00026394  0x000069cd fetcht  0x00000001 , 0x00000184 
+ 00026395  0x000069ce isub  0x00000002 , 0x0000003e 
+ 00026396  0x000069cf call  0x00006725 , 0x00000005 
+ 00026397  0x000069d0 branch  0x00006721 , 0x00000002 
+ 00026398  0x000069d1 ifetch  0x00000001 , 0x00000011 
+ 00026399  0x000069d2 increase  0x00000001 , 0x0000003f 
+ 00026400  0x000069d3 istore  0x00000001 , 0x00000011 
+ 00026401  0x000069d5 fetcht  0x00000002 , 0x0000018c 
+ 00026402  0x000069d6 increase  0x00000022 , 0x00000002 
+ 00026403  0x000069d7 storet  0x00000002 , 0x0000018c 
+ 00026404  0x000069d8 branch  0x00006715 
+ 00026405  0x000069db setarg  0x00000000 
+ 00026406  0x000069dc istore  0x00000001 , 0x00000011 
+ 00026407  0x000069dd fetch  0x00000001 , 0x00000185 
+ 00026408  0x000069de istore  0x00000001 , 0x00000005 
+ 00026409  0x000069df bne  0x00000033 , 0x00006733 
+ 00026410  0x000069e0 arg  0x000041be , 0x00000012 
+ 00026411  0x000069e2 ifetch  0x00000006 , 0x00000006 
+ 00026412  0x000069e3 istore  0x00000008 , 0x00000005 
+ 00026413  0x000069e4 setarg  0x00000000 
+ 00026414  0x000069e5 istore  0x00000008 , 0x00000005 
+ 00026415  0x000069e6 copy  0x00000012 , 0x00000006 
+ 00026416  0x000069e8 call  0x00007ebf 
+ 00026417  0x000069e9 force  0x00000001 , 0x0000003e 
+ 00026418  0x000069ea rtn 
+ 00026419  0x000069ed beq  0x00000036 , 0x00006737 
+ 00026420  0x000069ee beq  0x00000037 , 0x0000673b 
+ 00026421  0x000069ef arg  0x00004419 , 0x00000012 
+ 00026422  0x000069f0 branch  0x0000672b 
+ 00026423  0x000069f3 arg  0x000044d5 , 0x00000006 
+ 00026424  0x000069f4 call  0x00007ebf 
+ 00026425  0x000069f6 arg  0x00004419 , 0x00000006 
+ 00026426  0x000069f7 branch  0x00006730 
+ 00026427  0x000069fa arg  0x000044cd , 0x00000006 
+ 00026428  0x000069fb call  0x00007ebf 
+ 00026429  0x000069fc branch  0x00006739 
+ 00026430  0x00006a00 call  0x00007fe9 
+ 00026431  0x00006a01 fetch  0x00000001 , 0x00004217 
+ 00026432  0x00006a02 rtn  0x00000034 
+ 00026433  0x00006a03 fetch  0x00000002 , 0x00004682 
+ 00026434  0x00006a04 bbit1  0x00000000 , 0x00006754 
+ 00026435  0x00006a06 bpatchx  0x00000097 , 0x00004032 
+ 00026436  0x00006a07 fetch  0x00000001 , 0x0000448e 
+ 00026437  0x00006a08 beq  0x00000000 , 0x0000674d 
+ 00026438  0x00006a09 fetch  0x00000001 , 0x00000454 
+ 00026439  0x00006a0a compare  0x000000c0 , 0x0000003f , 0x000000c0 
+ 00026440  0x00006a0b branch  0x0000674d , 0x00000001 
+ 00026441  0x00006a0c compare  0x00000040 , 0x0000003f , 0x000000c0 
+ 00026442  0x00006a0d branch  0x00006752 , 0x00000001 
+ 00026443  0x00006a0e compare  0x00000000 , 0x0000003f , 0x000000c0 
+ 00026444  0x00006a0f branch  0x00006750 , 0x00000001 
+ 00026445  0x00006a11 jam  0x00000035 , 0x00000185 
+ 00026446  0x00006a12 fetch  0x00000006 , 0x0000044f 
+ 00026447  0x00006a13 branch  0x00006757 
+ 00026448  0x00006a16 jam  0x00000037 , 0x00000185 
+ 00026449  0x00006a17 branch  0x00006757 
+ 00026450  0x00006a1b jam  0x00000036 , 0x00000185 
+ 00026451  0x00006a1c branch  0x00006757 
+ 00026452  0x00006a20 bpatchx  0x00000098 , 0x00004033 
+ 00026453  0x00006a21 jam  0x00000033 , 0x00000185 
+ 00026454  0x00006a22 fetch  0x00000006 , 0x00000040 
+ 00026455  0x00006a24 store  0x00000006 , 0x00000186 
+ 00026456  0x00006a25 fetch  0x00000002 , 0x00004215 
+ 00026457  0x00006a26 ifetcht  0x00000001 , 0x0000003f 
+ 00026458  0x00006a27 pincrease  0x00000001 
+ 00026459  0x00006a28 store  0x00000002 , 0x0000018c 
+ 00026460  0x00006a29 storet  0x00000001 , 0x00000184 
+ 00026461  0x00006a2a fetch  0x00000001 , 0x00004217 
+ 00026462  0x00006a2b icopy  0x00000013 
+ 00026463  0x00006a2d fetch  0x00000002 , 0x0000018c 
+ 00026464  0x00006a2e copy  0x0000003f , 0x00000011 
+ 00026465  0x00006a2f call  0x0000676f 
+ 00026466  0x00006a30 rtn  0x00000028 
+ 00026467  0x00006a31 fetcht  0x00000002 , 0x0000018c 
+ 00026468  0x00006a32 increase  0x00000022 , 0x00000002 
+ 00026469  0x00006a33 storet  0x00000002 , 0x0000018c 
+ 00026470  0x00006a34 increase  0xffffffff , 0x00000002 
+ 00026471  0x00006a35 ifetch  0x00000001 , 0x00000002 
+ 00026472  0x00006a36 store  0x00000001 , 0x00000184 
+ 00026473  0x00006a37 increase  0xffffffff , 0x00000013 
+ 00026474  0x00006a38 nbranch  0x0000675f , 0x00000005 
+ 00026475  0x00006a39 fetch  0x00000001 , 0x00004217 
+ 00026476  0x00006a3a pincrease  0xffffffff 
+ 00026477  0x00006a3b store  0x00000001 , 0x00000184 
+ 00026478  0x00006a3c rtn 
+ 00026479  0x00006a3e fetch  0x00000001 , 0x00000185 
+ 00026480  0x00006a3f bne  0x00000033 , 0x00006776 
+ 00026481  0x00006a41 arg  0x00000185 , 0x00000012 
+ 00026482  0x00006a42 arg  0x00000007 , 0x00000039 
+ 00026483  0x00006a43 call  0x00007f88 
+ 00026484  0x00006a44 branch  0x00007fe7 , 0x00000005 
+ 00026485  0x00006a45 rtn 
+ 00026486  0x00006a48 beq  0x00000036 , 0x00006779 
+ 00026487  0x00006a49 beq  0x00000037 , 0x00006794 
+ 00026488  0x00006a4a branch  0x00006771 
+ 00026489  0x00006a4d ifetcht  0x00000001 , 0x00000011 
+ 00026490  0x00006a4e isub  0x00000002 , 0x0000003e 
+ 00026491  0x00006a4f nrtn  0x00000005 
+ 00026492  0x00006a50 arg  0x00000ac2 , 0x00000005 
+ 00026493  0x00006a51 arg  0x00000010 , 0x00000039 
+ 00026494  0x00006a52 call  0x00007ed4 
+ 00026495  0x00006a53 fetch  0x00000003 , 0x00000452 
+ 00026496  0x00006a54 store  0x00000003 , 0x00000ac2 
+ 00026497  0x00006a55 call  0x0000678b 
+ 00026498  0x00006a56 fetch  0x00000002 , 0x00000adf 
+ 00026499  0x00006a57 byteswap  0x0000003f , 0x0000003f 
+ 00026500  0x00006a58 lshift8  0x0000003f , 0x00000002 
+ 00026501  0x00006a59 ifetch  0x00000001 , 0x00000006 
+ 00026502  0x00006a5a iadd  0x00000002 , 0x0000003f 
+ 00026503  0x00006a5b fetcht  0x00000003 , 0x0000044f 
+ 00026504  0x00006a5c isub  0x00000002 , 0x0000003e 
+ 00026505  0x00006a5d branch  0x00007fe7 , 0x00000005 
+ 00026506  0x00006a5e rtn 
+ 00026507  0x00006a62 arg  0x00000ac2 , 0x00000006 
+ 00026508  0x00006a63 call  0x00007486 
+ 00026509  0x00006a65 ifetch  0x00000001 , 0x00000011 
+ 00026510  0x00006a66 call  0x00007487 
+ 00026511  0x00006a67 force  0x00000038 , 0x00000036 
+ 00026512  0x00006a68 force  0x00000000 , 0x00000036 
+ 00026513  0x00006a69 call  0x0000741d 
+ 00026514  0x00006a6a arg  0x00000ad2 , 0x00000005 
+ 00026515  0x00006a6b branch  0x00007497 
+ 00026516  0x00006a6e ifetcht  0x00000001 , 0x00000011 
+ 00026517  0x00006a6f isub  0x00000002 , 0x0000003e 
+ 00026518  0x00006a70 nrtn  0x00000005 
+ 00026519  0x00006a71 copy  0x00000006 , 0x00000011 
+ 00026520  0x00006a72 add  0x00000006 , 0x00000008 , 0x00000013 
+ 00026521  0x00006a73 arg  0x000044cd , 0x00000012 
+ 00026522  0x00006a74 arg  0x00000008 , 0x00000039 
+ 00026523  0x00006a75 call  0x00007f88 
+ 00026524  0x00006a76 branch  0x00007fe7 , 0x00000005 
+ 00026525  0x00006a77 copy  0x00000013 , 0x00000011 
+ 00026526  0x00006a78 arg  0x000044d5 , 0x00000012 
+ 00026527  0x00006a79 arg  0x00000008 , 0x00000039 
+ 00026528  0x00006a7a call  0x00007f88 
+ 00026529  0x00006a7b branch  0x00007fe7 , 0x00000005 
+ 00026530  0x00006a7c rtn 
+ 00026531  0x00006a7f fetch  0x00000002 , 0x00004215 
+ 00026532  0x00006a80 ifetcht  0x00000001 , 0x0000003f 
+ 00026533  0x00006a81 pincrease  0x00000022 
+ 00026534  0x00006a82 ifetch  0x00000001 , 0x0000003f 
+ 00026535  0x00006a83 isub  0x00000002 , 0x0000003e 
+ 00026536  0x00006a84 rtn 
+ 00026537  0x00006a87 fetch  0x00000001 , 0x00004217 
+ 00026538  0x00006a88 icopy  0x00000039 
+ 00026539  0x00006a89 fetcht  0x00000002 , 0x00004215 
+ 00026540  0x00006a8a setarg  0x00000000 
+ 00026541  0x00006a8c istore  0x00000001 , 0x00000002 
+ 00026542  0x00006a8d increase  0x00000022 , 0x00000002 
+ 00026543  0x00006a8e pincrease  0x00000001 
+ 00026544  0x00006a8f loop  0x000067ad 
+ 00026545  0x00006a90 rtn 
+ 00026546  0x00006a93 bpatchx  0x00000099 , 0x00004033 
+ 00026547  0x00006a94 call  0x0000673e 
+ 00026548  0x00006a95 fetch  0x00000001 , 0x00000030 
+ 00026549  0x00006a96 setflag  0x00000028 , 0x00000006 , 0x0000003f 
+ 00026550  0x00006a97 store  0x00000001 , 0x00000030 
+ 00026551  0x00006a98 nbranch  0x000067bc , 0x00000028 
+ 00026552  0x00006a99 add  0x00000011 , 0x0000000a , 0x00000006 
+ 00026553  0x00006a9b arg  0x000041be , 0x00000005 
+ 00026554  0x00006a9c call  0x00007ebf 
+ 00026555  0x00006a9d branch  0x000067d7 
+ 00026556  0x00006a9f jam  0x00000000 , 0x000041bd 
+ 00026557  0x00006aa0 rtn 
+ 00026558  0x00006aa3 fetch  0x00000009 , 0x000044cb 
+ 00026559  0x00006aa4 branch  0x000067ca , 0x00000034 
+ 00026560  0x00006aa5 call  0x0000673e 
+ 00026561  0x00006aa6 nbranch  0x000067ca , 0x00000028 
+ 00026562  0x00006aa7 fetch  0x00000002 , 0x0000018c 
+ 00026563  0x00006aa8 add  0x0000003f , 0x00000001 , 0x00000006 
+ 00026564  0x00006aa9 arg  0x000044d5 , 0x00000005 
+ 00026565  0x00006aaa call  0x00007ebf 
+ 00026566  0x00006aab arg  0x00004419 , 0x00000005 
+ 00026567  0x00006aac call  0x00007ebf 
+ 00026568  0x00006aad jam  0x00000001 , 0x00004429 
+ 00026569  0x00006aae rtn 
+ 00026570  0x00006ab1 jam  0x00000000 , 0x00004429 
+ 00026571  0x00006ab2 rtn 
+ 00026572  0x00006ab6 fetch  0x00000006 , 0x0000044f 
+ 00026573  0x00006ab7 store  0x00000006 , 0x00000186 
+ 00026574  0x00006ab8 jam  0x00000034 , 0x00000185 
+ 00026575  0x00006ab9 branch  0x000067d3 
+ 00026576  0x00006abb fetch  0x00000006 , 0x00000040 
+ 00026577  0x00006abc store  0x00000006 , 0x00000186 
+ 00026578  0x00006abd jam  0x00000033 , 0x00000185 
+ 00026579  0x00006abf fetch  0x00000001 , 0x00004092 
+ 00026580  0x00006ac0 beq  0x0000000a , 0x0000670b 
+ 00026581  0x00006ac1 bbit1  0x00000006 , 0x000042da 
+ 00026582  0x00006ac2 rtn 
+ 00026583  0x00006ac6 fetch  0x00000008 , 0x000041be 
+ 00026584  0x00006ac7 fetcht  0x00000008 , 0x000041c6 
+ 00026585  0x00006ac8 ior  0x00000002 , 0x0000003f 
+ 00026586  0x00006ac9 rtn  0x00000034 
+ 00026587  0x00006aca jam  0x00000001 , 0x000041bd 
+ 00026588  0x00006acb rtn 
+ 00026589  0x00006ad3 bpatchx  0x0000009a , 0x00004033 
+ 00026590  0x00006ad4 set1  0x00000007 , 0x00000002 
+ 00026591  0x00006ad5 call  0x0000681d 
+ 00026592  0x00006ad6 nsetflag  0x00000001 , 0x00000007 , 0x00000002 
+ 00026593  0x00006adc bpatchx  0x0000009b , 0x00004033 
+ 00026594  0x00006add sub  0x00000002 , 0x000000ff , 0x0000003e 
+ 00026595  0x00006ade rtn  0x00000005 
+ 00026596  0x00006adf isolate0  0x00000007 , 0x00000002 
+ 00026597  0x00006ae0 and  0x00000002 , 0x0000001f , 0x00000007 
+ 00026598  0x00006ae1 fetch  0x00000004 , 0x000000a1 
+ 00026599  0x00006ae2 qsetflag  0x00000001 , 0x0000003f 
+ 00026600  0x00006ae3 store  0x00000004 , 0x000000a1 
+ 00026601  0x00006ae4 fetch  0x00000004 , 0x000000a5 
+ 00026602  0x00006ae5 nqsetflag  0x00000001 , 0x0000003f 
+ 00026603  0x00006ae6 store  0x00000004 , 0x000000a5 
+ 00026604  0x00006ae7 rtn 
+ 00026605  0x00006aeb bpatchx  0x0000009c , 0x00004033 
+ 00026606  0x00006aec sub  0x00000002 , 0x000000ff , 0x0000003e 
+ 00026607  0x00006aed rtn  0x00000005 
+ 00026608  0x00006aee isolate0  0x00000007 , 0x00000002 
+ 00026609  0x00006aef and  0x00000002 , 0x0000001f , 0x00000007 
+ 00026610  0x00006af0 fetch  0x00000004 , 0x000000a1 
+ 00026611  0x00006af1 qset0  0x0000003f 
+ 00026612  0x00006af2 store  0x00000004 , 0x000000a1 
+ 00026613  0x00006af3 fetch  0x00000004 , 0x000000a5 
+ 00026614  0x00006af4 qset0  0x0000003f 
+ 00026615  0x00006af5 store  0x00000004 , 0x000000a5 
+ 00026616  0x00006af6 rtn 
+ 00026617  0x00006afa call  0x000067ed 
+ 00026618  0x00006afb branch  0x000067fe 
+ 00026619  0x00006aff sub  0x00000002 , 0x000000ff , 0x0000003e 
+ 00026620  0x00006b00 rtn  0x00000005 
+ 00026621  0x00006b01 ncall  0x000067e1 , 0x0000002b 
+ 00026622  0x00006b04 arg  0x0000807c , 0x00000005 
+ 00026623  0x00006b05 call  0x00006830 
+ 00026624  0x00006b06 setflip  0x00000007 , 0x00000002 
+ 00026625  0x00006b07 arg  0x00008078 , 0x00000005 
+ 00026626  0x00006b08 call  0x00006830 
+ 00026627  0x00006b09 set0  0x00000007 , 0x00000002 
+ 00026628  0x00006b0a arg  0x00008070 , 0x00000005 
+ 00026629  0x00006b0b branch  0x00006830 
+ 00026630  0x00006b0f arg  0x0000807c , 0x00000005 
+ 00026631  0x00006b10 call  0x00006830 
+ 00026632  0x00006b11 set0  0x00000007 , 0x00000002 
+ 00026633  0x00006b12 arg  0x00008078 , 0x00000005 
+ 00026634  0x00006b13 call  0x00006830 
+ 00026635  0x00006b14 set0  0x00000007 , 0x00000002 
+ 00026636  0x00006b15 arg  0x00008070 , 0x00000005 
+ 00026637  0x00006b16 branch  0x00006830 
+ 00026638  0x00006b1b sub  0x00000002 , 0x000000ff , 0x0000003e 
+ 00026639  0x00006b1c rtn  0x00000005 
+ 00026640  0x00006b1d setflip  0x00000007 , 0x00000002 
+ 00026641  0x00006b1e call  0x0000682f 
+ 00026642  0x00006b20 set1  0x00000007 , 0x00000002 
+ 00026643  0x00006b21 arg  0x00008070 , 0x00000005 
+ 00026644  0x00006b22 branch  0x00006830 
+ 00026645  0x00006b25 and  0x00000002 , 0x00000007 , 0x00000007 
+ 00026646  0x00006b26 rshift3  0x00000002 , 0x0000003f 
+ 00026647  0x00006b27 and_into  0x00000003 , 0x0000003f 
+ 00026648  0x00006b28 iadd  0x00000005 , 0x00000005 
+ 00026649  0x00006b29 ifetch  0x00000001 , 0x00000005 
+ 00026650  0x00006b2a rtn 
+ 00026651  0x00006b2d arg  0x00008074 , 0x00000005 
+ 00026652  0x00006b2e branch  0x0000681e 
+ 00026653  0x00006b33 arg  0x0000811c , 0x00000005 
+ 00026654  0x00006b35 call  0x00006815 
+ 00026655  0x00006b36 isolate1  0x00000007 , 0x00000002 
+ 00026656  0x00006b37 branch  0x00006823 , 0x00000001 
+ 00026657  0x00006b38 qisolate0  0x0000003f 
+ 00026658  0x00006b39 rtn 
+ 00026659  0x00006b3b qisolate1  0x0000003f 
+ 00026660  0x00006b3c rtn 
+ 00026661  0x00006b3f sub  0x00000002 , 0x000000ff , 0x0000003e 
+ 00026662  0x00006b40 rtn  0x00000005 
+ 00026663  0x00006b41 isolate1  0x00000007 , 0x0000003e 
+ 00026664  0x00006b42 branch  0x0000682c 
+ 00026665  0x00006b45 sub  0x00000002 , 0x000000ff , 0x0000003e 
+ 00026666  0x00006b46 rtn  0x00000005 
+ 00026667  0x00006b47 isolate0  0x00000007 , 0x0000003e 
+ 00026668  0x00006b4b setarg  0x00000000 
+ 00026669  0x00006b4c nsetflag  0x00000001 , 0x00000007 , 0x0000003f 
+ 00026670  0x00006b4d ixor  0x00000002 , 0x00000002 
+ 00026671  0x00006b51 arg  0x00008074 , 0x00000005 
+ 00026672  0x00006b55 call  0x00006815 
+ 00026673  0x00006b56 isolate1  0x00000007 , 0x00000002 
+ 00026674  0x00006b57 qsetflag  0x00000001 , 0x0000003f 
+ 00026675  0x00006b58 istore  0x00000001 , 0x00000005 
+ 00026676  0x00006b59 rtn 
+ 00026677  0x00006b5c arg  0xffffffff , 0x00000011 
+ 00026678  0x00006b5d hfetch  0x00000001 , 0x00008081 
+ 00026679  0x00006b5e compare  0x00000002 , 0x0000003f , 0x00000003 
+ 00026680  0x00006b5f call  0x00006878 , 0x00000001 
+ 00026681  0x00006b61 compare  0x00000001 , 0x0000003f , 0x00000003 
+ 00026682  0x00006b62 call  0x0000687a , 0x00000001 
+ 00026683  0x00006b64 compare  0x00000003 , 0x0000003f , 0x00000003 
+ 00026684  0x00006b65 call  0x0000687a , 0x00000001 
+ 00026685  0x00006b67 isolate1  0x00000002 , 0x0000003f 
+ 00026686  0x00006b68 call  0x00006874 , 0x00000001 
+ 00026687  0x00006b6a isolate1  0x00000003 , 0x0000003f 
+ 00026688  0x00006b6b call  0x00006876 , 0x00000001 
+ 00026689  0x00006b6d isolate1  0x00000004 , 0x0000003f 
+ 00026690  0x00006b6e call  0x0000687c , 0x00000001 
+ 00026691  0x00006b70 isolate1  0x00000006 , 0x0000003f 
+ 00026692  0x00006b71 nsetflag  0x00000001 , 0x00000004 , 0x00000011 
+ 00026693  0x00006b73 isolate1  0x00000007 , 0x0000003f 
+ 00026694  0x00006b74 nsetflag  0x00000001 , 0x00000005 , 0x00000011 
+ 00026695  0x00006b76 hfetch  0x00000001 , 0x00008082 
+ 00026696  0x00006b77 isolate1  0x00000000 , 0x0000003f 
+ 00026697  0x00006b78 nsetflag  0x00000001 , 0x0000001b , 0x00000011 
+ 00026698  0x00006b79 isolate1  0x00000001 , 0x0000003f 
+ 00026699  0x00006b7a nsetflag  0x00000001 , 0x0000001c , 0x00000011 
+ 00026700  0x00006b7b isolate1  0x00000002 , 0x0000003f 
+ 00026701  0x00006b7c nsetflag  0x00000001 , 0x00000003 , 0x00000011 
+ 00026702  0x00006b7d isolate1  0x00000003 , 0x0000003f 
+ 00026703  0x00006b7e nsetflag  0x00000001 , 0x00000008 , 0x00000011 
+ 00026704  0x00006b7f isolate1  0x00000004 , 0x0000003f 
+ 00026705  0x00006b80 nsetflag  0x00000001 , 0x00000014 , 0x00000011 
+ 00026706  0x00006b81 isolate1  0x00000005 , 0x0000003f 
+ 00026707  0x00006b82 nsetflag  0x00000001 , 0x00000015 , 0x00000011 
+ 00026708  0x00006b83 isolate1  0x00000006 , 0x0000003f 
+ 00026709  0x00006b84 nsetflag  0x00000001 , 0x00000016 , 0x00000011 
+ 00026710  0x00006b85 isolate1  0x00000007 , 0x0000003f 
+ 00026711  0x00006b86 nsetflag  0x00000001 , 0x00000017 , 0x00000011 
+ 00026712  0x00006b88 hfetch  0x00000001 , 0x00008080 
+ 00026713  0x00006b89 isolate1  0x00000000 , 0x0000003f 
+ 00026714  0x00006b8a nsetflag  0x00000001 , 0x00000005 , 0x00000011 
+ 00026715  0x00006b8b isolate1  0x00000001 , 0x0000003f 
+ 00026716  0x00006b8c nsetflag  0x00000001 , 0x00000006 , 0x00000011 
+ 00026717  0x00006b8d isolate1  0x00000002 , 0x0000003f 
+ 00026718  0x00006b8e nsetflag  0x00000001 , 0x00000007 , 0x00000011 
+ 00026719  0x00006b8f isolate1  0x00000003 , 0x0000003f 
+ 00026720  0x00006b90 nsetflag  0x00000001 , 0x00000012 , 0x00000011 
+ 00026721  0x00006b91 isolate1  0x00000004 , 0x0000003f 
+ 00026722  0x00006b92 nsetflag  0x00000001 , 0x00000013 , 0x00000011 
+ 00026723  0x00006b93 isolate1  0x00000005 , 0x0000003f 
+ 00026724  0x00006b94 nsetflag  0x00000001 , 0x00000014 , 0x00000011 
+ 00026725  0x00006b95 isolate1  0x00000006 , 0x0000003f 
+ 00026726  0x00006b96 nsetflag  0x00000001 , 0x00000015 , 0x00000011 
+ 00026727  0x00006b97 isolate1  0x00000007 , 0x0000003f 
+ 00026728  0x00006b98 nsetflag  0x00000001 , 0x00000016 , 0x00000011 
+ 00026729  0x00006b9a hfetch  0x00000001 , 0x00008062 
+ 00026730  0x00006b9b isolate1  0x00000004 , 0x0000003f 
+ 00026731  0x00006b9c call  0x0000687e , 0x00000001 
+ 00026732  0x00006b9d bpatchx  0x0000009d , 0x00004033 
+ 00026733  0x00006b9f hfetch  0x00000004 , 0x00008078 
+ 00026734  0x00006ba0 hfetcht  0x00000004 , 0x0000807c 
+ 00026735  0x00006ba1 ior  0x00000002 , 0x0000003f 
+ 00026736  0x00006ba2 invert  0x0000003f , 0x0000003f 
+ 00026737  0x00006ba3 iand  0x00000011 , 0x0000003f 
+ 00026738  0x00006ba5 hstore  0x00000004 , 0x00008070 
+ 00026739  0x00006ba6 rtn 
+ 00026740  0x00006baa arg  0x00000006 , 0x00000007 
+ 00026741  0x00006bab branch  0x00006884 
+ 00026742  0x00006bad arg  0x00000009 , 0x00000007 
+ 00026743  0x00006bae branch  0x00006882 
+ 00026744  0x00006bb0 arg  0x00000017 , 0x00000007 
+ 00026745  0x00006bb1 branch  0x00006882 
+ 00026746  0x00006bb3 arg  0x00000019 , 0x00000007 
+ 00026747  0x00006bb4 branch  0x00006884 
+ 00026748  0x00006bb6 arg  0x0000001e , 0x00000007 
+ 00026749  0x00006bb7 branch  0x00006884 
+ 00026750  0x00006bb9 arg  0x00000002 , 0x00000007 
+ 00026751  0x00006bba branch  0x00006884 
+ 00026752  0x00006bbc arg  0x00000001 , 0x00000039 
+ 00026753  0x00006bbd branch  0x00006885 
+ 00026754  0x00006bbf arg  0x00000004 , 0x00000039 
+ 00026755  0x00006bc0 branch  0x00006885 
+ 00026756  0x00006bc2 arg  0x00000002 , 0x00000039 
+ 00026757  0x00006bc4 qset0  0x00000011 
+ 00026758  0x00006bc5 increase  0x00000001 , 0x00000007 
+ 00026759  0x00006bc6 loop  0x00006885 
+ 00026760  0x00006bc7 rtn 
+ 00026761  0x00006bd0 call  0x00006895 
+ 00026762  0x00006bd1 arg  0x00000006 , 0x00000002 
+ 00026763  0x00006bd2 branch  0x0000680e 
+ 00026764  0x00006bd5 call  0x00006889 
+ 00026765  0x00006bd6 arg  0x00000006 , 0x00000002 
+ 00026766  0x00006bd7 branch  0x00006825 
+ 00026767  0x00006bdc call  0x00006895 
+ 00026768  0x00006bdd hfetch  0x00000001 , 0x00008078 
+ 00026769  0x00006bde set1  0x00000007 , 0x0000003f 
+ 00026770  0x00006bdf hstore  0x00000001 , 0x00008078 
+ 00026771  0x00006be0 arg  0x00000007 , 0x00000002 
+ 00026772  0x00006be1 branch  0x000067fb 
+ 00026773  0x00006be4 hfetch  0x00000001 , 0x00008081 
+ 00026774  0x00006be5 and_into  0x000000fb , 0x0000003f 
+ 00026775  0x00006be6 hstore  0x00000001 , 0x00008081 
+ 00026776  0x00006be7 rtn 
+ 00026777  0x00006bea hfetch  0x00000001 , 0x00008081 
+ 00026778  0x00006beb isolate1  0x00000002 , 0x0000003f 
+ 00026779  0x00006bec rtn 
+ 00026780  0x00006bef call  0x0000666a 
+ 00026781  0x00006bf0 setarg  0x000007e0 
+ 00026782  0x00006bf1 arg  0x00004150 , 0x00000011 
+ 00026783  0x00006bf2 arg  0x00000002 , 0x00000002 
+ 00026784  0x00006bf3 call  0x000066b3 
+ 00026785  0x00006bf4 branch  0x0000666d 
+ 00026786  0x00006bf8 call  0x0000666a 
+ 00026787  0x00006bf9 setarg  0x000007e2 
+ 00026788  0x00006bfa arg  0x0000421d , 0x00000011 
+ 00026789  0x00006bfb arg  0x0000000e , 0x00000002 
+ 00026790  0x00006bfc call  0x000066b3 
+ 00026791  0x00006bfd branch  0x0000666d 
+ 00026792  0x00006c02 bpatchx  0x0000009e , 0x00004033 
+ 00026793  0x00006c04 call  0x000068a2 
+ 00026794  0x00006c06 fetch  0x00000001 , 0x0000422d 
+ 00026795  0x00006c07 beq  0x00000000 , 0x000068af 
+ 00026796  0x00006c08 beq  0x00000001 , 0x000068c3 
+ 00026797  0x00006c09 beq  0x00000002 , 0x000068d7 
+ 00026798  0x00006c0a rtn 
+ 00026799  0x00006c0d fetcht  0x00000002 , 0x00004229 
+ 00026800  0x00006c0e setarg  0x0000aa55 
+ 00026801  0x00006c0f isub  0x00000002 , 0x0000003e 
+ 00026802  0x00006c10 branch  0x000068b8 , 0x00000005 
+ 00026803  0x00006c11 setarg  0x00004dfa 
+ 00026804  0x00006c12 store  0x00000002 , 0x00004227 
+ 00026805  0x00006c13 setarg  0x00004894 
+ 00026806  0x00006c14 store  0x00000002 , 0x00004221 
+ 00026807  0x00006c15 branch  0x000068c0 
+ 00026808  0x00006c18 fetch  0x00000002 , 0x00004227 
+ 00026809  0x00006c19 nbranch  0x000068bc , 0x00000034 
+ 00026810  0x00006c1a setarg  0x00004dfa 
+ 00026811  0x00006c1b store  0x00000002 , 0x00004227 
+ 00026812  0x00006c1d fetch  0x00000002 , 0x00004221 
+ 00026813  0x00006c1e nbranch  0x000068c0 , 0x00000034 
+ 00026814  0x00006c1f setarg  0x00004894 
+ 00026815  0x00006c20 store  0x00000002 , 0x00004221 
+ 00026816  0x00006c22 setarg  0x00000064 
+ 00026817  0x00006c23 store  0x00000002 , 0x0000422b 
+ 00026818  0x00006c24 rtn 
+ 00026819  0x00006c27 fetcht  0x00000002 , 0x00004229 
+ 00026820  0x00006c28 setarg  0x0000aa55 
+ 00026821  0x00006c29 isub  0x00000002 , 0x0000003e 
+ 00026822  0x00006c2a branch  0x000068cc , 0x00000005 
+ 00026823  0x00006c2b setarg  0x00005932 
+ 00026824  0x00006c2c store  0x00000002 , 0x00004225 
+ 00026825  0x00006c2d setarg  0x00004323 
+ 00026826  0x00006c2e store  0x00000002 , 0x0000421f 
+ 00026827  0x00006c2f branch  0x000068d4 
+ 00026828  0x00006c32 fetch  0x00000002 , 0x00004225 
+ 00026829  0x00006c33 nbranch  0x000068d0 , 0x00000034 
+ 00026830  0x00006c34 setarg  0x00005932 
+ 00026831  0x00006c35 store  0x00000002 , 0x00004225 
+ 00026832  0x00006c37 fetch  0x00000002 , 0x0000421f 
+ 00026833  0x00006c38 nbranch  0x000068d4 , 0x00000034 
+ 00026834  0x00006c39 setarg  0x00004323 
+ 00026835  0x00006c3a store  0x00000002 , 0x0000421f 
+ 00026836  0x00006c3c setarg  0x00000190 
+ 00026837  0x00006c3d store  0x00000002 , 0x0000422b 
+ 00026838  0x00006c3e rtn 
+ 00026839  0x00006c41 fetcht  0x00000002 , 0x00004229 
+ 00026840  0x00006c42 setarg  0x0000aa55 
+ 00026841  0x00006c43 isub  0x00000002 , 0x0000003e 
+ 00026842  0x00006c44 branch  0x000068e0 , 0x00000005 
+ 00026843  0x00006c45 setarg  0x00006946 
+ 00026844  0x00006c46 store  0x00000002 , 0x00004223 
+ 00026845  0x00006c47 setarg  0x00005377 
+ 00026846  0x00006c48 store  0x00000002 , 0x0000421d 
+ 00026847  0x00006c49 branch  0x000068e8 
+ 00026848  0x00006c4c fetch  0x00000002 , 0x00004223 
+ 00026849  0x00006c4d nbranch  0x000068e4 , 0x00000034 
+ 00026850  0x00006c4e setarg  0x00006946 
+ 00026851  0x00006c4f store  0x00000002 , 0x00004223 
+ 00026852  0x00006c51 fetch  0x00000002 , 0x0000421d 
+ 00026853  0x00006c52 nbranch  0x000068e8 , 0x00000034 
+ 00026854  0x00006c53 setarg  0x00005377 
+ 00026855  0x00006c54 store  0x00000002 , 0x0000421d 
+ 00026856  0x00006c56 setarg  0x00000032 
+ 00026857  0x00006c57 store  0x00000002 , 0x0000422b 
+ 00026858  0x00006c58 rtn 
+ 00026859  0x00006c5c fetch  0x00000001 , 0x0000422d 
+ 00026860  0x00006c5d beq  0x00000000 , 0x000068f0 
+ 00026861  0x00006c5e beq  0x00000001 , 0x000068f2 
+ 00026862  0x00006c5f beq  0x00000002 , 0x000068f4 
+ 00026863  0x00006c60 rtn 
+ 00026864  0x00006c62 jam  0x000000bf , 0x00008971 
+ 00026865  0x00006c63 branch  0x000068f8 
+ 00026866  0x00006c65 jam  0x000000af , 0x00008971 
+ 00026867  0x00006c66 branch  0x000068f8 
+ 00026868  0x00006c68 jam  0x0000008f , 0x00008971 
+ 00026869  0x00006c69 fetch  0x00000001 , 0x0000422e 
+ 00026870  0x00006c6a hstore  0x00000001 , 0x00008973 
+ 00026871  0x00006c6b branch  0x000068f8 
+ 00026872  0x00006c6d bpatchx  0x0000009f , 0x00004033 
+ 00026873  0x00006c6e hfetch  0x00000001 , 0x00008053 
+ 00026874  0x00006c6f set1  0x00000007 , 0x0000003f 
+ 00026875  0x00006c70 hstore  0x00000001 , 0x00008053 
+ 00026876  0x00006c71 hfetch  0x00000001 , 0x00008973 
+ 00026877  0x00006c72 or_into  0x00000030 , 0x0000003f 
+ 00026878  0x00006c73 hstore  0x00000001 , 0x00008973 
+ 00026879  0x00006c74 jam  0x0000007c , 0x00008906 
+ 00026880  0x00006c75 jam  0x000000aa , 0x00008972 
+ 00026881  0x00006c76 nop  0x00001388 
+ 00026882  0x00006c77 hfetcht  0x00000002 , 0x00008150 
+ 00026883  0x00006c78 hfetch  0x00000001 , 0x00008053 
+ 00026884  0x00006c79 set0  0x00000007 , 0x0000003f 
+ 00026885  0x00006c7a hstore  0x00000001 , 0x00008053 
+ 00026886  0x00006c7b storet  0x00000002 , 0x0000422f 
+ 00026887  0x00006c7c rtn 
+ 00026888  0x00006c7f bpatchx  0x000000a0 , 0x00004034 
+ 00026889  0x00006c80 fetch  0x00000001 , 0x0000422d 
+ 00026890  0x00006c81 beq  0x00000000 , 0x0000690e 
+ 00026891  0x00006c82 beq  0x00000001 , 0x00006912 
+ 00026892  0x00006c83 beq  0x00000002 , 0x00006916 
+ 00026893  0x00006c84 rtn 
+ 00026894  0x00006c87 fetch  0x00000002 , 0x00004227 
+ 00026895  0x00006c88 fetcht  0x00000002 , 0x00004221 
+ 00026896  0x00006c89 arg  0x000000c8 , 0x00000013 
+ 00026897  0x00006c8a branch  0x0000691a 
+ 00026898  0x00006c8d fetch  0x00000002 , 0x00004225 
+ 00026899  0x00006c8e fetcht  0x00000002 , 0x0000421f 
+ 00026900  0x00006c8f arg  0x00000064 , 0x00000013 
+ 00026901  0x00006c90 branch  0x0000691a 
+ 00026902  0x00006c93 fetch  0x00000002 , 0x00004223 
+ 00026903  0x00006c94 fetcht  0x00000002 , 0x0000421d 
+ 00026904  0x00006c95 arg  0x00000032 , 0x00000013 
+ 00026905  0x00006c96 branch  0x0000691a 
+ 00026906  0x00006c99 isub  0x00000002 , 0x00000011 
+ 00026907  0x00006c9a fetch  0x00000002 , 0x0000422f 
+ 00026908  0x00006c9b isub  0x00000002 , 0x0000003f 
+ 00026909  0x00006c9c nbranch  0x00006927 , 0x00000002 
+ 00026910  0x00006c9d fetcht  0x00000002 , 0x0000422b 
+ 00026911  0x00006c9e imul32  0x00000002 , 0x00000012 
+ 00026912  0x00006c9f copy  0x00000013 , 0x0000003f 
+ 00026913  0x00006ca0 imul32  0x00000011 , 0x0000003f 
+ 00026914  0x00006ca1 iadd  0x00000012 , 0x0000003f 
+ 00026915  0x00006ca3 idiv  0x00000011 
+ 00026916  0x00006ca4 call  0x00007f86 
+ 00026917  0x00006ca5 quotient  0x0000003f 
+ 00026918  0x00006ca6 rtn 
+ 00026919  0x00006ca9 copy  0x00000002 , 0x0000003f 
+ 00026920  0x00006caa fetcht  0x00000002 , 0x0000422f 
+ 00026921  0x00006cab isub  0x00000002 , 0x0000003f 
+ 00026922  0x00006cac fetcht  0x00000002 , 0x0000422b 
+ 00026923  0x00006cad imul32  0x00000002 , 0x00000012 
+ 00026924  0x00006cae copy  0x00000013 , 0x0000003f 
+ 00026925  0x00006caf imul32  0x00000011 , 0x0000003f 
+ 00026926  0x00006cb0 isub  0x00000012 , 0x0000003f 
+ 00026927  0x00006cb1 branch  0x00006923 
+ 00026928  0x00006cbd ifetch  0x00000008 , 0x00000011 
+ 00026929  0x00006cbe store  0x00000008 , 0x00000a9a 
+ 00026930  0x00006cbf fetch  0x00000002 , 0x00000a9a 
+ 00026931  0x00006cc0 fetcht  0x00000002 , 0x00000a9c 
+ 00026932  0x00006cc1 isub  0x00000002 , 0x00000011 
+ 00026933  0x00006cc2 fetch  0x00000002 , 0x00000aa0 
+ 00026934  0x00006cc3 isub  0x00000002 , 0x00000012 
+ 00026935  0x00006cc4 fetcht  0x00000002 , 0x00000a9e 
+ 00026936  0x00006cc5 isub  0x00000002 , 0x0000003e 
+ 00026937  0x00006cc6 ncall  0x00006940 , 0x00000002 
+ 00026938  0x00006cc7 mul32  0x00000012 , 0x00000064 , 0x0000003f 
+ 00026939  0x00006cc8 idiv  0x00000011 
+ 00026940  0x00006cc9 call  0x00007f86 
+ 00026941  0x00006cca quotient  0x0000003f 
+ 00026942  0x00006ccb call  0x00006944 , 0x00000034 
+ 00026943  0x00006ccc rtn 
+ 00026944  0x00006cce fetch  0x00000001 , 0x00004231 
+ 00026945  0x00006ccf set1  0x00000000 , 0x0000003f 
+ 00026946  0x00006cd0 store  0x00000001 , 0x00004231 
+ 00026947  0x00006cd1 rtn 
+ 00026948  0x00006cd3 fetcht  0x00000001 , 0x00004231 
+ 00026949  0x00006cd4 set1  0x00000001 , 0x00000002 
+ 00026950  0x00006cd5 storet  0x00000001 , 0x00004231 
+ 00026951  0x00006cd6 rtn 
+ 00026952  0x00006cdc fetch  0x00000002 , 0x0000423d 
+ 00026953  0x00006cdd ifetch  0x00000001 , 0x0000003f 
+ 00026954  0x00006cdf rtn  0x00000034 
+ 00026955  0x00006ce0 copy  0x0000003f , 0x00000039 
+ 00026956  0x00006ce2 fetch  0x00000002 , 0x0000423d 
+ 00026957  0x00006ce3 increase  0x00000003 , 0x0000003f 
+ 00026958  0x00006ce4 copy  0x0000003f , 0x00000011 
+ 00026959  0x00006ce6 ifetcht  0x00000001 , 0x00000011 
+ 00026960  0x00006ce7 call  0x000067fb 
+ 00026961  0x00006ce8 increase  0x00000001 , 0x00000011 
+ 00026962  0x00006ce9 loop  0x0000694f 
+ 00026963  0x00006ceb rtn 
+ 00026964  0x00006cee fetch  0x00000002 , 0x0000423d 
+ 00026965  0x00006cef increase  0x00000003 , 0x0000003f 
+ 00026966  0x00006cf0 copy  0x0000003f , 0x00000011 
+ 00026967  0x00006cf2 force  0x00000000 , 0x00000012 
+ 00026968  0x00006cf3 jam  0x00000000 , 0x00000b12 
+ 00026969  0x00006cf5 ifetcht  0x00000001 , 0x00000011 
+ 00026970  0x00006cf6 call  0x0000681d 
+ 00026971  0x00006cf7 bpatchx  0x000000a1 , 0x00004034 
+ 00026972  0x00006cf8 fetch  0x00000002 , 0x00000b12 
+ 00026973  0x00006cf9 copy  0x00000012 , 0x00000007 
+ 00026974  0x00006cfa qsetflag  0x00000001 , 0x0000003f 
+ 00026975  0x00006cfb store  0x00000002 , 0x00000b12 
+ 00026976  0x00006cfc increase  0x00000001 , 0x00000011 
+ 00026977  0x00006cfd increase  0x00000001 , 0x00000012 
+ 00026978  0x00006cfe fetch  0x00000002 , 0x0000423d 
+ 00026979  0x00006cff ifetch  0x00000001 , 0x0000003f 
+ 00026980  0x00006d01 ixor  0x00000012 , 0x0000003e 
+ 00026981  0x00006d02 nbranch  0x00006959 , 0x00000005 
+ 00026982  0x00006d03 fetch  0x00000002 , 0x00000b12 
+ 00026983  0x00006d04 fetcht  0x00000002 , 0x00000b14 
+ 00026984  0x00006d05 ixor  0x00000002 , 0x0000003e 
+ 00026985  0x00006d06 rtn  0x00000005 
+ 00026986  0x00006d07 enable  0x00000028 
+ 00026987  0x00006d08 rtn 
+ 00026988  0x00006d0b fetch  0x00000002 , 0x0000423d 
+ 00026989  0x00006d0c ifetch  0x00000001 , 0x0000003f 
+ 00026990  0x00006d0e rtn  0x00000034 
+ 00026991  0x00006d0f copy  0x0000003f , 0x00000039 
+ 00026992  0x00006d10 fetch  0x00000002 , 0x0000423d 
+ 00026993  0x00006d11 increase  0x00000003 , 0x0000003f 
+ 00026994  0x00006d12 copy  0x0000003f , 0x00000011 
+ 00026995  0x00006d14 ifetcht  0x00000001 , 0x00000011 
+ 00026996  0x00006d15 call  0x000067dd 
+ 00026997  0x00006d16 increase  0x00000001 , 0x00000011 
+ 00026998  0x00006d17 loop  0x00006973 
+ 00026999  0x00006d19 rtn 
+ 00027000  0x00006d1c arg  0x00000009 , 0x00000007 
+ 00027001  0x00006d1d call  0x00007f16 
+ 00027002  0x00006d1e nrtn  0x00000034 
+ 00027003  0x00006d1f setarg  0x00000020 
+ 00027004  0x00006d20 arg  0x00000009 , 0x00000007 
+ 00027005  0x00006d21 call  0x00007f08 
+ 00027006  0x00006d22 disable  0x00000028 
+ 00027007  0x00006d23 call  0x0000696c 
+ 00027008  0x00006d24 bpatchx  0x000000a2 , 0x00004034 
+ 00027009  0x00006d25 fetch  0x00000002 , 0x0000423d 
+ 00027010  0x00006d26 ifetch  0x00000001 , 0x0000003f 
+ 00027011  0x00006d28 rtn  0x00000034 
+ 00027012  0x00006d29 call  0x00006954 
+ 00027013  0x00006d2a nbranch  0x00007d02 , 0x00000028 
+ 00027014  0x00006d2b call  0x00007d00 
+ 00027015  0x00006d2c disable  0x00000028 
+ 00027016  0x00006d2d fetch  0x00000002 , 0x00000b12 
+ 00027017  0x00006d2e store  0x00000002 , 0x00000b19 
+ 00027018  0x00006d2f jam  0x00000000 , 0x00000b1b 
+ 00027019  0x00006d30 force  0x00000000 , 0x00000007 
+ 00027020  0x00006d32 fetch  0x00000002 , 0x00000b14 
+ 00027021  0x00006d33 rshift  0x0000003f , 0x00000002 
+ 00027022  0x00006d34 storet  0x00000002 , 0x00000b14 
+ 00027023  0x00006d35 and  0x0000003f , 0x00000001 , 0x0000003f 
+ 00027024  0x00006d36 fetcht  0x00000002 , 0x00000b19 
+ 00027025  0x00006d37 and  0x00000002 , 0x00000001 , 0x00000011 
+ 00027026  0x00006d38 rshift  0x00000002 , 0x00000002 
+ 00027027  0x00006d39 storet  0x00000002 , 0x00000b19 
+ 00027028  0x00006d3a ixor  0x00000011 , 0x0000003e 
+ 00027029  0x00006d3b ncall  0x000069a1 , 0x00000005 
+ 00027030  0x00006d3c fetch  0x00000002 , 0x0000423d 
+ 00027031  0x00006d3d ifetch  0x00000001 , 0x0000003f 
+ 00027032  0x00006d3f fetcht  0x00000001 , 0x00000b1b 
+ 00027033  0x00006d40 increase  0x00000001 , 0x00000002 
+ 00027034  0x00006d41 storet  0x00000001 , 0x00000b1b 
+ 00027035  0x00006d42 copy  0x00000002 , 0x00000007 
+ 00027036  0x00006d43 ixor  0x00000007 , 0x0000003e 
+ 00027037  0x00006d44 nbranch  0x0000698c , 0x00000005 
+ 00027038  0x00006d45 fetch  0x00000002 , 0x00000b12 
+ 00027039  0x00006d46 store  0x00000002 , 0x00000b14 
+ 00027040  0x00006d47 rtn 
+ 00027041  0x00006d49 bpatchx  0x000000a3 , 0x00004034 
+ 00027042  0x00006d4a fetch  0x00000002 , 0x0000423d 
+ 00027043  0x00006d4b increase  0x00000001 , 0x0000003f 
+ 00027044  0x00006d4c ifetch  0x00000002 , 0x0000003f 
+ 00027045  0x00006d4d branch  0x00007f9c 
+ 00027046  0x00006d59 hfetch  0x00000001 , 0x00008042 
+ 00027047  0x00006d5a ior  0x00000011 , 0x0000003f 
+ 00027048  0x00006d5b hstore  0x00000001 , 0x00008042 
+ 00027049  0x00006d5c hfetch  0x00000002 , 0x00008050 
+ 00027050  0x00006d5d set0  0x0000000d , 0x0000003f 
+ 00027051  0x00006d5e hstore  0x00000002 , 0x00008050 
+ 00027052  0x00006d5f nop  0x00000064 
+ 00027053  0x00006d60 rtn 
+ 00027054  0x00006d6c fetcht  0x00000003 , 0x00000a9c 
+ 00027055  0x00006d6d setarg  0x00b71b00 
+ 00027056  0x00006d6e idiv  0x00000002 
+ 00027057  0x00006d6f call  0x00007f86 
+ 00027058  0x00006d70 quotient  0x00000002 
+ 00027059  0x00006d71 fetch  0x00000001 , 0x00000a9f 
+ 00027060  0x00006d72 imul32  0x00000002 , 0x0000003f 
+ 00027061  0x00006d73 div  0x0000003f , 0x00000064 
+ 00027062  0x00006d74 call  0x00007f86 
+ 00027063  0x00006d75 quotient  0x00000011 
+ 00027064  0x00006d76 copy  0x00000002 , 0x0000003f 
+ 00027065  0x00006d77 isub  0x00000011 , 0x00000012 
+ 00027066  0x00006d78 fetch  0x00000001 , 0x00000a9b 
+ 00027067  0x00006d79 call  0x000069be 
+ 00027068  0x00006d7a fetch  0x00000001 , 0x00000a9a 
+ 00027069  0x00006d7b branch  0x000069d5 
+ 00027070  0x00006d7f beq  0x00000000 , 0x000069c4 
+ 00027071  0x00006d80 beq  0x00000001 , 0x000069c6 
+ 00027072  0x00006d81 beq  0x00000002 , 0x000069c8 
+ 00027073  0x00006d82 beq  0x00000003 , 0x000069ca 
+ 00027074  0x00006d83 beq  0x00000004 , 0x000069cc 
+ 00027075  0x00006d84 beq  0x00000005 , 0x000069ce 
+ 00027076  0x00006d86 arg  0x000080a0 , 0x00000005 
+ 00027077  0x00006d87 branch  0x000069d0 
+ 00027078  0x00006d89 arg  0x000080a4 , 0x00000005 
+ 00027079  0x00006d8a branch  0x000069d0 
+ 00027080  0x00006d8c arg  0x000080a8 , 0x00000005 
+ 00027081  0x00006d8d branch  0x000069d0 
+ 00027082  0x00006d8f arg  0x00008064 , 0x00000005 
+ 00027083  0x00006d90 branch  0x000069d0 
+ 00027084  0x00006d92 arg  0x00008068 , 0x00000005 
+ 00027085  0x00006d93 branch  0x000069d0 
+ 00027086  0x00006d95 arg  0x0000806c , 0x00000005 
+ 00027087  0x00006d96 branch  0x000069d0 
+ 00027088  0x00006d98 copy  0x00000011 , 0x0000003f 
+ 00027089  0x00006d99 istore  0x00000002 , 0x00000005 
+ 00027090  0x00006d9a copy  0x00000012 , 0x0000003f 
+ 00027091  0x00006d9b istore  0x00000002 , 0x00000005 
+ 00027092  0x00006d9c rtn 
+ 00027093  0x00006da1 enable  0x00000028 
+ 00027094  0x00006da2 branch  0x000069d8 
+ 00027095  0x00006da4 disable  0x00000028 
+ 00027096  0x00006da6 beq  0x00000004 , 0x000069e3 
+ 00027097  0x00006da7 beq  0x00000005 , 0x000069e5 
+ 00027098  0x00006da8 beq  0x0000001b , 0x000069e7 
+ 00027099  0x00006da9 beq  0x0000001c , 0x000069e9 
+ 00027100  0x00006daa beq  0x00000003 , 0x000069eb 
+ 00027101  0x00006dab beq  0x00000008 , 0x000069ed 
+ 00027102  0x00006dac beq  0x00000014 , 0x000069ef 
+ 00027103  0x00006dad beq  0x00000015 , 0x000069f1 
+ 00027104  0x00006dae beq  0x00000016 , 0x000069f3 
+ 00027105  0x00006daf beq  0x00000017 , 0x000069f5 
+ 00027106  0x00006db0 rtn 
+ 00027107  0x00006db4 arg  0x00000006 , 0x00000007 
+ 00027108  0x00006db5 branch  0x000069ff 
+ 00027109  0x00006db7 arg  0x00000007 , 0x00000007 
+ 00027110  0x00006db8 branch  0x000069ff 
+ 00027111  0x00006dba arg  0x00000008 , 0x00000007 
+ 00027112  0x00006dbb branch  0x000069ff 
+ 00027113  0x00006dbd arg  0x00000009 , 0x00000007 
+ 00027114  0x00006dbe branch  0x000069ff 
+ 00027115  0x00006dc0 arg  0x0000000a , 0x00000007 
+ 00027116  0x00006dc1 branch  0x000069ff 
+ 00027117  0x00006dc3 arg  0x0000000b , 0x00000007 
+ 00027118  0x00006dc4 branch  0x000069ff 
+ 00027119  0x00006dc6 arg  0x0000000c , 0x00000007 
+ 00027120  0x00006dc7 branch  0x00006a01 
+ 00027121  0x00006dc9 arg  0x0000000d , 0x00000007 
+ 00027122  0x00006dca branch  0x00006a01 
+ 00027123  0x00006dcc arg  0x0000000e , 0x00000007 
+ 00027124  0x00006dcd branch  0x00006a01 
+ 00027125  0x00006dcf arg  0x0000000f , 0x00000007 
+ 00027126  0x00006dd0 branch  0x00006a01 
+ 00027127  0x00006dd3 hfetch  0x00000002 , 0x00008081 
+ 00027128  0x00006dd4 qsetflag  0x00000028 , 0x0000003f 
+ 00027129  0x00006dd5 hstore  0x00000002 , 0x00008081 
+ 00027130  0x00006dd6 copy  0x00000011 , 0x00000007 
+ 00027131  0x00006dd7 hfetch  0x00000001 , 0x00008085 
+ 00027132  0x00006dd8 qsetflag  0x00000028 , 0x0000003f 
+ 00027133  0x00006dd9 hstore  0x00000001 , 0x00008085 
+ 00027134  0x00006dda rtn 
+ 00027135  0x00006ddd add  0x00000007 , 0xfffffffc , 0x00000011 
+ 00027136  0x00006dde branch  0x000069f7 
+ 00027137  0x00006de1 add  0x00000007 , 0xfffffff6 , 0x00000011 
+ 00027138  0x00006de2 branch  0x000069f7 
+ 00027139  0x00006de8 rtn  0x0000002b 
+ 00027140  0x00006de9 jam  0x00000000 , 0x00004567 
+ 00027141  0x00006dea jam  0x00000003 , 0x000004ed 
+ 00027142  0x00006deb jam  0x00000003 , 0x000004ee 
+ 00027143  0x00006dec jam  0x00000011 , 0x000004f2 
+ 00027144  0x00006ded jam  0x00000013 , 0x000004f3 
+ 00027145  0x00006dee setarg  0x00000000 
+ 00027146  0x00006def store  0x00000003 , 0x000004ef 
+ 00027147  0x00006df0 store  0x00000001 , 0x00004254 
+ 00027148  0x00006df1 jam  0x00000000 , 0x00004681 
+ 00027149  0x00006df4 bpatchx  0x000000a4 , 0x00004034 
+ 00027150  0x00006df5 setarg  0x00000000 
+ 00027151  0x00006df6 store  0x00000001 , 0x00004254 
+ 00027152  0x00006df7 store  0x00000001 , 0x00004564 
+ 00027153  0x00006df8 store  0x00000001 , 0x0000455d 
+ 00027154  0x00006df9 fetch  0x00000001 , 0x0000456b 
+ 00027155  0x00006dfa beq  0x00000001 , 0x00006a16 
+ 00027156  0x00006dfb jam  0x00000050 , 0x00004569 
+ 00027157  0x00006dfc rtn 
+ 00027158  0x00006dff jam  0x00000000 , 0x00004569 
+ 00027159  0x00006e00 rtn 
+ 00027160  0x00006e03 or_into  0x00000002 , 0x00000002 
+ 00027161  0x00006e04 rtn 
+ 00027162  0x00006e11 copy  0x00000002 , 0x0000003f 
+ 00027163  0x00006e12 reverse  0x0000003f , 0x0000003f 
+ 00027164  0x00006e13 store  0x00000001 , 0x00004562 
+ 00027165  0x00006e14 force  0x0000003f , 0x0000003f 
+ 00027166  0x00006e15 reverse  0x0000003f , 0x0000003f 
+ 00027167  0x00006e16 store  0x00000001 , 0x00004561 
+ 00027168  0x00006e17 force  0x00000001 , 0x0000003f 
+ 00027169  0x00006e18 reverse  0x0000003f , 0x0000003f 
+ 00027170  0x00006e19 store  0x00000001 , 0x00004560 
+ 00027171  0x00006e1a call  0x00006a50 
+ 00027172  0x00006e1b copy  0x00000002 , 0x0000003f 
+ 00027173  0x00006e1c rtn 
+ 00027174  0x00006e1e reverse  0x0000003f , 0x0000003f 
+ 00027175  0x00006e1f store  0x00000001 , 0x00004562 
+ 00027176  0x00006e20 force  0x00000073 , 0x0000003f 
+ 00027177  0x00006e21 reverse  0x0000003f , 0x0000003f 
+ 00027178  0x00006e22 store  0x00000001 , 0x00004561 
+ 00027179  0x00006e23 force  0x00000001 , 0x0000003f 
+ 00027180  0x00006e24 reverse  0x0000003f , 0x0000003f 
+ 00027181  0x00006e25 store  0x00000001 , 0x00004560 
+ 00027182  0x00006e26 branch  0x00006a50 
+ 00027183  0x00006e29 fetch  0x00000001 , 0x00004563 
+ 00027184  0x00006e2a branch  0x00006a33 , 0x00000034 
+ 00027185  0x00006e2b setarg  0x00000070 
+ 00027186  0x00006e2c rtn 
+ 00027187  0x00006e2e setarg  0x000000aa 
+ 00027188  0x00006e2f rtn 
+ 00027189  0x00006e32 reverse  0x0000003f , 0x0000003f 
+ 00027190  0x00006e33 store  0x00000001 , 0x00004562 
+ 00027191  0x00006e34 force  0x000000ef , 0x0000003f 
+ 00027192  0x00006e35 call  0x00006a44 
+ 00027193  0x00006e36 fetcht  0x00000002 , 0x000004f7 
+ 00027194  0x00006e37 copy  0x00000002 , 0x00000005 
+ 00027195  0x00006e38 istore  0x00000001 , 0x00000005 
+ 00027196  0x00006e39 copy  0x00000005 , 0x00000002 
+ 00027197  0x00006e3a storet  0x00000002 , 0x000004f7 
+ 00027198  0x00006e3b force  0x000000ff , 0x0000003f 
+ 00027199  0x00006e3c call  0x00006a44 
+ 00027200  0x00006e3d fetcht  0x00000002 , 0x000004f7 
+ 00027201  0x00006e3e copy  0x00000002 , 0x00000005 
+ 00027202  0x00006e3f istore  0x00000001 , 0x00000005 
+ 00027203  0x00006e40 rtn 
+ 00027204  0x00006e4a reverse  0x0000003f , 0x0000003f 
+ 00027205  0x00006e4b store  0x00000001 , 0x00004561 
+ 00027206  0x00006e4c fetch  0x00000002 , 0x00004561 
+ 00027207  0x00006e4d lshift8  0x0000003f , 0x0000003f 
+ 00027208  0x00006e4e store  0x00000003 , 0x000004f4 
+ 00027209  0x00006e4f arg  0x00000107 , 0x00000011 
+ 00027210  0x00006e50 arg  0x0000000f , 0x00000012 
+ 00027211  0x00006e51 call  0x00006a5d 
+ 00027212  0x00006e52 xor_into  0x000000d7 , 0x0000003f 
+ 00027213  0x00006e53 invert  0x0000003f , 0x0000003f 
+ 00027214  0x00006e54 reverse  0x0000003f , 0x0000003f 
+ 00027215  0x00006e55 rtn 
+ 00027216  0x00006e60 fetch  0x00000003 , 0x00004560 
+ 00027217  0x00006e61 store  0x00000003 , 0x000004f4 
+ 00027218  0x00006e62 arg  0x00000107 , 0x00000011 
+ 00027219  0x00006e63 arg  0x0000000f , 0x00000012 
+ 00027220  0x00006e64 call  0x00006a5d 
+ 00027221  0x00006e65 lshift8  0x0000003f , 0x0000003f 
+ 00027222  0x00006e66 arg  0x00000007 , 0x00000012 
+ 00027223  0x00006e67 call  0x00006a5d 
+ 00027224  0x00006e68 xor_into  0x0000002b , 0x0000003f 
+ 00027225  0x00006e69 invert  0x0000003f , 0x0000003f 
+ 00027226  0x00006e6a reverse  0x0000003f , 0x0000003f 
+ 00027227  0x00006e6b copy  0x0000003f , 0x00000002 
+ 00027228  0x00006e6c rtn 
+ 00027229  0x00006e6f arg  0x00000000 , 0x00000013 
+ 00027230  0x00006e70 copy  0x00000012 , 0x00000039 
+ 00027231  0x00006e71 call  0x00007e71 
+ 00027232  0x00006e72 icopy  0x00000002 
+ 00027233  0x00006e78 copy  0x00000002 , 0x0000003f 
+ 00027234  0x00006e79 lshift  0x00000013 , 0x00000013 
+ 00027235  0x00006e7a bbit0  0x00000008 , 0x00006a66 
+ 00027236  0x00006e7b ixor  0x00000011 , 0x00000002 
+ 00027237  0x00006e7c increase  0x00000001 , 0x00000013 
+ 00027238  0x00006e7e lshift  0x00000002 , 0x00000002 
+ 00027239  0x00006e7f fetch  0x00000003 , 0x000004f4 
+ 00027240  0x00006e80 increase  0xffffffff , 0x00000012 
+ 00027241  0x00006e81 compare  0x000000ff , 0x00000012 , 0x000000ff 
+ 00027242  0x00006e82 branch  0x00006a70 , 0x00000001 
+ 00027243  0x00006e83 copy  0x00000012 , 0x00000039 
+ 00027244  0x00006e84 call  0x00007e71 
+ 00027245  0x00006e85 isolate1  0x00000000 , 0x0000003f 
+ 00027246  0x00006e86 setflag  0x00000001 , 0x00000000 , 0x00000002 
+ 00027247  0x00006e87 branch  0x00006a61 
+ 00027248  0x00006e8a rshift  0x00000002 , 0x0000003f 
+ 00027249  0x00006e8b rtn 
+ 00027250  0x00006e8e fetcht  0x00000001 , 0x0000455d 
+ 00027251  0x00006e91 lshift2  0x00000002 , 0x00000002 
+ 00027252  0x00006e92 set1  0x00000000 , 0x00000002 
+ 00027253  0x00006e93 fetch  0x00000001 , 0x00004563 
+ 00027254  0x00006e94 ncall  0x00006a18 , 0x00000034 
+ 00027255  0x00006e95 storet  0x00000001 , 0x0000050d 
+ 00027256  0x00006e96 rtn 
+ 00027257  0x00006e9a lshift  0x00000002 , 0x00000002 
+ 00027258  0x00006e9b fetch  0x00000001 , 0x00004563 
+ 00027259  0x00006e9c setflag  0x00000034 , 0x00000000 , 0x00000002 
+ 00027260  0x00006e9e rtn 
+ 00027261  0x00006ea0 fetcht  0x00000001 , 0x000004fc 
+ 00027262  0x00006ea1 jam  0x000000d7 , 0x000004fe 
+ 00027263  0x00006ea2 call  0x00006bb6 
+ 00027264  0x00006ea3 fetch  0x00000001 , 0x00004251 
+ 00027265  0x00006ea4 set1  0x00000006 , 0x0000003f 
+ 00027266  0x00006ea5 set1  0x00000007 , 0x0000003f 
+ 00027267  0x00006ea6 store  0x00000001 , 0x00004251 
+ 00027268  0x00006ea7 jam  0x00000000 , 0x00004563 
+ 00027269  0x00006ea8 branch  0x00006b97 
+ 00027270  0x00006eaa fetch  0x00000001 , 0x00004251 
+ 00027271  0x00006eab set1  0x00000007 , 0x0000003f 
+ 00027272  0x00006eac store  0x00000001 , 0x00004251 
+ 00027273  0x00006ead branch  0x00006b97 
+ 00027274  0x00006eb1 bpatchx  0x000000a5 , 0x00004034 
+ 00027275  0x00006eb2 fetch  0x00000001 , 0x00004681 
+ 00027276  0x00006eb3 beq  0x00000000 , 0x00006a8e 
+ 00027277  0x00006eb4 branch  0x00006b4c 
+ 00027278  0x00006eb7 fetch  0x00000002 , 0x00000264 
+ 00027279  0x00006eb8 copy  0x0000003f , 0x00000006 
+ 00027280  0x00006eb9 call  0x00006ab8 
+ 00027281  0x00006eba fetch  0x00000001 , 0x000004fc 
+ 00027282  0x00006ebb beq  0x00000000 , 0x00006a94 
+ 00027283  0x00006ebc branch  0x00006b18 
+ 00027284  0x00006ebe bpatchx  0x000000a6 , 0x00004034 
+ 00027285  0x00006ebf fetch  0x00000001 , 0x000004fd 
+ 00027286  0x00006ec0 beq  0x0000003f , 0x00006a7d 
+ 00027287  0x00006ec1 beq  0x00000073 , 0x00006a86 
+ 00027288  0x00006ec2 beq  0x000000ef , 0x00006a9b 
+ 00027289  0x00006ec3 beq  0x00000053 , 0x00006b44 
+ 00027290  0x00006ec4 rtn 
+ 00027291  0x00006ec8 fetch  0x00000002 , 0x00000501 
+ 00027292  0x00006ec9 copy  0x0000003f , 0x00000006 
+ 00027293  0x00006eca call  0x00006ac3 
+ 00027294  0x00006ecb fetch  0x00000001 , 0x00000503 
+ 00027295  0x00006ecc beq  0x00000041 , 0x00006aa5 
+ 00027296  0x00006ecd beq  0x00000040 , 0x00006aad 
+ 00027297  0x00006ece beq  0x00000071 , 0x00006ae6 
+ 00027298  0x00006ecf beq  0x00000070 , 0x00006af2 
+ 00027299  0x00006ed0 beq  0x00000049 , 0x00006afd 
+ 00027300  0x00006ed1 branch  0x00006b97 
+ 00027301  0x00006ed4 call  0x00006aaf 
+ 00027302  0x00006ed6 branch  0x00006aa7 
+ 00027303  0x00006ed9 fetch  0x00000001 , 0x00004254 
+ 00027304  0x00006eda set1  0x00000000 , 0x0000003f 
+ 00027305  0x00006edb set1  0x00000001 , 0x0000003f 
+ 00027306  0x00006edc store  0x00000001 , 0x00004254 
+ 00027307  0x00006edd call  0x00006be0 
+ 00027308  0x00006ede branch  0x00006b97 
+ 00027309  0x00006ee1 call  0x00006aaf 
+ 00027310  0x00006ee2 branch  0x00006b97 
+ 00027311  0x00006ee5 call  0x00006acb 
+ 00027312  0x00006ee6 branch  0x00006ad7 
+ 00027313  0x00006ee9 call  0x00006acb 
+ 00027314  0x00006eea ifetch  0x00000001 , 0x00000006 
+ 00027315  0x00006eeb rshift3  0x0000003f , 0x0000003f 
+ 00027316  0x00006eec store  0x00000001 , 0x0000456a 
+ 00027317  0x00006eed ifetch  0x00000001 , 0x00000006 
+ 00027318  0x00006eee store  0x00000001 , 0x00000508 
+ 00027319  0x00006eef rtn 
+ 00027320  0x00006ef3 ifetch  0x00000001 , 0x00000006 
+ 00027321  0x00006ef4 store  0x00000001 , 0x000004fb 
+ 00027322  0x00006ef5 rshift3  0x0000003f , 0x0000003f 
+ 00027323  0x00006ef6 store  0x00000001 , 0x000004fc 
+ 00027324  0x00006ef7 ifetch  0x00000001 , 0x00000006 
+ 00027325  0x00006ef8 store  0x00000001 , 0x000004fd 
+ 00027326  0x00006efa call  0x00006ace 
+ 00027327  0x00006efb storet  0x00000002 , 0x000004ff 
+ 00027328  0x00006efc copy  0x00000006 , 0x0000003f 
+ 00027329  0x00006efd store  0x00000002 , 0x00000501 
+ 00027330  0x00006efe rtn 
+ 00027331  0x00006f01 ifetch  0x00000001 , 0x00000006 
+ 00027332  0x00006f02 rshift  0x0000003f , 0x0000003f 
+ 00027333  0x00006f03 store  0x00000001 , 0x00000503 
+ 00027334  0x00006f04 call  0x00006ace 
+ 00027335  0x00006f05 storet  0x00000002 , 0x00000504 
+ 00027336  0x00006f06 copy  0x00000006 , 0x0000003f 
+ 00027337  0x00006f07 store  0x00000002 , 0x00000506 
+ 00027338  0x00006f08 rtn 
+ 00027339  0x00006f0c fetch  0x00000002 , 0x00000506 
+ 00027340  0x00006f0d copy  0x0000003f , 0x00000006 
+ 00027341  0x00006f0e rtn 
+ 00027342  0x00006f11 ifetch  0x00000001 , 0x00000006 
+ 00027343  0x00006f12 copy  0x0000003f , 0x00000002 
+ 00027344  0x00006f13 rshift  0x00000002 , 0x00000002 
+ 00027345  0x00006f14 rtnbit1  0x00000000 
+ 00027346  0x00006f15 ifetch  0x00000001 , 0x00000006 
+ 00027347  0x00006f16 lshift3  0x0000003f , 0x0000003f 
+ 00027348  0x00006f17 lshift4  0x0000003f , 0x0000003f 
+ 00027349  0x00006f18 iadd  0x00000002 , 0x00000002 
+ 00027350  0x00006f19 rtn 
+ 00027351  0x00006f1c ifetch  0x00000001 , 0x00000006 
+ 00027352  0x00006f1d store  0x00000001 , 0x0000455d 
+ 00027353  0x00006f1e ifetch  0x00000001 , 0x00000006 
+ 00027354  0x00006f1f store  0x00000001 , 0x00000509 
+ 00027355  0x00006f20 ifetch  0x00000001 , 0x00000006 
+ 00027356  0x00006f21 store  0x00000001 , 0x0000050a 
+ 00027357  0x00006f22 ifetch  0x00000001 , 0x00000006 
+ 00027358  0x00006f23 store  0x00000001 , 0x0000050b 
+ 00027359  0x00006f24 ifetch  0x00000002 , 0x00000006 
+ 00027360  0x00006f25 store  0x00000002 , 0x0000455e 
+ 00027361  0x00006f26 ifetch  0x00000001 , 0x00000006 
+ 00027362  0x00006f27 store  0x00000001 , 0x0000050c 
+ 00027363  0x00006f28 ifetch  0x00000001 , 0x00000006 
+ 00027364  0x00006f29 store  0x00000001 , 0x00004568 
+ 00027365  0x00006f2a rtn 
+ 00027366  0x00006f2e call  0x00006ab1 
+ 00027367  0x00006f30 branch  0x00006ae8 
+ 00027368  0x00006f33 fetch  0x00000001 , 0x00004254 
+ 00027369  0x00006f34 set1  0x00000005 , 0x0000003f 
+ 00027370  0x00006f35 set1  0x00000006 , 0x0000003f 
+ 00027371  0x00006f36 store  0x00000001 , 0x00004254 
+ 00027372  0x00006f37 fetcht  0x00000001 , 0x0000455d 
+ 00027373  0x00006f38 lshift2  0x00000002 , 0x00000002 
+ 00027374  0x00006f39 or_into  0x00000003 , 0x00000002 
+ 00027375  0x00006f3a call  0x00006c11 
+ 00027376  0x00006f3b jam  0x00000003 , 0x00004567 
+ 00027377  0x00006f3c branch  0x00006b97 
+ 00027378  0x00006f3f jam  0x00000008 , 0x00000a99 
+ 00027379  0x00006f40 call  0x00007d86 
+ 00027380  0x00006f41 call  0x00006ab1 
+ 00027381  0x00006f42 fetch  0x00000001 , 0x0000456a 
+ 00027382  0x00006f43 sub  0x0000003f , 0x00000001 , 0x0000003e 
+ 00027383  0x00006f44 branch  0x00006af9 , 0x00000005 
+ 00027384  0x00006f45 branch  0x00002a8c 
+ 00027385  0x00006f47 fetch  0x00000001 , 0x00004254 
+ 00027386  0x00006f48 set1  0x00000007 , 0x0000003f 
+ 00027387  0x00006f49 store  0x00000001 , 0x00004254 
+ 00027388  0x00006f4a branch  0x00006b97 
+ 00027389  0x00006f4d call  0x00006acb 
+ 00027390  0x00006f4e ifetch  0x00000001 , 0x00000006 
+ 00027391  0x00006f4f store  0x00000001 , 0x00000ac2 
+ 00027392  0x00006f50 call  0x000052d2 
+ 00027393  0x00006f51 call  0x000052e0 
+ 00027394  0x00006f52 setarg  0x0000000e 
+ 00027395  0x00006f53 istore  0x00000002 , 0x00000005 
+ 00027396  0x00006f54 fetch  0x00000002 , 0x0000424a 
+ 00027397  0x00006f55 istore  0x00000002 , 0x00000005 
+ 00027398  0x00006f56 fetch  0x00000001 , 0x00004563 
+ 00027399  0x00006f58 lshift  0x0000003f , 0x0000003f 
+ 00027400  0x00006f59 set1  0x00000000 , 0x0000003f 
+ 00027401  0x00006f5a istore  0x00000001 , 0x00000005 
+ 00027402  0x00006f5b bpatchx  0x000000a7 , 0x00004034 
+ 00027403  0x00006f5c setarg  0x000015ef 
+ 00027404  0x00006f5d istore  0x00000002 , 0x00000005 
+ 00027405  0x00006f5e setarg  0x00001191 
+ 00027406  0x00006f5f istore  0x00000002 , 0x00000005 
+ 00027407  0x00006f62 fetch  0x00000001 , 0x00000ac2 
+ 00027408  0x00006f63 istore  0x00000001 , 0x00000005 
+ 00027409  0x00006f64 setarg  0x00000007 
+ 00027410  0x00006f65 istore  0x00000005 , 0x00000005 
+ 00027411  0x00006f68 setarg  0x00000001 
+ 00027412  0x00006f69 istore  0x00000002 , 0x00000005 
+ 00027413  0x00006f6c call  0x00006a2f 
+ 00027414  0x00006f6d istore  0x00000001 , 0x00000005 
+ 00027415  0x00006f6e rtn 
+ 00027416  0x00006f73 branch  0x00006b19 
+ 00027417  0x00006f76 bpatchx  0x000000a8 , 0x00004035 
+ 00027418  0x00006f77 fetch  0x00000001 , 0x000004fd 
+ 00027419  0x00006f78 beq  0x00000073 , 0x00006b21 
+ 00027420  0x00006f79 beq  0x0000003f , 0x00006b25 
+ 00027421  0x00006f7a beq  0x000000ef , 0x00006b3f 
+ 00027422  0x00006f7b beq  0x000000ff , 0x00006b37 
+ 00027423  0x00006f7c beq  0x00000053 , 0x00006b46 
+ 00027424  0x00006f7d rtn 
+ 00027425  0x00006f7f fetch  0x00000001 , 0x00004254 
+ 00027426  0x00006f80 set1  0x00000003 , 0x0000003f 
+ 00027427  0x00006f81 store  0x00000001 , 0x00004254 
+ 00027428  0x00006f82 branch  0x00006b97 
+ 00027429  0x00006f84 fetch  0x00000001 , 0x00004254 
+ 00027430  0x00006f85 set1  0x00000003 , 0x0000003f 
+ 00027431  0x00006f86 set1  0x00000002 , 0x0000003f 
+ 00027432  0x00006f87 store  0x00000001 , 0x00004254 
+ 00027433  0x00006f88 fetch  0x00000001 , 0x000004fb 
+ 00027434  0x00006f89 call  0x00006a26 
+ 00027435  0x00006f8a store  0x00000001 , 0x000004fe 
+ 00027436  0x00006f8b call  0x00006bb6 
+ 00027437  0x00006f8c fetch  0x00000001 , 0x000004fb 
+ 00027438  0x00006f8d rshift2  0x0000003f , 0x0000003f 
+ 00027439  0x00006f8e store  0x00000001 , 0x0000455d 
+ 00027440  0x00006f8f lshift2  0x0000003f , 0x0000003f 
+ 00027441  0x00006f90 set0  0x00000001 , 0x0000003f 
+ 00027442  0x00006f91 set1  0x00000000 , 0x0000003f 
+ 00027443  0x00006f92 arg  0x00004565 , 0x00000002 
+ 00027444  0x00006f93 storet  0x00000002 , 0x000004f7 
+ 00027445  0x00006f94 call  0x00006a35 
+ 00027446  0x00006f95 branch  0x00006b97 
+ 00027447  0x00006f98 fetch  0x00000002 , 0x00000501 
+ 00027448  0x00006f99 copy  0x0000003f , 0x00000006 
+ 00027449  0x00006f9a increase  0x00000001 , 0x0000003f 
+ 00027450  0x00006f9b store  0x00000002 , 0x00000501 
+ 00027451  0x00006f9c ifetch  0x00000001 , 0x00000006 
+ 00027452  0x00006f9d fetcht  0x00000001 , 0x00004568 
+ 00027453  0x00006f9e iadd  0x00000002 , 0x0000003f 
+ 00027454  0x00006f9f store  0x00000001 , 0x00004568 
+ 00027455  0x00006fa1 call  0x00006c42 
+ 00027456  0x00006fa3 call  0x00006a72 
+ 00027457  0x00006fa4 call  0x00006c28 
+ 00027458  0x00006fa5 call  0x00006c4b 
+ 00027459  0x00006fa6 branch  0x00006b97 
+ 00027460  0x00006fa9 jam  0x00000009 , 0x00000a99 
+ 00027461  0x00006faa call  0x00007d86 
+ 00027462  0x00006fac call  0x00006a0d 
+ 00027463  0x00006fad fetch  0x00000001 , 0x000004fb 
+ 00027464  0x00006fae call  0x00006a26 
+ 00027465  0x00006faf store  0x00000001 , 0x000004fe 
+ 00027466  0x00006fb0 call  0x00006bb6 
+ 00027467  0x00006fb1 branch  0x00006b97 
+ 00027468  0x00006fb7 fetch  0x00000002 , 0x00000264 
+ 00027469  0x00006fb8 copy  0x0000003f , 0x00000006 
+ 00027470  0x00006fb9 call  0x00006ab8 
+ 00027471  0x00006fba fetch  0x00000001 , 0x000004fc 
+ 00027472  0x00006fbb beq  0x00000000 , 0x00006b52 
+ 00027473  0x00006fbc branch  0x00006b86 
+ 00027474  0x00006fbf bpatchx  0x000000a9 , 0x00004035 
+ 00027475  0x00006fc0 fetch  0x00000001 , 0x000004fd 
+ 00027476  0x00006fc1 beq  0x0000003f , 0x00006a7d 
+ 00027477  0x00006fc2 beq  0x00000073 , 0x00006a86 
+ 00027478  0x00006fc3 beq  0x000000ef , 0x00006b58 
+ 00027479  0x00006fc4 branch  0x00006b97 
+ 00027480  0x00006fc6 fetch  0x00000002 , 0x00000501 
+ 00027481  0x00006fc7 copy  0x0000003f , 0x00000006 
+ 00027482  0x00006fc8 call  0x00006ac3 
+ 00027483  0x00006fc9 fetch  0x00000001 , 0x00000503 
+ 00027484  0x00006fca beq  0x00000041 , 0x00006b61 
+ 00027485  0x00006fcb beq  0x00000040 , 0x00006b61 
+ 00027486  0x00006fcc beq  0x00000071 , 0x00006b6c 
+ 00027487  0x00006fcd beq  0x00000070 , 0x00006b7c 
+ 00027488  0x00006fce branch  0x00006b97 
+ 00027489  0x00006fd1 call  0x00006aaf 
+ 00027490  0x00006fd2 fetch  0x00000001 , 0x0000455d 
+ 00027491  0x00006fd3 rshift  0x0000003f , 0x0000003f 
+ 00027492  0x00006fd4 fetcht  0x00000001 , 0x00004564 
+ 00027493  0x00006fd5 isub  0x00000002 , 0x0000003e 
+ 00027494  0x00006fd6 branch  0x00006b68 , 0x00000005 
+ 00027495  0x00006fd7 branch  0x00002a8c 
+ 00027496  0x00006fd9 fetch  0x00000001 , 0x00004254 
+ 00027497  0x00006fda set1  0x00000001 , 0x0000003f 
+ 00027498  0x00006fdb store  0x00000001 , 0x00004254 
+ 00027499  0x00006fdc branch  0x00006b97 
+ 00027500  0x00006fdf call  0x00006ab1 
+ 00027501  0x00006fe0 fetch  0x00000001 , 0x0000456a 
+ 00027502  0x00006fe1 fetcht  0x00000001 , 0x00004564 
+ 00027503  0x00006fe2 isub  0x00000002 , 0x0000003e 
+ 00027504  0x00006fe3 branch  0x00006b73 , 0x00000005 
+ 00027505  0x00006fe4 branch  0x00002a8c 
+ 00027506  0x00006fe5 branch  0x00006b97 
+ 00027507  0x00006fe7 fetch  0x00000001 , 0x00004254 
+ 00027508  0x00006fe8 set1  0x00000005 , 0x0000003f 
+ 00027509  0x00006fe9 set1  0x00000006 , 0x0000003f 
+ 00027510  0x00006fea store  0x00000001 , 0x00004254 
+ 00027511  0x00006feb fetcht  0x00000001 , 0x0000455d 
+ 00027512  0x00006fec lshift2  0x00000002 , 0x00000002 
+ 00027513  0x00006fed or_into  0x00000003 , 0x00000002 
+ 00027514  0x00006fee call  0x00006c11 
+ 00027515  0x00006fef branch  0x00006b97 
+ 00027516  0x00006ff2 call  0x00006ab1 
+ 00027517  0x00006ff3 fetch  0x00000001 , 0x0000456a 
+ 00027518  0x00006ff4 fetcht  0x00000001 , 0x00004564 
+ 00027519  0x00006ff5 isub  0x00000002 , 0x0000003e 
+ 00027520  0x00006ff6 branch  0x00006b82 , 0x00000005 
+ 00027521  0x00006ff7 branch  0x00002a8c 
+ 00027522  0x00006ff9 fetch  0x00000001 , 0x00004254 
+ 00027523  0x00006ffa set1  0x00000007 , 0x0000003f 
+ 00027524  0x00006ffb store  0x00000001 , 0x00004254 
+ 00027525  0x00006ffc branch  0x00006b97 
+ 00027526  0x00006fff fetch  0x00000001 , 0x000004fc 
+ 00027527  0x00007000 fetcht  0x00000001 , 0x00004564 
+ 00027528  0x00007001 isub  0x00000002 , 0x0000003e 
+ 00027529  0x00007002 branch  0x00006b8c , 0x00000005 
+ 00027530  0x00007003 branch  0x00002a8c 
+ 00027531  0x00007004 branch  0x00006b97 
+ 00027532  0x00007007 fetch  0x00000001 , 0x000004fd 
+ 00027533  0x00007008 beq  0x00000073 , 0x00006b91 
+ 00027534  0x00007009 beq  0x000000ef , 0x00006b3f 
+ 00027535  0x0000700a beq  0x000000ff , 0x00006b37 
+ 00027536  0x0000700b beq  0x00000053 , 0x00006b96 
+ 00027537  0x0000700d fetch  0x00000001 , 0x00004254 
+ 00027538  0x0000700e set1  0x00000003 , 0x0000003f 
+ 00027539  0x0000700f store  0x00000001 , 0x00004254 
+ 00027540  0x00007010 branch  0x00006b97 
+ 00027541  0x00007012 branch  0x00006b95 
+ 00027542  0x00007014 branch  0x00006b46 
+ 00027543  0x00007016 rtn 
+ 00027544  0x00007019 fetch  0x00000001 , 0x00004567 
+ 00027545  0x0000701a rtn  0x00000034 
+ 00027546  0x0000701b beq  0x00000003 , 0x00006b9c 
+ 00027547  0x0000701c branch  0x00002a8c 
+ 00027548  0x0000701f jam  0x00000000 , 0x00004567 
+ 00027549  0x00007020 call  0x000052d2 
+ 00027550  0x00007021 arg  0x00000001 , 0x00000002 
+ 00027551  0x00007022 fetcht  0x00000001 , 0x0000455d 
+ 00027552  0x00007023 lshift2  0x00000002 , 0x00000002 
+ 00027553  0x00007025 or_into  0x00000003 , 0x00000002 
+ 00027554  0x00007026 arg  0x000000aa , 0x00000011 
+ 00027555  0x00007027 call  0x00006bfc 
+ 00027556  0x00007028 call  0x000052e0 
+ 00027557  0x00007029 copy  0x00000005 , 0x00000006 
+ 00027558  0x0000702a ifetch  0x00000002 , 0x00000006 
+ 00027559  0x0000702b branch  0x00002a8c , 0x00000034 
+ 00027560  0x0000702c rtn 
+ 00027561  0x0000702f call  0x000052e0 
+ 00027562  0x00007030 setarg  0x00000004 
+ 00027563  0x00007031 istore  0x00000002 , 0x00000005 
+ 00027564  0x00007032 fetch  0x00000002 , 0x0000424a 
+ 00027565  0x00007033 istore  0x00000002 , 0x00000005 
+ 00027566  0x00007034 fetch  0x00000001 , 0x000004fb 
+ 00027567  0x00007035 istore  0x00000001 , 0x00000005 
+ 00027568  0x00007036 bpatchx  0x000000aa , 0x00004035 
+ 00027569  0x00007037 setarg  0x0000013f 
+ 00027570  0x00007038 istore  0x00000002 , 0x00000005 
+ 00027571  0x00007039 fetch  0x00000001 , 0x000004fe 
+ 00027572  0x0000703a istore  0x00000001 , 0x00000005 
+ 00027573  0x0000703b rtn 
+ 00027574  0x0000703d call  0x000052d2 
+ 00027575  0x0000703e call  0x000052e0 
+ 00027576  0x0000703f setarg  0x00000004 
+ 00027577  0x00007040 istore  0x00000002 , 0x00000005 
+ 00027578  0x00007041 fetch  0x00000002 , 0x0000424a 
+ 00027579  0x00007042 istore  0x00000002 , 0x00000005 
+ 00027580  0x00007043 fetch  0x00000001 , 0x000004fb 
+ 00027581  0x00007044 istore  0x00000001 , 0x00000005 
+ 00027582  0x00007045 bpatchx  0x000000ab , 0x00004035 
+ 00027583  0x00007046 setarg  0x00000173 
+ 00027584  0x00007047 istore  0x00000002 , 0x00000005 
+ 00027585  0x00007048 fetch  0x00000001 , 0x000004fe 
+ 00027586  0x00007049 istore  0x00000001 , 0x00000005 
+ 00027587  0x0000704a rtn 
+ 00027588  0x0000704c call  0x000052e0 
+ 00027589  0x0000704d setarg  0x0000000e 
+ 00027590  0x0000704e istore  0x00000002 , 0x00000005 
+ 00027591  0x0000704f fetch  0x00000002 , 0x0000424a 
+ 00027592  0x00007050 istore  0x00000002 , 0x00000005 
+ 00027593  0x00007051 fetch  0x00000001 , 0x00004563 
+ 00027594  0x00007052 lshift  0x0000003f , 0x0000003f 
+ 00027595  0x00007053 set1  0x00000000 , 0x0000003f 
+ 00027596  0x00007054 istore  0x00000001 , 0x00000005 
+ 00027597  0x00007055 bpatchx  0x000000ac , 0x00004035 
+ 00027598  0x00007056 setarg  0x000015ef 
+ 00027599  0x00007057 istore  0x00000002 , 0x00000005 
+ 00027600  0x00007058 setarg  0x00001183 
+ 00027601  0x00007059 istore  0x00000002 , 0x00000005 
+ 00027602  0x0000705a copy  0x00000002 , 0x0000003f 
+ 00027603  0x0000705b istore  0x00000001 , 0x00000005 
+ 00027604  0x0000705c setarg  0x000000f0 
+ 00027605  0x0000705d istore  0x00000003 , 0x00000005 
+ 00027606  0x0000705e setarg  0x0000007f 
+ 00027607  0x0000705f istore  0x00000002 , 0x00000005 
+ 00027608  0x00007060 setarg  0x00000000 
+ 00027609  0x00007061 istore  0x00000001 , 0x00000005 
+ 00027610  0x00007062 setarg  0x00000001 
+ 00027611  0x00007063 istore  0x00000001 , 0x00000005 
+ 00027612  0x00007064 call  0x00006a2f 
+ 00027613  0x00007065 istore  0x00000001 , 0x00000005 
+ 00027614  0x00007066 jam  0x00000010 , 0x00004569 
+ 00027615  0x00007067 rtn 
+ 00027616  0x00007069 call  0x000052d2 
+ 00027617  0x0000706a call  0x000052e0 
+ 00027618  0x0000706b setarg  0x0000000e 
+ 00027619  0x0000706c istore  0x00000002 , 0x00000005 
+ 00027620  0x0000706d fetch  0x00000002 , 0x0000424a 
+ 00027621  0x0000706e istore  0x00000002 , 0x00000005 
+ 00027622  0x0000706f fetch  0x00000001 , 0x00004563 
+ 00027623  0x00007070 lshift  0x0000003f , 0x0000003f 
+ 00027624  0x00007071 set1  0x00000000 , 0x0000003f 
+ 00027625  0x00007072 istore  0x00000001 , 0x00000005 
+ 00027626  0x00007073 bpatchx  0x000000ad , 0x00004035 
+ 00027627  0x00007074 setarg  0x000015ef 
+ 00027628  0x00007075 istore  0x00000002 , 0x00000005 
+ 00027629  0x00007076 setarg  0x00001181 
+ 00027630  0x00007077 istore  0x00000002 , 0x00000005 
+ 00027631  0x00007078 fetch  0x00000001 , 0x0000455d 
+ 00027632  0x00007079 istore  0x00000001 , 0x00000005 
+ 00027633  0x0000707a setarg  0x000000e0 
+ 00027634  0x0000707b istore  0x00000003 , 0x00000005 
+ 00027635  0x0000707c fetch  0x00000002 , 0x0000456c 
+ 00027636  0x0000707d istore  0x00000002 , 0x00000005 
+ 00027637  0x0000707e setarg  0x00000000 
+ 00027638  0x0000707f istore  0x00000001 , 0x00000005 
+ 00027639  0x00007080 fetch  0x00000001 , 0x0000456e 
+ 00027640  0x00007081 istore  0x00000001 , 0x00000005 
+ 00027641  0x00007082 call  0x00006a2f 
+ 00027642  0x00007083 istore  0x00000001 , 0x00000005 
+ 00027643  0x00007084 rtn 
+ 00027644  0x00007086 call  0x000052e0 
+ 00027645  0x00007087 setarg  0x00000008 
+ 00027646  0x00007088 istore  0x00000002 , 0x00000005 
+ 00027647  0x00007089 fetch  0x00000002 , 0x0000424a 
+ 00027648  0x0000708a istore  0x00000002 , 0x00000005 
+ 00027649  0x0000708b fetch  0x00000001 , 0x00004563 
+ 00027650  0x0000708c lshift  0x0000003f , 0x0000003f 
+ 00027651  0x0000708d set1  0x00000000 , 0x0000003f 
+ 00027652  0x0000708e istore  0x00000001 , 0x00000005 
+ 00027653  0x0000708f bpatchx  0x000000ae , 0x00004035 
+ 00027654  0x00007090 setarg  0x000009ef 
+ 00027655  0x00007091 istore  0x00000002 , 0x00000005 
+ 00027656  0x00007092 setarg  0x000005e3 
+ 00027657  0x00007093 istore  0x00000002 , 0x00000005 
+ 00027658  0x00007094 copy  0x00000002 , 0x0000003f 
+ 00027659  0x00007095 istore  0x00000001 , 0x00000005 
+ 00027660  0x00007096 setarg  0x0000008d 
+ 00027661  0x00007097 istore  0x00000001 , 0x00000005 
+ 00027662  0x00007098 call  0x00006a2f 
+ 00027663  0x00007099 istore  0x00000001 , 0x00000005 
+ 00027664  0x0000709a rtn 
+ 00027665  0x0000709d call  0x000052d2 
+ 00027666  0x0000709e call  0x000052e0 
+ 00027667  0x0000709f setarg  0x00000008 
+ 00027668  0x000070a0 istore  0x00000002 , 0x00000005 
+ 00027669  0x000070a1 fetch  0x00000002 , 0x0000424a 
+ 00027670  0x000070a2 istore  0x00000002 , 0x00000005 
+ 00027671  0x000070a3 copy  0x00000002 , 0x0000000b 
+ 00027672  0x000070a4 fetch  0x00000001 , 0x00004563 
+ 00027673  0x000070a5 lshift  0x0000003f , 0x0000003f 
+ 00027674  0x000070a6 set1  0x00000000 , 0x0000003f 
+ 00027675  0x000070a7 istore  0x00000001 , 0x00000005 
+ 00027676  0x000070a8 bpatchx  0x000000af , 0x00004035 
+ 00027677  0x000070a9 setarg  0x000009ef 
+ 00027678  0x000070aa istore  0x00000002 , 0x00000005 
+ 00027679  0x000070ab setarg  0x000005e1 
+ 00027680  0x000070ac istore  0x00000002 , 0x00000005 
+ 00027681  0x000070ad copy  0x0000000b , 0x0000003f 
+ 00027682  0x000070ae istore  0x00000001 , 0x00000005 
+ 00027683  0x000070af setarg  0x0000008d 
+ 00027684  0x000070b0 istore  0x00000001 , 0x00000005 
+ 00027685  0x000070b1 call  0x00006a2f 
+ 00027686  0x000070b2 istore  0x00000001 , 0x00000005 
+ 00027687  0x000070b3 rtn 
+ 00027688  0x000070b6 bpatchx  0x000000b0 , 0x00004036 
+ 00027689  0x000070b7 fetch  0x00000001 , 0x00004569 
+ 00027690  0x000070b8 rtn  0x00000034 
+ 00027691  0x000070b9 hfetch  0x00000002 , 0x00008112 
+ 00027692  0x000070ba nrtn  0x00000034 
+ 00027693  0x000070bb copy  0x00000011 , 0x0000003f 
+ 00027694  0x000070bc store  0x00000001 , 0x00000a9b 
+ 00027695  0x000070bd storet  0x00000001 , 0x00000a9a 
+ 00027696  0x000070be call  0x0000526e 
+ 00027697  0x000070bf nrtn  0x00000034 
+ 00027698  0x000070c0 call  0x000052d2 
+ 00027699  0x000070c1 call  0x000052e0 
+ 00027700  0x000070c2 setarg  0x00000005 
+ 00027701  0x000070c3 istore  0x00000002 , 0x00000005 
+ 00027702  0x000070c4 fetch  0x00000002 , 0x0000424a 
+ 00027703  0x000070c5 istore  0x00000002 , 0x00000005 
+ 00027704  0x000070c6 fetch  0x00000001 , 0x0000050d 
+ 00027705  0x000070c7 istore  0x00000001 , 0x00000005 
+ 00027706  0x000070c8 setarg  0x000001ff 
+ 00027707  0x000070c9 istore  0x00000002 , 0x00000005 
+ 00027708  0x000070ca fetch  0x00000001 , 0x00004569 
+ 00027709  0x000070cb istore  0x00000001 , 0x00000005 
+ 00027710  0x000070cc fetch  0x00000001 , 0x00004566 
+ 00027711  0x000070cd istore  0x00000001 , 0x00000005 
+ 00027712  0x000070ce jam  0x00000000 , 0x00004569 
+ 00027713  0x000070cf rtn 
+ 00027714  0x000070d2 bpatchx  0x000000b1 , 0x00004036 
+ 00027715  0x000070d3 fetch  0x00000001 , 0x0000456b 
+ 00027716  0x000070d4 rtneq  0x00000001 
+ 00027717  0x000070d5 fetch  0x00000002 , 0x000004ff 
+ 00027718  0x000070d6 rtn  0x00000034 
+ 00027719  0x000070d7 fetch  0x00000001 , 0x00004569 
+ 00027720  0x000070d8 increase  0x00000001 , 0x0000003f 
+ 00027721  0x000070d9 store  0x00000001 , 0x00004569 
+ 00027722  0x000070da rtn 
+ 00027723  0x000070dd fetch  0x00000002 , 0x0000456f 
+ 00027724  0x000070de branch  0x00007f9c 
+ 00027725  0x000070e1 bpatchx  0x000000b2 , 0x00004036 
+ 00027726  0x000070e3 fetch  0x00000001 , 0x00004568 
+ 00027727  0x000070e4 rtn  0x00000034 
+ 00027728  0x000070e5 increase  0xffffffff , 0x0000003f 
+ 00027729  0x000070e6 store  0x00000001 , 0x00004568 
+ 00027730  0x000070e7 fetch  0x00000002 , 0x0000455e 
+ 00027731  0x000070e8 fetcht  0x00000002 , 0x0000469f 
+ 00027732  0x000070e9 isub  0x00000002 , 0x0000003e 
+ 00027733  0x000070ea branch  0x00006c57 , 0x00000002 
+ 00027734  0x000070eb store  0x00000002 , 0x0000469f 
+ 00027735  0x000070ed fetch  0x00000001 , 0x00004569 
+ 00027736  0x000070ee branch  0x00006c5f , 0x00000034 
+ 00027737  0x000070ef jam  0x00000001 , 0x00000510 
+ 00027738  0x000070f0 fetch  0x00000001 , 0x00004566 
+ 00027739  0x000070f1 store  0x00000001 , 0x0000050f 
+ 00027740  0x000070f2 setarg  0x000000ff 
+ 00027741  0x000070f3 store  0x00000001 , 0x0000050e 
+ 00027742  0x000070f4 branch  0x00006c64 
+ 00027743  0x000070f6 jam  0x00000000 , 0x00000510 
+ 00027744  0x000070f7 fetch  0x00000001 , 0x00004565 
+ 00027745  0x000070f8 store  0x00000001 , 0x0000050f 
+ 00027746  0x000070f9 setarg  0x000000ef 
+ 00027747  0x000070fa store  0x00000001 , 0x0000050e 
+ 00027748  0x000070fc bpatchx  0x000000b3 , 0x00004036 
+ 00027749  0x000070fd fetch  0x00000002 , 0x0000469f 
+ 00027750  0x000070fe sub  0x0000003f , 0x0000007f , 0x0000003e 
+ 00027751  0x000070ff branch  0x00006c6b , 0x00000002 
+ 00027752  0x00007100 fetch  0x00000001 , 0x00000510 
+ 00027753  0x00007101 increase  0x00000001 , 0x0000003f 
+ 00027754  0x00007102 store  0x00000001 , 0x00000510 
+ 00027755  0x00007104 call  0x00006a72 
+ 00027756  0x00007105 fetch  0x00000002 , 0x0000469f 
+ 00027757  0x00007106 increase  0x00000008 , 0x0000003f 
+ 00027758  0x00007107 fetcht  0x00000001 , 0x00000510 
+ 00027759  0x00007108 iadd  0x00000002 , 0x00000011 
+ 00027760  0x0000710a call  0x00005240 
+ 00027761  0x0000710b store  0x00000002 , 0x00000277 
+ 00027762  0x0000710c increase  0x00000004 , 0x0000003f 
+ 00027763  0x0000710d store  0x00000002 , 0x00000279 
+ 00027764  0x0000710e copy  0x0000003f , 0x00000005 
+ 00027765  0x0000710f fetch  0x00000001 , 0x0000050d 
+ 00027766  0x00007110 istore  0x00000001 , 0x00000005 
+ 00027767  0x00007111 fetch  0x00000001 , 0x0000050e 
+ 00027768  0x00007112 istore  0x00000001 , 0x00000005 
+ 00027769  0x00007113 call  0x00006c95 
+ 00027770  0x00007114 call  0x00006ca6 
+ 00027771  0x00007115 bpatchx  0x000000b4 , 0x00004036 
+ 00027772  0x00007116 fetch  0x00000002 , 0x00004571 
+ 00027773  0x00007117 copy  0x0000003f , 0x00000003 
+ 00027774  0x00007118 fetch  0x00000002 , 0x0000469f 
+ 00027775  0x00007119 copy  0x0000003f , 0x00000039 
+ 00027776  0x0000711a call  0x000066ea 
+ 00027777  0x0000711b copy  0x00000005 , 0x00000002 
+ 00027778  0x0000711c copy  0x00000003 , 0x0000003f 
+ 00027779  0x0000711d store  0x00000002 , 0x00004571 
+ 00027780  0x0000711e copy  0x00000002 , 0x00000005 
+ 00027781  0x0000711f fetch  0x00000001 , 0x0000050f 
+ 00027782  0x00007120 istore  0x00000001 , 0x00000005 
+ 00027783  0x00007121 fetch  0x00000002 , 0x00000277 
+ 00027784  0x00007122 copy  0x0000003f , 0x00000005 
+ 00027785  0x00007123 fetch  0x00000002 , 0x0000469f 
+ 00027786  0x00007124 fetcht  0x00000001 , 0x00000510 
+ 00027787  0x00007125 iadd  0x00000002 , 0x0000003f 
+ 00027788  0x00007126 increase  0x00000004 , 0x0000003f 
+ 00027789  0x00007127 istore  0x00000002 , 0x00000005 
+ 00027790  0x00007128 fetch  0x00000002 , 0x0000424a 
+ 00027791  0x00007129 istore  0x00000002 , 0x00000005 
+ 00027792  0x0000712a jam  0x00000000 , 0x00004569 
+ 00027793  0x0000712b fetch  0x00000002 , 0x00004573 
+ 00027794  0x0000712c beq  0x00000000 , 0x00003a97 
+ 00027795  0x0000712d jam  0x00000000 , 0x00000b05 
+ 00027796  0x0000712e rtn 
+ 00027797  0x00007131 bpatchx  0x000000b5 , 0x00004036 
+ 00027798  0x00007132 fetch  0x00000002 , 0x0000469f 
+ 00027799  0x00007133 sub  0x0000003f , 0x0000007f , 0x0000003e 
+ 00027800  0x00007134 nbranch  0x00006c9d , 0x00000002 
+ 00027801  0x00007135 lshift  0x0000003f , 0x0000003f 
+ 00027802  0x00007136 set1  0x00000000 , 0x0000003f 
+ 00027803  0x00007137 istore  0x00000001 , 0x00000005 
+ 00027804  0x00007138 rtn 
+ 00027805  0x0000713a fetch  0x00000002 , 0x0000469f 
+ 00027806  0x0000713b rshift3  0x0000003f , 0x0000003f 
+ 00027807  0x0000713c rshift4  0x0000003f , 0x00000002 
+ 00027808  0x0000713d and_into  0x0000007f , 0x0000003f 
+ 00027809  0x0000713e lshift  0x0000003f , 0x0000003f 
+ 00027810  0x0000713f set0  0x00000000 , 0x0000003f 
+ 00027811  0x00007140 istore  0x00000001 , 0x00000005 
+ 00027812  0x00007141 istoret  0x00000001 , 0x00000005 
+ 00027813  0x00007142 rtn 
+ 00027814  0x00007144 fetch  0x00000001 , 0x00004569 
+ 00027815  0x00007145 rtn  0x00000034 
+ 00027816  0x00007146 istore  0x00000001 , 0x00000005 
+ 00027817  0x00007147 rtn 
+ 00027818  0x0000714d bpatchx  0x000000b6 , 0x00004036 
+ 00027819  0x0000714e call  0x00007d9c 
+ 00027820  0x0000714f call  0x000032f6 
+ 00027821  0x00007150 call  0x0000631b 
+ 00027822  0x00007152 bpatchx  0x000000b7 , 0x00004036 
+ 00027823  0x00007153 call  0x000076dc 
+ 00027824  0x00007154 call  0x000076b5 
+ 00027825  0x00007155 call  0x000076c6 
+ 00027826  0x00007158 call  0x0000526e 
+ 00027827  0x00007159 nrtn  0x00000034 
+ 00027828  0x0000715b call  0x00004da9 
+ 00027829  0x0000715c call  0x0000526e 
+ 00027830  0x0000715d nrtn  0x00000034 
+ 00027831  0x0000715e bpatchx  0x000000b8 , 0x00004037 
+ 00027832  0x00007160 call  0x00006cf5 
+ 00027833  0x00007161 call  0x00004f64 
+ 00027834  0x00007162 call  0x00006b98 
+ 00027835  0x00007164 call  0x00006cbe 
+ 00027836  0x00007165 bpatchx  0x000000b9 , 0x00004037 
+ 00027837  0x00007168 branch  0x000032f2 
+ 00027838  0x0000716b fetch  0x00000001 , 0x0000027f 
+ 00027839  0x0000716c bbit1  0x00000000 , 0x00005087 
+ 00027840  0x0000716d bbit1  0x00000007 , 0x00005091 
+ 00027841  0x0000716e rtn 
+ 00027842  0x00007171 bpatchx  0x000000ba , 0x00004037 
+ 00027843  0x00007172 call  0x00005274 
+ 00027844  0x00007173 rtn  0x00000034 
+ 00027845  0x00007174 fetch  0x00000001 , 0x0000004b 
+ 00027846  0x00007175 rtnbit1  0x00000006 
+ 00027847  0x00007176 call  0x00005258 
+ 00027848  0x00007177 store  0x00000002 , 0x0000016f 
+ 00027849  0x00007178 copy  0x0000003f , 0x00000006 
+ 00027850  0x00007179 ifetch  0x00000002 , 0x00000006 
+ 00027851  0x0000717a increase  0x00000004 , 0x0000003f 
+ 00027852  0x0000717b store  0x00000002 , 0x000041dc 
+ 00027853  0x0000717c jam  0x00000006 , 0x000041db 
+ 00027854  0x0000717d bpatchx  0x000000bb , 0x00004037 
+ 00027855  0x0000717e fetch  0x00000002 , 0x00004246 
+ 00027856  0x0000717f branch  0x00006cdd , 0x00000034 
+ 00027857  0x00007180 fetch  0x00000001 , 0x0000004b 
+ 00027858  0x00007181 rtnbit0  0x00000007 
+ 00027859  0x00007182 set0  0x00000007 , 0x0000003f 
+ 00027860  0x00007183 store  0x00000001 , 0x0000004b 
+ 00027861  0x00007184 jam  0x00000005 , 0x000041db 
+ 00027862  0x00007185 fetcht  0x00000002 , 0x00004246 
+ 00027863  0x00007186 fetch  0x00000002 , 0x0000016f 
+ 00027864  0x00007187 iadd  0x00000002 , 0x0000003f 
+ 00027865  0x00007188 store  0x00000002 , 0x0000016f 
+ 00027866  0x00007189 fetch  0x00000002 , 0x000041dc 
+ 00027867  0x0000718a isub  0x00000002 , 0x0000003f 
+ 00027868  0x0000718b store  0x00000002 , 0x000041dc 
+ 00027869  0x0000718d bpatchx  0x000000bc , 0x00004037 
+ 00027870  0x0000718e fetch  0x00000002 , 0x000041dc 
+ 00027871  0x0000718f branch  0x00002a8c , 0x00000034 
+ 00027872  0x00007190 arg  0x00000104 , 0x00000002 
+ 00027873  0x00007191 isub  0x00000002 , 0x0000003f 
+ 00027874  0x00007192 nbranch  0x00006ce9 , 0x00000002 
+ 00027875  0x00007193 bpatchx  0x000000bd , 0x00004037 
+ 00027876  0x00007194 storet  0x00000002 , 0x000041dc 
+ 00027877  0x00007195 fetch  0x00000002 , 0x00004246 
+ 00027878  0x00007196 iadd  0x00000002 , 0x0000003f 
+ 00027879  0x00007197 store  0x00000002 , 0x00004246 
+ 00027880  0x00007198 branch  0x00006ceb 
+ 00027881  0x0000719a setarg  0x00000000 
+ 00027882  0x0000719b store  0x00000002 , 0x00004246 
+ 00027883  0x0000719d fetch  0x00000001 , 0x0000004b 
+ 00027884  0x0000719e set1  0x00000006 , 0x0000003f 
+ 00027885  0x0000719f store  0x00000001 , 0x0000004b 
+ 00027886  0x000071a0 rtn 
+ 00027887  0x000071a3 fetch  0x00000001 , 0x00004684 
+ 00027888  0x000071a4 bbit1  0x00000000 , 0x00006cf3 
+ 00027889  0x000071a5 jam  0x00000001 , 0x00000287 
+ 00027890  0x000071a6 rtn 
+ 00027891  0x000071a8 jam  0x0000000f , 0x00000287 
+ 00027892  0x000071a9 rtn 
+ 00027893  0x000071ac fetch  0x00000001 , 0x00004681 
+ 00027894  0x000071ad nbranch  0x00006cfb , 0x00000034 
+ 00027895  0x000071af fetch  0x00000001 , 0x00000286 
+ 00027896  0x000071b1 rtn  0x00000034 
+ 00027897  0x000071b3 jam  0x00000000 , 0x00000286 
+ 00027898  0x000071b5 rtn 
+ 00027899  0x000071b9 bpatchx  0x000000be , 0x00004037 
+ 00027900  0x000071ba fetch  0x00000001 , 0x00000287 
+ 00027901  0x000071bb rtn  0x00000034 
+ 00027902  0x000071bc beq  0x00000001 , 0x00006d1b 
+ 00027903  0x000071bd beq  0x00000002 , 0x00006d74 
+ 00027904  0x000071be beq  0x00000003 , 0x00006d21 
+ 00027905  0x000071bf beq  0x00000004 , 0x00006d78 
+ 00027906  0x000071c0 beq  0x0000003b , 0x00006d2b 
+ 00027907  0x000071c1 beq  0x0000003c , 0x00006d7b 
+ 00027908  0x000071c2 beq  0x0000000d , 0x00006d30 
+ 00027909  0x000071c3 beq  0x0000000e , 0x00006d80 
+ 00027910  0x000071c4 beq  0x0000000f , 0x00006d33 
+ 00027911  0x000071c5 beq  0x00000010 , 0x00006d86 
+ 00027912  0x000071c6 beq  0x00000011 , 0x00006d39 
+ 00027913  0x000071c7 beq  0x00000012 , 0x00006d8a 
+ 00027914  0x000071c8 beq  0x00000013 , 0x00006d3f 
+ 00027915  0x000071c9 beq  0x00000014 , 0x00006d8e 
+ 00027916  0x000071ca beq  0x00000015 , 0x00006d45 
+ 00027917  0x000071cb beq  0x00000016 , 0x00006d92 
+ 00027918  0x000071cc beq  0x00000017 , 0x00006d4b 
+ 00027919  0x000071cd beq  0x00000018 , 0x00006d97 
+ 00027920  0x000071ce beq  0x00000019 , 0x00006d51 
+ 00027921  0x000071cf beq  0x0000001a , 0x00006d9b 
+ 00027922  0x000071d0 beq  0x0000001b , 0x00006d57 
+ 00027923  0x000071d1 beq  0x0000001c , 0x00006d9f 
+ 00027924  0x000071d2 beq  0x0000001d , 0x00006d5d 
+ 00027925  0x000071d3 beq  0x0000001e , 0x00006da4 
+ 00027926  0x000071d4 beq  0x0000001f , 0x00006d63 
+ 00027927  0x000071d5 beq  0x00000020 , 0x00006da8 
+ 00027928  0x000071d6 beq  0x00000021 , 0x00006d6e 
+ 00027929  0x000071d7 beq  0x00000022 , 0x00006dac 
+ 00027930  0x000071d9 rtn 
+ 00027931  0x000071db call  0x00006db7 
+ 00027932  0x000071dc jam  0x00000002 , 0x00000287 
+ 00027933  0x000071dd fetch  0x00000001 , 0x00004250 
+ 00027934  0x000071de set1  0x00000000 , 0x0000003f 
+ 00027935  0x000071df store  0x00000001 , 0x00004250 
+ 00027936  0x000071e0 rtn 
+ 00027937  0x000071e2 jam  0x00000004 , 0x00000287 
+ 00027938  0x000071e3 fetch  0x00000001 , 0x00004250 
+ 00027939  0x000071e4 rtnbit1  0x00000002 
+ 00027940  0x000071e5 jam  0x00000003 , 0x00000287 
+ 00027941  0x000071e6 call  0x00006dbe 
+ 00027942  0x000071e7 jam  0x00000004 , 0x00000287 
+ 00027943  0x000071e8 fetch  0x00000001 , 0x00004250 
+ 00027944  0x000071e9 set1  0x00000002 , 0x0000003f 
+ 00027945  0x000071ea store  0x00000001 , 0x00004250 
+ 00027946  0x000071eb rtn 
+ 00027947  0x000071ed call  0x00005274 
+ 00027948  0x000071ee nrtn  0x00000034 
+ 00027949  0x000071ef call  0x00006dcd 
+ 00027950  0x000071f0 jam  0x0000003c , 0x00000287 
+ 00027951  0x000071f1 rtn 
+ 00027952  0x000071f3 call  0x00006dc3 
+ 00027953  0x000071f4 jam  0x0000000e , 0x00000287 
+ 00027954  0x000071f5 rtn 
+ 00027955  0x000071f7 call  0x00006ddd 
+ 00027956  0x000071f8 jam  0x00000010 , 0x00000287 
+ 00027957  0x000071f9 fetch  0x00000001 , 0x00004252 
+ 00027958  0x000071fa set1  0x00000000 , 0x0000003f 
+ 00027959  0x000071fb store  0x00000001 , 0x00004252 
+ 00027960  0x000071fc rtn 
+ 00027961  0x000071fe call  0x00006de4 
+ 00027962  0x000071ff jam  0x00000012 , 0x00000287 
+ 00027963  0x00007200 fetch  0x00000001 , 0x00004252 
+ 00027964  0x00007201 set1  0x00000002 , 0x0000003f 
+ 00027965  0x00007202 store  0x00000001 , 0x00004252 
+ 00027966  0x00007203 rtn 
+ 00027967  0x00007205 call  0x00006de9 
+ 00027968  0x00007206 jam  0x00000014 , 0x00000287 
+ 00027969  0x00007207 fetch  0x00000001 , 0x00004253 
+ 00027970  0x00007208 set1  0x00000000 , 0x0000003f 
+ 00027971  0x00007209 store  0x00000001 , 0x00004253 
+ 00027972  0x0000720a rtn 
+ 00027973  0x0000720c call  0x00006df0 
+ 00027974  0x0000720d jam  0x00000016 , 0x00000287 
+ 00027975  0x0000720e fetch  0x00000001 , 0x00004253 
+ 00027976  0x0000720f set1  0x00000002 , 0x0000003f 
+ 00027977  0x00007210 store  0x00000001 , 0x00004253 
+ 00027978  0x00007211 rtn 
+ 00027979  0x00007213 call  0x00006dd1 
+ 00027980  0x00007214 jam  0x00000018 , 0x00000287 
+ 00027981  0x00007215 fetch  0x00000001 , 0x00004251 
+ 00027982  0x00007216 set1  0x00000000 , 0x0000003f 
+ 00027983  0x00007217 store  0x00000001 , 0x00004251 
+ 00027984  0x00007218 rtn 
+ 00027985  0x0000721a call  0x00006dd8 
+ 00027986  0x0000721b jam  0x0000001a , 0x00000287 
+ 00027987  0x0000721c fetch  0x00000001 , 0x00004251 
+ 00027988  0x0000721d set1  0x00000002 , 0x0000003f 
+ 00027989  0x0000721e store  0x00000001 , 0x00004251 
+ 00027990  0x0000721f rtn 
+ 00027991  0x00007221 call  0x00006df5 
+ 00027992  0x00007222 jam  0x0000001c , 0x00000287 
+ 00027993  0x00007223 fetch  0x00000001 , 0x00004251 
+ 00027994  0x00007224 set1  0x00000006 , 0x0000003f 
+ 00027995  0x00007225 store  0x00000001 , 0x00004251 
+ 00027996  0x00007226 rtn 
+ 00027997  0x00007228 call  0x00006dfc 
+ 00027998  0x00007229 fetch  0x00000001 , 0x00004254 
+ 00027999  0x0000722a set1  0x00000000 
+ 00028000  0x0000722b store  0x00000001 , 0x00004254 
+ 00028001  0x0000722c jam  0x0000001e , 0x00000287 
+ 00028002  0x0000722d rtn 
+ 00028003  0x0000722f call  0x00006e02 
+ 00028004  0x00007230 fetch  0x00000001 , 0x00004254 
+ 00028005  0x00007231 set1  0x00000002 
+ 00028006  0x00007232 store  0x00000001 , 0x00004254 
+ 00028007  0x00007233 jam  0x00000020 , 0x00000287 
+ 00028008  0x00007234 fetch  0x00000001 , 0x00004564 
+ 00028009  0x00007235 lshift3  0x0000003f , 0x0000003f 
+ 00028010  0x00007236 or_into  0x00000003 , 0x0000003f 
+ 00028011  0x00007237 arg  0x00004565 , 0x00000002 
+ 00028012  0x00007238 storet  0x00000002 , 0x000004f7 
+ 00028013  0x00007239 branch  0x00006a35 
+ 00028014  0x0000723b call  0x00006e0c 
+ 00028015  0x0000723c fetch  0x00000001 , 0x00004254 
+ 00028016  0x0000723d set1  0x00000004 
+ 00028017  0x0000723e store  0x00000001 , 0x00004254 
+ 00028018  0x0000723f jam  0x00000022 , 0x00000287 
+ 00028019  0x00007240 rtn 
+ 00028020  0x00007243 fetch  0x00000001 , 0x00004250 
+ 00028021  0x00007244 rtnbit0  0x00000001 
+ 00028022  0x00007245 jam  0x00000003 , 0x00000287 
+ 00028023  0x00007246 branch  0x00006cfb 
+ 00028024  0x00007248 fetch  0x00000001 , 0x00004250 
+ 00028025  0x00007249 rtnne  0x0000003f 
+ 00028026  0x0000724a jam  0x0000003b , 0x00000287 
+ 00028027  0x0000724c fetch  0x00000001 , 0x00000285 
+ 00028028  0x0000724d rtnne  0x00000017 
+ 00028029  0x0000724e jam  0x00000000 , 0x00000285 
+ 00028030  0x0000724f jam  0x0000000d , 0x00000287 
+ 00028031  0x00007250 branch  0x00006cfb 
+ 00028032  0x00007252 fetch  0x00000001 , 0x00004250 
+ 00028033  0x00007253 nrtn  0x00000034 
+ 00028034  0x00007254 fetch  0x00000001 , 0x00004684 
+ 00028035  0x00007255 bbit1  0x00000000 , 0x00006daf 
+ 00028036  0x00007256 bbit1  0x00000006 , 0x00006db1 
+ 00028037  0x00007257 branch  0x00006db5 
+ 00028038  0x00007259 fetch  0x00000001 , 0x00004252 
+ 00028039  0x0000725a rtnbit0  0x00000001 
+ 00028040  0x0000725b jam  0x00000011 , 0x00000287 
+ 00028041  0x0000725c branch  0x00006cfb 
+ 00028042  0x0000725e fetch  0x00000001 , 0x00004252 
+ 00028043  0x0000725f rtnne  0x0000003f 
+ 00028044  0x00007260 jam  0x00000013 , 0x00000287 
+ 00028045  0x00007261 branch  0x00006cfb 
+ 00028046  0x00007263 fetch  0x00000001 , 0x00004253 
+ 00028047  0x00007264 rtnbit0  0x00000001 
+ 00028048  0x00007265 jam  0x00000015 , 0x00000287 
+ 00028049  0x00007266 branch  0x00006cfb 
+ 00028050  0x00007268 fetch  0x00000001 , 0x00004253 
+ 00028051  0x00007269 rtnne  0x0000003f 
+ 00028052  0x0000726a fetch  0x00000001 , 0x00004684 
+ 00028053  0x0000726b bbit1  0x00000006 , 0x00006db1 
+ 00028054  0x0000726c branch  0x00006db5 
+ 00028055  0x0000726e fetch  0x00000001 , 0x00004251 
+ 00028056  0x0000726f rtnbit0  0x00000001 
+ 00028057  0x00007270 jam  0x00000019 , 0x00000287 
+ 00028058  0x00007271 branch  0x00006cfb 
+ 00028059  0x00007273 fetch  0x00000001 , 0x00004251 
+ 00028060  0x00007274 rtnne  0x0000003f 
+ 00028061  0x00007275 jam  0x0000001b , 0x00000287 
+ 00028062  0x00007276 branch  0x00006cfb 
+ 00028063  0x00007278 fetch  0x00000001 , 0x00004251 
+ 00028064  0x00007279 rtnne  0x000000ff 
+ 00028065  0x0000727a fetch  0x00000001 , 0x00004684 
+ 00028066  0x0000727b bbit1  0x00000006 , 0x00006db3 
+ 00028067  0x0000727c branch  0x00006db5 
+ 00028068  0x0000727e fetch  0x00000001 , 0x00004254 
+ 00028069  0x0000727f rtnbit0  0x00000001 
+ 00028070  0x00007280 jam  0x0000001f , 0x00000287 
+ 00028071  0x00007281 branch  0x00006cfb 
+ 00028072  0x00007283 fetch  0x00000001 , 0x00004254 
+ 00028073  0x00007284 rtnbit0  0x00000003 
+ 00028074  0x00007285 jam  0x00000021 , 0x00000287 
+ 00028075  0x00007286 branch  0x00006cfb 
+ 00028076  0x00007288 fetch  0x00000001 , 0x00004254 
+ 00028077  0x00007289 rtnne  0x000000ff 
+ 00028078  0x0000728a branch  0x00006db5 
+ 00028079  0x0000728d jam  0x0000000f , 0x00000287 
+ 00028080  0x0000728e branch  0x00006cfb 
+ 00028081  0x00007291 jam  0x00000017 , 0x00000287 
+ 00028082  0x00007292 branch  0x00006cfb 
+ 00028083  0x00007294 jam  0x0000001d , 0x00000287 
+ 00028084  0x00007295 branch  0x00006cfb 
+ 00028085  0x0000729a jam  0x00000000 , 0x00000287 
+ 00028086  0x0000729b rtn 
+ 00028087  0x0000729d bpatchx  0x000000bf , 0x00004037 
+ 00028088  0x0000729e call  0x000052b8 
+ 00028089  0x0000729f setarg  0x00000001 
+ 00028090  0x000072a0 copy  0x0000003f , 0x00000002 
+ 00028091  0x000072a1 setarg  0x00000050 
+ 00028092  0x000072a2 copy  0x0000003f , 0x0000000b 
+ 00028093  0x000072a3 branch  0x000050a8 
+ 00028094  0x000072a6 bpatchx  0x000000c0 , 0x00004038 
+ 00028095  0x000072a7 call  0x000052b8 
+ 00028096  0x000072a8 fetch  0x00000002 , 0x00004248 
+ 00028097  0x000072a9 copy  0x0000003f , 0x00000002 
+ 00028098  0x000072aa branch  0x000050b7 
+ 00028099  0x000072ad bpatchx  0x000000c1 , 0x00004038 
+ 00028100  0x000072ae call  0x000052b8 
+ 00028101  0x000072af fetch  0x00000002 , 0x00004248 
+ 00028102  0x000072b0 copy  0x0000003f , 0x00000002 
+ 00028103  0x000072b1 arg  0x00000050 , 0x0000000b 
+ 00028104  0x000072b2 call  0x000050cc 
+ 00028105  0x000072b3 fetch  0x00000001 , 0x00004250 
+ 00028106  0x000072b4 set0  0x00000005 , 0x0000003f 
+ 00028107  0x000072b5 store  0x00000001 , 0x00004250 
+ 00028108  0x000072b6 rtn 
+ 00028109  0x000072b9 bpatchx  0x000000c2 , 0x00004038 
+ 00028110  0x000072ba call  0x000052c5 
+ 00028111  0x000072bb call  0x00007138 
+ 00028112  0x000072bc branch  0x000050e7 
+ 00028113  0x000072bf bpatchx  0x000000c3 , 0x00004038 
+ 00028114  0x000072c0 call  0x000052b8 
+ 00028115  0x000072c1 setarg  0x00000003 
+ 00028116  0x000072c2 copy  0x0000003f , 0x00000002 
+ 00028117  0x000072c3 setarg  0x00000051 
+ 00028118  0x000072c4 copy  0x0000003f , 0x0000000b 
+ 00028119  0x000072c5 branch  0x000050a8 
+ 00028120  0x000072c8 bpatchx  0x000000c4 , 0x00004038 
+ 00028121  0x000072c9 call  0x000052b8 
+ 00028122  0x000072ca fetch  0x00000002 , 0x0000424a 
+ 00028123  0x000072cb copy  0x0000003f , 0x00000002 
+ 00028124  0x000072cc branch  0x000050b7 
+ 00028125  0x000072cf bpatchx  0x000000c5 , 0x00004038 
+ 00028126  0x000072d0 call  0x000052b8 
+ 00028127  0x000072d1 setarg  0x00000011 
+ 00028128  0x000072d2 copy  0x0000003f , 0x00000002 
+ 00028129  0x000072d3 setarg  0x00000052 
+ 00028130  0x000072d4 copy  0x0000003f , 0x0000000b 
+ 00028131  0x000072d5 branch  0x000050a8 
+ 00028132  0x000072d8 bpatchx  0x000000c6 , 0x00004038 
+ 00028133  0x000072d9 call  0x000052b8 
+ 00028134  0x000072da fetch  0x00000002 , 0x0000424c 
+ 00028135  0x000072db copy  0x0000003f , 0x00000002 
+ 00028136  0x000072dc branch  0x000050b7 
+ 00028137  0x000072df bpatchx  0x000000c7 , 0x00004038 
+ 00028138  0x000072e0 call  0x000052b8 
+ 00028139  0x000072e1 setarg  0x00000013 
+ 00028140  0x000072e2 copy  0x0000003f , 0x00000002 
+ 00028141  0x000072e3 setarg  0x00000053 
+ 00028142  0x000072e4 copy  0x0000003f , 0x0000000b 
+ 00028143  0x000072e5 branch  0x000050a8 
+ 00028144  0x000072e8 bpatchx  0x000000c8 , 0x00004039 
+ 00028145  0x000072e9 call  0x000052b8 
+ 00028146  0x000072ea fetch  0x00000002 , 0x0000424e 
+ 00028147  0x000072eb copy  0x0000003f , 0x00000002 
+ 00028148  0x000072ec branch  0x000050b7 
+ 00028149  0x000072ef bpatchx  0x000000c9 , 0x00004039 
+ 00028150  0x000072f0 call  0x000052d2 
+ 00028151  0x000072f2 jam  0x00000003 , 0x000004fb 
+ 00028152  0x000072f3 jam  0x0000001c , 0x000004fe 
+ 00028153  0x000072f4 call  0x00006ba9 
+ 00028154  0x000072f5 jam  0x00000001 , 0x00004563 
+ 00028155  0x000072f6 rtn 
+ 00028156  0x000072f9 bpatchx  0x000000ca , 0x00004039 
+ 00028157  0x000072fa call  0x000052d2 
+ 00028158  0x000072fb fetcht  0x00000001 , 0x00004564 
+ 00028159  0x000072fc call  0x00006a79 
+ 00028160  0x000072fd storet  0x00000001 , 0x0000455d 
+ 00028161  0x000072fe branch  0x00006bc4 
+ 00028162  0x00007301 bpatchx  0x000000cb , 0x00004039 
+ 00028163  0x00007302 call  0x000052d2 
+ 00028164  0x00007303 fetcht  0x00000001 , 0x0000455d 
+ 00028165  0x00007304 call  0x00006a73 
+ 00028166  0x00007305 call  0x00006a1a 
+ 00028167  0x00007306 store  0x00000001 , 0x000004fe 
+ 00028168  0x00007307 fetcht  0x00000001 , 0x0000455d 
+ 00028169  0x00007308 call  0x00006a73 
+ 00028170  0x00007309 storet  0x00000001 , 0x000004fb 
+ 00028171  0x0000730a branch  0x00006ba9 
+ 00028172  0x0000730d bpatchx  0x000000cc , 0x00004039 
+ 00028173  0x0000730e call  0x000052d2 
+ 00028174  0x0000730f fetcht  0x00000001 , 0x0000455d 
+ 00028175  0x00007310 call  0x00006a73 
+ 00028176  0x00007311 branch  0x00006bfc 
+ 00028177  0x0000731f bpatchx  0x000000cd , 0x00004039 
+ 00028178  0x00007320 fetch  0x00000002 , 0x00000264 
+ 00028179  0x00007321 iforce  0x00000006 
+ 00028180  0x00007324 ifetch  0x00000001 , 0x00000006 
+ 00028181  0x00007325 copy  0x0000003f , 0x00000012 
+ 00028182  0x00007326 store  0x00000001 , 0x0000051b 
+ 00028183  0x00007327 ifetch  0x00000002 , 0x00000006 
+ 00028184  0x00007328 store  0x00000002 , 0x0000051c 
+ 00028185  0x00007329 ifetch  0x00000001 , 0x00000006 
+ 00028186  0x0000732a lshift8  0x0000003f , 0x0000000b 
+ 00028187  0x0000732b ifetch  0x00000001 , 0x00000006 
+ 00028188  0x0000732c iadd  0x0000000b , 0x0000000b 
+ 00028189  0x0000732d bpatchx  0x000000ce , 0x00004039 
+ 00028190  0x0000732e copy  0x00000006 , 0x00000002 
+ 00028191  0x0000732f arg  0x00000004 , 0x00000039 
+ 00028192  0x00007330 arg  0x0000052a , 0x00000005 
+ 00028193  0x00007331 call  0x00007ec6 
+ 00028194  0x00007332 copy  0x00000002 , 0x00000006 
+ 00028195  0x00007333 deposit  0x00000012 
+ 00028196  0x00007334 beq  0x00000001 , 0x00006fba 
+ 00028197  0x00007335 beq  0x00000002 , 0x00006e2c 
+ 00028198  0x00007336 beq  0x00000003 , 0x00006fba 
+ 00028199  0x00007337 beq  0x00000004 , 0x00006e54 
+ 00028200  0x00007338 beq  0x00000005 , 0x00006fba 
+ 00028201  0x00007339 beq  0x00000006 , 0x00006f02 
+ 00028202  0x0000733a beq  0x00000007 , 0x00006fba 
+ 00028203  0x0000733b branch  0x00006fc1 
+ 00028204  0x00007347 bpatchx  0x000000cf , 0x00004039 
+ 00028205  0x00007348 call  0x00006fd0 
+ 00028206  0x00007349 compare  0x00000001 , 0x00000002 , 0x000000ff 
+ 00028207  0x0000734a branch  0x00007040 , 0x00000001 
+ 00028208  0x0000734b compare  0x000000ff , 0x00000002 , 0x000000ff 
+ 00028209  0x0000734c branch  0x00006fc4 , 0x00000001 
+ 00028210  0x0000734e ifetch  0x00000002 , 0x00000006 
+ 00028211  0x0000734f store  0x00000002 , 0x00000522 
+ 00028212  0x00007350 increase  0xfffffffe , 0x0000000b 
+ 00028213  0x00007352 increase  0xffffffff , 0x0000000b 
+ 00028214  0x00007353 nbranch  0x00006fbe , 0x00000005 
+ 00028215  0x00007354 arg  0x00000511 , 0x0000000b 
+ 00028216  0x00007355 ifetch  0x00000002 , 0x0000000b 
+ 00028217  0x00007356 rtn  0x00000034 
+ 00028218  0x00007357 call  0x00007082 
+ 00028219  0x00007358 call  0x000052d0 
+ 00028220  0x00007359 force  0x00000003 , 0x0000003f 
+ 00028221  0x0000735a istore  0x00000001 , 0x00000005 
+ 00028222  0x0000735b fetch  0x00000002 , 0x0000051c 
+ 00028223  0x0000735c istore  0x00000002 , 0x00000005 
+ 00028224  0x0000735d lshift2  0x00000007 , 0x0000003f 
+ 00028225  0x0000735e add  0x0000003f , 0x00000005 , 0x0000003f 
+ 00028226  0x0000735f add  0x0000003f , 0x00000005 , 0x00000013 
+ 00028227  0x00007360 byteswap  0x0000003f , 0x0000003f 
+ 00028228  0x00007361 istore  0x00000002 , 0x00000005 
+ 00028229  0x00007362 deposit  0x00000007 
+ 00028230  0x00007363 byteswap  0x0000003f , 0x0000003f 
+ 00028231  0x00007364 istore  0x00000002 , 0x00000005 
+ 00028232  0x00007365 istore  0x00000002 , 0x00000005 
+ 00028233  0x00007366 arg  0x0000052a , 0x00000006 
+ 00028234  0x00007367 copy  0x00000007 , 0x00000039 
+ 00028235  0x00007368 branch  0x00006e4f , 0x00000005 
+ 00028236  0x0000736a ifetch  0x00000004 , 0x00000006 
+ 00028237  0x0000736b istore  0x00000004 , 0x00000005 
+ 00028238  0x0000736c loop  0x00006e4c 
+ 00028239  0x0000736e force  0x00000000 , 0x0000003f 
+ 00028240  0x0000736f istore  0x00000001 , 0x00000005 
+ 00028241  0x00007370 deposit  0x00000013 
+ 00028242  0x00007371 store  0x00000002 , 0x00000275 
+ 00028243  0x00007373 rtn 
+ 00028244  0x0000737f bpatchx  0x000000d0 , 0x0000403a 
+ 00028245  0x00007380 ifetch  0x00000004 , 0x00000006 
+ 00028246  0x00007381 store  0x00000004 , 0x00000524 
+ 00028247  0x00007382 increase  0xfffffffc , 0x0000000b 
+ 00028248  0x00007383 call  0x00006f2e 
+ 00028249  0x00007384 store  0x00000002 , 0x00000520 
+ 00028250  0x00007385 increase  0xfffffffe , 0x0000000b 
+ 00028251  0x00007386 call  0x00007028 
+ 00028252  0x00007387 branch  0x00006fc4 , 0x00000005 
+ 00028253  0x00007388 compare  0x00000005 , 0x00000011 , 0x000000ff 
+ 00028254  0x0000738a branch  0x00006e62 , 0x00000001 
+ 00028255  0x0000738c arg  0x0000052a , 0x00000005 
+ 00028256  0x0000738d force  0x00000000 , 0x00000007 
+ 00028257  0x0000738e branch  0x00006e71 
+ 00028258  0x00007390 ifetch  0x00000001 , 0x00000006 
+ 00028259  0x00007391 bne  0x0000000a , 0x00006fc4 
+ 00028260  0x00007392 ifetch  0x00000002 , 0x00000006 
+ 00028261  0x00007393 nbranch  0x00006e6f , 0x00000034 
+ 00028262  0x00007394 ifetch  0x00000001 , 0x00000006 
+ 00028263  0x00007395 bne  0x000000ff , 0x00006e6d 
+ 00028264  0x00007396 ifetch  0x00000001 , 0x00000006 
+ 00028265  0x00007397 bne  0x000000ff , 0x00006e6b 
+ 00028266  0x00007398 branch  0x00006eb8 
+ 00028267  0x0000739a increase  0xfffffffb , 0x00000006 
+ 00028268  0x0000739b branch  0x00006e5f 
+ 00028269  0x0000739d increase  0xfffffffc , 0x00000006 
+ 00028270  0x0000739e branch  0x00006e5f 
+ 00028271  0x000073a0 increase  0xfffffffd , 0x00000006 
+ 00028272  0x000073a1 branch  0x00006e5f 
+ 00028273  0x000073a3 ifetch  0x00000001 , 0x00000006 
+ 00028274  0x000073a4 beq  0x00000009 , 0x00006e86 
+ 00028275  0x000073a5 beq  0x0000000a , 0x00006e74 
+ 00028276  0x000073a7 ifetch  0x00000002 , 0x00000006 
+ 00028277  0x000073a8 istore  0x00000002 , 0x00000005 
+ 00028278  0x000073a9 increase  0x00000001 , 0x00000007 
+ 00028279  0x000073aa byteswap  0x0000003f , 0x00000012 
+ 00028280  0x000073ab ifetch  0x00000002 , 0x00000006 
+ 00028281  0x000073ac byteswap  0x0000003f , 0x0000003f 
+ 00028282  0x000073ae increase  0x00000001 , 0x00000012 
+ 00028283  0x000073af isub  0x00000012 , 0x0000003e 
+ 00028284  0x000073b0 nbranch  0x00006e83 , 0x00000002 
+ 00028285  0x000073b1 copy  0x0000003f , 0x00000013 
+ 00028286  0x000073b2 byteswap  0x00000012 , 0x0000003f 
+ 00028287  0x000073b3 istore  0x00000002 , 0x00000005 
+ 00028288  0x000073b4 increase  0x00000001 , 0x00000007 
+ 00028289  0x000073b5 copy  0x00000013 , 0x0000003f 
+ 00028290  0x000073b6 branch  0x00006e7a 
+ 00028291  0x000073b8 increase  0xfffffffb , 0x0000000b 
+ 00028292  0x000073b9 increase  0xfffffffb , 0x00000011 
+ 00028293  0x000073ba branch  0x00006e8b 
+ 00028294  0x000073bc ifetch  0x00000002 , 0x00000006 
+ 00028295  0x000073bd istore  0x00000002 , 0x00000005 
+ 00028296  0x000073be increase  0x00000001 , 0x00000007 
+ 00028297  0x000073bf increase  0xfffffffd , 0x0000000b 
+ 00028298  0x000073c0 increase  0xfffffffd , 0x00000011 
+ 00028299  0x000073c2 nbranch  0x00006fc4 , 0x00000002 
+ 00028300  0x000073c3 nbranch  0x00006e71 , 0x00000005 
+ 00028301  0x000073c4 increase  0xffffffff , 0x0000000b 
+ 00028302  0x000073c5 nbranch  0x00006fc4 , 0x00000005 
+ 00028303  0x000073c7 call  0x000052d0 
+ 00028304  0x000073c8 increase  0x0000000a , 0x00000005 
+ 00028305  0x000073c9 arg  0x0000052a , 0x00000011 
+ 00028306  0x000073cb copy  0x00000007 , 0x0000003f 
+ 00028307  0x000073cc branch  0x00006ea5 , 0x00000034 
+ 00028308  0x000073cd ifetch  0x00000002 , 0x00000011 
+ 00028309  0x000073ce branch  0x00006ea5 , 0x00000034 
+ 00028310  0x000073cf iforce  0x00000012 
+ 00028311  0x000073d0 fetch  0x00000004 , 0x00000524 
+ 00028312  0x000073d1 iforce  0x00000002 
+ 00028313  0x000073d2 call  0x000070e7 
+ 00028314  0x000073d3 copy  0x00000006 , 0x0000003f 
+ 00028315  0x000073d4 branch  0x00006ea2 , 0x00000034 
+ 00028316  0x000073d5 increase  0xfffffffd , 0x00000006 
+ 00028317  0x000073d6 ifetch  0x00000003 , 0x00000006 
+ 00028318  0x000073d7 istore  0x00000003 , 0x00000005 
+ 00028319  0x000073d8 call  0x0000705b 
+ 00028320  0x000073d9 iforce  0x00000039 
+ 00028321  0x000073da call  0x00007f01 
+ 00028322  0x000073dc increase  0x00000002 , 0x00000011 
+ 00028323  0x000073dd increase  0xffffffff , 0x00000007 
+ 00028324  0x000073de branch  0x00006e92 
+ 00028325  0x000073e1 arg  0x00000005 , 0x00000011 
+ 00028326  0x000073e2 call  0x00006f84 
+ 00028327  0x000073e3 fetch  0x00000002 , 0x00000275 
+ 00028328  0x000073e4 beq  0x0000000b , 0x00007043 
+ 00028329  0x000073e5 branch  0x00006f9a 
+ 00028330  0x000073e9 ifetch  0x00000001 , 0x00000006 
+ 00028331  0x000073ea beq  0x00000000 , 0x00006eae 
+ 00028332  0x000073eb beq  0x00000001 , 0x00006eb0 
+ 00028333  0x000073ec beq  0x00000002 , 0x00006eb3 
+ 00028334  0x000073ee increase  0xffffffff , 0x0000000b 
+ 00028335  0x000073ef branch  0x00006eb6 
+ 00028336  0x000073f1 ifetch  0x00000001 , 0x00000006 
+ 00028337  0x000073f2 increase  0xfffffffe , 0x0000000b 
+ 00028338  0x000073f3 branch  0x00006eb6 
+ 00028339  0x000073f5 ifetch  0x00000002 , 0x00000006 
+ 00028340  0x000073f6 byteswap  0x0000003f , 0x0000003f 
+ 00028341  0x000073f7 increase  0xfffffffd , 0x0000000b 
+ 00028342  0x000073f9 store  0x00000002 , 0x00000519 
+ 00028343  0x000073fa rtn 
+ 00028344  0x000073fd increase  0xfffffffb , 0x0000000b 
+ 00028345  0x000073fe call  0x00006eaa 
+ 00028346  0x000073ff nbranch  0x00006fbe , 0x00000005 
+ 00028347  0x00007400 fetcht  0x00000004 , 0x00000524 
+ 00028348  0x00007401 call  0x000070b1 
+ 00028349  0x00007402 nbranch  0x00006fbb , 0x00000005 
+ 00028350  0x00007403 copy  0x00000006 , 0x00000011 
+ 00028351  0x00007404 call  0x000052d0 
+ 00028352  0x00007405 copy  0x00000011 , 0x00000006 
+ 00028353  0x00007406 increase  0x00000003 , 0x00000005 
+ 00028354  0x00007407 copy  0x00000006 , 0x0000000b 
+ 00028355  0x00007408 call  0x00007062 
+ 00028356  0x00007409 copy  0x0000003f , 0x00000011 
+ 00028357  0x0000740b fetch  0x00000002 , 0x00000519 
+ 00028358  0x0000740c copy  0x0000003f , 0x00000012 
+ 00028359  0x0000740d copy  0x00000011 , 0x0000003f 
+ 00028360  0x0000740e isub  0x00000012 , 0x00000012 
+ 00028361  0x0000740f fetch  0x00000002 , 0x00000520 
+ 00028362  0x00007410 isub  0x00000012 , 0x0000003e 
+ 00028363  0x00007411 nbranch  0x00006ee7 , 0x00000002 
+ 00028364  0x00007413 disable  0x00000028 
+ 00028365  0x00007414 fetch  0x00000002 , 0x00000519 
+ 00028366  0x00007415 branch  0x00006eda , 0x00000034 
+ 00028367  0x00007416 iadd  0x0000000b , 0x00000006 
+ 00028368  0x00007417 increase  0x00000003 , 0x00000012 
+ 00028369  0x00007418 copy  0x00000012 , 0x00000039 
+ 00028370  0x00007419 copy  0x00000039 , 0x0000003f 
+ 00028371  0x0000741a increase  0x00000003 , 0x0000003f 
+ 00028372  0x0000741b byteswap  0x0000003f , 0x0000003f 
+ 00028373  0x0000741c istore  0x00000002 , 0x00000005 
+ 00028374  0x0000741d copy  0x00000039 , 0x0000003f 
+ 00028375  0x0000741e byteswap  0x0000003f , 0x0000003f 
+ 00028376  0x0000741f istore  0x00000002 , 0x00000005 
+ 00028377  0x00007420 branch  0x00006ef5 
+ 00028378  0x00007422 add  0x00000011 , 0x00000006 , 0x00000039 
+ 00028379  0x00007423 branch  0x00006ede , 0x00000028 
+ 00028380  0x00007424 byteswap  0x00000039 , 0x0000003f 
+ 00028381  0x00007425 branch  0x00006ee1 
+ 00028382  0x00007427 copy  0x00000039 , 0x0000003f 
+ 00028383  0x00007428 increase  0x00000002 , 0x0000003f 
+ 00028384  0x00007429 byteswap  0x0000003f , 0x0000003f 
+ 00028385  0x0000742b istore  0x00000002 , 0x00000005 
+ 00028386  0x0000742c increase  0xfffffffd , 0x00000039 
+ 00028387  0x0000742d byteswap  0x00000039 , 0x0000003f 
+ 00028388  0x0000742e istore  0x00000002 , 0x00000005 
+ 00028389  0x0000742f copy  0x0000000b , 0x00000006 
+ 00028390  0x00007430 branch  0x00006ef5 
+ 00028391  0x00007432 enable  0x00000028 
+ 00028392  0x00007434 fetch  0x00000002 , 0x00000520 
+ 00028393  0x00007435 copy  0x0000003f , 0x00000011 
+ 00028394  0x00007436 copy  0x00000011 , 0x00000039 
+ 00028395  0x00007437 fetch  0x00000002 , 0x00000519 
+ 00028396  0x00007438 branch  0x00006eda , 0x00000034 
+ 00028397  0x00007439 iadd  0x0000000b , 0x00000006 
+ 00028398  0x0000743a copy  0x00000011 , 0x0000003f 
+ 00028399  0x0000743b increase  0x00000005 , 0x0000003f 
+ 00028400  0x0000743c byteswap  0x0000003f , 0x0000003f 
+ 00028401  0x0000743d istore  0x00000002 , 0x00000005 
+ 00028402  0x0000743e copy  0x00000011 , 0x0000003f 
+ 00028403  0x0000743f byteswap  0x0000003f , 0x0000003f 
+ 00028404  0x00007440 istore  0x00000002 , 0x00000005 
+ 00028405  0x00007442 call  0x00007f01 
+ 00028406  0x00007443 nbranch  0x00006efe , 0x00000028 
+ 00028407  0x00007444 force  0x00000002 , 0x0000003f 
+ 00028408  0x00007445 istore  0x00000001 , 0x00000005 
+ 00028409  0x00007446 copy  0x00000006 , 0x0000003f 
+ 00028410  0x00007447 isub  0x0000000b , 0x0000003f 
+ 00028411  0x00007448 byteswap  0x0000003f , 0x0000003f 
+ 00028412  0x00007449 istore  0x00000002 , 0x00000005 
+ 00028413  0x0000744a branch  0x00006f00 
+ 00028414  0x0000744c force  0x00000000 , 0x0000003f 
+ 00028415  0x0000744d istore  0x00000001 , 0x00000005 
+ 00028416  0x0000744f arg  0x00000005 , 0x00000011 
+ 00028417  0x00007450 branch  0x00006fb0 
+ 00028418  0x0000745c bpatchx  0x000000d1 , 0x0000403a 
+ 00028419  0x0000745d call  0x00006fd0 
+ 00028420  0x0000745e compare  0x000000ff , 0x00000002 , 0x000000ff 
+ 00028421  0x0000745f branch  0x00006fc4 , 0x00000001 
+ 00028422  0x00007460 call  0x00006f2e 
+ 00028423  0x00007461 store  0x00000002 , 0x00000520 
+ 00028424  0x00007462 increase  0xfffffffe , 0x0000000b 
+ 00028425  0x00007463 call  0x00007028 
+ 00028426  0x00007464 arg  0x0000052a , 0x00000005 
+ 00028427  0x00007465 force  0x00000000 , 0x00000007 
+ 00028428  0x00007467 ifetch  0x00000001 , 0x00000006 
+ 00028429  0x00007468 beq  0x0000000a , 0x00006f36 
+ 00028430  0x00007469 ifetch  0x00000002 , 0x00000006 
+ 00028431  0x0000746a istore  0x00000002 , 0x00000005 
+ 00028432  0x0000746b increase  0x00000001 , 0x00000007 
+ 00028433  0x0000746c increase  0xfffffffd , 0x0000000b 
+ 00028434  0x0000746d increase  0xfffffffd , 0x00000011 
+ 00028435  0x0000746e nbranch  0x00006fc4 , 0x00000002 
+ 00028436  0x0000746f nbranch  0x00006f0c , 0x00000005 
+ 00028437  0x00007470 increase  0xffffffff , 0x0000000b 
+ 00028438  0x00007471 nbranch  0x00006fc4 , 0x00000005 
+ 00028439  0x00007472 call  0x000052d0 
+ 00028440  0x00007473 increase  0x0000000d , 0x00000005 
+ 00028441  0x00007474 fetch  0x00000002 , 0x00000511 
+ 00028442  0x00007475 iforce  0x00000013 
+ 00028443  0x00007476 arg  0x0000052a , 0x00000011 
+ 00028444  0x00007478 ifetch  0x00000002 , 0x00000011 
+ 00028445  0x00007479 branch  0x00006f29 , 0x00000034 
+ 00028446  0x0000747a iforce  0x00000012 
+ 00028447  0x0000747b call  0x000070c6 
+ 00028448  0x0000747c branch  0x00006f27 , 0x00000034 
+ 00028449  0x0000747d increase  0xfffffffd , 0x00000006 
+ 00028450  0x0000747e ifetch  0x00000003 , 0x00000006 
+ 00028451  0x0000747f istore  0x00000003 , 0x00000005 
+ 00028452  0x00007480 call  0x0000705b 
+ 00028453  0x00007481 iforce  0x00000039 
+ 00028454  0x00007482 call  0x00007f01 
+ 00028455  0x00007484 increase  0x00000002 , 0x00000011 
+ 00028456  0x00007485 branch  0x00006f1c 
+ 00028457  0x00007488 call  0x00006f83 
+ 00028458  0x00007489 fetch  0x00000002 , 0x00000275 
+ 00028459  0x0000748a beq  0x0000000e , 0x00007046 
+ 00028460  0x0000748b call  0x00006f9a 
+ 00028461  0x0000748c branch  0x00006f9a 
+ 00028462  0x00007490 ifetch  0x00000002 , 0x00000006 
+ 00028463  0x00007491 byteswap  0x0000003f , 0x0000003f 
+ 00028464  0x00007492 increase  0xfffffffd , 0x0000003f 
+ 00028465  0x00007493 arg  0x000000c8 , 0x00000002 
+ 00028466  0x00007494 isub  0x00000002 , 0x0000003e 
+ 00028467  0x00007495 nrtn  0x00000002 
+ 00028468  0x00007496 setarg  0x000000c8 
+ 00028469  0x00007497 rtn 
+ 00028470  0x0000749b increase  0x00000004 , 0x00000006 
+ 00028471  0x0000749c increase  0xfffffffb , 0x0000000b 
+ 00028472  0x0000749d increase  0xfffffffb , 0x00000011 
+ 00028473  0x0000749e nbranch  0x00006fc4 , 0x00000005 
+ 00028474  0x0000749f call  0x00006eaa 
+ 00028475  0x000074a0 nbranch  0x00006fbe , 0x00000005 
+ 00028476  0x000074a1 arg  0x00000511 , 0x0000000b 
+ 00028477  0x000074a2 call  0x00007082 
+ 00028478  0x000074a3 deposit  0x00000007 
+ 00028479  0x000074a4 branch  0x00007046 , 0x00000034 
+ 00028480  0x000074a5 store  0x00000001 , 0x0000054e 
+ 00028481  0x000074a7 copy  0x00000012 , 0x0000003f 
+ 00028482  0x000074a8 store  0x00000002 , 0x0000054c 
+ 00028483  0x000074a9 arg  0x00000000 , 0x00000007 
+ 00028484  0x000074aa arg  0x00000000 , 0x00000011 
+ 00028485  0x000074ab call  0x000052d0 
+ 00028486  0x000074ac increase  0x0000000a , 0x00000005 
+ 00028487  0x000074ae call  0x00006f6c 
+ 00028488  0x000074af nbranch  0x00002a8c , 0x00000028 
+ 00028489  0x000074b0 copy  0x00000006 , 0x0000000b 
+ 00028490  0x000074b1 copy  0x0000003f , 0x00000013 
+ 00028491  0x000074b2 iadd  0x00000011 , 0x00000011 
+ 00028492  0x000074b5 fetch  0x00000002 , 0x00000519 
+ 00028493  0x000074b6 copy  0x0000003f , 0x00000012 
+ 00028494  0x000074b7 branch  0x00006f75 , 0x00000034 
+ 00028495  0x000074b9 copy  0x00000011 , 0x0000003f 
+ 00028496  0x000074ba isub  0x00000012 , 0x00000012 
+ 00028497  0x000074bb branch  0x00006f67 , 0x00000005 
+ 00028498  0x000074bc nbranch  0x00006f67 , 0x00000002 
+ 00028499  0x000074bd fetch  0x00000002 , 0x00000520 
+ 00028500  0x000074be isub  0x00000012 , 0x0000003e 
+ 00028501  0x000074bf branch  0x00006f5e , 0x00000005 
+ 00028502  0x000074c0 nbranch  0x00006f5e , 0x00000002 
+ 00028503  0x000074c4 copy  0x00000012 , 0x00000039 
+ 00028504  0x000074c5 call  0x00006f61 
+ 00028505  0x000074c6 fetch  0x00000001 , 0x0000054e 
+ 00028506  0x000074c7 increase  0x00000001 , 0x00000007 
+ 00028507  0x000074c8 isub  0x00000007 , 0x0000003e 
+ 00028508  0x000074c9 branch  0x00006f83 , 0x00000005 
+ 00028509  0x000074ca branch  0x00006fa0 
+ 00028510  0x000074cd copy  0x0000003f , 0x00000039 
+ 00028511  0x000074ce call  0x00006f61 
+ 00028512  0x000074cf branch  0x00006fa0 
+ 00028513  0x000074d2 increase  0xfffffffd , 0x00000005 
+ 00028514  0x000074d3 copy  0x00000039 , 0x00000002 
+ 00028515  0x000074d4 copy  0x00000013 , 0x0000003f 
+ 00028516  0x000074d5 isub  0x00000012 , 0x0000003f 
+ 00028517  0x000074d6 iadd  0x0000000b , 0x00000006 
+ 00028518  0x000074d7 branch  0x00007f01 
+ 00028519  0x000074da fetch  0x00000001 , 0x0000054e 
+ 00028520  0x000074db increase  0x00000001 , 0x00000007 
+ 00028521  0x000074dc isub  0x00000007 , 0x0000003e 
+ 00028522  0x000074dd rtn  0x00000005 
+ 00028523  0x000074de branch  0x00006f47 
+ 00028524  0x000074e1 call  0x00007fe9 
+ 00028525  0x000074e2 arg  0x0000052a , 0x00000006 
+ 00028526  0x000074e3 lshift2  0x00000007 , 0x0000003f 
+ 00028527  0x000074e4 iadd  0x00000006 , 0x00000006 
+ 00028528  0x000074e5 ifetcht  0x00000004 , 0x00000006 
+ 00028529  0x000074e6 call  0x000070b1 
+ 00028530  0x000074e7 nrtn  0x00000005 
+ 00028531  0x000074e8 call  0x0000705b 
+ 00028532  0x000074e9 branch  0x00007fe7 
+ 00028533  0x000074ec fetch  0x00000002 , 0x00000520 
+ 00028534  0x000074ed isub  0x00000011 , 0x0000003e 
+ 00028535  0x000074ee nbranch  0x00006f8f , 0x00000002 
+ 00028536  0x000074ef copy  0x00000011 , 0x00000039 
+ 00028537  0x000074f0 copy  0x00000039 , 0x00000002 
+ 00028538  0x000074f1 copy  0x0000000b , 0x00000006 
+ 00028539  0x000074f2 call  0x00007f01 
+ 00028540  0x000074f3 fetch  0x00000002 , 0x0000054c 
+ 00028541  0x000074f4 isub  0x00000011 , 0x0000003e 
+ 00028542  0x000074f5 branch  0x00006f81 , 0x00000005 
+ 00028543  0x000074f7 call  0x00006fa0 
+ 00028544  0x000074f8 branch  0x00006f94 
+ 00028545  0x000074fb call  0x00006f83 
+ 00028546  0x000074fc branch  0x00006f94 
+ 00028547  0x000074ff arg  0x00000007 , 0x00000011 
+ 00028548  0x00007501 force  0x00000000 , 0x0000003f 
+ 00028549  0x00007502 istore  0x00000001 , 0x00000005 
+ 00028550  0x00007503 call  0x00006fb0 
+ 00028551  0x00007504 fetcht  0x00000002 , 0x00000275 
+ 00028552  0x00007505 increase  0xfffffffb , 0x00000002 
+ 00028553  0x00007506 byteswap  0x00000002 , 0x0000003f 
+ 00028554  0x00007507 istore  0x00000002 , 0x00000005 
+ 00028555  0x00007508 increase  0xfffffffd , 0x00000002 
+ 00028556  0x00007509 byteswap  0x00000002 , 0x0000003f 
+ 00028557  0x0000750a istore  0x00000002 , 0x00000005 
+ 00028558  0x0000750b rtn 
+ 00028559  0x0000750e copy  0x0000003f , 0x00000039 
+ 00028560  0x0000750f copy  0x00000039 , 0x00000002 
+ 00028561  0x00007510 copy  0x0000000b , 0x00000006 
+ 00028562  0x00007511 call  0x00007f01 
+ 00028563  0x00007512 call  0x00006fa0 
+ 00028564  0x00007514 setarg  0x00000036 
+ 00028565  0x00007515 istore  0x00000001 , 0x00000005 
+ 00028566  0x00007516 fetch  0x00000002 , 0x0000054c 
+ 00028567  0x00007517 byteswap  0x0000003f , 0x0000003f 
+ 00028568  0x00007518 istore  0x00000002 , 0x00000005 
+ 00028569  0x00007519 rtn 
+ 00028570  0x0000751c setarg  0x00000036 
+ 00028571  0x0000751d istore  0x00000001 , 0x00000005 
+ 00028572  0x0000751e increase  0xfffffffd , 0x00000002 
+ 00028573  0x0000751f byteswap  0x00000002 , 0x0000003f 
+ 00028574  0x00007520 istore  0x00000002 , 0x00000005 
+ 00028575  0x00007521 rtn 
+ 00028576  0x00007524 arg  0x00000007 , 0x00000011 
+ 00028577  0x00007525 setarg  0x00000002 
+ 00028578  0x00007526 istore  0x00000001 , 0x00000005 
+ 00028579  0x00007527 fetch  0x00000002 , 0x00000519 
+ 00028580  0x00007528 iadd  0x00000002 , 0x00000002 
+ 00028581  0x00007529 byteswap  0x00000002 , 0x0000003f 
+ 00028582  0x0000752a istore  0x00000002 , 0x00000005 
+ 00028583  0x0000752b call  0x00006fb0 
+ 00028584  0x0000752c fetcht  0x00000002 , 0x00000275 
+ 00028585  0x0000752d increase  0xfffffffb , 0x00000002 
+ 00028586  0x0000752e byteswap  0x00000002 , 0x0000003f 
+ 00028587  0x0000752f istore  0x00000002 , 0x00000005 
+ 00028588  0x00007530 increase  0xfffffffb , 0x00000002 
+ 00028589  0x00007531 byteswap  0x00000002 , 0x0000003f 
+ 00028590  0x00007532 istore  0x00000002 , 0x00000005 
+ 00028591  0x00007533 rtn 
+ 00028592  0x00007536 fetch  0x00000002 , 0x00000273 
+ 00028593  0x00007537 isub  0x00000005 , 0x0000003f 
+ 00028594  0x00007538 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00028595  0x00007539 store  0x00000002 , 0x00000275 
+ 00028596  0x0000753a call  0x000052d0 
+ 00028597  0x0000753b copy  0x00000011 , 0x0000003f 
+ 00028598  0x0000753c istore  0x00000001 , 0x00000005 
+ 00028599  0x0000753d fetch  0x00000002 , 0x0000051c 
+ 00028600  0x0000753e istore  0x00000002 , 0x00000005 
+ 00028601  0x0000753f rtn 
+ 00028602  0x00007550 rtn 
+ 00028603  0x00007572 setarg  0x00000200 
+ 00028604  0x00007573 store  0x00000002 , 0x0000054a 
+ 00028605  0x00007574 branch  0x00006fc6 
+ 00028606  0x00007576 setarg  0x00000400 
+ 00028607  0x00007577 store  0x00000002 , 0x0000054a 
+ 00028608  0x00007578 branch  0x00006fc6 
+ 00028609  0x0000757a setarg  0x00000600 
+ 00028610  0x0000757b store  0x00000002 , 0x0000054a 
+ 00028611  0x0000757c branch  0x00006fc6 
+ 00028612  0x0000757e setarg  0x00000300 
+ 00028613  0x0000757f store  0x00000002 , 0x0000054a 
+ 00028614  0x00007581 call  0x000052d0 
+ 00028615  0x00007582 istore  0x00000001 , 0x00000005 
+ 00028616  0x00007583 fetch  0x00000002 , 0x0000051c 
+ 00028617  0x00007584 istore  0x00000002 , 0x00000005 
+ 00028618  0x00007585 setarg  0x00000200 
+ 00028619  0x00007586 istore  0x00000002 , 0x00000005 
+ 00028620  0x00007587 fetch  0x00000002 , 0x0000054a 
+ 00028621  0x00007588 istore  0x00000002 , 0x00000005 
+ 00028622  0x00007589 jam  0x00000007 , 0x00000275 
+ 00028623  0x0000758a rtn 
+ 00028624  0x00007590 arg  0x00000000 , 0x00000012 
+ 00028625  0x00007591 force  0x00000000 , 0x00000002 
+ 00028626  0x00007592 arg  0x00000511 , 0x00000005 
+ 00028627  0x00007593 call  0x00007028 
+ 00028628  0x00007594 branch  0x00007026 , 0x00000005 
+ 00028629  0x00007596 increase  0x00000001 , 0x00000012 
+ 00028630  0x00007597 ifetch  0x00000001 , 0x00000006 
+ 00028631  0x00007598 increase  0xffffffff , 0x00000011 
+ 00028632  0x00007599 increase  0xffffffff , 0x0000000b 
+ 00028633  0x0000759a compare  0x00000018 , 0x0000003f , 0x000000f8 
+ 00028634  0x0000759b nbranch  0x00007026 , 0x00000001 
+ 00028635  0x0000759c compare  0x00000004 , 0x0000003f , 0x00000007 
+ 00028636  0x0000759d nbranch  0x00006ff3 , 0x00000001 
+ 00028637  0x0000759e force  0x00000001 , 0x00000002 
+ 00028638  0x000075a0 ifetch  0x00000001 , 0x00000006 
+ 00028639  0x000075a1 increase  0xffffffff , 0x00000011 
+ 00028640  0x000075a2 increase  0xffffffff , 0x0000000b 
+ 00028641  0x000075a3 bne  0x00000000 , 0x00006fe7 
+ 00028642  0x000075a4 ifetch  0x00000001 , 0x00000006 
+ 00028643  0x000075a5 increase  0xffffffff , 0x00000011 
+ 00028644  0x000075a6 increase  0xffffffff , 0x0000000b 
+ 00028645  0x000075a7 beq  0x00000000 , 0x00006ff8 
+ 00028646  0x000075a8 branch  0x00006fea 
+ 00028647  0x000075aa increase  0x00000001 , 0x00000006 
+ 00028648  0x000075ab increase  0xffffffff , 0x00000011 
+ 00028649  0x000075ac increase  0xffffffff , 0x0000000b 
+ 00028650  0x000075ae increase  0x00000002 , 0x00000006 
+ 00028651  0x000075af increase  0xfffffffe , 0x00000011 
+ 00028652  0x000075b0 increase  0xfffffffe , 0x0000000b 
+ 00028653  0x000075b1 compare  0x00000000 , 0x00000002 , 0x000000ff 
+ 00028654  0x000075b2 branch  0x00007020 , 0x00000001 
+ 00028655  0x000075b3 increase  0x0000000c , 0x00000006 
+ 00028656  0x000075b4 increase  0xfffffff4 , 0x00000011 
+ 00028657  0x000075b5 increase  0xfffffff4 , 0x0000000b 
+ 00028658  0x000075b6 branch  0x00007020 
+ 00028659  0x000075b8 compare  0x00000002 , 0x0000003f , 0x00000007 
+ 00028660  0x000075b9 nbranch  0x00006ff6 , 0x00000001 
+ 00028661  0x000075ba branch  0x00006fde 
+ 00028662  0x000075bc compare  0x00000001 , 0x0000003f , 0x00000007 
+ 00028663  0x000075bd nbranch  0x00007026 , 0x00000001 
+ 00028664  0x000075bf increase  0xfffffffe , 0x00000011 
+ 00028665  0x000075c0 increase  0xfffffffe , 0x0000000b 
+ 00028666  0x000075c1 ifetch  0x00000002 , 0x00000006 
+ 00028667  0x000075c2 sub  0x00000012 , 0x00000004 , 0x0000003e 
+ 00028668  0x000075c3 branch  0x00006ffe , 0x00000005 
+ 00028669  0x000075c4 istore  0x00000002 , 0x00000005 
+ 00028670  0x000075c6 compare  0x00000000 , 0x00000002 , 0x000000ff 
+ 00028671  0x000075c7 branch  0x00007020 , 0x00000001 
+ 00028672  0x000075c8 copy  0x00000006 , 0x00000002 
+ 00028673  0x000075c9 ifetch  0x00000001 , 0x00000006 
+ 00028674  0x000075ca bne  0x00000000 , 0x00007019 
+ 00028675  0x000075cb ifetch  0x00000001 , 0x00000006 
+ 00028676  0x000075cc bne  0x00000000 , 0x00007019 
+ 00028677  0x000075cd ifetch  0x00000001 , 0x00000006 
+ 00028678  0x000075ce bne  0x00000010 , 0x00007019 
+ 00028679  0x000075cf ifetch  0x00000001 , 0x00000006 
+ 00028680  0x000075d0 bne  0x00000000 , 0x00007019 
+ 00028681  0x000075d1 ifetch  0x00000001 , 0x00000006 
+ 00028682  0x000075d2 bne  0x00000080 , 0x00007019 
+ 00028683  0x000075d3 ifetch  0x00000001 , 0x00000006 
+ 00028684  0x000075d4 bne  0x00000000 , 0x00007019 
+ 00028685  0x000075d5 ifetch  0x00000001 , 0x00000006 
+ 00028686  0x000075d6 bne  0x00000000 , 0x00007019 
+ 00028687  0x000075d7 ifetch  0x00000001 , 0x00000006 
+ 00028688  0x000075d8 bne  0x00000080 , 0x00007019 
+ 00028689  0x000075d9 ifetch  0x00000001 , 0x00000006 
+ 00028690  0x000075da bne  0x0000005f , 0x00007019 
+ 00028691  0x000075db ifetch  0x00000001 , 0x00000006 
+ 00028692  0x000075dc bne  0x0000009b , 0x00007019 
+ 00028693  0x000075dd ifetch  0x00000001 , 0x00000006 
+ 00028694  0x000075de bne  0x00000034 , 0x00007019 
+ 00028695  0x000075df ifetch  0x00000001 , 0x00000006 
+ 00028696  0x000075e0 beq  0x000000fb , 0x0000701e 
+ 00028697  0x000075e2 copy  0x00000002 , 0x00000006 
+ 00028698  0x000075e4 increase  0x0000000c , 0x00000006 
+ 00028699  0x000075e5 force  0x00000000 , 0x00000007 
+ 00028700  0x000075e6 force  0x00000000 , 0x00000002 
+ 00028701  0x000075e7 branch  0x0000701e 
+ 00028702  0x000075ea increase  0xfffffff4 , 0x0000000b 
+ 00028703  0x000075eb increase  0xfffffff4 , 0x00000011 
+ 00028704  0x000075ed force  0x00000000 , 0x00000002 
+ 00028705  0x000075ee compare  0x00000000 , 0x00000011 , 0x000000ff 
+ 00028706  0x000075ef nbranch  0x00006fd5 , 0x00000001 
+ 00028707  0x000075f0 force  0x00000000 , 0x0000003f 
+ 00028708  0x000075f1 istore  0x00000002 , 0x00000005 
+ 00028709  0x000075f2 rtn 
+ 00028710  0x000075f4 arg  0x000000ff , 0x00000002 
+ 00028711  0x000075f5 rtn 
+ 00028712  0x00007600 bpatchx  0x000000d4 , 0x0000403a 
+ 00028713  0x00007601 ifetch  0x00000001 , 0x00000006 
+ 00028714  0x00007602 increase  0xffffffff , 0x0000000b 
+ 00028715  0x00007603 compare  0x00000030 , 0x0000003f , 0x000000f8 
+ 00028716  0x00007604 nbranch  0x0000703e , 0x00000001 
+ 00028717  0x00007605 compare  0x00000007 , 0x0000003f , 0x00000007 
+ 00028718  0x00007606 branch  0x00007037 , 0x00000001 
+ 00028719  0x00007607 compare  0x00000006 , 0x0000003f , 0x00000007 
+ 00028720  0x00007608 branch  0x00007039 , 0x00000001 
+ 00028721  0x00007609 compare  0x00000005 , 0x0000003f , 0x00000007 
+ 00028722  0x0000760a nbranch  0x0000703e , 0x00000001 
+ 00028723  0x0000760c ifetch  0x00000001 , 0x00000006 
+ 00028724  0x0000760d copy  0x0000003f , 0x00000011 
+ 00028725  0x0000760e increase  0xffffffff , 0x0000000b 
+ 00028726  0x0000760f branch  0x0000703c 
+ 00028727  0x00007611 increase  0x00000002 , 0x00000006 
+ 00028728  0x00007612 increase  0xfffffffe , 0x0000000b 
+ 00028729  0x00007614 ifetch  0x00000002 , 0x00000006 
+ 00028730  0x00007615 byteswap  0x0000003f , 0x00000011 
+ 00028731  0x00007616 increase  0xfffffffe , 0x0000000b 
+ 00028732  0x00007618 force  0x00000001 , 0x0000003f 
+ 00028733  0x00007619 rtn 
+ 00028734  0x0000761b force  0x00000000 , 0x0000003f 
+ 00028735  0x0000761c rtn 
+ 00028736  0x00007627 setarg  0x00000003 
+ 00028737  0x00007628 store  0x00000001 , 0x0000051b 
+ 00028738  0x00007629 branch  0x00007048 
+ 00028739  0x0000762b setarg  0x00000005 
+ 00028740  0x0000762c store  0x00000001 , 0x0000051b 
+ 00028741  0x0000762d branch  0x00007048 
+ 00028742  0x0000762f setarg  0x00000007 
+ 00028743  0x00007630 store  0x00000001 , 0x0000051b 
+ 00028744  0x00007632 call  0x000052d0 
+ 00028745  0x00007635 fetch  0x00000001 , 0x0000051b 
+ 00028746  0x00007636 copy  0x0000003f , 0x00000012 
+ 00028747  0x00007637 istore  0x00000001 , 0x00000005 
+ 00028748  0x00007638 fetch  0x00000002 , 0x0000051c 
+ 00028749  0x00007639 istore  0x00000002 , 0x00000005 
+ 00028750  0x0000763a setarg  0x00000500 
+ 00028751  0x0000763b istore  0x00000002 , 0x00000005 
+ 00028752  0x0000763c compare  0x00000005 , 0x00000012 , 0x000000ff 
+ 00028753  0x0000763d branch  0x00007057 , 0x00000001 
+ 00028754  0x0000763e compare  0x00000007 , 0x00000012 , 0x000000ff 
+ 00028755  0x0000763f branch  0x00007057 , 0x00000001 
+ 00028756  0x00007640 setarg  0x00000000 
+ 00028757  0x00007641 istore  0x00000005 , 0x00000005 
+ 00028758  0x00007642 branch  0x00007059 
+ 00028759  0x00007645 setarg  0x00350200 
+ 00028760  0x00007646 istore  0x00000005 , 0x00000005 
+ 00028761  0x00007648 jam  0x0000000a , 0x00000275 
+ 00028762  0x00007649 rtn 
+ 00028763  0x0000764d call  0x00007ea2 
+ 00028764  0x0000764e call  0x00007ea5 
+ 00028765  0x0000764f call  0x00007062 
+ 00028766  0x00007650 call  0x00007e9c 
+ 00028767  0x00007651 call  0x00007e9f 
+ 00028768  0x00007652 copy  0x00000002 , 0x0000003f 
+ 00028769  0x00007653 rtn 
+ 00028770  0x00007657 ifetch  0x00000001 , 0x00000006 
+ 00028771  0x00007658 and  0x0000003f , 0x00000007 , 0x00000039 
+ 00028772  0x00007659 rshift3  0x0000003f , 0x0000003f 
+ 00028773  0x0000765a bne  0x00000000 , 0x0000706c 
+ 00028774  0x0000765c force  0x00000001 , 0x0000003f 
+ 00028775  0x0000765d force  0x00000001 , 0x00000002 
+ 00028776  0x0000765e rtn 
+ 00028777  0x00007661 call  0x00007e76 
+ 00028778  0x00007662 add  0x0000003f , 0x00000001 , 0x00000002 
+ 00028779  0x00007663 rtn 
+ 00028780  0x00007665 deposit  0x00000039 
+ 00028781  0x00007666 sub  0x0000003f , 0x00000004 , 0x0000003e 
+ 00028782  0x00007667 branch  0x00007069 , 0x00000002 
+ 00028783  0x00007668 beq  0x00000005 , 0x00007073 
+ 00028784  0x00007669 beq  0x00000006 , 0x00007076 
+ 00028785  0x0000766a beq  0x00000007 , 0x0000707a 
+ 00028786  0x0000766b rtn 
+ 00028787  0x0000766e ifetch  0x00000001 , 0x00000006 
+ 00028788  0x0000766f add  0x0000003f , 0x00000002 , 0x00000002 
+ 00028789  0x00007670 rtn 
+ 00028790  0x00007672 ifetch  0x00000002 , 0x00000006 
+ 00028791  0x00007673 byteswap  0x0000003f , 0x0000003f 
+ 00028792  0x00007674 add  0x0000003f , 0x00000003 , 0x00000002 
+ 00028793  0x00007675 rtn 
+ 00028794  0x00007677 ifetch  0x00000002 , 0x00000006 
+ 00028795  0x00007678 byteswap  0x0000003f , 0x0000003f 
+ 00028796  0x00007679 ifetcht  0x00000002 , 0x00000006 
+ 00028797  0x0000767a byteswap  0x00000002 , 0x00000002 
+ 00028798  0x0000767b lshift16  0x00000002 , 0x00000002 
+ 00028799  0x0000767c iadd  0x00000002 , 0x0000003f 
+ 00028800  0x0000767d add  0x0000003f , 0x00000005 , 0x00000002 
+ 00028801  0x0000767e rtn 
+ 00028802  0x00007685 bpatchx  0x000000d5 , 0x0000403a 
+ 00028803  0x00007686 force  0x00000000 , 0x00000007 
+ 00028804  0x00007687 arg  0x00000000 , 0x00000012 
+ 00028805  0x00007688 arg  0x0000052a , 0x00000005 
+ 00028806  0x0000768a ifetch  0x00000002 , 0x0000000b 
+ 00028807  0x0000768b rtn  0x00000034 
+ 00028808  0x0000768c call  0x0000708d 
+ 00028809  0x0000768d copy  0x00000007 , 0x0000003f 
+ 00028810  0x0000768e rtneq  0x00000007 
+ 00028811  0x0000768f increase  0x00000002 , 0x0000000b 
+ 00028812  0x00007690 branch  0x00007086 
+ 00028813  0x00007694 iforce  0x00000013 
+ 00028814  0x00007696 fetch  0x00000002 , 0x00004575 
+ 00028815  0x00007697 iforce  0x00000006 
+ 00028816  0x00007699 copy  0x00000007 , 0x0000003f 
+ 00028817  0x0000769a rtneq  0x00000007 
+ 00028818  0x0000769b disable  0x00000028 
+ 00028819  0x0000769c ifetch  0x00000001 , 0x00000006 
+ 00028820  0x0000769d rtn  0x00000034 
+ 00028821  0x0000769e iforce  0x00000039 
+ 00028822  0x000076a0 ifetch  0x00000002 , 0x00000006 
+ 00028823  0x000076a1 isub  0x00000013 , 0x0000003e 
+ 00028824  0x000076a2 nbranch  0x0000709a , 0x00000005 
+ 00028825  0x000076a3 enable  0x00000028 
+ 00028826  0x000076a5 loop  0x00007096 
+ 00028827  0x000076a6 ifetcht  0x00000004 , 0x00000006 
+ 00028828  0x000076a7 copy  0x00000006 , 0x00000011 
+ 00028829  0x000076a8 nbranch  0x000070ad , 0x00000028 
+ 00028830  0x000076a9 arg  0x0000052a , 0x00000006 
+ 00028831  0x000076aa arg  0x00000007 , 0x00000039 
+ 00028832  0x000076ac ifetch  0x00000004 , 0x00000006 
+ 00028833  0x000076ad branch  0x000070a6 , 0x00000034 
+ 00028834  0x000076ae isub  0x00000002 , 0x0000003e 
+ 00028835  0x000076af branch  0x000070ad , 0x00000005 
+ 00028836  0x000076b0 loop  0x000070a0 
+ 00028837  0x000076b1 rtn 
+ 00028838  0x000076b3 istoret  0x00000004 , 0x00000005 
+ 00028839  0x000076b4 increase  0x00000001 , 0x00000007 
+ 00028840  0x000076b5 copy  0x00000011 , 0x00000006 
+ 00028841  0x000076b6 call  0x0000705b 
+ 00028842  0x000076b7 iadd  0x00000012 , 0x00000012 
+ 00028843  0x000076b8 iadd  0x00000006 , 0x00000006 
+ 00028844  0x000076b9 branch  0x00007090 
+ 00028845  0x000076bb copy  0x00000011 , 0x00000006 
+ 00028846  0x000076bc call  0x00007062 
+ 00028847  0x000076bd iadd  0x00000006 , 0x00000006 
+ 00028848  0x000076be branch  0x00007090 
+ 00028849  0x000076c5 bpatchx  0x000000d6 , 0x0000403a 
+ 00028850  0x000076c6 fetch  0x00000002 , 0x00004575 
+ 00028851  0x000076c7 iforce  0x00000006 
+ 00028852  0x000076c9 ifetch  0x00000001 , 0x00000006 
+ 00028853  0x000076ca branch  0x00007fe3 , 0x00000034 
+ 00028854  0x000076cb lshift  0x0000003f , 0x0000003f 
+ 00028855  0x000076cc iadd  0x00000006 , 0x00000006 
+ 00028856  0x000076cd ifetch  0x00000004 , 0x00000006 
+ 00028857  0x000076ce isub  0x00000002 , 0x0000003e 
+ 00028858  0x000076cf rtn  0x00000005 
+ 00028859  0x000076d0 deposit  0x00000005 
+ 00028860  0x000076d1 store  0x00000002 , 0x00000abb 
+ 00028861  0x000076d2 storet  0x00000008 , 0x00000aa2 
+ 00028862  0x000076d3 call  0x00007062 
+ 00028863  0x000076d4 iadd  0x00000006 , 0x00000006 
+ 00028864  0x000076d5 copy  0x00000006 , 0x0000003f 
+ 00028865  0x000076d6 fetcht  0x00000002 , 0x00000abb 
+ 00028866  0x000076d7 copy  0x00000002 , 0x00000005 
+ 00028867  0x000076d8 fetcht  0x00000008 , 0x00000aa2 
+ 00028868  0x000076d9 copy  0x0000003f , 0x00000006 
+ 00028869  0x000076da branch  0x000070b4 
+ 00028870  0x000076e1 bpatchx  0x000000d7 , 0x0000403a 
+ 00028871  0x000076e2 fetch  0x00000002 , 0x00004575 
+ 00028872  0x000076e3 iforce  0x00000006 
+ 00028873  0x000076e5 ifetch  0x00000001 , 0x00000006 
+ 00028874  0x000076e6 branch  0x000070e4 , 0x00000034 
+ 00028875  0x000076e7 iforce  0x00000039 
+ 00028876  0x000076e9 ifetch  0x00000002 , 0x00000006 
+ 00028877  0x000076ea isub  0x00000013 , 0x0000003e 
+ 00028878  0x000076eb branch  0x000070d4 , 0x00000005 
+ 00028879  0x000076ec loop  0x000070cc 
+ 00028880  0x000076ed increase  0x00000004 , 0x00000006 
+ 00028881  0x000076ee call  0x00007062 
+ 00028882  0x000076ef iadd  0x00000006 , 0x00000006 
+ 00028883  0x000076f0 branch  0x000070c9 
+ 00028884  0x000076f2 increase  0xffffffff , 0x00000039 
+ 00028885  0x000076f3 lshift  0x00000039 , 0x0000003f 
+ 00028886  0x000076f4 iadd  0x00000006 , 0x00000006 
+ 00028887  0x000076f5 increase  0x00000004 , 0x00000006 
+ 00028888  0x000076f6 call  0x00007062 
+ 00028889  0x000076f7 iadd  0x00000006 , 0x0000000b 
+ 00028890  0x000076f9 increase  0x00000001 , 0x00000006 
+ 00028891  0x000076fa ifetch  0x00000002 , 0x00000006 
+ 00028892  0x000076fb isub  0x00000012 , 0x0000003e 
+ 00028893  0x000076ff branch  0x00007fef , 0x00000005 
+ 00028894  0x00007700 call  0x0000705b 
+ 00028895  0x00007701 iadd  0x00000006 , 0x00000006 
+ 00028896  0x00007702 deposit  0x0000000b 
+ 00028897  0x00007703 isub  0x00000006 , 0x0000003e 
+ 00028898  0x00007704 branch  0x000070e4 , 0x00000005 
+ 00028899  0x00007705 branch  0x000070da 
+ 00028900  0x00007707 force  0x00000000 , 0x00000006 
+ 00028901  0x00007708 force  0x00000000 , 0x0000003f 
+ 00028902  0x00007709 rtn 
+ 00028903  0x00007710 bpatchx  0x000000d8 , 0x0000403b 
+ 00028904  0x00007711 fetch  0x00000002 , 0x00004575 
+ 00028905  0x00007712 iforce  0x00000006 
+ 00028906  0x00007714 ifetch  0x00000001 , 0x00000006 
+ 00028907  0x00007715 branch  0x00007100 , 0x00000034 
+ 00028908  0x00007716 lshift  0x0000003f , 0x0000003f 
+ 00028909  0x00007717 iadd  0x00000006 , 0x00000006 
+ 00028910  0x00007718 ifetch  0x00000004 , 0x00000006 
+ 00028911  0x00007719 isub  0x00000002 , 0x0000003e 
+ 00028912  0x0000771a branch  0x000070f4 , 0x00000005 
+ 00028913  0x0000771b call  0x00007062 
+ 00028914  0x0000771c iadd  0x00000006 , 0x00000006 
+ 00028915  0x0000771d branch  0x000070ea 
+ 00028916  0x0000771f call  0x00007062 
+ 00028917  0x00007720 iadd  0x00000006 , 0x0000000b 
+ 00028918  0x00007722 increase  0x00000001 , 0x00000006 
+ 00028919  0x00007723 ifetch  0x00000002 , 0x00000006 
+ 00028920  0x00007724 isub  0x00000012 , 0x0000003e 
+ 00028921  0x00007725 rtn  0x00000005 
+ 00028922  0x00007726 call  0x0000705b 
+ 00028923  0x00007727 iadd  0x00000006 , 0x00000006 
+ 00028924  0x00007728 deposit  0x0000000b 
+ 00028925  0x00007729 isub  0x00000006 , 0x0000003e 
+ 00028926  0x0000772a branch  0x00007100 , 0x00000005 
+ 00028927  0x0000772b branch  0x000070f6 
+ 00028928  0x0000772d force  0x00000000 , 0x00000006 
+ 00028929  0x0000772e rtn 
+ 00028930  0x00007733 arg  0x00000400 , 0x00000012 
+ 00028931  0x00007734 call  0x000070f4 
+ 00028932  0x00007735 arg  0x00000300 , 0x00000012 
+ 00028933  0x00007736 call  0x0000710d 
+ 00028934  0x00007737 nrtn  0x00000028 
+ 00028935  0x00007738 sub  0x00000011 , 0x00000003 , 0x0000003e 
+ 00028936  0x00007739 branch  0x00007fe9 , 0x00000002 
+ 00028937  0x0000773a ifetch  0x00000001 , 0x00000006 
+ 00028938  0x0000773b bne  0x00000008 , 0x00007fe9 
+ 00028939  0x0000773c ifetch  0x00000001 , 0x00000006 
+ 00028940  0x0000773d rtn 
+ 00028941  0x00007743 bpatchx  0x000000d9 , 0x0000403b 
+ 00028942  0x00007744 call  0x00007062 
+ 00028943  0x00007745 copy  0x0000003f , 0x00000011 
+ 00028944  0x00007747 ifetch  0x00000001 , 0x00000006 
+ 00028945  0x00007748 and  0x0000003f , 0x00000007 , 0x00000039 
+ 00028946  0x00007749 rshift3  0x0000003f , 0x0000003f 
+ 00028947  0x0000774a sub  0x0000003f , 0x00000003 , 0x0000003e 
+ 00028948  0x0000774b branch  0x00007129 , 0x00000005 
+ 00028949  0x0000774c copy  0x00000039 , 0x0000003f 
+ 00028950  0x0000774d beq  0x00000005 , 0x00007120 
+ 00028951  0x0000774e beq  0x00000006 , 0x00007123 
+ 00028952  0x0000774f beq  0x00000007 , 0x00007126 
+ 00028953  0x00007750 increase  0xffffffff , 0x00000006 
+ 00028954  0x00007751 call  0x00007062 
+ 00028955  0x00007752 iadd  0x00000006 , 0x00000006 
+ 00028956  0x00007753 copy  0x00000011 , 0x0000003f 
+ 00028957  0x00007754 isub  0x00000002 , 0x00000011 
+ 00028958  0x00007755 branch  0x00007fe9 , 0x00000005 
+ 00028959  0x00007756 branch  0x00007110 
+ 00028960  0x00007759 increase  0xfffffffe , 0x00000011 
+ 00028961  0x0000775a increase  0x00000001 , 0x00000006 
+ 00028962  0x0000775b branch  0x00007110 
+ 00028963  0x0000775d increase  0xfffffffd , 0x00000011 
+ 00028964  0x0000775e increase  0x00000002 , 0x00000006 
+ 00028965  0x0000775f branch  0x00007110 
+ 00028966  0x00007761 increase  0xfffffffb , 0x00000011 
+ 00028967  0x00007762 increase  0x00000004 , 0x00000006 
+ 00028968  0x00007763 branch  0x00007110 
+ 00028969  0x00007766 increase  0xffffffff , 0x00000011 
+ 00028970  0x00007767 copy  0x00000039 , 0x0000003f 
+ 00028971  0x00007768 beq  0x00000001 , 0x00007132 
+ 00028972  0x00007769 beq  0x00000002 , 0x00007130 
+ 00028973  0x0000776a beq  0x00000004 , 0x0000712f 
+ 00028974  0x0000776b branch  0x00007fe9 
+ 00028975  0x0000776d increase  0xfffffff4 , 0x00000011 
+ 00028976  0x0000776f ifetch  0x00000002 , 0x00000006 
+ 00028977  0x00007770 increase  0xfffffffe , 0x00000011 
+ 00028978  0x00007772 ifetch  0x00000002 , 0x00000006 
+ 00028979  0x00007773 isub  0x00000012 , 0x0000003e 
+ 00028980  0x00007774 branch  0x00007fe7 , 0x00000005 
+ 00028981  0x00007775 increase  0xfffffffe , 0x00000011 
+ 00028982  0x00007776 branch  0x00007fe9 , 0x00000005 
+ 00028983  0x00007777 branch  0x00007110 
+ 00028984  0x000077b3 call  0x000052d0 
+ 00028985  0x000077b4 copy  0x0000003f , 0x00000005 
+ 00028986  0x000077b5 setarg  0x00000006 
+ 00028987  0x000077b6 istore  0x00000001 , 0x00000005 
+ 00028988  0x000077b7 setarg  0x0000006e 
+ 00028989  0x000077b8 istore  0x00000002 , 0x00000005 
+ 00028990  0x000077b9 setarg  0x00000f00 
+ 00028991  0x000077ba istore  0x00000002 , 0x00000005 
+ 00028992  0x000077bb setarg  0x001a0535 
+ 00028993  0x000077bc istore  0x00000003 , 0x00000005 
+ 00028994  0x000077bd setarg  0x00000111 
+ 00028995  0x000077be lshift16  0x0000003f , 0x0000003f 
+ 00028996  0x000077bf istore  0x00000004 , 0x00000005 
+ 00028997  0x000077c0 setarg  0x00002600 
+ 00028998  0x000077c1 istore  0x00000002 , 0x00000005 
+ 00028999  0x000077c2 setarg  0x00000335 
+ 00029000  0x000077c3 istore  0x00000002 , 0x00000005 
+ 00029001  0x000077c4 setarg  0x00000009 
+ 00029002  0x000077c5 istore  0x00000002 , 0x00000005 
+ 00029003  0x000077c6 setarg  0x00000004 
+ 00029004  0x000077c7 istore  0x00000002 , 0x00000005 
+ 00029005  0x000077c8 jam  0x00000014 , 0x00000275 
+ 00029006  0x000077c9 rtn 
+ 00029007  0x000077ce bpatchx  0x000000da , 0x0000403b 
+ 00029008  0x000077cf jam  0x00000050 , 0x000005e5 
+ 00029009  0x000077d0 arg  0x000005e6 , 0x00000005 
+ 00029010  0x000077d1 arg  0x0000443a , 0x00000006 
+ 00029011  0x000077d2 call  0x00007ebf 
+ 00029012  0x000077d3 arg  0x000045d2 , 0x00000006 
+ 00029013  0x000077d4 call  0x00007ebd 
+ 00029014  0x000077d5 arg  0x000009be , 0x00000006 
+ 00029015  0x000077d6 call  0x00007ebd 
+ 00029016  0x000077d7 call  0x0000720a 
+ 00029017  0x000077d8 arg  0x0000042f , 0x00000006 
+ 00029018  0x000077d9 call  0x00007205 
+ 00029019  0x000077da call  0x000071d0 
+ 00029020  0x000077dc arg  0x00000af2 , 0x00000005 
+ 00029021  0x000077dd call  0x00007201 
+ 00029022  0x000077de setarg  0x000f4240 
+ 00029023  0x000077df copy  0x0000003f , 0x00000011 
+ 00029024  0x000077e0 fetch  0x00000004 , 0x00000af2 
+ 00029025  0x000077e1 idiv  0x00000011 
+ 00029026  0x000077e2 call  0x00007f86 
+ 00029027  0x000077e3 remainder  0x0000003f 
+ 00029028  0x000077e4 store  0x00000004 , 0x000009ba 
+ 00029029  0x000077e6 rtn 
+ 00029030  0x000077e9 jam  0x00000041 , 0x000005e5 
+ 00029031  0x000077ea arg  0x000005e6 , 0x00000005 
+ 00029032  0x000077eb call  0x000071b5 
+ 00029033  0x000077ec call  0x000071b0 
+ 00029034  0x000077ed fetch  0x00000003 , 0x00004454 
+ 00029035  0x000077ee istore  0x00000003 , 0x00000005 
+ 00029036  0x000077f1 call  0x00007176 
+ 00029037  0x000077f3 arg  0x0000042f , 0x00000006 
+ 00029038  0x000077f4 call  0x00007ebf 
+ 00029039  0x000077f5 arg  0x0000443a , 0x00000006 
+ 00029040  0x000077f6 call  0x00007ebf 
+ 00029041  0x000077f7 call  0x0000720a 
+ 00029042  0x000077f8 arg  0x00000b12 , 0x00000006 
+ 00029043  0x000077f9 arg  0x00000ac2 , 0x00000005 
+ 00029044  0x000077fa call  0x00007ebf 
+ 00029045  0x000077fc branch  0x000071d0 
+ 00029046  0x00007801 fetch  0x00000004 , 0x000044c7 
+ 00029047  0x00007802 istore  0x00000004 , 0x00000005 
+ 00029048  0x00007803 call  0x00007ecd 
+ 00029049  0x00007804 branch  0x00007eca 
+ 00029050  0x00007807 bpatchx  0x000000db , 0x0000403b 
+ 00029051  0x00007808 jam  0x00000041 , 0x000005e5 
+ 00029052  0x00007809 arg  0x000005e6 , 0x00000005 
+ 00029053  0x0000780a call  0x000071b0 
+ 00029054  0x0000780b call  0x000071b5 
+ 00029055  0x0000780c fetch  0x00000003 , 0x0000444d 
+ 00029056  0x0000780d istore  0x00000003 , 0x00000005 
+ 00029057  0x00007810 call  0x00007176 
+ 00029058  0x00007811 arg  0x0000443a , 0x00000006 
+ 00029059  0x00007812 call  0x00007ebf 
+ 00029060  0x00007813 arg  0x0000042f , 0x00000006 
+ 00029061  0x00007814 call  0x00007ebf 
+ 00029062  0x00007815 call  0x0000720a 
+ 00029063  0x00007816 arg  0x00000b12 , 0x00000006 
+ 00029064  0x00007817 arg  0x00000ac2 , 0x00000005 
+ 00029065  0x00007818 call  0x00007ebf 
+ 00029066  0x0000781a call  0x000071d0 
+ 00029067  0x0000781b arg  0x00000af2 , 0x00000005 
+ 00029068  0x0000781c branch  0x00007201 
+ 00029069  0x0000781f jam  0x00000020 , 0x000005e5 
+ 00029070  0x00007820 arg  0x000009fe , 0x00000006 
+ 00029071  0x00007821 arg  0x000005e6 , 0x00000005 
+ 00029072  0x00007822 call  0x00007ebd 
+ 00029073  0x00007823 call  0x0000720a 
+ 00029074  0x00007824 arg  0x0000099e , 0x00000006 
+ 00029075  0x00007825 call  0x00007205 
+ 00029076  0x00007826 call  0x000071d0 
+ 00029077  0x00007827 arg  0x00000ac2 , 0x00000005 
+ 00029078  0x00007828 call  0x00007497 
+ 00029079  0x00007829 arg  0x00000001 , 0x00000002 
+ 00029080  0x0000782a call  0x0000719f 
+ 00029081  0x0000782b arg  0x00004419 , 0x00000005 
+ 00029082  0x0000782c call  0x00007201 
+ 00029083  0x0000782d arg  0x00000000 , 0x00000002 
+ 00029084  0x0000782e call  0x0000719f 
+ 00029085  0x0000782f arg  0x00000b12 , 0x00000005 
+ 00029086  0x00007831 branch  0x00007497 
+ 00029087  0x00007835 bpatchx  0x000000dc , 0x0000403b 
+ 00029088  0x00007836 jam  0x00000035 , 0x000005e5 
+ 00029089  0x00007837 setarg  0x00000100 
+ 00029090  0x00007838 store  0x00000002 , 0x000005e6 
+ 00029091  0x00007839 call  0x000071b0 
+ 00029092  0x0000783a call  0x000071b5 
+ 00029093  0x0000783b arg  0x0000443a , 0x00000006 
+ 00029094  0x0000783c call  0x00007ebf 
+ 00029095  0x0000783d arg  0x0000042f , 0x00000006 
+ 00029096  0x0000783e call  0x00007ebf 
+ 00029097  0x00007840 setarg  0x00006c65 
+ 00029098  0x00007841 istore  0x00000002 , 0x00000005 
+ 00029099  0x00007842 setarg  0x00006274 
+ 00029100  0x00007843 istore  0x00000002 , 0x00000005 
+ 00029101  0x00007844 istoret  0x00000001 , 0x00000005 
+ 00029102  0x00007845 call  0x0000720a 
+ 00029103  0x00007846 branch  0x000071d0 
+ 00029104  0x00007849 fetch  0x00000006 , 0x000044a0 
+ 00029105  0x0000784a istore  0x00000006 , 0x00000005 
+ 00029106  0x0000784b fetch  0x00000001 , 0x00004495 
+ 00029107  0x0000784c istore  0x00000001 , 0x00000005 
+ 00029108  0x0000784d rtn 
+ 00029109  0x00007850 fetch  0x00000006 , 0x0000044f 
+ 00029110  0x00007851 istore  0x00000006 , 0x00000005 
+ 00029111  0x00007856 fetch  0x00000001 , 0x0000448e 
+ 00029112  0x00007857 istore  0x00000001 , 0x00000005 
+ 00029113  0x00007858 rtn 
+ 00029114  0x0000785b jam  0x00000041 , 0x000005e5 
+ 00029115  0x0000785c fetch  0x00000001 , 0x00004664 
+ 00029116  0x0000785d store  0x00000001 , 0x000005e6 
+ 00029117  0x0000785e arg  0x000045d2 , 0x00000006 
+ 00029118  0x0000785f call  0x00007ebd 
+ 00029119  0x00007860 arg  0x000009be , 0x00000006 
+ 00029120  0x00007861 call  0x00007ebd 
+ 00029121  0x00007862 call  0x0000720a 
+ 00029122  0x00007863 arg  0x0000042f , 0x00000006 
+ 00029123  0x00007864 call  0x00007205 
+ 00029124  0x00007865 branch  0x000071d0 
+ 00029125  0x00007869 jam  0x00000041 , 0x000005e5 
+ 00029126  0x0000786a fetch  0x00000001 , 0x00004664 
+ 00029127  0x0000786b store  0x00000001 , 0x000005e6 
+ 00029128  0x0000786c arg  0x000009be , 0x00000006 
+ 00029129  0x0000786d call  0x00007ebd 
+ 00029130  0x0000786e arg  0x000045d2 , 0x00000006 
+ 00029131  0x0000786f call  0x00007ebd 
+ 00029132  0x00007870 call  0x0000720a 
+ 00029133  0x00007871 arg  0x0000443a , 0x00000006 
+ 00029134  0x00007872 call  0x00007205 
+ 00029135  0x00007873 branch  0x000071d0 
+ 00029136  0x00007876 bpatchx  0x000000dd , 0x0000403b 
+ 00029137  0x00007877 call  0x0000721f 
+ 00029138  0x0000787b fetch  0x00000001 , 0x000005e5 
+ 00029139  0x0000787c copy  0x0000003f , 0x00000002 
+ 00029140  0x0000787e increase  0x0000000f , 0x0000003f 
+ 00029141  0x0000787f rshift4  0x0000003f , 0x0000003f 
+ 00029142  0x00007880 copy  0x0000003f , 0x00000012 
+ 00029143  0x00007881 branch  0x000071e2 , 0x00000034 
+ 00029144  0x00007882 and  0x00000002 , 0x0000000f , 0x0000003f 
+ 00029145  0x00007883 nbranch  0x000071e5 , 0x00000034 
+ 00029146  0x00007885 arg  0x00000ad2 , 0x00000013 
+ 00029147  0x00007886 arg  0x000005e6 , 0x0000003f 
+ 00029148  0x00007887 increase  0xfffffff0 , 0x0000003f 
+ 00029149  0x0000788a iadd  0x00000002 , 0x00000011 
+ 00029150  0x0000788b arg  0x00000b02 , 0x00000005 
+ 00029151  0x0000788c arg  0x00000004 , 0x00000039 
+ 00029152  0x0000788d call  0x00007edd 
+ 00029153  0x00007891 branch  0x000071f0 
+ 00029154  0x00007894 arg  0x00000001 , 0x00000012 
+ 00029155  0x00007895 arg  0x00000000 , 0x00000011 
+ 00029156  0x00007897 branch  0x000071e6 
+ 00029157  0x0000789c and  0x00000002 , 0x0000000f , 0x00000011 
+ 00029158  0x0000789e arg  0x000005e6 , 0x0000003f 
+ 00029159  0x0000789f iadd  0x00000002 , 0x0000003f 
+ 00029160  0x000078a0 isub  0x00000011 , 0x00000006 
+ 00029161  0x000078a2 arg  0x00000af2 , 0x00000005 
+ 00029162  0x000078a3 call  0x00007245 
+ 00029163  0x000078a5 arg  0x00000ae2 , 0x00000013 
+ 00029164  0x000078a6 arg  0x00000af2 , 0x00000011 
+ 00029165  0x000078a7 arg  0x00000b02 , 0x00000005 
+ 00029166  0x000078a8 arg  0x00000004 , 0x00000039 
+ 00029167  0x000078a9 call  0x00007edd 
+ 00029168  0x000078b5 call  0x00007491 
+ 00029169  0x000078b6 call  0x00007428 
+ 00029170  0x000078b9 arg  0x000005e6 , 0x00000006 
+ 00029171  0x000078bc increase  0xffffffff , 0x00000012 
+ 00029172  0x000078bd deposit  0x00000012 
+ 00029173  0x000078be branch  0x000071f9 , 0x00000034 
+ 00029174  0x000078bf call  0x00007486 
+ 00029175  0x000078c0 call  0x00007422 
+ 00029176  0x000078c1 branch  0x000071f3 
+ 00029177  0x000078c4 arg  0x00000af2 , 0x00000005 
+ 00029178  0x000078c5 call  0x00007497 
+ 00029179  0x000078c6 arg  0x00000b02 , 0x00000006 
+ 00029180  0x000078c7 call  0x00007486 
+ 00029181  0x000078c8 call  0x00007428 
+ 00029182  0x000078c9 arg  0x00000af2 , 0x00000006 
+ 00029183  0x000078ca call  0x00007486 
+ 00029184  0x000078cb branch  0x00007422 
+ 00029185  0x000078d1 copy  0x00000005 , 0x00000011 
+ 00029186  0x000078d2 call  0x00007497 
+ 00029187  0x000078d4 arg  0x00000010 , 0x00000039 
+ 00029188  0x000078d5 branch  0x00007ee5 
+ 00029189  0x000078d8 arg  0x00000ac2 , 0x00000005 
+ 00029190  0x000078d9 call  0x00007ebf 
+ 00029191  0x000078db arg  0x00000010 , 0x00000039 
+ 00029192  0x000078dc arg  0x00000ac2 , 0x00000011 
+ 00029193  0x000078dd branch  0x00007ee5 
+ 00029194  0x000078e0 fetch  0x00000001 , 0x000005e5 
+ 00029195  0x000078e1 copy  0x0000003f , 0x00000039 
+ 00029196  0x000078e2 arg  0x000005e6 , 0x00000011 
+ 00029197  0x000078e3 branch  0x00007ee5 
+ 00029198  0x000078e6 ifetch  0x00000001 , 0x00000011 
+ 00029199  0x000078e7 lshift  0x0000003f , 0x0000003f 
+ 00029200  0x000078e8 isolate1  0x00000000 , 0x00000013 
+ 00029201  0x000078e9 setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00029202  0x000078ea isolate1  0x00000008 , 0x0000003f 
+ 00029203  0x000078eb setflag  0x00000001 , 0x00000000 , 0x00000013 
+ 00029204  0x000078ec istore  0x00000001 , 0x00000011 
+ 00029205  0x000078ed increase  0xffffffff , 0x00000011 
+ 00029206  0x000078ee loop  0x0000720e 
+ 00029207  0x000078ef rtn 
+ 00029208  0x000078f2 arg  0x00000ad2 , 0x00000011 
+ 00029209  0x000078f4 increase  0x0000000f , 0x00000011 
+ 00029210  0x000078f5 force  0x00000010 , 0x00000039 
+ 00029211  0x000078f6 force  0x00000000 , 0x00000013 
+ 00029212  0x000078f7 branch  0x0000720e 
+ 00029213  0x000078fa arg  0x00000ae2 , 0x00000011 
+ 00029214  0x000078fb branch  0x00007219 
+ 00029215  0x000078ff arg  0x00000ac2 , 0x00000006 
+ 00029216  0x00007900 call  0x00007484 
+ 00029217  0x00007903 force  0x00000008 , 0x00000038 
+ 00029218  0x00007904 call  0x00007492 
+ 00029219  0x00007905 call  0x00007491 
+ 00029220  0x00007906 call  0x0000741f 
+ 00029221  0x0000790b arg  0x00000ad2 , 0x00000005 
+ 00029222  0x0000790c call  0x00007497 
+ 00029223  0x0000790e bpatchx  0x000000de , 0x0000403b 
+ 00029224  0x0000790f fetch  0x00000001 , 0x00000ad2 
+ 00029225  0x00007910 isolate1  0x00000007 , 0x0000003f 
+ 00029226  0x00007911 nbranch  0x00007230 , 0x00000001 
+ 00029227  0x00007912 call  0x00007218 
+ 00029228  0x00007915 arg  0x00000ad2 , 0x00000013 
+ 00029229  0x00007917 arg  0x00000ad2 , 0x00000005 
+ 00029230  0x0000791a call  0x0000723a 
+ 00029231  0x0000791b branch  0x00007231 
+ 00029232  0x0000791d call  0x00007218 
+ 00029233  0x00007920 arg  0x00000ad2 , 0x00000006 
+ 00029234  0x00007921 arg  0x00000ae2 , 0x00000005 
+ 00029235  0x00007922 call  0x00007ebf 
+ 00029236  0x00007923 fetch  0x00000001 , 0x00000ae2 
+ 00029237  0x00007924 isolate1  0x00000007 , 0x0000003f 
+ 00029238  0x00007925 nbranch  0x0000721d , 0x00000001 
+ 00029239  0x00007926 call  0x0000721d 
+ 00029240  0x00007928 arg  0x00000ae2 , 0x00000013 
+ 00029241  0x0000792a arg  0x00000ae2 , 0x00000005 
+ 00029242  0x00007931 arg  0x00000003 , 0x00000039 
+ 00029243  0x00007933 arg  0x00000000 , 0x00000002 
+ 00029244  0x00007934 call  0x00007241 
+ 00029245  0x00007935 increase  0x00000004 , 0x00000013 
+ 00029246  0x00007936 loop  0x0000723b 
+ 00029247  0x00007937 arg  0x00008700 , 0x00000002 
+ 00029248  0x00007938 lshift16  0x00000002 , 0x00000002 
+ 00029249  0x0000793a ifetch  0x00000004 , 0x00000013 
+ 00029250  0x0000793b ixor  0x00000002 , 0x0000003f 
+ 00029251  0x0000793c istore  0x00000004 , 0x00000005 
+ 00029252  0x0000793d rtn 
+ 00029253  0x00007944 bpatchx  0x000000df , 0x0000403b 
+ 00029254  0x00007945 arg  0x00000010 , 0x00000039 
+ 00029255  0x00007946 arg  0x00000000 , 0x0000003f 
+ 00029256  0x00007948 isub  0x00000011 , 0x0000003e 
+ 00029257  0x00007949 branch  0x00007250 , 0x00000005 
+ 00029258  0x0000794a branch  0x00007253 , 0x00000002 
+ 00029259  0x0000794b ifetcht  0x00000001 , 0x00000006 
+ 00029260  0x0000794c istoret  0x00000001 , 0x00000005 
+ 00029261  0x0000794e increase  0x00000001 , 0x0000003f 
+ 00029262  0x0000794f loop  0x00007248 
+ 00029263  0x00007950 rtn 
+ 00029264  0x00007952 arg  0x00000080 , 0x00000002 
+ 00029265  0x00007954 istoret  0x00000001 , 0x00000005 
+ 00029266  0x00007955 branch  0x0000724d 
+ 00029267  0x00007958 arg  0x00000000 , 0x00000002 
+ 00029268  0x00007959 branch  0x00007251 
+ 00029269  0x0000795d call  0x00007268 
+ 00029270  0x0000795e arg  0x00000592 , 0x00000006 
+ 00029271  0x0000795f arg  0x00000582 , 0x00000005 
+ 00029272  0x00007960 branch  0x00007ebf 
+ 00029273  0x00007964 disable  0x00000028 
+ 00029274  0x00007965 call  0x0000735f 
+ 00029275  0x00007966 arg  0x00000562 , 0x00000006 
+ 00029276  0x00007967 arg  0x000005a2 , 0x00000005 
+ 00029277  0x00007968 force  0x0000000f , 0x00000039 
+ 00029278  0x00007969 call  0x00007f01 
+ 00029279  0x0000796a ifetch  0x00000001 , 0x00000006 
+ 00029280  0x0000796b xor_into  0x00000006 , 0x0000003f 
+ 00029281  0x0000796c istore  0x00000001 , 0x00000005 
+ 00029282  0x0000796d setarg  0x000005b2 
+ 00029283  0x0000796e store  0x00000002 , 0x000005d6 
+ 00029284  0x0000796f setarg  0x000005a2 
+ 00029285  0x00007970 store  0x00000002 , 0x000005d4 
+ 00029286  0x00007971 set1  0x00000012 , 0x00000000 
+ 00029287  0x00007972 branch  0x000072a8 
+ 00029288  0x00007977 fetcht  0x00000001 , 0x00004689 
+ 00029289  0x00007978 force  0x00000010 , 0x00000012 
+ 00029290  0x00007979 add  0x00000002 , 0x00000006 , 0x00000013 
+ 00029291  0x0000797a sub  0x00000013 , 0x00000010 , 0x0000003e 
+ 00029292  0x0000797b branch  0x0000726e , 0x00000002 
+ 00029293  0x0000797c force  0x00000010 , 0x00000013 
+ 00029294  0x0000797e arg  0x000005a2 , 0x00000005 
+ 00029295  0x00007980 arg  0x0000468a , 0x00000006 
+ 00029296  0x00007981 copy  0x00000002 , 0x00000039 
+ 00029297  0x00007982 disable  0x00000028 
+ 00029298  0x00007984 ifetch  0x00000001 , 0x00000006 
+ 00029299  0x00007985 istore  0x00000001 , 0x00000005 
+ 00029300  0x00007986 increase  0xffffffff , 0x00000012 
+ 00029301  0x00007987 branch  0x0000727c , 0x00000005 
+ 00029302  0x00007988 loop  0x00007272 
+ 00029303  0x00007989 branch  0x0000726f , 0x00000028 
+ 00029304  0x0000798a enable  0x00000028 
+ 00029305  0x0000798b force  0x00000006 , 0x00000039 
+ 00029306  0x0000798c copy  0x00000011 , 0x00000006 
+ 00029307  0x0000798d branch  0x00007272 
+ 00029308  0x0000798f arg  0x00000562 , 0x00000006 
+ 00029309  0x00007990 arg  0x000005b2 , 0x00000005 
+ 00029310  0x00007991 call  0x00007ebf 
+ 00029311  0x00007992 fetch  0x00000001 , 0x000005c1 
+ 00029312  0x00007993 ixor  0x00000013 , 0x0000003f 
+ 00029313  0x00007994 store  0x00000001 , 0x000005c1 
+ 00029314  0x00007995 setarg  0x000005b2 
+ 00029315  0x00007996 store  0x00000002 , 0x000005d6 
+ 00029316  0x00007997 setarg  0x000005a2 
+ 00029317  0x00007998 store  0x00000002 , 0x000005d4 
+ 00029318  0x00007999 set1  0x00000012 , 0x00000000 
+ 00029319  0x0000799a branch  0x000072a8 
+ 00029320  0x000079a0 disable  0x00000028 
+ 00029321  0x000079a1 call  0x0000735f 
+ 00029322  0x000079a2 branch  0x00007292 
+ 00029323  0x000079a5 arg  0x00000056 , 0x00000011 
+ 00029324  0x000079a6 enable  0x00000028 
+ 00029325  0x000079a7 call  0x0000735f 
+ 00029326  0x000079a8 call  0x00007292 
+ 00029327  0x000079a9 arg  0x00000592 , 0x00000006 
+ 00029328  0x000079aa arg  0x00000062 , 0x00000005 
+ 00029329  0x000079ab branch  0x00007ebf 
+ 00029330  0x000079af setarg  0x00000562 
+ 00029331  0x000079b0 store  0x00000002 , 0x000005d6 
+ 00029332  0x000079b1 setarg  0x000041be 
+ 00029333  0x000079b2 store  0x00000002 , 0x000005d4 
+ 00029334  0x000079b3 set0  0x00000012 , 0x00000000 
+ 00029335  0x000079b4 call  0x000072a8 
+ 00029336  0x000079b5 arg  0x00000592 , 0x00000011 
+ 00029337  0x000079b6 arg  0x00000562 , 0x00000012 
+ 00029338  0x000079b7 arg  0x000005a2 , 0x00000005 
+ 00029339  0x000079b8 call  0x00007352 
+ 00029340  0x000079b9 arg  0x000005a2 , 0x00000011 
+ 00029341  0x000079ba arg  0x000005b2 , 0x00000012 
+ 00029342  0x000079bb copy  0x00000012 , 0x00000005 
+ 00029343  0x000079bc enable  0x00000028 
+ 00029344  0x000079bd call  0x00007350 
+ 00029345  0x000079be call  0x0000736a 
+ 00029346  0x000079bf setarg  0x000005b2 
+ 00029347  0x000079c0 store  0x00000002 , 0x000005d6 
+ 00029348  0x000079c1 setarg  0x000005a2 
+ 00029349  0x000079c2 store  0x00000002 , 0x000005d4 
+ 00029350  0x000079c3 set1  0x00000012 , 0x00000000 
+ 00029351  0x000079c4 branch  0x000072a8 
+ 00029352  0x000079c9 jam  0x00000000 , 0x000005d8 
+ 00029353  0x000079ca fetch  0x00000002 , 0x000005d4 
+ 00029354  0x000079cb iforce  0x00000006 
+ 00029355  0x000079cc arg  0x000005c2 , 0x00000005 
+ 00029356  0x000079cd call  0x00007ebf 
+ 00029357  0x000079ce fetch  0x00000002 , 0x000005d6 
+ 00029358  0x000079cf iforce  0x00000006 
+ 00029359  0x000079d0 arg  0x00000592 , 0x00000005 
+ 00029360  0x000079d1 call  0x00007ebf 
+ 00029361  0x000079d4 call  0x000072cf 
+ 00029362  0x000079d5 disable  0x00000028 
+ 00029363  0x000079d6 bmark0  0x00000012 , 0x000072b9 
+ 00029364  0x000079d7 fetch  0x00000001 , 0x000005d8 
+ 00029365  0x000079d8 bne  0x00000004 , 0x000072b9 
+ 00029366  0x000079d9 fetch  0x00000002 , 0x000005d6 
+ 00029367  0x000079da iforce  0x00000012 
+ 00029368  0x000079db call  0x00007301 
+ 00029369  0x000079dd call  0x00007300 
+ 00029370  0x000079de call  0x00007313 
+ 00029371  0x000079df fetch  0x00000001 , 0x000005d8 
+ 00029372  0x000079e0 increase  0x00000001 , 0x0000003f 
+ 00029373  0x000079e1 store  0x00000001 , 0x000005d8 
+ 00029374  0x000079e3 call  0x000072cf 
+ 00029375  0x000079e4 enable  0x00000028 
+ 00029376  0x000079e5 call  0x00007300 
+ 00029377  0x000079e6 call  0x00007322 
+ 00029378  0x000079e7 call  0x00007331 
+ 00029379  0x000079e8 call  0x00007322 
+ 00029380  0x000079e9 call  0x00007331 
+ 00029381  0x000079ea call  0x00007322 
+ 00029382  0x000079eb call  0x00007331 
+ 00029383  0x000079ec call  0x00007322 
+ 00029384  0x000079ed fetch  0x00000001 , 0x000005d8 
+ 00029385  0x000079ee increase  0x00000001 , 0x0000003f 
+ 00029386  0x000079ef store  0x00000001 , 0x000005d8 
+ 00029387  0x000079f0 bne  0x00000010 , 0x000072b1 
+ 00029388  0x000079f1 call  0x000072cf 
+ 00029389  0x000079f2 disable  0x00000028 
+ 00029390  0x000079f3 branch  0x00007300 
+ 00029391  0x000079f8 fetch  0x00000001 , 0x000005d8 
+ 00029392  0x000079f9 arg  0x000005c2 , 0x00000006 
+ 00029393  0x000079fa branch  0x000072f6 , 0x00000034 
+ 00029394  0x000079fb iforce  0x00000012 
+ 00029395  0x000079fc force  0x00000011 , 0x00000039 
+ 00029396  0x000079fd copy  0x00000006 , 0x00000005 
+ 00029397  0x000079ff ifetch  0x00000001 , 0x00000006 
+ 00029398  0x00007a00 lshift3  0x0000003f , 0x00000002 
+ 00029399  0x00007a01 rshift2  0x0000003f , 0x0000003f 
+ 00029400  0x00007a02 rshift3  0x0000003f , 0x0000003f 
+ 00029401  0x00007a03 ior  0x00000002 , 0x0000003f 
+ 00029402  0x00007a04 istore  0x00000001 , 0x00000005 
+ 00029403  0x00007a05 loop  0x000072d5 
+ 00029404  0x00007a06 setarg  0x000005c2 
+ 00029405  0x00007a07 iadd  0x00000012 , 0x00000006 
+ 00029406  0x00007a08 force  0x00000010 , 0x00000039 
+ 00029407  0x00007a09 arg  0x00000572 , 0x00000005 
+ 00029408  0x00007a0b ifetch  0x00000001 , 0x00000006 
+ 00029409  0x00007a0c istore  0x00000001 , 0x00000005 
+ 00029410  0x00007a0d compare  0x000005d3 , 0x00000006 , 0x000000ff 
+ 00029411  0x00007a0e nbranch  0x000072e5 , 0x00000001 
+ 00029412  0x00007a0f increase  0xffffffef , 0x00000006 
+ 00029413  0x00007a11 loop  0x000072e0 
+ 00029414  0x00007a12 force  0x00000000 , 0x00000011 
+ 00029415  0x00007a13 add  0x00000012 , 0xffffffff , 0x00000013 
+ 00029416  0x00007a14 lshift2  0x00000013 , 0x00000013 
+ 00029417  0x00007a15 lshift2  0x00000013 , 0x00000013 
+ 00029418  0x00007a16 call  0x000074b9 
+ 00029419  0x00007a17 setarg  0x00008400 
+ 00029420  0x00007a18 iadd  0x00000013 , 0x00000013 
+ 00029421  0x00007a19 arg  0x00000572 , 0x00000005 
+ 00029422  0x00007a1a force  0x00000010 , 0x00000039 
+ 00029423  0x00007a1c ifetcht  0x00000001 , 0x00000013 
+ 00029424  0x00007a1d ifetch  0x00000001 , 0x00000005 
+ 00029425  0x00007a1e iadd  0x00000002 , 0x0000003f 
+ 00029426  0x00007a1f istore  0x00000001 , 0x00000005 
+ 00029427  0x00007a20 increase  0x00000001 , 0x00000013 
+ 00029428  0x00007a21 loop  0x000072ef 
+ 00029429  0x00007a22 branch  0x000074bd 
+ 00029430  0x00007a25 force  0x00000010 , 0x00000039 
+ 00029431  0x00007a26 force  0x00000000 , 0x00000002 
+ 00029432  0x00007a28 ifetch  0x00000001 , 0x00000006 
+ 00029433  0x00007a29 ixor  0x00000002 , 0x00000002 
+ 00029434  0x00007a2a loop  0x000072f8 
+ 00029435  0x00007a2b deposit  0x00000002 
+ 00029436  0x00007a2c istore  0x00000001 , 0x00000006 
+ 00029437  0x00007a2d arg  0x000005c2 , 0x00000006 
+ 00029438  0x00007a2e arg  0x00000572 , 0x00000005 
+ 00029439  0x00007a2f branch  0x00007ebf 
+ 00029440  0x00007a32 arg  0x00000572 , 0x00000012 
+ 00029441  0x00007a34 force  0x00000010 , 0x00000039 
+ 00029442  0x00007a35 arg  0x00000592 , 0x00000011 
+ 00029443  0x00007a36 copy  0x00000011 , 0x00000005 
+ 00029444  0x00007a38 ifetcht  0x00000001 , 0x00000011 
+ 00029445  0x00007a39 ifetch  0x00000001 , 0x00000012 
+ 00029446  0x00007a3a ixor  0x00000002 , 0x00000030 
+ 00029447  0x00007a3b and  0x00000039 , 0x00000003 , 0x00000013 
+ 00029448  0x00007a3c nbranch  0x0000730a , 0x00000028 
+ 00029449  0x00007a3d xor_into  0x00000003 , 0x00000013 
+ 00029450  0x00007a3f sub  0x00000013 , 0x00000001 , 0x00000013 
+ 00029451  0x00007a40 branch  0x0000730d , 0x00000002 
+ 00029452  0x00007a41 iadd  0x00000002 , 0x00000030 
+ 00029453  0x00007a43 deposit  0x00000030 
+ 00029454  0x00007a44 istore  0x00000001 , 0x00000005 
+ 00029455  0x00007a45 increase  0x00000001 , 0x00000011 
+ 00029456  0x00007a46 increase  0x00000001 , 0x00000012 
+ 00029457  0x00007a47 loop  0x00007304 
+ 00029458  0x00007a48 rtn 
+ 00029459  0x00007a4b call  0x000074b9 
+ 00029460  0x00007a4c force  0x00000010 , 0x00000039 
+ 00029461  0x00007a4d arg  0x00000592 , 0x00000011 
+ 00029462  0x00007a4f ifetch  0x00000001 , 0x00000011 
+ 00029463  0x00007a50 arg  0x00008500 , 0x00000006 
+ 00029464  0x00007a51 and  0x00000039 , 0x00000003 , 0x00000013 
+ 00029465  0x00007a52 sub  0x00000013 , 0x00000001 , 0x0000003e 
+ 00029466  0x00007a53 branch  0x0000731c , 0x00000002 
+ 00029467  0x00007a54 arg  0x00008600 , 0x00000006 
+ 00029468  0x00007a56 iadd  0x00000006 , 0x00000006 
+ 00029469  0x00007a57 ifetch  0x00000001 , 0x00000006 
+ 00029470  0x00007a58 istore  0x00000001 , 0x00000011 
+ 00029471  0x00007a59 increase  0x00000001 , 0x00000011 
+ 00029472  0x00007a5a loop  0x00007316 
+ 00029473  0x00007a5b branch  0x000074bd 
+ 00029474  0x00007a5e force  0x00000008 , 0x00000039 
+ 00029475  0x00007a5f arg  0x00000592 , 0x00000006 
+ 00029476  0x00007a60 copy  0x00000006 , 0x00000005 
+ 00029477  0x00007a62 ifetch  0x00000001 , 0x00000006 
+ 00029478  0x00007a63 iforce  0x00000011 
+ 00029479  0x00007a64 ifetch  0x00000001 , 0x00000006 
+ 00029480  0x00007a65 iforce  0x00000012 
+ 00029481  0x00007a66 lshift  0x00000011 , 0x0000003f 
+ 00029482  0x00007a67 iadd  0x00000012 , 0x0000003f 
+ 00029483  0x00007a68 istore  0x00000001 , 0x00000005 
+ 00029484  0x00007a69 deposit  0x00000011 
+ 00029485  0x00007a6a iadd  0x00000012 , 0x0000003f 
+ 00029486  0x00007a6b istore  0x00000001 , 0x00000005 
+ 00029487  0x00007a6c loop  0x00007325 
+ 00029488  0x00007a6d rtn 
+ 00029489  0x00007a71 setarg  0x008ae42c 
+ 00029490  0x00007a72 iforce  0x00000002 
+ 00029491  0x00007a73 force  0x00000007 , 0x00000039 
+ 00029492  0x00007a74 call  0x00007340 
+ 00029493  0x00007a75 setarg  0x000d751b 
+ 00029494  0x00007a76 iforce  0x00000002 
+ 00029495  0x00007a77 force  0x00000005 , 0x00000039 
+ 00029496  0x00007a78 call  0x00007340 
+ 00029497  0x00007a79 fetch  0x00000001 , 0x000005a1 
+ 00029498  0x00007a7a iforce  0x00000011 
+ 00029499  0x00007a7b fetch  0x00000001 , 0x00000595 
+ 00029500  0x00007a7c store  0x00000001 , 0x000005a1 
+ 00029501  0x00007a7d deposit  0x00000011 
+ 00029502  0x00007a7e store  0x00000001 , 0x00000595 
+ 00029503  0x00007a7f rtn 
+ 00029504  0x00007a82 and  0x00000002 , 0x0000000f , 0x00000012 
+ 00029505  0x00007a84 and  0x00000002 , 0x0000000f , 0x0000003f 
+ 00029506  0x00007a85 arg  0x00000592 , 0x00000005 
+ 00029507  0x00007a86 iadd  0x00000005 , 0x00000005 
+ 00029508  0x00007a87 ifetch  0x00000001 , 0x00000005 
+ 00029509  0x00007a88 iforce  0x00000013 
+ 00029510  0x00007a89 deposit  0x00000011 
+ 00029511  0x00007a8a istore  0x00000001 , 0x00000005 
+ 00029512  0x00007a8b copy  0x00000013 , 0x00000011 
+ 00029513  0x00007a8c rshift4  0x00000002 , 0x00000002 
+ 00029514  0x00007a8d loop  0x00007341 
+ 00029515  0x00007a8e setarg  0x00000592 
+ 00029516  0x00007a8f iadd  0x00000012 , 0x00000005 
+ 00029517  0x00007a90 deposit  0x00000011 
+ 00029518  0x00007a91 istore  0x00000001 , 0x00000005 
+ 00029519  0x00007a92 rtn 
+ 00029520  0x00007a95 enable  0x00000028 
+ 00029521  0x00007a96 branch  0x00007353 
+ 00029522  0x00007a99 disable  0x00000028 
+ 00029523  0x00007a9b force  0x00000010 , 0x00000039 
+ 00029524  0x00007a9d ifetcht  0x00000001 , 0x00000011 
+ 00029525  0x00007a9e ifetch  0x00000001 , 0x00000012 
+ 00029526  0x00007a9f branch  0x00007359 , 0x00000028 
+ 00029527  0x00007aa0 ixor  0x00000002 , 0x0000003f 
+ 00029528  0x00007aa1 branch  0x0000735a 
+ 00029529  0x00007aa3 iadd  0x00000002 , 0x0000003f 
+ 00029530  0x00007aa5 istore  0x00000001 , 0x00000005 
+ 00029531  0x00007aa6 increase  0x00000001 , 0x00000011 
+ 00029532  0x00007aa7 increase  0x00000001 , 0x00000012 
+ 00029533  0x00007aa8 loop  0x00007354 
+ 00029534  0x00007aa9 rtn 
+ 00029535  0x00007aad arg  0x000005b2 , 0x00000005 
+ 00029536  0x00007aae ifetch  0x00000006 , 0x00000011 
+ 00029537  0x00007aaf istore  0x00000006 , 0x00000005 
+ 00029538  0x00007ab0 branch  0x00007365 , 0x00000028 
+ 00029539  0x00007ab1 ifetch  0x00000006 , 0x00000011 
+ 00029540  0x00007ab2 branch  0x00007366 
+ 00029541  0x00007ab4 ifetch  0x00000006 , 0x00000006 
+ 00029542  0x00007ab6 istore  0x00000006 , 0x00000005 
+ 00029543  0x00007ab7 ifetch  0x00000004 , 0x00000011 
+ 00029544  0x00007ab8 istore  0x00000004 , 0x00000005 
+ 00029545  0x00007ab9 rtn 
+ 00029546  0x00007abc arg  0x000041be , 0x00000006 
+ 00029547  0x00007abd arg  0x000005a2 , 0x00000005 
+ 00029548  0x00007abe arg  0x00000000 , 0x00000002 
+ 00029549  0x00007abf setarg  0x008395a7 
+ 00029550  0x00007ac0 call  0x0000738b 
+ 00029551  0x00007ac1 setarg  0x00b3c1df 
+ 00029552  0x00007ac2 call  0x0000738b 
+ 00029553  0x00007ac3 setarg  0x0000e5e9 
+ 00029554  0x00007ac4 call  0x0000738c 
+ 00029555  0x00007ac5 copy  0x00000002 , 0x00000014 
+ 00029556  0x00007ac6 disable  0x00000028 
+ 00029557  0x00007ac7 call  0x00007379 
+ 00029558  0x00007ac8 copy  0x00000014 , 0x00000002 
+ 00029559  0x00007ac9 enable  0x00000028 
+ 00029560  0x00007aca branch  0x00007379 
+ 00029561  0x00007acd force  0x00000008 , 0x00000039 
+ 00029562  0x00007acf ifetch  0x00000001 , 0x00000006 
+ 00029563  0x00007ad0 compare  0x00000001 , 0x00000039 , 0x00000001 
+ 00029564  0x00007ad1 branch  0x00007380 , 0x00000028 
+ 00029565  0x00007ad2 branch  0x00007381 , 0x00000001 
+ 00029566  0x00007ad4 iadd  0x00000002 , 0x0000003f 
+ 00029567  0x00007ad5 branch  0x00007382 
+ 00029568  0x00007ad7 branch  0x0000737e , 0x00000001 
+ 00029569  0x00007ad9 ixor  0x00000002 , 0x0000003f 
+ 00029570  0x00007adb istore  0x00000001 , 0x00000005 
+ 00029571  0x00007adc rshift8  0x00000002 , 0x00000002 
+ 00029572  0x00007add loop  0x0000737a 
+ 00029573  0x00007ade rtn 
+ 00029574  0x00007ae1 fetch  0x00000006 , 0x00000596 
+ 00029575  0x00007ae2 store  0x00000006 , 0x00000056 
+ 00029576  0x00007ae3 ifetch  0x00000006 , 0x00000006 
+ 00029577  0x00007ae4 istore  0x00000006 , 0x00000005 
+ 00029578  0x00007ae5 rtn 
+ 00029579  0x00007ae8 lshift8  0x00000002 , 0x00000002 
+ 00029580  0x00007aea lshift16  0x00000002 , 0x00000002 
+ 00029581  0x00007aeb ior  0x00000002 , 0x00000002 
+ 00029582  0x00007aec rtn 
+ 00029583  0x00007af1 branch  0x0000738f 
+ 00029584  0x00007af6 bpatchx  0x000000e0 , 0x0000403c 
+ 00029585  0x00007af7 call  0x0000742b 
+ 00029586  0x00007af8 arg  0x00004419 , 0x00000005 
+ 00029587  0x00007af9 branch  0x00007497 
+ 00029588  0x00007afd arg  0x0000443a , 0x00000005 
+ 00029589  0x00007afe branch  0x00007397 , 0x00000029 
+ 00029590  0x00007aff arg  0x0000042f , 0x00000005 
+ 00029591  0x00007b01 copy  0x00000006 , 0x00000011 
+ 00029592  0x00007b02 call  0x00007ebf 
+ 00029593  0x00007b03 call  0x00007440 
+ 00029594  0x00007b04 arg  0x0000442a , 0x00000006 
+ 00029595  0x00007b05 branch  0x000074b0 
+ 00029596  0x00007b08 arg  0x0000042f , 0x00000011 
+ 00029597  0x00007b09 branch  0x0000739f , 0x00000029 
+ 00029598  0x00007b0a arg  0x0000443a , 0x00000011 
+ 00029599  0x00007b0c copy  0x00000011 , 0x00000005 
+ 00029600  0x00007b0d call  0x0000630c 
+ 00029601  0x00007b0e branch  0x00007440 
+ 00029602  0x00007b11 arg  0x000044aa , 0x00000006 
+ 00029603  0x00007b12 call  0x00007486 
+ 00029604  0x00007b13 arg  0x00004419 , 0x00000006 
+ 00029605  0x00007b14 call  0x00007487 
+ 00029606  0x00007b15 force  0x00000038 , 0x00000036 
+ 00029607  0x00007b16 force  0x00000000 , 0x00000036 
+ 00029608  0x00007b17 call  0x0000741d 
+ 00029609  0x00007b18 arg  0x0000047c , 0x00000005 
+ 00029610  0x00007b19 branch  0x00007497 
+ 00029611  0x00007b1d force  0x00000049 , 0x0000003f 
+ 00029612  0x00007b1e branch  0x000073ae 
+ 00029613  0x00007b20 force  0x00000001 , 0x0000003f 
+ 00029614  0x00007b22 force  0x00000000 , 0x00000038 
+ 00029615  0x00007b23 lshift8  0x00000002 , 0x0000002f 
+ 00029616  0x00007b24 ior  0x0000002f , 0x0000002f 
+ 00029617  0x00007b25 increase  0x00000001 , 0x00000038 
+ 00029618  0x00007b26 rshift8  0x00000002 , 0x0000002f 
+ 00029619  0x00007b27 rshift16  0x0000002f , 0x0000002f 
+ 00029620  0x00007b28 fetch  0x00000002 , 0x00004411 
+ 00029621  0x00007b29 lshift16 , 0x0000003f , 0x0000003f 
+ 00029622  0x00007b2a ior  0x0000002f , 0x0000002f 
+ 00029623  0x00007b2b increase  0x00000001 , 0x00000038 
+ 00029624  0x00007b2c ifetch  0x00000004 , 0x00000006 
+ 00029625  0x00007b2d iforce  0x0000002f 
+ 00029626  0x00007b2e increase  0x00000001 , 0x00000038 
+ 00029627  0x00007b2f ifetch  0x00000002 , 0x00000006 
+ 00029628  0x00007b30 byteswap  0x00000011 , 0x0000002f 
+ 00029629  0x00007b31 lshift16  0x0000002f , 0x0000002f 
+ 00029630  0x00007b32 ior  0x0000002f , 0x0000002f 
+ 00029631  0x00007b33 increase  0x00000001 , 0x00000038 
+ 00029632  0x00007b34 rtn 
+ 00029633  0x00007b39 add  0x00000013 , 0x00000001 , 0x00000006 
+ 00029634  0x00007b3a ifetch  0x00000001 , 0x00000006 
+ 00029635  0x00007b3b iforce  0x00000011 
+ 00029636  0x00007b3c call  0x000073ab 
+ 00029637  0x00007b3d call  0x0000741f 
+ 00029638  0x00007b3f force  0x00000000 , 0x00000038 
+ 00029639  0x00007b40 ifetch  0x00000001 , 0x00000013 
+ 00029640  0x00007b41 and_into  0x00000003 , 0x0000003f 
+ 00029641  0x00007b42 lshift16  0x0000003f , 0x0000002f 
+ 00029642  0x00007b43 set1  0x00000008 , 0x0000002f 
+ 00029643  0x00007b44 call  0x0000748f 
+ 00029644  0x00007b45 call  0x00007422 
+ 00029645  0x00007b47 copy  0x00000011 , 0x00000039 
+ 00029646  0x00007b48 add  0x00000013 , 0x00000002 , 0x00000006 
+ 00029647  0x00007b49 call  0x0000746e 
+ 00029648  0x00007b4b call  0x00007478 
+ 00029649  0x00007b4c call  0x00007422 
+ 00029650  0x00007b4d deposit  0x00000039 
+ 00029651  0x00007b4e branch  0x000073d5 , 0x00000034 
+ 00029652  0x00007b4f branch  0x000073d0 
+ 00029653  0x00007b51 force  0x0000000c , 0x00000038 
+ 00029654  0x00007b52 deposit  0x0000002f 
+ 00029655  0x00007b53 store  0x00000004 , 0x00000417 
+ 00029656  0x00007b54 rtn 
+ 00029657  0x00007b57 increase  0x00000001 , 0x00000011 
+ 00029658  0x00007b58 call  0x000073ad 
+ 00029659  0x00007b59 copy  0x00000013 , 0x00000006 
+ 00029660  0x00007b5a call  0x00007482 
+ 00029661  0x00007b5b call  0x00007425 
+ 00029662  0x00007b5c call  0x0000749e 
+ 00029663  0x00007b5d increase  0x00000010 , 0x00000013 
+ 00029664  0x00007b5e increase  0xfffffff0 , 0x00000012 
+ 00029665  0x00007b5f branch  0x000073d9 , 0x00000002 
+ 00029666  0x00007b60 rtn 
+ 00029667  0x00007b63 bpatchx  0x000000e1 , 0x0000403c 
+ 00029668  0x00007b64 arg  0x000043dc , 0x00000013 
+ 00029669  0x00007b65 fetcht  0x00000005 , 0x00004403 
+ 00029670  0x00007b66 call  0x000073c1 
+ 00029671  0x00007b67 force  0x00000008 , 0x00000038 
+ 00029672  0x00007b68 iforce  0x0000002f 
+ 00029673  0x00007b69 force  0x00000000 , 0x00000011 
+ 00029674  0x00007b6a call  0x000073ad 
+ 00029675  0x00007b6b call  0x00007425 
+ 00029676  0x00007b6c arg  0x000043de , 0x00000013 
+ 00029677  0x00007b6d fetch  0x00000001 , 0x000043dd 
+ 00029678  0x00007b6e add  0x0000003f , 0xffffffff , 0x00000012 
+ 00029679  0x00007b6f iadd  0x00000013 , 0x00000005 
+ 00029680  0x00007b70 force  0x0000000c , 0x00000038 
+ 00029681  0x00007b71 deposit  0x0000002f 
+ 00029682  0x00007b72 istore  0x00000004 , 0x00000005 
+ 00029683  0x00007b73 call  0x000073d9 
+ 00029684  0x00007b74 fetch  0x00000001 , 0x000043dd 
+ 00029685  0x00007b75 increase  0x00000004 , 0x0000003f 
+ 00029686  0x00007b76 store  0x00000001 , 0x000043dd 
+ 00029687  0x00007b77 fetcht  0x00000005 , 0x00004403 
+ 00029688  0x00007b78 increase  0x00000001 , 0x00000002 
+ 00029689  0x00007b79 storet  0x00000005 , 0x00004403 
+ 00029690  0x00007b7a rtn 
+ 00029691  0x00007b7d bpatchx  0x000000e2 , 0x0000403c 
+ 00029692  0x00007b7e fetch  0x00000001 , 0x000002da 
+ 00029693  0x00007b7f sub  0x0000003f , 0x00000014 , 0x0000003e 
+ 00029694  0x00007b80 branch  0x000073ff , 0x00000002 
+ 00029695  0x00007b82 arg  0x000002db , 0x00000013 
+ 00029696  0x00007b83 add  0x0000003f , 0xffffffff , 0x00000012 
+ 00029697  0x00007b84 increase  0xfffffffc , 0x0000003f 
+ 00029698  0x00007b85 store  0x00000001 , 0x000002da 
+ 00029699  0x00007b86 iadd  0x00000013 , 0x00000006 
+ 00029700  0x00007b87 ifetch  0x00000004 , 0x00000006 
+ 00029701  0x00007b88 force  0x00000008 , 0x00000038 
+ 00029702  0x00007b89 iforce  0x0000002f 
+ 00029703  0x00007b8a force  0x00000000 , 0x00000011 
+ 00029704  0x00007b8b fetcht  0x00000005 , 0x00004408 
+ 00029705  0x00007b8c call  0x000073ad 
+ 00029706  0x00007b8d call  0x00007425 
+ 00029707  0x00007b8e force  0x0000000c , 0x00000038 
+ 00029708  0x00007b8f deposit  0x0000002f 
+ 00029709  0x00007b90 store  0x00000004 , 0x0000041b 
+ 00029710  0x00007b91 call  0x000073d9 
+ 00029711  0x00007b92 arg  0x000002d9 , 0x00000013 
+ 00029712  0x00007b93 call  0x000073c1 
+ 00029713  0x00007b94 fetcht  0x00000004 , 0x0000041b 
+ 00029714  0x00007b95 isub  0x00000002 , 0x0000003f 
+ 00029715  0x00007b96 nrtn  0x00000034 
+ 00029716  0x00007b97 fetch  0x00000004 , 0x0000440d 
+ 00029717  0x00007b98 isub  0x00000002 , 0x0000003f 
+ 00029718  0x00007b99 rtn  0x00000034 
+ 00029719  0x00007b9a storet  0x00000004 , 0x0000440d 
+ 00029720  0x00007b9b fetch  0x00000005 , 0x00004408 
+ 00029721  0x00007b9c increase  0x00000001 , 0x0000003f 
+ 00029722  0x00007b9d store  0x00000005 , 0x00004408 
+ 00029723  0x00007b9e force  0x00000000 , 0x0000003f 
+ 00029724  0x00007b9f rtn 
+ 00029725  0x00007ba2 nbranch  0x0000741d , 0x00000037 
+ 00029726  0x00007ba3 rtn 
+ 00029727  0x00007ba6 force  0x00000030 , 0x00000036 
+ 00029728  0x00007ba7 force  0x00000000 , 0x00000036 
+ 00029729  0x00007ba8 branch  0x0000741d 
+ 00029730  0x00007bab force  0x00000032 , 0x00000036 
+ 00029731  0x00007bac force  0x00000002 , 0x00000036 
+ 00029732  0x00007bad branch  0x0000741d 
+ 00029733  0x00007bb0 force  0x00000034 , 0x00000036 
+ 00029734  0x00007bb1 force  0x00000004 , 0x00000036 
+ 00029735  0x00007bb2 branch  0x0000741d 
+ 00029736  0x00007bb6 force  0x00000001 , 0x00000036 
+ 00029737  0x00007bb7 force  0x00000000 , 0x00000036 
+ 00029738  0x00007bb8 rtn 
+ 00029739  0x00007bba force  0x00000000 , 0x00000038 
+ 00029740  0x00007bbb fetch  0x00000004 , 0x0000042f 
+ 00029741  0x00007bbc iforce  0x0000002f 
+ 00029742  0x00007bbd increase  0x00000001 , 0x00000038 
+ 00029743  0x00007bbe ifetch  0x00000004 , 0x00000006 
+ 00029744  0x00007bbf iforce  0x0000002f 
+ 00029745  0x00007bc0 increase  0x00000001 , 0x00000038 
+ 00029746  0x00007bc1 fetch  0x00000004 , 0x0000443a 
+ 00029747  0x00007bc2 iforce  0x0000002f 
+ 00029748  0x00007bc3 increase  0x00000001 , 0x00000038 
+ 00029749  0x00007bc4 ifetch  0x00000004 , 0x00000006 
+ 00029750  0x00007bc5 iforce  0x0000002f 
+ 00029751  0x00007bc6 increase  0x00000001 , 0x00000038 
+ 00029752  0x00007bc7 call  0x00007492 
+ 00029753  0x00007bc8 increase  0xfffffffc , 0x00000038 
+ 00029754  0x00007bc9 fetch  0x00000004 , 0x000044c7 
+ 00029755  0x00007bca copy  0x0000003f , 0x0000002f 
+ 00029756  0x00007bcb increase  0x00000004 , 0x00000038 
+ 00029757  0x00007bcc force  0x00000038 , 0x00000036 
+ 00029758  0x00007bcd force  0x00000008 , 0x00000036 
+ 00029759  0x00007bce branch  0x0000741d 
+ 00029760  0x00007bd2 bpatchx  0x000000e3 , 0x0000403c 
+ 00029761  0x00007bd3 fetch  0x00000006 , 0x000044a0 
+ 00029762  0x00007bd4 fetcht  0x00000006 , 0x0000044f 
+ 00029763  0x00007bd5 branch  0x00007446 , 0x00000029 
+ 00029764  0x00007bd6 fetch  0x00000006 , 0x0000044f 
+ 00029765  0x00007bd7 fetcht  0x00000006 , 0x000044a0 
+ 00029766  0x00007bd9 force  0x00000008 , 0x00000038 
+ 00029767  0x00007bda copy  0x00000002 , 0x0000002f 
+ 00029768  0x00007bdb increase  0x00000001 , 0x00000038 
+ 00029769  0x00007bdc rshift32  0x00000002 , 0x0000002f 
+ 00029770  0x00007bdd lshift16  0x0000003f , 0x0000003f 
+ 00029771  0x00007bde ior  0x0000002f , 0x0000002f 
+ 00029772  0x00007bdf increase  0x00000001 , 0x00000038 
+ 00029773  0x00007be0 rshift32  0x0000003f , 0x0000002f 
+ 00029774  0x00007be1 increase  0x00000001 , 0x00000038 
+ 00029775  0x00007be2 force  0x00000000 , 0x0000002f 
+ 00029776  0x00007be3 force  0x00000000 , 0x0000003f 
+ 00029777  0x00007be4 fetch  0x00000001 , 0x0000448e 
+ 00029778  0x00007be5 fetcht  0x00000001 , 0x00004485 
+ 00029779  0x00007be6 nbranch  0x00007456 , 0x00000029 
+ 00029780  0x00007be8 fetch  0x00000001 , 0x00004495 
+ 00029781  0x00007be9 fetcht  0x00000001 , 0x0000448e 
+ 00029782  0x00007beb store  0x00000001 , 0x0000444a 
+ 00029783  0x00007bec storet  0x00000001 , 0x0000444b 
+ 00029784  0x00007bed force  0x00000000 , 0x00000038 
+ 00029785  0x00007bee arg  0x0000444a , 0x00000012 
+ 00029786  0x00007bef force  0x00000004 , 0x00000039 
+ 00029787  0x00007bf1 ifetch  0x00000004 , 0x00000011 
+ 00029788  0x00007bf2 ifetcht  0x00000004 , 0x00000012 
+ 00029789  0x00007bf3 ixor  0x00000002 , 0x0000002f 
+ 00029790  0x00007bf4 increase  0x00000001 , 0x00000038 
+ 00029791  0x00007bf5 increase  0x00000004 , 0x00000011 
+ 00029792  0x00007bf6 increase  0x00000004 , 0x00000012 
+ 00029793  0x00007bf7 loop  0x0000745b 
+ 00029794  0x00007bf8 call  0x00007492 
+ 00029795  0x00007bf9 increase  0xfffffffc , 0x00000038 
+ 00029796  0x00007bfa fetch  0x00000004 , 0x000044c7 
+ 00029797  0x00007bfb copy  0x0000003f , 0x0000002f 
+ 00029798  0x00007bfc increase  0x00000004 , 0x00000038 
+ 00029799  0x00007bfd force  0x00000038 , 0x00000036 
+ 00029800  0x00007bfe force  0x0000000c , 0x00000036 
+ 00029801  0x00007bff call  0x0000741d 
+ 00029802  0x00007c01 call  0x00007491 
+ 00029803  0x00007c02 force  0x0000003a , 0x00000036 
+ 00029804  0x00007c03 force  0x00000008 , 0x00000036 
+ 00029805  0x00007c04 branch  0x0000741d 
+ 00029806  0x00007c07 compare  0x00000000 , 0x00000039 , 0x00000003 
+ 00029807  0x00007c08 rtn  0x00000001 
+ 00029808  0x00007c09 deposit  0x00000006 
+ 00029809  0x00007c0a iadd  0x00000039 , 0x00000005 
+ 00029810  0x00007c0b force  0x00000000 , 0x0000003f 
+ 00029811  0x00007c0d istore  0x00000001 , 0x00000005 
+ 00029812  0x00007c0e increase  0x00000001 , 0x00000039 
+ 00029813  0x00007c0f compare  0x00000000 , 0x00000039 , 0x00000003 
+ 00029814  0x00007c10 rtn  0x00000001 
+ 00029815  0x00007c11 branch  0x00007473 
+ 00029816  0x00007c14 force  0x00000000 , 0x00000038 
+ 00029817  0x00007c16 deposit  0x00000039 
+ 00029818  0x00007c17 branch  0x0000747d , 0x00000034 
+ 00029819  0x00007c18 ifetch  0x00000004 , 0x00000006 
+ 00029820  0x00007c19 increase  0xfffffffc , 0x00000039 
+ 00029821  0x00007c1b iforce  0x0000002f 
+ 00029822  0x00007c1c increase  0x00000001 , 0x00000038 
+ 00029823  0x00007c1d compare  0x00000004 , 0x00000038 , 0x0000000f 
+ 00029824  0x00007c1e rtn  0x00000001 
+ 00029825  0x00007c1f branch  0x00007479 
+ 00029826  0x00007c22 force  0x00000008 , 0x00000038 
+ 00029827  0x00007c23 branch  0x00007487 
+ 00029828  0x00007c25 force  0x00000004 , 0x00000038 
+ 00029829  0x00007c26 branch  0x00007487 
+ 00029830  0x00007c28 force  0x00000000 , 0x00000038 
+ 00029831  0x00007c2a force  0x00000004 , 0x00000039 
+ 00029832  0x00007c2c ifetch  0x00000004 , 0x00000006 
+ 00029833  0x00007c2d iforce  0x0000002f 
+ 00029834  0x00007c2e increase  0x00000001 , 0x00000038 
+ 00029835  0x00007c2f loop  0x00007488 
+ 00029836  0x00007c30 rtn 
+ 00029837  0x00007c33 arg  0x0000047c , 0x00000006 
+ 00029838  0x00007c34 branch  0x00007484 
+ 00029839  0x00007c37 force  0x00000004 , 0x00000039 
+ 00029840  0x00007c38 branch  0x00007494 
+ 00029841  0x00007c3b force  0x00000000 , 0x00000038 
+ 00029842  0x00007c3d force  0x00000004 , 0x00000039 
+ 00029843  0x00007c3f force  0x00000000 , 0x0000002f 
+ 00029844  0x00007c41 increase  0x00000001 , 0x00000038 
+ 00029845  0x00007c42 loop  0x00007493 
+ 00029846  0x00007c43 rtn 
+ 00029847  0x00007c46 force  0x0000000c , 0x00000038 
+ 00029848  0x00007c47 force  0x00000004 , 0x00000039 
+ 00029849  0x00007c49 deposit  0x0000002f 
+ 00029850  0x00007c4a istore  0x00000004 , 0x00000005 
+ 00029851  0x00007c4b increase  0x00000001 , 0x00000038 
+ 00029852  0x00007c4c loop  0x00007499 
+ 00029853  0x00007c4d rtn 
+ 00029854  0x00007c50 force  0x0000000c , 0x00000038 
+ 00029855  0x00007c51 copy  0x00000013 , 0x00000005 
+ 00029856  0x00007c52 add  0x00000012 , 0x00000001 , 0x00000039 
+ 00029857  0x00007c53 sub  0x00000039 , 0x0000000f , 0x0000003e 
+ 00029858  0x00007c54 branch  0x000074a4 , 0x00000002 
+ 00029859  0x00007c55 force  0x00000010 , 0x00000039 
+ 00029860  0x00007c57 deposit  0x0000002f 
+ 00029861  0x00007c58 sub  0x00000039 , 0x00000003 , 0x0000003e 
+ 00029862  0x00007c59 branch  0x000074ac , 0x00000002 
+ 00029863  0x00007c5a istore  0x00000004 , 0x00000005 
+ 00029864  0x00007c5b increase  0xfffffffc , 0x00000039 
+ 00029865  0x00007c5c rtn  0x00000005 
+ 00029866  0x00007c5d increase  0x00000001 , 0x00000038 
+ 00029867  0x00007c5e branch  0x000074a4 
+ 00029868  0x00007c60 istore  0x00000001 , 0x00000005 
+ 00029869  0x00007c61 rshift8  0x0000003f , 0x0000003f 
+ 00029870  0x00007c62 loop  0x000074ac 
+ 00029871  0x00007c63 rtn 
+ 00029872  0x00007c67 force  0x0000000c , 0x00000038 
+ 00029873  0x00007c68 force  0x00000004 , 0x00000039 
+ 00029874  0x00007c6a ifetch  0x00000004 , 0x00000006 
+ 00029875  0x00007c6b isub  0x0000002f , 0x0000003e 
+ 00029876  0x00007c6c nrtn  0x00000005 
+ 00029877  0x00007c6d increase  0x00000001 , 0x00000038 
+ 00029878  0x00007c6e loop  0x000074b2 
+ 00029879  0x00007c6f force  0x00000000 , 0x0000003e 
+ 00029880  0x00007c70 rtn 
+ 00029881  0x00007c73 hfetch  0x00000001 , 0x00008050 
+ 00029882  0x00007c74 set0  0x00000000 , 0x0000003f 
+ 00029883  0x00007c75 hstore  0x00000001 , 0x00008050 
+ 00029884  0x00007c76 rtn 
+ 00029885  0x00007c79 hfetch  0x00000001 , 0x00008050 
+ 00029886  0x00007c7a set1  0x00000000 , 0x0000003f 
+ 00029887  0x00007c7b hstore  0x00000001 , 0x00008050 
+ 00029888  0x00007c7c rtn 
+ 00029889  0x00007c7f arg  0x00000886 , 0x00000005 
+ 00029890  0x00007c80 setsect  0x00000000 , 0x0003ffff 
+ 00029891  0x00007c81 setsect  0x00000001 , 0x0003ffff 
+ 00029892  0x00007c82 setsect  0x00000002 , 0x0003ffff 
+ 00029893  0x00007c83 setsect  0x00000003 , 0x0003fbff 
+ 00029894  0x00007c84 istore  0x00000009 , 0x00000005 
+ 00029895  0x00007c85 setsect  0x00000000 , 0x0003ffff 
+ 00029896  0x00007c86 setsect  0x00000001 , 0x0003ffff 
+ 00029897  0x00007c87 setsect  0x00000002 , 0x0003ffff 
+ 00029898  0x00007c88 setsect  0x00000003 , 0x0003ffff 
+ 00029899  0x00007c89 istore  0x00000009 , 0x00000005 
+ 00029900  0x00007c8a setsect  0x00000000 , 0x0003ffff 
+ 00029901  0x00007c8b setsect  0x00000001 , 0x0003ffff 
+ 00029902  0x00007c8c setsect  0x00000002 , 0x0003cfff 
+ 00029903  0x00007c8d setsect  0x00000003 , 0x0003ffff 
+ 00029904  0x00007c8e istore  0x00000009 , 0x00000005 
+ 00029905  0x00007c8f setsect  0x00000000 , 0x0003ffff 
+ 00029906  0x00007c90 setsect  0x00000001 , 0x0003ffff 
+ 00029907  0x00007c91 setsect  0x00000002 , 0x0003ffef 
+ 00029908  0x00007c92 setsect  0x00000003 , 0x0003ffff 
+ 00029909  0x00007c93 istore  0x00000009 , 0x00000005 
+ 00029910  0x00007c94 setsect  0x00000000 , 0x0003ffff 
+ 00029911  0x00007c95 setsect  0x00000001 , 0x0003ffff 
+ 00029912  0x00007c96 setsect  0x00000002 , 0x0003ffff 
+ 00029913  0x00007c97 setsect  0x00000003 , 0x0003ffff 
+ 00029914  0x00007c98 istore  0x00000009 , 0x00000005 
+ 00029915  0x00007c99 setsect  0x00000000 , 0x0003ffff 
+ 00029916  0x00007c9a setsect  0x00000001 , 0x00026c7f 
+ 00029917  0x00007c9b setsect  0x00000002 , 0x0000146b 
+ 00029918  0x00007c9c setsect  0x00000003 , 0x00037bb3 
+ 00029919  0x00007c9d istore  0x00000009 , 0x00000005 
+ 00029920  0x00007c9e setsect  0x00000000 , 0x0001feb8 
+ 00029921  0x00007c9f setsect  0x00000001 , 0x00010c12 
+ 00029922  0x00007ca0 setsect  0x00000002 , 0x0002b722 
+ 00029923  0x00007ca1 setsect  0x00000003 , 0x00029fa6 
+ 00029924  0x00007ca2 istore  0x00000009 , 0x00000005 
+ 00029925  0x00007ca3 setsect  0x00000000 , 0x0000e70f 
+ 00029926  0x00007ca4 setsect  0x00000001 , 0x00016720 
+ 00029927  0x00007ca5 setsect  0x00000002 , 0x0000519e 
+ 00029928  0x00007ca6 setsect  0x00000003 , 0x00019084 
+ 00029929  0x00007ca7 istore  0x00000009 , 0x00000005 
+ 00029930  0x00007ca8 setsect  0x00000000 , 0x00031012 
+ 00029931  0x00007ca9 setsect  0x00000001 , 0x000360bf 
+ 00029932  0x00007caa setsect  0x00000002 , 0x0003f0af 
+ 00029933  0x00007cab setsect  0x00000003 , 0x000003d3 
+ 00029934  0x00007cac istore  0x00000009 , 0x00000005 
+ 00029935  0x00007cad setsect  0x00000000 , 0x0003a188 
+ 00029936  0x00007cae setsect  0x00000001 , 0x00003ad0 
+ 00029937  0x00007caf setsect  0x00000002 , 0x0003cbf2 
+ 00029938  0x00007cb0 setsect  0x00000003 , 0x000243d9 
+ 00029939  0x00007cb1 istore  0x00000009 , 0x00000005 
+ 00029940  0x00007cb2 setsect  0x00000000 , 0x0002b030 
+ 00029941  0x00007cb3 setsect  0x00000001 , 0x00036a03 
+ 00029942  0x00007cb4 setsect  0x00000002 , 0x00011188 
+ 00029943  0x00007cb5 setsect  0x00000003 , 0x0001e520 
+ 00029944  0x00007cb6 istore  0x00000009 , 0x00000005 
+ 00029945  0x00007cb7 setsect  0x00000000 , 0x0003a11e 
+ 00029946  0x00007cb8 setsect  0x00000001 , 0x0000fe5d 
+ 00029947  0x00007cb9 setsect  0x00000002 , 0x0000dd57 
+ 00029948  0x00007cba setsect  0x00000003 , 0x0001ac93 
+ 00029949  0x00007cbb istore  0x00000009 , 0x00000005 
+ 00029950  0x00007cbc setsect  0x00000000 , 0x000011ed 
+ 00029951  0x00007cbd setsect  0x00000001 , 0x000218c4 
+ 00029952  0x00007cbe setsect  0x00000002 , 0x00008da7 
+ 00029953  0x00007cbf setsect  0x00000003 , 0x000257ff 
+ 00029954  0x00007cc0 istore  0x00000009 , 0x00000005 
+ 00029955  0x00007cc1 setsect  0x00000000 , 0x0003192b 
+ 00029956  0x00007cc2 setsect  0x00000001 , 0x00034641 
+ 00029957  0x00007cc3 setsect  0x00000002 , 0x0001be0c 
+ 00029958  0x00007cc4 setsect  0x00000003 , 0x000366ad 
+ 00029959  0x00007cc5 istore  0x00000009 , 0x00000005 
+ 00029960  0x00007cc6 setsect  0x00000000 , 0x00001f83 
+ 00029961  0x00007cc7 setsect  0x00000001 , 0x00015a23 
+ 00029962  0x00007cc8 setsect  0x00000002 , 0x0003f9b0 
+ 00029963  0x00007cc9 setsect  0x00000003 , 0x00003949 
+ 00029964  0x00007cca istore  0x00000009 , 0x00000005 
+ 00029965  0x00007ccb setsect  0x00000000 , 0x00013a51 
+ 00029966  0x00007ccc setsect  0x00000001 , 0x000153fd 
+ 00029967  0x00007ccd setsect  0x00000002 , 0x0003372a 
+ 00029968  0x00007cce setsect  0x00000003 , 0x0000f1bb 
+ 00029969  0x00007ccf istore  0x00000009 , 0x00000005 
+ 00029970  0x00007cd0 setsect  0x00000000 , 0x0003ae85 
+ 00029971  0x00007cd1 setsect  0x00000001 , 0x0001eed9 
+ 00029972  0x00007cd2 setsect  0x00000002 , 0x00009e66 
+ 00029973  0x00007cd3 setsect  0x00000003 , 0x000001a8 
+ 00029974  0x00007cd4 istore  0x00000008 , 0x00000005 
+ 00029975  0x00007cd5 rtn 
+ 00029976  0x00007cda arg  0x0000091e , 0x00000005 
+ 00029977  0x00007cdb setsect  0x00000000 , 0x0003ffff 
+ 00029978  0x00007cdc setsect  0x00000001 , 0x0003ffff 
+ 00029979  0x00007cdd setsect  0x00000002 , 0x0003ffff 
+ 00029980  0x00007cde setsect  0x00000003 , 0x0003ffff 
+ 00029981  0x00007cdf istore  0x00000009 , 0x00000005 
+ 00029982  0x00007ce0 setsect  0x00000000 , 0x0003ffff 
+ 00029983  0x00007ce1 setsect  0x00000001 , 0x0000003f 
+ 00029984  0x00007ce2 setsect  0x00000002 , 0x00000000 
+ 00029985  0x00007ce3 setsect  0x00000003 , 0x00000000 
+ 00029986  0x00007ce4 istore  0x00000009 , 0x00000005 
+ 00029987  0x00007ce5 setsect  0x00000000 , 0x00000000 
+ 00029988  0x00007ce6 setsect  0x00000001 , 0x00000000 
+ 00029989  0x00007ce7 setsect  0x00000002 , 0x00001000 
+ 00029990  0x00007ce8 setsect  0x00000003 , 0x00000000 
+ 00029991  0x00007ce9 istore  0x00000009 , 0x00000005 
+ 00029992  0x00007cea setsect  0x00000000 , 0x0003ff00 
+ 00029993  0x00007ceb setsect  0x00000001 , 0x0003ffff 
+ 00029994  0x00007cec setsect  0x00000002 , 0x0003ffcf 
+ 00029995  0x00007ced setsect  0x00000003 , 0x0003ffff 
+ 00029996  0x00007cee istore  0x00000009 , 0x00000005 
+ 00029997  0x00007cef setsect  0x00000000 , 0x0003ffff 
+ 00029998  0x00007cf0 setsect  0x00000001 , 0x0003ffff 
+ 00029999  0x00007cf1 setsect  0x00000002 , 0x0003ffff 
+ 00030000  0x00007cf2 setsect  0x00000003 , 0x000003ff 
+ 00030001  0x00007cf3 istore  0x00000009 , 0x00000005 
+ 00030002  0x00007cf4 setsect  0x00000000 , 0x00000000 
+ 00030003  0x00007cf5 setsect  0x00000001 , 0x00000000 
+ 00030004  0x00007cf6 setsect  0x00000002 , 0x00000000 
+ 00030005  0x00007cf7 setsect  0x00000003 , 0x00000000 
+ 00030006  0x00007cf8 istore  0x00000009 , 0x00000005 
+ 00030007  0x00007cf9 setsect  0x00000000 , 0x00010000 
+ 00030008  0x00007cfa setsect  0x00000001 , 0x00000000 
+ 00030009  0x00007cfb setsect  0x00000002 , 0x0003f000 
+ 00030010  0x00007cfc setsect  0x00000003 , 0x0003ffff 
+ 00030011  0x00007cfd istore  0x00000009 , 0x00000005 
+ 00030012  0x00007cfe setsect  0x00000000 , 0x000296ff 
+ 00030013  0x00007cff setsect  0x00000001 , 0x00022630 
+ 00030014  0x00007d00 setsect  0x00000002 , 0x0003945d 
+ 00030015  0x00007d01 setsect  0x00000003 , 0x0003d284 
+ 00030016  0x00007d02 istore  0x00000009 , 0x00000005 
+ 00030017  0x00007d03 setsect  0x00000000 , 0x000333a0 
+ 00030018  0x00007d04 setsect  0x00000001 , 0x00004b7a 
+ 00030019  0x00007d05 setsect  0x00000002 , 0x000037d8 
+ 00030020  0x00007d06 setsect  0x00000003 , 0x0003c9dc 
+ 00030021  0x00007d07 istore  0x00000009 , 0x00000005 
+ 00030022  0x00007d08 setsect  0x00000000 , 0x0003a440 
+ 00030023  0x00007d09 setsect  0x00000001 , 0x0001b958 
+ 00030024  0x00007d0a setsect  0x00000002 , 0x00038bce 
+ 00030025  0x00007d0b setsect  0x00000003 , 0x0001091f 
+ 00030026  0x00007d0c istore  0x00000009 , 0x00000005 
+ 00030027  0x00007d0d setsect  0x00000000 , 0x0002e12c 
+ 00030028  0x00007d0e setsect  0x00000001 , 0x0001f47c 
+ 00030029  0x00007d0f setsect  0x00000002 , 0x000356b1 
+ 00030030  0x00007d10 setsect  0x00000003 , 0x0002fd47 
+ 00030031  0x00007d11 istore  0x00000009 , 0x00000005 
+ 00030032  0x00007d12 setsect  0x00000000 , 0x00006837 
+ 00030033  0x00007d13 setsect  0x00000001 , 0x0002ed90 
+ 00030034  0x00007d14 setsect  0x00000002 , 0x0001ecec 
+ 00030035  0x00007d15 setsect  0x00000003 , 0x0001acc5 
+ 00030036  0x00007d16 istore  0x00000009 , 0x00000005 
+ 00030037  0x00007d17 setsect  0x00000000 , 0x00023357 
+ 00030038  0x00007d18 setsect  0x00000001 , 0x00018af3 
+ 00030039  0x00007d19 setsect  0x00000002 , 0x0000f9e1 
+ 00030040  0x00007d1a setsect  0x00000003 , 0x000129f0 
+ 00030041  0x00007d1b istore  0x00000009 , 0x00000005 
+ 00030042  0x00007d1c setsect  0x00000000 , 0x0002e7eb 
+ 00030043  0x00007d1d setsect  0x00000001 , 0x0003e6e3 
+ 00030044  0x00007d1e setsect  0x00000002 , 0x0003e1a7 
+ 00030045  0x00007d1f setsect  0x00000003 , 0x00010b8b 
+ 00030046  0x00007d20 istore  0x00000009 , 0x00000005 
+ 00030047  0x00007d21 setsect  0x00000000 , 0x00024fe3 
+ 00030048  0x00007d22 setsect  0x00000001 , 0x000020ef 
+ 00030049  0x00007d23 setsect  0x00000002 , 0x0001b5a6 
+ 00030050  0x00007d24 setsect  0x00000003 , 0x0000dc2f 
+ 00030051  0x00007d25 istore  0x00000009 , 0x00000005 
+ 00030052  0x00007d26 setsect  0x00000000 , 0x00013860 
+ 00030053  0x00007d27 setsect  0x00000001 , 0x0002bd69 
+ 00030054  0x00007d28 setsect  0x00000002 , 0x0000391a 
+ 00030055  0x00007d29 setsect  0x00000003 , 0x0001b222 
+ 00030056  0x00007d2a istore  0x00000009 , 0x00000005 
+ 00030057  0x00007d2b rtn 
+ 00030058  0x00007d2f fetch  0x00000001 , 0x0000465a 
+ 00030059  0x00007d30 nbranch  0x0000757d , 0x00000034 
+ 00030060  0x00007d31 branch  0x00007a77 
+ 00030061  0x00007d34 bpatchx  0x000000e4 , 0x0000403c 
+ 00030062  0x00007d35 fetch  0x00000001 , 0x0000465a 
+ 00030063  0x00007d36 rtn  0x00000034 
+ 00030064  0x00007d37 fetch  0x00000001 , 0x000045b1 
+ 00030065  0x00007d38 rtnne  0x00000001 
+ 00030066  0x00007d39 fetch  0x00000001 , 0x000044be 
+ 00030067  0x00007d3a rtn  0x00000034 
+ 00030068  0x00007d3b fetch  0x00000001 , 0x000044c3 
+ 00030069  0x00007d3c rtneq  0x00000003 
+ 00030070  0x00007d3d fetch  0x00000002 , 0x00004682 
+ 00030071  0x00007d3e bbit1  0x00000000 , 0x0000757b 
+ 00030072  0x00007d3f fetch  0x00000001 , 0x000044c0 
+ 00030073  0x00007d40 beq  0x00000000 , 0x00007a77 
+ 00030074  0x00007d41 rtn 
+ 00030075  0x00007d43 jam  0x00000000 , 0x000044c0 
+ 00030076  0x00007d44 rtn 
+ 00030077  0x00007d48 bpatchx  0x000000e5 , 0x0000403c 
+ 00030078  0x00007d49 fetch  0x00000001 , 0x0000465a 
+ 00030079  0x00007d4a branch  0x0000612b , 0x00000034 
+ 00030080  0x00007d4b call  0x00006124 
+ 00030081  0x00007d4c call  0x00007583 
+ 00030082  0x00007d4d branch  0x0000766d 
+ 00030083  0x00007d50 setarg  0x00000000 
+ 00030084  0x00007d51 store  0x00000008 , 0x000009ae 
+ 00030085  0x00007d52 store  0x00000004 , 0x000009b6 
+ 00030086  0x00007d53 store  0x00000007 , 0x0000465e 
+ 00030087  0x00007d54 rtn 
+ 00030088  0x00007d57 jam  0x00000001 , 0x000009b0 
+ 00030089  0x00007d58 branch  0x0000758d 
+ 00030090  0x00007d5a fetch  0x00000001 , 0x000045b1 
+ 00030091  0x00007d5b beq  0x00000001 , 0x0000768a 
+ 00030092  0x00007d5c branch  0x00002a8c 
+ 00030093  0x00007d5e fetch  0x00000001 , 0x000045b1 
+ 00030094  0x00007d5f beq  0x00000001 , 0x00007590 
+ 00030095  0x00007d60 branch  0x0000766d 
+ 00030096  0x00007d63 call  0x0000768a 
+ 00030097  0x00007d64 fetch  0x00000001 , 0x000009af 
+ 00030098  0x00007d65 nrtn  0x00000034 
+ 00030099  0x00007d66 jam  0x00000003 , 0x000009ae 
+ 00030100  0x00007d67 rtn 
+ 00030101  0x00007d6b call  0x000075b0 
+ 00030102  0x00007d6c arg  0x000009de , 0x00000011 
+ 00030103  0x00007d6d arg  0x00000866 , 0x00000005 
+ 00030104  0x00007d6e call  0x00007c79 
+ 00030105  0x00007d6f arg  0x000009be , 0x00000011 
+ 00030106  0x00007d70 arg  0x00000826 , 0x00000005 
+ 00030107  0x00007d71 call  0x00007c79 
+ 00030108  0x00007d72 arg  0x00000826 , 0x00000011 
+ 00030109  0x00007d73 arg  0x000009be , 0x00000012 
+ 00030110  0x00007d74 arg  0x00000826 , 0x00000005 
+ 00030111  0x00007d75 call  0x00007be1 
+ 00030112  0x00007d76 arg  0x0000093e , 0x00000011 
+ 00030113  0x00007d77 arg  0x000009be , 0x00000012 
+ 00030114  0x00007d78 arg  0x00000846 , 0x00000005 
+ 00030115  0x00007d79 call  0x00007be1 
+ 00030116  0x00007d7a arg  0x00000846 , 0x00000011 
+ 00030117  0x00007d7b arg  0x00000826 , 0x00000012 
+ 00030118  0x00007d7c arg  0x00000826 , 0x00000005 
+ 00030119  0x00007d7d call  0x00007c7d 
+ 00030120  0x00007d7e arg  0x00000806 , 0x00000011 
+ 00030121  0x00007d7f arg  0x00000826 , 0x00000012 
+ 00030122  0x00007d80 arg  0x00000806 , 0x00000005 
+ 00030123  0x00007d81 call  0x00007c7d 
+ 00030124  0x00007d82 arg  0x00000020 , 0x00000039 
+ 00030125  0x00007d83 arg  0x00000866 , 0x00000011 
+ 00030126  0x00007d84 arg  0x00000806 , 0x00000012 
+ 00030127  0x00007d85 branch  0x00007f88 
+ 00030128  0x00007d88 arg  0x0000097e , 0x00000011 
+ 00030129  0x00007d89 arg  0x00000806 , 0x00000005 
+ 00030130  0x00007d8a call  0x00007c79 
+ 00030131  0x00007d8b arg  0x0000095e , 0x00000011 
+ 00030132  0x00007d8c arg  0x00000826 , 0x00000005 
+ 00030133  0x00007d8d call  0x00007c79 
+ 00030134  0x00007d8e arg  0x00000826 , 0x00000011 
+ 00030135  0x00007d8f arg  0x0000095e , 0x00000012 
+ 00030136  0x00007d90 arg  0x00000826 , 0x00000005 
+ 00030137  0x00007d91 call  0x00007be1 
+ 00030138  0x00007d92 arg  0x0000093e , 0x00000011 
+ 00030139  0x00007d93 arg  0x0000095e , 0x00000012 
+ 00030140  0x00007d94 arg  0x00000846 , 0x00000005 
+ 00030141  0x00007d95 call  0x00007be1 
+ 00030142  0x00007d96 arg  0x00000846 , 0x00000011 
+ 00030143  0x00007d97 arg  0x00000826 , 0x00000012 
+ 00030144  0x00007d98 arg  0x00000826 , 0x00000005 
+ 00030145  0x00007d99 call  0x00007c7d 
+ 00030146  0x00007d9a arg  0x00000806 , 0x00000011 
+ 00030147  0x00007d9b arg  0x00000826 , 0x00000012 
+ 00030148  0x00007d9c arg  0x00000806 , 0x00000005 
+ 00030149  0x00007d9d branch  0x00007c96 
+ 00030150  0x00007da0 call  0x000075e1 
+ 00030151  0x00007da1 arg  0x000009e6 , 0x00000011 
+ 00030152  0x00007da2 arg  0x00000866 , 0x00000005 
+ 00030153  0x00007da3 call  0x000077a8 
+ 00030154  0x00007da4 arg  0x000009c6 , 0x00000011 
+ 00030155  0x00007da5 arg  0x00000826 , 0x00000005 
+ 00030156  0x00007da6 call  0x000077a8 
+ 00030157  0x00007da7 arg  0x00000826 , 0x00000011 
+ 00030158  0x00007da8 arg  0x000009c6 , 0x00000012 
+ 00030159  0x00007da9 arg  0x00000826 , 0x00000005 
+ 00030160  0x00007daa call  0x00007786 
+ 00030161  0x00007dab arg  0x0000089e , 0x00000011 
+ 00030162  0x00007dac arg  0x000009c6 , 0x00000012 
+ 00030163  0x00007dad arg  0x00000846 , 0x00000005 
+ 00030164  0x00007dae call  0x00007786 
+ 00030165  0x00007daf arg  0x00000846 , 0x00000011 
+ 00030166  0x00007db0 arg  0x00000826 , 0x00000012 
+ 00030167  0x00007db1 arg  0x00000826 , 0x00000005 
+ 00030168  0x00007db2 call  0x00007755 
+ 00030169  0x00007db3 arg  0x00000806 , 0x00000011 
+ 00030170  0x00007db4 arg  0x00000826 , 0x00000012 
+ 00030171  0x00007db5 arg  0x00000806 , 0x00000005 
+ 00030172  0x00007db6 call  0x00007755 
+ 00030173  0x00007db7 arg  0x00000018 , 0x00000039 
+ 00030174  0x00007db8 arg  0x00000866 , 0x00000011 
+ 00030175  0x00007db9 arg  0x00000806 , 0x00000012 
+ 00030176  0x00007dba branch  0x00007f88 
+ 00030177  0x00007dbd arg  0x000008e6 , 0x00000011 
+ 00030178  0x00007dbe arg  0x00000806 , 0x00000005 
+ 00030179  0x00007dbf call  0x000077a8 
+ 00030180  0x00007dc0 arg  0x000008ce , 0x00000011 
+ 00030181  0x00007dc1 arg  0x00000826 , 0x00000005 
+ 00030182  0x00007dc2 call  0x000077a8 
+ 00030183  0x00007dc3 arg  0x00000826 , 0x00000011 
+ 00030184  0x00007dc4 arg  0x000008ce , 0x00000012 
+ 00030185  0x00007dc5 arg  0x00000826 , 0x00000005 
+ 00030186  0x00007dc6 call  0x00007786 
+ 00030187  0x00007dc7 arg  0x0000089e , 0x00000011 
+ 00030188  0x00007dc8 arg  0x000008ce , 0x00000012 
+ 00030189  0x00007dc9 arg  0x00000846 , 0x00000005 
+ 00030190  0x00007dca call  0x00007786 
+ 00030191  0x00007dcb arg  0x00000846 , 0x00000011 
+ 00030192  0x00007dcc arg  0x00000826 , 0x00000012 
+ 00030193  0x00007dcd arg  0x00000826 , 0x00000005 
+ 00030194  0x00007dce call  0x00007755 
+ 00030195  0x00007dcf arg  0x00000806 , 0x00000011 
+ 00030196  0x00007dd0 arg  0x00000826 , 0x00000012 
+ 00030197  0x00007dd1 arg  0x00000806 , 0x00000005 
+ 00030198  0x00007dd2 branch  0x00007758 
+ 00030199  0x00007dd6 fetch  0x00000001 , 0x000009b2 
+ 00030200  0x00007dd7 bne  0x00000000 , 0x00007615 
+ 00030201  0x00007dd8 call  0x00007612 
+ 00030202  0x00007dd9 arg  0x00000a7e , 0x00000005 
+ 00030203  0x00007dda setarg  0x00000a2e 
+ 00030204  0x00007ddb istore  0x00000002 , 0x00000005 
+ 00030205  0x00007ddc setarg  0x00004642 
+ 00030206  0x00007ddd istore  0x00000002 , 0x00000005 
+ 00030207  0x00007dde setarg  0x000009de 
+ 00030208  0x00007ddf istore  0x00000002 , 0x00000005 
+ 00030209  0x00007de0 branch  0x00007609 
+ 00030210  0x00007de2 arg  0x00000a7e , 0x00000005 
+ 00030211  0x00007de3 setarg  0x00000a3e 
+ 00030212  0x00007de4 istore  0x00000002 , 0x00000005 
+ 00030213  0x00007de5 setarg  0x000009de 
+ 00030214  0x00007de6 istore  0x00000002 , 0x00000005 
+ 00030215  0x00007de7 setarg  0x00004642 
+ 00030216  0x00007de8 istore  0x00000002 , 0x00000005 
+ 00030217  0x00007dea call  0x000079a0 
+ 00030218  0x00007deb fetch  0x00000001 , 0x000009af 
+ 00030219  0x00007dec beq  0x00000004 , 0x0000760f 
+ 00030220  0x00007ded jam  0x00000001 , 0x000009b0 
+ 00030221  0x00007dee jam  0x00000005 , 0x000009ae 
+ 00030222  0x00007def rtn 
+ 00030223  0x00007df1 jam  0x00000014 , 0x000009af 
+ 00030224  0x00007df2 call  0x0000758a 
+ 00030225  0x00007df3 branch  0x000076d8 
+ 00030226  0x00007df6 arg  0x00000a1e , 0x00000005 
+ 00030227  0x00007df7 force  0x00000008 , 0x00000007 
+ 00030228  0x00007df8 branch  0x000076a2 
+ 00030229  0x00007dfb jam  0x00000001 , 0x000009b0 
+ 00030230  0x00007dfc rtn 
+ 00030231  0x00007e00 bpatchx  0x000000e6 , 0x0000403c 
+ 00030232  0x00007e01 arg  0x00000727 , 0x00000005 
+ 00030233  0x00007e02 fetch  0x00000006 , 0x000040a0 
+ 00030234  0x00007e03 istore  0x00000006 , 0x00000005 
+ 00030235  0x00007e04 fetch  0x00000006 , 0x00000040 
+ 00030236  0x00007e05 istore  0x00000006 , 0x00000005 
+ 00030237  0x00007e06 fetch  0x00000003 , 0x0000465e 
+ 00030238  0x00007e07 istore  0x00000003 , 0x00000005 
+ 00030239  0x00007e09 call  0x00007a0d 
+ 00030240  0x00007e0b arg  0x00000a4e , 0x00000011 
+ 00030241  0x00007e0c arg  0x00000a5e , 0x00000012 
+ 00030242  0x00007e0d force  0x00000004 , 0x00000007 
+ 00030243  0x00007e0e call  0x000076a7 
+ 00030244  0x00007e0f nbranch  0x00007631 , 0x00000001 
+ 00030245  0x00007e11 call  0x00007628 
+ 00030246  0x00007e12 jam  0x00000041 , 0x0000007d 
+ 00030247  0x00007e13 branch  0x000062f8 
+ 00030248  0x00007e16 fetch  0x00000001 , 0x000009af 
+ 00030249  0x00007e17 beq  0x00000009 , 0x0000762e 
+ 00030250  0x00007e18 jam  0x0000000a , 0x000009ae 
+ 00030251  0x00007e19 jam  0x00000001 , 0x000009b0 
+ 00030252  0x00007e1a jam  0x00000003 , 0x0000007c 
+ 00030253  0x00007e1b rtn 
+ 00030254  0x00007e1d jam  0x00000003 , 0x0000007c 
+ 00030255  0x00007e1e jam  0x00000015 , 0x000009af 
+ 00030256  0x00007e1f branch  0x000076d8 
+ 00030257  0x00007e23 fetch  0x00000001 , 0x000009af 
+ 00030258  0x00007e24 beq  0x00000009 , 0x00007637 
+ 00030259  0x00007e25 jam  0x00000000 , 0x000009ae 
+ 00030260  0x00007e26 jam  0x00000004 , 0x0000007c 
+ 00030261  0x00007e28 jam  0x00000005 , 0x0000007e 
+ 00030262  0x00007e29 rtn 
+ 00030263  0x00007e2b jam  0x00000004 , 0x0000007c 
+ 00030264  0x00007e2c jam  0x00000000 , 0x000009af 
+ 00030265  0x00007e2d rtn 
+ 00030266  0x00007e30 fetch  0x00000001 , 0x000009b3 
+ 00030267  0x00007e31 beq  0x00000001 , 0x0000763e 
+ 00030268  0x00007e32 jam  0x0000000a , 0x000009af 
+ 00030269  0x00007e33 branch  0x000076d8 
+ 00030270  0x00007e35 arg  0x00000727 , 0x00000005 
+ 00030271  0x00007e36 fetch  0x00000006 , 0x00000040 
+ 00030272  0x00007e37 istore  0x00000006 , 0x00000005 
+ 00030273  0x00007e38 fetch  0x00000006 , 0x000040a0 
+ 00030274  0x00007e39 istore  0x00000006 , 0x00000005 
+ 00030275  0x00007e3a fetch  0x00000003 , 0x0000465b 
+ 00030276  0x00007e3b istore  0x00000003 , 0x00000005 
+ 00030277  0x00007e3d call  0x00007a24 
+ 00030278  0x00007e3e fetch  0x00000001 , 0x000009af 
+ 00030279  0x00007e3f beq  0x0000000a , 0x0000764b 
+ 00030280  0x00007e40 jam  0x0000000b , 0x000009ae 
+ 00030281  0x00007e41 jam  0x00000001 , 0x000009b0 
+ 00030282  0x00007e42 rtn 
+ 00030283  0x00007e44 jam  0x0000000b , 0x000009af 
+ 00030284  0x00007e45 jam  0x00000001 , 0x000009b1 
+ 00030285  0x00007e46 rtn 
+ 00030286  0x00007e49 arg  0x00000a7e , 0x00000005 
+ 00030287  0x00007e4a fetch  0x00000006 , 0x00000040 
+ 00030288  0x00007e4b istore  0x00000006 , 0x00000005 
+ 00030289  0x00007e4c fetch  0x00000006 , 0x000040a0 
+ 00030290  0x00007e4d istore  0x00000006 , 0x00000005 
+ 00030291  0x00007e4e setarg  0x00000a2e 
+ 00030292  0x00007e4f istore  0x00000002 , 0x00000005 
+ 00030293  0x00007e50 setarg  0x00000a3e 
+ 00030294  0x00007e51 istore  0x00000002 , 0x00000005 
+ 00030295  0x00007e52 branch  0x00007662 
+ 00030296  0x00007e54 jam  0x0000000f , 0x000009ae 
+ 00030297  0x00007e55 arg  0x00000a7e , 0x00000005 
+ 00030298  0x00007e56 fetch  0x00000006 , 0x000040a0 
+ 00030299  0x00007e57 istore  0x00000006 , 0x00000005 
+ 00030300  0x00007e58 fetch  0x00000006 , 0x00000040 
+ 00030301  0x00007e59 istore  0x00000006 , 0x00000005 
+ 00030302  0x00007e5a setarg  0x00000a3e 
+ 00030303  0x00007e5b istore  0x00000002 , 0x00000005 
+ 00030304  0x00007e5c setarg  0x00000a2e 
+ 00030305  0x00007e5d istore  0x00000002 , 0x00000005 
+ 00030306  0x00007e60 arg  0x00000727 , 0x00000005 
+ 00030307  0x00007e61 fetch  0x00000006 , 0x00000a7e 
+ 00030308  0x00007e62 istore  0x00000006 , 0x00000005 
+ 00030309  0x00007e63 fetch  0x00000006 , 0x00000a84 
+ 00030310  0x00007e64 istore  0x00000006 , 0x00000005 
+ 00030311  0x00007e66 call  0x000079d7 
+ 00030312  0x00007e69 jam  0x00000001 , 0x000041bd 
+ 00030313  0x00007e6a arg  0x000041be , 0x00000005 
+ 00030314  0x00007e6b arg  0x00000a4e , 0x00000006 
+ 00030315  0x00007e6c call  0x00007ebf 
+ 00030316  0x00007e6d branch  0x000021c4 
+ 00030317  0x00007e71 bpatchx  0x000000e7 , 0x0000403c 
+ 00030318  0x00007e72 fetch  0x00000001 , 0x000045b1 
+ 00030319  0x00007e73 rtnne  0x00000000 
+ 00030320  0x00007e74 fetch  0x00000001 , 0x000009b2 
+ 00030321  0x00007e75 rtnne  0x00000000 
+ 00030322  0x00007e76 arg  0x00004612 , 0x00000005 
+ 00030323  0x00007e77 force  0x0000000b , 0x00000007 
+ 00030324  0x00007e78 call  0x000076a2 
+ 00030325  0x00007e79 random  0x0000003f 
+ 00030326  0x00007e7a rshift  0x0000003f , 0x0000003f 
+ 00030327  0x00007e7b istore  0x00000002 , 0x00000005 
+ 00030328  0x00007e7d arg  0x000006be , 0x00000005 
+ 00030329  0x00007e7e arg  0x00004612 , 0x00000006 
+ 00030330  0x00007e7f call  0x00007ebe 
+ 00030331  0x00007e81 arg  0x000005e6 , 0x00000005 
+ 00030332  0x00007e82 arg  0x000008ce , 0x00000006 
+ 00030333  0x00007e83 call  0x00007ebc 
+ 00030334  0x00007e85 arg  0x00000616 , 0x00000005 
+ 00030335  0x00007e86 call  0x00007ec5 
+ 00030336  0x00007e87 jam  0x00000001 , 0x00000616 
+ 00030337  0x00007e89 call  0x00007a5d 
+ 00030338  0x00007e8a jam  0x00000001 , 0x000009b2 
+ 00030339  0x00007e8b rtn 
+ 00030340  0x00007e8e arg  0x0000462a , 0x00000005 
+ 00030341  0x00007e8f arg  0x0000062e , 0x00000006 
+ 00030342  0x00007e90 call  0x00007ebc 
+ 00030343  0x00007e91 jam  0x00000001 , 0x000045b1 
+ 00030344  0x00007e92 jam  0x00000000 , 0x000009b2 
+ 00030345  0x00007e93 rtn 
+ 00030346  0x00007e96 bpatchx  0x000000e8 , 0x0000403d 
+ 00030347  0x00007e97 fetch  0x00000001 , 0x000009b9 
+ 00030348  0x00007e98 rtnne  0x00000000 
+ 00030349  0x00007e99 fetch  0x00000001 , 0x000009b2 
+ 00030350  0x00007e9a rtnne  0x00000000 
+ 00030351  0x00007e9c arg  0x000006be , 0x00000005 
+ 00030352  0x00007e9d arg  0x00004612 , 0x00000006 
+ 00030353  0x00007e9e call  0x00007ebe 
+ 00030354  0x00007ea0 arg  0x000005e6 , 0x00000005 
+ 00030355  0x00007ea1 arg  0x000009c6 , 0x00000006 
+ 00030356  0x00007ea2 call  0x00007ebc 
+ 00030357  0x00007ea4 arg  0x00000616 , 0x00000005 
+ 00030358  0x00007ea5 call  0x00007ec5 
+ 00030359  0x00007ea6 jam  0x00000001 , 0x00000616 
+ 00030360  0x00007ea8 call  0x00007a5d 
+ 00030361  0x00007ea9 jam  0x00000002 , 0x000009b2 
+ 00030362  0x00007eaa rtn 
+ 00030363  0x00007ead jam  0x00000001 , 0x000009b3 
+ 00030364  0x00007eae arg  0x00000a06 , 0x00000005 
+ 00030365  0x00007eaf arg  0x0000062e , 0x00000006 
+ 00030366  0x00007eb0 call  0x00007ebe 
+ 00030367  0x00007eb1 jam  0x00000001 , 0x000009b9 
+ 00030368  0x00007eb2 jam  0x00000000 , 0x000009b2 
+ 00030369  0x00007eb3 rtn 
+ 00030370  0x00007eb6 increase  0xffffffff , 0x00000007 
+ 00030371  0x00007eb7 nrtn  0x00000002 
+ 00030372  0x00007eb8 random  0x0000003f 
+ 00030373  0x00007eb9 istore  0x00000002 , 0x00000005 
+ 00030374  0x00007eba branch  0x000076a2 
+ 00030375  0x00007ebc increase  0xffffffff , 0x00000007 
+ 00030376  0x00007ebd nbranch  0x000076b3 , 0x00000002 
+ 00030377  0x00007ebe ifetch  0x00000004 , 0x00000011 
+ 00030378  0x00007ebf copy  0x0000003f , 0x00000002 
+ 00030379  0x00007ec0 ifetch  0x00000004 , 0x00000012 
+ 00030380  0x00007ec1 iflip  0x00000002 , 0x0000003f 
+ 00030381  0x00007ec2 nbranch  0x000076b1 , 0x00000005 
+ 00030382  0x00007ec3 increase  0x00000004 , 0x00000011 
+ 00030383  0x00007ec4 increase  0x00000004 , 0x00000012 
+ 00030384  0x00007ec5 branch  0x000076a7 
+ 00030385  0x00007ec7 disable  0x00000001 
+ 00030386  0x00007ec8 rtn 
+ 00030387  0x00007eca enable  0x00000001 
+ 00030388  0x00007ecb rtn 
+ 00030389  0x00007ed3 bpatchx  0x000000e9 , 0x0000403d 
+ 00030390  0x00007ed4 fetch  0x00000001 , 0x000009b0 
+ 00030391  0x00007ed5 rtn  0x00000034 
+ 00030392  0x00007ed6 call  0x000062bc 
+ 00030393  0x00007ed7 nrtn  0x00000034 
+ 00030394  0x00007ed8 jam  0x00000000 , 0x000009b0 
+ 00030395  0x00007ed9 fetch  0x00000001 , 0x000009ae 
+ 00030396  0x00007eda beq  0x00000003 , 0x000061fd 
+ 00030397  0x00007edb beq  0x00000005 , 0x0000621a 
+ 00030398  0x00007edc beq  0x00000007 , 0x00006225 
+ 00030399  0x00007edd beq  0x0000000b , 0x0000623a 
+ 00030400  0x00007ede beq  0x00000002 , 0x00007588 
+ 00030401  0x00007edf beq  0x00000004 , 0x000075f7 
+ 00030402  0x00007ee0 beq  0x00000009 , 0x00007617 
+ 00030403  0x00007ee1 beq  0x0000000a , 0x0000763a 
+ 00030404  0x00007ee2 beq  0x0000000c , 0x00007658 
+ 00030405  0x00007ee4 rtn 
+ 00030406  0x00007ee7 bpatchx  0x000000ea , 0x0000403d 
+ 00030407  0x00007ee8 fetch  0x00000001 , 0x000009b1 
+ 00030408  0x00007ee9 rtn  0x00000034 
+ 00030409  0x00007eea call  0x000062bc 
+ 00030410  0x00007eeb nrtn  0x00000034 
+ 00030411  0x00007eec jam  0x00000000 , 0x000009b1 
+ 00030412  0x00007eed fetch  0x00000001 , 0x000009af 
+ 00030413  0x00007eee beq  0x00000012 , 0x000061e0 
+ 00030414  0x00007eef beq  0x00000013 , 0x000061e5 
+ 00030415  0x00007ef0 beq  0x00000003 , 0x000061e9 
+ 00030416  0x00007ef1 beq  0x00000004 , 0x00007602 
+ 00030417  0x00007ef2 beq  0x00000014 , 0x000061ed 
+ 00030418  0x00007ef3 beq  0x00000007 , 0x000061fb 
+ 00030419  0x00007ef4 beq  0x0000000a , 0x0000763a 
+ 00030420  0x00007ef5 beq  0x0000000b , 0x00006239 
+ 00030421  0x00007ef6 beq  0x00000009 , 0x00007617 
+ 00030422  0x00007ef7 beq  0x00000015 , 0x00006233 
+ 00030423  0x00007ef8 rtn 
+ 00030424  0x00007efb jam  0x00000001 , 0x000009b1 
+ 00030425  0x00007efc rtn 
+ 00030426  0x00007eff jam  0x00000000 , 0x000009b1 
+ 00030427  0x00007f00 rtn 
+ 00030428  0x00007f02 bpatchx  0x000000eb , 0x0000403d 
+ 00030429  0x00007f03 fetch  0x00000001 , 0x0000465a 
+ 00030430  0x00007f04 rtn  0x00000034 
+ 00030431  0x00007f05 fetch  0x00000001 , 0x000009b2 
+ 00030432  0x00007f06 rtn  0x00000034 
+ 00030433  0x00007f07 increase  0x00000080 , 0x0000003f 
+ 00030434  0x00007f08 store  0x00000001 , 0x000009b2 
+ 00030435  0x00007f09 rtnbit1  0x00000007 
+ 00030436  0x00007f0a fetch  0x00000001 , 0x000005e3 
+ 00030437  0x00007f0b branch  0x000076e7 , 0x00000034 
+ 00030438  0x00007f0c branch  0x00007a68 
+ 00030439  0x00007f0f call  0x000078d3 
+ 00030440  0x00007f10 fetch  0x00000001 , 0x000009b2 
+ 00030441  0x00007f11 beq  0x00000001 , 0x00007684 
+ 00030442  0x00007f12 beq  0x00000002 , 0x0000769b 
+ 00030443  0x00007f13 rtn 
+ 00030444  0x00007f17 and  0x0000003f , 0x00000007 , 0x00000007 
+ 00030445  0x00007f18 rshift3  0x0000003f , 0x0000003f 
+ 00030446  0x00007f19 iadd  0x00000006 , 0x00000006 
+ 00030447  0x00007f1a ifetch  0x00000001 , 0x00000006 
+ 00030448  0x00007f1b qisolate0  0x0000003f 
+ 00030449  0x00007f1c rtn 
+ 00030450  0x00007f20 call  0x00007ebe 
+ 00030451  0x00007f21 call  0x00007ebe 
+ 00030452  0x00007f22 branch  0x00007ebe 
+ 00030453  0x00007f26 ifetch  0x00000008 , 0x00000006 
+ 00030454  0x00007f27 nrtn  0x00000034 
+ 00030455  0x00007f28 ifetch  0x00000008 , 0x00000006 
+ 00030456  0x00007f29 nrtn  0x00000034 
+ 00030457  0x00007f2a ifetch  0x00000008 , 0x00000006 
+ 00030458  0x00007f2b rtn 
+ 00030459  0x00007f31 ifetch  0x00000004 , 0x00000011 
+ 00030460  0x00007f32 iforce  0x00000002 
+ 00030461  0x00007f33 ifetch  0x00000004 , 0x00000012 
+ 00030462  0x00007f34 isub  0x00000002 , 0x0000003e 
+ 00030463  0x00007f35 nrtn  0x00000005 
+ 00030464  0x00007f36 increase  0x00000004 , 0x00000011 
+ 00030465  0x00007f37 increase  0x00000004 , 0x00000012 
+ 00030466  0x00007f38 loop  0x000076fb 
+ 00030467  0x00007f39 rtn 
+ 00030468  0x00007f3d force  0x00000006 , 0x00000039 
+ 00030469  0x00007f3e increase  0x00000014 , 0x00000011 
+ 00030470  0x00007f3f increase  0x00000014 , 0x00000012 
+ 00030471  0x00007f41 ifetch  0x00000004 , 0x00000012 
+ 00030472  0x00007f42 iforce  0x00000002 
+ 00030473  0x00007f43 ifetch  0x00000004 , 0x00000011 
+ 00030474  0x00007f44 isub  0x00000002 , 0x0000003f 
+ 00030475  0x00007f45 nrtn  0x00000002 
+ 00030476  0x00007f46 nrtn  0x00000034 
+ 00030477  0x00007f47 increase  0xfffffffc , 0x00000011 
+ 00030478  0x00007f48 increase  0xfffffffc , 0x00000012 
+ 00030479  0x00007f49 loop  0x00007707 
+ 00030480  0x00007f4a rtn 
+ 00030481  0x00007f4d force  0x00000006 , 0x00000039 
+ 00030482  0x00007f4e force  0x00000000 , 0x00000013 
+ 00030483  0x00007f50 ifetch  0x00000004 , 0x00000011 
+ 00030484  0x00007f51 iforce  0x00000002 
+ 00030485  0x00007f52 ifetch  0x00000004 , 0x00000012 
+ 00030486  0x00007f53 iadd  0x00000002 , 0x0000003f 
+ 00030487  0x00007f54 iadd  0x00000013 , 0x0000003f 
+ 00030488  0x00007f55 istore  0x00000004 , 0x00000005 
+ 00030489  0x00007f56 isolate1  0x00000020 , 0x0000003f 
+ 00030490  0x00007f57 setflag  0x00000001 , 0x00000000 , 0x00000013 
+ 00030491  0x00007f58 increase  0x00000004 , 0x00000011 
+ 00030492  0x00007f59 increase  0x00000004 , 0x00000012 
+ 00030493  0x00007f5a loop  0x00007713 
+ 00030494  0x00007f5b rtn 
+ 00030495  0x00007f5e force  0x00000006 , 0x00000039 
+ 00030496  0x00007f5f force  0x00000000 , 0x00000013 
+ 00030497  0x00007f61 ifetch  0x00000004 , 0x00000012 
+ 00030498  0x00007f62 iforce  0x00000002 
+ 00030499  0x00007f63 ifetch  0x00000004 , 0x00000011 
+ 00030500  0x00007f64 isub  0x00000002 , 0x0000003f 
+ 00030501  0x00007f65 isub  0x00000013 , 0x0000003f 
+ 00030502  0x00007f66 istore  0x00000004 , 0x00000005 
+ 00030503  0x00007f67 isolate1  0x00000020 , 0x0000003f 
+ 00030504  0x00007f68 setflag  0x00000001 , 0x00000000 , 0x00000013 
+ 00030505  0x00007f69 increase  0x00000004 , 0x00000011 
+ 00030506  0x00007f6a increase  0x00000004 , 0x00000012 
+ 00030507  0x00007f6b loop  0x00007721 
+ 00030508  0x00007f6c rtn 
+ 00030509  0x00007f6f force  0x00000006 , 0x00000039 
+ 00030510  0x00007f70 increase  0x00000014 , 0x00000011 
+ 00030511  0x00007f72 force  0x00000000 , 0x00000013 
+ 00030512  0x00007f74 ifetch  0x00000004 , 0x00000011 
+ 00030513  0x00007f75 isolate1  0x00000000 , 0x0000003f 
+ 00030514  0x00007f76 setflag  0x00000001 , 0x00000001 , 0x00000013 
+ 00030515  0x00007f77 rshift  0x0000003f , 0x0000003f 
+ 00030516  0x00007f78 isolate1  0x00000000 , 0x00000013 
+ 00030517  0x00007f79 setflag  0x00000001 , 0x0000001f , 0x0000003f 
+ 00030518  0x00007f7a istore  0x00000004 , 0x00000011 
+ 00030519  0x00007f7b increase  0xfffffffc , 0x00000011 
+ 00030520  0x00007f7c rshift  0x00000013 , 0x00000013 
+ 00030521  0x00007f7d loop  0x00007730 
+ 00030522  0x00007f7e rtn 
+ 00030523  0x00007f81 force  0x00000006 , 0x00000039 
+ 00030524  0x00007f82 force  0x00000000 , 0x00000013 
+ 00030525  0x00007f84 ifetch  0x00000004 , 0x00000011 
+ 00030526  0x00007f85 isolate1  0x0000001f , 0x0000003f 
+ 00030527  0x00007f86 setflag  0x00000001 , 0x00000001 , 0x00000013 
+ 00030528  0x00007f87 lshift  0x0000003f , 0x0000003f 
+ 00030529  0x00007f88 isolate1  0x00000000 , 0x00000013 
+ 00030530  0x00007f89 setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00030531  0x00007f8a istore  0x00000004 , 0x00000011 
+ 00030532  0x00007f8b increase  0x00000004 , 0x00000011 
+ 00030533  0x00007f8c rshift  0x00000013 , 0x00000013 
+ 00030534  0x00007f8d loop  0x0000773d 
+ 00030535  0x00007f8e rtn 
+ 00030536  0x00007f91 call  0x0000773b 
+ 00030537  0x00007f93 isolate1  0x00000000 , 0x00000013 
+ 00030538  0x00007f94 branch  0x00007751 , 0x00000001 
+ 00030539  0x00007f95 arg  0x00000886 , 0x00000012 
+ 00030540  0x00007f96 copy  0x00000011 , 0x00000013 
+ 00030541  0x00007f97 increase  0xffffffe8 , 0x00000011 
+ 00030542  0x00007f98 call  0x00007704 
+ 00030543  0x00007f99 nrtn  0x00000002 
+ 00030544  0x00007f9a copy  0x00000013 , 0x00000011 
+ 00030545  0x00007f9c increase  0xffffffe8 , 0x00000011 
+ 00030546  0x00007f9d arg  0x00000886 , 0x00000012 
+ 00030547  0x00007f9e copy  0x00000011 , 0x00000005 
+ 00030548  0x00007f9f branch  0x0000771f 
+ 00030549  0x00007fa3 call  0x00007711 
+ 00030550  0x00007fa4 copy  0x00000005 , 0x00000011 
+ 00030551  0x00007fa5 branch  0x00007749 
+ 00030552  0x00007fa8 call  0x0000771f 
+ 00030553  0x00007fa9 isolate0  0x00000000 , 0x00000013 
+ 00030554  0x00007faa rtn  0x00000001 
+ 00030555  0x00007fab arg  0x00000886 , 0x00000012 
+ 00030556  0x00007fac add  0x00000005 , 0xffffffe8 , 0x00000011 
+ 00030557  0x00007fad copy  0x00000011 , 0x00000005 
+ 00030558  0x00007fae branch  0x00007711 
+ 00030559  0x00007fb2 copy  0x00000005 , 0x0000000b 
+ 00030560  0x00007fb3 copy  0x00000011 , 0x00000030 
+ 00030561  0x00007fb4 arg  0x00000716 , 0x00000012 
+ 00030562  0x00007fb5 copy  0x00000012 , 0x00000005 
+ 00030563  0x00007fb6 add  0x00000011 , 0x00000018 , 0x00000006 
+ 00030564  0x00007fb7 ifetch  0x00000008 , 0x00000006 
+ 00030565  0x00007fb8 istore  0x00000008 , 0x00000005 
+ 00030566  0x00007fb9 istore  0x00000008 , 0x00000005 
+ 00030567  0x00007fba force  0x00000000 , 0x0000003f 
+ 00030568  0x00007fbb istore  0x00000008 , 0x00000005 
+ 00030569  0x00007fbc copy  0x0000000b , 0x00000005 
+ 00030570  0x00007fbd call  0x00007755 
+ 00030571  0x00007fbe arg  0x00000716 , 0x00000012 
+ 00030572  0x00007fbf copy  0x00000012 , 0x00000005 
+ 00030573  0x00007fc0 force  0x00000000 , 0x0000003f 
+ 00030574  0x00007fc1 istore  0x00000008 , 0x00000005 
+ 00030575  0x00007fc2 add  0x00000030 , 0x00000020 , 0x00000006 
+ 00030576  0x00007fc3 ifetch  0x00000008 , 0x00000006 
+ 00030577  0x00007fc4 istore  0x00000008 , 0x00000005 
+ 00030578  0x00007fc5 istore  0x00000008 , 0x00000005 
+ 00030579  0x00007fc6 copy  0x0000000b , 0x00000011 
+ 00030580  0x00007fc7 copy  0x00000011 , 0x00000005 
+ 00030581  0x00007fc8 call  0x00007755 
+ 00030582  0x00007fc9 arg  0x00000716 , 0x00000012 
+ 00030583  0x00007fca copy  0x00000012 , 0x00000005 
+ 00030584  0x00007fcb add  0x00000030 , 0x00000028 , 0x00000006 
+ 00030585  0x00007fcc ifetch  0x00000008 , 0x00000006 
+ 00030586  0x00007fcd istore  0x00000008 , 0x00000005 
+ 00030587  0x00007fce istore  0x00000008 , 0x00000005 
+ 00030588  0x00007fcf istore  0x00000008 , 0x00000005 
+ 00030589  0x00007fd0 copy  0x0000000b , 0x00000011 
+ 00030590  0x00007fd1 copy  0x00000011 , 0x00000005 
+ 00030591  0x00007fd2 branch  0x00007755 
+ 00030592  0x00007fd6 force  0x00000006 , 0x00000039 
+ 00030593  0x00007fd8 ifetch  0x00000004 , 0x00000006 
+ 00030594  0x00007fd9 iforce  0x0000002f 
+ 00030595  0x00007fda increase  0x00000001 , 0x00000038 
+ 00030596  0x00007fdb loop  0x00007781 
+ 00030597  0x00007fdc rtn 
+ 00030598  0x00007fe1 copy  0x00000005 , 0x0000000b 
+ 00030599  0x00007fe2 arg  0x000006e6 , 0x00000005 
+ 00030600  0x00007fe3 call  0x00007ec5 
+ 00030601  0x00007fe4 arg  0x000006e6 , 0x00000005 
+ 00030602  0x00007fe5 copy  0x00000011 , 0x00000006 
+ 00030603  0x00007fe6 force  0x00000000 , 0x00000038 
+ 00030604  0x00007fe7 call  0x00007780 
+ 00030605  0x00007fe8 copy  0x00000012 , 0x00000006 
+ 00030606  0x00007fe9 call  0x00007780 
+ 00030607  0x00007fea force  0x00000000 , 0x00000012 
+ 00030608  0x00007fec force  0x00000000 , 0x00000002 
+ 00030609  0x00007fed force  0x00000006 , 0x00000013 
+ 00030610  0x00007fef ifetch  0x00000004 , 0x00000005 
+ 00030611  0x00007ff0 iforce  0x00000011 
+ 00030612  0x00007ff1 copy  0x00000012 , 0x00000038 
+ 00030613  0x00007ff2 deposit  0x0000002f 
+ 00030614  0x00007ff3 copy  0x00000013 , 0x00000038 
+ 00030615  0x00007ff4 imul32  0x0000002f , 0x0000003f 
+ 00030616  0x00007ff5 iadd  0x00000011 , 0x0000003f 
+ 00030617  0x00007ff6 iadd  0x00000002 , 0x0000003f 
+ 00030618  0x00007ff7 istore  0x00000004 , 0x00000005 
+ 00030619  0x00007ff8 rshift32  0x0000003f , 0x00000002 
+ 00030620  0x00007ff9 increase  0x00000001 , 0x00000013 
+ 00030621  0x00007ffa compare  0x0000000c , 0x00000013 , 0x000000ff 
+ 00030622  0x00007ffb nbranch  0x00007792 , 0x00000001 
+ 00030623  0x00007ffc deposit  0x00000002 
+ 00030624  0x00007ffd istore  0x00000004 , 0x00000005 
+ 00030625  0x00007ffe increase  0xffffffe8 , 0x00000005 
+ 00030626  0x00007fff increase  0x00000001 , 0x00000012 
+ 00030627  0x00008000 compare  0x00000006 , 0x00000012 , 0x000000ff 
+ 00030628  0x00008001 nbranch  0x00007790 , 0x00000001 
+ 00030629  0x00008002 arg  0x000006e6 , 0x00000011 
+ 00030630  0x00008003 copy  0x0000000b , 0x00000005 
+ 00030631  0x00008004 branch  0x0000775f 
+ 00030632  0x00008008 copy  0x00000011 , 0x00000012 
+ 00030633  0x00008009 branch  0x00007786 
+ 00030634  0x0000800c copy  0x00000011 , 0x00000030 
+ 00030635  0x0000800e copy  0x00000030 , 0x00000011 
+ 00030636  0x0000800f ifetch  0x00000001 , 0x00000011 
+ 00030637  0x00008010 isolate1  0x00000000 , 0x0000003f 
+ 00030638  0x00008011 rtn  0x00000001 
+ 00030639  0x00008012 call  0x0000772d 
+ 00030640  0x00008013 ifetch  0x00000001 , 0x00000012 
+ 00030641  0x00008014 isolate0  0x00000000 , 0x0000003f 
+ 00030642  0x00008015 branch  0x000077ba , 0x00000001 
+ 00030643  0x00008016 arg  0x00000886 , 0x00000011 
+ 00030644  0x00008017 copy  0x00000012 , 0x00000005 
+ 00030645  0x00008018 call  0x00007711 
+ 00030646  0x00008019 ifetch  0x00000001 , 0x00000012 
+ 00030647  0x0000801a iadd  0x00000013 , 0x0000003f 
+ 00030648  0x0000801b istore  0x00000001 , 0x00000012 
+ 00030649  0x0000801c increase  0xffffffe8 , 0x00000012 
+ 00030650  0x0000801e add  0x00000012 , 0x00000018 , 0x00000011 
+ 00030651  0x0000801f force  0x00000007 , 0x00000039 
+ 00030652  0x00008020 call  0x0000772f 
+ 00030653  0x00008021 branch  0x000077ab 
+ 00030654  0x00008025 copy  0x00000005 , 0x0000000b 
+ 00030655  0x00008026 arg  0x00000746 , 0x00000005 
+ 00030656  0x00008027 call  0x00007ec5 
+ 00030657  0x00008028 force  0x00000000 , 0x0000003f 
+ 00030658  0x00008029 store  0x00000004 , 0x000006fe 
+ 00030659  0x0000802a store  0x00000004 , 0x0000075e 
+ 00030660  0x0000802b jam  0x00000001 , 0x00000746 
+ 00030661  0x0000802c arg  0x000006e6 , 0x00000005 
+ 00030662  0x0000802d call  0x00007ec5 
+ 00030663  0x0000802e arg  0x00000886 , 0x00000006 
+ 00030664  0x0000802f arg  0x00000716 , 0x00000005 
+ 00030665  0x00008030 call  0x00007ebe 
+ 00030666  0x00008031 copy  0x00000011 , 0x00000006 
+ 00030667  0x00008032 arg  0x0000072e , 0x00000005 
+ 00030668  0x00008033 call  0x00007ebe 
+ 00030669  0x00008035 arg  0x0000072e , 0x00000006 
+ 00030670  0x00008036 call  0x000076f5 
+ 00030671  0x00008037 branch  0x000077f6 , 0x00000034 
+ 00030672  0x00008038 arg  0x0000072e , 0x00000011 
+ 00030673  0x00008039 arg  0x00000746 , 0x00000012 
+ 00030674  0x0000803a call  0x000077aa 
+ 00030675  0x0000803c arg  0x00000716 , 0x00000011 
+ 00030676  0x0000803d arg  0x000006e6 , 0x00000012 
+ 00030677  0x0000803e call  0x000077aa 
+ 00030678  0x0000803f arg  0x0000072e , 0x00000011 
+ 00030679  0x00008040 arg  0x00000716 , 0x00000012 
+ 00030680  0x00008041 call  0x00007704 
+ 00030681  0x00008042 branch  0x000077e8 , 0x00000002 
+ 00030682  0x00008043 arg  0x00000716 , 0x00000011 
+ 00030683  0x00008044 arg  0x0000072e , 0x00000012 
+ 00030684  0x00008045 copy  0x00000011 , 0x00000005 
+ 00030685  0x00008046 call  0x0000771f 
+ 00030686  0x00008047 arg  0x00000746 , 0x00000011 
+ 00030687  0x00008048 arg  0x000006e6 , 0x00000012 
+ 00030688  0x00008049 copy  0x00000012 , 0x00000005 
+ 00030689  0x0000804a call  0x00007711 
+ 00030690  0x0000804b ifetch  0x00000001 , 0x00000011 
+ 00030691  0x0000804c iadd  0x00000013 , 0x00000013 
+ 00030692  0x0000804d ifetch  0x00000001 , 0x00000012 
+ 00030693  0x0000804e iadd  0x00000013 , 0x0000003f 
+ 00030694  0x0000804f istore  0x00000001 , 0x00000012 
+ 00030695  0x00008050 branch  0x000077cd 
+ 00030696  0x00008052 arg  0x0000072e , 0x00000011 
+ 00030697  0x00008053 arg  0x00000716 , 0x00000012 
+ 00030698  0x00008054 copy  0x00000011 , 0x00000005 
+ 00030699  0x00008055 call  0x0000771f 
+ 00030700  0x00008056 arg  0x000006e6 , 0x00000011 
+ 00030701  0x00008057 arg  0x00000746 , 0x00000012 
+ 00030702  0x00008058 copy  0x00000012 , 0x00000005 
+ 00030703  0x00008059 call  0x00007711 
+ 00030704  0x0000805a ifetch  0x00000001 , 0x00000011 
+ 00030705  0x0000805b iadd  0x00000013 , 0x00000013 
+ 00030706  0x0000805c ifetch  0x00000001 , 0x00000012 
+ 00030707  0x0000805d iadd  0x00000013 , 0x0000003f 
+ 00030708  0x0000805e istore  0x00000001 , 0x00000012 
+ 00030709  0x0000805f branch  0x000077cd 
+ 00030710  0x00008061 arg  0x00000746 , 0x00000005 
+ 00030711  0x00008062 call  0x00007ec5 
+ 00030712  0x00008063 fetch  0x00000001 , 0x000006fe 
+ 00030713  0x00008064 store  0x00000001 , 0x00000746 
+ 00030714  0x00008065 store  0x00000001 , 0x0000074e 
+ 00030715  0x00008066 arg  0x00000746 , 0x00000011 
+ 00030716  0x00008067 arg  0x000006e6 , 0x00000012 
+ 00030717  0x00008068 copy  0x00000012 , 0x00000005 
+ 00030718  0x00008069 call  0x00007755 
+ 00030719  0x0000806a arg  0x00000886 , 0x00000011 
+ 00030720  0x0000806b arg  0x000006e6 , 0x00000012 
+ 00030721  0x0000806c copy  0x0000000b , 0x00000005 
+ 00030722  0x0000806d branch  0x00007758 
+ 00030723  0x00008073 arg  0x000006a6 , 0x00000011 
+ 00030724  0x00008074 arg  0x0000075e , 0x00000005 
+ 00030725  0x00008075 call  0x000077a8 
+ 00030726  0x00008076 arg  0x0000075e , 0x00000011 
+ 00030727  0x00008077 arg  0x00000776 , 0x00000005 
+ 00030728  0x00008078 call  0x000077a8 
+ 00030729  0x00008079 arg  0x0000089e , 0x00000011 
+ 00030730  0x0000807a arg  0x00000776 , 0x00000012 
+ 00030731  0x0000807b arg  0x00000776 , 0x00000005 
+ 00030732  0x0000807c call  0x00007786 
+ 00030733  0x0000807d arg  0x00000676 , 0x00000011 
+ 00030734  0x0000807e arg  0x0000075e , 0x00000005 
+ 00030735  0x0000807f call  0x000077a8 
+ 00030736  0x00008080 arg  0x0000075e , 0x00000006 
+ 00030737  0x00008081 arg  0x0000072e , 0x00000005 
+ 00030738  0x00008082 call  0x00007ebe 
+ 00030739  0x00008083 arg  0x0000072e , 0x00000011 
+ 00030740  0x00008084 call  0x00007748 
+ 00030741  0x00008085 arg  0x0000075e , 0x00000011 
+ 00030742  0x00008086 arg  0x0000072e , 0x00000012 
+ 00030743  0x00008087 arg  0x0000075e , 0x00000005 
+ 00030744  0x00008088 call  0x00007755 
+ 00030745  0x00008089 arg  0x0000075e , 0x00000011 
+ 00030746  0x0000808a arg  0x00000776 , 0x00000012 
+ 00030747  0x0000808b arg  0x0000075e , 0x00000005 
+ 00030748  0x0000808c call  0x00007755 
+ 00030749  0x0000808d arg  0x00000676 , 0x00000006 
+ 00030750  0x0000808e arg  0x0000072e , 0x00000005 
+ 00030751  0x0000808f call  0x00007ebe 
+ 00030752  0x00008090 arg  0x0000068e , 0x00000011 
+ 00030753  0x00008091 arg  0x00000776 , 0x00000005 
+ 00030754  0x00008092 call  0x000077a8 
+ 00030755  0x00008093 arg  0x0000072e , 0x00000011 
+ 00030756  0x00008094 call  0x00007748 
+ 00030757  0x00008095 arg  0x0000072e , 0x00000011 
+ 00030758  0x00008096 call  0x00007748 
+ 00030759  0x00008097 arg  0x0000072e , 0x00000011 
+ 00030760  0x00008098 arg  0x00000776 , 0x00000012 
+ 00030761  0x00008099 arg  0x0000072e , 0x00000005 
+ 00030762  0x0000809a call  0x00007786 
+ 00030763  0x0000809b arg  0x00000776 , 0x00000011 
+ 00030764  0x0000809c arg  0x00000746 , 0x00000005 
+ 00030765  0x0000809d call  0x000077a8 
+ 00030766  0x0000809e arg  0x00000746 , 0x00000011 
+ 00030767  0x0000809f call  0x00007748 
+ 00030768  0x000080a0 arg  0x00000746 , 0x00000011 
+ 00030769  0x000080a1 call  0x00007748 
+ 00030770  0x000080a2 arg  0x00000746 , 0x00000011 
+ 00030771  0x000080a3 call  0x00007748 
+ 00030772  0x000080a4 arg  0x0000068e , 0x00000006 
+ 00030773  0x000080a5 arg  0x00000776 , 0x00000005 
+ 00030774  0x000080a6 call  0x00007ebe 
+ 00030775  0x000080a7 arg  0x00000776 , 0x00000011 
+ 00030776  0x000080a8 call  0x00007748 
+ 00030777  0x000080a9 arg  0x00000776 , 0x00000011 
+ 00030778  0x000080aa arg  0x000006a6 , 0x00000012 
+ 00030779  0x000080ab arg  0x000006a6 , 0x00000005 
+ 00030780  0x000080ac call  0x00007786 
+ 00030781  0x000080ad arg  0x0000075e , 0x00000011 
+ 00030782  0x000080ae arg  0x00000776 , 0x00000005 
+ 00030783  0x000080af call  0x000077a8 
+ 00030784  0x000080b0 arg  0x00000776 , 0x00000011 
+ 00030785  0x000080b1 arg  0x0000072e , 0x00000012 
+ 00030786  0x000080b2 arg  0x00000776 , 0x00000005 
+ 00030787  0x000080b3 call  0x00007758 
+ 00030788  0x000080b4 arg  0x00000776 , 0x00000011 
+ 00030789  0x000080b5 arg  0x0000072e , 0x00000012 
+ 00030790  0x000080b6 arg  0x00000676 , 0x00000005 
+ 00030791  0x000080b7 call  0x00007758 
+ 00030792  0x000080b8 arg  0x0000072e , 0x00000011 
+ 00030793  0x000080b9 arg  0x00000676 , 0x00000012 
+ 00030794  0x000080ba arg  0x00000776 , 0x00000005 
+ 00030795  0x000080bb call  0x00007758 
+ 00030796  0x000080bc arg  0x00000776 , 0x00000011 
+ 00030797  0x000080bd arg  0x0000075e , 0x00000012 
+ 00030798  0x000080be arg  0x00000776 , 0x00000005 
+ 00030799  0x000080bf call  0x00007786 
+ 00030800  0x000080c0 arg  0x00000776 , 0x00000011 
+ 00030801  0x000080c1 arg  0x00000746 , 0x00000012 
+ 00030802  0x000080c2 arg  0x0000068e , 0x00000005 
+ 00030803  0x000080c3 branch  0x00007758 
+ 00030804  0x000080c8 arg  0x00000616 , 0x00000011 
+ 00030805  0x000080c9 arg  0x0000078e , 0x00000005 
+ 00030806  0x000080ca call  0x000077a8 
+ 00030807  0x000080cb arg  0x00000676 , 0x00000011 
+ 00030808  0x000080cc arg  0x0000078e , 0x00000012 
+ 00030809  0x000080cd arg  0x00000746 , 0x00000005 
+ 00030810  0x000080ce call  0x00007786 
+ 00030811  0x000080cf arg  0x00000616 , 0x00000011 
+ 00030812  0x000080d0 arg  0x0000078e , 0x00000012 
+ 00030813  0x000080d1 arg  0x0000078e , 0x00000005 
+ 00030814  0x000080d2 call  0x00007786 
+ 00030815  0x000080d3 arg  0x0000068e , 0x00000011 
+ 00030816  0x000080d4 arg  0x0000078e , 0x00000012 
+ 00030817  0x000080d5 arg  0x0000072e , 0x00000005 
+ 00030818  0x000080d6 call  0x00007786 
+ 00030819  0x000080d7 arg  0x000006a6 , 0x00000011 
+ 00030820  0x000080d8 arg  0x0000078e , 0x00000005 
+ 00030821  0x000080d9 call  0x000077a8 
+ 00030822  0x000080da arg  0x000005e6 , 0x00000011 
+ 00030823  0x000080db arg  0x0000078e , 0x00000012 
+ 00030824  0x000080dc arg  0x0000075e , 0x00000005 
+ 00030825  0x000080dd call  0x00007786 
+ 00030826  0x000080de arg  0x000006a6 , 0x00000011 
+ 00030827  0x000080df arg  0x0000078e , 0x00000012 
+ 00030828  0x000080e0 arg  0x0000078e , 0x00000005 
+ 00030829  0x000080e1 call  0x00007786 
+ 00030830  0x000080e2 arg  0x000005fe , 0x00000011 
+ 00030831  0x000080e3 arg  0x0000078e , 0x00000012 
+ 00030832  0x000080e4 arg  0x00000776 , 0x00000005 
+ 00030833  0x000080e5 call  0x00007786 
+ 00030834  0x000080e6 arg  0x00000746 , 0x00000011 
+ 00030835  0x000080e7 arg  0x0000075e , 0x00000012 
+ 00030836  0x000080e8 arg  0x0000078e , 0x00000005 
+ 00030837  0x000080e9 call  0x00007758 
+ 00030838  0x000080ea arg  0x00000746 , 0x00000011 
+ 00030839  0x000080eb arg  0x0000075e , 0x00000012 
+ 00030840  0x000080ec arg  0x00000746 , 0x00000005 
+ 00030841  0x000080ed call  0x00007755 
+ 00030842  0x000080ee arg  0x0000072e , 0x00000011 
+ 00030843  0x000080ef arg  0x00000776 , 0x00000012 
+ 00030844  0x000080f0 arg  0x0000075e , 0x00000005 
+ 00030845  0x000080f1 call  0x00007758 
+ 00030846  0x000080f2 arg  0x0000072e , 0x00000011 
+ 00030847  0x000080f3 arg  0x00000776 , 0x00000012 
+ 00030848  0x000080f4 arg  0x0000072e , 0x00000005 
+ 00030849  0x000080f5 call  0x00007755 
+ 00030850  0x000080f6 arg  0x0000072e , 0x00000011 
+ 00030851  0x000080f7 arg  0x0000078e , 0x00000012 
+ 00030852  0x000080f8 arg  0x0000072e , 0x00000005 
+ 00030853  0x000080f9 call  0x00007786 
+ 00030854  0x000080fa arg  0x000006a6 , 0x00000011 
+ 00030855  0x000080fb arg  0x00000616 , 0x00000012 
+ 00030856  0x000080fc arg  0x00000776 , 0x00000005 
+ 00030857  0x000080fd call  0x00007786 
+ 00030858  0x000080fe arg  0x00000776 , 0x00000011 
+ 00030859  0x000080ff arg  0x0000078e , 0x00000012 
+ 00030860  0x00008100 arg  0x000006a6 , 0x00000005 
+ 00030861  0x00008101 call  0x00007786 
+ 00030862  0x00008102 arg  0x0000078e , 0x00000011 
+ 00030863  0x00008103 arg  0x0000078e , 0x00000005 
+ 00030864  0x00008104 call  0x000077a8 
+ 00030865  0x00008105 arg  0x0000078e , 0x00000011 
+ 00030866  0x00008106 arg  0x00000746 , 0x00000012 
+ 00030867  0x00008107 arg  0x00000776 , 0x00000005 
+ 00030868  0x00008108 call  0x00007786 
+ 00030869  0x00008109 arg  0x0000078e , 0x00000011 
+ 00030870  0x0000810a arg  0x0000072e , 0x00000012 
+ 00030871  0x0000810b arg  0x0000072e , 0x00000005 
+ 00030872  0x0000810c call  0x00007786 
+ 00030873  0x0000810d arg  0x0000075e , 0x00000011 
+ 00030874  0x0000810e arg  0x00000676 , 0x00000005 
+ 00030875  0x0000810f call  0x000077a8 
+ 00030876  0x00008110 arg  0x00000676 , 0x00000011 
+ 00030877  0x00008111 arg  0x00000776 , 0x00000012 
+ 00030878  0x00008112 arg  0x00000676 , 0x00000005 
+ 00030879  0x00008113 call  0x00007758 
+ 00030880  0x00008114 arg  0x00000676 , 0x00000006 
+ 00030881  0x00008115 arg  0x0000078e , 0x00000005 
+ 00030882  0x00008116 call  0x00007ebe 
+ 00030883  0x00008117 arg  0x0000078e , 0x00000011 
+ 00030884  0x00008118 call  0x00007748 
+ 00030885  0x00008119 arg  0x00000776 , 0x00000011 
+ 00030886  0x0000811a arg  0x0000078e , 0x00000012 
+ 00030887  0x0000811b arg  0x00000776 , 0x00000005 
+ 00030888  0x0000811c call  0x00007758 
+ 00030889  0x0000811d arg  0x00000776 , 0x00000011 
+ 00030890  0x0000811e arg  0x0000075e , 0x00000012 
+ 00030891  0x0000811f arg  0x0000075e , 0x00000005 
+ 00030892  0x00008120 call  0x00007786 
+ 00030893  0x00008121 arg  0x0000075e , 0x00000011 
+ 00030894  0x00008122 arg  0x0000072e , 0x00000012 
+ 00030895  0x00008123 arg  0x0000068e , 0x00000005 
+ 00030896  0x00008124 call  0x00007758 
+ 00030897  0x00008125 arg  0x0000068e , 0x00000011 
+ 00030898  0x00008126 arg  0x00000886 , 0x00000012 
+ 00030899  0x00008127 arg  0x0000068e , 0x00000005 
+ 00030900  0x00008128 force  0x00000000 , 0x00000013 
+ 00030901  0x00008129 fetch  0x00000001 , 0x0000068e 
+ 00030902  0x0000812a isolate1  0x00000000 , 0x0000003f 
+ 00030903  0x0000812b call  0x00007711 , 0x00000001 
+ 00030904  0x0000812c copy  0x00000013 , 0x00000030 
+ 00030905  0x0000812d arg  0x0000068e , 0x00000011 
+ 00030906  0x0000812e call  0x0000772d 
+ 00030907  0x0000812f fetch  0x00000001 , 0x000006a5 
+ 00030908  0x00008130 isolate1  0x00000000 , 0x00000030 
+ 00030909  0x00008131 setflag  0x00000001 , 0x00000007 , 0x0000003f 
+ 00030910  0x00008132 store  0x00000001 , 0x000006a5 
+ 00030911  0x00008133 rtn 
+ 00030912  0x00008138 fetch  0x00000001 , 0x000005e3 
+ 00030913  0x00008139 increase  0xffffffff , 0x0000003f 
+ 00030914  0x0000813a nrtn  0x00000002 
+ 00030915  0x0000813b store  0x00000001 , 0x000005e3 
+ 00030916  0x0000813c fetch  0x00000001 , 0x000005e2 
+ 00030917  0x0000813d call  0x00007803 , 0x00000034 
+ 00030918  0x0000813e fetch  0x00000001 , 0x000005e3 
+ 00030919  0x0000813f arg  0x000006be , 0x00000006 
+ 00030920  0x00008140 call  0x000076ec 
+ 00030921  0x00008141 branch  0x000078c0 , 0x00000001 
+ 00030922  0x00008142 fetch  0x00000001 , 0x000005e2 
+ 00030923  0x00008143 nbranch  0x000078ce , 0x00000034 
+ 00030924  0x00008144 call  0x00007854 
+ 00030925  0x00008145 branch  0x000078c0 
+ 00030926  0x00008147 jam  0x00000000 , 0x000005e2 
+ 00030927  0x00008148 arg  0x000005e6 , 0x00000006 
+ 00030928  0x00008149 arg  0x00000676 , 0x00000005 
+ 00030929  0x0000814a call  0x000076f2 
+ 00030930  0x0000814b branch  0x000078c0 
+ 00030931  0x0000814f arg  0x000006a6 , 0x00000011 
+ 00030932  0x00008150 arg  0x00000776 , 0x00000005 
+ 00030933  0x00008151 call  0x000077be 
+ 00030934  0x00008152 arg  0x00000776 , 0x00000011 
+ 00030935  0x00008153 arg  0x0000072e , 0x00000005 
+ 00030936  0x00008154 call  0x000077a8 
+ 00030937  0x00008155 arg  0x00000676 , 0x00000011 
+ 00030938  0x00008156 arg  0x0000072e , 0x00000012 
+ 00030939  0x00008157 arg  0x0000062e , 0x00000005 
+ 00030940  0x00008158 call  0x00007786 
+ 00030941  0x00008159 arg  0x00000776 , 0x00000011 
+ 00030942  0x0000815a arg  0x0000072e , 0x00000012 
+ 00030943  0x0000815b arg  0x0000075e , 0x00000005 
+ 00030944  0x0000815c call  0x00007786 
+ 00030945  0x0000815d arg  0x0000068e , 0x00000011 
+ 00030946  0x0000815e arg  0x0000075e , 0x00000012 
+ 00030947  0x0000815f arg  0x00000646 , 0x00000005 
+ 00030948  0x00008160 branch  0x00007786 
+ 00030949  0x00008165 ifetch  0x00000004 , 0x00000006 
+ 00030950  0x00008166 force  0x00000004 , 0x00000011 
+ 00030951  0x00008167 increase  0x00000003 , 0x00000005 
+ 00030952  0x00008169 istore  0x00000001 , 0x00000005 
+ 00030953  0x0000816a rshift8  0x0000003f , 0x0000003f 
+ 00030954  0x0000816b increase  0xfffffffe , 0x00000005 
+ 00030955  0x0000816c increase  0xffffffff , 0x00000011 
+ 00030956  0x0000816d nbranch  0x000078e8 , 0x00000005 
+ 00030957  0x0000816e increase  0x00000005 , 0x00000005 
+ 00030958  0x0000816f loop  0x000078e5 
+ 00030959  0x00008170 rtn 
+ 00030960  0x00008174 lshift2  0x00000007 , 0x0000003f 
+ 00030961  0x00008175 iadd  0x0000000b , 0x00000006 
+ 00030962  0x00008176 ifetch  0x00000004 , 0x00000006 
+ 00030963  0x00008177 rtn 
+ 00030964  0x0000817a force  0x00000010 , 0x00000030 
+ 00030965  0x0000817b arg  0x000005e6 , 0x0000000b 
+ 00030966  0x0000817d add  0x00000030 , 0xfffffff9 , 0x00000007 
+ 00030967  0x0000817e call  0x000078f0 
+ 00030968  0x0000817f iforce  0x00000002 
+ 00030969  0x00008180 add  0x00000030 , 0xfffffff0 , 0x00000007 
+ 00030970  0x00008181 call  0x000078f0 
+ 00030971  0x00008182 iadd  0x00000002 , 0x00000002 
+ 00030972  0x00008183 add  0x00000030 , 0xfffffffe , 0x00000007 
+ 00030973  0x00008184 call  0x000078f0 
+ 00030974  0x00008185 shasx  0x0000003f , 0x00000001 , 0x0000003f 
+ 00030975  0x00008186 iadd  0x00000002 , 0x00000002 
+ 00030976  0x00008187 add  0x00000030 , 0xfffffff1 , 0x00000007 
+ 00030977  0x00008188 call  0x000078f0 
+ 00030978  0x00008189 shasx  0x0000003f , 0x00000000 , 0x0000003f 
+ 00030979  0x0000818a iadd  0x00000002 , 0x00000002 
+ 00030980  0x0000818b lshift2  0x00000030 , 0x0000003f 
+ 00030981  0x0000818c iadd  0x0000000b , 0x00000005 
+ 00030982  0x0000818d istoret  0x00000004 , 0x00000005 
+ 00030983  0x0000818e increase  0x00000001 , 0x00000030 
+ 00030984  0x0000818f compare  0x00000040 , 0x00000030 , 0x000000ff 
+ 00030985  0x00008190 nbranch  0x000078f6 , 0x00000001 
+ 00030986  0x00008191 rtn 
+ 00030987  0x00008195 arg  0x000008fe , 0x00000006 
+ 00030988  0x00008196 force  0x00000007 , 0x00000038 
+ 00030989  0x00008198 ifetch  0x00000004 , 0x00000006 
+ 00030990  0x00008199 iforce  0x0000002f 
+ 00030991  0x0000819a increase  0xffffffff , 0x00000038 
+ 00030992  0x0000819b branch  0x0000790d , 0x00000002 
+ 00030993  0x0000819c rtn 
+ 00030994  0x0000819f bpatchx  0x000000ec , 0x0000403d 
+ 00030995  0x000081a0 call  0x000078f4 
+ 00030996  0x000081a1 arg  0x000006e6 , 0x00000005 
+ 00030997  0x000081a2 force  0x00000000 , 0x00000038 
+ 00030998  0x000081a4 deposit  0x0000002f 
+ 00030999  0x000081a5 istore  0x00000004 , 0x00000005 
+ 00031000  0x000081a6 increase  0x00000001 , 0x00000038 
+ 00031001  0x000081a7 compare  0x00000008 , 0x00000038 , 0x000000ff 
+ 00031002  0x000081a8 nbranch  0x00007916 , 0x00000001 
+ 00031003  0x000081a9 call  0x000074b9 
+ 00031004  0x000081aa arg  0x00008700 , 0x0000000b 
+ 00031005  0x000081ab arg  0x000005e6 , 0x00000030 
+ 00031006  0x000081ac force  0x00000040 , 0x00000039 
+ 00031007  0x000081ae ifetcht  0x00000004 , 0x00000030 
+ 00031008  0x000081af ifetch  0x00000004 , 0x0000000b 
+ 00031009  0x000081b0 increase  0x00000004 , 0x0000000b 
+ 00031010  0x000081b1 increase  0x00000004 , 0x00000030 
+ 00031011  0x000081b2 iadd  0x00000002 , 0x0000003f 
+ 00031012  0x000081b3 force  0x00000007 , 0x00000038 
+ 00031013  0x000081b4 iadd  0x0000002f , 0x00000002 
+ 00031014  0x000081b5 force  0x00000004 , 0x00000038 
+ 00031015  0x000081b6 shasx  0x0000002f , 0x00000003 , 0x0000003f 
+ 00031016  0x000081b7 iadd  0x00000002 , 0x00000002 
+ 00031017  0x000081b8 force  0x00000005 , 0x00000038 
+ 00031018  0x000081b9 deposit  0x0000002f 
+ 00031019  0x000081ba force  0x00000006 , 0x00000038 
+ 00031020  0x000081bb ixor  0x0000002f , 0x0000003f 
+ 00031021  0x000081bc force  0x00000004 , 0x00000038 
+ 00031022  0x000081bd iand  0x0000002f , 0x0000003f 
+ 00031023  0x000081be force  0x00000006 , 0x00000038 
+ 00031024  0x000081bf ixor  0x0000002f , 0x0000003f 
+ 00031025  0x000081c0 iadd  0x00000002 , 0x00000002 
+ 00031026  0x000081c1 force  0x00000007 , 0x00000038 
+ 00031027  0x000081c2 copy  0x00000002 , 0x0000002f 
+ 00031028  0x000081c3 force  0x00000003 , 0x00000038 
+ 00031029  0x000081c4 deposit  0x0000002f 
+ 00031030  0x000081c5 iadd  0x00000002 , 0x0000002f 
+ 00031031  0x000081c6 force  0x00000000 , 0x00000038 
+ 00031032  0x000081c7 deposit  0x0000002f 
+ 00031033  0x000081c8 force  0x00000001 , 0x00000038 
+ 00031034  0x000081c9 iand  0x0000002f , 0x00000002 
+ 00031035  0x000081ca ior  0x0000002f , 0x0000003f 
+ 00031036  0x000081cb force  0x00000002 , 0x00000038 
+ 00031037  0x000081cc iand  0x0000002f , 0x0000003f 
+ 00031038  0x000081cd ior  0x00000002 , 0x00000002 
+ 00031039  0x000081ce force  0x00000000 , 0x00000038 
+ 00031040  0x000081cf shasx  0x0000002f , 0x00000002 , 0x0000003f 
+ 00031041  0x000081d0 iadd  0x00000002 , 0x0000003f 
+ 00031042  0x000081d1 force  0x00000007 , 0x00000038 
+ 00031043  0x000081d2 iadd  0x0000002f , 0x0000002f 
+ 00031044  0x000081d3 regexrot 
+ 00031045  0x000081d4 loop  0x0000791f 
+ 00031046  0x000081d5 arg  0x000006e6 , 0x00000006 
+ 00031047  0x000081d6 force  0x00000000 , 0x00000038 
+ 00031048  0x000081d8 ifetch  0x00000004 , 0x00000006 
+ 00031049  0x000081d9 iadd  0x0000002f , 0x0000002f 
+ 00031050  0x000081da increase  0x00000001 , 0x00000038 
+ 00031051  0x000081db compare  0x00000008 , 0x00000038 , 0x000000ff 
+ 00031052  0x000081dc nbranch  0x00007948 , 0x00000001 
+ 00031053  0x000081dd branch  0x000074bd 
+ 00031054  0x000081e1 arg  0x00000a3e , 0x00000005 
+ 00031055  0x000081e2 force  0x00000007 , 0x00000038 
+ 00031056  0x000081e4 deposit  0x0000002f 
+ 00031057  0x000081e5 istore  0x00000004 , 0x00000005 
+ 00031058  0x000081e6 increase  0xffffffff , 0x00000038 
+ 00031059  0x000081e7 branch  0x00007950 , 0x00000002 
+ 00031060  0x000081e8 rtn 
+ 00031061  0x000081ec arg  0x000005e6 , 0x00000005 
+ 00031062  0x000081ed increase  0xfffffffc , 0x00000006 
+ 00031063  0x000081ee sub  0x00000039 , 0x00000010 , 0x00000011 
+ 00031064  0x000081f0 ifetch  0x00000004 , 0x00000006 
+ 00031065  0x000081f1 ixor  0x00000002 , 0x0000003f 
+ 00031066  0x000081f2 istore  0x00000004 , 0x00000005 
+ 00031067  0x000081f3 increase  0xfffffff8 , 0x00000006 
+ 00031068  0x000081f4 loop  0x00007958 
+ 00031069  0x000081f5 copy  0x00000011 , 0x00000039 
+ 00031070  0x000081f6 deposit  0x00000002 
+ 00031071  0x000081f8 istore  0x00000004 , 0x00000005 
+ 00031072  0x000081f9 loop  0x0000795f 
+ 00031073  0x000081fa rtn 
+ 00031074  0x000081fd call  0x00007967 
+ 00031075  0x000081fe call  0x0000794e 
+ 00031076  0x000081ff branch  0x0000798d 
+ 00031077  0x00008202 call  0x00007967 
+ 00031078  0x00008203 branch  0x0000798d 
+ 00031079  0x00008206 arg  0x000009de , 0x00000006 
+ 00031080  0x00008207 arg  0x000005e6 , 0x00000005 
+ 00031081  0x00008208 force  0x00000006 , 0x00000039 
+ 00031082  0x00008209 call  0x00007a71 
+ 00031083  0x0000820a arg  0x00004642 , 0x00000006 
+ 00031084  0x0000820b force  0x00000006 , 0x00000039 
+ 00031085  0x0000820c call  0x00007a71 
+ 00031086  0x0000820d arg  0x00000a3e , 0x00000006 
+ 00031087  0x0000820e call  0x00007a70 
+ 00031088  0x0000820f call  0x0000790b 
+ 00031089  0x00008210 call  0x00007912 
+ 00031090  0x00008211 arg  0x00000a2e , 0x00000006 
+ 00031091  0x00008212 arg  0x000005e6 , 0x00000005 
+ 00031092  0x00008213 branch  0x00007984 
+ 00031093  0x00008216 arg  0x00004642 , 0x00000006 
+ 00031094  0x00008217 arg  0x000005e6 , 0x00000005 
+ 00031095  0x00008218 force  0x00000006 , 0x00000039 
+ 00031096  0x00008219 call  0x00007a71 
+ 00031097  0x0000821a arg  0x000009de , 0x00000006 
+ 00031098  0x0000821b force  0x00000006 , 0x00000039 
+ 00031099  0x0000821c call  0x00007a71 
+ 00031100  0x0000821d arg  0x00000a2e , 0x00000006 
+ 00031101  0x0000821e call  0x00007a70 
+ 00031102  0x0000821f call  0x0000790b 
+ 00031103  0x00008220 call  0x00007912 
+ 00031104  0x00008221 arg  0x00000a3e , 0x00000006 
+ 00031105  0x00008222 arg  0x000005e6 , 0x00000005 
+ 00031106  0x00008223 call  0x00007984 
+ 00031107  0x00008224 branch  0x0000798d 
+ 00031108  0x00008227 call  0x00007a70 
+ 00031109  0x00008228 setarg  0x00800000 
+ 00031110  0x00008229 lshift8  0x0000003f , 0x0000003f 
+ 00031111  0x0000822a istore  0x00000004 , 0x00000005 
+ 00031112  0x0000822b force  0x00000005 , 0x00000039 
+ 00031113  0x0000822c call  0x00007ec6 
+ 00031114  0x0000822d setarg  0x00000280 
+ 00031115  0x0000822e istore  0x00000004 , 0x00000005 
+ 00031116  0x0000822f branch  0x00007912 
+ 00031117  0x00008231 fetch  0x00000004 , 0x00000a3e 
+ 00031118  0x00008233 arg  0x000003e8 , 0x00000011 
+ 00031119  0x00008234 idiv  0x00000011 
+ 00031120  0x00008235 call  0x00007f86 
+ 00031121  0x00008236 remainder  0x0000003f 
+ 00031122  0x00008237 store  0x00000004 , 0x000009ba 
+ 00031123  0x00008238 quotient  0x0000003f 
+ 00031124  0x00008239 arg  0x000003e8 , 0x00000011 
+ 00031125  0x0000823a idiv  0x00000011 
+ 00031126  0x0000823b call  0x00007f86 
+ 00031127  0x0000823c remainder  0x0000003f 
+ 00031128  0x0000823d arg  0x000003e8 , 0x00000011 
+ 00031129  0x0000823e imul32  0x00000011 , 0x0000003f 
+ 00031130  0x0000823f fetcht  0x00000004 , 0x000009ba 
+ 00031131  0x00008240 iadd  0x00000002 , 0x0000003f 
+ 00031132  0x00008241 store  0x00000004 , 0x000009ba 
+ 00031133  0x00008242 rtn 
+ 00031134  0x00008245 jam  0x00000000 , 0x00004664 
+ 00031135  0x00008246 branch  0x000079a2 
+ 00031136  0x00008249 fetch  0x00000001 , 0x00004662 
+ 00031137  0x0000824a bne  0x00000002 , 0x0000799e 
+ 00031138  0x0000824c bpatchx  0x000000ed , 0x0000403d 
+ 00031139  0x0000824d setarg  0x00363636 
+ 00031140  0x0000824e lshift8  0x0000003f , 0x00000002 
+ 00031141  0x0000824f or_into  0x00000036 , 0x00000002 
+ 00031142  0x00008250 fetch  0x00000002 , 0x00000a7e 
+ 00031143  0x00008251 copy  0x0000003f , 0x00000006 
+ 00031144  0x00008252 force  0x00000004 , 0x00000039 
+ 00031145  0x00008253 call  0x00007955 
+ 00031146  0x00008254 call  0x0000790b 
+ 00031147  0x00008255 call  0x00007912 
+ 00031148  0x00008256 fetch  0x00000002 , 0x00000a80 
+ 00031149  0x00008257 copy  0x0000003f , 0x00000006 
+ 00031150  0x00008258 arg  0x000005e6 , 0x00000005 
+ 00031151  0x00008259 force  0x00000006 , 0x00000039 
+ 00031152  0x0000825a call  0x00007a71 
+ 00031153  0x0000825b fetch  0x00000002 , 0x00000a82 
+ 00031154  0x0000825c copy  0x0000003f , 0x00000006 
+ 00031155  0x0000825d force  0x00000006 , 0x00000039 
+ 00031156  0x0000825e call  0x00007a71 
+ 00031157  0x0000825f setarg  0x00800000 
+ 00031158  0x00008260 istore  0x00000003 , 0x00000005 
+ 00031159  0x00008262 fetch  0x00000001 , 0x00004664 
+ 00031160  0x00008264 istore  0x00000001 , 0x00000005 
+ 00031161  0x00008265 force  0x00000000 , 0x0000003f 
+ 00031162  0x00008266 istore  0x00000008 , 0x00000005 
+ 00031163  0x00008267 setarg  0x00000388 
+ 00031164  0x00008268 istore  0x00000004 , 0x00000005 
+ 00031165  0x00008269 call  0x00007912 
+ 00031166  0x0000826a call  0x0000794e 
+ 00031167  0x0000826b arg  0x00000a3e , 0x00000006 
+ 00031168  0x0000826c arg  0x00000706 , 0x00000005 
+ 00031169  0x0000826d call  0x00007ebd 
+ 00031170  0x0000826f setarg  0x005c5c5c 
+ 00031171  0x00008270 lshift8  0x0000003f , 0x00000002 
+ 00031172  0x00008271 or_into  0x0000005c , 0x00000002 
+ 00031173  0x00008272 fetch  0x00000002 , 0x00000a7e 
+ 00031174  0x00008273 copy  0x0000003f , 0x00000006 
+ 00031175  0x00008274 force  0x00000004 , 0x00000039 
+ 00031176  0x00008275 call  0x00007955 
+ 00031177  0x00008276 call  0x0000790b 
+ 00031178  0x00008277 call  0x00007912 
+ 00031179  0x00008278 arg  0x00000726 , 0x00000006 
+ 00031180  0x00008279 arg  0x000005e6 , 0x00000005 
+ 00031181  0x0000827a force  0x00000008 , 0x00000039 
+ 00031182  0x0000827b call  0x00007a71 
+ 00031183  0x0000827c setarg  0x00800000 
+ 00031184  0x0000827d lshift8  0x0000003f , 0x0000003f 
+ 00031185  0x0000827e istore  0x00000004 , 0x00000005 
+ 00031186  0x0000827f call  0x00007ec5 
+ 00031187  0x00008280 setarg  0x00000300 
+ 00031188  0x00008281 istore  0x00000004 , 0x00000005 
+ 00031189  0x00008282 call  0x00007912 
+ 00031190  0x00008283 branch  0x0000794e 
+ 00031191  0x00008287 setarg  0x00363636 
+ 00031192  0x00008288 lshift8  0x0000003f , 0x00000002 
+ 00031193  0x00008289 or_into  0x00000036 , 0x00000002 
+ 00031194  0x0000828a arg  0x00000a1e , 0x00000006 
+ 00031195  0x0000828b force  0x00000006 , 0x00000039 
+ 00031196  0x0000828c call  0x00007955 
+ 00031197  0x0000828d call  0x0000790b 
+ 00031198  0x0000828e call  0x00007912 
+ 00031199  0x0000828f fetch  0x00000002 , 0x00000a8a 
+ 00031200  0x00008290 copy  0x0000003f , 0x00000006 
+ 00031201  0x00008291 arg  0x000005e6 , 0x00000005 
+ 00031202  0x00008292 call  0x00007a70 
+ 00031203  0x00008293 fetch  0x00000002 , 0x00000a8c 
+ 00031204  0x00008294 copy  0x0000003f , 0x00000006 
+ 00031205  0x00008295 call  0x00007a70 
+ 00031206  0x00008297 setarg  0x0062746c 
+ 00031207  0x00008298 lshift8  0x0000003f , 0x0000003f 
+ 00031208  0x00008299 or_into  0x0000006b , 0x0000003f 
+ 00031209  0x0000829a istore  0x00000004 , 0x00000005 
+ 00031210  0x0000829b arg  0x00000733 , 0x00000006 
+ 00031211  0x0000829c force  0x00000003 , 0x00000039 
+ 00031212  0x0000829d call  0x00007a71 
+ 00031213  0x0000829f setarg  0x00800000 
+ 00031214  0x000082a0 lshift8  0x0000003f , 0x0000003f 
+ 00031215  0x000082a1 istore  0x00000004 , 0x00000005 
+ 00031216  0x000082a2 force  0x00000000 , 0x0000003f 
+ 00031217  0x000082a3 istore  0x00000008 , 0x00000005 
+ 00031218  0x000082a4 setarg  0x00000380 
+ 00031219  0x000082a5 istore  0x00000004 , 0x00000005 
+ 00031220  0x000082a6 call  0x00007912 
+ 00031221  0x000082a8 call  0x0000794e 
+ 00031222  0x000082a9 arg  0x00000a3e , 0x00000006 
+ 00031223  0x000082aa arg  0x00000706 , 0x00000005 
+ 00031224  0x000082ab call  0x00007ebd 
+ 00031225  0x000082ad setarg  0x005c5c5c 
+ 00031226  0x000082ae lshift8  0x0000003f , 0x00000002 
+ 00031227  0x000082af or_into  0x0000005c , 0x00000002 
+ 00031228  0x000082b0 arg  0x00000a1e , 0x00000006 
+ 00031229  0x000082b1 force  0x00000006 , 0x00000039 
+ 00031230  0x000082b2 call  0x00007955 
+ 00031231  0x000082b3 call  0x0000790b 
+ 00031232  0x000082b4 call  0x00007912 
+ 00031233  0x000082b5 arg  0x00000726 , 0x00000006 
+ 00031234  0x000082b6 arg  0x000005e6 , 0x00000005 
+ 00031235  0x000082b7 force  0x00000008 , 0x00000039 
+ 00031236  0x000082b8 call  0x00007a71 
+ 00031237  0x000082b9 setarg  0x00800000 
+ 00031238  0x000082ba lshift8  0x0000003f , 0x0000003f 
+ 00031239  0x000082bb istore  0x00000004 , 0x00000005 
+ 00031240  0x000082bc call  0x00007ec5 
+ 00031241  0x000082bd setarg  0x00000300 
+ 00031242  0x000082be istore  0x00000004 , 0x00000005 
+ 00031243  0x000082bf call  0x00007912 
+ 00031244  0x000082c0 branch  0x0000794e 
+ 00031245  0x000082c4 fetch  0x00000001 , 0x00004662 
+ 00031246  0x000082c5 bne  0x00000002 , 0x00007a1e 
+ 00031247  0x000082c7 bpatchx  0x000000ee , 0x0000403d 
+ 00031248  0x000082c8 setarg  0x00363636 
+ 00031249  0x000082c9 lshift8  0x0000003f , 0x00000002 
+ 00031250  0x000082ca or_into  0x00000036 , 0x00000002 
+ 00031251  0x000082cb arg  0x00000a1e , 0x00000006 
+ 00031252  0x000082cc force  0x00000006 , 0x00000039 
+ 00031253  0x000082cd call  0x00007955 
+ 00031254  0x000082ce call  0x0000790b 
+ 00031255  0x000082cf call  0x00007912 
+ 00031256  0x000082d0 arg  0x00000a3e , 0x00000006 
+ 00031257  0x000082d1 arg  0x000005e6 , 0x00000005 
+ 00031258  0x000082d2 call  0x00007a70 
+ 00031259  0x000082d3 arg  0x00000a2e , 0x00000006 
+ 00031260  0x000082d4 call  0x00007a70 
+ 00031261  0x000082d5 branch  0x00007a33 
+ 00031262  0x000082d8 setarg  0x00000000 
+ 00031263  0x000082d9 store  0x00000004 , 0x0000468a 
+ 00031264  0x000082da branch  0x00007a0f 
+ 00031265  0x000082dd setarg  0x00000000 
+ 00031266  0x000082de store  0x00000004 , 0x0000468a 
+ 00031267  0x000082df branch  0x00007a26 
+ 00031268  0x000082e3 fetch  0x00000001 , 0x00004662 
+ 00031269  0x000082e4 bne  0x00000002 , 0x00007a21 
+ 00031270  0x000082e6 setarg  0x00363636 
+ 00031271  0x000082e7 lshift8  0x0000003f , 0x00000002 
+ 00031272  0x000082e8 or_into  0x00000036 , 0x00000002 
+ 00031273  0x000082e9 arg  0x00000a1e , 0x00000006 
+ 00031274  0x000082ea force  0x00000006 , 0x00000039 
+ 00031275  0x000082eb call  0x00007955 
+ 00031276  0x000082ec call  0x0000790b 
+ 00031277  0x000082ed call  0x00007912 
+ 00031278  0x000082ef arg  0x00000a2e , 0x00000006 
+ 00031279  0x000082f0 arg  0x000005e6 , 0x00000005 
+ 00031280  0x000082f1 call  0x00007a70 
+ 00031281  0x000082f2 arg  0x00000a3e , 0x00000006 
+ 00031282  0x000082f3 call  0x00007a70 
+ 00031283  0x000082f5 setarg  0x00000000 
+ 00031284  0x000082f6 istore  0x00000008 , 0x00000005 
+ 00031285  0x000082f7 istore  0x00000004 , 0x00000005 
+ 00031286  0x000082f8 fetch  0x00000004 , 0x0000468a 
+ 00031287  0x000082f9 istore  0x00000004 , 0x00000005 
+ 00031288  0x000082fb copy  0x00000005 , 0x00000002 
+ 00031289  0x000082fc jam  0x00000080 , 0x00000726 
+ 00031290  0x000082fd copy  0x00000002 , 0x00000005 
+ 00031291  0x000082fe arg  0x00000736 , 0x00000006 
+ 00031292  0x000082ff call  0x00007a70 
+ 00031293  0x00008301 call  0x00007912 
+ 00031294  0x00008303 arg  0x000005e6 , 0x00000005 
+ 00031295  0x00008304 force  0x00000007 , 0x00000039 
+ 00031296  0x00008305 call  0x00007ec6 
+ 00031297  0x00008306 istore  0x00000004 , 0x00000005 
+ 00031298  0x00008307 setarg  0x000003f8 
+ 00031299  0x00008308 istore  0x00000004 , 0x00000005 
+ 00031300  0x00008309 call  0x00007912 
+ 00031301  0x0000830a call  0x0000794e 
+ 00031302  0x0000830c arg  0x00000a3e , 0x00000006 
+ 00031303  0x0000830d arg  0x00000706 , 0x00000005 
+ 00031304  0x0000830e call  0x00007ebd 
+ 00031305  0x00008310 setarg  0x005c5c5c 
+ 00031306  0x00008311 lshift8  0x0000003f , 0x00000002 
+ 00031307  0x00008312 or_into  0x0000005c , 0x00000002 
+ 00031308  0x00008313 arg  0x00000a1e , 0x00000006 
+ 00031309  0x00008314 force  0x00000006 , 0x00000039 
+ 00031310  0x00008315 call  0x00007955 
+ 00031311  0x00008316 call  0x0000790b 
+ 00031312  0x00008317 call  0x00007912 
+ 00031313  0x00008318 arg  0x00000726 , 0x00000006 
+ 00031314  0x00008319 arg  0x000005e6 , 0x00000005 
+ 00031315  0x0000831a force  0x00000008 , 0x00000039 
+ 00031316  0x0000831b call  0x00007a71 
+ 00031317  0x0000831c setarg  0x00800000 
+ 00031318  0x0000831d lshift8  0x0000003f , 0x0000003f 
+ 00031319  0x0000831e istore  0x00000004 , 0x00000005 
+ 00031320  0x0000831f call  0x00007ec5 
+ 00031321  0x00008320 setarg  0x00000300 
+ 00031322  0x00008321 istore  0x00000004 , 0x00000005 
+ 00031323  0x00008322 call  0x00007912 
+ 00031324  0x00008323 branch  0x0000794e 
+ 00031325  0x0000832b jam  0x000000c0 , 0x000005e3 
+ 00031326  0x0000832d fetch  0x00000001 , 0x000005e3 
+ 00031327  0x0000832e rtn  0x00000034 
+ 00031328  0x0000832f increase  0xffffffff , 0x0000003f 
+ 00031329  0x00008330 store  0x00000001 , 0x000005e3 
+ 00031330  0x00008331 arg  0x000006be , 0x00000006 
+ 00031331  0x00008332 call  0x000076ec 
+ 00031332  0x00008333 branch  0x00007a5e , 0x00000001 
+ 00031333  0x00008334 arg  0x000005e6 , 0x00000006 
+ 00031334  0x00008335 arg  0x00000676 , 0x00000005 
+ 00031335  0x00008336 branch  0x000076f2 
+ 00031336  0x00008339 call  0x00007803 
+ 00031337  0x0000833a fetch  0x00000001 , 0x000005e3 
+ 00031338  0x0000833b increase  0xffffffff , 0x0000003f 
+ 00031339  0x0000833c store  0x00000001 , 0x000005e3 
+ 00031340  0x0000833d arg  0x000006be , 0x00000006 
+ 00031341  0x0000833e call  0x000076ec 
+ 00031342  0x0000833f rtn  0x00000001 
+ 00031343  0x00008340 branch  0x00007854 
+ 00031344  0x00008343 force  0x00000004 , 0x00000039 
+ 00031345  0x00008345 increase  0xfffffffc , 0x00000006 
+ 00031346  0x00008347 ifetch  0x00000004 , 0x00000006 
+ 00031347  0x00008348 istore  0x00000004 , 0x00000005 
+ 00031348  0x00008349 increase  0xfffffff8 , 0x00000006 
+ 00031349  0x0000834a loop  0x00007a72 
+ 00031350  0x0000834b rtn 
+ 00031351  0x00008351 bpatchx  0x000000ef , 0x0000403d 
+ 00031352  0x00008352 fetch  0x00000001 , 0x000044be 
+ 00031353  0x00008353 branch  0x00005af0 , 0x00000034 
+ 00031354  0x00008354 call  0x00005aec 
+ 00031355  0x00008355 call  0x00007583 
+ 00031356  0x00008357 branch  0x00007a7d 
+ 00031357  0x0000835d fetch  0x00000001 , 0x000044c3 
+ 00031358  0x0000835e rtnne  0x00000000 
+ 00031359  0x0000835f fetch  0x00000001 , 0x000044c0 
+ 00031360  0x00008360 rtnne  0x00000000 
+ 00031361  0x00008362 arg  0x000045b2 , 0x00000005 
+ 00031362  0x00008363 force  0x0000000f , 0x00000007 
+ 00031363  0x00008364 call  0x000076a2 
+ 00031364  0x00008365 random  0x0000003f 
+ 00031365  0x00008366 rshift  0x0000003f , 0x0000003f 
+ 00031366  0x00008367 istore  0x00000002 , 0x00000005 
+ 00031367  0x00008369 arg  0x00000766 , 0x00000005 
+ 00031368  0x0000836a arg  0x000045b2 , 0x00000006 
+ 00031369  0x0000836b call  0x00007ebd 
+ 00031370  0x0000836d arg  0x00000646 , 0x00000005 
+ 00031371  0x0000836e arg  0x0000095e , 0x00000006 
+ 00031372  0x0000836f call  0x00007eb3 
+ 00031373  0x00008371 arg  0x00000686 , 0x00000005 
+ 00031374  0x00008372 call  0x00007ed0 
+ 00031375  0x00008373 jam  0x00000001 , 0x00000686 
+ 00031376  0x00008375 call  0x00007ac7 
+ 00031377  0x00008376 jam  0x00000003 , 0x000044c0 
+ 00031378  0x00008377 rtn 
+ 00031379  0x0000837a arg  0x000045d2 , 0x00000005 
+ 00031380  0x0000837b arg  0x000006a6 , 0x00000006 
+ 00031381  0x0000837c call  0x00007eb3 
+ 00031382  0x0000837d jam  0x00000003 , 0x000044c3 
+ 00031383  0x0000837e jam  0x00000000 , 0x000044c0 
+ 00031384  0x0000837f rtn 
+ 00031385  0x00008384 fetch  0x00000001 , 0x000009b9 
+ 00031386  0x00008385 rtnne  0x00000000 
+ 00031387  0x00008386 fetch  0x00000001 , 0x000044c0 
+ 00031388  0x00008387 rtnne  0x00000000 
+ 00031389  0x00008389 arg  0x00000766 , 0x00000005 
+ 00031390  0x0000838a arg  0x000045b2 , 0x00000006 
+ 00031391  0x0000838b call  0x00007ebd 
+ 00031392  0x0000838d arg  0x00000646 , 0x00000005 
+ 00031393  0x0000838e arg  0x000009be , 0x00000006 
+ 00031394  0x0000838f call  0x00007eb3 
+ 00031395  0x00008391 arg  0x00000686 , 0x00000005 
+ 00031396  0x00008392 call  0x00007ed0 
+ 00031397  0x00008393 jam  0x00000001 , 0x00000686 
+ 00031398  0x00008395 call  0x00007ac7 
+ 00031399  0x00008396 jam  0x00000004 , 0x000044c0 
+ 00031400  0x00008397 rtn 
+ 00031401  0x0000839c arg  0x000009fe , 0x00000005 
+ 00031402  0x0000839d arg  0x000006a6 , 0x00000006 
+ 00031403  0x0000839e call  0x00007ebd 
+ 00031404  0x0000839f jam  0x00000003 , 0x000009b9 
+ 00031405  0x000083a0 jam  0x00000000 , 0x000044c0 
+ 00031406  0x000083a1 rtn 
+ 00031407  0x000083a6 fetch  0x00000001 , 0x000044be 
+ 00031408  0x000083a7 rtn  0x00000034 
+ 00031409  0x000083a8 fetch  0x00000001 , 0x000044c0 
+ 00031410  0x000083a9 rtn  0x00000034 
+ 00031411  0x000083aa increase  0x00000080 , 0x0000003f 
+ 00031412  0x000083ab store  0x00000001 , 0x000044c0 
+ 00031413  0x000083ac rtnbit1  0x00000007 
+ 00031414  0x000083ad fetch  0x00000002 , 0x000005e3 
+ 00031415  0x000083ae branch  0x00007ab9 , 0x00000034 
+ 00031416  0x000083af branch  0x00007abf 
+ 00031417  0x000083b2 bpatchx  0x000000f0 , 0x0000403e 
+ 00031418  0x000083b3 call  0x00007ad4 
+ 00031419  0x000083b4 fetch  0x00000001 , 0x000044c0 
+ 00031420  0x000083b5 beq  0x00000003 , 0x00007a93 
+ 00031421  0x000083b6 beq  0x00000004 , 0x00007aa9 
+ 00031422  0x000083b7 rtn 
+ 00031423  0x000083bb call  0x00007ae6 
+ 00031424  0x000083bc fetch  0x00000002 , 0x000005e3 
+ 00031425  0x000083bd increase  0xffffffff , 0x0000003f 
+ 00031426  0x000083be store  0x00000002 , 0x000005e3 
+ 00031427  0x000083bf arg  0x00000766 , 0x00000006 
+ 00031428  0x000083c0 call  0x000076ec 
+ 00031429  0x000083c1 rtn  0x00000001 
+ 00031430  0x000083c2 branch  0x00007b37 
+ 00031431  0x000083c5 bpatchx  0x000000f1 , 0x0000403e 
+ 00031432  0x000083c6 setarg  0x00000100 , 0x0000003f 
+ 00031433  0x000083c7 store  0x00000002 , 0x000005e3 
+ 00031434  0x000083c9 fetch  0x00000002 , 0x000005e3 
+ 00031435  0x000083ca rtn  0x00000034 
+ 00031436  0x000083cb increase  0xffffffff , 0x0000003f 
+ 00031437  0x000083cc store  0x00000002 , 0x000005e3 
+ 00031438  0x000083cd arg  0x00000766 , 0x00000006 
+ 00031439  0x000083ce call  0x000076ec 
+ 00031440  0x000083cf branch  0x00007aca , 0x00000001 
+ 00031441  0x000083d0 arg  0x00000646 , 0x00000006 
+ 00031442  0x000083d1 arg  0x00000706 , 0x00000005 
+ 00031443  0x000083d2 branch  0x00007eb2 
+ 00031444  0x000083d6 arg  0x00000746 , 0x00000011 
+ 00031445  0x000083d7 arg  0x00000846 , 0x00000005 
+ 00031446  0x000083d8 call  0x00007ba3 
+ 00031447  0x000083d9 arg  0x00000846 , 0x00000011 
+ 00031448  0x000083da arg  0x000007e6 , 0x00000005 
+ 00031449  0x000083db call  0x00007c79 
+ 00031450  0x000083dc arg  0x00000706 , 0x00000011 
+ 00031451  0x000083dd arg  0x000007e6 , 0x00000012 
+ 00031452  0x000083de arg  0x000006a6 , 0x00000005 
+ 00031453  0x000083df call  0x00007be1 
+ 00031454  0x000083e0 arg  0x00000846 , 0x00000011 
+ 00031455  0x000083e1 arg  0x000007e6 , 0x00000012 
+ 00031456  0x000083e2 arg  0x00000826 , 0x00000005 
+ 00031457  0x000083e3 call  0x00007be1 
+ 00031458  0x000083e4 arg  0x00000726 , 0x00000011 
+ 00031459  0x000083e5 arg  0x00000826 , 0x00000012 
+ 00031460  0x000083e6 arg  0x000006c6 , 0x00000005 
+ 00031461  0x000083e7 branch  0x00007be1 
+ 00031462  0x000083ea arg  0x00000746 , 0x00000011 
+ 00031463  0x000083eb arg  0x00000826 , 0x00000005 
+ 00031464  0x000083ec call  0x00007c79 
+ 00031465  0x000083ed arg  0x00000826 , 0x00000011 
+ 00031466  0x000083ee arg  0x00000846 , 0x00000005 
+ 00031467  0x000083ef call  0x00007c79 
+ 00031468  0x000083f1 arg  0x0000093e , 0x00000011 
+ 00031469  0x000083f2 arg  0x00000846 , 0x00000012 
+ 00031470  0x000083f3 arg  0x00000846 , 0x00000005 
+ 00031471  0x000083f4 call  0x00007be1 
+ 00031472  0x000083f5 arg  0x00000706 , 0x00000011 
+ 00031473  0x000083f6 arg  0x00000826 , 0x00000005 
+ 00031474  0x000083f7 call  0x00007c79 
+ 00031475  0x000083f9 arg  0x00000826 , 0x00000006 
+ 00031476  0x000083fa arg  0x000007e6 , 0x00000005 
+ 00031477  0x000083fb call  0x00007ebd 
+ 00031478  0x000083fc arg  0x000007e6 , 0x00000011 
+ 00031479  0x000083fd call  0x00007c80 
+ 00031480  0x000083fe arg  0x00000826 , 0x00000011 
+ 00031481  0x000083ff arg  0x000007e6 , 0x00000012 
+ 00031482  0x00008400 arg  0x00000826 , 0x00000005 
+ 00031483  0x00008401 call  0x00007c7d 
+ 00031484  0x00008403 arg  0x00000826 , 0x00000011 
+ 00031485  0x00008404 arg  0x00000846 , 0x00000012 
+ 00031486  0x00008405 arg  0x00000826 , 0x00000005 
+ 00031487  0x00008406 call  0x00007c7d 
+ 00031488  0x00008408 arg  0x00000706 , 0x00000006 
+ 00031489  0x00008409 arg  0x000007e6 , 0x00000005 
+ 00031490  0x0000840a call  0x00007ebd 
+ 00031491  0x0000840b arg  0x00000726 , 0x00000011 
+ 00031492  0x0000840c arg  0x00000846 , 0x00000005 
+ 00031493  0x0000840d call  0x00007c79 
+ 00031494  0x0000840e arg  0x000007e6 , 0x00000011 
+ 00031495  0x0000840f call  0x00007c80 
+ 00031496  0x00008410 arg  0x000007e6 , 0x00000011 
+ 00031497  0x00008411 call  0x00007c80 
+ 00031498  0x00008412 arg  0x000007e6 , 0x00000011 
+ 00031499  0x00008413 arg  0x00000846 , 0x00000012 
+ 00031500  0x00008414 arg  0x000007e6 , 0x00000005 
+ 00031501  0x00008415 call  0x00007be1 
+ 00031502  0x00008416 arg  0x00000846 , 0x00000011 
+ 00031503  0x00008417 arg  0x00000806 , 0x00000005 
+ 00031504  0x00008418 call  0x00007c79 
+ 00031505  0x00008419 arg  0x00000806 , 0x00000011 
+ 00031506  0x0000841a call  0x00007c80 
+ 00031507  0x0000841b arg  0x00000806 , 0x00000011 
+ 00031508  0x0000841c call  0x00007c80 
+ 00031509  0x0000841d arg  0x00000806 , 0x00000011 
+ 00031510  0x0000841e call  0x00007c80 
+ 00031511  0x0000841f arg  0x00000726 , 0x00000006 
+ 00031512  0x00008420 arg  0x00000846 , 0x00000005 
+ 00031513  0x00008421 call  0x00007ebd 
+ 00031514  0x00008422 arg  0x00000846 , 0x00000011 
+ 00031515  0x00008423 call  0x00007c80 
+ 00031516  0x00008424 arg  0x00000846 , 0x00000011 
+ 00031517  0x00008425 arg  0x00000746 , 0x00000012 
+ 00031518  0x00008426 arg  0x00000746 , 0x00000005 
+ 00031519  0x00008427 call  0x00007be1 
+ 00031520  0x0000842a arg  0x00000826 , 0x00000011 
+ 00031521  0x0000842b arg  0x00000846 , 0x00000005 
+ 00031522  0x0000842c call  0x00007c79 
+ 00031523  0x0000842e arg  0x00000846 , 0x00000011 
+ 00031524  0x0000842f arg  0x000007e6 , 0x00000012 
+ 00031525  0x00008430 arg  0x00000846 , 0x00000005 
+ 00031526  0x00008431 call  0x00007c96 
+ 00031527  0x00008432 arg  0x00000846 , 0x00000011 
+ 00031528  0x00008433 arg  0x000007e6 , 0x00000012 
+ 00031529  0x00008434 arg  0x00000706 , 0x00000005 
+ 00031530  0x00008435 call  0x00007c96 
+ 00031531  0x00008436 arg  0x000007e6 , 0x00000011 
+ 00031532  0x00008437 arg  0x00000706 , 0x00000012 
+ 00031533  0x00008438 arg  0x00000846 , 0x00000005 
+ 00031534  0x00008439 call  0x00007c96 
+ 00031535  0x0000843a arg  0x00000846 , 0x00000011 
+ 00031536  0x0000843b arg  0x00000826 , 0x00000012 
+ 00031537  0x0000843c arg  0x00000846 , 0x00000005 
+ 00031538  0x0000843d call  0x00007be1 
+ 00031539  0x0000843e arg  0x00000846 , 0x00000011 
+ 00031540  0x0000843f arg  0x00000806 , 0x00000012 
+ 00031541  0x00008440 arg  0x00000726 , 0x00000005 
+ 00031542  0x00008441 branch  0x00007c96 
+ 00031543  0x00008445 arg  0x00000686 , 0x00000011 
+ 00031544  0x00008446 arg  0x00000866 , 0x00000005 
+ 00031545  0x00008447 call  0x00007c79 
+ 00031546  0x00008448 arg  0x00000706 , 0x00000011 
+ 00031547  0x00008449 arg  0x00000866 , 0x00000012 
+ 00031548  0x0000844a arg  0x00000806 , 0x00000005 
+ 00031549  0x0000844b call  0x00007be1 
+ 00031550  0x0000844e arg  0x00000686 , 0x00000011 
+ 00031551  0x0000844f arg  0x00000866 , 0x00000012 
+ 00031552  0x00008450 arg  0x00000866 , 0x00000005 
+ 00031553  0x00008451 call  0x00007be1 
+ 00031554  0x00008452 arg  0x00000726 , 0x00000011 
+ 00031555  0x00008453 arg  0x00000866 , 0x00000012 
+ 00031556  0x00008454 arg  0x000007e6 , 0x00000005 
+ 00031557  0x00008455 call  0x00007be1 
+ 00031558  0x00008458 arg  0x00000746 , 0x00000011 
+ 00031559  0x00008459 arg  0x00000866 , 0x00000005 
+ 00031560  0x0000845a call  0x00007c79 
+ 00031561  0x0000845b arg  0x00000646 , 0x00000011 
+ 00031562  0x0000845c arg  0x00000866 , 0x00000012 
+ 00031563  0x0000845d arg  0x00000826 , 0x00000005 
+ 00031564  0x0000845e call  0x00007be1 
+ 00031565  0x00008460 arg  0x00000746 , 0x00000011 
+ 00031566  0x00008461 arg  0x00000866 , 0x00000012 
+ 00031567  0x00008462 arg  0x00000866 , 0x00000005 
+ 00031568  0x00008463 call  0x00007be1 
+ 00031569  0x00008464 arg  0x00000666 , 0x00000011 
+ 00031570  0x00008465 arg  0x00000866 , 0x00000012 
+ 00031571  0x00008466 arg  0x00000846 , 0x00000005 
+ 00031572  0x00008467 call  0x00007be1 
+ 00031573  0x0000846c arg  0x00000806 , 0x00000012 
+ 00031574  0x0000846d arg  0x00000826 , 0x00000011 
+ 00031575  0x0000846e arg  0x00000866 , 0x00000005 
+ 00031576  0x0000846f call  0x00007c96 
+ 00031577  0x00008470 arg  0x00000806 , 0x00000011 
+ 00031578  0x00008471 arg  0x00000826 , 0x00000012 
+ 00031579  0x00008472 arg  0x00000806 , 0x00000005 
+ 00031580  0x00008473 call  0x00007c7d 
+ 00031581  0x00008476 arg  0x000007e6 , 0x00000012 
+ 00031582  0x00008477 arg  0x00000846 , 0x00000011 
+ 00031583  0x00008478 arg  0x00000826 , 0x00000005 
+ 00031584  0x00008479 call  0x00007c96 
+ 00031585  0x0000847a arg  0x000007e6 , 0x00000011 
+ 00031586  0x0000847b arg  0x00000846 , 0x00000012 
+ 00031587  0x0000847c arg  0x000007e6 , 0x00000005 
+ 00031588  0x0000847d call  0x00007c7d 
+ 00031589  0x0000847e arg  0x000007e6 , 0x00000011 
+ 00031590  0x0000847f arg  0x00000866 , 0x00000012 
+ 00031591  0x00008480 arg  0x000007e6 , 0x00000005 
+ 00031592  0x00008481 call  0x00007be1 
+ 00031593  0x00008482 arg  0x00000746 , 0x00000011 
+ 00031594  0x00008483 arg  0x00000686 , 0x00000012 
+ 00031595  0x00008484 arg  0x00000846 , 0x00000005 
+ 00031596  0x00008485 call  0x00007be1 
+ 00031597  0x00008486 arg  0x00000846 , 0x00000011 
+ 00031598  0x00008487 arg  0x00000866 , 0x00000012 
+ 00031599  0x00008488 arg  0x00000746 , 0x00000005 
+ 00031600  0x00008489 call  0x00007be1 
+ 00031601  0x0000848b arg  0x00000866 , 0x00000011 
+ 00031602  0x0000848c arg  0x00000866 , 0x00000005 
+ 00031603  0x0000848d call  0x00007c79 
+ 00031604  0x0000848e arg  0x00000866 , 0x00000011 
+ 00031605  0x0000848f arg  0x00000806 , 0x00000012 
+ 00031606  0x00008490 arg  0x00000846 , 0x00000005 
+ 00031607  0x00008491 call  0x00007be1 
+ 00031608  0x00008492 arg  0x00000866 , 0x00000011 
+ 00031609  0x00008493 arg  0x000007e6 , 0x00000012 
+ 00031610  0x00008494 arg  0x000007e6 , 0x00000005 
+ 00031611  0x00008495 call  0x00007be1 
+ 00031612  0x00008496 arg  0x00000826 , 0x00000011 
+ 00031613  0x00008497 arg  0x00000706 , 0x00000005 
+ 00031614  0x00008498 call  0x00007c79 
+ 00031615  0x00008499 arg  0x00000706 , 0x00000011 
+ 00031616  0x0000849a arg  0x00000846 , 0x00000012 
+ 00031617  0x0000849b arg  0x00000706 , 0x00000005 
+ 00031618  0x0000849c call  0x00007c96 
+ 00031619  0x0000849d arg  0x00000706 , 0x00000006 
+ 00031620  0x0000849e arg  0x00000866 , 0x00000005 
+ 00031621  0x0000849f call  0x00007ebd 
+ 00031622  0x000084a0 arg  0x00000866 , 0x00000011 
+ 00031623  0x000084a1 call  0x00007c80 
+ 00031624  0x000084a2 arg  0x00000846 , 0x00000011 
+ 00031625  0x000084a3 arg  0x00000866 , 0x00000012 
+ 00031626  0x000084a4 arg  0x00000846 , 0x00000005 
+ 00031627  0x000084a5 call  0x00007c96 
+ 00031628  0x000084a6 arg  0x00000846 , 0x00000011 
+ 00031629  0x000084a7 arg  0x00000826 , 0x00000012 
+ 00031630  0x000084a8 arg  0x00000826 , 0x00000005 
+ 00031631  0x000084a9 call  0x00007be1 
+ 00031632  0x000084aa arg  0x00000826 , 0x00000011 
+ 00031633  0x000084ab arg  0x000007e6 , 0x00000012 
+ 00031634  0x000084ac arg  0x00000726 , 0x00000005 
+ 00031635  0x000084ad call  0x00007c96 
+ 00031636  0x000084ae arg  0x00000726 , 0x00000011 
+ 00031637  0x000084af arg  0x0000091e , 0x00000012 
+ 00031638  0x000084b0 arg  0x00000726 , 0x00000005 
+ 00031639  0x000084b1 force  0x00000000 , 0x00000013 
+ 00031640  0x000084b2 fetch  0x00000001 , 0x00000726 
+ 00031641  0x000084b3 isolate1  0x00000000 , 0x0000003f 
+ 00031642  0x000084b4 call  0x00007c7b , 0x00000001 
+ 00031643  0x000084b5 copy  0x00000013 , 0x00000030 
+ 00031644  0x000084b6 arg  0x00000726 , 0x00000011 
+ 00031645  0x000084b7 call  0x00007cab 
+ 00031646  0x000084b8 fetch  0x00000001 , 0x00000745 
+ 00031647  0x000084b9 isolate1  0x00000000 , 0x00000030 
+ 00031648  0x000084ba setflag  0x00000001 , 0x00000007 , 0x0000003f 
+ 00031649  0x000084bb store  0x00000001 , 0x00000745 
+ 00031650  0x000084bc rtn 
+ 00031651  0x000084bf copy  0x00000005 , 0x0000000b 
+ 00031652  0x000084c0 arg  0x00000806 , 0x00000005 
+ 00031653  0x000084c1 call  0x00007ed0 
+ 00031654  0x000084c2 force  0x00000000 , 0x0000003f 
+ 00031655  0x000084c4 store  0x00000004 , 0x00000826 
+ 00031656  0x000084c5 jam  0x00000001 , 0x00000806 
+ 00031657  0x000084c6 arg  0x00000786 , 0x00000005 
+ 00031658  0x000084c7 call  0x00007ed2 
+ 00031659  0x000084c8 arg  0x0000091e , 0x00000006 
+ 00031660  0x000084c9 arg  0x000007c6 , 0x00000005 
+ 00031661  0x000084ca call  0x00007ebd 
+ 00031662  0x000084cb copy  0x00000011 , 0x00000006 
+ 00031663  0x000084cc arg  0x000007e6 , 0x00000005 
+ 00031664  0x000084cd call  0x00007ebd 
+ 00031665  0x000084d4 arg  0x000007e6 , 0x00000006 
+ 00031666  0x000084d5 call  0x00007cb5 
+ 00031667  0x000084d6 branch  0x00007bda , 0x00000034 
+ 00031668  0x000084db arg  0x000007e6 , 0x00000011 
+ 00031669  0x000084dc arg  0x00000806 , 0x00000012 
+ 00031670  0x000084dd call  0x00007cb8 
+ 00031671  0x000084de arg  0x000007c6 , 0x00000011 
+ 00031672  0x000084df arg  0x00000786 , 0x00000012 
+ 00031673  0x000084e0 call  0x00007cb8 
+ 00031674  0x000084e2 arg  0x000007e6 , 0x00000011 
+ 00031675  0x000084e3 arg  0x000007c6 , 0x00000012 
+ 00031676  0x000084e4 call  0x00007cb1 
+ 00031677  0x000084e5 branch  0x00007bcc , 0x00000002 
+ 00031678  0x000084e6 arg  0x000007c6 , 0x00000011 
+ 00031679  0x000084e7 arg  0x000007e6 , 0x00000012 
+ 00031680  0x000084e8 copy  0x00000011 , 0x00000005 
+ 00031681  0x000084e9 call  0x00007ca9 
+ 00031682  0x000084ea arg  0x00000806 , 0x00000011 
+ 00031683  0x000084eb arg  0x00000786 , 0x00000012 
+ 00031684  0x000084ec copy  0x00000012 , 0x00000005 
+ 00031685  0x000084ed call  0x00007c7b 
+ 00031686  0x000084ee ifetch  0x00000001 , 0x00000011 
+ 00031687  0x000084ef iadd  0x00000013 , 0x00000013 
+ 00031688  0x000084f0 ifetch  0x00000001 , 0x00000012 
+ 00031689  0x000084f1 iadd  0x00000013 , 0x0000003f 
+ 00031690  0x000084f2 istore  0x00000001 , 0x00000012 
+ 00031691  0x000084f3 branch  0x00007bb1 
+ 00031692  0x000084f5 arg  0x000007e6 , 0x00000011 
+ 00031693  0x000084f6 arg  0x000007c6 , 0x00000012 
+ 00031694  0x000084f7 copy  0x00000011 , 0x00000005 
+ 00031695  0x000084f8 call  0x00007ca9 
+ 00031696  0x000084f9 arg  0x00000786 , 0x00000011 
+ 00031697  0x000084fa arg  0x00000806 , 0x00000012 
+ 00031698  0x000084fb copy  0x00000012 , 0x00000005 
+ 00031699  0x000084fc call  0x00007c7b 
+ 00031700  0x000084fd ifetch  0x00000001 , 0x00000011 
+ 00031701  0x000084fe iadd  0x00000013 , 0x00000013 
+ 00031702  0x000084ff ifetch  0x00000001 , 0x00000012 
+ 00031703  0x00008500 iadd  0x00000013 , 0x0000003f 
+ 00031704  0x00008501 istore  0x00000001 , 0x00000012 
+ 00031705  0x00008502 branch  0x00007bb1 
+ 00031706  0x00008505 arg  0x00000786 , 0x00000011 
+ 00031707  0x00008506 copy  0x0000000b , 0x00000005 
+ 00031708  0x00008507 call  0x00007c0a 
+ 00031709  0x00008509 arg  0x0000091e , 0x00000011 
+ 00031710  0x0000850a copy  0x0000000b , 0x00000012 
+ 00031711  0x0000850b copy  0x0000000b , 0x00000005 
+ 00031712  0x0000850c branch  0x00007c96 
+ 00031713  0x00008510 copy  0x00000005 , 0x0000000b 
+ 00031714  0x00008512 force  0x00000000 , 0x00000038 
+ 00031715  0x00008514 arg  0x00000786 , 0x00000005 
+ 00031716  0x00008515 call  0x00007ed2 
+ 00031717  0x00008516 arg  0x00000ad2 , 0x00000005 
+ 00031718  0x00008517 call  0x00007ed2 
+ 00031719  0x0000851b copy  0x00000011 , 0x00000006 
+ 00031720  0x0000851d jam  0x00000000 , 0x00000ad2 
+ 00031721  0x0000851e setarg  0x00000000 
+ 00031722  0x0000851f call  0x00007c73 
+ 00031723  0x00008520 copy  0x00000012 , 0x00000006 
+ 00031724  0x00008521 call  0x00007c77 
+ 00031725  0x00008524 force  0x00000000 , 0x00000007 
+ 00031726  0x00008525 arg  0x00000786 , 0x00000005 
+ 00031727  0x00008529 arg  0x00000ad2 , 0x00000002 
+ 00031728  0x0000852a copy  0x00000007 , 0x00000012 
+ 00031729  0x0000852b lshift2  0x00000012 , 0x0000003f 
+ 00031730  0x0000852d iadd  0x00000002 , 0x00000012 
+ 00031731  0x0000852e force  0x00000000 , 0x00000002 
+ 00031732  0x0000852f force  0x00000000 , 0x00000013 
+ 00031733  0x00008535 ifetch  0x00000004 , 0x00000005 
+ 00031734  0x00008536 iforce  0x00000011 
+ 00031735  0x00008539 ifetch  0x00000004 , 0x00000012 
+ 00031736  0x0000853a copy  0x00000013 , 0x00000038 
+ 00031737  0x0000853b imul32  0x0000002f , 0x0000003f 
+ 00031738  0x0000853c iadd  0x00000011 , 0x0000003f 
+ 00031739  0x0000853d iadd  0x00000002 , 0x0000003f 
+ 00031740  0x0000853e istore  0x00000004 , 0x00000005 
+ 00031741  0x0000853f rshift32  0x0000003f , 0x00000002 
+ 00031742  0x00008540 increase  0x00000001 , 0x00000013 
+ 00031743  0x00008541 compare  0x00000008 , 0x00000013 , 0x000000ff 
+ 00031744  0x00008542 nbranch  0x00007bf5 , 0x00000001 
+ 00031745  0x00008544 deposit  0x00000002 
+ 00031746  0x00008545 istore  0x00000004 , 0x00000005 
+ 00031747  0x00008546 increase  0xffffffe0 , 0x00000005 
+ 00031748  0x00008549 increase  0x00000001 , 0x00000007 
+ 00031749  0x0000854a compare  0x00000008 , 0x00000007 , 0x000000ff 
+ 00031750  0x0000854b nbranch  0x00007bef , 0x00000001 
+ 00031751  0x0000854c arg  0x00000786 , 0x00000011 
+ 00031752  0x0000854d copy  0x0000000b , 0x00000005 
+ 00031753  0x0000854e branch  0x00007c0a 
+ 00031754  0x00008551 bpatchx  0x000000f2 , 0x0000403e 
+ 00031755  0x00008552 copy  0x00000005 , 0x0000000b 
+ 00031756  0x00008553 copy  0x00000011 , 0x00000030 
+ 00031757  0x00008554 arg  0x000007c6 , 0x00000012 
+ 00031758  0x00008555 copy  0x00000012 , 0x00000005 
+ 00031759  0x00008556 call  0x00007ecd 
+ 00031760  0x00008557 istore  0x00000008 , 0x00000005 
+ 00031761  0x00008558 add  0x00000011 , 0x0000002c , 0x00000006 
+ 00031762  0x00008559 call  0x00007eb9 
+ 00031763  0x0000855a call  0x00007eb5 
+ 00031764  0x0000855b copy  0x00000012 , 0x00000011 
+ 00031765  0x0000855c call  0x00007c80 
+ 00031766  0x0000855d arg  0x000007c6 , 0x00000012 
+ 00031767  0x0000855e copy  0x00000030 , 0x00000011 
+ 00031768  0x0000855f copy  0x0000000b , 0x00000005 
+ 00031769  0x00008560 call  0x00007c7d 
+ 00031770  0x00008562 arg  0x000007c6 , 0x00000012 
+ 00031771  0x00008563 copy  0x00000012 , 0x00000005 
+ 00031772  0x00008564 call  0x00007ecd 
+ 00031773  0x00008565 istore  0x00000008 , 0x00000005 
+ 00031774  0x00008566 add  0x00000030 , 0x00000030 , 0x00000006 
+ 00031775  0x00008567 call  0x00007ebf 
+ 00031776  0x00008568 call  0x00007ecd 
+ 00031777  0x00008569 copy  0x00000012 , 0x00000011 
+ 00031778  0x0000856a call  0x00007c80 
+ 00031779  0x0000856e arg  0x000007c6 , 0x00000012 
+ 00031780  0x0000856f copy  0x0000000b , 0x00000011 
+ 00031781  0x00008570 copy  0x00000011 , 0x00000005 
+ 00031782  0x00008571 call  0x00007c7d 
+ 00031783  0x00008575 arg  0x000007c6 , 0x00000012 
+ 00031784  0x00008576 copy  0x00000012 , 0x00000005 
+ 00031785  0x00008577 add  0x00000030 , 0x00000020 , 0x00000006 
+ 00031786  0x00008578 call  0x00007eb5 
+ 00031787  0x00008579 call  0x00007ecd 
+ 00031788  0x0000857a istore  0x00000008 , 0x00000005 
+ 00031789  0x0000857b add  0x00000030 , 0x00000038 , 0x00000006 
+ 00031790  0x0000857c call  0x00007eb9 
+ 00031791  0x0000857d copy  0x0000000b , 0x00000011 
+ 00031792  0x0000857e copy  0x00000011 , 0x00000005 
+ 00031793  0x0000857f call  0x00007c7d 
+ 00031794  0x00008583 arg  0x000007c6 , 0x00000012 
+ 00031795  0x00008584 copy  0x00000012 , 0x00000005 
+ 00031796  0x00008585 add  0x00000030 , 0x00000024 , 0x00000006 
+ 00031797  0x00008586 call  0x00007eb5 
+ 00031798  0x00008587 add  0x00000030 , 0x00000034 , 0x00000006 
+ 00031799  0x00008588 call  0x00007eb5 
+ 00031800  0x00008589 add  0x00000030 , 0x00000034 , 0x00000006 
+ 00031801  0x0000858a call  0x00007eb6 
+ 00031802  0x0000858b add  0x00000030 , 0x00000020 , 0x00000006 
+ 00031803  0x0000858c call  0x00007eb6 
+ 00031804  0x0000858d copy  0x0000000b , 0x00000011 
+ 00031805  0x0000858e copy  0x00000011 , 0x00000005 
+ 00031806  0x0000858f call  0x00007c7d 
+ 00031807  0x00008592 arg  0x000007c6 , 0x00000012 
+ 00031808  0x00008593 copy  0x00000012 , 0x00000005 
+ 00031809  0x00008594 add  0x00000030 , 0x0000002c , 0x00000006 
+ 00031810  0x00008595 call  0x00007eb5 
+ 00031811  0x00008596 call  0x00007ecd 
+ 00031812  0x00008597 istore  0x00000008 , 0x00000005 
+ 00031813  0x00008598 add  0x00000030 , 0x00000020 , 0x00000006 
+ 00031814  0x00008599 call  0x00007eb6 
+ 00031815  0x0000859a add  0x00000030 , 0x00000028 , 0x00000006 
+ 00031816  0x0000859b call  0x00007eb6 
+ 00031817  0x0000859c copy  0x0000000b , 0x00000011 
+ 00031818  0x0000859d copy  0x00000011 , 0x00000005 
+ 00031819  0x0000859e call  0x00007c96 
+ 00031820  0x000085a1 arg  0x000007c6 , 0x00000012 
+ 00031821  0x000085a2 copy  0x00000012 , 0x00000005 
+ 00031822  0x000085a3 add  0x00000030 , 0x00000030 , 0x00000006 
+ 00031823  0x000085a4 call  0x00007eb9 
+ 00031824  0x000085a5 call  0x00007eb9 
+ 00031825  0x000085a6 force  0x00000000 , 0x0000003f 
+ 00031826  0x000085a7 istore  0x00000008 , 0x00000005 
+ 00031827  0x000085a8 add  0x00000030 , 0x00000024 , 0x00000006 
+ 00031828  0x000085a9 call  0x00007eb6 
+ 00031829  0x000085aa add  0x00000030 , 0x0000002c , 0x00000006 
+ 00031830  0x000085ab call  0x00007eb6 
+ 00031831  0x000085ac copy  0x0000000b , 0x00000011 
+ 00031832  0x000085ad copy  0x00000011 , 0x00000005 
+ 00031833  0x000085ae call  0x00007c96 
+ 00031834  0x000085b1 arg  0x000007c6 , 0x00000012 
+ 00031835  0x000085b2 copy  0x00000012 , 0x00000005 
+ 00031836  0x000085b3 add  0x00000030 , 0x00000034 , 0x00000006 
+ 00031837  0x000085b4 call  0x00007eb5 
+ 00031838  0x000085b5 add  0x00000030 , 0x00000020 , 0x00000006 
+ 00031839  0x000085b6 call  0x00007eb5 
+ 00031840  0x000085b7 call  0x00007ecd 
+ 00031841  0x000085b8 add  0x00000030 , 0x00000030 , 0x00000006 
+ 00031842  0x000085b9 call  0x00007eb6 
+ 00031843  0x000085ba copy  0x0000000b , 0x00000011 
+ 00031844  0x000085bb copy  0x00000011 , 0x00000005 
+ 00031845  0x000085bc call  0x00007c96 
+ 00031846  0x000085bf arg  0x000007c6 , 0x00000012 
+ 00031847  0x000085c0 copy  0x00000012 , 0x00000005 
+ 00031848  0x000085c1 add  0x00000030 , 0x00000038 , 0x00000006 
+ 00031849  0x000085c2 call  0x00007eb9 
+ 00031850  0x000085c3 call  0x00007ecd 
+ 00031851  0x000085c4 add  0x00000030 , 0x00000024 , 0x00000006 
+ 00031852  0x000085c5 call  0x00007eb5 
+ 00031853  0x000085c6 call  0x00007ecd 
+ 00031854  0x000085c7 add  0x00000030 , 0x00000034 , 0x00000006 
+ 00031855  0x000085c8 call  0x00007eb6 
+ 00031856  0x000085c9 copy  0x0000000b , 0x00000011 
+ 00031857  0x000085ca copy  0x00000011 , 0x00000005 
+ 00031858  0x000085cb branch  0x00007c96 
+ 00031859  0x000085cf force  0x00000020 , 0x00000039 
+ 00031860  0x000085d0 arg  0x00000ad2 , 0x00000005 
+ 00031861  0x000085d1 iadd  0x00000005 , 0x00000005 
+ 00031862  0x000085d2 branch  0x00007f01 
+ 00031863  0x000085d5 force  0x00000008 , 0x00000039 
+ 00031864  0x000085d6 branch  0x00007781 
+ 00031865  0x000085d9 copy  0x00000011 , 0x00000012 
+ 00031866  0x000085da branch  0x00007be1 
+ 00031867  0x000085dd force  0x00000008 , 0x00000039 
+ 00031868  0x000085de branch  0x00007712 
+ 00031869  0x000085e1 call  0x00007c7b 
+ 00031870  0x000085e2 copy  0x00000005 , 0x00000011 
+ 00031871  0x000085e3 branch  0x00007c81 
+ 00031872  0x000085e6 call  0x00007cae 
+ 00031873  0x000085e8 isolate1  0x00000000 , 0x00000013 
+ 00031874  0x000085e9 branch  0x00007c8a , 0x00000001 
+ 00031875  0x000085ea arg  0x0000091e , 0x00000012 
+ 00031876  0x000085eb copy  0x00000011 , 0x00000013 
+ 00031877  0x000085ec increase  0xffffffe0 , 0x00000011 
+ 00031878  0x000085ed call  0x00007cb1 
+ 00031879  0x000085ee nrtn  0x00000002 
+ 00031880  0x000085ef copy  0x00000013 , 0x00000011 
+ 00031881  0x000085f0 branch  0x00007c92 
+ 00031882  0x000085f3 call  0x00007c92 
+ 00031883  0x000085f5 copy  0x00000011 , 0x00000013 
+ 00031884  0x000085f6 increase  0xffffffe0 , 0x00000011 
+ 00031885  0x000085f7 arg  0x0000091e , 0x00000012 
+ 00031886  0x000085f8 call  0x00007cb1 
+ 00031887  0x000085f9 nrtn  0x00000002 
+ 00031888  0x000085fa copy  0x00000013 , 0x00000011 
+ 00031889  0x000085fb branch  0x00007c92 
+ 00031890  0x000085ff increase  0xffffffe0 , 0x00000011 
+ 00031891  0x00008600 arg  0x0000091e , 0x00000012 
+ 00031892  0x00008601 copy  0x00000011 , 0x00000005 
+ 00031893  0x00008602 branch  0x00007ca9 
+ 00031894  0x00008608 call  0x00007ca9 
+ 00031895  0x0000860a branch  0x00007ca0 , 0x00000001 
+ 00031896  0x0000860d add  0x00000005 , 0xffffffe0 , 0x00000011 
+ 00031897  0x0000860e arg  0x0000091e , 0x00000012 
+ 00031898  0x0000860f call  0x00007cb1 
+ 00031899  0x00008610 nrtn  0x00000002 
+ 00031900  0x00008611 arg  0x0000091e , 0x00000012 
+ 00031901  0x00008612 add  0x00000005 , 0xffffffe0 , 0x00000011 
+ 00031902  0x00008614 copy  0x00000011 , 0x00000005 
+ 00031903  0x00008615 branch  0x00007ca9 
+ 00031904  0x00008617 add  0x00000005 , 0xffffffe0 , 0x00000011 
+ 00031905  0x00008618 arg  0x0000091e , 0x00000012 
+ 00031906  0x00008619 copy  0x00000011 , 0x00000005 
+ 00031907  0x0000861a call  0x00007c7b 
+ 00031908  0x0000861c rtn  0x00000001 
+ 00031909  0x0000861d add  0x00000005 , 0xffffffe0 , 0x00000011 
+ 00031910  0x0000861e arg  0x0000091e , 0x00000012 
+ 00031911  0x0000861f copy  0x00000011 , 0x00000005 
+ 00031912  0x00008620 branch  0x00007c7b 
+ 00031913  0x00008625 force  0x00000008 , 0x00000039 
+ 00031914  0x00008626 branch  0x00007720 
+ 00031915  0x00008629 force  0x00000008 , 0x00000039 
+ 00031916  0x0000862a increase  0x0000001c , 0x00000011 
+ 00031917  0x0000862b branch  0x0000772f 
+ 00031918  0x0000862e force  0x00000008 , 0x00000039 
+ 00031919  0x0000862f force  0x00000000 , 0x00000013 
+ 00031920  0x00008630 branch  0x0000773d 
+ 00031921  0x00008633 force  0x00000008 , 0x00000039 
+ 00031922  0x00008634 increase  0x0000001c , 0x00000011 
+ 00031923  0x00008635 increase  0x0000001c , 0x00000012 
+ 00031924  0x00008636 branch  0x00007707 
+ 00031925  0x0000863a ifetch  0x00000008 , 0x00000006 
+ 00031926  0x0000863b nrtn  0x00000034 
+ 00031927  0x0000863c branch  0x000076f5 
+ 00031928  0x00008642 copy  0x00000011 , 0x00000030 
+ 00031929  0x00008644 copy  0x00000030 , 0x00000011 
+ 00031930  0x00008645 ifetch  0x00000001 , 0x00000011 
+ 00031931  0x00008646 isolate1  0x00000000 , 0x0000003f 
+ 00031932  0x00008647 rtn  0x00000001 
+ 00031933  0x00008648 call  0x00007cab 
+ 00031934  0x00008649 ifetch  0x00000001 , 0x00000012 
+ 00031935  0x0000864a isolate0  0x00000000 , 0x0000003f 
+ 00031936  0x0000864b branch  0x00007cc8 , 0x00000001 
+ 00031937  0x0000864c arg  0x0000091e , 0x00000011 
+ 00031938  0x0000864d copy  0x00000012 , 0x00000005 
+ 00031939  0x0000864e call  0x00007c7b 
+ 00031940  0x0000864f ifetch  0x00000001 , 0x00000012 
+ 00031941  0x00008650 iadd  0x00000013 , 0x0000003f 
+ 00031942  0x00008651 istore  0x00000001 , 0x00000012 
+ 00031943  0x00008652 increase  0xffffffe0 , 0x00000012 
+ 00031944  0x00008654 add  0x00000012 , 0x00000020 , 0x00000011 
+ 00031945  0x00008655 force  0x00000009 , 0x00000039 
+ 00031946  0x00008656 call  0x0000772f 
+ 00031947  0x00008657 branch  0x00007cb9 
+ 00031948  0x0000865c call  0x00002c65 
+ 00031949  0x0000865d rtn  0x0000002b 
+ 00031950  0x0000865e call  0x00007cd3 
+ 00031951  0x0000865f call  0x00007d75 
+ 00031952  0x00008660 branch  0x00007d08 
+ 00031953  0x00008663 call  0x00007d29 
+ 00031954  0x00008665 branch  0x00007d64 
+ 00031955  0x00008668 fetch  0x00000001 , 0x00004686 
+ 00031956  0x00008669 rtneq  0x000000ff 
+ 00031957  0x0000866a iforce  0x00000002 
+ 00031958  0x0000866b call  0x0000680e 
+ 00031959  0x0000866c fetcht  0x00000001 , 0x00004686 
+ 00031960  0x0000866d call  0x00006825 
+ 00031961  0x0000866e nop  0x00000064 
+ 00031962  0x0000866f fetcht  0x00000001 , 0x00004686 
+ 00031963  0x00008670 call  0x000067fb 
+ 00031964  0x00008671 branch  0x00007cdd 
+ 00031965  0x00008676 bpatchx  0x000000f3 , 0x0000403e 
+ 00031966  0x00008677 fetch  0x00000001 , 0x00004686 
+ 00031967  0x00008678 rtneq  0x000000ff 
+ 00031968  0x00008679 copy  0x0000003f , 0x00000002 
+ 00031969  0x0000867a call  0x0000681d 
+ 00031970  0x0000867b nbranch  0x00007cef , 0x00000001 
+ 00031971  0x0000867e call  0x00007cf9 
+ 00031972  0x0000867f fetch  0x00000002 , 0x00004682 
+ 00031973  0x00008680 set1  0x0000000c 
+ 00031974  0x00008681 store  0x00000002 , 0x00004682 
+ 00031975  0x00008682 fetch  0x00000001 , 0x00004679 
+ 00031976  0x00008683 rtneq  0x00000000 
+ 00031977  0x00008684 jam  0x00000000 , 0x00004679 
+ 00031978  0x00008686 fetch  0x00000001 , 0x00004685 
+ 00031979  0x00008687 store  0x00000001 , 0x00004678 
+ 00031980  0x00008688 call  0x00007d00 
+ 00031981  0x00008689 jam  0x0000002c , 0x00000a99 
+ 00031982  0x0000868a branch  0x00007d86 
+ 00031983  0x0000868c fetch  0x00000002 , 0x00004682 
+ 00031984  0x0000868d set0  0x0000000c 
+ 00031985  0x0000868e store  0x00000002 , 0x00004682 
+ 00031986  0x0000868f fetch  0x00000001 , 0x00004679 
+ 00031987  0x00008690 rtneq  0x00000001 
+ 00031988  0x00008691 jam  0x00000001 , 0x00004679 
+ 00031989  0x00008693 jam  0x00000000 , 0x00004678 
+ 00031990  0x00008694 call  0x00007d02 
+ 00031991  0x00008695 jam  0x0000002d , 0x00000a99 
+ 00031992  0x00008696 branch  0x00007d86 
+ 00031993  0x00008699 fetch  0x00000001 , 0x00004678 
+ 00031994  0x0000869a rtn  0x00000034 
+ 00031995  0x0000869b increase  0xffffffff , 0x0000003f 
+ 00031996  0x0000869c store  0x00000001 , 0x00004678 
+ 00031997  0x0000869d nrtn  0x00000034 
+ 00031998  0x0000869f jam  0x00000010 , 0x00000a99 
+ 00031999  0x000086a0 branch  0x00007d86 
+ 00032000  0x000086a3 arg  0x00000007 , 0x00000007 
+ 00032001  0x000086a4 branch  0x00002c32 
+ 00032002  0x000086a7 arg  0x00000007 , 0x00000007 
+ 00032003  0x000086a8 branch  0x00002c36 
+ 00032004  0x000086bf fetch  0x00000002 , 0x0000421b 
+ 00032005  0x000086c0 mul32  0x00000011 , 0x0000000b , 0x00000012 
+ 00032006  0x000086c1 iadd  0x00000012 , 0x00000012 
+ 00032007  0x000086c2 rtn 
+ 00032008  0x000086c6 fetch  0x00000001 , 0x0000421a 
+ 00032009  0x000086c7 rtn  0x00000034 
+ 00032010  0x000086c8 copy  0x0000003f , 0x00000039 
+ 00032011  0x000086c9 fetch  0x00000002 , 0x0000421b 
+ 00032012  0x000086ca copy  0x0000003f , 0x00000012 
+ 00032013  0x000086cc add  0x00000012 , 0x00000002 , 0x00000013 
+ 00032014  0x000086cd ifetcht  0x00000001 , 0x00000013 
+ 00032015  0x000086ce call  0x0000680e 
+ 00032016  0x000086cf call  0x00007d32 
+ 00032017  0x000086d0 increase  0x0000000b , 0x00000012 
+ 00032018  0x000086d1 loop  0x00007d0d 
+ 00032019  0x000086d2 rtn 
+ 00032020  0x000086d7 call  0x00007d04 
+ 00032021  0x000086d8 setarg  0x00000002 
+ 00032022  0x000086d9 istore  0x00000001 , 0x00000012 
+ 00032023  0x000086da call  0x00007d5e 
+ 00032024  0x000086db branch  0x00007d35 
+ 00032025  0x000086e1 call  0x00007d04 
+ 00032026  0x000086e2 setarg  0x00000003 
+ 00032027  0x000086e3 istore  0x00000001 , 0x00000012 
+ 00032028  0x000086e4 call  0x00007d5e 
+ 00032029  0x000086e5 branch  0x00007d32 
+ 00032030  0x000086ea call  0x00007d04 
+ 00032031  0x000086eb setarg  0x00000001 
+ 00032032  0x000086ec istore  0x00000001 , 0x00000012 
+ 00032033  0x000086ed setarg  0x000000ff 
+ 00032034  0x000086ee istore  0x00000001 , 0x00000005 
+ 00032035  0x000086ef branch  0x00007d32 
+ 00032036  0x000086f5 call  0x00007d04 
+ 00032037  0x000086f6 arg  0x0000000b , 0x00000039 
+ 00032038  0x000086f7 copy  0x00000013 , 0x00000006 
+ 00032039  0x000086f8 copy  0x00000012 , 0x00000005 
+ 00032040  0x000086f9 branch  0x00007ef4 
+ 00032041  0x000086fe fetch  0x00000001 , 0x0000421a 
+ 00032042  0x000086ff rtn  0x00000034 
+ 00032043  0x00008700 arg  0x00000000 , 0x00000011 
+ 00032044  0x00008702 call  0x00007d38 
+ 00032045  0x00008703 increase  0x00000001 , 0x00000011 
+ 00032046  0x00008704 fetch  0x00000001 , 0x0000421a 
+ 00032047  0x00008705 isub  0x00000011 , 0x0000003e 
+ 00032048  0x00008706 rtn  0x00000005 
+ 00032049  0x00008707 branch  0x00007d2c 
+ 00032050  0x0000870b add  0x00000012 , 0x00000002 , 0x00000013 
+ 00032051  0x0000870c ifetcht  0x00000001 , 0x00000013 
+ 00032052  0x0000870d branch  0x00006825 
+ 00032053  0x00008711 add  0x00000012 , 0x00000002 , 0x00000013 
+ 00032054  0x00008712 ifetcht  0x00000001 , 0x00000013 
+ 00032055  0x00008713 branch  0x00006829 
+ 00032056  0x00008718 add  0x00000011 , 0x0000000b , 0x00000007 
+ 00032057  0x00008719 call  0x00007f16 
+ 00032058  0x0000871a nrtn  0x00000034 
+ 00032059  0x0000871c call  0x00007d04 
+ 00032060  0x0000871e ifetch  0x00000001 , 0x00000012 
+ 00032061  0x00008720 beq  0x00000002 , 0x00007d35 
+ 00032062  0x00008721 beq  0x00000003 , 0x00007d32 
+ 00032063  0x00008722 beq  0x00000000 , 0x00007d32 
+ 00032064  0x00008723 beq  0x00000005 , 0x00007d4c 
+ 00032065  0x00008725 call  0x00007d35 
+ 00032066  0x00008726 add  0x00000012 , 0x00000007 , 0x00000013 
+ 00032067  0x00008727 call  0x00007e7c 
+ 00032068  0x00008728 ifetch  0x00000002 , 0x00000013 
+ 00032069  0x00008729 call  0x00007f9c 
+ 00032070  0x0000872a call  0x00007e8c 
+ 00032071  0x0000872b setarg  0x00000005 
+ 00032072  0x0000872c istore  0x00000001 , 0x00000012 
+ 00032073  0x0000872d add  0x00000012 , 0x00000003 , 0x00000013 
+ 00032074  0x0000872e ifetch  0x00000002 , 0x00000013 
+ 00032075  0x0000872f branch  0x00007d5c 
+ 00032076  0x00008733 call  0x00007d32 
+ 00032077  0x00008734 add  0x00000012 , 0x00000009 , 0x00000013 
+ 00032078  0x00008735 call  0x00007e7c 
+ 00032079  0x00008736 ifetch  0x00000002 , 0x00000013 
+ 00032080  0x00008737 call  0x00007f9c 
+ 00032081  0x00008738 call  0x00007e8c 
+ 00032082  0x0000873a add  0x00000012 , 0x00000001 , 0x00000013 
+ 00032083  0x0000873b ifetch  0x00000001 , 0x00000013 
+ 00032084  0x0000873c beq  0x000000ff , 0x00007d58 
+ 00032085  0x0000873d increase  0xffffffff , 0x0000003f 
+ 00032086  0x0000873e istore  0x00000001 , 0x00000013 
+ 00032087  0x0000873f branch  0x00007d19 , 0x00000034 
+ 00032088  0x00008741 setarg  0x00000004 
+ 00032089  0x00008742 istore  0x00000001 , 0x00000012 
+ 00032090  0x00008743 add  0x00000012 , 0x00000005 , 0x00000013 
+ 00032091  0x00008744 ifetch  0x00000002 , 0x00000013 
+ 00032092  0x00008746 add  0x00000011 , 0x0000000b , 0x00000007 
+ 00032093  0x00008747 branch  0x00007f08 
+ 00032094  0x0000874a setarg  0x00000000 
+ 00032095  0x0000874b branch  0x00007d5c 
+ 00032096  0x00008752 setarg  0x00001000 
+ 00032097  0x00008753 lshift16  0x0000003f , 0x0000003f 
+ 00032098  0x00008754 iadd  0x00000012 , 0x00000012 
+ 00032099  0x00008755 rtn 
+ 00032100  0x00008758 bpatchx  0x000000f4 , 0x0000403e 
+ 00032101  0x00008759 arg  0x00000000 , 0x00000011 
+ 00032102  0x0000875a fetcht  0x00000004 , 0x0000467a 
+ 00032103  0x0000875b copy  0x00000022 , 0x00000012 
+ 00032104  0x0000875c copy  0x00000012 , 0x0000003f 
+ 00032105  0x0000875d isub  0x00000002 , 0x0000003e 
+ 00032106  0x0000875e ncall  0x00007d60 , 0x00000002 
+ 00032107  0x00008761 copy  0x00000012 , 0x0000003f 
+ 00032108  0x00008762 increase  0x000000a0 , 0x00000002 
+ 00032109  0x00008763 increase  0x000000a0 , 0x00000002 
+ 00032110  0x00008764 isub  0x00000002 , 0x0000003e 
+ 00032111  0x00008765 nbranch  0x00007d78 , 0x00000002 
+ 00032112  0x00008766 increase  0x00000001 , 0x00000011 
+ 00032113  0x00008767 and  0x00000011 , 0x0000000f , 0x0000003f 
+ 00032114  0x00008768 nbranch  0x00007d6b , 0x00000034 
+ 00032115  0x00008769 arg  0x00000000 , 0x00000011 
+ 00032116  0x0000876a call  0x00007d7f 
+ 00032117  0x0000876c copy  0x00000022 , 0x0000003f 
+ 00032118  0x0000876d store  0x00000004 , 0x0000467a 
+ 00032119  0x0000876e rtn 
+ 00032120  0x00008770 bpatchx  0x000000f5 , 0x0000403e 
+ 00032121  0x00008771 copy  0x00000011 , 0x0000003f 
+ 00032122  0x00008772 rtn  0x00000034 
+ 00032123  0x00008773 increase  0xffffff60 , 0x00000002 
+ 00032124  0x00008774 increase  0xffffff60 , 0x00000002 
+ 00032125  0x00008775 set0  0x0000001c , 0x00000002 
+ 00032126  0x00008776 storet  0x00000004 , 0x0000467a 
+ 00032127  0x00008778 branch  0x0000335f 
+ 00032128  0x00008780 jam  0x00000001 , 0x00004666 
+ 00032129  0x00008782 fetch  0x00000001 , 0x00004667 
+ 00032130  0x00008783 nbranch  0x00007d81 , 0x00000034 
+ 00032131  0x00008784 rtn 
+ 00032132  0x00008787 jam  0x00000000 , 0x00004666 
+ 00032133  0x00008788 rtn 
+ 00032134  0x0000878d bpatchx  0x000000f6 , 0x0000403e 
+ 00032135  0x0000878e call  0x00007d80 
+ 00032136  0x0000878f copy  0x00000011 , 0x0000003f 
+ 00032137  0x00008790 store  0x00000004 , 0x00000a91 
+ 00032138  0x00008791 arg  0x00004668 , 0x00000011 
+ 00032139  0x00008792 call  0x00007fb8 
+ 00032140  0x00008793 fetch  0x00000004 , 0x00000a91 
+ 00032141  0x00008794 copy  0x0000003f , 0x00000011 
+ 00032142  0x00008795 branch  0x00007d84 
+ 00032143  0x00008798 bpatchx  0x000000f7 , 0x0000403e 
+ 00032144  0x00008799 call  0x00007d80 
+ 00032145  0x0000879a copy  0x00000011 , 0x0000003f 
+ 00032146  0x0000879b store  0x00000004 , 0x00000a91 
+ 00032147  0x0000879c arg  0x00004670 , 0x00000011 
+ 00032148  0x0000879d call  0x00007fb8 
+ 00032149  0x0000879e fetch  0x00000004 , 0x00000a91 
+ 00032150  0x0000879f copy  0x0000003f , 0x00000011 
+ 00032151  0x000087a0 branch  0x00007d84 
+ 00032152  0x000087a3 setarg  0x00000000 
+ 00032153  0x000087a4 store  0x00000008 , 0x00004670 
+ 00032154  0x000087a5 store  0x00000008 , 0x00004668 
+ 00032155  0x000087a6 rtn 
+ 00032156  0x000087a9 bpatchx  0x000000f8 , 0x0000403f 
+ 00032157  0x000087aa fetch  0x00000001 , 0x000041ce 
+ 00032158  0x000087ab nrtn  0x00000034 
+ 00032159  0x000087ac arg  0x00004670 , 0x00000011 
+ 00032160  0x000087ad call  0x00007fd0 
+ 00032161  0x000087ae rtn  0x00000034 
+ 00032162  0x000087af jam  0x00000000 , 0x00000a90 
+ 00032163  0x000087b0 call  0x00007da7 
+ 00032164  0x000087b1 fetch  0x00000001 , 0x00000a90 
+ 00032165  0x000087b2 branch  0x00007d9c , 0x00000034 
+ 00032166  0x000087b3 rtn 
+ 00032167  0x000087b6 call  0x00007d80 
+ 00032168  0x000087b7 arg  0x00004670 , 0x00000011 
+ 00032169  0x000087b8 call  0x00007fc4 
+ 00032170  0x000087b9 copy  0x0000003f , 0x00000002 
+ 00032171  0x000087ba call  0x00007d84 
+ 00032172  0x000087bb bpatchx  0x000000f9 , 0x0000403f 
+ 00032173  0x000087bc copy  0x00000002 , 0x0000003f 
+ 00032174  0x000087bd rtn  0x00000034 
+ 00032175  0x000087be beq  0x00000001 , 0x00007ddd 
+ 00032176  0x000087bf beq  0x00000002 , 0x00007de2 
+ 00032177  0x000087c0 beq  0x00000003 , 0x00007de8 
+ 00032178  0x000087c1 beq  0x00000007 , 0x00007ded 
+ 00032179  0x000087c2 beq  0x00000008 , 0x00007dee 
+ 00032180  0x000087c3 beq  0x00000009 , 0x00007def 
+ 00032181  0x000087c4 beq  0x0000000b , 0x00007df2 
+ 00032182  0x000087c5 beq  0x0000000c , 0x00007df3 
+ 00032183  0x000087c6 beq  0x0000000d , 0x00007df4 
+ 00032184  0x000087c7 beq  0x0000000e , 0x00007dfa 
+ 00032185  0x000087c8 beq  0x0000000f , 0x00007dff 
+ 00032186  0x000087c9 beq  0x00000010 , 0x00007e05 
+ 00032187  0x000087ca beq  0x00000013 , 0x00007e0f 
+ 00032188  0x000087cb beq  0x00000014 , 0x00007e11 
+ 00032189  0x000087cc beq  0x00000015 , 0x00007e13 
+ 00032190  0x000087cd beq  0x00000016 , 0x00007e15 
+ 00032191  0x000087ce beq  0x00000017 , 0x00007e18 
+ 00032192  0x000087cf beq  0x00000018 , 0x00007e1a 
+ 00032193  0x000087d0 beq  0x00000019 , 0x00007e1d 
+ 00032194  0x000087d1 beq  0x0000001b , 0x00007e25 
+ 00032195  0x000087d2 beq  0x0000001e , 0x00007e2f 
+ 00032196  0x000087d4 store  0x00000001 , 0x00000a99 
+ 00032197  0x000087d5 bpatchx  0x000000fa , 0x0000403f 
+ 00032198  0x000087d6 call  0x000062bc 
+ 00032199  0x000087d7 nbranch  0x00007ddb , 0x00000034 
+ 00032200  0x000087d9 fetch  0x00000001 , 0x00000a99 
+ 00032201  0x000087da bmark0  0x00000009 , 0x00007dd6 
+ 00032202  0x000087db beq  0x00000004 , 0x00007dea 
+ 00032203  0x000087dc beq  0x00000005 , 0x00004d17 
+ 00032204  0x000087dd beq  0x00000006 , 0x00004d26 
+ 00032205  0x000087de beq  0x0000000a , 0x00007df0 
+ 00032206  0x000087df beq  0x00000011 , 0x00007e0a 
+ 00032207  0x000087e0 beq  0x00000012 , 0x00007e0e 
+ 00032208  0x000087e1 beq  0x0000001d , 0x00007e26 
+ 00032209  0x000087e2 beq  0x0000001f , 0x000067cc 
+ 00032210  0x000087e3 beq  0x00000020 , 0x000067d0 
+ 00032211  0x000087e4 beq  0x00000021 , 0x00007e31 
+ 00032212  0x000087e5 beq  0x00000025 , 0x0000670b 
+ 00032213  0x000087e6 rtn 
+ 00032214  0x000087e9 store  0x00000001 , 0x00000a99 
+ 00032215  0x000087ea call  0x00002252 
+ 00032216  0x000087eb branch  0x00007ddb , 0x00000005 
+ 00032217  0x000087ec call  0x0000225a 
+ 00032218  0x000087ed nrtn  0x00000005 
+ 00032219  0x000087ef jam  0x00000001 , 0x00000a90 
+ 00032220  0x000087f0 branch  0x00007d8f 
+ 00032221  0x000087f6 fetch  0x00000002 , 0x00004682 
+ 00032222  0x000087f7 set1  0x00000006 
+ 00032223  0x000087f8 store  0x00000002 , 0x00004682 
+ 00032224  0x000087f9 jam  0x00000003 , 0x00004093 
+ 00032225  0x000087fa rtn 
+ 00032226  0x000087ff jam  0x00000000 , 0x00004680 
+ 00032227  0x00008800 jam  0x00000000 , 0x00004093 
+ 00032228  0x00008801 fetch  0x00000002 , 0x00004682 
+ 00032229  0x00008802 set0  0x00000006 
+ 00032230  0x00008803 store  0x00000002 , 0x00004682 
+ 00032231  0x00008804 rtn 
+ 00032232  0x00008809 jam  0x00000005 , 0x000041ce 
+ 00032233  0x0000880a rtn 
+ 00032234  0x0000880f jam  0x00000007 , 0x0000007c 
+ 00032235  0x00008810 jam  0x00000013 , 0x000004ca 
+ 00032236  0x00008811 rtn 
+ 00032237  0x00008816 rtn 
+ 00032238  0x0000881b rtn 
+ 00032239  0x00008820 rtn 
+ 00032240  0x00008825 jam  0x00000002 , 0x000004d4 
+ 00032241  0x00008826 branch  0x00004d0a 
+ 00032242  0x0000882b rtn 
+ 00032243  0x00008830 rtn 
+ 00032244  0x00008835 jam  0x00000001 , 0x0000436e 
+ 00032245  0x00008836 jam  0x00000000 , 0x00004484 
+ 00032246  0x00008837 fetch  0x00000002 , 0x00004682 
+ 00032247  0x00008838 set1  0x0000000b , 0x0000003f 
+ 00032248  0x00008839 store  0x00000002 , 0x00004682 
+ 00032249  0x0000883a rtn 
+ 00032250  0x0000883f fetch  0x00000002 , 0x00004682 
+ 00032251  0x00008840 set0  0x0000000b , 0x0000003f 
+ 00032252  0x00008841 store  0x00000002 , 0x00004682 
+ 00032253  0x00008842 jam  0x00000000 , 0x0000436e 
+ 00032254  0x00008843 rtn 
+ 00032255  0x00008848 jam  0x00000001 , 0x0000436e 
+ 00032256  0x00008849 jam  0x00000001 , 0x00004484 
+ 00032257  0x0000884a fetch  0x00000002 , 0x00004682 
+ 00032258  0x0000884b set1  0x0000000b , 0x0000003f 
+ 00032259  0x0000884c store  0x00000002 , 0x00004682 
+ 00032260  0x0000884d rtn 
+ 00032261  0x00008852 fetch  0x00000002 , 0x00004682 
+ 00032262  0x00008853 set0  0x0000000b , 0x0000003f 
+ 00032263  0x00008854 store  0x00000002 , 0x00004682 
+ 00032264  0x00008855 jam  0x00000000 , 0x0000436e 
+ 00032265  0x00008856 rtn 
+ 00032266  0x0000885b setarg  0x00000014 
+ 00032267  0x0000885c store  0x00000002 , 0x0000046d 
+ 00032268  0x0000885d store  0x00000002 , 0x000044ba 
+ 00032269  0x0000885e branch  0x00005c92 
+ 00032270  0x00008863 branch  0x00005abf 
+ 00032271  0x00008868 arg  0x00000000 , 0x00000011 
+ 00032272  0x00008869 branch  0x00007d19 
+ 00032273  0x0000886e arg  0x00000000 , 0x00000011 
+ 00032274  0x0000886f branch  0x00007d14 
+ 00032275  0x00008874 arg  0x00000000 , 0x00000011 
+ 00032276  0x00008875 branch  0x00007d1e 
+ 00032277  0x0000887a jam  0x00000001 , 0x00004369 
+ 00032278  0x0000887b jam  0x0000001b , 0x000041ce 
+ 00032279  0x0000887e rtn 
+ 00032280  0x00008883 jam  0x00000001 , 0x00004369 
+ 00032281  0x00008884 rtn 
+ 00032282  0x00008889 jam  0x00000000 , 0x00004369 
+ 00032283  0x0000888a jam  0x00000000 , 0x000041ce 
+ 00032284  0x0000888b rtn 
+ 00032285  0x00008890 fetch  0x00000002 , 0x000041eb 
+ 00032286  0x00008891 call  0x00007f9c 
+ 00032287  0x00008892 fetch  0x00000001 , 0x00004686 
+ 00032288  0x00008893 beq  0x000000ff , 0x00007e23 
+ 00032289  0x00008894 copy  0x0000003f , 0x00000002 
+ 00032290  0x00008895 call  0x000067fb 
+ 00032291  0x00008897 call  0x00007d98 
+ 00032292  0x00008898 branch  0x00002b1f 
+ 00032293  0x0000889d branch  0x00005b02 
+ 00032294  0x000088a2 jam  0x00000034 , 0x0000007c 
+ 00032295  0x000088a3 set1  0x00000003 , 0x00000000 
+ 00032296  0x000088a4 nrtn  0x00000029 
+ 00032297  0x000088a5 jam  0x00000000 , 0x0000455b 
+ 00032298  0x000088a6 jam  0x00000013 , 0x0000007c 
+ 00032299  0x000088a7 fetch  0x00000001 , 0x0000016d 
+ 00032300  0x000088a8 set0  0x00000002 , 0x0000003f 
+ 00032301  0x000088a9 store  0x00000001 , 0x0000016d 
+ 00032302  0x000088aa rtn 
+ 00032303  0x000088af force  0x00000003 , 0x00000007 
+ 00032304  0x000088b0 branch  0x00007f07 
+ 00032305  0x000088b5 call  0x000062f8 
+ 00032306  0x000088b6 jam  0x00000041 , 0x0000007d 
+ 00032307  0x000088b7 branch  0x00005f9d 
+ 00032308  0x000088bb fetch  0x00000001 , 0x00004682 
+ 00032309  0x000088bc rtnbit0  0x0000000c 
+ 00032310  0x000088bd rtnbit0  0x00000007 
+ 00032311  0x000088be branch  0x00007e2f 
+ 00032312  0x000088c4 fetch  0x00000002 , 0x00004218 
+ 00032313  0x000088c5 add  0x0000003f , 0x00000002 , 0x00000005 
+ 00032314  0x000088c6 setarg  0x00000000 
+ 00032315  0x000088c7 istore  0x00000003 , 0x00000005 
+ 00032316  0x000088c8 rtn 
+ 00032317  0x000088cd call  0x00007fe9 
+ 00032318  0x000088ce call  0x00007e69 
+ 00032319  0x000088cf rtn  0x00000034 
+ 00032320  0x000088d0 fetch  0x00000002 , 0x00004218 
+ 00032321  0x000088d1 add  0x0000003f , 0x00000002 , 0x00000012 
+ 00032322  0x000088d2 ifetcht  0x00000001 , 0x00000012 
+ 00032323  0x000088d3 increase  0x00000001 , 0x00000002 
+ 00032324  0x000088d4 istoret  0x00000001 , 0x00000012 
+ 00032325  0x000088d6 ifetcht  0x00000001 , 0x0000003f 
+ 00032326  0x000088d7 copy  0x00000002 , 0x00000039 
+ 00032327  0x000088d8 add  0x0000003f , 0x00000004 , 0x00000012 
+ 00032328  0x000088d9 ifetch  0x00000001 , 0x00000012 
+ 00032329  0x000088da imul32  0x00000002 , 0x0000003f 
+ 00032330  0x000088db iadd  0x00000006 , 0x00000005 
+ 00032331  0x000088dc copy  0x00000011 , 0x00000006 
+ 00032332  0x000088de call  0x00007f01 
+ 00032333  0x000088df call  0x00007e6d 
+ 00032334  0x000088e0 pincrease  0xffffffff 
+ 00032335  0x000088e1 ifetcht  0x00000001 , 0x00000012 
+ 00032336  0x000088e2 increase  0x00000001 , 0x00000002 
+ 00032337  0x000088e3 iand  0x00000002 , 0x00000002 
+ 00032338  0x000088e4 istoret  0x00000001 , 0x00000012 
+ 00032339  0x000088e5 branch  0x00007fe7 
+ 00032340  0x000088eb call  0x00007fe9 
+ 00032341  0x000088ec call  0x00007e65 
+ 00032342  0x000088ed rtn  0x00000034 
+ 00032343  0x000088ee fetch  0x00000002 , 0x00004218 
+ 00032344  0x000088ef add  0x0000003f , 0x00000002 , 0x00000012 
+ 00032345  0x000088f0 ifetcht  0x00000001 , 0x00000012 
+ 00032346  0x000088f1 increase  0xffffffff , 0x00000002 
+ 00032347  0x000088f2 istoret  0x00000001 , 0x00000012 
+ 00032348  0x000088f3 ifetcht  0x00000001 , 0x0000003f 
+ 00032349  0x000088f4 copy  0x00000002 , 0x00000039 
+ 00032350  0x000088f5 add  0x0000003f , 0x00000003 , 0x00000012 
+ 00032351  0x000088f6 ifetch  0x00000001 , 0x00000012 
+ 00032352  0x000088f7 imul32  0x00000002 , 0x0000003f 
+ 00032353  0x000088f8 iadd  0x00000006 , 0x00000006 
+ 00032354  0x000088f9 increase  0x00000001 , 0x00000006 
+ 00032355  0x000088fa copy  0x00000011 , 0x00000005 
+ 00032356  0x000088fb branch  0x00007e4c 
+ 00032357  0x00008900 fetch  0x00000002 , 0x00004218 
+ 00032358  0x00008901 add  0x0000003f , 0x00000002 , 0x00000006 
+ 00032359  0x00008902 ifetch  0x00000001 , 0x00000006 
+ 00032360  0x00008903 rtn 
+ 00032361  0x00008907 call  0x00007e6d 
+ 00032362  0x00008908 ifetcht  0x00000001 , 0x00000006 
+ 00032363  0x00008909 isub  0x00000002 , 0x0000003f 
+ 00032364  0x0000890a rtn 
+ 00032365  0x0000890e fetch  0x00000002 , 0x00004218 
+ 00032366  0x0000890f add  0x0000003f , 0x00000001 , 0x00000006 
+ 00032367  0x00008910 ifetch  0x00000001 , 0x00000006 
+ 00032368  0x00008911 rtn 
+ 00032369  0x0000891a sub  0x00000039 , 0x00000000 , 0x0000003e 
+ 00032370  0x0000891b rtn  0x00000005 
+ 00032371  0x0000891d rshift  0x0000003f , 0x0000003f 
+ 00032372  0x0000891e loop  0x00007e73 
+ 00032373  0x0000891f rtn 
+ 00032374  0x00008923 force  0x00000001 , 0x0000003f 
+ 00032375  0x00008924 sub  0x00000039 , 0x00000000 , 0x0000003e 
+ 00032376  0x00008925 rtn  0x00000005 
+ 00032377  0x00008927 lshift  0x0000003f , 0x0000003f 
+ 00032378  0x00008928 loop  0x00007e79 
+ 00032379  0x00008929 rtn 
+ 00032380  0x0000892b deposit  0x00000005 
+ 00032381  0x0000892c store  0x00000002 , 0x00000abb 
+ 00032382  0x0000892d storet  0x00000008 , 0x00000aa2 
+ 00032383  0x0000892e deposit  0x0000000b 
+ 00032384  0x0000892f store  0x00000004 , 0x00000aaa 
+ 00032385  0x00008930 call  0x00007e85 
+ 00032386  0x00008931 deposit  0x00000006 
+ 00032387  0x00008932 store  0x00000002 , 0x00000ab9 
+ 00032388  0x00008933 rtn 
+ 00032389  0x00008936 deposit  0x00000011 
+ 00032390  0x00008937 store  0x00000004 , 0x00000aae 
+ 00032391  0x00008938 deposit  0x00000012 
+ 00032392  0x00008939 store  0x00000004 , 0x00000ab2 
+ 00032393  0x0000893a deposit  0x00000013 
+ 00032394  0x0000893b store  0x00000003 , 0x00000ab6 
+ 00032395  0x0000893c rtn 
+ 00032396  0x0000893f fetcht  0x00000008 , 0x00000aa2 
+ 00032397  0x00008940 fetch  0x00000004 , 0x00000aaa 
+ 00032398  0x00008941 iforce  0x0000000b 
+ 00032399  0x00008942 call  0x00007e95 
+ 00032400  0x00008943 fetch  0x00000002 , 0x00000abb 
+ 00032401  0x00008944 iforce  0x00000005 
+ 00032402  0x00008945 fetch  0x00000002 , 0x00000ab9 
+ 00032403  0x00008946 iforce  0x00000006 
+ 00032404  0x00008947 rtn 
+ 00032405  0x0000894a fetch  0x00000004 , 0x00000aae 
+ 00032406  0x0000894b iforce  0x00000011 
+ 00032407  0x0000894c fetch  0x00000004 , 0x00000ab2 
+ 00032408  0x0000894d iforce  0x00000012 
+ 00032409  0x0000894e fetch  0x00000003 , 0x00000ab6 
+ 00032410  0x0000894f iforce  0x00000013 
+ 00032411  0x00008950 rtn 
+ 00032412  0x00008953 fetch  0x00000002 , 0x00000abb 
+ 00032413  0x00008954 copy  0x0000003f , 0x00000005 
+ 00032414  0x00008955 rtn 
+ 00032415  0x00008957 fetch  0x00000002 , 0x00000ab9 
+ 00032416  0x00008958 copy  0x0000003f , 0x00000006 
+ 00032417  0x00008959 rtn 
+ 00032418  0x0000895b copy  0x00000005 , 0x0000003f 
+ 00032419  0x0000895c store  0x00000002 , 0x00000abb 
+ 00032420  0x0000895d rtn 
+ 00032421  0x0000895f copy  0x00000006 , 0x0000003f 
+ 00032422  0x00008960 store  0x00000002 , 0x00000ab9 
+ 00032423  0x00008961 rtn 
+ 00032424  0x00008966 copy  0x00000005 , 0x0000003f 
+ 00032425  0x00008967 store  0x00000002 , 0x00000a97 
+ 00032426  0x00008968 copy  0x00000006 , 0x0000003f 
+ 00032427  0x00008969 store  0x00000002 , 0x00000a95 
+ 00032428  0x0000896a rtn 
+ 00032429  0x0000896c fetch  0x00000002 , 0x00000a97 
+ 00032430  0x0000896d copy  0x0000003f , 0x00000005 
+ 00032431  0x0000896e fetch  0x00000002 , 0x00000a95 
+ 00032432  0x0000896f copy  0x0000003f , 0x00000006 
+ 00032433  0x00008970 rtn 
+ 00032434  0x00008973 call  0x00007ebd 
+ 00032435  0x00008975 call  0x00007ebd 
+ 00032436  0x00008976 branch  0x00007ebd 
+ 00032437  0x00008978 call  0x00007eb9 
+ 00032438  0x0000897a ifetch  0x00000004 , 0x00000006 
+ 00032439  0x0000897b istore  0x00000004 , 0x00000005 
+ 00032440  0x0000897c rtn 
+ 00032441  0x0000897e ifetch  0x00000008 , 0x00000006 
+ 00032442  0x0000897f istore  0x00000008 , 0x00000005 
+ 00032443  0x00008980 rtn 
+ 00032444  0x00008983 call  0x00007ebf 
+ 00032445  0x00008985 call  0x00007eb9 
+ 00032446  0x00008987 call  0x00007eb9 
+ 00032447  0x00008989 call  0x00007eb9 
+ 00032448  0x0000898a branch  0x00007eb9 
+ 00032449  0x0000898f arg  0x0000000a , 0x00000039 
+ 00032450  0x00008991 nop  0x00002ee0 
+ 00032451  0x00008992 loop  0x00007ec2 
+ 00032452  0x00008993 rtn 
+ 00032453  0x00008996 force  0x00000003 , 0x00000039 
+ 00032454  0x00008998 force  0x00000000 , 0x0000003f 
+ 00032455  0x0000899a istore  0x00000008 , 0x00000005 
+ 00032456  0x0000899b loop  0x00007ec7 
+ 00032457  0x0000899c rtn 
+ 00032458  0x0000899f force  0x00000000 , 0x0000003f 
+ 00032459  0x000089a0 istore  0x00000008 , 0x00000005 
+ 00032460  0x000089a1 rtn 
+ 00032461  0x000089a3 force  0x00000000 , 0x0000003f 
+ 00032462  0x000089a4 istore  0x00000004 , 0x00000005 
+ 00032463  0x000089a5 rtn 
+ 00032464  0x000089a8 force  0x00000004 , 0x00000039 
+ 00032465  0x000089a9 branch  0x00007ec6 
+ 00032466  0x000089ab force  0x00000008 , 0x00000039 
+ 00032467  0x000089ac branch  0x00007ec6 
+ 00032468  0x000089af deposit  0x00000039 
+ 00032469  0x000089b0 rtn  0x00000034 
+ 00032470  0x000089b1 setarg  0x00000000 
+ 00032471  0x000089b3 istore  0x00000001 , 0x00000005 
+ 00032472  0x000089b4 loop  0x00007ed7 
+ 00032473  0x000089b5 rtn 
+ 00032474  0x000089b9 arg  0x00000020 , 0x00000039 
+ 00032475  0x000089ba arg  0x00000ac2 , 0x00000005 
+ 00032476  0x000089bb branch  0x00007ed4 
+ 00032477  0x000089be ifetch  0x00000004 , 0x00000013 
+ 00032478  0x000089bf ifetcht  0x00000004 , 0x00000011 
+ 00032479  0x000089c0 ixor  0x00000002 , 0x0000003f 
+ 00032480  0x000089c1 istore  0x00000004 , 0x00000005 
+ 00032481  0x000089c2 increase  0x00000004 , 0x00000011 
+ 00032482  0x000089c3 increase  0x00000004 , 0x00000013 
+ 00032483  0x000089c4 loop  0x00007edd 
+ 00032484  0x000089c5 rtn 
+ 00032485  0x000089ca bpatchx  0x000000fb , 0x0000403f 
+ 00032486  0x000089cb copy  0x00000039 , 0x0000003f 
+ 00032487  0x000089cc sub  0x0000003f , 0x00000001 , 0x0000003e 
+ 00032488  0x000089cd rtn  0x00000002 
+ 00032489  0x000089ce iadd  0x00000011 , 0x00000012 
+ 00032490  0x000089cf increase  0xffffffff , 0x00000012 
+ 00032491  0x000089d0 rshift  0x00000039 , 0x00000039 
+ 00032492  0x000089d2 ifetcht  0x00000001 , 0x00000011 
+ 00032493  0x000089d3 ifetch  0x00000001 , 0x00000012 
+ 00032494  0x000089d4 istore  0x00000001 , 0x00000011 
+ 00032495  0x000089d5 istoret  0x00000001 , 0x00000012 
+ 00032496  0x000089d6 increase  0xffffffff , 0x00000012 
+ 00032497  0x000089d7 increase  0x00000001 , 0x00000011 
+ 00032498  0x000089d8 loop  0x00007eec 
+ 00032499  0x000089d9 rtn 
+ 00032500  0x000089dd deposit  0x00000039 
+ 00032501  0x000089de rtn  0x00000034 
+ 00032502  0x000089e0 increase  0xfffffff8 , 0x00000039 
+ 00032503  0x000089e1 call  0x00007eb9 , 0x00000002 
+ 00032504  0x000089e2 rtn  0x00000005 
+ 00032505  0x000089e3 branch  0x00007ef6 , 0x00000002 
+ 00032506  0x000089e4 increase  0x00000008 , 0x00000039 
+ 00032507  0x000089e6 increase  0xfffffffc , 0x00000039 
+ 00032508  0x000089e7 call  0x00007eb6 , 0x00000002 
+ 00032509  0x000089e8 rtn  0x00000005 
+ 00032510  0x000089e9 branch  0x00007efb , 0x00000002 
+ 00032511  0x000089ea increase  0x00000004 , 0x00000039 
+ 00032512  0x000089eb branch  0x00007f01 
+ 00032513  0x000089ee deposit  0x00000039 
+ 00032514  0x000089ef rtn  0x00000034 
+ 00032515  0x000089f1 ifetch  0x00000001 , 0x00000006 
+ 00032516  0x000089f2 istore  0x00000001 , 0x00000005 
+ 00032517  0x000089f3 loop  0x00007f03 
+ 00032518  0x000089f4 rtn 
+ 00032519  0x000089f7 setarg  0x00000000 
+ 00032520  0x000089f9 rshift  0x00000022 , 0x00000002 
+ 00032521  0x000089fa storet  0x00000004 , 0x00004094 
+ 00032522  0x000089fb arg  0x0000419d , 0x00000005 
+ 00032523  0x000089fc iforce  0x00000002 
+ 00032524  0x000089fd lshift  0x00000007 , 0x0000003f 
+ 00032525  0x000089fe iadd  0x00000005 , 0x00000005 
+ 00032526  0x000089ff istoret  0x00000002 , 0x00000005 
+ 00032527  0x00008a00 bpatchx  0x000000fc , 0x0000403f 
+ 00032528  0x00008a01 rtn 
+ 00032529  0x00008a04 arg  0x00000800 , 0x0000000b 
+ 00032530  0x00008a05 lshift16  0x0000000b , 0x0000000b 
+ 00032531  0x00008a06 iadd  0x0000000b , 0x0000003f 
+ 00032532  0x00008a07 rtn 
+ 00032533  0x00008a0b arg  0x00000000 , 0x00000007 
+ 00032534  0x00008a0d bpatchx  0x000000fd , 0x0000403f 
+ 00032535  0x00008a0e fetcht  0x00000004 , 0x00004094 
+ 00032536  0x00008a0f rshift  0x00000022 , 0x0000003f 
+ 00032537  0x00008a10 store  0x00000004 , 0x00004094 
+ 00032538  0x00008a11 isub  0x00000002 , 0x0000003e 
+ 00032539  0x00008a12 ncall  0x00007f11 , 0x00000002 
+ 00032540  0x00008a13 isub  0x00000002 , 0x0000000b 
+ 00032541  0x00008a14 copy  0x0000000b , 0x00000002 
+ 00032542  0x00008a15 arg  0x0000419d , 0x00000006 
+ 00032543  0x00008a16 copy  0x00000006 , 0x00000005 
+ 00032544  0x00008a17 arg  0x00000010 , 0x00000039 
+ 00032545  0x00008a19 ifetch  0x00000002 , 0x00000006 
+ 00032546  0x00008a1a isub  0x00000002 , 0x0000003f 
+ 00032547  0x00008a1b branch  0x00007f25 , 0x00000002 
+ 00032548  0x00008a1c force  0x00000000 , 0x0000003f 
+ 00032549  0x00008a1e istore  0x00000002 , 0x00000005 
+ 00032550  0x00008a1f loop  0x00007f21 
+ 00032551  0x00008a20 arg  0x0000419d , 0x00000006 
+ 00032552  0x00008a21 lshift  0x00000007 , 0x0000003f 
+ 00032553  0x00008a22 iadd  0x00000006 , 0x00000006 
+ 00032554  0x00008a23 ifetch  0x00000002 , 0x00000006 
+ 00032555  0x00008a24 rtn 
+ 00032556  0x00008a2a iadd  0x00000002 , 0x00000002 
+ 00032557  0x00008a2b copy  0x00000002 , 0x00000039 
+ 00032558  0x00008a2c setarg  0x00000ea6 
+ 00032559  0x00008a2d isub  0x00000039 , 0x0000003f 
+ 00032560  0x00008a2e rtn  0x00000002 
+ 00032561  0x00008a2f sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00032562  0x00008a30 rshift16  0x00000002 , 0x00000002 
+ 00032563  0x00008a31 increase  0x00000001 , 0x00000002 
+ 00032564  0x00008a32 lshift16  0x00000002 , 0x00000002 
+ 00032565  0x00008a33 ior  0x00000002 , 0x00000002 
+ 00032566  0x00008a34 rtn 
+ 00032567  0x00008a37 call  0x00007f39 
+ 00032568  0x00008a38 branch  0x00007f43 
+ 00032569  0x00008a3c disable  0x00000028 
+ 00032570  0x00008a3d isub  0x00000002 , 0x0000003f 
+ 00032571  0x00008a3e branch  0x00007f3e , 0x00000002 
+ 00032572  0x00008a3f enable  0x00000028 
+ 00032573  0x00008a40 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00032574  0x00008a42 rtnbit0  0x0000000f 
+ 00032575  0x00008a43 arg  0xffff0ea6 , 0x00000002 
+ 00032576  0x00008a44 iadd  0x00000002 , 0x0000003f 
+ 00032577  0x00008a45 set0  0x00000040 , 0x0000003f 
+ 00032578  0x00008a46 rtn 
+ 00032579  0x00008a49 iforce  0x00000006 
+ 00032580  0x00008a4a rshift16  0x0000003f , 0x0000003f 
+ 00032581  0x00008a4b arg  0x00000ea6 , 0x00000002 
+ 00032582  0x00008a4c imul32  0x00000002 , 0x0000003f 
+ 00032583  0x00008a4d iadd  0x00000006 , 0x0000003f 
+ 00032584  0x00008a4e rtn 
+ 00032585  0x00008a52 lshift8  0x0000003f , 0x0000003f 
+ 00032586  0x00008a53 lshift4  0x0000003f , 0x0000003f 
+ 00032587  0x00008a54 fetcht  0x00000003 , 0x0000416f 
+ 00032588  0x00008a55 idiv  0x00000002 
+ 00032589  0x00008a56 call  0x00007f86 
+ 00032590  0x00008a57 quotient  0x00000002 
+ 00032591  0x00008a58 rtn 
+ 00032592  0x00008a5c arg  0x00000ea6 , 0x00000002 
+ 00032593  0x00008a5d idiv  0x00000002 
+ 00032594  0x00008a5e call  0x00007f86 
+ 00032595  0x00008a5f quotient  0x0000003f 
+ 00032596  0x00008a60 lshift16  0x0000003f , 0x0000003f 
+ 00032597  0x00008a61 remainder  0x00000002 
+ 00032598  0x00008a62 ior  0x00000002 , 0x00000002 
+ 00032599  0x00008a63 rtn 
+ 00032600  0x00008a6b arg  0x00000000 , 0x00000002 
+ 00032601  0x00008a6d copy  0x00000002 , 0x00000013 
+ 00032602  0x00008a6e ifetch  0x00000001 , 0x00000003 
+ 00032603  0x00008a6f call  0x00007f64 
+ 00032604  0x00008a70 copy  0x00000013 , 0x00000002 
+ 00032605  0x00008a71 call  0x00007f95 
+ 00032606  0x00008a72 arg  0x0000000a , 0x00000012 
+ 00032607  0x00008a73 imul32  0x00000012 , 0x0000003f 
+ 00032608  0x00008a74 iadd  0x00000002 , 0x0000003f 
+ 00032609  0x00008a75 copy  0x0000003f , 0x00000002 
+ 00032610  0x00008a76 loop  0x00007f59 
+ 00032611  0x00008a77 rtn 
+ 00032612  0x00008a7c arg  0x0000003a , 0x00000002 
+ 00032613  0x00008a7d isub  0x00000002 , 0x0000003e 
+ 00032614  0x00008a7e nbranch  0x00007f6d , 0x00000002 
+ 00032615  0x00008a7f arg  0x00000061 , 0x00000002 
+ 00032616  0x00008a80 isub  0x00000002 , 0x0000003e 
+ 00032617  0x00008a81 branch  0x00007f70 , 0x00000002 
+ 00032618  0x00008a82 arg  0x00000037 , 0x00000002 
+ 00032619  0x00008a83 isub  0x00000002 , 0x0000003f 
+ 00032620  0x00008a84 rtn 
+ 00032621  0x00008a86 arg  0x00000030 , 0x00000002 
+ 00032622  0x00008a87 isub  0x00000002 , 0x0000003f 
+ 00032623  0x00008a88 rtn 
+ 00032624  0x00008a8a arg  0x00000057 , 0x00000002 
+ 00032625  0x00008a8b isub  0x00000002 , 0x0000003f 
+ 00032626  0x00008a8c rtn 
+ 00032627  0x00008a8f copy  0x00000002 , 0x00000030 
+ 00032628  0x00008a90 setarg  0x000001ff 
+ 00032629  0x00008a91 force  0x00000000 , 0x00000012 
+ 00032630  0x00008a93 rshift3  0x0000003f , 0x00000011 
+ 00032631  0x00008a94 rshift  0x00000011 , 0x00000011 
+ 00032632  0x00008a95 ixor  0x00000011 , 0x00000011 
+ 00032633  0x00008a96 isolate1  0x00000000 , 0x00000011 
+ 00032634  0x00008a97 setflag  0x00000001 , 0x00000009 , 0x0000003f 
+ 00032635  0x00008a98 rshift  0x00000002 , 0x00000002 
+ 00032636  0x00008a99 isolate1  0x00000000 , 0x0000003f 
+ 00032637  0x00008a9a setflag  0x00000001 , 0x00000007 , 0x00000002 
+ 00032638  0x00008a9b rshift  0x0000003f , 0x0000003f 
+ 00032639  0x00008a9c increase  0x00000001 , 0x00000012 
+ 00032640  0x00008a9d compare  0x00000000 , 0x00000012 , 0x00000007 
+ 00032641  0x00008a9e nbranch  0x00007f76 , 0x00000001 
+ 00032642  0x00008a9f istoret  0x00000001 , 0x00000005 
+ 00032643  0x00008aa0 loop  0x00007f76 
+ 00032644  0x00008aa1 copy  0x00000030 , 0x00000002 
+ 00032645  0x00008aa2 rtn 
+ 00032646  0x00008aa6 rtn  0x00000035 
+ 00032647  0x00008aa7 branch  0x00007f86 
+ 00032648  0x00008ab3 ifetch  0x00000001 , 0x00000011 
+ 00032649  0x00008ab4 ifetcht  0x00000001 , 0x00000012 
+ 00032650  0x00008ab5 isub  0x00000002 , 0x0000003e 
+ 00032651  0x00008ab6 nrtn  0x00000005 
+ 00032652  0x00008ab7 increase  0x00000001 , 0x00000011 
+ 00032653  0x00008ab8 increase  0x00000001 , 0x00000012 
+ 00032654  0x00008ab9 loop  0x00007f88 
+ 00032655  0x00008aba force  0x00000000 , 0x0000003e 
+ 00032656  0x00008abb rtn 
+ 00032657  0x00008abf isub  0x00000002 , 0x0000003e 
+ 00032658  0x00008ac0 nrtn  0x00000002 
+ 00032659  0x00008ac1 deposit  0x00000002 
+ 00032660  0x00008ac2 rtn 
+ 00032661  0x00008ac5 iadd  0x00000002 , 0x0000003f 
+ 00032662  0x00008ac6 isub  0x00000002 , 0x00000002 
+ 00032663  0x00008ac7 isub  0x00000002 , 0x0000003f 
+ 00032664  0x00008ac8 rtn 
+ 00032665  0x00008acb arg  0x00000200 , 0x00000039 
+ 00032666  0x00008acc arg  0x00004000 , 0x00000005 
+ 00032667  0x00008acd branch  0x00007ec6 
+ 00032668  0x00008ad1 rtn  0x00000034 
+ 00032669  0x00008ad2 copy  0x0000003f , 0x0000003d 
+ 00032670  0x00008ad6 hfetch  0x00000002 , 0x0000810e 
+ 00032671  0x00008ad7 nbranch  0x00007f9e , 0x00000034 
+ 00032672  0x00008ad8 rtn 
+ 00032673  0x00008adb jam  0x00000001 , 0x00008203 
+ 00032674  0x00008adc rtn 
+ 00032675  0x00008adf hstore  0x00000002 , 0x00008205 
+ 00032676  0x00008ae0 hfetch  0x00000001 , 0x00008203 
+ 00032677  0x00008ae1 set1  0x00000004 , 0x0000003f 
+ 00032678  0x00008ae2 hstore  0x00000001 , 0x00008203 
+ 00032679  0x00008ae3 rtn 
+ 00032680  0x00008ae5 hstore  0x00000002 , 0x00008207 
+ 00032681  0x00008ae6 hfetch  0x00000001 , 0x00008203 
+ 00032682  0x00008ae7 set1  0x00000006 , 0x0000003f 
+ 00032683  0x00008ae8 hstore  0x00000001 , 0x00008203 
+ 00032684  0x00008ae9 rtn 
+ 00032685  0x00008aec hstore  0x00000002 , 0x00008205 
+ 00032686  0x00008aed jam  0x00000030 , 0x00008203 
+ 00032687  0x00008aee rtn 
+ 00032688  0x00008af3 hfetch  0x00000001 , 0x00008043 
+ 00032689  0x00008af4 set0  0x00000004 , 0x0000003f 
+ 00032690  0x00008af5 hstore  0x00000001 , 0x00008043 
+ 00032691  0x00008af6 rtn 
+ 00032692  0x00008af9 hfetch  0x00000002 , 0x0000810e 
+ 00032693  0x00008afa arg  0x00000200 , 0x00000002 
+ 00032694  0x00008afc isub  0x00000002 , 0x0000003e 
+ 00032695  0x00008afd rtn 
+ 00032696  0x00008b04 bpatchx  0x000000fe , 0x0000403f 
+ 00032697  0x00008b05 ifetcht  0x00000008 , 0x00000011 
+ 00032698  0x00008b06 and  0x00000002 , 0x000000ff , 0x0000003f 
+ 00032699  0x00008b07 nbranch  0x00007fbe , 0x00000034 
+ 00032700  0x00008b08 rshift8  0x00000002 , 0x0000003f 
+ 00032701  0x00008b09 istore  0x00000008 , 0x00000011 
+ 00032702  0x00008b0b increase  0x00000007 , 0x00000011 
+ 00032703  0x00008b0c ifetch  0x00000001 , 0x00000011 
+ 00032704  0x00008b0d nbranch  0x00002a8c , 0x00000034 
+ 00032705  0x00008b0e fetch  0x00000001 , 0x00000a99 
+ 00032706  0x00008b0f istore  0x00000001 , 0x00000011 
+ 00032707  0x00008b10 rtn 
+ 00032708  0x00008b16 bpatchx  0x000000ff , 0x0000403f 
+ 00032709  0x00008b17 arg  0x00000008 , 0x00000039 
+ 00032710  0x00008b18 ifetch  0x00000008 , 0x00000011 
+ 00032711  0x00008b19 rtn  0x00000034 
+ 00032712  0x00008b1b ifetch  0x00000001 , 0x00000011 
+ 00032713  0x00008b1c nbranch  0x00007fcd , 0x00000034 
+ 00032714  0x00008b1d increase  0x00000001 , 0x00000011 
+ 00032715  0x00008b1e loop  0x00007fc8 
+ 00032716  0x00008b1f branch  0x00002a8c 
+ 00032717  0x00008b21 arg  0x00000000 , 0x00000002 
+ 00032718  0x00008b22 istoret  0x00000001 , 0x00000011 
+ 00032719  0x00008b23 rtn 
+ 00032720  0x00008b29 ifetch  0x00000008 , 0x00000011 
+ 00032721  0x00008b2a rtn 
+ 00032722  0x00008b30 ifetch  0x00000001 , 0x00000011 
+ 00032723  0x00008b31 rtn 
+ 00032724  0x00008b35 ifetch  0x00000002 , 0x00000011 
+ 00032725  0x00008b36 rtn 
+ 00032726  0x00008b3b arg  0x00000000 , 0x00000002 
+ 00032727  0x00008b3d fetch  0x00000001 , 0x00000006 
+ 00032728  0x00008b3e loop  0x00007fd7 , 0x00000034 
+ 00032729  0x00008b3f increase  0x00000001 , 0x00000002 
+ 00032730  0x00008b40 loop  0x00007fd7 
+ 00032731  0x00008b41 copy  0x00000002 , 0x0000003f 
+ 00032732  0x00008b42 rtn 
+ 00032733  0x00008b45 isub  0x00000002 , 0x0000003e 
+ 00032734  0x00008b46 nrtn  0x00000002 
+ 00032735  0x00008b47 copy  0x00000002 , 0x0000003f 
+ 00032736  0x00008b48 rtn 
+ 00032737  0x00008b4c force  0xffffffff , 0x0000003e 
+ 00032738  0x00008b4d rtn 
+ 00032739  0x00008b50 force  0x00000001 , 0x0000003e 
+ 00032740  0x00008b51 rtn 
+ 00032741  0x00008b53 force  0x00000000 , 0x0000003e 
+ 00032742  0x00008b54 rtn 
+ 00032743  0x00008b57 enable  0x00000028 
+ 00032744  0x00008b58 rtn 
+ 00032745  0x00008b5b disable  0x00000028 
+ 00032746  0x00008b5c rtn 
+ 00032747  0x00008b5f enable  0x0000002c 
+ 00032748  0x00008b60 rtn 
+ 00032749  0x00008b63 disable  0x0000002c 
+ 00032750  0x00008b64 rtn 
+ 00032751  0x00008b67 setarg  0x00000001 
+ 00032752  0x00008b68 rtn 
+ 00032753  0x00008b6b setarg  0x00000000 
+ 00032754  0x00008b6c rtn 
+ 00032755  0x00008b70 copy  0x00000039 , 0x0000003f 
+ 00032756  0x00008b71 rtn  0x00000034 
+ 00032757  0x00008b72 copy  0x00000006 , 0x0000003f 
+ 00032758  0x00008b73 iadd  0x00000039 , 0x0000003f 
+ 00032759  0x00008b74 increase  0xffffffff , 0x0000003f 
+ 00032760  0x00008b75 copy  0x0000003f , 0x00000006 
+ 00032761  0x00008b77 ifetch  0x00000001 , 0x00000006 
+ 00032762  0x00008b78 increase  0xfffffffe , 0x00000006 
+ 00032763  0x00008b79 istore  0x00000001 , 0x00000005 
+ 00032764  0x00008b7a loop  0x00007ff9 
+ 00032765  0x00008b7b rtn 
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/bt_program23.list
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/bt_program23.list	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/bt_program23.list	(working copy)
@@ -0,0 +1,30013 @@
+              include "bt_format "
+              org 0x0000
+0x0000 000068 bbit1 8 ,pf_patch_ext 
+0x0001 000069 beq patch00_0 ,p_soft_reset 
+0x0002 000070 beq patch00_1 ,p_soft_reset_1 
+0x0003 000071 beq patch00_2 ,p_soft_reset_2 
+0x0004 000072 beq patch10_5 ,p_shutdown_radio 
+0x0005 000073 beq patch11_1 ,p_set_freq_tx 
+0x0006 000074 beq patch11_2 ,p_initialize_radio_cont 
+0x0007 000075 beq patch14_1 ,p_init_param 
+0x0008 000076 beq patch16_1 ,p_lpm_check_wake_lock 
+0x0009 000077 beq patch16_2 ,p_g24_dispatch 
+0x000a 000078 beq patch18_4 ,p_device_init 
+0x000b 000079 beq patch19_1 ,p_app_flag_store 
+0x000c 000080 beq patch19_2 ,p_app_initflag_check 
+0x000d 000081 beq patch1c_3 ,p_mouse_seting_dpi 
+0x000e 000082 beq patch1c_6 ,p_mouse_motion 
+0x000f 000083 beq patch1d_2 ,p_mouse_bb_event_discovery_btn 
+0x0010 000084 beq patch1d_3 ,p_mouse_start_discovery 
+0x0011 000085 beq patch1d_4 ,p_mouse_stop_discovery 
+0x0012 000086 branch loop 
+:      000087 pf_patch_ext:
+0x0013 000088 beq patch27_7 ,p_le_enable 
+0x0014 000089 beq patch31_4 ,p_twspi_reset 
+0x0015 000090 branch loop 
+:      000092 p_le_enable:
+0x0016 000093 jam 0x36 ,rf_adc_goff 
+0x0017 000094 jam 0x5f ,rf_agc_nsat 
+0x0018 000095 enable le 
+0x0019 000096 jam 7 ,rfen_ulp 
+0x001a 000098 fetch 1 ,mem_250k_freq_enable 
+0x001b 000099 rtn blank 
+0x001c 000100 jam 0xb8 ,rf_iq_gain 
+0x001d 000101 rtn 
+:      000104 p_rssi_signal:
+0x001e 000105 copy pdata ,rega 
+0x001f 000106 fetcht 1 ,mem_rssi_signal_index 
+0x0020 000107 setarg mem_rssi_signal_buf 
+0x0021 000108 iadd temp ,contw 
+0x0022 000109 copy rega ,pdata 
+0x0023 000110 istore 1 ,contw 
+0x0024 000111 increase 1 ,temp 
+0x0025 000112 and_into rssi_buf_len_signal ,temp 
+0x0026 000113 storet 1 ,mem_rssi_signal_index 
+0x0027 000114 rtn 
+:      000116 p_soft_reset:
+0x0028 000117 hfetch 1 ,0x813b 
+0x0029 000118 store 1 ,mem_power_on_flag 
+0x002a 000119 branch soft_reset + 1 
+:      000121 p_soft_reset_1:
+0x002b 000122 arg mem_sp_state ,contw 
+0x002c 000123 arg 12 ,loopcnt 
+0x002d 000124 call clear_mem 
+0x002e 000125 call rfcomm_init 
+0x002f 000126 call init_lmp 
+0x0030 000127 ncall lpm_disable_exen_output ,wake 
+0x0031 000128 call ui_init + 1 
+0x0032 000129 branch soft_reset + 11 
+:      000131 p_soft_reset_2:
+0x0033 000132 call app_lpm_init ,wake 
+0x0034 000133 call publickey_init 
+0x0035 000134 call lpm_recover_clk ,wake 
+:      000135 p_sp_cal_loop:
+0x0036 000136 call sp_calc_sequence 
+0x0037 000137 fetch 1 ,mem_ssp_enable 
+0x0038 000138 branch main_loop ,blank 
+0x0039 000139 fetch 1 ,mem_sp_local_key_invalid 
+0x003a 000140 branch p_sp_cal_loop ,blank 
+0x003b 000141 branch main_loop 
+:      000143 p_init_param:
+0x003c 000144 setarg param_le_version 
+0x003d 000145 store 3 ,mem_lmp_version 
+0x003e 000146 setarg param_le_subversion 
+0x003f 000147 store 2 ,mem_lmp_version + 3 
+0x0040 000148 branch init_param + 12 
+:      000150 p_lpm_check_wake_lock:
+0x0041 000151 rtnmark1 mark_24g 
+0x0042 000152 fetch 1 ,mem_mouse_clear_sensor_data_flag 
+0x0043 000153 branch disable_blank ,blank 
+0x0044 000154 fetch 1 ,mem_mouse_le_conn_param_reject 
+0x0045 000155 beq le_lpm_disable ,disable_blank 
+0x0046 000156 fetch 2 ,mem_sdp_remote_cid 
+0x0047 000157 nbranch disable_blank ,blank 
+0x0048 000158 fetch 1 ,mem_mouse_wheel_trigger 
+0x0049 000159 nbranch disable_blank ,blank 
+0x004a 000160 branch enable_blank 
+:      000163 p_g24_dispatch:
+0x004b 000164 rtnmark0 mark_24g 
+0x004c 000165 fetch 1 ,mem_24g_transmit_by_interrupt 
+0x004d 000166 beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt 
+:      000167 p_g24_transmit_process:
+0x004e 000168 call p_g24_txdata_prep 
+0x004f 000169 nbranch p_g24_nodata_transmit ,user 
+0x0050 000170 call p_g24_rf_sta_check 
+:      000171 p_g24_transmit_start:
+0x0051 000172 call p_g24_transmit_packet 
+0x0052 000173 fetch 1 ,mem_24g_pairing_sm 
+0x0053 000174 rtnne state_24g_pairing_success 
+0x0054 000175 call power_ctrl_start 
+:      000176 p_g24_short_sleep:
+0x0055 000177 call p_g24_lpm_wait 
+0x0056 000178 nrtn user 
+0x0057 000179 call p_clear_wake 
+0x0058 000180 setarg 60500 
+:      000181 p_g24_enter_sleep:
+0x0059 000182 call clk2lpo 
+0x005a 000183 storet 4 ,mem_sleep_counter 
+0x005b 000184 branch lpm_sleep 
+:      000186 p_g24_transmit_by_interrupt:
+0x005c 000187 call p_g24_timer_check 
+0x005d 000188 nrtn user 
+0x005e 000189 call p_g24_interval_calibrate 
+0x005f 000190 branch p_g24_transmit_process 
+:      000191 p_g24_transmit_by_interrupt_exit:
+0x0060 000192 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt 
+0x0061 000193 jam 0 ,mem_24g_transmit_by_interrupt_exit_count 
+:      000194 p_g24_interval_min:
+0x0062 000195 jam 0 ,mem_24g_pac_index 
+0x0063 000196 fetch 1 ,mem_24g_interval_min 
+:      000197 p_g24_current_interval_store:
+0x0064 000198 store 1 ,mem_24g_interval 
+0x0065 000199 rtn 
+:      000200 p_g24_interval_max:
+0x0066 000201 fetch 1 ,mem_24g_interval_max 
+0x0067 000202 branch p_g24_current_interval_store 
+:      000203 p_g24_interval_calibrate:
+0x0068 000204 fetch 1 ,mem_24g_pac_index 
+0x0069 000205 increase 1 ,pdata 
+0x006a 000206 store 1 ,mem_24g_pac_index 
+0x006b 000207 beq 4 ,p_g24_interval_max 
+0x006c 000208 beq 5 ,p_g24_interval_min 
+0x006d 000209 rtn 
+:      000210 p_g24_transmit_by_interrupt_enable:
+0x006e 000211 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt 
+0x006f 000212 jam 0 ,mem_24g_transmit_by_interrupt_exit_count 
+0x0070 000213 rtn 
+:      000215 p_g24_nodata_transmit:
+0x0071 000216 fetch 1 ,mem_24g_abort_pac 
+0x0072 000217 call p_g24_send_abort_packet ,blank 
+:      000218 p_g24_long_sleep:
+0x0073 000219 call p_g24_lpm_wait 
+0x0074 000220 nrtn user 
+0x0075 000221 fetch 3 ,mem_24g_enter_hibernate 
+0x0076 000222 branch p_g24_enter_sleep 
+:      000224 p_g24_lpm_wait:
+0x0077 000225 enable user 
+0x0078 000226 call lpo_calibration 
+0x0079 000227 fetch 3 ,mem_clks_per_lpo 
+0x007a 000228 branch disable_user ,blank 
+0x007b 000229 fetch 1 ,mem_lpm_mode 
+0x007c 000230 branch disable_user ,blank 
+0x007d 000231 fetch 1 ,mem_24g_transmit_by_interrupt 
+0x007e 000232 beq g24_tx_timer_int_enable ,disable_user 
+0x007f 000233 branch p_mouse_setgpio_lpm 
+:      000235 p_g24_send_abort_packet:
+0x0080 000236 jam 1 ,mem_24g_abort_pac 
+0x0081 000237 jam 0 ,mem_24g_rf_hop_ch 
+0x0082 000238 call p_g24_transmit_rf_ctrl_clear 
+0x0083 000239 store 1 ,mem_24g_txbuf 
+0x0084 000240 setarg 0 
+0x0085 000241 store 7 ,mem_24g_txbuf + 1 
+0x0086 000242 fetch 4 ,mem_24g_device_addr 
+0x0087 000243 store 4 ,mem_24g_txbuf + 8 
+0x0088 000244 jam 12 ,mem_24g_datalen 
+0x0089 000245 fetch 1 ,mem_24g_data_type 
+0x008a 000246 set1 bit_abort ,pdata 
+0x008b 000247 store 1 ,mem_24g_data_type 
+0x008c 000248 call p_g24_txdata_enable_tx 
+0x008d 000249 branch p_g24_transmit_start 
+:      000251 p_g24_set_device_addr:
+0x008e 000252 call adc_init_data 
+0x008f 000253 fetch 4 ,mem_lap 
+0x0090 000254 store 4 ,mem_24g_device_addr 
+0x0091 000255 rtn 
+:      000257 p_g24_transmit_rf_sta_init:
+0x0092 000258 jam 1 ,mem_24g_rf_last_sta 
+0x0093 000259 jam 0 ,mem_24g_sync_cnt 
+:      000260 p_g24_transmit_rf_ctrl_clear:
+0x0094 000261 fetch 1 ,mem_24g_data_type 
+0x0095 000262 and_into bits_data ,pdata 
+0x0096 000263 store 1 ,mem_24g_data_type 
+0x0097 000264 rtn 
+:      000266 p_g24_hop_ch_enable:
+0x0098 000267 fetch 1 ,mem_24g_data_type 
+0x0099 000268 set1 bit_hop ,pdata 
+0x009a 000269 store 1 ,mem_24g_data_type 
+0x009b 000271 store 1 ,mem_24g_txpayload 
+0x009c 000272 rtn 
+:      000273 p_g24_hop_ch_disable:
+0x009d 000274 fetch 1 ,mem_24g_data_type 
+0x009e 000275 set0 bit_hop ,pdata 
+0x009f 000276 store 1 ,mem_24g_data_type 
+0x00a0 000277 rtn 
+:      000279 p_g24_transmit_hop_pac_fail:
+0x00a1 000280 call power_ctrl_pac_succ_decrs 
+0x00a2 000281 fetch 1 ,mem_24g_rf_work_stage 
+0x00a3 000282 beq 1 ,p_g24_transmit_hop_pac_fail_wo_hop 
+0x00a4 000283 beq 2 ,p_g24_transmit_hop_pac_fail_hop_stage2 
+0x00a5 000284 rtn 
+:      000285 p_g24_transmit_hop_pac_fail_wo_hop:
+0x00a6 000286 jam 2 ,mem_24g_sync_cnt 
+:      000287 p_g24_transmit_hop_pac_fail_stage1:
+0x00a7 000288 jam 0 ,mem_24g_hop_pac_retry 
+0x00a8 000289 jam 0 ,mem_24g_rf_last_sta 
+0x00a9 000290 branch p_g24_transmit_rf_ctrl_clear 
+:      000292 p_g24_transmit_hop_pac_fail_hop_stage2:
+0x00aa 000293 jam 0 ,mem_24g_rf_hop_ch 
+0x00ab 000294 branch p_g24_transmit_hop_pac_fail_stage1 
+:      000297 p_g24_transmit_pac_fail_hop_stage3:
+0x00ac 000298 fetch 2 ,mem_24g_txfail_cnt 
+0x00ad 000299 increase 1 ,pdata 
+0x00ae 000300 store 2 ,mem_24g_txfail_cnt 
+0x00af 000301 bbit1 6 ,p_g24_tx_attempt_fail 
+0x00b0 000302 fetch 1 ,mem_24g_rf_hop_ch 
+0x00b1 000303 beq 1 ,p_g24_rf_hop_fastly 
+0x00b2 000304 jam 1 ,mem_24g_rf_hop_ch 
+:      000305 p_g24_rf_hop_attemp_again:
+0x00b3 000306 fetch 1 ,mem_24g_rf_hop_ch 
+0x00b4 000307 bne 1 ,p_g24_transmit_rf_ctrl_clear 
+:      000308 p_g24_rf_hop_fastly:
+0x00b5 000309 fetch 1 ,mem_24g_hop_fastly_cnt 
+0x00b6 000310 increase 1 ,pdata 
+0x00b7 000311 store 1 ,mem_24g_hop_fastly_cnt 
+0x00b8 000312 beq 4 ,p_g24_rf_hop_fastly_exit 
+0x00b9 000313 call p_g24_ch 
+0x00ba 000314 jam 2 ,mem_24g_max_retry 
+0x00bb 000315 branch p_g24_transmit_packet 
+:      000317 p_g24_rf_hop_fastly_exit:
+0x00bc 000318 call power_ctrl_pac_succ_decrs 
+0x00bd 000319 jam 0 ,mem_24g_hop_fastly_cnt 
+0x00be 000320 branch p_g24_transmit_rf_ctrl_clear 
+:      000322 p_g24_transmit_hop_pac_succ_wo_hop:
+0x00bf 000323 jam 2 ,mem_24g_sync_cnt 
+:      000324 p_g24_transmit_hop_pac_succ:
+0x00c0 000325 jam 1 ,mem_24g_rf_last_sta 
+0x00c1 000326 jam 0 ,mem_24g_rf_hop_ch 
+0x00c2 000327 branch p_g24_transmit_rf_ctrl_clear 
+:      000329 p_g24_transmit_succ_rf_config:
+0x00c3 000330 fetch 1 ,mem_24g_rf_work_stage 
+0x00c4 000331 beq 3 ,p_g24_transmit_hop_pac_succ 
+0x00c5 000332 fetch 1 ,mem_24g_data_type 
+0x00c6 000333 isolate0 bit_hop ,pdata 
+0x00c7 000334 branch p_g24_transmit_rf_sta_init ,true 
+0x00c8 000335 fetch 1 ,mem_24g_rf_work_stage 
+0x00c9 000336 beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop 
+0x00ca 000337 beq 2 ,p_g24_transmit_hop_pac_succ 
+0x00cb 000338 rtn 
+:      000340 p_g24_rf_sta_check:
+0x00cc 000341 fetch 1 ,mem_24g_pairing_sm 
+0x00cd 000342 rtnne state_24g_pairing_success 
+0x00ce 000343 call p_g24_rf_laststa_synccnt_check 
+0x00cf 000344 ncall p_g24_rf_sync_cnt_check ,user2 
+0x00d0 000345 rtn 
+:      000347 p_g24_rf_laststa_synccnt_check:
+0x00d1 000348 disable user2 
+0x00d2 000349 fetch 1 ,mem_24g_rf_last_sta 
+0x00d3 000350 rtnne 1 
+0x00d4 000351 fetch 1 ,mem_24g_sync_cnt 
+0x00d5 000352 rtnne 0 
+0x00d6 000353 jam 1 ,mem_24g_rf_work_stage 
+0x00d7 000354 jam 4 ,mem_24g_max_retry 
+0x00d8 000355 branch enable_user2 
+:      000357 p_g24_rf_sync_cnt_check:
+0x00d9 000358 fetch 1 ,mem_24g_sync_cnt 
+0x00da 000359 branch p_g24_rf_hop_attemp ,blank 
+0x00db 000360 increase -1 ,pdata 
+0x00dc 000361 store 1 ,mem_24g_sync_cnt 
+0x00dd 000362 jam 2 ,mem_24g_rf_work_stage 
+0x00de 000363 jam 4 ,mem_24g_max_retry 
+0x00df 000364 branch p_g24_ch 
+:      000366 p_g24_rf_hop_attemp:
+0x00e0 000367 jam 3 ,mem_24g_rf_work_stage 
+0x00e1 000368 fetch 1 ,mem_24g_rf_hop_ch 
+0x00e2 000369 nbranch p_g24_rf_hop_attemp_again ,blank 
+0x00e3 000370 jam 2 ,mem_24g_max_retry 
+0x00e4 000371 branch p_g24_ch 
+:      000373 p_g24_txdata_prep:
+0x00e5 000374 fetch 1 ,mem_24g_pairing_sm 
+0x00e6 000375 bne state_24g_pairing_success ,p_g24_pairing_sm 
+:      000376 p_g24_txdata_prep_packeage_data:
+0x00e7 000377 call p_g24_package_data 
+:      000378 p_g24_txdata_enable_tx:
+0x00e8 000379 call p_g24_transmit_prep 
+0x00e9 000380 jam ensure_on_24g ,mem_24g_ensure 
+0x00ea 000381 rtn 
+:      000383 p_g24_package_data:
+0x00eb 000384 fetch 2 ,mem_cb_24g_data 
+0x00ec 000385 call callback_func 
+0x00ed 000386 branch p_g24_accumulate_mouse_data ,user 
+0x00ee 000387 fetch 7 ,mem_24g_txbuf + 1 
+0x00ef 000388 rtn blank 
+0x00f0 000389 branch enable_user 
+:      000390 p_g24_accumulate_mouse_data:
+0x00f1 000391 jam 0 ,mem_24g_abort_pac 
+0x00f2 000392 add rega ,1 ,pdata 
+0x00f3 000393 store 1 ,mem_24g_datalen 
+0x00f4 000394 call p_g24_transmit_rf_ctrl_clear 
+0x00f5 000395 store 1 ,mem_24g_txbuf 
+0x00f6 000396 ifetcht 1 ,contw 
+0x00f7 000397 ifetch 1 ,regb 
+0x00f8 000398 ior temp ,pdata 
+0x00f9 000399 istore 1 ,contw 
+0x00fa 000400 increase 1 ,regb 
+0x00fb 000401 ifetch 4 ,regb 
+0x00fc 000402 istore 4 ,contw 
+0x00fd 000403 increase 4 ,regb 
+0x00fe 000404 arg mem_24g_txbuf + 6 ,contw 
+0x00ff 000405 arg 2 ,loopcnt 
+:      000406 p_g24_accumulation_loop:
+0x0100 000407 ifetch 1 ,regb 
+0x0101 000408 ifetcht 1 ,contw 
+0x0102 000409 iadd temp ,pdata 
+0x0103 000410 istore 1 ,contw 
+0x0104 000411 increase 1 ,regb 
+0x0105 000412 loop p_g24_accumulation_loop 
+0x0106 000413 rtn 
+:      000415 p_g24_transmit_packet:
+0x0107 000416 jam 0 ,mem_24g_retry 
+:      000417 p_g24_transmit_loop:
+0x0108 000418 arg param_rx_setup ,timeup 
+0x0109 000419 until clkn_rt ,meet 
+0x010a 000420 call p_g24_transmit_receive_ack 
+0x010b 000421 fetch 1 ,mem_24g_no_ack 
+0x010c 000422 rtneq no_ack_24g 
+0x010d 000423 nbranch p_g24_retransmit ,sync 
+0x010e 000424 nbranch p_g24_retransmit ,user3 
+0x010f 000425 call p_g24_txbuf_clear 
+0x0110 000426 call p_g24_ackpayload_parse 
+0x0111 000427 call power_ctrl_pac_succ_incrs 
+:      000428 p_g24_transmit_next_packet:
+0x0112 000429 fetch 1 ,mem_24g_pid 
+0x0113 000430 increase 1 ,pdata 
+0x0114 000431 store 1 ,mem_24g_pid 
+0x0115 000432 fetch 1 ,mem_24g_pairing_sm 
+0x0116 000433 bne state_24g_pairing_success ,p_g24_paring_mode_start 
+0x0117 000434 call p_g24_transmit_succ_rf_config 
+:      000435 p_g24_transmit_abandon:
+0x0118 000436 setarg 0 
+0x0119 000437 store 2 ,mem_24g_txfail_cnt 
+0x011a 000438 store 1 ,mem_24g_get_ack_fail 
+0x011b 000439 store 1 ,mem_24g_hop_pac_retry 
+0x011c 000440 jam ensure_off_24g ,mem_24g_ensure 
+0x011d 000441 rtn 
+:      000443 p_g24_txbuf_clear:
+0x011e 000444 arg 4 ,loopcnt 
+0x011f 000445 arg mem_24g_txbuf ,contw 
+0x0120 000446 branch memset0 
+:      000448 p_g24_paring_mode_start:
+0x0121 000449 call power_ctrl_pac_succ_cnt_init 
+0x0122 000450 branch p_g24_paring_mode 
+:      000452 p_g24_transmit_receive_ack:
+0x0123 000453 disable user3 
+0x0124 000454 call p_g24_transmit 
+0x0125 000457 fetch 1 ,mem_24g_no_ack 
+0x0126 000458 beq no_ack_24g ,p_g24_transmit_no_ack 
+0x0127 000459 force 0 ,radio_ctrl 
+0x0128 000460 fetch 4 ,mem_24g_addr 
+0x0129 000461 iforce access 
+0x012a 000462 fetcht 1 ,mem_last_freq 
+0x012b 000463 call set_freq_rx 
+0x012c 000464 call rf_rx_enable 
+0x012d 000465 call p_g24_receive_rxon 
+0x012e 000466 call p_g24_end_of_packet ,user3 
+0x012f 000467 rtn 
+:      000468 p_g24_transmit_no_ack:
+0x0130 000469 call p_g24_end_of_packet 
+0x0131 000470 branch p_g24_transmit_next_packet 
+:      000472 p_g24_retransmit:
+0x0132 000473 fetch 1 ,mem_24g_get_ack_fail 
+0x0133 000474 increase 1 ,pdata 
+0x0134 000475 store 1 ,mem_24g_get_ack_fail 
+0x0135 000476 fetch 1 ,mem_24g_pairing_sm 
+0x0136 000477 bne state_24g_pairing_success ,p_g24_tx_paring_retry 
+0x0137 000478 fetcht 1 ,mem_24g_retry 
+0x0138 000479 increase 1 ,temp 
+0x0139 000480 storet 1 ,mem_24g_retry 
+0x013a 000481 fetch 1 ,mem_24g_max_retry 
+0x013b 000482 isub temp ,pdata 
+0x013c 000483 nbranch p_g24_transmit_loop ,blank 
+0x013d 000484 fetch 1 ,mem_24g_rf_work_stage 
+0x013e 000485 beq 3 ,p_g24_transmit_pac_fail_hop_stage3 
+0x013f 000486 fetch 1 ,mem_24g_hop_pac_retry 
+0x0140 000487 increase 1 ,pdata 
+0x0141 000488 store 1 ,mem_24g_hop_pac_retry 
+0x0142 000489 beq 2 ,p_g24_transmit_hop_pac_fail 
+0x0143 000490 call p_g24_hop_ch_enable 
+0x0144 000491 jam 1 ,mem_24g_max_retry 
+0x0145 000492 branch p_g24_transmit_packet 
+:      000494 p_g24_tx_paring_retry:
+0x0146 000495 fetch 1 ,mem_24g_get_ack_fail 
+0x0147 000496 rtnne 0xff 
+0x0148 000497 jam 0 ,mem_24g_get_ack_fail 
+0x0149 000498 branch p_g24_stop_g24_mode 
+:      000500 p_g24_tx_attempt_fail:
+0x014a 000501 setarg 0 
+0x014b 000502 store 2 ,mem_24g_txfail_cnt 
+:      000503 p_g24_stop_g24_mode:
+0x014c 000504 jam bt_evt_24g_attempt_fail ,mem_fifo_temp 
+0x014d 000505 branch ui_ipc_send_event 
+:      000507 p_g24_ackpayload_parse:
+0x014e 000508 call p_g24_read_len_pid_crc 
+0x014f 000509 fetch 1 ,mem_24g_rxdata_length 
+0x0150 000510 rtn blank 
+0x0151 000511 iforce loopcnt 
+0x0152 000512 arg mem_24g_rxbuf + 2 ,contr 
+0x0153 000513 arg mem_24g_rxpayload ,contw 
+0x0154 000514 branch memcpy 
+:      000516 p_g24_start_pairing_sm1:
+0x0155 000517 set1 mark_24g ,mark 
+0x0156 000518 call p_g24_pair_init 
+:      000519 p_g24_set_pairing_sm_1:
+0x0157 000520 jam state_24g_pairing_1 ,mem_24g_pairing_sm 
+0x0158 000521 rtn 
+:      000523 p_g24_pair_init:
+0x0159 000524 jam tx_power_pair ,mem_tx_power 
+0x015a 000525 jam 0 ,mem_24g_pid 
+0x015b 000526 jam g24_pair_ch ,mem_24g_ch 
+0x015c 000527 fetch 4 ,mem_24g_paring_addr 
+0x015d 000528 branch p_g24_update_addr_and_synccrc8 
+:      000530 p_g24_pairing_sm:
+0x015e 000531 fetch 1 ,mem_24g_ensure 
+0x015f 000532 beq ensure_on_24g ,enable_user 
+0x0160 000533 fetch 1 ,mem_24g_pairing_sm 
+0x0161 000534 beq state_24g_pairing_1 ,p_g24_pairing_sm_1 
+0x0162 000535 beq state_24g_pairing_2 ,p_g24_pairing_sm_2 
+0x0163 000536 beq state_24g_pairing_3 ,p_g24_pairing_sm_3 
+0x0164 000537 branch assert 
+:      000539 p_g24_pairing_sm_1:
+0x0165 000540 jam state_24g_pairing_1_waiting_ack ,mem_24g_pairing_sm 
+0x0166 000541 jam 0xaa ,mem_24g_common_temp 
+0x0167 000542 branch p_g24_pairing_sm_common 
+:      000543 p_g24_pairing_sm_2:
+0x0168 000544 jam state_24g_pairing_2_waiting_ack ,mem_24g_pairing_sm 
+0x0169 000545 jam 0x55 ,mem_24g_common_temp 
+0x016a 000546 branch p_g24_pairing_sm_common 
+:      000547 p_g24_pairing_sm_3:
+0x016b 000548 jam state_24g_pairing_3_waiting_ack ,mem_24g_pairing_sm 
+0x016c 000549 jam 0x22 ,mem_24g_common_temp 
+:      000550 p_g24_pairing_sm_common:
+0x016d 000551 fetch 1 ,mem_24g_data_type 
+0x016e 000552 and_into bits_data ,pdata 
+0x016f 000553 store 1 ,mem_24g_common_temp + 1 
+0x0170 000554 fetch 4 ,mem_24g_device_addr 
+0x0171 000555 store 4 ,mem_24g_common_temp + 2 
+:      000556 p_g24_put_pairing_data_in_buff:
+0x0172 000557 jam 0 ,mem_24g_common_temp + 6 
+0x0173 000558 arg mem_24g_common_temp ,rega 
+0x0174 000559 arg 7 ,temp 
+0x0175 000560 call p_g24_put_data_in_buff 
+0x0176 000561 call p_g24_txdata_enable_tx 
+0x0177 000562 branch enable_user 
+:      000564 p_g24_paring_mode:
+0x0178 000565 fetch 1 ,mem_24g_pairing_sm 
+0x0179 000566 rtneq state_24g_pairing_success 
+0x017a 000567 beq state_24g_pairing_1_waiting_ack ,p_g24_pairing_sm_1_waiting_ack 
+0x017b 000568 beq state_24g_pairing_2_waiting_ack ,p_g24_pairing_sm_2_waiting_ack 
+0x017c 000569 beq state_24g_pairing_3_waiting_ack ,p_g24_pairing_sm_3_waiting_ack 
+0x017d 000570 rtn 
+:      000573 p_g24_pairing_sm_1_waiting_ack:
+0x017e 000574 jam state_24g_pairing_2 ,mem_24g_pairing_sm 
+0x017f 000575 branch p_g24_transmit_abandon 
+:      000576 p_g24_pairing_sm_2_waiting_ack:
+0x0180 000577 jam state_24g_pairing_3 ,mem_24g_pairing_sm 
+0x0181 000578 branch p_g24_transmit_abandon 
+:      000579 p_g24_pairing_sm_3_waiting_ack:
+0x0182 000580 jam state_24g_pairing_success ,mem_24g_pairing_sm 
+0x0183 000581 jam bt_evt_24g_pairing_complete ,mem_fifo_temp 
+0x0184 000582 call ui_ipc_send_event 
+0x0185 000583 fetch 4 ,mem_24g_rxpayload + 2 
+0x0186 000584 call p_g24_update_addr_and_synccrc8 
+0x0187 000585 branch p_g24_transmit_abandon 
+:      000587 p_g24_start_24g_mode:
+0x0188 000588 set0 mark_24g ,mark 
+0x0189 000589 call p_g24_ch_syncword_crc8_init 
+0x018a 000590 fetch 1 ,mem_24g_pairing_sm 
+0x018b 000591 rtnne state_24g_pairing_success 
+0x018c 000592 call p_g24_tx_attemp_data_prep 
+:      000593 p_g24_tx_attemp_dongle:
+0x018d 000594 setarg 0 
+0x018e 000595 store 2 ,mem_24g_check_dongle_times 
+:      000596 p_g24_tx_attemp_dongle_loop:
+0x018f 000597 call lpo_calibration 
+0x0190 000598 nop 2000 
+0x0191 000599 fetch 1 ,mem_24g_check_dongle_times 
+0x0192 000600 beq 0xff ,p_g24_stop_g24_mode 
+0x0193 000601 call p_g24_transmit_receive_ack 
+0x0194 000602 nbranch p_g24_attemp_txdata_retry ,sync 
+0x0195 000603 nbranch p_g24_attemp_txdata_retry ,user3 
+:      000604 p_g24_tx_attemp_dongle_succ:
+0x0196 000605 set1 mark_24g ,mark 
+0x0197 000606 setarg 0 
+0x0198 000607 store 2 ,mem_24g_check_dongle_times 
+0x0199 000608 jam bt_evt_24g_attempt_success ,mem_fifo_temp 
+0x019a 000609 call ui_ipc_send_event 
+0x019b 000610 call p_g24_txbuf_clear 
+0x019c 000611 branch p_g24_transmit_by_interrupt_enable 
+:      000613 p_g24_tx_attemp_data_prep:
+0x019d 000614 jam 0xff ,mem_24g_common_temp 
+0x019e 000615 fetch 1 ,mem_24g_data_type 
+0x019f 000616 store 1 ,mem_24g_common_temp + 1 
+0x01a0 000617 fetch 4 ,mem_24g_device_addr 
+0x01a1 000618 store 4 ,mem_24g_common_temp + 2 
+0x01a2 000619 arg 6 ,temp 
+0x01a3 000620 arg mem_24g_common_temp ,rega 
+0x01a4 000621 call p_g24_put_data_in_buff 
+0x01a5 000622 branch p_g24_transmit_prep 
+:      000624 p_g24_attemp_txdata_retry:
+0x01a6 000625 fetch 2 ,mem_24g_check_dongle_times 
+0x01a7 000626 increase 1 ,pdata 
+0x01a8 000627 store 2 ,mem_24g_check_dongle_times 
+0x01a9 000628 call p_g24_ch 
+0x01aa 000629 branch p_g24_tx_attemp_dongle_loop 
+:      000631 p_g24_auto_pair_start:
+0x01ab 000632 set0 mark_24g ,mark 
+0x01ac 000633 call p_g24_auto_pair_all_powerful 
+0x01ad 000634 call p_g24_tx_attemp_data_prep 
+:      000635 p_g24_auto_pair_restart:
+0x01ae 000636 jam 0 ,mem_24g_check_dongle_times 
+:      000637 p_g24_auto_pair_start_loop:
+0x01af 000638 call lpo_calibration 
+0x01b0 000639 nop 2000 
+0x01b1 000640 fetch 1 ,mem_24g_check_dongle_times 
+0x01b2 000641 beq 0xff ,p_g24_stop_g24_mode 
+0x01b3 000642 call p_g24_transmit_receive_ack 
+0x01b4 000643 nbranch p_g24_auto_pair_retry ,sync 
+0x01b5 000644 nbranch p_g24_auto_pair_retry ,user3 
+0x01b6 000645 call p_g24_ackpayload_parse 
+0x01b7 000646 fetch 4 ,mem_24g_addr 
+0x01b8 000647 fetcht 4 ,mem_24g_paring_addr 
+0x01b9 000648 isub temp ,null 
+0x01ba 000649 branch p_g24_start_pairing_sm1 ,zero 
+0x01bb 000650 branch p_g24_tx_attemp_dongle_succ 
+:      000652 p_g24_auto_pair_retry:
+0x01bc 000653 fetch 1 ,mem_24g_check_dongle_times 
+0x01bd 000654 increase 1 ,pdata 
+0x01be 000655 store 1 ,mem_24g_check_dongle_times 
+0x01bf 000656 fetch 1 ,mem_24g_auto_paring_switch 
+0x01c0 000657 increase 1 ,pdata 
+0x01c1 000658 and_into 1 ,pdata 
+0x01c2 000659 store 1 ,mem_24g_auto_paring_switch 
+0x01c3 000660 beq 0 ,p_g24_auto_pair_device_attemp 
+0x01c4 000661 beq 1 ,p_g24_auto_pair_pair_attemp 
+0x01c5 000662 rtn 
+:      000664 p_g24_auto_pair_all_powerful:
+0x01c6 000665 jam tx_power_pair ,mem_tx_power 
+0x01c7 000666 call p_mouse_read_24g_addr 
+:      000667 p_g24_ch_syncword_crc8_init:
+0x01c8 000668 call p_g24_syncword_crc8 
+0x01c9 000669 branch p_g24_ch 
+:      000671 p_g24_auto_pair_device_attemp:
+0x01ca 000672 call p_g24_auto_pair_all_powerful 
+0x01cb 000673 branch p_g24_auto_pair_start_loop 
+:      000675 p_g24_auto_pair_pair_attemp:
+0x01cc 000676 call p_g24_pair_init 
+0x01cd 000677 branch p_g24_auto_pair_start_loop 
+:      000679 p_g24_check_51cmd_stop_24g:
+0x01ce 000680 set0 mark_24g ,mark 
+0x01cf 000681 call le_disable 
+:      000682 p_mouse_disable_g24_pairing_flag:
+0x01d0 000683 arg mosue_24g_pairing_flag ,queue 
+0x01d1 000684 branch mouse_disable_function_flag 
+:      000686 p_g24_put_data_in_buff:
+0x01d2 000687 storet 1 ,mem_24g_datalen 
+0x01d3 000688 copy temp ,loopcnt 
+0x01d4 000689 arg mem_24g_txbuf ,contw 
+0x01d5 000690 copy rega ,contr 
+0x01d6 000691 branch memcpy 
+:      000693 p_g24_read_len_pid_crc:
+0x01d7 000695 fetch 1 ,mem_24g_rxbuf + 1 
+0x01d8 000696 rshift3 pdata ,pdata 
+0x01d9 000697 store 1 ,mem_24g_rxdata_length 
+0x01da 000699 increase 1 ,pdata 
+0x01db 000700 arg mem_24g_rxbuf + 1 ,contr 
+0x01dc 000701 iadd contr ,contr 
+0x01dd 000702 ifetch 3 ,contr 
+0x01de 000703 store 3 ,mem_24g_sta_crc 
+0x01df 000705 fetch 1 ,mem_24g_rxbuf + 1 
+0x01e0 000706 rshift pdata ,pdata 
+0x01e1 000707 and pdata ,0x03 ,pdata 
+0x01e2 000708 store 1 ,mem_24g_sta_pid 
+0x01e3 000709 rtn 
+:      000711 p_g24_update_addr_and_synccrc8:
+0x01e4 000712 store 4 ,mem_24g_addr 
+:      000714 p_g24_syncword_crc8:
+0x01e5 000715 arg 0 ,rega 
+0x01e6 000716 arg 4 ,loopcnt 
+0x01e7 000717 arg mem_24g_addr ,contr 
+:      000718 p_g24_syncword_crc8_loop:
+0x01e8 000719 ifetch 1 ,contr 
+0x01e9 000720 iadd rega ,rega 
+0x01ea 000721 loop p_g24_syncword_crc8_loop 
+0x01eb 000722 copy rega ,pdata 
+0x01ec 000723 store 2 ,mem_24g_syncword 
+0x01ed 000724 fetch 1 ,mem_24g_syncword 
+0x01ee 000725 fetcht 1 ,mem_24g_syncword + 1 
+0x01ef 000726 iadd temp ,pdata 
+0x01f0 000727 store 1 ,mem_24g_syncword_crc8 
+0x01f1 000728 rtn 
+:      000730 p_g24_transmit_prep:
+0x01f2 000733 fetch 1 ,mem_24g_datalen 
+0x01f3 000734 increase 2 ,pdata 
+0x01f4 000735 store 1 ,mem_24g_txlen 
+0x01f5 000737 fetch 1 ,mem_24g_data_type 
+0x01f6 000738 store 1 ,mem_24g_txpayload 
+0x01f7 000740 fetch 1 ,mem_24g_datalen 
+0x01f8 000741 lshift3 pdata ,pdata 
+0x01f9 000742 fetcht 1 ,mem_24g_pid 
+0x01fa 000743 and temp ,0x03 ,temp 
+0x01fb 000744 lshift temp ,temp 
+0x01fc 000745 ior temp ,pdata 
+0x01fd 000746 fetcht 1 ,mem_24g_no_ack 
+0x01fe 000747 iadd temp ,pdata 
+0x01ff 000748 istore 1 ,contw 
+0x0200 000750 fetch 1 ,mem_24g_datalen 
+0x0201 000751 iforce loopcnt 
+0x0202 000752 arg mem_24g_txbuf ,contr 
+0x0203 000753 branch memcpy 
+:      000755 p_g24_ch:
+0x0204 000756 fetcht 1 ,mem_24g_current_ch_number 
+0x0205 000757 call p_g24_ch_map_size 
+0x0206 000758 storet 1 ,mem_24g_current_ch_number 
+0x0207 000759 rtn 
+:      000761 p_g24_ch_map_size:
+0x0208 000762 call p_g24_ch_calc 
+0x0209 000763 increase 1 ,temp 
+0x020a 000764 and_into 3 ,temp 
+0x020b 000765 rtn 
+:      000767 p_g24_ch_calc:
+0x020c 000768 fetch 1 ,mem_24g_addr 
+0x020d 000769 and_into 0x03 ,pdata 
+0x020e 000770 mul32 pdata ,4 ,rega 
+0x020f 000771 setarg mem_24g_ch_map1 
+0x0210 000772 iadd rega ,pdata 
+0x0211 000773 iadd temp ,contr 
+0x0212 000774 ifetch 1 ,contr 
+0x0213 000775 store 1 ,mem_24g_ch 
+0x0214 000776 rtn 
+:      000778 p_g24_prep:
+0x0215 000779 disable enable_crc 
+0x0216 000780 disable enable_white 
+0x0217 000781 setarg 0x555555 
+0x0218 000782 iforce crc24_init 
+0x0219 000783 fetch 1 ,mem_24g_ch 
+0x021a 000784 reverse pdata ,temp 
+0x021b 000785 set1 1 ,temp 
+0x021c 000786 rshift temp ,white_init 
+0x021d 000787 rtn 
+:      000789 p_g24_receive_packet:
+0x021e 000790 call le_enable 
+0x021f 000791 fetch 4 ,mem_24g_addr 
+0x0220 000792 iforce access 
+0x0221 000793 call set_sync_on 
+0x0222 000794 fetcht 1 ,mem_24g_ch 
+0x0223 000795 call set_freq_rx 
+0x0224 000796 setarg param_pll_setup 
+0x0225 000797 call sleep 
+0x0226 000798 call rf_rx_enable 
+:      000799 p_g24_receive_rxon:
+0x0227 000802 call p_g24_prep 
+0x0228 000803 disable user3 
+0x0229 000804 enable decode_fec0 
+0x022a 000805 enable is_rx 
+0x022b 000806 disable is_tx 
+0x022c 000807 enable swfine 
+0x022d 000808 fetch 2 ,mem_24g_rx_window 
+0x022e 000809 iforce stop_watch 
+0x022f 000810 correlate null ,timeout 
+0x0230 000811 nbranch p_g24_sync_timeout ,sync 
+0x0231 000814 disable decode_fec0 
+0x0232 000815 enable decode_fec1 
+0x0233 000816 enable enable_white 
+0x0234 000817 enable enable_crc 
+0x0235 000818 call p_g24_receive_byte 
+0x0236 000819 store 1 ,mem_24g_get_syncword_crc8 
+0x0237 000820 fetcht 1 ,mem_24g_syncword_crc8 
+0x0238 000821 isub temp ,null 
+0x0239 000822 nbranch p_g24_end_of_packet ,zero 
+0x023a 000823 call p_g24_receive_byte 
+0x023b 000824 store 1 ,mem_24g_rxbuf 
+0x023c 000825 fetch 1 ,mem_24g_mode 
+0x023d 000826 sub pdata ,rx_24g ,null 
+0x023e 000827 branch p_g24_receive_skip ,zero 
+0x023f 000828 fetch 1 ,mem_24g_rxbuf 
+0x0240 000829 fetcht 1 ,mem_24g_data_type 
+0x0241 000830 icompare bits_data ,temp 
+0x0242 000831 nbranch p_g24_end_of_packet ,true 
+:      000832 p_g24_receive_skip:
+0x0243 000833 call p_g24_receive_byte 
+0x0244 000834 istore 1 ,contw 
+0x0245 000835 rshift3 pdata ,pdata 
+0x0246 000836 and pdata ,0x1f ,loopcnt 
+0x0247 000837 branch p_g24rx_nopayload ,zero 
+:      000838 p_g24rx_loop:
+0x0248 000839 call p_g24_receive_byte 
+0x0249 000840 istore 1 ,contw 
+0x024a 000841 loop p_g24rx_loop 
+:      000842 p_g24rx_nopayload:
+0x024b 000844 copy contw ,rega 
+0x024c 000845 call p_g24_receive_byte 
+0x024d 000846 store 1 ,mem_rssi_hex_received 
+0x024e 000847 copy rega ,contw 
+0x024f 000848 parse demod ,bucket ,24 
+0x0250 000849 enable swfine 
+0x0251 000850 arg param_sifs ,stop_watch 
+0x0252 000851 rshift32 pdata ,pdata 
+0x0253 000852 rshift16 pdata ,pdata 
+0x0254 000853 istore 3 ,contw 
+0x0255 000854 disable decode_fec1 
+0x0256 000855 branch p_g24_end_of_packet ,crc_failed 
+0x0257 000858 enable user3 
+0x0258 000859 fetch 1 ,mem_last_freq 
+0x0259 000860 add pdata ,0 ,rega 
+0x025a 000861 call rf_write_freq 
+0x025b 000862 disable decode_fec0 
+0x025c 000863 call set_sync_on 
+0x025d 000864 fetch 1 ,mem_rssi_hex_received 
+0x025e 000865 call p_rssi_signal 
+0x025f 000866 rtn 
+:      000868 p_g24_receive_byte:
+0x0260 000869 parse demod ,bucket ,8 
+0x0261 000870 rshift3 pwindow ,pdata 
+0x0262 000871 rtn 
+:      000873 p_g24_end_of_packet:
+0x0263 000874 disable encode_fec1 
+0x0264 000875 disable decode_fec1 
+0x0265 000876 call end_of_packet 
+0x0266 000877 rtn 
+:      000879 p_g24_sync_timeout:
+0x0267 000880 branch p_g24_end_of_packet 
+:      000882 p_g24_set_freq_tx:
+0x0268 000883 call set_sync_on 
+0x0269 000884 fetcht 1 ,mem_24g_ch 
+0x026a 000885 branch set_freq_tx 
+:      000887 p_g24_transmit:
+0x026b 000888 call le_enable 
+0x026c 000889 fetch 4 ,mem_24g_addr 
+0x026d 000890 iforce access 
+0x026e 000891 call p_g24_prep 
+0x026f 000892 call p_g24_set_freq_tx 
+0x0270 000893 set1 txgfsk ,radio_ctrl 
+0x0271 000894 enable encode_fec0 
+0x0272 000895 enable is_tx 
+0x0273 000896 disable is_rx 
+0x0274 000899 rshift16 access ,pdata 
+0x0275 000900 rshift8 pdata ,pdata 
+0x0276 000901 rshift4 pdata ,pdata 
+0x0277 000902 inject mod ,40 
+0x0278 000903 disable encode_fec0 
+0x0279 000904 enable encode_fec1 
+0x027a 000905 enable enable_white 
+0x027b 000906 enable enable_crc 
+0x027c 000907 fetch 1 ,mem_24g_syncword_crc8 
+0x027d 000908 inject mod ,8 
+0x027e 000909 fetch 1 ,mem_24g_txlen 
+0x027f 000910 iforce loopcnt 
+0x0280 000911 arg mem_24g_txpayload ,contr 
+:      000912 p_g24tr_loop:
+0x0281 000913 ifetch 1 ,contr 
+0x0282 000914 inject mod ,8 
+0x0283 000915 loop p_g24tr_loop 
+0x0284 000918 enable enable_parity 
+0x0285 000919 inject mod ,24 
+0x0286 000920 disable enable_parity 
+0x0287 000921 until null ,tx_clear 
+0x0288 000922 nop 100 
+0x0289 000923 disable encode_fec0 
+0x028a 000924 disable encode_fec1 
+0x028b 000925 rtn 
+:      000927 p_g24_timer_check:
+0x028c 000928 call disable_user 
+0x028d 000929 fetcht 4 ,mem_24g_tx_btclk 
+0x028e 000930 copy clkn_bt ,pdata 
+0x028f 000931 isub temp ,null 
+0x0290 000932 ncall g24_timer_timeout ,positive 
+0x0291 000933 copy pdata ,regb 
+0x0292 000934 fetch 4 ,mem_24g_tx_btclk 
+0x0293 000935 fetcht 1 ,mem_24g_interval 
+0x0294 000936 iadd temp ,temp 
+0x0295 000937 copy regb ,pdata 
+0x0296 000938 isub temp ,null 
+0x0297 000939 nrtn positive 
+0x0298 000940 set0 28 ,pdata 
+0x0299 000941 store 4 ,mem_24g_tx_btclk 
+0x029a 000942 branch enable_user 
+:      000944 p_rssi_noise:
+0x029b 000945 call save_rssi 
+0x029c 000946 rtn blank 
+0x029d 000947 fetcht 1 ,mem_rssi_noise_index 
+0x029e 000948 arg mem_rssi_noise_buffer ,rega 
+0x029f 000949 call p_rssi_store 
+0x02a0 000950 storet 1 ,mem_rssi_noise_index 
+0x02a1 000951 rtn 
+:      000953 p_rssi_store:
+0x02a2 000954 copy rega ,pdata 
+0x02a3 000955 iadd temp ,contw 
+0x02a4 000956 fetch 1 ,mem_rssi 
+0x02a5 000957 istore 1 ,contw 
+0x02a6 000958 increase 1 ,temp 
+0x02a7 000959 and_into rssi_buf_len_signal ,temp 
+0x02a8 000960 rtn 
+:      000961 p_rssi_average:
+0x02a9 000962 arg 0 ,temp 
+0x02aa 000963 arg rssi_buf_len_signal + 1 ,loopcnt 
+0x02ab 000964 copy rega ,contr 
+:      000965 p_rssi_average_loop:
+0x02ac 000966 ifetch 1 ,contr 
+0x02ad 000967 iadd temp ,temp 
+0x02ae 000968 loop p_rssi_average_loop 
+0x02af 000969 rshift3 temp ,pdata 
+0x02b0 000970 copy pdata ,temp 
+0x02b1 000971 rtnmark0 mark_24g 
+0x02b2 000973 div pdata ,10 
+0x02b3 000974 call wait_div_end 
+0x02b4 000975 quotient pdata 
+0x02b5 000976 lshift4 pdata ,pdata 
+0x02b6 000977 remainder temp 
+0x02b7 000978 ior temp ,temp 
+0x02b8 000979 rtn 
+0x02b9 000980 rtn 
+:      000983 p_mouse_before_lpm:
+0x02ba 000984 rtnmark1 mark_24g 
+0x02bb 000985 call p_mouse_setgpio_lpm 
+0x02bc 000986 fetch 1 ,mem_context 
+0x02bd 000987 bbit0 state_inconn ,p_clear_wake 
+0x02be 000988 fetch 1 ,mem_lpm_current_mult 
+0x02bf 000989 nrtn blank 
+:      000990 p_clear_wake:
+0x02c0 000991 setarg 0 
+0x02c1 000992 store 8 ,mem_gpio_wakeup_low 
+0x02c2 000993 rtn 
+:      000995 p_mouse_setgpio_lpm:
+0x02c3 000996 call p_mouse_set_sdio_high 
+0x02c4 000997 call p_clear_wake 
+:      000998 p_mouse_setgpio_lpm_before:
+0x02c5 000999 call mouse_lpm_before_common 
+0x02c6 001000 hfetch 4 ,core_gpio_oe0 
+0x02c7 001001 hfetcht 4 ,core_gpio_pu0 
+0x02c8 001002 ior temp ,temp 
+0x02c9 001003 invert temp ,temp 
+0x02ca 001004 hstoret 4 ,core_gpio_pd0 
+0x02cb 001005 rtn 
+:      001007 p_mouse_set_sdio_high:
+0x02cc 001008 fetch 1 ,mem_mouse_init_sensor_reset_flag 
+0x02cd 001009 rtn blank 
+0x02ce 001010 branch p_mouse_seting_dpi_diff 
+:      001012 p_device_init:
+0x02cf 001013 call app_lpm_mult_enable 
+0x02d0 001014 branch p_device_init_common ,wake 
+0x02d1 001015 fetch 1 ,mem_tx_power 
+0x02d2 001016 store 1 ,mem_tx_power_temp 
+0x02d3 001017 call power_ctrl_pac_succ_cnt_init 
+0x02d4 001018 fetch 1 ,mem_ui_button_timeout 
+0x02d5 001019 store 1 ,mem_combination_ui_button_count 
+0x02d6 001020 call mouse_bt_discovery_button_down_disable 
+:      001021 p_device_init_common:
+0x02d7 001022 call p_mouse_init 
+0x02d8 001023 branch enable_authrom 
+:      001025 p_mouse_tx_power_init:
+0x02d9 001026 fetch 1 ,mem_tx_power_temp 
+0x02da 001027 store 1 ,mem_tx_power 
+0x02db 001028 rtn 
+:      001030 p_mouse_init:
+0x02dc 001031 ncall p_mouse_setting_config ,wake 
+0x02dd 001032 call p_mouse_spi_init 
+0x02de 001033 rtn wake 
+0x02df 001034 call p_mouse_cb_fuction 
+0x02e0 001035 fetch 1 ,mem_power_on_flag 
+0x02e1 001036 bbit1 2 ,p_mouse_skip_24g_pair 
+0x02e2 001037 call mouse_check_key_gpio 
+0x02e3 001038 beq mouse_lm_button ,p_mouse_24g_pairing_button 
+:      001039 p_mouse_skip_24g_pair:
+0x02e4 001040 branch p_mouse_wakeup_from_power 
+:      001042 p_mouse_check_reconn_target:
+0x02e5 001043 call p_mouse_tx_power_init 
+0x02e6 001044 fetch 1 ,mem_xrecord_mode 
+0x02e7 001045 rtn 
+:      001049 p_mouse_24g_pairing_button:
+0x02e8 001050 fetch mouse_flag_len ,mem_mouse_flag 
+0x02e9 001051 rtnbit0 mouse_enable_24g 
+0x02ea 001052 rtnbit1 mosue_24g_pairing_flag 
+0x02eb 001053 rtnmark1 mark_24g 
+0x02ec 001054 call mouse_devce_led_off 
+0x02ed 001055 arg mosue_24g_pairing_flag ,queue 
+0x02ee 001056 call mouse_enable_function_flag 
+0x02ef 001057 setarg 0 
+0x02f0 001058 store 2 ,mem_mouse_direct_timer 
+0x02f1 001059 store 1 ,mem_mouse_send_blank_timer 
+0x02f2 001060 store 2 ,mem_24g_check_dongle_times 
+0x02f3 001061 call mouse_stop_discovery 
+0x02f4 001062 branch p_g24_start_pairing_sm1 
+:      001064 p_mouse_dpi_config:
+0x02f5 001065 fetch mouse_flag_len ,mem_mouse_flag 
+0x02f6 001066 bbit0 mouse_enable_eeprom ,mouse_dpi_config 
+0x02f7 001067 fetch 1 ,mem_mouse_dpi 
+0x02f8 001068 beq 0xff ,mouse_dpi_config 
+0x02f9 001069 branch mouse_seting_dpi + 2 
+:      001071 p_mouse_spi_init:
+0x02fa 001072 jam 0x76 ,mem_spi_init_clk 
+0x02fb 001073 branch mouse_spi_init 
+:      001075 p_mouse_init_sunt:
+0x02fc 001076 call p_mouse_spi_init 
+0x02fd 001077 call mouse_spi_sdio_gpio_pollup 
+0x02fe 001078 fetch 1 ,mem_config_sensor_type 
+0x02ff 001079 beq p3610 ,mouse_init_3610sensor 
+:      001080 p_mouse_init_sensor:
+0x0300 001081 call mouse_read_sensor_id 
+0x0301 001082 beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge 
+0x0302 001083 beq p3065_id1 ,p_mouse_p3065_init_param 
+0x0303 001084 call mouse_twspi_reset 
+0x0304 001085 nop 1000 
+0x0305 001086 branch p_mouse_init_sensor 
+:      001088 p_mouse_init_sensor_reset:
+0x0306 001089 jam 1 ,mem_mouse_init_sensor_reset_flag 
+0x0307 001090 call spi_ncs_enable 
+0x0308 001091 call p_mouse_init_sunt 
+0x0309 001092 branch spi_ncs_disable 
+:      001094 p_mouse_init_p32xx_id2_judge:
+0x030a 001095 call p_mouse_sensor_poweron 
+0x030b 001096 branch mouse_init_p32xx_id2_judge 
+:      001099 p_mouse_p3065_init_param:
+0x030c 001100 call p_mouse_sensor_poweron 
+0x030d 001101 fetch 1 ,mem_sensor_id2 
+0x030e 001102 beq p3065_xy_id2 ,mouse_p3065xy_init_param 
+0x030f 001103 jam p3065 ,mem_config_sensor_type 
+0x0310 001104 rtn 
+:      001106 p_mouse_sensor_poweron:
+0x0311 001107 setarg 0x8006 
+0x0312 001108 call twspi_write 
+0x0313 001109 nop 12000 
+0x0314 001110 branch p_mouse_dpi_config 
+:      001111 p_mouse_sensor_powerdown:
+0x0315 001112 setarg 0x06 
+0x0316 001113 call twspi_read 
+0x0317 001114 or pdata ,0x08 ,pdata 
+0x0318 001115 lshift8 pdata ,pdata 
+0x0319 001116 add pdata ,0x06 ,pdata 
+0x031a 001117 branch twspi_write 
+:      001119 p_mouse_setting_config:
+0x031b 001120 call p_g24_set_device_addr 
+0x031c 001122 hfetch 1 ,core_usb_config 
+0x031d 001123 set0 4 ,pdata 
+0x031e 001124 hstore 1 ,core_usb_config 
+0x031f 001125 call mouse_param_init 
+0x0320 001127 setarg 0x1802 
+0x0321 001128 store 2 ,mem_fcomp_mul 
+0x0322 001130 setarg 0 
+0x0323 001131 store 2 ,mem_lpm_interval 
+0x0324 001132 call mouse_adc_init 
+:      001133 p_mouse_init_iic:
+0x0325 001134 call iic_init_390k 
+0x0326 001135 fetch mouse_flag_len ,mem_mouse_flag 
+0x0327 001136 isolate1 mouse_enable_2k_eeprom ,pdata 
+0x0328 001137 ncall clear_eeprom_size_2k ,true 
+0x0329 001138 call mouse_load_eeprom_dpi 
+0x032a 001139 call p_mouse_init_environment 
+:      001140 p_mouse_read_24g_addr:
+0x032b 001141 call p_mouse_set_24g_addr_eeprom 
+0x032c 001142 branch iicd_read_eep_data 
+:      001145 p_mouse_init_environment:
+0x032d 001146 call app_initflag_check 
+0x032e 001147 branch mouse_eeprom_load_recon_info ,zero 
+0x032f 001148 branch mouse_init_environment + 2 
+:      001150 p_app_flag_store:
+0x0330 001151 arg 2 ,temp 
+0x0331 001152 arg mem_timeup ,rega 
+0x0332 001153 arg mouse_eeprom_module_init_flag ,regb 
+0x0333 001154 branch iicd_write_protect_eep_data 
+:      001156 p_app_initflag_check:
+0x0334 001157 arg 2 ,temp 
+0x0335 001158 arg mem_pdatatemp ,rega 
+0x0336 001159 arg mouse_eeprom_module_init_flag ,regb 
+0x0337 001160 branch app_initflag_check + 4 
+:      001162 p_mouse_wakeup_from_power:
+0x0338 001163 branch p_g24_auto_pair_start 
+0x0339 001164 fetch mouse_flag_len ,mem_mouse_flag 
+0x033a 001165 bbit0 mouse_enable_wakeup_from_power ,p_mouse_wakeup_no_from_power 
+0x033b 001166 fetch 1 ,mem_wakup_from_power_flag 
+0x033c 001167 isolate0 gpio_latch ,pdata 
+0x033d 001168 nbranch p_mouse_wakeup_no_from_power ,true 
+0x033e 001169 call p_mouse_init_sunt 
+0x033f 001170 call p_mouse_sensor_powerdown 
+:      001171 p_mouse_wakeup_no_from_power:
+0x0340 001172 fetch 1 ,mem_reconn_times_init 
+0x0341 001173 store 1 ,mem_reconn_times 
+:      001177 p_mouse_start_24g_mode:
+0x0342 001178 fetch mouse_flag_len ,mem_mouse_flag 
+0x0343 001179 rtnbit0 mouse_enable_24g 
+0x0344 001180 call p_g24_factory_check 
+0x0345 001181 branch p_g24_auto_pair_start ,user 
+0x0346 001182 branch p_g24_start_24g_mode 
+:      001184 p_g24_factory_check:
+0x0347 001185 arg 2 ,loopcnt 
+0x0348 001186 arg mem_24g_addr ,contr 
+:      001187 p_pdata_0xff_check:
+0x0349 001188 call enable_user 
+0x034a 001189 setarg 0xffff 
+:      001190 p_pdata_0xff_check_loop:
+0x034b 001191 ifetcht 2 ,contr 
+0x034c 001192 isub temp ,null 
+0x034d 001193 ncall disable_user ,zero 
+0x034e 001194 loop p_pdata_0xff_check_loop 
+0x034f 001195 rtn 
+:      001197 p_mouse_cb_fuction:
+0x0350 001198 setarg p_mouse_priority_bb_event 
+0x0351 001199 store 2 ,mem_cb_bb_event_process 
+0x0352 001200 setarg p_mouse_g24_package_data 
+0x0353 001201 store 2 ,mem_cb_24g_data 
+0x0354 001203 rtn 
+:      001205 p_mouse_g24_package_data:
+0x0355 001206 branch p_mouse_g24_package_data_allpower 
+:      001208 p_mouse_g24_package_data_normal:
+0x0356 001209 call mouse_g24_package_data 
+0x0357 001210 fetch 2 ,mem_mouse_z 
+0x0358 001211 rtn blank 
+0x0359 001212 branch p_g24_transmit_by_interrupt_enable 
+:      001214 p_mouse_g24_package_data_allpower:
+0x035a 001215 call p_g24_matrix_data 
+0x035b 001216 branch p_mouse_g24_package_data_normal + 1 
+:      001220 p_mouse_wheel_trigger:
+0x035c 001221 fetch 2 ,mem_mouse_z 
+0x035d 001222 rtn blank 
+0x035e 001223 jam 1 ,mem_mouse_wheel_trigger 
+0x035f 001224 jam 2 ,mem_mouse_wheel_trigger_timer 
+0x0360 001225 rtn 
+:      001228 p_mouse_clear_sensor_data:
+0x0361 001229 call le_set_config_more_data 
+0x0362 001230 jam 1 ,mem_mouse_clear_sensor_data_flag 
+0x0363 001231 branch p_mouse_sensor_poweron 
+:      001233 p_mouse_idle:
+0x0364 001234 call ui_check_paring_button 
+0x0365 001235 call mouse_dpi_cheak 
+0x0366 001236 branch mouse_wheel_check 
+:      001238 p_mouse_priority_bb_event:
+0x0367 001239 copy regc ,pdata 
+0x0368 001240 beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete 
+0x0369 001241 beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail 
+0x036a 001242 beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success 
+0x036b 001243 branch mouse_priority_bb_event + 1 
+:      001248 p_mouse_24g_pairing_complete:
+0x036c 001249 jam 1 ,mem_mouse_24g_enter_lpm_enable 
+0x036d 001250 arg mosue_24g_pairing_flag ,queue 
+0x036e 001251 call mouse_disable_function_flag 
+0x036f 001252 setarg 0 
+0x0370 001253 store 2 ,mem_24g_pairing_timer_count 
+0x0371 001254 jam 0 ,mem_mouse_move_flag 
+0x0372 001256 call mouse_read_sensor_common 
+0x0373 001258 call p_g24_transmit_by_interrupt_enable 
+0x0374 001259 call p_mouse_set_24g_addr_eeprom 
+0x0375 001260 branch iicd_write_protect_eep_data 
+:      001262 p_mouse_set_24g_addr_eeprom:
+0x0376 001263 arg mem_24g_addr ,rega 
+0x0377 001264 arg mouse_g24_addr_eeprom_offect ,regb 
+0x0378 001265 arg 4 ,temp 
+0x0379 001266 rtn 
+:      001268 p_mouse_24g_attempt_fail:
+0x037a 001269 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt 
+0x037b 001270 call p_mouse_tx_power_init 
+0x037c 001271 call p_g24_check_51cmd_stop_24g 
+0x037d 001272 branch soft_reset_chip 
+0x037e 001273 jam 0 ,mem_link_key_exists 
+0x037f 001274 call mouse_eeprom_load_recon_info 
+0x0380 001275 arg 3 ,loopcnt 
+0x0381 001276 arg mem_device1_addr ,contr 
+0x0382 001277 call p_pdata_0xff_check 
+0x0383 001278 branch p_mouse_null_enter_hibernate_count ,user 
+0x0384 001279 branch p_mouse_check_reconn_target 
+:      001281 p_mouse_24g_attempt_success:
+0x0385 001282 branch mouse_no_data_timer_init 
+:      001285 p_mouse_before_hibernate:
+0x0386 001286 enable user 
+0x0387 001287 hfetch 4 ,0x8138 
+0x0388 001288 setflag user ,26 ,pdata 
+0x0389 001289 hstore 4 ,core_lpm_reg 
+0x038a 001290 call lpm_write_ctrl 
+0x038b 001291 call p_mouse_sensor_powerdown_check 
+0x038c 001292 call disable_authrom 
+0x038d 001293 call mouse_devce_led_off 
+0x038e 001294 call mouse_before_hibernate_wheel_gpio_set 
+0x038f 001295 branch p_mouse_setgpio_lpm_before 
+:      001297 p_mouse_sensor_powerdown_check:
+0x0390 001298 fetch 1 ,mem_mouse_init_sensor_reset_flag 
+0x0391 001299 rtn blank 
+0x0392 001300 jam 0 ,mem_mouse_init_sensor_reset_flag 
+0x0393 001301 branch p_mouse_sensor_powerdown 
+:      001304 p_mouse_bb_event_timer:
+0x0394 001305 call p_mouse_wheel_trigger_timer 
+0x0395 001306 call p_mouse_null_enter_hibernate_check 
+0x0396 001307 call p_mouse_bt_discovery_check 
+0x0397 001308 call mouse_check_discovery_timeout_timer 
+0x0398 001309 branch mouse_check_no_data_timeout_timer 
+:      001314 p_mouse_wheel_trigger_timer:
+0x0399 001315 arg mem_mouse_wheel_trigger_timer ,regc 
+0x039a 001316 arg p_mouse_wheel_trigger_disable ,regb 
+0x039b 001317 branch timer_single_step 
+:      001318 p_mouse_wheel_trigger_disable:
+0x039c 001319 jam 0 ,mem_mouse_wheel_trigger 
+0x039d 001320 rtn 
+:      001322 p_mouse_bt_discovery_check:
+0x039e 001323 fetch 1 ,mem_config_function_enable 
+0x039f 001324 bbit1 enable_bt_button ,mouse_bt_discovery_by_button 
+:      001325 p_mouse_bt_discovery_commbination_key:
+0x03a0 001326 call mouse_check_key_gpio 
+0x03a1 001327 beq mouse_lmr_button ,p_mouse_bt_discovery_commbination_key_down 
+:      001328 p_mouse_bt_discovery_commbination_key_up:
+0x03a2 001329 fetch 1 ,mem_ui_button_timeout 
+0x03a3 001330 store 1 ,mem_combination_ui_button_count 
+0x03a4 001331 fetch 1 ,mem_bt_discovey_button_statue 
+0x03a5 001332 rtneq dpi_button_state_up 
+0x03a6 001333 jam dpi_button_state_up ,mem_bt_discovey_button_statue 
+0x03a7 001334 arg mouse_bt_discovery_button_long_down_flag ,queue 
+0x03a8 001335 call mouse_disable_function_flag 
+0x03a9 001336 branch mouse_bt_discovery_button_down_disable 
+:      001337 p_mouse_bt_discovery_commbination_key_down:
+0x03aa 001338 jam 40 ,mem_mouse_null_enter_hibernate_timer 
+0x03ab 001339 call p_mouse_bt_discovery_timer 
+0x03ac 001340 branch mouse_bt_discovery_commbination_key_down + 1 
+:      001342 p_mouse_bt_discovery_timer:
+0x03ad 001343 arg mem_combination_ui_button_count ,regc 
+0x03ae 001344 arg p_mouse_long_button_bt_discovery ,regb 
+0x03af 001345 branch timer_single_step 
+:      001347 p_mouse_long_button_bt_discovery:
+0x03b0 001348 fetch 2 ,mem_ui_state_map 
+0x03b1 001349 isolate1 ui_state_ble_adv ,pdata 
+0x03b2 001350 call mouse_stop_le_adv ,true 
+0x03b3 001351 fetch 2 ,mem_ui_state_map 
+0x03b4 001352 isolate1 ui_state_bt_reconnect ,pdata 
+0x03b5 001353 call mouse_cancel_reconnect ,true 
+0x03b6 001354 arg mouse_bt_discovery_button_long_down_flag ,queue 
+0x03b7 001355 call mouse_enable_function_flag 
+0x03b8 001356 branch mouse_long_button_bt_discovry 
+:      001358 p_mouse_null_enter_hibernate_check:
+0x03b9 001359 fetch 1 ,mem_mouse_null_enter_hibernate_flag 
+0x03ba 001360 rtn blank 
+0x03bb 001361 fetch 1 ,mem_mouse_null_enter_hibernate_timer 
+0x03bc 001362 branch p_mouse_null_enter_hibernate ,blank 
+0x03bd 001363 increase -1 ,pdata 
+0x03be 001364 store 1 ,mem_mouse_null_enter_hibernate_timer 
+0x03bf 001365 rtn 
+:      001366 p_mouse_null_enter_hibernate:
+0x03c0 001367 jam 0 ,mem_mouse_null_enter_hibernate_flag 
+0x03c1 001368 branch app_enter_hibernate 
+:      001369 p_mouse_null_enter_hibernate_count:
+0x03c2 001370 jam 1 ,mem_mouse_null_enter_hibernate_flag 
+0x03c3 001371 jam 40 ,mem_mouse_null_enter_hibernate_timer 
+0x03c4 001372 rtn 
+:      001376 p_mouse_seting_dpi:
+0x03c5 001377 call mosue_dpi_led_blink_init 
+:      001378 p_mouse_seting_dpi_diff:
+0x03c6 001379 fetch 1 ,mem_config_sensor_type 
+0x03c7 001380 beq p3065_xy ,p_mouse_seting_3065xy_dpi 
+0x03c8 001381 branch mouse_seting_dpi + 3 
+:      001383 p_mouse_seting_3065xy_dpi:
+0x03c9 001384 fetch 1 ,mem_mouse_dpi 
+0x03ca 001385 call p_mouse_3065xy_dpi_recount ,blank 
+0x03cb 001386 fetch 1 ,mem_mouse_dpi 
+0x03cc 001387 beq mouse_dpi_level2 ,mouse_set_cpi1 
+0x03cd 001389 beq mouse_dpi_level4 ,mouse_set_cpi4 
+0x03ce 001390 branch mouse_set_cpi3 
+:      001391 p_mouse_3065xy_dpi_recount:
+0x03cf 001392 jam 1 ,mem_mouse_dpi 
+0x03d0 001393 rtn 
+:      001395 p_mouse_motion:
+0x03d1 001396 disable user 
+0x03d2 001397 setarg 0 
+0x03d3 001398 store 6 ,mem_mouse_x 
+0x03d4 001399 call mouse_cheak_sensor_data 
+0x03d5 001400 call mouse_zwheel 
+0x03d6 001401 call mouse_t_zwheel 
+0x03d7 001402 call mouse_key 
+0x03d8 001403 nrtn user 
+0x03d9 001404 branch mouse_motion + 9 
+:      001406 p_mouse_bb_event_discovery_btn:
+0x03da 001407 jam 0 ,mem_mouse_null_enter_hibernate_flag 
+0x03db 001408 jam 0 ,mem_mouse_null_enter_hibernate_timer 
+0x03dc 001409 isolate1 mark_24g ,mark 
+0x03dd 001410 call p_g24_check_51cmd_stop_24g ,true 
+0x03de 001411 branch mouse_bb_event_discovery_btn + 1 
+:      001414 p_mouse_start_discovery:
+0x03df 001415 call p_mouse_tx_power_init 
+0x03e0 001416 jam 0 ,mem_mouse_clear_sensor_data_flag 
+0x03e1 001417 fetch 2 ,mem_ui_state_map 
+0x03e2 001418 bbit1 ui_state_ble_adv ,p_mouse_start_discovery_norandom 
+0x03e3 001419 fetch mouse_flag_len ,mem_mouse_flag 
+0x03e4 001420 bbit0 mouse_enable_ble_random_addre ,p_mouse_start_discovery_norandom 
+:      001421 p_mouse_start_discovery_norandom:
+0x03e5 001422 call app_lpm_mult_disable 
+0x03e6 001423 fetch 2 ,mem_discovery_timeout 
+0x03e7 001424 store 2 ,mem_mouse_discovery_timer 
+0x03e8 001425 jam 6 ,mem_connection_options 
+0x03e9 001426 setarg 0 
+0x03ea 001427 store 2 ,mem_mouse_no_data_timer 
+0x03eb 001428 store 2 ,mem_mouse_direct_timer 
+0x03ec 001429 arg mouse_store_eeprom_flag ,queue 
+0x03ed 001430 call mouse_enable_function_flag 
+0x03ee 001431 call mouse_bt_discovery_button_down_disable 
+0x03ef 001432 branch mouse_start_discovery_norandom + 13 
+:      001435 p_mouse_stop_discovery:
+0x03f0 001436 setarg 0 
+0x03f1 001437 store 2 ,mem_mouse_discovery_timer 
+0x03f2 001438 call p_mouse_sensor_poweron 
+0x03f3 001439 branch mouse_stop_discovery + 1 
+:      001442 p_twspi_reset:
+0x03f4 001443 hfetch 1 ,core_gpio_out3 
+0x03f5 001444 and_into 0xfd ,pdata 
+0x03f6 001445 hstore 1 ,core_gpio_out3 
+0x03f7 001446 hfetcht 1 ,core_gpio_oe3 
+0x03f8 001447 or_into 0x2 ,temp 
+0x03f9 001448 hstoret 1 ,core_gpio_oe3 
+0x03fa 001449 call twspi_disable 
+0x03fb 001450 and_into 0xfd ,temp 
+0x03fc 001451 nop 13 
+0x03fd 001452 call twspi_enable 
+0x03fe 001453 hstoret 1 ,core_gpio_oe3 
+0x03ff 001454 rtn 
+:      001456 p_check_51cmd_once_continue:
+0x0400 001457 call lmo_fifo_check 
+0x0401 001458 nbranch check_51cmd_restore ,blank 
+0x0402 001459 fetch 1 ,mem_fifo_temp 
+0x0403 001460 bmark0 mark_context ,check_51cmd_check_idle 
+0x0404 001461 beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param 
+0x0405 001462 branch check_51cmd_once_continue + 2 
+:      001464 p_check_51cmd_ble_update_connect_param:
+0x0406 001465 call le_fifo_check_full 
+0x0407 001466 nrtn blank 
+0x0408 001467 branch le_l2cap_tx_update_req 
+:      001471 power_ctrl_pac_succ_cnt_init:
+0x0409 001472 jam 1 ,mem_power_ctrl_level 
+0x040a 001473 jam 0 ,mem_power_ctrl_pac_succ_cnt 
+0x040b 001474 rtn 
+:      001475 power_ctrl_pac_succ_incrs:
+0x040c 001476 fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0x040d 001477 increase 1 ,pdata 
+0x040e 001478 store 1 ,mem_power_ctrl_pac_succ_cnt 
+0x040f 001479 rtn 
+:      001480 power_ctrl_pac_succ_decrs:
+0x0410 001481 fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0x0411 001482 sub pdata ,2 ,null 
+0x0412 001483 ncall power_ctrl_pac_succ_cnt_reinit ,positive 
+0x0413 001484 fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0x0414 001485 rtneq 0 
+0x0415 001486 increase -1 ,pdata 
+0x0416 001487 store 1 ,mem_power_ctrl_pac_succ_cnt 
+0x0417 001488 rtn 
+:      001489 power_ctrl_pac_succ_cnt_reinit:
+0x0418 001490 jam 3 ,mem_power_ctrl_pac_succ_cnt 
+0x0419 001491 rtn 
+:      001493 power_ctrl_start:
+0x041a 001494 rtn 
+0x041b 001495 fetch 2 ,mem_ui_state_map 
+0x041c 001496 rtnbit1 ui_state_ble_adv 
+0x041d 001497 rtnbit1 ui_state_bt_reconnect 
+0x041e 001498 rtnbit1 ui_state_bt_discovery 
+0x041f 001500 arg mem_rssi_signal_buf ,rega 
+0x0420 001501 call p_rssi_average 
+0x0421 001502 storet 1 ,mem_rssi_avg_received 
+0x0422 001504 setarg rssi_dis_max_24g 
+0x0423 001505 bmark1 mark_24g ,power_ctrl_start_next 
+0x0424 001506 setarg rssi_dis_max_ble 
+:      001507 power_ctrl_start_next:
+0x0425 001508 isub temp ,null 
+0x0426 001509 nbranch power_ctrl_txpower_incrs_force ,positive 
+0x0427 001511 fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0x0428 001512 sub pdata ,2 ,null 
+0x0429 001513 nbranch power_ctrl_txpower_decrs_check ,positive 
+0x042a 001514 fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0x042b 001515 beq 0 ,power_ctrl_txpower_incrs 
+0x042c 001516 rtn 
+:      001518 power_ctrl_txpower_decrs_check:
+0x042d 001519 fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0x042e 001520 rtnne 32 
+0x042f 001521 jam 0 ,mem_power_ctrl_pac_succ_cnt 
+:      001522 power_ctrl_txpower_decrs:
+0x0430 001523 fetcht 1 ,mem_rssi_avg_received 
+0x0431 001524 setarg rssi_dis_min_24g 
+0x0432 001525 bmark1 mark_24g ,power_ctrl_txpower_decrs_next 
+0x0433 001526 setarg rssi_dis_min_ble 
+:      001527 power_ctrl_txpower_decrs_next:
+0x0434 001528 isub temp ,null 
+0x0435 001529 nrtn positive 
+0x0436 001530 fetch 1 ,mem_power_ctrl_level 
+0x0437 001531 beq 0 ,power_ctrl_decrs_level0 
+0x0438 001532 increase -1 ,pdata 
+0x0439 001533 store 1 ,mem_power_ctrl_level 
+0x043a 001534 beq 0 ,power_ctrl_decrs_level0 
+:      001535 power_ctrl_decrs_level1:
+:      001536 power_ctrl_incrs_level1:
+0x043b 001537 jam tx_power_0db ,mem_tx_power 
+0x043c 001538 rtn 
+:      001540 power_ctrl_txpower_incrs_force:
+0x043d 001541 jam 0 ,mem_power_ctrl_pac_succ_cnt 
+:      001542 power_ctrl_txpower_incrs:
+0x043e 001543 fetch 1 ,mem_power_ctrl_level 
+0x043f 001544 beq 2 ,power_ctrl_incrs_level2 
+0x0440 001545 increase 1 ,pdata 
+0x0441 001546 store 1 ,mem_power_ctrl_level 
+0x0442 001547 beq 1 ,power_ctrl_incrs_level1 
+:      001548 power_ctrl_incrs_level2:
+0x0443 001550 jam tx_power_5db ,mem_tx_power 
+0x0444 001551 rtn 
+:      001553 power_ctrl_decrs_level0:
+0x0445 001554 jam tx_power_f5db ,mem_tx_power 
+0x0446 001555 rtn 
+:      001558 p_set_freq_tx:
+0x0447 001559 storet 1 ,mem_last_freq 
+0x0448 001560 add temp ,0 ,rega 
+0x0449 001561 call rf_write_freq 
+0x044a 001562 setarg param_pll_setup 
+0x044b 001563 call sleep 
+:      001564 p_rf_tx_enable:
+0x044c 001565 jam 0x1 ,rfen_adc 
+0x044d 001566 jam 0x3c ,rfen_rx 
+0x044e 001567 jam 0xe0 ,rfen_tx 
+0x044f 001568 nop 10 
+0x0450 001569 jam 0x01 ,rfen_mdm 
+0x0451 001570 jam 0x3d ,rfen_mdm 
+0x0452 001571 nop 10 
+0x0453 001572 jam 0xb7 ,rfen_sn 
+0x0454 001573 nop 10 
+0x0455 001574 jam 0x7d ,rfen_mdm 
+0x0456 001575 fetch 1 ,mem_tx_power 
+0x0457 001578 beq tx_power_5db ,p_set_tx_power_5db 
+0x0458 001580 beq tx_power_f5db ,p_set_tx_power_f5db 
+0x0459 001581 beq tx_power_pair ,p_set_tx_power_pair 
+:      001583 p_set_tx_power_0db:
+0x045a 001584 call p_rx_low_sens 
+0x045b 001586 jam 0xd0 ,0x8955 
+0x045c 001587 jam 0xe0 ,0x8956 
+0x045d 001589 jam 0x6c ,0x8958 
+0x045e 001591 branch set_tx_power_0db 
+:      001603 p_set_tx_power_5db:
+0x045f 001604 call p_rx_high_sens 
+0x0460 001606 jam 0xd0 ,0x8955 
+0x0461 001607 jam 0xe0 ,0x8956 
+0x0462 001609 jam 0x3c ,0x8958 
+0x0463 001611 branch set_tx_power_5db 
+:      001623 p_set_tx_power_f5db:
+0x0464 001624 call p_rx_low_sens 
+0x0465 001626 jam 0xd0 ,0x8955 
+0x0466 001627 jam 0xc0 ,0x8956 
+0x0467 001629 jam 0x6c ,0x8958 
+0x0468 001631 branch set_tx_power_f5db 
+:      001633 p_rx_low_sens:
+0x0469 001634 jam 0x5b ,0x894c 
+0x046a 001635 jam 0x96 ,0x894d 
+0x046b 001636 jam 0x2c ,0x894e 
+0x046c 001637 jam 0x46 ,0x894f 
+0x046d 001638 rtn 
+:      001640 p_rx_high_sens:
+0x046e 001641 jam 0xfb ,0x894c 
+0x046f 001642 jam 0xef ,0x894d 
+0x0470 001643 jam 0xec ,0x894e 
+0x0471 001644 jam 0x5e ,0x894f 
+0x0472 001645 rtn 
+:      001647 p_set_tx_power_pair:
+0x0473 001649 jam 0xc5 ,0x8956 
+0x0474 001650 jam 0xd0 ,0x8955 
+0x0475 001651 rtn 
+:      001653 p_shutdown_radio:
+0x0476 001654 force 8 ,radio_ctrl 
+0x0477 001655 branch shutdown_radio + 1 
+:      001657 p_initialize_radio_cont:
+0x0478 001658 jam 0xe6 ,0x8968 
+0x0479 001659 call initialize_radio_cont + 1 
+0x047a 001660 jam clksel_dpll ,core_clksel 
+0x047b 001661 rtn 
+:      001672 p_g24_matrix_data:
+0x047c 001673 fetch 1 ,mem_24g_matrix_cnt 
+0x047d 001674 increase 1 ,pdata 
+0x047e 001675 store 1 ,mem_24g_matrix_cnt 
+0x047f 001676 sub pdata ,50 ,null 
+0x0480 001677 branch p_ms_x_right ,positive 
+0x0481 001678 sub pdata ,100 ,null 
+0x0482 001679 branch p_ms_y_up ,positive 
+0x0483 001680 sub pdata ,150 ,null 
+0x0484 001681 branch p_ms_x_left ,positive 
+0x0485 001682 sub pdata ,200 ,null 
+0x0486 001683 branch p_ms_y_down ,positive 
+0x0487 001684 rtn 
+:      001685 p_ms_x_right:
+0x0488 001686 setarg 0x05 
+0x0489 001687 store 2 ,mem_m_x 
+0x048a 001688 setarg 0 
+0x048b 001689 store 2 ,mem_m_y 
+0x048c 001690 store 1 ,mem_m_z 
+0x048d 001691 store 1 ,mem_m_key 
+0x048e 001692 store 1 ,mem_m_tz 
+:      001693 p_data:
+0x048f 001694 enable user 
+0x0490 001695 arg 7 ,rega 
+0x0491 001696 arg mem_m_key ,regb 
+0x0492 001697 rtn 
+:      001698 p_ms_y_up:
+0x0493 001699 setarg 0x05 
+0x0494 001700 store 2 ,mem_m_y 
+0x0495 001701 setarg 0 
+0x0496 001702 store 2 ,mem_m_x 
+0x0497 001703 store 1 ,mem_m_z 
+0x0498 001704 store 1 ,mem_m_key 
+0x0499 001705 store 1 ,mem_m_tz 
+0x049a 001706 branch p_data 
+:      001707 p_ms_x_left:
+0x049b 001708 setarg 0xfffb 
+0x049c 001709 store 2 ,mem_m_x 
+0x049d 001710 setarg 0 
+0x049e 001711 store 2 ,mem_m_y 
+0x049f 001712 store 1 ,mem_m_z 
+0x04a0 001713 store 1 ,mem_m_key 
+0x04a1 001714 store 1 ,mem_m_tz 
+0x04a2 001715 branch p_data 
+:      001716 p_ms_y_down:
+0x04a3 001717 fetch 1 ,mem_24g_matrix_cnt 
+0x04a4 001718 beq 200 ,p_mem_usb_data_square_cnt_set0 
+0x04a5 001719 setarg 0xfffb 
+0x04a6 001720 store 2 ,mem_m_y 
+0x04a7 001721 setarg 0 
+0x04a8 001722 store 2 ,mem_m_x 
+0x04a9 001723 store 1 ,mem_m_z 
+0x04aa 001724 store 1 ,mem_m_key 
+0x04ab 001725 store 1 ,mem_m_tz 
+0x04ac 001726 branch p_data 
+:      001727 p_mem_usb_data_square_cnt_set0:
+0x04ad 001728 jam 0 ,mem_24g_matrix_cnt 
+0x04ae 001729 branch p_ms_y_down + 2 
+              org 0x2000
+:      001738 start:
+0x2000 001739 call lpmstate 
+:      001741 soft_reset:
+0x2001 001742 bpatch patch00_0 ,mem_patch00 
+0x2002 001743 clear_stack 
+0x2003 001744 call spi_ncs_gpio_init 
+0x2004 001745 call initialize_radio 
+0x2005 001746 call iicd_init_12m 
+0x2006 001747 call init_param 
+0x2007 001748 call l2cap_init 
+0x2008 001749 bpatch patch00_1 ,mem_patch00 
+0x2009 001750 call rfcomm_init 
+0x200a 001751 call init_lmp 
+0x200b 001752 call ui_init 
+0x200c 001753 call app_init 
+0x200d 001754 ncall load_chip_option ,wake 
+0x200e 001755 bpatch patch00_2 ,mem_patch00 
+0x200f 001756 call app_lpm_init ,wake 
+0x2010 001757 call publickey_init 
+:      001758 soft_reset_2:
+0x2011 001759 call lpm_recover_clk ,wake 
+:      001760 main_loop:
+0x2012 001761 bpatch patch00_3 ,mem_patch00 
+0x2013 001762 call sp_calc_sequence 
+0x2014 001763 call sp_calc_sequence_256 
+0x2015 001764 call sp_calc_sequence_256_check 
+0x2016 001765 call le_dispatch 
+0x2017 001766 bpatch patch00_4 ,mem_patch00 
+0x2018 001767 call idle_dispatch 
+0x2019 001768 call app_process_idle 
+0x201a 001769 call inquiry_dispatch 
+0x201b 001770 call inquiry_scan_dispatch 
+0x201c 001771 call page_scan_dispatch 
+0x201d 001772 call connection_dispatch 
+0x201e 001773 call lpm_dispatch 
+0x201f 001774 call g24_dispatch 
+0x2020 001775 branch main_loop 
+:      001777 connection_dispatch:
+0x2021 001778 call connection_incontext 
+0x2022 001779 rtnmark0 mark_context 
+0x2023 001780 set0 mark_context ,mark 
+0x2024 001781 call context_save 
+0x2025 001782 branch le_disable 
+:      001784 connection_incontext:
+0x2026 001785 bpatch patch00_5 ,mem_patch00 
+0x2027 001786 call context_search_insniff 
+0x2028 001787 nbranch connection_nosniff ,zero 
+0x2029 001788 call context_load 
+0x202a 001789 add rega ,coffset_mode ,contr 
+0x202b 001790 ifetch 1 ,contr 
+0x202c 001791 bbit1 mode_le ,le_conn_dispatch 
+0x202d 001792 bbit1 mode_master ,master_dispatch 
+0x202e 001793 branch slave_dispatch 
+:      001794 connection_nosniff:
+0x202f 001795 call context_get_next 
+0x2030 001796 copy loopcnt ,null 
+0x2031 001797 rtn zero 
+0x2032 001798 call context_load 
+0x2033 001799 fetch 1 ,mem_state 
+0x2034 001800 bbit1 state_inpage ,master_page 
+0x2035 001801 fetch 1 ,mem_mode 
+0x2036 001802 bbit1 mode_master ,master_dispatch 
+0x2037 001803 branch slave_dispatch 
+:      001811 idle_dispatch:
+0x2038 001812 fetch 1 ,mem_hci_cmd 
+0x2039 001813 rtn blank 
+0x203a 001814 beq hci_cmd_inquiry ,idle_inquiry 
+0x203b 001815 beq hci_cmd_inquiry_cancel ,idle_inquiry_cancel 
+0x203c 001816 beq hci_cmd_remote_name_req ,idle_remote_name_req 
+0x203d 001817 beq hci_cmd_create_conn ,idle_create_conn 
+0x203e 001818 beq hci_cmd_le_create_conn ,idle_le_create_conn 
+0x203f 001819 call context_search_conn_handle 
+0x2040 001820 rtn zero 
+0x2041 001821 call context_search_plap 
+0x2042 001822 rtn zero 
+:      001823 idle_exit:
+0x2043 001824 jam 0 ,mem_hci_cmd 
+0x2044 001825 rtn 
+:      001827 idle_le_create_conn:
+0x2045 001828 jam hci_cmd_le_create_conn ,mem_cmd_le_create_conn 
+0x2046 001829 jam 0 ,mem_hci_cmd 
+0x2047 001830 rtn 
+:      001832 idle_inquiry:
+0x2048 001833 set1 mark_inquiry_on ,mark 
+0x2049 001834 set0 mark_inquiry_trainb ,mark 
+0x204a 001835 jam param_ninquiry ,mem_ninqy_index 
+0x204b 001836 jam 31 ,mem_nfreq_index_inq 
+0x204c 001837 branch idle_exit 
+:      001839 idle_inquiry_cancel:
+0x204d 001840 set0 mark_inquiry_on ,mark 
+0x204e 001841 force 0 ,stop_watch 
+0x204f 001842 branch idle_exit 
+:      001844 idle_remote_name_req:
+0x2050 001845 call context_search_plap 
+0x2051 001846 rtn zero 
+0x2052 001847 force lmp_name_req ,temp 
+0x2053 001848 jam 5 ,mem_nameres_cnt 
+0x2054 001849 branch idle_start_page 
+:      001851 idle_create_conn:
+0x2055 001852 bpatch patch00_6 ,mem_patch00 
+:      001853 idle_create_conn_device:
+0x2056 001854 fetch 6 ,mem_hci_plap 
+0x2057 001855 branch idle_exit ,blank 
+0x2058 001856 jam reconnect_hid ,memui_reconnect_mode 
+0x2059 001858 jam conn_sm_wait_features_res ,mem_conn_sm 
+0x205a 001859 branch idle_create_conn_cont 
+:      001861 idle_create_conn_cont:
+0x205b 001862 force lmp_version_req ,temp 
+:      001863 idle_start_page:
+0x205c 001864 bpatch patch00_7 ,mem_patch00 
+0x205d 001865 fetch 1 ,mem_page_mode 
+0x205e 001866 branch idle_page_mode_r0 ,blank 
+0x205f 001867 lshift3 pdata ,pdata 
+0x2060 001868 lshift4 pdata ,pdata 
+0x2061 001869 increase -1 ,pdata 
+:      001870 idle_page_mode_r0:
+0x2062 001871 store 1 ,mem_npage 
+0x2063 001872 store 1 ,mem_npage_index 
+0x2064 001873 jam 31 ,mem_nfreq_index_page 
+0x2065 001874 set0 mark_page_trainb ,mark 
+0x2066 001875 call context_new 
+0x2067 001876 nbranch idle_page_fail ,zero 
+0x2068 001877 call get_free_amaddr 
+0x2069 001878 store 1 ,mem_amaddr 
+0x206a 001879 storet 1 ,mem_lmo_opcode2 
+0x206b 001880 fetch 6 ,mem_hci_plap 
+0x206c 001881 store 6 ,mem_plap 
+0x206d 001882 bpatch patch01_0 ,mem_patch01 
+0x206e 001883 call timer_reinit 
+0x206f 001884 force 0 ,pdata 
+0x2070 001885 compare lmp_name_req ,temp ,0xff 
+0x2071 001886 nsetflag true ,state_init_seq ,pdata 
+0x2072 001887 set1 state_inpage ,pdata 
+0x2073 001888 store 1 ,mem_state 
+0x2074 001889 jam bt_evt_reconn_started ,mem_fifo_temp 
+0x2075 001890 call ui_ipc_send_event 
+0x2076 001891 force 0 ,pdata 
+0x2077 001892 setflag true ,smap_name_req ,pdata 
+0x2078 001893 store 1 ,mem_state_map 
+0x2079 001894 setarg 0 
+0x207a 001895 set1 mode_master ,pdata 
+0x207b 001896 store 1 ,mem_mode 
+0x207c 001897 enable master 
+0x207d 001898 call context_save 
+0x207e 001899 disable master 
+0x207f 001900 force page_length_timer ,queue 
+0x2080 001901 fetch 2 ,mem_page_to 
+0x2081 001902 call timer_init 
+0x2082 001903 branch idle_exit 
+:      001904 idle_page_fail:
+0x2083 001905 bpatch patch01_1 ,mem_patch01 
+0x2084 001906 fetch 6 ,mem_hci_plap 
+0x2085 001907 store 6 ,mem_plap 
+0x2086 001908 compare lmp_name_req ,temp ,0xff 
+0x2087 001909 branch idle_name_fail ,true 
+0x2088 001910 branch idle_exit 
+:      001911 idle_name_fail:
+0x2089 001912 arg mem_tmp_buffer ,contw 
+0x208a 001913 arg 8 ,loopcnt 
+0x208b 001914 call memset0 
+0x208c 001915 jam bt_evt_reconn_failed ,mem_fifo_temp 
+0x208d 001916 call ui_ipc_send_event 
+0x208e 001917 branch idle_exit 
+:      001924 inquiry_dispatch:
+0x208f 001925 rtnmark0 mark_inquiry_on 
+0x2090 001926 force inquiry_length_timer ,queue 
+0x2091 001927 call timer_check 
+0x2092 001928 nsetflag blank ,mark_inquiry_on ,mark 
+0x2093 001929 nbranch inquiry_start ,blank 
+0x2094 001930 rtn 
+:      001934 inquiry_start:
+0x2095 001935 bpatch patch01_2 ,mem_patch01 
+0x2096 001936 fetcht 2 ,mem_inq_window 
+0x2097 001937 force 4 ,queue 
+0x2098 001938 call sniff_check_window 
+0x2099 001939 rtn user 
+0x209a 001940 call afh_clear 
+0x209b 001941 force 0 ,freq_mode 
+:      001942 inquiry_restart:
+0x209c 001943 rtn timeout 
+0x209d 001944 set0 mark_fhs_already_good ,mark 
+0x209e 001945 set0 mark_fhs_eir ,mark 
+:      001946 inquiry_rx_restart:
+0x209f 001947 add clkn_bt ,1 ,bt_clk 
+0x20a0 001948 isolate1 mark_inquiry_trainb ,mark 
+0x20a1 001949 setflag true ,2 ,freq_mode 
+0x20a2 001950 compare 0x00 ,bt_clk ,0x02 
+0x20a3 001951 nbranch inquiry_receive ,true 
+:      001953 inquiry_transmit:
+0x20a4 001954 bpatch patch01_3 ,mem_patch01 
+0x20a5 001955 fetch 1 ,mem_inquiry_transmit 
+0x20a6 001956 increase 1 ,pdata 
+0x20a7 001957 store 1 ,mem_inquiry_transmit 
+0x20a8 001958 call fetch_giac 
+0x20a9 001959 call tx_radio_freq 
+0x20aa 001960 call fetch_diac 
+0x20ab 001961 call start_transmitter 
+0x20ac 001962 call start_tx_native 
+0x20ad 001963 call send_access_word 
+0x20ae 001964 call end_of_packet 
+0x20af 001965 call inquiry_check_train 
+0x20b0 001966 branch inquiry_restart 
+:      001968 inquiry_check_train:
+0x20b1 001969 bpatch patch01_4 ,mem_patch01 
+0x20b2 001970 fetch 1 ,mem_nfreq_index_inq 
+0x20b3 001971 increase -1 ,pdata 
+0x20b4 001972 store 1 ,mem_nfreq_index_inq 
+0x20b5 001973 rtn positive 
+0x20b6 001974 jam 31 ,mem_nfreq_index_inq 
+0x20b7 001975 fetch 1 ,mem_ninqy_index 
+0x20b8 001976 increase -1 ,pdata 
+0x20b9 001977 store 1 ,mem_ninqy_index 
+0x20ba 001978 rtn positive 
+0x20bb 001979 setflip mark_inquiry_trainb ,mark 
+0x20bc 001980 jam param_ninquiry ,mem_ninqy_index 
+0x20bd 001981 rtn 
+:      001983 inquiry_receive:
+0x20be 001984 bpatch patch01_5 ,mem_patch01 
+0x20bf 001985 call fetch_giac 
+0x20c0 001986 call rx_radio_freq 
+0x20c1 001987 call fetch_diac 
+0x20c2 001988 call start_rx_native 
+0x20c3 001989 call start_receiver 
+0x20c4 001990 call wait_access_clkn_rt 
+0x20c5 001991 branch inquiry_sync ,sync 
+0x20c6 001992 call inquiry_check_train 
+0x20c7 001993 branch inquiry_rx_restart 
+:      001994 inquiry_sync:
+0x20c8 001995 bpatch patch01_6 ,mem_patch01 
+0x20c9 001996 call save_rssi 
+0x20ca 001997 call scan_mode_whiten 
+0x20cb 001998 call receive_packet_whitened 
+0x20cc 001999 set0 mark_rxbuf_inuse ,mark 
+0x20cd 002000 rtnmark0 mark_fhs_already_good 
+:      002001 inquiry_receive_rtn:
+0x20ce 002002 bpatch patch01_7 ,mem_patch01 
+:      002003 inquiry_receive_eir_rtn:
+0x20cf 002004 fetch 1 ,mem_inquiry_rcv 
+0x20d0 002005 increase 1 ,pdata 
+0x20d1 002006 store 1 ,mem_inquiry_rcv 
+0x20d2 002007 rtn 
+:      002015 master_page:
+0x20d3 002016 bpatch patch02_0 ,mem_patch02 
+0x20d4 002017 enable master 
+0x20d5 002018 enable clknt 
+0x20d6 002019 fetch 2 ,mem_page_interval 
+0x20d7 002020 branch master_page_no_interval ,blank 
+0x20d8 002021 force page_interval_timer ,queue 
+0x20d9 002022 call timer_check 
+0x20da 002023 nrtn blank 
+:      002024 master_page_no_interval:
+0x20db 002025 bpatch patch02_1 ,mem_patch02 
+0x20dc 002026 fetcht 2 ,mem_page_window 
+0x20dd 002027 force 40 ,queue 
+0x20de 002028 call sniff_check_window 
+0x20df 002029 branch page_exit ,user 
+0x20e0 002030 force page_length_timer ,queue 
+0x20e1 002031 call timer_check 
+0x20e2 002032 nbranch page_start ,blank 
+0x20e3 002033 fetch 1 ,mem_state_map 
+0x20e4 002034 bbit1 smap_name_req ,master_npage_timeout 
+0x20e5 002035 branch master_page_timeout 
+:      002036 master_npage_timeout:
+0x20e6 002037 arg mem_tmp_buffer ,contw 
+0x20e7 002038 arg 8 ,loopcnt 
+0x20e8 002039 call memset0 
+:      002040 master_page_timeout:
+0x20e9 002041 bpatch patch02_2 ,mem_patch02 
+0x20ea 002042 jam 0 ,mem_state 
+0x20eb 002043 call init_lmp_work 
+0x20ec 002044 jam 0 ,memui_reconnect_mode 
+0x20ed 002045 jam bt_evt_reconn_page_timeout ,mem_fifo_temp 
+0x20ee 002046 call ui_ipc_send_event 
+0x20ef 002047 branch page_exit 
+:      002049 page_start:
+0x20f0 002050 bpatch patch02_3 ,mem_patch02 
+0x20f1 002051 force 0 ,timeup 
+0x20f2 002052 until clkn_rt ,meet 
+0x20f3 002053 fetch 1 ,mem_page_clk 
+0x20f4 002054 increase -1 ,pdata 
+0x20f5 002055 ixor clkn_bt ,pdata 
+0x20f6 002056 compare 0 ,pdata ,3 
+0x20f7 002057 nbranch page_start ,true 
+0x20f8 002058 deposit am_addr 
+0x20f9 002059 store 1 ,mem_fhs_am_addr 
+0x20fa 002060 force 0 ,n_tx_slot 
+0x20fb 002061 force 0 ,freq_mode 
+:      002063 page_restart:
+0x20fc 002064 bpatch patch02_4 ,mem_patch02 
+0x20fd 002065 branch page_exit ,timeout 
+0x20fe 002066 call fetch_page_bt_adr 
+0x20ff 002067 arg param_rf_setup ,timeup 
+0x2100 002068 until clkn_rt ,meet 
+:      002069 page_rx_restart:
+0x2101 002070 bpatch patch02_5 ,mem_patch02 
+0x2102 002071 fetch 4 ,mem_page_clk 
+0x2103 002072 iforce bt_clk 
+0x2104 002073 increase 1 ,pdata 
+0x2105 002074 store 4 ,mem_page_clk 
+0x2106 002075 isolate1 mark_page_trainb ,mark 
+0x2107 002076 setflag true ,2 ,freq_mode 
+0x2108 002077 compare 0x00 ,bt_clk ,0x02 
+0x2109 002078 nbranch page_receive ,true 
+0x210a 002079 fetch 1 ,mem_page_transmit 
+0x210b 002080 increase 1 ,pdata 
+0x210c 002081 store 1 ,mem_page_transmit 
+0x210d 002082 call tx_radio_freq 
+0x210e 002083 call start_transmitter 
+0x210f 002084 call start_tx_native 
+0x2110 002085 call send_access_word 
+0x2111 002086 call end_of_packet 
+0x2112 002087 call page_check_train 
+0x2113 002088 branch page_restart 
+:      002089 page_exit:
+0x2114 002090 bpatch patch02_6 ,mem_patch02 
+0x2115 002091 disable master 
+0x2116 002092 fetch 2 ,mem_page_interval 
+0x2117 002093 rtn blank 
+0x2118 002094 force page_interval_timer ,queue 
+0x2119 002095 branch timer_init 
+:      002097 page_check_train:
+0x211a 002098 bpatch patch02_7 ,mem_patch02 
+0x211b 002099 fetch 1 ,mem_nfreq_index_page 
+0x211c 002100 increase -1 ,pdata 
+0x211d 002101 store 1 ,mem_nfreq_index_page 
+0x211e 002102 rtn positive 
+0x211f 002103 jam 31 ,mem_nfreq_index_page 
+0x2120 002104 fetch 1 ,mem_npage_index 
+0x2121 002105 increase -1 ,pdata 
+0x2122 002106 store 1 ,mem_npage_index 
+0x2123 002107 rtn positive 
+0x2124 002108 setflip mark_page_trainb ,mark 
+0x2125 002109 fetch 1 ,mem_npage 
+0x2126 002110 store 1 ,mem_npage_index 
+0x2127 002111 rtn 
+:      002113 page_receive:
+0x2128 002114 bpatch patch03_0 ,mem_patch03 
+0x2129 002115 call rx_radio_freq 
+0x212a 002116 call start_rx_native 
+0x212b 002117 call start_receiver 
+0x212c 002118 call wait_access_clkn_rt 
+0x212d 002119 branch page_sync ,sync 
+0x212e 002120 call page_check_train 
+0x212f 002121 branch page_rx_restart 
+:      002122 page_sync:
+0x2130 002123 call end_of_packet 
+0x2131 002124 fetch 1 ,mem_page_rcv 
+0x2132 002125 increase 1 ,pdata 
+0x2133 002126 store 1 ,mem_page_rcv 
+0x2134 002127 force 0 ,stop_watch 
+0x2135 002128 fetch 4 ,mem_page_clk 
+:      002129 page_send_fhs:
+0x2136 002130 bpatch patch03_1 ,mem_patch03 
+0x2137 002131 call rf_setup_time_master_slot 
+0x2138 002132 call fetch_page_bt_adr 
+0x2139 002133 increase 1 ,n_tx_slot 
+:      002134 page_send_fhs_continue:
+0x213a 002135 and_into 0x1fd ,bt_clk 
+0x213b 002136 and_into 0x1fc ,freq_mode 
+0x213c 002137 call tx_radio_freq 
+0x213d 002138 call start_transmitter 
+0x213e 002139 call start_tx_native 
+0x213f 002140 call send_access_word 
+0x2140 002141 deposit clkn_bt 
+0x2141 002142 store 4 ,mem_clkn_bt 
+0x2142 002143 force 0 ,am_addr 
+0x2143 002144 force type_fhs ,type 
+0x2144 002145 call scan_mode_whiten 
+0x2145 002146 call transmit_packet_whitened 
+:      002147 page_wait_fhs_reply:
+0x2146 002148 bpatch patch03_2 ,mem_patch03 
+0x2147 002149 call rf_setup_time_slave_slot 
+0x2148 002150 or_into 0x02 ,bt_clk 
+0x2149 002151 and_into 0x1fc ,freq_mode 
+0x214a 002152 call rx_radio_freq 
+0x214b 002153 call start_rx_native 
+0x214c 002154 call start_receiver 
+0x214d 002155 call wait_access_clkn_rt 
+0x214e 002156 call end_of_packet ,sync 
+0x214f 002157 branch page_wait_fhs_reply_ok ,sync 
+0x2150 002158 fetch 1 ,mem_fhs_wait_counter 
+0x2151 002159 branch page_restart ,blank 
+0x2152 002160 increase -1 ,pdata 
+0x2153 002161 store 1 ,mem_fhs_wait_counter 
+0x2154 002162 branch page_send_fhs 
+:      002164 page_wait_fhs_reply_ok:
+0x2155 002165 bpatch patch03_3 ,mem_patch03 
+0x2156 002166 fetch 1 ,mem_page_rcv_fhs 
+0x2157 002167 increase 1 ,pdata 
+0x2158 002168 store 1 ,mem_page_rcv_fhs 
+0x2159 002169 call prepare_newconn 
+:      002170 master_newconn_loop:
+0x215a 002171 call master_newconn_once 
+0x215b 002172 branch newconn_poll_responded ,sync 
+0x215c 002173 call new_conn_timeout 
+0x215d 002174 nbranch master_newconn_loop ,blank 
+0x215e 002175 branch page_restart 
+:      002177 newconn_poll_responded:
+0x215f 002178 bpatch patch03_4 ,mem_patch03 
+0x2160 002179 fetch 1 ,mem_state 
+0x2161 002180 set0 state_inpage ,pdata 
+0x2162 002181 store 1 ,mem_state 
+0x2163 002182 call newconn_init 
+0x2164 002183 disable master 
+0x2165 002184 rtn 
+:      002187 master_dispatch:
+0x2166 002188 bpatch patch03_5 ,mem_patch03 
+0x2167 002189 enable master 
+0x2168 002190 enable clknt 
+0x2169 002191 call role_switch_master 
+0x216a 002192 rtn user 
+0x216b 002193 call check_bt_disabled 
+0x216c 002194 call rf_setup_time_master_slot 
+0x216d 002195 add clkn_bt ,1 ,bt_clk 
+0x216e 002196 call fetch_self_bt_adr 
+0x216f 002197 force 0x03 ,freq_mode 
+0x2170 002198 call scheduler_tx_l2cap_pkt 
+0x2171 002199 call prepare_tx 
+0x2172 002200 call tx_radio_freq 
+0x2173 002201 call start_transmitter 
+0x2174 002202 call start_tx_native 
+0x2175 002203 call send_access_word 
+0x2176 002204 call transmit_packet 
+:      002205 master_loop:
+0x2177 002206 bpatch patch03_6 ,mem_patch03 
+0x2178 002207 call parse_lmp 
+0x2179 002208 call master_conn_recv_packet 
+0x217a 002209 nbranch master_notmatch ,match 
+0x217b 002210 call supervision_flush 
+0x217c 002211 call parse_l2cap 
+0x217d 002212 fetch 1 ,mem_master_rcvcnt 
+0x217e 002213 increase 1 ,pdata 
+0x217f 002214 store 1 ,mem_master_rcvcnt 
+:      002215 master_notmatch:
+0x2180 002216 bpatch patch03_7 ,mem_patch03 
+0x2181 002217 call scheduler_process 
+0x2182 002218 call check_master_disconnect 
+0x2183 002219 nrtn master 
+0x2184 002220 call check_attempt 
+0x2185 002221 nbranch master_attempt ,blank 
+:      002222 master_exit:
+0x2186 002223 disable master 
+0x2187 002224 rtn 
+:      002226 master_attempt:
+0x2188 002227 call prepare_tx 
+0x2189 002228 call master_conn_send_packet 
+0x218a 002229 branch master_loop 
+:      002232 check_master_disconnect:
+0x218b 002233 branch check_master_match ,match 
+0x218c 002234 call supervision_update 
+0x218d 002235 branch master_disconnect ,positive 
+:      002236 check_master_match:
+0x218e 002237 call check_disconnect_timeout 
+0x218f 002238 nbranch master_disconnect ,user 
+0x2190 002239 fetch 1 ,mem_state_map 
+0x2191 002240 rtnbit0 smap_name_req 
+0x2192 002241 rtnbit1 smap_name_res 
+0x2193 002242 fetch 1 ,mem_op 
+0x2194 002243 rtnbit1 op_disconn 
+0x2195 002244 call conn_timer_expired 
+0x2196 002245 nrtn blank 
+0x2197 002246 fetch 1 ,mem_nameres_cnt 
+0x2198 002247 increase -1 ,pdata 
+0x2199 002248 store 1 ,mem_nameres_cnt 
+0x219a 002249 nrtn blank 
+0x219b 002250 branch lmp_disconnect 
+:      002252 master_disconnect:
+0x219c 002253 bpatch patch04_0 ,mem_patch04 
+0x219d 002254 call quit_connection 
+0x219e 002255 disable master 
+0x219f 002256 fetch 1 ,mem_state_map 
+0x21a0 002257 bbit1 smap_name_req ,master_name_disconnect 
+0x21a1 002258 rtn 
+:      002260 master_name_disconnect:
+0x21a2 002261 fetch 1 ,mem_state_map 
+0x21a3 002262 rtnbit1 smap_name_res 
+:      002263 master_name_error:
+0x21a4 002264 arg mem_tmp_buffer ,contw 
+0x21a5 002265 arg 8 ,loopcnt 
+0x21a6 002266 branch memset0 
+:      002268 check_disconnect_timeout:
+0x21a7 002269 bpatch patch04_1 ,mem_patch04 
+0x21a8 002270 enable user 
+0x21a9 002271 fetch 1 ,mem_op 
+0x21aa 002272 rtnbit0 op_disconn 
+0x21ab 002273 call conn_timer_expired 
+0x21ac 002274 nrtn blank 
+0x21ad 002275 branch disable_user 
+:      002277 conn_timer_expired:
+0x21ae 002278 fetch 1 ,mem_conn_timer 
+0x21af 002279 increase -1 ,pdata 
+0x21b0 002280 store 1 ,mem_conn_timer 
+0x21b1 002281 rtn 
+:      002283 linkkey_ready:
+0x21b2 002284 bpatch patch04_2 ,mem_patch04 
+0x21b3 002285 fetch 1 ,mem_state 
+0x21b4 002286 bbit1 state_linkkey ,linkkey_set 
+0x21b5 002287 fetch 1 ,mem_pairing_auth 
+0x21b6 002288 branch linkkey_set ,blank 
+0x21b7 002289 jam defalt_pairing_auth ,mem_pairing_auth 
+0x21b8 002290 jam bt_evt_linkkey_generate ,mem_fifo_temp 
+0x21b9 002291 call ui_ipc_send_event 
+0x21ba 002292 branch linkkey_set 
+:      002293 linkkey_set:
+0x21bb 002294 bpatch patch04_3 ,mem_patch04 
+0x21bc 002295 call context_traverse_linkkey 
+0x21bd 002296 fetch 1 ,mem_state 
+0x21be 002297 set1 state_linkkey ,pdata 
+0x21bf 002298 store 1 ,mem_state 
+0x21c0 002299 jam 1 ,mem_link_key_exists 
+0x21c1 002300 fetch 1 ,mem_conn_sm 
+0x21c2 002301 bne conn_sm_pairing ,linkkey_set_continue 
+:      002302 linkkey_set_continue:
+0x21c3 002303 rtn 
+:      002305 generate_linkkey_continue:
+0x21c4 002306 jam pairing_auth ,mem_pairing_auth 
+:      002307 clear_linkstate:
+0x21c5 002308 fetch 1 ,mem_state 
+0x21c6 002309 set0 state_linkkey ,pdata 
+0x21c7 002310 store 1 ,mem_state 
+0x21c8 002311 rtn 
+:      002315 role_switch_check:
+0x21c9 002316 bpatch patch04_4 ,mem_patch04 
+0x21ca 002317 disable user 
+0x21cb 002318 fetch 2 ,mem_tsniff 
+0x21cc 002319 arg 0xffff ,temp 
+0x21cd 002320 isub temp ,null 
+0x21ce 002321 nrtn zero 
+0x21cf 002322 fetch 4 ,mem_sniff_anchor 
+0x21d0 002323 branch role_switch_clkn ,clknt 
+0x21d1 002324 isub clke_bt ,pdata 
+0x21d2 002325 branch role_switch_clke 
+:      002326 role_switch_clkn:
+0x21d3 002327 isub clkn_bt ,pdata 
+:      002328 role_switch_clke:
+0x21d4 002329 sub pdata ,4 ,null 
+0x21d5 002330 nrtn positive 
+0x21d6 002331 force 0 ,pdata 
+0x21d7 002332 store 2 ,mem_tsniff 
+0x21d8 002333 branch enable_user 
+:      002337 role_switch_prepare:
+0x21d9 002338 copy pdata ,temp 
+0x21da 002339 bpatch patch04_5 ,mem_patch04 
+0x21db 002340 storet 4 ,mem_sniff_anchor 
+:      002341 role_switch_prepare0:
+0x21dc 002342 jam switch_flag_accept ,mem_switch_flag 
+0x21dd 002343 setarg 0xffff 
+0x21de 002344 store 2 ,mem_tsniff 
+0x21df 002345 jam 1 ,mem_sniff_attempt 
+0x21e0 002346 rtn 
+:      002349 role_switch_master:
+0x21e1 002350 bpatch patch04_6 ,mem_patch04 
+0x21e2 002351 call role_switch_check 
+0x21e3 002352 nrtn user 
+0x21e4 002353 disable user 
+0x21e5 002354 jam param_newconnto ,mem_newconnto_counter 
+0x21e6 002355 set0 mark_fhs_already_good ,mark 
+:      002356 roles_waitfhs_loop:
+0x21e7 002357 call rf_setup_time_master_slot 
+0x21e8 002358 call master_recv_packet 
+0x21e9 002359 bmark1 mark_fhs_already_good ,roles_replyto_fhs 
+0x21ea 002360 call new_conn_timeout 
+0x21eb 002361 nbranch roles_waitfhs_loop ,blank 
+:      002362 role_switch_fail_master:
+0x21ec 002363 bpatch patch04_7 ,mem_patch04 
+0x21ed 002364 disable user 
+0x21ee 002365 deposit clkn_bt 
+0x21ef 002366 store 4 ,mem_next_btclk 
+0x21f0 002367 enable clknt 
+0x21f1 002368 enable master 
+0x21f2 002369 jam bt_evt_switch_fail_master ,mem_fifo_temp 
+0x21f3 002370 branch ui_ipc_send_event 
+:      002372 roles_replyto_fhs:
+0x21f4 002373 bpatch patch05_0 ,mem_patch05 
+0x21f5 002374 call rf_setup_time_slave_slot 
+0x21f6 002375 arg type_id ,type 
+0x21f7 002376 call master_send_packet 
+0x21f8 002377 disable clknt 
+0x21f9 002378 disable master 
+0x21fa 002379 call apply_switch_clke 
+0x21fb 002380 call prepare_newconn 
+:      002381 roles_newconns_loop:
+0x21fc 002382 bpatch patch05_1 ,mem_patch05 
+0x21fd 002383 call slave_newconn_once 
+0x21fe 002384 branch roles_newconns_responded ,match 
+0x21ff 002385 call new_conn_timeout 
+0x2200 002386 nbranch roles_newconns_loop ,blank 
+0x2201 002387 branch role_switch_fail_master 
+:      002388 roles_newconns_responded:
+0x2202 002389 fetch 1 ,mem_mode 
+0x2203 002390 set0 mode_master ,pdata 
+0x2204 002391 store 1 ,mem_mode 
+0x2205 002392 call supervision_flush 
+0x2206 002393 call calc_clke_offset 
+0x2207 002394 enable user 
+0x2208 002395 jam bt_evt_switch_success_master ,mem_fifo_temp 
+0x2209 002396 branch ui_ipc_send_event 
+:      002401 context_load:
+0x220a 002402 bpatch patch05_2 ,mem_patch05 
+0x220b 002403 set1 mark_context ,mark 
+0x220c 002404 deposit rega 
+0x220d 002405 store 2 ,mem_context_ptr 
+0x220e 002406 force context_size ,loopcnt 
+0x220f 002407 arg mem_le_state ,contw 
+0x2210 002408 add rega ,coffset_mode ,contr 
+0x2211 002409 ifetch 1 ,contr 
+0x2212 002410 copy rega ,contr 
+0x2213 002411 bbit1 mode_le ,memcpy 
+0x2214 002412 arg mem_state ,contw 
+0x2215 002413 call memcpy 
+0x2216 002414 disable attempt 
+0x2217 002415 fetch 1 ,mem_amaddr 
+0x2218 002416 iforce am_addr 
+0x2219 002417 jam 1 ,mem_current_sniff_attempt 
+0x221a 002418 branch context_load_master ,master 
+0x221b 002419 jam 1 ,mem_current_sniff_attempt 
+:      002420 context_load_master:
+0x221c 002421 fetch 1 ,mem_state 
+0x221d 002422 rtnbit0 state_insniff 
+0x221e 002423 fetch 1 ,mem_sniff_attempt 
+0x221f 002424 store 1 ,mem_current_sniff_attempt 
+0x2220 002425 fetch 1 ,mem_sniff_timeout 
+0x2221 002426 store 1 ,mem_current_sniff_timeout 
+0x2222 002427 rtn 
+:      002429 context_save:
+0x2223 002430 bpatch patch05_3 ,mem_patch05 
+0x2224 002431 fetch 2 ,mem_context_ptr 
+0x2225 002432 iforce contw 
+0x2226 002433 force context_size ,loopcnt 
+0x2227 002434 arg mem_le_state ,contr 
+0x2228 002435 branch memcpy ,le 
+0x2229 002436 arg mem_state ,contr 
+0x222a 002437 branch memcpy 
+:      002441 context_get_next:
+0x222b 002442 arg context_num ,loopcnt 
+0x222c 002443 fetcht 1 ,mem_current_context 
+:      002444 context_get_next_loop:
+0x222d 002445 increase 1 ,temp 
+0x222e 002446 compare context_num ,temp ,0xff 
+0x222f 002447 nbranch context_get_next_cont ,true 
+0x2230 002448 arg 0 ,temp 
+:      002449 context_get_next_cont:
+0x2231 002450 storet 1 ,mem_current_context 
+0x2232 002451 mul32 temp ,context_size ,pdata 
+0x2233 002452 arg mem_context ,rega 
+0x2234 002453 iadd rega ,rega 
+0x2235 002454 ifetch 1 ,rega 
+0x2236 002455 bbit1 state_insniff ,context_get_next_sniff 
+0x2237 002456 rtnbit1 state_inconn 
+0x2238 002457 rtnbit1 state_inpage 
+:      002458 context_get_next_sniff:
+0x2239 002459 loop context_get_next_loop 
+0x223a 002460 rtn 
+:      002462 context_new:
+0x223b 002463 bpatch patch05_4 ,mem_patch05 
+0x223c 002464 arg context_search_empty ,regc 
+0x223d 002465 call context_search 
+0x223e 002466 nrtn zero 
+0x223f 002467 deposit rega 
+0x2240 002468 store 2 ,mem_context_ptr 
+0x2241 002469 force 0 ,null 
+0x2242 002470 rtn 
+:      002474 context_check_all_wack:
+0x2243 002475 call check_esco_amaddr 
+0x2244 002476 branch context_check_esco_wack ,true 
+0x2245 002477 fetch 2 ,mem_context_ptr 
+0x2246 002478 add pdata ,coffset_arq ,contw 
+0x2247 002479 fetch 1 ,mem_arq 
+0x2248 002480 istore 1 ,contw 
+0x2249 002481 arg context_check_a_wack ,regc 
+0x224a 002482 branch context_search 
+:      002484 context_check_esco_wack:
+0x224b 002485 fetch 1 ,mem_arq 
+0x224c 002486 isolate1 wack ,pdata 
+0x224d 002487 branch context_esco_wack ,true 
+0x224e 002488 force 1 ,null 
+0x224f 002489 rtn 
+:      002490 context_esco_wack:
+0x2250 002491 force 0 ,null 
+0x2251 002492 rtn 
+:      002495 context_check_idle:
+0x2252 002496 arg context_check_inconn ,regc 
+0x2253 002497 branch context_search 
+:      002499 context_traverse_linkkey:
+0x2254 002500 fetcht 2 ,mem_context_ptr 
+0x2255 002501 arg context_traverse_clearkey ,regc 
+0x2256 002502 branch context_search 
+:      002506 context_search_conn_handle:
+0x2257 002507 fetcht 1 ,mem_hci_conn_handle 
+:      002508 context_search_conn_handle2:
+0x2258 002509 arg context_search_handle ,regc 
+0x2259 002510 branch context_search 
+:      002512 context_search_plap:
+0x225a 002513 bpatch patch05_5 ,mem_patch05 
+0x225b 002514 fetcht 6 ,mem_hci_plap 
+:      002515 context_search_plap2:
+0x225c 002516 arg context_search_lap ,regc 
+0x225d 002517 branch context_search 
+:      002519 context_search_insniff:
+0x225e 002520 arg context_search_sniff ,regc 
+0x225f 002521 branch context_search 
+:      002523 context_search_sniff_window:
+0x2260 002524 arg context_search_window ,regc 
+:      002525 context_search:
+0x2261 002526 bpatch patch05_6 ,mem_patch05 
+0x2262 002527 arg mem_context ,rega 
+0x2263 002528 arg context_num ,loopcnt 
+:      002529 context_search_loop:
+0x2264 002530 ifetch 1 ,rega 
+0x2265 002531 copy regc ,pc 
+:      002532 context_search_next:
+0x2266 002533 increase context_size ,rega 
+0x2267 002534 loop context_search_loop 
+0x2268 002535 force 1 ,null 
+0x2269 002536 rtn 
+:      002538 context_search_empty:
+0x226a 002539 bbit1 state_inconn ,context_search_next 
+0x226b 002540 bbit1 state_inpage ,context_search_next 
+0x226c 002541 force 0 ,null 
+0x226d 002542 rtn 
+:      002544 context_search_lap:
+0x226e 002545 bbit1 state_inpage ,context_search_lap_cont 
+0x226f 002546 bbit0 state_inconn ,context_search_next 
+:      002547 context_search_lap_cont:
+0x2270 002548 add rega ,coffset_plap ,contr 
+0x2271 002549 ifetch 6 ,contr 
+0x2272 002550 isub temp ,null 
+0x2273 002551 rtn zero 
+0x2274 002552 branch context_search_next 
+:      002554 context_search_handle:
+0x2275 002555 bbit0 state_inconn ,context_search_next 
+0x2276 002556 add rega ,coffset_conn_handle ,contr 
+0x2277 002557 ifetch 1 ,contr 
+0x2278 002558 isub temp ,null 
+0x2279 002559 rtn zero 
+0x227a 002560 branch context_search_next 
+:      002562 context_search_sniff:
+0x227b 002563 bbit0 state_insniff ,context_search_next 
+:      002564 context_search_sniff_loop:
+0x227c 002565 call context_get_anchor 
+0x227d 002566 call sign_pdata_temp 
+0x227e 002567 isub temp ,pdata 
+0x227f 002568 increase 1 ,pdata 
+0x2280 002569 branch context_search_sniff_miss ,positive 
+0x2281 002570 copy contr ,regb 
+0x2282 002571 store 9 ,mem_temp 
+0x2283 002572 fetch 1 ,mem_le_sc_calc 
+0x2284 002573 nbranch context_search_sniff_sc ,blank 
+0x2285 002574 fetch 9 ,mem_temp 
+0x2286 002575 copy regb ,contr 
+0x2287 002576 increase 5 ,pdata 
+0x2288 002577 branch context_search_meet1 
+:      002578 context_search_sniff_sc:
+0x2289 002579 fetch 9 ,mem_temp 
+0x228a 002580 copy regb ,contr 
+0x228b 002581 increase 20 ,pdata 
+:      002582 context_search_meet1:
+0x228c 002583 nbranch context_search_next ,positive 
+:      002584 context_search_meet:
+0x228d 002585 copy temp ,bt_clk 
+0x228e 002586 call context_next_anchor 
+0x228f 002587 force 0 ,null 
+0x2290 002588 rtn 
+:      002591 context_search_sniff_miss:
+0x2291 002592 iforce regb 
+0x2292 002593 add rega ,coffset_tsniff ,contr 
+0x2293 002594 ifetch 2 ,contr 
+0x2294 002595 branch context_search_meet ,blank 
+0x2295 002596 call context_next_anchor 
+0x2296 002597 branch context_search_sniff_loop 
+:      002599 sign_pdata_temp:
+0x2297 002600 rshift16 pdata ,timeup 
+0x2298 002601 rshift8 timeup ,timeup 
+0x2299 002602 branch sign_pdata_temp_p0 ,zero 
+0x229a 002603 compare 0xf ,timeup ,0xf 
+0x229b 002604 nrtn true 
+0x229c 002605 rshift16 temp ,timeup 
+0x229d 002606 rshift8 timeup ,timeup 
+0x229e 002607 nrtn zero 
+0x229f 002608 set1 28 ,temp 
+0x22a0 002609 rtn 
+:      002610 sign_pdata_temp_p0:
+0x22a1 002611 rshift16 temp ,timeup 
+0x22a2 002612 rshift8 timeup ,timeup 
+0x22a3 002613 compare 0xf ,timeup ,0xf 
+0x22a4 002614 nrtn true 
+0x22a5 002615 set1 28 ,pdata 
+0x22a6 002616 rtn 
+:      002618 context_check_inconn:
+0x22a7 002619 bbit0 state_inconn ,context_search_next 
+0x22a8 002620 force 0 ,null 
+0x22a9 002621 rtn 
+:      002623 context_check_a_wack:
+0x22aa 002624 bbit0 state_inconn ,context_search_next 
+0x22ab 002625 add rega ,coffset_mode ,contr 
+0x22ac 002626 ifetch 1 ,contr 
+0x22ad 002627 bbit1 mode_le ,context_search_next 
+0x22ae 002628 add rega ,coffset_arq ,contr 
+0x22af 002629 ifetch 1 ,contr 
+0x22b0 002630 bbit0 wack ,context_search_next 
+0x22b1 002631 force 0 ,null 
+0x22b2 002632 rtn 
+:      002634 context_get_anchor:
+0x22b3 002635 add rega ,coffset_mode ,contr 
+0x22b4 002636 ifetcht 1 ,contr 
+0x22b5 002637 deposit clkn_bt 
+0x22b6 002638 isolate1 mode_master ,temp 
+0x22b7 002639 add rega ,coffset_sniff_anchor ,contr 
+0x22b8 002640 ifetcht 4 ,contr 
+0x22b9 002641 rtn true 
+0x22ba 002642 add rega ,coffset_clk_offset ,contr 
+0x22bb 002643 ifetch 6 ,contr 
+0x22bc 002644 call calc_clke2 
+0x22bd 002645 deposit clke_bt 
+0x22be 002646 rtn 
+:      002648 context_next_anchor:
+0x22bf 002649 add rega ,coffset_tsniff ,contr 
+0x22c0 002650 add rega ,coffset_sniff_anchor ,contw 
+0x22c1 002651 ifetch 2 ,contr 
+0x22c2 002652 iadd temp ,timeup 
+0x22c3 002653 deposit timeup 
+0x22c4 002654 istore 4 ,contw 
+0x22c5 002655 branch le_context_nexthop 
+:      002658 context_search_window:
+0x22c6 002659 bbit0 state_insniff ,context_search_next 
+0x22c7 002660 call context_get_anchor 
+0x22c8 002661 iadd stop_watch ,pdata 
+0x22c9 002662 iadd stop_watch ,pdata 
+0x22ca 002663 iadd queue ,pdata 
+0x22cb 002664 isub temp ,null 
+0x22cc 002665 nbranch context_search_next ,positive 
+0x22cd 002666 force 0 ,null 
+0x22ce 002667 rtn 
+:      002669 context_traverse_clearkey:
+0x22cf 002670 bbit0 state_inconn ,context_search_next 
+0x22d0 002671 deposit temp 
+0x22d1 002672 isub rega ,null 
+0x22d2 002673 branch context_search_next ,null 
+0x22d3 002674 add rega ,coffset_mode ,contr 
+0x22d4 002675 ifetch 1 ,contr 
+0x22d5 002676 bbit1 mode_le ,context_search_next 
+0x22d6 002677 ifetch 1 ,rega 
+0x22d7 002678 set0 state_linkkey ,pdata 
+0x22d8 002679 istore 1 ,rega 
+0x22d9 002680 branch context_search_next 
+:      002683 master_conn_send_packet:
+0x22da 002684 bpatch patch05_7 ,mem_patch05 
+0x22db 002685 call rf_setup_time_master_slot 
+:      002686 master_send_packet:
+0x22dc 002687 add clkn_bt ,1 ,bt_clk 
+0x22dd 002688 call fetch_self_bt_adr 
+0x22de 002689 force 0x03 ,freq_mode 
+0x22df 002690 call tx_radio_freq 
+0x22e0 002691 call start_transmitter 
+0x22e1 002692 call start_tx_native 
+0x22e2 002693 call send_access_word 
+0x22e3 002694 branch transmit_packet 
+:      002696 master_conn_recv_packet:
+0x22e4 002697 bpatch patch06_0 ,mem_patch06 
+0x22e5 002698 call rf_setup_time_slave_slot 
+:      002699 master_recv_packet:
+0x22e6 002700 add clkn_bt ,1 ,bt_clk 
+0x22e7 002701 call fetch_self_bt_adr 
+0x22e8 002702 force 0x03 ,freq_mode 
+0x22e9 002703 call rx_radio_freq 
+0x22ea 002704 call init_rx_packet_flags 
+0x22eb 002705 call prep_crypt 
+0x22ec 002706 call start_rx_native 
+0x22ed 002707 call start_receiver 
+:      002708 master_rx_conn_finish_packet:
+0x22ee 002709 call wait_access_clkn_rt 
+0x22ef 002710 nrtn sync 
+0x22f0 002711 call save_rssi 
+0x22f1 002712 branch receive_packet 
+:      002716 master_newconn_once:
+0x22f2 002717 bpatch patch06_1 ,mem_patch06 
+0x22f3 002718 fetch 1 ,mem_fhs_am_addr 
+0x22f4 002719 iforce am_addr 
+0x22f5 002720 force type_poll ,type 
+0x22f6 002721 call master_conn_send_packet 
+0x22f7 002722 branch master_conn_recv_packet 
+:      002733 inquiry_scan_dispatch:
+0x22f8 002734 fetch 1 ,mem_scan_mode 
+0x22f9 002735 rtnbit0 inq_scan_mode 
+0x22fa 002736 force iscan_interval_timer ,queue 
+0x22fb 002737 call timer_check 
+0x22fc 002738 nrtn blank 
+0x22fd 002739 fetcht 2 ,mem_iscan_window 
+0x22fe 002740 force 4 ,queue 
+0x22ff 002741 call sniff_check_window 
+0x2300 002742 rtn user 
+0x2301 002743 call inquiry_scan_start 
+0x2302 002744 force iscan_interval_timer ,queue 
+0x2303 002745 fetch 2 ,mem_iscan_interval 
+0x2304 002746 nbranch timer_init ,sync 
+0x2305 002747 random pdata 
+0x2306 002748 iand mask3ff ,pdata 
+0x2307 002749 branch timer_init 
+:      002752 inquiry_scan_start:
+0x2308 002753 bpatch patch06_2 ,mem_patch06 
+0x2309 002754 jam 0 ,mem_fhs_am_addr 
+0x230a 002755 disable clknt 
+0x230b 002756 disable attempt 
+0x230c 002757 call afh_clear 
+0x230d 002758 and clkn_bt ,0x1fc ,bt_clk 
+0x230e 002759 force 0x01 ,freq_mode 
+0x230f 002760 call fetch_giac 
+0x2310 002761 call rx_radio_freq 
+0x2311 002762 setflip mark_inquiry_state ,mark 
+0x2312 002763 fetch 1 ,mem_inquiryscan_waitcnt 
+0x2313 002764 increase 1 ,pdata 
+0x2314 002765 store 1 ,mem_inquiryscan_waitcnt 
+0x2315 002766 call fetch_diac 
+0x2316 002767 call start_receiver 
+0x2317 002768 call wait_access_forever 
+0x2318 002769 nrtn sync 
+0x2319 002770 bpatch patch06_3 ,mem_patch06 
+0x231a 002771 force 0 ,stop_watch 
+0x231b 002772 call shutdown_radio 
+0x231c 002773 fetch 1 ,mem_inquiryscan_rcvcnt 
+0x231d 002774 increase 1 ,pdata 
+0x231e 002775 store 1 ,mem_inquiryscan_rcvcnt 
+0x231f 002776 call fetch_giac 
+0x2320 002777 call rf_setup_time_slave_slot 
+0x2321 002778 or_into 0x002 ,bt_clk 
+0x2322 002779 force 0x01 ,freq_mode 
+0x2323 002780 call tx_radio_freq 
+0x2324 002781 call fetch_diac 
+0x2325 002782 call start_transmitter 
+0x2326 002783 call start_tx_external 
+0x2327 002784 deposit clkn_bt 
+0x2328 002785 store 4 ,mem_clkn_bt 
+0x2329 002786 call send_access_word 
+0x232a 002787 force type_fhs ,type 
+0x232b 002788 force 0 ,am_addr 
+0x232c 002789 call scan_mode_whiten 
+0x232d 002790 call transmit_packet_whitened 
+0x232e 002791 call send_eir 
+0x232f 002792 and_into 0x1fd ,bt_clk 
+0x2330 002793 increase 1 ,n_tx_slot 
+0x2331 002794 rtn 
+:      002796 send_eir:
+0x2332 002797 bpatch patch06_4 ,mem_patch06 
+0x2333 002798 fetch 1 ,mem_eir_enable 
+0x2334 002799 rtn blank 
+0x2335 002800 arg mem_eir ,contw 
+0x2336 002801 fetch 1 ,mem_local_name_length 
+0x2337 002802 copy pdata ,loopcnt 
+0x2338 002803 increase 1 ,pdata 
+0x2339 002804 istore 1 ,contw 
+0x233a 002805 copy contw ,temp 
+0x233b 002806 increase 1 ,pdata 
+0x233c 002807 store 2 ,mem_tx_len 
+0x233d 002808 copy temp ,contw 
+0x233e 002809 setarg 0x09 
+0x233f 002810 istore 1 ,contw 
+0x2340 002811 arg mem_local_name ,contr 
+0x2341 002812 call memcpy 
+0x2342 002814 arg mem_all_uuid_128bits ,regc 
+0x2343 002815 arg 4 ,loopcnt 
+0x2344 002816 call get_all_uuid 
+0x2345 002817 arg mem_all_uuid_16bits ,regc 
+0x2346 002818 arg 1 ,loopcnt 
+0x2347 002819 call get_all_uuid 
+0x2348 002821 force type_dm3 ,type 
+0x2349 002822 jam 2 ,mem_tx_lch 
+0x234a 002823 setarg mem_eir 
+0x234b 002824 store 2 ,mem_txptr 
+0x234c 002825 call rf_setup_time_slave_slot 
+0x234d 002826 call tx_radio_freq 
+0x234e 002827 call start_transmitter 
+0x234f 002828 call start_tx_external 
+0x2350 002829 call send_access_word 
+0x2351 002830 call scan_mode_whiten 
+0x2352 002831 call transmit_packet_whitened 
+0x2353 002832 rtn 
+:      002835 get_all_uuid:
+0x2354 002836 copy contw ,temp 
+0x2355 002837 copy regc ,contr 
+0x2356 002838 ifetch 1 ,contr 
+0x2357 002839 rtn blank 
+:      002840 lshift_loop:
+0x2358 002841 lshift pdata ,pdata 
+0x2359 002842 loop lshift_loop 
+0x235a 002843 copy pdata ,rega 
+0x235b 002844 increase 2 ,pdata 
+0x235c 002845 copy pdata ,queue 
+0x235d 002846 fetch 2 ,mem_tx_len 
+0x235e 002847 iadd queue ,pdata 
+0x235f 002848 store 2 ,mem_tx_len 
+0x2360 002849 copy temp ,contw 
+0x2361 002850 copy rega ,pdata 
+0x2362 002851 increase 1 ,pdata 
+0x2363 002852 istore 1 ,contw 
+0x2364 002853 copy regc ,contr 
+0x2365 002854 ifetch 1 ,contr 
+0x2366 002855 ifetch 1 ,contr 
+0x2367 002856 istore 1 ,contw 
+0x2368 002857 copy rega ,loopcnt 
+0x2369 002858 branch memcpy 
+:      002864 page_scan_dispatch:
+0x236a 002865 fetch 1 ,mem_scan_mode 
+0x236b 002866 rtnbit0 page_scan_mode 
+0x236c 002867 force pscan_interval_timer ,queue 
+0x236d 002868 call timer_check 
+0x236e 002869 nrtn blank 
+0x236f 002870 fetcht 2 ,mem_pscan_window 
+0x2370 002871 force 40 ,queue 
+0x2371 002872 call sniff_check_window 
+0x2372 002873 rtn user 
+0x2373 002874 force 0 ,am_addr 
+0x2374 002875 jam param_pagerespto ,mem_fhs_wait_counter 
+0x2375 002876 set0 mark_fhs_already_good ,mark 
+0x2376 002877 call page_scan_start 
+0x2377 002878 force pscan_interval_timer ,queue 
+0x2378 002879 fetch 2 ,mem_pscan_interval 
+0x2379 002880 branch timer_init 
+:      002883 page_scan_start:
+0x237a 002884 bpatch patch06_5 ,mem_patch06 
+0x237b 002885 disable clknt 
+0x237c 002886 call afh_clear 
+0x237d 002887 fetch 1 ,mem_pagescan_waitcnt 
+0x237e 002888 increase 1 ,pdata 
+0x237f 002889 store 1 ,mem_pagescan_waitcnt 
+0x2380 002890 force 0 ,n_tx_slot 
+0x2381 002891 call fetch_self_bt_adr 
+0x2382 002892 add clkn_bt ,1 ,bt_clk 
+0x2383 002893 force 0x02 ,freq_mode 
+0x2384 002894 bpatch patch06_6 ,mem_patch06 
+0x2385 002895 call rx_radio_freq 
+0x2386 002896 call start_receiver 
+0x2387 002897 call wait_access_forever 
+0x2388 002898 nrtn sync 
+0x2389 002899 call shutdown_radio 
+0x238a 002900 fetch 1 ,mem_pagescan_rcvcnt 
+0x238b 002901 increase 1 ,pdata 
+0x238c 002902 store 1 ,mem_pagescan_rcvcnt 
+0x238d 002903 force 0 ,stop_watch 
+0x238e 002904 call rf_setup_time_slave_slot 
+0x238f 002905 or_into 0x002 ,bt_clk 
+0x2390 002906 force 0x01 ,freq_mode 
+0x2391 002907 call tx_radio_freq 
+0x2392 002908 call start_transmitter 
+0x2393 002909 call start_tx_external 
+0x2394 002910 call send_access_word 
+0x2395 002911 call end_of_packet 
+0x2396 002912 force 0 ,am_addr 
+0x2397 002913 arg param_rf_setup ,timeup 
+0x2398 002914 until clke_rt ,meet 
+0x2399 002915 or_into 0x03 ,clke_bt 
+0x239a 002916 and_into 0x1fd ,bt_clk 
+:      002917 page_scan_wait_fhs_restart:
+0x239b 002918 bpatch patch06_7 ,mem_patch06 
+0x239c 002919 increase 1 ,n_tx_slot 
+0x239d 002920 call rx_radio_freq 
+0x239e 002921 call start_receiver 
+0x239f 002922 call wait_access_mhalfbnd 
+0x23a0 002923 nbranch page_scan_wait_fhs_again ,sync 
+0x23a1 002924 call scan_mode_whiten 
+0x23a2 002925 call receive_packet_whitened 
+0x23a3 002926 bmark1 mark_fhs_already_good ,page_scan_reply_to_fhs 
+:      002927 page_scan_wait_fhs_again:
+0x23a4 002928 bpatch patch07_0 ,mem_patch07 
+0x23a5 002929 fetch 1 ,mem_fhs_wait_counter 
+0x23a6 002930 rtn blank 
+0x23a7 002931 increase -1 ,pdata 
+0x23a8 002932 store 1 ,mem_fhs_wait_counter 
+0x23a9 002933 call rf_setup_time_master_slot 
+0x23aa 002934 branch page_scan_wait_fhs_restart 
+:      002937 page_scan_reply_to_fhs:
+0x23ab 002938 bpatch patch07_1 ,mem_patch07 
+0x23ac 002939 set0 1 ,clke_bt 
+0x23ad 002940 set1 0 ,clke_bt 
+0x23ae 002941 fetch 1 ,mem_pagescan_rcvfhscnt 
+0x23af 002942 increase 1 ,pdata 
+0x23b0 002943 store 1 ,mem_pagescan_rcvfhscnt 
+0x23b1 002944 call rf_setup_time_slave_slot 
+0x23b2 002945 or_into 0x02 ,bt_clk 
+0x23b3 002946 call tx_radio_freq 
+0x23b4 002947 call start_transmitter 
+0x23b5 002948 call start_tx_external 
+0x23b6 002949 call send_access_word 
+0x23b7 002950 call end_of_packet 
+:      002951 slave_apply_clke_bt:
+0x23b8 002952 compare 0x03 ,clke_bt ,0x03 
+0x23b9 002953 branch slave_apply_clke_bt_now ,true 
+0x23ba 002954 until null ,mhalfbnd 
+0x23bb 002955 branch slave_apply_clke_bt 
+:      002956 slave_apply_clke_bt_now:
+0x23bc 002957 fetch 4 ,mem_clke_bt 
+0x23bd 002958 or_into 0x03 ,pdata 
+0x23be 002959 icopy clke_bt 
+:      002961 start_slave_connection:
+0x23bf 002962 bpatch patch07_2 ,mem_patch07 
+0x23c0 002963 fetch 6 ,extm_lap 
+0x23c1 002964 store 6 ,mem_plap 
+0x23c2 002965 call prepare_newconn 
+:      002966 slave_newconn_loop:
+0x23c3 002967 call slave_newconn_once 
+0x23c4 002968 branch sconn_successful ,match 
+0x23c5 002969 call new_conn_timeout 
+0x23c6 002970 nbranch slave_newconn_loop ,blank 
+0x23c7 002971 rtn 
+:      002974 sconn_successful:
+0x23c8 002975 bpatch patch07_3 ,mem_patch07 
+0x23c9 002976 call newconn_init 
+0x23ca 002977 call context_new 
+0x23cb 002978 nrtn zero 
+0x23cc 002979 jam 0 ,mem_mode 
+0x23cd 002980 call calc_clke_offset 
+0x23ce 002981 branch context_save 
+:      002986 slave_dispatch:
+0x23cf 002987 bpatch patch07_4 ,mem_patch07 
+0x23d0 002988 call calc_clke 
+0x23d1 002989 call role_switch_slave 
+0x23d2 002990 rtn user 
+:      002991 slave_loop:
+0x23d3 002992 bpatch patch07_5 ,mem_patch07 
+0x23d4 002993 call check_bt_disabled 
+0x23d5 002994 call scheduler_process 
+0x23d6 002995 call slave_conn_recv_packet 
+0x23d7 002996 nbranch slave_notmatch ,match 
+0x23d8 002997 call supervision_flush 
+0x23d9 002998 call scheduler_tx_l2cap_pkt 
+0x23da 002999 call prepare_tx 
+0x23db 003000 call slave_conn_send_packet 
+0x23dc 003001 call parse_l2cap 
+0x23dd 003002 call parse_lmp 
+0x23de 003003 fetch 1 ,mem_slave_rcvcnt 
+0x23df 003004 increase 1 ,pdata 
+0x23e0 003005 store 1 ,mem_slave_rcvcnt 
+0x23e1 003006 call calc_clke_offset 
+:      003007 slave_notmatch:
+0x23e2 003008 bpatch patch07_6 ,mem_patch07 
+0x23e3 003009 call lpm_set_mult 
+0x23e4 003010 call supervision_update 
+0x23e5 003011 branch slave_disconnect ,positive 
+0x23e6 003012 call check_disconnect_timeout 
+0x23e7 003013 nbranch slave_disconnect ,user 
+0x23e8 003014 call check_attempt 
+0x23e9 003015 nbranch slave_loop ,blank 
+0x23ea 003016 rtn 
+:      003018 slave_disconnect:
+0x23eb 003019 bpatch patch07_7 ,mem_patch07 
+0x23ec 003020 jam 0 ,mem_tester_emulate 
+0x23ed 003021 jam 0 ,mem_debug_config 
+0x23ee 003022 call quit_connection 
+0x23ef 003023 set0 mark_testmode ,mark 
+0x23f0 003024 call test_enable_white 
+0x23f1 003025 fetch 1 ,mem_state 
+0x23f2 003026 rtn 
+:      003029 role_switch_slave:
+0x23f3 003030 bpatch patch08_0 ,mem_patch08 
+0x23f4 003031 call role_switch_check 
+0x23f5 003032 nrtn user 
+0x23f6 003033 copy am_addr ,temp 
+0x23f7 003034 call get_free_amaddr 
+0x23f8 003035 store 1 ,mem_fhs_am_addr 
+0x23f9 003036 copy temp ,am_addr 
+0x23fa 003037 jam param_newconnto ,mem_newconnto_counter 
+:      003038 roles_sendfhs_loop:
+0x23fb 003039 bpatch patch08_1 ,mem_patch08 
+0x23fc 003040 call rf_setup_time_master_slot 
+0x23fd 003041 force type_fhs ,type 
+0x23fe 003042 call slave_send_access 
+0x23ff 003043 deposit clkn_bt 
+0x2400 003044 store 4 ,mem_clkn_bt 
+0x2401 003045 call transmit_packet 
+0x2402 003046 call rf_setup_time_slave_slot 
+0x2403 003047 enable user3 
+0x2404 003048 call slave_receive_access 
+0x2405 003049 branch roles_got_fhs_reply ,sync 
+0x2406 003050 call shutdown_radio 
+0x2407 003051 call new_conn_timeout 
+0x2408 003052 nbranch roles_sendfhs_loop ,blank 
+0x2409 003053 rtnmark0 mark_accept_switch 
+0x240a 003054 jam lmp_slot_offset ,mem_lmo_opcode2 
+0x240b 003055 set1 mark_switch_initiated ,mark 
+0x240c 003056 rtn 
+:      003057 roles_got_fhs_reply:
+0x240d 003058 enable clknt 
+0x240e 003059 call prepare_newconn 
+0x240f 003060 call afh_clear 
+:      003061 roles_newconn_loop:
+0x2410 003062 bpatch patch08_2 ,mem_patch08 
+0x2411 003063 call master_newconn_once 
+0x2412 003064 branch roles_newconn_responded ,sync 
+0x2413 003065 call new_conn_timeout 
+0x2414 003066 nbranch roles_newconn_loop ,blank 
+0x2415 003067 disable clknt 
+0x2416 003068 deposit clke_bt 
+0x2417 003069 store 4 ,mem_next_btclk 
+0x2418 003070 rtn 
+:      003071 roles_newconn_responded:
+0x2419 003072 enable master 
+0x241a 003073 bmark0 mark_accept_switch ,roles_newconn_nolmp 
+0x241b 003074 set0 mark_accept_switch ,mark 
+0x241c 003075 jam lmp_accepted ,mem_lmo_opcode2 
+0x241d 003076 jam lmp_host_connection_req ,mem_lmi_opcode2 
+0x241e 003077 call tid_set_reply 
+:      003078 roles_newconn_nolmp:
+0x241f 003079 deposit am_addr 
+0x2420 003080 store 1 ,mem_amaddr 
+0x2421 003081 force 0 ,pdata 
+0x2422 003082 store 6 ,mem_clk_offset 
+0x2423 003083 fetch 1 ,mem_mode 
+0x2424 003084 set1 mode_master ,pdata 
+0x2425 003085 store 1 ,mem_mode 
+0x2426 003086 call supervision_flush 
+0x2427 003087 disable master 
+0x2428 003088 enable user 
+0x2429 003089 rtn 
+:      003093 init_rx_packet_flags:
+0x242a 003094 bpatch patch08_3 ,mem_patch08 
+0x242b 003095 disable match 
+0x242c 003096 set0 mark_loopback ,mark 
+0x242d 003097 set0 mark_am_addr_broadcast ,mark 
+0x242e 003098 set0 mark_longpacket ,mark 
+0x242f 003099 set0 mark_old_packet ,mark 
+0x2430 003100 fetch 1 ,mem_arq 
+0x2431 003101 set0 arqnx ,pdata 
+0x2432 003102 set1 flowx ,pdata 
+0x2433 003103 store 1 ,mem_arq 
+0x2434 003104 rtn 
+:      003106 prepare_newconn:
+0x2435 003107 bpatch patch08_4 ,mem_patch08 
+0x2436 003108 jam param_newconnto ,mem_newconnto_counter 
+0x2437 003109 jam param_newconn_arq ,mem_arq 
+0x2438 003110 fetch 2 ,mem_rx_window_init 
+0x2439 003111 store 2 ,mem_rx_window 
+0x243a 003112 deposit clkn_bt 
+0x243b 003113 store 4 ,mem_next_btclk 
+0x243c 003114 rtn clknt 
+0x243d 003115 deposit clke_bt 
+0x243e 003116 store 4 ,mem_next_btclk 
+0x243f 003117 rtn 
+:      003119 newconn_init:
+0x2440 003120 bpatch patch08_5 ,mem_patch08 
+0x2441 003121 call init_lmp_reinit 
+0x2442 003122 call new_conn_handle 
+0x2443 003123 store 1 ,mem_conn_handle 
+0x2444 003124 setarg 0 
+0x2445 003125 store 2 ,mem_l2cap_rxbuff1_len 
+0x2446 003126 setarg param_supervision_to 
+0x2447 003127 store 2 ,mem_supervision_to 
+0x2448 003128 fetch 1 ,mem_state 
+0x2449 003129 set1 state_inconn ,pdata 
+0x244a 003130 store 1 ,mem_state 
+0x244b 003131 jam 0 ,mem_op 
+0x244c 003132 jam 0 ,mem_state_map 
+0x244d 003133 jam 0 ,mem_lpm_current_mult 
+0x244e 003134 branch supervision_flush 
+:      003137 clear_linkkey:
+0x244f 003138 bpatch patch08_6 ,mem_patch08 
+0x2450 003139 force 0 ,pdata 
+0x2451 003140 store 8 ,mem_link_key 
+0x2452 003141 istore 8 ,contw 
+0x2453 003142 call clear_linkstate 
+0x2454 003143 branch context_traverse_linkkey 
+:      003145 new_conn_timeout:
+0x2455 003146 fetch 1 ,mem_newconnto_counter 
+0x2456 003147 increase -1 ,pdata 
+0x2457 003148 store 1 ,mem_newconnto_counter 
+0x2458 003149 rtn 
+:      003151 new_conn_handle:
+0x2459 003152 fetch 1 ,mem_handle_num 
+0x245a 003153 increase 1 ,pdata 
+0x245b 003154 store 1 ,mem_handle_num 
+0x245c 003155 rtn 
+:      003158 quit_connection:
+0x245d 003159 bpatch patch08_7 ,mem_patch08 
+0x245e 003160 fetch 1 ,mem_hci_cmd 
+0x245f 003161 beq hci_cmd_remote_name_req ,quit_connection_name 
+0x2460 003162 fetch 1 ,mem_lmp_to_send 
+0x2461 003163 bne lmp_name_req ,quit_connection_cont 
+:      003164 quit_connection_name:
+0x2462 003165 call cmd_check_plap 
+0x2463 003166 nbranch quit_connection_cont ,zero 
+0x2464 003167 call master_name_error 
+0x2465 003168 jam 0 ,mem_hci_cmd 
+:      003169 quit_connection_cont:
+0x2466 003170 bpatch patch09_0 ,mem_patch09 
+0x2467 003171 call app_disconn_reason_collect_bt 
+0x2468 003172 call sniff_exit 
+0x2469 003173 jam bt_evt_bb_disconnected ,mem_fifo_temp 
+0x246a 003174 call ui_ipc_send_event 
+0x246b 003175 call init_lmp_work 
+0x246c 003176 call l2cap_init_work 
+0x246d 003177 call sp_initialize 
+0x246e 003178 fetch 1 ,mem_state 
+0x246f 003179 set0 state_inconn 
+0x2470 003180 store 1 ,mem_state 
+0x2471 003181 jam 0 ,memui_reconnect_mode 
+0x2472 003183 fetch 1 ,mem_state_map 
+0x2473 003184 compare 0x0 ,pdata ,0xc0 
+0x2474 003185 branch quit_connection_not_clear_mark ,true 
+0x2475 003186 set0 mark_rxbuf_inuse ,mark 
+:      003187 quit_connection_not_clear_mark:
+0x2476 003188 fetch 1 ,mem_arq 
+0x2477 003189 bbit0 wack ,quit_connection_not_clear_tx 
+:      003190 quit_connection_not_clear_tx:
+0x2478 003191 fetch 1 ,mem_op 
+0x2479 003192 rtnbit0 op_txl2cap 
+0x247a 003193 set0 mark_tx_l2cap ,mark 
+0x247b 003194 rtn 
+:      003196 slave_newconn_once:
+0x247c 003197 bpatch patch09_1 ,mem_patch09 
+0x247d 003198 fetch 1 ,extm_newconn_am_addr 
+0x247e 003199 rtn blank 
+0x247f 003200 icopy am_addr 
+0x2480 003201 call slave_conn_recv_packet 
+0x2481 003202 nrtn match 
+0x2482 003203 force type_null ,type 
+0x2483 003204 call slave_conn_send_packet 
+0x2484 003205 deposit am_addr 
+0x2485 003206 store 1 ,mem_amaddr 
+0x2486 003207 force 0 ,pdata 
+0x2487 003208 store 1 ,extm_newconn_am_addr 
+0x2488 003209 rtn 
+:      003215 prepare_tx:
+0x2489 003216 bpatch patch09_2 ,mem_patch09 
+0x248a 003217 fetch 1 ,mem_state 
+0x248b 003218 bbit0 state_insco ,prepare_tx_not_sco 
+0x248c 003219 force type_hv3 ,type 
+0x248d 003220 bmark0 mark_esco ,prepare_tx_not_esco 
+0x248e 003221 call check_esco_amaddr 
+0x248f 003222 nbranch prepare_tx_not_sco ,true 
+0x2490 003223 branch prepare_tx_not_sco ,attempt 
+0x2491 003224 call set_wait_ack 
+0x2492 003225 setarg 2 
+0x2493 003226 store 2 ,mem_retransmission_cnt 
+0x2494 003227 rtn 
+:      003228 prepare_tx_not_esco:
+0x2495 003229 nrtn attempt 
+:      003230 prepare_tx_not_sco:
+0x2496 003231 bpatch patch09_3 ,mem_patch09 
+0x2497 003232 call context_check_all_wack 
+0x2498 003233 nbranch prepare_tx_no_retransmit ,zero 
+0x2499 003234 fetch 1 ,mem_arq 
+0x249a 003235 bbit0 wack ,prepare_tx_pollnull 
+:      003236 prepare_tx_retransmit:
+0x249b 003237 bmark1 mark_loopback ,prepare_tx_loopback 
+0x249c 003238 fetch 1 ,mem_debug_config 
+0x249d 003239 bbit1 debug_tx_pattern ,prepare_tx_txpat 
+0x249e 003240 fetch 2 ,mem_retransmission_cnt 
+0x249f 003241 increase -1 ,pdata 
+0x24a0 003242 store 2 ,mem_retransmission_cnt 
+0x24a1 003243 branch prepare_tx_nomore_retransmit ,blank 
+0x24a2 003244 fetch 1 ,mem_last_type 
+0x24a3 003245 iforce type 
+0x24a4 003246 rtn 
+:      003248 prepare_tx_nomore_retransmit:
+0x24a5 003249 bpatch patch09_4 ,mem_patch09 
+0x24a6 003250 call clear_got_tx 
+:      003251 prepare_tx_no_retransmit:
+0x24a7 003252 call check_esco_amaddr 
+0x24a8 003253 branch prepare_tx_pollnull ,true 
+0x24a9 003254 call send_lmp 
+0x24aa 003255 branch prepare_tx_sendlmp ,user 
+0x24ab 003256 fetch 1 ,mem_op 
+0x24ac 003257 bbit1 op_txl2cap ,prepare_tx_sendl2cap 
+0x24ad 003258 bmark1 mark_loopback ,prepare_tx_loopback 
+0x24ae 003259 fetch 1 ,mem_debug_config 
+0x24af 003260 bbit1 debug_tx_pattern ,prepare_tx_txpat 
+:      003261 prepare_tx_pollnull:
+0x24b0 003262 force type_poll ,type 
+0x24b1 003263 rtn master 
+0x24b2 003264 force type_null ,type 
+0x24b3 003265 rtn 
+:      003266 prepare_tx_loopback:
+0x24b4 003267 bpatch patch09_5 ,mem_patch09 
+0x24b5 003268 fetch 1 ,mem_rx_type 
+0x24b6 003269 iforce type 
+0x24b7 003270 rtnne 1 
+0x24b8 003271 force type_null ,type 
+0x24b9 003272 rtn 
+:      003273 prepare_tx_txpat:
+0x24ba 003274 fetch 1 ,test_mode_packet_type 
+0x24bb 003275 and pdata ,0xf ,type 
+0x24bc 003276 set1 mark_loopback ,mark 
+0x24bd 003277 rtn 
+:      003278 prepare_tx_sendlmp:
+0x24be 003279 force type_lmp ,type 
+0x24bf 003280 branch set_wait_ack 
+:      003281 prepare_tx_sendl2cap:
+0x24c0 003282 call tx_l2cap_type 
+:      003284 set_wait_ack:
+0x24c1 003285 bpatch patch09_6 ,mem_patch09 
+0x24c2 003286 fetcht 1 ,mem_arq 
+0x24c3 003287 set1 wack ,temp 
+0x24c4 003288 storet 1 ,mem_arq 
+0x24c5 003289 deposit type 
+0x24c6 003290 store 1 ,mem_last_type 
+0x24c7 003291 setarg 0xffff 
+0x24c8 003292 store 2 ,mem_retransmission_cnt 
+0x24c9 003293 rtn 
+:      003295 tx_l2cap_type:
+0x24ca 003296 bpatch patch09_7 ,mem_patch09 
+0x24cb 003297 fetch 1 ,mem_state_map 
+0x24cc 003298 isolate1 smap_edr ,pdata 
+0x24cd 003299 fetch 2 ,mem_tx_len 
+0x24ce 003300 branch tx_l2cap_type_edr ,true 
+0x24cf 003301 force type_dm1 ,type 
+0x24d0 003302 sub pdata ,17 ,null 
+0x24d1 003303 rtn positive 
+0x24d2 003304 force type_dh1 ,type 
+0x24d3 003305 sub pdata ,27 ,null 
+0x24d4 003306 rtn positive 
+0x24d5 003307 force type_dm3 ,type 
+0x24d6 003308 sub pdata ,121 ,null 
+0x24d7 003309 rtn positive 
+0x24d8 003310 force type_dh3 ,type 
+0x24d9 003311 sub pdata ,183 ,null 
+0x24da 003312 rtn positive 
+0x24db 003313 force type_dm5 ,type 
+0x24dc 003314 sub pdata ,224 ,null 
+0x24dd 003315 rtn positive 
+0x24de 003316 force type_dh5 ,type 
+0x24df 003317 rtn 
+:      003318 tx_l2cap_type_edr:
+0x24e0 003319 force type_dm1 ,type 
+0x24e1 003320 sub pdata ,17 ,null 
+0x24e2 003321 rtn positive 
+0x24e3 003322 force type_dh1 ,type 
+0x24e4 003323 sub pdata ,54 ,null 
+0x24e5 003324 rtn positive 
+0x24e6 003325 force type_dm3 ,type 
+0x24e7 003326 arg 367 ,temp 
+0x24e8 003327 isub temp ,null 
+0x24e9 003328 nrtn positive 
+0x24ea 003329 force type_dm5 ,type 
+0x24eb 003330 arg 679 ,temp 
+0x24ec 003331 isub temp ,null 
+0x24ed 003332 nrtn positive 
+0x24ee 003333 force type_dh5 ,type 
+0x24ef 003334 rtn 
+:      003343 slave_receive_master_slot:
+0x24f0 003344 fetch 1 ,mem_state 
+0x24f1 003345 bbit0 state_insniff ,slave_receive_notsniff 
+0x24f2 003346 fetch 2 ,mem_tsniff 
+0x24f3 003347 branch slave_receive_notsniff ,blank 
+0x24f4 003348 nbranch slave_receive_sniff ,attempt 
+:      003349 slave_receive_notsniff:
+0x24f5 003350 call rf_setup_time_master_slot 
+:      003351 slave_receive_access:
+0x24f6 003352 add clke_bt ,1 ,bt_clk 
+:      003353 slave_receive_sniff:
+0x24f7 003354 enable swfine 
+0x24f8 003355 fetch 2 ,mem_rx_window 
+0x24f9 003356 rshift pdata ,pdata 
+0x24fa 003357 arg param_pll_setup ,temp 
+0x24fb 003358 iadd temp ,pdata 
+0x24fc 003359 call ahead_window 
+0x24fd 003360 call fetch_extm_bt_adr 
+0x24fe 003361 force 0x03 ,freq_mode 
+0x24ff 003362 call rx_radio_freq 
+0x2500 003363 call init_rx_packet_flags 
+0x2501 003364 call prep_crypt 
+0x2502 003365 bpatch patch0a_0 ,mem_patch0a 
+0x2503 003366 fetch 2 ,mem_rx_window 
+0x2504 003367 rshift pdata ,pdata 
+0x2505 003368 call ahead_window 
+0x2506 003369 call start_receiver 
+0x2507 003370 enable decode_fec0 
+0x2508 003371 fetch 2 ,mem_rx_window 
+0x2509 003372 arg param_clke_cal ,temp 
+0x250a 003373 iadd temp ,stop_watch 
+0x250b 003374 correlate null ,timeout 
+0x250c 003375 copy clke ,temp 
+0x250d 003376 storet 6 ,mem_sync_clke 
+0x250e 003377 disable decode_fec0 
+0x250f 003378 nrtn sync 
+0x2510 003379 arg param_clke_cal ,clke_rt 
+0x2511 003380 copy bt_clk ,clke_bt 
+0x2512 003381 branch lpm_adjust_clk ,wake 
+0x2513 003382 rtn 
+:      003385 slave_conn_recv_packet:
+0x2514 003386 bpatch patch0a_1 ,mem_patch0a 
+0x2515 003387 call slave_receive_master_slot 
+0x2516 003388 nbranch shutdown_radio ,sync 
+0x2517 003389 call save_rssi 
+0x2518 003390 bmark0 mark_testmode ,receive_packet 
+0x2519 003391 fetch 2 ,mem_tst_pktcnt_sync 
+0x251a 003392 increase 1 ,pdata 
+0x251b 003393 store 2 ,mem_tst_pktcnt_sync 
+:      003394 receive_packet:
+0x251c 003395 rshift bt_clk ,temp 
+0x251d 003396 or temp ,0x40 ,white_init 
+:      003397 receive_packet_whitened:
+0x251e 003398 bpatch patch0a_2 ,mem_patch0a 
+0x251f 003399 enable enable_white 
+0x2520 003400 enable enable_hec 
+0x2521 003401 enable decode_fec1 
+0x2522 003402 parse demod ,bucket ,3 
+0x2523 003403 rshift8 pwindow ,pdata 
+0x2524 003404 store 1 ,mem_temp_am_addr 
+0x2525 003405 parse demod ,bucket ,4 
+0x2526 003406 inject bucket ,7 
+0x2527 003407 copy pwindow ,pdata 
+0x2528 003408 store 1 ,mem_rx_type 
+0x2529 003409 parse demod ,bucket ,3 
+0x252a 003410 rshift8 pwindow ,pdata 
+0x252b 003411 store 1 ,mem_temp_arq 
+0x252c 003412 fetch 1 ,mem_rx_type 
+0x252d 003413 sub pdata ,3 ,null 
+0x252e 003414 branch receive_packet_noedr ,positive 
+0x252f 003415 beq 7 ,receive_packet_noedr 
+0x2530 003416 fetch 1 ,mem_state_map 
+0x2531 003417 isolate1 smap_edr ,pdata 
+0x2532 003418 setflag true ,psk ,radio_ctrl 
+:      003419 receive_packet_noedr:
+0x2533 003420 bpatch patch0a_3 ,mem_patch0a 
+0x2534 003421 parse demod ,bucket ,8 
+0x2535 003422 disable decode_fec1 
+0x2536 003423 disable enable_hec 
+0x2537 003424 branch error_header ,crc_failed 
+0x2538 003425 bmark0 mark_testmode ,receive_packet_amchk 
+0x2539 003426 fetch 2 ,mem_tst_pktcnt_hec 
+0x253a 003427 increase 1 ,pdata 
+0x253b 003428 store 2 ,mem_tst_pktcnt_hec 
+:      003429 receive_packet_amchk:
+0x253c 003430 bpatch patch0a_4 ,mem_patch0a 
+0x253d 003431 fetch 1 ,mem_temp_am_addr 
+0x253e 003432 compare 0 ,pdata ,0x07 
+0x253f 003433 setflag true ,mark_am_addr_broadcast ,mark 
+0x2540 003434 branch am_addr_ok ,true 
+0x2541 003435 icompare 0x07 ,am_addr 
+0x2542 003436 branch am_addr_match ,true 
+0x2543 003437 bmark0 mark_esco ,end_of_packet 
+0x2544 003438 fetcht 1 ,mem_saved_amaddr 
+0x2545 003439 icompare 0x7 ,temp 
+0x2546 003440 nbranch end_of_packet ,true 
+0x2547 003441 fetch 1 ,mem_arq 
+0x2548 003442 set0 arqnx ,pdata 
+0x2549 003443 set1 flowx ,pdata 
+0x254a 003444 store 1 ,mem_arq 
+:      003445 am_addr_match:
+0x254b 003446 enable match 
+:      003447 am_addr_ok:
+0x254c 003448 bpatch patch0a_5 ,mem_patch0a 
+0x254d 003449 fetch 1 ,mem_rx_type 
+0x254e 003450 icopy type 
+0x254f 003451 bmark1 mark_am_addr_broadcast ,arqn_bypass 
+0x2550 003452 fetcht 1 ,mem_temp_arq 
+0x2551 003453 fetch 1 ,mem_arq 
+0x2552 003454 set0 flow ,pdata 
+0x2553 003455 isolate1 flow ,temp 
+0x2554 003456 setflag true ,flow ,pdata 
+0x2555 003457 isolate1 arqn ,temp 
+0x2556 003458 setflag true ,arqn ,pdata 
+0x2557 003459 store 1 ,mem_arq 
+0x2558 003460 isolate0 arqn ,temp 
+0x2559 003461 branch arqn_bypass ,true 
+0x255a 003462 call clear_got_tx 
+:      003463 arqn_bypass:
+0x255b 003464 bpatch patch0a_6 ,mem_patch0a 
+0x255c 003465 arg 0 ,temp 
+0x255d 003466 call reserve_slot 
+0x255e 003467 and type ,0xf ,pdata 
+0x255f 003468 beq type_poll ,process_poll 
+0x2560 003469 beq type_null ,end_of_packet 
+0x2561 003470 beq type_fhs ,process_fhs 
+0x2562 003471 fetcht 1 ,mem_temp_arq 
+0x2563 003472 fetch 1 ,mem_arq 
+0x2564 003473 icompare 0x04 ,temp 
+0x2565 003474 nbranch rx_type_dispatch ,true 
+0x2566 003475 bmark0 mark_am_addr_broadcast ,failed_seqn 
+0x2567 003476 bbit0 bcast1 ,rx_type_dispatch 
+:      003477 failed_seqn:
+0x2568 003478 set1 mark_old_packet ,mark 
+:      003479 rx_type_dispatch:
+0x2569 003480 bpatch patch0a_7 ,mem_patch0a 
+0x256a 003481 deposit type 
+0x256b 003482 beq type_dm1 ,process_dm1 
+0x256c 003483 beq type_dh1 ,process_dh1 
+0x256d 003484 beq type_hv3 ,process_hev 
+0x256e 003485 beq type_3dh1 ,process_3dh1 
+0x256f 003486 arg 4 ,temp 
+0x2570 003487 call reserve_slot 
+0x2571 003488 beq type_dm3 ,process_dm3 
+0x2572 003489 beq type_dh3 ,process_dh3 
+0x2573 003490 arg 8 ,temp 
+0x2574 003491 call reserve_slot 
+0x2575 003492 beq type_dm5 ,process_dm5 
+0x2576 003493 beq type_dh5 ,process_dh5 
+0x2577 003494 rtn 
+:      003497 process_hev:
+0x2578 003498 bpatch patch0b_0 ,mem_patch0b 
+0x2579 003499 enable decode_fec0 
+0x257a 003500 enable enable_crc 
+0x257b 003501 enable encrypt 
+0x257c 003502 arg mem_sco_ibuf ,contw 
+0x257d 003503 force 30 ,loopcnt 
+:      003504 process_hev_loop:
+0x257e 003505 parse demod ,bucket ,8 
+0x257f 003506 rshift3 pwindow ,pdata 
+0x2580 003507 istore 1 ,contw 
+0x2581 003508 loop process_hev_loop 
+0x2582 003509 bmark0 mark_esco ,end_of_packet 
+0x2583 003510 parse demod ,bucket ,16 
+0x2584 003511 nsetflag crc_failed ,mark_esco_rxok ,mark 
+0x2585 003512 branch error_payload ,crc_failed 
+0x2586 003513 branch ack_payload 
+:      003516 process_poll:
+0x2587 003517 branch end_of_packet 
+:      003519 process_dm3:
+:      003520 process_dm5:
+0x2588 003521 set1 mark_longpacket ,mark 
+:      003522 process_dm1:
+0x2589 003523 enable decode_fec2 
+0x258a 003524 branch process_dmh 
+:      003526 process_dh3:
+:      003527 process_dh5:
+0x258b 003528 set1 mark_longpacket ,mark 
+:      003529 process_3dh1:
+0x258c 003530 set1 psk3m ,radio_ctrl 
+:      003531 process_dh1:
+0x258d 003532 enable decode_fec0 
+:      003533 process_dmh:
+0x258e 003534 bpatch patch0b_1 ,mem_patch0b 
+0x258f 003535 bmark1 mark_rxbuf_inuse ,end_of_packet 
+0x2590 003536 isolate0 psk ,radio_ctrl 
+0x2591 003537 branch process_dmh_noedr ,true 
+0x2592 003538 disable enable_white 
+0x2593 003539 enable decode_fec0 
+0x2594 003540 disable decode_fec2 
+0x2595 003541 add clkn_bt ,2 ,timeup 
+0x2596 003542 correlate clkn_bt ,meet 
+0x2597 003543 nbranch error_payload ,sync 
+0x2598 003544 set1 mark_longpacket ,mark 
+0x2599 003545 enable enable_white 
+:      003546 process_dmh_noedr:
+0x259a 003547 bpatch patch0b_2 ,mem_patch0b 
+0x259b 003548 enable encrypt 
+0x259c 003549 enable enable_crc 
+0x259d 003550 parse demod ,bucket ,3 
+0x259e 003551 rshift8 pwindow ,pdata 
+0x259f 003552 store 1 ,mem_lch_code 
+0x25a0 003553 parse demod ,bucket ,5 
+0x25a1 003554 bmark1 mark_longpacket ,process_dmh_long 
+0x25a2 003555 rshift3 pwindow ,loopcnt 
+0x25a3 003556 rshift3 loopcnt ,loopcnt 
+0x25a4 003557 branch process_dmh_common 
+:      003558 process_dmh_long:
+0x25a5 003559 parse demod ,bucket ,5 
+0x25a6 003560 rshift pwindow ,loopcnt 
+0x25a7 003561 parse demod ,bucket ,3 
+:      003562 process_dmh_common:
+0x25a8 003563 bpatch patch0b_3 ,mem_patch0b 
+0x25a9 003564 deposit loopcnt 
+0x25aa 003565 store 2 ,mem_len 
+0x25ab 003566 branch process_dmh_data_end ,blank 
+0x25ac 003567 isub mask3ff ,null 
+0x25ad 003568 branch error_payload ,positive 
+0x25ae 003569 bpatch patch0b_4 ,mem_patch0b 
+0x25af 003570 set0 mark_fhs_eir ,mark 
+0x25b0 003571 fetch 1 ,mem_lch_code 
+0x25b1 003572 and_into 0x03 ,pdata 
+0x25b2 003573 arg mem_rxbuf ,contw 
+0x25b3 003574 beq llid_lmp ,process_lmp 
+0x25b4 003575 bmark1 mark_testmode ,process_dmh_data 
+0x25b5 003577 fetch 1 ,mem_lch_code 
+0x25b6 003578 and_into 0x03 ,pdata 
+0x25b7 003579 beq llid_l2cap_start ,process_dmh_data_l2cap_start_pkt 
+0x25b8 003580 beq llid_l2cap_cont ,process_dmh_data_l2cap_continue_pkt 
+0x25b9 003581 branch error_payload 
+:      003583 process_lmp:
+0x25ba 003584 fetch 2 ,mem_len 
+0x25bb 003585 sub pdata ,0x70 ,null 
+0x25bc 003586 nbranch error_payload ,positive 
+0x25bd 003587 bmark1 mark_old_packet ,ack_payload 
+0x25be 003588 branch process_dmh_data 
+:      003591 process_dmh_data_l2cap_start_pkt:
+0x25bf 003592 bpatch patch0b_5 ,mem_patch0b 
+0x25c0 003593 bmark1 mark_old_packet ,ack_payload 
+0x25c1 003594 fetch 2 ,mem_len 
+0x25c2 003595 arg 0x2e0 ,temp 
+0x25c3 003596 isub temp ,null 
+0x25c4 003597 branch error_payload ,positive 
+0x25c5 003598 fetch 1 ,mem_l2cap_rxbuff_inuse 
+0x25c6 003599 bbit0 l2cap_inuse_buff1 ,process_dmh_data_into_buff1 
+0x25c7 003600 bbit0 l2cap_inuse_buff2 ,process_dmh_data_into_buff2 
+0x25c8 003601 branch end_of_packet 
+:      003602 process_dmh_data_into_buff1:
+0x25c9 003603 jam 1 ,mem_l2cap_rxbuff_new 
+0x25ca 003604 fetch 2 ,mem_l2cap_rxbuff1_len 
+0x25cb 003605 bne 0 ,end_of_packet 
+0x25cc 003606 arg mem_l2cap_rxbuff1 ,contw 
+0x25cd 003607 branch process_dmh_data 
+:      003608 process_dmh_data_into_buff2:
+0x25ce 003609 jam 2 ,mem_l2cap_rxbuff_new 
+0x25cf 003610 fetch 2 ,mem_l2cap_rxbuff2_len 
+0x25d0 003611 bne 0 ,end_of_packet 
+0x25d1 003612 arg mem_l2cap_rxbuff2 ,contw 
+0x25d2 003613 branch process_dmh_data 
+:      003615 process_dmh_data_l2cap_continue_pkt:
+0x25d3 003616 bpatch patch0b_6 ,mem_patch0b 
+0x25d4 003617 bmark1 mark_old_packet ,ack_payload 
+0x25d5 003618 fetch 2 ,mem_len 
+0x25d6 003619 arg 0x2e0 ,temp 
+0x25d7 003620 isub temp ,null 
+0x25d8 003621 branch error_payload ,positive 
+0x25d9 003622 fetch 1 ,mem_l2cap_rxbuff_new 
+0x25da 003623 beq 1 ,process_dmh_data_l2cap_continue_pkt1 
+0x25db 003624 beq 2 ,process_dmh_data_l2cap_continue_pkt2 
+0x25dc 003625 branch end_of_packet 
+:      003626 process_dmh_data_l2cap_continue_pkt1:
+0x25dd 003627 arg mem_l2cap_rxbuff1 ,contw 
+0x25de 003628 fetch 2 ,mem_l2cap_rxbuff1_len 
+0x25df 003629 iadd contw ,contw 
+0x25e0 003630 branch process_dmh_data 
+:      003631 process_dmh_data_l2cap_continue_pkt2:
+0x25e1 003632 arg mem_l2cap_rxbuff2 ,contw 
+0x25e2 003633 fetch 2 ,mem_l2cap_rxbuff2_len 
+0x25e3 003634 iadd contw ,contw 
+:      003635 process_dmh_data:
+0x25e4 003636 parse demod ,bucket ,8 
+0x25e5 003637 rshift3 pwindow ,pdata 
+0x25e6 003638 istore 1 ,contw 
+0x25e7 003639 loop process_dmh_data 
+:      003640 process_dmh_data_end:
+0x25e8 003641 bpatch patch0b_7 ,mem_patch0b 
+0x25e9 003642 parse demod ,bucket ,16 
+0x25ea 003643 branch error_payload_crc ,crc_failed 
+0x25eb 003644 fetch 1 ,mem_l2cap_flow_ctrl_flag 
+0x25ec 003645 beq l2cap_flow_ctrl_enable ,end_of_packet 
+0x25ed 003646 bmark1 mark_testmode ,process_dmh_cont 
+0x25ee 003647 bmark1 mark_old_packet ,redundant_payload 
+0x25ef 003648 fetch 1 ,mem_lch_code 
+0x25f0 003649 compare 3 ,pdata ,3 
+0x25f1 003650 branch process_dmh_cont ,true 
+0x25f2 003651 fetch 2 ,mem_len 
+0x25f3 003652 branch process_dmh_cont ,blank 
+0x25f4 003653 bpatch patch0c_0 ,mem_patch0c 
+0x25f5 003654 fetch 1 ,mem_l2cap_rxbuff_new 
+0x25f6 003655 beq 1 ,process_l2cap_pass_crc_buff1 
+0x25f7 003656 beq 2 ,process_l2cap_pass_crc_buff2 
+0x25f8 003657 branch assert 
+:      003658 process_l2cap_pass_crc_buff1:
+0x25f9 003659 fetch 2 ,mem_l2cap_rxbuff1_len 
+0x25fa 003660 fetcht 2 ,mem_len 
+0x25fb 003661 iadd temp ,pdata 
+0x25fc 003662 store 2 ,mem_l2cap_rxbuff1_len 
+0x25fd 003663 beq 0 ,assert 
+0x25fe 003664 fetcht 2 ,mem_l2cap_rxbuff1 
+0x25ff 003665 increase 4 ,temp 
+0x2600 003666 isub temp ,null 
+0x2601 003667 call l2cap_buff1_inuse ,zero 
+0x2602 003668 branch process_dmh_cont 
+:      003669 process_l2cap_pass_crc_buff2:
+0x2603 003670 fetch 2 ,mem_l2cap_rxbuff2_len 
+0x2604 003671 fetcht 2 ,mem_len 
+0x2605 003672 iadd temp ,pdata 
+0x2606 003673 store 2 ,mem_l2cap_rxbuff2_len 
+0x2607 003674 beq 0 ,assert 
+0x2608 003675 fetcht 2 ,mem_l2cap_rxbuff2 
+0x2609 003676 add temp ,4 ,temp 
+0x260a 003677 isub temp ,null 
+0x260b 003678 call l2cap_buff2_inuse ,zero 
+0x260c 003679 branch process_dmh_cont 
+:      003680 process_dmh_cont:
+0x260d 003681 bpatch patch0c_1 ,mem_patch0c 
+0x260e 003682 fetcht 1 ,mem_state_map 
+0x260f 003683 fetch 1 ,mem_lch_code 
+0x2610 003684 compare 3 ,pdata ,0x03 
+0x2611 003685 setflag true ,smap_rxlmp ,temp 
+0x2612 003686 nsetflag true ,smap_rxl2cap ,temp 
+0x2613 003687 storet 1 ,mem_state_map 
+0x2614 003688 nbranch process_dmh_cont_rxbuf_not_use ,true 
+0x2615 003689 set1 mark_rxbuf_inuse ,mark 
+:      003690 process_dmh_cont_rxbuf_not_use:
+0x2616 003691 bmark0 mark_testmode ,ack_payload 
+0x2617 003692 isolate1 smap_rxlmp ,temp 
+0x2618 003693 branch ack_payload ,true 
+0x2619 003694 fetch 2 ,mem_tst_pktcnt_crc 
+0x261a 003695 increase 1 ,pdata 
+0x261b 003696 store 2 ,mem_tst_pktcnt_crc 
+0x261c 003697 set1 mark_loopback ,mark 
+0x261d 003698 set0 smap_rxl2cap ,temp 
+0x261e 003699 set0 mark_rxbuf_inuse ,mark 
+0x261f 003700 storet 1 ,mem_state_map 
+:      003701 ack_payload:
+0x2620 003702 bpatch patch0c_2 ,mem_patch0c 
+0x2621 003703 fetcht 1 ,mem_temp_arq 
+0x2622 003704 fetch 1 ,mem_arq 
+0x2623 003705 set1 arqnx ,pdata 
+0x2624 003706 isolate1 seqn ,temp 
+0x2625 003707 setflag true ,seqn ,pdata 
+0x2626 003708 isolate1 mark_am_addr_broadcast ,mark 
+0x2627 003709 setflag true ,bcast1 ,pdata 
+0x2628 003710 store 1 ,mem_arq 
+0x2629 003711 fetch 2 ,mem_len 
+0x262a 003712 nbranch end_of_packet ,blank 
+0x262b 003713 fetch 1 ,mem_state_map 
+0x262c 003714 set0 smap_rxl2cap ,pdata 
+0x262d 003715 store 1 ,mem_state_map 
+0x262e 003716 fetch 1 ,mem_lch_code 
+0x262f 003717 compare 0x01 ,pdata ,0x07 
+0x2630 003719 branch end_of_packet 
+:      003721 error_header:
+0x2631 003722 bpatch patch0c_3 ,mem_patch0c 
+0x2632 003723 disable match 
+0x2633 003724 fetch 2 ,mem_rx_hec_err 
+0x2634 003725 increase 1 ,pdata 
+0x2635 003726 store 2 ,mem_rx_hec_err 
+0x2636 003727 branch end_of_packet 
+:      003728 error_payload_crc:
+0x2637 003729 fetch 2 ,mem_rx_crc_err 
+0x2638 003730 increase 1 ,pdata 
+0x2639 003731 store 2 ,mem_rx_crc_err 
+0x263a 003732 call discard_pkt 
+0x263b 003733 bmark0 mark_testmode ,error_payload 
+0x263c 003734 set1 mark_loopback ,mark 
+:      003735 error_payload:
+0x263d 003736 branch end_of_packet 
+:      003738 discard_pkt:
+0x263e 003739 bpatch patch0c_4 ,mem_patch0c 
+0x263f 003740 fetch 1 ,mem_lch_code 
+0x2640 003741 compare 3 ,pdata ,0x03 
+0x2641 003742 nbranch discard_pkt_l2cap ,true 
+:      003743 discard_pkt_lmp:
+0x2642 003744 fetcht 1 ,mem_state_map 
+0x2643 003745 set0 smap_rxlmp ,temp 
+0x2644 003746 storet 1 ,mem_state_map 
+0x2645 003747 rtn 
+:      003748 discard_pkt_l2cap:
+0x2646 003751 fetcht 1 ,mem_state_map 
+0x2647 003752 set0 smap_rxl2cap ,temp 
+0x2648 003753 storet 1 ,mem_state_map 
+0x2649 003754 branch h4_send_acl_trigger_clear 
+:      003756 redundant_payload:
+0x264a 003757 fetch 1 ,mem_arq 
+0x264b 003758 set1 arqnx ,pdata 
+0x264c 003759 store 1 ,mem_arq 
+:      003760 end_of_packet:
+0x264d 003761 bpatch patch0c_5 ,mem_patch0c 
+0x264e 003762 disable encode_fec0 
+0x264f 003763 disable encode_fec2 
+0x2650 003764 disable decode_fec0 
+0x2651 003765 disable decode_fec2 
+0x2652 003766 disable enable_crc 
+0x2653 003767 disable encrypt 
+0x2654 003768 disable enable_white 
+0x2655 003769 branch shutdown_radio ,is_rx 
+0x2656 003770 until null ,tx_clear 
+0x2657 003771 nop 100 
+0x2658 003772 branch shutdown_radio 
+:      003774 process_fhs:
+0x2659 003775 bpatch patch0c_6 ,mem_patch0c 
+0x265a 003776 enable enable_crc 
+0x265b 003777 enable decode_fec2 
+0x265c 003778 parse demod ,bucket ,72 
+0x265d 003779 isolate1 58 ,pdata 
+0x265e 003780 setflag true ,mark_fhs_eir ,mark 
+0x265f 003781 copy bt_adr ,temp 
+0x2660 003782 ialigned bt_adr 
+0x2661 003783 ialigned fhs0 
+0x2662 003784 pulse recalc 
+0x2663 003785 setsect 2 ,0xfffff 
+0x2664 003786 setsect 3 ,0x0ffff 
+0x2665 003787 nop 32 
+0x2666 003788 iverify fhs_parity 
+0x2667 003789 deposit lap 
+0x2668 003790 store 3 ,extm_lap 
+0x2669 003791 deposit uap 
+0x266a 003792 store 1 ,extm_uap 
+0x266b 003793 copy temp ,bt_adr 
+0x266c 003794 branch fhs_parity_ok ,true 
+0x266d 003795 branch error_payload 
+:      003796 fhs_parity_ok:
+0x266e 003797 bpatch patch0c_7 ,mem_patch0c 
+0x266f 003798 parse demod ,bucket ,72 
+0x2670 003799 ialigned fhs1 
+0x2671 003800 ialigned am_addr 
+0x2672 003801 ialigned nap 
+0x2673 003802 ialigned regb 
+0x2674 003803 force 0 ,pdata 
+0x2675 003804 parse demod ,bucket ,16 
+0x2676 003805 branch error_payload ,crc_failed 
+0x2677 003806 setarg 0x0ffffffc 
+0x2678 003807 iand regb ,pdata 
+0x2679 003808 store 4 ,mem_clke_bt 
+0x267a 003809 deposit fhs_class 
+0x267b 003810 store 3 ,extm_class 
+0x267c 003811 deposit fhs_misc 
+0x267d 003812 store 1 ,extm_fhs_misc 
+0x267e 003813 deposit am_addr 
+0x267f 003814 store 1 ,extm_newconn_am_addr 
+0x2680 003815 deposit nap 
+0x2681 003816 store 2 ,extm_nap 
+0x2682 003817 deposit bt_clk 
+0x2683 003818 inject rxf ,32 
+0x2684 003819 compare type_fhs ,type ,0x0f 
+0x2685 003820 setflag true ,mark_fhs_already_good ,mark 
+0x2686 003821 branch end_of_packet 
+:      003823 clear_got_tx:
+0x2687 003824 bpatch patch0d_0 ,mem_patch0d 
+0x2688 003825 fetch 1 ,mem_arq 
+0x2689 003826 rtnbit0 wack 
+0x268a 003827 set0 wack ,pdata 
+0x268b 003828 setflip seqnx ,pdata 
+0x268c 003829 store 1 ,mem_arq 
+0x268d 003830 fetch 1 ,mem_last_type 
+0x268e 003831 beq type_lmp ,clear_got_txlmp 
+0x268f 003832 rtneq type_hv3 
+0x2690 003833 fetch 1 ,mem_op 
+0x2691 003834 rtnbit0 op_txl2cap ,pdata 
+0x2692 003835 set0 op_txl2cap ,pdata 
+0x2693 003836 set1 op_pkt_comp ,pdata 
+0x2694 003837 store 1 ,mem_op 
+0x2695 003838 set0 mark_tx_l2cap ,mark 
+0x2696 003839 fetch 2 ,mem_l2cap_tx_multi_offset 
+0x2697 003840 nrtn blank 
+0x2698 003841 fetch 1 ,mem_op 
+0x2699 003842 set0 op_pkt_comp ,pdata 
+0x269a 003843 store 1 ,mem_op 
+0x269b 003844 branch l2cap_malloc_free 
+:      003846 clear_got_txlmp:
+0x269c 003847 bpatch patch0d_1 ,mem_patch0d 
+0x269d 003848 fetch 1 ,mem_lmo_header_opcode 
+0x269e 003849 rshift pdata ,pdata 
+0x269f 003850 beq lmp_start_encryption_req ,start_encryption 
+0x26a0 003851 beq lmp_stop_encryption_req ,stop_encryption 
+0x26a1 003852 beq lmp_unsniff_req ,sniff_exit 
+0x26a2 003853 beq lmp_escape ,clear_lmp_escape 
+0x26a3 003854 rtnne lmp_accepted 
+0x26a4 003855 fetch 1 ,mem_lmo_payload 
+0x26a5 003856 beq lmp_sco_link_req ,sco_link_req_by_slave 
+0x26a6 003857 beq lmp_start_encryption_req ,clear_send_setup_complete 
+0x26a7 003858 rtn 
+:      003860 clear_lmp_escape:
+0x26a8 003861 fetch 1 ,mem_lmo_payload 
+0x26a9 003862 set1 7 ,pdata 
+0x26aa 003863 rtn 
+:      003864 clear_send_setup_complete:
+0x26ab 003865 rtn master 
+0x26ac 003866 fetch 1 ,mem_state 
+0x26ad 003867 rtnbit1 state_conn_comp 
+0x26ae 003868 jam lmp_setup_complete ,mem_lmo_opcode2 
+0x26af 003869 rtn 
+:      003872 sco_link_req_by_slave:
+0x26b0 003873 rtn master 
+0x26b1 003874 fetch 1 ,mem_mode 
+0x26b2 003875 isolate1 send_sco_when_slave ,pdata 
+0x26b3 003876 branch clean_mem_mode ,true 
+0x26b4 003878 rtn 
+:      003879 clean_mem_mode:
+0x26b5 003880 set0 send_sco_when_slave ,pdata 
+0x26b6 003881 store 1 ,mem_mode 
+0x26b7 003882 rtn 
+:      003884 start_encryption:
+0x26b8 003885 bpatch patch0d_2 ,mem_patch0d 
+0x26b9 003886 fetch 1 ,mem_state_map 
+0x26ba 003887 set1 smap_encryption ,pdata 
+0x26bb 003888 store 1 ,mem_state_map 
+0x26bc 003889 jam 1 ,core_encrypt 
+0x26bd 003890 fetch 1 ,mem_state 
+0x26be 003891 isolate1 state_conn_comp ,pdata 
+0x26bf 003892 rtn 
+:      003894 stop_encryption:
+0x26c0 003895 bpatch patch0d_3 ,mem_patch0d 
+0x26c1 003896 fetch 1 ,mem_state_map 
+0x26c2 003897 set0 smap_encryption ,pdata 
+0x26c3 003898 store 1 ,mem_state_map 
+0x26c4 003899 jam 0 ,core_encrypt 
+0x26c5 003900 rtn 
+:      003903 sniff_init:
+0x26c6 003904 bpatch patch0d_4 ,mem_patch0d 
+0x26c7 003905 copy clkn_bt ,pdata 
+0x26c8 003906 store 4 ,mem_lpm_delay_after_sniff 
+0x26c9 003907 add clkn_bt ,3 ,rega 
+0x26ca 003908 branch sniff_init_master ,master 
+0x26cb 003909 add clke_bt ,3 ,rega 
+:      003910 sniff_init_master:
+0x26cc 003911 fetcht 2 ,mem_tsniff 
+0x26cd 003912 deposit rega 
+0x26ce 003913 set0 27 ,pdata 
+0x26cf 003914 idiv temp 
+0x26d0 003915 fetch 2 ,mem_dsniff 
+0x26d1 003916 call wait_div_end 
+0x26d2 003917 remainder regc 
+0x26d3 003918 isub regc ,pdata 
+0x26d4 003919 branch sniff_init_nowrap ,positive 
+0x26d5 003920 iadd temp ,pdata 
+:      003921 sniff_init_nowrap:
+0x26d6 003922 iadd rega ,pdata 
+0x26d7 003923 store 4 ,mem_sniff_anchor 
+0x26d8 003924 jam switch_flag_init ,mem_switch_flag 
+0x26d9 003925 fetch 1 ,mem_state 
+0x26da 003926 set1 state_insniff ,pdata 
+0x26db 003927 store 1 ,mem_state 
+0x26dc 003928 fetch 1 ,mem_sniff_attempt 
+0x26dd 003929 store 1 ,mem_current_sniff_attempt 
+0x26de 003930 setarg 0 
+0x26df 003931 store 3 ,mem_sniff_rcv 
+0x26e0 003932 store 3 ,mem_sniff_lost 
+0x26e1 003933 store 1 ,mem_sniff_unint_lost 
+0x26e2 003934 jam bt_evt_enter_sniff ,mem_fifo_temp 
+0x26e3 003935 call ui_ipc_send_event 
+0x26e4 003936 fetch 2 ,mem_rx_window_sniff 
+0x26e5 003937 store 2 ,mem_rx_window 
+0x26e6 003938 nrtn master 
+0x26e7 003939 add am_addr ,-1 ,queue 
+0x26e8 003940 rtn 
+:      003942 sniff_exit:
+0x26e9 003943 bpatch patch0d_5 ,mem_patch0d 
+0x26ea 003944 fetch 1 ,mem_state 
+0x26eb 003945 rtnbit0 state_insniff 
+0x26ec 003946 set0 state_insniff ,pdata 
+0x26ed 003947 store 1 ,mem_state 
+0x26ee 003948 fetch 2 ,mem_rx_window_init 
+0x26ef 003949 store 2 ,mem_rx_window 
+0x26f0 003950 disable wake 
+0x26f1 003951 jam bt_evt_exit_sniff ,mem_fifo_temp 
+0x26f2 003952 branch ui_ipc_send_event 
+:      003955 check_attempt:
+0x26f3 003956 bpatch patch0d_6 ,mem_patch0d 
+0x26f4 003957 enable attempt 
+0x26f5 003958 fetch 1 ,mem_state 
+0x26f6 003959 bbit1 state_insniff ,check_attempt_sniff 
+0x26f7 003960 rtnmark1 mark_testmode 
+0x26f8 003961 fetch 1 ,mem_arq 
+0x26f9 003962 rtnbit1 wack 
+0x26fa 003963 fetch 1 ,mem_lmp_to_send 
+0x26fb 003964 nrtn blank 
+0x26fc 003965 fetch 1 ,mem_op 
+0x26fd 003966 rtnbit1 op_txl2cap 
+:      003967 check_attempt_nomore:
+0x26fe 003968 force 0 ,pdata 
+0x26ff 003969 rtn 
+:      003971 check_attempt_sniff:
+0x2700 003972 bbit0 state_insco ,check_attempt_not_sco 
+0x2701 003973 fetch 1 ,mem_current_sniff_attempt 
+0x2702 003974 beq 2 ,check_attempt_sniff_restore_sco 
+0x2703 003975 fetch 1 ,mem_arq 
+0x2704 003976 bbit1 wack ,check_attempt_notimeout 
+0x2705 003977 bmark0 mark_esco_rxok ,check_attempt_notimeout 
+:      003978 check_attempt_sniff_restore_sco:
+0x2706 003979 nbranch check_attempt_notimeout ,master 
+0x2707 003980 fetch 1 ,mem_lmp_to_send 
+0x2708 003981 nbranch check_attempt_notimeout ,blank 
+:      003982 check_attempt_sco_master:
+0x2709 003983 fetch 1 ,mem_sco_poll 
+0x270a 003984 increase -1 ,pdata 
+0x270b 003985 store 1 ,mem_sco_poll 
+0x270c 003986 nbranch check_attempt_nomore ,blank 
+0x270d 003987 jam param_sco_poll ,mem_sco_poll 
+0x270e 003988 branch check_attempt_notimeout 
+:      003995 check_attempt_not_sco:
+0x270f 003996 fetch 1 ,mem_current_sniff_attempt 
+0x2710 003997 bne 1 ,check_attempt_notimeout 
+0x2711 003998 fetch 1 ,mem_current_sniff_timeout 
+0x2712 003999 branch check_attempt_notimeout ,blank 
+0x2713 004000 increase -1 ,pdata 
+0x2714 004001 store 1 ,mem_current_sniff_timeout 
+0x2715 004002 fetch 1 ,mem_arq 
+0x2716 004003 rtnbit1 wack 
+0x2717 004004 nrtn match 
+:      004005 check_attempt_notimeout:
+0x2718 004006 fetch 1 ,mem_current_sniff_attempt 
+0x2719 004007 increase -1 ,pdata 
+0x271a 004008 store 1 ,mem_current_sniff_attempt 
+0x271b 004009 rtn 
+:      004020 sniff_check_window:
+0x271c 004021 bpatch patch0d_7 ,mem_patch0d 
+0x271d 004022 disable swfine 
+0x271e 004023 copy temp ,stop_watch 
+0x271f 004024 call context_search_sniff_window 
+0x2720 004025 disable user 
+0x2721 004026 nrtn zero 
+0x2722 004027 force 0 ,stop_watch 
+0x2723 004028 enable user 
+0x2724 004029 rtn 
+:      004032 check_esco_amaddr:
+0x2725 004033 fetch 1 ,mem_esco_addr 
+0x2726 004034 icompare 0xff ,am_addr 
+0x2727 004035 rtn 
+:      004038 parse_l2cap:
+0x2728 004039 bpatch patch0e_0 ,mem_patch0e 
+0x2729 004040 set0 mark_rxbuf_inuse ,mark 
+:      004041 parse_l2cap_cont:
+0x272a 004042 jam l2cap_rx_clear ,mem_l2cap_rx_done 
+0x272b 004043 fetch 1 ,mem_l2cap_rxbuff_inuse 
+0x272c 004044 rtn blank 
+0x272d 004045 isolate1 l2cap_inuse_buff1 ,pdata 
+0x272e 004046 arg mem_l2cap_rxbuff1 ,contr 
+0x272f 004047 call process_rx_l2cap_pkt ,true 
+0x2730 004048 bpatch patch0e_1 ,mem_patch0e 
+0x2731 004049 fetch 1 ,mem_l2cap_rx_done 
+0x2732 004050 beq l2cap_rx_done ,parse_l2cap_release_buff1 
+0x2733 004052 jam l2cap_rx_clear ,mem_l2cap_rx_done 
+0x2734 004053 fetch 1 ,mem_l2cap_rxbuff_inuse 
+0x2735 004054 rtnbit0 l2cap_inuse_buff2 
+0x2736 004055 arg mem_l2cap_rxbuff2 ,contr 
+0x2737 004056 call process_rx_l2cap_pkt 
+0x2738 004057 fetch 1 ,mem_l2cap_rx_done 
+0x2739 004058 beq l2cap_rx_done ,parse_l2cap_release_buff2 
+0x273a 004059 rtn 
+:      004061 parse_l2cap_release_buff1:
+0x273b 004062 fetch 1 ,mem_l2cap_rxbuff_inuse 
+0x273c 004063 set0 l2cap_inuse_buff1 ,pdata 
+0x273d 004064 store 1 ,mem_l2cap_rxbuff_inuse 
+0x273e 004065 setarg 0 
+0x273f 004066 store 2 ,mem_l2cap_rxbuff1_len 
+0x2740 004067 rtn 
+:      004068 parse_l2cap_release_buff2:
+0x2741 004069 fetch 1 ,mem_l2cap_rxbuff_inuse 
+0x2742 004070 set0 l2cap_inuse_buff2 ,pdata 
+0x2743 004071 store 1 ,mem_l2cap_rxbuff_inuse 
+0x2744 004072 setarg 0 
+0x2745 004073 store 2 ,mem_l2cap_rxbuff2_len 
+0x2746 004074 rtn 
+:      004076 l2cap_buff1_inuse:
+0x2747 004077 fetch 1 ,mem_l2cap_rxbuff_inuse 
+0x2748 004078 set1 l2cap_inuse_buff1 ,pdata 
+0x2749 004079 store 1 ,mem_l2cap_rxbuff_inuse 
+0x274a 004080 rtn 
+:      004082 l2cap_buff2_inuse:
+0x274b 004083 fetch 1 ,mem_l2cap_rxbuff_inuse 
+0x274c 004084 set1 l2cap_inuse_buff2 ,pdata 
+0x274d 004085 store 1 ,mem_l2cap_rxbuff_inuse 
+0x274e 004086 rtn 
+:      004092 slave_send_access:
+0x274f 004093 bpatch patch0e_2 ,mem_patch0e 
+0x2750 004094 add clke_bt ,1 ,bt_clk 
+0x2751 004095 call fetch_extm_bt_adr 
+0x2752 004096 force 0x03 ,freq_mode 
+0x2753 004097 call tx_radio_freq 
+0x2754 004098 call start_transmitter 
+0x2755 004099 call start_tx_external 
+0x2756 004100 branch send_access_word 
+:      004103 slave_conn_send_packet:
+0x2757 004104 bpatch patch0e_3 ,mem_patch0e 
+0x2758 004105 call rf_setup_time_slave_slot 
+0x2759 004106 deposit clke_bt 
+0x275a 004107 fetcht 4 ,mem_next_btclk 
+0x275b 004108 isub temp ,pdata 
+0x275c 004109 rtnne 1 
+0x275d 004110 compare type_null ,type ,0x1f 
+0x275e 004111 nbranch slave_conn_send_access ,true 
+0x275f 004112 fetch 1 ,mem_rx_type 
+0x2760 004113 rtn blank 
+:      004114 slave_conn_send_access:
+0x2761 004115 call slave_send_access 
+:      004116 transmit_packet:
+0x2762 004117 compare type_id ,type ,0x1f 
+0x2763 004118 branch end_of_packet ,true 
+0x2764 004119 rshift bt_clk ,temp 
+0x2765 004120 or temp ,0x40 ,white_init 
+:      004121 transmit_packet_whitened:
+0x2766 004122 bpatch patch0e_4 ,mem_patch0e 
+0x2767 004123 enable enable_white 
+0x2768 004124 enable enable_hec 
+0x2769 004125 enable encode_fec1 
+0x276a 004126 set0 mark_longpacket ,mark 
+0x276b 004127 deposit am_addr 
+0x276c 004128 inject mod ,3 
+0x276d 004129 deposit type 
+0x276e 004130 inject mod ,4 
+0x276f 004131 fetch 1 ,mem_arq 
+0x2770 004132 inject bucket ,4 
+0x2771 004133 inject mod ,3 
+0x2772 004134 enable enable_parity 
+0x2773 004135 inject mod ,8 
+0x2774 004136 disable encode_fec1 
+0x2775 004137 disable enable_parity 
+0x2776 004138 disable enable_hec 
+0x2777 004139 set0 psk3m ,radio_ctrl 
+0x2778 004140 arg 0 ,temp 
+0x2779 004141 call reserve_slot 
+0x277a 004142 bpatch patch0e_5 ,mem_patch0e 
+0x277b 004143 and type ,0x1f ,pdata 
+0x277c 004144 beq type_lmp ,transmit_lmp 
+0x277d 004145 beq type_null ,end_of_packet 
+0x277e 004146 beq type_poll ,end_of_packet 
+0x277f 004147 beq type_fhs ,transmit_fhs 
+0x2780 004148 beq type_dm1 ,transmit_dm1 
+0x2781 004149 beq type_dh1 ,transmit_dh1 
+0x2782 004150 beq type_hv3 ,transmit_hev 
+0x2783 004151 beq type_3dh1 ,transmit_3dh1 
+0x2784 004152 arg 4 ,temp 
+0x2785 004153 call reserve_slot 
+0x2786 004154 beq type_dm3 ,transmit_dm3 
+0x2787 004155 beq type_dh3 ,transmit_dh3 
+0x2788 004156 arg 8 ,temp 
+0x2789 004157 call reserve_slot 
+0x278a 004158 beq type_dh5 ,transmit_dh5 
+0x278b 004159 branch transmit_dm5 
+:      004162 transmit_hev:
+0x278c 004163 bpatch patch0e_6 ,mem_patch0e 
+0x278d 004164 enable encode_fec0 
+0x278e 004165 enable enable_crc 
+0x278f 004166 enable encrypt 
+0x2790 004167 force 30 ,loopcnt 
+0x2791 004168 arg mem_sco_obuf ,contr 
+:      004169 transmit_ev_loop:
+0x2792 004170 ifetch 1 ,contr 
+0x2793 004171 inject mod ,8 
+0x2794 004172 loop transmit_ev_loop 
+0x2795 004173 bmark1 mark_esco ,transmit_end 
+0x2796 004174 branch end_of_packet 
+:      004176 transmit_fhs:
+0x2797 004177 bpatch patch0e_7 ,mem_patch0e 
+0x2798 004178 fetch 1 ,mem_fhs_am_addr 
+0x2799 004179 icopy am_addr 
+0x279a 004180 fetch 1 ,mem_fhs_misc 
+0x279b 004181 icopy fhs_misc 
+0x279c 004182 fetch 3 ,mem_class 
+0x279d 004183 icopy fhs_class 
+0x279e 004184 fetch 2 ,mem_nap 
+0x279f 004185 icopy nap 
+0x27a0 004186 enable enable_crc 
+0x27a1 004187 enable encode_fec2 
+0x27a2 004188 copy bt_adr ,rega 
+0x27a3 004189 call fetch_self_bt_adr 
+0x27a4 004190 pulse recalc 
+0x27a5 004191 nop 32 
+0x27a6 004192 copy bt_clk ,timeup 
+0x27a7 004193 fetch 4 ,mem_clkn_bt 
+0x27a8 004194 icopy bt_clk 
+0x27a9 004195 preload fhs0 
+0x27aa 004196 set1 58 ,pdata 
+0x27ab 004197 inject mod ,72 
+0x27ac 004198 preload fhs1 
+0x27ad 004199 inject mod ,72 
+0x27ae 004200 copy timeup ,bt_clk 
+0x27af 004201 copy rega ,bt_adr 
+0x27b0 004202 enable enable_parity 
+0x27b1 004203 inject mod ,16 
+0x27b2 004204 disable enable_parity 
+0x27b3 004205 branch end_of_packet 
+:      004207 transmit_lmp:
+0x27b4 004208 bpatch patch0f_0 ,mem_patch0f 
+0x27b5 004209 enable encrypt 
+0x27b6 004210 enable enable_crc 
+0x27b7 004211 enable encode_fec2 
+0x27b8 004212 fetch 1 ,mem_lmo_header_length 
+0x27b9 004213 and pdata ,0x1f8 ,temp 
+0x27ba 004214 arg mem_lmo_header_length ,contr 
+0x27bb 004215 increase 8 ,temp 
+:      004216 transmit_lmp_loop:
+0x27bc 004217 add temp ,-72 ,regc 
+0x27bd 004218 nbranch transmit_lmp_finish ,positive 
+0x27be 004219 ifetch 9 ,contr 
+0x27bf 004220 inject mod ,72 
+0x27c0 004221 copy regc ,temp 
+0x27c1 004222 branch transmit_lmp_loop 
+:      004223 transmit_lmp_finish:
+0x27c2 004224 ifetch 9 ,contr 
+0x27c3 004225 iinject mod ,temp 
+0x27c4 004226 branch transmit_end 
+:      004228 transmit_dm1:
+0x27c5 004229 enable encode_fec2 
+0x27c6 004230 branch transmit_dmh 
+:      004231 transmit_dm3:
+:      004232 transmit_dm5:
+0x27c7 004233 enable encode_fec2 
+0x27c8 004234 set1 mark_longpacket ,mark 
+0x27c9 004235 branch transmit_dmh 
+:      004237 transmit_3dh1:
+0x27ca 004238 set1 psk3m ,radio_ctrl 
+:      004239 transmit_dh1:
+0x27cb 004240 enable encode_fec0 
+0x27cc 004241 branch transmit_dmh 
+:      004243 transmit_dh3:
+:      004244 transmit_dh5:
+0x27cd 004245 set1 psk3m ,radio_ctrl 
+0x27ce 004246 enable encode_fec0 
+0x27cf 004247 set1 mark_longpacket ,mark 
+:      004249 transmit_dmh:
+0x27d0 004250 bpatch patch0f_1 ,mem_patch0f 
+0x27d1 004251 fetch 1 ,mem_state_map 
+0x27d2 004252 bbit0 smap_edr ,transmit_noedr 
+0x27d3 004253 sub type ,3 ,null 
+0x27d4 004254 branch transmit_noedr ,positive 
+0x27d5 004255 disable encrypt 
+0x27d6 004256 disable encode_fec2 
+0x27d7 004257 enable encode_fec0 
+0x27d8 004258 disable enable_white 
+0x27d9 004259 set1 psk ,radio_ctrl 
+0x27da 004260 isolate1 psk3m ,radio_ctrl 
+0x27db 004261 branch transmit_edr3m ,true 
+0x27dc 004262 setarg 0xabeee 
+0x27dd 004263 inject mod ,20 
+0x27de 004264 branch transmit_edr_sync_end 
+:      004265 transmit_edr3m:
+0x27df 004266 setarg 0x5faeba 
+0x27e0 004267 inject mod ,24 
+0x27e1 004268 setarg 0x12 
+0x27e2 004269 inject mod ,6 
+:      004270 transmit_edr_sync_end:
+0x27e3 004271 enable enable_white 
+0x27e4 004272 set1 mark_longpacket ,mark 
+:      004273 transmit_noedr:
+0x27e5 004274 enable encrypt 
+0x27e6 004275 enable enable_crc 
+0x27e7 004276 bmark1 mark_loopback ,transmit_loopback 
+0x27e8 004277 fetch 1 ,mem_tx_lch 
+0x27e9 004278 inject mod ,3 
+0x27ea 004279 fetch 2 ,mem_tx_len 
+0x27eb 004280 iforce loopcnt 
+0x27ec 004281 bmark1 mark_longpacket ,transmit_long 
+0x27ed 004282 inject mod ,5 
+0x27ee 004283 branch transmit_stuff 
+:      004284 transmit_long:
+0x27ef 004285 inject mod ,13 
+:      004286 transmit_stuff:
+0x27f0 004287 deposit loopcnt 
+0x27f1 004288 branch transmit_end ,blank 
+0x27f2 004289 fetch 2 ,mem_txptr 
+0x27f3 004290 iforce contr 
+:      004291 transmit_stuff_loop:
+0x27f4 004292 ifetch 1 ,contr 
+0x27f5 004293 inject mod ,8 
+0x27f6 004294 loop transmit_stuff_loop 
+:      004297 transmit_end:
+0x27f7 004298 enable enable_parity 
+0x27f8 004299 inject mod ,16 
+0x27f9 004300 disable enable_parity 
+0x27fa 004301 call set_wait_ack 
+0x27fb 004302 fetch 1 ,mem_state_map 
+0x27fc 004303 bbit0 smap_edr ,end_of_packet 
+0x27fd 004304 force 0 ,pdata 
+0x27fe 004305 inject mod ,6 
+0x27ff 004306 branch end_of_packet 
+:      004309 transmit_loopback:
+0x2800 004310 bpatch patch0f_2 ,mem_patch0f 
+0x2801 004311 bmark1 mark_longpacket ,transmit_loopback_long 
+:      004312 transmit_loopback_short:
+0x2802 004313 fetch 1 ,mem_lch_code 
+0x2803 004314 inject mod ,3 
+0x2804 004315 fetch 1 ,mem_len 
+0x2805 004316 iforce regc 
+0x2806 004317 inject mod ,5 
+0x2807 004318 branch transmit_loopback_cont 
+:      004319 transmit_loopback_long:
+0x2808 004320 fetch 1 ,mem_lch_code 
+0x2809 004321 inject mod ,3 
+0x280a 004322 fetch 2 ,mem_len 
+0x280b 004323 iforce regc 
+0x280c 004324 inject mod ,13 
+:      004325 transmit_loopback_cont:
+0x280d 004326 arg mem_rxbuf ,contr 
+:      004327 transmit_loopback_loop:
+0x280e 004328 copy regc ,null 
+0x280f 004329 branch transmit_loopback_end ,zero 
+0x2810 004330 ifetch 1 ,contr 
+0x2811 004331 inject mod ,8 
+0x2812 004332 increase -1 ,regc 
+0x2813 004333 branch transmit_loopback_loop 
+:      004334 transmit_loopback_end:
+0x2814 004335 fetch 2 ,mem_tst_pktcnt_dmh 
+0x2815 004336 increase 1 ,pdata 
+0x2816 004337 store 2 ,mem_tst_pktcnt_dmh 
+0x2817 004338 branch transmit_end 
+:      004341 apply_switch_clke:
+0x2818 004342 fetch 4 ,mem_clke_bt 
+0x2819 004343 add pdata ,7 ,rega 
+0x281a 004344 fetch 2 ,mem_slot_offset 
+0x281b 004345 nbranch apply_switch_nozero ,blank 
+0x281c 004346 increase -3 ,rega 
+0x281d 004347 branch apply_switch_wait_loop 
+:      004348 apply_switch_nozero:
+0x281e 004349 mul32 pdata ,12 ,pdata 
+0x281f 004350 hfetcht 2 ,core_halfslot 
+0x2820 004351 increase 1 ,temp 
+:      004352 apply_switch_loop:
+0x2821 004353 isub temp ,pdata 
+0x2822 004354 nbranch apply_switch_bt ,positive 
+0x2823 004355 increase -1 ,rega 
+0x2824 004356 branch apply_switch_loop 
+:      004357 apply_switch_bt:
+0x2825 004358 sub pdata ,0 ,pdata 
+:      004359 apply_switch_wait_loop:
+0x2826 004360 until null ,oneslot 
+0x2827 004361 compare 0 ,clkn_bt ,3 
+0x2828 004362 nbranch apply_switch_wait_loop ,true 
+0x2829 004363 iforce clke_rt 
+0x282a 004364 copy rega ,clke_bt 
+0x282b 004365 iforce clke_rt 
+0x282c 004366 rtn 
+:      004369 calc_slot_offset:
+0x282d 004370 bpatch patch0f_3 ,mem_patch0f 
+0x282e 004371 until null ,halfslot 
+0x282f 004372 deposit clke 
+0x2830 004373 iforce contr 
+0x2831 004374 rshift16 ,pdata ,pdata 
+0x2832 004375 isub clkn_bt ,loopcnt 
+0x2833 004376 and_into 3 ,loopcnt 
+0x2834 004377 nbranch calc_bt_portion ,zero 
+0x2835 004378 force 0 ,pdata 
+0x2836 004379 branch calc_skip_bt 
+:      004380 calc_bt_portion:
+0x2837 004381 arg 3750 ,temp 
+0x2838 004382 force 0 ,pdata 
+:      004383 calc_slot_offset_loop:
+0x2839 004384 iadd temp ,pdata 
+0x283a 004385 loop calc_slot_offset_loop 
+:      004386 calc_skip_bt:
+0x283b 004387 iadd contr ,pdata 
+0x283c 004388 div pdata ,12 
+0x283d 004389 call wait_div_end 
+0x283e 004390 quotient pdata 
+0x283f 004391 store 2 ,mem_slot_offset 
+0x2840 004392 rtn 
+:      004394 calc_clke_offset:
+0x2841 004395 bpatch patch0f_4 ,mem_patch0f 
+0x2842 004396 deposit clke 
+0x2843 004397 copy clkn ,temp 
+0x2844 004398 isub temp ,null 
+0x2845 004399 nsetflag positive ,44 ,pdata 
+0x2846 004400 isub temp ,temp 
+0x2847 004401 setarg 3750 
+0x2848 004402 isolate0 15 ,temp 
+0x2849 004403 branch calc_clke_pos ,true 
+0x284a 004404 setarg -61786 
+0x284b 004405 iadd temp ,temp 
+:      004406 calc_clke_pos:
+0x284c 004407 storet 6 ,mem_le_clk_offset 
+0x284d 004408 rtn le 
+0x284e 004409 storet 6 ,mem_clk_offset 
+0x284f 004410 rtn 
+:      004412 calc_clke:
+0x2850 004413 disable clknt 
+0x2851 004414 fetch 6 ,mem_le_clk_offset 
+0x2852 004415 branch calc_clke2 ,le 
+0x2853 004416 fetch 6 ,mem_clk_offset 
+:      004417 calc_clke2:
+0x2854 004418 iadd clkn ,alarm 
+0x2855 004419 increase 10 ,alarm 
+0x2856 004420 setarg 3750 
+0x2857 004421 isub alarm ,pdata 
+0x2858 004422 isolate0 15 ,pdata 
+0x2859 004423 branch calc_clke_pos_adj ,true 
+0x285a 004424 setarg 0xf15a 
+0x285b 004425 iadd alarm ,alarm 
+:      004426 calc_clke_pos2:
+0x285c 004427 copy alarm ,clke 
+0x285d 004428 rtn 
+:      004429 calc_clke_pos_adj:
+0x285e 004430 force 0 ,null 
+0x285f 004431 branch calc_clke_pos2 
+:      004438 calc_radio_freq:
+0x2860 004439 bpatch patch0f_5 ,mem_patch0f 
+0x2861 004440 call set_sync_on 
+0x2862 004441 copy bt_clk ,pdata 
+0x2863 004442 and_into 0x180 ,pdata 
+0x2864 004443 compare 3 ,freq_mode ,0x07 
+0x2865 004444 nbranch freq_not_connection ,true 
+0x2866 004445 rshift3 pdata ,pdata 
+0x2867 004446 iadd freq_index ,pdata 
+0x2868 004447 branch do_hop_mod_now 
+:      004448 freq_not_connection:
+0x2869 004449 copy freq_index ,pdata 
+:      004450 do_hop_mod_now:
+0x286a 004451 div pdata ,79 
+0x286b 004452 pulse recalc 
+0x286c 004453 call wait_div_end 
+0x286d 004454 remainder rega 
+0x286e 004455 add rega ,-40 ,temp 
+0x286f 004456 branch odd_half ,positive 
+0x2870 004457 lshift rega ,temp 
+0x2871 004458 branch freq_result 
+:      004459 odd_half:
+0x2872 004460 lshift temp ,temp 
+0x2873 004461 increase 1 ,temp 
+:      004462 freq_result:
+0x2874 004463 bpatch patch0f_6 ,mem_patch0f 
+0x2875 004464 fetch 1 ,mem_mode 
+0x2876 004465 bbit0 afh_change ,afh_process_con 
+:      004466 afh_process_0:
+0x2877 004467 fetch 4 ,mem_afh_instant 
+0x2878 004468 isub bt_clk ,null 
+0x2879 004469 branch afh_process_con ,positive 
+0x287a 004470 call afh_clear 
+0x287b 004471 fetch 1 ,mem_afh_new_mod 
+0x287c 004472 rtn blank 
+0x287d 004473 fetch 1 ,mem_mode 
+0x287e 004474 set1 afh_enable ,pdata 
+0x287f 004475 store 1 ,mem_mode 
+0x2880 004476 fetch 5 ,mem_afh_map_new 
+0x2881 004477 store 5 ,mem_afh_map_lo 
+0x2882 004478 ifetch 5 ,contr 
+0x2883 004479 store 5 ,mem_afh_map_hi 
+0x2884 004480 call afh_process_freq_map 
+:      004481 afh_process_con:
+0x2885 004482 fetch 1 ,mem_mode 
+0x2886 004483 rtnbit0 afh_enable 
+0x2887 004484 isolate1 1 ,bt_clk 
+0x2888 004485 branch afh_same_channel ,true 
+0x2889 004486 rshift3 temp ,rega 
+0x288a 004487 and temp ,7 ,queue 
+0x288b 004488 setarg mem_afh_map_lo 
+0x288c 004489 iadd rega ,rega 
+0x288d 004490 ifetch 1 ,rega 
+0x288e 004491 qisolate0 pdata 
+0x288f 004492 branch afh_process_1 ,true 
+0x2890 004493 deposit temp 
+0x2891 004494 branch afh_process_end 
+:      004495 afh_process_1:
+0x2892 004496 fetch 1 ,mem_afh_used 
+0x2893 004497 iforce regb 
+0x2894 004498 deposit bt_clk 
+0x2895 004499 and_into 0x180 ,pdata 
+0x2896 004500 rshift3 pdata ,pdata 
+0x2897 004501 iadd freq_index ,pdata 
+0x2898 004502 idiv regb 
+0x2899 004503 setarg mem_afh_map 
+0x289a 004504 call wait_div_end 
+0x289b 004505 remainder rega 
+0x289c 004506 iadd rega ,contr 
+0x289d 004507 ifetch 1 ,contr 
+:      004508 afh_process_end:
+0x289e 004509 store 1 ,mem_afh_index 
+0x289f 004510 iforce temp 
+0x28a0 004511 rtn 
+:      004513 afh_same_channel:
+0x28a1 004514 fetch 1 ,mem_afh_index 
+0x28a2 004515 iforce temp 
+0x28a3 004516 rtn 
+:      004518 afh_clear:
+0x28a4 004519 fetch 1 ,mem_mode 
+0x28a5 004520 set0 afh_enable ,pdata 
+0x28a6 004521 set0 afh_change ,pdata 
+0x28a7 004522 store 1 ,mem_mode 
+0x28a8 004523 rtn 
+:      004529 afh_process_freq_map:
+0x28a9 004530 bpatch patch0f_7 ,mem_patch0f 
+0x28aa 004531 arg mem_afh_map ,contw 
+0x28ab 004532 force 10 ,loopcnt 
+0x28ac 004533 call memset0 
+0x28ad 004534 arg mem_afh_map ,contw 
+0x28ae 004535 force 0 ,regc 
+0x28af 004536 force 2 ,queue 
+:      004537 process_freq_3:
+0x28b0 004538 fetch 5 ,mem_afh_map_lo 
+0x28b1 004539 iforce temp 
+0x28b2 004540 compare 2 ,queue ,0xff 
+0x28b3 004541 branch process_freq_1 ,true 
+0x28b4 004542 rshift temp ,temp 
+:      004543 process_freq_1:
+0x28b5 004544 isolate0 0 ,temp 
+0x28b6 004545 branch process_freq_0 ,true 
+0x28b7 004546 deposit regc 
+0x28b8 004547 istore 1 ,contw 
+:      004548 process_freq_0:
+0x28b9 004549 rshift2 temp ,temp 
+0x28ba 004550 increase 2 ,regc 
+0x28bb 004551 compare 40 ,regc ,0xfe 
+0x28bc 004552 nbranch process_freq_2 ,true 
+0x28bd 004553 fetch 5 ,mem_afh_map_hi 
+0x28be 004554 iforce temp 
+0x28bf 004555 compare 2 ,queue ,0xff 
+0x28c0 004556 branch process_freq_2 ,true 
+0x28c1 004557 rshift temp ,temp 
+:      004558 process_freq_2:
+0x28c2 004559 sub regc ,78 ,null 
+0x28c3 004560 branch process_freq_1 ,positive 
+0x28c4 004561 force 1 ,regc 
+0x28c5 004562 increase -1 ,queue 
+0x28c6 004563 nbranch process_freq_3 ,zero 
+0x28c7 004564 arg mem_afh_map ,rega 
+0x28c8 004565 deposit contw 
+0x28c9 004566 isub rega ,pdata 
+0x28ca 004567 store 1 ,mem_afh_used 
+0x28cb 004568 rtn 
+:      004570 rx_radio_freq:
+0x28cc 004571 bpatch patch10_0 ,mem_patch10 
+0x28cd 004572 call calc_radio_freq 
+0x28ce 004573 fetch 1 ,mem_debug_config 
+0x28cf 004574 bbit0 debug_rx_fixed_freq ,rx_radio_freq_now 
+0x28d0 004575 fetcht 1 ,mem_rx_fixed_freq 
+:      004576 rx_radio_freq_now:
+0x28d1 004577 branch set_freq_rx 
+:      004580 tx_radio_freq:
+0x28d2 004581 bpatch patch10_1 ,mem_patch10 
+0x28d3 004582 call calc_radio_freq 
+0x28d4 004583 fetch 1 ,mem_debug_config 
+0x28d5 004584 bbit0 debug_tx_fixed_freq ,tx_radio_freq_now 
+0x28d6 004585 fetcht 1 ,mem_tx_fixed_freq 
+:      004586 tx_radio_freq_now:
+0x28d7 004587 branch set_freq_tx 
+:      004590 fetch_giac:
+0x28d8 004591 force 0 ,uap 
+0x28d9 004592 fetch 3 ,mem_glap 
+0x28da 004593 iforce lap 
+0x28db 004594 rtn 
+:      004596 fetch_page_bt_adr:
+0x28dc 004597 bpatch patch10_2 ,mem_patch10 
+0x28dd 004598 fetch 1 ,mem_hci_puap 
+0x28de 004599 icopy uap 
+0x28df 004600 fetch 3 ,mem_hci_plap 
+0x28e0 004601 icopy lap 
+0x28e1 004602 rtn 
+:      004604 fetch_self_bt_adr:
+0x28e2 004605 bpatch patch10_3 ,mem_patch10 
+0x28e3 004606 fetch 2 ,mem_nap 
+0x28e4 004607 icopy nap 
+0x28e5 004608 fetch 1 ,mem_uap 
+0x28e6 004609 icopy uap 
+0x28e7 004610 fetch 3 ,mem_lap 
+0x28e8 004611 icopy lap 
+0x28e9 004612 rtn 
+:      004614 fetch_extm_bt_adr:
+0x28ea 004615 bpatch patch10_4 ,mem_patch10 
+0x28eb 004616 fetch 2 ,mem_pnap 
+0x28ec 004617 icopy nap 
+0x28ed 004618 fetch 1 ,mem_puap 
+0x28ee 004619 icopy uap 
+0x28ef 004620 fetch 3 ,mem_plap 
+0x28f0 004621 icopy lap 
+0x28f1 004622 rtn 
+:      004625 fetch_diac:
+0x28f2 004626 bmark1 mark_all_diac ,fetch_diac_do 
+0x28f3 004627 rtnmark0 mark_inquiry_state 
+0x28f4 004628 rtnmark0 mark_periodical_diac 
+:      004629 fetch_diac_do:
+0x28f5 004630 and_into -256 ,lap 
+0x28f6 004631 pulse recalc 
+0x28f7 004632 nop 32 
+0x28f8 004633 rtn 
+:      004636 shutdown_radio:
+0x28f9 004637 bpatch patch10_5 ,mem_patch10 
+0x28fa 004638 branch shutdown_radio0 ,is_rx 
+0x28fb 004639 jam 0xd4 ,rf_tx_pa_ib 
+0x28fc 004640 nop 4 
+0x28fd 004641 jam 0xd2 ,rf_tx_pa_ib 
+0x28fe 004642 nop 4 
+0x28ff 004643 jam 0xd1 ,rf_tx_pa_ib 
+0x2900 004644 nop 4 
+0x2901 004645 fetch 1 ,mem_tx_power 
+0x2902 004646 beq tx_power_0db ,shutdown_radio_0db 
+0x2903 004647 beq tx_power_3db ,shutdown_radio_3db 
+0x2904 004648 beq tx_power_5db ,shutdown_radio_5db 
+0x2905 004649 beq tx_power_f3db ,shutdown_radio_f3db 
+0x2906 004650 beq tx_power_f5db ,shutdown_radio_f5db 
+0x2907 004651 beq tx_power_pair ,shutdown_radio_pair 
+:      004652 shutdown_radio_5db:
+:      004653 shutdown_radio_0db:
+0x2908 004654 jam 0xd0 ,rf_tx_pa_ib 
+0x2909 004655 jam 0xe0 ,rf_tx_pa_gc 
+:      004656 shutdown_radio0:
+0x290a 004657 force 0 ,radio_ctrl 
+0x290b 004658 disable is_rx 
+0x290c 004659 disable is_tx 
+0x290d 004660 pulse packet_end 
+0x290e 004661 jam 0x0 ,rfen_mdm 
+0x290f 004662 jam 0x0 ,rfen_tx 
+0x2910 004663 jam 0x0 ,rfen_rx 
+0x2911 004664 jam 0 ,rfen_sn 
+0x2912 004665 jam 0x70 ,rfen_msc 
+0x2913 004666 jam 0x0 ,rfen_adc 
+0x2914 004667 rtn 
+:      004669 shutdown_radio_pair:
+:      004670 shutdown_radio_f5db:
+:      004671 shutdown_radio_f3db:
+:      004672 shutdown_radio_3db:
+0x2915 004673 jam 0xd0 ,rf_tx_pa_ib 
+0x2916 004674 jam 0xc0 ,rf_tx_pa_gc 
+0x2917 004675 branch shutdown_radio0 
+:      004677 set_sync_on:
+0x2918 004678 bpatch patch10_6 ,mem_patch10 
+0x2919 004679 jam 0x0 ,rfen_mdm 
+0x291a 004680 jam 0x0 ,rfen_tx 
+0x291b 004681 jam 0x18 ,rfen_rx 
+0x291c 004682 jam 0xa7 ,rfen_sn 
+0x291d 004683 jam 0x7f ,rfen_msc 
+0x291e 004684 rtn 
+:      004686 set_freq_rx:
+0x291f 004687 bpatch patch10_7 ,mem_patch10 
+0x2920 004689 storet 1 ,mem_last_freq 
+0x2921 004690 add temp ,rx_freq_offset ,rega 
+0x2922 004691 jam 0x07 ,rf_balun_ctrim 
+0x2923 004692 branch rf_write_freq 
+:      004693 rf_rx_enable:
+0x2924 004694 bpatch patch11_0 ,mem_patch11 
+0x2925 004695 jam 0xcf ,rfen_tx 
+0x2926 004696 nop 10 
+0x2927 004697 jam 0xff ,rfen_rx 
+0x2928 004698 jam 0xaf ,rfen_sn 
+0x2929 004699 jam 0xff ,rfen_msc 
+0x292a 004700 nop 10 
+0x292b 004701 jam 0xa0 ,rfen_mdm 
+0x292c 004702 rtn 
+:      004704 set_freq_tx_offset:
+0x292d 004705 fetch 1 ,mem_250k_freq_enable 
+0x292e 004706 branch set_freq_tx_2m_offset ,blank 
+:      004707 set_freq_tx_0m_offset:
+0x292f 004708 add temp ,2 ,rega 
+0x2930 004709 rtn 
+:      004710 set_freq_tx_2m_offset:
+0x2931 004711 add temp ,0 ,rega 
+0x2932 004712 rtn 
+:      004714 set_freq_tx:
+0x2933 004715 bpatch patch11_1 ,mem_patch11 
+0x2934 004716 storet 1 ,mem_last_freq 
+0x2935 004717 call set_freq_tx_offset 
+0x2936 004718 call rf_write_freq 
+0x2937 004719 setarg param_pll_setup 
+0x2938 004720 call sleep 
+:      004721 txon:
+0x2939 004722 jam 0x1 ,rfen_adc 
+0x293a 004723 jam 0x3c ,rfen_rx 
+0x293b 004724 jam 0xe0 ,rfen_tx 
+0x293c 004725 jam 0x12 ,rf_balun_ctrim 
+0x293d 004726 nop 10 
+0x293e 004727 jam 0x01 ,rfen_mdm 
+0x293f 004728 jam 0x3d ,rfen_mdm 
+0x2940 004729 nop 10 
+0x2941 004730 jam 0xb7 ,rfen_sn 
+0x2942 004731 nop 10 
+0x2943 004732 jam 0x7f ,rfen_mdm 
+:      004733 txon_power_select:
+0x2944 004734 fetch 1 ,mem_tx_power 
+0x2945 004735 beq tx_power_0db ,set_tx_power_0db 
+0x2946 004736 beq tx_power_3db ,set_tx_power_3db 
+0x2947 004737 beq tx_power_5db ,set_tx_power_5db 
+0x2948 004738 beq tx_power_f3db ,set_tx_power_f3db 
+0x2949 004739 beq tx_power_f5db ,set_tx_power_f5db 
+0x294a 004740 beq tx_power_pair ,set_tx_power_pair 
+:      004741 set_tx_power_0db:
+0x294b 004742 jam 0xf0 ,rf_tx_pa_gc 
+0x294c 004743 call txon_common 
+0x294d 004744 jam 0xd8 ,rf_tx_pa_ib 
+0x294e 004745 rtn 
+:      004747 set_tx_power_3db:
+0x294f 004748 jam 0xdf ,rf_tx_pa_gc 
+0x2950 004749 call txon_common 
+0x2951 004750 jam 0xdf ,rf_tx_pa_ib 
+0x2952 004751 rtn 
+:      004753 set_tx_power_5db:
+0x2953 004754 jam 0xff ,rf_tx_pa_gc 
+0x2954 004755 call txon_common 
+0x2955 004756 jam 0xdf ,rf_tx_pa_ib 
+0x2956 004757 rtn 
+:      004758 set_tx_power_f3db:
+0x2957 004759 jam 0xce ,rf_tx_pa_gc 
+0x2958 004760 call txon_common 
+0x2959 004761 jam 0xd8 ,rf_tx_pa_ib 
+0x295a 004762 rtn 
+:      004764 set_tx_power_f5db:
+0x295b 004765 jam 0xcb ,rf_tx_pa_gc 
+0x295c 004766 call txon_common 
+0x295d 004767 jam 0xd8 ,rf_tx_pa_ib 
+0x295e 004768 rtn 
+:      004770 set_tx_power_pair:
+0x295f 004771 jam 0xd0 ,rf_tx_pa_ib 
+0x2960 004772 jam 0xc0 ,rf_tx_pa_gc 
+0x2961 004773 jam 0x4c ,0x8957 
+0x2962 004774 jam 0x6c ,0x8958 
+0x2963 004775 jam 0x50 ,0x8959 
+0x2964 004776 rtn 
+:      004778 txon_common:
+0x2965 004779 nop 4 
+0x2966 004780 jam 0xd1 ,rf_tx_pa_ib 
+0x2967 004781 nop 4 
+0x2968 004782 jam 0xd2 ,rf_tx_pa_ib 
+0x2969 004783 nop 4 
+0x296a 004784 jam 0xd4 ,rf_tx_pa_ib 
+0x296b 004785 rtn 
+:      004788 initialize_radio:
+0x296c 004789 jam clksel_rc ,core_clksel 
+:      004790 initialize_radio_wait:
+0x296d 004791 fetch 2 ,mem_rf_init_ptr 
+0x296e 004792 bbit0 14 ,initialize_radio_wait 
+0x296f 004793 iforce contr 
+0x2970 004794 arg 0x8900 ,temp 
+:      004795 initialize_radio_loop:
+0x2971 004796 ifetch 1 ,contr 
+0x2972 004797 beq 0xff ,initialize_radio_cont 
+0x2973 004798 ior temp ,contw 
+0x2974 004799 ifetch 1 ,contr 
+0x2975 004800 istore 1 ,contw 
+0x2976 004801 branch initialize_radio_loop 
+:      004802 initialize_radio_cont:
+0x2977 004803 bpatch patch11_2 ,mem_patch11 
+0x2978 004804 call lpm_cal_xtal_startup 
+0x2979 004805 call switchto_dpllclk 
+0x297a 004807 setarg param_dpll_start_delay 
+0x297b 004808 iadd clkn_bt ,pdata 
+0x297c 004809 store 4 ,mem_dpll_clkn 
+0x297d 004810 set1 reset ,radio_ctrl 
+0x297e 004811 force 0 ,radio_ctrl 
+0x297f 004812 ncall do_rccal ,wake 
+0x2980 004813 branch set_rccal 
+:      004816 rf_write_freq:
+0x2981 004817 bpatch patch11_3 ,mem_patch11 
+0x2982 004818 setarg 2400 
+0x2983 004819 iadd rega ,temp 
+0x2984 004820 fetch 1 ,mem_fcomp_mul 
+0x2985 004821 jam 0x04 ,rf_pll_rstn 
+0x2986 004822 imul32 temp ,pdata 
+0x2987 004823 fetcht 1 ,mem_fcomp_div 
+0x2988 004824 idiv temp 
+0x2989 004825 call wait_div_end 
+0x298a 004826 quotient rega 
+0x298b 004827 remainder pdata 
+0x298c 004828 lshift16 pdata ,pdata 
+0x298d 004829 lshift4 pdata ,pdata 
+0x298e 004830 idiv temp 
+0x298f 004831 call wait_div_end 
+0x2990 004832 quotient pdata 
+0x2991 004833 lshift8 pdata ,pdata 
+0x2992 004834 lshift pdata ,pdata 
+0x2993 004835 ior rega ,pdata 
+0x2994 004836 hstore 4 ,rf_pll_intg 
+0x2995 004837 jam 0x44 ,rf_pll_rstn 
+0x2996 004838 jam 0xc4 ,rf_pll_rstn 
+0x2997 004839 rtn 
+:      004842 do_rccal:
+0x2998 004843 bpatch patch11_4 ,mem_patch11 
+0x2999 004844 jam 0x02 ,rfen_adc 
+0x299a 004845 setarg 250000 
+0x299b 004846 call sleep 
+0x299c 004847 jam 0x7f ,rfen_rx 
+0x299d 004848 nop 130 
+0x299e 004849 jam 0x30 ,rf_rccal_ctrl 
+0x299f 004850 jam 0xd0 ,rfen_tx 
+0x29a0 004851 jam 0x70 ,rf_rccal_ctrl 
+0x29a1 004852 jam 0xf0 ,rf_rccal_ctrl 
+0x29a2 004853 force 50 ,loopcnt 
+:      004854 do_rccal_loop:
+0x29a3 004855 hfetch 1 ,rf_rccal_result 
+0x29a4 004856 bbit1 5 ,do_rccal_end 
+0x29a5 004857 loop do_rccal_loop 
+:      004858 do_rccal_end:
+0x29a6 004859 store 1 ,mem_rf_rccal 
+0x29a7 004860 jam 0 ,rfen_tx 
+0x29a8 004861 jam 0 ,rfen_rx 
+0x29a9 004862 jam 0x00 ,rfen_adc 
+0x29aa 004863 rtn 
+:      004865 set_rccal:
+0x29ab 004866 bpatch patch11_5 ,mem_patch11 
+0x29ac 004867 fetch 1 ,mem_rf_rccal 
+0x29ad 004868 set1 5 ,pdata 
+0x29ae 004869 hstore 1 ,rf_rccal_ctrl 
+0x29af 004870 hfetcht 1 ,rf_bpf_ctrim 
+0x29b0 004871 and_into 7 ,temp 
+0x29b1 004872 lshift3 pdata ,pdata 
+0x29b2 004873 ior temp ,pdata 
+0x29b3 004874 hstore 1 ,rf_bpf_ctrim 
+0x29b4 004875 hfetch 1 ,rf_bpf_ib 
+0x29b5 004876 set0 bpf_rccal ,pdata 
+0x29b6 004877 hstore 1 ,rf_bpf_ib 
+0x29b7 004878 hfetch 1 ,rf_adc_rccal 
+0x29b8 004879 set0 adc_rccal ,pdata 
+0x29b9 004880 hstore 1 ,rf_adc_rccal 
+0x29ba 004881 rtn 
+:      004883 save_rssi:
+0x29bb 004884 bpatch patch11_6 ,mem_patch11 
+0x29bc 004885 hfetch 2 ,rf_afc_d2a 
+0x29bd 004886 rshift4 pdata ,pdata 
+0x29be 004887 rshift3 pdata ,pdata 
+0x29bf 004888 sub pdata ,0 ,pdata 
+:      004889 bcd:
+0x29c0 004890 and_into 0xff ,pdata 
+0x29c1 004891 div pdata ,10 
+0x29c2 004892 call wait_div_end 
+0x29c3 004893 quotient pdata 
+0x29c4 004894 lshift4 pdata ,pdata 
+0x29c5 004895 remainder temp 
+0x29c6 004896 ior temp ,pdata 
+0x29c7 004897 store 1 ,mem_rssi 
+0x29c8 004898 rtn 
+:      004901 switchto_dpllclk:
+0x29c9 004902 jam clksel_rc ,core_clksel 
+0x29ca 004903 hfetch 1 ,rf_clkpll_frac + 2 
+0x29cb 004904 set0 4 ,pdata 
+0x29cc 004905 set0 5 ,pdata 
+0x29cd 004906 hstore 1 ,rf_clkpll_frac + 2 
+0x29ce 004907 jam 0x00 ,rfen_ck 
+0x29cf 004908 jam 0x00 ,rfen_msc 
+0x29d0 004909 jam 0x70 ,rfen_msc 
+0x29d1 004910 jam 0xff ,rfen_ck 
+0x29d2 004911 hfetch 1 ,rf_clkpll_frac + 2 
+0x29d3 004912 set1 4 ,pdata 
+0x29d4 004913 set1 5 ,pdata 
+0x29d5 004914 hstore 1 ,rf_clkpll_frac + 2 
+0x29d6 004915 call init_lpm_ctrl 
+0x29d7 004916 hfetch 1 ,rf_clkpll_int 
+0x29d8 004917 set1 7 ,pdata 
+0x29d9 004918 hstore 1 ,rf_clkpll_int 
+0x29da 004919 set0 7 ,pdata 
+0x29db 004920 hstore 1 ,rf_clkpll_int 
+0x29dc 004921 set1 7 ,pdata 
+0x29dd 004922 hstore 1 ,rf_clkpll_int 
+0x29de 004923 jam clksel_dpll ,core_clksel 
+0x29df 004924 nop 1 
+0x29e0 004925 jam clksel_xtal ,core_clksel 
+0x29e1 004926 hfetch 1 ,rf_clkpll_frac + 2 
+0x29e2 004927 and_into 0xcf ,pdata 
+0x29e3 004928 hstore 1 ,rf_clkpll_frac + 2 
+0x29e4 004929 or_into 0x30 ,pdata 
+0x29e5 004930 hstore 1 ,rf_clkpll_frac + 2 
+0x29e6 004931 rtn 
+:      004934 xtal_fast_wake:
+0x29e7 004935 setarg 0xf0f 
+0x29e8 004936 branch lpm_write_config 
+:      004938 init_lpm_ctrl:
+0x29e9 004939 setarg 0x80f 
+0x29ea 004940 branch lpm_write_config 
+:      004944 start_receiver:
+0x29eb 004945 bpatch patch11_7 ,mem_patch11 
+0x29ec 004946 call rf_rx_enable 
+0x29ed 004947 disable is_tx 
+0x29ee 004948 enable is_rx 
+0x29ef 004949 pulse init_encrypt 
+0x29f0 004950 rtn 
+:      004952 prep_crypt:
+0x29f1 004953 bpatch patch12_0 ,mem_patch12 
+0x29f2 004954 fetch 1 ,mem_state_map 
+0x29f3 004955 isolate1 smap_encryption ,pdata 
+0x29f4 004956 setflag true ,0 ,pdata 
+0x29f5 004957 hstore 1 ,core_encrypt 
+0x29f6 004958 arg mem_kc ,contr 
+0x29f7 004959 ifetch 9 ,contr 
+0x29f8 004960 iforce kc_ls 
+0x29f9 004961 ifetch 7 ,contr 
+0x29fa 004962 iforce kc_ms 
+0x29fb 004963 fetch 1 ,mem_key_size 
+0x29fc 004964 add pdata ,-1 ,g1l 
+0x29fd 004965 pulse kc_p_activate 
+0x29fe 004966 rtn 
+:      004968 wait_access_end:
+0x29ff 004969 deposit clke 
+0x2a00 004970 store 6 ,mem_sync_clke 
+0x2a01 004971 disable decode_fec0 
+0x2a02 004972 nbranch shutdown_radio ,sync 
+0x2a03 004973 arg param_clke_cal ,clke_rt 
+0x2a04 004974 increase 1 ,clke_bt 
+0x2a05 004975 and_into 0x1fc ,clke_bt 
+0x2a06 004976 rtn 
+:      004980 wait_access_mhalfbnd:
+0x2a07 004981 enable decode_fec0 
+:      004982 wait_access_mhalfbnd_correlate:
+0x2a08 004983 correlate null ,mhalfbnd 
+0x2a09 004984 branch wait_access_end ,sync 
+0x2a0a 004985 compare 0x02 ,clke_bt ,0x02 
+0x2a0b 004986 nbranch wait_access_mhalfbnd_correlate ,true 
+0x2a0c 004987 branch wait_access_end 
+:      004989 wait_access_clkn_rt:
+0x2a0d 004990 bpatch patch12_1 ,mem_patch12 
+0x2a0e 004991 arg param_conn_access ,timeup 
+0x2a0f 004992 enable decode_fec0 
+0x2a10 004993 correlate clkn_rt ,meet 
+0x2a11 004994 disable decode_fec0 
+0x2a12 004995 nbranch shutdown_radio ,sync 
+0x2a13 004996 rtn 
+:      004998 wait_access_forever:
+0x2a14 004999 bpatch patch12_2 ,mem_patch12 
+0x2a15 005000 enable decode_fec0 
+0x2a16 005001 correlate null ,timeout 
+0x2a17 005002 disable decode_fec0 
+0x2a18 005003 nbranch shutdown_radio ,sync 
+0x2a19 005004 arg param_clke_cal ,clke_rt 
+0x2a1a 005005 and_into 0x1fc ,clke_bt 
+0x2a1b 005006 rtn 
+:      005009 reserve_slot:
+0x2a1c 005010 bpatch patch12_3 ,mem_patch12 
+0x2a1d 005011 iforce rega 
+0x2a1e 005012 deposit bt_clk 
+0x2a1f 005013 iadd temp ,timeup 
+0x2a20 005014 copy timeup ,pdata 
+0x2a21 005015 store 4 ,mem_next_btclk 
+0x2a22 005016 deposit rega 
+0x2a23 005017 rtn 
+:      005020 ahead_window:
+0x2a24 005021 copy pdata ,temp 
+0x2a25 005022 bpatch patch12_4 ,mem_patch12 
+0x2a26 005023 copy temp ,pdata 
+0x2a27 005024 call clk2bt 
+0x2a28 005025 lshift16 bt_clk ,pdata 
+0x2a29 005026 set1 44 ,pdata 
+0x2a2a 005027 call clk_diff 
+0x2a2b 005028 set0 44 ,pdata 
+0x2a2c 005029 call get_clk 
+0x2a2d 005030 call clk_diff 
+0x2a2e 005031 rtn user 
+0x2a2f 005032 call clk2rt 
+0x2a30 005033 iforce stop_watch 
+0x2a31 005034 until null ,timeout 
+0x2a32 005035 rtn 
+:      005038 setup_clk:
+0x2a33 005039 bpatch patch12_5 ,mem_patch12 
+0x2a34 005040 branch setup_clkn ,clknt 
+0x2a35 005041 until clke_rt ,meet 
+:      005042 skip_setup_clke:
+0x2a36 005043 copy clke_bt ,temp 
+0x2a37 005044 branch setup_clknbt 
+:      005045 setup_clkn:
+0x2a38 005046 branch skip_setup_clkn ,attempt 
+0x2a39 005047 until clkn_rt ,meet 
+:      005048 skip_setup_clkn:
+0x2a3a 005049 copy clkn_bt ,temp 
+:      005050 setup_clknbt:
+0x2a3b 005051 branch setup_clk11 ,user 
+0x2a3c 005052 compare 1 ,temp ,3 
+0x2a3d 005053 nbranch setup_clk ,true 
+:      005054 setup_complete:
+0x2a3e 005055 bpatch patch12_6 ,mem_patch12 
+0x2a3f 005056 fetch 1 ,mem_state 
+0x2a40 005057 rtnbit0 state_inconn 
+0x2a41 005058 fetch 4 ,mem_next_btclk 
+0x2a42 005059 isub temp ,pdata 
+0x2a43 005060 nrtn positive 
+0x2a44 005061 sub pdata ,0xff ,null 
+0x2a45 005062 branch setup_clk ,positive 
+0x2a46 005063 rtn 
+:      005064 setup_clk11:
+0x2a47 005065 compare 3 ,temp ,3 
+0x2a48 005066 nbranch setup_clk ,true 
+0x2a49 005067 branch setup_complete 
+:      005069 rf_setup_time:
+0x2a4a 005070 bpatch patch12_7 ,mem_patch12 
+0x2a4b 005071 arg param_rf_setup ,timeup 
+0x2a4c 005072 branch setup_clk 
+:      005074 rf_setup_time_slave_slot:
+0x2a4d 005075 disable user 
+0x2a4e 005076 branch rf_setup_time 
+:      005078 rf_setup_time_master_slot:
+0x2a4f 005079 enable user 
+0x2a50 005080 branch rf_setup_time 
+:      005082 start_transmitter:
+0x2a51 005083 bpatch patch13_0 ,mem_patch13 
+0x2a52 005084 call prep_crypt 
+0x2a53 005085 disable is_rx 
+0x2a54 005086 enable is_tx 
+0x2a55 005087 rtn 
+:      005091 start_tx_native:
+0x2a56 005092 bpatch patch13_1 ,mem_patch13 
+0x2a57 005093 arg param_tx_setup ,timeup 
+0x2a58 005094 until clkn_rt ,meet 
+0x2a59 005095 pulse init_encrypt 
+0x2a5a 005096 rtn 
+:      005098 start_rx_native:
+0x2a5b 005099 bpatch patch13_2 ,mem_patch13 
+0x2a5c 005100 arg param_rx_setup ,timeup 
+0x2a5d 005101 until clkn_rt ,meet 
+0x2a5e 005102 rtn 
+:      005105 start_tx_external:
+0x2a5f 005106 bpatch patch13_3 ,mem_patch13 
+0x2a60 005107 arg param_tx_setup ,timeup 
+0x2a61 005108 until clke_rt ,meet 
+0x2a62 005109 pulse init_encrypt 
+0x2a63 005110 rtn 
+:      005112 send_access_word:
+0x2a64 005113 bpatch patch13_4 ,mem_patch13 
+0x2a65 005114 preload access 
+0x2a66 005115 enable encode_fec0 
+0x2a67 005116 set1 txgfsk ,radio_ctrl 
+0x2a68 005117 inject mod ,72 
+0x2a69 005118 disable encode_fec0 
+0x2a6a 005119 rtn 
+:      005122 scan_mode_whiten:
+0x2a6b 005123 copy xin ,temp 
+0x2a6c 005124 or_into 0x60 ,temp 
+0x2a6d 005125 copy temp ,white_init 
+0x2a6e 005126 rtn 
+:      005131 get_free_amaddr:
+0x2a6f 005132 bpatch patch13_5 ,mem_patch13 
+0x2a70 005133 fetch 1 ,mem_current_amaddr 
+0x2a71 005134 increase 1 ,pdata 
+0x2a72 005135 bne param_esco_addr ,get_free_amaddr_cont 
+0x2a73 005136 force 1 ,pdata 
+:      005137 get_free_amaddr_cont:
+0x2a74 005138 store 1 ,mem_current_amaddr 
+0x2a75 005139 iforce am_addr 
+0x2a76 005140 rtn 
+:      005142 get_clk:
+0x2a77 005143 copy clkn ,temp 
+0x2a78 005144 rtn master 
+0x2a79 005145 copy clke ,temp 
+0x2a7a 005146 rtn 
+:      005148 get_clkbt:
+0x2a7b 005149 deposit clkn_bt 
+0x2a7c 005150 rtn master 
+0x2a7d 005151 deposit clke_bt 
+0x2a7e 005152 rtn 
+:      005155 supervision_update:
+0x2a7f 005156 bpatch patch13_6 ,mem_patch13 
+0x2a80 005157 fetcht 4 ,mem_supervision_timer 
+0x2a81 005158 call get_clkbt 
+0x2a82 005159 isub temp ,timeup 
+0x2a83 005160 deposit timeup 
+0x2a84 005161 fetcht 2 ,mem_supervision_to 
+0x2a85 005162 lshift temp ,temp 
+0x2a86 005163 isub temp ,pdata 
+0x2a87 005164 rtn 
+:      005166 supervision_flush:
+0x2a88 005167 bpatch patch13_7 ,mem_patch13 
+0x2a89 005168 call get_clkbt 
+0x2a8a 005169 store 4 ,mem_supervision_timer 
+0x2a8b 005170 rtn 
+:      005172 assert:
+0x2a8c 005173 bpatch patch14_0 ,mem_patch14 
+0x2a8d 005174 branch assert 
+:      005176 loop:
+0x2a8e 005177 branch loop 
+:      005179 sleep:
+0x2a8f 005180 rtn blank 
+0x2a90 005182 rshift pdata ,pdata 
+0x2a91 005183 increase -3 ,pdata 
+:      005184 sleep_loop:
+0x2a92 005185 increase -1 ,pdata 
+0x2a93 005186 nbranch sleep_loop ,zero 
+0x2a94 005187 force 0 ,pdata 
+0x2a95 005188 rtn 
+:      005192 init_param:
+0x2a96 005194 arg 0x10 ,loopcnt 
+0x2a97 005195 arg 0 ,contw 
+0x2a98 005196 call memset0 
+0x2a99 005197 arg mem_le_state ,contw 
+0x2a9a 005198 arg 10 ,loopcnt 
+0x2a9b 005199 call memset0 
+0x2a9c 005200 jam 0 ,mem_sp_calc 
+0x2a9d 005201 jam 0 ,mem_fifo_temp 
+0x2a9e 005202 jam 0 ,mem_le_testtype 
+0x2a9f 005203 jam 0 ,mem_debug_config 
+0x2aa0 005204 jam 0 ,mem_lmp_conn_state 
+0x2aa1 005205 bpatch patch14_1 ,mem_patch14 
+0x2aa2 005206 jam 0 ,mem_connection_options 
+0x2aa3 005207 jam 0 ,mem_tester_emulate 
+0x2aa4 005208 jam 0 ,mem_tester_cnt 
+0x2aa5 005209 setarg param_glap 
+0x2aa6 005210 store 3 ,mem_glap 
+0x2aa7 005211 setarg param_acl_pktlen 
+0x2aa8 005212 store 2 ,mem_acl_pktlen 
+0x2aa9 005213 jam param_sco_pktlen ,mem_sco_pktlen 
+0x2aaa 005214 jam param_acl_pktcnt ,mem_acl_pktcnt 
+0x2aab 005215 jam param_sco_pktcnt ,mem_sco_pktcnt 
+0x2aac 005216 setarg param_hci_version 
+0x2aad 005217 store 3 ,mem_hci_version 
+0x2aae 005222 jam 0x60 ,mem_fhs_misc 
+0x2aaf 005223 jam param_max_slot ,mem_max_slot 
+0x2ab0 005224 jam 0x02 ,mem_fw_ver 
+0x2ab1 005225 fetch 1 ,mem_ssp_enable 
+0x2ab2 005226 ncall init_memp ,blank 
+0x2ab3 005227 fetch 1 ,mem_le_secure_connect_enable 
+0x2ab4 005228 ncall init_memp_256 ,blank 
+0x2ab5 005229 bpatch patch14_2 ,mem_patch14 
+0x2ab6 005230 rtn wake 
+0x2ab7 005231 setarg 0 
+0x2ab8 005232 store 2 ,mem_tx_len 
+0x2ab9 005233 rshift clkn_bt ,pdata 
+0x2aba 005234 store 4 ,mem_last_clkn 
+0x2abb 005235 rtn 
+:      005242 lpmstate:
+0x2abc 005243 setarg 0xee21 
+0x2abd 005244 hstore 2 ,core_clkoff 
+0x2abe 005245 hfetch 4 ,core_gpio_in 
+0x2abf 005246 store 4 ,mem_saved_gpio_in 
+0x2ac0 005247 hfetch 1 ,core_lpm_ldocnt 
+0x2ac1 005248 store 1 ,mem_wakup_from_power_flag 
+0x2ac2 005249 bbit0 gpio_latch ,loadcode 
+0x2ac3 005250 enable wake 
+0x2ac4 005251 bbit0 cold_wake ,lpmwake 
+0x2ac5 005252 disable wake 
+0x2ac6 005253 deposit auxcnt 
+0x2ac7 005254 nbranch lpmwake ,blank 
+0x2ac8 005255 hfetch 1 ,core_lpm_ctrl + 3 
+0x2ac9 005256 bbit1 reload_code ,lpmwake 
+0x2aca 005257 arg param_hibernate_clks ,temp 
+0x2acb 005258 branch lpm_enter_sleep 
+:      005259 lpmwake:
+0x2acc 005260 hfetch 3 ,core_lpm_xtalcnt 
+0x2acd 005261 hstore 3 ,core_lpm_reg 
+0x2ace 005262 ifetch 1 ,contr 
+0x2acf 005263 or_into isogate_mask ,pdata 
+0x2ad0 005264 istore 1 ,contw 
+0x2ad1 005265 call lpm_write_ctrl2 
+0x2ad2 005266 hfetch 1 ,core_lpm_isogate 
+0x2ad3 005267 set1 enable_retmem ,pdata 
+0x2ad4 005268 hstore 1 ,core_lpm_isogate 
+0x2ad5 005269 call lpm_write_ctrl2 
+0x2ad6 005270 call lpm_load_context ,wake 
+0x2ad7 005271 hfetch 1 ,core_lpm_reg + 2 
+0x2ad8 005272 set0 gpio_latch ,pdata 
+0x2ad9 005273 hstore 1 ,core_lpm_reg + 2 
+0x2ada 005274 call lpm_write_ctrl2 
+0x2adb 005275 nbranch loadcode ,wake 
+0x2adc 005276 rtnmark0 mark_otp_encrypt 
+0x2add 005277 jam lock_otp ,core_misc_ctrl 
+0x2ade 005278 rtn 
+:      005280 lpm_load_context:
+0x2adf 005281 fetch 1 ,mem_saved_spidctrl 
+0x2ae0 005282 hstore 1 ,core_spid_ctrl 
+0x2ae1 005283 fetch 3 ,mem_saved_gsel 
+0x2ae2 005284 hstore 3 ,core_gpio_sel 
+0x2ae3 005285 fetch 4 ,mem_saved_gpio + 4 
+0x2ae4 005286 hstore 4 ,core_gpio_out0 
+0x2ae5 005287 fetch 4 ,mem_saved_gpio 
+0x2ae6 005288 hstore 4 ,core_gpio_oe0 
+0x2ae7 005289 fetch 8 ,mem_saved_gpio + 8 
+0x2ae8 005290 hstore 8 ,core_gpio_pu0 
+0x2ae9 005291 fetch 8 ,mem_saved_mark 
+0x2aea 005292 iforce mark 
+0x2aeb 005293 hfetch 8 ,core_gpio_wakeup_low 
+0x2aec 005294 store 8 ,mem_gpio_wakeup_low 
+0x2aed 005295 call load_ucode 
+0x2aee 005296 rtn 
+:      005298 lpm_save_context:
+0x2aef 005299 deposit mark 
+0x2af0 005300 store 8 ,mem_saved_mark 
+0x2af1 005301 hfetch 8 ,core_gpio_oe0 
+0x2af2 005302 store 8 ,mem_saved_gpio 
+0x2af3 005303 ifetch 8 ,contr 
+0x2af4 005304 istore 8 ,contw 
+0x2af5 005305 hfetch 3 ,core_gpio_sel 
+0x2af6 005306 store 3 ,mem_saved_gsel 
+0x2af7 005307 hfetch 1 ,core_spid_ctrl 
+0x2af8 005308 store 1 ,mem_saved_spidctrl 
+0x2af9 005309 branch lpm_write_gpio_wakeup 
+:      005311 lpo_calibration:
+0x2afa 005312 hfetch 1 ,core_bist_ctrl 
+0x2afb 005313 nbranch lpo_cal_inited ,blank 
+0x2afc 005314 fetch 3 ,mem_clks_per_lpo 
+0x2afd 005315 nrtn blank 
+0x2afe 005316 jam 0xc0 ,core_bist_ctrl 
+0x2aff 005317 jam ccnt_start ,core_misc_ctrl 
+:      005318 lpo_cal_inited:
+0x2b00 005319 hfetch 1 ,core_perf_status 
+0x2b01 005320 rtnbit0 1 
+0x2b02 005321 hfetch 3 ,core_clk_counter 
+0x2b03 005322 store 3 ,mem_clks_per_lpo 
+0x2b04 005323 rtn 
+:      005327 lpm_adjust_clk:
+0x2b05 005328 bpatch patch14_3 ,mem_patch14 
+0x2b06 005329 deposit clke 
+0x2b07 005330 call clk_diff_rt 
+0x2b08 005331 fetcht 4 ,mem_sleep_counter_all 
+0x2b09 005332 sub temp ,0xff ,null 
+0x2b0a 005333 rtn positive 
+0x2b0b 005334 lshift8 pdata ,pdata 
+0x2b0c 005335 lshift4 pdata ,pdata 
+0x2b0d 005336 idiv temp 
+0x2b0e 005337 call wait_div_end 
+0x2b0f 005338 quotient pdata 
+0x2b10 005339 arg param_lpm_adjmax ,temp 
+0x2b11 005340 call ceiling 
+0x2b12 005341 store 1 ,mem_lpm_adjust 
+0x2b13 005342 nbranch lpm_adjust_positive ,user 
+0x2b14 005343 sub pdata ,0 ,pdata 
+:      005344 lpm_adjust_positive:
+0x2b15 005345 fetcht 3 ,mem_clks_per_lpo 
+0x2b16 005346 iadd temp ,pdata 
+0x2b17 005347 store 3 ,mem_clks_per_lpo 
+:      005348 lpm_clear_counter:
+0x2b18 005349 setarg 0 
+0x2b19 005350 store 4 ,mem_sleep_counter_all 
+0x2b1a 005351 rtn 
+:      005355 lpm_doze:
+0x2b1b 005356 fetch 1 ,mem_lpm_config + 2 
+0x2b1c 005357 set1 reload_code ,pdata 
+0x2b1d 005358 store 1 ,mem_lpm_config + 2 
+0x2b1e 005359 branch lpm_hibernate_normal 
+:      005363 lpm_hibernate:
+0x2b1f 005364 arg param_hibernate_clks ,temp 
+0x2b20 005365 fetch 1 ,mem_lpm_config + 1 
+0x2b21 005366 set0 7 ,pdata 
+0x2b22 005367 store 1 ,mem_lpm_config + 1 
+:      005368 lpm_hibernate_normal:
+0x2b23 005369 bpatch patch14_4 ,mem_patch14 
+0x2b24 005370 call lpm_write_gpio_wakeup 
+0x2b25 005371 fetch 1 ,mem_lpm_hibernate_switch 
+0x2b26 005372 store 1 ,mem_lpm_xtalcnt + 4 
+0x2b27 005373 fetch 1 ,mem_lpm_xtalcnt + 2 
+0x2b28 005374 set1 cold_wake ,pdata 
+0x2b29 005375 store 1 ,mem_lpm_xtalcnt + 2 
+:      005378 lpm_sleep:
+0x2b2a 005379 bpatch patch14_5 ,mem_patch14 
+0x2b2b 005380 call xtal_fast_wake 
+0x2b2c 005381 fetch 4 ,mem_sleep_counter_all 
+0x2b2d 005382 iadd temp ,pdata 
+0x2b2e 005383 store 4 ,mem_sleep_counter_all 
+0x2b2f 005384 call lpm_save_context 
+0x2b30 005385 fetch 5 ,mem_lpm_xtalcnt 
+0x2b31 005386 hstore 4 ,core_lpm_reg 
+0x2b32 005387 rshift32 pdata ,rega 
+0x2b33 005388 until null ,lpo_edge 
+0x2b34 005389 deposit clkn 
+0x2b35 005390 store 6 ,mem_sleep_clkn 
+0x2b36 005391 jam lpmreg_sel_ctrl2 ,core_lpm_wr 
+0x2b37 005392 until null ,lpo_edge 
+0x2b38 005393 until null ,lpo_edge 
+0x2b39 005394 deposit rega 
+0x2b3a 005395 hstore 1 ,core_lpm_isogate 
+0x2b3b 005396 jam lpmreg_sel_ctrl2 ,core_lpm_wr 
+:      005397 lpm_enter_sleep:
+0x2b3c 005398 until null ,lpo_edge 
+0x2b3d 005399 until null ,lpo_edge 
+0x2b3e 005400 hstoret 4 ,core_lpm_reg 
+0x2b3f 005401 jam lpmreg_sel_counter ,core_lpm_wr 
+0x2b40 005402 until null ,never 
+:      005407 lpm_recover_clk:
+0x2b41 005408 bpatch patch14_6 ,mem_patch14 
+0x2b42 005409 setarg 0 
+0x2b43 005410 copy auxcnt ,null 
+0x2b44 005411 branch lpm_recover_timeout ,zero 
+0x2b45 005412 hfetch 1 ,core_lpm_xtalcnt 
+0x2b46 005413 hfetcht 1 ,core_lpm_buckcnt 
+0x2b47 005414 isub temp ,null 
+0x2b48 005415 branch lpm_recover_xtal ,positive 
+0x2b49 005416 deposit temp 
+:      005417 lpm_recover_xtal:
+0x2b4a 005418 isub auxcnt ,pdata 
+0x2b4b 005419 increase 1 ,pdata 
+:      005420 lpm_recover_timeout:
+0x2b4c 005421 increase 8 ,pdata 
+0x2b4d 005422 until null ,lpo_edge 
+0x2b4e 005423 iadd lpo_time ,pdata 
+0x2b4f 005424 fetcht 4 ,mem_sleep_counter 
+0x2b50 005425 iadd temp ,pdata 
+0x2b51 005426 fetcht 3 ,mem_clks_per_lpo 
+0x2b52 005427 imul32 temp ,pdata 
+0x2b53 005428 rshift8 pdata ,pdata 
+0x2b54 005429 rshift4 pdata ,pdata 
+0x2b55 005430 increase param_lpm_fix ,pdata 
+0x2b56 005431 arg 3750 ,temp 
+0x2b57 005432 idiv temp 
+0x2b58 005433 call wait_div_end 
+0x2b59 005434 quotient pdata 
+0x2b5a 005435 lshift16 pdata ,pdata 
+0x2b5b 005436 remainder temp 
+0x2b5c 005437 ior temp ,pdata 
+0x2b5d 005438 fetcht 6 ,mem_sleep_clkn 
+0x2b5e 005439 call clk_add 
+0x2b5f 005440 copy temp ,clkn 
+0x2b60 005441 fetch 6 ,mem_context + coffset_clk_offset 
+0x2b61 005442 call calc_clke2 
+0x2b62 005443 deposit clke 
+0x2b63 005444 store 6 ,mem_pdatatemp 
+0x2b64 005445 deposit auxcnt 
+0x2b65 005446 istore 1 ,contw 
+0x2b66 005447 hfetch 1 ,core_gpio_in1 
+0x2b67 005448 or_into 0xf0 ,pdata 
+0x2b68 005449 istore 1 ,contw 
+0x2b69 005450 rtn 
+:      005452 lpm_dispatch:
+0x2b6a 005453 bpatch patch14_7 ,mem_patch14 
+0x2b6b 005454 call lpo_calibration 
+0x2b6c 005455 fetch 3 ,mem_clks_per_lpo 
+0x2b6d 005456 rtn blank 
+0x2b6e 005457 fetch 1 ,mem_lpm_mode 
+0x2b6f 005458 rtn blank 
+0x2b70 005459 fetch 1 ,mem_ssp_enable 
+0x2b71 005460 branch lpm_dispatch_next ,blank 
+0x2b72 005461 fetch 1 ,mem_sp_local_key_invalid 
+0x2b73 005462 rtn blank 
+:      005463 lpm_dispatch_next:
+0x2b74 005464 fetch 1 ,mem_le_sc_calc 
+0x2b75 005465 nrtn blank 
+0x2b76 005466 call lpm_check_wake_lock 
+0x2b77 005467 nrtn blank 
+0x2b78 005468 fetch 1 ,mem_context 
+0x2b79 005469 compare 3 ,pdata ,0x7 
+0x2b7a 005470 nbranch lpm_dispatch_unconn ,true 
+0x2b7b 005471 fetch 2 ,mem_context + coffset_tsniff 
+0x2b7c 005472 rtn blank 
+0x2b7d 005473 rtn wake 
+0x2b7e 005474 bpatch patch15_0 ,mem_patch15 
+:      005475 lpm_dispatch_next2:
+0x2b7f 005476 fetcht 1 ,mem_lpm_current_mult 
+0x2b80 005477 fetch 2 ,mem_context + coffset_tsniff 
+0x2b81 005478 imul32 temp ,pdata 
+0x2b82 005479 rshift4 temp ,temp 
+0x2b83 005480 rshift2 temp ,temp 
+0x2b84 005481 isub temp ,pdata 
+0x2b85 005482 fetcht 4 ,mem_context + coffset_sniff_anchor 
+0x2b86 005483 iadd temp ,pdata 
+0x2b87 005484 fetcht 1 ,mem_lpm_overhead 
+0x2b88 005485 isub temp ,pdata 
+0x2b89 005486 lshift16 pdata ,alarm 
+0x2b8a 005487 bpatch patch15_1 ,mem_patch15 
+0x2b8b 005488 fetch 2 ,mem_context + coffset_rx_window 
+0x2b8c 005489 rshift pdata ,pdata 
+0x2b8d 005490 call clk2bt 
+0x2b8e 005491 deposit alarm 
+0x2b8f 005492 call clk_diff 
+0x2b90 005493 copy clke ,temp 
+0x2b91 005494 call clk_diff_rt 
+0x2b92 005495 rtn user 
+:      005496 lpm_dispatch_sleep:
+0x2b93 005497 call clk2lpo 
+:      005498 lpm_dispatch_lpo:
+0x2b94 005499 bpatch patch15_2 ,mem_patch15 
+0x2b95 005500 fetch 1 ,mem_lpm_xtalcnt 
+0x2b96 005501 isub temp ,null 
+0x2b97 005502 branch lpm_clear_counter ,positive 
+0x2b98 005503 storet 4 ,mem_sleep_counter 
+0x2b99 005504 call app_will_enter_lpm 
+0x2b9a 005505 call l2cap_lpm_save_txbuf 
+0x2b9b 005506 fetcht 4 ,mem_sleep_counter 
+0x2b9c 005507 branch lpm_sleep 
+:      005509 lpm_dispatch_unconn:
+0x2b9d 005510 bpatch patch15_3 ,mem_patch15 
+0x2b9e 005511 fetch 1 ,mem_context 
+0x2b9f 005512 rtnbit1 state_inconn 
+0x2ba0 005513 rtnbit1 state_inpage 
+0x2ba1 005514 fetch 1 ,mem_ssp_enable 
+0x2ba2 005515 branch lpm_unconn_nossp ,blank 
+0x2ba3 005516 fetch 1 ,mem_sp_local_key_invalid 
+0x2ba4 005517 rtn blank 
+:      005518 lpm_unconn_nossp:
+0x2ba5 005519 bpatch patch15_4 ,mem_patch15 
+0x2ba6 005520 fetch 1 ,mem_le_adv_enable 
+0x2ba7 005521 nbranch lpm_unconn_cont ,blank 
+0x2ba8 005522 fetch 1 ,mem_scan_mode 
+0x2ba9 005523 rtn blank 
+:      005524 lpm_unconn_cont:
+0x2baa 005525 fetch 2 ,mem_lpm_interval 
+0x2bab 005526 rtn blank 
+:      005527 lpm_sleep_btclk:
+0x2bac 005528 fetcht 1 ,mem_lpm_overhead 
+0x2bad 005529 isub temp ,pdata 
+0x2bae 005530 arg 7500 ,temp 
+0x2baf 005531 imul32 temp ,pdata 
+0x2bb0 005532 branch lpm_dispatch_sleep 
+:      005534 lpm_set_mult:
+0x2bb1 005535 bpatch patch15_5 ,mem_patch15 
+0x2bb2 005536 disable wake 
+0x2bb3 005537 fetch 1 ,mem_state 
+0x2bb4 005538 rtnbit0 state_insniff 
+0x2bb5 005539 nbranch lpm_not_match ,match 
+0x2bb6 005540 call lpm_match 
+0x2bb7 005541 fetch 2 ,mem_rx_window_sniff 
+0x2bb8 005542 store 2 ,mem_rx_window 
+0x2bb9 005543 fetch 1 ,mem_arq 
+0x2bba 005544 bbit1 wack ,lpm_mult_short 
+0x2bbb 005545 bmark0 mark_lpm_mult_enable ,lpm_mult_short 
+0x2bbc 005546 call l2cap_malloc_is_fifo_empty 
+0x2bbd 005547 nbranch lpm_mult_short ,blank 
+0x2bbe 005548 fetch 1 ,mem_classic_bt_flag 
+0x2bbf 005549 bbit1 short_mult_flag ,lpm_mult_short 
+:      005550 lpm_mult_wait_timeout:
+0x2bc0 005551 jam 0 ,mem_lpm_current_mult 
+0x2bc1 005552 bmark0 mark_lpm_mult_enable ,lpm_mult_short 
+0x2bc2 005553 fetch 1 ,mem_lpm_mult_cnt 
+0x2bc3 005554 branch lpm_mult_long ,blank 
+0x2bc4 005555 increase -1 ,pdata 
+0x2bc5 005556 store 1 ,mem_lpm_mult_cnt 
+0x2bc6 005557 rtn 
+:      005560 classic_bt_set_mult_short_flag:
+0x2bc7 005561 arg short_mult_flag ,queue 
+0x2bc8 005562 branch classic_bluetooth_set_flag 
+:      005564 classic_bt_clr_mult_short_flag:
+0x2bc9 005565 arg short_mult_flag ,queue 
+0x2bca 005566 branch classic_bluetooth_clr_flag 
+:      005570 lpm_match:
+0x2bcb 005571 jam 0 ,mem_sniff_unint_lost 
+0x2bcc 005572 fetch 3 ,mem_sniff_rcv 
+0x2bcd 005573 increase 1 ,pdata 
+0x2bce 005574 store 3 ,mem_sniff_rcv 
+0x2bcf 005575 rtn 
+:      005577 lpm_not_match:
+0x2bd0 005578 bpatch patch15_6 ,mem_patch15 
+0x2bd1 005579 fetcht 2 ,mem_rx_window_sniff 
+0x2bd2 005580 rshift temp ,temp 
+0x2bd3 005581 fetch 2 ,mem_rx_window 
+0x2bd4 005582 iadd temp ,pdata 
+0x2bd5 005583 store 2 ,mem_rx_window 
+:      005584 lpm_lost:
+0x2bd6 005585 jam 0 ,mem_lpm_current_mult 
+0x2bd7 005586 fetch 3 ,mem_sniff_lost 
+0x2bd8 005587 increase 1 ,pdata 
+0x2bd9 005588 store 3 ,mem_sniff_lost 
+0x2bda 005589 fetch 1 ,mem_sniff_unint_lost 
+0x2bdb 005590 increase 1 ,pdata 
+0x2bdc 005591 store 1 ,mem_sniff_unint_lost 
+0x2bdd 005592 rtn 
+:      005594 lpm_mult_short:
+0x2bde 005595 jam 0 ,mem_lpm_current_mult 
+0x2bdf 005596 fetch 1 ,mem_lpm_mult_timeout 
+0x2be0 005597 store 1 ,mem_lpm_mult_cnt 
+0x2be1 005598 rtn 
+:      005600 lpm_mult_long:
+0x2be2 005601 fetcht 1 ,mem_lpm_mult 
+0x2be3 005602 storet 1 ,mem_lpm_current_mult 
+0x2be4 005603 rtn 
+:      005605 lpm_cal_xtal_startup:
+0x2be5 005606 bpatch patch15_7 ,mem_patch15 
+0x2be6 005607 fetch 1 ,mem_lpm_xtalcnt 
+0x2be7 005608 nrtn blank 
+0x2be8 005609 jam clksel_rc ,core_clksel 
+0x2be9 005610 setarg 0xf0c 
+0x2bea 005611 call lpm_write_config 
+0x2beb 005612 setarg 200000 
+0x2bec 005613 call sleep 
+0x2bed 005614 until null ,lpo_edge 
+0x2bee 005615 copy lpo_time ,alarm 
+0x2bef 005616 call xtal_fast_wake 
+0x2bf0 005617 jam clksel_xtal ,core_clksel 
+0x2bf1 005618 nop 10 
+0x2bf2 005619 until null ,lpo_edge 
+0x2bf3 005620 deposit lpo_time 
+0x2bf4 005621 isub alarm ,pdata 
+0x2bf5 005622 increase 0x30 ,pdata 
+0x2bf6 005623 arg 0xff ,temp 
+0x2bf7 005624 call ceiling 
+0x2bf8 005625 store 1 ,mem_lpm_xtalcnt 
+0x2bf9 005626 nop 30000 
+0x2bfa 005627 nop 30000 
+0x2bfb 005628 nop 30000 
+0x2bfc 005629 rtn 
+:      005631 lpm_cal_xtal_startup_by_snooze:
+0x2bfd 005632 fetch 1 ,mem_lpm_xtalcnt 
+0x2bfe 005633 nrtn blank 
+0x2bff 005634 jam 0xff ,core_xtal_stable_time 
+0x2c00 005635 jam clksel_rc ,core_clksel 
+0x2c01 005636 call xtal_fast_wake 
+0x2c02 005637 setarg 1000 
+0x2c03 005638 iadd lpo_time ,alarm 
+0x2c04 005639 snooze 
+0x2c05 005640 deposit lpo_time 
+0x2c06 005641 nop 12000 
+0x2c07 005642 nop 12000 
+0x2c08 005643 nop 12000 
+0x2c09 005644 nop 12000 
+0x2c0a 005645 nop 12000 
+0x2c0b 005646 nop 12000 
+0x2c0c 005647 nop 12000 
+0x2c0d 005648 nop 12000 
+0x2c0e 005649 nop 12000 
+0x2c0f 005650 isub alarm ,pdata 
+0x2c10 005651 add pdata ,0x30 ,pdata 
+0x2c11 005652 arg 0xff ,temp 
+0x2c12 005653 call ceiling 
+0x2c13 005654 store 1 ,mem_lpm_xtalcnt 
+0x2c14 005655 nop 30000 
+0x2c15 005656 nop 30000 
+0x2c16 005657 nop 30000 
+0x2c17 005658 rtn 
+:      005663 lpm_write_config:
+0x2c18 005664 arg 0xfff ,contw 
+0x2c19 005665 iand contw ,contw 
+0x2c1a 005666 fetch 1 ,mem_lpm_config 
+0x2c1b 005667 and_into 0xf0 ,pdata 
+0x2c1c 005668 lshift8 pdata ,pdata 
+0x2c1d 005669 ior contw ,pdata 
+0x2c1e 005670 hstore 2 ,core_lpm_reg 
+0x2c1f 005671 ifetch 2 ,contr 
+0x2c20 005672 istore 2 ,contw 
+:      005674 lpm_write_ctrl:
+0x2c21 005675 setarg lpmreg_sel_ctrl 
+0x2c22 005676 branch lpm_write 
+:      005678 lpm_write_ctrl2:
+0x2c23 005679 setarg lpmreg_sel_ctrl2 
+:      005680 lpm_write:
+0x2c24 005681 until null ,lpo_edge 
+0x2c25 005682 hstore 1 ,core_lpm_wr 
+0x2c26 005683 until null ,lpo_edge 
+0x2c27 005684 until null ,lpo_edge 
+0x2c28 005685 rtn 
+:      005688 lpm_write_gpio_wakeup:
+0x2c29 005689 bpatch patch16_0 ,mem_patch16 
+0x2c2a 005690 fetch 4 ,mem_gpio_wakeup_low 
+0x2c2b 005691 hstore 4 ,core_lpm_reg 
+0x2c2c 005692 setarg lpmreg_sel_gpiolow 
+0x2c2d 005693 call lpm_write 
+0x2c2e 005694 fetch 4 ,mem_gpio_wakeup_high 
+0x2c2f 005695 hstore 4 ,core_lpm_reg 
+0x2c30 005696 setarg lpmreg_sel_gpiohigh 
+0x2c31 005697 branch lpm_write 
+:      005699 lpm_get_wake_lock:
+0x2c32 005700 fetch 2 ,mem_lpm_wake_lock 
+0x2c33 005701 qset1 pdata 
+0x2c34 005702 store 2 ,mem_lpm_wake_lock 
+0x2c35 005703 rtn 
+:      005705 lpm_put_wake_lock:
+0x2c36 005706 fetch 2 ,mem_lpm_wake_lock 
+0x2c37 005707 qset0 pdata 
+0x2c38 005708 store 2 ,mem_lpm_wake_lock 
+0x2c39 005709 rtn 
+:      005713 lpm_check_wake_lock:
+0x2c3a 005714 bpatch patch16_1 ,mem_patch16 
+0x2c3b 005715 call app_check_wake_lock 
+0x2c3c 005716 fetch 2 ,mem_lpm_wake_lock 
+0x2c3d 005717 copy pdata ,rega 
+0x2c3e 005718 fetch 1 ,mem_state_map 
+0x2c3f 005719 isolate1 smap_rxlmp ,pdata 
+0x2c40 005720 setflag true ,wake_lock_lmp_rx ,rega 
+0x2c41 005721 fetch 1 ,mem_lmo_opcode1 
+0x2c42 005722 fetcht 1 ,mem_lmo_opcode2 
+0x2c43 005723 iadd temp ,pdata 
+0x2c44 005724 fetcht 1 ,mem_lmp_to_send 
+0x2c45 005725 iadd temp ,pdata 
+0x2c46 005726 nsetflag blank ,wake_lock_lmp_tx ,rega 
+0x2c47 005727 fetch 1 ,mem_le_tx_buff_used 
+0x2c48 005728 nsetflag blank ,wake_lock_ble_tx ,rega 
+0x2c49 005729 fetch 2 ,mem_l2cap_rxbuff1_len 
+0x2c4a 005730 fetcht 2 ,mem_l2cap_rxbuff2_len 
+0x2c4b 005731 iadd temp ,pdata 
+0x2c4c 005732 nsetflag blank ,wake_lock_l2cap_rx ,rega 
+0x2c4d 005733 fetch util_fifo_len ,mem_ipc_fifo_bt2c51 
+0x2c4e 005734 nsetflag blank ,wake_lock_ipc_bt2c51 ,rega 
+0x2c4f 005735 fetch util_fifo_len ,mem_ipc_fifo_c512bt 
+0x2c50 005736 nsetflag blank ,wake_lock_ipc_c512bt ,rega 
+0x2c51 005737 fetch 1 ,mem_hci_cmd 
+0x2c52 005738 nsetflag blank ,wake_lock_cmd ,rega 
+0x2c53 005739 fetch 1 ,mem_device_option 
+0x2c54 005740 compare dvc_op_module ,pdata ,0xff 
+0x2c55 005741 call lpm_uart_wake_lock ,true 
+0x2c56 005742 setarg -8 
+0x2c57 005743 iand rega ,rega 
+0x2c58 005744 copy rega ,pdata 
+0x2c59 005745 store 2 ,mem_lpm_wake_lock 
+0x2c5a 005746 rtn 
+:      005748 lpm_uart_wake_lock:
+0x2c5b 005749 hfetch 2 ,core_uart_rxitems 
+0x2c5c 005750 nsetflag blank ,wake_lock_uart_rx ,rega 
+0x2c5d 005751 hfetch 2 ,core_uart_txitems 
+0x2c5e 005752 nsetflag blank ,wake_lock_uart_tx ,rega 
+0x2c5f 005753 rtn 
+:      005755 lpm_shut_down:
+0x2c60 005756 hfetch 4 ,core_lpm_ctrl 
+0x2c61 005757 set0 27 ,pdata 
+0x2c62 005758 hstore 4 ,core_lpm_reg 
+0x2c63 005759 call lpm_write_ctrl 
+0x2c64 005760 branch assert 
+:      005762 lpm_disable_exen_output:
+0x2c65 005763 hfetch 4 ,core_lpm_xtalcnt 
+0x2c66 005764 set0 20 ,pdata 
+0x2c67 005765 hstore 4 ,core_lpm_reg 
+0x2c68 005766 branch lpm_write_ctrl2 
+:      005768 check_bt_disabled:
+0x2c69 005769 fetch 2 ,mem_chip_functions 
+0x2c6a 005770 bbit1 bt_disabled ,assert 
+0x2c6b 005771 rtn 
+:      005772 check_ble_disabled:
+0x2c6c 005773 fetch 2 ,mem_chip_functions 
+0x2c6d 005774 bbit1 ble_disabled ,assert 
+0x2c6e 005775 rtn 
+:      005776 check_module_disabled:
+0x2c6f 005777 fetch 2 ,mem_chip_functions 
+0x2c70 005778 bbit1 module_disable ,assert 
+0x2c71 005779 rtn 
+:      005840 g24_dispatch:
+0x2c72 005841 bpatch patch16_2 ,mem_patch16 
+0x2c73 005842 call g24_head_ptr2regc 
+0x2c74 005843 add regc ,offset_24g_mode ,regb 
+0x2c75 005844 ifetch 1 ,regb 
+0x2c76 005846 rtneq disable_24g 
+0x2c77 005847 beq tx_24g ,g24_transmit_process 
+0x2c78 005848 beq rx_24g ,g24_receive_process 
+0x2c79 005849 rtn 
+:      005851 g24_head_ptr2regc:
+0x2c7a 005852 fetcht 2 ,mem_24g_head_ptr 
+0x2c7b 005853 copy temp ,regc 
+0x2c7c 005854 rtn 
+:      005856 g24_receive_process_init:
+0x2c7d 005857 call g24_receive_init 
+0x2c7e 005858 branch g24_mode_switch_init 
+:      005860 g24_receive_process:
+0x2c7f 005861 call g24_mode_switch 
+0x2c80 005862 call g24_dongle_work_mode_auto 
+0x2c81 005863 call g24_dongle_bind_mode_auto 
+0x2c82 005864 branch g24_dongle_search_mode_auto 
+:      005867 g24_pair_init:
+0x2c83 005870 call g24_set0_mem_pid 
+0x2c84 005871 setarg g24_pair_ch 
+0x2c85 005872 call g24_store_mem_ch 
+0x2c86 005873 call g24_store_mem_pair_txpower 
+0x2c87 005876 add regc ,offset_24g_paring_addr ,rega 
+0x2c88 005877 ifetch 4 ,rega 
+0x2c89 005878 branch g24_store_mem_addr 
+:      005880 g24_ch:
+0x2c8a 005881 call g24_head_ptr2regc 
+0x2c8b 005882 add regc ,offset_24g_current_ch_number ,regb 
+0x2c8c 005883 ifetcht 1 ,regb 
+0x2c8d 005885 call g24_ch_temp_incre_size4 
+0x2c8e 005886 add regc ,offset_24g_current_ch_number ,contw 
+0x2c8f 005888 branch g24_contw_istoret_1byte 
+:      005890 g24_ch_temp_incre_size4:
+0x2c90 005891 call g24_ch_calc 
+0x2c91 005892 increase 1 ,temp 
+0x2c92 005893 and_into 3 ,temp 
+0x2c93 005894 rtn 
+:      005896 g24_ch_calc:
+0x2c94 005897 add regc ,offset_24g_addr ,regb 
+0x2c95 005898 ifetch 1 ,regb 
+0x2c96 005900 and_into 0x03 ,pdata 
+0x2c97 005901 mul32 pdata ,4 ,rega 
+0x2c98 005902 add regc ,offset_24g_ch_map1 ,pdata 
+0x2c99 005904 iadd rega ,pdata 
+0x2c9a 005905 iadd temp ,contr 
+0x2c9b 005906 ifetch 1 ,contr 
+0x2c9c 005908 branch g24_store_mem_ch 
+:      005910 g24_set_device_addr:
+0x2c9d 005911 call g24_store_mem_tx_power_temp 
+0x2c9e 005912 call otp_enable_chgpump 
+0x2c9f 005913 setarg 0x7e2 
+0x2ca0 005914 arg mem_temp ,rega 
+0x2ca1 005915 arg 4 ,temp 
+0x2ca2 005916 call otpd_read_data 
+0x2ca3 005917 call otp_disable_chgpump 
+0x2ca4 005918 fetch 4 ,mem_temp 
+0x2ca5 005919 call g24_store_mem_device_addr 
+0x2ca6 005921 nrtn blank 
+0x2ca7 005922 fetch 4 ,mem_lap 
+0x2ca8 005924 branch g24_store_mem_device_addr 
+:      005926 g24_transmit_rf_sta_init:
+0x2ca9 005927 call g24_set1_mem_rf_last_sta 
+0x2caa 005929 setarg 0 
+0x2cab 005930 call g24_store_mem_sync_cnt 
+:      005932 g24_transmit_rf_ctrl_clear:
+0x2cac 005933 call g24_fetch_mem_data_type 
+0x2cad 005935 and_into bits_data ,pdata 
+0x2cae 005937 branch g24_store_mem_data_type 
+:      005939 g24_hop_ch_enable:
+0x2caf 005940 call g24_fetch_mem_data_type 
+0x2cb0 005942 set1 bit_hop ,pdata 
+0x2cb1 005943 call g24_store_mem_data_type 
+0x2cb2 005946 branch g24_store_mem_txpayload 
+:      005948 g24_transmit_hop_pac_fail:
+0x2cb3 005949 call g24_fetch_mem_rf_work_stage 
+0x2cb4 005951 beq 1 ,g24_transmit_hop_pac_fail_wo_hop 
+0x2cb5 005952 beq 2 ,g24_transmit_hop_pac_fail_hop_stage2 
+0x2cb6 005953 rtn 
+:      005955 g24_transmit_hop_pac_fail_wo_hop:
+0x2cb7 005956 call g24_set2_mem_sync_cnt 
+:      005958 g24_transmit_hop_pac_fail_stage1:
+0x2cb8 005959 add regc ,offset_24g_hop_pac_retry ,contw 
+0x2cb9 005960 call g24_mem_set0 
+0x2cba 005962 call g24_store_mem_rf_last_sta 
+0x2cbb 005964 branch g24_transmit_rf_ctrl_clear 
+:      005966 g24_transmit_hop_pac_fail_hop_stage2:
+0x2cbc 005967 call g24_set0_mem_rf_hop_ch 
+0x2cbd 005969 branch g24_transmit_hop_pac_fail_stage1 
+:      005971 g24_transmit_pac_fail_hop_stage3:
+0x2cbe 005972 add regc ,offset_24g_txfail_cnt ,rega 
+0x2cbf 005973 ifetch 1 ,rega 
+0x2cc0 005975 increase 1 ,pdata 
+0x2cc1 005976 add regc ,offset_24g_txfail_cnt ,contw 
+0x2cc2 005977 istore 1 ,contw 
+0x2cc3 005979 beq 0x20 ,g24_tx_attempt_fail 
+0x2cc4 005980 call g24_fetch_mem_rf_hop_ch 
+0x2cc5 005982 beq 1 ,g24_rf_hop_fastly 
+0x2cc6 005983 setarg 1 
+0x2cc7 005984 call g24_store_mem_rf_hop_ch 
+:      005986 g24_rf_hop_attemp_again:
+0x2cc8 005987 call g24_fetch_mem_rf_hop_ch 
+0x2cc9 005989 bne 1 ,g24_transmit_rf_ctrl_clear 
+:      005990 g24_rf_hop_fastly:
+0x2cca 005991 add regc ,offset_24g_hop_fastly_cnt ,rega 
+0x2ccb 005992 ifetch 1 ,rega 
+0x2ccc 005994 increase 1 ,pdata 
+0x2ccd 005995 call g24_store_mem_hop_fastly_cnt 
+0x2cce 005997 beq 4 ,g24_rf_hop_fastly_exit 
+0x2ccf 005998 call g24_ch 
+0x2cd0 005999 call g24_set2_mem_max_retry 
+0x2cd1 006001 branch g24_transmit_packet 
+:      006003 g24_rf_hop_fastly_exit:
+0x2cd2 006004 call g24_set0_mem_hop_fastly_cnt 
+0x2cd3 006006 branch g24_transmit_rf_ctrl_clear 
+:      006008 g24_set0_mem_hop_fastly_cnt:
+0x2cd4 006009 setarg 0 
+:      006010 g24_store_mem_hop_fastly_cnt:
+0x2cd5 006011 add regc ,offset_24g_hop_fastly_cnt ,contw 
+0x2cd6 006012 branch g24_contw_istore_1byte 
+:      006014 g24_transmit_hop_pac_succ_wo_hop:
+0x2cd7 006015 call g24_set2_mem_sync_cnt 
+:      006017 g24_transmit_hop_pac_succ:
+0x2cd8 006018 call g24_set0_mem_rf_hop_ch 
+0x2cd9 006020 call g24_set1_mem_rf_last_sta 
+0x2cda 006022 branch g24_transmit_rf_ctrl_clear 
+:      006024 g24_transmit_succ_rf_config:
+0x2cdb 006025 call g24_fetch_mem_rf_work_stage 
+0x2cdc 006027 beq 3 ,g24_transmit_hop_pac_succ 
+0x2cdd 006028 call g24_fetch_mem_data_type 
+0x2cde 006030 isolate0 bit_hop ,pdata 
+0x2cdf 006031 branch g24_transmit_rf_sta_init ,true 
+0x2ce0 006032 call g24_fetch_mem_rf_work_stage 
+0x2ce1 006034 beq 1 ,g24_transmit_hop_pac_succ_wo_hop 
+0x2ce2 006035 beq 2 ,g24_transmit_hop_pac_succ 
+0x2ce3 006036 rtn 
+:      006038 g24_rf_sta_check:
+0x2ce4 006039 call g24_fetch_mem_pairing_sm 
+0x2ce5 006041 rtnne state_24g_pairing_success 
+0x2ce6 006042 call g24_rf_laststa_synccnt_check 
+0x2ce7 006043 ncall g24_rf_sync_cnt_check ,user2 
+0x2ce8 006044 rtn 
+:      006046 g24_rf_laststa_synccnt_check:
+0x2ce9 006047 disable user2 
+0x2cea 006048 add regc ,offset_24g_rf_last_sta ,rega 
+0x2ceb 006049 ifetch 1 ,rega 
+0x2cec 006051 rtnne 1 
+0x2ced 006052 add regc ,offset_24g_sync_cnt ,rega 
+0x2cee 006053 ifetch 1 ,rega 
+0x2cef 006055 rtnne 0 
+0x2cf0 006056 setarg 1 
+0x2cf1 006057 call g24_store_mem_rf_work_stage 
+0x2cf2 006059 call g24_set4_mem_max_retry 
+0x2cf3 006061 branch enable_user2 
+:      006063 g24_rf_sync_cnt_check:
+0x2cf4 006064 add regc ,offset_24g_sync_cnt ,rega 
+0x2cf5 006065 ifetch 1 ,rega 
+0x2cf6 006067 branch g24_rf_hop_attemp ,blank 
+0x2cf7 006068 increase -1 ,pdata 
+0x2cf8 006069 call g24_store_mem_sync_cnt 
+0x2cf9 006071 setarg 2 
+0x2cfa 006072 call g24_store_mem_rf_work_stage 
+0x2cfb 006074 call g24_ch 
+0x2cfc 006076 branch g24_set4_mem_max_retry 
+:      006078 g24_store_mem_rf_work_stage:
+0x2cfd 006079 add regc ,offset_24g_rf_work_stage ,contw 
+0x2cfe 006080 branch g24_contw_istore_1byte 
+:      006083 g24_rf_hop_attemp:
+0x2cff 006084 setarg 3 
+0x2d00 006085 call g24_store_mem_rf_work_stage 
+0x2d01 006087 call g24_fetch_mem_rf_hop_ch 
+0x2d02 006089 nbranch g24_rf_hop_attemp_again ,blank 
+0x2d03 006090 call g24_ch 
+:      006092 g24_set2_mem_max_retry:
+0x2d04 006093 setarg 2 
+0x2d05 006094 branch g24_store_mem_max_retry 
+:      006096 g24_transmit_process:
+0x2d06 006097 rtnmark0 mark_24g 
+0x2d07 006098 set1 mark_24g_conext ,mark 
+0x2d08 006099 bpatch patch16_3 ,mem_patch16 
+0x2d09 006100 add regc ,offset_24g_tx_without_int ,rega 
+0x2d0a 006101 ifetch 1 ,rega 
+0x2d0b 006103 beq 1 ,g24_transmit_without_int 
+0x2d0c 006104 call g24_timer_check 
+0x2d0d 006105 nbranch g24_transmit_exit ,user 
+0x2d0e 006106 call g24_interval_calibrate 
+:      006107 g24_transmit_without_int:
+0x2d0f 006108 add regc ,offset_24g_tx_without_int ,contw 
+0x2d10 006109 call g24_mem_set0 
+0x2d11 006111 call g24_txdata_prep 
+0x2d12 006112 nbranch g24_enter_lpm ,user 
+0x2d13 006113 call g24_rf_sta_check 
+:      006114 g24_transmit_start:
+0x2d14 006115 call g24_transmit_packet 
+0x2d15 006116 call g24_power_ctrl 
+:      006117 g24_transmit_exit:
+0x2d16 006118 set0 mark_24g_conext ,mark 
+0x2d17 006119 rtn 
+:      006121 g24_timer_timeout:
+0x2d18 006122 rtn zero 
+0x2d19 006123 set1 28 ,pdata 
+0x2d1a 006124 rtn 
+:      006126 g24_interval_calibrate:
+0x2d1b 006127 add regc ,offset_24g_pac_index ,rega 
+0x2d1c 006128 ifetch 1 ,rega 
+0x2d1d 006130 increase 1 ,pdata 
+0x2d1e 006131 add regc ,offset_24g_pac_index ,contw 
+0x2d1f 006132 istore 1 ,contw 
+0x2d20 006134 beq 4 ,g24_interval_max 
+0x2d21 006135 beq 5 ,g24_interval_min 
+0x2d22 006136 rtn 
+:      006137 g24_interval_max:
+0x2d23 006138 add regc ,offset_24g_interval_max ,rega 
+0x2d24 006139 ifetch 1 ,rega 
+:      006141 g24_interval_update:
+0x2d25 006143 add regc ,offset_24g_interval ,contw 
+0x2d26 006144 branch g24_contw_istore_1byte 
+:      006146 g24_interval_min:
+0x2d27 006147 add regc ,offset_24g_pac_index ,contw 
+0x2d28 006148 call g24_mem_set0 
+0x2d29 006150 add regc ,offset_24g_interval_min ,rega 
+0x2d2a 006151 ifetch 1 ,rega 
+0x2d2b 006153 branch g24_interval_update 
+:      006155 g24_txdata_prep:
+0x2d2c 006156 call g24_fetch_mem_pairing_sm 
+0x2d2d 006158 bne state_24g_pairing_success ,g24_pairing_sm 
+0x2d2e 006159 bpatch patch16_4 ,mem_patch16 
+0x2d2f 006160 call g24_package_data 
+0x2d30 006161 nbranch g24_txdata_last_pac ,user 
+0x2d31 006162 call g24_transmit_prep 
+0x2d32 006163 call g24_power_ctrl_pac_incrs 
+:      006164 g24_txdata_enable_tx:
+0x2d33 006166 setarg ensure_on_24g 
+:      006167 g24_store_mem_ensure:
+0x2d34 006168 add regc ,offset_24g_ensure ,contw 
+0x2d35 006169 branch g24_contw_istore_1byte 
+:      006171 g24_txdata_last_pac:
+0x2d36 006172 add regc ,offset_24g_ensure ,rega 
+0x2d37 006173 ifetch 1 ,rega 
+0x2d38 006175 beq ensure_on_24g ,enable_user 
+0x2d39 006176 rtn 
+:      006178 g24_package_data:
+0x2d3a 006180 add regc ,offset_24g_cb_data ,temp 
+0x2d3b 006181 ifetch 2 ,temp 
+0x2d3c 006183 call callback_func 
+0x2d3d 006184 nrtn user 
+0x2d3e 006185 copy rega ,pdata 
+0x2d3f 006186 store 1 ,mem_rega 
+0x2d40 006187 add regc ,offset_24g_abort_pac ,contw 
+0x2d41 006188 call g24_mem_set0 
+0x2d42 006190 call g24_transmit_rf_ctrl_clear 
+0x2d43 006191 store 1 ,mem_24g_common_temp 
+0x2d44 006192 fetch 1 ,mem_rega 
+0x2d45 006193 copy pdata ,rega 
+0x2d46 006194 add rega ,1 ,temp 
+0x2d47 006195 arg mem_24g_common_temp + 1 ,contw 
+0x2d48 006196 copy rega ,loopcnt 
+0x2d49 006197 copy regb ,contr 
+0x2d4a 006198 call memcpy 
+0x2d4b 006199 arg mem_24g_common_temp ,rega 
+:      006200 g24_put_data_in_buff:
+0x2d4c 006201 rtnmark0 mark_24g_conext 
+0x2d4d 006202 add regc ,offset_24g_datalen ,contw 
+0x2d4e 006203 istoret 1 ,contw 
+0x2d4f 006205 copy temp ,loopcnt 
+0x2d50 006206 add regc ,offset_24g_txbuf ,contw 
+0x2d51 006208 copy rega ,contr 
+0x2d52 006209 branch memcpy 
+:      006211 g24_transmit_prep:
+0x2d53 006213 add regc ,offset_24g_datalen ,rega 
+0x2d54 006214 ifetch 1 ,rega 
+0x2d55 006216 increase 2 ,pdata 
+0x2d56 006217 add regc ,offset_24g_txlen ,contw 
+0x2d57 006218 istore 1 ,contw 
+0x2d58 006221 call g24_fetch_mem_data_type 
+0x2d59 006223 call g24_store_mem_txpayload 
+0x2d5a 006226 add regc ,offset_24g_datalen ,rega 
+0x2d5b 006227 ifetch 1 ,rega 
+0x2d5c 006229 lshift3 pdata ,pdata 
+0x2d5d 006230 add regc ,offset_24g_pid ,rega 
+0x2d5e 006231 ifetcht 1 ,rega 
+0x2d5f 006233 and temp ,0x03 ,temp 
+0x2d60 006234 lshift temp ,temp 
+0x2d61 006235 ior temp ,pdata 
+0x2d62 006236 add regc ,offset_24g_no_ack ,rega 
+0x2d63 006237 ifetcht 1 ,rega 
+0x2d64 006239 iadd temp ,pdata 
+0x2d65 006240 istore 1 ,contw 
+0x2d66 006242 add regc ,offset_24g_datalen ,rega 
+0x2d67 006243 ifetch 1 ,rega 
+0x2d68 006245 iforce loopcnt 
+0x2d69 006246 add regc ,offset_24g_txbuf ,contr 
+0x2d6a 006248 branch memcpy 
+:      006250 g24_send_abort_packet:
+0x2d6b 006251 call g24_set1_mem_abort_pac 
+0x2d6c 006253 call g24_set0_mem_rf_hop_ch 
+0x2d6d 006255 call g24_power_ctrl_reinit 
+0x2d6e 006256 call g24_transmit_rf_ctrl_clear 
+0x2d6f 006257 store 1 ,mem_24g_common_temp 
+0x2d70 006258 call g24_put_data_in_buff_pre 
+0x2d71 006259 call g24_fetch_mem_data_type 
+0x2d72 006261 set1 bit_abort ,pdata 
+0x2d73 006262 call g24_store_mem_data_type 
+0x2d74 006264 call g24_transmit_prep 
+0x2d75 006265 call g24_txdata_enable_tx 
+0x2d76 006266 branch g24_transmit_start 
+:      006268 g24_put_data_in_buff_pre:
+0x2d77 006269 store 1 ,mem_24g_common_temp + 1 
+0x2d78 006270 call g24_fetch_mem_device_addr 
+0x2d79 006272 store 4 ,mem_24g_common_temp + 2 
+0x2d7a 006273 arg 6 ,temp 
+0x2d7b 006274 arg mem_24g_common_temp ,rega 
+0x2d7c 006275 branch g24_put_data_in_buff 
+:      006277 g24_enter_lpm:
+0x2d7d 006278 add regc ,offset_24g_abort_pac ,rega 
+0x2d7e 006279 ifetch 1 ,rega 
+0x2d7f 006281 branch g24_send_abort_packet ,blank 
+:      006282 g24_enter_lpm_prepare:
+0x2d80 006284 add regc ,offset_24g_cb_lpm_prepare ,rega 
+0x2d81 006285 ifetch 2 ,rega 
+0x2d82 006287 branch callback_func 
+:      006289 g24_lpm_long_sleep:
+0x2d83 006290 call g24_head_ptr2regc 
+0x2d84 006292 call lpo_calibration 
+0x2d85 006293 fetch 3 ,mem_clks_per_lpo 
+0x2d86 006294 rtn blank 
+0x2d87 006295 add regc ,offset_24g_cb_lpm_before ,temp 
+0x2d88 006296 ifetch 2 ,temp 
+0x2d89 006298 call callback_func 
+0x2d8a 006299 add regc ,offset_24g_enter_hibernate ,temp 
+0x2d8b 006300 ifetch 8 ,temp 
+0x2d8c 006301 call clk2lpo 
+0x2d8d 006302 storet 4 ,mem_sleep_counter 
+0x2d8e 006303 branch lpm_sleep 
+:      006305 g24_transmit_packet:
+0x2d8f 006306 call g24_head_ptr2regc 
+0x2d90 006307 add regc ,offset_24g_retry ,contw 
+0x2d91 006308 call g24_mem_set0 
+:      006310 g24_transmit_loop:
+0x2d92 006311 call g24_transmit_receive_ack 
+0x2d93 006312 nbranch g24_retransmit ,sync 
+0x2d94 006313 nbranch g24_retransmit ,user3 
+0x2d95 006314 call g24_ackpayload_parse 
+0x2d96 006315 call g24_power_ctrl_ack_incrs 
+:      006316 g24_transmit_next_packet:
+0x2d97 006317 call g24_head_ptr2regc 
+0x2d98 006318 add regc ,offset_24g_pid ,rega 
+0x2d99 006319 ifetch 1 ,rega 
+0x2d9a 006321 increase 1 ,pdata 
+0x2d9b 006322 call g24_store_mem_pid 
+0x2d9c 006324 call g24_fetch_mem_pairing_sm 
+0x2d9d 006326 bne state_24g_pairing_success ,g24_paring_mode 
+0x2d9e 006327 call g24_transmit_succ_rf_config 
+:      006328 g24_transmit_abandon:
+0x2d9f 006329 setarg 0 
+0x2da0 006330 add regc ,offset_24g_txfail_cnt ,contw 
+0x2da1 006331 istore 2 ,contw 
+0x2da2 006335 setarg ensure_off_24g 
+0x2da3 006336 branch g24_store_mem_ensure 
+:      006339 g24_transmit_receive_ack:
+0x2da4 006340 disable user3 
+0x2da5 006341 call g24_transmit 
+0x2da6 006342 call g24_head_ptr2regc 
+0x2da7 006343 add regc ,offset_24g_no_ack ,rega 
+0x2da8 006344 ifetch 1 ,rega 
+0x2da9 006346 beq no_ack_24g ,g24_transmit_no_ack 
+0x2daa 006347 call g24_receive_packet 
+0x2dab 006348 branch g24_end_of_packet 
+:      006349 g24_transmit_no_ack:
+0x2dac 006350 call g24_end_of_packet 
+0x2dad 006351 branch g24_transmit_next_packet 
+:      006354 g24_retransmit:
+0x2dae 006355 bpatch patch16_5 ,mem_patch16 
+0x2daf 006356 add regc ,offset_24g_get_ack_fail ,rega 
+0x2db0 006357 ifetch 1 ,rega 
+0x2db1 006359 increase 1 ,pdata 
+0x2db2 006360 add regc ,offset_24g_get_ack_fail ,contw 
+0x2db3 006361 istore 1 ,contw 
+0x2db4 006363 call g24_fetch_mem_pairing_sm 
+0x2db5 006365 bne state_24g_pairing_success ,g24_tx_paring_retry 
+0x2db6 006366 add regc ,offset_24g_retry ,rega 
+0x2db7 006367 ifetcht 1 ,rega 
+0x2db8 006369 increase 1 ,temp 
+0x2db9 006370 add regc ,offset_24g_retry ,contw 
+0x2dba 006371 istoret 1 ,contw 
+0x2dbb 006373 add regc ,offset_24g_max_retry ,rega 
+0x2dbc 006374 ifetch 1 ,rega 
+0x2dbd 006376 isub temp ,pdata 
+0x2dbe 006377 nbranch g24_transmit_loop ,blank 
+0x2dbf 006378 bpatch patch16_6 ,mem_patch16 
+0x2dc0 006379 call g24_fetch_mem_rf_work_stage 
+0x2dc1 006381 beq 3 ,g24_transmit_pac_fail_hop_stage3 
+0x2dc2 006382 add regc ,offset_24g_hop_pac_retry ,rega 
+0x2dc3 006383 ifetch 1 ,rega 
+0x2dc4 006385 increase 1 ,pdata 
+0x2dc5 006386 add regc ,offset_24g_hop_pac_retry ,contw 
+0x2dc6 006387 istore 1 ,contw 
+0x2dc7 006389 beq 2 ,g24_transmit_hop_pac_fail 
+0x2dc8 006390 call g24_hop_ch_enable 
+0x2dc9 006391 setarg 1 
+0x2dca 006392 call g24_store_mem_max_retry 
+0x2dcb 006394 branch g24_transmit_packet 
+:      006396 g24_tx_paring_retry:
+0x2dcc 006397 add regc ,offset_24g_get_ack_fail ,rega 
+0x2dcd 006398 ifetch 1 ,rega 
+0x2dce 006400 rtnne 0xff 
+0x2dcf 006401 add regc ,offset_24g_get_ack_fail ,contw 
+0x2dd0 006402 call g24_mem_set0 
+0x2dd1 006404 branch g24_stop_24g_mode 
+:      006406 g24_tx_attempt_fail:
+0x2dd2 006407 add regc ,offset_24g_txfail_cnt ,contw 
+0x2dd3 006408 call g24_mem_set0 
+:      006410 g24_stop_24g_mode:
+0x2dd4 006411 jam bt_evt_24g_attempt_fail ,mem_fifo_temp 
+0x2dd5 006412 branch ui_ipc_send_event 
+:      006414 g24_ackpayload_parse:
+0x2dd6 006415 call g24_read_len_pid_crc 
+0x2dd7 006416 add regc ,offset_24g_rxdata_length ,rega 
+0x2dd8 006417 ifetch 1 ,rega 
+0x2dd9 006419 rtn blank 
+0x2dda 006420 iforce loopcnt 
+0x2ddb 006421 add regc ,offset_24g_rxbuf_add2 ,contr 
+0x2ddc 006423 add regc ,offset_24g_rxpayload ,contw 
+0x2ddd 006425 branch memcpy 
+:      006428 g24_read_len_pid_crc:
+0x2dde 006430 call g24_fetch_mem_rxbuf_add1 
+0x2ddf 006432 rshift3 pdata ,pdata 
+0x2de0 006433 add regc ,offset_24g_rxdata_length ,contw 
+0x2de1 006434 istore 1 ,contw 
+0x2de2 006437 increase 1 ,pdata 
+0x2de3 006438 add regc ,offset_24g_rxbuf_add1 ,contr 
+0x2de4 006440 iadd contr ,contr 
+0x2de5 006441 ifetch 3 ,contr 
+0x2de6 006442 add regc ,offset_24g_sta_crc ,contw 
+0x2de7 006443 istore 3 ,contw 
+0x2de8 006446 call g24_fetch_mem_rxbuf_add1 
+0x2de9 006448 rshift pdata ,pdata 
+0x2dea 006449 and pdata ,0x03 ,pdata 
+0x2deb 006450 add regc ,offset_24g_sta_pid ,contw 
+0x2dec 006451 istore 1 ,contw 
+0x2ded 006453 rtn 
+:      006455 g24_prep:
+0x2dee 006456 disable enable_crc 
+0x2def 006457 disable enable_white 
+0x2df0 006458 setarg 0x555555 
+0x2df1 006459 iforce crc24_init 
+0x2df2 006460 rtn 
+:      006462 g24_set_freq_tx:
+0x2df3 006463 call set_sync_on 
+0x2df4 006464 add regc ,offset_24g_ch ,rega 
+0x2df5 006465 ifetcht 1 ,rega 
+0x2df6 006467 branch set_freq_tx 
+:      006469 g24_transmit:
+0x2df7 006470 call g24_prep 
+0x2df8 006471 call g24_set_freq_tx 
+0x2df9 006472 set1 txgfsk ,radio_ctrl 
+0x2dfa 006473 enable encode_fec0 
+0x2dfb 006474 enable is_tx 
+0x2dfc 006475 disable is_rx 
+0x2dfd 006476 call le_enable 
+0x2dfe 006477 call g24_fetch_mem_addr 
+0x2dff 006479 iforce access 
+0x2e00 006480 inject mod ,32 
+0x2e01 006481 enable enable_crc 
+0x2e02 006482 add regc ,offset_24g_txlen ,rega 
+0x2e03 006483 ifetch 1 ,rega 
+0x2e04 006485 iforce loopcnt 
+0x2e05 006486 add regc ,offset_24g_txpayload ,contr 
+:      006488 g24tr_loop:
+0x2e06 006489 ifetch 1 ,contr 
+0x2e07 006490 inject mod ,8 
+0x2e08 006491 loop g24tr_loop 
+0x2e09 006492 enable enable_parity 
+0x2e0a 006493 inject mod ,24 
+0x2e0b 006494 disable enable_parity 
+0x2e0c 006495 until null ,tx_clear 
+0x2e0d 006496 bpatch patch16_7 ,mem_patch16 
+0x2e0e 006497 nop 100 
+0x2e0f 006498 disable encode_fec0 
+0x2e10 006499 rtn 
+:      006501 g24_receive_packet:
+0x2e11 006502 disable user3 
+0x2e12 006503 force 0 ,radio_ctrl 
+0x2e13 006504 add regc ,offset_24g_ch ,rega 
+0x2e14 006505 ifetcht 1 ,rega 
+0x2e15 006507 call set_freq_rx 
+0x2e16 006508 call rf_rx_enable 
+:      006509 g24_receive_rxon:
+0x2e17 006510 call g24_prep 
+0x2e18 006511 enable decode_fec0 
+0x2e19 006512 enable is_rx 
+0x2e1a 006513 disable is_tx 
+0x2e1b 006514 call le_enable 
+0x2e1c 006515 call g24_fetch_mem_addr 
+0x2e1d 006517 iforce access 
+0x2e1e 006518 enable swfine 
+0x2e1f 006519 add regc ,offset_24g_rx_window ,rega 
+0x2e20 006520 ifetch 2 ,rega 
+0x2e21 006522 iforce stop_watch 
+0x2e22 006523 correlate null ,timeout 
+0x2e23 006524 nbranch g24_sync_timeout ,sync 
+0x2e24 006525 enable enable_crc 
+0x2e25 006526 parse demod ,bucket ,8 
+0x2e26 006527 rshift3 pwindow ,pdata 
+0x2e27 006528 add regc ,offset_24g_rxbuf ,contw 
+0x2e28 006529 istore 1 ,contw 
+0x2e29 006531 add regc ,offset_24g_mode ,rega 
+0x2e2a 006532 ifetch 1 ,rega 
+0x2e2b 006534 beq rx_24g ,g24_receive_skip 
+0x2e2c 006535 bpatch patch17_0 ,mem_patch17 
+0x2e2d 006536 add regc ,offset_24g_rxbuf ,rega 
+0x2e2e 006537 ifetch 1 ,rega 
+0x2e2f 006539 add regc ,offset_24g_data_type ,rega 
+0x2e30 006540 ifetcht 1 ,rega 
+0x2e31 006542 icompare bits_data ,temp 
+0x2e32 006543 nbranch g24_end_of_packet ,true 
+:      006544 g24_receive_skip:
+0x2e33 006545 parse demod ,bucket ,8 
+0x2e34 006546 rshift3 pwindow ,pdata 
+0x2e35 006547 istore 1 ,contw 
+0x2e36 006548 rshift3 pdata ,pdata 
+0x2e37 006549 and pdata ,0x1f ,loopcnt 
+0x2e38 006550 branch g24rx_nopayload ,zero 
+:      006551 g24rx_loop:
+0x2e39 006552 parse demod ,bucket ,8 
+0x2e3a 006553 rshift3 pwindow ,pdata 
+0x2e3b 006554 istore 1 ,contw 
+0x2e3c 006555 loop g24rx_loop 
+:      006556 g24rx_nopayload:
+0x2e3d 006557 parse demod ,bucket ,24 
+0x2e3e 006558 rshift32 pdata ,pdata 
+0x2e3f 006559 rshift16 pdata ,pdata 
+0x2e40 006560 istore 3 ,contw 
+0x2e41 006561 branch g24_end_of_packet ,crc_failed 
+0x2e42 006562 enable user3 
+0x2e43 006563 disable decode_fec0 
+0x2e44 006564 rtn 
+:      006567 g24_end_of_packet:
+0x2e45 006568 disable encode_fec0 
+0x2e46 006569 disable decode_fec0 
+0x2e47 006570 disable enable_crc 
+0x2e48 006571 disable enable_white 
+0x2e49 006572 branch shutdown_radio ,is_rx 
+0x2e4a 006573 until null ,tx_clear 
+0x2e4b 006574 nop 100 
+0x2e4c 006575 branch shutdown_radio 
+:      006577 g24_sync_timeout:
+0x2e4d 006578 call rssi_noise 
+0x2e4e 006579 branch g24_end_of_packet 
+:      006581 rssi_noise:
+0x2e4f 006582 call save_rssi 
+0x2e50 006583 rtn blank 
+0x2e51 006584 add regc ,offset_rssi_noise_index ,rega 
+0x2e52 006585 ifetcht 1 ,rega 
+0x2e53 006587 arg mem_rssi_noise_buffer ,rega 
+0x2e54 006589 call rssi_noise_store 
+0x2e55 006590 add regc ,offset_rssi_noise_index ,contw 
+:      006592 g24_contw_istoret_1byte:
+0x2e56 006593 istoret 1 ,contw 
+0x2e57 006594 rtn 
+:      006596 rssi_noise_store:
+0x2e58 006597 arg rssi_buf_len_noise ,regb 
+0x2e59 006598 branch rssi_store 
+:      006616 rssi_store:
+0x2e5a 006617 copy rega ,pdata 
+0x2e5b 006618 iadd temp ,contw 
+0x2e5c 006619 fetch 1 ,mem_rssi 
+0x2e5d 006620 istore 1 ,contw 
+0x2e5e 006621 increase 1 ,temp 
+0x2e5f 006622 copy regb ,pdata 
+0x2e60 006623 iand_into temp 
+0x2e61 006624 rtn 
+:      006626 rssi_average:
+0x2e62 006627 arg 0 ,temp 
+0x2e63 006628 copy rega ,contr 
+:      006629 rssi_average_loop:
+0x2e64 006630 ifetch 1 ,contr 
+0x2e65 006631 iadd temp ,temp 
+0x2e66 006632 loop rssi_average_loop 
+0x2e67 006633 rshift8 temp ,temp 
+0x2e68 006634 rtn 
+:      006636 g24_power_ctrl_init:
+0x2e69 006637 call g24_head_ptr2regc 
+0x2e6a 006638 call g24_power_ctrl_incrs_level1 
+0x2e6b 006639 setarg 1 
+0x2e6c 006640 call g24_store_mem_power_ctrl_level 
+:      006642 g24_power_ctrl_reinit:
+0x2e6d 006643 setarg 0 
+0x2e6e 006644 call g24_store_mem_power_ctrl_pac 
+0x2e6f 006646 istore 1 ,contw 
+0x2e70 006648 rtn 
+:      006650 g24_power_ctrl_pac_incrs:
+0x2e71 006651 call g24_fetch_mem_power_ctrl_pac 
+0x2e72 006653 increase 1 ,pdata 
+:      006654 g24_store_mem_power_ctrl_pac:
+0x2e73 006656 add regc ,offset_power_ctrl_packet_cnt ,contw 
+0x2e74 006657 branch g24_contw_istore_1byte 
+:      006659 g24_power_ctrl_ack_incrs:
+0x2e75 006662 add regc ,offset_power_ctrl_ack_cnt ,rega 
+0x2e76 006663 ifetch 1 ,rega 
+0x2e77 006664 increase 1 ,pdata 
+0x2e78 006665 add regc ,offset_power_ctrl_ack_cnt ,contw 
+0x2e79 006666 branch g24_contw_istore_1byte 
+:      006668 g24_power_ctrl:
+0x2e7a 006669 bpatch patch17_1 ,mem_patch17 
+0x2e7b 006670 call g24_fetch_mem_power_ctrl_pac 
+0x2e7c 006672 sub pdata ,power_ctrl_max_packet_cnt ,null 
+0x2e7d 006673 rtn positive 
+0x2e7e 006674 add regc ,offset_power_ctrl_ack_cnt ,rega 
+0x2e7f 006675 ifetcht 1 ,rega 
+0x2e80 006677 isub temp ,temp 
+0x2e81 006678 call g24_power_ctrl_reinit 
+0x2e82 006679 setarg offset_power_ctrl_threshold_up 
+0x2e83 006680 iadd regc ,rega 
+0x2e84 006681 ifetch 1 ,rega 
+0x2e85 006683 isub temp ,null 
+0x2e86 006684 nbranch g24_power_ctrl_incrs ,positive 
+0x2e87 006685 setarg offset_power_ctrl_threshold_down 
+0x2e88 006686 iadd regc ,rega 
+0x2e89 006687 ifetch 1 ,rega 
+0x2e8a 006689 isub temp ,null 
+0x2e8b 006690 branch g24_power_ctrl_decrs ,positive 
+0x2e8c 006691 rtn 
+:      006693 g24_power_ctrl_incrs:
+0x2e8d 006694 add regc ,offset_power_ctrl_level ,rega 
+0x2e8e 006695 ifetch 1 ,rega 
+0x2e8f 006697 beq 2 ,g24_power_ctrl_incrs_level2 
+0x2e90 006698 increase 1 ,pdata 
+0x2e91 006699 call g24_store_mem_power_ctrl_level 
+0x2e92 006701 beq 1 ,g24_power_ctrl_incrs_level1 
+:      006702 g24_power_ctrl_incrs_level2:
+0x2e93 006703 setarg power_ctrl_losspac_thresh_up2 
+0x2e94 006704 call g24_store_mem_power_ctrl_threshold_up 
+0x2e95 006706 setarg power_ctrl_losspac_thresh_down2 
+0x2e96 006707 call g24_store_mem_power_ctrl_threshold_down 
+0x2e97 006710 add regc ,offset_power_ctrl_txpwr_level2 ,rega 
+0x2e98 006712 branch g24_ifetch_rega_store_mem_txpower 
+:      006714 g24_power_ctrl_decrs:
+0x2e99 006715 add regc ,offset_power_ctrl_level ,rega 
+0x2e9a 006716 ifetch 1 ,rega 
+0x2e9b 006718 beq 0 ,g24_power_ctrl_decrs_level0 
+0x2e9c 006719 increase -1 ,pdata 
+0x2e9d 006720 call g24_store_mem_power_ctrl_level 
+0x2e9e 006722 beq 0 ,g24_power_ctrl_decrs_level0 
+:      006723 g24_power_ctrl_decrs_level1:
+:      006726 g24_power_ctrl_incrs_level1:
+0x2e9f 006727 setarg power_ctrl_losspac_thresh_up1 
+0x2ea0 006728 call g24_store_mem_power_ctrl_threshold_up 
+0x2ea1 006730 setarg power_ctrl_losspac_thresh_down1 
+0x2ea2 006731 call g24_store_mem_power_ctrl_threshold_down 
+0x2ea3 006734 setarg offset_power_ctrl_txpwr_level1 
+:      006735 g24_iadd_offset_mem_txpower:
+0x2ea4 006736 iadd regc ,rega 
+:      006737 g24_ifetch_rega_store_mem_txpower:
+0x2ea5 006738 ifetch 1 ,rega 
+0x2ea6 006740 branch g24_store_mem_txpower 
+:      006742 g24_power_ctrl_decrs_level0:
+0x2ea7 006745 setarg power_ctrl_losspac_thresh_up0 
+0x2ea8 006746 call g24_store_mem_power_ctrl_threshold_up 
+0x2ea9 006748 setarg power_ctrl_losspac_thresh_down0 
+0x2eaa 006749 call g24_store_mem_power_ctrl_threshold_down 
+0x2eab 006752 setarg offset_power_ctrl_txpwr_level0 
+0x2eac 006754 branch g24_iadd_offset_mem_txpower 
+:      006768 g24_start_pairing_sm1:
+0x2ead 006769 set1 mark_24g ,mark 
+0x2eae 006770 call g24_pair_init 
+:      006771 g24_set_pairing_sm_1:
+0x2eaf 006773 setarg state_24g_pairing_1 
+0x2eb0 006774 branch g24_store_mem_pairing_sm 
+:      006776 g24_pairing_sm:
+0x2eb1 006777 add regc ,offset_24g_ensure ,rega 
+0x2eb2 006778 ifetch 1 ,rega 
+0x2eb3 006780 beq ensure_on_24g ,enable_user 
+0x2eb4 006781 call g24_fetch_mem_pairing_sm 
+0x2eb5 006783 beq state_24g_pairing_1 ,g24_pairing_sm_1 
+0x2eb6 006784 beq state_24g_pairing_2 ,g24_pairing_sm_2 
+0x2eb7 006785 beq state_24g_pairing_3 ,g24_pairing_sm_3 
+0x2eb8 006786 branch assert 
+:      006788 g24_pairing_sm_1:
+0x2eb9 006789 setarg state_24g_pairing_1_waiting_ack 
+0x2eba 006790 call g24_store_mem_pairing_sm 
+0x2ebb 006792 jam 0xaa ,mem_24g_common_temp 
+0x2ebc 006793 branch g24_pairing_sm_common 
+:      006794 g24_pairing_sm_2:
+0x2ebd 006795 setarg state_24g_pairing_2_waiting_ack 
+0x2ebe 006796 call g24_store_mem_pairing_sm 
+0x2ebf 006798 jam 0x55 ,mem_24g_common_temp 
+0x2ec0 006799 branch g24_pairing_sm_common 
+:      006800 g24_pairing_sm_3:
+0x2ec1 006801 setarg state_24g_pairing_3_waiting_ack 
+0x2ec2 006802 call g24_store_mem_pairing_sm 
+0x2ec3 006804 jam 0x22 ,mem_24g_common_temp 
+:      006805 g24_pairing_sm_common:
+0x2ec4 006806 call g24_fetch_mem_data_type 
+0x2ec5 006808 and_into bits_data ,pdata 
+0x2ec6 006809 store 1 ,mem_24g_common_temp + 1 
+0x2ec7 006810 call g24_fetch_mem_device_addr 
+0x2ec8 006812 store 4 ,mem_24g_common_temp + 2 
+:      006813 g24_put_pairing_data_in_buff:
+0x2ec9 006814 jam 0 ,mem_24g_common_temp + 6 
+0x2eca 006815 arg mem_24g_common_temp ,rega 
+0x2ecb 006816 arg 7 ,temp 
+0x2ecc 006817 call g24_put_data_in_buff 
+0x2ecd 006818 call g24_transmit_prep 
+0x2ece 006819 call g24_txdata_enable_tx 
+0x2ecf 006820 branch enable_user 
+:      006822 g24_paring_mode:
+0x2ed0 006823 call g24_fetch_mem_pairing_sm 
+0x2ed1 006825 rtneq state_24g_pairing_success 
+0x2ed2 006826 beq state_24g_pairing_1_waiting_ack ,g24_pairing_sm_1_waiting_ack 
+0x2ed3 006827 beq state_24g_pairing_2_waiting_ack ,g24_pairing_sm_2_waiting_ack 
+0x2ed4 006828 beq state_24g_pairing_3_waiting_ack ,g24_pairing_sm_3_waiting_ack 
+0x2ed5 006829 rtn 
+:      006831 g24_pairing_sm_1_waiting_ack:
+0x2ed6 006832 setarg state_24g_pairing_2 
+0x2ed7 006833 call g24_store_mem_pairing_sm 
+0x2ed8 006835 branch g24_transmit_abandon 
+:      006836 g24_pairing_sm_2_waiting_ack:
+0x2ed9 006837 setarg state_24g_pairing_3 
+0x2eda 006838 call g24_store_mem_pairing_sm 
+0x2edb 006840 branch g24_transmit_abandon 
+:      006841 g24_pairing_sm_3_waiting_ack:
+0x2edc 006842 setarg state_24g_pairing_success 
+0x2edd 006843 call g24_store_mem_pairing_sm 
+0x2ede 006845 jam bt_evt_24g_pairing_complete ,mem_fifo_temp 
+0x2edf 006846 call ui_ipc_send_event 
+0x2ee0 006847 add regc ,offset_24g_rxpayload_add2 ,rega 
+0x2ee1 006848 ifetch 4 ,rega 
+0x2ee2 006850 call g24_store_mem_addr 
+0x2ee3 006852 branch g24_transmit_abandon 
+:      006854 g24_auto_pair_start:
+0x2ee4 006855 set0 mark_24g ,mark 
+0x2ee5 006856 call g24_auto_pair_set_device_info 
+0x2ee6 006857 call g24_tx_attemp_data_prep 
+:      006858 g24_auto_pair_restart:
+0x2ee7 006859 call g24_set0_mem_check_dongle_times 
+:      006860 g24_auto_pair_start_loop:
+0x2ee8 006861 nop 2000 
+0x2ee9 006862 call g24_fetch_mem_check_dongle_times 
+0x2eea 006863 beq 0xff ,g24_stop_24g_mode 
+0x2eeb 006864 call g24_transmit_receive_ack 
+0x2eec 006865 nbranch g24_auto_pair_retry ,sync 
+0x2eed 006866 nbranch g24_auto_pair_retry ,user3 
+0x2eee 006867 call g24_ackpayload_parse 
+0x2eef 006868 call g24_head_ptr2regc 
+0x2ef0 006869 add regc ,offset_24g_paring_addr ,rega 
+0x2ef1 006870 ifetcht 4 ,rega 
+0x2ef2 006871 call g24_fetch_mem_addr_isub_temp 
+0x2ef3 006872 branch g24_start_pairing_sm1 ,zero 
+0x2ef4 006873 call g24_head_ptr2regc 
+0x2ef5 006874 add regc ,offset_24g_rxpayload_add2 ,rega 
+0x2ef6 006875 ifetch 4 ,rega 
+0x2ef7 006876 beq 0 ,g24_auto_pair_restart 
+0x2ef8 006877 call g24_store_mem_addr 
+0x2ef9 006878 branch g24_tx_attemp_dongle_succ 
+:      006880 g24_auto_pair_retry:
+0x2efa 006881 call g24_fetch_mem_check_dongle_times 
+0x2efb 006882 increase 1 ,pdata 
+0x2efc 006883 call g24_store_mem_check_dongle_times 
+0x2efd 006885 call g24_fetch_mem_auto_paring_switch 
+0x2efe 006886 increase 1 ,pdata 
+0x2eff 006887 and_into 1 ,pdata 
+0x2f00 006888 call g24_store_mem_auto_paring_switch 
+0x2f01 006889 beq 0 ,g24_auto_pair_device_attemp 
+0x2f02 006890 beq 1 ,g24_auto_pair_pair_attemp 
+0x2f03 006891 rtn 
+:      006893 g24_fetch_mem_auto_paring_switch:
+0x2f04 006894 setarg offset_24g_auto_pair_switch 
+0x2f05 006895 branch g24_set_rega_ifetch_1byte 
+:      006896 g24_store_mem_auto_paring_switch:
+0x2f06 006897 arg offset_24g_auto_pair_switch ,rega 
+0x2f07 006898 branch g24_set_contw_with_regb_store_1byte 
+:      006900 g24_auto_pair_set_device_info:
+0x2f08 006901 call g24_store_mem_tx_power 
+0x2f09 006902 call g24_fetch_mem_device_addr 
+0x2f0a 006903 call g24_store_mem_addr 
+0x2f0b 006904 branch g24_ch 
+:      006906 g24_auto_pair_device_attemp:
+0x2f0c 006907 call g24_auto_pair_set_device_info 
+0x2f0d 006908 branch g24_auto_pair_start_loop 
+:      006910 g24_auto_pair_pair_attemp:
+0x2f0e 006911 call g24_pair_init 
+0x2f0f 006912 branch g24_auto_pair_start_loop 
+:      006915 g24_start_24g_mode:
+0x2f10 006916 set0 mark_24g ,mark 
+0x2f11 006917 call g24_ch 
+0x2f12 006918 call g24_fetch_mem_pairing_sm 
+0x2f13 006920 rtnne state_24g_pairing_success 
+0x2f14 006921 call g24_tx_attemp_data_prep 
+0x2f15 006922 call g24_set0_mem_check_dongle_times 
+:      006924 g24_tx_attemp_dongle_loop:
+0x2f16 006925 nop 2000 
+0x2f17 006926 call g24_fetch_mem_check_dongle_times 
+0x2f18 006928 beq 0xff ,g24_stop_24g_mode 
+0x2f19 006929 call g24_transmit_receive_ack 
+0x2f1a 006930 nbranch g24_attemp_txdata_retry ,sync 
+0x2f1b 006931 nbranch g24_attemp_txdata_retry ,user3 
+:      006932 g24_tx_attemp_dongle_succ:
+0x2f1c 006933 set1 mark_24g ,mark 
+0x2f1d 006934 call g24_set0_mem_check_dongle_times 
+0x2f1e 006935 setarg state_24g_pairing_success 
+0x2f1f 006936 call g24_store_mem_pairing_sm 
+0x2f20 006938 jam bt_evt_24g_attempt_success ,mem_fifo_temp 
+0x2f21 006939 branch ui_ipc_send_event 
+:      006941 g24_tx_attemp_data_prep:
+0x2f22 006942 set1 mark_24g_conext ,mark 
+0x2f23 006943 jam 0xff ,mem_24g_common_temp 
+0x2f24 006944 call g24_fetch_mem_data_type 
+0x2f25 006946 call g24_put_data_in_buff_pre 
+0x2f26 006947 branch g24_transmit_prep 
+:      006949 g24_attemp_txdata_retry:
+0x2f27 006950 call g24_fetch_mem_check_dongle_times 
+0x2f28 006952 increase 1 ,pdata 
+0x2f29 006953 call g24_store_mem_check_dongle_times 
+0x2f2a 006955 call g24_ch 
+0x2f2b 006956 branch g24_tx_attemp_dongle_loop 
+:      006958 g24_check_51cmd_start_24g:
+0x2f2c 006959 call g24_store_mem_tx_power 
+0x2f2d 006962 setarg state_24g_pairing_success 
+0x2f2e 006963 call g24_store_mem_pairing_sm 
+0x2f2f 006965 branch g24_start_24g_mode 
+:      006974 dongle_init:
+0x2f30 006975 bpatch patch17_2 ,mem_patch17 
+0x2f31 006976 call g24_head_ptr2regc 
+0x2f32 006977 setarg dongle_rxdata_type1 
+0x2f33 006978 add regc ,offset_24g_cb_rxdata_type1 ,contw 
+0x2f34 006979 istore 2 ,contw 
+0x2f35 006981 call g24_receive_init 
+0x2f36 006982 call usb_init 
+0x2f37 006983 call g24_fetch_mem_pair_mode 
+0x2f38 006985 bpatch patch17_3 ,mem_patch17 
+0x2f39 006986 beq 0x00 ,dongle_auto_bind 
+0x2f3a 006987 beq 0x01 ,dongle_pc_bind 
+0x2f3b 006988 beq 0x0f ,dongle_all_powerful 
+0x2f3c 006989 branch assert 
+:      006991 g24_receive_init:
+0x2f3d 006992 call g24_store_mem_tx_power_temp 
+0x2f3e 006993 arg 0x80 ,loopcnt 
+0x2f3f 006994 arg mem_rssi_noise_buffer ,contw 
+0x2f40 006995 branch memset0 
+:      006997 dongle_all_powerful:
+0x2f41 006998 call dongle_check_mode 
+:      006999 dongle_all_powerful_loop:
+0x2f42 007000 call g24_dongle_work_mode 
+0x2f43 007001 call usb_isr 
+0x2f44 007002 branch dongle_all_powerful_loop 
+:      007004 dongle_pc_bind:
+0x2f45 007005 bpatch patch17_4 ,mem_patch17 
+0x2f46 007006 call dongle_check_mode 
+:      007007 dongle_pc_bind_loop:
+0x2f47 007008 call g24_dongle_work_mode 
+0x2f48 007009 call g24_dongle_bind_mode 
+0x2f49 007010 call usb_isr 
+0x2f4a 007011 call dongle_usb_dispatch 
+0x2f4b 007012 branch dongle_pc_bind_loop 
+:      007014 dongle_check_mode:
+0x2f4c 007018 call g24_set_work_mem_dongle_work_mode 
+0x2f4d 007019 call g24_set0_mem_dongle_mode_init 
+0x2f4e 007020 branch g24_set0_mem_ackpayload_enable 
+:      007022 g24_dongle_work_mode:
+0x2f4f 007023 call g24_fetch_mem_dongle_work_mode 
+0x2f50 007025 rtnne dongle_work 
+:      007026 g24_dongle_work_mode_start:
+0x2f51 007027 call g24_dongle_work_init 
+0x2f52 007028 call g24_ch_process 
+0x2f53 007029 call g24_receive_packet_start 
+0x2f54 007030 branch g24_blank_data_process 
+:      007032 g24_dongle_work_init:
+0x2f55 007033 call g24_fetch_mem_dongle_mode_init 
+0x2f56 007035 rtnbit1 dongle_work 
+0x2f57 007036 set1 dongle_work ,pdata 
+0x2f58 007037 call g24_store_mem_dongle_mode_init 
+0x2f59 007039 call g24_store_mem_tx_power 
+0x2f5a 007042 call g24_set0_mem_ackpayload_enable 
+0x2f5b 007044 jam 0 ,mem_usb_tx_enable 
+0x2f5c 007045 call g24_set1_mem_abort_pac 
+0x2f5d 007047 call g24_dongle_init 
+:      007048 g24_rx_interrupt_clear:
+0x2f5e 007049 add regc ,offset_24g_rxbuf ,contw 
+0x2f5f 007051 arg 66 ,loopcnt 
+0x2f60 007052 branch clear_mem 
+:      007054 g24_dongle_init:
+0x2f61 007055 call g24_set0_mem_pid 
+0x2f62 007057 call g24_fetch_mem_rx_addr 
+0x2f63 007059 call g24_store_mem_addr 
+0x2f64 007061 branch g24_ch 
+:      007063 g24_ch_process:
+0x2f65 007064 bpatch patch17_5 ,mem_patch17 
+0x2f66 007065 call g24_fetch_mem_abort_pac 
+0x2f67 007067 beq 1 ,g24_noise_rssi 
+0x2f68 007068 call g24_fetch_mem_hop_pac 
+0x2f69 007070 beq 1 ,g24_ch 
+0x2f6a 007071 setarg offset_24g_hop_btclk 
+0x2f6b 007072 iadd regc ,rega 
+0x2f6c 007073 ifetcht 4 ,rega 
+0x2f6d 007075 copy clkn_bt ,pdata 
+0x2f6e 007076 isub temp ,null 
+0x2f6f 007077 ncall g24_timer_timeout ,positive 
+0x2f70 007078 copy pdata ,regb 
+0x2f71 007079 setarg offset_24g_hop_btclk 
+0x2f72 007080 iadd regc ,rega 
+0x2f73 007081 ifetch 4 ,rega 
+0x2f74 007082 copy pdata ,temp 
+0x2f75 007084 setarg offset_24g_hop_interval 
+0x2f76 007085 iadd regc ,rega 
+0x2f77 007086 copy temp ,pdata 
+0x2f78 007087 ifetcht 1 ,rega 
+0x2f79 007089 iadd temp ,temp 
+0x2f7a 007090 copy regb ,pdata 
+0x2f7b 007091 isub temp ,null 
+0x2f7c 007092 nrtn positive 
+0x2f7d 007093 set0 28 ,pdata 
+0x2f7e 007094 setarg offset_24g_hop_btclk 
+0x2f7f 007095 iadd regc ,contw 
+0x2f80 007096 istore 4 ,contw 
+:      007098 g24_ch_update:
+0x2f81 007099 call g24_ch 
+0x2f82 007100 call g24_fetch_mem_rf_laststa 
+0x2f83 007102 increase 1 ,pdata 
+0x2f84 007103 call g24_store_mem_rf_laststa 
+0x2f85 007105 rtnne 2 
+0x2f86 007106 call g24_set0_mem_rf_laststa 
+0x2f87 007110 branch g24_set1_mem_abort_pac 
+:      007112 g24_ch_timer_reinit:
+0x2f88 007113 copy clkn_bt ,pdata 
+0x2f89 007114 arg offset_24g_hop_btclk ,rega 
+0x2f8a 007115 call g24_set_contw_with_temp 
+0x2f8b 007116 istore 4 ,contw 
+0x2f8c 007120 branch g24_set0_mem_rf_laststa 
+:      007122 g24_noise_rssi:
+0x2f8d 007123 arg mem_rssi_noise_buffer ,rega 
+0x2f8e 007124 call g24_noise_rssi_average 
+0x2f8f 007125 add regc ,offset_rssi_noise_avg ,contw 
+0x2f90 007126 istoret 1 ,contw 
+0x2f91 007128 sub temp ,rssi_thresh_noise ,null 
+0x2f92 007129 nrtn positive 
+0x2f93 007130 branch g24_ch 
+:      007132 g24_noise_rssi_average:
+0x2f94 007133 arg rssi_buf_len_noise + 1 ,loopcnt 
+0x2f95 007134 branch rssi_average 
+:      007136 g24_blank_data_process:
+0x2f96 007137 call g24_ms_blank_data 
+0x2f97 007138 call g24_kb_blank_data 
+0x2f98 007139 branch g24_kb_mul_blank_data 
+:      007141 g24_ms_blank_data:
+0x2f99 007142 setarg offset_24g_ms_blank_data_enable 
+0x2f9a 007143 call g24_set_rega_ifetch_1byte 
+0x2f9b 007145 rtn blank 
+0x2f9c 007146 arg timer_ms_blank ,queue 
+0x2f9d 007147 call timer_check 
+0x2f9e 007148 nrtn blank 
+0x2f9f 007149 call g24_set0_mem_ms_blank_data_enable 
+:      007151 g24_ms_blank_data_2usb:
+0x2fa0 007152 setarg ms_report_id 
+0x2fa1 007153 store 1 ,mem_usb_mouse_data 
+0x2fa2 007154 setarg 0 
+0x2fa3 007155 istore 7 ,contw 
+0x2fa4 007156 branch g24_data_type1_usbtx_enable 
+:      007158 g24_kb_blank_data:
+0x2fa5 007159 setarg offset_24g_kb_blank_data_enable 
+0x2fa6 007160 call g24_set_rega_ifetch_1byte 
+0x2fa7 007162 rtn blank 
+0x2fa8 007163 arg timer_kb_blank ,queue 
+0x2fa9 007164 call timer_check 
+0x2faa 007165 nrtn blank 
+0x2fab 007166 call g24_set0_mem_kb_blank_data_enable 
+:      007168 g24_kb_blank_data_2usb:
+0x2fac 007169 arg mem_usb_kb_data ,contw 
+0x2fad 007170 arg 2 ,loopcnt 
+0x2fae 007171 call memset0 
+0x2faf 007172 jam kb_normal_report_id ,mem_usb_kb_data 
+0x2fb0 007173 branch g24_kb_data_into_ep1_fifo 
+:      007175 g24_kb_mul_blank_data:
+0x2fb1 007176 setarg offset_24g_kb_mul_blank_data_enable 
+0x2fb2 007177 call g24_set_rega_ifetch_1byte 
+0x2fb3 007179 rtn blank 
+0x2fb4 007180 arg timer_kb_mul_blank ,queue 
+0x2fb5 007181 call timer_check 
+0x2fb6 007182 nrtn blank 
+0x2fb7 007183 call g24_set0_mem_kb_mul_blank_data_enable 
+:      007185 g24_kb_mul_blank_data_2usb:
+0x2fb8 007186 arg mem_usb_kb_multikey ,contw 
+0x2fb9 007187 arg 2 ,loopcnt 
+0x2fba 007188 call memset0 
+0x2fbb 007189 jam kb_multikey_report_id ,mem_usb_kb_multikey 
+0x2fbc 007190 branch g24_kb_mul_data_into_ep2_fifo 
+:      007192 g24_dongle_bind_mode:
+0x2fbd 007193 call g24_fetch_mem_dongle_work_mode 
+0x2fbe 007195 rtnne dongle_bind 
+0x2fbf 007196 call g24_dongle_bind_init 
+0x2fc0 007197 branch g24_dongle_bind_data_process 
+:      007199 g24_dongle_bind_init:
+0x2fc1 007200 call g24_fetch_mem_dongle_mode_init 
+0x2fc2 007202 rtnbit1 dongle_bind 
+0x2fc3 007203 set1 dongle_bind ,pdata 
+0x2fc4 007204 call g24_store_mem_dongle_mode_init 
+0x2fc5 007206 call g24_set1_mem_ackpayload_enable 
+0x2fc6 007208 call g24_pair_init 
+0x2fc7 007209 setarg 0 
+0x2fc8 007210 arg offset_dongle_ms_bind_step ,rega 
+0x2fc9 007211 call g24_set_contw_with_temp 
+0x2fca 007213 branch g24_contw_istore_3byte 
+:      007215 g24_dongle_bind_data_process:
+0x2fcb 007216 call g24_receive_transmit_ack 
+0x2fcc 007217 nbranch g24_rx_interrupt_clear ,user3 
+0x2fcd 007218 add regc ,offset_24g_rxbuf ,contr 
+0x2fce 007219 setarg offset_24g_rxdata_temp 
+0x2fcf 007220 iadd regc ,contw 
+0x2fd0 007221 arg 8 ,loopcnt 
+0x2fd1 007222 call memcpy 
+0x2fd2 007223 setarg offset_24g_rxdata_temp_add2 
+0x2fd3 007224 call g24_set_rega_ifetch_1byte 
+0x2fd4 007225 beq datatype_bind ,g24_dongle_bind_first_step 
+0x2fd5 007226 beq datatype_config ,g24_dongle_bind_second_step 
+0x2fd6 007227 beq datatype_ok ,g24_dongle_bind_third_step 
+0x2fd7 007228 beq 0xff ,g24_data_attemp 
+0x2fd8 007229 branch g24_rx_interrupt_clear 
+:      007231 g24_dongle_bind_first_step:
+0x2fd9 007232 call g24_fetch_mem_rxdata_temp_add3_1byte 
+0x2fda 007233 beq bind_mouse ,g24_dongle_bind_first_step_mouse 
+0x2fdb 007234 beq bind_keyboard ,g24_dongle_bind_first_step_keyboard 
+0x2fdc 007235 rtn 
+:      007236 g24_dongle_bind_first_step_mouse:
+0x2fdd 007237 setarg 1 
+0x2fde 007238 call g24_store_mem_ms_bind_step 
+:      007240 g24_dongle_bind_ms_payload_cfg:
+0x2fdf 007241 setarg datatype_mouse 
+0x2fe0 007242 call g24_store_mem_bind_payload 
+:      007244 g24_dongle_bind_payload_cfg:
+0x2fe1 007245 setarg 0x80 
+0x2fe2 007246 arg offset_24g_bind_payload_add1 ,rega 
+0x2fe3 007247 call g24_set_contw_with_regb_store_1byte 
+0x2fe4 007249 call g24_fetch_mem_rx_addr 
+0x2fe5 007251 arg offset_24g_bind_payload_add2 ,rega 
+0x2fe6 007252 call g24_set_contw_with_temp 
+0x2fe7 007254 branch g24_contw_istore_4byte 
+:      007256 g24_dongle_bind_first_step_keyboard:
+0x2fe8 007257 setarg 1 
+0x2fe9 007258 call g24_store_mem_kb_bind_step 
+:      007260 g24_dongle_bind_kb_payload_cfg:
+0x2fea 007261 setarg datatype_keyboard 
+0x2feb 007262 call g24_store_mem_bind_payload 
+0x2fec 007264 branch g24_dongle_bind_payload_cfg 
+:      007266 g24_dongle_bind_second_step:
+0x2fed 007267 call g24_fetch_mem_rxdata_temp_add3_1byte 
+0x2fee 007268 beq bind_mouse ,g24_dongle_bind_second_step_mouse 
+0x2fef 007269 beq bind_keyboard ,g24_dongle_bind_second_step_keyboard 
+0x2ff0 007270 rtn 
+:      007271 g24_dongle_bind_second_step_mouse:
+0x2ff1 007272 call g24_dongle_bind_ms_payload_cfg 
+0x2ff2 007273 setarg offset_dongle_ms_bind_step 
+0x2ff3 007274 call g24_set_rega_ifetch_1byte 
+0x2ff4 007276 beq 1 ,g24_dongle_ms_bind_step_set2 
+0x2ff5 007277 rtn 
+:      007278 g24_dongle_ms_bind_step_set2:
+0x2ff6 007279 setarg 2 
+:      007281 g24_store_mem_ms_bind_step:
+0x2ff7 007282 arg offset_dongle_ms_bind_step ,rega 
+0x2ff8 007283 branch g24_set_contw_with_regb_store_1byte 
+:      007285 g24_dongle_bind_second_step_keyboard:
+0x2ff9 007286 call g24_dongle_bind_kb_payload_cfg 
+0x2ffa 007287 setarg offset_dongle_kb_bind_step 
+0x2ffb 007288 call g24_set_rega_ifetch_1byte 
+0x2ffc 007290 beq 1 ,g24_dongle_kb_bind_step_set2 
+0x2ffd 007291 rtn 
+:      007292 g24_dongle_kb_bind_step_set2:
+0x2ffe 007293 setarg 2 
+:      007295 g24_store_mem_kb_bind_step:
+0x2fff 007296 arg offset_dongle_kb_bind_step ,rega 
+0x3000 007297 branch g24_set_contw_with_regb_store_1byte 
+:      007299 g24_dongle_bind_third_step:
+0x3001 007300 call g24_fetch_mem_rxdata_temp_add3_1byte 
+0x3002 007301 beq bind_mouse ,g24_dongle_bind_third_step_mouse 
+0x3003 007302 beq bind_keyboard ,g24_dongle_bind_third_step_keyboard 
+0x3004 007303 rtn 
+:      007304 g24_dongle_bind_third_step_mouse:
+0x3005 007305 setarg offset_dongle_ms_bind_step 
+0x3006 007306 call g24_set_rega_ifetch_1byte 
+0x3007 007308 beq 2 ,g24_dongle_ms_bind_step_success 
+0x3008 007309 rtn 
+:      007310 g24_dongle_ms_bind_step_success:
+0x3009 007311 call g24_fetch_mem_bind_device_status 
+0x300a 007313 or_into 0x01 ,pdata 
+0x300b 007314 call g24_store_mem_bind_device_status 
+:      007316 g24_dongle_bind_exit:
+0x300c 007317 setarg 0 
+0x300d 007318 setarg offset_dongle_ms_bind_step 
+0x300e 007319 iadd regc ,contw 
+0x300f 007320 istore 2 ,contw 
+0x3010 007321 branch g24_rx_interrupt_clear 
+:      007323 g24_dongle_bind_third_step_keyboard:
+0x3011 007324 setarg offset_dongle_kb_bind_step 
+0x3012 007325 call g24_set_rega_ifetch_1byte 
+0x3013 007327 bne 0 ,g24_dongle_kb_bind_step_success 
+0x3014 007328 rtn 
+:      007329 g24_dongle_kb_bind_step_success:
+0x3015 007330 call g24_fetch_mem_bind_device_status 
+0x3016 007332 or_into 0x02 ,pdata 
+0x3017 007333 call g24_store_mem_bind_device_status 
+0x3018 007335 branch g24_dongle_bind_exit 
+:      007338 dongle_usb_dispatch:
+0x3019 007339 fetch 1 ,mem_usb0_get_set_report 
+0x301a 007340 rtn blank 
+0x301b 007341 jam 0 ,mem_usb0_get_set_report 
+0x301c 007342 fetch 2 ,mem_usb_setup_bvalue_temp 
+0x301d 007343 arg pc_set_report ,temp 
+0x301e 007344 isub temp ,null 
+0x301f 007345 nrtn zero 
+0x3020 007347 fetch 1 ,mem_usb0_set_report_data 
+0x3021 007348 rtnne pc_report_id 
+0x3022 007349 fetch 1 ,mem_usb0_set_report_data + 1 
+0x3023 007350 bpatch patch17_6 ,mem_patch17 
+0x3024 007351 beq command_mode ,dongle_dispose_cmd_mode 
+0x3025 007352 beq command_bind ,dongle_dispose_cmd_bind 
+0x3026 007353 beq command_current_project ,dongle_dispose_cmd_current_project 
+0x3027 007354 beq command_current_mode ,dongle_dispose_cmd_current_mode 
+0x3028 007355 beq command_current_fw_version ,dongle_dispose_cmd_current_fw_version 
+0x3029 007356 beq command_user_defined ,dongle_dispose_cmd_user_defined 
+:      007357 usb0_data_ready_report_set0:
+0x302a 007358 jam 0 ,mem_usb0_data_ready_report 
+0x302b 007359 rtn 
+:      007360 dongle_dispose_cmd_bind:
+0x302c 007361 fetch 1 ,mem_usb0_set_report_data + 2 
+0x302d 007362 beq com_bind_get ,dongle_dispose_cmd_get_bind 
+0x302e 007363 beq com_bind_exit ,dongle_dispose_cmd_exit_bind 
+0x302f 007364 beq com_read_mode ,dongle_dispose_cmd_read_mode 
+0x3030 007365 branch usb0_data_ready_report_set0 
+:      007366 dongle_dispose_cmd_get_bind:
+0x3031 007367 call g24_fetch_mem_bind_device_status 
+0x3032 007369 store 1 ,mem_usb0_get_report_data + 1 
+0x3033 007370 branch usb0_data_ready_report_set1 
+:      007371 dongle_dispose_cmd_exit_bind:
+0x3034 007372 call g24_set_work_mem_dongle_work_mode 
+0x3035 007374 call g24_set0_mem_dongle_mode_init 
+0x3036 007376 call g24_fetch_mem_bind_device_status 
+0x3037 007378 store 1 ,mem_usb0_get_report_data + 1 
+0x3038 007379 branch usb0_data_ready_report_set1 
+:      007381 dongle_dispose_cmd_read_mode:
+:      007382 dongle_dispose_in_bind_mode:
+0x3039 007383 jam command_bind ,mem_usb0_get_report_data + 1 
+0x303a 007384 branch usb0_data_ready_report_set1 
+:      007386 dongle_dispose_cmd_mode:
+0x303b 007387 fetch 1 ,mem_usb0_set_report_data + 2 
+0x303c 007388 beq com_mode_bind ,dongle_enter_bind_mode 
+0x303d 007390 branch usb0_data_ready_report_set0 
+:      007391 dongle_enter_bind_mode:
+0x303e 007394 call g24_bind_mode_enable 
+:      007395 usb0_data_ready_report_set1:
+0x303f 007396 jam 1 ,mem_usb0_data_ready_report 
+0x3040 007397 rtn 
+:      007402 dongle_dispose_cmd_current_project:
+0x3041 007403 jam product_id ,mem_usb0_get_report_data + 1 
+0x3042 007404 branch usb0_data_ready_report_set1 
+:      007406 dongle_dispose_cmd_current_mode:
+0x3043 007407 call g24_fetch_mem_dongle_work_mode 
+0x3044 007409 beq dongle_work ,dongle_dispose_in_work_mode 
+0x3045 007410 beq dongle_bind ,dongle_dispose_in_bind_mode 
+0x3046 007412 rtn 
+:      007413 dongle_dispose_in_work_mode:
+0x3047 007414 jam command_mode ,mem_usb0_get_report_data + 1 
+0x3048 007415 branch usb0_data_ready_report_set1 
+:      007420 dongle_dispose_cmd_current_fw_version:
+0x3049 007421 jam fw_version0 ,mem_usb0_get_report_data + 1 
+0x304a 007422 jam fw_version1 ,mem_usb0_get_report_data + 2 
+0x304b 007423 jam fw_version2 ,mem_usb0_get_report_data + 3 
+0x304c 007424 branch usb0_data_ready_report_set1 
+:      007426 dongle_dispose_cmd_user_defined:
+0x304d 007428 call g24_set1_mem_ackpayload_enable 
+0x304e 007429 fetch 1 ,mem_usb0_set_report_data + 2 
+0x304f 007430 increase 2 ,pdata 
+0x3050 007431 copy pdata ,loopcnt 
+0x3051 007432 arg mem_usb0_set_report_data ,contr 
+0x3052 007433 setarg offset_24g_ackpayload 
+0x3053 007434 iadd regc ,contw 
+0x3054 007435 branch memcpy 
+:      007438 dongle_auto_bind:
+0x3055 007439 bpatch patch17_7 ,mem_patch17 
+0x3056 007440 call g24_mode_switch_init 
+:      007441 dongle_auto_bind_loop:
+0x3057 007442 call g24_receive_process 
+0x3058 007443 call usb_isr 
+0x3059 007444 branch dongle_auto_bind_loop 
+:      007446 g24_dongle_work_mode_auto:
+0x305a 007447 call g24_fetch_mem_dongle_work_mode 
+0x305b 007449 rtnne dongle_work 
+0x305c 007450 call g24_dongle_work_mode_start 
+0x305d 007451 branch g24_rx_nodata_process 
+:      007453 g24_dongle_bind_mode_auto:
+0x305e 007454 call g24_fetch_mem_dongle_work_mode 
+0x305f 007456 rtnne dongle_bind 
+0x3060 007457 call g24_dongle_bind_init 
+0x3061 007458 call g24_dongle_bind_data_process 
+0x3062 007459 call g24_fetch_mem_bind_device_status 
+0x3063 007461 rtn blank 
+0x3064 007462 call g24_set0_mem_mode_switch 
+0x3065 007464 call dongle_check_mode 
+0x3066 007465 call g24_enable_nodata_timer 
+:      007466 g24_timer_init:
+0x3067 007467 setarg 0 
+0x3068 007468 add regc ,offset_24g_tx_btclk ,contw 
+0x3069 007470 branch g24_contw_istore_4byte 
+:      007472 g24_timer_check:
+0x306a 007473 call disable_user 
+0x306b 007474 add regc ,offset_24g_tx_btclk ,rega 
+0x306c 007475 ifetcht 4 ,rega 
+0x306d 007477 copy clkn_bt ,pdata 
+0x306e 007478 isub temp ,null 
+0x306f 007479 ncall g24_timer_timeout ,positive 
+0x3070 007480 copy pdata ,regb 
+0x3071 007481 add regc ,offset_24g_tx_btclk ,rega 
+0x3072 007482 ifetch 4 ,rega 
+0x3073 007484 add regc ,offset_24g_interval ,rega 
+0x3074 007485 ifetcht 1 ,rega 
+0x3075 007487 iadd temp ,temp 
+0x3076 007488 copy regb ,pdata 
+0x3077 007489 isub temp ,null 
+0x3078 007490 nrtn positive 
+0x3079 007491 set0 28 ,pdata 
+0x307a 007492 add regc ,offset_24g_tx_btclk ,contw 
+0x307b 007493 istore 4 ,contw 
+0x307c 007495 branch enable_user 
+:      007497 g24_mode_switch_init:
+0x307d 007498 setarg 1 
+0x307e 007499 call g24_store_mem_mode_switch 
+0x307f 007501 call g24_set0_mem_time_slice 
+0x3080 007503 setarg 0xff 
+0x3081 007504 add regc ,offset_24g_interval ,contw 
+0x3082 007505 istore 1 ,contw 
+0x3083 007507 branch g24_timer_init 
+:      007509 g24_mode_switch:
+0x3084 007510 setarg offset_24g_mode_switch 
+0x3085 007511 call g24_set_rega_ifetch_1byte 
+0x3086 007513 rtn blank 
+0x3087 007514 call g24_timer_check 
+0x3088 007515 nrtn user 
+0x3089 007516 call g24_fetch_mem_time_slice 
+0x308a 007518 increase 1 ,pdata 
+0x308b 007519 and_into 1 ,pdata 
+0x308c 007520 call g24_store_mem_time_slice 
+0x308d 007522 beq 0 ,dongle_check_mode 
+0x308e 007523 beq 1 ,g24_bind_mode_enable 
+0x308f 007524 rtn 
+:      007526 g24_bind_mode_enable:
+0x3090 007530 setarg dongle_bind 
+0x3091 007531 call g24_store_mem_dongle_work_mode 
+0x3092 007532 branch g24_set0_mem_dongle_mode_init 
+:      007534 g24_enable_nodata_timer:
+0x3093 007535 setarg 1 
+0x3094 007536 call g24_store_mem_nodata_timer_enable 
+:      007538 g24_enable_nodata_timer_init:
+0x3095 007539 setarg timer_nodata_delay 
+0x3096 007540 arg timer_nodata ,queue 
+0x3097 007541 branch timer_init 
+:      007543 g24_rx_nodata_process:
+0x3098 007544 call g24_fetch_mem_nodata_timer_enable 
+0x3099 007546 rtn blank 
+0x309a 007547 arg timer_nodata ,queue 
+0x309b 007548 call timer_check 
+0x309c 007549 nrtn blank 
+0x309d 007550 call g24_set0_mem_nodata_timer_enable 
+0x309e 007553 setarg dongle_search 
+0x309f 007554 call g24_store_mem_dongle_work_mode 
+0x30a0 007556 call g24_set0_mem_dongle_mode_init 
+0x30a1 007558 branch g24_rx_interrupt_clear 
+:      007560 g24_dongle_search_mode_auto:
+0x30a2 007561 bpatch patch18_0 ,mem_patch18 
+0x30a3 007562 call g24_fetch_mem_dongle_work_mode 
+0x30a4 007564 rtnne dongle_search 
+0x30a5 007565 call g24_dongle_search_mode_init 
+0x30a6 007566 call g24_rx_auto_addr_ch_search 
+0x30a7 007567 call g24_receive_transmit_ack 
+0x30a8 007568 nbranch g24_rx_interrupt_clear ,user3 
+0x30a9 007570 call g24_dongle_search_addr_check 
+0x30aa 007571 call g24_receive_packet_parse ,zero 
+0x30ab 007575 call dongle_check_mode 
+0x30ac 007576 call g24_fetch_mem_dongle_mode_init 
+0x30ad 007578 set1 dongle_work ,pdata 
+0x30ae 007579 call g24_store_mem_dongle_mode_init 
+0x30af 007581 call g24_rx_interrupt_clear 
+0x30b0 007582 call g24_enable_nodata_timer 
+0x30b1 007583 call g24_dongle_search_addr_check 
+0x30b2 007584 branch g24_dg_ch_num_reinit ,zero 
+0x30b3 007585 setarg offset_24g_kb_addr 
+0x30b4 007586 call g24_set_rega_ifetcht_4byte 
+0x30b5 007588 call g24_fetch_mem_addr_isub_temp 
+0x30b6 007589 branch g24_kb_ch_num_reinit ,zero 
+0x30b7 007590 setarg offset_24g_mouse_addr 
+0x30b8 007591 call g24_set_rega_ifetcht_4byte 
+0x30b9 007593 call g24_fetch_mem_addr_isub_temp 
+0x30ba 007594 branch g24_ms_ch_num_reinit ,zero 
+0x30bb 007595 rtn 
+:      007597 g24_dongle_search_addr_check:
+0x30bc 007598 setarg offset_24g_rx_addr 
+0x30bd 007599 call g24_set_rega_ifetcht_4byte 
+:      007601 g24_fetch_mem_addr_isub_temp:
+0x30be 007602 call g24_fetch_mem_addr 
+0x30bf 007604 isub temp ,null 
+0x30c0 007605 rtn 
+:      007607 g24_dg_ch_num_reinit:
+0x30c1 007608 setarg offset_24g_dg_ch_number 
+0x30c2 007609 call g24_set_rega_ifetch_1byte 
+:      007611 g24_current_ch_num_reinit:
+0x30c3 007613 add regc ,offset_24g_current_ch_number ,contw 
+0x30c4 007614 branch g24_contw_istore_1byte 
+:      007616 g24_kb_ch_num_reinit:
+0x30c5 007617 setarg offset_24g_kb_ch_number 
+0x30c6 007618 call g24_set_rega_ifetch_1byte 
+0x30c7 007620 branch g24_current_ch_num_reinit 
+:      007621 g24_ms_ch_num_reinit:
+0x30c8 007622 setarg offset_24g_ms_ch_number 
+0x30c9 007623 call g24_set_rega_ifetch_1byte 
+0x30ca 007625 branch g24_current_ch_num_reinit 
+:      007627 g24_dongle_search_mode_init:
+0x30cb 007628 call g24_fetch_mem_dongle_mode_init 
+0x30cc 007630 rtnbit1 dongle_search 
+0x30cd 007631 set1 dongle_search ,pdata 
+0x30ce 007632 call g24_store_mem_dongle_mode_init 
+0x30cf 007634 call g24_set0_mem_time_slice 
+0x30d0 007636 call g24_set1_mem_ackpayload_enable 
+0x30d1 007638 setarg 0 
+0x30d2 007639 add regc ,offset_rssi_noise_dg_index ,contw 
+0x30d3 007640 istore 3 ,contw 
+0x30d4 007642 arg offset_24g_dg_config_ch_once ,rega 
+0x30d5 007643 call g24_set_contw_with_temp 
+0x30d6 007644 istore 7 ,contw 
+0x30d7 007647 call g24_dongle_search_addr_check 
+0x30d8 007648 nrtn zero 
+0x30d9 007649 add regc ,offset_24g_current_ch_number ,rega 
+0x30da 007650 ifetch 1 ,rega 
+0x30db 007652 arg offset_24g_dg_ch_number ,rega 
+0x30dc 007653 call g24_set_contw_with_regb_store_1byte 
+0x30dd 007655 add regc ,offset_24g_ch ,rega 
+0x30de 007656 ifetch 1 ,rega 
+0x30df 007659 branch g24_store_mem_dg_last_ch 
+:      007661 g24_rx_auto_addr_ch_search:
+0x30e0 007662 bpatch patch18_1 ,mem_patch18 
+0x30e1 007663 call g24_fetch_mem_time_slice 
+0x30e2 007665 increase 1 ,pdata 
+0x30e3 007666 and_into 3 ,pdata 
+0x30e4 007667 call g24_store_mem_time_slice 
+0x30e5 007670 beq 0 ,g24_rx_auto_bind_config_kb 
+0x30e6 007671 beq 1 ,g24_rx_auto_bind_config_dongle 
+0x30e7 007672 beq 2 ,g24_rx_auto_bind_config_mouse 
+0x30e8 007673 beq 3 ,g24_rx_auto_bind_config_dongle 
+0x30e9 007674 rtn 
+:      007676 g24_rx_auto_bind_config_mouse:
+0x30ea 007677 call g24_dongle_bind_ms_payload_cfg 
+0x30eb 007678 setarg offset_24g_mouse_addr 
+0x30ec 007679 call g24_set_rega_ifetch_4byte 
+0x30ed 007681 branch g24_rx_auto_addr_ch_search ,blank 
+0x30ee 007682 call g24_store_mem_addr 
+0x30ef 007684 setarg offset_24g_ms_config_ch_once 
+0x30f0 007685 call g24_set_rega_ifetch_1byte 
+0x30f1 007687 call g24_ms_config_ch_once ,blank 
+0x30f2 007688 setarg offset_24g_ms_last_ch 
+0x30f3 007689 call g24_set_rega_ifetch_1byte 
+0x30f4 007691 call g24_store_mem_ch 
+0x30f5 007693 add regc ,offset_rssi_noise_ms_index ,rega 
+0x30f6 007694 ifetcht 1 ,rega 
+0x30f7 007696 arg mem_rssi_noise_ms_buffer ,rega 
+0x30f8 007697 call rssi_noise_store 
+0x30f9 007698 add regc ,offset_rssi_noise_ms_index ,contw 
+0x30fa 007699 istoret 1 ,contw 
+0x30fb 007701 call g24_noise_rssi_average 
+0x30fc 007702 add regc ,offset_rssi_noise_ms_avg ,contw 
+0x30fd 007703 istoret 1 ,contw 
+0x30fe 007705 sub temp ,rssi_thresh_noise ,null 
+0x30ff 007706 nrtn positive 
+0x3100 007707 setarg offset_24g_ms_ch_number 
+0x3101 007708 call g24_set_rega_ifetcht_1byte 
+0x3102 007710 call g24_ch_temp_incre_size4 
+0x3103 007711 arg offset_24g_ms_ch_number ,rega 
+0x3104 007712 call g24_set_contw_with_regb2 
+0x3105 007713 istoret 1 ,contw 
+:      007715 g24_store_mem_ms_last_ch:
+0x3106 007717 arg offset_24g_ms_last_ch ,rega 
+0x3107 007718 branch g24_set_contw_with_regb_store_1byte 
+:      007720 g24_ms_config_ch_once:
+0x3108 007721 setarg 1 
+0x3109 007722 arg offset_24g_ms_config_ch_once ,rega 
+0x310a 007723 call g24_set_contw_with_regb_store_1byte 
+0x310b 007725 arg 0 ,temp 
+0x310c 007726 call g24_ch_calc 
+0x310d 007729 branch g24_store_mem_ms_last_ch 
+:      007731 g24_rx_auto_bind_config_kb:
+0x310e 007732 call g24_dongle_bind_kb_payload_cfg 
+0x310f 007733 setarg offset_24g_kb_addr 
+0x3110 007734 call g24_set_rega_ifetch_4byte 
+0x3111 007736 branch g24_rx_auto_addr_ch_search ,blank 
+0x3112 007737 call g24_store_mem_addr 
+0x3113 007739 setarg offset_24g_kb_config_ch_once 
+0x3114 007740 call g24_set_rega_ifetch_1byte 
+0x3115 007742 call g24_kb_config_ch_once ,blank 
+0x3116 007743 setarg offset_24g_kb_last_ch 
+0x3117 007744 call g24_set_rega_ifetch_1byte 
+0x3118 007746 call g24_store_mem_ch 
+0x3119 007748 add regc ,offset_rssi_noise_kb_index ,rega 
+0x311a 007749 ifetcht 1 ,rega 
+0x311b 007751 arg mem_rssi_noise_kb_buffer ,rega 
+0x311c 007752 call rssi_noise_store 
+0x311d 007753 add regc ,offset_rssi_noise_kb_index ,contw 
+0x311e 007754 istoret 1 ,contw 
+0x311f 007756 call g24_noise_rssi_average 
+0x3120 007757 add regc ,offset_rssi_noise_kb_avg ,contw 
+0x3121 007758 istoret 1 ,contw 
+0x3122 007760 sub temp ,rssi_thresh_noise ,null 
+0x3123 007761 nrtn positive 
+0x3124 007762 setarg offset_24g_kb_ch_number 
+0x3125 007763 call g24_set_rega_ifetcht_1byte 
+0x3126 007765 call g24_ch_temp_incre_size4 
+0x3127 007766 arg offset_24g_kb_ch_number ,rega 
+0x3128 007767 call g24_set_contw_with_regb2 
+0x3129 007768 istoret 1 ,contw 
+:      007770 g24_store_mem_kb_last_ch:
+0x312a 007772 arg offset_24g_kb_last_ch ,rega 
+0x312b 007773 branch g24_set_contw_with_regb_store_1byte 
+:      007775 g24_kb_config_ch_once:
+0x312c 007776 setarg 1 
+0x312d 007777 arg offset_24g_kb_config_ch_once ,rega 
+0x312e 007778 call g24_set_contw_with_regb_store_1byte 
+0x312f 007780 arg 0 ,temp 
+0x3130 007781 call g24_ch_calc 
+0x3131 007784 branch g24_store_mem_kb_last_ch 
+:      007786 g24_rx_auto_bind_config_dongle:
+0x3132 007787 call g24_dongle_bind_ms_payload_cfg 
+0x3133 007788 call g24_fetch_mem_rx_addr 
+0x3134 007790 call g24_store_mem_addr 
+0x3135 007792 setarg offset_24g_dg_config_ch_once 
+0x3136 007793 call g24_set_rega_ifetch_1byte 
+0x3137 007795 call g24_dg_config_ch_once ,blank 
+0x3138 007796 call g24_dg_store_config_ch 
+0x3139 007797 add regc ,offset_rssi_noise_dg_index ,rega 
+0x313a 007798 ifetcht 1 ,rega 
+0x313b 007800 arg mem_rssi_noise_dg_buffer ,rega 
+0x313c 007801 call rssi_noise_store 
+0x313d 007802 add regc ,offset_rssi_noise_dg_index ,contw 
+0x313e 007803 istoret 1 ,contw 
+0x313f 007805 call g24_noise_rssi_average 
+0x3140 007806 add regc ,offset_rssi_noise_dg_avg ,contw 
+0x3141 007807 istoret 1 ,contw 
+0x3142 007809 sub temp ,rssi_thresh_noise ,null 
+0x3143 007810 nrtn positive 
+0x3144 007811 setarg offset_24g_dg_ch_number 
+0x3145 007812 call g24_set_rega_ifetcht_1byte 
+0x3146 007814 call g24_ch_temp_incre_size4 
+0x3147 007815 arg offset_24g_dg_ch_number ,rega 
+0x3148 007816 call g24_set_contw_with_regb2 
+0x3149 007817 istoret 1 ,contw 
+:      007819 g24_store_mem_dg_last_ch:
+0x314a 007822 arg offset_24g_dg_last_ch ,rega 
+0x314b 007823 branch g24_set_contw_with_regb_store_1byte 
+:      007826 g24_dg_config_ch_once:
+0x314c 007831 setarg 1 
+0x314d 007832 arg offset_24g_dg_config_ch_once ,rega 
+0x314e 007833 call g24_set_contw_with_regb_store_1byte 
+:      007834 g24_dg_store_config_ch:
+0x314f 007835 setarg offset_24g_dg_last_ch 
+0x3150 007836 call g24_set_rega_ifetch_1byte 
+0x3151 007837 branch g24_store_mem_ch 
+:      007840 g24_transmit_ack:
+0x3152 007842 add regc ,offset_24g_rxbuf ,rega 
+0x3153 007843 ifetch 1 ,rega 
+0x3154 007845 call g24_store_mem_data_type 
+0x3155 007848 call g24_read_len_pid_crc 
+0x3156 007850 call g24_fetch_mem_rxbuf_add1 
+0x3157 007852 isolate1 bit_ack_24g ,pdata 
+0x3158 007853 branch g24tx_no_ack ,true 
+:      007854 g24tx_with_ack:
+0x3159 007855 call g24_ackpayload_prep 
+0x315a 007856 call g24_transmit_prep 
+0x315b 007857 call g24_transmit 
+:      007858 g24tx_no_ack:
+0x315c 007859 branch g24_end_of_packet 
+:      007861 g24_ackpayload_prep:
+0x315d 007862 bpatch patch18_2 ,mem_patch18 
+0x315e 007863 add regc ,offset_24g_datalen ,contw 
+0x315f 007864 call g24_mem_set0 
+0x3160 007866 setarg offset_24g_ackpayload_enable 
+0x3161 007867 call g24_set_rega_ifetch_1byte 
+0x3162 007869 rtn blank 
+0x3163 007870 setarg 0x06 
+0x3164 007871 add regc ,offset_24g_datalen ,contw 
+0x3165 007872 istore 1 ,contw 
+0x3166 007874 arg 0x06 ,loopcnt 
+0x3167 007875 setarg offset_24g_bind_payload 
+0x3168 007876 iadd regc ,contr 
+0x3169 007878 add regc ,offset_24g_txbuf ,contw 
+0x316a 007880 branch memcpy 
+:      007883 g24_receive_packet_start:
+0x316b 007884 call g24_receive_transmit_ack 
+0x316c 007885 nbranch g24_rx_interrupt_clear ,user3 
+0x316d 007886 branch g24_receive_packet_parse 
+:      007888 g24_receive_transmit_ack:
+0x316e 007889 call g24_rx_interrupt_clear 
+0x316f 007890 call g24_receive_packet 
+0x3170 007891 nrtn user3 
+0x3171 007892 branch g24_transmit_ack 
+:      007894 g24_receive_packet_parse:
+0x3172 007895 bpatch patch18_3 ,mem_patch18 
+0x3173 007896 call g24_receive_packet_parse_pid_crc 
+0x3174 007897 nbranch g24_rx_interrupt_clear ,user 
+0x3175 007898 add regc ,offset_24g_rxdata_length ,rega 
+0x3176 007899 ifetch 1 ,rega 
+0x3177 007901 branch g24_rx_interrupt_clear ,blank 
+0x3178 007902 increase 2 ,pdata 
+0x3179 007903 iforce loopcnt 
+0x317a 007904 add regc ,offset_24g_rxbuf ,contr 
+0x317b 007906 setarg offset_24g_rxdata_temp 
+0x317c 007907 iadd regc ,contw 
+0x317d 007909 call memcpy 
+0x317e 007910 call g24_set0_mem_mode_switch 
+0x317f 007912 call g24_fetch_mem_pair_mode 
+0x3180 007914 call g24_enable_nodata_timer ,blank 
+0x3181 007915 setarg offset_24g_rxdata_temp_add2 
+0x3182 007916 call g24_set_rega_ifetch_1byte 
+0x3183 007918 beq 0x01 ,g24_data_type1 
+0x3184 007919 beq 0x02 ,g24_data_type2 
+0x3185 007920 beq 0x03 ,g24_data_type3 
+0x3186 007921 beq 0xff ,g24_data_attemp 
+0x3187 007922 branch g24_rx_interrupt_clear 
+:      007924 g24_receive_packet_parse_pid_crc:
+0x3188 007925 call g24_head_ptr2regc 
+0x3189 007926 call disable_user 
+0x318a 007927 add regc ,offset_24g_sta_pid ,rega 
+0x318b 007928 ifetch 1 ,rega 
+0x318c 007930 add regc ,offset_24g_last_pid ,rega 
+0x318d 007931 ifetcht 1 ,rega 
+0x318e 007933 isub temp ,null 
+0x318f 007934 ncall enable_user ,zero 
+0x3190 007935 add regc ,offset_24g_sta_pid ,rega 
+0x3191 007936 ifetch 1 ,rega 
+0x3192 007938 add regc ,offset_24g_last_pid ,contw 
+0x3193 007939 istore 1 ,contw 
+0x3194 007941 add regc ,offset_24g_sta_crc ,rega 
+0x3195 007942 ifetch 3 ,rega 
+0x3196 007944 add regc ,offset_24g_last_crc ,rega 
+0x3197 007945 ifetcht 3 ,rega 
+0x3198 007947 isub temp ,null 
+0x3199 007948 ncall enable_user ,zero 
+0x319a 007949 add regc ,offset_24g_sta_crc ,rega 
+0x319b 007950 ifetch 3 ,rega 
+0x319c 007952 add regc ,offset_24g_last_crc ,contw 
+0x319d 007954 branch g24_contw_istore_3byte 
+:      007956 g24_data_type1:
+0x319e 007957 call g24_ch_timer_reinit 
+0x319f 007958 call g24_fetch_mem_abort_pac 
+0x31a0 007959 store 1 ,mem_temp 
+0x31a1 007961 call g24_fetcht_mem_rxdata_temp 
+0x31a2 007962 fetch 1 ,mem_temp 
+0x31a3 007964 isolate1 bit_abort ,temp 
+0x31a4 007965 setflag true ,0 ,pdata 
+0x31a5 007966 add regc ,offset_24g_abort_pac ,contw 
+0x31a6 007967 istore 1 ,contw 
+0x31a7 007969 beq 1 ,g24_data_attemp_mouse 
+0x31a8 007970 call g24_fetch_mem_hop_pac 
+0x31a9 007972 call g24_fetcht_mem_rxdata_temp 
+0x31aa 007974 isolate1 bit_hop ,temp 
+0x31ab 007975 setflag true ,0 ,pdata 
+0x31ac 007976 call g24_store_mem_hop_pac 
+0x31ad 007978 add regc ,offset_24g_cb_rxdata_type1 ,rega 
+0x31ae 007979 ifetch 2 ,rega 
+0x31af 007981 branch callback_func 
+:      007983 dongle_rxdata_type1:
+0x31b0 007984 setarg ms_report_id 
+0x31b1 007985 store 1 ,mem_usb_mouse_data 
+0x31b2 007986 call g24_fetch_mem_rxdata_temp_add3_7byte 
+0x31b3 007988 istore 7 ,contw 
+0x31b4 007989 call g24_fetch_mem_rxdata_temp_add3_7byte 
+0x31b5 007991 ncall g24_ms_enable_blank_data_forcibly ,blank 
+0x31b6 007992 call g24_fetch_mem_rxdata_temp_add3_7byte 
+0x31b7 007994 call g24_ms_disable_blank_data_forcibly ,blank 
+:      007995 g24_data_type1_usbtx_enable:
+0x31b8 007996 jam usb_ep2_ms ,mem_usb_ep2_data 
+:      007997 g24_data_type1_usbtx_enable_ep2:
+0x31b9 007998 fetch 1 ,mem_usb_tx_enable 
+0x31ba 007999 set1 2 ,pdata 
+0x31bb 008000 store 1 ,mem_usb_tx_enable 
+0x31bc 008001 rtn 
+:      008003 g24_ms_enable_blank_data_forcibly:
+0x31bd 008004 setarg 1 
+0x31be 008005 call g24_store_mem_ms_blank_data_enable 
+:      008007 g24_ms_enable_blank_data_timer:
+0x31bf 008008 setarg timer_ms_blank_delay 
+0x31c0 008009 arg timer_ms_blank ,queue 
+0x31c1 008010 branch timer_init 
+:      008011 g24_ms_disable_blank_data_forcibly:
+0x31c2 008012 call g24_set0_mem_ms_blank_data_enable 
+:      008014 g24_ms_disable_blank_data_timer:
+0x31c3 008015 setarg 0 
+0x31c4 008016 arg timer_ms_blank ,queue 
+0x31c5 008017 branch timer_init 
+:      008019 g24_data_type2:
+0x31c6 008020 call g24_fetcht_mem_rxdata_temp 
+0x31c7 008022 isolate1 bit_abort ,temp 
+0x31c8 008023 branch g24_data_attemp_kbd ,true 
+0x31c9 008024 arg mem_usb_kb_data ,contw 
+0x31ca 008025 call g24_data_type2_reverse_data 
+0x31cb 008026 fetch 8 ,mem_usb_kb_data 
+0x31cc 008027 ncall g24_kb_enable_blank_data_forcibly ,blank 
+0x31cd 008028 fetch 8 ,mem_usb_kb_data 
+0x31ce 008029 call g24_kb_disable_blank_data_forcibly ,blank 
+0x31cf 008030 call g24_head_ptr2regc 
+0x31d0 008031 fetch 8 ,mem_usb_kb_data 
+0x31d1 008032 arg offset_24g_kb_data_sta_data ,rega 
+0x31d2 008033 call g24_set_contw_with_temp 
+0x31d3 008034 istore 8 ,contw 
+0x31d4 008036 setarg offset_24g_kb_data_last_data 
+0x31d5 008037 iadd regc ,rega 
+0x31d6 008038 ifetcht 8 ,rega 
+0x31d7 008040 isub temp ,null 
+0x31d8 008041 ncall g24_kb_data_dispose ,zero 
+0x31d9 008042 setarg offset_24g_kb_data_sta_data 
+0x31da 008043 iadd regc ,rega 
+0x31db 008044 ifetch 8 ,rega 
+0x31dc 008046 arg offset_24g_kb_data_last_data ,rega 
+0x31dd 008047 call g24_set_contw_with_temp 
+0x31de 008048 istore 8 ,contw 
+0x31df 008050 branch g24_rx_interrupt_clear 
+:      008052 g24_data_type2_reverse_data:
+0x31e0 008053 setarg offset_24g_rxdata_temp_add2 
+0x31e1 008054 iadd regc ,contr 
+0x31e2 008056 arg 9 ,loopcnt 
+0x31e3 008057 branch reverse_byte 
+:      008059 g24_kb_enable_blank_data_forcibly:
+0x31e4 008060 setarg 1 
+0x31e5 008061 call g24_store_mem_kb_blank_data_enable 
+:      008063 g24_kb_enable_blank_data_timer:
+0x31e6 008064 setarg timer_kb_blank_delay 
+0x31e7 008065 arg timer_kb_blank ,queue 
+0x31e8 008066 branch timer_init 
+:      008068 g24_kb_disable_blank_data_forcibly:
+0x31e9 008069 call g24_set0_mem_kb_blank_data_enable 
+:      008071 g24_kb_disable_blank_data_timer:
+0x31ea 008072 setarg 0 
+0x31eb 008073 arg timer_kb_blank ,queue 
+0x31ec 008074 branch timer_init 
+:      008076 g24_kb_data_dispose:
+:      008077 g24_kb_data_into_ep1_fifo:
+0x31ed 008078 jam usb_ep1_kb ,mem_usb_ep1_data 
+0x31ee 008079 fetch 1 ,mem_usb_tx_enable 
+0x31ef 008080 set1 1 ,pdata 
+0x31f0 008081 store 1 ,mem_usb_tx_enable 
+0x31f1 008082 rtn 
+:      008084 g24_data_type3:
+0x31f2 008085 arg mem_usb_kb_multikey ,contw 
+0x31f3 008086 call g24_data_type2_reverse_data 
+0x31f4 008087 fetch 2 ,mem_usb_kb_multikey + 1 
+0x31f5 008088 ncall g24_kb_mul_enable_blank_data_forcibly ,blank 
+0x31f6 008089 fetch 2 ,mem_usb_kb_multikey + 1 
+0x31f7 008090 call g24_kb_mul_disable_blank_data_forcibly ,blank 
+0x31f8 008091 call g24_head_ptr2regc 
+0x31f9 008092 fetch 3 ,mem_usb_kb_multikey 
+0x31fa 008093 arg offset_24g_kb_multikey_sta_data ,rega 
+0x31fb 008094 call g24_set_contw_with_temp_store_3byte 
+0x31fc 008096 setarg offset_24g_kb_multikey_last_data 
+0x31fd 008097 iadd regc ,rega 
+0x31fe 008098 ifetcht 3 ,rega 
+0x31ff 008100 isub temp ,null 
+0x3200 008101 ncall g24_kb_mul_data_into_ep2_fifo ,zero 
+0x3201 008102 setarg offset_24g_kb_multikey_sta_data 
+0x3202 008103 iadd regc ,rega 
+0x3203 008104 ifetch 3 ,rega 
+0x3204 008106 arg offset_24g_kb_multikey_last_data ,rega 
+0x3205 008107 call g24_set_contw_with_temp_store_3byte 
+0x3206 008109 branch g24_rx_interrupt_clear 
+:      008111 g24_kb_mul_data_into_ep2_fifo:
+0x3207 008112 jam usb_ep2_multikey ,mem_usb_ep2_data 
+0x3208 008113 branch g24_data_type1_usbtx_enable_ep2 
+:      008115 g24_kb_mul_enable_blank_data_forcibly:
+0x3209 008116 setarg 1 
+0x320a 008117 call g24_store_mem_kb_mul_blank_data_enable 
+:      008119 g24_kb_mul_enable_blank_data_timer:
+0x320b 008120 setarg timer_kb_mul_blank_delay 
+0x320c 008121 arg timer_kb_mul_blank ,queue 
+0x320d 008122 branch timer_init 
+:      008124 g24_kb_mul_disable_blank_data_forcibly:
+0x320e 008125 call g24_set0_mem_kb_mul_blank_data_enable 
+:      008127 g24_kb_mul_disable_blank_data_timer:
+0x320f 008128 setarg 0 
+0x3210 008129 arg timer_kb_mul_blank ,queue 
+0x3211 008130 branch timer_init 
+:      008132 g24_data_attemp:
+0x3212 008133 call g24_fetch_mem_rxdata_temp_add3_1byte 
+0x3213 008135 beq datatype_mouse ,g24_data_attemp_mouse 
+0x3214 008136 beq datatype_keyboard ,g24_data_attemp_kbd 
+0x3215 008137 rtn 
+:      008138 g24_data_attemp_mouse:
+0x3216 008139 setarg offset_24g_rxdata_temp_add4 
+0x3217 008140 call g24_set_rega_ifetch_4byte 
+0x3218 008141 arg offset_24g_mouse_addr ,rega 
+0x3219 008142 call g24_set_contw_with_temp 
+0x321a 008145 branch g24_contw_istore_4byte 
+:      008147 g24_data_attemp_kbd:
+0x321b 008148 setarg offset_24g_rxdata_temp_add4 
+0x321c 008149 call g24_set_rega_ifetch_4byte 
+0x321d 008150 arg offset_24g_kb_addr ,rega 
+0x321e 008151 call g24_set_contw_with_temp 
+0x321f 008154 branch g24_contw_istore_4byte 
+:      008156 g24_store_mem_24g_mode:
+0x3220 008157 call g24_head_ptr2regc 
+0x3221 008158 add regc ,offset_24g_mode ,contw 
+0x3222 008159 istore 1 ,contw 
+0x3223 008160 rtn 
+:      008162 g24_fetch_mem_device_addr:
+0x3224 008163 call g24_head_ptr2regc 
+0x3225 008164 add regc ,offset_24g_device_addr ,rega 
+0x3226 008165 branch g24_rega_ifetch_4byte 
+:      008166 g24_store_mem_device_addr:
+0x3227 008167 call g24_head_ptr2regc 
+0x3228 008168 add regc ,offset_24g_device_addr ,contw 
+0x3229 008169 branch g24_contw_istore_4byte 
+:      008171 g24_fetch_mem_addr:
+0x322a 008172 add regc ,offset_24g_addr ,rega 
+0x322b 008173 branch g24_rega_ifetch_4byte 
+:      008174 g24_store_mem_addr:
+0x322c 008175 add regc ,offset_24g_addr ,contw 
+:      008176 g24_contw_istore_4byte:
+0x322d 008177 istore 4 ,contw 
+0x322e 008178 rtn 
+:      008180 g24_store_mem_ch:
+0x322f 008181 add regc ,offset_24g_ch ,contw 
+0x3230 008182 branch g24_contw_istore_1byte 
+:      008184 g24_set0_mem_pid:
+0x3231 008185 setarg 0 
+:      008186 g24_store_mem_pid:
+0x3232 008187 call g24_head_ptr2regc 
+0x3233 008188 add regc ,offset_24g_pid ,contw 
+0x3234 008189 branch g24_contw_istore_1byte 
+:      008191 g24_store_mem_txpayload:
+0x3235 008192 add regc ,offset_24g_txpayload ,contw 
+0x3236 008193 branch g24_contw_istore_1byte 
+:      008195 g24_set4_mem_max_retry:
+0x3237 008196 setarg 4 
+:      008197 g24_store_mem_max_retry:
+0x3238 008198 add regc ,offset_24g_max_retry ,contw 
+0x3239 008199 branch g24_contw_istore_1byte 
+:      008201 g24_fetch_mem_data_type:
+0x323a 008202 add regc ,offset_24g_data_type ,rega 
+0x323b 008203 branch g24_rega_ifetch_1byte 
+:      008204 g24_store_mem_data_type:
+0x323c 008205 add regc ,offset_24g_data_type ,contw 
+0x323d 008206 branch g24_contw_istore_1byte 
+:      008208 g24_set2_mem_sync_cnt:
+0x323e 008209 setarg 2 
+:      008210 g24_store_mem_sync_cnt:
+0x323f 008211 add regc ,offset_24g_sync_cnt ,contw 
+0x3240 008212 branch g24_contw_istore_1byte 
+:      008214 g24_set1_mem_rf_last_sta:
+0x3241 008215 setarg 1 
+:      008216 g24_store_mem_rf_last_sta:
+0x3242 008217 call g24_head_ptr2regc 
+0x3243 008218 add regc ,offset_24g_rf_last_sta ,contw 
+0x3244 008219 branch g24_contw_istore_1byte 
+:      008221 g24_fetch_mem_hop_pac:
+0x3245 008222 call g24_head_ptr2regc 
+0x3246 008223 add regc ,offset_24g_hop_pac ,rega 
+0x3247 008224 branch g24_rega_ifetch_1byte 
+:      008225 g24_set1_mem_hop_pac:
+0x3248 008226 setarg 1 
+:      008227 g24_store_mem_hop_pac:
+0x3249 008228 call g24_head_ptr2regc 
+0x324a 008229 add regc ,offset_24g_hop_pac ,contw 
+0x324b 008230 branch g24_contw_istore_1byte 
+:      008232 g24_fetch_mem_abort_pac:
+0x324c 008233 call g24_head_ptr2regc 
+0x324d 008234 add regc ,offset_24g_abort_pac ,rega 
+0x324e 008235 branch g24_rega_ifetch_1byte 
+:      008236 g24_set1_mem_abort_pac:
+0x324f 008237 setarg 1 
+:      008238 g24_store_mem_abort_pac:
+0x3250 008239 call g24_head_ptr2regc 
+0x3251 008240 add regc ,offset_24g_abort_pac ,contw 
+0x3252 008241 branch g24_contw_istore_1byte 
+:      008243 g24_fetch_mem_pairing_sm:
+0x3253 008244 call g24_head_ptr2regc 
+0x3254 008245 add regc ,offset_24g_pairing_sm ,rega 
+0x3255 008246 branch g24_rega_ifetch_1byte 
+:      008247 g24_store_mem_pairing_sm:
+0x3256 008248 add regc ,offset_24g_pairing_sm ,contw 
+0x3257 008249 branch g24_contw_istore_1byte 
+:      008251 g24_fetch_mem_rf_hop_ch:
+0x3258 008252 add regc ,offset_24g_rf_hop_ch ,rega 
+0x3259 008253 branch g24_rega_ifetch_1byte 
+:      008254 g24_set0_mem_rf_hop_ch:
+0x325a 008255 setarg 0 
+:      008256 g24_store_mem_rf_hop_ch:
+0x325b 008257 add regc ,offset_24g_rf_hop_ch ,contw 
+0x325c 008258 branch g24_contw_istore_1byte 
+:      008260 g24_fetch_mem_rf_work_stage:
+0x325d 008261 add regc ,offset_24g_rf_work_stage ,rega 
+0x325e 008262 branch g24_rega_ifetch_1byte 
+:      008264 g24_fetch_mem_rxbuf_add1:
+0x325f 008265 add regc ,offset_24g_rxbuf_add1 ,rega 
+0x3260 008266 branch g24_rega_ifetch_1byte 
+:      008268 g24_fetch_mem_check_dongle_times:
+0x3261 008269 add regc ,offset_24g_check_dongle_times ,rega 
+0x3262 008270 branch g24_rega_ifetch_1byte 
+:      008271 g24_set0_mem_check_dongle_times:
+0x3263 008272 setarg 0 
+:      008273 g24_store_mem_check_dongle_times:
+0x3264 008274 call g24_head_ptr2regc 
+0x3265 008275 add regc ,offset_24g_check_dongle_times ,contw 
+0x3266 008276 branch g24_contw_istore_1byte 
+:      008278 g24_store_mem_tx_power:
+0x3267 008279 call g24_head_ptr2regc 
+0x3268 008280 add regc ,offset_tx_power_temp ,rega 
+0x3269 008281 ifetch 1 ,rega 
+:      008282 g24_store_mem_txpower:
+0x326a 008283 store 1 ,mem_tx_power 
+0x326b 008284 rtn 
+:      008286 g24_store_mem_tx_power_temp:
+0x326c 008287 call g24_head_ptr2regc 
+0x326d 008288 fetch 1 ,mem_tx_power 
+0x326e 008290 add regc ,offset_tx_power_temp ,contw 
+0x326f 008291 branch g24_contw_istore_1byte 
+:      008293 g24_fetch_mem_power_ctrl_pac:
+0x3270 008294 add regc ,offset_power_ctrl_packet_cnt ,rega 
+0x3271 008295 branch g24_rega_ifetch_1byte 
+:      008297 g24_store_mem_power_ctrl_level:
+0x3272 008298 add regc ,offset_power_ctrl_level ,contw 
+0x3273 008299 branch g24_contw_istore_1byte 
+:      008301 g24_fetcht_mem_rxdata_temp:
+0x3274 008302 setarg offset_24g_rxdata_temp 
+:      008303 g24_set_rega_ifetcht_1byte:
+0x3275 008304 iadd regc ,rega 
+0x3276 008305 ifetcht 1 ,rega 
+0x3277 008306 rtn 
+:      008308 g24_fetch_mem_rf_laststa:
+0x3278 008309 setarg offset_24g_rf_laststa 
+0x3279 008310 branch g24_set_rega_ifetch_1byte 
+:      008311 g24_set0_mem_rf_laststa:
+0x327a 008312 setarg 0 
+:      008313 g24_store_mem_rf_laststa:
+0x327b 008314 arg offset_24g_rf_laststa ,rega 
+0x327c 008315 branch g24_set_contw_with_regb_store_1byte 
+:      008317 g24_fetch_mem_rx_addr:
+0x327d 008318 setarg offset_24g_rx_addr 
+:      008319 g24_set_rega_ifetch_4byte:
+0x327e 008320 call g24_set_rega 
+:      008321 g24_rega_ifetch_4byte:
+0x327f 008322 ifetch 4 ,rega 
+0x3280 008323 rtn 
+:      008325 g24_fetch_mem_time_slice:
+0x3281 008326 setarg offset_24g_time_slice 
+0x3282 008327 branch g24_set_rega_ifetch_1byte 
+:      008328 g24_set0_mem_time_slice:
+0x3283 008329 setarg 0 
+:      008330 g24_store_mem_time_slice:
+0x3284 008331 arg offset_24g_time_slice ,rega 
+0x3285 008332 branch g24_set_contw_with_regb_store_1byte 
+:      008334 g24_set0_mem_mode_switch:
+0x3286 008335 setarg 0 
+:      008336 g24_store_mem_mode_switch:
+0x3287 008337 arg offset_24g_mode_switch ,rega 
+0x3288 008338 branch g24_set_contw_with_regb_store_1byte 
+:      008340 g24_store_mem_bind_payload:
+0x3289 008341 arg offset_24g_bind_payload ,rega 
+0x328a 008342 branch g24_set_contw_with_regb_store_1byte 
+:      008344 g24_fetch_mem_bind_device_status:
+0x328b 008345 setarg offset_dongle_bind_device_status 
+0x328c 008346 branch g24_set_rega_ifetch_1byte 
+:      008347 g24_store_mem_bind_device_status:
+0x328d 008348 arg offset_dongle_bind_device_status ,rega 
+0x328e 008349 branch g24_set_contw_with_regb_store_1byte 
+:      008351 g24_fetch_mem_dongle_work_mode:
+0x328f 008352 setarg offset_dongle_work_mode 
+0x3290 008353 branch g24_set_rega_ifetch_1byte 
+:      008354 g24_set_work_mem_dongle_work_mode:
+0x3291 008355 setarg dongle_work 
+:      008356 g24_store_mem_dongle_work_mode:
+0x3292 008357 arg offset_dongle_work_mode ,rega 
+0x3293 008358 branch g24_set_contw_with_regb_store_1byte 
+:      008360 g24_fetch_mem_dongle_mode_init:
+0x3294 008361 setarg offset_dongle_mode_init 
+0x3295 008362 branch g24_set_rega_ifetch_1byte 
+:      008363 g24_set0_mem_dongle_mode_init:
+0x3296 008364 setarg clear_init 
+:      008365 g24_store_mem_dongle_mode_init:
+0x3297 008366 arg offset_dongle_mode_init ,rega 
+0x3298 008367 branch g24_set_contw_with_regb_store_1byte 
+:      008369 g24_set0_mem_ackpayload_enable:
+0x3299 008370 setarg 0 
+:      008371 g24_store_mem_ackpayload_enable:
+0x329a 008372 arg offset_24g_ackpayload_enable ,rega 
+0x329b 008373 branch g24_set_contw_with_regb_store_1byte 
+:      008374 g24_set1_mem_ackpayload_enable:
+0x329c 008375 setarg 1 
+0x329d 008376 branch g24_store_mem_ackpayload_enable 
+:      008378 g24_fetch_mem_rxdata_temp_add3_7byte:
+0x329e 008379 setarg offset_24g_rxdata_temp_add3 
+0x329f 008380 call g24_set_rega 
+0x32a0 008381 ifetch 7 ,rega 
+0x32a1 008382 rtn 
+:      008384 g24_fetch_mem_nodata_timer_enable:
+0x32a2 008385 setarg offset_24g_nodata_timer_enable 
+0x32a3 008386 branch g24_set_rega_ifetch_1byte 
+:      008387 g24_set0_mem_nodata_timer_enable:
+0x32a4 008388 setarg 0 
+:      008389 g24_store_mem_nodata_timer_enable:
+0x32a5 008390 arg offset_24g_nodata_timer_enable ,rega 
+0x32a6 008391 branch g24_set_contw_with_regb_store_1byte 
+:      008393 g24_set0_mem_ms_blank_data_enable:
+0x32a7 008394 setarg 0 
+:      008395 g24_store_mem_ms_blank_data_enable:
+0x32a8 008396 arg offset_24g_ms_blank_data_enable ,rega 
+0x32a9 008397 branch g24_set_contw_with_regb_store_1byte 
+:      008399 g24_set0_mem_kb_blank_data_enable:
+0x32aa 008400 setarg 0 
+:      008401 g24_store_mem_kb_blank_data_enable:
+0x32ab 008402 arg offset_24g_kb_blank_data_enable ,rega 
+0x32ac 008403 branch g24_set_contw_with_regb_store_1byte 
+:      008405 g24_set0_mem_kb_mul_blank_data_enable:
+0x32ad 008406 setarg 0 
+:      008407 g24_store_mem_kb_mul_blank_data_enable:
+0x32ae 008408 arg offset_24g_kb_mul_blank_data_enable ,rega 
+0x32af 008409 branch g24_set_contw_with_regb_store_1byte 
+:      008411 g24_store_mem_power_ctrl_threshold_up:
+0x32b0 008412 arg offset_power_ctrl_threshold_up ,rega 
+0x32b1 008413 branch g24_set_contw_with_regb_store_1byte 
+:      008415 g24_store_mem_power_ctrl_threshold_down:
+0x32b2 008416 arg offset_power_ctrl_threshold_down ,rega 
+:      008417 g24_set_contw_with_regb_store_1byte:
+0x32b3 008418 call g24_set_contw_with_regb 
+:      008419 g24_contw_istore_1byte:
+0x32b4 008420 istore 1 ,contw 
+0x32b5 008421 rtn 
+:      008423 g24_fetch_mem_pair_mode:
+0x32b6 008424 setarg offset_24g_pair_mode 
+0x32b7 008425 branch g24_set_rega_ifetch_1byte 
+:      008427 g24_store_mem_pair_mode:
+0x32b8 008428 arg offset_24g_pair_mode ,rega 
+0x32b9 008429 branch g24_set_contw_with_regb_store_1byte 
+:      008431 g24_store_mem_pair_txpower:
+0x32ba 008432 setarg offset_24g_pair_txpower 
+0x32bb 008433 call g24_set_rega_ifetch_1byte 
+0x32bc 008434 branch g24_store_mem_txpower 
+:      008436 g24_fetch_mem_rxdata_temp_add3_1byte:
+0x32bd 008437 setarg offset_24g_rxdata_temp_add3 
+0x32be 008438 branch g24_set_rega_ifetch_1byte 
+:      008440 g24_set_contw_with_temp:
+0x32bf 008441 copy pdata ,temp 
+0x32c0 008442 copy rega ,pdata 
+0x32c1 008443 iadd regc ,contw 
+0x32c2 008444 copy temp ,pdata 
+0x32c3 008445 rtn 
+:      008447 g24_set_contw_with_temp_store_3byte:
+0x32c4 008448 call g24_set_contw_with_temp 
+:      008449 g24_contw_istore_3byte:
+0x32c5 008450 istore 3 ,contw 
+0x32c6 008451 rtn 
+:      008453 g24_set_contw_with_regb:
+0x32c7 008454 call g24_head_ptr2regc 
+:      008455 g24_set_contw_with_regb2:
+0x32c8 008456 copy pdata ,regb 
+0x32c9 008457 copy rega ,pdata 
+0x32ca 008458 iadd regc ,contw 
+0x32cb 008459 copy regb ,pdata 
+0x32cc 008460 rtn 
+:      008462 g24_set_rega:
+0x32cd 008463 call g24_head_ptr2regc 
+0x32ce 008464 iadd regc ,rega 
+0x32cf 008465 rtn 
+:      008467 g24_set_rega_ifetch_1byte:
+0x32d0 008468 call g24_set_rega 
+:      008469 g24_rega_ifetch_1byte:
+0x32d1 008470 ifetch 1 ,rega 
+0x32d2 008471 rtn 
+:      008473 g24_set_rega_ifetcht_4byte:
+0x32d3 008474 call g24_set_rega 
+0x32d4 008475 ifetcht 4 ,rega 
+0x32d5 008476 rtn 
+:      008478 g24_mem_set0:
+0x32d6 008479 setarg 0 
+0x32d7 008480 branch g24_contw_istore_1byte 
+:      008484 app_init:
+0x32d8 008485 bpatch patch18_4 ,mem_patch18 
+0x32d9 008486 fetch 1 ,mem_device_option 
+0x32da 008487 branch app_init ,blank 
+0x32db 008489 beq dvc_op_dongle ,dongle_init 
+0x32dc 008490 beq dvc_op_antilost ,antilost_init 
+0x32dd 008491 beq dvc_op_shutter ,shutter_init 
+0x32de 008492 beq dvc_op_module ,module_init 
+0x32df 008493 beq dvc_op_car ,car_init 
+0x32e0 008494 beq dvc_op_remote_car ,remote_car_init 
+0x32e1 008495 bbit1 dvc_op_mouse ,mouse_init 
+0x32e2 008496 rtn 
+:      008498 app_lpm_init:
+0x32e3 008499 bpatch patch18_5 ,mem_patch18 
+0x32e4 008500 jam 0 ,mem_tester_emulate 
+0x32e5 008501 jam 0 ,mem_debug_config 
+0x32e6 008502 jam 0 ,mem_lch_code 
+0x32e7 008503 setarg 0 
+0x32e8 008504 store 5 ,mem_sp_state_start 
+0x32e9 008505 fetch 1 ,mem_device_option 
+0x32ea 008506 branch app_lpm_init ,blank 
+0x32eb 008507 beq dvc_op_module ,module_lpm_init 
+:      008508 app_lpm_init0:
+0x32ec 008509 rtn 
+:      008512 app_process_idle:
+0x32ed 008513 call ui_dispatch 
+0x32ee 008514 call check_51cmd 
+0x32ef 008515 call app_process_bb_event 
+0x32f0 008516 fetch 2 ,mem_cb_idle_process 
+0x32f1 008517 branch callback_func 
+:      008519 app_process_bt:
+0x32f2 008520 fetch 2 ,mem_cb_bt_process 
+0x32f3 008521 branch callback_func 
+:      008523 app_process_ble:
+0x32f4 008524 fetch 2 ,mem_cb_le_process 
+0x32f5 008525 branch callback_func 
+:      008527 app_process_bb_event:
+0x32f6 008528 bpatch patch18_6 ,mem_patch18 
+0x32f7 008530 arg mem_ipc_fifo_bt2c51 ,rega 
+0x32f8 008531 call fifo_out 
+0x32f9 008532 rtn blank 
+0x32fa 008534 copy pdata ,regc 
+0x32fb 008535 call app_event_normal_process 
+0x32fc 008536 branch app_process_bb_event_priority 
+:      008538 app_discard_event:
+0x32fd 008539 arg 0 ,regc 
+0x32fe 008540 rtn 
+:      008545 app_event_normal_process:
+0x32ff 008546 beq bt_evt_bb_connected ,app_evt_bt_conn 
+0x3300 008547 beq bt_evt_button_long_pressed ,app_evt_button_long_pressed 
+0x3301 008548 beq bt_evt_setup_complete ,app_evt_setup_complete 
+0x3302 008549 beq bt_evt_hid_handshake ,app_evt_hid_handshake 
+0x3303 008550 beq bt_evt_hid_connected ,app_bb_event_hid_connected 
+0x3304 008551 beq bt_evt_reconn_failed ,app_bb_event_reconn_failed 
+0x3305 008552 beq bt_evt_bb_disconnected ,app_bb_event_bb_disconn 
+0x3306 008553 beq bt_evt_reconn_page_timeout ,app_bb_event_reconn_failed 
+0x3307 008554 beq bt_evt_le_connected ,app_le_event_bb_connected 
+0x3308 008555 beq bt_evt_le_disconnected ,app_le_event_bb_disconn 
+0x3309 008556 beq bt_evt_reconn_started ,app_event_reconn_start 
+0x330a 008557 beq bt_evt_enter_sniff ,app_event_enter_sniff 
+0x330b 008558 beq bt_evt_exit_sniff ,app_event_exit_sniff 
+0x330c 008560 beq bt_evt_ml2cap_conn_refused ,app_event_ml2cap_conn_refused 
+0x330d 008561 beq bt_evt_linkkey_generate ,app_event_linkkey_generate 
+0x330e 008562 beq bt_evt_switch_fail_master ,app_event_switch_fail_master 
+0x330f 008563 beq bt_evt_switch_success_master ,app_event_switch_success 
+0x3310 008564 rtn 
+:      008567 app_evt_bt_conn:
+0x3311 008568 fetch 2 ,mem_ui_state_map 
+0x3312 008569 set1 ui_state_bt_connected ,pdata 
+0x3313 008570 store 2 ,mem_ui_state_map 
+0x3314 008571 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3315 008572 set0 app_disc_by_button ,pdata 
+0x3316 008573 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3317 008574 rtn 
+:      008576 app_event_switch_success:
+0x3318 008577 jam 0 ,mem_switch_fail_master_count 
+0x3319 008578 rtn 
+:      008580 app_event_switch_fail_master:
+0x331a 008581 fetch 1 ,mem_switch_fail_master_count 
+0x331b 008582 increase 1 ,pdata 
+0x331c 008583 store 1 ,mem_switch_fail_master_count 
+0x331d 008584 sub pdata ,1 ,null 
+0x331e 008585 branch app_bt_role_switch ,positive 
+0x331f 008586 jam 0 ,mem_switch_fail_master_count 
+0x3320 008587 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3321 008588 set1 app_disc_switch_fail ,pdata 
+0x3322 008589 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3323 008590 branch app_bt_disconnect 
+:      008592 app_process_bb_event_priority:
+0x3324 008593 fetch 2 ,mem_cb_bb_event_process 
+0x3325 008594 branch callback_func 
+:      008596 app_check_wake_lock:
+0x3326 008597 fetch 2 ,mem_cb_check_wakelock 
+0x3327 008598 branch callback_func 
+:      008600 app_will_enter_lpm:
+0x3328 008601 fetch 2 ,mem_cb_before_lpm 
+0x3329 008602 branch callback_func 
+:      008604 app_event_linkkey_generate:
+0x332a 008605 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x332b 008606 set1 app_disc_after_pairing ,pdata 
+0x332c 008607 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x332d 008608 branch app_bt_store_reconn_info 
+:      008610 app_event_reconn_start:
+0x332e 008611 fetch 2 ,mem_ui_state_map 
+0x332f 008612 set1 ui_state_bt_reconnect ,pdata 
+0x3330 008613 store 2 ,mem_ui_state_map 
+0x3331 008614 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3332 008615 set1 app_disc_after_reconn ,pdata 
+0x3333 008616 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3334 008617 rtn 
+:      008619 app_evt_setup_complete:
+0x3335 008620 fetch 2 ,mem_ui_state_map 
+0x3336 008621 set1 ui_state_bt_setup_complete ,pdata 
+0x3337 008622 store 2 ,mem_ui_state_map 
+0x3338 008623 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3339 008624 set1 app_disc_after_setup_done ,pdata 
+0x333a 008625 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x333b 008626 rtn 
+:      008628 app_evt_hid_handshake:
+0x333c 008629 fetch 2 ,mem_ui_state_map 
+0x333d 008630 set1 ui_state_bt_hid_handshake ,pdata 
+0x333e 008631 store 2 ,mem_ui_state_map 
+0x333f 008632 rtn 
+:      008634 app_event_enter_sniff:
+0x3340 008635 fetch 2 ,mem_ui_state_map 
+0x3341 008636 set1 ui_state_bt_sniff ,pdata 
+0x3342 008637 store 2 ,mem_ui_state_map 
+0x3343 008638 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3344 008639 set1 app_disc_after_sniff ,pdata 
+0x3345 008640 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3346 008641 rtn 
+:      008643 app_event_exit_sniff:
+0x3347 008644 fetch 2 ,mem_ui_state_map 
+0x3348 008645 set0 ui_state_bt_sniff ,pdata 
+0x3349 008646 store 2 ,mem_ui_state_map 
+0x334a 008647 rtn 
+:      008649 app_le_event_bb_connected:
+0x334b 008650 fetch 2 ,mem_ui_state_map 
+0x334c 008651 set1 ui_state_ble_connected ,pdata 
+0x334d 008652 store 2 ,mem_ui_state_map 
+0x334e 008653 rtn 
+:      008655 app_le_event_bb_disconn:
+0x334f 008656 fetch 2 ,mem_ui_state_map 
+0x3350 008657 set0 ui_state_ble_connected ,pdata 
+0x3351 008658 store 2 ,mem_ui_state_map 
+0x3352 008659 branch app_lpm_mult_disable 
+:      008661 app_bb_event_hid_connected:
+0x3353 008662 fetch 2 ,mem_ui_state_map 
+0x3354 008663 set1 ui_state_bt_hid_conn ,pdata 
+0x3355 008664 store 2 ,mem_ui_state_map 
+0x3356 008665 rtn 
+:      008667 app_evt_button_long_pressed:
+0x3357 008668 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3358 008669 set1 app_disc_by_button ,pdata 
+0x3359 008670 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x335a 008671 rtn 
+:      008673 app_event_ml2cap_conn_refused:
+0x335b 008674 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x335c 008675 set1 app_disc_l2cap_refused ,pdata 
+0x335d 008676 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x335e 008677 branch app_bt_disconnect 
+:      008680 app_evt_timer:
+0x335f 008681 bpatch patch18_7 ,mem_patch18 
+0x3360 008682 store 1 ,mem_app_evt_timer_count 
+:      008683 app_evt_100ms_loop:
+0x3361 008684 fetch 1 ,mem_app_evt_timer_count 
+0x3362 008685 rtn blank 
+0x3363 008686 increase -1 ,pdata 
+0x3364 008687 store 1 ,mem_app_evt_timer_count 
+0x3365 008688 call ui_button_polling 
+0x3366 008689 call app_lpm_wake_auto_lock_timer 
+0x3367 008690 call app_unsniff_delay_timer 
+0x3368 008691 call app_discovery_timer 
+0x3369 008692 call flash_write_spi_sm_timer 
+0x336a 008693 fetch 2 ,mem_cb_event_timer 
+0x336b 008694 call callback_func 
+0x336c 008695 branch app_evt_100ms_loop 
+:      008700 timer_single_step:
+0x336d 008701 ifetch 1 ,regc 
+0x336e 008702 rtn blank 
+0x336f 008703 pincrease -1 
+0x3370 008704 istore 1 ,regc 
+0x3371 008705 nrtn blank 
+0x3372 008706 copy regb ,pdata 
+0x3373 008707 branch callback_func 
+:      008711 timer_single_step_2b:
+0x3374 008712 ifetch 2 ,regc 
+0x3375 008713 rtn blank 
+0x3376 008714 pincrease -1 
+0x3377 008715 istore 2 ,regc 
+0x3378 008716 nrtn blank 
+0x3379 008717 copy regb ,pdata 
+0x337a 008718 branch callback_func 
+:      008720 app_power_timer:
+0x337b 008721 fetcht 2 ,mem_power_param_ptr 
+0x337c 008722 add temp ,power_timer_offset ,regc 
+0x337d 008723 arg app_power_timer_timeout ,regb 
+0x337e 008724 branch timer_single_step 
+:      008726 app_power_timer_timeout:
+0x337f 008727 call app_got_power_state_common 
+0x3380 008728 beq power_starting ,app_enter_power_stanby_state 
+:      008729 app_enter_power_off_state:
+0x3381 008730 branch app_enter_hibernate 
+:      008731 app_enter_power_stanby_state:
+0x3382 008732 setarg power_standby 
+0x3383 008733 istore 1 ,regc 
+0x3384 008734 add temp ,power_standby_cb_offset ,regb 
+:      008735 app_power_cb_common:
+0x3385 008736 ifetch 2 ,regb 
+0x3386 008737 branch callback_func 
+:      008739 app_unsniff_delay_timer:
+0x3387 008740 arg mem_unsniff2sniff_timer_count ,regc 
+0x3388 008741 arg app_unsniff_delay_timeout ,regb 
+0x3389 008742 branch timer_single_step 
+:      008744 app_unsniff_delay_timeout:
+0x338a 008745 call context_check_idle 
+0x338b 008746 branch app_bt_enter_sniff ,zero 
+0x338c 008747 rtn 
+:      008750 app_discovery_timer:
+0x338d 008751 arg mem_discovery_timeout_timer_count ,regc 
+0x338e 008752 arg app_discovery_timeout ,regb 
+0x338f 008753 branch timer_single_step_2b 
+:      008755 app_discovery_timeout:
+0x3390 008756 call app_bt_stop_discovery 
+0x3391 008757 call app_led_off 
+0x3392 008758 fetch 2 ,mem_cb_discovry_timeout 
+0x3393 008759 branch callback_func 
+:      008762 app_bb_event_reconn_failed:
+0x3394 008763 call app_disconn_reason_flag_clear 
+:      008764 app_clear_reconnect_flag:
+0x3395 008765 fetch 2 ,mem_ui_state_map 
+0x3396 008766 set0 ui_state_bt_reconnect ,pdata 
+0x3397 008767 store 2 ,mem_ui_state_map 
+0x3398 008768 rtn 
+:      008770 app_bb_event_bb_disconn:
+0x3399 008771 jam 0 ,mem_unsniff2sniff_timer_count 
+0x339a 008772 fetch 2 ,mem_ui_state_map 
+0x339b 008773 bbit1 ui_state_bt_reconnect ,app_bb_event_bb_reconn_disconn 
+0x339c 008774 isolate0 ui_state_bt_setup_complete ,pdata 
+0x339d 008775 call app_discard_event ,true 
+:      008776 app_bb_event_bb_reconn_disconn:
+0x339e 008777 bpatch patch19_0 ,mem_patch19 
+0x339f 008778 fetch 2 ,mem_ui_state_map 
+0x33a0 008779 set0 ui_state_bt_connected ,pdata 
+0x33a1 008780 set0 ui_state_bt_setup_complete ,pdata 
+0x33a2 008781 set0 ui_state_bt_hid_conn ,pdata 
+0x33a3 008782 set0 ui_state_bt_hid_handshake ,pdata 
+0x33a4 008783 set0 ui_state_bt_reconnect ,pdata 
+0x33a5 008784 store 2 ,mem_ui_state_map 
+0x33a6 008785 branch app_lpm_mult_disable 
+:      008787 app_bb_hibernate:
+0x33a7 008788 call app_disconn_reason_clear 
+0x33a8 008789 branch app_enter_hibernate 
+:      008792 app_disconn_reason_clear:
+0x33a9 008793 setarg 0 
+0x33aa 008794 store app_disc_rsn_size ,mem_app_disconn_reason 
+0x33ab 008795 rtn 
+:      008796 app_disconn_reason_flag_clear:
+0x33ac 008797 setarg 0 
+0x33ad 008798 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x33ae 008799 rtn 
+:      008801 app_disconn_reason_collect_bt:
+0x33af 008802 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x33b0 008803 store app_disc_rsn_size ,mem_app_disconn_reason 
+0x33b1 008804 setarg 0 
+0x33b2 008805 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x33b3 008806 rtn 
+:      008808 app_disconn_reason_collect_ble:
+0x33b4 008809 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x33b5 008810 set1 app_disc_ble ,pdata 
+0x33b6 008811 store app_disc_rsn_size ,mem_app_disconn_reason 
+0x33b7 008812 setarg 0 
+0x33b8 008813 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x33b9 008814 rtn 
+:      008822 app_check_sniff:
+0x33ba 008823 fetch 1 ,mem_ui_state_map 
+0x33bb 008824 isolate1 ui_state_bt_sniff ,pdata 
+0x33bc 008825 rtn 
+:      008833 app_initflag_store:
+0x33bd 008834 setarg eeprom_init_flag 
+:      008835 app_flag_store:
+0x33be 008836 store 2 ,mem_timeup 
+0x33bf 008837 bpatch patch19_1 ,mem_patch19 
+0x33c0 008838 arg 2 ,temp 
+0x33c1 008839 arg mem_timeup ,rega 
+0x33c2 008840 arg eeprom_module_init_flag ,regb 
+0x33c3 008841 branch iicd_write_eep_data 
+:      008844 app_initflag_check:
+0x33c4 008845 bpatch patch19_2 ,mem_patch19 
+0x33c5 008846 arg 2 ,temp 
+0x33c6 008847 arg mem_pdatatemp ,rega 
+0x33c7 008848 arg eeprom_module_init_flag ,regb 
+0x33c8 008849 call iicd_read_eep_data 
+0x33c9 008850 fetch 2 ,mem_pdatatemp 
+0x33ca 008851 arg eeprom_init_flag ,temp 
+0x33cb 008852 isub temp ,null 
+0x33cc 008853 rtn 
+:      008856 app_start_auto_sniff:
+0x33cd 008857 fetch 1 ,mem_unsniff2sniff_timer 
+0x33ce 008858 store 1 ,mem_unsniff2sniff_timer_count 
+0x33cf 008859 rtn 
+:      008861 app_get_lpm_wake_lock:
+0x33d0 008862 arg wake_lock_app ,queue 
+0x33d1 008863 branch lpm_get_wake_lock 
+:      008865 app_put_lpm_wake_lock:
+0x33d2 008866 arg wake_lock_app ,queue 
+0x33d3 008867 branch lpm_put_wake_lock 
+:      008869 app_lpm_wake_auto_lock:
+0x33d4 008870 jam lpm_wake_up_delay_timer ,mem_wake_up_delay_timer 
+0x33d5 008871 branch app_get_lpm_wake_lock 
+:      008873 app_lpm_wake_auto_lock_timer:
+0x33d6 008874 arg mem_wake_up_delay_timer ,regc 
+0x33d7 008875 arg app_put_lpm_wake_lock ,regb 
+0x33d8 008876 branch timer_single_step 
+:      008878 app_l2cap_flow_control_enable:
+0x33d9 008879 jam l2cap_flow_ctrl_enable ,mem_l2cap_flow_ctrl_flag 
+0x33da 008880 rtn 
+:      008882 app_l2cap_flow_control_disable:
+0x33db 008883 jam l2cap_flow_ctrl_disable ,mem_l2cap_flow_ctrl_flag 
+0x33dc 008884 rtn 
+:      008886 app_bt_set_pincode:
+0x33dd 008887 jam bt_cmd_set_pin_code ,mem_fifo_temp 
+0x33de 008888 branch ui_ipc_send_cmd 
+:      008890 app_bt_role_switch:
+0x33df 008891 jam bt_cmd_role_switch ,mem_fifo_temp 
+0x33e0 008892 branch ui_ipc_send_cmd 
+:      008894 app_bt_start_reconnect:
+0x33e1 008895 bpatch patch19_3 ,mem_patch19 
+0x33e2 008896 fetch 1 ,mem_app_connection_options 
+0x33e3 008897 store 1 ,mem_connection_options 
+0x33e4 008898 jam app_flag_reconnect ,mem_reconnect_flag 
+0x33e5 008899 jam bt_cmd_reconnect ,mem_fifo_temp 
+0x33e6 008900 branch ui_ipc_send_cmd 
+:      008902 app_bt_reconnect_cancel:
+0x33e7 008903 jam bt_cmd_bb_reconn_cancel ,mem_fifo_temp 
+0x33e8 008904 branch ui_ipc_send_cmd 
+:      008906 app_bt_disconnect:
+0x33e9 008907 jam bt_cmd_disconnect ,mem_fifo_temp 
+0x33ea 008908 branch ui_ipc_send_cmd 
+:      008910 app_bt_start_discovery_short:
+0x33eb 008911 fetch 2 ,mem_discovery_timeout 
+0x33ec 008912 store 2 ,mem_discovery_timeout_timer_count 
+:      008913 app_bt_start_discovery_led_blink:
+0x33ed 008914 call app_led_start_blink 
+:      008915 app_bt_start_discovery:
+0x33ee 008916 jam bt_cmd_start_discovery ,mem_fifo_temp 
+0x33ef 008917 branch ui_ipc_send_cmd 
+:      008919 app_bt_stop_discovery:
+0x33f0 008920 setarg 0 
+0x33f1 008921 store 2 ,mem_discovery_timeout_timer_count 
+0x33f2 008922 jam bt_cmd_stop_discovery ,mem_fifo_temp 
+0x33f3 008923 branch ui_ipc_send_cmd 
+:      008925 app_ble_start_direct_adv:
+0x33f4 008926 jam bt_cmd_start_direct_adv ,mem_fifo_temp 
+0x33f5 008927 branch ui_ipc_send_cmd 
+:      008929 app_ble_stop_direct_adv:
+0x33f6 008930 jam bt_cmd_stop_direct_adv ,mem_fifo_temp 
+0x33f7 008931 branch ui_ipc_send_cmd 
+:      008933 app_ble_stop_adv:
+0x33f8 008934 jam bt_cmd_stop_adv ,mem_fifo_temp 
+0x33f9 008935 branch ui_ipc_send_cmd 
+:      008937 app_ble_start_adv:
+0x33fa 008938 jam bt_cmd_start_adv ,mem_fifo_temp 
+0x33fb 008939 branch ui_ipc_send_cmd 
+:      008941 app_ble_start_scan:
+0x33fc 008942 jam bt_cmd_le_start_scan ,mem_fifo_temp 
+0x33fd 008943 branch ui_ipc_send_cmd 
+:      008945 app_ble_stop_scan:
+0x33fe 008946 jam bt_cmd_le_stop_scan ,mem_fifo_temp 
+0x33ff 008947 branch ui_ipc_send_cmd 
+:      008949 app_ble_start_conn:
+0x3400 008950 jam bt_cmd_le_start_conn ,mem_fifo_temp 
+0x3401 008951 branch ui_ipc_send_cmd 
+:      008953 app_ble_disconnect:
+0x3402 008954 jam bt_cmd_le_disconnect ,mem_fifo_temp 
+0x3403 008955 branch ui_ipc_send_cmd 
+:      008957 app_led_start_blink:
+0x3404 008958 jam bt_cmd_led_blink ,mem_fifo_temp 
+0x3405 008959 branch ui_ipc_send_cmd 
+:      008961 app_led_on:
+0x3406 008962 jam bt_cmd_led_on ,mem_fifo_temp 
+0x3407 008963 branch ui_ipc_send_cmd 
+:      008965 app_led_stop_blink:
+:      008966 app_led_off:
+0x3408 008967 jam bt_cmd_led_off ,mem_fifo_temp 
+0x3409 008968 branch ui_ipc_send_cmd 
+:      008970 app_enter_hibernate:
+0x340a 008971 jam bt_cmd_enter_hibernate ,mem_fifo_temp 
+0x340b 008972 branch ui_ipc_send_cmd 
+:      008974 app_bt_sniff_exit:
+0x340c 008975 jam bt_cmd_exit_sniff ,mem_fifo_temp 
+0x340d 008976 branch ui_ipc_send_cmd 
+:      008978 app_bt_enter_sniff:
+0x340e 008979 jam bt_cmd_enter_sniff ,mem_fifo_temp 
+0x340f 008980 branch ui_ipc_send_cmd 
+:      008982 app_ble_store_reconn_info:
+0x3410 008983 jam bt_cmd_store_reconn_info_le ,mem_fifo_temp 
+0x3411 008984 branch ui_ipc_send_cmd 
+:      008986 app_bt_store_reconn_info:
+0x3412 008987 jam bt_cmd_store_reconn_info_bt ,mem_fifo_temp 
+0x3413 008988 branch ui_ipc_send_cmd 
+:      008990 app_store_reconn_info:
+0x3414 008991 jam bt_cmd_store_reconn_info ,mem_fifo_temp 
+0x3415 008992 branch ui_ipc_send_cmd 
+:      008994 app_lpm_mult_enable:
+0x3416 008995 set1 mark_lpm_mult_enable ,mark 
+0x3417 008996 rtn 
+:      008998 app_lpm_mult_disable:
+0x3418 008999 set0 mark_lpm_mult_enable ,mark 
+0x3419 009000 rtn 
+:      009020 app_button_long_pressed:
+0x341a 009021 call app_got_power_state_common 
+0x341b 009022 beq power_standby ,app_power_shutting_down 
+:      009023 app_power_starting:
+0x341c 009024 setarg power_starting 
+0x341d 009025 istore 1 ,regc 
+0x341e 009026 add temp ,power_starting_timeout_offset ,rega 
+0x341f 009027 add temp ,power_starting_cb_offset ,regb 
+:      009028 app_power_common:
+0x3420 009029 ifetcht 1 ,rega 
+0x3421 009030 increase 1 ,regc 
+0x3422 009031 istoret 1 ,regc 
+0x3423 009032 branch app_power_cb_common 
+:      009034 app_power_shutting_down:
+0x3424 009035 setarg power_off 
+0x3425 009036 istore 1 ,regc 
+0x3426 009037 fetch 2 ,mem_ui_state_map 
+0x3427 009038 bbit0 ui_state_ble_connected ,app_power_off_end 
+0x3428 009039 call app_ble_disconnect 
+:      009040 app_power_off_end:
+0x3429 009041 fetcht 2 ,mem_power_param_ptr 
+0x342a 009042 add temp ,power_off_timeout_offset ,rega 
+0x342b 009043 add temp ,power_off_cb_offset ,regb 
+0x342c 009044 branch app_power_common 
+:      009046 app_got_power_state_common:
+0x342d 009047 fetcht 2 ,mem_power_param_ptr 
+0x342e 009048 add temp ,power_state_offset ,regc 
+0x342f 009049 ifetch 1 ,regc 
+0x3430 009050 rtn 
+:      009052 app_event_button_up:
+0x3431 009053 call app_got_power_state_common 
+0x3432 009054 bne power_off ,app_power_release 
+0x3433 009055 branch app_enter_hibernate 
+:      009056 app_power_release:
+0x3434 009057 add temp ,ui_butten_up_cb_offset ,regb 
+0x3435 009058 branch app_power_cb_common 
+:      009060 antilost_init:
+0x3436 009061 rtn wake 
+0x3437 009062 jam 0x00 ,core_gpio_sel1 
+0x3438 009063 setarg antilost_le_before_hibernate 
+0x3439 009064 store 2 ,mem_cb_before_hibernate 
+0x343a 009065 setarg keyscan_process_lpm_before 
+0x343b 009066 store 2 ,mem_cb_before_lpm 
+0x343c 009067 setarg antilost_idle_process 
+0x343d 009068 store 2 ,mem_cb_idle_process 
+0x343e 009069 setarg antilost_le_conn_process 
+0x343f 009070 store 2 ,mem_cb_le_process 
+0x3440 009071 setarg antilost_bb_event_process 
+0x3441 009072 store 2 ,mem_cb_bb_event_process 
+0x3442 009073 setarg antilost_le_bb_event_timer 
+0x3443 009074 store 2 ,mem_cb_event_timer 
+0x3444 009075 setarg antilost_le_notification 
+0x3445 009076 store 2 ,mem_cb_ble_transmit 
+0x3446 009077 setarg antilost_lpm_lock_process 
+0x3447 009078 store 2 ,mem_cb_check_wakelock 
+0x3448 009079 setarg antilost_le_receive_data_process 
+0x3449 009080 store 2 ,mem_cb_att_write 
+0x344a 009081 bpatch patch19_4 ,mem_patch19 
+0x344b 009082 call antilost_buzzer_pwm_init 
+0x344c 009083 call keyscan_key_init 
+0x344d 009084 call antilost_adc_init 
+0x344e 009085 call ui_led_init_global 
+0x344f 009086 call ui_button_init 
+0x3450 009087 setarg antilost_key_up_down 
+0x3451 009088 store 2 ,mem_cb_antl_key 
+0x3452 009089 setarg antilost_power_off_cb 
+0x3453 009090 store 2 ,mem_antl_power_off_cb 
+0x3454 009091 setarg antilost_power_starting_cb 
+0x3455 009092 store 2 ,mem_antl_power_starting_cb 
+0x3456 009093 setarg antilost_power_standby_cb 
+0x3457 009094 store 2 ,mem_antl_power_standby_cb 
+0x3458 009095 setarg antilost_led_on_cb 
+0x3459 009096 store 2 ,mem_antl_led_cb_on 
+0x345a 009097 setarg antilost_led_off_cb 
+0x345b 009098 store 2 ,mem_antl_led_cb_off 
+0x345c 009099 setarg antilost_buzzer_on 
+0x345d 009100 store 2 ,mem_antl_buzzer_cb_on 
+0x345e 009101 setarg antilost_buzzer_off 
+0x345f 009102 store 2 ,mem_antl_buzzer_cb_off 
+0x3460 009103 fetch 2 ,mem_ui_state_map 
+0x3461 009104 rtnbit1 ui_state_btn_down 
+0x3462 009105 branch app_enter_hibernate 
+:      009107 antilost_le_before_hibernate:
+0x3463 009108 call antilost_led_buzzer_stop_blink 
+0x3464 009109 branch app_enter_hibernate 
+:      009111 antilost_le_notification:
+0x3465 009112 call le_fifo_check_nearly_full 
+0x3466 009113 nrtn blank 
+0x3467 009114 arg mem_temp_block5 ,rega 
+0x3468 009115 call queue_pop 
+0x3469 009116 nrtn user 
+0x346a 009117 arg mem_temp_block5 ,contr 
+0x346b 009118 branch le_send_notify_from_list 
+:      009120 antilost_power_standby_cb:
+0x346c 009121 fetch 2 ,mem_antl_le_sleep_timeout 
+0x346d 009122 store 2 ,mem_antl_le_sleep_timer 
+0x346e 009123 jam 1 ,mem_antl_key_scan_enable 
+0x346f 009124 branch antilost_fast_adv_start 
+:      009126 antilost_lpm_lock_process:
+0x3470 009127 fetch 1 ,mem_antl_key_state 
+0x3471 009128 beq 1 ,antilost_lpm_ctrl_for_led_buzzer 
+0x3472 009129 fetch 2 ,mem_ui_state_map 
+0x3473 009130 bbit0 ui_state_ble_connected ,antilost_lpm_ctrl_for_led_buzzer 
+0x3474 009131 fetch 1 ,mem_antl_lost_mode 
+0x3475 009132 beq 1 ,app_get_lpm_wake_lock 
+0x3476 009133 fetch 1 ,mem_antl_queue_curr_num 
+0x3477 009134 nbranch app_get_lpm_wake_lock ,blank 
+0x3478 009135 branch app_put_lpm_wake_lock 
+:      009137 antilost_lpm_ctrl_for_led_buzzer:
+0x3479 009138 fetch 1 ,mem_antl_led_state 
+0x347a 009139 fetcht 1 ,mem_antl_buzzer_state 
+0x347b 009140 ior temp ,pdata 
+0x347c 009141 beq 1 ,app_get_lpm_wake_lock 
+0x347d 009142 branch app_put_lpm_wake_lock 
+:      009144 antilost_bb_event_process:
+0x347e 009145 copy regc ,pdata 
+0x347f 009146 beq bt_evt_button_up ,app_event_button_up 
+0x3480 009147 beq bt_evt_button_long_pressed ,app_button_long_pressed 
+0x3481 009148 beq bt_evt_le_connected ,antilost_le_process_conn 
+0x3482 009149 beq bt_evt_le_disconnected ,antilost_le_process_discon 
+0x3483 009150 beq bt_evt_le_parse_conn_papa_update_rsp ,antilost_le_conn_param_update_rsp_recieved 
+0x3484 009151 rtn 
+:      009152 antilost_le_conn_param_update_rsp_recieved:
+0x3485 009153 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 
+0x3486 009154 beq ble_signaling_connect_parameter_update_rejected ,antilost_le_conn_param_rejected 
+:      009155 antilost_le_conn_param_accepted:
+0x3487 009156 fetch 2 ,mem_le_new_connslavelatency 
+0x3488 009157 branch antilost_master_nonsupport_latency ,blank 
+:      009158 antilost_le_conn_param_updata_procedure_sucsess:
+0x3489 009159 jam conn_param_updata_procedure_complete ,mem_antl_conn_updata_procedure_state 
+0x348a 009160 jam 60 ,mem_antl_conn_update_timer 
+0x348b 009161 rtn 
+:      009163 antilost_le_conn_param_rejected:
+0x348c 009164 fetch 2 ,mem_le_latency 
+0x348d 009165 branch antilost_conn_param_updata_procedure_faild ,blank 
+:      009166 antilost_conn_param_retransimiting:
+0x348e 009167 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state 
+0x348f 009168 fetcht 2 ,mem_interval_increment 
+0x3490 009169 fetch 2 ,mem_le_interval_min 
+0x3491 009170 iadd temp ,pdata 
+0x3492 009171 store 2 ,mem_le_interval_min 
+0x3493 009172 copy pdata ,rega 
+0x3494 009173 fetch 2 ,mem_le_interval_max 
+0x3495 009174 iadd temp ,pdata 
+0x3496 009175 store 2 ,mem_le_interval_max 
+0x3497 009176 iadd rega ,pdata 
+0x3498 009177 rshift pdata ,temp 
+0x3499 009178 fetch 2 ,mem_antl_le_unnormal_interval_max 
+0x349a 009179 idiv temp 
+0x349b 009180 call wait_div_end 
+0x349c 009181 quotient pdata 
+0x349d 009182 store 2 ,mem_le_latency 
+0x349e 009183 jam 1 ,mem_antl_send_updata_le_param_timer 
+0x349f 009184 rtn 
+:      009185 antilost_conn_param_updata_procedure_faild:
+0x34a0 009186 jam conn_param_updata_procedure_faild ,mem_antl_conn_updata_procedure_state 
+0x34a1 009187 rtn 
+:      009189 antilost_master_nonsupport_latency:
+0x34a2 009190 jam 0 ,mem_lpm_mult 
+0x34a3 009191 jam 0 ,mem_antl_send_updata_le_param_timer 
+0x34a4 009192 fetch 2 ,mem_le_new_conninterval 
+0x34a5 009193 fetcht 2 ,mem_antl_le_unnormal_interval_min 
+0x34a6 009194 isub temp ,null 
+0x34a7 009195 setflag positive ,0 ,rega 
+0x34a8 009196 fetch 2 ,mem_antl_le_unnormal_interval_max 
+0x34a9 009197 fetcht 2 ,mem_le_new_conninterval 
+0x34aa 009198 isub temp ,pdata 
+0x34ab 009199 setflag positive ,1 ,rega 
+0x34ac 009200 compare 0x03 ,rega ,0x03 
+0x34ad 009201 rtn true 
+0x34ae 009202 fetch 8 ,mem_antl_le_unnormal_interval_min 
+0x34af 009203 store 8 ,mem_le_interval_min 
+0x34b0 009204 jam 1 ,mem_antl_send_updata_le_param_timer 
+0x34b1 009205 rtn 
+:      009208 antilost_le_bb_event_timer:
+0x34b2 009210 call app_power_timer 
+0x34b3 009211 call antilost_double_click_timer 
+0x34b4 009212 call antilost_le_fast_adv_timer 
+0x34b5 009213 call antilost_le_sleep_timer 
+0x34b6 009214 call antilost_app_updata_le_param_timer 
+0x34b7 009215 call antilost_conn_update_timer 
+0x34b8 009216 branch antilost_adc_check_timer 
+:      009219 antilost_double_click_timer:
+0x34b9 009220 arg mem_double_click_timer ,regc 
+0x34ba 009221 arg antilost_double_click_timeout ,regb 
+0x34bb 009222 branch timer_single_step 
+:      009223 antilost_double_click_timeout:
+0x34bc 009224 jam 0 ,mem_butten_click_cnt 
+0x34bd 009225 rtn 
+:      009226 antilost_le_fast_adv_timer:
+0x34be 009227 arg mem_antl_fast_adv_timer ,regc 
+0x34bf 009228 arg antilost_le_fast_adv_timeout ,regb 
+0x34c0 009229 branch timer_single_step_2b 
+:      009230 antilost_le_fast_adv_timeout:
+0x34c1 009231 arg mem_antl_slow_adv_led_style ,regc 
+0x34c2 009232 arg mem_antl_slow_adv_lpm_interval ,regb 
+0x34c3 009233 branch antilost_adv_start_common 
+:      009236 antilost_conn_update_timer:
+0x34c4 009237 arg mem_antl_conn_update_timer ,regc 
+0x34c5 009238 arg antilost_conn_update_timer_time_out ,regb 
+0x34c6 009239 branch timer_single_step 
+:      009241 antilost_conn_update_timer_time_out:
+0x34c7 009242 fetch 2 ,mem_le_latency 
+0x34c8 009243 store 1 ,mem_lpm_mult 
+0x34c9 009244 rtn 
+:      009245 antilost_app_updata_le_param_timer:
+0x34ca 009246 arg mem_antl_send_updata_le_param_timer ,regc 
+0x34cb 009247 arg antilost_app_updata_le_param_timeout ,regb 
+0x34cc 009248 branch timer_single_step 
+:      009249 antilost_app_updata_le_param_timeout:
+0x34cd 009250 fetch 1 ,mem_le_state 
+0x34ce 009251 compare 0 ,pdata ,0x60 
+0x34cf 009252 nbranch antilost_wait_for_updata_param_instant_expire ,true 
+0x34d0 009253 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state 
+0x34d1 009254 call app_lpm_mult_enable 
+0x34d2 009255 branch le_l2cap_tx_update_req 
+:      009256 antilost_wait_for_updata_param_instant_expire:
+0x34d3 009257 jam 1 ,mem_antl_send_updata_le_param_timer 
+0x34d4 009258 rtn 
+:      009260 antilost_le_sleep_timer:
+0x34d5 009261 arg mem_antl_le_sleep_timer ,regc 
+0x34d6 009262 arg antilost_le_sleep_timer_timeout ,regb 
+0x34d7 009263 branch timer_single_step_2b 
+:      009266 antilost_le_sleep_timer_timeout:
+0x34d8 009267 branch app_button_long_pressed 
+:      009269 antilost_adc_check_timer:
+0x34d9 009272 arg mem_adc_timer ,regc 
+0x34da 009273 arg antilost_adc_check_timer_timeout ,regb 
+0x34db 009274 branch timer_single_step_2b 
+:      009275 antilost_adc_check_timer_timeout:
+0x34dc 009276 fetch 2 ,mem_adc_timeout 
+0x34dd 009277 store 2 ,mem_adc_timer 
+0x34de 009278 branch antilost_battery_process 
+:      009281 antilost_le_process_conn:
+0x34df 009282 fetch 2 ,mem_adc_timeout 
+0x34e0 009283 store 2 ,mem_adc_timer 
+0x34e1 009284 setarg 0 
+0x34e2 009285 store 2 ,mem_antl_fast_adv_timer 
+0x34e3 009286 store 2 ,mem_antl_le_sleep_timer 
+0x34e4 009287 call antilost_alert_off 
+0x34e5 009288 call antilost_led_buzzer_stop_blink 
+0x34e6 009289 jam 0 ,mem_lpm_mult 
+0x34e7 009290 branch app_ble_stop_adv 
+:      009293 antilost_le_process_discon:
+0x34e8 009296 setarg 0 
+0x34e9 009297 store 4 ,mem_adc_timer 
+0x34ea 009298 store 3 ,mem_antl_conn_updata_procedure_state 
+0x34eb 009299 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 
+0x34ec 009301 jam 1 ,mem_alarm_config_notfy_cnt 
+0x34ed 009302 fetch 2 ,mem_antl_le_sleep_timeout 
+0x34ee 009303 store 2 ,mem_antl_le_sleep_timer 
+0x34ef 009304 call queue_init 
+0x34f0 009305 fetch 1 ,mem_antl_power_state 
+0x34f1 009306 rtneq power_off 
+0x34f2 009307 call antilost_fast_adv_start 
+0x34f3 009308 branch antilost_on_off_alarm_after_disconn 
+:      009311 antilost_le_conn_process:
+0x34f4 009313 branch antilost_key_process 
+:      009315 antilost_idle_process:
+0x34f5 009317 fetch 1 ,mem_antl_power_state 
+0x34f6 009318 rtnne power_standby 
+0x34f7 009319 branch antilost_key_process 
+:      009324 antilost_power_starting_cb:
+0x34f8 009325 arg mem_antl_power_starting_buzzer_style ,regc 
+0x34f9 009326 call antilost_buzzer_configuration 
+0x34fa 009327 arg mem_antl_power_starting_led_style ,regc 
+:      009328 antilost_power_common:
+0x34fb 009329 branch antilost_led_configuration 
+:      009331 antilost_power_off_cb:
+0x34fc 009332 jam off ,mem_le_adv_enable 
+0x34fd 009333 arg mem_antl_power_off_buzzer_style ,regc 
+0x34fe 009334 call antilost_buzzer_configuration 
+0x34ff 009335 arg mem_antl_power_off_led_style ,regc 
+0x3500 009336 branch antilost_power_common 
+:      009338 antilost_le_receive_data_process:
+0x3501 009339 fetch 1 ,mem_le_att_opcode 
+0x3502 009340 beq attop_write_request ,antilost_le_parse_att_write_request 
+0x3503 009341 rtn 
+:      009342 antilost_le_parse_att_write_request:
+0x3504 009343 fetch 2 ,mem_le_att_handle 
+0x3505 009345 beq new_spec_write_handle ,antilost_cmd_parse_for_application 
+0x3506 009346 beq new_spec_notification_enable_handle ,antilost_notify_alarm_config_first_time 
+0x3507 009347 rtn 
+:      009352 antilost_key_process:
+0x3508 009353 fetch 1 ,mem_antl_key_scan_enable 
+0x3509 009354 rtn blank 
+0x350a 009355 branch keyscan_key_process 
+:      009359 antilost_key_up_down:
+0x350b 009360 copy rega ,pdata 
+0x350c 009361 branch antilost_key_is_up ,blank 
+:      009362 antilost_key_is_down:
+0x350d 009363 copy queue ,pdata 
+0x350e 009364 beq 0 ,antilost_key0_down 
+0x350f 009365 rtn 
+:      009366 antilost_key_is_up:
+0x3510 009367 copy queue ,pdata 
+0x3511 009368 beq 0 ,antilost_key0_up 
+0x3512 009369 rtn 
+:      009371 antilost_key0_down:
+0x3513 009372 jam 1 ,mem_antl_key_state 
+0x3514 009373 arg mem_antl_key_buzzer_style ,regc 
+0x3515 009374 call antilost_buzzer_configuration 
+0x3516 009375 arg mem_antl_key_led_style ,regc 
+0x3517 009376 call antilost_led_configuration 
+0x3518 009377 fetch 2 ,mem_ui_state_map 
+0x3519 009378 bbit0 ui_state_ble_connected ,antilost_butten_down_while_disconn 
+0x351a 009379 branch antilost_butten_down_after_conn 
+:      009381 antilost_key0_up:
+0x351b 009382 jam 0 ,mem_antl_key_state 
+0x351c 009383 branch antilost_double_click_timer_init 
+:      009387 antilost_double_click_timer_init:
+0x351d 009388 fetch 1 ,mem_butten_click_cnt 
+0x351e 009389 rtnne 1 
+0x351f 009390 jam 5 ,mem_double_click_timer 
+0x3520 009391 rtn 
+:      009393 antilost_butten_down_after_conn:
+0x3521 009394 fetch 1 ,mem_butten_click_cnt 
+0x3522 009395 pincrease 1 
+0x3523 009396 store 1 ,mem_butten_click_cnt 
+0x3524 009397 beq 1 ,antilost_click_once 
+0x3525 009398 beq 2 ,antilost_click_twice 
+0x3526 009399 rtn 
+:      009400 antilost_click_once:
+0x3527 009401 call antilost_alert_off 
+0x3528 009402 jam opcode1_butten_click_once ,mem_antl_key0_press + 5 
+0x3529 009403 arg mem_antl_key0_press ,regc 
+0x352a 009404 branch antilost_prepare_data_and_send 
+:      009405 antilost_click_twice:
+0x352b 009406 jam 0 ,mem_butten_click_cnt 
+0x352c 009407 jam opcode2_butten_double_click ,mem_antl_key0_press + 5 
+0x352d 009408 arg mem_antl_key0_press ,regc 
+0x352e 009409 call antilost_prepare_data_and_send 
+0x352f 009410 fetch 1 ,mem_antl_lost_mode 
+0x3530 009411 beq 1 ,antilost_alert_on 
+0x3531 009412 rtn 
+:      009414 antilost_butten_down_while_disconn:
+0x3532 009415 fetch 2 ,mem_antl_le_sleep_timeout 
+0x3533 009416 store 2 ,mem_antl_le_sleep_timer 
+0x3534 009417 call antilost_alert_off 
+0x3535 009418 branch antilost_fast_adv_start 
+:      009421 antilost_cmd_parse_for_application:
+0x3536 009422 bpatch patch19_5 ,mem_patch19 
+0x3537 009423 call le_app_receive_data 
+0x3538 009424 ifetch 1 ,rega 
+0x3539 009425 beq opcode3_antl_start_alram ,antilost_on_of_alram 
+0x353a 009426 beq opcode7_antl_config_alram ,antilost_configuration_for_alram 
+0x353b 009427 rtn 
+:      009429 antilost_on_of_alram:
+0x353c 009430 fetch 1 ,mem_antl_lost_mode 
+0x353d 009431 beq anti_le_alarm_off ,antilost_alert_on 
+0x353e 009432 beq anti_le_alarm_on ,antilost_alert_off 
+0x353f 009433 rtn 
+:      009435 antilost_configuration_for_alram:
+0x3540 009436 ifetch 1 ,regb 
+0x3541 009437 beq 1 ,antilost_set_start_alarm_after_disconn 
+0x3542 009438 beq 0 ,antilost_set_no_alarm_after_disconn 
+0x3543 009439 rtn 
+:      009446 antilost_prepare_data_and_send:
+0x3544 009447 bpatch patch19_6 ,mem_patch19 
+0x3545 009448 fetch 1 ,mem_client_characteristic_configuration_descriptor 
+0x3546 009449 isolate1 notification_enable_bit ,pdata 
+0x3547 009450 nrtn true 
+0x3548 009451 add regc ,6 ,contr 
+0x3549 009452 ifetch 2 ,contr 
+0x354a 009453 byteswap pdata ,pdata 
+0x354b 009454 add pdata ,5 ,loopcnt 
+0x354c 009455 add regc ,3 ,contr 
+0x354d 009456 call calc_check_sum_start 
+0x354e 009457 istore 1 ,contr 
+0x354f 009458 copy regc ,rega 
+0x3550 009459 branch queue_push 
+:      009465 antilost_alert_on:
+0x3551 009466 fetch 1 ,mem_antl_power_state 
+0x3552 009467 rtn blank 
+0x3553 009468 jam 1 ,mem_antl_lost_mode 
+0x3554 009469 arg mem_antl_alert_buzzer_stlye ,regc 
+0x3555 009470 call antilost_buzzer_configuration 
+0x3556 009471 arg mem_antl_alert_led_stlye ,regc 
+0x3557 009472 call antilost_led_configuration 
+0x3558 009473 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 
+0x3559 009474 jam 1 ,mem_antl_key0_release + 8 
+0x355a 009475 arg mem_antl_key0_release ,regc 
+0x355b 009476 branch antilost_prepare_data_and_send 
+:      009477 antilost_alert_off:
+0x355c 009478 fetch 1 ,mem_antl_lost_mode 
+0x355d 009479 rtn blank 
+0x355e 009480 jam 0 ,mem_antl_lost_mode 
+0x355f 009481 call antilost_led_buzzer_stop_blink 
+0x3560 009482 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 
+0x3561 009483 jam 0 ,mem_antl_key0_release + 8 
+0x3562 009484 arg mem_antl_key0_release ,regc 
+0x3563 009485 branch antilost_prepare_data_and_send 
+:      009487 antilost_set_start_alarm_after_disconn:
+0x3564 009488 jam 1 ,mem_alarm_config 
+0x3565 009489 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 
+0x3566 009490 jam 1 ,mem_antl_key0_release + 8 
+0x3567 009491 arg mem_antl_key0_release ,regc 
+0x3568 009492 branch antilost_prepare_data_and_send 
+:      009493 antilost_set_no_alarm_after_disconn:
+0x3569 009494 jam 0 ,mem_alarm_config 
+0x356a 009495 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 
+0x356b 009496 jam 0 ,mem_antl_key0_release + 8 
+0x356c 009497 arg mem_antl_key0_release ,regc 
+0x356d 009498 branch antilost_prepare_data_and_send 
+:      009499 antilost_on_off_alarm_after_disconn:
+0x356e 009500 fetch 1 ,mem_alarm_config 
+0x356f 009501 rtn blank 
+0x3570 009502 branch antilost_alert_on 
+:      009504 antilost_notify_alarm_config_first_time:
+0x3571 009505 ifetch 2 ,rega 
+0x3572 009506 store 2 ,mem_client_characteristic_configuration_descriptor 
+0x3573 009507 isolate1 notification_enable_bit ,pdata 
+0x3574 009508 nrtn true 
+0x3575 009509 fetch 1 ,mem_alarm_config_notfy_cnt 
+0x3576 009510 rtn blank 
+0x3577 009511 jam 0 ,mem_alarm_config_notfy_cnt 
+0x3578 009512 fetch 8 ,mem_antl_le_interval_min 
+0x3579 009513 store 8 ,mem_le_interval_min 
+0x357a 009514 jam 2 ,mem_antl_send_updata_le_param_timer 
+0x357b 009515 call antilost_battery_process 
+0x357c 009516 call antilost_battery_calculate_end 
+0x357d 009517 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 
+0x357e 009518 fetch 1 ,mem_alarm_config 
+0x357f 009519 store 1 ,mem_antl_key0_release + 8 
+0x3580 009520 arg mem_antl_key0_release ,regc 
+0x3581 009521 branch antilost_prepare_data_and_send 
+:      009525 antilost_buzzer_configuration:
+0x3582 009526 arg 1 ,rega 
+0x3583 009527 branch antilost_configuration_common 
+:      009528 antilost_led_configuration:
+0x3584 009529 arg 0 ,rega 
+:      009530 antilost_configuration_common:
+0x3585 009531 branch antilost_led_buzzer_style_configuration 
+:      009533 antilost_led_buzzer_stop_blink:
+0x3586 009534 arg 0 ,rega 
+0x3587 009535 call ui_led_blink_stop_global 
+0x3588 009536 arg 1 ,rega 
+0x3589 009537 call ui_led_blink_stop_global 
+0x358a 009538 fetch 1 ,mem_buzzer_pwm_conf 
+0x358b 009539 branch pwm_disable 
+:      009541 antilost_led_buzzer_style_configuration:
+0x358c 009542 call calc_curr_struct_prt 
+0x358d 009543 arg 7 ,loopcnt 
+0x358e 009544 branch ui_led_set_style_global + 2 
+:      009548 antilost_fast_adv_start:
+0x358f 009549 arg mem_antl_fast_adv_led_style ,regc 
+0x3590 009550 arg mem_antl_lpm_interval ,regb 
+:      009551 antilost_adv_start_common:
+0x3591 009552 call antilost_adv_interval_lpm_interval_set 
+0x3592 009553 call antilost_led_configuration 
+0x3593 009554 fetch 2 ,mem_antl_fast_adv_timeout 
+0x3594 009555 store 2 ,mem_antl_fast_adv_timer 
+0x3595 009556 branch app_ble_start_adv 
+:      009558 antilost_adv_interval_lpm_interval_set:
+0x3596 009559 ifetch 2 ,regb 
+0x3597 009560 store 2 ,mem_lpm_interval 
+0x3598 009561 ifetch 2 ,contr 
+0x3599 009562 store 2 ,mem_le_adv_interval 
+0x359a 009563 rtn 
+:      009565 antilost_buzzer_pwm_init:
+0x359b 009566 arg 0 ,rega 
+0x359c 009567 call pwm_init 
+0x359d 009568 fetch 6 ,mem_buzzer_pwm_conf 
+0x359e 009569 store 6 ,mem_pdatatemp 
+0x359f 009570 call pwm_out_set 
+0x35a0 009571 fetch 1 ,mem_buzzer_pwm_conf 
+0x35a1 009572 branch pwm_disable 
+:      009574 antilost_led_on_cb:
+0x35a2 009575 jam 1 ,mem_antl_led_state 
+0x35a3 009576 rtn 
+:      009577 antilost_led_off_cb:
+0x35a4 009578 jam 0 ,mem_antl_led_state 
+0x35a5 009579 rtn 
+:      009583 antilost_buzzer_off:
+0x35a6 009584 jam 0 ,mem_antl_buzzer_state 
+0x35a7 009585 fetch 1 ,mem_buzzer_pwm_conf 
+0x35a8 009586 branch pwm_disable 
+:      009588 antilost_buzzer_on:
+0x35a9 009589 jam 1 ,mem_antl_buzzer_state 
+0x35aa 009590 fetch 6 ,mem_buzzer_pwm_conf 
+0x35ab 009591 store 6 ,mem_pdatatemp 
+0x35ac 009592 branch pwm_out_set 
+:      009596 antilost_adc_init:
+0x35ad 009597 jam 0 ,mem_adc_config_flag 
+0x35ae 009598 branch adc_init_data 
+:      009600 antilost_battery_process:
+0x35af 009601 call adc_set_mode 
+0x35b0 009602 call vdd_calculate_by_mode 
+0x35b1 009603 store 2 ,mem_battery_current_voltage 
+0x35b2 009604 arg mem_battery_calculate_set ,rega 
+0x35b3 009605 call adc_bat_percent_lowpower_out 
+0x35b4 009606 store 1 ,mem_voltage_remain_percent 
+0x35b5 009607 beq 0 ,antilost_low_battery 
+0x35b6 009608 sub pdata ,0x64 ,null 
+0x35b7 009609 nbranch antilost_full_battery ,positive 
+0x35b8 009610 store 1 ,mem_antl_key0_release + 8 
+:      009611 antilost_battery_calculate_end:
+0x35b9 009612 jam opcode5_batter_information ,mem_antl_key0_release + 5 
+0x35ba 009613 arg mem_antl_key0_release ,regc 
+0x35bb 009614 branch antilost_prepare_data_and_send 
+:      009615 antilost_full_battery:
+0x35bc 009616 jam 100 ,mem_antl_key0_release + 8 
+0x35bd 009617 branch antilost_battery_calculate_end 
+:      009619 antilost_low_battery:
+0x35be 009620 branch app_button_long_pressed 
+:      009624 car_init:
+0x35bf 009625 rtn wake 
+0x35c0 009626 hfetch 1 ,core_gpio_sel1 
+0x35c1 009627 and_into 0xf0 ,pdata 
+0x35c2 009628 hstore 1 ,core_gpio_sel1 
+0x35c3 009629 setarg car_le_before_hibernate 
+0x35c4 009630 store 2 ,mem_cb_before_hibernate 
+0x35c5 009632 setarg car_le_process_lpm_before 
+0x35c6 009633 store 2 ,mem_cb_before_lpm 
+0x35c7 009635 setarg app_enter_hibernate 
+0x35c8 009636 store 2 ,mem_cb_discovry_timeout 
+0x35c9 009638 setarg car_scale_process_idle 
+0x35ca 009639 store 2 ,mem_cb_idle_process 
+0x35cb 009641 setarg car_scale_process_bb_event 
+0x35cc 009642 store 2 ,mem_cb_bb_event_process 
+0x35cd 009644 setarg app_get_lpm_wake_lock 
+0x35ce 009645 store 2 ,mem_cb_check_wakelock 
+0x35cf 009647 setarg car_le_receive_data 
+0x35d0 009648 store 2 ,mem_cb_att_write 
+0x35d1 009650 setarg car_le_bb_event_timer 
+0x35d2 009651 store 2 ,mem_cb_event_timer 
+0x35d3 009653 call g24_head_ptr2regc 
+0x35d4 009654 setarg car_24g_receive_data 
+0x35d5 009655 add regc ,offset_24g_cb_rxdata_type1 ,contw 
+0x35d6 009656 istore 2 ,contw 
+0x35d7 009658 setarg car_power_off_signal 
+0x35d8 009659 store 2 ,mem_remote_car_power_off_cb 
+0x35d9 009661 setarg car_soft_switch_power_on_signal 
+0x35da 009662 store 2 ,mem_remote_car_power_standby_cb 
+0x35db 009664 bpatch patch19_7 ,mem_patch19 
+0x35dc 009665 call car_init_environment 
+0x35dd 009666 call queue_init 
+0x35de 009667 jam 2 ,mem_lpm_mult 
+0x35df 009668 jam power_on ,mem_car_24g_received_pac 
+0x35e0 009669 fetch 1 ,mem_car_config_soft_switch_enable 
+0x35e1 009670 store 1 ,mem_car_hard_soft_switch 
+0x35e2 009671 beq hard_switch ,car_hard_switch_power_on_signal 
+0x35e3 009672 fetch 1 ,mem_car_config_soft_switch_gpio 
+0x35e4 009673 store 1 ,mem_ui_button_gpio 
+0x35e5 009674 jam off ,mem_le_adv_enable 
+:      009675 car_soft_switch_power_on_init:
+0x35e6 009676 call car_ui_led_init 
+0x35e7 009677 call ui_button_init 
+0x35e8 009678 call ui_button_polling 
+0x35e9 009679 jam power_starting ,mem_car_power_state 
+0x35ea 009680 fetch 2 ,mem_ui_state_map 
+0x35eb 009681 rtnbit1 ui_state_btn_down 
+0x35ec 009682 branch app_enter_hibernate 
+:      009684 car_power_off_signal:
+0x35ed 009685 branch car_ui_led_init 
+:      009687 car_hard_switch_power_on_signal:
+0x35ee 009688 jam power_standby ,mem_car_power_state 
+:      009689 car_soft_switch_power_on_signal:
+0x35ef 009690 jam on ,mem_le_adv_enable 
+0x35f0 009691 call car_ui_led_init 
+0x35f1 009692 arg 0 ,rega 
+0x35f2 009693 call ui_led_blink_start_global 
+0x35f3 009695 setarg fast_adv_interval_value_car 
+0x35f4 009696 call shutter_ble_adv_interval_set 
+:      009697 car_le_modified_name_adv:
+0x35f5 009698 arg mem_le_name + 7 ,contw 
+0x35f6 009699 fetch 1 ,mem_le_lap 
+:      009700 car_name_loop:
+0x35f7 009701 and pdata ,0xF0 ,temp 
+0x35f8 009702 rshift4 temp ,temp 
+0x35f9 009703 call car_hex_to_ascii 
+0x35fa 009704 istoret 1 ,contw 
+0x35fb 009705 and pdata ,0x0F ,temp 
+0x35fc 009706 call car_hex_to_ascii 
+0x35fd 009707 istoret 1 ,contw 
+0x35fe 009708 call le_modified_name_att_list 
+0x35ff 009709 fetcht 1 ,mem_le_name_len 
+0x3600 009710 copy temp ,loopcnt 
+0x3601 009711 arg mem_le_adv_data + 2 ,contw 
+0x3602 009712 arg mem_le_name ,contr 
+0x3603 009713 call memcpy 
+:      009714 car_le_modified_name_scan:
+0x3604 009715 fetcht 1 ,mem_le_name_len 
+0x3605 009716 copy temp ,loopcnt 
+0x3606 009717 arg mem_le_scan_data + 2 ,contw 
+0x3607 009718 arg mem_le_name ,contr 
+0x3608 009719 branch memcpy 
+:      009720 car_hex_to_ascii:
+0x3609 009721 sub temp ,9 ,null 
+0x360a 009722 branch car_hex_num ,positive 
+0x360b 009723 add temp ,55 ,temp 
+0x360c 009724 rtn 
+:      009725 car_hex_num:
+0x360d 009726 add temp ,48 ,temp 
+0x360e 009727 rtn 
+:      009729 car_ui_led_init:
+0x360f 009730 fetch 1 ,mem_car_config_blood_led1_gpio 
+0x3610 009731 bne invalid_pin_num ,car_blood_led_gpio_set 
+:      009732 car_ui_led_init_1:
+0x3611 009733 fetch 1 ,mem_car_config_pairing_led_gpio 
+0x3612 009734 bne invalid_pin_num ,car_pairing_led_gpio_set 
+:      009735 car_ui_led_init_2:
+0x3613 009736 fetch 1 ,mem_car_config_low_voltage_led_gpio 
+0x3614 009737 bne invalid_pin_num ,car_low_voltage_led_gpio_set 
+:      009738 car_ui_led_init_3:
+0x3615 009739 fetch 1 ,mem_car_led_num 
+0x3616 009740 copy pdata ,loopcnt 
+0x3617 009741 setarg mem_car_led_map 
+0x3618 009742 copy pdata ,rega 
+:      009743 car_in_lp1:
+0x3619 009744 copy rega ,contr 
+0x361a 009745 ifetch 1 ,contr 
+0x361b 009746 copy contr ,rega 
+0x361c 009747 beq invalid_pin_num ,car_in_lp1_end 
+0x361d 009748 copy pdata ,temp 
+0x361e 009749 call gpio_config_output 
+:      009750 car_in_lp1_end:
+0x361f 009751 loop car_in_lp1 
+:      009752 car_ui_led_init_end:
+0x3620 009753 rtn 
+:      009754 car_blood_led_gpio_set:
+0x3621 009755 fetch 8 ,mem_car_config_blood_led1_gpio 
+0x3622 009756 store 8 ,mem_car_led_map + 2 
+0x3623 009757 branch car_ui_led_init_1 
+:      009758 car_pairing_led_gpio_set:
+0x3624 009759 store 1 ,mem_car_led_map 
+0x3625 009760 branch car_ui_led_init_2 
+:      009761 car_low_voltage_led_gpio_set:
+0x3626 009762 store 1 ,mem_car_led_map + 1 
+0x3627 009763 branch car_ui_led_init_3 
+:      009766 car_init_environment:
+0x3628 009767 arg 0 ,rega 
+0x3629 009768 call pwm_init 
+0x362a 009769 call car_ir_rx_init 
+0x362b 009770 call g24_receive_process_init 
+0x362c 009771 branch car_init_adc_hvin 
+:      009773 car_init_adc_hvin:
+0x362d 009774 jam 100 ,mem_car_notify_vdd_value_last 
+0x362e 009775 fetch 1 ,mem_car_config_low_voltage_led_gpio 
+0x362f 009776 store 1 ,mem_car_style2_struct_led_gpio 
+0x3630 009777 branch adc_init_data 
+:      009779 car_le_before_hibernate:
+0x3631 009780 call gpio_set_before_lpm_common 
+0x3632 009781 branch keyscan_process_lpm_before 
+:      009783 car_le_process_lpm_before:
+0x3633 009784 branch keyscan_process_lpm_before 
+:      009786 car_key_scan_process:
+0x3634 009789 branch keyscan_key_process 
+:      009791 car_scale_process_idle:
+0x3635 009792 call car_le_send_packet 
+0x3636 009793 call car_ir_receive_process 
+0x3637 009794 call car_g24_status_process 
+0x3638 009795 branch car_key_scan_process 
+:      009797 car_g24_status_process:
+0x3639 009798 fetch 2 ,mem_ui_state_map 
+0x363a 009799 rtnbit1 ui_state_ble_connected 
+0x363b 009800 fetch 1 ,mem_car_24g_received_pac 
+0x363c 009801 beq work_paired ,car_g24_connected_event 
+0x363d 009802 rtn 
+:      009803 car_g24_connected_event:
+0x363e 009804 fetch 1 ,mem_car_24g_status 
+0x363f 009805 rtneq work_paired 
+0x3640 009806 jam work_paired ,mem_car_24g_status 
+0x3641 009807 branch car_g24_connected 
+:      009809 car_le_send_packet:
+0x3642 009810 fetch 2 ,mem_ui_state_map 
+0x3643 009811 rtnbit0 ui_state_ble_connected 
+0x3644 009812 call le_fifo_check_nearly_full 
+0x3645 009813 nrtn blank 
+0x3646 009814 arg mem_car_pop_queue_buff ,rega 
+0x3647 009815 call queue_pop 
+0x3648 009816 nrtn user 
+0x3649 009817 arg mem_car_pop_queue_buff ,contr 
+0x364a 009818 branch le_send_notify_from_list 
+:      009820 car_scale_process_bb_event:
+0x364b 009821 copy regc ,pdata 
+0x364c 009822 beq bt_evt_button_up ,app_event_button_up 
+0x364d 009823 beq bt_evt_button_long_pressed ,app_button_long_pressed 
+0x364e 009824 beq bt_evt_le_connected ,car_scale_event_le_conn 
+0x364f 009825 beq bt_evt_le_disconnected ,car_scale_event_le_discon 
+0x3650 009826 rtn 
+:      009828 car_scale_event_le_conn:
+0x3651 009829 setarg disable_24g 
+0x3652 009830 call g24_store_mem_24g_mode 
+0x3653 009831 branch car_scale_process_conn 
+:      009832 car_g24_connected:
+0x3654 009833 fetch 2 ,mem_car_24g_no_data_timeout_count 
+0x3655 009834 store 2 ,mem_car_24g_no_data_timeout_timer 
+:      009835 car_scale_process_conn:
+0x3656 009836 jam 0x14 ,mem_car_notify_vdd_timer 
+0x3657 009837 jam 0 ,mem_lpm_mode 
+0x3658 009838 call app_ble_stop_adv 
+0x3659 009839 call app_lpm_mult_enable 
+0x365a 009840 fetch 1 ,mem_car_config_pairing_led_conn_status 
+0x365b 009841 beq 0x01 ,car_pairing_led_conn_status_setting 
+:      009842 car_scale_process_conn_next:
+0x365c 009843 arg 0 ,rega 
+0x365d 009844 branch ui_led_on_global 
+:      009845 car_pairing_led_conn_status_setting:
+0x365e 009846 arg 0 ,rega 
+0x365f 009847 branch ui_led_blink_stop_global 
+:      009849 car_scale_event_le_discon:
+0x3660 009850 setarg rx_24g 
+0x3661 009851 call g24_store_mem_24g_mode 
+:      009852 car_g24_disconnect:
+0x3662 009853 setarg 0 
+0x3663 009854 store 5 ,mem_car_led_control 
+0x3664 009855 setarg 4 
+0x3665 009856 call pwm_disable 
+0x3666 009857 setarg 5 
+0x3667 009858 call pwm_disable 
+0x3668 009859 setarg 20 
+0x3669 009860 call pwm_disable 
+0x366a 009861 setarg 21 
+0x366b 009862 call pwm_disable 
+0x366c 009863 setarg 22 
+0x366d 009864 call pwm_disable 
+0x366e 009865 setarg 7 
+0x366f 009866 call pwm_disable 
+0x3670 009867 call queue_init 
+0x3671 009868 jam 10 ,mem_motor1_speed 
+0x3672 009869 jam 10 ,mem_motor2_speed 
+0x3673 009870 jam 10 ,mem_motor3_speed 
+0x3674 009872 jam 2 ,mem_lpm_mult 
+0x3675 009873 arg 0 ,rega 
+0x3676 009874 call ui_led_blink_start_global 
+0x3677 009876 setarg fast_adv_interval_value_car 
+0x3678 009877 call shutter_ble_adv_interval_set 
+0x3679 009878 branch app_ble_start_adv 
+:      009880 car_le_bb_event_timer:
+0x367a 009882 call car_moto1_blank_data_timer 
+0x367b 009883 call car_moto2_blank_data_timer 
+0x367c 009884 call car_moto3_blank_data_timer 
+0x367d 009885 call app_power_timer 
+0x367e 009886 call car_led_control_timer 
+0x367f 009887 call car_notify_vdd_timer 
+0x3680 009888 call car_24g_no_data_timeout_timer 
+0x3681 009889 call car_ir_breakdown_timer 
+0x3682 009890 branch car_attack_shake_timer 
+:      009892 car_ir_breakdown_timer:
+0x3683 009893 arg mem_car_ir_breakdown_check_timer ,regc 
+0x3684 009894 arg car_ir_breakdown_timeout ,regb 
+0x3685 009895 branch timer_single_step 
+:      009896 car_ir_breakdown_timeout:
+0x3686 009897 call car_ir_gpio_get_status 
+0x3687 009898 nrtn true 
+0x3688 009899 jam 1 ,mem_car_ir_breakdown_flag 
+0x3689 009900 rtn 
+:      009902 car_24g_no_data_timeout_timer:
+0x368a 009903 arg mem_car_24g_no_data_timeout_timer ,regc 
+0x368b 009904 arg car_24g_no_data_timer_timeout ,regb 
+0x368c 009905 branch timer_single_step_2b 
+:      009906 car_24g_no_data_timer_timeout:
+0x368d 009907 jam work_search ,mem_car_24g_status 
+0x368e 009908 branch car_g24_disconnect 
+:      009910 car_attack_shake_timer:
+0x368f 009911 arg mem_car_attack_shake_timer ,regc 
+0x3690 009912 arg car_attack_shake ,regb 
+0x3691 009913 branch timer_single_step 
+:      009914 car_attack_shake:
+0x3692 009915 fetch 1 ,mem_car_attack_shake_flag 
+0x3693 009916 branch car_attack_shake_stop ,blank 
+0x3694 009917 jam 2 ,mem_car_attack_shake_timer 
+0x3695 009918 jam 0 ,mem_car_attack_shake_flag 
+0x3696 009919 setarg 0x0a02 
+0x3697 009920 store 2 ,mem_le_receive_payload 
+0x3698 009921 fetch 1 ,mem_car_config_device_select 
+0x3699 009922 beq device_battle_tank ,car_attack_shake_front_battle_tank 
+:      009923 car_attack_shake_front_battle_car:
+0x369a 009924 branch car_motor_control 
+:      009925 car_attack_shake_front_battle_tank:
+0x369b 009926 setarg 0x0a02 
+0x369c 009927 store 2 ,mem_le_receive_payload + 2 
+0x369d 009928 branch car_motor_control 
+:      009929 car_attack_shake_stop:
+0x369e 009930 setarg 0 
+0x369f 009931 store 4 ,mem_le_receive_payload 
+0x36a0 009932 branch car_motor_control 
+:      009934 car_notify_vdd_timer:
+0x36a1 009935 fetch 1 ,mem_car_config_bat_notify_enable 
+0x36a2 009936 rtn blank 
+0x36a3 009937 fetch 2 ,mem_ui_state_map 
+0x36a4 009938 bbit0 ui_state_ble_connected ,car_low_bat_led_off 
+0x36a5 009939 arg mem_car_notify_vdd_timer ,regc 
+0x36a6 009940 arg car_notify_vdd ,regb 
+0x36a7 009941 branch timer_single_step 
+:      009942 car_notify_vdd:
+0x36a8 009943 fetch 1 ,mem_car_notify_vdd_count 
+0x36a9 009944 store 1 ,mem_car_notify_vdd_timer 
+0x36aa 009945 fetch 1 ,mem_car_working_flag 
+0x36ab 009946 nrtn blank 
+:      009947 car_read_hvin:
+0x36ac 009948 call adc_set_mode 
+0x36ad 009949 call vdd_calculate_by_mode 
+0x36ae 009950 store 2 ,mem_vdd_now_vol 
+0x36af 009951 arg mem_vdd_calculate_set ,rega 
+0x36b0 009952 call adc_bat_percent_lowpower_out 
+0x36b1 009953 fetcht 1 ,mem_car_notify_vdd_value_last 
+0x36b2 009954 isub temp ,null 
+0x36b3 009955 branch car_notify_vdd_next2 ,positive 
+0x36b4 009956 store 1 ,mem_car_notify_vdd_value_last 
+0x36b5 009957 copy pdata ,temp 
+:      009958 car_notify_vdd_next2:
+0x36b6 009959 storet 1 ,mem_car_notify_vdd_percent 
+0x36b7 009960 fetch 1 ,mem_car_config_low_voltage_percent 
+0x36b8 009961 isub temp ,null 
+0x36b9 009962 call car_enter_low_bat ,positive 
+0x36ba 009963 storet 1 ,mem_notify_bat_payload 
+0x36bb 009964 arg 6 ,loopcnt 
+0x36bc 009965 arg mem_notify_bat_head ,contr 
+0x36bd 009966 call calc_check_sum_start 
+0x36be 009967 store 1 ,mem_notify_bat_check_sum 
+0x36bf 009968 arg mem_notify_bat_packet ,rega 
+0x36c0 009969 branch queue_push 
+:      009970 car_enter_low_bat:
+0x36c1 009971 fetch 1 ,mem_low_bat_flag 
+0x36c2 009972 nrtn blank 
+0x36c3 009973 jam 1 ,mem_low_bat_flag 
+0x36c4 009974 arg 1 ,rega 
+0x36c5 009975 branch ui_led_blink_start_global 
+:      009976 car_low_bat_led_off:
+0x36c6 009977 arg 1 ,rega 
+0x36c7 009978 branch ui_led_blink_stop_global 
+:      009980 car_led_control_timer:
+0x36c8 009981 arg mem_car_led_control_timer ,regc 
+0x36c9 009982 arg car_led_control ,regb 
+0x36ca 009983 branch timer_single_step 
+:      009984 car_led_control:
+0x36cb 009985 jam 5 ,mem_car_led_control_timer 
+0x36cc 009986 jam 0 ,mem_car_led_no 
+0x36cd 009987 fetch 1 ,mem_car_led_blink_status 
+0x36ce 009988 beq led_on ,car_led_control_blink_off 
+0x36cf 009989 beq led_off ,car_led_control_blink_on 
+:      009990 car_led_control_set:
+0x36d0 009991 arg mem_car_led_control ,contr 
+0x36d1 009992 copy contr ,rega 
+0x36d2 009993 arg 8 ,loopcnt 
+:      009994 car_led_control_timer_next:
+0x36d3 009995 copy rega ,contr 
+0x36d4 009996 ifetch 1 ,contr 
+0x36d5 009997 copy contr ,rega 
+0x36d6 009998 beq led_off ,car_led_control_off 
+0x36d7 009999 beq led_on ,car_led_control_on 
+0x36d8 010000 beq led_blink ,car_led_control_blink 
+:      010001 car_led_control_timer_next_2:
+0x36d9 010002 fetch 1 ,mem_car_led_no 
+0x36da 010003 increase 1 ,pdata 
+0x36db 010004 store 1 ,mem_car_led_no 
+0x36dc 010005 loop car_led_control_timer_next 
+0x36dd 010006 rtn 
+:      010007 car_led_switch:
+0x36de 010008 fetch 1 ,mem_car_led_no 
+0x36df 010009 arg mem_car_config_blood_led_gpio ,regb 
+0x36e0 010010 iadd regb ,regb 
+0x36e1 010011 ifetcht 1 ,regb 
+0x36e2 010012 rtn 
+:      010013 car_led_control_off:
+0x36e3 010014 call car_led_switch 
+0x36e4 010015 call gpio_out_inactive 
+0x36e5 010016 branch car_led_control_timer_next_2 
+:      010017 car_led_control_on:
+0x36e6 010018 call car_led_switch 
+0x36e7 010019 call gpio_out_active 
+0x36e8 010020 branch car_led_control_timer_next_2 
+:      010021 car_led_control_blink:
+0x36e9 010022 fetch 1 ,mem_car_led_blink_status 
+0x36ea 010023 beq led_on ,car_led_control_off 
+0x36eb 010024 branch car_led_control_on 
+:      010025 car_led_control_blink_on:
+0x36ec 010026 jam led_on ,mem_car_led_blink_status 
+0x36ed 010027 branch car_led_control_set 
+:      010028 car_led_control_blink_off:
+0x36ee 010029 jam led_off ,mem_car_led_blink_status 
+0x36ef 010030 branch car_led_control_set 
+:      010034 calc_check_sum_start:
+0x36f0 010035 arg 0 ,rega 
+:      010036 calc_check_sum_loop:
+0x36f1 010037 ifetch 1 ,contr 
+0x36f2 010038 iadd rega ,rega 
+0x36f3 010039 loop calc_check_sum_loop 
+:      010040 calc_check_sum_and:
+0x36f4 010041 and rega ,0xff ,pdata 
+0x36f5 010042 rtn 
+:      010044 car_le_receive_data:
+0x36f6 010045 fetch 1 ,mem_le_att_opcode 
+0x36f7 010046 beq attop_write_request ,car_le_parse_att_write_request 
+0x36f8 010047 rtn 
+:      010048 car_le_parse_att_write_request:
+0x36f9 010049 fetch 2 ,mem_le_att_handle 
+0x36fa 010050 beq att_car_control_handle ,car_control_le_receive 
+0x36fb 010051 rtn 
+:      010063 le_app_receive_data:
+0x36fc 010064 bpatch patch1a_0 ,mem_patch1a 
+0x36fd 010065 ifetch 5 ,rega 
+0x36fe 010066 store 5 ,mem_app_receive_temp 
+0x36ff 010067 fetch 2 ,mem_app_receive_temp 
+0x3700 010068 arg le_receive_packet_head ,temp 
+0x3701 010069 isub temp ,null 
+0x3702 010070 nrtn zero 
+0x3703 010071 fetch 2 ,mem_app_receive_temp + 3 
+0x3704 010072 byteswap pdata ,pdata 
+0x3705 010073 store 2 ,mem_app_receive_temp + 3 
+0x3706 010074 copy pdata ,loopcnt 
+0x3707 010075 increase 5 ,rega 
+0x3708 010076 copy rega ,contr 
+0x3709 010077 arg mem_app_receive_temp + 5 ,contw 
+0x370a 010078 call memcpy 
+0x370b 010079 ifetch 1 ,contr 
+0x370c 010080 store 1 ,mem_app_receive_temp + 15 
+0x370d 010081 arg mem_app_receive_temp + 2 ,rega 
+0x370e 010082 arg mem_app_receive_temp + 5 ,regb 
+0x370f 010083 rtn 
+:      010085 car_control_le_receive:
+0x3710 010086 setarg 0 
+0x3711 010087 store 5 ,mem_le_receive_payload 
+0x3712 010088 store 5 ,mem_le_receive_payload + 5 
+0x3713 010089 call le_app_receive_data 
+0x3714 010090 copy regb ,contr 
+0x3715 010091 arg mem_le_receive_payload ,contw 
+0x3716 010092 arg 10 ,loopcnt 
+0x3717 010093 call memcpy 
+:      010094 car_receive_cmd_select:
+0x3718 010095 bpatch patch1a_1 ,mem_patch1a 
+0x3719 010096 ifetch 1 ,rega 
+0x371a 010097 beq car_cmd_old_car_control ,car_drive_old 
+0x371b 010098 beq car_cmd_old_speed_control ,car_speed_set_old 
+0x371c 010099 beq car_cmd_l_r_motor_control ,car_motor_control 
+0x371d 010100 beq car_cmd_f_b_motor_control ,car_motor_control 
+0x371e 010101 beq car_cmd_ir_control ,car_ir_data_rx_from_app 
+0x371f 010102 beq car_cmd_led_control ,car_led_control_receive 
+0x3720 010103 beq car_cmd_device_info ,car_info_request 
+0x3721 010104 rtn 
+:      010106 car_24g_receive_data:
+0x3722 010107 fetch 2 ,mem_ui_state_map 
+0x3723 010108 rtnbit1 ui_state_ble_connected 
+0x3724 010110 fetch 2 ,mem_car_24g_no_data_timeout_count 
+0x3725 010111 store 2 ,mem_car_24g_no_data_timeout_timer 
+0x3726 010113 jam work_paired ,mem_car_24g_received_pac 
+0x3727 010115 setarg offset_24g_rxdata_temp_add3 
+0x3728 010116 call g24_set_rega 
+0x3729 010117 call car_control_le_receive 
+0x372a 010119 fetch 1 ,mem_app_receive_temp + 2 
+0x372b 010120 beq car_cmd_l_r_motor_control ,car_24g_receive_data_next 
+0x372c 010121 beq car_cmd_f_b_motor_control ,car_24g_receive_data_next 
+0x372d 010122 rtn 
+:      010123 car_24g_receive_data_next:
+0x372e 010124 fetch 1 ,mem_le_receive_payload 
+0x372f 010125 ncall car_moto1_enable_blank_data_timer ,blank 
+0x3730 010126 fetch 1 ,mem_le_receive_payload + 2 
+0x3731 010127 ncall car_moto2_enable_blank_data_timer ,blank 
+0x3732 010128 fetch 1 ,mem_le_receive_payload + 4 
+0x3733 010129 ncall car_moto3_enable_blank_data_timer ,blank 
+0x3734 010130 rtn 
+:      010132 car_moto1_enable_blank_data_timer:
+0x3735 010133 jam 5 ,mem_car_moto1_blank_timer 
+0x3736 010134 rtn 
+:      010135 car_moto2_enable_blank_data_timer:
+0x3737 010136 jam 5 ,mem_car_moto2_blank_timer 
+0x3738 010137 rtn 
+:      010138 car_moto3_enable_blank_data_timer:
+0x3739 010139 jam 5 ,mem_car_moto3_blank_timer 
+0x373a 010140 rtn 
+:      010142 car_moto1_blank_data_timer:
+0x373b 010143 arg mem_car_moto1_blank_timer ,regc 
+0x373c 010144 arg car_moto1_blank_data ,regb 
+0x373d 010145 branch timer_single_step 
+:      010146 car_moto2_blank_data_timer:
+0x373e 010147 arg mem_car_moto2_blank_timer ,regc 
+0x373f 010148 arg car_moto2_blank_data ,regb 
+0x3740 010149 branch timer_single_step 
+:      010150 car_moto3_blank_data_timer:
+0x3741 010151 arg mem_car_moto3_blank_timer ,regc 
+0x3742 010152 arg car_moto3_blank_data ,regb 
+0x3743 010153 branch timer_single_step 
+:      010155 car_moto1_blank_data:
+0x3744 010156 jam 0 ,mem_le_receive_payload 
+0x3745 010157 branch car_motor_control 
+:      010158 car_moto2_blank_data:
+0x3746 010159 jam 0 ,mem_le_receive_payload + 2 
+0x3747 010160 branch car_motor_control 
+:      010161 car_moto3_blank_data:
+0x3748 010162 jam 0 ,mem_le_receive_payload + 4 
+0x3749 010163 branch car_motor_control 
+:      010168 car_drive_old:
+0x374a 010169 call car_left_right_control_old 
+0x374b 010170 branch car_front_back_control_old 
+:      010171 car_left_right_control_old:
+0x374c 010172 fetch 1 ,mem_le_receive_payload 
+0x374d 010173 store 1 ,mem_motor2_status 
+0x374e 010174 branch car_motor2_control 
+:      010175 car_front_back_control_old:
+0x374f 010176 fetch 1 ,mem_motor1_speed 
+0x3750 010177 call car_reset_old_speed 
+0x3751 010178 fetch 1 ,mem_le_receive_payload + 1 
+0x3752 010179 store 1 ,mem_motor1_status 
+0x3753 010180 branch car_motor1_control 
+:      010181 car_reset_old_speed:
+0x3754 010182 beq speed_level_2 ,car_reset_old_speed2 
+0x3755 010183 beq speed_level_3 ,car_reset_old_speed3 
+0x3756 010184 store 1 ,mem_motor1_speed 
+0x3757 010185 rtn 
+:      010186 car_reset_old_speed2:
+0x3758 010187 jam speed_level_5 ,mem_motor1_speed 
+0x3759 010188 rtn 
+:      010189 car_reset_old_speed3:
+0x375a 010190 jam speed_level_10 ,mem_motor1_speed 
+0x375b 010191 rtn 
+:      010192 car_speed_set_old:
+0x375c 010193 fetch 1 ,mem_le_receive_payload 
+0x375d 010194 call car_reset_old_speed 
+0x375e 010195 fetch 1 ,mem_motor1_speed 
+0x375f 010196 call car_motor_speed_duty_setting 
+0x3760 010197 call car_motor_speed_duty_transform 
+0x3761 010198 branch pwm_pwm0_duty_set 
+:      010200 car_motor_control:
+0x3762 010201 fetch 1 ,mem_car_24g_go_die_flag 
+0x3763 010202 nrtn blank 
+0x3764 010203 fetch 6 ,mem_le_receive_payload 
+0x3765 010204 store 6 ,mem_motor1_status 
+0x3766 010205 fetch 1 ,mem_motor1_speed 
+0x3767 010206 fetcht 1 ,mem_motor2_speed 
+0x3768 010207 iand temp ,pdata 
+0x3769 010208 fetcht 1 ,mem_motor3_speed 
+0x376a 010209 iand temp ,pdata 
+0x376b 010210 call car_motor_working_flag ,blank 
+0x376c 010211 bpatch patch1a_2 ,mem_patch1a 
+0x376d 010212 call car_motor1_control 
+0x376e 010213 call car_motor2_control 
+0x376f 010214 branch car_motor3_control 
+:      010215 car_motor1_control:
+0x3770 010216 arg mem_motor1_pwm_set ,regb 
+0x3771 010217 arg mem_motor1_status ,contr 
+0x3772 010218 branch car_motor_status_select 
+:      010219 car_motor2_control:
+0x3773 010220 arg mem_motor2_pwm_set ,regb 
+0x3774 010221 arg mem_motor2_status ,contr 
+0x3775 010222 branch car_motor_status_select 
+:      010223 car_motor3_control:
+0x3776 010224 arg mem_motor3_pwm_set ,regb 
+0x3777 010225 arg mem_motor3_status ,contr 
+0x3778 010226 branch car_motor_status_select 
+:      010227 car_motor_working_flag:
+0x3779 010228 jam 0 ,mem_car_working_flag 
+0x377a 010229 rtn 
+:      010231 car_motor_status_select:
+0x377b 010232 ifetch 1 ,contr 
+0x377c 010233 beq motor_stop ,car_motor_stop 
+0x377d 010234 beq go_front ,car_motor_positive 
+0x377e 010235 beq go_back ,car_motor_negative 
+0x377f 010236 rtn 
+:      010237 car_motor_positive:
+0x3780 010238 jam 0 ,mem_motor_select_p_n 
+0x3781 010239 branch car_motor_negative + 1 
+:      010240 car_motor_negative:
+0x3782 010241 jam 1 ,mem_motor_select_p_n 
+0x3783 010242 ifetch 1 ,contr 
+0x3784 010243 store 1 ,mem_car_motor_speed 
+0x3785 010244 ifetch 8 ,regb 
+0x3786 010245 branch car_motor_work 
+:      010247 car_motor_stop:
+0x3787 010248 ifetch 1 ,regb 
+0x3788 010249 call pwm_disable 
+0x3789 010250 increase 1 ,regb 
+0x378a 010251 ifetch 1 ,regb 
+0x378b 010252 branch pwm_disable 
+:      010253 car_motor_work:
+0x378c 010254 store 8 ,mem_motor_pwm_pin1_set 
+0x378d 010255 jam 1 ,mem_car_working_flag 
+0x378e 010256 fetch 1 ,mem_motor_select_p_n 
+0x378f 010257 beq 0 ,car_motor_select_positive 
+:      010258 car_motor_select_negative:
+0x3790 010259 fetch 1 ,mem_motor_pwm_pin2_set 
+0x3791 010260 store 1 ,mem_motor_pwm_pin_set 
+0x3792 010261 fetch 1 ,mem_motor_pwm_pin1_set 
+:      010262 car_motor_work_next:
+0x3793 010263 call pwm_disable 
+0x3794 010264 fetch 1 ,mem_car_motor_speed 
+0x3795 010265 call car_motor_speed_duty_setting 
+0x3796 010266 store 1 ,mem_motor_pwm_dute_set 
+0x3797 010267 fetch 6 ,mem_motor_pwm_pin_set 
+0x3798 010268 store 6 ,mem_pdatatemp 
+0x3799 010269 branch pwm_out_set 
+:      010270 car_motor_select_positive:
+0x379a 010271 fetch 1 ,mem_motor_pwm_pin1_set 
+0x379b 010272 store 1 ,mem_motor_pwm_pin_set 
+0x379c 010273 fetch 1 ,mem_motor_pwm_pin2_set 
+0x379d 010274 branch car_motor_work_next 
+:      010276 car_motor_speed_duty_setting:
+0x379e 010277 mul32 pdata ,5 ,pdata 
+0x379f 010278 add pdata ,50 ,pdata 
+0x37a0 010279 rtn 
+:      010280 car_motor_speed_duty_transform:
+0x37a1 010281 arg 12000 ,temp 
+0x37a2 010282 imul32 temp ,pdata 
+0x37a3 010283 div pdata ,100 
+0x37a4 010284 call wait_div_end 
+0x37a5 010285 quotient temp 
+0x37a6 010286 copy temp ,rega 
+0x37a7 010287 setarg 12000 
+0x37a8 010288 isub temp ,regb 
+0x37a9 010289 rtn 
+:      010292 car_ir_init:
+0x37aa 010293 hfetch 1 ,core_gpio_sel2 
+0x37ab 010294 set1 2 ,pdata 
+0x37ac 010295 hstore 1 ,core_gpio_sel2 
+0x37ad 010296 setarg 158 
+0x37ae 010297 hstore 2 ,core_pwm_pcnt4 
+0x37af 010298 hstore 2 ,core_pwm_ncnt4 
+0x37b0 010299 rtn 
+:      010301 car_ir_data_rx_from_app:
+0x37b1 010302 fetch 1 ,mem_car_24g_go_die_flag 
+0x37b2 010303 nrtn blank 
+0x37b3 010304 fetch 2 ,mem_le_receive_payload 
+0x37b4 010305 store 2 ,mem_ir_data 
+0x37b5 010306 fetch 1 ,mem_car_24g_status 
+0x37b6 010307 bne work_paired ,car_ir_data_tx 
+0x37b7 010308 fetch 2 ,mem_le_lap 
+0x37b8 010309 store 2 ,mem_ir_data 
+:      010310 car_ir_data_tx:
+0x37b9 010311 bpatch patch1a_3 ,mem_patch1a 
+0x37ba 010312 call car_ir_init 
+0x37bb 010313 call car_ir_enable 
+0x37bc 010314 setarg 48000 
+0x37bd 010315 call sleep 
+0x37be 010316 call car_ir_disable 
+0x37bf 010317 setarg 7200 
+0x37c0 010318 call sleep 
+0x37c1 010319 arg 16 ,loopcnt 
+:      010320 car_ir_send_loop:
+0x37c2 010321 call car_ir_enable 
+0x37c3 010322 fetch 2 ,mem_ir_data 
+0x37c4 010323 bbit1 0 ,car_ir_is_bit1 
+0x37c5 010324 setarg 7200 
+0x37c6 010325 call sleep 
+0x37c7 010326 call car_ir_disable 
+0x37c8 010327 branch car_ir_wait_finish 
+:      010329 car_ir_is_bit1:
+0x37c9 010330 setarg 14400 
+0x37ca 010331 call sleep 
+0x37cb 010332 call car_ir_disable 
+:      010333 car_ir_wait_finish:
+0x37cc 010334 setarg 7200 
+0x37cd 010335 call sleep 
+0x37ce 010336 fetch 2 ,mem_ir_data 
+0x37cf 010337 rshift pdata ,pdata 
+0x37d0 010338 store 2 ,mem_ir_data 
+0x37d1 010339 loop car_ir_send_loop 
+0x37d2 010341 jam 2 ,mem_car_attack_shake_timer 
+0x37d3 010342 jam 1 ,mem_car_attack_shake_flag 
+0x37d4 010343 setarg 0x0a01 
+0x37d5 010344 store 2 ,mem_le_receive_payload 
+0x37d6 010345 fetch 1 ,mem_car_config_device_select 
+0x37d7 010346 beq device_battle_tank ,car_attack_shake_back_battle_tank 
+:      010347 car_attack_shake_back_battle_car:
+0x37d8 010348 branch car_motor_control 
+:      010349 car_attack_shake_back_battle_tank:
+0x37d9 010350 setarg 0x0a01 
+0x37da 010351 store 2 ,mem_le_receive_payload + 2 
+0x37db 010352 branch car_motor_control 
+:      010354 car_ir_enable:
+0x37dc 010355 hfetch 1 ,core_gpio_key2 
+0x37dd 010356 or_into 0x40 ,pdata 
+0x37de 010357 hstore 1 ,core_gpio_key2 
+0x37df 010358 rtn 
+:      010359 car_ir_disable:
+0x37e0 010360 hfetch 1 ,core_gpio_key2 
+0x37e1 010361 and_into 0xbf ,pdata 
+0x37e2 010362 hstore 1 ,core_gpio_key2 
+0x37e3 010363 rtn 
+:      010365 car_ir_rx_init:
+0x37e4 010366 fetch 1 ,mem_car_config_ir_enable 
+0x37e5 010367 rtneq 0x00 
+0x37e6 010368 call lpm_disable_exen_output 
+0x37e7 010369 fetcht 1 ,mem_car_config_ir_rx_gpio 
+0x37e8 010370 storet 1 ,mem_ir_rx_gpio 
+0x37e9 010371 call gpio_config_input 
+0x37ea 010372 call car_ir_gpio_get_status 
+0x37eb 010373 nrtn true 
+0x37ec 010374 jam 1 ,mem_car_ir_breakdown_check_timer 
+0x37ed 010375 rtn 
+:      010377 car_ir_receive_process:
+0x37ee 010378 fetch 1 ,mem_car_config_ir_enable 
+0x37ef 010379 rtneq flag_ir_disable 
+0x37f0 010380 fetch 1 ,mem_car_ir_breakdown_flag 
+0x37f1 010381 nrtn blank 
+0x37f2 010382 fetch 2 ,mem_ui_state_map 
+0x37f3 010383 bbit1 ui_state_ble_connected ,car_ir_receive_process_next 
+0x37f4 010384 fetch 1 ,mem_car_24g_status 
+0x37f5 010385 rtnne work_paired 
+:      010386 car_ir_receive_process_next:
+0x37f6 010387 bpatch patch1a_4 ,mem_patch1a 
+0x37f7 010388 call car_ir_gpio_get_status 
+0x37f8 010389 nrtn true 
+0x37f9 010390 setarg 36000 
+0x37fa 010391 call sleep 
+0x37fb 010392 call car_ir_gpio_get_status 
+0x37fc 010393 nrtn true 
+0x37fd 010394 call car_ir_clk_get 
+:      010395 car_ir_packet_head_wait_end:
+0x37fe 010396 call car_ir_clk_check 
+0x37ff 010397 nrtn positive 
+0x3800 010398 call car_ir_gpio_get_status 
+0x3801 010399 branch car_ir_packet_head_wait_end ,true 
+0x3802 010400 arg 0 ,rega 
+0x3803 010401 arg 16 ,loopcnt 
+0x3804 010402 call car_ir_clk_get 
+:      010403 car_ir_receive_process_loop:
+0x3805 010404 call car_ir_clk_check 
+0x3806 010405 nrtn positive 
+0x3807 010406 call car_ir_gpio_get_status 
+0x3808 010407 nbranch car_ir_receive_process_loop ,true 
+0x3809 010408 setarg 10800 
+0x380a 010409 call sleep 
+0x380b 010410 call car_ir_gpio_get_status 
+0x380c 010411 branch car_ir_get_bit1 ,true 
+:      010412 car_ir_get_bit0:
+0x380d 010413 setarg 0 
+0x380e 010414 rshift rega ,rega 
+0x380f 010415 ior rega ,rega 
+0x3810 010416 loop car_ir_receive_process_loop 
+0x3811 010417 branch car_ir_receive_process_end 
+:      010418 car_ir_get_bit1:
+0x3812 010419 setarg 0x8000 
+0x3813 010420 rshift rega ,rega 
+0x3814 010421 ior rega ,rega 
+0x3815 010422 call car_ir_clk_get 
+:      010423 car_ir_get_bit1_wait_low_end:
+0x3816 010424 call car_ir_clk_check 
+0x3817 010425 nrtn positive 
+0x3818 010426 call car_ir_gpio_get_status 
+0x3819 010427 branch car_ir_get_bit1_wait_low_end ,true 
+0x381a 010428 loop car_ir_receive_process_loop 
+:      010429 car_ir_receive_process_end:
+0x381b 010430 bpatch patch1a_5 ,mem_patch1a 
+0x381c 010431 copy rega ,pdata 
+0x381d 010432 store 2 ,mem_ir_rx_buf 
+0x381e 010433 store 2 ,mem_ir_notify_data + 8 
+0x381f 010434 fetch 1 ,mem_car_24g_status 
+0x3820 010435 beq work_paired ,car_ir_24g_receive_attack 
+:      010436 car_ir_data_notify:
+0x3821 010437 arg 0x07 ,loopcnt 
+0x3822 010438 arg mem_ir_notify_data_head ,contr 
+0x3823 010439 call calc_check_sum_start 
+0x3824 010440 store 1 ,mem_ir_notify_data_check_sum 
+0x3825 010441 arg mem_ir_notify_data ,rega 
+0x3826 010442 branch queue_push 
+:      010444 car_ir_24g_receive_attack:
+0x3827 010445 fetch 1 ,mem_car_24g_ir_receive_attack_count 
+0x3828 010446 increase 1 ,pdata 
+0x3829 010447 store 1 ,mem_car_24g_ir_receive_attack_count 
+0x382a 010448 div pdata ,2 
+0x382b 010449 call wait_div_end 
+0x382c 010450 quotient temp 
+0x382d 010451 remainder pdata 
+0x382e 010452 nbranch car_ir_24g_receive_attack_blink ,blank 
+:      010453 car_ir_24g_receive_attack_off:
+0x382f 010454 fetch 1 ,mem_car_config_led_num 
+0x3830 010455 isub temp ,null 
+0x3831 010456 call car_ir_24g_go_die ,zero 
+0x3832 010457 arg mem_car_led_control ,pdata 
+0x3833 010458 increase -1 ,temp 
+0x3834 010459 iadd temp ,rega 
+0x3835 010460 arg 0 ,pdata 
+0x3836 010461 istore 1 ,rega 
+0x3837 010462 rtn 
+:      010463 car_ir_24g_receive_attack_blink:
+0x3838 010464 arg mem_car_led_control ,pdata 
+0x3839 010465 iadd temp ,rega 
+0x383a 010466 arg 2 ,pdata 
+0x383b 010467 istore 1 ,rega 
+0x383c 010468 rtn 
+:      010469 car_ir_24g_go_die:
+0x383d 010470 jam 1 ,mem_car_24g_go_die_flag 
+0x383e 010471 rtn 
+:      010472 car_ir_clk_get:
+0x383f 010473 copy clkn_bt ,pdata 
+0x3840 010474 store 4 ,mem_ir_receive_clkn 
+0x3841 010475 rtn 
+:      010476 car_ir_clk_check:
+0x3842 010477 copy clkn_bt ,pdata 
+0x3843 010478 fetcht 4 ,mem_ir_receive_clkn 
+0x3844 010479 isub temp ,pdata 
+0x3845 010480 sub pdata ,200 ,null 
+0x3846 010481 rtn 
+:      010483 car_ir_gpio_get_status:
+0x3847 010484 fetcht 1 ,mem_ir_rx_gpio 
+0x3848 010485 branch gpio_get_bit 
+:      010487 car_led_control_receive:
+0x3849 010488 fetch 8 ,mem_le_receive_payload 
+0x384a 010489 store 8 ,mem_car_led_control 
+0x384b 010490 rtn 
+:      010492 car_info_request:
+0x384c 010493 fetch 1 ,mem_car_config_device_select 
+0x384d 010494 store 1 ,mem_car_info_request_payload 
+0x384e 010495 fetch 1 ,mem_car_config_motor_layout 
+0x384f 010496 store 1 ,mem_car_info_request_payload + 1 
+0x3850 010497 fetch 1 ,mem_car_config_ir_enable 
+0x3851 010498 store 1 ,mem_car_info_request_payload + 2 
+0x3852 010499 arg 13 ,loopcnt 
+0x3853 010500 arg mem_car_info_request_head ,contr 
+0x3854 010501 call calc_check_sum_start 
+0x3855 010502 store 1 ,mem_car_info_request_checksum 
+0x3856 010503 arg mem_car_info_request ,rega 
+0x3857 010504 branch queue_push 
+:      010510 light_init:
+0x3858 010511 call clear_eeprom_size_2k 
+0x3859 010512 jam 0x7a ,mem_curr_packet_num 
+0x385a 010513 call light_load_controler_list 
+0x385b 010514 call light_init_crr_cmd_count 
+0x385c 010515 setarg light_pairing_timer 
+0x385d 010516 store 2 ,mem_cb_event_timer 
+0x385e 010517 arg 0 ,rega 
+0x385f 010518 branch pwm_init 
+:      010520 light_pairing_timer:
+0x3860 010521 fetch 2 ,mem_light_pairing_timer 
+0x3861 010522 rtn blank 
+0x3862 010523 increase -1 ,pdata 
+0x3863 010524 store 2 ,mem_light_pairing_timer 
+0x3864 010525 rtnne 0 
+0x3865 010526 jam 0 ,mem_light_pairing_enable 
+0x3866 010527 rtn 
+:      010529 light_init_crr_cmd_count:
+0x3867 010530 bpatch patch1a_6 ,mem_patch1a 
+0x3868 010531 fetch 1 ,mem_light_next_record 
+0x3869 010532 sub pdata ,40 ,null 
+0x386a 010533 rtn positive 
+0x386b 010534 jam 0 ,mem_light_next_record 
+0x386c 010535 rtn 
+:      010537 light_load_controler_list:
+0x386d 010538 arg mem_light_next_record ,rega 
+0x386e 010539 arg 0 ,regb 
+0x386f 010540 arg 81 ,temp 
+0x3870 010541 branch iicd_read_eep_data 
+:      010544 light_find_controler_pairing:
+0x3871 010545 disable user 
+0x3872 010546 fetch 1 ,mem_light_cnum 
+0x3873 010547 copy pdata ,loopcnt 
+0x3874 010549 arg mem_light_clist ,rega 
+0x3875 010550 copy regc ,regb 
+:      010551 light_find_controler_pairing_loop:
+0x3876 010552 bpatch patch1a_7 ,mem_patch1a 
+0x3877 010553 call light_compare_addr_record 
+0x3878 010554 branch enable_user ,zero 
+:      010555 light_find_single_pairing_diff:
+0x3879 010556 increase 4 ,rega 
+0x387a 010557 loop light_find_controler_pairing_loop 
+0x387b 010558 rtn 
+:      010561 light_compare_addr_record:
+0x387c 010562 bpatch patch1b_0 ,mem_patch1b 
+0x387d 010563 ifetch 3 ,rega 
+0x387e 010564 ifetcht 3 ,regb 
+0x387f 010565 isub temp ,null 
+0x3880 010566 rtn 
+:      010568 light_compare_single_record:
+0x3881 010569 bpatch patch1b_1 ,mem_patch1b 
+0x3882 010570 ifetch 3 ,rega 
+0x3883 010571 ifetcht 3 ,regb 
+0x3884 010572 isub temp ,null 
+0x3885 010573 nrtn zero 
+0x3886 010574 ifetch 1 ,contr 
+0x3887 010575 sub pdata ,0 ,null 
+0x3888 010576 rtn zero 
+0x3889 010577 add rega ,3 ,contr 
+0x388a 010578 ifetcht 1 ,contr 
+0x388b 010579 isub temp ,null 
+0x388c 010580 rtn 
+:      010583 light_find_controler_cmd:
+0x388d 010584 bpatch patch1b_2 ,mem_patch1b 
+0x388e 010585 disable user 
+0x388f 010586 fetch 1 ,mem_light_cnum 
+0x3890 010587 copy pdata ,loopcnt 
+0x3891 010589 arg mem_light_clist ,rega 
+0x3892 010590 copy regc ,regb 
+:      010591 light_find_controler_cmd_loop:
+0x3893 010592 call light_compare_single_record 
+0x3894 010593 branch enable_user ,zero 
+0x3895 010594 increase 4 ,rega 
+0x3896 010595 loop light_find_controler_cmd_loop 
+0x3897 010596 rtn 
+:      010599 light_recv_adv:
+0x3898 010600 fetch 1 ,mem_le_scanrsp_rcv 
+0x3899 010601 increase 1 ,pdata 
+0x389a 010602 store 1 ,mem_le_scanrsp_rcv 
+0x389b 010603 arg mem_le_rxbuf + 12 ,regc 
+:      010605 light_anylize_command:
+0x389c 010606 ifetch 2 ,regc 
+0x389d 010607 arg 0x55aa ,temp 
+0x389e 010608 isub temp ,null 
+0x389f 010609 nrtn zero 
+0x38a0 010610 copy contr ,regc 
+0x38a1 010611 ifetcht 3 ,regc 
+0x38a2 010612 setarg 0xffffff 
+0x38a3 010613 isub temp ,null 
+0x38a4 010614 branch light_parse_cmd ,zero 
+0x38a5 010615 call light_find_controler_cmd 
+0x38a6 010616 branch light_parse_cmd ,user 
+0x38a7 010617 rtn 
+:      010619 light_parse_cmd:
+0x38a8 010620 bpatch patch1b_3 ,mem_patch1b 
+0x38a9 010621 increase 4 ,regc 
+0x38aa 010622 ifetch 1 ,regc 
+0x38ab 010623 fetcht 1 ,mem_curr_packet_num 
+0x38ac 010624 isub temp ,null 
+0x38ad 010625 rtn zero 
+0x38ae 010626 store 1 ,mem_curr_packet_num 
+0x38af 010627 fetch 1 ,mem_le_req_rcv 
+0x38b0 010628 increase 1 ,pdata 
+0x38b1 010629 store 1 ,mem_le_req_rcv 
+0x38b2 010631 increase 1 ,regc 
+0x38b3 010632 ifetch 1 ,regc 
+0x38b4 010633 store 1 ,mem_light_crr_cmd_count 
+0x38b5 010634 copy pdata ,loopcnt 
+0x38b6 010635 rtn blank 
+:      010636 light_parse_cmd_loop:
+0x38b7 010637 ifetch 1 ,contr 
+0x38b8 010638 beq light_cmd_pwm0 ,light_parse_cmd_pwm0 
+0x38b9 010639 beq light_cmd_pwm1 ,light_parse_cmd_pwm1 
+0x38ba 010640 beq light_cmd_pwm2 ,light_parse_cmd_pwm2 
+0x38bb 010641 beq light_cmd_pwm3 ,light_parse_cmd_pwm3 
+0x38bc 010642 beq light_cmd_pwm4 ,light_parse_cmd_pwm4 
+0x38bd 010643 beq light_cmd_pwm5 ,light_parse_cmd_pwm5 
+0x38be 010644 beq light_cmd_auto_mode ,light_parse_auto_mode 
+0x38bf 010645 beq light_cmd_pairing ,light_parse_pairing 
+0x38c0 010646 loop light_parse_cmd_loop 
+0x38c1 010647 rtn 
+:      010649 light_parse_cmd_pwm0:
+0x38c2 010650 copy contr ,regc 
+0x38c3 010651 fetch 1 ,mem_light_pwm0 
+0x38c4 010652 store 1 ,mem_pdatatemp 
+0x38c5 010653 arg 0 ,temp 
+:      010654 light_parse_cmd_pwm_common:
+0x38c6 010655 storet 1 ,mem_pdatatemp + 1 
+0x38c7 010656 setarg 10000 
+0x38c8 010657 store 3 ,mem_pdatatemp + 2 
+0x38c9 010658 ifetch 1 ,regc 
+0x38ca 010659 store 1 ,mem_pdatatemp + 5 
+0x38cb 010660 call pwm_out_set 
+0x38cc 010661 and regc ,1 ,contr 
+0x38cd 010662 loop light_parse_cmd_loop 
+0x38ce 010663 rtn 
+:      010664 light_parse_cmd_pwm1:
+0x38cf 010665 copy regc ,contr 
+0x38d0 010666 fetch 1 ,mem_light_pwm1 
+0x38d1 010667 store 1 ,mem_pdatatemp 
+0x38d2 010668 arg 1 ,temp 
+0x38d3 010669 branch light_parse_cmd_pwm_common 
+:      010670 light_parse_cmd_pwm2:
+0x38d4 010671 copy regc ,contr 
+0x38d5 010672 fetch 1 ,mem_light_pwm2 
+0x38d6 010673 store 1 ,mem_pdatatemp 
+0x38d7 010674 arg 2 ,temp 
+0x38d8 010675 branch light_parse_cmd_pwm_common 
+:      010676 light_parse_cmd_pwm3:
+0x38d9 010677 copy regc ,contr 
+0x38da 010678 fetch 1 ,mem_light_pwm3 
+0x38db 010679 store 1 ,mem_pdatatemp 
+0x38dc 010680 arg 3 ,temp 
+0x38dd 010681 branch light_parse_cmd_pwm_common 
+:      010682 light_parse_cmd_pwm4:
+0x38de 010683 copy regc ,contr 
+0x38df 010684 fetch 1 ,mem_light_pwm4 
+0x38e0 010685 store 1 ,mem_pdatatemp 
+0x38e1 010686 arg 4 ,temp 
+0x38e2 010687 branch light_parse_cmd_pwm_common 
+:      010688 light_parse_cmd_pwm5:
+0x38e3 010689 copy regc ,contr 
+0x38e4 010690 fetch 1 ,mem_light_pwm5 
+0x38e5 010691 store 1 ,mem_pdatatemp 
+0x38e6 010692 arg 5 ,temp 
+0x38e7 010693 branch light_parse_cmd_pwm_common 
+:      010695 light_parse_auto_mode:
+0x38e8 010696 ifetch 1 ,contr 
+0x38e9 010697 rtn 
+:      010699 light_parse_pairing:
+0x38ea 010700 copy contr ,regc 
+0x38eb 010701 fetch 1 ,mem_light_pairing_enable 
+0x38ec 010702 bne 1 ,light_parse_pairing_abandon 
+0x38ed 010703 call update_controler_list 
+:      010704 light_parse_pairing_abandon:
+0x38ee 010705 and regc ,4 ,contr 
+0x38ef 010706 rtn 
+:      010707 update_controler_list:
+0x38f0 010708 bpatch patch1b_4 ,mem_patch1b 
+0x38f1 010709 call light_find_controler_pairing 
+0x38f2 010710 branch update_conrtoler_list_found ,user 
+0x38f3 010711 fetch 1 ,mem_light_next_record 
+0x38f4 010712 copy pdata ,temp 
+0x38f5 010713 increase 1 ,pdata 
+0x38f6 010714 store 1 ,mem_light_next_record 
+0x38f7 010715 call light_init_crr_cmd_count 
+0x38f8 010716 lshift2 temp ,temp 
+0x38f9 010717 setarg mem_light_clist 
+0x38fa 010718 iadd temp ,contw 
+0x38fb 010719 ifetch 4 ,regc 
+0x38fc 010720 istore 4 ,contw 
+0x38fd 010721 branch update_conrtoler_store_list 
+:      010722 update_conrtoler_list_found:
+0x38fe 010723 add regc ,3 ,contr 
+0x38ff 010724 ifetch 1 ,contr 
+0x3900 010725 rtn blank 
+0x3901 010726 ifetch 4 ,regc 
+0x3902 010727 istore 4 ,rega 
+:      010728 update_conrtoler_store_list:
+0x3903 010729 arg mem_light_next_record ,rega 
+0x3904 010730 arg 0 ,regb 
+0x3905 010731 arg 81 ,temp 
+0x3906 010732 branch iicd_write_eep_data 
+:      010736 lightc_init:
+0x3907 010740 fetcht 1 ,mem_lightc_led_gpio 
+0x3908 010741 call gpio_out_inactive 
+0x3909 010742 rtn 
+:      010745 lightc_dispatch:
+0x390a 010748 fetcht 1 ,mem_lightc_led_gpio 
+0x390b 010749 call gpio_out_active 
+0x390c 010752 fetcht 1 ,mem_lightc_led_gpio 
+0x390d 010753 call gpio_out_inactive 
+0x390e 010756 call lightc_start_adv 
+0x390f 010758 fetch 1 ,mem_adv_time 
+0x3910 010759 nrtn blank 
+0x3911 010761 call lpm_write_gpio_wakeup 
+0x3912 010762 hfetch 4 ,core_lpm_ctrl 
+0x3913 010763 set0 15 ,pdata 
+0x3914 010764 hstore 4 ,core_lpm_reg 
+0x3915 010765 call lpm_write_ctrl 
+0x3916 010766 arg param_hibernate_clks ,temp 
+0x3917 010767 branch lpm_sleep 
+:      010769 lightc_adv:
+0x3918 010770 fetch 1 ,mem_adv_time 
+0x3919 010771 branch le_adv_loop_tx ,blank 
+0x391a 010772 increase -1 ,pdata 
+0x391b 010773 store 1 ,mem_adv_time 
+0x391c 010774 branch le_adv_loop_tx 
+:      010776 lightc_start_adv:
+0x391d 010777 mul32 pdata ,20 ,pdata 
+0x391e 010778 arg mem_cmd0_string ,contr 
+0x391f 010779 iadd contr ,contr 
+0x3920 010780 ifetch 1 ,contr 
+0x3921 010781 rtn blank 
+0x3922 010782 copy pdata ,rega 
+0x3923 010783 copy rega ,loopcnt 
+0x3924 010784 arg mem_le_adv_data + 2 ,contw 
+0x3925 010785 call memcpy 
+0x3926 010786 copy rega ,pdata 
+0x3927 010787 increase 2 ,pdata 
+0x3928 010788 store 1 ,mem_le_adv_data_len 
+0x3929 010789 rtn 
+:      010796 module_init:
+0x392a 010798 rtn wake 
+0x392b 010799 call le_modified_name 
+0x392c 010800 call adc_init_data 
+0x392d 010801 setarg module_process_idle 
+0x392e 010802 store 2 ,mem_cb_idle_process 
+0x392f 010803 setarg module_bt_conn_process 
+0x3930 010804 store 2 ,mem_cb_bt_process 
+0x3931 010805 setarg module_process_bb_event 
+0x3932 010806 store 2 ,mem_cb_bb_event_process 
+0x3933 010807 setarg module_le_conn_process 
+0x3934 010808 store 2 ,mem_cb_le_process 
+0x3935 010809 setarg module_lpm_lock 
+0x3936 010810 store 2 ,mem_cb_check_wakelock 
+0x3937 010811 setarg module_hci_cmd_transmit_le_notify 
+0x3938 010812 store 2 ,mem_cb_ble_transmit 
+0x3939 010813 setarg module_hci_event_receive_spp_data 
+0x393a 010814 store 2 ,mem_cb_receive_spp_data 
+0x393b 010815 setarg module_le_receive_data 
+0x393c 010816 store 2 ,mem_cb_att_write 
+0x393d 010817 setarg module_bb_event_timer 
+0x393e 010818 store 2 ,mem_cb_event_timer 
+0x393f 010820 call module_spp_clear_last_transmite_clock 
+0x3940 010821 bpatch patch1b_5 ,mem_patch1b 
+0x3941 010822 call module_lpm_uart_init 
+0x3942 010823 call module_gpio_init 
+0x3943 010824 call check_module_disabled 
+0x3944 010825 branch module_hci_event_enter_standby_mode 
+:      010828 module_lpm_uart_init:
+0x3945 010829 fetch 4 ,mem_module_uart_rx_buffer 
+0x3946 010830 hstore 4 ,core_uart_rsaddr 
+0x3947 010832 fetch 4 ,mem_module_uart_tx_buffer 
+0x3948 010833 hstore 4 ,core_uart_tsaddr 
+0x3949 010835 hfetch 1 ,core_gpio_sel1 
+0x394a 010836 or_into 0x04 ,pdata 
+0x394b 010837 and_into 0xfc ,pdata 
+0x394c 010838 hstore 1 ,core_gpio_sel1 
+0x394d 010839 jam 0x00 ,core_uart_ctrl 
+0x394e 010841 fetch 2 ,mem_module_uart_rx_buffer 
+0x394f 010842 hstore 2 ,core_uart_rrptr 
+0x3950 010843 fetch 2 ,mem_module_uart_tx_buffer 
+0x3951 010844 hstore 2 ,core_uart_twptr 
+0x3952 010845 hstore 2 ,core_uart_trptrp 
+0x3953 010847 hfetch 4 ,core_gpio_pu0 
+0x3954 010848 set1 7 ,pdata 
+0x3955 010849 hstore 4 ,core_gpio_pu0 
+0x3956 010851 hfetch 2 ,core_clkoff 
+0x3957 010852 set0 clock_off_uart ,pdata 
+0x3958 010853 hstore 2 ,core_clkoff 
+0x3959 010854 call uart_set_baud_by_mem 
+0x395a 010855 jam uartclk_crystal ,core_uart_clksel 
+0x395b 010856 jam uart_ctrl_h4 ,core_uart_ctrl 
+0x395c 010858 fetch 1 ,mem_module_flag 
+0x395d 010859 isolate1 module_flag_uart_flow_control ,pdata 
+0x395e 010860 hfetcht 1 ,core_uart_ctrl 
+0x395f 010861 setflag true ,4 ,temp 
+0x3960 010862 hstoret 1 ,core_uart_ctrl 
+0x3961 010863 rtn 
+:      010867 module_lpm_init:
+0x3962 010868 call module_spp_clear_last_transmite_clock 
+0x3963 010869 branch module_lpm_uart_init 
+:      010872 module_gpio_init:
+0x3964 010877 fetcht 1 ,mem_module_connect_state_gpio 
+0x3965 010878 call gpio_config_output 
+0x3966 010879 call module_set_conn_pin_low 
+0x3967 010881 fetcht 1 ,mem_module_wake_up_gpio 
+0x3968 010882 branch gpio_config_input 
+:      010884 module_lpm_lock:
+0x3969 010885 fetcht 1 ,mem_module_wake_up_gpio 
+0x396a 010886 call gpio_get_bit 
+0x396b 010887 nbranch app_put_lpm_wake_lock ,true 
+0x396c 010888 branch app_get_lpm_wake_lock 
+:      010891 module_le_conn_process:
+0x396d 010892 rtn 
+:      010894 module_bt_conn_process:
+0x396e 010895 call module_spp_enter_sniff 
+0x396f 010896 branch module_control_air_flow 
+:      010898 module_spp_enter_sniff:
+0x3970 010899 fetch 1 ,mem_ui_state_map 
+0x3971 010900 bbit0 ui_state_bt_spp_conn ,module_spp_clear_last_transmite_clock 
+0x3972 010901 bpatch patch1b_6 ,mem_patch1b 
+0x3973 010902 setarg 0x3eff 
+0x3974 010903 fetcht 4 ,mem_last_transmite_clock 
+0x3975 010904 iadd temp ,temp 
+0x3976 010905 copy clkn_bt ,pdata 
+0x3977 010906 isub temp ,null 
+0x3978 010907 nrtn positive 
+0x3979 010908 fetch 2 ,mem_ui_state_map 
+0x397a 010909 bbit1 ui_state_bt_sniff ,module_spp_clear_last_transmite_clock 
+0x397b 010910 fetch 1 ,mem_module_flag 
+0x397c 010911 rtnbit1 moudle_task_sniff 
+0x397d 010912 call module_set_sniff_task_flag 
+0x397e 010913 call app_bt_enter_sniff 
+:      010914 module_spp_clear_last_transmite_clock:
+0x397f 010915 copy clkn_bt ,pdata 
+0x3980 010916 store 4 ,mem_last_transmite_clock 
+0x3981 010917 rtn 
+:      010920 module_process_idle:
+0x3982 010921 call module_control_air_flow 
+0x3983 010922 call l2cap_malloc_is_fifo_full 
+0x3984 010923 nrtn blank 
+0x3985 010924 branch module_process 
+:      010927 module_process_bb_event:
+0x3986 010928 copy regc ,pdata 
+0x3987 010929 beq bt_evt_bb_connected ,module_process_bb_conn 
+0x3988 010930 beq bt_evt_bb_disconnected ,module_process_bb_event_disconned 
+0x3989 010931 beq bt_evt_reconn_failed ,module_process_reconn_fail 
+0x398a 010932 beq bt_evt_setup_complete ,module_process_setup_complete 
+0x398b 010933 beq bt_evt_spp_connected ,module_process_spp_connected 
+0x398c 010934 beq bt_evt_spp_disconnected ,module_process_spp_disconnected 
+0x398d 010935 beq bt_evt_pincode_req ,module_process_evt_pincode_req 
+0x398e 010936 beq bt_evt_enter_sniff ,module_process_enter_sniff 
+0x398f 010937 beq bt_evt_exit_sniff ,module_process_exit_sniff 
+0x3990 010938 beq bt_evt_reconn_page_timeout ,module_process_page_time_out 
+0x3991 010939 beq bt_evt_le_connected ,module_process_le_conn 
+0x3992 010940 beq bt_evt_le_disconnected ,module_process_bb_even_le_disconn 
+0x3993 010941 beq bt_evt_sniff_not_accept ,module_process_sniff_not_accept 
+0x3994 010942 beq bt_evt_unsniff_accept ,module_process_unsniff_accept 
+0x3995 010943 beq bt_evt_unsniff_not_accept ,module_process_unsniff_not_accept 
+0x3996 010944 beq bt_evt_le_pairing_fail ,module_hci_event_le_pairing_fail 
+0x3997 010945 beq bt_evt_le_pairing_success ,module_hci_event_le_pairing_success 
+0x3998 010946 beq bt_evt_le_start_enc ,module_hci_event_start_enc 
+0x3999 010947 beq bt_evt_le_pause_enc ,module_hci_event_pause_enc 
+0x399a 010948 beq bt_evt_le_tk_generate ,module_hci_event_le_tk 
+0x399b 010949 beq bt_evt_bt_gkey_generate ,module_hci_event_gkey_generate 
+0x399c 010950 beq bt_evt_bt_get_passkey ,module_hci_event_passkey_entry_mode 
+0x399d 010951 beq bt_evt_bt_pairing_fail ,module_hci_event_bt_pairing_fail 
+0x399e 010952 beq bt_evt_bt_pairing_success ,module_hci_event_bt_pairing_success 
+0x399f 010953 beq bt_evt_le_gkey_generate ,module_hci_event_le_gkey 
+0x39a0 010954 beq bt_evt_store_nvram ,module_hci_event_store_device 
+0x39a1 010955 beq bt_evt_le_ltk_lost ,module_process_ble_ltk_lost 
+0x39a2 010956 rtn 
+:      010959 module_process_bb_event_disconned:
+0x39a3 010960 call module_spp_clear_last_transmite_clock 
+0x39a4 010961 fetch 1 ,mem_flag_pairing_state 
+0x39a5 010962 ncall module_hci_event_bt_pairing_fail ,blank 
+0x39a6 010963 call module_disconn_start 
+0x39a7 010964 fetch 2 ,mem_ui_state_map 
+0x39a8 010965 rtnbit0 ui_state_bt_spp_conn 
+0x39a9 010966 branch module_spp_disconnected 
+:      010968 module_process_spp_connected:
+0x39aa 010969 fetch 2 ,mem_ui_state_map 
+0x39ab 010970 set1 ui_state_bt_spp_conn ,pdata 
+0x39ac 010971 store 2 ,mem_ui_state_map 
+0x39ad 010972 fetch 1 ,mem_module_spp_lpm_mult 
+0x39ae 010973 store 1 ,mem_lpm_mult 
+0x39af 010974 call module_set_conn_pin_low 
+0x39b0 010975 branch module_hci_event_spp_connect 
+:      010977 module_process_spp_disconnected:
+:      010979 module_spp_disconnected:
+0x39b1 010980 fetch 2 ,mem_ui_state_map 
+0x39b2 010981 rtnbit0 ui_state_bt_spp_conn 
+0x39b3 010982 set0 ui_state_bt_spp_conn ,pdata 
+0x39b4 010983 store 2 ,mem_ui_state_map 
+0x39b5 010984 branch module_hci_event_spp_disconnect 
+:      010987 module_process_enter_sniff:
+:      010989 module_sniff_param_check:
+0x39b6 010990 call module_spp_clear_last_transmite_clock 
+0x39b7 010993 fetch 2 ,mem_context + coffset_tsniff 
+0x39b8 010994 rshift pdata ,pdata 
+0x39b9 010995 fetcht 2 ,mem_sniff_param_interval 
+0x39ba 010996 isub temp ,null 
+0x39bb 010997 nbranch module_sniff_param_check_unsniff ,zero 
+0x39bc 010998 branch app_lpm_mult_enable 
+:      010999 module_sniff_param_check_unsniff:
+0x39bd 011000 fetch 1 ,mem_module_flag 
+0x39be 011001 rtnbit1 moudle_task_unsniff 
+0x39bf 011002 hfetch 2 ,core_uart_rxitems 
+0x39c0 011003 ncall module_set_unsniff_task_flag ,blank 
+0x39c1 011004 branch app_bt_sniff_exit 
+:      011006 module_process_exit_sniff:
+0x39c2 011007 call module_clear_sniff_task_flag 
+0x39c3 011008 branch app_lpm_mult_disable 
+:      011010 module_process_setup_complete:
+0x39c4 011011 call module_spp_clear_last_transmite_clock 
+0x39c5 011012 branch module_conn_start 
+:      011014 module_process_bb_even_le_disconn:
+0x39c6 011015 call le_clr_config_more_data 
+0x39c7 011016 call module_disconn_start 
+0x39c8 011017 branch module_hci_event_le_disconnect 
+:      011019 module_process_evt_pincode_req:
+0x39c9 011020 branch app_bt_set_pincode 
+:      011023 module_process_sniff_not_accept:
+0x39ca 011024 branch module_clear_sniff_task_flag 
+:      011027 module_process_unsniff_accept:
+0x39cb 011028 fetch 1 ,mem_module_flag 
+0x39cc 011029 bbit0 moudle_task_unsniff ,app_bt_enter_sniff 
+0x39cd 011030 branch module_clear_unsniff_task_flag 
+:      011033 module_process_unsniff_not_accept:
+0x39ce 011034 branch module_clear_unsniff_task_flag 
+:      011037 module_process_le_conn:
+0x39cf 011038 call le_send_att_exchange_mtu_requset 
+0x39d0 011039 call module_conn_start 
+0x39d1 011040 fetch 1 ,mem_module_le_lpm_mult 
+0x39d2 011041 store 1 ,mem_lpm_mult 
+0x39d3 011042 branch module_hci_event_le_connect 
+:      011045 module_process_bb_conn:
+0x39d4 011046 jam 0 ,mem_flag_mode_ssp_pin 
+0x39d5 011047 call module_clear_sniff_task_flag 
+0x39d6 011048 branch module_clear_unsniff_task_flag 
+:      011050 module_process_page_time_out:
+:      011051 module_process_reconn_fail:
+:      011052 module_disconn_start:
+0x39d7 011053 call module_start_adv_discovery_by_command 
+0x39d8 011054 branch module_set_conn_pin_high 
+:      011057 module_process_ble_ltk_lost:
+0x39d9 011058 call le_send_reject_ind 
+0x39da 011059 branch le_send_smp_security_request 
+:      011062 module_set_conn_pin_high:
+0x39db 011063 fetcht 1 ,mem_module_connect_state_gpio 
+0x39dc 011064 branch gpio_out_active 
+:      011066 module_conn_start:
+0x39dd 011067 call module_stop_adv_discovery 
+0x39de 011068 branch module_set_conn_pin_low 
+:      011070 module_stop_adv_discovery:
+0x39df 011071 fetch 1 ,mem_module_state 
+0x39e0 011072 isolate1 moudle_state_bt_bit ,pdata 
+0x39e1 011073 call app_bt_stop_discovery ,true 
+0x39e2 011074 fetch 1 ,mem_module_state 
+0x39e3 011075 isolate1 moudle_state_ble_bit ,pdata 
+0x39e4 011076 call app_ble_stop_adv ,true 
+0x39e5 011077 rtn 
+:      011078 module_set_conn_pin_low:
+0x39e6 011079 fetcht 1 ,mem_module_connect_state_gpio 
+0x39e7 011080 branch gpio_out_inactive 
+:      011082 module_process_with_credit:
+0x39e8 011083 fetch 1 ,mem_credit_flag 
+0x39e9 011084 rtneq credit_disable 
+0x39ea 011085 branch rfcomm_send_uih_without_payload 
+:      011087 module_process:
+0x39eb 011088 hfetch 1 ,core_uart_status 
+0x39ec 011089 bbit1 uart_status_rx_fifo_empty ,module_process_with_credit 
+0x39ed 011090 call uartd_prepare_rx 
+0x39ee 011091 ifetch 1 ,contru 
+0x39ef 011092 bne 0x01 ,module_hci_in_excp 
+0x39f0 011093 hfetch 2 ,core_uart_rxitems 
+0x39f1 011094 sub pdata ,2 ,null 
+0x39f2 011095 rtn positive 
+0x39f3 011096 ifetch 1 ,contru 
+0x39f4 011097 store 1 ,mem_module_uart_opcode 
+0x39f5 011098 ifetcht 1 ,contru 
+0x39f6 011099 copy contru ,rega 
+0x39f7 011100 storet 1 ,mem_module_uart_len 
+0x39f8 011101 add temp ,3 ,temp 
+0x39f9 011102 hfetch 2 ,core_uart_rxitems 
+0x39fa 011103 isub temp ,temp 
+0x39fb 011104 nrtn positive 
+0x39fc 011105 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 
+0x39fd 011106 call module_hci_cmd_control 
+0x39fe 011107 fetch 1 ,mem_module_temp_nl_discard_packet 
+0x39ff 011108 rtneq hci_not_discard_packet 
+0x3a00 011109 branch module_hci_dicard_packet 
+:      011111 module_hci_in_excp:
+0x3a01 011112 call delay_10ms 
+0x3a02 011113 call module_hci_event_invalid_packet 
+0x3a03 011114 branch module_hci_release_except 
+:      011117 module_hci_release_except:
+0x3a04 011118 bpatch patch1b_7 ,mem_patch1b 
+0x3a05 011119 hfetch 2 ,core_uart_rxitems 
+0x3a06 011120 rtn blank 
+0x3a07 011121 call uartd_prepare_rx 
+0x3a08 011122 ifetch 1 ,contru 
+0x3a09 011123 sub pdata ,0x01 ,null 
+0x3a0a 011124 ncall module_hci_dicard_bytes ,zero 
+0x3a0b 011125 nbranch module_hci_release_except ,zero 
+0x3a0c 011126 ifetch 1 ,contru 
+0x3a0d 011127 rtneq hci_cmd_spp_data_req 
+0x3a0e 011128 rtneq hci_cmd_set_credit_given 
+0x3a0f 011129 increase -1 ,contru 
+0x3a10 011130 call module_hci_dicard_bytes 
+0x3a11 011131 branch module_hci_release_except 
+:      011133 module_hci_dicard_packet:
+0x3a12 011134 call uartd_prepare_rx 
+0x3a13 011135 increase 2 ,contru 
+0x3a14 011136 ifetch 1 ,contru 
+0x3a15 011137 iadd contru ,contru 
+:      011138 module_hci_dicard_bytes:
+0x3a16 011139 branch uartd_rxdone 
+:      011142 module_hci_cmd_control:
+0x3a17 011143 bpatch patch1c_0 ,mem_patch1c 
+0x3a18 011144 fetch 1 ,mem_module_uart_opcode 
+0x3a19 011145 beq hci_cmd_set_bt_addr_req ,module_hci_cmd_set_bt_addr 
+0x3a1a 011146 beq hci_cmd_set_le_addr_req ,module_hci_cmd_set_le_addr 
+0x3a1b 011147 beq hci_cmd_set_visibility_req ,module_hci_cmd_set_visibility 
+0x3a1c 011148 beq hci_cmd_set_bt_name_req ,module_hci_cmd_set_bt_name 
+0x3a1d 011149 beq hci_cmd_set_le_name_req ,module_hci_cmd_set_le_name 
+0x3a1e 011150 beq hci_cmd_spp_data_req ,module_hci_cmd_receive_spp_data 
+0x3a1f 011151 beq hci_cmd_le_data_req ,module_hci_cmd_receive_le_data 
+0x3a20 011152 beq hci_cmd_status_irq ,module_hci_cmd_inquire_status 
+0x3a21 011153 beq hci_cmd_set_pairing_req ,module_hci_cmd_set_pairing_mode 
+0x3a22 011154 beq hci_cmd_set_pincode_req ,module_hci_cmd_set_pincode 
+0x3a23 011155 beq hci_cmd_set_uartcontrol_req ,module_hci_cmd_set_uart_control_mode 
+0x3a24 011156 beq hci_cmd_set_uart_baud_req ,module_hci_cmd_set_uart_baud 
+0x3a25 011157 beq hci_cmd_version_req ,module_hci_cmd_version_request 
+0x3a26 011158 beq hci_cmd_bt_disconnect ,module_hci_cmd_bt_disconnect 
+0x3a27 011159 beq hci_cmd_ble_disconnect ,module_hci_cmd_ble_disconnect 
+0x3a28 011160 beq hci_cmd_set_nvram_req ,module_hci_cmd_set_nvram 
+0x3a29 011161 beq hci_cmd_confirm_gkey ,module_hci_cmd_confirm_gkey 
+0x3a2a 011162 beq hci_cmd_set_credit_given ,module_hci_cmd_set_credit_given 
+0x3a2b 011163 beq hci_cmd_auto_adv_scan ,module_hci_cmd_auto_adv 
+0x3a2c 011164 beq hci_cmd_power_req ,module_hci_cmd_power_request 
+0x3a2d 011165 beq hci_cmd_power_set ,module_hci_cmd_power_set 
+0x3a2e 011166 beq hci_cmd_passkey_entry ,module_hci_cmd_passkey_entry 
+0x3a2f 011167 beq hci_cmd_set_gpio ,module_hci_cmd_set_gpio 
+0x3a30 011168 beq hci_cmd_read_gpio ,module_hci_cmd_read_gpio 
+0x3a31 011169 beq hci_cmd_le_set_pairing ,module_hci_cmd_le_set_pairing_mode 
+0x3a32 011170 beq hci_cmd_le_set_adv_data ,module_hci_cmd_le_set_adv_data 
+0x3a33 011171 beq hci_cmd_le_set_scan_data ,module_hci_cmd_le_set_scan_data 
+0x3a34 011172 beq hci_cmd_le_send_conn_update_req ,module_hci_cmd_le_send_conn_update_req 
+0x3a35 011173 beq hci_cmd_le_set_adv_parm ,module_hci_cmd_set_le_adv_parameter 
+0x3a36 011174 beq hci_cmd_le_start_pairing ,module_hci_cmd_le_start_pairing 
+0x3a37 011175 beq hci_cmd_set_wake_gpio ,module_hci_cmd_set_wake_gpio 
+0x3a38 011176 beq hci_cmd_set_tx_power ,module_hci_cmd_set_tx_power 
+0x3a39 011177 beq hci_cmd_le_confirm_gkey ,module_hci_cmd_le_confirm_gkey 
+0x3a3a 011178 beq hci_cmd_reject_justwork ,module_hci_cmd_set_reject_justwork_flag 
+0x3a3b 011179 beq hci_cmd_reset_chip_req ,module_hci_cmd_reset_chip 
+0x3a3c 011180 beq hci_cmd_le_set_fixed_passkey ,module_hci_cmd_le_set_fixed_passkey 
+0x3a3d 011181 beq hci_test_cmd_close_lpm ,module_hci_test_cmde_close_lpm 
+0x3a3e 011182 branch module_hci_event_receive_invalid_cmd 
+:      011187 module_hci_cmd_set_bt_addr:
+0x3a3f 011188 fetch 1 ,mem_module_uart_len 
+0x3a40 011189 bne 6 ,module_hci_event_receive_invalid_cmd 
+0x3a41 011190 ifetch 6 ,contru 
+0x3a42 011191 store 6 ,mem_lap 
+0x3a43 011192 branch module_hci_event_receive_valid_cmd 
+:      011195 module_hci_cmd_set_le_addr:
+0x3a44 011196 fetch 1 ,mem_module_uart_len 
+0x3a45 011197 bne 6 ,module_hci_event_receive_invalid_cmd 
+0x3a46 011198 ifetch 6 ,contru 
+0x3a47 011199 store 6 ,mem_le_lap 
+0x3a48 011200 branch module_hci_event_receive_valid_cmd 
+:      011204 module_hci_cmd_set_visibility:
+0x3a49 011205 fetch 1 ,mem_module_uart_len 
+0x3a4a 011206 bne 1 ,module_hci_event_receive_invalid_cmd 
+0x3a4b 011207 copy rega ,contru 
+0x3a4c 011208 call module_hci_event_receive_valid_cmd 
+0x3a4d 011209 ifetcht 1 ,contru 
+0x3a4e 011210 storet 1 ,mem_module_bluetooth_stauts_by_command 
+0x3a4f 011211 fetch 2 ,mem_ui_state_map 
+0x3a50 011212 rtnbit1 ui_state_ble_connected 
+0x3a51 011213 rtnbit1 ui_state_bt_connected 
+:      011214 module_start_adv_discovery_by_command:
+0x3a52 011215 fetch 1 ,mem_module_state 
+0x3a53 011216 isolate1 moudle_state_bt_bit ,pdata 
+0x3a54 011217 nbranch moudle_start_adv_by_command ,true 
+0x3a55 011218 fetcht 1 ,mem_module_bluetooth_stauts_by_command 
+0x3a56 011219 and temp ,0x03 ,pdata 
+0x3a57 011220 store 1 ,mem_scan_mode 
+:      011221 moudle_start_adv_by_command:
+0x3a58 011222 fetch 1 ,mem_module_state 
+0x3a59 011223 isolate1 moudle_state_ble_bit ,pdata 
+0x3a5a 011224 nrtn true 
+0x3a5b 011225 fetcht 1 ,mem_module_bluetooth_stauts_by_command 
+0x3a5c 011226 isolate1 2 ,temp 
+0x3a5d 011227 branch app_ble_start_adv ,true 
+0x3a5e 011228 branch app_ble_stop_adv 
+:      011232 module_hci_cmd_set_bt_name:
+0x3a5f 011233 fetch 1 ,mem_module_uart_len 
+0x3a60 011234 sub pdata ,67 ,null 
+0x3a61 011235 nbranch module_hci_event_receive_invalid_cmd ,positive 
+0x3a62 011236 store 1 ,mem_local_name_length 
+0x3a63 011237 arg 8 ,loopcnt 
+0x3a64 011238 call memset0 
+0x3a65 011239 fetch 1 ,mem_module_uart_len 
+0x3a66 011240 copy pdata ,loopcnt 
+0x3a67 011241 copy rega ,contru 
+0x3a68 011242 arg mem_local_name ,contw 
+0x3a69 011243 call uart_copy_rx_bytes_fast 
+0x3a6a 011244 branch module_hci_event_receive_valid_cmd 
+:      011248 module_hci_cmd_set_le_name:
+0x3a6b 011249 fetch 1 ,mem_module_uart_len 
+0x3a6c 011250 sub pdata ,29 ,null 
+0x3a6d 011251 nbranch module_hci_event_receive_invalid_cmd ,positive 
+0x3a6e 011252 store 1 ,mem_le_name_len 
+0x3a6f 011253 copy pdata ,loopcnt 
+0x3a70 011254 copy rega ,contru 
+0x3a71 011255 arg mem_le_name ,contw 
+0x3a72 011256 call uart_copy_rx_bytes_fast 
+0x3a73 011257 call le_modified_name 
+0x3a74 011258 branch module_hci_event_receive_valid_cmd 
+:      011262 module_hci_cmd_receive_spp_data:
+0x3a75 011263 fetch 1 ,mem_ui_state_map 
+0x3a76 011264 bbit0 ui_state_bt_spp_conn ,module_hci_event_receive_invalid_cmd 
+0x3a77 011265 call app_check_sniff 
+0x3a78 011266 branch module_hci_cmd_spp_exit_sniff ,true 
+0x3a79 011267 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+0x3a7a 011269 call module_spp_clear_last_transmite_clock 
+0x3a7b 011270 fetch 1 ,mem_remote_credits 
+0x3a7c 011271 rtn blank 
+0x3a7d 011272 fetch 2 ,mem_nl_rx_len_all 
+0x3a7e 011273 bne 0 ,module_hci_cmd_pass_init_ng_rx_len_all 
+0x3a7f 011274 fetch 1 ,mem_module_uart_len 
+0x3a80 011275 store 2 ,mem_nl_rx_len_all 
+0x3a81 011277 copy rega ,contru 
+0x3a82 011280 copy contru ,pdata 
+0x3a83 011281 store 2 ,mem_nl_rx_data_src 
+:      011282 module_hci_cmd_pass_init_ng_rx_len_all:
+0x3a84 011283 call module_hci_cmd_get_current_packet_len_and_remain_len 
+0x3a85 011284 branch spp_tx_rfcomm_packet 
+:      011286 module_hci_cmd_spp_exit_sniff:
+0x3a86 011287 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+0x3a87 011288 branch module_exit_sniff 
+:      011290 module_hci_cmd_get_current_packet_len_and_remain_len:
+0x3a88 011291 call module_hci_cmd_get_current_patcket_len 
+0x3a89 011292 fetch 2 ,mem_nl_rx_len_all 
+0x3a8a 011293 fetcht 2 ,mem_current_packet_length 
+0x3a8b 011294 isub temp ,pdata 
+0x3a8c 011295 store 2 ,mem_nl_rx_len_all 
+0x3a8d 011296 rtn 
+:      011298 module_hci_cmd_get_current_patcket_len:
+0x3a8e 011299 fetch 2 ,mem_nl_rx_len_all 
+0x3a8f 011300 arg dm_refcom_buff_len ,temp 
+0x3a90 011301 call not_greater_than 
+0x3a91 011302 fetcht 2 ,mem_rfcomm_max_frame_size 
+0x3a92 011303 call not_greater_than 
+0x3a93 011304 fetcht 2 ,mem_pn_max_frame_size 
+0x3a94 011305 call not_greater_than 
+0x3a95 011306 store 2 ,mem_current_packet_length 
+0x3a96 011307 rtn 
+:      011309 module_hci_command_tx_spp_tx_complete:
+0x3a97 011310 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 
+0x3a98 011311 jam hci_cmd_spp_data_req ,mem_module_uart_opcode 
+0x3a99 011312 branch module_hci_event_receive_valid_cmd 
+:      011316 module_hci_cmd_receive_le_data:
+0x3a9a 011317 fetch 2 ,mem_ui_state_map 
+0x3a9b 011318 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd 
+0x3a9c 011319 call module_check_ble_encrypt_state 
+0x3a9d 011320 branch module_hci_event_receive_invalid_cmd ,user 
+0x3a9e 011321 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+0x3a9f 011322 fetch 1 ,mem_module_flag 
+0x3aa0 011323 bbit1 module_flag_ble_data_finish ,module_hci_cmd_receive_le_data_finish 
+0x3aa1 011324 fetch 1 ,mem_module_hci_notify_len 
+0x3aa2 011325 nrtn blank 
+0x3aa3 011326 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 
+0x3aa4 011327 ifetch 2 ,contru 
+0x3aa5 011328 store 2 ,mem_module_hci_notify_handle 
+0x3aa6 011329 copy contru ,pdata 
+0x3aa7 011330 store 2 ,mem_module_hci_nofiy_addr 
+0x3aa8 011331 fetch 1 ,mem_module_uart_len 
+0x3aa9 011332 pincrease -2 
+0x3aaa 011333 nbranch module_hci_event_receive_invalid_cmd ,positive 
+0x3aab 011334 branch module_hci_event_receive_invalid_cmd ,zero 
+0x3aac 011335 store 1 ,mem_module_hci_notify_len 
+0x3aad 011336 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+0x3aae 011337 call le_set_config_more_data 
+0x3aaf 011338 call module_hci_cmd_transmit_le_notify 
+0x3ab0 011339 call module_hci_cmd_transmit_le_notify 
+0x3ab1 011340 call module_hci_cmd_transmit_le_notify 
+0x3ab2 011341 fetch 1 ,mem_module_flag 
+0x3ab3 011342 rtnbit0 module_flag_ble_data_finish 
+:      011343 module_hci_cmd_receive_le_data_finish:
+0x3ab4 011344 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 
+0x3ab5 011345 call module_clear_le_tx_data_flag 
+0x3ab6 011346 branch module_hci_event_receive_valid_cmd 
+:      011348 module_hci_cmd_transmit_le_notify:
+0x3ab7 011349 fetch 1 ,mem_module_hci_notify_len 
+0x3ab8 011350 rtn blank 
+0x3ab9 011351 call le_fifo_check_nearly_full 
+0x3aba 011352 nrtn blank 
+0x3abb 011353 call module_get_le_remote_mtu 
+0x3abc 011354 bpatch patch1c_1 ,mem_patch1c 
+0x3abd 011355 add temp ,-3 ,pdata 
+0x3abe 011356 fetcht 1 ,mem_module_hci_notify_len 
+0x3abf 011357 call not_greater_than 
+0x3ac0 011358 copy pdata ,rega 
+0x3ac1 011359 copy temp ,pdata 
+0x3ac2 011360 isub rega ,pdata 
+0x3ac3 011361 store 1 ,mem_module_hci_notify_len 
+0x3ac4 011362 fetcht 2 ,mem_module_hci_notify_handle 
+0x3ac5 011363 call le_att_malloc_tx_notify 
+0x3ac6 011364 fetch 2 ,mem_module_hci_nofiy_addr 
+0x3ac7 011365 copy pdata ,contru 
+0x3ac8 011366 copy rega ,loopcnt 
+0x3ac9 011367 call uart_copy_rx_bytes_fast 
+0x3aca 011368 copy contru ,pdata 
+0x3acb 011369 store 2 ,mem_module_hci_nofiy_addr 
+0x3acc 011370 fetch 1 ,mem_module_hci_notify_len 
+0x3acd 011371 nrtn blank 
+0x3ace 011372 branch module_set_le_tx_data_flag 
+:      011376 module_get_le_remote_mtu:
+0x3acf 011377 arg 0x17 ,temp 
+0x3ad0 011378 fetch 1 ,mem_module_flag 
+0x3ad1 011379 rtnbit1 module_flag_ble_send_mtu23 
+0x3ad2 011380 fetcht 2 ,mem_le_remote_mtu 
+0x3ad3 011381 rtn 
+:      011383 module_check_ble_encrypt_state:
+0x3ad4 011384 fetch 1 ,mem_module_flag 
+0x3ad5 011385 bbit1 module_flag_ble_data_encrypt ,le_check_encrypt_state 
+0x3ad6 011386 branch disable_user 
+:      011390 module_hci_cmd_inquire_status:
+0x3ad7 011391 branch module_hci_event_status_res 
+:      011395 module_hci_cmd_set_pairing_mode:
+0x3ad8 011396 copy rega ,contru 
+0x3ad9 011397 ifetch 1 ,contru 
+0x3ada 011398 beq pairing_pincode ,module_hci_pairing_pincode_mode 
+0x3adb 011399 beq pairing_justwork ,module_hci_pairing_just_work_mode 
+0x3adc 011400 beq pairing_passkey ,module_hci_pairing_passkey 
+0x3add 011401 beq pairing_confirm ,module_hci_pairing_numeric_comparison 
+0x3ade 011402 branch module_hci_event_receive_invalid_cmd 
+:      011403 module_hci_pairing_pincode_mode:
+0x3adf 011404 call ssp_disable 
+0x3ae0 011405 jam 0 ,mem_ssp_enable 
+0x3ae1 011406 branch module_hci_event_receive_valid_cmd 
+:      011407 module_hci_pairing_just_work_mode:
+0x3ae2 011408 setarg ssp_mode_just_work_io_cap_data 
+:      011409 module_hci_sspairing_mode:
+0x3ae3 011410 store 3 ,mem_sp_iocap_local 
+0x3ae4 011411 store 1 ,mem_ssp_mode_flag 
+0x3ae5 011412 call ssp_enable 
+0x3ae6 011413 jam 1 ,mem_ssp_enable 
+0x3ae7 011414 branch module_hci_event_receive_valid_cmd 
+:      011415 module_hci_pairing_passkey:
+0x3ae8 011416 setarg ssp_mode_passkey_io_cap_data 
+0x3ae9 011417 branch module_hci_sspairing_mode 
+:      011419 module_hci_pairing_numeric_comparison:
+0x3aea 011420 setarg ssp_mode_ssp_pin_io_cap_data 
+0x3aeb 011421 branch module_hci_sspairing_mode 
+:      011424 module_hci_cmd_set_pincode:
+0x3aec 011425 fetch 1 ,mem_module_uart_len 
+0x3aed 011426 sub pdata ,16 ,null 
+0x3aee 011427 nbranch module_hci_event_receive_invalid_cmd ,positive 
+0x3aef 011428 store 1 ,mem_pin_length 
+0x3af0 011429 copy pdata ,loopcnt 
+0x3af1 011430 arg mem_pin ,contw 
+0x3af2 011431 call uart_copy_rx_bytes 
+0x3af3 011432 branch module_hci_event_receive_valid_cmd 
+:      011436 module_hci_cmd_set_uart_control_mode:
+0x3af4 011437 copy rega ,contru 
+0x3af5 011438 ifetch 1 ,contru 
+0x3af6 011439 hfetcht 1 ,core_uart_ctrl 
+0x3af7 011440 nsetflag blank ,4 ,temp 
+0x3af8 011441 hstoret 1 ,core_uart_ctrl 
+0x3af9 011442 branch module_hci_event_receive_valid_cmd 
+:      011446 module_hci_cmd_set_uart_baud:
+0x3afa 011447 fetch 1 ,mem_module_uart_len 
+0x3afb 011448 copy pdata ,loopcnt 
+0x3afc 011449 copy rega ,contru 
+0x3afd 011450 call string2dec_from_uart 
+0x3afe 011451 setarg uart_clk_24 
+0x3aff 011452 idiv temp 
+0x3b00 011453 call wait_div_end 
+0x3b01 011454 quotient pdata 
+:      011455 module_hci_cmd_set_uart_baud_ok:
+0x3b02 011456 store uart_baud_len ,mem_baud 
+0x3b03 011457 call module_hci_event_receive_valid_cmd 
+0x3b04 011458 call wait_uarttx 
+0x3b05 011459 branch uart_set_baud_by_mem 
+:      011463 module_hci_cmd_version_request:
+0x3b06 011464 arg 2 ,rega 
+0x3b07 011465 arg mem_soft_version_num ,regb 
+0x3b08 011466 arg 0 ,temp 
+0x3b09 011467 branch module_hci_event_set_cmd 
+:      011468 module_hci_event_set_cmd_send_response:
+0x3b0a 011469 store 2 ,mem_event_cmd_response_content 
+0x3b0b 011470 arg mem_event_cmd_response_content ,regb 
+0x3b0c 011471 arg 0 ,temp 
+0x3b0d 011472 branch module_hci_event_set_cmd 
+:      011476 module_hci_cmd_bt_disconnect:
+0x3b0e 011477 fetch 2 ,mem_ui_state_map 
+0x3b0f 011478 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd 
+:      011479 module_hci_cmd_bt_disconnect_doing:
+0x3b10 011480 call module_hci_event_receive_valid_cmd 
+0x3b11 011481 branch app_bt_disconnect 
+:      011485 module_hci_cmd_ble_disconnect:
+0x3b12 011486 fetch 2 ,mem_ui_state_map 
+0x3b13 011487 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd 
+:      011488 module_hci_cmd_ble_disconnect_doing:
+0x3b14 011489 call module_hci_event_receive_valid_cmd 
+0x3b15 011490 branch app_ble_disconnect 
+:      011496 module_hci_cmd_set_nvram:
+0x3b16 011497 fetch 1 ,mem_module_uart_len 
+0x3b17 011498 copy pdata ,loopcnt 
+0x3b18 011499 copy rega ,contru 
+0x3b19 011500 fetch 2 ,mem_nv_data_ptr 
+0x3b1a 011501 icopy contw 
+0x3b1b 011502 call uart_copy_rx_bytes_fast 
+0x3b1c 011503 branch module_hci_event_receive_valid_cmd 
+:      011507 module_hci_cmd_confirm_gkey:
+0x3b1d 011508 fetch 1 ,mem_ui_state_map 
+0x3b1e 011509 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd 
+0x3b1f 011510 ifetch 1 ,contru 
+0x3b20 011511 fetcht 1 ,mem_flag_mode_ssp_pin 
+0x3b21 011512 setflag blank ,flag_mode_ssp_pin_comparison_result_bit ,temp 
+0x3b22 011513 set1 flag_mode_ssp_pin_reviceve_comparison_bit ,temp 
+0x3b23 011514 storet 1 ,mem_flag_mode_ssp_pin 
+0x3b24 011516 call module_hci_event_receive_valid_cmd 
+0x3b25 011518 fetch 1 ,mem_flag_mode_ssp_pin 
+0x3b26 011519 bbit1 flag_mode_ssp_pin_recieve_dhkey_bit ,module_hci_cmd_spp_number_comparison_result_is1 
+0x3b27 011520 rtn 
+:      011522 dhkey_not_accept:
+0x3b28 011523 jam 0 ,mem_flag_mode_ssp_pin 
+0x3b29 011524 jam bt_cmd_dhkey_not_accept ,mem_fifo_temp 
+0x3b2a 011525 branch ui_ipc_send_cmd 
+:      011528 module_hci_cmd_spp_number_comparison_result_is1:
+0x3b2b 011529 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed 
+0x3b2c 011530 branch dhkey_not_accept 
+:      011534 module_hci_cmd_set_credit_given:
+0x3b2d 011535 fetch 1 ,mem_ui_state_map 
+0x3b2e 011536 rtnbit0 ui_state_bt_spp_conn 
+0x3b2f 011537 fetch 1 ,mem_credit_flag 
+0x3b30 011538 rtneq credit_disable 
+0x3b31 011539 ifetch 1 ,contru 
+0x3b32 011540 fetcht 1 ,mem_credit_given 
+0x3b33 011541 iadd temp ,temp 
+0x3b34 011542 storet 1 ,mem_credit_given 
+0x3b35 011543 rtn 
+:      011547 module_hci_cmd_auto_adv:
+0x3b36 011548 arg 0x40 ,loopcnt 
+0x3b37 011549 arg mem_le_adv_data_len ,contw 
+0x3b38 011550 call clear_mem 
+0x3b39 011551 setarg 0 
+0x3b3a 011552 store 1 ,mem_regb 
+0x3b3b 011553 copy rega ,contru 
+:      011554 module_hci_cmd_auto_adv_loop:
+0x3b3c 011555 copy contru ,pdata 
+0x3b3d 011556 store 2 ,mem_regc 
+0x3b3e 011557 call module_hci_cmd_auto_adv_adv_analys 
+0x3b3f 011559 fetch 1 ,mem_regb 
+0x3b40 011560 fetcht 1 ,mem_temp 
+0x3b41 011561 increase 1 ,temp 
+0x3b42 011562 iadd temp ,pdata 
+0x3b43 011563 store 1 ,mem_regb 
+0x3b44 011565 sub pdata ,31 ,null 
+0x3b45 011566 nbranch module_hci_cmd_auto_adv_store_scan ,positive 
+:      011567 module_hci_cmd_auto_adv_store_adv:
+0x3b46 011568 fetcht 1 ,mem_le_adv_data_len 
+0x3b47 011569 setarg mem_le_adv_data 
+0x3b48 011570 iadd temp ,pdata 
+0x3b49 011571 store 2 ,mem_contw 
+0x3b4a 011572 fetcht 1 ,mem_temp 
+0x3b4b 011573 increase 1 ,temp 
+0x3b4c 011574 fetch 1 ,mem_le_adv_data_len 
+0x3b4d 011575 iadd temp ,pdata 
+0x3b4e 011576 store 1 ,mem_le_adv_data_len 
+0x3b4f 011577 branch module_hci_cmd_auto_adv_store_common 
+:      011578 module_hci_cmd_auto_adv_store_scan:
+0x3b50 011579 fetcht 1 ,mem_le_scan_data_len 
+0x3b51 011580 setarg mem_le_scan_data 
+0x3b52 011581 iadd temp ,pdata 
+0x3b53 011582 store 2 ,mem_contw 
+0x3b54 011583 fetcht 1 ,mem_temp 
+0x3b55 011584 increase 1 ,temp 
+0x3b56 011585 fetch 1 ,mem_le_scan_data_len 
+0x3b57 011586 iadd temp ,pdata 
+0x3b58 011587 store 1 ,mem_le_scan_data_len 
+:      011588 module_hci_cmd_auto_adv_store_common:
+0x3b59 011589 fetch 2 ,mem_contw 
+0x3b5a 011590 copy pdata ,contw 
+0x3b5b 011591 fetch 2 ,mem_regc 
+0x3b5c 011592 copy pdata ,contru 
+0x3b5d 011594 copy temp ,loopcnt 
+0x3b5e 011595 call uart_copy_rx_bytes_fast 
+0x3b5f 011597 fetch 1 ,mem_module_uart_len 
+0x3b60 011598 fetcht 1 ,mem_regb 
+0x3b61 011599 isub temp ,null 
+0x3b62 011600 nbranch module_hci_cmd_auto_adv_loop ,zero 
+0x3b63 011601 branch module_hci_event_receive_valid_cmd 
+:      011604 module_hci_cmd_auto_adv_adv_analys:
+0x3b64 011605 ifetch 1 ,contru 
+0x3b65 011606 store 1 ,mem_temp 
+0x3b66 011607 ifetch 1 ,contru 
+0x3b67 011608 store 1 ,mem_rega 
+0x3b68 011609 rtn 
+:      011613 module_hci_cmd_power_request:
+0x3b69 011614 arg 0 ,temp 
+0x3b6a 011615 arg 2 ,rega 
+0x3b6b 011616 fetch 2 ,mem_module_vdd_quotient 
+0x3b6c 011617 store 2 ,mem_event_cmd_response_content 
+0x3b6d 011618 arg mem_event_cmd_response_content ,regb 
+0x3b6e 011619 branch module_hci_event_set_cmd 
+:      011623 module_hci_cmd_power_set:
+0x3b6f 011624 fetch 1 ,mem_module_uart_len 
+0x3b70 011625 bne 1 ,module_hci_event_receive_invalid_cmd 
+0x3b71 011626 ifetch 1 ,contru 
+0x3b72 011627 store 1 ,mem_module_read_vdd_flag 
+0x3b73 011628 setarg 0x00 
+0x3b74 011629 store 2 ,mem_module_vdd_quotient 
+0x3b75 011630 branch module_hci_event_receive_valid_cmd 
+:      011634 module_hci_cmd_passkey_entry:
+0x3b76 011635 ifetch 4 ,contru 
+0x3b77 011636 store 4 ,mem_pin 
+0x3b78 011637 jam 4 ,mem_pin_length 
+0x3b79 011638 jam 0 ,mem_authentication_passkey_times 
+0x3b7a 011639 call module_hci_event_receive_valid_cmd 
+0x3b7b 011640 branch authentication_passkey 
+:      011644 module_hci_cmd_set_gpio:
+0x3b7c 011645 fetch 1 ,mem_module_uart_len 
+0x3b7d 011646 bne 3 ,module_hci_event_receive_invalid_cmd 
+0x3b7e 011647 ifetch 1 ,contru 
+0x3b7f 011648 beq hci_cmd_config_gpio_input ,module_set_gpio_input 
+0x3b80 011649 beq hci_cmd_config_gpio_output ,module_set_gpio_output 
+0x3b81 011650 branch module_hci_event_receive_invalid_cmd 
+:      011652 module_set_gpio_input:
+0x3b82 011653 ifetcht 1 ,contru 
+0x3b83 011654 ifetch 1 ,contru 
+0x3b84 011655 beq gpio_input_high_impedance ,module_set_gpio_high_impedance 
+0x3b85 011656 nsetflag blank ,7 ,temp 
+0x3b86 011657 call gpio_config_input 
+0x3b87 011658 branch module_hci_event_receive_valid_cmd 
+:      011660 module_set_gpio_high_impedance:
+0x3b88 011661 call gpio_set_high_impedance 
+0x3b89 011662 branch module_hci_event_receive_valid_cmd 
+:      011664 module_set_gpio_output:
+0x3b8a 011665 ifetcht 1 ,contru 
+0x3b8b 011666 call gpio_config_output0 
+0x3b8c 011667 ifetch 1 ,contru 
+0x3b8d 011668 isolate1 0 ,pdata 
+0x3b8e 011669 call gpio_out_flag 
+0x3b8f 011670 branch module_hci_event_receive_valid_cmd 
+:      011674 module_hci_cmd_read_gpio:
+0x3b90 011675 fetch 1 ,mem_module_uart_len 
+0x3b91 011676 bne 1 ,module_hci_event_receive_invalid_cmd 
+0x3b92 011677 ifetcht 1 ,contru 
+0x3b93 011678 call gpio_get_bit 
+0x3b94 011679 setarg 0x0 
+0x3b95 011680 nsetflag true ,0 ,pdata 
+0x3b96 011681 arg 1 ,rega 
+0x3b97 011682 branch module_hci_event_set_cmd_send_response 
+:      011686 module_hci_cmd_le_set_pairing_mode:
+0x3b98 011687 copy rega ,contru 
+0x3b99 011688 ifetch 1 ,contru 
+0x3b9a 011689 copy pdata ,temp 
+0x3b9b 011690 beq le_pairing_mode_secure_connect_justwork ,module_le_set_pairing_mode_secure_justwork 
+0x3b9c 011691 beq le_pairing_mode_secure_connect_numeric ,module_le_set_pairing_mode_secure_numeric 
+0x3b9d 011692 beq le_pairing_mode_secure_connect_passkey ,module_le_set_pairing_mode_secure_passkey 
+0x3b9e 011693 store 1 ,mem_le_pairing_mode 
+0x3b9f 011694 beq le_pairing_mode_none ,module_le_set_no_pairing 
+0x3ba0 011695 beq le_pairing_mode_lagacy_justwork ,module_le_set_pairing_mode_lagacy_just_work 
+0x3ba1 011696 beq le_pairing_mode_lagacy_passkey ,module_le_set_pairing_mode_lagacy_passkey 
+0x3ba2 011697 branch module_hci_event_receive_invalid_cmd 
+:      011699 module_le_set_pairing_mode_secure_justwork:
+0x3ba3 011700 fetch 1 ,mem_le_secure_connect_enable 
+0x3ba4 011701 branch module_hci_event_receive_invalid_cmd ,blank 
+0x3ba5 011702 storet 1 ,mem_le_pairing_mode 
+0x3ba6 011703 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+0x3ba7 011704 branch module_le_set_noinputnooutput 
+:      011705 module_le_set_pairing_mode_secure_numeric:
+0x3ba8 011706 fetch 1 ,mem_le_secure_connect_enable 
+0x3ba9 011707 branch module_hci_event_receive_invalid_cmd ,blank 
+0x3baa 011708 storet 1 ,mem_le_pairing_mode 
+0x3bab 011709 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+0x3bac 011710 jam flag_iocap_displayyesno ,mem_le_pres_iocap 
+0x3bad 011711 branch module_hci_event_receive_valid_cmd 
+:      011712 module_le_set_pairing_mode_secure_passkey:
+0x3bae 011713 fetch 1 ,mem_le_secure_connect_enable 
+0x3baf 011714 branch module_hci_event_receive_invalid_cmd ,blank 
+0x3bb0 011715 storet 1 ,mem_le_pairing_mode 
+0x3bb1 011716 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+0x3bb2 011717 branch module_le_set_displayonly 
+:      011718 module_le_set_no_pairing:
+0x3bb3 011719 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth 
+:      011720 module_le_set_noinputnooutput:
+0x3bb4 011721 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap 
+0x3bb5 011722 branch module_hci_event_receive_valid_cmd 
+:      011723 module_le_set_pairing_mode_lagacy_just_work:
+0x3bb6 011724 jam flag_le_bonding_mitm ,mem_le_pres_auth 
+0x3bb7 011725 branch module_le_set_noinputnooutput 
+:      011726 module_le_set_pairing_mode_lagacy_passkey:
+0x3bb8 011727 jam flag_le_bonding_mitm ,mem_le_pres_auth 
+:      011728 module_le_set_displayonly:
+0x3bb9 011729 jam flag_iocap_displayonly ,mem_le_pres_iocap 
+0x3bba 011730 branch module_hci_event_receive_valid_cmd 
+:      011734 module_hci_cmd_le_set_adv_data:
+0x3bbb 011735 fetch 1 ,mem_module_uart_len 
+0x3bbc 011736 sub pdata ,31 ,null 
+0x3bbd 011737 nbranch module_hci_event_receive_invalid_cmd ,positive 
+0x3bbe 011738 store 1 ,mem_le_adv_data_len 
+0x3bbf 011739 copy pdata ,loopcnt 
+0x3bc0 011740 copy rega ,contru 
+0x3bc1 011741 arg mem_le_adv_data ,contw 
+0x3bc2 011742 call uart_copy_rx_bytes_fast 
+0x3bc3 011743 branch module_hci_event_receive_valid_cmd 
+:      011747 module_hci_cmd_le_set_scan_data:
+0x3bc4 011748 fetch 1 ,mem_module_uart_len 
+0x3bc5 011749 sub pdata ,31 ,null 
+0x3bc6 011750 nbranch module_hci_event_receive_invalid_cmd ,positive 
+0x3bc7 011751 store 1 ,mem_le_scan_data_len 
+0x3bc8 011752 copy pdata ,loopcnt 
+0x3bc9 011753 copy rega ,contru 
+0x3bca 011754 arg mem_le_scan_data ,contw 
+0x3bcb 011755 call uart_copy_rx_bytes_fast 
+0x3bcc 011756 branch module_hci_event_receive_valid_cmd 
+:      011760 module_hci_cmd_le_send_conn_update_req:
+0x3bcd 011761 fetch 2 ,mem_ui_state_map 
+0x3bce 011762 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd 
+0x3bcf 011763 fetch 1 ,mem_module_uart_len 
+0x3bd0 011764 bne 0x08 ,module_hci_event_receive_invalid_cmd 
+0x3bd1 011765 copy rega ,contru 
+0x3bd2 011766 ifetch 8 ,contru 
+0x3bd3 011767 store 8 ,mem_le_interval_min 
+0x3bd4 011768 jam bt_cmd_le_update_conn ,mem_fifo_temp 
+0x3bd5 011769 call ui_ipc_send_cmd 
+0x3bd6 011770 branch module_hci_event_receive_valid_cmd 
+:      011774 module_hci_cmd_set_le_adv_parameter:
+0x3bd7 011775 ifetch 2 ,contru 
+0x3bd8 011776 store 2 ,mem_le_adv_interval 
+0x3bd9 011777 branch module_hci_event_receive_valid_cmd 
+:      011781 module_hci_cmd_le_start_pairing:
+0x3bda 011782 fetch 1 ,mem_le_pairing_mode 
+0x3bdb 011783 branch module_hci_event_receive_invalid_cmd ,blank 
+0x3bdc 011784 fetch 1 ,mem_le_pairing_state 
+0x3bdd 011785 bne flag_le_pairing_null ,module_hci_event_receive_invalid_cmd 
+0x3bde 011786 fetch 1 ,mem_le_enc_state 
+0x3bdf 011787 bne flag_le_enc_null ,module_hci_event_receive_invalid_cmd 
+0x3be0 011788 call check_51cmd_le_smp_sec_req 
+0x3be1 011789 branch module_hci_event_receive_valid_cmd 
+:      011793 module_hci_cmd_set_wake_gpio:
+0x3be2 011794 fetch 1 ,mem_module_uart_len 
+0x3be3 011795 bne 5 ,module_hci_event_receive_invalid_cmd 
+0x3be4 011796 ifetch 1 ,contru 
+0x3be5 011797 store 1 ,mem_module_mcu_wake_pin 
+0x3be6 011798 ifetch 4 ,contru 
+0x3be7 011799 store 4 ,mem_module_mcu_wake_delay_us 
+0x3be8 011800 fetcht 1 ,mem_module_mcu_wake_pin 
+0x3be9 011801 call gpio_config_output 
+0x3bea 011802 call module_set_mcu_wake_pin_low 
+0x3beb 011803 branch module_hci_event_receive_valid_cmd 
+:      011807 module_hci_cmd_set_tx_power:
+0x3bec 011808 fetch 1 ,mem_module_uart_len 
+0x3bed 011809 bne 0x01 ,module_hci_event_receive_invalid_cmd 
+0x3bee 011810 ifetch 1 ,contru 
+0x3bef 011811 store 1 ,mem_tx_power 
+0x3bf0 011812 branch module_hci_event_receive_valid_cmd 
+:      011816 module_hci_cmd_le_confirm_gkey:
+0x3bf1 011817 ifetch 1 ,contru 
+0x3bf2 011818 beq 0x01 ,module_hci_cmd_le_confirm_gkey_fail 
+0x3bf3 011819 fetch 1 ,mem_le_secure_connect_state 
+0x3bf4 011820 beq le_sc_stat_send_public_key ,module_hci_cmd_le_confirm_gkey_ok 
+0x3bf5 011821 beq le_sc_stat_receive_dhkey ,module_hci_cmd_le_confirm_gkey_ok 
+0x3bf6 011822 beq le_sc_stat_wait_confirm_gkey ,module_hci_cmd_le_confirm_gkey_ok 
+0x3bf7 011823 branch module_hci_event_receive_invalid_cmd 
+:      011824 module_hci_cmd_le_confirm_gkey_ok:
+0x3bf8 011825 jam flag_le_sc_confrim_gkey_ok ,mem_le_sc_confirm_gkey_flag 
+0x3bf9 011826 branch module_hci_event_receive_valid_cmd 
+:      011828 module_hci_cmd_le_confirm_gkey_fail:
+0x3bfa 011829 call le_send_pairing_confirm_value_failed 
+0x3bfb 011830 branch module_hci_event_receive_valid_cmd 
+:      011834 module_hci_cmd_set_reject_justwork_flag:
+0x3bfc 011835 fetch 1 ,mem_module_uart_len 
+0x3bfd 011836 bne 0x01 ,module_hci_event_receive_invalid_cmd 
+0x3bfe 011837 call module_hci_event_receive_valid_cmd 
+0x3bff 011838 ifetch 1 ,contru 
+0x3c00 011839 branch classic_bt_clr_reject_justwork_flag ,blank 
+0x3c01 011840 branch classic_bt_set_reject_justwork_flag 
+:      011844 module_hci_cmd_reset_chip:
+0x3c02 011845 call module_hci_event_receive_valid_cmd 
+0x3c03 011846 call wait_uarttx 
+0x3c04 011847 jam 0x01 ,core_reset 
+0x3c05 011848 branch loop 
+:      011852 module_hci_cmd_le_set_fixed_passkey:
+0x3c06 011853 fetch 1 ,mem_module_uart_len 
+0x3c07 011854 beq 0 ,module_hci_event_receive_invalid_cmd 
+0x3c08 011855 ifetch 1 ,contru 
+0x3c09 011856 branch module_hci_cmd_le_set_random_passkey ,blank 
+0x3c0a 011857 fetch 1 ,mem_module_uart_len 
+0x3c0b 011858 bne 5 ,module_hci_event_receive_invalid_cmd 
+0x3c0c 011859 ifetch 4 ,contru 
+0x3c0d 011860 arg 1000000 ,temp 
+0x3c0e 011861 isub temp ,null 
+0x3c0f 011862 branch module_hci_event_receive_invalid_cmd ,positive 
+0x3c10 011863 store 4 ,mem_le_tk 
+0x3c11 011864 call le_set_config_fixed_tk 
+0x3c12 011865 branch module_hci_event_receive_valid_cmd 
+:      011867 module_hci_cmd_le_set_random_passkey:
+0x3c13 011868 call le_clr_config_fixed_tk 
+0x3c14 011869 branch module_hci_event_receive_valid_cmd 
+:      011873 module_hci_test_cmde_close_lpm:
+0x3c15 011874 jam 0 ,mem_lpm_mode 
+0x3c16 011875 branch module_hci_event_receive_valid_cmd 
+:      011880 module_hci_event_receive_invalid_cmd:
+0x3c17 011881 arg 1 ,temp 
+0x3c18 011882 arg 0 ,rega 
+0x3c19 011883 branch module_hci_event_set_cmd 
+:      011886 module_hci_event_receive_valid_cmd:
+0x3c1a 011887 arg 0 ,temp 
+0x3c1b 011888 arg 0 ,rega 
+0x3c1c 011889 branch module_hci_event_set_cmd 
+:      011893 module_hci_event_spp_connect:
+0x3c1d 011894 jam hci_event_spp_conn_rep ,mem_module_uart_opcode 
+0x3c1e 011895 branch module_hci_event_enter_standby_mode_len0 
+:      011899 module_hci_event_le_connect:
+0x3c1f 011900 jam hci_event_le_conn_rep ,mem_module_uart_opcode 
+0x3c20 011901 branch module_hci_event_enter_standby_mode_len0 
+:      011905 module_hci_event_spp_disconnect:
+0x3c21 011906 jam hci_event_spp_dis_rep ,mem_module_uart_opcode 
+0x3c22 011907 branch module_hci_event_enter_standby_mode_len0 
+:      011911 module_hci_event_le_disconnect:
+0x3c23 011912 jam hci_event_le_dis_rep ,mem_module_uart_opcode 
+0x3c24 011913 branch module_hci_event_enter_standby_mode_len0 
+:      011921 module_hci_event_set_cmd:
+0x3c25 011922 fetch 1 ,mem_module_uart_opcode 
+0x3c26 011923 copy pdata ,regc 
+0x3c27 011924 jam hci_event_cmd_res ,mem_module_uart_opcode 
+0x3c28 011925 setarg 2 
+0x3c29 011926 iadd rega ,pdata 
+0x3c2a 011927 call module_hci_prepare_tx 
+0x3c2b 011928 copy regc ,pdata 
+0x3c2c 011929 istore 1 ,contwu 
+0x3c2d 011930 istoret 1 ,contwu 
+0x3c2e 011931 copy rega ,loopcnt 
+0x3c2f 011932 copy regb ,contr 
+0x3c30 011933 call uart_copy_tx_bytes 
+0x3c31 011934 branch uartd_send 
+:      011938 module_hci_event_receive_spp_data:
+0x3c32 011940 call module_spp_clear_last_transmite_clock 
+0x3c33 011941 jam hci_event_spp_data_rep ,mem_module_uart_opcode 
+0x3c34 011942 fetch 1 ,mem_current_length 
+0x3c35 011943 rtn blank 
+0x3c36 011944 call module_hci_prepare_tx 
+0x3c37 011945 fetch 1 ,mem_current_length 
+0x3c38 011946 copy pdata ,loopcnt 
+0x3c39 011947 fetch 2 ,mem_rfcomm_uih_payload_ptr 
+0x3c3a 011948 copy pdata ,contr 
+0x3c3b 011949 call uart_copy_tx_bytes_fast 
+0x3c3c 011950 branch uartd_send 
+:      011954 module_hci_event_receive_le_data:
+0x3c3d 011955 jam hci_event_le_data_rep ,mem_module_uart_opcode 
+0x3c3e 011956 fetch 1 ,mem_module_le_rx_data_len 
+0x3c3f 011957 icopy loopcnt 
+0x3c40 011958 increase 2 ,pdata 
+0x3c41 011959 call module_hci_prepare_tx 
+0x3c42 011960 fetch 2 ,mem_module_le_rx_data_handle 
+0x3c43 011961 istore 2 ,contwu 
+0x3c44 011962 fetch 2 ,mem_module_le_rx_data_address 
+0x3c45 011963 icopy contr 
+0x3c46 011964 call uart_copy_tx_bytes_fast 
+0x3c47 011965 branch uartd_send 
+:      011969 module_hci_event_enter_standby_mode:
+0x3c48 011970 jam hci_event_standby_rep ,mem_module_uart_opcode 
+:      011971 module_hci_event_enter_standby_mode_len0:
+0x3c49 011972 setarg 0 
+0x3c4a 011973 call module_hci_prepare_tx 
+0x3c4b 011974 branch uartd_send 
+:      011978 module_hci_event_status_res:
+0x3c4c 011979 jam hci_event_status_res ,mem_module_uart_opcode 
+0x3c4d 011980 setarg 1 
+0x3c4e 011981 call module_hci_prepare_tx 
+0x3c4f 011983 call module_hci_read_bt_status 
+0x3c50 011985 fetch 2 ,mem_ui_state_map 
+0x3c51 011986 arg ui_state_bt_hid_conn ,queue 
+0x3c52 011987 qisolate1 pdata 
+0x3c53 011988 setflag true ,3 ,temp 
+0x3c54 011990 arg ui_state_ble_connected ,queue 
+0x3c55 011991 qisolate1 pdata 
+0x3c56 011992 setflag true ,5 ,temp 
+0x3c57 011994 fetch 1 ,mem_ui_state_map 
+0x3c58 011995 arg ui_state_bt_spp_conn ,queue 
+0x3c59 011996 qisolate1 pdata 
+0x3c5a 011997 setflag true ,4 ,temp 
+0x3c5b 011999 istoret 1 ,contwu 
+0x3c5c 012000 branch uartd_send 
+:      012004 module_hci_read_bt_status:
+0x3c5d 012005 arg 0 ,temp 
+0x3c5e 012006 fetch 1 ,mem_scan_mode 
+0x3c5f 012007 arg inq_scan_mode ,queue 
+0x3c60 012008 qisolate1 pdata 
+0x3c61 012009 setflag true ,0 ,temp 
+0x3c62 012010 arg page_scan_mode ,queue 
+0x3c63 012011 qisolate1 pdata 
+0x3c64 012012 setflag true ,1 ,temp 
+0x3c65 012014 fetch 1 ,mem_le_adv_enable 
+0x3c66 012015 arg 0 ,queue 
+0x3c67 012016 qisolate1 pdata 
+0x3c68 012017 setflag true ,2 ,temp 
+0x3c69 012018 rtn 
+:      012022 module_hci_event_store_device:
+0x3c6a 012023 jam hci_event_nvram_rep ,mem_module_uart_opcode 
+0x3c6b 012024 fetch 1 ,mem_nv_data_number 
+0x3c6c 012025 mul32 pdata ,34 ,pdata 
+0x3c6d 012026 icopy loopcnt 
+0x3c6e 012027 call module_hci_prepare_tx 
+0x3c6f 012028 fetch 2 ,mem_nv_data_ptr 
+0x3c70 012029 icopy contr 
+0x3c71 012030 call uart_copy_tx_bytes_fast 
+0x3c72 012031 branch uartd_send 
+:      012035 module_hci_event_gkey_generate:
+0x3c73 012036 jam hci_event_gkey ,mem_module_uart_opcode 
+0x3c74 012037 setarg 4 
+0x3c75 012038 call module_hci_prepare_tx 
+0x3c76 012039 fetch 4 ,mem_gkey 
+0x3c77 012040 istore 4 ,contwu 
+0x3c78 012041 branch uartd_send 
+:      012045 module_hci_event_invalid_packet:
+0x3c79 012046 jam hci_event_invalid_packet ,mem_module_uart_opcode 
+0x3c7a 012047 hfetch 2 ,core_uart_rxitems 
+0x3c7b 012048 arg 0xff ,temp 
+0x3c7c 012049 call not_greater_than 
+0x3c7d 012050 copy pdata ,loopcnt 
+0x3c7e 012051 call module_hci_prepare_tx 
+0x3c7f 012052 call uartd_prepare_rx 
+0x3c80 012053 call uart_copy_rx2tx 
+0x3c81 012054 branch uartd_send 
+:      012058 module_hci_event_passkey_entry_mode:
+0x3c82 012059 jam hci_event_get_passkey ,mem_module_uart_opcode 
+0x3c83 012060 branch module_hci_event_enter_standby_mode_len0 
+:      012064 module_hci_event_le_tk:
+0x3c84 012065 jam hci_event_le_tk ,mem_module_uart_opcode 
+0x3c85 012066 setarg 4 
+0x3c86 012067 call module_hci_prepare_tx 
+0x3c87 012068 fetch 4 ,mem_le_tk 
+0x3c88 012069 istore 4 ,contwu 
+0x3c89 012070 branch uartd_send 
+:      012074 module_hci_event_le_pairing_fail:
+0x3c8a 012075 arg flag_ble_pairing_fail ,rega 
+0x3c8b 012076 branch module_hci_event_pairing_completed 
+:      012078 module_hci_event_le_pairing_success:
+0x3c8c 012079 arg flag_ble_pairing_success ,rega 
+0x3c8d 012080 branch module_hci_event_pairing_completed 
+:      012082 module_hci_event_bt_pairing_fail:
+0x3c8e 012083 arg flag_bt_pairing_fail ,rega 
+0x3c8f 012084 branch module_hci_event_pairing_completed 
+:      012086 module_hci_event_bt_pairing_success:
+0x3c90 012087 arg flag_bt_pairing_success ,rega 
+:      012089 module_hci_event_pairing_completed:
+0x3c91 012090 jam 0 ,mem_flag_mode_ssp_pin 
+0x3c92 012091 jam hci_event_le_pairing_state ,mem_module_uart_opcode 
+0x3c93 012092 setarg 2 
+0x3c94 012093 call module_hci_prepare_tx 
+0x3c95 012094 copy rega ,pdata 
+0x3c96 012095 istore 2 ,contwu 
+0x3c97 012096 branch uartd_send 
+:      012100 module_hci_event_pause_enc:
+0x3c98 012101 arg flag_event_pause_enc ,regc 
+0x3c99 012102 branch module_hci_event_enc 
+:      012104 module_hci_event_start_enc:
+0x3c9a 012105 arg flag_event_start_enc ,regc 
+:      012107 module_hci_event_enc:
+0x3c9b 012108 jam hci_event_le_encryption_state ,mem_module_uart_opcode 
+0x3c9c 012109 setarg 1 
+0x3c9d 012110 call module_hci_prepare_tx 
+0x3c9e 012111 copy regc ,pdata 
+0x3c9f 012112 istore 1 ,contwu 
+0x3ca0 012113 branch uartd_send 
+:      012117 module_hci_event_le_gkey:
+0x3ca1 012118 jam hci_event_le_gkey ,mem_module_uart_opcode 
+0x3ca2 012119 setarg 4 
+0x3ca3 012120 call module_hci_prepare_tx 
+0x3ca4 012121 fetch 4 ,mem_gkey 
+0x3ca5 012122 istore 4 ,contwu 
+0x3ca6 012123 branch uartd_send 
+:      012134 module_hci_prepare_tx:
+0x3ca7 012135 jam 0x02 ,mem_module_uart_cmd 
+0x3ca8 012136 store 1 ,mem_module_uart_len 
+0x3ca9 012137 storet 8 ,mem_temp 
+0x3caa 012138 bpatch patch1c_2 ,mem_patch1c 
+0x3cab 012139 call module_set_mcu_wake_pin_high_delay 
+0x3cac 012140 fetcht 8 ,mem_temp 
+0x3cad 012141 call uartd_prepare_tx 
+0x3cae 012142 fetch 3 ,mem_module_uart_cmd 
+0x3caf 012143 istore 3 ,contwu 
+0x3cb0 012144 rtn 
+:      012147 module_set_mcu_wake_pin_high_delay:
+0x3cb1 012148 call module_check_mcu_wake_pin_high 
+0x3cb2 012149 rtn true 
+:      012150 module_set_mcu_wake_pin_h_delay:
+0x3cb3 012151 call module_set_mcu_wake_pin_high 
+0x3cb4 012152 fetch 4 ,mem_module_mcu_wake_delay_us 
+0x3cb5 012153 rshift2 pdata ,pdata 
+0x3cb6 012154 rtn blank 
+0x3cb7 012155 branch delay 
+:      012157 module_set_mcu_wake_pin_high:
+0x3cb8 012159 fetcht 1 ,mem_module_mcu_wake_pin 
+0x3cb9 012160 branch gpio_out_active 
+:      012162 module_check_mcu_wake_pin_high:
+0x3cba 012163 fetcht 1 ,mem_module_mcu_wake_pin 
+0x3cbb 012164 branch gpio_check_active 
+:      012166 module_set_mcu_wake_pin_low:
+0x3cbc 012167 fetcht 1 ,mem_module_mcu_wake_pin 
+0x3cbd 012168 branch gpio_out_inactive 
+:      012171 delay:
+0x3cbe 012172 increase -1 ,pdata 
+0x3cbf 012173 nop 38 
+0x3cc0 012174 nbranch delay ,blank 
+0x3cc1 012175 rtn 
+:      012184 module_le_receive_data:
+0x3cc2 012185 call module_check_ble_encrypt_state 
+0x3cc3 012186 rtn user 
+0x3cc4 012187 copy rega ,pdata 
+0x3cc5 012188 store 2 ,mem_module_le_rx_data_address 
+0x3cc6 012189 copy regb ,pdata 
+0x3cc7 012190 store 1 ,mem_module_le_rx_data_len 
+0x3cc8 012191 fetch 2 ,mem_le_att_handle 
+0x3cc9 012192 fetcht 2 ,mem_module_data_write_handle 
+0x3cca 012193 isub temp ,null 
+0x3ccb 012194 branch module_le_receive_data_ok ,zero 
+0x3ccc 012195 fetcht 2 ,mem_module_data_write_handle2 
+0x3ccd 012196 isub temp ,null 
+0x3cce 012197 nrtn zero 
+:      012198 module_le_receive_data_ok:
+0x3ccf 012199 store 2 ,mem_module_le_rx_data_handle 
+0x3cd0 012200 branch module_hci_event_receive_le_data 
+:      012205 module_exit_sniff:
+0x3cd1 012206 fetch 1 ,mem_module_flag 
+0x3cd2 012207 rtnbit1 moudle_task_unsniff 
+0x3cd3 012208 call module_set_unsniff_task_flag 
+0x3cd4 012209 branch app_bt_sniff_exit 
+:      012212 module_set_lpm_mult_2:
+0x3cd5 012213 jam 2 ,mem_lpm_mult 
+0x3cd6 012214 rtn 
+:      012218 module_bb_event_timer:
+0x3cd7 012219 branch module_read_vdd_timer 
+:      012221 module_read_vdd_timer:
+0x3cd8 012222 fetch 1 ,mem_module_read_vdd_flag 
+0x3cd9 012223 rtn blank 
+0x3cda 012224 fetch 1 ,mem_module_read_vdd_count 
+0x3cdb 012225 rtn blank 
+0x3cdc 012226 increase -1 ,pdata 
+0x3cdd 012227 store 1 ,mem_module_read_vdd_count 
+0x3cde 012228 nrtn blank 
+0x3cdf 012229 jam flag_module_read_vdd_count ,mem_module_read_vdd_count 
+0x3ce0 012230 call adc_set_mode 
+0x3ce1 012231 call vdd_calculate_by_mode 
+0x3ce2 012232 div pdata ,0x64 
+0x3ce3 012233 call wait_div_end 
+0x3ce4 012234 quotient pdata 
+0x3ce5 012235 remainder temp 
+0x3ce6 012236 store 1 ,mem_module_vdd_quotient 
+0x3ce7 012237 storet 1 ,mem_module_vdd_remainder 
+0x3ce8 012238 rtn 
+:      012241 module_control_air_flow:
+0x3ce9 012242 call check_uart_tx_buff 
+0x3cea 012243 branch app_l2cap_flow_control_enable ,positive 
+0x3ceb 012244 branch app_l2cap_flow_control_disable 
+:      012248 module_set_sniff_task_flag:
+0x3cec 012249 arg moudle_task_sniff ,queue 
+0x3ced 012250 branch module_set_state 
+:      012252 module_clear_sniff_task_flag:
+0x3cee 012253 arg moudle_task_sniff ,queue 
+0x3cef 012254 branch module_clr_state 
+:      012256 module_set_unsniff_task_flag:
+0x3cf0 012257 arg moudle_task_unsniff ,queue 
+0x3cf1 012258 branch module_set_state 
+:      012260 module_clear_unsniff_task_flag:
+0x3cf2 012261 arg moudle_task_unsniff ,queue 
+0x3cf3 012262 branch module_clr_state 
+:      012264 module_set_le_tx_data_flag:
+0x3cf4 012265 arg module_flag_ble_data_finish ,queue 
+0x3cf5 012266 branch module_set_state 
+:      012268 module_clear_le_tx_data_flag:
+0x3cf6 012269 arg module_flag_ble_data_finish ,queue 
+0x3cf7 012270 branch module_clr_state 
+:      012272 module_clr_state:
+0x3cf8 012273 fetch 1 ,mem_module_flag 
+0x3cf9 012274 qset0 pdata 
+0x3cfa 012275 store 1 ,mem_module_flag 
+0x3cfb 012276 rtn 
+:      012278 module_set_state:
+0x3cfc 012279 fetch 1 ,mem_module_flag 
+0x3cfd 012280 qset1 pdata 
+0x3cfe 012281 store 1 ,mem_module_flag 
+0x3cff 012282 rtn 
+:      012292 mouse_init:
+0x3d00 012293 call mouse_setting_config 
+0x3d01 012294 call spi_ncs_enable 
+0x3d02 012295 call mouse_init_sunt 
+0x3d03 012296 call mouse_dpi_config 
+0x3d04 012297 call spi_ncs_disable 
+0x3d05 012298 rtn wake 
+0x3d06 012299 call mouse_cheak_enable_usb 
+0x3d07 012300 call mouse_cb_fuction 
+0x3d08 012303 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d09 012304 rtnbit1 mouse_enable_usb 
+0x3d0a 012305 call mouse_wakeup_from_power 
+0x3d0b 012306 rtnmark1 mark_24g 
+0x3d0c 012307 fetch 2 ,mem_ui_state_map 
+0x3d0d 012308 bbit1 ui_state_btn_down ,mouse_start_discovery 
+0x3d0e 012309 branch mouse_check_reconn_target 
+:      012312 mouse_delay_4s:
+0x3d0f 012313 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d10 012314 rtnbit0 mouse_enable_init_delay 
+0x3d11 012315 arg 20 ,loopcnt 
+:      012316 mouse_delay_20ms:
+0x3d12 012317 setarg 200000 
+0x3d13 012318 call sleep 
+0x3d14 012319 loop delay_10ms 
+0x3d15 012320 rtn 
+:      012323 mouse_cheak_enable_usb:
+0x3d16 012324 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d17 012325 rtnbit0 mouse_enable_usb 
+0x3d18 012326 branch usb_init 
+:      012329 mouse_cb_fuction:
+0x3d19 012330 setarg mouse_le 
+0x3d1a 012331 store 2 ,mem_cb_le_process 
+0x3d1b 012332 setarg mouse_send_process 
+0x3d1c 012333 store 2 ,mem_cb_bt_process 
+0x3d1d 012334 setarg mouse_process_lpm_before 
+0x3d1e 012335 store 2 ,mem_cb_before_lpm 
+0x3d1f 012336 setarg mouse_priority_bb_event 
+0x3d20 012337 store 2 ,mem_cb_bb_event_process 
+0x3d21 012338 setarg mouse_idle 
+0x3d22 012339 store 2 ,mem_cb_idle_process 
+0x3d23 012340 setarg mouse_before_hibernate 
+0x3d24 012341 store 2 ,mem_cb_before_hibernate 
+0x3d25 012342 setarg le_mouse_bb_event_connect_complete 
+0x3d26 012343 store 2 ,mem_cb_att_write 
+0x3d27 012345 call g24_head_ptr2regc 
+0x3d28 012346 setarg mouse_g24_package_data 
+0x3d29 012347 add regc ,offset_24g_cb_data ,contw 
+0x3d2a 012348 istore 2 ,contw 
+0x3d2b 012349 setarg mouse_g24_enter_lpm 
+0x3d2c 012350 add regc ,offset_24g_cb_lpm_prepare ,contw 
+0x3d2d 012351 istore 2 ,contw 
+0x3d2e 012352 setarg mouse_lpm_before_common 
+0x3d2f 012353 add regc ,offset_24g_cb_lpm_before ,contw 
+0x3d30 012354 istore 2 ,contw 
+0x3d31 012356 setarg mouse_bb_event_timer 
+0x3d32 012357 store 2 ,mem_cb_event_timer 
+0x3d33 012358 setarg mouse_spi_write_flash_cb 
+0x3d34 012359 store 2 ,mem_cb_spi_flash_write_complate 
+0x3d35 012360 rtn 
+:      012361 mouse_spi_write_flash_cb:
+:      012362 mouse_spi_init:
+0x3d36 012363 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d37 012364 bbit0 mouse_enable_spi2 ,spid_init 
+0x3d38 012365 branch spid_init2 
+:      012367 mouse_setting_config:
+0x3d39 012368 rtn wake 
+0x3d3a 012369 call g24_set_device_addr 
+0x3d3b 012370 call mouse_gpio_init 
+0x3d3c 012371 call mouse_param_init 
+0x3d3d 012372 call mouse_adc_init 
+0x3d3e 012373 call le_set_config_fixed_ltk 
+0x3d3f 012374 call le_set_justwork 
+0x3d40 012375 call le_set_fixed_ltk 
+0x3d41 012376 call le_set_config_read_authentication 
+0x3d42 012377 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d43 012378 bbit1 mouse_enable_eeprom ,mouse_init_iic 
+0x3d44 012379 bbit1 mouse_enable_flash ,mouse_load_flash_info_cheak 
+0x3d45 012380 rtn 
+:      012382 mouse_init_iic:
+0x3d46 012383 call iic_init_390k 
+0x3d47 012384 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d48 012385 isolate1 mouse_enable_2k_eeprom ,pdata 
+0x3d49 012386 ncall clear_eeprom_size_2k ,true 
+0x3d4a 012387 call mouse_load_eeprom_dpi 
+0x3d4b 012388 call mouse_init_environment 
+0x3d4c 012389 call mouse_set_24g_addr_eeprom 
+0x3d4d 012390 branch iicd_read_eep_data 
+:      012392 mouse_wakeup_from_power:
+0x3d4e 012393 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d4f 012394 bbit0 mouse_enable_wakeup_from_power ,mouse_wakeup_no_from_power 
+0x3d50 012395 fetch 1 ,mem_wakup_from_power_flag 
+0x3d51 012396 isolate0 gpio_latch ,pdata 
+0x3d52 012397 nrtn true 
+:      012398 mouse_wakeup_no_from_power:
+0x3d53 012399 fetch 1 ,mem_reconn_times_init 
+0x3d54 012400 store 1 ,mem_reconn_times 
+0x3d55 012401 fetch 1 ,mem_config_function_enable 
+0x3d56 012402 rtnbit1 enable_select_device_by_switch 
+:      012403 mouse_start_24g_mode:
+0x3d57 012404 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d58 012405 rtnbit0 mouse_enable_24g 
+0x3d59 012406 bbit1 mouse_enable_auto_24g_paring ,g24_auto_pair_start 
+0x3d5a 012407 branch g24_check_51cmd_start_24g 
+:      012408 le_mouse_bb_event_connect_complete:
+0x3d5b 012409 fetch 1 ,mem_le_att_handle 
+0x3d5c 012410 sub pdata ,26 ,pdata 
+0x3d5d 012411 nrtn zero 
+0x3d5e 012412 jam bt_cmd_le_update_conn ,mem_fifo_temp 
+0x3d5f 012413 call ui_ipc_send_cmd 
+:      012414 mouse_le_write_enable:
+0x3d60 012415 arg write_req_enable_flag ,queue 
+0x3d61 012416 branch mouse_le_enable_connect_flag 
+:      012418 mouse_dpi_up:
+0x3d62 012419 fetch 1 ,mem_mouse_dpi_button_state 
+0x3d63 012420 rtneq dpi_button_state_up 
+0x3d64 012421 jam dpi_button_state_up ,mem_mouse_dpi_button_state 
+0x3d65 012422 rtn 
+:      012423 mouse_dpi_config:
+0x3d66 012424 fetch 1 ,mem_config_sensor_motion 
+0x3d67 012425 and pdata ,0x0f ,pdata 
+0x3d68 012426 store 1 ,mem_mouse_dpi 
+0x3d69 012427 branch mouse_seting_dpi + 2 
+:      012430 mouse_dpi_cheak:
+0x3d6a 012431 fetcht 1 ,mem_dpi_button_gpio 
+0x3d6b 012432 call gpio_get_bit 
+0x3d6c 012433 nbranch mouse_dpi_up ,true 
+:      012434 mouse_dpi_down:
+0x3d6d 012435 fetch 1 ,mem_mouse_dpi_button_state 
+0x3d6e 012436 rtneq dpi_button_state_down 
+0x3d6f 012437 jam dpi_button_state_down ,mem_mouse_dpi_button_state 
+0x3d70 012438 fetch 1 ,mem_mouse_dpi 
+0x3d71 012439 increase 1 ,pdata 
+0x3d72 012440 and pdata ,0x03 ,pdata 
+0x3d73 012441 store 1 ,mem_mouse_dpi 
+0x3d74 012442 call mouse_seting_dpi 
+0x3d75 012443 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d76 012444 bbit1 mouse_enable_eeprom ,mouse_store_eerpom_dpi 
+0x3d77 012445 bbit1 mouse_enable_flash ,mouse_before_store_flash_cpi 
+0x3d78 012446 rtn 
+:      012447 mouse_before_store_flash_cpi:
+0x3d79 012448 arg mouse_spi2_clk_gpio ,temp 
+0x3d7a 012449 call gpio_config_output 
+0x3d7b 012450 arg mouse_spi2_sdio_gpio ,temp 
+0x3d7c 012451 call gpio_config_output 
+0x3d7d 012452 branch mouse_store_flash_device_info 
+:      012454 mouse_seting_dpi:
+0x3d7e 012455 bpatch patch1c_3 ,mem_patch1c 
+0x3d7f 012456 call mosue_dpi_led_blink_init 
+0x3d80 012457 fetch 1 ,mem_config_sensor_type 
+0x3d81 012458 beq p3610 ,mouse_seting_3610_dpi 
+0x3d82 012459 beq p3212 ,mouse_seting_3212_dpi 
+0x3d83 012460 fetch 1 ,mem_mouse_dpi 
+0x3d84 012461 beq mouse_dpi_level1 ,mouse_set_cpi1 
+0x3d85 012462 beq mouse_dpi_level2 ,mouse_set_cpi2 
+0x3d86 012463 beq mouse_dpi_level3 ,mouse_set_cpi3 
+0x3d87 012464 beq mouse_dpi_level4 ,mouse_set_cpi4 
+:      012465 mouse_set_cpi2:
+0x3d88 012466 fetch 1 ,mem_320x_dpi_2 
+0x3d89 012467 branch mouse_p3205_dpi 
+:      012468 mouse_set_cpi1:
+0x3d8a 012469 fetch 1 ,mem_320x_dpi_1 
+0x3d8b 012470 branch mouse_p3205_dpi 
+:      012471 mouse_set_cpi3:
+0x3d8c 012472 fetch 1 ,mem_320x_dpi_3 
+0x3d8d 012473 branch mouse_p3205_dpi 
+:      012474 mouse_set_cpi4:
+0x3d8e 012475 fetch 1 ,mem_320x_dpi_4 
+0x3d8f 012476 branch mouse_p3205_dpi 
+:      012477 moue_seting_cpi_count:
+0x3d90 012478 fetch 1 ,mem_config_sensor_type 
+0x3d91 012479 rtneq p3065_xy 
+0x3d92 012480 fetch 1 ,mem_mouse_cpi_count 
+0x3d93 012481 increase 1 ,pdata 
+0x3d94 012482 store 1 ,mem_mouse_cpi_count 
+0x3d95 012483 rtn 
+:      012485 mouse_seting_3212_dpi:
+0x3d96 012486 fetch 1 ,mem_mouse_dpi 
+0x3d97 012487 beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 
+0x3d98 012488 beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 
+0x3d99 012489 beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 
+0x3d9a 012490 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 
+:      012491 mouse_set_p3212_cpi2:
+0x3d9b 012492 fetch 1 ,mem_3212_dpi_2 
+0x3d9c 012493 branch mouse_p3212_dpi 
+:      012494 mouse_set_p3212_cpi1:
+0x3d9d 012495 fetch 1 ,mem_3212_dpi_1 
+0x3d9e 012496 branch mouse_p3212_dpi 
+:      012497 mouse_set_p3212_cpi3:
+0x3d9f 012498 fetch 1 ,mem_3212_dpi_3 
+0x3da0 012499 branch mouse_p3212_dpi 
+:      012500 mouse_set_p3212_cpi4:
+0x3da1 012501 fetch 1 ,mem_3212_dpi_4 
+:      012502 mouse_p3212_dpi:
+0x3da2 012503 store 1 ,mem_mouse_cpi_count 
+0x3da3 012504 lshift8 pdata ,pdata 
+0x3da4 012505 copy pdata ,rega 
+0x3da5 012506 add pdata ,mouse_p3212_dpi_xaddress ,pdata 
+0x3da6 012507 call twspi_write 
+0x3da7 012508 copy rega ,pdata 
+0x3da8 012509 add pdata ,mouse_p3212_dpi_yaddress ,pdata 
+0x3da9 012510 branch twspi_write 
+:      012512 mouse_seting_3610_dpi:
+0x3daa 012513 fetch 1 ,mem_mouse_dpi 
+0x3dab 012514 beq mouse_dpi_level1 ,mouse_set_p3610_cpi1 
+0x3dac 012515 beq mouse_dpi_level2 ,mouse_set_p3610_cpi2 
+0x3dad 012516 beq mouse_dpi_level3 ,mouse_set_p3610_cpi3 
+0x3dae 012517 beq mouse_dpi_level4 ,mouse_set_p3610_cpi4 
+:      012518 mouse_set_p3610_cpi2:
+0x3daf 012519 fetch 1 ,mem_3610_dpi_2 
+0x3db0 012520 branch mouse_p3610_dpi 
+:      012521 mouse_set_p3610_cpi1:
+0x3db1 012522 fetch 1 ,mem_3610_dpi_1 
+0x3db2 012523 branch mouse_p3610_dpi 
+:      012524 mouse_set_p3610_cpi3:
+0x3db3 012525 fetch 1 ,mem_3610_dpi_3 
+0x3db4 012526 branch mouse_p3610_dpi 
+:      012527 mouse_set_p3610_cpi4:
+0x3db5 012528 fetch 1 ,mem_3610_dpi_4 
+:      012529 mouse_p3610_dpi:
+0x3db6 012530 store 1 ,mem_mouse_cpi_count 
+0x3db7 012531 call mouse_spi_sdio_gpio_pollup 
+0x3db8 012532 fetch 1 ,mem_mouse_cpi_count 
+:      012533 mouse_reset_p3610_dpi:
+0x3db9 012534 add pdata ,0x80 ,pdata 
+0x3dba 012535 lshift8 pdata ,pdata 
+0x3dbb 012536 add pdata ,mouse_p3610_dpi_address ,pdata 
+0x3dbc 012537 copy pdata ,rega 
+0x3dbd 012538 branch mouse_set_sensor_reg 
+:      012540 mouse_p3205_dpi:
+0x3dbe 012541 store 1 ,mem_mouse_cpi_count 
+0x3dbf 012542 call moue_seting_cpi_count 
+0x3dc0 012543 fetch 1 ,mem_mouse_cpi_count 
+0x3dc1 012544 setarg mouse_dpi_address 
+0x3dc2 012545 call twspi_read 
+0x3dc3 012546 and pdata ,0xf8 ,temp 
+0x3dc4 012547 fetch 1 ,mem_mouse_cpi_count 
+0x3dc5 012548 iadd temp ,pdata 
+0x3dc6 012549 lshift8 pdata ,pdata 
+0x3dc7 012550 add pdata ,mouse_dpi_address ,pdata 
+0x3dc8 012551 branch twspi_write 
+:      012554 mouse_init_environment:
+0x3dc9 012555 call app_initflag_check 
+0x3dca 012556 branch mouse_eeprom_load_recon_info ,zero 
+0x3dcb 012557 call mouse_ble_init_address 
+0x3dcc 012558 call mouse_store_eeprom_device_info 
+0x3dcd 012559 branch app_initflag_store 
+:      012562 mouse_24g_pairing_button:
+0x3dce 012563 fetch 2 ,mem_24g_pairing_timer_count 
+0x3dcf 012564 rtn blank 
+0x3dd0 012565 fetch mouse_flag_len ,mem_mouse_flag 
+0x3dd1 012566 rtnbit0 mouse_enable_24g 
+0x3dd2 012567 rtnbit1 mosue_24g_pairing_flag 
+0x3dd3 012568 rtnmark1 mark_24g 
+0x3dd4 012569 call mouse_check_key_gpio 
+0x3dd5 012570 rtnne mouse_lmr_button 
+0x3dd6 012571 call mouse_devce_led_off 
+0x3dd7 012572 arg mosue_24g_pairing_flag ,queue 
+0x3dd8 012573 call mouse_enable_function_flag 
+0x3dd9 012574 setarg 0 
+0x3dda 012575 store 2 ,mem_mouse_direct_timer 
+0x3ddb 012576 store 1 ,mem_mouse_send_blank_timer 
+0x3ddc 012577 call g24_set0_mem_check_dongle_times 
+0x3ddd 012579 fetch 2 ,mem_ui_state_map 
+0x3dde 012580 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect 
+0x3ddf 012581 bbit1 ui_state_ble_connected ,app_ble_disconnect 
+0x3de0 012582 bbit1 ui_state_bt_connected ,app_bt_disconnect 
+0x3de1 012583 call mouse_stop_discovery 
+0x3de2 012584 branch g24_start_pairing_sm1 
+:      012587 mouse_idle:
+0x3de3 012588 call mouse_24g_pairing_button 
+0x3de4 012589 call ui_check_paring_button 
+0x3de5 012590 call mouse_dpi_cheak 
+0x3de6 012591 call mouse_usb_isr 
+0x3de7 012592 call mouse_wheel_check 
+0x3de8 012593 branch mouse_usb_mode 
+:      012594 mouse_usb_isr:
+0x3de9 012595 fetch mouse_flag_len ,mem_mouse_flag 
+0x3dea 012596 rtnbit0 mouse_enable_usb 
+0x3deb 012597 call usb_isr 
+0x3dec 012598 branch usb_offline_state 
+:      012600 mouse_cheak_usb:
+0x3ded 012601 hfetch 1 ,core_usb_addr 
+0x3dee 012602 bbit0 7 ,mouse_usb_no_exsit 
+0x3def 012603 bbit1 7 ,mouse_usb_exsit 
+0x3df0 012604 rtn 
+:      012605 mouse_usb_no_exsit:
+0x3df1 012606 fetch 1 ,mem_usb_addr 
+0x3df2 012607 rtnbit0 7 
+0x3df3 012608 branch soft_reset_chip 
+:      012609 mouse_usb_exsit:
+0x3df4 012610 fetch 1 ,mem_usb_addr 
+0x3df5 012611 rtnbit1 7 
+0x3df6 012612 branch mouse_stop_bluetooth_mode 
+:      012614 mouse_usb_mode:
+0x3df7 012615 call mouse_cheak_usb 
+0x3df8 012616 hfetch 1 ,core_usb_addr 
+0x3df9 012617 store 1 ,mem_usb_addr 
+0x3dfa 012618 rtnbit0 7 
+0x3dfb 012619 call mouse_clkn_check 
+0x3dfc 012620 fetch 4 ,mem_btclk_sensor 
+0x3dfd 012621 fetcht 1 ,mem_wire_usb_interval 
+0x3dfe 012622 iadd temp ,temp 
+0x3dff 012623 copy clkn_bt ,pdata 
+0x3e00 012624 isub temp ,null 
+0x3e01 012625 nrtn positive 
+0x3e02 012626 store 4 ,mem_btclk_sensor 
+0x3e03 012627 call mouse_motion 
+0x3e04 012628 nrtn user 
+0x3e05 012629 jam 4 ,mem_usb_tx_enable 
+0x3e06 012630 branch mouse_wired_to_usb 
+:      012632 mouse_clkn_check:
+0x3e07 012633 fetcht 4 ,mem_btclk_sensor 
+0x3e08 012634 copy clkn_bt ,pdata 
+0x3e09 012635 isub temp ,null 
+0x3e0a 012636 ncall mouse_clkn_timeout ,positive 
+0x3e0b 012637 rtn 
+:      012638 mouse_clkn_timeout:
+0x3e0c 012639 setarg 0 
+0x3e0d 012640 store 4 ,mem_btclk_sensor 
+0x3e0e 012641 rtn 
+:      012645 mouse_wired_to_usb:
+0x3e0f 012646 fetch 1 ,mem_usb_tx_enable 
+0x3e10 012647 rtnbit0 2 
+0x3e11 012648 branch mouse_data_push 
+:      012649 mouse_data_push:
+0x3e12 012650 hfetch 1 ,core_usb_addr 
+0x3e13 012651 rtnbit0 7 
+0x3e14 012652 jam usb_ep2_ms ,mem_usb_ep2_data 
+0x3e15 012653 setarg ms_report_id 
+0x3e16 012654 store 1 ,mem_usb_mouse_data 
+0x3e17 012655 fetch 7 ,mem_mouse_key 
+0x3e18 012656 istore 7 ,contw 
+0x3e19 012657 rtn 
+:      012660 mouse_enable_clock_qdecoder:
+0x3e1a 012661 hfetch 2 ,core_clkoff 
+0x3e1b 012662 set0 clock_off_qdecoder ,pdata 
+0x3e1c 012663 hstore 2 ,core_clkoff 
+0x3e1d 012664 rtn 
+:      012666 mouse_param_init:
+0x3e1e 012667 setarg 0x8c00 
+0x3e1f 012668 store 2 ,mem_ui_uuid_table 
+0x3e20 012669 setarg 0x8e7a 
+0x3e21 012670 store 2 ,mem_ui_le_uuid_table 
+0x3e22 012671 setarg 0x2402 
+0x3e23 012672 store 2 ,mem_fcomp_mul 
+0x3e24 012673 setarg 0x2580 
+0x3e25 012674 store 3 ,mem_class 
+0x3e26 012675 jam 3 ,mem_lpm_mult_timeout 
+0x3e27 012676 jam 8 ,mem_lpm_overhead 
+0x3e28 012677 jam dpi_button_state_up ,mem_select_device_button_statue 
+0x3e29 012678 setarg 0x0200 
+0x3e2a 012679 store 2 ,mem_lpm_interval 
+0x3e2b 012680 jam 0x17 ,mem_le_local_mtu 
+0x3e2c 012681 jam 0x17 ,mem_le_remote_mtu 
+0x3e2d 012683 setarg 0x0a77 
+0x3e2e 012684 store 2 ,mem_spi_init_clk 
+0x3e2f 012700 setsect 0 ,0x306 
+0x3e30 012701 setsect 1 ,0x4440 
+0x3e31 012702 setsect 2 ,0x10000 
+0x3e32 012703 setsect 3 ,0x4408 
+0x3e33 012704 store 9 ,mem_all_uuid_16bits 
+0x3e34 012705 setsect 0 ,0x1224 
+0x3e35 012706 setsect 1 ,0x4000 
+0x3e36 012707 setsect 2 ,0x0 
+0x3e37 012708 istore 5 ,contw 
+0x3e38 012710 setsect 0 ,0x3ffff 
+0x3e39 012711 setsect 1 ,0x2fe23 
+0x3e3a 012712 setsect 2 ,0x199d9 
+0x3e3b 012713 setsect 3 ,0x20d 
+0x3e3c 012714 store 8 ,mem_features 
+0x3e3d 012716 setarg 0x012c 
+0x3e3e 012717 store 2 ,mem_24g_pairing_timer_count 
+0x3e3f 012718 call le_modified_name 
+0x3e40 012719 fetch mouse_flag_len ,mem_mouse_flag 
+0x3e41 012720 rtnbit0 mouse_enable_gpio_control_adc_sensor 
+0x3e42 012721 call mouse_sensor_set_angle 
+0x3e43 012722 branch mouse_select_adc 
+:      012724 mouse_sensor_set_angle:
+0x3e44 012725 fetcht 1 ,mem_select_sensor_angle_gpio 
+0x3e45 012726 call gpio_config_input 
+0x3e46 012727 fetcht 1 ,mem_select_sensor_angle_gpio 
+0x3e47 012728 call gpio_get_bit 
+0x3e48 012729 jam mouse_3clk_angle ,mem_config_sensor_angle 
+0x3e49 012730 rtn true 
+0x3e4a 012731 jam mouse_12clk_angle ,mem_config_sensor_angle 
+0x3e4b 012732 rtn 
+:      012734 mouse_select_adc:
+0x3e4c 012735 fetcht 1 ,mem_select_adc_gpio 
+0x3e4d 012736 call gpio_config_input 
+0x3e4e 012737 fetcht 1 ,mem_select_adc_gpio 
+0x3e4f 012738 call gpio_get_bit 
+0x3e50 012739 jam adc_config_vinlpm ,mem_adc_config_flag 
+0x3e51 012740 rtn true 
+0x3e52 012741 jam adc_config_gpio ,mem_adc_config_flag 
+0x3e53 012742 rtn 
+:      012745 mouse_adc_init:
+0x3e54 012746 fetch 1 ,mem_adc_config_flag 
+0x3e55 012747 beq adc_config_vinlpm ,mouse_adc_init_data_vinlpm 
+0x3e56 012748 beq adc_config_hvin ,mouse_adc_init_data_hvin 
+0x3e57 012749 beq adc_config_gpio ,mouse_adc_init_data_io 
+0x3e58 012750 branch mouse_adc_init_data_vinlpm 
+:      012752 mouse_adc_init_data_vinlpm:
+0x3e59 012753 fetcht 2 ,mem_2v_adc_vinlpm_data 
+0x3e5a 012754 fetch 2 ,mem_3v_adc_vinlpm_data 
+0x3e5b 012755 isub temp ,pdata 
+0x3e5c 012756 mul32 pdata ,20 ,pdata 
+0x3e5d 012757 div pdata ,100 
+0x3e5e 012758 call wait_div_end 
+0x3e5f 012759 quotient pdata 
+0x3e60 012760 store 2 ,mem_adc_reference_voltage 
+0x3e61 012761 rtn 
+:      012762 mouse_adc_init_data_hvin:
+0x3e62 012763 fetcht 2 ,mem_1v_adc_hvin_data 
+0x3e63 012764 fetch 2 ,mem_5v_adc_hvin_data 
+0x3e64 012765 isub temp ,pdata 
+0x3e65 012766 mul32 pdata ,230 ,pdata 
+0x3e66 012767 div pdata ,400 
+0x3e67 012768 call wait_div_end 
+0x3e68 012769 quotient pdata 
+0x3e69 012770 store 2 ,mem_adc_reference_voltage 
+0x3e6a 012771 rtn 
+:      012772 mouse_adc_init_data_io:
+0x3e6b 012773 fetch 2 ,mem_1v_adc_io_data 
+0x3e6c 012774 store 2 ,mem_adc_reference_voltage 
+0x3e6d 012775 rtn 
+:      012776 mouse_gpio_init:
+0x3e6e 012777 fetcht 1 ,mem_eeprom_wp_gpio 
+0x3e6f 012778 call gpio_config_output 
+0x3e70 012779 call usb_offline_check_init 
+0x3e71 012780 fetcht 1 ,mem_lbutton_gpio 
+0x3e72 012781 call gpio_config_input 
+0x3e73 012782 fetcht 1 ,mem_rbutton_gpio 
+0x3e74 012783 call gpio_config_input 
+0x3e75 012784 fetcht 1 ,mem_mbutton_gpio 
+0x3e76 012785 call gpio_config_input 
+0x3e77 012786 fetcht 1 ,mem_sensor_data_gpio 
+0x3e78 012787 call gpio_config_input 
+0x3e79 012789 fetcht 1 ,mem_sensor_reset_gpio 
+0x3e7a 012790 call gpio_config_output 
+0x3e7b 012792 fetcht 1 ,mem_whee_a_data_gpio 
+0x3e7c 012793 call gpio_config_input 
+0x3e7d 012795 fetcht 1 ,mem_whee_b_data_gpio 
+0x3e7e 012796 call gpio_config_input 
+0x3e7f 012798 fetcht 1 ,mem_whee_ta_data_gpio 
+0x3e80 012799 call gpio_config_input 
+0x3e81 012800 fetcht 1 ,mem_whee_tb_data_gpio 
+0x3e82 012801 call gpio_config_input 
+0x3e83 012803 fetcht 1 ,mem_bk_button_gpio 
+0x3e84 012804 call gpio_config_input 
+0x3e85 012805 fetcht 1 ,mem_fw_button_gpio 
+0x3e86 012806 call gpio_config_input 
+0x3e87 012808 fetcht 1 ,mem_config_low_voltage_alarm_gpio 
+0x3e88 012809 call gpio_config_output 
+0x3e89 012811 fetcht 1 ,mem_config_device1_led_gpio 
+0x3e8a 012812 call gpio_config_output 
+0x3e8b 012814 fetcht 1 ,mem_config_device2_led_gpio 
+0x3e8c 012815 call gpio_config_output 
+0x3e8d 012817 fetcht 1 ,mem_config_device3_led_gpio 
+0x3e8e 012818 call gpio_config_output 
+0x3e8f 012820 fetcht 1 ,mem_dpi_led_gpio 
+0x3e90 012821 call gpio_config_output 
+0x3e91 012823 fetcht 1 ,mem_config_select_device_button_gpio 
+0x3e92 012824 call gpio_config_input 
+0x3e93 012826 fetcht 1 ,mem_config_bt_button_gpio 
+0x3e94 012827 call gpio_config_input 
+0x3e95 012829 fetcht 1 ,mem_dpi_button_gpio 
+0x3e96 012830 branch gpio_config_input 
+:      012832 mouse_wheel_gpio_set_wake:
+0x3e97 012833 fetcht 1 ,mem_whee_a_data_gpio 
+0x3e98 012834 call gpio_set_wake_by_current_state 
+0x3e99 012835 fetcht 1 ,mem_whee_b_data_gpio 
+0x3e9a 012836 call gpio_set_wake_by_current_state 
+0x3e9b 012837 fetcht 1 ,mem_whee_ta_data_gpio 
+0x3e9c 012838 call gpio_set_wake_by_current_state 
+0x3e9d 012839 fetcht 1 ,mem_whee_tb_data_gpio 
+0x3e9e 012840 branch gpio_set_wake_by_current_state 
+:      012842 mouse_before_hibernate_wheel_gpio_set:
+0x3e9f 012843 fetcht 1 ,mem_whee_a_data_gpio 
+0x3ea0 012844 call mouse_gpio_set_pupd_by_input 
+0x3ea1 012845 fetcht 1 ,mem_whee_b_data_gpio 
+0x3ea2 012846 call mouse_gpio_set_pupd_by_input 
+0x3ea3 012847 fetcht 1 ,mem_whee_ta_data_gpio 
+0x3ea4 012848 call mouse_gpio_set_pupd_by_input 
+0x3ea5 012849 fetcht 1 ,mem_whee_tb_data_gpio 
+0x3ea6 012850 branch mouse_gpio_set_pupd_by_input 
+:      012852 mouse_gpio_set_pupd_by_input:
+0x3ea7 012853 sub temp ,ui_button_gpio_disable ,null 
+0x3ea8 012854 rtn zero 
+0x3ea9 012855 and temp ,0x7f ,queue 
+0x3eaa 012856 hfetch 4 ,core_gpio_in 
+0x3eab 012857 qisolate1 pdata 
+0x3eac 012858 hfetch 4 ,core_gpio_pu0 
+0x3ead 012859 qsetflag true ,pdata 
+0x3eae 012860 hstore 4 ,core_gpio_pu0 
+0x3eaf 012861 hfetch 4 ,core_gpio_pd0 
+0x3eb0 012862 nqsetflag true ,pdata 
+0x3eb1 012863 hstore 4 ,core_gpio_pd0 
+0x3eb2 012864 rtn 
+:      012866 mouse_before_hibernate:
+0x3eb3 012867 enable user 
+0x3eb4 012868 hfetch 4 ,0x8138 
+0x3eb5 012869 setflag user ,26 ,pdata 
+0x3eb6 012870 hstore 4 ,core_lpm_reg 
+0x3eb7 012871 call lpm_write_ctrl 
+0x3eb8 012872 call mouse_devce_led_off 
+0x3eb9 012873 call mouse_before_hibernate_wheel_gpio_set 
+0x3eba 012875 branch mouse_lpm_before_common 
+:      012879 mouse_process_lpm_before:
+0x3ebb 012880 call mouse_lpm_before_common 
+0x3ebc 012881 fetch 1 ,mem_lpm_current_mult 
+0x3ebd 012882 nrtn blank 
+0x3ebe 012883 branch gpio_clr_wake 
+:      012885 mouse_lpm_before_common:
+0x3ebf 012886 call mouse_wheel_check 
+0x3ec0 012887 arg mouse_spi1_clk_gpio ,temp 
+0x3ec1 012888 fetch mouse_flag_len ,mem_mouse_flag 
+0x3ec2 012889 isolate1 mouse_enable_spi2 ,pdata 
+0x3ec3 012890 call mouse_spi_clk_gpio ,true 
+0x3ec4 012891 call gpio_config_output 
+0x3ec5 012892 call twspi_disable 
+0x3ec6 012896 fetcht 1 ,mem_lbutton_gpio 
+0x3ec7 012897 call gpio_set_wake_by_current_state 
+0x3ec8 012898 fetcht 1 ,mem_rbutton_gpio 
+0x3ec9 012899 call gpio_set_wake_by_current_state 
+0x3eca 012900 fetcht 1 ,mem_mbutton_gpio 
+0x3ecb 012901 call gpio_set_wake_by_current_state 
+0x3ecc 012903 fetcht 1 ,mem_bk_button_gpio 
+0x3ecd 012904 call gpio_set_wake_by_current_state 
+0x3ece 012905 fetcht 1 ,mem_fw_button_gpio 
+0x3ecf 012906 call gpio_set_wake_by_current_state 
+0x3ed0 012907 fetcht 1 ,mem_dpi_button_gpio 
+0x3ed1 012908 call gpio_set_wake_by_current_state 
+0x3ed2 012909 fetcht 1 ,mem_config_select_device_button_gpio 
+0x3ed3 012910 call gpio_set_wake_by_current_state 
+0x3ed4 012911 fetcht 1 ,mem_whee_a_data_gpio 
+0x3ed5 012912 call gpio_set_wake_by_current_state 
+0x3ed6 012913 fetcht 1 ,mem_whee_b_data_gpio 
+0x3ed7 012914 call gpio_set_wake_by_current_state 
+0x3ed8 012915 fetcht 1 ,mem_whee_ta_data_gpio 
+0x3ed9 012916 call gpio_set_wake_by_current_state 
+0x3eda 012917 fetcht 1 ,mem_whee_tb_data_gpio 
+0x3edb 012918 call gpio_set_wake_by_current_state 
+0x3edc 012919 fetcht 1 ,mem_sensor_data_gpio 
+0x3edd 012920 branch gpio_set_wake 
+:      012924 mouse_spi_clk_gpio:
+0x3ede 012925 arg mouse_spi2_clk_gpio ,temp 
+0x3edf 012926 rtn 
+:      012928 mouse_wheel_check:
+0x3ee0 012929 bpatch patch1c_4 ,mem_patch1c 
+0x3ee1 012930 call mouse_t_wheel_scan 
+0x3ee2 012931 call mouse_wheel_scan 
+0x3ee3 012932 fetch 1 ,mem_wheel_tb_new_pinlevel 
+0x3ee4 012933 fetcht 1 ,mem_wheel_tb_old_pinlevel 
+0x3ee5 012934 store 1 ,mem_wheel_tb_old_pinlevel 
+0x3ee6 012935 isub temp ,null 
+0x3ee7 012936 nbranch app_lpm_wake_auto_lock ,zero 
+0x3ee8 012937 fetch 1 ,mem_mwheel_b_new_pinlevel 
+0x3ee9 012938 fetcht 1 ,mem_mwheel_b_old_pinlevel 
+0x3eea 012939 store 1 ,mem_mwheel_b_old_pinlevel 
+0x3eeb 012940 isub temp ,null 
+0x3eec 012941 nbranch app_lpm_wake_auto_lock ,zero 
+0x3eed 012942 rtn 
+:      012943 mouse_t_wheel_scan:
+0x3eee 012944 fetch 1 ,mem_whee_ta_data_gpio 
+0x3eef 012945 rtneq gpio_disable 
+0x3ef0 012946 arg 0 ,rega 
+0x3ef1 012947 fetcht 1 ,mem_whee_ta_data_gpio 
+0x3ef2 012948 call gpio_get_bit 
+0x3ef3 012949 setflag true ,0 ,rega 
+0x3ef4 012950 fetcht 1 ,mem_whee_tb_data_gpio 
+0x3ef5 012951 call gpio_get_bit 
+0x3ef6 012952 setflag true ,1 ,rega 
+0x3ef7 012953 copy rega ,pdata 
+0x3ef8 012954 store 1 ,mem_wheel_tb_new_pinlevel 
+0x3ef9 012955 beq 0x01 ,mouse_t_wheel_scan_judge1 
+0x3efa 012956 beq 0x02 ,mouse_t_wheel_scan_judge2 
+0x3efb 012957 fetch 1 ,mem_wheel_tog 
+0x3efc 012958 bbit1 7 ,mouse_t_wheel_scan_judge3 
+0x3efd 012959 rtn 
+:      012961 mouse_t_wheel_scan_judge1:
+0x3efe 012962 fetch 1 ,mem_wheel_tb_old_pinlevel 
+0x3eff 012963 beq 0 ,mouse_t_wheel_scan_judge11 
+0x3f00 012964 beq 3 ,mouse_t_wheel_scan_judge12 
+0x3f01 012965 rtn 
+:      012966 mouse_t_wheel_scan_judge2:
+0x3f02 012967 fetch 1 ,mem_wheel_tb_old_pinlevel 
+0x3f03 012968 beq 0 ,mouse_t_wheel_scan_judge21 
+0x3f04 012969 beq 3 ,mouse_t_wheel_scan_judge22 
+0x3f05 012970 rtn 
+:      012971 mouse_t_wheel_scan_judge11:
+0x3f06 012972 jam 0x82 ,mem_wheel_tog 
+0x3f07 012973 rtn 
+:      012974 mouse_t_wheel_scan_judge12:
+0x3f08 012975 jam 0x81 ,mem_wheel_tog 
+0x3f09 012976 rtn 
+:      012977 mouse_t_wheel_scan_judge21:
+0x3f0a 012978 jam 0x80 ,mem_wheel_tog 
+0x3f0b 012979 rtn 
+:      012980 mouse_t_wheel_scan_judge22:
+0x3f0c 012981 jam 0x83 ,mem_wheel_tog 
+0x3f0d 012982 rtn 
+:      012983 mouse_t_wheel_scan_judge3:
+0x3f0e 012984 fetch 1 ,mem_wheel_tog 
+0x3f0f 012985 set0 7 ,pdata 
+0x3f10 012986 store 1 ,mem_wheel_tog 
+0x3f11 012987 beq 0 ,mouse_t_wheel_scan_judge30 
+0x3f12 012988 beq 1 ,mouse_t_wheel_scan_judge31 
+0x3f13 012989 beq 2 ,mouse_t_wheel_scan_judge32 
+0x3f14 012990 beq 3 ,mouse_t_wheel_scan_judge33 
+0x3f15 012991 rtn 
+:      012992 mouse_t_wheel_scan_judge30:
+0x3f16 012993 fetch 1 ,mem_wheel_tb_new_pinlevel 
+0x3f17 012994 beq 3 ,mouse_wheel_t_forward 
+0x3f18 012995 rtn 
+:      012996 mouse_t_wheel_scan_judge31:
+0x3f19 012997 fetch 1 ,mem_wheel_tb_new_pinlevel 
+0x3f1a 012998 beq 0 ,mouse_wheel_t_forward 
+0x3f1b 012999 rtn 
+:      013000 mouse_t_wheel_scan_judge32:
+0x3f1c 013001 fetch 1 ,mem_wheel_tb_new_pinlevel 
+0x3f1d 013002 beq 3 ,mouse_wheel_t_back 
+0x3f1e 013003 rtn 
+:      013004 mouse_t_wheel_scan_judge33:
+0x3f1f 013005 fetch 1 ,mem_wheel_tb_new_pinlevel 
+0x3f20 013006 beq 0 ,mouse_wheel_t_back 
+0x3f21 013007 rtn 
+:      013008 mouse_wheel_t_forward:
+0x3f22 013009 fetch 1 ,mem_mouse_tz_data_count1 
+0x3f23 013010 increase 1 ,pdata 
+0x3f24 013011 store 1 ,mem_mouse_tz_data_count1 
+0x3f25 013012 sub pdata ,1 ,null 
+0x3f26 013013 rtn positive 
+0x3f27 013014 jam 0 ,mem_mouse_tz_data_count1 
+0x3f28 013015 fetch 1 ,mem_mouse_tz_data 
+0x3f29 013016 increase 1 ,pdata 
+0x3f2a 013017 store 1 ,mem_mouse_tz_data 
+0x3f2b 013018 rtn 
+:      013019 mouse_wheel_t_back:
+0x3f2c 013020 fetch 1 ,mem_mouse_tz_data_count 
+0x3f2d 013021 increase 1 ,pdata 
+0x3f2e 013022 store 1 ,mem_mouse_tz_data_count 
+0x3f2f 013023 sub pdata ,1 ,null 
+0x3f30 013024 rtn positive 
+0x3f31 013025 jam 0 ,mem_mouse_tz_data_count 
+0x3f32 013026 fetch 1 ,mem_mouse_tz_data 
+0x3f33 013027 increase -1 ,pdata 
+0x3f34 013028 store 1 ,mem_mouse_tz_data 
+0x3f35 013029 rtn 
+:      013032 mouse_wheel_scan:
+0x3f36 013033 fetch 1 ,mem_whee_a_data_gpio 
+0x3f37 013034 rtneq gpio_disable 
+0x3f38 013035 arg 0 ,rega 
+0x3f39 013036 fetcht 1 ,mem_whee_a_data_gpio 
+0x3f3a 013037 call gpio_get_bit 
+0x3f3b 013038 setflag true ,0 ,rega 
+0x3f3c 013039 fetcht 1 ,mem_whee_b_data_gpio 
+0x3f3d 013040 call gpio_get_bit 
+0x3f3e 013041 setflag true ,1 ,rega 
+0x3f3f 013042 copy rega ,pdata 
+0x3f40 013043 store 1 ,mem_mwheel_b_new_pinlevel 
+0x3f41 013044 beq 0x01 ,mouse_wheel_scan_judge1 
+0x3f42 013045 beq 0x02 ,mouse_wheel_scan_judge2 
+0x3f43 013046 fetch 1 ,mem_mwheel_tog 
+0x3f44 013047 bbit1 7 ,mouse_wheel_scan_judge3 
+0x3f45 013048 rtn 
+:      013050 mouse_wheel_scan_judge1:
+0x3f46 013051 fetch 1 ,mem_mwheel_b_old_pinlevel 
+0x3f47 013052 beq 0 ,mouse_wheel_scan_judge11 
+0x3f48 013053 beq 3 ,mouse_wheel_scan_judge12 
+0x3f49 013054 rtn 
+:      013055 mouse_wheel_scan_judge2:
+0x3f4a 013056 fetch 1 ,mem_mwheel_b_old_pinlevel 
+0x3f4b 013057 beq 0 ,mouse_wheel_scan_judge21 
+0x3f4c 013058 beq 3 ,mouse_wheel_scan_judge22 
+0x3f4d 013059 rtn 
+:      013060 mouse_wheel_scan_judge11:
+0x3f4e 013061 jam 0x82 ,mem_mwheel_tog 
+0x3f4f 013062 rtn 
+:      013063 mouse_wheel_scan_judge12:
+0x3f50 013064 jam 0x81 ,mem_mwheel_tog 
+0x3f51 013065 rtn 
+:      013066 mouse_wheel_scan_judge21:
+0x3f52 013067 jam 0x80 ,mem_mwheel_tog 
+0x3f53 013068 rtn 
+:      013069 mouse_wheel_scan_judge22:
+0x3f54 013070 jam 0x83 ,mem_mwheel_tog 
+0x3f55 013071 rtn 
+:      013072 mouse_wheel_scan_judge3:
+0x3f56 013073 fetch 1 ,mem_mwheel_tog 
+0x3f57 013074 set0 7 ,pdata 
+0x3f58 013075 store 1 ,mem_mwheel_tog 
+0x3f59 013076 beq 0 ,mouse_wheel_scan_judge30 
+0x3f5a 013077 beq 1 ,mouse_wheel_scan_judge31 
+0x3f5b 013078 beq 2 ,mouse_wheel_scan_judge32 
+0x3f5c 013079 beq 3 ,mouse_wheel_scan_judge33 
+0x3f5d 013080 rtn 
+:      013081 mouse_wheel_scan_judge30:
+0x3f5e 013082 fetch 1 ,mem_mwheel_b_new_pinlevel 
+0x3f5f 013083 beq 3 ,mouse_wheel_forward 
+0x3f60 013084 rtn 
+:      013085 mouse_wheel_scan_judge31:
+0x3f61 013086 fetch 1 ,mem_mwheel_b_new_pinlevel 
+0x3f62 013087 beq 0 ,mouse_wheel_forward 
+0x3f63 013088 rtn 
+:      013089 mouse_wheel_scan_judge32:
+0x3f64 013090 fetch 1 ,mem_mwheel_b_new_pinlevel 
+0x3f65 013091 beq 3 ,mouse_wheel_back 
+0x3f66 013092 rtn 
+:      013093 mouse_wheel_scan_judge33:
+0x3f67 013094 fetch 1 ,mem_mwheel_b_new_pinlevel 
+0x3f68 013095 beq 0 ,mouse_wheel_back 
+0x3f69 013096 rtn 
+:      013097 mouse_wheel_forward:
+0x3f6a 013098 jam 0 ,mem_mouse_z_data_count1 
+0x3f6b 013099 fetch 1 ,mem_mouse_z_data 
+0x3f6c 013100 increase 1 ,pdata 
+0x3f6d 013101 store 1 ,mem_mouse_z_data 
+0x3f6e 013102 rtn 
+:      013103 mouse_wheel_back:
+0x3f6f 013104 jam 0 ,mem_mouse_z_data_count 
+0x3f70 013105 fetch 1 ,mem_mouse_z_data 
+0x3f71 013106 increase -1 ,pdata 
+0x3f72 013107 store 1 ,mem_mouse_z_data 
+0x3f73 013108 rtn 
+:      013111 mouse_hid_connected:
+0x3f74 013112 setarg hid_handshake_timeout 
+0x3f75 013113 store 1 ,mem_hid_handshake_timer_count 
+0x3f76 013114 rtn 
+:      013116 mouse_send_process:
+0x3f77 013117 fetch 1 ,mem_app_handshake_flag 
+0x3f78 013118 rtn blank 
+0x3f79 013119 call l2cap_malloc_is_fifo_nearly_full 
+0x3f7a 013120 nrtn blank 
+0x3f7b 013121 fetch mouse_flag_len ,mem_mouse_flag 
+0x3f7c 013122 bbit1 mosue_24g_pairing_flag ,mouse_send_empty_data 
+0x3f7d 013123 bbit1 mouse_select_device_flag ,mouse_send_empty_data 
+0x3f7e 013124 bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data 
+0x3f7f 013125 call mouse_motion 
+0x3f80 013126 nrtn user 
+:      013127 mouse_send_data:
+0x3f81 013128 arg 9 ,rega 
+0x3f82 013129 call hid_malloc_tx_buff 
+0x3f83 013130 fetch 2 ,mem_hid_int_remote_cid 
+0x3f84 013131 istore 2 ,contw 
+0x3f85 013132 setarg 0x02a1 
+0x3f86 013133 istore 2 ,contw 
+0x3f87 013134 fetch 7 ,mem_mouse_key 
+0x3f88 013135 istore 7 ,contw 
+0x3f89 013136 rtn 
+:      013139 mouse_send_empty_data:
+0x3f8a 013140 setarg 0 
+0x3f8b 013141 store 7 ,mem_mouse_key 
+0x3f8c 013142 branch mouse_send_data 
+:      013145 mouse_no_data_timer_init:
+0x3f8d 013146 fetch 2 ,mem_mouse_no_data_timeout 
+0x3f8e 013147 store 2 ,mem_mouse_no_data_timer 
+0x3f8f 013148 rtn 
+:      013151 mouse_fill_data_le:
+0x3f90 013152 bpatch patch1c_5 ,mem_patch1c 
+0x3f91 013153 arg 7 ,rega 
+0x3f92 013154 fetcht 2 ,mem_le_notify_handle 
+0x3f93 013155 call le_att_malloc_tx_notify 
+0x3f94 013156 fetch 7 ,mem_mouse_key 
+0x3f95 013157 istore 7 ,contw 
+0x3f96 013158 rtn 
+:      013160 mouse_motion:
+0x3f97 013161 bpatch patch1c_6 ,mem_patch1c 
+0x3f98 013162 disable user 
+0x3f99 013163 setarg 0 
+0x3f9a 013164 store 6 ,mem_mouse_x 
+0x3f9b 013165 call mouse_cheak_sensor_data 
+0x3f9c 013166 call mouse_zwheel 
+0x3f9d 013167 call mouse_t_zwheel 
+0x3f9e 013168 call mouse_key 
+0x3f9f 013169 nrtn user 
+0x3fa0 013170 call mouse_no_data_timer_init 
+0x3fa1 013171 arg mouse_statue_up_flag ,queue 
+0x3fa2 013172 branch mouse_enable_function_flag 
+:      013174 motion_6clk_direction_dispose:
+0x3fa3 013175 fetch 2 ,mem_mouse_x 
+0x3fa4 013176 sub pdata ,0 ,pdata 
+0x3fa5 013177 store 2 ,mem_mouse_x 
+0x3fa6 013178 branch enable_user 
+:      013179 motion_12clk_direction_dispose:
+0x3fa7 013180 fetch 2 ,mem_mouse_y 
+0x3fa8 013181 sub pdata ,0 ,pdata 
+0x3fa9 013182 store 2 ,mem_mouse_y 
+0x3faa 013183 branch enable_user 
+:      013184 motion_9clk_direction_dispose:
+0x3fab 013185 fetch 2 ,mem_mouse_y 
+0x3fac 013186 sub pdata ,0 ,pdata 
+0x3fad 013187 store 2 ,mem_mouse_y 
+0x3fae 013188 fetch 2 ,mem_mouse_x 
+0x3faf 013189 sub pdata ,0 ,pdata 
+0x3fb0 013190 store 2 ,mem_mouse_x 
+0x3fb1 013191 call mouse_sensor_data_swap_places 
+0x3fb2 013192 branch enable_user 
+:      013193 motion_3clk_direction_dispose:
+0x3fb3 013194 call mouse_sensor_data_swap_places 
+0x3fb4 013195 branch enable_user 
+:      013196 mouse_cheak_sensor_data:
+0x3fb5 013197 fetch 1 ,mem_spi_write_flash_sm 
+0x3fb6 013198 rtnne flash_sm_no_buys 
+0x3fb7 013199 fetch 1 ,mem_config_sensor_type 
+0x3fb8 013200 beq p3205 ,mouse_p32xx_sensor_motion 
+0x3fb9 013201 beq p3065 ,mouse_p32xx_sensor_motion 
+0x3fba 013202 beq ka8 ,mouse_p32xx_sensor_motion 
+0x3fbb 013203 beq p3204 ,mouse_p32xx_sensor_motion 
+0x3fbc 013204 beq p3212 ,mouse_p3212_sensor_motion 
+0x3fbd 013205 beq p3610 ,mouse_p3610_sensor_motion 
+0x3fbe 013206 beq p3065_xy ,mouse_p32xx_sensor_motion 
+0x3fbf 013207 branch mouse_p32xx_sensor_motion 
+:      013209 mouse_clear_sensor_data:
+0x3fc0 013210 fetch 1 ,mem_mouse_move_flag 
+0x3fc1 013211 call mouse_read_sensor_common ,blank 
+0x3fc2 013212 jam 1 ,mem_mouse_move_flag 
+0x3fc3 013213 rtn 
+:      013216 mouse_p3212_sensor_motion:
+0x3fc4 013217 call mouse_clear_sensor_data 
+0x3fc5 013218 fetcht 1 ,mem_sensor_data_gpio 
+0x3fc6 013219 call gpio_get_bit 
+0x3fc7 013220 nrtn true 
+0x3fc8 013221 setarg pan_reg_pid_l 
+0x3fc9 013222 call twspi_read 
+0x3fca 013223 bne p32xx_id1 ,mouse_twspi_reset 
+0x3fcb 013224 setarg pan_reg_motion_staus 
+0x3fcc 013225 call twspi_read 
+0x3fcd 013226 rtnbit0 7 
+0x3fce 013227 call mouse_read_sensor_common 
+0x3fcf 013228 call mouse_read_3212sensor_xy_high 
+0x3fd0 013229 store 1 ,mem_mouse_xy_h 
+0x3fd1 013230 rshift4 pdata ,pdata 
+0x3fd2 013231 call extsign_bit3 
+0x3fd3 013232 store 1 ,mem_mouse_x + 1 
+0x3fd4 013233 fetch 1 ,mem_mouse_xy_h 
+0x3fd5 013234 and pdata ,0x0f ,pdata 
+0x3fd6 013235 call extsign_bit3 
+0x3fd7 013236 store 1 ,mem_mouse_y + 1 
+0x3fd8 013237 fetch 1 ,mem_config_sensor_angle 
+0x3fd9 013238 beq mouse_6clk_angle ,motion_6clk_direction_dispose 
+0x3fda 013239 beq mouse_9clk_angle ,motion_9clk_direction_dispose 
+0x3fdb 013240 beq mouse_12clk_angle ,motion_12clk_direction_dispose 
+0x3fdc 013241 beq mouse_3clk_angle ,motion_3clk_direction_dispose 
+0x3fdd 013242 rtn 
+:      013244 mouse_read_3212sensor_xy_high:
+0x3fde 013245 setarg 0x12 
+0x3fdf 013246 branch twspi_read 
+:      013248 mouse_p3065_judge:
+0x3fe0 013249 beq p3065_id1 ,mouse_p32xx_sensor_motion_1 
+0x3fe1 013250 branch mouse_twspi_reset 
+:      013252 mouse_p32xx_sensor_motion:
+0x3fe2 013253 call mouse_clear_sensor_data 
+0x3fe3 013254 disable user 
+0x3fe4 013255 fetcht 1 ,mem_sensor_data_gpio 
+0x3fe5 013256 call gpio_get_bit 
+0x3fe6 013257 nrtn true 
+0x3fe7 013258 setarg pan_reg_pid_l 
+0x3fe8 013259 call twspi_read 
+0x3fe9 013260 bne p32xx_id1 ,mouse_p3065_judge 
+:      013261 mouse_p32xx_sensor_motion_1:
+0x3fea 013262 setarg pan_reg_motion_staus 
+0x3feb 013263 call twspi_read 
+0x3fec 013264 rtnbit0 7 
+0x3fed 013265 call mouse_read_sensor_common 
+0x3fee 013266 fetch 1 ,mem_mouse_x 
+0x3fef 013267 call extsign 
+0x3ff0 013268 store 2 ,mem_mouse_x 
+0x3ff1 013269 fetch 1 ,mem_mouse_y 
+0x3ff2 013270 call extsign 
+0x3ff3 013271 store 2 ,mem_mouse_y 
+0x3ff4 013272 fetch 1 ,mem_config_sensor_angle 
+0x3ff5 013273 beq mouse_6clk_angle ,motion32xx_6clk_direction_selection 
+0x3ff6 013274 beq mouse_9clk_angle ,motion32xx_9clk_direction_selection 
+0x3ff7 013275 beq mouse_12clk_angle ,motion32xx_12clk_direction_selection 
+0x3ff8 013276 beq mouse_3clk_angle ,motion32xx_3clk_direction_selection 
+0x3ff9 013277 rtn 
+:      013279 motion32xx_6clk_direction_selection:
+0x3ffa 013280 call motion_6clk_direction_dispose 
+0x3ffb 013281 branch mouse_sensor_sdio_low 
+:      013282 motion32xx_9clk_direction_selection:
+0x3ffc 013283 call motion_9clk_direction_dispose 
+0x3ffd 013284 branch mouse_sensor_sdio_low 
+:      013285 motion32xx_12clk_direction_selection:
+0x3ffe 013286 call motion_12clk_direction_dispose 
+0x3fff 013287 branch mouse_sensor_sdio_low 
+:      013288 motion32xx_3clk_direction_selection:
+0x4000 013289 call motion_3clk_direction_dispose 
+0x4001 013290 branch mouse_sensor_sdio_low 
+:      013292 mouse_sensor_data_swap_places:
+0x4002 013293 fetch 2 ,mem_mouse_y 
+0x4003 013294 fetcht 2 ,mem_mouse_x 
+0x4004 013295 store 2 ,mem_mouse_x 
+0x4005 013296 storet 2 ,mem_mouse_y 
+0x4006 013297 rtn 
+:      013299 mouse_p3610sensor_read:
+0x4007 013300 call spi_ncs_enable 
+0x4008 013301 nop 100 
+0x4009 013302 copy regb ,pdata 
+0x400a 013303 call twspi_read 
+0x400b 013304 copy pdata ,regb 
+0x400c 013305 call spi_ncs_disable 
+0x400d 013306 nop 100 
+0x400e 013307 copy regb ,pdata 
+0x400f 013308 rtn 
+:      013309 mouse_p3610_sensor_motion:
+0x4010 013310 disable user 
+0x4011 013311 fetcht 1 ,mem_sensor_data_gpio 
+0x4012 013312 call gpio_get_bit 
+0x4013 013313 nrtn true 
+0x4014 013314 arg pan_reg_motion_staus ,regb 
+0x4015 013315 call mouse_p3610sensor_read 
+0x4016 013316 rtnbit0 7 
+0x4017 013317 arg pan_reg_pid_l ,regb 
+0x4018 013318 call mouse_p3610sensor_read 
+0x4019 013319 store 1 ,mem_sensor_id1 
+0x401a 013320 bne p3610_id1 ,mouse_init_3610sensor_reset 
+0x401b 013321 fetch 1 ,mem_mouse_move_flag 
+0x401c 013322 call mouse_read_sensor3610_data ,blank 
+0x401d 013323 jam 1 ,mem_mouse_move_flag 
+0x401e 013324 call mouse_read_sensor3610_data 
+0x401f 013325 fetch 1 ,mem_mouse_xy_h 
+0x4020 013326 rshift4 pdata ,pdata 
+0x4021 013327 call extsign_bit3 
+0x4022 013328 store 1 ,mem_mouse_x + 1 
+0x4023 013329 fetch 1 ,mem_mouse_xy_h 
+0x4024 013330 and pdata ,0x0f ,pdata 
+0x4025 013331 call extsign_bit3 
+0x4026 013332 store 1 ,mem_mouse_y + 1 
+0x4027 013333 fetch 1 ,mem_config_sensor_angle 
+0x4028 013334 beq 0 ,motion3610_6clk_direction_selection 
+0x4029 013335 beq 1 ,motion3610_9clk_direction_selection 
+0x402a 013336 beq 2 ,motion3610_12clk_direction_selection 
+0x402b 013337 beq 3 ,motion3610_3clk_direction_selection 
+0x402c 013338 rtn 
+:      013340 mouse_3610_smart_select:
+0x402d 013341 fetch 1 ,mem_sensor_smart_flag 
+0x402e 013342 beq p3610_smart_enable ,mouse_3610_smart_disable 
+0x402f 013343 beq p3610_smart_disable ,mouse_3610_smart_enable 
+0x4030 013344 rtn 
+:      013347 motion3610_6clk_direction_selection:
+0x4031 013348 call motion_6clk_direction_dispose 
+0x4032 013349 branch mouse_3610_smart_select 
+:      013351 motion3610_12clk_direction_selection:
+0x4033 013352 call motion_12clk_direction_dispose 
+0x4034 013353 branch mouse_3610_smart_select 
+:      013355 motion3610_9clk_direction_selection:
+0x4035 013356 call motion_9clk_direction_dispose 
+0x4036 013357 branch mouse_3610_smart_select 
+:      013359 motion3610_3clk_direction_selection:
+0x4037 013360 call motion_3clk_direction_dispose 
+0x4038 013361 branch mouse_3610_smart_select 
+:      013363 mouse_read_sensor3610_data:
+0x4039 013364 call spi_ncs_enable 
+0x403a 013365 call mouse_read_sensor_common 
+0x403b 013366 arg 5 ,pdata 
+0x403c 013367 call twspi_read 
+0x403d 013368 store 1 ,mem_mouse_xy_h 
+0x403e 013369 arg 7 ,pdata 
+0x403f 013370 call twspi_read 
+0x4040 013371 store 1 ,mem_sensor_shutter_hi 
+0x4041 013372 arg 8 ,pdata 
+0x4042 013373 call twspi_read 
+0x4043 013374 store 1 ,mem_sensor_shutter_lo 
+0x4044 013375 branch spi_ncs_disable 
+:      013378 mouse_3610_smart_enable:
+0x4045 013379 fetch 1 ,mem_sensor_shutter_hi 
+0x4046 013380 rtnne 0 
+0x4047 013381 fetch 1 ,mem_sensor_shutter_lo 
+0x4048 013382 sub pdata ,45 ,null 
+0x4049 013383 rtn positive 
+0x404a 013384 jam p3610_smart_enable ,mem_sensor_smart_flag 
+0x404b 013385 setarg 0xba41 
+0x404c 013386 call sensor_write 
+0x404d 013387 setarg 0x0032 
+0x404e 013388 call sensor_write 
+0x404f 013389 setarg 0xb541 
+0x4050 013390 branch sensor_write 
+:      013391 mouse_3610_smart_disable:
+0x4051 013392 fetch 1 ,mem_sensor_shutter_hi 
+0x4052 013393 rtnne 0 
+0x4053 013394 fetch 1 ,mem_sensor_shutter_lo 
+0x4054 013395 sub pdata ,45 ,null 
+0x4055 013396 nrtn positive 
+0x4056 013397 jam p3610_smart_disable ,mem_sensor_smart_flag 
+0x4057 013398 setarg 0xba41 
+0x4058 013399 call sensor_write 
+0x4059 013400 setarg 0x8032 
+0x405a 013401 call sensor_write 
+0x405b 013402 setarg 0xb541 
+0x405c 013403 branch sensor_write 
+:      013407 mouse_read_sensor_common:
+0x405d 013408 arg pan_reg_delta_x ,pdata 
+0x405e 013409 call twspi_read 
+0x405f 013410 store 2 ,mem_mouse_x 
+0x4060 013411 arg pan_reg_delta_y ,pdata 
+0x4061 013412 call twspi_read 
+0x4062 013413 store 2 ,mem_mouse_y 
+0x4063 013414 rtn 
+:      013416 mouse_set_qdecoder_x:
+0x4064 013417 arg mouse_default_xa_gpio ,temp 
+0x4065 013418 call gpio_config_input 
+0x4066 013419 arg mouse_default_xa_gpio ,temp 
+0x4067 013420 call gpio_get_bit 
+0x4068 013421 rtn true 
+0x4069 013422 hfetch 1 ,core_qdec_cntx 
+0x406a 013423 set1 4 ,pdata 
+0x406b 013424 hstore 1 ,core_qdec_cntx 
+0x406c 013425 rtn 
+:      013427 mouse_hardware_zwheel:
+0x406d 013428 fetcht 1 ,mem_mouse_z_data 
+0x406e 013429 hfetch 1 ,core_qdec_cntx 
+0x406f 013430 iadd temp ,pdata 
+0x4070 013431 rtn blank 
+0x4071 013432 store 1 ,mem_mouse_z 
+0x4072 013433 jam 0 ,mem_mouse_z_data 
+0x4073 013434 branch enable_user 
+:      013435 mouse_hardware_zwheel_beforelpm:
+0x4074 013436 fetcht 1 ,mem_mouse_z_data 
+0x4075 013437 hfetch 1 ,core_qdec_cntx 
+0x4076 013438 iadd temp ,pdata 
+0x4077 013439 store 1 ,mem_mouse_z_data 
+0x4078 013440 rtn 
+:      013441 mouse_zwheel:
+0x4079 013442 fetch 1 ,mem_mouse_z_data 
+0x407a 013443 rtn blank 
+0x407b 013444 store 1 ,mem_mouse_z 
+0x407c 013445 jam 0 ,mem_mouse_z_data 
+0x407d 013446 branch enable_user 
+:      013448 mouse_t_zwheel:
+0x407e 013449 fetch 1 ,mem_mouse_tz_data 
+0x407f 013450 rtn blank 
+0x4080 013451 store 1 ,mem_mouse_tz 
+0x4081 013452 jam 0 ,mem_mouse_tz_data 
+0x4082 013453 branch enable_user 
+:      013455 mouse_check_key_gpio:
+0x4083 013456 arg 0 ,rega 
+0x4084 013457 fetcht 1 ,mem_lbutton_gpio 
+0x4085 013458 call gpio_get_bit 
+0x4086 013459 setflag true ,0 ,rega 
+0x4087 013460 fetcht 1 ,mem_rbutton_gpio 
+0x4088 013461 call gpio_get_bit 
+0x4089 013462 setflag true ,1 ,rega 
+0x408a 013463 fetcht 1 ,mem_mbutton_gpio 
+0x408b 013464 call gpio_get_bit 
+0x408c 013465 setflag true ,2 ,rega 
+0x408d 013466 call mouse_check_s_key_gpio 
+0x408e 013467 copy rega ,pdata 
+0x408f 013468 rtn 
+:      013469 mouse_check_s_key_gpio:
+0x4090 013470 fetch 1 ,mem_bk_button_gpio 
+0x4091 013471 rtneq gpio_disable 
+0x4092 013472 fetcht 1 ,mem_bk_button_gpio 
+0x4093 013473 call gpio_get_bit 
+0x4094 013474 setflag true ,3 ,rega 
+0x4095 013475 fetcht 1 ,mem_fw_button_gpio 
+0x4096 013476 call gpio_get_bit 
+0x4097 013477 setflag true ,4 ,rega 
+0x4098 013478 rtn 
+:      013480 mouse_key:
+0x4099 013481 call mouse_check_key_gpio 
+0x409a 013482 call mouse_set_mult 
+0x409b 013483 call mouse_24g_key 
+0x409c 013484 copy rega ,pdata 
+0x409d 013485 fetcht 1 ,mem_mouse_key 
+0x409e 013486 store 1 ,mem_mouse_key 
+0x409f 013487 ixor temp ,pdata 
+0x40a0 013488 sub pdata ,0 ,null 
+0x40a1 013489 rtn zero 
+0x40a2 013490 branch enable_user 
+:      013492 mouse_24g_key:
+0x40a3 013493 rtnmark0 mark_24g 
+0x40a4 013494 copy rega ,pdata 
+0x40a5 013495 rtn blank 
+0x40a6 013496 store 1 ,mem_mouse_key 
+0x40a7 013497 branch enable_user 
+:      013500 mouse_set_mult:
+0x40a8 013501 fetch 2 ,mem_ui_state_map 
+0x40a9 013502 bbit1 ui_state_ble_connected ,mouse_set_ble_mult 
+0x40aa 013503 fetch 2 ,mem_ui_state_map 
+0x40ab 013504 bbit1 ui_state_bt_connected ,mouse_set_bt_mult 
+0x40ac 013505 rtn 
+:      013506 mouse_set_ble_mult:
+0x40ad 013507 copy rega ,pdata 
+0x40ae 013508 nbranch le_set_config_short_mult ,blank 
+0x40af 013509 branch le_clr_config_short_mult 
+:      013510 mouse_set_bt_mult:
+0x40b0 013511 copy rega ,pdata 
+0x40b1 013512 nbranch classic_bt_set_mult_short_flag ,blank 
+0x40b2 013513 branch classic_bt_clr_mult_short_flag 
+:      013516 mouse_sensor_sdio_low:
+0x40b3 013517 bpatch patch1c_7 ,mem_patch1c 
+0x40b4 013518 arg mouse_spi1_sdio_gpio ,temp 
+0x40b5 013519 fetch mouse_flag_len ,mem_mouse_flag 
+0x40b6 013520 isolate1 mouse_enable_spi2 ,pdata 
+0x40b7 013521 call mouse_sensor_sdio_low2 ,true 
+0x40b8 013522 call gpio_get_bit 
+0x40b9 013523 rtn true 
+0x40ba 013524 setarg 0x0a 
+0x40bb 013525 call twspi_read 
+0x40bc 013526 nop 1000 
+0x40bd 013527 branch mouse_sensor_sdio_low 
+:      013528 mouse_sensor_sdio_low2:
+0x40be 013529 arg mouse_spi2_sdio_gpio ,temp 
+0x40bf 013530 rtn 
+:      013532 mouse_spi_sdio_gpio_pollup:
+0x40c0 013533 fetch mouse_flag_len ,mem_mouse_flag 
+0x40c1 013534 bbit1 mouse_enable_spi2 ,mouse_spi2_sdio_gpio_pollup 
+:      013535 mouse_spi1_sdio_gpio_pollup:
+0x40c2 013536 arg mouse_spi1_sdio_gpio ,temp 
+0x40c3 013537 branch gpio_config_input_without_wake 
+:      013538 mouse_spi2_sdio_gpio_pollup:
+0x40c4 013539 arg mouse_spi2_sdio_gpio ,temp 
+0x40c5 013540 branch gpio_config_input_without_wake 
+:      013543 mouse_init_sunt:
+0x40c6 013544 call mouse_spi_init 
+0x40c7 013545 rtn wake 
+0x40c8 013546 call mouse_spi_sdio_gpio_pollup 
+0x40c9 013547 fetch 1 ,mem_config_sensor_type 
+0x40ca 013548 beq p3610 ,mouse_init_3610sensor 
+:      013549 mouse_init_sensor:
+0x40cb 013550 call mouse_read_sensor_id 
+0x40cc 013551 beq p32xx_id1 ,mouse_init_p32xx_id2_judge 
+0x40cd 013552 beq p3065_id1 ,mouse_p3065_init_param 
+0x40ce 013553 call mouse_twspi_reset 
+0x40cf 013554 nop 1000 
+0x40d0 013555 branch mouse_init_sensor 
+:      013556 mouse_twspi_reset:
+0x40d1 013557 bpatch patch1d_0 ,mem_patch1d 
+0x40d2 013558 fetch mouse_flag_len ,mem_mouse_flag 
+0x40d3 013559 bbit1 mouse_enable_spi2 ,twspi_reset2 
+0x40d4 013560 branch twspi_reset 
+:      013562 mouse_init_3610sensor:
+0x40d5 013563 call mouse_read_sensor_id 
+0x40d6 013564 beq p3610_id1 ,mouse_init_p3610 
+0x40d7 013565 call mouse_init_3610sensor_reset 
+0x40d8 013566 branch mouse_init_3610sensor 
+:      013568 mouse_read_sensor_id:
+0x40d9 013569 setarg pan_reg_pid_h 
+0x40da 013570 call twspi_read 
+0x40db 013571 store 1 ,mem_sensor_id2 
+0x40dc 013572 setarg pan_reg_pid_l 
+0x40dd 013573 call twspi_read 
+0x40de 013574 store 1 ,mem_sensor_id1 
+0x40df 013575 rtn 
+:      013576 mouse_init_p32xx_id2_judge:
+0x40e0 013577 fetch 1 ,mem_sensor_id2 
+0x40e1 013578 beq p3205_tj3t_id2 ,mouse_3205_3t_init_param 
+0x40e2 013579 beq p3204_tj3l_id2 ,mouse_3204_3l_init_param 
+0x40e3 013580 beq p3212_id2 ,mouse_3212_init_param 
+0x40e4 013581 beq pka8_id2 ,mouse_ka8_init_param 
+0x40e5 013582 rtn 
+:      013583 mouse_ka8_init_param:
+0x40e6 013584 jam ka8 ,mem_config_sensor_type 
+0x40e7 013585 rtn 
+:      013586 mouse_p3065xy_init_param:
+0x40e8 013587 jam p3065_xy ,mem_config_sensor_type 
+0x40e9 013588 rtn 
+:      013589 mouse_p3065_init_param:
+0x40ea 013590 fetch 1 ,mem_sensor_id2 
+0x40eb 013591 beq p3065_xy_id2 ,mouse_p3065xy_init_param 
+0x40ec 013592 jam p3065 ,mem_config_sensor_type 
+0x40ed 013593 rtn 
+:      013594 mouse_3212_init_param:
+0x40ee 013595 jam p3212 ,mem_config_sensor_type 
+0x40ef 013596 call mouse_sensor_disable_wp 
+0x40f0 013597 setarg 0x3426 
+0x40f1 013598 call twspi_write 
+0x40f2 013599 setarg 0x0419 
+0x40f3 013600 call twspi_write 
+:      013601 mouse_sensor_enable_wp:
+0x40f4 013602 setarg 0x0009 
+0x40f5 013603 branch twspi_write 
+:      013604 mouse_sensor_disable_wp:
+0x40f6 013605 setarg 0x5a09 
+0x40f7 013606 branch twspi_write 
+:      013608 mouse_3204_3l_init_param:
+0x40f8 013609 jam p3204 ,mem_config_sensor_type 
+0x40f9 013610 call mouse_sensor_disable_wp 
+0x40fa 013611 setarg 0x0f0d 
+0x40fb 013612 call twspi_write 
+0x40fc 013613 setarg 0xe31d 
+0x40fd 013614 call twspi_write 
+0x40fe 013615 setarg 0xd27d 
+0x40ff 013616 call twspi_write 
+0x4100 013617 call mouse_32xx_init_param 
+0x4101 013618 branch mouse_32xx_init_param_1 
+:      013620 mouse_32xx_init_param:
+0x4102 013621 setarg 0x351b 
+0x4103 013622 call twspi_write 
+0x4104 013623 setarg 0xb428 
+0x4105 013624 call twspi_write 
+0x4106 013625 setarg 0x4629 
+0x4107 013626 call twspi_write 
+0x4108 013627 setarg 0x962a 
+0x4109 013628 call twspi_write 
+0x410a 013629 setarg 0x8c2b 
+0x410b 013630 call twspi_write 
+0x410c 013631 setarg 0x6e2c 
+0x410d 013632 call twspi_write 
+0x410e 013633 setarg 0x642d 
+0x410f 013634 call twspi_write 
+0x4110 013635 setarg 0x5f38 
+0x4111 013636 call twspi_write 
+0x4112 013637 setarg 0x0f39 
+0x4113 013638 call twspi_write 
+0x4114 013639 setarg 0x323a 
+0x4115 013640 call twspi_write 
+0x4116 013641 setarg 0x473b 
+0x4117 013642 call twspi_write 
+0x4118 013643 setarg 0x1042 
+0x4119 013644 branch twspi_write 
+:      013645 mouse_32xx_init_param_1:
+0x411a 013646 setarg 0x2e54 
+0x411b 013647 call twspi_write 
+0x411c 013648 setarg 0xf255 
+0x411d 013649 call twspi_write 
+0x411e 013650 setarg 0xf461 
+0x411f 013651 call twspi_write 
+0x4120 013652 setarg 0x7063 
+0x4121 013653 call twspi_write 
+0x4122 013654 setarg 0x5275 
+0x4123 013655 call twspi_write 
+0x4124 013656 setarg 0x4176 
+0x4125 013657 call twspi_write 
+0x4126 013658 setarg 0xed77 
+0x4127 013659 call twspi_write 
+0x4128 013660 setarg 0x2378 
+0x4129 013661 call twspi_write 
+0x412a 013662 setarg 0x4679 
+0x412b 013663 call twspi_write 
+0x412c 013664 setarg 0xe57a 
+0x412d 013665 call twspi_write 
+0x412e 013666 setarg 0x487c 
+0x412f 013667 call twspi_write 
+0x4130 013668 setarg 0x777e 
+0x4131 013669 call twspi_write 
+0x4132 013670 setarg 0x017f 
+0x4133 013671 call twspi_write 
+0x4134 013672 setarg 0x000b 
+0x4135 013673 call twspi_write 
+0x4136 013674 setarg 0x007f 
+0x4137 013675 call twspi_write 
+0x4138 013676 branch mouse_sensor_enable_wp 
+:      013679 mouse_3205_3t_init_param:
+0x4139 013680 jam p3205 ,mem_config_sensor_type 
+0x413a 013681 call mouse_sensor_disable_wp 
+0x413b 013682 setarg 0x100d 
+0x413c 013683 call twspi_write 
+0x413d 013684 setarg 0xed1d 
+0x413e 013685 call twspi_write 
+0x413f 013686 setarg 0x807d 
+0x4140 013687 call twspi_write 
+0x4141 013688 call mouse_32xx_init_param 
+0x4142 013689 setarg 0x0943 
+0x4143 013690 call twspi_write 
+0x4144 013691 branch mouse_32xx_init_param_1 
+:      013694 mouse_init_3610sensor_reset:
+0x4145 013695 fetcht 1 ,mem_sensor_reset_gpio 
+0x4146 013696 call gpio_out_active 
+0x4147 013697 call delay_10ms 
+0x4148 013698 fetcht 1 ,mem_sensor_reset_gpio 
+0x4149 013699 call gpio_out_inactive 
+0x414a 013700 branch delay_10ms 
+:      013702 mouse_init_p3610:
+0x414b 013703 jam p3610 ,mem_config_sensor_type 
+0x414c 013704 setarg 0xba41 
+0x414d 013705 call sensor_write 
+0x414e 013706 setarg 0x0d11 
+0x414f 013707 call sensor_write 
+0x4150 013708 setarg 0x041b 
+0x4151 013709 call sensor_write 
+0x4152 013710 setarg 0x041c 
+0x4153 013711 call sensor_write 
+0x4154 013712 setarg 0x0f1d 
+0x4155 013713 call sensor_write 
+0x4156 013714 setarg 0x0032 
+0x4157 013715 call sensor_write 
+0x4158 013716 setarg 0xb541 
+0x4159 013717 branch sensor_write 
+:      013721 mouse_set_sensor_reg:
+0x415a 013722 setarg 0xba41 
+0x415b 013723 call sensor_write 
+0x415c 013724 nop 4000 
+0x415d 013725 setarg 0xff7f 
+0x415e 013726 call sensor_write 
+0x415f 013727 copy rega ,pdata 
+0x4160 013728 call sensor_write 
+0x4161 013729 setarg 0x007f 
+0x4162 013730 call sensor_write 
+0x4163 013731 setarg 0xb541 
+0x4164 013732 branch sensor_write 
+:      013734 extsign:
+0x4165 013735 rtnbit0 7 
+0x4166 013736 arg 0xff00 ,temp 
+0x4167 013737 ior temp ,pdata 
+0x4168 013738 rtn 
+:      013740 extsign_bit3:
+0x4169 013741 rtnbit0 3 
+0x416a 013742 arg 0xf0 ,temp 
+0x416b 013743 ior temp ,pdata 
+0x416c 013744 rtn 
+:      013747 mouse_le:
+0x416d 013748 call le_fifo_check_nearly_full 
+0x416e 013749 nrtn blank 
+0x416f 013750 fetch 1 ,mem_le_connect_status_flag 
+0x4170 013751 and pdata ,0x03 ,pdata 
+0x4171 013752 rtnne 0x03 
+0x4172 013753 fetch mouse_flag_len ,mem_mouse_flag 
+0x4173 013754 bbit1 mosue_24g_pairing_flag ,mouse_le_send_empty_packet 
+0x4174 013755 bbit1 mouse_select_device_flag ,mouse_le_send_empty_packet 
+0x4175 013756 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet 
+0x4176 013757 call mouse_motion 
+0x4177 013758 nrtn user 
+0x4178 013759 branch mouse_fill_data_le 
+:      013761 mouse_le_send_empty_packet:
+0x4179 013762 setarg 0 
+0x417a 013763 store 7 ,mem_mouse_key 
+0x417b 013764 branch mouse_fill_data_le 
+:      013766 mouse_priority_bb_event:
+0x417c 013767 copy regc ,pdata 
+0x417d 013768 beq bt_evt_le_connected ,mouse_le_bb_event_connected 
+0x417e 013769 beq bt_evt_bb_connected ,mouse_stop_discovery 
+0x417f 013770 beq bt_evt_le_disconnected ,mouse_bb_disconnected 
+0x4180 013771 beq bt_evt_bb_disconnected ,mouse_bb_disconnected 
+0x4181 013772 beq bt_evt_setup_complete ,mouse_bt_event_setup_complete 
+0x4182 013773 beq bt_evt_button_long_pressed ,mouse_bb_event_discovery_btn 
+0x4183 013774 beq bt_evt_hid_handshake ,mouse_bt_hid_handshake 
+0x4184 013775 beq bt_evt_hid_connected ,mouse_bt_hid_connected 
+0x4185 013776 beq bt_evt_reconn_failed ,mouse_bb_event_reconn_failed 
+0x4186 013777 beq bt_evt_reconn_page_timeout ,mouse_bb_event_reconn_timeout 
+0x4187 013778 beq bt_evt_pincode_req ,mouse_bb_event_pincode 
+0x4188 013779 beq bt_evt_remote_unsniff ,app_start_auto_sniff 
+0x4189 013780 beq bt_evt_le_pairing_success ,mouse_le_pairing_success 
+0x418a 013781 beq bt_evt_le_start_enc ,mouse_le_ll_start_encryt 
+0x418b 013782 beq bt_evt_le_pairing_complete ,mouse_le_pairing_complete 
+0x418c 013783 beq bt_evt_virtual_cable_unplug ,mouse_irtual_cable_unplug 
+0x418d 013784 beq bt_evt_24g_pairing_complete ,mouse_24g_pairing_complete 
+0x418e 013785 beq bt_evt_24g_attempt_fail ,mouse_24g_attempt_fail 
+0x418f 013786 beq bt_evt_24g_attempt_success ,mouse_24g_attempt_success 
+0x4190 013787 rtn 
+:      013790 mouse_le_pairing_complete:
+0x4191 013791 branch app_ble_store_reconn_info 
+:      013793 mouse_24g_attempt_fail:
+0x4192 013794 jam 1 ,mem_mouse_24g_enter_lpm_enable 
+0x4193 013795 fetch 1 ,mem_reconn_times 
+0x4194 013796 nbranch mouse_polling_device ,blank 
+0x4195 013797 fetch 1 ,mem_device_flag 
+0x4196 013798 fetcht 1 ,mem_24g_device_number 
+0x4197 013799 isub temp ,null 
+0x4198 013800 branch app_enter_hibernate ,zero 
+0x4199 013801 rtn 
+:      013802 mouse_24g_attempt_success:
+0x419a 013803 jam 1 ,mem_mouse_24g_enter_lpm_enable 
+0x419b 013804 rtn 
+:      013805 mouse_24g_pairing_complete:
+0x419c 013806 jam 1 ,mem_mouse_24g_enter_lpm_enable 
+0x419d 013807 arg mosue_24g_pairing_flag ,queue 
+0x419e 013808 call mouse_disable_function_flag 
+0x419f 013809 setarg 0 
+0x41a0 013810 store 2 ,mem_24g_pairing_timer_count 
+0x41a1 013811 jam 0 ,mem_mouse_move_flag 
+0x41a2 013813 fetch 1 ,mem_config_sensor_type 
+0x41a3 013814 sub pdata ,p3610 ,null 
+0x41a4 013815 call mouse_read_sensor3610_data ,zero 
+0x41a5 013816 ncall mouse_read_sensor_common ,zero 
+0x41a6 013818 fetch 1 ,mouse_flag_len ,mem_mouse_flag 
+0x41a7 013819 bbit1 mouse_enable_flash ,mouse_store_flash_24g_address 
+0x41a8 013820 call mouse_set_24g_addr_eeprom 
+0x41a9 013821 branch iicd_write_protect_eep_data 
+:      013823 mouse_set_24g_addr_eeprom:
+0x41aa 013824 call g24_head_ptr2regc 
+0x41ab 013825 add regc ,offset_24g_addr ,rega 
+0x41ac 013826 arg mouse_g24_addr_eeprom_offect ,regb 
+0x41ad 013827 arg 4 ,temp 
+0x41ae 013828 rtn 
+:      013830 mouse_store_flash_24g_address:
+0x41af 013831 call g24_head_ptr2regc 
+0x41b0 013832 add regc ,offset_24g_addr ,regb 
+0x41b1 013833 ifetch 1 ,regb 
+0x41b2 013834 store 1 ,mem_mouse_24g_addr 
+0x41b3 013835 branch mouse_store_flash_device_info 
+:      013838 mouse_le_pairing_success:
+0x41b4 013839 arg ll_pairing_success_flag ,queue 
+0x41b5 013840 branch mouse_le_enable_connect_flag 
+:      013841 mouse_le_ll_start_encryt:
+0x41b6 013842 jam 2 ,mem_le_start_encrypt_timer 
+0x41b7 013843 arg ll_start_enc_flag ,queue 
+0x41b8 013844 branch mouse_le_enable_connect_flag 
+:      013847 mouse_le_enable_connect_flag:
+0x41b9 013848 fetch 1 ,mem_le_connect_status_flag 
+0x41ba 013849 qset1 pdata 
+0x41bb 013850 store 1 ,mem_le_connect_status_flag 
+0x41bc 013851 rtn 
+:      013853 mouse_le_disable_connect_flag:
+0x41bd 013854 fetch 1 ,mem_le_connect_status_flag 
+0x41be 013855 qset0 pdata 
+0x41bf 013856 store 1 ,mem_le_connect_status_flag 
+0x41c0 013857 rtn 
+:      013858 mouse_le_clean_connect_flag:
+0x41c1 013859 jam 0 ,mem_le_connect_status_flag 
+0x41c2 013860 rtn 
+:      013862 mouse_le_bb_event_connected:
+0x41c3 013863 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x41c4 013864 set0 app_disc_by_button ,pdata 
+0x41c5 013865 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x41c6 013866 setarg 0 
+0x41c7 013867 store 2 ,mem_mouse_direct_timer 
+0x41c8 013868 call mouse_no_data_timer_init 
+0x41c9 013869 branch mouse_stop_discovery 
+:      013871 mouse_bb_event_pincode:
+0x41ca 013872 call pincode_reinit 
+0x41cb 013873 branch app_bt_set_pincode 
+:      013874 mouse_bb_event_reconn_timeout:
+:      013875 mouse_bb_event_reconn_failed:
+0x41cc 013876 fetch 1 ,mem_reconn_times 
+0x41cd 013877 nbranch mouse_polling_device ,blank 
+0x41ce 013878 fetch 2 ,mem_ui_state_map 
+0x41cf 013879 bbit1 ui_state_btn_down ,mouse_start_discovery 
+0x41d0 013880 fetch mouse_flag_len ,mem_mouse_flag 
+0x41d1 013881 bbit1 mouse_select_device_flag ,mouse_soft_reset 
+0x41d2 013882 bbit1 mouse_bt_discovery_button_down_flag ,mouse_start_discovery 
+0x41d3 013883 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 
+0x41d4 013884 branch app_bb_hibernate 
+:      013887 mouse_bt_hid_connected:
+0x41d5 013888 branch mouse_hid_connected 
+:      013890 mouse_bt_event_setup_complete:
+0x41d6 013891 rtn 
+:      013893 mouse_soft_reset:
+0x41d7 013894 call mouse_select_device_enable 
+0x41d8 013895 branch soft_reset_chip 
+:      013897 mouse_bb_disconnected:
+0x41d9 013898 bpatch patch1d_1 ,mem_patch1d 
+0x41da 013899 call mouse_bb_discon_clear_stack 
+0x41db 013900 fetch mouse_flag_len ,mem_mouse_flag 
+0x41dc 013901 bbit1 mouse_select_device_flag ,mouse_soft_reset 
+0x41dd 013902 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 
+0x41de 013903 fetch 1 ,mem_reconn_times 
+0x41df 013904 nbranch mouse_polling_device ,blank 
+0x41e0 013905 fetch app_disc_rsn_size ,mem_app_disconn_reason 
+0x41e1 013906 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn 
+0x41e2 013907 bbit1 app_disc_by_button ,app_disconn_reason_clear 
+0x41e3 013908 bbit1 app_disc_after_pairing ,mouse_event_light_state_pairing 
+0x41e4 013909 bbit1 app_disc_after_reconn ,mouse_event_light_state_hibernate 
+0x41e5 013910 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate 
+0x41e6 013911 branch mouse_start_discovery 
+:      013912 mouse_bb_discon_clear_stack:
+0x41e7 013913 setarg 0 
+0x41e8 013914 store 8 ,mem_wheel_tb_old_pinlevel 
+0x41e9 013915 istore 4 ,contw 
+0x41ea 013916 jam 0 ,mem_mouse_send_blank_timer 
+0x41eb 013917 jam 0 ,mem_mouse_move_flag 
+0x41ec 013918 jam app_handshake_null ,mem_app_handshake_flag 
+0x41ed 013919 jam 0 ,mem_ltk_exists 
+0x41ee 013920 rtn 
+:      013922 mouse_event_light_state_pairing:
+0x41ef 013923 bbit1 app_disc_after_handshake ,mouse_event_light_state_hibernate 
+0x41f0 013924 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate 
+0x41f1 013925 branch mouse_start_discovery 
+:      013926 mouse_event_light_state_hibernate:
+0x41f2 013927 fetch 2 ,mem_ui_state_map 
+0x41f3 013928 bbit1 ui_state_btn_down ,mouse_start_discovery 
+0x41f4 013929 branch app_bb_hibernate 
+:      013931 mouse4_0_event_bb_disconn:
+0x41f5 013932 call mouse_le_clean_connect_flag 
+0x41f6 013933 fetch app_disc_rsn_size ,mem_app_disconn_reason 
+0x41f7 013934 bbit1 app_disc_by_button ,app_disconn_reason_clear 
+0x41f8 013935 branch app_bb_hibernate 
+:      013937 mouse_bb_event_timer:
+0x41f9 013938 call mouse_adc_read 
+0x41fa 013939 call mouse_24g_delay_timer 
+0x41fb 013940 call mouse_ban_24g_pairing_timer 
+0x41fc 013941 call mouse_dpi_led_blink_delay_timer 
+0x41fd 013942 call mouse_statue_up_timer 
+0x41fe 013944 call mouse_statue_cheak_timer 
+0x41ff 013945 call mouse_select_device 
+0x4200 013946 call mouse_bt_discovery_cheak 
+0x4201 013947 call mouse_low_voltage_led_timer 
+0x4202 013948 call mouse_sensor_led_contrl_timer 
+0x4203 013949 call mouse_check_hid_handshake_timer 
+0x4204 013950 call mouse_check_discovery_timeout_timer 
+0x4205 013951 call mouse_check_direct_timeout_timer 
+0x4206 013952 call mouse_check_no_data_timeout_timer 
+0x4207 013953 call mouse_check_mouse_state_timer 
+0x4208 013954 branch mouse_le_enable_att_list_timer 
+:      013958 mouse_sensor_led_contrl_timer:
+0x4209 013959 fetch 1 ,mem_mouse_sensor_timer_count 
+0x420a 013960 rtn blank 
+0x420b 013961 increase -1 ,pdata 
+0x420c 013962 store 1 ,mem_mouse_sensor_timer_count 
+0x420d 013963 nrtn blank 
+0x420e 013964 branch mouse_sensor_led_contrl 
+:      013965 mouse_sensor_led_contrl:
+0x420f 013966 fetch 1 ,mem_sensor_led_style 
+0x4210 013967 rtneq ui_led_state_blink_stop 
+0x4211 013968 beq ui_led_state_blink_darking ,mouse_sensor_led_blink_state_darking 
+:      013969 mouse_sensor_led_blink_state_lighting:
+0x4212 013970 call mouse_sensor_led_on 
+0x4213 013971 jam ui_led_state_blink_darking ,mem_sensor_led_style 
+0x4214 013972 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count 
+0x4215 013973 rtn 
+:      013974 mouse_sensor_led_blink_state_darking:
+0x4216 013975 call mouse_sensor_led_off 
+0x4217 013976 jam ui_led_state_blink_lighting ,mem_sensor_led_style 
+0x4218 013977 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count 
+0x4219 013978 rtn 
+:      013980 mouse_sensor_led_blink_stop:
+:      013981 mouse_sensor_reset:
+0x421a 013982 setarg 0x8006 
+0x421b 013983 call twspi_write 
+0x421c 013984 nop 1000 
+0x421d 013985 jam 0x00 ,mem_mouse_sensor_timer_count 
+0x421e 013986 jam ui_led_state_blink_stop ,mem_sensor_led_style 
+0x421f 013987 branch mouse_init_p32xx_id2_judge 
+:      013989 mouse_p3212sensor_led_on:
+0x4220 013990 setarg 0xa006 
+0x4221 013991 call twspi_write 
+0x4222 013992 setarg 0xa005 
+0x4223 013993 branch twspi_write 
+:      013994 mouse_sensor_led_on_global:
+0x4224 013995 jam 0 ,mem_mouse_sensor_timer_count 
+:      013996 mouse_sensor_led_on:
+0x4225 013997 fetch 1 ,mem_config_sensor_type 
+0x4226 013998 beq p3212 ,mouse_p3212sensor_led_on 
+0x4227 013999 setarg 0x0106 
+0x4228 014000 call twspi_write 
+0x4229 014001 setarg 0xa105 
+0x422a 014002 branch twspi_write 
+:      014004 mouse_sensor_led_off_global:
+0x422b 014005 jam 0 ,mem_mouse_sensor_timer_count 
+:      014006 mouse_sensor_led_off:
+0x422c 014007 setarg 0x0906 
+0x422d 014008 branch twspi_write 
+:      014009 mouse_sensor_start_blink:
+0x422e 014010 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count 
+0x422f 014011 jam ui_led_state_blink_start ,mem_sensor_led_style 
+0x4230 014012 rtn 
+:      014014 mouse_check_hid_handshake_timer:
+0x4231 014015 arg mem_hid_handshake_timer_count ,regc 
+0x4232 014016 arg mouse_bt_hid_handshake ,regb 
+0x4233 014017 branch timer_single_step 
+:      014019 mouse_check_discovery_timeout_timer:
+0x4234 014020 arg mem_mouse_discovery_timer ,regc 
+0x4235 014021 arg mouse_check_discovery_timeout ,regb 
+0x4236 014022 branch timer_single_step_2b 
+:      014024 mouse_check_direct_timeout_timer:
+0x4237 014025 arg mem_mouse_direct_timer ,regc 
+0x4238 014026 arg mouse_check_direct_timeout ,regb 
+0x4239 014027 branch timer_single_step_2b 
+:      014029 mouse_check_no_data_timeout_timer:
+0x423a 014030 arg mem_mouse_no_data_timer ,regc 
+0x423b 014031 arg mouse_check_no_data_timeout ,regb 
+0x423c 014032 branch timer_single_step_2b 
+:      014034 mouse_check_mouse_state_timer:
+0x423d 014035 arg mem_mouse_statue_led_timer ,regc 
+0x423e 014036 arg mouse_statue_led_off ,regb 
+0x423f 014037 branch timer_single_step 
+:      014041 mouse_le_enable_att_list_timer:
+0x4240 014042 arg mem_le_start_encrypt_timer ,regc 
+0x4241 014043 arg mouse_le_enable_att_list ,regb 
+0x4242 014044 branch timer_single_step 
+:      014046 mouse_24g_delay_timer:
+0x4243 014047 arg mem_24g_enter_lpm_timer ,regc 
+0x4244 014048 arg mouse_24g_delay ,regb 
+0x4245 014049 branch timer_single_step 
+:      014051 mouse_ban_24g_pairing_timer:
+0x4246 014052 arg mem_24g_pairing_timer_count ,regc 
+0x4247 014053 arg mouse_ban_24g_pairing ,regb 
+0x4248 014054 branch timer_single_step_2b 
+:      014055 mouse_ban_24g_pairing:
+:      014056 mouse_24g_delay:
+0x4249 014057 rtn 
+:      014060 mosue_dpi_led_blink_init:
+0x424a 014061 fetch mouse_flag_len ,mem_mouse_flag 
+0x424b 014062 rtnbit0 mouse_enable_dpi_led_blink 
+0x424c 014063 jam 10 ,mem_mouse_dpi_led_delay_count 
+0x424d 014064 fetch 1 ,mem_dpi_led_gpio 
+0x424e 014065 store 1 ,mem_mouse_struct_led_gpio 
+0x424f 014066 rtn 
+:      014069 mouse_dpi_led_blink_delay_timer:
+0x4250 014070 arg mem_mouse_dpi_led_delay_count ,regc 
+0x4251 014071 arg mouse_dpi_led_setting ,regb 
+0x4252 014072 branch timer_single_step 
+:      014073 mouse_dpi_led_setting:
+0x4253 014074 fetch 1 ,mem_dpi_led_gpio 
+0x4254 014075 store 1 ,mem_mouse_struct_led_gpio 
+0x4255 014076 setarg led_dpi_blink 
+0x4256 014077 store 2 ,mem_mouse_on_time 
+0x4257 014078 store 2 ,mem_mouse_off_time 
+0x4258 014079 arg 0 ,rega 
+0x4259 014080 fetcht 1 ,mem_mouse_dpi 
+0x425a 014081 increase 1 ,temp 
+0x425b 014082 storet 1 ,mem_mouse_blink_count 
+0x425c 014083 jam ui_led_state_blink_start ,mem_mouse_led_type 
+0x425d 014084 rtn 
+:      014086 mouse_le_enable_att_list:
+0x425e 014087 fetch 1 ,mem_le_connect_status_flag 
+0x425f 014088 rtnbit1 ll_pairing_success_flag 
+0x4260 014089 jam bt_cmd_le_update_conn ,mem_fifo_temp 
+0x4261 014090 call ui_ipc_send_cmd 
+0x4262 014091 arg write_req_enable_flag ,queue 
+0x4263 014092 branch mouse_le_enable_connect_flag 
+:      014095 mouse_check_discovery_timeout:
+0x4264 014096 call mouse_stop_discovery 
+0x4265 014097 branch app_enter_hibernate 
+:      014099 mouse_check_direct_timeout:
+0x4266 014100 call app_ble_stop_direct_adv 
+0x4267 014101 fetch 1 ,mem_reconn_times 
+0x4268 014102 nbranch mouse_polling_device ,blank 
+0x4269 014103 branch app_enter_hibernate 
+:      014105 mouse_check_no_data_timeout:
+0x426a 014106 bmark1 mark_24g ,check_51cmd_hibernate 
+0x426b 014107 branch mouse_disconnect 
+:      014111 mouse_bb_event_discovery_btn:
+0x426c 014112 bpatch patch1d_2 ,mem_patch1d 
+0x426d 014113 jam 0 ,mem_mouse_send_blank_timer 
+0x426e 014114 call mouse_disconnect 
+0x426f 014115 call mouse_le_clean_connect_flag 
+0x4270 014116 branch mouse_start_discovery 
+:      014120 mouse3_0_check_reconn_target:
+0x4271 014121 fetch 6 ,mem_hci_plap 
+0x4272 014122 branch app_bt_start_discovery_short ,blank 
+0x4273 014123 call mouse_reconn_setting_led_gpio 
+0x4274 014124 jam 0x17 ,mem_connection_options 
+0x4275 014125 fetch 1 ,mem_ssp_enable 
+0x4276 014126 nbranch app_bt_start_reconnect ,blank 
+0x4277 014127 jam 0x04 ,mem_connection_options 
+0x4278 014128 branch app_bt_start_reconnect 
+:      014130 mouse4_0_check_reconn_target:
+0x4279 014131 fetch 2 ,mem_mouse_direct_timeout 
+0x427a 014132 store 2 ,mem_mouse_direct_timer 
+0x427b 014133 call mouse_reconn_setting_led_gpio 
+0x427c 014134 call app_lpm_mult_disable 
+0x427d 014135 branch check_51cmd_adv 
+:      014137 mouse_reconn_setting_led_gpio:
+0x427e 014138 setarg led_reconnect_blink 
+0x427f 014139 store 2 ,mem_mouse_on_time 
+0x4280 014140 store 2 ,mem_mouse_off_time 
+0x4281 014141 branch mouse_setting_led_gpio_comman 
+:      014143 mouse_discover_setting_led_gpio:
+0x4282 014144 setarg led_discovery_blink 
+0x4283 014145 store 2 ,mem_mouse_on_time 
+0x4284 014146 store 2 ,mem_mouse_off_time 
+:      014147 mouse_setting_led_gpio_comman:
+0x4285 014148 fetch 1 ,mem_device_flag 
+0x4286 014149 beq mode_bt_device1 ,mouse_device_led1 
+0x4287 014150 beq mode_bt_device2 ,mouse_device_led2 
+0x4288 014151 beq mode_bt_device3 ,mouse_device_led3 
+0x4289 014152 rtn 
+:      014153 mouse_device_led1:
+0x428a 014154 fetch 1 ,mem_config_device1_led_gpio 
+0x428b 014155 branch mouse_led_blink 
+:      014156 mouse_device_led2:
+0x428c 014157 fetch 1 ,mem_config_device2_led_gpio 
+0x428d 014158 branch mouse_led_blink 
+:      014159 mouse_device_led3:
+0x428e 014160 fetch 1 ,mem_config_device3_led_gpio 
+:      014161 mouse_led_blink:
+0x428f 014162 store 1 ,mem_temp 
+0x4290 014163 call mouse_devce_led_off 
+0x4291 014164 fetch 1 ,mem_temp 
+0x4292 014165 store 1 ,mem_mouse_struct_led_gpio 
+0x4293 014166 arg 0 ,rega 
+0x4294 014167 jam ui_led_state_blink_start ,mem_mouse_led_type 
+0x4295 014168 branch ui_led_blink_start_global 
+:      014170 mouse_led_off:
+0x4296 014171 arg 0 ,rega 
+0x4297 014172 branch ui_led_off_global 
+:      014173 mouse_led_on:
+0x4298 014174 arg 0 ,rega 
+0x4299 014175 branch ui_led_on_global 
+:      014177 mouse4_0_bb_event_discovery_btn:
+0x429a 014178 branch mouse_le_clean_connect_flag 
+:      014180 mouse_bt_hid_handshake:
+0x429b 014181 jam app_handshake_done ,mem_app_handshake_flag 
+0x429c 014182 call app_lpm_mult_enable 
+0x429d 014183 call app_bt_store_reconn_info 
+0x429e 014184 setarg 0 
+0x429f 014185 store 2 ,mem_discovery_timeout_timer_count 
+0x42a0 014186 store 1 ,mem_hid_handshake_timer_count 
+0x42a1 014187 branch app_bt_enter_sniff 
+:      014189 mouse_check_reconn_target:
+0x42a2 014190 call mouse_cheak_select_device_by_switch 
+0x42a3 014191 fetch 1 ,mem_device_flag 
+0x42a4 014192 fetcht 1 ,mem_24g_device_number 
+0x42a5 014193 isub temp ,null 
+0x42a6 014194 branch mouse_connect_24g_mode ,zero 
+0x42a7 014195 fetch 1 ,mem_xrecord_mode 
+0x42a8 014196 beq rec_3_mode ,mouse3_0_check_reconn_target 
+0x42a9 014197 beq rec_4_mode ,mouse4_0_check_reconn_target 
+0x42aa 014198 branch mouse_start_discovery 
+:      014199 mouse_connect_24g_mode:
+0x42ab 014200 call mouse_start_24g_mode 
+0x42ac 014201 rtnmark1 mark_24g 
+0x42ad 014202 fetch 1 ,mem_reconn_times 
+0x42ae 014203 nbranch mouse_polling_device ,blank 
+0x42af 014204 rtn 
+:      014206 mouse_start_discovery:
+0x42b0 014207 bpatch patch1d_3 ,mem_patch1d 
+0x42b1 014208 fetch 2 ,mem_ui_state_map 
+0x42b2 014209 bbit1 ui_state_ble_adv ,mouse_start_discovery_norandom 
+0x42b3 014210 fetch mouse_flag_len ,mem_mouse_flag 
+0x42b4 014211 bbit0 mouse_enable_ble_random_addre ,mouse_start_discovery_norandom 
+0x42b5 014212 random pdata 
+0x42b6 014213 store 1 ,mem_le_lap + 1 
+:      014214 mouse_start_discovery_norandom:
+0x42b7 014215 call app_lpm_mult_disable 
+0x42b8 014216 fetch 2 ,mem_discovery_timeout 
+0x42b9 014217 store 2 ,mem_mouse_discovery_timer 
+0x42ba 014218 jam 6 ,mem_connection_options 
+0x42bb 014219 setarg 0 
+0x42bc 014220 store 2 ,mem_mouse_no_data_timer 
+0x42bd 014221 store 2 ,mem_mouse_direct_timer 
+0x42be 014222 arg mouse_store_eeprom_flag ,queue 
+0x42bf 014223 call mouse_enable_function_flag 
+0x42c0 014224 call mouse_bt_discovery_button_down_disable 
+0x42c1 014225 fetch 1 ,mem_device_option 
+0x42c2 014226 isolate1 mode_4_mouse ,pdata 
+0x42c3 014227 call check_51cmd_adv ,true 
+0x42c4 014228 fetch 1 ,mem_device_option 
+0x42c5 014229 isolate1 mode_3_mouse ,pdata 
+0x42c6 014230 call check_51cmd_start_discovery ,true 
+0x42c7 014231 fetch mouse_flag_len ,mem_mouse_flag 
+0x42c8 014232 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_start_blink 
+0x42c9 014233 branch mouse_discover_setting_led_gpio 
+:      014235 mouse_stop_discovery:
+0x42ca 014236 bpatch patch1d_4 ,mem_patch1d 
+0x42cb 014237 fetch 1 ,mem_device_option 
+0x42cc 014238 isolate1 mode_4_mouse ,pdata 
+0x42cd 014239 call mouse_stop_le_adv ,true 
+0x42ce 014240 fetch 1 ,mem_device_option 
+0x42cf 014241 isolate1 mode_3_mouse ,pdata 
+0x42d0 014242 call mouse_stop_bt3_discovery ,true 
+0x42d1 014243 fetch mouse_flag_len ,mem_mouse_flag 
+0x42d2 014244 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_led_blink_stop 
+0x42d3 014245 branch mouse_devce_led_off 
+:      014246 mouse_stop_le_adv:
+0x42d4 014247 setarg 0 
+0x42d5 014248 store 2 ,mem_mouse_direct_timer 
+0x42d6 014249 branch check_51cmd_stop_adv 
+:      014250 mouse_stop_bt3_discovery:
+0x42d7 014251 setarg 0 
+0x42d8 014252 store 2 ,mem_mouse_discovery_timer 
+0x42d9 014253 branch check_51cmd_stop_discovery 
+:      014259 mouse_store_remote_bdaddr:
+0x42da 014260 fetch mouse_flag_len ,mem_mouse_flag 
+0x42db 014261 rtnbit0 mouse_store_eeprom_flag 
+0x42dc 014262 arg mouse_store_eeprom_flag ,queue 
+0x42dd 014263 call mouse_disable_function_flag 
+0x42de 014264 call mouse_check_device_addr 
+:      014265 mouse_unplug_clean_bdaddr:
+0x42df 014266 call mouse_before_store_reconn_info 
+0x42e0 014267 fetch mouse_flag_len ,mem_mouse_flag 
+0x42e1 014268 bbit1 mouse_enable_flash ,mouse_store_flash_device_info 
+0x42e2 014269 bbit1 mouse_enable_eeprom ,mouse_store_eeprom_device_info 
+0x42e3 014270 rtn 
+:      014271 mouse_store_eeprom_device_info:
+0x42e4 014272 arg 88 ,temp 
+0x42e5 014273 arg mem_device_flag ,rega 
+0x42e6 014274 arg mouse_info_eeprom_offect ,regb 
+0x42e7 014275 branch iicd_write_protect_eep_data 
+:      014277 mouse_check_device_addr:
+0x42e8 014278 fetch 1 ,mem_record_bt_mode 
+0x42e9 014279 beq rec_4_mode ,mouse_check_le_device_addr 
+0x42ea 014280 beq rec_3_mode ,mouse_check_bt_device_addr 
+0x42eb 014281 rtn 
+:      014282 mouse_check_le_device_addr:
+0x42ec 014283 store 1 ,mem_device_addr_temp 
+0x42ed 014284 fetch 6 ,mem_le_plap 
+0x42ee 014285 branch mouse_check_bt_device_addr_common 
+:      014286 mouse_check_bt_device_addr:
+0x42ef 014287 store 1 ,mem_device_addr_temp 
+0x42f0 014288 fetch 6 ,mem_plap 
+:      014289 mouse_check_bt_device_addr_common:
+0x42f1 014290 store 6 ,mem_device_addr_temp + 1 
+0x42f2 014291 fetch 7 ,mem_device_addr_temp 
+0x42f3 014292 arg mem_device1_type ,contr 
+0x42f4 014293 arg 3 ,loopcnt 
+:      014294 mouse_check_device_addr_end:
+0x42f5 014295 ifetcht 7 ,contr 
+0x42f6 014296 isub temp ,null 
+0x42f7 014297 branch mouse_clean_addr ,zero 
+0x42f8 014298 increase 22 ,contr 
+0x42f9 014299 loop mouse_check_device_addr_end 
+0x42fa 014300 rtn 
+:      014301 mouse_before_store_reconn_info:
+0x42fb 014302 arg mem_device1_type ,rega 
+0x42fc 014303 fetch 1 ,mem_device_flag 
+0x42fd 014304 increase -1 ,pdata 
+0x42fe 014305 mul32 pdata ,29 ,pdata 
+0x42ff 014306 iadd rega ,rega 
+0x4300 014307 fetch 1 ,mem_record_bt_mode 
+0x4301 014308 istore 1 ,rega 
+0x4302 014309 beq rec_4_mode ,mouse_store_le_device 
+0x4303 014310 beq rec_3_mode ,mouse_store_bt_device 
+0x4304 014311 rtn 
+:      014313 mouse_store_le_device:
+0x4305 014314 fetch 6 ,mem_le_plap 
+0x4306 014315 istore 6 ,contw 
+0x4307 014316 arg mem_le_ltk ,contr 
+0x4308 014317 call memcpy16 
+0x4309 014318 fetch 6 ,mem_le_lap 
+0x430a 014319 istore 6 ,contw 
+0x430b 014320 rtn 
+:      014321 mouse_store_bt_device:
+0x430c 014322 fetch 6 ,mem_plap 
+0x430d 014323 istore 6 ,contw 
+0x430e 014324 arg mem_link_key ,contr 
+0x430f 014325 branch memcpy16 
+:      014327 mouse_clean_addr:
+0x4310 014328 increase -6 ,contr 
+0x4311 014329 copy contr ,contw 
+0x4312 014330 fetcht 6 ,mem_device_addr_temp + 1 
+0x4313 014331 increase 3 ,temp 
+0x4314 014332 istoret 6 ,contw 
+0x4315 014333 rtn 
+:      014337 mouse_eeprom_load_recon_info:
+0x4316 014338 arg 88 ,temp 
+0x4317 014339 arg mem_device_flag ,rega 
+0x4318 014340 arg mouse_info_eeprom_offect ,regb 
+0x4319 014341 call iicd_read_eep_data 
+:      014342 mouse_select_reconn_device:
+0x431a 014343 arg mem_device1_type ,rega 
+0x431b 014344 fetch 1 ,mem_device_flag 
+0x431c 014345 fetcht 1 ,mem_24g_device_number 
+0x431d 014346 isub temp ,null 
+0x431e 014347 rtn zero 
+0x431f 014348 increase -1 ,pdata 
+0x4320 014349 mul32 pdata ,29 ,pdata 
+0x4321 014350 iadd rega ,rega 
+0x4322 014351 ifetch 1 ,rega 
+0x4323 014352 store 1 ,mem_xrecord_mode 
+0x4324 014353 beq rec_3_mode ,mouse_load_bt_device 
+0x4325 014354 beq rec_4_mode ,mouse_load_le_device 
+0x4326 014355 rtn 
+:      014357 mouse_load_bt_device:
+0x4327 014358 ifetch 6 ,contr 
+:      014359 mouse_load_bt_device_end:
+0x4328 014360 store 6 ,mem_hci_plap 
+0x4329 014361 arg mem_link_key ,contw 
+0x432a 014362 call memcpy16 
+0x432b 014363 branch check_link_key_load 
+:      014365 mouse_load_le_device:
+0x432c 014366 ifetch 6 ,contr 
+:      014367 mouse_load_le_device_end:
+0x432d 014368 store 6 ,mem_hci_plap 
+0x432e 014369 arg mem_le_ltk ,contw 
+0x432f 014370 call memcpy16 
+0x4330 014371 ifetch 6 ,contr 
+0x4331 014372 store 6 ,mem_le_lap 
+0x4332 014373 rtn 
+:      014376 mouse_select_device:
+0x4333 014377 fetch 1 ,mem_config_function_enable 
+0x4334 014378 bbit1 enable_select_device_by_gpio_button ,mouse_select_device_by_button 
+0x4335 014379 bbit1 enable_select_device_by_switch ,mouse_select_device_by_switch 
+0x4336 014380 branch mouse_select_device_by_combination_key 
+:      014382 mouse_select_device_by_combination_key:
+0x4337 014383 call mouse_check_key_gpio 
+0x4338 014384 beq mouse_rm_button ,mouse_select_device_commbination_key_down 
+:      014385 mouse_select_device_commbination_key_up:
+0x4339 014386 jam 30 ,mem_combination_select_device_count 
+0x433a 014387 fetch 1 ,mem_select_device_button_statue 
+0x433b 014388 rtneq dpi_button_state_up 
+0x433c 014389 jam dpi_button_state_up ,mem_select_device_button_statue 
+0x433d 014390 rtn 
+:      014392 mouse_select_device_commbination_key_down:
+0x433e 014393 call mouse_combination_select_device_timer 
+0x433f 014394 fetch 1 ,mem_select_device_button_statue 
+0x4340 014395 rtneq dpi_button_state_down 
+0x4341 014396 jam dpi_button_state_down ,mem_select_device_button_statue 
+0x4342 014397 branch mouse_select_device_enable 
+:      014399 mouse_combination_select_device_timer:
+0x4343 014400 fetch 1 ,mem_combination_select_device_count 
+0x4344 014401 rtn blank 
+0x4345 014402 pincrease -1 
+0x4346 014403 store 1 ,mem_combination_select_device_count 
+0x4347 014404 nrtn blank 
+0x4348 014405 branch mouse_ready_reconnection_by_button 
+:      014407 mouse_select_device_by_button:
+0x4349 014408 fetch 1 ,mem_config_select_device_button_gpio 
+0x434a 014409 rtneq gpio_disable 
+0x434b 014410 fetcht 1 ,mem_config_select_device_button_gpio 
+0x434c 014411 call gpio_get_bit 
+0x434d 014412 branch mouse_select_device_button_down ,true 
+:      014413 mouse_select_device_button_up:
+0x434e 014414 fetch 1 ,mem_select_device_button_statue 
+0x434f 014415 rtneq dpi_button_state_up 
+0x4350 014416 jam dpi_button_state_up ,mem_select_device_button_statue 
+0x4351 014417 fetch mouse_flag_len ,mem_mouse_flag 
+0x4352 014418 rtnbit1 mouse_long_bt_button_flag 
+0x4353 014419 branch mouse_ready_reconnection_by_button 
+:      014421 mouse_select_device_button_down:
+0x4354 014422 fetch 1 ,mem_select_device_button_statue 
+0x4355 014423 rtneq dpi_button_state_down 
+0x4356 014424 jam dpi_button_state_down ,mem_select_device_button_statue 
+0x4357 014425 arg mouse_long_bt_button_flag ,queue 
+0x4358 014426 branch mouse_disable_function_flag 
+:      014430 mouse_select_device_by_switch:
+0x4359 014431 fetch 1 ,mouse_flag_len ,mem_mouse_flag 
+0x435a 014432 rtnbit0 enable_select_device_by_switch 
+0x435b 014433 fetch 1 ,mem_device_flag 
+0x435c 014434 beq mode_bt_device1 ,mouse_select1_device 
+0x435d 014435 beq mode_24g_device ,mouse_select2_device 
+0x435e 014436 rtn 
+:      014437 mouse_cheak_select_device_by_switch:
+0x435f 014438 fetch 1 ,mouse_flag_len ,mem_mouse_flag 
+0x4360 014439 rtnbit0 enable_select_device_by_switch 
+0x4361 014440 fetcht 1 ,mem_config_select_device_button_gpio 
+0x4362 014441 call gpio_get_bit 
+0x4363 014442 branch mouse_cheak_select_24gdevice ,true 
+:      014443 mouse_select_btdevice:
+0x4364 014444 jam mode_bt_device1 ,mem_device_flag 
+0x4365 014445 rtn 
+:      014446 mouse_cheak_select_24gdevice:
+0x4366 014447 fetch 1 ,mem_24g_device_number 
+0x4367 014448 store 1 ,mem_device_flag 
+0x4368 014449 rtn 
+:      014450 mouse_select1_device:
+0x4369 014451 fetcht 1 ,mem_config_select_device_button_gpio 
+0x436a 014452 nbranch mouse_ready_reconnection_by_button ,true 
+0x436b 014453 rtn 
+:      014454 mouse_select2_device:
+0x436c 014455 fetcht 1 ,mem_config_select_device_button_gpio 
+0x436d 014456 call gpio_get_bit 
+0x436e 014457 branch mouse_select_device_button_down ,true 
+0x436f 014458 rtn 
+:      014463 mouse_ready_reconnection_by_button:
+0x4370 014464 fetcht 1 ,mem_device_flag 
+0x4371 014465 increase 1 ,temp 
+0x4372 014466 fetch 1 ,mem_device_number 
+0x4373 014467 isub temp ,null 
+0x4374 014468 ncall mouse_select_device_count_clean ,positive 
+0x4375 014469 storet 1 ,mem_device_flag 
+0x4376 014470 jam 0 ,mem_link_key_exists 
+0x4377 014471 call mouse_store_device_number2eeprom 
+0x4378 014472 call mouse_select_device_enable 
+0x4379 014474 branch mouse_set_reconnection 
+:      014476 mouse_store_device_number2eeprom:
+0x437a 014477 arg 1 ,temp 
+0x437b 014478 arg mem_device_flag ,rega 
+0x437c 014479 arg 0 ,regb 
+0x437d 014480 branch iicd_write_eep_data 
+:      014482 mouse_set_reconnection:
+0x437e 014483 call mouse_stop_bluetooth_mode 
+0x437f 014484 call mouse_select_device_disable 
+0x4380 014485 branch mouse_soft_reset 
+:      014486 mouse_stop_bluetooth_mode:
+0x4381 014487 fetch 2 ,mem_ui_state_map 
+0x4382 014488 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect 
+0x4383 014489 bbit1 ui_state_ble_connected ,app_ble_disconnect 
+0x4384 014490 bbit1 ui_state_bt_connected ,app_bt_disconnect 
+0x4385 014491 branch mouse_stop_discovery 
+:      014493 mouse_disconnect:
+0x4386 014494 bpatch patch1d_5 ,mem_patch1d 
+0x4387 014495 setarg 0 
+0x4388 014496 store 2 ,mem_mouse_no_data_timer 
+0x4389 014497 fetch 2 ,mem_ui_state_map 
+0x438a 014498 bbit1 ui_state_ble_connected ,app_ble_disconnect 
+0x438b 014499 fetch 2 ,mem_ui_state_map 
+0x438c 014500 bbit1 ui_state_bt_connected ,app_bt_disconnect 
+0x438d 014501 rtn 
+:      014503 mouse_irtual_cable_unplug:
+0x438e 014504 setarg 0x01 
+0x438f 014505 store 6 ,mem_plap 
+0x4390 014506 jam rec_3_mode ,mem_record_bt_mode 
+0x4391 014507 branch mouse_unplug_clean_bdaddr 
+:      014510 mouse_cancel_reconnect:
+0x4392 014511 call mouse_bt_cannel_reconn_enable 
+0x4393 014512 branch check_51cmd_bb_reconn_cancel 
+:      014514 mouse_bt_discovery_by_button:
+0x4394 014515 fetch 1 ,mem_config_bt_button_gpio 
+0x4395 014516 rtneq gpio_disable 
+0x4396 014517 fetcht 1 ,mem_config_bt_button_gpio 
+0x4397 014518 call gpio_get_bit 
+0x4398 014519 branch mouse_bt_discovery_button_down ,true 
+:      014520 mouse_bt_discovery_button_up:
+0x4399 014521 fetch 1 ,mem_ui_button_timeout 
+0x439a 014522 store 1 ,mem_combination_ui_button_count 
+0x439b 014523 fetch 1 ,mem_bt_discovey_button_statue 
+0x439c 014524 rtneq dpi_button_state_up 
+0x439d 014525 jam dpi_button_state_up ,mem_bt_discovey_button_statue 
+0x439e 014526 branch mouse_bt_discovery_button_down_disable 
+:      014527 mouse_bt_discovery_button_down:
+0x439f 014528 call mouse_bt_discovry_timer 
+0x43a0 014529 fetch 1 ,mem_bt_discovey_button_statue 
+0x43a1 014530 rtneq dpi_button_state_down 
+0x43a2 014531 jam dpi_button_state_down ,mem_bt_discovey_button_statue 
+0x43a3 014532 call check_51cmd_bb_reconn_cancel 
+0x43a4 014533 branch mouse_bt_discovery_button_down_enable 
+:      014536 mouse_bt_discovery_cheak:
+0x43a5 014537 fetch 1 ,mem_config_function_enable 
+0x43a6 014538 bbit1 enable_bt_button ,mouse_bt_discovery_by_button 
+:      014539 mouse_bt_discovery_commbination_key:
+0x43a7 014540 call mouse_check_key_gpio 
+0x43a8 014541 beq mouse_lmr_button ,mouse_bt_discovery_commbination_key_down 
+:      014542 mouse_bt_discovery_commbination_key_up:
+0x43a9 014543 fetch 1 ,mem_ui_button_timeout 
+0x43aa 014544 store 1 ,mem_combination_ui_button_count 
+0x43ab 014545 fetch 1 ,mem_bt_discovey_button_statue 
+0x43ac 014546 rtneq dpi_button_state_up 
+0x43ad 014547 jam dpi_button_state_up ,mem_bt_discovey_button_statue 
+0x43ae 014548 branch mouse_bt_discovery_button_down_disable 
+:      014551 mouse_bt_discovery_commbination_key_down:
+0x43af 014552 call mouse_bt_discovry_timer 
+0x43b0 014553 fetch 1 ,mem_bt_discovey_button_statue 
+0x43b1 014554 rtneq dpi_button_state_down 
+0x43b2 014555 jam dpi_button_state_down ,mem_bt_discovey_button_statue 
+0x43b3 014556 call check_51cmd_bb_reconn_cancel 
+0x43b4 014557 branch mouse_bt_discovery_button_down_enable 
+:      014559 mouse_bt_discovry_timer:
+0x43b5 014560 arg mem_combination_ui_button_count ,regc 
+0x43b6 014561 arg mouse_long_button_bt_discovry ,regb 
+0x43b7 014562 branch timer_single_step 
+:      014564 mouse_long_button_bt_discovry:
+0x43b8 014565 arg mouse_long_bt_button_flag ,queue 
+0x43b9 014566 call mouse_enable_function_flag 
+0x43ba 014567 call app_evt_button_long_pressed 
+0x43bb 014568 branch mouse_bb_event_discovery_btn 
+:      014571 mouse_cpi_enable:
+0x43bc 014572 arg mouse_cpi_flag ,queue 
+0x43bd 014573 branch mouse_enable_function_flag 
+:      014574 mouse_cpi_disable:
+0x43be 014575 arg mouse_cpi_flag ,queue 
+0x43bf 014576 branch mouse_disable_function_flag 
+:      014577 mouse_select_device_enable:
+0x43c0 014578 arg mouse_select_device_flag ,queue 
+0x43c1 014579 branch mouse_enable_function_flag 
+:      014580 mouse_select_device_disable:
+0x43c2 014581 arg mouse_select_device_flag ,queue 
+0x43c3 014582 branch mouse_disable_function_flag 
+:      014583 mouse_bt_cannel_reconn_enable:
+0x43c4 014584 arg mouse_bt_cannel_reconn_flag ,queue 
+0x43c5 014585 branch mouse_enable_function_flag 
+:      014586 mouse_bt_cannel_reconn_disable:
+0x43c6 014587 arg mouse_bt_cannel_reconn_flag ,queue 
+0x43c7 014588 branch mouse_disable_function_flag 
+:      014589 mouse_bt_discovery_button_down_enable:
+0x43c8 014590 arg mouse_bt_discovery_button_down_flag ,queue 
+0x43c9 014591 branch mouse_enable_function_flag 
+:      014592 mouse_bt_discovery_button_down_disable:
+0x43ca 014593 arg mouse_bt_discovery_button_down_flag ,queue 
+0x43cb 014594 branch mouse_disable_function_flag 
+:      014598 mouse_select_device_count_clean:
+0x43cc 014599 arg 1 ,temp 
+0x43cd 014600 rtn 
+:      014602 mouse_enable_function_flag:
+0x43ce 014603 fetch mouse_flag_len ,mem_mouse_flag 
+0x43cf 014604 qset1 pdata 
+0x43d0 014605 store mouse_flag_len ,mem_mouse_flag 
+0x43d1 014606 rtn 
+:      014608 mouse_disable_function_flag:
+0x43d2 014609 fetch mouse_flag_len ,mem_mouse_flag 
+0x43d3 014610 qset0 pdata 
+0x43d4 014611 store mouse_flag_len ,mem_mouse_flag 
+0x43d5 014612 rtn 
+:      014614 mouse_adc_read:
+0x43d6 014615 fetch mouse_flag_len ,mem_mouse_flag 
+0x43d7 014616 rtnbit0 mouse_enable_adc 
+0x43d8 014617 fetch 1 ,mem_adc_read_timer 
+0x43d9 014618 increase 1 ,pdata 
+0x43da 014619 store 1 ,mem_adc_read_timer 
+0x43db 014620 sub pdata ,10 ,null 
+0x43dc 014621 rtn positive 
+0x43dd 014622 jam 0 ,mem_adc_read_timer 
+0x43de 014623 call adc_set_mode 
+0x43df 014624 call vdd_calculate_by_mode 
+0x43e0 014625 store 2 ,mem_mouse_vdd_now_vol 
+0x43e1 014626 arg mem_mouse_vdd_calculate_set ,rega 
+0x43e2 014627 call adc_bat_percent_lowpower_out 
+0x43e3 014628 fetch 1 ,mem_adc_power_flag 
+0x43e4 014629 bbit1 1 ,mouse_power_down 
+0x43e5 014630 bbit0 0 ,mouse_adc_no_low_voltage 
+0x43e6 014631 branch mouse_adc_low_voltage 
+:      014632 mouse_adc_low_voltage:
+0x43e7 014633 arg mouse_low_voltage_flag ,queue 
+0x43e8 014634 branch mouse_enable_function_flag 
+:      014635 mouse_adc_no_low_voltage:
+0x43e9 014636 arg mouse_low_voltage_flag ,queue 
+0x43ea 014637 branch mouse_disable_function_flag 
+:      014639 mouse_low_voltage_led_timer:
+0x43eb 014640 fetch mouse_flag_len ,mem_mouse_flag 
+0x43ec 014641 rtnbit0 mouse_low_voltage_flag 
+0x43ed 014642 fetch 1 ,mem_config_low_voltage_alarm_gpio 
+0x43ee 014643 store 1 ,mem_mouse_struct_led_gpio 
+0x43ef 014644 fetch 1 ,mem_adc_low_volatage_led_timer_count 
+0x43f0 014645 pincrease 1 
+0x43f1 014646 store 1 ,mem_adc_low_volatage_led_timer_count 
+0x43f2 014647 sub pdata ,20 ,null 
+0x43f3 014648 ncall mouse_adc_low_volatage_led_timer_count_clean ,positive 
+0x43f4 014649 beq 2 ,mouse_low_voltage_led_on 
+0x43f5 014650 beq 4 ,mouse_low_voltage_led_off 
+0x43f6 014651 beq 6 ,mouse_low_voltage_led_on 
+0x43f7 014652 beq 8 ,mouse_low_voltage_led_off 
+0x43f8 014653 rtn 
+:      014654 mouse_adc_low_volatage_led_timer_count_clean:
+0x43f9 014655 jam 1 ,mem_adc_low_volatage_led_timer_count 
+0x43fa 014656 branch mouse_low_voltage_led_off 
+:      014657 mouse_low_voltage_led_on:
+0x43fb 014658 arg 0 ,rega 
+0x43fc 014659 jam ui_led_state_lighting ,mem_mouse_led_type 
+0x43fd 014660 branch ui_led_on_global 
+:      014661 mouse_low_voltage_led_off:
+0x43fe 014662 arg 0 ,rega 
+0x43ff 014663 jam ui_led_state_lighting ,mem_mouse_led_type 
+0x4400 014664 branch ui_led_off_global 
+:      014666 mouse_g24_package_data:
+0x4401 014667 call mouse_motion 
+0x4402 014668 nrtn user 
+0x4403 014669 arg 7 ,rega 
+0x4404 014670 arg mem_mouse_key ,regb 
+0x4405 014671 rtn 
+:      014673 mouse_g24_enter_lpm:
+0x4406 014674 fetch 1 ,mem_mouse_24g_enter_lpm_enable 
+0x4407 014675 rtn blank 
+0x4408 014677 fetcht 1 ,mem_dpi_button_gpio 
+0x4409 014678 call gpio_get_bit 
+0x440a 014679 call mouse_24g_dpi_delay_init ,true 
+0x440b 014680 fetch 1 ,mem_24g_enter_lpm_timer 
+0x440c 014681 nrtn blank 
+0x440d 014682 call mouse_check_key_gpio 
+0x440e 014683 nrtn blank 
+0x440f 014684 branch g24_lpm_long_sleep 
+:      014686 mouse_24g_dpi_delay_init:
+0x4410 014687 fetch 1 ,mem_dpi_button_gpio 
+0x4411 014688 rtneq ui_button_gpio_disable 
+0x4412 014689 jam 10 ,mem_24g_enter_lpm_timer 
+0x4413 014690 rtn 
+:      014693 mouse_load_flash_info_cheak:
+0x4414 014694 call mouse_load_flash_flag 
+0x4415 014695 fetch 2 ,mem_store_flag 
+0x4416 014696 arg eeprom_init_flag ,temp 
+0x4417 014697 isub temp ,null 
+0x4418 014698 branch mouse_load_flash_device_info ,zero 
+0x4419 014699 storet 2 ,mem_store_flag 
+0x441a 014700 call mouse_ble_init_address 
+0x441b 014701 branch mouse_store_flash_device_info 
+:      014702 mouse_ble_init_address:
+0x441c 014703 fetch 6 ,mem_le_lap 
+0x441d 014704 store 6 ,mem_device1_locall_addr 
+0x441e 014705 add pdata ,0x0100 ,pdata 
+0x441f 014706 store 6 ,mem_device2_locall_addr 
+0x4420 014707 add pdata ,0x0100 ,pdata 
+0x4421 014708 store 6 ,mem_device3_locall_addr 
+0x4422 014709 rtn 
+:      014712 mouse_load_flash_flag:
+0x4423 014713 setarg mem_store_flag 
+0x4424 014714 arg mem_mouse_information_start ,temp 
+0x4425 014715 isub temp ,temp 
+0x4426 014716 fetch 3 ,mem_flash_base 
+0x4427 014717 iadd temp ,pdata 
+0x4428 014718 arg 2 ,temp 
+0x4429 014719 arg mem_store_flag ,rega 
+0x442a 014720 branch spid_read_flash 
+:      014723 mouse_load_flash_device_info:
+0x442b 014724 setarg mem_mouse_information_end 
+0x442c 014725 arg mem_mouse_information_start ,temp 
+0x442d 014726 isub temp ,temp 
+0x442e 014727 fetch 3 ,mem_flash_base 
+0x442f 014728 arg mem_mouse_information_start ,rega 
+0x4430 014729 call spid_read_flash 
+0x4431 014730 call mouse_select_reconn_device 
+0x4432 014731 fetch 4 ,mem_mouse_24g_addr 
+0x4433 014732 call g24_head_ptr2regc 
+0x4434 014733 branch g24_store_mem_addr 
+:      014735 mouse_store_flash_device_info:
+0x4435 014736 setarg mem_mouse_information_end 
+0x4436 014737 arg mem_mouse_information_start ,temp 
+0x4437 014738 isub temp ,temp 
+0x4438 014739 arg mem_mouse_information_start ,rega 
+0x4439 014740 fetch 3 ,mem_flash_base 
+0x443a 014741 branch flash_write 
+:      014743 mouse_store_eerpom_dpi:
+0x443b 014744 arg 1 ,temp 
+0x443c 014745 arg mem_mouse_dpi ,rega 
+0x443d 014746 arg mouse_dpi_eeprom_offect ,regb 
+0x443e 014747 branch iicd_write_protect_eep_data 
+:      014749 mouse_load_eeprom_dpi:
+0x443f 014750 arg 1 ,temp 
+0x4440 014751 arg mem_mouse_dpi ,rega 
+0x4441 014752 arg mouse_dpi_eeprom_offect ,regb 
+0x4442 014753 branch iicd_read_eep_data 
+:      014755 mouse_statue_cheak_timer:
+0x4443 014756 rtnmark1 mark_24g 
+0x4444 014757 fetch mouse_flag_len ,mem_mouse_flag 
+0x4445 014758 rtnbit0 mouse_enable_statue_up 
+0x4446 014759 fetch 1 ,mem_mouse_1step_up_count 
+0x4447 014760 pincrease 1 
+0x4448 014761 and pdata ,0x07 ,pdata 
+0x4449 014762 store 1 ,mem_mouse_1step_up_count 
+0x444a 014763 rtnne 0x07 
+0x444b 014764 fetch 2 ,mem_ui_state_map 
+0x444c 014765 bbit1 ui_state_bt_connected ,mouse_check_statue_up 
+0x444d 014766 bbit1 ui_state_ble_connected ,mouse_check_statue_up 
+0x444e 014767 rtn 
+:      014772 mouse_check_statue_up:
+0x444f 014773 bpatch patch1d_6 ,mem_patch1d 
+0x4450 014774 fetch 1 ,mem_mouse_2step_up_count 
+0x4451 014775 nrtn blank 
+0x4452 014776 fetch mouse_flag_len ,mem_mouse_flag 
+0x4453 014777 rtnbit0 mouse_statue_up_flag 
+0x4454 014778 fetch 1 ,mem_sensor_squal_reg 
+0x4455 014779 call sensor_read 
+0x4456 014780 store 1 ,mem_sensor_iqc 
+0x4457 014781 sub pdata ,0x10 ,null 
+0x4458 014782 branch mouse_statue_up_timer_init ,positive 
+0x4459 014783 jam 0 ,mem_mouse_2step_up_count 
+0x445a 014784 rtn 
+:      014786 mouse_statue_up_timer_init:
+0x445b 014787 jam 30 ,mem_mouse_2step_up_count 
+0x445c 014788 rtn 
+:      014789 mouse_statue_up_timer:
+0x445d 014790 arg mem_mouse_2step_up_count ,regc 
+0x445e 014791 arg mouse_statue_up ,regb 
+0x445f 014792 branch timer_single_step 
+:      014794 mouse_statue_up:
+0x4460 014795 fetch 1 ,mem_sensor_squal_reg 
+0x4461 014796 call twspi_read 
+0x4462 014797 sub pdata ,0x10 ,null 
+0x4463 014798 nrtn positive 
+0x4464 014799 fetch mouse_flag_len ,mem_mouse_flag 
+0x4465 014800 rtnbit0 mouse_statue_up_flag 
+0x4466 014801 arg mouse_statue_up_flag ,queue 
+0x4467 014802 call mouse_disable_function_flag 
+0x4468 014803 jam 0 ,mem_lpm_mult 
+0x4469 014804 jam 30 ,mem_mouse_statue_led_timer 
+0x446a 014805 call mouse_devce_led_off 
+0x446b 014806 fetch mouse_flag_len ,mem_mouse_flag 
+0x446c 014807 bbit1 mouse_enable_statue_up_three_led ,mouse_three_device_statue_up 
+:      014808 mouse_two_device_statue_up:
+0x446d 014809 fetch 1 ,mem_device_flag 
+0x446e 014810 beq mode_bt_device1 ,mouse_device1_led_on 
+0x446f 014811 beq mode_bt_device2 ,mouse_device_blink_led_init 
+0x4470 014812 rtn 
+:      014813 mouse_three_device_statue_up:
+0x4471 014814 fetch 1 ,mem_device_flag 
+0x4472 014815 beq mode_bt_device1 ,mouse_device1_led_on 
+0x4473 014816 beq mode_bt_device2 ,mouse_device2_led_on 
+0x4474 014817 beq mode_bt_device3 ,mouse_device3_led_on 
+0x4475 014818 rtn 
+:      014820 mouse_device_blink_led_init:
+0x4476 014821 fetch 1 ,mem_config_device1_led_gpio 
+0x4477 014822 branch mouse_led_blink 
+:      014826 mouse_statue_led_off:
+0x4478 014827 jam 0x20 ,mem_lpm_mult 
+0x4479 014828 branch mouse_devce_led_off 
+:      014832 mouse_devce1_led_off:
+0x447a 014833 fetch 1 ,mem_config_device1_led_gpio 
+0x447b 014834 rtneq gpio_disable 
+0x447c 014835 store 1 ,mem_mouse_struct_led_gpio 
+0x447d 014836 branch mouse_led_off 
+:      014838 mouse_devce2_led_off:
+0x447e 014839 fetch 1 ,mem_config_device2_led_gpio 
+0x447f 014840 rtneq gpio_disable 
+0x4480 014841 store 1 ,mem_mouse_struct_led_gpio 
+0x4481 014842 branch mouse_led_off 
+:      014844 mouse_devce_led_off:
+0x4482 014845 call mouse_led_off 
+0x4483 014846 call mouse_devce1_led_off 
+0x4484 014847 call mouse_devce2_led_off 
+:      014848 mouse_devce3_led_off:
+0x4485 014849 fetch 1 ,mem_config_device3_led_gpio 
+0x4486 014850 rtneq gpio_disable 
+0x4487 014851 store 1 ,mem_mouse_struct_led_gpio 
+0x4488 014852 branch mouse_led_off 
+:      014854 mouse_device1_led_on:
+0x4489 014855 fetch 1 ,mem_config_device1_led_gpio 
+0x448a 014856 store 1 ,mem_mouse_struct_led_gpio 
+0x448b 014857 branch mouse_led_on 
+:      014858 mouse_device2_led_on:
+0x448c 014859 fetch 1 ,mem_config_device2_led_gpio 
+0x448d 014860 store 1 ,mem_mouse_struct_led_gpio 
+0x448e 014861 branch mouse_led_on 
+:      014862 mouse_device3_led_on:
+0x448f 014863 fetch 1 ,mem_config_device3_led_gpio 
+0x4490 014864 store 1 ,mem_mouse_struct_led_gpio 
+0x4491 014865 branch mouse_led_on 
+:      014869 mouse_polling_device:
+0x4492 014870 bpatch patch1d_7 ,mem_patch1d 
+0x4493 014871 fetch 1 ,mem_reconn_times 
+0x4494 014872 increase -1 ,pdata 
+0x4495 014873 store 1 ,mem_reconn_times 
+0x4496 014874 fetcht 1 ,mem_device_flag 
+0x4497 014875 increase 1 ,temp 
+0x4498 014876 fetch 1 ,mem_device_number 
+0x4499 014877 isub temp ,null 
+0x449a 014878 ncall mouse_select_device_count_clean ,positive 
+0x449b 014879 storet 1 ,mem_device_flag 
+0x449c 014880 jam 0 ,mem_link_key_exists 
+0x449d 014881 call mouse_store_device_number2eeprom 
+0x449e 014882 call mouse_before_store_reconn_info 
+0x449f 014883 branch mouse_check_reconn_target 
+:      014885 mouse_power_down:
+0x44a0 014886 call mouse_devce_led_off 
+0x44a1 014887 setarg 0 
+0x44a2 014888 store 8 ,mem_gpio_wakeup_low 
+0x44a3 014889 branch lpm_hibernate 
+:      014900 remote_car_init:
+0x44a4 014901 rtn wake 
+0x44a5 014902 hfetch 1 ,core_gpio_sel1 
+0x44a6 014903 and_into 0xf0 ,pdata 
+0x44a7 014904 hstore 1 ,core_gpio_sel1 
+0x44a8 014905 call keyscan_key_init 
+0x44a9 014906 setarg remote_car_le_before_hibernate 
+0x44aa 014907 store 2 ,mem_cb_before_hibernate 
+0x44ab 014909 setarg remote_car_process_lpm_before 
+0x44ac 014910 store 2 ,mem_cb_before_lpm 
+0x44ad 014912 setarg remote_car_scale_process_idle 
+0x44ae 014913 store 2 ,mem_cb_idle_process 
+0x44af 014915 setarg remote_car_scale_process_bb_event 
+0x44b0 014916 store 2 ,mem_cb_bb_event_process 
+0x44b1 014918 setarg app_get_lpm_wake_lock 
+0x44b2 014919 store 2 ,mem_cb_check_wakelock 
+0x44b3 014921 call g24_head_ptr2regc 
+0x44b4 014922 setarg remote_car_g24_package_data 
+0x44b5 014923 add regc ,offset_24g_cb_data ,contw 
+0x44b6 014924 istore 2 ,contw 
+0x44b7 014926 setarg remote_car_g24_enter_lpm 
+0x44b8 014927 add regc ,offset_24g_cb_lpm_prepare ,contw 
+0x44b9 014928 istore 2 ,contw 
+0x44ba 014930 setarg remote_car_process_lpm_before 
+0x44bb 014931 add regc ,offset_24g_cb_lpm_before ,contw 
+0x44bc 014932 istore 2 ,contw 
+0x44bd 014934 setarg remote_car_event_timer 
+0x44be 014935 store 2 ,mem_cb_event_timer 
+0x44bf 014937 setarg remote_car_power_off_signal 
+0x44c0 014938 store 2 ,mem_remote_car_power_off_cb 
+0x44c1 014940 setarg remote_car_soft_switch_power_on_signal 
+0x44c2 014941 store 2 ,mem_remote_car_power_standby_cb 
+0x44c3 014943 setarg remote_car_send_key_data 
+0x44c4 014944 store 2 ,mem_cb_remote_car_keyscan 
+0x44c5 014946 bpatch patch1e_0 ,mem_patch1e 
+0x44c6 014947 call remote_car_init_environment 
+0x44c7 014948 call queue_init 
+0x44c8 014949 jam 2 ,mem_lpm_mult 
+0x44c9 014950 fetch 1 ,mem_remote_car_config_soft_switch_enable 
+0x44ca 014951 store 1 ,mem_remote_car_hard_soft_switch 
+0x44cb 014952 beq hard_switch ,remote_car_hard_switch_power_on_signal 
+0x44cc 014953 fetch 1 ,mem_remote_car_config_soft_switch_gpio 
+0x44cd 014954 store 1 ,mem_ui_button_gpio 
+:      014955 remote_car_soft_switch_power_on_init:
+0x44ce 014956 call remote_car_ui_led_init 
+0x44cf 014957 call ui_button_init 
+0x44d0 014958 call ui_button_polling 
+0x44d1 014959 jam power_starting ,mem_remote_car_power_state 
+0x44d2 014960 fetch 2 ,mem_ui_state_map 
+0x44d3 014961 rtnbit1 ui_state_btn_down 
+0x44d4 014962 branch app_enter_hibernate 
+:      014966 remote_car_hard_switch_power_on_signal:
+0x44d5 014967 jam power_standby ,mem_remote_car_power_state 
+:      014968 remote_car_soft_switch_power_on_signal:
+0x44d6 014969 call remote_car_ui_led_init 
+0x44d7 014971 arg 0 ,rega 
+0x44d8 014972 call ui_led_blink_start_global 
+:      014973 remote_car_connect_24g_mode:
+0x44d9 014974 branch g24_auto_pair_start 
+:      014976 remote_car_power_off_signal:
+0x44da 014977 branch remote_car_ui_led_init 
+:      014979 remote_car_ui_led_init:
+0x44db 014980 bpatch patch1e_1 ,mem_patch1e 
+0x44dc 014981 fetch 1 ,mem_remote_car_config_connect_led_gpio 
+0x44dd 014982 bne invalid_pin_num ,remote_car_pairing_led_gpio_set 
+:      014983 remote_car_ui_led_init_1:
+0x44de 014984 fetcht 1 ,mem_remote_car_led_map 
+0x44df 014985 branch gpio_config_output 
+:      014986 remote_car_pairing_led_gpio_set:
+0x44e0 014987 store 1 ,mem_remote_car_led_map 
+0x44e1 014988 branch remote_car_ui_led_init_1 
+:      014991 remote_car_init_environment:
+0x44e2 014992 call g24_set_device_addr 
+0x44e3 014993 fetch 2 ,mem_remote_car_no_data_timeout 
+0x44e4 014994 store 2 ,mem_remote_car_no_data_timer 
+0x44e5 014995 branch remote_car_get_adc_default_data 
+:      014997 remote_car_le_before_hibernate:
+:      015002 remote_car_in_enter_hibernate:
+0x44e6 015003 call gpio_set_before_lpm_common 
+0x44e7 015004 call remote_car_process_lpm_before 
+0x44e8 015005 branch app_enter_hibernate 
+:      015007 remote_car_process_lpm_before:
+0x44e9 015008 branch keyscan_process_lpm_before 
+:      015010 remote_car_g24_enter_lpm:
+0x44ea 015011 fetch 1 ,mem_remote_car_24g_enter_lpm_enable 
+0x44eb 015012 rtn blank 
+0x44ec 015014 branch g24_lpm_long_sleep 
+:      015016 remote_car_process_auto_pair_exit:
+0x44ed 015017 rtn 
+:      015019 remote_car_key_scan_process:
+0x44ee 015020 branch keyscan_key_process 
+:      015022 remote_car_scale_process_idle:
+0x44ef 015023 call remote_car_rocker_process 
+0x44f0 015024 call remote_car_24g_status_process 
+0x44f1 015025 branch remote_car_key_scan_process 
+:      015027 remote_car_scale_process_bb_event:
+0x44f2 015028 copy regc ,pdata 
+0x44f3 015029 beq bt_evt_button_up ,app_event_button_up 
+0x44f4 015030 beq bt_evt_button_long_pressed ,app_button_long_pressed 
+0x44f5 015031 beq bt_evt_24g_pairing_complete ,remote_car_24g_pairing_complete 
+0x44f6 015032 beq bt_evt_24g_attempt_success ,remote_car_24g_attempt_success 
+0x44f7 015033 beq bt_evt_24g_attempt_fail ,remote_car_24g_attempt_fail 
+0x44f8 015034 rtn 
+:      015036 remote_car_24g_attempt_fail:
+0x44f9 015037 jam 1 ,mem_remote_car_24g_enter_lpm_enable 
+0x44fa 015038 rtn 
+:      015040 remote_car_24g_pairing_complete:
+0x44fb 015041 jam 1 ,mem_remote_car_24g_enter_lpm_enable 
+0x44fc 015042 jam work_paired ,mem_remote_car_24g_auto_work_step 
+0x44fd 015043 jam work_paired ,mem_remote_car_24g_pair_success_flag 
+0x44fe 015044 rtn 
+:      015046 remote_car_24g_attempt_success:
+0x44ff 015047 jam 1 ,mem_remote_car_24g_enter_lpm_enable 
+0x4500 015048 jam work_paired ,mem_remote_car_24g_auto_work_step 
+0x4501 015049 jam work_paired ,mem_remote_car_24g_pair_success_flag 
+0x4502 015050 rtn 
+:      015052 remote_car_24g_status_process:
+0x4503 015053 fetch 1 ,mem_remote_car_24g_auto_work_step 
+0x4504 015054 rtneq power_on 
+0x4505 015055 fetch 1 ,mem_remote_car_24g_status 
+0x4506 015056 rtneq work_paired 
+0x4507 015057 jam work_paired ,mem_remote_car_24g_status 
+:      015058 remote_car_scale_process_paired:
+0x4508 015059 arg 0 ,rega 
+0x4509 015060 branch ui_led_off_global 
+:      015061 remote_car_scale_process_shutdown:
+0x450a 015062 arg 0 ,rega 
+0x450b 015063 call ui_led_off_global 
+0x450c 015064 call remote_car_ui_led_init 
+0x450d 015065 branch app_enter_hibernate 
+:      015067 remote_car_event_timer:
+0x450e 015068 call app_power_timer 
+0x450f 015069 branch remote_car_no_data_timer 
+:      015071 remote_car_no_data_timer:
+0x4510 015072 fetch 1 ,mem_remote_car_config_timeout_shutdown_enable 
+0x4511 015073 rtn blank 
+0x4512 015074 arg mem_remote_car_no_data_timer ,regc 
+0x4513 015075 arg remote_car_scale_process_shutdown ,regb 
+0x4514 015076 branch timer_single_step_2b 
+:      015079 remote_car_get_adc_default_data:
+0x4515 015080 call remote_car_rocker_get_x 
+0x4516 015081 storet 2 ,mem_current_vdd_value_default_mid_x 
+0x4517 015082 call remote_car_rocker_get_y 
+0x4518 015083 storet 2 ,mem_current_vdd_value_default_mid_y 
+0x4519 015084 rtn 
+:      015085 remote_car_rocker_data_get:
+:      015086 remote_car_rocker_get_x:
+0x451a 015087 fetch 2 ,mem_current_vdd_value_default_mid_x 
+0x451b 015088 store 2 ,mem_current_vdd_value_default_mid_temp 
+0x451c 015089 call remote_car_get_adc_from_gpio6 
+0x451d 015090 call remote_car_rocker_get_value 
+0x451e 015091 store 1 ,mem_rocker_status 
+:      015092 remote_car_rocker_get_y:
+0x451f 015093 fetch 2 ,mem_current_vdd_value_default_mid_y 
+0x4520 015094 store 2 ,mem_current_vdd_value_default_mid_temp 
+0x4521 015095 call remote_car_get_adc_from_gpio7 
+0x4522 015096 call remote_car_rocker_get_value 
+0x4523 015097 store 1 ,mem_rocker_status + 1 
+0x4524 015098 rtn 
+:      015099 remote_car_rocker_get_value:
+0x4525 015100 fetch 2 ,mem_current_vdd_default_range 
+0x4526 015101 copy pdata ,rega 
+0x4527 015102 fetch 2 ,mem_current_vdd_value_default_mid_temp 
+0x4528 015103 call remote_car_rocker_mid_value_adjust 
+0x4529 015104 fetch 1 ,mem_rocker_work_status 
+0x452a 015105 nbranch remote_car_rocker_translate_key ,blank 
+0x452b 015106 nrtn positive 
+0x452c 015107 fetcht 2 ,mem_current_vdd_value_default_mid_temp 
+0x452d 015108 rtn 
+:      015109 remote_car_rocker_mid_value_adjust:
+0x452e 015110 isub temp ,pdata 
+0x452f 015111 branch remote_car_rocker_mid_adjust_positive ,positive 
+0x4530 015112 sub pdata ,0 ,pdata 
+0x4531 015113 jam 1 ,mem_rocker_negative_flag 
+0x4532 015114 isub rega ,null 
+0x4533 015115 rtn 
+:      015116 remote_car_rocker_mid_adjust_positive:
+0x4534 015117 jam 0 ,mem_rocker_negative_flag 
+0x4535 015118 isub rega ,null 
+0x4536 015119 rtn 
+:      015120 remote_car_rocker_translate_key:
+0x4537 015121 nbranch remote_car_rocker_middle_key ,positive 
+0x4538 015122 fetch 1 ,mem_rocker_negative_flag 
+0x4539 015123 nbranch remote_car_rocker_negative_key ,blank 
+:      015124 remote_car_rocker_positive_key:
+0x453a 015125 setarg rocker_positive_key 
+0x453b 015126 rtn 
+:      015127 remote_car_rocker_negative_key:
+0x453c 015128 setarg rocker_negative_key 
+0x453d 015129 rtn 
+:      015130 remote_car_rocker_middle_key:
+0x453e 015131 setarg rocker_middle_key 
+0x453f 015132 rtn 
+:      015133 remote_car_get_adc_from_gpio6:
+0x4540 015134 jam 0x33 ,mem_adc_channel 
+0x4541 015135 branch adc_set_mode 
+:      015136 remote_car_get_adc_from_gpio7:
+0x4542 015137 jam 0x34 ,mem_adc_channel 
+0x4543 015138 branch adc_set_mode 
+:      015141 remote_car_rocker_process:
+0x4544 015142 fetch 1 ,mem_remote_car_config_check_way 
+0x4545 015143 rtnne car_remote_check_rocker 
+:      015144 remote_car_read_rocker_check_start:
+0x4546 015145 bpatch patch1e_2 ,mem_patch1e 
+0x4547 015146 jam 1 ,mem_rocker_work_status 
+0x4548 015147 call remote_car_rocker_data_get 
+0x4549 015148 fetch 2 ,mem_rocker_status 
+0x454a 015149 fetcht 2 ,mem_rocker_last_status 
+0x454b 015150 isub temp ,null 
+0x454c 015151 rtn zero 
+0x454d 015152 store 2 ,mem_rocker_last_status 
+0x454e 015153 call remote_car_rocker_x_to_key 
+0x454f 015154 branch remote_car_rocker_y_to_key 
+:      015156 remote_car_rocker_x_to_key:
+0x4550 015157 fetch 1 ,mem_rocker_x_status 
+0x4551 015158 branch rocker_to_queue_set_0 ,blank 
+0x4552 015159 increase -1 ,pdata 
+0x4553 015160 branch remote_car_rocker_to_key 
+:      015161 remote_car_rocker_y_to_key:
+0x4554 015162 fetch 1 ,mem_rocker_y_status 
+0x4555 015163 branch rocker_to_queue_set_2 ,blank 
+0x4556 015164 increase 1 ,pdata 
+:      015165 remote_car_rocker_to_key:
+0x4557 015166 copy pdata ,queue 
+0x4558 015167 arg 1 ,rega 
+0x4559 015168 branch remote_car_send_key_data 
+:      015170 rocker_to_queue_set_0:
+0x455a 015171 arg 0 ,queue 
+0x455b 015172 arg 0 ,rega 
+0x455c 015173 branch remote_car_send_key_data 
+:      015174 rocker_to_queue_set_2:
+0x455d 015175 arg 2 ,queue 
+0x455e 015176 arg 0 ,rega 
+0x455f 015177 branch remote_car_send_key_data 
+:      015179 remote_car_send_key_data:
+0x4560 015180 copy rega ,pdata 
+0x4561 015181 store 1 ,mem_remote_key_status 
+0x4562 015182 fetch 1 ,mem_remote_car_24g_auto_work_step 
+0x4563 015183 beq power_on ,g24_auto_pair_start 
+0x4564 015184 fetch 2 ,mem_remote_car_no_data_timeout 
+0x4565 015185 store 2 ,mem_remote_car_no_data_timer 
+0x4566 015186 fetch 1 ,mem_remote_key_status 
+0x4567 015187 branch remote_car_key_is_release ,blank 
+:      015188 remote_car_key_is_press:
+0x4568 015189 bpatch patch1e_3 ,mem_patch1e 
+0x4569 015190 arg 0 ,rega 
+0x456a 015191 call ui_led_on_global 
+:      015192 remote_car_attack_key_press:
+0x456b 015193 copy queue ,pdata 
+0x456c 015194 beq 4 ,remote_car_send_attack_key4_press 
+0x456d 015195 beq 5 ,remote_car_send_attack_key5_press 
+0x456e 015196 beq 6 ,remote_car_send_fire_key6_press 
+:      015199 remote_car_motor_key_press:
+0x456f 015200 call remote_car_device_layout_select 
+0x4570 015201 beq control_f_b_ten ,remote_car_single_motor_key_is_press 
+0x4571 015202 beq control_l_r_ten ,remote_car_double_motor_key_press 
+0x4572 015203 beq control_l_r_lr ,remote_car_single_motor_key_is_press 
+0x4573 015204 rtn 
+:      015206 remote_car_single_motor_key_is_press:
+0x4574 015207 copy queue ,pdata 
+0x4575 015208 beq 0 ,remote_car_send_motor1_key0_press 
+0x4576 015209 beq 1 ,remote_car_send_motor1_key1_press 
+0x4577 015210 beq 2 ,remote_car_send_motor2_key2_press 
+0x4578 015211 beq 3 ,remote_car_send_motor2_key3_press 
+0x4579 015212 rtn 
+:      015214 remote_car_double_motor_key_press:
+0x457a 015215 copy queue ,pdata 
+0x457b 015216 beq 0 ,remote_car_send_double_motor_key0_press 
+0x457c 015217 beq 1 ,remote_car_send_double_motor_key1_press 
+0x457d 015218 beq 2 ,remote_car_send_double_motor_key2_press 
+0x457e 015219 beq 3 ,remote_car_send_double_motor_key3_press 
+0x457f 015220 rtn 
+:      015222 remote_car_key_is_release:
+0x4580 015223 bpatch patch1e_4 ,mem_patch1e 
+0x4581 015224 arg 0 ,rega 
+0x4582 015225 call ui_led_off_global 
+:      015226 remote_car_attack_key_release:
+0x4583 015227 copy queue ,pdata 
+0x4584 015228 beq 4 ,remote_car_send_attack_key4_rel 
+0x4585 015229 beq 5 ,remote_car_send_attack_key5_rel 
+:      015232 remote_car_motor_key_release:
+0x4586 015233 call remote_car_device_layout_select 
+0x4587 015234 beq control_f_b_ten ,remote_car_single_motor_key_rel 
+0x4588 015235 beq control_l_r_ten ,remote_car_double_motor_key_rel 
+0x4589 015236 beq control_l_r_lr ,remote_car_single_motor_key_rel 
+0x458a 015237 rtn 
+:      015239 remote_car_device_layout_select:
+0x458b 015240 fetch 1 ,mem_remote_car_config_layout 
+0x458c 015241 fetcht 1 ,mem_remote_car_config_key_map 
+0x458d 015242 ior temp ,pdata 
+0x458e 015243 rtn 
+:      015246 remote_car_send_motor1_key0_press:
+0x458f 015247 jam motor_positive ,mem_remote_car_24g_motor1_payload 
+0x4590 015248 branch remote_car_send_key 
+:      015249 remote_car_send_motor1_key1_press:
+0x4591 015250 jam motor_negative ,mem_remote_car_24g_motor1_payload 
+0x4592 015251 branch remote_car_send_key 
+:      015252 remote_car_send_motor2_key2_press:
+0x4593 015253 jam motor_positive ,mem_remote_car_24g_motor2_payload 
+0x4594 015254 branch remote_car_send_key 
+:      015255 remote_car_send_motor2_key3_press:
+0x4595 015256 jam motor_negative ,mem_remote_car_24g_motor2_payload 
+0x4596 015257 branch remote_car_send_key 
+:      015260 remote_car_send_double_motor_key0_press:
+0x4597 015261 jam motor_positive ,mem_remote_car_24g_motor1_payload 
+0x4598 015262 jam motor_positive ,mem_remote_car_24g_motor2_payload 
+0x4599 015263 branch remote_car_send_key 
+:      015264 remote_car_send_double_motor_key1_press:
+0x459a 015265 jam motor_negative ,mem_remote_car_24g_motor1_payload 
+0x459b 015266 jam motor_negative ,mem_remote_car_24g_motor2_payload 
+0x459c 015267 branch remote_car_send_key 
+:      015268 remote_car_send_double_motor_key2_press:
+0x459d 015269 jam motor_negative ,mem_remote_car_24g_motor1_payload 
+0x459e 015270 jam motor_positive ,mem_remote_car_24g_motor2_payload 
+0x459f 015271 branch remote_car_send_key 
+:      015272 remote_car_send_double_motor_key3_press:
+0x45a0 015273 jam motor_positive ,mem_remote_car_24g_motor1_payload 
+0x45a1 015274 jam motor_negative ,mem_remote_car_24g_motor2_payload 
+0x45a2 015275 branch remote_car_send_key 
+:      015278 remote_car_send_attack_key4_press:
+0x45a3 015279 jam motor_positive ,mem_remote_car_24g_motor3_payload 
+0x45a4 015280 branch remote_car_send_key 
+:      015281 remote_car_send_attack_key5_press:
+0x45a5 015282 jam motor_negative ,mem_remote_car_24g_motor3_payload 
+0x45a6 015283 branch remote_car_send_key 
+:      015285 remote_car_send_fire_key6_press:
+0x45a7 015286 jam 0x01 ,mem_remote_car_24g_fire_send_payload 
+0x45a8 015287 branch remote_car_send_attack 
+:      015289 remote_car_single_motor_key_rel:
+0x45a9 015290 copy queue ,pdata 
+0x45aa 015291 beq 0 ,remote_car_send_motor1_key0_rel 
+0x45ab 015292 beq 1 ,remote_car_send_motor1_key1_rel 
+0x45ac 015293 beq 2 ,remote_car_send_motor2_key2_rel 
+0x45ad 015294 beq 3 ,remote_car_send_motor2_key3_rel 
+0x45ae 015295 rtn 
+:      015297 remote_car_double_motor_key_rel:
+0x45af 015298 copy queue ,pdata 
+0x45b0 015299 beq 0 ,remote_car_send_double_motor_key0_rel 
+0x45b1 015300 beq 1 ,remote_car_send_double_motor_key1_rel 
+0x45b2 015301 beq 2 ,remote_car_send_double_motor_key2_rel 
+0x45b3 015302 beq 3 ,remote_car_send_double_motor_key3_rel 
+0x45b4 015303 rtn 
+:      015305 remote_car_send_motor1_key0_rel:
+:      015306 remote_car_send_motor1_key1_rel:
+0x45b5 015307 jam motor_stop ,mem_remote_car_24g_motor1_payload 
+0x45b6 015308 branch remote_car_send_key 
+:      015309 remote_car_send_motor2_key2_rel:
+:      015310 remote_car_send_motor2_key3_rel:
+0x45b7 015311 jam motor_stop ,mem_remote_car_24g_motor2_payload 
+0x45b8 015312 branch remote_car_send_key 
+:      015314 remote_car_send_double_motor_key0_rel:
+:      015315 remote_car_send_double_motor_key1_rel:
+:      015316 remote_car_send_double_motor_key2_rel:
+:      015317 remote_car_send_double_motor_key3_rel:
+0x45b9 015318 jam motor_stop ,mem_remote_car_24g_motor1_payload 
+0x45ba 015319 jam motor_stop ,mem_remote_car_24g_motor2_payload 
+0x45bb 015320 branch remote_car_send_key 
+:      015322 remote_car_send_attack_key4_rel:
+:      015323 remote_car_send_attack_key5_rel:
+0x45bc 015324 jam motor_stop ,mem_remote_car_24g_motor3_payload 
+0x45bd 015325 branch remote_car_send_key 
+:      015327 remote_car_send_key:
+0x45be 015328 arg mem_remote_car_24g_motor_packet ,rega 
+0x45bf 015329 branch queue_push 
+:      015330 remote_car_send_attack:
+0x45c0 015331 arg mem_remote_car_24g_fire_packet ,rega 
+0x45c1 015332 branch queue_push 
+:      015334 remote_car_g24_package_data:
+0x45c2 015335 fetch 1 ,mem_remote_car_24g_pair_success_flag 
+0x45c3 015336 beq work_paired ,remote_car_g24_send_empty 
+0x45c4 015337 arg mem_remote_car_24g_tx_temp ,rega 
+0x45c5 015338 call queue_pop 
+0x45c6 015339 nbranch remote_car_moto_data ,user 
+:      015340 remote_car_g24_package_data_continue:
+0x45c7 015341 arg mem_remote_car_24g_tx_temp ,contr 
+0x45c8 015342 ifetch 1 ,contr 
+0x45c9 015343 copy pdata ,rega 
+0x45ca 015344 arg mem_remote_car_24g_tx_temp + 1 ,regb 
+0x45cb 015347 rtn 
+:      015349 remote_car_g24_send_empty:
+0x45cc 015350 jam 0 ,mem_remote_car_24g_pair_success_flag 
+0x45cd 015351 enable user 
+0x45ce 015352 arg 1 ,rega 
+0x45cf 015353 arg mem_remote_car_empty_packet ,regb 
+0x45d0 015354 rtn 
+:      015356 remote_car_moto_data:
+0x45d1 015357 fetch 1 ,mem_remote_car_24g_tx_temp + 3 
+0x45d2 015358 beq car_cmd_l_r_motor_control ,remote_car_moto_data_next 
+0x45d3 015359 beq car_cmd_f_b_motor_control ,remote_car_moto_data_next 
+0x45d4 015360 rtn 
+:      015361 remote_car_moto_data_next:
+0x45d5 015362 fetch 1 ,mem_remote_car_24g_tx_temp + 6 
+0x45d6 015363 nbranch remote_car_moto_data_enable_user ,blank 
+0x45d7 015364 fetch 1 ,mem_remote_car_24g_tx_temp + 8 
+0x45d8 015365 nbranch remote_car_moto_data_enable_user ,blank 
+0x45d9 015366 fetch 1 ,mem_remote_car_24g_tx_temp + 10 
+0x45da 015367 nbranch remote_car_moto_data_enable_user ,blank 
+0x45db 015368 rtn 
+:      015369 remote_car_moto_data_enable_user:
+0x45dc 015370 enable user 
+0x45dd 015371 branch remote_car_g24_package_data_continue 
+:      015379 shutter_init:
+0x45de 015380 rtn wake 
+0x45df 015381 hfetch 1 ,core_gpio_sel1 
+0x45e0 015382 and_into 0xfc ,pdata 
+0x45e1 015383 hstore 1 ,core_gpio_sel1 
+0x45e2 015384 setarg shutter_le_before_hibernate 
+0x45e3 015385 store 2 ,mem_cb_before_hibernate 
+0x45e4 015387 setarg shutter_process_lpm_before 
+0x45e5 015388 store 2 ,mem_cb_before_lpm 
+0x45e6 015390 setarg app_enter_hibernate 
+0x45e7 015391 store 2 ,mem_cb_discovry_timeout 
+0x45e8 015393 setarg shutter_process_idle 
+0x45e9 015394 store 2 ,mem_cb_idle_process 
+0x45ea 015396 setarg shutter_process_bb_event 
+0x45eb 015397 store 2 ,mem_cb_bb_event_process 
+0x45ec 015399 setarg shutter_le_scale_lpm_lock 
+0x45ed 015400 store 2 ,mem_cb_check_wakelock 
+0x45ee 015402 setarg ble_shutter_receive_data 
+0x45ef 015403 store 2 ,mem_cb_att_write 
+0x45f0 015405 setarg shutter_le_bb_event_timer 
+0x45f1 015406 store 2 ,mem_cb_event_timer 
+0x45f2 015408 setarg shutter_key_change 
+0x45f3 015409 store 2 ,mem_cb_shutter_keycan 
+0x45f4 015411 setarg shutter_soft_swtich_power_on 
+0x45f5 015412 store 2 ,mem_shutter_soft_switch_poweron_callback_function 
+0x45f6 015413 setarg shutter_soft_swtich_power_off 
+0x45f7 015414 store 2 ,mem_shutter_soft_switch_poweroff_callback_function 
+0x45f8 015416 call le_modified_name 
+0x45f9 015417 call shutter_load_bluetooth_config_by_user_config 
+0x45fa 015418 call shutter_init_bluetooth_config 
+0x45fb 015419 call shutter_init_param 
+0x45fc 015420 call keyscan_key_init 
+0x45fd 015421 call shutter_load_buffer_config_form_datarom 
+0x45fe 015422 call queue_init 
+0x45ff 015423 call ui_led_init_global 
+0x4600 015424 call shutter_load_bluetooth_config 
+0x4601 015425 call shutter_load_bluetooth_config_by_eeprom 
+0x4602 015427 bpatch patch1e_5 ,mem_patch1e 
+0x4603 015428 call classic_shutter_load_reconn_info 
+0x4604 015429 fetch 1 ,mem_shutter_hard_soft_switch_case 
+0x4605 015430 beq hard_switch ,shutter_hart_swtich_power_on 
+0x4606 015431 fetch 1 ,mem_shutter_soft_switch_button_gpio 
+0x4607 015432 store 1 ,mem_ui_button_gpio 
+0x4608 015433 branch ui_soft_swtich_init 
+:      015436 shutter_hart_swtich_power_on:
+0x4609 015437 jam ui_button_gpio_disable ,mem_ui_button_gpio 
+0x460a 015438 jam ss_state_power_on ,mem_shutter_soft_switch_power_state 
+0x460b 015439 branch shutter_start_reconnect 
+:      015443 shutter_le_scale_lpm_lock:
+0x460c 015444 fetch 1 ,mem_shutter_soft_switch_power_state 
+0x460d 015445 beq ss_state_power_off ,app_get_lpm_wake_lock 
+0x460e 015446 call l2cap_malloc_get_full_map 
+0x460f 015447 fetch 1 ,mem_used_map 
+0x4610 015448 nbranch app_get_lpm_wake_lock ,blank 
+0x4611 015449 branch app_put_lpm_wake_lock 
+:      015453 shutter_process_bb_event:
+0x4612 015454 copy regc ,pdata 
+0x4613 015456 beq bt_evt_bb_connected ,classic_shutter_process_baseband_connect 
+0x4614 015457 beq bt_evt_bb_disconnected ,classic_shutter_process_baseband_disconnect 
+0x4615 015458 beq bt_evt_reconn_failed ,classic_shutter_process_reconnect_failed 
+0x4616 015459 beq bt_evt_setup_complete ,classic_shutter_process_setup_complete 
+0x4617 015460 beq bt_evt_hid_connected ,classic_shutter_process_hid_connect 
+0x4618 015461 beq bt_evt_hid_disconnected ,classic_shutter_process_hid_disconnect 
+0x4619 015462 beq bt_evt_hid_handshake ,classic_shutter_process_hid_handshake 
+0x461a 015463 beq bt_evt_reconn_page_timeout ,classic_shutter_process_reconnect_page_timeout 
+0x461b 015464 beq bt_evt_virtual_cable_unplug ,classic_shutter_process_virtual_cable_unplug 
+0x461c 015465 beq bt_evt_remote_unsniff ,classic_shutter_process_remote_unsniff 
+0x461d 015466 beq bt_evt_store_nvram ,classic_shutter_process_store_reconnect_information 
+0x461e 015468 beq bt_evt_le_connected ,ble_shutter_process_baseband_connect 
+0x461f 015469 beq bt_evt_le_disconnected ,ble_shutter_process_baseband_disconnect 
+0x4620 015470 beq bt_evt_le_reconnect_complete ,ble_shutter_process_reconnect_complete 
+0x4621 015471 beq bt_evt_le_parse_conn_papa_update_rsp ,ble_shutter_process_parse_connect_parameter_update_response 
+0x4622 015473 beq bt_evt_button_long_pressed ,shutter_process_soft_swtich_button_long_press 
+0x4623 015474 beq bt_evt_button_down ,shutter_process_soft_swtich_button_down 
+0x4624 015475 beq bt_evt_button_up ,shutter_process_soft_swtich_button_up 
+0x4625 015476 rtn 
+:      015481 classic_shutter_process_baseband_connect:
+0x4626 015482 jam 0 ,mem_classic_shutter_hid_disconn_count 
+0x4627 015483 jam 0 ,mem_classic_shutter_cable_unplug_conut 
+0x4628 015484 rtn 
+:      015487 classic_shutter_process_baseband_disconnect:
+0x4629 015488 call classic_shutter_disconnect_clear_flag 
+0x462a 015489 branch classic_shutter_process_reconnect_failed 
+:      015491 classic_shutter_disconnect_clear_flag:
+0x462b 015492 jam app_handshake_null ,mem_app_handshake_flag 
+0x462c 015493 jam 0 ,mem_hid_handshake_timer_count 
+0x462d 015494 jam 0 ,mem_unsniff2sniff_timer_count 
+0x462e 015495 jam 0 ,mem_classic_shutter_cable_unplug_conut 
+0x462f 015496 jam 0 ,mem_classic_shutter_hid_disconn_count 
+0x4630 015497 branch queue_init 
+:      015500 classic_shutter_process_reconnect_failed:
+0x4631 015501 call app_disconn_reason_clear 
+0x4632 015502 branch shutter_start_bluetooth_discovery 
+:      015505 classic_shutter_process_setup_complete:
+0x4633 015506 call shutter_stop_bluetooth_discovery 
+0x4634 015507 branch app_led_stop_blink 
+:      015510 classic_shutter_process_hid_connect:
+0x4635 015511 setarg hid_handshake_timeout 
+0x4636 015512 store 1 ,mem_hid_handshake_timer_count 
+0x4637 015513 rtn 
+:      015516 classic_shutter_process_hid_disconnect:
+0x4638 015517 jam 0 ,mem_classic_shutter_cable_unplug_conut 
+0x4639 015518 setarg flag_shutter_hid_disconn_timeout 
+0x463a 015519 store 1 ,mem_classic_shutter_hid_disconn_count 
+0x463b 015520 rtn 
+:      015523 classic_shutter_process_hid_handshake:
+0x463c 015524 fetch 1 ,mem_app_handshake_flag 
+0x463d 015525 rtneq app_handshake_done 
+0x463e 015526 jam app_handshake_done ,mem_app_handshake_flag 
+0x463f 015527 call app_lpm_mult_enable 
+0x4640 015528 call app_store_reconn_info 
+0x4641 015529 call shutter_stop_bluetooth_discovery 
+0x4642 015530 call app_led_off 
+0x4643 015531 branch app_bt_enter_sniff 
+:      015534 classic_shutter_process_reconnect_page_timeout:
+0x4644 015535 branch classic_shutter_process_reconnect_failed 
+:      015538 classic_shutter_process_virtual_cable_unplug:
+0x4645 015539 setarg flag_shutter_cable_unplug_timeout 
+0x4646 015540 store 1 ,mem_classic_shutter_cable_unplug_conut 
+0x4647 015541 rtn 
+:      015544 classic_shutter_process_remote_unsniff:
+0x4648 015545 branch app_start_auto_sniff 
+:      015549 classic_shutter_process_store_reconnect_information:
+0x4649 015550 arg nvram_eeprom_offset ,regb 
+0x464a 015551 fetch 1 ,mem_nv_data_number 
+0x464b 015552 mul32 pdata ,34 ,temp 
+0x464c 015553 fetch 2 ,mem_nv_data_ptr 
+0x464d 015554 copy pdata ,rega 
+0x464e 015555 branch iicd_write_eep_data 
+:      015557 classic_shutter_load_reconn_info:
+0x464f 015558 arg nvram_eeprom_offset ,regb 
+0x4650 015559 fetch 1 ,mem_shutter_bluetooth_type 
+0x4651 015560 rtnbit0 classic_shutter 
+0x4652 015561 fetch 1 ,mem_nv_data_number 
+0x4653 015562 rtn blank 
+0x4654 015563 mul32 pdata ,34 ,temp 
+0x4655 015564 fetch 2 ,mem_nv_data_ptr 
+0x4656 015565 copy pdata ,rega 
+0x4657 015566 branch iicd_read_eep_data 
+:      015570 ble_shutter_process_baseband_connect:
+0x4658 015571 call shutter_stop_bluetooth_discovery 
+0x4659 015572 setarg 0 
+0x465a 015573 store 2 ,mem_ble_shutter_reconn_timer 
+0x465b 015574 branch app_led_off 
+:      015577 ble_shutter_process_baseband_disconnect:
+0x465c 015578 call queue_init 
+0x465d 015579 jam 0 ,mem_ble_shutter_enable_notify 
+0x465e 015580 branch shutter_start_reconnect 
+:      015583 ble_shutter_process_reconnect_complete:
+0x465f 015584 call queue_init 
+0x4660 015585 jam 1 ,mem_ble_shutter_enable_notify 
+0x4661 015586 fetch 8 ,mem_ble_shutter_interval_min 
+0x4662 015587 store 8 ,mem_le_interval_min 
+0x4663 015588 call app_lpm_mult_enable 
+0x4664 015589 branch le_l2cap_tx_update_req 
+:      015592 ble_shutter_process_parse_connect_parameter_update_response:
+0x4665 015593 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 
+0x4666 015594 rtneq ble_signaling_connect_parameter_update_accepted 
+0x4667 015595 fetch 8 ,mem_ble_shutter_interval_min_new 
+0x4668 015596 rtn blank 
+0x4669 015597 store 8 ,mem_le_interval_min 
+0x466a 015598 branch le_l2cap_tx_update_req 
+:      015602 shutter_process_soft_swtich_button_long_press:
+0x466b 015603 branch ui_soft_switch_botton_long_press 
+:      015605 shutter_process_soft_swtich_button_down:
+0x466c 015606 fetch 1 ,mem_shutter_hard_soft_switch_case 
+0x466d 015607 rtneq hard_switch 
+0x466e 015608 fetch 1 ,mem_shutter_soft_switch_power_state 
+0x466f 015609 rtnne ss_state_power_on 
+0x4670 015610 call shutter_store_currenct_led_state 
+0x4671 015611 branch app_led_on 
+:      015613 shutter_store_currenct_led_state:
+0x4672 015614 jam 1 ,mem_shutter_soft_swtich_botton_down 
+0x4673 015615 arg 11 ,loopcnt 
+0x4674 015616 arg mem_shutter_soft_swtich_led_struct_temp ,contw 
+0x4675 015617 arg mem_shutter_led_struct_app_led ,contr 
+0x4676 015618 branch memcpy 
+:      015620 shutter_process_soft_swtich_button_up:
+0x4677 015621 fetch 1 ,mem_shutter_hard_soft_switch_case 
+0x4678 015622 rtneq hard_switch 
+0x4679 015623 fetch 1 ,mem_shutter_soft_switch_power_state 
+0x467a 015624 beq ss_state_power_on ,shutter_load_currenct_led_state 
+0x467b 015625 branch ui_soft_switch_botton_up 
+:      015627 shutter_load_currenct_led_state:
+0x467c 015628 fetch 1 ,mem_shutter_soft_swtich_botton_down 
+0x467d 015629 rtnne 1 
+0x467e 015630 jam 0 ,mem_shutter_soft_swtich_botton_down 
+0x467f 015631 fetch 2 ,mem_ui_state_map 
+0x4680 015632 bbit1 ui_state_bt_connected ,app_led_off 
+0x4681 015633 bbit1 ui_state_ble_connected ,app_led_off 
+0x4682 015634 arg 11 ,loopcnt 
+0x4683 015635 arg mem_shutter_soft_swtich_led_struct_temp ,contr 
+0x4684 015636 arg mem_shutter_led_struct_app_led ,contw 
+0x4685 015637 branch memcpy 
+:      015642 shutter_le_bb_event_timer:
+0x4686 015644 call shutter_check_sleep_timer 
+0x4687 015647 call shutter_check_power_off_timer 
+0x4688 015650 call classic_shutter_check_unplug_timer 
+0x4689 015651 call classic_shutter_hid_handshake_timer 
+0x468a 015652 call classic_shutter_hid_disconn_timer 
+0x468b 015655 branch ble_shutter_reconn_timer 
+:      015659 shutter_check_sleep_timer:
+0x468c 015660 arg mem_shutter_sleep_timer ,regc 
+0x468d 015661 arg shutter_sleep_timeout ,regb 
+0x468e 015662 branch timer_single_step_2b 
+:      015663 shutter_sleep_timeout:
+0x468f 015664 jam ss_state_power_off ,mem_shutter_soft_switch_power_state 
+0x4690 015665 call app_led_off 
+0x4691 015666 call shutter_disconnect_current_connection 
+0x4692 015667 branch shutter_wait_power_off 
+:      015670 shutter_check_power_off_timer:
+0x4693 015671 arg mem_shutter_power_off_timer ,regc 
+0x4694 015672 arg shutter_check_power_off_timeout ,regb 
+0x4695 015673 branch timer_single_step 
+:      015675 shutter_check_power_off_timeout:
+0x4696 015676 fetch 2 ,mem_ui_state_map 
+0x4697 015677 bbit1 ui_state_ble_connected ,shutter_wait_power_off 
+0x4698 015678 bbit1 ui_state_bt_connected ,shutter_wait_power_off 
+0x4699 015679 fetch 1 ,mem_shutter_led_struct_app_led_type 
+0x469a 015680 beq ui_led_state_blink_start ,shutter_wait_power_off 
+0x469b 015681 beq ui_led_state_blink_lighting ,shutter_wait_power_off 
+0x469c 015682 beq ui_led_state_blink_darking ,shutter_wait_power_off 
+0x469d 015683 branch app_enter_hibernate 
+:      015687 classic_shutter_check_unplug_timer:
+0x469e 015688 arg mem_classic_shutter_cable_unplug_conut ,regc 
+0x469f 015689 arg classic_shutter_unplug_timeout ,regb 
+0x46a0 015690 branch timer_single_step 
+:      015692 classic_shutter_unplug_timeout:
+0x46a1 015693 fetch 1 ,mem_control_tasks 
+0x46a2 015694 set1 l2cap_disconnect_interrupt ,pdata 
+0x46a3 015695 set1 l2cap_disconnect_control ,pdata 
+0x46a4 015696 store 1 ,mem_control_tasks 
+0x46a5 015697 rtn 
+:      015699 classic_shutter_hid_handshake_timer:
+0x46a6 015700 arg mem_hid_handshake_timer_count ,regc 
+0x46a7 015701 arg classic_shutter_process_hid_handshake ,regb 
+0x46a8 015702 branch timer_single_step 
+:      015704 classic_shutter_hid_disconn_timer:
+0x46a9 015705 arg mem_classic_shutter_hid_disconn_count ,regc 
+0x46aa 015706 arg app_bt_disconnect ,regb 
+0x46ab 015707 branch timer_single_step 
+:      015712 ble_shutter_reconn_timer:
+0x46ac 015713 fetch 1 ,mem_shutter_soft_switch_power_state 
+0x46ad 015714 rtnne ss_state_power_on 
+0x46ae 015715 arg mem_ble_shutter_reconn_timer ,regc 
+0x46af 015716 arg shutter_start_bluetooth_discovery ,regb 
+0x46b0 015717 branch timer_single_step_2b 
+:      015720 shutter_process_idle:
+0x46b1 015721 call shutter_send_data_to_master 
+0x46b2 015722 branch keyscan_key_process 
+:      015725 shutter_process_lpm_before:
+0x46b3 015726 branch keyscan_process_lpm_before 
+:      015728 shutter_le_before_hibernate:
+0x46b4 015729 call gpio_set_before_lpm_common 
+0x46b5 015730 branch shutter_process_lpm_before 
+:      015736 shutter_stop_bluetooth_discovery:
+0x46b6 015737 fetch 1 ,mem_shutter_bluetooth_type 
+0x46b7 015738 bbit1 classic_shutter ,classic_shutter_stop_bluetooth_discovery 
+0x46b8 015739 bbit1 ble_shutter ,ble_shutter_stop_bluetooth_discovery 
+0x46b9 015740 rtn 
+:      015742 ble_shutter_stop_bluetooth_discovery:
+0x46ba 015743 fetch 2 ,mem_ble_shutter_connect_timeout 
+0x46bb 015744 store 2 ,mem_shutter_sleep_timeout 
+0x46bc 015745 store 2 ,mem_shutter_sleep_timer 
+0x46bd 015746 branch app_ble_stop_adv 
+:      015748 classic_shutter_stop_bluetooth_discovery:
+0x46be 015749 fetch 2 ,mem_classic_shutter_connect_timeout 
+0x46bf 015750 store 2 ,mem_shutter_sleep_timeout 
+0x46c0 015751 store 2 ,mem_shutter_sleep_timer 
+0x46c1 015752 branch app_bt_stop_discovery 
+:      015754 shutter_start_bluetooth_discovery:
+0x46c2 015755 fetch 1 ,mem_shutter_soft_switch_power_state 
+0x46c3 015756 rtnne ss_state_power_on 
+0x46c4 015757 fetch 1 ,mem_shutter_bluetooth_type 
+0x46c5 015758 bbit1 classic_shutter ,classic_shutter_start_discovery 
+0x46c6 015759 bbit1 ble_shutter ,ble_shutter_start_discovery 
+0x46c7 015760 rtn 
+:      015762 classic_shutter_start_discovery:
+0x46c8 015763 fetch 2 ,mem_classic_shutter_discovery_timeout ,
+0x46c9 015764 store 2 ,mem_shutter_sleep_timeout 
+0x46ca 015765 store 2 ,mem_shutter_sleep_timer 
+0x46cb 015766 branch app_bt_start_discovery_short 
+:      015768 ble_shutter_start_discovery:
+0x46cc 015769 fetch 2 ,mem_ui_state_map 
+0x46cd 015770 rtnbit1 ui_state_ble_connected 
+0x46ce 015771 fetch 2 ,mem_ble_shutter_discovery_timeout 
+0x46cf 015772 store 2 ,mem_shutter_sleep_timeout 
+0x46d0 015773 store 2 ,mem_shutter_sleep_timer 
+0x46d1 015774 fetch 2 ,mem_ble_shutter_discovery_adv_interval 
+0x46d2 015775 call shutter_ble_adv_interval_set 
+0x46d3 015776 call app_led_start_blink 
+0x46d4 015777 fetch 4 ,mem_ble_shutter_discovery_blink_on_time 
+0x46d5 015778 store 4 ,mem_shutter_led_struct_app_led_on_time 
+0x46d6 015779 fetch 2 ,mem_ui_state_map 
+0x46d7 015780 rtnbit1 ui_state_ble_adv 
+0x46d8 015781 branch app_ble_start_adv 
+:      015784 shutter_start_reconnect:
+0x46d9 015785 fetch 1 ,mem_shutter_soft_switch_power_state 
+0x46da 015786 rtnne ss_state_power_on 
+0x46db 015787 fetch 1 ,mem_shutter_bluetooth_type 
+0x46dc 015788 bbit1 classic_shutter ,classic_shutter_start_reconnect 
+0x46dd 015789 bbit1 ble_shutter ,ble_shutter_start_reconnect 
+0x46de 015790 rtn 
+:      015792 classic_shutter_start_reconnect:
+0x46df 015793 call app_check_reconn_target 
+0x46e0 015794 branch shutter_start_bluetooth_discovery ,blank 
+0x46e1 015795 call app_led_on 
+0x46e2 015796 call app_bt_stop_discovery 
+0x46e3 015797 branch app_bt_start_reconnect 
+:      015799 ble_shutter_start_reconnect:
+0x46e4 015800 fetch 2 ,mem_ble_shutter_reconn_timer 
+0x46e5 015801 fetcht 2 ,mem_ble_shutter_reconn_timeout 
+0x46e6 015802 storet 2 ,mem_ble_shutter_reconn_timer 
+0x46e7 015803 nrtn blank 
+0x46e8 015804 fetch 2 ,mem_ble_shutter_reconn_dav_interval 
+0x46e9 015805 call shutter_ble_adv_interval_set 
+0x46ea 015806 call app_led_start_blink 
+0x46eb 015807 fetch 4 ,mem_ble_shutter_reconn_blink_on_time 
+0x46ec 015808 store 4 ,mem_shutter_led_struct_app_led_on_time 
+0x46ed 015809 fetch 2 ,mem_ui_state_map 
+0x46ee 015810 rtnbit1 ui_state_ble_adv 
+0x46ef 015811 branch app_ble_start_adv 
+:      015814 shutter_ble_adv_interval_set:
+0x46f0 015815 store 2 ,mem_lpm_interval 
+0x46f1 015816 increase -4 ,pdata 
+0x46f2 015817 store 2 ,mem_le_adv_interval 
+0x46f3 015818 rtn 
+:      015821 shutter_disconnect_current_connection:
+0x46f4 015822 fetch 2 ,mem_ui_state_map 
+0x46f5 015823 bbit1 ui_state_ble_connected ,app_ble_disconnect 
+0x46f6 015824 bbit1 ui_state_bt_connected ,app_bt_disconnect 
+0x46f7 015825 branch shutter_stop_bluetooth_discovery 
+:      015829 app_check_reconn_target:
+0x46f8 015830 fetch 1 ,mem_nv_data_number 
+0x46f9 015831 copy pdata ,loopcnt 
+0x46fa 015832 fetch 2 ,mem_nv_data_ptr 
+0x46fb 015833 copy pdata ,rega 
+:      015834 app_check_reconn_target_loop:
+0x46fc 015835 ifetch 2 ,rega 
+0x46fd 015836 beq 0 ,found_reconn_device 
+0x46fe 015837 increase nv_data_len ,rega 
+0x46ff 015838 loop app_check_reconn_target_loop 
+0x4700 015839 branch enable_blank 
+:      015841 found_reconn_device:
+0x4701 015842 ifetch 6 ,contr 
+0x4702 015843 store 6 ,mem_hci_plap 
+0x4703 015844 increase 10 ,contr 
+0x4704 015845 arg mem_link_key ,contw 
+0x4705 015846 call memcpy16 
+0x4706 015847 call check_link_key_load 
+0x4707 015848 branch disable_blank 
+:      015854 shutter_check_data_enable:
+0x4708 015855 call disable_user 
+0x4709 015856 fetch 2 ,mem_ui_state_map 
+0x470a 015857 bbit1 ui_state_bt_connected ,shutter_check_bt_data_enable 
+0x470b 015858 bbit1 ui_state_ble_connected ,shutter_check_ble_data_enable 
+0x470c 015859 rtn 
+:      015861 shutter_check_bt_data_enable:
+0x470d 015862 fetch 1 ,mem_hid_interrupt_state 
+0x470e 015863 rtnne 0x3f 
+0x470f 015864 branch enable_user 
+:      015866 shutter_check_ble_data_enable:
+0x4710 015867 fetch 1 ,mem_ble_shutter_enable_notify 
+0x4711 015868 rtn blank 
+0x4712 015869 branch enable_user 
+:      015874 shutter_check_bluetooth_conn:
+0x4713 015875 call disable_user 
+0x4714 015876 fetch 2 ,mem_ui_state_map 
+0x4715 015877 rtnbit1 ui_state_bt_connected 
+0x4716 015878 rtnbit1 ui_state_ble_connected 
+0x4717 015879 branch enable_user 
+:      015883 shutter_change_bluetooth_status_bt_disconn:
+0x4718 015884 fetch 1 ,mem_shutter_bluetooth_type 
+0x4719 015885 bbit1 classic_shutter ,classic_shutter_change_bluetooth_status_bt_disconn 
+0x471a 015886 bbit1 ble_shutter ,ble_shutter_change_bluetooth_status_bt_disconn 
+0x471b 015887 rtn 
+:      015889 classic_shutter_change_bluetooth_status_bt_disconn:
+0x471c 015890 fetch 1 ,mem_scan_mode 
+0x471d 015891 rtnne 0x03 
+0x471e 015892 branch shutter_start_reconnect 
+:      015894 ble_shutter_change_bluetooth_status_bt_disconn:
+0x471f 015895 branch shutter_start_reconnect 
+:      015898 shutter_check_send_data:
+0x4720 015899 disable user2 
+0x4721 015900 fetch 2 ,mem_shutter_sleep_timeout 
+0x4722 015901 store 2 ,mem_shutter_sleep_timer 
+0x4723 015903 call shutter_check_bluetooth_conn 
+0x4724 015904 branch shutter_change_bluetooth_status_bt_disconn ,user 
+0x4725 015906 call shutter_check_data_enable 
+0x4726 015907 nrtn user 
+0x4727 015908 enable user2 
+0x4728 015909 rtn 
+:      015913 shutter_key_change:
+0x4729 015914 call shutter_check_send_data 
+0x472a 015915 nrtn user2 
+0x472b 015916 deposit rega 
+0x472c 015917 branch shutter_key_release ,blank 
+:      015918 shutter_key_press:
+0x472d 015919 call app_led_on 
+0x472e 015920 arg mem_key0_press ,regc 
+0x472f 015921 branch push_queue_press_or_release 
+:      015923 shutter_key_release:
+0x4730 015924 call app_led_off 
+0x4731 015925 arg mem_key0_release ,regc 
+:      015927 push_queue_press_or_release:
+0x4732 015928 arg max_queue_num ,pdata 
+0x4733 015929 imul32 queue ,pdata 
+0x4734 015930 iadd regc ,regc 
+:      015933 push_buffer_in_queue:
+0x4735 015934 ifetch 1 ,regc 
+0x4736 015935 rtn blank 
+0x4737 015936 call queue_push_one_byte 
+0x4738 015937 increase 1 ,regc 
+0x4739 015938 branch push_buffer_in_queue 
+:      015941 shutter_send_data_to_master:
+0x473a 015942 fetch 2 ,mem_ui_state_map 
+0x473b 015943 bbit1 ui_state_ble_connected ,pop_queue_to_ble_data 
+0x473c 015944 bbit1 ui_state_bt_connected ,pop_queue_to_classic_data 
+0x473d 015945 rtn 
+:      015947 pop_queue_to_ble_data:
+0x473e 015948 call le_fifo_check_nearly_full 
+0x473f 015949 nrtn blank 
+0x4740 015950 call queue_pop_one_byte 
+0x4741 015951 nrtn user 
+0x4742 015952 pincrease -1 
+0x4743 015953 mul32 pdata ,shutter_ble_data_buffer ,pdata 
+0x4744 015954 arg mem_ble_data_buffer1 ,temp 
+0x4745 015955 iadd temp ,contr 
+:      015956 le_send_notify_from_list:
+0x4746 015957 ifetch 1 ,contr 
+0x4747 015958 copy pdata ,rega 
+0x4748 015959 ifetcht 2 ,contr 
+0x4749 015960 call store_contr 
+0x474a 015961 call le_att_malloc_tx_notify 
+0x474b 015962 copy rega ,loopcnt 
+0x474c 015963 call get_contr 
+0x474d 015964 branch memcpy 
+:      015967 pop_queue_to_classic_data:
+0x474e 015968 call l2cap_malloc_is_fifo_nearly_full 
+0x474f 015969 nrtn blank 
+0x4750 015970 call queue_pop_one_byte 
+0x4751 015971 nrtn user 
+0x4752 015972 pincrease -1 
+0x4753 015973 mul32 pdata ,shutter_classic_data_buffer ,pdata 
+0x4754 015974 arg mem_classic_data_buffer1 ,temp 
+0x4755 015975 iadd temp ,contr 
+0x4756 015976 ifetch 5 ,contr 
+0x4757 015977 store 5 ,mem_classic_data_buffer 
+:      015978 classic_send_hid_data:
+0x4758 015979 fetch 1 ,mem_classic_data_buffer 
+0x4759 015980 copy pdata ,rega 
+0x475a 015981 call hid_malloc_tx_buff 
+0x475b 015982 fetch 2 ,mem_hid_int_remote_cid 
+0x475c 015983 istore 2 ,contw 
+0x475d 015984 setarg 0xa1 
+0x475e 015985 istore 1 ,contw 
+0x475f 015986 fetch 4 ,mem_classic_data_buffer + 1 
+0x4760 015987 istore 9 ,contw 
+0x4761 015988 rtn 
+:      015992 queue_push_one_byte:
+0x4762 015993 store 1 ,mem_pdatatemp 
+0x4763 015994 arg mem_pdatatemp ,rega 
+0x4764 015995 branch queue_push 
+:      015997 queue_pop_one_byte:
+0x4765 015998 arg mem_pdatatemp ,rega 
+0x4766 015999 call queue_pop 
+0x4767 016000 nrtn user 
+0x4768 016001 fetch 1 ,mem_pdatatemp 
+0x4769 016002 rtn 
+:      016005 ble_shutter_receive_data:
+0x476a 016006 fetch 2 ,mem_le_att_handle 
+0x476b 016007 beq gatt_keyboard_write_handle ,ble_shutter_process_reconnect_complete 
+0x476c 016008 rtn 
+:      016010 shutter_init_param:
+0x476d 016011 setarg 0x02 
+0x476e 016012 store 1 ,mem_shutter_power_off_timeout 
+0x476f 016014 setarg 0x00200008 
+0x4770 016015 store 4 ,mem_ble_shutter_interval_min 
+0x4771 016016 setarg 0x012c0005 
+0x4772 016017 istore 4 ,contw 
+0x4773 016020 jam 0x17 ,mem_le_local_mtu 
+0x4774 016023 setarg 0x1b 
+0x4775 016024 store 2 ,mem_le_pairing_handle 
+0x4776 016025 call le_set_config_fixed_ltk 
+0x4777 016026 call le_set_fixed_ltk 
+0x4778 016027 call le_set_justwork 
+0x4779 016028 branch le_set_config_read_authentication 
+:      016031 shutter_load_buffer_config_form_datarom:
+0x477a 016033 arg ble_key_value_list_size ,loopcnt 
+0x477b 016034 arg mem_ble_data_buffer1 ,contw 
+0x477c 016035 arg ble_shutter_key_value_list ,contr 
+0x477d 016036 call memcpy_fast 
+0x477e 016037 arg bt_key_value_list_size ,loopcnt 
+0x477f 016038 arg mem_classic_data_buffer1 ,contw 
+0x4780 016039 arg classic_shutter_key_value_list ,contr 
+0x4781 016040 branch memcpy_fast 
+:      016043 shutter_load_ble_gatt_form_datarom:
+0x4782 016044 arg ble_gatt_list_size ,loopcnt 
+0x4783 016045 arg ble_shutter_gatt_list ,contr 
+0x4784 016046 branch memcpy_fast 
+:      016049 shutter_load_bt_sdp_form_datarom:
+0x4785 016050 arg bt_sdp_list_size ,loopcnt 
+0x4786 016051 arg classic_shutter_sdp_list ,contr 
+0x4787 016052 branch memcpy_fast 
+:      016056 shutter_init_bluetooth_config:
+0x4788 016057 call shutter_check_load_config_flag 
+0x4789 016058 nrtn user 
+0x478a 016059 fetch 1 ,mem_shutter_config_select_gpio1 
+0x478b 016060 call shutter_init_bluetooth_config_gpio_input 
+0x478c 016061 fetch 1 ,mem_shutter_config_select_gpio2 
+0x478d 016062 call shutter_init_bluetooth_config_gpio_input 
+0x478e 016063 fetch 1 ,mem_shutter_config_select_gpio3 
+0x478f 016064 branch shutter_init_bluetooth_config_gpio_input 
+:      016066 shutter_init_bluetooth_config_gpio_input:
+0x4790 016067 rtn blank 
+0x4791 016068 or pdata ,0x80 ,temp 
+0x4792 016069 branch gpio_config_input_nowake 
+:      016072 shutter_load_bluetooth_config:
+0x4793 016073 call shutter_check_load_config_flag 
+0x4794 016074 nrtn user 
+0x4795 016075 call shutter_load_bluetooth_config_label 
+0x4796 016076 branch shutter_load_bluetooth_config_by_otp 
+:      016078 shutter_load_bluetooth_config_label:
+0x4797 016079 arg 0 ,rega 
+0x4798 016080 fetch 1 ,mem_shutter_config_select_gpio1 
+0x4799 016081 call shutter_load_bluetooth_config_read_gpio_input 
+0x479a 016082 nsetflag blank ,0 ,rega 
+0x479b 016083 fetch 1 ,mem_shutter_config_select_gpio2 
+0x479c 016084 call shutter_load_bluetooth_config_read_gpio_input 
+0x479d 016085 nsetflag blank ,1 ,rega 
+0x479e 016086 fetch 1 ,mem_shutter_config_select_gpio3 
+0x479f 016087 call shutter_load_bluetooth_config_read_gpio_input 
+0x47a0 016088 nsetflag blank ,2 ,rega 
+0x47a1 016089 copy rega ,pdata 
+0x47a2 016090 store 1 ,mem_shutter_config_label 
+0x47a3 016091 fetch 1 ,mem_shutter_config_size 
+0x47a4 016092 imul32 rega ,pdata 
+0x47a5 016093 fetcht 2 ,mem_shutter_config_otp_base_address 
+0x47a6 016094 iadd temp ,pdata 
+0x47a7 016095 store 2 ,mem_shutter_config_otp_addr 
+0x47a8 016096 rtn 
+:      016098 shutter_load_bluetooth_config_read_gpio_input:
+0x47a9 016099 rtn blank 
+0x47aa 016100 or pdata ,0x80 ,temp 
+0x47ab 016101 call gpio_get_bit 
+0x47ac 016102 nbranch enable_blank ,true 
+0x47ad 016103 branch disable_blank 
+:      016106 shutter_check_load_config_flag:
+0x47ae 016107 call disable_user 
+0x47af 016108 fetch 1 ,mem_shutter_config_user_size 
+0x47b0 016109 nrtn blank 
+0x47b1 016110 fetch 1 ,mem_shutter_config_enable 
+0x47b2 016111 rtn blank 
+0x47b3 016112 branch enable_user 
+:      016115 shutter_load_bluetooth_config_by_otp:
+0x47b4 016116 call otp_enable_chgpump 
+0x47b5 016117 fetch 2 ,mem_shutter_config_otp_addr 
+0x47b6 016118 arg mem_shutter_config_data_temp ,rega 
+0x47b7 016119 fetcht 1 ,mem_shutter_config_size 
+0x47b8 016120 call otpd_read_data 
+0x47b9 016121 call otp_disable_chgpump 
+:      016122 shutter_load_bluetooth_config_store_name:
+0x47ba 016123 fetch 1 ,mem_shutter_config_data_temp 
+0x47bb 016124 copy pdata ,loopcnt 
+0x47bc 016125 store 1 ,mem_le_name_len 
+0x47bd 016126 call memcpy_fast 
+0x47be 016127 fetch 1 ,mem_shutter_config_data_temp 
+0x47bf 016128 copy pdata ,loopcnt 
+0x47c0 016129 store 1 ,mem_local_name_length 
+0x47c1 016130 call memcpy_fast 
+0x47c2 016131 ifetch 1 ,contr 
+0x47c3 016132 store 1 ,mem_shutter_key_num 
+0x47c4 016133 ifetch 1 ,contr 
+0x47c5 016134 store 1 ,mem_shutter_hard_soft_switch_case 
+0x47c6 016135 rtn 
+:      016138 shutter_load_bluetooth_config_by_eeprom:
+0x47c7 016139 fetch 1 ,mem_shutter_bluetooth_type 
+0x47c8 016140 rtnbit0 classic_shutter 
+0x47c9 016141 arg 3 ,temp 
+0x47ca 016142 fetch 2 ,mem_shutter_config_eeprom_offset_addr 
+0x47cb 016143 copy pdata ,regb 
+0x47cc 016144 arg mem_shutter_config_eeprom_start_flag ,rega 
+0x47cd 016145 call iicd_read_eep_data 
+0x47ce 016146 fetcht 2 ,mem_shutter_config_eeprom_start_flag 
+0x47cf 016147 setarg shutter_eeprom_config_crc 
+0x47d0 016148 isub temp ,null 
+0x47d1 016149 nrtn zero 
+0x47d2 016150 fetch 1 ,mem_shutter_config_user_size 
+0x47d3 016151 rtn blank 
+0x47d4 016152 copy pdata ,temp 
+0x47d5 016153 fetch 2 ,mem_shutter_config_eeprom_offset_addr 
+0x47d6 016154 add pdata ,3 ,regb 
+0x47d7 016155 arg mem_shutter_config_data_temp ,rega 
+0x47d8 016156 call iicd_read_eep_data 
+0x47d9 016157 branch shutter_store_config 
+:      016159 shutter_load_bluetooth_config_by_user_config:
+0x47da 016160 fetch 2 ,mem_shutter_config_user_otp_address 
+0x47db 016161 rtn blank 
+0x47dc 016162 call otp_enable_chgpump 
+0x47dd 016163 arg 1 ,temp 
+0x47de 016164 arg mem_shutter_config_user_size ,rega 
+0x47df 016165 call otpd_read_data 
+0x47e0 016167 fetch 1 ,mem_shutter_config_user_size 
+0x47e1 016168 rtn blank 
+0x47e2 016170 fetch 2 ,mem_shutter_config_user_otp_address 
+0x47e3 016171 pincrease 1 
+0x47e4 016172 arg mem_shutter_config_data_temp ,rega 
+0x47e5 016173 fetcht 1 ,mem_shutter_config_user_size 
+0x47e6 016174 call otpd_read_data 
+0x47e7 016175 call otp_disable_chgpump 
+:      016176 shutter_store_config:
+0x47e8 016177 call shutter_load_bluetooth_config_store_name 
+:      016178 shutter_load_bluetooth_config_custom:
+0x47e9 016179 ifetch 2 ,contr 
+0x47ea 016180 rtn blank 
+0x47eb 016181 copy pdata ,contw 
+0x47ec 016182 ifetcht 1 ,contr 
+0x47ed 016183 copy temp ,loopcnt 
+0x47ee 016184 call memcpy 
+0x47ef 016185 branch shutter_load_bluetooth_config_custom 
+:      016189 shutter_random_mac_addr:
+0x47f0 016190 fetch 1 ,mem_shutter_bluetooth_type 
+0x47f1 016191 rtnbit0 classic_shutter 
+0x47f2 016192 fetch 2 ,mem_classic_shutter_random_mac_offset_addr 
+0x47f3 016193 copy pdata ,regb 
+0x47f4 016194 arg 4 ,temp 
+0x47f5 016195 arg mem_shutter_random_mac_data_temp ,rega 
+0x47f6 016196 call iicd_read_eep_data 
+0x47f7 016197 fetch 1 ,mem_shutter_random_mac_data_temp 
+0x47f8 016198 bne 1 ,shutter_write_random_mac_addr_to_eeprom 
+:      016199 shutter_write_random_mac_addr_to_eeprom:
+0x47f9 016200 setarg 1 
+0x47fa 016201 store 1 ,mem_shutter_random_mac_data_temp 
+0x47fb 016202 force 3 ,loopcnt 
+0x47fc 016203 call generate_random_loop 
+0x47fd 016204 fetch 2 ,mem_classic_shutter_random_mac_offset_addr 
+0x47fe 016205 copy pdata ,regb 
+0x47ff 016206 arg 4 ,temp 
+0x4800 016207 arg mem_shutter_random_mac_data_temp ,rega 
+0x4801 016208 call iicd_write_eep_data 
+:      016209 shutter_write_random_mac_addr:
+0x4802 016210 fetch 3 ,mem_shutter_random_mac_data_temp + 1 
+0x4803 016211 store 3 ,mem_lap 
+0x4804 016212 store 3 ,mem_le_lap 
+0x4805 016213 rtn 
+:      016216 shutter_soft_swtich_power_on:
+0x4806 016217 branch shutter_start_reconnect 
+:      016220 shutter_soft_swtich_power_off:
+0x4807 016221 arg 0 ,rega 
+0x4808 016222 arg mem_shutter_power_off_led_style ,regc 
+0x4809 016223 call ui_led_set_style_global 
+0x480a 016224 call shutter_disconnect_current_connection 
+:      016225 shutter_wait_power_off:
+0x480b 016226 fetch 1 ,mem_shutter_power_off_timeout 
+0x480c 016227 store 1 ,mem_shutter_power_off_timer 
+0x480d 016228 rtn 
+:      016232 ui_soft_swtich_init:
+0x480e 016233 setarg ss_state_power_up 
+0x480f 016234 call ui_soft_swtich_init_power_on_time 
+0x4810 016235 jam ui_button_state_up ,mem_ui_button_last_state 
+0x4811 016236 call ui_button_init 
+0x4812 016237 call ui_button_polling 
+0x4813 016238 fetch 2 ,mem_ui_state_map 
+0x4814 016239 rtnbit1 ui_state_btn_down 
+0x4815 016240 branch app_enter_hibernate 
+:      016242 ui_soft_swtich_init_power_on_time:
+0x4816 016243 fetcht 2 ,mem_power_param_ptr 
+0x4817 016244 istore 1 ,temp 
+0x4818 016245 ifetch 1 ,contw 
+0x4819 016246 store 1 ,mem_ui_button_timeout 
+0x481a 016247 rtn 
+:      016250 ui_soft_switch_botton_up:
+0x481b 016251 fetch 2 ,mem_power_param_ptr 
+0x481c 016252 ifetch 1 ,pdata 
+0x481d 016253 rtnne ss_state_power_up 
+0x481e 016254 branch app_enter_hibernate 
+:      016257 ui_soft_switch_botton_long_press:
+0x481f 016258 fetcht 2 ,mem_power_param_ptr 
+0x4820 016259 ifetch 1 ,temp 
+0x4821 016260 beq ss_state_power_on ,ui_soft_switch_power_off 
+:      016261 ui_soft_switch_power_on:
+0x4822 016262 setarg ss_state_power_on 
+0x4823 016263 fetcht 2 ,mem_power_param_ptr 
+0x4824 016264 istore 1 ,temp 
+0x4825 016265 add temp ,ss_power_off_time ,contr 
+0x4826 016266 ifetch 1 ,contr 
+0x4827 016267 istore 1 ,mem_ui_button_timeout 
+0x4828 016268 ifetch 2 ,contr 
+0x4829 016269 branch callback_func 
+:      016271 ui_soft_switch_power_off:
+0x482a 016272 setarg ss_state_power_off 
+0x482b 016273 call ui_soft_swtich_init_power_on_time 
+0x482c 016274 add temp ,ss_power_off_cb ,contr 
+0x482d 016275 ifetch 2 ,contr 
+0x482e 016276 branch app_enter_hibernate ,blank 
+0x482f 016277 branch callback_func 
+:      016283 shutter_byteswap:
+0x4830 016284 store 6 ,mem_tmp_buffer 
+0x4831 016285 fetch 1 ,mem_tmp_buffer 
+0x4832 016286 store 1 ,mem_tmp_buffer + 11 
+0x4833 016287 ifetch 1 ,contr 
+0x4834 016288 store 1 ,mem_tmp_buffer + 10 
+0x4835 016289 ifetch 1 ,contr 
+0x4836 016290 store 1 ,mem_tmp_buffer + 9 
+0x4837 016291 ifetch 1 ,contr 
+0x4838 016292 store 1 ,mem_tmp_buffer + 8 
+0x4839 016293 ifetch 1 ,contr 
+0x483a 016294 store 1 ,mem_tmp_buffer + 7 
+0x483b 016295 ifetch 1 ,contr 
+0x483c 016296 store 1 ,mem_tmp_buffer + 6 
+0x483d 016297 fetch 6 ,mem_tmp_buffer + 6 
+0x483e 016298 rtn 
+:      016300 shutter_random_addr_by_otp:
+0x483f 016301 call load_adc_init 
+0x4840 016302 fetch 1 ,mem_1v_adc_io_data 
+0x4841 016303 store 1 ,mem_le_lap 
+0x4842 016304 fetch 1 ,mem_5v_adc_hvin_data 
+0x4843 016305 istore 1 ,contw 
+0x4844 016306 fetch 1 ,mem_3v_adc_vinlpm_data 
+0x4845 016307 istore 1 ,contw 
+0x4846 016308 fetch 3 ,mem_le_lap 
+0x4847 016309 store 3 ,mem_lap 
+0x4848 016310 rtn 
+:      016322 sim_iic_read_eep_data:
+0x4849 016323 fetch 2 ,mem_eeprom_base 
+0x484a 016324 iadd regb ,pdata 
+0x484b 016325 byteswap pdata ,pdata 
+0x484c 016326 store 2 ,mem_addr_mi 
+0x484d 016327 copy temp ,regb 
+0x484e 016329 call sim_iic_start 
+0x484f 016330 setarg 0xa0 
+0x4850 016331 call sim_iic_send_byte 
+0x4851 016332 fetch 1 ,mem_addr_mi 
+0x4852 016333 call sim_iic_send_byte 
+0x4853 016334 bmark1 mark_eeprom_size ,sim_iic_read_eep_data_2k 
+0x4854 016335 fetch 1 ,mem_addr_mi + 1 
+0x4855 016336 call sim_iic_send_byte 
+:      016337 sim_iic_read_eep_data_2k:
+0x4856 016338 call sim_iic_stop 
+0x4857 016340 call sim_iic_start 
+0x4858 016341 setarg 0xa1 
+0x4859 016342 call sim_iic_send_byte 
+:      016344 sim_iic_read_eep_data_loop:
+0x485a 016345 call sim_iic_read_byte 
+0x485b 016346 istore 1 ,rega 
+0x485c 016347 increase 1 ,rega 
+0x485d 016348 increase -1 ,regb 
+0x485e 016349 nbranch sim_iic_read_eep_data_loop ,zero 
+0x485f 016350 branch sim_iic_stop 
+:      016361 sim_iic_write_eep_data:
+0x4860 016362 byteswap regb ,pdata 
+0x4861 016363 store 2 ,mem_addr_mi 
+0x4862 016364 copy temp ,regb 
+0x4863 016366 call sim_iic_start 
+0x4864 016367 setarg 0xa0 
+0x4865 016368 call sim_iic_send_byte 
+0x4866 016370 fetch 1 ,mem_addr_mi 
+0x4867 016371 call sim_iic_send_byte 
+0x4868 016372 bmark1 mark_eeprom_size ,sim_iic_write_eep_data_loop 
+0x4869 016373 fetch 1 ,mem_addr_mi + 1 
+0x486a 016374 call sim_iic_send_byte 
+:      016375 sim_iic_write_eep_data_loop:
+0x486b 016376 ifetch 1 ,rega 
+0x486c 016377 call sim_iic_send_byte 
+0x486d 016378 increase 1 ,rega 
+0x486e 016379 increase -1 ,regb 
+0x486f 016380 nbranch sim_iic_write_eep_data_loop ,zero 
+0x4870 016381 branch sim_iic_stop 
+:      016385 sim_iic_wait_ack:
+0x4871 016386 arg 10 ,loopcnt 
+0x4872 016387 call sim_iic_release_sda 
+0x4873 016388 call sim_iic_scl_output_high 
+0x4874 016389 call sim_iic_delay 
+:      016390 sim_iic_wait_ack_loop:
+0x4875 016391 call sim_iic_read_sda_level 
+0x4876 016392 branch sim_iic_scl_output_low ,blank 
+0x4877 016393 loop sim_iic_wait_ack_loop 
+0x4878 016394 branch sim_iic_scl_output_low 
+:      016398 sim_iic_ack_slave:
+0x4879 016399 call sim_iic_scl_output_low 
+0x487a 016400 call sim_iic_sda_output_low 
+0x487b 016401 call sim_iic_delay 
+0x487c 016402 call sim_iic_scl_output_high 
+0x487d 016403 call sim_iic_delay 
+0x487e 016404 branch sim_iic_scl_output_low 
+:      016409 sim_iic_read_byte:
+0x487f 016410 arg 8 ,loopcnt 
+0x4880 016411 arg 0 ,regc 
+0x4881 016412 call sim_iic_release_sda 
+:      016413 sim_iic_read_byte_loop:
+0x4882 016414 call sim_iic_scl_output_high 
+0x4883 016415 call sim_iic_delay 
+0x4884 016416 lshift regc ,regc 
+0x4885 016417 call sim_iic_read_sda_level 
+0x4886 016418 iadd regc ,regc 
+0x4887 016419 call sim_iic_delay 
+0x4888 016420 call sim_iic_scl_output_low 
+0x4889 016421 loop sim_iic_read_byte_loop 
+0x488a 016422 call sim_iic_ack_slave 
+0x488b 016423 copy regc ,pdata 
+0x488c 016424 rtn 
+:      016428 sim_iic_send_byte:
+0x488d 016429 arg 8 ,loopcnt 
+0x488e 016430 copy pdata ,regc 
+0x488f 016431 call sim_iic_scl_output_low 
+:      016432 sim_iic_send_byte_loop:
+0x4890 016433 isolate1 7 ,regc 
+0x4891 016434 call sim_iic_sda_output_high ,true 
+0x4892 016435 ncall sim_iic_sda_output_low ,true 
+0x4893 016436 lshift regc ,regc 
+0x4894 016437 call sim_iic_delay 
+0x4895 016438 call sim_iic_scl_output_high 
+0x4896 016439 call sim_iic_delay 
+0x4897 016440 call sim_iic_scl_output_low 
+0x4898 016441 call sim_iic_delay 
+0x4899 016442 loop sim_iic_send_byte_loop 
+0x489a 016443 branch sim_iic_wait_ack 
+:      016447 sim_iic_start:
+0x489b 016448 call sim_iic_sda_output_high 
+0x489c 016449 call sim_iic_scl_output_high 
+0x489d 016450 call sim_iic_delay 
+0x489e 016451 call sim_iic_sda_output_low 
+0x489f 016452 call sim_iic_delay 
+0x48a0 016453 branch sim_iic_scl_output_low 
+:      016457 sim_iic_stop:
+0x48a1 016458 call sim_iic_sda_output_low 
+0x48a2 016459 call sim_iic_scl_output_high 
+0x48a3 016460 call sim_iic_delay 
+0x48a4 016461 call sim_iic_sda_output_high 
+0x48a5 016462 branch sim_iic_delay 
+:      016466 sim_iic_scl_output_high:
+0x48a6 016467 enable user 
+0x48a7 016468 fetch 1 ,sim_iic_scl_gpio_num 
+0x48a8 016469 branch sim_iic_config_gpio 
+:      016472 sim_iic_scl_output_low:
+0x48a9 016473 disable user 
+0x48aa 016474 fetch 1 ,sim_iic_scl_gpio_num 
+0x48ab 016475 branch sim_iic_config_gpio 
+:      016478 sim_iic_sda_output_high:
+0x48ac 016479 enable user 
+0x48ad 016480 fetch 1 ,sim_iic_sda_gpio_num 
+0x48ae 016481 branch sim_iic_config_gpio 
+:      016484 sim_iic_sda_output_low:
+0x48af 016485 disable user 
+0x48b0 016486 fetch 1 ,sim_iic_sda_gpio_num 
+0x48b1 016487 branch sim_iic_config_gpio 
+:      016492 sim_iic_config_gpio:
+0x48b2 016493 and pdata ,0x07 ,queue 
+0x48b3 016494 rshift3 pdata ,pdata 
+0x48b4 016495 arg core_gpio_oe0 ,temp 
+0x48b5 016496 iadd temp ,temp 
+0x48b6 016497 ifetch 1 ,temp 
+0x48b7 016498 qset1 pdata 
+0x48b8 016499 istore 1 ,temp 
+0x48b9 016500 increase 4 ,temp 
+0x48ba 016501 ifetch 1 ,temp 
+0x48bb 016502 qsetflag user ,pdata 
+0x48bc 016503 istore 1 ,temp 
+0x48bd 016504 rtn 
+:      016507 sim_iic_release_sda:
+0x48be 016508 fetch 1 ,sim_iic_sda_gpio_num 
+0x48bf 016509 and pdata ,0x07 ,queue 
+0x48c0 016510 rshift3 pdata ,pdata 
+0x48c1 016511 arg core_gpio_oe0 ,temp 
+0x48c2 016512 iadd temp ,temp 
+0x48c3 016513 ifetch 1 ,temp 
+0x48c4 016514 qset0 pdata 
+0x48c5 016515 istore 1 ,temp 
+0x48c6 016516 rtn 
+:      016521 sim_iic_read_sda_level:
+0x48c7 016522 nop 4 
+0x48c8 016523 fetch 1 ,sim_iic_sda_gpio_num 
+0x48c9 016524 and pdata ,0x07 ,queue 
+0x48ca 016525 rshift3 pdata ,pdata 
+0x48cb 016526 arg core_gpio_in ,temp 
+0x48cc 016527 iadd temp ,temp 
+0x48cd 016528 setarg 0 
+0x48ce 016529 ifetcht 1 ,temp 
+0x48cf 016530 qisolate1 temp 
+0x48d0 016531 setflag true ,0 ,pdata 
+0x48d1 016532 rtn 
+:      016535 sim_iic_delay:
+0x48d2 016537 rtn 
+:      016543 usb_isr:
+0x48d3 016544 bpatch patch1e_6 ,mem_patch1e 
+0x48d4 016545 hfetch 1 ,core_usb_status 
+0x48d5 016546 isolate1 7 ,pdata 
+0x48d6 016547 call usb_init ,true 
+0x48d7 016548 call usb_nak_state_judge 
+0x48d8 016549 hfetch 1 ,core_usb_status 
+0x48d9 016550 store 1 ,mem_usb_status 
+0x48da 016551 hfetch 1 ,core_usb_fifo_empty 
+0x48db 016552 store 1 ,mem_usb_fifo_empty 
+0x48dc 016553 hstore 1 ,core_usb_fifo_empty 
+0x48dd 016554 pinvert 
+0x48de 016555 fetcht 1 ,mem_usb_tx_wait 
+0x48df 016556 iand temp ,pdata 
+0x48e0 016557 store 1 ,mem_usb_tx_wait 
+0x48e1 016558 jam 0xe0 ,core_usb_status 
+0x48e2 016559 fetch 1 ,mem_usb_fifo_empty 
+0x48e3 016560 compare 0x1 ,pdata ,0x1 
+0x48e4 016561 call usb0_fifo_empty ,true 
+0x48e5 016562 fetch 1 ,mem_usb_status 
+0x48e6 016563 compare 0x1 ,pdata ,0x1 
+0x48e7 016564 call usb_status1 ,true 
+0x48e8 016565 call usb_tx 
+0x48e9 016566 branch usb_nak_state 
+:      016568 usb_init:
+0x48ea 016569 bpatch patch1e_7 ,mem_patch1e 
+0x48eb 016570 call usb_init_param 
+0x48ec 016571 jam 0x00 ,core_usb_config 
+0x48ed 016572 nop 10000 
+0x48ee 016573 jam 0xc0 ,core_usb_trig 
+0x48ef 016574 hfetch 2 ,core_clkoff 
+0x48f0 016575 set0 clock_off_usb ,pdata 
+0x48f1 016576 hstore 2 ,core_clkoff 
+0x48f2 016577 jam 0x3c ,core_usb_config 
+0x48f3 016578 jam 0xff ,core_usb_status 
+0x48f4 016579 jam 0xff ,core_usb_fifo_empty 
+0x48f5 016580 jam 0 ,core_usb_addr 
+0x48f6 016581 jam dev_default ,mem_usb0_state 
+0x48f7 016582 setarg mem_usb_clear_mem_end 
+0x48f8 016583 arg mem_usb_clear_mem_start ,contw 
+0x48f9 016584 isub contw ,loopcnt 
+0x48fa 016585 branch clear_mem 
+:      016587 usb_offline_check_init:
+0x48fb 016588 fetcht 1 ,mem_usb_offline_check_gpio 
+0x48fc 016589 branch gpio_config_input 
+:      016590 usb_offline_state:
+0x48fd 016591 fetch 1 ,mem_usb_device_enumeration_endflag 
+0x48fe 016592 rtn blank 
+0x48ff 016593 fetcht 1 ,mem_usb_offline_check_gpio 
+0x4900 016594 call gpio_get_bit 
+0x4901 016595 branch usb_init ,true 
+0x4902 016596 rtn 
+:      016599 usb_nak_state:
+0x4903 016600 arg timer_nak ,queue 
+0x4904 016601 call timer_check 
+0x4905 016602 nrtn blank 
+0x4906 016603 fetch 1 ,mem_usb_wakestate_onetime_flag 
+0x4907 016604 nrtn blank 
+0x4908 016605 fetch 1 ,mem_usb_device_enumeration_endflag 
+0x4909 016606 ncall usb_mac_wakeup_judge ,blank 
+0x490a 016607 rtn 
+:      016609 usb_mem_devicedesc_init:
+0x490b 016610 arg mem_devicedesc ,contw 
+0x490c 016611 setsect 0 ,0x11212 
+0x490d 016612 setsect 1 ,0x8000 
+0x490e 016613 setsect 2 ,0x0 
+0x490f 016614 setsect 3 ,0x10000 
+0x4910 016615 istore 9 ,contw 
+0x4911 016616 setsect 0 ,0x22412 
+0x4912 016617 setsect 1 ,0x8604 
+0x4913 016618 setsect 2 ,0x1000 
+0x4914 016619 setsect 3 ,0x8 
+0x4915 016620 istore 9 ,contw 
+0x4916 016621 setsect 0 ,0x1 
+0x4917 016622 istore 1 ,contw 
+0x4918 016623 rtn 
+:      016625 usb_init_param:
+0x4919 016626 jam 2 ,mem_usb0_state 
+0x491a 016627 setarg 0x0 
+0x491b 016628 store 1 ,mem_remain 
+0x491c 016629 store 2 ,mem_usb_zero_packet 
+0x491d 016630 pincrease 1 
+0x491e 016631 store 2 ,mem_usb_ones_packet 
+0x491f 016632 pincrease 1 
+0x4920 016633 store 2 ,mem_usb_two_packet 
+0x4921 016634 setarg hid_kbdata_addr 
+0x4922 016635 store 2 ,mem_hidreportdesc_kb 
+0x4923 016636 setarg hid_msdata_addr 
+0x4924 016637 store 2 ,mem_hidreportdesc_m 
+0x4925 016638 arg mem_confdesc ,contw 
+0x4926 016639 arg hid_confdata_addr ,contr 
+0x4927 016640 call memcpy64 
+0x4928 016641 fetch 1 ,mem_usb_tx_interval 
+0x4929 016642 ncall usb_tx_interval_config ,blank 
+0x492a 016643 branch usb_mem_devicedesc_init 
+:      016645 usb_tx_interval_config:
+0x492b 016646 store 1 ,mem_confdesc + 34 
+0x492c 016647 store 1 ,mem_confdesc + 59 
+0x492d 016648 rtn 
+:      016649 usb_nak_state_judge:
+0x492e 016650 hfetch 1 ,core_usb_status 
+0x492f 016651 bbit1 usb_status_nak ,usb_nak_state_timer_init 
+0x4930 016652 rtn 
+:      016654 usb_nak_state_timer_init:
+0x4931 016655 call usb0_attached_state_judge 
+0x4932 016656 call timer_reinit 
+0x4933 016657 setarg timer_nak_delay 
+0x4934 016658 arg timer_nak ,queue 
+0x4935 016659 branch timer_init 
+:      016661 usb0_attached_state_judge:
+0x4936 016662 fetch 1 ,mem_usb_state 
+0x4937 016663 bne usb_connected ,usb_clear_halt_dispose 
+0x4938 016664 jam 0 ,mem_usb_wakestate_onetime_flag 
+0x4939 016665 jam 0 ,mem_usb_mac_wakeup_trig 
+0x493a 016666 rtn 
+:      016667 usb_clear_halt_dispose:
+0x493b 016668 fetch 1 ,mem_usb_clear_halt 
+0x493c 016669 rtn blank 
+0x493d 016670 jam 0 ,mem_usb_clear_halt 
+0x493e 016671 jam usb_connected ,mem_usb_state 
+0x493f 016672 jam 1 ,mem_usb_device_enumeration_endflag 
+0x4940 016673 rtn 
+:      016675 usb0_fifo_empty:
+0x4941 016676 jam 0x1 ,core_usb_fifo_empty 
+0x4942 016677 branch usb0_tx 
+:      016679 usb_rx_no_data:
+0x4943 016680 fetch 1 ,mem_usb_status 
+0x4944 016681 bbit1 usb_status_setup ,usb_class_type 
+0x4945 016682 rtn 
+:      016684 usb_rx_read:
+0x4946 016685 hfetch 1 ,core_usb_ep 
+0x4947 016686 istore 1 ,contw 
+0x4948 016687 loop usb_rx_read 
+0x4949 016688 rtn 
+:      016690 usb_status1:
+0x494a 016691 bpatch patch1f_0 ,mem_patch1f 
+0x494b 016692 jam 0x11 ,core_usb_status 
+0x494c 016693 hfetch 1 ,core_usb_ep_len 
+0x494d 016694 store 1 ,mem_usb_read_len 
+0x494e 016695 copy pdata ,loopcnt 
+0x494f 016696 branch usb_rx_no_data ,blank 
+0x4950 016697 arg mem_usb_setup ,contw 
+0x4951 016698 call usb_rx_read 
+0x4952 016699 fetch 1 ,mem_usb_read_len 
+0x4953 016700 sub pdata ,7 ,null 
+0x4954 016701 rtn positive 
+:      016702 usb_class_type:
+0x4955 016703 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x4956 016704 and_into 0x80 ,pdata 
+0x4957 016705 beq in_device ,usb_in_device 
+0x4958 016706 beq out_device ,usb_out_device 
+0x4959 016707 branch assert 
+:      016709 usb_in_device:
+0x495a 016710 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x495b 016711 rshift4 pdata ,pdata 
+0x495c 016712 rshift pdata ,pdata 
+0x495d 016713 and_into 0x03 ,pdata 
+0x495e 016714 beq standard_req ,usb_in_standard_req 
+0x495f 016715 beq class_req ,usb_in_class_req 
+0x4960 016716 beq manufacturer_req ,usb_in_manufacturer_req 
+0x4961 016717 branch assert 
+:      016719 usb_out_device:
+0x4962 016720 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x4963 016721 rshift4 pdata ,pdata 
+0x4964 016722 rshift pdata ,pdata 
+0x4965 016723 and_into 0x03 ,pdata 
+0x4966 016724 beq standard_req ,usb_out_standard_req 
+0x4967 016725 beq class_req ,usb_out_class_req 
+0x4968 016726 beq manufacturer_req ,usb_out_manufacturer_req 
+0x4969 016727 branch assert 
+:      016729 usb_in_standard_req:
+0x496a 016730 fetch 1 ,mem_usb_setup_brequest 
+0x496b 016731 beq get_configuration ,usb0_request_get_configuration 
+0x496c 016732 beq get_descriptor ,usb0_request_get_descriptor 
+0x496d 016733 beq get_interface ,usb0_request_get_interface 
+0x496e 016734 beq get_status ,usb0_request_get_status 
+0x496f 016735 branch usb0_force_stall 
+:      016737 usb_in_class_req:
+0x4970 016738 fetch 1 ,mem_usb_setup_brequest 
+0x4971 016739 beq get_idle ,usb_get_idle 
+0x4972 016740 beq get_report ,usb_get_report 
+0x4973 016741 beq get_protocol ,usb_get_protocol_req 
+0x4974 016742 branch usb0_force_stall 
+:      016744 usb_in_manufacturer_req:
+0x4975 016745 branch usb0_force_stall 
+:      016747 usb_out_standard_req:
+0x4976 016748 fetch 1 ,mem_usb_setup_brequest 
+0x4977 016749 beq clear_feature ,usb0_request_clear_feature 
+0x4978 016750 beq set_feature ,usb0_request_set_feature 
+0x4979 016751 beq set_address ,usb0_request_set_address 
+0x497a 016752 beq set_configuration ,usb0_request_set_configuration 
+0x497b 016753 beq set_interface ,usb0_request_set_interface 
+0x497c 016754 beq set_descriptor ,usb0_force_stall 
+0x497d 016755 branch usb0_force_stall 
+:      016757 usb_out_class_req:
+0x497e 016758 fetch 1 ,mem_usb_setup_brequest 
+0x497f 016759 beq set_idle ,usb_set_idle 
+0x4980 016760 beq set_report ,usb_set_report 
+0x4981 016761 beq set_protocol ,usb_set_protocol_req 
+0x4982 016762 branch usb0_force_stall 
+:      016764 usb_out_manufacturer_req:
+0x4983 016765 branch usb0_force_stall 
+:      016767 usb0_force_stall:
+0x4984 016768 hfetch 1 ,core_usb_stall 
+0x4985 016769 set1 0 ,pdata 
+0x4986 016770 hstore 1 ,core_usb_stall 
+0x4987 016771 branch usb0_reply_zerolen 
+:      016773 usb0_reply_zerolen:
+0x4988 016774 jam 0x40 ,core_usb_clear 
+0x4989 016775 rtn 
+:      016777 usb0_request_get_configuration:
+0x498a 016778 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x498b 016779 bne in_device ,usb0_force_stall 
+0x498c 016780 fetch 1 ,mem_usb_setup_windex 
+0x498d 016781 bne 0 ,usb0_force_stall 
+0x498e 016782 fetch 1 ,mem_usb_setup_windex + 1 
+0x498f 016783 bne 0 ,usb0_force_stall 
+0x4990 016784 fetch 1 ,mem_usb_setup_blength 
+0x4991 016785 bne 1 ,usb0_force_stall 
+0x4992 016786 fetch 1 ,mem_usb_setup_blengthh 
+0x4993 016787 bne 0 ,usb0_force_stall 
+0x4994 016788 fetch 1 ,mem_usb_setup_bvalue 
+0x4995 016789 bne 0 ,usb0_force_stall 
+0x4996 016790 fetch 1 ,mem_usb_setup_bvalue + 1 
+0x4997 016791 bne 0 ,usb0_force_stall 
+0x4998 016792 fetch 1 ,mem_usb0_state 
+0x4999 016793 beq dev_configured ,usb0_request_get_cfg_dev_cfg 
+0x499a 016794 beq dev_address ,usb0_request_get_cfg_dev_addr 
+0x499b 016795 branch usb0_force_stall 
+:      016797 usb0_request_get_cfg_dev_cfg:
+0x499c 016798 arg 1 ,regb 
+0x499d 016799 branch usb_send_ones_packet 
+:      016801 usb0_request_get_cfg_dev_addr:
+0x499e 016802 arg 1 ,regb 
+0x499f 016803 branch usb_send_zero_packet 
+:      016805 usb0_request_get_descriptor:
+0x49a0 016806 bpatch patch1f_1 ,mem_patch1f 
+0x49a1 016807 set0 mark_isstr ,mark 
+0x49a2 016808 fetch 1 ,mem_usb_setup_bvalueh 
+0x49a3 016809 beq dsc_device ,dsc_device_info 
+0x49a4 016810 beq dsc_config ,dsc_config_info 
+0x49a5 016811 beq dsc_string ,dsc_string_info 
+0x49a6 016812 beq dsc_hid ,dsc_hid_info 
+0x49a7 016813 beq dsc_hid_report ,dsc_hid_report_info 
+0x49a8 016814 branch usb0_force_stall 
+:      016816 dsc_hid_info:
+0x49a9 016817 jam 0 ,mem_usb_get_protocol_flag 
+0x49aa 016818 fetch 1 ,mem_usb_setup_windex 
+0x49ab 016819 beq 0 ,dsc_hid_info_interface0 
+0x49ac 016820 beq 1 ,dsc_hid_info_interface1 
+0x49ad 016821 branch usb0_force_stall 
+:      016823 dsc_hid_info_interface0:
+0x49ae 016824 arg mem_confdesc + 19 ,rega 
+0x49af 016825 ifetch 1 ,rega 
+0x49b0 016826 iforce regb 
+0x49b1 016827 branch usb0_respond 
+:      016829 dsc_hid_info_interface1:
+0x49b2 016830 arg mem_confdesc + 44 ,rega 
+0x49b3 016831 ifetch 1 ,rega 
+0x49b4 016832 iforce regb 
+0x49b5 016833 branch usb0_respond 
+:      016835 dsc_device_info:
+0x49b6 016839 fetch 1 ,mem_usb_set_high_addr_flag 
+0x49b7 016840 ncall usb_set_high_addr ,blank 
+0x49b8 016841 setarg mem_devicedesc 
+0x49b9 016842 fetcht 1 ,mem_devicedesc 
+:      016843 dsc_info_set_data_len:
+0x49ba 016844 store 2 ,mem_dsc_info_data_pointer 
+0x49bb 016845 storet 1 ,mem_dsc_info_len 
+0x49bc 016846 fetch 1 ,mem_usb_setup_blength 
+0x49bd 016847 isub temp ,null 
+0x49be 016848 nbranch dsc_info_set_current_data_len ,positive 
+:      016849 dsc_info_set_initial_data_len:
+0x49bf 016850 fetch 1 ,mem_dsc_info_len 
+:      016851 dsc_info_set_data_size_completed:
+0x49c0 016852 iforce regb 
+0x49c1 016853 fetch 2 ,mem_dsc_info_data_pointer 
+0x49c2 016854 add pdata ,1 ,pdata 
+0x49c3 016855 iforce rega 
+0x49c4 016856 branch usb0_respond 
+:      016857 dsc_info_set_current_data_len:
+0x49c5 016858 fetch 1 ,mem_usb_setup_blength 
+0x49c6 016859 branch dsc_info_set_data_size_completed 
+:      016861 usb_set_high_addr:
+0x49c7 016862 hfetch 1 ,core_usb_addr 
+0x49c8 016863 ncall usb0_set_addr ,blank 
+0x49c9 016864 jam 0 ,mem_usb_set_high_addr_flag 
+0x49ca 016865 rtn 
+:      016866 usb0_set_addr:
+0x49cb 016867 hfetch 1 ,core_usb_addr 
+0x49cc 016868 set1 7 ,pdata 
+0x49cd 016869 hstore 1 ,core_usb_addr 
+0x49ce 016870 rtn 
+:      016872 dsc_config_info:
+0x49cf 016873 setarg mem_confdesc 
+0x49d0 016874 fetcht 1 ,mem_confdesc 
+0x49d1 016875 branch dsc_info_set_data_len 
+:      016877 dsc_string_info:
+0x49d2 016878 fetch 1 ,mem_usb_setup_bvalue 
+0x49d3 016879 sub pdata ,3 ,null 
+0x49d4 016880 nbranch usb0_force_stall ,positive 
+0x49d5 016881 fetch 1 ,mem_usb_setup_bvalue 
+0x49d6 016882 arg mem_string0 ,rega 
+0x49d7 016883 beq 0 ,usb0_respond_length 
+0x49d8 016884 set1 mark_isstr ,mark 
+0x49d9 016885 arg mem_string1 ,rega 
+0x49da 016886 beq 1 ,usb0_respond_length 
+0x49db 016887 arg mem_string2 ,rega 
+0x49dc 016888 beq 2 ,usb0_respond_length 
+0x49dd 016889 arg mem_string3 ,rega 
+0x49de 016890 beq 3 ,usb0_respond_length 
+0x49df 016891 rtn 
+:      016893 dsc_hid_report_info:
+0x49e0 016894 fetch 2 ,mem_usb_setup_windex 
+0x49e1 016895 beq 1 ,dsc_hid_report_info0 
+0x49e2 016896 fetch 2 ,mem_hidreportdesc_kb 
+0x49e3 016897 copy pdata ,rega 
+0x49e4 016899 branch usb0_respond_length 
+:      016900 dsc_hid_report_info0:
+0x49e5 016901 jam 1 ,mem_usb_device_enumeration_endflag 
+0x49e6 016902 jam usb_got_report_req ,mem_usb_state 
+0x49e7 016903 fetch 2 ,mem_hidreportdesc_m 
+0x49e8 016904 copy pdata ,rega 
+0x49e9 016906 branch usb0_respond_length 
+:      016909 usb0_request_get_interface:
+0x49ea 016910 fetch 1 ,mem_usb0_state 
+0x49eb 016911 bne dev_configured ,usb0_force_stall 
+0x49ec 016912 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x49ed 016913 bne in_interface ,usb0_force_stall 
+0x49ee 016914 fetch 1 ,mem_usb_setup_bvalue 
+0x49ef 016915 bne 0 ,usb0_force_stall 
+0x49f0 016916 fetch 1 ,mem_usb_setup_bvalueh 
+0x49f1 016917 bne 0 ,usb0_force_stall 
+0x49f2 016918 fetch 1 ,mem_usb_setup_blength 
+0x49f3 016919 bne 1 ,usb0_force_stall 
+0x49f4 016920 fetch 1 ,mem_usb_setup_blengthh 
+0x49f5 016921 bne 0 ,usb0_force_stall 
+0x49f6 016922 fetch 1 ,mem_usb_setup_windex 
+0x49f7 016923 bne 0 ,usb0_force_stall 
+0x49f8 016924 fetch 1 ,mem_usb_setup_windex + 1 
+0x49f9 016925 bne 0 ,usb0_force_stall 
+0x49fa 016926 arg 1 ,regb 
+0x49fb 016927 branch usb_send_zero_packet 
+:      016930 usb0_request_get_status:
+0x49fc 016931 fetch 1 ,mem_usb0_state 
+0x49fd 016932 beq dev_default ,usb0_force_stall 
+0x49fe 016933 fetch 1 ,mem_usb_setup_bvalue 
+0x49ff 016934 bne 0 ,usb0_force_stall 
+0x4a00 016935 fetch 1 ,mem_usb_setup_bvalueh 
+0x4a01 016936 bne 0 ,usb0_force_stall 
+0x4a02 016937 fetch 1 ,mem_usb_setup_blength 
+0x4a03 016938 bne 2 ,usb0_force_stall 
+0x4a04 016939 fetch 1 ,mem_usb_setup_blengthh 
+0x4a05 016940 bne 0 ,usb0_force_stall 
+0x4a06 016941 fetch 1 ,mem_usb_setup_windex + 1 
+0x4a07 016942 bne 0 ,usb0_force_stall 
+0x4a08 016943 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x4a09 016944 beq in_device ,usb0_get_status_in_device 
+0x4a0a 016945 beq in_interface ,usb0_get_status_in_interface 
+0x4a0b 016946 beq in_endpoint ,usb0_get_status_in_endpoint 
+0x4a0c 016947 branch usb0_force_stall 
+:      016949 usb0_get_status_in_device:
+0x4a0d 016950 fetch 1 ,mem_usb_setup_windex 
+0x4a0e 016951 bne 0 ,usb0_force_stall 
+0x4a0f 016952 arg 2 ,regb 
+0x4a10 016953 fetch 1 ,mem_usb_remote_wakeup 
+0x4a11 016954 beq 0x01 ,usb_send_two_packet 
+:      016956 usb_send_zero_packet:
+0x4a12 016957 arg mem_usb_zero_packet ,rega 
+0x4a13 016958 branch usb0_respond 
+:      016959 usb_send_ones_packet:
+0x4a14 016960 arg mem_usb_ones_packet ,rega 
+0x4a15 016961 branch usb0_respond 
+:      016962 usb_send_two_packet:
+0x4a16 016963 arg mem_usb_two_packet ,rega 
+0x4a17 016964 branch usb0_respond 
+:      016966 usb0_get_status_in_interface:
+0x4a18 016967 fetch 1 ,mem_usb0_state 
+0x4a19 016968 bne dev_configured ,usb0_force_stall 
+0x4a1a 016969 arg 2 ,regb 
+0x4a1b 016970 branch usb_send_zero_packet 
+:      016972 usb0_get_status_in_endpoint:
+0x4a1c 016973 fetch 1 ,mem_usb0_state 
+0x4a1d 016974 bne dev_configured ,usb0_force_stall 
+0x4a1e 016975 fetch 1 ,mem_usb_setup_windex 
+0x4a1f 016976 beq in_ep1 ,usb0_get_status_in_ep_in_ep1 
+0x4a20 016977 beq in_ep2 ,usb0_get_status_in_ep_in_ep2 
+0x4a21 016978 beq in_ep3 ,usb0_get_status_in_ep_in_ep3 
+0x4a22 016979 and_into 0x7f ,pdata 
+0x4a23 016980 beq 0x00 ,usb0_get_status_in_ep_in_ep0 
+0x4a24 016981 branch usb0_force_stall 
+:      016983 usb0_get_status_in_ep_in_ep0:
+0x4a25 016984 fetch 1 ,mem_usb_ep0_stall_status 
+:      016985 usb0_get_status_in_ep_in_ack:
+0x4a26 016986 arg 2 ,regb 
+0x4a27 016987 beq 1 ,usb_send_ones_packet 
+0x4a28 016988 branch usb_send_zero_packet 
+:      016989 usb0_get_status_in_ep_in_ep1:
+0x4a29 016990 fetch 1 ,mem_usb_ep1_stall_status 
+0x4a2a 016991 branch usb0_get_status_in_ep_in_ack 
+:      016992 usb0_get_status_in_ep_in_ep2:
+0x4a2b 016993 fetch 1 ,mem_usb_ep2_stall_status 
+0x4a2c 016994 branch usb0_get_status_in_ep_in_ack 
+:      016995 usb0_get_status_in_ep_in_ep3:
+0x4a2d 016996 fetch 1 ,mem_usb_ep3_stall_status 
+0x4a2e 016997 branch usb0_get_status_in_ep_in_ack 
+:      016999 usb_get_idle:
+0x4a2f 017000 jam 1 ,mem_usb_idle_flag 
+0x4a30 017001 arg mem_usb_idle_rate ,rega 
+0x4a31 017002 arg 1 ,regb 
+0x4a32 017003 branch usb0_respond 
+:      017005 usb_get_report:
+0x4a33 017006 fetch 2 ,mem_usb_setup_bvalue 
+0x4a34 017007 arg pc_get_report ,temp 
+0x4a35 017008 isub temp ,null 
+0x4a36 017009 nbranch usb0_force_stall ,zero 
+0x4a37 017010 set0 mark_isstr ,mark 
+:      017011 usb_get_report_dispose:
+0x4a38 017012 fetch 1 ,mem_usb0_data_ready_report 
+0x4a39 017013 nbranch usb_get_report_data_success ,blank 
+0x4a3a 017014 jam pc_get_nondata ,mem_usb0_get_report_data 
+:      017015 usb_get_report_send_data:
+0x4a3b 017016 fetch 1 ,mem_usb_setup_blength 
+0x4a3c 017017 iforce regb 
+0x4a3d 017018 arg mem_usb0_get_report_data ,rega 
+0x4a3e 017019 call usb0_respond 
+:      017020 usb_get_report_data_release:
+0x4a3f 017021 arg mem_usb0_get_report_data ,contw 
+0x4a40 017022 arg 8 ,loopcnt 
+0x4a41 017023 branch memset0 
+:      017024 usb_get_report_data_success:
+0x4a42 017025 jam 0 ,mem_usb0_data_ready_report 
+0x4a43 017026 jam pc_get_data ,mem_usb0_get_report_data 
+0x4a44 017027 branch usb_get_report_send_data 
+:      017029 usb_get_protocol_req:
+0x4a45 017030 fetch 1 ,mem_usb_setup_blength 
+0x4a46 017031 bne 1 ,usb0_force_stall 
+0x4a47 017032 jam 1 ,mem_usb_get_protocol_flag 
+0x4a48 017033 arg 1 ,regb 
+0x4a49 017034 fetch 1 ,mem_usb_set_protocol_value 
+0x4a4a 017035 beq 0 ,usb_get_report_protocol 
+0x4a4b 017036 beq 1 ,usb_get_boot_protocol 
+0x4a4c 017037 branch usb_send_zero_packet 
+:      017038 usb_get_report_protocol:
+0x4a4d 017039 branch usb_send_ones_packet 
+:      017040 usb_get_boot_protocol:
+0x4a4e 017041 branch usb_send_zero_packet 
+:      017046 usb0_request_clear_feature:
+0x4a4f 017047 fetch 1 ,mem_usb0_state 
+0x4a50 017048 bne dev_configured ,usb0_force_stall 
+0x4a51 017049 fetch 1 ,mem_usb_setup_blength 
+0x4a52 017050 bne 0 ,usb0_force_stall 
+0x4a53 017051 fetch 1 ,mem_usb_setup_blengthh 
+0x4a54 017052 bne 0 ,usb0_force_stall 
+0x4a55 017053 fetch 1 ,mem_usb_setup_bvalueh 
+0x4a56 017054 bne 0 ,usb0_force_stall 
+0x4a57 017055 fetch 1 ,mem_usb_setup_windex + 1 
+0x4a58 017056 bne 0 ,usb0_force_stall 
+0x4a59 017057 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x4a5a 017058 beq out_device ,usb0_request_clear_feature_out_device 
+0x4a5b 017059 beq out_interface ,usb0_request_clear_feature_out_interface 
+0x4a5c 017060 beq out_endpoint ,usb0_request_clear_feature_out_endpoint 
+0x4a5d 017061 branch usb0_force_stall 
+:      017063 usb0_request_clear_feature_out_device:
+0x4a5e 017064 fetch 1 ,mem_usb_setup_bvalue 
+0x4a5f 017065 bne device_remote_wakeup ,usb0_force_stall 
+0x4a60 017066 hfetch 1 ,core_usb_config 
+0x4a61 017067 set0 7 ,pdata 
+0x4a62 017068 hstore 1 ,core_usb_config 
+0x4a63 017069 jam 0 ,mem_usb_remote_wakeup 
+0x4a64 017070 jam 1 ,mem_usb_clear_remote_wakeup 
+0x4a65 017071 branch usb0_reply_zerolen 
+:      017073 usb0_request_clear_feature_out_interface:
+0x4a66 017074 branch usb0_force_stall 
+:      017076 usb0_request_clear_feature_out_endpoint:
+0x4a67 017077 fetch 1 ,mem_usb_setup_bvalue 
+0x4a68 017078 bne endpoint_halt ,usb0_force_stall 
+0x4a69 017079 fetch 1 ,mem_usb_setup_windex 
+0x4a6a 017080 beq in_ep1 ,usb0_force_stall_ep1_in_off 
+0x4a6b 017081 beq in_ep2 ,usb0_force_stall_ep2_in_off 
+0x4a6c 017082 beq in_ep3 ,usb0_force_stall_ep3_in_off 
+0x4a6d 017083 and_into 0x7f ,pdata 
+0x4a6e 017084 beq 0x00 ,usb0_force_stall_ep0_in_off 
+0x4a6f 017085 branch usb0_force_stall 
+:      017087 usb0_force_stall_ep0_in_off:
+0x4a70 017088 jam 0 ,mem_usb_ep0_stall_status 
+0x4a71 017089 branch usb0_reply_zerolen 
+:      017090 usb0_force_stall_ep1_in_off:
+0x4a72 017091 jam 0 ,mem_usb_ep1_stall_status 
+:      017092 usb0_force_stall_ep1_in_off_reply:
+0x4a73 017093 jam 1 ,mem_usb_clear_halt 
+0x4a74 017094 branch usb0_reply_zerolen 
+:      017095 usb0_force_stall_ep2_in_off:
+0x4a75 017096 jam 0 ,mem_usb_ep2_stall_status 
+0x4a76 017097 branch usb0_force_stall_ep1_in_off_reply 
+:      017098 usb0_force_stall_ep3_in_off:
+0x4a77 017099 jam 0 ,mem_usb_ep3_stall_status 
+0x4a78 017100 branch usb0_force_stall_ep1_in_off_reply 
+:      017103 usb0_request_set_feature:
+0x4a79 017104 fetch 1 ,mem_usb_setup_blength 
+0x4a7a 017105 bne 0 ,usb0_force_stall 
+0x4a7b 017106 fetch 1 ,mem_usb_setup_blengthh 
+0x4a7c 017107 bne 0 ,usb0_force_stall 
+0x4a7d 017108 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x4a7e 017109 beq out_device ,usb0_request_set_feature_out_device 
+0x4a7f 017110 beq out_interface ,usb0_request_set_feature_out_interface 
+0x4a80 017111 beq out_endpoint ,usb0_request_set_feature_out_endpoint 
+0x4a81 017112 branch usb0_force_stall 
+:      017114 usb0_request_set_feature_out_device:
+0x4a82 017115 fetch 1 ,mem_usb_setup_bvalue 
+0x4a83 017116 bne device_remote_wakeup ,usb0_force_stall 
+0x4a84 017117 hfetch 1 ,core_usb_config 
+0x4a85 017118 set1 7 ,pdata 
+0x4a86 017119 hstore 1 ,core_usb_config 
+0x4a87 017120 jam 1 ,mem_usb_remote_wakeup 
+0x4a88 017121 jam usb_sleep ,mem_usb_state 
+0x4a89 017122 jam 0 ,mem_usb_tx_win_enable 
+0x4a8a 017123 call usb0_reply_zerolen 
+:      017124 usb_wakeup_timer_reinit:
+0x4a8b 017125 call timer_reinit 
+0x4a8c 017126 setarg timer_wakeup_delay 
+0x4a8d 017127 arg timer_wakeup ,queue 
+0x4a8e 017128 branch timer_init 
+:      017130 usb0_request_set_feature_out_interface:
+0x4a8f 017131 branch usb0_force_stall 
+:      017133 usb0_request_set_feature_out_endpoint:
+0x4a90 017134 fetch 1 ,mem_usb_setup_bvalue 
+0x4a91 017135 bne endpoint_halt ,usb0_force_stall 
+0x4a92 017136 fetch 1 ,mem_usb_setup_bvalueh 
+0x4a93 017137 bne 0 ,usb0_force_stall 
+0x4a94 017138 fetch 1 ,mem_usb_setup_windex 
+0x4a95 017139 beq in_ep1 ,usb0_force_stall_ep1_in_on 
+0x4a96 017140 beq in_ep2 ,usb0_force_stall_ep2_in_on 
+0x4a97 017141 beq in_ep3 ,usb0_force_stall_ep3_in_on 
+0x4a98 017142 and_into 0x7f ,pdata 
+0x4a99 017143 beq 0x00 ,usb0_force_stall_ep0_in_on 
+0x4a9a 017144 branch usb0_force_stall 
+:      017146 usb0_force_stall_ep0_in_on:
+0x4a9b 017147 jam 1 ,mem_usb_ep0_stall_status 
+0x4a9c 017148 branch usb0_reply_zerolen 
+:      017149 usb0_force_stall_ep1_in_on:
+0x4a9d 017150 jam 1 ,mem_usb_ep1_stall_status 
+0x4a9e 017151 branch usb0_reply_zerolen 
+:      017152 usb0_force_stall_ep2_in_on:
+0x4a9f 017153 jam 1 ,mem_usb_ep2_stall_status 
+0x4aa0 017154 branch usb0_reply_zerolen 
+:      017155 usb0_force_stall_ep3_in_on:
+0x4aa1 017156 jam 1 ,mem_usb_ep3_stall_status 
+0x4aa2 017157 branch usb0_reply_zerolen 
+:      017160 usb0_request_set_address:
+0x4aa3 017161 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x4aa4 017162 bne out_device ,usb0_force_stall 
+0x4aa5 017163 fetch 1 ,mem_usb_setup_windex 
+0x4aa6 017164 bne 0 ,usb0_force_stall 
+0x4aa7 017165 fetch 1 ,mem_usb_setup_windex + 1 
+0x4aa8 017166 bne 0 ,usb0_force_stall 
+0x4aa9 017167 fetch 1 ,mem_usb_setup_blength 
+0x4aaa 017168 bne 0 ,usb0_force_stall 
+0x4aab 017169 fetch 1 ,mem_usb_setup_blengthh 
+0x4aac 017170 bne 0 ,usb0_force_stall 
+0x4aad 017171 fetch 1 ,mem_usb_setup_bvalueh 
+0x4aae 017172 bne 0 ,usb0_force_stall 
+0x4aaf 017173 fetch 1 ,mem_usb_setup_bvalue 
+0x4ab0 017174 and_into 0x80 ,pdata 
+0x4ab1 017175 bne 0 ,usb0_force_stall 
+0x4ab2 017176 fetch 1 ,mem_usb_setup_bvalue 
+0x4ab3 017177 bne 0 ,usb_usb0_state_set_dev_addr 
+:      017178 usb_usb0_state_set_dev_default:
+0x4ab4 017179 jam dev_default ,mem_usb0_state 
+:      017180 usb0_request_set_wait_address:
+0x4ab5 017181 fetch 1 ,mem_usb_setup_bvalue 
+0x4ab6 017182 hstore 1 ,core_usb_addr 
+0x4ab7 017183 call usb0_reply_zerolen 
+0x4ab8 017184 jam 1 ,mem_usb_set_high_addr_flag 
+0x4ab9 017185 rtn 
+:      017186 usb_usb0_state_set_dev_addr:
+0x4aba 017187 jam dev_address ,mem_usb0_state 
+0x4abb 017188 branch usb0_request_set_wait_address 
+:      017191 usb0_request_set_configuration:
+0x4abc 017192 fetch 1 ,mem_usb0_state 
+0x4abd 017193 beq dev_default ,usb0_force_stall 
+0x4abe 017194 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x4abf 017195 bne out_device ,usb0_force_stall 
+0x4ac0 017196 fetch 1 ,mem_usb_setup_windex 
+0x4ac1 017197 bne 0 ,usb0_force_stall 
+0x4ac2 017198 fetch 1 ,mem_usb_setup_windex + 1 
+0x4ac3 017199 bne 0 ,usb0_force_stall 
+0x4ac4 017200 fetch 1 ,mem_usb_setup_blength 
+0x4ac5 017201 bne 0 ,usb0_force_stall 
+0x4ac6 017202 fetch 1 ,mem_usb_setup_blengthh 
+0x4ac7 017203 bne 0 ,usb0_force_stall 
+0x4ac8 017204 fetch 1 ,mem_usb_setup_bvalue + 1 
+0x4ac9 017205 bne 0 ,usb0_force_stall 
+0x4aca 017206 fetch 1 ,mem_usb_setup_bvalue 
+0x4acb 017207 sub pdata ,usb_max_num_cfg ,null 
+0x4acc 017208 nbranch usb0_force_stall ,positive 
+0x4acd 017209 fetch 1 ,mem_usb0_state 
+0x4ace 017210 beq dev_address ,usb0_request_set_cfg_addr_state 
+0x4acf 017211 beq dev_configured ,usb0_request_set_cfg_cfg_state 
+0x4ad0 017212 branch usb0_force_stall 
+:      017214 usb0_request_set_cfg_addr_state:
+:      017215 usb0_request_set_cfg_cfg_state:
+0x4ad1 017216 fetch 1 ,mem_usb_setup_bvalue 
+0x4ad2 017217 beq 0 ,usb0_request_set_cfg_stay_addr_state 
+0x4ad3 017218 jam dev_configured ,mem_usb0_state 
+0x4ad4 017219 branch usb0_reply_zerolen 
+:      017220 usb0_request_set_cfg_stay_addr_state:
+0x4ad5 017221 jam dev_address ,mem_usb0_state 
+0x4ad6 017222 branch usb0_reply_zerolen 
+:      017225 usb0_request_set_interface:
+0x4ad7 017226 fetch 1 ,mem_usb0_state 
+0x4ad8 017227 bne dev_configured ,usb0_force_stall 
+0x4ad9 017228 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x4ada 017229 bne out_interface ,usb0_force_stall 
+0x4adb 017230 fetch 1 ,mem_usb_setup_bvalue 
+0x4adc 017231 bne 0 ,usb0_force_stall 
+0x4add 017232 fetch 1 ,mem_usb_setup_bvalueh 
+0x4ade 017233 bne 0 ,usb0_force_stall 
+0x4adf 017234 fetch 1 ,mem_usb_setup_blength 
+0x4ae0 017235 bne 0 ,usb0_force_stall 
+0x4ae1 017236 fetch 1 ,mem_usb_setup_blengthh 
+0x4ae2 017237 bne 0 ,usb0_force_stall 
+0x4ae3 017238 fetch 1 ,mem_usb_setup_windex 
+0x4ae4 017239 bne 0 ,usb0_force_stall 
+0x4ae5 017240 fetch 1 ,mem_usb_setup_windex + 1 
+0x4ae6 017241 bne 0 ,usb0_force_stall 
+0x4ae7 017242 branch usb0_reply_zerolen 
+:      017245 usb_set_idle:
+0x4ae8 017246 jam 1 ,mem_usb_idle_flag 
+0x4ae9 017247 fetch 1 ,mem_usb_setup_bvalueh 
+0x4aea 017248 store 1 ,mem_usb_idle_rate 
+0x4aeb 017249 fetch 1 ,mem_usb_setup_windex 
+0x4aec 017250 sub pdata ,1 ,null 
+0x4aed 017251 call usb_clear_remote_wakeup_set0 ,zero 
+0x4aee 017252 fetch 1 ,mem_usb_state 
+0x4aef 017253 bne usb_resume ,usb0_reply_zerolen 
+0x4af0 017254 jam usb_connected ,mem_usb_state 
+0x4af1 017255 call usb0_reply_zerolen 
+0x4af2 017256 nop 30000 
+0x4af3 017257 nop 30000 
+0x4af4 017258 rtn 
+:      017259 usb_clear_remote_wakeup_set0:
+0x4af5 017260 jam 1 ,mem_usb_device_enumeration_endflag 
+0x4af6 017261 jam 0 ,mem_usb_clear_remote_wakeup 
+0x4af7 017262 jam usb_resume ,mem_usb_state 
+0x4af8 017263 rtn 
+:      017266 usb_set_report:
+0x4af9 017267 jam 1 ,mem_usb0_get_set_report 
+0x4afa 017268 call usb_set_report_resume_judge 
+0x4afb 017269 fetch 2 ,mem_usb_setup_bvalue 
+0x4afc 017270 store 2 ,mem_usb_setup_bvalue_temp 
+0x4afd 017271 fetch 1 ,mem_usb_setup_blength 
+0x4afe 017272 iforce loopcnt 
+0x4aff 017273 arg mem_usb0_setup ,contr 
+0x4b00 017274 arg mem_usb0_set_report_data ,contw 
+0x4b01 017275 call memcpy 
+0x4b02 017276 branch usb0_reply_zerolen 
+:      017278 usb_set_report_resume_judge:
+0x4b03 017279 fetch 2 ,mem_usb_setup_bvalue 
+0x4b04 017280 arg pc_set_report_bvalue ,temp 
+0x4b05 017281 isub temp ,null 
+0x4b06 017282 nrtn zero 
+0x4b07 017283 fetch 2 ,mem_usb_setup_windex 
+0x4b08 017284 arg pc_set_report_windex ,temp 
+0x4b09 017285 isub temp ,null 
+0x4b0a 017286 nrtn zero 
+0x4b0b 017287 fetch 2 ,mem_usb_setup_blength 
+0x4b0c 017288 arg pc_set_report_blength ,temp 
+0x4b0d 017289 isub temp ,null 
+0x4b0e 017290 nrtn zero 
+0x4b0f 017291 jam 1 ,mem_usb_tx_win_enable 
+0x4b10 017292 rtn 
+:      017295 usb_set_protocol_req:
+0x4b11 017296 fetch 1 ,mem_usb_setup_blength 
+0x4b12 017297 bne 0 ,usb0_force_stall 
+0x4b13 017298 fetch 1 ,mem_usb_setup_bvalue 
+0x4b14 017299 beq boot_protocol ,usb_set_boot_protocol 
+0x4b15 017300 beq report_protocol ,usb_set_report_protocol 
+0x4b16 017301 branch usb0_force_stall 
+:      017302 usb_set_boot_protocol:
+0x4b17 017303 jam 0 ,mem_usb_set_protocol_status 
+0x4b18 017304 jam 1 ,mem_usb_set_protocol_value 
+0x4b19 017305 branch usb0_reply_zerolen 
+:      017306 usb_set_report_protocol:
+0x4b1a 017307 jam 1 ,mem_usb_tx_mac_enable 
+0x4b1b 017308 jam 1 ,mem_usb_set_protocol_status 
+0x4b1c 017309 jam 0 ,mem_usb_set_protocol_value 
+0x4b1d 017310 branch usb0_reply_zerolen 
+:      017313 usb0_respond_length:
+0x4b1e 017314 ifetch 1 ,rega 
+0x4b1f 017315 iforce regb 
+0x4b20 017316 increase 1 ,rega 
+:      017318 usb0_respond:
+0x4b21 017319 bpatch patch1f_2 ,mem_patch1f 
+0x4b22 017320 bmark0 mark_isstr ,usb0_respond0 
+0x4b23 017321 add regb ,1 ,pdata 
+0x4b24 017322 lshift pdata ,pdata 
+0x4b25 017323 hstore 1 ,core_usb_dfifo0 
+0x4b26 017324 jam 3 ,core_usb_dfifo0 
+0x4b27 017325 fetch 1 ,mem_usb_setup_blength 
+0x4b28 017326 increase -2 ,pdata 
+0x4b29 017327 rshift pdata ,pdata 
+0x4b2a 017328 store 1 ,mem_usb_setup_blength 
+0x4b2b 017329 beq 0 ,usb_no_respond_data 
+:      017330 usb0_respond0:
+0x4b2c 017331 fetch 2 ,mem_usb_setup_blength 
+0x4b2d 017332 isub regb ,null 
+0x4b2e 017333 branch usb0_respond1 ,positive 
+0x4b2f 017334 copy pdata ,regb 
+:      017335 usb0_respond1:
+0x4b30 017336 deposit rega 
+0x4b31 017337 store 2 ,mem_bufptr 
+0x4b32 017338 deposit regb 
+0x4b33 017339 store 1 ,mem_remain 
+0x4b34 017340 branch usb0_tx 
+:      017342 usb_no_respond_data:
+0x4b35 017343 arg 0 ,queue 
+0x4b36 017344 branch usb_trig 
+:      017347 usb0_tx:
+0x4b37 017348 bpatch patch1f_3 ,mem_patch1f 
+0x4b38 017349 fetch 1 ,mem_remain 
+0x4b39 017350 rtn blank 
+0x4b3a 017351 copy pdata ,loopcnt 
+0x4b3b 017352 sub pdata ,ep0_packet_size ,null 
+0x4b3c 017353 branch usb0_tx_info ,positive 
+0x4b3d 017354 arg ep0_packet_size ,loopcnt 
+:      017355 usb0_tx_info:
+0x4b3e 017356 fetch 1 ,mem_remain 
+0x4b3f 017357 isub loopcnt ,pdata 
+0x4b40 017358 store 1 ,mem_remain 
+0x4b41 017359 fetch 2 ,mem_bufptr 
+0x4b42 017360 copy pdata ,contr 
+:      017361 usb0_tx0:
+0x4b43 017362 ifetch 1 ,contr 
+0x4b44 017363 hstore 1 ,core_usb_dfifo0 
+0x4b45 017364 bmark0 mark_isstr ,usb0_tx1 
+0x4b46 017365 jam 0 ,core_usb_dfifo0 
+:      017366 usb0_tx1:
+0x4b47 017367 loop usb0_tx0 
+0x4b48 017368 copy contr ,pdata 
+0x4b49 017369 store 2 ,mem_bufptr 
+0x4b4a 017370 arg 0 ,queue 
+0x4b4b 017371 call usb_trig 
+0x4b4c 017372 fetch 1 ,mem_remain 
+0x4b4d 017373 nrtn blank 
+0x4b4e 017374 fetch 1 ,mem_usb_state 
+0x4b4f 017375 rtnne usb_got_report_req 
+0x4b50 017376 jam usb_connected ,mem_usb_state 
+0x4b51 017377 rtn 
+:      017380 usb_tx_ep1:
+0x4b52 017381 arg core_usb_dfifo1 ,rega 
+0x4b53 017382 arg 1 ,queue 
+:      017383 usb_tx_loop:
+0x4b54 017384 ifetch 1 ,contr 
+0x4b55 017385 istore 1 ,rega 
+0x4b56 017386 loop usb_tx_loop 
+:      017387 usb_trig:
+0x4b57 017388 setarg 0 
+0x4b58 017389 qset1 pdata 
+0x4b59 017390 hstore 1 ,core_usb_trig 
+0x4b5a 017391 fetcht 1 ,mem_usb_tx_wait 
+0x4b5b 017392 ior temp ,pdata 
+0x4b5c 017393 store 1 ,mem_usb_tx_wait 
+0x4b5d 017394 rtn 
+:      017396 usb_tx_ep2:
+0x4b5e 017397 arg 2 ,queue 
+0x4b5f 017398 arg core_usb_dfifo2 ,rega 
+0x4b60 017399 branch usb_tx_loop 
+:      017401 usb_tx:
+0x4b61 017402 bpatch patch1f_4 ,mem_patch1f 
+0x4b62 017403 fetch 1 ,mem_usb_tx_enable 
+0x4b63 017404 rtn blank 
+0x4b64 017405 fetch 1 ,mem_usb_tx_wait 
+0x4b65 017406 nbranch usb_inwake_state_tx_dispose ,blank 
+0x4b66 017407 fetch 1 ,mem_usb_device_enumeration_endflag 
+0x4b67 017408 branch usb_tx_fifo_release ,blank 
+0x4b68 017409 fetch 1 ,mem_usb_state 
+0x4b69 017410 beq usb_sleep ,usb_windows_wakeup 
+0x4b6a 017411 bne usb_connected ,usb_tx_fifo_release 
+0x4b6b 017412 fetch 1 ,mem_usb_clear_remote_wakeup 
+0x4b6c 017413 nbranch usb_tx_fifo_release ,blank 
+0x4b6d 017414 call usb_tx_data_ep1 
+0x4b6e 017415 branch usb_tx_data_ep2 
+:      017417 usb_tx_data_ep1:
+0x4b6f 017418 fetch 1 ,mem_usb_tx_enable 
+0x4b70 017419 rtnbit0 1 
+0x4b71 017420 fetch 1 ,mem_usb_tx_wait 
+0x4b72 017421 rtnbit1 1 
+0x4b73 017422 fetch 1 ,mem_usb_tx_enable 
+0x4b74 017423 set0 1 ,pdata 
+0x4b75 017424 store 1 ,mem_usb_tx_enable 
+0x4b76 017425 fetch 1 ,mem_usb_ep1_data 
+0x4b77 017426 rtn blank 
+0x4b78 017427 beq usb_ep1_kb ,usb_tx_kb_normal_data 
+0x4b79 017428 branch assert 
+:      017430 usb_tx_data_ep2:
+0x4b7a 017431 fetch 1 ,mem_usb_tx_enable 
+0x4b7b 017432 rtnbit0 2 
+0x4b7c 017433 fetch 1 ,mem_usb_tx_wait 
+0x4b7d 017434 rtnbit1 2 
+0x4b7e 017435 fetch 1 ,mem_usb_tx_enable 
+0x4b7f 017436 set0 2 ,pdata 
+0x4b80 017437 store 1 ,mem_usb_tx_enable 
+0x4b81 017438 fetch 1 ,mem_usb_ep2_data 
+0x4b82 017439 rtn blank 
+0x4b83 017440 beq usb_ep2_ms ,usb_tx_ms_data 
+0x4b84 017441 beq usb_ep2_multikey ,usb_tx_kb_multikey_data 
+0x4b85 017442 branch assert 
+:      017444 usb_tx_fifo_release:
+0x4b86 017446 arg mem_usb_mouse_data ,contw 
+0x4b87 017447 arg 6 ,loopcnt 
+0x4b88 017448 branch memset0 
+:      017450 usb_tx_ms_data:
+0x4b89 017451 fetch 1 ,mem_usb_idle_flag 
+0x4b8a 017452 fetcht 1 ,mem_usb_get_protocol_flag 
+0x4b8b 017453 iand temp ,pdata 
+0x4b8c 017454 branch usb_tx_ms_data_normal_mode ,blank 
+0x4b8d 017455 fetcht 1 ,mem_usb_set_protocol_status 
+0x4b8e 017456 iadd temp ,pdata 
+0x4b8f 017457 beq mac_boot_mode ,usb_tx_ms_data_mac_boot_mode 
+0x4b90 017458 branch usb_tx_ms_data_normal_mode 
+:      017460 usb_tx_ms_data_mac_boot_mode:
+0x4b91 017461 jam 0 ,mem_usb_ep2_data 
+:      017462 usb_tx_ms_data_mac_boot_regroup:
+0x4b92 017463 fetch 1 ,mem_usb_mouse_data + 1 
+0x4b93 017464 beq r_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey 
+0x4b94 017465 beq lr_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey 
+0x4b95 017466 fetch 1 ,mem_usb_mouse_data + 1 
+0x4b96 017467 store 1 ,mem_usb_mouse_data 
+0x4b97 017468 fetch 1 ,mem_usb_mouse_data + 2 
+0x4b98 017469 istore 1 ,contw 
+0x4b99 017470 fetch 1 ,mem_usb_mouse_data + 4 
+0x4b9a 017471 istore 1 ,contw 
+0x4b9b 017472 fetch 1 ,mem_usb_mouse_data + 6 
+0x4b9c 017473 istore 1 ,contw 
+0x4b9d 017474 arg 4 ,loopcnt 
+0x4b9e 017475 arg mem_usb_mouse_data ,contr 
+0x4b9f 017476 branch usb_tx_ep2 
+:      017478 usb_tx_ms_data_normal_mode:
+0x4ba0 017479 jam 0 ,mem_usb_ep2_data 
+:      017480 usb_tx_mac_boot_ms_regroup_r_or_lrkey:
+0x4ba1 017481 arg 8 ,loopcnt 
+0x4ba2 017482 arg mem_usb_mouse_data ,contr 
+0x4ba3 017483 branch usb_tx_ep2 
+:      017485 usb_tx_kb_multikey_data:
+0x4ba4 017486 jam 0 ,mem_usb_ep2_data 
+0x4ba5 017487 arg 3 ,loopcnt 
+0x4ba6 017488 arg mem_usb_kb_multikey ,contr 
+0x4ba7 017489 branch usb_tx_ep2 
+:      017491 usb_tx_kb_normal_data:
+0x4ba8 017492 jam 0 ,mem_usb_ep1_data 
+0x4ba9 017493 arg 8 ,loopcnt 
+0x4baa 017494 arg mem_usb_kb_data ,contr 
+0x4bab 017495 branch usb_tx_ep1 
+:      017497 usb_inwake_state_tx_dispose:
+0x4bac 017498 fetch 1 ,mem_usb_state 
+0x4bad 017499 beq usb_sleep ,usb_clear_tx_wait 
+0x4bae 017500 beq usb_connected ,usb_mac_wakeup_trig 
+0x4baf 017501 rtn 
+:      017502 usb_clear_tx_wait:
+0x4bb0 017503 jam 0 ,mem_usb_tx_wait 
+0x4bb1 017504 rtn 
+:      017505 usb_mac_wakeup_trig:
+0x4bb2 017506 hfetch 1 ,core_usb_config 
+0x4bb3 017507 set1 7 ,pdata 
+0x4bb4 017508 hstore 1 ,core_usb_config 
+0x4bb5 017509 jam 1 ,mem_usb_mac_wakeup_trig 
+0x4bb6 017510 rtn 
+:      017512 usb_mac_wakeup_judge:
+0x4bb7 017513 fetch 1 ,mem_usb_state 
+0x4bb8 017514 rtneq usb_sleep 
+0x4bb9 017515 beq usb_connected ,usb_mac_wakeup 
+0x4bba 017516 rtn 
+:      017517 usb_mac_wakeup:
+0x4bbb 017518 fetch 1 ,mem_usb_mac_wakeup_trig 
+0x4bbc 017519 rtn blank 
+0x4bbd 017520 jam 1 ,mem_usb_wakestate_onetime_flag 
+0x4bbe 017521 branch usb_wakeup 
+:      017523 usb_windows_wakeup:
+0x4bbf 017524 arg timer_wakeup ,queue 
+0x4bc0 017525 call timer_check 
+0x4bc1 017526 nrtn blank 
+:      017527 usb_wakeup:
+0x4bc2 017528 hfetch 1 ,core_usb_config 
+0x4bc3 017529 rtnbit0 7 
+0x4bc4 017530 jam 0xfc ,core_usb_config 
+0x4bc5 017531 nop 30000 
+0x4bc6 017532 jam 0x3c ,core_usb_config 
+0x4bc7 017533 rtn 
+:      017540 hci_rx_h4:
+0x4bc8 017541 bpatch patch1f_5 ,mem_patch1f 
+0x4bc9 017542 fetch 1 ,mem_hci_cmd 
+0x4bca 017543 nrtn blank 
+:      017544 hci_rx_h4_1:
+0x4bcb 017545 call hci_h4_parse_packet 
+0x4bcc 017546 ncall h4_rx_discard_packet ,user 
+0x4bcd 017547 rtn 
+:      017549 hci_h4_parse_packet:
+0x4bce 017550 bpatch patch1f_6 ,mem_patch1f 
+0x4bcf 017551 copy contru ,rega 
+0x4bd0 017552 arg 4 ,temp 
+0x4bd1 017553 ifetch 1 ,contru 
+0x4bd2 017554 beq hci_h4_type_cmd ,hci_h4_parse_packet_wait_len 
+0x4bd3 017555 increase 1 ,temp 
+0x4bd4 017556 beq hci_h4_type_acl ,hci_h4_parse_packet_wait_len 
+0x4bd5 017557 copy contru ,pdata 
+0x4bd6 017558 hstore 2 ,core_uart_rrptr 
+0x4bd7 017559 rtn 
+:      017560 hci_h4_parse_packet_wait_len:
+0x4bd8 017561 hfetch 2 ,core_uart_rxitems 
+0x4bd9 017562 isub temp ,null 
+0x4bda 017563 nbranch hci_h4_parse_packet_wait_len ,positive 
+0x4bdb 017565 disable user 
+0x4bdc 017566 copy rega ,contru 
+0x4bdd 017567 call h4_get_rx_payload_len 
+0x4bde 017568 iadd temp ,temp 
+:      017569 hci_h4_parse_packet_wait:
+0x4bdf 017570 hfetch 2 ,core_uart_rxitems 
+0x4be0 017571 isub temp ,null 
+0x4be1 017572 nbranch hci_h4_parse_packet_wait ,positive 
+0x4be2 017573 copy rega ,contru 
+0x4be3 017574 ifetch 1 ,contru 
+0x4be4 017575 beq hci_h4_type_cmd ,process_hci_cmd 
+0x4be5 017576 branch assert 
+:      017578 h4_rx_discard_packet:
+0x4be6 017579 bpatch patch1f_7 ,mem_patch1f 
+0x4be7 017580 hfetch 2 ,core_uart_rrptr 
+0x4be8 017581 iforce contru 
+0x4be9 017582 call h4_get_rx_payload_len 
+0x4bea 017583 iadd contru ,contru 
+0x4beb 017584 deposit contru 
+0x4bec 017585 hstore 2 ,core_uart_rrptr 
+0x4bed 017586 rtn 
+:      017591 h4_get_rx_payload_len:
+0x4bee 017592 ifetch 1 ,contru 
+0x4bef 017593 increase 2 ,contru 
+0x4bf0 017594 beq hci_h4_type_acl ,h4_get_rx_payload_len_acl 
+0x4bf1 017595 ifetch 1 ,contru 
+0x4bf2 017596 rtn 
+:      017597 h4_get_rx_payload_len_acl:
+0x4bf3 017598 ifetch 2 ,contru 
+0x4bf4 017599 rtn 
+:      017601 h4_get_tx_ptr:
+0x4bf5 017602 hfetch 2 ,core_uart_twptr 
+0x4bf6 017603 increase -5 ,contwu 
+0x4bf7 017604 iadd contwu ,contwu 
+0x4bf8 017605 rtn 
+:      017607 h4_send_packet_event:
+0x4bf9 017608 arg hci_h4_type_event ,temp 
+0x4bfa 017609 branch h4_send_packet 
+:      017610 h4_send_packet_acl:
+0x4bfb 017611 arg hci_h4_type_acl ,temp 
+:      017612 h4_send_packet:
+0x4bfc 017613 bpatchx patch20_0 ,mem_patch20 
+0x4bfd 017614 increase 1 ,loopcnt 
+0x4bfe 017615 hfetch 2 ,core_uart_twptr 
+0x4bff 017616 copy pdata ,contwu 
+0x4c00 017617 copy loopcnt ,pdata 
+0x4c01 017618 istoret 1 ,contwu 
+0x4c02 017619 increase -1 ,pdata 
+0x4c03 017620 iadd contwu ,contwu 
+0x4c04 017621 copy contwu ,pdata 
+0x4c05 017622 store 2 ,mem_hci_acl_tx_trigger_wptr 
+0x4c06 017623 copy temp ,pdata 
+0x4c07 017624 rtneq hci_h4_type_acl 
+0x4c08 017625 fetch 2 ,mem_hci_acl_tx_trigger_wptr 
+0x4c09 017626 hstore 2 ,core_uart_twptr 
+0x4c0a 017627 branch h4_send_acl_trigger_clear 
+:      017630 h4_send_acl_trigger_clear:
+0x4c0b 017631 setarg 0 
+0x4c0c 017632 store 2 ,mem_hci_acl_tx_trigger_wptr 
+0x4c0d 017633 rtn 
+:      017640 hci_init:
+0x4c0e 017641 rtn wake 
+0x4c0f 017642 setarg hci_idle_dispatch 
+0x4c10 017643 store 2 ,mem_cb_idle_process 
+0x4c11 017645 setarg uart_baud_115200 
+0x4c12 017646 store uart_baud_len ,mem_baud 
+:      017647 hci_lpm_init:
+0x4c13 017648 setarg mem_h5rx_buf 
+0x4c14 017649 hstore 2 ,core_uart_rsaddr 
+0x4c15 017650 setarg mem_h5rx_buf_end 
+0x4c16 017651 hstore 2 ,core_uart_readdr 
+0x4c17 017652 setarg mem_h5tx_buf 
+0x4c18 017653 hstore 2 ,core_uart_tsaddr 
+0x4c19 017654 call hci_sel_init 
+:      017655 hci_reinit:
+0x4c1a 017656 jam 0x0 ,core_uart_ctrl 
+0x4c1b 017657 setarg mem_h5tx_buf 
+0x4c1c 017658 hstore 2 ,core_uart_twptr 
+0x4c1d 017659 hstore 2 ,core_uart_trptrp 
+0x4c1e 017660 setarg mem_h5rx_buf 
+0x4c1f 017661 hstore 2 ,core_uart_rrptr 
+0x4c20 017662 store 2 ,mem_h5rx_rptr 
+:      017663 hci_init_common:
+0x4c21 017664 hfetch 2 ,core_clkoff 
+0x4c22 017665 set0 clock_off_uart ,pdata 
+0x4c23 017666 hstore 2 ,core_clkoff 
+0x4c24 017667 call uart_set_baud_by_mem 
+0x4c25 017668 jam uartclk_dpll ,core_uart_clksel 
+0x4c26 017669 jam uart_ctrl_h4 ,core_uart_ctrl 
+0x4c27 017670 rtn 
+:      017672 hci_sel_init:
+0x4c28 017673 setarg mem_h5tx_buf_end 
+0x4c29 017674 hstore 2 ,core_uart_teaddr 
+0x4c2a 017675 hfetch 1 ,core_gpio_sel1 
+0x4c2b 017676 or_into 0x07 ,pdata 
+0x4c2c 017677 hstore 1 ,core_gpio_sel1 
+0x4c2d 017678 rtn 
+:      017681 hci_rx_packet:
+0x4c2e 017682 bpatchx patch20_1 ,mem_patch20 
+0x4c2f 017683 hfetch 1 ,core_uart_status 
+0x4c30 017684 iforce regb 
+0x4c31 017685 bbit0 uart_status_rx_fifo_empty ,hci_rx_packet_cont 
+0x4c32 017686 hfetch 2 ,core_uart_rxitems 
+0x4c33 017687 iforce regc 
+0x4c34 017688 arg 0x44f ,temp 
+0x4c35 017689 isub temp ,null 
+0x4c36 017690 nrtn zero 
+:      017691 hci_rx_packet_cont:
+0x4c37 017692 hfetch 2 ,core_uart_rrptr 
+0x4c38 017693 iforce contru 
+0x4c39 017694 branch hci_rx_h4 
+:      017696 uart_send_byte:
+0x4c3a 017697 hfetcht 1 ,core_uart_status 
+0x4c3b 017698 isolate1 6 ,temp 
+0x4c3c 017699 branch uart_send_byte ,true 
+0x4c3d 017700 hstore 1 ,core_uart_txd 
+0x4c3e 017701 rtn 
+:      017703 process_hci_cmd:
+0x4c3f 017704 bpatchx patch20_2 ,mem_patch20 
+0x4c40 017705 fetch 1 ,mem_hci_cmd 
+0x4c41 017706 branch process_hci_cmd_cont ,blank 
+0x4c42 017707 enable user 
+0x4c43 017708 rtn 
+:      017709 process_hci_cmd_cont:
+0x4c44 017710 ifetch 2 ,contru 
+0x4c45 017711 iforce alarm 
+0x4c46 017712 iforce queue 
+0x4c47 017713 ifetch 1 ,contru 
+0x4c48 017714 iforce temp 
+0x4c49 017715 rshift2 alarm ,pdata 
+0x4c4a 017716 rshift8 pdata ,pdata 
+0x4c4b 017717 beq hci_ogf_vendor_specific ,phci_grp_vendor_specific 
+0x4c4c 017718 rtn 
+:      017721 phci_grp_vendor_specific:
+0x4c4d 017722 bpatchx patch20_3 ,mem_patch20 
+0x4c4e 017723 deposit queue 
+0x4c4f 017724 beq hci_vendor_cmd_reset ,hci_normal_reply 
+0x4c50 017725 beq hci_vendor_cmd_chipid ,phci_grp_vendor_chipid 
+0x4c51 017726 beq hci_vendor_cmd_baud ,phci_grp_vendor_baud 
+0x4c52 017727 beq hci_vendor_cmd_patch ,phci_grp_vendor_patch 
+0x4c53 017728 beq hci_vendor_cmd_patch_done ,phci_grp_vendor_done 
+0x4c54 017729 beq hci_vendor_cmd_echo ,hci_normal_reply 
+0x4c55 017730 beq hci_vendor_cmd_bdaddr ,phci_grp_vendor_bdaddr 
+0x4c56 017731 beq hci_vendor_cmd_enter_lpm ,phci_grp_vendor_enter_lpm 
+0x4c57 017733 beq hci_vendor_cmd_mem ,phci_grp_vendor_mem 
+0x4c58 017734 beq hci_vendor_cmd_eep ,phci_grp_vendor_eep 
+0x4c59 017735 beq hci_vendor_cmd_patch_sec_init ,phci_grp_vendor_patch_sec_init 
+0x4c5a 017736 beq hci_vendor_cmd_patch_sec ,phci_grp_vendor_patch_sec 
+0x4c5b 017737 branch hci_normal_reply 
+:      017739 phci_grp_vendor_enter_lpm:
+0x4c5c 017740 call hci_normal_reply 
+0x4c5d 017741 call wait_uarttx 
+0x4c5e 017742 call gpio_pu_uart_tx 
+:      017743 hci_enter_lpm:
+0x4c5f 017744 call app_put_lpm_wake_lock 
+0x4c60 017745 call app_l2cap_flow_control_enable 
+0x4c61 017746 branch gpio_rx_config_input_with_pu 
+:      017748 hci_exit_lpm:
+0x4c62 017749 jam hci_rx_ready ,mem_hci_lt_rx_state 
+0x4c63 017750 call app_get_lpm_wake_lock 
+0x4c64 017751 call hci_lpm_init 
+0x4c65 017752 branch app_l2cap_flow_control_disable 
+:      017754 phci_grp_vendor_chipid:
+0x4c66 017755 call hci_get_cmd_complete_ptr 
+0x4c67 017756 hfetch 2 ,core_chipid 
+0x4c68 017757 istore 2 ,contwu 
+0x4c69 017758 force 6 ,loopcnt 
+0x4c6a 017759 branch hci_command_complete 
+:      017761 phci_grp_vendor_baud:
+0x4c6b 017762 ifetch 2 ,contru 
+0x4c6c 017763 store 2 ,mem_baud 
+0x4c6d 017764 hstore 2 ,core_uart_baud 
+0x4c6e 017765 rtn 
+:      017768 phci_grp_vendor_patch_common:
+0x4c6f 017770 ifetch 1 ,contru 
+0x4c70 017771 copy pdata ,temp 
+0x4c71 017772 hstore 1 ,core_ucode_low 
+0x4c72 017773 ifetch 1 ,contru 
+0x4c73 017774 iadd temp ,temp 
+0x4c74 017775 set1 7 ,pdata 
+0x4c75 017776 hstore 1 ,core_ucode_ctrl 
+0x4c76 017777 ifetch 1 ,contru 
+0x4c77 017778 iadd temp ,temp 
+0x4c78 017779 copy pdata ,loopcnt 
+0x4c79 017780 rtn 
+:      017782 phci_grp_vendor_patch:
+0x4c7a 017783 bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad 
+0x4c7b 017784 call phci_grp_vendor_patch_common 
+:      017785 phci_grp_vendor_patch_loop:
+0x4c7c 017786 ifetch 1 ,contru 
+0x4c7d 017787 hstore 1 ,core_ucode_data 
+0x4c7e 017788 iadd temp ,temp 
+0x4c7f 017789 loop phci_grp_vendor_patch_loop 
+:      017790 phci_grp_vendor_patch_check_sum:
+0x4c80 017791 and temp ,0xff ,temp 
+0x4c81 017792 ifetch 1 ,contru 
+0x4c82 017793 isub temp ,null 
+0x4c83 017794 nbranch phci_grp_vendor_patch_bad ,zero 
+0x4c84 017795 branch hci_normal_reply 
+:      017798 phci_grp_vendor_patch_sec:
+0x4c85 017799 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad 
+0x4c86 017800 call phci_grp_vendor_patch_common 
+0x4c87 017801 store 8 ,mem_pdatatemp 
+:      017802 phci_grp_vendor_patch_sec_loop:
+0x4c88 017803 call do_aes_cbc 
+0x4c89 017804 arg 16 ,loopcnt 
+0x4c8a 017805 arg mem_temp_block0 ,contw 
+0x4c8b 017806 call load_uart_sum_loop 
+0x4c8c 017807 storet 8 ,mem_temp 
+0x4c8d 017808 arg mem_temp_block2 ,contw 
+0x4c8e 017809 call store_aes_result 
+0x4c8f 017810 arg mem_temp_block2 ,rega 
+0x4c90 017811 arg mem_temp_block0 ,regb 
+0x4c91 017812 arg mem_temp_block3 ,contw 
+0x4c92 017813 call xor16 
+0x4c93 017814 arg 16 ,loopcnt 
+0x4c94 017815 arg mem_temp_block3 ,contr 
+0x4c95 017816 call load_ucode_only_loop 
+0x4c96 017817 fetcht 8 ,mem_temp 
+0x4c97 017818 fetch 8 ,mem_pdatatemp 
+0x4c98 017819 increase -16 ,pdata 
+0x4c99 017820 store 8 ,mem_pdatatemp 
+0x4c9a 017821 nbranch phci_grp_vendor_patch_sec_loop ,blank 
+0x4c9b 017822 branch phci_grp_vendor_patch_check_sum 
+:      017824 load_ucode_only_loop:
+0x4c9c 017825 ifetch 1 ,contr 
+0x4c9d 017826 hstore 1 ,core_ucode_data 
+0x4c9e 017827 loop load_ucode_only_loop 
+0x4c9f 017828 rtn 
+:      017830 load_uart_sum_loop:
+0x4ca0 017831 ifetch 1 ,contru 
+0x4ca1 017832 istore 1 ,contw 
+0x4ca2 017833 iadd temp ,temp 
+0x4ca3 017834 loop load_uart_sum_loop 
+0x4ca4 017835 rtn 
+:      017837 phci_grp_vendor_patch_sec_init:
+0x4ca5 017838 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad 
+0x4ca6 017839 arg 0 ,temp 
+0x4ca7 017840 arg 16 ,loopcnt 
+0x4ca8 017841 arg mem_temp_block0 ,contw 
+0x4ca9 017842 call load_uart_sum_loop 
+0x4caa 017843 hfetch 1 ,core_gpio_key2 
+0x4cab 017844 and_into 0xfd ,pdata 
+0x4cac 017845 hstore 1 ,core_gpio_key2 
+0x4cad 017846 arg mem_temp_block0 ,contr 
+0x4cae 017847 arg 16 ,loopcnt 
+0x4caf 017848 call aes_load_data 
+0x4cb0 017849 call aes_init 
+0x4cb1 017850 call aes_clear_data 
+0x4cb2 017851 branch phci_grp_vendor_patch_check_sum 
+:      017854 phci_grp_vendor_done:
+0x4cb3 017855 arg 0x20 ,loopcnt 
+0x4cb4 017856 arg mem_patch00 ,contw 
+0x4cb5 017857 arg 0 ,temp 
+:      017858 phci_grp_vendor_done_loop:
+0x4cb6 017859 ifetch 1 ,contru 
+0x4cb7 017860 istore 1 ,contw 
+0x4cb8 017861 iadd temp ,temp 
+0x4cb9 017862 loop phci_grp_vendor_done_loop 
+0x4cba 017863 and temp ,0xff ,temp 
+0x4cbb 017864 ifetch 1 ,contru 
+0x4cbc 017865 isub temp ,null 
+0x4cbd 017866 nbranch phci_grp_vendor_patch_bad ,zero 
+0x4cbe 017867 jam 0 ,core_ucode_ctrl 
+0x4cbf 017868 call hci_normal_reply 
+0x4cc0 017869 call h4_rx_discard_packet 
+0x4cc1 017870 call clear_key_buf 
+0x4cc2 017871 call wait_uarttx 
+0x4cc3 017872 branch soft_reset 
+:      017874 phci_grp_vendor_patch_bad:
+0x4cc4 017875 jam 0 ,core_ucode_ctrl 
+0x4cc5 017876 branch start 
+:      017878 phci_grp_vendor_bdaddr:
+0x4cc6 017879 ifetch 6 ,contru 
+0x4cc7 017880 store 6 ,mem_lap 
+0x4cc8 017881 branch hci_normal_reply 
+:      017884 phci_grp_vendor_mem:
+0x4cc9 017885 ifetch 1 ,contru 
+0x4cca 017886 store 1 ,mem_hci_curr_len 
+0x4ccb 017887 copy pdata ,loopcnt 
+0x4ccc 017888 ifetch 2 ,contru 
+0x4ccd 017889 store 2 ,mem_hci_curr_target 
+0x4cce 017890 copy pdata ,contw 
+0x4ccf 017891 call uart_copy_rx_bytes 
+0x4cd0 017892 branch hci_normal_reply 
+:      017895 phci_grp_vendor_eep:
+0x4cd1 017896 ifetch 1 ,contru 
+0x4cd2 017897 store 1 ,mem_hci_curr_len 
+0x4cd3 017898 copy pdata ,loopcnt 
+0x4cd4 017899 ifetch 2 ,contru 
+0x4cd5 017900 store 2 ,mem_hci_curr_target 
+0x4cd6 017901 arg mem_l2cap_rxbuff1 ,contw 
+0x4cd7 017902 call uart_copy_rx_bytes 
+0x4cd8 017903 fetcht 1 ,mem_hci_curr_len 
+0x4cd9 017904 arg mem_l2cap_rxbuff1 ,rega 
+0x4cda 017905 fetch 2 ,mem_hci_curr_target 
+0x4cdb 017906 branch iicd_write_ota_data 
+:      017911 hci_normal_reply:
+0x4cdc 017912 force 4 ,loopcnt 
+:      017913 hci_command_complete:
+0x4cdd 017914 call hci_get_payload_ptr 
+0x4cde 017915 force 0x1 ,pdata 
+0x4cdf 017916 istore 1 ,contwu 
+0x4ce0 017917 deposit alarm 
+0x4ce1 017918 istore 3 ,contwu 
+0x4ce2 017919 force hci_event_command_complete ,queue 
+:      017920 hci_send_event:
+0x4ce3 017921 bpatchx patch20_4 ,mem_patch20 
+0x4ce4 017922 call hci_get_packet_ptr 
+0x4ce5 017923 deposit queue 
+0x4ce6 017924 istore 1 ,contwu 
+0x4ce7 017925 deposit loopcnt 
+0x4ce8 017926 istore 1 ,contwu 
+:      017927 hci_send_event_raw:
+0x4ce9 017928 force 5 ,queue 
+0x4cea 017929 increase 2 ,loopcnt 
+:      017930 hci_send_packet:
+0x4ceb 017931 branch h4_send_packet_event 
+:      017933 hci_send_commu_ready_event:
+0x4cec 017934 force hci_event_vendor_specific ,queue 
+0x4ced 017935 call hci_get_payload_ptr 
+0x4cee 017936 setarg hci_vendor_event_commu_ready 
+0x4cef 017937 istore 1 ,contwu 
+0x4cf0 017938 force 1 ,loopcnt 
+0x4cf1 017939 branch hci_send_event 
+:      017941 hci_get_cmd_complete_ptr:
+0x4cf2 017942 force 12 ,contwu 
+0x4cf3 017943 branch hci_get_tx_ptr 
+:      017945 hci_get_payload_ptr:
+0x4cf4 017946 force 8 ,contwu 
+0x4cf5 017947 branch hci_get_tx_ptr 
+:      017949 hci_get_packet_ptr:
+0x4cf6 017950 force 6 ,contwu 
+:      017951 hci_get_tx_ptr:
+0x4cf7 017952 branch h4_get_tx_ptr 
+:      017956 calc_tx_crc16:
+0x4cf8 017957 pulse crc16 
+0x4cf9 017958 enable enable_crc 
+:      017959 crcloop:
+0x4cfa 017960 ifetch 1 ,contwu 
+0x4cfb 017961 inject bucket ,8 
+0x4cfc 017962 loop crcloop 
+0x4cfd 017963 enable enable_parity 
+0x4cfe 017964 inject bucket ,16 
+0x4cff 017965 disable enable_parity 
+0x4d00 017966 disable enable_crc 
+0x4d01 017967 disable crc16 
+0x4d02 017968 byteswap pdata ,pdata 
+0x4d03 017969 rtn 
+:      017973 cmd_exit:
+0x4d04 017974 jam 0 ,mem_hci_cmd 
+0x4d05 017975 rtn 
+:      017976 cmd_check_plap:
+0x4d06 017977 fetch 6 ,mem_hci_plap 
+0x4d07 017978 fetcht 6 ,mem_plap 
+0x4d08 017979 isub temp ,null 
+0x4d09 017980 rtn 
+:      017985 cmd_pair:
+0x4d0a 017986 fetch 1 ,mem_op 
+0x4d0b 017987 bbit1 op_inrand_req ,cmd_pair_passive 
+0x4d0c 017988 call tid_initiate 
+0x4d0d 017989 jam lmp_in_rand ,mem_lmo_opcode2 
+0x4d0e 017990 branch cmd_exit 
+:      017991 cmd_pair_passive:
+0x4d0f 017992 set0 op_inrand_req ,pdata 
+0x4d10 017993 store 1 ,mem_op 
+0x4d11 017994 call lmp_accept_inrand 
+0x4d12 017995 setarg 0 
+0x4d13 017996 setflag master ,smap_lmptid ,pdata 
+0x4d14 017997 store 1 ,mem_lmo_tid2 
+0x4d15 017998 branch cmd_exit 
+0x4d16 017999 rtn 
+:      018000 cmd_in_sniff:
+0x4d17 018001 jam lmp_sniff_req ,mem_lmo_opcode2 
+0x4d18 018002 arg mem_sniff_payload ,contw 
+0x4d19 018003 setarg 0 
+0x4d1a 018004 isolate1 27 ,clke_bt 
+0x4d1b 018005 setflag true ,1 ,pdata 
+0x4d1c 018006 istore 1 ,contw 
+0x4d1d 018007 setarg 0 
+0x4d1e 018008 istore 2 ,contw 
+0x4d1f 018009 fetch 2 ,mem_sniff_param_interval 
+0x4d20 018010 istore 2 ,contw 
+0x4d21 018011 fetch 1 ,mem_sniff_param_attempt 
+0x4d22 018012 istore 2 ,contw 
+0x4d23 018013 fetch 1 ,mem_sniff_param_timeout 
+0x4d24 018014 istore 2 ,contw 
+0x4d25 018015 branch cmd_exit 
+:      018017 cmd_exit_sniff:
+0x4d26 018018 jam lmp_unsniff_req ,mem_lmo_opcode2 
+0x4d27 018019 branch cmd_exit 
+:      018021 hci_idle_dispatch:
+0x4d28 018022 call gpio_check_uart_state 
+0x4d29 018023 rtn true 
+0x4d2a 018024 arg uart_wakeup_rx ,temp 
+0x4d2b 018025 call gpio_get_bit 
+0x4d2c 018026 nbranch uart_wake_up ,true 
+0x4d2d 018027 jam hci_rx_wake ,mem_hci_lt_rx_state 
+0x4d2e 018028 rtn 
+:      018029 uart_wake_up:
+0x4d2f 018030 fetch 1 ,mem_hci_lt_rx_state 
+0x4d30 018031 rtnne hci_rx_wake 
+0x4d31 018032 call hci_exit_lpm 
+0x4d32 018033 branch hci_send_commu_ready_event 
+:      018047 hid_rx_process:
+0x4d33 018048 bpatchx patch20_5 ,mem_patch20 
+0x4d34 018049 fetch 2 ,mem_l2cap_payload_ptr 
+0x4d35 018050 copy pdata ,contr 
+0x4d36 018051 ifetch 1 ,contr 
+0x4d37 018052 and pdata ,0x0f ,temp 
+0x4d38 018053 rshift4 pdata ,pdata 
+0x4d39 018054 beq hid_type_set_idle ,hid_rx_process_handshake 
+0x4d3a 018055 beq hid_type_set_protocol ,hid_rx_process_handshake 
+0x4d3b 018056 beq hid_type_data ,hid_rx_process_data 
+0x4d3c 018057 beq hid_type_set_report ,hid_rx_process_set_report 
+0x4d3d 018058 beq hid_type_control ,hid_rx_process_hid_control 
+0x4d3e 018059 rtn 
+:      018061 hid_rx_process_hid_control:
+0x4d3f 018062 copy temp ,pdata 
+0x4d40 018063 beq hid_control_p_virtualcableunplug ,hid_rx_process_virtual_cable_unplug 
+0x4d41 018064 beq hid_control_p_suspend ,hid_rx_process_suspend 
+0x4d42 018065 rtn 
+:      018067 hid_rx_process_virtual_cable_unplug:
+0x4d43 018068 jam bt_evt_virtual_cable_unplug ,mem_fifo_temp 
+0x4d44 018069 call ui_ipc_send_event 
+0x4d45 018070 fetch 1 ,mem_device_option 
+0x4d46 018071 rtnbit0 dvc_op_mouse 
+0x4d47 018072 copy temp ,pdata 
+0x4d48 018073 beq hid_control_p_virtualcableunplug ,mouse_irtual_cable_unplug 
+0x4d49 018074 rtn 
+:      018075 hid_rx_process_suspend:
+0x4d4a 018076 rtn 
+:      018078 hid_rx_process_set_report:
+0x4d4b 018079 call hid_rx_process_data 
+0x4d4c 018080 arg 0x01 ,rega 
+0x4d4d 018081 call hid_malloc_tx_buff 
+0x4d4e 018082 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x4d4f 018083 istore 2 ,contw 
+0x4d50 018084 setarg 0x00 
+0x4d51 018085 istore 1 ,contw 
+0x4d52 018086 rtn 
+:      018088 hid_rx_process_handshake:
+0x4d53 018089 arg 1 ,rega 
+0x4d54 018090 call hid_malloc_tx_buff 
+0x4d55 018091 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x4d56 018092 istore 2 ,contw 
+0x4d57 018093 setarg 0 
+0x4d58 018094 istore 1 ,contw 
+0x4d59 018095 jam 1 ,mem_ui_data_txbuff_length 
+0x4d5a 018096 fetch 1 ,mem_hid_control_state 
+0x4d5b 018097 set1 l2cap_channel_hid_handshake_done 
+0x4d5c 018098 store 1 ,mem_hid_control_state 
+0x4d5d 018099 jam bt_evt_hid_handshake ,mem_fifo_temp 
+0x4d5e 018100 branch ui_ipc_send_event 
+:      018102 hid_rx_process_data:
+0x4d5f 018103 ifetch 1 ,contr 
+0x4d60 018104 beq hid_report_id_kb ,hid_rx_process_data_hid_kb 
+0x4d61 018105 rtn 
+:      018107 hid_rx_process_data_hid_kb:
+0x4d62 018108 rtn 
+:      018111 hid_malloc_tx_buff:
+0x4d63 018112 call l2cap_malloc 
+0x4d64 018113 copy rega ,temp 
+0x4d65 018114 storet 1 ,mem_ui_data_txbuff_length 
+0x4d66 018115 copy pdata ,contw 
+0x4d67 018116 copy rega ,pdata 
+0x4d68 018117 istore 2 ,contw 
+0x4d69 018118 rtn 
+:      018135 l2cap_init:
+0x4d6a 018136 branch l2cap_init_wake ,wake 
+:      018137 l2cap_init_work:
+0x4d6b 018138 setarg mem_l2cap_xmem_end 
+0x4d6c 018139 arg mem_l2cap_xmem_start ,contw 
+0x4d6d 018140 isub contw ,loopcnt 
+0x4d6e 018141 call clear_mem 
+:      018142 l2cap_init_wake:
+0x4d6f 018143 bpatchx patch20_6 ,mem_patch20 
+0x4d70 018144 setarg mem_sdp_mem_end 
+0x4d71 018145 arg mem_sdp_mem_start ,contw 
+0x4d72 018146 isub contw ,loopcnt 
+0x4d73 018147 call clear_mem 
+0x4d74 018148 setarg mem_l2cap_mem_end 
+0x4d75 018149 arg mem_l2cap_mem_start ,contw 
+0x4d76 018150 isub contw ,loopcnt 
+0x4d77 018151 call clear_mem 
+0x4d78 018152 branch l2cap_lpm_load_txbuf 
+:      018154 process_rx_l2cap_pkt:
+0x4d79 018155 bpatchx patch20_7 ,mem_patch20 
+0x4d7a 018156 copy contr ,temp 
+0x4d7b 018159 copy temp ,contr 
+0x4d7c 018160 ifetch 2 ,contr 
+0x4d7d 018161 store 2 ,mem_l2cap_rx_pkt_length 
+0x4d7e 018162 ifetch 2 ,contr 
+0x4d7f 018163 store 2 ,mem_l2cap_rx_cid 
+0x4d80 018164 deposit contr 
+0x4d81 018165 store 2 ,mem_l2cap_payload_ptr 
+0x4d82 018166 fetch 1 ,memui_reconnect_mode 
+0x4d83 018167 beq no_reconnection ,l2cap_rx_multiplexing 
+0x4d84 018168 branch ml2cap_rx_multiplexing 
+:      018170 l2cap_rx_multiplexing:
+0x4d85 018171 fetch 2 ,mem_l2cap_rx_pkt_length 
+0x4d86 018172 branch l2cap_rx_reset_state ,blank 
+0x4d87 018173 bpatchx patch21_0 ,mem_patch21 
+0x4d88 018174 fetch 1 ,mem_l2cap_rx_cid 
+0x4d89 018175 beq l2cap_signal_channel ,l2cap_call_proc_signal 
+:      018176 l2cap_rx_multiplexing0:
+0x4d8a 018177 beq l2cap_sdp_channel ,l2cap_call_proc_sdp 
+0x4d8b 018178 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm 
+0x4d8c 018179 beq l2cap_hid_control_channel ,l2cap_call_proc_hid 
+0x4d8d 018180 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid 
+0x4d8e 018181 branch l2cap_rx_reset_state 
+:      018183 l2cap_check_map:
+0x4d8f 018186 bpatchx patch21_1 ,mem_patch21 
+0x4d90 018187 call l2cap_malloc_get_full_map 
+0x4d91 018188 fetch 1 ,mem_used_map 
+0x4d92 018189 beq 0 ,set_pdata_0 
+0x4d93 018190 beq 1 ,set_pdata_0 
+0x4d94 018191 beq 2 ,set_pdata_0 
+0x4d95 018192 beq 3 ,set_pdata_0 
+0x4d96 018193 beq 0x81 ,set_pdata_0 
+0x4d97 018194 beq 0xc0 ,set_pdata_0 
+0x4d98 018195 beq 0x80 ,set_pdata_0 
+0x4d99 018196 beq 0x40 ,set_pdata_0 
+0x4d9a 018197 rtn 
+:      018199 set_pdata_0:
+0x4d9b 018200 setarg 0 
+0x4d9c 018201 rtn 
+:      018204 l2cap_call_proc_signal:
+0x4d9d 018205 call l2cap_check_map 
+0x4d9e 018206 nrtn blank 
+:      018207 l2cap_call_proc_signal0:
+0x4d9f 018208 call l2cap_malloc_signal_channel 
+0x4da0 018209 call l2cap_process_signal_pkt 
+0x4da1 018210 fetcht 2 ,mem_l2cap_signal_tx_length 
+0x4da2 018211 branch l2cap_call_proc_no_reply ,blank 
+0x4da3 018212 call l2cap_get_signal_tx_buff 
+0x4da4 018213 fetch 2 ,mem_l2cap_signal_tx_length 
+0x4da5 018214 istore 2 ,contw 
+0x4da6 018215 force l2cap_signal_channel ,pdata 
+0x4da7 018216 istore 2 ,contw 
+0x4da8 018217 branch l2cap_rx_reset_state 
+:      018219 l2cap_call_proc_sigal_pending:
+0x4da9 018220 fetch 1 ,mem_l2cap_pending_item 
+0x4daa 018221 rtn blank 
+0x4dab 018222 copy pdata ,rega 
+0x4dac 018223 bpatchx patch21_2 ,mem_patch21 
+0x4dad 018224 fetch 4 ,mem_l2cap_sdpres_delay_time 
+0x4dae 018225 arg 0x100 ,temp 
+0x4daf 018226 iadd temp ,temp 
+0x4db0 018227 copy clkn_bt ,pdata 
+0x4db1 018228 isub temp ,null 
+0x4db2 018229 nrtn positive 
+0x4db3 018230 jam 0 ,mem_l2cap_pending_item 
+0x4db4 018231 copy rega ,pdata 
+0x4db5 018232 beq l2cap_sdp_channel ,l2cap_sdp_conn_succ 
+0x4db6 018233 branch assert 
+:      018234 l2cap_sdp_conn_succ:
+0x4db7 018235 arg 0 ,debug 
+0x4db8 018236 call l2cap_malloc_signal_channel 
+0x4db9 018237 call restore_l2cap_req_param 
+0x4dba 018238 call l2cap_get_signal_tx_payload 
+0x4dbb 018239 call save_cont_pointers 
+0x4dbc 018240 call send_connection_sdp_res 
+0x4dbd 018241 call l2cap_get_signal_tx_buff 
+0x4dbe 018243 setarg 0x000c 
+0x4dbf 018244 istore 2 ,contw 
+0x4dc0 018245 force l2cap_signal_channel ,pdata 
+0x4dc1 018246 istore 2 ,contw 
+0x4dc2 018247 branch l2cap_rx_reset_state 
+:      018251 l2cap_reset_sdp_map:
+0x4dc3 018252 bpatchx patch21_3 ,mem_patch21 
+0x4dc4 018253 fetch 2 ,mem_sdp_tx_pkt_length 
+0x4dc5 018254 increase 4 ,pdata 
+0x4dc6 018255 rshift4 pdata ,pdata 
+0x4dc7 018256 rshift3 pdata ,pdata 
+0x4dc8 018257 add pdata ,1 ,temp 
+0x4dc9 018258 arg mem_tx_fifo3 ,contr 
+0x4dca 018259 ifetch 3 ,contr 
+0x4dcb 018260 rtn blank 
+0x4dcc 018261 store 3 ,mem_tx_fifo_map_temp 
+0x4dcd 018262 fetch 1 ,mem_tx_fifo_map_temp 
+0x4dce 018263 copy pdata ,rega 
+0x4dcf 018264 call check_l2cap_map 
+0x4dd0 018265 copy regb ,pdata 
+0x4dd1 018266 store 1 ,mem_tx_fifo3 
+0x4dd2 018267 rtn 
+:      018269 check_l2cap_map:
+0x4dd3 018270 arg 0 ,queue 
+0x4dd4 018271 arg 0 ,regb 
+:      018273 check_l2cap_map_loop:
+0x4dd5 018274 sub queue ,7 ,null 
+0x4dd6 018275 nrtn positive 
+0x4dd7 018276 qisolate1 rega 
+0x4dd8 018277 branch check_l2cap_map_used ,true 
+0x4dd9 018278 branch check_l2cap_map_used2 
+:      018280 check_l2cap_map_used:
+0x4dda 018281 copy temp ,pdata 
+0x4ddb 018282 branch check_l2cap_map_used2 ,blank 
+0x4ddc 018283 qset1 regb 
+0x4ddd 018284 increase -1 ,temp 
+:      018286 check_l2cap_map_used2:
+0x4dde 018287 increase 1 ,queue 
+0x4ddf 018288 branch check_l2cap_map_loop 
+:      018290 l2cap_call_proc_sdp:
+0x4de0 018291 call l2cap_malloc_is_fifo_empty 
+0x4de1 018292 nrtn blank 
+0x4de2 018293 call l2cap_check_map 
+0x4de3 018294 nrtn blank 
+0x4de4 018295 call l2cap_malloc_sdp_channel 
+0x4de5 018296 call sdp_process 
+0x4de6 018297 call l2cap_reset_sdp_map 
+0x4de7 018298 branch l2cap_call_proc_sdp_common 
+:      018301 ml2cap_call_proc_sdp:
+0x4de8 018302 call l2cap_malloc_is_fifo_empty 
+0x4de9 018303 nrtn blank 
+0x4dea 018304 call l2cap_malloc_sdp_channel 
+0x4deb 018305 call sdp_process 
+:      018306 l2cap_call_proc_sdp_common:
+0x4dec 018307 call l2cap_get_sdp_tx_buff 
+0x4ded 018308 fetch 2 ,mem_sdp_tx_pkt_length 
+0x4dee 018309 branch l2cap_call_proc_no_reply ,blank 
+0x4def 018310 istore 2 ,contw 
+0x4df0 018311 fetch 2 ,mem_sdp_remote_cid 
+0x4df1 018312 istore 2 ,contw 
+0x4df2 018313 branch l2cap_rx_reset_state 
+:      018315 l2cap_call_proc_hid:
+0x4df3 018316 call hid_rx_process 
+0x4df4 018317 branch l2cap_rx_reset_state 
+:      018319 l2cap_call_proc_rfcomm:
+0x4df5 018320 bpatchx patch21_4 ,mem_patch21 
+0x4df6 018321 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag 
+0x4df7 018322 call rfcomm_rx_process 
+0x4df8 018323 fetch 1 ,mem_rfcomm_malloc_fail_flag 
+0x4df9 018324 rtneq rfcomm_malloc_fail 
+0x4dfa 018325 branch l2cap_rx_reset_state 
+:      018326 l2cap_call_proc_no_reply:
+0x4dfb 018327 call l2cap_malloc_discard 
+:      018329 l2cap_rx_reset_state:
+0x4dfc 018330 setarg 0 
+0x4dfd 018331 store 2 ,mem_l2cap_rx_pkt_length 
+0x4dfe 018332 store 2 ,mem_l2cap_rx_cid 
+0x4dff 018333 jam l2cap_rx_done ,mem_l2cap_rx_done 
+0x4e00 018334 rtn 
+:      018336 l2cap_process_signal_pkt:
+0x4e01 018337 bpatchx patch21_5 ,mem_patch21 
+0x4e02 018338 call l2cap_get_signal_tx_payload 
+0x4e03 018339 force 0 ,regb 
+0x4e04 018340 fetch 2 ,mem_l2cap_rx_pkt_length 
+0x4e05 018341 copy pdata ,regc 
+0x4e06 018342 fetch 2 ,mem_l2cap_payload_ptr 
+0x4e07 018343 iforce contr 
+:      018344 l2cap_process_signal_pkt_loop:
+0x4e08 018345 call l2cap_process_one_signal 
+0x4e09 018346 deposit regc 
+0x4e0a 018347 increase -4 ,regc 
+0x4e0b 018348 increase -4 ,pdata 
+0x4e0c 018349 nbranch l2cap_process_signal_pkt_loop ,blank 
+0x4e0d 018350 copy regb ,pdata 
+0x4e0e 018351 store 2 ,mem_l2cap_signal_tx_length 
+0x4e0f 018352 rtn 
+:      018354 l2cap_process_one_signal:
+0x4e10 018355 bpatchx patch21_6 ,mem_patch21 
+0x4e11 018356 ifetch 1 ,contr 
+0x4e12 018357 beq signal_cmd_reject ,l2cap_proc_signal_cmd_reject 
+0x4e13 018358 beq signal_connect_req ,l2cap_proc_signal_connect_req 
+0x4e14 018359 beq signal_connect_rsp ,l2cap_proc_signal_connect_rsp 
+0x4e15 018360 beq signal_config_req ,l2cap_proc_signal_config_req 
+0x4e16 018361 beq signal_config_rsp ,l2cap_proc_signal_config_rsp 
+0x4e17 018362 beq signal_disconnect_req ,l2cap_proc_signal_disconnect_req 
+0x4e18 018363 beq signal_disconnect_rsp ,l2cap_proc_signal_disconnect_rsp 
+0x4e19 018364 beq signal_echo_req ,l2cap_proc_signal_echo_req 
+0x4e1a 018365 beq signal_echo_rsp ,l2cap_proc_signal_echo_rsp 
+0x4e1b 018366 beq signal_info_req ,l2cap_proc_signal_info_req 
+0x4e1c 018367 beq signal_info_rsp ,l2cap_proc_signal_info_rsp 
+0x4e1d 018368 call l2cap_reject_command 
+:      018369 l2cap_process_one_signal_rtn:
+0x4e1e 018370 rtn 
+:      018372 l2cap_proc_signal_info_req:
+0x4e1f 018373 ifetch 1 ,contr 
+0x4e20 018374 copy pdata ,queue 
+0x4e21 018375 ifetch 2 ,contr 
+0x4e22 018376 copy pdata ,rega 
+0x4e23 018377 copy regc ,pdata 
+0x4e24 018378 isub rega ,regc 
+0x4e25 018379 setarg signal_info_rsp 
+0x4e26 018380 istore 1 ,contw 
+0x4e27 018381 copy queue ,pdata 
+0x4e28 018382 istore 1 ,contw 
+0x4e29 018383 ifetch 2 ,contr 
+:      018384 l2cap_proc_signal_info_req_reply:
+0x4e2a 018385 beq l2cap_sig_ext_featrue ,l2cap_proc_signal_info_req_ext 
+0x4e2b 018386 beq l2cap_sig_fix_featrue ,l2cap_proc_signal_info_req_fix 
+0x4e2c 018387 rtn 
+:      018388 l2cap_proc_signal_info_req_ext:
+0x4e2d 018389 setarg 0x020008 
+0x4e2e 018390 istore 6 ,contw 
+0x4e2f 018391 setarg 0x0280 
+0x4e30 018392 istore 4 ,contw 
+0x4e31 018393 force 12 ,pdata 
+0x4e32 018394 branch l2cap_proc_signal_info_req_common 
+:      018395 l2cap_proc_signal_info_req_fix:
+0x4e33 018396 setarg 0x3000c 
+0x4e34 018397 istore 6 ,contw 
+0x4e35 018398 setarg 0x0006 
+0x4e36 018399 istore 8 ,contw 
+0x4e37 018400 force 16 ,pdata 
+:      018401 l2cap_proc_signal_info_req_common:
+0x4e38 018402 iadd regb ,regb 
+0x4e39 018403 branch l2cap_process_one_signal_rtn 
+:      018405 ml2cap_proc_signal_info_req:
+0x4e3a 018406 ifetch 1 ,contr 
+0x4e3b 018407 copy pdata ,queue 
+0x4e3c 018408 ifetch 2 ,contr 
+0x4e3d 018409 copy pdata ,rega 
+0x4e3e 018410 ifetch 2 ,contr 
+0x4e3f 018411 store 2 ,mem_temp 
+0x4e40 018412 copy regc ,pdata 
+0x4e41 018413 isub rega ,regc 
+0x4e42 018414 call l2cap_get_signal_tx_payload 
+0x4e43 018415 setarg signal_info_rsp 
+0x4e44 018416 istore 1 ,contw 
+0x4e45 018417 copy queue ,pdata 
+0x4e46 018418 istore 1 ,contw 
+0x4e47 018419 fetch 2 ,mem_temp 
+0x4e48 018420 branch l2cap_proc_signal_info_req_reply 
+:      018424 l2cap_proc_signal_cmd_reject:
+0x4e49 018425 ifetch 1 ,contr 
+0x4e4a 018426 copy pdata ,queue 
+0x4e4b 018427 ifetch 2 ,contr 
+0x4e4c 018428 copy pdata ,rega 
+0x4e4d 018429 iadd contr ,contr 
+0x4e4e 018430 copy regc ,pdata 
+0x4e4f 018431 isub rega ,regc 
+:      018432 l2cap_proc_signal_cmd_reject_rtn:
+0x4e50 018433 branch l2cap_process_one_signal_rtn 
+:      018435 l2cap_proc_signal_connect_req:
+0x4e51 018436 call save_cont_pointers 
+0x4e52 018439 call load_cont_pointers 
+0x4e53 018440 arg 0 ,debug 
+0x4e54 018441 ifetch 1 ,contr 
+0x4e55 018442 copy pdata ,queue 
+0x4e56 018443 ifetch 2 ,contr 
+0x4e57 018444 copy pdata ,rega 
+0x4e58 018445 ifetch 2 ,contr 
+0x4e59 018446 copy pdata ,temp 
+0x4e5a 018447 ifetch 2 ,contr 
+0x4e5b 018448 copy pdata ,timeup 
+0x4e5c 018449 bpatchx patch21_7 ,mem_patch21 
+0x4e5d 018450 copy temp ,pdata 
+0x4e5e 018451 beq psm_sdp ,l2cap_proc_signal_connect_req_sdp 
+0x4e5f 018452 beq psm_rfcomm ,l2cap_proc_signal_connect_req_rfcomm 
+0x4e60 018453 beq psm_hid_control ,l2cap_proc_signal_connect_req_hid_ctrl 
+0x4e61 018454 beq psm_hid_interrupt ,l2cap_proc_signal_connect_req_hid_int 
+0x4e62 018455 call l2cap_reject_command 
+0x4e63 018456 branch l2cap_proc_signal_connect_req_rtn 
+:      018458 l2cap_proc_signal_connect_req_sdp:
+0x4e64 018459 call save_cont_pointers 
+0x4e65 018460 arg l2cap_sdp_channel ,temp 
+0x4e66 018461 fetch 2 ,mem_sdp_remote_cid 
+0x4e67 018462 nbranch already_connected ,blank 
+0x4e68 018463 copy timeup ,pdata 
+0x4e69 018464 store 2 ,mem_sdp_remote_cid 
+0x4e6a 018465 copy clkn_bt ,pdata 
+0x4e6b 018466 store 4 ,mem_l2cap_sdpres_delay_time 
+0x4e6c 018467 call store_l2cap_req_param 
+0x4e6d 018468 branch send_connection_pending 
+:      018470 store_l2cap_req_param:
+0x4e6e 018471 storet 2 ,mem_psm 
+0x4e6f 018472 deposit timeup 
+0x4e70 018473 store 2 ,mem_scid 
+0x4e71 018474 deposit rega 
+0x4e72 018475 store 2 ,mem_cmd_length 
+0x4e73 018476 deposit regb 
+0x4e74 018477 store 2 ,mem_tt2 
+0x4e75 018478 deposit regc 
+0x4e76 018479 store 2 ,mem_tt3 
+0x4e77 018480 deposit queue 
+0x4e78 018481 store 2 ,mem_id 
+0x4e79 018482 rtn 
+:      018484 restore_l2cap_req_param:
+0x4e7a 018485 fetcht 2 ,mem_psm 
+0x4e7b 018486 fetch 2 ,mem_scid 
+0x4e7c 018487 copy pdata ,timeup 
+0x4e7d 018488 fetch 2 ,mem_cmd_length 
+0x4e7e 018489 copy pdata ,rega 
+0x4e7f 018490 fetch 2 ,mem_tt2 
+0x4e80 018491 copy pdata ,regb 
+0x4e81 018492 fetch 2 ,mem_tt3 
+0x4e82 018493 copy pdata ,regc 
+0x4e83 018494 fetch 2 ,mem_id 
+0x4e84 018495 copy pdata ,queue 
+0x4e85 018496 rtn 
+:      018498 l2cap_proc_signal_connect_req_rfcomm:
+0x4e86 018499 call save_cont_pointers 
+0x4e87 018500 setarg l2cap_rfcomm_channel 
+0x4e88 018501 arg l2cap_rfcomm_channel ,temp 
+0x4e89 018502 fetch 2 ,mem_rfcomm_remote_cid 
+0x4e8a 018503 nbranch already_connected ,blank 
+0x4e8b 018504 copy timeup ,pdata 
+0x4e8c 018505 store 2 ,mem_rfcomm_remote_cid 
+0x4e8d 018506 fetch 1 ,mem_rfcomm_state 
+0x4e8e 018507 set1 l2cap_channel_state_conn_req ,pdata 
+0x4e8f 018508 set1 l2cap_channel_state_conn_res ,pdata 
+0x4e90 018509 store 1 ,mem_rfcomm_state 
+0x4e91 018510 branch send_connection_res 
+:      018511 l2cap_proc_signal_connect_req_hid_ctrl:
+0x4e92 018512 call save_cont_pointers 
+0x4e93 018513 arg l2cap_hid_control_channel ,temp 
+0x4e94 018514 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x4e95 018515 nbranch already_connected ,blank 
+0x4e96 018516 copy timeup ,pdata 
+0x4e97 018517 store 2 ,mem_hid_ctrl_remote_cid 
+0x4e98 018518 fetch 1 ,mem_hid_control_state 
+0x4e99 018519 set1 l2cap_channel_state_conn_req ,pdata 
+0x4e9a 018520 set1 l2cap_channel_state_conn_res ,pdata 
+0x4e9b 018521 store 1 ,mem_hid_control_state 
+0x4e9c 018522 branch send_connection_res 
+:      018523 l2cap_proc_signal_connect_req_hid_int:
+0x4e9d 018524 call save_cont_pointers 
+0x4e9e 018525 deposit clke 
+0x4e9f 018526 arg l2cap_hid_interrupt_channel ,temp 
+0x4ea0 018527 fetch 2 ,mem_hid_int_remote_cid 
+0x4ea1 018528 nbranch already_connected ,blank 
+0x4ea2 018529 copy timeup ,pdata 
+0x4ea3 018530 store 2 ,mem_hid_int_remote_cid 
+0x4ea4 018531 fetch 1 ,mem_hid_interrupt_state 
+0x4ea5 018532 set1 l2cap_channel_state_conn_req ,pdata 
+0x4ea6 018533 set1 l2cap_channel_state_conn_res ,pdata 
+0x4ea7 018534 store 1 ,mem_hid_interrupt_state 
+0x4ea8 018535 branch send_connection_res 
+:      018537 send_connection_pending:
+0x4ea9 018538 setarg l2cap_connect_pending 
+0x4eaa 018539 store 2 ,meml2cap_t1 
+0x4eab 018540 jam l2cap_sdp_channel ,mem_l2cap_pending_item 
+0x4eac 018541 branch send_connection_res0 
+:      018542 send_connection_sdp_res:
+0x4ead 018543 fetch 1 ,mem_sdp_state 
+0x4eae 018544 set1 l2cap_channel_state_conn_req ,pdata 
+0x4eaf 018545 set1 l2cap_channel_state_conn_res ,pdata 
+0x4eb0 018546 store 1 ,mem_sdp_state 
+:      018547 send_connection_res:
+0x4eb1 018548 setarg l2cap_connect_successful 
+0x4eb2 018549 store 2 ,meml2cap_t1 
+:      018550 send_connection_res0:
+0x4eb3 018551 bpatchx patch22_0 ,mem_patch22 
+0x4eb4 018552 call load_cont_pointers 
+0x4eb5 018553 setarg signal_connect_rsp 
+0x4eb6 018554 istore 1 ,contw 
+0x4eb7 018555 copy queue ,pdata 
+0x4eb8 018556 istore 1 ,contw 
+0x4eb9 018557 setarg 0x0008 
+0x4eba 018558 istore 2 ,contw 
+0x4ebb 018559 copy temp ,pdata 
+0x4ebc 018560 istore 2 ,contw 
+0x4ebd 018561 copy timeup ,pdata 
+0x4ebe 018562 istore 2 ,contw 
+0x4ebf 018563 fetch 2 ,meml2cap_t1 
+0x4ec0 018564 beq l2cap_connect_pending ,connect_pending 
+0x4ec1 018565 isolate0 0 ,debug 
+0x4ec2 018566 branch connect_suc ,true 
+0x4ec3 018567 setarg l2cap_connect_refused_no_resources 
+:      018568 connect_suc:
+0x4ec4 018569 istore 2 ,contw 
+0x4ec5 018570 force 0x0000 ,pdata 
+0x4ec6 018571 istore 2 ,contw 
+0x4ec7 018572 setarg 12 
+0x4ec8 018573 branch connect_req_update_byte_counts 
+:      018574 connect_pending:
+0x4ec9 018575 istore 2 ,contw 
+0x4eca 018576 force 0x0002 ,pdata 
+0x4ecb 018577 istore 2 ,contw 
+0x4ecc 018578 setarg 12 
+0x4ecd 018579 branch connect_req_update_byte_counts 
+:      018581 already_connected:
+0x4ece 018582 set1 0 ,debug 
+0x4ecf 018583 branch send_connection_res 
+:      018584 connect_req_update_byte_counts:
+0x4ed0 018585 iadd regb ,regb 
+0x4ed1 018586 copy regc ,pdata 
+0x4ed2 018587 isub rega ,regc 
+0x4ed3 018588 branch l2cap_proc_signal_connect_req_rtn 
+:      018589 l2cap_proc_signal_connect_req_rtn:
+0x4ed4 018590 branch l2cap_process_one_signal_rtn 
+:      018592 l2cap_proc_signal_connect_rsp:
+0x4ed5 018593 ifetch 1 ,contr 
+0x4ed6 018594 copy pdata ,queue 
+0x4ed7 018595 ifetch 2 ,contr 
+0x4ed8 018596 copy pdata ,rega 
+0x4ed9 018597 copy regc ,pdata 
+0x4eda 018598 isub rega ,regc 
+0x4edb 018599 ifetch 2 ,contr 
+0x4edc 018600 copy pdata ,timeup 
+0x4edd 018601 ifetch 2 ,contr 
+0x4ede 018602 copy pdata ,temp 
+0x4edf 018603 bpatchx patch22_1 ,mem_patch22 
+0x4ee0 018604 setarg l2cap_sdp_channel 
+0x4ee1 018605 isub temp ,null 
+0x4ee2 018606 branch l2cap_proc_signal_connect_rsp_sdp ,zero 
+0x4ee3 018607 setarg l2cap_rfcomm_channel 
+0x4ee4 018608 isub temp ,null 
+0x4ee5 018609 branch l2cap_proc_signal_connect_rsp_rfcomm ,zero 
+0x4ee6 018610 setarg l2cap_hid_control_channel 
+0x4ee7 018611 isub temp ,null 
+0x4ee8 018612 branch l2cap_proc_signal_connect_rsp_hid_ctrl ,zero 
+0x4ee9 018613 setarg l2cap_hid_interrupt_channel 
+0x4eea 018614 isub temp ,null 
+0x4eeb 018615 branch l2cap_proc_signal_connect_rsp_hid_int ,zero 
+0x4eec 018616 rtn 
+:      018618 l2cap_proc_signal_connect_rsp_sdp:
+0x4eed 018619 copy timeup ,pdata 
+0x4eee 018620 store 2 ,mem_sdp_remote_cid 
+0x4eef 018621 fetch 1 ,mem_sdp_state 
+0x4ef0 018622 set1 l2cap_channel_state_conn_res ,pdata 
+0x4ef1 018623 store 1 ,mem_sdp_state 
+0x4ef2 018624 branch l2cap_process_one_signal_rtn 
+:      018625 l2cap_proc_signal_connect_rsp_rfcomm:
+0x4ef3 018626 copy timeup ,pdata 
+0x4ef4 018627 store 2 ,mem_rfcomm_remote_cid 
+0x4ef5 018628 fetch 1 ,mem_rfcomm_state 
+0x4ef6 018629 set1 l2cap_channel_state_conn_res ,pdata 
+0x4ef7 018630 store 1 ,mem_rfcomm_state 
+0x4ef8 018631 rtn 
+:      018632 l2cap_proc_signal_connect_rsp_hid_int:
+0x4ef9 018633 copy timeup ,pdata 
+0x4efa 018634 store 2 ,mem_hid_ctrl_remote_cid 
+0x4efb 018635 fetch 1 ,mem_hid_interrupt_state 
+0x4efc 018636 set1 l2cap_channel_state_conn_res ,pdata 
+0x4efd 018637 store 1 ,mem_hid_interrupt_state 
+0x4efe 018638 rtn 
+:      018639 l2cap_proc_signal_connect_rsp_hid_ctrl:
+0x4eff 018640 copy timeup ,pdata 
+0x4f00 018641 store 2 ,mem_hid_int_remote_cid 
+0x4f01 018642 fetch 1 ,mem_hid_control_state 
+0x4f02 018643 set1 l2cap_channel_state_conn_res ,pdata 
+0x4f03 018644 store 1 ,mem_hid_control_state 
+0x4f04 018645 rtn 
+:      018647 l2cap_proc_signal_config_req:
+0x4f05 018648 ifetch 1 ,contr 
+0x4f06 018649 copy pdata ,queue 
+0x4f07 018650 ifetch 2 ,contr 
+0x4f08 018651 copy pdata ,rega 
+0x4f09 018652 copy regc ,pdata 
+0x4f0a 018653 isub rega ,regc 
+0x4f0b 018654 ifetch 2 ,contr 
+0x4f0c 018655 copy pdata ,temp 
+0x4f0d 018656 copy temp ,rega 
+0x4f0e 018657 bpatchx patch22_2 ,mem_patch22 
+0x4f0f 018658 setarg l2cap_sdp_channel 
+0x4f10 018659 isub temp ,null 
+0x4f11 018660 branch l2cap_proc_signal_config_req_sdp ,zero 
+0x4f12 018661 setarg l2cap_rfcomm_channel 
+0x4f13 018662 isub temp ,null 
+0x4f14 018663 branch l2cap_proc_signal_config_req_rfcomm ,zero 
+0x4f15 018664 setarg l2cap_hid_control_channel 
+0x4f16 018665 isub temp ,null 
+0x4f17 018666 branch l2cap_proc_signal_config_req_hid_ctrl ,zero 
+0x4f18 018667 setarg l2cap_hid_interrupt_channel 
+0x4f19 018668 isub temp ,null 
+0x4f1a 018669 branch l2cap_proc_signal_config_req_hid_int ,zero 
+0x4f1b 018670 branch l2cap_reject_command 
+:      018672 l2cap_proc_signal_config_req_sdp:
+0x4f1c 018673 copy contw ,timeup 
+0x4f1d 018674 fetch 1 ,mem_sdp_state 
+0x4f1e 018675 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+0x4f1f 018676 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+0x4f20 018678 store 1 ,mem_sdp_state 
+0x4f21 018679 copy timeup ,contw 
+0x4f22 018680 arg l2cap_sdp_channel ,timeup 
+0x4f23 018681 fetch 2 ,mem_sdp_remote_cid 
+0x4f24 018682 copy pdata ,temp 
+0x4f25 018683 branch l2cap_send_config_rsp 
+:      018684 l2cap_proc_signal_config_req_hid_ctrl:
+0x4f26 018685 copy contw ,timeup 
+0x4f27 018686 fetch 1 ,mem_hid_control_state 
+0x4f28 018687 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+0x4f29 018688 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+0x4f2a 018690 store 1 ,mem_hid_control_state 
+0x4f2b 018691 copy timeup ,contw 
+0x4f2c 018692 arg l2cap_hid_control_channel ,timeup 
+0x4f2d 018693 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x4f2e 018694 copy pdata ,temp 
+0x4f2f 018695 branch l2cap_send_config_rsp 
+:      018696 l2cap_proc_signal_config_req_hid_int:
+0x4f30 018697 copy contw ,timeup 
+0x4f31 018698 fetch 1 ,mem_hid_interrupt_state 
+0x4f32 018699 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+0x4f33 018700 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+0x4f34 018702 store 1 ,mem_hid_interrupt_state 
+0x4f35 018703 copy timeup ,contw 
+0x4f36 018704 arg l2cap_hid_interrupt_channel ,timeup 
+0x4f37 018705 fetch 2 ,mem_hid_int_remote_cid 
+0x4f38 018706 copy pdata ,temp 
+0x4f39 018707 branch l2cap_send_config_rsp 
+:      018708 l2cap_proc_signal_config_req_rfcomm:
+0x4f3a 018709 copy contw ,timeup 
+0x4f3b 018710 fetch 1 ,mem_rfcomm_state 
+0x4f3c 018711 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+0x4f3d 018712 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+0x4f3e 018714 store 1 ,mem_rfcomm_state 
+0x4f3f 018716 copy timeup ,contw 
+0x4f40 018717 arg l2cap_rfcomm_channel ,timeup 
+0x4f41 018718 fetch 2 ,mem_rfcomm_remote_cid 
+0x4f42 018719 copy pdata ,temp 
+:      018720 l2cap_send_config_rsp:
+0x4f43 018721 bpatchx patch22_3 ,mem_patch22 
+0x4f44 018722 setarg signal_config_rsp 
+0x4f45 018723 istore 1 ,contw 
+0x4f46 018724 copy queue ,pdata 
+0x4f47 018725 istore 1 ,contw 
+0x4f48 018726 setarg 0x0006 
+0x4f49 018727 istore 2 ,contw 
+0x4f4a 018728 copy temp ,pdata 
+0x4f4b 018729 istore 2 ,contw 
+0x4f4c 018730 force 0x00 ,pdata 
+0x4f4d 018731 istore 2 ,contw 
+0x4f4e 018732 force l2cap_config_success ,pdata 
+0x4f4f 018733 istore 2 ,contw 
+0x4f50 018734 force 10 ,pdata 
+0x4f51 018735 iadd regb ,regb 
+0x4f52 018737 storet 2 ,mem_config_req_dest_cid 
+0x4f53 018738 copy queue ,pdata 
+0x4f54 018739 store 1 ,mem_config_identifier 
+0x4f55 018740 force l2cap_sdp_channel ,pdata 
+0x4f56 018741 icompare 0xff ,timeup 
+0x4f57 018742 branch l2cap_send_config_rsp_is_sdp ,true 
+0x4f58 018743 increase 1 ,pdata 
+:      018744 l2cap_send_config_rsp_is_sdp:
+0x4f59 018746 rtn 
+:      018747 l2cap_check_channel_state:
+0x4f5a 018748 disable user 
+0x4f5b 018749 rtnbit1 l2cap_channel_state_snd_cfg_req ,pdata 
+0x4f5c 018750 rtnbit0 l2cap_channel_state_conn_req ,pdata 
+0x4f5d 018751 rtnbit0 l2cap_channel_state_conn_res ,pdata 
+0x4f5e 018752 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+0x4f5f 018753 copy contr ,contw 
+0x4f60 018754 increase -1 ,contw 
+0x4f61 018755 istore 1 ,contw 
+0x4f62 018756 enable user 
+0x4f63 018757 rtn 
+:      018758 l2cap_send_config_req:
+:      018759 l2cap_send_config_req_sdp:
+0x4f64 018760 fetch 1 ,mem_sdp_state 
+0x4f65 018761 call l2cap_check_channel_state 
+0x4f66 018762 nbranch l2cap_send_config_req_rfcomm ,user 
+0x4f67 018763 jam l2cap_sdp_channel ,mem_send_config_req 
+0x4f68 018764 fetch 2 ,mem_sdp_remote_cid 
+0x4f69 018765 store 2 ,mem_config_req_dest_cid 
+0x4f6a 018766 branch l2cap_generate_config_req 
+:      018767 l2cap_send_config_req_rfcomm:
+0x4f6b 018768 fetch 1 ,mem_rfcomm_state 
+0x4f6c 018769 call l2cap_check_channel_state 
+0x4f6d 018770 nbranch l2cap_send_config_req_hid_ctrl ,user 
+0x4f6e 018771 jam l2cap_rfcomm_channel ,mem_send_config_req 
+0x4f6f 018772 fetch 2 ,mem_rfcomm_remote_cid 
+0x4f70 018773 store 2 ,mem_config_req_dest_cid 
+0x4f71 018774 branch l2cap_generate_config_req 
+:      018775 l2cap_send_config_req_hid_ctrl:
+0x4f72 018776 fetch 1 ,mem_hid_control_state 
+0x4f73 018777 call l2cap_check_channel_state 
+0x4f74 018778 nbranch l2cap_send_config_req_hid_int ,user 
+0x4f75 018779 jam l2cap_hid_control_channel ,mem_send_config_req 
+0x4f76 018780 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x4f77 018781 store 2 ,mem_config_req_dest_cid 
+0x4f78 018782 branch l2cap_generate_config_req 
+:      018783 l2cap_send_config_req_hid_int:
+0x4f79 018784 fetch 1 ,mem_hid_interrupt_state 
+0x4f7a 018785 call l2cap_check_channel_state 
+0x4f7b 018786 nrtn user 
+0x4f7c 018787 jam l2cap_hid_interrupt_channel ,mem_send_config_req 
+0x4f7d 018788 fetch 2 ,mem_hid_int_remote_cid 
+0x4f7e 018789 store 2 ,mem_config_req_dest_cid 
+:      018792 l2cap_generate_config_req:
+0x4f7f 018793 bpatchx patch22_4 ,mem_patch22 
+0x4f80 018794 call l2cap_get_req_id 
+0x4f81 018795 call l2cap_malloc_signal_channel 
+0x4f82 018796 force 0 ,regb 
+0x4f83 018797 call l2cap_get_signal_tx_payload 
+0x4f84 018798 force signal_config_req ,pdata 
+0x4f85 018799 istore 1 ,contw 
+0x4f86 018800 fetch 1 ,mem_ml2cap_comm_id 
+0x4f87 018801 istore 1 ,contw 
+0x4f88 018802 setarg 0x0008 
+0x4f89 018803 istore 2 ,contw 
+0x4f8a 018804 fetch 2 ,mem_config_req_dest_cid 
+0x4f8b 018805 istore 2 ,contw 
+0x4f8c 018806 setarg 0x0000 
+0x4f8d 018807 istore 2 ,contw 
+0x4f8e 018808 force 1 ,pdata 
+0x4f8f 018809 istore 1 ,contw 
+0x4f90 018810 force 2 ,pdata 
+0x4f91 018811 istore 1 ,contw 
+0x4f92 018812 fetch 1 ,mem_send_config_req 
+0x4f93 018813 beq l2cap_rfcomm_channel ,l2cap_generate_config_req_rfcomm 
+0x4f94 018814 setarg l2cap_config_mtu_sdp 
+0x4f95 018815 istore 2 ,contw 
+0x4f96 018816 branch l2cap_generate_config_req_done 
+:      018817 l2cap_generate_config_req_rfcomm:
+0x4f97 018818 setarg l2cap_config_mtu_rfcomm 
+0x4f98 018819 istore 2 ,contw 
+:      018820 l2cap_generate_config_req_done:
+0x4f99 018821 arg 0x0c ,temp 
+0x4f9a 018822 storet 2 ,mem_l2cap_signal_tx_length 
+0x4f9b 018823 call l2cap_get_signal_tx_buff 
+0x4f9c 018824 fetch 2 ,mem_l2cap_signal_tx_length 
+0x4f9d 018825 istore 2 ,contw 
+0x4f9e 018826 force l2cap_signal_channel ,pdata 
+0x4f9f 018827 istore 2 ,contw 
+0x4fa0 018828 jam 0 ,mem_send_config_req 
+:      018829 l2cap_proc_signal_config_req_rtn:
+0x4fa1 018830 branch l2cap_process_one_signal_rtn 
+:      018832 l2cap_proc_signal_config_rsp:
+0x4fa2 018833 increase 1 ,contr 
+0x4fa3 018834 ifetch 2 ,contr 
+0x4fa4 018835 copy pdata ,rega 
+0x4fa5 018836 copy regc ,pdata 
+0x4fa6 018837 isub rega ,regc 
+0x4fa7 018838 ifetch 2 ,contr 
+0x4fa8 018839 copy pdata ,rega 
+0x4fa9 018840 bpatchx patch22_5 ,mem_patch22 
+0x4faa 018841 setarg l2cap_sdp_channel 
+0x4fab 018842 isub rega ,null 
+0x4fac 018843 branch l2cap_proc_signal_config_rsp_sdp ,zero 
+0x4fad 018844 setarg l2cap_rfcomm_channel 
+0x4fae 018845 isub rega ,null 
+0x4faf 018846 branch l2cap_proc_signal_config_rsp_rfcomm ,zero 
+0x4fb0 018847 setarg l2cap_hid_control_channel 
+0x4fb1 018848 isub rega ,null 
+0x4fb2 018849 branch l2cap_proc_signal_config_rsp_hid_ctrl ,zero 
+0x4fb3 018850 setarg l2cap_hid_interrupt_channel 
+0x4fb4 018851 isub rega ,null 
+0x4fb5 018852 branch l2cap_proc_signal_config_rsp_hid_int ,zero 
+0x4fb6 018853 increase 2 ,contr 
+0x4fb7 018854 ifetch 2 ,contr 
+0x4fb8 018855 iforce null 
+0x4fb9 018856 branch l2cap_process_one_signal_rtn 
+:      018857 l2cap_proc_signal_config_rsp_sdp:
+0x4fba 018858 fetch 1 ,mem_sdp_state 
+0x4fbb 018859 set1 l2cap_channel_state_rcv_cfg_res ,pdata 
+0x4fbc 018860 store 1 ,mem_sdp_state 
+0x4fbd 018861 branch l2cap_process_one_signal_rtn 
+:      018862 l2cap_proc_signal_config_rsp_rfcomm:
+0x4fbe 018863 fetch 1 ,mem_rfcomm_state 
+0x4fbf 018864 set1 l2cap_channel_state_rcv_cfg_res ,pdata 
+0x4fc0 018865 store 1 ,mem_rfcomm_state 
+0x4fc1 018866 branch l2cap_process_one_signal_rtn 
+:      018867 l2cap_proc_signal_config_rsp_hid_ctrl:
+0x4fc2 018868 fetch 1 ,mem_hid_control_state 
+0x4fc3 018869 set1 l2cap_channel_state_rcv_cfg_res ,pdata 
+0x4fc4 018870 store 1 ,mem_hid_control_state 
+0x4fc5 018871 branch l2cap_process_one_signal_rtn 
+:      018872 l2cap_proc_signal_config_rsp_hid_int:
+0x4fc6 018873 fetch 1 ,mem_hid_interrupt_state 
+0x4fc7 018874 set1 l2cap_channel_state_rcv_cfg_res ,pdata 
+0x4fc8 018875 store 1 ,mem_hid_interrupt_state 
+0x4fc9 018876 jam bt_evt_hid_connected ,mem_fifo_temp 
+0x4fca 018877 branch ui_ipc_send_event 
+:      018881 l2cap_proc_signal_disconnect_req:
+0x4fcb 018882 ifetch 1 ,contr 
+0x4fcc 018883 copy pdata ,queue 
+0x4fcd 018884 ifetch 2 ,contr 
+0x4fce 018885 copy pdata ,rega 
+0x4fcf 018886 copy regc ,pdata 
+0x4fd0 018887 isub rega ,regc 
+0x4fd1 018888 ifetch 2 ,contr 
+0x4fd2 018889 copy pdata ,rega 
+0x4fd3 018890 ifetch 2 ,contr 
+0x4fd4 018891 copy pdata ,timeup 
+0x4fd5 018892 copy rega ,temp 
+0x4fd6 018893 call save_cont_pointers 
+0x4fd7 018894 bpatchx patch22_6 ,mem_patch22 
+0x4fd8 018895 setarg l2cap_sdp_channel 
+0x4fd9 018896 isub temp ,null 
+0x4fda 018897 branch l2cap_proc_signal_disconnect_req_sdp ,zero 
+0x4fdb 018898 setarg l2cap_rfcomm_channel 
+0x4fdc 018899 isub temp ,null 
+0x4fdd 018900 branch l2cap_proc_signal_disconnect_req_rfcomm ,zero 
+0x4fde 018901 setarg l2cap_hid_control_channel 
+0x4fdf 018902 isub temp ,null 
+0x4fe0 018903 branch l2cap_proc_signal_disconnect_req_hid_ctrl ,zero 
+0x4fe1 018904 setarg l2cap_hid_interrupt_channel 
+0x4fe2 018905 isub temp ,null 
+0x4fe3 018906 branch l2cap_proc_signal_disconnect_req_hid_int ,zero 
+0x4fe4 018907 call l2cap_reject_command 
+0x4fe5 018908 branch l2cap_proc_signal_disconnect_req_err_rtn 
+:      018909 l2cap_proc_signal_disconnect_req_hid_ctrl:
+0x4fe6 018910 copy timeup ,temp 
+0x4fe7 018911 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x4fe8 018912 isub temp ,null 
+0x4fe9 018913 branch l2cap_disconnect_hid_control_now ,zero 
+0x4fea 018914 call l2cap_reject_command 
+0x4feb 018915 branch l2cap_proc_signal_disconnect_req_err_rtn 
+:      018916 l2cap_proc_signal_disconnect_req_hid_int:
+0x4fec 018917 copy timeup ,temp 
+0x4fed 018918 fetch 2 ,mem_hid_int_remote_cid 
+0x4fee 018919 isub temp ,null 
+0x4fef 018920 branch l2cap_disconnect_hid_interrupt_now ,zero 
+0x4ff0 018921 call l2cap_reject_command 
+0x4ff1 018922 branch l2cap_proc_signal_disconnect_req_err_rtn 
+:      018924 l2cap_proc_signal_disconnect_req_sdp:
+0x4ff2 018925 copy timeup ,temp 
+0x4ff3 018926 fetch 2 ,mem_sdp_remote_cid 
+0x4ff4 018927 isub temp ,null 
+0x4ff5 018928 branch l2cap_disconnect_sdp_now ,zero 
+0x4ff6 018929 call l2cap_reject_command 
+0x4ff7 018930 branch l2cap_proc_signal_disconnect_req_err_rtn 
+:      018931 l2cap_disconnect_hid_control_now:
+0x4ff8 018932 call l2cap_reset_hid_ctrl_state 
+0x4ff9 018933 branch l2cap_send_disconnect_rsp_pkt 
+:      018934 l2cap_disconnect_hid_interrupt_now:
+0x4ffa 018935 call l2cap_reset_hid_int_state 
+0x4ffb 018936 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x4ffc 018937 branch l2cap_send_disconnect_rsp_pkt ,blank 
+0x4ffd 018945 branch l2cap_send_disconnect_rsp_pkt 
+:      018947 l2cap_disconnect_sdp_now:
+0x4ffe 018948 call l2cap_reset_sdp_channel_state 
+0x4fff 018949 fetch 1 ,mem_upper_sm_ss 
+0x5000 018950 nbranch l2cap_send_disconnect_rsp_pkt ,blank 
+0x5001 018953 branch l2cap_send_disconnect_rsp_pkt 
+:      018954 l2cap_proc_signal_disconnect_req_rfcomm:
+0x5002 018955 copy timeup ,temp 
+0x5003 018956 fetch 2 ,mem_rfcomm_remote_cid 
+0x5004 018957 isub temp ,null 
+0x5005 018958 branch l2cap_disconnect_rfcomm_now ,zero 
+0x5006 018959 call l2cap_reject_command 
+0x5007 018960 branch l2cap_proc_signal_disconnect_req_err_rtn 
+:      018961 l2cap_disconnect_rfcomm_now:
+0x5008 018962 call l2cap_reset_rfcomm_channel_state 
+0x5009 018963 branch l2cap_send_disconnect_rsp_pkt 
+:      018964 l2cap_send_disconnect_rsp_pkt:
+0x500a 018965 call load_cont_pointers 
+0x500b 018966 setarg signal_disconnect_rsp 
+0x500c 018967 istore 1 ,contw 
+0x500d 018968 copy queue ,pdata 
+0x500e 018969 istore 1 ,contw 
+0x500f 018970 setarg 0x0004 
+0x5010 018971 istore 2 ,contw 
+0x5011 018972 copy rega ,pdata 
+0x5012 018973 istore 2 ,contw 
+0x5013 018974 copy timeup ,pdata 
+0x5014 018975 istore 2 ,contw 
+0x5015 018976 force 8 ,pdata 
+0x5016 018977 branch l2cap_proc_signal_disconnect_req_rtn 
+:      018978 l2cap_proc_signal_disconnect_req_err_rtn:
+0x5017 018979 call load_cont_pointers 
+0x5018 018980 branch l2cap_proc_signal_disconnect_req_rtn 
+:      018981 l2cap_proc_signal_disconnect_req_rtn:
+0x5019 018982 iadd regb ,regb 
+0x501a 018983 branch l2cap_process_one_signal_rtn 
+:      018984 l2cap_proc_signal_disconnect_rsp:
+0x501b 018985 ifetch 1 ,contr 
+0x501c 018986 copy pdata ,queue 
+0x501d 018987 ifetch 2 ,contr 
+0x501e 018988 copy pdata ,rega 
+0x501f 018989 copy regc ,pdata 
+0x5020 018990 isub rega ,regc 
+0x5021 018991 ifetch 2 ,contr 
+0x5022 018992 copy pdata ,timeup 
+0x5023 018993 ifetch 2 ,contr 
+0x5024 018994 copy pdata ,temp 
+0x5025 018995 call save_cont_pointers 
+0x5026 018996 bpatchx patch22_7 ,mem_patch22 
+0x5027 018997 setarg l2cap_sdp_channel 
+0x5028 018998 isub temp ,null 
+0x5029 018999 branch l2cap_proc_signal_disconnect_rsp_sdp ,zero 
+0x502a 019000 setarg l2cap_rfcomm_channel 
+0x502b 019001 isub temp ,null 
+0x502c 019002 branch l2cap_proc_signal_disconnect_rsp_rfcomm ,zero 
+0x502d 019003 setarg l2cap_hid_control_channel 
+0x502e 019004 isub temp ,null 
+0x502f 019005 branch l2cap_proc_signal_disconnect_rsp_hid_ctrl ,zero 
+0x5030 019006 setarg l2cap_hid_interrupt_channel 
+0x5031 019007 isub temp ,null 
+0x5032 019008 branch l2cap_proc_signal_disconnect_rsp_hid_int ,zero 
+0x5033 019009 call l2cap_reject_command 
+0x5034 019010 branch l2cap_proc_signal_disconnect_rsp_err_rtn 
+:      019011 l2cap_proc_signal_disconnect_rsp_sdp:
+0x5035 019012 copy temp ,rega 
+0x5036 019013 copy timeup ,temp 
+0x5037 019014 fetch 2 ,mem_sdp_remote_cid 
+0x5038 019015 isub temp ,null 
+0x5039 019016 call l2cap_reset_sdp_channel_state ,zero 
+0x503a 019017 branch l2cap_proc_signal_disconnect_rsp_rtn 
+:      019018 l2cap_proc_signal_disconnect_rsp_rfcomm:
+0x503b 019019 copy temp ,rega 
+0x503c 019020 copy timeup ,temp 
+0x503d 019021 fetch 2 ,mem_rfcomm_remote_cid 
+0x503e 019022 isub temp ,null 
+0x503f 019023 call l2cap_reset_rfcomm_channel_state ,zero 
+0x5040 019024 branch l2cap_proc_signal_disconnect_rsp_rtn 
+:      019025 l2cap_proc_signal_disconnect_rsp_hid_ctrl:
+0x5041 019026 copy temp ,rega 
+0x5042 019027 copy timeup ,temp 
+0x5043 019028 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x5044 019029 isub temp ,null 
+0x5045 019030 call l2cap_reset_hid_ctrl_state ,zero 
+0x5046 019031 branch l2cap_proc_signal_disconnect_rsp_rtn 
+:      019032 l2cap_proc_signal_disconnect_rsp_hid_int:
+0x5047 019033 copy temp ,rega 
+0x5048 019034 copy timeup ,temp 
+0x5049 019035 fetch 2 ,mem_hid_int_remote_cid 
+0x504a 019036 isub temp ,null 
+0x504b 019037 call l2cap_reset_hid_int_state ,zero 
+0x504c 019038 branch l2cap_proc_signal_disconnect_rsp_rtn 
+:      019039 l2cap_proc_signal_disconnect_rsp_rtn:
+0x504d 019040 call load_cont_pointers 
+0x504e 019041 branch l2cap_process_one_signal_rtn 
+:      019042 l2cap_proc_signal_disconnect_rsp_err_rtn:
+0x504f 019043 branch l2cap_process_one_signal_rtn 
+:      019046 l2cap_proc_signal_echo_req:
+0x5050 019047 ifetch 1 ,contr 
+0x5051 019048 copy pdata ,queue 
+0x5052 019049 ifetch 2 ,contr 
+0x5053 019050 copy pdata ,rega 
+0x5054 019051 iadd contr ,contr 
+0x5055 019052 setarg 9 
+0x5056 019053 istore 1 ,contw 
+0x5057 019054 copy queue ,pdata 
+0x5058 019055 istore 1 ,contw 
+0x5059 019056 force 0x0000 ,pdata 
+0x505a 019057 istore 2 ,contw 
+0x505b 019058 force 4 ,pdata 
+0x505c 019059 iadd regb ,regb 
+0x505d 019060 copy regc ,pdata 
+0x505e 019061 isub rega ,regc 
+0x505f 019062 branch l2cap_process_one_signal_rtn 
+:      019063 l2cap_proc_signal_echo_rsp:
+0x5060 019064 branch l2cap_process_one_signal_rtn 
+:      019066 l2cap_proc_signal_info_rsp:
+0x5061 019067 branch l2cap_process_one_signal_rtn 
+:      019068 l2cap_reject_command:
+0x5062 019069 force 0 ,regb 
+0x5063 019070 call l2cap_get_signal_tx_payload 
+0x5064 019071 setarg signal_cmd_reject 
+0x5065 019072 istore 1 ,contw 
+0x5066 019073 copy queue ,pdata 
+0x5067 019074 istore 1 ,contw 
+0x5068 019075 setarg 2 
+0x5069 019076 istore 2 ,contw 
+0x506a 019077 setarg cmd_not_understood 
+0x506b 019078 istore 2 ,contw 
+0x506c 019079 increase 6 ,regb 
+0x506d 019080 arg 4 ,regc 
+0x506e 019081 branch l2cap_process_one_signal_rtn 
+:      019085 l2cap_reset_rfcomm_channel_state:
+0x506f 019086 setarg 0 
+0x5070 019087 store 2 ,mem_rfcomm_tx_pkt_length 
+0x5071 019088 store 2 ,mem_rfcomm_remote_cid 
+0x5072 019089 jam 0 ,mem_rfcomm_state 
+0x5073 019090 rtn 
+:      019091 l2cap_reset_sdp_channel_state:
+0x5074 019092 setarg 0 
+0x5075 019093 store 2 ,mem_sdp_tx_pkt_length 
+0x5076 019094 store 2 ,mem_sdp_remote_cid 
+0x5077 019095 jam 0 ,mem_sdp_state 
+0x5078 019096 rtn 
+:      019097 l2cap_reset_hid_ctrl_state:
+0x5079 019098 setarg 0 
+0x507a 019099 store 2 ,mem_hid_ctrl_remote_cid 
+0x507b 019100 jam 0 ,mem_hid_control_state 
+0x507c 019101 fetch 1 ,mem_hid_interrupt_state 
+0x507d 019102 beq 0 ,l2cap_reset_hid_disconnected 
+0x507e 019103 rtn 
+:      019105 l2cap_reset_hid_int_state:
+0x507f 019106 setarg 0 
+0x5080 019107 store 2 ,mem_hid_int_remote_cid 
+0x5081 019108 jam 0 ,mem_hid_interrupt_state 
+0x5082 019109 fetch 1 ,mem_hid_control_state 
+0x5083 019110 beq 0 ,l2cap_reset_hid_disconnected 
+0x5084 019111 rtn 
+:      019113 l2cap_reset_hid_disconnected:
+0x5085 019114 jam bt_evt_hid_disconnected ,mem_fifo_temp 
+0x5086 019115 branch ui_ipc_send_event 
+:      019117 l2cap_disconnect_interrupt_req:
+0x5087 019118 fetch 1 ,mem_control_tasks 
+0x5088 019119 set0 l2cap_disconnect_interrupt ,pdata 
+0x5089 019120 store 1 ,mem_control_tasks 
+0x508a 019121 fetch 2 ,mem_hid_int_remote_cid 
+0x508b 019122 rtn blank 
+0x508c 019123 call l2cap_malloc_signal_channel 
+0x508d 019124 fetch 2 ,mem_hid_int_remote_cid 
+0x508e 019125 copy pdata ,rega 
+0x508f 019126 force l2cap_hid_interrupt_channel ,regb 
+0x5090 019127 branch l2cap_generate_disconnect_req 
+:      019128 l2cap_disconnect_control_req:
+0x5091 019129 fetch 1 ,mem_control_tasks 
+0x5092 019130 set0 l2cap_disconnect_control ,pdata 
+0x5093 019131 store 1 ,mem_control_tasks 
+0x5094 019132 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x5095 019133 rtn blank 
+0x5096 019134 call l2cap_malloc_signal_channel 
+0x5097 019135 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x5098 019136 copy pdata ,rega 
+0x5099 019137 force l2cap_hid_control_channel ,regb 
+:      019138 l2cap_generate_disconnect_req:
+0x509a 019139 call l2cap_get_req_id 
+0x509b 019140 call l2cap_get_signal_tx_payload 
+0x509c 019141 force signal_disconnect_req ,pdata 
+0x509d 019142 istore 1 ,contw 
+0x509e 019143 fetch 1 ,mem_ml2cap_comm_id 
+0x509f 019144 istore 1 ,contw 
+0x50a0 019145 setarg 0x0004 
+0x50a1 019146 istore 2 ,contw 
+0x50a2 019147 copy rega ,pdata 
+0x50a3 019148 istore 2 ,contw 
+0x50a4 019149 copy regb ,pdata 
+0x50a5 019150 istore 2 ,contw 
+0x50a6 019151 force 0x08 ,temp 
+0x50a7 019152 branch ml2cap_send_signal 
+:      019154 ml2cap_send_signal_connect_req:
+0x50a8 019155 bpatchx patch23_0 ,mem_patch23 
+0x50a9 019156 call l2cap_get_req_id 
+0x50aa 019157 call l2cap_get_signal_tx_payload 
+0x50ab 019158 setarg signal_connect_req 
+0x50ac 019159 istore 1 ,contw 
+0x50ad 019160 fetch 1 ,mem_ml2cap_comm_id 
+0x50ae 019161 istore 1 ,contw 
+0x50af 019162 setarg 0x0004 
+0x50b0 019163 istore 2 ,contw 
+0x50b1 019164 copy temp ,pdata 
+0x50b2 019165 istore 2 ,contw 
+0x50b3 019166 copy timeup ,pdata 
+0x50b4 019167 istore 2 ,contw 
+0x50b5 019168 arg 8 ,temp 
+0x50b6 019169 branch ml2cap_send_signal 
+:      019170 ml2cap_send_signal_config_req:
+0x50b7 019171 bpatchx patch23_1 ,mem_patch23 
+0x50b8 019172 call l2cap_get_req_id 
+0x50b9 019173 call l2cap_get_signal_tx_payload 
+0x50ba 019174 setarg signal_config_req 
+0x50bb 019175 istore 1 ,contw 
+0x50bc 019176 fetch 1 ,mem_ml2cap_comm_id 
+0x50bd 019177 istore 1 ,contw 
+0x50be 019178 setarg 0x0008 
+0x50bf 019179 istore 2 ,contw 
+0x50c0 019181 copy temp ,pdata 
+0x50c1 019183 istore 2 ,contw 
+0x50c2 019184 setarg 0x0000 
+0x50c3 019185 istore 2 ,contw 
+0x50c4 019186 setarg 0x01 
+0x50c5 019187 istore 1 ,contw 
+0x50c6 019188 setarg 0x02 
+0x50c7 019189 istore 1 ,contw 
+0x50c8 019190 setarg l2cap_config_mtu_rfcomm 
+0x50c9 019191 istore 2 ,contw 
+0x50ca 019192 arg 0xc ,temp 
+0x50cb 019193 branch ml2cap_send_signal 
+:      019194 ml2cap_send_signal_disconn_req:
+0x50cc 019195 bpatchx patch23_2 ,mem_patch23 
+0x50cd 019196 call l2cap_get_req_id 
+0x50ce 019197 call l2cap_get_signal_tx_payload 
+0x50cf 019198 setarg signal_disconnect_req 
+0x50d0 019199 istore 1 ,contw 
+0x50d1 019200 fetch 1 ,mem_ml2cap_comm_id 
+0x50d2 019201 increase 1 ,pdata 
+0x50d3 019202 copy contw ,rega 
+0x50d4 019203 store 1 ,mem_ml2cap_comm_id 
+0x50d5 019204 copy rega ,contw 
+0x50d6 019205 istore 1 ,contw 
+0x50d7 019206 setarg 0x0004 
+0x50d8 019207 istore 2 ,contw 
+0x50d9 019208 copy temp ,pdata 
+0x50da 019209 istore 2 ,contw 
+0x50db 019210 copy timeup ,pdata 
+0x50dc 019211 istore 2 ,contw 
+0x50dd 019212 arg 0x8 ,temp 
+:      019215 ml2cap_send_signal:
+0x50de 019216 storet 2 ,mem_l2cap_signal_tx_length 
+0x50df 019217 copy temp ,pdata 
+0x50e0 019218 branch l2cap_malloc_discard ,blank 
+0x50e1 019219 call l2cap_get_signal_tx_buff 
+0x50e2 019220 fetch 2 ,mem_l2cap_signal_tx_length 
+0x50e3 019221 istore 2 ,contw 
+0x50e4 019222 force l2cap_signal_channel ,pdata 
+0x50e5 019223 istore 2 ,contw 
+0x50e6 019224 rtn 
+:      019226 msdp_send_req_done:
+0x50e7 019227 fetch 2 ,mem_sdp_tx_pkt_length 
+0x50e8 019228 branch assert ,blank 
+0x50e9 019229 call l2cap_get_sdp_tx_buff 
+0x50ea 019230 fetch 2 ,mem_sdp_tx_pkt_length 
+0x50eb 019231 istore 2 ,contw 
+0x50ec 019232 fetch 2 ,mem_sdp_remote_cid 
+0x50ed 019233 istore 2 ,contw 
+0x50ee 019234 rtn 
+:      019235 ml2cap_rx_multiplexing:
+0x50ef 019236 fetch 2 ,mem_l2cap_rx_pkt_length 
+0x50f0 019237 branch l2cap_rx_reset_state ,blank 
+0x50f1 019238 bpatchx patch23_3 ,mem_patch23 
+0x50f2 019239 fetch 1 ,mem_l2cap_rx_cid 
+0x50f3 019240 beq l2cap_signal_channel ,ml2cap_call_proc_signal 
+0x50f4 019241 beq l2cap_sdp_channel ,ml2cap_call_proc_sdp 
+0x50f5 019242 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm 
+0x50f6 019243 beq l2cap_hid_control_channel ,l2cap_call_proc_hid 
+0x50f7 019244 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid 
+0x50f8 019245 branch l2cap_rx_reset_state 
+:      019247 ml2cap_call_proc_signal:
+0x50f9 019248 bpatchx patch23_4 ,mem_patch23 
+0x50fa 019249 call l2cap_malloc_signal_channel 
+0x50fb 019250 force 0 ,regb 
+0x50fc 019251 call l2cap_get_signal_tx_payload 
+0x50fd 019252 copy pdata ,contw 
+0x50fe 019253 fetch 2 ,mem_l2cap_rx_pkt_length 
+0x50ff 019254 copy pdata ,regc 
+0x5100 019255 fetch 2 ,mem_l2cap_payload_ptr 
+0x5101 019256 iforce contr 
+:      019257 ml2cap_proc_one_comm_loop:
+0x5102 019258 call ml2cap_proc_one_comm 
+0x5103 019259 increase -4 ,regc 
+0x5104 019260 nbranch ml2cap_proc_one_comm_loop ,zero 
+0x5105 019261 copy regb ,temp 
+0x5106 019262 call ml2cap_send_signal 
+0x5107 019263 branch l2cap_rx_reset_state 
+:      019265 ml2cap_proc_one_comm:
+0x5108 019266 ifetch 1 ,contr 
+0x5109 019267 beq signal_connect_req ,ml2cap_proc_signal_connect_req 
+0x510a 019268 beq signal_cmd_reject ,ml2cap_proc_signal_cmd_reject 
+0x510b 019269 beq signal_connect_rsp ,ml2cap_proc_signal_connect_rsp 
+0x510c 019270 beq signal_config_rsp ,ml2cap_proc_signal_config_rsp 
+0x510d 019271 beq signal_config_req ,ml2cap_proc_signal_config_req 
+0x510e 019272 beq signal_disconnect_rsp ,ml2cap_proc_signal_disconn_rsp 
+0x510f 019273 beq signal_disconnect_req ,ml2cap_proc_signal_disconn_req 
+0x5110 019274 beq signal_echo_req ,l2cap_proc_signal_echo_req 
+0x5111 019275 beq signal_info_req ,ml2cap_proc_signal_info_req 
+0x5112 019276 branch ml2cap_proc_send_reject 
+:      019278 ml2cap_proc_signal_connect_req:
+0x5113 019279 call save_cont_pointers 
+0x5114 019281 call load_cont_pointers 
+0x5115 019282 branch l2cap_proc_signal_connect_req 
+:      019283 ml2cap_proc_signal_cmd_reject:
+0x5116 019284 ifetch 1 ,contr 
+0x5117 019285 copy pdata ,queue 
+0x5118 019286 ifetch 2 ,contr 
+0x5119 019287 copy pdata ,rega 
+0x511a 019288 copy regc ,pdata 
+0x511b 019289 isub rega ,regc 
+:      019290 mvptr:
+0x511c 019291 ifetch 1 ,contr 
+0x511d 019292 increase -1 ,rega 
+0x511e 019293 nbranch mvptr ,zero 
+0x511f 019294 rtn 
+:      019295 ml2cap_proc_signal_connect_rsp:
+0x5120 019296 ifetch 1 ,contr 
+0x5121 019297 copy pdata ,queue 
+0x5122 019298 ifetch 2 ,contr 
+0x5123 019299 copy pdata ,rega 
+0x5124 019300 ifetch 2 ,contr 
+0x5125 019301 copy pdata ,timeup 
+0x5126 019302 ifetch 2 ,contr 
+0x5127 019303 copy pdata ,temp 
+0x5128 019304 ifetch 2 ,contr 
+0x5129 019305 sub pdata ,0 ,null 
+0x512a 019306 branch ml2cap_proc_signal_connect_rsp_sucessful ,zero 
+0x512b 019307 beq l2cap_connect_refused_psm_unsupported ,ml2cap_proc_signal_connect_refused_result 
+0x512c 019308 beq l2cap_connect_refused_no_resources ,ml2cap_proc_signal_connect_refused_result 
+0x512d 019309 branch ml2cap_proc_signal_connect_rsp_mnosucc 
+:      019310 ml2cap_proc_signal_connect_refused_result:
+0x512e 019311 jam bt_evt_ml2cap_conn_refused ,mem_fifo_temp 
+0x512f 019312 call ui_ipc_send_event 
+:      019313 ml2cap_proc_signal_connect_rsp_mnosucc:
+0x5130 019314 ifetch 2 ,contr 
+0x5131 019315 branch mnosucc 
+:      019316 ml2cap_proc_signal_connect_rsp_sucessful:
+0x5132 019317 call save_cont_pointers 
+0x5133 019321 bpatchx patch23_5 ,mem_patch23 
+0x5134 019322 setarg l2cap_sdp_channel 
+0x5135 019323 isub temp ,null 
+0x5136 019324 branch ml2cap_proc_signal_connect_rsp_sdp ,zero 
+0x5137 019325 setarg l2cap_rfcomm_channel 
+0x5138 019326 isub temp ,null 
+0x5139 019327 branch ml2cap_proc_signal_connect_rsp_rfcomm ,zero 
+0x513a 019328 setarg l2cap_hid_interrupt_channel 
+0x513b 019329 isub temp ,null 
+0x513c 019330 branch ml2cap_proc_signal_connect_rsp_hid_int ,zero 
+0x513d 019331 setarg l2cap_hid_control_channel 
+0x513e 019332 isub temp ,null 
+0x513f 019333 branch ml2cap_proc_signal_connect_rsp_hid_ctrl ,zero 
+0x5140 019334 branch mnosucc 
+:      019335 ml2cap_proc_signal_connect_rsp_sdp:
+0x5141 019336 copy timeup ,pdata 
+0x5142 019337 store 2 ,mem_sdp_remote_cid 
+0x5143 019338 fetch 1 ,mem_sdp_state 
+0x5144 019339 set1 l2cap_channel_state_conn_res 
+0x5145 019340 store 1 ,mem_sdp_state 
+0x5146 019341 branch mnosucc1 
+:      019342 ml2cap_proc_signal_connect_rsp_rfcomm:
+0x5147 019343 copy timeup ,pdata 
+0x5148 019344 store 2 ,mem_rfcomm_remote_cid 
+0x5149 019345 fetch 1 ,mem_rfcomm_state 
+0x514a 019346 set1 l2cap_channel_state_conn_res 
+0x514b 019347 store 1 ,mem_rfcomm_state 
+0x514c 019348 branch mnosucc1 
+:      019349 ml2cap_proc_signal_connect_rsp_hid_ctrl:
+0x514d 019350 copy timeup ,pdata 
+0x514e 019351 store 2 ,mem_hid_ctrl_remote_cid 
+0x514f 019352 fetch 1 ,mem_hid_control_state 
+0x5150 019353 set1 l2cap_channel_state_conn_res 
+0x5151 019354 store 1 ,mem_hid_control_state 
+0x5152 019355 branch mnosucc1 
+:      019356 ml2cap_proc_signal_connect_rsp_hid_int:
+0x5153 019357 copy timeup ,pdata 
+0x5154 019358 store 2 ,mem_hid_int_remote_cid 
+0x5155 019359 fetch 1 ,mem_hid_interrupt_state 
+0x5156 019360 set1 l2cap_channel_state_conn_res 
+0x5157 019361 store 1 ,mem_hid_interrupt_state 
+:      019364 mnosucc1:
+0x5158 019365 call load_cont_pointers 
+:      019366 mnosucc:
+0x5159 019367 copy regc ,pdata 
+0x515a 019368 isub rega ,regc 
+0x515b 019369 rtn 
+:      019371 ml2cap_proc_signal_config_rsp:
+0x515c 019372 ifetch 1 ,contr 
+0x515d 019373 copy pdata ,queue 
+0x515e 019374 ifetch 2 ,contr 
+0x515f 019375 copy pdata ,rega 
+0x5160 019376 copy regc ,pdata 
+0x5161 019377 isub rega ,regc 
+0x5162 019378 ifetch 2 ,contr 
+0x5163 019379 copy pdata ,timeup 
+0x5164 019380 ifetch 2 ,contr 
+0x5165 019381 ifetch 2 ,contr 
+0x5166 019382 nbranch mcrsdone1 ,blank 
+0x5167 019383 call save_cont_pointers 
+0x5168 019387 copy timeup ,temp 
+0x5169 019388 bpatchx patch23_6 ,mem_patch23 
+0x516a 019389 setarg l2cap_sdp_channel 
+0x516b 019390 isub temp ,null 
+0x516c 019391 branch ml2cap_proc_signal_config_rsp_sdp ,zero 
+0x516d 019392 setarg l2cap_rfcomm_channel 
+0x516e 019393 isub temp ,null 
+0x516f 019394 branch ml2cap_proc_signal_config_rsp_rfcomm ,zero 
+0x5170 019395 setarg l2cap_hid_control_channel 
+0x5171 019396 isub temp ,null 
+0x5172 019397 branch ml2cap_proc_signal_config_rsp_hid_ctrl ,zero 
+0x5173 019398 setarg l2cap_hid_interrupt_channel 
+0x5174 019399 isub temp ,null 
+0x5175 019400 branch ml2cap_proc_signal_config_rsp_hid_int ,zero 
+:      019401 ml2cap_proc_signal_config_rsp_sdp:
+0x5176 019402 fetch 1 ,mem_sdp_state 
+0x5177 019403 set1 l2cap_channel_state_rcv_cfg_res 
+0x5178 019404 store 1 ,mem_sdp_state 
+0x5179 019405 rtn 
+:      019406 ml2cap_proc_signal_config_rsp_rfcomm:
+0x517a 019407 fetch 1 ,mem_rfcomm_state 
+0x517b 019408 set1 l2cap_channel_state_rcv_cfg_res 
+0x517c 019409 store 1 ,mem_rfcomm_state 
+0x517d 019410 rtn 
+:      019411 ml2cap_proc_signal_config_rsp_hid_ctrl:
+0x517e 019412 fetch 1 ,mem_hid_control_state 
+0x517f 019413 set1 l2cap_channel_state_rcv_cfg_res 
+0x5180 019414 store 1 ,mem_hid_control_state 
+0x5181 019415 rtn 
+:      019416 ml2cap_proc_signal_config_rsp_hid_int:
+0x5182 019417 fetch 1 ,mem_hid_interrupt_state 
+0x5183 019418 set1 l2cap_channel_state_rcv_cfg_res 
+0x5184 019419 store 1 ,mem_hid_interrupt_state 
+0x5185 019420 jam bt_evt_hid_connected ,mem_fifo_temp 
+0x5186 019421 branch ui_ipc_send_event 
+:      019424 mcfrsdone:
+0x5187 019425 call load_cont_pointers 
+:      019426 mcrsdone1:
+0x5188 019427 increase -6 ,rega 
+:      019428 mloop2:
+0x5189 019429 branch mcrsdone ,zero 
+0x518a 019430 increase 1 ,contr 
+0x518b 019431 increase -1 ,rega 
+0x518c 019432 branch mloop2 
+:      019433 mcrsdone:
+0x518d 019434 rtn 
+:      019435 ml2cap_proc_signal_config_req:
+0x518e 019436 ifetch 1 ,contr 
+0x518f 019437 copy pdata ,queue 
+0x5190 019438 ifetch 2 ,contr 
+0x5191 019439 copy pdata ,rega 
+0x5192 019440 copy regc ,pdata 
+0x5193 019441 isub rega ,regc 
+0x5194 019442 ifetch 2 ,contr 
+0x5195 019443 increase 2 ,contr 
+0x5196 019444 copy pdata ,temp 
+0x5197 019445 setarg signal_config_rsp 
+0x5198 019446 istore 1 ,contw 
+0x5199 019447 copy queue ,pdata 
+0x519a 019448 istore 1 ,contw 
+0x519b 019449 increase 2 ,rega 
+0x519c 019450 copy rega ,pdata 
+0x519d 019451 istore 2 ,contw 
+0x519e 019452 call save_cont_pointers 
+0x519f 019453 bpatchx patch23_7 ,mem_patch23 
+0x51a0 019454 setarg l2cap_sdp_channel 
+0x51a1 019455 isub temp ,null 
+0x51a2 019456 branch ml2cap_proc_signal_config_req_sdp ,zero 
+0x51a3 019457 setarg l2cap_rfcomm_channel 
+0x51a4 019458 isub temp ,null 
+0x51a5 019459 branch ml2cap_proc_signal_config_req_rfcomm ,zero 
+0x51a6 019460 setarg l2cap_hid_control_channel 
+0x51a7 019461 isub temp ,null 
+0x51a8 019462 branch ml2cap_proc_signal_config_req_hid_ctrl ,zero 
+0x51a9 019463 setarg l2cap_hid_interrupt_channel 
+0x51aa 019464 isub temp ,null 
+0x51ab 019465 branch ml2cap_proc_signal_config_req_hid_int ,zero 
+0x51ac 019466 branch mcfgrq_done 
+:      019467 ml2cap_proc_signal_config_req_sdp:
+0x51ad 019468 fetch 1 ,mem_sdp_state 
+0x51ae 019469 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+0x51af 019470 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+0x51b0 019471 store 1 ,mem_sdp_state 
+0x51b1 019472 bbit1 l2cap_channel_state_snd_cfg_req ,ml2cap_proc_signal_config_req_sdp_nsndreq 
+0x51b2 019473 fetcht 1 ,mem_control_tasks 
+0x51b3 019474 set1 l2cap_init_config_req ,temp 
+0x51b4 019475 storet 1 ,mem_control_tasks 
+0x51b5 019476 copy queue ,pdata 
+0x51b6 019477 increase 1 ,pdata 
+0x51b7 019478 store 1 ,mem_config_identifier 
+0x51b8 019479 fetch 1 ,mem_sdp_state 
+0x51b9 019480 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+0x51ba 019481 store 1 ,mem_sdp_state 
+:      019482 ml2cap_proc_signal_config_req_sdp_nsndreq:
+0x51bb 019483 fetch 2 ,mem_sdp_remote_cid 
+0x51bc 019484 store 2 ,mem_config_req_dest_cid 
+0x51bd 019485 branch mcfgrq_done 
+:      019486 ml2cap_proc_signal_config_req_rfcomm:
+0x51be 019487 fetch 1 ,mem_rfcomm_state 
+0x51bf 019488 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+0x51c0 019489 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+0x51c1 019490 store 1 ,mem_rfcomm_state 
+0x51c2 019491 fetch 2 ,mem_rfcomm_remote_cid 
+0x51c3 019492 branch mcfgrq_done 
+:      019493 ml2cap_proc_signal_config_req_hid_ctrl:
+0x51c4 019494 fetch 1 ,mem_hid_control_state 
+0x51c5 019495 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+0x51c6 019496 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+0x51c7 019497 store 1 ,mem_hid_control_state 
+0x51c8 019498 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x51c9 019499 branch mcfgrq_done 
+:      019500 ml2cap_proc_signal_config_req_hid_int:
+0x51ca 019501 fetch 1 ,mem_hid_interrupt_state 
+0x51cb 019502 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+0x51cc 019503 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+0x51cd 019504 store 1 ,mem_hid_interrupt_state 
+0x51ce 019505 fetch 2 ,mem_hid_int_remote_cid 
+:      019508 mcfgrq_done:
+0x51cf 019509 copy pdata ,timeup 
+0x51d0 019510 call load_cont_pointers 
+0x51d1 019512 copy timeup ,pdata 
+0x51d2 019514 istore 2 ,contw 
+0x51d3 019515 force 0x0000 ,pdata 
+0x51d4 019516 istore 2 ,contw 
+0x51d5 019517 force 0x0000 ,pdata 
+0x51d6 019518 istore 2 ,contw 
+0x51d7 019519 force 10 ,pdata 
+0x51d8 019520 iadd regb ,regb 
+0x51d9 019521 increase -6 ,rega 
+:      019522 mloop1:
+0x51da 019523 branch mcrqdone ,zero 
+0x51db 019524 ifetch 1 ,contr 
+0x51dc 019525 istore 1 ,contw 
+0x51dd 019526 increase 1 ,regb 
+0x51de 019527 increase -1 ,rega 
+0x51df 019528 branch mloop1 
+:      019529 mcrqdone:
+0x51e0 019530 rtn 
+:      019531 ml2cap_proc_signal_disconn_req:
+0x51e1 019532 ifetch 1 ,contr 
+0x51e2 019533 copy pdata ,queue 
+0x51e3 019534 ifetch 2 ,contr 
+0x51e4 019535 copy pdata ,rega 
+0x51e5 019536 copy regc ,pdata 
+0x51e6 019537 isub rega ,regc 
+0x51e7 019539 ifetch 2 ,contr 
+0x51e8 019540 copy pdata ,rega 
+0x51e9 019541 ifetch 2 ,contr 
+0x51ea 019542 copy pdata ,timeup 
+0x51eb 019543 call save_cont_pointers 
+0x51ec 019544 bpatchx patch24_0 ,mem_patch24 
+0x51ed 019545 setarg l2cap_sdp_channel 
+0x51ee 019546 copy rega ,temp 
+0x51ef 019547 isub temp ,null 
+0x51f0 019548 branch ml2cap_proc_signal_disconn_sdp ,zero 
+0x51f1 019549 setarg l2cap_hid_control_channel 
+0x51f2 019550 copy rega ,temp 
+0x51f3 019551 isub temp ,null 
+0x51f4 019552 branch ml2cap_proc_signal_disconn_hid_ctrl ,zero 
+0x51f5 019553 setarg l2cap_hid_interrupt_channel 
+0x51f6 019554 copy rega ,temp 
+0x51f7 019555 isub temp ,null 
+0x51f8 019556 branch ml2cap_proc_signal_disconn_hid_int ,zero 
+0x51f9 019557 branch mclsrfc 
+:      019558 ml2cap_proc_signal_disconn_sdp:
+0x51fa 019559 setarg 0x0000 
+0x51fb 019560 store 2 ,mem_sdp_tx_pkt_length 
+0x51fc 019561 store 2 ,mem_sdp_remote_cid 
+0x51fd 019562 store 1 ,mem_sdp_state 
+0x51fe 019563 branch mclssdp 
+:      019564 ml2cap_proc_signal_disconn_hid_ctrl:
+0x51ff 019565 call l2cap_reset_hid_ctrl_state 
+0x5200 019566 branch mclssdp 
+:      019567 ml2cap_proc_signal_disconn_hid_int:
+0x5201 019568 call l2cap_reset_hid_int_state 
+0x5202 019574 branch mclssdp 
+:      019575 mclsrfc:
+0x5203 019576 setarg 0x0000 
+0x5204 019577 store 2 ,mem_rfcomm_tx_pkt_length 
+:      019578 mclssdp:
+0x5205 019579 call load_cont_pointers 
+0x5206 019580 setarg signal_disconnect_rsp 
+0x5207 019581 istore 1 ,contw 
+0x5208 019582 copy queue ,pdata 
+0x5209 019583 istore 1 ,contw 
+0x520a 019584 setarg 0x0004 
+0x520b 019585 istore 2 ,contw 
+0x520c 019586 copy rega ,pdata 
+0x520d 019587 istore 2 ,contw 
+0x520e 019588 copy timeup ,pdata 
+0x520f 019589 istore 2 ,contw 
+0x5210 019590 force 8 ,pdata 
+0x5211 019591 iadd regb ,regb 
+0x5212 019592 rtn 
+:      019594 ml2cap_proc_signal_disconn_rsp:
+0x5213 019595 ifetch 1 ,contr 
+0x5214 019596 copy pdata ,queue 
+0x5215 019597 ifetch 2 ,contr 
+0x5216 019598 copy pdata ,rega 
+0x5217 019599 ifetch 2 ,contr 
+0x5218 019600 copy pdata ,timeup 
+0x5219 019601 ifetch 2 ,contr 
+0x521a 019602 copy pdata ,temp 
+0x521b 019603 call save_cont_pointers 
+0x521c 019604 bpatchx patch24_1 ,mem_patch24 
+0x521d 019605 fetch 1 ,mem_ml2cap_comm_id 
+0x521e 019606 icompare 0xff ,queue 
+0x521f 019607 nbranch mdisdone ,true 
+0x5220 019608 setarg l2cap_sdp_channel 
+0x5221 019609 isub temp ,null 
+0x5222 019610 branch ml2cap_proc_signal_disconn_rsp_sdp ,zero 
+0x5223 019611 setarg l2cap_rfcomm_channel 
+0x5224 019612 isub temp ,null 
+0x5225 019613 branch ml2cap_proc_signal_disconn_rsp_rfcomm ,zero 
+0x5226 019614 branch mdisdone 
+:      019615 ml2cap_proc_signal_disconn_rsp_sdp:
+0x5227 019616 jam 0 ,mem_sdp_remote_cid 
+0x5228 019617 jam 0 ,mem_sdp_state 
+0x5229 019618 branch mdisdone 
+:      019619 ml2cap_proc_signal_disconn_rsp_rfcomm:
+:      019622 mdisdone:
+0x522a 019623 call load_cont_pointers 
+0x522b 019624 copy regc ,pdata 
+0x522c 019625 isub rega ,regc 
+0x522d 019626 rtn 
+:      019628 ml2cap_proc_send_reject:
+0x522e 019629 setarg signal_cmd_reject 
+0x522f 019630 istore 1 ,contw 
+0x5230 019631 ifetch 1 ,contr 
+0x5231 019632 istore 1 ,contw 
+0x5232 019633 setarg 0x0002 
+0x5233 019634 istore 2 ,contw 
+0x5234 019635 setarg 0x0000 
+0x5235 019636 istore 2 ,contw 
+0x5236 019637 setarg 0x0006 
+0x5237 019638 iadd regb ,regb 
+0x5238 019639 force 4 ,regc 
+0x5239 019640 rtn 
+:      019643 l2cap_get_req_id:
+0x523a 019644 fetch 1 ,mem_ml2cap_comm_id 
+0x523b 019645 increase 1 ,pdata 
+0x523c 019646 bne 0 ,l2cap_get_req_id_ok 
+0x523d 019647 increase 1 ,pdata 
+:      019648 l2cap_get_req_id_ok:
+0x523e 019649 store 1 ,mem_ml2cap_comm_id 
+0x523f 019650 rtn 
+:      019660 l2cap_malloc:
+0x5240 019661 bpatchx patch24_2 ,mem_patch24 
+0x5241 019662 arg 0 ,regb 
+0x5242 019663 call l2cap_malloc_is_fifo_full 
+0x5243 019664 nbranch assert ,blank 
+0x5244 019665 call l2cap_malloc_get_full_map 
+0x5245 019666 arg mem_tx_buff0 ,regb 
+0x5246 019667 arg 0 ,queue 
+:      019668 l2cap_malloc_loop:
+0x5247 019669 fetcht 1 ,mem_used_map 
+0x5248 019670 qisolate1 temp 
+0x5249 019671 branch l2cap_malloc_next ,true 
+0x524a 019672 call l2cap_malloc_enough 
+0x524b 019673 sub timeup ,0 ,null 
+0x524c 019674 branch l2cap_malloc_next ,positive 
+0x524d 019675 call l2cap_malloc_into_fifo 
+0x524e 019676 branch l2cap_malloc_rtn 
+:      019677 l2cap_malloc_next:
+0x524f 019678 increase 128 ,regb 
+0x5250 019679 increase 1 ,queue 
+0x5251 019680 setarg 8 
+0x5252 019681 isub queue ,null 
+0x5253 019682 branch l2cap_malloc_loop ,positive 
+0x5254 019683 arg 0 ,regb 
+:      019684 l2cap_malloc_rtn:
+0x5255 019685 copy regb ,pdata 
+0x5256 019686 branch assert ,blank 
+0x5257 019687 rtn 
+:      019695 l2cap_malloc_fifo_out:
+0x5258 019696 bpatchx patch24_3 ,mem_patch24 
+0x5259 019697 call l2cap_malloc_fifo_get_first_ptr 
+0x525a 019698 increase 1 ,contr 
+0x525b 019699 ifetch 2 ,contr 
+0x525c 019700 rtn 
+:      019706 l2cap_malloc_free:
+0x525d 019707 bpatchx patch24_4 ,mem_patch24 
+0x525e 019708 call l2cap_malloc_fifo_get_first_ptr 
+0x525f 019709 copy contr ,contw 
+0x5260 019710 copy contr ,temp 
+0x5261 019711 setarg 0 
+0x5262 019712 istore 3 ,contw 
+0x5263 019713 rtn 
+:      019718 l2cap_malloc_discard:
+0x5264 019719 bpatchx patch24_5 ,mem_patch24 
+0x5265 019720 call l2cap_malloc_is_fifo_empty 
+0x5266 019721 branch assert ,blank 
+0x5267 019722 fetch 3 ,mem_tx_fifo2 
+0x5268 019723 store 3 ,mem_tx_fifo3 
+0x5269 019724 fetch 3 ,mem_tx_fifo1 
+0x526a 019725 store 3 ,mem_tx_fifo2 
+0x526b 019726 fetch 3 ,mem_tx_fifo0 
+0x526c 019727 store 3 ,mem_tx_fifo1 
+0x526d 019728 rtn 
+:      019734 l2cap_malloc_is_fifo_full:
+0x526e 019735 bpatchx patch24_6 ,mem_patch24 
+0x526f 019736 fetch 3 ,mem_tx_fifo0 
+0x5270 019737 rtn 
+:      019743 l2cap_malloc_is_fifo_nearly_full:
+0x5271 019744 bpatchx patch24_7 ,mem_patch24 
+0x5272 019745 fetch 3 ,mem_tx_fifo1 
+0x5273 019746 rtn 
+:      019752 l2cap_malloc_is_fifo_empty:
+0x5274 019753 bpatchx patch25_0 ,mem_patch25 
+0x5275 019754 fetch 3 ,mem_tx_fifo3 
+0x5276 019755 rtn 
+:      019760 l2cap_malloc_fifo_get_first_ptr:
+0x5277 019761 call l2cap_malloc_is_fifo_empty 
+0x5278 019762 branch assert ,blank 
+0x5279 019763 arg mem_tx_fifo0 ,contr 
+:      019764 l2cap_malloc_free_loop:
+0x527a 019765 ifetch 3 ,contr 
+0x527b 019766 branch l2cap_malloc_free_loop ,blank 
+0x527c 019767 increase -3 ,contr 
+0x527d 019768 rtn 
+:      019775 l2cap_malloc_get_full_map:
+0x527e 019776 bpatchx patch25_1 ,mem_patch25 
+0x527f 019777 arg 4 ,loopcnt 
+0x5280 019778 arg mem_tx_fifo0_map ,contr 
+0x5281 019779 arg 0 ,temp 
+:      019780 l2cap_malloc_get_full_map_loop:
+0x5282 019781 ifetch 3 ,contr 
+0x5283 019782 and pdata ,0xff ,pdata 
+0x5284 019783 ior temp ,temp 
+0x5285 019784 loop l2cap_malloc_get_full_map_loop 
+0x5286 019785 storet 1 ,mem_used_map 
+0x5287 019786 rtn 
+:      019794 l2cap_malloc_into_fifo:
+0x5288 019795 bpatchx patch25_2 ,mem_patch25 
+0x5289 019796 call l2cap_malloc_is_fifo_full 
+0x528a 019797 nbranch assert ,blank 
+0x528b 019798 call l2cap_malloc_is_fifo_empty 
+0x528c 019799 branch l2cap_malloc_into_fifo_no_push ,blank 
+0x528d 019800 fetch 3 ,mem_tx_fifo1 
+0x528e 019801 store 3 ,mem_tx_fifo0 
+0x528f 019802 ifetch 3 ,contr 
+0x5290 019803 istore 3 ,contw 
+0x5291 019804 ifetch 3 ,contr 
+0x5292 019805 istore 3 ,contw 
+0x5293 019806 setarg 0 
+0x5294 019807 istore 3 ,contw 
+:      019808 l2cap_malloc_into_fifo_no_push:
+0x5295 019809 arg 0 ,temp 
+0x5296 019810 copy timeup ,pdata 
+0x5297 019811 iadd queue ,pdata 
+:      019812 l2cap_malloc_into_fifo_loop:
+0x5298 019813 qset1 temp 
+0x5299 019814 increase 1 ,queue 
+0x529a 019815 isub queue ,null 
+0x529b 019816 nbranch l2cap_malloc_into_fifo_loop ,zero 
+0x529c 019818 lshift8 regb ,pdata 
+0x529d 019819 ior temp ,pdata 
+0x529e 019820 store 3 ,mem_tx_fifo3 
+0x529f 019821 rtn 
+:      019831 l2cap_malloc_enough:
+0x52a0 019832 bpatchx patch25_3 ,mem_patch25 
+0x52a1 019833 call l2cap_malloc_get_full_map 
+0x52a2 019834 copy queue ,regc 
+0x52a3 019835 arg 0 ,temp 
+0x52a4 019836 arg 0 ,timeup 
+:      019838 l2cap_malloc_enough_loop:
+0x52a5 019839 copy queue ,pdata 
+0x52a6 019840 beq 8 ,l2cap_malloc_enough_end 
+0x52a7 019841 fetch 1 ,mem_used_map 
+0x52a8 019842 qisolate1 pdata 
+0x52a9 019843 branch l2cap_malloc_enough_end ,true 
+0x52aa 019844 increase 128 ,temp 
+0x52ab 019845 increase 1 ,queue 
+0x52ac 019846 copy rega ,pdata 
+0x52ad 019847 isub temp ,null 
+0x52ae 019848 branch l2cap_malloc_enough_end ,zero 
+0x52af 019849 branch l2cap_malloc_enough_loop ,positive 
+:      019850 l2cap_malloc_enough_end:
+0x52b0 019851 copy temp ,pdata 
+0x52b1 019852 isub rega ,null 
+0x52b2 019853 nbranch l2cap_malloc_enough_rtn ,positive 
+0x52b3 019854 copy queue ,pdata 
+0x52b4 019855 copy regc ,temp 
+0x52b5 019856 isub temp ,timeup 
+:      019857 l2cap_malloc_enough_rtn:
+0x52b6 019858 copy regc ,queue 
+0x52b7 019859 rtn 
+:      019862 l2cap_malloc_signal_channel:
+0x52b8 019863 bpatchx patch25_4 ,mem_patch25 
+0x52b9 019864 arg l2cap_signal_malloc_size ,rega 
+0x52ba 019865 call l2cap_malloc 
+0x52bb 019866 store 2 ,mem_l2cap_signal_tx_buff_ptr 
+0x52bc 019867 increase 4 ,pdata 
+0x52bd 019868 store 2 ,mem_l2cap_signal_tx_payload_ptr 
+0x52be 019869 setarg 0 
+0x52bf 019870 store 2 ,mem_l2cap_signal_tx_length 
+0x52c0 019871 rtn 
+:      019873 l2cap_get_signal_tx_buff:
+0x52c1 019874 fetch 2 ,mem_l2cap_signal_tx_buff_ptr 
+0x52c2 019875 branch l2cap_util_pdata_to_contw 
+:      019877 l2cap_get_signal_tx_payload:
+0x52c3 019878 fetch 2 ,mem_l2cap_signal_tx_payload_ptr 
+0x52c4 019879 branch l2cap_util_pdata_to_contw 
+:      019882 l2cap_malloc_sdp_channel:
+0x52c5 019883 bpatchx patch25_5 ,mem_patch25 
+0x52c6 019884 arg sdp_malloc_size ,rega 
+0x52c7 019885 call l2cap_malloc 
+0x52c8 019886 store 2 ,mem_sdp_tx_buff_ptr 
+0x52c9 019887 increase 4 ,pdata 
+0x52ca 019888 store 2 ,mem_sdp_tx_payload_ptr 
+0x52cb 019889 setarg 0 
+0x52cc 019890 store 2 ,mem_sdp_tx_pkt_length 
+0x52cd 019891 rtn 
+:      019893 l2cap_get_sdp_tx_buff:
+0x52ce 019894 fetch 2 ,mem_sdp_tx_buff_ptr 
+0x52cf 019895 branch l2cap_util_pdata_to_contw 
+:      019897 l2cap_get_sdp_tx_payload:
+0x52d0 019898 fetch 2 ,mem_sdp_tx_payload_ptr 
+0x52d1 019899 branch l2cap_util_pdata_to_contw 
+:      019902 l2cap_malloc_rfcomm_channel:
+0x52d2 019903 bpatchx patch25_6 ,mem_patch25 
+0x52d3 019904 call push_stack 
+0x52d4 019905 jam rfcomm_malloc_fail ,mem_rfcomm_malloc_fail_flag 
+0x52d5 019906 call l2cap_malloc_is_fifo_full 
+0x52d6 019907 nrtn blank 
+0x52d7 019908 arg rfcomm_malloc_size ,rega 
+0x52d8 019909 call l2cap_malloc 
+0x52d9 019910 store 2 ,mem_rfcomm_tx_buff_ptr 
+0x52da 019911 increase 4 ,pdata 
+0x52db 019912 store 2 ,mem_rfcomm_tx_payload_ptr 
+0x52dc 019913 setarg 0 
+0x52dd 019914 store 2 ,mem_rfcomm_tx_pkt_length 
+0x52de 019915 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag 
+0x52df 019916 branch pop_stack 
+:      019918 l2cap_get_rfcomm_tx_buff:
+0x52e0 019919 fetch 2 ,mem_rfcomm_tx_buff_ptr 
+0x52e1 019920 branch l2cap_util_pdata_to_contw 
+:      019922 l2cap_util_pdata_to_contw:
+0x52e2 019923 branch assert ,blank 
+0x52e3 019924 copy pdata ,contw 
+0x52e4 019925 rtn 
+:      019928 l2cap_lpm_save_calc_len:
+0x52e5 019929 bpatchx patch25_7 ,mem_patch25 
+0x52e6 019930 arg 0 ,regb 
+0x52e7 019931 arg mem_tx_fifo0_map ,rega 
+0x52e8 019932 increase -2 ,rega 
+:      019933 l2cap_lpm_save_calc_len_loop:
+0x52e9 019934 increase 2 ,rega 
+0x52ea 019935 setarg mem_tx_fifo_end 
+0x52eb 019936 isub rega ,null 
+0x52ec 019937 branch l2cap_lpm_save_calc_len_end ,zero 
+0x52ed 019938 ifetch 1 ,rega 
+0x52ee 019939 increase 1 ,rega 
+0x52ef 019940 branch l2cap_lpm_save_calc_len_loop ,blank 
+0x52f0 019941 ifetcht 2 ,rega 
+0x52f1 019942 ifetch 2 ,temp 
+0x52f2 019943 iadd regb ,regb 
+0x52f3 019944 increase 4 ,regb 
+0x52f4 019945 branch l2cap_lpm_save_calc_len_loop 
+:      019946 l2cap_lpm_save_calc_len_end:
+0x52f5 019947 copy regb ,pdata 
+0x52f6 019948 rtn 
+:      019951 l2cap_lpm_get_wake_lock:
+0x52f7 019952 arg wake_lock_l2cap_tx ,queue 
+0x52f8 019953 branch lpm_get_wake_lock 
+:      019955 l2cap_lpm_put_wake_lock:
+0x52f9 019956 arg wake_lock_l2cap_tx ,queue 
+0x52fa 019957 branch lpm_put_wake_lock 
+:      019959 l2cap_lpm_save_txbuf:
+0x52fb 019960 bpatchx patch26_0 ,mem_patch26 
+0x52fc 019961 call l2cap_malloc_get_full_map 
+0x52fd 019962 fetch 1 ,mem_used_map 
+0x52fe 019963 rtn blank 
+0x52ff 019964 call l2cap_lpm_save_calc_len 
+0x5300 019965 arg l2cap_lpm_txbuf_len ,temp 
+0x5301 019966 isub temp ,null 
+0x5302 019967 branch l2cap_lpm_get_wake_lock ,positive 
+0x5303 019968 call l2cap_lpm_put_wake_lock 
+0x5304 019969 arg mem_l2cap_lpm_txbuf ,contw 
+0x5305 019970 arg mem_tx_fifo0 ,rega 
+:      019971 l2cap_lpm_save_txbuf_loop:
+0x5306 019972 setarg mem_tx_fifo_end 
+0x5307 019973 isub rega ,null 
+0x5308 019974 rtn zero 
+0x5309 019975 ifetch 1 ,rega 
+0x530a 019976 increase 1 ,rega 
+0x530b 019977 nbranch l2cap_lpm_save_txbuf_nempty ,blank 
+0x530c 019978 istore 2 ,contw 
+0x530d 019979 increase 2 ,rega 
+0x530e 019980 branch l2cap_lpm_save_txbuf_loop 
+:      019981 l2cap_lpm_save_txbuf_nempty:
+0x530f 019982 ifetch 2 ,rega 
+0x5310 019983 increase 2 ,rega 
+0x5311 019984 copy pdata ,contr 
+0x5312 019985 ifetch 2 ,contr 
+0x5313 019986 istore 2 ,contw 
+0x5314 019987 copy pdata ,loopcnt 
+0x5315 019988 increase 2 ,loopcnt 
+0x5316 019989 call memcpy 
+0x5317 019990 branch l2cap_lpm_save_txbuf_loop 
+:      019992 l2cap_lpm_load_txbuf:
+0x5318 019993 bpatchx patch26_1 ,mem_patch26 
+0x5319 019994 call l2cap_malloc_get_full_map 
+0x531a 019995 fetch 1 ,mem_used_map 
+0x531b 019996 rtn blank 
+0x531c 019997 arg mem_tx_fifo0_ptr ,rega 
+0x531d 019998 increase -3 ,rega 
+0x531e 019999 arg mem_l2cap_lpm_txbuf ,contr 
+:      020000 l2cap_lpm_load_txbuf_loop:
+0x531f 020001 increase 3 ,rega 
+0x5320 020002 setarg mem_tx_fifo_end + 1 
+0x5321 020003 isub rega ,null 
+0x5322 020004 rtn zero 
+0x5323 020005 ifetch 2 ,contr 
+0x5324 020006 branch l2cap_lpm_load_txbuf_loop ,blank 
+0x5325 020007 increase 4 ,pdata 
+0x5326 020008 copy pdata ,loopcnt 
+0x5327 020009 copy contr ,regb 
+0x5328 020010 ifetch 2 ,rega 
+0x5329 020011 copy pdata ,contw 
+0x532a 020012 copy regb ,contr 
+0x532b 020013 increase -2 ,contr 
+0x532c 020014 call memcpy 
+0x532d 020015 branch l2cap_lpm_load_txbuf_loop 
+:      020025 le_init_conn:
+0x532e 020026 bpatchx patch26_2 ,mem_patch26 
+0x532f 020027 disable wake 
+0x5330 020028 jam 1 ,mem_le_conn_handle 
+0x5331 020029 jam 3 ,mem_le_state 
+0x5332 020030 jam 1 ,mem_le_arq 
+0x5333 020031 setarg -1 
+0x5334 020032 store 2 ,mem_le_event_count 
+0x5335 020033 force 0 ,pdata 
+0x5336 020034 store 1 ,mem_le_ch 
+0x5337 020035 store 1 ,mem_le_op 
+0x5338 020036 store 3 ,mem_sniff_rcv 
+0x5339 020037 store 3 ,mem_sniff_lost 
+0x533a 020038 store 5 ,mem_le_pcnt_tx 
+0x533b 020039 set1 39 ,pdata 
+0x533c 020040 store 5 ,mem_le_pcnt_rx 
+0x533d 020041 jam 1 ,mem_le_txheader 
+0x533e 020042 jam 0 ,mem_le_txlen 
+0x533f 020043 branch le_supervision_flush 
+:      020045 le_init_master:
+0x5340 020046 bpatchx patch26_3 ,mem_patch26 
+0x5341 020047 enable master 
+0x5342 020048 jam lemode_master ,mem_le_mode 
+0x5343 020049 jam 1 ,mem_le_att_handle 
+0x5344 020050 jam 1 ,mem_le_search_handle_start 
+0x5345 020051 setarg 0xffff 
+0x5346 020052 store 2 ,mem_le_search_handle_end 
+0x5347 020053 force 0 ,pdata 
+0x5348 020054 store 5 ,mem_le_pcnt_rx 
+0x5349 020055 set1 39 ,pdata 
+0x534a 020056 store 5 ,mem_le_pcnt_tx 
+0x534b 020057 branch le_init_conn 
+:      020060 le_init_slave:
+0x534c 020061 bpatchx patch26_4 ,mem_patch26 
+0x534d 020062 disable master 
+0x534e 020063 setarg 0x17 
+0x534f 020064 store 2 ,mem_le_remote_mtu 
+0x5350 020065 jam lemode_slave ,mem_le_mode 
+0x5351 020066 jam 0 ,mem_le_adv_enable 
+0x5352 020067 jam 0 ,mem_lpm_current_mult 
+0x5353 020068 jam flag_le_pairing_null ,mem_le_pairing_state 
+0x5354 020069 jam flag_le_enc_null ,mem_le_enc_state 
+0x5355 020070 fetch 2 ,mem_le_superto 
+0x5356 020071 store 2 ,mem_le_init_superto 
+0x5357 020072 fetch 2 ,mem_le_tsniff 
+0x5358 020073 mul32 pdata ,5 ,pdata 
+0x5359 020074 rshift4 pdata ,pdata 
+0x535a 020075 store 2 ,mem_le_superto 
+0x535b 020076 branch le_init_conn 
+:      020082 le_dispatch:
+0x535c 020083 call le_enable 
+0x535d 020084 call le_scan 
+0x535e 020085 call le_adv 
+0x535f 020086 branch le_disable 
+:      020088 le_conn_dispatch:
+0x5360 020089 bpatchx patch26_5 ,mem_patch26 
+0x5361 020090 call le_enable 
+0x5362 020091 call app_process_ble 
+0x5363 020092 fetch 1 ,mem_le_mode 
+0x5364 020093 beq lemode_master ,le_master_dispatch 
+0x5365 020094 branch le_slave_dispatch 
+:      020100 le_master_dispatch:
+0x5366 020101 bpatchx patch26_6 ,mem_patch26 
+0x5367 020102 enable master 
+0x5368 020103 call le_supervision_update 
+0x5369 020104 branch le_master_disconn ,positive 
+0x536a 020105 call check_ble_disabled 
+0x536b 020106 call le_setup 
+0x536c 020107 call le_prepare_tx 
+0x536d 020108 disable match 
+0x536e 020109 call le_transmit_receive_sifs 
+0x536f 020110 nrtn match 
+0x5370 020111 bpatchx patch26_7 ,mem_patch26 
+0x5371 020112 fetch 1 ,mem_le_conn_rcv 
+0x5372 020113 increase 1 ,pdata 
+0x5373 020114 store 1 ,mem_le_conn_rcv 
+0x5374 020115 call le_acknowledge 
+0x5375 020116 disable master 
+0x5376 020117 rtn 
+:      020119 le_master_disconn:
+0x5377 020120 call le_disconnect 
+0x5378 020121 disable master 
+0x5379 020122 rtn 
+:      020127 le_slave_dispatch:
+0x537a 020128 bpatchx patch27_0 ,mem_patch27 
+0x537b 020129 jam 0 ,mem_le_md_count 
+0x537c 020130 call sp_calc_sequence_256 
+0x537d 020131 call le_secure_connect_sm 
+0x537e 020132 disable attempt 
+0x537f 020133 call le_supervision_update 
+0x5380 020134 branch le_slave_disconn ,positive 
+0x5381 020135 call check_ble_disabled 
+0x5382 020136 call le_setup 
+0x5383 020137 call le_receive_slave 
+0x5384 020138 nbranch le_slave_unsync ,sync 
+0x5385 020139 call le_got_first_packet 
+0x5386 020140 branch le_slave_match ,match 
+0x5387 020141 branch le_slave_cont 
+:      020144 le_slave_match:
+0x5388 020145 bpatchx patch27_1 ,mem_patch27 
+0x5389 020146 fetch 1 ,mem_le_md_count 
+0x538a 020147 pincrease 1 
+0x538b 020148 store 1 ,mem_le_md_count 
+0x538c 020149 beq le_md_max_count ,le_slave_cont 
+0x538d 020150 call le_acknowledge 
+0x538e 020151 call le_prepare_tx 
+0x538f 020152 call le_transmit_norx 
+0x5390 020153 call le_parse 
+0x5391 020154 fetch 2 ,mem_cb_ble_transmit 
+0x5392 020155 call callback_func 
+0x5393 020156 call le_check_md 
+0x5394 020157 branch le_slave_more_data ,user 
+:      020158 le_slave_cont:
+0x5395 020159 bpatchx patch27_2 ,mem_patch27 
+0x5396 020160 call le_pairing_sm 
+0x5397 020161 call le_check_paring_time 
+0x5398 020162 call check_51cmd 
+0x5399 020163 fetch 1 ,mem_le_op 
+0x539a 020164 bbit1 op_disconn ,le_slave_disconn 
+:      020165 le_slave_unsync:
+0x539b 020166 bpatchx patch27_3 ,mem_patch27 
+0x539c 020167 call le_lpm_set_mult 
+0x539d 020168 call le_update_channel_map 
+0x539e 020169 call le_update_param 
+0x539f 020170 branch calc_clke_offset 
+:      020173 le_check_md:
+0x53a0 020174 disable user 
+0x53a1 020175 bmark1 mark_ble_rx_md ,enable_user 
+0x53a2 020176 bmark1 mark_ble_tx_md ,enable_user 
+0x53a3 020177 rtn 
+:      020180 le_slave_more_data:
+0x53a4 020181 bpatchx patch27_4 ,mem_patch27 
+0x53a5 020182 enable attempt 
+0x53a6 020183 call le_transmit_receive_sifs_notx 
+0x53a7 020184 branch le_slave_match ,match 
+0x53a8 020185 branch le_slave_cont 
+:      020187 le_slave_disconn:
+:      020190 le_disconnect:
+0x53a9 020191 bpatchx patch27_5 ,mem_patch27 
+0x53aa 020192 call le_clear_connection_info 
+0x53ab 020193 call app_disconn_reason_collect_ble 
+0x53ac 020194 call sp_initialize_256 
+0x53ad 020195 jam bt_evt_le_disconnected ,mem_fifo_temp 
+0x53ae 020196 branch ui_ipc_send_event 
+:      020198 le_clear_connection_info:
+0x53af 020199 setarg 0 
+0x53b0 020200 store 9 ,mem_le_tx_buff_used 
+0x53b1 020201 jam 0 ,mem_le_conn_handle 
+0x53b2 020202 jam lemode_idle ,mem_le_mode 
+0x53b3 020203 jam 0 ,mem_le_state 
+0x53b4 020204 jam flag_le_enc_null ,mem_le_enc_state 
+0x53b5 020205 jam flag_le_pairing_null ,mem_le_pairing_state 
+0x53b6 020206 rtn 
+:      020208 le_got_first_packet:
+0x53b7 020209 bpatchx patch27_6 ,mem_patch27 
+0x53b8 020210 fetch 1 ,mem_le_conn_rcv 
+0x53b9 020211 increase 1 ,pdata 
+0x53ba 020212 store 1 ,mem_le_conn_rcv 
+0x53bb 020213 fetch 1 ,mem_le_state 
+0x53bc 020214 rtnbit1 lestate_got_first_packet 
+0x53bd 020215 set1 lestate_got_first_packet 
+0x53be 020216 store 1 ,mem_le_state 
+0x53bf 020217 fetch 2 ,mem_le_init_superto 
+0x53c0 020218 store 2 ,mem_le_superto 
+0x53c1 020219 setarg 0 
+0x53c2 020220 store 4 ,mem_le_transmit_window 
+0x53c3 020221 rtn 
+:      020224 le_enable:
+0x53c4 020225 bpatchx patch27_7 ,mem_patch27 
+0x53c5 020226 jam 0x36 ,rf_adc_goff 
+0x53c6 020227 jam 0x5f ,rf_agc_nsat 
+0x53c7 020228 enable le 
+0x53c8 020229 jam 7 ,rfen_ulp 
+0x53c9 020230 call check_ble_disabled 
+0x53ca 020231 fetch 1 ,mem_250k_freq_enable 
+0x53cb 020232 rtn blank 
+0x53cc 020233 jam 0xb8 ,rf_iq_gain 
+0x53cd 020234 rtn 
+:      020236 le_disable:
+0x53ce 020237 bpatchx patch28_0 ,mem_patch28 
+0x53cf 020238 jam 0x2e ,rf_adc_goff 
+0x53d0 020239 jam 0xff ,rf_agc_nsat 
+0x53d1 020240 disable le 
+0x53d2 020241 jam 3 ,rfen_ulp 
+0x53d3 020242 arg 0 ,stop_watch 
+0x53d4 020243 rtn 
+:      020245 le_prep:
+0x53d5 020246 disable enable_crc 
+0x53d6 020247 disable enable_white 
+0x53d7 020248 fetch 3 ,mem_le_crcinit 
+0x53d8 020249 iforce crc24_init 
+0x53d9 020250 fetch 1 ,mem_le_ch_mapped 
+0x53da 020251 reverse pdata ,temp 
+0x53db 020252 set1 1 ,temp 
+0x53dc 020253 rshift temp ,white_init 
+0x53dd 020254 rtn 
+:      020257 lerx_setfreq:
+0x53de 020258 call le_setfreq 
+0x53df 020259 call set_freq_rx 
+0x53e0 020260 setarg param_pll_setup 
+0x53e1 020261 call sleep 
+0x53e2 020262 branch rf_rx_enable 
+:      020264 letx_setfreq:
+0x53e3 020265 branch txon ,match 
+:      020266 letx_setfreq0:
+0x53e4 020267 call le_setfreq 
+0x53e5 020268 branch set_freq_tx 
+:      020269 le_setfreq:
+0x53e6 020270 bpatchx patch28_1 ,mem_patch28 
+0x53e7 020271 call set_sync_on 
+0x53e8 020272 fetch 1 ,mem_le_testtype 
+0x53e9 020273 nbranch le_ctf_test ,blank 
+0x53ea 020274 fetch 1 ,mem_le_ch_mapped 
+0x53eb 020275 sub pdata ,36 ,null 
+0x53ec 020276 branch le_ctf_normal ,positive 
+0x53ed 020277 force 0 ,temp 
+0x53ee 020278 rtneq 37 
+0x53ef 020279 force 24 ,temp 
+0x53f0 020280 rtneq 38 
+0x53f1 020281 force 78 ,temp 
+0x53f2 020282 rtn 
+:      020284 le_ctf_normal:
+0x53f3 020285 sub pdata ,10 ,null 
+0x53f4 020286 branch le_ctf_low ,positive 
+0x53f5 020287 increase 1 ,pdata 
+:      020289 le_ctf_low:
+0x53f6 020290 lshift pdata ,pdata 
+0x53f7 020291 add pdata ,2 ,temp 
+0x53f8 020292 rtn 
+:      020294 le_ctf_test:
+0x53f9 020295 fetch 1 ,mem_le_ch_mapped 
+0x53fa 020296 lshift pdata ,temp 
+0x53fb 020297 rtn 
+:      020299 le_sca_map:
+0x53fc 020300 arg 500 ,temp 
+0x53fd 020301 rtn blank 
+0x53fe 020302 arg 250 ,temp 
+0x53ff 020303 rtneq 1 
+0x5400 020304 arg 150 ,temp 
+0x5401 020305 rtneq 2 
+0x5402 020306 arg 100 ,temp 
+0x5403 020307 rtneq 3 
+0x5404 020308 arg 75 ,temp 
+0x5405 020309 rtneq 4 
+0x5406 020310 arg 50 ,temp 
+0x5407 020311 rtneq 5 
+0x5408 020312 arg 40 ,temp 
+0x5409 020313 rtneq 6 
+0x540a 020314 arg 20 ,temp 
+0x540b 020315 rtn 
+:      020319 le_adv_access:
+0x540c 020320 setarg 0x8e89be 
+0x540d 020321 lshift8 pdata ,pdata 
+0x540e 020322 or_into 0xd6 ,pdata 
+0x540f 020323 iforce access 
+0x5410 020324 setarg 0x555555 
+0x5411 020325 store 3 ,mem_le_crcinit 
+0x5412 020326 rtn 
+:      020328 le_setup:
+0x5413 020329 bpatchx patch28_2 ,mem_patch28 
+0x5414 020330 enable swfine 
+0x5415 020331 fetch 4 ,mem_le_access 
+0x5416 020332 iforce access 
+0x5417 020333 call le_map_channel 
+0x5418 020334 setarg 0x200 
+0x5419 020335 branch le_setup_master ,master 
+0x541a 020336 fetch 2 ,mem_le_receive_window 
+0x541b 020337 rshift pdata ,pdata 
+:      020338 le_setup_master:
+0x541c 020339 arg param_pll_setup ,temp 
+0x541d 020340 iadd temp ,pdata 
+0x541e 020341 call ahead_window 
+0x541f 020342 deposit clke 
+0x5420 020343 store 6 ,mem_le_rxon_ts 
+0x5421 020344 rtn 
+:      020346 le_next_adv_channel:
+0x5422 020347 bpatchx patch28_3 ,mem_patch28 
+0x5423 020348 fetch 1 ,mem_le_ch_mapped 
+0x5424 020349 beq 37 ,le_next_adv_channel_curr_channel_37 
+0x5425 020350 beq 38 ,le_next_adv_channel_curr_channel_38 
+0x5426 020351 beq 39 ,le_next_adv_channel_curr_channel_39 
+0x5427 020352 branch le_next_adv_channel_curr_channel_39 
+:      020354 le_next_adv_channel_curr_channel_37:
+0x5428 020355 fetcht 1 ,mem_le_adv_channel_map 
+0x5429 020356 isolate1 bit_adv_channel_map_38 ,temp 
+0x542a 020357 branch set_le_next_adv_channel_38 ,true 
+0x542b 020358 isolate1 bit_adv_channel_map_39 ,temp 
+0x542c 020359 branch set_le_next_adv_channel_39 ,true 
+0x542d 020360 branch set_le_next_adv_channel_37 
+:      020363 le_next_adv_channel_curr_channel_38:
+0x542e 020364 fetcht 1 ,mem_le_adv_channel_map 
+0x542f 020365 isolate1 bit_adv_channel_map_39 ,temp 
+0x5430 020366 branch set_le_next_adv_channel_39 ,true 
+0x5431 020367 isolate1 bit_adv_channel_map_37 ,temp 
+0x5432 020368 branch set_le_next_adv_channel_37 ,true 
+0x5433 020369 branch set_le_next_adv_channel_38 
+:      020372 le_next_adv_channel_curr_channel_39:
+0x5434 020373 fetcht 1 ,mem_le_adv_channel_map 
+0x5435 020374 isolate1 bit_adv_channel_map_37 ,temp 
+0x5436 020375 branch set_le_next_adv_channel_37 ,true 
+0x5437 020376 isolate1 bit_adv_channel_map_38 ,temp 
+0x5438 020377 branch set_le_next_adv_channel_38 ,true 
+0x5439 020378 branch set_le_next_adv_channel_39 
+:      020382 set_le_next_adv_channel_37:
+0x543a 020383 jam 37 ,mem_le_ch_mapped 
+0x543b 020384 fetch 1 ,mem_le_adv_channel_map_temp 
+0x543c 020385 set1 bit_adv_channel_map_37 ,pdata 
+0x543d 020386 store 1 ,mem_le_adv_channel_map_temp 
+0x543e 020387 rtn 
+:      020389 set_le_next_adv_channel_38:
+0x543f 020390 jam 38 ,mem_le_ch_mapped 
+0x5440 020391 fetch 1 ,mem_le_adv_channel_map_temp 
+0x5441 020392 set1 bit_adv_channel_map_38 ,pdata 
+0x5442 020393 store 1 ,mem_le_adv_channel_map_temp 
+0x5443 020394 rtn 
+:      020396 set_le_next_adv_channel_39:
+0x5444 020397 jam 39 ,mem_le_ch_mapped 
+0x5445 020398 fetch 1 ,mem_le_adv_channel_map_temp 
+0x5446 020399 set1 bit_adv_channel_map_39 ,pdata 
+0x5447 020400 store 1 ,mem_le_adv_channel_map_temp 
+0x5448 020401 rtn 
+:      020405 le_context_nexthop:
+0x5449 020406 bpatchx patch28_4 ,mem_patch28 
+0x544a 020407 add rega ,coffset_mode ,contr 
+0x544b 020408 ifetch 1 ,contr 
+0x544c 020409 rtnbit0 mode_le 
+0x544d 020410 add rega ,coffset_le_event_cnt ,contw 
+0x544e 020411 ifetch 2 ,contw 
+0x544f 020412 increase 1 ,pdata 
+0x5450 020413 istore 2 ,contw 
+0x5451 020414 add rega ,coffset_le_hop ,contr 
+0x5452 020415 ifetch 1 ,contr 
+0x5453 020416 add rega ,coffset_le_ch ,contw 
+0x5454 020417 ifetcht 1 ,contw 
+0x5455 020418 iadd temp ,pdata 
+0x5456 020419 sub pdata ,36 ,null 
+0x5457 020420 branch le_nexthop_nowrap ,positive 
+0x5458 020421 increase -37 ,pdata 
+:      020422 le_nexthop_nowrap:
+0x5459 020423 istore 1 ,contw 
+0x545a 020424 rtn 
+:      020427 le_calc_channel_map:
+0x545b 020428 bpatchx patch28_5 ,mem_patch28 
+0x545c 020429 fetch 5 ,mem_le_channel_map 
+0x545d 020430 force 0 ,temp 
+0x545e 020431 force 37 ,loopcnt 
+:      020432 le_count_channels_loop:
+0x545f 020433 bbit0 0 ,le_count_channels_notused 
+0x5460 020434 increase 1 ,temp 
+:      020435 le_count_channels_notused:
+0x5461 020436 rshift pdata ,pdata 
+0x5462 020437 loop le_count_channels_loop 
+0x5463 020438 add temp ,-1 ,pdata 
+0x5464 020439 store 1 ,mem_le_channels 
+0x5465 020440 rtn 
+:      020442 le_map_channel:
+0x5466 020443 bpatchx patch28_6 ,mem_patch28 
+0x5467 020444 fetch 1 ,mem_le_ch 
+0x5468 020445 iforce queue 
+0x5469 020446 fetcht 5 ,mem_le_channel_map 
+0x546a 020447 qisolate1 temp 
+0x546b 020448 branch le_map_channel_end ,true 
+:      020449 le_map_channel_next:
+0x546c 020450 bpatchx patch28_7 ,mem_patch28 
+0x546d 020451 fetch 1 ,mem_le_channels 
+0x546e 020452 isub queue ,pdata 
+0x546f 020453 branch le_map_channel_cont ,positive 
+0x5470 020454 sub pdata ,-1 ,queue 
+0x5471 020455 branch le_map_channel_next 
+:      020456 le_map_channel_cont:
+0x5472 020457 copy queue ,loopcnt 
+0x5473 020458 force 0 ,queue 
+:      020459 le_map_channel_loop:
+0x5474 020460 qisolate1 temp 
+0x5475 020461 branch le_map_channel_skip ,true 
+0x5476 020462 increase 1 ,loopcnt 
+:      020463 le_map_channel_skip:
+0x5477 020464 deposit loopcnt 
+0x5478 020465 branch le_map_channel_end ,blank 
+0x5479 020466 increase 1 ,queue 
+0x547a 020467 increase -1 ,loopcnt 
+0x547b 020468 branch le_map_channel_loop 
+:      020469 le_map_channel_end:
+0x547c 020470 deposit queue 
+0x547d 020471 store 1 ,mem_le_ch_mapped 
+0x547e 020472 rtn 
+:      020475 le_wait_tx:
+0x547f 020476 branch le_wait_master ,master 
+0x5480 020477 until null ,timeout 
+0x5481 020478 rtn 
+:      020480 le_wait_master:
+0x5482 020481 arg 0xea0 ,timeup 
+0x5483 020482 until clkn_rt ,meet 
+0x5484 020483 rtn 
+:      020485 le_receive_adv:
+0x5485 020486 disable swfine 
+0x5486 020487 fetch 2 ,mem_le_scan_window 
+0x5487 020488 copy pdata ,timeup 
+0x5488 020489 branch le_receive_packet 
+:      020492 le_receive_slave:
+0x5489 020493 bpatchx patch29_0 ,mem_patch29 
+0x548a 020494 enable swfine 
+0x548b 020495 fetch 2 ,mem_le_receive_window 
+0x548c 020496 fetcht 4 ,mem_le_transmit_window 
+0x548d 020497 iadd temp ,timeup 
+:      020498 le_receive_packet:
+0x548e 020499 call lerx_setfreq 
+:      020500 le_receive_rxon:
+0x548f 020501 bpatchx patch29_1 ,mem_patch29 
+0x5490 020502 call le_prep 
+0x5491 020503 disable match 
+0x5492 020504 enable decode_fec0 
+0x5493 020505 enable is_rx 
+0x5494 020506 disable is_tx 
+0x5495 020507 copy timeup ,stop_watch 
+0x5496 020508 correlate null ,timeout 
+0x5497 020509 branch le_receive_on_attempt ,attempt 
+0x5498 020510 copy clke ,temp 
+0x5499 020511 storet 6 ,mem_sync_clke 
+:      020512 le_receive_on_attempt:
+0x549a 020513 nbranch end_of_packet ,sync 
+0x549b 020514 branch le_receive_skip ,attempt 
+0x549c 020515 arg param_clke_cal_le ,clke_rt 
+0x549d 020516 copy bt_clk ,clke_bt 
+0x549e 020517 fetch 1 ,mem_le_state 
+0x549f 020518 bbit0 lestate_got_first_packet ,le_receive_skip 
+0x54a0 020519 call lpm_adjust_clk ,wake 
+:      020520 le_receive_skip:
+0x54a1 020521 bpatchx patch29_2 ,mem_patch29 
+0x54a2 020522 call save_rssi 
+0x54a3 020523 enable enable_white 
+0x54a4 020524 enable enable_crc 
+0x54a5 020525 parse demod ,bucket ,8 
+0x54a6 020526 rshift3 pwindow ,pdata 
+0x54a7 020527 store 1 ,mem_le_rxbuf 
+0x54a8 020528 parse demod ,bucket ,8 
+0x54a9 020529 rshift3 pwindow ,pdata 
+0x54aa 020530 istore 1 ,contw 
+0x54ab 020531 and pdata ,0x3f ,loopcnt 
+0x54ac 020532 branch lerx_nopayload ,zero 
+:      020534 lerx_loop:
+0x54ad 020535 parse demod ,bucket ,8 
+0x54ae 020536 rshift3 pwindow ,pdata 
+0x54af 020537 istore 1 ,contw 
+0x54b0 020538 loop lerx_loop 
+:      020540 lerx_nopayload:
+0x54b1 020541 bpatchx patch29_3 ,mem_patch29 
+0x54b2 020542 parse demod ,bucket ,24 
+0x54b3 020543 enable swfine 
+0x54b4 020544 arg param_sifs ,stop_watch 
+0x54b5 020545 rshift32 pdata ,pdata 
+0x54b6 020546 rshift16 pdata ,pdata 
+0x54b7 020547 istore 3 ,contw 
+0x54b8 020548 branch end_of_packet ,crc_failed 
+0x54b9 020549 enable match 
+0x54ba 020550 fetch 1 ,mem_last_freq 
+0x54bb 020551 add pdata ,0 ,rega 
+0x54bc 020552 call rf_write_freq 
+0x54bd 020553 disable decode_fec0 
+0x54be 020554 branch set_sync_on 
+:      020556 le_transmit_receive_sifs:
+0x54bf 020557 bpatchx patch29_4 ,mem_patch29 
+0x54c0 020558 call le_transmit 
+:      020559 le_transmit_receive_sifs_notx:
+0x54c1 020560 fetcht 1 ,mem_last_freq 
+0x54c2 020561 call set_freq_rx 
+0x54c3 020562 call rf_rx_enable 
+0x54c4 020563 enable swfine 
+0x54c5 020564 arg 5500 ,timeup 
+0x54c6 020565 branch le_receive_rxon 
+:      020567 le_transmit_norx:
+0x54c7 020568 call le_transmit 
+0x54c8 020569 branch end_of_packet 
+:      020571 le_transmit:
+0x54c9 020572 bpatchx patch29_5 ,mem_patch29 
+0x54ca 020573 call le_prep 
+0x54cb 020574 call letx_setfreq 
+0x54cc 020575 branch le_transmit0 
+:      020577 le_transmit0:
+0x54cd 020578 set1 txgfsk ,radio_ctrl 
+0x54ce 020579 enable encode_fec0 
+0x54cf 020580 enable is_tx 
+0x54d0 020581 disable is_rx 
+0x54d1 020582 call le_wait_tx 
+0x54d2 020583 rshift16 access ,pdata 
+0x54d3 020584 rshift8 pdata ,pdata 
+0x54d4 020585 rshift4 pdata ,pdata 
+0x54d5 020586 inject mod ,40 
+0x54d6 020587 enable enable_white 
+0x54d7 020588 enable enable_crc 
+0x54d8 020589 bpatchx patch29_6 ,mem_patch29 
+0x54d9 020590 fetch 1 ,mem_le_txheader 
+0x54da 020591 inject mod ,8 
+0x54db 020592 ifetch 1 ,contr 
+0x54dc 020593 and pdata ,0x3f ,loopcnt 
+0x54dd 020594 inject mod ,8 
+0x54de 020595 branch letr_nopayload ,zero 
+:      020596 letr_loop:
+0x54df 020597 ifetch 1 ,contr 
+0x54e0 020598 inject mod ,8 
+0x54e1 020599 loop letr_loop 
+:      020601 letr_nopayload:
+0x54e2 020602 enable enable_parity 
+0x54e3 020603 inject mod ,24 
+0x54e4 020604 disable enable_parity 
+0x54e5 020605 until null ,tx_clear 
+0x54e6 020606 nop 100 
+0x54e7 020607 disable encode_fec0 
+0x54e8 020608 rtn 
+:      020610 le_send_adv_ind:
+0x54e9 020611 bpatchx patch29_7 ,mem_patch29 
+0x54ea 020612 fetch 1 ,mem_le_adv_type 
+0x54eb 020613 beq adv_direct_ind ,le_send_adv_direct_ind 
+0x54ec 020614 fetch 1 ,mem_le_adv_own_addr_type 
+0x54ed 020615 lshift4 pdata ,pdata 
+0x54ee 020616 lshift2 pdata ,pdata 
+0x54ef 020617 store 1 ,mem_le_txheader 
+0x54f0 020618 fetcht 1 ,mem_le_adv_data_len 
+0x54f1 020619 add temp ,6 ,pdata 
+0x54f2 020620 store 1 ,mem_le_txlen 
+0x54f3 020621 fetch 6 ,mem_le_lap 
+0x54f4 020622 store 6 ,mem_le_txpayload 
+0x54f5 020623 copy temp ,loopcnt 
+0x54f6 020624 arg mem_le_adv_data ,contr 
+0x54f7 020625 call memcpy_fast 
+0x54f8 020626 branch le_send_adv_transmit 
+:      020627 le_send_adv_direct_ind:
+0x54f9 020628 fetch 1 ,mem_le_adv_direct_addr_type 
+0x54fa 020629 lshift4 pdata ,pdata 
+0x54fb 020630 lshift2 pdata ,pdata 
+0x54fc 020631 increase 1 ,pdata 
+0x54fd 020632 store 1 ,mem_le_txheader 
+0x54fe 020633 setarg 12 
+0x54ff 020634 store 1 ,mem_le_txlen 
+0x5500 020635 fetch 6 ,mem_le_lap 
+0x5501 020636 store 6 ,mem_le_txpayload 
+0x5502 020637 fetch 6 ,mem_hci_plap 
+0x5503 020638 istore 6 ,contw 
+:      020639 le_send_adv_transmit:
+0x5504 020640 bpatchx patch2a_0 ,mem_patch2a 
+0x5505 020641 fetch 1 ,mem_le_adv_transmit 
+0x5506 020642 increase 1 ,pdata 
+0x5507 020643 store 1 ,mem_le_adv_transmit 
+0x5508 020644 arg 1800 ,stop_watch 
+0x5509 020645 disable match 
+0x550a 020646 branch le_transmit_receive_sifs 
+:      020648 le_send_scan_request:
+0x550b 020649 bpatchx patch2a_1 ,mem_patch2a 
+0x550c 020650 fetch 1 ,mem_le_scan_type 
+0x550d 020651 rtnne le_scan_type_active 
+0x550e 020652 fetch 1 ,mem_le_adv_transmit 
+0x550f 020653 increase 1 ,pdata 
+0x5510 020654 store 1 ,mem_le_adv_transmit 
+0x5511 020655 arg 0x0c03 ,temp 
+0x5512 020656 fetch 1 ,mem_le_scan_own_addr_type 
+0x5513 020657 nsetflag blank ,le_sender_addr_bit ,temp 
+0x5514 020658 copy rega ,pdata 
+0x5515 020659 nsetflag blank ,le_receiver_addr_bit ,temp 
+0x5516 020660 storet 2 ,mem_le_txheader 
+0x5517 020661 fetch 6 ,mem_le_lap 
+0x5518 020662 istore 6 ,contw 
+0x5519 020663 fetch 6 ,mem_le_plap 
+0x551a 020664 istore 6 ,contw 
+0x551b 020665 branch le_transmit_receive_sifs 
+:      020668 le_send_scan_response:
+0x551c 020669 bpatchx patch2a_2 ,mem_patch2a 
+0x551d 020670 arg scan_rsp ,temp 
+0x551e 020671 fetch 1 ,mem_le_adv_own_addr_type 
+0x551f 020672 nsetflag blank ,le_sender_addr_bit ,temp 
+0x5520 020673 storet 1 ,mem_le_txheader 
+0x5521 020674 fetcht 1 ,mem_le_scan_data_len 
+0x5522 020675 add temp ,6 ,pdata 
+0x5523 020676 store 1 ,mem_le_txlen 
+0x5524 020677 fetch 6 ,mem_le_lap 
+0x5525 020678 store 6 ,mem_le_txpayload 
+0x5526 020679 arg mem_le_scan_data ,contr 
+0x5527 020680 copy temp ,loopcnt 
+0x5528 020681 call memcpy_fast 
+0x5529 020682 call le_transmit_norx 
+0x552a 020683 branch le_adv_not_match 
+:      020685 le_connect_request:
+0x552b 020686 bpatchx patch2a_3 ,mem_patch2a 
+0x552c 020687 force -1 ,pdata 
+0x552d 020688 setsect 2 ,1 
+0x552e 020689 store 5 ,mem_le_channel_map 
+0x552f 020690 call le_calc_channel_map 
+0x5530 020691 force 4 ,loopcnt 
+0x5531 020692 arg mem_le_access ,contw 
+0x5532 020693 call generate_random_loop 
+0x5533 020694 fetch 2 ,mem_le_timeout 
+0x5534 020695 store 2 ,mem_le_superto 
+:      020696 le_con_req_hop_retry:
+0x5535 020697 random pdata 
+0x5536 020698 and_into 0xf ,pdata 
+0x5537 020699 sub pdata ,4 ,null 
+0x5538 020700 branch le_con_req_hop_retry ,positive 
+0x5539 020701 store 1 ,mem_le_hop 
+0x553a 020702 store 1 ,mem_tmp1 
+0x553b 020703 bpatchx patch2a_4 ,mem_patch2a 
+0x553c 020704 fetcht 2 ,mem_le_conn_interval 
+0x553d 020705 storet 2 ,mem_le_tsniff 
+0x553e 020706 copy temp ,regc 
+0x553f 020707 add clkn_bt ,7 ,pdata 
+0x5540 020708 idiv regc 
+0x5541 020709 call wait_div_end 
+0x5542 020710 remainder rega 
+0x5543 020711 isub rega ,pdata 
+0x5544 020712 iadd regc ,pdata 
+0x5545 020713 fetcht 2 ,mem_le_dsniff 
+0x5546 020714 iadd temp ,pdata 
+0x5547 020715 store 4 ,mem_le_anchor 
+0x5548 020716 isub clkn_bt ,rega 
+0x5549 020717 increase -6 ,rega 
+0x554a 020718 arg 0x2205 ,regb 
+0x554b 020719 fetch 1 ,mem_le_conn_own_addr_type 
+0x554c 020720 nsetflag blank ,le_sender_addr_bit ,regb 
+0x554d 020721 fetch 1 ,mem_le_conn_peer_addr_type 
+0x554e 020722 nsetflag blank ,le_receiver_addr_bit ,regb 
+0x554f 020723 copy regb ,pdata 
+0x5550 020724 store 2 ,mem_le_txheader 
+0x5551 020725 fetch 6 ,mem_le_lap 
+0x5552 020726 istore 6 ,contw 
+0x5553 020727 fetch 6 ,mem_le_plap 
+0x5554 020728 istore 6 ,contw 
+0x5555 020729 fetch 4 ,mem_le_access 
+0x5556 020730 istore 4 ,contw 
+0x5557 020731 random pdata 
+0x5558 020732 istore 2 ,contw 
+0x5559 020733 random pdata 
+0x555a 020734 istore 1 ,contw 
+0x555b 020735 force 2 ,pdata 
+0x555c 020736 istore 1 ,contw 
+0x555d 020737 rshift2 rega ,pdata 
+0x555e 020738 istore 2 ,contw 
+0x555f 020739 rshift2 regc ,pdata 
+0x5560 020740 istore 2 ,contw 
+0x5561 020741 bpatchx patch2a_5 ,mem_patch2a 
+0x5562 020742 setarg 0 
+0x5563 020743 istore 2 ,contw 
+0x5564 020744 fetch 2 ,mem_le_timeout 
+0x5565 020745 istore 2 ,contw 
+0x5566 020746 fetch 5 ,mem_le_channel_map 
+0x5567 020747 istore 5 ,contw 
+0x5568 020748 fetch 1 ,mem_le_hop 
+0x5569 020749 arg param_le_sca ,temp 
+0x556a 020750 ior temp ,pdata 
+0x556b 020751 istore 1 ,contw 
+0x556c 020752 call le_transmit_norx 
+0x556d 020753 setarg mem_le_txheader 
+0x556e 020754 add pdata ,18 ,contr 
+0x556f 020755 ifetch 3 ,contr 
+0x5570 020756 store 3 ,mem_le_crcinit 
+0x5571 020757 rtn 
+:      020759 le_init_adv:
+0x5572 020760 bpatchx patch2a_6 ,mem_patch2a 
+0x5573 020761 disable master 
+0x5574 020762 branch le_adv_access 
+:      020766 le_update_param:
+0x5575 020767 fetch 1 ,mem_le_state 
+0x5576 020768 rtnbit0 lestate_update_param 
+0x5577 020769 fetch 2 ,mem_le_event_count 
+0x5578 020770 fetcht 2 ,mem_le_instant 
+0x5579 020771 isub temp ,pdata 
+0x557a 020772 nrtn positive 
+0x557b 020773 store 2 ,mem_pdatatemp 
+0x557c 020774 bpatchx patch2a_7 ,mem_patch2a 
+0x557d 020775 fetch 1 ,mem_le_state 
+0x557e 020776 set0 lestate_update_param ,pdata 
+0x557f 020777 set0 lestate_got_first_packet ,pdata 
+0x5580 020778 store 1 ,mem_le_state 
+0x5581 020779 fetch 4 ,mem_le_anchor 
+0x5582 020780 fetcht 2 ,mem_le_tsniff 
+0x5583 020781 storet 2 ,mem_temp 
+0x5584 020782 isub temp ,rega 
+0x5585 020783 bpatchx patch2b_0 ,mem_patch2b 
+0x5586 020784 fetch 1 ,mem_le_new_param 
+0x5587 020785 store 1 ,mem_le_window_size 
+0x5588 020786 ifetcht 2 ,contr 
+0x5589 020787 ifetch 2 ,contr 
+0x558a 020788 lshift2 pdata ,pdata 
+0x558b 020789 store 2 ,mem_le_tsniff 
+0x558c 020790 lshift2 temp ,temp 
+0x558d 020791 iadd temp ,pdata 
+0x558e 020792 ifetcht 4 ,contr 
+0x558f 020793 storet 4 ,mem_le_slave_latency 
+0x5590 020794 iadd rega ,pdata 
+0x5591 020795 copy pdata ,regab 
+0x5592 020796 fetch 2 ,mem_le_tsniff 
+0x5593 020797 fetcht 2 ,mem_temp 
+0x5594 020798 isub temp ,pdata 
+0x5595 020799 fetcht 2 ,mem_pdatatemp 
+0x5596 020800 imul32 temp ,pdata 
+0x5597 020801 iadd regab ,pdata 
+0x5598 020802 store 4 ,mem_le_anchor 
+0x5599 020803 call le_receive_window_size 
+0x559a 020804 fetch 2 ,mem_le_superto 
+0x559b 020805 store 2 ,mem_le_init_superto 
+0x559c 020806 rtn 
+:      020809 le_update_channel_map:
+0x559d 020810 bpatchx patch2b_1 ,mem_patch2b 
+0x559e 020811 fetch 1 ,mem_le_state 
+0x559f 020812 rtnbit0 lestate_update_map 
+0x55a0 020813 fetch 2 ,mem_le_event_count 
+0x55a1 020814 fetcht 2 ,mem_le_instant 
+0x55a2 020815 isub temp ,pdata 
+0x55a3 020816 nrtn positive 
+0x55a4 020817 fetch 1 ,mem_le_state 
+0x55a5 020818 set0 lestate_update_map ,pdata 
+0x55a6 020819 store 1 ,mem_le_state 
+0x55a7 020820 fetch 5 ,mem_le_new_map 
+0x55a8 020821 store 5 ,mem_le_channel_map 
+0x55a9 020822 branch le_calc_channel_map 
+:      020825 le_acknowledge:
+0x55aa 020826 bpatchx patch2b_2 ,mem_patch2b 
+0x55ab 020827 call le_supervision_flush 
+0x55ac 020828 call le_check_wak 
+0x55ad 020829 fetch 1 ,mem_le_rxbuf 
+0x55ae 020830 isolate1 md ,pdata 
+0x55af 020831 setflag true ,mark_ble_rx_md ,mark 
+0x55b0 020832 rshift pdata ,pdata 
+0x55b1 020833 ixor temp ,pdata 
+0x55b2 020834 isolate1 nesn ,pdata 
+0x55b3 020835 setflag true ,mark_old_packet ,mark 
+0x55b4 020836 rtnmark1 mark_old_packet 
+0x55b5 020837 fetch 1 ,mem_le_rxbuf + 1 
+0x55b6 020838 branch le_ack_unenc ,blank 
+0x55b7 020839 fetch 1 ,mem_le_state 
+0x55b8 020840 bbit0 lestate_encryption ,le_ack_unenc 
+0x55b9 020841 call load_sk 
+0x55ba 020842 call le_decrypt 
+0x55bb 020843 nrtn blank 
+:      020844 le_ack_unenc:
+0x55bc 020845 fetcht 1 ,mem_le_arq 
+0x55bd 020846 setflip nesn ,temp 
+0x55be 020847 storet 1 ,mem_le_arq 
+0x55bf 020848 rtn 
+:      020851 le_check_wak:
+0x55c0 020852 bpatchx patch2b_3 ,mem_patch2b 
+0x55c1 020853 fetcht 1 ,mem_le_arq 
+0x55c2 020854 isolate0 wak ,temp 
+0x55c3 020855 rtn true 
+0x55c4 020856 fetch 1 ,mem_le_rxbuf 
+0x55c5 020857 lshift pdata ,pdata 
+0x55c6 020858 ixor temp ,pdata 
+0x55c7 020859 rtnbit0 sn 
+0x55c8 020860 set0 wak ,temp 
+0x55c9 020861 setflip sn ,temp 
+0x55ca 020862 storet 1 ,mem_le_arq 
+0x55cb 020863 compare 3 ,temp ,3 
+0x55cc 020864 nrtn true 
+0x55cd 020865 fetch 1 ,mem_le_txpayload 
+0x55ce 020866 beq ll_start_enc_req ,le_set_enc 
+0x55cf 020867 fetch 1 ,mem_le_enc_state 
+0x55d0 020868 beq flag_le_enc_pause ,le_clear_enc 
+0x55d1 020869 rtn 
+:      020872 le_set_enc:
+0x55d2 020873 fetch 1 ,mem_le_state 
+0x55d3 020874 set1 lestate_encryption ,pdata 
+0x55d4 020875 store 1 ,mem_le_state 
+0x55d5 020876 rtn 
+:      020878 le_clear_enc:
+0x55d6 020879 bpatchx patch2b_4 ,mem_patch2b 
+0x55d7 020880 jam flag_le_enc_null ,mem_le_enc_state 
+0x55d8 020881 arg 0 ,pdata 
+0x55d9 020882 store 4 ,mem_le_last_mic 
+0x55da 020883 store 5 ,mem_le_pcnt_tx 
+0x55db 020884 set1 39 ,pdata 
+0x55dc 020885 store 5 ,mem_le_pcnt_rx 
+0x55dd 020886 fetch 1 ,mem_le_state 
+0x55de 020887 set0 lestate_encryption ,pdata 
+0x55df 020888 store 1 ,mem_le_state 
+0x55e0 020889 rtn 
+:      020892 le_wait_adv:
+0x55e1 020893 bpatchx patch2b_5 ,mem_patch2b 
+0x55e2 020894 call le_next_adv_channel 
+0x55e3 020895 call le_receive_adv 
+0x55e4 020896 fetch 1 ,mem_le_adv_waitcnt 
+0x55e5 020897 increase 1 ,pdata 
+0x55e6 020898 store 1 ,mem_le_adv_waitcnt 
+0x55e7 020899 rtn 
+:      020902 le_scan:
+0x55e8 020903 bpatchx patch2b_6 ,mem_patch2b 
+0x55e9 020904 fetch 1 ,mem_le_scan_enable 
+0x55ea 020905 rtnne le_scan_enable 
+0x55eb 020906 arg le_scan_interval_timer ,queue 
+0x55ec 020907 call timer_check 
+0x55ed 020908 nrtn blank 
+0x55ee 020909 fetch 2 ,mem_le_scan_interval 
+0x55ef 020910 fetcht 2 ,mem_le_scan_window 
+0x55f0 020911 isub temp ,pdata 
+0x55f1 020912 arg le_scan_interval_timer ,queue 
+0x55f2 020913 call timer_init 
+0x55f3 020914 disable master 
+0x55f4 020915 call le_init_adv 
+0x55f5 020916 call le_wait_adv 
+0x55f6 020917 nrtn match 
+0x55f7 020918 bpatchx patch2b_7 ,mem_patch2b 
+0x55f8 020919 fetch 6 ,mem_le_rxbuf + 2 
+0x55f9 020920 store 6 ,mem_le_plap 
+0x55fa 020923 fetch 1 ,mem_le_adv_rcv 
+0x55fb 020924 increase 1 ,pdata 
+0x55fc 020925 store 1 ,mem_le_adv_rcv 
+0x55fd 020926 call le_create_conn 
+0x55fe 020927 rtn master 
+0x55ff 020928 call le_send_scan_request 
+0x5600 020929 nrtn match 
+0x5601 020930 bpatchx patch2c_0 ,mem_patch2c 
+0x5602 020931 fetch 1 ,mem_le_scanrsp_rcv 
+0x5603 020932 increase 1 ,pdata 
+0x5604 020933 store 1 ,mem_le_scanrsp_rcv 
+0x5605 020934 fetch 9 ,mem_le_rxbuf + 8 
+0x5606 020935 store 9 ,mem_tmp_buffer 
+0x5607 020936 rtn 
+:      020938 le_create_conn:
+0x5608 020939 bpatchx patch2c_1 ,mem_patch2c 
+0x5609 020940 fetch 1 ,mem_cmd_le_create_conn 
+0x560a 020941 rtnne hci_cmd_le_create_conn 
+0x560b 020942 fetch 6 ,mem_le_plap 
+0x560c 020943 fetcht 6 ,mem_le_conn_peer_addr 
+0x560d 020944 isub temp ,null 
+0x560e 020945 nrtn zero 
+0x560f 020946 call context_new 
+0x5610 020947 nrtn zero 
+0x5611 020948 call le_connect_request 
+0x5612 020949 call le_init_master 
+0x5613 020950 bpatchx patch2c_2 ,mem_patch2c 
+0x5614 020951 jam 0 ,mem_hci_cmd 
+0x5615 020952 jam 0 ,mem_le_peer_sca 
+0x5616 020953 jam 0 ,mem_le_scan_enable 
+0x5617 020954 jam 0 ,mem_cmd_le_create_conn 
+0x5618 020955 branch context_save 
+:      020957 le_scan_check_sender_addr_type:
+0x5619 020958 arg 1 ,rega 
+0x561a 020959 fetch 1 ,mem_le_rxbuf 
+0x561b 020960 rtnbit1 le_sender_addr_bit 
+0x561c 020961 arg 0 ,rega 
+0x561d 020962 rtn 
+:      020966 le_prepare_tx:
+0x561e 020967 bpatchx patch2c_3 ,mem_patch2c 
+0x561f 020968 fetch 1 ,mem_le_arq 
+0x5620 020969 rtnbit1 wak 
+0x5621 020970 call le_check_tx_md 
+0x5622 020971 call le_fifo_get_first_tx_ptr 
+0x5623 020972 branch le_send_empty ,blank 
+0x5624 020973 ifetch 1 ,contr 
+0x5625 020974 ifetcht 1 ,contr 
+0x5626 020975 copy temp ,rega 
+0x5627 020976 isub rega ,pdata 
+0x5628 020977 arg le_max_paket_len ,temp 
+0x5629 020978 call not_greater_than 
+0x562a 020979 copy pdata ,temp 
+0x562b 020980 ifetch 1 ,contr 
+0x562c 020981 copy pdata ,type 
+0x562d 020982 copy rega ,pdata 
+0x562e 020983 iadd contr ,contr 
+0x562f 020984 arg mem_le_txpayload ,contw 
+0x5630 020985 copy temp ,loopcnt 
+0x5631 020986 call memcpy 
+0x5632 020987 call le_update_tx_type 
+0x5633 020988 call le_send_packet 
+0x5634 020990 call le_fifo_get_first_tx_ptr 
+0x5635 020991 ifetch 1 ,contr 
+0x5636 020992 copy pdata ,rega 
+0x5637 020993 copy contr ,regc 
+0x5638 020994 ifetcht 1 ,contr 
+0x5639 020995 copy temp ,regb 
+0x563a 020996 isub regb ,pdata 
+0x563b 020997 arg le_max_paket_len ,temp 
+0x563c 020998 call not_greater_than 
+0x563d 020999 iadd regb ,pdata 
+0x563e 021000 istore 1 ,regc 
+0x563f 021001 isub rega ,null 
+0x5640 021002 nrtn zero 
+0x5641 021003 branch le_fifo_release_first_node 
+:      021006 le_check_tx_md:
+0x5642 021007 call le_check_continue 
+0x5643 021008 rtnmark1 mark_ble_tx_md 
+0x5644 021009 fetch 1 ,mem_le_configuration 
+0x5645 021010 bbit0 bit_ble_transmit_packet_by_md ,le_clear_md 
+0x5646 021011 call le_fifo_get_second_tx_ptr 
+0x5647 021012 branch le_clear_md ,blank 
+0x5648 021013 branch le_set_md 
+:      021016 le_check_continue:
+0x5649 021017 call le_fifo_get_first_tx_ptr 
+0x564a 021018 branch le_clear_md ,blank 
+0x564b 021019 ifetch 1 ,contr 
+0x564c 021020 ifetcht 1 ,contr 
+0x564d 021021 isub temp ,pdata 
+0x564e 021022 sub pdata ,le_max_paket_len ,null 
+0x564f 021023 branch le_clear_md ,positive 
+:      021024 le_set_md:
+0x5650 021025 set1 mark_ble_tx_md ,mark 
+0x5651 021026 rtn 
+:      021028 le_clear_md:
+0x5652 021029 set0 mark_ble_tx_md ,mark 
+0x5653 021030 rtn 
+:      021032 le_update_tx_type:
+0x5654 021033 copy rega ,pdata 
+0x5655 021034 rtn blank 
+0x5656 021035 arg llid_continue ,type 
+0x5657 021036 rtn 
+:      021039 le_att_check_notification_enable:
+0x5658 021040 bpatchx patch2c_4 ,mem_patch2c 
+0x5659 021041 increase 1 ,temp 
+0x565a 021042 call le_att_get_handle_ptr 
+0x565b 021043 increase -2 ,contr 
+0x565c 021044 ifetch 2 ,contr 
+0x565d 021045 arg client_charactertic_configuration ,temp 
+0x565e 021046 isub temp ,null 
+0x565f 021047 nrtn zero 
+0x5660 021048 increase 1 ,contr 
+0x5661 021049 copy contr ,rega 
+0x5662 021050 ifetch 1 ,contr 
+0x5663 021051 rtn 
+:      021054 le_send_empty:
+0x5664 021055 force 0 ,temp 
+0x5665 021056 force 1 ,type 
+:      021058 le_send_packet:
+0x5666 021059 bpatchx patch2c_5 ,mem_patch2c 
+0x5667 021060 storet 1 ,mem_le_txlen 
+0x5668 021061 fetcht 1 ,mem_le_arq 
+0x5669 021062 set1 wak ,temp 
+0x566a 021063 and temp ,0xfc ,pdata 
+0x566b 021064 ior type ,pdata 
+0x566c 021065 store 1 ,mem_le_arq 
+0x566d 021066 and_into 0x1f ,pdata 
+0x566e 021067 isolate1 mark_ble_tx_md ,mark 
+0x566f 021068 setflag true ,md ,pdata 
+0x5670 021069 store 1 ,mem_le_txheader 
+0x5671 021071 fetch 1 ,mem_le_txheader 
+0x5672 021072 compare 1 ,type ,3 
+0x5673 021073 nbranch le_send_no_txlen ,true 
+0x5674 021074 fetch 1 ,mem_le_txlen 
+0x5675 021075 rtn blank 
+:      021076 le_send_no_txlen:
+0x5676 021077 fetch 1 ,mem_le_state 
+0x5677 021078 rtnbit0 lestate_encryption 
+0x5678 021079 call load_sk 
+0x5679 021080 branch le_encrypt 
+:      021083 get_lpm_wake_ble_rx_lock:
+0x567a 021084 arg wake_lock_ble_rx ,queue 
+0x567b 021085 branch lpm_get_wake_lock 
+:      021087 put_lpm_wake_ble_rx_lock:
+0x567c 021088 arg wake_lock_ble_rx ,queue 
+0x567d 021089 branch lpm_put_wake_lock 
+:      021092 le_parse:
+0x567e 021093 bpatchx patch2c_6 ,mem_patch2c 
+0x567f 021094 rtnmark1 mark_old_packet 
+0x5680 021095 call le_fifo_check_full 
+0x5681 021096 nrtn blank 
+0x5682 021097 fetch 1 ,mem_le_rxbuf 
+0x5683 021098 and pdata ,0x3 ,pdata 
+0x5684 021099 store 1 ,mem_le_packet_llid 
+0x5685 021100 ifetch 1 ,contr 
+0x5686 021101 and pdata ,0x1f ,pdata 
+0x5687 021102 store 1 ,mem_le_packet_size 
+0x5688 021103 rtn blank 
+0x5689 021104 copy contr ,pdata 
+0x568a 021105 store 2 ,mem_le_payload_ptr 
+0x568b 021106 fetch 1 ,mem_le_packet_llid 
+0x568c 021107 beq llid_le_ll ,le_parse_ll 
+:      021108 le_parse_l2cap:
+0x568d 021109 call le_check_l2cap_complete 
+0x568e 021110 nbranch get_lpm_wake_ble_rx_lock ,user 
+0x568f 021111 call put_lpm_wake_ble_rx_lock 
+0x5690 021112 fetch 2 ,mem_le_payload_ptr 
+0x5691 021113 copy pdata ,contr 
+0x5692 021114 ifetch 2 ,contr 
+0x5693 021115 store 2 ,mem_le_l2cap_size 
+0x5694 021116 bpatchx patch2c_7 ,mem_patch2c 
+0x5695 021117 ifetch 2 ,contr 
+0x5696 021118 beq le_l2cap_cid_att ,le_parse_att 
+0x5697 021119 beq le_l2cap_cid_smp ,le_parse_smp 
+0x5698 021120 beq le_l2cap_cid_signal ,le_parse_signaling 
+0x5699 021121 rtn 
+:      021124 le_check_l2cap_complete:
+0x569a 021125 fetch 1 ,mem_le_packet_llid 
+0x569b 021126 beq llid_start ,le_check_l2cap_llid_start 
+0x569c 021127 beq llid_continue ,le_check_l2cap_llid_continue 
+0x569d 021128 rtn 
+:      021133 le_check_l2cap_cid_legal:
+0x569e 021134 call enable_user 
+0x569f 021135 arg le_l2cap_cid_att ,temp 
+0x56a0 021136 isub pdata ,null 
+0x56a1 021137 rtn zero 
+0x56a2 021138 arg le_l2cap_cid_signal ,temp 
+0x56a3 021139 isub pdata ,null 
+0x56a4 021140 rtn zero 
+0x56a5 021141 arg le_l2cap_cid_smp ,temp 
+0x56a6 021142 isub pdata ,null 
+0x56a7 021143 rtn zero 
+0x56a8 021144 branch disable_user 
+:      021147 le_check_l2cap_llid_start:
+0x56a9 021148 fetch 2 ,mem_le_payload_ptr 
+0x56aa 021149 copy pdata ,contr 
+0x56ab 021150 ifetch 2 ,contr 
+0x56ac 021151 store 2 ,mem_le_l2cap_size 
+0x56ad 021152 ifetch 2 ,contr 
+0x56ae 021153 call le_check_l2cap_cid_legal 
+0x56af 021154 nrtn user 
+0x56b0 021155 fetcht 1 ,mem_le_packet_size 
+0x56b1 021156 storet 1 ,mem_le_packet_len_recved 
+0x56b2 021157 fetch 2 ,mem_le_l2cap_size 
+0x56b3 021158 increase 4 ,pdata 
+0x56b4 021159 isub temp ,null 
+0x56b5 021160 branch enable_user ,zero 
+0x56b6 021161 fetch 1 ,mem_le_packet_size 
+0x56b7 021162 copy pdata ,loopcnt 
+0x56b8 021163 arg mem_le_l2capbuf ,contw 
+0x56b9 021164 fetch 2 ,mem_le_payload_ptr 
+0x56ba 021165 copy pdata ,contr 
+0x56bb 021166 call memcpy 
+0x56bc 021167 branch disable_user 
+:      021172 le_check_l2cap_continue_legal:
+0x56bd 021173 call enable_user 
+0x56be 021174 fetch 1 ,mem_le_packet_len_recved 
+0x56bf 021175 nrtn blank 
+0x56c0 021176 branch disable_user 
+:      021178 le_check_l2cap_llid_continue:
+0x56c1 021179 call le_check_l2cap_continue_legal 
+0x56c2 021180 nrtn user 
+0x56c3 021181 fetch 1 ,mem_le_packet_len_recved 
+0x56c4 021182 arg mem_le_l2capbuf ,contw 
+0x56c5 021183 iadd contw ,rega 
+0x56c6 021184 fetcht 1 ,mem_le_packet_size 
+0x56c7 021185 iadd temp ,pdata 
+0x56c8 021186 store 1 ,mem_le_packet_len_recved 
+0x56c9 021187 fetch 1 ,mem_le_packet_size 
+0x56ca 021188 copy pdata ,loopcnt 
+0x56cb 021189 copy rega ,contw 
+0x56cc 021190 fetch 2 ,mem_le_payload_ptr 
+0x56cd 021191 copy pdata ,contr 
+0x56ce 021192 call memcpy_fast 
+0x56cf 021193 setarg mem_le_l2capbuf 
+0x56d0 021194 store 2 ,mem_le_payload_ptr 
+0x56d1 021195 fetch 2 ,mem_le_l2cap_size 
+0x56d2 021196 increase 4 ,pdata 
+0x56d3 021197 fetcht 1 ,mem_le_packet_len_recved 
+0x56d4 021198 isub temp ,null 
+0x56d5 021199 branch enable_user ,zero 
+0x56d6 021200 branch disable_user 
+:      021206 le_get_search_att_type:
+0x56d7 021207 call store_contr 
+0x56d8 021208 arg mem_le_search_att_type_length ,contw 
+:      021209 le_get_search_common:
+0x56d9 021210 fetch 2 ,mem_le_l2cap_size 
+0x56da 021211 increase -5 ,pdata 
+:      021212 le_get_search_common2:
+0x56db 021213 istore 1 ,contw 
+0x56dc 021214 copy pdata ,loopcnt 
+0x56dd 021215 call get_contr 
+0x56de 021216 branch memcpy_fast 
+:      021218 le_get_search_att_uuid:
+0x56df 021219 call store_contr 
+0x56e0 021220 arg mem_le_search_uuid_length ,contw 
+0x56e1 021221 branch le_get_search_common 
+:      021225 le_writeatt_cb:
+0x56e2 021226 fetch 2 ,mem_cb_att_write 
+0x56e3 021227 branch callback_func 
+:      021229 le_supervision_update:
+0x56e4 021230 fetcht 4 ,mem_le_supervision_timer 
+0x56e5 021231 call get_clkbt 
+0x56e6 021232 isub temp ,timeup 
+0x56e7 021233 deposit timeup 
+0x56e8 021234 fetcht 2 ,mem_le_superto 
+0x56e9 021235 lshift4 temp ,temp 
+0x56ea 021236 lshift temp ,temp 
+0x56eb 021237 isub temp ,pdata 
+0x56ec 021238 rtn 
+:      021240 le_supervision_flush:
+0x56ed 021241 call get_clkbt 
+0x56ee 021242 store 4 ,mem_le_supervision_timer 
+0x56ef 021243 rtn 
+:      021246 le_adv:
+0x56f0 021247 jam 36 ,mem_le_ch_mapped 
+0x56f1 021248 jam 0 ,mem_le_adv_channel_map_temp 
+:      021249 le_adv_loop:
+0x56f2 021250 bpatchx patch2d_0 ,mem_patch2d 
+0x56f3 021251 fetch 1 ,mem_le_adv_enable 
+0x56f4 021252 rtn blank 
+0x56f5 021253 arg le_adv_interval_timer ,queue 
+0x56f6 021254 call timer_check 
+0x56f7 021255 nrtn blank 
+0x56f8 021256 bpatchx patch2d_1 ,mem_patch2d 
+:      021257 le_adv_loop_tx:
+0x56f9 021258 disable master 
+0x56fa 021259 enable swfine 
+0x56fb 021260 call le_init_adv 
+0x56fc 021261 call le_next_adv_channel 
+0x56fd 021262 call le_send_adv_ind 
+0x56fe 021263 nbranch le_adv_not_match ,match 
+0x56ff 021264 fetch 1 ,mem_le_req_rcv 
+0x5700 021265 increase 1 ,pdata 
+0x5701 021266 store 1 ,mem_le_req_rcv 
+0x5702 021267 fetch 1 ,mem_le_rxbuf 
+0x5703 021268 and pdata ,0x0f ,pdata 
+0x5704 021269 beq scan_req ,le_send_scan_response 
+0x5705 021270 beq connect_req ,le_parse_connect_req 
+:      021271 le_adv_not_match:
+0x5706 021272 bpatchx patch2d_2 ,mem_patch2d 
+0x5707 021273 random pdata 
+0x5708 021274 arg 0x1ff ,temp 
+0x5709 021275 iand temp ,pdata 
+0x570a 021276 add pdata ,250 ,pdata 
+0x570b 021277 call delay 
+0x570c 021278 fetch 1 ,mem_le_adv_channel_map_temp 
+0x570d 021279 fetcht 1 ,mem_le_adv_channel_map 
+0x570e 021280 isub temp ,null 
+0x570f 021281 nbranch le_adv_loop ,zero 
+0x5710 021282 arg le_adv_interval_timer ,queue 
+0x5711 021283 fetch 2 ,mem_le_adv_interval 
+0x5712 021284 branch timer_init 
+:      021287 le_receive_window_size:
+0x5713 021288 bpatchx patch2d_3 ,mem_patch2d 
+0x5714 021289 fetch 1 ,mem_le_peer_sca 
+0x5715 021290 call le_sca_map 
+0x5716 021291 fetch 2 ,mem_le_tsniff 
+0x5717 021292 imul32 temp ,pdata 
+0x5718 021293 arg 375 ,temp 
+0x5719 021294 imul32 temp ,pdata 
+0x571a 021295 arg 100000 ,temp 
+0x571b 021296 idiv temp 
+0x571c 021297 fetch 1 ,mem_le_window_size 
+0x571d 021298 arg 20000 ,temp 
+0x571e 021299 imul32 temp ,pdata 
+0x571f 021300 iadd temp ,pdata 
+0x5720 021301 store 4 ,mem_le_transmit_window 
+0x5721 021302 bpatchx patch2d_4 ,mem_patch2d 
+0x5722 021303 fetch 2 ,mem_rx_window_sniff 
+0x5723 021304 call wait_div_end 
+0x5724 021305 quotient temp 
+0x5725 021306 iadd temp ,pdata 
+0x5726 021307 store 2 ,mem_le_receive_window 
+0x5727 021308 rtn 
+:      021310 le_parse_connect_req:
+0x5728 021311 bpatchx patch2d_5 ,mem_patch2d 
+0x5729 021312 fetch 6 ,mem_le_rxbuf + 8 
+0x572a 021313 fetcht 6 ,mem_le_lap 
+0x572b 021314 isub temp ,null 
+0x572c 021315 nrtn zero 
+0x572d 021316 call le_scan_check_sender_addr_type 
+0x572e 021317 copy rega ,pdata 
+0x572f 021318 store 1 ,mem_le_conn_peer_addr_type 
+0x5730 021319 fetch 7 ,mem_le_rxbuf + 21 
+0x5731 021320 store 7 ,mem_tmp_buffer 
+0x5732 021321 ifetch 8 ,contr 
+0x5733 021322 istore 8 ,contw 
+0x5734 021323 fetch 6 ,mem_le_rxbuf + 2 
+0x5735 021324 store 6 ,mem_le_plap 
+0x5736 021325 increase 6 ,contr 
+0x5737 021326 ifetch 8 ,contr 
+0x5738 021327 store 8 ,mem_le_access 
+0x5739 021328 ifetcht 2 ,contr 
+0x573a 021329 bpatchx patch2d_6 ,mem_patch2d 
+0x573b 021330 lshift2 temp ,temp 
+0x573c 021331 ifetch 2 ,contr 
+0x573d 021332 lshift2 pdata ,pdata 
+0x573e 021333 store 2 ,mem_le_tsniff 
+0x573f 021334 store 4 ,mem_le_anchor 
+0x5740 021335 isub temp ,pdata 
+0x5741 021336 add pdata ,-2 ,clke_bt 
+0x5742 021337 ifetch 9 ,contr 
+0x5743 021338 store 9 ,mem_le_slave_latency 
+0x5744 021339 bpatchx patch2d_7 ,mem_patch2d 
+0x5745 021340 ifetch 1 ,contr 
+0x5746 021341 rshift4 pdata ,temp 
+0x5747 021342 rshift temp ,temp 
+0x5748 021343 storet 1 ,mem_le_peer_sca 
+0x5749 021344 and_into 0x1f ,pdata 
+0x574a 021345 store 1 ,mem_le_hop 
+0x574b 021346 call le_receive_window_size 
+0x574c 021347 call le_calc_channel_map 
+0x574d 021348 call le_init_slave 
+0x574e 021349 call context_new 
+0x574f 021350 nrtn zero 
+0x5750 021351 bpatchx patch2e_0 ,mem_patch2e 
+0x5751 021352 call calc_clke_offset 
+0x5752 021353 call le_l2cap_reset_signaling_identifier 
+0x5753 021354 jam bt_evt_le_connected ,mem_fifo_temp 
+0x5754 021355 call ui_ipc_send_event 
+0x5755 021356 branch context_save 
+:      021359 le_init_attlist_search:
+0x5756 021360 bpatchx patch2e_1 ,mem_patch2e 
+0x5757 021361 fetch 2 ,mem_le_search_handle_start 
+0x5758 021362 iforce regb 
+0x5759 021363 fetch 2 ,mem_le_search_handle_end 
+0x575a 021364 iforce regc 
+0x575b 021365 fetch 2 ,mem_ui_le_uuid_table 
+0x575c 021366 iforce contr 
+0x575d 021367 enable user 
+0x575e 021368 rtn 
+:      021371 le_att_handle_inrange:
+0x575f 021372 ifetch 2 ,contr 
+0x5760 021373 rtn blank 
+0x5761 021374 isub regb ,null 
+0x5762 021375 nrtn positive 
+0x5763 021376 isub regc ,null 
+0x5764 021377 rtn zero 
+0x5765 021378 branch le_att_handle_blank ,positive 
+0x5766 021379 force 1 ,null 
+0x5767 021380 rtn 
+:      021381 le_att_handle_blank:
+0x5768 021382 force 0 ,pdata 
+0x5769 021383 rtn 
+:      021387 le_att_get_handle_ptr:
+0x576a 021388 call le_att_get_handle_ptr2 
+0x576b 021389 branch le_att_get_handle_ptr_found ,zero 
+0x576c 021390 rtn 
+:      021392 le_att_get_handle_ptr2:
+0x576d 021393 bpatchx patch2e_2 ,mem_patch2e 
+0x576e 021394 fetch 2 ,mem_ui_le_uuid_table 
+0x576f 021395 iforce contr 
+:      021396 le_att_get_handle_loop1:
+0x5770 021397 ifetch 2 ,contr 
+0x5771 021398 rtn blank 
+0x5772 021399 isub temp ,null 
+0x5773 021400 rtn zero 
+0x5774 021401 ifetch 1 ,contr 
+0x5775 021402 iadd contr ,contr 
+0x5776 021403 ifetch 1 ,contr 
+0x5777 021404 iadd contr ,contr 
+0x5778 021405 branch le_att_get_handle_loop1 
+:      021406 le_att_get_handle_ptr_found:
+0x5779 021407 ifetch 1 ,contr 
+0x577a 021408 iadd contr ,contr 
+0x577b 021409 rtn 
+:      021413 le_att_get_short_uuid_ptr:
+0x577c 021414 bpatchx patch2e_3 ,mem_patch2e 
+0x577d 021415 fetch 2 ,mem_ui_le_uuid_table 
+0x577e 021416 iforce contr 
+:      021417 le_att_get_short_uuid_loop:
+0x577f 021418 ifetch 2 ,contr 
+0x5780 021419 rtn blank 
+0x5781 021420 ifetch 1 ,contr 
+0x5782 021421 iadd contr ,contr 
+0x5783 021422 increase -2 ,contr 
+0x5784 021423 ifetch 2 ,contr 
+0x5785 021424 isub temp ,null 
+0x5786 021425 rtn zero 
+0x5787 021426 ifetch 1 ,contr 
+0x5788 021427 iadd contr ,contr 
+0x5789 021428 branch le_att_get_short_uuid_loop 
+:      021432 le_att_get_handle_info_from_ptr:
+0x578a 021433 fetch 2 ,mem_le_cur_attlist_start_ptr 
+0x578b 021434 branch le_att_get_handle_info_fast 
+:      021436 le_att_get_handle_info:
+0x578c 021437 bpatchx patch2e_4 ,mem_patch2e 
+0x578d 021438 fetch 2 ,mem_ui_le_uuid_table 
+:      021439 le_att_get_handle_info_fast:
+0x578e 021440 iforce contr 
+0x578f 021441 copy temp ,rega 
+:      021442 le_att_get_handle_loop:
+0x5790 021443 ifetch 2 ,contr 
+0x5791 021444 branch le_att_unfind_handle ,blank 
+0x5792 021445 isub rega ,null 
+0x5793 021446 branch le_att_finded_handle ,zero 
+0x5794 021447 ifetch 1 ,contr 
+0x5795 021448 iadd contr ,contr 
+0x5796 021449 ifetch 1 ,contr 
+0x5797 021450 iadd contr ,contr 
+0x5798 021451 branch le_att_get_handle_loop 
+:      021452 le_att_unfind_handle:
+0x5799 021453 branch disable_blank 
+:      021455 le_att_finded_handle:
+0x579a 021456 ifetch 1 ,contr 
+0x579b 021457 store 1 ,mem_le_cur_uuid_length 
+0x579c 021458 copy pdata ,loopcnt 
+0x579d 021459 arg mem_le_cur_uuid ,contw 
+0x579e 021460 call memcpy_fast 
+0x579f 021461 ifetch 1 ,contr 
+0x57a0 021462 store 1 ,mem_le_curr_att_len 
+0x57a1 021463 call store_contr 
+0x57a2 021464 branch enable_blank 
+:      021467 le_modified_name:
+0x57a3 021468 bpatchx patch2e_5 ,mem_patch2e 
+0x57a4 021469 call le_modified_name_att_list 
+0x57a5 021470 branch le_modified_name_adv 
+:      021472 le_modified_name_att_list:
+0x57a6 021473 arg uuid_chrctr_device_name ,temp 
+0x57a7 021474 call le_att_get_short_uuid_ptr 
+0x57a8 021475 rtn blank 
+0x57a9 021476 ifetch 1 ,contr 
+0x57aa 021477 copy contr ,contw 
+0x57ab 021478 fetcht 1 ,mem_le_name_len 
+0x57ac 021479 copy temp ,loopcnt 
+0x57ad 021480 isub temp ,null 
+0x57ae 021481 nbranch le_name_length_longer_than_att ,positive 
+0x57af 021482 isub temp ,temp 
+0x57b0 021483 arg mem_le_name ,contr 
+0x57b1 021484 call memcpy 
+0x57b2 021485 copy temp ,loopcnt 
+0x57b3 021486 ncall memcpy_empty ,zero 
+0x57b4 021487 rtn 
+:      021488 le_name_length_longer_than_att:
+0x57b5 021489 copy pdata ,loopcnt 
+0x57b6 021490 arg mem_le_name ,contr 
+0x57b7 021491 branch memcpy_fast 
+:      021494 le_modified_name_adv:
+0x57b8 021495 arg mem_le_adv_data_len + 32 ,regc 
+0x57b9 021496 arg mem_le_adv_data ,rega 
+0x57ba 021497 call le_modified_name_adv_and_scan 
+0x57bb 021498 setarg 0 
+0x57bc 021499 setflag user ,0 ,pdata 
+0x57bd 021500 store 1 ,mem_pdatatemp 
+0x57be 021501 arg mem_le_scan_data_len + 32 ,regc 
+0x57bf 021502 arg mem_le_scan_data ,rega 
+0x57c0 021503 call le_modified_name_adv_and_scan 
+0x57c1 021504 rtn user 
+0x57c2 021505 fetch 1 ,mem_pdatatemp 
+0x57c3 021506 branch assert ,blank 
+0x57c4 021507 rtn 
+:      021510 le_modified_name_adv_and_scan:
+0x57c5 021511 bpatchx patch2e_6 ,mem_patch2e 
+0x57c6 021512 call enable_user 
+0x57c7 021513 call clear_temp_block 
+0x57c8 021514 arg 0 ,regb 
+0x57c9 021515 arg mem_le_data_temp ,contw 
+0x57ca 021516 call le_modified_name_adv_loop 
+0x57cb 021517 fetch 1 ,mem_le_name_len 
+0x57cc 021518 add pdata ,1 ,temp 
+0x57cd 021519 iadd regb ,rega 
+0x57ce 021520 increase 2 ,rega 
+0x57cf 021521 sub rega ,0x1f ,null 
+0x57d0 021522 nbranch le_modified_name_adv_and_scan_name_overflow ,positive 
+0x57d1 021523 istoret 1 ,contw 
+0x57d2 021524 arg gap_adtype_local_name_complete ,temp 
+0x57d3 021525 istoret 1 ,contw 
+0x57d4 021526 iforce loopcnt 
+0x57d5 021527 call memcpy_fast 
+0x57d6 021528 copy rega ,regb 
+:      021529 le_modified_name_adv_and_scan_store_data:
+0x57d7 021530 deposit regb 
+0x57d8 021531 store 1 ,mem_le_data_len_temp 
+0x57d9 021532 arg mem_le_data_len_temp ,contr 
+0x57da 021533 setarg -32 
+0x57db 021534 iadd regc ,contw 
+0x57dc 021535 branch memcpy32 
+:      021537 le_modified_name_adv_and_scan_name_overflow:
+0x57dd 021538 call disable_user 
+0x57de 021539 branch le_modified_name_adv_and_scan_store_data 
+:      021541 le_modified_name_adv_loop:
+0x57df 021542 ifetch 1 ,rega 
+0x57e0 021543 rtn blank 
+0x57e1 021544 pincrease 1 
+0x57e2 021545 ifetcht 1 ,contr 
+0x57e3 021546 sub temp ,gap_adtype_local_name_complete ,null 
+0x57e4 021547 branch le_modified_name_adv_found_name ,zero 
+0x57e5 021548 iadd regb ,regb 
+0x57e6 021549 copy rega ,contr 
+0x57e7 021550 iforce loopcnt 
+0x57e8 021551 call memcpy_fast 
+0x57e9 021552 copy contr ,rega 
+:      021553 le_modified_name_adv_loop2:
+0x57ea 021554 deposit rega 
+0x57eb 021555 isub regc ,null 
+0x57ec 021556 rtn positive 
+0x57ed 021557 branch le_modified_name_adv_loop 
+:      021559 le_modified_name_adv_found_name:
+0x57ee 021560 iadd rega ,rega 
+0x57ef 021561 branch le_modified_name_adv_loop2 
+:      021564 memcpy_empty:
+0x57f0 021565 setarg space 
+0x57f1 021566 istore 1 ,contw 
+0x57f2 021567 loop memcpy_empty 
+0x57f3 021568 rtn 
+:      021571 le_lpm_set_mult:
+0x57f4 021572 bpatchx patch2e_7 ,mem_patch2e 
+0x57f5 021573 disable wake 
+0x57f6 021574 branch le_lpm_set_mult_attempt ,attempt 
+0x57f7 021575 nbranch le_lpm_lost ,match 
+:      021576 le_lpm_set_mult_attempt:
+0x57f8 021577 call lpm_match 
+0x57f9 021578 fetch 2 ,mem_rx_window_sniff 
+0x57fa 021579 store 2 ,mem_le_receive_window 
+0x57fb 021581 nbranch lpm_mult_short ,match 
+0x57fc 021582 bmark1 mark_old_packet ,lpm_mult_short 
+0x57fd 021584 fetch 1 ,mem_le_packet_size 
+0x57fe 021585 nbranch lpm_mult_short ,blank 
+0x57ff 021586 fetch 1 ,mem_le_txlen 
+0x5800 021587 nbranch lpm_mult_short ,blank 
+0x5801 021589 fetch 1 ,mem_le_configuration 
+0x5802 021590 bbit1 bit_ble_short_mult ,lpm_mult_short 
+0x5803 021592 fetch 1 ,mem_le_state 
+0x5804 021593 bbit1 lestate_update_param ,lpm_mult_short 
+0x5805 021594 branch lpm_mult_wait_timeout 
+:      021596 le_lpm_lost:
+0x5806 021597 fetcht 2 ,mem_rx_window_sniff 
+0x5807 021598 rshift temp ,temp 
+0x5808 021599 fetch 2 ,mem_le_receive_window 
+0x5809 021600 iadd temp ,pdata 
+0x580a 021601 store 2 ,mem_le_receive_window 
+0x580b 021602 branch lpm_lost 
+:      021605 le_set_config_fixed_tk:
+0x580c 021606 arg bit_ble_passkey_fixed_key ,queue 
+0x580d 021607 branch le_set_config 
+:      021609 le_clr_config_fixed_tk:
+0x580e 021610 arg bit_ble_passkey_fixed_key ,queue 
+0x580f 021611 branch le_clr_config 
+:      021613 le_set_config_fixed_ltk:
+0x5810 021614 arg bit_ble_pairing_fixed_ltk ,queue 
+0x5811 021615 branch le_set_config 
+:      021617 le_clr_config_fixed_ltk:
+0x5812 021618 arg bit_ble_pairing_fixed_ltk ,queue 
+0x5813 021619 branch le_clr_config 
+:      021621 le_set_config_more_data:
+0x5814 021622 arg bit_ble_transmit_packet_by_md ,queue 
+0x5815 021623 branch le_set_config 
+:      021625 le_clr_config_more_data:
+0x5816 021626 arg bit_ble_transmit_packet_by_md ,queue 
+0x5817 021627 branch le_clr_config 
+:      021629 le_set_config_read_authentication:
+0x5818 021630 arg bit_ble_read_auth ,queue 
+0x5819 021631 branch le_set_config 
+:      021633 le_clr_config_read_authentication:
+0x581a 021634 arg bit_ble_read_auth ,queue 
+0x581b 021635 branch le_clr_config 
+:      021637 le_set_config_write_authentication:
+0x581c 021638 arg bit_ble_write_auth ,queue 
+0x581d 021639 branch le_set_config 
+:      021641 le_clr_config_write_authentication:
+0x581e 021642 arg bit_ble_write_auth ,queue 
+0x581f 021643 branch le_clr_config 
+:      021645 le_set_config_short_mult:
+0x5820 021646 arg bit_ble_short_mult ,queue 
+0x5821 021647 branch le_set_config 
+:      021649 le_clr_config_short_mult:
+0x5822 021650 arg bit_ble_short_mult ,queue 
+0x5823 021651 branch le_clr_config 
+:      021654 le_set_config:
+0x5824 021655 fetch 1 ,mem_le_configuration 
+0x5825 021656 qset1 pdata 
+0x5826 021657 store 1 ,mem_le_configuration 
+0x5827 021658 rtn 
+:      021660 le_clr_config:
+0x5828 021661 fetch 1 ,mem_le_configuration 
+0x5829 021662 qset0 pdata 
+0x582a 021663 store 1 ,mem_le_configuration 
+0x582b 021664 rtn 
+:      021666 le_set_fixed_ltk:
+0x582c 021667 setarg 0x112233 
+0x582d 021668 store 3 ,mem_le_fixed_ltk 
+0x582e 021669 setarg 0x445566 
+0x582f 021670 istore 3 ,contw 
+0x5830 021671 setarg 0x778899 
+0x5831 021672 istore 3 ,contw 
+0x5832 021673 setarg 0x001122 
+0x5833 021674 istore 3 ,contw 
+0x5834 021675 setarg 0x334455 
+0x5835 021676 istore 3 ,contw 
+0x5836 021677 setarg 0x66 
+0x5837 021678 istore 1 ,contw 
+0x5838 021679 rtn 
+:      021682 le_set_justwork:
+0x5839 021683 setarg 0x01000302 
+0x583a 021684 store 4 ,mem_le_pres 
+0x583b 021685 setarg 0x010010 
+0x583c 021686 store 3 ,mem_le_pres_max_keysize 
+0x583d 021687 jam 1 ,mem_le_pairing_mode 
+0x583e 021688 rtn 
+:      021692 le_fifo_malloc_tx_empty:
+0x583f 021693 arg 0 ,rega 
+0x5840 021694 arg llid_empty ,type 
+0x5841 021695 branch le_fifo_malloc_tx 
+:      021699 le_fifo_malloc_tx_ll:
+0x5842 021700 arg llid_le_ll ,type 
+0x5843 021701 call le_fifo_malloc_tx 
+0x5844 021702 copy regb ,pdata 
+0x5845 021703 istore 1 ,contw 
+0x5846 021704 rtn 
+:      021708 le_fifo_malloc_tx_l2cap:
+0x5847 021709 force llid_l2cap_start ,type 
+0x5848 021710 increase 4 ,rega 
+0x5849 021711 call le_fifo_malloc_tx 
+0x584a 021712 increase -4 ,rega 
+0x584b 021713 copy rega ,pdata 
+0x584c 021714 istore 2 ,contw 
+0x584d 021715 copy regb ,pdata 
+0x584e 021716 istore 2 ,contw 
+0x584f 021717 rtn 
+:      021721 le_fifo_malloc_tx:
+0x5850 021722 sub rega ,240 ,null 
+0x5851 021723 nbranch assert ,positive 
+0x5852 021724 fetch 1 ,mem_le_tx_buff_used 
+0x5853 021725 arg 1 ,temp 
+0x5854 021726 arg le_tx_buff_count ,loopcnt 
+:      021727 le_fifo_malloc_tx_loop:
+0x5855 021728 iand temp ,null 
+0x5856 021729 branch le_fifo_malloc_tx_got_empty ,zero 
+0x5857 021730 lshift temp ,temp 
+0x5858 021731 loop le_fifo_malloc_tx_loop 
+0x5859 021732 branch assert 
+:      021733 le_fifo_malloc_tx_got_empty:
+0x585a 021734 ixor temp ,pdata 
+0x585b 021735 store 1 ,mem_le_tx_buff_used 
+0x585c 021736 sub loopcnt ,le_tx_buff_count ,pdata 
+0x585d 021737 lshift4 pdata ,pdata 
+0x585e 021738 lshift4 pdata ,pdata 
+0x585f 021739 arg mem_le_tx_buffer0 ,temp 
+0x5860 021740 iadd temp ,temp 
+:      021741 le_fifo_tx_find_empty_ptr:
+0x5861 021742 arg 0 ,loopcnt 
+0x5862 021743 arg mem_le_tx_ptr0 ,contr 
+:      021744 le_fifo_tx_find_empty_ptr_loop:
+0x5863 021745 ifetch 2 ,contr 
+0x5864 021746 branch le_fifo_tx_found_empty_ptr ,blank 
+0x5865 021747 copy loopcnt ,pdata 
+0x5866 021748 increase 1 ,loopcnt 
+0x5867 021749 bne le_tx_buff_count ,le_fifo_tx_find_empty_ptr_loop 
+0x5868 021750 branch assert 
+:      021753 le_fifo_tx_found_empty_ptr:
+0x5869 021754 increase -2 ,contr 
+0x586a 021755 istoret 2 ,contr 
+0x586b 021756 copy temp ,contw 
+0x586c 021757 copy rega ,pdata 
+0x586d 021758 istore 1 ,contw 
+0x586e 021759 setarg 0 
+0x586f 021760 istore 1 ,contw 
+0x5870 021761 copy type ,pdata 
+0x5871 021762 istore 1 ,contw 
+0x5872 021763 rtn 
+:      021767 le_fifo_get_first_tx_ptr:
+0x5873 021768 fetch 2 ,mem_le_tx_ptr0 
+0x5874 021769 copy pdata ,contr 
+0x5875 021770 rtn 
+:      021772 le_fifo_get_second_tx_ptr:
+0x5876 021773 fetch 2 ,mem_le_tx_ptr1 
+0x5877 021774 copy pdata ,contr 
+0x5878 021775 rtn 
+:      021777 le_fifo_get_last_tx_ptr:
+0x5879 021778 call le_fifo_get_last_tx_ptr0 
+0x587a 021779 copy pdata ,contr 
+0x587b 021780 rtn 
+:      021781 le_fifo_get_last_tx_ptr0:
+0x587c 021782 fetch 2 ,mem_le_tx_ptr3 
+0x587d 021783 nrtn blank 
+0x587e 021784 fetch 2 ,mem_le_tx_ptr2 
+0x587f 021785 nrtn blank 
+0x5880 021786 fetch 2 ,mem_le_tx_ptr1 
+0x5881 021787 nrtn blank 
+0x5882 021788 fetch 2 ,mem_le_tx_ptr0 
+0x5883 021789 rtn 
+:      021791 le_fifo_get_first_l2cap_ptr:
+0x5884 021792 call le_fifo_get_first_tx_ptr 
+0x5885 021793 increase 3 ,contr 
+0x5886 021794 rtn 
+:      021796 le_fifo_get_first_att_ptr:
+0x5887 021797 call le_fifo_get_first_tx_ptr 
+0x5888 021798 increase 7 ,contr 
+0x5889 021799 rtn 
+:      021801 le_fifo_get_last_att_ptr:
+0x588a 021802 call le_fifo_get_last_tx_ptr 
+0x588b 021803 increase 7 ,contr 
+0x588c 021804 rtn 
+:      021806 le_fifo_get_last_l2cap_ptr:
+0x588d 021807 call le_fifo_get_last_tx_ptr 
+0x588e 021808 increase 3 ,contr 
+0x588f 021809 rtn 
+:      021813 le_fifo_check_full:
+0x5890 021814 fetch 2 ,mem_le_tx_ptr3 
+0x5891 021815 rtn 
+:      021818 le_fifo_check_nearly_full:
+0x5892 021819 fetch 2 ,mem_le_tx_ptr2 
+0x5893 021820 rtn 
+:      021823 le_fifo_check_empty:
+0x5894 021824 fetch 2 ,mem_le_tx_ptr0 
+0x5895 021825 rtn 
+:      021828 le_fifo_release_first_node:
+0x5896 021829 fetch 2 ,mem_le_tx_ptr0 
+0x5897 021830 arg mem_le_tx_buffer0 ,temp 
+0x5898 021831 isub temp ,pdata 
+0x5899 021832 rshift4 pdata ,pdata 
+0x589a 021833 rshift4 pdata ,queue 
+0x589b 021834 fetch 1 ,mem_le_tx_buff_used 
+0x589c 021835 qset0 pdata 
+0x589d 021836 store 1 ,mem_le_tx_buff_used 
+0x589e 021837 arg 0 ,loopcnt 
+:      021838 le_fifo_release_first_node_loop:
+0x589f 021839 lshift loopcnt ,pdata 
+0x58a0 021840 arg mem_le_tx_ptr1 ,temp 
+0x58a1 021841 iadd temp ,temp 
+0x58a2 021842 ifetch 2 ,temp 
+0x58a3 021843 increase -2 ,temp 
+0x58a4 021844 istore 2 ,temp 
+0x58a5 021845 copy loopcnt ,pdata 
+0x58a6 021846 increase 1 ,loopcnt 
+0x58a7 021847 bne le_tx_buff_update_loopcnt ,le_fifo_release_first_node_loop 
+0x58a8 021848 setarg 0 
+0x58a9 021849 istore 2 ,temp 
+0x58aa 021850 rtn 
+:      021856 le_parse_att:
+0x58ab 021857 ifetch 3 ,contr 
+0x58ac 021858 store 3 ,mem_le_att_opcode 
+0x58ad 021859 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request 
+0x58ae 021860 beq attop_exchange_mtu_response ,le_parse_att_exchange_mtu_response 
+0x58af 021861 beq attop_find_information_request ,le_parse_att_find_information_request 
+0x58b0 021862 beq attop_find_by_type_value_request ,le_parse_att_find_by_type_value_request 
+0x58b1 021863 beq attop_read_by_type_request ,le_parse_att_read_by_type_request 
+0x58b2 021864 beq attop_read_request ,le_parse_att_read_request 
+0x58b3 021865 beq attop_read_blob_request ,le_parse_att_read_blob_request 
+0x58b4 021866 beq attop_read_by_group_type_request ,le_parse_att_read_by_group_type_request 
+0x58b5 021867 beq attop_write_request ,le_parse_att_write_request 
+0x58b6 021868 beq attop_prepare_write_request ,le_parse_att_prepare_write_request 
+0x58b7 021869 beq attop_execute_write_request ,le_parse_att_execute_write_request 
+0x58b8 021870 beq attop_write_command ,le_parse_att_write_command 
+0x58b9 021871 rtn 
+:      021874 le_send_att_exchange_mtu_requset:
+0x58ba 021875 force 3 ,rega 
+0x58bb 021876 call le_fifo_malloc_tx_l2cap_gatt 
+0x58bc 021877 setarg attop_exchange_mtu_request 
+0x58bd 021878 istore 1 ,contw 
+0x58be 021879 fetch 2 ,mem_le_local_mtu 
+0x58bf 021880 istore 2 ,contw 
+0x58c0 021881 rtn 
+:      021884 le_parse_att_exchange_mtu_request:
+0x58c1 021885 call le_parse_att_exchange_mtu_response 
+:      021886 le_send_att_exchange_mtu_response:
+0x58c2 021887 force 3 ,rega 
+0x58c3 021888 call le_fifo_malloc_tx_l2cap_gatt 
+0x58c4 021889 setarg attop_exchange_mtu_response 
+0x58c5 021890 istore 1 ,contw 
+0x58c6 021891 fetch 2 ,mem_le_local_mtu 
+0x58c7 021892 istore 2 ,contw 
+0x58c8 021893 rtn 
+:      021895 le_parse_att_exchange_mtu_response:
+0x58c9 021896 rshift8 pdata ,pdata 
+0x58ca 021897 store 2 ,mem_le_remote_mtu 
+0x58cb 021898 rtn 
+:      021900 le_parse_att_find_information_request:
+0x58cc 021901 call le_get_search_handle_start_end_common 
+0x58cd 021902 call enable_user 
+0x58ce 021903 branch le_send_att_find_information_response 
+:      021905 le_send_att_find_information_response:
+0x58cf 021906 arg 3 ,timeup 
+0x58d0 021907 call le_init_attlist_search 
+:      021908 le_send_att_find_information_res_loop:
+0x58d1 021909 call le_att_handle_inrange 
+0x58d2 021910 branch le_send_att_find_information_res_end ,blank 
+0x58d3 021911 nbranch le_send_att_find_information_res_next ,positive 
+0x58d4 021912 increase -2 ,contr 
+0x58d5 021913 call store_contr 
+0x58d6 021914 call get_contw 
+0x58d7 021915 nbranch le_send_att_find_information_res_store_info ,user 
+0x58d8 021916 call push_stack_rega_b_c 
+0x58d9 021917 call disable_user 
+0x58da 021918 force 20 ,rega 
+0x58db 021919 call le_fifo_malloc_tx_l2cap_gatt 
+0x58dc 021920 call pop_stack_rega_b_c 
+0x58dd 021921 setarg attop_find_information_response 
+0x58de 021922 istore 1 ,contw 
+0x58df 021923 setarg uuid_size_16bit 
+0x58e0 021924 istore 1 ,contw 
+:      021925 le_send_att_find_information_res_store_info:
+0x58e1 021926 call get_contr 
+0x58e2 021927 ifetch 2 ,contr 
+0x58e3 021928 istore 2 ,contw 
+0x58e4 021929 ifetch 1 ,contr 
+0x58e5 021930 copy pdata ,loopcnt 
+0x58e6 021931 call memcpy 
+0x58e7 021932 call store_contw 
+0x58e8 021933 increase -1 ,timeup 
+0x58e9 021934 branch le_send_att_find_information_res_end ,zero 
+:      021935 le_send_att_find_information_res_cont:
+0x58ea 021936 ifetch 1 ,contr 
+0x58eb 021937 iadd contr ,contr 
+0x58ec 021938 branch le_send_att_find_information_res_loop 
+:      021939 le_send_att_find_information_res_next:
+0x58ed 021940 ifetch 1 ,contr 
+0x58ee 021941 iadd contr ,contr 
+0x58ef 021942 branch le_send_att_find_information_res_cont 
+:      021943 le_send_att_find_information_res_end:
+0x58f0 021944 branch le_send_att_error_response_notfound ,user 
+0x58f1 021945 branch le_send_auto_len_by_mem 
+:      021948 le_parse_att_find_by_type_value_request:
+0x58f2 021949 call le_get_search_handle_start_end_common 
+0x58f3 021950 ifetch 2 ,contr 
+0x58f4 021951 store 2 ,mem_le_search_uuid 
+0x58f5 021952 call store_contr 
+0x58f6 021953 arg mem_le_search_att_type_length ,contw 
+0x58f7 021954 fetch 2 ,mem_le_l2cap_size 
+0x58f8 021955 increase -7 ,pdata 
+0x58f9 021956 call le_get_search_common2 
+0x58fa 021957 branch le_send_att_find_by_type_value_response 
+:      021960 le_start_end_handle_check_1:
+0x58fb 021961 disable user 
+0x58fc 021962 fetcht 2 ,mem_le_search_handle_start 
+0x58fd 021963 fetch 2 ,mem_le_search_handle_end 
+0x58fe 021964 isub temp ,null 
+0x58ff 021965 nbranch le_start_end_handle_check_1_fail ,positive 
+0x5900 021966 deposit temp 
+0x5901 021967 rtnne 0 
+:      021968 le_start_end_handle_check_1_fail:
+0x5902 021969 enable user 
+0x5903 021970 jam att_err_invalid_handle ,mem_le_err_code 
+0x5904 021971 branch le_send_att_error_response 
+:      021974 le_send_att_find_by_type_value_response:
+0x5905 021975 call le_start_end_handle_check_1 
+0x5906 021976 rtn user 
+0x5907 021977 fetcht 2 ,mem_le_search_uuid 
+0x5908 021978 setarg uuid_gatt_primary_service 
+0x5909 021979 isub temp ,null 
+0x590a 021980 branch le_send_att_find_by_type_value_res_primary ,zero 
+0x590b 021981 branch le_send_att_error_response_notfound 
+:      021984 le_send_att_find_by_type_value_res_primary:
+0x590c 021985 jam le_find_by_type_val_res_not_found ,mem_le_search_res 
+0x590d 021986 fetcht 2 ,mem_le_search_handle_start 
+0x590e 021987 storet 2 ,mem_temp 
+0x590f 021988 call le_att_get_handle_info 
+0x5910 021989 nbranch le_send_att_error_response_notfound ,blank 
+:      021990 le_send_att_find_primary_search_loop:
+0x5911 021991 fetcht 2 ,mem_temp 
+0x5912 021992 call le_att_get_handle_info 
+0x5913 021993 nbranch le_send_att_error_response_notfound2 ,blank 
+0x5914 021994 copy contr ,rega 
+0x5915 021995 fetch 1 ,mem_le_curr_att_len 
+0x5916 021996 copy pdata ,loopcnt 
+0x5917 021997 fetcht 1 ,mem_le_search_att_type_length 
+0x5918 021998 isub temp ,null 
+0x5919 021999 nbranch le_send_att_find_primary_search_loop1 ,zero 
+0x591a 022000 arg mem_le_search_att_type ,regb 
+0x591b 022001 call string_compare 
+0x591c 022003 branch le_send_att_find_primary_search_end_start_handle_found ,zero 
+0x591d 022005 fetch 2 ,mem_le_cur_uuid 
+0x591e 022006 fetcht 2 ,mem_le_search_uuid 
+0x591f 022007 isub temp ,null 
+0x5920 022008 branch le_send_att_find_primary_search_end_ending_handle_found ,zero 
+:      022009 le_send_att_find_primary_search_loop1:
+0x5921 022010 fetch 2 ,mem_temp 
+0x5922 022011 increase 1 ,pdata 
+0x5923 022012 store 2 ,mem_temp 
+0x5924 022013 branch le_send_att_find_primary_search_loop 
+:      022015 le_send_att_error_response_notfound2:
+0x5925 022016 fetch 1 ,mem_le_search_res 
+0x5926 022017 beq le_find_by_type_val_res_found_starting_handle ,le_send_att_find_primary_search_end_ending_handle_found 
+0x5927 022018 branch le_send_att_error_response_notfound 
+:      022021 le_send_att_find_primary_search_end_start_handle_found:
+0x5928 022022 fetch 2 ,mem_le_cur_uuid 
+0x5929 022023 fetcht 2 ,mem_le_search_uuid 
+0x592a 022024 isub temp ,null 
+0x592b 022025 nbranch le_send_att_find_primary_search_loop1 ,zero 
+0x592c 022026 jam le_find_by_type_val_res_found_starting_handle ,mem_le_search_res 
+0x592d 022028 fetcht 2 ,mem_temp 
+0x592e 022029 storet 2 ,mem_le_cur_handle_start 
+0x592f 022030 branch le_send_att_find_primary_search_loop1 
+:      022032 le_send_att_find_primary_search_end_ending_handle_found:
+0x5930 022033 fetch 1 ,mem_le_search_res 
+0x5931 022034 beq le_find_by_type_val_res_not_found ,le_send_att_find_primary_search_loop1 
+0x5932 022035 jam le_find_by_type_val_res_found_ending_handle ,mem_le_search_res 
+0x5933 022036 fetcht 2 ,mem_temp 
+0x5934 022037 increase -1 ,temp 
+0x5935 022038 storet 2 ,mem_le_cur_handle_end 
+:      022040 le_send_att_find_primary_search_end:
+0x5936 022041 arg 5 ,rega 
+0x5937 022042 call le_fifo_malloc_tx_l2cap_gatt 
+0x5938 022043 setarg attop_find_by_type_value_response 
+0x5939 022044 istore 1 ,contw 
+0x593a 022045 fetch 2 ,mem_le_cur_handle_start 
+0x593b 022046 istore 2 ,contw 
+0x593c 022047 fetch 2 ,mem_le_cur_handle_end 
+0x593d 022048 istore 2 ,contw 
+0x593e 022049 rtn 
+:      022053 le_parse_att_read_by_type_request:
+0x593f 022054 call le_get_search_handle_start_end_common 
+0x5940 022055 call le_get_search_att_uuid 
+0x5941 022056 branch le_send_att_read_by_type_response 
+:      022058 le_send_att_read_by_type_response:
+0x5942 022059 fetcht 2 ,mem_le_search_handle_start 
+0x5943 022060 storet 2 ,mem_temp 
+0x5944 022061 call le_init_attlist_search 
+0x5945 022062 call le_att_get_handle_ptr2 
+0x5946 022063 increase -2 ,contr 
+0x5947 022064 copy contr ,pdata 
+0x5948 022065 store 2 ,mem_le_cur_attlist_start_ptr 
+0x5949 022067 fetcht 2 ,mem_le_search_uuid 
+0x594a 022068 setarg uuid_chrctr_device_name 
+0x594b 022069 isub temp ,null 
+0x594c 022070 branch le_send_att_read_by_type_res_device_name ,zero 
+0x594d 022071 setarg uuid_gatt_characteristic 
+0x594e 022072 isub temp ,null 
+0x594f 022073 nbranch le_send_att_read_by_type_res_not_characteristic ,zero 
+0x5950 022074 arg 2 ,timeup 
+:      022075 le_send_att_read_by_type_response_loop:
+0x5951 022076 call le_att_check_handle_end 
+0x5952 022077 nbranch le_send_att_read_by_type_response_end ,positive 
+0x5953 022078 fetcht 2 ,mem_temp 
+0x5954 022079 call le_att_get_handle_info_from_ptr 
+0x5955 022080 beq 1 ,le_send_att_read_by_type_response_end 
+0x5956 022081 call le_att_same_uuid 
+0x5957 022082 nbranch le_send_att_read_by_type_response_next_handle ,zero 
+0x5958 022083 nbranch le_send_att_read_by_type_res_found_next ,user 
+0x5959 022084 disable user 
+0x595a 022085 arg 20 ,rega 
+0x595b 022086 call le_fifo_malloc_tx_l2cap_gatt 
+0x595c 022087 setarg attop_read_by_type_response 
+0x595d 022088 istore 1 ,contw 
+0x595e 022089 copy contw ,alarm 
+0x595f 022090 increase 1 ,contw 
+0x5960 022092 call le_send_att_read_by_type_write_properties 
+0x5961 022093 call le_att_next_handle 
+0x5962 022094 call le_att_get_handle_info_from_ptr 
+0x5963 022095 call le_send_att_read_by_type_write_uuid 
+0x5964 022096 fetch 1 ,mem_le_cur_uuid_length 
+0x5965 022097 increase 5 ,pdata 
+0x5966 022098 istore 1 ,alarm 
+0x5967 022099 fetch 1 ,mem_le_cur_uuid_length 
+0x5968 022100 beq 16 ,le_send_att_read_by_type_response_end 
+0x5969 022101 increase -1 ,timeup 
+0x596a 022102 branch le_send_att_read_by_type_response_end ,zero 
+:      022103 le_send_att_read_by_type_response_next_handle:
+0x596b 022104 call le_att_next_handle 
+0x596c 022105 branch le_send_att_read_by_type_response_loop 
+:      022106 le_send_att_read_by_type_response_end:
+0x596d 022107 branch le_send_att_error_response_notfound ,user 
+0x596e 022108 branch le_send_auto_len_by_mem 
+:      022110 le_send_att_read_by_type_res_found_next:
+0x596f 022111 call le_store_att_record 
+0x5970 022112 call le_att_next_handle 
+0x5971 022113 call le_att_get_handle_info_from_ptr 
+0x5972 022114 fetch 1 ,mem_le_cur_uuid_length 
+0x5973 022115 beq 16 ,le_send_att_read_by_type_response_end 
+0x5974 022117 call get_contw 
+0x5975 022118 fetch 2 ,mem_temp 
+0x5976 022119 increase -1 ,pdata 
+0x5977 022120 istore 2 ,contw 
+0x5978 022121 call le_write_att_record_common 
+0x5979 022122 call le_send_att_read_by_type_write_uuid 
+0x597a 022123 increase -1 ,timeup 
+0x597b 022124 branch le_send_att_read_by_type_response_end ,zero 
+0x597c 022125 branch le_send_att_read_by_type_response_next_handle 
+:      022128 le_send_att_read_by_type_write_properties:
+0x597d 022129 fetch 2 ,mem_temp 
+0x597e 022130 istore 2 ,contw 
+0x597f 022132 fetch 1 ,mem_le_curr_att_len 
+0x5980 022133 copy pdata ,loopcnt 
+0x5981 022134 call get_contr 
+0x5982 022135 call memcpy_fast 
+0x5983 022136 branch store_contw 
+:      022137 le_send_att_read_by_type_write_uuid:
+0x5984 022138 call get_contw 
+0x5985 022139 fetch 2 ,mem_temp 
+0x5986 022140 istore 2 ,contw 
+0x5987 022141 call store_contw 
+0x5988 022142 fetch 1 ,mem_le_cur_uuid_length 
+0x5989 022143 copy pdata ,loopcnt 
+0x598a 022144 call get_contw 
+0x598b 022145 call get_contr 
+0x598c 022146 isub loopcnt ,contr 
+0x598d 022147 increase -1 ,contr 
+0x598e 022148 call memcpy_fast 
+0x598f 022149 branch store_contw 
+:      022153 le_send_att_read_by_type_res_not_characteristic:
+0x5990 022154 fetcht 2 ,mem_le_search_handle_start 
+0x5991 022155 storet 2 ,mem_temp 
+:      022156 le_send_att_read_by_type_res_not_char_loop:
+0x5992 022157 call le_att_check_handle_end 
+0x5993 022158 nbranch le_send_att_error_response_notfound ,positive 
+0x5994 022159 call le_att_get_handle_info_from_ptr 
+0x5995 022160 beq 1 ,le_send_att_error_response_notfound 
+0x5996 022161 call le_att_same_uuid 
+0x5997 022162 nbranch le_send_att_read_by_type_res_not_char_next ,zero 
+:      022164 le_send_att_read_by_type_res_not_char_common:
+0x5998 022165 arg 20 ,rega 
+0x5999 022166 call le_fifo_malloc_tx_l2cap_gatt 
+0x599a 022167 setarg attop_read_by_type_response 
+0x599b 022168 istore 1 ,contw 
+0x599c 022169 fetch 1 ,mem_le_curr_att_len 
+0x599d 022170 copy pdata ,loopcnt 
+0x599e 022171 increase 2 ,pdata 
+0x599f 022172 istore 1 ,contw 
+0x59a0 022173 fetch 2 ,mem_temp 
+0x59a1 022174 istore 2 ,contw 
+0x59a2 022175 call get_contr 
+0x59a3 022176 call memcpy_fast 
+0x59a4 022177 call store_contw 
+0x59a5 022178 branch le_send_auto_len_by_mem 
+:      022180 le_send_att_read_by_type_res_not_char_next:
+0x59a6 022181 call le_att_next_handle 
+0x59a7 022182 branch le_send_att_read_by_type_res_not_char_loop 
+:      022185 le_send_att_read_by_type_res_device_name:
+0x59a8 022186 arg uuid_chrctr_device_name ,temp 
+0x59a9 022187 call le_att_get_short_uuid_ptr 
+0x59aa 022188 rtn blank 
+0x59ab 022189 increase -5 ,contr 
+0x59ac 022190 ifetch 2 ,contr 
+0x59ad 022191 store 2 ,mem_temp 
+0x59ae 022192 arg 20 ,rega 
+0x59af 022193 call le_fifo_malloc_tx_l2cap_gatt 
+0x59b0 022194 setarg attop_read_by_type_response 
+0x59b1 022195 istore 1 ,contw 
+0x59b2 022196 fetch 1 ,mem_le_name_len 
+0x59b3 022197 copy pdata ,loopcnt 
+0x59b4 022198 increase 2 ,pdata 
+0x59b5 022199 istore 1 ,contw 
+0x59b6 022200 fetch 2 ,mem_temp 
+0x59b7 022201 istore 2 ,contw 
+0x59b8 022202 arg mem_le_name ,contr 
+0x59b9 022203 call memcpy_fast 
+0x59ba 022204 call store_contw 
+0x59bb 022205 branch le_send_auto_len_by_mem 
+:      022209 le_parse_att_read_request:
+0x59bc 022210 fetcht 2 ,mem_le_att_handle 
+0x59bd 022211 fetch 1 ,mem_le_configuration 
+0x59be 022212 bbit1 bit_ble_read_auth ,le_send_att_read_response_check_auth 
+:      022214 le_send_att_read_response:
+0x59bf 022215 call le_att_get_handle_ptr 
+0x59c0 022216 branch le_send_att_error_response_notfound ,blank 
+0x59c1 022217 increase -2 ,contr 
+0x59c2 022218 ifetch 2 ,contr 
+0x59c3 022219 arg uuid_chrctr_device_name ,temp 
+0x59c4 022220 isub temp ,null 
+0x59c5 022221 branch le_send_device_name ,zero 
+0x59c6 022222 ifetch 1 ,contr 
+0x59c7 022223 sub pdata ,22 ,null 
+0x59c8 022224 branch le_send_att_read_response_less ,positive 
+0x59c9 022225 force 22 ,pdata 
+:      022226 le_send_att_read_response_less:
+0x59ca 022227 copy pdata ,regc 
+0x59cb 022228 call store_contr 
+0x59cc 022229 add regc ,1 ,rega 
+0x59cd 022230 call le_fifo_malloc_tx_l2cap_gatt 
+0x59ce 022231 setarg attop_read_response 
+0x59cf 022232 istore 1 ,contw 
+0x59d0 022233 copy regc ,loopcnt 
+0x59d1 022234 call get_contr 
+0x59d2 022235 branch memcpy 
+:      022237 le_send_device_name:
+0x59d3 022238 call store_contr 
+0x59d4 022239 fetch 1 ,mem_le_name_len 
+0x59d5 022240 add pdata ,1 ,rega 
+0x59d6 022241 call le_fifo_malloc_tx_l2cap_gatt 
+0x59d7 022242 setarg attop_read_response 
+0x59d8 022243 istore 1 ,contw 
+0x59d9 022244 fetch 1 ,mem_le_name_len 
+0x59da 022245 copy pdata ,loopcnt 
+0x59db 022246 arg mem_le_name ,contr 
+0x59dc 022247 branch memcpy 
+:      022250 le_send_att_read_response_check_auth:
+0x59dd 022251 fetch 2 ,mem_le_pairing_handle 
+0x59de 022252 isub temp ,null 
+0x59df 022253 nbranch le_send_att_read_response ,zero 
+0x59e0 022255 call le_check_encrypt_state 
+0x59e1 022256 nbranch le_send_att_read_response ,user 
+0x59e2 022257 jam att_err_insufficient_authentication ,mem_le_err_code 
+0x59e3 022258 branch le_send_att_error_response 
+:      022261 le_parse_att_read_blob_request:
+0x59e4 022262 ifetch 2 ,contr 
+0x59e5 022263 store 2 ,mem_le_att_offset 
+:      022264 le_send_att_read_blob_response:
+0x59e6 022265 arg 20 ,rega 
+0x59e7 022266 call le_fifo_malloc_tx_l2cap_gatt 
+0x59e8 022267 setarg attop_read_blob_response 
+0x59e9 022268 istore 1 ,contw 
+0x59ea 022269 fetch 2 ,mem_le_att_offset 
+0x59eb 022270 iforce rega 
+0x59ec 022271 fetcht 2 ,mem_le_att_handle 
+0x59ed 022272 call le_att_get_handle_ptr 
+0x59ee 022273 branch le_send_att_error_response_notfound ,blank 
+0x59ef 022274 ifetch 1 ,contr 
+0x59f0 022275 isub rega ,loopcnt 
+0x59f1 022276 nbranch le_send_att_error_response_notfound ,positive 
+0x59f2 022277 sub loopcnt ,22 ,null 
+0x59f3 022278 branch le_send_att_read_blob_response_less ,positive 
+0x59f4 022279 force 22 ,loopcnt 
+:      022280 le_send_att_read_blob_response_less:
+0x59f5 022281 deposit rega 
+0x59f6 022282 iadd contr ,contr 
+0x59f7 022283 call memcpy_fast 
+0x59f8 022284 call store_contw 
+0x59f9 022285 branch le_send_auto_len_by_mem 
+:      022288 le_parse_att_read_by_group_type_request:
+0x59fa 022289 call le_get_search_handle_start_end_common 
+0x59fb 022290 call le_get_search_att_type 
+0x59fc 022291 branch le_send_att_read_by_group_type_response 
+:      022296 le_send_att_read_by_group_type_response:
+0x59fd 022297 arg 2 ,timeup 
+0x59fe 022298 fetcht 2 ,mem_le_search_handle_start 
+0x59ff 022302 storet 2 ,mem_temp 
+0x5a00 022303 call le_init_attlist_search 
+0x5a01 022304 call le_att_get_handle_ptr2 
+0x5a02 022305 increase -2 ,contr 
+0x5a03 022306 copy contr ,pdata 
+0x5a04 022307 store 2 ,mem_le_cur_attlist_start_ptr 
+:      022308 le_send_att_read_by_group_type_response_loop:
+0x5a05 022309 call le_att_check_handle_end 
+0x5a06 022310 nbranch le_send_att_read_by_group_type_end0 ,positive 
+0x5a07 022311 fetcht 2 ,mem_temp 
+0x5a08 022312 call le_att_get_handle_info_from_ptr 
+0x5a09 022313 beq 1 ,le_send_att_read_by_group_type_end1 
+0x5a0a 022315 call le_att_same_type 
+0x5a0b 022316 nbranch le_send_att_read_by_group_type_next_handle ,zero 
+0x5a0c 022317 copy timeup ,pdata 
+0x5a0d 022318 beq 0 ,le_send_att_read_by_group_type_end1 
+0x5a0e 022319 nbranch le_send_att_read_by_group_type_store_write_record ,user 
+0x5a0f 022320 disable user 
+0x5a10 022322 arg 20 ,rega 
+0x5a11 022323 call le_fifo_malloc_tx_l2cap_gatt 
+0x5a12 022324 setarg attop_read_by_group_type_response 
+0x5a13 022325 istore 1 ,contw 
+0x5a14 022326 fetch 1 ,mem_le_curr_att_len 
+0x5a15 022327 increase 4 ,pdata 
+0x5a16 022328 istore 1 ,contw 
+0x5a17 022329 call store_contw 
+0x5a18 022330 branch le_send_att_read_by_group_type_store_record 
+:      022331 le_send_att_read_by_group_type_store_write_record:
+0x5a19 022332 fetch 1 ,mem_le_curr_att_len 
+0x5a1a 022333 beq 16 ,le_send_att_read_by_group_type_end1 
+0x5a1b 022334 fetch 2 ,mem_temp 
+0x5a1c 022335 increase -1 ,pdata 
+0x5a1d 022336 store 2 ,mem_le_cur_handle_end 
+0x5a1e 022337 call le_write_att_record 
+:      022338 le_send_att_read_by_group_type_store_record:
+0x5a1f 022339 fetch 2 ,mem_temp 
+0x5a20 022340 store 2 ,mem_le_cur_handle_start 
+0x5a21 022341 call le_store_att_record 
+0x5a22 022342 increase -1 ,timeup 
+:      022344 le_send_att_read_by_group_type_next_handle:
+0x5a23 022345 call le_att_next_handle 
+0x5a24 022346 branch le_send_att_read_by_group_type_response_loop 
+:      022348 le_send_att_read_by_group_type_end0:
+0x5a25 022349 fetch 2 ,mem_temp 
+0x5a26 022350 store 2 ,mem_le_cur_handle_end 
+0x5a27 022351 branch le_send_att_read_by_group_type_end_common 
+:      022352 le_send_att_read_by_group_type_end1:
+0x5a28 022353 fetch 2 ,mem_temp 
+0x5a29 022354 increase -1 ,pdata 
+0x5a2a 022355 store 2 ,mem_le_cur_handle_end 
+0x5a2b 022356 branch le_send_att_read_by_group_type_end_common 
+:      022357 le_send_att_read_by_group_type_end_common:
+0x5a2c 022358 branch le_send_att_error_response_notfound ,user 
+0x5a2d 022359 call le_write_att_record 
+0x5a2e 022360 branch le_send_auto_len_by_mem 
+:      022365 le_parse_att_write_request:
+0x5a2f 022366 copy contr ,rega 
+0x5a30 022367 fetch 2 ,mem_le_l2cap_size 
+0x5a31 022368 add pdata ,-3 ,regb 
+0x5a32 022369 call le_writeatt_cb 
+:      022370 le_send_att_write_response_check_auth:
+0x5a33 022371 fetch 1 ,mem_le_configuration 
+0x5a34 022372 bbit0 bit_ble_write_auth ,le_send_att_write_response 
+0x5a35 022374 fetcht 2 ,mem_le_att_handle 
+0x5a36 022375 fetch 2 ,mem_le_pairing_handle 
+0x5a37 022376 isub temp ,null 
+0x5a38 022377 nbranch le_send_att_write_response ,zero 
+0x5a39 022378 call le_check_encrypt_state 
+0x5a3a 022379 nbranch le_send_att_write_response ,user 
+0x5a3b 022380 jam att_err_insufficient_authentication ,mem_le_err_code 
+0x5a3c 022381 branch le_send_att_error_response 
+:      022383 le_send_att_write_response:
+0x5a3d 022384 force 1 ,rega 
+0x5a3e 022385 call le_fifo_malloc_tx_l2cap_gatt 
+0x5a3f 022386 setarg attop_write_response 
+0x5a40 022387 istore 1 ,contw 
+0x5a41 022388 rtn 
+:      022390 le_check_encrypt_state:
+0x5a42 022391 call disable_user 
+0x5a43 022392 fetch 1 ,mem_le_pairing_mode 
+0x5a44 022393 rtneq le_pairing_mode_none 
+0x5a45 022394 fetch 1 ,mem_context 
+0x5a46 022395 rtnbit1 lestate_encryption 
+0x5a47 022396 branch enable_user 
+:      022399 le_parse_att_prepare_write_request:
+0x5a48 022400 add contr ,2 ,rega 
+0x5a49 022401 fetch 2 ,mem_le_l2cap_size 
+0x5a4a 022402 add pdata ,-5 ,regb 
+0x5a4b 022403 call le_writeatt_cb 
+0x5a4c 022404 branch le_send_att_prepare_write_response 
+:      022407 le_send_att_prepare_write_response:
+0x5a4d 022408 fetch 2 ,mem_le_l2cap_size 
+0x5a4e 022409 copy pdata ,rega 
+0x5a4f 022410 call le_fifo_malloc_tx_l2cap_gatt 
+0x5a50 022411 setarg attop_prepare_write_response 
+0x5a51 022412 istore 1 ,contw 
+0x5a52 022413 fetch 2 ,mem_le_att_handle 
+0x5a53 022414 istore 2 ,contw 
+0x5a54 022415 fetch 2 ,mem_le_l2cap_size 
+0x5a55 022416 add pdata ,-5 ,loopcnt 
+0x5a56 022417 fetch 2 ,mem_le_payload_ptr 
+0x5a57 022418 add pdata ,7 ,contr 
+0x5a58 022419 ifetch 2 ,contr 
+0x5a59 022420 istore 2 ,contw 
+0x5a5a 022421 branch memcpy_fast 
+:      022425 le_parse_att_execute_write_request:
+:      022427 le_send_att_execute_write_response:
+0x5a5b 022428 force 1 ,rega 
+0x5a5c 022429 call le_fifo_malloc_tx_l2cap_gatt 
+0x5a5d 022430 setarg attop_execute_write_response 
+0x5a5e 022431 istore 1 ,contw 
+0x5a5f 022432 rtn 
+:      022436 le_parse_att_write_command:
+0x5a60 022437 copy contr ,rega 
+0x5a61 022438 fetch 2 ,mem_le_l2cap_size 
+0x5a62 022439 add pdata ,-3 ,regb 
+0x5a63 022440 branch le_writeatt_cb 
+:      022445 le_att_malloc_tx_notify:
+0x5a64 022446 copy temp ,regc 
+0x5a65 022447 increase 3 ,rega 
+0x5a66 022448 call le_fifo_malloc_tx_l2cap_gatt 
+0x5a67 022449 increase -3 ,rega 
+0x5a68 022450 setarg attop_handle_value_notification 
+0x5a69 022451 istore 1 ,contw 
+0x5a6a 022452 copy regc ,temp 
+0x5a6b 022453 istoret 2 ,contw 
+0x5a6c 022454 rtn 
+:      022457 le_att_malloc_tx_indication:
+0x5a6d 022458 copy temp ,regc 
+0x5a6e 022459 increase 3 ,rega 
+0x5a6f 022460 call le_fifo_malloc_tx_l2cap_gatt 
+0x5a70 022461 increase -3 ,rega 
+0x5a71 022462 setarg attop_handle_value_indication 
+0x5a72 022463 istore 1 ,contw 
+0x5a73 022464 copy regc ,temp 
+0x5a74 022465 istoret 2 ,contw 
+0x5a75 022466 rtn 
+:      022471 le_send_att_error_response_notfound:
+0x5a76 022472 jam att_err_attribute_not_found ,mem_le_err_code 
+:      022473 le_send_att_error_response:
+0x5a77 022474 force 5 ,rega 
+0x5a78 022475 call le_fifo_malloc_tx_l2cap_gatt 
+0x5a79 022476 setarg attop_error_response 
+0x5a7a 022477 istore 1 ,contw 
+0x5a7b 022478 fetch 1 ,mem_le_att_opcode 
+0x5a7c 022479 istore 1 ,contw 
+0x5a7d 022480 fetch 2 ,mem_le_att_handle 
+0x5a7e 022481 istore 2 ,contw 
+0x5a7f 022482 fetch 1 ,mem_le_err_code 
+0x5a80 022483 istore 1 ,contw 
+0x5a81 022484 rtn 
+:      022487 le_fifo_malloc_tx_l2cap_gatt:
+0x5a82 022488 force le_l2cap_cid_att ,regb 
+0x5a83 022489 branch le_fifo_malloc_tx_l2cap 
+:      022492 le_att_next_handle:
+0x5a84 022493 fetcht 2 ,mem_temp 
+0x5a85 022494 increase 1 ,temp 
+0x5a86 022495 storet 2 ,mem_temp 
+0x5a87 022496 rtn 
+:      022498 le_att_check_handle_end:
+0x5a88 022499 fetcht 2 ,mem_temp 
+0x5a89 022500 fetch 2 ,mem_le_search_handle_end 
+0x5a8a 022501 isub temp ,null 
+0x5a8b 022502 rtn 
+:      022505 le_att_same_type:
+0x5a8c 022506 fetcht 1 ,mem_le_search_att_type_length 
+0x5a8d 022507 arg mem_le_search_att_type ,rega 
+:      022508 le_att_check_same_common:
+0x5a8e 022509 fetch 1 ,mem_le_cur_uuid_length 
+0x5a8f 022510 copy pdata ,loopcnt 
+0x5a90 022511 isub temp ,null 
+0x5a91 022512 nrtn zero 
+0x5a92 022513 arg mem_le_cur_uuid ,regb 
+0x5a93 022514 branch string_compare 
+:      022516 le_att_same_uuid:
+0x5a94 022517 fetcht 1 ,mem_le_search_uuid_length 
+0x5a95 022518 arg mem_le_search_uuid ,rega 
+0x5a96 022519 branch le_att_check_same_common 
+:      022522 le_store_att_record:
+0x5a97 022523 fetch 1 ,mem_le_curr_att_len 
+0x5a98 022524 store 1 ,mem_tmp_buffer 
+0x5a99 022525 copy pdata ,loopcnt 
+0x5a9a 022526 call get_contr 
+0x5a9b 022527 branch memcpy_fast 
+:      022530 le_write_att_record:
+0x5a9c 022531 call get_contw 
+0x5a9d 022532 fetch 2 ,mem_le_cur_handle_start 
+0x5a9e 022533 istore 2 ,contw 
+0x5a9f 022534 fetch 2 ,mem_le_cur_handle_end 
+0x5aa0 022535 istore 2 ,contw 
+:      022536 le_write_att_record_common:
+0x5aa1 022537 fetch 1 ,mem_tmp_buffer 
+0x5aa2 022538 copy pdata ,loopcnt 
+0x5aa3 022539 call memcpy_fast 
+0x5aa4 022540 branch store_contw 
+:      022544 le_send_auto_len_by_mem:
+0x5aa5 022545 call get_contw 
+0x5aa6 022546 call le_fifo_get_last_att_ptr 
+0x5aa7 022547 copy contw ,pdata 
+0x5aa8 022548 isub contr ,rega 
+0x5aa9 022549 call le_fifo_get_last_l2cap_ptr 
+0x5aaa 022550 copy rega ,pdata 
+0x5aab 022551 istore 2 ,contr 
+0x5aac 022552 increase 4 ,rega 
+0x5aad 022553 call le_fifo_get_last_tx_ptr 
+0x5aae 022554 copy rega ,pdata 
+0x5aaf 022555 istore 1 ,contr 
+0x5ab0 022556 rtn 
+:      022559 le_get_search_handle_start_end_common:
+0x5ab1 022560 rshift8 pdata ,pdata 
+0x5ab2 022561 store 2 ,mem_le_search_handle_start 
+0x5ab3 022562 ifetch 2 ,contr 
+0x5ab4 022563 store 2 ,mem_le_search_handle_end 
+0x5ab5 022564 rtn 
+:      022569 le_parse_signaling:
+0x5ab6 022570 ifetch 1 ,contr 
+0x5ab7 022571 ifetcht 1 ,contr 
+0x5ab8 022572 ifetcht 2 ,contr 
+0x5ab9 022573 beq l2cap_connection_parameter_update_response ,le_l2cap_parse_conn_parameter_update_rsp 
+0x5aba 022574 rtn 
+:      022575 le_l2cap_parse_conn_parameter_update_rsp:
+0x5abb 022576 ifetch 2 ,contr 
+0x5abc 022577 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 
+0x5abd 022578 jam bt_evt_le_parse_conn_papa_update_rsp ,mem_fifo_temp 
+0x5abe 022579 branch ui_ipc_send_event 
+:      022585 le_l2cap_tx_update_req:
+0x5abf 022586 arg 0x0c ,rega 
+0x5ac0 022587 arg l2cap_connection_parameter_update_request ,regc 
+0x5ac1 022588 call le_fifo_malloc_tx_l2cap_signaling 
+0x5ac2 022589 setarg 0x08 
+0x5ac3 022590 istore 2 ,contw 
+0x5ac4 022591 fetch 8 ,mem_le_interval_min 
+0x5ac5 022592 istore 8 ,contw 
+0x5ac6 022593 rtn 
+:      022597 le_fifo_malloc_tx_l2cap_signaling:
+0x5ac7 022598 call le_l2cap_update_signaling_identifier 
+0x5ac8 022599 arg le_l2cap_cid_signal ,regb 
+0x5ac9 022600 call le_fifo_malloc_tx_l2cap 
+0x5aca 022601 copy regc ,pdata 
+0x5acb 022602 istore 1 ,contw 
+0x5acc 022603 fetch 1 ,mem_le_signaling_identifier 
+0x5acd 022604 istore 1 ,contw 
+0x5ace 022605 rtn 
+:      022608 le_l2cap_update_signaling_identifier:
+0x5acf 022609 fetch 1 ,mem_le_signaling_identifier 
+0x5ad0 022611 pincrease 1 
+0x5ad1 022612 store 1 ,mem_le_signaling_identifier 
+0x5ad2 022613 rtnne 0 
+:      022615 le_l2cap_reset_signaling_identifier:
+0x5ad3 022616 jam 1 ,mem_le_signaling_identifier 
+0x5ad4 022617 rtn 
+:      022622 le_pairing_mode_init:
+0x5ad5 022623 fetch 1 ,mem_le_pairing_mode 
+0x5ad6 022624 beq le_pairing_mode_none ,le_set_no_pairing 
+0x5ad7 022625 beq le_pairing_mode_lagacy_justwork ,le_set_pairing_mode_lagacy_just_work 
+0x5ad8 022626 beq le_pairing_mode_lagacy_passkey ,le_set_pairing_mode_lagacy_passkey 
+0x5ad9 022627 beq le_pairing_mode_secure_connect_justwork ,le_set_pairing_mode_secure_justwork 
+0x5ada 022628 beq le_pairing_mode_secure_connect_numeric ,le_set_pairing_mode_secure_numeric 
+0x5adb 022629 beq le_pairing_mode_secure_connect_passkey ,le_set_pairing_mode_secure_passkey 
+0x5adc 022630 rtn 
+:      022632 le_set_pairing_mode_secure_justwork:
+0x5add 022633 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+0x5ade 022634 branch le_set_noinputnooutput 
+:      022635 le_set_pairing_mode_secure_numeric:
+0x5adf 022636 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+0x5ae0 022637 jam flag_iocap_displayyesno ,mem_le_pres_iocap 
+0x5ae1 022638 rtn 
+:      022639 le_set_pairing_mode_secure_passkey:
+0x5ae2 022640 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+0x5ae3 022641 branch le_set_displayonly 
+:      022642 le_set_no_pairing:
+0x5ae4 022643 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth 
+:      022644 le_set_noinputnooutput:
+0x5ae5 022645 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap 
+0x5ae6 022646 rtn 
+:      022647 le_set_pairing_mode_lagacy_just_work:
+0x5ae7 022648 jam flag_le_bonding_mitm ,mem_le_pres_auth 
+0x5ae8 022649 branch le_set_noinputnooutput 
+:      022650 le_set_pairing_mode_lagacy_passkey:
+0x5ae9 022651 jam flag_le_bonding_mitm ,mem_le_pres_auth 
+:      022652 le_set_displayonly:
+0x5aea 022653 jam flag_iocap_displayonly ,mem_le_pres_iocap 
+0x5aeb 022654 rtn 
+:      022657 le_secure_connection_enable:
+0x5aec 022658 fetch 1 ,mem_le_pres_auth 
+0x5aed 022659 set1 le_auth_secure_connection_pairing_bit ,pdata 
+0x5aee 022660 store 1 ,mem_le_pres_auth 
+0x5aef 022661 rtn 
+:      022662 le_secure_connection_disable:
+0x5af0 022663 fetch 1 ,mem_le_pres_auth 
+0x5af1 022664 set0 le_auth_secure_connection_pairing_bit ,pdata 
+0x5af2 022665 store 1 ,mem_le_pres_auth 
+0x5af3 022666 rtn 
+:      022668 le_parse_smp:
+0x5af4 022669 ifetch 1 ,contr 
+0x5af5 022670 beq smp_pairing_request ,le_parse_smp_pairing_request 
+0x5af6 022672 beq smp_pairing_confirm ,le_parse_smp_pairing_confirm 
+0x5af7 022673 beq smp_pairing_random ,le_parse_smp_pairing_random 
+0x5af8 022674 beq smp_pairing_failed ,le_parse_smp_pairing_failed 
+0x5af9 022675 beq smp_encryption_information ,le_parse_smp_encryption_information 
+0x5afa 022676 beq smp_master_identification ,le_parse_smp_master_identification 
+0x5afb 022677 beq smp_identity_information ,le_parse_smp_identity_information 
+0x5afc 022678 beq smp_identity_address_information ,le_parse_smp_identity_address_information 
+0x5afd 022679 beq smp_signing_information ,le_parse_smp_signing_information 
+0x5afe 022680 beq smp_security_request ,le_parse_smp_security_request 
+0x5aff 022681 beq smp_pairing_public_key ,le_parse_smp_public_key 
+0x5b00 022682 beq smp_pairing_dhkey_check ,le_parse_smp_dhkey_check 
+0x5b01 022683 rtn 
+:      022687 le_send_smp_security_request:
+0x5b02 022688 force 2 ,rega 
+0x5b03 022689 call le_fifo_malloc_tx_l2cap_smp 
+0x5b04 022690 setarg smp_security_request 
+0x5b05 022691 istore 1 ,contw 
+0x5b06 022692 fetch 1 ,mem_le_pres_auth 
+0x5b07 022693 istore 1 ,contw 
+0x5b08 022694 rtn 
+:      022696 le_parse_smp_pairing_request:
+0x5b09 022697 store 1 ,mem_le_preq 
+0x5b0a 022698 ifetch 6 ,contr 
+0x5b0b 022699 istore 6 ,contw 
+0x5b0c 022700 fetch 1 ,mem_le_pairing_mode 
+0x5b0d 022701 beq le_pairing_mode_none ,le_smp_pairing_fail_reason_not_support_pairing 
+0x5b0e 022702 call le_send_smp_pairing_response 
+0x5b0f 022703 call le_check_master_support_secure_connect 
+0x5b10 022704 jam flag_le_pairing_rcv_pairing_req ,mem_le_pairing_state 
+0x5b11 022705 fetch 1 ,mem_le_preq_iocap 
+0x5b12 022706 beq flag_iocap_displayonly ,le_set_tk_0 
+0x5b13 022707 beq flag_iocap_displayyesno ,le_set_tk_0 
+0x5b14 022708 beq flag_iocap_noinputnooutput ,le_set_tk_0 
+0x5b15 022709 fetch 1 ,mem_le_pairing_mode 
+0x5b16 022710 beq le_pairing_mode_lagacy_passkey ,le_parse_smp_pairing_req_passkey 
+0x5b17 022711 rtneq le_pairing_mode_secure_connect_passkey 
+:      022712 le_set_tk_0:
+0x5b18 022713 arg 0 ,pdata 
+0x5b19 022714 store 4 ,mem_le_tk 
+0x5b1a 022715 rtn 
+:      022717 le_parse_smp_pairing_req_passkey:
+0x5b1b 022718 fetch 1 ,mem_le_configuration 
+0x5b1c 022719 bbit1 bit_ble_passkey_fixed_key ,le_parse_smp_pairing_req_fixed_passkey 
+:      022720 le_genernate_tk:
+0x5b1d 022721 arg mem_le_tk ,rega 
+0x5b1e 022722 copy rega ,contw 
+0x5b1f 022723 arg 3 ,loopcnt 
+0x5b20 022724 call generate_random_loop 
+0x5b21 022725 fetch 2 ,mem_le_tk + 2 
+0x5b22 022726 and_into 0x7 ,pdata 
+0x5b23 022727 store 2 ,mem_le_tk + 2 
+:      022728 le_parse_smp_pairing_req_fixed_passkey:
+0x5b24 022729 jam bt_evt_le_tk_generate ,mem_fifo_temp 
+0x5b25 022730 branch ui_ipc_send_event 
+:      022732 le_check_master_support_secure_connect:
+0x5b26 022733 fetch 1 ,mem_le_preq_auth 
+0x5b27 022734 rtnbit1 le_auth_secure_connection_pairing_bit 
+0x5b28 022735 fetch 1 ,mem_le_pairing_mode 
+0x5b29 022736 rtnbit0 le_pairing_mode_secure_connect_bit 
+0x5b2a 022737 branch app_ble_disconnect 
+:      022739 le_send_smp_pairing_response:
+0x5b2b 022740 force 7 ,rega 
+0x5b2c 022741 call le_fifo_malloc_tx_l2cap_smp 
+0x5b2d 022742 fetch 7 ,mem_le_pres 
+0x5b2e 022743 istore 7 ,contw 
+0x5b2f 022744 rtn 
+:      022747 le_parse_smp_pairing_confirm:
+0x5b30 022748 copy contr ,rega 
+0x5b31 022749 fetch 1 ,mem_le_pairing_mode 
+0x5b32 022750 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_confirm_secure_passkey 
+0x5b33 022751 copy rega ,contr 
+0x5b34 022752 arg mem_le_rconfirm ,contw 
+0x5b35 022753 call memcpy16 
+0x5b36 022754 branch le_send_smp_pairing_confirm 
+:      022755 le_parse_smp_pairing_confirm_secure_passkey:
+0x5b37 022756 copy rega ,contr 
+0x5b38 022757 arg mem_le_rconfirm ,contw 
+0x5b39 022758 call memcpy16 
+0x5b3a 022759 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+0x5b3b 022760 jam le_sc_stat_passkey_wait_confirm ,mem_le_secure_connect_state 
+0x5b3c 022761 rtn 
+:      022764 le_send_smp_pairing_confirm:
+0x5b3d 022765 fetch 1 ,mem_le_pairing_mode 
+0x5b3e 022766 bbit1 le_pairing_mode_secure_connect_bit ,le_send_smp_pairing_confirm_sc 
+0x5b3f 022767 call generate_confirm 
+0x5b40 022768 force 17 ,rega 
+0x5b41 022769 call le_fifo_malloc_tx_l2cap_smp 
+0x5b42 022770 setarg smp_pairing_confirm 
+0x5b43 022771 istore 1 ,contw 
+0x5b44 022772 branch store_aes_result 
+:      022775 le_send_smp_pairing_confirm_sc:
+0x5b45 022776 arg mem_le_srand ,contw 
+0x5b46 022777 call generate_random 
+0x5b47 022778 call function_f4_cb 
+0x5b48 022779 force 17 ,rega 
+0x5b49 022780 call le_fifo_malloc_tx_l2cap_smp 
+0x5b4a 022781 setarg smp_pairing_confirm 
+0x5b4b 022782 istore 1 ,contw 
+0x5b4c 022783 branch load_inverse_result 
+:      022787 le_parse_smp_pairing_random:
+0x5b4d 022788 copy contr ,rega 
+0x5b4e 022789 fetch 1 ,mem_le_pairing_mode 
+0x5b4f 022790 bbit1 le_pairing_mode_secure_connect_bit ,le_parse_smp_pairing_random_sc 
+0x5b50 022791 copy rega ,contr 
+0x5b51 022792 call authenticate_rconfirm 
+0x5b52 022793 branch le_parse_smp_pairing_random_success ,zero 
+:      022794 le_send_pairing_confirm_value_failed:
+0x5b53 022795 jam pairing_failed_confirm_value_failed ,mem_le_ll_pairing_fail_reason 
+:      022796 le_send_pairing_failed:
+0x5b54 022797 force 2 ,rega 
+0x5b55 022798 call le_fifo_malloc_tx_l2cap_smp 
+0x5b56 022799 setarg smp_pairing_failed 
+0x5b57 022800 istore 1 ,contw 
+0x5b58 022801 fetch 1 ,mem_le_ll_pairing_fail_reason 
+0x5b59 022802 istore 1 ,contw 
+:      022803 le_parse_smp_pairing_failed:
+0x5b5a 022804 force smp_pairing_timer ,queue 
+0x5b5b 022805 call timer_stop 
+0x5b5c 022806 jam flag_le_pairing_null ,mem_le_pairing_state 
+0x5b5d 022807 jam bt_evt_le_pairing_fail ,mem_fifo_temp 
+0x5b5e 022808 branch ui_ipc_send_event 
+:      022810 le_smp_pairing_fail_reason_not_support_pairing:
+0x5b5f 022811 jam pairing_failed_pairing_not_supported ,mem_le_ll_pairing_fail_reason 
+0x5b60 022812 branch le_send_pairing_failed 
+:      022815 le_parse_smp_pairing_random_sc:
+0x5b61 022816 arg mem_le_mrand ,contw 
+0x5b62 022817 copy rega ,contr 
+0x5b63 022818 call memcpy16 
+0x5b64 022819 fetch 1 ,mem_le_pairing_mode 
+0x5b65 022820 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_random_sc_passkey 
+0x5b66 022821 call function_g2 
+0x5b67 022824 call le_send_smp_pairing_random 
+0x5b68 022825 fetch 1 ,mem_le_pairing_mode 
+0x5b69 022826 rtnne le_pairing_mode_secure_connect_numeric 
+0x5b6a 022827 jam bt_evt_le_gkey_generate ,mem_fifo_temp 
+0x5b6b 022828 branch ui_ipc_send_event 
+:      022830 le_parse_smp_pairing_random_sc_passkey:
+0x5b6c 022831 call function_f4_ca 
+0x5b6d 022832 arg mem_aes_cmac_temp ,contw 
+0x5b6e 022833 call load_inverse_result 
+0x5b6f 022834 arg mem_aes_cmac_temp ,rega 
+0x5b70 022835 arg mem_le_rconfirm ,regb 
+0x5b71 022836 arg 16 ,loopcnt 
+0x5b72 022837 call string_compare 
+0x5b73 022838 nbranch le_send_pairing_confirm_value_failed ,zero 
+0x5b74 022839 branch le_send_smp_pairing_random 
+:      022841 le_parse_smp_pairing_random_success:
+0x5b75 022842 call generate_stk 
+0x5b76 022843 jam bt_evt_le_pairing_success ,mem_fifo_temp 
+0x5b77 022844 call ui_ipc_send_event 
+0x5b78 022845 jam 1 ,mem_ltk_exists 
+0x5b79 022846 jam flag_le_pairing_after_auth ,mem_le_pairing_state 
+:      022848 le_send_smp_pairing_random:
+0x5b7a 022849 force 17 ,rega 
+0x5b7b 022850 call le_fifo_malloc_tx_l2cap_smp 
+0x5b7c 022851 setarg smp_pairing_random 
+0x5b7d 022852 istore 1 ,contw 
+0x5b7e 022853 arg mem_le_srand ,contr 
+0x5b7f 022854 branch memcpy16 
+:      022856 le_parse_smp_encryption_information:
+0x5b80 022857 arg mem_le_peer_ltk ,contw 
+0x5b81 022858 branch memcpy16 
+:      022860 le_send_smp_encryption_information:
+0x5b82 022861 force 17 ,rega 
+0x5b83 022862 call le_fifo_malloc_tx_l2cap_smp 
+0x5b84 022863 setarg smp_encryption_information 
+0x5b85 022864 istore 1 ,contw 
+0x5b86 022865 fetch 1 ,mem_le_configuration 
+0x5b87 022866 bbit1 bit_ble_pairing_fixed_ltk ,le_send_fixed_ltk 
+0x5b88 022867 arg mem_le_ltk ,contr 
+0x5b89 022868 branch memcpy16 
+:      022870 le_send_fixed_ltk:
+0x5b8a 022871 arg mem_le_fixed_ltk ,contr 
+0x5b8b 022872 branch memcpy16 
+:      022875 le_send_smp_master_identification:
+0x5b8c 022876 arg mem_le_ediv ,contw 
+0x5b8d 022877 force 10 ,loopcnt 
+0x5b8e 022878 call generate_random_loop 
+0x5b8f 022879 force 11 ,rega 
+0x5b90 022880 call le_fifo_malloc_tx_l2cap_smp 
+0x5b91 022881 setarg smp_master_identification 
+0x5b92 022882 istore 1 ,contw 
+0x5b93 022883 fetch 2 ,mem_le_ediv 
+0x5b94 022884 istore 2 ,contw 
+0x5b95 022885 fetch 8 ,mem_le_rand 
+0x5b96 022886 istore 8 ,contw 
+0x5b97 022887 rtn 
+:      022889 le_send_smp_identity_information:
+0x5b98 022890 force 17 ,rega 
+0x5b99 022891 call le_fifo_malloc_tx_l2cap_smp 
+0x5b9a 022892 setarg smp_identity_information 
+0x5b9b 022893 istore 1 ,contw 
+0x5b9c 022894 setarg 0 
+0x5b9d 022895 istore 8 ,contw 
+0x5b9e 022896 istore 8 ,contw 
+0x5b9f 022897 rtn 
+:      022900 le_send_smp_identity_address_information:
+0x5ba0 022901 force 8 ,rega 
+0x5ba1 022902 call le_fifo_malloc_tx_l2cap_smp 
+0x5ba2 022903 setarg smp_identity_address_information 
+0x5ba3 022904 istore 1 ,contw 
+0x5ba4 022905 fetch 1 ,mem_le_conn_own_addr_type 
+0x5ba5 022906 istore 1 ,contw 
+0x5ba6 022907 fetch 6 ,mem_le_lap 
+0x5ba7 022908 istore 6 ,contw 
+0x5ba8 022909 rtn 
+:      022912 le_send_pairing_fail_unspecified_reason:
+0x5ba9 022913 jam pairing_failed_unspecified_reason ,mem_le_ll_pairing_fail_reason 
+0x5baa 022914 branch le_send_pairing_failed 
+:      022916 le_check_init_key_distribution:
+0x5bab 022917 fetch 1 ,mem_le_pres_init_key_distribution 
+0x5bac 022918 fetcht 1 ,mem_le_pres_init_key_distribution 
+0x5bad 022919 iand temp ,pdata 
+0x5bae 022920 rtn 
+:      022922 le_parse_smp_identity_information:
+0x5baf 022923 arg mem_le_irk ,contw 
+0x5bb0 022924 call memcpy16 
+0x5bb1 022925 call le_check_init_key_distribution 
+0x5bb2 022926 isolate0 le_initator_irk_bit ,pdata 
+0x5bb3 022927 branch le_send_pairing_fail_unspecified_reason ,true 
+0x5bb4 022928 fetch 1 ,mem_device_option 
+0x5bb5 022929 rtnne dvc_op_module 
+0x5bb6 022930 call le_check_master_addr_type 
+0x5bb7 022931 nrtn user 
+0x5bb8 022932 branch app_ble_store_reconn_info 
+:      022935 le_check_master_addr_type:
+0x5bb9 022936 call disable_user 
+0x5bba 022937 fetch 1 ,mem_le_conn_peer_addr_type 
+0x5bbb 022938 rtneq master_public_addr 
+0x5bbc 022939 fetch 1 ,mem_le_plap + 5 
+0x5bbd 022940 compare 0xc0 ,pdata ,0xc0 
+0x5bbe 022941 rtn true 
+0x5bbf 022942 branch enable_user 
+:      022944 le_parse_smp_identity_address_information:
+0x5bc0 022945 call le_check_init_key_distribution 
+0x5bc1 022946 isolate0 le_initator_irk_bit ,pdata 
+0x5bc2 022947 branch le_send_pairing_fail_unspecified_reason ,true 
+0x5bc3 022948 rtn 
+:      022950 le_parse_smp_master_identification:
+:      022951 le_parse_smp_signing_information:
+:      022952 le_parse_smp_security_request:
+0x5bc4 022953 rtn 
+:      022955 le_parse_smp_public_key:
+0x5bc5 022956 arg mem_le_pubkey_remote_x_256 ,contw 
+0x5bc6 022957 call memcpy64 
+0x5bc7 022958 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+0x5bc8 022959 jam le_sc_stat_receive_public_key ,mem_le_secure_connect_state 
+0x5bc9 022960 rtn 
+:      022962 le_parse_smp_dhkey_check:
+0x5bca 022963 arg mem_sp_confirm_remote ,contw 
+0x5bcb 022964 call memcpy16 
+0x5bcc 022965 jam le_sc_stat_receive_dhkey ,mem_le_secure_connect_state 
+0x5bcd 022966 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+0x5bce 022967 rtn 
+:      022969 le_send_smp_pairing_public_key:
+0x5bcf 022970 force 65 ,rega 
+0x5bd0 022971 call le_fifo_malloc_tx_l2cap_smp 
+0x5bd1 022972 setarg smp_pairing_public_key 
+0x5bd2 022973 istore 1 ,contw 
+0x5bd3 022974 arg mem_le_pubkey_local_x_256 ,contr 
+0x5bd4 022975 branch memcpy64 
+:      022977 le_send_smp_pairing_dhkey_check:
+0x5bd5 022978 call function_f6_eb 
+0x5bd6 022979 force 17 ,rega 
+0x5bd7 022980 call le_fifo_malloc_tx_l2cap_smp 
+0x5bd8 022981 setarg smp_pairing_dhkey_check 
+0x5bd9 022982 istore 1 ,contw 
+0x5bda 022983 branch load_inverse_result 
+:      022986 le_check_paring_time:
+0x5bdb 022987 fetch 1 ,mem_le_pairing_state 
+0x5bdc 022988 rtneq flag_le_pairing_end 
+0x5bdd 022989 arg flag_le_pairing_rcv_pairing_req ,temp 
+0x5bde 022990 isub temp ,null 
+0x5bdf 022991 nrtn positive 
+0x5be0 022992 arg smp_pairing_timer ,queue 
+0x5be1 022993 call timer_check 
+0x5be2 022994 nrtn blank 
+0x5be3 022995 branch le_send_pairing_fail_unspecified_reason 
+:      022997 le_pairing_sm:
+0x5be4 022998 bpatchx patch2f_0 ,mem_patch2f 
+0x5be5 022999 fetch 1 ,mem_le_pairing_state 
+0x5be6 023000 beq flag_le_pairing_null ,le_pairing_sm_null 
+0x5be7 023001 beq flag_le_pairing_start ,le_pairing_sm_start 
+0x5be8 023002 beq flag_le_pairing_send_recurity_req ,le_pairing_sm_send_sec_req 
+0x5be9 023003 beq flag_le_pairing_rcv_pairing_req ,le_pairing_sm_rcv_pairing_req 
+0x5bea 023004 beq flag_le_pairing_after_auth ,le_pairing_sm_after_auth 
+0x5beb 023005 beq flag_le_paring_send_enc_information ,le_pairng_sm_send_enc_information 
+0x5bec 023006 beq flag_le_paring_send_master_identification ,le_pairng_sm_send_master_indentification 
+0x5bed 023007 beq flag_le_paring_send_indentity_information ,le_pairng_sm_send_indentity_information 
+0x5bee 023008 rtn 
+:      023010 le_pairing_sm_null:
+:      023011 le_pairing_sm_send_sec_req:
+0x5bef 023012 fetch 1 ,mem_le_enc_state 
+0x5bf0 023013 rtnne flag_le_send_start_enc_rsp 
+0x5bf1 023014 jam flag_le_enc_end ,mem_le_enc_state 
+0x5bf2 023015 jam flag_le_pairing_end ,mem_le_pairing_state 
+0x5bf3 023016 jam bt_evt_le_reconnect_complete ,mem_fifo_temp 
+0x5bf4 023017 branch ui_ipc_send_event 
+:      023020 le_pairing_sm_start:
+0x5bf5 023021 jam flag_le_pairing_send_recurity_req ,mem_le_pairing_state 
+0x5bf6 023022 branch le_send_smp_security_request 
+:      023024 le_pairing_sm_rcv_pairing_req:
+0x5bf7 023025 jam flag_le_pairing_auth ,mem_le_pairing_state 
+0x5bf8 023026 setarg timer_smp_pairing_timeout 
+0x5bf9 023027 arg smp_pairing_timer ,queue 
+0x5bfa 023028 branch timer_init 
+:      023030 le_pairing_sm_after_auth:
+0x5bfb 023031 fetch 1 ,mem_le_enc_state 
+0x5bfc 023032 beq flag_le_send_start_enc_rsp ,le_pairing_sm_after_auth_start_enc 
+0x5bfd 023033 rtn 
+:      023035 le_pairing_sm_after_auth_start_enc:
+0x5bfe 023036 jam flag_le_paring_send_enc_information ,mem_le_pairing_state 
+0x5bff 023037 jam bt_evt_le_enc_info ,mem_fifo_temp 
+0x5c00 023038 call ui_ipc_send_event 
+0x5c01 023039 call le_send_smp_encryption_information 
+0x5c02 023040 fetch 1 ,mem_device_option 
+0x5c03 023041 rtnne dvc_op_module 
+0x5c04 023042 call le_check_master_addr_type 
+0x5c05 023043 rtn user 
+0x5c06 023044 branch app_ble_store_reconn_info 
+:      023047 le_pairng_sm_send_enc_information:
+0x5c07 023048 jam flag_le_paring_send_master_identification ,mem_le_pairing_state 
+0x5c08 023049 branch le_send_smp_master_identification 
+:      023051 le_pairng_sm_send_master_indentification:
+0x5c09 023052 fetch 1 ,mem_le_preq_resp_key_distribution 
+0x5c0a 023053 fetcht 1 ,mem_le_pres_resp_key_distribution 
+0x5c0b 023054 iand temp ,pdata 
+0x5c0c 023055 isolate0 le_initator_irk_bit ,pdata 
+0x5c0d 023056 branch le_parse_start_enc_rsp_after_auth_end ,true 
+0x5c0e 023057 jam flag_le_paring_send_indentity_information ,mem_le_pairing_state 
+0x5c0f 023058 branch le_send_smp_identity_information 
+:      023060 le_pairng_sm_send_indentity_information:
+0x5c10 023061 call le_send_smp_identity_address_information 
+0x5c11 023062 branch le_parse_start_enc_rsp_after_auth_end 
+:      023065 le_parse_start_enc_rsp_after_auth_end:
+0x5c12 023066 force smp_pairing_timer ,queue 
+0x5c13 023067 call timer_stop 
+0x5c14 023068 jam flag_le_enc_end ,mem_le_enc_state 
+0x5c15 023069 jam flag_le_pairing_end ,mem_le_pairing_state 
+0x5c16 023070 jam bt_evt_le_pairing_complete ,mem_fifo_temp 
+0x5c17 023071 branch ui_ipc_send_event 
+:      023075 le_secure_connect_sm:
+0x5c18 023076 bpatchx patch2f_1 ,mem_patch2f 
+0x5c19 023077 fetch 1 ,mem_le_pairing_mode 
+0x5c1a 023078 rtnbit0 le_pairing_mode_secure_connect_bit 
+0x5c1b 023079 fetch 1 ,mem_le_secure_connect_flag 
+0x5c1c 023080 rtnne le_sp_flag_commit_256 
+0x5c1d 023081 jam sp_flag_standby ,mem_le_secure_connect_flag 
+0x5c1e 023082 fetch 1 ,mem_le_secure_connect_state 
+0x5c1f 023083 beq le_sc_stat_receive_public_key ,le_sc_sm_receive_public_key 
+0x5c20 023084 beq le_sc_stat_wait_send_public_key ,le_sc_sm_wait_send_public_key 
+0x5c21 023085 beq le_sc_stat_send_public_key ,le_sc_sm_send_public_key 
+0x5c22 023086 beq le_sc_stat_receive_dhkey ,le_sc_sm_receive_dhkey 
+0x5c23 023087 beq le_sc_stat_wait_confirm_gkey ,le_sc_sm_wait_confirm_gkey 
+0x5c24 023088 beq le_sc_stat_passkey_wait_confirm ,le_sc_sm_passkey_wait_confirm 
+0x5c25 023089 rtn 
+:      023092 le_sc_sm_passkey_wait_confirm:
+0x5c26 023093 fetch 1 ,mem_authentication_passkey_times 
+0x5c27 023094 copy pdata ,queue 
+0x5c28 023095 increase 1 ,pdata 
+0x5c29 023096 store 1 ,mem_authentication_passkey_times 
+0x5c2a 023097 fetch 4 ,mem_le_tk 
+0x5c2b 023098 qisolate1 pdata 
+0x5c2c 023099 setarg 0x80 
+0x5c2d 023100 setflag true ,0 ,pdata 
+0x5c2e 023101 store 1 ,mem_passkey_1bit 
+0x5c2f 023102 branch le_sc_sm_ready_send_pairing_confirm 
+:      023104 le_sc_sm_wait_confirm_gkey:
+0x5c30 023105 fetch 1 ,mem_le_sc_confirm_gkey_flag 
+0x5c31 023106 jam flag_le_sc_confrim_null ,mem_le_sc_confirm_gkey_flag 
+0x5c32 023107 beq flag_le_sc_confrim_gkey_ok ,le_sc_confirm_gkey_ok 
+0x5c33 023108 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+0x5c34 023109 rtn 
+:      023111 le_sc_confirm_gkey_ok:
+0x5c35 023112 jam bt_evt_le_pairing_success ,mem_fifo_temp 
+0x5c36 023113 call ui_ipc_send_event 
+0x5c37 023114 jam flag_le_pairing_after_auth ,mem_le_pairing_state 
+0x5c38 023115 branch le_send_smp_pairing_dhkey_check 
+:      023117 le_sc_sm_receive_dhkey:
+0x5c39 023118 fetch 1 ,mem_sp_dhkey_invalid 
+0x5c3a 023119 beq sp_key_valid_256 ,le_dhkey_ready 
+0x5c3b 023120 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+0x5c3c 023121 rtn 
+:      023123 le_dhkey_ready:
+0x5c3d 023124 call function_f5 
+0x5c3e 023128 fetch 1 ,mem_le_pairing_mode 
+0x5c3f 023129 beq le_pairing_mode_secure_connect_passkey ,le_dhkey_ready_common 
+0x5c40 023130 call le_set_tk_0 
+:      023131 le_dhkey_ready_common:
+0x5c41 023132 call function_f6_ea 
+0x5c42 023133 arg mem_aes_cmac_temp ,rega 
+0x5c43 023134 arg mem_sp_confirm_remote ,regb 
+0x5c44 023135 arg 16 ,loopcnt 
+0x5c45 023136 call string_compare 
+0x5c46 023137 branch le_dhkey_check_ok ,zero 
+:      023138 le_dhkey_check_fail:
+0x5c47 023139 jam pairing_failed_dhkey_check_failed ,mem_le_ll_pairing_fail_reason 
+0x5c48 023140 branch le_send_pairing_failed 
+:      023143 le_dhkey_check_ok:
+0x5c49 023144 call sp_calc_check_publickey_256 
+0x5c4a 023145 nbranch le_dhkey_check_fail ,zero 
+0x5c4b 023146 jam 1 ,mem_ltk_exists 
+0x5c4c 023147 fetch 1 ,mem_le_pairing_mode 
+0x5c4d 023148 beq le_pairing_mode_secure_connect_justwork ,le_sc_confirm_gkey_ok 
+0x5c4e 023149 beq le_pairing_mode_secure_connect_passkey ,le_sc_confirm_gkey_ok 
+0x5c4f 023150 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+0x5c50 023151 jam le_sc_stat_wait_confirm_gkey ,mem_le_secure_connect_state 
+0x5c51 023152 rtn 
+:      023154 le_sc_sm_send_public_key:
+0x5c52 023155 fetch 1 ,mem_le_pairing_mode 
+0x5c53 023156 beq le_pairing_mode_secure_connect_passkey ,le_sc_sm_send_public_key_passkey 
+0x5c54 023157 jam 0 ,mem_passkey_1bit 
+:      023158 le_sc_sm_ready_send_pairing_confirm:
+0x5c55 023159 branch le_send_smp_pairing_confirm 
+:      023161 le_sc_sm_send_public_key_passkey:
+0x5c56 023165 jam 0 ,mem_authentication_passkey_times 
+0x5c57 023166 branch le_parse_smp_pairing_req_passkey 
+:      023169 le_sc_sm_receive_public_key:
+0x5c58 023170 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+0x5c59 023171 fetch 1 ,mem_le_sc_local_key_invalid 
+0x5c5a 023172 beq sp_key_valid_256 ,le_public_key_ready 
+0x5c5b 023174 rtn 
+:      023176 le_public_key_ready:
+0x5c5c 023177 jam le_sc_stat_wait_send_public_key ,mem_le_secure_connect_state 
+0x5c5d 023178 jam sp_key_invalid ,mem_sp_dhkey_invalid 
+0x5c5e 023179 branch sp_dhkey_calc_256 
+:      023181 le_sc_sm_wait_send_public_key:
+0x5c5f 023182 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+0x5c60 023183 jam le_sc_stat_send_public_key ,mem_le_secure_connect_state 
+0x5c61 023184 branch le_send_smp_pairing_public_key 
+:      023188 le_fifo_malloc_tx_l2cap_smp:
+0x5c62 023189 force le_l2cap_cid_smp ,regb 
+0x5c63 023190 branch le_fifo_malloc_tx_l2cap 
+:      023194 le_parse_ll:
+0x5c64 023195 fetch 1 ,mem_le_rxbuf + 2 
+0x5c65 023196 beq ll_connection_update_req ,le_parse_connection_update_req 
+0x5c66 023197 beq ll_channel_map_req ,le_parse_channel_map_req 
+0x5c67 023198 beq ll_terminate_ind ,le_parse_terminate_ind 
+0x5c68 023199 beq ll_enc_req ,le_parse_enc_req 
+0x5c69 023200 beq ll_enc_rsp ,le_parse_enc_rsp 
+0x5c6a 023201 beq ll_start_enc_req ,le_parse_start_enc_req 
+0x5c6b 023202 beq ll_start_enc_rsp ,le_parse_start_enc_rsp 
+0x5c6c 023203 beq ll_unknown_rsp ,le_parse_unknown_rsp 
+0x5c6d 023204 beq ll_feature_req ,le_parse_feature_req 
+0x5c6e 023205 beq ll_feature_rsp ,le_parse_feature_rsp 
+0x5c6f 023206 beq ll_pause_enc_req ,le_parse_pause_enc_req 
+0x5c70 023207 beq ll_pause_enc_rsp ,le_parse_pause_enc_rsp 
+0x5c71 023208 beq ll_version_ind ,le_parse_version_ind 
+0x5c72 023209 beq ll_reject_ind ,le_parse_reject_ind 
+0x5c73 023210 beq ll_ping_req ,le_parse_ping_req 
+0x5c74 023211 beq ll_ping_rsp ,le_parse_ping_rsp 
+0x5c75 023212 arg 2 ,rega 
+0x5c76 023213 arg ll_unknown_rsp ,regb 
+0x5c77 023214 call le_fifo_malloc_tx_ll 
+0x5c78 023215 fetch 1 ,mem_le_rxbuf + 2 
+0x5c79 023216 istore 1 ,contw 
+0x5c7a 023217 rtn 
+:      023220 le_parse_connection_update_req:
+0x5c7b 023221 ifetch 9 ,contr 
+0x5c7c 023222 store 9 ,mem_le_new_param 
+0x5c7d 023223 ifetch 2 ,contr 
+0x5c7e 023224 store 2 ,mem_le_instant 
+0x5c7f 023225 fetch 1 ,mem_le_state 
+0x5c80 023226 set1 lestate_update_param ,pdata 
+0x5c81 023227 store 1 ,mem_le_state 
+0x5c82 023228 rtn 
+:      023230 le_parse_channel_map_req:
+0x5c83 023231 ifetch 5 ,contr 
+0x5c84 023232 store 5 ,mem_le_new_map 
+0x5c85 023233 ifetch 2 ,contr 
+0x5c86 023234 store 2 ,mem_le_instant 
+0x5c87 023235 fetcht 2 ,mem_le_event_count 
+0x5c88 023236 isub temp ,null 
+0x5c89 023237 nbranch le_parse_terminate_ind ,positive 
+0x5c8a 023238 fetch 1 ,mem_le_state 
+0x5c8b 023239 set1 lestate_update_map ,pdata 
+0x5c8c 023240 store 1 ,mem_le_state 
+0x5c8d 023241 rtn 
+:      023244 le_parse_terminate_ind:
+0x5c8e 023245 setarg 20 
+0x5c8f 023246 store 2 ,mem_le_superto 
+0x5c90 023247 store 2 ,mem_le_init_superto 
+0x5c91 023248 rtn 
+:      023250 le_send_terminate_ind_user_terminated:
+0x5c92 023251 arg error_remote_user_terminated_connection ,regc 
+:      023254 le_send_terminate_ind:
+0x5c93 023255 arg 2 ,rega 
+0x5c94 023256 arg ll_terminate_ind ,regb 
+0x5c95 023257 call le_fifo_malloc_tx_ll 
+0x5c96 023258 copy regc ,pdata 
+0x5c97 023259 istore 1 ,contw 
+0x5c98 023260 rtn 
+:      023262 le_parse_feature_req:
+:      023264 le_send_feature_rsp:
+0x5c99 023265 arg 9 ,rega 
+0x5c9a 023266 arg ll_feature_rsp ,regb 
+0x5c9b 023267 call le_fifo_malloc_tx_ll 
+0x5c9c 023268 setarg param_le_features 
+0x5c9d 023269 istore 8 ,contw 
+0x5c9e 023270 rtn 
+:      023273 le_parse_version_ind:
+0x5c9f 023274 rtn master 
+:      023275 le_send_version_ind:
+0x5ca0 023276 arg 6 ,rega 
+0x5ca1 023277 arg ll_version_ind ,regb 
+0x5ca2 023278 call le_fifo_malloc_tx_ll 
+0x5ca3 023279 fetch 5 ,mem_lmp_version 
+0x5ca4 023280 istore 5 ,contw 
+0x5ca5 023281 rtn 
+:      023284 le_parse_ping_req:
+0x5ca6 023285 arg ll_ping_rsp ,regb 
+0x5ca7 023286 branch le_send_ll_one_lenth 
+:      023289 le_send_ll_one_lenth:
+0x5ca8 023290 arg 1 ,rega 
+0x5ca9 023291 branch le_fifo_malloc_tx_ll 
+:      023294 le_parse_enc_req:
+0x5caa 023295 ifetch 8 ,contr 
+0x5cab 023296 store 8 ,mem_le_rand 
+0x5cac 023297 ifetch 2 ,contr 
+0x5cad 023298 store 2 ,mem_le_ediv 
+0x5cae 023299 ifetch 8 ,contr 
+0x5caf 023300 store 8 ,mem_le_skdm 
+0x5cb0 023301 ifetch 4 ,contr 
+0x5cb1 023302 store 4 ,mem_le_ivm 
+0x5cb2 023303 call le_send_enc_rsp 
+0x5cb3 023304 bpatchx patch2f_2 ,mem_patch2f 
+0x5cb4 023305 fetch 1 ,mem_le_pairing_state 
+0x5cb5 023306 beq flag_le_pairing_after_auth ,le_parse_enc_req_after_auth 
+0x5cb6 023307 fetch 1 ,mem_le_configuration 
+0x5cb7 023308 bbit1 bit_ble_pairing_fixed_ltk ,le_parse_enc_req_fixed_ltk 
+0x5cb8 023309 fetch 1 ,mem_nv_data_number 
+0x5cb9 023310 ncall load_device_list_mode_4 ,blank 
+0x5cba 023311 fetch 1 ,mem_ltk_exists 
+0x5cbb 023312 beq 0 ,le_ltk_lost 
+:      023313 le_parse_enc_req_after_auth:
+0x5cbc 023314 jam flag_le_rcv_enc_start ,mem_le_enc_state 
+0x5cbd 023315 call le_send_start_enc_req 
+0x5cbe 023316 branch generate_sk 
+:      023318 le_parse_enc_req_fixed_ltk:
+0x5cbf 023319 jam 1 ,mem_ltk_exists 
+0x5cc0 023320 arg mem_le_fixed_ltk ,contr 
+0x5cc1 023321 arg mem_le_ltk ,contw 
+0x5cc2 023322 call memcpy16 
+0x5cc3 023323 branch le_parse_enc_req_after_auth 
+:      023326 le_ltk_lost:
+0x5cc4 023327 bpatchx patch2f_3 ,mem_patch2f 
+0x5cc5 023328 jam flag_le_enc_null ,mem_le_enc_state 
+0x5cc6 023329 jam flag_le_enc_null ,mem_le_pairing_state 
+0x5cc7 023330 jam bt_evt_le_ltk_lost ,mem_fifo_temp 
+0x5cc8 023331 branch ui_ipc_send_event 
+:      023333 le_send_reject_ind:
+0x5cc9 023334 arg 2 ,rega 
+0x5cca 023335 arg ll_reject_ind ,regb 
+0x5ccb 023336 call le_fifo_malloc_tx_ll 
+0x5ccc 023337 setarg le_err_pin_or_key_missing 
+0x5ccd 023338 istore 1 ,contw 
+0x5cce 023339 rtn 
+:      023341 le_send_enc_rsp:
+0x5ccf 023342 arg mem_le_skds ,contw 
+0x5cd0 023343 force 8 ,loopcnt 
+0x5cd1 023344 call generate_random_loop 
+0x5cd2 023345 arg mem_le_ivs ,contw 
+0x5cd3 023346 force 4 ,loopcnt 
+0x5cd4 023347 call generate_random_loop 
+0x5cd5 023348 arg 13 ,rega 
+0x5cd6 023349 arg ll_enc_rsp ,regb 
+0x5cd7 023350 call le_fifo_malloc_tx_ll 
+0x5cd8 023351 fetch 8 ,mem_le_skds 
+0x5cd9 023352 istore 8 ,contw 
+0x5cda 023353 fetch 4 ,mem_le_ivs 
+0x5cdb 023354 istore 4 ,contw 
+0x5cdc 023355 rtn 
+:      023357 le_send_start_enc_req:
+0x5cdd 023358 arg ll_start_enc_req ,regb 
+0x5cde 023359 branch le_send_ll_one_lenth 
+:      023361 le_send_start_enc_rsp:
+0x5cdf 023362 arg ll_start_enc_rsp ,regb 
+0x5ce0 023363 branch le_send_ll_one_lenth 
+:      023366 le_parse_enc_rsp:
+0x5ce1 023367 ifetch 8 ,contr 
+0x5ce2 023368 store 8 ,mem_le_skds 
+0x5ce3 023369 ifetch 4 ,contr 
+0x5ce4 023370 store 4 ,mem_le_ivs 
+0x5ce5 023371 branch generate_sk 
+:      023373 le_parse_start_enc_req:
+0x5ce6 023374 fetch 1 ,mem_le_state 
+0x5ce7 023375 set1 lestate_encryption ,pdata 
+0x5ce8 023376 store 1 ,mem_le_state 
+0x5ce9 023377 rtn 
+:      023379 le_parse_start_enc_rsp:
+0x5cea 023380 rtn master 
+0x5ceb 023381 jam bt_evt_le_start_enc ,mem_fifo_temp 
+0x5cec 023382 call ui_ipc_send_event 
+0x5ced 023383 jam flag_le_send_start_enc_rsp ,mem_le_enc_state 
+0x5cee 023384 branch le_send_start_enc_rsp 
+:      023386 le_parse_pause_enc_req:
+0x5cef 023387 jam flag_le_enc_pause ,mem_le_enc_state 
+0x5cf0 023388 call le_send_pause_enc_rsp 
+0x5cf1 023389 jam bt_evt_le_pause_enc ,mem_fifo_temp 
+0x5cf2 023390 branch ui_ipc_send_event 
+:      023392 le_send_pause_enc_rsp:
+0x5cf3 023393 arg ll_pause_enc_rsp ,regb 
+0x5cf4 023394 branch le_send_ll_one_lenth 
+:      023397 le_parse_feature_rsp:
+:      023398 le_parse_unknown_rsp:
+:      023399 le_parse_pause_enc_rsp:
+:      023400 le_parse_reject_ind:
+:      023401 le_parse_ping_rsp:
+0x5cf5 023402 rtn 
+:      023409 init_lmp:
+0x5cf6 023410 rtn wake 
+:      023411 init_lmp_work:
+0x5cf7 023412 bpatchx patch2f_4 ,mem_patch2f 
+0x5cf8 023413 setarg 0 
+0x5cf9 023414 store 1 ,mem_lmp_to_send 
+0x5cfa 023415 store 1 ,mem_conn_sm 
+0x5cfb 023416 store 1 ,mem_lmo_opcode1 
+0x5cfc 023417 store 1 ,mem_lmo_opcode2 
+0x5cfd 023418 store 1 ,mem_esco_addr 
+0x5cfe 023419 store 1 ,mem_auth_enable 
+0x5cff 023420 store 1 ,mem_connection_options 
+0x5d00 023421 store 1 ,mem_pairing_auth 
+0x5d01 023422 jam switch_flag_init ,mem_switch_flag 
+0x5d02 023423 jam 0 ,mem_switch_fail_master_count 
+0x5d03 023424 jam null_encryp ,mem_wait_encryption 
+:      023425 init_lmp_reinit:
+0x5d04 023426 jam 0 ,mem_pairing_auth 
+0x5d05 023427 jam 0 ,mem_sp_localsm 
+0x5d06 023428 jam 0 ,mem_lmp_conn_state 
+:      023430 parse_rx_done:
+0x5d07 023431 rtn 
+:      023433 parse_lmp:
+0x5d08 023434 bpatchx patch2f_5 ,mem_patch2f 
+0x5d09 023435 call setlocalsm_master ,master 
+0x5d0a 023436 ncall setlocalsm_slave ,master 
+0x5d0b 023437 call lmo_fifo_check 
+0x5d0c 023438 nrtn blank 
+0x5d0d 023439 fetch 1 ,mem_state_map 
+0x5d0e 023440 rtnbit0 smap_rxlmp 
+0x5d0f 023441 set0 smap_rxlmp ,pdata 
+0x5d10 023442 set0 mark_rxbuf_inuse ,mark 
+0x5d11 023443 store 1 ,mem_state_map 
+0x5d12 023444 fetch 1 ,mem_rxbuf 
+0x5d13 023445 fetcht 1 ,mem_state_map 
+0x5d14 023446 isolate1 smap_lmptidinit ,pdata 
+0x5d15 023447 setflag true ,smap_lmptid ,temp 
+0x5d16 023448 storet 1 ,mem_state_map 
+0x5d17 023449 and_into 0x2 ,temp 
+0x5d18 023450 storet 1 ,mem_lmo_tid2 
+0x5d19 023451 fetcht 1 ,mem_state_map 
+0x5d1a 023452 rshift pdata ,pdata 
+0x5d1b 023453 store 1 ,mem_lmi_opcode2 
+0x5d1c 023454 bpatchx patch2f_6 ,mem_patch2f 
+0x5d1d 023455 fetch 1 ,mem_lmi_opcode2 
+0x5d1e 023456 beq lmp_escape ,parse_lmp_escape 
+0x5d1f 023457 beq lmp_accepted ,parse_lmp_accepted 
+0x5d20 023458 beq lmp_not_accepted ,parse_lmp_not_accepted 
+0x5d21 023459 beq lmp_set_afh ,parse_lmp_set_afh 
+0x5d22 023460 beq lmp_clkoffset_req ,parse_lmp_clkoffset_req 
+0x5d23 023461 beq lmp_encryption_mode_req ,parse_lmp_encryption_mode_req 
+0x5d24 023462 beq lmp_encryption_key_size_req ,parse_lmp_crypt_key 
+0x5d25 023463 beq lmp_auto_rate ,parse_lmp_auto_rate 
+0x5d26 023464 beq lmp_test_control ,parse_lmp_test_control 
+0x5d27 023465 beq lmp_test_activate ,parse_lmp_test_activate 
+0x5d28 023466 beq lmp_setup_complete ,parse_lmp_setup_complete 
+0x5d29 023467 beq lmp_supervision_timeout ,parse_lmp_supervision_timeout 
+0x5d2a 023468 beq lmp_features_req ,parse_lmp_features_req 
+0x5d2b 023469 beq lmp_host_connection_req ,parse_lmp_conn_req 
+0x5d2c 023470 beq lmp_version_req ,parse_lmp_version_req 
+0x5d2d 023471 beq lmp_version_res ,parse_lmp_version_res 
+0x5d2e 023472 beq lmp_detach ,parse_lmp_detach 
+0x5d2f 023473 beq lmp_max_slot ,parse_lmp_max_slot 
+0x5d30 023474 beq lmp_max_slot_req ,parse_lmp_max_slot_req 
+0x5d31 023475 beq lmp_name_req ,parse_lmp_name_req 
+0x5d32 023476 beq lmp_name_res ,parse_lmp_name_res 
+0x5d33 023477 beq lmp_features_res ,parse_lmp_features_res 
+0x5d34 023478 beq lmp_comb_key ,parse_lmp_comb_key 
+0x5d35 023479 beq lmp_au_rand ,parse_lmp_au_rand 
+0x5d36 023480 beq lmp_in_rand ,parse_lmp_in_rand 
+0x5d37 023481 beq lmp_sres ,parse_lmp_sres 
+0x5d38 023482 beq lmp_incr_power_req ,parse_lmp_incr_power 
+0x5d39 023483 beq lmp_decr_power_req ,parse_lmp_decr_power 
+0x5d3a 023484 beq lmp_max_power ,parse_lmp_max_power 
+0x5d3b 023485 beq lmp_min_power ,parse_lmp_min_power 
+0x5d3c 023486 beq lmp_page_mode_req ,parse_lmp_page_mode_req 
+0x5d3d 023487 beq lmp_page_scan_mode_req ,parse_lmp_page_scan_mode_req 
+0x5d3e 023488 beq lmp_preferred_rate ,parse_lmp_preferred_rate 
+0x5d3f 023489 beq lmp_slot_offset ,parse_lmp_slot_offset 
+0x5d40 023490 beq lmp_sniff_req ,parse_lmp_sniff_req 
+0x5d41 023491 beq lmp_start_encryption_req ,parse_lmp_start_encryption_req 
+0x5d42 023492 beq lmp_stop_encryption_req ,parse_lmp_stop_encryption_req 
+0x5d43 023493 beq lmp_switch_req ,parse_lmp_switch_req 
+0x5d44 023494 beq lmp_temp_rand ,parse_lmp_temp_rand 
+0x5d45 023495 beq lmp_temp_key ,parse_lmp_temp_key 
+0x5d46 023496 beq lmp_timing_accuracy_req ,parse_lmp_timing_accuracy_req 
+0x5d47 023497 beq lmp_timing_accuracy_res ,parse_lmp_timing_accuracy_res 
+0x5d48 023498 beq lmp_unit_key ,parse_lmp_unit_key 
+0x5d49 023499 beq lmp_unsniff_req ,parse_lmp_unsniff_req 
+0x5d4a 023500 beq lmp_use_semi_permanent_key ,parse_lmp_use_semi_permanend_key 
+0x5d4b 023501 beq lmp_encapsulated_header ,parse_lmp_encapsulated_header 
+0x5d4c 023502 beq lmp_encapsulated_payload ,parse_lmp_encapsulated_payload 
+0x5d4d 023503 beq lmp_simple_pairing_confirm ,parse_simple_pairing_confirm 
+0x5d4e 023504 beq lmp_simple_pairing_number ,parse_lmp_simple_pairing_number 
+0x5d4f 023505 beq lmp_dhkey_check ,parse_dhkey_check 
+0x5d50 023506 beq lmp_clkoffset_res ,parse_lmp_clkoffset_res 
+0x5d51 023507 beq lmp_enc_key_size_mask_req ,parse_enc_key_size_mask_req 
+:      023510 reject_unknown_packet:
+0x5d52 023511 jam unknown_lmp_pdu ,mem_lmo_reason2 
+:      023512 reject_lmp_packet:
+0x5d53 023513 jam lmp_not_accepted ,mem_lmo_opcode2 
+0x5d54 023514 rtn 
+:      023516 parse_lmp_clkoffset_req:
+0x5d55 023517 jam lmp_clkoffset_res ,mem_lmo_opcode2 
+0x5d56 023518 rtn 
+:      023520 parse_enc_key_size_mask_req:
+0x5d57 023521 jam lmp_enc_key_size_mask_res ,mem_lmo_opcode2 
+0x5d58 023522 rtn 
+:      023524 parse_lmp_set_afh:
+0x5d59 023525 fetch 4 ,mem_rxbuf + 1 
+0x5d5a 023526 lshift pdata ,pdata 
+0x5d5b 023527 store 4 ,mem_afh_instant 
+0x5d5c 023528 fetch 1 ,mem_rxbuf + 5 
+0x5d5d 023529 store 1 ,mem_afh_new_mod 
+0x5d5e 023530 fetch 5 ,mem_rxbuf + 6 
+0x5d5f 023531 store 5 ,mem_afh_map_new 
+0x5d60 023532 fetch 5 ,mem_rxbuf + 11 
+0x5d61 023533 istore 5 ,contw 
+0x5d62 023534 fetch 1 ,mem_mode 
+0x5d63 023535 set1 afh_change ,pdata 
+0x5d64 023536 store 1 ,mem_mode 
+0x5d65 023537 rtn 
+:      023538 parse_lmp_escape:
+0x5d66 023539 bpatchx patch2f_7 ,mem_patch2f 
+0x5d67 023540 fetch 1 ,mem_rxbuf + 1 
+0x5d68 023541 set1 7 ,pdata 
+0x5d69 023542 store 1 ,mem_lmi_opcode2 
+0x5d6a 023543 beq lmp_ext_accepted ,parse_lmpext_accepted 
+0x5d6b 023544 beq lmp_not_accepted_ext ,parse_lmpext_not_accepted 
+0x5d6c 023545 beq lmp_sniff_subrating_req ,parse_lmp_sniff_subrating_req 
+0x5d6d 023546 beq lmp_sniff_subrating_res ,parse_lmp_sniff_subrating_res 
+0x5d6e 023547 beq lmp_packet_type_table_req ,parse_lmpext_packet_type_table_req 
+0x5d6f 023548 beq lmp_ext_features_req ,parse_lmpext_features_req 
+0x5d70 023549 beq lmp_ext_features_res ,parse_lmpext_features_res 
+0x5d71 023550 beq lmp_ext_chn_classification_req ,parse_lmpext_chn_classification_req 
+0x5d72 023551 beq lmp_pause_encryption_req ,parse_lmpext_pause_encrypt 
+0x5d73 023552 beq lmp_resume_encryption_req ,parse_lmpext_resume_encrypt 
+0x5d74 023553 beq lmp_io_cap_req ,parse_lmpext_iocap_req 
+0x5d75 023554 beq lmp_io_cap_res ,parse_lmpext_iocap_res 
+0x5d76 023555 rtneq lmp_ext_features_res 
+:      023558 reject_unknown_ext_packet:
+0x5d77 023559 jam lmp_not_accepted_ext ,mem_lmo_opcode2 
+0x5d78 023560 jam unknown_lmp_pdu ,mem_lmo_reason2 
+0x5d79 023562 rtn 
+:      023563 parse_lmpext_chn_classification_req:
+0x5d7a 023564 jam lmp_not_accepted_ext ,mem_lmo_opcode2 
+0x5d7b 023565 jam not_support_chn_classification ,mem_lmo_reason2 
+0x5d7c 023566 rtn 
+:      023568 parse_lmpext_iocap_req:
+0x5d7d 023569 call iocap_lmpext_load 
+0x5d7e 023570 jam lmp_io_cap_res ,mem_lmo_opcode2 
+0x5d7f 023571 rtn 
+:      023573 parse_lmpext_iocap_res:
+0x5d80 023574 call iocap_lmpext_load 
+0x5d81 023575 branch iocap_lmpext_common 
+:      023577 iocap_lmpext_load:
+0x5d82 023578 arg mem_sp_iocap_remote ,contw 
+0x5d83 023579 fetch 3 ,mem_rxbuf + 2 
+0x5d84 023580 istore 3 ,contw 
+0x5d85 023581 rtn 
+:      023583 iocap_lmpext_common:
+0x5d86 023584 branch master_set_mem_master_sp_flag ,true 
+0x5d87 023585 rtn 
+:      023586 parse_lmpext_accepted:
+0x5d88 023587 fetch 1 ,mem_rxbuf + 3 
+0x5d89 023588 set1 7 ,pdata 
+0x5d8a 023589 store 1 ,mem_lmi_accepted_opcode 
+0x5d8b 023590 beq lmp_packet_type_table_req ,parse_lmpext_accepted_ptt 
+0x5d8c 023591 rtn 
+:      023594 parse_lmpext_not_accepted:
+0x5d8d 023595 fetch 1 ,mem_rxbuf + 3 
+0x5d8e 023596 set1 7 ,pdata 
+0x5d8f 023597 store 1 ,mem_lmi_accepted_opcode 
+0x5d90 023598 beq lmp_packet_type_table_req ,parse_lmpext_not_accepted_ptt 
+0x5d91 023599 rtn 
+:      023601 parse_lmpext_accepted_ptt:
+0x5d92 023602 fetch 1 ,mem_ptt 
+0x5d93 023603 fetcht 1 ,mem_state_map 
+0x5d94 023604 nsetflag blank ,smap_edr ,temp 
+0x5d95 023605 storet 1 ,mem_state_map 
+:      023606 parse_lmpext_not_accepted_ptt:
+0x5d96 023607 fetch 1 ,mem_state 
+0x5d97 023608 rtnbit0 state_init_seq 
+0x5d98 023609 set0 state_init_seq ,pdata 
+0x5d99 023610 store 1 ,mem_state 
+0x5d9a 023611 fetch 1 ,mem_auth_enable 
+0x5d9b 023612 nrtn blank 
+0x5d9c 023613 jam lmp_setup_complete ,mem_lmo_opcode2 
+0x5d9d 023614 rtn 
+:      023616 parse_lmpext_pause_encrypt:
+0x5d9e 023617 nbranch parse_lmpext_pause_encrypt_slave ,master 
+0x5d9f 023618 jam lmp_stop_encryption_req ,mem_lmo_opcode2 
+0x5da0 023619 branch tid_reply 
+:      023621 parse_lmpext_pause_encrypt_slave:
+0x5da1 023622 jam lmp_pause_encryption_req ,mem_lmo_opcode2 
+0x5da2 023623 rtn 
+:      023625 parse_lmpext_resume_encrypt:
+0x5da3 023628 call tid_reply 
+0x5da4 023629 branch lmp_start_encryption 
+:      023631 parse_lmpext_features_req:
+0x5da5 023632 jam lmp_ext_features_res ,mem_lmo_opcode2 
+0x5da6 023633 rtn 
+:      023635 parse_lmpext_features_res:
+0x5da7 023636 fetcht 1 ,mem_rxbuf + 4 
+0x5da8 023637 and temp ,0x1 ,temp 
+0x5da9 023638 storet 1 ,mem_remote_sppcap 
+0x5daa 023639 fetch 1 ,mem_hci_cmd 
+0x5dab 023640 bne hci_cmd_wait_remote_ext_feature ,parse_lmpext_features_res_not_hci 
+0x5dac 023641 jam 0 ,mem_hci_cmd 
+:      023642 parse_lmpext_features_res_not_hci:
+0x5dad 023643 fetch 1 ,mem_conn_sm 
+0x5dae 023644 rtnne conn_sm_wait_features_ext 
+0x5daf 023645 jam conn_sm_send_conn_req ,mem_conn_sm 
+0x5db0 023646 branch process_conn_sm 
+:      023648 parse_lmp_accepted:
+0x5db1 023649 bpatchx patch30_0 ,mem_patch30 
+0x5db2 023650 fetch 1 ,mem_rxbuf + 1 
+0x5db3 023651 store 1 ,mem_lmi_accepted_opcode 
+0x5db4 023652 beq lmp_host_connection_req ,parse_lmp_accepted_hostconn 
+0x5db5 023653 beq lmp_in_rand ,parse_lmp_accepted_inrand 
+0x5db6 023654 beq lmp_encryption_mode_req ,parse_lmp_accepted_enc_mode 
+0x5db7 023655 beq lmp_encryption_key_size_req ,parse_lmp_accepted_enc_keysize 
+0x5db8 023656 beq lmp_start_encryption_req ,parse_lmp_accepted_start_enc 
+0x5db9 023657 beq lmp_stop_encryption_req ,parse_lmp_accepted_stop_enc 
+0x5dba 023658 beq lmp_unsniff_req ,parse_lmp_accepted_unsniff_req 
+0x5dbb 023659 beq lmp_sniff_req ,parse_lmp_accepted_sniff_req 
+0x5dbc 023660 beq lmp_switch_req ,parse_lmp_accepted_switch 
+0x5dbd 023662 beq lmp_encapsulated_header ,parse_lmp_accepted_encapsulated_header 
+0x5dbe 023663 beq lmp_encapsulated_payload ,parse_lmp_accepted_encapsulated_payload 
+0x5dbf 023664 beq lmp_simple_pairing_number ,parse_lmp_accepted_simple_pairing_number 
+0x5dc0 023665 beq lmp_dhkey_check ,parse_lmp_accepted_dhkey_check 
+0x5dc1 023666 rtn 
+:      023668 parse_lmp_not_accepted:
+0x5dc2 023669 bpatchx patch30_1 ,mem_patch30 
+0x5dc3 023670 fetch 1 ,mem_rxbuf + 1 
+0x5dc4 023671 store 1 ,mem_lmi_accepted_opcode 
+0x5dc5 023672 beq lmp_name_req ,parse_lmp_not_accepted_name_req 
+0x5dc6 023673 beq lmp_host_connection_req ,parse_lmp_not_accepted_hostconn 
+0x5dc7 023674 beq lmp_au_rand ,parse_lmp_not_accepted_aurand 
+0x5dc8 023675 beq lmp_in_rand ,parse_lmp_not_accepted_inrand 
+0x5dc9 023676 beq lmp_switch_req ,parse_lmp_not_accepted_switch 
+0x5dca 023678 beq lmp_simple_pairing_number ,parse_lmp_not_accepted_simple_pairing_number 
+0x5dcb 023679 beq lmp_dhkey_check ,parse_lmp_not_accepted_dhkey_check 
+0x5dcc 023680 beq lmp_unsniff_req ,parse_lmp_not_accepted_unsniff_req 
+0x5dcd 023681 beq lmp_sniff_req ,parse_lmp_not_acdcept_sniff_req 
+0x5dce 023682 rtn 
+:      023684 parse_lmp_accepted_switch:
+0x5dcf 023685 jam bt_evt_switch_accept ,mem_fifo_temp 
+0x5dd0 023686 call ui_ipc_send_event 
+0x5dd1 023687 branch role_switch_prepare0 
+:      023688 parse_lmp_not_accepted_switch:
+0x5dd2 023689 jam bt_evt_switch_not_accept ,mem_fifo_temp 
+0x5dd3 023690 call ui_ipc_send_event 
+0x5dd4 023691 jam switch_flag_not_accept ,mem_switch_flag 
+0x5dd5 023692 setarg timer_switch_waite 
+0x5dd6 023693 arg switch_wait_timer ,queue 
+0x5dd7 023694 branch timer_init 
+:      023697 parse_lmp_accepted_hostconn:
+0x5dd8 023700 fetch 1 ,mem_lmp_conn_state 
+0x5dd9 023701 set1 received_conn_req ,pdata 
+0x5dda 023702 store 1 ,mem_lmp_conn_state 
+0x5ddb 023703 jam bt_evt_bb_connected ,mem_fifo_temp 
+0x5ddc 023704 call ui_ipc_send_event 
+0x5ddd 023705 jam lmp_packet_type_table_req ,mem_lmo_opcode2 
+:      023707 parse_lmp_accepted_hostconn_ctn:
+0x5dde 023709 fetch 1 ,mem_conn_sm 
+0x5ddf 023710 bne conn_sm_wait_conn_accept ,parse_rx_done 
+0x5de0 023713 jam conn_sm_auth_pair ,mem_conn_sm 
+0x5de1 023714 rtn 
+:      023722 parse_lmp_not_accepted_hostconn:
+0x5de2 023723 jam acl_connection_already_exists ,mem_disconn_reason_send 
+0x5de3 023724 jam lmp_detach ,mem_lmo_opcode2 
+0x5de4 023726 jam conn_sm_standby ,mem_conn_sm 
+0x5de5 023728 branch parse_rx_done ,true 
+0x5de6 023729 rtn 
+:      023731 parse_lmp_accepted_inrand:
+0x5de7 023732 fetch 1 ,mem_link_key_exists 
+0x5de8 023733 nrtn blank 
+0x5de9 023734 call clear_linkkey 
+0x5dea 023735 call lmp_generate_key 
+0x5deb 023736 rtn master 
+0x5dec 023737 set1 mark_slave_in_rand_accepted ,mark 
+0x5ded 023738 rtn 
+:      023740 parse_lmp_accepted_enc_mode:
+0x5dee 023741 nrtn master 
+0x5def 023742 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 
+0x5df0 023743 fetch 1 ,mem_state_map 
+0x5df1 023744 rtnbit0 smap_encryption 
+0x5df2 023745 jam lmp_stop_encryption_req ,mem_lmo_opcode2 
+0x5df3 023746 rtn 
+:      023748 parse_lmp_accepted_enc_keysize:
+0x5df4 023749 branch lmp_start_encryption 
+:      023751 parse_lmp_accepted_start_enc:
+0x5df5 023752 call send_create_conn_start_l2cap_timer_sm 
+0x5df6 023753 fetch 1 ,mem_state 
+0x5df7 023754 rtnbit1 state_conn_comp 
+0x5df8 023755 jam lmp_setup_complete ,mem_lmo_opcode2 
+0x5df9 023756 fetch 1 ,mem_conn_sm 
+0x5dfa 023757 rtnne conn_sm_encrypt_wait 
+0x5dfb 023758 jam conn_sm_encrypt_wait_clear ,mem_conn_sm 
+0x5dfc 023759 rtn 
+:      023761 parse_lmp_accepted_stop_enc:
+0x5dfd 023769 rtn 
+:      023771 parse_lmp_not_accepted_aurand:
+:      023772 parse_lmp_not_accepted_aurand_send_detach:
+0x5dfe 023773 jam lmp_detach ,mem_lmo_opcode2 
+0x5dff 023774 jam other_end_terminated ,mem_disconn_reason_send 
+0x5e00 023775 rtn 
+:      023777 parse_lmp_not_accepted_inrand:
+0x5e01 023778 fetch 1 ,mem_rxbuf + 2 
+0x5e02 023779 beq key_missing ,parse_lmp_inrand_key_missing 
+0x5e03 023780 rtnne pairing_not_allowed 
+0x5e04 023781 jam pairing_not_allowed ,mem_disconn_reason_send 
+0x5e05 023782 jam lmp_detach ,mem_lmo_opcode2 
+0x5e06 023783 rtn 
+:      023784 parse_lmp_inrand_key_missing:
+0x5e07 023785 jam key_missing ,mem_disconn_reason_send 
+0x5e08 023786 jam lmp_detach ,mem_lmo_opcode2 
+0x5e09 023787 rtn 
+:      023789 parse_lmp_not_accepted_name_req:
+0x5e0a 023790 rtn 
+:      023792 parse_lmp_not_accepted_simple_pairing_number:
+0x5e0b 023793 jam sp_stat_null ,mem_sp_state 
+0x5e0c 023794 jam lmp_detach ,mem_lmo_opcode2 
+0x5e0d 023795 branch parse_rx_done 
+:      023797 parse_lmp_not_accepted_dhkey_check:
+0x5e0e 023798 jam sp_stat_null ,mem_sp_state 
+0x5e0f 023799 jam lmp_detach ,mem_lmo_opcode2 
+0x5e10 023800 branch parse_rx_done 
+:      023801 parse_lmp_not_accepted_unsniff_req:
+0x5e11 023802 jam bt_evt_unsniff_not_accept ,mem_fifo_temp 
+0x5e12 023803 branch ui_ipc_send_event 
+:      023805 parse_lmp_accepted_unsniff_req:
+0x5e13 023806 jam bt_evt_unsniff_accept ,mem_fifo_temp 
+0x5e14 023807 call ui_ipc_send_event 
+0x5e15 023808 branch sniff_exit 
+:      023810 parse_lmp_accepted_sniff_req:
+0x5e16 023811 jam bt_evt_sniff_accept ,mem_fifo_temp 
+0x5e17 023812 call ui_ipc_send_event 
+0x5e18 023813 setarg 0 
+0x5e19 023814 store 2 ,mem_dsniff 
+0x5e1a 023815 fetch 2 ,mem_sniff_param_interval 
+0x5e1b 023816 lshift pdata ,pdata 
+0x5e1c 023817 store 2 ,mem_tsniff 
+0x5e1d 023818 fetch 1 ,mem_sniff_param_attempt 
+0x5e1e 023819 store 1 ,mem_sniff_attempt 
+0x5e1f 023820 fetch 1 ,mem_sniff_param_timeout 
+0x5e20 023821 store 1 ,mem_sniff_timeout 
+0x5e21 023822 branch sniff_init 
+:      023824 parse_lmp_not_acdcept_sniff_req:
+0x5e22 023825 jam bt_evt_sniff_not_accept ,mem_fifo_temp 
+0x5e23 023826 branch ui_ipc_send_event 
+:      023828 parse_lmp_crypt_key:
+0x5e24 023829 fetcht 1 ,mem_rxbuf + 1 
+0x5e25 023830 storet 1 ,mem_key_size 
+0x5e26 023831 branch accept_lmp_msg 
+:      023833 parse_lmp_setup_complete:
+0x5e27 023834 fetch 1 ,mem_lmp_conn_state 
+0x5e28 023835 set1 received_setup_complete ,pdata 
+0x5e29 023836 store 1 ,mem_lmp_conn_state 
+0x5e2a 023837 rtnbit1 sent_setup_complete 
+0x5e2b 023838 jam lmp_setup_complete ,mem_lmo_opcode2 
+0x5e2c 023839 branch parse_rx_done 
+:      023841 parse_lmp_max_slot:
+0x5e2d 023844 rtn 
+:      023846 parse_lmp_max_slot_req:
+0x5e2e 023847 fetch 1 ,mem_max_slot 
+0x5e2f 023848 fetcht 1 ,mem_rxbuf + 1 
+0x5e30 023849 isub temp ,null 
+0x5e31 023851 branch accept_lmp_msg ,positive 
+0x5e32 023852 jam lmp_not_accepted ,mem_lmo_opcode2 
+0x5e33 023853 jam unspecified_error ,mem_lmo_reason2 
+0x5e34 023854 jam lmp_max_slot_req ,mem_lmi_opcode2 
+0x5e35 023855 rtn 
+:      023857 parse_lmp_detach:
+0x5e36 023858 call prepare_disconnect 
+0x5e37 023859 branch accept_lmp_msg 
+:      023861 accept_lmp_msg:
+0x5e38 023862 jam lmp_accepted ,mem_lmo_opcode2 
+0x5e39 023863 rtn 
+:      023865 parse_lmp_incr_power:
+0x5e3a 023866 jam lmp_max_power ,mem_lmo_opcode2 
+0x5e3b 023867 rtn 
+:      023869 parse_lmp_decr_power:
+0x5e3c 023870 jam lmp_min_power ,mem_lmo_opcode2 
+0x5e3d 023871 rtn 
+:      023873 parse_lmp_version_res:
+0x5e3e 023874 fetch 1 ,mem_conn_sm 
+0x5e3f 023875 rtneq conn_sm_wait_version 
+0x5e40 023877 jam conn_sm_send_features ,mem_conn_sm 
+0x5e41 023879 rtn 
+:      023882 parse_lmp_auto_rate:
+0x5e42 023883 rtn 
+:      023885 parse_lmp_in_rand:
+0x5e43 023886 call lmp_copy_rand 
+0x5e44 023887 jam pincode_state_wait_pincode ,mem_pincode_state 
+0x5e45 023888 jam bt_evt_pincode_req ,mem_fifo_temp 
+0x5e46 023889 call ui_ipc_send_event 
+0x5e47 023891 call tid_check 
+0x5e48 023892 nbranch lmp_accept_inrand ,true 
+0x5e49 023894 nbranch parse_lmp_inrand_res ,master 
+0x5e4a 023895 jam lmp_not_accepted ,mem_lmo_opcode2 
+0x5e4b 023896 jam lmp_in_rand ,mem_lmi_opcode2 
+0x5e4c 023897 jam transaction_collision ,mem_lmo_reason2 
+0x5e4d 023898 rtn 
+:      023899 parse_lmp_inrand_res:
+0x5e4e 023900 fetch 1 ,mem_op 
+0x5e4f 023901 set1 op_inrand_req ,pdata 
+0x5e50 023902 store 1 ,mem_op 
+0x5e51 023903 rtn 
+:      023906 pop_tid_follow:
+0x5e52 023907 fetcht 1 ,mem_state_map 
+0x5e53 023908 nsetflag blank ,smap_lmptid ,temp 
+0x5e54 023909 storet 1 ,mem_state_map 
+0x5e55 023910 rtn 
+:      023913 push_tid_follow:
+0x5e56 023914 fetch 1 ,mem_lmo_tid2 
+0x5e57 023915 rshift pdata ,pdata 
+0x5e58 023916 and_into 1 ,pdata 
+0x5e59 023917 rtn 
+:      023919 parse_lmp_au_rand_moudle:
+0x5e5a 023920 fetch 1 ,mem_nv_data_number 
+0x5e5b 023921 rtn blank 
+0x5e5c 023922 fetch 1 ,mem_pairing_auth 
+0x5e5d 023923 call load_device_list ,blank 
+0x5e5e 023924 rtn 
+:      023926 parse_lmp_au_rand:
+0x5e5f 023927 call parse_lmp_au_rand_moudle 
+0x5e60 023928 call push_tid_follow 
+0x5e61 023929 store 1 ,mem_sres_tid 
+0x5e62 023930 call lmp_copy_rand 
+0x5e63 023931 jam lmp_sres ,mem_lmo_opcode2 
+0x5e64 023932 fetch 1 ,mem_link_key_exists 
+0x5e65 023933 nrtn blank 
+0x5e66 023934 fetch 1 ,mem_state 
+0x5e67 023935 rtnbit1 state_combkey 
+0x5e68 023936 jam key_missing ,mem_lmo_reason2 
+0x5e69 023937 branch reject_lmp_packet 
+:      023939 parse_lmp_sres:
+0x5e6a 023940 arg mem_plap ,rega 
+0x5e6b 023941 call function_e1 
+0x5e6c 023942 fetch 4 ,mem_rxbuf + 1 
+0x5e6d 023943 fetcht 4 ,mem_input_store 
+0x5e6e 023944 isub temp ,null 
+0x5e6f 023945 branch authentication_ok ,zero 
+0x5e70 023946 jam lmp_detach ,mem_lmo_opcode2 
+0x5e71 023947 jam authentication_failure_error ,mem_disconn_reason_send 
+0x5e72 023948 rtn 
+:      023949 authentication_ok:
+0x5e73 023950 call authentication_ok_common 
+0x5e74 023951 fetch 1 ,mem_ssp_enable 
+0x5e75 023952 branch pairing_success ,blank 
+0x5e76 023953 rtn 
+:      023956 authentication_ok_common:
+0x5e77 023957 call copy_aco 
+0x5e78 023958 call linkkey_ready 
+0x5e79 023959 fetch 1 ,mem_op 
+0x5e7a 023960 isolate1 op_auth_req ,pdata 
+0x5e7b 023961 set0 op_auth_req ,pdata 
+0x5e7c 023962 store 1 ,mem_op 
+0x5e7d 023963 fetch 1 ,mem_conn_sm 
+0x5e7e 023964 beq conn_sm_auth_wait ,authentication_ok_conn_sm 
+0x5e7f 023965 beq conn_sm_pairing_wait ,authentication_ok_conn_sm 
+0x5e80 023966 rtn 
+:      023967 authentication_ok_conn_sm:
+0x5e81 023968 fetch 1 ,mem_pairing_auth 
+0x5e82 023969 rtnne defalt_pairing_auth 
+0x5e83 023970 fetch 1 ,mem_state_map 
+0x5e84 023971 rtnbit1 smap_encryption 
+0x5e85 023972 branch host_create_conn_encrypt 
+:      023974 parse_lmp_comb_key:
+0x5e86 023975 arg mem_rxbuf + 1 ,rega 
+0x5e87 023976 arg mem_kinit ,regb 
+0x5e88 023977 arg mem_random_number ,contw 
+0x5e89 023978 call xor16 
+0x5e8a 023979 arg mem_plap ,rega 
+0x5e8b 023980 call generate_linkkey 
+0x5e8c 023981 jam lmp_au_rand ,mem_lmo_opcode2 
+0x5e8d 023982 fetch 1 ,mem_state 
+0x5e8e 023983 bbit0 state_combkey ,lmp_generate_key 
+0x5e8f 023984 rtn 
+:      023986 parse_lmp_name_res:
+0x5e90 023987 fetch 2 ,mem_len 
+0x5e91 023988 add pdata ,-3 ,loopcnt 
+0x5e92 023989 fetcht 1 ,mem_rxbuf + 1 
+0x5e93 023990 setarg mem_tmp_buffer 
+0x5e94 023991 iadd temp ,contw 
+0x5e95 023992 arg mem_rxbuf + 3 ,contr 
+0x5e96 023993 call memcpy 
+0x5e97 023994 fetcht 1 ,mem_name_offset 
+0x5e98 023995 fetch 1 ,mem_rxbuf + 2 
+0x5e99 023996 isub temp ,pdata 
+0x5e9a 023997 sub pdata ,14 ,null 
+0x5e9b 023998 branch parse_lmp_name_res_end ,positive 
+0x5e9c 023999 add temp ,14 ,pdata 
+0x5e9d 024000 store 1 ,mem_name_offset 
+0x5e9e 024001 jam lmp_name_req ,mem_lmo_opcode2 
+0x5e9f 024002 rtn 
+:      024003 parse_lmp_name_res_end:
+0x5ea0 024004 fetch 1 ,mem_state_map 
+0x5ea1 024005 set1 smap_name_res ,pdata 
+0x5ea2 024006 store 1 ,mem_state_map 
+0x5ea3 024007 bbit1 smap_name_req ,lmp_disconnect 
+0x5ea4 024008 rtn 
+:      024009 parse_lmp_name_req:
+0x5ea5 024010 fetch 1 ,mem_rxbuf + 1 
+0x5ea6 024011 store 1 ,mem_lmi_opcode2 
+0x5ea7 024012 jam lmp_name_res ,mem_lmo_opcode2 
+0x5ea8 024013 rtn 
+:      024015 parse_lmp_conn_req:
+0x5ea9 024016 branch accept_lmp_msg 
+:      024018 parse_lmp_timing_accuracy_req:
+0x5eaa 024019 jam lmp_timing_accuracy_res ,mem_lmo_opcode2 
+0x5eab 024020 rtn 
+:      024022 parse_lmp_features_req:
+0x5eac 024023 jam lmp_features_res ,mem_lmo_opcode2 
+0x5ead 024024 rtn 
+:      024026 parse_lmp_version_req:
+0x5eae 024027 jam lmp_version_res ,mem_lmo_opcode2 
+0x5eaf 024028 rtn 
+:      024030 parse_lmp_supervision_timeout:
+0x5eb0 024033 rtn 
+:      024037 parse_lmp_sniff_subrating_req:
+0x5eb1 024038 fetch 2 ,mem_tsniff 
+0x5eb2 024039 iforce temp 
+0x5eb3 024040 fetch 1 ,mem_rxbuf + 2 
+0x5eb4 024041 store 1 ,mem_subsniff_rate 
+0x5eb5 024042 imul32 temp ,temp 
+0x5eb6 024043 fetch 2 ,mem_rxbuf + 3 
+0x5eb7 024044 lshift pdata ,pdata 
+0x5eb8 024045 store 2 ,mem_subsniff_tcmax 
+0x5eb9 024046 fetch 4 ,mem_rxbuf + 5 
+0x5eba 024047 lshift pdata ,pdata 
+0x5ebb 024048 store 4 ,mem_subsniff_instant 
+0x5ebc 024050 deposit temp 
+0x5ebd 024051 store 2 ,mem_subsniff_tsniff 
+0x5ebe 024052 rtn 
+:      024053 parse_lmpext_packet_type_table_req:
+0x5ebf 024054 fetcht 1 ,mem_ptt 
+0x5ec0 024055 fetch 1 ,mem_rxbuf + 2 
+0x5ec1 024056 ixor temp ,null 
+0x5ec2 024057 nbranch reject_unknown_ext_packet ,zero 
+0x5ec3 024058 isolate1 0 ,pdata 
+0x5ec4 024059 fetch 1 ,mem_state_map 
+0x5ec5 024060 setflag true ,smap_edr ,pdata 
+0x5ec6 024061 store 1 ,mem_state_map 
+0x5ec7 024062 jam lmp_ext_accepted ,mem_lmo_opcode2 
+0x5ec8 024063 jam lmp_packet_type_table_req ,mem_lmi_opcode2 
+0x5ec9 024064 rtn 
+:      024067 parse_lmp_sniff_subrating_res:
+:      024068 parse_lmp_preferred_rate:
+:      024069 parse_lmp_max_power:
+:      024070 parse_lmp_min_power:
+0x5eca 024071 rtn 
+:      024072 parse_lmp_page_mode_req:
+0x5ecb 024074 branch accept_lmp_msg 
+:      024075 parse_lmp_page_scan_mode_req:
+0x5ecc 024078 branch accept_lmp_msg 
+:      024082 parse_lmp_slot_offset:
+0x5ecd 024083 fetch 2 ,mem_rxbuf + 1 
+0x5ece 024084 store 2 ,mem_slot_offset 
+0x5ecf 024085 rtn 
+:      024087 parse_lmp_sniff_req_check_sniff_para:
+0x5ed0 024088 fetch 2 ,mem_rxbuf + 4 
+0x5ed1 024089 fetcht 1 ,mem_lpm_mult 
+0x5ed2 024090 imul32 temp ,pdata 
+0x5ed3 024091 arg 0x640 ,temp 
+0x5ed4 024092 isub temp ,null 
+0x5ed5 024094 rtn 
+:      024096 parse_lmp_sniff_req:
+0x5ed6 024097 fetch 2 ,mem_rxbuf + 6 
+0x5ed7 024098 branch lmp_reject_sniff ,blank 
+0x5ed8 024099 call parse_lmp_sniff_req_check_sniff_para 
+0x5ed9 024100 branch lmp_reject_sniff ,positive 
+0x5eda 024101 fetch 1 ,mem_device_option 
+0x5edb 024102 sub pdata ,dvc_op_module ,null 
+0x5edc 024103 call module_set_lpm_mult_2 ,zero 
+0x5edd 024104 fetch 1 ,mem_state 
+0x5ede 024105 bbit1 state_insniff ,lmp_reject_sniff 
+0x5edf 024106 fetch 2 ,mem_rxbuf + 2 
+0x5ee0 024107 lshift pdata ,pdata 
+0x5ee1 024108 store 2 ,mem_dsniff 
+0x5ee2 024109 fetch 2 ,mem_rxbuf + 4 
+0x5ee3 024110 lshift pdata ,pdata 
+0x5ee4 024111 store 2 ,mem_tsniff 
+0x5ee5 024112 fetch 2 ,mem_rxbuf + 6 
+0x5ee6 024113 store 1 ,mem_sniff_attempt 
+0x5ee7 024114 iforce temp 
+0x5ee8 024115 fetch 2 ,mem_rxbuf + 8 
+0x5ee9 024116 store 1 ,mem_sniff_timeout 
+0x5eea 024117 isub temp ,null 
+0x5eeb 024118 nbranch set_big_value_to_attempt ,positive 
+0x5eec 024119 store 1 ,mem_sniff_attempt 
+:      024120 set_big_value_to_attempt:
+0x5eed 024122 jam lmp_accepted ,mem_lmo_opcode2 
+0x5eee 024123 jam lmp_sniff_req ,mem_lmi_opcode2 
+0x5eef 024124 rtn 
+:      024126 lmp_reject_sniff:
+0x5ef0 024127 jam pdu_not_allowed ,mem_lmo_reason2 
+0x5ef1 024128 branch reject_lmp_packet 
+:      024130 parse_lmp_start_encryption_req:
+0x5ef2 024131 call accept_lmp_msg 
+0x5ef3 024132 call lmp_copy_rand 
+0x5ef4 024133 call function_e3 
+0x5ef5 024134 branch start_encryption 
+:      024136 parse_lmp_stop_encryption_req:
+0x5ef6 024137 call accept_lmp_msg 
+0x5ef7 024138 branch stop_encryption 
+:      024141 parse_lmp_switch_req:
+0x5ef8 024142 fetch 4 ,mem_rxbuf + 1 
+0x5ef9 024143 lshift pdata ,pdata 
+0x5efa 024145 branch parse_lmp_switch_accept ,master 
+0x5efb 024146 fetcht 1 ,mem_link_key_exists 
+0x5efc 024147 nbranch parse_lmp_switch_req_clear_mark ,blank 
+:      024148 parse_lmp_switch_req_not_accept:
+0x5efd 024149 jam lmp_not_accepted ,mem_lmo_opcode2 
+0x5efe 024150 jam lmp_switch_req ,mem_lmi_opcode2 
+0x5eff 024151 jam pdu_not_allowed ,mem_lmo_reason2 
+0x5f00 024152 rtn 
+:      024153 parse_lmp_switch_req_clear_mark:
+0x5f01 024154 jam lmp_slot_offset ,mem_lmo_opcode2 
+0x5f02 024155 jam 0 ,mem_conn_sm 
+0x5f03 024156 branch role_switch_prepare 
+:      024158 parse_lmp_switch_accept:
+0x5f04 024159 call role_switch_prepare 
+0x5f05 024160 set1 mark_reconn_recieve_switch ,mark 
+0x5f06 024161 fetch 1 ,mem_connection_options 
+0x5f07 024162 set0 connection_switch ,pdata 
+0x5f08 024163 store 1 ,mem_connection_options 
+0x5f09 024164 branch accept_lmp_msg 
+:      024168 parse_lmp_temp_rand:
+:      024169 parse_lmp_temp_key:
+:      024170 parse_lmp_timing_accuracy_res:
+:      024171 parse_lmp_unit_key:
+:      024172 parse_lmp_use_semi_permanend_key:
+0x5f0a 024173 rtn 
+:      024176 parse_lmp_unsniff_req:
+0x5f0b 024177 jam lmp_accepted ,mem_lmo_opcode2 
+0x5f0c 024178 jam lmp_unsniff_req ,mem_lmi_opcode2 
+0x5f0d 024179 jam bt_evt_remote_unsniff ,mem_fifo_temp 
+0x5f0e 024180 call ui_ipc_send_event 
+0x5f0f 024181 branch sniff_exit 
+:      024183 parse_lmp_encapsulated_header:
+0x5f10 024184 fetch 1 ,mem_rxbuf + 1 
+0x5f11 024185 bne encapsulated_major_type_p192 ,parse_lmp_encapsulated_header_reject 
+0x5f12 024186 fetch 1 ,mem_rxbuf + 2 
+0x5f13 024187 bne encapsulated_minor_type_p192 ,parse_lmp_encapsulated_header_reject 
+0x5f14 024188 fetch 1 ,mem_rxbuf + 3 
+0x5f15 024189 bne encapsulated_len_p192 ,parse_lmp_encapsulated_header_reject 
+0x5f16 024190 call check_localsm 
+0x5f17 024191 branch parse_lmp_encapsulated_header_master ,true 
+0x5f18 024192 jam sp_stat_key_recv ,mem_sp_state 
+:      024193 parse_lmp_encapsulated_header_master:
+0x5f19 024194 jam lmp_accepted ,mem_lmo_opcode2 
+0x5f1a 024195 jam lmp_encapsulated_header ,mem_lmi_opcode2 
+0x5f1b 024196 branch parse_rx_done 
+:      024198 parse_lmp_encapsulated_header_reject:
+0x5f1c 024199 jam pdu_not_allowed ,mem_lmo_reason2 
+0x5f1d 024200 branch reject_lmp_packet 
+:      024202 parse_lmp_accepted_encapsulated_header:
+0x5f1e 024205 jam lmp_encapsulated_payload ,mem_lmo_opcode2 
+0x5f1f 024207 rtn 
+:      024208 parse_lmp_accepted_simple_pairing_number:
+0x5f20 024209 fetch 1 ,mem_ssp_mode_flag 
+0x5f21 024210 beq ssp_mode_ssp_pin_flag ,parse_lmp_accepted_simple_pairing_number_ssp_pin 
+0x5f22 024211 beq ssp_mode_passkey_entry_flag ,parse_lmp_accepted_simple_pairing_number_passkey 
+:      024212 parse_lmp_accepted_simple_pairing_number_common:
+0x5f23 024213 call check_localsm 
+0x5f24 024214 rtn true 
+0x5f25 024215 jam sp_stat_confirm_recv ,mem_sp_state 
+0x5f26 024216 rtn 
+:      024218 parse_lmp_accepted_simple_pairing_number_ssp_pin:
+0x5f27 024219 call g_noninit_number_confirm 
+0x5f28 024220 jam bt_evt_bt_gkey_generate ,mem_fifo_temp 
+0x5f29 024221 call ui_ipc_send_event 
+0x5f2a 024222 branch parse_lmp_accepted_simple_pairing_number_common 
+:      024225 parse_lmp_accepted_simple_pairing_number_passkey:
+0x5f2b 024226 call check_localsm 
+0x5f2c 024227 rtn true 
+0x5f2d 024228 fetch 1 ,mem_authentication_passkey_times 
+0x5f2e 024229 beq 19 ,authentication_passkey_end 
+0x5f2f 024230 increase 1 ,pdata 
+0x5f30 024231 store 1 ,mem_authentication_passkey_times 
+:      024234 authentication_passkey:
+0x5f31 024235 jam sp_flag_commit ,mem_sp_flag 
+0x5f32 024236 jam sp_stat_commit_calc ,mem_sp_state 
+0x5f33 024237 fetch 1 ,mem_authentication_passkey_times 
+0x5f34 024238 copy pdata ,queue 
+0x5f35 024239 fetch 6 ,mem_pin 
+0x5f36 024240 qisolate1 pdata 
+0x5f37 024241 setarg 0x80 
+0x5f38 024242 setflag true ,0 ,pdata 
+0x5f39 024243 store 1 ,mem_passkey_1bit 
+0x5f3a 024244 rtn 
+:      024246 authentication_passkey_end:
+0x5f3b 024247 jam sp_stat_confirm_recv ,mem_sp_state 
+0x5f3c 024248 rtn 
+:      024250 parse_lmp_accepted_dhkey_check:
+0x5f3d 024251 call parse_lmp_accepted_dhkey_check_common 
+:      024252 pairing_success:
+0x5f3e 024253 fetch 1 ,mem_flag_pairing_state 
+0x5f3f 024254 rtn blank 
+0x5f40 024255 jam flag_pairing_state_not_pairing ,mem_flag_pairing_state 
+0x5f41 024256 jam bt_evt_bt_pairing_success ,mem_fifo_temp 
+0x5f42 024257 branch ui_ipc_send_event 
+:      024260 parse_lmp_accepted_dhkey_check_common:
+0x5f43 024262 call check_localsm 
+0x5f44 024263 ncall g_noninit ,true 
+0x5f45 024264 call g_init ,true 
+0x5f46 024265 call check_localsm 
+0x5f47 024266 rtn true 
+0x5f48 024267 jam sp_stat_link_key_calc ,mem_sp_state 
+0x5f49 024268 jam sp_flag_commit ,mem_sp_flag 
+0x5f4a 024269 rtn 
+:      024271 parse_simple_pairing_confirm:
+0x5f4b 024272 arg mem_sp_confirm_remote ,contw 
+0x5f4c 024273 arg mem_rxbuf + 1 ,contr 
+0x5f4d 024274 call memcpy16 
+0x5f4e 024275 fetch 1 ,mem_ssp_mode_flag 
+0x5f4f 024276 rtneq ssp_mode_passkey_entry_flag 
+0x5f50 024277 branch master_set_mem_master_sp_flag 
+:      024279 parse_lmp_encapsulated_payload:
+0x5f51 024280 fetch 1 ,mem_master_sp_state 
+0x5f52 024281 beq sp_stat_random_send ,parse_encapsulated_payload_master 
+0x5f53 024282 fetch 1 ,mem_sp_state 
+0x5f54 024283 bne sp_stat_key_recv ,parse_lmp_encapsulated_payload_reject 
+:      024284 parse_encapsulated_payload_master:
+0x5f55 024285 fetch 1 ,mem_sp_remote_key_recv_count 
+0x5f56 024286 sub pdata ,0x20 ,contw 
+0x5f57 024287 nbranch parse_lmp_encapsulated_payload_reject ,positive 
+0x5f58 024288 arg mem_sp_pubkey_remote ,contw 
+0x5f59 024289 iadd contw ,contw 
+0x5f5a 024290 fetch 8 ,mem_rxbuf + 1 
+0x5f5b 024291 istore 8 ,contw 
+0x5f5c 024292 fetch 8 ,mem_rxbuf + 9 
+0x5f5d 024293 istore 8 ,contw 
+0x5f5e 024294 fetch 1 ,mem_sp_remote_key_recv_count 
+0x5f5f 024295 increase 16 ,pdata 
+0x5f60 024296 store 1 ,mem_sp_remote_key_recv_count 
+0x5f61 024297 bne encapsulated_len_p192 ,accept_lmp_msg 
+:      024298 parse_lmp_encapsulated_payload_completed:
+0x5f62 024299 call check_localsm 
+0x5f63 024300 branch accept_lmp_msg ,true 
+0x5f64 024301 jam sp_key_valid ,mem_sp_remote_key_invalid 
+0x5f65 024302 jam sp_stat_key_generate ,mem_sp_state 
+0x5f66 024303 jam sp_flag_commit ,mem_sp_flag 
+0x5f67 024304 branch accept_lmp_msg 
+:      024305 parse_lmp_encapsulated_payload_reject:
+0x5f68 024306 jam pdu_not_allowed ,mem_lmo_reason2 
+0x5f69 024307 branch reject_lmp_packet 
+:      024308 parse_lmp_accepted_encapsulated_payload:
+0x5f6a 024309 fetch 1 ,mem_sp_local_key_send_count 
+0x5f6b 024310 beq encapsulated_len_p192 ,parse_lmp_encapsulated_payload_all_accepted 
+0x5f6c 024311 jam lmp_encapsulated_payload ,mem_lmo_opcode2 
+0x5f6d 024312 branch parse_rx_done 
+:      024314 parse_lmp_encapsulated_payload_all_accepted:
+0x5f6e 024315 call check_localsm 
+0x5f6f 024316 branch parse_lmp_encapsulated_payload_all_accepted_master ,true 
+0x5f70 024317 fetch 1 ,mem_ssp_mode_flag 
+0x5f71 024318 beq ssp_mode_passkey_entry_flag ,parse_lmp_encapsulated_payload_all_accepted_get_passkey 
+0x5f72 024319 jam sp_flag_commit ,mem_sp_flag 
+0x5f73 024320 jam sp_stat_commit_calc ,mem_sp_state 
+0x5f74 024321 branch parse_rx_done 
+:      024323 parse_lmp_encapsulated_payload_all_accepted_get_passkey:
+0x5f75 024324 jam bt_evt_bt_get_passkey ,mem_fifo_temp 
+0x5f76 024325 branch ui_ipc_send_event 
+:      024328 parse_lmp_encapsulated_payload_all_accepted_master:
+0x5f77 024330 branch parse_rx_done 
+:      024332 parse_lmp_simple_pairing_number:
+0x5f78 024333 fetch 1 ,mem_master_sp_state 
+0x5f79 024334 beq sp_stat_random_send ,parse_lmp_simple_pairing_number_master 
+0x5f7a 024335 fetch 1 ,mem_sp_state 
+0x5f7b 024336 bne sp_stat_random_recv ,parse_lmp_simple_pairing_number_reject 
+:      024337 parse_lmp_simple_pairing_number_master:
+0x5f7c 024338 arg mem_sp_random_remote ,contw 
+0x5f7d 024339 fetch 8 ,mem_rxbuf + 1 
+0x5f7e 024340 istore 8 ,contw 
+0x5f7f 024341 fetch 8 ,mem_rxbuf + 9 
+0x5f80 024342 istore 8 ,contw 
+0x5f81 024343 call check_localsm 
+0x5f82 024344 branch parse_lmp_simple_pairing_number_master0 ,true 
+0x5f83 024345 jam sp_stat_random_send ,mem_sp_state 
+0x5f84 024346 jam sp_flag_commit ,mem_sp_flag 
+0x5f85 024347 branch accept_lmp_msg 
+:      024348 parse_lmp_simple_pairing_number_master0:
+0x5f86 024349 jam sp_stat_commit_calc ,mem_master_sp_state 
+0x5f87 024350 branch master_set_mem_master_sp_flag 
+:      024353 parse_lmp_simple_pairing_number_reject:
+0x5f88 024354 jam pdu_not_allowed ,mem_lmo_reason2 
+0x5f89 024355 branch reject_lmp_packet 
+:      024357 parse_dhkey_check:
+0x5f8a 024358 fetch 1 ,mem_master_sp_state 
+0x5f8b 024359 beq sp_stat_confirm_send ,parse_dhkey_check_master 
+0x5f8c 024360 fetch 1 ,mem_sp_state 
+0x5f8d 024361 bne sp_stat_confirm_recv ,parse_lmp_dhkey_check_reject 
+:      024362 parse_dhkey_check_master:
+0x5f8e 024363 arg mem_sp_check_result ,contw 
+0x5f8f 024364 arg mem_rxbuf + 1 ,contr 
+0x5f90 024365 call memcpy16 
+0x5f91 024366 call check_localsm 
+0x5f92 024367 branch parse_dhkey_check_master0 ,true 
+0x5f93 024368 fetch 1 ,mem_ssp_mode_flag 
+0x5f94 024369 beq ssp_mode_ssp_pin_flag ,number_comparison_mode 
+:      024370 number_comparison_successed:
+0x5f95 024371 jam 0 ,mem_flag_mode_ssp_pin 
+0x5f96 024372 jam sp_stat_confirm_check ,mem_sp_state 
+0x5f97 024373 jam sp_flag_commit ,mem_sp_flag 
+0x5f98 024374 jam lmp_dhkey_check ,mem_lmi_opcode2 
+0x5f99 024375 branch parse_rx_done 
+:      024377 parse_dhkey_check_master0:
+0x5f9a 024378 jam sp_stat_confirm_check ,mem_master_sp_state 
+0x5f9b 024379 jam sp_flag_commit ,mem_master_sp_flag 
+0x5f9c 024380 branch parse_rx_done 
+:      024381 parse_lmp_dhkey_check_reject:
+0x5f9d 024382 jam pdu_not_allowed ,mem_lmo_reason2 
+0x5f9e 024383 branch reject_lmp_packet 
+:      024385 number_comparison_mode:
+0x5f9f 024386 fetch 1 ,mem_flag_mode_ssp_pin 
+0x5fa0 024387 bbit1 flag_mode_ssp_pin_reviceve_comparison_bit ,comparison_result 
+0x5fa1 024388 set1 flag_mode_ssp_pin_recieve_dhkey_bit ,pdata 
+0x5fa2 024389 store 1 ,mem_flag_mode_ssp_pin 
+0x5fa3 024390 rtn 
+:      024392 comparison_result:
+0x5fa4 024393 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed 
+0x5fa5 024394 jam 0 ,mem_flag_mode_ssp_pin 
+0x5fa6 024395 branch parse_lmp_dhkey_check_reject 
+:      024398 parse_lmp_clkoffset_res:
+0x5fa7 024399 branch parse_rx_done 
+:      024401 parse_lmp_encryption_mode_req:
+0x5fa8 024402 fetch 1 ,mem_connection_options 
+0x5fa9 024403 set0 connection_encrypt 
+0x5faa 024404 store 1 ,mem_connection_options 
+0x5fab 024405 call accept_lmp_msg 
+0x5fac 024406 nrtn master 
+0x5fad 024407 fetch 1 ,mem_rxbuf + 1 
+0x5fae 024408 fetcht 1 ,mem_op 
+0x5faf 024409 setflag blank ,op_stop_enc ,temp 
+0x5fb0 024410 nsetflag blank ,op_start_enc ,temp 
+0x5fb1 024411 storet 1 ,mem_op 
+0x5fb2 024412 rtn 
+:      024414 parse_lmp_features_res:
+0x5fb3 024415 fetcht 8 ,mem_rxbuf + 1 
+:      024416 parse_lmp_features_res_not_hci:
+0x5fb4 024417 fetch 1 ,mem_conn_sm 
+0x5fb5 024418 rtnne conn_sm_wait_features_res 
+0x5fb6 024420 fetch 1 ,mem_connection_options 
+0x5fb7 024421 bbit0 connection_feature_ext ,parse_lmp_send_conn 
+0x5fb8 024423 jam conn_sm_send_features_ext ,mem_conn_sm 
+0x5fb9 024424 rtn 
+:      024425 parse_lmp_send_conn:
+0x5fba 024426 jam conn_sm_send_conn_req ,mem_conn_sm 
+0x5fbb 024427 rtn 
+:      024428 parse_lmp_test_activate:
+0x5fbc 024429 fetch 1 ,mem_debug_config 
+0x5fbd 024430 store 1 ,mem_test_mode_old_debug_config 
+0x5fbe 024431 jam lmp_accepted ,mem_lmo_opcode2 
+0x5fbf 024432 jam lmp_test_activate ,mem_lmi_opcode2 
+0x5fc0 024433 rtn 
+:      024434 parse_lmp_test_control:
+0x5fc1 024437 jam lmp_accepted ,mem_lmo_opcode2 
+0x5fc2 024438 jam lmp_test_control ,mem_lmi_opcode2 
+0x5fc3 024439 force 9 ,loopcnt 
+0x5fc4 024440 arg mem_rxbuf + 1 ,contr 
+0x5fc5 024441 arg mem_temp_payload ,contw 
+:      024442 parse_lmp_test_xor:
+0x5fc6 024443 ifetch 1 ,contr 
+0x5fc7 024444 xor_into 0x55 ,pdata 
+0x5fc8 024445 istore 1 ,contw 
+0x5fc9 024446 loop parse_lmp_test_xor 
+0x5fca 024447 fetch 1 ,test_mode_scenario 
+0x5fcb 024448 fetcht 1 ,mem_tester_emulate 
+0x5fcc 024449 set0 tester_no_whitening ,temp 
+0x5fcd 024450 set0 tester_pattern_test ,temp 
+0x5fce 024451 beq exit_test_mode ,parse_lmp_test_control_exit 
+0x5fcf 024452 beq pause_test_mode ,parse_lmp_test_control_pause 
+0x5fd0 024453 beq closed_loop_back_acl ,parse_lmp_test_control_loopback 
+0x5fd1 024454 beq acl_without_whitening ,parse_lmp_test_control_loopback_nowhite 
+0x5fd2 024455 beq closed_loop_back_sco ,parse_lmp_test_control_loopback 
+0x5fd3 024456 beq sco_without_whitening ,parse_lmp_test_control_loopback_nowhite 
+0x5fd4 024457 beq zero_pattern ,parse_lmp_test_control_pattern 
+0x5fd5 024458 beq one_pattern ,parse_lmp_test_control_pattern 
+0x5fd6 024459 beq alt_pattern ,parse_lmp_test_control_pattern 
+0x5fd7 024460 beq alt2_pattern ,parse_lmp_test_control_pattern 
+0x5fd8 024461 beq pseudorandom ,parse_lmp_test_control_pattern 
+0x5fd9 024462 rtn 
+:      024463 parse_lmp_test_control_exit:
+0x5fda 024465 fetch 1 ,mem_tester_emulate 
+0x5fdb 024466 set1 tester_exit ,pdata 
+0x5fdc 024467 set1 tester_change ,pdata 
+0x5fdd 024468 store 1 ,mem_tester_emulate 
+0x5fde 024469 rtn 
+:      024470 parse_lmp_test_control_pattern:
+0x5fdf 024471 set1 tester_pattern_test ,temp 
+0x5fe0 024472 jam 5 ,mem_lch_code 
+0x5fe1 024473 fetch 2 ,test_mode_data_length 
+0x5fe2 024474 iforce loopcnt 
+0x5fe3 024475 store 2 ,mem_len 
+0x5fe4 024476 arg mem_rxbuf ,contw 
+0x5fe5 024477 call pn9 
+:      024478 parse_lmp_test_control_loopback_nowhite:
+0x5fe6 024479 set1 tester_no_whitening ,temp 
+:      024480 parse_lmp_test_control_loopback:
+0x5fe7 024481 set1 tester_change ,temp 
+0x5fe8 024482 force 0 ,pdata 
+0x5fe9 024483 store 1 ,mem_slave_rcvcnt 
+0x5fea 024484 store 2 ,mem_tst_pktcnt_crc 
+0x5feb 024485 store 2 ,mem_tst_pktcnt_dmh 
+0x5fec 024486 store 2 ,mem_tst_pktcnt_hec 
+0x5fed 024487 store 2 ,mem_tst_pktcnt_sync 
+0x5fee 024488 fetch 1 ,test_mode_hopping_mode 
+0x5fef 024489 compare fixed_freq ,pdata ,0xff 
+0x5ff0 024490 setflag true ,tester_fixed_freq ,temp 
+0x5ff1 024491 storet 1 ,mem_tester_emulate 
+0x5ff2 024492 rtn 
+:      024494 parse_lmp_test_control_pause:
+0x5ff3 024495 set0 mark_testmode ,mark 
+0x5ff4 024496 jam 0 ,mem_tester_emulate 
+0x5ff5 024497 fetch 1 ,mem_debug_config 
+0x5ff6 024498 set0 debug_tx_pattern ,pdata 
+0x5ff7 024499 store 1 ,mem_debug_config 
+0x5ff8 024500 rtn 
+:      024506 lmp_copy_rand:
+0x5ff9 024507 arg mem_rxbuf + 1 ,contr 
+0x5ffa 024508 arg mem_random_number ,contw 
+0x5ffb 024509 branch memcpy16 
+:      024511 lmp_generate_key:
+0x5ffc 024512 jam lmp_comb_key ,mem_lmo_opcode2 
+0x5ffd 024513 rtn 
+:      024515 lmp_start_encryption:
+0x5ffe 024516 nrtn master 
+0x5fff 024517 jam lmp_start_encryption_req ,mem_lmo_opcode2 
+0x6000 024518 rtn 
+:      024520 lmp_accept_inrand:
+0x6001 024521 arg mem_lap ,rega 
+0x6002 024522 call generate_kinit 
+0x6003 024523 jam lmp_accepted ,mem_lmo_opcode2 
+0x6004 024524 jam lmp_in_rand ,mem_lmi_opcode2 
+0x6005 024525 rtn 
+:      024527 lmp_disconnect:
+0x6006 024528 jam 10 ,mem_conn_timer 
+0x6007 024529 jam lmp_detach ,mem_lmo_opcode2 
+0x6008 024530 jam local_host ,mem_disconn_reason_send 
+0x6009 024531 rtn 
+:      024537 send_lmp:
+0x600a 024538 bpatchx patch30_2 ,mem_patch30 
+0x600b 024539 disable user 
+0x600c 024540 call lmo_fifo_process 
+0x600d 024541 fetch 1 ,mem_lmp_to_send 
+0x600e 024542 rtn blank 
+0x600f 024547 bbit1 7 ,send_lmp_escape 
+:      024548 send_lmp0:
+0x6010 024549 beq lmp_name_req ,send_lmp_name_req 
+0x6011 024550 beq lmp_name_res ,send_lmp_name_res 
+0x6012 024551 beq lmp_accepted ,send_lmp_accepted 
+0x6013 024552 beq lmp_not_accepted ,send_lmp_not_accepted 
+0x6014 024553 beq lmp_features_req ,send_lmp_features_req 
+0x6015 024554 beq lmp_features_res ,send_lmp_features_res 
+0x6016 024555 beq lmp_timing_accuracy_res ,send_lmp_timing_accuracy_res 
+0x6017 024556 beq lmp_version_req ,send_lmp_version_req 
+0x6018 024557 beq lmp_version_res ,send_lmp_version_res 
+0x6019 024558 beq lmp_setup_complete ,send_lmp_setup_complete 
+0x601a 024559 beq lmp_supervision_timeout ,send_lmp_superto 
+0x601b 024560 beq lmp_host_connection_req ,send_lmp_no_payload 
+0x601c 024561 beq lmp_in_rand ,send_lmp_inrand 
+0x601d 024562 beq lmp_comb_key ,send_lmp_comb_key 
+0x601e 024563 beq lmp_au_rand ,send_lmp_aurand 
+0x601f 024564 beq lmp_sres ,send_lmp_sres 
+0x6020 024565 beq lmp_encryption_mode_req ,send_lmp_encryption_mode_req 
+0x6021 024566 beq lmp_encryption_key_size_req ,send_lmp_encryption_key_size_req 
+0x6022 024567 beq lmp_start_encryption_req ,send_lmp_start_encryption 
+0x6023 024568 beq lmp_detach ,send_lmp_detach 
+0x6024 024569 beq lmp_quality_of_service_req ,send_lmp_quality_of_service_req 
+0x6025 024570 beq lmp_unit_key ,send_lmp_unit_key 
+0x6026 024572 beq lmp_incr_power_req ,send_lmp_inc_power 
+0x6027 024573 beq lmp_clkoffset_res ,send_lmp_clkoffset_res 
+0x6028 024574 beq lmp_max_power ,send_lmp_nopayload_reply 
+0x6029 024575 beq lmp_max_slot ,send_lmp_max_slot 
+0x602a 024576 beq lmp_max_slot_req ,send_lmp_max_slot_req 
+0x602b 024577 beq lmp_min_power ,send_lmp_nopayload_reply 
+0x602c 024578 beq lmp_slot_offset ,send_lmp_slot_offset 
+0x602d 024579 beq lmp_switch_req ,send_lmp_switch_req 
+0x602e 024580 beq lmp_sniff_req ,send_lmp_sniff_req 
+0x602f 024581 beq lmp_stop_encryption_req ,send_lmp_stop_encryption_req 
+0x6030 024582 beq lmp_timing_accuracy_req ,send_lmp_timing_accuracy_req 
+0x6031 024583 beq lmp_unsniff_req ,send_lmp_unsniff_req 
+0x6032 024584 beq lmp_encapsulated_header ,send_lmp_encapsulated_header 
+0x6033 024585 beq lmp_encapsulated_payload ,send_lmp_encapsulated_payload 
+0x6034 024586 beq lmp_simple_pairing_confirm ,send_lmp_simple_pairing_comfirm 
+0x6035 024587 beq lmp_simple_pairing_number ,send_lmp_simple_pairing_number 
+0x6036 024588 beq lmp_dhkey_check ,send_lmp_dhkey_check 
+0x6037 024589 beq lmp_auto_rate ,send_lmp_auto_rate 
+0x6038 024590 beq lmp_enc_key_size_mask_res ,send_lmp_enc_key_size_mask_res 
+0x6039 024592 beq lmp_clkoffset_req ,send_lmp_clkoffset_req 
+0x603a 024593 beq lmp_quality_of_service ,send_lmp_quality_of_service 
+0x603b 024594 beq lmp_test_activate ,send_lmp_test_activate 
+0x603c 024595 beq lmp_test_control ,send_lmp_test_control 
+:      024596 send_lmp_error:
+0x603d 024597 branch assert 
+0x603e 024598 rtn 
+:      024599 send_lmp_escape:
+0x603f 024600 beq lmp_ext_accepted ,send_lmpext_accepted 
+0x6040 024601 beq lmp_ext_features_res ,send_lmpext_features_res 
+0x6041 024602 beq lmp_not_accepted_ext ,send_lmpext_not_accepted 
+0x6042 024603 beq lmp_ext_features_req ,send_lmpext_features_req 
+0x6043 024604 beq lmp_packet_type_table_req ,send_lmpext_packet_type_table_req 
+0x6044 024605 beq lmp_pause_encryption_req ,send_lmpext_pause_encryption_req 
+0x6045 024606 beq lmp_io_cap_req ,send_lmp_io_cap_req 
+0x6046 024607 beq lmp_io_cap_res ,send_lmpext_io_cap_res 
+0x6047 024608 beq lmp_sniff_subrating_req ,send_lmpext_sniff_subrating_req 
+0x6048 024609 beq lmp_sniff_subrating_res ,send_lmpext_sniff_subrating_res 
+0x6049 024610 branch assert 
+:      024616 send_lmp_accepted:
+0x604a 024617 force 2 ,pdata 
+0x604b 024618 call msg_send_lmp 
+0x604c 024619 fetch 1 ,mem_lmi_opcode 
+0x604d 024620 istore 1 ,contw 
+0x604e 024621 call send_lmp_follow 
+0x604f 024622 bpatchx patch30_3 ,mem_patch30 
+0x6050 024623 fetch 1 ,mem_lmi_opcode 
+0x6051 024624 beq lmp_in_rand ,send_lmp_accepted_inrand 
+0x6052 024625 beq lmp_encryption_mode_req ,send_lmp_accepted_enc_mode 
+0x6053 024626 beq lmp_encryption_key_size_req ,send_lmp_accepted_enc_key 
+0x6054 024627 beq lmp_sniff_req ,send_lmp_accept_sniff_req 
+0x6055 024628 beq lmp_host_connection_req ,send_lmp_accepted_connection 
+0x6056 024629 beq lmp_dhkey_check ,send_lmp_accept_dhkey_check 
+0x6057 024630 beq lmp_start_encryption_req ,send_create_conn_start_l2cap_timer_sm 
+0x6058 024631 rtn 
+:      024633 send_create_conn_start_l2cap_timer_sm:
+0x6059 024634 fetch 1 ,mem_conn_sm 
+0x605a 024635 rtn blank 
+0x605b 024636 jam conn_sm_wait_done ,mem_conn_sm 
+0x605c 024637 setarg timer_enpt_waite 
+0x605d 024638 arg enpt_delay_timer ,queue 
+0x605e 024639 branch timer_init 
+:      024641 send_lmp_accept_sniff_req:
+0x605f 024642 branch sniff_init 
+:      024643 send_lmp_not_accepted:
+0x6060 024644 force 3 ,pdata 
+0x6061 024645 call msg_send_lmp 
+0x6062 024646 fetch 1 ,mem_lmi_opcode 
+0x6063 024647 beq lmp_au_rand ,send_not_accept_aurand 
+0x6064 024648 istore 1 ,contw 
+0x6065 024649 fetch 1 ,mem_lmo_reason 
+0x6066 024650 istore 1 ,contw 
+0x6067 024651 branch send_lmp_follow 
+:      024653 send_not_accept_aurand:
+0x6068 024654 istore 1 ,contw 
+0x6069 024655 fetch 1 ,mem_lmo_reason 
+0x606a 024656 istore 1 ,contw 
+0x606b 024657 arg mem_sres_tid ,temp 
+0x606c 024658 branch special_tid_store 
+:      024660 send_lmpext_accepted:
+0x606d 024661 force 4 ,queue 
+0x606e 024662 call send_lmpext 
+0x606f 024663 setarg lmp_escape 
+0x6070 024664 istore 1 ,contw 
+0x6071 024665 fetch 1 ,mem_lmi_opcode 
+0x6072 024666 set0 7 ,pdata 
+0x6073 024667 istore 1 ,contw 
+0x6074 024668 fetch 1 ,mem_lmi_opcode 
+0x6075 024669 branch send_lmp_follow 
+:      024671 send_lmpext_not_accepted:
+0x6076 024672 force 5 ,queue 
+0x6077 024673 call send_lmpext 
+0x6078 024674 setarg lmp_escape 
+0x6079 024675 istore 1 ,contw 
+0x607a 024676 fetch 1 ,mem_lmi_opcode 
+0x607b 024677 set0 7 ,pdata 
+0x607c 024678 istore 1 ,contw 
+0x607d 024679 fetch 1 ,mem_lmo_reason 
+0x607e 024680 istore 1 ,contw 
+0x607f 024681 branch send_lmp_follow 
+:      024684 send_lmp_accepted_inrand:
+0x6080 024685 call clear_linkkey 
+0x6081 024686 call tid_check 
+0x6082 024687 rtn true 
+0x6083 024688 branch lmp_generate_key 
+:      024690 send_lmp_accepted_enc_mode:
+0x6084 024691 fetch 1 ,mem_op 
+0x6085 024692 bbit1 op_start_enc ,send_lmp_accepted_enc_start 
+0x6086 024693 rtnbit0 op_stop_enc 
+0x6087 024694 jam lmp_stop_encryption_req ,mem_lmo_opcode2 
+0x6088 024695 set0 op_stop_enc ,pdata 
+0x6089 024696 call tid_reply 
+0x608a 024697 branch send_lmp_accepted_enc_exit 
+:      024698 send_lmp_accepted_enc_start:
+0x608b 024699 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 
+0x608c 024700 set0 op_start_enc ,pdata 
+:      024701 send_lmp_accepted_enc_exit:
+0x608d 024702 store 1 ,mem_op 
+0x608e 024703 rtn 
+:      024705 send_lmp_accepted_enc_key:
+0x608f 024706 call check_localsm 
+0x6090 024707 branch lmp_start_encryption ,true 
+0x6091 024708 rtn 
+:      024710 send_lmp_accepted_connection:
+0x6092 024711 jam lmp_packet_type_table_req ,mem_lmo_opcode2 
+0x6093 024713 fetch 1 ,mem_lmp_conn_state 
+0x6094 024714 set1 received_conn_req ,pdata 
+0x6095 024715 store 1 ,mem_lmp_conn_state 
+0x6096 024716 jam bt_evt_bb_connected ,mem_fifo_temp 
+0x6097 024717 branch ui_ipc_send_event 
+:      024720 send_lmp_accept_dhkey_check:
+0x6098 024721 rtn 
+:      024725 send_lmpext_features_res:
+0x6099 024726 force 12 ,queue 
+0x609a 024727 call send_lmpext 
+0x609b 024728 setarg 0x01 
+0x609c 024729 istore 1 ,contw 
+0x609d 024730 fetch 2 ,mem_lmpext_ssp_enable 
+0x609e 024731 istore 2 ,contw 
+0x609f 024732 setarg 0 
+0x60a0 024733 istore 3 ,contw 
+0x60a1 024734 setarg 0x00 
+0x60a2 024735 istore 4 ,contw 
+0x60a3 024736 branch send_lmp_reply 
+:      024737 send_lmpext_io_cap_res:
+0x60a4 024738 force 5 ,queue 
+0x60a5 024739 call send_lmpext 
+0x60a6 024740 fetch 3 ,mem_sp_iocap_local 
+0x60a7 024741 istore 3 ,contw 
+0x60a8 024742 call send_lmp_reply 
+0x60a9 024743 jam flag_pairing_state_pairing ,mem_flag_pairing_state 
+0x60aa 024744 fetch 1 ,mem_sp_iocap_local 
+0x60ab 024745 beq display_yesno ,responder_iocap_display_yesno 
+0x60ac 024746 beq keyboard_only ,responder_iocap_keyboard_only 
+0x60ad 024747 beq no_input_no_output ,responder_iocap_no_input_no_output 
+0x60ae 024748 rtn 
+:      024750 responder_iocap_keyboard_only:
+0x60af 024751 fetch 1 ,mem_sp_iocap_remote 
+0x60b0 024752 beq display_only ,responder_iocap_keyboard_only_initiator_iocap_display_only 
+0x60b1 024753 beq display_yesno ,responder_iocap_keyboard_only_initiator_iocap_display_yesno 
+0x60b2 024754 beq keyboard_only ,responder_iocap_keyboard_only_initiator_iocap_keyboard_only 
+0x60b3 024755 beq no_input_no_output ,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output 
+0x60b4 024756 rtn 
+:      024759 responder_iocap_display_yesno:
+0x60b5 024760 fetch 1 ,mem_sp_iocap_remote 
+0x60b6 024761 beq display_only ,responder_iocap_display_yesno_initiator_iocap_display_only 
+0x60b7 024762 beq display_yesno ,responder_iocap_display_yesno_initiator_iocap_display_yesno 
+0x60b8 024763 beq keyboard_only ,responder_iocap_display_yesno_initiator_iocap_keyboard_only 
+0x60b9 024764 beq no_input_no_output ,responder_iocap_display_yesno_initiator_iocap_no_input_no_output 
+0x60ba 024765 rtn 
+:      024768 responder_iocap_no_input_no_output:
+0x60bb 024769 fetch 1 ,mem_sp_iocap_remote 
+0x60bc 024770 beq display_only ,responder_iocap_no_input_no_output_initiator_iocap_display_only 
+0x60bd 024771 beq display_yesno ,responder_iocap_no_input_no_output_initiator_iocap_display_yesno 
+0x60be 024772 beq keyboard_only ,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only 
+0x60bf 024773 beq no_input_no_output ,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output 
+0x60c0 024774 rtn 
+:      024776 responder_iocap_keyboard_only_initiator_iocap_no_input_no_output:
+:      024777 responder_iocap_display_yesno_initiator_iocap_no_input_no_output:
+:      024778 responder_iocap_display_yesno_initiator_iocap_display_only:
+:      024779 responder_iocap_no_input_no_output_initiator_iocap_display_only:
+:      024780 responder_iocap_no_input_no_output_initiator_iocap_display_yesno:
+:      024781 responder_iocap_no_input_no_output_initiator_iocap_keyboard_only:
+:      024782 responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output:
+:      024783 set_ssp_mode_justwork:
+0x60c1 024784 jam ssp_mode_just_work_flag ,mem_ssp_mode_flag 
+0x60c2 024785 fetch 1 ,mem_classic_bt_flag 
+0x60c3 024786 bbit1 flag_ssp_reject_justwork ,app_bt_disconnect 
+0x60c4 024787 rtn 
+:      024789 responder_iocap_display_yesno_initiator_iocap_display_yesno:
+:      024790 set_ssp_mode_numeric_comparison:
+0x60c5 024791 jam ssp_mode_ssp_pin_flag ,mem_ssp_mode_flag 
+0x60c6 024792 rtn 
+:      024794 responder_iocap_keyboard_only_initiator_iocap_display_yesno:
+:      024795 responder_iocap_keyboard_only_initiator_iocap_keyboard_only:
+:      024796 responder_iocap_keyboard_only_initiator_iocap_display_only:
+:      024797 responder_iocap_display_yesno_initiator_iocap_keyboard_only:
+:      024798 set_ssp_mode_passkey:
+0x60c7 024799 jam ssp_mode_passkey_entry_flag ,mem_ssp_mode_flag 
+0x60c8 024800 rtn 
+:      024803 classic_bt_set_reject_justwork_flag:
+0x60c9 024804 arg flag_ssp_reject_justwork ,queue 
+0x60ca 024805 branch classic_bluetooth_set_flag 
+:      024807 classic_bt_clr_reject_justwork_flag:
+0x60cb 024808 arg flag_ssp_reject_justwork ,queue 
+0x60cc 024809 branch classic_bluetooth_clr_flag 
+:      024811 classic_bluetooth_set_flag:
+0x60cd 024812 fetch 1 ,mem_classic_bt_flag 
+0x60ce 024813 qset1 pdata 
+0x60cf 024814 store 1 ,mem_classic_bt_flag 
+0x60d0 024815 rtn 
+:      024817 classic_bluetooth_clr_flag:
+0x60d1 024818 fetch 1 ,mem_classic_bt_flag 
+0x60d2 024819 qset0 pdata 
+0x60d3 024820 store 1 ,mem_classic_bt_flag 
+0x60d4 024821 rtn 
+:      024824 send_lmp_io_cap_req:
+0x60d5 024825 force 5 ,queue 
+0x60d6 024826 call send_lmpext 
+0x60d7 024827 fetch 3 ,mem_sp_iocap_local 
+0x60d8 024828 istore 3 ,contw 
+0x60d9 024829 branch send_lmp_request 
+:      024832 send_lmpext_sniff_subrating_req:
+0x60da 024834 rtn 
+:      024835 send_lmpext_sniff_subrating_res:
+0x60db 024836 force 9 ,queue 
+0x60dc 024837 call send_lmpext 
+0x60dd 024838 fetch 1 ,mem_subsniff_rate 
+0x60de 024839 istore 1 ,contw 
+0x60df 024840 fetch 2 ,mem_subsniff_tcmax 
+0x60e0 024841 istore 2 ,contw 
+0x60e1 024842 fetch 4 ,mem_subsniff_instant 
+0x60e2 024843 istore 4 ,contw 
+0x60e3 024844 branch send_lmp_reply 
+:      024846 send_lmp_name_res:
+0x60e4 024847 force 17 ,pdata 
+0x60e5 024848 call msg_send_lmp 
+0x60e6 024849 fetch 1 ,mem_lmi_opcode 
+0x60e7 024850 copy pdata ,temp 
+0x60e8 024851 beq 0x00 ,send_lmp_name_res_offset_ok 
+0x60e9 024852 beq 0x0e ,send_lmp_name_res_offset_ok 
+0x60ea 024853 beq 0x1c ,send_lmp_name_res_offset_ok 
+0x60eb 024854 rtn 
+:      024855 send_lmp_name_res_offset_ok:
+0x60ec 024856 istore 1 ,contw 
+0x60ed 024857 fetch 1 ,mem_local_name_length 
+0x60ee 024858 istore 1 ,contw 
+0x60ef 024859 arg 14 ,loopcnt 
+0x60f0 024860 setarg mem_local_name 
+0x60f1 024861 iadd temp ,contr 
+0x60f2 024862 call memcpy 
+0x60f3 024863 branch send_lmp_reply 
+:      024866 send_lmp_timing_accuracy_res:
+0x60f4 024867 force 3 ,pdata 
+0x60f5 024868 call msg_send_lmp 
+0x60f6 024869 setarg 0x0114 
+0x60f7 024870 istore 2 ,contw 
+0x60f8 024871 branch send_lmp_reply 
+:      024873 send_lmp_clkoffset_res:
+0x60f9 024875 force 3 ,pdata 
+0x60fa 024876 call msg_send_lmp 
+0x60fb 024877 fetch 4 ,mem_clke_bt 
+0x60fc 024878 isub clkn_bt ,pdata 
+0x60fd 024879 branch send_lmp_clkoffset_res_master ,master 
+0x60fe 024880 sub pdata ,0 ,pdata 
+:      024881 send_lmp_clkoffset_res_master:
+0x60ff 024883 rshift2 pdata ,pdata 
+0x6100 024884 set0 15 ,pdata 
+0x6101 024885 istore 2 ,contw 
+0x6102 024886 branch send_lmp_reply 
+:      024888 send_lmp_version_res:
+0x6103 024889 force 6 ,pdata 
+0x6104 024890 call msg_send_lmp 
+0x6105 024891 fetch 5 ,mem_lmp_version 
+0x6106 024892 istore 5 ,contw 
+0x6107 024893 branch send_lmp_reply 
+:      024895 send_lmp_features_res:
+0x6108 024896 force 9 ,pdata 
+0x6109 024897 call msg_send_lmp 
+0x610a 024898 fetch 8 ,mem_features 
+0x610b 024899 istore 8 ,contw 
+0x610c 024900 branch send_lmp_reply 
+:      024907 send_lmpext_features_req:
+0x610d 024908 force 12 ,queue 
+0x610e 024909 call send_lmpext 
+0x610f 024910 setarg 0x01 
+0x6110 024911 istore 1 ,contw 
+0x6111 024912 fetch 2 ,mem_lmpext_ssp_enable 
+0x6112 024913 istore 2 ,contw 
+0x6113 024914 setarg 0 
+0x6114 024915 istore 3 ,contw 
+0x6115 024916 setarg 0x00 
+0x6116 024917 istore 4 ,contw 
+0x6117 024918 branch send_lmp_request 
+:      024920 send_lmpext_packet_type_table_req:
+0x6118 024921 force 3 ,queue 
+0x6119 024922 call send_lmpext 
+0x611a 024923 fetch 1 ,mem_ptt 
+0x611b 024924 istore 1 ,contw 
+0x611c 024925 disable user 
+0x611d 024926 call send_lmp_request 
+0x611e 024927 nrtn user 
+0x611f 024928 nrtn master 
+0x6120 024929 fetch 1 ,mem_afh_cfg 
+0x6121 024930 rtnbit0 afh_cfg_on 
+0x6122 024931 call afh_init 
+0x6123 024932 branch afh_open_all_channels 
+:      024935 ssp_enable:
+0x6124 024936 bpatchx patch30_4 ,mem_patch30 
+0x6125 024937 fetch 1 ,mem_features + 6 
+0x6126 024938 set1 param_featrue_ssp ,pdata 
+0x6127 024939 store 1 ,mem_features + 6 
+0x6128 024940 setarg param_lmpext_ssp_enable 
+0x6129 024941 store 2 ,mem_lmpext_ssp_enable 
+0x612a 024942 rtn 
+:      024944 ssp_disable:
+0x612b 024945 bpatchx patch30_5 ,mem_patch30 
+0x612c 024946 fetch 1 ,mem_features + 6 
+0x612d 024947 set0 param_featrue_ssp ,pdata 
+0x612e 024948 store 1 ,mem_features + 6 
+0x612f 024949 setarg 0 
+0x6130 024950 store 2 ,mem_lmpext_ssp_enable 
+0x6131 024951 rtn 
+:      024953 afh_init:
+0x6132 024954 jam 0x3 ,mem_afh_cfg 
+0x6133 024955 setarg 0 
+0x6134 024956 store 4 ,mem_afh_timer 
+0x6135 024957 arg mem_afh_map_lo ,contw 
+0x6136 024958 call afh_reset_map 
+0x6137 024959 arg mem_afh_map_new ,contw 
+0x6138 024960 call afh_reset_map 
+0x6139 024961 arg mem_afh_classify_channel_map ,contw 
+0x613a 024962 call afh_reset_map 
+0x613b 024963 branch afh_clear_error_counter 
+:      024964 afh_open_all_channels:
+0x613c 024965 arg mem_afh_map_new ,contw 
+0x613d 024966 call afh_reset_map 
+0x613e 024967 call afh_clear_error_counter 
+0x613f 024968 branch afh_set_send_flag 
+:      024971 afh_reset_map:
+0x6140 024972 setarg 0xffffff 
+0x6141 024973 istore 3 ,contw 
+0x6142 024974 istore 3 ,contw 
+0x6143 024975 istore 3 ,contw 
+0x6144 024976 setarg 0x7f 
+0x6145 024977 istore 1 ,contw 
+0x6146 024978 rtn 
+:      024979 afh_clear_error_counter:
+0x6147 024980 setarg 0 
+0x6148 024981 store 2 ,mem_afh_error_total 
+0x6149 024982 rtn 
+:      024983 afh_set_send_flag:
+0x614a 024984 fetch 1 ,mem_afh_cfg 
+0x614b 024985 set1 send_lmp_set_afh ,pdata 
+0x614c 024986 store 1 ,mem_afh_cfg 
+0x614d 024987 rtn 
+:      024990 send_lmpext_pause_encryption_req:
+0x614e 024991 force 2 ,queue 
+0x614f 024992 call send_lmpext 
+0x6150 024993 nbranch send_lmp_reply ,master 
+0x6151 024995 branch send_lmp_request 
+:      024999 send_lmp_detach:
+0x6152 025000 force 2 ,pdata 
+0x6153 025001 call msg_send_lmp 
+0x6154 025002 fetch 1 ,mem_disconn_reason_send 
+0x6155 025003 istore 1 ,contw 
+0x6156 025004 call send_lmp_request 
+:      025005 prepare_disconnect:
+0x6157 025006 fetch 1 ,mem_op 
+0x6158 025007 set1 op_disconn ,pdata 
+0x6159 025008 store 1 ,mem_op 
+0x615a 025009 jam 50 ,mem_conn_timer 
+0x615b 025010 rtn 
+:      025013 send_lmp_no_payload:
+0x615c 025014 force 1 ,pdata 
+0x615d 025015 call msg_send_lmp 
+0x615e 025016 branch send_lmp_request 
+:      025017 send_lmp_nopayload_reply:
+0x615f 025018 force 1 ,pdata 
+0x6160 025019 call msg_send_lmp 
+0x6161 025020 branch send_lmp_reply 
+:      025023 send_lmp_encryption_mode_req:
+0x6162 025024 force 2 ,pdata 
+0x6163 025025 call msg_send_lmp 
+0x6164 025026 fetch 1 ,mem_state_map 
+0x6165 025027 isolate0 smap_encryption ,pdata 
+0x6166 025028 setflag true ,0 ,pdata 
+0x6167 025029 and_into 1 ,pdata 
+0x6168 025030 istore 1 ,contw 
+0x6169 025031 branch send_lmp_request 
+:      025034 send_lmp_superto:
+0x616a 025035 force 3 ,pdata 
+0x616b 025036 call msg_send_lmp 
+0x616c 025037 fetch 2 ,mem_supervision_to 
+0x616d 025038 istore 2 ,contw 
+0x616e 025039 branch send_lmp_request 
+:      025041 send_lmp_name_req:
+0x616f 025042 jam 250 ,mem_conn_timer 
+0x6170 025043 force 2 ,pdata 
+0x6171 025044 call msg_send_lmp 
+0x6172 025045 fetch 1 ,mem_name_offset 
+0x6173 025046 istore 1 ,contw 
+0x6174 025047 branch send_lmp_request 
+:      025049 send_lmp_test_control:
+0x6175 025050 force 10 ,pdata 
+0x6176 025051 call msg_send_lmp 
+0x6177 025052 arg mem_temp_payload ,contr 
+0x6178 025053 force 9 ,loopcnt 
+:      025054 send_lmp_test_control_loop:
+0x6179 025055 ifetch 1 ,contr 
+0x617a 025056 xor_into 0x55 ,pdata 
+0x617b 025057 istore 1 ,contw 
+0x617c 025058 loop send_lmp_test_control_loop 
+0x617d 025059 branch send_lmp_request 
+:      025061 send_lmp_quality_of_service_req:
+0x617e 025062 branch send_lmp_request 
+:      025063 send_lmp_unit_key:
+0x617f 025064 branch send_lmp_request 
+:      025066 send_lmp_slot_offset:
+0x6180 025067 rtn master 
+0x6181 025068 call calc_slot_offset 
+0x6182 025069 force 9 ,pdata 
+0x6183 025070 call msg_send_lmp 
+0x6184 025071 fetch 2 ,mem_slot_offset 
+0x6185 025072 istore 2 ,contw 
+0x6186 025073 fetch 3 ,mem_lap 
+0x6187 025074 istore 3 ,contw 
+0x6188 025075 fetch 1 ,mem_uap 
+0x6189 025076 istore 1 ,contw 
+0x618a 025077 fetch 2 ,mem_nap 
+0x618b 025078 istore 2 ,contw 
+0x618c 025079 bmark0 mark_switch_initiated ,send_lmp_slot_offset_reply 
+0x618d 025080 set0 mark_switch_initiated ,mark 
+0x618e 025081 call send_lmp_request 
+0x618f 025082 jam lmp_switch_req ,mem_lmo_opcode2 
+0x6190 025083 rtn 
+:      025084 send_lmp_slot_offset_reply:
+0x6191 025085 call send_lmp_reply 
+0x6192 025086 jam lmp_accepted ,mem_lmo_opcode2 
+0x6193 025087 jam lmp_switch_req ,mem_lmi_opcode2 
+0x6194 025088 rtn 
+:      025090 send_lmp_switch_req:
+0x6195 025091 arg 0x200 ,temp 
+0x6196 025092 branch switch_on_native ,master 
+0x6197 025093 deposit clke_bt 
+0x6198 025094 branch switch_slack 
+:      025095 switch_on_native:
+0x6199 025096 deposit clkn_bt 
+:      025097 switch_slack:
+0x619a 025098 deposit bt_clk 
+0x619b 025099 iadd temp ,pdata 
+0x619c 025100 and_into 0x1fc ,pdata 
+0x619d 025101 store 4 ,mem_sniff_anchor 
+0x619e 025102 force 5 ,pdata 
+0x619f 025103 call msg_send_lmp 
+0x61a0 025104 fetch 4 ,mem_sniff_anchor 
+0x61a1 025105 rshift pdata ,pdata 
+0x61a2 025106 istore 4 ,contw 
+0x61a3 025107 branch send_lmp_request 
+:      025109 send_lmp_sniff_req:
+0x61a4 025110 force 10 ,pdata 
+0x61a5 025111 call msg_send_lmp 
+0x61a6 025112 arg mem_sniff_payload ,contr 
+0x61a7 025113 ifetch 9 ,contr 
+0x61a8 025114 istore 9 ,contw 
+0x61a9 025115 branch send_lmp_request 
+:      025118 send_lmp_timing_accuracy_req:
+0x61aa 025120 force 3 ,pdata 
+0x61ab 025121 call msg_send_lmp 
+0x61ac 025122 setarg 0x0114 
+0x61ad 025123 istore 2 ,contw 
+0x61ae 025124 branch send_lmp_request 
+:      025126 send_lmp_unsniff_req:
+0x61af 025128 force 1 ,pdata 
+0x61b0 025129 call msg_send_lmp 
+0x61b1 025138 branch send_lmp_request 
+:      025141 send_lmp_max_slot:
+0x61b2 025142 force 2 ,pdata 
+0x61b3 025143 call msg_send_lmp 
+0x61b4 025144 fetch 1 ,mem_max_slot 
+0x61b5 025145 istore 1 ,contw 
+0x61b6 025146 branch send_lmp_request 
+:      025149 send_lmp_max_slot_req:
+0x61b7 025150 force 2 ,pdata 
+0x61b8 025151 call msg_send_lmp 
+0x61b9 025152 setarg 0x05 
+0x61ba 025153 istore 1 ,contw 
+0x61bb 025154 branch send_lmp_request 
+:      025157 send_lmp_inc_power:
+0x61bc 025158 force 2 ,pdata 
+0x61bd 025159 call msg_send_lmp 
+0x61be 025160 setarg 0x00 
+0x61bf 025161 istore 1 ,contw 
+0x61c0 025162 branch send_lmp_request 
+:      025165 send_lmp_setup_complete_by_module:
+0x61c1 025166 jam lmp_max_slot_req ,mem_lmo_opcode2 
+0x61c2 025167 rtn 
+:      025168 send_lmp_setup_complete:
+0x61c3 025169 fetch 1 ,mem_device_option 
+0x61c4 025170 sub pdata ,dvc_op_module ,null 
+0x61c5 025171 call send_lmp_setup_complete_by_module ,zero 
+0x61c6 025172 fetch 1 ,mem_state 
+0x61c7 025173 set1 state_conn_comp ,pdata 
+0x61c8 025174 store 1 ,mem_state 
+0x61c9 025175 copy clkn_bt ,pdata 
+0x61ca 025176 store 4 ,mem_aurand_send_delay_time 
+0x61cb 025177 fetch 1 ,mem_lmp_conn_state 
+0x61cc 025178 bbit1 sent_setup_complete ,send_lmp_setup_complete_has_sent 
+0x61cd 025179 set1 sent_setup_complete ,pdata 
+0x61ce 025180 store 1 ,mem_lmp_conn_state 
+0x61cf 025181 jam bt_evt_setup_complete ,mem_fifo_temp 
+0x61d0 025182 call ui_ipc_send_event 
+0x61d1 025183 force 1 ,pdata 
+0x61d2 025184 call msg_send_lmp 
+0x61d3 025185 branch send_lmp_request 
+:      025186 send_lmp_setup_complete_has_sent:
+0x61d4 025187 jam 0 ,mem_lmp_to_send 
+0x61d5 025188 rtn 
+:      025190 send_lmp_version_req:
+0x61d6 025191 force 6 ,pdata 
+0x61d7 025192 call msg_send_lmp 
+0x61d8 025193 fetch 5 ,mem_lmp_version 
+0x61d9 025194 istore 5 ,contw 
+0x61da 025195 branch send_lmp_request 
+:      025197 send_lmp_features_req:
+0x61db 025198 force 9 ,pdata 
+0x61dc 025199 call msg_send_lmp 
+0x61dd 025200 fetch 8 ,mem_features 
+0x61de 025201 istore 8 ,contw 
+0x61df 025202 branch send_lmp_request 
+:      025204 sp_master_send_io_cap_get:
+0x61e0 025205 jam sp_flag_commit ,mem_master_sp_flag 
+0x61e1 025206 fetch 1 ,mem_sp_local_key_invalid 
+0x61e2 025207 rtnne sp_key_valid 
+0x61e3 025208 jam sp_master_stat_start_done ,mem_master_sp_state 
+0x61e4 025209 rtn 
+:      025211 sp_master_send_io_cap_send:
+0x61e5 025212 call tid_initiate 
+0x61e6 025213 jam lmp_io_cap_req ,mem_lmo_opcode2 
+0x61e7 025214 jam sp_stat_key_send ,mem_master_sp_state 
+0x61e8 025215 rtn 
+:      025218 sp_master_send_lmp_encapsulated_header:
+0x61e9 025219 call tid_initiate 
+0x61ea 025220 jam lmp_encapsulated_header ,mem_lmo_opcode2 
+0x61eb 025221 jam sp_stat_random_send ,mem_master_sp_state 
+0x61ec 025222 rtn 
+:      025224 sp_master_commitment_compare:
+0x61ed 025225 arg mem_sp_calc_result_high ,rega 
+0x61ee 025226 arg mem_sp_confirm_remote ,regb 
+0x61ef 025227 arg 16 ,loopcnt 
+0x61f0 025228 call string_compare 
+0x61f1 025229 branch sp_master_commitment_compare_success ,zero 
+0x61f2 025230 jam sp_stat_null ,mem_master_sp_state 
+0x61f3 025231 call master_clear_mem_master_sp_flag 
+0x61f4 025232 jam pdu_not_allowed ,mem_lmo_reason2 
+0x61f5 025233 jam lmp_simple_pairing_number ,mem_lmi_opcode2 
+0x61f6 025234 branch reject_lmp_packet 
+:      025235 sp_master_commitment_compare_success:
+0x61f7 025236 jam sp_stat_confirm_calc ,mem_master_sp_state 
+0x61f8 025237 call master_set_mem_master_sp_flag 
+0x61f9 025238 jam lmp_simple_pairing_number ,mem_lmi_opcode2 
+0x61fa 025239 branch accept_lmp_msg 
+:      025243 sp_master_send_lmp_simple_pairing_number:
+0x61fb 025244 jam lmp_simple_pairing_number ,mem_lmo_opcode2 
+0x61fc 025245 rtn 
+:      025249 sp_send_lmp_encapsulated_header:
+0x61fd 025252 jam lmp_encapsulated_header ,mem_lmo_opcode2 
+0x61fe 025254 rtn 
+:      025260 send_lmp_encapsulated_header:
+0x61ff 025261 jam 0 ,mem_sp_local_key_send_count 
+0x6200 025262 force 4 ,pdata 
+0x6201 025263 call msg_send_lmp 
+0x6202 025264 force encapsulated_major_type_p192 ,pdata 
+0x6203 025265 istore 1 ,contw 
+0x6204 025266 force encapsulated_minor_type_p192 ,pdata 
+0x6205 025267 istore 1 ,contw 
+0x6206 025268 force encapsulated_len_p192 ,pdata 
+0x6207 025269 istore 1 ,contw 
+0x6208 025270 call check_localsm 
+0x6209 025271 branch send_lmp_request ,true 
+0x620a 025272 branch send_lmp_reply 
+:      025274 send_lmp_encapsulated_payload:
+0x620b 025276 force 17 ,pdata 
+0x620c 025277 call msg_send_lmp 
+0x620d 025278 fetch 1 ,mem_sp_local_key_send_count 
+0x620e 025279 arg mem_sp_pubkey_local ,contr 
+0x620f 025280 iadd contr ,contr 
+0x6210 025281 ifetch 8 ,contr 
+0x6211 025282 istore 8 ,contw 
+0x6212 025283 ifetch 8 ,contr 
+0x6213 025284 istore 8 ,contw 
+0x6214 025285 fetch 1 ,mem_sp_local_key_send_count 
+0x6215 025286 increase 16 ,pdata 
+0x6216 025287 store 1 ,mem_sp_local_key_send_count 
+0x6217 025288 call check_localsm 
+0x6218 025289 branch send_lmp_request ,true 
+0x6219 025290 branch send_lmp_reply 
+:      025293 sp_send_lmp_simple_pairing_comfirm:
+0x621a 025294 jam sp_stat_random_recv ,mem_sp_state 
+0x621b 025295 jam lmp_simple_pairing_confirm ,mem_lmo_opcode2 
+0x621c 025296 rtn 
+:      025297 send_lmp_simple_pairing_comfirm:
+0x621d 025300 force 17 ,pdata 
+0x621e 025301 call msg_send_lmp 
+0x621f 025302 arg mem_sp_calc_result_high ,contr 
+0x6220 025303 ifetch 8 ,contr 
+0x6221 025304 istore 8 ,contw 
+0x6222 025305 ifetch 8 ,contr 
+0x6223 025306 istore 8 ,contw 
+0x6224 025307 branch send_lmp_reply 
+:      025309 sp_send_lmp_simple_pairing_number:
+0x6225 025310 jam lmp_simple_pairing_number ,mem_lmo_opcode2 
+0x6226 025311 rtn 
+:      025313 send_lmp_simple_pairing_number:
+0x6227 025315 call check_localsm 
+0x6228 025316 call sp_local_random_key_generator ,true 
+0x6229 025317 force 17 ,pdata 
+0x622a 025318 call msg_send_lmp 
+0x622b 025319 arg mem_sp_random_local ,contr 
+0x622c 025320 ifetch 8 ,contr 
+0x622d 025321 istore 8 ,contw 
+0x622e 025322 ifetch 8 ,contr 
+0x622f 025323 istore 8 ,contw 
+0x6230 025324 call check_localsm 
+0x6231 025325 nbranch send_lmp_reply ,true 
+0x6232 025326 branch send_lmp_request ,true 
+:      025328 master_sp_sm_end:
+0x6233 025330 jam sp_stat_done ,mem_master_sp_state 
+:      025331 sp_aurand_send:
+0x6234 025332 call tid_initiate 
+0x6235 025333 jam lmp_au_rand ,mem_lmo_opcode2 
+0x6236 025334 call check_localsm_master 
+0x6237 025335 branch sp_master_key_prarm_push ,true 
+0x6238 025336 branch sp_link_key_prarm_push 
+:      025337 master_sp_send_lmp_dhkey_check:
+0x6239 025338 call tid_reply 
+:      025339 sp_send_lmp_dhkey_check:
+0x623a 025340 jam lmp_dhkey_check ,mem_lmo_opcode2 
+0x623b 025341 rtn 
+:      025342 send_lmp_dhkey_check:
+0x623c 025344 force 17 ,pdata 
+0x623d 025345 call msg_send_lmp 
+0x623e 025346 arg mem_sp_calc_result_high ,contr 
+0x623f 025347 ifetch 8 ,contr 
+0x6240 025348 istore 8 ,contw 
+0x6241 025349 ifetch 8 ,contr 
+0x6242 025350 istore 8 ,contw 
+0x6243 025351 call check_localsm 
+0x6244 025352 nbranch send_lmp_reply ,true 
+0x6245 025353 branch send_lmp_request ,true 
+:      025355 send_lmp_enc_key_size_mask_res:
+0x6246 025356 force 3 ,pdata 
+0x6247 025357 call msg_send_lmp 
+0x6248 025358 setarg 0xfffe 
+0x6249 025359 istore 2 ,contw 
+0x624a 025360 branch send_lmp_reply 
+:      025362 send_lmp_auto_rate:
+0x624b 025363 branch send_lmp_request 
+:      025364 send_lmp_clkoffset_req:
+0x624c 025365 branch send_lmp_request 
+:      025366 send_lmp_quality_of_service:
+0x624d 025367 branch send_lmp_request 
+:      025368 send_lmp_test_activate:
+0x624e 025369 branch send_lmp_request 
+:      025374 send_lmp_comb_key:
+0x624f 025375 call generate_random_number 
+0x6250 025376 arg mem_lap ,rega 
+0x6251 025377 call generate_linkkey 
+0x6252 025378 force 17 ,pdata 
+0x6253 025379 call msg_send_lmp 
+0x6254 025380 arg mem_kinit ,rega 
+0x6255 025381 arg mem_random_number ,regb 
+0x6256 025382 call xor16 
+0x6257 025383 nbranch send_lmp_follow ,master 
+0x6258 025384 branch send_lmp_tid 
+:      025386 send_lmp_inrand:
+0x6259 025387 call generate_random_number 
+0x625a 025388 arg mem_plap ,rega 
+0x625b 025389 call generate_kinit 
+:      025390 send_lmp_rand:
+0x625c 025391 force 17 ,pdata 
+0x625d 025392 call msg_send_lmp 
+0x625e 025393 arg mem_random_number ,contr 
+0x625f 025394 call memcpy16 
+0x6260 025395 fetch 1 ,mem_conn_sm 
+0x6261 025396 beq conn_sm_auth_wait ,send_lmp_request 
+0x6262 025397 beq conn_sm_pairing_wait ,send_lmp_request 
+0x6263 025398 branch send_lmp_tid 
+:      025400 send_lmp_aurand:
+0x6264 025401 fetch 1 ,mem_pairing_auth 
+0x6265 025402 branch send_lmp_aurand_notpairing ,blank 
+0x6266 025403 call check_localsm 
+0x6267 025404 call tid_initiate ,true 
+0x6268 025405 ncall tid_reply ,true 
+0x6269 025406 branch send_lmp_aurand_common 
+:      025407 send_lmp_aurand_notpairing:
+0x626a 025408 call tid_initiate 
+:      025409 send_lmp_aurand_common:
+0x626b 025410 call generate_random_number 
+0x626c 025411 branch send_lmp_rand 
+:      025413 send_lmp_sres:
+0x626d 025414 arg mem_lap ,rega 
+0x626e 025415 call function_e1 
+0x626f 025416 force 5 ,pdata 
+0x6270 025417 call msg_send_lmp 
+0x6271 025418 fetch 4 ,mem_input_store 
+0x6272 025419 istore 4 ,contw 
+0x6273 025420 arg mem_sres_tid ,temp 
+0x6274 025421 call special_tid_store 
+0x6275 025422 call copy_aco 
+0x6276 025423 call check_localsm 
+0x6277 025424 branch send_lmp_sres_master ,true 
+0x6278 025425 jam done_encryp ,mem_wait_encryption 
+0x6279 025426 fetch 1 ,mem_pairing_auth 
+0x627a 025427 rtn blank 
+0x627b 025428 jam lmp_au_rand ,mem_lmo_opcode2 
+:      025429 send_lmp_sres_master:
+0x627c 025430 fetch 1 ,mem_link_key_exists 
+0x627d 025431 rtn blank 
+:      025432 send_lmp_sres_startenc:
+0x627e 025433 call check_localsm 
+0x627f 025434 nbranch send_lmp_sres_startenc_slave ,true 
+0x6280 025435 fetch 1 ,mem_auth_enable 
+0x6281 025436 rtn blank 
+0x6282 025437 jam lmp_encryption_mode_req ,mem_lmo_opcode2 
+0x6283 025438 rtn 
+:      025439 send_lmp_sres_startenc_slave:
+0x6284 025440 rtnmark0 mark_slave_in_rand_accepted 
+0x6285 025441 set0 mark_slave_in_rand_accepted ,mark 
+0x6286 025442 jam lmp_encryption_mode_req ,mem_lmo_opcode2 
+0x6287 025443 rtn 
+:      025447 send_lmp_start_encryption:
+0x6288 025448 call generate_random_number 
+0x6289 025449 call function_e3 
+0x628a 025450 force 17 ,pdata 
+0x628b 025451 call msg_send_lmp 
+0x628c 025452 arg mem_random_number ,contr 
+0x628d 025453 call memcpy16 
+0x628e 025454 branch send_lmp_tid 
+:      025456 send_lmp_stop_encryption_req:
+0x628f 025457 force 1 ,pdata 
+0x6290 025458 call msg_send_lmp 
+0x6291 025459 branch send_lmp_tid 
+:      025461 send_lmp_encryption_key_size_req:
+0x6292 025462 force 2 ,pdata 
+0x6293 025463 call msg_send_lmp 
+0x6294 025464 force 16 ,pdata 
+0x6295 025465 istore 1 ,contw 
+0x6296 025466 store 1 ,mem_key_size 
+0x6297 025467 branch send_lmp_tid 
+:      025469 msg_send_lmp:
+0x6298 025471 lshift3 pdata ,pdata 
+0x6299 025472 or_into 0x07 ,pdata 
+0x629a 025473 store 1 ,mem_lmo_header_length 
+0x629b 025474 arg 17 ,loopcnt 
+0x629c 025475 arg mem_lmo_payload ,contw 
+0x629d 025476 call clear_mem 
+0x629e 025477 arg mem_lmo_payload ,contw 
+0x629f 025478 rtn 
+:      025480 send_lmpext:
+0x62a0 025481 and pdata ,0x7f ,rega 
+0x62a1 025482 jam lmp_escape ,mem_lmp_to_send 
+0x62a2 025483 deposit queue 
+0x62a3 025484 call msg_send_lmp 
+0x62a4 025485 deposit rega 
+0x62a5 025486 istore 1 ,contw 
+0x62a6 025487 rtn 
+:      025489 send_lmp_follow:
+0x62a7 025490 fetch 1 ,mem_lmp_to_send 
+0x62a8 025491 lshift pdata ,pdata 
+0x62a9 025492 fetcht 1 ,mem_state_map 
+0x62aa 025493 isolate1 smap_lmptid ,temp 
+0x62ab 025494 setflag true ,0 ,pdata 
+0x62ac 025495 branch send_lmp_exit 
+:      025498 send_lmp_tid:
+0x62ad 025499 fetcht 1 ,mem_state_map 
+0x62ae 025500 and_into 1 ,temp 
+0x62af 025501 branch send_lmp_end 
+:      025503 send_lmp_reply:
+0x62b0 025504 force 0 ,temp 
+0x62b1 025505 branch send_lmp_end 
+:      025507 send_lmp_request:
+0x62b2 025508 force 1 ,temp 
+:      025509 send_lmp_end:
+0x62b3 025510 fetch 1 ,mem_lmp_to_send 
+0x62b4 025511 lshift pdata ,pdata 
+0x62b5 025512 setflag master ,0 ,pdata 
+0x62b6 025513 ixor temp ,pdata 
+:      025514 send_lmp_exit:
+0x62b7 025515 store 1 ,mem_lmo_header_opcode 
+0x62b8 025516 jam 0 ,mem_lmp_to_send 
+0x62b9 025517 call lmo_fifo_process_lmo0empty 
+0x62ba 025518 enable user 
+0x62bb 025519 rtn 
+:      025522 lmo_fifo_check:
+0x62bc 025523 fetch 1 ,mem_lmo_opcode2 
+0x62bd 025524 rtn blank 
+0x62be 025525 call lmo_fifo_process 
+0x62bf 025526 fetch 1 ,mem_lmo_opcode2 
+0x62c0 025527 rtn 
+:      025529 lmo_fifo_process:
+0x62c1 025530 bpatchx patch30_6 ,mem_patch30 
+0x62c2 025531 fetch 1 ,mem_lmp_to_send 
+0x62c3 025532 branch lmo_fifo_process_lmo0empty ,blank 
+0x62c4 025533 fetch 1 ,mem_lmo_opcode1 
+0x62c5 025534 nrtn blank 
+0x62c6 025535 branch lmo_fifo_process_lmo2to1 
+:      025536 lmo_fifo_process_lmo0empty:
+0x62c7 025537 fetch 1 ,mem_lmo_opcode1 
+0x62c8 025538 branch lmo_fifo_process_lmo1_empty ,blank 
+0x62c9 025539 fetch 3 ,mem_lmo_opcode1 
+0x62ca 025540 store 3 ,mem_lmp_to_send 
+0x62cb 025541 fetcht 1 ,mem_lmo_tid1 
+0x62cc 025542 fetch 1 ,mem_state_map 
+0x62cd 025543 set0 smap_lmptid ,pdata 
+0x62ce 025544 ior temp ,pdata 
+0x62cf 025545 store 1 ,mem_state_map 
+0x62d0 025546 jam 0 ,mem_lmo_opcode1 
+:      025547 lmo_fifo_process_lmo2to1:
+0x62d1 025548 fetch 1 ,mem_lmo_opcode2 
+0x62d2 025549 rtn blank 
+0x62d3 025550 fetch 4 ,mem_lmo_opcode2 
+0x62d4 025551 store 4 ,mem_lmo_opcode1 
+0x62d5 025552 jam 0 ,mem_lmo_opcode2 
+0x62d6 025553 rtn 
+:      025554 lmo_fifo_process_lmo1_empty:
+0x62d7 025555 fetch 1 ,mem_lmo_opcode2 
+0x62d8 025556 rtn blank 
+0x62d9 025557 fetch 3 ,mem_lmo_opcode2 
+0x62da 025558 store 3 ,mem_lmp_to_send 
+0x62db 025559 fetcht 1 ,mem_lmo_tid2 
+0x62dc 025560 fetch 1 ,mem_state_map 
+0x62dd 025561 set0 smap_lmptid ,pdata 
+0x62de 025562 ior temp ,pdata 
+0x62df 025563 store 1 ,mem_state_map 
+0x62e0 025564 jam 0 ,mem_lmo_opcode2 
+0x62e1 025565 rtn 
+:      025568 special_tid_store:
+0x62e2 025569 bpatchx patch30_7 ,mem_patch30 
+0x62e3 025570 fetch 1 ,mem_state_map 
+0x62e4 025571 copy pdata ,regc 
+0x62e5 025572 ifetch 1 ,temp 
+0x62e6 025573 call pop_tid_follow 
+0x62e7 025574 call send_lmp_follow 
+0x62e8 025575 copy regc ,pdata 
+0x62e9 025576 store 1 ,mem_state_map 
+0x62ea 025577 rtn 
+:      025579 tid_reply:
+0x62eb 025580 fetcht 1 ,mem_state_map 
+0x62ec 025581 set0 smap_lmptidinit ,temp 
+0x62ed 025582 storet 1 ,mem_state_map 
+0x62ee 025583 rtn 
+:      025585 tid_initiate:
+0x62ef 025586 fetcht 1 ,mem_state_map 
+0x62f0 025587 set1 smap_lmptidinit ,temp 
+0x62f1 025588 storet 1 ,mem_state_map 
+0x62f2 025589 rtn 
+:      025592 tid_check:
+0x62f3 025593 nsetflag master ,smap_lmptid ,pdata 
+0x62f4 025594 fetcht 1 ,mem_state_map 
+0x62f5 025595 ixor temp ,pdata 
+0x62f6 025596 isolate1 smap_lmptid ,pdata 
+0x62f7 025597 rtn 
+:      025600 tid_set_reply:
+0x62f8 025601 fetch 1 ,mem_state_map 
+0x62f9 025602 setflag master ,smap_lmptid ,pdata 
+0x62fa 025603 store 1 ,mem_state_map 
+0x62fb 025604 rtn 
+:      025607 check_localsm:
+0x62fc 025608 fetch 1 ,mem_sp_localsm 
+0x62fd 025609 compare local_statemachine ,pdata ,0x7f 
+0x62fe 025610 rtn 
+:      025611 setlocalsm_master:
+0x62ff 025612 fetch 1 ,mem_sp_localsm 
+0x6300 025613 set1 7 ,pdata 
+0x6301 025614 store 1 ,mem_sp_localsm 
+0x6302 025615 rtn 
+:      025616 setlocalsm_slave:
+0x6303 025617 fetch 1 ,mem_sp_localsm 
+0x6304 025618 set0 7 ,pdata 
+0x6305 025619 store 1 ,mem_sp_localsm 
+0x6306 025620 rtn 
+:      025621 check_localsm_master:
+0x6307 025622 fetch 1 ,mem_sp_localsm 
+0x6308 025623 isolate1 7 ,pdata 
+0x6309 025624 store 1 ,mem_sp_localsm 
+0x630a 025625 rtn 
+:      025627 generate_random_number:
+0x630b 025629 arg mem_random_number ,contw 
+:      025630 generate_random:
+0x630c 025631 force 16 ,loopcnt 
+:      025632 generate_random_another:
+:      025633 generate_random_loop:
+0x630d 025634 random pdata 
+0x630e 025635 istore 1 ,contw 
+0x630f 025636 loop generate_random_another 
+0x6310 025637 rtn 
+:      025639 generate_linkkey:
+0x6311 025640 call function_e21 
+0x6312 025641 arg mem_link_key ,rega 
+0x6313 025642 arg mem_input_store ,regb 
+0x6314 025643 ifetch 8 ,rega 
+0x6315 025644 fetcht 1 ,mem_state 
+0x6316 025645 nsetflag blank ,state_combkey ,temp 
+0x6317 025646 storet 1 ,mem_state 
+0x6318 025647 copy rega ,contw 
+0x6319 025648 call xor16 
+0x631a 025649 branch generate_linkkey_continue 
+:      025655 process_conn_sm:
+0x631b 025657 bpatchx patch31_0 ,mem_patch31 
+0x631c 025659 call lmo_fifo_check 
+0x631d 025660 nrtn blank 
+:      025661 process_conn_sm_continue:
+0x631e 025662 fetch 1 ,mem_conn_sm 
+0x631f 025663 rtn blank 
+0x6320 025667 beq conn_sm_send_conn_req ,host_create_conn_send_conn_req 
+0x6321 025668 beq conn_sm_wait_conn_accept ,host_create_conn_wait_accept 
+0x6322 025669 beq conn_sm_send_features ,host_create_conn_send_features 
+0x6323 025670 beq conn_sm_wait_features_res ,host_create_conn_waiting 
+0x6324 025671 beq conn_sm_send_switch ,host_create_conn_send_switch 
+0x6325 025672 beq conn_sm_auth_pair ,host_create_conn_auth_pair 
+0x6326 025673 beq conn_sm_auth_pair_wait ,host_create_conn_auth_pair_wait 
+0x6327 025674 beq conn_sm_encrypt ,host_create_conn_encrypt 
+0x6328 025675 beq conn_sm_encrypt_wait ,host_create_conn_encrypt_wait 
+0x6329 025676 beq conn_sm_encrypt_wait_clear ,host_create_conn_encrypt_wait_clear 
+0x632a 025677 beq conn_sm_send_setup_complete ,host_create_conn_send_setup_complete 
+0x632b 025678 beq conn_sm_wait_setup_complete ,host_create_conn_wait_setup_complete 
+0x632c 025679 beq conn_sm_detach_delay ,host_create_conn_master_detach 
+0x632d 025680 beq conn_sm_send_version ,host_create_conn_send_version 
+0x632e 025681 beq conn_sm_wait_version ,host_create_conn_waiting 
+0x632f 025682 beq conn_sm_wait_switch_after_host_connection ,host_creat_conn_wait_switch 
+0x6330 025683 beq conn_sm_send_features_ext ,host_creat_conn_send_feat_ext 
+0x6331 025684 beq conn_sm_wait_features_ext ,host_create_conn_waiting 
+0x6332 025685 beq conn_sm_pairing ,host_create_conn_pairing 
+0x6333 025686 beq conn_sm_pairing_wait ,host_create_conn_pairing_wait 
+0x6334 025687 beq conn_sm_auth ,host_create_conn_auth 
+0x6335 025688 beq conn_sm_auth_wait ,host_create_conn_auth_wait 
+0x6336 025689 beq conn_sm_done ,host_create_conn_done 
+0x6337 025690 beq conn_sm_wait_done ,host_create_conn_done_wait 
+0x6338 025691 jam conn_sm_standby ,mem_conn_sm 
+0x6339 025693 rtn 
+:      025694 host_create_conn_done:
+0x633a 025695 fetch 1 ,mem_lmp_conn_state 
+0x633b 025696 rtnbit0 received_setup_complete 
+0x633c 025697 rtnbit0 sent_setup_complete 
+0x633d 025698 jam conn_sm_standby ,mem_conn_sm 
+0x633e 025699 call host_conn_judge_encrypt 
+0x633f 025700 branch scheduler_start_upper_sm 
+:      025702 host_conn_judge_encrypt:
+0x6340 025703 fetch 1 ,mem_connection_options 
+0x6341 025704 rtnbit0 connection_encrypt 
+0x6342 025705 jam conn_sm_encrypt_wait ,mem_conn_sm 
+0x6343 025706 rtn 
+:      025708 host_create_conn_done_wait:
+0x6344 025709 arg enpt_delay_timer ,queue 
+0x6345 025710 call timer_check 
+0x6346 025711 nrtn blank 
+0x6347 025712 jam conn_sm_done ,mem_conn_sm 
+0x6348 025713 rtn 
+:      025715 host_create_conn_auth:
+0x6349 025716 fetch 1 ,mem_connection_options 
+0x634a 025717 set0 connection_auth ,pdata 
+0x634b 025718 store 1 ,mem_connection_options 
+0x634c 025719 jam conn_sm_auth_wait ,mem_conn_sm 
+0x634d 025720 jam lmp_au_rand ,mem_lmo_opcode2 
+0x634e 025721 rtn 
+:      025722 host_create_conn_auth_wait:
+0x634f 025723 rtn 
+:      025724 host_create_conn_pairing:
+0x6350 025725 fetch 1 ,mem_pincode_state 
+0x6351 025726 rtnne pincode_state_pincode_ready 
+0x6352 025727 call host_auth 
+0x6353 025728 jam conn_sm_pairing_wait ,mem_conn_sm 
+0x6354 025729 rtn 
+:      025731 host_create_conn_pairing_wait:
+0x6355 025732 rtn 
+:      025733 host_creat_conn_send_feat_ext:
+0x6356 025734 jam conn_sm_wait_features_ext ,mem_conn_sm 
+0x6357 025735 jam lmp_ext_features_req ,mem_lmo_opcode2 
+0x6358 025736 rtn 
+:      025737 host_create_conn_send_version:
+0x6359 025738 jam conn_sm_wait_version ,mem_conn_sm 
+0x635a 025739 jam lmp_version_req ,mem_lmo_opcode2 
+0x635b 025740 rtn 
+:      025742 host_creat_conn_wait_switch:
+0x635c 025743 fetch 1 ,mem_switch_flag 
+0x635d 025744 rtneq switch_flag_init 
+0x635e 025745 beq switch_flag_accept ,host_create_conn_switch_accept 
+0x635f 025746 arg switch_wait_timer ,queue 
+0x6360 025747 call timer_check 
+0x6361 025748 nrtn blank 
+0x6362 025749 jam switch_flag_init ,mem_switch_flag 
+0x6363 025750 branch host_create_conn_switch 
+:      025751 host_create_conn_switch_accept:
+0x6364 025752 rtn master 
+0x6365 025753 branch host_create_conn_auth_pair 
+:      025755 host_create_conn_send_features:
+0x6366 025756 jam conn_sm_wait_features_res ,mem_conn_sm 
+0x6367 025757 jam lmp_features_req ,mem_lmo_opcode2 
+0x6368 025758 rtn 
+:      025759 host_create_conn_send_switch:
+0x6369 025760 jam lmp_switch_req ,mem_lmo_opcode2 
+0x636a 025761 set1 mark_switch_initiated ,mark 
+0x636b 025762 jam conn_sm_wait_conn_accept ,mem_conn_sm 
+0x636c 025763 setarg 0x1ff 
+0x636d 025764 store 2 ,mem_soft_timer 
+0x636e 025765 rtn 
+:      025766 host_create_conn_send_conn_req:
+0x636f 025767 jam conn_sm_wait_conn_accept ,mem_conn_sm 
+0x6370 025768 jam 0xff ,mem_soft_timer 
+0x6371 025769 set0 mark_reconn_recieve_switch ,mark 
+0x6372 025770 jam lmp_host_connection_req ,mem_lmo_opcode2 
+0x6373 025771 branch init_lmp_reinit 
+:      025772 host_create_conn_wait_accept:
+0x6374 025773 rtnmark1 mark_reconn_recieve_switch 
+0x6375 025774 fetch 2 ,mem_soft_timer 
+0x6376 025775 sub pdata ,1 ,pdata 
+0x6377 025776 branch host_create_conn_resend ,zero 
+0x6378 025777 store 2 ,mem_soft_timer 
+0x6379 025778 rtn 
+:      025779 host_create_conn_resend:
+0x637a 025780 jam conn_sm_send_switch ,mem_conn_sm 
+0x637b 025781 rtn 
+:      025782 host_create_conn_waiting:
+0x637c 025784 rtn 
+:      025786 host_create_conn_switch:
+0x637d 025787 fetch 1 ,mem_lmp_conn_state 
+0x637e 025788 rtnbit0 sent_setup_complete 
+0x637f 025789 rtnbit0 received_setup_complete 
+0x6380 025790 fetch 1 ,mem_connection_options 
+0x6381 025791 set0 connection_switch ,pdata 
+0x6382 025792 store 1 ,mem_connection_options 
+0x6383 025793 jam lmp_switch_req ,mem_lmo_opcode2 
+0x6384 025794 jam conn_sm_wait_switch_after_host_connection ,mem_conn_sm 
+0x6385 025795 rtn 
+:      025797 host_create_conn_send_setup_complete:
+0x6386 025798 jam conn_sm_wait_setup_complete ,mem_conn_sm 
+0x6387 025799 jam lmp_setup_complete ,mem_lmo_opcode2 
+0x6388 025800 rtn 
+:      025802 host_create_conn_wait_setup_complete:
+0x6389 025803 fetch 1 ,mem_lmp_conn_state 
+0x638a 025804 rtnbit0 received_setup_complete 
+0x638b 025805 jam conn_sm_standby ,mem_conn_sm 
+0x638c 025807 rtn 
+:      025808 host_create_conn_wait_setup_complete_rtn:
+0x638d 025809 jam conn_sm_auth_pair ,mem_conn_sm 
+0x638e 025810 rtn 
+:      025812 host_create_conn_master_detach:
+0x638f 025813 fetch 1 ,mem_soft_timer 
+0x6390 025814 increase -1 ,pdata 
+0x6391 025815 branch host_create_conn_send_detach ,blank 
+0x6392 025816 store 1 ,mem_soft_timer 
+0x6393 025817 rtn 
+:      025818 host_create_conn_send_detach:
+0x6394 025819 jam lmp_detach ,mem_lmo_opcode2 
+0x6395 025820 jam local_host ,mem_disconn_reason_send 
+0x6396 025821 jam 0 ,mem_conn_sm 
+0x6397 025822 rtn 
+:      025823 host_create_conn_auth_pair:
+0x6398 025825 fetch 1 ,mem_connection_options 
+0x6399 025826 bbit1 connection_switch ,host_create_conn_switch 
+0x639a 025827 bbit1 connection_auth ,host_create_conn_auth_pair_true 
+:      025828 host_create_conn_sm_done:
+0x639b 025829 jam conn_sm_done ,mem_conn_sm 
+0x639c 025830 rtn 
+:      025831 host_create_conn_auth_pair_true:
+0x639d 025832 fetch 1 ,mem_link_key_exists 
+0x639e 025833 branch host_create_conn_auth_pair_nokey ,blank 
+0x639f 025834 fetch 1 ,mem_lmp_conn_state 
+0x63a0 025835 rtnbit0 sent_setup_complete 
+0x63a1 025836 rtnbit0 received_setup_complete 
+0x63a2 025837 fetch 4 ,mem_aurand_send_delay_time 
+0x63a3 025838 arg 100 ,temp 
+0x63a4 025839 iadd temp ,temp 
+0x63a5 025840 copy clkn_bt ,pdata 
+0x63a6 025841 isub temp ,null 
+0x63a7 025842 nrtn positive 
+0x63a8 025843 branch host_create_conn_auth 
+:      025847 host_create_conn_auth_pair_nokey:
+0x63a9 025848 jam conn_sm_pairing ,mem_conn_sm 
+0x63aa 025849 jam 4 ,mem_pin_length 
+0x63ab 025850 setarg 0x3030 
+0x63ac 025851 store 2 ,mem_pin 
+0x63ad 025852 istore 2 ,contw 
+0x63ae 025853 jam pincode_state_pincode_ready ,mem_pincode_state 
+0x63af 025854 branch host_create_conn_pairing 
+:      025856 host_create_conn_auth_pair_wait:
+0x63b0 025857 rtn 
+:      025858 host_create_conn_encrypt:
+0x63b1 025859 fetch 1 ,mem_connection_options 
+0x63b2 025860 bbit1 connection_encrypt ,host_create_conn_encrypt_start 
+0x63b3 025861 jam conn_sm_done ,mem_conn_sm 
+0x63b4 025862 rtn 
+:      025864 host_create_conn_encrypt_start:
+0x63b5 025865 fetch 1 ,mem_connection_options 
+0x63b6 025866 set0 connection_encrypt ,pdata 
+0x63b7 025867 store 1 ,mem_connection_options 
+0x63b8 025868 jam lmp_encryption_mode_req ,mem_lmo_opcode2 
+0x63b9 025869 rtn 
+:      025871 host_create_conn_encrypt_wait:
+0x63ba 025872 fetch 1 ,mem_wait_encryption 
+0x63bb 025873 rtn blank 
+0x63bc 025874 jam conn_sm_standby ,mem_conn_sm 
+0x63bd 025875 branch host_create_conn_encrypt_start 
+:      025877 host_create_conn_encrypt_wait_clear:
+0x63be 025878 jam conn_sm_send_setup_complete ,mem_conn_sm 
+0x63bf 025879 rtn 
+:      025881 host_auth:
+0x63c0 025882 fetch 1 ,mem_op 
+0x63c1 025883 bbit1 op_inrand_req ,remote_auth 
+0x63c2 025884 call tid_initiate 
+0x63c3 025885 jam lmp_in_rand ,mem_lmo_opcode2 
+0x63c4 025886 branch cmd_exit 
+:      025887 remote_auth:
+0x63c5 025888 fetch 1 ,mem_op 
+0x63c6 025889 set0 op_inrand_req ,pdata 
+0x63c7 025890 store 1 ,mem_op 
+0x63c8 025891 call lmp_accept_inrand 
+0x63c9 025892 call tid_set_reply 
+0x63ca 025893 branch cmd_exit 
+:      025895 pincode_reinit:
+0x63cb 025896 setarg 4 
+0x63cc 025897 store 1 ,mem_pin_length 
+0x63cd 025898 setarg 0x3030 
+0x63ce 025899 istore 2 ,contw 
+0x63cf 025900 istore 2 ,contw 
+0x63d0 025901 rtn 
+:      025907 twspi_reset:
+0x63d1 025908 bpatchx patch31_4 ,mem_patch31 
+0x63d2 025909 hfetch 1 ,core_gpio_oe3 
+0x63d3 025910 arg 0x06 ,temp 
+0x63d4 025911 ior temp ,pdata 
+0x63d5 025912 hstore 1 ,core_gpio_oe3 
+0x63d6 025913 hfetch 1 ,core_gpio_out3 
+0x63d7 025914 ior temp ,pdata 
+0x63d8 025915 hstore 1 ,core_gpio_out3 
+0x63d9 025916 call twspi_disable 
+0x63da 025917 hfetch 1 ,core_gpio_out3 
+0x63db 025918 set0 1 ,pdata 
+0x63dc 025919 set0 2 ,pdata 
+0x63dd 025920 hstore 1 ,core_gpio_out3 
+0x63de 025921 nop 30 
+0x63df 025922 branch twspi_enable 
+:      025924 twspi_reset2:
+0x63e0 025925 hfetch 1 ,core_gpio_oe3 
+0x63e1 025926 arg 0xc0 ,temp 
+0x63e2 025927 ior temp ,pdata 
+0x63e3 025928 hstore 1 ,core_gpio_oe3 
+0x63e4 025929 hfetch 1 ,core_gpio_out3 
+0x63e5 025930 ior temp ,pdata 
+0x63e6 025931 hstore 1 ,core_gpio_out3 
+0x63e7 025932 call twspi_disable 
+0x63e8 025933 hfetch 1 ,core_gpio_out3 
+0x63e9 025934 set0 6 ,pdata 
+0x63ea 025935 set0 7 ,pdata 
+0x63eb 025936 hstore 1 ,core_gpio_out3 
+0x63ec 025937 nop 30 
+0x63ed 025938 branch twspi_enable2 
+:      025940 twspi_disable:
+0x63ee 025941 hfetch 1 ,core_gpio_sel1 
+0x63ef 025942 and pdata ,0xfc ,pdata 
+0x63f0 025943 hstore 1 ,core_gpio_sel1 
+0x63f1 025944 rtn 
+:      025945 twspi_enable:
+0x63f2 025946 hfetch 1 ,core_gpio_sel1 
+0x63f3 025947 or pdata ,0x01 ,pdata 
+0x63f4 025948 hstore 1 ,core_gpio_sel1 
+0x63f5 025949 rtn 
+:      025950 twspi_enable2:
+0x63f6 025951 hfetch 1 ,core_gpio_sel1 
+0x63f7 025952 or pdata ,0x03 ,pdata 
+0x63f8 025953 set0 4 ,pdata 
+0x63f9 025954 hstore 1 ,core_gpio_sel1 
+0x63fa 025955 rtn 
+:      025959 sensor_read:
+0x63fb 025960 copy pdata ,regb 
+0x63fc 025961 call spi_ncs_enable 
+0x63fd 025962 nop 100 
+0x63fe 025963 copy regb ,pdata 
+0x63ff 025964 call twspi_read 
+0x6400 025965 copy pdata ,regb 
+0x6401 025966 call spi_ncs_disable 
+0x6402 025967 nop 100 
+0x6403 025968 copy regb ,pdata 
+0x6404 025969 rtn 
+:      025971 sensor_write:
+0x6405 025972 copy pdata ,regb 
+0x6406 025973 call spi_ncs_enable 
+0x6407 025974 nop 100 
+0x6408 025975 copy regb ,pdata 
+0x6409 025976 call twspi_write 
+0x640a 025977 call spi_ncs_disable 
+0x640b 025978 nop 100 
+0x640c 025979 rtn 
+:      025982 spi_ncs_gpio_init:
+0x640d 025983 fetcht 1 ,mem_spi_ncs_gpio 
+0x640e 025984 branch gpio_config_output 
+:      025987 spi_ncs_enable:
+0x640f 025988 fetcht 1 ,mem_spi_ncs_gpio 
+0x6410 025989 branch gpio_out_active 
+:      025992 spi_ncs_disable:
+0x6411 025993 fetcht 1 ,mem_spi_ncs_gpio 
+0x6412 025994 branch gpio_out_inactive 
+:      025997 twspi_write:
+0x6413 025998 branch spid_write_reg 
+:      026000 twspi_read:
+0x6414 026001 branch spid_read_reg 
+:      026008 read_function_aes:
+0x6415 026009 nbranch read_function ,user 
+0x6416 026010 hfetch 1 ,core_gpio_key2 
+0x6417 026011 or_into 0x2 ,pdata 
+0x6418 026012 hstore 1 ,core_gpio_key2 
+:      026013 read_function:
+0x6419 026014 copy temp ,null 
+0x641a 026015 branch read_fuction_zero ,zero 
+0x641b 026016 copy regc ,pc 
+:      026017 read_fuction_zero:
+0x641c 026018 isolate0 0 ,null 
+0x641d 026019 branch set_ucode_status 
+:      026022 get_block_header:
+0x641e 026023 force 4 ,temp 
+:      026024 get_block_header0:
+0x641f 026025 arg mem_ucode_buf ,rega 
+0x6420 026026 hfetch 1 ,core_gpio_key2 
+0x6421 026027 and_into 0xfd ,pdata 
+0x6422 026028 hstore 1 ,core_gpio_key2 
+0x6423 026029 call read_function 
+0x6424 026030 arg 0x55aa ,rega 
+0x6425 026031 fetch 2 ,mem_ucode_buf 
+0x6426 026032 ifetcht 2 ,contr 
+0x6427 026033 isub rega ,null 
+0x6428 026034 rtn 
+:      026036 read_first_block:
+0x6429 026037 arg 2 ,temp 
+0x642a 026038 arg mem_ucode_ptr ,rega 
+0x642b 026039 call read_function 
+0x642c 026040 fetch 2 ,mem_ucode_ptr 
+0x642d 026041 store 2 ,mem_addr_mi 
+0x642e 026042 call get_iv ,user 
+0x642f 026043 rtn 
+:      026045 get_iv:
+0x6430 026046 arg 16 ,temp 
+0x6431 026047 arg mem_ucode_keybuf ,rega 
+0x6432 026048 hfetch 1 ,core_gpio_key2 
+0x6433 026049 and_into 0xfd ,pdata 
+0x6434 026050 hstore 1 ,core_gpio_key2 
+0x6435 026051 call read_function 
+0x6436 026052 arg mem_ucode_keybuf ,contr 
+0x6437 026053 arg 16 ,loopcnt 
+0x6438 026054 call aes_load_data 
+0x6439 026055 call aes_init 
+0x643a 026056 call aes_clear_data 
+0x643b 026057 branch do_aes_cbc 
+:      026059 load_storage:
+0x643c 026060 disable match 
+0x643d 026061 call get_block_header 
+0x643e 026062 nrtn zero 
+0x643f 026063 enable match 
+0x6440 026064 jam 0x80 ,core_ucode_ctrl 
+0x6441 026065 jam 0 ,core_ucode_hi 
+0x6442 026066 jam 0 ,core_ucode_low 
+0x6443 026067 arg core_ucode_data ,rega 
+0x6444 026068 call read_function_aes 
+0x6445 026069 jam 0x0 ,core_ucode_ctrl 
+:      026070 load_storage_loop:
+0x6446 026071 arg 6 ,temp 
+0x6447 026072 call get_block_header0 
+0x6448 026073 nrtn zero 
+0x6449 026074 ifetch 2 ,contr 
+0x644a 026075 iforce rega 
+0x644b 026076 call read_function 
+0x644c 026077 branch load_storage_loop 
+:      026081 reload_eeprom:
+0x644d 026082 call clean_mem 
+0x644e 026083 setarg 0x1000 
+0x644f 026084 store 2 ,mem_addr_mi 
+0x6450 026085 arg iicd_read_eep ,regc 
+0x6451 026086 arg 2 ,loopcnt 
+:      026087 reload_eeprom_loop:
+0x6452 026088 call get_block_header 
+0x6453 026089 nrtn zero 
+0x6454 026090 fetch 2 ,mem_addr_mi 
+0x6455 026091 byteswap pdata ,pdata 
+0x6456 026092 iadd temp ,pdata 
+0x6457 026093 byteswap pdata ,pdata 
+0x6458 026094 store 2 ,mem_addr_mi 
+0x6459 026095 loop reload_eeprom_loop 
+0x645a 026096 branch load_storage_loop 
+:      026098 loadcode:
+0x645b 026099 call clean_mem 
+0x645c 026100 disable user 
+0x645d 026101 call otp_enable_chgpump 
+0x645e 026102 setarg otp_ucode_flag 
+0x645f 026103 arg mem_otp_ucode_flag ,rega 
+0x6460 026104 arg 2 ,temp 
+0x6461 026105 call otpd_read_data 
+0x6462 026106 fetch 2 ,mem_otp_ucode_flag 
+0x6463 026107 bbit0 otp_uflag_aes ,loadcode_otp 
+0x6464 026108 jam 0x25 ,core_clkoff 
+0x6465 026109 setarg otp_ucode_aeskey 
+0x6466 026110 arg mem_ucode_keybuf ,rega 
+0x6467 026111 arg 16 ,temp 
+0x6468 026112 call otpd_read_data 
+0x6469 026113 jam lock_otp ,core_misc_ctrl 
+0x646a 026114 set1 mark_otp_encrypt ,mark 
+0x646b 026115 arg mem_ucode_keybuf ,contr 
+0x646c 026116 call load_key 
+0x646d 026117 enable user 
+:      026118 loadcode_otp:
+0x646e 026119 jam 0 ,mem_loadcode_times 
+:      026120 loadcode_otp_2:
+0x646f 026121 call loadcode_check_times 
+0x6470 026122 fetch 2 ,mem_otp_ucode_flag 
+0x6471 026123 byteswap pdata ,pdata 
+0x6472 026124 arg 0x7ff ,temp 
+0x6473 026125 iand temp ,pdata 
+0x6474 026126 branch loadcode_iic ,zero 
+0x6475 026127 call otp_set_addr 
+0x6476 026128 arg otpd_read_code ,regc 
+0x6477 026129 call get_iv ,user 
+0x6478 026130 call load_storage 
+0x6479 026131 fetch 1 ,mem_ucode_status 
+0x647a 026132 bbit0 0 ,loadcode_otp_2 
+:      026134 loadcode_iic:
+0x647b 026135 call otp_disable_chgpump 
+0x647c 026136 jam 0 ,mem_loadcode_times 
+:      026137 loadcode_iic_2:
+0x647d 026138 call loadcode_check_times 
+0x647e 026139 call clear_eeprom_size_2k 
+0x647f 026140 fetch 1 ,mem_otp_ucode_flag 
+0x6480 026141 bbit1 otp_uflag_skip_eep ,loadcode_spi 
+0x6481 026142 call loadcode_iic_by_eeprom 
+0x6482 026143 nbranch loadcode_iic_eeprom_2k ,match 
+0x6483 026144 fetch 1 ,mem_ucode_status 
+0x6484 026145 bbit0 0 ,loadcode_iic_2 
+0x6485 026146 branch loadcode_hci 
+:      026147 loadcode_iic_eeprom_2k:
+0x6486 026148 call set_eeprom_size_2k 
+0x6487 026149 fetch 1 ,mem_otp_ucode_flag 
+0x6488 026150 bbit1 otp_uflag_skip_eep ,loadcode_spi 
+0x6489 026151 call loadcode_iic_by_eeprom 
+0x648a 026152 nbranch loadcode_spi ,match 
+0x648b 026153 fetch 1 ,mem_ucode_status 
+0x648c 026154 bbit0 0 ,loadcode_iic_2 
+0x648d 026155 branch loadcode_hci 
+:      026157 loadcode_spi:
+0x648e 026158 jam 0 ,mem_loadcode_times 
+:      026159 loadcode_spi_2:
+0x648f 026160 call loadcode_check_times 
+0x6490 026161 fetch 1 ,mem_otp_ucode_flag 
+0x6491 026162 bbit1 otp_uflag_skip_flash ,loadcode_hci 
+0x6492 026163 setarg 0x0 
+0x6493 026164 store 3 ,mem_addr_hi 
+0x6494 026165 call spid_init_flash 
+0x6495 026166 arg spid_load_flash ,regc 
+0x6496 026167 call read_first_block 
+0x6497 026168 call load_storage 
+0x6498 026169 nbranch loadcode_hci ,match 
+0x6499 026170 fetch 1 ,mem_ucode_status 
+0x649a 026171 bbit0 0 ,loadcode_spi_2 
+:      026173 loadcode_hci:
+0x649b 026174 bmark1 mark_otp_encrypt ,loadcode_hci_enc 
+0x649c 026175 call clear_key_buf 
+:      026176 loadcode_hci_enc:
+0x649d 026177 fetch 1 ,mem_otp_ucode_flag 
+0x649e 026178 bbit0 otp_uflag_hci ,clear_key_buf 
+0x649f 026179 jam 0x21 ,core_clkoff 
+0x64a0 026180 call hci_init 
+:      026181 loadcode_hci_loop:
+0x64a1 026182 call hci_rx_packet 
+0x64a2 026183 branch loadcode_hci_loop 
+:      026185 clear_key_buf:
+0x64a3 026186 setarg 0 
+0x64a4 026187 store 8 ,mem_ucode_keybuf 
+0x64a5 026188 store 8 ,mem_ucode_keybuf + 8 
+0x64a6 026189 force regidx_key ,regext_index 
+0x64a7 026190 call aes_clear 
+0x64a8 026191 jam 0x21 ,core_clkoff 
+0x64a9 026192 rtn 
+:      026195 loadcode_iic_by_eeprom:
+0x64aa 026196 setarg 0x0 
+0x64ab 026197 store 2 ,mem_addr_mi 
+0x64ac 026198 arg iicd_read_eep ,regc 
+0x64ad 026199 call iicd_init_12m 
+0x64ae 026200 call read_first_block 
+0x64af 026201 branch load_storage 
+:      026204 loadcode_check_times:
+0x64b0 026205 fetch 1 ,mem_loadcode_times 
+0x64b1 026206 increase 1 ,pdata 
+0x64b2 026207 sub pdata ,3 ,null 
+0x64b3 026208 nbranch loadcode_error ,positive 
+0x64b4 026209 store 1 ,mem_loadcode_times 
+0x64b5 026210 rtn 
+:      026212 loadcode_error:
+0x64b6 026213 call clear_key_buf 
+0x64b7 026214 call ice_break 
+0x64b8 026215 rtn 
+:      026219 set_ucode_status:
+0x64b9 026220 fetch 1 ,mem_ucode_status 
+0x64ba 026221 lshift pdata ,pdata 
+0x64bb 026222 setflag true ,0 ,pdata 
+0x64bc 026223 isolate0 15 ,rega 
+0x64bd 026224 rtn true 
+0x64be 026225 store 1 ,mem_ucode_status 
+0x64bf 026226 rtn 
+:      026229 decrypt_code:
+0x64c0 026230 hfetch 1 ,core_gpio_key2 
+0x64c1 026231 rtnbit0 1 
+0x64c2 026232 branch decrypt_code_skip 
+:      026233 decrypt_code_loop:
+0x64c3 026234 hfetch 1 ,core_dma_status 
+0x64c4 026235 qisolate1 pdata 
+0x64c5 026236 rtn true 
+:      026237 decrypt_code_skip:
+0x64c6 026238 hfetch 1 ,core_misc_status 
+0x64c7 026239 bbit0 1 ,decrypt_code_loop 
+0x64c8 026240 call do_aes_cbc 
+0x64c9 026241 branch decrypt_code_loop 
+:      026245 load_ucode:
+0x64ca 026246 fetch 2 ,mem_patch_ptr 
+0x64cb 026247 rtn blank 
+0x64cc 026248 jam 0x80 ,core_ucode_ctrl 
+0x64cd 026249 jam 0 ,core_ucode_hi 
+0x64ce 026250 jam 0 ,core_ucode_low 
+0x64cf 026251 fetcht 2 ,mem_patch_len 
+0x64d0 026252 lshift2 temp ,loopcnt 
+0x64d1 026253 iforce contr 
+:      026254 load_ucode_loop:
+0x64d2 026255 ifetch 1 ,contr 
+0x64d3 026256 hstore 1 ,core_ucode_data 
+0x64d4 026257 loop load_ucode_loop 
+0x64d5 026258 jam 0x0 ,core_ucode_ctrl 
+0x64d6 026259 rtn 
+:      026264 spid_init:
+0x64d7 026265 bpatchx patch31_5 ,mem_patch31 
+0x64d8 026266 call spid_init_common 
+0x64d9 026267 branch twspi_enable 
+:      026269 spid_init2:
+0x64da 026270 call spid_init_common 
+0x64db 026271 call twspi_disable 
+0x64dc 026272 branch twspi_enable2 
+:      026274 spid_init_common:
+0x64dd 026275 fetch 1 ,mem_spi_init_clk 
+0x64de 026276 hstore 1 ,core_spid_ctrl 
+0x64df 026277 fetch 1 ,mem_spi_init_delay_time 
+0x64e0 026278 hstore 1 ,core_spid_delay 
+0x64e1 026279 setarg mem_spid_tbuf 
+0x64e2 026280 hstore 2 ,core_spid_txaddr 
+0x64e3 026281 setarg mem_spid_rbuf 
+0x64e4 026282 hstore 2 ,core_spid_rxaddr 
+0x64e5 026283 branch twspi_disable 
+:      026285 spid_reset:
+0x64e6 026286 hfetch 1 ,core_spid_ctrl 
+0x64e7 026287 set1 7 ,pdata 
+0x64e8 026288 hstore 1 ,core_spid_ctrl 
+0x64e9 026289 set0 7 ,pdata 
+0x64ea 026290 hstore 1 ,core_spid_ctrl 
+0x64eb 026291 rtn 
+:      026295 spid_write_reg:
+0x64ec 026296 set1 7 ,pdata 
+0x64ed 026297 store 2 ,mem_spid_tbuf 
+0x64ee 026298 bpatchx patch31_6 ,mem_patch31 
+0x64ef 026299 jam 2 ,core_spid_txlen 
+0x64f0 026300 jam 0 ,core_spid_rxlen 
+0x64f1 026301 jam spid_start ,core_misc_ctrl 
+0x64f2 026302 branch wait_spid_done 
+:      026305 spid_read_reg:
+0x64f3 026306 force 1 ,temp 
+:      026308 spid_read_regs:
+0x64f4 026310 store 1 ,mem_spid_tbuf 
+0x64f5 026311 bpatchx patch31_7 ,mem_patch31 
+0x64f6 026312 jam 1 ,core_spid_txlen 
+0x64f7 026313 hstoret 2 ,core_spid_rxlen 
+0x64f8 026314 jam spid_start ,core_misc_ctrl 
+0x64f9 026315 call wait_spid_done 
+0x64fa 026316 fetch 1 ,mem_spid_rbuf 
+0x64fb 026317 rtn 
+:      026319 wait_spid_done:
+0x64fc 026320 fetch 2 ,mem_afh_error_total 
+0x64fd 026321 increase 1 ,pdata 
+0x64fe 026322 store 2 ,mem_afh_error_total 
+0x64ff 026323 hfetch 1 ,core_dma_status 
+0x6500 026324 bbit0 spid_done ,wait_spid_done 
+0x6501 026325 rtn 
+:      026327 spid_init_flash:
+0x6502 026328 jam 0x40 ,core_spid_ctrl 
+0x6503 026329 jam 0x0 ,core_spid_delay 
+0x6504 026330 hfetch 1 ,core_gpio_sel1 
+0x6505 026331 set0 0 ,pdata 
+0x6506 026332 set1 1 ,pdata 
+0x6507 026333 hstore 1 ,core_gpio_sel1 
+0x6508 026334 setarg 0 
+0x6509 026335 store 4 ,mem_spid_tbuf 
+0x650a 026336 rtn 
+:      026339 spid_unlock_flash:
+0x650b 026340 setarg 0 
+0x650c 026341 hstore 2 ,core_spid_rxlen 
+0x650d 026342 setarg 1 
+0x650e 026343 hstore 2 ,core_spid_txlen 
+0x650f 026344 setarg mem_spid_tbuf 
+0x6510 026345 hstore 2 ,core_spid_txaddr 
+0x6511 026346 jam 6 ,mem_spid_tbuf 
+0x6512 026347 jam spid_start ,core_misc_ctrl 
+0x6513 026348 branch wait_spid_done 
+:      026363 flash_write:
+0x6514 026364 disable user 
+0x6515 026365 copy pdata ,regb 
+0x6516 026366 fetch 1 ,mem_spi_write_flash_sm 
+0x6517 026367 rtnne flash_sm_no_buys 
+0x6518 026368 enable user 
+0x6519 026369 copy regb ,pdata 
+0x651a 026370 branch flash_write_start 
+:      026373 flash_write_spi_sm_timer:
+0x651b 026374 fetch 1 ,mem_spi_write_flash_sm 
+0x651c 026375 beq flash_sm_start ,flash_write_start 
+0x651d 026376 beq flash_sm_erase_sector ,flash_erase_sector 
+0x651e 026377 beq flash_sm_wait_erase_sector ,flash_wait_erase_sector 
+0x651f 026378 beq flash_sm_write_data ,flash_write_data 
+0x6520 026379 beq flash_sm_wait_write_data ,flash_wait_write_data 
+0x6521 026380 rtn 
+:      026382 flash_write_start:
+0x6522 026383 store 3 ,mem_spi_write_addr 
+0x6523 026384 copy rega ,pdata 
+0x6524 026385 store 2 ,mem_spi_write_ptr 
+0x6525 026386 storet 2 ,mem_spi_write_len 
+0x6526 026387 jam flash_sm_erase_sector ,mem_spi_write_flash_sm 
+0x6527 026388 branch spid_init_flash 
+:      026389 flash_erase_sector:
+0x6528 026390 call spid_init_flash 
+0x6529 026391 jam flash_sm_wait_erase_sector ,mem_spi_write_flash_sm 
+0x652a 026392 call spid_unlock_flash 
+0x652b 026393 arg mem_spid_tbuf ,rega 
+0x652c 026394 fetch 3 ,mem_spi_write_addr 
+0x652d 026395 jam 4 ,core_spid_txlen 
+0x652e 026396 arg flash_command_sector_erase ,temp 
+0x652f 026397 branch spid_write_flash_common 
+:      026399 flash_wait_erase_sector:
+0x6530 026400 call spid_init_flash 
+0x6531 026401 call spid_unlock_flash 
+0x6532 026402 setarg flash_read_satus 
+0x6533 026403 call spid_read_reg 
+0x6534 026404 rtnbit1 flash_status_wip 
+0x6535 026405 jam flash_sm_write_data ,mem_spi_write_flash_sm 
+0x6536 026406 rtn 
+:      026407 flash_write_data:
+0x6537 026408 call spid_init_flash 
+0x6538 026409 jam flash_sm_wait_write_data ,mem_spi_write_flash_sm 
+0x6539 026410 call spid_unlock_flash 
+0x653a 026411 call flash_data_preserve 
+0x653b 026412 call spid_write_flash 
+0x653c 026413 branch flash_data_recover 
+:      026414 flash_wait_write_data:
+0x653d 026415 call spid_init_flash 
+0x653e 026416 call spid_unlock_flash 
+0x653f 026417 setarg flash_read_satus 
+0x6540 026418 call spid_read_reg 
+0x6541 026419 rtnbit1 flash_status_wip 
+0x6542 026420 jam flash_sm_no_buys ,mem_spi_write_flash_sm 
+0x6543 026421 fetch 2 ,mem_cb_spi_flash_write_complate 
+0x6544 026422 branch callback_func 
+:      026423 flash_data_recover:
+0x6545 026424 fetch 4 ,mem_temp 
+0x6546 026425 fetcht 2 ,mem_spi_write_ptr 
+0x6547 026426 increase -4 ,temp 
+0x6548 026427 istore 4 ,temp 
+0x6549 026428 rtn 
+:      026429 flash_data_preserve:
+0x654a 026430 fetcht 2 ,mem_spi_write_ptr 
+0x654b 026431 copy temp ,rega 
+0x654c 026432 increase -4 ,temp 
+0x654d 026433 ifetch 4 ,temp 
+0x654e 026434 store 4 ,mem_temp 
+0x654f 026435 fetcht 2 ,mem_spi_write_len 
+0x6550 026436 fetch 3 ,mem_spi_write_addr 
+0x6551 026437 rtn 
+:      026441 spid_write_flash:
+0x6552 026442 increase 4 ,temp 
+0x6553 026443 hstoret 2 ,core_spid_txlen 
+0x6554 026444 arg flash_command_write_data ,temp 
+0x6555 026445 increase -4 ,rega 
+:      026446 spid_write_flash_common:
+0x6556 026448 istoret 1 ,rega 
+0x6557 026449 rshift16 pdata ,temp 
+0x6558 026450 istoret 1 ,contw 
+0x6559 026451 rshift8 pdata ,temp 
+0x655a 026452 istoret 1 ,contw 
+0x655b 026453 istore 1 ,contw 
+0x655c 026454 deposit rega 
+0x655d 026455 hstore 2 ,core_spid_txaddr 
+0x655e 026456 setarg 0 
+0x655f 026457 hstore 2 ,core_spid_rxlen 
+0x6560 026458 jam spid_start ,core_misc_ctrl 
+0x6561 026459 branch wait_spid_done 
+:      026463 spid_read_flash:
+0x6562 026464 hstoret 2 ,core_spid_rxlen 
+0x6563 026465 rshift16 pdata ,temp 
+0x6564 026466 storet 1 ,mem_addr_hi 
+0x6565 026467 rshift8 pdata ,temp 
+0x6566 026468 storet 1 ,mem_addr_mi 
+0x6567 026469 store 1 ,mem_addr_lo 
+0x6568 026470 setarg 4 
+0x6569 026471 hstore 2 ,core_spid_txlen 
+0x656a 026472 jam flash_command_read_data ,mem_spid_tbuf 
+0x656b 026473 setarg mem_spid_tbuf 
+0x656c 026474 hstore 2 ,core_spid_txaddr 
+0x656d 026475 deposit rega 
+0x656e 026476 hstore 2 ,core_spid_rxaddr 
+0x656f 026477 hfetch 1 ,core_spid_ctrl 
+0x6570 026478 isolate0 15 ,rega 
+0x6571 026479 setflag true ,6 ,pdata 
+0x6572 026480 hstore 1 ,core_spid_ctrl 
+0x6573 026481 jam spid_start ,core_misc_ctrl 
+:      026482 spi_read_flash_wait:
+0x6574 026483 hfetch 1 ,core_dma_status 
+0x6575 026484 bbit1 7 ,spi_read_flash_wait 
+0x6576 026485 arg spid_done ,queue 
+0x6577 026486 branch wait_spid_done 
+:      026490 spid_load_flash:
+0x6578 026491 hstoret 2 ,core_spid_rxlen 
+0x6579 026492 setarg 4 
+0x657a 026493 hstore 2 ,core_spid_txlen 
+0x657b 026494 jam 3 ,mem_spid_tbuf 
+0x657c 026495 setarg mem_spid_tbuf 
+0x657d 026496 hstore 2 ,core_spid_txaddr 
+0x657e 026497 deposit rega 
+0x657f 026498 hstore 2 ,core_spid_rxaddr 
+0x6580 026499 hfetch 1 ,core_spid_ctrl 
+0x6581 026500 isolate0 15 ,rega 
+0x6582 026501 setflag true ,6 ,pdata 
+0x6583 026502 hstore 1 ,core_spid_ctrl 
+0x6584 026503 jam spid_start ,core_misc_ctrl 
+:      026504 spi_load_flash_wait:
+0x6585 026505 hfetch 1 ,core_dma_status 
+0x6586 026506 bbit1 7 ,spi_load_flash_wait 
+0x6587 026507 arg spid_done ,queue 
+0x6588 026508 call decrypt_code 
+0x6589 026509 call wait_spid_done 
+0x658a 026510 isolate1 spid_crcok ,pdata 
+0x658b 026511 call set_ucode_status 
+0x658c 026512 fetch 1 ,mem_addr_hi 
+0x658d 026513 lshift16 pdata ,regb 
+0x658e 026514 fetch 1 ,mem_addr_mi 
+0x658f 026515 lshift8 pdata ,pdata 
+0x6590 026516 ior regb ,regb 
+0x6591 026517 fetch 1 ,mem_addr_lo 
+0x6592 026518 ior regb ,pdata 
+0x6593 026519 iadd temp ,pdata 
+0x6594 026520 store 1 ,mem_addr_lo 
+0x6595 026521 rshift8 pdata ,pdata 
+0x6596 026522 store 1 ,mem_addr_mi 
+0x6597 026523 rshift8 pdata ,pdata 
+0x6598 026524 store 1 ,mem_addr_hi 
+0x6599 026525 rtn 
+:      026530 soft_reset_chip:
+0x659a 026531 jam 1 ,core_reset 
+0x659b 026532 rtn 
+:      026538 iic_init_390k:
+0x659c 026539 jam 12 ,core_iicd_scl_low 
+0x659d 026540 jam 13 ,core_iicd_scl_high 
+0x659e 026541 jam 13 ,core_iicd_start_setup 
+0x659f 026542 jam 13 ,core_iicd_start_hold 
+0x65a0 026543 jam 13 ,core_iicd_stop_setup 
+0x65a1 026544 jam 12 ,core_iicd_data_setup 
+0x65a2 026545 branch iicd_init_gpio 
+:      026548 iicd_init_12m:
+0x65a3 026549 jam 5 ,core_iicd_scl_low 
+0x65a4 026550 jam 7 ,core_iicd_scl_high 
+0x65a5 026551 jam 7 ,core_iicd_start_setup 
+0x65a6 026552 jam 7 ,core_iicd_start_hold 
+0x65a7 026553 jam 7 ,core_iicd_stop_setup 
+0x65a8 026554 jam 5 ,core_iicd_data_setup 
+:      026555 iicd_init_gpio:
+0x65a9 026556 hfetch 1 ,core_gpio_pu3 
+0x65aa 026557 or_into 0xc0 ,pdata 
+0x65ab 026558 hstore 1 ,core_gpio_pu3 
+0x65ac 026559 hfetch 1 ,core_gpio_sel1 
+0x65ad 026560 or_into 0x10 ,pdata 
+0x65ae 026561 hstore 1 ,core_gpio_sel1 
+0x65af 026562 rtn 
+:      026566 wait_iicd_done:
+0x65b0 026567 hfetch 1 ,core_dma_status 
+0x65b1 026568 bbit0 iicd_done ,wait_iicd_done 
+0x65b2 026569 rtn 
+:      026577 iicd_read_data:
+0x65b3 026578 hstore 2 ,core_iicd_txlen 
+0x65b4 026579 deposit rega 
+0x65b5 026580 hstore 2 ,core_iicd_txaddr 
+0x65b6 026581 deposit regb 
+0x65b7 026582 hstore 2 ,core_iicd_rxaddr 
+0x65b8 026583 deposit temp 
+0x65b9 026584 hstore 2 ,core_iicd_rxlen 
+0x65ba 026585 arg 1 ,temp 
+0x65bb 026586 nsetflag blank ,1 ,temp 
+0x65bc 026587 hstore 1 ,core_iicd_ctrl 
+0x65bd 026588 jam iicd_start ,core_misc_ctrl 
+0x65be 026589 branch wait_iicd_done 
+:      026592 set_eeprom_size_2k:
+0x65bf 026593 set1 mark_eeprom_size ,mark 
+0x65c0 026594 jam 0x08 ,mem_eeprom_block_size 
+0x65c1 026595 rtn 
+:      026597 clear_eeprom_size_2k:
+0x65c2 026598 set0 mark_eeprom_size ,mark 
+0x65c3 026599 jam 0x20 ,mem_eeprom_block_size 
+0x65c4 026600 rtn 
+:      026603 iicd_read_eep_data_size_2k:
+0x65c5 026604 fetch 1 ,mem_eeprom_base 
+0x65c6 026605 iadd regb ,pdata 
+0x65c7 026606 store 1 ,mem_addr_mi 
+0x65c8 026607 branch iicd_read_eep_size_2k 
+:      026609 iicd_read_eep_size_2k_lcadcode:
+0x65c9 026610 fetch 2 ,mem_addr_mi 
+0x65ca 026611 byteswap pdata ,pdata 
+0x65cb 026612 store 1 ,mem_addr_mi 
+:      026617 iicd_read_eep_size_2k:
+0x65cc 026618 setarg 3 
+0x65cd 026619 hstore 2 ,core_iicd_txlen 
+0x65ce 026620 jam 0xa0 ,mem_iicd_tbuf 
+0x65cf 026621 jam 0xa1 ,mem_iicd_tbuf + 2 
+0x65d0 026622 branch iicd_read_eep_common 
+:      026628 iicd_write_protect_eep_data:
+0x65d1 026629 storet 2 ,mem_temp 
+0x65d2 026630 call iicd_eeprom_write_enable 
+0x65d3 026631 fetcht 2 ,mem_temp 
+0x65d4 026632 call iicd_write_eep_data 
+0x65d5 026633 branch iicd_eeprom_write_disable 
+:      026635 iicd_eeprom_write_enable:
+0x65d6 026636 fetch 1 ,mem_eeprom_wp_gpio 
+0x65d7 026637 rtneq gpio_disable 
+0x65d8 026638 bbit0 6 ,iicd_wp_gpio_output_low 
+0x65d9 026639 setarg 150000 
+0x65da 026640 call sleep 
+:      026641 iicd_wp_gpio_output_low:
+0x65db 026642 fetcht 1 ,mem_eeprom_wp_gpio 
+0x65dc 026643 branch gpio_out_active 
+:      026645 iicd_eeprom_write_disable:
+0x65dd 026646 fetcht 1 ,mem_eeprom_wp_gpio 
+0x65de 026647 branch gpio_out_inactive 
+:      026652 iicd_read_eep_data:
+0x65df 026653 bpatchx patch32_0 ,mem_patch32 
+0x65e0 026654 bmark1 mark_eeprom_size ,iicd_read_eep_data_size_2k 
+0x65e1 026655 fetch 2 ,mem_eeprom_base 
+0x65e2 026656 iadd regb ,pdata 
+0x65e3 026657 byteswap pdata ,pdata 
+0x65e4 026658 store 2 ,mem_addr_mi 
+:      026661 iicd_read_eep:
+0x65e5 026662 bpatchx patch32_1 ,mem_patch32 
+0x65e6 026663 bmark1 mark_eeprom_size ,iicd_read_eep_size_2k_lcadcode 
+0x65e7 026664 setarg 4 
+0x65e8 026665 hstore 2 ,core_iicd_txlen 
+0x65e9 026666 jam 0xa0 ,mem_iicd_tbuf 
+0x65ea 026667 jam 0xa1 ,mem_iicd_tbuf + 3 
+:      026668 iicd_read_eep_common:
+0x65eb 026669 setarg mem_iicd_tbuf 
+0x65ec 026670 hstore 2 ,core_iicd_txaddr 
+0x65ed 026671 hstoret 2 ,core_iicd_rxlen 
+0x65ee 026672 deposit rega 
+0x65ef 026673 hstore 2 ,core_iicd_rxaddr 
+0x65f0 026674 setarg 2 
+0x65f1 026675 isolate0 15 ,rega 
+0x65f2 026676 setflag true ,0 ,pdata 
+0x65f3 026677 hstore 1 ,core_iicd_ctrl 
+0x65f4 026678 jam iicd_start ,core_misc_ctrl 
+0x65f5 026679 arg iicd_done ,queue 
+0x65f6 026680 call decrypt_code 
+0x65f7 026681 call wait_iicd_done 
+0x65f8 026682 isolate1 iicd_crcok ,pdata 
+0x65f9 026683 call set_ucode_status 
+0x65fa 026684 bmark1 mark_eeprom_size ,iicd_read_eep_load_code_size_2k 
+0x65fb 026685 fetch 2 ,mem_addr_mi 
+0x65fc 026686 byteswap pdata ,pdata 
+0x65fd 026687 iadd temp ,pdata 
+0x65fe 026688 byteswap pdata ,pdata 
+0x65ff 026689 store 2 ,mem_addr_mi 
+0x6600 026690 rtn 
+:      026692 iicd_read_eep_load_code_size_2k:
+0x6601 026693 fetch 1 ,mem_addr_mi 
+0x6602 026694 iadd temp ,pdata 
+0x6603 026695 byteswap pdata ,pdata 
+0x6604 026696 store 2 ,mem_addr_mi 
+0x6605 026697 rtn 
+:      026703 iicd_write_eep_data:
+0x6606 026704 fetch 2 ,mem_eeprom_base 
+0x6607 026705 iadd regb ,pdata 
+:      026708 iicd_write_ota_data:
+0x6608 026709 store 2 ,mem_pdatatemp 
+0x6609 026710 bpatchx patch32_2 ,mem_patch32 
+0x660a 026711 storet 2 ,mem_temp 
+0x660b 026712 copy rega ,pdata 
+0x660c 026713 store 2 ,mem_contr 
+:      026714 iicd_write_eep_loop:
+0x660d 026715 call iicd_eep_transparency 
+0x660e 026717 fetcht 2 ,mem_regb 
+0x660f 026718 fetch 2 ,mem_contr 
+0x6610 026719 copy pdata ,rega 
+0x6611 026720 fetch 2 ,mem_pdatatemp 
+0x6612 026722 call iicd_write_eep 
+0x6613 026724 fetch 2 ,mem_regb 
+0x6614 026725 fetcht 2 ,mem_contr 
+0x6615 026726 iadd temp ,temp 
+0x6616 026727 storet 2 ,mem_contr 
+0x6617 026728 fetcht 2 ,mem_pdatatemp 
+0x6618 026729 iadd temp ,temp 
+0x6619 026730 storet 2 ,mem_pdatatemp 
+0x661a 026731 fetch 2 ,mem_temp 
+0x661b 026732 nbranch iicd_write_eep_loop ,blank 
+0x661c 026733 rtn 
+:      026741 iicd_eep_transparency:
+0x661d 026742 bpatchx patch32_3 ,mem_patch32 
+0x661e 026743 fetch 1 ,mem_eeprom_block_size 
+0x661f 026744 increase -1 ,pdata 
+0x6620 026745 fetcht 2 ,mem_pdatatemp 
+0x6621 026746 ior temp ,pdata 
+0x6622 026747 increase 1 ,pdata 
+0x6623 026748 store 3 ,mem_regc 
+0x6624 026750 fetch 2 ,mem_temp 
+0x6625 026751 iadd temp ,pdata 
+0x6626 026753 fetcht 3 ,mem_regc 
+0x6627 026754 isub temp ,pdata 
+0x6628 026755 nbranch iicd_eep_deal_short_packet ,positive 
+0x6629 026756 store 2 ,mem_temp 
+0x662a 026757 fetch 3 ,mem_regc 
+0x662b 026758 fetcht 2 ,mem_pdatatemp 
+0x662c 026759 isub temp ,pdata 
+0x662d 026760 store 2 ,mem_regb 
+0x662e 026761 rtn 
+:      026762 iicd_eep_deal_short_packet:
+0x662f 026763 fetch 2 ,mem_temp 
+0x6630 026764 store 2 ,mem_regb 
+0x6631 026765 setarg 0 
+0x6632 026766 store 2 ,mem_temp 
+0x6633 026767 rtn 
+:      026769 iicd_write_eep_size_2k:
+0x6634 026770 increase 2 ,temp 
+0x6635 026771 hstoret 2 ,core_iicd_txlen 
+0x6636 026772 increase -2 ,rega 
+0x6637 026773 ifetcht 3 ,rega 
+0x6638 026774 copy temp ,regb 
+0x6639 026775 arg 0xa0 ,temp 
+0x663a 026776 istoret 1 ,rega 
+0x663b 026778 istore 1 ,contw 
+0x663c 026779 branch iicd_write_eep_common 
+:      026782 iicd_write_eep:
+0x663d 026783 copy pdata ,regb 
+0x663e 026784 bpatchx patch32_4 ,mem_patch32 
+0x663f 026785 bmark1 mark_eeprom_size ,iicd_write_eep_size_2k 
+0x6640 026786 copy regb ,pdata 
+0x6641 026787 increase 3 ,temp 
+0x6642 026788 hstoret 2 ,core_iicd_txlen 
+0x6643 026789 increase -3 ,rega 
+0x6644 026790 ifetcht 3 ,rega 
+0x6645 026791 copy temp ,regb 
+0x6646 026792 arg 0xa0 ,temp 
+0x6647 026793 istoret 1 ,rega 
+0x6648 026794 byteswap pdata ,pdata 
+0x6649 026795 istore 2 ,contw 
+:      026796 iicd_write_eep_common:
+0x664a 026797 deposit rega 
+0x664b 026798 hstore 2 ,core_iicd_txaddr 
+0x664c 026799 setarg 0 
+0x664d 026800 hstore 2 ,core_iicd_rxlen 
+0x664e 026801 jam 1 ,core_iicd_ctrl 
+0x664f 026802 jam iicd_start ,core_misc_ctrl 
+0x6650 026803 call wait_iicd_done 
+0x6651 026804 copy regb ,pdata 
+0x6652 026805 istore 3 ,rega 
+:      026807 iic_check_eeprom_standby:
+0x6653 026808 bpatchx patch32_5 ,mem_patch32 
+0x6654 026809 jam 0 ,mem_iicd_tbuf + 3 
+:      026810 iic_check_eeprom_standby_wait:
+0x6655 026811 setarg 1 
+0x6656 026812 hstore 2 ,core_iicd_txlen 
+0x6657 026813 jam 0xa0 ,mem_iicd_tbuf 
+0x6658 026814 setarg mem_iicd_tbuf 
+0x6659 026815 hstore 2 ,core_iicd_txaddr 
+0x665a 026816 setarg 0 
+0x665b 026817 hstore 2 ,core_iicd_rxlen 
+0x665c 026818 hstore 2 ,core_iicd_rxaddr 
+0x665d 026819 setarg 3 
+0x665e 026820 hstore 1 ,core_iicd_ctrl 
+0x665f 026821 jam iicd_start ,core_misc_ctrl 
+0x6660 026822 call wait_iicd_done 
+0x6661 026823 hfetch 1 ,core_dma_status 
+0x6662 026824 rtnbit0 iicd_ack 
+0x6663 026825 nop 1500 
+0x6664 026826 fetch 1 ,mem_iicd_tbuf + 3 
+0x6665 026827 increase 1 ,pdata 
+0x6666 026828 store 1 ,mem_iicd_tbuf + 3 
+0x6667 026829 sub pdata ,40 ,null 
+0x6668 026830 nrtn positive 
+0x6669 026831 branch iic_check_eeprom_standby_wait 
+:      026835 otp_enable_chgpump:
+0x666a 026836 jam 0x70 ,rfen_chgpump 
+0x666b 026837 nop param_chgpump_delay 
+0x666c 026838 rtn 
+:      026840 otp_disable_chgpump:
+0x666d 026841 jam 0x30 ,rfen_chgpump 
+0x666e 026842 rtn 
+:      026844 otp_set_addr:
+0x666f 026845 lshift3 pdata ,pdata 
+0x6670 026846 hstore 2 ,core_otp_addr 
+0x6671 026847 jam 0 ,core_otpd_ctrl 
+0x6672 026848 rtn 
+:      026851 otp_write:
+0x6673 026852 call otp_set_addr 
+0x6674 026853 call otp_ce 
+:      026854 otp_program:
+0x6675 026855 ifetcht 1 ,rega 
+0x6676 026856 increase 1 ,rega 
+0x6677 026857 force 0 ,queue 
+:      026858 otp_program_bit:
+0x6678 026859 qisolate0 temp 
+0x6679 026860 branch otp_skip_0 ,true 
+0x667a 026861 hfetch 1 ,core_otp_din 
+0x667b 026862 set1 6 ,pdata 
+0x667c 026863 set1 7 ,pdata 
+0x667d 026864 hstore 1 ,core_otp_din 
+0x667e 026865 jam 0x02 ,core_otp_ctrl 
+0x667f 026866 jam 0x82 ,core_otp_ctrl 
+0x6680 026867 set0 7 ,pdata 
+0x6681 026868 hstore 1 ,core_otp_din 
+0x6682 026869 jam 0x8a ,core_otp_ctrl 
+0x6683 026870 nop 11 
+0x6684 026871 jam 0xca ,core_otp_ctrl 
+0x6685 026872 nop 33 
+0x6686 026873 jam 0x4a ,core_otp_ctrl 
+0x6687 026874 nop 44 
+0x6688 026875 jam 0xca ,core_otp_ctrl 
+0x6689 026876 nop 22 
+0x668a 026877 jam 0x8a ,core_otp_ctrl 
+0x668b 026878 nop 33 
+0x668c 026879 jam 0x82 ,core_otp_ctrl 
+0x668d 026880 nop 1 
+0x668e 026881 jam 0x92 ,core_otp_ctrl 
+0x668f 026882 nop 10 
+0x6690 026883 jam 0xb2 ,core_otp_ctrl 
+0x6691 026884 hfetch 1 ,core_otp_rdata 
+0x6692 026885 jam 0x92 ,core_otp_ctrl 
+0x6693 026886 nop 1 
+0x6694 026887 jam 0x82 ,core_otp_ctrl 
+0x6695 026888 qisolate0 pdata 
+0x6696 026889 branch otp_program_bit ,true 
+:      026890 otp_skip_0:
+0x6697 026891 hfetch 2 ,core_otp_addr 
+0x6698 026892 increase 1 ,pdata 
+0x6699 026893 hstore 2 ,core_otp_addr 
+0x669a 026894 increase 1 ,queue 
+0x669b 026895 compare 8 ,queue ,0xf 
+0x669c 026896 nbranch otp_program_bit ,true 
+0x669d 026897 loop otp_program 
+0x669e 026898 jam 0x83 ,core_otp_ctrl 
+0x669f 026899 rtn 
+:      026901 otp_ce:
+0x66a0 026902 jam 0x82 ,core_otp_ctrl 
+0x66a1 026903 nop 12 
+0x66a2 026904 jam 0x80 ,core_otp_ctrl 
+0x66a3 026905 jam 0x82 ,core_otp_ctrl 
+0x66a4 026906 nop 150 
+0x66a5 026907 rtn 
+:      026910 otpd_read_init:
+0x66a6 026911 call otp_ce 
+0x66a7 026912 jam 0xa2 ,core_otp_ctrl 
+0x66a8 026913 deposit rega 
+0x66a9 026914 hstore 2 ,core_otpd_addr 
+0x66aa 026915 set1 11 ,temp 
+0x66ab 026916 isolate0 15 ,pdata 
+0x66ac 026917 setflag true ,15 ,temp 
+0x66ad 026918 hstoret 2 ,core_otpd_len 
+0x66ae 026919 jam otpd_start ,core_misc_ctrl 
+0x66af 026920 rtn 
+:      026922 otpd_wait_end:
+0x66b0 026923 hfetch 1 ,core_dma_status 
+0x66b1 026924 bbit0 otpd_done ,otpd_wait_end 
+0x66b2 026925 rtn 
+:      026928 otpd_read_data:
+0x66b3 026929 call otp_set_addr 
+0x66b4 026930 call otpd_read_init 
+0x66b5 026931 call otpd_wait_end 
+0x66b6 026932 jam 0x83 ,core_otp_ctrl 
+0x66b7 026933 rtn 
+:      026938 otpd_read_code:
+0x66b8 026939 hfetch 2 ,core_current_otp_addr 
+0x66b9 026940 hstore 2 ,core_otp_addr 
+0x66ba 026941 call otpd_read_init 
+0x66bb 026942 arg otpd_done ,queue 
+0x66bc 026943 call decrypt_code 
+0x66bd 026944 call otpd_wait_end 
+0x66be 026945 isolate1 otpd_crcok ,pdata 
+0x66bf 026946 call set_ucode_status 
+0x66c0 026947 jam 0x83 ,core_otp_ctrl 
+0x66c1 026948 rtn 
+:      026951 uartd_prepare_tx:
+0x66c2 026952 hfetch 2 ,core_uart_twptr 
+0x66c3 026953 iforce contwu 
+0x66c4 026954 rtn 
+:      026956 uartd_send:
+0x66c5 026957 deposit contwu 
+0x66c6 026958 hstore 2 ,core_uart_twptr 
+0x66c7 026959 rtn 
+:      026961 uartd_rxdone:
+0x66c8 026962 deposit contru 
+0x66c9 026963 hstore 2 ,core_uart_rrptr 
+0x66ca 026964 rtn 
+:      026966 uartd_prepare_rx:
+0x66cb 026967 hfetch 2 ,core_uart_rrptr 
+0x66cc 026968 copy pdata ,contru 
+0x66cd 026969 rtn 
+:      026971 uart_set_baud_by_mem:
+0x66ce 026972 fetch uart_baud_len ,mem_baud 
+0x66cf 026973 hstore uart_baud_len ,core_uart_baud 
+0x66d0 026974 rtn 
+:      026976 uart_copy_tx_bytes_fast:
+0x66d1 026977 deposit loopcnt 
+0x66d2 026978 rtn blank 
+:      026979 uart_copy_tx_bytes_fast_loop:
+0x66d3 026980 increase -8 ,loopcnt 
+0x66d4 026981 call uart_tx_8_bytes ,positive 
+0x66d5 026982 rtn zero 
+0x66d6 026983 branch uart_copy_tx_bytes_fast_loop ,positive 
+0x66d7 026984 increase 8 ,loopcnt 
+:      026985 uart_copy_tx_bytes_fast_loop_four:
+0x66d8 026986 increase -4 ,loopcnt 
+0x66d9 026987 call uart_tx_4_bytes ,positive 
+0x66da 026988 rtn zero 
+0x66db 026989 branch uart_copy_tx_bytes_fast_loop_four ,positive 
+0x66dc 026990 increase 4 ,loopcnt 
+0x66dd 026991 branch uart_copy_tx_bytes 
+:      026993 uart_tx_8_bytes:
+0x66de 026994 ifetch 8 ,contr 
+0x66df 026995 istore 8 ,contwu 
+0x66e0 026996 rtn 
+:      026998 uart_tx_4_bytes:
+0x66e1 026999 ifetch 4 ,contr 
+0x66e2 027000 istore 4 ,contwu 
+0x66e3 027001 rtn 
+:      027003 uart_copy_tx_bytes:
+0x66e4 027004 deposit loopcnt 
+0x66e5 027005 rtn blank 
+:      027006 uart_copy_tx_bytes_loop:
+0x66e6 027007 ifetch 1 ,contr 
+0x66e7 027008 istore 1 ,contwu 
+0x66e8 027009 loop uart_copy_tx_bytes_loop 
+0x66e9 027010 rtn 
+:      027012 uart_copy_rx_bytes_fast:
+0x66ea 027013 deposit loopcnt 
+0x66eb 027014 rtn blank 
+:      027015 uart_copy_rx_bytes_fast_loop:
+0x66ec 027016 increase -8 ,loopcnt 
+0x66ed 027017 call uart_rx_8_bytes ,positive 
+0x66ee 027018 rtn zero 
+0x66ef 027019 branch uart_copy_rx_bytes_fast_loop ,positive 
+0x66f0 027020 increase 8 ,loopcnt 
+:      027021 uart_copy_rx_bytes_fast_loop_four:
+0x66f1 027022 increase -4 ,loopcnt 
+0x66f2 027023 call uart_rx_4_bytes ,positive 
+0x66f3 027024 rtn zero 
+0x66f4 027025 branch uart_copy_rx_bytes_fast_loop_four ,positive 
+0x66f5 027026 increase 4 ,loopcnt 
+0x66f6 027027 branch uart_copy_rx_bytes 
+:      027029 uart_rx_8_bytes:
+0x66f7 027030 ifetch 8 ,contru 
+0x66f8 027031 istore 8 ,contw 
+0x66f9 027032 rtn 
+:      027034 uart_rx_4_bytes:
+0x66fa 027035 ifetch 4 ,contru 
+0x66fb 027036 istore 4 ,contw 
+0x66fc 027037 rtn 
+:      027040 uart_copy_rx_bytes:
+0x66fd 027041 deposit loopcnt 
+0x66fe 027042 rtn blank 
+:      027043 uart_copy_rx_bytes_loop:
+0x66ff 027044 ifetch 1 ,contru 
+0x6700 027045 istore 1 ,contw 
+0x6701 027046 loop uart_copy_rx_bytes_loop 
+0x6702 027047 rtn 
+:      027050 uart_copy_rx2tx:
+0x6703 027051 deposit loopcnt 
+0x6704 027052 rtn blank 
+:      027053 uart_copy_rx2tx_loop:
+0x6705 027054 ifetch 1 ,contru 
+0x6706 027055 istore 1 ,contwu 
+0x6707 027056 loop uart_copy_rx2tx_loop 
+0x6708 027057 rtn 
+:      027062 app_store_nvram_event:
+0x6709 027063 jam bt_evt_store_nvram ,mem_fifo_temp 
+0x670a 027064 branch ui_ipc_send_event 
+:      027066 check_51cmd_store_reconn_info:
+:      027067 check_51cmd_update_device_record:
+0x670b 027068 bpatchx patch32_6 ,mem_patch32 
+0x670c 027069 fetch 1 ,mem_nv_data_number 
+0x670d 027070 rtn blank 
+0x670e 027071 call check_nvram 
+0x670f 027072 call init_device_list ,zero 
+0x6710 027073 call nvram_find_addr_from_bd_list 
+:      027074 write_device_record:
+0x6711 027075 fetch 1 ,mem_nv_data_number 
+0x6712 027076 icopy regc 
+0x6713 027077 fetcht 2 ,mem_nv_data_ptr 
+0x6714 027078 storet 2 ,mem_list_item_ptr 
+:      027079 write_device_loop_find:
+0x6715 027080 copy regc ,pdata 
+0x6716 027081 branch app_store_nvram_event ,blank 
+0x6717 027082 increase -1 ,regc 
+0x6718 027083 copy temp ,rega 
+0x6719 027084 ifetch 1 ,rega 
+0x671a 027085 fetcht 1 ,mem_select_list_item 
+0x671b 027086 isub temp ,null 
+0x671c 027087 call set_index_finded_device ,zero 
+0x671d 027088 branch write_device_loop_find0 ,positive 
+0x671e 027089 ifetch 1 ,rega 
+0x671f 027090 increase 1 ,pdata 
+0x6720 027091 istore 1 ,rega 
+:      027092 write_device_loop_find0:
+0x6721 027093 fetcht 2 ,mem_list_item_ptr 
+0x6722 027094 increase nv_data_len ,temp 
+0x6723 027095 storet 2 ,mem_list_item_ptr 
+0x6724 027096 branch write_device_loop_find 
+:      027098 set_index_finded_device:
+0x6725 027099 setarg 0 
+0x6726 027100 istore 1 ,rega 
+0x6727 027101 fetch 1 ,mem_temp_reconn_record 
+0x6728 027102 istore 1 ,contw 
+0x6729 027103 bne rec_3_mode ,set_index_finded_device_ble_mode 
+0x672a 027104 arg mem_link_key ,regb 
+:      027105 set_index_find_device_master_addr:
+0x672b 027106 ifetch 6 ,contr 
+0x672c 027107 istore 8 ,contw 
+0x672d 027108 setarg 0 
+0x672e 027109 istore 8 ,contw 
+0x672f 027110 copy regb ,contr 
+:      027111 store_rec_data_common:
+0x6730 027112 call memcpy16 
+0x6731 027113 force 1 ,null 
+0x6732 027114 rtn 
+:      027116 set_index_finded_device_ble_mode:
+0x6733 027117 beq rec_4_mode_random_resolvable_private_address ,set_index_finded_device_irk 
+0x6734 027118 beq rec_4_mode_random_non_resolvable_private_address ,set_index_finded_device_ediv 
+0x6735 027119 arg mem_le_ltk ,regb 
+0x6736 027120 branch set_index_find_device_master_addr 
+:      027122 set_index_finded_device_irk:
+0x6737 027123 arg mem_le_irk ,contr 
+0x6738 027124 call memcpy16 
+:      027125 store_ble_rec_data_common:
+0x6739 027126 arg mem_le_ltk ,contr 
+0x673a 027127 branch store_rec_data_common 
+:      027129 set_index_finded_device_ediv:
+0x673b 027130 arg mem_le_rand ,contr 
+0x673c 027131 call memcpy16 
+0x673d 027132 branch store_ble_rec_data_common 
+:      027135 nvram_find_addr_from_bd_list:
+0x673e 027136 call disable_user 
+0x673f 027137 fetch 1 ,mem_nv_data_number 
+0x6740 027138 rtn blank 
+0x6741 027139 fetch 2 ,mem_ui_state_map 
+0x6742 027140 bbit1 ui_state_bt_connected ,find_addr_from_bd_list_spp_mode 
+:      027141 find_addr_from_bd_list_ble_mode:
+0x6743 027142 bpatchx patch32_7 ,mem_patch32 
+0x6744 027143 fetch 1 ,mem_le_conn_peer_addr_type 
+0x6745 027144 beq master_public_addr ,find_addr_from_bd_list_static_addr 
+0x6746 027145 fetch 1 ,mem_le_plap + 5 
+0x6747 027146 compare 0xc0 ,pdata ,0xc0 
+0x6748 027147 branch find_addr_from_bd_list_static_addr ,true 
+0x6749 027148 compare 0x40 ,pdata ,0xc0 
+0x674a 027149 branch find_addr_from_bd_list_random_addr ,true 
+0x674b 027150 compare 0x00 ,pdata ,0xc0 
+0x674c 027151 branch find_addr_from_bd_list_random_non_resolvable_private_address ,true 
+:      027152 find_addr_from_bd_list_static_addr:
+0x674d 027153 jam rec_4_mode_static_address ,mem_temp_reconn_record 
+0x674e 027154 fetch 6 ,mem_le_plap 
+0x674f 027155 branch find_addr_from_bd_list_common 
+:      027157 find_addr_from_bd_list_random_non_resolvable_private_address:
+0x6750 027158 jam rec_4_mode_random_non_resolvable_private_address ,mem_temp_reconn_record 
+0x6751 027159 branch find_addr_from_bd_list_common 
+:      027162 find_addr_from_bd_list_random_addr:
+0x6752 027163 jam rec_4_mode_random_resolvable_private_address ,mem_temp_reconn_record 
+0x6753 027164 branch find_addr_from_bd_list_common 
+:      027167 find_addr_from_bd_list_spp_mode:
+0x6754 027168 bpatchx patch33_0 ,mem_patch33 
+0x6755 027169 jam rec_3_mode ,mem_temp_reconn_record 
+0x6756 027170 fetch 6 ,mem_plap 
+:      027171 find_addr_from_bd_list_common:
+0x6757 027172 store 6 ,mem_temp_reconn_record + 1 
+0x6758 027173 fetch 2 ,mem_nv_data_ptr 
+0x6759 027174 ifetcht 1 ,pdata 
+0x675a 027175 pincrease 1 
+0x675b 027176 store 2 ,mem_list_item_ptr 
+0x675c 027177 storet 1 ,mem_select_list_item 
+0x675d 027178 fetch 1 ,mem_nv_data_number 
+0x675e 027179 icopy regc 
+:      027180 nvram_find_addr_from_list:
+0x675f 027181 fetch 2 ,mem_list_item_ptr 
+0x6760 027182 copy pdata ,rega 
+0x6761 027183 call nvram_find_addr_from_list_compare 
+0x6762 027184 rtn user 
+0x6763 027185 fetcht 2 ,mem_list_item_ptr 
+0x6764 027186 increase nv_data_len ,temp 
+0x6765 027187 storet 2 ,mem_list_item_ptr 
+0x6766 027188 increase -1 ,temp 
+0x6767 027189 ifetch 1 ,temp 
+0x6768 027190 store 1 ,mem_select_list_item 
+0x6769 027191 increase -1 ,regc 
+0x676a 027192 nbranch nvram_find_addr_from_list ,zero 
+0x676b 027193 fetch 1 ,mem_nv_data_number 
+0x676c 027194 pincrease decreased_one 
+0x676d 027195 store 1 ,mem_select_list_item 
+0x676e 027196 rtn 
+:      027197 nvram_find_addr_from_list_compare:
+0x676f 027198 fetch 1 ,mem_temp_reconn_record 
+0x6770 027199 bne rec_3_mode ,find_addr_from_list_compare_ble_mode 
+:      027200 find_master_addr_from_list_compare:
+0x6771 027201 arg mem_temp_reconn_record ,regb 
+0x6772 027202 arg 7 ,loopcnt 
+0x6773 027203 call string_compare 
+0x6774 027204 branch enable_user ,zero 
+0x6775 027205 rtn 
+:      027207 find_addr_from_list_compare_ble_mode:
+0x6776 027208 beq rec_4_mode_random_resolvable_private_address ,find_irk_form_list_compare 
+0x6777 027209 beq rec_4_mode_random_non_resolvable_private_address ,find_ediv_form_list_compare 
+0x6778 027210 branch find_master_addr_from_list_compare 
+:      027212 find_irk_form_list_compare:
+0x6779 027213 ifetcht 1 ,rega 
+0x677a 027214 isub temp ,null 
+0x677b 027215 nrtn zero 
+0x677c 027216 arg mem_le_prand ,contw 
+0x677d 027217 arg 16 ,loopcnt 
+0x677e 027218 call clear_mem 
+0x677f 027219 fetch 3 ,mem_le_plap + 3 
+0x6780 027220 store 3 ,mem_le_prand 
+0x6781 027221 call genernate_master_macaddress 
+0x6782 027222 fetch 2 ,mem_le_aes_128 + 13 
+0x6783 027223 byteswap pdata ,pdata 
+0x6784 027224 lshift8 pdata ,temp 
+0x6785 027225 ifetch 1 ,contr 
+0x6786 027226 iadd temp ,pdata 
+0x6787 027227 fetcht 3 ,mem_le_plap 
+0x6788 027228 isub temp ,null 
+0x6789 027229 branch enable_user ,zero 
+0x678a 027230 rtn 
+:      027233 genernate_master_macaddress:
+0x678b 027234 arg mem_le_prand ,contr 
+0x678c 027235 call load_data128 
+0x678d 027237 ifetch 1 ,rega 
+0x678e 027238 call load_regext 
+0x678f 027239 force 0x38 ,aes_ctrl 
+0x6790 027240 force 0x0 ,aes_ctrl 
+0x6791 027241 call wait_aes 
+0x6792 027242 arg mem_le_aes_128 ,contw 
+0x6793 027243 branch store_aes_result 
+:      027245 find_ediv_form_list_compare:
+0x6794 027246 ifetcht 1 ,rega 
+0x6795 027247 isub temp ,null 
+0x6796 027248 nrtn zero 
+0x6797 027249 copy contr ,rega 
+0x6798 027250 add contr ,8 ,regc 
+0x6799 027251 arg mem_le_rand ,regb 
+0x679a 027252 arg 8 ,loopcnt 
+0x679b 027253 call string_compare 
+0x679c 027254 branch enable_user ,zero 
+0x679d 027255 copy regc ,rega 
+0x679e 027256 arg mem_le_irk ,regb 
+0x679f 027257 arg 8 ,loopcnt 
+0x67a0 027258 call string_compare 
+0x67a1 027259 branch enable_user ,zero 
+0x67a2 027260 rtn 
+:      027262 check_nvram:
+0x67a3 027263 fetch 2 ,mem_nv_data_ptr 
+0x67a4 027264 ifetcht 1 ,pdata 
+0x67a5 027265 pincrease nv_data_len 
+0x67a6 027266 ifetch 1 ,pdata 
+0x67a7 027267 isub temp ,null 
+0x67a8 027268 rtn 
+:      027270 init_device_list:
+0x67a9 027271 fetch 1 ,mem_nv_data_number 
+0x67aa 027272 icopy loopcnt 
+0x67ab 027273 fetcht 2 ,mem_nv_data_ptr 
+0x67ac 027274 setarg 0 
+:      027275 init_device_list_loop:
+0x67ad 027276 istore 1 ,temp 
+0x67ae 027277 increase nv_data_len ,temp 
+0x67af 027278 pincrease 1 
+0x67b0 027279 loop init_device_list_loop 
+0x67b1 027280 rtn 
+:      027282 load_device_list:
+0x67b2 027283 bpatchx patch33_1 ,mem_patch33 
+0x67b3 027284 call nvram_find_addr_from_bd_list 
+0x67b4 027285 fetch 1 ,mem_state 
+0x67b5 027286 setflag user ,state_combkey ,pdata 
+0x67b6 027287 store 1 ,mem_state 
+0x67b7 027288 nbranch clear_key_exists ,user 
+0x67b8 027289 add rega ,10 ,contr 
+0x67b9 027291 arg mem_link_key ,contw 
+0x67ba 027292 call memcpy16 
+0x67bb 027293 branch check_link_key_load 
+:      027294 clear_key_exists:
+0x67bc 027295 jam 0 ,mem_link_key_exists 
+0x67bd 027296 rtn 
+:      027298 load_device_list_mode_4:
+0x67be 027299 fetch 9 ,mem_le_ediv 
+0x67bf 027300 branch clear_ltk_exists ,blank 
+0x67c0 027301 call nvram_find_addr_from_bd_list 
+0x67c1 027302 nbranch clear_ltk_exists ,user 
+0x67c2 027303 fetch 2 ,mem_list_item_ptr 
+0x67c3 027304 add pdata ,1 ,contr 
+0x67c4 027305 arg mem_le_irk ,contw 
+0x67c5 027306 call memcpy16 
+0x67c6 027307 arg mem_le_ltk ,contw 
+0x67c7 027308 call memcpy16 
+0x67c8 027309 jam 1 ,mem_ltk_exists 
+0x67c9 027310 rtn 
+:      027312 clear_ltk_exists:
+0x67ca 027313 jam 0 ,mem_ltk_exists 
+0x67cb 027314 rtn 
+:      027317 eeprom_store_le_reconn_info:
+0x67cc 027318 fetch 6 ,mem_le_plap 
+0x67cd 027319 store 6 ,mem_temp_lap 
+0x67ce 027320 jam rec_4_mode ,mem_record_bt_mode 
+0x67cf 027321 branch eeprom_store_reconn_info 
+:      027322 eeprom_store_bd_reconn_info:
+0x67d0 027323 fetch 6 ,mem_plap 
+0x67d1 027324 store 6 ,mem_temp_lap 
+0x67d2 027325 jam rec_3_mode ,mem_record_bt_mode 
+:      027326 eeprom_store_reconn_info:
+0x67d3 027327 fetch 1 ,mem_device_option 
+0x67d4 027328 beq dvc_op_module ,check_51cmd_update_device_record 
+0x67d5 027329 bbit1 dvc_op_mouse ,mouse_store_remote_bdaddr 
+0x67d6 027330 rtn 
+:      027333 check_link_key_load:
+0x67d7 027334 fetch 8 ,mem_link_key 
+0x67d8 027335 fetcht 8 ,mem_link_key + 8 
+0x67d9 027336 ior temp ,pdata 
+0x67da 027337 rtn blank 
+0x67db 027338 jam 1 ,mem_link_key_exists 
+0x67dc 027339 rtn 
+:      027346 gpio_set_wake_by_current_state:
+0x67dd 027347 bpatchx patch33_2 ,mem_patch33 
+0x67de 027348 set1 7 ,temp 
+0x67df 027349 call gpio_get_bit 
+0x67e0 027350 nsetflag true ,7 ,temp 
+:      027355 gpio_set_wake:
+0x67e1 027356 bpatchx patch33_3 ,mem_patch33 
+0x67e2 027357 sub temp ,ui_button_gpio_disable ,null 
+0x67e3 027358 rtn zero 
+0x67e4 027359 isolate0 7 ,temp 
+0x67e5 027360 and temp ,0x1f ,queue 
+0x67e6 027361 fetch 4 ,mem_gpio_wakeup_low 
+0x67e7 027362 qsetflag true ,pdata 
+0x67e8 027363 store 4 ,mem_gpio_wakeup_low 
+0x67e9 027364 fetch 4 ,mem_gpio_wakeup_high 
+0x67ea 027365 nqsetflag true ,pdata 
+0x67eb 027366 store 4 ,mem_gpio_wakeup_high 
+0x67ec 027367 rtn 
+:      027370 gpio_clr_wake:
+0x67ed 027371 bpatchx patch33_4 ,mem_patch33 
+0x67ee 027372 sub temp ,ui_button_gpio_disable ,null 
+0x67ef 027373 rtn zero 
+0x67f0 027374 isolate0 7 ,temp 
+0x67f1 027375 and temp ,0x1f ,queue 
+0x67f2 027376 fetch 4 ,mem_gpio_wakeup_low 
+0x67f3 027377 qset0 pdata 
+0x67f4 027378 store 4 ,mem_gpio_wakeup_low 
+0x67f5 027379 fetch 4 ,mem_gpio_wakeup_high 
+0x67f6 027380 qset0 pdata 
+0x67f7 027381 store 4 ,mem_gpio_wakeup_high 
+0x67f8 027382 rtn 
+:      027385 gpio_config_input_nowake:
+0x67f9 027386 call gpio_clr_wake 
+0x67fa 027387 branch gpio_config_input_without_wake 
+:      027390 gpio_config_input:
+0x67fb 027391 sub temp ,ui_button_gpio_disable ,null 
+0x67fc 027392 rtn zero 
+0x67fd 027393 ncall gpio_set_wake ,wake 
+:      027395 gpio_config_input_without_wake:
+0x67fe 027396 arg core_gpio_pd0 ,contw 
+0x67ff 027397 call gpio_set_bit 
+0x6800 027398 setflip gpio_active_bit ,temp 
+0x6801 027399 arg core_gpio_pu0 ,contw 
+0x6802 027400 call gpio_set_bit 
+0x6803 027401 set0 gpio_active_bit ,temp 
+0x6804 027402 arg core_gpio_oe0 ,contw 
+0x6805 027403 branch gpio_set_bit 
+:      027406 gpio_set_high_impedance:
+0x6806 027407 arg core_gpio_pd0 ,contw 
+0x6807 027408 call gpio_set_bit 
+0x6808 027409 set0 gpio_active_bit ,temp 
+0x6809 027410 arg core_gpio_pu0 ,contw 
+0x680a 027411 call gpio_set_bit 
+0x680b 027412 set0 gpio_active_bit ,temp 
+0x680c 027413 arg core_gpio_oe0 ,contw 
+0x680d 027414 branch gpio_set_bit 
+:      027418 gpio_config_output:
+0x680e 027419 sub temp ,ui_button_gpio_disable ,null 
+0x680f 027420 rtn zero 
+0x6810 027421 setflip gpio_active_bit ,temp 
+0x6811 027422 call gpio_out 
+:      027423 gpio_config_output0:
+0x6812 027424 set1 gpio_active_bit ,temp 
+0x6813 027425 arg core_gpio_oe0 ,contw 
+0x6814 027426 branch gpio_set_bit 
+:      027428 gpio_common:
+0x6815 027429 and temp ,0x07 ,queue 
+0x6816 027430 rshift3 temp ,pdata 
+0x6817 027431 and_into 3 ,pdata 
+0x6818 027432 iadd contw ,contw 
+0x6819 027433 ifetch 1 ,contw 
+0x681a 027434 rtn 
+:      027436 gpio_check_active:
+0x681b 027437 arg core_gpio_out0 ,contw 
+0x681c 027438 branch get_bit_common 
+:      027442 gpio_get_bit:
+0x681d 027443 arg core_gpio_in ,contw 
+:      027444 get_bit_common:
+0x681e 027445 call gpio_common 
+0x681f 027446 isolate1 gpio_active_bit ,temp 
+0x6820 027447 branch gpio_get_bit_reverse ,true 
+0x6821 027448 qisolate0 pdata 
+0x6822 027449 rtn 
+:      027450 gpio_get_bit_reverse:
+0x6823 027451 qisolate1 pdata 
+0x6824 027452 rtn 
+:      027454 gpio_out_inactive:
+0x6825 027455 sub temp ,ui_button_gpio_disable ,null 
+0x6826 027456 rtn zero 
+0x6827 027457 isolate1 7 ,null 
+0x6828 027458 branch gpio_out_flag 
+:      027460 gpio_out_active:
+0x6829 027461 sub temp ,ui_button_gpio_disable ,null 
+0x682a 027462 rtn zero 
+0x682b 027463 isolate0 7 ,null 
+:      027466 gpio_out_flag:
+0x682c 027467 setarg 0 
+0x682d 027468 nsetflag true ,gpio_active_bit ,pdata 
+0x682e 027469 ixor temp ,temp 
+:      027472 gpio_out:
+0x682f 027473 arg core_gpio_out0 ,contw 
+:      027476 gpio_set_bit:
+0x6830 027477 call gpio_common 
+0x6831 027478 isolate1 gpio_active_bit ,temp 
+0x6832 027479 qsetflag true ,pdata 
+0x6833 027480 istore 1 ,contw 
+0x6834 027481 rtn 
+:      027483 gpio_set_before_lpm_common:
+0x6835 027484 arg -1 ,rega 
+0x6836 027485 hfetch 1 ,core_gpio_sel1 
+0x6837 027486 compare 0x02 ,pdata ,0x03 
+0x6838 027487 call neglact4_from_23_pin ,true 
+0x6839 027489 compare 0x01 ,pdata ,0x03 
+0x683a 027490 call neglact2_form_25_pin ,true 
+0x683b 027492 compare 0x03 ,pdata ,0x03 
+0x683c 027493 call neglact2_form_25_pin ,true 
+0x683d 027495 isolate1 2 ,pdata 
+0x683e 027496 call neglect2_from_6_pin ,true 
+0x683f 027498 isolate1 3 ,pdata 
+0x6840 027499 call neglect4_from_9_pin ,true 
+0x6841 027501 isolate1 4 ,pdata 
+0x6842 027502 call neglact2_form_30_pin ,true 
+0x6843 027504 isolate1 6 ,pdata 
+0x6844 027505 nsetflag true ,04 ,rega 
+0x6845 027507 isolate1 7 ,pdata 
+0x6846 027508 nsetflag true ,05 ,rega 
+0x6847 027510 hfetch 1 ,core_gpio_sel2 
+0x6848 027511 isolate1 0 ,pdata 
+0x6849 027512 nsetflag true ,27 ,rega 
+0x684a 027513 isolate1 1 ,pdata 
+0x684b 027514 nsetflag true ,28 ,rega 
+0x684c 027515 isolate1 2 ,pdata 
+0x684d 027516 nsetflag true ,03 ,rega 
+0x684e 027517 isolate1 3 ,pdata 
+0x684f 027518 nsetflag true ,08 ,rega 
+0x6850 027519 isolate1 4 ,pdata 
+0x6851 027520 nsetflag true ,20 ,rega 
+0x6852 027521 isolate1 5 ,pdata 
+0x6853 027522 nsetflag true ,21 ,rega 
+0x6854 027523 isolate1 6 ,pdata 
+0x6855 027524 nsetflag true ,22 ,rega 
+0x6856 027525 isolate1 7 ,pdata 
+0x6857 027526 nsetflag true ,23 ,rega 
+0x6858 027528 hfetch 1 ,core_gpio_sel 
+0x6859 027529 isolate1 0 ,pdata 
+0x685a 027530 nsetflag true ,05 ,rega 
+0x685b 027531 isolate1 1 ,pdata 
+0x685c 027532 nsetflag true ,06 ,rega 
+0x685d 027533 isolate1 2 ,pdata 
+0x685e 027534 nsetflag true ,07 ,rega 
+0x685f 027535 isolate1 3 ,pdata 
+0x6860 027536 nsetflag true ,18 ,rega 
+0x6861 027537 isolate1 4 ,pdata 
+0x6862 027538 nsetflag true ,19 ,rega 
+0x6863 027539 isolate1 5 ,pdata 
+0x6864 027540 nsetflag true ,20 ,rega 
+0x6865 027541 isolate1 6 ,pdata 
+0x6866 027542 nsetflag true ,21 ,rega 
+0x6867 027543 isolate1 7 ,pdata 
+0x6868 027544 nsetflag true ,22 ,rega 
+0x6869 027546 hfetch 1 ,core_uart_ctrl 
+0x686a 027547 isolate1 4 ,pdata 
+0x686b 027548 call neglact2_form_2_pin ,true 
+0x686c 027549 bpatchx patch33_5 ,mem_patch33 
+0x686d 027551 hfetch 4 ,core_gpio_pu0 
+0x686e 027552 hfetcht 4 ,core_gpio_pd0 
+0x686f 027553 ior temp ,pdata 
+0x6870 027554 invert pdata ,pdata 
+0x6871 027555 iand rega ,pdata 
+0x6872 027557 hstore 4 ,core_gpio_oe0 
+0x6873 027558 rtn 
+:      027561 neglect2_from_6_pin:
+0x6874 027562 arg 6 ,queue 
+0x6875 027563 branch neglect_2_pin 
+:      027564 neglect4_from_9_pin:
+0x6876 027565 arg 9 ,queue 
+0x6877 027566 branch neglact_4_pin 
+:      027567 neglact4_from_23_pin:
+0x6878 027568 arg 23 ,queue 
+0x6879 027569 branch neglact_4_pin 
+:      027570 neglact2_form_25_pin:
+0x687a 027571 arg 25 ,queue 
+0x687b 027572 branch neglect_2_pin 
+:      027573 neglact2_form_30_pin:
+0x687c 027574 arg 30 ,queue 
+0x687d 027575 branch neglect_2_pin 
+:      027576 neglact2_form_2_pin:
+0x687e 027577 arg 2 ,queue 
+0x687f 027578 branch neglect_2_pin 
+:      027579 neglact_1_pin:
+0x6880 027580 arg 1 ,loopcnt 
+0x6881 027581 branch neglect_pin_loop 
+:      027582 neglact_4_pin:
+0x6882 027583 arg 4 ,loopcnt 
+0x6883 027584 branch neglect_pin_loop 
+:      027585 neglect_2_pin:
+0x6884 027586 arg 2 ,loopcnt 
+:      027587 neglect_pin_loop:
+0x6885 027588 qset0 rega 
+0x6886 027589 increase 1 ,queue 
+0x6887 027590 loop neglect_pin_loop 
+0x6888 027591 rtn 
+:      027599 gpio_cfg_uart_tx_output:
+0x6889 027600 call gpio_uart2gpio 
+0x688a 027601 arg uart_wakeup_tx ,temp 
+0x688b 027602 branch gpio_config_output 
+:      027604 gpio_pu_uart_tx:
+0x688c 027605 call gpio_cfg_uart_tx_output 
+0x688d 027606 arg uart_wakeup_tx ,temp 
+0x688e 027607 branch gpio_out_inactive 
+:      027611 gpio_rx_config_input_with_pu:
+0x688f 027612 call gpio_uart2gpio 
+0x6890 027613 hfetch 1 ,core_gpio_pu0 
+0x6891 027614 set1 uart_wakeup_rx ,pdata 
+0x6892 027615 hstore 1 ,core_gpio_pu0 
+0x6893 027616 arg uart_wakeup_rx ,temp 
+0x6894 027617 branch gpio_config_input 
+:      027619 gpio_uart2gpio:
+0x6895 027620 hfetch 1 ,core_gpio_sel1 
+0x6896 027621 and_into 0xfb ,pdata 
+0x6897 027622 hstore 1 ,core_gpio_sel1 
+0x6898 027623 rtn 
+:      027625 gpio_check_uart_state:
+0x6899 027626 hfetch 1 ,core_gpio_sel1 
+0x689a 027627 isolate1 2 ,pdata 
+0x689b 027628 rtn 
+:      027630 load_chip_option:
+0x689c 027631 call otp_enable_chgpump 
+0x689d 027632 setarg otp_chip_functions 
+0x689e 027633 arg mem_chip_functions ,rega 
+0x689f 027634 arg 0x02 ,temp 
+0x68a0 027635 call otpd_read_data 
+0x68a1 027636 branch otp_disable_chgpump 
+:      027639 load_adc_init:
+0x68a2 027640 call otp_enable_chgpump 
+0x68a3 027641 setarg otp_adc_io_0_5v_addr 
+0x68a4 027642 arg mem_0_5_adc_io_data ,rega 
+0x68a5 027643 arg 14 ,temp 
+0x68a6 027644 call otpd_read_data 
+0x68a7 027645 branch otp_disable_chgpump 
+:      027649 adc_init_data:
+0x68a8 027650 bpatchx patch33_6 ,mem_patch33 
+0x68a9 027652 call load_adc_init 
+0x68aa 027654 fetch 1 ,mem_adc_config_flag 
+0x68ab 027655 beq adc_config_vinlpm ,adc_init_data_vinlpm 
+0x68ac 027656 beq adc_config_hvin ,adc_init_data_hvin 
+0x68ad 027657 beq adc_config_gpio ,adc_init_data_io 
+0x68ae 027658 rtn 
+:      027660 adc_init_data_vinlpm:
+0x68af 027661 fetcht 2 ,mem_otp_adc_flag 
+0x68b0 027662 setarg otp_adc_flag 
+0x68b1 027663 isub temp ,null 
+0x68b2 027664 branch adc_check_data_vinlpm ,zero 
+0x68b3 027665 setarg 0x4dfa 
+0x68b4 027666 store 2 ,mem_3v_adc_vinlpm_data 
+0x68b5 027667 setarg 0x4894 
+0x68b6 027668 store 2 ,mem_2v_adc_vinlpm_data 
+0x68b7 027669 branch set_vdd_reference_voltage_1v 
+:      027671 adc_check_data_vinlpm:
+0x68b8 027672 fetch 2 ,mem_3v_adc_vinlpm_data 
+0x68b9 027673 nbranch adc_check_2v_vinlpm ,blank 
+0x68ba 027674 setarg 0x4dfa 
+0x68bb 027675 store 2 ,mem_3v_adc_vinlpm_data 
+:      027676 adc_check_2v_vinlpm:
+0x68bc 027677 fetch 2 ,mem_2v_adc_vinlpm_data 
+0x68bd 027678 nbranch set_vdd_reference_voltage_1v ,blank 
+0x68be 027679 setarg 0x4894 
+0x68bf 027680 store 2 ,mem_2v_adc_vinlpm_data 
+:      027681 set_vdd_reference_voltage_1v:
+0x68c0 027682 setarg 100 
+0x68c1 027683 store 2 ,mem_reference_voltage 
+0x68c2 027684 rtn 
+:      027686 adc_init_data_hvin:
+0x68c3 027687 fetcht 2 ,mem_otp_adc_flag 
+0x68c4 027688 setarg otp_adc_flag 
+0x68c5 027689 isub temp ,null 
+0x68c6 027690 branch adc_check_data_hvin ,zero 
+0x68c7 027691 setarg 0x5932 
+0x68c8 027692 store 2 ,mem_5v_adc_hvin_data 
+0x68c9 027693 setarg 0x4323 
+0x68ca 027694 store 2 ,mem_1v_adc_hvin_data 
+0x68cb 027695 branch set_vdd_reference_voltage_4v 
+:      027697 adc_check_data_hvin:
+0x68cc 027698 fetch 2 ,mem_5v_adc_hvin_data 
+0x68cd 027699 nbranch adc_check_1v_hvin ,blank 
+0x68ce 027700 setarg 0x5932 
+0x68cf 027701 store 2 ,mem_5v_adc_hvin_data 
+:      027702 adc_check_1v_hvin:
+0x68d0 027703 fetch 2 ,mem_1v_adc_hvin_data 
+0x68d1 027704 nbranch set_vdd_reference_voltage_4v ,blank 
+0x68d2 027705 setarg 0x4323 
+0x68d3 027706 store 2 ,mem_1v_adc_hvin_data 
+:      027707 set_vdd_reference_voltage_4v:
+0x68d4 027708 setarg 400 
+0x68d5 027709 store 2 ,mem_reference_voltage 
+0x68d6 027710 rtn 
+:      027712 adc_init_data_io:
+0x68d7 027713 fetcht 2 ,mem_otp_adc_flag 
+0x68d8 027714 setarg otp_adc_flag 
+0x68d9 027715 isub temp ,null 
+0x68da 027716 branch adc_check_data_io ,zero 
+0x68db 027717 setarg 0x6946 
+0x68dc 027718 store 2 ,mem_1v_adc_io_data 
+0x68dd 027719 setarg 0x5377 
+0x68de 027720 store 2 ,mem_0_5_adc_io_data 
+0x68df 027721 branch set_vdd_reference_voltage_0_5v 
+:      027723 adc_check_data_io:
+0x68e0 027724 fetch 2 ,mem_1v_adc_io_data 
+0x68e1 027725 nbranch adc_check_0_5v_io ,blank 
+0x68e2 027726 setarg 0x6946 
+0x68e3 027727 store 2 ,mem_1v_adc_io_data 
+:      027728 adc_check_0_5v_io:
+0x68e4 027729 fetch 2 ,mem_0_5_adc_io_data 
+0x68e5 027730 nbranch set_vdd_reference_voltage_0_5v ,blank 
+0x68e6 027731 setarg 0x5377 
+0x68e7 027732 store 2 ,mem_0_5_adc_io_data 
+:      027733 set_vdd_reference_voltage_0_5v:
+0x68e8 027734 setarg 50 
+0x68e9 027735 store 2 ,mem_reference_voltage 
+0x68ea 027736 rtn 
+:      027739 adc_set_mode:
+0x68eb 027740 fetch 1 ,mem_adc_config_flag 
+0x68ec 027741 beq adc_config_vinlpm ,adc_check_vinlpm 
+0x68ed 027742 beq adc_config_hvin ,adc_check_hvin 
+0x68ee 027743 beq adc_config_gpio ,adc_check_gpio 
+0x68ef 027744 rtn 
+:      027745 adc_check_vinlpm:
+0x68f0 027746 jam 0xbf ,rf_adc_mode 
+0x68f1 027747 branch read_adc 
+:      027748 adc_check_hvin:
+0x68f2 027749 jam 0xaf ,rf_adc_mode 
+0x68f3 027750 branch read_adc 
+:      027751 adc_check_gpio:
+0x68f4 027752 jam 0x8f ,rf_adc_mode 
+0x68f5 027753 fetch 1 ,mem_adc_channel 
+0x68f6 027754 hstore 1 ,rf_adc_ch 
+0x68f7 027755 branch read_adc 
+:      027756 read_adc:
+0x68f8 027757 bpatchx patch33_7 ,mem_patch33 
+0x68f9 027758 hfetch 1 ,core_uart_baud + 1 
+0x68fa 027759 set1 7 ,pdata 
+0x68fb 027760 hstore 1 ,core_uart_baud + 1 
+0x68fc 027761 hfetch 1 ,rf_adc_ch 
+0x68fd 027762 or_into 0x30 ,pdata 
+0x68fe 027763 hstore 1 ,rf_adc_ch 
+0x68ff 027764 jam 0x7c ,rfen_adc 
+0x6900 027765 jam 0xaa ,rf_adc_gc 
+0x6901 027766 nop 5000 
+0x6902 027767 hfetcht 2 ,core_adc_sum 
+0x6903 027768 hfetch 1 ,core_uart_baud + 1 
+0x6904 027769 set0 7 ,pdata 
+0x6905 027770 hstore 1 ,core_uart_baud + 1 
+0x6906 027771 storet 2 ,mem_adc_current_value 
+0x6907 027772 rtn 
+:      027774 vdd_calculate_by_mode:
+0x6908 027775 bpatchx patch34_0 ,mem_patch34 
+0x6909 027776 fetch 1 ,mem_adc_config_flag 
+0x690a 027777 beq adc_config_vinlpm ,vdd_calculate_vinlpm 
+0x690b 027778 beq adc_config_hvin ,vdd_calculate_hvin 
+0x690c 027779 beq adc_config_gpio ,vdd_calculate_io 
+0x690d 027780 rtn 
+:      027782 vdd_calculate_vinlpm:
+0x690e 027783 fetch 2 ,mem_3v_adc_vinlpm_data 
+0x690f 027784 fetcht 2 ,mem_2v_adc_vinlpm_data 
+0x6910 027785 arg 200 ,regc 
+0x6911 027786 branch vdd_calculate 
+:      027788 vdd_calculate_hvin:
+0x6912 027789 fetch 2 ,mem_5v_adc_hvin_data 
+0x6913 027790 fetcht 2 ,mem_1v_adc_hvin_data 
+0x6914 027791 arg 100 ,regc 
+0x6915 027792 branch vdd_calculate 
+:      027794 vdd_calculate_io:
+0x6916 027795 fetch 2 ,mem_1v_adc_io_data 
+0x6917 027796 fetcht 2 ,mem_0_5_adc_io_data 
+0x6918 027797 arg 50 ,regc 
+0x6919 027798 branch vdd_calculate 
+:      027800 vdd_calculate:
+0x691a 027801 isub temp ,rega 
+0x691b 027802 fetch 2 ,mem_adc_current_value 
+0x691c 027803 isub temp ,pdata 
+0x691d 027804 nbranch vdd_calculate1 ,positive 
+0x691e 027805 fetcht 2 ,mem_reference_voltage 
+0x691f 027806 imul32 temp ,regb 
+0x6920 027807 copy regc ,pdata 
+0x6921 027808 imul32 rega ,pdata 
+0x6922 027809 iadd regb ,pdata 
+:      027810 vdd_calculate2:
+0x6923 027811 idiv rega 
+0x6924 027812 call wait_div_end 
+0x6925 027813 quotient pdata 
+0x6926 027814 rtn 
+:      027816 vdd_calculate1:
+0x6927 027817 copy temp ,pdata 
+0x6928 027818 fetcht 2 ,mem_adc_current_value 
+0x6929 027819 isub temp ,pdata 
+0x692a 027820 fetcht 2 ,mem_reference_voltage 
+0x692b 027821 imul32 temp ,regb 
+0x692c 027822 copy regc ,pdata 
+0x692d 027823 imul32 rega ,pdata 
+0x692e 027824 isub regb ,pdata 
+0x692f 027825 branch vdd_calculate2 
+:      027836 adc_bat_percent_lowpower_out:
+0x6930 027837 ifetch 8 ,rega 
+0x6931 027838 store 8 ,mem_pdatatemp 
+0x6932 027839 fetch 2 ,mem_pdatatemp 
+0x6933 027840 fetcht 2 ,mem_pdatatemp + 2 
+0x6934 027841 isub temp ,rega 
+0x6935 027842 fetch 2 ,mem_pdatatemp + 6 
+0x6936 027843 isub temp ,regb 
+0x6937 027844 fetcht 2 ,mem_pdatatemp + 4 
+0x6938 027845 isub temp ,null 
+0x6939 027846 ncall adc_set_low_power_flag ,positive 
+0x693a 027847 mul32 regb ,100 ,pdata 
+0x693b 027848 idiv rega 
+0x693c 027849 call wait_div_end 
+0x693d 027850 quotient pdata 
+0x693e 027851 call adc_set_no_power_flag ,blank 
+0x693f 027852 rtn 
+:      027853 adc_set_low_power_flag:
+0x6940 027854 fetch 1 ,mem_adc_power_flag 
+0x6941 027855 set1 0 ,pdata 
+0x6942 027856 store 1 ,mem_adc_power_flag 
+0x6943 027857 rtn 
+:      027858 adc_set_no_power_flag:
+0x6944 027859 fetcht 1 ,mem_adc_power_flag 
+0x6945 027860 set1 1 ,temp 
+0x6946 027861 storet 1 ,mem_adc_power_flag 
+0x6947 027862 rtn 
+:      027867 keyscan_key_init:
+0x6948 027868 fetch 2 ,mem_key_num_ptr 
+0x6949 027869 ifetch 1 ,pdata 
+:      027870 keyscan_key_init_next:
+0x694a 027871 rtn blank 
+0x694b 027872 copy pdata ,loopcnt 
+0x694c 027874 fetch 2 ,mem_keyscan_ptr 
+0x694d 027875 increase 3 ,pdata 
+0x694e 027876 copy pdata ,rega 
+:      027877 keyscan_key_init_lp1:
+0x694f 027878 ifetcht 1 ,rega 
+0x6950 027879 call gpio_config_input 
+0x6951 027880 increase key_conf_struct_len ,rega 
+0x6952 027881 loop keyscan_key_init_lp1 
+:      027882 keyscan_key_init_end:
+0x6953 027883 rtn 
+:      027885 keyscan_scan_key:
+0x6954 027886 fetch 2 ,mem_keyscan_ptr 
+0x6955 027887 increase 3 ,pdata 
+0x6956 027888 copy pdata ,rega 
+0x6957 027890 force 0 ,regb 
+0x6958 027891 jam 0 ,mem_key_value_temp 
+:      027892 keyscan_scan_key_lp1:
+0x6959 027893 ifetcht 1 ,rega 
+0x695a 027894 call gpio_get_bit 
+0x695b 027895 bpatchx patch34_1 ,mem_patch34 
+0x695c 027896 fetch 2 ,mem_key_value_temp 
+0x695d 027897 copy regb ,queue 
+0x695e 027898 qsetflag true ,pdata 
+0x695f 027899 store 2 ,mem_key_value_temp 
+0x6960 027900 increase key_conf_struct_len ,rega 
+0x6961 027901 increase 1 ,regb 
+0x6962 027902 fetch 2 ,mem_key_num_ptr 
+0x6963 027903 ifetch 1 ,pdata 
+:      027904 keyscan_scan_key_lp1_next:
+0x6964 027905 ixor regb ,null 
+0x6965 027906 nbranch keyscan_scan_key_lp1 ,zero 
+0x6966 027907 fetch 2 ,mem_key_value_temp 
+0x6967 027908 fetcht 2 ,mem_key_value 
+0x6968 027909 ixor temp ,null 
+0x6969 027910 rtn zero 
+0x696a 027911 enable user 
+0x696b 027912 rtn 
+:      027914 keyscan_process_lpm_before:
+0x696c 027915 fetch 2 ,mem_key_num_ptr 
+0x696d 027916 ifetch 1 ,pdata 
+:      027917 keyscan_process_lpm_before_next:
+0x696e 027918 rtn blank 
+0x696f 027919 copy pdata ,loopcnt 
+0x6970 027920 fetch 2 ,mem_keyscan_ptr 
+0x6971 027921 increase 3 ,pdata 
+0x6972 027922 copy pdata ,rega 
+:      027923 keyscan_process_lpm_before_lp1:
+0x6973 027924 ifetcht 1 ,rega 
+0x6974 027925 call gpio_set_wake_by_current_state 
+0x6975 027926 increase key_conf_struct_len ,rega 
+0x6976 027927 loop keyscan_process_lpm_before_lp1 
+:      027928 keyscan_process_lpm_before_end:
+0x6977 027929 rtn 
+:      027931 keyscan_key_process:
+0x6978 027932 arg key_scan_timer ,queue 
+0x6979 027933 call timer_check 
+0x697a 027934 nrtn blank 
+0x697b 027935 setarg 0x20 
+0x697c 027936 arg key_scan_timer ,queue 
+0x697d 027937 call timer_init 
+0x697e 027938 disable user 
+0x697f 027939 call keyscan_process_lpm_before 
+0x6980 027940 bpatchx patch34_2 ,mem_patch34 
+0x6981 027941 fetch 2 ,mem_key_num_ptr 
+0x6982 027942 ifetch 1 ,pdata 
+:      027943 keyscan_key_process_next:
+0x6983 027944 rtn blank 
+0x6984 027945 call keyscan_scan_key 
+0x6985 027946 nbranch lpm_button_clean_wake_lock ,user 
+0x6986 027947 call lpm_button_get_wake_lock 
+0x6987 027948 disable user 
+0x6988 027949 fetch 2 ,mem_key_value_temp 
+0x6989 027950 store 2 ,mem_key_value_temp4 
+0x698a 027951 jam 0 ,mem_key_value_temp6 
+0x698b 027952 force 0 ,queue 
+:      027953 keyscan_key_lp1:
+0x698c 027954 fetch 2 ,mem_key_value 
+0x698d 027955 rshift pdata ,temp 
+0x698e 027956 storet 2 ,mem_key_value 
+0x698f 027957 and pdata ,0x01 ,pdata 
+0x6990 027958 fetcht 2 ,mem_key_value_temp4 
+0x6991 027959 and temp ,0x01 ,rega 
+0x6992 027960 rshift temp ,temp 
+0x6993 027961 storet 2 ,mem_key_value_temp4 
+0x6994 027962 ixor rega ,null 
+0x6995 027963 ncall keyscan_send_key_data ,zero 
+0x6996 027964 fetch 2 ,mem_key_num_ptr 
+0x6997 027965 ifetch 1 ,pdata 
+:      027966 keyscan_key_lp1_next:
+0x6998 027967 fetcht 1 ,mem_key_value_temp6 
+0x6999 027968 increase 1 ,temp 
+0x699a 027969 storet 1 ,mem_key_value_temp6 
+0x699b 027970 copy temp ,queue 
+0x699c 027971 ixor queue ,null 
+0x699d 027972 nbranch keyscan_key_lp1 ,zero 
+0x699e 027973 fetch 2 ,mem_key_value_temp 
+0x699f 027974 store 2 ,mem_key_value 
+0x69a0 027975 rtn 
+:      027976 keyscan_send_key_data:
+0x69a1 027977 bpatchx patch34_3 ,mem_patch34 
+0x69a2 027978 fetch 2 ,mem_keyscan_ptr 
+0x69a3 027979 increase 1 ,pdata 
+0x69a4 027980 ifetch 2 ,pdata 
+0x69a5 027981 branch callback_func 
+:      027992 pwm_init:
+0x69a6 027993 hfetch 1 ,core_clksel 
+0x69a7 027994 ior rega ,pdata 
+0x69a8 027995 hstore 1 ,core_clksel 
+0x69a9 027996 hfetch 2 ,core_clkoff 
+0x69aa 027997 set0 clock_off_pwm ,pdata 
+0x69ab 027998 hstore 2 ,core_clkoff 
+0x69ac 027999 nop 100 
+0x69ad 028000 rtn 
+:      028011 pwm_out_set:
+0x69ae 028012 fetcht 3 ,mem_pdatatemp + 2 
+0x69af 028013 setarg pwm_12mhz 
+0x69b0 028014 idiv temp 
+0x69b1 028015 call wait_div_end 
+0x69b2 028016 quotient temp 
+0x69b3 028017 fetch 1 ,mem_pdatatemp + 5 
+0x69b4 028018 imul32 temp ,pdata 
+0x69b5 028019 div pdata ,100 
+0x69b6 028020 call wait_div_end 
+0x69b7 028021 quotient rega 
+0x69b8 028022 copy temp ,pdata 
+0x69b9 028023 isub rega ,regb 
+0x69ba 028024 fetch 1 ,mem_pdatatemp + 1 
+0x69bb 028025 call pwm_duty_cycle_set 
+0x69bc 028026 fetch 1 ,mem_pdatatemp 
+0x69bd 028027 branch pwm_enable 
+:      028030 pwm_duty_cycle_set:
+0x69be 028031 beq 0 ,pwm_pwm0_duty_set 
+0x69bf 028032 beq 1 ,pwm_pwm1_duty_set 
+0x69c0 028033 beq 2 ,pwm_pwm2_duty_set 
+0x69c1 028034 beq 3 ,pwm_pwm3_duty_set 
+0x69c2 028035 beq 4 ,pwm_pwm4_duty_set 
+0x69c3 028036 beq 5 ,pwm_pwm5_duty_set 
+:      028037 pwm_pwm0_duty_set:
+0x69c4 028038 arg core_pwm_pcnt0 ,contw 
+0x69c5 028039 branch pwm_set_pncnt 
+:      028040 pwm_pwm1_duty_set:
+0x69c6 028041 arg core_pwm_pcnt1 ,contw 
+0x69c7 028042 branch pwm_set_pncnt 
+:      028043 pwm_pwm2_duty_set:
+0x69c8 028044 arg core_pwm_pcnt2 ,contw 
+0x69c9 028045 branch pwm_set_pncnt 
+:      028046 pwm_pwm3_duty_set:
+0x69ca 028047 arg core_pwm_pcnt3 ,contw 
+0x69cb 028048 branch pwm_set_pncnt 
+:      028049 pwm_pwm4_duty_set:
+0x69cc 028050 arg core_pwm_pcnt4 ,contw 
+0x69cd 028051 branch pwm_set_pncnt 
+:      028052 pwm_pwm5_duty_set:
+0x69ce 028053 arg core_pwm_pcnt5 ,contw 
+0x69cf 028054 branch pwm_set_pncnt 
+:      028055 pwm_set_pncnt:
+0x69d0 028056 copy rega ,pdata 
+0x69d1 028057 istore 2 ,contw 
+0x69d2 028058 copy regb ,pdata 
+0x69d3 028059 istore 2 ,contw 
+0x69d4 028060 rtn 
+:      028064 pwm_enable:
+0x69d5 028065 enable user 
+0x69d6 028066 branch pwm_gpio_set 
+:      028067 pwm_disable:
+0x69d7 028068 disable user 
+:      028069 pwm_gpio_set:
+0x69d8 028070 beq 4 ,pwm_gpio4_set 
+0x69d9 028071 beq 5 ,pwm_gpio5_set 
+0x69da 028072 beq 27 ,pwm_gpio27_set 
+0x69db 028073 beq 28 ,pwm_gpio28_set 
+0x69dc 028074 beq 3 ,pwm_gpio3_set 
+0x69dd 028075 beq 8 ,pwm_gpio8_set 
+0x69de 028076 beq 20 ,pwm_gpio20_set 
+0x69df 028077 beq 21 ,pwm_gpio21_set 
+0x69e0 028078 beq 22 ,pwm_gpio22_set 
+0x69e1 028079 beq 23 ,pwm_gpio23_set 
+0x69e2 028080 rtn 
+:      028083 pwm_gpio4_set:
+0x69e3 028084 arg 6 ,queue 
+0x69e4 028085 branch pwm_one_set_select 
+:      028086 pwm_gpio5_set:
+0x69e5 028087 arg 7 ,queue 
+0x69e6 028088 branch pwm_one_set_select 
+:      028089 pwm_gpio27_set:
+0x69e7 028090 arg 8 ,queue 
+0x69e8 028091 branch pwm_one_set_select 
+:      028092 pwm_gpio28_set:
+0x69e9 028093 arg 9 ,queue 
+0x69ea 028094 branch pwm_one_set_select 
+:      028095 pwm_gpio3_set:
+0x69eb 028096 arg 10 ,queue 
+0x69ec 028097 branch pwm_one_set_select 
+:      028098 pwm_gpio8_set:
+0x69ed 028099 arg 11 ,queue 
+0x69ee 028100 branch pwm_one_set_select 
+:      028101 pwm_gpio20_set:
+0x69ef 028102 arg 12 ,queue 
+0x69f0 028103 branch pwm_tw0_set_select 
+:      028104 pwm_gpio21_set:
+0x69f1 028105 arg 13 ,queue 
+0x69f2 028106 branch pwm_tw0_set_select 
+:      028107 pwm_gpio22_set:
+0x69f3 028108 arg 14 ,queue 
+0x69f4 028109 branch pwm_tw0_set_select 
+:      028110 pwm_gpio23_set:
+0x69f5 028111 arg 15 ,queue 
+0x69f6 028112 branch pwm_tw0_set_select 
+:      028114 pwm_set_select:
+0x69f7 028115 hfetch 2 ,core_gpio_sel1 
+0x69f8 028116 qsetflag user ,pdata 
+0x69f9 028117 hstore 2 ,core_gpio_sel1 
+0x69fa 028118 copy rega ,queue 
+0x69fb 028119 hfetch 1 ,core_gpio_key2 
+0x69fc 028120 qsetflag user ,pdata 
+0x69fd 028121 hstore 1 ,core_gpio_key2 
+0x69fe 028122 rtn 
+:      028124 pwm_one_set_select:
+0x69ff 028125 add queue ,-4 ,rega 
+0x6a00 028126 branch pwm_set_select 
+:      028128 pwm_tw0_set_select:
+0x6a01 028129 add queue ,-10 ,rega 
+0x6a02 028130 branch pwm_set_select 
+:      028135 rfcomm_init:
+0x6a03 028136 rtn wake 
+0x6a04 028137 jam 0 ,mem_rfcomm_send_more_pkt 
+0x6a05 028138 jam bits9600 ,memremoterpnbitrate 
+0x6a06 028139 jam databits8 ,memremoteprndatabits 
+0x6a07 028140 jam 0x11 ,memremoteprnxon 
+0x6a08 028141 jam 0x13 ,memremoteprnxoff 
+0x6a09 028142 setarg 0 
+0x6a0a 028143 store 3 ,memremoteprnstopbit 
+0x6a0b 028144 store 1 ,mem_spp_state 
+0x6a0c 028145 jam 0 ,memui_reconnect_mode 
+:      028147 rfcomm_init_spp:
+0x6a0d 028148 bpatchx patch34_4 ,mem_patch34 
+0x6a0e 028149 setarg 0 
+0x6a0f 028150 store 1 ,mem_spp_state 
+0x6a10 028151 store 1 ,mem_remote_spp_channel 
+0x6a11 028152 store 1 ,mem_pn_dlci 
+0x6a12 028153 fetch 1 ,mem_credit_flag 
+0x6a13 028154 beq credit_enable ,rfcomm_init_spp_with_credit 
+0x6a14 028155 jam 0x50 ,mem_credit_given 
+0x6a15 028156 rtn 
+:      028158 rfcomm_init_spp_with_credit:
+0x6a16 028159 jam 0x00 ,mem_credit_given 
+0x6a17 028160 rtn 
+:      028162 set_cr_bit:
+0x6a18 028163 or_into 0x02 ,temp 
+0x6a19 028164 rtn 
+:      028176 rfcomm_calculate_fcs_sabm:
+0x6a1a 028177 copy temp ,pdata 
+0x6a1b 028178 reverse pdata ,pdata 
+0x6a1c 028179 store 1 ,memfcstemp3 
+0x6a1d 028180 force ini_tx_sabm ,pdata 
+0x6a1e 028181 reverse pdata ,pdata 
+0x6a1f 028182 store 1 ,memfcstemp2 
+0x6a20 028183 force 0x01 ,pdata 
+0x6a21 028184 reverse pdata ,pdata 
+0x6a22 028185 store 1 ,memfcstemp1 
+0x6a23 028186 call caculate_fcs 
+0x6a24 028187 copy temp ,pdata 
+0x6a25 028188 rtn 
+:      028189 rfcomm_calculate_fcs_ua:
+0x6a26 028190 reverse pdata ,pdata 
+0x6a27 028191 store 1 ,memfcstemp3 
+0x6a28 028192 force rsp_tx_ua ,pdata 
+0x6a29 028193 reverse pdata ,pdata 
+0x6a2a 028194 store 1 ,memfcstemp2 
+0x6a2b 028195 force 0x01 ,pdata 
+0x6a2c 028196 reverse pdata ,pdata 
+0x6a2d 028197 store 1 ,memfcstemp1 
+0x6a2e 028198 branch caculate_fcs 
+:      028200 rfcomm_calculate_fcs_dlci0:
+0x6a2f 028201 fetch 1 ,mem_rfcomm_initiator 
+0x6a30 028202 branch rfcomm_calculate_fcs_dlci0_res ,blank 
+0x6a31 028203 setarg 0x70 
+0x6a32 028204 rtn 
+:      028205 rfcomm_calculate_fcs_dlci0_res:
+0x6a33 028206 setarg 0xaa 
+0x6a34 028207 rtn 
+:      028209 rfcomm_save_fcs_uih:
+0x6a35 028210 reverse pdata ,pdata 
+0x6a36 028211 store 1 ,memfcstemp3 
+0x6a37 028212 force rsp_rx_uih ,pdata 
+0x6a38 028213 call caculate_uihdata_fcs 
+0x6a39 028214 fetcht 2 ,mem_contw_temp 
+0x6a3a 028215 copy temp ,contw 
+0x6a3b 028216 istore 1 ,contw 
+0x6a3c 028217 copy contw ,temp 
+0x6a3d 028218 storet 2 ,mem_contw_temp 
+0x6a3e 028219 force rsp_rx_uih_wdata ,pdata 
+0x6a3f 028220 call caculate_uihdata_fcs 
+0x6a40 028221 fetcht 2 ,mem_contw_temp 
+0x6a41 028222 copy temp ,contw 
+0x6a42 028223 istore 1 ,contw 
+0x6a43 028224 rtn 
+:      028233 caculate_uihdata_fcs:
+0x6a44 028234 reverse pdata ,pdata 
+0x6a45 028235 store 1 ,memfcstemp2 
+0x6a46 028236 fetch 2 ,memfcstemp2 
+0x6a47 028237 lshift8 pdata ,pdata 
+0x6a48 028238 store 3 ,mem_mod2div_temp 
+0x6a49 028239 arg 0x107 ,rega 
+0x6a4a 028240 arg 0xf ,regb 
+0x6a4b 028241 call mod2div 
+0x6a4c 028242 xor_into 0xd7 ,pdata 
+0x6a4d 028243 invert pdata ,pdata 
+0x6a4e 028244 reverse pdata ,pdata 
+0x6a4f 028245 rtn 
+:      028255 caculate_fcs:
+0x6a50 028256 fetch 3 ,memfcstemp1 
+0x6a51 028257 store 3 ,mem_mod2div_temp 
+0x6a52 028258 arg 0x107 ,rega 
+0x6a53 028259 arg 0xf ,regb 
+0x6a54 028260 call mod2div 
+0x6a55 028261 lshift8 pdata ,pdata 
+0x6a56 028262 arg 0x7 ,regb 
+0x6a57 028263 call mod2div 
+0x6a58 028264 xor_into 0x2b ,pdata 
+0x6a59 028265 invert pdata ,pdata 
+0x6a5a 028266 reverse pdata ,pdata 
+0x6a5b 028267 copy pdata ,temp 
+0x6a5c 028268 rtn 
+:      028270 mod2div:
+0x6a5d 028271 arg 0 ,regc 
+0x6a5e 028272 copy regb ,loopcnt 
+0x6a5f 028273 call right_shift_n 
+0x6a60 028274 icopy temp 
+:      028275 mod2div_loop:
+0x6a61 028280 copy temp ,pdata 
+0x6a62 028281 lshift regc ,regc 
+0x6a63 028282 bbit0 8 ,mod2div_not_enough_reduction 
+0x6a64 028283 ixor rega ,temp 
+0x6a65 028284 increase 1 ,regc 
+:      028285 mod2div_not_enough_reduction:
+0x6a66 028286 lshift temp ,temp 
+0x6a67 028287 fetch 3 ,mem_mod2div_temp 
+0x6a68 028288 increase -1 ,regb 
+0x6a69 028289 compare 0xff ,regb ,0xff 
+0x6a6a 028290 branch mod2div_end ,true 
+0x6a6b 028291 copy regb ,loopcnt 
+0x6a6c 028292 call right_shift_n 
+0x6a6d 028293 isolate1 0 ,pdata 
+0x6a6e 028294 setflag true ,0 ,temp 
+0x6a6f 028295 branch mod2div_loop 
+:      028296 mod2div_end:
+0x6a70 028298 rshift temp ,pdata 
+0x6a71 028299 rtn 
+:      028301 get_rfcomm_snd_adss:
+0x6a72 028302 fetcht 1 ,mem_pn_dlci 
+:      028303 dlci_to_address_cmd:
+0x6a73 028305 lshift2 temp ,temp 
+0x6a74 028306 set1 rfcomm_address_ext_len ,temp 
+0x6a75 028307 fetch 1 ,mem_rfcomm_initiator 
+0x6a76 028308 ncall set_cr_bit ,blank 
+0x6a77 028309 storet 1 ,mem_rfcomm_send_adss 
+0x6a78 028310 rtn 
+:      028312 channel_to_dlci:
+0x6a79 028314 lshift temp ,temp 
+0x6a7a 028315 fetch 1 ,mem_rfcomm_initiator 
+0x6a7b 028316 setflag blank ,0 ,temp 
+0x6a7c 028318 rtn 
+:      028319 rfcomm_rx_process_dlci0_sabm:
+0x6a7d 028320 fetcht 1 ,mem_current_channel 
+0x6a7e 028321 jam 0xd7 ,mem_current_fcs 
+0x6a7f 028322 call rfcomm_send_ua 
+0x6a80 028323 fetch 1 ,mem_rfcomm_state 
+0x6a81 028324 set1 l2cap_channel_rfcomm_only_sabm ,pdata 
+0x6a82 028325 set1 l2cap_channel_rfcomm_only_ua ,pdata 
+0x6a83 028326 store 1 ,mem_rfcomm_state 
+0x6a84 028327 jam 0 ,mem_rfcomm_initiator 
+0x6a85 028328 branch rfcomm_rx_process_end 
+:      028329 rfcomm_rx_process_dlci0_ua:
+0x6a86 028330 fetch 1 ,mem_rfcomm_state 
+0x6a87 028331 set1 l2cap_channel_rfcomm_only_ua ,pdata 
+0x6a88 028332 store 1 ,mem_rfcomm_state 
+0x6a89 028333 branch rfcomm_rx_process_end 
+:      028336 rfcomm_rx_process:
+0x6a8a 028337 bpatchx patch34_5 ,mem_patch34 
+0x6a8b 028338 fetch 1 ,memui_reconnect_mode 
+0x6a8c 028339 beq no_reconnection ,rfcomm_rx_process_remote_page 
+0x6a8d 028340 branch rfcomm_rx_process_reconn 
+:      028342 rfcomm_rx_process_remote_page:
+0x6a8e 028343 fetch 2 ,mem_l2cap_payload_ptr 
+0x6a8f 028344 copy pdata ,contr 
+0x6a90 028345 call get_rfcomm_head_struct 
+0x6a91 028346 fetch 1 ,mem_current_channel 
+0x6a92 028347 beq 0 ,parse_dlci0_rp 
+0x6a93 028348 branch parse_uih_rp 
+:      028349 parse_dlci0_rp:
+0x6a94 028350 bpatchx patch34_6 ,mem_patch34 
+0x6a95 028351 fetch 1 ,mem_current_frame_type 
+0x6a96 028352 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm 
+0x6a97 028353 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua 
+0x6a98 028354 beq rfcomm_frame_type_uih ,parse_dlci0_rp_uih 
+0x6a99 028355 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn_send_event 
+0x6a9a 028356 rtn 
+:      028359 parse_dlci0_rp_uih:
+0x6a9b 028360 fetch 2 ,mem_rfcomm_uih_payload_ptr 
+0x6a9c 028361 copy pdata ,contr 
+0x6a9d 028362 call get_rfcomm_uih_head_struct 
+0x6a9e 028363 fetch 1 ,mem_uih_cmd_type 
+0x6a9f 028364 beq uih_param_neg_cmd ,parse_dlci0_rp_uih_pn_cmd 
+0x6aa0 028365 beq uih_param_neg_res ,parse_dlci0_rp_uih_pn_res 
+0x6aa1 028366 beq uih_modem_status_cmd ,parse_dlci0_rp_uih_ms_cmd 
+0x6aa2 028367 beq uih_modem_status_res ,parse_dlci0_rp_uih_ms_res 
+0x6aa3 028368 beq uih_param_cmd_remove_port ,parse_dlci0_rp_uih_cmd_port 
+0x6aa4 028369 branch rfcomm_rx_process_end 
+:      028371 parse_dlci0_rp_uih_pn_cmd:
+0x6aa5 028372 call parse_dlci0_rp_uih_pn_res_common 
+0x6aa6 028374 branch parse_dlci0_rp_uih_pn_cmd_spp 
+:      028376 parse_dlci0_rp_uih_pn_cmd_spp:
+0x6aa7 028377 fetch 1 ,mem_spp_state 
+0x6aa8 028378 set1 rfcomm_channel_state_pn_cmd ,pdata 
+0x6aa9 028379 set1 rfcomm_channel_state_pn_res ,pdata 
+0x6aaa 028380 store 1 ,mem_spp_state 
+0x6aab 028381 call rfcomm_send_param_neg_res 
+0x6aac 028382 branch rfcomm_rx_process_end 
+:      028384 parse_dlci0_rp_uih_pn_res:
+0x6aad 028385 call parse_dlci0_rp_uih_pn_res_common 
+0x6aae 028386 branch rfcomm_rx_process_end 
+:      028388 parse_dlci0_rp_uih_pn_res_common:
+0x6aaf 028389 call get_param_payload_ptr 
+0x6ab0 028390 branch get_rfcomm_prarmer_negotiation 
+:      028392 get_rfcomm_param_modem_status:
+0x6ab1 028393 call get_param_payload_ptr 
+0x6ab2 028394 ifetch 1 ,contr 
+0x6ab3 028395 rshift3 pdata ,pdata 
+0x6ab4 028396 store 1 ,mem_ms_channel 
+0x6ab5 028397 ifetch 1 ,contr 
+0x6ab6 028398 store 1 ,mem_ms_param 
+0x6ab7 028399 rtn 
+:      028402 get_rfcomm_head_struct:
+0x6ab8 028403 ifetch 1 ,contr 
+0x6ab9 028404 store 1 ,mem_current_adss 
+0x6aba 028405 rshift3 pdata ,pdata 
+0x6abb 028406 store 1 ,mem_current_channel 
+0x6abc 028407 ifetch 1 ,contr 
+0x6abd 028408 store 1 ,mem_current_frame_type 
+:      028409 get_rfcomm_current_length:
+0x6abe 028410 call get_rfcomm_length_common 
+0x6abf 028411 storet 2 ,mem_current_length 
+0x6ac0 028412 copy contr ,pdata 
+0x6ac1 028413 store 2 ,mem_rfcomm_uih_payload_ptr 
+0x6ac2 028414 rtn 
+:      028416 get_rfcomm_uih_head_struct:
+0x6ac3 028417 ifetch 1 ,contr 
+0x6ac4 028418 rshift pdata ,pdata 
+0x6ac5 028419 store 1 ,mem_uih_cmd_type 
+0x6ac6 028420 call get_rfcomm_length_common 
+0x6ac7 028421 storet 2 ,mem_uih_length 
+0x6ac8 028422 copy contr ,pdata 
+0x6ac9 028423 store 2 ,mem_param_payload_ptr 
+0x6aca 028424 rtn 
+:      028427 get_param_payload_ptr:
+0x6acb 028428 fetch 2 ,mem_param_payload_ptr 
+0x6acc 028429 copy pdata ,contr 
+0x6acd 028430 rtn 
+:      028432 get_rfcomm_length_common:
+0x6ace 028433 ifetch 1 ,contr 
+0x6acf 028434 copy pdata ,temp 
+0x6ad0 028435 rshift temp ,temp 
+0x6ad1 028436 rtnbit1 0 
+0x6ad2 028437 ifetch 1 ,contr 
+0x6ad3 028438 lshift3 pdata ,pdata 
+0x6ad4 028439 lshift4 pdata ,pdata 
+0x6ad5 028440 iadd temp ,temp 
+0x6ad6 028441 rtn 
+:      028443 get_rfcomm_prarmer_negotiation:
+0x6ad7 028444 ifetch 1 ,contr 
+0x6ad8 028445 store 1 ,mem_pn_dlci 
+0x6ad9 028446 ifetch 1 ,contr 
+0x6ada 028447 store 1 ,mem_pn_credit_flow_type_info 
+0x6adb 028448 ifetch 1 ,contr 
+0x6adc 028449 store 1 ,mem_pn_priority 
+0x6add 028450 ifetch 1 ,contr 
+0x6ade 028451 store 1 ,mem_pn_acknowledg_timer 
+0x6adf 028452 ifetch 2 ,contr 
+0x6ae0 028453 store 2 ,mem_pn_max_frame_size 
+0x6ae1 028454 ifetch 1 ,contr 
+0x6ae2 028455 store 1 ,mem_pn_max_retrans 
+0x6ae3 028456 ifetch 1 ,contr 
+0x6ae4 028457 store 1 ,mem_remote_credits 
+0x6ae5 028458 rtn 
+:      028461 parse_dlci0_rp_uih_ms_cmd:
+0x6ae6 028462 call get_rfcomm_param_modem_status 
+0x6ae7 028464 branch parse_dlci0_rp_uih_ms_cmd_spp 
+:      028466 parse_dlci0_rp_uih_ms_cmd_spp:
+0x6ae8 028467 fetch 1 ,mem_spp_state 
+0x6ae9 028468 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata 
+0x6aea 028469 set1 rfcomm_channel_state_snd_ms_res ,pdata 
+0x6aeb 028470 store 1 ,mem_spp_state 
+0x6aec 028471 fetcht 1 ,mem_pn_dlci 
+0x6aed 028472 lshift2 temp ,temp 
+0x6aee 028473 or_into 3 ,temp 
+0x6aef 028474 call rfcomm_send_modem_status_res 
+0x6af0 028475 jam more_pkt_msc_cmd_spp ,mem_rfcomm_send_more_pkt 
+0x6af1 028476 branch rfcomm_rx_process_end 
+:      028478 parse_dlci0_rp_uih_ms_res:
+0x6af2 028479 jam bt_evt_spp_connected ,mem_fifo_temp 
+0x6af3 028480 call ui_ipc_send_event 
+0x6af4 028481 call get_rfcomm_param_modem_status 
+0x6af5 028482 fetch 1 ,mem_ms_channel 
+0x6af6 028483 sub pdata ,1 ,null 
+0x6af7 028484 branch parse_dlci0_rp_uih_ms_res_spp ,zero 
+0x6af8 028485 branch assert 
+:      028486 parse_dlci0_rp_uih_ms_res_spp:
+0x6af9 028487 fetch 1 ,mem_spp_state 
+0x6afa 028488 set1 rfcomm_channel_state_rcv_ms_res ,pdata 
+0x6afb 028489 store 1 ,mem_spp_state 
+0x6afc 028490 branch rfcomm_rx_process_end 
+:      028492 parse_dlci0_rp_uih_cmd_port:
+0x6afd 028493 call get_param_payload_ptr 
+0x6afe 028494 ifetch 1 ,contr 
+0x6aff 028495 store 1 ,mem_rpn_dlci 
+0x6b00 028496 call l2cap_malloc_rfcomm_channel 
+0x6b01 028497 call l2cap_get_rfcomm_tx_buff 
+0x6b02 028498 setarg 0x000e 
+0x6b03 028499 istore 2 ,contw 
+0x6b04 028500 fetch 2 ,mem_rfcomm_remote_cid 
+0x6b05 028501 istore 2 ,contw 
+0x6b06 028502 fetch 1 ,mem_rfcomm_initiator 
+0x6b07 028504 lshift pdata ,pdata 
+0x6b08 028505 set1 0 ,pdata 
+0x6b09 028506 istore 1 ,contw 
+0x6b0a 028507 bpatchx patch34_7 ,mem_patch34 
+0x6b0b 028508 setarg 0x15ef 
+0x6b0c 028509 istore 2 ,contw 
+0x6b0d 028510 setarg 0x1191 
+0x6b0e 028511 istore 2 ,contw 
+0x6b0f 028514 fetch 1 ,mem_rpn_dlci 
+0x6b10 028515 istore 1 ,contw 
+0x6b11 028516 setarg 0x000007 
+0x6b12 028517 istore 5 ,contw 
+0x6b13 028520 setarg 0x01 
+0x6b14 028521 istore 2 ,contw 
+0x6b15 028524 call rfcomm_calculate_fcs_dlci0 
+0x6b16 028525 istore 1 ,contw 
+0x6b17 028526 rtn 
+:      028530 parse_uih_rp:
+0x6b18 028531 branch parse_uih_rp_spp 
+:      028533 parse_uih_rp_spp:
+0x6b19 028534 bpatchx patch35_0 ,mem_patch35 
+0x6b1a 028535 fetch 1 ,mem_current_frame_type 
+0x6b1b 028536 beq rfcomm_frame_type_ua ,parse_uih_rp_spp_ua 
+0x6b1c 028537 beq rfcomm_frame_type_sabm ,parse_uih_rp_spp_sabm 
+0x6b1d 028538 beq rfcomm_frame_type_uih ,parse_uih_spp_uih 
+0x6b1e 028539 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits 
+0x6b1f 028540 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn 
+0x6b20 028541 rtn 
+:      028542 parse_uih_rp_spp_ua:
+0x6b21 028543 fetch 1 ,mem_spp_state 
+0x6b22 028544 set1 rfcomm_channel_state_ua ,pdata 
+0x6b23 028545 store 1 ,mem_spp_state 
+0x6b24 028546 branch rfcomm_rx_process_end 
+:      028547 parse_uih_rp_spp_sabm:
+0x6b25 028548 fetch 1 ,mem_spp_state 
+0x6b26 028549 set1 rfcomm_channel_state_ua ,pdata 
+0x6b27 028550 set1 rfcomm_channel_state_sabm ,pdata 
+0x6b28 028551 store 1 ,mem_spp_state 
+0x6b29 028552 fetch 1 ,mem_current_adss 
+0x6b2a 028553 call rfcomm_calculate_fcs_ua 
+0x6b2b 028554 store 1 ,mem_current_fcs 
+0x6b2c 028555 call rfcomm_send_ua 
+0x6b2d 028556 fetch 1 ,mem_current_adss 
+0x6b2e 028557 rshift2 pdata ,pdata 
+0x6b2f 028558 store 1 ,mem_pn_dlci 
+0x6b30 028559 lshift2 pdata ,pdata 
+0x6b31 028560 set0 rfcomm_address_cr ,pdata 
+0x6b32 028561 set1 rfcomm_address_ext_len ,pdata 
+0x6b33 028562 arg mem_hiufcs_spp ,temp 
+0x6b34 028563 storet 2 ,mem_contw_temp 
+0x6b35 028564 call rfcomm_save_fcs_uih 
+0x6b36 028565 branch rfcomm_rx_process_end 
+:      028567 parse_uih_spp_uih_credits:
+0x6b37 028568 fetch 2 ,mem_rfcomm_uih_payload_ptr 
+0x6b38 028569 copy pdata ,contr 
+0x6b39 028570 increase 1 ,pdata 
+0x6b3a 028571 store 2 ,mem_rfcomm_uih_payload_ptr 
+0x6b3b 028572 ifetch 1 ,contr 
+0x6b3c 028573 fetcht 1 ,mem_remote_credits 
+0x6b3d 028574 iadd temp ,pdata 
+0x6b3e 028575 store 1 ,mem_remote_credits 
+:      028576 parse_uih_spp_uih:
+0x6b3f 028577 call rfcomm_increase_credit_given 
+:      028578 parse_uih_spp_uih_cont:
+0x6b40 028579 call get_rfcomm_snd_adss 
+0x6b41 028580 call rfcomm_send_uih_without_payload 
+0x6b42 028581 call spp_process_rx_data 
+0x6b43 028582 branch rfcomm_rx_process_end 
+:      028584 parse_uih_rp_spp_disconn_send_event:
+0x6b44 028585 jam bt_evt_spp_disconnected ,mem_fifo_temp 
+0x6b45 028586 call ui_ipc_send_event 
+:      028587 parse_uih_rp_spp_disconn:
+0x6b46 028588 call rfcomm_init_spp 
+0x6b47 028589 fetch 1 ,mem_current_adss 
+0x6b48 028590 call rfcomm_calculate_fcs_ua 
+0x6b49 028591 store 1 ,mem_current_fcs 
+0x6b4a 028592 call rfcomm_send_ua 
+0x6b4b 028593 branch rfcomm_rx_process_end 
+:      028598 rfcomm_rx_process_reconn:
+0x6b4c 028599 fetch 2 ,mem_l2cap_payload_ptr 
+0x6b4d 028600 copy pdata ,contr 
+0x6b4e 028601 call get_rfcomm_head_struct 
+0x6b4f 028602 fetch 1 ,mem_current_channel 
+0x6b50 028603 beq 0 ,parse_dlci0_reconn 
+0x6b51 028604 branch parse_uih_reconn 
+:      028606 parse_dlci0_reconn:
+0x6b52 028607 bpatchx patch35_1 ,mem_patch35 
+0x6b53 028608 fetch 1 ,mem_current_frame_type 
+0x6b54 028609 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm 
+0x6b55 028610 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua 
+0x6b56 028611 beq rfcomm_frame_type_uih ,parse_dlci0_reconn_uih 
+0x6b57 028612 branch rfcomm_rx_process_end 
+:      028613 parse_dlci0_reconn_uih:
+0x6b58 028614 fetch 2 ,mem_rfcomm_uih_payload_ptr 
+0x6b59 028615 copy pdata ,contr 
+0x6b5a 028616 call get_rfcomm_uih_head_struct 
+0x6b5b 028617 fetch 1 ,mem_uih_cmd_type 
+0x6b5c 028618 beq uih_param_neg_cmd ,parse_dlci0_reconn_uih_pn_cmd 
+0x6b5d 028619 beq uih_param_neg_res ,parse_dlci0_reconn_uih_pn_cmd 
+0x6b5e 028620 beq uih_modem_status_cmd ,parse_dlci0_reconn_uih_ms_cmd 
+0x6b5f 028621 beq uih_modem_status_res ,parse_dlci0_reconn_uih_ms_res 
+0x6b60 028622 branch rfcomm_rx_process_end 
+:      028624 parse_dlci0_reconn_uih_pn_cmd:
+0x6b61 028625 call parse_dlci0_rp_uih_pn_res_common 
+0x6b62 028626 fetch 1 ,mem_pn_dlci 
+0x6b63 028627 rshift pdata ,pdata 
+0x6b64 028628 fetcht 1 ,mem_remote_spp_channel 
+0x6b65 028629 isub temp ,null 
+0x6b66 028630 branch parse_dlci0_reconn_uih_pn_cmd_spp ,zero 
+0x6b67 028631 branch assert 
+:      028632 parse_dlci0_reconn_uih_pn_cmd_spp:
+0x6b68 028633 fetch 1 ,mem_spp_state 
+0x6b69 028634 set1 rfcomm_channel_state_pn_res ,pdata 
+0x6b6a 028635 store 1 ,mem_spp_state 
+0x6b6b 028636 branch rfcomm_rx_process_end 
+:      028638 parse_dlci0_reconn_uih_ms_cmd:
+0x6b6c 028639 call get_rfcomm_param_modem_status 
+0x6b6d 028640 fetch 1 ,mem_ms_channel 
+0x6b6e 028641 fetcht 1 ,mem_remote_spp_channel 
+0x6b6f 028642 isub temp ,null 
+0x6b70 028643 branch parse_dlci0_reconn_uih_ms_cmd_spp ,zero 
+0x6b71 028644 branch assert 
+0x6b72 028645 branch rfcomm_rx_process_end 
+:      028646 parse_dlci0_reconn_uih_ms_cmd_spp:
+0x6b73 028647 fetch 1 ,mem_spp_state 
+0x6b74 028648 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata 
+0x6b75 028649 set1 rfcomm_channel_state_snd_ms_res ,pdata 
+0x6b76 028650 store 1 ,mem_spp_state 
+0x6b77 028651 fetcht 1 ,mem_pn_dlci 
+0x6b78 028652 lshift2 temp ,temp 
+0x6b79 028653 or_into 3 ,temp 
+0x6b7a 028654 call rfcomm_send_modem_status_res 
+0x6b7b 028655 branch rfcomm_rx_process_end 
+:      028657 parse_dlci0_reconn_uih_ms_res:
+0x6b7c 028658 call get_rfcomm_param_modem_status 
+0x6b7d 028659 fetch 1 ,mem_ms_channel 
+0x6b7e 028660 fetcht 1 ,mem_remote_spp_channel 
+0x6b7f 028661 isub temp ,null 
+0x6b80 028662 branch parse_dlci0_reconn_uih_ms_res_spp ,zero 
+0x6b81 028663 branch assert 
+:      028664 parse_dlci0_reconn_uih_ms_res_spp:
+0x6b82 028665 fetch 1 ,mem_spp_state 
+0x6b83 028666 set1 rfcomm_channel_state_rcv_ms_res ,pdata 
+0x6b84 028667 store 1 ,mem_spp_state 
+0x6b85 028668 branch rfcomm_rx_process_end 
+:      028670 parse_uih_reconn:
+0x6b86 028671 fetch 1 ,mem_current_channel 
+0x6b87 028672 fetcht 1 ,mem_remote_spp_channel 
+0x6b88 028673 isub temp ,null 
+0x6b89 028674 branch parse_uih_reconn_spp ,zero 
+0x6b8a 028675 branch assert 
+0x6b8b 028676 branch rfcomm_rx_process_end 
+:      028678 parse_uih_reconn_spp:
+0x6b8c 028679 fetch 1 ,mem_current_frame_type 
+0x6b8d 028680 beq rfcomm_frame_type_ua ,parse_uih_reconn_spp_ua 
+0x6b8e 028681 beq rfcomm_frame_type_uih ,parse_uih_spp_uih 
+0x6b8f 028682 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits 
+0x6b90 028683 beq rfcomm_frame_type_disconn ,parse_uih_reconn_spp_disconn 
+:      028684 parse_uih_reconn_spp_ua:
+0x6b91 028685 fetch 1 ,mem_spp_state 
+0x6b92 028686 set1 rfcomm_channel_state_ua ,pdata 
+0x6b93 028687 store 1 ,mem_spp_state 
+0x6b94 028688 branch rfcomm_rx_process_end 
+:      028689 parse_uih_reconn_spp_sabm:
+0x6b95 028690 branch parse_uih_reconn_spp_sabm 
+:      028691 parse_uih_reconn_spp_disconn:
+0x6b96 028692 branch parse_uih_rp_spp_disconn 
+:      028693 rfcomm_rx_process_end:
+0x6b97 028694 rtn 
+:      028696 rfcomm_send_more_pkt:
+0x6b98 028697 fetch 1 ,mem_rfcomm_send_more_pkt 
+0x6b99 028698 rtn blank 
+0x6b9a 028699 beq more_pkt_msc_cmd_spp ,rfcomm_send_more_pkt_msc_cmd_spp 
+0x6b9b 028700 branch assert 
+:      028702 rfcomm_send_more_pkt_msc_cmd_spp:
+0x6b9c 028703 jam 0 ,mem_rfcomm_send_more_pkt 
+0x6b9d 028704 call l2cap_malloc_rfcomm_channel 
+0x6b9e 028705 arg spp_slave_channel ,temp 
+0x6b9f 028706 fetcht 1 ,mem_pn_dlci 
+0x6ba0 028707 lshift2 temp ,temp 
+:      028708 rfcomm_send_more_pkt_msc_cmd_spp0:
+0x6ba1 028709 or_into 0x03 ,temp 
+0x6ba2 028710 arg 0xaa ,rega 
+0x6ba3 028711 call rfcomm_send_modem_status_cmd 
+0x6ba4 028712 call l2cap_get_rfcomm_tx_buff 
+0x6ba5 028713 copy contw ,contr 
+0x6ba6 028714 ifetch 2 ,contr 
+0x6ba7 028715 branch assert ,blank 
+0x6ba8 028716 rtn 
+:      028718 rfcomm_send_sabm:
+0x6ba9 028719 call l2cap_get_rfcomm_tx_buff 
+0x6baa 028720 setarg 0x0004 
+0x6bab 028721 istore 2 ,contw 
+0x6bac 028722 fetch 2 ,mem_rfcomm_remote_cid 
+0x6bad 028723 istore 2 ,contw 
+0x6bae 028724 fetch 1 ,mem_current_adss 
+0x6baf 028725 istore 1 ,contw 
+0x6bb0 028726 bpatchx patch35_2 ,mem_patch35 
+0x6bb1 028727 setarg 0x013f 
+0x6bb2 028728 istore 2 ,contw 
+0x6bb3 028729 fetch 1 ,mem_current_fcs 
+0x6bb4 028730 istore 1 ,contw 
+0x6bb5 028731 rtn 
+:      028732 rfcomm_send_ua:
+0x6bb6 028733 call l2cap_malloc_rfcomm_channel 
+0x6bb7 028734 call l2cap_get_rfcomm_tx_buff 
+0x6bb8 028735 setarg 0x0004 
+0x6bb9 028736 istore 2 ,contw 
+0x6bba 028737 fetch 2 ,mem_rfcomm_remote_cid 
+0x6bbb 028738 istore 2 ,contw 
+0x6bbc 028739 fetch 1 ,mem_current_adss 
+0x6bbd 028740 istore 1 ,contw 
+0x6bbe 028741 bpatchx patch35_3 ,mem_patch35 
+0x6bbf 028742 setarg 0x0173 
+0x6bc0 028743 istore 2 ,contw 
+0x6bc1 028744 fetch 1 ,mem_current_fcs 
+0x6bc2 028745 istore 1 ,contw 
+0x6bc3 028746 rtn 
+:      028747 rfcomm_send_param_neg_cmd:
+0x6bc4 028748 call l2cap_get_rfcomm_tx_buff 
+0x6bc5 028749 setarg 0x000e 
+0x6bc6 028750 istore 2 ,contw 
+0x6bc7 028751 fetch 2 ,mem_rfcomm_remote_cid 
+0x6bc8 028752 istore 2 ,contw 
+0x6bc9 028753 fetch 1 ,mem_rfcomm_initiator 
+0x6bca 028754 lshift pdata ,pdata 
+0x6bcb 028755 set1 0 ,pdata 
+0x6bcc 028756 istore 1 ,contw 
+0x6bcd 028757 bpatchx patch35_4 ,mem_patch35 
+0x6bce 028758 setarg 0x15ef 
+0x6bcf 028759 istore 2 ,contw 
+0x6bd0 028760 setarg 0x1183 
+0x6bd1 028761 istore 2 ,contw 
+0x6bd2 028762 copy temp ,pdata 
+0x6bd3 028763 istore 1 ,contw 
+0x6bd4 028764 setarg 0x0000f0 
+0x6bd5 028765 istore 3 ,contw 
+0x6bd6 028766 setarg rfcomm_max_frame_size 
+0x6bd7 028767 istore 2 ,contw 
+0x6bd8 028768 setarg 0 
+0x6bd9 028769 istore 1 ,contw 
+0x6bda 028770 setarg 0x01 
+0x6bdb 028771 istore 1 ,contw 
+0x6bdc 028772 call rfcomm_calculate_fcs_dlci0 
+0x6bdd 028773 istore 1 ,contw 
+0x6bde 028774 jam 0x10 ,mem_credit_given 
+0x6bdf 028775 rtn 
+:      028776 rfcomm_send_param_neg_res:
+0x6be0 028777 call l2cap_malloc_rfcomm_channel 
+0x6be1 028778 call l2cap_get_rfcomm_tx_buff 
+0x6be2 028779 setarg 0x000e 
+0x6be3 028780 istore 2 ,contw 
+0x6be4 028781 fetch 2 ,mem_rfcomm_remote_cid 
+0x6be5 028782 istore 2 ,contw 
+0x6be6 028783 fetch 1 ,mem_rfcomm_initiator 
+0x6be7 028784 lshift pdata ,pdata 
+0x6be8 028785 set1 0 ,pdata 
+0x6be9 028786 istore 1 ,contw 
+0x6bea 028787 bpatchx patch35_5 ,mem_patch35 
+0x6beb 028788 setarg 0x15ef 
+0x6bec 028789 istore 2 ,contw 
+0x6bed 028790 setarg 0x1181 
+0x6bee 028791 istore 2 ,contw 
+0x6bef 028792 fetch 1 ,mem_pn_dlci 
+0x6bf0 028793 istore 1 ,contw 
+0x6bf1 028794 setarg 0x0000e0 
+0x6bf2 028795 istore 3 ,contw 
+0x6bf3 028796 fetch 2 ,mem_rfcomm_max_frame_size 
+0x6bf4 028797 istore 2 ,contw 
+0x6bf5 028798 setarg 0x00 
+0x6bf6 028799 istore 1 ,contw 
+0x6bf7 028800 fetch 1 ,mem_rfcomm_credit_init_data 
+0x6bf8 028801 istore 1 ,contw 
+0x6bf9 028802 call rfcomm_calculate_fcs_dlci0 
+0x6bfa 028803 istore 1 ,contw 
+0x6bfb 028804 rtn 
+:      028805 rfcomm_send_modem_status_cmd:
+0x6bfc 028806 call l2cap_get_rfcomm_tx_buff 
+0x6bfd 028807 setarg 0x0008 
+0x6bfe 028808 istore 2 ,contw 
+0x6bff 028809 fetch 2 ,mem_rfcomm_remote_cid 
+0x6c00 028810 istore 2 ,contw 
+0x6c01 028811 fetch 1 ,mem_rfcomm_initiator 
+0x6c02 028812 lshift pdata ,pdata 
+0x6c03 028813 set1 0 ,pdata 
+0x6c04 028814 istore 1 ,contw 
+0x6c05 028815 bpatchx patch35_6 ,mem_patch35 
+0x6c06 028816 setarg 0x09ef 
+0x6c07 028817 istore 2 ,contw 
+0x6c08 028818 setarg 0x05e3 
+0x6c09 028819 istore 2 ,contw 
+0x6c0a 028820 copy temp ,pdata 
+0x6c0b 028821 istore 1 ,contw 
+0x6c0c 028822 setarg 0x8d 
+0x6c0d 028823 istore 1 ,contw 
+0x6c0e 028824 call rfcomm_calculate_fcs_dlci0 
+0x6c0f 028825 istore 1 ,contw 
+0x6c10 028826 rtn 
+:      028828 rfcomm_send_modem_status_res:
+0x6c11 028829 call l2cap_malloc_rfcomm_channel 
+0x6c12 028830 call l2cap_get_rfcomm_tx_buff 
+0x6c13 028831 setarg 0x0008 
+0x6c14 028832 istore 2 ,contw 
+0x6c15 028833 fetch 2 ,mem_rfcomm_remote_cid 
+0x6c16 028834 istore 2 ,contw 
+0x6c17 028835 copy temp ,timeup 
+0x6c18 028836 fetch 1 ,mem_rfcomm_initiator 
+0x6c19 028837 lshift pdata ,pdata 
+0x6c1a 028838 set1 0 ,pdata 
+0x6c1b 028839 istore 1 ,contw 
+0x6c1c 028840 bpatchx patch35_7 ,mem_patch35 
+0x6c1d 028841 setarg 0x09ef 
+0x6c1e 028842 istore 2 ,contw 
+0x6c1f 028843 setarg 0x05e1 
+0x6c20 028844 istore 2 ,contw 
+0x6c21 028845 copy timeup ,pdata 
+0x6c22 028846 istore 1 ,contw 
+0x6c23 028847 setarg 0x8d 
+0x6c24 028848 istore 1 ,contw 
+0x6c25 028849 call rfcomm_calculate_fcs_dlci0 
+0x6c26 028850 istore 1 ,contw 
+0x6c27 028851 rtn 
+:      028853 rfcomm_send_uih_without_payload:
+0x6c28 028854 bpatchx patch36_0 ,mem_patch36 
+0x6c29 028855 fetch 1 ,mem_credit_given 
+0x6c2a 028856 rtn blank 
+0x6c2b 028857 hfetch 2 ,core_uart_rxitems 
+0x6c2c 028858 nrtn blank 
+0x6c2d 028859 copy rega ,pdata 
+0x6c2e 028860 store 1 ,mem_pdatatemp + 1 
+0x6c2f 028861 storet 1 ,mem_pdatatemp 
+0x6c30 028862 call l2cap_malloc_is_fifo_full 
+0x6c31 028863 nrtn blank 
+0x6c32 028864 call l2cap_malloc_rfcomm_channel 
+0x6c33 028865 call l2cap_get_rfcomm_tx_buff 
+0x6c34 028866 setarg 0x05 
+0x6c35 028867 istore 2 ,contw 
+0x6c36 028868 fetch 2 ,mem_rfcomm_remote_cid 
+0x6c37 028869 istore 2 ,contw 
+0x6c38 028870 fetch 1 ,mem_rfcomm_send_adss 
+0x6c39 028871 istore 1 ,contw 
+0x6c3a 028872 setarg 0x01ff 
+0x6c3b 028873 istore 2 ,contw 
+0x6c3c 028874 fetch 1 ,mem_credit_given 
+0x6c3d 028875 istore 1 ,contw 
+0x6c3e 028876 fetch 1 ,mem_hiufcs_spp_wcredits 
+0x6c3f 028877 istore 1 ,contw 
+0x6c40 028878 jam 0 ,mem_credit_given 
+0x6c41 028879 rtn 
+:      028881 rfcomm_increase_credit_given:
+0x6c42 028882 bpatchx patch36_1 ,mem_patch36 
+0x6c43 028883 fetch 1 ,mem_credit_flag 
+0x6c44 028884 rtneq credit_enable 
+0x6c45 028885 fetch 2 ,mem_current_length 
+0x6c46 028886 rtn blank 
+0x6c47 028887 fetch 1 ,mem_credit_given 
+0x6c48 028888 increase 1 ,pdata 
+0x6c49 028889 store 1 ,mem_credit_given 
+0x6c4a 028890 rtn 
+:      028892 spp_process_rx_data:
+0x6c4b 028893 fetch 2 ,mem_cb_receive_spp_data 
+0x6c4c 028894 branch callback_func 
+:      028896 spp_tx_rfcomm_packet:
+0x6c4d 028897 bpatchx patch36_2 ,mem_patch36 
+0x6c4e 028899 fetch 1 ,mem_remote_credits 
+0x6c4f 028900 rtn blank 
+0x6c50 028901 increase -1 ,pdata 
+0x6c51 028902 store 1 ,mem_remote_credits 
+0x6c52 028903 fetch 2 ,mem_pn_max_frame_size 
+0x6c53 028904 fetcht 2 ,mem_current_packet_length 
+0x6c54 028905 isub temp ,null 
+0x6c55 028906 branch ssp_tx_rfcomm_from_uart ,positive 
+0x6c56 028907 store 2 ,mem_current_packet_length 
+:      028908 ssp_tx_rfcomm_from_uart:
+0x6c57 028909 fetch 1 ,mem_credit_given 
+0x6c58 028910 branch ssp_tx_rfcomm_from_uart_without_credit ,blank 
+0x6c59 028911 jam 1 ,mem_rfcomm_send_offset 
+0x6c5a 028912 fetch 1 ,mem_hiufcs_spp_wcredits 
+0x6c5b 028913 store 1 ,mem_rfcomm_send_fcs 
+0x6c5c 028914 setarg rsp_rx_uih_wdata 
+0x6c5d 028915 store 1 ,mem_rfcomm_send_frame_type 
+0x6c5e 028916 branch ssp_tx_rfcomm_from_uart_common 
+:      028917 ssp_tx_rfcomm_from_uart_without_credit:
+0x6c5f 028918 jam 0 ,mem_rfcomm_send_offset 
+0x6c60 028919 fetch 1 ,mem_hiufcs_spp 
+0x6c61 028920 store 1 ,mem_rfcomm_send_fcs 
+0x6c62 028921 setarg rsp_tx_uih 
+0x6c63 028922 store 1 ,mem_rfcomm_send_frame_type 
+:      028923 ssp_tx_rfcomm_from_uart_common:
+0x6c64 028924 bpatchx patch36_3 ,mem_patch36 
+0x6c65 028925 fetch 2 ,mem_current_packet_length 
+0x6c66 028926 sub pdata ,127 ,null 
+0x6c67 028927 branch ssp_tx_rfcomm_from_uart_common0 ,positive 
+0x6c68 028928 fetch 1 ,mem_rfcomm_send_offset 
+0x6c69 028929 increase 1 ,pdata 
+0x6c6a 028930 store 1 ,mem_rfcomm_send_offset 
+:      028931 ssp_tx_rfcomm_from_uart_common0:
+0x6c6b 028932 call get_rfcomm_snd_adss 
+0x6c6c 028933 fetch 2 ,mem_current_packet_length 
+0x6c6d 028934 increase 8 ,pdata 
+0x6c6e 028935 fetcht 1 ,mem_rfcomm_send_offset 
+0x6c6f 028936 iadd temp ,rega 
+0x6c70 028938 call l2cap_malloc 
+0x6c71 028939 store 2 ,mem_rfcomm_tx_buff_ptr 
+0x6c72 028940 increase 4 ,pdata 
+0x6c73 028941 store 2 ,mem_rfcomm_tx_payload_ptr 
+0x6c74 028942 copy pdata ,contw 
+0x6c75 028943 fetch 1 ,mem_rfcomm_send_adss 
+0x6c76 028944 istore 1 ,contw 
+0x6c77 028945 fetch 1 ,mem_rfcomm_send_frame_type 
+0x6c78 028946 istore 1 ,contw 
+0x6c79 028947 call ssp_tx_write_length 
+0x6c7a 028948 call ssp_tx_write_given_credit 
+0x6c7b 028949 bpatchx patch36_4 ,mem_patch36 
+0x6c7c 028950 fetch 2 ,mem_nl_rx_data_src 
+0x6c7d 028951 copy pdata ,contru 
+0x6c7e 028952 fetch 2 ,mem_current_packet_length 
+0x6c7f 028953 copy pdata ,loopcnt 
+0x6c80 028954 call uart_copy_rx_bytes_fast 
+0x6c81 028955 copy contw ,temp 
+0x6c82 028956 copy contru ,pdata 
+0x6c83 028957 store 2 ,mem_nl_rx_data_src 
+0x6c84 028958 copy temp ,contw 
+0x6c85 028959 fetch 1 ,mem_rfcomm_send_fcs 
+0x6c86 028960 istore 1 ,contw 
+0x6c87 028961 fetch 2 ,mem_rfcomm_tx_buff_ptr 
+0x6c88 028962 copy pdata ,contw 
+0x6c89 028963 fetch 2 ,mem_current_packet_length 
+0x6c8a 028964 fetcht 1 ,mem_rfcomm_send_offset 
+0x6c8b 028965 iadd temp ,pdata 
+0x6c8c 028966 increase 4 ,pdata 
+0x6c8d 028967 istore 2 ,contw 
+0x6c8e 028968 fetch 2 ,mem_rfcomm_remote_cid 
+0x6c8f 028969 istore 2 ,contw 
+0x6c90 028970 jam 0 ,mem_credit_given 
+0x6c91 028971 fetch 2 ,mem_nl_rx_len_all 
+0x6c92 028972 beq 0 ,module_hci_command_tx_spp_tx_complete 
+0x6c93 028973 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+0x6c94 028974 rtn 
+:      028976 ssp_tx_write_length:
+0x6c95 028977 bpatchx patch36_5 ,mem_patch36 
+0x6c96 028978 fetch 2 ,mem_current_packet_length 
+0x6c97 028979 sub pdata ,0x7f ,null 
+0x6c98 028980 nbranch ssp_tx_write_long_packet ,positive 
+0x6c99 028981 lshift pdata ,pdata 
+0x6c9a 028982 set1 0 ,pdata 
+0x6c9b 028983 istore 1 ,contw 
+0x6c9c 028984 rtn 
+:      028985 ssp_tx_write_long_packet:
+0x6c9d 028986 fetch 2 ,mem_current_packet_length 
+0x6c9e 028987 rshift3 pdata ,pdata 
+0x6c9f 028988 rshift4 pdata ,temp 
+0x6ca0 028989 and_into 0x7f ,pdata 
+0x6ca1 028990 lshift pdata ,pdata 
+0x6ca2 028991 set0 0 ,pdata 
+0x6ca3 028992 istore 1 ,contw 
+0x6ca4 028993 istoret 1 ,contw 
+0x6ca5 028994 rtn 
+:      028995 ssp_tx_write_given_credit:
+0x6ca6 028996 fetch 1 ,mem_credit_given 
+0x6ca7 028997 rtn blank 
+0x6ca8 028998 istore 1 ,contw 
+0x6ca9 028999 rtn 
+:      029004 scheduler_process:
+0x6caa 029005 bpatchx patch36_6 ,mem_patch36 
+0x6cab 029006 call check_51cmd 
+0x6cac 029007 call app_process_bb_event 
+0x6cad 029008 call process_conn_sm 
+0x6cae 029010 bpatchx patch36_7 ,mem_patch36 
+0x6caf 029011 call sp_calc_sequence 
+0x6cb0 029012 call simple_pairing_sequence 
+0x6cb1 029013 call master_simple_paring_sequence 
+0x6cb2 029016 call l2cap_malloc_is_fifo_full 
+0x6cb3 029017 nrtn blank 
+0x6cb4 029019 call l2cap_call_proc_sigal_pending 
+0x6cb5 029020 call l2cap_malloc_is_fifo_full 
+0x6cb6 029021 nrtn blank 
+0x6cb7 029022 bpatchx patch37_0 ,mem_patch37 
+0x6cb8 029024 call process_upper_sm 
+0x6cb9 029025 call l2cap_send_config_req 
+0x6cba 029026 call rfcomm_send_more_pkt 
+:      029027 scheduler_process0:
+0x6cbb 029028 call scheduler_tx_disconnect_hid 
+0x6cbc 029029 bpatchx patch37_1 ,mem_patch37 
+0x6cbd 029032 branch app_process_bt 
+:      029034 scheduler_tx_disconnect_hid:
+0x6cbe 029035 fetch 1 ,mem_control_tasks 
+0x6cbf 029036 bbit1 l2cap_disconnect_interrupt ,l2cap_disconnect_interrupt_req 
+0x6cc0 029037 bbit1 l2cap_disconnect_control ,l2cap_disconnect_control_req 
+0x6cc1 029038 rtn 
+:      029040 scheduler_tx_l2cap_pkt:
+0x6cc2 029041 bpatchx patch37_2 ,mem_patch37 
+0x6cc3 029042 call l2cap_malloc_is_fifo_empty 
+0x6cc4 029043 rtn blank 
+0x6cc5 029044 fetch 1 ,mem_op 
+0x6cc6 029045 rtnbit1 op_txl2cap 
+0x6cc7 029046 call l2cap_malloc_fifo_out 
+0x6cc8 029047 store 2 ,mem_txptr 
+0x6cc9 029048 copy pdata ,contr 
+0x6cca 029049 ifetch 2 ,contr 
+0x6ccb 029050 increase 4 ,pdata 
+0x6ccc 029051 store 2 ,mem_tx_len 
+0x6ccd 029052 jam 6 ,mem_tx_lch 
+0x6cce 029053 bpatchx patch37_3 ,mem_patch37 
+0x6ccf 029054 fetch 2 ,mem_l2cap_tx_multi_offset 
+0x6cd0 029055 branch scheduler_tx_l2cap_start_pkt ,blank 
+0x6cd1 029056 fetch 1 ,mem_op 
+0x6cd2 029057 rtnbit0 op_pkt_comp 
+0x6cd3 029058 set0 op_pkt_comp ,pdata 
+0x6cd4 029059 store 1 ,mem_op 
+0x6cd5 029060 jam 5 ,mem_tx_lch 
+0x6cd6 029061 fetcht 2 ,mem_l2cap_tx_multi_offset 
+0x6cd7 029062 fetch 2 ,mem_txptr 
+0x6cd8 029063 iadd temp ,pdata 
+0x6cd9 029064 store 2 ,mem_txptr 
+0x6cda 029065 fetch 2 ,mem_tx_len 
+0x6cdb 029066 isub temp ,pdata 
+0x6cdc 029067 store 2 ,mem_tx_len 
+:      029068 scheduler_tx_l2cap_start_pkt:
+0x6cdd 029069 bpatchx patch37_4 ,mem_patch37 
+0x6cde 029070 fetch 2 ,mem_tx_len 
+0x6cdf 029071 branch assert ,blank 
+0x6ce0 029072 arg l2cap_max_pkt_len ,temp 
+0x6ce1 029073 isub temp ,pdata 
+0x6ce2 029074 nbranch scheduler_tx_l2cap_last_pkt ,positive 
+0x6ce3 029075 bpatchx patch37_5 ,mem_patch37 
+0x6ce4 029076 storet 2 ,mem_tx_len 
+0x6ce5 029077 fetch 2 ,mem_l2cap_tx_multi_offset 
+0x6ce6 029078 iadd temp ,pdata 
+0x6ce7 029079 store 2 ,mem_l2cap_tx_multi_offset 
+0x6ce8 029080 branch scheduler_tx_l2cap_pkt_end 
+:      029081 scheduler_tx_l2cap_last_pkt:
+0x6ce9 029082 setarg 0 
+0x6cea 029083 store 2 ,mem_l2cap_tx_multi_offset 
+:      029084 scheduler_tx_l2cap_pkt_end:
+0x6ceb 029085 fetch 1 ,mem_op 
+0x6cec 029086 set1 op_txl2cap ,pdata 
+0x6ced 029087 store 1 ,mem_op 
+0x6cee 029088 rtn 
+:      029090 scheduler_start_upper_sm:
+0x6cef 029091 fetch 1 ,mem_ui_profile_supported 
+0x6cf0 029092 bbit1 support_hid ,scheduler_start_upper_sm_hid 
+0x6cf1 029093 jam uppersm_reconn_sdp_conn ,mem_upper_sm_reconn 
+0x6cf2 029094 rtn 
+:      029095 scheduler_start_upper_sm_hid:
+0x6cf3 029096 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn 
+0x6cf4 029097 rtn 
+:      029099 process_upper_sm:
+0x6cf5 029100 fetch 1 ,memui_reconnect_mode 
+0x6cf6 029101 nbranch process_upper_sm_reconn ,blank 
+:      029102 process_upper_sm_remote_page:
+0x6cf7 029103 fetch 1 ,mem_upper_sm_remote_page 
+0x6cf8 029105 rtn blank 
+0x6cf9 029107 jam 0 ,mem_upper_sm_remote_page 
+:      029108 process_upper_sm_rp_wait:
+0x6cfa 029109 rtn 
+:      029112 process_upper_sm_reconn:
+0x6cfb 029113 bpatchx patch37_6 ,mem_patch37 
+0x6cfc 029114 fetch 1 ,mem_upper_sm_reconn 
+0x6cfd 029115 rtn blank 
+0x6cfe 029116 beq uppersm_reconn_sdp_conn ,process_upper_sm_reconn_sdp_conn 
+0x6cff 029117 beq uppersm_reconn_sdp_conn_wait ,process_upper_sm_reconn_sdp_conn_wait 
+0x6d00 029118 beq uppersm_reconn_sdp_cfg ,process_upper_sm_reconn_sdp_cfg 
+0x6d01 029119 beq uppersm_reconn_sdp_cfg_wait ,process_upper_sm_reconn_sdp_cfg_wait 
+0x6d02 029120 beq uppersm_reconn_ss_spp ,process_upper_sm_reconn_ss_spp 
+0x6d03 029121 beq uppersm_reconn_ss_spp_wait ,process_upper_sm_reconn_ss_spp_wait 
+0x6d04 029122 beq uppersm_reconn_sdp_disconn ,process_upper_sm_reconn_sdp_disconn 
+0x6d05 029123 beq uppersm_reconn_sdp_disconn_wait ,process_upper_sm_reconn_sdp_disconn_wait 
+0x6d06 029124 beq uppersm_reconn_hid_ctrl_conn ,process_upper_sm_reconn_hid_ctrl_conn 
+0x6d07 029125 beq uppersm_reconn_hid_ctrl_conn_wait ,process_upper_sm_reconn_hid_ctrl_conn_wait 
+0x6d08 029126 beq uppersm_reconn_hid_ctrl_cfg ,process_upper_sm_reconn_hid_ctrl_cfg 
+0x6d09 029127 beq uppersm_reconn_hid_ctrl_cfg_wait ,process_upper_sm_reconn_hid_ctrl_cfg_wait 
+0x6d0a 029128 beq uppersm_reconn_hid_int_conn ,process_upper_sm_reconn_hid_int_conn 
+0x6d0b 029129 beq uppersm_reconn_hid_int_conn_wait ,process_upper_sm_reconn_hid_int_conn_wait 
+0x6d0c 029130 beq uppersm_reconn_hid_int_cfg ,process_upper_sm_reconn_hid_int_cfg 
+0x6d0d 029131 beq uppersm_reconn_hid_int_cfg_wait ,process_upper_sm_reconn_hid_int_cfg_wait 
+0x6d0e 029132 beq uppersm_reconn_rfcomm_conn ,process_upper_sm_reconn_rfcomm_conn 
+0x6d0f 029133 beq uppersm_reconn_rfcomm_conn_wait ,process_upper_sm_reconn_rfcomm_conn_wait 
+0x6d10 029134 beq uppersm_reconn_rfcomm_cfg ,process_upper_sm_reconn_rfcomm_cfg 
+0x6d11 029135 beq uppersm_reconn_rfcomm_cfg_wait ,process_upper_sm_reconn_rfcomm_cfg_wait 
+0x6d12 029136 beq uppersm_reconn_rfcomm_sabm ,process_upper_sm_reconn_rfcomm_sabm 
+0x6d13 029137 beq uppersm_reconn_rfcomm_sabm_wait ,process_upper_sm_reconn_rfcomm_sabm_wait 
+0x6d14 029138 beq uppersm_reconn_spp_cmd_pn ,process_upper_sm_reconn_spp_cmd_pn 
+0x6d15 029139 beq uppersm_reconn_spp_cmd_pn_wait ,process_upper_sm_reconn_spp_cmd_pn_wait 
+0x6d16 029140 beq uppersm_reconn_spp_sabm ,process_upper_sm_reconn_spp_sabm 
+0x6d17 029141 beq uppersm_reconn_spp_sabm_wait ,process_upper_sm_reconn_spp_sabm_wait 
+0x6d18 029142 beq uppersm_reconn_spp_cmd_ms ,process_upper_sm_reconn_spp_cmd_ms 
+0x6d19 029143 beq uppersm_reconn_spp_cmd_ms_wait ,process_upper_sm_reconn_spp_cmd_ms_wait 
+:      029144 process_upper_sm_reconn_wait:
+0x6d1a 029145 rtn 
+:      029146 process_upper_sm_reconn_sdp_conn:
+0x6d1b 029147 call upper_sm_send_sdp_conn 
+0x6d1c 029148 jam uppersm_reconn_sdp_conn_wait ,mem_upper_sm_reconn 
+0x6d1d 029149 fetch 1 ,mem_sdp_state 
+0x6d1e 029150 set1 l2cap_channel_state_conn_req ,pdata 
+0x6d1f 029151 store 1 ,mem_sdp_state 
+0x6d20 029152 rtn 
+:      029153 process_upper_sm_reconn_sdp_cfg:
+0x6d21 029154 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn 
+0x6d22 029155 fetch 1 ,mem_sdp_state 
+0x6d23 029156 rtnbit1 l2cap_channel_state_snd_cfg_req 
+0x6d24 029157 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn 
+0x6d25 029158 call upper_sm_send_sdp_cfg 
+0x6d26 029159 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn 
+0x6d27 029160 fetch 1 ,mem_sdp_state 
+0x6d28 029161 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+0x6d29 029162 store 1 ,mem_sdp_state 
+0x6d2a 029163 rtn 
+:      029164 process_upper_sm_reconn_ss_spp:
+0x6d2b 029165 call l2cap_malloc_is_fifo_empty 
+0x6d2c 029166 nrtn blank 
+0x6d2d 029167 call upper_sm_send_ss_spp 
+0x6d2e 029168 jam uppersm_reconn_ss_spp_wait ,mem_upper_sm_reconn 
+0x6d2f 029169 rtn 
+:      029170 process_upper_sm_reconn_sdp_disconn:
+0x6d30 029171 call upper_sm_send_sdp_disconn 
+0x6d31 029172 jam uppersm_reconn_sdp_disconn_wait ,mem_upper_sm_reconn 
+0x6d32 029173 rtn 
+:      029174 process_upper_sm_reconn_hid_ctrl_conn:
+0x6d33 029175 call upper_sm_send_hid_ctrl_conn 
+0x6d34 029176 jam uppersm_reconn_hid_ctrl_conn_wait ,mem_upper_sm_reconn 
+0x6d35 029177 fetch 1 ,mem_hid_control_state 
+0x6d36 029178 set1 l2cap_channel_state_conn_req ,pdata 
+0x6d37 029179 store 1 ,mem_hid_control_state 
+0x6d38 029180 rtn 
+:      029181 process_upper_sm_reconn_hid_ctrl_cfg:
+0x6d39 029182 call upper_sm_send_hid_ctrl_cfg 
+0x6d3a 029183 jam uppersm_reconn_hid_ctrl_cfg_wait ,mem_upper_sm_reconn 
+0x6d3b 029184 fetch 1 ,mem_hid_control_state 
+0x6d3c 029185 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+0x6d3d 029186 store 1 ,mem_hid_control_state 
+0x6d3e 029187 rtn 
+:      029188 process_upper_sm_reconn_hid_int_conn:
+0x6d3f 029189 call upper_sm_send_hid_int_conn 
+0x6d40 029190 jam uppersm_reconn_hid_int_conn_wait ,mem_upper_sm_reconn 
+0x6d41 029191 fetch 1 ,mem_hid_interrupt_state 
+0x6d42 029192 set1 l2cap_channel_state_conn_req ,pdata 
+0x6d43 029193 store 1 ,mem_hid_interrupt_state 
+0x6d44 029194 rtn 
+:      029195 process_upper_sm_reconn_hid_int_cfg:
+0x6d45 029196 call upper_sm_send_hid_int_cfg 
+0x6d46 029197 jam uppersm_reconn_hid_int_cfg_wait ,mem_upper_sm_reconn 
+0x6d47 029198 fetch 1 ,mem_hid_interrupt_state 
+0x6d48 029199 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+0x6d49 029200 store 1 ,mem_hid_interrupt_state 
+0x6d4a 029201 rtn 
+:      029202 process_upper_sm_reconn_rfcomm_conn:
+0x6d4b 029203 call upper_sm_send_rfcomm_conn 
+0x6d4c 029204 jam uppersm_reconn_rfcomm_conn_wait ,mem_upper_sm_reconn 
+0x6d4d 029205 fetch 1 ,mem_rfcomm_state 
+0x6d4e 029206 set1 l2cap_channel_state_conn_req ,pdata 
+0x6d4f 029207 store 1 ,mem_rfcomm_state 
+0x6d50 029208 rtn 
+:      029209 process_upper_sm_reconn_rfcomm_cfg:
+0x6d51 029210 call upper_sm_send_rfcomm_cfg 
+0x6d52 029211 jam uppersm_reconn_rfcomm_cfg_wait ,mem_upper_sm_reconn 
+0x6d53 029212 fetch 1 ,mem_rfcomm_state 
+0x6d54 029213 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+0x6d55 029214 store 1 ,mem_rfcomm_state 
+0x6d56 029215 rtn 
+:      029216 process_upper_sm_reconn_rfcomm_sabm:
+0x6d57 029217 call upper_sm_send_rfcomm_sabm 
+0x6d58 029218 jam uppersm_reconn_rfcomm_sabm_wait ,mem_upper_sm_reconn 
+0x6d59 029219 fetch 1 ,mem_rfcomm_state 
+0x6d5a 029220 set1 l2cap_channel_rfcomm_only_sabm ,pdata 
+0x6d5b 029221 store 1 ,mem_rfcomm_state 
+0x6d5c 029222 rtn 
+:      029223 process_upper_sm_reconn_spp_cmd_pn:
+0x6d5d 029224 call upper_sm_send_spp_cmd_pn 
+0x6d5e 029225 fetch 1 ,mem_spp_state 
+0x6d5f 029226 set1 rfcomm_channel_state_pn_cmd 
+0x6d60 029227 store 1 ,mem_spp_state 
+0x6d61 029228 jam uppersm_reconn_spp_cmd_pn_wait ,mem_upper_sm_reconn 
+0x6d62 029229 rtn 
+:      029230 process_upper_sm_reconn_spp_sabm:
+0x6d63 029231 call upper_sm_send_spp_sabm 
+0x6d64 029232 fetch 1 ,mem_spp_state 
+0x6d65 029233 set1 rfcomm_channel_state_sabm 
+0x6d66 029234 store 1 ,mem_spp_state 
+0x6d67 029235 jam uppersm_reconn_spp_sabm_wait ,mem_upper_sm_reconn 
+0x6d68 029236 fetch 1 ,mem_remote_spp_channel 
+0x6d69 029237 lshift3 pdata ,pdata 
+0x6d6a 029238 or_into 3 ,pdata 
+0x6d6b 029239 arg mem_hiufcs_spp ,temp 
+0x6d6c 029240 storet 2 ,mem_contw_temp 
+0x6d6d 029241 branch rfcomm_save_fcs_uih 
+:      029242 process_upper_sm_reconn_spp_cmd_ms:
+0x6d6e 029243 call upper_sm_send_spp_cmd_ms 
+0x6d6f 029244 fetch 1 ,mem_spp_state 
+0x6d70 029245 set1 rfcomm_channel_state_snd_ms_cmd 
+0x6d71 029246 store 1 ,mem_spp_state 
+0x6d72 029247 jam uppersm_reconn_spp_cmd_ms_wait ,mem_upper_sm_reconn 
+0x6d73 029248 rtn 
+:      029250 process_upper_sm_reconn_sdp_conn_wait:
+0x6d74 029251 fetch 1 ,mem_sdp_state 
+0x6d75 029252 rtnbit0 l2cap_channel_state_conn_res 
+0x6d76 029253 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn 
+0x6d77 029254 branch process_upper_sm_reconn 
+:      029255 process_upper_sm_reconn_sdp_cfg_wait:
+0x6d78 029256 fetch 1 ,mem_sdp_state 
+0x6d79 029257 rtnne l2cap_channel_setup_complete 
+0x6d7a 029258 jam uppersm_reconn_ss_spp ,mem_upper_sm_reconn 
+:      029259 process_upper_sm_reconn_ss_spp_wait:
+0x6d7b 029260 fetch 1 ,mem_message_to_uppersm 
+0x6d7c 029261 rtnne recieve_ss_reasult_hf 
+0x6d7d 029262 jam 0 ,mem_message_to_uppersm 
+0x6d7e 029263 jam uppersm_reconn_sdp_disconn ,mem_upper_sm_reconn 
+0x6d7f 029264 branch process_upper_sm_reconn 
+:      029265 process_upper_sm_reconn_sdp_disconn_wait:
+0x6d80 029266 fetch 1 ,mem_sdp_state 
+0x6d81 029267 nrtn blank 
+0x6d82 029268 fetch 1 ,mem_ui_profile_supported 
+0x6d83 029269 bbit1 support_hid ,process_upper_sm_reconn_setup_hid 
+0x6d84 029270 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm 
+0x6d85 029271 branch process_upper_sm_reconn_termination 
+:      029272 process_upper_sm_reconn_hid_ctrl_conn_wait:
+0x6d86 029273 fetch 1 ,mem_hid_control_state 
+0x6d87 029274 rtnbit0 l2cap_channel_state_conn_res 
+0x6d88 029275 jam uppersm_reconn_hid_ctrl_cfg ,mem_upper_sm_reconn 
+0x6d89 029276 branch process_upper_sm_reconn 
+:      029277 process_upper_sm_reconn_hid_ctrl_cfg_wait:
+0x6d8a 029278 fetch 1 ,mem_hid_control_state 
+0x6d8b 029279 rtnne l2cap_channel_setup_complete 
+0x6d8c 029280 jam uppersm_reconn_hid_int_conn ,mem_upper_sm_reconn 
+0x6d8d 029281 branch process_upper_sm_reconn 
+:      029282 process_upper_sm_reconn_hid_int_conn_wait:
+0x6d8e 029283 fetch 1 ,mem_hid_interrupt_state 
+0x6d8f 029284 rtnbit0 l2cap_channel_state_conn_res 
+0x6d90 029285 jam uppersm_reconn_hid_int_cfg ,mem_upper_sm_reconn 
+0x6d91 029286 branch process_upper_sm_reconn 
+:      029287 process_upper_sm_reconn_hid_int_cfg_wait:
+0x6d92 029288 fetch 1 ,mem_hid_interrupt_state 
+0x6d93 029289 rtnne l2cap_channel_setup_complete 
+0x6d94 029290 fetch 1 ,mem_ui_profile_supported 
+0x6d95 029291 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm 
+0x6d96 029292 branch process_upper_sm_reconn_termination 
+:      029293 process_upper_sm_reconn_rfcomm_conn_wait:
+0x6d97 029294 fetch 1 ,mem_rfcomm_state 
+0x6d98 029295 rtnbit0 l2cap_channel_state_conn_res 
+0x6d99 029296 jam uppersm_reconn_rfcomm_cfg ,mem_upper_sm_reconn 
+0x6d9a 029297 branch process_upper_sm_reconn 
+:      029298 process_upper_sm_reconn_rfcomm_cfg_wait:
+0x6d9b 029299 fetch 1 ,mem_rfcomm_state 
+0x6d9c 029300 rtnne l2cap_channel_setup_complete 
+0x6d9d 029301 jam uppersm_reconn_rfcomm_sabm ,mem_upper_sm_reconn 
+0x6d9e 029302 branch process_upper_sm_reconn 
+:      029303 process_upper_sm_reconn_rfcomm_sabm_wait:
+0x6d9f 029304 fetch 1 ,mem_rfcomm_state 
+0x6da0 029305 rtnne l2cap_channel_rfcomm_dlci0_opened 
+0x6da1 029306 fetch 1 ,mem_ui_profile_supported 
+0x6da2 029307 bbit1 support_spp ,process_upper_sm_reconn_setup_spp 
+0x6da3 029308 branch process_upper_sm_reconn_termination 
+:      029309 process_upper_sm_reconn_spp_cmd_pn_wait:
+0x6da4 029310 fetch 1 ,mem_spp_state 
+0x6da5 029311 rtnbit0 rfcomm_channel_state_pn_res 
+0x6da6 029312 jam uppersm_reconn_spp_sabm ,mem_upper_sm_reconn 
+0x6da7 029313 branch process_upper_sm_reconn 
+:      029314 process_upper_sm_reconn_spp_sabm_wait:
+0x6da8 029315 fetch 1 ,mem_spp_state 
+0x6da9 029316 rtnbit0 rfcomm_channel_state_ua 
+0x6daa 029317 jam uppersm_reconn_spp_cmd_ms ,mem_upper_sm_reconn 
+0x6dab 029318 branch process_upper_sm_reconn 
+:      029319 process_upper_sm_reconn_spp_cmd_ms_wait:
+0x6dac 029320 fetch 1 ,mem_spp_state 
+0x6dad 029321 rtnne rfcomm_channel_setup_complete 
+0x6dae 029322 branch process_upper_sm_reconn_termination 
+:      029324 process_upper_sm_reconn_setup_hid:
+0x6daf 029325 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn 
+0x6db0 029326 branch process_upper_sm_reconn 
+:      029328 process_upper_sm_reconn_setup_rfcomm:
+0x6db1 029329 jam uppersm_reconn_rfcomm_conn ,mem_upper_sm_reconn 
+0x6db2 029330 branch process_upper_sm_reconn 
+:      029331 process_upper_sm_reconn_setup_spp:
+0x6db3 029332 jam uppersm_reconn_spp_cmd_pn ,mem_upper_sm_reconn 
+0x6db4 029333 branch process_upper_sm_reconn 
+:      029337 process_upper_sm_reconn_termination:
+0x6db5 029338 jam 0 ,mem_upper_sm_reconn 
+0x6db6 029339 rtn 
+:      029340 upper_sm_send_sdp_conn:
+0x6db7 029341 bpatchx patch37_7 ,mem_patch37 
+0x6db8 029342 call l2cap_malloc_signal_channel 
+0x6db9 029343 setarg psm_sdp 
+0x6dba 029344 copy pdata ,temp 
+0x6dbb 029345 setarg l2cap_sdp_channel 
+0x6dbc 029346 copy pdata ,timeup 
+0x6dbd 029347 branch ml2cap_send_signal_connect_req 
+:      029349 upper_sm_send_sdp_cfg:
+0x6dbe 029350 bpatchx patch38_0 ,mem_patch38 
+0x6dbf 029351 call l2cap_malloc_signal_channel 
+0x6dc0 029352 fetch 2 ,mem_sdp_remote_cid 
+0x6dc1 029353 copy pdata ,temp 
+0x6dc2 029354 branch ml2cap_send_signal_config_req 
+:      029356 upper_sm_send_sdp_disconn:
+0x6dc3 029357 bpatchx patch38_1 ,mem_patch38 
+0x6dc4 029358 call l2cap_malloc_signal_channel 
+0x6dc5 029359 fetch 2 ,mem_sdp_remote_cid 
+0x6dc6 029360 copy pdata ,temp 
+0x6dc7 029361 arg l2cap_sdp_channel ,timeup 
+0x6dc8 029362 call ml2cap_send_signal_disconn_req 
+0x6dc9 029363 fetch 1 ,mem_sdp_state 
+0x6dca 029364 set0 l2cap_channel_state_rcv_cfg_res ,pdata 
+0x6dcb 029365 store 1 ,mem_sdp_state 
+0x6dcc 029366 rtn 
+:      029368 upper_sm_send_ss_spp:
+0x6dcd 029369 bpatchx patch38_2 ,mem_patch38 
+0x6dce 029370 call l2cap_malloc_sdp_channel 
+0x6dcf 029371 call sdp_send_spp_request 
+0x6dd0 029372 branch msdp_send_req_done 
+:      029374 upper_sm_send_rfcomm_conn:
+0x6dd1 029375 bpatchx patch38_3 ,mem_patch38 
+0x6dd2 029376 call l2cap_malloc_signal_channel 
+0x6dd3 029377 setarg psm_rfcomm 
+0x6dd4 029378 copy pdata ,temp 
+0x6dd5 029379 setarg l2cap_rfcomm_channel 
+0x6dd6 029380 copy pdata ,timeup 
+0x6dd7 029381 branch ml2cap_send_signal_connect_req 
+:      029383 upper_sm_send_rfcomm_cfg:
+0x6dd8 029384 bpatchx patch38_4 ,mem_patch38 
+0x6dd9 029385 call l2cap_malloc_signal_channel 
+0x6dda 029386 fetch 2 ,mem_rfcomm_remote_cid 
+0x6ddb 029387 copy pdata ,temp 
+0x6ddc 029388 branch ml2cap_send_signal_config_req 
+:      029390 upper_sm_send_hid_ctrl_conn:
+0x6ddd 029391 bpatchx patch38_5 ,mem_patch38 
+0x6dde 029392 call l2cap_malloc_signal_channel 
+0x6ddf 029393 setarg psm_hid_control 
+0x6de0 029394 copy pdata ,temp 
+0x6de1 029395 setarg l2cap_hid_control_channel 
+0x6de2 029396 copy pdata ,timeup 
+0x6de3 029397 branch ml2cap_send_signal_connect_req 
+:      029399 upper_sm_send_hid_ctrl_cfg:
+0x6de4 029400 bpatchx patch38_6 ,mem_patch38 
+0x6de5 029401 call l2cap_malloc_signal_channel 
+0x6de6 029402 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x6de7 029403 copy pdata ,temp 
+0x6de8 029404 branch ml2cap_send_signal_config_req 
+:      029406 upper_sm_send_hid_int_conn:
+0x6de9 029407 bpatchx patch38_7 ,mem_patch38 
+0x6dea 029408 call l2cap_malloc_signal_channel 
+0x6deb 029409 setarg psm_hid_interrupt 
+0x6dec 029410 copy pdata ,temp 
+0x6ded 029411 setarg l2cap_hid_interrupt_channel 
+0x6dee 029412 copy pdata ,timeup 
+0x6def 029413 branch ml2cap_send_signal_connect_req 
+:      029415 upper_sm_send_hid_int_cfg:
+0x6df0 029416 bpatchx patch39_0 ,mem_patch39 
+0x6df1 029417 call l2cap_malloc_signal_channel 
+0x6df2 029418 fetch 2 ,mem_hid_int_remote_cid 
+0x6df3 029419 copy pdata ,temp 
+0x6df4 029420 branch ml2cap_send_signal_config_req 
+:      029422 upper_sm_send_rfcomm_sabm:
+0x6df5 029423 bpatchx patch39_1 ,mem_patch39 
+0x6df6 029424 call l2cap_malloc_rfcomm_channel 
+0x6df7 029426 jam 3 ,mem_current_adss 
+0x6df8 029427 jam 0x1c ,mem_current_fcs 
+0x6df9 029428 call rfcomm_send_sabm 
+0x6dfa 029429 jam 1 ,mem_rfcomm_initiator 
+0x6dfb 029430 rtn 
+:      029432 upper_sm_send_spp_cmd_pn:
+0x6dfc 029433 bpatchx patch39_2 ,mem_patch39 
+0x6dfd 029434 call l2cap_malloc_rfcomm_channel 
+0x6dfe 029435 fetcht 1 ,mem_remote_spp_channel 
+0x6dff 029436 call channel_to_dlci 
+0x6e00 029437 storet 1 ,mem_pn_dlci 
+0x6e01 029438 branch rfcomm_send_param_neg_cmd 
+:      029440 upper_sm_send_spp_sabm:
+0x6e02 029441 bpatchx patch39_3 ,mem_patch39 
+0x6e03 029442 call l2cap_malloc_rfcomm_channel 
+0x6e04 029443 fetcht 1 ,mem_pn_dlci 
+0x6e05 029444 call dlci_to_address_cmd 
+0x6e06 029445 call rfcomm_calculate_fcs_sabm 
+0x6e07 029446 store 1 ,mem_current_fcs 
+0x6e08 029447 fetcht 1 ,mem_pn_dlci 
+0x6e09 029448 call dlci_to_address_cmd 
+0x6e0a 029449 storet 1 ,mem_current_adss 
+0x6e0b 029450 branch rfcomm_send_sabm 
+:      029452 upper_sm_send_spp_cmd_ms:
+0x6e0c 029453 bpatchx patch39_4 ,mem_patch39 
+0x6e0d 029454 call l2cap_malloc_rfcomm_channel 
+0x6e0e 029455 fetcht 1 ,mem_pn_dlci 
+0x6e0f 029456 call dlci_to_address_cmd 
+0x6e10 029457 branch rfcomm_send_modem_status_cmd 
+:      029470 sdp_process:
+0x6e11 029471 bpatchx patch39_5 ,mem_patch39 
+0x6e12 029472 fetch 2 ,mem_l2cap_payload_ptr 
+0x6e13 029473 iforce contr 
+0x6e14 029476 ifetch 1 ,contr 
+0x6e15 029477 copy pdata ,regb 
+0x6e16 029478 store 1 ,mem_sdp_pduid 
+0x6e17 029479 ifetch 2 ,contr 
+0x6e18 029480 store 2 ,mem_sdp_transactionid 
+0x6e19 029481 ifetch 1 ,contr 
+0x6e1a 029482 lshift8 pdata ,timeup 
+0x6e1b 029483 ifetch 1 ,contr 
+0x6e1c 029484 iadd timeup ,timeup 
+0x6e1d 029485 bpatchx patch39_6 ,mem_patch39 
+0x6e1e 029486 copy contr ,temp 
+0x6e1f 029487 arg 4 ,loopcnt 
+0x6e20 029488 arg mem_sdp_handle_list ,contw 
+0x6e21 029489 call memset0 
+0x6e22 029490 copy temp ,contr 
+0x6e23 029491 deposit regb 
+0x6e24 029492 beq sdp_error_res ,sdp_process_error_res 
+0x6e25 029493 beq sdp_search_req ,sdp_process_ss_req 
+0x6e26 029494 beq sdp_search_res ,sdp_process_ss_res 
+0x6e27 029495 beq sdp_attribute_req ,sdp_process_sa_req 
+0x6e28 029496 beq sdp_attribute_res ,sdp_process_sa_res 
+0x6e29 029497 beq sdp_searchattrib_req ,sdp_process_ssa_req 
+0x6e2a 029498 beq sdp_searchattrib_res ,sdp_process_ssa_res 
+0x6e2b 029499 branch sdp_insufficient_resource 
+:      029510 sdp_process_ss_req:
+0x6e2c 029511 bpatchx patch39_7 ,mem_patch39 
+0x6e2d 029512 call ask_serviceclassid 
+0x6e2e 029513 compare 1 ,temp ,0xff 
+0x6e2f 029514 branch ss_empty_rsp ,true 
+0x6e30 029515 compare 0xff ,temp ,0xff 
+0x6e31 029516 branch sdp_invalid_request_syntax ,true 
+0x6e32 029518 ifetch 2 ,contr 
+0x6e33 029519 store 2 ,mem_sdp_record_maxcnt 
+0x6e34 029520 increase -2 ,timeup 
+0x6e35 029522 increase -1 ,timeup 
+0x6e36 029523 nbranch sdp_invalid_pdu_size ,zero 
+0x6e37 029524 arg mem_sdp_uuid_search_ptr ,timeup 
+0x6e38 029525 ifetch 2 ,timeup 
+0x6e39 029526 rtn blank 
+0x6e3a 029527 call search_all_uuid 
+0x6e3b 029528 call l2cap_get_sdp_tx_payload 
+0x6e3c 029529 force 3 ,pdata 
+0x6e3d 029530 istore 1 ,contw 
+0x6e3e 029531 fetch 2 ,mem_sdp_transactionid 
+0x6e3f 029532 istore 2 ,contw 
+0x6e40 029533 lshift2 queue ,pdata 
+0x6e41 029534 add pdata ,5 ,pdata 
+0x6e42 029535 add pdata ,5 ,regc 
+0x6e43 029536 byteswap pdata ,pdata 
+0x6e44 029537 istore 2 ,contw 
+0x6e45 029538 deposit queue 
+0x6e46 029539 byteswap pdata ,pdata 
+0x6e47 029540 istore 2 ,contw 
+0x6e48 029541 istore 2 ,contw 
+0x6e49 029542 arg mem_sdp_handle_list ,contr 
+0x6e4a 029543 copy queue ,loopcnt 
+0x6e4b 029544 branch ss_req_blank ,zero 
+:      029545 ss_req_loop:
+0x6e4c 029546 ifetch 4 ,contr 
+0x6e4d 029547 istore 4 ,contw 
+0x6e4e 029548 loop ss_req_loop 
+:      029549 ss_req_blank:
+0x6e4f 029550 force 0 ,pdata 
+0x6e50 029551 istore 1 ,contw 
+0x6e51 029552 deposit regc 
+0x6e52 029553 store 2 ,mem_sdp_tx_pkt_length 
+0x6e53 029555 rtn 
+:      029566 sdp_process_sa_req:
+0x6e54 029567 bpatchx patch3a_0 ,mem_patch3a 
+0x6e55 029568 ifetch 4 ,contr 
+0x6e56 029569 store 4 ,mem_sdp_record_handle 
+0x6e57 029570 increase -4 ,timeup 
+0x6e58 029571 call sdp_store_maxbyte 
+0x6e59 029572 store 2 ,mem_sdp_attribute_maxbyte 
+0x6e5a 029573 increase -2 ,timeup 
+0x6e5b 029574 call dataelementtype6 
+0x6e5c 029575 branch sdp_invalid_request_syntax ,zero 
+0x6e5d 029576 compare 5 ,rega ,0xff 
+0x6e5e 029578 branch sa_judge_wholerange ,true 
+:      029579 sa_isnot_wholerange:
+0x6e5f 029580 arg mem_sdp_attrib_list ,contw 
+0x6e60 029581 force 0 ,queue 
+0x6e61 029582 branch sa_req_loop 
+:      029583 sa_judge_wholerange:
+0x6e62 029584 ifetch 1 ,contr 
+0x6e63 029585 bne sdp_attribute_range ,sdp_invalid_request_syntax 
+0x6e64 029586 ifetch 2 ,contr 
+0x6e65 029587 nbranch sa_judge_wholerange_false1 ,blank 
+0x6e66 029588 ifetch 1 ,contr 
+0x6e67 029589 bne 0xff ,sa_judge_wholerange_false2 
+0x6e68 029590 ifetch 1 ,contr 
+0x6e69 029591 bne 0xff ,sa_judge_wholerange_false3 
+0x6e6a 029592 branch sa_req_all 
+:      029593 sa_judge_wholerange_false3:
+0x6e6b 029594 increase -5 ,contr 
+0x6e6c 029595 branch sa_isnot_wholerange 
+:      029596 sa_judge_wholerange_false2:
+0x6e6d 029597 increase -4 ,contr 
+0x6e6e 029598 branch sa_isnot_wholerange 
+:      029599 sa_judge_wholerange_false1:
+0x6e6f 029600 increase -3 ,contr 
+0x6e70 029601 branch sa_isnot_wholerange 
+:      029602 sa_req_loop:
+0x6e71 029603 ifetch 1 ,contr 
+0x6e72 029604 beq sdp_attribute_id ,sa_req_one_id 
+0x6e73 029605 beq sdp_attribute_range ,sa_req_range 
+:      029606 sa_req_range:
+0x6e74 029607 ifetch 2 ,contr 
+0x6e75 029608 istore 2 ,contw 
+0x6e76 029609 increase 1 ,queue 
+0x6e77 029610 byteswap pdata ,regb 
+0x6e78 029611 ifetch 2 ,contr 
+0x6e79 029612 byteswap pdata ,pdata 
+:      029613 sa_req_range_id_increase:
+0x6e7a 029614 increase 1 ,regb 
+0x6e7b 029615 isub regb ,null 
+0x6e7c 029616 nbranch sa_req_range_id_finish ,positive 
+0x6e7d 029617 copy pdata ,regc 
+0x6e7e 029618 byteswap regb ,pdata 
+0x6e7f 029619 istore 2 ,contw 
+0x6e80 029620 increase 1 ,queue 
+0x6e81 029621 copy regc ,pdata 
+0x6e82 029622 branch sa_req_range_id_increase 
+:      029623 sa_req_range_id_finish:
+0x6e83 029624 increase -5 ,timeup 
+0x6e84 029625 increase -5 ,rega 
+0x6e85 029626 branch sa_req_check_next_id 
+:      029627 sa_req_one_id:
+0x6e86 029628 ifetch 2 ,contr 
+0x6e87 029629 istore 2 ,contw 
+0x6e88 029630 increase 1 ,queue 
+0x6e89 029631 increase -3 ,timeup 
+0x6e8a 029632 increase -3 ,rega 
+:      029633 sa_req_check_next_id:
+0x6e8b 029634 nbranch sdp_invalid_request_syntax ,positive 
+0x6e8c 029635 nbranch sa_req_loop ,zero 
+0x6e8d 029636 increase -1 ,timeup 
+0x6e8e 029637 nbranch sdp_invalid_request_syntax ,zero 
+0x6e8f 029639 call l2cap_get_sdp_tx_payload 
+0x6e90 029640 increase 10 ,contw 
+0x6e91 029641 arg mem_sdp_attrib_list ,rega 
+:      029642 sa_req_handle_attributelist_next:
+0x6e92 029643 copy queue ,pdata 
+0x6e93 029644 branch sa_req_handle_attributelist_end ,blank 
+0x6e94 029645 ifetch 2 ,rega 
+0x6e95 029646 branch sa_req_handle_attributelist_end ,blank 
+0x6e96 029647 iforce regb 
+0x6e97 029648 fetch 4 ,mem_sdp_record_handle 
+0x6e98 029649 iforce temp 
+0x6e99 029650 call search_handle_attrib 
+0x6e9a 029651 copy contr ,pdata 
+0x6e9b 029652 branch sa_req_handle_attributelist_notfound ,blank 
+0x6e9c 029653 increase -3 ,contr 
+0x6e9d 029654 ifetch 3 ,contr 
+0x6e9e 029655 istore 3 ,contw 
+0x6e9f 029656 call sdp_data_len 
+0x6ea0 029657 iforce loopcnt 
+0x6ea1 029658 call memcpy 
+:      029659 sa_req_handle_attributelist_notfound:
+0x6ea2 029660 increase 2 ,rega 
+0x6ea3 029661 increase -1 ,queue 
+0x6ea4 029662 branch sa_req_handle_attributelist_next 
+:      029664 sa_req_handle_attributelist_end:
+0x6ea5 029665 arg sdp_attribute_res ,rega 
+0x6ea6 029666 call ssa_req_range_lastfreg_common 
+0x6ea7 029667 fetch 2 ,mem_sdp_tx_pkt_length 
+0x6ea8 029668 beq 11 ,sa_empty_rsp 
+0x6ea9 029669 branch ssa_req_range_attrbutes_length_no_continue 
+:      029672 sdp_store_continue_common:
+0x6eaa 029673 ifetch 1 ,contr 
+0x6eab 029674 beq 0 ,sdp_store_continue_0byte 
+0x6eac 029675 beq 1 ,sdp_store_continue_1byte 
+0x6ead 029676 beq 2 ,sdp_store_continue_2byte 
+:      029677 sdp_store_continue_0byte:
+0x6eae 029678 increase -1 ,timeup 
+0x6eaf 029679 branch sdp_store_continue_end 
+:      029680 sdp_store_continue_1byte:
+0x6eb0 029681 ifetch 1 ,contr 
+0x6eb1 029682 increase -2 ,timeup 
+0x6eb2 029683 branch sdp_store_continue_end 
+:      029684 sdp_store_continue_2byte:
+0x6eb3 029685 ifetch 2 ,contr 
+0x6eb4 029686 byteswap pdata ,pdata 
+0x6eb5 029687 increase -3 ,timeup 
+:      029688 sdp_store_continue_end:
+0x6eb6 029689 store 2 ,mem_sdp_continue_byte 
+0x6eb7 029690 rtn 
+:      029692 sa_req_all:
+0x6eb8 029693 increase -5 ,timeup 
+0x6eb9 029694 call sdp_store_continue_common 
+0x6eba 029695 nbranch sdp_invalid_pdu_size ,zero 
+0x6ebb 029696 fetcht 4 ,mem_sdp_record_handle 
+0x6ebc 029697 call search_handle 
+0x6ebd 029698 nbranch sdp_invalid_service_record_handle ,zero 
+0x6ebe 029699 copy contr ,rega 
+0x6ebf 029700 call l2cap_get_sdp_tx_payload 
+0x6ec0 029701 copy rega ,contr 
+0x6ec1 029702 increase 3 ,contw 
+0x6ec2 029703 copy contr ,timeup 
+0x6ec3 029704 call sdp_get_data 
+0x6ec4 029705 copy pdata ,rega 
+0x6ec5 029707 fetch 2 ,mem_sdp_continue_byte 
+0x6ec6 029708 copy pdata ,regb 
+0x6ec7 029709 copy rega ,pdata 
+0x6ec8 029710 isub regb ,regb 
+0x6ec9 029711 fetch 2 ,mem_sdp_attribute_maxbyte 
+0x6eca 029712 isub regb ,null 
+0x6ecb 029713 nbranch sa_req_all_fragment_sdp ,positive 
+0x6ecc 029715 disable user 
+0x6ecd 029716 fetch 2 ,mem_sdp_continue_byte 
+0x6ece 029717 branch sa_req_all_fisrt_fragment ,blank 
+0x6ecf 029718 iadd timeup ,contr 
+0x6ed0 029719 increase 3 ,regb 
+0x6ed1 029720 copy regb ,loopcnt 
+0x6ed2 029721 copy loopcnt ,pdata 
+0x6ed3 029722 increase 3 ,pdata 
+0x6ed4 029723 byteswap pdata ,pdata 
+0x6ed5 029724 istore 2 ,contw 
+0x6ed6 029725 copy loopcnt ,pdata 
+0x6ed7 029726 byteswap pdata ,pdata 
+0x6ed8 029727 istore 2 ,contw 
+0x6ed9 029728 branch sa_req_all_answer_attributelist_full_loop 
+:      029729 sa_req_all_fisrt_fragment:
+0x6eda 029730 add rega ,6 ,loopcnt 
+0x6edb 029731 branch sa_req_all_parlength_continue_byte ,user 
+0x6edc 029732 byteswap loopcnt ,pdata 
+0x6edd 029733 branch sa_req_all_parlength_continue_byte_end 
+:      029734 sa_req_all_parlength_continue_byte:
+0x6ede 029735 copy loopcnt ,pdata 
+0x6edf 029736 increase 2 ,pdata 
+0x6ee0 029737 byteswap pdata ,pdata 
+:      029738 sa_req_all_parlength_continue_byte_end:
+0x6ee1 029739 istore 2 ,contw 
+0x6ee2 029740 increase -3 ,loopcnt 
+0x6ee3 029741 byteswap loopcnt ,pdata 
+0x6ee4 029742 istore 2 ,contw 
+0x6ee5 029743 copy timeup ,contr 
+0x6ee6 029744 branch sa_req_all_answer_attributelist_full_loop 
+:      029745 sa_req_all_fragment_sdp:
+0x6ee7 029746 enable user 
+0x6ee8 029748 fetch 2 ,mem_sdp_attribute_maxbyte 
+0x6ee9 029749 copy pdata ,rega 
+0x6eea 029750 copy rega ,loopcnt 
+0x6eeb 029751 fetch 2 ,mem_sdp_continue_byte 
+0x6eec 029752 branch sa_req_all_fisrt_fragment ,blank 
+0x6eed 029753 iadd timeup ,contr 
+0x6eee 029754 copy rega ,pdata 
+0x6eef 029755 increase 5 ,pdata 
+0x6ef0 029756 byteswap pdata ,pdata 
+0x6ef1 029757 istore 2 ,contw 
+0x6ef2 029758 copy rega ,pdata 
+0x6ef3 029759 byteswap pdata ,pdata 
+0x6ef4 029760 istore 2 ,contw 
+:      029761 sa_req_all_answer_attributelist_full_loop:
+0x6ef5 029762 call memcpy 
+0x6ef6 029763 nbranch sa_req_all_last_frag_continue ,user 
+0x6ef7 029764 force 2 ,pdata 
+0x6ef8 029765 istore 1 ,contw 
+0x6ef9 029766 copy contr ,pdata 
+0x6efa 029767 isub timeup ,pdata 
+0x6efb 029768 byteswap pdata ,pdata 
+0x6efc 029769 istore 2 ,contw 
+0x6efd 029770 branch sa_req_all_frag_end 
+:      029771 sa_req_all_last_frag_continue:
+0x6efe 029772 force 0 ,pdata 
+0x6eff 029773 istore 1 ,contw 
+:      029774 sa_req_all_frag_end:
+0x6f00 029775 arg sdp_attribute_res ,rega 
+0x6f01 029776 branch ssa_req_range_common 
+:      029787 sdp_process_ssa_req:
+0x6f02 029788 bpatchx patch3a_1 ,mem_patch3a 
+0x6f03 029789 call ask_serviceclassid 
+0x6f04 029790 compare 0xff ,temp ,0xff 
+0x6f05 029791 branch sdp_invalid_request_syntax ,true 
+0x6f06 029792 call sdp_store_maxbyte 
+0x6f07 029793 store 2 ,mem_sdp_attribute_maxbyte 
+0x6f08 029794 increase -2 ,timeup 
+0x6f09 029795 call dataelementtype6 
+0x6f0a 029796 arg mem_sdp_attrib_list ,contw 
+0x6f0b 029797 force 0 ,queue 
+:      029798 ssa_req_loop:
+0x6f0c 029799 ifetch 1 ,contr 
+0x6f0d 029800 beq sdp_attribute_range ,ssa_req_range 
+0x6f0e 029801 ifetch 2 ,contr 
+0x6f0f 029802 istore 2 ,contw 
+0x6f10 029803 increase 1 ,queue 
+0x6f11 029804 increase -3 ,timeup 
+0x6f12 029805 increase -3 ,rega 
+0x6f13 029806 nbranch sdp_invalid_request_syntax ,positive 
+0x6f14 029807 nbranch ssa_req_loop ,zero 
+0x6f15 029808 increase -1 ,timeup 
+0x6f16 029809 nbranch sdp_invalid_request_syntax ,zero 
+0x6f17 029810 call l2cap_get_sdp_tx_payload 
+0x6f18 029811 increase 13 ,contw 
+0x6f19 029812 fetch 2 ,mem_sdp_uuid_search_ptr 
+0x6f1a 029813 iforce regc 
+0x6f1b 029814 arg mem_sdp_attrib_list ,rega 
+:      029815 ssa_req_attributelist_next:
+0x6f1c 029816 ifetch 2 ,rega 
+0x6f1d 029817 branch ssa_req_attributelist_end ,blank 
+0x6f1e 029818 iforce regb 
+0x6f1f 029819 call search_attrib 
+0x6f20 029820 branch ssa_req_attributelist_notfound ,blank 
+0x6f21 029821 increase -3 ,contr 
+0x6f22 029822 ifetch 3 ,contr 
+0x6f23 029823 istore 3 ,contw 
+0x6f24 029824 call sdp_data_len 
+0x6f25 029825 iforce loopcnt 
+0x6f26 029826 call memcpy 
+:      029827 ssa_req_attributelist_notfound:
+0x6f27 029828 increase 2 ,rega 
+0x6f28 029829 branch ssa_req_attributelist_next 
+:      029831 ssa_req_attributelist_end:
+0x6f29 029832 call ssa_req_range_lastfreg 
+0x6f2a 029833 fetch 2 ,mem_sdp_tx_pkt_length 
+0x6f2b 029834 beq 14 ,ssa_empty_rsp 
+0x6f2c 029835 call ssa_req_range_attrbutes_length_no_continue 
+0x6f2d 029836 branch ssa_req_range_attrbutes_length_no_continue 
+:      029839 sdp_store_maxbyte:
+0x6f2e 029840 ifetch 2 ,contr 
+0x6f2f 029841 byteswap pdata ,pdata 
+0x6f30 029842 increase -3 ,pdata 
+0x6f31 029843 arg 200 ,temp 
+0x6f32 029844 isub temp ,null 
+0x6f33 029845 nrtn positive 
+0x6f34 029846 setarg 200 
+0x6f35 029847 rtn 
+:      029850 ssa_req_range:
+0x6f36 029851 increase 4 ,contr 
+0x6f37 029852 increase -5 ,timeup 
+0x6f38 029853 increase -5 ,rega 
+0x6f39 029854 nbranch sdp_invalid_request_syntax ,zero 
+0x6f3a 029855 call sdp_store_continue_common 
+0x6f3b 029856 nbranch sdp_invalid_pdu_size ,zero 
+0x6f3c 029857 arg mem_sdp_uuid_search_ptr ,timeup 
+0x6f3d 029858 call search_all_uuid 
+0x6f3e 029859 deposit queue 
+0x6f3f 029860 branch ssa_empty_rsp ,blank 
+0x6f40 029861 store 1 ,mem_handle_humber 
+0x6f41 029863 copy regb ,pdata 
+0x6f42 029864 store 2 ,mem_sdp_all_length 
+0x6f43 029865 arg 0 ,queue 
+0x6f44 029866 arg 0 ,rega 
+0x6f45 029867 call l2cap_get_sdp_tx_payload 
+0x6f46 029868 increase 10 ,contw 
+:      029869 ssa_req_range_find_handle:
+0x6f47 029870 call ssa_req_range_get_length 
+0x6f48 029871 nbranch assert ,user 
+0x6f49 029872 copy contr ,timeup 
+0x6f4a 029873 copy pdata ,regc 
+0x6f4b 029874 iadd rega ,rega 
+0x6f4c 029877 fetch 2 ,mem_sdp_continue_byte 
+0x6f4d 029878 copy pdata ,regb 
+0x6f4e 029879 branch ssa_req_range_first_freg ,blank 
+:      029880 ssa_req_range_later_freg_with_continue:
+0x6f4f 029881 copy rega ,pdata 
+0x6f50 029882 isub regb ,regb 
+0x6f51 029883 branch ssa_req_range_next_handle ,zero 
+0x6f52 029884 nbranch ssa_req_range_next_handle ,positive 
+0x6f53 029885 fetch 2 ,mem_sdp_attribute_maxbyte 
+0x6f54 029886 isub regb ,null 
+0x6f55 029887 branch ssa_req_range_maxbyte_with_continue ,zero 
+0x6f56 029888 nbranch ssa_req_range_maxbyte_with_continue ,positive 
+:      029891 ssa_req_range_send_not_maxbyte:
+0x6f57 029892 copy regb ,loopcnt 
+0x6f58 029893 call ssa_req_range_maxbyte_with_continue_cpy 
+0x6f59 029894 fetch 1 ,mem_handle_humber 
+0x6f5a 029895 increase 1 ,queue 
+0x6f5b 029896 isub queue ,null 
+0x6f5c 029897 branch ssa_req_range_lastfreg ,zero 
+0x6f5d 029898 branch ssa_req_range_freg_with_continue 
+:      029900 ssa_req_range_maxbyte_with_continue:
+0x6f5e 029901 copy pdata ,loopcnt 
+0x6f5f 029902 call ssa_req_range_maxbyte_with_continue_cpy 
+0x6f60 029903 branch ssa_req_range_freg_with_continue 
+:      029905 ssa_req_range_maxbyte_with_continue_cpy:
+0x6f61 029906 increase -3 ,contw 
+0x6f62 029907 copy loopcnt ,temp 
+0x6f63 029908 copy regc ,pdata 
+0x6f64 029909 isub regb ,pdata 
+0x6f65 029910 iadd timeup ,contr 
+0x6f66 029911 branch memcpy 
+:      029913 ssa_req_range_next_handle:
+0x6f67 029914 fetch 1 ,mem_handle_humber 
+0x6f68 029915 increase 1 ,queue 
+0x6f69 029916 isub queue ,null 
+0x6f6a 029917 rtn zero 
+0x6f6b 029918 branch ssa_req_range_find_handle 
+:      029920 ssa_req_range_get_length:
+0x6f6c 029921 call disable_user 
+0x6f6d 029922 arg mem_sdp_handle_list ,contr 
+0x6f6e 029923 lshift2 queue ,pdata 
+0x6f6f 029924 iadd contr ,contr 
+0x6f70 029925 ifetcht 4 ,contr 
+0x6f71 029926 call search_handle 
+0x6f72 029927 nrtn zero 
+0x6f73 029928 call sdp_data_len 
+0x6f74 029929 branch enable_user 
+:      029931 ssa_req_range_first_freg:
+0x6f75 029932 fetch 2 ,mem_sdp_attribute_maxbyte 
+0x6f76 029933 isub rega ,null 
+0x6f77 029934 nbranch ssa_req_range_firstfreg_maxbyte_with_continue ,positive 
+0x6f78 029935 copy rega ,loopcnt 
+0x6f79 029936 copy loopcnt ,temp 
+0x6f7a 029937 copy timeup ,contr 
+0x6f7b 029938 call memcpy 
+0x6f7c 029939 fetch 2 ,mem_sdp_all_length 
+0x6f7d 029940 isub rega ,null 
+0x6f7e 029941 branch ssa_req_range_freg_no_continue ,zero 
+:      029942 ssa_req_range_firstfreg_not_maxbyte_with_continue:
+0x6f7f 029943 call ssa_req_range_freg_with_continue 
+0x6f80 029944 branch ssa_req_range_attrbutes_length 
+:      029946 ssa_req_range_freg_no_continue:
+0x6f81 029947 call ssa_req_range_lastfreg 
+0x6f82 029948 branch ssa_req_range_attrbutes_length 
+:      029950 ssa_req_range_lastfreg:
+0x6f83 029951 arg sdp_searchattrib_res ,rega 
+:      029952 ssa_req_range_lastfreg_common:
+0x6f84 029953 force 0 ,pdata 
+0x6f85 029954 istore 1 ,contw 
+0x6f86 029955 call ssa_req_range_common 
+0x6f87 029956 fetcht 2 ,mem_sdp_tx_pkt_length 
+0x6f88 029957 increase -5 ,temp 
+0x6f89 029958 byteswap temp ,pdata 
+0x6f8a 029959 istore 2 ,contw 
+0x6f8b 029960 increase -3 ,temp 
+0x6f8c 029961 byteswap temp ,pdata 
+0x6f8d 029962 istore 2 ,contw 
+0x6f8e 029963 rtn 
+:      029965 ssa_req_range_firstfreg_maxbyte_with_continue:
+0x6f8f 029966 copy pdata ,loopcnt 
+0x6f90 029967 copy loopcnt ,temp 
+0x6f91 029968 copy timeup ,contr 
+0x6f92 029969 call memcpy 
+0x6f93 029970 call ssa_req_range_freg_with_continue 
+:      029971 ssa_req_range_attrbutes_length:
+0x6f94 029972 setarg 0x36 
+0x6f95 029973 istore 1 ,contw 
+0x6f96 029974 fetch 2 ,mem_sdp_all_length 
+0x6f97 029975 byteswap pdata ,pdata 
+0x6f98 029976 istore 2 ,contw 
+0x6f99 029977 rtn 
+:      029979 ssa_req_range_attrbutes_length_no_continue:
+0x6f9a 029980 setarg 0x36 
+0x6f9b 029981 istore 1 ,contw 
+0x6f9c 029982 increase -3 ,temp 
+0x6f9d 029983 byteswap temp ,pdata 
+0x6f9e 029984 istore 2 ,contw 
+0x6f9f 029985 rtn 
+:      029987 ssa_req_range_freg_with_continue:
+0x6fa0 029988 arg sdp_searchattrib_res ,rega 
+0x6fa1 029989 setarg 2 
+0x6fa2 029990 istore 1 ,contw 
+0x6fa3 029991 fetch 2 ,mem_sdp_continue_byte 
+0x6fa4 029992 iadd temp ,temp 
+0x6fa5 029993 byteswap temp ,pdata 
+0x6fa6 029994 istore 2 ,contw 
+0x6fa7 029995 call ssa_req_range_common 
+0x6fa8 029996 fetcht 2 ,mem_sdp_tx_pkt_length 
+0x6fa9 029997 increase -5 ,temp 
+0x6faa 029998 byteswap temp ,pdata 
+0x6fab 029999 istore 2 ,contw 
+0x6fac 030000 increase -5 ,temp 
+0x6fad 030001 byteswap temp ,pdata 
+0x6fae 030002 istore 2 ,contw 
+0x6faf 030003 rtn 
+:      030005 ssa_req_range_common:
+0x6fb0 030006 fetch 2 ,mem_sdp_tx_payload_ptr 
+0x6fb1 030007 isub contw ,pdata 
+0x6fb2 030008 sub pdata ,0 ,pdata 
+0x6fb3 030009 store 2 ,mem_sdp_tx_pkt_length 
+0x6fb4 030010 call l2cap_get_sdp_tx_payload 
+0x6fb5 030011 copy rega ,pdata 
+0x6fb6 030012 istore 1 ,contw 
+0x6fb7 030013 fetch 2 ,mem_sdp_transactionid 
+0x6fb8 030014 istore 2 ,contw 
+0x6fb9 030015 rtn 
+:      030028 sdp_process_ssa_res:
+:      030029 sdp_process_ss_res:
+:      030030 sdp_process_sa_res:
+:      030031 sdp_process_error_res:
+0x6fba 030032 rtn 
+:      030065 sdp_invalid_service_record_handle:
+0x6fbb 030066 setarg 0x0200 
+0x6fbc 030067 store 2 ,mem_sdp_error_code 
+0x6fbd 030068 branch sdp_error_response 
+:      030069 sdp_invalid_pdu_size:
+0x6fbe 030070 setarg 0x0400 
+0x6fbf 030071 store 2 ,mem_sdp_error_code 
+0x6fc0 030072 branch sdp_error_response 
+:      030073 sdp_insufficient_resource:
+0x6fc1 030074 setarg 0x0600 
+0x6fc2 030075 store 2 ,mem_sdp_error_code 
+0x6fc3 030076 branch sdp_error_response 
+:      030077 sdp_invalid_request_syntax:
+0x6fc4 030078 setarg 0x0300 
+0x6fc5 030079 store 2 ,mem_sdp_error_code 
+:      030080 sdp_error_response:
+0x6fc6 030081 call l2cap_get_sdp_tx_payload 
+0x6fc7 030082 istore 1 ,contw 
+0x6fc8 030083 fetch 2 ,mem_sdp_transactionid 
+0x6fc9 030084 istore 2 ,contw 
+0x6fca 030085 setarg 0x0200 
+0x6fcb 030086 istore 2 ,contw 
+0x6fcc 030087 fetch 2 ,mem_sdp_error_code 
+0x6fcd 030088 istore 2 ,contw 
+0x6fce 030089 jam 7 ,mem_sdp_tx_pkt_length 
+0x6fcf 030090 rtn 
+:      030095 ask_serviceclassid:
+0x6fd0 030096 arg 0 ,regb 
+0x6fd1 030097 force 0 ,temp 
+0x6fd2 030098 arg mem_sdp_uuid_search_ptr ,contw 
+0x6fd3 030099 call dataelementtype6 
+0x6fd4 030100 branch asksrv_error ,zero 
+:      030101 classidloop:
+0x6fd5 030102 increase 1 ,regb 
+0x6fd6 030103 ifetch 1 ,contr 
+0x6fd7 030104 increase -1 ,rega 
+0x6fd8 030105 increase -1 ,timeup 
+0x6fd9 030106 compare 0x18 ,pdata ,0xf8 
+0x6fda 030107 nbranch asksrv_error ,true 
+0x6fdb 030108 compare 0x04 ,pdata ,0x07 
+0x6fdc 030109 nbranch cmp032 ,true 
+0x6fdd 030110 force 1 ,temp 
+:      030111 skip2bytes:
+0x6fde 030112 ifetch 1 ,contr 
+0x6fdf 030113 increase -1 ,rega 
+0x6fe0 030114 increase -1 ,timeup 
+0x6fe1 030115 bne 0x00 ,frstbwrong 
+0x6fe2 030116 ifetch 1 ,contr 
+0x6fe3 030117 increase -1 ,rega 
+0x6fe4 030118 increase -1 ,timeup 
+0x6fe5 030119 beq 0x00 ,cmpuuid 
+0x6fe6 030120 branch scndbwrong 
+:      030121 frstbwrong:
+0x6fe7 030122 increase 1 ,contr 
+0x6fe8 030123 increase -1 ,rega 
+0x6fe9 030124 increase -1 ,timeup 
+:      030125 scndbwrong:
+0x6fea 030126 increase 2 ,contr 
+0x6feb 030127 increase -2 ,rega 
+0x6fec 030128 increase -2 ,timeup 
+0x6fed 030129 compare 0x00 ,temp ,0xff 
+0x6fee 030130 branch loopornot ,true 
+0x6fef 030131 increase 12 ,contr 
+0x6ff0 030132 increase -12 ,rega 
+0x6ff1 030133 increase -12 ,timeup 
+0x6ff2 030134 branch loopornot 
+:      030135 cmp032:
+0x6ff3 030136 compare 0x02 ,pdata ,0x07 
+0x6ff4 030137 nbranch cmp016 ,true 
+0x6ff5 030138 branch skip2bytes 
+:      030139 cmp016:
+0x6ff6 030140 compare 0x01 ,pdata ,0x07 
+0x6ff7 030141 nbranch asksrv_error ,true 
+:      030142 cmpuuid:
+0x6ff8 030143 increase -2 ,rega 
+0x6ff9 030144 increase -2 ,timeup 
+0x6ffa 030145 ifetch 2 ,contr 
+0x6ffb 030146 sub regb ,4 ,null 
+0x6ffc 030147 branch uuidsize ,zero 
+0x6ffd 030148 istore 2 ,contw 
+:      030149 uuidsize:
+0x6ffe 030150 compare 0x00 ,temp ,0xff 
+0x6fff 030151 branch loopornot ,true 
+0x7000 030152 copy contr ,temp 
+0x7001 030153 ifetch 1 ,contr 
+0x7002 030154 bne 0x00 ,wrong12b 
+0x7003 030155 ifetch 1 ,contr 
+0x7004 030156 bne 0x00 ,wrong12b 
+0x7005 030157 ifetch 1 ,contr 
+0x7006 030158 bne 0x10 ,wrong12b 
+0x7007 030159 ifetch 1 ,contr 
+0x7008 030160 bne 0x00 ,wrong12b 
+0x7009 030161 ifetch 1 ,contr 
+0x700a 030162 bne 0x80 ,wrong12b 
+0x700b 030163 ifetch 1 ,contr 
+0x700c 030164 bne 0x00 ,wrong12b 
+0x700d 030165 ifetch 1 ,contr 
+0x700e 030166 bne 0x00 ,wrong12b 
+0x700f 030167 ifetch 1 ,contr 
+0x7010 030168 bne 0x80 ,wrong12b 
+0x7011 030169 ifetch 1 ,contr 
+0x7012 030170 bne 0x5f ,wrong12b 
+0x7013 030171 ifetch 1 ,contr 
+0x7014 030172 bne 0x9b ,wrong12b 
+0x7015 030173 ifetch 1 ,contr 
+0x7016 030174 bne 0x34 ,wrong12b 
+0x7017 030175 ifetch 1 ,contr 
+0x7018 030176 beq 0xfb ,chck12dn 
+:      030177 wrong12b:
+0x7019 030178 copy temp ,contr 
+:      030179 wrong12b1:
+0x701a 030180 increase 12 ,contr 
+0x701b 030181 force 0x00 ,queue 
+0x701c 030182 force 0x00 ,temp 
+0x701d 030183 branch chck12dn 
+:      030185 chck12dn:
+0x701e 030186 increase -12 ,timeup 
+0x701f 030187 increase -12 ,rega 
+:      030188 loopornot:
+0x7020 030189 force 0x00 ,temp 
+0x7021 030190 compare 0x00 ,rega ,0xff 
+0x7022 030191 nbranch classidloop ,true 
+0x7023 030192 force 0 ,pdata 
+0x7024 030193 istore 2 ,contw 
+0x7025 030194 rtn 
+:      030195 asksrv_error:
+0x7026 030196 arg 0xff ,temp 
+0x7027 030197 rtn 
+:      030207 dataelementtype6:
+0x7028 030208 bpatchx patch3a_4 ,mem_patch3a 
+0x7029 030209 ifetch 1 ,contr 
+0x702a 030210 increase -1 ,timeup 
+0x702b 030211 compare 0x30 ,pdata ,0xf8 
+0x702c 030212 nbranch dsize_error ,true 
+0x702d 030213 compare 0x07 ,pdata ,0x07 
+0x702e 030214 branch dsize32 ,true 
+0x702f 030215 compare 0x06 ,pdata ,0x07 
+0x7030 030216 branch dsize16 ,true 
+0x7031 030217 compare 0x05 ,pdata ,0x07 
+0x7032 030218 nbranch dsize_error ,true 
+0x7033 030220 ifetch 1 ,contr 
+0x7034 030221 copy pdata ,rega 
+0x7035 030222 increase -1 ,timeup 
+0x7036 030223 branch dsize 
+:      030224 dsize32:
+0x7037 030225 increase 2 ,contr 
+0x7038 030226 increase -2 ,timeup 
+:      030227 dsize16:
+0x7039 030228 ifetch 2 ,contr 
+0x703a 030229 byteswap pdata ,rega 
+0x703b 030230 increase -2 ,timeup 
+:      030231 dsize:
+0x703c 030232 force 0x01 ,pdata 
+0x703d 030233 rtn 
+:      030234 dsize_error:
+0x703e 030235 force 0x00 ,pdata 
+0x703f 030236 rtn 
+:      030246 ss_empty_rsp:
+0x7040 030247 setarg sdp_search_res 
+0x7041 030248 store 1 ,mem_sdp_pduid 
+0x7042 030249 branch empty_response 
+:      030250 sa_empty_rsp:
+0x7043 030251 setarg sdp_attribute_res 
+0x7044 030252 store 1 ,mem_sdp_pduid 
+0x7045 030253 branch empty_response 
+:      030254 ssa_empty_rsp:
+0x7046 030255 setarg sdp_searchattrib_res 
+0x7047 030256 store 1 ,mem_sdp_pduid 
+:      030257 empty_response:
+0x7048 030258 call l2cap_get_sdp_tx_payload 
+0x7049 030261 fetch 1 ,mem_sdp_pduid 
+0x704a 030262 copy pdata ,regb 
+0x704b 030263 istore 1 ,contw 
+0x704c 030264 fetch 2 ,mem_sdp_transactionid 
+0x704d 030265 istore 2 ,contw 
+0x704e 030266 setarg 0x0500 
+0x704f 030267 istore 2 ,contw 
+0x7050 030268 compare sdp_attribute_res ,regb ,0xff 
+0x7051 030269 branch fullsearch ,true 
+0x7052 030270 compare sdp_searchattrib_res ,regb ,0xff 
+0x7053 030271 branch fullsearch ,true 
+0x7054 030272 setarg 0x000000 
+0x7055 030273 istore 5 ,contw 
+0x7056 030274 branch outempty 
+:      030276 fullsearch:
+0x7057 030277 setarg 0x350200 
+0x7058 030278 istore 5 ,contw 
+:      030279 outempty:
+0x7059 030280 jam 10 ,mem_sdp_tx_pkt_length 
+0x705a 030281 rtn 
+:      030284 sdp_data_len:
+0x705b 030285 call store_contw 
+0x705c 030286 call store_contr 
+0x705d 030287 call sdp_get_data 
+0x705e 030288 call get_contw 
+0x705f 030289 call get_contr 
+0x7060 030290 copy temp ,pdata 
+0x7061 030291 rtn 
+:      030294 sdp_get_data:
+0x7062 030295 ifetch 1 ,contr 
+0x7063 030296 and pdata ,0x7 ,loopcnt 
+0x7064 030297 rshift3 pdata ,pdata 
+0x7065 030298 bne 0 ,sdp_get_data_type_not0 
+:      030299 sdp_get_data_type0:
+0x7066 030300 force 1 ,pdata 
+0x7067 030301 force 1 ,temp 
+0x7068 030302 rtn 
+:      030304 sdp_get_data_type_not0_sizeindex01234:
+0x7069 030305 call left_shift_n 
+0x706a 030306 add pdata ,1 ,temp 
+0x706b 030307 rtn 
+:      030308 sdp_get_data_type_not0:
+0x706c 030309 deposit loopcnt 
+0x706d 030310 sub pdata ,4 ,null 
+0x706e 030311 branch sdp_get_data_type_not0_sizeindex01234 ,positive 
+0x706f 030312 beq 5 ,sdp_get_data_type_not0_sizeindex5 
+0x7070 030313 beq 6 ,sdp_get_data_type_not0_sizeindex6 
+0x7071 030314 beq 7 ,sdp_get_data_type_not0_sizeindex7 
+0x7072 030315 rtn 
+:      030317 sdp_get_data_type_not0_sizeindex5:
+0x7073 030318 ifetch 1 ,contr 
+0x7074 030319 add pdata ,2 ,temp 
+0x7075 030320 rtn 
+:      030321 sdp_get_data_type_not0_sizeindex6:
+0x7076 030322 ifetch 2 ,contr 
+0x7077 030323 byteswap pdata ,pdata 
+0x7078 030324 add pdata ,3 ,temp 
+0x7079 030325 rtn 
+:      030326 sdp_get_data_type_not0_sizeindex7:
+0x707a 030327 ifetch 2 ,contr 
+0x707b 030328 byteswap pdata ,pdata 
+0x707c 030329 ifetcht 2 ,contr 
+0x707d 030330 byteswap temp ,temp 
+0x707e 030331 lshift16 temp ,temp 
+0x707f 030332 iadd temp ,pdata 
+0x7080 030333 add pdata ,5 ,temp 
+0x7081 030334 rtn 
+:      030340 search_all_uuid:
+0x7082 030341 bpatchx patch3a_5 ,mem_patch3a 
+0x7083 030342 force 0 ,queue 
+0x7084 030343 arg 0 ,regb 
+0x7085 030344 arg mem_sdp_handle_list ,contw 
+:      030345 search_all_uuid_llop:
+0x7086 030346 ifetch 2 ,timeup 
+0x7087 030347 rtn blank 
+0x7088 030348 call search_uuid 
+0x7089 030349 copy queue ,pdata 
+0x708a 030350 rtneq sdp_max_handle_number 
+0x708b 030351 increase 2 ,timeup 
+0x708c 030352 branch search_all_uuid_llop 
+:      030354 search_uuid:
+0x708d 030356 iforce regc 
+0x708e 030358 fetch 2 ,mem_ui_uuid_table 
+0x708f 030359 iforce contr 
+:      030360 search_uuid_next:
+0x7090 030361 copy queue ,pdata 
+0x7091 030362 rtneq sdp_max_handle_number 
+0x7092 030363 disable user 
+0x7093 030364 ifetch 1 ,contr 
+0x7094 030365 rtn blank 
+0x7095 030366 iforce loopcnt 
+:      030367 search_uuid_loop:
+0x7096 030368 ifetch 2 ,contr 
+0x7097 030369 isub regc ,null 
+0x7098 030370 nbranch search_uuid_not_found ,zero 
+0x7099 030371 enable user 
+:      030372 search_uuid_not_found:
+0x709a 030373 loop search_uuid_loop 
+0x709b 030374 ifetcht 4 ,contr 
+0x709c 030375 copy contr ,rega 
+0x709d 030376 nbranch search_uuid_nomatch ,user 
+0x709e 030377 arg mem_sdp_handle_list ,contr 
+0x709f 030378 arg sdp_max_handle_number ,loopcnt 
+:      030379 search_uuid_check_same_handle:
+0x70a0 030380 ifetch 4 ,contr 
+0x70a1 030381 branch search_uuid_store_handle ,blank 
+0x70a2 030382 isub temp ,null 
+0x70a3 030383 branch search_uuid_nomatch ,zero 
+0x70a4 030384 loop search_uuid_check_same_handle 
+0x70a5 030385 rtn 
+:      030386 search_uuid_store_handle:
+0x70a6 030387 istoret 4 ,contw 
+0x70a7 030388 increase 1 ,queue 
+0x70a8 030389 copy rega ,contr 
+0x70a9 030390 call sdp_data_len 
+0x70aa 030391 iadd regb ,regb 
+0x70ab 030392 iadd contr ,contr 
+0x70ac 030393 branch search_uuid_next 
+:      030394 search_uuid_nomatch:
+0x70ad 030395 copy rega ,contr 
+0x70ae 030396 call sdp_get_data 
+0x70af 030397 iadd contr ,contr 
+0x70b0 030398 branch search_uuid_next 
+:      030404 search_handle:
+0x70b1 030405 bpatchx patch3a_6 ,mem_patch3a 
+0x70b2 030406 fetch 2 ,mem_ui_uuid_table 
+0x70b3 030407 iforce contr 
+:      030408 search_handle_loop:
+0x70b4 030409 ifetch 1 ,contr 
+0x70b5 030410 branch disable_zero ,blank 
+0x70b6 030411 lshift pdata ,pdata 
+0x70b7 030412 iadd contr ,contr 
+0x70b8 030413 ifetch 4 ,contr 
+0x70b9 030414 isub temp ,null 
+0x70ba 030415 rtn zero 
+0x70bb 030416 deposit contw 
+0x70bc 030417 store 2 ,mem_contw 
+0x70bd 030418 storet 8 ,mem_temp 
+0x70be 030419 call sdp_get_data 
+0x70bf 030420 iadd contr ,contr 
+0x70c0 030421 copy contr ,pdata 
+0x70c1 030422 fetcht 2 ,mem_contw 
+0x70c2 030423 copy temp ,contw 
+0x70c3 030424 fetcht 8 ,mem_temp 
+0x70c4 030425 copy pdata ,contr 
+0x70c5 030426 branch search_handle_loop 
+:      030432 search_attrib:
+0x70c6 030433 bpatchx patch3a_7 ,mem_patch3a 
+0x70c7 030434 fetch 2 ,mem_ui_uuid_table 
+0x70c8 030435 iforce contr 
+:      030436 search_attrib_next:
+0x70c9 030437 ifetch 1 ,contr 
+0x70ca 030438 branch search_attrib_end ,blank 
+0x70cb 030439 iforce loopcnt 
+:      030440 search_attrib_loop:
+0x70cc 030441 ifetch 2 ,contr 
+0x70cd 030442 isub regc ,null 
+0x70ce 030443 branch search_attrib_found_uuid ,zero 
+0x70cf 030444 loop search_attrib_loop 
+0x70d0 030445 increase 4 ,contr 
+0x70d1 030446 call sdp_get_data 
+0x70d2 030447 iadd contr ,contr 
+0x70d3 030448 branch search_attrib_next 
+:      030449 search_attrib_found_uuid:
+0x70d4 030450 increase -1 ,loopcnt 
+0x70d5 030451 lshift loopcnt ,pdata 
+0x70d6 030452 iadd contr ,contr 
+0x70d7 030453 increase 4 ,contr 
+0x70d8 030454 call sdp_get_data 
+0x70d9 030455 iadd contr ,timeup 
+:      030456 search_attrib_loop_attribs:
+0x70da 030457 increase 1 ,contr 
+0x70db 030458 ifetch 2 ,contr 
+0x70dc 030459 isub regb ,null 
+0x70dd 030463 branch disable_blank ,zero 
+0x70de 030464 call sdp_data_len 
+0x70df 030465 iadd contr ,contr 
+0x70e0 030466 deposit timeup 
+0x70e1 030467 isub contr ,null 
+0x70e2 030468 branch search_attrib_end ,zero 
+0x70e3 030469 branch search_attrib_loop_attribs 
+:      030470 search_attrib_end:
+0x70e4 030471 force 0 ,contr 
+0x70e5 030472 force 0 ,pdata 
+0x70e6 030473 rtn 
+:      030479 search_handle_attrib:
+0x70e7 030480 bpatchx patch3b_0 ,mem_patch3b 
+0x70e8 030481 fetch 2 ,mem_ui_uuid_table 
+0x70e9 030482 iforce contr 
+:      030483 search_handle_attrib_next:
+0x70ea 030484 ifetch 1 ,contr 
+0x70eb 030485 branch search_handle_attrib_end ,blank 
+0x70ec 030486 lshift pdata ,pdata 
+0x70ed 030487 iadd contr ,contr 
+0x70ee 030488 ifetch 4 ,contr 
+0x70ef 030489 isub temp ,null 
+0x70f0 030490 branch search_handl_attrib_found_handle ,zero 
+0x70f1 030491 call sdp_get_data 
+0x70f2 030492 iadd contr ,contr 
+0x70f3 030493 branch search_handle_attrib_next 
+:      030494 search_handl_attrib_found_handle:
+0x70f4 030495 call sdp_get_data 
+0x70f5 030496 iadd contr ,timeup 
+:      030497 search_handle_attrib_loop_attribs:
+0x70f6 030498 increase 1 ,contr 
+0x70f7 030499 ifetch 2 ,contr 
+0x70f8 030500 isub regb ,null 
+0x70f9 030501 rtn zero 
+0x70fa 030502 call sdp_data_len 
+0x70fb 030503 iadd contr ,contr 
+0x70fc 030504 deposit timeup 
+0x70fd 030505 isub contr ,null 
+0x70fe 030506 branch search_handle_attrib_end ,zero 
+0x70ff 030507 branch search_handle_attrib_loop_attribs 
+:      030508 search_handle_attrib_end:
+0x7100 030509 force 0 ,contr 
+0x7101 030510 rtn 
+:      030514 search_rfcomm_cn:
+0x7102 030515 arg 0x0400 ,regb 
+0x7103 030516 call search_handl_attrib_found_handle 
+0x7104 030517 arg 0x0300 ,regb 
+0x7105 030518 call search_uuid_in_data 
+0x7106 030519 nrtn user 
+0x7107 030520 sub rega ,3 ,null 
+0x7108 030521 branch disable_user ,positive 
+0x7109 030522 ifetch 1 ,contr 
+0x710a 030523 bne 0x08 ,disable_user 
+0x710b 030524 ifetch 1 ,contr 
+0x710c 030525 rtn 
+:      030530 search_uuid_in_data:
+0x710d 030531 bpatchx patch3b_1 ,mem_patch3b 
+0x710e 030532 call sdp_get_data 
+0x710f 030533 copy pdata ,rega 
+:      030534 search_uuid_in_data_loop:
+0x7110 030535 ifetch 1 ,contr 
+0x7111 030536 and pdata ,0x7 ,loopcnt 
+0x7112 030537 rshift3 pdata ,pdata 
+0x7113 030538 sub pdata ,3 ,null 
+0x7114 030539 branch search_uuid_in_data_found_uuid ,zero 
+0x7115 030540 copy loopcnt ,pdata 
+0x7116 030541 beq 5 ,search_uuid_in_data_found_element_index5 
+0x7117 030542 beq 6 ,search_uuid_in_data_found_element_index6 
+0x7118 030543 beq 7 ,search_uuid_in_data_found_element_index7 
+0x7119 030544 increase -1 ,contr 
+0x711a 030545 call sdp_get_data 
+0x711b 030546 iadd contr ,contr 
+0x711c 030547 copy rega ,pdata 
+0x711d 030548 isub temp ,rega 
+0x711e 030549 branch disable_user ,zero 
+0x711f 030550 branch search_uuid_in_data_loop 
+:      030552 search_uuid_in_data_found_element_index5:
+0x7120 030553 increase -2 ,rega 
+0x7121 030554 increase 1 ,contr 
+0x7122 030555 branch search_uuid_in_data_loop 
+:      030556 search_uuid_in_data_found_element_index6:
+0x7123 030557 increase -3 ,rega 
+0x7124 030558 increase 2 ,contr 
+0x7125 030559 branch search_uuid_in_data_loop 
+:      030560 search_uuid_in_data_found_element_index7:
+0x7126 030561 increase -5 ,rega 
+0x7127 030562 increase 4 ,contr 
+0x7128 030563 branch search_uuid_in_data_loop 
+:      030565 search_uuid_in_data_found_uuid:
+0x7129 030566 increase -1 ,rega 
+0x712a 030567 copy loopcnt ,pdata 
+0x712b 030568 beq 1 ,search_uuid_in_data_type_uuid_16 
+0x712c 030569 beq 2 ,search_uuid_in_data_type_uuid_32 
+0x712d 030570 beq 4 ,search_uuid_in_data_type_uuid_128 
+0x712e 030571 branch disable_user 
+:      030572 search_uuid_in_data_type_uuid_128:
+0x712f 030573 increase -12 ,rega 
+:      030574 search_uuid_in_data_type_uuid_32:
+0x7130 030575 ifetch 2 ,contr 
+0x7131 030576 increase -2 ,rega 
+:      030577 search_uuid_in_data_type_uuid_16:
+0x7132 030578 ifetch 2 ,contr 
+0x7133 030579 isub regb ,null 
+0x7134 030580 branch enable_user ,zero 
+0x7135 030581 increase -2 ,rega 
+0x7136 030582 branch disable_user ,zero 
+0x7137 030583 branch search_uuid_in_data_loop 
+:      030642 sdp_send_spp_request:
+0x7138 030643 call l2cap_get_sdp_tx_payload 
+0x7139 030644 copy pdata ,contw 
+0x713a 030645 setarg 6 
+0x713b 030646 istore 1 ,contw 
+0x713c 030647 setarg sdp_tid_spp 
+0x713d 030648 istore 2 ,contw 
+0x713e 030649 setarg 0x0f00 
+0x713f 030650 istore 2 ,contw 
+0x7140 030651 setarg 0x1a0535 
+0x7141 030652 istore 3 ,contw 
+0x7142 030653 setarg 0x0111 
+0x7143 030654 lshift16 pdata ,pdata 
+0x7144 030655 istore 4 ,contw 
+0x7145 030656 setarg 0x2600 
+0x7146 030657 istore 2 ,contw 
+0x7147 030658 setarg 0x0335 
+0x7148 030659 istore 2 ,contw 
+0x7149 030660 setarg 0x0009 
+0x714a 030661 istore 2 ,contw 
+0x714b 030662 setarg 0x0004 
+0x714c 030663 istore 2 ,contw 
+0x714d 030664 jam 0x14 ,mem_sdp_tx_pkt_length 
+0x714e 030665 rtn 
+:      030669 function_g2:
+0x714f 030670 bpatchx patch3b_2 ,mem_patch3b 
+0x7150 030671 jam 80 ,mem_aes_cmac_data_length 
+0x7151 030672 arg memdat ,contw 
+0x7152 030673 arg mem_le_srand ,contr 
+0x7153 030674 call memcpy16 
+0x7154 030675 arg mem_le_pubkey_local_x_256 ,contr 
+0x7155 030676 call memcpy32 
+0x7156 030677 arg mem_le_pubkey_remote_x_256 ,contr 
+0x7157 030678 call memcpy32 
+0x7158 030679 call inverse_memdat 
+0x7159 030680 arg mem_le_mrand ,contr 
+0x715a 030681 call store_inverse_k 
+0x715b 030682 call function_aes_cmac 
+0x715c 030684 arg mem_aes_cmac_temp ,contw 
+0x715d 030685 call load_inverse_result 
+0x715e 030686 setarg 1000000 
+0x715f 030687 copy pdata ,rega 
+0x7160 030688 fetch 4 ,mem_aes_cmac_temp 
+0x7161 030689 idiv rega 
+0x7162 030690 call wait_div_end 
+0x7163 030691 remainder pdata 
+0x7164 030692 store 4 ,mem_gkey 
+0x7165 030694 rtn 
+:      030696 function_f6_eb:
+0x7166 030697 jam 65 ,mem_aes_cmac_data_length 
+0x7167 030698 arg memdat ,contw 
+0x7168 030699 call store_addr_common_a 
+0x7169 030700 call store_addr_common_b 
+0x716a 030701 fetch 3 ,mem_le_pres + 1 
+0x716b 030702 istore 3 ,contw 
+0x716c 030705 call get_r 
+0x716d 030707 arg mem_le_mrand ,contr 
+0x716e 030708 call memcpy16 
+0x716f 030709 arg mem_le_srand ,contr 
+0x7170 030710 call memcpy16 
+0x7171 030711 call inverse_memdat 
+0x7172 030712 arg mem_le_mackey ,contr 
+0x7173 030713 arg mem_aes_cmac_k ,contw 
+0x7174 030714 call memcpy16 
+0x7175 030716 branch function_aes_cmac 
+:      030720 get_r:
+0x7176 030721 fetch 4 ,mem_le_tk 
+0x7177 030722 istore 4 ,contw 
+0x7178 030723 call memset0_4 
+0x7179 030724 branch memset0_8 
+:      030726 function_f6_ea:
+0x717a 030727 bpatchx patch3b_3 ,mem_patch3b 
+0x717b 030728 jam 65 ,mem_aes_cmac_data_length 
+0x717c 030729 arg memdat ,contw 
+0x717d 030730 call store_addr_common_b 
+0x717e 030731 call store_addr_common_a 
+0x717f 030732 fetch 3 ,mem_le_preq + 1 
+0x7180 030733 istore 3 ,contw 
+0x7181 030736 call get_r 
+0x7182 030737 arg mem_le_srand ,contr 
+0x7183 030738 call memcpy16 
+0x7184 030739 arg mem_le_mrand ,contr 
+0x7185 030740 call memcpy16 
+0x7186 030741 call inverse_memdat 
+0x7187 030742 arg mem_le_mackey ,contr 
+0x7188 030743 arg mem_aes_cmac_k ,contw 
+0x7189 030744 call memcpy16 
+0x718a 030746 call function_aes_cmac 
+0x718b 030747 arg mem_aes_cmac_temp ,contw 
+0x718c 030748 branch load_inverse_result 
+:      030750 function_f5:
+0x718d 030751 jam 32 ,mem_aes_cmac_data_length 
+0x718e 030752 arg mem_le_dhkey_256 ,contr 
+0x718f 030753 arg memdat ,contw 
+0x7190 030754 call memcpy32 
+0x7191 030755 call inverse_memdat 
+0x7192 030756 arg mem_le_slat ,contr 
+0x7193 030757 call store_inverse_k 
+0x7194 030758 call function_aes_cmac 
+0x7195 030759 arg mem_aes_cmac_k ,contw 
+0x7196 030760 call store_aes_result 
+0x7197 030761 arg 1 ,temp 
+0x7198 030762 call function_f5_common 
+0x7199 030763 arg mem_le_ltk ,contw 
+0x719a 030764 call load_inverse_result 
+0x719b 030765 arg 0 ,temp 
+0x719c 030766 call function_f5_common 
+0x719d 030767 arg mem_le_mackey ,contw 
+0x719e 030769 branch store_aes_result 
+:      030772 function_f5_common:
+0x719f 030773 bpatchx patch3b_4 ,mem_patch3b 
+0x71a0 030774 jam 53 ,mem_aes_cmac_data_length 
+0x71a1 030775 setarg 0x100 
+0x71a2 030776 store 2 ,memdat 
+0x71a3 030777 call store_addr_common_b 
+0x71a4 030778 call store_addr_common_a 
+0x71a5 030779 arg mem_le_srand ,contr 
+0x71a6 030780 call memcpy16 
+0x71a7 030781 arg mem_le_mrand ,contr 
+0x71a8 030782 call memcpy16 
+0x71a9 030784 setarg 0x6c65 
+0x71aa 030785 istore 2 ,contw 
+0x71ab 030786 setarg 0x6274 
+0x71ac 030787 istore 2 ,contw 
+0x71ad 030788 istoret 1 ,contw 
+0x71ae 030789 call inverse_memdat 
+0x71af 030790 branch function_aes_cmac 
+:      030792 store_addr_common_b:
+0x71b0 030793 fetch 6 ,mem_le_lap 
+0x71b1 030794 istore 6 ,contw 
+0x71b2 030795 fetch 1 ,mem_le_conn_own_addr_type 
+0x71b3 030796 istore 1 ,contw 
+0x71b4 030797 rtn 
+:      030799 store_addr_common_a:
+0x71b5 030800 fetch 6 ,mem_le_plap 
+0x71b6 030801 istore 6 ,contw 
+0x71b7 030806 fetch 1 ,mem_le_conn_peer_addr_type 
+0x71b8 030807 istore 1 ,contw 
+0x71b9 030808 rtn 
+:      030810 function_f4_ca:
+0x71ba 030811 jam 65 ,mem_aes_cmac_data_length 
+0x71bb 030812 fetch 1 ,mem_passkey_1bit 
+0x71bc 030813 store 1 ,memdat 
+0x71bd 030814 arg mem_le_pubkey_local_x_256 ,contr 
+0x71be 030815 call memcpy32 
+0x71bf 030816 arg mem_le_pubkey_remote_x_256 ,contr 
+0x71c0 030817 call memcpy32 
+0x71c1 030818 call inverse_memdat 
+0x71c2 030819 arg mem_le_mrand ,contr 
+0x71c3 030820 call store_inverse_k 
+0x71c4 030821 branch function_aes_cmac 
+:      030824 function_f4_cb:
+0x71c5 030825 jam 65 ,mem_aes_cmac_data_length 
+0x71c6 030826 fetch 1 ,mem_passkey_1bit 
+0x71c7 030827 store 1 ,memdat 
+0x71c8 030828 arg mem_le_pubkey_remote_x_256 ,contr 
+0x71c9 030829 call memcpy32 
+0x71ca 030830 arg mem_le_pubkey_local_x_256 ,contr 
+0x71cb 030831 call memcpy32 
+0x71cc 030832 call inverse_memdat 
+0x71cd 030833 arg mem_le_srand ,contr 
+0x71ce 030834 call store_inverse_k 
+0x71cf 030835 branch function_aes_cmac 
+:      030837 function_aes_cmac:
+0x71d0 030838 bpatchx patch3b_5 ,mem_patch3b 
+0x71d1 030839 call function_aes_cmac_generate_subkey 
+0x71d2 030843 fetch 1 ,mem_aes_cmac_data_length 
+0x71d3 030844 copy pdata ,temp 
+:      030845 function_ceil16:
+0x71d4 030846 increase 15 ,pdata 
+0x71d5 030847 rshift4 pdata ,pdata 
+0x71d6 030848 copy pdata ,regb 
+0x71d7 030849 branch function_aes_cmac_set_flag_0_balnk ,blank 
+0x71d8 030850 and temp ,0x0f ,pdata 
+0x71d9 030851 nbranch function_aes_cmac_set_flag_0 ,blank 
+0x71da 030853 arg mem_aes_cmac_k1 ,regc 
+0x71db 030854 arg memdat ,pdata 
+0x71dc 030855 increase -16 ,pdata 
+0x71dd 030858 iadd temp ,rega 
+0x71de 030859 arg mem_aes_cmac_m_last ,contw 
+0x71df 030860 arg 4 ,loopcnt 
+0x71e0 030861 call xor_loop 
+0x71e1 030865 branch function_aes_cmac_aes 
+:      030867 function_aes_cmac_set_flag_0_balnk:
+0x71e2 030868 arg 1 ,regb 
+0x71e3 030869 arg 0 ,rega 
+0x71e4 030871 branch function_aes_cmac_set_flag_0_common 
+:      030874 function_aes_cmac_set_flag_0:
+0x71e5 030876 and temp ,0x0f ,rega 
+:      030877 function_aes_cmac_set_flag_0_common:
+0x71e6 030878 arg memdat ,pdata 
+0x71e7 030879 iadd temp ,pdata 
+0x71e8 030880 isub rega ,contr 
+0x71e9 030882 arg mem_aes_cmac_temp ,contw 
+0x71ea 030883 call function_aes_cmac_padding 
+0x71eb 030885 arg mem_aes_cmac_k2 ,regc 
+0x71ec 030886 arg mem_aes_cmac_temp ,rega 
+0x71ed 030887 arg mem_aes_cmac_m_last ,contw 
+0x71ee 030888 arg 4 ,loopcnt 
+0x71ef 030889 call xor_loop 
+:      030896 function_aes_cmac_aes:
+0x71f0 030901 call aes_clear_data 
+0x71f1 030902 call aes_init 
+0x71f2 030905 arg memdat ,contr 
+:      030906 function_aes_cmac_aes_loop:
+0x71f3 030908 increase -1 ,regb 
+0x71f4 030909 deposit regb 
+0x71f5 030910 branch function_aes_cmac_aes_loop_end ,blank 
+0x71f6 030911 call load_data128 
+0x71f7 030912 call do_aes_cbc 
+0x71f8 030913 branch function_aes_cmac_aes_loop 
+:      030915 function_aes_cmac_aes_loop_end:
+0x71f9 030916 arg mem_aes_cmac_temp ,contw 
+0x71fa 030917 call store_aes_result 
+0x71fb 030918 arg mem_aes_cmac_m_last ,contr 
+0x71fc 030919 call load_data128 
+0x71fd 030920 call aes_init 
+0x71fe 030921 arg mem_aes_cmac_temp ,contr 
+0x71ff 030922 call load_data128 
+0x7200 030923 branch do_aes_cbc 
+:      030927 load_inverse_result:
+0x7201 030929 copy contw ,rega 
+0x7202 030930 call store_aes_result 
+0x7203 030932 arg 16 ,loopcnt 
+0x7204 030933 branch inverse_data 
+:      030935 store_inverse_k:
+0x7205 030936 arg mem_aes_cmac_k ,contw 
+0x7206 030937 call memcpy16 
+:      030938 inverse_k:
+0x7207 030939 arg 16 ,loopcnt 
+0x7208 030940 arg mem_aes_cmac_k ,rega 
+0x7209 030941 branch inverse_data 
+:      030943 inverse_memdat:
+0x720a 030944 fetch 1 ,mem_aes_cmac_data_length 
+0x720b 030945 copy pdata ,loopcnt 
+0x720c 030946 arg memdat ,rega 
+0x720d 030947 branch inverse_data 
+:      030949 bn_lshift_0_inverse:
+0x720e 030950 ifetch 1 ,rega 
+0x720f 030951 lshift pdata ,pdata 
+0x7210 030952 isolate1 0 ,regc 
+0x7211 030953 setflag true ,0 ,pdata 
+0x7212 030954 isolate1 8 ,pdata 
+0x7213 030955 setflag true ,0 ,regc 
+0x7214 030956 istore 1 ,rega 
+0x7215 030957 increase -1 ,rega 
+0x7216 030958 loop bn_lshift_0_inverse 
+0x7217 030959 rtn 
+:      030961 function_aes_cmac_k1_inverse:
+0x7218 030962 arg mem_aes_cmac_k1 ,rega 
+:      030963 function_aes_cmac_inverse_common:
+0x7219 030964 increase 15 ,rega 
+0x721a 030965 force 16 ,loopcnt 
+0x721b 030966 force 0 ,regc 
+0x721c 030967 branch bn_lshift_0_inverse 
+:      030969 function_aes_cmac_k2_inverse:
+0x721d 030970 arg mem_aes_cmac_k2 ,rega 
+0x721e 030971 branch function_aes_cmac_inverse_common 
+:      030974 function_aes_cmac_generate_subkey:
+0x721f 030975 arg mem_aes_cmac_k ,contr 
+0x7220 030976 call load_key 
+0x7221 030979 force regidx_xor ,regext_index 
+0x7222 030980 call aes_clear 
+0x7223 030981 call aes_clear_data 
+0x7224 030982 call do_aes_ocb 
+0x7225 030987 arg mem_aes_cmac_k1 ,contw 
+0x7226 030988 call store_aes_result 
+:      030989 function_aes_cmac_k1:
+0x7227 030990 bpatchx patch3b_6 ,mem_patch3b 
+0x7228 030991 fetch 1 ,mem_aes_cmac_k1 
+0x7229 030992 isolate1 7 ,pdata 
+0x722a 030993 nbranch function_aes_cmac_k1_0 ,true 
+0x722b 030994 call function_aes_cmac_k1_inverse 
+0x722c 030997 arg mem_aes_cmac_k1 ,regc 
+0x722d 030999 arg mem_aes_cmac_k1 ,contw 
+0x722e 031002 call function_aes_cmac_xor_rb 
+0x722f 031003 branch function_aes_cmac_k2 
+:      031004 function_aes_cmac_k1_0:
+0x7230 031005 call function_aes_cmac_k1_inverse 
+:      031006 function_aes_cmac_k2:
+0x7231 031008 arg mem_aes_cmac_k1 ,contr 
+0x7232 031009 arg mem_aes_cmac_k2 ,contw 
+0x7233 031010 call memcpy16 
+0x7234 031011 fetch 1 ,mem_aes_cmac_k2 
+0x7235 031012 isolate1 7 ,pdata 
+0x7236 031013 nbranch function_aes_cmac_k2_inverse ,true 
+0x7237 031014 call function_aes_cmac_k2_inverse 
+0x7238 031016 arg mem_aes_cmac_k2 ,regc 
+0x7239 031018 arg mem_aes_cmac_k2 ,contw 
+:      031024 function_aes_cmac_xor_rb:
+0x723a 031025 arg 3 ,loopcnt 
+:      031026 function_aes_cmac_xor_rb_loop:
+0x723b 031027 arg 0 ,temp 
+0x723c 031028 call function_aes_cmac_xor_loop_common 
+0x723d 031029 increase 4 ,regc 
+0x723e 031030 loop function_aes_cmac_xor_rb_loop 
+0x723f 031031 arg 0x8700 ,temp 
+0x7240 031032 lshift16 temp ,temp 
+:      031033 function_aes_cmac_xor_loop_common:
+0x7241 031034 ifetch 4 ,regc 
+0x7242 031035 ixor temp ,pdata 
+0x7243 031036 istore 4 ,contw 
+0x7244 031037 rtn 
+:      031043 function_aes_cmac_padding:
+0x7245 031044 bpatchx patch3b_7 ,mem_patch3b 
+0x7246 031045 arg 16 ,loopcnt 
+0x7247 031046 arg 0 ,pdata 
+:      031047 function_aes_cmac_padding_loop:
+0x7248 031048 isub rega ,null 
+0x7249 031049 branch function_aes_cmac_padding_beq_length ,zero 
+0x724a 031050 branch function_aes_cmac_padding_big_length ,positive 
+0x724b 031051 ifetcht 1 ,contr 
+0x724c 031052 istoret 1 ,contw 
+:      031053 function_aes_cmac_padding_loop2:
+0x724d 031054 increase 1 ,pdata 
+0x724e 031055 loop function_aes_cmac_padding_loop 
+0x724f 031056 rtn 
+:      031057 function_aes_cmac_padding_beq_length:
+0x7250 031058 arg 0x80 ,temp 
+:      031059 function_aes_cmac_padding_common:
+0x7251 031060 istoret 1 ,contw 
+0x7252 031061 branch function_aes_cmac_padding_loop2 
+:      031063 function_aes_cmac_padding_big_length:
+0x7253 031064 arg 0 ,temp 
+0x7254 031065 branch function_aes_cmac_padding_common 
+:      031068 generate_kinit:
+0x7255 031069 call function_e22 
+0x7256 031070 arg mem_input_store ,contr 
+0x7257 031071 arg mem_kinit ,contw 
+0x7258 031072 branch memcpy16 
+:      031075 function_e21:
+0x7259 031076 disable user 
+0x725a 031077 call function_expand 
+0x725b 031078 arg mem_random_number ,contr 
+0x725c 031079 arg mem_x ,contw 
+0x725d 031080 force 15 ,loopcnt 
+0x725e 031081 call memcpy 
+0x725f 031082 ifetch 1 ,contr 
+0x7260 031083 xor_into 6 ,pdata 
+0x7261 031084 istore 1 ,contw 
+0x7262 031085 setarg mem_y 
+0x7263 031086 store 2 ,memp_ar_input 
+0x7264 031087 setarg mem_x 
+0x7265 031088 store 2 ,memp_ar_key 
+0x7266 031089 set1 mark_ar2 ,mark 
+0x7267 031090 branch function_ar 
+:      031094 function_e22:
+0x7268 031095 fetcht 1 ,mem_pin_length 
+0x7269 031096 force 16 ,regb 
+0x726a 031097 add temp ,6 ,regc 
+0x726b 031098 sub regc ,16 ,null 
+0x726c 031099 branch function_e22_pin_init ,positive 
+0x726d 031100 force 16 ,regc 
+:      031101 function_e22_pin_init:
+0x726e 031102 arg mem_x ,contw 
+:      031103 function_e22_genx_pin:
+0x726f 031104 arg mem_pin ,contr 
+0x7270 031105 copy temp ,loopcnt 
+0x7271 031106 disable user 
+:      031107 function_e22_genx_loop:
+0x7272 031108 ifetch 1 ,contr 
+0x7273 031109 istore 1 ,contw 
+0x7274 031110 increase -1 ,regb 
+0x7275 031111 branch function_e22_genx_end ,zero 
+0x7276 031112 loop function_e22_genx_loop 
+0x7277 031113 branch function_e22_genx_pin ,user 
+0x7278 031114 enable user 
+0x7279 031115 force 6 ,loopcnt 
+0x727a 031116 copy rega ,contr 
+0x727b 031117 branch function_e22_genx_loop 
+:      031118 function_e22_genx_end:
+0x727c 031119 arg mem_random_number ,contr 
+0x727d 031120 arg mem_y ,contw 
+0x727e 031121 call memcpy16 
+0x727f 031122 fetch 1 ,mem_y15 
+0x7280 031123 ixor regc ,pdata 
+0x7281 031124 store 1 ,mem_y15 
+0x7282 031125 setarg mem_y 
+0x7283 031126 store 2 ,memp_ar_input 
+0x7284 031127 setarg mem_x 
+0x7285 031128 store 2 ,memp_ar_key 
+0x7286 031129 set1 mark_ar2 ,mark 
+0x7287 031130 branch function_ar 
+:      031135 function_e1:
+0x7288 031136 disable user 
+0x7289 031137 call function_expand 
+0x728a 031138 branch function_hash 
+:      031140 function_e3:
+0x728b 031141 arg mem_aco ,rega 
+0x728c 031142 enable user 
+0x728d 031143 call function_expand 
+0x728e 031144 call function_hash 
+0x728f 031145 arg mem_input_store ,contr 
+0x7290 031146 arg mem_kc ,contw 
+0x7291 031147 branch memcpy16 
+:      031150 function_hash:
+0x7292 031151 setarg mem_random_number 
+0x7293 031152 store 2 ,memp_ar_input 
+0x7294 031153 setarg mem_link_key 
+0x7295 031154 store 2 ,memp_ar_key 
+0x7296 031155 set0 mark_ar2 ,mark 
+0x7297 031156 call function_ar 
+0x7298 031157 arg mem_input_store ,rega 
+0x7299 031158 arg mem_random_number ,regb 
+0x729a 031159 arg mem_x ,contw 
+0x729b 031160 call xor16 
+0x729c 031161 arg mem_x ,rega 
+0x729d 031162 arg mem_y ,regb 
+0x729e 031163 copy regb ,contw 
+0x729f 031164 enable user 
+0x72a0 031165 call add16 
+0x72a1 031166 call key_offset 
+0x72a2 031167 setarg mem_y 
+0x72a3 031168 store 2 ,memp_ar_input 
+0x72a4 031169 setarg mem_x 
+0x72a5 031170 store 2 ,memp_ar_key 
+0x72a6 031171 set1 mark_ar2 ,mark 
+0x72a7 031172 branch function_ar 
+:      031176 function_ar:
+0x72a8 031177 jam 0 ,mem_ar_hround 
+0x72a9 031178 fetch 2 ,memp_ar_key 
+0x72aa 031179 iforce contr 
+0x72ab 031180 arg mem_key_store ,contw 
+0x72ac 031181 call memcpy16 
+0x72ad 031182 fetch 2 ,memp_ar_input 
+0x72ae 031183 iforce contr 
+0x72af 031184 arg mem_input_store ,contw 
+0x72b0 031185 call memcpy16 
+:      031187 function_ar_loop:
+0x72b1 031188 call key_scheduling 
+0x72b2 031189 disable user 
+0x72b3 031190 bmark0 mark_ar2 ,function_ar_original 
+0x72b4 031191 fetch 1 ,mem_ar_hround 
+0x72b5 031192 bne 4 ,function_ar_original 
+0x72b6 031193 fetch 2 ,memp_ar_input 
+0x72b7 031194 iforce regb 
+0x72b8 031195 call xor_mod32_ar2 
+:      031196 function_ar_original:
+0x72b9 031197 call xor_mod32 
+0x72ba 031198 call el_boxes 
+0x72bb 031199 fetch 1 ,mem_ar_hround 
+0x72bc 031200 increase 1 ,pdata 
+0x72bd 031201 store 1 ,mem_ar_hround 
+0x72be 031203 call key_scheduling 
+0x72bf 031204 enable user 
+0x72c0 031205 call xor_mod32 
+0x72c1 031206 call pht 
+0x72c2 031207 call permute 
+0x72c3 031208 call pht 
+0x72c4 031209 call permute 
+0x72c5 031210 call pht 
+0x72c6 031211 call permute 
+0x72c7 031212 call pht 
+0x72c8 031213 fetch 1 ,mem_ar_hround 
+0x72c9 031214 increase 1 ,pdata 
+0x72ca 031215 store 1 ,mem_ar_hround 
+0x72cb 031216 bne 16 ,function_ar_loop 
+0x72cc 031217 call key_scheduling 
+0x72cd 031218 disable user 
+0x72ce 031219 branch xor_mod32 
+:      031223 key_scheduling:
+0x72cf 031224 fetch 1 ,mem_ar_hround 
+0x72d0 031225 arg mem_key_store ,contr 
+0x72d1 031226 branch key_sched_zero ,blank 
+0x72d2 031227 iforce regb 
+0x72d3 031228 force 17 ,loopcnt 
+0x72d4 031229 copy contr ,contw 
+:      031230 key_rotateloop:
+0x72d5 031231 ifetch 1 ,contr 
+0x72d6 031232 lshift3 pdata ,temp 
+0x72d7 031233 rshift2 pdata ,pdata 
+0x72d8 031234 rshift3 pdata ,pdata 
+0x72d9 031235 ior temp ,pdata 
+0x72da 031236 istore 1 ,contw 
+0x72db 031237 loop key_rotateloop 
+0x72dc 031238 setarg mem_key_store 
+0x72dd 031239 iadd regb ,contr 
+0x72de 031240 force 16 ,loopcnt 
+0x72df 031241 arg mem_round_key ,contw 
+:      031242 key_select_octet_loop:
+0x72e0 031243 ifetch 1 ,contr 
+0x72e1 031244 istore 1 ,contw 
+0x72e2 031245 compare mem_key_store_end ,contr ,0xff 
+0x72e3 031246 nbranch key_select_octet_nwrap ,true 
+0x72e4 031247 increase -17 ,contr 
+:      031248 key_select_octet_nwrap:
+0x72e5 031249 loop key_select_octet_loop 
+0x72e6 031250 force 0 ,rega 
+0x72e7 031251 add regb ,-1 ,regc 
+0x72e8 031252 lshift2 regc ,regc 
+0x72e9 031253 lshift2 regc ,regc 
+0x72ea 031254 call enable_authrom 
+0x72eb 031255 setarg mem_b_box 
+0x72ec 031256 iadd regc ,regc 
+0x72ed 031257 arg mem_round_key ,contw 
+0x72ee 031258 force 16 ,loopcnt 
+:      031259 bias_round_key_loop:
+0x72ef 031260 ifetcht 1 ,regc 
+0x72f0 031261 ifetch 1 ,contw 
+0x72f1 031262 iadd temp ,pdata 
+0x72f2 031263 istore 1 ,contw 
+0x72f3 031264 increase 1 ,regc 
+0x72f4 031265 loop bias_round_key_loop 
+0x72f5 031266 branch disable_authrom 
+:      031268 key_sched_zero:
+0x72f6 031269 force 16 ,loopcnt 
+0x72f7 031270 force 0 ,temp 
+:      031271 create_byte_16_loop:
+0x72f8 031272 ifetch 1 ,contr 
+0x72f9 031273 ixor temp ,temp 
+0x72fa 031274 loop create_byte_16_loop 
+0x72fb 031275 deposit temp 
+0x72fc 031276 istore 1 ,contr 
+0x72fd 031277 arg mem_key_store ,contr 
+0x72fe 031278 arg mem_round_key ,contw 
+0x72ff 031279 branch memcpy16 
+:      031281 xor_mod32:
+0x7300 031282 arg mem_round_key ,regb 
+:      031283 xor_mod32_ar2:
+0x7301 031284 force 16 ,loopcnt 
+0x7302 031285 arg mem_input_store ,rega 
+0x7303 031286 copy rega ,contw 
+:      031287 xor_mod32_loop:
+0x7304 031288 ifetcht 1 ,rega 
+0x7305 031289 ifetch 1 ,regb 
+0x7306 031290 ixor temp ,alarm 
+0x7307 031291 and loopcnt ,3 ,regc 
+0x7308 031292 nbranch xor_mod32_invert ,user 
+0x7309 031293 xor_into 3 ,regc 
+:      031294 xor_mod32_invert:
+0x730a 031295 sub regc ,1 ,regc 
+0x730b 031296 branch xor_even ,positive 
+0x730c 031297 iadd temp ,alarm 
+:      031298 xor_even:
+0x730d 031299 deposit alarm 
+0x730e 031300 istore 1 ,contw 
+0x730f 031301 increase 1 ,rega 
+0x7310 031302 increase 1 ,regb 
+0x7311 031303 loop xor_mod32_loop 
+0x7312 031304 rtn 
+:      031306 el_boxes:
+0x7313 031307 call enable_authrom 
+0x7314 031308 force 16 ,loopcnt 
+0x7315 031309 arg mem_input_store ,rega 
+:      031310 el_box_loop:
+0x7316 031311 ifetch 1 ,rega 
+0x7317 031312 arg mem_e_box ,contr 
+0x7318 031313 and loopcnt ,3 ,regc 
+0x7319 031314 sub regc ,1 ,null 
+0x731a 031315 branch e_boxes ,positive 
+0x731b 031316 arg mem_l_box ,contr 
+:      031317 e_boxes:
+0x731c 031318 iadd contr ,contr 
+0x731d 031319 ifetch 1 ,contr 
+0x731e 031320 istore 1 ,rega 
+0x731f 031321 increase 1 ,rega 
+0x7320 031322 loop el_box_loop 
+0x7321 031323 branch disable_authrom 
+:      031325 pht:
+0x7322 031326 force 8 ,loopcnt 
+0x7323 031327 arg mem_input_store ,contr 
+0x7324 031328 copy contr ,contw 
+:      031329 pht_loop:
+0x7325 031330 ifetch 1 ,contr 
+0x7326 031331 iforce rega 
+0x7327 031332 ifetch 1 ,contr 
+0x7328 031333 iforce regb 
+0x7329 031334 lshift rega ,pdata 
+0x732a 031335 iadd regb ,pdata 
+0x732b 031336 istore 1 ,contw 
+0x732c 031337 deposit rega 
+0x732d 031338 iadd regb ,pdata 
+0x732e 031339 istore 1 ,contw 
+0x732f 031340 loop pht_loop 
+0x7330 031341 rtn 
+:      031344 permute:
+0x7331 031345 setarg 0x8ae42c 
+0x7332 031346 iforce temp 
+0x7333 031347 force 7 ,loopcnt 
+0x7334 031348 call permute_exchange 
+0x7335 031349 setarg 0xd751b 
+0x7336 031350 iforce temp 
+0x7337 031351 force 5 ,loopcnt 
+0x7338 031352 call permute_exchange 
+0x7339 031353 fetch 1 ,mem_input_store + 15 
+0x733a 031354 iforce rega 
+0x733b 031355 fetch 1 ,mem_input_store + 3 
+0x733c 031356 store 1 ,mem_input_store + 15 
+0x733d 031357 deposit rega 
+0x733e 031358 store 1 ,mem_input_store + 3 
+0x733f 031359 rtn 
+:      031361 permute_exchange:
+0x7340 031362 and temp ,0xf ,regb 
+:      031363 permute_loop:
+0x7341 031364 and temp ,0xf ,pdata 
+0x7342 031365 arg mem_input_store ,contw 
+0x7343 031366 iadd contw ,contw 
+0x7344 031367 ifetch 1 ,contw 
+0x7345 031368 iforce regc 
+0x7346 031369 deposit rega 
+0x7347 031370 istore 1 ,contw 
+0x7348 031371 copy regc ,rega 
+0x7349 031372 rshift4 temp ,temp 
+0x734a 031373 loop permute_loop 
+0x734b 031374 setarg mem_input_store 
+0x734c 031375 iadd regb ,contw 
+0x734d 031376 deposit rega 
+0x734e 031377 istore 1 ,contw 
+0x734f 031378 rtn 
+:      031380 add16:
+0x7350 031381 enable user 
+0x7351 031382 branch xor_add16 
+:      031384 xor16:
+0x7352 031385 disable user 
+:      031386 xor_add16:
+0x7353 031387 force 16 ,loopcnt 
+:      031388 xoradd_loop:
+0x7354 031389 ifetcht 1 ,rega 
+0x7355 031390 ifetch 1 ,regb 
+0x7356 031391 branch xoradd_add ,user 
+0x7357 031392 ixor temp ,pdata 
+0x7358 031393 branch xoradd_store 
+:      031394 xoradd_add:
+0x7359 031395 iadd temp ,pdata 
+:      031396 xoradd_store:
+0x735a 031397 istore 1 ,contw 
+0x735b 031398 increase 1 ,rega 
+0x735c 031399 increase 1 ,regb 
+0x735d 031400 loop xoradd_loop 
+0x735e 031401 rtn 
+:      031404 function_expand:
+0x735f 031405 arg mem_y ,contw 
+0x7360 031406 ifetch 6 ,rega 
+0x7361 031407 istore 6 ,contw 
+0x7362 031408 branch expand_12 ,user 
+0x7363 031409 ifetch 6 ,rega 
+0x7364 031410 branch expand_cont 
+:      031411 expand_12:
+0x7365 031412 ifetch 6 ,contr 
+:      031413 expand_cont:
+0x7366 031414 istore 6 ,contw 
+0x7367 031415 ifetch 4 ,rega 
+0x7368 031416 istore 4 ,contw 
+0x7369 031417 rtn 
+:      031419 key_offset:
+0x736a 031420 arg mem_link_key ,contr 
+0x736b 031421 arg mem_x ,contw 
+0x736c 031422 arg 0 ,temp 
+0x736d 031423 setarg 0x8395a7 
+0x736e 031424 call concatenate_temp24 
+0x736f 031425 setarg 0xb3c1df 
+0x7370 031426 call concatenate_temp24 
+0x7371 031427 setarg 0xe5e9 
+0x7372 031428 call concatenate_temp16 
+0x7373 031429 copy temp ,regab 
+0x7374 031430 disable user 
+0x7375 031431 call key_addxor 
+0x7376 031432 copy regab ,temp 
+0x7377 031433 enable user 
+0x7378 031434 branch key_addxor 
+:      031436 key_addxor:
+0x7379 031437 force 8 ,loopcnt 
+:      031438 key_addxor_loop:
+0x737a 031439 ifetch 1 ,contr 
+0x737b 031440 compare 1 ,loopcnt ,1 
+0x737c 031441 branch key_high ,user 
+0x737d 031442 branch key_xor ,true 
+:      031443 key_add:
+0x737e 031444 iadd temp ,pdata 
+0x737f 031445 branch key_store 
+:      031446 key_high:
+0x7380 031447 branch key_add ,true 
+:      031448 key_xor:
+0x7381 031449 ixor temp ,pdata 
+:      031450 key_store:
+0x7382 031451 istore 1 ,contw 
+0x7383 031452 rshift8 temp ,temp 
+0x7384 031453 loop key_addxor_loop 
+0x7385 031454 rtn 
+:      031456 copy_aco:
+0x7386 031457 fetch 6 ,mem_input_store + 4 
+0x7387 031458 store 6 ,mem_aco 
+0x7388 031459 ifetch 6 ,contr 
+0x7389 031460 istore 6 ,contw 
+0x738a 031461 rtn 
+:      031463 concatenate_temp24:
+0x738b 031464 lshift8 temp ,temp 
+:      031465 concatenate_temp16:
+0x738c 031466 lshift16 temp ,temp 
+0x738d 031467 ior temp ,temp 
+0x738e 031468 rtn 
+:      031472 loop1:
+0x738f 031473 branch loop1 
+:      031477 generate_stk:
+0x7390 031478 bpatchx patch3c_0 ,mem_patch3c 
+0x7391 031479 call function_s1 
+0x7392 031480 arg mem_le_ltk ,contw 
+0x7393 031481 branch store_aes_result 
+:      031484 authenticate_rconfirm:
+0x7394 031485 arg mem_le_srand ,contw 
+0x7395 031486 branch authenticate_mconfirm ,master 
+0x7396 031487 arg mem_le_mrand ,contw 
+:      031488 authenticate_mconfirm:
+0x7397 031489 copy contr ,rega 
+0x7398 031490 call memcpy16 
+0x7399 031491 call function_c1 
+0x739a 031492 arg mem_le_rconfirm ,contr 
+0x739b 031493 branch compare_res 
+:      031495 generate_confirm:
+0x739c 031496 arg mem_le_mrand ,rega 
+0x739d 031497 branch generate_mrand ,master 
+0x739e 031498 arg mem_le_srand ,rega 
+:      031499 generate_mrand:
+0x739f 031500 copy rega ,contw 
+0x73a0 031501 call generate_random 
+0x73a1 031502 branch function_c1 
+:      031504 generate_sk:
+0x73a2 031505 arg mem_le_skdm ,contr 
+0x73a3 031506 call load_data128 
+0x73a4 031507 arg mem_le_ltk ,contr 
+0x73a5 031508 call load_regext 
+0x73a6 031509 force 0x38 ,aes_ctrl 
+0x73a7 031510 force 0x0 ,aes_ctrl 
+0x73a8 031511 call wait_aes 
+0x73a9 031512 arg mem_le_sk ,contw 
+0x73aa 031513 branch store_aes_result 
+:      031516 first_block_counter:
+0x73ab 031517 force 0x49 ,pdata 
+0x73ac 031518 branch first_block 
+:      031519 first_block_data:
+0x73ad 031520 force 1 ,pdata 
+:      031521 first_block:
+0x73ae 031522 force regidx_data ,regext_index 
+0x73af 031523 lshift8 temp ,regext 
+0x73b0 031524 ior regext ,regext 
+0x73b1 031525 increase 1 ,regext_index 
+0x73b2 031526 rshift8 temp ,regext 
+0x73b3 031527 rshift16 regext ,regext 
+0x73b4 031528 fetch 2 ,mem_le_ivm 
+0x73b5 031529 lshift16 ,pdata ,pdata 
+0x73b6 031530 ior regext ,regext 
+0x73b7 031531 increase 1 ,regext_index 
+0x73b8 031532 ifetch 4 ,contr 
+0x73b9 031533 iforce regext 
+0x73ba 031534 increase 1 ,regext_index 
+0x73bb 031535 ifetch 2 ,contr 
+0x73bc 031536 byteswap rega ,regext 
+0x73bd 031537 lshift16 regext ,regext 
+0x73be 031538 ior regext ,regext 
+0x73bf 031539 increase 1 ,regext_index 
+0x73c0 031540 rtn 
+:      031544 generate_mic:
+0x73c1 031545 add regc ,1 ,contr 
+0x73c2 031546 ifetch 1 ,contr 
+0x73c3 031547 iforce rega 
+0x73c4 031548 call first_block_counter 
+0x73c5 031549 call do_aes_ocb 
+0x73c6 031551 force regidx_data ,regext_index 
+0x73c7 031552 ifetch 1 ,regc 
+0x73c8 031553 and_into 0x3 ,pdata 
+0x73c9 031554 lshift16 pdata ,regext 
+0x73ca 031555 set1 8 ,regext 
+0x73cb 031556 call clear_hidata 
+0x73cc 031557 call do_aes_cbc 
+0x73cd 031559 copy rega ,loopcnt 
+0x73ce 031560 add regc ,2 ,contr 
+0x73cf 031561 call padding_data 
+:      031562 generate_mic_loop:
+0x73d0 031563 call aes_load_data 
+0x73d1 031564 call do_aes_cbc 
+0x73d2 031565 deposit loopcnt 
+0x73d3 031566 branch generate_mic_end ,blank 
+0x73d4 031567 branch generate_mic_loop 
+:      031568 generate_mic_end:
+0x73d5 031569 force regidx_result ,regext_index 
+0x73d6 031570 deposit regext 
+0x73d7 031571 store 4 ,mem_le_mic 
+0x73d8 031572 rtn 
+:      031574 aes_crypt_data:
+0x73d9 031575 increase 1 ,rega 
+0x73da 031576 call first_block_data 
+0x73db 031577 copy regc ,contr 
+0x73dc 031578 call aes_load_xor 
+0x73dd 031579 call do_aes_ctr 
+0x73de 031580 call store_enc_data 
+0x73df 031581 increase 16 ,regc 
+0x73e0 031582 increase -16 ,regb 
+0x73e1 031583 branch aes_crypt_data ,positive 
+0x73e2 031584 rtn 
+:      031586 le_encrypt:
+0x73e3 031587 bpatchx patch3c_1 ,mem_patch3c 
+0x73e4 031588 arg mem_le_txheader ,regc 
+0x73e5 031589 fetcht 5 ,mem_le_pcnt_tx 
+0x73e6 031590 call generate_mic 
+0x73e7 031591 force regidx_xor ,regext_index 
+0x73e8 031592 iforce regext 
+0x73e9 031593 force 0 ,rega 
+0x73ea 031594 call first_block_data 
+0x73eb 031595 call do_aes_ctr 
+0x73ec 031596 arg mem_le_txpayload ,regc 
+0x73ed 031597 fetch 1 ,mem_le_txlen 
+0x73ee 031598 add pdata ,-1 ,regb 
+0x73ef 031599 iadd regc ,contw 
+0x73f0 031600 force regidx_result ,regext_index 
+0x73f1 031601 deposit regext 
+0x73f2 031602 istore 4 ,contw 
+0x73f3 031603 call aes_crypt_data 
+0x73f4 031604 fetch 1 ,mem_le_txlen 
+0x73f5 031605 increase 4 ,pdata 
+0x73f6 031606 store 1 ,mem_le_txlen 
+0x73f7 031607 fetcht 5 ,mem_le_pcnt_tx 
+0x73f8 031608 increase 1 ,temp 
+0x73f9 031609 storet 5 ,mem_le_pcnt_tx 
+0x73fa 031610 rtn 
+:      031612 le_decrypt:
+0x73fb 031613 bpatchx patch3c_2 ,mem_patch3c 
+0x73fc 031614 fetch 1 ,mem_le_rxbuf + 1 
+0x73fd 031615 sub pdata ,20 ,null 
+0x73fe 031616 branch le_dec_cont ,positive 
+:      031617 le_dec_cont:
+0x73ff 031618 arg mem_le_rxbuf + 2 ,regc 
+0x7400 031619 add pdata ,-1 ,regb 
+0x7401 031620 increase -4 ,pdata 
+0x7402 031621 store 1 ,mem_le_rxbuf + 1 
+0x7403 031622 iadd regc ,contr 
+0x7404 031623 ifetch 4 ,contr 
+0x7405 031624 force regidx_xor ,regext_index 
+0x7406 031625 iforce regext 
+0x7407 031626 force 0 ,rega 
+0x7408 031627 fetcht 5 ,mem_le_pcnt_rx 
+0x7409 031628 call first_block_data 
+0x740a 031629 call do_aes_ctr 
+0x740b 031630 force regidx_result ,regext_index 
+0x740c 031631 deposit regext 
+0x740d 031632 store 4 ,mem_le_peer_mic 
+0x740e 031633 call aes_crypt_data 
+0x740f 031634 arg mem_le_rxbuf ,regc 
+0x7410 031635 call generate_mic 
+0x7411 031636 fetcht 4 ,mem_le_peer_mic 
+0x7412 031637 isub temp ,pdata 
+0x7413 031638 nrtn blank 
+0x7414 031639 fetch 4 ,mem_le_last_mic 
+0x7415 031640 isub temp ,pdata 
+0x7416 031641 rtn blank 
+0x7417 031642 storet 4 ,mem_le_last_mic 
+0x7418 031643 fetch 5 ,mem_le_pcnt_rx 
+0x7419 031644 increase 1 ,pdata 
+0x741a 031645 store 5 ,mem_le_pcnt_rx 
+0x741b 031646 force 0 ,pdata 
+0x741c 031647 rtn 
+:      031649 wait_aes:
+0x741d 031650 nbranch wait_aes ,aes_ready 
+0x741e 031651 rtn 
+:      031653 do_aes_ocb:
+0x741f 031654 force 0x30 ,aes_ctrl 
+0x7420 031655 force 0x0 ,aes_ctrl 
+0x7421 031656 branch wait_aes 
+:      031658 do_aes_cbc:
+0x7422 031659 force 0x32 ,aes_ctrl 
+0x7423 031660 force 0x2 ,aes_ctrl 
+0x7424 031661 branch wait_aes 
+:      031663 do_aes_ctr:
+0x7425 031664 force 0x34 ,aes_ctrl 
+0x7426 031665 force 0x4 ,aes_ctrl 
+0x7427 031666 branch wait_aes 
+:      031669 aes_init:
+0x7428 031670 force 1 ,aes_ctrl 
+0x7429 031671 force 0 ,aes_ctrl 
+0x742a 031672 rtn 
+:      031673 function_s1:
+0x742b 031674 force regidx_data ,regext_index 
+0x742c 031675 fetch 4 ,mem_le_mrand 
+0x742d 031676 iforce regext 
+0x742e 031677 increase 1 ,regext_index 
+0x742f 031678 ifetch 4 ,contr 
+0x7430 031679 iforce regext 
+0x7431 031680 increase 1 ,regext_index 
+0x7432 031681 fetch 4 ,mem_le_srand 
+0x7433 031682 iforce regext 
+0x7434 031683 increase 1 ,regext_index 
+0x7435 031684 ifetch 4 ,contr 
+0x7436 031685 iforce regext 
+0x7437 031686 increase 1 ,regext_index 
+0x7438 031687 call aes_clear 
+0x7439 031688 increase -4 ,regext_index 
+0x743a 031689 fetch 4 ,mem_le_tk 
+0x743b 031690 copy pdata ,regext 
+0x743c 031691 increase 4 ,regext_index 
+0x743d 031692 force 0x38 ,aes_ctrl 
+0x743e 031693 force 0x8 ,aes_ctrl 
+0x743f 031694 branch wait_aes 
+:      031697 function_c1:
+0x7440 031698 bpatchx patch3c_3 ,mem_patch3c 
+0x7441 031699 fetch 6 ,mem_le_lap 
+0x7442 031700 fetcht 6 ,mem_le_plap 
+0x7443 031701 branch function_c1_master ,master 
+0x7444 031702 fetch 6 ,mem_le_plap 
+0x7445 031703 fetcht 6 ,mem_le_lap 
+:      031704 function_c1_master:
+0x7446 031705 force regidx_xor ,regext_index 
+0x7447 031706 copy temp ,regext 
+0x7448 031707 increase 1 ,regext_index 
+0x7449 031708 rshift32 temp ,regext 
+0x744a 031709 lshift16 pdata ,pdata 
+0x744b 031710 ior regext ,regext 
+0x744c 031711 increase 1 ,regext_index 
+0x744d 031712 rshift32 pdata ,regext 
+0x744e 031713 increase 1 ,regext_index 
+0x744f 031714 force 0 ,regext 
+0x7450 031715 force 0 ,pdata 
+0x7451 031716 fetch 1 ,mem_le_conn_peer_addr_type 
+0x7452 031717 fetcht 1 ,mem_le_adv_own_addr_type 
+0x7453 031718 nbranch function_c1_irat ,master 
+0x7454 031720 fetch 1 ,mem_le_conn_own_addr_type 
+0x7455 031721 fetcht 1 ,mem_le_conn_peer_addr_type 
+:      031722 function_c1_irat:
+0x7456 031723 store 1 ,mem_le_iat 
+0x7457 031724 storet 1 ,mem_le_rat 
+0x7458 031725 force regidx_data ,regext_index 
+0x7459 031726 arg mem_le_iat ,regb 
+0x745a 031727 force 4 ,loopcnt 
+:      031728 function_c1_loop1:
+0x745b 031729 ifetch 4 ,rega 
+0x745c 031730 ifetcht 4 ,regb 
+0x745d 031731 ixor temp ,regext 
+0x745e 031732 increase 1 ,regext_index 
+0x745f 031733 increase 4 ,rega 
+0x7460 031734 increase 4 ,regb 
+0x7461 031735 loop function_c1_loop1 
+0x7462 031736 call aes_clear 
+0x7463 031737 increase -4 ,regext_index 
+0x7464 031738 fetch 4 ,mem_le_tk 
+0x7465 031739 copy pdata ,regext 
+0x7466 031740 increase 4 ,regext_index 
+0x7467 031741 force 0x38 ,aes_ctrl 
+0x7468 031742 force 0xc ,aes_ctrl 
+0x7469 031743 call wait_aes 
+0x746a 031745 call aes_clear_data 
+0x746b 031746 force 0x3a ,aes_ctrl 
+0x746c 031747 force 0x8 ,aes_ctrl 
+0x746d 031748 branch wait_aes 
+:      031750 padding_data:
+0x746e 031751 compare 0 ,loopcnt ,3 
+0x746f 031752 rtn true 
+0x7470 031753 deposit contr 
+0x7471 031754 iadd loopcnt ,contw 
+0x7472 031755 force 0 ,pdata 
+:      031756 padding_loop:
+0x7473 031757 istore 1 ,contw 
+0x7474 031758 increase 1 ,loopcnt 
+0x7475 031759 compare 0 ,loopcnt ,3 
+0x7476 031760 rtn true 
+0x7477 031761 branch padding_loop 
+:      031763 aes_load_data:
+0x7478 031764 force regidx_data ,regext_index 
+:      031765 load_data_loop:
+0x7479 031766 deposit loopcnt 
+0x747a 031767 branch load_data_padding ,blank 
+0x747b 031768 ifetch 4 ,contr 
+0x747c 031769 increase -4 ,loopcnt 
+:      031770 load_data_padding:
+0x747d 031771 iforce regext 
+0x747e 031772 increase 1 ,regext_index 
+0x747f 031773 compare regidx_key ,regext_index ,0xf 
+0x7480 031774 rtn true 
+0x7481 031775 branch load_data_loop 
+:      031777 aes_load_xor:
+0x7482 031778 force regidx_xor ,regext_index 
+0x7483 031779 branch load_regext 
+:      031780 load_key:
+0x7484 031781 force regidx_key ,regext_index 
+0x7485 031782 branch load_regext 
+:      031783 load_data128:
+0x7486 031784 force regidx_data ,regext_index 
+:      031785 load_regext:
+0x7487 031786 force 4 ,loopcnt 
+:      031787 load_regext_loop:
+0x7488 031788 ifetch 4 ,contr 
+0x7489 031789 iforce regext 
+0x748a 031790 increase 1 ,regext_index 
+0x748b 031791 loop load_regext_loop 
+0x748c 031792 rtn 
+:      031794 load_sk:
+0x748d 031795 arg mem_le_sk ,contr 
+0x748e 031796 branch load_key 
+:      031798 clear_hidata:
+0x748f 031799 force 4 ,loopcnt 
+0x7490 031800 branch clear_data_rest 
+:      031802 aes_clear_data:
+0x7491 031803 force regidx_data ,regext_index 
+:      031804 aes_clear:
+0x7492 031805 force 4 ,loopcnt 
+:      031806 clear_loop:
+0x7493 031807 force 0 ,regext 
+:      031808 clear_data_rest:
+0x7494 031809 increase 1 ,regext_index 
+0x7495 031810 loop clear_loop 
+0x7496 031811 rtn 
+:      031813 store_aes_result:
+0x7497 031814 force regidx_result ,regext_index 
+0x7498 031815 force 4 ,loopcnt 
+:      031816 send_aes_result_loop:
+0x7499 031817 deposit regext 
+0x749a 031818 istore 4 ,contw 
+0x749b 031819 increase 1 ,regext_index 
+0x749c 031820 loop send_aes_result_loop 
+0x749d 031821 rtn 
+:      031823 store_enc_data:
+0x749e 031824 force regidx_result ,regext_index 
+0x749f 031825 copy regc ,contw 
+0x74a0 031826 add regb ,1 ,loopcnt 
+0x74a1 031827 sub loopcnt ,15 ,null 
+0x74a2 031828 branch store_enc_loop ,positive 
+0x74a3 031829 force 16 ,loopcnt 
+:      031830 store_enc_loop:
+0x74a4 031831 deposit regext 
+0x74a5 031832 sub loopcnt ,3 ,null 
+0x74a6 031833 branch store_enc_byte ,positive 
+0x74a7 031834 istore 4 ,contw 
+0x74a8 031835 increase -4 ,loopcnt 
+0x74a9 031836 rtn zero 
+0x74aa 031837 increase 1 ,regext_index 
+0x74ab 031838 branch store_enc_loop 
+:      031839 store_enc_byte:
+0x74ac 031840 istore 1 ,contw 
+0x74ad 031841 rshift8 pdata ,pdata 
+0x74ae 031842 loop store_enc_byte 
+0x74af 031843 rtn 
+:      031846 compare_res:
+0x74b0 031847 force regidx_result ,regext_index 
+0x74b1 031848 force 4 ,loopcnt 
+:      031849 compare_res_loop:
+0x74b2 031850 ifetch 4 ,contr 
+0x74b3 031851 isub regext ,null 
+0x74b4 031852 nrtn zero 
+0x74b5 031853 increase 1 ,regext_index 
+0x74b6 031854 loop compare_res_loop 
+0x74b7 031855 force 0 ,null 
+0x74b8 031856 rtn 
+:      031858 enable_authrom:
+0x74b9 031859 hfetch 1 ,core_clkoff 
+0x74ba 031860 set0 clock_off_auth_rom ,pdata 
+0x74bb 031861 hstore 1 ,core_clkoff 
+0x74bc 031862 rtn 
+:      031864 disable_authrom:
+0x74bd 031865 hfetch 1 ,core_clkoff 
+0x74be 031866 set1 clock_off_auth_rom ,pdata 
+0x74bf 031867 hstore 1 ,core_clkoff 
+0x74c0 031868 rtn 
+:      031870 init_memp:
+0x74c1 031871 arg mem_p ,contw 
+0x74c2 031872 setsect 0 ,0x3ffff 
+0x74c3 031873 setsect 1 ,0x3ffff 
+0x74c4 031874 setsect 2 ,0x3ffff 
+0x74c5 031875 setsect 3 ,0x3fbff 
+0x74c6 031876 istore 9 ,contw 
+0x74c7 031877 setsect 0 ,0x3ffff 
+0x74c8 031878 setsect 1 ,0x3ffff 
+0x74c9 031879 setsect 2 ,0x3ffff 
+0x74ca 031880 setsect 3 ,0x3ffff 
+0x74cb 031881 istore 9 ,contw 
+0x74cc 031882 setsect 0 ,0x3ffff 
+0x74cd 031883 setsect 1 ,0x3ffff 
+0x74ce 031884 setsect 2 ,0x3cfff 
+0x74cf 031885 setsect 3 ,0x3ffff 
+0x74d0 031886 istore 9 ,contw 
+0x74d1 031887 setsect 0 ,0x3ffff 
+0x74d2 031888 setsect 1 ,0x3ffff 
+0x74d3 031889 setsect 2 ,0x3ffef 
+0x74d4 031890 setsect 3 ,0x3ffff 
+0x74d5 031891 istore 9 ,contw 
+0x74d6 031892 setsect 0 ,0x3ffff 
+0x74d7 031893 setsect 1 ,0x3ffff 
+0x74d8 031894 setsect 2 ,0x3ffff 
+0x74d9 031895 setsect 3 ,0x3ffff 
+0x74da 031896 istore 9 ,contw 
+0x74db 031897 setsect 0 ,0x3ffff 
+0x74dc 031898 setsect 1 ,0x26c7f 
+0x74dd 031899 setsect 2 ,0x146b 
+0x74de 031900 setsect 3 ,0x37bb3 
+0x74df 031901 istore 9 ,contw 
+0x74e0 031902 setsect 0 ,0x1feb8 
+0x74e1 031903 setsect 1 ,0x10c12 
+0x74e2 031904 setsect 2 ,0x2b722 
+0x74e3 031905 setsect 3 ,0x29fa6 
+0x74e4 031906 istore 9 ,contw 
+0x74e5 031907 setsect 0 ,0xe70f 
+0x74e6 031908 setsect 1 ,0x16720 
+0x74e7 031909 setsect 2 ,0x519e 
+0x74e8 031910 setsect 3 ,0x19084 
+0x74e9 031911 istore 9 ,contw 
+0x74ea 031912 setsect 0 ,0x31012 
+0x74eb 031913 setsect 1 ,0x360bf 
+0x74ec 031914 setsect 2 ,0x3f0af 
+0x74ed 031915 setsect 3 ,0x3d3 
+0x74ee 031916 istore 9 ,contw 
+0x74ef 031917 setsect 0 ,0x3a188 
+0x74f0 031918 setsect 1 ,0x3ad0 
+0x74f1 031919 setsect 2 ,0x3cbf2 
+0x74f2 031920 setsect 3 ,0x243d9 
+0x74f3 031921 istore 9 ,contw 
+0x74f4 031922 setsect 0 ,0x2b030 
+0x74f5 031923 setsect 1 ,0x36a03 
+0x74f6 031924 setsect 2 ,0x11188 
+0x74f7 031925 setsect 3 ,0x1e520 
+0x74f8 031926 istore 9 ,contw 
+0x74f9 031927 setsect 0 ,0x3a11e 
+0x74fa 031928 setsect 1 ,0xfe5d 
+0x74fb 031929 setsect 2 ,0xdd57 
+0x74fc 031930 setsect 3 ,0x1ac93 
+0x74fd 031931 istore 9 ,contw 
+0x74fe 031932 setsect 0 ,0x11ed 
+0x74ff 031933 setsect 1 ,0x218c4 
+0x7500 031934 setsect 2 ,0x8da7 
+0x7501 031935 setsect 3 ,0x257ff 
+0x7502 031936 istore 9 ,contw 
+0x7503 031937 setsect 0 ,0x3192b 
+0x7504 031938 setsect 1 ,0x34641 
+0x7505 031939 setsect 2 ,0x1be0c 
+0x7506 031940 setsect 3 ,0x366ad 
+0x7507 031941 istore 9 ,contw 
+0x7508 031942 setsect 0 ,0x1f83 
+0x7509 031943 setsect 1 ,0x15a23 
+0x750a 031944 setsect 2 ,0x3f9b0 
+0x750b 031945 setsect 3 ,0x3949 
+0x750c 031946 istore 9 ,contw 
+0x750d 031947 setsect 0 ,0x13a51 
+0x750e 031948 setsect 1 ,0x153fd 
+0x750f 031949 setsect 2 ,0x3372a 
+0x7510 031950 setsect 3 ,0xf1bb 
+0x7511 031951 istore 9 ,contw 
+0x7512 031952 setsect 0 ,0x3ae85 
+0x7513 031953 setsect 1 ,0x1eed9 
+0x7514 031954 setsect 2 ,0x9e66 
+0x7515 031955 setsect 3 ,0x1a8 
+0x7516 031956 istore 8 ,contw 
+0x7517 031957 rtn 
+:      031961 init_memp_256:
+0x7518 031962 arg mem_p_256 ,contw 
+0x7519 031963 setsect 0 ,0x3ffff 
+0x751a 031964 setsect 1 ,0x3ffff 
+0x751b 031965 setsect 2 ,0x3ffff 
+0x751c 031966 setsect 3 ,0x3ffff 
+0x751d 031967 istore 9 ,contw 
+0x751e 031968 setsect 0 ,0x3ffff 
+0x751f 031969 setsect 1 ,0x3f 
+0x7520 031970 setsect 2 ,0x0 
+0x7521 031971 setsect 3 ,0x0 
+0x7522 031972 istore 9 ,contw 
+0x7523 031973 setsect 0 ,0x0 
+0x7524 031974 setsect 1 ,0x0 
+0x7525 031975 setsect 2 ,0x1000 
+0x7526 031976 setsect 3 ,0x0 
+0x7527 031977 istore 9 ,contw 
+0x7528 031978 setsect 0 ,0x3ff00 
+0x7529 031979 setsect 1 ,0x3ffff 
+0x752a 031980 setsect 2 ,0x3ffcf 
+0x752b 031981 setsect 3 ,0x3ffff 
+0x752c 031982 istore 9 ,contw 
+0x752d 031983 setsect 0 ,0x3ffff 
+0x752e 031984 setsect 1 ,0x3ffff 
+0x752f 031985 setsect 2 ,0x3ffff 
+0x7530 031986 setsect 3 ,0x3ff 
+0x7531 031987 istore 9 ,contw 
+0x7532 031988 setsect 0 ,0x0 
+0x7533 031989 setsect 1 ,0x0 
+0x7534 031990 setsect 2 ,0x0 
+0x7535 031991 setsect 3 ,0x0 
+0x7536 031992 istore 9 ,contw 
+0x7537 031993 setsect 0 ,0x10000 
+0x7538 031994 setsect 1 ,0x0 
+0x7539 031995 setsect 2 ,0x3f000 
+0x753a 031996 setsect 3 ,0x3ffff 
+0x753b 031997 istore 9 ,contw 
+0x753c 031998 setsect 0 ,0x296ff 
+0x753d 031999 setsect 1 ,0x22630 
+0x753e 032000 setsect 2 ,0x3945d 
+0x753f 032001 setsect 3 ,0x3d284 
+0x7540 032002 istore 9 ,contw 
+0x7541 032003 setsect 0 ,0x333a0 
+0x7542 032004 setsect 1 ,0x4b7a 
+0x7543 032005 setsect 2 ,0x37d8 
+0x7544 032006 setsect 3 ,0x3c9dc 
+0x7545 032007 istore 9 ,contw 
+0x7546 032008 setsect 0 ,0x3a440 
+0x7547 032009 setsect 1 ,0x1b958 
+0x7548 032010 setsect 2 ,0x38bce 
+0x7549 032011 setsect 3 ,0x1091f 
+0x754a 032012 istore 9 ,contw 
+0x754b 032013 setsect 0 ,0x2e12c 
+0x754c 032014 setsect 1 ,0x1f47c 
+0x754d 032015 setsect 2 ,0x356b1 
+0x754e 032016 setsect 3 ,0x2fd47 
+0x754f 032017 istore 9 ,contw 
+0x7550 032018 setsect 0 ,0x6837 
+0x7551 032019 setsect 1 ,0x2ed90 
+0x7552 032020 setsect 2 ,0x1ecec 
+0x7553 032021 setsect 3 ,0x1acc5 
+0x7554 032022 istore 9 ,contw 
+0x7555 032023 setsect 0 ,0x23357 
+0x7556 032024 setsect 1 ,0x18af3 
+0x7557 032025 setsect 2 ,0xf9e1 
+0x7558 032026 setsect 3 ,0x129f0 
+0x7559 032027 istore 9 ,contw 
+0x755a 032028 setsect 0 ,0x2e7eb 
+0x755b 032029 setsect 1 ,0x3e6e3 
+0x755c 032030 setsect 2 ,0x3e1a7 
+0x755d 032031 setsect 3 ,0x10b8b 
+0x755e 032032 istore 9 ,contw 
+0x755f 032033 setsect 0 ,0x24fe3 
+0x7560 032034 setsect 1 ,0x20ef 
+0x7561 032035 setsect 2 ,0x1b5a6 
+0x7562 032036 setsect 3 ,0xdc2f 
+0x7563 032037 istore 9 ,contw 
+0x7564 032038 setsect 0 ,0x13860 
+0x7565 032039 setsect 1 ,0x2bd69 
+0x7566 032040 setsect 2 ,0x391a 
+0x7567 032041 setsect 3 ,0x1b222 
+0x7568 032042 istore 9 ,contw 
+0x7569 032043 rtn 
+:      032046 publickey_init:
+0x756a 032047 fetch 1 ,mem_ssp_enable 
+0x756b 032048 nbranch sp_initialize ,blank 
+0x756c 032049 branch sp_initialize_256 
+:      032051 sp_calc_sequence_256_check:
+0x756d 032052 bpatchx patch3c_4 ,mem_patch3c 
+0x756e 032053 fetch 1 ,mem_ssp_enable 
+0x756f 032054 rtn blank 
+0x7570 032055 fetch 1 ,mem_sp_local_key_invalid 
+0x7571 032056 rtnne sp_key_valid 
+0x7572 032057 fetch 1 ,mem_le_secure_connect_enable 
+0x7573 032058 rtn blank 
+0x7574 032059 fetch 1 ,mem_le_sc_local_key_invalid 
+0x7575 032060 rtneq sp_key_valid_256 
+0x7576 032061 fetch 2 ,mem_ui_state_map 
+0x7577 032062 bbit1 ui_state_bt_connected ,stop_publickey_calc_256 
+0x7578 032063 fetch 1 ,mem_le_sc_calc 
+0x7579 032064 beq sp_calc_standby ,sp_initialize_256 
+0x757a 032065 rtn 
+:      032066 stop_publickey_calc_256:
+0x757b 032067 jam sp_calc_standby ,mem_le_sc_calc 
+0x757c 032068 rtn 
+:      032071 sp_initialize:
+0x757d 032072 bpatchx patch3c_5 ,mem_patch3c 
+0x757e 032073 fetch 1 ,mem_ssp_enable 
+0x757f 032074 branch ssp_disable ,blank 
+0x7580 032075 call ssp_enable 
+0x7581 032076 call sp_clear_flags 
+0x7582 032077 branch sp_pubkey_calc 
+:      032079 sp_clear_flags:
+0x7583 032080 setarg 0 
+0x7584 032081 store 8 ,mem_sp_state_start 
+0x7585 032082 store 4 ,mem_sp_flag_start 
+0x7586 032083 store 7 ,mem_sp_iocap_remote 
+0x7587 032084 rtn 
+:      032086 sp_generate_local_key:
+0x7588 032087 jam sp_flag_commit ,mem_sp_flag 
+0x7589 032088 branch sp_generate_local_key0 
+:      032089 sp_master_generate_local_key:
+0x758a 032090 fetch 1 ,mem_sp_local_key_invalid 
+0x758b 032091 beq sp_key_valid ,sp_dhkey_calc 
+0x758c 032092 branch assert 
+:      032093 sp_generate_local_key0:
+0x758d 032094 fetch 1 ,mem_sp_local_key_invalid 
+0x758e 032095 beq sp_key_valid ,sp_start_send_pubkey 
+0x758f 032096 branch sp_pubkey_calc 
+:      032098 sp_start_send_pubkey:
+0x7590 032099 call sp_dhkey_calc 
+0x7591 032100 fetch 1 ,mem_master_sp_state 
+0x7592 032101 nrtn blank 
+0x7593 032102 jam sp_stat_key_send ,mem_sp_state 
+0x7594 032103 rtn 
+:      032106 sp_calc_check_publickey_256:
+0x7595 032107 call sp_calc_b256 
+0x7596 032108 arg mem_le_pubkey_remote_y_256 ,rega 
+0x7597 032109 arg mem_t7_256 ,contw 
+0x7598 032110 call bn_sqrmod_256 
+0x7599 032111 arg mem_le_pubkey_remote_x_256 ,rega 
+0x759a 032112 arg mem_t2_256 ,contw 
+0x759b 032113 call bn_sqrmod_256 
+0x759c 032114 arg mem_t2_256 ,rega 
+0x759d 032115 arg mem_le_pubkey_remote_x_256 ,regb 
+0x759e 032116 arg mem_t2_256 ,contw 
+0x759f 032117 call bn_mulmod_256 
+0x75a0 032118 arg mem_a_256 ,rega 
+0x75a1 032119 arg mem_le_pubkey_remote_x_256 ,regb 
+0x75a2 032120 arg mem_t3_256 ,contw 
+0x75a3 032121 call bn_mulmod_256 
+0x75a4 032122 arg mem_t3_256 ,rega 
+0x75a5 032123 arg mem_t2_256 ,regb 
+0x75a6 032124 arg mem_t2_256 ,contw 
+0x75a7 032125 call bn_addmod_256 
+0x75a8 032126 arg mem_t0_256 ,rega 
+0x75a9 032127 arg mem_t2_256 ,regb 
+0x75aa 032128 arg mem_t0_256 ,contw 
+0x75ab 032129 call bn_addmod_256 
+0x75ac 032130 arg 32 ,loopcnt 
+0x75ad 032131 arg mem_t7_256 ,rega 
+0x75ae 032132 arg mem_t0_256 ,regb 
+0x75af 032133 branch string_compare 
+:      032135 sp_calc_b256:
+0x75b0 032136 arg mem_gy_256 ,rega 
+0x75b1 032137 arg mem_t0_256 ,contw 
+0x75b2 032138 call bn_sqrmod_256 
+0x75b3 032139 arg mem_gx_256 ,rega 
+0x75b4 032140 arg mem_t2_256 ,contw 
+0x75b5 032141 call bn_sqrmod_256 
+0x75b6 032142 arg mem_t2_256 ,rega 
+0x75b7 032143 arg mem_gx_256 ,regb 
+0x75b8 032144 arg mem_t2_256 ,contw 
+0x75b9 032145 call bn_mulmod_256 
+0x75ba 032146 arg mem_a_256 ,rega 
+0x75bb 032147 arg mem_gx_256 ,regb 
+0x75bc 032148 arg mem_t3_256 ,contw 
+0x75bd 032149 call bn_mulmod_256 
+0x75be 032150 arg mem_t3_256 ,rega 
+0x75bf 032151 arg mem_t2_256 ,regb 
+0x75c0 032152 arg mem_t2_256 ,contw 
+0x75c1 032153 call bn_addmod_256 
+0x75c2 032154 arg mem_t0_256 ,rega 
+0x75c3 032155 arg mem_t2_256 ,regb 
+0x75c4 032156 arg mem_t0_256 ,contw 
+0x75c5 032157 branch bn_submod_256 
+:      032159 sp_calc_check_publickey:
+0x75c6 032160 call sp_calc_b 
+0x75c7 032161 arg mem_sp_pubkey_remote_y ,rega 
+0x75c8 032162 arg mem_t7_256 ,contw 
+0x75c9 032163 call bn_sqrmod 
+0x75ca 032164 arg mem_sp_pubkey_remote_x ,rega 
+0x75cb 032165 arg mem_t2_256 ,contw 
+0x75cc 032166 call bn_sqrmod 
+0x75cd 032167 arg mem_t2_256 ,rega 
+0x75ce 032168 arg mem_sp_pubkey_remote_x ,regb 
+0x75cf 032169 arg mem_t2_256 ,contw 
+0x75d0 032170 call bn_mulmod 
+0x75d1 032171 arg mem_a ,rega 
+0x75d2 032172 arg mem_sp_pubkey_remote_x ,regb 
+0x75d3 032173 arg mem_t3_256 ,contw 
+0x75d4 032174 call bn_mulmod 
+0x75d5 032175 arg mem_t3_256 ,rega 
+0x75d6 032176 arg mem_t2_256 ,regb 
+0x75d7 032177 arg mem_t2_256 ,contw 
+0x75d8 032178 call bn_addmod 
+0x75d9 032179 arg mem_t0_256 ,rega 
+0x75da 032180 arg mem_t2_256 ,regb 
+0x75db 032181 arg mem_t0_256 ,contw 
+0x75dc 032182 call bn_addmod 
+0x75dd 032183 arg 24 ,loopcnt 
+0x75de 032184 arg mem_t7_256 ,rega 
+0x75df 032185 arg mem_t0_256 ,regb 
+0x75e0 032186 branch string_compare 
+:      032188 sp_calc_b:
+0x75e1 032189 arg mem_gy ,rega 
+0x75e2 032190 arg mem_t0_256 ,contw 
+0x75e3 032191 call bn_sqrmod 
+0x75e4 032192 arg mem_gx ,rega 
+0x75e5 032193 arg mem_t2_256 ,contw 
+0x75e6 032194 call bn_sqrmod 
+0x75e7 032195 arg mem_t2_256 ,rega 
+0x75e8 032196 arg mem_gx ,regb 
+0x75e9 032197 arg mem_t2_256 ,contw 
+0x75ea 032198 call bn_mulmod 
+0x75eb 032199 arg mem_a ,rega 
+0x75ec 032200 arg mem_gx ,regb 
+0x75ed 032201 arg mem_t3_256 ,contw 
+0x75ee 032202 call bn_mulmod 
+0x75ef 032203 arg mem_t3_256 ,rega 
+0x75f0 032204 arg mem_t2_256 ,regb 
+0x75f1 032205 arg mem_t2_256 ,contw 
+0x75f2 032206 call bn_addmod 
+0x75f3 032207 arg mem_t0_256 ,rega 
+0x75f4 032208 arg mem_t2_256 ,regb 
+0x75f5 032209 arg mem_t0_256 ,contw 
+0x75f6 032210 branch bn_submod 
+:      032213 sp_calculate_commitment:
+0x75f7 032214 fetch 1 ,mem_sp_calc 
+0x75f8 032215 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc 
+0x75f9 032216 call sp_local_random_key_generator 
+0x75fa 032217 arg mem_sp_prarm_stack ,contw 
+0x75fb 032218 setarg mem_sp_random_local_end 
+0x75fc 032219 istore 2 ,contw 
+0x75fd 032220 setarg mem_sp_pubkey_local_x_end 
+0x75fe 032221 istore 2 ,contw 
+0x75ff 032222 setarg mem_sp_pubkey_remote_x_end 
+0x7600 032223 istore 2 ,contw 
+0x7601 032224 branch sp_calculate_commitment0 
+:      032225 master_sp_calculate_commitment:
+0x7602 032226 arg mem_sp_prarm_stack ,contw 
+0x7603 032227 setarg mem_sp_random_remote_end 
+0x7604 032228 istore 2 ,contw 
+0x7605 032229 setarg mem_sp_pubkey_remote_x_end 
+0x7606 032230 istore 2 ,contw 
+0x7607 032231 setarg mem_sp_pubkey_local_x_end 
+0x7608 032232 istore 2 ,contw 
+:      032233 sp_calculate_commitment0:
+0x7609 032234 call function_f1 
+0x760a 032235 fetch 1 ,mem_master_sp_state 
+0x760b 032236 beq sp_stat_commit_calc ,master_sp_calculate_commitment0 
+0x760c 032237 jam sp_flag_commit ,mem_sp_flag 
+0x760d 032238 jam sp_stat_commit_send ,mem_sp_state 
+0x760e 032239 rtn 
+:      032240 master_sp_calculate_commitment0:
+0x760f 032241 jam sp_stat_commitment_compare ,mem_master_sp_state 
+0x7610 032242 call sp_master_generate_local_key 
+0x7611 032243 branch master_set_mem_master_sp_flag 
+:      032245 sp_local_random_key_generator:
+0x7612 032246 arg mem_sp_random_local ,contw 
+0x7613 032247 force 8 ,queue 
+0x7614 032248 branch random_generator 
+:      032250 sp_calculate_commitment_wait_dhkey_calc:
+0x7615 032251 jam sp_flag_commit ,mem_sp_flag 
+0x7616 032252 rtn 
+:      032254 sp_confirm_check:
+0x7617 032256 bpatchx patch3c_6 ,mem_patch3c 
+0x7618 032257 arg mem_addr_value ,contw 
+0x7619 032258 fetch 6 ,mem_lap 
+0x761a 032259 istore 6 ,contw 
+0x761b 032260 fetch 6 ,mem_plap 
+0x761c 032261 istore 6 ,contw 
+0x761d 032262 fetch 3 ,mem_sp_iocap_remote 
+0x761e 032263 istore 3 ,contw 
+0x761f 032265 call function_f3a 
+0x7620 032267 arg mem_sp_calc_result_high ,rega 
+0x7621 032268 arg mem_sp_check_result ,regb 
+0x7622 032269 force 4 ,queue 
+0x7623 032270 call compare4 
+0x7624 032271 nbranch sp_confirm_check_failed ,true 
+0x7625 032273 call sp_confirm_check_success 
+0x7626 032274 jam lmp_dhkey_check ,mem_lmi_opcode2 
+0x7627 032275 branch tid_set_reply 
+:      032277 sp_confirm_check_success:
+0x7628 032278 fetch 1 ,mem_master_sp_state 
+0x7629 032279 beq sp_stat_confirm_check ,sp_confirm_check_success_master 
+0x762a 032280 jam sp_stat_confirm_calc ,mem_sp_state 
+0x762b 032281 jam sp_flag_commit ,mem_sp_flag 
+0x762c 032282 jam lmp_accepted ,mem_lmo_opcode2 
+0x762d 032283 rtn 
+:      032284 sp_confirm_check_success_master:
+0x762e 032285 jam lmp_accepted ,mem_lmo_opcode2 
+0x762f 032286 jam sp_state_end ,mem_master_sp_state 
+0x7630 032287 branch master_set_mem_master_sp_flag 
+:      032290 sp_confirm_check_failed:
+0x7631 032291 fetch 1 ,mem_master_sp_state 
+0x7632 032292 beq sp_stat_confirm_check ,sp_confirm_check_failed_master 
+0x7633 032293 jam sp_stat_null ,mem_sp_state 
+0x7634 032294 jam lmp_not_accepted ,mem_lmo_opcode2 
+0x7635 032296 jam authentication_failure_error ,mem_lmo_reason2 
+0x7636 032297 rtn 
+:      032298 sp_confirm_check_failed_master:
+0x7637 032299 jam lmp_not_accepted ,mem_lmo_opcode2 
+0x7638 032300 jam sp_stat_null ,mem_master_sp_state 
+0x7639 032301 rtn 
+:      032303 sp_confirm_calc:
+0x763a 032304 fetch 1 ,mem_sp_dh_ready 
+0x763b 032305 beq sp_flag_commit ,sp_confirm_calc_ready 
+0x763c 032306 jam sp_stat_confirm_calc ,mem_master_sp_state 
+0x763d 032307 branch master_set_mem_master_sp_flag 
+:      032308 sp_confirm_calc_ready:
+0x763e 032309 arg mem_addr_value ,contw 
+0x763f 032310 fetch 6 ,mem_plap 
+0x7640 032311 istore 6 ,contw 
+0x7641 032312 fetch 6 ,mem_lap 
+0x7642 032313 istore 6 ,contw 
+0x7643 032314 fetch 3 ,mem_sp_iocap_local 
+0x7644 032315 istore 3 ,contw 
+0x7645 032317 call function_f3b 
+0x7646 032318 fetch 1 ,mem_master_sp_state 
+0x7647 032319 beq sp_stat_confirm_calc ,sp_confirm_calc_master 
+0x7648 032320 jam sp_stat_confirm_send ,mem_sp_state 
+0x7649 032321 jam sp_flag_commit ,mem_sp_flag 
+0x764a 032322 rtn 
+:      032323 sp_confirm_calc_master:
+0x764b 032324 jam sp_stat_confirm_send ,mem_master_sp_state 
+0x764c 032325 jam sp_flag_commit ,mem_master_sp_flag 
+0x764d 032326 rtn 
+:      032328 sp_master_key_prarm_push:
+0x764e 032329 arg mem_sp_prarm_stack ,contw 
+0x764f 032330 fetch 6 ,mem_plap 
+0x7650 032331 istore 6 ,contw 
+0x7651 032332 fetch 6 ,mem_lap 
+0x7652 032333 istore 6 ,contw 
+0x7653 032334 setarg mem_sp_random_local_end 
+0x7654 032335 istore 2 ,contw 
+0x7655 032336 setarg mem_sp_random_remote_end 
+0x7656 032337 istore 2 ,contw 
+0x7657 032338 branch sp_link_key_calc 
+:      032339 sp_link_key_prarm_push:
+0x7658 032340 jam sp_stat_done ,mem_sp_state 
+0x7659 032341 arg mem_sp_prarm_stack ,contw 
+0x765a 032342 fetch 6 ,mem_lap 
+0x765b 032343 istore 6 ,contw 
+0x765c 032344 fetch 6 ,mem_plap 
+0x765d 032345 istore 6 ,contw 
+0x765e 032346 setarg mem_sp_random_remote_end 
+0x765f 032347 istore 2 ,contw 
+0x7660 032348 setarg mem_sp_random_local_end 
+0x7661 032349 istore 2 ,contw 
+:      032350 sp_link_key_calc:
+0x7662 032352 arg mem_addr_value ,contw 
+0x7663 032353 fetch 6 ,mem_sp_prarm_stack 
+0x7664 032354 istore 6 ,contw 
+0x7665 032355 fetch 6 ,mem_sp_prarm_stack + 6 
+0x7666 032356 istore 6 ,contw 
+0x7667 032358 call function_f2 
+0x7668 032361 jam 1 ,mem_link_key_exists 
+0x7669 032362 arg mem_link_key ,contw 
+0x766a 032363 arg mem_sp_calc_result_high ,contr 
+0x766b 032364 call memcpy16 
+0x766c 032365 branch generate_linkkey_continue 
+:      032368 sp_pubkey_calc:
+0x766d 032369 bpatchx patch3c_7 ,mem_patch3c 
+0x766e 032370 fetch 1 ,mem_sp_local_key_invalid 
+0x766f 032371 rtnne sp_key_invalid 
+0x7670 032372 fetch 1 ,mem_sp_calc 
+0x7671 032373 rtnne sp_calc_standby 
+0x7672 032374 arg mem_sp_private_key ,contw 
+0x7673 032375 force 11 ,queue 
+0x7674 032376 call random_generator 
+0x7675 032377 random pdata 
+0x7676 032378 rshift pdata ,pdata 
+0x7677 032379 istore 2 ,contw 
+0x7678 032381 arg mem_k ,contw 
+0x7679 032382 arg mem_sp_private_key ,contr 
+0x767a 032383 call memcpy24 
+0x767b 032385 arg mem_ax ,contw 
+0x767c 032386 arg mem_gx ,contr 
+0x767d 032387 call memcpy48 
+0x767e 032389 arg mem_az ,contw 
+0x767f 032390 call bn_zero 
+0x7680 032391 jam 1 ,mem_az 
+0x7681 032393 call eckp_calc_init 
+0x7682 032394 jam sp_calc_pubkey ,mem_sp_calc 
+0x7683 032395 rtn 
+:      032397 sp_pubkey_generated:
+0x7684 032398 arg mem_sp_pubkey_local ,contw 
+0x7685 032399 arg mem_bx ,contr 
+0x7686 032400 call memcpy48 
+0x7687 032401 jam sp_key_valid ,mem_sp_local_key_invalid 
+0x7688 032402 jam sp_calc_standby ,mem_sp_calc 
+0x7689 032403 rtn 
+:      032405 sp_dhkey_calc:
+0x768a 032406 bpatchx patch3d_0 ,mem_patch3d 
+0x768b 032407 fetch 1 ,mem_sp_dhkey_invalid 
+0x768c 032408 rtnne sp_key_invalid 
+0x768d 032409 fetch 1 ,mem_sp_calc 
+0x768e 032410 rtnne sp_calc_standby 
+0x768f 032412 arg mem_k ,contw 
+0x7690 032413 arg mem_sp_private_key ,contr 
+0x7691 032414 call memcpy24 
+0x7692 032416 arg mem_ax ,contw 
+0x7693 032417 arg mem_sp_pubkey_remote ,contr 
+0x7694 032418 call memcpy48 
+0x7695 032420 arg mem_az ,contw 
+0x7696 032421 call bn_zero 
+0x7697 032422 jam 1 ,mem_az 
+0x7698 032424 call eckp_calc_init 
+0x7699 032425 jam sp_calc_dhkey ,mem_sp_calc 
+0x769a 032426 rtn 
+:      032428 sp_dhkey_generated:
+0x769b 032429 jam sp_flag_commit ,mem_sp_dh_ready 
+0x769c 032430 arg mem_sp_dhkey ,contw 
+0x769d 032431 arg mem_bx ,contr 
+0x769e 032432 call memcpy24 
+0x769f 032433 jam sp_key_valid ,mem_sp_dhkey_invalid 
+0x76a0 032434 jam sp_calc_standby ,mem_sp_calc 
+0x76a1 032435 rtn 
+:      032437 random_generator:
+0x76a2 032438 increase -1 ,queue 
+0x76a3 032439 nrtn positive 
+0x76a4 032440 random pdata 
+0x76a5 032441 istore 2 ,contw 
+0x76a6 032442 branch random_generator 
+:      032443 compare4:
+0x76a7 032444 increase -1 ,queue 
+0x76a8 032445 nbranch compare4_success ,positive 
+0x76a9 032446 ifetch 4 ,rega 
+0x76aa 032447 copy pdata ,temp 
+0x76ab 032448 ifetch 4 ,regb 
+0x76ac 032449 iflip temp ,pdata 
+0x76ad 032450 nbranch compare4_failed ,zero 
+0x76ae 032451 increase 4 ,rega 
+0x76af 032452 increase 4 ,regb 
+0x76b0 032453 branch compare4 
+:      032454 compare4_failed:
+0x76b1 032455 disable true 
+0x76b2 032456 rtn 
+:      032457 compare4_success:
+0x76b3 032458 enable true 
+0x76b4 032459 rtn 
+:      032466 simple_pairing_sequence:
+0x76b5 032467 bpatchx patch3d_1 ,mem_patch3d 
+0x76b6 032468 fetch 1 ,mem_sp_flag 
+0x76b7 032469 rtn blank 
+0x76b8 032470 call lmo_fifo_check 
+0x76b9 032471 nrtn blank 
+0x76ba 032472 jam sp_flag_standby ,mem_sp_flag 
+0x76bb 032473 fetch 1 ,mem_sp_state 
+0x76bc 032474 beq sp_stat_key_send ,sp_send_lmp_encapsulated_header 
+0x76bd 032475 beq sp_stat_commit_send ,sp_send_lmp_simple_pairing_comfirm 
+0x76be 032476 beq sp_stat_random_send ,sp_send_lmp_simple_pairing_number 
+0x76bf 032477 beq sp_stat_confirm_send ,sp_send_lmp_dhkey_check 
+0x76c0 032478 beq sp_stat_key_generate ,sp_generate_local_key 
+0x76c1 032479 beq sp_stat_commit_calc ,sp_calculate_commitment 
+0x76c2 032480 beq sp_stat_confirm_check ,sp_confirm_check 
+0x76c3 032481 beq sp_stat_confirm_calc ,sp_confirm_calc 
+0x76c4 032482 beq sp_stat_link_key_calc ,sp_link_key_prarm_push 
+0x76c5 032484 rtn 
+:      032486 master_simple_paring_sequence:
+0x76c6 032487 bpatchx patch3d_2 ,mem_patch3d 
+0x76c7 032488 fetch 1 ,mem_master_sp_flag 
+0x76c8 032489 rtn blank 
+0x76c9 032490 call lmo_fifo_check 
+0x76ca 032491 nrtn blank 
+0x76cb 032492 jam sp_flag_standby ,mem_master_sp_flag 
+0x76cc 032493 fetch 1 ,mem_master_sp_state 
+0x76cd 032494 beq sp_master_stat_start_skip ,sp_master_send_io_cap_get 
+0x76ce 032495 beq sp_master_stat_start_done ,sp_master_send_io_cap_send 
+0x76cf 032496 beq sp_stat_key_send ,sp_master_send_lmp_encapsulated_header 
+0x76d0 032497 beq sp_stat_commit_calc ,master_sp_calculate_commitment 
+0x76d1 032498 beq sp_stat_commitment_compare ,sp_master_commitment_compare 
+0x76d2 032499 beq sp_stat_random_send ,sp_master_send_lmp_simple_pairing_number 
+0x76d3 032500 beq sp_stat_confirm_calc ,sp_confirm_calc 
+0x76d4 032501 beq sp_stat_confirm_send ,master_sp_send_lmp_dhkey_check 
+0x76d5 032502 beq sp_stat_confirm_check ,sp_confirm_check 
+0x76d6 032503 beq sp_state_end ,master_sp_sm_end 
+0x76d7 032504 rtn 
+:      032506 master_set_mem_master_sp_flag:
+0x76d8 032507 jam sp_flag_commit ,mem_master_sp_flag 
+0x76d9 032508 rtn 
+:      032510 master_clear_mem_master_sp_flag:
+0x76da 032511 jam sp_flag_standby ,mem_master_sp_flag 
+0x76db 032512 rtn 
+:      032513 sp_calc_sequence:
+0x76dc 032514 bpatchx patch3d_3 ,mem_patch3d 
+0x76dd 032515 fetch 1 ,mem_ssp_enable 
+0x76de 032516 rtn blank 
+0x76df 032517 fetch 1 ,mem_sp_calc 
+0x76e0 032518 rtn blank 
+0x76e1 032519 increase 0x80 ,pdata 
+0x76e2 032520 store 1 ,mem_sp_calc 
+0x76e3 032521 rtnbit1 7 
+0x76e4 032522 fetch 1 ,mem_ec_loopc 
+0x76e5 032523 branch sp_calc_sequence_done ,blank 
+0x76e6 032524 branch eckp_calc 
+:      032526 sp_calc_sequence_done:
+0x76e7 032527 call ecunmapz 
+0x76e8 032528 fetch 1 ,mem_sp_calc 
+0x76e9 032529 beq sp_calc_pubkey ,sp_pubkey_generated 
+0x76ea 032530 beq sp_calc_dhkey ,sp_dhkey_generated 
+0x76eb 032531 rtn 
+:      032534 bn_testbit:
+0x76ec 032535 and pdata ,7 ,queue 
+0x76ed 032536 rshift3 pdata ,pdata 
+0x76ee 032537 iadd contr ,contr 
+0x76ef 032538 ifetch 1 ,contr 
+0x76f0 032539 qisolate0 pdata 
+0x76f1 032540 rtn 
+:      032543 ec_copy:
+0x76f2 032544 call memcpy24 
+0x76f3 032545 call memcpy24 
+0x76f4 032546 branch memcpy24 
+:      032549 bn_eq_zero:
+0x76f5 032550 ifetch 8 ,contr 
+0x76f6 032551 nrtn blank 
+0x76f7 032552 ifetch 8 ,contr 
+0x76f8 032553 nrtn blank 
+0x76f9 032554 ifetch 8 ,contr 
+0x76fa 032555 rtn 
+:      032560 bn_eq_0:
+0x76fb 032561 ifetch 4 ,rega 
+0x76fc 032562 iforce temp 
+0x76fd 032563 ifetch 4 ,regb 
+0x76fe 032564 isub temp ,null 
+0x76ff 032565 nrtn zero 
+0x7700 032566 increase 4 ,rega 
+0x7701 032567 increase 4 ,regb 
+0x7702 032568 loop bn_eq_0 
+0x7703 032569 rtn 
+:      032572 bn_bigeq:
+0x7704 032573 force 6 ,loopcnt 
+0x7705 032574 increase 20 ,rega 
+0x7706 032575 increase 20 ,regb 
+:      032576 bn_bigeq_0:
+0x7707 032577 ifetch 4 ,regb 
+0x7708 032578 iforce temp 
+0x7709 032579 ifetch 4 ,rega 
+0x770a 032580 isub temp ,pdata 
+0x770b 032581 nrtn positive 
+0x770c 032582 nrtn blank 
+0x770d 032583 increase -4 ,rega 
+0x770e 032584 increase -4 ,regb 
+0x770f 032585 loop bn_bigeq_0 
+0x7710 032586 rtn 
+:      032588 bn_add:
+0x7711 032589 force 6 ,loopcnt 
+0x7712 032590 force 0 ,regc 
+:      032591 bn_add_0:
+0x7713 032592 ifetch 4 ,rega 
+0x7714 032593 iforce temp 
+0x7715 032594 ifetch 4 ,regb 
+0x7716 032595 iadd temp ,pdata 
+0x7717 032596 iadd regc ,pdata 
+0x7718 032597 istore 4 ,contw 
+0x7719 032598 isolate1 32 ,pdata 
+0x771a 032599 setflag true ,0 ,regc 
+0x771b 032600 increase 4 ,rega 
+0x771c 032601 increase 4 ,regb 
+0x771d 032602 loop bn_add_0 
+0x771e 032603 rtn 
+:      032605 bn_sub:
+0x771f 032606 force 6 ,loopcnt 
+0x7720 032607 force 0 ,regc 
+:      032608 bn_sub_0:
+0x7721 032609 ifetch 4 ,regb 
+0x7722 032610 iforce temp 
+0x7723 032611 ifetch 4 ,rega 
+0x7724 032612 isub temp ,pdata 
+0x7725 032613 isub regc ,pdata 
+0x7726 032614 istore 4 ,contw 
+0x7727 032615 isolate1 32 ,pdata 
+0x7728 032616 setflag true ,0 ,regc 
+0x7729 032617 increase 4 ,rega 
+0x772a 032618 increase 4 ,regb 
+0x772b 032619 loop bn_sub_0 
+0x772c 032620 rtn 
+:      032622 bn_rshift6:
+0x772d 032623 force 6 ,loopcnt 
+0x772e 032624 increase 20 ,rega 
+:      032625 bn_rshift:
+0x772f 032626 force 0 ,regc 
+:      032627 bn_rshift_0:
+0x7730 032628 ifetch 4 ,rega 
+0x7731 032629 isolate1 0 ,pdata 
+0x7732 032630 setflag true ,1 ,regc 
+0x7733 032631 rshift pdata ,pdata 
+0x7734 032632 isolate1 0 ,regc 
+0x7735 032633 setflag true ,31 ,pdata 
+0x7736 032634 istore 4 ,rega 
+0x7737 032635 increase -4 ,rega 
+0x7738 032636 rshift regc ,regc 
+0x7739 032637 loop bn_rshift_0 
+0x773a 032638 rtn 
+:      032640 bn_lshift:
+0x773b 032641 force 6 ,loopcnt 
+0x773c 032642 force 0 ,regc 
+:      032643 bn_lshift_0:
+0x773d 032644 ifetch 4 ,rega 
+0x773e 032645 isolate1 31 ,pdata 
+0x773f 032646 setflag true ,1 ,regc 
+0x7740 032647 lshift pdata ,pdata 
+0x7741 032648 isolate1 0 ,regc 
+0x7742 032649 setflag true ,0 ,pdata 
+0x7743 032650 istore 4 ,rega 
+0x7744 032651 increase 4 ,rega 
+0x7745 032652 rshift regc ,regc 
+0x7746 032653 loop bn_lshift_0 
+0x7747 032654 rtn 
+:      032656 bn_lshiftmod:
+0x7748 032657 call bn_lshift 
+:      032658 bn_lshiftmod_ismod:
+0x7749 032659 isolate1 0 ,regc 
+0x774a 032660 branch bn_lshiftmod_0 ,true 
+0x774b 032661 arg mem_p ,regb 
+0x774c 032662 copy rega ,regc 
+0x774d 032663 increase -24 ,rega 
+0x774e 032664 call bn_bigeq 
+0x774f 032665 nrtn positive 
+0x7750 032666 copy regc ,rega 
+:      032667 bn_lshiftmod_0:
+0x7751 032668 increase -24 ,rega 
+0x7752 032669 arg mem_p ,regb 
+0x7753 032670 copy rega ,contw 
+0x7754 032671 branch bn_sub 
+:      032674 bn_addmod:
+0x7755 032675 call bn_add 
+0x7756 032676 copy contw ,rega 
+0x7757 032677 branch bn_lshiftmod_ismod 
+:      032679 bn_submod:
+0x7758 032680 call bn_sub 
+0x7759 032681 isolate0 0 ,regc 
+0x775a 032682 rtn true 
+0x775b 032683 arg mem_p ,regb 
+0x775c 032684 add contw ,-24 ,rega 
+0x775d 032685 copy rega ,contw 
+0x775e 032686 branch bn_add 
+:      032689 bn_p192mod:
+0x775f 032690 copy contw ,timeup 
+0x7760 032691 copy rega ,alarm 
+0x7761 032692 arg mem_tmp2 ,regb 
+0x7762 032693 copy regb ,contw 
+0x7763 032694 add rega ,24 ,contr 
+0x7764 032695 ifetch 8 ,contr 
+0x7765 032696 istore 8 ,contw 
+0x7766 032697 istore 8 ,contw 
+0x7767 032698 force 0 ,pdata 
+0x7768 032699 istore 8 ,contw 
+0x7769 032700 copy timeup ,contw 
+0x776a 032701 call bn_addmod 
+0x776b 032702 arg mem_tmp2 ,regb 
+0x776c 032703 copy regb ,contw 
+0x776d 032704 force 0 ,pdata 
+0x776e 032705 istore 8 ,contw 
+0x776f 032706 add alarm ,32 ,contr 
+0x7770 032707 ifetch 8 ,contr 
+0x7771 032708 istore 8 ,contw 
+0x7772 032709 istore 8 ,contw 
+0x7773 032710 copy timeup ,rega 
+0x7774 032711 copy rega ,contw 
+0x7775 032712 call bn_addmod 
+0x7776 032713 arg mem_tmp2 ,regb 
+0x7777 032714 copy regb ,contw 
+0x7778 032715 add alarm ,40 ,contr 
+0x7779 032716 ifetch 8 ,contr 
+0x777a 032717 istore 8 ,contw 
+0x777b 032718 istore 8 ,contw 
+0x777c 032719 istore 8 ,contw 
+0x777d 032720 copy timeup ,rega 
+0x777e 032721 copy rega ,contw 
+0x777f 032722 branch bn_addmod 
+:      032725 bn_load:
+0x7780 032726 force 6 ,loopcnt 
+:      032727 bn_load_0:
+0x7781 032728 ifetch 4 ,contr 
+0x7782 032729 iforce regext 
+0x7783 032730 increase 1 ,regext_index 
+0x7784 032731 loop bn_load_0 
+0x7785 032732 rtn 
+:      032736 bn_mulmod:
+0x7786 032737 copy contw ,timeup 
+0x7787 032738 arg mem_tmp1 ,contw 
+0x7788 032739 call bn_zero 
+0x7789 032740 arg mem_tmp1 ,contw 
+0x778a 032741 copy rega ,contr 
+0x778b 032742 force 0 ,regext_index 
+0x778c 032743 call bn_load 
+0x778d 032744 copy regb ,contr 
+0x778e 032745 call bn_load 
+0x778f 032746 force 0 ,regb 
+:      032747 bn_mulmod_1:
+0x7790 032748 force 0 ,temp 
+0x7791 032749 force 6 ,regc 
+:      032750 bn_mulmod_0:
+0x7792 032751 ifetch 4 ,contw 
+0x7793 032752 iforce rega 
+0x7794 032753 copy regb ,regext_index 
+0x7795 032754 deposit regext 
+0x7796 032755 copy regc ,regext_index 
+0x7797 032756 imul32 regext ,pdata 
+0x7798 032757 iadd rega ,pdata 
+0x7799 032758 iadd temp ,pdata 
+0x779a 032759 istore 4 ,contw 
+0x779b 032760 rshift32 pdata ,temp 
+0x779c 032761 increase 1 ,regc 
+0x779d 032762 compare 12 ,regc ,0xff 
+0x779e 032763 nbranch bn_mulmod_0 ,true 
+0x779f 032764 deposit temp 
+0x77a0 032765 istore 4 ,contw 
+0x77a1 032766 increase -24 ,contw 
+0x77a2 032767 increase 1 ,regb 
+0x77a3 032768 compare 6 ,regb ,0xff 
+0x77a4 032769 nbranch bn_mulmod_1 ,true 
+0x77a5 032770 arg mem_tmp1 ,rega 
+0x77a6 032771 copy timeup ,contw 
+0x77a7 032772 branch bn_p192mod 
+:      032775 bn_sqrmod:
+0x77a8 032776 copy rega ,regb 
+0x77a9 032777 branch bn_mulmod 
+:      032779 bn_rshifteven:
+0x77aa 032780 copy rega ,alarm 
+:      032781 bn_rshifteven_1:
+0x77ab 032782 copy alarm ,rega 
+0x77ac 032783 ifetch 1 ,rega 
+0x77ad 032784 isolate1 0 ,pdata 
+0x77ae 032785 rtn true 
+0x77af 032786 call bn_rshift6 
+0x77b0 032787 ifetch 1 ,regb 
+0x77b1 032788 isolate0 0 ,pdata 
+0x77b2 032789 branch bn_rshifteven_0 ,true 
+0x77b3 032790 arg mem_p ,rega 
+0x77b4 032791 copy regb ,contw 
+0x77b5 032792 call bn_add 
+0x77b6 032793 ifetch 1 ,regb 
+0x77b7 032794 iadd regc ,pdata 
+0x77b8 032795 istore 1 ,regb 
+0x77b9 032796 increase -24 ,regb 
+:      032797 bn_rshifteven_0:
+0x77ba 032798 add regb ,24 ,rega 
+0x77bb 032799 force 7 ,loopcnt 
+0x77bc 032800 call bn_rshift 
+0x77bd 032801 branch bn_rshifteven_1 
+:      032804 bn_invmod:
+0x77be 032805 copy contw ,timeup 
+0x77bf 032806 arg mem_tmp0 ,contw 
+0x77c0 032807 call bn_zero 
+0x77c1 032808 force 0 ,pdata 
+0x77c2 032809 store 4 ,mem_tmp5 
+0x77c3 032810 store 4 ,mem_t2 
+0x77c4 032811 jam 1 ,mem_tmp0 
+0x77c5 032812 arg mem_tmp1 ,contw 
+0x77c6 032813 call bn_zero 
+0x77c7 032814 arg mem_p ,contr 
+0x77c8 032815 arg mem_tmp2 ,contw 
+0x77c9 032816 call memcpy24 
+0x77ca 032817 copy rega ,contr 
+0x77cb 032818 arg mem_tmp3 ,contw 
+0x77cc 032819 call memcpy24 
+:      032820 bn_invmod_2:
+0x77cd 032821 arg mem_tmp3 ,contr 
+0x77ce 032822 call bn_eq_zero 
+0x77cf 032823 branch bn_invmod_0 ,blank 
+0x77d0 032824 arg mem_tmp3 ,rega 
+0x77d1 032825 arg mem_tmp0 ,regb 
+0x77d2 032826 call bn_rshifteven 
+0x77d3 032828 arg mem_tmp2 ,rega 
+0x77d4 032829 arg mem_tmp1 ,regb 
+0x77d5 032830 call bn_rshifteven 
+0x77d6 032831 arg mem_tmp3 ,rega 
+0x77d7 032832 arg mem_tmp2 ,regb 
+0x77d8 032833 call bn_bigeq 
+0x77d9 032834 branch bn_invmod_1 ,positive 
+0x77da 032835 arg mem_tmp2 ,rega 
+0x77db 032836 arg mem_tmp3 ,regb 
+0x77dc 032837 copy rega ,contw 
+0x77dd 032838 call bn_sub 
+0x77de 032839 arg mem_tmp0 ,rega 
+0x77df 032840 arg mem_tmp1 ,regb 
+0x77e0 032841 copy regb ,contw 
+0x77e1 032842 call bn_add 
+0x77e2 032843 ifetch 1 ,rega 
+0x77e3 032844 iadd regc ,regc 
+0x77e4 032845 ifetch 1 ,regb 
+0x77e5 032846 iadd regc ,pdata 
+0x77e6 032847 istore 1 ,regb 
+0x77e7 032848 branch bn_invmod_2 
+:      032849 bn_invmod_1:
+0x77e8 032850 arg mem_tmp3 ,rega 
+0x77e9 032851 arg mem_tmp2 ,regb 
+0x77ea 032852 copy rega ,contw 
+0x77eb 032853 call bn_sub 
+0x77ec 032854 arg mem_tmp1 ,rega 
+0x77ed 032855 arg mem_tmp0 ,regb 
+0x77ee 032856 copy regb ,contw 
+0x77ef 032857 call bn_add 
+0x77f0 032858 ifetch 1 ,rega 
+0x77f1 032859 iadd regc ,regc 
+0x77f2 032860 ifetch 1 ,regb 
+0x77f3 032861 iadd regc ,pdata 
+0x77f4 032862 istore 1 ,regb 
+0x77f5 032863 branch bn_invmod_2 
+:      032864 bn_invmod_0:
+0x77f6 032865 arg mem_tmp0 ,contw 
+0x77f7 032866 call bn_zero 
+0x77f8 032867 fetch 1 ,mem_tmp5 
+0x77f9 032868 store 1 ,mem_tmp0 
+0x77fa 032869 store 1 ,mem_tmp0a 
+0x77fb 032870 arg mem_tmp0 ,rega 
+0x77fc 032871 arg mem_tmp1 ,regb 
+0x77fd 032872 copy regb ,contw 
+0x77fe 032873 call bn_addmod 
+0x77ff 032874 arg mem_p ,rega 
+0x7800 032875 arg mem_tmp1 ,regb 
+0x7801 032876 copy timeup ,contw 
+0x7802 032877 branch bn_submod 
+:      032882 ecdbl:
+0x7803 032883 arg mem_cz ,rega 
+0x7804 032884 arg mem_t2 ,contw 
+0x7805 032885 call bn_sqrmod 
+0x7806 032886 arg mem_t2 ,rega 
+0x7807 032887 arg mem_t3 ,contw 
+0x7808 032888 call bn_sqrmod 
+0x7809 032889 arg mem_a ,rega 
+0x780a 032890 arg mem_t3 ,regb 
+0x780b 032891 arg mem_t3 ,contw 
+0x780c 032892 call bn_mulmod 
+0x780d 032893 arg mem_cx ,rega 
+0x780e 032894 arg mem_t2 ,contw 
+0x780f 032895 call bn_sqrmod 
+0x7810 032896 arg mem_t2 ,contr 
+0x7811 032897 arg mem_t1 ,contw 
+0x7812 032898 call memcpy24 
+0x7813 032899 arg mem_t1 ,rega 
+0x7814 032900 call bn_lshiftmod 
+0x7815 032901 arg mem_t2 ,rega 
+0x7816 032902 arg mem_t1 ,regb 
+0x7817 032903 arg mem_t2 ,contw 
+0x7818 032904 call bn_addmod 
+0x7819 032905 arg mem_t2 ,rega 
+0x781a 032906 arg mem_t3 ,regb 
+0x781b 032907 arg mem_t2 ,contw 
+0x781c 032908 call bn_addmod 
+0x781d 032909 arg mem_cx ,contr 
+0x781e 032910 arg mem_t1 ,contw 
+0x781f 032911 call memcpy24 
+0x7820 032912 arg mem_cy ,rega 
+0x7821 032913 arg mem_t3 ,contw 
+0x7822 032914 call bn_sqrmod 
+0x7823 032915 arg mem_t1 ,rega 
+0x7824 032916 call bn_lshiftmod 
+0x7825 032917 arg mem_t1 ,rega 
+0x7826 032918 call bn_lshiftmod 
+0x7827 032919 arg mem_t1 ,rega 
+0x7828 032920 arg mem_t3 ,regb 
+0x7829 032921 arg mem_t1 ,contw 
+0x782a 032922 call bn_mulmod 
+0x782b 032923 arg mem_t3 ,rega 
+0x782c 032924 arg mem_t0 ,contw 
+0x782d 032925 call bn_sqrmod 
+0x782e 032926 arg mem_t0 ,rega 
+0x782f 032927 call bn_lshiftmod 
+0x7830 032928 arg mem_t0 ,rega 
+0x7831 032929 call bn_lshiftmod 
+0x7832 032930 arg mem_t0 ,rega 
+0x7833 032931 call bn_lshiftmod 
+0x7834 032932 arg mem_cy ,contr 
+0x7835 032933 arg mem_t3 ,contw 
+0x7836 032934 call memcpy24 
+0x7837 032935 arg mem_t3 ,rega 
+0x7838 032936 call bn_lshiftmod 
+0x7839 032937 arg mem_t3 ,rega 
+0x783a 032938 arg mem_cz ,regb 
+0x783b 032939 arg mem_cz ,contw 
+0x783c 032940 call bn_mulmod 
+0x783d 032941 arg mem_t2 ,rega 
+0x783e 032942 arg mem_t3 ,contw 
+0x783f 032943 call bn_sqrmod 
+0x7840 032944 arg mem_t3 ,rega 
+0x7841 032945 arg mem_t1 ,regb 
+0x7842 032946 arg mem_t3 ,contw 
+0x7843 032947 call bn_submod 
+0x7844 032948 arg mem_t3 ,rega 
+0x7845 032949 arg mem_t1 ,regb 
+0x7846 032950 arg mem_cx ,contw 
+0x7847 032951 call bn_submod 
+0x7848 032952 arg mem_t1 ,rega 
+0x7849 032953 arg mem_cx ,regb 
+0x784a 032954 arg mem_t3 ,contw 
+0x784b 032955 call bn_submod 
+0x784c 032956 arg mem_t3 ,rega 
+0x784d 032957 arg mem_t2 ,regb 
+0x784e 032958 arg mem_t3 ,contw 
+0x784f 032959 call bn_mulmod 
+0x7850 032960 arg mem_t3 ,rega 
+0x7851 032961 arg mem_t0 ,regb 
+0x7852 032962 arg mem_cy ,contw 
+0x7853 032963 branch bn_submod 
+:      032967 ecadd:
+0x7854 032968 arg mem_az ,rega 
+0x7855 032969 arg mem_t7 ,contw 
+0x7856 032970 call bn_sqrmod 
+0x7857 032971 arg mem_cx ,rega 
+0x7858 032972 arg mem_t7 ,regb 
+0x7859 032973 arg mem_t0 ,contw 
+0x785a 032974 call bn_mulmod 
+0x785b 032975 arg mem_az ,rega 
+0x785c 032976 arg mem_t7 ,regb 
+0x785d 032977 arg mem_t7 ,contw 
+0x785e 032978 call bn_mulmod 
+0x785f 032979 arg mem_cy ,rega 
+0x7860 032980 arg mem_t7 ,regb 
+0x7861 032981 arg mem_t1 ,contw 
+0x7862 032982 call bn_mulmod 
+0x7863 032983 arg mem_cz ,rega 
+0x7864 032984 arg mem_t7 ,contw 
+0x7865 032985 call bn_sqrmod 
+0x7866 032986 arg mem_ax ,rega 
+0x7867 032987 arg mem_t7 ,regb 
+0x7868 032988 arg mem_t2 ,contw 
+0x7869 032989 call bn_mulmod 
+0x786a 032990 arg mem_cz ,rega 
+0x786b 032991 arg mem_t7 ,regb 
+0x786c 032992 arg mem_t7 ,contw 
+0x786d 032993 call bn_mulmod 
+0x786e 032994 arg mem_ay ,rega 
+0x786f 032995 arg mem_t7 ,regb 
+0x7870 032996 arg mem_t3 ,contw 
+0x7871 032997 call bn_mulmod 
+0x7872 032998 arg mem_t0 ,rega 
+0x7873 032999 arg mem_t2 ,regb 
+0x7874 033000 arg mem_t7 ,contw 
+0x7875 033001 call bn_submod 
+0x7876 033002 arg mem_t0 ,rega 
+0x7877 033003 arg mem_t2 ,regb 
+0x7878 033004 arg mem_t0 ,contw 
+0x7879 033005 call bn_addmod 
+0x787a 033006 arg mem_t1 ,rega 
+0x787b 033007 arg mem_t3 ,regb 
+0x787c 033008 arg mem_t2 ,contw 
+0x787d 033009 call bn_submod 
+0x787e 033010 arg mem_t1 ,rega 
+0x787f 033011 arg mem_t3 ,regb 
+0x7880 033012 arg mem_t1 ,contw 
+0x7881 033013 call bn_addmod 
+0x7882 033014 arg mem_t1 ,rega 
+0x7883 033015 arg mem_t7 ,regb 
+0x7884 033016 arg mem_t1 ,contw 
+0x7885 033017 call bn_mulmod 
+0x7886 033018 arg mem_cz ,rega 
+0x7887 033019 arg mem_az ,regb 
+0x7888 033020 arg mem_t3 ,contw 
+0x7889 033021 call bn_mulmod 
+0x788a 033022 arg mem_t3 ,rega 
+0x788b 033023 arg mem_t7 ,regb 
+0x788c 033024 arg mem_cz ,contw 
+0x788d 033025 call bn_mulmod 
+0x788e 033026 arg mem_t7 ,rega 
+0x788f 033027 arg mem_t7 ,contw 
+0x7890 033028 call bn_sqrmod 
+0x7891 033029 arg mem_t7 ,rega 
+0x7892 033030 arg mem_t0 ,regb 
+0x7893 033031 arg mem_t3 ,contw 
+0x7894 033032 call bn_mulmod 
+0x7895 033033 arg mem_t7 ,rega 
+0x7896 033034 arg mem_t1 ,regb 
+0x7897 033035 arg mem_t1 ,contw 
+0x7898 033036 call bn_mulmod 
+0x7899 033037 arg mem_t2 ,rega 
+0x789a 033038 arg mem_cx ,contw 
+0x789b 033039 call bn_sqrmod 
+0x789c 033040 arg mem_cx ,rega 
+0x789d 033041 arg mem_t3 ,regb 
+0x789e 033042 arg mem_cx ,contw 
+0x789f 033043 call bn_submod 
+0x78a0 033044 arg mem_cx ,contr 
+0x78a1 033045 arg mem_t7 ,contw 
+0x78a2 033046 call memcpy24 
+0x78a3 033047 arg mem_t7 ,rega 
+0x78a4 033048 call bn_lshiftmod 
+0x78a5 033049 arg mem_t3 ,rega 
+0x78a6 033050 arg mem_t7 ,regb 
+0x78a7 033051 arg mem_t3 ,contw 
+0x78a8 033052 call bn_submod 
+0x78a9 033053 arg mem_t3 ,rega 
+0x78aa 033054 arg mem_t2 ,regb 
+0x78ab 033055 arg mem_t2 ,contw 
+0x78ac 033056 call bn_mulmod 
+0x78ad 033057 arg mem_t2 ,rega 
+0x78ae 033058 arg mem_t1 ,regb 
+0x78af 033059 arg mem_cy ,contw 
+0x78b0 033060 call bn_submod 
+0x78b1 033061 arg mem_cy ,rega 
+0x78b2 033062 arg mem_p ,regb 
+0x78b3 033063 arg mem_cy ,contw 
+0x78b4 033064 force 0 ,regc 
+0x78b5 033065 fetch 1 ,mem_cy 
+0x78b6 033066 isolate1 0 ,pdata 
+0x78b7 033067 call bn_add ,true 
+0x78b8 033068 copy regc ,alarm 
+0x78b9 033069 arg mem_cy ,rega 
+0x78ba 033070 call bn_rshift6 
+0x78bb 033071 fetch 1 ,mem_cy5 
+0x78bc 033072 isolate1 0 ,alarm 
+0x78bd 033073 setflag true ,7 ,pdata 
+0x78be 033074 store 1 ,mem_cy5 
+0x78bf 033075 rtn 
+:      033079 eckp_0:
+0x78c0 033080 fetch 1 ,mem_ec_loopc 
+0x78c1 033081 increase -1 ,pdata 
+0x78c2 033082 nrtn positive 
+0x78c3 033083 store 1 ,mem_ec_loopc 
+0x78c4 033084 fetch 1 ,mem_ec_infinite 
+0x78c5 033085 call ecdbl ,blank 
+0x78c6 033086 fetch 1 ,mem_ec_loopc 
+0x78c7 033087 arg mem_k ,contr 
+0x78c8 033088 call bn_testbit 
+0x78c9 033089 branch eckp_0 ,true 
+0x78ca 033090 fetch 1 ,mem_ec_infinite 
+0x78cb 033091 nbranch eckp_1 ,blank 
+0x78cc 033092 call ecadd 
+0x78cd 033093 branch eckp_0 
+:      033094 eckp_1:
+0x78ce 033095 jam 0 ,mem_ec_infinite 
+0x78cf 033096 arg mem_ax ,contr 
+0x78d0 033097 arg mem_cx ,contw 
+0x78d1 033098 call ec_copy 
+0x78d2 033099 branch eckp_0 
+:      033102 ecunmapz:
+0x78d3 033103 arg mem_cz ,rega 
+0x78d4 033104 arg mem_t3 ,contw 
+0x78d5 033105 call bn_invmod 
+0x78d6 033106 arg mem_t3 ,rega 
+0x78d7 033107 arg mem_t1 ,contw 
+0x78d8 033108 call bn_sqrmod 
+0x78d9 033109 arg mem_cx ,rega 
+0x78da 033110 arg mem_t1 ,regb 
+0x78db 033111 arg mem_bx ,contw 
+0x78dc 033112 call bn_mulmod 
+0x78dd 033113 arg mem_t3 ,rega 
+0x78de 033114 arg mem_t1 ,regb 
+0x78df 033115 arg mem_t2 ,contw 
+0x78e0 033116 call bn_mulmod 
+0x78e1 033117 arg mem_cy ,rega 
+0x78e2 033118 arg mem_t2 ,regb 
+0x78e3 033119 arg mem_by ,contw 
+0x78e4 033120 branch bn_mulmod 
+:      033124 sha_endian_swap2:
+0x78e5 033125 ifetch 4 ,contr 
+0x78e6 033126 force 4 ,rega 
+0x78e7 033127 increase 3 ,contw 
+:      033128 sha_endian_loop:
+0x78e8 033129 istore 1 ,contw 
+0x78e9 033130 rshift8 pdata ,pdata 
+0x78ea 033131 increase -2 ,contw 
+0x78eb 033132 increase -1 ,rega 
+0x78ec 033133 nbranch sha_endian_loop ,zero 
+0x78ed 033134 increase 5 ,contw 
+0x78ee 033135 loop sha_endian_swap2 
+0x78ef 033136 rtn 
+:      033139 sha_getw:
+0x78f0 033140 lshift2 queue ,pdata 
+0x78f1 033141 iadd timeup ,contr 
+0x78f2 033142 ifetch 4 ,contr 
+0x78f3 033143 rtn 
+:      033145 sha_r:
+0x78f4 033146 force 16 ,alarm 
+0x78f5 033147 arg memdat ,timeup 
+:      033148 sha_r_loop:
+0x78f6 033149 add alarm ,-7 ,queue 
+0x78f7 033150 call sha_getw 
+0x78f8 033151 iforce temp 
+0x78f9 033152 add alarm ,-16 ,queue 
+0x78fa 033153 call sha_getw 
+0x78fb 033154 iadd temp ,temp 
+0x78fc 033155 add alarm ,-2 ,queue 
+0x78fd 033156 call sha_getw 
+0x78fe 033157 shasx pdata ,1 ,pdata 
+0x78ff 033158 iadd temp ,temp 
+0x7900 033159 add alarm ,-15 ,queue 
+0x7901 033160 call sha_getw 
+0x7902 033161 shasx pdata ,0 ,pdata 
+0x7903 033162 iadd temp ,temp 
+0x7904 033163 lshift2 alarm ,pdata 
+0x7905 033164 iadd timeup ,contw 
+0x7906 033165 istoret 4 ,contw 
+0x7907 033166 increase 1 ,alarm 
+0x7908 033167 compare 64 ,alarm ,0xff 
+0x7909 033168 nbranch sha_r_loop ,true 
+0x790a 033169 rtn 
+:      033172 sha_init:
+0x790b 033173 arg memh0 ,contr 
+0x790c 033174 force 7 ,regext_index 
+:      033175 sha_init_0:
+0x790d 033176 ifetch 4 ,contr 
+0x790e 033177 iforce regext 
+0x790f 033178 increase -1 ,regext_index 
+0x7910 033179 branch sha_init_0 ,positive 
+0x7911 033180 rtn 
+:      033182 sha:
+0x7912 033183 bpatchx patch3d_4 ,mem_patch3d 
+0x7913 033184 call sha_r 
+0x7914 033185 arg memahbak ,contw 
+0x7915 033186 force 0 ,regext_index 
+:      033187 sha_0:
+0x7916 033188 deposit regext 
+0x7917 033189 istore 4 ,contw 
+0x7918 033190 increase 1 ,regext_index 
+0x7919 033191 compare 8 ,regext_index ,0xff 
+0x791a 033192 nbranch sha_0 ,true 
+0x791b 033193 call enable_authrom 
+0x791c 033194 arg memk ,timeup 
+0x791d 033195 arg memdat ,alarm 
+0x791e 033196 force 64 ,loopcnt 
+:      033197 sha_loop:
+0x791f 033198 ifetcht 4 ,alarm 
+0x7920 033199 ifetch 4 ,timeup 
+0x7921 033200 increase 4 ,timeup 
+0x7922 033201 increase 4 ,alarm 
+0x7923 033202 iadd temp ,pdata 
+0x7924 033203 force 7 ,regext_index 
+0x7925 033204 iadd regext ,temp 
+0x7926 033205 force 4 ,regext_index 
+0x7927 033206 shasx regext ,3 ,pdata 
+0x7928 033207 iadd temp ,temp 
+0x7929 033208 force 5 ,regext_index 
+0x792a 033209 deposit regext 
+0x792b 033210 force 6 ,regext_index 
+0x792c 033211 ixor regext ,pdata 
+0x792d 033212 force 4 ,regext_index 
+0x792e 033213 iand regext ,pdata 
+0x792f 033214 force 6 ,regext_index 
+0x7930 033215 ixor regext ,pdata 
+0x7931 033216 iadd temp ,temp 
+0x7932 033217 force 7 ,regext_index 
+0x7933 033218 copy temp ,regext 
+0x7934 033219 force 3 ,regext_index 
+0x7935 033220 deposit regext 
+0x7936 033221 iadd temp ,regext 
+0x7937 033222 force 0 ,regext_index 
+0x7938 033223 deposit regext 
+0x7939 033224 force 1 ,regext_index 
+0x793a 033225 iand regext ,temp 
+0x793b 033226 ior regext ,pdata 
+0x793c 033227 force 2 ,regext_index 
+0x793d 033228 iand regext ,pdata 
+0x793e 033229 ior temp ,temp 
+0x793f 033230 force 0 ,regext_index 
+0x7940 033231 shasx regext ,2 ,pdata 
+0x7941 033232 iadd temp ,pdata 
+0x7942 033233 force 7 ,regext_index 
+0x7943 033234 iadd regext ,regext 
+0x7944 033235 regexrot 
+0x7945 033236 loop sha_loop 
+0x7946 033237 arg memahbak ,contr 
+0x7947 033238 force 0 ,regext_index 
+:      033239 sha_1:
+0x7948 033240 ifetch 4 ,contr 
+0x7949 033241 iadd regext ,regext 
+0x794a 033242 increase 1 ,regext_index 
+0x794b 033243 compare 8 ,regext_index ,0xff 
+0x794c 033244 nbranch sha_1 ,true 
+0x794d 033245 branch disable_authrom 
+:      033248 sha_result:
+0x794e 033249 arg memresult ,contw 
+0x794f 033250 force 7 ,regext_index 
+:      033251 sha_regext_save:
+0x7950 033252 deposit regext 
+0x7951 033253 istore 4 ,contw 
+0x7952 033254 increase -1 ,regext_index 
+0x7953 033255 branch sha_regext_save ,positive 
+0x7954 033256 rtn 
+:      033258 pad_xor:
+0x7955 033260 arg memdat ,contw 
+0x7956 033261 increase -4 ,contr 
+0x7957 033262 sub loopcnt ,16 ,rega 
+:      033263 pad_xor_0:
+0x7958 033264 ifetch 4 ,contr 
+0x7959 033265 ixor temp ,pdata 
+0x795a 033266 istore 4 ,contw 
+0x795b 033267 increase -8 ,contr 
+0x795c 033268 loop pad_xor_0 
+0x795d 033269 copy rega ,loopcnt 
+0x795e 033270 deposit temp 
+:      033271 pad_xor_1:
+0x795f 033272 istore 4 ,contw 
+0x7960 033273 loop pad_xor_1 
+0x7961 033274 rtn 
+:      033276 g_noninit_number_confirm:
+0x7962 033277 call g_noninit0 
+0x7963 033278 call sha_result 
+0x7964 033279 branch g_common0 
+:      033281 g_noninit:
+0x7965 033282 call g_noninit0 
+0x7966 033283 branch g_common0 
+:      033285 g_noninit0:
+0x7967 033286 arg mem_sp_pubkey_remote_x_end ,contr 
+0x7968 033287 arg memdat ,contw 
+0x7969 033288 force 6 ,loopcnt 
+0x796a 033289 call memcpy_dword_swap 
+0x796b 033290 arg mem_sp_pubkey_local_x_end ,contr 
+0x796c 033291 force 6 ,loopcnt 
+0x796d 033292 call memcpy_dword_swap 
+0x796e 033293 arg mem_sp_random_remote_end ,contr 
+0x796f 033294 call memcpy_dword_swap4 
+0x7970 033295 call sha_init 
+0x7971 033296 call sha 
+0x7972 033297 arg mem_sp_random_local_end ,contr 
+0x7973 033298 arg memdat ,contw 
+0x7974 033299 branch g_common 
+:      033301 g_init:
+0x7975 033302 arg mem_sp_pubkey_local_x_end ,contr 
+0x7976 033303 arg memdat ,contw 
+0x7977 033304 force 6 ,loopcnt 
+0x7978 033305 call memcpy_dword_swap 
+0x7979 033306 arg mem_sp_pubkey_remote_x_end ,contr 
+0x797a 033307 force 6 ,loopcnt 
+0x797b 033308 call memcpy_dword_swap 
+0x797c 033309 arg mem_sp_random_local_end ,contr 
+0x797d 033310 call memcpy_dword_swap4 
+0x797e 033311 call sha_init 
+0x797f 033312 call sha 
+0x7980 033313 arg mem_sp_random_remote_end ,contr 
+0x7981 033314 arg memdat ,contw 
+0x7982 033315 call g_common 
+0x7983 033316 branch g_common0 
+:      033318 g_common:
+0x7984 033319 call memcpy_dword_swap4 
+0x7985 033320 setarg 0x800000 
+0x7986 033321 lshift8 pdata ,pdata 
+0x7987 033322 istore 4 ,contw 
+0x7988 033323 force 5 ,loopcnt 
+0x7989 033324 call memset0 
+0x798a 033325 setarg 640 
+0x798b 033326 istore 4 ,contw 
+0x798c 033327 branch sha 
+:      033328 g_common0:
+0x798d 033329 fetch 4 ,memresult 
+0x798e 033331 arg 1000 ,rega 
+0x798f 033332 idiv rega 
+0x7990 033333 call wait_div_end 
+0x7991 033334 remainder pdata 
+0x7992 033335 store 4 ,mem_gkey 
+0x7993 033336 quotient pdata 
+0x7994 033337 arg 1000 ,rega 
+0x7995 033338 idiv rega 
+0x7996 033339 call wait_div_end 
+0x7997 033340 remainder pdata 
+0x7998 033341 arg 1000 ,rega 
+0x7999 033342 imul32 rega ,pdata 
+0x799a 033343 fetcht 4 ,mem_gkey 
+0x799b 033344 iadd temp ,pdata 
+0x799c 033345 store 4 ,mem_gkey 
+0x799d 033346 rtn 
+:      033348 function_f1_no_key:
+0x799e 033349 jam 0 ,mem_passkey_1bit 
+0x799f 033350 branch function_f1_common 
+:      033352 function_f1:
+0x79a0 033353 fetch 1 ,mem_ssp_mode_flag 
+0x79a1 033354 bne ssp_mode_passkey_entry_flag ,function_f1_no_key 
+:      033355 function_f1_common:
+0x79a2 033356 bpatchx patch3d_5 ,mem_patch3d 
+0x79a3 033357 setarg 0x363636 
+0x79a4 033358 lshift8 pdata ,temp 
+0x79a5 033359 or_into 0x36 ,temp 
+0x79a6 033360 fetch 2 ,mem_sp_prarm_stack 
+0x79a7 033361 copy pdata ,contr 
+0x79a8 033362 force 4 ,loopcnt 
+0x79a9 033363 call pad_xor 
+0x79aa 033364 call sha_init 
+0x79ab 033365 call sha 
+0x79ac 033366 fetch 2 ,mem_sp_prarm_stack + 2 
+0x79ad 033367 copy pdata ,contr 
+0x79ae 033368 arg memdat ,contw 
+0x79af 033369 force 6 ,loopcnt 
+0x79b0 033370 call memcpy_dword_swap 
+0x79b1 033371 fetch 2 ,mem_sp_prarm_stack + 4 
+0x79b2 033372 copy pdata ,contr 
+0x79b3 033373 force 6 ,loopcnt 
+0x79b4 033374 call memcpy_dword_swap 
+0x79b5 033375 setarg 0x800000 
+0x79b6 033376 istore 3 ,contw 
+0x79b7 033378 fetch 1 ,mem_passkey_1bit 
+0x79b8 033380 istore 1 ,contw 
+0x79b9 033381 force 0 ,pdata 
+0x79ba 033382 istore 8 ,contw 
+0x79bb 033383 setarg 0x0388 
+0x79bc 033384 istore 4 ,contw 
+0x79bd 033385 call sha 
+0x79be 033386 call sha_result 
+0x79bf 033387 arg memresult ,contr 
+0x79c0 033388 arg memahsave ,contw 
+0x79c1 033389 call memcpy32 
+0x79c2 033391 setarg 0x5c5c5c 
+0x79c3 033392 lshift8 pdata ,temp 
+0x79c4 033393 or_into 0x5c ,temp 
+0x79c5 033394 fetch 2 ,mem_sp_prarm_stack 
+0x79c6 033395 copy pdata ,contr 
+0x79c7 033396 force 4 ,loopcnt 
+0x79c8 033397 call pad_xor 
+0x79c9 033398 call sha_init 
+0x79ca 033399 call sha 
+0x79cb 033400 arg memahsave_end ,contr 
+0x79cc 033401 arg memdat ,contw 
+0x79cd 033402 force 8 ,loopcnt 
+0x79ce 033403 call memcpy_dword_swap 
+0x79cf 033404 setarg 0x800000 
+0x79d0 033405 lshift8 pdata ,pdata 
+0x79d1 033406 istore 4 ,contw 
+0x79d2 033407 call bn_zero 
+0x79d3 033408 setarg 0x0300 
+0x79d4 033409 istore 4 ,contw 
+0x79d5 033410 call sha 
+0x79d6 033411 branch sha_result 
+:      033414 function_f2:
+0x79d7 033415 setarg 0x363636 
+0x79d8 033416 lshift8 pdata ,temp 
+0x79d9 033417 or_into 0x36 ,temp 
+0x79da 033418 arg mem_sp_dhkey_end ,contr 
+0x79db 033419 force 6 ,loopcnt 
+0x79dc 033420 call pad_xor 
+0x79dd 033421 call sha_init 
+0x79de 033422 call sha 
+0x79df 033423 fetch 2 ,mem_sp_prarm_stack + 12 
+0x79e0 033424 copy pdata ,contr 
+0x79e1 033425 arg memdat ,contw 
+0x79e2 033426 call memcpy_dword_swap4 
+0x79e3 033427 fetch 2 ,mem_sp_prarm_stack + 14 
+0x79e4 033428 copy pdata ,contr 
+0x79e5 033429 call memcpy_dword_swap4 
+0x79e6 033431 setarg 0x62746c 
+0x79e7 033432 lshift8 pdata ,pdata 
+0x79e8 033433 or_into 0x6b ,pdata 
+0x79e9 033434 istore 4 ,contw 
+0x79ea 033435 arg mem_addr_value_end ,contr 
+0x79eb 033436 force 3 ,loopcnt 
+0x79ec 033437 call memcpy_dword_swap 
+0x79ed 033439 setarg 0x800000 
+0x79ee 033440 lshift8 pdata ,pdata 
+0x79ef 033441 istore 4 ,contw 
+0x79f0 033442 force 0 ,pdata 
+0x79f1 033443 istore 8 ,contw 
+0x79f2 033444 setarg 0x0380 
+0x79f3 033445 istore 4 ,contw 
+0x79f4 033446 call sha 
+0x79f5 033448 call sha_result 
+0x79f6 033449 arg memresult ,contr 
+0x79f7 033450 arg memahsave ,contw 
+0x79f8 033451 call memcpy32 
+0x79f9 033453 setarg 0x5c5c5c 
+0x79fa 033454 lshift8 pdata ,temp 
+0x79fb 033455 or_into 0x5c ,temp 
+0x79fc 033456 arg mem_sp_dhkey_end ,contr 
+0x79fd 033457 force 6 ,loopcnt 
+0x79fe 033458 call pad_xor 
+0x79ff 033459 call sha_init 
+0x7a00 033460 call sha 
+0x7a01 033461 arg memahsave_end ,contr 
+0x7a02 033462 arg memdat ,contw 
+0x7a03 033463 force 8 ,loopcnt 
+0x7a04 033464 call memcpy_dword_swap 
+0x7a05 033465 setarg 0x800000 
+0x7a06 033466 lshift8 pdata ,pdata 
+0x7a07 033467 istore 4 ,contw 
+0x7a08 033468 call bn_zero 
+0x7a09 033469 setarg 0x0300 
+0x7a0a 033470 istore 4 ,contw 
+0x7a0b 033471 call sha 
+0x7a0c 033472 branch sha_result 
+:      033475 function_f3a:
+0x7a0d 033476 fetch 1 ,mem_ssp_mode_flag 
+0x7a0e 033477 bne ssp_mode_passkey_entry_flag ,function_f3a_no_pin 
+:      033478 function_f3a_common:
+0x7a0f 033479 bpatchx patch3d_6 ,mem_patch3d 
+0x7a10 033480 setarg 0x363636 
+0x7a11 033481 lshift8 pdata ,temp 
+0x7a12 033482 or_into 0x36 ,temp 
+0x7a13 033483 arg mem_sp_dhkey_end ,contr 
+0x7a14 033484 force 6 ,loopcnt 
+0x7a15 033485 call pad_xor 
+0x7a16 033486 call sha_init 
+0x7a17 033487 call sha 
+0x7a18 033488 arg mem_sp_random_remote_end ,contr 
+0x7a19 033489 arg memdat ,contw 
+0x7a1a 033490 call memcpy_dword_swap4 
+0x7a1b 033491 arg mem_sp_random_local_end ,contr 
+0x7a1c 033492 call memcpy_dword_swap4 
+0x7a1d 033493 branch function_f3_common 
+:      033495 function_f3a_no_pin:
+0x7a1e 033496 setarg 0 
+0x7a1f 033497 store 4 ,mem_pin 
+0x7a20 033498 branch function_f3a_common 
+:      033500 function_f3b_no_pin:
+0x7a21 033501 setarg 0 
+0x7a22 033502 store 4 ,mem_pin 
+0x7a23 033503 branch function_f3b_common 
+:      033506 function_f3b:
+0x7a24 033507 fetch 1 ,mem_ssp_mode_flag 
+0x7a25 033508 bne ssp_mode_passkey_entry_flag ,function_f3b_no_pin 
+:      033509 function_f3b_common:
+0x7a26 033510 setarg 0x363636 
+0x7a27 033511 lshift8 pdata ,temp 
+0x7a28 033512 or_into 0x36 ,temp 
+0x7a29 033513 arg mem_sp_dhkey_end ,contr 
+0x7a2a 033514 force 6 ,loopcnt 
+0x7a2b 033515 call pad_xor 
+0x7a2c 033516 call sha_init 
+0x7a2d 033517 call sha 
+0x7a2e 033519 arg mem_sp_random_local_end ,contr 
+0x7a2f 033520 arg memdat ,contw 
+0x7a30 033521 call memcpy_dword_swap4 
+0x7a31 033522 arg mem_sp_random_remote_end ,contr 
+0x7a32 033523 call memcpy_dword_swap4 
+:      033524 function_f3_common:
+0x7a33 033525 setarg 0x0 
+0x7a34 033526 istore 8 ,contw 
+0x7a35 033527 istore 4 ,contw 
+0x7a36 033528 fetch 4 ,mem_pin 
+0x7a37 033529 istore 4 ,contw 
+0x7a38 033531 copy contw ,temp 
+0x7a39 033532 jam 0x80 ,mem_addr_padding 
+0x7a3a 033533 copy temp ,contw 
+0x7a3b 033534 arg mem_addr_iocap_end ,contr 
+0x7a3c 033535 call memcpy_dword_swap4 
+0x7a3d 033537 call sha 
+0x7a3e 033539 arg memdat ,contw 
+0x7a3f 033540 force 7 ,loopcnt 
+0x7a40 033541 call memset0 
+0x7a41 033542 istore 4 ,contw 
+0x7a42 033543 setarg 0x03F8 
+0x7a43 033544 istore 4 ,contw 
+0x7a44 033545 call sha 
+0x7a45 033546 call sha_result 
+0x7a46 033548 arg memresult ,contr 
+0x7a47 033549 arg memahsave ,contw 
+0x7a48 033550 call memcpy32 
+0x7a49 033552 setarg 0x5c5c5c 
+0x7a4a 033553 lshift8 pdata ,temp 
+0x7a4b 033554 or_into 0x5c ,temp 
+0x7a4c 033555 arg mem_sp_dhkey_end ,contr 
+0x7a4d 033556 force 6 ,loopcnt 
+0x7a4e 033557 call pad_xor 
+0x7a4f 033558 call sha_init 
+0x7a50 033559 call sha 
+0x7a51 033560 arg memahsave_end ,contr 
+0x7a52 033561 arg memdat ,contw 
+0x7a53 033562 force 8 ,loopcnt 
+0x7a54 033563 call memcpy_dword_swap 
+0x7a55 033564 setarg 0x800000 
+0x7a56 033565 lshift8 pdata ,pdata 
+0x7a57 033566 istore 4 ,contw 
+0x7a58 033567 call bn_zero 
+0x7a59 033568 setarg 0x0300 
+0x7a5a 033569 istore 4 ,contw 
+0x7a5b 033570 call sha 
+0x7a5c 033571 branch sha_result 
+:      033578 eckp_calc_init:
+0x7a5d 033579 jam 192 ,mem_ec_loopc 
+:      033580 eckp_calc_init_1:
+0x7a5e 033581 fetch 1 ,mem_ec_loopc 
+0x7a5f 033582 rtn blank 
+0x7a60 033583 increase -1 ,pdata 
+0x7a61 033584 store 1 ,mem_ec_loopc 
+0x7a62 033585 arg mem_k ,contr 
+0x7a63 033586 call bn_testbit 
+0x7a64 033587 branch eckp_calc_init_1 ,true 
+0x7a65 033588 arg mem_ax ,contr 
+0x7a66 033589 arg mem_cx ,contw 
+0x7a67 033590 branch ec_copy 
+:      033592 eckp_calc:
+0x7a68 033593 call ecdbl 
+0x7a69 033594 fetch 1 ,mem_ec_loopc 
+0x7a6a 033595 increase -1 ,pdata 
+0x7a6b 033596 store 1 ,mem_ec_loopc 
+0x7a6c 033597 arg mem_k ,contr 
+0x7a6d 033598 call bn_testbit 
+0x7a6e 033599 rtn true 
+0x7a6f 033600 branch ecadd 
+:      033602 memcpy_dword_swap4:
+0x7a70 033603 force 4 ,loopcnt 
+:      033604 memcpy_dword_swap:
+0x7a71 033605 increase -4 ,contr 
+:      033606 memcpy_dword_swap_loop:
+0x7a72 033607 ifetch 4 ,contr 
+0x7a73 033608 istore 4 ,contw 
+0x7a74 033609 increase -8 ,contr 
+0x7a75 033610 loop memcpy_dword_swap_loop 
+0x7a76 033611 rtn 
+:      033616 sp_initialize_256:
+0x7a77 033617 bpatchx patch3d_7 ,mem_patch3d 
+0x7a78 033618 fetch 1 ,mem_le_secure_connect_enable 
+0x7a79 033619 branch le_secure_connection_disable ,blank 
+0x7a7a 033620 call le_secure_connection_enable 
+0x7a7b 033621 call sp_clear_flags 
+0x7a7c 033623 branch sp_pubkey_calc_256 
+:      033628 sp_pubkey_calc_256:
+0x7a7d 033629 fetch 1 ,mem_le_sc_local_key_invalid 
+0x7a7e 033630 rtnne sp_key_invalid 
+0x7a7f 033631 fetch 1 ,mem_le_sc_calc 
+0x7a80 033632 rtnne sp_calc_standby 
+0x7a81 033634 arg mem_le_private_key_256 ,contw 
+0x7a82 033635 force 15 ,queue 
+0x7a83 033636 call random_generator 
+0x7a84 033637 random pdata 
+0x7a85 033638 rshift pdata ,pdata 
+0x7a86 033639 istore 2 ,contw 
+0x7a87 033641 arg mem_k_256 ,contw 
+0x7a88 033642 arg mem_le_private_key_256 ,contr 
+0x7a89 033643 call memcpy32 
+0x7a8a 033645 arg mem_ax_256 ,contw 
+0x7a8b 033646 arg mem_gx_256 ,contr 
+0x7a8c 033647 call memcpy64 
+0x7a8d 033649 arg mem_az_256 ,contw 
+0x7a8e 033650 call clear_mem_256 
+0x7a8f 033651 jam 1 ,mem_az_256 
+0x7a90 033653 call eckp_calc_init_256 
+0x7a91 033654 jam sp_calc_pubkey_256 ,mem_le_sc_calc 
+0x7a92 033655 rtn 
+:      033657 sp_pubkey_generated_256:
+0x7a93 033658 arg mem_le_pubkey_local_x_256 ,contw 
+0x7a94 033659 arg mem_bx_256 ,contr 
+0x7a95 033660 call memcpy64 
+0x7a96 033661 jam sp_key_valid_256 ,mem_le_sc_local_key_invalid 
+0x7a97 033662 jam sp_calc_standby ,mem_le_sc_calc 
+0x7a98 033663 rtn 
+:      033667 sp_dhkey_calc_256:
+0x7a99 033668 fetch 1 ,mem_sp_dhkey_invalid 
+0x7a9a 033669 rtnne sp_key_invalid 
+0x7a9b 033670 fetch 1 ,mem_le_sc_calc 
+0x7a9c 033671 rtnne sp_calc_standby 
+0x7a9d 033673 arg mem_k_256 ,contw 
+0x7a9e 033674 arg mem_le_private_key_256 ,contr 
+0x7a9f 033675 call memcpy32 
+0x7aa0 033677 arg mem_ax_256 ,contw 
+0x7aa1 033678 arg mem_le_pubkey_remote_x_256 ,contr 
+0x7aa2 033679 call memcpy64 
+0x7aa3 033681 arg mem_az_256 ,contw 
+0x7aa4 033682 call clear_mem_256 
+0x7aa5 033683 jam 1 ,mem_az_256 
+0x7aa6 033685 call eckp_calc_init_256 
+0x7aa7 033686 jam sp_calc_dhkey_256 ,mem_le_sc_calc 
+0x7aa8 033687 rtn 
+:      033690 sp_dhkey_generated_256:
+0x7aa9 033692 arg mem_le_dhkey_256 ,contw 
+0x7aaa 033693 arg mem_bx_256 ,contr 
+0x7aab 033694 call memcpy32 
+0x7aac 033695 jam sp_key_valid_256 ,mem_sp_dhkey_invalid 
+0x7aad 033696 jam sp_calc_standby ,mem_le_sc_calc 
+0x7aae 033697 rtn 
+:      033701 sp_calc_sequence_256:
+0x7aaf 033702 fetch 1 ,mem_le_secure_connect_enable 
+0x7ab0 033703 rtn blank 
+0x7ab1 033704 fetch 1 ,mem_le_sc_calc 
+0x7ab2 033705 rtn blank 
+0x7ab3 033706 increase 0x80 ,pdata 
+0x7ab4 033707 store 1 ,mem_le_sc_calc 
+0x7ab5 033708 rtnbit1 7 
+0x7ab6 033709 fetch 2 ,mem_ec_loopc 
+0x7ab7 033710 branch sp_calc_sequence_done_256 ,blank 
+0x7ab8 033711 branch eckp_calc_256 
+:      033713 sp_calc_sequence_done_256:
+0x7ab9 033714 bpatchx patch3e_0 ,mem_patch3e 
+0x7aba 033715 call ecunmapz_256 
+0x7abb 033716 fetch 1 ,mem_le_sc_calc 
+0x7abc 033717 beq sp_calc_pubkey_256 ,sp_pubkey_generated_256 
+0x7abd 033718 beq sp_calc_dhkey_256 ,sp_dhkey_generated_256 
+0x7abe 033719 rtn 
+:      033722 eckp_calc_256:
+0x7abf 033723 call ecdbl_256 
+0x7ac0 033724 fetch 2 ,mem_ec_loopc 
+0x7ac1 033725 increase -1 ,pdata 
+0x7ac2 033726 store 2 ,mem_ec_loopc 
+0x7ac3 033727 arg mem_k_256 ,contr 
+0x7ac4 033728 call bn_testbit 
+0x7ac5 033729 rtn true 
+0x7ac6 033730 branch ecadd_256 
+:      033732 eckp_calc_init_256:
+0x7ac7 033733 bpatchx patch3e_1 ,mem_patch3e 
+0x7ac8 033734 setarg 256 ,pdata 
+0x7ac9 033735 store 2 ,mem_ec_loopc 
+:      033736 eckp_calc_init_256_1:
+0x7aca 033737 fetch 2 ,mem_ec_loopc 
+0x7acb 033738 rtn blank 
+0x7acc 033739 increase -1 ,pdata 
+0x7acd 033740 store 2 ,mem_ec_loopc 
+0x7ace 033741 arg mem_k_256 ,contr 
+0x7acf 033742 call bn_testbit 
+0x7ad0 033743 branch eckp_calc_init_256_1 ,true 
+0x7ad1 033744 arg mem_ax_256 ,contr 
+0x7ad2 033745 arg mem_cx_256 ,contw 
+0x7ad3 033746 branch memcpy96 
+:      033749 ecunmapz_256:
+0x7ad4 033750 arg mem_cz_256 ,rega 
+0x7ad5 033751 arg mem_t3_256 ,contw 
+0x7ad6 033752 call bn_invmod_256 
+0x7ad7 033753 arg mem_t3_256 ,rega 
+0x7ad8 033754 arg mem_t1_256 ,contw 
+0x7ad9 033755 call bn_sqrmod_256 
+0x7ada 033756 arg mem_cx_256 ,rega 
+0x7adb 033757 arg mem_t1_256 ,regb 
+0x7adc 033758 arg mem_bx_256 ,contw 
+0x7add 033759 call bn_mulmod_256 
+0x7ade 033760 arg mem_t3_256 ,rega 
+0x7adf 033761 arg mem_t1_256 ,regb 
+0x7ae0 033762 arg mem_t2_256 ,contw 
+0x7ae1 033763 call bn_mulmod_256 
+0x7ae2 033764 arg mem_cy_256 ,rega 
+0x7ae3 033765 arg mem_t2_256 ,regb 
+0x7ae4 033766 arg mem_by_256 ,contw 
+0x7ae5 033767 branch bn_mulmod_256 
+:      033769 ecdbl_256:
+0x7ae6 033770 arg mem_cz_256 ,rega 
+0x7ae7 033771 arg mem_t2_256 ,contw 
+0x7ae8 033772 call bn_sqrmod_256 
+0x7ae9 033773 arg mem_t2_256 ,rega 
+0x7aea 033774 arg mem_t3_256 ,contw 
+0x7aeb 033775 call bn_sqrmod_256 
+0x7aec 033777 arg mem_a_256 ,rega 
+0x7aed 033778 arg mem_t3_256 ,regb 
+0x7aee 033779 arg mem_t3_256 ,contw 
+0x7aef 033780 call bn_mulmod_256 
+0x7af0 033781 arg mem_cx_256 ,rega 
+0x7af1 033782 arg mem_t2_256 ,contw 
+0x7af2 033783 call bn_sqrmod_256 
+0x7af3 033785 arg mem_t2_256 ,contr 
+0x7af4 033786 arg mem_t1_256 ,contw 
+0x7af5 033787 call memcpy32 
+0x7af6 033788 arg mem_t1_256 ,rega 
+0x7af7 033789 call bn_lshiftmod_256 
+0x7af8 033790 arg mem_t2_256 ,rega 
+0x7af9 033791 arg mem_t1_256 ,regb 
+0x7afa 033792 arg mem_t2_256 ,contw 
+0x7afb 033793 call bn_addmod_256 
+0x7afc 033795 arg mem_t2_256 ,rega 
+0x7afd 033796 arg mem_t3_256 ,regb 
+0x7afe 033797 arg mem_t2_256 ,contw 
+0x7aff 033798 call bn_addmod_256 
+0x7b00 033800 arg mem_cx_256 ,contr 
+0x7b01 033801 arg mem_t1_256 ,contw 
+0x7b02 033802 call memcpy32 
+0x7b03 033803 arg mem_cy_256 ,rega 
+0x7b04 033804 arg mem_t3_256 ,contw 
+0x7b05 033805 call bn_sqrmod_256 
+0x7b06 033806 arg mem_t1_256 ,rega 
+0x7b07 033807 call bn_lshiftmod_256 
+0x7b08 033808 arg mem_t1_256 ,rega 
+0x7b09 033809 call bn_lshiftmod_256 
+0x7b0a 033810 arg mem_t1_256 ,rega 
+0x7b0b 033811 arg mem_t3_256 ,regb 
+0x7b0c 033812 arg mem_t1_256 ,contw 
+0x7b0d 033813 call bn_mulmod_256 
+0x7b0e 033814 arg mem_t3_256 ,rega 
+0x7b0f 033815 arg mem_t0_256 ,contw 
+0x7b10 033816 call bn_sqrmod_256 
+0x7b11 033817 arg mem_t0_256 ,rega 
+0x7b12 033818 call bn_lshiftmod_256 
+0x7b13 033819 arg mem_t0_256 ,rega 
+0x7b14 033820 call bn_lshiftmod_256 
+0x7b15 033821 arg mem_t0_256 ,rega 
+0x7b16 033822 call bn_lshiftmod_256 
+0x7b17 033823 arg mem_cy_256 ,contr 
+0x7b18 033824 arg mem_t3_256 ,contw 
+0x7b19 033825 call memcpy32 
+0x7b1a 033826 arg mem_t3_256 ,rega 
+0x7b1b 033827 call bn_lshiftmod_256 
+0x7b1c 033828 arg mem_t3_256 ,rega 
+0x7b1d 033829 arg mem_cz_256 ,regb 
+0x7b1e 033830 arg mem_cz_256 ,contw 
+0x7b1f 033831 call bn_mulmod_256 
+0x7b20 033834 arg mem_t2_256 ,rega 
+0x7b21 033835 arg mem_t3_256 ,contw 
+0x7b22 033836 call bn_sqrmod_256 
+0x7b23 033838 arg mem_t3_256 ,rega 
+0x7b24 033839 arg mem_t1_256 ,regb 
+0x7b25 033840 arg mem_t3_256 ,contw 
+0x7b26 033841 call bn_submod_256 
+0x7b27 033842 arg mem_t3_256 ,rega 
+0x7b28 033843 arg mem_t1_256 ,regb 
+0x7b29 033844 arg mem_cx_256 ,contw 
+0x7b2a 033845 call bn_submod_256 
+0x7b2b 033846 arg mem_t1_256 ,rega 
+0x7b2c 033847 arg mem_cx_256 ,regb 
+0x7b2d 033848 arg mem_t3_256 ,contw 
+0x7b2e 033849 call bn_submod_256 
+0x7b2f 033850 arg mem_t3_256 ,rega 
+0x7b30 033851 arg mem_t2_256 ,regb 
+0x7b31 033852 arg mem_t3_256 ,contw 
+0x7b32 033853 call bn_mulmod_256 
+0x7b33 033854 arg mem_t3_256 ,rega 
+0x7b34 033855 arg mem_t0_256 ,regb 
+0x7b35 033856 arg mem_cy_256 ,contw 
+0x7b36 033857 branch bn_submod_256 
+:      033859 ecadd_256:
+0x7b37 033861 arg mem_az_256 ,rega 
+0x7b38 033862 arg mem_t7_256 ,contw 
+0x7b39 033863 call bn_sqrmod_256 
+0x7b3a 033864 arg mem_cx_256 ,rega 
+0x7b3b 033865 arg mem_t7_256 ,regb 
+0x7b3c 033866 arg mem_t0_256 ,contw 
+0x7b3d 033867 call bn_mulmod_256 
+0x7b3e 033870 arg mem_az_256 ,rega 
+0x7b3f 033871 arg mem_t7_256 ,regb 
+0x7b40 033872 arg mem_t7_256 ,contw 
+0x7b41 033873 call bn_mulmod_256 
+0x7b42 033874 arg mem_cy_256 ,rega 
+0x7b43 033875 arg mem_t7_256 ,regb 
+0x7b44 033876 arg mem_t1_256 ,contw 
+0x7b45 033877 call bn_mulmod_256 
+0x7b46 033880 arg mem_cz_256 ,rega 
+0x7b47 033881 arg mem_t7_256 ,contw 
+0x7b48 033882 call bn_sqrmod_256 
+0x7b49 033883 arg mem_ax_256 ,rega 
+0x7b4a 033884 arg mem_t7_256 ,regb 
+0x7b4b 033885 arg mem_t2_256 ,contw 
+0x7b4c 033886 call bn_mulmod_256 
+0x7b4d 033888 arg mem_cz_256 ,rega 
+0x7b4e 033889 arg mem_t7_256 ,regb 
+0x7b4f 033890 arg mem_t7_256 ,contw 
+0x7b50 033891 call bn_mulmod_256 
+0x7b51 033892 arg mem_ay_256 ,rega 
+0x7b52 033893 arg mem_t7_256 ,regb 
+0x7b53 033894 arg mem_t3_256 ,contw 
+0x7b54 033895 call bn_mulmod_256 
+0x7b55 033900 arg mem_t0_256 ,regb 
+0x7b56 033901 arg mem_t2_256 ,rega 
+0x7b57 033902 arg mem_t7_256 ,contw 
+0x7b58 033903 call bn_submod_256 
+0x7b59 033904 arg mem_t0_256 ,rega 
+0x7b5a 033905 arg mem_t2_256 ,regb 
+0x7b5b 033906 arg mem_t0_256 ,contw 
+0x7b5c 033907 call bn_addmod_256 
+0x7b5d 033910 arg mem_t1_256 ,regb 
+0x7b5e 033911 arg mem_t3_256 ,rega 
+0x7b5f 033912 arg mem_t2_256 ,contw 
+0x7b60 033913 call bn_submod_256 
+0x7b61 033914 arg mem_t1_256 ,rega 
+0x7b62 033915 arg mem_t3_256 ,regb 
+0x7b63 033916 arg mem_t1_256 ,contw 
+0x7b64 033917 call bn_addmod_256 
+0x7b65 033918 arg mem_t1_256 ,rega 
+0x7b66 033919 arg mem_t7_256 ,regb 
+0x7b67 033920 arg mem_t1_256 ,contw 
+0x7b68 033921 call bn_mulmod_256 
+0x7b69 033922 arg mem_cz_256 ,rega 
+0x7b6a 033923 arg mem_az_256 ,regb 
+0x7b6b 033924 arg mem_t3_256 ,contw 
+0x7b6c 033925 call bn_mulmod_256 
+0x7b6d 033926 arg mem_t3_256 ,rega 
+0x7b6e 033927 arg mem_t7_256 ,regb 
+0x7b6f 033928 arg mem_cz_256 ,contw 
+0x7b70 033929 call bn_mulmod_256 
+0x7b71 033931 arg mem_t7_256 ,rega 
+0x7b72 033932 arg mem_t7_256 ,contw 
+0x7b73 033933 call bn_sqrmod_256 
+0x7b74 033934 arg mem_t7_256 ,rega 
+0x7b75 033935 arg mem_t0_256 ,regb 
+0x7b76 033936 arg mem_t3_256 ,contw 
+0x7b77 033937 call bn_mulmod_256 
+0x7b78 033938 arg mem_t7_256 ,rega 
+0x7b79 033939 arg mem_t1_256 ,regb 
+0x7b7a 033940 arg mem_t1_256 ,contw 
+0x7b7b 033941 call bn_mulmod_256 
+0x7b7c 033942 arg mem_t2_256 ,rega 
+0x7b7d 033943 arg mem_cx_256 ,contw 
+0x7b7e 033944 call bn_sqrmod_256 
+0x7b7f 033945 arg mem_cx_256 ,rega 
+0x7b80 033946 arg mem_t3_256 ,regb 
+0x7b81 033947 arg mem_cx_256 ,contw 
+0x7b82 033948 call bn_submod_256 
+0x7b83 033949 arg mem_cx_256 ,contr 
+0x7b84 033950 arg mem_t7_256 ,contw 
+0x7b85 033951 call memcpy32 
+0x7b86 033952 arg mem_t7_256 ,rega 
+0x7b87 033953 call bn_lshiftmod_256 
+0x7b88 033954 arg mem_t3_256 ,rega 
+0x7b89 033955 arg mem_t7_256 ,regb 
+0x7b8a 033956 arg mem_t3_256 ,contw 
+0x7b8b 033957 call bn_submod_256 
+0x7b8c 033958 arg mem_t3_256 ,rega 
+0x7b8d 033959 arg mem_t2_256 ,regb 
+0x7b8e 033960 arg mem_t2_256 ,contw 
+0x7b8f 033961 call bn_mulmod_256 
+0x7b90 033962 arg mem_t2_256 ,rega 
+0x7b91 033963 arg mem_t1_256 ,regb 
+0x7b92 033964 arg mem_cy_256 ,contw 
+0x7b93 033965 call bn_submod_256 
+0x7b94 033966 arg mem_cy_256 ,rega 
+0x7b95 033967 arg mem_p_256 ,regb 
+0x7b96 033968 arg mem_cy_256 ,contw 
+0x7b97 033969 force 0 ,regc 
+0x7b98 033970 fetch 1 ,mem_cy_256 
+0x7b99 033971 isolate1 0 ,pdata 
+0x7b9a 033972 call bn_add_256 ,true 
+0x7b9b 033973 copy regc ,alarm 
+0x7b9c 033974 arg mem_cy_256 ,rega 
+0x7b9d 033975 call bn_rshift_256 
+0x7b9e 033976 fetch 1 ,mem_cy5_256 
+0x7b9f 033977 isolate1 0 ,alarm 
+0x7ba0 033978 setflag true ,7 ,pdata 
+0x7ba1 033979 store 1 ,mem_cy5_256 
+0x7ba2 033980 rtn 
+:      033982 bn_invmod_256:
+0x7ba3 033983 copy contw ,timeup 
+0x7ba4 033984 arg mem_tmp0_256 ,contw 
+0x7ba5 033985 call clear_mem_256 
+0x7ba6 033986 force 0 ,pdata 
+0x7ba7 033988 store 4 ,mem_t2_256 
+0x7ba8 033989 jam 1 ,mem_tmp0_256 
+0x7ba9 033990 arg mem_tmp1_256 ,contw 
+0x7baa 033991 call clear_mem_512 
+0x7bab 033992 arg mem_p_256 ,contr 
+0x7bac 033993 arg mem_tmp2_256 ,contw 
+0x7bad 033994 call memcpy32 
+0x7bae 033995 copy rega ,contr 
+0x7baf 033996 arg mem_tmp3_256 ,contw 
+0x7bb0 033997 call memcpy32 
+:      034003 bn_invmod_256_2:
+0x7bb1 034004 arg mem_tmp3_256 ,contr 
+0x7bb2 034005 call bn_eq_zero_256 
+0x7bb3 034006 branch bn_invmod_256_0 ,blank 
+0x7bb4 034011 arg mem_tmp3_256 ,rega 
+0x7bb5 034012 arg mem_tmp0_256 ,regb 
+0x7bb6 034013 call bn_rshifteven_256 
+0x7bb7 034014 arg mem_tmp2_256 ,rega 
+0x7bb8 034015 arg mem_tmp1_256 ,regb 
+0x7bb9 034016 call bn_rshifteven_256 
+0x7bba 034018 arg mem_tmp3_256 ,rega 
+0x7bbb 034019 arg mem_tmp2_256 ,regb 
+0x7bbc 034020 call bn_bigeq_256 
+0x7bbd 034021 branch bn_invmod_256_1 ,positive 
+0x7bbe 034022 arg mem_tmp2_256 ,rega 
+0x7bbf 034023 arg mem_tmp3_256 ,regb 
+0x7bc0 034024 copy rega ,contw 
+0x7bc1 034025 call bn_sub_256 
+0x7bc2 034026 arg mem_tmp0_256 ,rega 
+0x7bc3 034027 arg mem_tmp1_256 ,regb 
+0x7bc4 034028 copy regb ,contw 
+0x7bc5 034029 call bn_add_256 
+0x7bc6 034030 ifetch 1 ,rega 
+0x7bc7 034031 iadd regc ,regc 
+0x7bc8 034032 ifetch 1 ,regb 
+0x7bc9 034033 iadd regc ,pdata 
+0x7bca 034034 istore 1 ,regb 
+0x7bcb 034035 branch bn_invmod_256_2 
+:      034036 bn_invmod_256_1:
+0x7bcc 034037 arg mem_tmp3_256 ,rega 
+0x7bcd 034038 arg mem_tmp2_256 ,regb 
+0x7bce 034039 copy rega ,contw 
+0x7bcf 034040 call bn_sub_256 
+0x7bd0 034041 arg mem_tmp1_256 ,rega 
+0x7bd1 034042 arg mem_tmp0_256 ,regb 
+0x7bd2 034043 copy regb ,contw 
+0x7bd3 034044 call bn_add_256 
+0x7bd4 034045 ifetch 1 ,rega 
+0x7bd5 034046 iadd regc ,regc 
+0x7bd6 034047 ifetch 1 ,regb 
+0x7bd7 034048 iadd regc ,pdata 
+0x7bd8 034049 istore 1 ,regb 
+0x7bd9 034050 branch bn_invmod_256_2 
+:      034051 bn_invmod_256_0:
+0x7bda 034053 arg mem_tmp1_256 ,rega 
+0x7bdb 034054 copy timeup ,contw 
+0x7bdc 034055 call bn_p256mod 
+0x7bdd 034057 arg mem_p_256 ,rega 
+0x7bde 034058 copy timeup ,regb 
+0x7bdf 034059 copy timeup ,contw 
+0x7be0 034060 branch bn_submod_256 
+:      034063 bn_mulmod_256:
+0x7be1 034064 copy contw ,timeup 
+0x7be2 034066 force 0 ,regext_index 
+0x7be3 034068 arg mem_tmp1_256 ,contw 
+0x7be4 034069 call clear_mem_512 
+0x7be5 034070 arg mem_regext ,contw 
+0x7be6 034071 call clear_mem_512 
+0x7be7 034075 copy rega ,contr 
+0x7be8 034077 jam 0 ,mem_regext 
+0x7be9 034078 setarg 0 
+0x7bea 034079 call bn_load_mem 
+0x7beb 034080 copy regb ,contr 
+0x7bec 034081 call bn_load_256 
+0x7bed 034084 force 0 ,queue 
+0x7bee 034085 arg mem_tmp1_256 ,contw 
+:      034086 bn_mulmod_256_1:
+0x7bef 034089 arg mem_regext ,temp 
+0x7bf0 034090 copy queue ,regb 
+0x7bf1 034091 lshift2 regb ,pdata 
+0x7bf2 034093 iadd temp ,regb 
+0x7bf3 034094 force 0 ,temp 
+0x7bf4 034095 force 0 ,regc 
+:      034096 bn_mulmod_256_0:
+0x7bf5 034101 ifetch 4 ,contw 
+0x7bf6 034102 iforce rega 
+0x7bf7 034105 ifetch 4 ,regb 
+0x7bf8 034106 copy regc ,regext_index 
+0x7bf9 034107 imul32 regext ,pdata 
+0x7bfa 034108 iadd rega ,pdata 
+0x7bfb 034109 iadd temp ,pdata 
+0x7bfc 034110 istore 4 ,contw 
+0x7bfd 034111 rshift32 pdata ,temp 
+0x7bfe 034112 increase 1 ,regc 
+0x7bff 034113 compare 8 ,regc ,0xff 
+0x7c00 034114 nbranch bn_mulmod_256_0 ,true 
+0x7c01 034116 deposit temp 
+0x7c02 034117 istore 4 ,contw 
+0x7c03 034118 increase -32 ,contw 
+0x7c04 034121 increase 1 ,queue 
+0x7c05 034122 compare 8 ,queue ,0xff 
+0x7c06 034123 nbranch bn_mulmod_256_1 ,true 
+0x7c07 034124 arg mem_tmp1_256 ,rega 
+0x7c08 034125 copy timeup ,contw 
+0x7c09 034126 branch bn_p256mod 
+:      034128 bn_p256mod:
+0x7c0a 034129 bpatchx patch3e_2 ,mem_patch3e 
+0x7c0b 034130 copy contw ,timeup 
+0x7c0c 034131 copy rega ,alarm 
+0x7c0d 034132 arg mem_tmp2_256 ,regb 
+0x7c0e 034133 copy regb ,contw 
+0x7c0f 034134 call memset0_4 
+0x7c10 034135 istore 8 ,contw 
+0x7c11 034136 add rega ,44 ,contr 
+0x7c12 034137 call memcpy8 
+0x7c13 034138 call memcpy12 
+0x7c14 034139 copy regb ,rega 
+0x7c15 034140 call bn_lshiftmod_256 
+0x7c16 034141 arg mem_tmp2_256 ,regb 
+0x7c17 034142 copy alarm ,rega 
+0x7c18 034143 copy timeup ,contw 
+0x7c19 034144 call bn_addmod_256 
+0x7c1a 034146 arg mem_tmp2_256 ,regb 
+0x7c1b 034147 copy regb ,contw 
+0x7c1c 034148 call memset0_4 
+0x7c1d 034149 istore 8 ,contw 
+0x7c1e 034150 add alarm ,48 ,contr 
+0x7c1f 034151 call memcpy16 
+0x7c20 034152 call memset0_4 
+0x7c21 034153 copy regb ,rega 
+0x7c22 034154 call bn_lshiftmod_256 
+0x7c23 034158 arg mem_tmp2_256 ,regb 
+0x7c24 034159 copy timeup ,rega 
+0x7c25 034160 copy rega ,contw 
+0x7c26 034161 call bn_addmod_256 
+0x7c27 034165 arg mem_tmp2_256 ,regb 
+0x7c28 034166 copy regb ,contw 
+0x7c29 034167 add alarm ,32 ,contr 
+0x7c2a 034168 call memcpy12 
+0x7c2b 034169 call memset0_4 
+0x7c2c 034170 istore 8 ,contw 
+0x7c2d 034171 add alarm ,56 ,contr 
+0x7c2e 034172 call memcpy8 
+0x7c2f 034173 copy timeup ,rega 
+0x7c30 034174 copy rega ,contw 
+0x7c31 034175 call bn_addmod_256 
+0x7c32 034179 arg mem_tmp2_256 ,regb 
+0x7c33 034180 copy regb ,contw 
+0x7c34 034181 add alarm ,36 ,contr 
+0x7c35 034182 call memcpy12 
+0x7c36 034183 add alarm ,52 ,contr 
+0x7c37 034184 call memcpy12 
+0x7c38 034185 add alarm ,52 ,contr 
+0x7c39 034186 call memcpy4 
+0x7c3a 034187 add alarm ,32 ,contr 
+0x7c3b 034188 call memcpy4 
+0x7c3c 034189 copy timeup ,rega 
+0x7c3d 034190 copy rega ,contw 
+0x7c3e 034191 call bn_addmod_256 
+0x7c3f 034194 arg mem_tmp2_256 ,regb 
+0x7c40 034195 copy regb ,contw 
+0x7c41 034196 add alarm ,44 ,contr 
+0x7c42 034197 call memcpy12 
+0x7c43 034198 call memset0_4 
+0x7c44 034199 istore 8 ,contw 
+0x7c45 034200 add alarm ,32 ,contr 
+0x7c46 034201 call memcpy4 
+0x7c47 034202 add alarm ,40 ,contr 
+0x7c48 034203 call memcpy4 
+0x7c49 034204 copy timeup ,rega 
+0x7c4a 034205 copy rega ,contw 
+0x7c4b 034206 call bn_submod_256 
+0x7c4c 034209 arg mem_tmp2_256 ,regb 
+0x7c4d 034210 copy regb ,contw 
+0x7c4e 034211 add alarm ,48 ,contr 
+0x7c4f 034212 call memcpy8 
+0x7c50 034213 call memcpy8 
+0x7c51 034214 force 0 ,pdata 
+0x7c52 034215 istore 8 ,contw 
+0x7c53 034216 add alarm ,36 ,contr 
+0x7c54 034217 call memcpy4 
+0x7c55 034218 add alarm ,44 ,contr 
+0x7c56 034219 call memcpy4 
+0x7c57 034220 copy timeup ,rega 
+0x7c58 034221 copy rega ,contw 
+0x7c59 034222 call bn_submod_256 
+0x7c5a 034225 arg mem_tmp2_256 ,regb 
+0x7c5b 034226 copy regb ,contw 
+0x7c5c 034227 add alarm ,52 ,contr 
+0x7c5d 034228 call memcpy12 
+0x7c5e 034229 add alarm ,32 ,contr 
+0x7c5f 034230 call memcpy12 
+0x7c60 034231 call memset0_4 
+0x7c61 034232 add alarm ,48 ,contr 
+0x7c62 034233 call memcpy4 
+0x7c63 034234 copy timeup ,rega 
+0x7c64 034235 copy rega ,contw 
+0x7c65 034236 call bn_submod_256 
+0x7c66 034239 arg mem_tmp2_256 ,regb 
+0x7c67 034240 copy regb ,contw 
+0x7c68 034241 add alarm ,56 ,contr 
+0x7c69 034242 call memcpy8 
+0x7c6a 034243 call memset0_4 
+0x7c6b 034244 add alarm ,36 ,contr 
+0x7c6c 034245 call memcpy12 
+0x7c6d 034246 call memset0_4 
+0x7c6e 034247 add alarm ,52 ,contr 
+0x7c6f 034248 call memcpy4 
+0x7c70 034249 copy timeup ,rega 
+0x7c71 034250 copy rega ,contw 
+0x7c72 034251 branch bn_submod_256 
+:      034254 bn_load_mem:
+0x7c73 034255 force 32 ,loopcnt 
+0x7c74 034256 arg mem_regext ,contw 
+0x7c75 034257 iadd contw ,contw 
+0x7c76 034258 branch memcpy 
+:      034260 bn_load_256:
+0x7c77 034261 force 8 ,loopcnt 
+0x7c78 034262 branch bn_load_0 
+:      034264 bn_sqrmod_256:
+0x7c79 034265 copy rega ,regb 
+0x7c7a 034266 branch bn_mulmod_256 
+:      034268 bn_add_256:
+0x7c7b 034269 force 8 ,loopcnt 
+0x7c7c 034270 branch bn_add + 1 
+:      034272 bn_addmod_256:
+0x7c7d 034273 call bn_add_256 
+0x7c7e 034274 copy contw ,rega 
+0x7c7f 034275 branch bn_lshiftmod_ismod_256 
+:      034277 bn_lshiftmod_256:
+0x7c80 034278 call bn_lshift_256 
+:      034279 bn_lshiftmod_ismod_256:
+0x7c81 034280 isolate1 0 ,regc 
+0x7c82 034281 branch bn_lshiftmod_p_256 ,true 
+0x7c83 034282 arg mem_p_256 ,regb 
+0x7c84 034283 copy rega ,regc 
+0x7c85 034284 increase -32 ,rega 
+0x7c86 034285 call bn_bigeq_256 
+0x7c87 034286 nrtn positive 
+0x7c88 034287 copy regc ,rega 
+0x7c89 034288 branch sub_p2_256 
+:      034290 bn_lshiftmod_p_256:
+0x7c8a 034291 call sub_p2_256 
+0x7c8b 034293 copy rega ,regc 
+0x7c8c 034294 increase -32 ,rega 
+0x7c8d 034295 arg mem_p_256 ,regb 
+0x7c8e 034296 call bn_bigeq_256 
+0x7c8f 034297 nrtn positive 
+0x7c90 034298 copy regc ,rega 
+0x7c91 034299 branch sub_p2_256 
+:      034302 sub_p2_256:
+0x7c92 034303 increase -32 ,rega 
+0x7c93 034304 arg mem_p_256 ,regb 
+0x7c94 034305 copy rega ,contw 
+0x7c95 034306 branch bn_sub_256 
+:      034311 bn_submod_256:
+0x7c96 034312 call bn_sub_256 
+0x7c97 034314 branch bn_submod_256_np ,true 
+0x7c98 034317 add contw ,-32 ,rega 
+0x7c99 034318 arg mem_p_256 ,regb 
+0x7c9a 034319 call bn_bigeq_256 
+0x7c9b 034320 nrtn positive 
+0x7c9c 034321 arg mem_p_256 ,regb 
+0x7c9d 034322 add contw ,-32 ,rega 
+0x7c9e 034324 copy rega ,contw 
+0x7c9f 034325 branch bn_sub_256 
+:      034326 bn_submod_256_np:
+0x7ca0 034327 add contw ,-32 ,rega 
+0x7ca1 034328 arg mem_p_256 ,regb 
+0x7ca2 034329 copy rega ,contw 
+0x7ca3 034330 call bn_add_256 
+0x7ca4 034332 rtn true 
+0x7ca5 034333 add contw ,-32 ,rega 
+0x7ca6 034334 arg mem_p_256 ,regb 
+0x7ca7 034335 copy rega ,contw 
+0x7ca8 034336 branch bn_add_256 
+:      034340 bn_sub_256:
+0x7ca9 034341 force 8 ,loopcnt 
+0x7caa 034342 branch bn_sub + 1 
+:      034344 bn_rshift_256:
+0x7cab 034345 force 8 ,loopcnt 
+0x7cac 034346 increase 28 ,rega 
+0x7cad 034347 branch bn_rshift 
+:      034349 bn_lshift_256:
+0x7cae 034350 force 8 ,loopcnt 
+0x7caf 034351 force 0 ,regc 
+0x7cb0 034352 branch bn_lshift_0 
+:      034354 bn_bigeq_256:
+0x7cb1 034355 force 8 ,loopcnt 
+0x7cb2 034356 increase 28 ,rega 
+0x7cb3 034357 increase 28 ,regb 
+0x7cb4 034358 branch bn_bigeq_0 
+:      034361 bn_eq_zero_256:
+0x7cb5 034362 ifetch 8 ,contr 
+0x7cb6 034363 nrtn blank 
+0x7cb7 034364 branch bn_eq_zero 
+:      034369 bn_rshifteven_256:
+0x7cb8 034370 copy rega ,alarm 
+:      034371 bn_rshifteven_256_1:
+0x7cb9 034372 copy alarm ,rega 
+0x7cba 034373 ifetch 1 ,rega 
+0x7cbb 034374 isolate1 0 ,pdata 
+0x7cbc 034375 rtn true 
+0x7cbd 034376 call bn_rshift_256 
+0x7cbe 034377 ifetch 1 ,regb 
+0x7cbf 034378 isolate0 0 ,pdata 
+0x7cc0 034379 branch bn_rshifteven_256_0 ,true 
+0x7cc1 034380 arg mem_p_256 ,rega 
+0x7cc2 034381 copy regb ,contw 
+0x7cc3 034382 call bn_add_256 
+0x7cc4 034383 ifetch 1 ,regb 
+0x7cc5 034384 iadd regc ,pdata 
+0x7cc6 034385 istore 1 ,regb 
+0x7cc7 034386 increase -32 ,regb 
+:      034387 bn_rshifteven_256_0:
+0x7cc8 034388 add regb ,32 ,rega 
+0x7cc9 034389 force 9 ,loopcnt 
+0x7cca 034390 call bn_rshift 
+0x7ccb 034391 branch bn_rshifteven_256_1 
+:      034395 ui_init:
+0x7ccc 034396 call lpm_disable_exen_output 
+0x7ccd 034397 rtn wake 
+0x7cce 034398 call ui_button_init 
+0x7ccf 034399 call ui_timer_init 
+0x7cd0 034400 branch ui_led_init_global 
+:      034402 ui_dispatch:
+0x7cd1 034403 call ui_led_dispatch 
+0x7cd2 034405 branch ui_timer_check 
+:      034407 ui_button_init:
+0x7cd3 034408 fetch 1 ,mem_ui_button_gpio 
+0x7cd4 034409 rtneq ui_button_gpio_disable 
+0x7cd5 034410 iforce temp 
+0x7cd6 034411 call gpio_config_output 
+0x7cd7 034412 fetcht 1 ,mem_ui_button_gpio 
+0x7cd8 034413 call gpio_out_inactive 
+0x7cd9 034414 nop 100 
+0x7cda 034415 fetcht 1 ,mem_ui_button_gpio 
+0x7cdb 034416 call gpio_config_input 
+0x7cdc 034417 branch ui_button_polling 
+:      034421 ui_button_polling:
+0x7cdd 034422 bpatchx patch3e_3 ,mem_patch3e 
+0x7cde 034423 fetch 1 ,mem_ui_button_gpio 
+0x7cdf 034424 rtneq ui_button_gpio_disable 
+0x7ce0 034425 copy pdata ,temp 
+0x7ce1 034426 call gpio_get_bit 
+0x7ce2 034427 nbranch ui_button_up ,true 
+:      034429 ui_button_down:
+0x7ce3 034430 call ui_button_check_long_press 
+0x7ce4 034431 fetch 2 ,mem_ui_state_map 
+0x7ce5 034432 set1 ui_state_btn_down 
+0x7ce6 034433 store 2 ,mem_ui_state_map 
+0x7ce7 034434 fetch 1 ,mem_ui_button_last_state 
+0x7ce8 034435 rtneq ui_button_state_down 
+0x7ce9 034436 jam ui_button_state_down ,mem_ui_button_last_state 
+0x7cea 034438 fetch 1 ,mem_ui_button_timeout 
+0x7ceb 034439 store 1 ,mem_ui_button_timer 
+0x7cec 034440 call lpm_button_get_wake_lock 
+0x7ced 034441 jam bt_evt_button_down ,mem_fifo_temp 
+0x7cee 034442 branch ui_ipc_send_event 
+:      034443 ui_button_up:
+0x7cef 034444 fetch 2 ,mem_ui_state_map 
+0x7cf0 034445 set0 ui_state_btn_down 
+0x7cf1 034446 store 2 ,mem_ui_state_map 
+0x7cf2 034447 fetch 1 ,mem_ui_button_last_state 
+0x7cf3 034448 rtneq ui_button_state_up 
+0x7cf4 034449 jam ui_button_state_up ,mem_ui_button_last_state 
+0x7cf5 034451 jam 0 ,mem_ui_button_timer 
+0x7cf6 034452 call lpm_button_clean_wake_lock 
+0x7cf7 034453 jam bt_evt_button_up ,mem_fifo_temp 
+0x7cf8 034454 branch ui_ipc_send_event 
+:      034456 ui_button_check_long_press:
+0x7cf9 034457 fetch 1 ,mem_ui_button_timer 
+0x7cfa 034458 rtn blank 
+0x7cfb 034459 increase -1 ,pdata 
+0x7cfc 034460 store 1 ,mem_ui_button_timer 
+0x7cfd 034461 nrtn blank 
+0x7cfe 034463 jam bt_evt_button_long_pressed ,mem_fifo_temp 
+0x7cff 034464 branch ui_ipc_send_event 
+:      034466 lpm_button_get_wake_lock:
+0x7d00 034467 arg wake_lock_button ,queue 
+0x7d01 034468 branch lpm_get_wake_lock 
+:      034470 lpm_button_clean_wake_lock:
+0x7d02 034471 arg wake_lock_button ,queue 
+0x7d03 034472 branch lpm_put_wake_lock 
+:      034494 calc_curr_struct_prt:
+0x7d04 034495 fetch 2 ,mem_ui_led_struct_ptr 
+0x7d05 034496 mul32 rega ,led_offset_length ,regb 
+0x7d06 034497 iadd regb ,regb 
+0x7d07 034498 rtn 
+:      034501 ui_led_init_global:
+0x7d08 034502 fetch 1 ,mem_ui_led_struct_num 
+0x7d09 034503 rtn blank 
+0x7d0a 034504 copy pdata ,loopcnt 
+0x7d0b 034505 fetch 2 ,mem_ui_led_struct_ptr 
+0x7d0c 034506 copy pdata ,regb 
+:      034507 ui_led_init_loop:
+0x7d0d 034508 add regb ,led_offset_led_gpio ,regc 
+0x7d0e 034509 ifetcht 1 ,regc 
+0x7d0f 034510 call gpio_config_output 
+0x7d10 034511 call ui_led_off_static 
+0x7d11 034512 increase led_offset_length ,regb 
+0x7d12 034513 loop ui_led_init_loop 
+0x7d13 034514 rtn 
+:      034518 ui_led_on_global:
+0x7d14 034519 call calc_curr_struct_prt 
+0x7d15 034520 setarg ui_led_state_lighting 
+0x7d16 034521 istore 1 ,regb 
+0x7d17 034522 call ui_led_stop_timer 
+0x7d18 034523 branch ui_led_on_static 
+:      034527 ui_led_blink_stop_global:
+:      034528 ui_led_off_global:
+0x7d19 034529 call calc_curr_struct_prt 
+0x7d1a 034530 setarg ui_led_state_darking 
+0x7d1b 034531 istore 1 ,regb 
+0x7d1c 034532 call ui_led_stop_timer 
+0x7d1d 034533 branch ui_led_off_static 
+:      034537 ui_led_blink_start_global:
+0x7d1e 034538 call calc_curr_struct_prt 
+0x7d1f 034539 setarg ui_led_state_blink_start 
+0x7d20 034540 istore 1 ,regb 
+0x7d21 034541 setarg led_infinite_flash_num 
+0x7d22 034542 istore 1 ,contw 
+0x7d23 034543 branch ui_led_off_static 
+:      034548 ui_led_set_style_global:
+0x7d24 034549 call calc_curr_struct_prt 
+0x7d25 034550 arg led_offset_length ,loopcnt 
+0x7d26 034551 copy regc ,contr 
+0x7d27 034552 copy regb ,contw 
+0x7d28 034553 branch memcpy_fast 
+:      034557 ui_led_dispatch:
+0x7d29 034558 fetch 1 ,mem_ui_led_struct_num 
+0x7d2a 034559 rtn blank 
+0x7d2b 034560 arg 0 ,rega 
+:      034561 ui_led_blink_polling:
+0x7d2c 034562 call ui_led_change_style_by_type 
+0x7d2d 034563 increase 1 ,rega 
+0x7d2e 034564 fetch 1 ,mem_ui_led_struct_num 
+0x7d2f 034565 isub rega ,null 
+0x7d30 034566 rtn zero 
+0x7d31 034567 branch ui_led_blink_polling 
+:      034570 ui_led_off_static:
+0x7d32 034571 add regb ,led_offset_led_gpio ,regc 
+0x7d33 034572 ifetcht 1 ,regc 
+0x7d34 034573 branch gpio_out_inactive 
+:      034576 ui_led_on_static:
+0x7d35 034577 add regb ,led_offset_led_gpio ,regc 
+0x7d36 034578 ifetcht 1 ,regc 
+0x7d37 034579 branch gpio_out_active 
+:      034583 ui_led_change_style_by_type:
+0x7d38 034584 add rega ,ui_led_blink ,queue 
+0x7d39 034585 call timer_check 
+0x7d3a 034586 nrtn blank 
+0x7d3b 034588 call calc_curr_struct_prt 
+0x7d3c 034590 ifetch 1 ,regb 
+0x7d3d 034592 beq ui_led_state_lighting ,ui_led_on_static 
+0x7d3e 034593 beq ui_led_state_darking ,ui_led_off_static 
+0x7d3f 034594 beq ui_led_state_blink_stop ,ui_led_off_static 
+0x7d40 034595 beq ui_led_state_blink_darking ,ui_led_blink_state_darking 
+:      034596 ui_led_blink_state_lighting:
+0x7d41 034597 call ui_led_on_static 
+0x7d42 034598 add regb ,led_offset_cb_ledon ,regc 
+0x7d43 034599 call push_stack 
+0x7d44 034600 ifetch 2 ,regc 
+0x7d45 034601 call callback_func 
+0x7d46 034602 call pop_stack 
+0x7d47 034603 setarg ui_led_state_blink_darking 
+0x7d48 034604 istore 1 ,regb 
+0x7d49 034605 add regb ,led_offset_on_time ,regc 
+0x7d4a 034606 ifetch 2 ,regc 
+0x7d4b 034607 branch ui_led_blink_timer_start 
+:      034610 ui_led_blink_state_darking:
+0x7d4c 034611 call ui_led_off_static 
+0x7d4d 034612 add regb ,led_offset_cb_ledoff ,regc 
+0x7d4e 034613 call push_stack 
+0x7d4f 034614 ifetch 2 ,regc 
+0x7d50 034615 call callback_func 
+0x7d51 034616 call pop_stack 
+0x7d52 034618 add regb ,led_offset_blink_count ,regc 
+0x7d53 034619 ifetch 1 ,regc 
+0x7d54 034620 beq led_infinite_flash_num ,ui_led_blink_infinite 
+0x7d55 034621 increase -1 ,pdata 
+0x7d56 034622 istore 1 ,regc 
+0x7d57 034623 branch ui_led_blink_stop_global ,blank 
+:      034624 ui_led_blink_infinite:
+0x7d58 034625 setarg ui_led_state_blink_lighting 
+0x7d59 034626 istore 1 ,regb 
+0x7d5a 034627 add regb ,led_offset_off_time ,regc 
+0x7d5b 034628 ifetch 2 ,regc 
+:      034629 ui_led_blink_timer_start:
+0x7d5c 034630 add rega ,ui_led_blink ,queue 
+0x7d5d 034631 branch timer_init 
+:      034633 ui_led_stop_timer:
+0x7d5e 034634 setarg 0 
+0x7d5f 034635 branch ui_led_blink_timer_start 
+:      034641 ui_timer_timeout:
+0x7d60 034642 setarg 0x1000 
+0x7d61 034643 lshift16 pdata ,pdata 
+0x7d62 034644 iadd regb ,regb 
+0x7d63 034645 rtn 
+:      034647 ui_timer_check:
+0x7d64 034648 bpatchx patch3e_4 ,mem_patch3e 
+0x7d65 034649 arg 0 ,rega 
+0x7d66 034650 fetcht 4 ,mem_ui_timer_last_btclk 
+0x7d67 034651 copy clkn_bt ,regb 
+0x7d68 034652 copy regb ,pdata 
+0x7d69 034653 isub temp ,null 
+0x7d6a 034654 ncall ui_timer_timeout ,positive 
+:      034656 ui_timer_check_loop:
+0x7d6b 034657 copy regb ,pdata 
+0x7d6c 034658 increase 160 ,temp 
+0x7d6d 034659 increase 160 ,temp 
+0x7d6e 034660 isub temp ,null 
+0x7d6f 034661 nbranch ui_timer_check_end ,positive 
+0x7d70 034662 increase 1 ,rega 
+0x7d71 034663 and rega ,0x0f ,pdata 
+0x7d72 034664 nbranch ui_timer_check_loop ,blank 
+0x7d73 034665 arg 0 ,rega 
+0x7d74 034666 call ui_timer_check_send_evt 
+:      034667 ui_timer_init:
+0x7d75 034668 copy clkn_bt ,pdata 
+0x7d76 034669 store 4 ,mem_ui_timer_last_btclk 
+0x7d77 034670 rtn 
+:      034671 ui_timer_check_end:
+0x7d78 034672 bpatchx patch3e_5 ,mem_patch3e 
+0x7d79 034673 copy rega ,pdata 
+0x7d7a 034674 rtn blank 
+0x7d7b 034675 increase -160 ,temp 
+0x7d7c 034676 increase -160 ,temp 
+0x7d7d 034677 set0 28 ,temp 
+0x7d7e 034678 storet 4 ,mem_ui_timer_last_btclk 
+:      034679 ui_timer_check_send_evt:
+0x7d7f 034680 branch app_evt_timer 
+:      034687 ui_ipc_get_lock:
+0x7d80 034688 jam 1 ,mem_ipc_lock_bt 
+:      034689 ui_ipc_get_lock_wait:
+0x7d81 034690 fetch 1 ,mem_ipc_lock_c51 
+0x7d82 034691 nbranch ui_ipc_get_lock_wait ,blank 
+0x7d83 034692 rtn 
+:      034694 ui_ipc_put_lock:
+0x7d84 034695 jam 0 ,mem_ipc_lock_bt 
+0x7d85 034696 rtn 
+:      034700 ui_ipc_send_event:
+0x7d86 034701 bpatchx patch3e_6 ,mem_patch3e 
+0x7d87 034702 call ui_ipc_get_lock 
+0x7d88 034703 copy rega ,pdata 
+0x7d89 034704 store 4 ,mem_ipc_rega_temp 
+0x7d8a 034705 arg mem_ipc_fifo_bt2c51 ,rega 
+0x7d8b 034706 call fifo_in 
+0x7d8c 034707 fetch 4 ,mem_ipc_rega_temp 
+0x7d8d 034708 copy pdata ,rega 
+0x7d8e 034709 branch ui_ipc_put_lock 
+:      034711 ui_ipc_send_cmd:
+0x7d8f 034712 bpatchx patch3e_7 ,mem_patch3e 
+0x7d90 034713 call ui_ipc_get_lock 
+0x7d91 034714 copy rega ,pdata 
+0x7d92 034715 store 4 ,mem_ipc_rega_temp 
+0x7d93 034716 arg mem_ipc_fifo_c512bt ,rega 
+0x7d94 034717 call fifo_in 
+0x7d95 034718 fetch 4 ,mem_ipc_rega_temp 
+0x7d96 034719 copy pdata ,rega 
+0x7d97 034720 branch ui_ipc_put_lock 
+:      034722 ui_ipc_clean_all_fifo:
+0x7d98 034723 setarg 0 
+0x7d99 034724 store util_fifo_len ,mem_ipc_fifo_c512bt 
+0x7d9a 034725 store util_fifo_len ,mem_ipc_fifo_bt2c51 
+0x7d9b 034726 rtn 
+:      034728 check_51cmd:
+0x7d9c 034729 bpatchx patch3f_0 ,mem_patch3f 
+0x7d9d 034730 fetch 1 ,mem_hci_cmd 
+0x7d9e 034731 nrtn blank 
+0x7d9f 034732 arg mem_ipc_fifo_c512bt ,rega 
+0x7da0 034733 call fifo_is_empty 
+0x7da1 034734 rtn blank 
+0x7da2 034735 jam ipc_continue_process ,mem_ipc_skip_continue_proc 
+0x7da3 034736 call check_51cmd_once 
+0x7da4 034737 fetch 1 ,mem_ipc_skip_continue_proc 
+0x7da5 034738 branch check_51cmd ,blank 
+0x7da6 034739 rtn 
+:      034741 check_51cmd_once:
+0x7da7 034742 call ui_ipc_get_lock 
+0x7da8 034743 arg mem_ipc_fifo_c512bt ,rega 
+0x7da9 034744 call fifo_out 
+0x7daa 034745 copy pdata ,temp 
+0x7dab 034746 call ui_ipc_put_lock 
+0x7dac 034747 bpatchx patch3f_1 ,mem_patch3f 
+0x7dad 034748 copy temp ,pdata 
+0x7dae 034749 rtn blank 
+0x7daf 034750 beq bt_cmd_start_discovery ,check_51cmd_start_discovery 
+0x7db0 034751 beq bt_cmd_stop_discovery ,check_51cmd_stop_discovery 
+0x7db1 034752 beq bt_cmd_reconnect ,check_51cmd_reconnect 
+0x7db2 034753 beq bt_cmd_enter_sniff_subrating ,check_51cmd_enter_sniff_subrating 
+0x7db3 034754 beq bt_cmd_exit_sniff_subrating ,check_51cmd_exit_sniff_subrating 
+0x7db4 034755 beq bt_cmd_sniff_test ,check_51cmd_sniff_test 
+0x7db5 034756 beq bt_cmd_start_inquiry ,check_51cmd_inq 
+0x7db6 034757 beq bt_cmd_stop_inquiry ,check_51cmd_stop_inq 
+0x7db7 034758 beq bt_cmd_start_adv ,check_51cmd_adv 
+0x7db8 034759 beq bt_cmd_stop_adv ,check_51cmd_stop_adv 
+0x7db9 034760 beq bt_cmd_start_direct_adv ,check_51cmd_direct_adv 
+0x7dba 034761 beq bt_cmd_stop_direct_adv ,check_51cmd_stop_direct_adv 
+0x7dbb 034762 beq bt_cmd_led_off ,check_51cmd_led_off 
+0x7dbc 034763 beq bt_cmd_led_on ,check_51cmd_led_on 
+0x7dbd 034764 beq bt_cmd_led_blink ,check_51cmd_led_start_blink 
+0x7dbe 034765 beq bt_cmd_le_start_conn ,check_51cmd_le_start_con 
+0x7dbf 034766 beq bt_cmd_le_start_scan ,check_51cmd_start_scan 
+0x7dc0 034767 beq bt_cmd_le_stop_scan ,check_51cmd_stop_scan 
+0x7dc1 034768 beq bt_cmd_enter_hibernate ,check_51cmd_hibernate 
+0x7dc2 034769 beq bt_cmd_le_smp_security_request ,check_51cmd_le_smp_sec_req 
+0x7dc3 034770 beq bt_cmd_bb_reconn_cancel ,check_51cmd_bb_reconn_cancel 
+0x7dc4 034772 store 1 ,mem_fifo_temp 
+0x7dc5 034773 bpatchx patch3f_2 ,mem_patch3f 
+0x7dc6 034774 call lmo_fifo_check 
+0x7dc7 034775 nbranch check_51cmd_restore ,blank 
+:      034776 check_51cmd_once_continue:
+0x7dc8 034777 fetch 1 ,mem_fifo_temp 
+0x7dc9 034778 bmark0 mark_context ,check_51cmd_check_idle 
+0x7dca 034779 beq bt_cmd_disconnect ,check_51cmd_disconnect 
+0x7dcb 034780 beq bt_cmd_enter_sniff ,cmd_in_sniff 
+0x7dcc 034781 beq bt_cmd_exit_sniff ,cmd_exit_sniff 
+0x7dcd 034782 beq bt_cmd_set_pin_code ,check_51cmd_pincode 
+0x7dce 034783 beq bt_cmd_le_disconnect ,check_51cmd_le_disconnect 
+0x7dcf 034784 beq bt_cmd_le_update_conn ,check_51cmd_ble_update_connect_param 
+0x7dd0 034785 beq bt_cmd_role_switch ,check_51cmd_role_switch 
+0x7dd1 034786 beq bt_cmd_store_reconn_info_le ,eeprom_store_le_reconn_info 
+0x7dd2 034787 beq bt_cmd_store_reconn_info_bt ,eeprom_store_bd_reconn_info 
+0x7dd3 034788 beq bt_cmd_dhkey_not_accept ,check_51cmd_dhkey_not_accept 
+0x7dd4 034789 beq bt_cmd_store_reconn_info ,check_51cmd_store_reconn_info 
+0x7dd5 034790 rtn 
+:      034792 check_51cmd_check_idle:
+0x7dd6 034793 store 1 ,mem_fifo_temp 
+0x7dd7 034794 call context_check_idle 
+0x7dd8 034795 branch check_51cmd_restore ,zero 
+0x7dd9 034796 call context_search_plap 
+0x7dda 034797 nrtn zero 
+:      034798 check_51cmd_restore:
+0x7ddb 034799 jam ipc_skip_continue_process ,mem_ipc_skip_continue_proc 
+0x7ddc 034800 branch ui_ipc_send_cmd 
+:      034805 check_51cmd_start_discovery:
+0x7ddd 034806 fetch 2 ,mem_ui_state_map 
+0x7dde 034807 set1 ui_state_bt_discovery 
+0x7ddf 034808 store 2 ,mem_ui_state_map 
+0x7de0 034809 jam 3 ,mem_scan_mode 
+0x7de1 034810 rtn 
+:      034814 check_51cmd_stop_discovery:
+0x7de2 034815 jam 0 ,mem_hid_handshake_timer_count 
+0x7de3 034816 jam 0 ,mem_scan_mode 
+0x7de4 034817 fetch 2 ,mem_ui_state_map 
+0x7de5 034818 set0 ui_state_bt_discovery 
+0x7de6 034819 store 2 ,mem_ui_state_map 
+0x7de7 034820 rtn 
+:      034824 check_51cmd_reconnect:
+0x7de8 034825 jam hci_cmd_create_conn ,mem_hci_cmd 
+0x7de9 034826 rtn 
+:      034830 check_51cmd_disconnect:
+0x7dea 034831 jam lmp_detach ,mem_lmo_opcode2 
+0x7deb 034832 jam other_end_terminated ,mem_disconn_reason_send 
+0x7dec 034833 rtn 
+:      034837 check_51cmd_enter_sniff_subrating:
+0x7ded 034838 rtn 
+:      034842 check_51cmd_exit_sniff_subrating:
+0x7dee 034843 rtn 
+:      034847 check_51cmd_sniff_test:
+0x7def 034848 rtn 
+:      034852 check_51cmd_pincode:
+0x7df0 034853 jam pincode_state_pincode_ready ,mem_pincode_state 
+0x7df1 034854 branch cmd_pair 
+:      034858 check_51cmd_inq:
+0x7df2 034859 rtn 
+:      034863 check_51cmd_stop_inq:
+0x7df3 034864 rtn 
+:      034868 check_51cmd_adv:
+0x7df4 034869 jam on ,mem_le_adv_enable 
+0x7df5 034870 jam adv_ind ,mem_le_adv_type 
+0x7df6 034871 fetch 2 ,mem_ui_state_map 
+0x7df7 034872 set1 ui_state_ble_adv ,pdata 
+0x7df8 034873 store 2 ,mem_ui_state_map 
+0x7df9 034874 rtn 
+:      034878 check_51cmd_stop_adv:
+0x7dfa 034879 fetch 2 ,mem_ui_state_map 
+0x7dfb 034880 set0 ui_state_ble_adv ,pdata 
+0x7dfc 034881 store 2 ,mem_ui_state_map 
+0x7dfd 034882 jam off ,mem_le_adv_enable 
+0x7dfe 034883 rtn 
+:      034887 check_51cmd_direct_adv:
+0x7dff 034888 jam on ,mem_le_adv_enable 
+0x7e00 034889 jam adv_direct_ind ,mem_le_adv_type 
+0x7e01 034890 fetch 2 ,mem_ui_state_map 
+0x7e02 034891 set1 ui_state_ble_adv ,pdata 
+0x7e03 034892 store 2 ,mem_ui_state_map 
+0x7e04 034893 rtn 
+:      034897 check_51cmd_stop_direct_adv:
+0x7e05 034898 fetch 2 ,mem_ui_state_map 
+0x7e06 034899 set0 ui_state_ble_adv ,pdata 
+0x7e07 034900 store 2 ,mem_ui_state_map 
+0x7e08 034901 jam off ,mem_le_adv_enable 
+0x7e09 034902 rtn 
+:      034906 check_51cmd_le_disconnect:
+0x7e0a 034907 setarg 20 
+0x7e0b 034908 store 2 ,mem_le_superto 
+0x7e0c 034909 store 2 ,mem_le_init_superto 
+0x7e0d 034910 branch le_send_terminate_ind_user_terminated 
+:      034914 check_51cmd_ble_update_connect_param:
+0x7e0e 034915 branch le_l2cap_tx_update_req 
+:      034919 check_51cmd_led_off:
+0x7e0f 034920 arg 0 ,rega 
+0x7e10 034921 branch ui_led_off_global 
+:      034925 check_51cmd_led_on:
+0x7e11 034926 arg 0 ,rega 
+0x7e12 034927 branch ui_led_on_global 
+:      034931 check_51cmd_led_start_blink:
+0x7e13 034932 arg 0 ,rega 
+0x7e14 034933 branch ui_led_blink_start_global 
+:      034937 check_51cmd_le_start_con:
+0x7e15 034938 jam on ,mem_le_scan_enable 
+0x7e16 034939 jam hci_cmd_le_create_conn ,mem_hci_cmd 
+0x7e17 034942 rtn 
+:      034946 check_51cmd_start_scan:
+0x7e18 034947 jam on ,mem_le_scan_enable 
+0x7e19 034948 rtn 
+:      034952 check_51cmd_stop_scan:
+0x7e1a 034953 jam off ,mem_le_scan_enable 
+0x7e1b 034954 jam 0 ,mem_hci_cmd 
+0x7e1c 034955 rtn 
+:      034959 check_51cmd_hibernate:
+0x7e1d 034960 fetch 2 ,mem_cb_before_hibernate 
+0x7e1e 034961 call callback_func 
+0x7e1f 034962 fetch 1 ,mem_ui_button_gpio 
+0x7e20 034963 beq ui_button_gpio_disable ,check_51cmd_hibernate_btn_disabled 
+0x7e21 034964 copy pdata ,temp 
+0x7e22 034965 call gpio_config_input 
+:      034966 check_51cmd_hibernate_btn_disabled:
+0x7e23 034967 call ui_ipc_clean_all_fifo 
+0x7e24 034968 branch lpm_hibernate 
+:      034972 check_51cmd_le_smp_sec_req:
+0x7e25 034973 branch le_send_smp_security_request 
+:      034977 check_51cmd_role_switch:
+0x7e26 034978 jam lmp_slot_offset ,mem_lmo_opcode2 
+0x7e27 034979 set1 mark_switch_initiated ,mark 
+0x7e28 034980 nrtn master 
+0x7e29 034981 jam switch_flag_init ,mem_switch_flag 
+0x7e2a 034982 jam lmp_switch_req ,mem_lmo_opcode2 
+0x7e2b 034983 fetch 1 ,mem_connection_options 
+0x7e2c 034984 set0 connection_switch ,pdata 
+0x7e2d 034985 store 1 ,mem_connection_options 
+0x7e2e 034986 rtn 
+:      034990 check_51cmd_bb_reconn_cancel:
+0x7e2f 034991 force page_length_timer ,queue 
+0x7e30 034992 branch timer_stop 
+:      034996 check_51cmd_dhkey_not_accept:
+0x7e31 034997 call tid_set_reply 
+0x7e32 034998 jam lmp_dhkey_check ,mem_lmi_opcode2 
+0x7e33 034999 branch parse_lmp_dhkey_check_reject 
+:      035002 ui_check_paring_button:
+0x7e34 035003 fetch 1 ,mem_ui_state_map 
+0x7e35 035004 rtnbit0 ui_state_btn_down 
+0x7e36 035005 rtnbit0 ui_state_bt_reconnect 
+0x7e37 035006 branch check_51cmd_bb_reconn_cancel 
+:      035011 queue_init:
+0x7e38 035012 fetch 2 ,mem_queue_ptr 
+0x7e39 035013 add pdata ,queue_offset_curr_num ,contw 
+0x7e3a 035014 setarg 0 
+0x7e3b 035015 istore 3 ,contw 
+0x7e3c 035016 rtn 
+:      035020 queue_push:
+0x7e3d 035021 call disable_user 
+0x7e3e 035022 call queue_full 
+0x7e3f 035023 rtn blank 
+0x7e40 035024 fetch 2 ,mem_queue_ptr 
+0x7e41 035025 add pdata ,queue_offset_curr_num ,regb 
+0x7e42 035026 ifetcht 1 ,regb 
+0x7e43 035027 increase 1 ,temp 
+0x7e44 035028 istoret 1 ,regb 
+0x7e45 035030 ifetcht 1 ,pdata 
+0x7e46 035031 copy temp ,loopcnt 
+0x7e47 035032 add pdata ,queue_offset_write_ptr ,regb 
+0x7e48 035033 ifetch 1 ,regb 
+0x7e49 035034 imul32 temp ,pdata 
+0x7e4a 035035 iadd contr ,contw 
+0x7e4b 035036 copy rega ,contr 
+:      035037 calc_queue_next_ptr:
+0x7e4c 035038 call memcpy 
+0x7e4d 035039 call queue_get_size 
+0x7e4e 035040 pincrease -1 
+0x7e4f 035041 ifetcht 1 ,regb 
+0x7e50 035042 increase 1 ,temp 
+0x7e51 035043 iand temp ,temp 
+0x7e52 035044 istoret 1 ,regb 
+0x7e53 035045 branch enable_user 
+:      035050 queue_pop:
+0x7e54 035051 call disable_user 
+0x7e55 035052 call queue_empty 
+0x7e56 035053 rtn blank 
+0x7e57 035054 fetch 2 ,mem_queue_ptr 
+0x7e58 035055 add pdata ,queue_offset_curr_num ,regb 
+0x7e59 035056 ifetcht 1 ,regb 
+0x7e5a 035057 increase -1 ,temp 
+0x7e5b 035058 istoret 1 ,regb 
+0x7e5c 035059 ifetcht 1 ,pdata 
+0x7e5d 035060 copy temp ,loopcnt 
+0x7e5e 035061 add pdata ,queue_offset_read_ptr ,regb 
+0x7e5f 035062 ifetch 1 ,regb 
+0x7e60 035063 imul32 temp ,pdata 
+0x7e61 035064 iadd contr ,contr 
+0x7e62 035065 increase 1 ,contr 
+0x7e63 035066 copy rega ,contw 
+0x7e64 035067 branch calc_queue_next_ptr 
+:      035071 queue_empty:
+0x7e65 035072 fetch 2 ,mem_queue_ptr 
+0x7e66 035073 add pdata ,queue_offset_curr_num ,contr 
+0x7e67 035074 ifetch 1 ,contr 
+0x7e68 035075 rtn 
+:      035078 queue_full:
+0x7e69 035079 call queue_get_size 
+0x7e6a 035080 ifetcht 1 ,contr 
+0x7e6b 035081 isub temp ,pdata 
+0x7e6c 035082 rtn 
+:      035085 queue_get_size:
+0x7e6d 035086 fetch 2 ,mem_queue_ptr 
+0x7e6e 035087 add pdata ,queue_offset_length ,contr 
+0x7e6f 035088 ifetch 1 ,contr 
+0x7e70 035089 rtn 
+:      035097 right_shift_n:
+0x7e71 035098 sub loopcnt ,0 ,null 
+0x7e72 035099 rtn zero 
+:      035100 right_shift_n_loop:
+0x7e73 035101 rshift pdata ,pdata 
+0x7e74 035102 loop right_shift_n_loop 
+0x7e75 035103 rtn 
+:      035106 left_shift_n:
+0x7e76 035107 force 1 ,pdata 
+0x7e77 035108 sub loopcnt ,0 ,null 
+0x7e78 035109 rtn zero 
+:      035110 left_shift_n_loop:
+0x7e79 035111 lshift pdata ,pdata 
+0x7e7a 035112 loop left_shift_n_loop 
+0x7e7b 035113 rtn 
+:      035114 push_stack:
+0x7e7c 035115 deposit contw 
+0x7e7d 035116 store 2 ,mem_contw 
+0x7e7e 035117 storet 8 ,mem_temp 
+0x7e7f 035118 deposit timeup 
+0x7e80 035119 store 4 ,mem_timeup 
+0x7e81 035120 call push_stack_rega_b_c 
+0x7e82 035121 deposit contr 
+0x7e83 035122 store 2 ,mem_contr 
+0x7e84 035123 rtn 
+:      035125 push_stack_rega_b_c:
+0x7e85 035126 deposit rega 
+0x7e86 035127 store 4 ,mem_rega 
+0x7e87 035128 deposit regb 
+0x7e88 035129 store 4 ,mem_regb 
+0x7e89 035130 deposit regc 
+0x7e8a 035131 store 3 ,mem_regc 
+0x7e8b 035132 rtn 
+:      035134 pop_stack:
+0x7e8c 035135 fetcht 8 ,mem_temp 
+0x7e8d 035136 fetch 4 ,mem_timeup 
+0x7e8e 035137 iforce timeup 
+0x7e8f 035138 call pop_stack_rega_b_c 
+0x7e90 035139 fetch 2 ,mem_contw 
+0x7e91 035140 iforce contw 
+0x7e92 035141 fetch 2 ,mem_contr 
+0x7e93 035142 iforce contr 
+0x7e94 035143 rtn 
+:      035145 pop_stack_rega_b_c:
+0x7e95 035146 fetch 4 ,mem_rega 
+0x7e96 035147 iforce rega 
+0x7e97 035148 fetch 4 ,mem_regb 
+0x7e98 035149 iforce regb 
+0x7e99 035150 fetch 3 ,mem_regc 
+0x7e9a 035151 iforce regc 
+0x7e9b 035152 rtn 
+:      035154 get_contw:
+0x7e9c 035155 fetch 2 ,mem_contw 
+0x7e9d 035156 copy pdata ,contw 
+0x7e9e 035157 rtn 
+:      035158 get_contr:
+0x7e9f 035159 fetch 2 ,mem_contr 
+0x7ea0 035160 copy pdata ,contr 
+0x7ea1 035161 rtn 
+:      035162 store_contw:
+0x7ea2 035163 copy contw ,pdata 
+0x7ea3 035164 store 2 ,mem_contw 
+0x7ea4 035165 rtn 
+:      035166 store_contr:
+0x7ea5 035167 copy contr ,pdata 
+0x7ea6 035168 store 2 ,mem_contr 
+0x7ea7 035169 rtn 
+:      035173 save_cont_pointers:
+0x7ea8 035174 copy contw ,pdata 
+0x7ea9 035175 store 2 ,mem_hold_contw 
+0x7eaa 035176 copy contr ,pdata 
+0x7eab 035177 store 2 ,mem_hold_contr 
+0x7eac 035178 rtn 
+:      035179 load_cont_pointers:
+0x7ead 035180 fetch 2 ,mem_hold_contw 
+0x7eae 035181 copy pdata ,contw 
+0x7eaf 035182 fetch 2 ,mem_hold_contr 
+0x7eb0 035183 copy pdata ,contr 
+0x7eb1 035184 rtn 
+:      035186 memcpy96:
+0x7eb2 035187 call memcpy32 
+:      035188 memcpy64:
+0x7eb3 035189 call memcpy32 
+0x7eb4 035190 branch memcpy32 
+:      035191 memcpy12:
+0x7eb5 035192 call memcpy8 
+:      035193 memcpy4:
+0x7eb6 035194 ifetch 4 ,contr 
+0x7eb7 035195 istore 4 ,contw 
+0x7eb8 035196 rtn 
+:      035197 memcpy8:
+0x7eb9 035198 ifetch 8 ,contr 
+0x7eba 035199 istore 8 ,contw 
+0x7ebb 035200 rtn 
+:      035202 memcpy48:
+0x7ebc 035203 call memcpy16 
+:      035204 memcpy32:
+0x7ebd 035205 call memcpy8 
+:      035206 memcpy24:
+0x7ebe 035207 call memcpy8 
+:      035208 memcpy16:
+0x7ebf 035209 call memcpy8 
+0x7ec0 035210 branch memcpy8 
+:      035214 delay_10ms:
+0x7ec1 035215 arg 10 ,loopcnt 
+:      035216 delay_ms_wait:
+0x7ec2 035217 nop 12000 
+0x7ec3 035218 loop delay_ms_wait 
+0x7ec4 035219 rtn 
+:      035221 bn_zero:
+0x7ec5 035222 force 3 ,loopcnt 
+:      035223 memset0:
+0x7ec6 035224 force 0 ,pdata 
+:      035225 memset8:
+0x7ec7 035226 istore 8 ,contw 
+0x7ec8 035227 loop memset8 
+0x7ec9 035228 rtn 
+:      035230 memset0_8:
+0x7eca 035231 force 0 ,pdata 
+0x7ecb 035232 istore 8 ,contw 
+0x7ecc 035233 rtn 
+:      035234 memset0_4:
+0x7ecd 035235 force 0 ,pdata 
+0x7ece 035236 istore 4 ,contw 
+0x7ecf 035237 rtn 
+:      035239 clear_mem_256:
+0x7ed0 035240 force 4 ,loopcnt 
+0x7ed1 035241 branch memset0 
+:      035242 clear_mem_512:
+0x7ed2 035243 force 8 ,loopcnt 
+0x7ed3 035244 branch memset0 
+:      035246 clear_mem:
+0x7ed4 035247 deposit loopcnt 
+0x7ed5 035248 rtn blank 
+0x7ed6 035249 setarg 0 
+:      035250 clear_mem_loop:
+0x7ed7 035251 istore 1 ,contw 
+0x7ed8 035252 loop clear_mem_loop 
+0x7ed9 035253 rtn 
+:      035256 clear_temp_block:
+0x7eda 035257 arg 32 ,loopcnt 
+0x7edb 035258 arg mem_temp_block0 ,contw 
+0x7edc 035259 branch clear_mem 
+:      035261 xor_loop:
+0x7edd 035262 ifetch 4 ,regc 
+0x7ede 035263 ifetcht 4 ,rega 
+0x7edf 035264 ixor temp ,pdata 
+0x7ee0 035265 istore 4 ,contw 
+0x7ee1 035266 increase 4 ,rega 
+0x7ee2 035267 increase 4 ,regc 
+0x7ee3 035268 loop xor_loop 
+0x7ee4 035269 rtn 
+:      035273 inverse_data:
+0x7ee5 035274 bpatchx patch3f_3 ,mem_patch3f 
+0x7ee6 035275 copy loopcnt ,pdata 
+0x7ee7 035276 sub pdata ,1 ,null 
+0x7ee8 035277 rtn positive 
+0x7ee9 035278 iadd rega ,regb 
+0x7eea 035279 increase -1 ,regb 
+0x7eeb 035280 rshift loopcnt ,loopcnt 
+:      035281 inverse_loop:
+0x7eec 035282 ifetcht 1 ,rega 
+0x7eed 035283 ifetch 1 ,regb 
+0x7eee 035284 istore 1 ,rega 
+0x7eef 035285 istoret 1 ,regb 
+0x7ef0 035286 increase -1 ,regb 
+0x7ef1 035287 increase 1 ,rega 
+0x7ef2 035288 loop inverse_loop 
+0x7ef3 035289 rtn 
+:      035292 memcpy_fast:
+0x7ef4 035293 deposit loopcnt 
+0x7ef5 035294 rtn blank 
+:      035295 memcpy_fast_loop:
+0x7ef6 035296 increase -8 ,loopcnt 
+0x7ef7 035297 call memcpy8 ,positive 
+0x7ef8 035298 rtn zero 
+0x7ef9 035299 branch memcpy_fast_loop ,positive 
+0x7efa 035300 increase 8 ,loopcnt 
+:      035301 memcpy_fast_loop_four:
+0x7efb 035302 increase -4 ,loopcnt 
+0x7efc 035303 call memcpy4 ,positive 
+0x7efd 035304 rtn zero 
+0x7efe 035305 branch memcpy_fast_loop_four ,positive 
+0x7eff 035306 increase 4 ,loopcnt 
+0x7f00 035307 branch memcpy 
+:      035309 memcpy:
+0x7f01 035310 deposit loopcnt 
+0x7f02 035311 rtn blank 
+:      035312 memcpy_loop:
+0x7f03 035313 ifetch 1 ,contr 
+0x7f04 035314 istore 1 ,contw 
+0x7f05 035315 loop memcpy_loop 
+0x7f06 035316 rtn 
+:      035318 timer_stop:
+0x7f07 035319 setarg 0 
+:      035320 timer_init:
+0x7f08 035321 rshift clkn_bt ,temp 
+0x7f09 035322 storet 4 ,mem_last_clkn 
+0x7f0a 035323 arg mem_timers ,contw 
+0x7f0b 035324 iforce temp 
+0x7f0c 035325 lshift queue ,pdata 
+0x7f0d 035326 iadd contw ,contw 
+0x7f0e 035327 istoret 2 ,contw 
+0x7f0f 035328 bpatchx patch3f_4 ,mem_patch3f 
+0x7f10 035329 rtn 
+:      035331 timer_check_timeout:
+0x7f11 035332 arg 0x800 ,timeup 
+0x7f12 035333 lshift16 timeup ,timeup 
+0x7f13 035334 iadd timeup ,pdata 
+0x7f14 035335 rtn 
+:      035338 timer_reinit:
+0x7f15 035339 arg 0 ,queue 
+:      035340 timer_check:
+0x7f16 035341 bpatchx patch3f_5 ,mem_patch3f 
+0x7f17 035342 fetcht 4 ,mem_last_clkn 
+0x7f18 035343 rshift clkn_bt ,pdata 
+0x7f19 035344 store 4 ,mem_last_clkn 
+0x7f1a 035345 isub temp ,null 
+0x7f1b 035346 ncall timer_check_timeout ,positive 
+0x7f1c 035347 isub temp ,timeup 
+0x7f1d 035348 copy timeup ,temp 
+0x7f1e 035349 arg mem_timers ,contr 
+0x7f1f 035350 copy contr ,contw 
+0x7f20 035351 arg 16 ,loopcnt 
+:      035352 timer_loop:
+0x7f21 035353 ifetch 2 ,contr 
+0x7f22 035354 isub temp ,pdata 
+0x7f23 035355 branch timer_counting ,positive 
+0x7f24 035356 force 0 ,pdata 
+:      035357 timer_counting:
+0x7f25 035358 istore 2 ,contw 
+0x7f26 035359 loop timer_loop 
+0x7f27 035360 arg mem_timers ,contr 
+0x7f28 035361 lshift queue ,pdata 
+0x7f29 035362 iadd contr ,contr 
+0x7f2a 035363 ifetch 2 ,contr 
+0x7f2b 035364 rtn 
+:      035369 clk_add:
+0x7f2c 035370 iadd temp ,temp 
+0x7f2d 035371 copy temp ,loopcnt 
+0x7f2e 035372 setarg 3750 
+0x7f2f 035373 isub loopcnt ,pdata 
+0x7f30 035374 rtn positive 
+0x7f31 035375 sub pdata ,0 ,pdata 
+0x7f32 035376 rshift16 temp ,temp 
+0x7f33 035377 increase 1 ,temp 
+0x7f34 035378 lshift16 temp ,temp 
+0x7f35 035379 ior temp ,temp 
+0x7f36 035380 rtn 
+:      035382 clk_diff_rt:
+0x7f37 035383 call clk_diff 
+0x7f38 035384 branch clk2rt 
+:      035387 clk_diff:
+0x7f39 035388 disable user 
+0x7f3a 035389 isub temp ,pdata 
+0x7f3b 035390 branch clk_diff_pos ,positive 
+0x7f3c 035391 enable user 
+0x7f3d 035392 sub pdata ,0 ,pdata 
+:      035393 clk_diff_pos:
+0x7f3e 035394 rtnbit0 15 
+0x7f3f 035395 arg -61786 ,temp 
+0x7f40 035396 iadd temp ,pdata 
+0x7f41 035397 set0 64 ,pdata 
+0x7f42 035398 rtn 
+:      035400 clk2rt:
+0x7f43 035401 iforce contr 
+0x7f44 035402 rshift16 pdata ,pdata 
+0x7f45 035403 arg 3750 ,temp 
+0x7f46 035404 imul32 temp ,pdata 
+0x7f47 035405 iadd contr ,pdata 
+0x7f48 035406 rtn 
+:      035409 clk2lpo:
+0x7f49 035410 lshift8 pdata ,pdata 
+0x7f4a 035411 lshift4 pdata ,pdata 
+0x7f4b 035412 fetcht 3 ,mem_clks_per_lpo 
+0x7f4c 035413 idiv temp 
+0x7f4d 035414 call wait_div_end 
+0x7f4e 035415 quotient temp 
+0x7f4f 035416 rtn 
+:      035419 clk2bt:
+0x7f50 035420 arg 3750 ,temp 
+0x7f51 035421 idiv temp 
+0x7f52 035422 call wait_div_end 
+0x7f53 035423 quotient pdata 
+0x7f54 035424 lshift16 pdata ,pdata 
+0x7f55 035425 remainder temp 
+0x7f56 035426 ior temp ,temp 
+0x7f57 035427 rtn 
+:      035434 string2dec_from_uart:
+0x7f58 035435 arg 0 ,temp 
+:      035436 string2dec_from_uart_done:
+0x7f59 035437 copy temp ,regc 
+0x7f5a 035438 ifetch 1 ,contru 
+0x7f5b 035439 call uchar2dialog 
+0x7f5c 035440 copy regc ,temp 
+0x7f5d 035441 call swap 
+0x7f5e 035442 arg 10 ,regb 
+0x7f5f 035443 imul32 regb ,pdata 
+0x7f60 035444 iadd temp ,pdata 
+0x7f61 035445 copy pdata ,temp 
+0x7f62 035446 loop string2dec_from_uart_done 
+0x7f63 035447 rtn 
+:      035451 uchar2dialog:
+0x7f64 035452 arg 0x3a ,temp 
+0x7f65 035453 isub temp ,null 
+0x7f66 035454 nbranch uchar2dialog_number ,positive 
+0x7f67 035455 arg 0x61 ,temp 
+0x7f68 035456 isub temp ,null 
+0x7f69 035457 branch uchar2dialog_a2f ,positive 
+0x7f6a 035458 arg 0x37 ,temp 
+0x7f6b 035459 isub temp ,pdata 
+0x7f6c 035460 rtn 
+:      035461 uchar2dialog_number:
+0x7f6d 035462 arg 0x30 ,temp 
+0x7f6e 035463 isub temp ,pdata 
+0x7f6f 035464 rtn 
+:      035465 uchar2dialog_a2f:
+0x7f70 035466 arg 0x57 ,temp 
+0x7f71 035467 isub temp ,pdata 
+0x7f72 035468 rtn 
+:      035470 pn9:
+0x7f73 035471 copy temp ,alarm 
+0x7f74 035472 setarg 0x1ff 
+0x7f75 035473 force 0 ,regb 
+:      035474 pn9_loop:
+0x7f76 035475 rshift3 pdata ,rega 
+0x7f77 035476 rshift rega ,rega 
+0x7f78 035477 ixor rega ,rega 
+0x7f79 035478 isolate1 0 ,rega 
+0x7f7a 035479 setflag true ,9 ,pdata 
+0x7f7b 035480 rshift temp ,temp 
+0x7f7c 035481 isolate1 0 ,pdata 
+0x7f7d 035482 setflag true ,7 ,temp 
+0x7f7e 035483 rshift pdata ,pdata 
+0x7f7f 035484 increase 1 ,regb 
+0x7f80 035485 compare 0 ,regb ,0x7 
+0x7f81 035486 nbranch pn9_loop ,true 
+0x7f82 035487 istoret 1 ,contw 
+0x7f83 035488 loop pn9_loop 
+0x7f84 035489 copy alarm ,temp 
+0x7f85 035490 rtn 
+:      035493 wait_div_end:
+0x7f86 035494 rtn modone 
+0x7f87 035495 branch wait_div_end 
+:      035505 compare_loop:
+:      035506 string_compare:
+0x7f88 035507 ifetch 1 ,rega 
+0x7f89 035508 ifetcht 1 ,regb 
+0x7f8a 035509 isub temp ,null 
+0x7f8b 035510 nrtn zero 
+0x7f8c 035511 increase 1 ,rega 
+0x7f8d 035512 increase 1 ,regb 
+0x7f8e 035513 loop string_compare 
+0x7f8f 035514 force 0 ,null 
+0x7f90 035515 rtn 
+:      035518 ceiling:
+0x7f91 035519 isub temp ,null 
+0x7f92 035520 nrtn positive 
+0x7f93 035521 deposit temp 
+0x7f94 035522 rtn 
+:      035524 swap:
+0x7f95 035525 iadd temp ,pdata 
+0x7f96 035526 isub temp ,temp 
+0x7f97 035527 isub temp ,pdata 
+0x7f98 035528 rtn 
+:      035530 clean_mem:
+0x7f99 035531 arg 0x200 ,loopcnt 
+0x7f9a 035532 arg 0x4000 ,contw 
+0x7f9b 035533 branch memset0 
+:      035536 callback_func:
+0x7f9c 035537 rtn blank 
+0x7f9d 035538 copy pdata ,pc 
+:      035541 wait_uarttx:
+0x7f9e 035542 hfetch 2 ,core_uart_txitems 
+0x7f9f 035543 nbranch wait_uarttx ,blank 
+0x7fa0 035544 rtn 
+:      035546 ice_break:
+0x7fa1 035547 jam 0x1 ,core_ice_ctrl 
+0x7fa2 035548 rtn 
+:      035550 ice_setbp:
+0x7fa3 035551 hstore 2 ,core_ice_break0 
+0x7fa4 035552 hfetch 1 ,core_ice_ctrl 
+0x7fa5 035553 set1 4 ,pdata 
+0x7fa6 035554 hstore 1 ,core_ice_ctrl 
+0x7fa7 035555 rtn 
+:      035556 ice_setbp2:
+0x7fa8 035557 hstore 2 ,core_ice_break1 
+0x7fa9 035558 hfetch 1 ,core_ice_ctrl 
+0x7faa 035559 set1 6 ,pdata 
+0x7fab 035560 hstore 1 ,core_ice_ctrl 
+0x7fac 035561 rtn 
+:      035563 ice_set_write_bp:
+0x7fad 035564 hstore 2 ,core_ice_break0 
+0x7fae 035565 jam 0x30 ,core_ice_ctrl 
+0x7faf 035566 rtn 
+:      035570 test_enable_white:
+0x7fb0 035571 hfetch 1 ,core_config 
+0x7fb1 035572 set0 whiteoff_bit ,pdata 
+0x7fb2 035573 hstore 1 ,core_config 
+0x7fb3 035574 rtn 
+:      035576 check_uart_tx_buff:
+0x7fb4 035577 hfetch 2 ,core_uart_txitems 
+0x7fb5 035578 arg uart_air_control_threshold ,temp 
+:      035579 pdata_sub_temp:
+0x7fb6 035580 isub temp ,null 
+0x7fb7 035581 rtn 
+:      035587 fifo_in:
+0x7fb8 035588 bpatchx patch3f_6 ,mem_patch3f 
+0x7fb9 035589 ifetcht util_fifo_len ,rega 
+0x7fba 035590 and temp ,0xff ,pdata 
+0x7fbb 035591 nbranch fifo_in_push ,blank 
+0x7fbc 035592 rshift8 temp ,pdata 
+0x7fbd 035593 istore util_fifo_len ,rega 
+:      035594 fifo_in_push:
+0x7fbe 035595 increase util_fifo_len + util_fifo_offset ,rega 
+0x7fbf 035596 ifetch 1 ,rega 
+0x7fc0 035597 nbranch assert ,blank 
+0x7fc1 035598 fetch 1 ,mem_fifo_temp 
+0x7fc2 035599 istore 1 ,rega 
+0x7fc3 035600 rtn 
+:      035605 fifo_out:
+0x7fc4 035606 bpatchx patch3f_7 ,mem_patch3f 
+0x7fc5 035607 arg util_fifo_len ,loopcnt 
+0x7fc6 035608 ifetch util_fifo_len ,rega 
+0x7fc7 035609 rtn blank 
+:      035610 fifo_out_loop:
+0x7fc8 035611 ifetch 1 ,rega 
+0x7fc9 035612 nbranch fifo_out_end ,blank 
+0x7fca 035613 increase 1 ,rega 
+0x7fcb 035614 loop fifo_out_loop 
+0x7fcc 035615 branch assert 
+:      035616 fifo_out_end:
+0x7fcd 035617 arg 0 ,temp 
+0x7fce 035618 istoret 1 ,rega 
+0x7fcf 035619 rtn 
+:      035624 fifo_is_empty:
+0x7fd0 035625 ifetch util_fifo_len ,rega 
+0x7fd1 035626 rtn 
+:      035631 fifo_is_full:
+0x7fd2 035632 ifetch 1 ,rega 
+0x7fd3 035633 rtn 
+:      035636 fifo_is_near_full:
+0x7fd4 035637 ifetch 2 ,rega 
+0x7fd5 035638 rtn 
+:      035642 fifo_content_count:
+0x7fd6 035643 arg 0 ,temp 
+:      035644 fifo_content_count_loop:
+0x7fd7 035645 fetch 1 ,contr 
+0x7fd8 035646 loop fifo_content_count_loop ,blank 
+0x7fd9 035647 increase 1 ,temp 
+0x7fda 035648 loop fifo_content_count_loop 
+0x7fdb 035649 copy temp ,pdata 
+0x7fdc 035650 rtn 
+:      035652 not_greater_than:
+0x7fdd 035653 isub temp ,null 
+0x7fde 035654 nrtn positive 
+0x7fdf 035655 copy temp ,pdata 
+0x7fe0 035656 rtn 
+:      035659 disable_positive:
+0x7fe1 035660 force -1 ,null 
+0x7fe2 035661 rtn 
+:      035662 enable_positive:
+:      035663 disable_zero:
+0x7fe3 035664 force 1 ,null 
+0x7fe4 035665 rtn 
+:      035666 enable_zero:
+0x7fe5 035667 force 0 ,null 
+0x7fe6 035668 rtn 
+:      035670 enable_user:
+0x7fe7 035671 enable user 
+0x7fe8 035672 rtn 
+:      035674 disable_user:
+0x7fe9 035675 disable user 
+0x7fea 035676 rtn 
+:      035678 enable_user2:
+0x7feb 035679 enable user2 
+0x7fec 035680 rtn 
+:      035682 disable_user2:
+0x7fed 035683 disable user2 
+0x7fee 035684 rtn 
+:      035686 disable_blank:
+0x7fef 035687 setarg 1 
+0x7ff0 035688 rtn 
+:      035690 enable_blank:
+0x7ff1 035691 setarg 0 
+0x7ff2 035692 rtn 
+:      035695 reverse_byte:
+0x7ff3 035696 copy loopcnt ,pdata 
+0x7ff4 035697 rtn blank 
+0x7ff5 035698 copy contr ,pdata 
+0x7ff6 035699 iadd loopcnt ,pdata 
+0x7ff7 035700 increase -1 ,pdata 
+0x7ff8 035701 copy pdata ,contr 
+:      035702 reverse_loop:
+0x7ff9 035703 ifetch 1 ,contr 
+0x7ffa 035704 increase -2 ,contr 
+0x7ffb 035705 istore 1 ,contw 
+0x7ffc 035706 loop reverse_loop 
+0x7ffd 035707 rtn 
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/bt_program23.meta
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/bt_program23.meta	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/bt_program23.meta	(working copy)
@@ -0,0 +1,35709 @@
+define REVD
+//define FPGA
+define ROMCODE
+define PATCH
+define ADC
+//define RAM_VERSION
+//define CLK24M
+//define DEBUG_MALLOC
+//define DEBUG_H4LOG_ENABLE
+//define DEBUG_LIGHT_STATE
+//define E2_LOG
+//define LMP_DBG
+//define ACL_DEBUG
+//define DCDC
+define NVRAM
+define RELEASE
+define SECURE_CONNECTION
+define DEBUG_RF_INIT
+//define SPI_SIMULATE
+//define ROM_RESPIN_OPTIONAL
+
+define SIMPLE_PAIRING
+define COMPILE_RFCOMM
+define COMPILE_SHUTTER
+define COMPILE_AntiLost
+//define COMPILE_IR
+define COMPILE_KEYBOARD
+define COMPILE_MOUSE
+define COMPILE_MODULE
+//define COMPILE_AT
+//define COMPILE_PRCP
+//define COMPILE_USB
+//define COMPILE_DONGLE
+define COMPILE_LE
+define COMPILE_24G
+define COMPILE_CAR
+define COMPILE_REMOTE_CAR
+
+
+INCLUDE "bt_format"
+
+org 0x0000		// start from patch ram address start
+//define DONGLE
+define MOUSE
+define G24
+//define BLE
+//define CLASSIC_BT
+//define MOUSE_SMOOTHER
+//define ADC_ENABLE
+//define P24G_LOG
+//define RF_DEBUG
+//define HIGH_REPORT
+define MS_ALL_POWER
+define MS_MATRIX
+define XTAL_16M
+
+//define DEBUGLOG
+//define DEBUGLOG_CALLBACK
+//define DEBUGLOG_EVENT
+//define DEBUGLOG_CMD
+//define DEBUGLOG_MISC
+//define DEBUGLOG_STATUS
+//define DEBUGLOG_PARSE_LMP
+//define DEBUGLOG_SEND_LMP
+//define DEBUGLOG_CONN_SM
+//define DEBUGLOG_UPPER_SM
+
+	bbit1 8,pf_patch_ext
+	beq patch00_0,p_soft_reset
+	beq patch00_1,p_soft_reset_1
+	beq patch00_2,p_soft_reset_2
+	beq patch10_5,p_shutdown_radio
+	beq patch11_1,p_set_freq_tx
+	beq patch11_2,p_initialize_radio_cont
+	beq patch14_1,p_init_param
+	beq patch16_1,p_lpm_check_wake_lock
+	beq patch16_2,p_g24_dispatch
+	beq patch18_4,p_device_init
+	beq patch19_1,p_app_flag_store
+	beq patch19_2,p_app_initflag_check
+	beq patch1c_3,p_mouse_seting_dpi
+	beq patch1c_6,p_mouse_motion
+	beq patch1d_2,p_mouse_bb_event_discovery_btn
+	beq patch1d_3,p_mouse_start_discovery
+	beq patch1d_4,p_mouse_stop_discovery
+	branch loop
+pf_patch_ext:
+	beq patch27_7,p_le_enable
+	beq patch31_4,p_twspi_reset
+	branch loop
+
+p_le_enable:
+	jam 0x36,rf_adc_goff        /*For BLE, tune AGC_gain_offset, Max added*/
+	jam 0x5f,rf_agc_nsat        //for BLE
+	enable le
+	jam 7,rfen_ulp			/* enable ulp */
+//	call check_ble_disabled
+	fetch 1,mem_250k_freq_enable	//default: 0
+	rtn blank
+	jam 0xb8,rf_iq_gain
+	rtn
+	
+
+p_rssi_signal:
+	copy pdata,rega
+	fetcht 1,mem_rssi_signal_index
+	setarg mem_rssi_signal_buf
+	iadd temp,contw
+	copy rega,pdata
+	istore 1,contw
+	increase 1,temp
+	and_into RSSI_BUF_LEN_SIGNAL,temp
+	storet 1,mem_rssi_signal_index
+	rtn
+
+p_soft_reset:
+	hfetch 1,0x813b
+	store 1,mem_power_on_flag
+	branch soft_reset+1
+
+p_soft_reset_1:
+	arg mem_sp_state,contw
+	arg 12,loopcnt
+	call clear_mem
+	call rfcomm_init
+	call init_lmp
+	ncall lpm_disable_exen_output,wake
+	call ui_init+1
+	branch soft_reset+11
+
+p_soft_reset_2:
+	call app_lpm_init,wake
+	call publickey_init
+	call lpm_recover_clk,wake
+p_sp_cal_loop:
+	call sp_calc_sequence
+	fetch 1,mem_ssp_enable
+	branch main_loop,blank
+	fetch 1,mem_sp_local_key_invalid // simple pairing is not ready
+	branch p_sp_cal_loop,blank
+	branch main_loop
+
+p_init_param:
+	setarg param_le_version
+	store 3,mem_lmp_version
+	setarg param_le_subversion
+	store 2,mem_lmp_version+3
+	branch init_param+12
+
+p_lpm_check_wake_lock:
+	rtnmark1 mark_24g
+	fetch 1,mem_mouse_clear_sensor_data_flag
+	branch disable_blank,blank
+	fetch 1,mem_mouse_le_conn_param_reject
+	beq LE_LPM_DISABLE,disable_blank
+	fetch 2,mem_sdp_remote_cid
+	nbranch disable_blank,blank
+	fetch 1,mem_mouse_wheel_trigger
+	nbranch disable_blank,blank
+	branch enable_blank
+
+
+p_g24_dispatch:
+	rtnmark0 mark_24g
+	fetch 1,mem_24g_transmit_by_interrupt
+	beq G24_TX_TIMER_INT_ENABLE,p_g24_transmit_by_interrupt
+p_g24_transmit_process:
+	call p_g24_txdata_prep
+	nbranch p_g24_nodata_transmit,user
+	call p_g24_rf_sta_check
+p_g24_transmit_start:
+	call p_g24_transmit_packet
+	fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call power_ctrl_start
+p_g24_short_sleep:	
+	call p_g24_lpm_wait
+	nrtn user
+	call p_clear_wake
+	setarg 60500
+p_g24_enter_sleep:	
+	call clk2lpo
+	storet 4,mem_sleep_counter
+  	branch lpm_sleep
+  	
+p_g24_transmit_by_interrupt:
+	call p_g24_timer_check
+	nrtn user
+	call p_g24_interval_calibrate
+	branch p_g24_transmit_process
+p_g24_transmit_by_interrupt_exit:
+	jam G24_TX_TIMER_INT_DISABLE,mem_24g_transmit_by_interrupt
+	jam 0,mem_24g_transmit_by_interrupt_exit_count
+p_g24_interval_min:
+	jam 0,mem_24g_pac_index
+	fetch 1,mem_24g_interval_min
+p_g24_current_interval_store:
+	store 1,mem_24g_interval
+	rtn
+p_g24_interval_max:
+	fetch 1,mem_24g_interval_max
+	branch p_g24_current_interval_store
+p_g24_interval_calibrate:
+	fetch 1,mem_24g_pac_index
+	increase 1,pdata
+	store 1,mem_24g_pac_index
+	beq 4,p_g24_interval_max
+	beq 5,p_g24_interval_min
+	rtn
+p_g24_transmit_by_interrupt_enable:
+	jam G24_TX_TIMER_INT_ENABLE,mem_24g_transmit_by_interrupt
+	jam 0,mem_24g_transmit_by_interrupt_exit_count
+	rtn
+
+p_g24_nodata_transmit:
+	fetch 1,mem_24g_abort_pac
+	call p_g24_send_abort_packet,blank
+p_g24_long_sleep:
+	call p_g24_lpm_wait
+	nrtn user
+	fetch 3,mem_24g_enter_hibernate
+  	branch p_g24_enter_sleep
+	
+p_g24_lpm_wait:
+	enable user
+	call lpo_calibration
+	fetch 3,mem_clks_per_lpo
+	branch disable_user,blank
+	fetch 1,mem_lpm_mode
+	branch disable_user,blank
+	fetch 1,mem_24g_transmit_by_interrupt
+	beq G24_TX_TIMER_INT_ENABLE,disable_user
+	branch p_mouse_setgpio_lpm
+
+p_g24_send_abort_packet:
+	jam 1,mem_24g_abort_pac
+	jam 0,mem_24g_rf_hop_ch
+	call p_g24_transmit_rf_ctrl_clear
+	store 1,mem_24g_txbuf
+	setarg 0
+	store 7,mem_24g_txbuf+1
+	fetch 4,mem_24g_device_addr
+	store 4,mem_24g_txbuf+8
+	jam 12,mem_24g_datalen
+	fetch 1,mem_24g_data_type
+	set1 bit_abort,pdata
+	store 1,mem_24g_data_type
+	call p_g24_txdata_enable_tx
+	branch p_g24_transmit_start
+
+p_g24_set_device_addr:
+	call adc_init_data
+	fetch 4,mem_lap
+	store 4,mem_24g_device_addr
+	rtn
+
+p_g24_transmit_rf_sta_init:
+	jam 1,mem_24g_rf_last_sta
+	jam 0,mem_24g_sync_cnt
+p_g24_transmit_rf_ctrl_clear:	
+	fetch 1,mem_24g_data_type
+	and_into bits_data,pdata
+	store 1,mem_24g_data_type
+	rtn
+	
+p_g24_hop_ch_enable:
+	fetch 1,mem_24g_data_type
+	set1 bit_hop,pdata
+	store 1,mem_24g_data_type
+	//update txpayload
+	store 1,mem_24g_txpayload
+	rtn
+p_g24_hop_ch_disable:
+	fetch 1,mem_24g_data_type
+	set0 bit_hop,pdata
+	store 1,mem_24g_data_type
+	rtn	
+
+p_g24_transmit_hop_pac_fail:
+	call power_ctrl_pac_succ_decrs
+	fetch 1,mem_24g_rf_work_stage
+	beq 1,p_g24_transmit_hop_pac_fail_wo_hop
+	beq 2,p_g24_transmit_hop_pac_fail_hop_stage2
+	rtn
+p_g24_transmit_hop_pac_fail_wo_hop:
+	jam 2,mem_24g_sync_cnt
+p_g24_transmit_hop_pac_fail_stage1:	
+	jam 0,mem_24g_hop_pac_retry
+	jam 0,mem_24g_rf_last_sta
+	branch p_g24_transmit_rf_ctrl_clear
+
+p_g24_transmit_hop_pac_fail_hop_stage2:
+	jam 0,mem_24g_rf_hop_ch
+	branch p_g24_transmit_hop_pac_fail_stage1
+
+	
+p_g24_transmit_pac_fail_hop_stage3:
+	fetch 2,mem_24g_txfail_cnt
+	increase 1,pdata
+	store 2,mem_24g_txfail_cnt
+	bbit1 6,p_g24_tx_attempt_fail	//1024ms * 8
+	fetch 1,mem_24g_rf_hop_ch
+	beq 1,p_g24_rf_hop_fastly
+	jam 1,mem_24g_rf_hop_ch
+p_g24_rf_hop_attemp_again:
+	fetch 1,mem_24g_rf_hop_ch
+	bne 1,p_g24_transmit_rf_ctrl_clear
+p_g24_rf_hop_fastly:
+	fetch 1,mem_24g_hop_fastly_cnt
+	increase 1,pdata
+	store 1,mem_24g_hop_fastly_cnt
+	beq 4,p_g24_rf_hop_fastly_exit
+	call p_g24_ch
+	jam 2,mem_24g_max_retry
+	branch p_g24_transmit_packet
+
+p_g24_rf_hop_fastly_exit:
+	call power_ctrl_pac_succ_decrs
+	jam 0,mem_24g_hop_fastly_cnt
+	branch p_g24_transmit_rf_ctrl_clear
+
+p_g24_transmit_hop_pac_succ_wo_hop:
+	jam 2,mem_24g_sync_cnt
+p_g24_transmit_hop_pac_succ:
+	jam 1,mem_24g_rf_last_sta
+	jam 0,mem_24g_rf_hop_ch
+	branch p_g24_transmit_rf_ctrl_clear
+
+p_g24_transmit_succ_rf_config:
+	fetch 1,mem_24g_rf_work_stage
+	beq 3,p_g24_transmit_hop_pac_succ
+	fetch 1,mem_24g_data_type
+	isolate0 bit_hop,pdata
+	branch p_g24_transmit_rf_sta_init,true
+	fetch 1,mem_24g_rf_work_stage
+	beq 1,p_g24_transmit_hop_pac_succ_wo_hop
+	beq 2,p_g24_transmit_hop_pac_succ
+	rtn
+
+p_g24_rf_sta_check:
+	fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call p_g24_rf_laststa_synccnt_check
+	ncall p_g24_rf_sync_cnt_check,user2
+	rtn
+
+p_g24_rf_laststa_synccnt_check:
+	disable user2
+	fetch 1,mem_24g_rf_last_sta
+	rtnne 1
+	fetch 1,mem_24g_sync_cnt
+	rtnne 0
+	jam 1,mem_24g_rf_work_stage
+	jam 4,mem_24g_max_retry
+	branch enable_user2
+
+p_g24_rf_sync_cnt_check:
+	fetch 1,mem_24g_sync_cnt
+	branch p_g24_rf_hop_attemp,blank
+	increase -1,pdata
+	store 1,mem_24g_sync_cnt
+	jam 2,mem_24g_rf_work_stage
+	jam 4,mem_24g_max_retry
+	branch p_g24_ch
+
+p_g24_rf_hop_attemp:
+	jam 3,mem_24g_rf_work_stage
+	fetch 1,mem_24g_rf_hop_ch
+	nbranch p_g24_rf_hop_attemp_again,blank
+	jam 2,mem_24g_max_retry
+	branch p_g24_ch
+
+p_g24_txdata_prep:
+	fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,p_g24_pairing_sm	
+p_g24_txdata_prep_packeage_data:
+	call p_g24_package_data
+p_g24_txdata_enable_tx:	
+	call p_g24_transmit_prep
+	jam ENSURE_ON_24G,mem_24g_ensure
+	rtn
+
+p_g24_package_data:
+	fetch 2,mem_cb_24g_data
+	call callback_func
+	branch p_g24_accumulate_mouse_data,user
+	fetch 7,mem_24g_txbuf+1	//mouse data
+	rtn blank
+	branch enable_user	// retransmit
+p_g24_accumulate_mouse_data:
+	jam 0,mem_24g_abort_pac
+	add rega,1,pdata
+	store 1,mem_24g_datalen
+	call p_g24_transmit_rf_ctrl_clear
+	store 1,mem_24g_txbuf
+	ifetcht 1,contw
+	ifetch 1,regb
+	ior temp,pdata
+	istore 1,contw	//key
+	increase 1,regb
+	ifetch 4,regb
+	istore 4,contw	//x,y
+	increase 4,regb
+	arg mem_24g_txbuf+6,contw
+	arg 2,loopcnt
+p_g24_accumulation_loop:
+	ifetch 1,regb
+	ifetcht 1,contw	//wheel,twheel
+	iadd temp,pdata
+	istore 1,contw
+	increase 1,regb
+	loop p_g24_accumulation_loop
+	rtn
+
+p_g24_transmit_packet:
+	jam 0,mem_24g_retry
+p_g24_transmit_loop:
+	arg param_rx_setup,timeup
+	until clkn_rt,meet
+	call p_g24_transmit_receive_ack
+	fetch 1,mem_24g_no_ack	//tx noack
+	rtneq no_ack_24g
+	nbranch p_g24_retransmit,sync
+	nbranch p_g24_retransmit,user3
+	call p_g24_txbuf_clear
+	call p_g24_ackpayload_parse
+	call power_ctrl_pac_succ_incrs
+p_g24_transmit_next_packet:
+	fetch 1,mem_24g_pid
+	increase 1,pdata
+	store 1,mem_24g_pid
+	fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,p_g24_paring_mode_start
+	call p_g24_transmit_succ_rf_config
+p_g24_transmit_abandon:
+	setarg 0
+	store 2,mem_24g_txfail_cnt
+	store 1,mem_24g_get_ack_fail
+	store 1,mem_24g_hop_pac_retry
+	jam ENSURE_OFF_24G,mem_24g_ensure
+	rtn
+
+p_g24_txbuf_clear:
+	arg 4,loopcnt
+	arg mem_24g_txbuf,contw
+	branch memset0
+
+p_g24_paring_mode_start:
+	call power_ctrl_pac_succ_cnt_init
+	branch p_g24_paring_mode
+
+p_g24_transmit_receive_ack:
+	disable user3
+	call p_g24_transmit
+	
+
+	fetch 1,mem_24g_no_ack
+	beq no_ack_24g,p_g24_transmit_no_ack	//tx no ack
+	force 0,radio_ctrl
+	fetch 4,mem_24g_addr
+	iforce access
+	fetcht 1,mem_last_freq
+	call set_freq_rx
+	call rf_rx_enable
+	call p_g24_receive_rxon
+	call p_g24_end_of_packet,user3
+	rtn
+p_g24_transmit_no_ack:
+	call p_g24_end_of_packet
+	branch p_g24_transmit_next_packet
+
+p_g24_retransmit:
+	fetch 1,mem_24g_get_ack_fail
+	increase 1,pdata
+	store 1,mem_24g_get_ack_fail
+	fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,p_g24_tx_paring_retry
+	fetcht 1,mem_24g_retry
+	increase 1,temp
+	storet 1,mem_24g_retry
+	fetch 1,mem_24g_max_retry
+	isub temp,pdata
+	nbranch p_g24_transmit_loop,blank
+	fetch 1,mem_24g_rf_work_stage
+	beq 3,p_g24_transmit_pac_fail_hop_stage3
+	fetch 1,mem_24g_hop_pac_retry
+	increase 1,pdata
+	store 1,mem_24g_hop_pac_retry
+	beq 2,p_g24_transmit_hop_pac_fail
+	call p_g24_hop_ch_enable
+	jam 1,mem_24g_max_retry
+	branch p_g24_transmit_packet
+
+p_g24_tx_paring_retry:
+	fetch 1,mem_24g_get_ack_fail
+	rtnne 0xff
+	jam 0,mem_24g_get_ack_fail
+	branch p_g24_stop_g24_mode
+
+p_g24_tx_attempt_fail:
+	setarg 0
+	store 2,mem_24g_txfail_cnt
+p_g24_stop_g24_mode:
+	jam BT_EVT_24G_ATTEMPT_FAIL,mem_fifo_temp
+	branch ui_ipc_send_event
+
+p_g24_ackpayload_parse:
+	call p_g24_read_len_pid_crc
+	fetch 1,mem_24g_rxdata_length	//ack payload length 
+	rtn blank
+	iforce loopcnt
+	arg mem_24g_rxbuf+2,contr
+	arg mem_24g_rxpayload,contw	//ack payload buffer 
+	branch memcpy
+
+p_g24_start_pairing_sm1:
+	set1 mark_24g,mark
+	call p_g24_pair_init
+p_g24_set_pairing_sm_1:
+	jam STATE_24G_PAIRING_1,mem_24g_pairing_sm
+	rtn
+
+p_g24_pair_init:
+	jam TX_POWER_PAIR,mem_tx_power
+	jam 0,mem_24g_pid
+	jam G24_PAIR_CH,mem_24g_ch
+	fetch 4,mem_24g_paring_addr
+	branch p_g24_update_addr_and_synccrc8
+
+p_g24_pairing_sm:
+	fetch 1,mem_24g_ensure
+	beq ENSURE_ON_24G,enable_user
+	fetch 1,mem_24g_pairing_sm
+	beq STATE_24G_PAIRING_1,p_g24_pairing_sm_1
+	beq STATE_24G_PAIRING_2,p_g24_pairing_sm_2
+	beq STATE_24G_PAIRING_3,p_g24_pairing_sm_3
+	branch assert
+
+p_g24_pairing_sm_1:
+	jam STATE_24G_PAIRING_1_WAITING_ACK,mem_24g_pairing_sm
+	jam 0xaa,mem_24g_common_temp
+	branch p_g24_pairing_sm_common
+p_g24_pairing_sm_2:
+	jam STATE_24G_PAIRING_2_WAITING_ACK,mem_24g_pairing_sm
+	jam 0x55,mem_24g_common_temp
+	branch p_g24_pairing_sm_common
+p_g24_pairing_sm_3:
+	jam STATE_24G_PAIRING_3_WAITING_ACK,mem_24g_pairing_sm
+	jam 0x22,mem_24g_common_temp
+p_g24_pairing_sm_common:
+	fetch 1,mem_24g_data_type
+	and_into bits_data,pdata
+	store 1,mem_24g_common_temp+1
+	fetch 4,mem_24g_device_addr
+	store 4,mem_24g_common_temp+2
+p_g24_put_pairing_data_in_buff:
+	jam 0,mem_24g_common_temp+6
+	arg mem_24g_common_temp,rega
+	arg 7,temp
+	call p_g24_put_data_in_buff
+	call p_g24_txdata_enable_tx
+	branch enable_user
+
+p_g24_paring_mode:
+	fetch 1,mem_24g_pairing_sm
+	rtneq STATE_24G_PAIRING_SUCCESS
+	beq STATE_24G_PAIRING_1_WAITING_ACK,p_g24_pairing_sm_1_waiting_ack
+	beq STATE_24G_PAIRING_2_WAITING_ACK,p_g24_pairing_sm_2_waiting_ack
+	beq STATE_24G_PAIRING_3_WAITING_ACK,p_g24_pairing_sm_3_waiting_ack
+	rtn
+
+
+p_g24_pairing_sm_1_waiting_ack:
+	jam STATE_24G_PAIRING_2,mem_24g_pairing_sm
+	branch p_g24_transmit_abandon
+p_g24_pairing_sm_2_waiting_ack:
+	jam STATE_24G_PAIRING_3,mem_24g_pairing_sm
+	branch p_g24_transmit_abandon
+p_g24_pairing_sm_3_waiting_ack:
+	jam STATE_24G_PAIRING_SUCCESS,mem_24g_pairing_sm
+	jam BT_EVT_24G_PAIRING_COMPLETE,mem_fifo_temp
+	call ui_ipc_send_event	
+	fetch 4,mem_24g_rxpayload+2
+	call p_g24_update_addr_and_synccrc8
+	branch p_g24_transmit_abandon
+
+p_g24_start_24g_mode:
+	set0 mark_24g,mark
+	call p_g24_ch_syncword_crc8_init
+	fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call p_g24_tx_attemp_data_prep
+p_g24_tx_attemp_dongle:
+	setarg 0
+	store 2,mem_24g_check_dongle_times
+p_g24_tx_attemp_dongle_loop:
+	call lpo_calibration
+	nop 2000
+	fetch 1,mem_24g_check_dongle_times
+	beq 0xff,p_g24_stop_g24_mode
+	call p_g24_transmit_receive_ack
+	nbranch p_g24_attemp_txdata_retry,sync
+	nbranch p_g24_attemp_txdata_retry,user3
+p_g24_tx_attemp_dongle_succ:
+	set1 mark_24g,mark
+	setarg 0
+	store 2,mem_24g_check_dongle_times
+	jam BT_EVT_24G_ATTEMPT_SUCCESS,mem_fifo_temp
+	call ui_ipc_send_event
+	call p_g24_txbuf_clear
+	branch p_g24_transmit_by_interrupt_enable
+
+p_g24_tx_attemp_data_prep:
+	jam 0xff,mem_24g_common_temp
+	fetch 1,mem_24g_data_type
+	store 1,mem_24g_common_temp+1
+	fetch 4,mem_24g_device_addr
+	store 4,mem_24g_common_temp+2
+	arg 6,temp
+	arg mem_24g_common_temp,rega
+	call p_g24_put_data_in_buff
+	branch p_g24_transmit_prep
+	
+p_g24_attemp_txdata_retry:
+	fetch 2,mem_24g_check_dongle_times
+	increase 1,pdata
+	store 2,mem_24g_check_dongle_times
+	call p_g24_ch
+	branch p_g24_tx_attemp_dongle_loop
+
+p_g24_auto_pair_start:
+	set0 mark_24g,mark
+	call p_g24_auto_pair_all_powerful
+	call p_g24_tx_attemp_data_prep
+p_g24_auto_pair_restart:
+	jam 0,mem_24g_check_dongle_times
+p_g24_auto_pair_start_loop:
+	call lpo_calibration
+	nop 2000
+	fetch 1,mem_24g_check_dongle_times
+	beq 0xff,p_g24_stop_g24_mode
+	call p_g24_transmit_receive_ack
+	nbranch p_g24_auto_pair_retry,sync
+	nbranch p_g24_auto_pair_retry,user3
+	call p_g24_ackpayload_parse
+	fetch 4,mem_24g_addr
+	fetcht 4,mem_24g_paring_addr
+	isub temp,null
+	branch p_g24_start_pairing_sm1,zero
+	branch p_g24_tx_attemp_dongle_succ
+
+p_g24_auto_pair_retry:
+	fetch 1,mem_24g_check_dongle_times
+	increase 1,pdata
+	store 1,mem_24g_check_dongle_times
+	fetch 1,mem_24g_auto_paring_switch
+	increase 1,pdata
+	and_into 1,pdata
+	store 1,mem_24g_auto_paring_switch
+	beq 0,p_g24_auto_pair_device_attemp
+	beq 1,p_g24_auto_pair_pair_attemp
+	rtn
+	
+p_g24_auto_pair_all_powerful:
+	jam TX_POWER_PAIR,mem_tx_power
+	call p_mouse_read_24g_addr
+p_g24_ch_syncword_crc8_init:	
+	call p_g24_syncword_crc8
+	branch p_g24_ch
+
+p_g24_auto_pair_device_attemp:
+	call p_g24_auto_pair_all_powerful
+	branch p_g24_auto_pair_start_loop
+
+p_g24_auto_pair_pair_attemp:
+	call p_g24_pair_init
+	branch p_g24_auto_pair_start_loop
+
+p_g24_check_51cmd_stop_24g:
+	set0 mark_24g,mark
+	call le_disable
+p_mouse_disable_g24_pairing_flag:
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	branch mouse_disable_function_flag
+
+p_g24_put_data_in_buff:
+	storet 1,mem_24g_datalen
+	copy temp,loopcnt
+	arg mem_24g_txbuf,contw
+	copy rega,contr
+	branch memcpy
+
+p_g24_read_len_pid_crc:
+//read control
+	fetch 1,mem_24g_rxbuf+1
+	rshift3 pdata,pdata
+	store 1,mem_24g_rxdata_length
+//get crc
+	increase 1,pdata
+	arg mem_24g_rxbuf+1,contr
+	iadd contr,contr
+	ifetch 3,contr
+	store 3,mem_24g_sta_crc
+//read pid
+	fetch 1,mem_24g_rxbuf+1
+	rshift pdata,pdata
+	and pdata,0x03,pdata
+	store 1,mem_24g_sta_pid
+	rtn
+
+p_g24_update_addr_and_synccrc8:	
+	store 4,mem_24g_addr
+//output: 1BYTE crc8
+p_g24_syncword_crc8:
+	arg 0,rega
+	arg 4,loopcnt
+	arg mem_24g_addr,contr
+p_g24_syncword_crc8_loop:
+	ifetch 1,contr
+	iadd rega,rega
+	loop p_g24_syncword_crc8_loop
+	copy rega,pdata
+	store 2,mem_24g_syncword
+	fetch 1,mem_24g_syncword
+	fetcht 1,mem_24g_syncword+1
+	iadd temp,pdata
+	store 1,mem_24g_syncword_crc8
+	rtn
+
+p_g24_transmit_prep:
+
+// total length
+	fetch 1,mem_24g_datalen
+	increase 2,pdata
+	store 1,mem_24g_txlen
+// data type
+	fetch 1,mem_24g_data_type
+	store 1,mem_24g_txpayload
+//prepare 5bit payload length, 2bit PID, 1bit NO_ACK
+	fetch 1,mem_24g_datalen
+	lshift3 pdata,pdata
+	fetcht 1,mem_24g_pid
+	and temp,0x03,temp
+	lshift temp,temp
+	ior temp,pdata
+	fetcht 1,mem_24g_no_ack
+	iadd temp,pdata
+	istore 1,contw
+//prepare payload data
+	fetch 1,mem_24g_datalen
+	iforce loopcnt
+	arg mem_24g_txbuf,contr
+	branch memcpy
+
+p_g24_ch:
+	fetcht 1,mem_24g_current_ch_number
+	call p_g24_ch_map_size
+	storet 1,mem_24g_current_ch_number
+	rtn
+
+p_g24_ch_map_size:
+	call p_g24_ch_calc
+	increase 1,temp
+	and_into 3,temp //map size =4
+	rtn
+	
+p_g24_ch_calc:
+	fetch 1,mem_24g_addr	
+	and_into 0x03,pdata
+	mul32 pdata,4,rega			//24addr low bit0 bit1 ,00-map1,01-map2,10-map3,11-map4
+	setarg mem_24g_ch_map1
+	iadd rega,pdata
+	iadd temp,contr
+	ifetch 1,contr
+	store 1,mem_24g_ch
+	rtn
+
+p_g24_prep:
+	disable enable_crc
+	disable enable_white
+	setarg 0x555555
+	iforce crc24_init
+	fetch 1,mem_24g_ch
+	reverse pdata,temp
+	set1 1,temp
+	rshift temp,white_init
+	rtn
+
+p_g24_receive_packet:
+	call le_enable
+	fetch 4,mem_24g_addr
+	iforce access
+	call set_sync_on
+	fetcht 1,mem_24g_ch
+	call set_freq_rx
+	setarg param_pll_setup
+	call sleep
+	call rf_rx_enable
+p_g24_receive_rxon:
+
+
+	call p_g24_prep
+	disable user3
+	enable decode_fec0
+	enable is_rx
+	disable is_tx
+	enable swfine
+	fetch 2,mem_24g_rx_window
+	iforce stop_watch
+	correlate null,timeout
+	nbranch p_g24_sync_timeout,sync
+
+
+	disable decode_fec0
+	enable decode_fec1
+	enable enable_white
+	enable enable_crc
+	call p_g24_receive_byte
+	store 1,mem_24g_get_syncword_crc8
+	fetcht 1,mem_24g_syncword_crc8
+	isub temp,null
+	nbranch p_g24_end_of_packet,zero
+	call p_g24_receive_byte
+	store 1,mem_24g_rxbuf	//device id
+	fetch 1,mem_24g_mode
+	sub pdata,rx_24g,null
+	branch p_g24_receive_skip,zero
+	fetch 1,mem_24g_rxbuf
+	fetcht 1,mem_24g_data_type
+	icompare bits_data,temp
+	nbranch p_g24_end_of_packet,true
+p_g24_receive_skip:
+	call p_g24_receive_byte
+	istore 1,contw
+	rshift3 pdata,pdata
+	and pdata,0x1f,loopcnt	//max payload: 32bytes
+	branch p_g24rx_nopayload,zero
+p_g24rx_loop:
+	call p_g24_receive_byte
+	istore 1,contw
+	loop p_g24rx_loop
+p_g24rx_nopayload:
+	//receive rssi hex
+	copy contw,rega
+	call p_g24_receive_byte
+	store 1,mem_rssi_hex_received
+	copy rega,contw
+	parse demod,bucket,24
+	enable swfine
+	arg param_sifs,stop_watch	
+	rshift32 pdata,pdata
+	rshift16 pdata,pdata
+	istore 3,contw
+	disable decode_fec1
+	branch p_g24_end_of_packet,crc_failed
+
+
+	enable user3
+	fetch 1,mem_last_freq
+	add pdata,0,rega
+	call rf_write_freq
+	disable decode_fec0
+	call set_sync_on
+	fetch 1,mem_rssi_hex_received
+	call p_rssi_signal
+	rtn
+
+p_g24_receive_byte:
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	rtn
+	
+p_g24_end_of_packet:
+	disable encode_fec1
+	disable decode_fec1
+	call end_of_packet
+	rtn
+
+p_g24_sync_timeout:
+	branch p_g24_end_of_packet
+
+p_g24_set_freq_tx:
+	call set_sync_on
+	fetcht 1,mem_24g_ch
+	branch set_freq_tx
+
+p_g24_transmit:
+	call le_enable
+	fetch 4,mem_24g_addr
+	iforce access
+	call p_g24_prep
+	call p_g24_set_freq_tx
+	set1 TXGFSK,radio_ctrl
+	enable encode_fec0
+	enable is_tx
+	disable is_rx
+
+	
+	rshift16 access,pdata
+	rshift8 pdata,pdata
+	rshift4 pdata,pdata
+	inject mod,40
+	disable encode_fec0
+	enable encode_fec1
+	enable enable_white
+	enable enable_crc
+	fetch 1,mem_24g_syncword_crc8
+	inject mod,8
+	fetch 1,mem_24g_txlen
+	iforce loopcnt
+	arg mem_24g_txpayload,contr
+p_g24tr_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop p_g24tr_loop
+
+
+	enable enable_parity
+	inject mod,24	//crc
+	disable enable_parity
+	until null,tx_clear
+	nop 100
+	disable encode_fec0
+	disable encode_fec1
+	rtn
+
+p_g24_timer_check:
+	call disable_user
+	fetcht 4,mem_24g_tx_btclk
+	copy clkn_bt,pdata
+	isub temp,null
+	ncall g24_timer_timeout,positive
+	copy pdata,regb
+	fetch 4,mem_24g_tx_btclk
+	fetcht 1,mem_24g_interval
+	iadd temp,temp
+	copy regb,pdata
+	isub temp,null
+	nrtn positive
+	set0 28,pdata
+	store 4,mem_24g_tx_btclk
+	branch enable_user
+
+p_rssi_noise:
+	call save_rssi
+	rtn blank
+	fetcht 1,mem_rssi_noise_index
+	arg mem_rssi_noise_buffer,rega
+	call p_rssi_store
+	storet 1,mem_rssi_noise_index
+	rtn
+	
+p_rssi_store:
+	copy rega,pdata
+	iadd temp,contw
+	fetch 1,mem_rssi
+	istore 1,contw
+	increase 1,temp
+	and_into RSSI_BUF_LEN_SIGNAL,temp
+	rtn
+p_rssi_average:
+	arg 0,temp
+	arg RSSI_BUF_LEN_SIGNAL+1,loopcnt
+	copy rega,contr
+p_rssi_average_loop:
+	ifetch 1,contr
+	iadd temp,temp
+	loop p_rssi_average_loop
+	rshift3 temp,pdata
+	copy pdata,temp
+	rtnmark0 mark_24g
+	//2BCD
+	div pdata,10
+	call wait_div_end
+	quotient pdata
+	lshift4 pdata,pdata
+	remainder temp
+	ior temp,temp
+	rtn
+	rtn
+
+
+p_mouse_before_lpm:
+	rtnmark1 mark_24g
+	call p_mouse_setgpio_lpm
+	fetch 1,mem_context
+	bbit0 state_inconn,p_clear_wake
+	fetch 1,mem_lpm_current_mult
+	nrtn blank
+p_clear_wake:
+	setarg 0
+	store 8,mem_gpio_wakeup_low
+	rtn
+
+p_mouse_setgpio_lpm:
+	call p_mouse_set_sdio_high
+	call p_clear_wake
+p_mouse_setgpio_lpm_before:
+	call mouse_lpm_before_common
+	hfetch 4,core_gpio_oe0
+	hfetcht 4,core_gpio_pu0
+	ior temp,temp
+	invert temp,temp
+	hstoret 4,core_gpio_pd0
+	rtn
+
+p_mouse_set_sdio_high:
+	fetch 1,mem_mouse_init_sensor_reset_flag
+	rtn blank
+	branch p_mouse_seting_dpi_diff// make sdio high to make 100uA less	
+
+p_device_init:
+	call app_lpm_mult_enable
+	branch p_device_init_common,wake
+	fetch 1,mem_tx_power
+	store 1,mem_tx_power_temp
+	call power_ctrl_pac_succ_cnt_init
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_combination_ui_button_count	//combination key timer init
+	call mouse_bt_discovery_button_down_disable
+p_device_init_common:
+	call p_mouse_init
+	branch enable_authrom
+
+p_mouse_tx_power_init:
+	fetch 1,mem_tx_power_temp
+	store 1,mem_tx_power
+	rtn
+
+p_mouse_init:
+	ncall p_mouse_setting_config,wake
+	call p_mouse_spi_init
+	rtn wake
+	call p_mouse_cb_fuction
+	fetch 1,mem_power_on_flag
+	bbit1 2,p_mouse_skip_24g_pair
+	call mouse_check_key_gpio
+	beq MOUSE_LM_BUTTON,p_mouse_24g_pairing_button
+p_mouse_skip_24g_pair:	
+	branch p_mouse_wakeup_from_power
+
+p_mouse_check_reconn_target:
+	call p_mouse_tx_power_init
+	fetch 1,mem_xrecord_mode
+	rtn
+
+
+
+p_mouse_24g_pairing_button:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_24G
+	rtnbit1 MOSUE_24G_PAIRING_FLAG
+	rtnmark1 mark_24g
+	call mouse_devce_led_off
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	call mouse_enable_function_flag
+	setarg 0
+	store 2,mem_mouse_direct_timer
+	store 1,mem_mouse_send_blank_timer
+	store 2,mem_24g_check_dongle_times
+	call mouse_stop_discovery
+	branch p_g24_start_pairing_sm1
+
+p_mouse_dpi_config:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_EEPROM,mouse_dpi_config
+	fetch 1,mem_mouse_dpi
+	beq 0xff,mouse_dpi_config
+	branch mouse_seting_dpi+2
+
+p_mouse_spi_init:
+	jam 0x76,mem_spi_init_clk
+	branch mouse_spi_init
+	
+p_mouse_init_sunt:
+	call p_mouse_spi_init
+	call mouse_spi_sdio_gpio_pollup
+	fetch 1,mem_config_sensor_type
+	beq P3610,mouse_init_3610sensor
+p_mouse_init_sensor:
+	call mouse_read_sensor_id
+	beq P32XX_ID1,p_mouse_init_p32xx_id2_judge
+	beq P3065_ID1,p_mouse_p3065_init_param
+	call mouse_twspi_reset
+	nop 1000
+	branch p_mouse_init_sensor
+
+p_mouse_init_sensor_reset:
+	jam 1,mem_mouse_init_sensor_reset_flag
+	call spi_ncs_enable
+	call p_mouse_init_sunt
+	branch spi_ncs_disable
+
+p_mouse_init_p32xx_id2_judge:
+	call p_mouse_sensor_poweron
+	branch mouse_init_p32xx_id2_judge
+
+
+p_mouse_p3065_init_param:
+	call p_mouse_sensor_poweron
+	fetch 1,mem_sensor_id2
+	beq P3065_XY_ID2,mouse_p3065xy_init_param
+	jam P3065,mem_config_sensor_type
+	rtn
+
+p_mouse_sensor_poweron:
+	setarg 0x8006	// reset to factory settings
+	call twspi_write
+	nop 12000
+	branch p_mouse_dpi_config
+p_mouse_sensor_powerdown:
+	setarg 0x06
+	call twspi_read
+	or pdata,0x08,pdata
+	lshift8 pdata,pdata
+	add pdata,0x06,pdata
+	branch twspi_write	//make sdio high
+
+p_mouse_setting_config:
+	call p_g24_set_device_addr
+	//disable usb function
+	hfetch 1,core_usb_config
+	set0 4,pdata
+	hstore 1,core_usb_config
+	call mouse_param_init
+
+	setarg 0x1802	//16M XTAL
+	store 2,mem_fcomp_mul
+	
+	setarg 0
+	store 2,mem_lpm_interval
+	call mouse_adc_init
+p_mouse_init_iic:
+	call iic_init_390k
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	isolate1 MOUSE_ENABLE_2K_EEPROM,pdata
+	ncall clear_eeprom_size_2k,true
+	call mouse_load_eeprom_dpi
+	call p_mouse_init_environment
+p_mouse_read_24g_addr:	
+	call p_mouse_set_24g_addr_eeprom
+	branch iicd_read_eep_data
+
+
+p_mouse_init_environment:
+	call app_initflag_check
+	branch mouse_eeprom_load_recon_info,zero
+	branch mouse_init_environment+2
+
+p_app_flag_store:
+	arg 2,temp
+	arg mem_timeup,rega
+	arg MOUSE_EEPROM_MODULE_INIT_FLAG,regb
+	branch iicd_write_protect_eep_data
+
+p_app_initflag_check:
+	arg 2,temp
+	arg mem_pdatatemp,rega
+	arg MOUSE_EEPROM_MODULE_INIT_FLAG,regb
+	branch app_initflag_check+4
+
+p_mouse_wakeup_from_power:
+	branch p_g24_auto_pair_start
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_WAKEUP_FROM_POWER,p_mouse_wakeup_no_from_power
+	fetch 1,mem_wakup_from_power_flag
+	isolate0 gpio_latch,pdata
+	nbranch p_mouse_wakeup_no_from_power,true
+	call p_mouse_init_sunt
+	call p_mouse_sensor_powerdown
+p_mouse_wakeup_no_from_power:
+	fetch 1,mem_reconn_times_init
+	store 1,mem_reconn_times
+//	fetch 1,mem_config_function_enable	//standard do not need it
+//	rtnbit1 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON
+//	rtnbit1 ENABLE_SELECT_DEVICE_BY_SWITCH
+p_mouse_start_24g_mode:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_24G
+	call p_g24_factory_check
+	branch p_g24_auto_pair_start,user
+	branch p_g24_start_24g_mode
+
+p_g24_factory_check:
+	arg 2,loopcnt
+	arg mem_24g_addr,contr
+p_pdata_0xff_check:
+	call enable_user
+	setarg 0xffff
+p_pdata_0xff_check_loop:
+	ifetcht 2,contr
+	isub temp,null
+	ncall disable_user,zero
+	loop p_pdata_0xff_check_loop
+	rtn
+
+p_mouse_cb_fuction:
+	setarg p_mouse_priority_bb_event
+	store 2,mem_cb_bb_event_process
+	setarg p_mouse_g24_package_data
+	store 2,mem_cb_24g_data
+
+	rtn
+
+p_mouse_g24_package_data:
+	branch p_mouse_g24_package_data_allpower
+
+p_mouse_g24_package_data_normal:
+	call mouse_g24_package_data
+	fetch 2,mem_mouse_z
+	rtn blank
+	branch p_g24_transmit_by_interrupt_enable
+
+p_mouse_g24_package_data_allpower:
+	call p_g24_matrix_data
+	branch p_mouse_g24_package_data_normal+1
+	
+	
+
+p_mouse_wheel_trigger:
+	fetch 2,mem_mouse_z
+	rtn blank
+	jam 1,mem_mouse_wheel_trigger
+	jam 2,mem_mouse_wheel_trigger_timer
+	rtn
+
+	
+p_mouse_clear_sensor_data:
+	call le_set_config_more_data
+	jam 1,mem_mouse_clear_sensor_data_flag
+	branch p_mouse_sensor_poweron
+
+p_mouse_idle:
+	call ui_check_paring_button
+	call mouse_dpi_cheak
+	branch mouse_wheel_check
+
+p_mouse_priority_bb_event:
+	copy regc,pdata
+	beq BT_EVT_24G_PAIRING_COMPLETE,p_mouse_24g_pairing_complete
+	beq BT_EVT_24G_ATTEMPT_FAIL,p_mouse_24g_attempt_fail
+	beq BT_EVT_24G_ATTEMPT_SUCCESS,p_mouse_24g_attempt_success
+	branch mouse_priority_bb_event+1
+
+
+
+
+p_mouse_24g_pairing_complete:
+	jam 1,mem_mouse_24g_enter_lpm_enable
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	call mouse_disable_function_flag
+	setarg 0
+	store 2,mem_24g_pairing_timer_count
+	jam 0,mem_mouse_move_flag
+	
+	call mouse_read_sensor_common
+
+	call p_g24_transmit_by_interrupt_enable
+	call p_mouse_set_24g_addr_eeprom	//store rx dongle addr to eeprom
+	branch iicd_write_protect_eep_data
+
+p_mouse_set_24g_addr_eeprom:
+	arg mem_24g_addr,rega
+	arg MOUSE_G24_ADDR_EEPROM_OFFECT,regb
+	arg 4,temp
+	rtn
+
+p_mouse_24g_attempt_fail:
+	jam G24_TX_TIMER_INT_DISABLE,mem_24g_transmit_by_interrupt
+	call p_mouse_tx_power_init
+	call p_g24_check_51cmd_stop_24g
+	branch soft_reset_chip
+	jam 0,mem_link_key_exists
+	call mouse_eeprom_load_recon_info
+	arg 3,loopcnt
+	arg mem_device1_addr,contr
+	call p_pdata_0xff_check
+	branch p_mouse_null_enter_hibernate_count,user
+	branch p_mouse_check_reconn_target
+
+p_mouse_24g_attempt_success:
+	branch mouse_no_data_timer_init	
+
+
+p_mouse_before_hibernate:
+	enable user
+	hfetch 4,0x8138
+	setflag user,26,pdata
+	hstore 4,core_lpm_reg
+	call lpm_write_ctrl
+	call p_mouse_sensor_powerdown_check
+	call disable_authrom
+	call mouse_devce_led_off
+	call mouse_before_hibernate_wheel_gpio_set
+	branch p_mouse_setgpio_lpm_before
+	
+p_mouse_sensor_powerdown_check:
+	fetch 1,mem_mouse_init_sensor_reset_flag
+	rtn blank
+	jam 0,mem_mouse_init_sensor_reset_flag
+	branch p_mouse_sensor_powerdown
+
+
+p_mouse_bb_event_timer:
+	call p_mouse_wheel_trigger_timer
+	call p_mouse_null_enter_hibernate_check
+	call p_mouse_bt_discovery_check
+	call mouse_check_discovery_timeout_timer
+	branch mouse_check_no_data_timeout_timer
+
+
+
+
+p_mouse_wheel_trigger_timer:
+	arg mem_mouse_wheel_trigger_timer,regc
+	arg p_mouse_wheel_trigger_disable,regb
+	branch timer_single_step
+p_mouse_wheel_trigger_disable:
+	jam 0,mem_mouse_wheel_trigger
+	rtn
+
+p_mouse_bt_discovery_check:
+	fetch 1,mem_config_function_enable
+	bbit1 ENABLE_BT_BUTTON,mouse_bt_discovery_by_button
+p_mouse_bt_discovery_commbination_key:
+	call mouse_check_key_gpio
+	beq MOUSE_LMR_BUTTON,p_mouse_bt_discovery_commbination_key_down
+p_mouse_bt_discovery_commbination_key_up:
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_combination_ui_button_count	//combination key timer init 
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_bt_discovey_button_statue
+	arg MOUSE_BT_DISCOVERY_BUTTON_LONG_DOWN_FLAG,queue
+	call mouse_disable_function_flag
+	branch mouse_bt_discovery_button_down_disable
+p_mouse_bt_discovery_commbination_key_down:
+	jam 40,mem_mouse_null_enter_hibernate_timer
+	call p_mouse_bt_discovery_timer
+	branch mouse_bt_discovery_commbination_key_down+1
+
+p_mouse_bt_discovery_timer:
+	arg mem_combination_ui_button_count,regc
+	arg p_mouse_long_button_bt_discovery,regb
+	branch timer_single_step
+	
+p_mouse_long_button_bt_discovery:
+	fetch 2,mem_ui_state_map
+	isolate1 UI_STATE_BLE_ADV,pdata
+	call mouse_stop_le_adv,true		//reconnect adv
+	fetch 2,mem_ui_state_map
+	isolate1 UI_STATE_BT_RECONNECT,pdata
+	call mouse_cancel_reconnect,true
+	arg MOUSE_BT_DISCOVERY_BUTTON_LONG_DOWN_FLAG,queue
+	call mouse_enable_function_flag
+	branch mouse_long_button_bt_discovry
+
+p_mouse_null_enter_hibernate_check:
+	fetch 1,mem_mouse_null_enter_hibernate_flag
+	rtn blank
+	fetch 1,mem_mouse_null_enter_hibernate_timer
+	branch p_mouse_null_enter_hibernate,blank
+	increase -1,pdata
+	store 1,mem_mouse_null_enter_hibernate_timer
+	rtn
+p_mouse_null_enter_hibernate:
+	jam 0,mem_mouse_null_enter_hibernate_flag
+	branch app_enter_hibernate
+p_mouse_null_enter_hibernate_count:	//ble never connected
+	jam 1,mem_mouse_null_enter_hibernate_flag
+	jam 40,mem_mouse_null_enter_hibernate_timer	//lmr 3s
+	rtn	
+
+	
+
+p_mouse_seting_dpi:
+	call mosue_dpi_led_blink_init
+p_mouse_seting_dpi_diff:
+	fetch 1,mem_config_sensor_type
+	beq P3065_XY,p_mouse_seting_3065XY_dpi
+	branch mouse_seting_dpi+3
+	
+p_mouse_seting_3065XY_dpi:
+	fetch 1,mem_mouse_dpi
+	call p_mouse_3065xy_dpi_recount,blank
+	fetch 1,mem_mouse_dpi
+	beq MOUSE_DPI_LEVEL2,mouse_set_cpi1
+	//beq MOUSE_DPI_LEVEL3,mouse_set_cpi3
+	beq MOUSE_DPI_LEVEL4,mouse_set_cpi4
+	branch mouse_set_cpi3
+p_mouse_3065xy_dpi_recount:
+	jam 1,mem_mouse_dpi
+	rtn
+
+p_mouse_motion:
+	disable user
+	setarg 0
+	store 6,mem_mouse_x
+	call mouse_cheak_sensor_data
+	call mouse_zwheel
+	call mouse_t_zwheel
+	call mouse_key
+	nrtn user
+	branch mouse_motion+9
+
+p_mouse_bb_event_discovery_btn:
+	jam 0,mem_mouse_null_enter_hibernate_flag
+	jam 0,mem_mouse_null_enter_hibernate_timer
+	isolate1 mark_24g,mark
+	call p_g24_check_51cmd_stop_24g,true
+	branch mouse_bb_event_discovery_btn+1
+
+
+p_mouse_start_discovery:
+	call p_mouse_tx_power_init
+	jam 0,mem_mouse_clear_sensor_data_flag
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_ADV,p_mouse_start_discovery_norandom
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_BLE_RANDOM_ADDRE,p_mouse_start_discovery_norandom
+p_mouse_start_discovery_norandom:
+	call app_lpm_mult_disable
+	fetch 2,mem_discovery_timeout
+	store 2,mem_mouse_discovery_timer
+	jam 6,mem_connection_options
+	setarg 0
+	store 2,mem_mouse_no_data_timer
+	store 2,mem_mouse_direct_timer
+	arg MOUSE_STORE_EEPROM_FLAG,queue
+	call mouse_enable_function_flag
+	call mouse_bt_discovery_button_down_disable
+	branch mouse_start_discovery_norandom+13
+
+
+p_mouse_stop_discovery:
+	setarg 0
+	store 2,mem_mouse_discovery_timer
+	call p_mouse_sensor_poweron		//clear sensor data,confirm the motion pin high
+	branch mouse_stop_discovery+1
+
+
+p_twspi_reset:
+	hfetch 1,core_gpio_out3
+	and_into 0xfd,pdata
+	hstore 1,core_gpio_out3
+	hfetcht 1,core_gpio_oe3
+	or_into 0x2,temp
+	hstoret 1,core_gpio_oe3
+	call twspi_disable
+	and_into 0xfd,temp
+	nop 13
+	call twspi_enable
+	hstoret 1,core_gpio_oe3
+	rtn
+
+p_check_51cmd_once_continue:
+	call lmo_fifo_check
+	nbranch check_51cmd_restore,blank  //process this cmd next time while lmo fifo is full
+	fetch 1,mem_fifo_temp
+	bmark0 mark_context,check_51cmd_check_idle
+	beq BT_CMD_LE_UPDATE_CONN,p_check_51cmd_ble_update_connect_param
+	branch check_51cmd_once_continue+2
+
+p_check_51cmd_ble_update_connect_param:
+	call le_fifo_check_full
+	nrtn blank
+	branch le_l2cap_tx_update_req
+
+	
+
+power_ctrl_pac_succ_cnt_init:
+	jam 1,mem_power_ctrl_level
+	jam 0,mem_power_ctrl_pac_succ_cnt
+	rtn
+power_ctrl_pac_succ_incrs:
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	increase 1,pdata
+	store 1,mem_power_ctrl_pac_succ_cnt
+	rtn
+power_ctrl_pac_succ_decrs:
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	sub pdata,2,null
+	ncall power_ctrl_pac_succ_cnt_reinit,positive
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	rtneq 0
+	increase -1,pdata
+	store 1,mem_power_ctrl_pac_succ_cnt
+	rtn
+power_ctrl_pac_succ_cnt_reinit:
+	jam 3,mem_power_ctrl_pac_succ_cnt
+	rtn
+
+power_ctrl_start:
+	rtn
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_ADV
+	rtnbit1 UI_STATE_BT_RECONNECT
+	rtnbit1 UI_STATE_BT_DISCOVERY
+	
+	arg mem_rssi_signal_buf,rega
+	call p_rssi_average
+	storet 1,mem_rssi_avg_received
+
+	setarg RSSI_DIS_MAX_24G
+	bmark1 mark_24g,power_ctrl_start_next
+	setarg RSSI_DIS_MAX_BLE
+power_ctrl_start_next:	
+	isub temp,null
+	nbranch power_ctrl_txpower_incrs_force,positive
+
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	sub pdata,2,null
+	nbranch power_ctrl_txpower_decrs_check,positive
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	beq 0,power_ctrl_txpower_incrs
+	rtn
+
+power_ctrl_txpower_decrs_check:
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	rtnne 32
+	jam 0,mem_power_ctrl_pac_succ_cnt
+power_ctrl_txpower_decrs:
+	fetcht 1,mem_rssi_avg_received
+	setarg RSSI_DIS_MIN_24G
+	bmark1 mark_24g,power_ctrl_txpower_decrs_next
+	setarg RSSI_DIS_MIN_BLE	
+power_ctrl_txpower_decrs_next:	
+	isub temp,null
+	nrtn positive
+	fetch 1,mem_power_ctrl_level
+	beq 0,power_ctrl_decrs_level0
+	increase -1,pdata
+	store 1,mem_power_ctrl_level
+	beq 0,power_ctrl_decrs_level0
+power_ctrl_decrs_level1:
+power_ctrl_incrs_level1:	//0dBm
+	jam TX_POWER_0DB,mem_tx_power
+	rtn
+
+power_ctrl_txpower_incrs_force:
+	jam 0,mem_power_ctrl_pac_succ_cnt
+power_ctrl_txpower_incrs:
+	fetch 1,mem_power_ctrl_level
+	beq 2,power_ctrl_incrs_level2
+	increase 1,pdata
+	store 1,mem_power_ctrl_level
+	beq 1,power_ctrl_incrs_level1
+power_ctrl_incrs_level2:	//+6dBm
+
+	jam TX_POWER_5DB,mem_tx_power
+	rtn
+	
+power_ctrl_decrs_level0: //-5dBm
+	jam TX_POWER_f5DB,mem_tx_power
+	rtn
+
+
+p_set_freq_tx:
+	storet 1,mem_last_freq
+	add temp,0,rega			/* index to frequency */
+	call rf_write_freq
+	setarg param_pll_setup	//128us
+	call sleep
+p_rf_tx_enable:
+	jam 0x1,rfen_adc
+	jam 0x3c,rfen_rx
+	jam 0xe0,rfen_tx
+	nop 10 /* wait LDOs to turn ON*/
+	jam 0x01, rfen_mdm
+	jam 0x3d, rfen_mdm
+	nop 10 /* wait tx blocks to turn ON*/
+	jam 0xb7,rfen_sn
+	nop 10 /* wait tx lo buffer to turn ON*/
+	jam 0x7d, rfen_mdm
+	fetch 1,mem_tx_power
+//	beq TX_POWER_0DB,p_set_tx_power_0db
+//	beq TX_POWER_3DB,p_set_tx_power_3db	
+	beq TX_POWER_5DB,p_set_tx_power_5db
+//	beq TX_POWER_f3DB,p_set_tx_power_f3db	
+	beq TX_POWER_f5DB,p_set_tx_power_f5db
+	beq TX_POWER_PAIR,p_set_tx_power_pair
+//	branch p_set_tx_power_0db
+p_set_tx_power_0db:
+	call p_rx_low_sens
+//	jam 0xba,0x894b
+	jam 0xd0,0x8955
+	jam 0xe0,0x8956
+//	jam 0x88,0x8957
+	jam 0x6c,0x8958
+//	jam 0x10,0x8959
+	branch set_tx_power_0db	
+
+//p_set_tx_power_3db:
+//	call p_rx_high_sens
+//	jam 0xba,0x894b
+//	jam 0xd0,0x8955
+//	jam 0xe0,0x8956
+//	jam 0x88,0x8957
+//	jam 0x3c,0x8958
+//	jam 0x10,0x8959
+//	branch set_tx_power_3db
+	
+p_set_tx_power_5db:
+	call p_rx_high_sens
+//	jam 0xba,0x894b
+	jam 0xd0,0x8955
+	jam 0xe0,0x8956
+//	jam 0x88,0x8957
+	jam 0x3c,0x8958
+//	jam 0x10,0x8959
+	branch set_tx_power_5db
+
+//p_set_tx_power_f3db:
+//	call p_rx_low_sens
+//	jam 0xba,0x894b
+//	jam 0xd0,0x8955
+//	jam 0xc0,0x8956
+//	jam 0x88,0x8957
+//	jam 0x6c,0x8958
+//	jam 0x10,0x8959
+//	branch set_tx_power_f3db
+	
+p_set_tx_power_f5db:
+	call p_rx_low_sens
+//	jam 0xba,0x894b
+	jam 0xd0,0x8955
+	jam 0xc0,0x8956
+//	jam 0x88,0x8957
+	jam 0x6c,0x8958
+//	jam 0x10,0x8959
+	branch set_tx_power_f5db
+
+p_rx_low_sens:
+	jam 0x5b,0x894c
+	jam 0x96,0x894d
+	jam 0x2c,0x894e 
+	jam 0x46,0x894f
+	rtn
+
+p_rx_high_sens:
+	jam 0xfb,0x894c 
+	jam 0xef,0x894d
+	jam 0xec,0x894e 
+	jam 0x5e,0x894f
+	rtn
+		
+p_set_tx_power_pair:	//50-100cm distance
+//	jam 0xba,0x894b
+ 	jam 0xc5,0x8956
+	jam 0xd0,0x8955
+	rtn	
+
+p_shutdown_radio:
+	force 8,radio_ctrl
+	branch shutdown_radio+1
+
+p_initialize_radio_cont:
+	jam 0xe6,0x8968				//XTAL_SELECT_24M:	0xe4
+	call initialize_radio_cont+1
+	jam clksel_dpll,core_clksel	//XTAL_SELECT_24M:	clksel_rc
+	rtn
+
+
+
+
+//1 mem_m_key
+//2 mem_m_x
+//2 mem_m_y
+//1 mem_m_z
+//1 mem_m_tz
+//1 mem_24g_matrix_cnt
+p_g24_matrix_data:
+	fetch 1,mem_24g_matrix_cnt
+	increase 1,pdata
+	store 1,mem_24g_matrix_cnt
+	sub pdata,50,null
+	branch p_ms_x_right,positive
+	sub pdata,100,null
+	branch p_ms_y_up,positive
+	sub pdata,150,null
+	branch p_ms_x_left,positive
+	sub pdata,200,null
+	branch p_ms_y_down,positive
+	rtn
+p_ms_x_right:
+	setarg 0x05
+	store 2,mem_m_x
+	setarg 0
+	store 2,mem_m_y
+	store 1,mem_m_z
+	store 1,mem_m_key
+	store 1,mem_m_tz
+p_data:	
+	enable user
+	arg 7,rega
+	arg mem_m_key,regb
+	rtn
+p_ms_y_up:
+	setarg 0x05
+	store 2,mem_m_y
+	setarg 0
+	store 2,mem_m_x
+	store 1,mem_m_z
+	store 1,mem_m_key
+	store 1,mem_m_tz
+	branch p_data
+p_ms_x_left:
+	setarg 0xfffb
+	store 2,mem_m_x
+	setarg 0
+	store 2,mem_m_y
+	store 1,mem_m_z
+	store 1,mem_m_key
+	store 1,mem_m_tz
+	branch p_data
+p_ms_y_down:
+	fetch 1,mem_24g_matrix_cnt
+	beq 200,p_mem_usb_data_square_cnt_set0
+	setarg 0xfffb
+	store 2,mem_m_y
+	setarg 0
+	store 2,mem_m_x
+	store 1,mem_m_z
+	store 1,mem_m_key
+	store 1,mem_m_tz
+	branch p_data
+p_mem_usb_data_square_cnt_set0:
+	jam 0,mem_24g_matrix_cnt
+	branch p_ms_y_down+2
+
+
+
+/******************************************/
+/***********   ROM Start   ***************/
+/******************************************/
+
+org 0x2000		// start from rom address start
+start:
+	call lpmstate
+
+soft_reset:
+	bpatch patch00_0,mem_patch00
+	clear_stack
+	call spi_ncs_gpio_init  // 0xff disable spi ncs gpio init
+	call initialize_radio
+	call iicd_init_12m
+	call init_param
+	call l2cap_init
+	bpatch patch00_1,mem_patch00
+	call rfcomm_init
+	call init_lmp
+	call ui_init
+	call app_init
+	ncall load_chip_option,wake
+	bpatch patch00_2,mem_patch00
+	call app_lpm_init,wake
+	call publickey_init
+soft_reset_2:
+	call lpm_recover_clk,wake
+main_loop:	
+	bpatch patch00_3,mem_patch00
+	call sp_calc_sequence
+	call sp_calc_sequence_256
+	call sp_calc_sequence_256_check
+	call le_dispatch
+	bpatch patch00_4,mem_patch00
+	call idle_dispatch
+	call app_process_idle
+	call inquiry_dispatch
+	call inquiry_scan_dispatch
+	call page_scan_dispatch
+	call connection_dispatch
+	call lpm_dispatch
+	call g24_dispatch
+	branch main_loop
+
+connection_dispatch:
+	call connection_incontext
+	rtnmark0 mark_context
+	set0 mark_context,mark
+	call context_save
+	branch le_disable
+	
+connection_incontext:
+	bpatch patch00_5,mem_patch00
+	call context_search_insniff
+	nbranch connection_nosniff,zero
+	call context_load
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	bbit1 mode_le,le_conn_dispatch
+	bbit1 mode_master, master_dispatch
+	branch slave_dispatch
+connection_nosniff:
+	call context_get_next
+	copy loopcnt,null
+	rtn zero
+	call context_load
+	fetch 1,mem_state
+	bbit1 state_inpage,master_page
+	fetch 1,mem_mode
+	bbit1 mode_master, master_dispatch
+	branch slave_dispatch
+
+
+
+/**************************************/
+/**************idle dispatch*********/
+/**************************************/
+	
+idle_dispatch:
+	fetch 1,mem_hci_cmd
+	rtn blank
+	beq hci_cmd_inquiry,idle_inquiry
+	beq hci_cmd_inquiry_cancel,idle_inquiry_cancel
+	beq hci_cmd_remote_name_req,idle_remote_name_req
+	beq hci_cmd_create_conn,idle_create_conn
+	beq hci_cmd_le_create_conn,idle_le_create_conn
+	call context_search_conn_handle
+	rtn zero
+	call context_search_plap
+	rtn zero
+idle_exit:
+	jam 0,mem_hci_cmd
+	rtn
+
+idle_le_create_conn:
+	jam hci_cmd_le_create_conn,mem_cmd_le_create_conn
+	jam 0,mem_hci_cmd
+	rtn
+	
+idle_inquiry:
+	set1 mark_inquiry_on,mark
+	set0 mark_inquiry_trainb,mark
+	jam param_ninquiry,mem_ninqy_index
+	jam 31,mem_nfreq_index_inq
+	branch idle_exit
+
+idle_inquiry_cancel:
+	set0 mark_inquiry_on,mark
+	force 0,stop_watch
+	branch idle_exit
+
+idle_remote_name_req:
+	call context_search_plap
+	rtn zero
+	force LMP_NAME_REQ,temp
+	jam 5,mem_nameres_cnt
+	branch idle_start_page
+
+idle_create_conn:
+	bpatch patch00_6,mem_patch00
+idle_create_conn_device:
+	fetch 6,mem_hci_plap
+	branch idle_exit,blank
+	jam RECONNECT_HID,memui_reconnect_mode
+	//jam HS_INIT_CALL,mem_hs_mode //init as master
+	jam CONN_SM_WAIT_FEATURES_RES,mem_conn_sm
+	branch idle_create_conn_cont
+	
+idle_create_conn_cont:
+	force LMP_VERSION_REQ,temp
+idle_start_page:
+	bpatch patch00_7,mem_patch00
+	fetch 1,mem_page_mode
+	branch idle_page_mode_r0,blank
+	lshift3 pdata,pdata
+	lshift4 pdata,pdata
+	increase -1,pdata
+idle_page_mode_r0:
+	store 1,mem_npage
+	store 1,mem_npage_index
+	jam 31,mem_nfreq_index_page
+	set0 mark_page_trainb,mark
+	call context_new
+	nbranch idle_page_fail,zero
+	call get_free_amaddr
+	store 1,mem_amaddr
+	storet 1,mem_lmo_opcode2
+	fetch 6,mem_hci_plap
+	store 6,mem_plap
+	bpatch patch01_0,mem_patch01
+	call timer_reinit
+	force 0,pdata
+	compare LMP_NAME_REQ,temp,0xff
+	nsetflag true,state_init_seq,pdata
+	set1 state_inpage,pdata
+	store 1,mem_state
+	jam BT_EVT_RECONN_STARTED,mem_fifo_temp
+	call ui_ipc_send_event
+	force 0,pdata
+	setflag true,smap_name_req,pdata
+	store 1,mem_state_map
+	setarg 0
+	set1 mode_master,pdata
+	store 1,mem_mode
+	enable master
+	call context_save
+	disable master
+	force page_length_timer,queue
+	fetch 2,mem_page_to
+	call timer_init
+	branch idle_exit
+idle_page_fail:
+	bpatch patch01_1,mem_patch01
+	fetch 6,mem_hci_plap
+	store 6,mem_plap
+	compare LMP_NAME_REQ,temp,0xff
+	branch idle_name_fail,true
+	branch idle_exit
+idle_name_fail:
+	arg mem_tmp_buffer,contw
+	arg 8,loopcnt
+	call memset0
+	jam BT_EVT_RECONN_FAILED,mem_fifo_temp
+	call ui_ipc_send_event
+	branch idle_exit
+	
+
+/******************************************/
+/**************  Inquiry  *****************/
+/******************************************/
+
+inquiry_dispatch:
+	rtnmark0 mark_inquiry_on
+	force inquiry_length_timer,queue
+	call timer_check
+	nsetflag blank,mark_inquiry_on,mark
+	nbranch inquiry_start,blank
+	rtn
+	
+
+
+inquiry_start:
+	bpatch patch01_2,mem_patch01
+	fetcht 2,mem_inq_window
+	force 4,queue
+	call sniff_check_window
+	rtn user
+	call afh_clear
+	force 0,freq_mode
+inquiry_restart:
+	rtn timeout
+	set0 mark_fhs_already_good,mark
+	set0 mark_fhs_eir,mark
+inquiry_rx_restart:
+	add clkn_bt,1,bt_clk
+	isolate1 mark_inquiry_trainb,mark
+	setflag true,2,freq_mode
+	compare 0x00,bt_clk,0x02      /* see if this is even slot */
+	nbranch inquiry_receive,true
+
+inquiry_transmit:
+	bpatch patch01_3,mem_patch01
+	fetch 1,mem_inquiry_transmit
+	increase 1,pdata
+	store 1,mem_inquiry_transmit
+	call fetch_giac
+	call tx_radio_freq
+	call fetch_diac
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_native
+	call send_access_word
+	call end_of_packet
+	call inquiry_check_train
+	branch inquiry_restart
+
+inquiry_check_train:
+	bpatch patch01_4,mem_patch01
+	fetch 1,mem_nfreq_index_inq
+	increase -1,pdata
+	store 1,mem_nfreq_index_inq
+	rtn positive  /* if it's time to incremnt N */
+	jam 31,mem_nfreq_index_inq
+	fetch 1,mem_ninqy_index
+	increase -1,pdata
+	store 1,mem_ninqy_index
+	rtn positive      /* if it's time to change train */
+	setflip mark_inquiry_trainb,mark
+	jam param_ninquiry,mem_ninqy_index
+	rtn
+
+inquiry_receive:
+	bpatch patch01_5,mem_patch01
+	call fetch_giac
+	call rx_radio_freq
+	call fetch_diac
+	call start_rx_native
+	call start_receiver	/* get ready for that id packet */
+	call wait_access_clkn_rt
+	branch inquiry_sync,sync   /* try look for id packet again if not found */
+	call inquiry_check_train
+	branch inquiry_rx_restart
+inquiry_sync:
+	bpatch patch01_6,mem_patch01
+	call save_rssi
+	call scan_mode_whiten
+	call receive_packet_whitened
+	set0 mark_rxbuf_inuse,mark
+	rtnmark0 mark_fhs_already_good
+inquiry_receive_rtn:
+	bpatch patch01_7,mem_patch01
+inquiry_receive_eir_rtn:
+	fetch 1,mem_inquiry_rcv
+	increase 1,pdata
+	store 1,mem_inquiry_rcv
+	rtn
+		
+/******************************************/
+/**************  Master Dispatch  *************/
+/******************************************/
+
+
+
+master_page:
+	bpatch patch02_0,mem_patch02
+	enable master
+	enable clknt
+	fetch 2,mem_page_interval
+	branch master_page_no_interval,blank
+	force page_interval_timer,queue
+	call timer_check               
+	nrtn blank
+master_page_no_interval:
+	bpatch patch02_1,mem_patch02
+	fetcht 2,mem_page_window
+	force 40,queue
+	call sniff_check_window
+	branch page_exit,user
+	force page_length_timer,queue
+	call timer_check
+	nbranch page_start,blank
+	fetch 1,mem_state_map
+	bbit1 smap_name_req,master_npage_timeout
+	branch master_page_timeout
+master_npage_timeout:
+	arg mem_tmp_buffer,contw
+	arg 8,loopcnt
+	call memset0
+master_page_timeout:
+	bpatch patch02_2,mem_patch02
+	jam 0,mem_state
+	call init_lmp_work
+	jam 0,memui_reconnect_mode
+	jam BT_EVT_RECONN_PAGE_TIMEOUT,mem_fifo_temp
+	call ui_ipc_send_event	
+	branch page_exit
+
+page_start:
+	bpatch patch02_3,mem_patch02
+	force 0,timeup
+	until clkn_rt,meet
+	fetch 1,mem_page_clk
+	increase -1,pdata
+	ixor clkn_bt,pdata
+	compare 0,pdata,3
+	nbranch page_start,true
+	deposit am_addr
+	store 1,mem_fhs_am_addr
+	force 0,N_tx_slot
+	force 0,freq_mode
+
+page_restart:
+	bpatch patch02_4,mem_patch02
+	branch page_exit,timeout
+	call fetch_page_bt_adr
+	arg param_rf_setup, timeup
+	until clkn_rt,meet         /* wait for the start_receiver time against native real clk  */
+page_rx_restart:
+	bpatch patch02_5,mem_patch02
+	fetch 4,mem_page_clk    /* deposit clk_estimate */
+	iforce bt_clk
+	increase 1,pdata
+	store 4,mem_page_clk
+	isolate1 mark_page_trainb,mark
+	setflag true,2,freq_mode
+	compare 0x00,bt_clk,0x02      /* see if this is even slot */
+	nbranch page_receive,true
+	fetch 1, mem_page_transmit
+	increase 1,pdata
+	store 1, mem_page_transmit
+	call tx_radio_freq
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_native
+	call send_access_word
+	call end_of_packet
+	call page_check_train
+	branch page_restart	
+page_exit:
+	bpatch patch02_6,mem_patch02
+	disable master
+	fetch 2,mem_page_interval      
+	rtn blank
+	force page_interval_timer,queue
+	branch timer_init              
+
+page_check_train:
+	bpatch patch02_7,mem_patch02
+	fetch 1,mem_nfreq_index_page
+	increase -1,pdata
+	store 1,mem_nfreq_index_page
+	rtn positive
+	jam 31,mem_nfreq_index_page
+	fetch 1,mem_npage_index
+	increase -1,pdata                 /* increment N */
+	store 1,mem_npage_index
+	rtn positive      			/* if it's time to change train */
+	setflip mark_page_trainb,mark             /* change train */
+	fetch 1,mem_npage
+	store 1,mem_npage_index
+	rtn
+	
+page_receive:
+	bpatch patch03_0,mem_patch03
+	call rx_radio_freq
+	call start_rx_native
+	call start_receiver	/* get ready for that id packet */
+	call wait_access_clkn_rt	/* try id look for id packet again */
+	branch page_sync,sync         /* restart if didn't receive anything */
+	call page_check_train
+	branch page_rx_restart
+page_sync:
+	call end_of_packet
+	fetch 1, mem_page_rcv
+	increase 1,pdata
+	store 1, mem_page_rcv
+	force 0,stop_watch
+	fetch 4,mem_page_clk
+page_send_fhs:
+	bpatch patch03_1,mem_patch03
+	call rf_setup_time_master_slot
+	call fetch_page_bt_adr
+	increase 1,N_tx_slot
+page_send_fhs_continue:
+	and_into 0x1fd,bt_clk
+	and_into 0x1fc,freq_mode               /* master response = x00, even_train settin must remain the same */
+	call tx_radio_freq
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_native
+	call send_access_word
+	deposit clkn_bt
+	store 4,mem_clkn_bt
+	force 0,am_addr
+	force type_fhs,type
+	call scan_mode_whiten
+	call transmit_packet_whitened
+page_wait_fhs_reply:
+	bpatch patch03_2,mem_patch03
+	call rf_setup_time_slave_slot
+	or_into 0x02,bt_clk
+	and_into 0x1fc,freq_mode               /* master response sequence = x00, even train setting must be preserved */
+	call rx_radio_freq
+	call start_rx_native
+	call start_receiver	/* get ready for that id packet */
+	call wait_access_clkn_rt	/* look for that reply */
+	call end_of_packet,sync              /* id reply is enough */
+	branch page_wait_fhs_reply_ok,sync           /* no reply then send fhs again */
+	fetch 1,mem_fhs_wait_counter
+	branch page_restart,blank
+	increase -1,pdata
+	store 1,mem_fhs_wait_counter
+	branch page_send_fhs
+	
+page_wait_fhs_reply_ok:
+	bpatch patch03_3,mem_patch03
+	fetch 1, mem_page_rcv_fhs
+	increase 1,pdata
+	store 1, mem_page_rcv_fhs
+	call prepare_newconn
+master_newconn_loop:
+	call master_newconn_once
+	branch newconn_poll_responded,sync
+	call new_conn_timeout
+	nbranch master_newconn_loop,blank
+	branch page_restart
+
+newconn_poll_responded:
+	bpatch patch03_4,mem_patch03
+	fetch 1,mem_state
+	set0 state_inpage,pdata
+	store 1,mem_state
+	call newconn_init
+	disable master
+	rtn
+	
+
+master_dispatch:
+	bpatch patch03_5,mem_patch03
+	enable master
+	enable clknt
+	call role_switch_master
+	rtn user
+	call check_bt_disabled
+	call rf_setup_time_master_slot
+	add clkn_bt,1,bt_clk
+	call fetch_self_bt_adr
+	force 0x03,freq_mode
+	call scheduler_tx_l2cap_pkt
+	call prepare_tx
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_native
+	call send_access_word
+	call transmit_packet
+master_loop:
+	bpatch patch03_6,mem_patch03
+	call parse_lmp
+	call master_conn_recv_packet
+	nbranch master_notmatch,match
+	call supervision_flush
+	call parse_l2cap
+	fetch 1,mem_master_rcvcnt
+	increase 1,pdata
+	store 1,mem_master_rcvcnt
+master_notmatch:
+	bpatch patch03_7,mem_patch03
+	call scheduler_process
+	call check_master_disconnect
+	nrtn master					/* disconnected */
+	call check_attempt
+	nbranch master_attempt,blank
+master_exit:
+	disable master
+	rtn
+
+master_attempt:
+	call prepare_tx
+	call master_conn_send_packet
+	branch master_loop
+
+
+check_master_disconnect:
+	branch check_master_match,match
+	call supervision_update
+	branch master_disconnect,positive
+check_master_match:
+	call check_disconnect_timeout
+	nbranch master_disconnect,user
+	fetch 1,mem_state_map
+	rtnbit0 smap_name_req
+	rtnbit1 smap_name_res
+	fetch 1,mem_op
+	rtnbit1 op_disconn
+	call conn_timer_expired
+	nrtn blank
+	fetch 1,mem_nameres_cnt
+	increase -1,pdata
+	store 1,mem_nameres_cnt
+	nrtn blank
+	branch lmp_disconnect
+
+master_disconnect:
+	bpatch patch04_0,mem_patch04
+	call quit_connection
+	disable master
+	fetch 1,mem_state_map
+	bbit1 smap_name_req,master_name_disconnect
+	rtn
+	
+master_name_disconnect:
+	fetch 1,mem_state_map
+	rtnbit1 smap_name_res
+master_name_error:
+	arg mem_tmp_buffer,contw
+	arg 8,loopcnt
+	branch memset0
+	
+check_disconnect_timeout:
+	bpatch patch04_1,mem_patch04
+	enable user
+	fetch 1,mem_op
+	rtnbit0 op_disconn
+	call conn_timer_expired
+	nrtn blank
+	branch disable_user
+
+conn_timer_expired:
+	fetch 1,mem_conn_timer
+	increase -1,pdata
+	store 1,mem_conn_timer
+	rtn
+
+linkkey_ready:
+	bpatch patch04_2,mem_patch04
+	fetch 1,mem_state
+	bbit1 state_linkkey,linkkey_set
+	fetch 1,mem_pairing_auth
+	branch linkkey_set,blank
+	jam DEFALT_PAIRING_AUTH,mem_pairing_auth
+	jam BT_EVT_LINKKEY_GENERATE,mem_fifo_temp
+	call ui_ipc_send_event
+	branch linkkey_set
+linkkey_set:
+	bpatch patch04_3,mem_patch04
+	call context_traverse_linkkey
+	fetch 1,mem_state
+	set1 state_linkkey,pdata
+	store 1,mem_state
+	jam 1,mem_link_key_exists
+	fetch 1,mem_conn_sm
+	bne CONN_SM_PAIRING,linkkey_set_continue
+linkkey_set_continue:
+	rtn
+
+generate_linkkey_continue:
+	jam PAIRING_AUTH,mem_pairing_auth
+clear_linkstate:
+	fetch 1,mem_state
+	set0 state_linkkey,pdata
+	store 1,mem_state
+	rtn
+	
+
+	/* rtn user if switch */
+role_switch_check:
+	bpatch patch04_4,mem_patch04
+	disable user
+	fetch 2,mem_tsniff
+	arg 0xffff,temp
+	isub temp,null
+	nrtn zero
+	fetch 4,mem_sniff_anchor
+	branch role_switch_clkn,clknt
+	isub clke_bt,pdata
+	branch role_switch_clke
+role_switch_clkn:
+	isub clkn_bt,pdata
+role_switch_clke:
+	sub pdata,4,null
+	nrtn positive
+	force 0,pdata
+	store 2,mem_tsniff
+	branch enable_user
+
+
+	/* pdata: switch instant, set tsniff=0 for special sniff */	
+role_switch_prepare:
+	copy pdata,temp
+	bpatch patch04_5,mem_patch04
+	storet 4,mem_sniff_anchor
+role_switch_prepare0:
+	jam SWITCH_FLAG_ACCEPT,mem_switch_flag
+	setarg 0xffff
+	store 2,mem_tsniff
+	jam 1,mem_sniff_attempt
+	rtn
+
+
+role_switch_master:
+	bpatch patch04_6,mem_patch04
+	call role_switch_check
+	nrtn user
+	disable user
+	jam param_newconnto,mem_newconnto_counter
+	set0 mark_fhs_already_good,mark
+roles_waitfhs_loop:
+	call rf_setup_time_master_slot
+	call master_recv_packet
+	bmark1 mark_fhs_already_good,roles_replyto_fhs
+	call new_conn_timeout
+	nbranch roles_waitfhs_loop,blank
+role_switch_fail_master:
+	bpatch patch04_7,mem_patch04
+	disable user
+	deposit clkn_bt
+	store 4,mem_next_btclk
+	enable clknt
+	enable master
+	jam BT_EVT_SWITCH_FAIL_MASTER,mem_fifo_temp
+	branch ui_ipc_send_event
+	
+roles_replyto_fhs:
+	bpatch patch05_0,mem_patch05
+	call rf_setup_time_slave_slot
+	arg type_id,type
+	call master_send_packet
+	disable clknt
+	disable master
+	call apply_switch_clke
+	call prepare_newconn
+roles_newconns_loop:
+	bpatch patch05_1,mem_patch05
+	call slave_newconn_once
+	branch roles_newconns_responded,match
+	call new_conn_timeout
+	nbranch roles_newconns_loop,blank
+	branch role_switch_fail_master
+roles_newconns_responded:
+	fetch 1,mem_mode
+	set0 mode_master,pdata
+	store 1,mem_mode
+	call supervision_flush
+	call calc_clke_offset
+	enable user
+	jam BT_EVT_SWITCH_SUCCESS_MASTER,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+
+
+context_load:
+	bpatch patch05_2,mem_patch05
+	set1 mark_context,mark
+	deposit rega
+	store 2,mem_context_ptr
+	force context_size,loopcnt
+	arg mem_le_state,contw
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	copy rega,contr
+	bbit1 mode_le,memcpy
+	arg mem_state,contw
+	call memcpy
+	disable attempt
+	fetch 1,mem_amaddr
+	iforce am_addr
+	jam 1,mem_current_sniff_attempt
+	branch context_load_master,master
+	jam 1,mem_current_sniff_attempt
+context_load_master:
+	fetch 1,mem_state
+	rtnbit0 state_insniff
+	fetch 1,mem_sniff_attempt
+	store 1,mem_current_sniff_attempt
+	fetch 1,mem_sniff_timeout
+	store 1,mem_current_sniff_timeout
+	rtn
+	
+context_save:
+	bpatch patch05_3,mem_patch05
+	fetch 2,mem_context_ptr
+	iforce contw
+	force context_size,loopcnt
+	arg mem_le_state,contr
+	branch memcpy,le
+	arg mem_state,contr
+	branch memcpy
+
+	
+
+context_get_next:
+	arg context_num,loopcnt
+	fetcht 1,mem_current_context
+context_get_next_loop:
+	increase 1,temp
+	compare context_num,temp,0xff
+	nbranch context_get_next_cont,true
+	arg 0,temp
+context_get_next_cont:
+	storet 1,mem_current_context
+	mul32 temp,context_size,pdata
+	arg mem_context,rega
+	iadd rega,rega
+	ifetch 1,rega
+	bbit1 state_insniff,context_get_next_sniff
+	rtnbit1 state_inconn
+	rtnbit1 state_inpage
+context_get_next_sniff:
+	loop context_get_next_loop
+	rtn
+	
+context_new:
+	bpatch patch05_4,mem_patch05
+	arg context_search_empty,regc
+	call context_search
+	nrtn zero					// all occupied
+	deposit rega
+	store 2,mem_context_ptr
+	force 0,null
+	rtn
+	
+	//return zero if anyone's wack is 1.
+	//return nzero if all wack is 0
+context_check_all_wack:
+	call check_esco_amaddr
+	branch context_check_esco_wack,true
+	fetch 2,mem_context_ptr
+	add pdata,coffset_arq,contw
+	fetch 1,mem_arq
+	istore 1,contw
+	arg context_check_a_wack,regc
+	branch context_search
+
+context_check_esco_wack:
+	fetch 1,mem_arq
+	isolate1 wack,pdata
+	branch context_esco_wack,true
+	force 1,null
+	rtn
+context_esco_wack:
+	force 0,null
+	rtn
+	
+	//rtn nzero if idle(no conn)
+context_check_idle:
+	arg context_check_inconn,regc
+	branch context_search
+	
+context_traverse_linkkey:
+	fetcht 2,mem_context_ptr
+	arg context_traverse_clearkey,regc
+	branch context_search
+	
+	
+	/* return zero if conn handle is found */
+context_search_conn_handle:
+	fetcht 1,mem_hci_conn_handle
+context_search_conn_handle2:
+	arg context_search_handle,regc
+	branch context_search
+	/* return zero if plap is found */
+context_search_plap:
+	bpatch patch05_5,mem_patch05
+	fetcht 6,mem_hci_plap
+context_search_plap2:
+	arg context_search_lap,regc
+	branch context_search
+	/* return zero if sniff anchor is meet and rega pointers to context */
+context_search_insniff:
+	arg context_search_sniff,regc
+	branch context_search
+	/* return zero if sniff window is in content with current transaction */
+context_search_sniff_window:
+	arg context_search_window,regc
+context_search:
+	bpatch patch05_6,mem_patch05
+	arg mem_context,rega
+	arg context_num,loopcnt
+context_search_loop:
+	ifetch 1,rega
+	copy regc,pc
+context_search_next:
+	increase context_size,rega
+	loop context_search_loop
+	force 1,null
+	rtn
+
+context_search_empty:
+	bbit1 state_inconn,context_search_next
+	bbit1 state_inpage,context_search_next
+	force 0,null
+	rtn
+	
+context_search_lap:
+	bbit1 state_inpage,context_search_lap_cont
+	bbit0 state_inconn,context_search_next
+context_search_lap_cont:
+	add rega,coffset_plap,contr
+	ifetch 6,contr
+	isub temp,null
+	rtn zero
+	branch context_search_next
+
+context_search_handle:
+	bbit0 state_inconn,context_search_next
+	add rega,coffset_conn_handle,contr
+	ifetch 1,contr
+	isub temp,null
+	rtn zero
+	branch context_search_next
+
+context_search_sniff:
+	bbit0 state_insniff,context_search_next
+context_search_sniff_loop:
+	call context_get_anchor
+	call sign_pdata_temp
+	isub temp,pdata
+	increase 1,pdata
+	branch context_search_sniff_miss,positive
+	copy contr,regb
+	store 9,mem_temp
+	fetch 1,mem_le_sc_calc
+	nbranch context_search_sniff_sc,blank
+	fetch 9,mem_temp
+	copy regb,contr
+	increase 5,pdata  
+	branch context_search_meet1
+context_search_sniff_sc:
+	fetch 9,mem_temp
+	copy regb,contr	
+	increase 20,pdata  
+context_search_meet1:
+	nbranch context_search_next,positive
+context_search_meet:
+	copy temp,bt_clk
+	call context_next_anchor
+	force 0,null
+	rtn
+	
+	
+context_search_sniff_miss:
+	iforce regb
+	add rega,coffset_tsniff,contr
+	ifetch 2,contr
+	branch context_search_meet,blank
+	call context_next_anchor
+	branch context_search_sniff_loop
+
+sign_pdata_temp:
+	rshift16 pdata,timeup    
+	rshift8 timeup,timeup    
+	branch sign_pdata_temp_p0,zero    
+	compare 0xf,timeup,0xf    
+	nrtn true    
+	rshift16 temp,timeup    
+	rshift8 timeup,timeup    
+	nrtn zero    
+	set1 28,temp    
+	rtn
+sign_pdata_temp_p0:    
+	rshift16 temp,timeup    
+	rshift8 timeup,timeup    
+	compare 0xf,timeup,0xf    
+	nrtn true    
+	set1 28,pdata    
+	rtn
+
+context_check_inconn:
+	bbit0 state_inconn,context_search_next
+	force 0,null 				// found
+	rtn
+	
+context_check_a_wack:
+	bbit0 state_inconn,context_search_next
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	bbit1 mode_le,context_search_next
+	add rega,coffset_arq,contr
+	ifetch 1,contr
+	bbit0 wack,context_search_next
+	force 0,null 				// found
+	rtn
+
+context_get_anchor:
+	add rega,coffset_mode,contr
+	ifetcht 1,contr
+	deposit clkn_bt
+	isolate1 mode_master,temp
+	add rega,coffset_sniff_anchor,contr
+	ifetcht 4,contr
+	rtn true
+	add rega,coffset_clk_offset,contr
+	ifetch 6,contr
+	call calc_clke2
+	deposit clke_bt
+	rtn
+
+context_next_anchor:
+	add rega,coffset_tsniff,contr
+	add rega,coffset_sniff_anchor,contw
+	ifetch 2,contr
+	iadd temp,timeup			/* wrap to 28 bits */
+	deposit timeup
+	istore 4,contw
+	branch le_context_nexthop
+	
+
+context_search_window:
+	bbit0 state_insniff,context_search_next
+	call context_get_anchor
+	iadd stop_watch,pdata
+	iadd stop_watch,pdata
+	iadd queue,pdata
+	isub temp,null
+	nbranch context_search_next,positive
+	force 0,null
+	rtn
+
+context_traverse_clearkey:
+	bbit0 state_inconn,context_search_next
+	deposit temp
+	isub rega,null
+	branch context_search_next,null
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	bbit1 mode_le,context_search_next
+	ifetch 1,rega
+	set0 state_linkkey,pdata
+	istore 1,rega
+	branch context_search_next
+
+	
+master_conn_send_packet:
+	bpatch patch05_7,mem_patch05
+	call rf_setup_time_master_slot
+master_send_packet:
+	add clkn_bt,1,bt_clk          /* master start to use native clock */
+	call fetch_self_bt_adr
+	force 0x03,freq_mode          /* we are in connection!! */
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_native
+	call send_access_word
+	branch transmit_packet
+
+master_conn_recv_packet:
+	bpatch patch06_0,mem_patch06
+	call rf_setup_time_slave_slot
+master_recv_packet:
+	add clkn_bt,1,bt_clk          /* master start to use native clock */
+	call fetch_self_bt_adr
+	force 0x03,freq_mode          /* we are in connection!! */
+	call rx_radio_freq
+	call init_rx_packet_flags
+	call prep_crypt
+	call start_rx_native	/* start listening at start_rx time */
+	call start_receiver
+master_rx_conn_finish_packet:
+	call wait_access_clkn_rt	/* master use native clock */
+	nrtn sync
+	call save_rssi
+	branch receive_packet
+	
+	
+
+master_newconn_once:
+	bpatch patch06_1,mem_patch06
+	fetch 1,mem_fhs_am_addr
+	iforce am_addr			//review
+	force type_poll,type
+	call master_conn_send_packet
+	branch master_conn_recv_packet
+
+
+
+
+
+
+/******************************************/
+/************* Inquiry Scan ***************/
+/******************************************/
+
+inquiry_scan_dispatch:
+	fetch 1,mem_scan_mode
+	rtnbit0 inq_scan_mode
+	force iscan_interval_timer,queue
+	call timer_check
+	nrtn blank
+	fetcht 2,mem_iscan_window
+	force 4,queue
+	call sniff_check_window
+	rtn user
+	call inquiry_scan_start
+	force iscan_interval_timer,queue
+	fetch 2,mem_iscan_interval
+	nbranch timer_init,sync
+	random pdata				/* inquiry scan backoff */
+	iand mask3ff,pdata
+	branch timer_init
+	
+
+inquiry_scan_start:
+	bpatch patch06_2,mem_patch06
+	jam 0,mem_fhs_am_addr
+	disable clknt
+	disable attempt
+	call afh_clear
+	and clkn_bt,0x1fc,bt_clk      /* freeze the clock, set bit[1] 0, this is version 1.1 */
+	force 0x01,freq_mode     /* slave in inquiry scan, kind of same as inquriy_response, this is version 1.1 */
+	call fetch_giac
+	call rx_radio_freq
+	setflip mark_inquiry_state,mark
+	fetch 1,mem_inquiryscan_waitcnt
+	increase 1,pdata
+	store 1,mem_inquiryscan_waitcnt
+	call fetch_diac
+	call start_receiver	/* get ready for that id packet */
+	call wait_access_forever	/* until there is timeout, or matched (true) */
+	nrtn sync
+	bpatch patch06_3,mem_patch06
+	force 0,stop_watch
+	call shutdown_radio	/* must have heard */
+	fetch 1,mem_inquiryscan_rcvcnt
+	increase 1,pdata
+	store 1,mem_inquiryscan_rcvcnt
+	call fetch_giac
+	call rf_setup_time_slave_slot
+	or_into 0x002,bt_clk               /* put clk(1) to 1 */
+	force 0x01,freq_mode               /* slave in inquriy and page, response only */
+	call tx_radio_freq
+	call fetch_diac
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_external
+	deposit clkn_bt
+	store 4,mem_clkn_bt
+	call send_access_word
+	force type_fhs,type
+	force 0,am_addr                       /* put 0 into am_addr field for fhs */
+	call scan_mode_whiten
+	call transmit_packet_whitened
+	call send_eir
+	and_into 0x1fd,bt_clk                 /* put clk(1) back to 0 */
+	increase 1,N_tx_slot
+	rtn
+
+send_eir:
+	bpatch patch06_4,mem_patch06
+	fetch 1,mem_eir_enable
+	rtn blank
+	arg mem_eir,contw
+	fetch 1,mem_local_name_length
+	copy pdata,loopcnt
+	increase 1,pdata
+	istore 1,contw	
+	copy contw,temp
+	increase 1,pdata
+	store 2,mem_tx_len	
+	copy temp,contw
+	setarg 0x09  //type:name
+	istore 1,contw		
+	arg  mem_local_name,contr
+	call memcpy       //name
+
+	arg mem_all_uuid_128bits,regc
+	arg 4,loopcnt
+	call get_all_uuid
+	arg mem_all_uuid_16bits,regc
+	arg 1,loopcnt
+	call get_all_uuid
+
+	force type_dm3,type		/* DM3 */
+	jam 2,mem_tx_lch
+	setarg mem_eir
+	store 2,mem_txptr
+	call rf_setup_time_slave_slot
+	call tx_radio_freq
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_external
+	call send_access_word
+	call scan_mode_whiten
+	call transmit_packet_whitened
+	rtn
+
+
+get_all_uuid:
+	copy contw,temp
+	copy regc,contr
+	ifetch 1,contr
+	rtn blank
+lshift_loop:
+	lshift pdata,pdata
+	loop lshift_loop
+	copy pdata,rega
+	increase 2,pdata
+	copy pdata,queue
+	fetch 2,mem_tx_len
+	iadd queue,pdata
+	store 2,mem_tx_len
+	copy temp,contw
+	copy rega,pdata
+	increase 1,pdata
+	istore 1,contw
+	copy regc,contr
+	ifetch 1,contr
+	ifetch 1,contr	//fetch type
+	istore 1,contw
+	copy rega,loopcnt
+	branch memcpy  //copy uuid
+	
+/******************************************/
+/******** Slave dispatch ***********/
+/******************************************/
+
+page_scan_dispatch:	
+	fetch 1,mem_scan_mode
+	rtnbit0 page_scan_mode
+	force pscan_interval_timer,queue
+	call timer_check
+	nrtn blank
+	fetcht 2,mem_pscan_window
+	force 40,queue
+	call sniff_check_window
+	rtn user
+	force 0,am_addr
+	jam param_pagerespto,mem_fhs_wait_counter
+	set0 mark_fhs_already_good,mark
+	call page_scan_start
+	force pscan_interval_timer,queue
+	fetch 2,mem_pscan_interval
+	branch timer_init
+	
+
+page_scan_start:
+	bpatch patch06_5,mem_patch06
+	disable clknt
+	call afh_clear
+	fetch 1,mem_pagescan_waitcnt
+	increase 1,pdata
+	store 1,mem_pagescan_waitcnt
+	force 0,N_tx_slot
+	call fetch_self_bt_adr
+	add clkn_bt,1,bt_clk      /* freeze the clock on native clock until scan window is up */
+	force 0x02, freq_mode     /* slave in inquiry and page, not response */
+	bpatch patch06_6,mem_patch06
+	call rx_radio_freq
+	call start_receiver	/* wait for that id packet from master */
+	call wait_access_forever
+	nrtn sync                          /* pscan window timeout occured, back to dispatch */
+	call shutdown_radio	/* got the id packet */
+	fetch 1,mem_pagescan_rcvcnt
+	increase 1,pdata
+	store 1,mem_pagescan_rcvcnt
+	force 0,stop_watch
+	call rf_setup_time_slave_slot
+	or_into 0x002,bt_clk               /* put clk(1) to 1 */
+	force 0x01,freq_mode               /* slave in inquriy and page, response only */
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_external
+	call send_access_word
+	call end_of_packet
+	force 0,am_addr
+	arg param_rf_setup, timeup
+	until clke_rt,meet
+	or_into 0x03,clke_bt
+	and_into 0x1fd,bt_clk
+page_scan_wait_fhs_restart:
+	bpatch patch06_7,mem_patch06
+	increase 1,N_tx_slot
+	call rx_radio_freq
+	call start_receiver
+	call wait_access_mhalfbnd
+	nbranch page_scan_wait_fhs_again,sync	/* go back if didn't find access code */
+	call scan_mode_whiten
+	call receive_packet_whitened
+	bmark1 mark_fhs_already_good,page_scan_reply_to_fhs
+page_scan_wait_fhs_again:
+	bpatch patch07_0,mem_patch07
+	fetch 1,mem_fhs_wait_counter
+	rtn blank
+	increase -1,pdata
+	store 1,mem_fhs_wait_counter
+	call rf_setup_time_master_slot	/* set up expiration time */
+	branch page_scan_wait_fhs_restart
+
+
+page_scan_reply_to_fhs:
+	bpatch patch07_1,mem_patch07
+	set0 1,clke_bt
+	set1 0,clke_bt
+	fetch 1,mem_pagescan_rcvfhscnt
+	increase 1,pdata
+	store 1,mem_pagescan_rcvfhscnt
+	call rf_setup_time_slave_slot
+	or_into 0x02,bt_clk
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_external
+	call send_access_word
+	call end_of_packet
+slave_apply_clke_bt:
+	compare 0x03,clke_bt,0x03
+	branch slave_apply_clke_bt_now,true
+	until null,mhalfbnd
+	branch slave_apply_clke_bt
+slave_apply_clke_bt_now:
+	fetch 4,mem_clke_bt
+	or_into 0x03,pdata
+	icopy clke_bt
+
+start_slave_connection:
+	bpatch patch07_2,mem_patch07
+	fetch 6,extm_lap
+	store 6,mem_plap
+	call prepare_newconn
+slave_newconn_loop:
+	call slave_newconn_once
+	branch sconn_successful,match     /* we were talked to */
+	call new_conn_timeout
+	nbranch slave_newconn_loop,blank
+	rtn
+
+	
+sconn_successful:
+	bpatch patch07_3,mem_patch07
+	call newconn_init
+	call context_new
+	nrtn zero
+	jam 0,mem_mode
+	call calc_clke_offset
+	branch context_save
+
+
+
+
+slave_dispatch:
+	bpatch patch07_4,mem_patch07
+	call calc_clke
+	call role_switch_slave
+	rtn user
+slave_loop:
+	bpatch patch07_5,mem_patch07
+	call check_bt_disabled
+	call scheduler_process
+	call slave_conn_recv_packet	/* go listen for a packet */
+	nbranch slave_notmatch,match
+	call supervision_flush
+	call scheduler_tx_l2cap_pkt
+	call prepare_tx
+	call slave_conn_send_packet
+	call parse_l2cap
+	call parse_lmp
+	fetch 1,mem_slave_rcvcnt
+	increase 1,pdata
+	store 1,mem_slave_rcvcnt
+	call calc_clke_offset
+slave_notmatch:
+	bpatch patch07_6,mem_patch07
+	call lpm_set_mult
+	call supervision_update
+	branch slave_disconnect,positive
+	call check_disconnect_timeout
+	nbranch slave_disconnect,user
+	call check_attempt
+	nbranch slave_loop,blank
+	rtn
+
+slave_disconnect:
+	bpatch patch07_7,mem_patch07
+	jam 0,mem_tester_emulate
+	jam 0,mem_debug_config
+	call quit_connection
+	set0 mark_testmode,mark
+	call test_enable_white
+	fetch 1,mem_state
+	rtn
+
+
+role_switch_slave:
+	bpatch patch08_0,mem_patch08
+	call role_switch_check
+	nrtn user
+	copy am_addr,temp
+	call get_free_amaddr
+	store 1,mem_fhs_am_addr
+	copy temp,am_addr
+	jam param_newconnto,mem_newconnto_counter
+roles_sendfhs_loop:
+	bpatch patch08_1,mem_patch08
+	call rf_setup_time_master_slot
+	force type_fhs,type
+	call slave_send_access
+	deposit clkn_bt
+	store 4,mem_clkn_bt
+	call transmit_packet
+	call rf_setup_time_slave_slot
+	enable user3
+	call slave_receive_access
+	branch roles_got_fhs_reply,sync
+	call shutdown_radio
+	call new_conn_timeout
+	nbranch roles_sendfhs_loop,blank
+	rtnmark0 mark_accept_switch
+	jam LMP_SLOT_OFFSET,mem_lmo_opcode2
+	set1 mark_switch_initiated,mark
+	rtn
+roles_got_fhs_reply:
+	enable clknt
+	call prepare_newconn
+	call afh_clear
+roles_newconn_loop:
+	bpatch patch08_2,mem_patch08
+	call master_newconn_once
+	branch roles_newconn_responded,sync
+	call new_conn_timeout
+	nbranch roles_newconn_loop,blank
+	disable clknt
+	deposit clke_bt
+	store 4,mem_next_btclk
+	rtn
+roles_newconn_responded:
+	enable master
+	bmark0 mark_accept_switch,roles_newconn_nolmp
+	set0 mark_accept_switch,mark
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_HOST_CONNECTION_REQ,mem_lmi_opcode2
+	call tid_set_reply
+roles_newconn_nolmp:
+	deposit am_addr
+	store 1,mem_amaddr
+	force 0,pdata
+	store 6,mem_clk_offset
+	fetch 1,mem_mode
+	set1 mode_master,pdata
+	store 1,mem_mode
+	call supervision_flush
+	disable master
+	enable user
+	rtn
+
+	
+
+init_rx_packet_flags:
+	bpatch patch08_3,mem_patch08
+	disable match
+	set0 mark_loopback,mark
+	set0 mark_am_addr_broadcast,mark          /* initialize slave flags */
+	set0 mark_longpacket,mark
+	set0 mark_old_packet,mark
+	fetch 1,mem_arq    /* mem_arq + am_addr */
+	set0 arqnx,pdata
+	set1 flowx,pdata
+	store 1,mem_arq
+	rtn
+
+prepare_newconn:
+	bpatch patch08_4,mem_patch08
+	jam param_newconnto,mem_newconnto_counter
+	jam param_newconn_arq,mem_arq
+	fetch 2,mem_rx_window_init
+	store 2,mem_rx_window
+	deposit clkn_bt
+	store 4,mem_next_btclk
+	rtn clknt
+	deposit clke_bt
+	store 4,mem_next_btclk
+	rtn
+
+newconn_init:
+	bpatch patch08_5,mem_patch08
+	call init_lmp_reinit
+	call new_conn_handle
+	store 1,mem_conn_handle
+	setarg 0
+	store 2,mem_l2cap_rxbuff1_len
+	setarg param_supervision_to
+	store 2,mem_supervision_to
+	fetch 1,mem_state
+	set1 state_inconn,pdata
+	store 1,mem_state
+	jam 0,mem_op
+	jam 0,mem_state_map
+	jam 0,mem_lpm_current_mult
+	branch supervision_flush
+	
+
+clear_linkkey:
+	bpatch patch08_6,mem_patch08
+	force 0,pdata
+	store 8,mem_link_key
+	istore 8,contw
+	call clear_linkstate
+	branch context_traverse_linkkey
+	
+new_conn_timeout:
+	fetch 1,mem_newconnto_counter
+	increase -1,pdata
+	store 1,mem_newconnto_counter
+	rtn
+
+new_conn_handle:
+	fetch 1,mem_handle_num
+	increase 1,pdata
+	store 1,mem_handle_num
+	rtn
+
+
+quit_connection:
+	bpatch patch08_7,mem_patch08
+	fetch 1,mem_hci_cmd
+	beq hci_cmd_remote_name_req,quit_connection_name
+	fetch 1,mem_lmp_to_send
+	bne LMP_NAME_REQ,quit_connection_cont
+quit_connection_name:
+	call cmd_check_plap
+	nbranch quit_connection_cont,zero
+	call master_name_error
+	jam 0,mem_hci_cmd
+quit_connection_cont:
+	bpatch patch09_0,mem_patch09
+	call app_disconn_reason_collect_bt
+	call sniff_exit
+	jam BT_EVT_BB_DISCONNECTED,mem_fifo_temp
+	call ui_ipc_send_event
+	call init_lmp_work
+	call l2cap_init_work
+	call sp_initialize
+	fetch 1,mem_state
+	set0 state_inconn
+	store 1,mem_state
+	jam 0,memui_reconnect_mode
+
+	fetch 1,mem_state_map
+	compare 0x0,pdata,0xc0
+	branch quit_connection_not_clear_mark,true
+	set0 mark_rxbuf_inuse,mark
+quit_connection_not_clear_mark:
+	fetch 1,mem_arq
+	bbit0 wack,quit_connection_not_clear_tx
+quit_connection_not_clear_tx:
+	fetch 1,mem_op
+	rtnbit0 op_txl2cap
+	set0 mark_tx_l2cap,mark
+	rtn
+
+slave_newconn_once:
+	bpatch patch09_1,mem_patch09
+	fetch 1,extm_newconn_am_addr
+	rtn blank     
+	icopy am_addr
+	call slave_conn_recv_packet
+	nrtn match
+	force type_null,type
+	call slave_conn_send_packet
+	deposit am_addr
+	store 1,mem_amaddr                 /* now the new am_addr is official */
+	force 0,pdata
+	store 1,extm_newconn_am_addr
+	rtn
+
+
+/******************************************/
+/********  Time consuming task  ***********/
+/******************************************/
+prepare_tx:
+	bpatch patch09_2,mem_patch09
+	fetch 1,mem_state
+	bbit0 state_insco,prepare_tx_not_sco
+	force type_hv3,type
+	bmark0 mark_esco,prepare_tx_not_esco
+	call check_esco_amaddr
+	nbranch prepare_tx_not_sco,true
+	branch prepare_tx_not_sco,attempt	
+	call set_wait_ack					/* send esco only at the first attempt */
+	setarg 2		/* esco only has 1 retry */
+	store 2,mem_retransmission_cnt
+	rtn
+prepare_tx_not_esco:
+	nrtn attempt						/* send sco only at the first attempt */
+prepare_tx_not_sco:
+	bpatch patch09_3,mem_patch09
+	call context_check_all_wack			 //abandon mark_retransmit, use context_check_all_wack instead.
+	nbranch prepare_tx_no_retransmit,zero
+	fetch 1,mem_arq
+	bbit0 wack,prepare_tx_pollnull		/* other wack, tx buffer in use, but not me */
+prepare_tx_retransmit:
+	bmark1 mark_loopback,prepare_tx_loopback
+	fetch 1,mem_debug_config
+	bbit1 debug_tx_pattern,prepare_tx_txpat
+	fetch 2,mem_retransmission_cnt
+	increase -1,pdata
+	store 2,mem_retransmission_cnt
+	branch prepare_tx_nomore_retransmit,blank
+	fetch 1,mem_last_type
+	iforce type
+	rtn
+
+prepare_tx_nomore_retransmit:
+	bpatch patch09_4,mem_patch09
+	call clear_got_tx
+prepare_tx_no_retransmit:
+	call check_esco_amaddr
+	branch prepare_tx_pollnull,true
+	call send_lmp
+	branch prepare_tx_sendlmp,user
+	fetch 1,mem_op
+	bbit1 op_txl2cap,prepare_tx_sendl2cap
+	bmark1 mark_loopback,prepare_tx_loopback
+	fetch 1,mem_debug_config
+	bbit1 debug_tx_pattern,prepare_tx_txpat
+prepare_tx_pollnull:
+	force type_poll,type				/* POLL for master */
+	rtn master
+	force type_null,type				/* default is NULL */
+	rtn
+prepare_tx_loopback:
+	bpatch patch09_5,mem_patch09
+	fetch 1,mem_rx_type
+	iforce type
+	rtnne 1
+	force type_null,type
+	rtn
+prepare_tx_txpat:
+	fetch 1,test_mode_packet_type
+	and pdata,0xf,type
+	set1 mark_loopback,mark
+	rtn
+prepare_tx_sendlmp:
+	force type_lmp,type
+	branch set_wait_ack
+prepare_tx_sendl2cap:
+	call tx_l2cap_type
+
+set_wait_ack:
+	bpatch patch09_6,mem_patch09
+	fetcht 1,mem_arq
+	set1 wack,temp
+	storet 1,mem_arq
+	deposit type
+	store 1,mem_last_type
+	setarg 0xffff
+	store 2,mem_retransmission_cnt
+	rtn
+
+tx_l2cap_type:
+	bpatch patch09_7,mem_patch09
+	fetch 1,mem_state_map
+	isolate1 smap_edr,pdata
+	fetch 2,mem_tx_len
+	branch tx_l2cap_type_edr,true
+	force type_dm1,type		/* DM1 */
+	sub pdata,17,null			
+	rtn positive
+	force type_dh1,type		/* DH1 */
+	sub pdata,27,null				
+	rtn positive
+	force type_dm3,type		/* DM3 */
+	sub pdata,121,null
+	rtn positive
+	force type_dh3,type		/* DH3 */
+	sub pdata,183,null
+	rtn positive	
+	force type_dm5,type		/* DM5 */
+	sub pdata,224,null
+	rtn positive
+	force type_dh5,type		/* DH5 */
+	rtn
+tx_l2cap_type_edr:
+	force type_dm1,type
+	sub pdata,17,null
+	rtn positive
+	force type_dh1,type		/*2-DH1*/
+	sub pdata,54,null
+	rtn positive
+	force type_dm3,type		/*2-DH3*/
+	arg 367,temp
+	isub temp,null
+	nrtn positive
+	force type_dm5,type		/*2-DH5*/
+	arg 679,temp
+	isub temp,null
+	nrtn positive
+	force type_dh5,type		/*3-DH5*/
+	rtn
+
+
+/******************************************/
+/***********  Receive Packet  *************/
+/******************************************/
+
+
+
+slave_receive_master_slot:
+	fetch 1,mem_state
+	bbit0 state_insniff,slave_receive_notsniff
+	fetch 2,mem_tsniff
+	branch slave_receive_notsniff,blank		/* role switch */
+	nbranch slave_receive_sniff,attempt
+slave_receive_notsniff:
+	call rf_setup_time_master_slot
+slave_receive_access:
+	add clke_bt,1,bt_clk
+slave_receive_sniff:
+	enable swfine
+	fetch 2,mem_rx_window
+	rshift pdata,pdata
+	arg param_pll_setup,temp
+	iadd temp,pdata
+	call ahead_window
+	call fetch_extm_bt_adr
+	force 0x03,freq_mode          /* connection hop */
+	call rx_radio_freq
+	call init_rx_packet_flags
+	call prep_crypt
+	bpatch patch0a_0,mem_patch0a
+	fetch 2,mem_rx_window
+	rshift pdata,pdata
+	call ahead_window
+	call start_receiver
+	enable decode_fec0
+	fetch 2,mem_rx_window
+	arg param_clke_cal,temp
+	iadd temp,stop_watch
+	correlate null,timeout
+	copy clke,temp
+	storet 6,mem_sync_clke
+	disable decode_fec0
+	nrtn sync
+	arg param_clke_cal,clke_rt
+	copy bt_clk,clke_bt
+	branch lpm_adjust_clk,wake
+	rtn
+	
+
+slave_conn_recv_packet:
+	bpatch patch0a_1,mem_patch0a
+	call slave_receive_master_slot
+	nbranch shutdown_radio,sync
+	call save_rssi
+	bmark0 mark_testmode,receive_packet
+	fetch 2,mem_tst_pktcnt_sync
+	increase 1,pdata
+	store 2,mem_tst_pktcnt_sync
+receive_packet:
+	rshift bt_clk,temp
+	or temp,0x40,white_init
+receive_packet_whitened:
+	bpatch patch0a_2,mem_patch0a
+	enable enable_white
+	enable enable_hec
+	enable decode_fec1
+	parse demod,bucket,3  /* get am_addr */
+	rshift8 pwindow,pdata
+	store 1,mem_temp_am_addr
+	parse demod,bucket,4  /* get type */
+	inject bucket,7       /* align up to pwindow */
+	copy pwindow,pdata
+	store 1,mem_rx_type
+	parse demod,bucket,3  /* get arq */
+	rshift8 pwindow,pdata
+	store 1,mem_temp_arq
+	fetch 1,mem_rx_type
+	sub pdata,3,null
+	branch receive_packet_noedr,positive
+	beq 7,receive_packet_noedr		/* esco packet */
+	fetch 1,mem_state_map
+	isolate1 smap_edr,pdata
+	setflag true,PSK,radio_ctrl
+receive_packet_noedr:
+	bpatch patch0a_3,mem_patch0a
+	parse demod,bucket,8   /* cycle thru hec */
+	disable decode_fec1
+	disable enable_hec   /* at this moment, 1 seqn + 8 hec is in shift */
+	branch error_header,crc_failed  /* if hec error, nothing is valid */
+	bmark0 mark_testmode,receive_packet_amchk
+	fetch 2,mem_tst_pktcnt_hec
+	increase 1,pdata
+	store 2,mem_tst_pktcnt_hec
+receive_packet_amchk:	
+	bpatch patch0a_4,mem_patch0a
+	fetch 1,mem_temp_am_addr
+	compare 0,pdata,0x07           /* check for broadcast */
+	setflag true,mark_am_addr_broadcast,mark   /* received a broadcast message, can fire ar_addr if during unpark_req */
+	branch am_addr_ok,true
+	icompare 0x07,am_addr
+	branch am_addr_match,true
+	bmark0 mark_esco,end_of_packet
+	fetcht 1,mem_saved_amaddr
+	icompare 0x7,temp
+	nbranch end_of_packet,true
+	fetch 1,mem_arq    /* mem_arq + am_addr */
+	set0 arqnx,pdata
+	set1 flowx,pdata
+	store 1,mem_arq
+am_addr_match:
+	enable match
+am_addr_ok:
+	bpatch patch0a_5,mem_patch0a
+	fetch 1,mem_rx_type
+	icopy type
+	bmark1 mark_am_addr_broadcast,arqn_bypass        /* arqn doesn't make sense */
+	fetcht 1,mem_temp_arq
+	fetch 1,mem_arq
+	set0 flow,pdata
+	isolate1 flow,temp
+	setflag true,flow,pdata
+	isolate1 arqn,temp
+	setflag true,arqn,pdata
+	store 1,mem_arq
+	isolate0 arqn,temp
+	branch arqn_bypass,true
+	call clear_got_tx
+arqn_bypass:
+	bpatch patch0a_6,mem_patch0a
+	arg 0,temp
+	call reserve_slot
+	and type,0xf,pdata
+	beq type_poll,process_poll
+	beq type_null,end_of_packet	/* null */
+	beq type_fhs,process_fhs
+	fetcht 1,mem_temp_arq
+	fetch 1,mem_arq
+	icompare 0x04,temp    /* bit 2 is seqn */
+	nbranch rx_type_dispatch,true   /* different then it's new */
+	bmark0 mark_am_addr_broadcast,failed_seqn         /* seqn failed, and not broadcast */
+	bbit0 bcast1,rx_type_dispatch           /* first broadcast never fail seqn */
+failed_seqn:
+	set1 mark_old_packet,mark
+rx_type_dispatch:
+	bpatch patch0a_7,mem_patch0a
+	deposit type
+	beq type_dm1, process_dm1
+	beq type_dh1, process_dh1
+	beq type_hv3, process_hev
+	beq type_3dh1, process_3dh1
+	arg 4,temp
+	call reserve_slot
+	beq type_dm3, process_dm3
+	beq type_dh3, process_dh3
+	arg 8,temp
+	call reserve_slot
+	beq type_dm5, process_dm5
+	beq type_dh5, process_dh5
+	rtn
+
+
+process_hev:
+	bpatch patch0b_0,mem_patch0b
+	enable decode_fec0
+	enable enable_crc
+	enable encrypt
+	arg mem_sco_ibuf,contw
+	force 30,loopcnt
+process_hev_loop:	
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	loop process_hev_loop
+	bmark0 mark_esco,end_of_packet
+	parse demod,bucket,16  /* cycle through the crc */
+	nsetflag crc_failed,mark_esco_rxok,mark
+	branch error_payload,crc_failed
+	branch ack_payload
+
+
+process_poll:
+	branch end_of_packet
+
+process_dm3:
+process_dm5:
+	set1 mark_longpacket,mark
+process_dm1:
+	enable decode_fec2
+	branch process_dmh
+	
+process_dh3:
+process_dh5:
+	set1 mark_longpacket,mark
+process_3dh1:
+	set1 PSK3M,radio_ctrl
+process_dh1:
+	enable decode_fec0
+process_dmh:
+	bpatch patch0b_1,mem_patch0b
+	bmark1 mark_rxbuf_inuse,end_of_packet			/* buffer in use, nack */
+	isolate0 PSK,radio_ctrl
+	branch process_dmh_noedr,true
+	disable enable_white
+	enable decode_fec0
+	disable decode_fec2
+	add clkn_bt,2,timeup
+	correlate clkn_bt,meet
+	nbranch error_payload,sync
+	set1 mark_longpacket,mark
+	enable enable_white
+process_dmh_noedr:
+	bpatch patch0b_2,mem_patch0b
+	enable encrypt
+	enable enable_crc
+	parse demod,bucket,3  /* parse in lch+l2cap flow */
+	rshift8 pwindow,pdata
+	store 1,mem_lch_code		/* for loopback */
+	parse demod,bucket,5  /* parse in 5 bit packetlength */
+	bmark1 mark_longpacket,process_dmh_long
+	rshift3 pwindow,loopcnt
+	rshift3 loopcnt,loopcnt
+	branch process_dmh_common
+process_dmh_long:
+	parse demod,bucket,5		/* multi slot packet length of dh3 dh5 dm3 dm5 */
+	rshift pwindow,loopcnt
+	parse demod,bucket,3  /* undefined+bit 9 of length */
+process_dmh_common:	
+	bpatch patch0b_3,mem_patch0b
+	deposit loopcnt
+	store 2,mem_len
+	branch process_dmh_data_end,blank
+	isub mask3ff,null
+	branch error_payload,positive	/* packet too large, discard */
+	bpatch patch0b_4,mem_patch0b
+	set0 mark_fhs_eir,mark
+	fetch 1,mem_lch_code
+	and_into 0x03,pdata
+	arg mem_rxbuf,contw //lmp_data or test packet
+	beq LLID_LMP,process_lmp
+	bmark1 mark_testmode,process_dmh_data
+	//non-HCI mode
+	fetch 1,mem_lch_code
+	and_into 0x03,pdata
+	beq LLID_L2CAP_START,process_dmh_data_l2cap_start_pkt
+	beq LLID_L2CAP_CONT,process_dmh_data_l2cap_continue_pkt
+	branch error_payload
+
+process_lmp:
+	fetch 2,mem_len
+	sub pdata,0x70,null		//lmp buffer size
+	nbranch error_payload,positive
+	bmark1 mark_old_packet,ack_payload
+	branch process_dmh_data
+
+	
+process_dmh_data_l2cap_start_pkt:
+	bpatch patch0b_5,mem_patch0b
+	bmark1 mark_old_packet,ack_payload
+	fetch 2,mem_len
+	arg 0x2e0,temp //l2cap buffer size
+	isub temp,null
+	branch error_payload,positive
+	fetch 1,mem_l2cap_rxbuff_inuse
+	bbit0 L2CAP_INUSE_BUFF1,process_dmh_data_into_buff1
+	bbit0 L2CAP_INUSE_BUFF2,process_dmh_data_into_buff2
+	branch end_of_packet
+process_dmh_data_into_buff1:
+	jam 1,mem_l2cap_rxbuff_new //new data in buff 1
+	fetch 2,mem_l2cap_rxbuff1_len
+	bne 0,end_of_packet			//baseband head error
+	arg mem_l2cap_rxbuff1,contw
+	branch process_dmh_data
+process_dmh_data_into_buff2:
+	jam 2,mem_l2cap_rxbuff_new //new data in buff 2
+	fetch 2,mem_l2cap_rxbuff2_len
+	bne 0,end_of_packet
+	arg mem_l2cap_rxbuff2,contw
+	branch process_dmh_data
+	
+process_dmh_data_l2cap_continue_pkt:
+	bpatch patch0b_6,mem_patch0b
+	bmark1 mark_old_packet,ack_payload
+	fetch 2,mem_len
+	arg 0x2e0,temp //l2cap buffer size
+	isub temp,null
+	branch error_payload,positive
+	fetch 1,mem_l2cap_rxbuff_new
+	beq 1,process_dmh_data_l2cap_continue_pkt1
+	beq 2,process_dmh_data_l2cap_continue_pkt2
+	branch end_of_packet
+process_dmh_data_l2cap_continue_pkt1:
+	arg mem_l2cap_rxbuff1,contw
+	fetch 2,mem_l2cap_rxbuff1_len
+	iadd contw,contw
+	branch process_dmh_data
+process_dmh_data_l2cap_continue_pkt2:
+	arg mem_l2cap_rxbuff2,contw
+	fetch 2,mem_l2cap_rxbuff2_len
+	iadd contw,contw
+process_dmh_data:	
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	loop process_dmh_data
+process_dmh_data_end:	
+	bpatch patch0b_7,mem_patch0b
+	parse demod,bucket,16  /* cycle through the crc */
+	branch error_payload_crc,crc_failed
+	fetch 1,mem_l2cap_flow_ctrl_flag
+	beq L2CAP_FLOW_CTRL_ENABLE,end_of_packet
+	bmark1 mark_testmode,process_dmh_cont
+	bmark1 mark_old_packet,redundant_payload
+	fetch 1,mem_lch_code
+	compare 3,pdata,3
+	branch process_dmh_cont,true
+	fetch 2,mem_len
+	branch process_dmh_cont,blank
+	bpatch patch0c_0,mem_patch0c
+	fetch 1,mem_l2cap_rxbuff_new
+	beq 1,process_l2cap_pass_crc_buff1
+	beq 2,process_l2cap_pass_crc_buff2
+	branch assert
+process_l2cap_pass_crc_buff1:
+	fetch 2,mem_l2cap_rxbuff1_len
+	fetcht 2,mem_len
+	iadd temp,pdata
+	store 2,mem_l2cap_rxbuff1_len
+	beq 0,assert
+	fetcht 2,mem_l2cap_rxbuff1// l2cap payload length
+	increase 4,temp
+	isub temp,null
+	call l2cap_buff1_inuse,zero //l2cap pkts not ended
+	branch process_dmh_cont
+process_l2cap_pass_crc_buff2:
+	fetch 2,mem_l2cap_rxbuff2_len
+	fetcht 2,mem_len
+	iadd temp,pdata
+	store 2,mem_l2cap_rxbuff2_len
+	beq 0,assert
+	fetcht 2,mem_l2cap_rxbuff2// l2cap payload length 
+	add temp,4,temp
+	isub temp,null
+	call l2cap_buff2_inuse,zero //l2cap pkts not ended
+	branch process_dmh_cont
+process_dmh_cont:
+	bpatch patch0c_1,mem_patch0c
+	fetcht 1,mem_state_map
+	fetch 1,mem_lch_code
+	compare 3,pdata,0x03
+	setflag true,smap_rxlmp,temp
+	nsetflag true,smap_rxl2cap,temp
+	storet 1,mem_state_map
+	nbranch process_dmh_cont_rxbuf_not_use,true
+	set1 mark_rxbuf_inuse,mark
+process_dmh_cont_rxbuf_not_use:
+	bmark0 mark_testmode,ack_payload
+	isolate1 smap_rxlmp,temp
+	branch ack_payload,true
+	fetch 2,mem_tst_pktcnt_crc
+	increase 1,pdata
+	store 2,mem_tst_pktcnt_crc
+	set1 mark_loopback,mark
+	set0 smap_rxl2cap,temp
+	set0 mark_rxbuf_inuse,mark
+	storet 1,mem_state_map
+ack_payload:
+	bpatch patch0c_2,mem_patch0c
+	fetcht 1,mem_temp_arq
+	fetch 1,mem_arq
+	set1 arqnx,pdata
+	isolate1 seqn,temp            /* if accept, seqn always copies from the header */
+	setflag true,seqn,pdata
+	isolate1 mark_am_addr_broadcast,mark
+	setflag true,bcast1,pdata
+	store 1,mem_arq
+	fetch 2,mem_len
+	nbranch end_of_packet,blank
+	fetch 1,mem_state_map
+	set0 smap_rxl2cap,pdata//better to do this in l2cap_flow_ctrl_stop
+	store 1,mem_state_map
+	fetch 1,mem_lch_code
+	compare 0x01,pdata,0x07
+	//call l2cap_flow_ctrl_stop,true
+	branch end_of_packet
+	
+error_header:
+	bpatch patch0c_3,mem_patch0c
+	disable match
+	fetch 2,mem_rx_hec_err
+	increase 1,pdata
+	store 2,mem_rx_hec_err
+	branch end_of_packet
+error_payload_crc:
+	fetch 2,mem_rx_crc_err
+	increase 1,pdata
+	store 2,mem_rx_crc_err
+	call discard_pkt
+	bmark0 mark_testmode,error_payload
+	set1 mark_loopback,mark
+error_payload:
+	branch end_of_packet
+	
+discard_pkt:
+	bpatch patch0c_4,mem_patch0c
+	fetch 1,mem_lch_code
+	compare 3,pdata,0x03
+	nbranch discard_pkt_l2cap,true
+discard_pkt_lmp:	
+	fetcht 1,mem_state_map
+	set0 smap_rxlmp,temp
+	storet 1,mem_state_map
+	rtn
+discard_pkt_l2cap:
+//	isolate1 mark_testmode,mark
+//	setflag true,mark_loopback,mark
+	fetcht 1,mem_state_map
+	set0 smap_rxl2cap,temp
+	storet 1,mem_state_map
+	branch  h4_send_acl_trigger_clear
+
+redundant_payload:
+	fetch 1,mem_arq
+	set1 arqnx,pdata
+	store 1,mem_arq
+end_of_packet:
+	bpatch patch0c_5,mem_patch0c
+	disable encode_fec0
+	disable encode_fec2
+	disable decode_fec0
+	disable decode_fec2
+	disable enable_crc
+	disable encrypt
+	disable enable_white
+	branch shutdown_radio,is_rx
+	until null,tx_clear
+	nop 100          /* flush out the last bit */
+	branch shutdown_radio
+	
+process_fhs:
+	bpatch patch0c_6,mem_patch0c
+	enable enable_crc
+	enable decode_fec2
+	parse demod,bucket,72
+	isolate1 58,pdata
+	setflag true,mark_fhs_eir,mark
+	copy bt_adr,temp             /* save current address to aside */
+	ialigned bt_adr            /* send it to access gen */
+	ialigned fhs0			/* get fhs_misc */
+	pulse recalc                /* calc the lap just received from the other guy */
+	setsect 2,0xfffff             /* preset ms of shift reg as big mask */
+	setsect 3,0x0ffff             /* preset ms of shift reg as big mask */
+	nop 32                       /* 30 cycles after recalc */
+	iverify fhs_parity             /* check fhs_parity against ls 34 bits at shift reg, with msb 36 bits as mask */
+	deposit lap
+	store 3,extm_lap
+	deposit uap
+	store 1,extm_uap
+	copy temp,bt_adr             /* put the address back */
+	branch fhs_parity_ok,true     /* fhs parity failed */
+	branch error_payload
+fhs_parity_ok:
+	bpatch patch0c_7,mem_patch0c
+	parse demod,bucket,72
+	ialigned fhs1                   /* give host the information on class and fhs_misc */
+	ialigned am_addr                /* store the am_addr the master assigned us */
+	ialigned nap
+	ialigned regb                   /* store external clock in regb according to clock format */
+	force 0,pdata
+	parse demod,bucket,16  /* cycle through the crc */
+	branch error_payload,crc_failed
+	setarg 0x0ffffffc
+	iand regb,pdata
+	store 4,mem_clke_bt
+	deposit fhs_class
+	store 3,extm_class
+	deposit fhs_misc
+	store 1,extm_fhs_misc
+	deposit am_addr
+	store 1,extm_newconn_am_addr
+	deposit nap
+	store 2,extm_nap
+	deposit bt_clk
+	inject rxf,32
+	compare type_fhs,type,0x0f         /* see if this was fhs packet */
+	setflag true,mark_fhs_already_good,mark
+	branch end_of_packet
+
+clear_got_tx:
+	bpatch patch0d_0,mem_patch0d
+	fetch 1,mem_arq
+	rtnbit0 wack
+	set0 wack,pdata
+	setflip seqnx,pdata
+	store 1,mem_arq
+	fetch 1,mem_last_type
+	beq type_lmp,clear_got_txlmp
+	rtneq type_hv3
+	fetch 1,mem_op
+	rtnbit0 op_txl2cap,pdata
+	set0 op_txl2cap,pdata
+	set1 op_pkt_comp,pdata
+	store 1,mem_op
+	set0 mark_tx_l2cap,mark
+	fetch 2,mem_l2cap_tx_multi_offset
+	nrtn blank
+	fetch 1,mem_op
+	set0 op_pkt_comp,pdata
+	store 1,mem_op
+	branch l2cap_malloc_free
+
+clear_got_txlmp:
+	bpatch patch0d_1,mem_patch0d
+	fetch 1,mem_lmo_header_opcode
+	rshift pdata,pdata
+	beq LMP_START_ENCRYPTION_REQ,start_encryption
+	beq LMP_STOP_ENCRYPTION_REQ,stop_encryption
+	beq LMP_UNSNIFF_REQ, sniff_exit
+	beq LMP_ESCAPE,clear_lmp_escape
+	rtnne LMP_ACCEPTED
+	fetch 1,mem_lmo_payload
+	beq LMP_SCO_LINK_REQ,sco_link_req_by_slave
+	beq LMP_START_ENCRYPTION_REQ,clear_send_setup_complete
+	rtn
+
+clear_lmp_escape:
+	fetch 1,mem_lmo_payload
+	set1 7,pdata
+	rtn
+clear_send_setup_complete:
+	rtn master
+	fetch 1,mem_state
+	rtnbit1 state_conn_comp
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	rtn
+	
+// nokia BH-105  CALLING when reconnection
+sco_link_req_by_slave:
+	rtn master
+	fetch 1,mem_mode
+	isolate1 send_sco_when_slave,pdata
+	branch clean_mem_mode,true
+	//jam LMP_REMOVE_SCO_LINK_REQ,mem_lmo_opcode2
+	rtn
+clean_mem_mode:
+	set0 send_sco_when_slave,pdata
+	store 1,mem_mode
+	rtn
+	
+start_encryption:
+	bpatch patch0d_2,mem_patch0d
+	fetch 1,mem_state_map
+	set1 smap_encryption,pdata
+	store 1,mem_state_map
+	jam 1,core_encrypt
+	fetch 1,mem_state
+	isolate1 state_conn_comp,pdata
+	rtn
+
+stop_encryption:
+	bpatch patch0d_3,mem_patch0d
+	fetch 1,mem_state_map
+	set0 smap_encryption,pdata
+	store 1,mem_state_map
+	jam 0,core_encrypt
+	rtn
+
+
+sniff_init:
+	bpatch patch0d_4,mem_patch0d
+	copy clkn_bt,pdata
+	store 4,mem_lpm_delay_after_sniff
+	add clkn_bt,3,rega
+	branch sniff_init_master,master
+	add clke_bt,3,rega
+sniff_init_master:
+	fetcht 2,mem_tsniff
+	deposit rega
+	set0 27,pdata
+	idiv temp
+	fetch 2,mem_dsniff
+	call wait_div_end
+	remainder regc
+	isub regc,pdata
+	branch sniff_init_nowrap,positive
+	iadd temp,pdata
+sniff_init_nowrap:
+	iadd rega,pdata
+	store 4,mem_sniff_anchor
+	jam SWITCH_FLAG_INIT,mem_switch_flag
+	fetch 1,mem_state
+	set1 state_insniff,pdata
+	store 1,mem_state
+	fetch 1,mem_sniff_attempt
+	store 1,mem_current_sniff_attempt
+	setarg 0
+	store 3,mem_sniff_rcv
+	store 3,mem_sniff_lost
+	store 1,mem_sniff_unint_lost
+	jam BT_EVT_ENTER_SNIFF,mem_fifo_temp
+	call ui_ipc_send_event
+	fetch 2,mem_rx_window_sniff
+	store 2,mem_rx_window
+	nrtn master
+	add am_addr,-1,queue
+	rtn
+
+sniff_exit:
+	bpatch patch0d_5,mem_patch0d
+	fetch 1,mem_state
+	rtnbit0 state_insniff
+	set0 state_insniff,pdata
+	store 1,mem_state
+	fetch 2,mem_rx_window_init
+	store 2,mem_rx_window
+	disable wake
+	jam BT_EVT_EXIT_SNIFF,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+check_attempt:
+	bpatch patch0d_6,mem_patch0d
+	enable attempt
+	fetch 1,mem_state
+	bbit1 state_insniff,check_attempt_sniff
+	rtnmark1 mark_testmode						/* pdata won't be blank now, try attempt */
+	fetch 1,mem_arq
+	rtnbit1 wack
+	fetch 1,mem_lmp_to_send
+	nrtn blank
+	fetch 1,mem_op
+	rtnbit1 op_txl2cap
+check_attempt_nomore:
+	force 0,pdata
+	rtn
+
+check_attempt_sniff:
+	bbit0 state_insco,check_attempt_not_sco
+	fetch 1,mem_current_sniff_attempt
+	beq 2,check_attempt_sniff_restore_sco
+	fetch 1,mem_arq
+	bbit1 wack,check_attempt_notimeout
+	bmark0 mark_esco_rxok,check_attempt_notimeout
+check_attempt_sniff_restore_sco:
+	nbranch check_attempt_notimeout,master
+	fetch 1,mem_lmp_to_send
+	nbranch check_attempt_notimeout,blank
+check_attempt_sco_master:
+	fetch 1,mem_sco_poll
+	increase -1,pdata
+	store 1,mem_sco_poll
+	nbranch check_attempt_nomore,blank
+	jam param_sco_poll,mem_sco_poll
+	branch check_attempt_notimeout
+
+
+
+
+
+	
+check_attempt_not_sco:
+	fetch 1,mem_current_sniff_attempt
+	bne 1,check_attempt_notimeout
+	fetch 1,mem_current_sniff_timeout
+	branch check_attempt_notimeout,blank
+	increase -1,pdata
+	store 1,mem_current_sniff_timeout
+	fetch 1,mem_arq
+	rtnbit1 wack						// waiting for next ack
+	nrtn match						// waiting for next poll
+check_attempt_notimeout:
+	fetch 1,mem_current_sniff_attempt
+	increase -1,pdata
+	store 1,mem_current_sniff_attempt
+	rtn
+
+
+
+
+
+
+
+
+
+	/* enable user if sniff window vialation, queue is extra overhead */
+sniff_check_window:
+	bpatch patch0d_7,mem_patch0d
+	disable swfine
+	copy temp,stop_watch
+	call context_search_sniff_window
+	disable user
+	nrtn zero
+	force 0,stop_watch
+	enable user
+	rtn
+
+	//return true if it is esco context
+check_esco_amaddr:
+	fetch 1,mem_esco_addr
+	icompare 0xff,am_addr
+	rtn
+	
+
+parse_l2cap:	
+	bpatch patch0e_0,mem_patch0e
+	set0 mark_rxbuf_inuse,mark 
+parse_l2cap_cont:
+	jam L2CAP_RX_CLEAR,mem_l2cap_rx_done
+	fetch 1,mem_l2cap_rxbuff_inuse
+	rtn blank
+	isolate1 L2CAP_INUSE_BUFF1,pdata
+	arg mem_l2cap_rxbuff1,contr
+	call process_rx_l2cap_pkt,true
+	bpatch patch0e_1,mem_patch0e
+	fetch 1,mem_l2cap_rx_done
+	beq L2CAP_RX_DONE,parse_l2cap_release_buff1
+	
+	jam L2CAP_RX_CLEAR,mem_l2cap_rx_done
+	fetch 1,mem_l2cap_rxbuff_inuse
+	rtnbit0 L2CAP_INUSE_BUFF2
+	arg mem_l2cap_rxbuff2,contr	
+	call process_rx_l2cap_pkt
+	fetch 1,mem_l2cap_rx_done
+	beq L2CAP_RX_DONE,parse_l2cap_release_buff2
+	rtn
+		
+parse_l2cap_release_buff1:
+	fetch 1,mem_l2cap_rxbuff_inuse
+	set0 L2CAP_INUSE_BUFF1,pdata
+	store 1,mem_l2cap_rxbuff_inuse
+	setarg 0
+	store 2,mem_l2cap_rxbuff1_len
+	rtn
+parse_l2cap_release_buff2:
+	fetch 1,mem_l2cap_rxbuff_inuse
+	set0 L2CAP_INUSE_BUFF2,pdata
+	store 1,mem_l2cap_rxbuff_inuse
+	setarg 0
+	store 2,mem_l2cap_rxbuff2_len
+	rtn
+
+l2cap_buff1_inuse:
+	fetch 1,mem_l2cap_rxbuff_inuse
+	set1 L2CAP_INUSE_BUFF1,pdata
+	store 1,mem_l2cap_rxbuff_inuse
+	rtn
+
+l2cap_buff2_inuse:
+	fetch 1,mem_l2cap_rxbuff_inuse
+	set1 L2CAP_INUSE_BUFF2,pdata
+	store 1,mem_l2cap_rxbuff_inuse
+	rtn
+
+/******************************************/
+/**********  Transmit Packet  *************/
+/******************************************/
+
+slave_send_access:
+	bpatch patch0e_2,mem_patch0e
+	add clke_bt,1,bt_clk          /* slave start to use native clock */
+	call fetch_extm_bt_adr
+	force 0x03,freq_mode          /* connection frequency */
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_external
+	branch send_access_word
+	
+
+slave_conn_send_packet:
+	bpatch patch0e_3,mem_patch0e
+	call rf_setup_time_slave_slot
+	deposit clke_bt
+	fetcht 4,mem_next_btclk
+	isub temp,pdata
+	rtnne 1					/* missed slave slot */
+	compare type_null,type,0x1f
+	nbranch slave_conn_send_access,true
+	fetch 1,mem_rx_type
+	rtn blank					/* null packet, do nothing */
+slave_conn_send_access:
+	call slave_send_access
+transmit_packet:
+	compare type_id,type,0x1f        /* is this id only ? */
+	branch end_of_packet,true
+	rshift bt_clk,temp
+	or temp,0x40,white_init
+transmit_packet_whitened:
+	bpatch patch0e_4,mem_patch0e
+	enable enable_white
+	enable enable_hec
+	enable encode_fec1
+	set0 mark_longpacket,mark
+	deposit am_addr
+	inject mod,3             /* am_addr, temp is disabled */
+	deposit type
+	inject mod,4
+	fetch 1,mem_arq   /* aka mem_arq */
+	inject bucket,4  /* align up to flowx, arqnx, seqnx */
+	inject mod,3
+	enable enable_parity
+	inject mod,8   /* transmit parity */
+	disable encode_fec1
+	disable enable_parity
+	disable enable_hec
+	set0 PSK3M,radio_ctrl
+	arg 0,temp
+	call reserve_slot
+	bpatch patch0e_5,mem_patch0e
+	and type,0x1f,pdata
+	beq type_lmp, transmit_lmp
+	beq type_null, end_of_packet
+	beq type_poll, end_of_packet
+	beq type_fhs, transmit_fhs  /* master mode fhs need got_tx and ack */
+	beq type_dm1, transmit_dm1
+	beq type_dh1, transmit_dh1
+	beq type_hv3, transmit_hev
+	beq type_3dh1, transmit_3dh1
+	arg 4,temp
+	call reserve_slot
+	beq type_dm3, transmit_dm3
+	beq type_dh3, transmit_dh3
+	arg 8,temp
+	call reserve_slot
+	beq type_dh5, transmit_dh5
+	branch transmit_dm5	/* must be 14, dm5 */
+
+
+transmit_hev:
+	bpatch patch0e_6,mem_patch0e
+	enable encode_fec0
+	enable enable_crc
+	enable encrypt
+	force 30,loopcnt
+	arg mem_sco_obuf,contr
+transmit_ev_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop transmit_ev_loop
+	bmark1 mark_esco,transmit_end
+	branch end_of_packet
+	
+transmit_fhs:
+	bpatch patch0e_7,mem_patch0e
+	fetch 1,mem_fhs_am_addr            /* this is the am_addr to assign to slave */
+	icopy am_addr
+	fetch 1,mem_fhs_misc
+	icopy fhs_misc    /* [7:6]SR [5:4]SP [3:1]PS [0]undef  */
+	fetch 3,mem_class   /* store away class */
+	icopy fhs_class
+	fetch 2,mem_nap
+	icopy nap
+	enable enable_crc
+	enable encode_fec2
+	copy bt_adr,rega
+	call fetch_self_bt_adr
+	pulse recalc
+	nop 32                    /* 30 cycles after recalc for sync word generation */
+	copy bt_clk,timeup
+	fetch 4,mem_clkn_bt
+	icopy bt_clk
+	preload fhs0
+	set1 58,pdata		/* eir */
+	inject mod,72
+	preload fhs1
+	inject mod,72
+	copy timeup,bt_clk
+	copy rega,bt_adr
+	enable enable_parity
+	inject mod,16   /* generate CRC */
+	disable enable_parity
+	branch end_of_packet
+
+transmit_lmp:    /* expect the payload ready as in bb spec */
+	bpatch patch0f_0,mem_patch0f
+	enable encrypt
+	enable enable_crc
+	enable encode_fec2
+	fetch 1,mem_lmo_header_length   /* this is the payload header */
+	and pdata,0x1f8,temp       /* temp is number of bits, check payload header format */
+	arg mem_lmo_header_length,contr
+	increase 8,temp   /* temp is in bits */
+transmit_lmp_loop:
+	add temp,-72,regc   /* regc is remainder */
+	nbranch transmit_lmp_finish,positive
+	ifetch 9,contr
+	inject mod,72
+	copy regc,temp
+	branch transmit_lmp_loop
+transmit_lmp_finish:
+	ifetch 9,contr
+	iinject mod,temp
+	branch transmit_end
+
+transmit_dm1:
+	enable encode_fec2
+	branch transmit_dmh
+transmit_dm3:
+transmit_dm5:
+	enable encode_fec2
+	set1 mark_longpacket,mark
+	branch transmit_dmh
+
+transmit_3dh1:
+	set1 PSK3M,radio_ctrl
+transmit_dh1:
+	enable encode_fec0
+	branch transmit_dmh
+	
+transmit_dh3:
+transmit_dh5:
+	set1 PSK3M,radio_ctrl
+	enable encode_fec0
+	set1 mark_longpacket,mark
+
+transmit_dmh:
+	bpatch patch0f_1,mem_patch0f
+	fetch 1,mem_state_map
+	bbit0 smap_edr,transmit_noedr
+	sub type,3,null
+	branch transmit_noedr,positive
+	disable encrypt
+	disable encode_fec2
+	enable encode_fec0
+	disable enable_white
+	set1 PSK,radio_ctrl
+	isolate1 PSK3M,radio_ctrl
+	branch transmit_edr3m,true
+	setarg 0xabeee
+	inject mod,20
+	branch transmit_edr_sync_end
+transmit_edr3m:
+	setarg 0x5faeba
+	inject mod,24
+	setarg 0x12
+	inject mod,6
+transmit_edr_sync_end:	
+	enable enable_white
+	set1 mark_longpacket,mark
+transmit_noedr:
+	enable encrypt
+	enable enable_crc
+	bmark1 mark_loopback,transmit_loopback
+	fetch 1,mem_tx_lch
+	inject mod,3
+	fetch 2,mem_tx_len
+	iforce loopcnt
+	bmark1 mark_longpacket,transmit_long
+	inject mod,5
+	branch transmit_stuff
+transmit_long:	
+	inject mod,13
+transmit_stuff:
+	deposit loopcnt
+	branch transmit_end,blank
+	fetch 2,mem_txptr
+	iforce contr
+transmit_stuff_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop transmit_stuff_loop
+//	branch transmit_end
+
+transmit_end:
+	enable enable_parity
+	inject mod,16
+	disable enable_parity
+	call set_wait_ack
+	fetch 1,mem_state_map
+	bbit0 smap_edr,end_of_packet
+	force 0,pdata
+	inject mod,6				/* edr trailer */
+	branch end_of_packet
+
+
+transmit_loopback:
+	bpatch patch0f_2,mem_patch0f
+	bmark1 mark_longpacket,transmit_loopback_long
+transmit_loopback_short:
+	fetch 1,mem_lch_code
+	inject mod,3						/* LLID and FLOW */
+	fetch 1,mem_len	/* take packet length */
+	iforce regc
+	inject mod,5
+	branch transmit_loopback_cont
+transmit_loopback_long:
+	fetch 1,mem_lch_code
+	inject mod,3						/* LLID and FLOW */
+	fetch 2,mem_len	/* take packet length */
+	iforce regc
+	inject mod,13
+transmit_loopback_cont:
+	arg mem_rxbuf,contr
+transmit_loopback_loop:	
+	copy regc,null
+	branch transmit_loopback_end,zero
+	ifetch 1,contr
+	inject mod,8
+	increase -1,regc
+	branch transmit_loopback_loop
+transmit_loopback_end:
+	fetch 2,mem_tst_pktcnt_dmh
+	increase 1,pdata
+	store 2,mem_tst_pktcnt_dmh
+	branch transmit_end
+	
+
+apply_switch_clke:
+	fetch 4,mem_clke_bt
+	add pdata,7,rega
+	fetch 2,mem_slot_offset
+	nbranch apply_switch_nozero,blank
+	increase -3,rega
+	branch apply_switch_wait_loop
+apply_switch_nozero:
+	mul32 pdata,12,pdata
+	hfetcht 2,core_halfslot
+	increase 1,temp
+apply_switch_loop:
+	isub temp,pdata
+	nbranch apply_switch_bt,positive
+	increase -1,rega
+	branch apply_switch_loop
+apply_switch_bt:
+	sub pdata,0,pdata
+apply_switch_wait_loop:
+	until null,oneslot
+	compare 0,clkn_bt,3
+	nbranch apply_switch_wait_loop,true
+	iforce clke_rt
+	copy rega,clke_bt
+	iforce clke_rt
+	rtn
+	
+
+calc_slot_offset:
+	bpatch patch0f_3,mem_patch0f
+	until null,halfslot
+	deposit clke
+	iforce contr
+	rshift16,pdata,pdata
+	isub clkn_bt,loopcnt
+	and_into 3,loopcnt			/* bt portion */
+	nbranch calc_bt_portion,zero
+	force 0,pdata
+	branch calc_skip_bt
+calc_bt_portion:
+	arg 3750,temp
+	force 0,pdata
+calc_slot_offset_loop:
+	iadd temp,pdata
+	loop calc_slot_offset_loop
+calc_skip_bt:
+	iadd contr,pdata			/* add rt portion */
+	div pdata,12
+	call wait_div_end
+	quotient pdata
+	store 2,mem_slot_offset
+	rtn
+
+calc_clke_offset:
+	bpatch patch0f_4,mem_patch0f
+	deposit clke
+	copy clkn,temp
+	isub temp,null
+	nsetflag positive,44,pdata
+	isub temp,temp
+	setarg 3750
+	isolate0 15,temp
+	branch calc_clke_pos,true
+	setarg -61786
+	iadd temp,temp
+calc_clke_pos:
+	storet 6,mem_le_clk_offset
+	rtn le
+	storet 6,mem_clk_offset
+	rtn
+
+calc_clke:
+	disable clknt
+	fetch 6,mem_le_clk_offset
+	branch calc_clke2,le
+	fetch 6,mem_clk_offset
+calc_clke2:
+	iadd clkn,alarm
+	increase 10,alarm
+	setarg 3750
+	isub alarm,pdata
+	isolate0 15,pdata
+	branch calc_clke_pos_adj,true
+	setarg 0xf15a
+	iadd alarm,alarm
+calc_clke_pos2:
+	copy alarm,clke
+	rtn
+calc_clke_pos_adj:		/* add 2 clock */
+	force 0,null
+	branch calc_clke_pos2
+	
+/******************************************/
+/********* RF related functions ***********/
+/******************************************/
+
+
+calc_radio_freq:
+	bpatch patch0f_5,mem_patch0f
+	call set_sync_on
+	copy bt_clk,pdata
+	and_into 0x180,pdata
+	compare 3,freq_mode,0x07
+	nbranch freq_not_connection,true    /* don't do the hack if not in connection */
+	rshift3 pdata,pdata
+	iadd freq_index,pdata
+	branch do_hop_mod_now
+freq_not_connection:	
+	copy freq_index,pdata
+do_hop_mod_now:
+	div pdata,79
+	pulse recalc         /* now is good time to recalc id */
+	call wait_div_end
+	remainder rega
+	add rega,-40,temp
+	branch odd_half,positive
+	lshift rega,temp
+	branch freq_result
+odd_half:
+	lshift temp,temp
+	increase 1,temp
+freq_result:	
+	bpatch patch0f_6,mem_patch0f
+	fetch 1,mem_mode
+	bbit0 afh_change,afh_process_con
+afh_process_0:	
+	fetch 4, mem_afh_instant   
+	isub bt_clk, null
+	branch afh_process_con,positive
+	call afh_clear
+	fetch 1,mem_afh_new_mod
+	rtn blank
+	fetch 1,mem_mode
+	set1 afh_enable,pdata
+	store 1,mem_mode
+	fetch 5,mem_afh_map_new
+	store 5,mem_afh_map_lo
+	ifetch 5,contr
+	store 5,mem_afh_map_hi
+	call afh_process_freq_map
+afh_process_con:
+	fetch 1,mem_mode
+	rtnbit0 afh_enable
+	isolate1 1,bt_clk
+	branch afh_same_channel,true	/* at odd slot, use the same as last even */
+	rshift3 temp,rega
+	and temp,7,queue
+	setarg mem_afh_map_lo  
+	iadd rega, rega
+	ifetch 1, rega
+	qisolate0 pdata
+	branch afh_process_1,true		/* not in map, do afh */
+	deposit temp
+	branch afh_process_end
+afh_process_1:
+	fetch 1, mem_afh_used
+	iforce regb                     
+	deposit bt_clk
+	and_into 0x180, pdata
+	rshift3 pdata,pdata
+	iadd freq_index,pdata
+	idiv regb
+	setarg mem_afh_map     
+	call wait_div_end
+	remainder rega
+	iadd rega,contr
+	ifetch 1,contr
+afh_process_end:	
+	store 1,mem_afh_index
+	iforce temp  
+  	rtn
+
+afh_same_channel:
+	fetch 1, mem_afh_index           /* last afh index  */
+	iforce temp
+	rtn
+
+afh_clear:
+	fetch 1,mem_mode
+	set0 afh_enable,pdata
+	set0 afh_change,pdata
+	store 1,mem_mode
+	rtn
+/*
+fixed_frequency:
+	fetcht 1,mem_fixed_freq
+	rtn
+*/
+afh_process_freq_map:
+	bpatch patch0f_7,mem_patch0f
+	arg mem_afh_map,contw
+	force 10,loopcnt
+	call memset0
+	arg mem_afh_map,contw
+	force 0,regC
+	force 2,queue
+process_freq_3:	
+	fetch 5,mem_afh_map_lo
+	iforce temp
+	compare 2,queue,0xff
+	branch process_freq_1,true
+	rshift temp,temp
+process_freq_1:	
+	isolate0 0,temp
+	branch process_freq_0,true
+	deposit regC
+	istore 1,contw
+process_freq_0:
+	rshift2 temp,temp
+	increase 2,regC
+	compare 40,regC,0xfe
+	nbranch process_freq_2,true
+	fetch 5,mem_afh_map_hi
+	iforce temp
+	compare 2,queue,0xff
+	branch process_freq_2,true
+	rshift temp,temp
+process_freq_2:	
+	sub regC,78,null
+	branch process_freq_1,positive
+	force 1,regC
+	increase -1,queue
+	nbranch process_freq_3,zero
+	arg mem_afh_map,rega
+	deposit contw
+	isub rega,pdata
+	store 1,mem_afh_used
+	rtn
+
+rx_radio_freq:
+	bpatch patch10_0,mem_patch10
+	call calc_radio_freq
+	fetch 1,mem_debug_config
+	bbit0 debug_rx_fixed_freq,rx_radio_freq_now
+	fetcht 1,mem_rx_fixed_freq
+rx_radio_freq_now:
+	branch set_freq_rx
+	
+
+tx_radio_freq:
+	bpatch patch10_1,mem_patch10
+	call calc_radio_freq
+	fetch 1,mem_debug_config
+	bbit0 debug_tx_fixed_freq,tx_radio_freq_now
+	fetcht 1,mem_tx_fixed_freq
+tx_radio_freq_now:
+	branch set_freq_tx
+	
+
+fetch_giac:
+	force 0,uap
+	fetch 3,mem_glap
+	iforce lap
+	rtn
+
+fetch_page_bt_adr:
+	bpatch patch10_2,mem_patch10
+	fetch 1,mem_hci_puap
+	icopy uap
+	fetch 3,mem_hci_plap
+	icopy lap
+	rtn
+
+fetch_self_bt_adr:
+	bpatch patch10_3,mem_patch10
+	fetch 2,mem_nap
+	icopy nap
+	fetch 1,mem_uap
+	icopy uap
+	fetch 3,mem_lap
+	icopy lap                 /* copy self_adr,bt_adr */      /* use own address */
+	rtn
+
+fetch_extm_bt_adr:
+	bpatch patch10_4,mem_patch10
+	fetch 2,mem_pnap
+	icopy nap
+	fetch 1,mem_puap
+	icopy uap
+	fetch 3,mem_plap
+	icopy lap         
+	rtn
+
+
+fetch_diac:
+	bmark1 mark_all_diac,fetch_diac_do
+	rtnmark0 mark_inquiry_state
+	rtnmark0 mark_periodical_diac
+fetch_diac_do:
+	and_into -256,lap
+	pulse recalc
+	nop 32
+	rtn
+
+
+shutdown_radio:
+	bpatch patch10_5,mem_patch10
+	branch shutdown_radio0,is_rx
+	jam 0xd4, rf_tx_pa_ib
+	nop 4
+	jam 0xd2, rf_tx_pa_ib
+	nop 4
+	jam 0xd1, rf_tx_pa_ib
+	nop 4	
+	fetch 1,mem_tx_power
+	beq TX_POWER_0DB,shutdown_radio_0db
+	beq TX_POWER_3DB,shutdown_radio_3db
+	beq TX_POWER_5DB,shutdown_radio_5db
+	beq TX_POWER_f3DB,shutdown_radio_f3db
+	beq TX_POWER_f5DB,shutdown_radio_f5db
+	beq TX_POWER_PAIR,shutdown_radio_pair
+shutdown_radio_5db:	
+shutdown_radio_0db:
+	jam 0xd0, rf_tx_pa_ib
+	jam 0xe0, rf_tx_pa_gc
+shutdown_radio0:
+	force 0,radio_ctrl
+	disable is_rx
+	disable is_tx
+	pulse packet_end
+	jam 0x0,rfen_mdm
+	jam 0x0,rfen_tx
+	jam 0x0,rfen_rx
+	jam 0,rfen_sn
+	jam 0x70,rfen_msc
+	jam 0x0,rfen_adc
+	rtn
+	
+shutdown_radio_pair:
+shutdown_radio_f5db:
+shutdown_radio_f3db:
+shutdown_radio_3db:
+	jam 0xd0,rf_tx_pa_ib
+	jam 0xc0,rf_tx_pa_gc
+	branch shutdown_radio0
+
+set_sync_on:
+	bpatch patch10_6,mem_patch10
+	jam 0x0,rfen_mdm					/* if called from tx or rx */
+	jam 0x0,rfen_tx
+	jam 0x18,rfen_rx
+	jam 0xa7,rfen_sn
+	jam 0x7f,rfen_msc
+	rtn
+
+set_freq_rx:
+	bpatch patch10_7,mem_patch10
+		/* IF is +2MHz */
+	storet 1,mem_last_freq
+	add temp,rx_freq_offset,rega			/* index to frequency */
+	jam 0x07,rf_balun_ctrim                                         /*Max added, for best sensitivity*/
+	branch rf_write_freq
+rf_rx_enable:
+	bpatch patch11_0,mem_patch11
+	jam 0xcf,rfen_tx
+	nop 10					/* wait adc clk48 ready */
+	jam 0xff,rfen_rx
+	jam 0xaf,rfen_sn
+	jam 0xff,rfen_msc
+	nop 10
+	jam 0xa0,rfen_mdm
+	rtn
+	
+set_freq_tx_offset:
+	fetch 1,mem_250k_freq_enable	//default: 0
+	branch set_freq_tx_2M_offset,blank
+set_freq_tx_0M_offset:
+	add temp,2,rega			//250k
+	rtn
+set_freq_tx_2M_offset:
+	add temp,0,rega			// bt 2M Medium Frequency
+	rtn
+
+set_freq_tx:
+	bpatch patch11_1,mem_patch11
+	storet 1,mem_last_freq
+	call set_freq_tx_offset
+	call rf_write_freq
+	setarg param_pll_setup
+	call sleep
+txon:	
+	jam 0x1,rfen_adc
+	jam 0x3c,rfen_rx
+	jam 0xe0,rfen_tx
+	jam 0x12,rf_balun_ctrim
+	nop 10
+	jam 0x01,rfen_mdm
+	jam 0x3d,rfen_mdm
+	nop 10
+	jam 0xb7,rfen_sn
+	nop 10
+	jam 0x7f, rfen_mdm
+txon_power_select:	
+	fetch 1,mem_tx_power
+	beq TX_POWER_0DB,set_tx_power_0db
+	beq TX_POWER_3DB,set_tx_power_3db	
+	beq TX_POWER_5DB,set_tx_power_5db
+	beq TX_POWER_f3DB,set_tx_power_f3db	
+	beq TX_POWER_f5DB,set_tx_power_f5db
+	beq TX_POWER_PAIR,set_tx_power_pair
+set_tx_power_0db:	
+	jam 0xf0,rf_tx_pa_gc
+	call txon_common
+	jam 0xd8,rf_tx_pa_ib
+	rtn
+
+set_tx_power_3db:
+	jam 0xdf,rf_tx_pa_gc
+	call txon_common
+	jam 0xdf,rf_tx_pa_ib
+	rtn
+
+set_tx_power_5db:
+	jam 0xff,rf_tx_pa_gc
+	call txon_common
+	jam 0xdf,rf_tx_pa_ib
+	rtn
+set_tx_power_f3db:
+	jam 0xce,rf_tx_pa_gc
+	call txon_common
+	jam 0xd8,rf_tx_pa_ib
+	rtn
+
+set_tx_power_f5db:
+	jam 0xcb,rf_tx_pa_gc
+	call txon_common
+	jam 0xd8,rf_tx_pa_ib
+	rtn
+
+set_tx_power_pair:
+	jam 0xd0,rf_tx_pa_ib
+	jam 0xc0,rf_tx_pa_gc
+	jam 0x4c,0x8957
+	jam 0x6c,0x8958
+	jam 0x50,0x8959
+	rtn
+
+txon_common:
+	nop 4
+	jam 0xd1,rf_tx_pa_ib
+	nop 4
+	jam 0xd2,rf_tx_pa_ib
+	nop 4
+	jam 0xd4,rf_tx_pa_ib
+	rtn
+
+
+initialize_radio:
+	jam clksel_rc,core_clksel
+initialize_radio_wait:
+	fetch 2,mem_rf_init_ptr
+	bbit0 14,initialize_radio_wait
+	iforce contr
+	arg 0x8900,temp
+initialize_radio_loop:
+	ifetch 1,contr
+	beq 0xff,initialize_radio_cont
+	ior temp,contw
+	ifetch 1,contr
+	istore 1,contw
+	branch initialize_radio_loop
+initialize_radio_cont:
+	bpatch patch11_2,mem_patch11
+	call lpm_cal_xtal_startup
+	call switchto_dpllclk
+//	ncall check_dpll,wake
+	setarg param_dpll_start_delay
+	iadd clkn_bt,pdata
+	store 4,mem_dpll_clkn
+	set1 RESET,radio_ctrl
+	force 0,radio_ctrl
+	ncall do_rccal,wake
+	branch set_rccal
+
+	/* rega is frequency, 00=2400Mhz */
+rf_write_freq:
+	bpatch patch11_3,mem_patch11
+	setarg 2400
+	iadd rega,temp
+	fetch 1,mem_fcomp_mul
+	jam 0x04,rf_pll_rstn
+	imul32 temp,pdata
+	fetcht 1,mem_fcomp_div
+	idiv temp
+	call wait_div_end
+	quotient rega			/* rega is FLOOR(FVCO/fcomp) */
+	remainder pdata		
+	lshift16 pdata,pdata
+	lshift4 pdata,pdata		/* pdata is frac * 2^20 */
+	idiv temp
+	call wait_div_end
+	quotient pdata		/* pdata is frac *2^20/fcomp */
+	lshift8 pdata,pdata
+	lshift pdata,pdata
+	ior rega,pdata
+	hstore 4,rf_pll_intg
+	jam 0x44,rf_pll_rstn
+	jam 0xc4,rf_pll_rstn
+	rtn
+
+	
+do_rccal:
+	bpatch patch11_4,mem_patch11
+	jam 0x02,rfen_adc
+	setarg 250000
+	call sleep					/* wait clkpll&xtal stable */
+	jam 0x7f,rfen_rx
+	nop 130
+	jam 0x30,rf_rccal_ctrl
+	jam 0xd0,rfen_tx
+	jam 0x70,rf_rccal_ctrl
+	jam 0xf0,rf_rccal_ctrl
+	force 50,loopcnt
+do_rccal_loop:
+	hfetch 1,rf_rccal_result
+	bbit1 5,do_rccal_end
+	loop do_rccal_loop
+do_rccal_end:
+	store 1,mem_rf_rccal
+	jam 0,rfen_tx
+	jam 0,rfen_rx
+	jam 0x00,rfen_adc
+	rtn
+
+set_rccal:
+	bpatch patch11_5,mem_patch11
+	fetch 1,mem_rf_rccal
+	set1 5,pdata
+	hstore 1,rf_rccal_ctrl
+	hfetcht 1,rf_bpf_ctrim
+	and_into 7,temp
+	lshift3 pdata,pdata
+	ior temp,pdata
+	hstore 1,rf_bpf_ctrim
+	hfetch 1,rf_bpf_ib
+	set0 bpf_rccal,pdata
+	hstore 1,rf_bpf_ib
+	hfetch 1,rf_adc_rccal
+	set0 adc_rccal,pdata
+	hstore 1,rf_adc_rccal
+	rtn
+
+save_rssi:
+	bpatch patch11_6,mem_patch11
+	hfetch 2,rf_afc_d2a
+	rshift4 pdata,pdata
+	rshift3 pdata,pdata
+	sub pdata,0,pdata
+bcd:
+	and_into 0xff,pdata
+	div pdata,10
+	call wait_div_end
+	quotient pdata
+	lshift4 pdata,pdata
+	remainder temp
+	ior temp,pdata
+	store 1,mem_rssi			/* bcd value */
+	rtn
+
+	
+switchto_dpllclk:
+	jam clksel_rc,core_clksel
+	hfetch 1,rf_clkpll_frac+2
+	set0 4,pdata
+	set0 5,pdata
+	hstore 1,rf_clkpll_frac+2
+	jam 0x00,rfen_ck
+	jam 0x00,rfen_msc
+	jam 0x70,rfen_msc
+	jam 0xff,rfen_ck
+	hfetch 1,rf_clkpll_frac+2
+	set1 4,pdata
+	set1 5,pdata
+	hstore 1,rf_clkpll_frac+2
+	call init_lpm_ctrl
+	hfetch 1,rf_clkpll_int
+	set1 7,pdata
+	hstore 1,rf_clkpll_int
+	set0 7,pdata
+	hstore 1,rf_clkpll_int
+	set1 7,pdata
+	hstore 1,rf_clkpll_int
+	jam clksel_dpll,core_clksel
+	nop 1
+	jam clksel_xtal,core_clksel
+	hfetch 1,rf_clkpll_frac+2
+	and_into 0xcf,pdata
+	hstore 1,rf_clkpll_frac+2
+	or_into 0x30,pdata
+	hstore 1,rf_clkpll_frac+2
+	rtn
+
+	
+xtal_fast_wake:
+	setarg 0xf0f
+	branch lpm_write_config
+
+init_lpm_ctrl:
+	setarg 0x80f
+	branch lpm_write_config
+
+
+
+start_receiver:
+	bpatch patch11_7,mem_patch11
+	call rf_rx_enable
+	disable is_tx
+	enable is_rx
+	pulse init_encrypt
+	rtn
+
+prep_crypt:
+	bpatch patch12_0,mem_patch12
+	fetch 1,mem_state_map
+	isolate1 smap_encryption,pdata
+	setflag true,0,pdata
+	hstore 1,core_encrypt
+	arg mem_kc,contr
+	ifetch 9,contr
+	iforce kc_ls
+	ifetch 7,contr
+	iforce kc_ms
+	fetch 1,mem_key_size
+	add pdata,-1,g1l
+	pulse kc_p_activate               /* immediately start calculating primary Key */
+	rtn
+	
+wait_access_end:
+	deposit clke
+	store 6,mem_sync_clke
+	disable decode_fec0
+	nbranch shutdown_radio,sync
+	arg param_clke_cal,clke_rt
+	increase 1,clke_bt
+	and_into 0x1fc,clke_bt
+	rtn
+
+
+
+wait_access_mhalfbnd:
+	enable decode_fec0
+wait_access_mhalfbnd_correlate:
+	correlate null,mhalfbnd    /* keep correlating until sync is found, or clke half */
+	branch wait_access_end,sync
+	compare 0x02,clke_bt,0x02
+	nbranch wait_access_mhalfbnd_correlate,true
+	branch wait_access_end
+
+wait_access_clkn_rt:
+	bpatch patch12_1,mem_patch12
+	arg param_conn_access,timeup	/* found sync must occur within this time */
+	enable decode_fec0
+	correlate clkn_rt,meet    /* keep correlating until sync is found, or until clkn_rt timeup */
+	disable decode_fec0
+	nbranch shutdown_radio,sync
+	rtn
+
+wait_access_forever:
+	bpatch patch12_2,mem_patch12
+	enable decode_fec0
+	correlate null,timeout    /* keep correlating until sync is found, or timeout */
+	disable decode_fec0
+	nbranch shutdown_radio,sync
+	arg param_clke_cal,clke_rt
+	and_into 0x1fc,clke_bt
+	rtn
+
+	/* reserve slots for mult-slot packet */
+reserve_slot:
+	bpatch patch12_3,mem_patch12
+	iforce rega
+	deposit bt_clk
+	iadd temp,timeup
+	copy timeup,pdata
+	store 4,mem_next_btclk
+	deposit rega
+	rtn
+
+	/* pdata = clks ahead of bt_clk */
+ahead_window:
+	copy pdata,temp
+	bpatch patch12_4,mem_patch12
+	copy temp,pdata
+	call clk2bt
+	lshift16 bt_clk,pdata
+	set1 44,pdata
+	call clk_diff
+	set0 44,pdata
+	call get_clk
+	call clk_diff
+	rtn user
+	call clk2rt
+	iforce stop_watch
+	until null,timeout
+	rtn
+
+
+setup_clk:
+	bpatch patch12_5,mem_patch12
+	branch setup_clkn,clknt
+	until clke_rt,meet
+skip_setup_clke:
+	copy clke_bt,temp
+	branch setup_clknbt
+setup_clkn:
+	branch skip_setup_clkn,attempt
+	until clkn_rt,meet
+skip_setup_clkn:
+	copy clkn_bt,temp
+setup_clknbt:
+	branch setup_clk11,user
+	compare 1,temp,3
+	nbranch setup_clk,true
+setup_complete:
+	bpatch patch12_6,mem_patch12
+	fetch 1,mem_state
+	rtnbit0 state_inconn
+	fetch 4,mem_next_btclk
+	isub temp,pdata
+	nrtn positive
+	sub pdata,0xff,null
+	branch setup_clk,positive
+	rtn
+setup_clk11:
+	compare 3,temp,3
+	nbranch setup_clk,true
+	branch setup_complete
+
+rf_setup_time:
+	bpatch patch12_7,mem_patch12
+	arg param_rf_setup,timeup
+	branch setup_clk
+	
+rf_setup_time_slave_slot:
+	disable user
+	branch rf_setup_time
+
+rf_setup_time_master_slot:
+	enable user
+	branch rf_setup_time
+	
+start_transmitter:
+	bpatch patch13_0,mem_patch13
+	call prep_crypt
+	disable is_rx
+	enable is_tx
+	rtn
+
+
+
+start_tx_native:
+	bpatch patch13_1,mem_patch13
+	arg param_tx_setup,timeup
+	until clkn_rt,meet         /* wait until start_tx time */
+	pulse init_encrypt
+	rtn
+
+start_rx_native:
+	bpatch patch13_2,mem_patch13
+	arg param_rx_setup,timeup
+	until clkn_rt,meet
+	rtn
+
+
+start_tx_external:
+	bpatch patch13_3,mem_patch13
+	arg param_tx_setup,timeup
+	until clke_rt,meet         /* wait until start_tx time */
+	pulse init_encrypt
+	rtn
+
+send_access_word:
+	bpatch patch13_4,mem_patch13
+	preload access          /* load in access word ready to be sent */
+	enable encode_fec0
+	set1 TXGFSK,radio_ctrl
+	inject mod,72
+	disable encode_fec0
+	rtn
+
+
+scan_mode_whiten:
+	copy xin,temp
+	or_into 0x60,temp                /* extend xin with 5->1, 6->1 */
+	copy temp,white_init
+	rtn
+
+
+
+	/* return blank if free amaddr is found */
+get_free_amaddr:
+	bpatch patch13_5,mem_patch13
+	fetch 1,mem_current_amaddr
+	increase 1,pdata
+	bne param_esco_addr,get_free_amaddr_cont
+	force 1,pdata
+get_free_amaddr_cont:
+	store 1,mem_current_amaddr
+	iforce am_addr
+	rtn
+
+get_clk:
+	copy clkn,temp
+	rtn master
+	copy clke,temp
+	rtn
+
+get_clkbt:
+	deposit clkn_bt
+	rtn master
+	deposit clke_bt
+	rtn
+
+
+supervision_update:
+	bpatch patch13_6,mem_patch13
+	fetcht 4,mem_supervision_timer
+	call get_clkbt
+	isub temp,timeup					/* and to 28 bits */
+	deposit timeup
+	fetcht 2,mem_supervision_to
+	lshift temp,temp
+	isub temp,pdata
+	rtn
+	
+supervision_flush:
+	bpatch patch13_7,mem_patch13
+	call get_clkbt
+	store 4,mem_supervision_timer
+	rtn
+
+assert:
+	bpatch patch14_0,mem_patch14
+	branch assert
+	
+loop:
+	branch loop
+
+sleep:	
+	rtn blank
+	/* sleep pdata clocks, only even clocks are accurate */
+	rshift pdata,pdata
+	increase -3,pdata
+sleep_loop:	
+	increase -1,pdata
+	nbranch sleep_loop,zero
+	force 0,pdata
+	rtn
+
+
+
+init_param:
+	/* clear specified sched ram */
+	arg 0x10,loopcnt
+	arg 0,contw
+	call memset0
+	arg mem_le_state,contw
+	arg 10,loopcnt
+	call memset0
+	jam 0,mem_sp_calc
+	jam 0,mem_fifo_temp
+	jam 0,mem_le_testtype
+	jam 0,mem_debug_config
+	jam 0,mem_lmp_conn_state
+	bpatch patch14_1,mem_patch14
+	jam 0,mem_connection_options
+	jam 0,mem_tester_emulate
+	jam 0,mem_tester_cnt
+	setarg param_glap
+	store 3,mem_glap
+	setarg param_acl_pktlen
+	store 2,mem_acl_pktlen
+	jam param_sco_pktlen,mem_sco_pktlen
+	jam param_acl_pktcnt,mem_acl_pktcnt
+	jam param_sco_pktcnt,mem_sco_pktcnt
+	setarg param_hci_version
+	store 3,mem_hci_version
+//	setarg param_lmp_version
+//	store 3,mem_lmp_version
+//	setarg param_lmp_subversion
+//	store 2,mem_lmp_subversion
+	jam 0x60,mem_fhs_misc		/* R1 for 1.28s ps interval,P2 */
+	jam param_max_slot,mem_max_slot
+	jam 0x02,mem_fw_ver		/* set firmware version */
+	fetch 1,mem_ssp_enable
+	ncall init_memp,blank
+	fetch 1,mem_le_secure_connect_enable
+	ncall init_memp_256,blank
+	bpatch patch14_2,mem_patch14
+	rtn wake
+	setarg 0
+	store 2,mem_tx_len
+	rshift clkn_bt,pdata
+	store 4,mem_last_clkn
+	rtn
+
+
+
+
+/*****************************************LPO************************************************/
+
+lpmstate:
+	setarg 0xee21
+	hstore 2,core_clkoff			// disable unused peripherals
+	hfetch 4,core_gpio_in
+	store 4,mem_saved_gpio_in
+	hfetch 1,core_lpm_ldocnt
+	store 1,mem_wakup_from_power_flag
+	bbit0 gpio_latch,loadcode		// power up boot
+	enable wake
+	bbit0 cold_wake,lpmwake		
+	disable wake
+	deposit auxcnt
+	nbranch lpmwake,blank		// sleep interrupted, wakeup
+	hfetch 1,core_lpm_ctrl + 3
+	bbit1 reload_code,lpmwake
+	arg param_hibernate_clks,temp
+	branch lpm_enter_sleep
+lpmwake:
+	hfetch 3,core_lpm_xtalcnt
+	hstore 3,core_lpm_reg
+	ifetch 1,contr
+	or_into isogate_mask,pdata		// open all isolation gate&power switch
+	istore 1,contw
+	call lpm_write_ctrl2
+	hfetch 1,core_lpm_isogate
+	set1 enable_retmem,pdata
+	hstore 1,core_lpm_isogate
+	call lpm_write_ctrl2
+	call lpm_load_context,wake
+	hfetch 1,core_lpm_reg+2
+	set0 gpio_latch,pdata			// enable gpio fuction
+	hstore 1,core_lpm_reg+2
+	call lpm_write_ctrl2
+	nbranch loadcode,wake		// wakeup from hibernate
+	rtnmark0 mark_otp_encrypt
+	jam lock_otp,core_misc_ctrl	// disable further read/write of key
+	rtn 
+
+lpm_load_context:
+	fetch 1,mem_saved_spidctrl
+	hstore 1,core_spid_ctrl
+	fetch 3,mem_saved_gsel
+	hstore 3,core_gpio_sel
+	fetch 4,mem_saved_gpio+4
+	hstore 4,core_gpio_out0
+	fetch 4,mem_saved_gpio
+	hstore 4,core_gpio_oe0
+	fetch 8,mem_saved_gpio+8
+	hstore 8,core_gpio_pu0	
+	fetch 8,mem_saved_mark
+	iforce mark
+	hfetch 8,core_gpio_wakeup_low
+	store 8,mem_gpio_wakeup_low
+	call load_ucode
+	rtn
+
+lpm_save_context:
+	deposit mark
+	store 8,mem_saved_mark
+	hfetch 8,core_gpio_oe0
+	store 8,mem_saved_gpio
+	ifetch 8,contr
+	istore 8,contw
+	hfetch 3,core_gpio_sel
+	store 3,mem_saved_gsel
+	hfetch 1,core_spid_ctrl
+	store 1,mem_saved_spidctrl
+	branch lpm_write_gpio_wakeup
+
+lpo_calibration:
+	hfetch 1,core_bist_ctrl
+	nbranch lpo_cal_inited,blank
+	fetch 3,mem_clks_per_lpo
+	nrtn blank
+	jam 0xc0,core_bist_ctrl
+	jam ccnt_start,core_misc_ctrl
+lpo_cal_inited:
+	hfetch 1,core_perf_status
+	rtnbit0 1
+	hfetch 3,core_clk_counter
+	store 3,mem_clks_per_lpo
+	rtn
+
+
+	/* temp is synced clke */
+lpm_adjust_clk:
+	bpatch patch14_3,mem_patch14
+	deposit clke
+	call clk_diff_rt
+	fetcht 4,mem_sleep_counter_all
+	sub temp,0xff,null
+	rtn positive				// interval too small
+	lshift8 pdata,pdata
+	lshift4 pdata,pdata
+	idiv temp
+	call wait_div_end
+	quotient pdata
+	arg param_lpm_adjmax,temp
+	call ceiling
+	store 1,mem_lpm_adjust
+	nbranch lpm_adjust_positive,user
+	sub pdata,0,pdata
+lpm_adjust_positive:
+	fetcht 3,mem_clks_per_lpo
+	iadd temp,pdata
+	store 3,mem_clks_per_lpo
+lpm_clear_counter:
+	setarg 0
+	store 4,mem_sleep_counter_all
+	rtn
+
+
+	/* temp is lpo counter for doze */
+lpm_doze:
+	fetch 1,mem_lpm_config+2
+	set1 reload_code,pdata
+	store 1,mem_lpm_config+2
+	branch lpm_hibernate_normal
+	
+
+	/* no retention memory at all */
+lpm_hibernate:
+	arg param_hibernate_clks,temp
+	fetch 1,mem_lpm_config+1
+	set0 7,pdata					/* lowest lpo */
+	store 1,mem_lpm_config+1
+lpm_hibernate_normal:
+	bpatch patch14_4,mem_patch14
+	call lpm_write_gpio_wakeup
+	fetch 1,mem_lpm_hibernate_switch
+	store 1,mem_lpm_xtalcnt + 4
+	fetch 1,mem_lpm_xtalcnt + 2
+	set1 cold_wake,pdata
+	store 1,mem_lpm_xtalcnt + 2
+
+	/* temp is lpo clocks to sleep */
+lpm_sleep:
+	bpatch patch14_5,mem_patch14
+	call xtal_fast_wake
+	fetch 4,mem_sleep_counter_all
+	iadd temp,pdata
+	store 4,mem_sleep_counter_all
+	call lpm_save_context
+	fetch 5,mem_lpm_xtalcnt
+	hstore 4,core_lpm_reg
+	rshift32 pdata,rega
+	until null,lpo_edge
+	deposit clkn
+	store 6,mem_sleep_clkn
+	jam lpmreg_sel_ctrl2,core_lpm_wr
+	until null,lpo_edge
+	until null,lpo_edge
+	deposit rega
+	hstore 1,core_lpm_isogate
+	jam lpmreg_sel_ctrl2,core_lpm_wr
+lpm_enter_sleep:
+	until null,lpo_edge
+	until null,lpo_edge
+	hstoret 4,core_lpm_reg
+	jam lpmreg_sel_counter,core_lpm_wr
+	until null,never
+
+
+
+
+lpm_recover_clk:
+	bpatch patch14_6,mem_patch14
+	setarg 0
+	copy auxcnt,null
+	branch lpm_recover_timeout,zero
+	hfetch 1,core_lpm_xtalcnt
+	hfetcht 1,core_lpm_buckcnt
+	isub temp,null
+	branch lpm_recover_xtal,positive
+	deposit temp
+lpm_recover_xtal:
+	isub auxcnt,pdata
+	increase 1,pdata
+lpm_recover_timeout:
+	increase 8,pdata
+	until null,lpo_edge
+	iadd lpo_time,pdata
+	fetcht 4,mem_sleep_counter
+	iadd temp,pdata
+	fetcht 3,mem_clks_per_lpo
+	imul32 temp,pdata
+	rshift8 pdata,pdata
+	rshift4 pdata,pdata
+	increase param_lpm_fix,pdata
+	arg 3750,temp
+	idiv temp
+	call wait_div_end
+	quotient pdata
+	lshift16 pdata,pdata
+	remainder temp
+	ior temp,pdata
+	fetcht 6,mem_sleep_clkn
+	call clk_add
+	copy temp,clkn
+	fetch 6,mem_context + coffset_clk_offset
+	call calc_clke2
+	deposit clke
+	store 6,mem_pdatatemp
+	deposit auxcnt
+	istore 1,contw
+	hfetch 1,core_gpio_in1
+	or_into 0xf0,pdata
+	istore 1,contw
+	rtn
+	
+lpm_dispatch:
+	bpatch patch14_7,mem_patch14
+	call lpo_calibration
+	fetch 3,mem_clks_per_lpo
+	rtn blank
+	fetch 1,mem_lpm_mode
+	rtn blank
+	fetch 1,mem_ssp_enable
+	branch lpm_dispatch_next,blank
+	fetch 1,mem_sp_local_key_invalid	// simple pairing is not ready
+	rtn blank
+lpm_dispatch_next:
+	fetch 1,mem_le_sc_calc
+	nrtn blank	
+	call lpm_check_wake_lock
+	nrtn blank
+	fetch 1,mem_context
+	compare 3,pdata,0x7							/* sco won't sleep */
+	nbranch lpm_dispatch_unconn,true
+	fetch 2,mem_context + coffset_tsniff
+	rtn blank										/* role switch */
+	rtn wake
+	bpatch patch15_0,mem_patch15
+lpm_dispatch_next2:
+	fetcht 1,mem_lpm_current_mult
+	fetch 2,mem_context + coffset_tsniff
+	imul32 temp,pdata
+	rshift4 temp,temp
+	rshift2 temp,temp
+	isub temp,pdata
+	fetcht 4,mem_context + coffset_sniff_anchor
+	iadd temp,pdata
+	fetcht 1,mem_lpm_overhead
+	isub temp,pdata
+	lshift16 pdata,alarm
+	bpatch patch15_1,mem_patch15
+	fetch 2,mem_context + coffset_rx_window
+	rshift pdata,pdata
+	call clk2bt
+	deposit alarm
+	call clk_diff
+	copy clke,temp
+	call clk_diff_rt
+	rtn user
+lpm_dispatch_sleep:
+	call clk2lpo
+lpm_dispatch_lpo:
+	bpatch patch15_2,mem_patch15
+	fetch 1,mem_lpm_xtalcnt
+	isub temp,null
+	branch lpm_clear_counter,positive
+	storet 4,mem_sleep_counter
+	call app_will_enter_lpm
+	call l2cap_lpm_save_txbuf
+	fetcht 4,mem_sleep_counter
+	branch lpm_sleep
+	
+lpm_dispatch_unconn:
+	bpatch patch15_3,mem_patch15
+	fetch 1,mem_context
+	rtnbit1 state_inconn					// wont sleep in connection
+	rtnbit1 state_inpage					// wont sleep when paging
+	fetch 1,mem_ssp_enable
+	branch lpm_unconn_nossp,blank
+	fetch 1,mem_sp_local_key_invalid	// simple pairing is not ready
+	rtn blank
+lpm_unconn_nossp:
+	bpatch patch15_4,mem_patch15
+	fetch 1,mem_le_adv_enable
+	nbranch lpm_unconn_cont,blank
+	fetch 1,mem_scan_mode
+	rtn blank
+lpm_unconn_cont:
+	fetch 2,mem_lpm_interval
+	rtn blank
+lpm_sleep_btclk:
+	fetcht 1,mem_lpm_overhead
+	isub temp,pdata
+	arg 7500,temp				/* 1.25ms */
+	imul32 temp,pdata
+	branch lpm_dispatch_sleep
+
+lpm_set_mult:
+	bpatch patch15_5,mem_patch15
+	disable wake
+	fetch 1,mem_state
+	rtnbit0 state_insniff
+	nbranch lpm_not_match,match
+	call lpm_match
+	fetch 2,mem_rx_window_sniff
+	store 2,mem_rx_window
+	fetch 1,mem_arq
+	bbit1 wack,lpm_mult_short
+	bmark0 mark_lpm_mult_enable,lpm_mult_short
+	call l2cap_malloc_is_fifo_empty
+	nbranch lpm_mult_short,blank
+	fetch 1,mem_classic_bt_flag
+	bbit1 SHORT_MULT_FLAG,lpm_mult_short
+lpm_mult_wait_timeout:
+	jam 0,mem_lpm_current_mult
+	bmark0 mark_lpm_mult_enable,lpm_mult_short
+	fetch 1,mem_lpm_mult_cnt
+	branch lpm_mult_long,blank
+	increase -1,pdata
+	store 1,mem_lpm_mult_cnt
+	rtn
+
+
+classic_bt_set_mult_short_flag:
+	arg SHORT_MULT_FLAG,queue
+	branch classic_bluetooth_set_flag
+	
+classic_bt_clr_mult_short_flag:
+	arg SHORT_MULT_FLAG,queue
+	branch classic_bluetooth_clr_flag
+
+
+
+lpm_match:
+	jam 0,mem_sniff_unint_lost
+	fetch 3,mem_sniff_rcv
+	increase 1,pdata
+	store 3,mem_sniff_rcv
+	rtn
+
+lpm_not_match:
+	bpatch patch15_6,mem_patch15
+	fetcht 2,mem_rx_window_sniff
+	rshift temp,temp
+	fetch 2,mem_rx_window
+	iadd temp,pdata
+	store 2,mem_rx_window
+lpm_lost:
+	jam 0,mem_lpm_current_mult
+	fetch 3,mem_sniff_lost
+	increase 1,pdata
+	store 3,mem_sniff_lost
+	fetch 1,mem_sniff_unint_lost
+	increase 1,pdata
+	store 1,mem_sniff_unint_lost
+	rtn
+
+lpm_mult_short:
+	jam 0,mem_lpm_current_mult
+	fetch 1,mem_lpm_mult_timeout
+	store 1,mem_lpm_mult_cnt
+	rtn
+
+lpm_mult_long:
+	fetcht 1,mem_lpm_mult
+	storet 1,mem_lpm_current_mult
+	rtn
+
+lpm_cal_xtal_startup:
+	bpatch patch15_7,mem_patch15
+	fetch 1,mem_lpm_xtalcnt
+	nrtn blank
+	jam clksel_rc,core_clksel
+	setarg 0xf0c
+	call lpm_write_config
+	setarg 200000
+	call sleep
+	until null,lpo_edge
+	copy lpo_time,alarm
+	call xtal_fast_wake
+	jam clksel_xtal,core_clksel
+	nop 10
+	until null,lpo_edge
+	deposit lpo_time
+	isub alarm,pdata
+	increase 0x30,pdata
+	arg 0xff,temp
+	call ceiling
+	store 1,mem_lpm_xtalcnt
+	nop 30000
+	nop 30000
+	nop 30000	
+	rtn
+
+lpm_cal_xtal_startup_by_snooze:
+	fetch 1,mem_lpm_xtalcnt
+	nrtn blank
+	jam 0xff,core_xtal_stable_time
+	jam clksel_rc,core_clksel
+	call xtal_fast_wake
+	setarg 1000
+	iadd lpo_time,alarm
+	snooze
+	deposit lpo_time
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	isub alarm,pdata
+	add pdata,0x30,pdata
+	arg 0xff,temp
+	call ceiling
+	store 1,mem_lpm_xtalcnt
+	nop 30000
+	nop 30000
+	nop 30000	//delay 90000 nop
+	rtn
+
+
+
+	/* pdata is lpm_reg[11:0] */
+lpm_write_config:
+	arg 0xfff,contw
+	iand contw,contw
+	fetch 1,mem_lpm_config
+	and_into 0xf0,pdata
+	lshift8 pdata,pdata
+	ior contw,pdata
+	hstore 2,core_lpm_reg
+	ifetch 2,contr
+	istore 2,contw
+
+lpm_write_ctrl:
+	setarg lpmreg_sel_ctrl
+	branch lpm_write
+
+lpm_write_ctrl2:
+	setarg lpmreg_sel_ctrl2
+lpm_write:
+	until null,lpo_edge
+	hstore 1,core_lpm_wr
+	until null,lpo_edge
+	until null,lpo_edge
+	rtn
+
+
+lpm_write_gpio_wakeup:
+	bpatch patch16_0,mem_patch16
+	fetch 4,mem_gpio_wakeup_low
+	hstore 4,core_lpm_reg
+	setarg lpmreg_sel_gpiolow
+	call lpm_write
+	fetch 4,mem_gpio_wakeup_high
+	hstore 4,core_lpm_reg
+	setarg lpmreg_sel_gpiohigh
+	branch lpm_write
+
+lpm_get_wake_lock:
+	fetch 2,mem_lpm_wake_lock
+	qset1 pdata
+	store 2,mem_lpm_wake_lock
+	rtn
+
+lpm_put_wake_lock:
+	fetch 2,mem_lpm_wake_lock
+	qset0 pdata
+	store 2,mem_lpm_wake_lock
+	rtn
+
+
+
+lpm_check_wake_lock:
+	bpatch patch16_1,mem_patch16
+	call app_check_wake_lock
+	fetch 2,mem_lpm_wake_lock
+	copy pdata,rega
+	fetch 1,mem_state_map
+	isolate1 smap_rxlmp,pdata
+	setflag true,wake_lock_lmp_rx,rega
+	fetch 1,mem_lmo_opcode1
+	fetcht 1,mem_lmo_opcode2
+	iadd temp,pdata
+	fetcht 1,mem_lmp_to_send
+	iadd temp,pdata
+	nsetflag blank,wake_lock_lmp_tx,rega
+	fetch 1,mem_le_tx_buff_used
+	nsetflag blank,wake_lock_ble_tx,rega
+	fetch 2,mem_l2cap_rxbuff1_len
+	fetcht 2,mem_l2cap_rxbuff2_len
+	iadd temp,pdata
+	nsetflag blank,wake_lock_l2cap_rx,rega
+	fetch UTIL_FIFO_LEN,mem_ipc_fifo_bt2c51
+	nsetflag blank,wake_lock_ipc_bt2c51,rega
+	fetch UTIL_FIFO_LEN,mem_ipc_fifo_c512bt
+	nsetflag blank,wake_lock_ipc_c512bt,rega
+	fetch 1,mem_hci_cmd
+	nsetflag blank,wake_lock_cmd,rega
+	fetch 1,mem_device_option
+	compare dvc_op_module,pdata,0xff
+	call lpm_uart_wake_lock,true
+	setarg -8
+	iand rega,rega
+	copy rega,pdata
+	store 2,mem_lpm_wake_lock
+	rtn
+
+lpm_uart_wake_lock:
+	hfetch 2,core_uart_rxitems
+	nsetflag blank,wake_lock_uart_rx ,rega
+	hfetch 2,core_uart_txitems
+	nsetflag blank,wake_lock_uart_tx ,rega
+	rtn
+
+lpm_shut_down:
+	hfetch 4,core_lpm_ctrl
+	set0 27,pdata
+	hstore 4,core_lpm_reg
+	call lpm_write_ctrl
+	branch assert
+	
+lpm_disable_exen_output:
+	hfetch 4,core_lpm_xtalcnt
+	set0 20,pdata
+	hstore 4,core_lpm_reg
+	branch lpm_write_ctrl2
+
+check_bt_disabled:
+	fetch 2,mem_chip_functions
+	bbit1 bt_disabled,assert
+	rtn
+check_ble_disabled:
+	fetch 2,mem_chip_functions
+	bbit1 ble_disabled,assert
+	rtn
+check_module_disabled:
+	fetch 2,mem_chip_functions
+	bbit1 module_disable,assert
+	rtn
+
+
+
+
+
+
+
+//p_check_attempt_sniff:
+//	bbit0 state_insco,p_check_attempt_not_sco
+//	fetch 1,mem_current_sniff_attempt
+//	beq 2,p_check_attempt_sniff_restore_sco
+//	fetch 1,mem_arq
+//	bbit1 wack,p_check_attempt_notimeout
+//	bmark0 mark_esco_rxok,p_check_attempt_notimeout
+//p_check_attempt_sniff_restore_sco:
+//	nbranch p_check_attempt_notimeout,master
+//	fetch 1,mem_lmp_to_send
+//	nbranch p_check_attempt_notimeout,blank
+//p_check_attempt_sco_master:
+//	fetch 1,mem_sco_poll
+//	increase -1,pdata
+//	store 1,mem_sco_poll
+//	nbranch check_attempt_nomore,blank
+//	jam param_sco_poll,mem_sco_poll
+//	branch check_attempt_notimeout
+//p_check_attempt_not_sco:
+//	compare type_null,type,0x1f
+//	branch check_timeout,true
+//	compare type_poll,type,0x1f
+//	branch check_timeout,true
+//	branch check_anchor_end
+//p_check_attempt_notimeout:
+//check_atttemp_decrease:
+//	fetch 1,mem_current_sniff_attempt
+//	increase -1,pdata
+//	store 1,mem_current_sniff_attempt
+//	rtn
+//check_timeout:
+//	fetch 1,mem_sniff_timeout_temp
+//	increase 1,pdata
+//	store 1,mem_sniff_timeout_temp
+//check_anchor_end:
+//	fetch 1,mem_current_sniff_attempt
+//	branch check_anchor_end_attempt0,blank
+//	call check_atttemp_decrease
+//	nrtn blank
+//check_anchor_end_attempt0:  
+//	fetch 1,mem_sniff_timeout_temp
+//	fetcht 1,mem_current_sniff_timeout
+//	isub temp,null
+//	branch p_blank,positive
+//	arg 1,pdata
+//	rtn
+//p_blank:
+//	arg 0,pdata
+//	rtn
+
+
+
+
+g24_dispatch:
+	bpatch patch16_2,mem_patch16
+	call g24_head_ptr2regc
+	add regc,offset_24g_mode,regb
+	ifetch 1,regb
+	//fetch 1,mem_24g_mode
+	rtneq disable_24g
+	beq tx_24g,g24_transmit_process
+	beq rx_24g,g24_receive_process
+	rtn
+
+g24_head_ptr2regc:
+	fetcht 2,mem_24g_head_ptr
+	copy temp,regc
+	rtn
+
+g24_receive_process_init:
+	call g24_receive_init
+	branch g24_mode_switch_init
+
+g24_receive_process:
+	call g24_mode_switch
+	call g24_dongle_work_mode_auto
+	call g24_dongle_bind_mode_auto
+	branch g24_dongle_search_mode_auto
+	
+
+g24_pair_init:
+	//jam 0,mem_24g_pid
+	//jam G24_PAIR_CH,mem_24g_ch
+	call g24_set0_mem_pid
+	setarg G24_PAIR_CH
+	call g24_store_mem_ch
+	call g24_store_mem_pair_txpower
+	//fetch 4,mem_24g_paring_addr
+	//store 4,mem_24g_addr
+	add regc,offset_24g_paring_addr,rega
+	ifetch 4,rega
+	branch g24_store_mem_addr
+		
+g24_ch:
+	call g24_head_ptr2regc
+	add regc,offset_24g_current_ch_number,regb
+	ifetcht 1,regb
+	//fetcht 1,mem_24g_current_ch_number
+	call g24_ch_temp_incre_size4 //map size =4
+	add regc,offset_24g_current_ch_number,contw
+	//storet 1,mem_24g_current_ch_number
+	branch g24_contw_istoret_1byte
+
+g24_ch_temp_incre_size4:
+	call g24_ch_calc
+	increase 1,temp
+	and_into 3,temp
+	rtn
+
+g24_ch_calc:
+	add regc,offset_24g_addr,regb
+	ifetch 1,regb
+	//fetch 1,mem_24g_addr
+	and_into 0x03,pdata
+	mul32 pdata,4,rega			//24addr low bit0 bit1 ,00-map1,01-map2,10-map3,11-map4
+	add regc,offset_24g_ch_map1,pdata
+	//setarg mem_24g_ch_map1
+	iadd rega,pdata
+	iadd temp,contr
+	ifetch 1,contr
+	//store 1,mem_24g_ch
+	branch g24_store_mem_ch
+
+g24_set_device_addr:
+	call g24_store_mem_tx_power_temp
+	call otp_enable_chgpump
+	setarg 0x7e2
+	arg mem_temp,rega
+	arg 4,temp
+	call otpd_read_data
+	call otp_disable_chgpump
+	fetch 4,mem_temp	//adc data from otp
+	call g24_store_mem_device_addr
+	//store 4,mem_24g_device_addr	
+	nrtn blank
+	fetch 4,mem_lap
+	//store 4,mem_24g_device_addr
+	branch g24_store_mem_device_addr
+
+g24_transmit_rf_sta_init:
+	call g24_set1_mem_rf_last_sta
+	//jam 1,mem_24g_rf_last_sta
+	setarg 0
+	call g24_store_mem_sync_cnt
+	//jam 0,mem_24g_sync_cnt
+g24_transmit_rf_ctrl_clear:	
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	and_into bits_data,pdata
+	//store 1,mem_24g_data_type
+	branch g24_store_mem_data_type
+	
+g24_hop_ch_enable:
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	set1 bit_hop,pdata
+	call g24_store_mem_data_type
+	//store 1,mem_24g_data_type
+	//store 1,mem_24g_txpayload
+	branch g24_store_mem_txpayload
+	
+g24_transmit_hop_pac_fail:
+	call g24_fetch_mem_rf_work_stage
+	//fetch 1,mem_24g_rf_work_stage
+	beq 1,g24_transmit_hop_pac_fail_wo_hop
+	beq 2,g24_transmit_hop_pac_fail_hop_stage2
+	rtn
+	
+g24_transmit_hop_pac_fail_wo_hop:
+	call g24_set2_mem_sync_cnt
+	//jam 2,mem_24g_sync_cnt
+g24_transmit_hop_pac_fail_stage1:
+	add regc,offset_24g_hop_pac_retry,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_hop_pac_retry
+	call g24_store_mem_rf_last_sta
+	//jam 0,mem_24g_rf_last_sta
+	branch g24_transmit_rf_ctrl_clear
+
+g24_transmit_hop_pac_fail_hop_stage2:
+	call g24_set0_mem_rf_hop_ch
+	//jam 0,mem_24g_rf_hop_ch
+	branch g24_transmit_hop_pac_fail_stage1
+
+g24_transmit_pac_fail_hop_stage3:
+	add regc,offset_24g_txfail_cnt,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_txfail_cnt
+	increase 1,pdata
+	add regc,offset_24g_txfail_cnt,contw
+	istore 1,contw
+	//store 1,mem_24g_txfail_cnt
+	beq 0x20,g24_tx_attempt_fail
+	call g24_fetch_mem_rf_hop_ch
+	//fetch 1,mem_24g_rf_hop_ch
+	beq 1,g24_rf_hop_fastly
+	setarg 1
+	call g24_store_mem_rf_hop_ch
+	//jam 1,mem_24g_rf_hop_ch
+g24_rf_hop_attemp_again:
+	call g24_fetch_mem_rf_hop_ch
+	//fetch 1,mem_24g_rf_hop_ch
+	bne 1,g24_transmit_rf_ctrl_clear
+g24_rf_hop_fastly:
+	add regc,offset_24g_hop_fastly_cnt,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_hop_fastly_cnt
+	increase 1,pdata
+	call g24_store_mem_hop_fastly_cnt
+	//store 1,mem_24g_hop_fastly_cnt
+	beq 4,g24_rf_hop_fastly_exit
+	call g24_ch
+	call g24_set2_mem_max_retry
+	//jam 2,mem_24g_max_retry
+	branch g24_transmit_packet
+
+g24_rf_hop_fastly_exit:
+	call g24_set0_mem_hop_fastly_cnt
+	//jam 0,mem_24g_hop_fastly_cnt
+	branch g24_transmit_rf_ctrl_clear
+
+g24_set0_mem_hop_fastly_cnt:
+	setarg 0
+g24_store_mem_hop_fastly_cnt:
+	add regc,offset_24g_hop_fastly_cnt,contw
+	branch g24_contw_istore_1byte
+
+g24_transmit_hop_pac_succ_wo_hop:
+	call g24_set2_mem_sync_cnt
+	//jam 2,mem_24g_sync_cnt
+g24_transmit_hop_pac_succ:
+	call g24_set0_mem_rf_hop_ch
+	//jam 0,mem_24g_rf_hop_ch
+	call g24_set1_mem_rf_last_sta
+	//jam 1,mem_24g_rf_last_sta
+	branch g24_transmit_rf_ctrl_clear
+
+g24_transmit_succ_rf_config:
+	call g24_fetch_mem_rf_work_stage
+	//fetch 1,mem_24g_rf_work_stage
+	beq 3,g24_transmit_hop_pac_succ
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	isolate0 bit_hop,pdata
+	branch g24_transmit_rf_sta_init,true
+	call g24_fetch_mem_rf_work_stage
+	//fetch 1,mem_24g_rf_work_stage
+	beq 1,g24_transmit_hop_pac_succ_wo_hop
+	beq 2,g24_transmit_hop_pac_succ
+	rtn
+
+g24_rf_sta_check:
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call g24_rf_laststa_synccnt_check
+	ncall g24_rf_sync_cnt_check,user2
+	rtn
+
+g24_rf_laststa_synccnt_check:
+	disable user2
+	add regc,offset_24g_rf_last_sta,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rf_last_sta
+	rtnne 1
+	add regc,offset_24g_sync_cnt,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_sync_cnt
+	rtnne 0
+	setarg 1
+	call g24_store_mem_rf_work_stage
+	//jam 1,mem_24g_rf_work_stage
+	call g24_set4_mem_max_retry
+	//jam 4,mem_24g_max_retry
+	branch enable_user2
+
+g24_rf_sync_cnt_check:
+	add regc,offset_24g_sync_cnt,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_sync_cnt
+	branch g24_rf_hop_attemp,blank
+	increase -1,pdata
+	call g24_store_mem_sync_cnt
+	//store 1,mem_24g_sync_cnt
+	setarg 2
+	call g24_store_mem_rf_work_stage
+	//jam 2,mem_24g_rf_work_stage
+	call g24_ch
+	//jam 4,mem_24g_max_retry
+	branch g24_set4_mem_max_retry
+
+g24_store_mem_rf_work_stage:
+	add regc,offset_24g_rf_work_stage,contw
+	branch g24_contw_istore_1byte
+
+
+g24_rf_hop_attemp:
+	setarg 3
+	call g24_store_mem_rf_work_stage
+	//jam 3,mem_24g_rf_work_stage
+	call g24_fetch_mem_rf_hop_ch
+	//fetch 1,mem_24g_rf_hop_ch
+	nbranch g24_rf_hop_attemp_again,blank
+	call g24_ch
+	//jam 2,mem_24g_max_retry
+g24_set2_mem_max_retry:	
+	setarg 2
+	branch g24_store_mem_max_retry
+
+g24_transmit_process:
+	rtnmark0 mark_24g
+	set1 mark_24g_conext,mark
+	bpatch patch16_3,mem_patch16
+	add regc,offset_24g_tx_without_int,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_tx_without_int
+	beq 1,g24_transmit_without_int
+	call g24_timer_check
+	nbranch g24_transmit_exit,user
+	call g24_interval_calibrate
+g24_transmit_without_int:
+	add regc,offset_24g_tx_without_int,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_tx_without_int
+	call g24_txdata_prep
+	nbranch g24_enter_lpm,user
+	call g24_rf_sta_check
+g24_transmit_start:
+	call g24_transmit_packet
+	call g24_power_ctrl
+g24_transmit_exit:
+	set0 mark_24g_conext,mark
+	rtn
+
+g24_timer_timeout:
+	rtn zero
+	set1 28,pdata
+	rtn
+
+g24_interval_calibrate:
+	add regc,offset_24g_pac_index,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_pac_index
+	increase 1,pdata
+	add regc,offset_24g_pac_index,contw
+	istore 1,contw
+	//store 1,mem_24g_pac_index
+	beq 4,g24_interval_max
+	beq 5,g24_interval_min
+	rtn
+g24_interval_max:
+	add regc,offset_24g_interval_max,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_interval_max
+g24_interval_update:	
+	//store 1,mem_24g_interval
+	add regc,offset_24g_interval,contw
+	branch g24_contw_istore_1byte
+
+g24_interval_min:
+	add regc,offset_24g_pac_index,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_pac_index
+	add regc,offset_24g_interval_min,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_interval_min
+	branch g24_interval_update
+
+g24_txdata_prep:
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,g24_pairing_sm
+	bpatch patch16_4,mem_patch16
+	call g24_package_data
+	nbranch g24_txdata_last_pac,user
+	call g24_transmit_prep
+	call g24_power_ctrl_pac_incrs
+g24_txdata_enable_tx:
+	//jam ENSURE_ON_24G,mem_24g_ensure
+	setarg ENSURE_ON_24G
+g24_store_mem_ensure:	
+	add regc,offset_24g_ensure,contw
+	branch g24_contw_istore_1byte
+
+g24_txdata_last_pac:
+	add regc,offset_24g_ensure,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_ensure
+	beq ENSURE_ON_24G,enable_user
+	rtn
+
+g24_package_data:
+	//rega:length,regb:contr
+	add regc,offset_24g_cb_data,temp
+	ifetch 2,temp
+	//fetch 2,mem_24g_cb_data
+	call callback_func
+	nrtn user
+	copy rega,pdata
+	store 1,mem_rega
+	add regc,offset_24g_abort_pac,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_abort_pac
+	call g24_transmit_rf_ctrl_clear
+	store 1,mem_24g_common_temp
+	fetch 1,mem_rega
+	copy pdata,rega
+	add rega,1,temp
+	arg mem_24g_common_temp+1,contw
+	copy rega,loopcnt
+	copy regb,contr
+	call memcpy
+	arg mem_24g_common_temp,rega
+g24_put_data_in_buff:
+	rtnmark0 mark_24g_conext
+	add regc,offset_24g_datalen,contw
+	istoret 1,contw
+	//storet 1,mem_24g_datalen
+	copy temp,loopcnt
+	add regc,offset_24g_txbuf,contw
+	//arg mem_24g_txbuf,contw
+	copy rega,contr
+	branch memcpy
+
+g24_transmit_prep:
+// total length
+	add regc,offset_24g_datalen,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_datalen
+	increase 2,pdata
+	add regc,offset_24g_txlen,contw
+	istore 1,contw
+	//store 1,mem_24g_txlen
+// data type
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	call g24_store_mem_txpayload
+	//store 1,mem_24g_txpayload
+//prepare 5bit payload length, 2bit PID, 1bit NO_ACK
+	add regc,offset_24g_datalen,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_datalen
+	lshift3 pdata,pdata
+	add regc,offset_24g_pid,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_pid
+	and temp,0x03,temp
+	lshift temp,temp
+	ior temp,pdata
+	add regc,offset_24g_no_ack,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_no_ack
+	iadd temp,pdata
+	istore 1,contw
+//prepare payload data
+	add regc,offset_24g_datalen,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_datalen
+	iforce loopcnt
+	add regc,offset_24g_txbuf,contr
+	//arg mem_24g_txbuf,contr
+	branch memcpy
+
+g24_send_abort_packet:
+	call g24_set1_mem_abort_pac
+	//jam 1,mem_24g_abort_pac
+	call g24_set0_mem_rf_hop_ch
+	//jam 0,mem_24g_rf_hop_ch
+	call g24_power_ctrl_reinit
+	call g24_transmit_rf_ctrl_clear
+	store 1,mem_24g_common_temp
+	call g24_put_data_in_buff_pre
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	set1 bit_abort,pdata
+	call g24_store_mem_data_type
+	//store 1,mem_24g_data_type
+	call g24_transmit_prep
+	call g24_txdata_enable_tx
+	branch g24_transmit_start
+
+g24_put_data_in_buff_pre:
+	store 1,mem_24g_common_temp+1
+	call g24_fetch_mem_device_addr
+	//fetch 4,mem_24g_device_addr
+	store 4,mem_24g_common_temp+2
+	arg 6,temp
+	arg mem_24g_common_temp,rega
+	branch g24_put_data_in_buff
+
+g24_enter_lpm:
+	add regc,offset_24g_abort_pac,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_abort_pac
+	branch g24_send_abort_packet,blank
+g24_enter_lpm_prepare:
+ 	// some thing need to do and do not enter 24g long sleep
+	add regc,offset_24g_cb_lpm_prepare,rega
+	ifetch 2,rega
+	//fetch 2,mem_24g_cb_lpm_prepare
+	branch callback_func
+
+g24_lpm_long_sleep:
+	call g24_head_ptr2regc
+	//fetch 8,mem_24g_enter_hibernate
+	call lpo_calibration
+	fetch 3,mem_clks_per_lpo
+	rtn blank
+	add regc,offset_24g_cb_lpm_before,temp
+	ifetch 2,temp
+	//fetch 2,mem_24g_cb_lpm_before
+	call callback_func
+	add regc,offset_24g_enter_hibernate,temp
+	ifetch 8,temp
+	call clk2lpo
+	storet 4,mem_sleep_counter
+  	branch lpm_sleep
+
+g24_transmit_packet:
+	call g24_head_ptr2regc
+	add regc,offset_24g_retry,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_retry
+g24_transmit_loop:
+	call g24_transmit_receive_ack
+	nbranch g24_retransmit,sync
+	nbranch g24_retransmit,user3
+	call g24_ackpayload_parse
+	call g24_power_ctrl_ack_incrs
+g24_transmit_next_packet:
+	call g24_head_ptr2regc
+	add regc,offset_24g_pid,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_pid
+	increase 1,pdata
+	call g24_store_mem_pid
+	//store 1,mem_24g_pid
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,g24_paring_mode
+	call g24_transmit_succ_rf_config
+g24_transmit_abandon:
+	setarg 0
+	add regc,offset_24g_txfail_cnt,contw
+	istore 2,contw	//include mem_24g_get_ack_fail
+	//store 1,mem_24g_txfail_cnt
+	//store 1,mem_24g_get_ack_fail
+	//jam ENSURE_OFF_24G,mem_24g_ensure
+	setarg ENSURE_OFF_24G
+	branch g24_store_mem_ensure
+
+	
+g24_transmit_receive_ack:
+	disable user3
+	call g24_transmit
+	call g24_head_ptr2regc
+	add regc,offset_24g_no_ack,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_no_ack
+	beq no_ack_24g,g24_transmit_no_ack	//tx no ack
+	call g24_receive_packet
+	branch g24_end_of_packet
+g24_transmit_no_ack:
+	call g24_end_of_packet
+	branch g24_transmit_next_packet
+
+
+g24_retransmit:
+	bpatch patch16_5,mem_patch16
+	add regc,offset_24g_get_ack_fail,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_get_ack_fail
+	increase 1,pdata
+	add regc,offset_24g_get_ack_fail,contw
+	istore 1,contw
+	//store 1,mem_24g_get_ack_fail
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,g24_tx_paring_retry
+	add regc,offset_24g_retry,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_retry
+	increase 1,temp
+	add regc,offset_24g_retry,contw
+	istoret 1,contw
+	//storet 1,mem_24g_retry
+	add regc,offset_24g_max_retry,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_max_retry
+	isub temp,pdata
+	nbranch g24_transmit_loop,blank
+	bpatch patch16_6,mem_patch16
+	call g24_fetch_mem_rf_work_stage
+	//fetch 1,mem_24g_rf_work_stage
+	beq 3,g24_transmit_pac_fail_hop_stage3
+	add regc,offset_24g_hop_pac_retry,rega
+	ifetch 1,rega	
+	//fetch 1,mem_24g_hop_pac_retry
+	increase 1,pdata
+	add regc,offset_24g_hop_pac_retry,contw
+	istore 1,contw
+	//store 1,mem_24g_hop_pac_retry
+	beq 2,g24_transmit_hop_pac_fail
+	call g24_hop_ch_enable
+	setarg 1
+	call g24_store_mem_max_retry
+	//jam 1,mem_24g_max_retry
+	branch g24_transmit_packet
+
+g24_tx_paring_retry:
+	add regc,offset_24g_get_ack_fail,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_get_ack_fail
+	rtnne 0xff
+	add regc,offset_24g_get_ack_fail,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_get_ack_fail
+	branch g24_stop_24g_mode
+
+g24_tx_attempt_fail:
+	add regc,offset_24g_txfail_cnt,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_txfail_cnt
+g24_stop_24g_mode:
+	jam BT_EVT_24G_ATTEMPT_FAIL,mem_fifo_temp
+	branch ui_ipc_send_event
+
+g24_ackpayload_parse:
+	call g24_read_len_pid_crc
+	add regc,offset_24g_rxdata_length,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rxdata_length	//ack payload length 
+	rtn blank
+	iforce loopcnt
+	add regc,offset_24g_rxbuf_add2,contr
+	//arg mem_24g_rxbuf+2,contr
+	add regc,offset_24g_rxpayload,contw	
+	//arg mem_24g_rxpayload,contw	//ack payload buffer 
+	branch memcpy
+
+
+g24_read_len_pid_crc:
+//read control
+	call g24_fetch_mem_rxbuf_add1
+	//fetch 1,mem_24g_rxbuf+1
+	rshift3 pdata,pdata
+	add regc,offset_24g_rxdata_length,contw
+	istore 1,contw
+	//store 1,mem_24g_rxdata_length
+//get crc
+	increase 1,pdata
+	add regc,offset_24g_rxbuf_add1,contr
+	//arg mem_24g_rxbuf+1,contr
+	iadd contr,contr
+	ifetch 3,contr
+	add regc,offset_24g_sta_crc,contw
+	istore 3,contw
+	//store 3,mem_24g_sta_crc
+//read pid
+	call g24_fetch_mem_rxbuf_add1
+	//fetch 1,mem_24g_rxbuf+1
+	rshift pdata,pdata
+	and pdata,0x03,pdata
+	add regc,offset_24g_sta_pid,contw
+	istore 1,contw
+	//store 1,mem_24g_sta_pid
+	rtn
+
+g24_prep:
+	disable enable_crc
+	disable enable_white
+	setarg 0x555555
+	iforce crc24_init
+	rtn
+
+g24_set_freq_tx:
+	call set_sync_on
+	add regc,offset_24g_ch,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_ch
+	branch set_freq_tx
+
+g24_transmit:
+	call g24_prep
+	call g24_set_freq_tx
+	set1 TXGFSK,radio_ctrl
+	enable encode_fec0
+	enable is_tx
+	disable is_rx
+	call le_enable
+	call g24_fetch_mem_addr
+	//fetch 4,mem_24g_addr
+	iforce access
+	inject mod,32
+	enable enable_crc
+	add regc,offset_24g_txlen,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_txlen
+	iforce loopcnt
+	add regc,offset_24g_txpayload,contr
+	//arg mem_24g_txpayload,contr
+g24tr_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop g24tr_loop
+	enable enable_parity
+	inject mod,24	//crc
+	disable enable_parity
+	until null,tx_clear
+	bpatch patch16_7,mem_patch16
+	nop 100
+	disable encode_fec0
+	rtn
+
+g24_receive_packet:
+	disable user3
+	force 0,radio_ctrl
+	add regc,offset_24g_ch,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_ch
+	call set_freq_rx
+	call rf_rx_enable
+g24_receive_rxon:
+	call g24_prep
+	enable decode_fec0
+	enable is_rx
+	disable is_tx
+	call le_enable
+	call g24_fetch_mem_addr
+	//fetch 4,mem_24g_addr
+	iforce access
+	enable swfine
+	add regc,offset_24g_rx_window,rega
+	ifetch 2,rega
+	//fetch 2,mem_24g_rx_window
+	iforce stop_watch
+	correlate null,timeout
+	nbranch g24_sync_timeout,sync
+	enable enable_crc
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	add regc,offset_24g_rxbuf,contw
+	istore 1,contw	
+	//store 1,mem_24g_rxbuf	//device id
+	add regc,offset_24g_mode,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_mode
+	beq rx_24g,g24_receive_skip
+	bpatch patch17_0,mem_patch17
+	add regc,offset_24g_rxbuf,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rxbuf
+	add regc,offset_24g_data_type,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_data_type
+	icompare bits_data,temp
+	nbranch g24_end_of_packet,true
+g24_receive_skip:
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	rshift3 pdata,pdata
+	and pdata,0x1f,loopcnt	//max payload: 32bytes
+	branch g24rx_nopayload,zero
+g24rx_loop:
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	loop g24rx_loop
+g24rx_nopayload:
+	parse demod,bucket,24
+	rshift32 pdata,pdata
+	rshift16 pdata,pdata
+	istore 3,contw
+	branch g24_end_of_packet,crc_failed
+	enable user3
+	disable decode_fec0
+	rtn
+//	branch rssi_signal
+
+g24_end_of_packet:
+	disable encode_fec0
+	disable decode_fec0
+	disable enable_crc
+	disable enable_white
+	branch shutdown_radio,is_rx
+	until null,tx_clear
+	nop 100          /* flush out the last bit */
+	branch shutdown_radio
+
+g24_sync_timeout:
+	call rssi_noise
+	branch g24_end_of_packet
+
+rssi_noise:
+	call save_rssi
+	rtn blank
+	add regc,offset_rssi_noise_index,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_rssi_noise_index
+	arg mem_rssi_noise_buffer,rega
+	//arg mem_rssi_noise_buf,rega
+	call rssi_noise_store
+	add regc,offset_rssi_noise_index,contw
+	//storet 1,mem_rssi_noise_index
+g24_contw_istoret_1byte:	
+	istoret 1,contw
+	rtn
+
+rssi_noise_store:
+	arg RSSI_BUF_LEN_NOISE,regb
+	branch rssi_store
+	
+/*	
+rssi_signal:
+	call save_rssi
+	rtn blank
+	add regc,offset_rssi_signal_index,rega
+	ifetcht 1,rega	
+	//fetcht 1,mem_rssi_signal_index
+	add regc,offset_rssi_signal_buf,rega
+	//arg mem_rssi_signal_buf,rega
+	arg RSSI_BUF_LEN_SIGNAL,regb
+	call rssi_store
+	add regc,offset_rssi_signal_index,contw
+	istoret 1,contw	
+	//storet 1,mem_rssi_signal_index
+	rtn
+*/	
+rssi_store:	
+	copy rega,pdata
+	iadd temp,contw
+	fetch 1,mem_rssi
+	istore 1,contw
+	increase 1,temp
+	copy regb,pdata
+	iand_into temp
+	rtn
+	
+rssi_average:
+	arg 0,temp
+	copy rega,contr
+rssi_average_loop:	
+	ifetch 1,contr
+	iadd temp,temp
+	loop rssi_average_loop
+	rshift8 temp,temp
+	rtn
+
+g24_power_ctrl_init:
+	call g24_head_ptr2regc
+	call g24_power_ctrl_incrs_level1
+	setarg 1
+	call g24_store_mem_power_ctrl_level
+	//jam 1,mem_power_ctrl_level
+g24_power_ctrl_reinit:
+	setarg 0
+	call g24_store_mem_power_ctrl_pac
+	//jam 0,mem_power_ctrl_packet_cnt
+	istore 1,contw
+	//jam 0,mem_power_ctrl_ack_cnt
+	rtn
+
+g24_power_ctrl_pac_incrs:
+	call g24_fetch_mem_power_ctrl_pac
+	//fetch 1,mem_power_ctrl_packet_cnt
+	increase 1,pdata
+g24_store_mem_power_ctrl_pac:	
+	//store 1,mem_power_ctrl_packet_cnt
+	add regc,offset_power_ctrl_packet_cnt,contw
+	branch g24_contw_istore_1byte
+
+g24_power_ctrl_ack_incrs:
+	//fetch 1,mem_power_ctrl_ack_cnt
+	//store 1,mem_power_ctrl_ack_cnt
+	add regc,offset_power_ctrl_ack_cnt,rega
+	ifetch 1,rega
+	increase 1,pdata
+	add regc,offset_power_ctrl_ack_cnt,contw
+	branch g24_contw_istore_1byte
+
+g24_power_ctrl:
+	bpatch patch17_1,mem_patch17
+	call g24_fetch_mem_power_ctrl_pac
+	//fetch 1,mem_power_ctrl_packet_cnt
+	sub pdata,POWER_CTRL_MAX_PACKET_CNT,null
+	rtn positive
+	add regc,offset_power_ctrl_ack_cnt,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_power_ctrl_ack_cnt
+	isub temp,temp	//loss packet cnt
+	call g24_power_ctrl_reinit
+	setarg offset_power_ctrl_threshold_up
+	iadd regc,rega
+	ifetch 1,rega
+	//fetch 1,mem_power_ctrl_threshold_up
+	isub temp,null
+	nbranch g24_power_ctrl_incrs,positive
+	setarg offset_power_ctrl_threshold_down
+	iadd regc,rega
+	ifetch 1,rega	
+	//fetch 1,mem_power_ctrl_threshold_down
+	isub temp,null
+	branch g24_power_ctrl_decrs,positive
+	rtn
+
+g24_power_ctrl_incrs:	
+	add regc,offset_power_ctrl_level,rega
+	ifetch 1,rega
+	//fetch 1,mem_power_ctrl_level
+	beq 2,g24_power_ctrl_incrs_level2
+	increase 1,pdata
+	call g24_store_mem_power_ctrl_level
+	//store 1,mem_power_ctrl_level
+	beq 1,g24_power_ctrl_incrs_level1
+g24_power_ctrl_incrs_level2:
+	setarg POWER_CTRL_LOSSPAC_THRESH_UP2
+	call g24_store_mem_power_ctrl_threshold_up
+	//jam POWER_CTRL_LOSSPAC_THRESH_UP2,mem_power_ctrl_threshold_up
+	setarg POWER_CTRL_LOSSPAC_THRESH_DOWN2
+	call g24_store_mem_power_ctrl_threshold_down
+	//jam POWER_CTRL_LOSSPAC_THRESH_DOWN2,mem_power_ctrl_threshold_down
+//	jam POWER_CTRL_RSSI_THRESH_DOWN2,mem_rssi_ctrl_threshold_down
+	add regc,offset_power_ctrl_txpwr_level2,rega
+	//fetch 1,mem_power_ctrl_txpwr_level2
+	branch g24_ifetch_rega_store_mem_txpower
+
+g24_power_ctrl_decrs:
+	add regc,offset_power_ctrl_level,rega
+	ifetch 1,rega
+	//fetch 1,mem_power_ctrl_level
+	beq 0,g24_power_ctrl_decrs_level0
+	increase -1,pdata
+	call g24_store_mem_power_ctrl_level
+	//store 1,mem_power_ctrl_level
+	beq 0,g24_power_ctrl_decrs_level0
+g24_power_ctrl_decrs_level1:
+//	call rssi_check_distance
+//	nrtn user
+g24_power_ctrl_incrs_level1:
+	setarg POWER_CTRL_LOSSPAC_THRESH_UP1
+	call g24_store_mem_power_ctrl_threshold_up
+	//jam POWER_CTRL_LOSSPAC_THRESH_UP1,mem_power_ctrl_threshold_up
+	setarg POWER_CTRL_LOSSPAC_THRESH_DOWN1
+	call g24_store_mem_power_ctrl_threshold_down
+	//jam POWER_CTRL_LOSSPAC_THRESH_DOWN1,mem_power_ctrl_threshold_down
+//	jam POWER_CTRL_RSSI_THRESH_DOWN1,mem_rssi_ctrl_threshold_down
+	setarg offset_power_ctrl_txpwr_level1
+g24_iadd_offset_mem_txpower:	
+	iadd regc,rega
+g24_ifetch_rega_store_mem_txpower:	
+	ifetch 1,rega
+	//fetch 1,mem_power_ctrl_txpwr_level1
+	branch g24_store_mem_txpower
+	
+g24_power_ctrl_decrs_level0:
+//	call rssi_check_distance
+//	nrtn user
+	setarg POWER_CTRL_LOSSPAC_THRESH_UP0
+	call g24_store_mem_power_ctrl_threshold_up
+	//jam POWER_CTRL_LOSSPAC_THRESH_UP0,mem_power_ctrl_threshold_up
+	setarg POWER_CTRL_LOSSPAC_THRESH_DOWN0
+	call g24_store_mem_power_ctrl_threshold_down
+	//jam POWER_CTRL_LOSSPAC_THRESH_DOWN0,mem_power_ctrl_threshold_down
+//	jam POWER_CTRL_RSSI_THRESH_DOWN0,mem_rssi_ctrl_threshold_down
+	setarg offset_power_ctrl_txpwr_level0
+	//fetch 1,mem_power_ctrl_txpwr_level0
+	branch g24_iadd_offset_mem_txpower
+
+/*
+rssi_check_distance:
+	disable user
+	arg mem_rssi_signal_buf,rega
+	arg RSSI_BUF_LEN_SIGNAL+1,loopcnt
+	call rssi_average
+	storet 1,mem_rssi_signal_avg
+	fetch 1,mem_rssi_ctrl_threshold_down
+	isub temp,null
+	branch enable_user,positive
+	rtn
+*/
+g24_start_pairing_sm1:
+	set1 mark_24g,mark
+	call g24_pair_init
+g24_set_pairing_sm_1:
+	//jam STATE_24G_PAIRING_1,mem_24g_pairing_sm
+	setarg STATE_24G_PAIRING_1
+	branch g24_store_mem_pairing_sm
+
+g24_pairing_sm:
+	add regc,offset_24g_ensure,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_ensure
+	beq ENSURE_ON_24G,enable_user
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	beq STATE_24G_PAIRING_1,g24_pairing_sm_1
+	beq STATE_24G_PAIRING_2,g24_pairing_sm_2
+	beq STATE_24G_PAIRING_3,g24_pairing_sm_3
+	branch assert
+
+g24_pairing_sm_1:
+	setarg STATE_24G_PAIRING_1_WAITING_ACK
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_1_WAITING_ACK,mem_24g_pairing_sm
+	jam 0xaa,mem_24g_common_temp
+	branch g24_pairing_sm_common
+g24_pairing_sm_2:
+	setarg STATE_24G_PAIRING_2_WAITING_ACK
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_2_WAITING_ACK,mem_24g_pairing_sm
+	jam 0x55,mem_24g_common_temp
+	branch g24_pairing_sm_common
+g24_pairing_sm_3:
+	setarg STATE_24G_PAIRING_3_WAITING_ACK
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_3_WAITING_ACK,mem_24g_pairing_sm
+	jam 0x22,mem_24g_common_temp
+g24_pairing_sm_common:
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	and_into bits_data,pdata
+	store 1,mem_24g_common_temp+1
+	call g24_fetch_mem_device_addr
+	//fetch 4,mem_24g_device_addr
+	store 4,mem_24g_common_temp+2
+g24_put_pairing_data_in_buff:
+	jam 0,mem_24g_common_temp+6
+	arg mem_24g_common_temp,rega
+	arg 7,temp
+	call g24_put_data_in_buff	
+	call g24_transmit_prep
+	call g24_txdata_enable_tx
+	branch enable_user
+
+g24_paring_mode:
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	rtneq STATE_24G_PAIRING_SUCCESS
+	beq STATE_24G_PAIRING_1_WAITING_ACK,g24_pairing_sm_1_waiting_ack
+	beq STATE_24G_PAIRING_2_WAITING_ACK,g24_pairing_sm_2_waiting_ack
+	beq STATE_24G_PAIRING_3_WAITING_ACK,g24_pairing_sm_3_waiting_ack
+	rtn
+
+g24_pairing_sm_1_waiting_ack:
+	setarg STATE_24G_PAIRING_2
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_2,mem_24g_pairing_sm
+	branch g24_transmit_abandon
+g24_pairing_sm_2_waiting_ack:
+	setarg STATE_24G_PAIRING_3
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_3,mem_24g_pairing_sm
+	branch g24_transmit_abandon
+g24_pairing_sm_3_waiting_ack:
+	setarg STATE_24G_PAIRING_SUCCESS
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_SUCCESS,mem_24g_pairing_sm
+	jam BT_EVT_24G_PAIRING_COMPLETE,mem_fifo_temp
+	call ui_ipc_send_event
+	add regc,offset_24g_rxpayload_add2,rega
+	ifetch 4,rega
+	//fetch 4,mem_24g_rxpayload+2
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	branch g24_transmit_abandon
+
+g24_auto_pair_start:
+	set0 mark_24g,mark
+	call g24_auto_pair_set_device_info
+	call g24_tx_attemp_data_prep
+g24_auto_pair_restart:	
+	call g24_set0_mem_check_dongle_times
+g24_auto_pair_start_loop:
+	nop 2000
+	call g24_fetch_mem_check_dongle_times
+	beq 0xff,g24_stop_24g_mode
+	call g24_transmit_receive_ack
+	nbranch g24_auto_pair_retry,sync
+	nbranch g24_auto_pair_retry,user3
+	call g24_ackpayload_parse
+	call g24_head_ptr2regc
+	add regc,offset_24g_paring_addr,rega
+	ifetcht 4,rega
+	call g24_fetch_mem_addr_isub_temp
+	branch g24_start_pairing_sm1,zero
+	call g24_head_ptr2regc
+	add regc,offset_24g_rxpayload_add2,rega
+	ifetch 4,rega
+	beq 0,g24_auto_pair_restart
+	call g24_store_mem_addr
+	branch g24_tx_attemp_dongle_succ
+
+g24_auto_pair_retry:
+	call g24_fetch_mem_check_dongle_times
+	increase 1,pdata
+	call g24_store_mem_check_dongle_times
+
+	call g24_fetch_mem_auto_paring_switch
+	increase 1,pdata
+	and_into 1,pdata
+	call g24_store_mem_auto_paring_switch
+	beq 0,g24_auto_pair_device_attemp
+	beq 1,g24_auto_pair_pair_attemp
+	rtn
+
+g24_fetch_mem_auto_paring_switch:
+	setarg offset_24g_auto_pair_switch
+	branch g24_set_rega_ifetch_1byte
+g24_store_mem_auto_paring_switch:
+	arg offset_24g_auto_pair_switch,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_auto_pair_set_device_info:
+	call g24_store_mem_tx_power
+	call g24_fetch_mem_device_addr
+	call g24_store_mem_addr
+	branch g24_ch
+
+g24_auto_pair_device_attemp:
+	call g24_auto_pair_set_device_info
+	branch g24_auto_pair_start_loop
+
+g24_auto_pair_pair_attemp:
+	call g24_pair_init
+	branch g24_auto_pair_start_loop
+
+
+g24_start_24g_mode:
+	set0 mark_24g,mark
+	call g24_ch
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call g24_tx_attemp_data_prep
+	call g24_set0_mem_check_dongle_times
+	//jam 0,mem_24g_check_dongle_times
+g24_tx_attemp_dongle_loop:
+	nop 2000
+	call g24_fetch_mem_check_dongle_times
+	//fetch 1,mem_24g_check_dongle_times
+	beq 0xff,g24_stop_24g_mode
+	call g24_transmit_receive_ack
+	nbranch g24_attemp_txdata_retry,sync
+	nbranch g24_attemp_txdata_retry,user3
+g24_tx_attemp_dongle_succ:	
+	set1 mark_24g,mark
+	call g24_set0_mem_check_dongle_times
+	setarg STATE_24G_PAIRING_SUCCESS
+	call g24_store_mem_pairing_sm
+	//jam 0,mem_24g_check_dongle_times
+	jam BT_EVT_24G_ATTEMPT_SUCCESS,mem_fifo_temp
+	branch ui_ipc_send_event
+
+g24_tx_attemp_data_prep:
+	set1 mark_24g_conext,mark
+	jam 0xff,mem_24g_common_temp
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	call g24_put_data_in_buff_pre
+	branch g24_transmit_prep
+	
+g24_attemp_txdata_retry:
+	call g24_fetch_mem_check_dongle_times
+	//fetch 1,mem_24g_check_dongle_times
+	increase 1,pdata
+	call g24_store_mem_check_dongle_times
+	//store 1,mem_24g_check_dongle_times
+	call g24_ch
+	branch g24_tx_attemp_dongle_loop
+
+g24_check_51cmd_start_24g:
+	call g24_store_mem_tx_power
+	//fetch 1,mem_tx_power_temp
+	//store 1,mem_tx_power
+	setarg STATE_24G_PAIRING_SUCCESS
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_SUCCESS,mem_24g_pairing_sm
+	branch g24_start_24g_mode
+/*	
+g24_check_51cmd_stop_24g:
+	call g24_store_mem_tx_power
+	set0 mark_24g,mark
+	branch le_disable
+*/
+
+
+dongle_init:
+	bpatch patch17_2,mem_patch17
+	call g24_head_ptr2regc
+	setarg dongle_rxdata_type1
+	add regc,offset_24g_cb_rxdata_type1,contw
+	istore 2,contw
+	//store 2,mem_24g_cb_rxdata_type1
+	call g24_receive_init
+	call usb_init
+	call g24_fetch_mem_pair_mode
+	//fetch 1,mem_24g_pair_mode
+	bpatch patch17_3,mem_patch17
+	beq 0x00,dongle_auto_bind
+	beq 0x01,dongle_pc_bind
+	beq 0x0f,dongle_all_powerful
+	branch assert
+
+g24_receive_init:
+	call g24_store_mem_tx_power_temp
+	arg 0x80,loopcnt
+	arg mem_rssi_noise_buffer,contw
+	branch memset0
+
+dongle_all_powerful:
+	call dongle_check_mode
+dongle_all_powerful_loop:
+	call g24_dongle_work_mode
+	call usb_isr
+	branch dongle_all_powerful_loop
+
+dongle_pc_bind:
+	bpatch patch17_4,mem_patch17
+	call dongle_check_mode
+dongle_pc_bind_loop:	
+	call g24_dongle_work_mode
+	call g24_dongle_bind_mode
+	call usb_isr
+	call dongle_usb_dispatch
+	branch dongle_pc_bind_loop
+
+dongle_check_mode:
+	//jam DONGLE_WORK,mem_dongle_work_mode
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	//jam 0,mem_24g_ackpayload_enable
+	call g24_set_work_mem_dongle_work_mode
+	call g24_set0_mem_dongle_mode_init
+	branch g24_set0_mem_ackpayload_enable
+	
+g24_dongle_work_mode:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_WORK
+g24_dongle_work_mode_start:
+	call g24_dongle_work_init
+	call g24_ch_process
+	call g24_receive_packet_start
+	branch g24_blank_data_process
+
+g24_dongle_work_init:
+	call g24_fetch_mem_dongle_mode_init
+	//fetch 1,mem_dongle_mode_init
+	rtnbit1 DONGLE_WORK
+	set1 DONGLE_WORK,pdata
+	call g24_store_mem_dongle_mode_init
+	//store 1,mem_dongle_mode_init
+	call g24_store_mem_tx_power
+	//fetch 1,mem_tx_power_temp
+	//store 1,mem_tx_power
+	call g24_set0_mem_ackpayload_enable
+	//jam 0,mem_24g_ackpayload_enable
+	jam 0,mem_usb_tx_enable
+	call g24_set1_mem_abort_pac
+	//jam 1,mem_24g_abort_pac
+	call g24_dongle_init
+g24_rx_interrupt_clear:
+	add regc,offset_24g_rxbuf,contw
+	//arg mem_24g_rxbuf,contw
+	arg 66,loopcnt
+	branch clear_mem
+
+g24_dongle_init:
+	call g24_set0_mem_pid
+	//jam 0,mem_24g_pid
+	call g24_fetch_mem_rx_addr
+	//fetch 4,mem_24g_rx_addr
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	branch g24_ch
+
+g24_ch_process:
+	bpatch patch17_5,mem_patch17
+	call g24_fetch_mem_abort_pac
+	//fetch 1,mem_24g_abort_pac
+	beq 1,g24_noise_rssi
+	call g24_fetch_mem_hop_pac
+	//fetch 1,mem_24g_hop_pac
+	beq 1,g24_ch	
+	setarg offset_24g_hop_btclk
+	iadd regc,rega
+	ifetcht 4,rega
+	//fetcht 4,mem_24g_hop_btclk
+	copy clkn_bt,pdata
+	isub temp,null
+	ncall g24_timer_timeout,positive
+	copy pdata,regb
+	setarg offset_24g_hop_btclk
+	iadd regc,rega
+	ifetch 4,rega
+	copy pdata,temp
+	//fetch 4,mem_24g_hop_btclk
+	setarg offset_24g_hop_interval
+	iadd regc,rega
+	copy temp,pdata
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_hop_interval
+	iadd temp,temp
+	copy regb,pdata
+	isub temp,null
+	nrtn positive
+	set0 28,pdata
+	setarg offset_24g_hop_btclk
+	iadd regc,contw
+	istore 4,contw
+	//store 4,mem_24g_hop_btclk
+g24_ch_update:
+	call g24_ch
+	call g24_fetch_mem_rf_laststa
+	//fetch 1,mem_24g_rf_laststa
+	increase 1,pdata
+	call g24_store_mem_rf_laststa
+	//store 1,mem_24g_rf_laststa
+	rtnne 2
+	call g24_set0_mem_rf_laststa
+	//jam 0,mem_24g_rf_laststa
+	//jam 1,mem_24g_abort_pac
+	//rtn
+	branch g24_set1_mem_abort_pac
+	
+g24_ch_timer_reinit:
+	copy clkn_bt,pdata
+	arg offset_24g_hop_btclk,rega
+	call g24_set_contw_with_temp
+	istore 4,contw
+	//store 4,mem_24g_hop_btclk
+	//jam 0,mem_24g_rf_laststa
+	//rtn
+	branch g24_set0_mem_rf_laststa
+
+g24_noise_rssi:
+	arg mem_rssi_noise_buffer,rega
+	call g24_noise_rssi_average
+	add regc,offset_rssi_noise_avg,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_avg
+	sub temp,RSSI_THRESH_NOISE,null
+	nrtn positive	
+	branch g24_ch
+
+g24_noise_rssi_average:
+	arg RSSI_BUF_LEN_NOISE+1,loopcnt
+	branch rssi_average
+
+g24_blank_data_process:
+	call g24_ms_blank_data
+	call g24_kb_blank_data
+	branch g24_kb_mul_blank_data
+
+g24_ms_blank_data:
+	setarg offset_24g_ms_blank_data_enable
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ms_blank_data_enable
+	rtn blank
+	arg TIMER_MS_BLANK,queue
+	call timer_check
+	nrtn blank
+	call g24_set0_mem_ms_blank_data_enable
+	//jam 0,mem_24g_ms_blank_data_enable
+g24_ms_blank_data_2usb:
+	setarg MS_REPORT_ID
+	store 1,mem_usb_mouse_data
+	setarg 0
+	istore 7,contw
+	branch g24_data_type1_usbtx_enable
+
+g24_kb_blank_data:
+	setarg offset_24g_kb_blank_data_enable
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_kb_blank_data_enable
+	rtn blank
+	arg TIMER_KB_BLANK,queue
+	call timer_check
+	nrtn blank
+	call g24_set0_mem_kb_blank_data_enable
+	//jam 0,mem_24g_kb_blank_data_enable
+g24_kb_blank_data_2usb:	
+	arg mem_usb_kb_data,contw
+	arg 2,loopcnt
+	call memset0
+	jam KB_NORMAL_REPORT_ID,mem_usb_kb_data
+	branch g24_kb_data_into_ep1_fifo
+
+g24_kb_mul_blank_data:
+	setarg offset_24g_kb_mul_blank_data_enable
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_kb_mul_blank_data_enable
+	rtn blank
+	arg TIMER_KB_MUL_BLANK,queue
+	call timer_check
+	nrtn blank
+	call g24_set0_mem_kb_mul_blank_data_enable
+	//jam 0,mem_24g_kb_mul_blank_data_enable
+g24_kb_mul_blank_data_2usb:
+	arg mem_usb_kb_multikey,contw
+	arg 2,loopcnt
+	call memset0
+	jam KB_MULTIKEY_REPORT_ID,mem_usb_kb_multikey
+	branch g24_kb_mul_data_into_ep2_fifo
+
+g24_dongle_bind_mode:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_BIND
+	call g24_dongle_bind_init
+	branch g24_dongle_bind_data_process
+
+g24_dongle_bind_init:
+	call g24_fetch_mem_dongle_mode_init
+	//fetch 1,mem_dongle_mode_init
+	rtnbit1 DONGLE_BIND
+	set1 DONGLE_BIND,pdata
+	call g24_store_mem_dongle_mode_init
+	//store 1,mem_dongle_mode_init
+	call g24_set1_mem_ackpayload_enable
+	//jam 1,mem_24g_ackpayload_enable
+	call g24_pair_init
+	setarg 0
+	arg offset_dongle_ms_bind_step,rega
+	call g24_set_contw_with_temp
+	//store 3,mem_dongle_ms_bind_step
+	branch g24_contw_istore_3byte
+
+g24_dongle_bind_data_process:
+	call g24_receive_transmit_ack
+	nbranch g24_rx_interrupt_clear,user3	
+	add regc,offset_24g_rxbuf,contr
+	setarg offset_24g_rxdata_temp
+	iadd regc,contw
+	arg 8,loopcnt
+	call memcpy
+	setarg offset_24g_rxdata_temp_add2
+	call g24_set_rega_ifetch_1byte
+	beq DATATYPE_BIND,g24_dongle_bind_first_step	//bind step 1
+	beq DATATYPE_CONFIG,g24_dongle_bind_second_step
+	beq DATATYPE_OK,g24_dongle_bind_third_step
+	beq 0xff,g24_data_attemp
+	branch g24_rx_interrupt_clear
+
+g24_dongle_bind_first_step:
+	call g24_fetch_mem_rxdata_temp_add3_1byte
+	beq BIND_MOUSE,g24_dongle_bind_first_step_mouse
+	beq BIND_KEYBOARD,g24_dongle_bind_first_step_keyboard
+	rtn
+g24_dongle_bind_first_step_mouse:
+	setarg 1
+	call g24_store_mem_ms_bind_step
+	//jam 1,mem_dongle_ms_bind_step
+g24_dongle_bind_ms_payload_cfg:
+	setarg DATATYPE_MOUSE
+	call g24_store_mem_bind_payload
+	//jam DATATYPE_MOUSE,mem_24g_bind_payload
+g24_dongle_bind_payload_cfg:	
+	setarg 0x80
+	arg offset_24g_bind_payload_add1,rega
+	call g24_set_contw_with_regb_store_1byte
+	//jam 0x80,mem_24g_bind_payload+1
+	call g24_fetch_mem_rx_addr
+	//fetch 4,mem_24g_rx_addr
+	arg offset_24g_bind_payload_add2,rega
+	call g24_set_contw_with_temp
+	//store 4,mem_24g_bind_payload+2
+	branch g24_contw_istore_4byte
+
+g24_dongle_bind_first_step_keyboard:
+	setarg 1
+	call g24_store_mem_kb_bind_step
+	//jam 1,mem_dongle_kb_bind_step
+g24_dongle_bind_kb_payload_cfg:
+	setarg DATATYPE_KEYBOARD
+	call g24_store_mem_bind_payload
+	//jam DATATYPE_KEYBOARD,mem_24g_bind_payload
+	branch g24_dongle_bind_payload_cfg
+		
+g24_dongle_bind_second_step:
+	call g24_fetch_mem_rxdata_temp_add3_1byte
+	beq BIND_MOUSE,g24_dongle_bind_second_step_mouse
+	beq BIND_KEYBOARD,g24_dongle_bind_second_step_keyboard
+	rtn
+g24_dongle_bind_second_step_mouse:
+	call g24_dongle_bind_ms_payload_cfg
+	setarg offset_dongle_ms_bind_step
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_dongle_ms_bind_step
+	beq 1,g24_dongle_ms_bind_step_set2
+	rtn
+g24_dongle_ms_bind_step_set2:
+	setarg 2
+	//jam 2,mem_dongle_ms_bind_step
+g24_store_mem_ms_bind_step:
+	arg offset_dongle_ms_bind_step,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_dongle_bind_second_step_keyboard:
+	call g24_dongle_bind_kb_payload_cfg
+	setarg offset_dongle_kb_bind_step
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_dongle_kb_bind_step
+	beq 1,g24_dongle_kb_bind_step_set2
+	rtn
+g24_dongle_kb_bind_step_set2:
+	setarg 2
+	//jam 2,mem_dongle_kb_bind_step
+g24_store_mem_kb_bind_step:
+	arg offset_dongle_kb_bind_step,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_dongle_bind_third_step:
+	call g24_fetch_mem_rxdata_temp_add3_1byte
+	beq BIND_MOUSE,g24_dongle_bind_third_step_mouse
+	beq BIND_KEYBOARD,g24_dongle_bind_third_step_keyboard
+	rtn
+g24_dongle_bind_third_step_mouse:
+	setarg offset_dongle_ms_bind_step
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_dongle_ms_bind_step
+	beq 2,g24_dongle_ms_bind_step_success
+	rtn
+g24_dongle_ms_bind_step_success:
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	or_into 0x01,pdata
+	call g24_store_mem_bind_device_status
+	//store 1,mem_dongle_bind_device_status
+g24_dongle_bind_exit:	
+	setarg 0
+	setarg offset_dongle_ms_bind_step
+	iadd regc,contw
+	istore 2,contw
+	branch g24_rx_interrupt_clear
+
+g24_dongle_bind_third_step_keyboard:
+	setarg offset_dongle_kb_bind_step
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_dongle_kb_bind_step
+	bne 0,g24_dongle_kb_bind_step_success
+	rtn
+g24_dongle_kb_bind_step_success:
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	or_into 0x02,pdata
+	call g24_store_mem_bind_device_status
+	//store 1,mem_dongle_bind_device_status
+	branch g24_dongle_bind_exit
+
+	
+dongle_usb_dispatch:
+	fetch 1,mem_usb0_get_set_report
+	rtn blank
+	jam 0,mem_usb0_get_set_report
+	fetch 2,mem_usb_setup_bValue_temp
+	arg PC_SET_REPORT,temp
+	isub temp,null
+	nrtn zero
+	//get usb host command
+	fetch 1,mem_usb0_set_report_data
+	rtnne PC_REPORT_ID
+	fetch 1,mem_usb0_set_report_data+1
+	bpatch patch17_6,mem_patch17
+	beq COMMAND_MODE,dongle_dispose_cmd_mode
+	beq COMMAND_BIND,dongle_dispose_cmd_bind
+	beq COMMAND_CURRENT_PROJECT,dongle_dispose_cmd_current_project
+	beq COMMAND_CURRENT_MODE,dongle_dispose_cmd_current_mode
+	beq COMMAND_CURRENT_FW_VERSION,dongle_dispose_cmd_current_fw_version
+	beq COMMAND_USER_DEFINED,dongle_dispose_cmd_user_defined
+usb0_data_ready_report_set0:
+	jam 0,mem_usb0_data_ready_report
+	rtn
+dongle_dispose_cmd_bind:
+	fetch 1,mem_usb0_set_report_data+2
+	beq COM_BIND_GET,dongle_dispose_cmd_get_bind
+	beq COM_BIND_EXIT,dongle_dispose_cmd_exit_bind
+	beq COM_READ_MODE,dongle_dispose_cmd_read_mode
+	branch usb0_data_ready_report_set0
+dongle_dispose_cmd_get_bind:
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	store 1,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+dongle_dispose_cmd_exit_bind:
+	call g24_set_work_mem_dongle_work_mode
+	//jam DONGLE_WORK,mem_dongle_work_mode
+	call g24_set0_mem_dongle_mode_init
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	store 1,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_read_mode:
+dongle_dispose_in_bind_mode:
+	jam COMMAND_BIND,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_mode:
+	fetch 1,mem_usb0_set_report_data+2
+	beq COM_MODE_BIND,dongle_enter_bind_mode
+//	beq COM_MODE_TEST,dongle_enter_test_mode
+	branch usb0_data_ready_report_set0
+dongle_enter_bind_mode:
+	//jam DONGLE_BIND,mem_dongle_work_mode
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	call g24_bind_mode_enable
+usb0_data_ready_report_set1:
+	jam 1,mem_usb0_data_ready_report
+	rtn
+//dongle_enter_test_mode:
+//	jam DONGLE_TEST,mem_dongle_work_mode
+//	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_current_project:
+	jam PRODUCT_ID,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_current_mode:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	beq DONGLE_WORK,dongle_dispose_in_work_mode
+	beq DONGLE_BIND,dongle_dispose_in_bind_mode
+//	beq DONGLE_TEST,dongle_dispose_in_test_mode
+	rtn
+dongle_dispose_in_work_mode:
+	jam COMMAND_MODE,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+//dongle_dispose_in_test_mode:
+//	jam COMMAND_TEST,mem_usb0_get_report_data+1
+//	branch usb0_data_ready_report_set1
+	
+dongle_dispose_cmd_current_fw_version:
+	jam FW_VERSION0,mem_usb0_get_report_data+1
+	jam FW_VERSION1,mem_usb0_get_report_data+2
+	jam FW_VERSION2,mem_usb0_get_report_data+3
+	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_user_defined:
+	//report_id|cmd|data_len|data
+	call g24_set1_mem_ackpayload_enable
+	fetch 1,mem_usb0_set_report_data+2	//data_len:max 30bytes
+	increase 2,pdata
+	copy pdata,loopcnt
+	arg mem_usb0_set_report_data,contr
+	setarg offset_24g_ackpayload
+	iadd regc,contw
+	branch memcpy
+
+
+dongle_auto_bind:
+	bpatch patch17_7,mem_patch17
+	call g24_mode_switch_init
+dongle_auto_bind_loop:
+	call g24_receive_process
+	call usb_isr
+	branch dongle_auto_bind_loop
+
+g24_dongle_work_mode_auto:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_WORK
+	call g24_dongle_work_mode_start
+	branch g24_rx_nodata_process
+
+g24_dongle_bind_mode_auto:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_BIND
+	call g24_dongle_bind_init
+	call g24_dongle_bind_data_process
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	rtn blank
+	call g24_set0_mem_mode_switch
+	//jam 0,mem_24g_mode_switch
+	call dongle_check_mode
+	call g24_enable_nodata_timer
+g24_timer_init:
+	setarg 0
+	add regc,offset_24g_tx_btclk,contw
+	//store 4,mem_24g_tx_btclk
+	branch g24_contw_istore_4byte
+
+g24_timer_check:
+	call disable_user
+	add regc,offset_24g_tx_btclk,rega
+	ifetcht 4,rega	
+	//fetcht 4,mem_24g_tx_btclk
+	copy clkn_bt,pdata
+	isub temp,null
+	ncall g24_timer_timeout,positive
+	copy pdata,regb
+	add regc,offset_24g_tx_btclk,rega
+	ifetch 4,rega
+	//fetch 4,mem_24g_tx_btclk
+	add regc,offset_24g_interval,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_interval
+	iadd temp,temp
+	copy regb,pdata
+	isub temp,null
+	nrtn positive
+	set0 28,pdata
+	add regc,offset_24g_tx_btclk,contw
+	istore 4,contw
+	//store 4,mem_24g_tx_btclk
+	branch enable_user
+
+g24_mode_switch_init:
+	setarg 1
+	call g24_store_mem_mode_switch
+	//jam 1,mem_24g_mode_switch
+	call g24_set0_mem_time_slice
+	//jam 0,mem_24g_time_slice
+	setarg 0xff
+	add regc,offset_24g_interval,contw
+	istore 1,contw
+	//jam 0xff,mem_24g_interval
+	branch g24_timer_init
+
+g24_mode_switch:
+	setarg offset_24g_mode_switch
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_mode_switch
+	rtn blank
+	call g24_timer_check
+	nrtn user
+	call g24_fetch_mem_time_slice
+	//fetch 1,mem_24g_time_slice
+	increase 1,pdata
+	and_into 1,pdata
+	call g24_store_mem_time_slice
+	//store 1,mem_24g_time_slice
+	beq 0,dongle_check_mode
+	beq 1,g24_bind_mode_enable
+	rtn
+
+g24_bind_mode_enable:
+	//jam DONGLE_BIND,mem_dongle_work_mode
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	//rtn
+	setarg DONGLE_BIND
+	call g24_store_mem_dongle_work_mode
+	branch g24_set0_mem_dongle_mode_init
+
+g24_enable_nodata_timer:
+	setarg 1
+	call g24_store_mem_nodata_timer_enable
+	//jam 1,mem_24g_nodata_timer_enable
+g24_enable_nodata_timer_init:
+	setarg TIMER_NODATA_DELAY
+	arg TIMER_NODATA,queue
+	branch timer_init
+
+g24_rx_nodata_process:
+	call g24_fetch_mem_nodata_timer_enable
+	//fetch 1,mem_24g_nodata_timer_enable
+	rtn blank
+	arg TIMER_NODATA,queue
+	call timer_check
+	nrtn blank
+	call g24_set0_mem_nodata_timer_enable
+	//jam 0,mem_24g_nodata_timer_enable
+	//no data for more than 100ms,then go to search
+	setarg DONGLE_SEARCH
+	call g24_store_mem_dongle_work_mode	
+	//jam DONGLE_SEARCH,mem_dongle_work_mode
+	call g24_set0_mem_dongle_mode_init
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	branch g24_rx_interrupt_clear
+
+g24_dongle_search_mode_auto:
+	bpatch patch18_0,mem_patch18
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_SEARCH
+	call g24_dongle_search_mode_init
+	call g24_rx_auto_addr_ch_search
+	call g24_receive_transmit_ack
+	nbranch g24_rx_interrupt_clear,user3
+	//dongle addr,then parse rxdata
+	call g24_dongle_search_addr_check
+	call g24_receive_packet_parse,zero
+	//receive data,then go to paired
+	//jam DONGLE_WORK,mem_dongle_work_mode
+	//jam 0,mem_24g_ackpayload_enable
+	call dongle_check_mode
+	call g24_fetch_mem_dongle_mode_init
+	//fetch 1,mem_dongle_mode_init
+	set1 DONGLE_WORK,pdata
+	call g24_store_mem_dongle_mode_init
+	//store 1,mem_dongle_mode_init
+	call g24_rx_interrupt_clear
+	call g24_enable_nodata_timer
+	call g24_dongle_search_addr_check
+	branch g24_dg_ch_num_reinit,zero
+	setarg offset_24g_kb_addr
+	call g24_set_rega_ifetcht_4byte
+	//fetcht 4,mem_24g_kb_addr
+	call g24_fetch_mem_addr_isub_temp
+	branch g24_kb_ch_num_reinit,zero		
+	setarg offset_24g_mouse_addr
+	call g24_set_rega_ifetcht_4byte
+	//fetcht 4,mem_24g_mouse_addr
+	call g24_fetch_mem_addr_isub_temp
+	branch g24_ms_ch_num_reinit,zero
+	rtn
+
+g24_dongle_search_addr_check:
+	setarg offset_24g_rx_addr
+	call g24_set_rega_ifetcht_4byte
+	//fetcht 4,mem_24g_rx_addr
+g24_fetch_mem_addr_isub_temp:
+	call g24_fetch_mem_addr
+	//fetch 4,mem_24g_addr
+	isub temp,null
+	rtn
+
+g24_dg_ch_num_reinit:
+	setarg offset_24g_dg_ch_number
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_dg_ch_number
+g24_current_ch_num_reinit:
+	//store 1,mem_24g_current_ch_number
+	add regc,offset_24g_current_ch_number,contw
+	branch g24_contw_istore_1byte
+
+g24_kb_ch_num_reinit:
+	setarg offset_24g_kb_ch_number
+	call g24_set_rega_ifetch_1byte	
+	//fetch 1,mem_24g_kb_ch_number
+	branch g24_current_ch_num_reinit
+g24_ms_ch_num_reinit:
+	setarg offset_24g_ms_ch_number
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ms_ch_number
+	branch g24_current_ch_num_reinit
+
+g24_dongle_search_mode_init:
+	call g24_fetch_mem_dongle_mode_init
+	//fetch 1,mem_dongle_mode_init
+	rtnbit1 DONGLE_SEARCH
+	set1 DONGLE_SEARCH,pdata
+	call g24_store_mem_dongle_mode_init
+	//store 1,mem_dongle_mode_init
+	call g24_set0_mem_time_slice
+	//jam 0,mem_24g_time_slice
+	call g24_set1_mem_ackpayload_enable
+	//jam 1,mem_24g_ackpayload_enable
+	setarg 0
+	add regc,offset_rssi_noise_dg_index,contw
+	istore 3,contw
+	//store 3,mem_rssi_noise_dg_index
+	arg offset_24g_dg_config_ch_once,rega
+	call g24_set_contw_with_temp
+	istore 7,contw
+	//store 7,mem_24g_dg_config_ch_once
+
+	call g24_dongle_search_addr_check
+	nrtn zero
+	add regc,offset_24g_current_ch_number,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_current_ch_number
+	arg offset_24g_dg_ch_number,rega
+	call g24_set_contw_with_regb_store_1byte
+	//store 1,mem_24g_dg_ch_number
+	add regc,offset_24g_ch,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_ch
+	//store 1,mem_24g_dg_last_ch
+	branch g24_store_mem_dg_last_ch
+
+g24_rx_auto_addr_ch_search:
+	bpatch patch18_1,mem_patch18
+	call g24_fetch_mem_time_slice
+	//fetch 1,mem_24g_time_slice
+	increase 1,pdata
+	and_into 3,pdata
+	call g24_store_mem_time_slice
+	//store 1,mem_24g_time_slice
+	//pairing address and channel come first
+	beq 0,g24_rx_auto_bind_config_kb
+	beq 1,g24_rx_auto_bind_config_dongle
+	beq 2,g24_rx_auto_bind_config_mouse
+	beq 3,g24_rx_auto_bind_config_dongle
+	rtn
+
+g24_rx_auto_bind_config_mouse:
+	call g24_dongle_bind_ms_payload_cfg
+	setarg offset_24g_mouse_addr
+	call g24_set_rega_ifetch_4byte
+	//fetch 4,mem_24g_mouse_addr
+	branch g24_rx_auto_addr_ch_search,blank
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	setarg offset_24g_ms_config_ch_once
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ms_config_ch_once
+	call g24_ms_config_ch_once,blank
+	setarg offset_24g_ms_last_ch
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ms_last_ch
+	call g24_store_mem_ch
+	//store 1,mem_24g_ch
+	add regc,offset_rssi_noise_ms_index,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_rssi_noise_ms_index
+	arg mem_rssi_noise_ms_buffer,rega
+	call rssi_noise_store
+	add regc,offset_rssi_noise_ms_index,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_ms_index
+	call g24_noise_rssi_average
+	add regc,offset_rssi_noise_ms_avg,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_ms_avg
+	sub temp,RSSI_THRESH_NOISE,null
+	nrtn positive
+	setarg offset_24g_ms_ch_number	
+	call g24_set_rega_ifetcht_1byte
+	//fetcht 1,mem_24g_ms_ch_number
+	call g24_ch_temp_incre_size4 //map size =4
+	arg offset_24g_ms_ch_number,rega
+	call g24_set_contw_with_regb2
+	istoret 1,contw
+	//storet 1,mem_24g_ms_ch_number
+g24_store_mem_ms_last_ch:
+	//store 1,mem_24g_ms_last_ch
+	arg offset_24g_ms_last_ch,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_ms_config_ch_once:
+	setarg 1
+	arg offset_24g_ms_config_ch_once,rega
+	call g24_set_contw_with_regb_store_1byte
+	//jam 1,mem_24g_ms_config_ch_once
+	arg 0,temp
+	call g24_ch_calc
+	//store 1,mem_24g_ms_last_ch
+	//rtn
+	branch g24_store_mem_ms_last_ch
+	
+g24_rx_auto_bind_config_kb:
+	call g24_dongle_bind_kb_payload_cfg
+	setarg offset_24g_kb_addr
+	call g24_set_rega_ifetch_4byte
+	//fetch 4,mem_24g_kb_addr
+	branch g24_rx_auto_addr_ch_search,blank
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	setarg offset_24g_kb_config_ch_once
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_kb_config_ch_once
+	call g24_kb_config_ch_once,blank
+	setarg offset_24g_kb_last_ch
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_kb_last_ch
+	call g24_store_mem_ch
+	//store 1,mem_24g_ch
+	add regc,offset_rssi_noise_kb_index,rega
+	ifetcht 1,rega	
+	//fetcht 1,mem_rssi_noise_kb_index
+	arg mem_rssi_noise_kb_buffer,rega
+	call rssi_noise_store
+	add regc,offset_rssi_noise_kb_index,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_kb_index
+	call g24_noise_rssi_average
+	add regc,offset_rssi_noise_kb_avg,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_kb_avg
+	sub temp,RSSI_THRESH_NOISE,null
+	nrtn positive
+	setarg offset_24g_kb_ch_number	
+	call g24_set_rega_ifetcht_1byte	
+	//fetcht 1,mem_24g_kb_ch_number
+	call g24_ch_temp_incre_size4 //map size =4
+	arg offset_24g_kb_ch_number,rega
+	call g24_set_contw_with_regb2	
+	istoret 1,contw
+	//storet 1,mem_24g_kb_ch_number
+g24_store_mem_kb_last_ch:
+	//store 1,mem_24g_kb_last_ch
+	arg offset_24g_kb_last_ch,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_kb_config_ch_once:
+	setarg 1
+	arg offset_24g_kb_config_ch_once,rega
+	call g24_set_contw_with_regb_store_1byte
+	//jam 1,mem_24g_kb_config_ch_once
+	arg 0,temp
+	call g24_ch_calc
+	//store 1,mem_24g_kb_last_ch
+	//rtn
+	branch g24_store_mem_kb_last_ch
+
+g24_rx_auto_bind_config_dongle:
+	call g24_dongle_bind_ms_payload_cfg
+	call g24_fetch_mem_rx_addr
+	//fetch 4,mem_24g_rx_addr
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	setarg offset_24g_dg_config_ch_once
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_dg_config_ch_once
+	call g24_dg_config_ch_once,blank
+	call g24_dg_store_config_ch
+	add regc,offset_rssi_noise_dg_index,rega
+	ifetcht 1,rega	
+	//fetcht 1,mem_rssi_noise_dg_index
+	arg mem_rssi_noise_dg_buffer,rega
+	call rssi_noise_store
+	add regc,offset_rssi_noise_dg_index,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_dg_index
+	call g24_noise_rssi_average
+	add regc,offset_rssi_noise_dg_avg,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_dg_avg
+	sub temp,RSSI_THRESH_NOISE,null
+	nrtn positive
+	setarg offset_24g_dg_ch_number	
+	call g24_set_rega_ifetcht_1byte	
+	//fetcht 1,mem_24g_dg_ch_number
+	call g24_ch_temp_incre_size4 //map size =4
+	arg offset_24g_dg_ch_number,rega
+	call g24_set_contw_with_regb2
+	istoret 1,contw
+	//storet 1,mem_24g_dg_ch_number
+g24_store_mem_dg_last_ch:
+	//store 1,mem_24g_dg_last_ch
+	//rtn
+	arg offset_24g_dg_last_ch,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+
+g24_dg_config_ch_once:
+	//jam 1,mem_24g_dg_config_ch_once
+	//fetch 1,mem_24g_dg_last_ch
+	//store 1,mem_24g_ch
+	//rtn
+	setarg 1
+	arg offset_24g_dg_config_ch_once,rega
+	call g24_set_contw_with_regb_store_1byte
+g24_dg_store_config_ch:
+	setarg offset_24g_dg_last_ch
+	call g24_set_rega_ifetch_1byte
+	branch g24_store_mem_ch
+
+
+g24_transmit_ack:
+//data type
+	add regc,offset_24g_rxbuf,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rxbuf
+	call g24_store_mem_data_type
+	//store 1,mem_24g_data_type
+//read len pid crc
+	call g24_read_len_pid_crc
+//read ack
+	call g24_fetch_mem_rxbuf_add1
+	//fetch 1,mem_24g_rxbuf+1
+	isolate1 bit_ack_24g,pdata
+	branch g24tx_no_ack,true
+g24tx_with_ack:
+	call g24_ackpayload_prep
+	call g24_transmit_prep
+	call g24_transmit
+g24tx_no_ack:
+	branch g24_end_of_packet
+
+g24_ackpayload_prep:
+	bpatch patch18_2,mem_patch18
+	add regc,offset_24g_datalen,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_datalen
+	setarg offset_24g_ackpayload_enable
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ackpayload_enable
+	rtn blank
+	setarg 0x06
+	add regc,offset_24g_datalen,contw
+	istore 1,contw
+	//jam 0x06,mem_24g_datalen
+	arg 0x06,loopcnt
+	setarg offset_24g_bind_payload
+	iadd regc,contr
+	//arg mem_24g_bind_payload,contr
+	add regc,offset_24g_txbuf,contw
+	//arg mem_24g_txbuf,contw
+	branch memcpy
+
+
+g24_receive_packet_start:
+	call g24_receive_transmit_ack
+	nbranch g24_rx_interrupt_clear,user3
+	branch g24_receive_packet_parse
+
+g24_receive_transmit_ack:
+	call g24_rx_interrupt_clear
+	call g24_receive_packet
+	nrtn user3
+	branch g24_transmit_ack
+
+g24_receive_packet_parse:
+	bpatch patch18_3,mem_patch18
+	call g24_receive_packet_parse_pid_crc
+	nbranch g24_rx_interrupt_clear,user
+	add regc,offset_24g_rxdata_length,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rxdata_length
+	branch g24_rx_interrupt_clear,blank
+	increase 2,pdata
+	iforce loopcnt
+	add regc,offset_24g_rxbuf,contr
+	//arg mem_24g_rxbuf,contr
+	setarg offset_24g_rxdata_temp
+	iadd regc,contw
+	//arg mem_24g_rxdata_temp,contw
+	call memcpy
+	call g24_set0_mem_mode_switch
+	//jam 0,mem_24g_mode_switch
+	call g24_fetch_mem_pair_mode
+	//fetch 1,mem_24g_pair_mode
+	call g24_enable_nodata_timer,blank
+	setarg offset_24g_rxdata_temp_add2
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_rxdata_temp+2
+	beq 0x01,g24_data_type1
+	beq 0x02,g24_data_type2
+	beq 0x03,g24_data_type3
+	beq 0xff,g24_data_attemp
+	branch g24_rx_interrupt_clear
+
+g24_receive_packet_parse_pid_crc:
+	call g24_head_ptr2regc
+	call disable_user
+	add regc,offset_24g_sta_pid,rega
+	ifetch 1,rega		
+	//fetch 1,mem_24g_sta_pid
+	add regc,offset_24g_last_pid,rega
+	ifetcht 1,rega		
+	//fetcht 1,mem_24g_last_pid
+	isub temp,null
+	ncall enable_user,zero
+	add regc,offset_24g_sta_pid,rega
+	ifetch 1,rega	
+	//fetch 1,mem_24g_sta_pid
+	add regc,offset_24g_last_pid,contw
+	istore 1,contw	
+	//store 1,mem_24g_last_pid
+	add regc,offset_24g_sta_crc,rega
+	ifetch 3,rega	
+	//fetch 3,mem_24g_sta_crc
+	add regc,offset_24g_last_crc,rega
+	ifetcht 3,rega	
+	//fetcht 3,mem_24g_last_crc
+	isub temp,null
+	ncall enable_user,zero
+	add regc,offset_24g_sta_crc,rega
+	ifetch 3,rega
+	//fetch 3,mem_24g_sta_crc
+	add regc,offset_24g_last_crc,contw
+	//store 3,mem_24g_last_crc
+	branch g24_contw_istore_3byte
+
+g24_data_type1:
+	call g24_ch_timer_reinit
+	call g24_fetch_mem_abort_pac
+	store 1,mem_temp
+	//fetch 1,mem_24g_abort_pac
+	call g24_fetcht_mem_rxdata_temp
+	fetch 1,mem_temp
+	//fetcht 1,mem_24g_rxdata_temp
+	isolate1 bit_abort,temp
+	setflag true,0,pdata
+	add regc,offset_24g_abort_pac,contw
+	istore 1,contw
+	//store 1,mem_24g_abort_pac
+	beq 1,g24_data_attemp_mouse
+	call g24_fetch_mem_hop_pac
+	//fetch 1,mem_24g_hop_pac
+	call g24_fetcht_mem_rxdata_temp
+	//fetcht 1,mem_24g_rxdata_temp
+	isolate1 bit_hop,temp
+	setflag true,0,pdata
+	call g24_store_mem_hop_pac
+	//store 1,mem_24g_hop_pac
+	add regc,offset_24g_cb_rxdata_type1,rega
+	ifetch 2,rega
+	//fetch 2,mem_24g_cb_rxdata_type1
+	branch callback_func
+
+dongle_rxdata_type1:
+	setarg MS_REPORT_ID
+	store 1,mem_usb_mouse_data	//report id
+	call g24_fetch_mem_rxdata_temp_add3_7byte
+	//fetch 7,mem_24g_rxdata_temp+3	//key
+	istore 7,contw
+	call g24_fetch_mem_rxdata_temp_add3_7byte
+	//fetch 7,mem_24g_rxdata_temp+3	//key
+	ncall g24_ms_enable_blank_data_forcibly,blank//get kb data
+	call g24_fetch_mem_rxdata_temp_add3_7byte
+	//fetch 7,mem_24g_rxdata_temp+3	//key
+	call g24_ms_disable_blank_data_forcibly,blank
+g24_data_type1_usbtx_enable:
+	jam USB_EP2_MS,mem_usb_ep2_data
+g24_data_type1_usbtx_enable_ep2:	
+	fetch 1,mem_usb_tx_enable
+	set1 2,pdata
+	store 1,mem_usb_tx_enable
+	rtn
+	
+g24_ms_enable_blank_data_forcibly:
+	setarg 1
+	call g24_store_mem_ms_blank_data_enable	
+	//jam 1,mem_24g_ms_blank_data_enable
+g24_ms_enable_blank_data_timer:
+	setarg TIMER_MS_BLANK_DELAY
+	arg TIMER_MS_BLANK,queue
+	branch timer_init
+g24_ms_disable_blank_data_forcibly:
+	call g24_set0_mem_ms_blank_data_enable
+	//jam 0,mem_24g_ms_blank_data_enable
+g24_ms_disable_blank_data_timer:	
+	setarg 0
+	arg TIMER_MS_BLANK,queue
+	branch timer_init
+	
+g24_data_type2:
+	call g24_fetcht_mem_rxdata_temp
+	//fetcht 1,mem_24g_rxdata_temp
+	isolate1 bit_abort,temp
+	branch g24_data_attemp_kbd,true
+	arg mem_usb_kb_data,contw
+	call g24_data_type2_reverse_data
+	fetch 8,mem_usb_kb_data
+	ncall g24_kb_enable_blank_data_forcibly,blank//get kb data
+	fetch 8,mem_usb_kb_data
+	call g24_kb_disable_blank_data_forcibly,blank
+	call g24_head_ptr2regc
+	fetch 8,mem_usb_kb_data
+	arg offset_24g_kb_data_sta_data,rega
+	call g24_set_contw_with_temp
+	istore 8,contw
+	//store 8,mem_24g_kb_data_sta_data
+	setarg offset_24g_kb_data_last_data
+	iadd regc,rega
+	ifetcht 8,rega
+	//fetcht 8,mem_24g_kb_data_last_data
+	isub temp,null
+	ncall g24_kb_data_dispose,zero
+	setarg offset_24g_kb_data_sta_data
+	iadd regc,rega
+	ifetch 8,rega
+	//fetch 8,mem_24g_kb_data_sta_data
+	arg offset_24g_kb_data_last_data,rega
+	call g24_set_contw_with_temp
+	istore 8,contw
+	//store 8,mem_24g_kb_data_last_data
+	branch g24_rx_interrupt_clear
+
+g24_data_type2_reverse_data:
+	setarg offset_24g_rxdata_temp_add2
+	iadd regc,contr
+	//arg mem_24g_rxdata_temp+2,contr
+	arg 9,loopcnt
+	branch reverse_byte
+
+g24_kb_enable_blank_data_forcibly:
+	setarg 1
+	call g24_store_mem_kb_blank_data_enable
+	//jam 1,mem_24g_kb_blank_data_enable
+g24_kb_enable_blank_data_timer:	
+	setarg TIMER_KB_BLANK_DELAY
+	arg TIMER_KB_BLANK,queue
+	branch timer_init
+
+g24_kb_disable_blank_data_forcibly:
+	call g24_set0_mem_kb_blank_data_enable
+	//jam 0,mem_24g_kb_blank_data_enable
+g24_kb_disable_blank_data_timer:	
+	setarg 0
+	arg TIMER_KB_BLANK,queue
+	branch timer_init
+
+g24_kb_data_dispose:
+g24_kb_data_into_ep1_fifo:
+	jam USB_EP1_KB,mem_usb_ep1_data
+	fetch 1,mem_usb_tx_enable
+	set1 1,pdata
+	store 1,mem_usb_tx_enable
+	rtn
+
+g24_data_type3:
+	arg mem_usb_kb_multikey,contw
+	call g24_data_type2_reverse_data
+	fetch 2,mem_usb_kb_multikey+1
+	ncall g24_kb_mul_enable_blank_data_forcibly,blank//get multikey data
+	fetch 2,mem_usb_kb_multikey+1
+	call g24_kb_mul_disable_blank_data_forcibly,blank
+	call g24_head_ptr2regc
+	fetch 3,mem_usb_kb_multikey
+	arg offset_24g_kb_multikey_sta_data,rega
+	call g24_set_contw_with_temp_store_3byte
+	//store 3,mem_24g_kb_multikey_sta_data
+	setarg offset_24g_kb_multikey_last_data
+	iadd regc,rega
+	ifetcht 3,rega
+	//fetcht 3,mem_24g_kb_multikey_last_data
+	isub temp,null
+	ncall g24_kb_mul_data_into_ep2_fifo,zero
+	setarg offset_24g_kb_multikey_sta_data
+	iadd regc,rega
+	ifetch 3,rega
+	//fetch 3,mem_24g_kb_multikey_sta_data
+	arg offset_24g_kb_multikey_last_data,rega
+	call g24_set_contw_with_temp_store_3byte
+	//store 3,mem_24g_kb_multikey_last_data
+	branch g24_rx_interrupt_clear
+
+g24_kb_mul_data_into_ep2_fifo:
+	jam USB_EP2_MULTIKEY,mem_usb_ep2_data
+	branch g24_data_type1_usbtx_enable_ep2
+
+g24_kb_mul_enable_blank_data_forcibly:
+	setarg 1
+	call g24_store_mem_kb_mul_blank_data_enable
+	//jam 1,mem_24g_kb_mul_blank_data_enable
+g24_kb_mul_enable_blank_data_timer:	
+	setarg TIMER_KB_MUL_BLANK_DELAY
+	arg TIMER_KB_MUL_BLANK,queue
+	branch timer_init
+
+g24_kb_mul_disable_blank_data_forcibly:
+	call g24_set0_mem_kb_mul_blank_data_enable
+	//jam 0,mem_24g_kb_mul_blank_data_enable
+g24_kb_mul_disable_blank_data_timer:	
+	setarg 0
+	arg TIMER_KB_MUL_BLANK,queue
+	branch timer_init
+	
+g24_data_attemp:
+	call g24_fetch_mem_rxdata_temp_add3_1byte
+	//fetch 1,mem_24g_rxdata_temp+3
+	beq DATATYPE_MOUSE,g24_data_attemp_mouse
+	beq DATATYPE_KEYBOARD,g24_data_attemp_kbd
+	rtn
+g24_data_attemp_mouse:
+	setarg offset_24g_rxdata_temp_add4
+	call g24_set_rega_ifetch_4byte
+	arg offset_24g_mouse_addr,rega
+	call g24_set_contw_with_temp
+	//fetch 4,mem_24g_rxdata_temp+4
+	//store 4,mem_24g_mouse_addr
+	branch g24_contw_istore_4byte
+
+g24_data_attemp_kbd:
+	setarg offset_24g_rxdata_temp_add4
+	call g24_set_rega_ifetch_4byte
+	arg offset_24g_kb_addr,rega
+	call g24_set_contw_with_temp
+	//fetch 4,mem_24g_rxdata_temp+4
+	//store 4,mem_24g_kb_addr
+	branch g24_contw_istore_4byte
+
+g24_store_mem_24g_mode:
+	call g24_head_ptr2regc
+	add regc,offset_24g_mode,contw
+	istore 1,contw
+	rtn
+
+g24_fetch_mem_device_addr:
+	call g24_head_ptr2regc
+	add regc,offset_24g_device_addr,rega
+	branch g24_rega_ifetch_4byte
+g24_store_mem_device_addr:
+	call g24_head_ptr2regc
+	add regc,offset_24g_device_addr,contw
+	branch g24_contw_istore_4byte
+
+g24_fetch_mem_addr:
+	add regc,offset_24g_addr,rega
+	branch g24_rega_ifetch_4byte
+g24_store_mem_addr:
+	add regc,offset_24g_addr,contw
+g24_contw_istore_4byte:	
+	istore 4,contw
+	rtn
+
+g24_store_mem_ch:
+	add regc,offset_24g_ch,contw
+	branch g24_contw_istore_1byte
+
+g24_set0_mem_pid:
+	setarg 0
+g24_store_mem_pid:
+	call g24_head_ptr2regc
+	add regc,offset_24g_pid,contw
+	branch g24_contw_istore_1byte
+
+g24_store_mem_txpayload:
+	add regc,offset_24g_txpayload,contw
+	branch g24_contw_istore_1byte
+
+g24_set4_mem_max_retry:
+	setarg 4
+g24_store_mem_max_retry:
+	add regc,offset_24g_max_retry,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_data_type:
+	add regc,offset_24g_data_type,rega
+	branch g24_rega_ifetch_1byte
+g24_store_mem_data_type:
+	add regc,offset_24g_data_type,contw
+	branch g24_contw_istore_1byte
+
+g24_set2_mem_sync_cnt:
+	setarg 2
+g24_store_mem_sync_cnt:
+	add regc,offset_24g_sync_cnt,contw
+	branch g24_contw_istore_1byte
+
+g24_set1_mem_rf_last_sta:
+	setarg 1
+g24_store_mem_rf_last_sta:
+	call g24_head_ptr2regc
+	add regc,offset_24g_rf_last_sta,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_hop_pac:
+	call g24_head_ptr2regc
+	add regc,offset_24g_hop_pac,rega
+	branch g24_rega_ifetch_1byte
+g24_set1_mem_hop_pac:
+	setarg 1
+g24_store_mem_hop_pac:
+	call g24_head_ptr2regc
+	add regc,offset_24g_hop_pac,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_abort_pac:
+	call g24_head_ptr2regc
+	add regc,offset_24g_abort_pac,rega
+	branch g24_rega_ifetch_1byte
+g24_set1_mem_abort_pac:
+	setarg 1
+g24_store_mem_abort_pac:
+	call g24_head_ptr2regc
+	add regc,offset_24g_abort_pac,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_pairing_sm:
+	call g24_head_ptr2regc
+	add regc,offset_24g_pairing_sm,rega
+	branch g24_rega_ifetch_1byte
+g24_store_mem_pairing_sm:
+	add regc,offset_24g_pairing_sm,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_rf_hop_ch:
+	add regc,offset_24g_rf_hop_ch,rega
+	branch g24_rega_ifetch_1byte
+g24_set0_mem_rf_hop_ch:
+	setarg 0
+g24_store_mem_rf_hop_ch:
+	add regc,offset_24g_rf_hop_ch,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_rf_work_stage:
+	add regc,offset_24g_rf_work_stage,rega
+	branch g24_rega_ifetch_1byte
+	
+g24_fetch_mem_rxbuf_add1:
+	add regc,offset_24g_rxbuf_add1,rega
+	branch g24_rega_ifetch_1byte
+
+g24_fetch_mem_check_dongle_times:
+	add regc,offset_24g_check_dongle_times,rega
+	branch g24_rega_ifetch_1byte
+g24_set0_mem_check_dongle_times:
+	setarg 0
+g24_store_mem_check_dongle_times:
+	call g24_head_ptr2regc
+	add regc,offset_24g_check_dongle_times,contw
+	branch g24_contw_istore_1byte
+
+g24_store_mem_tx_power:
+	call g24_head_ptr2regc
+	add regc,offset_tx_power_temp,rega
+	ifetch 1,rega
+g24_store_mem_txpower:
+	store 1,mem_tx_power
+	rtn
+
+g24_store_mem_tx_power_temp:
+	call g24_head_ptr2regc
+	fetch 1,mem_tx_power
+	//store 1,mem_tx_power_temp
+	add regc,offset_tx_power_temp,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_power_ctrl_pac:	
+	add regc,offset_power_ctrl_packet_cnt,rega
+	branch g24_rega_ifetch_1byte
+
+g24_store_mem_power_ctrl_level:
+	add regc,offset_power_ctrl_level,contw
+	branch g24_contw_istore_1byte
+
+g24_fetcht_mem_rxdata_temp:
+	setarg offset_24g_rxdata_temp
+g24_set_rega_ifetcht_1byte:	
+	iadd regc,rega
+	ifetcht 1,rega
+	rtn
+
+g24_fetch_mem_rf_laststa:
+	setarg offset_24g_rf_laststa
+	branch g24_set_rega_ifetch_1byte
+g24_set0_mem_rf_laststa:
+	setarg 0
+g24_store_mem_rf_laststa:
+	arg offset_24g_rf_laststa,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_fetch_mem_rx_addr:
+	setarg offset_24g_rx_addr
+g24_set_rega_ifetch_4byte:	
+	call g24_set_rega
+g24_rega_ifetch_4byte:
+	ifetch 4,rega
+	rtn
+
+g24_fetch_mem_time_slice:
+	setarg offset_24g_time_slice
+	branch g24_set_rega_ifetch_1byte
+g24_set0_mem_time_slice:
+	setarg 0
+g24_store_mem_time_slice:
+	arg offset_24g_time_slice,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_set0_mem_mode_switch:
+	setarg 0
+g24_store_mem_mode_switch:
+	arg offset_24g_mode_switch,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_store_mem_bind_payload:
+	arg offset_24g_bind_payload,rega
+	branch g24_set_contw_with_regb_store_1byte	
+	
+g24_fetch_mem_bind_device_status:
+	setarg offset_dongle_bind_device_status
+	branch g24_set_rega_ifetch_1byte
+g24_store_mem_bind_device_status:
+	arg offset_dongle_bind_device_status,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_fetch_mem_dongle_work_mode:
+	setarg offset_dongle_work_mode
+	branch g24_set_rega_ifetch_1byte
+g24_set_work_mem_dongle_work_mode:
+	setarg DONGLE_WORK
+g24_store_mem_dongle_work_mode:
+	arg offset_dongle_work_mode,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_fetch_mem_dongle_mode_init:
+	setarg offset_dongle_mode_init
+	branch g24_set_rega_ifetch_1byte
+g24_set0_mem_dongle_mode_init:
+	setarg CLEAR_INIT
+g24_store_mem_dongle_mode_init:
+	arg offset_dongle_mode_init,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_set0_mem_ackpayload_enable:
+	setarg 0
+g24_store_mem_ackpayload_enable:
+	arg offset_24g_ackpayload_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+g24_set1_mem_ackpayload_enable:
+	setarg 1
+	branch g24_store_mem_ackpayload_enable
+
+g24_fetch_mem_rxdata_temp_add3_7byte:
+	setarg offset_24g_rxdata_temp_add3
+	call g24_set_rega
+	ifetch 7,rega
+	rtn
+
+g24_fetch_mem_nodata_timer_enable:
+	setarg offset_24g_nodata_timer_enable
+	branch g24_set_rega_ifetch_1byte
+g24_set0_mem_nodata_timer_enable:
+	setarg 0
+g24_store_mem_nodata_timer_enable:
+	arg offset_24g_nodata_timer_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_set0_mem_ms_blank_data_enable:
+	setarg 0
+g24_store_mem_ms_blank_data_enable:
+	arg offset_24g_ms_blank_data_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_set0_mem_kb_blank_data_enable:
+	setarg 0
+g24_store_mem_kb_blank_data_enable:
+	arg offset_24g_kb_blank_data_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_set0_mem_kb_mul_blank_data_enable:
+	setarg 0
+g24_store_mem_kb_mul_blank_data_enable:
+	arg offset_24g_kb_mul_blank_data_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_store_mem_power_ctrl_threshold_up:
+	arg offset_power_ctrl_threshold_up,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_store_mem_power_ctrl_threshold_down:
+	arg offset_power_ctrl_threshold_down,rega
+g24_set_contw_with_regb_store_1byte:
+	call g24_set_contw_with_regb
+g24_contw_istore_1byte:
+	istore 1,contw
+	rtn
+
+g24_fetch_mem_pair_mode:
+	setarg offset_24g_pair_mode
+	branch g24_set_rega_ifetch_1byte
+
+g24_store_mem_pair_mode:
+	arg offset_24g_pair_mode,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_store_mem_pair_txpower:
+	setarg offset_24g_pair_txpower
+	call g24_set_rega_ifetch_1byte
+	branch g24_store_mem_txpower
+
+g24_fetch_mem_rxdata_temp_add3_1byte:
+	setarg offset_24g_rxdata_temp_add3
+	branch g24_set_rega_ifetch_1byte
+
+g24_set_contw_with_temp:
+	copy pdata,temp
+	copy rega,pdata
+	iadd regc,contw
+	copy temp,pdata
+	rtn
+	
+g24_set_contw_with_temp_store_3byte:
+	call g24_set_contw_with_temp
+g24_contw_istore_3byte:	
+	istore 3,contw
+	rtn
+
+g24_set_contw_with_regb:
+	call g24_head_ptr2regc
+g24_set_contw_with_regb2:
+	copy pdata,regb
+	copy rega,pdata
+	iadd regc,contw
+	copy regb,pdata
+	rtn
+
+g24_set_rega:
+	call g24_head_ptr2regc
+	iadd regc,rega
+	rtn
+
+g24_set_rega_ifetch_1byte:
+	call g24_set_rega
+g24_rega_ifetch_1byte:
+	ifetch 1,rega
+	rtn
+
+g24_set_rega_ifetcht_4byte:
+	call g24_set_rega
+	ifetcht 4,rega
+	rtn
+
+g24_mem_set0:
+	setarg 0
+	branch g24_contw_istore_1byte
+
+
+
+app_init:
+	bpatch patch18_4,mem_patch18
+	fetch 1,mem_device_option
+	branch app_init,blank				/* wait ram to be initialized */
+//	beq dvc_op_ukey,le_ukey_init
+	beq dvc_op_dongle,dongle_init
+	beq dvc_op_AntiLost,antilost_init
+	beq dvc_op_shutter,shutter_init
+	beq dvc_op_module,module_init
+	beq dvc_op_car,car_init
+	beq dvc_op_remote_car,remote_car_init
+	bbit1 dvc_op_mouse,mouse_init
+	rtn
+	
+app_lpm_init:
+	bpatch patch18_5,mem_patch18
+	jam 0,mem_tester_emulate
+	jam 0,mem_debug_config
+	jam 0, mem_lch_code
+	setarg 0
+	store 5,mem_sp_state_start
+	fetch 1,mem_device_option
+	branch app_lpm_init,blank				/* wait ram to be initialized */
+	beq dvc_op_module,module_lpm_init
+app_lpm_init0:
+	rtn
+
+	
+app_process_idle:
+	call ui_dispatch
+	call check_51cmd
+	call app_process_bb_event
+	fetch 2,mem_cb_idle_process
+	branch callback_func
+	
+app_process_bt:
+	fetch 2,mem_cb_bt_process
+	branch callback_func
+	
+app_process_ble:
+	fetch 2,mem_cb_le_process
+	branch callback_func
+
+app_process_bb_event:
+	bpatch patch18_6,mem_patch18
+	//return if c51 need to process bb event
+	arg mem_ipc_fifo_bt2c51,rega
+	call fifo_out
+	rtn blank
+	//reaching here mains c51 cannot get bb event.
+	copy pdata,regc
+	call app_event_normal_process
+	branch app_process_bb_event_priority
+	
+app_discard_event:
+	arg 0,regc
+	rtn
+
+//************************************************//
+//*APP BB EVENT NORMAL PROCESS**//
+//************************************************//
+app_event_normal_process:
+	beq BT_EVT_BB_CONNECTED,app_evt_bt_conn
+	beq BT_EVT_BUTTON_LONG_PRESSED,app_evt_button_long_pressed
+	beq BT_EVT_SETUP_COMPLETE,app_evt_setup_complete
+	beq BT_EVT_HID_HANDSHAKE,app_evt_hid_handshake
+	beq BT_EVT_HID_CONNECTED,app_bb_event_hid_connected
+	beq BT_EVT_RECONN_FAILED,app_bb_event_reconn_failed
+	beq BT_EVT_BB_DISCONNECTED,app_bb_event_bb_disconn
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,app_bb_event_reconn_failed	
+	beq BT_EVT_LE_CONNECTED,app_le_event_bb_connected
+	beq BT_EVT_LE_DISCONNECTED,app_le_event_bb_disconn
+	beq BT_EVT_RECONN_STARTED,app_event_reconn_start
+	beq BT_EVT_ENTER_SNIFF,app_event_enter_sniff
+	beq BT_EVT_EXIT_SNIFF,app_event_exit_sniff
+	
+	beq BT_EVT_ML2CAP_CONN_REFUSED,app_event_ml2cap_conn_refused
+	beq BT_EVT_LINKKEY_GENERATE,app_event_linkkey_generate
+	beq BT_EVT_SWITCH_FAIL_MASTER,app_event_switch_fail_master
+	beq BT_EVT_SWITCH_SUCCESS_MASTER,app_event_switch_success
+	rtn
+
+
+app_evt_bt_conn:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_CONNECTED,pdata
+	store 2,mem_ui_state_map
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set0 APP_DISC_BY_BUTTON ,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+app_event_switch_success:
+	jam 0,mem_switch_fail_master_count
+	rtn	
+
+app_event_switch_fail_master:
+	fetch 1,mem_switch_fail_master_count
+	increase 1,pdata
+	store 1,mem_switch_fail_master_count
+	sub pdata,1,null
+	branch app_bt_role_switch,positive
+	jam 0,mem_switch_fail_master_count
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_SWITCH_FAIL,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	branch app_bt_disconnect
+	
+app_process_bb_event_priority:
+	fetch 2,mem_cb_bb_event_process
+	branch callback_func
+
+app_check_wake_lock:
+	fetch 2,mem_cb_check_wakelock
+	branch callback_func
+	
+app_will_enter_lpm:
+	fetch 2,mem_cb_before_lpm
+	branch callback_func
+
+app_event_linkkey_generate:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_AFTER_PAIRING ,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	branch app_bt_store_reconn_info
+	
+app_event_reconn_start:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_RECONNECT,pdata
+	store 2,mem_ui_state_map
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_AFTER_RECONN,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+app_evt_setup_complete:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_SETUP_COMPLETE,pdata
+	store 2,mem_ui_state_map
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_AFTER_SETUP_DONE,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+app_evt_hid_handshake:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_HID_HANDSHAKE,pdata
+	store 2,mem_ui_state_map
+	rtn
+	
+app_event_enter_sniff:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_SNIFF,pdata
+	store 2,mem_ui_state_map
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_AFTER_SNIFF,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+	
+app_event_exit_sniff:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BT_SNIFF,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+app_le_event_bb_connected:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BLE_CONNECTED,pdata
+	store 2,mem_ui_state_map
+	rtn
+	
+app_le_event_bb_disconn:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BLE_CONNECTED,pdata
+	store 2,mem_ui_state_map
+	branch app_lpm_mult_disable
+	
+app_bb_event_hid_connected:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_HID_CONN,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+app_evt_button_long_pressed:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_BY_BUTTON,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+	
+app_event_ml2cap_conn_refused:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_L2CAP_REFUSED,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	branch  app_bt_disconnect
+
+
+app_evt_timer:
+	bpatch patch18_7,mem_patch18
+	store 1,mem_app_evt_timer_count
+app_evt_100ms_loop:
+	fetch 1,mem_app_evt_timer_count
+	rtn blank
+	increase -1,pdata
+	store 1,mem_app_evt_timer_count
+	call ui_button_polling
+	call app_lpm_wake_auto_lock_timer
+	call app_unsniff_delay_timer
+	call app_discovery_timer
+	call flash_write_spi_sm_timer
+	fetch 2,mem_cb_event_timer
+	call callback_func
+	branch app_evt_100ms_loop
+
+
+//regc:timer addr
+//regb:timer up call back fuction
+timer_single_step:
+	ifetch 1,regc
+	rtn blank
+	pincrease -1
+	istore 1,regc
+	nrtn blank
+	copy regb,pdata
+	branch callback_func
+
+//regc:timer addr
+//regb:timer up call back fuction
+timer_single_step_2B:
+	ifetch 2,regc
+	rtn blank
+	pincrease -1
+	istore 2,regc
+	nrtn blank
+	copy regb,pdata
+	branch callback_func
+	
+app_power_timer:
+	fetcht 2,mem_power_param_ptr
+	add temp,power_timer_offset,regc
+	arg app_power_timer_timeout,regb
+	branch timer_single_step
+	
+app_power_timer_timeout:
+	call app_got_power_state_common
+	beq POWER_STARTING,app_enter_power_stanby_state
+app_enter_power_off_state:
+	branch app_enter_hibernate
+app_enter_power_stanby_state:
+	setarg POWER_STANDBY
+	istore 1,regc
+	add temp,power_standby_cb_offset,regb
+app_power_cb_common:
+	ifetch 2,regb
+	branch callback_func
+
+app_unsniff_delay_timer:
+	arg mem_unsniff2sniff_timer_count,regc
+	arg app_unsniff_delay_timeout,regb
+	branch timer_single_step
+	
+app_unsniff_delay_timeout:
+	call context_check_idle
+	branch app_bt_enter_sniff,zero
+	rtn
+
+
+app_discovery_timer:
+	arg mem_discovery_timeout_timer_count,regc
+	arg app_discovery_timeout,regb
+	branch timer_single_step_2B
+	
+app_discovery_timeout:
+	call app_bt_stop_discovery
+	call app_led_off
+	fetch 2,mem_cb_discovry_timeout
+	branch callback_func
+
+	
+app_bb_event_reconn_failed:
+	call app_disconn_reason_flag_clear
+app_clear_reconnect_flag:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BT_RECONNECT,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+app_bb_event_bb_disconn:
+	jam 0,mem_unsniff2sniff_timer_count
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_RECONNECT,app_bb_event_bb_reconn_disconn
+	isolate0 UI_STATE_BT_SETUP_COMPLETE,pdata
+ 	call app_discard_event,true
+app_bb_event_bb_reconn_disconn:
+	bpatch patch19_0,mem_patch19
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BT_CONNECTED,pdata
+	set0 UI_STATE_BT_SETUP_COMPLETE,pdata
+	set0 UI_STATE_BT_HID_CONN,pdata
+	set0 UI_STATE_BT_HID_HANDSHAKE,pdata
+	set0 UI_STATE_BT_RECONNECT,pdata
+	store 2,mem_ui_state_map
+	branch app_lpm_mult_disable
+	
+app_bb_hibernate:
+	call app_disconn_reason_clear
+	branch app_enter_hibernate
+
+	
+app_disconn_reason_clear:
+	setarg 0
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	rtn
+app_disconn_reason_flag_clear:
+	setarg 0
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+app_disconn_reason_collect_bt:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	setarg 0
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+	
+app_disconn_reason_collect_ble:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_BLE,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	setarg 0
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+	
+//************************************************//
+//********APP SHARED FUNCSIONS*******//
+//************************************************//
+
+
+app_check_sniff:
+	fetch 1,mem_ui_state_map
+	isolate1 UI_STATE_BT_SNIFF,pdata
+	rtn
+
+//*****************************************//
+//*****************API********************//
+//*****************************************//
+//app_clearflag_store:
+//	setarg 0
+//	branch app_flag_store
+app_initflag_store:
+	setarg EEPROM_INIT_FLAG
+app_flag_store:
+	store 2,mem_timeup
+	bpatch patch19_1,mem_patch19
+	arg 2,temp
+	arg mem_timeup,rega
+	arg eeprom_module_init_flag,regb
+	branch iicd_write_eep_data
+
+//initflag is in eeprom to sure is eeprom nead to init
+app_initflag_check:
+	bpatch patch19_2,mem_patch19
+	arg 2,temp
+	arg mem_pdatatemp,rega
+	arg eeprom_module_init_flag,regb
+	call iicd_read_eep_data
+	fetch 2,mem_pdatatemp
+	arg EEPROM_INIT_FLAG,temp
+	isub  temp,null
+	rtn
+
+
+app_start_auto_sniff:
+	fetch 1,mem_unsniff2sniff_timer
+	store 1,mem_unsniff2sniff_timer_count
+	rtn	
+	
+app_get_lpm_wake_lock:
+	arg wake_lock_app,queue
+	branch lpm_get_wake_lock
+
+app_put_lpm_wake_lock:
+	arg wake_lock_app,queue
+	branch lpm_put_wake_lock
+	
+app_lpm_wake_auto_lock:
+	jam  LPM_WAKE_UP_DELAY_TIMER,mem_wake_up_delay_timer
+	branch app_get_lpm_wake_lock
+	
+app_lpm_wake_auto_lock_timer:
+	arg mem_wake_up_delay_timer,regc
+	arg app_put_lpm_wake_lock,regb
+	branch timer_single_step
+
+app_l2cap_flow_control_enable:
+	jam L2CAP_FLOW_CTRL_ENABLE,mem_l2cap_flow_ctrl_flag
+	rtn
+
+app_l2cap_flow_control_disable:
+	jam L2CAP_FLOW_CTRL_DISABLE,mem_l2cap_flow_ctrl_flag
+	rtn
+	
+app_bt_set_pincode:
+	jam BT_CMD_SET_PIN_CODE,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_bt_role_switch:
+	jam BT_CMD_ROLE_SWITCH,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_bt_start_reconnect:
+	bpatch patch19_3,mem_patch19
+	fetch 1,mem_app_connection_options
+	store 1,mem_connection_options
+	jam APP_FLAG_RECONNECT,mem_reconnect_flag
+	jam BT_CMD_RECONNECT,mem_fifo_temp
+	branch ui_ipc_send_cmd	
+	
+app_bt_reconnect_cancel:
+	jam BT_CMD_BB_RECONN_CANCEL,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_bt_disconnect:
+	jam BT_CMD_DISCONNECT,mem_fifo_temp
+	branch ui_ipc_send_cmd	
+
+app_bt_start_discovery_short:
+	fetch 2,mem_discovery_timeout
+	store 2,mem_discovery_timeout_timer_count
+app_bt_start_discovery_led_blink:
+	call app_led_start_blink
+app_bt_start_discovery:
+	jam BT_CMD_START_DISCOVERY,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_bt_stop_discovery:
+	setarg 0
+	store 2,mem_discovery_timeout_timer_count
+	jam BT_CMD_STOP_DISCOVERY,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_start_direct_adv:
+	jam BT_CMD_START_DIRECT_ADV,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_ble_stop_direct_adv:
+	jam BT_CMD_STOP_DIRECT_ADV,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_stop_adv:
+	jam BT_CMD_STOP_ADV,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_start_adv:	
+	jam BT_CMD_START_ADV,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_start_scan:
+	jam BT_CMD_LE_START_SCAN,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_stop_scan:
+	jam BT_CMD_LE_STOP_SCAN,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_start_conn:
+	jam BT_CMD_LE_START_CONN,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_disconnect:
+	jam BT_CMD_LE_DISCONNECT,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_led_start_blink:	
+	jam BT_CMD_LED_BLINK,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_led_on:
+	jam BT_CMD_LED_ON,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_led_stop_blink:
+app_led_off:
+	jam BT_CMD_LED_OFF,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_enter_hibernate:
+	jam BT_CMD_ENTER_HIBERNATE,mem_fifo_temp 
+	branch ui_ipc_send_cmd
+	
+app_bt_sniff_exit:
+	jam BT_CMD_EXIT_SNIFF,mem_fifo_temp
+	branch  ui_ipc_send_cmd
+	
+app_bt_enter_sniff:
+	jam BT_CMD_ENTER_SNIFF,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_ble_store_reconn_info:
+	jam BT_CMD_STORE_RECONN_INFO_LE,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_bt_store_reconn_info:
+	jam BT_CMD_STORE_RECONN_INFO_BT,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_store_reconn_info:
+	jam BT_CMD_STORE_RECONN_INFO,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_lpm_mult_enable:
+	set1 mark_lpm_mult_enable,mark
+	rtn
+
+app_lpm_mult_disable:
+	set0 mark_lpm_mult_enable,mark
+	rtn
+
+
+/*
+
+mem_power_param struct
+{
+	usigned char     mem_power_state
+	usigned char     mem_power_timer
+	usigned char	 mem_power_off_timeout
+	usigned char	 mem_power_starting_timeout
+	usigned long	 mem_power_off_cb
+	usigned long	 mem_power_starting_cb
+	usigned long	 mem_power_standby_cb
+	usigned long 	 mem_ui_butten_up_cb
+}
+    	functions:power state switching by mem_app_power_timer timeout or by button_long_pressed event
+    	(power off -> power starting->power standby->power off) and power timer initialization 
+ input parameters:mem_power_param_ptr should be point to the variable(mem_power_param) address where the input parameters stored in with its format
+output parameters:switched power state will be stored in variable mem_power_state*/
+app_button_long_pressed:
+	call app_got_power_state_common
+	beq POWER_STANDBY,app_power_shutting_down
+app_power_starting:
+	setarg POWER_STARTING
+	istore 1,regc
+	add temp,power_starting_timeout_offset,rega
+	add temp,power_starting_cb_offset,regb
+app_power_common:
+	ifetcht 1,rega
+	increase 1,regc
+	istoret 1,regc
+	branch app_power_cb_common
+	
+app_power_shutting_down:
+	setarg POWER_OFF
+	istore 1,regc
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,app_power_off_end
+	call app_ble_disconnect
+app_power_off_end:
+	fetcht 2,mem_power_param_ptr
+	add temp,power_off_timeout_offset,rega
+	add temp,power_off_cb_offset,regb
+	branch app_power_common
+	
+app_got_power_state_common:
+	fetcht 2,mem_power_param_ptr
+	add temp,power_state_offset,regc
+	ifetch 1,regc
+	rtn
+
+app_event_button_up:
+	call app_got_power_state_common
+	bne POWER_OFF,app_power_release
+	branch app_enter_hibernate
+app_power_release:
+	add temp,ui_butten_up_cb_offset,regb
+	branch app_power_cb_common
+
+antilost_init:
+	rtn wake	
+	jam 0x00,core_gpio_sel1//1: GPIO[26:25] is two wire SPI, 2: GPIO[26:23] is SPI, 3: GPIO[26:23] is PCM
+	setarg antilost_le_before_hibernate
+	store 2,mem_cb_before_hibernate
+	setarg keyscan_process_lpm_before
+	store 2,mem_cb_before_lpm
+	setarg antilost_idle_process	//
+	store 2,mem_cb_idle_process
+	setarg antilost_le_conn_process	//
+	store 2,mem_cb_le_process
+	setarg antilost_bb_event_process 
+	store 2,mem_cb_bb_event_process
+	setarg antilost_le_bb_event_timer
+	store 2,mem_cb_event_timer
+	setarg antilost_le_notification
+	store 2,mem_cb_ble_transmit
+	setarg antilost_lpm_lock_process
+	store 2,mem_cb_check_wakelock
+	setarg antilost_le_receive_data_process
+	store 2,mem_cb_att_write
+	bpatch patch19_4,mem_patch19
+	call antilost_buzzer_pwm_init
+	call keyscan_key_init
+	call antilost_adc_init
+	call ui_led_init_global
+	call ui_button_init
+	setarg antilost_key_up_down
+	store 2,mem_cb_antl_key
+	setarg antilost_power_off_cb
+	store 2,mem_antl_power_off_cb
+	setarg antilost_power_starting_cb
+	store 2,mem_antl_power_starting_cb
+	setarg antilost_power_standby_cb
+	store 2,mem_antl_power_standby_cb
+	setarg antilost_led_on_cb
+	store 2,mem_antl_led_cb_on
+	setarg antilost_led_off_cb
+	store 2,mem_antl_led_cb_off
+	setarg antilost_buzzer_on
+	store 2,mem_antl_buzzer_cb_on
+	setarg antilost_buzzer_off
+	store 2,mem_antl_buzzer_cb_off
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+	branch app_enter_hibernate
+
+antilost_le_before_hibernate:
+	call antilost_led_buzzer_stop_blink
+	branch  app_enter_hibernate
+
+antilost_le_notification:
+	call le_fifo_check_nearly_full
+	nrtn blank
+	arg mem_temp_block5,rega
+	call queue_pop
+	nrtn user
+	arg mem_temp_block5,contr
+	branch le_send_notify_from_list
+
+antilost_power_standby_cb:
+	fetch 2,mem_antl_le_sleep_timeout
+	store 2,mem_antl_le_sleep_timer
+	jam 1,mem_antl_key_scan_enable
+	branch antilost_fast_adv_start
+	
+antilost_lpm_lock_process:
+	fetch 1,mem_antl_key_state
+	beq 1,antilost_lpm_ctrl_for_led_buzzer
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,antilost_lpm_ctrl_for_led_buzzer
+	fetch 1,mem_antl_lost_mode
+	beq 1,app_get_lpm_wake_lock
+	fetch 1, mem_antl_queue_curr_num
+	nbranch app_get_lpm_wake_lock,blank 
+	branch app_put_lpm_wake_lock
+	
+antilost_lpm_ctrl_for_led_buzzer:
+	fetch 1,mem_antl_led_state
+	fetcht 1,mem_antl_buzzer_state
+	ior temp,pdata
+	beq 1,app_get_lpm_wake_lock
+	branch app_put_lpm_wake_lock
+
+antilost_bb_event_process:
+	copy regc,pdata
+	beq BT_EVT_BUTTON_UP,app_event_button_up
+	beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed
+	beq BT_EVT_LE_CONNECTED,antilost_le_process_conn
+	beq BT_EVT_LE_DISCONNECTED,antilost_le_process_discon
+	beq BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,antilost_le_conn_param_update_rsp_recieved
+	rtn
+antilost_le_conn_param_update_rsp_recieved:
+	fetch 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	beq BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_REJECTED,antilost_le_conn_param_rejected
+antilost_le_conn_param_accepted:
+	fetch 2,mem_le_new_connslavelatency
+	branch antilost_master_nonsupport_latency,blank
+antilost_le_conn_param_updata_procedure_sucsess:
+	jam CONN_PARAM_UPDATA_PROCEDURE_COMPLETE,mem_antl_conn_updata_procedure_state
+	jam 60,mem_antl_conn_update_timer
+	rtn
+
+antilost_le_conn_param_rejected:
+	fetch 2,mem_le_latency
+	branch antilost_conn_param_updata_procedure_faild,blank
+antilost_conn_param_retransimiting:
+	jam CONN_PARAM_UPDATA_PROCEDURE_STARTING,mem_antl_conn_updata_procedure_state
+	fetcht 2,mem_interval_increment
+	fetch 2,mem_le_interval_min
+	iadd temp,pdata
+	store 2,mem_le_interval_min
+	copy pdata,rega
+	fetch 2,mem_le_interval_max
+	iadd temp,pdata
+	store 2,mem_le_interval_max
+	iadd rega,pdata
+	rshift pdata,temp
+	fetch 2,mem_antl_le_unnormal_interval_max
+	idiv temp
+	call wait_div_end
+	quotient pdata
+	store 2,mem_le_latency
+	jam 1,mem_antl_send_updata_le_param_timer
+	rtn
+antilost_conn_param_updata_procedure_faild:
+	jam CONN_PARAM_UPDATA_PROCEDURE_FAILD,mem_antl_conn_updata_procedure_state
+	rtn
+
+antilost_master_nonsupport_latency:
+	jam 0,mem_lpm_mult
+	jam 0,mem_antl_send_updata_le_param_timer
+	fetch 2,mem_le_new_conninterval	//interval from master
+	fetcht 2,mem_antl_le_unnormal_interval_min
+	isub temp,null
+	setflag positive,0,rega 
+	fetch 2,mem_antl_le_unnormal_interval_max //local intervalmax
+	fetcht 2,mem_le_new_conninterval//interval form master
+	isub temp,pdata
+	setflag positive,1,rega
+	compare	0x03,rega,0x03
+	rtn true //return if the new conn_interval in range through conn_interval_min to conn_interval_max already
+	fetch 8,mem_antl_le_unnormal_interval_min
+	store 8,mem_le_interval_min
+	jam 1,mem_antl_send_updata_le_param_timer
+	rtn                               
+
+
+antilost_le_bb_event_timer:
+	//call ui_button_check_long_press
+	call app_power_timer
+	call antilost_double_click_timer
+	call antilost_le_fast_adv_timer
+	call antilost_le_sleep_timer
+	call antilost_app_updata_le_param_timer
+	call antilost_conn_update_timer
+	branch antilost_adc_check_timer
+
+
+antilost_double_click_timer:
+	arg mem_double_click_timer,regc
+	arg antilost_double_click_timeout,regb
+	branch timer_single_step
+antilost_double_click_timeout:
+	jam 0,mem_butten_click_cnt
+	rtn
+antilost_le_fast_adv_timer:
+	arg mem_antl_fast_adv_timer,regc
+	arg antilost_le_fast_adv_timeout,regb
+	branch timer_single_step_2B
+antilost_le_fast_adv_timeout:
+	arg mem_antl_slow_adv_led_style,regc
+	arg mem_antl_slow_adv_lpm_interval,regb
+	branch antilost_adv_start_common
+	
+
+antilost_conn_update_timer:
+	arg mem_antl_conn_update_timer,regc
+	arg antilost_conn_update_timer_time_out,regb
+	branch timer_single_step
+	
+antilost_conn_update_timer_time_out:
+	fetch 2,mem_le_latency
+	store 1,mem_lpm_mult
+	rtn
+antilost_app_updata_le_param_timer:
+	arg mem_antl_send_updata_le_param_timer,regc
+	arg antilost_app_updata_le_param_timeout,regb
+	branch timer_single_step
+antilost_app_updata_le_param_timeout:
+	fetch 1,mem_le_state
+	compare 0,pdata,0x60
+	nbranch antilost_wait_for_updata_param_instant_expire,true
+	jam CONN_PARAM_UPDATA_PROCEDURE_STARTING,mem_antl_conn_updata_procedure_state
+	call  app_lpm_mult_enable
+	branch le_l2cap_tx_update_req	
+antilost_wait_for_updata_param_instant_expire:
+	jam 1,mem_antl_send_updata_le_param_timer
+	rtn
+	
+antilost_le_sleep_timer:
+	arg mem_antl_le_sleep_timer,regc
+	arg antilost_le_sleep_timer_timeout,regb
+	branch timer_single_step_2B
+
+
+antilost_le_sleep_timer_timeout:
+	branch app_button_long_pressed
+
+antilost_adc_check_timer:
+	//fetch 1,mem_antl_power_timer
+	//rtneq SHUTTER_POWER_OFF
+	arg mem_adc_timer,regc
+	arg antilost_adc_check_timer_timeout,regb
+	branch timer_single_step_2B
+antilost_adc_check_timer_timeout:
+	fetch 2,mem_adc_timeout
+	store 2,mem_adc_timer
+	branch antilost_battery_process
+
+
+antilost_le_process_conn:
+	fetch 2,mem_adc_timeout
+	store 2,mem_adc_timer
+	setarg 0
+	store 2,mem_antl_fast_adv_timer
+	store 2,mem_antl_le_sleep_timer
+	call antilost_alert_off
+	call antilost_led_buzzer_stop_blink
+	jam 0,mem_lpm_mult
+	branch app_ble_stop_adv
+	                                                      
+
+antilost_le_process_discon:
+	//setarg 0
+	//store 1,mem_hci_curr_len
+	setarg 0
+	store 4,mem_adc_timer
+	store 3,mem_antl_conn_updata_procedure_state
+	store 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	
+	jam 1,mem_alarm_config_notfy_cnt
+	fetch 2,mem_antl_le_sleep_timeout
+	store 2,mem_antl_le_sleep_timer
+	call queue_init
+	fetch 1,mem_antl_power_state
+	rtneq POWER_OFF
+	call antilost_fast_adv_start
+	branch antilost_on_off_alarm_after_disconn
+
+
+antilost_le_conn_process:
+//bpatch
+	branch antilost_key_process
+
+antilost_idle_process:
+
+	fetch 1,mem_antl_power_state
+	rtnne POWER_STANDBY
+	branch antilost_key_process
+
+
+//////////////////////////////////////////////////////////////////////////////////////////
+/////SOFT WTICH////////
+antilost_power_starting_cb:
+	arg mem_antl_power_starting_buzzer_style,regc
+	call antilost_buzzer_configuration
+	arg mem_antl_power_starting_led_style,regc
+antilost_power_common:
+	branch antilost_led_configuration
+
+antilost_power_off_cb:
+	jam OFF,mem_le_adv_enable
+	arg mem_antl_power_off_buzzer_style,regc
+	call antilost_buzzer_configuration
+	arg mem_antl_power_off_led_style,regc
+	branch antilost_power_common
+	
+antilost_le_receive_data_process:
+	fetch 1,mem_le_att_opcode
+	beq ATTOP_WRITE_REQUEST,antilost_le_parse_att_write_request
+	rtn
+antilost_le_parse_att_write_request:
+	fetch 2,mem_le_att_handle
+//	beq  ATT_WRITE_REQUEST_HANDLE,antilost_key_data_send
+	beq NEW_SPEC_WRITE_HANDLE,antilost_cmd_parse_for_application
+	beq NEW_SPEC_NOTIFICATION_ENABLE_HANDLE,antilost_notify_alarm_config_first_time
+	rtn
+/////////////////////////////////////////////////////////
+
+
+/////////key scan
+antilost_key_process:
+	fetch 1,mem_antl_key_scan_enable
+	rtn blank
+	branch keyscan_key_process
+
+	//queue = key index
+	//rega =1 press, =0 release
+antilost_key_up_down:
+	copy rega,pdata
+	branch antilost_key_is_up,blank
+antilost_key_is_down:
+	copy queue,pdata
+	beq 0,antilost_key0_down
+	rtn
+antilost_key_is_up:
+	copy queue,pdata
+	beq 0,antilost_key0_up
+	rtn
+
+antilost_key0_down:
+	jam 1,mem_antl_key_state
+	arg mem_antl_key_buzzer_style,regc
+	call antilost_buzzer_configuration
+	arg mem_antl_key_led_style,regc
+	call antilost_led_configuration
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,antilost_butten_down_while_disconn
+	branch antilost_butten_down_after_conn
+	
+antilost_key0_up:
+	jam 0,mem_antl_key_state
+	branch antilost_double_click_timer_init
+
+//////////////process for double-click
+
+antilost_double_click_timer_init:
+	fetch 1,mem_butten_click_cnt
+	rtnne 1
+	jam 5,mem_double_click_timer
+	rtn
+
+antilost_butten_down_after_conn:
+	fetch 1,mem_butten_click_cnt
+	pincrease 1
+	store 1,mem_butten_click_cnt
+	beq 1,antilost_click_once
+	beq 2,antilost_click_twice
+	rtn
+antilost_click_once:
+	call antilost_alert_off
+	jam OPCODE1_BUTTEN_CLICK_ONCE,mem_antl_key0_press+5//5 represent opcode offset
+	arg mem_antl_key0_press,regc
+	branch antilost_prepare_data_and_send
+antilost_click_twice:
+	jam 0,mem_butten_click_cnt
+	jam OPCODE2_BUTTEN_DOUBLE_CLICK,mem_antl_key0_press+5
+	arg mem_antl_key0_press,regc
+	call antilost_prepare_data_and_send
+	fetch 1,mem_antl_lost_mode
+	beq 1,antilost_alert_on
+	rtn   //rtn should be retaind
+	
+antilost_butten_down_while_disconn:
+	fetch 2,mem_antl_le_sleep_timeout
+	store 2,mem_antl_le_sleep_timer
+	call antilost_alert_off
+	branch antilost_fast_adv_start
+	
+///////////////////////NEW App Spcecific///////
+antilost_cmd_parse_for_application:
+	bpatch patch19_5,mem_patch19
+	call le_app_receive_data
+	ifetch 1,rega
+	beq OPCODE3_ANTL_START_ALRAM,antilost_on_of_alram
+	beq OPCODE7_ANTL_CONFIG_ALRAM,antilost_configuration_for_alram
+	rtn
+
+antilost_on_of_alram:
+	fetch 1,mem_antl_lost_mode
+	beq ANTI_LE_ALARM_OFF,antilost_alert_on
+	beq ANTI_LE_ALARM_ON,antilost_alert_off
+	rtn
+
+antilost_configuration_for_alram:
+	ifetch 1,regb
+	beq 1,antilost_set_start_alarm_after_disconn
+	beq 0,antilost_set_no_alarm_after_disconn
+	rtn
+/////////////////check////////////////////////
+
+/*input: 1)package data addr in regc
+output:no
+function:calculate check_out value and send data*/
+//mem_temp_block5
+antilost_prepare_data_and_send:
+	bpatch patch19_6,mem_patch19
+	fetch 1,mem_client_characteristic_configuration_descriptor
+	isolate1 NOTIFICATION_ENABLE_BIT,pdata
+	nrtn true
+	add regc,6,contr
+	ifetch 2,contr
+	byteswap pdata,pdata
+	add pdata,5,loopcnt
+	add regc,3,contr
+	call calc_check_sum_start
+	istore 1,contr
+	copy regc,rega
+	branch queue_push
+
+/////////////////NEW APP SPECIFIC check end////////////////////
+
+
+/////////alarm//////////////////////////////
+antilost_alert_on:
+	fetch 1,mem_antl_power_state
+	rtn blank
+	jam 1,mem_antl_lost_mode
+	arg mem_antl_alert_buzzer_stlye,regc
+	call antilost_buzzer_configuration
+	arg mem_antl_alert_led_stlye,regc
+	call antilost_led_configuration
+	jam OPCODE4_CURRENT_ALARM_STATE,mem_antl_key0_release+5//5 represent opcode offset
+	jam 1,mem_antl_key0_release+8 //8 represent data offset,digit 1 represent alarm is on at present
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+antilost_alert_off:
+	fetch 1,mem_antl_lost_mode
+	rtn blank
+	jam 0,mem_antl_lost_mode
+	call antilost_led_buzzer_stop_blink
+	jam OPCODE4_CURRENT_ALARM_STATE,mem_antl_key0_release+5//5 represent opcode offset
+	jam 0,mem_antl_key0_release+8 //8 represent data offset,digit 0 represent alarm is off at present
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+
+antilost_set_start_alarm_after_disconn:
+	jam 1,mem_alarm_config
+	jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5
+	jam 1,mem_antl_key0_release+8
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+antilost_set_no_alarm_after_disconn:
+	jam 0,mem_alarm_config
+	jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5
+	jam 0,mem_antl_key0_release+8
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+antilost_on_off_alarm_after_disconn:
+	fetch 1,mem_alarm_config
+	rtn blank
+	branch antilost_alert_on
+	
+antilost_notify_alarm_config_first_time:
+	ifetch 2,rega
+	store 2,mem_client_characteristic_configuration_descriptor
+	isolate1 NOTIFICATION_ENABLE_BIT,pdata
+	nrtn true
+	fetch 1,mem_alarm_config_notfy_cnt
+	rtn blank
+	jam 0,mem_alarm_config_notfy_cnt
+	fetch 8,mem_antl_le_interval_min
+	store 8,mem_le_interval_min
+	jam 2,mem_antl_send_updata_le_param_timer
+	call antilost_battery_process
+	call antilost_battery_calculate_end //send twice to combat the failure of reception first time
+	jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5
+	fetch 1,mem_alarm_config
+	store 1,mem_antl_key0_release+8
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+
+//////////////alarm end//////////////////////////
+//sytle address in regc
+antilost_buzzer_configuration:
+	arg 1,rega
+	branch antilost_configuration_common
+antilost_led_configuration:
+	arg 0,rega
+antilost_configuration_common:
+	branch antilost_led_buzzer_style_configuration
+	
+antilost_led_buzzer_stop_blink:
+	arg 0,rega
+	call ui_led_blink_stop_global
+	arg 1,rega
+	call ui_led_blink_stop_global
+	fetch 1,mem_buzzer_pwm_conf
+	branch pwm_disable
+	
+antilost_led_buzzer_style_configuration:
+	call calc_curr_struct_prt
+	arg 7,loopcnt
+	branch ui_led_set_style_global+2
+
+
+
+antilost_fast_adv_start:
+	arg mem_antl_fast_adv_led_style,regc
+	arg mem_antl_lpm_interval,regb
+antilost_adv_start_common:
+	call antilost_adv_interval_lpm_interval_set
+	call antilost_led_configuration
+	fetch 2,mem_antl_fast_adv_timeout
+	store 2,mem_antl_fast_adv_timer
+	branch app_ble_start_adv
+	
+antilost_adv_interval_lpm_interval_set:
+	ifetch 2,regb
+	store 2,mem_lpm_interval
+	ifetch 2,contr
+	store 2,mem_le_adv_interval
+	rtn
+///////////////beep////////////
+antilost_buzzer_pwm_init:
+	arg 0,rega //sys clk 12mhz
+	call pwm_init
+	fetch 6,mem_buzzer_pwm_conf
+	store 6,mem_pdatatemp
+	call pwm_out_set
+	fetch 1,mem_buzzer_pwm_conf
+	branch pwm_disable
+	
+antilost_led_on_cb:
+	jam 1,mem_antl_led_state
+	rtn	
+antilost_led_off_cb:
+	jam 0,mem_antl_led_state
+	rtn
+
+
+
+antilost_buzzer_off:
+	jam 0,mem_antl_buzzer_state
+	fetch 1,mem_buzzer_pwm_conf
+	branch pwm_disable
+	
+antilost_buzzer_on:
+	jam 1,mem_antl_buzzer_state
+	fetch 6,mem_buzzer_pwm_conf
+	store 6,mem_pdatatemp
+	branch pwm_out_set
+
+////////////////beep end///////////////////////////
+/////////////adc start////////////////////////
+antilost_adc_init:
+	jam 0,mem_adc_config_flag
+	branch adc_init_data
+
+antilost_battery_process:
+	call adc_set_mode
+	call vdd_calculate_by_mode
+	store 2,mem_battery_current_voltage
+	arg mem_battery_calculate_set,rega
+	call adc_bat_percent_lowpower_out
+	store 1,mem_voltage_remain_percent //for debug
+	beq 0,antilost_low_battery
+	sub pdata,0x64,null
+	nbranch antilost_full_battery,positive
+	store 1,mem_antl_key0_release+8
+antilost_battery_calculate_end:
+	jam OPCODE5_BATTER_INFORMATION,mem_antl_key0_release+5
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+antilost_full_battery:
+	jam 100,mem_antl_key0_release+8
+	branch antilost_battery_calculate_end
+
+antilost_low_battery:
+	branch app_button_long_pressed
+
+
+
+car_init:
+	rtn wake	
+	hfetch 1,core_gpio_sel1
+	and_into 0xf0,pdata
+	hstore 1,core_gpio_sel1
+	setarg car_le_before_hibernate
+	store 2,mem_cb_before_hibernate
+	
+	setarg car_le_process_lpm_before
+	store 2,mem_cb_before_lpm	
+	
+	setarg app_enter_hibernate
+	store 2,mem_cb_discovry_timeout
+	
+	setarg car_scale_process_idle	
+	store 2,mem_cb_idle_process	
+	
+	setarg car_scale_process_bb_event 
+	store 2,mem_cb_bb_event_process	
+	
+	setarg app_get_lpm_wake_lock
+	store 2,mem_cb_check_wakelock
+	
+	setarg car_le_receive_data
+	store 2,mem_cb_att_write
+	
+	setarg car_le_bb_event_timer
+	store 2,mem_cb_event_timer
+	
+	call g24_head_ptr2regc
+	setarg car_24g_receive_data
+	add regc,offset_24g_cb_rxdata_type1,contw
+	istore 2,contw
+
+	setarg car_power_off_signal
+	store 2,mem_remote_car_power_off_cb
+	
+	setarg car_soft_switch_power_on_signal
+	store 2,mem_remote_car_power_standby_cb
+	
+	bpatch patch19_7,mem_patch19
+	call car_init_environment
+	call queue_init
+	jam 2,mem_lpm_mult
+	jam POWER_ON,mem_car_24g_received_pac
+	fetch 1,mem_car_config_soft_switch_enable
+	store 1,mem_car_hard_soft_switch
+	beq HARD_SWITCH, car_hard_switch_power_on_signal
+	fetch 1,mem_car_config_soft_switch_gpio
+	store 1,mem_ui_button_gpio
+	jam OFF,mem_le_adv_enable
+car_soft_switch_power_on_init:
+	call car_ui_led_init
+	call ui_button_init
+	call ui_button_polling
+	jam POWER_STARTING,mem_car_power_state
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+ 	branch app_enter_hibernate
+
+car_power_off_signal:	
+	branch car_ui_led_init
+	
+car_hard_switch_power_on_signal:
+	jam POWER_STANDBY,mem_car_power_state
+car_soft_switch_power_on_signal:
+	jam ON,mem_le_adv_enable
+	call car_ui_led_init
+	arg 0,rega
+	call ui_led_blink_start_global
+	
+	setarg FAST_ADV_INTERVAL_VALUE_CAR
+	call shutter_ble_adv_interval_set
+car_le_modified_name_adv:
+	arg mem_le_name+7,contw
+	fetch 1,mem_le_lap
+car_name_loop:
+	and pdata,0xF0,temp
+	rshift4 temp,temp
+	call car_hex_to_ascii
+	istoret 1, contw
+	and pdata,0x0F,temp
+	call car_hex_to_ascii
+	istoret 1, contw
+	call le_modified_name_att_list
+	fetcht 1,mem_le_name_len
+	copy temp,loopcnt
+	arg mem_le_adv_data+2,contw
+	arg mem_le_name,contr
+	call memcpy
+car_le_modified_name_scan:
+	fetcht 1,mem_le_name_len
+	copy temp,loopcnt
+	arg mem_le_scan_data+2,contw
+	arg mem_le_name,contr
+	branch memcpy
+car_hex_to_ascii:
+	sub temp,9,null
+	branch car_hex_num,positive
+	add temp,55,temp
+	rtn
+car_hex_num:	
+	add temp,48,temp
+	rtn
+
+car_ui_led_init:
+	fetch 1,mem_car_config_blood_led1_gpio
+	bne INVALID_PIN_NUM,car_blood_led_gpio_set
+car_ui_led_init_1:
+	fetch 1,mem_car_config_pairing_led_gpio
+	bne INVALID_PIN_NUM,car_pairing_led_gpio_set
+car_ui_led_init_2:
+	fetch 1,mem_car_config_low_voltage_led_gpio
+	bne INVALID_PIN_NUM,car_low_voltage_led_gpio_set
+car_ui_led_init_3:
+	fetch 1, mem_car_led_num
+	copy pdata,loopcnt
+	setarg mem_car_led_map
+	copy pdata,rega
+car_in_lp1:
+	copy rega,contr
+	ifetch 1,contr
+	copy contr,rega
+	beq INVALID_PIN_NUM,car_in_lp1_end
+	copy pdata,temp
+	call gpio_config_output
+car_in_lp1_end:
+	loop car_in_lp1
+car_ui_led_init_end:
+	rtn
+car_blood_led_gpio_set:
+	fetch 8,mem_car_config_blood_led1_gpio
+	store 8,mem_car_led_map+2
+	branch car_ui_led_init_1
+car_pairing_led_gpio_set:
+	store 1,mem_car_led_map
+	branch car_ui_led_init_2
+car_low_voltage_led_gpio_set:
+	store 1,mem_car_led_map+1
+	branch car_ui_led_init_3
+
+
+car_init_environment:
+	arg 0,rega
+	call pwm_init
+	call car_ir_rx_init
+	call g24_receive_process_init
+	branch car_init_adc_hvin
+
+car_init_adc_hvin:
+	jam 100,mem_car_notify_vdd_value_last
+	fetch 1,mem_car_config_low_voltage_led_gpio
+	store 1,mem_car_style2_struct_led_gpio
+	branch adc_init_data
+	
+car_le_before_hibernate:
+	call gpio_set_before_lpm_common
+	branch keyscan_process_lpm_before
+
+car_le_process_lpm_before:
+	branch keyscan_process_lpm_before
+
+car_key_scan_process:
+//	fetch 1,mem_enable_key_scan
+//	rtn blank
+	branch keyscan_key_process
+
+car_scale_process_idle:
+	call car_le_send_packet
+	call car_ir_receive_process
+	call car_g24_status_process
+	branch car_key_scan_process
+
+car_g24_status_process:
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	fetch 1,mem_car_24g_received_pac
+	beq WORK_PAIRED,car_g24_connected_event
+	rtn
+car_g24_connected_event:
+	fetch 1,mem_car_24g_status
+	rtneq WORK_PAIRED
+	jam WORK_PAIRED,mem_car_24g_status
+	branch car_g24_connected
+
+car_le_send_packet:
+	fetch 2,mem_ui_state_map
+	rtnbit0 UI_STATE_BLE_CONNECTED
+	call le_fifo_check_nearly_full
+	nrtn blank
+	arg mem_car_pop_queue_buff,rega
+	call queue_pop
+	nrtn user
+	arg mem_car_pop_queue_buff,contr
+	branch le_send_notify_from_list
+ 
+car_scale_process_bb_event:
+	copy regc,pdata
+	beq BT_EVT_BUTTON_UP,app_event_button_up
+	beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed
+	beq BT_EVT_LE_CONNECTED,car_scale_event_le_conn
+	beq BT_EVT_LE_DISCONNECTED,car_scale_event_le_discon
+	rtn
+
+car_scale_event_le_conn:
+	setarg disable_24g
+	call g24_store_mem_24g_mode
+	branch car_scale_process_conn
+car_g24_connected:
+	fetch 2,mem_car_24g_no_data_timeout_count
+	store 2,mem_car_24g_no_data_timeout_timer
+car_scale_process_conn:
+	jam 0x14,mem_car_notify_vdd_timer
+	jam 0,mem_lpm_mode
+	call app_ble_stop_adv
+	call app_lpm_mult_enable
+	fetch 1,mem_car_config_pairing_led_conn_status
+	beq 0x01,car_pairing_led_conn_status_setting
+car_scale_process_conn_next:
+	arg 0,rega
+	branch ui_led_on_global
+car_pairing_led_conn_status_setting:
+	arg 0,rega
+	branch ui_led_blink_stop_global
+
+car_scale_event_le_discon:
+	setarg rx_24g
+	call g24_store_mem_24g_mode
+car_g24_disconnect:
+	setarg 0
+	store 5,mem_car_led_control
+	setarg 4
+	call pwm_disable
+	setarg 5
+	call pwm_disable
+	setarg 20
+	call pwm_disable
+	setarg 21
+	call pwm_disable
+	setarg 22
+	call pwm_disable
+	setarg 7
+	call pwm_disable
+	call queue_init
+	jam 10,mem_motor1_speed
+	jam 10,mem_motor2_speed
+	jam 10,mem_motor3_speed
+//	jam 1,mem_lpm_mode
+	jam 2,mem_lpm_mult
+	arg 0,rega
+	call ui_led_blink_start_global
+
+	setarg FAST_ADV_INTERVAL_VALUE_CAR
+	call shutter_ble_adv_interval_set
+	branch app_ble_start_adv
+
+car_le_bb_event_timer:
+//	call car_ui_power_timeout_timer
+	call car_moto1_blank_data_timer
+	call car_moto2_blank_data_timer
+	call car_moto3_blank_data_timer
+	call app_power_timer
+	call car_led_control_timer
+	call car_notify_vdd_timer
+	call car_24g_no_data_timeout_timer
+	call car_ir_breakdown_timer
+	branch car_attack_shake_timer
+
+car_ir_breakdown_timer:
+	arg mem_car_ir_breakdown_check_timer,regc
+	arg car_ir_breakdown_timeout,regb
+	branch timer_single_step
+car_ir_breakdown_timeout:
+	call car_ir_gpio_get_status
+	nrtn true
+	jam 1,mem_car_ir_breakdown_flag
+	rtn
+	
+car_24g_no_data_timeout_timer:
+	arg mem_car_24g_no_data_timeout_timer,regc
+	arg car_24g_no_data_timer_timeout,regb
+	branch timer_single_step_2B
+car_24g_no_data_timer_timeout:
+	jam WORK_SEARCH,mem_car_24g_status
+	branch car_g24_disconnect
+
+car_attack_shake_timer:
+	arg mem_car_attack_shake_timer,regc
+	arg car_attack_shake,regb
+	branch timer_single_step
+car_attack_shake:
+	fetch 1, mem_car_attack_shake_flag
+	branch car_attack_shake_stop,blank
+	jam 2,mem_car_attack_shake_timer
+	jam 0, mem_car_attack_shake_flag
+	setarg 0x0a02
+	store 2,mem_le_receive_payload
+	fetch 1,mem_car_config_device_select
+	beq DEVICE_BATTLE_TANK,car_attack_shake_front_battle_tank
+car_attack_shake_front_battle_car:
+	branch car_motor_control
+car_attack_shake_front_battle_tank:
+	setarg 0x0a02
+	store 2,mem_le_receive_payload+2
+	branch car_motor_control
+car_attack_shake_stop:
+	setarg 0
+	store 4,mem_le_receive_payload
+	branch car_motor_control
+
+car_notify_vdd_timer:
+	fetch 1,mem_car_config_bat_notify_enable
+	rtn blank
+ 	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,car_low_bat_led_off
+	arg mem_car_notify_vdd_timer,regc
+	arg car_notify_vdd,regb
+	branch timer_single_step
+car_notify_vdd:
+	fetch 1,mem_car_notify_vdd_count
+	store 1,mem_car_notify_vdd_timer
+ 	fetch 1,mem_car_working_flag
+ 	nrtn blank
+car_read_hvin:
+	call adc_set_mode
+	call vdd_calculate_by_mode
+	store 2,mem_vdd_now_vol
+	arg mem_vdd_calculate_set,rega
+	call adc_bat_percent_lowpower_out
+	fetcht 1,mem_car_notify_vdd_value_last
+	isub temp,null
+	branch car_notify_vdd_next2,positive
+	store 1,mem_car_notify_vdd_value_last
+	copy pdata,temp
+car_notify_vdd_next2:
+	storet 1,mem_car_notify_vdd_percent
+	fetch 1,mem_car_config_low_voltage_percent
+	isub temp,null
+	call car_enter_low_bat,positive
+	storet 1,mem_notify_bat_payload 
+	arg 6,loopcnt
+	arg mem_notify_bat_head,contr
+	call calc_check_sum_start
+	store 1,mem_notify_bat_check_sum
+	arg mem_notify_bat_packet,rega
+	branch queue_push
+car_enter_low_bat:
+	fetch 1,mem_low_bat_flag
+	nrtn blank
+	jam 1,mem_low_bat_flag
+	arg 1,rega
+	branch ui_led_blink_start_global
+car_low_bat_led_off:
+	arg 1,rega
+	branch ui_led_blink_stop_global
+
+car_led_control_timer:
+	arg mem_car_led_control_timer,regc
+	arg car_led_control,regb
+	branch timer_single_step
+car_led_control:
+	jam 5,mem_car_led_control_timer
+	jam 0,mem_car_led_no
+	fetch 1,mem_car_led_blink_status
+	beq LED_ON,car_led_control_blink_off
+	beq LED_OFF,car_led_control_blink_on
+car_led_control_set:
+	arg mem_car_led_control,contr
+	copy contr,rega
+	arg 8,loopcnt
+car_led_control_timer_next:
+	copy rega,contr
+	ifetch 1,contr
+	copy contr,rega
+	beq LED_OFF,car_led_control_off
+	beq LED_ON,car_led_control_on
+	beq LED_BLINK,car_led_control_blink
+car_led_control_timer_next_2:
+	fetch 1,mem_car_led_no
+	increase 1,pdata
+	store 1,mem_car_led_no
+	loop car_led_control_timer_next
+	rtn
+car_led_switch:
+	fetch 1,mem_car_led_no
+	arg mem_car_config_blood_led_gpio,regb
+	iadd regb,regb
+	ifetcht 1,regb
+	rtn
+car_led_control_off:
+	call car_led_switch
+	call gpio_out_inactive
+	branch car_led_control_timer_next_2
+car_led_control_on:
+	call car_led_switch
+	call gpio_out_active
+	branch car_led_control_timer_next_2
+car_led_control_blink:
+	fetch 1,mem_car_led_blink_status
+	beq LED_ON,car_led_control_off
+	branch car_led_control_on
+car_led_control_blink_on:
+	jam LED_ON,mem_car_led_blink_status
+	branch car_led_control_set
+car_led_control_blink_off:
+	jam LED_OFF,mem_car_led_blink_status
+	branch car_led_control_set
+	
+////////////////////////check sum////////////////////////
+//loopcnt = sum number,contr = ptr
+calc_check_sum_start:
+	arg 0,rega
+calc_check_sum_loop:
+	ifetch 1,contr
+	iadd rega,rega
+	loop calc_check_sum_loop
+calc_check_sum_and:
+	and rega,0xff,pdata
+	rtn
+
+car_le_receive_data:	
+	fetch 1,mem_le_att_opcode
+	beq ATTOP_WRITE_REQUEST,car_le_parse_att_write_request
+	rtn
+car_le_parse_att_write_request:
+	fetch 2,mem_le_att_handle
+	beq ATT_CAR_CONTROL_HANDLE,car_control_le_receive
+	rtn
+
+/*
+*	typedef struct
+*	{
+*		2byte	packet_head				(mem_app_receive_temp)
+*		1byte	packet_cmd				(mem_app_receive_temp+2)
+*		2byte	packet_payload_length	(mem_app_receive_temp+3)
+*		10byte	packet_payload			(mem_app_receive_temp+5)
+*		1byte	packet_check_sum		(mem_app_receive_temp+15)
+*	}
+*/
+le_app_receive_data:
+	bpatch patch1a_0,mem_patch1a
+	ifetch 5,rega
+	store 5,mem_app_receive_temp
+	fetch 2,mem_app_receive_temp
+	arg LE_RECEIVE_PACKET_HEAD,temp
+	isub temp,null
+	nrtn zero
+	fetch 2,mem_app_receive_temp+3
+	byteswap pdata,pdata
+	store 2,mem_app_receive_temp+3
+	copy pdata,loopcnt
+	increase 5,rega
+	copy rega,contr
+	arg mem_app_receive_temp+5,contw
+	call memcpy
+	ifetch 1,contr
+	store 1,mem_app_receive_temp+15
+	arg mem_app_receive_temp+2,rega
+	arg mem_app_receive_temp+5,regb
+	rtn
+
+car_control_le_receive:
+	setarg 0
+	store 5,mem_le_receive_payload
+	store 5,mem_le_receive_payload+5
+	call le_app_receive_data
+	copy regb,contr
+	arg mem_le_receive_payload,contw
+	arg 10,loopcnt
+	call memcpy
+car_receive_cmd_select:
+	bpatch patch1a_1,mem_patch1a
+	ifetch 1,rega
+	beq CAR_CMD_OLD_CAR_CONTROL,car_drive_old
+	beq CAR_CMD_OLD_SPEED_CONTROL,car_speed_set_old
+	beq CAR_CMD_L_R_MOTOR_CONTROL,car_motor_control
+	beq CAR_CMD_F_B_MOTOR_CONTROL,car_motor_control
+	beq CAR_CMD_IR_CONTROL,car_ir_data_rx_from_app
+	beq CAR_CMD_LED_CONTROL,car_led_control_receive
+	beq CAR_CMD_DEVICE_INFO,car_info_request
+	rtn
+
+car_24g_receive_data:
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	
+	fetch 2,mem_car_24g_no_data_timeout_count
+	store 2,mem_car_24g_no_data_timeout_timer
+	
+	jam WORK_PAIRED,mem_car_24g_received_pac
+	
+	setarg offset_24g_rxdata_temp_add3
+	call g24_set_rega
+	call car_control_le_receive
+
+	fetch 1,mem_app_receive_temp+2	//cmd
+	beq CAR_CMD_L_R_MOTOR_CONTROL,car_24g_receive_data_next
+	beq CAR_CMD_F_B_MOTOR_CONTROL,car_24g_receive_data_next
+	rtn
+car_24g_receive_data_next:
+	fetch 1,mem_le_receive_payload	//moto1
+	ncall car_moto1_enable_blank_data_timer,blank
+	fetch 1,mem_le_receive_payload+2	//moto2
+	ncall car_moto2_enable_blank_data_timer,blank
+	fetch 1,mem_le_receive_payload+4	//moto3
+	ncall car_moto3_enable_blank_data_timer,blank
+	rtn
+
+car_moto1_enable_blank_data_timer:
+	jam 5,mem_car_moto1_blank_timer
+	rtn
+car_moto2_enable_blank_data_timer:
+	jam 5,mem_car_moto2_blank_timer
+	rtn
+car_moto3_enable_blank_data_timer:
+	jam 5,mem_car_moto3_blank_timer
+	rtn
+
+car_moto1_blank_data_timer:
+	arg mem_car_moto1_blank_timer,regc
+	arg car_moto1_blank_data,regb
+	branch timer_single_step
+car_moto2_blank_data_timer:	
+	arg mem_car_moto2_blank_timer,regc
+	arg car_moto2_blank_data,regb
+	branch timer_single_step
+car_moto3_blank_data_timer:		
+	arg mem_car_moto3_blank_timer,regc
+	arg car_moto3_blank_data,regb
+	branch timer_single_step
+
+car_moto1_blank_data:
+	jam 0,mem_le_receive_payload
+	branch car_motor_control
+car_moto2_blank_data:
+	jam 0,mem_le_receive_payload+2
+	branch car_motor_control
+car_moto3_blank_data:
+	jam 0,mem_le_receive_payload+4
+	branch car_motor_control
+	
+	
+///////////////////////Motor//////////////////////////////////////////
+
+car_drive_old:	
+	call car_left_right_control_old
+	branch car_front_back_control_old
+car_left_right_control_old:
+	fetch 1,mem_le_receive_payload
+	store 1,mem_motor2_status
+	branch car_motor2_control
+car_front_back_control_old:
+	fetch 1,mem_motor1_speed
+	call car_reset_old_speed
+	fetch 1,mem_le_receive_payload+1
+	store 1,mem_motor1_status
+	branch car_motor1_control
+car_reset_old_speed:
+	beq SPEED_LEVEL_2,car_reset_old_speed2
+	beq SPEED_LEVEL_3,car_reset_old_speed3
+	store 1,mem_motor1_speed
+	rtn
+car_reset_old_speed2:
+	jam SPEED_LEVEL_5,mem_motor1_speed
+	rtn
+car_reset_old_speed3:
+	jam SPEED_LEVEL_10,mem_motor1_speed
+	rtn
+car_speed_set_old:
+	fetch 1,mem_le_receive_payload
+	call car_reset_old_speed
+	fetch 1,mem_motor1_speed
+	call car_motor_speed_duty_setting
+	call car_motor_speed_duty_transform
+	branch pwm_pwm0_duty_set
+
+car_motor_control:
+	fetch 1,mem_car_24g_go_die_flag
+	nrtn blank
+	fetch 6,mem_le_receive_payload
+	store 6,mem_motor1_status
+	fetch 1,mem_motor1_speed
+	fetcht 1,mem_motor2_speed
+	iand temp,pdata
+	fetcht 1,mem_motor3_speed
+	iand temp,pdata
+	call car_motor_working_flag,blank
+	bpatch patch1a_2,mem_patch1a
+	call car_motor1_control
+	call car_motor2_control
+	branch car_motor3_control
+car_motor1_control:
+	arg mem_motor1_pwm_set,regb
+	arg mem_motor1_status,contr
+	branch car_motor_status_select
+car_motor2_control:
+	arg mem_motor2_pwm_set,regb
+	arg mem_motor2_status,contr
+	branch car_motor_status_select
+car_motor3_control:
+	arg mem_motor3_pwm_set,regb
+	arg mem_motor3_status,contr
+	branch car_motor_status_select
+car_motor_working_flag:
+	jam 0,mem_car_working_flag
+	rtn
+
+car_motor_status_select:
+	ifetch 1,contr
+	beq MOTOR_STOP,car_motor_stop
+	beq GO_FRONT,car_motor_positive
+	beq GO_BACK,car_motor_negative
+	rtn
+car_motor_positive:
+	jam 0,mem_motor_select_p_n
+	branch car_motor_negative+1
+car_motor_negative:
+	jam 1,mem_motor_select_p_n
+	ifetch 1,contr
+	store 1,mem_car_motor_speed
+	ifetch 8,regb
+	branch car_motor_work
+
+car_motor_stop:
+	ifetch 1,regb
+	call pwm_disable
+	increase 1,regb
+	ifetch 1,regb
+	branch pwm_disable
+car_motor_work:
+	store 8,mem_motor_pwm_pin1_set
+	jam 1,mem_car_working_flag
+	fetch 1,mem_motor_select_p_n
+	beq 0,car_motor_select_positive
+car_motor_select_negative:
+	fetch 1,mem_motor_pwm_pin2_set
+	store 1,mem_motor_pwm_pin_set
+	fetch 1,mem_motor_pwm_pin1_set
+car_motor_work_next:
+	call pwm_disable
+	fetch 1,mem_car_motor_speed
+	call car_motor_speed_duty_setting
+	store 1,mem_motor_pwm_dute_set
+	fetch 6,mem_motor_pwm_pin_set
+	store 6,mem_pdatatemp
+	branch pwm_out_set
+car_motor_select_positive:
+	fetch 1,mem_motor_pwm_pin1_set
+	store 1,mem_motor_pwm_pin_set
+	fetch 1,mem_motor_pwm_pin2_set
+	branch car_motor_work_next
+
+car_motor_speed_duty_setting:
+	mul32 pdata,5,pdata
+	add pdata,50,pdata
+	rtn
+car_motor_speed_duty_transform:
+	arg 12000,temp
+	imul32 temp,pdata
+	div pdata,100
+	call wait_div_end
+	quotient temp
+	copy temp,rega
+	setarg 12000
+	isub temp,regb
+	rtn
+
+/////////////////////IR PROCESS/////////////////////
+car_ir_init:
+	hfetch 1,core_gpio_sel2		// select GPIO3 as pwm4
+	set1 2,pdata
+	hstore 1,core_gpio_sel2
+	setarg 158
+	hstore 2,core_pwm_pcnt4
+	hstore 2,core_pwm_ncnt4
+	rtn
+
+car_ir_data_rx_from_app:
+	fetch 1,mem_car_24g_go_die_flag
+	nrtn blank
+	fetch 2,mem_le_receive_payload
+	store 2,mem_ir_data
+	fetch 1,mem_car_24g_status
+	bne WORK_PAIRED,car_ir_data_tx
+	fetch 2,mem_le_lap
+	store 2,mem_ir_data
+car_ir_data_tx:
+	bpatch patch1a_3,mem_patch1a
+	call car_ir_init
+	call car_ir_enable
+	setarg 48000
+	call sleep
+	call car_ir_disable
+	setarg 7200
+	call sleep
+	arg 16,loopcnt
+car_ir_send_loop:
+	call car_ir_enable
+	fetch 2,mem_ir_data
+	bbit1 0,car_ir_is_bit1
+	setarg 7200
+	call sleep
+	call car_ir_disable
+	branch car_ir_wait_finish
+	
+car_ir_is_bit1:
+	setarg 14400
+	call sleep
+	call car_ir_disable
+car_ir_wait_finish:
+	setarg 7200
+	call sleep
+	fetch 2,mem_ir_data
+	rshift pdata,pdata	
+	store 2,mem_ir_data
+	loop car_ir_send_loop
+
+	jam 2,mem_car_attack_shake_timer
+	jam 1, mem_car_attack_shake_flag
+	setarg 0x0a01
+	store 2,mem_le_receive_payload
+	fetch 1,mem_car_config_device_select
+	beq DEVICE_BATTLE_TANK,car_attack_shake_back_battle_tank
+car_attack_shake_back_battle_car:
+	branch car_motor_control
+car_attack_shake_back_battle_tank:
+	setarg 0x0a01
+	store 2,mem_le_receive_payload+2
+	branch car_motor_control
+	
+car_ir_enable:
+	hfetch 1,core_gpio_key2			// PWM4_enable
+	or_into 0x40,pdata
+	hstore 1,core_gpio_key2	
+	rtn
+car_ir_disable:
+	hfetch 1,core_gpio_key2			// PWM4_disable
+	and_into 0xbf,pdata
+	hstore 1,core_gpio_key2
+	rtn
+	
+car_ir_rx_init:
+	fetch 1,mem_car_config_ir_enable
+	rtneq 0x00
+	call lpm_disable_exen_output
+	fetcht 1,mem_car_config_ir_rx_gpio
+	storet 1,mem_ir_rx_gpio
+	call gpio_config_input
+	call car_ir_gpio_get_status
+	nrtn true
+	jam 1,mem_car_ir_breakdown_check_timer
+	rtn
+
+car_ir_receive_process:
+	fetch 1,mem_car_config_ir_enable
+	rtneq FLAG_IR_DISABLE	
+	fetch 1,mem_car_ir_breakdown_flag
+	nrtn blank
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,car_ir_receive_process_next
+	fetch 1,mem_car_24g_status
+	rtnne WORK_PAIRED
+car_ir_receive_process_next:
+	bpatch patch1a_4,mem_patch1a
+	call car_ir_gpio_get_status
+	nrtn true
+	setarg 36000
+	call sleep
+	call car_ir_gpio_get_status
+	nrtn true
+	call car_ir_clk_get
+car_ir_packet_head_wait_end:
+	call car_ir_clk_check
+	nrtn positive
+	call car_ir_gpio_get_status
+	branch car_ir_packet_head_wait_end,true
+	arg 0,rega
+	arg 16,loopcnt
+	call car_ir_clk_get
+car_ir_receive_process_loop:
+	call car_ir_clk_check
+	nrtn positive
+	call car_ir_gpio_get_status
+	nbranch car_ir_receive_process_loop,true
+	setarg 10800
+	call sleep
+	call car_ir_gpio_get_status
+	branch car_ir_get_bit1,true
+car_ir_get_bit0:
+	setarg 0
+ 	rshift rega,rega
+	ior rega,rega
+	loop car_ir_receive_process_loop
+	branch car_ir_receive_process_end
+car_ir_get_bit1:
+	setarg 0x8000
+	rshift rega,rega
+	ior rega,rega
+	call car_ir_clk_get
+car_ir_get_bit1_wait_low_end:
+	call car_ir_clk_check
+	nrtn positive
+	call car_ir_gpio_get_status
+	branch car_ir_get_bit1_wait_low_end,true
+	loop car_ir_receive_process_loop
+car_ir_receive_process_end:
+	bpatch patch1a_5,mem_patch1a
+	copy rega,pdata
+	store 2,mem_ir_rx_buf
+	store 2,mem_ir_notify_data+8
+	fetch 1,mem_car_24g_status
+	beq WORK_PAIRED,car_ir_24g_receive_attack
+car_ir_data_notify:
+	arg 0x07,loopcnt
+	arg mem_ir_notify_data_head,contr
+	call calc_check_sum_start
+	store 1,mem_ir_notify_data_check_sum
+	arg mem_ir_notify_data,rega
+	branch queue_push
+
+car_ir_24g_receive_attack:
+	fetch 1,mem_car_24g_ir_receive_attack_count
+	increase 1,pdata
+	store 1,mem_car_24g_ir_receive_attack_count
+	div pdata,2
+	call wait_div_end
+	quotient temp
+	remainder pdata
+	nbranch car_ir_24g_receive_attack_blink,blank
+car_ir_24g_receive_attack_off:
+	fetch 1,mem_car_config_led_num
+	isub temp,null
+	call car_ir_24g_go_die,zero
+	arg mem_car_led_control,pdata
+	increase -1,temp
+	iadd temp,rega
+	arg 0,pdata
+	istore 1,rega
+	rtn
+car_ir_24g_receive_attack_blink:
+	arg mem_car_led_control,pdata
+	iadd temp,rega
+	arg 2,pdata
+	istore 1,rega
+	rtn
+car_ir_24g_go_die:
+	jam 1,mem_car_24g_go_die_flag
+	rtn
+car_ir_clk_get:
+	copy clkn_bt,pdata
+	store 4,mem_ir_receive_clkn
+	rtn
+car_ir_clk_check:
+	copy clkn_bt,pdata
+	fetcht 4,mem_ir_receive_clkn
+	isub temp,pdata
+	sub pdata,200,null
+	rtn
+
+car_ir_gpio_get_status:
+	fetcht 1,mem_ir_rx_gpio
+	branch gpio_get_bit
+
+car_led_control_receive:
+	fetch 8,mem_le_receive_payload
+	store 8,mem_car_led_control
+	rtn
+
+car_info_request:
+	fetch 1,mem_car_config_device_select
+	store 1,mem_car_info_request_payload
+	fetch 1,mem_car_config_motor_layout
+	store 1,mem_car_info_request_payload+1
+	fetch 1,mem_car_config_ir_enable
+	store 1,mem_car_info_request_payload+2
+	arg 13,loopcnt
+	arg mem_car_info_request_head,contr
+	call calc_check_sum_start
+	store 1,mem_car_info_request_checksum
+	arg mem_car_info_request,rega
+	branch queue_push
+    
+
+
+
+
+light_init:
+	call clear_eeprom_size_2k
+	jam 0x7a,mem_curr_packet_num
+	call light_load_controler_list
+	call light_init_crr_cmd_count
+	setarg light_pairing_timer
+	store 2,mem_cb_event_timer
+	arg 0,rega
+	branch pwm_init
+
+light_pairing_timer:
+	fetch 2,mem_light_pairing_timer
+	rtn blank
+	increase -1,pdata
+	store 2,mem_light_pairing_timer
+	rtnne 0
+	jam 0,mem_light_pairing_enable
+	rtn
+
+light_init_crr_cmd_count:
+	bpatch patch1a_6,mem_patch1a
+	fetch 1,mem_light_next_record
+	sub pdata,40,null
+	rtn positive
+	jam 0,mem_light_next_record
+	rtn
+
+light_load_controler_list:
+	arg mem_light_next_record,rega
+	arg 0,regb
+	arg 81,temp
+	branch iicd_read_eep_data
+
+//output user:group record find
+light_find_controler_pairing:
+	disable user
+	fetch 1,mem_light_cnum
+	copy pdata,loopcnt
+	
+	arg mem_light_clist,rega
+	copy regc,regb
+light_find_controler_pairing_loop:
+	bpatch patch1a_7,mem_patch1a
+	call light_compare_addr_record
+	branch enable_user,zero
+light_find_single_pairing_diff:
+	increase 4,rega
+	loop light_find_controler_pairing_loop
+	rtn
+
+//rega: regb:
+light_compare_addr_record:
+	bpatch patch1b_0,mem_patch1b
+	ifetch 3,rega
+	ifetcht 3,regb
+	isub temp,null
+	rtn
+//rega: regb:
+light_compare_single_record:
+	bpatch patch1b_1,mem_patch1b
+	ifetch 3,rega
+	ifetcht 3,regb
+	isub temp,null
+	nrtn zero
+	ifetch 1,contr
+	sub pdata,0,null //0 zero
+	rtn zero
+	add rega,3,contr
+	ifetcht 1,contr
+	isub temp,null
+	rtn
+
+//output:find single controler
+light_find_controler_cmd:
+	bpatch patch1b_2,mem_patch1b
+	disable user
+	fetch 1,mem_light_cnum
+	copy pdata,loopcnt
+	
+	arg mem_light_clist,rega
+	copy regc,regb
+light_find_controler_cmd_loop:
+	call light_compare_single_record
+	branch enable_user,zero
+	increase 4,rega
+	loop light_find_controler_cmd_loop
+	rtn
+
+//regc
+light_recv_adv:
+	fetch 1,mem_le_scanrsp_rcv
+	increase 1,pdata
+	store 1,mem_le_scanrsp_rcv
+	arg mem_le_rxbuf+12,regc
+
+light_anylize_command:
+	ifetch 2,regc
+	arg 0x55aa,temp
+	isub temp,null
+	nrtn zero
+	copy contr,regc
+	ifetcht 3,regc
+	setarg 0xffffff
+	isub temp,null
+	branch light_parse_cmd,zero
+	call light_find_controler_cmd
+	branch light_parse_cmd,user
+	rtn
+
+light_parse_cmd:
+	bpatch patch1b_3,mem_patch1b
+	increase 4,regc
+	ifetch 1,regc
+	fetcht 1,mem_curr_packet_num
+	isub temp,null
+	rtn zero
+	store 1,mem_curr_packet_num
+	fetch 1,mem_le_req_rcv
+	increase 1,pdata
+	store 1,mem_le_req_rcv
+	
+	increase 1,regc
+	ifetch 1,regc
+	store 1,mem_light_crr_cmd_count
+	copy pdata,loopcnt
+	rtn blank
+light_parse_cmd_loop:
+	ifetch 1,contr
+	beq LIGHT_CMD_PWM0,light_parse_cmd_pwm0
+	beq LIGHT_CMD_PWM1,light_parse_cmd_pwm1
+	beq LIGHT_CMD_PWM2,light_parse_cmd_pwm2
+	beq LIGHT_CMD_PWM3,light_parse_cmd_pwm3
+	beq LIGHT_CMD_PWM4,light_parse_cmd_pwm4
+	beq LIGHT_CMD_PWM5,light_parse_cmd_pwm5
+	beq LIGHT_CMD_AUTO_MODE,light_parse_auto_mode
+	beq LIGHT_CMD_PAIRING,light_parse_pairing
+	loop light_parse_cmd_loop
+	rtn
+
+light_parse_cmd_pwm0:
+	copy contr,regc
+	fetch 1,mem_light_pwm0
+	store 1,mem_pdatatemp
+	arg 0,temp
+light_parse_cmd_pwm_common:
+	storet 1,mem_pdatatemp+1
+	setarg 10000
+	store 3,mem_pdatatemp+2
+	ifetch 1,regc
+	store 1,mem_pdatatemp+5
+	call  pwm_out_set
+	and regc,1,contr
+	loop light_parse_cmd_loop
+	rtn
+light_parse_cmd_pwm1:
+	copy regc,contr
+	fetch 1,mem_light_pwm1
+	store 1,mem_pdatatemp
+	arg 1,temp
+	branch light_parse_cmd_pwm_common
+light_parse_cmd_pwm2:
+	copy regc,contr
+	fetch 1,mem_light_pwm2
+	store 1,mem_pdatatemp
+	arg 2,temp
+	branch light_parse_cmd_pwm_common
+light_parse_cmd_pwm3:
+	copy regc,contr
+	fetch 1,mem_light_pwm3
+	store 1,mem_pdatatemp
+	arg 3,temp
+	branch light_parse_cmd_pwm_common
+light_parse_cmd_pwm4:
+	copy regc,contr
+	fetch 1,mem_light_pwm4
+	store 1,mem_pdatatemp
+	arg 4,temp
+	branch light_parse_cmd_pwm_common
+light_parse_cmd_pwm5:
+	copy regc,contr
+	fetch 1,mem_light_pwm5
+	store 1,mem_pdatatemp
+	arg 5,temp
+	branch light_parse_cmd_pwm_common
+
+light_parse_auto_mode:
+	ifetch 1,contr
+	rtn
+
+light_parse_pairing:
+	copy contr,regc
+	fetch 1,mem_light_pairing_enable
+	bne 1,light_parse_pairing_abandon
+	call update_controler_list
+light_parse_pairing_abandon:
+	and regc,4,contr
+	rtn
+update_controler_list:
+	bpatch patch1b_4,mem_patch1b
+	call light_find_controler_pairing
+	branch update_conrtoler_list_found,user
+	fetch 1,mem_light_next_record
+	copy pdata,temp
+	increase 1,pdata
+	store 1,mem_light_next_record
+	call light_init_crr_cmd_count
+	lshift2 temp,temp
+	setarg mem_light_clist
+	iadd temp,contw
+	ifetch 4,regc
+	istore 4,contw
+	branch update_conrtoler_store_list
+update_conrtoler_list_found:
+	add regc,3,contr
+	ifetch 1,contr
+	rtn blank
+	ifetch 4,regc
+	istore 4,rega
+update_conrtoler_store_list:
+	arg mem_light_next_record,rega
+	arg 0,regb
+	arg 81,temp
+	branch iicd_write_eep_data
+
+
+
+lightc_init:
+	//key scan init
+
+	//gpio init
+	fetcht 1,mem_lightc_led_gpio
+	call gpio_out_inactive
+	rtn
+
+
+lightc_dispatch:
+	//key scan 
+	
+	fetcht 1,mem_lightc_led_gpio
+	call gpio_out_active
+
+
+	fetcht 1,mem_lightc_led_gpio
+	call gpio_out_inactive
+
+	//
+	call lightc_start_adv
+
+	fetch 1,mem_adv_time
+	nrtn blank
+	//sleep 
+	call lpm_write_gpio_wakeup
+	hfetch 4,core_lpm_ctrl
+	set0 15,pdata						/* lowest lpo */
+	hstore 4,core_lpm_reg
+	call lpm_write_ctrl
+	arg param_hibernate_clks,temp
+	branch lpm_sleep
+
+lightc_adv:
+	fetch 1,mem_adv_time
+	branch le_adv_loop_tx,blank
+	increase -1,pdata
+	store 1,mem_adv_time
+	branch le_adv_loop_tx
+
+lightc_start_adv:
+	mul32 pdata,20,pdata
+	arg mem_cmd0_string,contr
+	iadd contr,contr
+	ifetch 1,contr
+	rtn blank
+	copy pdata,rega
+	copy rega,loopcnt
+	arg mem_le_adv_data+2,contw
+	call memcpy
+	copy rega,pdata
+	increase 2,pdata
+	store 1,mem_le_adv_data_len
+	rtn
+
+
+
+
+
+
+module_init:
+	
+	rtn wake
+	call le_modified_name
+	call adc_init_data
+	setarg module_process_idle
+	store 2,mem_cb_idle_process
+	setarg module_bt_conn_process
+	store 2,mem_cb_bt_process
+	setarg module_process_bb_event
+	store 2,mem_cb_bb_event_process
+	setarg module_le_conn_process
+	store 2,mem_cb_le_process
+	setarg module_lpm_lock
+	store 2,mem_cb_check_wakelock
+	setarg module_hci_cmd_transmit_le_notify
+	store 2,mem_cb_ble_transmit
+	setarg module_hci_event_receive_spp_data
+	store 2,mem_cb_receive_spp_data
+	setarg module_le_receive_data
+	store 2,mem_cb_att_write
+	setarg module_bb_event_timer
+	store 2,mem_cb_event_timer
+
+	call module_spp_clear_last_transmite_clock
+	bpatch patch1b_5,mem_patch1b
+	call module_lpm_uart_init
+	call module_gpio_init
+	call check_module_disabled
+	branch module_hci_event_enter_standby_mode
+
+
+module_lpm_uart_init:
+	fetch 4,mem_module_uart_rx_buffer
+	hstore 4,core_uart_rsaddr
+
+	fetch 4,mem_module_uart_tx_buffer
+	hstore 4,core_uart_tsaddr
+
+	hfetch 1,core_gpio_sel1
+	or_into 0x04,pdata
+	and_into 0xfc,pdata
+	hstore 1,core_gpio_sel1
+	jam 0x00,core_uart_ctrl
+
+	fetch 2,mem_module_uart_rx_buffer
+	hstore 2,core_uart_rrptr
+	fetch 2,mem_module_uart_tx_buffer
+	hstore 2,core_uart_twptr
+	hstore 2,core_uart_trptrp
+
+	hfetch 4,core_gpio_pu0
+	set1 7,pdata
+	hstore 4,core_gpio_pu0
+	
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_UART,pdata
+	hstore 2,core_clkoff
+	call uart_set_baud_by_mem
+	jam uartclk_crystal,core_uart_clksel
+	jam uart_ctrl_h4,core_uart_ctrl
+
+	fetch 1,mem_module_flag
+	isolate1 MODULE_FLAG_UART_FLOW_CONTROL,pdata
+	hfetcht 1,core_uart_ctrl
+	setflag true,4,temp
+	hstoret 1,core_uart_ctrl
+	rtn
+	
+
+
+module_lpm_init:
+	call module_spp_clear_last_transmite_clock
+	branch module_lpm_uart_init
+//	branch module_gpio_init
+	
+module_gpio_init:
+	//module state pin
+//	call ui_led_init	
+//	call app_led_start_blink
+	//module conn state pin
+	fetcht 1,mem_module_connect_state_gpio
+	call gpio_config_output
+	call module_set_conn_pin_low
+	
+	fetcht 1,mem_module_wake_up_gpio
+	branch gpio_config_input
+
+module_lpm_lock:
+	fetcht 1,mem_module_wake_up_gpio
+	call gpio_get_bit
+	nbranch app_put_lpm_wake_lock,true
+	branch app_get_lpm_wake_lock
+
+	
+module_le_conn_process:
+	rtn
+
+module_bt_conn_process:
+	call module_spp_enter_sniff
+	branch module_control_air_flow
+
+module_spp_enter_sniff:
+	fetch 1,mem_ui_state_map
+	bbit0 UI_STATE_BT_SPP_CONN,module_spp_clear_last_transmite_clock
+	bpatch patch1b_6,mem_patch1b
+	setarg 0x3eff
+	fetcht 4,mem_last_transmite_clock
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_SNIFF,module_spp_clear_last_transmite_clock
+	fetch 1,mem_module_flag
+	rtnbit1 MOUDLE_TASK_SNIFF
+	call module_set_sniff_task_flag
+	call app_bt_enter_sniff
+module_spp_clear_last_transmite_clock:
+	copy clkn_bt,pdata
+	store 4,mem_last_transmite_clock
+	rtn
+	
+
+module_process_idle:
+	call module_control_air_flow
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	branch module_process
+
+	
+module_process_bb_event:
+	copy regc,pdata
+	beq BT_EVT_BB_CONNECTED,module_process_bb_conn
+	beq BT_EVT_BB_DISCONNECTED,module_process_bb_event_disconned
+	beq BT_EVT_RECONN_FAILED,module_process_reconn_fail
+	beq BT_EVT_SETUP_COMPLETE,module_process_setup_complete
+	beq BT_EVT_SPP_CONNECTED,module_process_spp_connected
+	beq BT_EVT_SPP_DISCONNECTED,module_process_spp_disconnected
+	beq BT_EVT_PINCODE_REQ,module_process_evt_pincode_req
+	beq BT_EVT_ENTER_SNIFF,module_process_enter_sniff
+	beq BT_EVT_EXIT_SNIFF,module_process_exit_sniff
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,module_process_page_time_out
+	beq BT_EVT_LE_CONNECTED,module_process_le_conn
+	beq BT_EVT_LE_DISCONNECTED,module_process_bb_even_le_disconn
+	beq BT_EVT_SNIFF_NOT_ACCEPT,module_process_sniff_not_accept
+	beq BT_EVT_UNSNIFF_ACCEPT,module_process_unsniff_accept
+	beq BT_EVT_UNSNIFF_NOT_ACCEPT,module_process_unsniff_not_accept
+	beq BT_EVT_LE_PAIRING_FAIL,module_hci_event_le_pairing_fail
+	beq BT_EVT_LE_PAIRING_SUCCESS,module_hci_event_le_pairing_success
+	beq BT_EVT_LE_START_ENC,module_hci_event_start_enc
+	beq BT_EVT_LE_PAUSE_ENC,module_hci_event_pause_enc
+	beq BT_EVT_LE_TK_GENERATE,module_hci_event_le_tk
+	beq BT_EVT_BT_GKEY_GENERATE,module_hci_event_gkey_generate
+	beq BT_EVT_BT_GET_PASSKEY,module_hci_event_passkey_entry_mode
+	beq BT_EVT_BT_PAIRING_FAIL,module_hci_event_bt_pairing_fail	
+	beq BT_EVT_BT_PAIRING_SUCCESS,module_hci_event_bt_pairing_success
+	beq BT_EVT_LE_GKEY_GENERATE,module_hci_event_le_gkey
+	beq BT_EVT_STORE_NVRAM,module_hci_event_store_device
+	beq BT_EVT_LE_LTK_LOST,module_process_ble_ltk_lost
+	rtn
+
+	
+module_process_bb_event_disconned:
+	call module_spp_clear_last_transmite_clock
+	fetch 1,mem_flag_pairing_state
+	ncall module_hci_event_bt_pairing_fail,blank
+	call module_disconn_start
+	fetch 2,mem_ui_state_map
+	rtnbit0 UI_STATE_BT_SPP_CONN
+	branch  module_spp_disconnected
+
+module_process_spp_connected:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_SPP_CONN,pdata
+	store 2,mem_ui_state_map
+	fetch 1,mem_module_spp_lpm_mult
+	store 1,mem_lpm_mult
+	call module_set_conn_pin_low
+	branch module_hci_event_spp_connect
+
+module_process_spp_disconnected:
+//	branch module_spp_disconnected
+module_spp_disconnected:
+	fetch 2,mem_ui_state_map
+	rtnbit0 UI_STATE_BT_SPP_CONN
+	set0 UI_STATE_BT_SPP_CONN ,pdata
+	store 2,mem_ui_state_map
+	branch module_hci_event_spp_disconnect
+
+
+module_process_enter_sniff:
+
+module_sniff_param_check:
+	call module_spp_clear_last_transmite_clock
+	//fetch 1,mem_context
+	//rtnbit0 state_insniff
+	fetch 2,mem_context+coffset_tsniff
+	rshift pdata,pdata
+	fetcht 2,mem_sniff_param_interval
+	isub temp,null
+	nbranch module_sniff_param_check_unsniff,zero
+	branch app_lpm_mult_enable
+module_sniff_param_check_unsniff:
+	fetch 1,mem_module_flag
+	rtnbit1 MOUDLE_TASK_UNSNIFF
+	hfetch 2,core_uart_rxitems    //*
+	ncall module_set_unsniff_task_flag,blank    //*加这两句话
+	branch app_bt_sniff_exit
+
+module_process_exit_sniff:
+	call module_clear_sniff_task_flag
+	branch app_lpm_mult_disable
+ 	
+module_process_setup_complete:
+	call module_spp_clear_last_transmite_clock
+	branch module_conn_start
+	
+module_process_bb_even_le_disconn:
+	call le_clr_config_more_data
+	call module_disconn_start
+	branch module_hci_event_le_disconnect
+
+module_process_evt_pincode_req:
+	branch  app_bt_set_pincode
+	
+
+module_process_sniff_not_accept:
+	branch module_clear_sniff_task_flag
+
+
+module_process_unsniff_accept:
+	fetch 1,mem_module_flag
+	bbit0 MOUDLE_TASK_UNSNIFF,app_bt_enter_sniff
+	branch module_clear_unsniff_task_flag
+
+	
+module_process_unsniff_not_accept:
+	branch module_clear_unsniff_task_flag
+
+	
+module_process_le_conn:
+	call le_send_att_exchange_mtu_requset
+	call module_conn_start
+	fetch 1,mem_module_le_lpm_mult
+	store 1,mem_lpm_mult
+	branch module_hci_event_le_connect
+
+
+module_process_bb_conn:
+	jam 0,mem_flag_mode_ssp_pin
+	call module_clear_sniff_task_flag
+	branch module_clear_unsniff_task_flag
+
+module_process_page_time_out:
+module_process_reconn_fail:
+module_disconn_start:
+	call module_start_adv_discovery_by_command
+	branch module_set_conn_pin_high
+
+
+module_process_ble_ltk_lost:
+	call le_send_reject_ind
+	branch le_send_smp_security_request
+
+
+module_set_conn_pin_high:
+	fetcht 1,mem_module_connect_state_gpio
+	branch gpio_out_active
+
+module_conn_start:
+	call module_stop_adv_discovery
+	branch module_set_conn_pin_low
+	
+module_stop_adv_discovery:
+	fetch 1,mem_module_state
+	isolate1 MOUDLE_STATE_BT_BIT,pdata
+	call app_bt_stop_discovery,true
+	fetch 1,mem_module_state
+	isolate1 MOUDLE_STATE_BLE_BIT,pdata
+	call app_ble_stop_adv,true
+	rtn
+module_set_conn_pin_low:
+	fetcht 1,mem_module_connect_state_gpio
+	branch gpio_out_inactive
+
+module_process_with_credit:
+	fetch 1,mem_credit_flag
+	rtneq CREDIT_DISABLE
+	branch rfcomm_send_uih_without_payload
+
+module_process:
+	hfetch 1,core_uart_status
+	bbit1 uart_status_rx_fifo_empty,module_process_with_credit  //rx no data
+	call uartd_prepare_rx
+	ifetch 1,contru
+	bne 0x01,module_hci_in_excp
+	hfetch 2,core_uart_rxitems
+	sub pdata,2,null
+	rtn positive
+	ifetch 1,contru
+	store 1,mem_module_uart_opcode
+	ifetcht 1,contru
+	copy contru,rega
+	storet 1,mem_module_uart_len
+	add temp,3,temp
+	hfetch 2,core_uart_rxitems
+	isub temp,temp
+	nrtn positive
+	jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	call module_hci_cmd_control
+	fetch 1,mem_module_temp_nl_discard_packet
+	rtneq HCI_NOT_DISCARD_PACKET
+	branch module_hci_dicard_packet //discard this packet
+
+module_hci_in_excp:
+	call delay_10ms
+	call module_hci_event_invalid_packet
+	branch module_hci_release_except
+
+
+module_hci_release_except:
+	bpatch patch1b_7,mem_patch1b
+	hfetch 2,core_uart_rxitems
+	rtn blank
+	call uartd_prepare_rx
+	ifetch 1,contru
+	sub pdata,0x01,null
+	ncall module_hci_dicard_bytes,zero
+	nbranch module_hci_release_except,zero
+	ifetch 1,contru
+	rtneq HCI_CMD_SPP_DATA_REQ
+	rtneq HCI_CMD_SET_CREDIT_GIVEN
+	increase -1,contru
+	call module_hci_dicard_bytes
+	branch module_hci_release_except
+
+module_hci_dicard_packet:
+	call uartd_prepare_rx
+	increase 2,contru
+	ifetch 1,contru
+	iadd contru,contru
+module_hci_dicard_bytes:
+	branch uartd_rxdone
+	
+/*********************HCI CONTROL*********************/
+module_hci_cmd_control:
+	bpatch patch1c_0,mem_patch1c
+	fetch 1,mem_module_uart_opcode
+	beq HCI_CMD_SET_BT_ADDR_REQ,module_hci_cmd_set_bt_addr
+	beq HCI_CMD_SET_LE_ADDR_REQ,module_hci_cmd_set_le_addr
+	beq HCI_CMD_SET_VISIBILITY_REQ,module_hci_cmd_set_visibility	
+	beq HCI_CMD_SET_BT_NAME_REQ,module_hci_cmd_set_bt_name
+	beq HCI_CMD_SET_LE_NAME_REQ,module_hci_cmd_set_le_name
+	beq HCI_CMD_SPP_DATA_REQ,module_hci_cmd_receive_spp_data
+	beq HCI_CMD_LE_DATA_REQ,module_hci_cmd_receive_le_data
+	beq HCI_CMD_STATUS_IRQ,module_hci_cmd_inquire_status
+	beq HCI_CMD_SET_PAIRING_REQ,module_hci_cmd_set_pairing_mode
+	beq HCI_CMD_SET_PINCODE_REQ,module_hci_cmd_set_pincode	
+	beq HCI_CMD_SET_UARTCONTROL_REQ,module_hci_cmd_set_uart_control_mode
+	beq HCI_CMD_SET_UART_BAUD_REQ,module_hci_cmd_set_uart_baud
+	beq HCI_CMD_VERSION_REQ,module_hci_cmd_version_request
+	beq HCI_CMD_BT_DISCONNECT,module_hci_cmd_bt_disconnect
+	beq HCI_CMD_BLE_DISCONNECT,module_hci_cmd_ble_disconnect
+	beq HCI_CMD_SET_NVRAM_REQ,module_hci_cmd_set_nvram
+	beq HCI_CMD_CONFIRM_GKEY,module_hci_cmd_confirm_gkey
+	beq HCI_CMD_SET_CREDIT_GIVEN,module_hci_cmd_set_credit_given
+	beq HCI_CMD_AUTO_ADV_SCAN,module_hci_cmd_auto_adv
+	beq HCI_CMD_POWER_REQ,module_hci_cmd_power_request
+	beq HCI_CMD_POWER_SET,module_hci_cmd_power_set
+	beq HCI_CMD_PASSKEY_ENTRY,module_hci_cmd_passkey_entry
+	beq HCI_CMD_SET_GPIO,module_hci_cmd_set_gpio
+	beq HCI_CMD_READ_GPIO,module_hci_cmd_read_gpio
+	beq HCI_CMD_LE_SET_PAIRING,module_hci_cmd_le_set_pairing_mode
+	beq HCI_CMD_LE_SET_ADV_DATA,module_hci_cmd_le_set_adv_data
+	beq HCI_CMD_LE_SET_SCAN_DATA,module_hci_cmd_le_set_scan_data
+	beq HCI_CMD_LE_SEND_CONN_UPDATE_REQ,module_hci_cmd_le_send_conn_update_req
+	beq HCI_CMD_LE_SET_ADV_PARM,module_hci_cmd_set_le_adv_parameter
+	beq HCI_CMD_LE_START_PAIRING,module_hci_cmd_le_start_pairing
+	beq HCI_CMD_SET_WAKE_GPIO,module_hci_cmd_set_wake_gpio
+	beq HCI_CMD_SET_TX_POWER,module_hci_cmd_set_tx_power
+	beq HCI_CMD_LE_CONFIRM_GKEY,module_hci_cmd_le_confirm_gkey
+	beq HCI_CMD_REJECT_JUSTWORK,module_hci_cmd_set_reject_justwork_flag
+	beq HCI_CMD_RESET_CHIP_REQ,module_hci_cmd_reset_chip
+	beq HCI_CMD_LE_SET_FIXED_PASSKEY,module_hci_cmd_le_set_fixed_passkey
+	beq HCI_TEST_CMD_CLOSE_LPM,module_hci_test_cmde_close_lpm
+	branch  module_hci_event_receive_invalid_cmd
+
+/*********************HCI COMMAND*********************/
+
+//command opcode 0x00
+module_hci_cmd_set_bt_addr:
+	fetch 1,mem_module_uart_len
+	bne 6,module_hci_event_receive_invalid_cmd
+	ifetch 6,contru
+	store 6,mem_lap
+	branch module_hci_event_receive_valid_cmd
+
+//command opcode 0x01
+module_hci_cmd_set_le_addr:
+	fetch 1,mem_module_uart_len
+	bne 6,module_hci_event_receive_invalid_cmd
+	ifetch 6,contru
+	store 6,mem_le_lap
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x02
+module_hci_cmd_set_visibility:
+	fetch 1,mem_module_uart_len
+	bne 1,module_hci_event_receive_invalid_cmd
+	copy rega,contru
+	call module_hci_event_receive_valid_cmd
+	ifetcht 1,contru
+	storet 1,mem_module_bluetooth_stauts_by_command
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	rtnbit1 UI_STATE_BT_CONNECTED
+module_start_adv_discovery_by_command:
+	fetch 1,mem_module_state
+	isolate1 MOUDLE_STATE_BT_BIT,pdata
+	nbranch moudle_start_adv_by_command,true
+	fetcht 1,mem_module_bluetooth_stauts_by_command
+	and temp,0x03,pdata
+	store 1,mem_scan_mode
+moudle_start_adv_by_command:
+	fetch 1,mem_module_state
+	isolate1 MOUDLE_STATE_BLE_BIT,pdata
+	nrtn true
+	fetcht 1,mem_module_bluetooth_stauts_by_command
+	isolate1 2,temp
+	branch app_ble_start_adv,true
+	branch app_ble_stop_adv
+
+
+//command opcode 0x03
+module_hci_cmd_set_bt_name:
+	fetch 1,mem_module_uart_len
+	sub pdata,67,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_local_name_length
+	arg 8,loopcnt
+	call memset0
+	fetch 1,mem_module_uart_len
+	copy pdata,loopcnt
+	copy rega,contru
+	arg mem_local_name,contw
+	call uart_copy_rx_bytes_fast
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x04
+module_hci_cmd_set_le_name:
+	fetch 1,mem_module_uart_len
+	sub pdata,29,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_le_name_len
+	copy pdata,loopcnt
+	copy rega,contru
+	arg mem_le_name,contw
+	call uart_copy_rx_bytes_fast
+	call le_modified_name
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x05
+module_hci_cmd_receive_spp_data:
+	fetch 1,mem_ui_state_map
+	bbit0 UI_STATE_BT_SPP_CONN,module_hci_event_receive_invalid_cmd
+	call app_check_sniff
+	branch module_hci_cmd_spp_exit_sniff,true
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+//	call p_nl_clear_last_transmite_clock
+	call module_spp_clear_last_transmite_clock
+	fetch 1,mem_remote_credits
+	rtn blank
+	fetch 2,mem_nl_rx_len_all
+	bne 0,module_hci_cmd_pass_init_ng_rx_len_all
+	fetch 1,mem_module_uart_len
+	store 2,mem_nl_rx_len_all
+
+	copy rega,contru
+//	ifetch 2,contru
+//	store 2,mem_nl_rx_handle
+	copy contru,pdata
+	store 2,mem_nl_rx_data_src
+module_hci_cmd_pass_init_ng_rx_len_all:
+	call module_hci_cmd_get_current_packet_len_and_remain_len
+	branch spp_tx_rfcomm_packet
+	
+module_hci_cmd_spp_exit_sniff:
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	branch module_exit_sniff
+
+module_hci_cmd_get_current_packet_len_and_remain_len:
+	call module_hci_cmd_get_current_patcket_len
+	fetch 2,mem_nl_rx_len_all
+	fetcht 2,mem_current_packet_length
+	isub temp,pdata
+	store 2,mem_nl_rx_len_all
+	rtn
+
+module_hci_cmd_get_current_patcket_len:
+	fetch 2,mem_nl_rx_len_all
+	arg DM_REFCOM_BUFF_LEN,temp
+	call not_greater_than
+	fetcht 2,mem_rfcomm_max_frame_size
+	call not_greater_than
+	fetcht 2,mem_pn_max_frame_size
+	call not_greater_than
+	store 2,mem_current_packet_length
+	rtn
+
+module_hci_command_tx_spp_tx_complete:
+	jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	jam HCI_CMD_SPP_DATA_REQ,mem_module_uart_opcode
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x09
+module_hci_cmd_receive_le_data:
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd
+	call module_check_ble_encrypt_state
+	branch module_hci_event_receive_invalid_cmd,user
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet 
+	fetch 1,mem_module_flag
+	bbit1 MODULE_FLAG_BLE_DATA_FINISH,module_hci_cmd_receive_le_data_finish
+	fetch 1,mem_module_hci_notify_len
+	nrtn blank
+	jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet 
+	ifetch 2,contru		//handle
+	store 2,mem_module_hci_notify_handle
+	copy contru,pdata
+	store 2,mem_module_hci_nofiy_addr
+	fetch 1,mem_module_uart_len
+	pincrease -2
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	branch module_hci_event_receive_invalid_cmd,zero
+	store 1,mem_module_hci_notify_len
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	call le_set_config_more_data
+	call module_hci_cmd_transmit_le_notify
+	call module_hci_cmd_transmit_le_notify
+	call module_hci_cmd_transmit_le_notify
+	fetch 1,mem_module_flag
+	rtnbit0 MODULE_FLAG_BLE_DATA_FINISH
+module_hci_cmd_receive_le_data_finish:
+	jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet 
+	call module_clear_le_tx_data_flag
+	branch module_hci_event_receive_valid_cmd
+
+module_hci_cmd_transmit_le_notify:
+	fetch 1,mem_module_hci_notify_len
+	rtn blank
+	call le_fifo_check_nearly_full
+	nrtn blank				//no fifo
+	call module_get_le_remote_mtu
+	bpatch patch1c_1,mem_patch1c
+	add temp,-3,pdata		//sub handle and opcode
+	fetcht 1,mem_module_hci_notify_len
+	call not_greater_than
+	copy pdata,rega
+	copy temp,pdata
+	isub rega,pdata
+	store 1,mem_module_hci_notify_len
+	fetcht 2,mem_module_hci_notify_handle
+	call le_att_malloc_tx_notify
+	fetch 2,mem_module_hci_nofiy_addr
+	copy pdata,contru
+	copy rega,loopcnt
+	call uart_copy_rx_bytes_fast
+	copy contru,pdata
+	store 2,mem_module_hci_nofiy_addr
+	fetch 1,mem_module_hci_notify_len
+	nrtn blank
+	branch module_set_le_tx_data_flag
+
+
+//output: temp is master mtu
+module_get_le_remote_mtu:
+	arg 0x17,temp
+	fetch 1,mem_module_flag
+	rtnbit1 MODULE_FLAG_BLE_SEND_MTU23
+	fetcht 2,mem_le_remote_mtu
+	rtn
+
+module_check_ble_encrypt_state:
+	fetch 1,mem_module_flag
+	bbit1 MODULE_FLAG_BLE_DATA_ENCRYPT,le_check_encrypt_state
+	branch disable_user
+	
+
+//command opcode 0x0b
+module_hci_cmd_inquire_status:
+	branch module_hci_event_status_res
+
+
+//command opcode 0x0c
+module_hci_cmd_set_pairing_mode:
+	copy rega,contru
+	ifetch 1,contru
+	beq PAIRING_PINCODE,module_hci_pairing_pincode_mode
+	beq PAIRING_JUSTWORK,module_hci_pairing_just_work_mode
+	beq PAIRING_PASSKEY,module_hci_pairing_passkey
+	beq PAIRING_CONFIRM,module_hci_pairing_numeric_comparison
+	branch module_hci_event_receive_invalid_cmd
+module_hci_pairing_pincode_mode:
+	call ssp_disable
+	jam 0,mem_ssp_enable
+	branch module_hci_event_receive_valid_cmd
+module_hci_pairing_just_work_mode:
+	setarg SSP_MODE_JUST_WORK_IO_CAP_DATA
+module_hci_sspairing_mode:	
+	store 3,mem_sp_iocap_local
+	store 1,mem_ssp_mode_flag
+	call ssp_enable
+	jam 1,mem_ssp_enable
+	branch module_hci_event_receive_valid_cmd
+module_hci_pairing_passkey:
+	setarg SSP_MODE_PASSKEY_IO_CAP_DATA
+	branch module_hci_sspairing_mode
+
+module_hci_pairing_numeric_comparison:
+	setarg SSP_MODE_SSP_PIN_IO_CAP_DATA
+	branch module_hci_sspairing_mode
+
+//command opcode 0x0d
+module_hci_cmd_set_pincode:
+	fetch 1,mem_module_uart_len
+	sub pdata,16,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_pin_length
+	copy pdata,loopcnt
+	arg mem_pin,contw
+	call uart_copy_rx_bytes
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x0e
+module_hci_cmd_set_uart_control_mode:
+	copy rega,contru
+	ifetch 1,contru
+	hfetcht 1,core_uart_ctrl
+	nsetflag blank,4,temp
+	hstoret 1,core_uart_ctrl
+ 	branch module_hci_event_receive_valid_cmd
+
+ 	
+//command opcode 0x0f
+module_hci_cmd_set_uart_baud:
+	fetch 1,mem_module_uart_len
+	copy pdata,loopcnt
+	copy rega,contru
+	call string2dec_from_uart
+	setarg uart_clk_24
+	idiv temp
+	call wait_div_end
+	quotient pdata
+module_hci_cmd_set_uart_baud_ok:
+	store uart_baud_len,mem_baud
+	call module_hci_event_receive_valid_cmd
+	call wait_uarttx
+	branch uart_set_baud_by_mem
+
+
+//command opcode 0x10
+module_hci_cmd_version_request:
+	arg 2,rega
+	arg mem_soft_version_num,regb
+	arg 0,temp
+	branch module_hci_event_set_cmd
+module_hci_event_set_cmd_send_response:
+	store 2,mem_event_cmd_response_content
+	arg mem_event_cmd_response_content,regb
+	arg 0,temp
+	branch module_hci_event_set_cmd
+
+
+//command opcode 0x11
+module_hci_cmd_bt_disconnect:
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BT_CONNECTED,module_hci_event_receive_invalid_cmd
+module_hci_cmd_bt_disconnect_doing:
+	call module_hci_event_receive_valid_cmd
+	branch app_bt_disconnect
+
+	
+//command opcode 0x12
+module_hci_cmd_ble_disconnect:
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd
+module_hci_cmd_ble_disconnect_doing:
+	call module_hci_event_receive_valid_cmd
+	branch app_ble_disconnect
+
+
+
+
+//command opcode 0x26
+module_hci_cmd_set_nvram:
+	fetch 1,mem_module_uart_len
+	copy pdata,loopcnt
+	copy rega,contru
+	fetch 2,mem_nv_data_ptr
+	icopy contw
+	call uart_copy_rx_bytes_fast
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x28
+module_hci_cmd_confirm_gkey:
+	fetch 1,mem_ui_state_map
+	bbit0 UI_STATE_BT_CONNECTED,module_hci_event_receive_invalid_cmd	
+	ifetch 1,contru
+	fetcht 1,mem_flag_mode_ssp_pin
+	setflag blank,FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,temp
+	set1 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT ,temp
+	storet 1,mem_flag_mode_ssp_pin
+
+	call module_hci_event_receive_valid_cmd
+
+	fetch 1,mem_flag_mode_ssp_pin
+	bbit1 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT,module_hci_cmd_spp_number_comparison_result_is1
+	rtn
+
+dhkey_not_accept:
+	jam 0,mem_flag_mode_ssp_pin
+	jam BT_CMD_DHKEY_NOT_ACCEPT,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+
+module_hci_cmd_spp_number_comparison_result_is1:
+	bbit1 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,number_comparison_successed
+	branch dhkey_not_accept	
+
+
+//command opcode 0x29
+module_hci_cmd_set_credit_given:
+	fetch 1,mem_ui_state_map
+	rtnbit0 UI_STATE_BT_SPP_CONN
+	fetch 1,mem_credit_flag
+	rtneq CREDIT_DISABLE
+	ifetch 1,contru
+	fetcht 1,mem_credit_given
+	iadd temp,temp
+	storet 1,mem_credit_given
+	rtn
+
+	
+//command opcode 0x2a
+module_hci_cmd_auto_adv:
+	arg 0x40,loopcnt
+	arg mem_le_adv_data_len,contw
+	call clear_mem
+	setarg 0
+	store 1,mem_regb
+	copy rega,contru
+module_hci_cmd_auto_adv_loop:
+	copy contru,pdata
+	store 2,mem_regc
+	call module_hci_cmd_auto_adv_adv_analys
+
+	fetch 1,mem_regb
+	fetcht 1,mem_temp
+	increase 1,temp
+	iadd temp,pdata
+	store 1,mem_regb
+
+	sub pdata,31,null
+	nbranch module_hci_cmd_auto_adv_store_scan,positive
+module_hci_cmd_auto_adv_store_adv:
+	fetcht 1,mem_le_adv_data_len
+	setarg mem_le_adv_data
+	iadd temp,pdata
+	store 2,mem_contw
+	fetcht 1,mem_temp
+	increase 1,temp
+	fetch 1,mem_le_adv_data_len
+	iadd temp,pdata
+	store 1,mem_le_adv_data_len
+	branch module_hci_cmd_auto_adv_store_common
+module_hci_cmd_auto_adv_store_scan:
+	fetcht 1,mem_le_scan_data_len
+	setarg mem_le_scan_data
+	iadd temp,pdata
+	store 2,mem_contw
+	fetcht 1,mem_temp
+	increase 1,temp
+	fetch 1,mem_le_scan_data_len
+	iadd temp,pdata
+	store 1,mem_le_scan_data_len
+module_hci_cmd_auto_adv_store_common:
+	fetch 2,mem_contw
+	copy pdata,contw
+	fetch 2,mem_regc
+	copy pdata,contru
+
+	copy temp,loopcnt
+	call uart_copy_rx_bytes_fast
+
+	fetch 1,mem_module_uart_len
+	fetcht 1,mem_regb
+	isub temp,null
+	nbranch  module_hci_cmd_auto_adv_loop,zero
+	branch module_hci_event_receive_valid_cmd
+
+//block of adv len in mem_temp
+module_hci_cmd_auto_adv_adv_analys:
+	ifetch 1,contru
+	store 1,mem_temp
+	ifetch 1,contru
+	store 1,mem_rega
+	rtn
+
+
+//command opcode 0x2b
+module_hci_cmd_power_request:
+	arg 0,temp
+	arg 2,rega
+	fetch 2,mem_module_vdd_quotient
+	store 2,mem_event_cmd_response_content
+	arg mem_event_cmd_response_content,regb
+	branch module_hci_event_set_cmd
+
+
+//command opcode 0x2c
+module_hci_cmd_power_set:
+	fetch 1,mem_module_uart_len
+	bne 1,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	store 1,mem_module_read_vdd_flag
+	setarg 0x00
+	store 2,mem_module_vdd_quotient
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x30
+module_hci_cmd_passkey_entry:
+	ifetch 4,contru
+	store 4,mem_pin
+	jam 4,mem_pin_length
+	jam 0,mem_authentication_passkey_times
+	call module_hci_event_receive_valid_cmd
+	branch authentication_passkey
+
+
+//command opcode 0x31
+module_hci_cmd_set_gpio:
+	fetch 1,mem_module_uart_len
+	bne 3,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	beq HCI_CMD_CONFIG_GPIO_INPUT,module_set_gpio_input
+	beq HCI_CMD_CONFIG_GPIO_OUTPUT,module_set_gpio_output
+	branch module_hci_event_receive_invalid_cmd
+
+module_set_gpio_input:
+	ifetcht 1,contru
+	ifetch 1,contru
+	beq GPIO_INPUT_HIGH_IMPEDANCE,module_set_gpio_high_impedance
+	nsetflag blank,7,temp
+	call gpio_config_input
+	branch module_hci_event_receive_valid_cmd
+
+module_set_gpio_high_impedance:
+	call gpio_set_high_impedance
+	branch module_hci_event_receive_valid_cmd
+	
+module_set_gpio_output:
+	ifetcht 1,contru
+	call gpio_config_output0
+	ifetch 1,contru	
+	isolate1 0,pdata
+	call gpio_out_flag
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x32
+module_hci_cmd_read_gpio:
+	fetch 1,mem_module_uart_len
+	bne 1,module_hci_event_receive_invalid_cmd
+	ifetcht 1,contru
+	call gpio_get_bit
+	setarg 0x0
+	nsetflag true,0,pdata
+	arg 1,rega
+	branch module_hci_event_set_cmd_send_response
+
+
+//command opcode 0x33
+module_hci_cmd_le_set_pairing_mode:
+	copy rega,contru
+	ifetch 1,contru
+	copy pdata,temp
+	beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,module_le_set_pairing_mode_secure_justwork
+	beq LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC,module_le_set_pairing_mode_secure_numeric
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,module_le_set_pairing_mode_secure_passkey
+	store 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_NONE, module_le_set_no_pairing
+	beq LE_PAIRING_MODE_LAGACY_JUSTWORK,module_le_set_pairing_mode_lagacy_just_work
+	beq LE_PAIRING_MODE_LAGACY_PASSKEY,module_le_set_pairing_mode_lagacy_passkey
+	branch module_hci_event_receive_invalid_cmd
+		
+module_le_set_pairing_mode_secure_justwork:
+	fetch 1,mem_le_secure_connect_enable
+	branch module_hci_event_receive_invalid_cmd,blank
+	storet 1,mem_le_pairing_mode
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	branch module_le_set_noinputnooutput
+module_le_set_pairing_mode_secure_numeric:
+	fetch 1,mem_le_secure_connect_enable
+	branch module_hci_event_receive_invalid_cmd,blank
+	storet 1,mem_le_pairing_mode
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	jam FLAG_IOCAP_DISPLAYYESNO,mem_le_pres_iocap
+	branch module_hci_event_receive_valid_cmd	
+module_le_set_pairing_mode_secure_passkey:	
+	fetch 1,mem_le_secure_connect_enable
+	branch module_hci_event_receive_invalid_cmd,blank
+	storet 1,mem_le_pairing_mode
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	branch module_le_set_displayonly
+module_le_set_no_pairing:
+	jam FLAG_LE_NO_BONDING_NO_MITM,mem_le_pres_auth
+module_le_set_noinputnooutput:	
+	jam FLAG_IOCAP_NOINPUTNOOUTPUT,mem_le_pres_iocap
+	branch module_hci_event_receive_valid_cmd	
+module_le_set_pairing_mode_lagacy_just_work:
+	jam FLAG_LE_BONDING_MITM,mem_le_pres_auth
+	branch module_le_set_noinputnooutput
+module_le_set_pairing_mode_lagacy_passkey:
+	jam FLAG_LE_BONDING_MITM,mem_le_pres_auth
+module_le_set_displayonly:	
+	jam FLAG_IOCAP_DISPLAYONLY,mem_le_pres_iocap
+	branch module_hci_event_receive_valid_cmd	
+
+	
+//command opcode 0x34
+module_hci_cmd_le_set_adv_data:
+	fetch 1,mem_module_uart_len
+	sub pdata,31,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_le_adv_data_len
+	copy pdata,loopcnt
+	copy rega,contru
+	arg mem_le_adv_data,contw
+	call uart_copy_rx_bytes_fast
+	branch module_hci_event_receive_valid_cmd
+	
+
+//command opcode 0x35
+module_hci_cmd_le_set_scan_data:
+	fetch 1,mem_module_uart_len
+	sub pdata,31,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_le_scan_data_len
+	copy pdata,loopcnt
+	copy rega,contru
+	arg mem_le_scan_data,contw
+	call uart_copy_rx_bytes_fast	
+	branch module_hci_event_receive_valid_cmd	
+
+	
+//command opcode 0x36
+module_hci_cmd_le_send_conn_update_req:
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd
+	fetch 1,mem_module_uart_len
+	bne 0x08,module_hci_event_receive_invalid_cmd
+	copy rega,contru
+	ifetch 8,contru
+	store 8,mem_le_interval_min
+	jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp
+	call  ui_ipc_send_cmd
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x37
+module_hci_cmd_set_le_adv_parameter:
+	ifetch 2,contru
+	store 2,mem_le_adv_interval
+	branch module_hci_event_receive_valid_cmd
+	
+	
+//command opcode 0x38
+module_hci_cmd_le_start_pairing:
+	fetch 1,mem_le_pairing_mode
+	branch module_hci_event_receive_invalid_cmd,blank
+	fetch 1,mem_le_pairing_state
+	bne FLAG_LE_PAIRING_NULL,module_hci_event_receive_invalid_cmd
+	fetch 1,mem_le_enc_state
+	bne FLAG_LE_ENC_NULL,module_hci_event_receive_invalid_cmd
+	call check_51cmd_le_smp_sec_req
+	branch module_hci_event_receive_valid_cmd	
+
+
+//command opcode 0x40
+module_hci_cmd_set_wake_gpio:
+	fetch 1,mem_module_uart_len
+	bne 5,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	store 1,mem_module_mcu_wake_pin
+	ifetch 4,contru
+	store 4, mem_module_mcu_wake_delay_us
+	fetcht 1,mem_module_mcu_wake_pin
+	call gpio_config_output
+	call module_set_mcu_wake_pin_low
+	branch module_hci_event_receive_valid_cmd
+	
+
+//command opcode 0x42
+module_hci_cmd_set_tx_power:
+	fetch 1,mem_module_uart_len
+	bne 0x01,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	store 1,mem_tx_power
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x48
+module_hci_cmd_le_confirm_gkey:
+	ifetch 1,contru
+	beq 0x01,module_hci_cmd_le_confirm_gkey_fail
+	fetch 1,mem_le_secure_connect_state
+	beq LE_SC_STAT_SEND_PUBLIC_KEY,module_hci_cmd_le_confirm_gkey_ok
+	beq LE_SC_STAT_RECEIVE_DHKEY,module_hci_cmd_le_confirm_gkey_ok
+	beq LE_SC_STAT_WAIT_CONFIRM_GKEY,module_hci_cmd_le_confirm_gkey_ok
+	branch module_hci_event_receive_invalid_cmd		
+module_hci_cmd_le_confirm_gkey_ok:
+	jam FLAG_LE_SC_CONFRIM_GKEY_OK,mem_le_sc_confirm_gkey_flag
+	branch module_hci_event_receive_valid_cmd	
+	
+module_hci_cmd_le_confirm_gkey_fail:
+	call le_send_pairing_confirm_value_failed
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x49
+module_hci_cmd_set_reject_justwork_flag:
+	fetch 1,mem_module_uart_len
+	bne 0x01,module_hci_event_receive_invalid_cmd
+	call module_hci_event_receive_valid_cmd
+	ifetch 1,contru
+	branch classic_bt_clr_reject_justwork_flag,blank
+	branch classic_bt_set_reject_justwork_flag
+
+
+//command opcode 0x51
+module_hci_cmd_reset_chip:
+	call module_hci_event_receive_valid_cmd
+	call wait_uarttx
+	jam 0x01,core_reset // rest YC1021
+	branch loop
+
+
+//command opcode 0x61
+module_hci_cmd_le_set_fixed_passkey:
+	fetch 1,mem_module_uart_len
+	beq 0,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	branch module_hci_cmd_le_set_random_passkey,blank
+	fetch 1,mem_module_uart_len
+	bne 5,module_hci_event_receive_invalid_cmd
+	ifetch 4,contru
+	arg 1000000,temp
+	isub temp,null
+	branch module_hci_event_receive_invalid_cmd,positive
+	store 4,mem_le_tk
+	call le_set_config_fixed_tk
+	branch module_hci_event_receive_valid_cmd
+
+module_hci_cmd_le_set_random_passkey:
+	call le_clr_config_fixed_tk
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0xff
+module_hci_test_cmde_close_lpm:
+	jam 0,mem_lpm_mode
+	branch module_hci_event_receive_valid_cmd
+	
+
+/*********************HCI EVENT*********************/
+
+module_hci_event_receive_invalid_cmd:
+	arg 1,temp
+	arg 0,rega
+	branch module_hci_event_set_cmd
+
+
+module_hci_event_receive_valid_cmd:
+	arg 0,temp
+	arg 0,rega
+	branch module_hci_event_set_cmd
+
+
+//event opcode 0x00
+module_hci_event_spp_connect:
+	jam  HCI_EVENT_SPP_CONN_REP,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x02
+module_hci_event_le_connect:
+	jam  HCI_EVENT_LE_CONN_REP,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x03
+module_hci_event_spp_disconnect:
+	jam  HCI_EVENT_SPP_DIS_REP,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x05
+module_hci_event_le_disconnect:
+	jam  HCI_EVENT_LE_DIS_REP,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x06
+//input:
+//	temp: success 0; fail 1
+//	rega:Response Content length
+//	regb:Response Content address
+module_hci_event_set_cmd:
+	fetch 1,mem_module_uart_opcode
+	copy pdata,regc
+	jam  HCI_EVENT_CMD_RES,mem_module_uart_opcode
+	setarg 2
+	iadd rega,pdata
+	call module_hci_prepare_tx
+	copy regc,pdata
+	istore 1,contwu
+	istoret 1,contwu
+	copy rega,loopcnt
+	copy regb,contr
+	call uart_copy_tx_bytes
+	branch uartd_send
+
+
+//event opcode 0x07
+module_hci_event_receive_spp_data:
+//	call p_nl_clear_last_transmite_clock
+	call module_spp_clear_last_transmite_clock
+	jam HCI_EVENT_SPP_DATA_REP,mem_module_uart_opcode
+	fetch 1,mem_current_length
+	rtn blank
+	call module_hci_prepare_tx
+	fetch 1,mem_current_length
+	copy pdata,loopcnt
+	fetch 2,mem_rfcomm_uih_payload_ptr
+	copy pdata,contr
+	call uart_copy_tx_bytes_fast
+	branch uartd_send
+
+
+//event opcode 0x08
+module_hci_event_receive_le_data:
+	jam HCI_EVENT_LE_DATA_REP,mem_module_uart_opcode
+	fetch 1,mem_module_le_rx_data_len
+	icopy loopcnt
+	increase 2,pdata
+	call module_hci_prepare_tx
+	fetch 2,mem_module_le_rx_data_handle // Attribute handle
+	istore 2,contwu
+	fetch 2,mem_module_le_rx_data_address
+	icopy contr
+	call uart_copy_tx_bytes_fast
+	branch uartd_send
+
+
+//event opcode 0x09
+module_hci_event_enter_standby_mode:
+	jam HCI_EVENT_STANDBY_REP,mem_module_uart_opcode
+module_hci_event_enter_standby_mode_len0:
+	setarg 0
+	call module_hci_prepare_tx
+	branch uartd_send
+
+
+//event opcode 0x0a
+module_hci_event_status_res:
+	jam HCI_EVENT_STATUS_RES,mem_module_uart_opcode
+	setarg 1
+	call module_hci_prepare_tx
+	
+	call module_hci_read_bt_status
+	
+	fetch 2,mem_ui_state_map	
+	arg UI_STATE_BT_HID_CONN,queue
+	qisolate1 pdata
+	setflag true,3,temp
+
+	arg UI_STATE_BLE_CONNECTED,queue
+	qisolate1 pdata
+	setflag true,5,temp	
+	
+	fetch 1,mem_ui_state_map
+	arg UI_STATE_BT_SPP_CONN,queue
+	qisolate1 pdata
+	setflag true,4,temp	
+	
+	istoret 1,contwu
+	branch uartd_send
+
+//	temp: bit0 3.0 inquiry;bit1 3.0 scan;bit2 ble adv;
+
+module_hci_read_bt_status:
+	arg 0,temp
+	fetch 1,mem_scan_mode
+	arg inq_scan_mode,queue
+	qisolate1 pdata
+	setflag true,0,temp
+	arg page_scan_mode,queue
+	qisolate1 pdata
+	setflag true,1,temp	
+
+	fetch 1,mem_le_adv_enable
+	arg 0,queue
+	qisolate1 pdata
+	setflag true,2,temp	
+	rtn
+
+
+//event opcode 0x0d
+module_hci_event_store_device:
+	jam HCI_EVENT_NVRAM_REP,mem_module_uart_opcode
+	fetch 1,mem_nv_data_number
+	mul32 pdata,34,pdata
+	icopy loopcnt
+	call module_hci_prepare_tx
+	fetch 2,mem_nv_data_ptr
+	icopy contr
+	call uart_copy_tx_bytes_fast
+	branch uartd_send
+
+
+//event opcode 0x0e
+module_hci_event_gkey_generate:
+	jam HCI_EVENT_GKEY,mem_module_uart_opcode
+	setarg 4
+	call module_hci_prepare_tx
+	fetch 4,mem_gkey
+	istore 4,contwu
+	branch uartd_send
+
+
+//event opcode 0x0f
+module_hci_event_invalid_packet:
+	jam HCI_EVENT_INVALID_PACKET,mem_module_uart_opcode
+	hfetch 2,core_uart_rxitems
+	arg 0xff,temp
+	call not_greater_than
+	copy pdata,loopcnt
+	call module_hci_prepare_tx
+	call uartd_prepare_rx
+	call uart_copy_rx2tx
+	branch uartd_send
+
+
+//event opcode 0x10
+module_hci_event_passkey_entry_mode:
+	jam  HCI_EVENT_GET_PASSKEY,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x11
+module_hci_event_le_tk:
+	jam HCI_EVENT_LE_TK,mem_module_uart_opcode
+	setarg 4
+	call module_hci_prepare_tx
+	fetch 4,mem_le_tk
+	istore 4,contwu
+	branch uartd_send
+
+
+//event opcode 0x14
+module_hci_event_le_pairing_fail:
+	arg FLAG_BLE_PAIRING_FAIL,rega
+	branch module_hci_event_pairing_completed
+
+module_hci_event_le_pairing_success:
+	arg FLAG_BLE_PAIRING_SUCCESS,rega
+	branch module_hci_event_pairing_completed
+
+module_hci_event_bt_pairing_fail:
+	arg FLAG_BT_PAIRING_FAIL,rega
+	branch module_hci_event_pairing_completed
+
+module_hci_event_bt_pairing_success:
+	arg FLAG_BT_PAIRING_SUCCESS,rega
+
+module_hci_event_pairing_completed:
+	jam 0,mem_flag_mode_ssp_pin
+	jam HCI_EVENT_LE_PAIRING_STATE,mem_module_uart_opcode
+	setarg 2
+	call module_hci_prepare_tx
+	copy rega,pdata
+	istore 2,contwu
+	branch uartd_send
+
+
+//event opcode 0x15
+module_hci_event_pause_enc:
+	arg FLAG_EVENT_PAUSE_ENC,regc
+	branch module_hci_event_enc
+
+module_hci_event_start_enc:
+	arg FLAG_EVENT_START_ENC,regc
+
+module_hci_event_enc:
+	jam HCI_EVENT_LE_ENCRYPTION_STATE,mem_module_uart_opcode
+	setarg 1
+	call module_hci_prepare_tx
+	copy regc,pdata
+	istore 1,contwu
+	branch uartd_send
+
+
+//event opcode 0x1d
+module_hci_event_le_gkey:
+	jam HCI_EVENT_LE_GKEY,mem_module_uart_opcode
+	setarg 4
+	call module_hci_prepare_tx
+	fetch 4,mem_gkey
+	istore 4,contwu
+	branch uartd_send
+
+
+//****************************************************************//
+	//module_hci_prepare_tx
+	//function:write hci packet header
+	//input: pdata-----packet length  (1byte)
+	//input: mem_uart_opcode------opcode (1byte)
+	//output:contwu --- pointer to packet payload
+	//use reg: contwu,pdata
+//****************************************************************//	
+module_hci_prepare_tx:
+	jam 0x02,mem_module_uart_cmd
+	store 1,mem_module_uart_len
+	storet 8,mem_temp
+	bpatch patch1c_2,mem_patch1c
+	call module_set_mcu_wake_pin_high_delay
+	fetcht 8,mem_temp
+	call uartd_prepare_tx
+	fetch 3,mem_module_uart_cmd
+	istore 3,contwu
+	rtn
+
+
+module_set_mcu_wake_pin_high_delay:
+	call module_check_mcu_wake_pin_high
+	rtn true
+module_set_mcu_wake_pin_h_delay:
+	call module_set_mcu_wake_pin_high
+	fetch 4,mem_module_mcu_wake_delay_us
+	rshift2 pdata,pdata
+	rtn blank
+	branch delay
+
+module_set_mcu_wake_pin_high:
+	//call ice_break
+	fetcht 1,mem_module_mcu_wake_pin
+	branch gpio_out_active
+
+module_check_mcu_wake_pin_high:
+	fetcht 1,mem_module_mcu_wake_pin
+	branch gpio_check_active
+
+module_set_mcu_wake_pin_low:
+	fetcht 1,mem_module_mcu_wake_pin
+	branch gpio_out_inactive
+
+
+delay:
+	increase -1,pdata
+	nop 38
+	nbranch delay,blank
+	rtn
+
+/*********************hci command end*********************/
+
+/*********************hci ble receive data start*********************/
+
+//rega is le rx data address
+//regb is le rx data length
+//mem_le_att_handle is write handle
+module_le_receive_data:
+	call module_check_ble_encrypt_state
+	rtn user
+	copy rega,pdata
+	store 2,mem_module_le_rx_data_address
+	copy regb,pdata
+	store 1,mem_module_le_rx_data_len
+	fetch 2,mem_le_att_handle
+	fetcht 2,mem_module_data_write_handle
+	isub temp,null
+	branch module_le_receive_data_ok,zero
+	fetcht 2,mem_module_data_write_handle2
+	isub temp,null
+	nrtn zero
+module_le_receive_data_ok:	
+	store 2,mem_module_le_rx_data_handle
+	branch module_hci_event_receive_le_data
+
+
+/*********************hci ble receive data end*********************/
+
+module_exit_sniff:
+	fetch 1,mem_module_flag
+	rtnbit1 MOUDLE_TASK_UNSNIFF
+	call module_set_unsniff_task_flag	
+	branch app_bt_sniff_exit
+
+
+module_set_lpm_mult_2:
+	jam 2,mem_lpm_mult
+	rtn
+
+
+
+module_bb_event_timer:
+	branch module_read_vdd_timer
+
+module_read_vdd_timer:
+	fetch 1,mem_module_read_vdd_flag
+	rtn blank
+	fetch 1,mem_module_read_vdd_count
+	rtn blank
+	increase -1,pdata
+	store 1,mem_module_read_vdd_count
+	nrtn blank
+	jam FLAG_MODULE_READ_VDD_COUNT,mem_module_read_vdd_count
+	call adc_set_mode
+	call vdd_calculate_by_mode
+	div pdata,0x64
+	call wait_div_end
+	quotient pdata
+	remainder temp
+	store 1,mem_module_vdd_quotient
+	storet 1,mem_module_vdd_remainder
+	rtn	
+	
+
+module_control_air_flow:
+	call check_uart_tx_buff
+	branch app_l2cap_flow_control_enable,positive
+	branch app_l2cap_flow_control_disable
+
+
+/**************module state *******************/
+module_set_sniff_task_flag:
+	arg MOUDLE_TASK_SNIFF,queue
+	branch module_set_state
+
+module_clear_sniff_task_flag:
+	arg MOUDLE_TASK_SNIFF,queue
+	branch module_clr_state
+
+module_set_unsniff_task_flag:
+	arg MOUDLE_TASK_UNSNIFF,queue
+	branch module_set_state
+
+module_clear_unsniff_task_flag:
+	arg MOUDLE_TASK_UNSNIFF,queue
+	branch module_clr_state
+
+module_set_le_tx_data_flag:
+	arg MODULE_FLAG_BLE_DATA_FINISH,queue
+	branch module_set_state
+	
+module_clear_le_tx_data_flag:
+	arg MODULE_FLAG_BLE_DATA_FINISH,queue
+	branch module_clr_state
+
+module_clr_state:
+	fetch 1,mem_module_flag
+	qset0 pdata
+	store 1,mem_module_flag
+	rtn
+
+module_set_state:
+	fetch 1,mem_module_flag
+	qset1 pdata
+	store 1,mem_module_flag
+	rtn
+	
+/**************module state end*******************/
+
+
+
+
+//define FPGA_DEBUG
+
+
+mouse_init:
+	call mouse_setting_config
+	call spi_ncs_enable
+	call mouse_init_sunt
+	call mouse_dpi_config
+	call spi_ncs_disable
+	rtn wake
+	call mouse_cheak_enable_usb
+	call mouse_cb_fuction
+//	fetch 1,mem_wakup_from_power_flag
+//	isolate0 gpio_latch,pdata
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit1 MOUSE_ENABLE_USB
+	call mouse_wakeup_from_power//,true	// enter 
+	rtnmark1 mark_24g
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery
+	branch mouse_check_reconn_target
+
+
+mouse_delay_4s:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_INIT_DELAY
+	arg 20,loopcnt
+mouse_delay_20ms:
+	setarg 200000
+	call sleep
+	loop delay_10ms
+	rtn
+
+	
+mouse_cheak_enable_usb:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_USB
+	branch usb_init
+	
+
+mouse_cb_fuction:
+	setarg mouse_le
+	store 2,mem_cb_le_process
+	setarg mouse_send_process
+	store 2,mem_cb_bt_process
+	setarg mouse_process_lpm_before
+	store 2,mem_cb_before_lpm
+	setarg mouse_priority_bb_event
+	store 2,mem_cb_bb_event_process
+	setarg mouse_idle
+	store 2,mem_cb_idle_process
+	setarg mouse_before_hibernate
+	store 2,mem_cb_before_hibernate
+	setarg le_mouse_bb_event_connect_complete
+	store 2,mem_cb_att_write
+
+	call g24_head_ptr2regc
+	setarg mouse_g24_package_data
+	add regc,offset_24g_cb_data,contw
+	istore 2,contw
+	setarg mouse_g24_enter_lpm
+	add regc,offset_24g_cb_lpm_prepare,contw
+	istore 2,contw
+	setarg mouse_lpm_before_common
+	add regc,offset_24g_cb_lpm_before,contw
+	istore 2,contw
+	
+	setarg mouse_bb_event_timer
+	store 2,mem_cb_event_timer
+	setarg mouse_spi_write_flash_cb
+	store 2,mem_cb_spi_flash_write_complate
+	rtn
+mouse_spi_write_flash_cb:
+mouse_spi_init:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_SPI2,spid_init
+	branch spid_init2
+
+mouse_setting_config:
+	rtn wake
+	call g24_set_device_addr
+	call mouse_gpio_init
+	call mouse_param_init
+	call mouse_adc_init
+	call le_set_config_fixed_ltk
+	call le_set_justwork
+	call le_set_fixed_ltk
+	call le_set_config_read_authentication
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_EEPROM,mouse_init_iic
+	bbit1 MOUSE_ENABLE_FLASH,mouse_load_flash_info_cheak
+	rtn
+
+mouse_init_iic:
+	call iic_init_390k
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	isolate1 MOUSE_ENABLE_2K_EEPROM,pdata
+	ncall clear_eeprom_size_2k,true
+	call mouse_load_eeprom_dpi
+	call mouse_init_environment
+	call mouse_set_24g_addr_eeprom
+	branch iicd_read_eep_data
+
+mouse_wakeup_from_power:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_WAKEUP_FROM_POWER,mouse_wakeup_no_from_power
+	fetch 1,mem_wakup_from_power_flag
+	isolate0 gpio_latch,pdata
+	nrtn true
+mouse_wakeup_no_from_power:
+	fetch 1,mem_reconn_times_init
+	store 1,mem_reconn_times
+	fetch 1,mem_config_function_enable
+	rtnbit1 ENABLE_SELECT_DEVICE_BY_SWITCH
+mouse_start_24g_mode:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_24G
+	bbit1 MOUSE_ENABLE_AUTO_24G_PARING,g24_auto_pair_start
+	branch g24_check_51cmd_start_24g
+le_mouse_bb_event_connect_complete:
+	fetch 1,mem_le_att_handle
+	sub pdata,26,pdata
+	nrtn zero
+	jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp
+	call ui_ipc_send_cmd
+mouse_le_write_enable:	
+	arg WRITE_REQ_ENABLE_FLAG,queue
+	branch mouse_le_enable_connect_flag
+
+mouse_dpi_up:
+	fetch 1,mem_mouse_dpi_button_state
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_mouse_dpi_button_state
+	rtn
+mouse_dpi_config:
+	fetch 1,mem_config_sensor_motion
+	and pdata,0x0f,pdata
+	store 1,mem_mouse_dpi
+	branch mouse_seting_dpi+2
+
+
+mouse_dpi_cheak:
+	fetcht 1,mem_dpi_button_gpio
+	call gpio_get_bit
+	nbranch mouse_dpi_up,true
+mouse_dpi_down:
+	fetch 1,mem_mouse_dpi_button_state
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_mouse_dpi_button_state
+	fetch 1,mem_mouse_dpi
+	increase 1,pdata
+	and pdata,0x03,pdata
+	store 1,mem_mouse_dpi
+	call mouse_seting_dpi
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_EEPROM,mouse_store_eerpom_dpi
+	bbit1 MOUSE_ENABLE_FLASH,mouse_before_store_flash_cpi
+	rtn
+mouse_before_store_flash_cpi:
+	arg MOUSE_SPI2_CLK_GPIO,temp
+	call gpio_config_output				//hold high
+	arg MOUSE_SPI2_SDIO_GPIO,temp
+	call gpio_config_output 			//hold high 
+	branch mouse_store_flash_device_info
+
+mouse_seting_dpi:
+	bpatch patch1c_3,mem_patch1c
+	call mosue_dpi_led_blink_init
+	fetch 1,mem_config_sensor_type
+	beq P3610,mouse_seting_3610_dpi
+	beq P3212,mouse_seting_3212_dpi
+	fetch 1,mem_mouse_dpi
+	beq MOUSE_DPI_LEVEL1,mouse_set_cpi1
+	beq MOUSE_DPI_LEVEL2,mouse_set_cpi2
+	beq MOUSE_DPI_LEVEL3,mouse_set_cpi3
+	beq MOUSE_DPI_LEVEL4,mouse_set_cpi4
+mouse_set_cpi2:
+	fetch 1,mem_320x_dpi_2
+	branch mouse_p3205_dpi
+mouse_set_cpi1:
+	fetch 1,mem_320x_dpi_1
+	branch mouse_p3205_dpi
+mouse_set_cpi3:
+	fetch 1,mem_320x_dpi_3
+	branch mouse_p3205_dpi
+mouse_set_cpi4:
+	fetch 1,mem_320x_dpi_4
+	branch mouse_p3205_dpi
+moue_seting_cpi_count:
+	fetch 1,mem_config_sensor_type
+	rtneq P3065_XY
+	fetch 1 ,mem_mouse_cpi_count
+	increase 1,pdata
+	store 1,mem_mouse_cpi_count
+	rtn
+
+mouse_seting_3212_dpi:
+	fetch 1,mem_mouse_dpi
+	beq MOUSE_DPI_LEVEL1,mouse_set_p3212_cpi1
+	beq MOUSE_DPI_LEVEL2,mouse_set_p3212_cpi2
+	beq MOUSE_DPI_LEVEL3,mouse_set_p3212_cpi3
+	beq MOUSE_DPI_LEVEL4,mouse_set_p3212_cpi4
+mouse_set_p3212_cpi2:
+	fetch 1,mem_3212_dpi_2
+	branch mouse_p3212_dpi
+mouse_set_p3212_cpi1:
+	fetch 1,mem_3212_dpi_1
+	branch mouse_p3212_dpi
+mouse_set_p3212_cpi3:
+	fetch 1,mem_3212_dpi_3
+	branch mouse_p3212_dpi
+mouse_set_p3212_cpi4:
+	fetch 1,mem_3212_dpi_4
+mouse_p3212_dpi:
+	store 1,mem_mouse_cpi_count
+	lshift8 pdata,pdata
+	copy pdata,rega
+	add pdata,MOUSE_P3212_DPI_XADDRESS,pdata
+  	call twspi_write
+ 	copy rega,pdata
+  	add pdata,MOUSE_P3212_DPI_YADDRESS,pdata
+	branch twspi_write
+	
+mouse_seting_3610_dpi:
+	fetch 1,mem_mouse_dpi
+	beq MOUSE_DPI_LEVEL1,mouse_set_p3610_cpi1
+	beq MOUSE_DPI_LEVEL2,mouse_set_p3610_cpi2
+	beq MOUSE_DPI_LEVEL3,mouse_set_p3610_cpi3
+	beq MOUSE_DPI_LEVEL4,mouse_set_p3610_cpi4
+mouse_set_p3610_cpi2:
+	fetch 1,mem_3610_dpi_2
+	branch mouse_p3610_dpi
+mouse_set_p3610_cpi1:
+	fetch 1,mem_3610_dpi_1
+	branch mouse_p3610_dpi
+mouse_set_p3610_cpi3:
+	fetch 1,mem_3610_dpi_3
+	branch mouse_p3610_dpi
+mouse_set_p3610_cpi4:
+	fetch 1,mem_3610_dpi_4
+mouse_p3610_dpi:
+	store 1,mem_mouse_cpi_count
+	call mouse_spi_sdio_gpio_pollup
+	fetch 1,mem_mouse_cpi_count
+mouse_reset_p3610_dpi:
+	add pdata,0x80,pdata
+	lshift8 pdata,pdata
+	add pdata,MOUSE_P3610_DPI_ADDRESS,pdata
+	copy pdata,rega
+	branch mouse_set_sensor_reg
+	
+mouse_p3205_dpi:
+	store 1,mem_mouse_cpi_count
+	call moue_seting_cpi_count
+	fetch 1,mem_mouse_cpi_count
+	setarg MOUSE_DPI_ADDRESS
+	call twspi_read
+	and pdata,0xf8,temp
+	fetch 1,mem_mouse_cpi_count
+	iadd temp,pdata
+	lshift8 pdata,pdata
+	add pdata,MOUSE_DPI_ADDRESS,pdata
+	branch twspi_write
+	
+
+mouse_init_environment:
+	call app_initflag_check
+	branch mouse_eeprom_load_recon_info,zero
+	call mouse_ble_init_address
+	call mouse_store_eeprom_device_info
+	branch app_initflag_store
+
+
+mouse_24g_pairing_button:
+	fetch 2,mem_24g_pairing_timer_count
+	rtn blank
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_24G
+	rtnbit1 MOSUE_24G_PAIRING_FLAG
+	rtnmark1 mark_24g
+	call mouse_check_key_gpio
+	rtnne MOUSE_LMR_BUTTON
+	call mouse_devce_led_off
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	call mouse_enable_function_flag
+	setarg 0
+	store 2,mem_mouse_direct_timer
+	store 1,mem_mouse_send_blank_timer
+	call g24_set0_mem_check_dongle_times
+	
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_RECONNECT,mouse_cancel_reconnect
+	bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect
+	bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect
+	call mouse_stop_discovery
+	branch g24_start_pairing_sm1
+	
+
+mouse_idle:
+	call mouse_24g_pairing_button
+	call ui_check_paring_button
+	call mouse_dpi_cheak
+	call mouse_usb_isr
+	call mouse_wheel_check
+	branch mouse_usb_mode
+mouse_usb_isr:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_USB
+	call usb_isr	
+	branch usb_offline_state
+
+mouse_cheak_usb:
+	hfetch 1,core_usb_addr
+	bbit0 7,mouse_usb_no_exsit
+	bbit1 7,mouse_usb_exsit
+	rtn
+mouse_usb_no_exsit:
+	fetch 1,mem_usb_addr
+	rtnbit0 7
+	branch soft_reset_chip
+mouse_usb_exsit:
+	fetch 1,mem_usb_addr
+	rtnbit1 7
+	branch mouse_stop_bluetooth_mode
+	
+mouse_usb_mode:
+	call mouse_cheak_usb
+	hfetch 1,core_usb_addr
+	store 1,mem_usb_addr
+	rtnbit0 7
+	call mouse_clkn_check 
+	fetch 4,mem_btclk_sensor
+	fetcht 1,mem_wire_usb_interval
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	store 4,mem_btclk_sensor
+	call mouse_motion
+	nrtn user
+	jam 4,mem_usb_tx_enable
+	branch mouse_wired_to_usb
+
+mouse_clkn_check:
+	fetcht 4,mem_btclk_sensor
+	copy clkn_bt,pdata
+	isub temp,null
+	ncall mouse_clkn_timeout,positive
+	rtn
+mouse_clkn_timeout:
+	setarg 0
+	store 4,mem_btclk_sensor
+	rtn
+
+
+	
+mouse_wired_to_usb:
+	fetch 1,mem_usb_tx_enable
+	rtnbit0 2
+	branch mouse_data_push
+mouse_data_push:
+	hfetch 1,core_usb_addr
+	rtnbit0 7
+	jam USB_EP2_MS,mem_usb_ep2_data
+	setarg MS_REPORT_ID
+	store 1,mem_usb_mouse_data	
+	fetch 7,mem_mouse_key
+	istore 7,contw
+	rtn
+
+
+mouse_enable_clock_qdecoder:
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_QDECODER,pdata
+	hstore 2,core_clkoff
+	rtn
+
+mouse_param_init:
+	setarg 0x8c00				//bt sdp start address
+	store 2,mem_ui_uuid_table
+	setarg 0x8e7a				//ble attlist start address
+	store 2,mem_ui_le_uuid_table
+	setarg 0x2402
+	store 2,mem_fcomp_mul
+	setarg 0x2580
+	store 3,mem_class
+	jam 3,mem_lpm_mult_timeout
+	jam 8,mem_lpm_overhead
+	jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue
+	setarg 0x0200
+	store 2,mem_lpm_interval
+	jam 0x17,mem_le_local_mtu
+	jam 0x17,mem_le_remote_mtu
+//===========init spi param==============================
+	setarg 0x0a77
+	store 2,mem_spi_init_clk
+//===========default bt reconnect address===================	
+//	jam 1,mem_device_flag
+//	setarg 0x332211
+//	store 3,mem_device1_addr
+//	store 3,mem_device2_addr
+//	store 3,mem_device3_addr
+//	setarg 0x665544
+//	store 3,mem_device1_addr+3
+//	store 3,mem_device2_addr+3
+//	store 3,mem_device3_addr+3
+//	setarg 0x34
+//	store 1,mem_device1_type
+//	store 1,mem_device2_type
+//	store 1,mem_device3_type
+//===========all 16bit uuid==================================
+	setsect 0,0x306
+	setsect 1,0x4440
+	setsect 2,0x10000
+	setsect 3,0x4408
+	store 9,mem_all_uuid_16bits
+	setsect 0,0x1224
+	setsect 1,0x4000
+	setsect 2,0x0
+	istore 5,contw
+//===========features=====================================
+	setsect 0,0x3ffff
+	setsect 1,0x2fe23
+	setsect 2,0x199d9
+	setsect 3,0x20d
+	store 8,mem_features
+//======================================================	
+	setarg 0x012c  				//24g ban pairing timer init
+	store 2,mem_24g_pairing_timer_count
+	call le_modified_name
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag 
+	rtnbit0 MOUSE_ENABLE_GPIO_CONTROL_ADC_SENSOR
+	call mouse_sensor_set_angle
+	branch mouse_select_adc
+
+mouse_sensor_set_angle:
+	fetcht 1,mem_select_sensor_angle_gpio
+	call gpio_config_input
+	fetcht 1,mem_select_sensor_angle_gpio
+	call gpio_get_bit
+	jam MOUSE_3CLK_ANGLE,mem_config_sensor_angle
+	rtn true
+	jam MOUSE_12CLK_ANGLE,mem_config_sensor_angle
+	rtn
+
+mouse_select_adc:
+	fetcht 1,mem_select_adc_gpio
+	call gpio_config_input
+	fetcht 1,mem_select_adc_gpio
+	call gpio_get_bit
+	jam ADC_CONFIG_VINLPM,mem_adc_config_flag
+	rtn true
+	jam ADC_CONFIG_GPIO,mem_adc_config_flag
+	rtn
+	
+	
+mouse_adc_init:
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_VINLPM,mouse_adc_init_data_vinlpm
+	beq ADC_CONFIG_HVIN,mouse_adc_init_data_hvin
+	beq ADC_CONFIG_GPIO,mouse_adc_init_data_io
+	branch mouse_adc_init_data_vinlpm
+	
+mouse_adc_init_data_vinlpm:
+	fetcht 2,mem_2v_adc_vinlpm_data
+	fetch 2,mem_3v_adc_vinlpm_data
+	isub temp,pdata
+	mul32 pdata,20,pdata 
+	div pdata,100
+	call wait_div_end
+	quotient pdata
+	store 2,mem_adc_reference_voltage //vinlpm :2v2 low alter
+	rtn
+mouse_adc_init_data_hvin:
+	fetcht 2,mem_1v_adc_hvin_data
+	fetch 2,mem_5v_adc_hvin_data
+	isub temp,pdata
+	mul32 pdata,230,pdata 
+	div pdata,400
+	call wait_div_end
+	quotient pdata
+	store 2,mem_adc_reference_voltage //hvin :3v3 low alter
+	rtn
+mouse_adc_init_data_io:
+	fetch 2,mem_1v_adc_io_data
+	store 2,mem_adc_reference_voltage  //vio :1v low alter
+	rtn
+mouse_gpio_init:
+	fetcht 1,mem_eeprom_wp_gpio
+	call gpio_config_output
+	call usb_offline_check_init
+	fetcht 1,mem_lbutton_gpio
+	call gpio_config_input
+	fetcht 1,mem_rbutton_gpio
+	call gpio_config_input
+	fetcht 1,mem_mbutton_gpio
+	call gpio_config_input
+	fetcht 1,mem_sensor_data_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_sensor_reset_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_whee_a_data_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_whee_b_data_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_whee_ta_data_gpio
+	call gpio_config_input
+	fetcht 1,mem_whee_tb_data_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_bk_button_gpio
+	call gpio_config_input
+	fetcht 1,mem_fw_button_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_config_low_voltage_alarm_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_config_device1_led_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_config_device2_led_gpio
+	call gpio_config_output
+	
+	fetcht 1,mem_config_device3_led_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_dpi_led_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_config_input
+	
+	fetcht 1,mem_config_bt_button_gpio
+	call gpio_config_input	
+
+	fetcht 1,mem_dpi_button_gpio
+	branch gpio_config_input
+
+mouse_wheel_gpio_set_wake:
+	fetcht 1,mem_whee_a_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_b_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_ta_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_tb_data_gpio
+	branch gpio_set_wake_by_current_state
+	
+mouse_before_hibernate_wheel_gpio_set:
+	fetcht 1,mem_whee_a_data_gpio
+	call mouse_gpio_set_pupd_by_input
+	fetcht 1,mem_whee_b_data_gpio
+	call mouse_gpio_set_pupd_by_input
+	fetcht 1,mem_whee_ta_data_gpio
+	call mouse_gpio_set_pupd_by_input
+	fetcht 1,mem_whee_tb_data_gpio
+	branch mouse_gpio_set_pupd_by_input
+
+mouse_gpio_set_pupd_by_input:
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	and temp,0x7f,queue
+	hfetch 4,core_gpio_in
+	qisolate1 pdata
+	hfetch 4,core_gpio_pu0
+	qsetflag true,pdata
+	hstore 4,core_gpio_pu0
+	hfetch 4,core_gpio_pd0
+	nqsetflag true,pdata
+	hstore 4,core_gpio_pd0
+	rtn
+	
+mouse_before_hibernate:
+	enable user
+	hfetch 4,0x8138
+	setflag user,26,pdata
+	hstore 4,core_lpm_reg
+	call lpm_write_ctrl
+	call mouse_devce_led_off
+	call mouse_before_hibernate_wheel_gpio_set
+//	call gpio_set_before_lpm_common
+	branch mouse_lpm_before_common
+
+
+	
+mouse_process_lpm_before:
+	call mouse_lpm_before_common
+	fetch 1,mem_lpm_current_mult
+	nrtn blank					// 7.5ms, no gpio wakeup
+	branch gpio_clr_wake
+
+mouse_lpm_before_common:
+	call mouse_wheel_check
+	arg MOUSE_SPI1_CLK_GPIO,temp					// set sclk high
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	isolate1 MOUSE_ENABLE_SPI2,pdata
+	call mouse_spi_clk_gpio,true
+	call gpio_config_output
+	call twspi_disable
+
+
+
+	fetcht 1,mem_lbutton_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_rbutton_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_mbutton_gpio
+	call gpio_set_wake_by_current_state
+
+	fetcht 1,mem_bk_button_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_fw_button_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_dpi_button_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_a_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_b_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_ta_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_tb_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_sensor_data_gpio
+	branch gpio_set_wake
+	
+
+	
+mouse_spi_clk_gpio:
+	arg MOUSE_SPI2_CLK_GPIO,temp
+	rtn
+
+mouse_wheel_check:
+	bpatch patch1c_4,mem_patch1c
+	call mouse_t_wheel_scan
+	call mouse_wheel_scan
+	fetch 1,mem_wheel_tb_new_pinlevel
+	fetcht 1,mem_wheel_tb_old_pinlevel
+	store 1,mem_wheel_tb_old_pinlevel
+	isub temp,null
+	nbranch app_lpm_wake_auto_lock,zero
+	fetch 1,mem_mwheel_b_new_pinlevel
+	fetcht 1,mem_mwheel_b_old_pinlevel
+	store 1,mem_mwheel_b_old_pinlevel
+	isub temp,null
+	nbranch app_lpm_wake_auto_lock,zero
+	rtn
+mouse_t_wheel_scan:
+	fetch 1,mem_whee_ta_data_gpio
+	rtneq GPIO_DISABLE
+	arg 0,rega
+	fetcht 1,mem_whee_ta_data_gpio
+	call gpio_get_bit
+	setflag true,0,rega
+	fetcht 1,mem_whee_tb_data_gpio
+	call gpio_get_bit
+	setflag true,1,rega
+	copy rega,pdata
+	store 1,mem_wheel_tb_new_pinlevel
+	beq 0x01,mouse_t_wheel_scan_judge1
+	beq 0x02,mouse_t_wheel_scan_judge2
+	fetch 1,mem_wheel_tog
+	bbit1 7,mouse_t_wheel_scan_judge3
+	rtn
+
+mouse_t_wheel_scan_judge1:
+	fetch 1,mem_wheel_tb_old_pinlevel
+	beq 0,mouse_t_wheel_scan_judge11
+	beq 3,mouse_t_wheel_scan_judge12
+	rtn
+mouse_t_wheel_scan_judge2:
+	fetch 1,mem_wheel_tb_old_pinlevel
+	beq 0,mouse_t_wheel_scan_judge21
+	beq 3,mouse_t_wheel_scan_judge22
+	rtn
+mouse_t_wheel_scan_judge11:
+	jam 0x82,mem_wheel_tog
+	rtn
+mouse_t_wheel_scan_judge12:
+	jam 0x81,mem_wheel_tog
+	rtn
+mouse_t_wheel_scan_judge21:
+	jam 0x80,mem_wheel_tog
+	rtn
+mouse_t_wheel_scan_judge22:
+	jam 0x83,mem_wheel_tog
+	rtn
+mouse_t_wheel_scan_judge3:
+	fetch 1,mem_wheel_tog
+	set0 7,pdata
+	store 1,mem_wheel_tog
+	beq 0,mouse_t_wheel_scan_judge30
+	beq 1,mouse_t_wheel_scan_judge31
+	beq 2,mouse_t_wheel_scan_judge32
+	beq 3,mouse_t_wheel_scan_judge33
+	rtn
+mouse_t_wheel_scan_judge30:
+	fetch 1,mem_wheel_tb_new_pinlevel
+	beq 3,mouse_wheel_t_forward
+	rtn
+mouse_t_wheel_scan_judge31:
+	fetch 1,mem_wheel_tb_new_pinlevel
+	beq 0,mouse_wheel_t_forward
+	rtn
+mouse_t_wheel_scan_judge32:
+	fetch 1,mem_wheel_tb_new_pinlevel
+	beq 3,mouse_wheel_t_back
+	rtn
+mouse_t_wheel_scan_judge33:
+	fetch 1,mem_wheel_tb_new_pinlevel
+	beq 0,mouse_wheel_t_back
+	rtn
+mouse_wheel_t_forward:
+	fetch 1,mem_mouse_tz_data_count1
+	increase 1,pdata
+	store 1,mem_mouse_tz_data_count1
+	sub pdata,1,null
+	rtn positive
+	jam 0,mem_mouse_tz_data_count1
+	fetch 1,mem_mouse_tz_data
+	increase 1,pdata
+	store 1,mem_mouse_tz_data
+	rtn
+mouse_wheel_t_back:
+	fetch 1,mem_mouse_tz_data_count
+	increase 1,pdata
+	store 1,mem_mouse_tz_data_count
+	sub pdata,1,null
+	rtn positive
+	jam 0,mem_mouse_tz_data_count
+	fetch 1,mem_mouse_tz_data
+	increase -1,pdata
+	store 1,mem_mouse_tz_data
+	rtn
+
+
+mouse_wheel_scan:
+	fetch 1,mem_whee_a_data_gpio
+	rtneq GPIO_DISABLE
+	arg 0,rega
+	fetcht 1,mem_whee_a_data_gpio
+	call gpio_get_bit
+	setflag true,0,rega
+	fetcht 1,mem_whee_b_data_gpio
+	call gpio_get_bit
+	setflag true,1,rega
+	copy rega,pdata
+	store 1,mem_mwheel_b_new_pinlevel
+	beq 0x01,mouse_wheel_scan_judge1
+	beq 0x02,mouse_wheel_scan_judge2
+	fetch 1,mem_mwheel_tog
+	bbit1 7,mouse_wheel_scan_judge3
+	rtn
+
+mouse_wheel_scan_judge1:
+	fetch 1,mem_mwheel_b_old_pinlevel
+	beq 0,mouse_wheel_scan_judge11
+	beq 3,mouse_wheel_scan_judge12
+	rtn
+mouse_wheel_scan_judge2:
+	fetch 1,mem_mwheel_b_old_pinlevel
+	beq 0,mouse_wheel_scan_judge21
+	beq 3,mouse_wheel_scan_judge22
+	rtn
+mouse_wheel_scan_judge11:
+	jam 0x82,mem_mwheel_tog
+	rtn
+mouse_wheel_scan_judge12:
+	jam 0x81,mem_mwheel_tog
+	rtn
+mouse_wheel_scan_judge21:
+	jam 0x80,mem_mwheel_tog
+	rtn
+mouse_wheel_scan_judge22:
+	jam 0x83,mem_mwheel_tog
+	rtn
+mouse_wheel_scan_judge3:
+	fetch 1,mem_mwheel_tog
+	set0 7,pdata
+	store 1,mem_mwheel_tog
+	beq 0,mouse_wheel_scan_judge30
+	beq 1,mouse_wheel_scan_judge31
+	beq 2,mouse_wheel_scan_judge32
+	beq 3,mouse_wheel_scan_judge33
+	rtn
+mouse_wheel_scan_judge30:
+	fetch 1,mem_mwheel_b_new_pinlevel
+	beq 3,mouse_wheel_forward
+	rtn
+mouse_wheel_scan_judge31:
+	fetch 1,mem_mwheel_b_new_pinlevel
+	beq 0,mouse_wheel_forward
+	rtn
+mouse_wheel_scan_judge32:
+	fetch 1,mem_mwheel_b_new_pinlevel
+	beq 3,mouse_wheel_back
+	rtn
+mouse_wheel_scan_judge33:
+	fetch 1,mem_mwheel_b_new_pinlevel
+	beq 0,mouse_wheel_back
+	rtn
+mouse_wheel_forward:
+	jam 0,mem_mouse_z_data_count1
+	fetch 1,mem_mouse_z_data
+	increase 1,pdata
+	store 1,mem_mouse_z_data
+	rtn
+mouse_wheel_back:
+	jam 0,mem_mouse_z_data_count
+	fetch 1,mem_mouse_z_data
+	increase -1,pdata
+	store 1,mem_mouse_z_data
+	rtn
+	
+	
+mouse_hid_connected:
+	setarg HID_HANDSHAKE_TIMEOUT
+	store 1,mem_hid_handshake_timer_count
+	rtn
+	
+mouse_send_process:
+	fetch 1,mem_app_handshake_flag
+	rtn blank
+	call l2cap_malloc_is_fifo_nearly_full
+	nrtn blank
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOSUE_24G_PAIRING_FLAG,mouse_send_empty_data
+	bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_send_empty_data
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_send_empty_data
+	call mouse_motion
+	nrtn user
+mouse_send_data:
+	arg 9,rega
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_int_remote_cid
+	istore 2,contw
+	setarg 0x02a1
+	istore 2,contw
+	fetch 7,mem_mouse_key
+	istore 7,contw
+	rtn
+
+	
+mouse_send_empty_data:
+	setarg 0
+	store 7,mem_mouse_key
+	branch mouse_send_data
+
+
+mouse_no_data_timer_init:
+	fetch 2,mem_mouse_no_data_timeout
+	store 2,mem_mouse_no_data_timer
+	rtn
+
+	
+mouse_fill_data_le:
+	bpatch patch1c_5,mem_patch1c
+	arg 7,rega //len
+	fetcht 2,mem_le_notify_handle
+	call le_att_malloc_tx_notify
+	fetch 7,mem_mouse_key
+	istore 7,contw
+	rtn
+
+mouse_motion:
+	bpatch patch1c_6,mem_patch1c
+	disable user
+	setarg 0
+	store 6,mem_mouse_x
+	call mouse_cheak_sensor_data
+	call mouse_zwheel
+	call mouse_t_zwheel
+	call mouse_key
+	nrtn user
+	call mouse_no_data_timer_init
+	arg MOUSE_STATUE_UP_FLAG,queue
+	branch mouse_enable_function_flag
+	
+motion_6clk_direction_dispose:
+	fetch 2,mem_mouse_x
+	sub pdata,0,pdata
+	store 2,mem_mouse_x
+	branch enable_user
+motion_12clk_direction_dispose:
+	fetch 2,mem_mouse_y
+	sub pdata,0,pdata
+	store 2,mem_mouse_y
+	branch enable_user
+motion_9clk_direction_dispose:
+	fetch 2,mem_mouse_y
+	sub pdata,0,pdata
+	store 2,mem_mouse_y
+	fetch 2,mem_mouse_x
+	sub pdata,0,pdata
+	store 2,mem_mouse_x
+	call mouse_sensor_data_swap_places
+	branch enable_user
+motion_3clk_direction_dispose:
+	call mouse_sensor_data_swap_places
+	branch enable_user
+mouse_cheak_sensor_data:
+	fetch 1,mem_spi_write_flash_sm
+	rtnne FLASH_SM_NO_BUYS
+	fetch 1,mem_config_sensor_type
+	beq P3205,mouse_p32xx_sensor_motion
+	beq P3065,mouse_p32xx_sensor_motion
+	beq KA8,mouse_p32xx_sensor_motion
+	beq P3204,mouse_p32xx_sensor_motion
+	beq P3212,mouse_p3212_sensor_motion
+	beq P3610,mouse_p3610_sensor_motion
+	beq P3065_xy,mouse_p32xx_sensor_motion
+	branch mouse_p32xx_sensor_motion
+	
+mouse_clear_sensor_data:
+	fetch 1,mem_mouse_move_flag
+	call mouse_read_sensor_common,blank
+	jam 1,mem_mouse_move_flag
+	rtn
+
+
+mouse_p3212_sensor_motion:
+	call mouse_clear_sensor_data
+	fetcht 1,mem_sensor_data_gpio
+	call gpio_get_bit
+	nrtn true
+	setarg PAN_REG_PID_L
+	call twspi_read
+	bne P32XX_ID1,mouse_twspi_reset
+	setarg PAN_REG_MOTION_STAUS
+	call twspi_read
+	rtnbit0 7
+	call mouse_read_sensor_common
+	call mouse_read_3212sensor_xy_high
+	store 1,mem_mouse_xy_h
+	rshift4 pdata,pdata
+	call extsign_bit3
+	store 1,mem_mouse_x+1
+	fetch 1,mem_mouse_xy_h
+	and pdata,0x0f,pdata
+	call extsign_bit3
+	store 1,mem_mouse_y+1
+	fetch 1,mem_config_sensor_angle
+	beq MOUSE_6CLK_ANGLE,motion_6clk_direction_dispose
+	beq MOUSE_9CLK_ANGLE,motion_9clk_direction_dispose
+	beq MOUSE_12CLK_ANGLE,motion_12clk_direction_dispose
+	beq MOUSE_3CLK_ANGLE,motion_3clk_direction_dispose
+	rtn
+
+mouse_read_3212sensor_xy_high:
+	setarg 0x12
+	branch twspi_read
+	
+mouse_p3065_judge:
+	beq P3065_ID1,mouse_p32xx_sensor_motion_1
+	branch mouse_twspi_reset
+	
+mouse_p32xx_sensor_motion:
+	call mouse_clear_sensor_data
+	disable user
+	fetcht 1,mem_sensor_data_gpio
+	call gpio_get_bit
+	nrtn true
+	setarg PAN_REG_PID_L
+	call twspi_read
+	bne P32XX_ID1,mouse_p3065_judge   
+mouse_p32xx_sensor_motion_1:
+	setarg PAN_REG_MOTION_STAUS
+	call twspi_read
+	rtnbit0 7
+	call mouse_read_sensor_common
+	fetch 1,mem_mouse_x
+	call extsign
+	store 2,mem_mouse_x
+	fetch 1,mem_mouse_y
+	call extsign
+	store 2,mem_mouse_y
+	fetch 1,mem_config_sensor_angle
+	beq MOUSE_6CLK_ANGLE,motion32xx_6clk_direction_selection
+	beq MOUSE_9CLK_ANGLE,motion32xx_9clk_direction_selection
+	beq MOUSE_12CLK_ANGLE,motion32xx_12clk_direction_selection
+	beq MOUSE_3CLK_ANGLE,motion32xx_3clk_direction_selection
+	rtn
+	
+motion32xx_6clk_direction_selection:
+	call motion_6clk_direction_dispose
+	branch mouse_sensor_sdio_low
+motion32xx_9clk_direction_selection:
+	call motion_9clk_direction_dispose
+	branch mouse_sensor_sdio_low
+motion32xx_12clk_direction_selection:
+	call motion_12clk_direction_dispose
+	branch mouse_sensor_sdio_low
+motion32xx_3clk_direction_selection:
+	call motion_3clk_direction_dispose
+	branch mouse_sensor_sdio_low
+	
+mouse_sensor_data_swap_places:
+	fetch 2, mem_mouse_y
+	fetcht 2,mem_mouse_x
+	store 2,mem_mouse_x
+	storet 2,mem_mouse_y
+	rtn
+//input regb  output:pdata
+mouse_p3610sensor_read:
+	call spi_ncs_enable
+	nop 100
+	copy regb,pdata
+	call twspi_read
+	copy pdata,regb
+	call spi_ncs_disable
+	nop 100
+	copy regb,pdata
+	rtn	
+mouse_p3610_sensor_motion:
+	disable user
+	fetcht 1,mem_sensor_data_gpio
+	call gpio_get_bit
+	nrtn true
+	arg PAN_REG_MOTION_STAUS,regb
+	call mouse_p3610sensor_read
+	rtnbit0 7
+	arg PAN_REG_PID_L,regb
+	call mouse_p3610sensor_read
+	store 1,mem_sensor_id1
+	bne P3610_ID1,mouse_init_3610sensor_reset
+	fetch 1,mem_mouse_move_flag
+	call mouse_read_sensor3610_data,blank
+	jam 1,mem_mouse_move_flag
+	call mouse_read_sensor3610_data
+	fetch 1,mem_mouse_xy_h
+	rshift4 pdata,pdata
+	call extsign_bit3
+	store 1,mem_mouse_x+1
+	fetch 1,mem_mouse_xy_h
+	and pdata,0x0f,pdata
+	call extsign_bit3
+	store 1,mem_mouse_y+1
+	fetch 1,mem_config_sensor_angle
+	beq 0,motion3610_6clk_direction_selection
+	beq 1,motion3610_9clk_direction_selection
+	beq 2,motion3610_12clk_direction_selection
+	beq 3,motion3610_3clk_direction_selection
+	rtn
+
+mouse_3610_smart_select:
+	fetch 1,mem_sensor_smart_flag
+	beq P3610_SMART_ENABLE,mouse_3610_smart_disable
+	beq P3610_SMART_DISABLE,mouse_3610_smart_enable
+	rtn
+
+
+motion3610_6clk_direction_selection:
+	call motion_6clk_direction_dispose
+	branch mouse_3610_smart_select
+	
+motion3610_12clk_direction_selection:
+	call motion_12clk_direction_dispose
+	branch mouse_3610_smart_select
+	
+motion3610_9clk_direction_selection:
+	call motion_9clk_direction_dispose
+	branch mouse_3610_smart_select
+	
+motion3610_3clk_direction_selection:
+	call motion_3clk_direction_dispose
+	branch mouse_3610_smart_select
+	
+mouse_read_sensor3610_data:
+	call spi_ncs_enable
+	call mouse_read_sensor_common
+	arg 5,pdata
+	call twspi_read
+	store 1,mem_mouse_xy_h
+	arg 7,pdata
+	call twspi_read
+	store 1,mem_sensor_shutter_hi
+	arg 8,pdata
+	call twspi_read
+	store 1,mem_sensor_shutter_lo
+	branch spi_ncs_disable
+
+
+mouse_3610_smart_enable:
+	fetch 1,mem_sensor_shutter_hi
+	rtnne 0
+	fetch 1,mem_sensor_shutter_lo
+	sub pdata,45,null
+	rtn positive
+	jam P3610_SMART_ENABLE,mem_sensor_smart_flag
+	setarg 0xba41
+	call sensor_write
+	setarg 0x0032
+	call sensor_write
+	setarg 0xb541
+	branch sensor_write
+mouse_3610_smart_disable:
+	fetch 1,mem_sensor_shutter_hi
+	rtnne 0
+	fetch 1,mem_sensor_shutter_lo
+	sub pdata,45,null
+	nrtn positive
+	jam P3610_SMART_DISABLE,mem_sensor_smart_flag
+	setarg 0xba41
+	call sensor_write
+	setarg 0x8032
+	call sensor_write
+	setarg 0xb541
+	branch sensor_write
+
+
+
+mouse_read_sensor_common:
+	arg PAN_REG_DELTA_X,pdata
+	call twspi_read
+	store 2,mem_mouse_x
+	arg PAN_REG_DELTA_Y,pdata
+	call twspi_read
+	store 2,mem_mouse_y
+	rtn
+
+mouse_set_qdecoder_x:
+	arg MOUSE_DEFAULT_XA_GPIO,temp
+	call gpio_config_input
+	arg MOUSE_DEFAULT_XA_GPIO,temp
+	call gpio_get_bit
+	rtn true
+	hfetch 1,core_qdec_cntx
+	set1 4,pdata
+	hstore 1,core_qdec_cntx
+	rtn
+
+mouse_hardware_zwheel:
+	fetcht 1,mem_mouse_z_data
+	hfetch 1,core_qdec_cntx
+	iadd temp,pdata
+	rtn blank
+	store 1,mem_mouse_z
+	jam 0,mem_mouse_z_data
+	branch enable_user
+mouse_hardware_zwheel_beforelpm:
+	fetcht 1,mem_mouse_z_data
+	hfetch 1,core_qdec_cntx
+	iadd temp,pdata
+	store 1,mem_mouse_z_data
+	rtn
+mouse_zwheel:
+	fetch 1,mem_mouse_z_data
+	rtn blank	
+	store 1,mem_mouse_z
+	jam 0,mem_mouse_z_data
+	branch enable_user
+	
+mouse_t_zwheel:
+	fetch 1,mem_mouse_tz_data
+	rtn blank	
+	store 1,mem_mouse_tz
+	jam 0,mem_mouse_tz_data
+	branch enable_user
+	
+mouse_check_key_gpio:
+	arg 0,rega
+	fetcht 1,mem_lbutton_gpio
+	call gpio_get_bit
+	setflag true,0,rega
+	fetcht 1,mem_rbutton_gpio
+	call gpio_get_bit
+	setflag true,1,rega
+	fetcht 1,mem_mbutton_gpio
+	call gpio_get_bit
+	setflag true,2,rega
+	call mouse_check_s_key_gpio
+	copy rega,pdata
+	rtn
+mouse_check_s_key_gpio:
+	fetch 1,mem_bk_button_gpio
+	rtneq GPIO_DISABLE
+	fetcht 1,mem_bk_button_gpio
+	call gpio_get_bit
+	setflag true,3,rega
+	fetcht 1,mem_fw_button_gpio
+	call gpio_get_bit
+	setflag true,4,rega
+	rtn
+
+mouse_key:
+	call mouse_check_key_gpio
+	call mouse_set_mult
+	call mouse_24g_key
+	copy rega,pdata
+	fetcht 1,mem_mouse_key
+	store 1,mem_mouse_key	
+	ixor temp,pdata
+	sub pdata,0,null
+	rtn zero
+	branch enable_user
+
+mouse_24g_key:
+	rtnmark0 mark_24g
+	copy rega,pdata
+	rtn blank
+	store 1,mem_mouse_key
+	branch enable_user
+
+//short mult: no key 
+mouse_set_mult:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,mouse_set_ble_mult
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,mouse_set_bt_mult
+	rtn
+mouse_set_ble_mult:
+	copy rega,pdata
+	nbranch le_set_config_short_mult,blank
+	branch le_clr_config_short_mult
+mouse_set_bt_mult:
+	copy rega,pdata
+	nbranch classic_bt_set_mult_short_flag,blank
+	branch classic_bt_clr_mult_short_flag
+	
+	/* sdio high will cost extra 9mA */
+mouse_sensor_sdio_low:
+	bpatch patch1c_7,mem_patch1c
+	arg MOUSE_SPI1_SDIO_GPIO,temp
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	isolate1 MOUSE_ENABLE_SPI2,pdata
+	call mouse_sensor_sdio_low2,true
+	call gpio_get_bit
+	rtn true
+	setarg 0x0a
+	call twspi_read
+	nop 1000
+	branch mouse_sensor_sdio_low
+mouse_sensor_sdio_low2:
+	arg MOUSE_SPI2_SDIO_GPIO,temp
+	rtn
+
+mouse_spi_sdio_gpio_pollup:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_SPI2,mouse_spi2_sdio_gpio_pollup
+mouse_spi1_sdio_gpio_pollup:
+	arg MOUSE_SPI1_SDIO_GPIO,temp
+	branch gpio_config_input_without_wake
+mouse_spi2_sdio_gpio_pollup:
+	arg MOUSE_SPI2_SDIO_GPIO,temp
+	branch gpio_config_input_without_wake
+
+	
+mouse_init_sunt:
+	call mouse_spi_init
+	rtn wake
+	call mouse_spi_sdio_gpio_pollup
+	fetch 1,mem_config_sensor_type
+	beq P3610,mouse_init_3610sensor
+mouse_init_sensor:
+	call mouse_read_sensor_id
+	beq P32XX_ID1,mouse_init_p32xx_id2_judge
+	beq P3065_ID1,mouse_p3065_init_param
+	call mouse_twspi_reset
+	nop 1000
+	branch mouse_init_sensor
+mouse_twspi_reset:
+	bpatch patch1d_0,mem_patch1d
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_SPI2,twspi_reset2
+	branch twspi_reset
+
+mouse_init_3610sensor:
+	call mouse_read_sensor_id
+	beq P3610_ID1,mouse_init_p3610
+	call mouse_init_3610sensor_reset
+	branch mouse_init_3610sensor
+	
+mouse_read_sensor_id:
+	setarg PAN_REG_PID_H
+	call twspi_read
+	store 1,mem_sensor_id2
+	setarg PAN_REG_PID_L
+	call twspi_read
+	store 1,mem_sensor_id1
+	rtn
+mouse_init_p32xx_id2_judge:
+	fetch 1,mem_sensor_id2
+	beq P3205_TJ3T_ID2,mouse_3205_3t_init_param
+	beq P3204_TJ3L_ID2,mouse_3204_3l_init_param
+	beq P3212_ID2,mouse_3212_init_param
+	beq PKA8_ID2,mouse_ka8_init_param
+	rtn
+mouse_ka8_init_param:
+	jam KA8,mem_config_sensor_type
+	rtn
+mouse_p3065xy_init_param:
+	jam P3065_XY,mem_config_sensor_type
+	rtn
+mouse_p3065_init_param:
+	fetch 1,mem_sensor_id2
+	beq P3065_XY_ID2,mouse_p3065xy_init_param
+	jam P3065,mem_config_sensor_type
+	rtn
+mouse_3212_init_param:
+	jam P3212,mem_config_sensor_type
+	call mouse_sensor_disable_wp
+	setarg 0x3426
+	call twspi_write
+	setarg 0x0419
+	call twspi_write
+mouse_sensor_enable_wp:
+	setarg 0x0009
+	branch twspi_write
+mouse_sensor_disable_wp:
+	setarg 0x5a09
+	branch twspi_write
+
+mouse_3204_3l_init_param:
+	jam P3204,mem_config_sensor_type
+	call mouse_sensor_disable_wp
+	setarg 0x0f0d//
+	call twspi_write
+	setarg 0xe31d//
+	call twspi_write
+	setarg 0xd27d
+	call twspi_write
+	call mouse_32xx_init_param
+	branch mouse_32xx_init_param_1
+	
+mouse_32xx_init_param:
+	setarg 0x351b
+	call twspi_write
+	setarg 0xb428
+	call twspi_write
+	setarg 0x4629
+	call twspi_write
+	setarg 0x962a
+	call twspi_write
+	setarg 0x8c2b
+	call twspi_write
+	setarg 0x6e2c
+	call twspi_write
+	setarg 0x642d
+	call twspi_write
+	setarg 0x5f38
+	call twspi_write
+	setarg 0x0f39
+	call twspi_write
+	setarg 0x323a
+	call twspi_write
+	setarg 0x473b
+	call twspi_write
+	setarg 0x1042
+	branch twspi_write
+mouse_32xx_init_param_1:	
+	setarg 0x2e54
+	call twspi_write
+	setarg 0xf255
+	call twspi_write
+	setarg 0xf461
+	call twspi_write
+	setarg 0x7063
+	call twspi_write
+	setarg 0x5275
+	call twspi_write
+	setarg 0x4176
+	call twspi_write
+	setarg 0xed77
+	call twspi_write
+	setarg 0x2378
+	call twspi_write
+	setarg 0x4679
+	call twspi_write
+	setarg 0xe57a
+	call twspi_write
+	setarg 0x487c
+	call twspi_write
+	setarg 0x777e
+	call twspi_write
+	setarg 0x017f
+	call twspi_write
+	setarg 0x000b
+	call twspi_write
+	setarg 0x007f
+	call twspi_write
+	branch mouse_sensor_enable_wp
+	
+
+mouse_3205_3t_init_param:
+	jam P3205,mem_config_sensor_type
+	call mouse_sensor_disable_wp
+	setarg 0x100d//
+	call twspi_write
+	setarg 0xed1d//
+	call twspi_write
+	setarg 0x807d
+	call twspi_write
+	call mouse_32xx_init_param
+	setarg 0x0943
+	call twspi_write
+	branch mouse_32xx_init_param_1
+	
+	
+mouse_init_3610sensor_reset:
+	fetcht 1,mem_sensor_reset_gpio
+	call gpio_out_active
+	call delay_10ms
+	fetcht 1,mem_sensor_reset_gpio
+	call gpio_out_inactive
+	branch delay_10ms
+
+mouse_init_p3610:
+	jam P3610,mem_config_sensor_type
+	setarg 0xba41
+	call sensor_write
+	setarg 0x0d11
+	call sensor_write
+	setarg 0x041b
+	call sensor_write
+	setarg 0x041c
+	call sensor_write
+	setarg 0x0f1d
+	call sensor_write
+	setarg 0x0032
+	call sensor_write
+	setarg 0xb541
+	branch sensor_write
+	
+	
+//input-rega
+mouse_set_sensor_reg:
+	setarg 0xba41
+	call sensor_write
+	nop 4000
+	setarg 0xff7f
+	call sensor_write
+	copy rega,pdata
+	call sensor_write
+	setarg 0x007f
+	call sensor_write
+	setarg 0xb541
+	branch sensor_write
+
+extsign:
+	rtnbit0 7
+	arg 0xff00,temp
+	ior temp,pdata
+	rtn
+
+extsign_bit3:
+	rtnbit0 3
+	arg 0xf0,temp
+	ior temp,pdata
+	rtn
+
+
+mouse_le:
+	call le_fifo_check_nearly_full
+	nrtn blank
+	fetch 1,mem_le_connect_status_flag
+	and pdata,0x03,pdata
+	rtnne 0x03
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOSUE_24G_PAIRING_FLAG,mouse_le_send_empty_packet
+	bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_le_send_empty_packet
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_le_send_empty_packet
+	call mouse_motion
+	nrtn user
+	branch mouse_fill_data_le
+
+mouse_le_send_empty_packet:
+	setarg 0
+	store 7,mem_mouse_key
+	branch mouse_fill_data_le
+
+mouse_priority_bb_event:	
+	copy regc,pdata
+	beq BT_EVT_LE_CONNECTED,mouse_le_bb_event_connected
+	beq BT_EVT_BB_CONNECTED,mouse_stop_discovery
+	beq BT_EVT_LE_DISCONNECTED,mouse_bb_disconnected
+	beq BT_EVT_BB_DISCONNECTED,mouse_bb_disconnected
+	beq BT_EVT_SETUP_COMPLETE,mouse_bt_event_setup_complete
+	beq BT_EVT_BUTTON_LONG_PRESSED,mouse_bb_event_discovery_btn
+	beq BT_EVT_HID_HANDSHAKE,mouse_bt_hid_handshake
+	beq BT_EVT_HID_CONNECTED,mouse_bt_hid_connected
+	beq BT_EVT_RECONN_FAILED,mouse_bb_event_reconn_failed
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,mouse_bb_event_reconn_timeout
+	beq BT_EVT_PINCODE_REQ,mouse_bb_event_pincode
+	beq BT_EVT_REMOTE_UNSNIFF,app_start_auto_sniff
+	beq BT_EVT_LE_PAIRING_SUCCESS,mouse_le_pairing_success
+	beq BT_EVT_LE_START_ENC,mouse_le_ll_start_encryt
+	beq BT_EVT_LE_PAIRING_COMPLETE,mouse_le_pairing_complete
+	beq BT_EVT_VIRTUAL_CABLE_UNPLUG,mouse_irtual_cable_unplug
+	beq BT_EVT_24G_PAIRING_COMPLETE,mouse_24g_pairing_complete
+	beq BT_EVT_24G_ATTEMPT_FAIL,mouse_24g_attempt_fail
+	beq BT_EVT_24G_ATTEMPT_SUCCESS,mouse_24g_attempt_success
+	rtn
+
+
+mouse_le_pairing_complete:
+	branch app_ble_store_reconn_info
+
+mouse_24g_attempt_fail:
+	jam 1,mem_mouse_24g_enter_lpm_enable
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	fetch 1,mem_device_flag
+	fetcht 1,mem_24g_device_number
+	isub temp,null
+	branch app_enter_hibernate,zero
+	rtn
+mouse_24g_attempt_success:
+	jam 1,mem_mouse_24g_enter_lpm_enable
+	rtn
+mouse_24g_pairing_complete:
+	jam 1,mem_mouse_24g_enter_lpm_enable
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	call mouse_disable_function_flag
+	setarg 0
+	store 2,mem_24g_pairing_timer_count
+	jam 0,mem_mouse_move_flag
+	
+	fetch 1,mem_config_sensor_type
+	sub pdata,P3610,null
+	call mouse_read_sensor3610_data,zero
+	ncall mouse_read_sensor_common,zero
+
+	fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_FLASH,mouse_store_flash_24g_address
+	call mouse_set_24g_addr_eeprom	//store rx dongle addr to eeprom
+	branch iicd_write_protect_eep_data
+
+mouse_set_24g_addr_eeprom:
+	call g24_head_ptr2regc
+	add regc,offset_24g_addr,rega
+	arg MOUSE_G24_ADDR_EEPROM_OFFECT,regb
+	arg 4,temp
+	rtn
+
+mouse_store_flash_24g_address:
+	call g24_head_ptr2regc
+	add regc,offset_24g_addr,regb
+	ifetch 1,regb
+	store 1,mem_mouse_24g_addr
+	branch mouse_store_flash_device_info
+	
+
+mouse_le_pairing_success:
+	arg LL_PAIRING_SUCCESS_FLAG,queue
+	branch mouse_le_enable_connect_flag
+mouse_le_ll_start_encryt:
+	jam 2,mem_le_start_encrypt_timer
+	arg LL_START_ENC_FLAG,queue
+	branch mouse_le_enable_connect_flag
+
+	
+mouse_le_enable_connect_flag:
+	fetch 1,mem_le_connect_status_flag
+	qset1 pdata
+	store 1,mem_le_connect_status_flag
+	rtn
+
+mouse_le_disable_connect_flag:
+	fetch 1,mem_le_connect_status_flag
+	qset0 pdata
+	store 1,mem_le_connect_status_flag
+	rtn
+mouse_le_clean_connect_flag:
+	jam 0,mem_le_connect_status_flag
+	rtn
+
+mouse_le_bb_event_connected:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set0 APP_DISC_BY_BUTTON ,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	setarg 0
+	store 2,mem_mouse_direct_timer
+	call mouse_no_data_timer_init
+	branch mouse_stop_discovery
+
+mouse_bb_event_pincode:
+	call pincode_reinit
+	branch app_bt_set_pincode
+mouse_bb_event_reconn_timeout:
+mouse_bb_event_reconn_failed:
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_soft_reset
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_start_discovery
+	bbit1 MOSUE_24G_PAIRING_FLAG,g24_start_pairing_sm1
+	branch app_bb_hibernate
+
+	
+mouse_bt_hid_connected:
+	branch mouse_hid_connected
+
+mouse_bt_event_setup_complete:
+	rtn
+
+mouse_soft_reset:
+	call mouse_select_device_enable
+	branch soft_reset_chip
+
+mouse_bb_disconnected:
+	bpatch patch1d_1,mem_patch1d
+	call mouse_bb_discon_clear_stack
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_soft_reset
+	bbit1 MOSUE_24G_PAIRING_FLAG,g24_start_pairing_sm1
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	bbit1 APP_DISC_BLE,mouse4_0_event_bb_disconn
+	bbit1 APP_DISC_BY_BUTTON,app_disconn_reason_clear
+	bbit1 APP_DISC_AFTER_PAIRING,mouse_event_light_state_pairing
+	bbit1 APP_DISC_AFTER_RECONN,mouse_event_light_state_hibernate
+	bbit1 APP_DISC_AFTER_SNIFF,mouse_event_light_state_hibernate
+	branch mouse_start_discovery
+mouse_bb_discon_clear_stack:
+	setarg 0
+	store 8,mem_wheel_tb_old_pinlevel
+	istore 4,contw             //clean wheel statue
+	jam 0,mem_mouse_send_blank_timer
+	jam 0,mem_mouse_move_flag
+	jam APP_HANDSHAKE_NULL,mem_app_handshake_flag
+	jam 0,mem_ltk_exists
+	rtn
+
+mouse_event_light_state_pairing:
+	bbit1 APP_DISC_AFTER_HANDSHAKE,mouse_event_light_state_hibernate
+	bbit1 APP_DISC_AFTER_SNIFF,mouse_event_light_state_hibernate
+	branch mouse_start_discovery
+mouse_event_light_state_hibernate:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery
+	branch app_bb_hibernate
+
+mouse4_0_event_bb_disconn:
+	call mouse_le_clean_connect_flag
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	bbit1 APP_DISC_BY_BUTTON,app_disconn_reason_clear
+	branch app_bb_hibernate
+
+mouse_bb_event_timer:
+	call mouse_adc_read
+	call mouse_24g_delay_timer
+	call mouse_ban_24g_pairing_timer
+	call mouse_dpi_led_blink_delay_timer
+	call mouse_statue_up_timer
+	//poll
+	call mouse_statue_cheak_timer
+	call mouse_select_device
+	call mouse_bt_discovery_cheak
+	call mouse_low_voltage_led_timer
+	call mouse_sensor_led_contrl_timer
+	call mouse_check_hid_handshake_timer
+	call mouse_check_discovery_timeout_timer
+	call mouse_check_direct_timeout_timer
+	call mouse_check_no_data_timeout_timer
+	call mouse_check_mouse_state_timer
+	branch mouse_le_enable_att_list_timer
+
+
+
+mouse_sensor_led_contrl_timer:
+	fetch 1,mem_mouse_sensor_timer_count
+	rtn blank
+	increase -1,pdata
+	store 1,mem_mouse_sensor_timer_count
+	nrtn blank
+	branch mouse_sensor_led_contrl
+mouse_sensor_led_contrl:
+	fetch 1,mem_sensor_led_style
+	rtneq UI_LED_STATE_BLINK_STOP
+	beq UI_LED_STATE_BLINK_DARKING,mouse_sensor_led_blink_state_darking
+mouse_sensor_led_blink_state_lighting:
+	call mouse_sensor_led_on
+	jam UI_LED_STATE_BLINK_DARKING,mem_sensor_led_style
+	jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count
+	rtn
+mouse_sensor_led_blink_state_darking:
+	call mouse_sensor_led_off
+	jam UI_LED_STATE_BLINK_LIGHTING,mem_sensor_led_style
+	jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count
+	rtn
+	
+mouse_sensor_led_blink_stop:
+mouse_sensor_reset:
+	setarg 0x8006
+	call twspi_write
+    nop 1000
+	jam 0x00,mem_mouse_sensor_timer_count
+	jam UI_LED_STATE_BLINK_STOP,mem_sensor_led_style
+	branch mouse_init_p32xx_id2_judge
+	
+mouse_p3212sensor_led_on:
+	setarg 0xa006
+	call twspi_write
+	setarg 0xa005
+	branch twspi_write
+mouse_sensor_led_on_global:
+	jam 0,mem_mouse_sensor_timer_count
+mouse_sensor_led_on:
+	fetch 1,mem_config_sensor_type
+	beq P3212,mouse_p3212sensor_led_on
+	setarg 0x0106
+	call twspi_write
+	setarg 0xa105
+	branch twspi_write
+	
+mouse_sensor_led_off_global:
+	jam 0,mem_mouse_sensor_timer_count	
+mouse_sensor_led_off:
+	setarg 0x0906
+	branch twspi_write
+mouse_sensor_start_blink:
+	jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count
+	jam UI_LED_STATE_BLINK_START,mem_sensor_led_style
+	rtn
+	
+mouse_check_hid_handshake_timer:
+	arg mem_hid_handshake_timer_count,regc
+	arg mouse_bt_hid_handshake,regb
+	branch timer_single_step
+
+mouse_check_discovery_timeout_timer:	
+	arg mem_mouse_discovery_timer,regc
+	arg mouse_check_discovery_timeout,regb
+	branch timer_single_step_2B
+
+mouse_check_direct_timeout_timer:	
+	arg mem_mouse_direct_timer,regc
+	arg mouse_check_direct_timeout,regb
+	branch timer_single_step_2B
+	
+mouse_check_no_data_timeout_timer:	
+	arg mem_mouse_no_data_timer,regc
+	arg mouse_check_no_data_timeout,regb
+	branch timer_single_step_2B
+	
+mouse_check_mouse_state_timer:
+	arg mem_mouse_statue_led_timer,regc
+	arg mouse_statue_led_off,regb
+	branch timer_single_step
+
+
+
+mouse_le_enable_att_list_timer:
+	arg mem_le_start_encrypt_timer,regc
+	arg mouse_le_enable_att_list,regb
+	branch timer_single_step
+
+mouse_24g_delay_timer:
+	arg mem_24g_enter_lpm_timer,regc
+	arg mouse_24g_delay,regb
+	branch timer_single_step
+
+mouse_ban_24g_pairing_timer:
+	arg mem_24g_pairing_timer_count,regc
+	arg mouse_ban_24g_pairing,regb
+	branch timer_single_step_2B
+mouse_ban_24g_pairing:
+mouse_24g_delay:
+	rtn
+
+
+mosue_dpi_led_blink_init:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_DPI_LED_BLINK
+	jam 10,mem_mouse_dpi_led_delay_count  //delay 1s led blink
+	fetch 1,mem_dpi_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	rtn
+
+
+mouse_dpi_led_blink_delay_timer:
+	arg mem_mouse_dpi_led_delay_count,regc
+	arg mouse_dpi_led_setting,regb
+	branch timer_single_step	
+mouse_dpi_led_setting:
+	fetch 1,mem_dpi_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	setarg LED_DPI_BLINK
+	store 2,mem_mouse_on_time
+	store 2,mem_mouse_off_time
+	arg 0,rega
+	fetcht 1,mem_mouse_dpi
+	increase 1,temp
+	storet 1,mem_mouse_blink_count
+	jam UI_LED_STATE_BLINK_START,mem_mouse_led_type
+	rtn
+	
+mouse_le_enable_att_list:	
+	fetch 1,mem_le_connect_status_flag
+	rtnbit1 LL_PAIRING_SUCCESS_FLAG
+	jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp
+	call ui_ipc_send_cmd
+	arg WRITE_REQ_ENABLE_FLAG,queue
+	branch mouse_le_enable_connect_flag
+
+
+mouse_check_discovery_timeout:
+	call mouse_stop_discovery
+	branch app_enter_hibernate
+
+mouse_check_direct_timeout:
+	call app_ble_stop_direct_adv
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	branch app_enter_hibernate
+
+mouse_check_no_data_timeout:
+	bmark1 mark_24g,check_51cmd_hibernate
+	branch mouse_disconnect
+
+	
+
+mouse_bb_event_discovery_btn:
+	bpatch patch1d_2,mem_patch1d
+	jam 0,mem_mouse_send_blank_timer
+	call mouse_disconnect
+	call mouse_le_clean_connect_flag
+	branch mouse_start_discovery
+
+
+
+mouse3_0_check_reconn_target:
+	fetch 6,mem_hci_plap
+	branch app_bt_start_discovery_short,blank
+	call mouse_reconn_setting_led_gpio
+	jam 0x17,mem_connection_options  //ssp
+	fetch 1,mem_ssp_enable
+	nbranch app_bt_start_reconnect,blank
+	jam 0x04,mem_connection_options  //no ssp
+	branch app_bt_start_reconnect
+	
+mouse4_0_check_reconn_target:
+	fetch 2,mem_mouse_direct_timeout
+	store 2,mem_mouse_direct_timer
+	call mouse_reconn_setting_led_gpio
+	call app_lpm_mult_disable
+	branch check_51cmd_adv
+
+mouse_reconn_setting_led_gpio:
+	setarg LED_RECONNECT_BLINK
+	store 2,mem_mouse_on_time
+	store 2,mem_mouse_off_time
+	branch mouse_setting_led_gpio_comman
+	
+mouse_discover_setting_led_gpio:
+	setarg LED_DISCOVERY_BLINK
+	store 2,mem_mouse_on_time
+	store 2,mem_mouse_off_time	
+mouse_setting_led_gpio_comman:
+	fetch 1,mem_device_flag
+	beq MODE_BT_DEVICE1,mouse_device_led1
+	beq MODE_BT_DEVICE2,mouse_device_led2
+	beq MODE_BT_DEVICE3,mouse_device_led3
+	rtn
+mouse_device_led1:
+	fetch 1,mem_config_device1_led_gpio
+	branch mouse_led_blink
+mouse_device_led2:
+	fetch 1,mem_config_device2_led_gpio
+	branch mouse_led_blink
+mouse_device_led3:
+	fetch 1,mem_config_device3_led_gpio
+mouse_led_blink:
+	store 1,mem_temp
+	call mouse_devce_led_off
+	fetch 1,mem_temp
+	store 1,mem_mouse_struct_led_gpio
+	arg 0,rega
+	jam UI_LED_STATE_BLINK_START,mem_mouse_led_type
+	branch ui_led_blink_start_global
+
+mouse_led_off:
+	arg 0,rega
+	branch ui_led_off_global
+mouse_led_on:
+	arg 0,rega
+	branch ui_led_on_global
+
+mouse4_0_bb_event_discovery_btn:
+	branch mouse_le_clean_connect_flag
+	
+mouse_bt_hid_handshake:
+	jam APP_HANDSHAKE_DONE,mem_app_handshake_flag
+	call app_lpm_mult_enable
+	call app_bt_store_reconn_info
+	setarg 0
+	store 2,mem_discovery_timeout_timer_count
+	store 1,mem_hid_handshake_timer_count
+	branch app_bt_enter_sniff
+
+mouse_check_reconn_target:
+	call mouse_cheak_select_device_by_switch
+	fetch 1,mem_device_flag
+	fetcht 1,mem_24g_device_number
+	isub temp,null
+	branch mouse_connect_24g_mode,zero
+	fetch 1,mem_xrecord_mode
+	beq REC_3_MODE,mouse3_0_check_reconn_target
+	beq REC_4_MODE,mouse4_0_check_reconn_target
+	branch mouse_start_discovery
+mouse_connect_24g_mode:
+	call mouse_start_24g_mode
+	rtnmark1 mark_24g
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	rtn
+	
+mouse_start_discovery:
+	bpatch patch1d_3,mem_patch1d
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_ADV,mouse_start_discovery_norandom
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_BLE_RANDOM_ADDRE,mouse_start_discovery_norandom
+	random pdata					//random ble addr
+	store 1,mem_le_lap+1
+mouse_start_discovery_norandom:
+	call app_lpm_mult_disable
+	fetch 2,mem_discovery_timeout
+	store 2,mem_mouse_discovery_timer
+	jam 6,mem_connection_options
+	setarg 0
+	store 2,mem_mouse_no_data_timer
+	store 2,mem_mouse_direct_timer
+	arg MOUSE_STORE_EEPROM_FLAG,queue
+	call mouse_enable_function_flag
+	call mouse_bt_discovery_button_down_disable
+	fetch 1,mem_device_option
+	isolate1 MODE_4_MOUSE,pdata
+	call check_51cmd_adv,true
+	fetch 1,mem_device_option
+	isolate1 MODE_3_MOUSE,pdata
+	call check_51cmd_start_discovery,true
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_DISCOVERY_SENSOR_LED,mouse_sensor_start_blink
+	branch mouse_discover_setting_led_gpio
+
+mouse_stop_discovery:
+	bpatch patch1d_4,mem_patch1d
+	fetch 1,mem_device_option
+	isolate1 MODE_4_MOUSE,pdata
+	call mouse_stop_le_adv,true
+	fetch 1,mem_device_option
+	isolate1 MODE_3_MOUSE,pdata
+	call mouse_stop_bt3_discovery,true
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_DISCOVERY_SENSOR_LED,mouse_sensor_led_blink_stop
+	branch mouse_devce_led_off
+mouse_stop_le_adv:
+	setarg 0
+	store 2,mem_mouse_direct_timer
+	branch check_51cmd_stop_adv
+mouse_stop_bt3_discovery:
+	setarg 0
+	store 2,mem_mouse_discovery_timer
+	branch check_51cmd_stop_discovery
+
+	
+
+
+
+mouse_store_remote_bdaddr:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_STORE_EEPROM_FLAG
+	arg MOUSE_STORE_EEPROM_FLAG,queue
+	call mouse_disable_function_flag
+	call mouse_check_device_addr
+mouse_unplug_clean_bdaddr:
+	call mouse_before_store_reconn_info
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_FLASH,mouse_store_flash_device_info
+	bbit1 MOUSE_ENABLE_EEPROM,mouse_store_eeprom_device_info	
+	rtn
+mouse_store_eeprom_device_info:
+	arg 88,temp
+	arg mem_device_flag,rega
+	arg MOUSE_INFO_EEPROM_OFFECT,regb
+	branch iicd_write_protect_eep_data
+
+mouse_check_device_addr:
+	fetch 1,mem_record_bt_mode
+	beq REC_4_MODE,mouse_check_le_device_addr
+	beq REC_3_MODE,mouse_check_bt_device_addr
+	rtn
+mouse_check_le_device_addr:
+	store 1,mem_device_addr_temp
+	fetch 6,mem_le_plap
+	branch mouse_check_bt_device_addr_common
+mouse_check_bt_device_addr:
+	store 1,mem_device_addr_temp
+	fetch 6,mem_plap
+mouse_check_bt_device_addr_common:
+	store 6,mem_device_addr_temp+1
+	fetch 7,mem_device_addr_temp
+	arg mem_device1_type,contr
+	arg 3,loopcnt
+mouse_check_device_addr_end:
+	ifetcht 7,contr
+	isub temp,null
+	branch mouse_clean_addr,zero
+	increase 22,contr
+	loop mouse_check_device_addr_end
+	rtn
+mouse_before_store_reconn_info:
+	arg mem_device1_type,rega
+	fetch 1,mem_device_flag
+	increase -1,pdata
+	mul32 pdata,29,pdata
+	iadd rega,rega
+	fetch 1,mem_record_bt_mode
+	istore 1,rega
+	beq REC_4_MODE,mouse_store_le_device
+	beq REC_3_MODE,mouse_store_bt_device
+	rtn
+	
+mouse_store_le_device:
+	fetch 6,mem_le_plap
+	istore 6,contw
+	arg mem_le_ltk,contr
+	call memcpy16
+	fetch 6,mem_le_lap
+	istore 6,contw
+	rtn
+mouse_store_bt_device:
+	fetch 6,mem_plap
+	istore 6,contw
+	arg mem_link_key,contr
+	branch memcpy16
+
+mouse_clean_addr:
+	increase -6,contr
+	copy contr,contw
+	fetcht 6,mem_device_addr_temp+1
+	increase 3,temp
+	istoret 6,contw
+	rtn
+
+
+
+mouse_eeprom_load_recon_info:
+	arg 88,temp
+	arg mem_device_flag,rega
+	arg MOUSE_INFO_EEPROM_OFFECT,regb
+	call iicd_read_eep_data
+mouse_select_reconn_device:
+	arg mem_device1_type,rega
+	fetch 1,mem_device_flag
+	fetcht 1,mem_24g_device_number
+	isub temp,null
+	rtn zero
+	increase -1,pdata
+	mul32 pdata,29,pdata
+	iadd rega,rega
+	ifetch 1,rega
+	store 1,mem_xrecord_mode
+	beq REC_3_MODE,mouse_load_bt_device
+	beq REC_4_MODE,mouse_load_le_device
+	rtn
+
+mouse_load_bt_device:
+	ifetch 6,contr
+mouse_load_bt_device_end:
+	store 6,mem_hci_plap
+	arg mem_link_key,contw
+	call memcpy16
+	branch check_link_key_load
+
+mouse_load_le_device:
+	ifetch 6,contr
+mouse_load_le_device_end:
+	store 6,mem_hci_plap
+	arg mem_le_ltk,contw
+	call memcpy16
+	ifetch 6,contr
+	store 6,mem_le_lap
+	rtn
+
+
+mouse_select_device:
+	fetch 1,mem_config_function_enable
+	bbit1 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON,mouse_select_device_by_button
+	bbit1 ENABLE_SELECT_DEVICE_BY_SWITCH,mouse_select_device_by_switch
+	branch mouse_select_device_by_combination_key
+
+mouse_select_device_by_combination_key:
+	call mouse_check_key_gpio
+	beq MOUSE_RM_BUTTON,mouse_select_device_commbination_key_down
+mouse_select_device_commbination_key_up:
+	jam 30,mem_combination_select_device_count	//combination key timer init 
+	fetch 1,mem_select_device_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue	
+	rtn
+	
+mouse_select_device_commbination_key_down:
+	call mouse_combination_select_device_timer
+	fetch 1,mem_select_device_button_statue
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_select_device_button_statue
+	branch mouse_select_device_enable
+
+mouse_combination_select_device_timer:
+	fetch 1,mem_combination_select_device_count
+	rtn blank
+	pincrease -1
+	store 1,mem_combination_select_device_count
+	nrtn blank
+	branch mouse_ready_reconnection_by_button
+	
+mouse_select_device_by_button:
+	fetch 1,mem_config_select_device_button_gpio
+	rtneq GPIO_DISABLE
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_get_bit
+	branch mouse_select_device_button_down,true
+mouse_select_device_button_up:
+	fetch 1,mem_select_device_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue	
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit1 MOUSE_LONG_BT_BUTTON_FLAG
+	branch mouse_ready_reconnection_by_button
+
+mouse_select_device_button_down:
+	fetch 1,mem_select_device_button_statue
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_select_device_button_statue
+	arg MOUSE_LONG_BT_BUTTON_FLAG,queue
+	branch mouse_disable_function_flag
+
+
+
+mouse_select_device_by_switch:
+	fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 ENABLE_SELECT_DEVICE_BY_SWITCH
+	fetch 1,mem_device_flag
+	beq MODE_BT_DEVICE1,mouse_select1_device
+	beq MODE_24G_DEVICE,mouse_select2_device
+	rtn
+mouse_cheak_select_device_by_switch:
+	fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 ENABLE_SELECT_DEVICE_BY_SWITCH
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_get_bit
+	branch mouse_cheak_select_24gdevice,true
+mouse_select_btdevice:
+	jam MODE_BT_DEVICE1,mem_device_flag
+	rtn
+mouse_cheak_select_24gdevice:
+	fetch 1,mem_24g_device_number
+	store 1,mem_device_flag
+	rtn
+mouse_select1_device:
+	fetcht 1,mem_config_select_device_button_gpio
+	nbranch mouse_ready_reconnection_by_button,true
+	rtn
+mouse_select2_device:
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_get_bit
+	branch mouse_select_device_button_down,true
+	rtn
+
+
+	
+
+mouse_ready_reconnection_by_button:
+	fetcht 1,mem_device_flag
+	increase 1,temp
+	fetch 1,mem_device_number
+	isub temp,null
+	ncall mouse_select_device_count_clean,positive
+	storet 1,mem_device_flag
+	jam 0,mem_link_key_exists
+	call mouse_store_device_number2eeprom
+	call mouse_select_device_enable
+//	call p_select_reconn_device
+	branch mouse_set_reconnection
+
+mouse_store_device_number2eeprom:
+	arg 1,temp
+	arg mem_device_flag,rega
+	arg 0,regb
+	branch iicd_write_eep_data
+
+mouse_set_reconnection:
+	call mouse_stop_bluetooth_mode
+	call mouse_select_device_disable
+	branch mouse_soft_reset
+mouse_stop_bluetooth_mode:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_RECONNECT,mouse_cancel_reconnect
+	bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect
+	bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect
+	branch mouse_stop_discovery
+
+mouse_disconnect:
+	bpatch patch1d_5,mem_patch1d
+	setarg 0
+	store 2,mem_mouse_no_data_timer
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect
+	rtn
+
+mouse_irtual_cable_unplug:
+	setarg 0x01
+	store 6,mem_plap
+	jam REC_3_MODE,mem_record_bt_mode
+	branch mouse_unplug_clean_bdaddr
+
+	
+mouse_cancel_reconnect:
+	call mouse_bt_cannel_reconn_enable
+	branch check_51cmd_bb_reconn_cancel
+
+mouse_bt_discovery_by_button:
+	fetch 1,mem_config_bt_button_gpio
+	rtneq GPIO_DISABLE
+	fetcht 1,mem_config_bt_button_gpio
+	call gpio_get_bit
+	branch mouse_bt_discovery_button_down,true
+mouse_bt_discovery_button_up:
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_combination_ui_button_count	//combination key timer init 	
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_bt_discovey_button_statue	
+	branch mouse_bt_discovery_button_down_disable
+mouse_bt_discovery_button_down:
+	call mouse_bt_discovry_timer
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_bt_discovey_button_statue
+	call check_51cmd_bb_reconn_cancel
+	branch mouse_bt_discovery_button_down_enable
+
+	
+mouse_bt_discovery_cheak:
+	fetch 1,mem_config_function_enable
+	bbit1 ENABLE_BT_BUTTON,mouse_bt_discovery_by_button
+mouse_bt_discovery_commbination_key:
+	call mouse_check_key_gpio
+	beq MOUSE_LMR_BUTTON,mouse_bt_discovery_commbination_key_down
+mouse_bt_discovery_commbination_key_up:
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_combination_ui_button_count	//combination key timer init 
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_bt_discovey_button_statue	
+	branch mouse_bt_discovery_button_down_disable
+	
+	
+mouse_bt_discovery_commbination_key_down:
+	call mouse_bt_discovry_timer
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_bt_discovey_button_statue
+	call check_51cmd_bb_reconn_cancel
+	branch mouse_bt_discovery_button_down_enable
+
+mouse_bt_discovry_timer:
+	arg mem_combination_ui_button_count,regc
+	arg mouse_long_button_bt_discovry,regb
+	branch timer_single_step
+	
+mouse_long_button_bt_discovry:
+	arg MOUSE_LONG_BT_BUTTON_FLAG,queue
+	call mouse_enable_function_flag
+	call app_evt_button_long_pressed
+	branch mouse_bb_event_discovery_btn
+
+
+mouse_cpi_enable:
+	arg MOUSE_CPI_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_cpi_disable:
+	arg MOUSE_CPI_FLAG,queue
+	branch mouse_disable_function_flag
+mouse_select_device_enable:
+	arg MOUSE_SELECT_DEVICE_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_select_device_disable:
+	arg MOUSE_SELECT_DEVICE_FLAG,queue
+	branch mouse_disable_function_flag
+mouse_bt_cannel_reconn_enable:
+	arg MOUSE_BT_CANNEL_RECONN_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_bt_cannel_reconn_disable:
+	arg MOUSE_BT_CANNEL_RECONN_FLAG,queue
+	branch mouse_disable_function_flag
+mouse_bt_discovery_button_down_enable:
+	arg MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_bt_discovery_button_down_disable:
+	arg MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,queue
+	branch mouse_disable_function_flag
+
+
+
+mouse_select_device_count_clean:
+	arg 1,temp
+	rtn
+
+mouse_enable_function_flag:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	qset1 pdata
+	store MOUSE_FLAG_LEN,mem_mouse_flag
+	rtn
+
+mouse_disable_function_flag:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	qset0 pdata
+	store MOUSE_FLAG_LEN,mem_mouse_flag
+	rtn
+	
+mouse_adc_read:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_ADC
+	fetch 1,mem_adc_read_timer
+	increase 1,pdata
+	store 1,mem_adc_read_timer
+	sub pdata,10,null              //1s read adc
+	rtn positive
+	jam 0,mem_adc_read_timer
+	call adc_set_mode
+	call vdd_calculate_by_mode
+	store 2,mem_mouse_vdd_now_vol
+	arg mem_mouse_vdd_calculate_set,rega
+	call adc_bat_percent_lowpower_out
+	fetch 1,mem_adc_power_flag
+	bbit1 1,mouse_power_down
+	bbit0 0,mouse_adc_no_low_voltage
+	branch mouse_adc_low_voltage
+mouse_adc_low_voltage:
+	arg MOUSE_LOW_VOLTAGE_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_adc_no_low_voltage:
+	arg MOUSE_LOW_VOLTAGE_FLAG,queue
+	branch mouse_disable_function_flag
+
+mouse_low_voltage_led_timer:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_LOW_VOLTAGE_FLAG
+	fetch 1,mem_config_low_voltage_alarm_gpio
+	store 1,mem_mouse_struct_led_gpio
+	fetch 1,mem_adc_low_volatage_led_timer_count
+	pincrease 1
+	store 1,mem_adc_low_volatage_led_timer_count
+	sub pdata,20,null
+	ncall mouse_adc_low_volatage_led_timer_count_clean,positive
+	beq 2,mouse_low_voltage_led_on
+	beq 4,mouse_low_voltage_led_off
+	beq 6,mouse_low_voltage_led_on
+	beq 8,mouse_low_voltage_led_off
+	rtn
+mouse_adc_low_volatage_led_timer_count_clean:
+	jam 1,mem_adc_low_volatage_led_timer_count
+	branch mouse_low_voltage_led_off
+mouse_low_voltage_led_on:
+	arg 0,rega
+	jam UI_LED_STATE_LIGHTING,mem_mouse_led_type
+	branch ui_led_on_global
+mouse_low_voltage_led_off:
+	arg 0,rega
+	jam UI_LED_STATE_LIGHTING,mem_mouse_led_type
+	branch ui_led_off_global
+
+mouse_g24_package_data:
+	call mouse_motion
+	nrtn user
+	arg 7,rega	//length
+	arg mem_mouse_key,regb //tx buff
+	rtn
+	
+mouse_g24_enter_lpm:
+	fetch 1,mem_mouse_24g_enter_lpm_enable
+	rtn blank
+	//do not enter lpm when condition is unallowed
+	fetcht 1,mem_dpi_button_gpio
+	call gpio_get_bit
+	call mouse_24g_dpi_delay_init,true
+	fetch 1,mem_24g_enter_lpm_timer
+	nrtn blank
+	call mouse_check_key_gpio
+	nrtn blank
+	branch g24_lpm_long_sleep
+
+mouse_24g_dpi_delay_init:
+	fetch 1,mem_dpi_button_gpio
+	rtneq UI_BUTTON_GPIO_DISABLE
+	jam 10,mem_24g_enter_lpm_timer
+	rtn
+
+	
+mouse_load_flash_info_cheak:
+	call mouse_load_flash_flag
+	fetch 2,mem_store_flag
+	arg EEPROM_INIT_FLAG,temp
+	isub temp,null
+	branch mouse_load_flash_device_info,zero
+	storet 2,mem_store_flag
+	call mouse_ble_init_address
+	branch mouse_store_flash_device_info
+mouse_ble_init_address:
+	fetch 6,mem_le_lap
+	store 6,mem_device1_locall_addr
+	add pdata,0x0100,pdata
+	store 6,mem_device2_locall_addr
+	add pdata,0x0100,pdata
+	store 6,mem_device3_locall_addr
+	rtn
+	
+	
+mouse_load_flash_flag:
+	setarg mem_store_flag
+	arg mem_mouse_information_start,temp
+	isub temp,temp
+	fetch 3,mem_flash_base
+	iadd temp,pdata
+	arg 2,temp
+	arg mem_store_flag,rega
+	branch spid_read_flash
+
+	
+mouse_load_flash_device_info:
+	setarg mem_mouse_information_end
+	arg mem_mouse_information_start,temp
+	isub temp,temp
+	fetch 3,mem_flash_base
+	arg mem_mouse_information_start,rega
+	call spid_read_flash
+	call mouse_select_reconn_device
+	fetch 4,mem_mouse_24g_addr
+	call g24_head_ptr2regc
+	branch g24_store_mem_addr
+
+mouse_store_flash_device_info:	
+	setarg mem_mouse_information_end
+	arg mem_mouse_information_start,temp
+	isub temp,temp
+	arg mem_mouse_information_start,rega
+	fetch 3,mem_flash_base
+	branch flash_write
+
+mouse_store_eerpom_dpi:
+	arg 1,temp
+	arg mem_mouse_dpi,rega
+	arg MOUSE_DPI_EEPROM_OFFECT,regb
+	branch iicd_write_protect_eep_data
+
+mouse_load_eeprom_dpi:
+	arg 1,temp
+	arg mem_mouse_dpi,rega
+	arg MOUSE_DPI_EEPROM_OFFECT,regb
+	branch iicd_read_eep_data
+
+mouse_statue_cheak_timer:
+	rtnmark1 mark_24g
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_STATUE_UP
+	fetch 1,mem_mouse_1step_up_count
+	pincrease 1
+	and pdata,0x07,pdata
+	store 1,mem_mouse_1step_up_count
+	rtnne 0x07         //800ms read sensor
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,mouse_check_statue_up
+	bbit1 UI_STATE_BLE_CONNECTED,mouse_check_statue_up
+	rtn
+
+
+
+//mosue 
+mouse_check_statue_up:
+	bpatch patch1d_6,mem_patch1d
+	fetch 1,mem_mouse_2step_up_count
+	nrtn blank
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_STATUE_UP_FLAG
+	fetch 1,mem_sensor_squal_reg
+	call sensor_read
+	store 1,mem_sensor_iqc
+	sub pdata,0x10,null
+	branch mouse_statue_up_timer_init,positive
+	jam 0,mem_mouse_2step_up_count
+	rtn
+
+mouse_statue_up_timer_init:
+	jam 30,mem_mouse_2step_up_count
+	rtn
+mouse_statue_up_timer:
+	arg mem_mouse_2step_up_count,regc
+	arg mouse_statue_up,regb
+	branch timer_single_step
+
+mouse_statue_up:
+	fetch 1,mem_sensor_squal_reg
+	call twspi_read
+	sub pdata,0x10,null
+	nrtn positive
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_STATUE_UP_FLAG
+	arg MOUSE_STATUE_UP_FLAG,queue
+	call mouse_disable_function_flag
+	jam 0,mem_lpm_mult
+	jam 30,mem_mouse_statue_led_timer         // led on3s
+	call mouse_devce_led_off
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_STATUE_UP_THREE_LED,mouse_three_device_statue_up
+mouse_two_device_statue_up:
+	fetch 1,mem_device_flag
+	beq MODE_BT_DEVICE1,mouse_device1_led_on  		//device_1
+	beq MODE_BT_DEVICE2,mouse_device_blink_led_init		//device_2
+	rtn
+mouse_three_device_statue_up:
+	fetch 1,mem_device_flag
+	beq MODE_BT_DEVICE1,mouse_device1_led_on  		//device_1
+	beq MODE_BT_DEVICE2,mouse_device2_led_on		//device_2
+	beq MODE_BT_DEVICE3,mouse_device3_led_on		//device_3
+	rtn
+	
+mouse_device_blink_led_init:
+	fetch 1,mem_config_device1_led_gpio
+	branch mouse_led_blink
+
+
+
+mouse_statue_led_off:
+	jam 0x20,mem_lpm_mult
+	branch mouse_devce_led_off
+
+
+
+mouse_devce1_led_off:
+	fetch 1,mem_config_device1_led_gpio
+	rtneq GPIO_DISABLE
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_off
+
+mouse_devce2_led_off:
+	fetch 1,mem_config_device2_led_gpio
+	rtneq GPIO_DISABLE
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_off
+	
+mouse_devce_led_off:
+	call mouse_led_off
+	call mouse_devce1_led_off
+	call mouse_devce2_led_off
+mouse_devce3_led_off:
+	fetch 1,mem_config_device3_led_gpio
+	rtneq GPIO_DISABLE
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_off
+
+mouse_device1_led_on:
+	fetch 1,mem_config_device1_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_on
+mouse_device2_led_on:
+	fetch 1,mem_config_device2_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_on
+mouse_device3_led_on:
+	fetch 1,mem_config_device3_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_on
+
+
+
+mouse_polling_device:
+	bpatch patch1d_7,mem_patch1d
+	fetch 1,mem_reconn_times
+	increase -1,pdata
+	store 1,mem_reconn_times
+	fetcht 1,mem_device_flag
+	increase 1,temp
+	fetch 1,mem_device_number
+	isub temp,null
+	ncall mouse_select_device_count_clean,positive
+	storet 1,mem_device_flag
+	jam 0,mem_link_key_exists
+	call mouse_store_device_number2eeprom
+	call mouse_before_store_reconn_info
+	branch mouse_check_reconn_target
+	
+mouse_power_down:
+	call mouse_devce_led_off
+	setarg 0
+	store 8,mem_gpio_wakeup_low
+	branch lpm_hibernate
+
+
+
+
+
+
+
+
+
+
+remote_car_init:
+	rtn wake	
+	hfetch 1,core_gpio_sel1
+	and_into 0xf0,pdata
+	hstore 1,core_gpio_sel1
+	call keyscan_key_init
+	setarg remote_car_le_before_hibernate
+	store 2,mem_cb_before_hibernate
+	
+	setarg remote_car_process_lpm_before
+	store 2,mem_cb_before_lpm	
+	
+	setarg remote_car_scale_process_idle	
+	store 2,mem_cb_idle_process	
+	
+	setarg remote_car_scale_process_bb_event 
+	store 2,mem_cb_bb_event_process	
+	
+	setarg app_get_lpm_wake_lock
+	store 2,mem_cb_check_wakelock	
+
+	call g24_head_ptr2regc
+	setarg remote_car_g24_package_data
+	add regc,offset_24g_cb_data,contw
+	istore 2,contw
+	
+	setarg remote_car_g24_enter_lpm
+	add regc,offset_24g_cb_lpm_prepare,contw
+	istore 2,contw
+	
+	setarg remote_car_process_lpm_before
+	add regc,offset_24g_cb_lpm_before,contw
+	istore 2,contw
+
+	setarg remote_car_event_timer
+	store 2,mem_cb_event_timer
+	
+	setarg remote_car_power_off_signal
+	store 2,mem_remote_car_power_off_cb
+	
+	setarg remote_car_soft_switch_power_on_signal
+	store 2,mem_remote_car_power_standby_cb
+	
+	setarg remote_car_send_key_data
+	store 2,mem_cb_remote_car_keyscan
+	
+	bpatch patch1e_0,mem_patch1e
+	call remote_car_init_environment
+	call queue_init
+	jam 2,mem_lpm_mult
+	fetch 1,mem_remote_car_config_soft_switch_enable
+	store 1,mem_remote_car_hard_soft_switch
+	beq HARD_SWITCH, remote_car_hard_switch_power_on_signal
+	fetch 1,mem_remote_car_config_soft_switch_gpio
+	store 1,mem_ui_button_gpio
+remote_car_soft_switch_power_on_init:
+	call remote_car_ui_led_init
+	call ui_button_init
+	call ui_button_polling
+	jam POWER_STARTING,mem_remote_car_power_state
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+	branch app_enter_hibernate
+
+
+
+remote_car_hard_switch_power_on_signal:
+	jam POWER_STANDBY,mem_remote_car_power_state
+remote_car_soft_switch_power_on_signal:
+	call remote_car_ui_led_init
+//	fetch 1,mem_remote_car_led_map
+	arg 0,rega
+	call ui_led_blink_start_global
+remote_car_connect_24g_mode:
+	branch g24_auto_pair_start
+
+remote_car_power_off_signal:	
+	branch remote_car_ui_led_init
+	
+remote_car_ui_led_init:
+	bpatch patch1e_1,mem_patch1e
+	fetch 1,mem_remote_car_config_connect_led_gpio
+	bne INVALID_PIN_NUM,remote_car_pairing_led_gpio_set
+remote_car_ui_led_init_1:
+	fetcht 1, mem_remote_car_led_map
+	branch gpio_config_output
+remote_car_pairing_led_gpio_set:
+	store 1,mem_remote_car_led_map
+	branch remote_car_ui_led_init_1
+
+
+remote_car_init_environment:
+	call g24_set_device_addr
+	fetch 2,mem_remote_car_no_data_timeout
+	store 2,mem_remote_car_no_data_timer
+	branch remote_car_get_adc_default_data
+
+remote_car_le_before_hibernate:
+//	call keyscan_scan_key
+//	fetch 2, mem_key_value_temp
+//	branch remote_car_in_enter_hibernate,blank
+//	branch app_enter_hibernate
+remote_car_in_enter_hibernate:	
+	call gpio_set_before_lpm_common
+	call remote_car_process_lpm_before
+	branch app_enter_hibernate
+
+remote_car_process_lpm_before:
+	branch keyscan_process_lpm_before
+
+remote_car_g24_enter_lpm:
+	fetch 1,mem_remote_car_24g_enter_lpm_enable
+	rtn blank
+	//do not enter lpm when condition is unallowed
+	branch g24_lpm_long_sleep
+
+remote_car_process_auto_pair_exit:
+	rtn
+
+remote_car_key_scan_process:
+	branch keyscan_key_process
+
+remote_car_scale_process_idle:
+	call remote_car_rocker_process
+	call remote_car_24g_status_process
+	branch remote_car_key_scan_process
+
+remote_car_scale_process_bb_event:
+	copy regc,pdata
+	beq BT_EVT_BUTTON_UP,app_event_button_up
+	beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed
+	beq BT_EVT_24G_PAIRING_COMPLETE,remote_car_24g_pairing_complete
+	beq BT_EVT_24G_ATTEMPT_SUCCESS,remote_car_24g_attempt_success
+	beq BT_EVT_24G_ATTEMPT_FAIL,remote_car_24g_attempt_fail
+	rtn
+
+remote_car_24g_attempt_fail:
+	jam 1,mem_remote_car_24g_enter_lpm_enable
+	rtn
+
+remote_car_24g_pairing_complete:
+	jam 1,mem_remote_car_24g_enter_lpm_enable
+	jam WORK_PAIRED,mem_remote_car_24g_auto_work_step
+	jam WORK_PAIRED,mem_remote_car_24g_pair_success_flag
+	rtn
+
+remote_car_24g_attempt_success:
+	jam 1,mem_remote_car_24g_enter_lpm_enable
+	jam WORK_PAIRED,mem_remote_car_24g_auto_work_step
+	jam WORK_PAIRED,mem_remote_car_24g_pair_success_flag
+	rtn
+
+remote_car_24g_status_process:
+	fetch 1,mem_remote_car_24g_auto_work_step
+	rtneq POWER_ON
+	fetch 1,mem_remote_car_24g_status
+	rtneq WORK_PAIRED
+	jam WORK_PAIRED,mem_remote_car_24g_status
+remote_car_scale_process_paired:
+	arg 0,rega
+	branch ui_led_off_global
+remote_car_scale_process_shutdown:
+	arg 0,rega
+	call ui_led_off_global
+	call remote_car_ui_led_init
+	branch app_enter_hibernate
+	
+remote_car_event_timer:
+	call app_power_timer
+	branch remote_car_no_data_timer
+
+remote_car_no_data_timer:
+	fetch 1,mem_remote_car_config_timeout_shutdown_enable
+	rtn blank
+	arg mem_remote_car_no_data_timer,regc
+	arg remote_car_scale_process_shutdown,regb
+	branch timer_single_step_2B
+	
+////////////////////////////////////rocker/////////////////////////////
+remote_car_get_adc_default_data:
+	call remote_car_rocker_get_x
+	storet 2,mem_current_vdd_value_default_mid_x
+	call remote_car_rocker_get_y
+	storet 2,mem_current_vdd_value_default_mid_y
+	rtn
+remote_car_rocker_data_get:
+remote_car_rocker_get_x:
+	fetch 2,mem_current_vdd_value_default_mid_x
+	store 2,mem_current_vdd_value_default_mid_temp
+	call remote_car_get_adc_from_gpio6
+	call remote_car_rocker_get_value
+	store 1,mem_rocker_status
+remote_car_rocker_get_y:
+	fetch 2,mem_current_vdd_value_default_mid_y
+	store 2,mem_current_vdd_value_default_mid_temp
+	call remote_car_get_adc_from_gpio7
+	call remote_car_rocker_get_value
+	store 1,mem_rocker_status+1
+	rtn
+remote_car_rocker_get_value:
+	fetch 2,mem_current_vdd_default_range
+	copy pdata,rega
+	fetch 2,mem_current_vdd_value_default_mid_temp
+	call remote_car_rocker_mid_value_adjust
+	fetch 1,mem_rocker_work_status
+	nbranch remote_car_rocker_translate_key,blank
+	nrtn positive
+	fetcht 2,mem_current_vdd_value_default_mid_temp
+	rtn	
+remote_car_rocker_mid_value_adjust:
+	isub temp,pdata
+	branch remote_car_rocker_mid_adjust_positive,positive
+	sub pdata,0,pdata		//negative adjust
+	jam 1,mem_rocker_negative_flag
+	isub rega,null
+	rtn
+remote_car_rocker_mid_adjust_positive:
+	jam 0,mem_rocker_negative_flag
+	isub rega,null
+	rtn
+remote_car_rocker_translate_key:
+	nbranch remote_car_rocker_middle_key,positive
+	fetch 1,mem_rocker_negative_flag
+	nbranch remote_car_rocker_negative_key,blank
+remote_car_rocker_positive_key:	
+	setarg ROCKER_POSITIVE_KEY
+	rtn
+remote_car_rocker_negative_key:
+	setarg ROCKER_NEGATIVE_KEY
+	rtn
+remote_car_rocker_middle_key:
+	setarg ROCKER_MIDDLE_KEY
+	rtn
+remote_car_get_adc_from_gpio6:
+	jam 0x33,mem_adc_channel
+	branch adc_set_mode
+remote_car_get_adc_from_gpio7:
+	jam 0x34,mem_adc_channel
+	branch adc_set_mode
+
+
+remote_car_rocker_process:
+	fetch 1,mem_remote_car_config_check_way
+	rtnne CAR_REMOTE_CHECK_ROCKER	
+remote_car_read_rocker_check_start:
+	bpatch patch1e_2,mem_patch1e
+	jam 1,mem_rocker_work_status
+	call remote_car_rocker_data_get
+	fetch 2,mem_rocker_status
+	fetcht 2,mem_rocker_last_status
+	isub temp,null
+	rtn zero
+	store 2,mem_rocker_last_status
+	call remote_car_rocker_x_to_key
+	branch remote_car_rocker_y_to_key
+	
+remote_car_rocker_x_to_key:
+	fetch 1,mem_rocker_x_status
+	branch rocker_to_queue_set_0,blank
+	increase -1,pdata
+	branch remote_car_rocker_to_key
+remote_car_rocker_y_to_key:
+	fetch 1,mem_rocker_y_status
+	branch rocker_to_queue_set_2,blank
+	increase 1,pdata
+remote_car_rocker_to_key:
+	copy pdata,queue
+	arg 1,rega
+	branch remote_car_send_key_data
+	
+rocker_to_queue_set_0:
+	arg 0,queue
+	arg 0,rega
+	branch remote_car_send_key_data
+rocker_to_queue_set_2:
+	arg 2,queue
+	arg 0,rega
+	branch remote_car_send_key_data
+	
+remote_car_send_key_data:
+	copy rega,pdata
+	store 1,mem_remote_key_status
+	fetch 1,mem_remote_car_24g_auto_work_step
+	beq POWER_ON,g24_auto_pair_start
+	fetch 2,mem_remote_car_no_data_timeout
+	store 2,mem_remote_car_no_data_timer
+	fetch 1,mem_remote_key_status
+	branch remote_car_key_is_release,blank
+remote_car_key_is_press:
+	bpatch patch1e_3,mem_patch1e
+	arg 0,rega
+	call ui_led_on_global
+remote_car_attack_key_press:
+	copy queue,pdata
+	beq 4,remote_car_send_attack_key4_press
+	beq 5,remote_car_send_attack_key5_press
+	beq 6,remote_car_send_fire_key6_press
+//	fetch 1,mem_remote_car_config_check_way
+//	rtneq CAR_REMOTE_CHECK_ROCKER
+remote_car_motor_key_press:
+	call remote_car_device_layout_select
+	beq CONTROL_F_B_TEN,remote_car_single_motor_key_is_press
+	beq CONTROL_L_R_TEN,remote_car_double_motor_key_press
+	beq CONTROL_L_R_LR,remote_car_single_motor_key_is_press
+	rtn
+	
+remote_car_single_motor_key_is_press:
+	copy queue,pdata
+	beq 0,remote_car_send_motor1_key0_press
+	beq 1,remote_car_send_motor1_key1_press
+	beq 2,remote_car_send_motor2_key2_press
+	beq 3,remote_car_send_motor2_key3_press
+	rtn
+	
+remote_car_double_motor_key_press:
+	copy queue,pdata
+	beq 0,remote_car_send_double_motor_key0_press
+	beq 1,remote_car_send_double_motor_key1_press
+	beq 2,remote_car_send_double_motor_key2_press
+	beq 3,remote_car_send_double_motor_key3_press
+	rtn
+
+remote_car_key_is_release:
+	bpatch patch1e_4,mem_patch1e
+	arg 0,rega
+	call ui_led_off_global
+remote_car_attack_key_release:
+	copy queue,pdata
+	beq 4,remote_car_send_attack_key4_rel
+	beq 5,remote_car_send_attack_key5_rel
+//	fetch 1,mem_remote_car_config_check_way
+//	rtneq CAR_REMOTE_CHECK_ROCKER
+remote_car_motor_key_release:
+	call remote_car_device_layout_select
+	beq CONTROL_F_B_TEN,remote_car_single_motor_key_rel
+	beq CONTROL_L_R_TEN,remote_car_double_motor_key_rel
+	beq CONTROL_L_R_LR,remote_car_single_motor_key_rel
+	rtn
+
+remote_car_device_layout_select:
+	fetch 1,mem_remote_car_config_layout
+	fetcht 1,mem_remote_car_config_key_map
+	ior temp,pdata
+	rtn
+
+//cross key,control front-back motor layout
+remote_car_send_motor1_key0_press:	//front
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload
+	branch remote_car_send_key
+remote_car_send_motor1_key1_press:	//back
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload
+	branch remote_car_send_key
+remote_car_send_motor2_key2_press:	//left
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+remote_car_send_motor2_key3_press:	//right
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+
+//cross key,control left-right motor layout
+remote_car_send_double_motor_key0_press:	//front
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+remote_car_send_double_motor_key1_press:	//back
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+remote_car_send_double_motor_key2_press:	//left
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+remote_car_send_double_motor_key3_press:	//right
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+	
+//attack motor control
+remote_car_send_attack_key4_press:	//attack left
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor3_payload
+	branch remote_car_send_key
+remote_car_send_attack_key5_press:	//attack right
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor3_payload
+	branch remote_car_send_key
+
+remote_car_send_fire_key6_press:
+	jam 0x01,mem_remote_car_24g_fire_send_payload
+	branch remote_car_send_attack
+
+remote_car_single_motor_key_rel:
+	copy queue,pdata
+	beq 0,remote_car_send_motor1_key0_rel
+	beq 1,remote_car_send_motor1_key1_rel
+	beq 2,remote_car_send_motor2_key2_rel
+	beq 3,remote_car_send_motor2_key3_rel
+	rtn
+
+remote_car_double_motor_key_rel:
+	copy queue,pdata
+	beq 0,remote_car_send_double_motor_key0_rel
+	beq 1,remote_car_send_double_motor_key1_rel
+	beq 2,remote_car_send_double_motor_key2_rel
+	beq 3,remote_car_send_double_motor_key3_rel
+	rtn
+
+remote_car_send_motor1_key0_rel:
+remote_car_send_motor1_key1_rel:
+	jam MOTOR_STOP,mem_remote_car_24g_motor1_payload
+	branch remote_car_send_key
+remote_car_send_motor2_key2_rel:
+remote_car_send_motor2_key3_rel:
+	jam MOTOR_STOP,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+	
+remote_car_send_double_motor_key0_rel:
+remote_car_send_double_motor_key1_rel:
+remote_car_send_double_motor_key2_rel:
+remote_car_send_double_motor_key3_rel:
+	jam MOTOR_STOP,mem_remote_car_24g_motor1_payload
+	jam MOTOR_STOP,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+	
+remote_car_send_attack_key4_rel:
+remote_car_send_attack_key5_rel:
+	jam MOTOR_STOP,mem_remote_car_24g_motor3_payload
+	branch remote_car_send_key
+
+remote_car_send_key:
+	arg mem_remote_car_24g_motor_packet,rega
+	branch queue_push
+remote_car_send_attack:
+	arg mem_remote_car_24g_fire_packet,rega
+	branch queue_push
+
+remote_car_g24_package_data:
+	fetch 1,mem_remote_car_24g_pair_success_flag
+	beq WORK_PAIRED,remote_car_g24_send_empty
+	arg mem_remote_car_24g_tx_temp,rega
+	call queue_pop
+	nbranch remote_car_moto_data,user
+remote_car_g24_package_data_continue:
+	arg mem_remote_car_24g_tx_temp,contr
+	ifetch 1,contr
+	copy pdata,rega
+	arg mem_remote_car_24g_tx_temp+1,regb
+	//rega: length
+	//regb: tx buffer
+	rtn
+	
+remote_car_g24_send_empty:
+	jam 0,mem_remote_car_24g_pair_success_flag
+	enable user
+	arg 1,rega
+	arg mem_remote_car_empty_packet,regb
+	rtn
+	
+remote_car_moto_data:
+	fetch 1,mem_remote_car_24g_tx_temp+3	//cmd
+	beq CAR_CMD_L_R_MOTOR_CONTROL,remote_car_moto_data_next
+	beq CAR_CMD_F_B_MOTOR_CONTROL,remote_car_moto_data_next
+	rtn
+remote_car_moto_data_next:
+	fetch 1,mem_remote_car_24g_tx_temp+6	//data moto1
+	nbranch remote_car_moto_data_enable_user,blank
+	fetch 1,mem_remote_car_24g_tx_temp+8	//data moto2
+	nbranch remote_car_moto_data_enable_user,blank
+	fetch 1,mem_remote_car_24g_tx_temp+10	//data moto3
+	nbranch remote_car_moto_data_enable_user,blank
+	rtn
+remote_car_moto_data_enable_user:
+	enable user
+	branch remote_car_g24_package_data_continue
+
+
+
+
+
+
+
+shutter_init:
+	rtn wake	
+	hfetch 1,core_gpio_sel1
+	and_into 0xfc,pdata
+	hstore 1,core_gpio_sel1
+	setarg shutter_le_before_hibernate
+	store 2,mem_cb_before_hibernate
+
+	setarg shutter_process_lpm_before
+	store 2,mem_cb_before_lpm
+	
+	setarg app_enter_hibernate
+	store 2,mem_cb_discovry_timeout
+	
+	setarg shutter_process_idle
+	store 2,mem_cb_idle_process
+		
+	setarg shutter_process_bb_event 
+	store 2,mem_cb_bb_event_process
+
+	setarg shutter_le_scale_lpm_lock
+	store 2,mem_cb_check_wakelock
+	
+	setarg ble_shutter_receive_data
+	store 2,mem_cb_att_write
+
+	setarg shutter_le_bb_event_timer
+	store 2,mem_cb_event_timer
+
+	setarg shutter_key_change
+	store 2,mem_cb_shutter_keycan
+
+	setarg shutter_soft_swtich_power_on
+	store 2,mem_shutter_soft_switch_poweron_callback_function
+	setarg shutter_soft_swtich_power_off
+	store 2,mem_shutter_soft_switch_poweroff_callback_function
+
+	call le_modified_name
+	call shutter_load_bluetooth_config_by_user_config
+	call shutter_init_bluetooth_config
+	call shutter_init_param	
+	call keyscan_key_init
+	call shutter_load_buffer_config_form_DataRom
+	call queue_init
+	call ui_led_init_global
+	call shutter_load_bluetooth_config
+	call shutter_load_bluetooth_config_by_eeprom
+	
+	bpatch patch1e_5,mem_patch1e
+	call classic_shutter_load_reconn_info
+	fetch 1, mem_shutter_hard_soft_switch_case
+	beq HARD_SWITCH, shutter_hart_swtich_power_on
+	fetch 1,mem_shutter_soft_switch_button_gpio
+	store 1,mem_ui_button_gpio
+	branch ui_soft_swtich_init
+
+/**************hard swtich function**************/
+shutter_hart_swtich_power_on:
+	jam UI_BUTTON_GPIO_DISABLE,mem_ui_button_gpio
+	jam SS_STATE_POWER_ON,mem_shutter_soft_switch_power_state
+	branch shutter_start_reconnect
+/****************************/
+
+/**************lpm lock callback function**************/
+shutter_le_scale_lpm_lock:
+	fetch 1,mem_shutter_soft_switch_power_state
+	beq SS_STATE_POWER_OFF,app_get_lpm_wake_lock
+	call l2cap_malloc_get_full_map
+	fetch 1,mem_used_map
+	nbranch app_get_lpm_wake_lock,blank
+	branch app_put_lpm_wake_lock
+/****************************/
+
+/**************c512bt event callback function*************/
+shutter_process_bb_event:
+	copy regc,pdata
+/**************classic shutter event*****************/
+	beq BT_EVT_BB_CONNECTED,classic_shutter_process_baseband_connect
+	beq BT_EVT_BB_DISCONNECTED,classic_shutter_process_baseband_disconnect
+	beq BT_EVT_RECONN_FAILED,classic_shutter_process_reconnect_failed
+	beq BT_EVT_SETUP_COMPLETE,classic_shutter_process_setup_complete
+	beq BT_EVT_HID_CONNECTED,classic_shutter_process_hid_connect
+	beq BT_EVT_HID_DISCONNECTED,classic_shutter_process_hid_disconnect
+	beq BT_EVT_HID_HANDSHAKE,classic_shutter_process_hid_handshake
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,classic_shutter_process_reconnect_page_timeout
+	beq BT_EVT_VIRTUAL_CABLE_UNPLUG,classic_shutter_process_virtual_cable_unplug
+	beq BT_EVT_REMOTE_UNSNIFF,classic_shutter_process_remote_unsniff
+	beq BT_EVT_STORE_NVRAM,classic_shutter_process_store_reconnect_information
+/**************ble shutter event*****************/
+	beq BT_EVT_LE_CONNECTED,ble_shutter_process_baseband_connect
+	beq BT_EVT_LE_DISCONNECTED,ble_shutter_process_baseband_disconnect
+	beq BT_EVT_LE_RECONNECT_COMPLETE,ble_shutter_process_reconnect_complete
+	beq BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,ble_shutter_process_parse_connect_parameter_update_response
+/***************soft swtich event****************/
+	beq BT_EVT_BUTTON_LONG_PRESSED,shutter_process_soft_swtich_button_long_press
+	beq BT_EVT_BUTTON_DOWN,shutter_process_soft_swtich_button_down
+	beq BT_EVT_BUTTON_UP,shutter_process_soft_swtich_button_up
+	rtn
+/****************************/
+
+
+/******************classic shutter event**********************/
+classic_shutter_process_baseband_connect:
+	jam 0,mem_classic_shutter_hid_disconn_count
+	jam 0,mem_classic_shutter_cable_unplug_conut	
+	rtn
+
+
+classic_shutter_process_baseband_disconnect:
+	call classic_shutter_disconnect_clear_flag
+	branch classic_shutter_process_reconnect_failed
+
+classic_shutter_disconnect_clear_flag:
+	jam APP_HANDSHAKE_NULL,mem_app_handshake_flag
+	jam 0,mem_hid_handshake_timer_count
+	jam 0,mem_unsniff2sniff_timer_count
+	jam 0,mem_classic_shutter_cable_unplug_conut
+	jam 0,mem_classic_shutter_hid_disconn_count
+	branch queue_init
+
+
+classic_shutter_process_reconnect_failed:
+	call app_disconn_reason_clear
+	branch shutter_start_bluetooth_discovery
+
+
+classic_shutter_process_setup_complete:
+	call shutter_stop_bluetooth_discovery
+	branch app_led_stop_blink
+
+
+classic_shutter_process_hid_connect:
+	setarg HID_HANDSHAKE_TIMEOUT
+	store 1,mem_hid_handshake_timer_count
+	rtn	
+
+
+classic_shutter_process_hid_disconnect:
+	jam 0,mem_classic_shutter_cable_unplug_conut	
+	setarg FLAG_SHUTTER_HID_DISCONN_TIMEOUT
+	store 1,mem_classic_shutter_hid_disconn_count
+	rtn
+
+
+classic_shutter_process_hid_handshake:
+	fetch 1,mem_app_handshake_flag
+	rtneq APP_HANDSHAKE_DONE
+	jam APP_HANDSHAKE_DONE,mem_app_handshake_flag
+	call app_lpm_mult_enable
+	call app_store_reconn_info
+	call shutter_stop_bluetooth_discovery
+	call app_led_off
+	branch app_bt_enter_sniff
+
+
+classic_shutter_process_reconnect_page_timeout:
+	branch classic_shutter_process_reconnect_failed
+
+
+classic_shutter_process_virtual_cable_unplug:
+	setarg FLAG_SHUTTER_CABLE_UNPLUG_TIMEOUT
+	store 1,mem_classic_shutter_cable_unplug_conut
+	rtn
+
+
+classic_shutter_process_remote_unsniff:
+	branch app_start_auto_sniff
+
+
+/***************classic shutter store reconn info***********************/
+classic_shutter_process_store_reconnect_information:
+	arg NVRAM_EEPROM_OFFSET,regb
+	fetch 1,mem_nv_data_number
+	mul32 pdata,34,temp
+	fetch 2,mem_nv_data_ptr
+	copy pdata,rega
+	branch iicd_write_eep_data
+
+classic_shutter_load_reconn_info:
+	arg NVRAM_EEPROM_OFFSET,regb
+	fetch 1,mem_shutter_bluetooth_type
+	rtnbit0 CLASSIC_SHUTTER
+	fetch 1,mem_nv_data_number
+	rtn blank
+	mul32 pdata,34,temp
+	fetch 2,mem_nv_data_ptr
+	copy pdata,rega
+	branch iicd_read_eep_data
+/**************************************/
+
+/******************ble shutter event**********************/
+ble_shutter_process_baseband_connect:
+	call shutter_stop_bluetooth_discovery
+	setarg 0
+	store 2,mem_ble_shutter_reconn_timer
+	branch app_led_off
+
+
+ble_shutter_process_baseband_disconnect:
+	call queue_init
+	jam 0,mem_ble_shutter_enable_notify
+	branch shutter_start_reconnect
+
+
+ble_shutter_process_reconnect_complete:
+	call queue_init
+	jam 1,mem_ble_shutter_enable_notify
+	fetch 8,mem_ble_shutter_interval_min
+	store 8,mem_le_interval_min
+	call app_lpm_mult_enable
+	branch le_l2cap_tx_update_req
+
+
+ble_shutter_process_parse_connect_parameter_update_response:
+	fetch 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	rtneq BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_ACCEPTED
+	fetch 8,mem_ble_shutter_interval_min_new
+	rtn blank
+	store 8,mem_le_interval_min
+	branch le_l2cap_tx_update_req
+/**************************************/
+
+/******************soft swtich event**********************/
+shutter_process_soft_swtich_button_long_press:
+	branch ui_soft_switch_botton_long_press
+
+shutter_process_soft_swtich_button_down:
+	fetch 1,mem_shutter_hard_soft_switch_case
+	rtneq HARD_SWITCH
+	fetch 1,mem_shutter_soft_switch_power_state
+	rtnne SS_STATE_POWER_ON
+	call shutter_store_currenct_led_state
+	branch app_led_on
+	
+shutter_store_currenct_led_state:
+	jam 1,mem_shutter_soft_swtich_botton_down
+	arg 11,loopcnt
+	arg mem_shutter_soft_swtich_led_struct_temp,contw
+	arg mem_shutter_led_struct_app_led,contr
+	branch memcpy
+	
+shutter_process_soft_swtich_button_up:
+	fetch 1,mem_shutter_hard_soft_switch_case
+	rtneq HARD_SWITCH
+	fetch 1,mem_shutter_soft_switch_power_state
+	beq SS_STATE_POWER_ON,shutter_load_currenct_led_state
+	branch ui_soft_switch_botton_up
+
+shutter_load_currenct_led_state:
+	fetch 1,mem_shutter_soft_swtich_botton_down
+	rtnne 1
+	jam 0,mem_shutter_soft_swtich_botton_down
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,app_led_off
+	bbit1 UI_STATE_BLE_CONNECTED,app_led_off
+	arg 11,loopcnt
+	arg mem_shutter_soft_swtich_led_struct_temp,contr
+	arg mem_shutter_led_struct_app_led,contw
+	branch memcpy
+	
+/**************************************/
+
+
+shutter_le_bb_event_timer:
+/**************shutter check sleep timer**********************/
+	call shutter_check_sleep_timer
+/************************************/
+/**************soft reset power off timer**********************/
+	call shutter_check_power_off_timer
+/************************************/
+/**************classic shutter timer**********************/
+	call classic_shutter_check_unplug_timer
+	call classic_shutter_hid_handshake_timer
+	call classic_shutter_hid_disconn_timer
+/************************************/
+/**************ble shutter timer**********************/
+	branch ble_shutter_reconn_timer
+/************************************/
+
+/**************shutter check sleep timer**********************/
+shutter_check_sleep_timer:
+	arg mem_shutter_sleep_timer,regc
+	arg shutter_sleep_timeout,regb
+	branch timer_single_step_2B
+shutter_sleep_timeout:
+	jam SS_STATE_POWER_OFF,mem_shutter_soft_switch_power_state
+	call app_led_off
+	call shutter_disconnect_current_connection
+	branch shutter_wait_power_off
+
+/**************soft reset power off timer**********************/
+shutter_check_power_off_timer:
+	arg mem_shutter_power_off_timer,regc
+	arg shutter_check_power_off_timeout,regb
+	branch timer_single_step
+
+shutter_check_power_off_timeout:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,shutter_wait_power_off
+	bbit1 UI_STATE_BT_CONNECTED,shutter_wait_power_off
+	fetch 1,mem_shutter_led_struct_app_led_type
+	beq UI_LED_STATE_BLINK_START,shutter_wait_power_off
+	beq UI_LED_STATE_BLINK_LIGHTING,shutter_wait_power_off
+	beq UI_LED_STATE_BLINK_DARKING,shutter_wait_power_off
+	branch app_enter_hibernate
+/************************************/
+
+/**************classic shutter timer**********************/
+classic_shutter_check_unplug_timer:
+	arg mem_classic_shutter_cable_unplug_conut,regc
+	arg classic_shutter_unplug_timeout,regb
+	branch timer_single_step
+	
+classic_shutter_unplug_timeout:
+	fetch 1,mem_CONTROL_tasks
+	set1  L2CAP_DISCONNECT_INTERRUPT, pdata
+	set1  L2CAP_DISCONNECT_CONTROL, pdata
+	store 1,mem_CONTROL_tasks	
+	rtn
+
+classic_shutter_hid_handshake_timer:
+	arg mem_hid_handshake_timer_count,regc
+	arg classic_shutter_process_hid_handshake,regb
+	branch timer_single_step
+
+classic_shutter_hid_disconn_timer:
+	arg mem_classic_shutter_hid_disconn_count,regc
+	arg app_bt_disconnect,regb
+	branch timer_single_step
+
+/************************************/
+
+/**************ble shutter timer**********************/
+ble_shutter_reconn_timer:
+	fetch 1,mem_shutter_soft_switch_power_state
+	rtnne SS_STATE_POWER_ON
+	arg mem_ble_shutter_reconn_timer,regc
+	arg shutter_start_bluetooth_discovery,regb
+	branch timer_single_step_2B
+/************************************/
+
+shutter_process_idle:
+	call shutter_send_data_to_master
+	branch keyscan_key_process
+
+
+shutter_process_lpm_before:
+	branch keyscan_process_lpm_before
+
+shutter_le_before_hibernate:
+	call gpio_set_before_lpm_common
+	branch shutter_process_lpm_before
+
+//////////////////////////////////////////////////////////////////////////////////////////
+
+
+/****************shutter bluetooth control**********************/
+shutter_stop_bluetooth_discovery:
+	fetch 1,mem_shutter_bluetooth_type
+	bbit1 CLASSIC_SHUTTER,classic_shutter_stop_bluetooth_discovery
+	bbit1 BLE_SHUTTER,ble_shutter_stop_bluetooth_discovery
+	rtn
+
+ble_shutter_stop_bluetooth_discovery:
+	fetch 2,mem_ble_shutter_connect_timeout
+	store 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+	branch app_ble_stop_adv
+	
+classic_shutter_stop_bluetooth_discovery:
+	fetch 2,mem_classic_shutter_connect_timeout
+	store 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+	branch app_bt_stop_discovery
+
+shutter_start_bluetooth_discovery:
+	fetch 1,mem_shutter_soft_switch_power_state
+	rtnne SS_STATE_POWER_ON
+	fetch 1,mem_shutter_bluetooth_type
+	bbit1 CLASSIC_SHUTTER,classic_shutter_start_discovery
+	bbit1 BLE_SHUTTER,ble_shutter_start_discovery
+	rtn
+	
+classic_shutter_start_discovery:
+	fetch 2,mem_classic_shutter_discovery_timeout,
+	store 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+	branch app_bt_start_discovery_short
+
+ble_shutter_start_discovery:
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	fetch 2,mem_ble_shutter_discovery_timeout
+	store 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+	fetch 2,mem_ble_shutter_discovery_adv_interval
+	call shutter_ble_adv_interval_set
+	call app_led_start_blink
+	fetch 4,mem_ble_shutter_discovery_blink_on_time
+	store 4,mem_shutter_led_struct_app_led_on_time
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_ADV
+	branch app_ble_start_adv
+
+
+shutter_start_reconnect:
+	fetch 1,mem_shutter_soft_switch_power_state
+	rtnne SS_STATE_POWER_ON
+	fetch 1,mem_shutter_bluetooth_type
+	bbit1 CLASSIC_SHUTTER,classic_shutter_start_reconnect
+	bbit1 BLE_SHUTTER,ble_shutter_start_reconnect
+	rtn
+
+classic_shutter_start_reconnect:
+	call app_check_reconn_target
+	branch shutter_start_bluetooth_discovery,blank
+	call app_led_on	
+	call app_bt_stop_discovery
+	branch app_bt_start_reconnect	
+
+ble_shutter_start_reconnect:
+	fetch 2,mem_ble_shutter_reconn_timer
+	fetcht 2,mem_ble_shutter_reconn_timeout
+	storet 2,mem_ble_shutter_reconn_timer
+	nrtn blank
+	fetch 2,mem_ble_shutter_reconn_dav_interval
+	call shutter_ble_adv_interval_set
+	call app_led_start_blink
+	fetch 4,mem_ble_shutter_reconn_blink_on_time
+	store 4,mem_shutter_led_struct_app_led_on_time
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_ADV
+	branch app_ble_start_adv
+
+//pdata:adv interval value
+shutter_ble_adv_interval_set:
+	store 2,mem_lpm_interval
+	increase -4,pdata
+	store 2,mem_le_adv_interval
+	rtn
+
+
+shutter_disconnect_current_connection:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect
+	bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect
+	branch shutter_stop_bluetooth_discovery
+/**************************************/
+
+/******************classic shutter load reconnect*********************/
+app_check_reconn_target:
+	fetch 1,mem_nv_data_number
+	copy pdata,loopcnt
+	fetch 2,mem_nv_data_ptr
+	copy pdata,rega
+app_check_reconn_target_loop:
+	ifetch 2,rega
+	beq 0,found_reconn_device
+	increase NV_DATA_LEN,rega
+	loop app_check_reconn_target_loop
+	branch enable_blank
+
+found_reconn_device:
+	ifetch 6,contr
+	store 6,mem_hci_plap
+	increase 10,contr
+	arg mem_link_key,contw
+	call  memcpy16
+	call check_link_key_load
+	branch disable_blank
+	
+/**************************************/
+
+/////////////////////////////////////////////////////////////////////////
+//output:if user is enable,mean,can send data
+shutter_check_data_enable:
+	call disable_user
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,shutter_check_bt_data_enable
+	bbit1 UI_STATE_BLE_CONNECTED,shutter_check_ble_data_enable
+	rtn
+
+shutter_check_bt_data_enable:
+	fetch 1,mem_hid_interrupt_state
+	rtnne 0x3f	
+	branch enable_user
+
+shutter_check_ble_data_enable:
+	fetch 1,mem_ble_shutter_enable_notify
+	rtn blank
+	branch enable_user
+/////////////////////////////////////////////////////////////////////////
+
+/////////////////////////////////////////////////////////////////////////
+//output:if user is enable,mean,bluetooth disconnect
+shutter_check_bluetooth_conn:
+	call disable_user
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BT_CONNECTED
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	branch enable_user
+/////////////////////////////////////////////////////////////////////////
+
+/////////////////////////////////////////////////////////////////////////
+shutter_change_bluetooth_status_bt_disconn:
+	fetch 1,mem_shutter_bluetooth_type
+	bbit1 CLASSIC_SHUTTER,classic_shutter_change_bluetooth_status_bt_disconn
+	bbit1 BLE_SHUTTER,ble_shutter_change_bluetooth_status_bt_disconn
+	rtn
+	
+classic_shutter_change_bluetooth_status_bt_disconn:
+	fetch 1,mem_scan_mode
+	rtnne 0x03
+	branch shutter_start_reconnect
+	
+ble_shutter_change_bluetooth_status_bt_disconn:
+	branch shutter_start_reconnect
+
+/////////////////////////////////////////////////////////////////////////
+shutter_check_send_data:
+	disable user2
+	fetch 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+
+	call shutter_check_bluetooth_conn
+	branch shutter_change_bluetooth_status_bt_disconn,user
+	
+	call shutter_check_data_enable
+	nrtn user
+	enable user2
+	rtn
+
+//queue = key index
+//rega =1 press, =0 release
+shutter_key_change:
+	call shutter_check_send_data
+	nrtn user2
+	deposit rega
+	branch shutter_key_release,blank
+shutter_key_press:
+	call app_led_on
+	arg mem_key0_press,regc
+	branch push_queue_press_or_release
+
+shutter_key_release:
+	call app_led_off
+	arg mem_key0_release,regc
+
+push_queue_press_or_release:
+	arg MAX_QUEUE_NUM,pdata
+	imul32 queue,pdata
+	iadd regc,regc
+	
+//input:regc the address that want push to queue buffer
+push_buffer_in_queue:
+	ifetch 1,regc
+	rtn blank
+	call queue_push_one_byte
+	increase 1,regc
+	branch push_buffer_in_queue
+
+
+shutter_send_data_to_master:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,pop_queue_to_ble_data
+	bbit1 UI_STATE_BT_CONNECTED,pop_queue_to_classic_data
+	rtn
+
+pop_queue_to_ble_data:
+	call le_fifo_check_nearly_full
+	nrtn blank
+	call queue_pop_one_byte
+	nrtn user
+	pincrease -1
+	mul32 pdata,SHUTTER_BLE_DATA_BUFFER,pdata
+	arg mem_ble_data_buffer1,temp
+	iadd temp,contr
+le_send_notify_from_list:
+	ifetch 1,contr	//length 
+	copy pdata,rega
+	ifetcht 2,contr	//handle
+	call store_contr
+	call le_att_malloc_tx_notify
+	copy rega,loopcnt
+	call get_contr
+	branch memcpy
+
+
+pop_queue_to_classic_data:
+	call l2cap_malloc_is_fifo_nearly_full
+	nrtn blank
+	call queue_pop_one_byte
+	nrtn user
+	pincrease -1
+	mul32 pdata,SHUTTER_CLASSIC_DATA_BUFFER,pdata
+	arg mem_classic_data_buffer1,temp
+	iadd temp,contr
+	ifetch 5,contr
+	store 5,mem_classic_data_buffer
+classic_send_hid_data:
+	fetch 1,mem_classic_data_buffer
+	copy pdata,rega
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_int_remote_cid
+	istore 2,contw
+	setarg 0xa1
+	istore 1,contw
+	fetch 4,mem_classic_data_buffer + 1
+	istore 9,contw
+	rtn
+
+///////////queue function////////////
+//input:pdata is data that want push
+queue_push_one_byte:
+	store 1,mem_pdatatemp
+	arg mem_pdatatemp,rega
+	branch queue_push
+
+queue_pop_one_byte:
+	arg mem_pdatatemp,rega
+	call queue_pop
+	nrtn user
+	fetch 1,mem_pdatatemp
+	rtn
+
+///////////queue function ending////////////
+ble_shutter_receive_data:
+	fetch 2,mem_le_att_handle
+	beq GATT_KEYBOARD_WRITE_HANDLE,ble_shutter_process_reconnect_complete
+	rtn
+
+shutter_init_param:
+	setarg 0x02
+	store 1,mem_shutter_power_off_timeout
+/////////////ble connect interval//////////////
+	setarg 0x00200008
+	store 4,mem_ble_shutter_interval_min		//set min interval is 10ms,set max interval is 40ms
+	setarg 0x012c0005
+	istore 4,contw
+///////////////////////////////////////
+//////////////////MTU/////////////
+	jam 0x17,mem_le_local_mtu
+///////////////////////////////////////
+////////////////justwork/////////
+	setarg 0x1b
+ 	store 2,mem_le_pairing_handle
+ 	call le_set_config_fixed_ltk
+	call le_set_fixed_ltk
+	call le_set_justwork
+	branch le_set_config_read_authentication
+///////////////////////////////////////
+
+shutter_load_buffer_config_form_DataRom:
+///////load data Rom/////////
+	arg BLE_KEY_VALUE_LIST_SIZE,loopcnt
+	arg mem_ble_data_buffer1,contw
+	arg BLE_SHUTTER_KEY_VALUE_LIST,contr
+	call memcpy_fast
+	arg BT_KEY_VALUE_LIST_SIZE,loopcnt
+	arg mem_classic_data_buffer1,contw
+	arg CLASSIC_SHUTTER_KEY_VALUE_LIST,contr
+	branch memcpy_fast	
+
+
+shutter_load_ble_gatt_form_DataRom:
+	arg BLE_GATT_LIST_SIZE,loopcnt
+	arg BLE_SHUTTER_GATT_LIST,contr
+	branch memcpy_fast
+
+
+shutter_load_bt_sdp_form_DataRom:
+	arg BT_SDP_LIST_SIZE,loopcnt
+	arg CLASSIC_SHUTTER_SDP_LIST,contr
+	branch memcpy_fast
+	
+
+///////////////////////////////gpio config////////////////////////////////////
+shutter_init_bluetooth_config:
+	call shutter_check_load_config_flag
+	nrtn user
+	fetch 1,mem_shutter_config_select_gpio1
+	call shutter_init_bluetooth_config_gpio_input
+	fetch 1,mem_shutter_config_select_gpio2
+	call shutter_init_bluetooth_config_gpio_input
+	fetch 1,mem_shutter_config_select_gpio3
+	branch shutter_init_bluetooth_config_gpio_input
+	
+shutter_init_bluetooth_config_gpio_input:
+	rtn blank
+	or pdata,0x80,temp
+	branch gpio_config_input_nowake
+	
+
+shutter_load_bluetooth_config:
+	call shutter_check_load_config_flag
+	nrtn user
+	call shutter_load_bluetooth_config_label
+	branch shutter_load_bluetooth_config_by_otp
+
+shutter_load_bluetooth_config_label:
+	arg 0,rega
+	fetch 1,mem_shutter_config_select_gpio1
+	call shutter_load_bluetooth_config_read_gpio_input
+	nsetflag blank,0,rega
+	fetch 1,mem_shutter_config_select_gpio2
+	call shutter_load_bluetooth_config_read_gpio_input
+	nsetflag blank,1,rega
+	fetch 1,mem_shutter_config_select_gpio3
+	call shutter_load_bluetooth_config_read_gpio_input
+	nsetflag blank,2,rega
+	copy rega,pdata
+	store 1,mem_shutter_config_label
+	fetch 1,mem_shutter_config_size
+	imul32 rega,pdata
+	fetcht 2,mem_shutter_config_otp_base_address		//base address
+	iadd temp,pdata
+	store 2,mem_shutter_config_otp_addr
+	rtn
+
+shutter_load_bluetooth_config_read_gpio_input:
+	rtn blank
+	or pdata,0x80,temp
+	call gpio_get_bit
+	nbranch enable_blank,true
+	branch disable_blank
+	
+
+shutter_check_load_config_flag:
+	call disable_user
+	fetch 1,mem_shutter_config_user_size
+	nrtn blank
+	fetch 1,mem_shutter_config_enable
+	rtn blank
+	branch enable_user
+
+
+shutter_load_bluetooth_config_by_otp:
+	call otp_enable_chgpump
+	fetch 2,mem_shutter_config_otp_addr
+	arg mem_shutter_config_data_temp,rega
+	fetcht 1,mem_shutter_config_size
+	call otpd_read_data
+	call otp_disable_chgpump
+shutter_load_bluetooth_config_store_name:
+	fetch 1,mem_shutter_config_data_temp
+	copy pdata,loopcnt
+	store 1,mem_le_name_len
+	call memcpy_fast
+	fetch 1,mem_shutter_config_data_temp
+	copy pdata,loopcnt
+	store 1,mem_local_name_length
+	call memcpy_fast
+	ifetch 1,contr
+	store 1,mem_shutter_key_num
+	ifetch 1,contr
+	store 1,mem_shutter_hard_soft_switch_case
+	rtn
+
+
+shutter_load_bluetooth_config_by_eeprom:
+	fetch 1,mem_shutter_bluetooth_type
+	rtnbit0 CLASSIC_SHUTTER
+	arg 3,temp
+	fetch 2,mem_shutter_config_eeprom_offset_addr
+	copy pdata,regb
+	arg mem_shutter_config_eeprom_start_flag,rega
+	call iicd_read_eep_data
+	fetcht 2,mem_shutter_config_eeprom_start_flag
+	setarg SHUTTER_EEPROM_CONFIG_CRC
+	isub temp,null
+	nrtn zero
+	fetch 1,mem_shutter_config_user_size
+	rtn blank
+	copy pdata,temp
+	fetch 2,mem_shutter_config_eeprom_offset_addr
+	add pdata,3,regb
+	arg mem_shutter_config_data_temp,rega
+	call iicd_read_eep_data
+	branch shutter_store_config
+
+shutter_load_bluetooth_config_by_user_config:
+	fetch 2,mem_shutter_config_user_otp_address
+	rtn blank
+	call otp_enable_chgpump
+	arg 1,temp
+	arg mem_shutter_config_user_size,rega
+	call otpd_read_data
+	
+	fetch 1,mem_shutter_config_user_size
+	rtn blank
+	
+	fetch 2,mem_shutter_config_user_otp_address
+	pincrease 1
+	arg mem_shutter_config_data_temp,rega
+	fetcht 1,mem_shutter_config_user_size
+	call otpd_read_data
+	call otp_disable_chgpump
+shutter_store_config:
+	call shutter_load_bluetooth_config_store_name
+shutter_load_bluetooth_config_custom:
+	ifetch 2,contr
+	rtn blank
+	copy pdata,contw
+	ifetcht 1,contr
+	copy temp,loopcnt
+	call memcpy
+	branch shutter_load_bluetooth_config_custom
+///////////////////////////////////////////////////////////////////
+
+//////////////////////////random mac address//////////////////////////////
+shutter_random_mac_addr:
+	fetch 1,mem_shutter_bluetooth_type
+	rtnbit0 CLASSIC_SHUTTER
+	fetch 2,mem_classic_shutter_random_mac_offset_addr
+	copy pdata,regb
+	arg 4,temp
+	arg mem_shutter_random_mac_data_temp,rega
+	call iicd_read_eep_data
+	fetch 1,mem_shutter_random_mac_data_temp
+	bne 1,shutter_write_random_mac_addr_to_eeprom
+shutter_write_random_mac_addr_to_eeprom:
+	setarg 1
+	store 1,mem_shutter_random_mac_data_temp
+	force 3,loopcnt
+	call generate_random_loop
+	fetch 2,mem_classic_shutter_random_mac_offset_addr
+	copy pdata,regb
+	arg 4,temp
+	arg mem_shutter_random_mac_data_temp,rega
+	call iicd_write_eep_data
+shutter_write_random_mac_addr:
+	fetch 3,mem_shutter_random_mac_data_temp + 1
+	store 3,mem_lap
+	store 3,mem_le_lap
+	rtn
+	
+/////////////////////////////////////////////////////////////////
+shutter_soft_swtich_power_on:
+	branch shutter_start_reconnect
+
+
+shutter_soft_swtich_power_off:
+	arg 0,rega
+	arg mem_shutter_power_off_led_style,regc
+	call ui_led_set_style_global
+	call shutter_disconnect_current_connection
+shutter_wait_power_off:
+	fetch 1,mem_shutter_power_off_timeout
+	store 1,mem_shutter_power_off_timer
+	rtn
+	
+
+/*************soft swtich ui config*********************/
+ui_soft_swtich_init:
+	setarg SS_STATE_POWER_UP
+	call ui_soft_swtich_init_power_on_time
+	jam UI_BUTTON_STATE_UP,mem_ui_button_last_state
+	call ui_button_init
+	call ui_button_polling
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+	branch app_enter_hibernate
+
+ui_soft_swtich_init_power_on_time:
+	fetcht 2,mem_power_param_ptr
+	istore 1,temp		//init power state 
+	ifetch 1,contw		//power on time
+	store 1,mem_ui_button_timeout
+	rtn
+
+
+ui_soft_switch_botton_up:
+	fetch 2,mem_power_param_ptr
+	ifetch 1,pdata
+	rtnne SS_STATE_POWER_UP
+	branch app_enter_hibernate
+
+
+ui_soft_switch_botton_long_press:
+	fetcht 2,mem_power_param_ptr
+	ifetch 1,temp
+	beq SS_STATE_POWER_ON,ui_soft_switch_power_off
+ui_soft_switch_power_on:
+	setarg SS_STATE_POWER_ON
+	fetcht 2,mem_power_param_ptr
+	istore 1,temp		//init power state 
+	add temp,SS_POWER_OFF_TIME,contr
+	ifetch 1,contr
+	istore 1,mem_ui_button_timeout
+	ifetch 2,contr
+	branch callback_func
+
+ui_soft_switch_power_off:
+	setarg SS_STATE_POWER_OFF
+	call ui_soft_swtich_init_power_on_time
+	add temp,SS_POWER_OFF_CB,contr
+	ifetch 2,contr
+	branch app_enter_hibernate,blank		//no call back function , just enter hibernate
+	branch callback_func
+	
+/*************soft swtich ui config ending*********************/
+
+
+/*************unkown function*********************/
+shutter_byteswap:
+	store 6,mem_tmp_buffer
+	fetch 1,mem_tmp_buffer
+	store 1,mem_tmp_buffer+11
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+10
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+9
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+8
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+7
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+6
+	fetch 6,mem_tmp_buffer+6
+	rtn
+
+shutter_random_addr_by_otp:
+	call load_adc_init
+	fetch 1,mem_1v_adc_io_data
+	store 1,mem_le_lap
+	fetch 1,mem_5v_adc_hvin_data
+	istore 1,contw
+	fetch 1,mem_3v_adc_vinlpm_data
+	istore 1,contw
+	fetch 3,mem_le_lap
+	store 3,mem_lap
+	rtn
+
+
+
+//iic read function
+//function name:sim_iic_read_eep_data
+//input:
+//temp:the length that simulation iic want to read eeprom data
+//rega:the memmory point that simulation iic read data store
+//regb:the eeprom address offset
+//mark_eeprom_size:select 02 or other
+//output:nc
+sim_iic_read_eep_data:
+	fetch 2,mem_eeprom_base
+	iadd regb,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+	copy temp,regb
+	
+	call sim_iic_start
+	setarg 0xa0
+	call sim_iic_send_byte
+	fetch 1,mem_addr_mi
+	call sim_iic_send_byte
+	bmark1 mark_eeprom_size,sim_iic_read_eep_data_2k
+	fetch 1,mem_addr_mi + 1
+	call sim_iic_send_byte
+sim_iic_read_eep_data_2k:
+	call sim_iic_stop
+
+	call sim_iic_start
+	setarg 0xa1
+	call sim_iic_send_byte
+
+sim_iic_read_eep_data_loop:
+	call sim_iic_read_byte
+	istore 1,rega
+	increase 1,rega
+	increase -1,regb
+	nbranch sim_iic_read_eep_data_loop,zero
+	branch sim_iic_stop
+
+
+//iic write data function
+//function name:sim_iic_write_eep_data
+//input:
+//temp:the length that simulation iic want to write eeprom data
+//rega:the memmory point that simulation iic write data read
+//regb:the eeprom address
+//mark_eeprom_size:select 02 or other
+//output:nc
+sim_iic_write_eep_data:
+	byteswap regb,pdata
+	store 2,mem_addr_mi
+	copy temp,regb
+
+	call sim_iic_start
+	setarg 0xa0
+	call sim_iic_send_byte
+
+	fetch 1,mem_addr_mi
+	call sim_iic_send_byte
+	bmark1 mark_eeprom_size,sim_iic_write_eep_data_loop
+	fetch 1,mem_addr_mi + 1
+	call sim_iic_send_byte
+sim_iic_write_eep_data_loop:
+	ifetch 1,rega
+	call sim_iic_send_byte
+	increase 1,rega
+	increase -1,regb
+	nbranch sim_iic_write_eep_data_loop,zero
+	branch sim_iic_stop
+//	bmark1 mark_eeprom_size
+
+//use reg:pdata,contr,contw,loopcnt
+sim_iic_wait_ack:
+	arg 10,loopcnt
+	call sim_iic_release_sda
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+sim_iic_wait_ack_loop:
+	call sim_iic_read_sda_level
+	branch sim_iic_scl_output_low,blank	//scl = 0
+	loop sim_iic_wait_ack_loop
+	branch sim_iic_scl_output_low		//scl = 0	
+
+
+//use reg:pdata,contr,contw,rega,queue
+sim_iic_ack_slave:
+	call sim_iic_scl_output_low		//scl = 0	
+	call sim_iic_sda_output_low		//sda = 0
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	branch sim_iic_scl_output_low	//scl = 0	
+
+
+//output:pdata receive byte data
+//use reg:pdata,contr,contw,loopcnt,regc,rega
+sim_iic_read_byte:
+	arg 8,loopcnt
+	arg 0,regc
+	call sim_iic_release_sda
+sim_iic_read_byte_loop:
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	lshift regc,regc	
+	call sim_iic_read_sda_level
+	iadd regc,regc
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_scl_output_low		//scl = 0	
+	loop sim_iic_read_byte_loop
+	call sim_iic_ack_slave
+	copy regc,pdata
+	rtn
+
+//input:pdata send byte data
+//use reg:pdata,contr,contw,loopcnt,regc,rega
+sim_iic_send_byte:
+	arg 8,loopcnt
+	copy pdata,regc
+	call sim_iic_scl_output_low		//scl = 0	
+sim_iic_send_byte_loop:
+	isolate1 7,regc
+	call sim_iic_sda_output_high,true	//sda = 1
+	ncall sim_iic_sda_output_low,true	//sda = 0
+	lshift regc,regc
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_scl_output_low		//scl = 0	
+	call sim_iic_delay				//delay 2.5us
+	loop sim_iic_send_byte_loop
+	branch sim_iic_wait_ack
+
+
+//use reg:pdata,contr,contw,rega
+sim_iic_start:
+	call sim_iic_sda_output_high	//sda = 1
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_sda_output_low		//sda = 0
+	call sim_iic_delay				//delay 2.5us
+	branch sim_iic_scl_output_low		//scl = 0
+
+
+//use reg:pdata,contr,contw,rega
+sim_iic_stop:
+	call sim_iic_sda_output_low		//sda = 0
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_sda_output_high	//sda = 1
+	branch sim_iic_delay				//delay 2.5us
+
+
+//scl = 1
+sim_iic_scl_output_high:
+	enable user
+	fetch 1,SIM_IIC_SCL_GPIO_NUM
+	branch sim_iic_config_gpio
+
+//scl = 0
+sim_iic_scl_output_low:
+	disable user
+	fetch 1,SIM_IIC_SCL_GPIO_NUM
+	branch sim_iic_config_gpio
+
+//sda = 1
+sim_iic_sda_output_high:
+	enable user
+	fetch 1,SIM_IIC_SDA_GPIO_NUM
+	branch sim_iic_config_gpio
+
+//sda = 0
+sim_iic_sda_output_low:
+	disable user
+	fetch 1,SIM_IIC_SDA_GPIO_NUM
+	branch sim_iic_config_gpio
+
+//input:pdata the gpio number
+//input:user flag, if enable user,config gpio output high level; if disable user, config gpio output low level
+//use reg:pdata,contr,contw,queue,rega
+sim_iic_config_gpio:
+	and pdata,0x07,queue
+	rshift3 pdata,pdata
+	arg core_gpio_oe0,temp
+	iadd temp,temp
+	ifetch 1,temp
+	qset1 pdata
+	istore 1,temp
+	increase 4,temp
+	ifetch 1,temp
+	qsetflag user,pdata
+	istore 1,temp
+	rtn
+
+
+sim_iic_release_sda:
+	fetch 1,SIM_IIC_SDA_GPIO_NUM
+	and pdata,0x07,queue
+	rshift3 pdata,pdata
+	arg core_gpio_oe0,temp
+	iadd temp,temp
+	ifetch 1,temp
+	qset0 pdata
+	istore 1,temp
+	rtn	
+
+//get sda level
+//output:if sda high level ,pdata is 1;if sda low level ,pdata is 0
+//use reg:pdata,contr,contw,queue,rega,temp
+sim_iic_read_sda_level:
+	nop 4
+	fetch 1,SIM_IIC_SDA_GPIO_NUM
+	and pdata,0x07,queue
+	rshift3 pdata,pdata
+	arg core_gpio_in,temp
+	iadd temp,temp
+	setarg 0
+	ifetcht 1,temp
+	qisolate1 temp
+	setflag true,0,pdata
+	rtn	
+
+//delay 2.5us
+sim_iic_delay:
+//	nop 1
+	rtn
+
+/**********************************/
+
+
+
+usb_isr:
+	bpatch patch1e_6,mem_patch1e
+	hfetch 1,core_usb_status
+	isolate1 7,pdata
+	call usb_init,true
+	call usb_nak_state_judge
+	hfetch 1,core_usb_status
+	store 1,mem_usb_status
+	hfetch 1,core_usb_fifo_empty
+	store 1,mem_usb_fifo_empty
+	hstore 1,core_usb_fifo_empty
+	pinvert
+	fetcht 1,mem_usb_tx_wait
+	iand temp,pdata
+	store 1,mem_usb_tx_wait
+	jam 0xe0,core_usb_status
+	fetch 1,mem_usb_fifo_empty
+	compare 0x1,pdata,0x1
+	call usb0_fifo_empty,true
+	fetch 1,mem_usb_status	
+	compare 0x1,pdata,0x1  
+	call usb_status1,true
+	call usb_tx
+	branch usb_nak_state
+
+usb_init:
+	bpatch patch1e_7,mem_patch1e
+	call usb_init_param
+	jam 0x00,core_usb_config
+	nop 10000
+	jam 0xc0,core_usb_trig
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_USB,pdata
+	hstore 2,core_clkoff
+	jam 0x3c,core_usb_config
+	jam 0xff,core_usb_status
+	jam 0xff,core_usb_fifo_empty
+	jam 0,core_usb_addr
+	jam DEV_DEFAULT,mem_usb0_state
+	setarg mem_usb_clear_mem_end
+	arg mem_usb_clear_mem_start,contw
+	isub contw,loopcnt
+	branch clear_mem
+
+usb_offline_check_init:
+	fetcht 1,mem_usb_offline_check_gpio
+	branch gpio_config_input
+usb_offline_state:
+	fetch 1,mem_usb_device_enumeration_endflag
+	rtn blank
+	fetcht 1,mem_usb_offline_check_gpio
+	call gpio_get_bit
+	branch usb_init,true
+	rtn
+
+
+usb_nak_state:
+	arg TIMER_NAK,queue
+	call timer_check
+	nrtn blank
+	fetch 1 ,mem_usb_wakestate_onetime_flag
+	nrtn blank
+	fetch 1,mem_usb_device_enumeration_endflag
+	ncall usb_mac_wakeup_judge,blank
+	rtn
+
+usb_mem_devicedesc_init:
+	arg mem_devicedesc,contw
+	setsect 0,0x11212
+	setsect 1,0x8000
+	setsect 2,0x0
+	setsect 3,0x10000
+	istore 9,contw
+	setsect 0,0x22412
+	setsect 1,0x8604
+	setsect 2,0x1000
+	setsect 3,0x8
+	istore 9,contw
+	setsect 0,0x1
+	istore 1,contw
+	rtn
+	
+usb_init_param:
+	jam 2,mem_usb0_state
+	setarg 0x0
+	store 1,mem_remain
+	store 2,mem_usb_zero_packet
+	pincrease 1
+	store 2,mem_usb_ones_packet
+	pincrease 1
+	store 2,mem_usb_two_packet
+	setarg HID_KBDATA_ADDR
+	store 2,mem_hidreportdesc_kb
+	setarg HID_MSDATA_ADDR
+	store 2,mem_hidreportdesc_m
+	arg mem_confdesc,contw
+	arg HID_CONFDATA_ADDR,contr
+	call memcpy64
+	fetch 1,mem_usb_tx_interval
+	ncall usb_tx_interval_config,blank
+	branch usb_mem_devicedesc_init
+	
+usb_tx_interval_config:
+	store 1,mem_confdesc+34
+	store 1,mem_confdesc+59
+	rtn
+usb_nak_state_judge:
+	hfetch 1,core_usb_status
+	bbit1 USB_STATUS_NAK,usb_nak_state_timer_init
+	rtn
+	
+usb_nak_state_timer_init:
+	call usb0_attached_state_judge
+	call timer_reinit
+	setarg TIMER_NAK_DELAY
+	arg TIMER_NAK,queue
+	branch timer_init
+	
+usb0_attached_state_judge:
+	fetch 1,mem_usb_state
+	bne USB_CONNECTED,usb_clear_halt_dispose
+	jam 0,mem_usb_wakestate_onetime_flag
+	jam 0,mem_usb_mac_wakeup_trig
+	rtn
+usb_clear_halt_dispose:
+	fetch 1,mem_usb_clear_halt
+	rtn blank
+	jam 0,mem_usb_clear_halt
+	jam USB_CONNECTED,mem_usb_state
+	jam 1,mem_usb_device_enumeration_endflag
+	rtn
+    	
+usb0_fifo_empty:
+	jam 0x1,core_usb_fifo_empty
+	branch usb0_tx
+
+usb_rx_no_data:
+	fetch 1,mem_usb_status
+	bbit1 USB_STATUS_SETUP,usb_class_type
+	rtn
+
+usb_rx_read:
+	hfetch 1,core_usb_ep
+	istore 1,contw
+	loop usb_rx_read
+	rtn
+
+usb_status1:
+	bpatch patch1f_0,mem_patch1f
+	jam 0x11,core_usb_status
+	hfetch 1,core_usb_ep_len
+	store 1,mem_usb_read_len
+	copy pdata,loopcnt
+	branch usb_rx_no_data,blank
+	arg mem_usb_setup,contw
+	call usb_rx_read
+	fetch 1,mem_usb_read_len
+	sub pdata,7,null
+	rtn positive
+usb_class_type:
+	fetch 1,mem_usb_setup_bmRequestType
+	and_into 0x80,pdata
+	beq IN_DEVICE,usb_in_device
+	beq OUT_DEVICE,usb_out_device
+	branch assert
+
+usb_in_device:
+	fetch 1,mem_usb_setup_bmRequestType
+	rshift4 pdata,pdata
+	rshift pdata,pdata
+	and_into 0x03,pdata
+	beq STANDARD_REQ,usb_in_standard_req
+	beq CLASS_REQ,usb_in_class_req
+	beq MANUFACTURER_REQ,usb_in_manufacturer_req
+	branch assert
+
+usb_out_device:
+	fetch 1,mem_usb_setup_bmRequestType
+	rshift4 pdata,pdata
+	rshift pdata,pdata
+	and_into 0x03,pdata
+	beq STANDARD_REQ,usb_out_standard_req
+	beq CLASS_REQ,usb_out_class_req	
+	beq MANUFACTURER_REQ,usb_out_manufacturer_req
+	branch assert
+
+usb_in_standard_req:
+	fetch 1,mem_usb_setup_bRequest
+	beq GET_CONFIGURATION,usb0_request_get_configuration
+	beq GET_DESCRIPTOR,usb0_request_get_descriptor
+	beq GET_INTERFACE,usb0_request_get_interface
+	beq GET_STATUS,usb0_request_get_status
+	branch usb0_force_stall
+
+usb_in_class_req:
+	fetch 1,mem_usb_setup_bRequest
+	beq GET_IDLE,usb_get_idle
+	beq GET_REPORT,usb_get_report
+	beq GET_PROTOCOL,usb_get_protocol_req
+	branch usb0_force_stall
+
+usb_in_manufacturer_req:
+	branch usb0_force_stall
+
+usb_out_standard_req:
+	fetch 1,mem_usb_setup_bRequest
+	beq CLEAR_FEATURE,usb0_request_clear_feature
+	beq SET_FEATURE,usb0_request_set_feature
+	beq SET_ADDRESS,usb0_request_set_address
+	beq SET_CONFIGURATION,usb0_request_set_configuration
+	beq SET_INTERFACE,usb0_request_set_interface
+	beq SET_DESCRIPTOR,usb0_force_stall
+	branch usb0_force_stall
+
+usb_out_class_req:
+	fetch 1,mem_usb_setup_bRequest
+	beq SET_IDLE,usb_set_idle
+	beq SET_REPORT,usb_set_report
+	beq SET_PROTOCOL,usb_set_protocol_req
+	branch usb0_force_stall
+
+usb_out_manufacturer_req:
+	branch usb0_force_stall
+
+usb0_force_stall:
+	hfetch 1,core_usb_stall
+	set1 0,pdata
+	hstore 1,core_usb_stall
+	branch usb0_reply_zerolen
+	
+usb0_reply_zerolen:
+	jam 0x40,core_usb_clear
+	rtn
+
+usb0_request_get_configuration:
+	fetch 1,mem_usb_setup_bmRequestType
+	bne IN_DEVICE,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 1,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb0_state
+	beq DEV_CONFIGURED,usb0_request_get_cfg_dev_cfg
+	beq DEV_ADDRESS,usb0_request_get_cfg_dev_addr
+	branch usb0_force_stall
+//Return current config : 1
+usb0_request_get_cfg_dev_cfg:
+	arg 1,regb
+	branch usb_send_ones_packet
+//Config do not work, return default config : 0
+usb0_request_get_cfg_dev_addr:
+	arg 1,regb
+	branch usb_send_zero_packet
+
+usb0_request_get_descriptor:
+	bpatch patch1f_1,mem_patch1f
+	set0 mark_isstr,mark
+	fetch 1,mem_usb_setup_bValueH
+	beq DSC_DEVICE,dsc_device_info
+	beq DSC_CONFIG,dsc_config_info	
+	beq DSC_STRING,dsc_string_info
+	beq DSC_HID,dsc_hid_info
+	beq DSC_HID_REPORT,dsc_hid_report_info
+	branch usb0_force_stall
+
+dsc_hid_info:
+	jam 0,mem_usb_get_protocol_flag
+	fetch 1,mem_usb_setup_wIndex
+	beq 0,dsc_hid_info_interface0
+	beq 1,dsc_hid_info_interface1
+	branch usb0_force_stall
+//class_descriptor hid_descriptor--keyboard 
+dsc_hid_info_interface0:	
+	arg mem_confdesc+19,rega
+	ifetch 1,rega
+	iforce regb
+	branch usb0_respond
+//class_descriptor hid_descriptor--mouse 
+dsc_hid_info_interface1:	
+	arg mem_confdesc+44,rega
+	ifetch 1,rega
+	iforce regb
+	branch usb0_respond
+
+dsc_device_info:
+//input : pdata : data poniter 
+//input : temp: data len
+//sets the data pointer and len to correct descriptor
+	fetch 1,mem_usb_set_high_addr_flag
+	ncall usb_set_high_addr,blank
+	setarg mem_devicedesc
+	fetcht 1,mem_devicedesc
+dsc_info_set_data_len:
+	store 2,mem_dsc_info_data_pointer
+	storet 1,mem_dsc_info_len
+	fetch 1,mem_usb_setup_bLength
+	isub temp,null
+	nbranch dsc_info_set_current_data_len,positive
+dsc_info_set_initial_data_len:
+	fetch 1,mem_dsc_info_len
+dsc_info_set_data_size_completed:	
+	iforce regb
+	fetch 2,mem_dsc_info_data_pointer
+	add pdata,1,pdata
+	iforce rega
+	branch usb0_respond
+dsc_info_set_current_data_len:
+	fetch 1,mem_usb_setup_bLength
+	branch dsc_info_set_data_size_completed
+
+usb_set_high_addr:
+	hfetch 1,core_usb_addr
+	ncall usb0_set_addr,blank
+	jam 0,mem_usb_set_high_addr_flag
+	rtn
+usb0_set_addr:
+	hfetch 1,core_usb_addr
+   	set1 7,pdata
+	hstore 1,core_usb_addr
+	rtn
+
+dsc_config_info:
+	setarg mem_confdesc
+	fetcht 1,mem_confdesc
+	branch dsc_info_set_data_len
+
+dsc_string_info:
+	fetch 1,mem_usb_setup_bValue
+	sub pdata,3,null
+	nbranch usb0_force_stall,positive
+	fetch 1,mem_usb_setup_bValue
+	arg mem_string0,rega
+	beq 0,usb0_respond_length	
+	set1 mark_isstr,mark
+	arg mem_string1,rega
+	beq 1,usb0_respond_length
+	arg mem_string2,rega
+	beq 2,usb0_respond_length
+	arg mem_string3,rega
+	beq 3,usb0_respond_length
+	rtn
+
+dsc_hid_report_info:
+	fetch 2,mem_usb_setup_wIndex
+	beq 1,dsc_hid_report_info0
+	fetch 2,mem_hidreportdesc_kb
+	copy pdata,rega
+//	arg mem_hidreportdesc_kb,rega
+	branch usb0_respond_length
+dsc_hid_report_info0:
+	jam 1,mem_usb_device_enumeration_endflag
+	jam USB_GOT_REPORT_REQ,mem_usb_state
+	fetch 2,mem_hidreportdesc_m
+	copy pdata,rega
+//	arg mem_hidreportdesc_m,rega
+	branch usb0_respond_length
+
+
+usb0_request_get_interface:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall		
+	fetch 1,mem_usb_setup_bmRequestType
+	bne IN_INTERFACE,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 1,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	arg 1,regb
+	branch usb_send_zero_packet
+
+
+usb0_request_get_status:
+	fetch 1,mem_usb0_state
+	beq DEV_DEFAULT,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 2,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bmRequestType
+	beq IN_DEVICE,usb0_get_status_in_device
+	beq IN_INTERFACE,usb0_get_status_in_interface
+	beq IN_ENDPOINT,usb0_get_status_in_endpoint
+	branch usb0_force_stall
+
+usb0_get_status_in_device:
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	arg 2,regb
+	fetch 1,mem_usb_remote_wakeup
+	beq 0x01,usb_send_two_packet
+//regb:length
+usb_send_zero_packet:
+	arg mem_usb_zero_packet,rega
+	branch usb0_respond
+usb_send_ones_packet:
+	arg mem_usb_ones_packet,rega
+	branch usb0_respond
+usb_send_two_packet:
+	arg mem_usb_two_packet,rega
+	branch usb0_respond
+
+usb0_get_status_in_interface:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall
+	arg 2,regb
+	branch usb_send_zero_packet
+
+usb0_get_status_in_endpoint:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	beq IN_EP1,usb0_get_status_in_ep_in_ep1
+	beq IN_EP2,usb0_get_status_in_ep_in_ep2
+	beq IN_EP3,usb0_get_status_in_ep_in_ep3
+	and_into 0x7f,pdata
+	beq 0x00,usb0_get_status_in_ep_in_ep0
+	branch usb0_force_stall
+	
+usb0_get_status_in_ep_in_ep0:
+	fetch 1,mem_usb_ep0_stall_status
+usb0_get_status_in_ep_in_ack:
+	arg 2,regb
+	beq 1,usb_send_ones_packet
+	branch usb_send_zero_packet
+usb0_get_status_in_ep_in_ep1:
+	fetch 1,mem_usb_ep1_stall_status
+	branch usb0_get_status_in_ep_in_ack
+usb0_get_status_in_ep_in_ep2:
+	fetch 1,mem_usb_ep2_stall_status
+	branch usb0_get_status_in_ep_in_ack
+usb0_get_status_in_ep_in_ep3:
+	fetch 1,mem_usb_ep3_stall_status
+	branch usb0_get_status_in_ep_in_ack
+
+usb_get_idle:
+	jam 1,mem_usb_idle_flag
+	arg mem_usb_idle_rate,rega
+	arg 1,regb
+	branch usb0_respond
+
+usb_get_report:
+	fetch 2,mem_usb_setup_bValue
+	arg PC_GET_REPORT,temp
+	isub temp,null
+	nbranch usb0_force_stall,zero
+	set0 mark_isstr,mark
+usb_get_report_dispose:	
+	fetch 1,mem_usb0_data_ready_report
+	nbranch usb_get_report_data_success,blank
+	jam PC_GET_NONDATA,mem_usb0_get_report_data
+usb_get_report_send_data:
+	fetch 1,mem_usb_setup_bLength
+	iforce regb
+	arg mem_usb0_get_report_data,rega
+	call usb0_respond
+usb_get_report_data_release:	
+	arg mem_usb0_get_report_data,contw
+	arg 8,loopcnt
+	branch memset0
+usb_get_report_data_success:
+	jam 0,mem_usb0_data_ready_report
+	jam PC_GET_DATA,mem_usb0_get_report_data
+	branch usb_get_report_send_data
+
+usb_get_protocol_req:
+	fetch 1,mem_usb_setup_bLength
+	bne 1,usb0_force_stall
+	jam 1,mem_usb_get_protocol_flag
+	arg 1,regb //length
+	fetch 1,mem_usb_set_protocol_value
+	beq 0,usb_get_report_protocol
+	beq 1,usb_get_boot_protocol
+	branch usb_send_zero_packet
+usb_get_report_protocol:
+	branch usb_send_ones_packet
+usb_get_boot_protocol:
+	branch usb_send_zero_packet
+
+
+
+//in device
+usb0_request_clear_feature:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bmRequestType
+	beq OUT_DEVICE,usb0_request_clear_feature_out_device
+	beq OUT_INTERFACE,usb0_request_clear_feature_out_interface
+	beq OUT_ENDPOINT,usb0_request_clear_feature_out_endpoint
+	branch usb0_force_stall
+
+usb0_request_clear_feature_out_device:
+	fetch 1,mem_usb_setup_bValue
+	bne DEVICE_REMOTE_WAKEUP,usb0_force_stall
+	hfetch 1,core_usb_config
+	set0 7,pdata
+	hstore 1,core_usb_config
+	jam 0,mem_usb_remote_wakeup
+	jam 1,mem_usb_clear_remote_wakeup
+	branch usb0_reply_zerolen
+
+usb0_request_clear_feature_out_interface:
+	branch usb0_force_stall
+
+usb0_request_clear_feature_out_endpoint:
+	fetch 1,mem_usb_setup_bValue
+	bne ENDPOINT_HALT,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	beq IN_EP1,usb0_force_stall_ep1_in_off
+	beq IN_EP2,usb0_force_stall_ep2_in_off
+	beq IN_EP3,usb0_force_stall_ep3_in_off
+	and_into 0x7f,pdata
+	beq 0x00,usb0_force_stall_ep0_in_off
+	branch usb0_force_stall
+
+usb0_force_stall_ep0_in_off:
+	jam 0,mem_usb_ep0_stall_status
+	branch usb0_reply_zerolen
+usb0_force_stall_ep1_in_off:
+	jam 0,mem_usb_ep1_stall_status
+usb0_force_stall_ep1_in_off_reply:	
+	jam 1,mem_usb_clear_halt
+	branch usb0_reply_zerolen
+usb0_force_stall_ep2_in_off:
+	jam 0,mem_usb_ep2_stall_status
+	branch usb0_force_stall_ep1_in_off_reply
+usb0_force_stall_ep3_in_off:
+	jam 0,mem_usb_ep3_stall_status
+	branch usb0_force_stall_ep1_in_off_reply
+
+
+usb0_request_set_feature:
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bmRequestType
+	beq OUT_DEVICE,usb0_request_set_feature_out_device
+	beq OUT_INTERFACE,usb0_request_set_feature_out_interface
+	beq OUT_ENDPOINT,usb0_request_set_feature_out_endpoint
+	branch usb0_force_stall
+
+usb0_request_set_feature_out_device:
+	fetch 1,mem_usb_setup_bValue
+	bne DEVICE_REMOTE_WAKEUP,usb0_force_stall
+	hfetch 1,core_usb_config
+	set1 7,pdata
+	hstore 1,core_usb_config
+	jam 1,mem_usb_remote_wakeup
+	jam USB_SLEEP,mem_usb_state
+	jam 0,mem_usb_tx_win_enable
+	call usb0_reply_zerolen
+usb_wakeup_timer_reinit:
+	call timer_reinit
+	setarg TIMER_WAKEUP_DELAY
+	arg TIMER_WAKEUP,queue
+	branch timer_init
+	
+usb0_request_set_feature_out_interface:
+	branch usb0_force_stall
+
+usb0_request_set_feature_out_endpoint:
+	fetch 1,mem_usb_setup_bValue
+	bne ENDPOINT_HALT,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	beq IN_EP1,usb0_force_stall_ep1_in_on
+	beq IN_EP2,usb0_force_stall_ep2_in_on
+	beq IN_EP3,usb0_force_stall_ep3_in_on
+	and_into 0x7f,pdata
+	beq 0x00,usb0_force_stall_ep0_in_on
+	branch usb0_force_stall
+
+usb0_force_stall_ep0_in_on:
+	jam 1,mem_usb_ep0_stall_status
+	branch usb0_reply_zerolen
+usb0_force_stall_ep1_in_on:
+	jam 1,mem_usb_ep1_stall_status
+	branch usb0_reply_zerolen
+usb0_force_stall_ep2_in_on:
+	jam 1,mem_usb_ep2_stall_status
+	branch usb0_reply_zerolen
+usb0_force_stall_ep3_in_on:
+	jam 1,mem_usb_ep3_stall_status
+	branch usb0_reply_zerolen
+
+
+usb0_request_set_address:
+	fetch 1,mem_usb_setup_bmRequestType
+	bne OUT_DEVICE,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	and_into 0x80,pdata
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb_usb0_state_set_dev_addr
+usb_usb0_state_set_dev_default:	
+	jam DEV_DEFAULT,mem_usb0_state
+usb0_request_set_wait_address:
+	fetch 1,mem_usb_setup_bValue
+	hstore 1,core_usb_addr
+	call usb0_reply_zerolen
+	jam 1,mem_usb_set_high_addr_flag
+	rtn
+usb_usb0_state_set_dev_addr:
+	jam DEV_ADDRESS,mem_usb0_state
+	branch usb0_request_set_wait_address
+
+
+usb0_request_set_configuration:
+	fetch 1,mem_usb0_state
+	beq DEV_DEFAULT,usb0_force_stall
+	fetch 1,mem_usb_setup_bmRequestType
+	bne OUT_DEVICE,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	sub pdata,USB_MAX_NUM_CFG,null
+	nbranch usb0_force_stall,positive
+	fetch 1,mem_usb0_state
+	beq DEV_ADDRESS,usb0_request_set_cfg_addr_state
+	beq DEV_CONFIGURED,usb0_request_set_cfg_cfg_state
+	branch usb0_force_stall
+ // This software only supports config = 0,1
+usb0_request_set_cfg_addr_state:
+usb0_request_set_cfg_cfg_state:
+	fetch 1,mem_usb_setup_bValue	//1:Configured state   0:Address state
+	beq 0,usb0_request_set_cfg_stay_addr_state
+	jam DEV_CONFIGURED,mem_usb0_state
+	branch usb0_reply_zerolen
+usb0_request_set_cfg_stay_addr_state:
+	jam DEV_ADDRESS,mem_usb0_state
+	branch usb0_reply_zerolen
+
+
+usb0_request_set_interface:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall		
+	fetch 1,mem_usb_setup_bmRequestType
+	bne OUT_INTERFACE,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	branch usb0_reply_zerolen
+
+
+usb_set_idle:
+	jam 1,mem_usb_idle_flag
+	fetch 1,mem_usb_setup_bValueH
+	store 1,mem_usb_idle_rate
+	fetch 1,mem_usb_setup_wIndex
+	sub pdata,1,null
+	call usb_clear_remote_wakeup_set0,zero
+	fetch 1,mem_usb_state
+	bne USB_RESUME,usb0_reply_zerolen
+	jam USB_CONNECTED,mem_usb_state
+	call usb0_reply_zerolen
+	nop 30000
+	nop 30000
+	rtn
+usb_clear_remote_wakeup_set0:
+	jam 1,mem_usb_device_enumeration_endflag
+	jam 0,mem_usb_clear_remote_wakeup
+	jam USB_RESUME,mem_usb_state
+	rtn
+
+
+usb_set_report:
+	jam 1,mem_usb0_get_set_report
+	call usb_set_report_resume_judge
+	fetch 2,mem_usb_setup_bValue
+	store 2,mem_usb_setup_bValue_temp
+	fetch 1,mem_usb_setup_bLength	//max 0x40
+	iforce loopcnt
+	arg mem_usb0_setup,contr
+	arg mem_usb0_set_report_data,contw
+	call memcpy
+	branch usb0_reply_zerolen
+	
+usb_set_report_resume_judge:
+	fetch 2,mem_usb_setup_bValue
+	arg PC_SET_REPORT_bValue,temp
+	isub temp,null
+	nrtn zero
+	fetch 2,mem_usb_setup_wIndex
+	arg PC_SET_REPORT_wIndex,temp
+	isub temp,null
+	nrtn zero
+	fetch 2,mem_usb_setup_bLength
+	arg PC_SET_REPORT_bLength,temp
+	isub temp,null
+	nrtn zero
+	jam 1,mem_usb_tx_win_enable
+	rtn
+
+
+usb_set_protocol_req:
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	beq BOOT_PROTOCOL,usb_set_boot_protocol
+	beq REPORT_PROTOCOL,usb_set_report_protocol
+	branch usb0_force_stall
+usb_set_boot_protocol:
+	jam 0,mem_usb_set_protocol_status
+	jam 1,mem_usb_set_protocol_value
+	branch usb0_reply_zerolen
+usb_set_report_protocol:
+	jam 1,mem_usb_tx_mac_enable
+	jam 1,mem_usb_set_protocol_status
+	jam 0,mem_usb_set_protocol_value
+	branch usb0_reply_zerolen
+
+
+usb0_respond_length:
+	ifetch 1,rega
+	iforce regb
+	increase 1,rega
+//rega=*buff,reb=size	
+usb0_respond:
+	bpatch patch1f_2,mem_patch1f
+	bmark0 mark_isstr,usb0_respond0
+	add regb,1,pdata
+	lshift pdata,pdata
+	hstore 1,core_usb_dfifo0 
+	jam 3,core_usb_dfifo0
+	fetch 1,mem_usb_setup_bLength
+	increase -2,pdata
+	rshift pdata,pdata
+	store 1,mem_usb_setup_bLength
+	beq 0,usb_no_respond_data
+usb0_respond0:
+	fetch 2,mem_usb_setup_bLength
+	isub regb,null
+	branch usb0_respond1,positive
+	copy pdata,regb	
+usb0_respond1:
+	deposit rega
+	store 2,mem_bufptr
+	deposit regb
+	store 1,mem_remain
+	branch usb0_tx
+
+usb_no_respond_data:
+	arg 0,queue
+	branch usb_trig
+
+//mem_bufptr=*buff,mem_remain=size,loopcnt=i,rega=len
+usb0_tx:
+	bpatch patch1f_3,mem_patch1f
+	fetch 1,mem_remain
+	rtn blank
+	copy pdata,loopcnt
+	sub pdata,EP0_PACKET_SIZE,null
+	branch usb0_tx_info,positive
+	arg EP0_PACKET_SIZE,loopcnt	
+usb0_tx_info:
+	fetch 1,mem_remain
+	isub loopcnt,pdata
+	store 1,mem_remain//mem_remain -= len
+	fetch 2,mem_bufptr
+	copy pdata,contr	
+usb0_tx0:
+	ifetch 1,contr
+	hstore 1,core_usb_dfifo0
+	bmark0 mark_isstr,usb0_tx1
+	jam 0,core_usb_dfifo0
+usb0_tx1:
+	loop usb0_tx0
+	copy contr,pdata
+	store 2,mem_bufptr//mem_bufptr += len
+	arg 0,queue
+	call usb_trig
+	fetch 1,mem_remain
+	nrtn blank
+	fetch 1,mem_usb_state
+	rtnne USB_GOT_REPORT_REQ
+	jam USB_CONNECTED,mem_usb_state
+	rtn
+
+
+usb_tx_ep1:
+	arg core_usb_dfifo1,rega
+	arg 1,queue
+usb_tx_loop:
+	ifetch 1,contr
+	istore 1,rega
+	loop usb_tx_loop
+usb_trig:
+	setarg 0
+	qset1 pdata
+	hstore 1,core_usb_trig
+	fetcht 1,mem_usb_tx_wait
+	ior temp,pdata
+	store 1,mem_usb_tx_wait
+	rtn
+
+usb_tx_ep2:
+	arg 2,queue
+	arg core_usb_dfifo2,rega
+	branch usb_tx_loop
+
+usb_tx:
+	bpatch patch1f_4,mem_patch1f
+	fetch 1,mem_usb_tx_enable
+	rtn blank
+	fetch 1,mem_usb_tx_wait
+	nbranch usb_inwake_state_tx_dispose,blank
+	fetch 1,mem_usb_device_enumeration_endflag
+	branch usb_tx_fifo_release,blank
+	fetch 1,mem_usb_state
+	beq USB_SLEEP,usb_windows_wakeup
+	bne USB_CONNECTED,usb_tx_fifo_release
+	fetch 1,mem_usb_clear_remote_wakeup
+	nbranch usb_tx_fifo_release,blank
+	call usb_tx_data_ep1
+	branch usb_tx_data_ep2
+
+usb_tx_data_ep1:
+	fetch 1,mem_usb_tx_enable
+	rtnbit0 1
+	fetch 1,mem_usb_tx_wait
+	rtnbit1 1
+	fetch 1,mem_usb_tx_enable
+	set0 1,pdata
+	store 1,mem_usb_tx_enable
+	fetch 1,mem_usb_ep1_data
+	rtn blank
+	beq USB_EP1_KB,usb_tx_kb_normal_data
+	branch assert
+
+usb_tx_data_ep2:
+	fetch 1,mem_usb_tx_enable
+	rtnbit0 2
+	fetch 1,mem_usb_tx_wait
+	rtnbit1 2
+	fetch 1,mem_usb_tx_enable
+	set0 2,pdata
+	store 1,mem_usb_tx_enable
+	fetch 1,mem_usb_ep2_data
+	rtn blank
+	beq USB_EP2_MS,usb_tx_ms_data
+	beq USB_EP2_MULTIKEY,usb_tx_kb_multikey_data
+	branch assert
+
+usb_tx_fifo_release:
+	//clear mem_usb_mouse_data/mem_usb_kb_data/mem_usb_kb_multikey
+	arg mem_usb_mouse_data,contw
+	arg 6,loopcnt
+	branch memset0
+	
+usb_tx_ms_data:
+	fetch 1,mem_usb_idle_flag
+	fetcht 1,mem_usb_get_protocol_flag
+	iand temp,pdata
+	branch usb_tx_ms_data_normal_mode,blank
+	fetcht 1,mem_usb_set_protocol_status
+	iadd temp,pdata
+	beq MAC_BOOT_MODE,usb_tx_ms_data_mac_boot_mode
+	branch usb_tx_ms_data_normal_mode
+
+usb_tx_ms_data_mac_boot_mode:
+	jam 0,mem_usb_ep2_data
+usb_tx_ms_data_mac_boot_regroup:
+	fetch 1,mem_usb_mouse_data+1	//key
+	beq R_KEY,usb_tx_mac_boot_ms_regroup_r_or_lrkey
+	beq LR_KEY,usb_tx_mac_boot_ms_regroup_r_or_lrkey
+	fetch 1,mem_usb_mouse_data+1	//key
+	store 1,mem_usb_mouse_data
+	fetch 1,mem_usb_mouse_data+2	//x low
+	istore 1,contw
+	fetch 1,mem_usb_mouse_data+4	//y low
+	istore 1,contw
+	fetch 1,mem_usb_mouse_data+6	//wheel
+	istore 1,contw
+	arg 4,loopcnt
+	arg mem_usb_mouse_data,contr
+	branch usb_tx_ep2
+	
+usb_tx_ms_data_normal_mode:
+	jam 0,mem_usb_ep2_data
+usb_tx_mac_boot_ms_regroup_r_or_lrkey:	
+	arg 8,loopcnt		
+	arg mem_usb_mouse_data,contr
+	branch usb_tx_ep2
+
+usb_tx_kb_multikey_data:
+	jam 0,mem_usb_ep2_data
+	arg 3,loopcnt
+	arg mem_usb_kb_multikey,contr
+	branch usb_tx_ep2
+
+usb_tx_kb_normal_data:
+	jam 0,mem_usb_ep1_data
+	arg 8,loopcnt
+	arg mem_usb_kb_data,contr
+	branch usb_tx_ep1
+
+usb_inwake_state_tx_dispose:
+	fetch 1,mem_usb_state
+	beq USB_SLEEP,usb_clear_tx_wait
+	beq USB_CONNECTED, usb_mac_wakeup_trig
+	rtn
+usb_clear_tx_wait:
+	jam 0,mem_usb_tx_wait
+	rtn	
+usb_mac_wakeup_trig:
+	hfetch 1,core_usb_config
+	set1 7,pdata
+	hstore 1,core_usb_config
+	jam 1,mem_usb_mac_wakeup_trig
+	rtn
+
+usb_mac_wakeup_judge:
+	fetch 1,mem_usb_state
+	rtneq USB_SLEEP
+	beq USB_CONNECTED,usb_mac_wakeup
+	rtn
+usb_mac_wakeup:
+	fetch 1,mem_usb_mac_wakeup_trig
+	rtn blank
+	jam 1,mem_usb_wakestate_onetime_flag
+	branch usb_wakeup
+
+usb_windows_wakeup:
+	arg TIMER_WAKEUP,queue
+	call timer_check
+	nrtn blank
+usb_wakeup:
+	hfetch 1,core_usb_config
+	rtnbit0 7	//endpoint wakeup enable
+	jam 0xfc,core_usb_config
+	nop 30000
+	jam 0x3c,core_usb_config
+	rtn
+
+
+
+
+
+
+hci_rx_h4:
+	bpatch patch1f_5,mem_patch1f
+	fetch 1,mem_hci_cmd
+	nrtn blank
+hci_rx_h4_1:
+	call hci_h4_parse_packet
+	ncall h4_rx_discard_packet,user
+	rtn
+	
+hci_h4_parse_packet:
+	bpatch patch1f_6,mem_patch1f
+	copy contru,rega
+	arg 4,temp
+	ifetch 1,contru //type
+	beq HCI_H4_TYPE_CMD,hci_h4_parse_packet_wait_len
+	increase 1,temp //acl packet has 2 bytes for length
+	beq HCI_H4_TYPE_ACL,hci_h4_parse_packet_wait_len
+	copy contru,pdata
+	hstore 2,core_uart_rrptr
+	rtn
+hci_h4_parse_packet_wait_len:
+	hfetch 2,core_uart_rxitems
+	isub temp,null
+	nbranch hci_h4_parse_packet_wait_len,positive // while(rxitems >= 4 or 5);
+	//Make sure length has been recieved.
+	disable user
+	copy rega,contru
+	call h4_get_rx_payload_len
+	iadd temp,temp
+hci_h4_parse_packet_wait:
+	hfetch 2,core_uart_rxitems
+	isub temp,null
+	nbranch hci_h4_parse_packet_wait,positive//wait for rcv a complete packet
+	copy rega,contru
+	ifetch 1,contru //HCI packet type
+	beq  HCI_H4_TYPE_CMD,process_hci_cmd
+	branch assert
+	
+h4_rx_discard_packet:
+	bpatch patch1f_7,mem_patch1f
+	hfetch 2,core_uart_rrptr
+	iforce contru
+	call h4_get_rx_payload_len
+	iadd contru,contru
+	deposit contru
+	hstore 2,core_uart_rrptr
+	rtn
+
+
+//contru = pointer to packet start
+//return len via pdata
+h4_get_rx_payload_len:
+	ifetch 1,contru
+	increase 2,contru
+	beq HCI_H4_TYPE_ACL,h4_get_rx_payload_len_acl
+	ifetch 1,contru
+	rtn
+h4_get_rx_payload_len_acl:
+	ifetch 2,contru
+	rtn
+
+h4_get_tx_ptr:
+	hfetch 2,core_uart_twptr
+	increase -5,contwu
+	iadd contwu,contwu
+	rtn
+
+h4_send_packet_event:
+	arg HCI_H4_TYPE_EVENT,temp //type
+	branch h4_send_packet
+h4_send_packet_acl: //upgoing ACL
+	arg HCI_H4_TYPE_ACL,temp //type
+h4_send_packet:
+	bpatchx patch20_0,mem_patch20
+	increase 1,loopcnt
+	hfetch 2,core_uart_twptr
+	copy pdata,contwu
+	copy loopcnt,pdata //length
+	istoret 1,contwu //packet type in temp
+	increase -1,pdata
+	iadd contwu,contwu
+	copy contwu,pdata
+	store 2,mem_hci_acl_tx_trigger_wptr
+	copy temp,pdata
+	rtneq HCI_H4_TYPE_ACL //not send acl packet immediately
+	fetch 2,mem_hci_acl_tx_trigger_wptr
+	hstore 2,core_uart_twptr
+	branch h4_send_acl_trigger_clear
+	
+	
+h4_send_acl_trigger_clear:
+	setarg 0
+	store 2,mem_hci_acl_tx_trigger_wptr
+	rtn
+
+	
+/*********************************/
+/**********   HCI  *****************/
+/*********************************/
+
+hci_init:
+	rtn wake
+	setarg hci_idle_dispatch
+	store 2,mem_cb_idle_process
+
+	setarg uart_baud_115200
+	store uart_baud_len,mem_baud
+hci_lpm_init:
+	setarg mem_h5rx_buf
+	hstore 2,core_uart_rsaddr
+	setarg mem_h5rx_buf_end
+	hstore 2,core_uart_readdr
+	setarg mem_h5tx_buf
+	hstore 2,core_uart_tsaddr
+	call hci_sel_init
+hci_reinit:
+	jam 0x0,core_uart_ctrl
+ 	setarg mem_h5tx_buf
+	hstore 2,core_uart_twptr
+	hstore 2,core_uart_trptrp
+	setarg mem_h5rx_buf
+	hstore 2,core_uart_rrptr
+	store 2,mem_h5rx_rptr
+hci_init_common:
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_UART,pdata
+	hstore 2,core_clkoff
+	call uart_set_baud_by_mem
+	jam uartclk_dpll,core_uart_clksel
+	jam uart_ctrl_h4,core_uart_ctrl
+	rtn
+
+hci_sel_init:
+	setarg mem_h5tx_buf_end
+	hstore 2,core_uart_teaddr
+	hfetch 1,core_gpio_sel1
+	or_into 0x07,pdata
+	hstore 1,core_gpio_sel1
+	rtn
+	
+	
+hci_rx_packet:
+	bpatchx patch20_1,mem_patch20
+	hfetch 1,core_uart_status
+	iforce regb
+	bbit0 uart_status_rx_fifo_empty,hci_rx_packet_cont
+	hfetch 2,core_uart_rxitems
+	iforce regc
+	arg 0x44f,temp
+	isub temp,null
+	nrtn zero
+hci_rx_packet_cont:
+	hfetch 2,core_uart_rrptr
+	iforce contru
+	branch hci_rx_h4
+	
+uart_send_byte:
+	hfetcht 1,core_uart_status
+	isolate1 6,temp
+	branch uart_send_byte,true
+	hstore 1,core_uart_txd
+	rtn
+	
+process_hci_cmd:
+	bpatchx patch20_2,mem_patch20
+	fetch 1,mem_hci_cmd
+	branch process_hci_cmd_cont,blank
+	enable user					/* last command still there */
+	rtn
+process_hci_cmd_cont:
+	ifetch 2,contru
+	iforce alarm				/* alarm is used for sending */
+	iforce queue				/* queue is OCF */
+	ifetch 1,contru		/* skip hci length */
+	iforce temp			/* temp has the length */
+	rshift2 alarm,pdata
+	rshift8 pdata,pdata
+	beq HCI_OGF_VENDOR_SPECIFIC,phci_grp_vendor_specific
+	rtn
+
+
+phci_grp_vendor_specific:
+	bpatchx patch20_3,mem_patch20
+	deposit queue
+	beq HCI_VENDOR_CMD_RESET,hci_normal_reply
+	beq HCI_VENDOR_CMD_CHIPID,phci_grp_vendor_chipid
+	beq HCI_VENDOR_CMD_BAUD,phci_grp_vendor_baud
+	beq HCI_VENDOR_CMD_PATCH,phci_grp_vendor_patch
+	beq HCI_VENDOR_CMD_PATCH_DONE,phci_grp_vendor_done
+	beq HCI_VENDOR_CMD_ECHO,hci_normal_reply
+	beq HCI_VENDOR_CMD_BDADDR,phci_grp_vendor_bdaddr
+	beq HCI_VENDOR_CMD_ENTER_LPM,phci_grp_vendor_enter_lpm
+	
+	beq HCI_VENDOR_CMD_MEM,phci_grp_vendor_mem
+	beq HCI_VENDOR_CMD_EEP,phci_grp_vendor_eep
+	beq HCI_VENDOR_CMD_PATCH_SEC_INIT,phci_grp_vendor_patch_sec_init
+	beq HCI_VENDOR_CMD_PATCH_SEC,phci_grp_vendor_patch_sec
+	branch hci_normal_reply
+
+phci_grp_vendor_enter_lpm:
+	call hci_normal_reply
+	call wait_uarttx
+	call gpio_pu_uart_tx
+hci_enter_lpm:
+	call app_put_lpm_wake_lock
+	call app_l2cap_flow_control_enable
+	branch gpio_rx_config_input_with_pu
+
+hci_exit_lpm:
+	jam HCI_RX_READY,mem_hci_lt_rx_state
+	call app_get_lpm_wake_lock
+	call hci_lpm_init
+	branch app_l2cap_flow_control_disable
+	
+phci_grp_vendor_chipid:
+	call hci_get_cmd_complete_ptr
+	hfetch 2,core_chipid
+	istore 2,contwu
+	force 6,loopcnt
+	branch hci_command_complete
+	
+phci_grp_vendor_baud:
+	ifetch 2,contru
+	store 2,mem_baud
+	hstore 2,core_uart_baud
+	rtn
+
+
+phci_grp_vendor_patch_common:
+	//jam 0x80,core_ucode_ctrl
+	ifetch 1,contru
+	copy pdata,temp //check sum via temp
+	hstore 1,core_ucode_low
+	ifetch 1,contru
+	iadd temp,temp
+	set1 7,pdata
+	hstore 1,core_ucode_ctrl
+	ifetch 1,contru
+	iadd temp,temp
+	copy pdata,loopcnt
+	rtn
+	
+phci_grp_vendor_patch:
+	bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad
+	call phci_grp_vendor_patch_common
+phci_grp_vendor_patch_loop:
+	ifetch 1,contru
+	hstore 1,core_ucode_data
+	iadd temp,temp
+	loop phci_grp_vendor_patch_loop
+phci_grp_vendor_patch_check_sum:	
+	and temp,0xff,temp
+	ifetch 1,contru
+	isub temp,null
+	nbranch phci_grp_vendor_patch_bad,zero
+	branch hci_normal_reply
+
+	
+phci_grp_vendor_patch_sec:
+	bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad
+	call phci_grp_vendor_patch_common
+	store 8,mem_pdatatemp
+phci_grp_vendor_patch_sec_loop:
+	call do_aes_cbc	
+	arg 16,loopcnt
+	arg mem_temp_block0,contw
+	call load_uart_sum_loop
+	storet 8,mem_temp
+	arg mem_temp_block2,contw
+	call store_aes_result
+	arg mem_temp_block2,rega
+	arg mem_temp_block0,regb
+	arg mem_temp_block3,contw
+	call xor16	
+	arg 16,loopcnt
+	arg mem_temp_block3,contr
+	call load_ucode_only_loop
+	fetcht 8,mem_temp
+	fetch 8,mem_pdatatemp
+	increase -16,pdata
+	store 8,mem_pdatatemp
+	nbranch phci_grp_vendor_patch_sec_loop,blank
+	branch phci_grp_vendor_patch_check_sum	
+	
+load_ucode_only_loop:
+	ifetch 1,contr
+	hstore 1,core_ucode_data
+	loop load_ucode_only_loop
+	rtn
+
+load_uart_sum_loop:
+	ifetch 1,contru
+	istore 1,contw
+	iadd temp,temp
+	loop load_uart_sum_loop
+	rtn
+
+phci_grp_vendor_patch_sec_init:
+	bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad
+	arg 0,temp
+	arg 16,loopcnt
+	arg mem_temp_block0,contw
+	call load_uart_sum_loop
+	hfetch 1,core_gpio_key2
+	and_into 0xfd,pdata   // disable aes for iv
+	hstore 1,core_gpio_key2
+	arg mem_temp_block0,contr
+	arg 16,loopcnt
+	call aes_load_data
+	call aes_init
+	call aes_clear_data
+	branch phci_grp_vendor_patch_check_sum
+
+
+phci_grp_vendor_done:
+	arg 0x20,loopcnt    //patch switch length
+	arg mem_patch00,contw
+	arg 0,temp //checksum
+phci_grp_vendor_done_loop:
+	ifetch 1,contru
+	istore 1,contw
+	iadd temp,temp
+	loop phci_grp_vendor_done_loop
+	and temp,0xff,temp
+	ifetch 1,contru
+	isub temp,null
+	nbranch phci_grp_vendor_patch_bad,zero
+	jam 0,core_ucode_ctrl
+	call hci_normal_reply
+	call h4_rx_discard_packet
+	call clear_key_buf
+	call wait_uarttx
+	branch soft_reset
+
+phci_grp_vendor_patch_bad:
+	jam 0,core_ucode_ctrl
+	branch start
+	
+phci_grp_vendor_bdaddr:
+	ifetch 6,contru
+	store 6,mem_lap
+	branch hci_normal_reply
+
+
+phci_grp_vendor_mem:
+	ifetch 1,contru
+	store 1,mem_hci_curr_len
+	copy pdata,loopcnt
+	ifetch 2,contru
+	store 2,mem_hci_curr_target
+	copy pdata,contw
+	call uart_copy_rx_bytes
+	branch hci_normal_reply
+
+
+phci_grp_vendor_eep:
+	ifetch 1,contru
+	store 1,mem_hci_curr_len
+	copy pdata,loopcnt
+	ifetch 2,contru
+	store 2,mem_hci_curr_target
+	arg mem_l2cap_rxbuff1,contw
+	call uart_copy_rx_bytes
+	fetcht 1,mem_hci_curr_len
+	arg mem_l2cap_rxbuff1,rega
+	fetch 2,mem_hci_curr_target
+	branch iicd_write_ota_data
+	
+	
+
+	
+hci_normal_reply:
+	force 4,loopcnt
+hci_command_complete:	/* loopcnt is hci length */
+	call hci_get_payload_ptr
+	force 0x1,pdata
+	istore 1,contwu
+	deposit alarm
+	istore 3,contwu
+	force HCI_EVENT_COMMAND_COMPLETE,queue
+hci_send_event:		/* queue:event code, loopcnt: length */
+	bpatchx patch20_4,mem_patch20
+	call hci_get_packet_ptr
+	deposit queue
+	istore 1,contwu
+	deposit loopcnt
+	istore 1,contwu
+hci_send_event_raw:
+	force 5,queue
+	increase 2,loopcnt
+hci_send_packet:
+	branch h4_send_packet_event
+
+hci_send_commu_ready_event:
+	force HCI_EVENT_VENDOR_SPECIFIC,queue
+	call hci_get_payload_ptr
+	setarg HCI_VENDOR_EVENT_COMMU_READY
+	istore 1,contwu
+	force 1,loopcnt
+	branch hci_send_event
+
+hci_get_cmd_complete_ptr:
+	force 12,contwu
+	branch hci_get_tx_ptr
+
+hci_get_payload_ptr:
+	force 8,contwu
+	branch hci_get_tx_ptr
+
+hci_get_packet_ptr:
+	force 6,contwu
+hci_get_tx_ptr:
+	branch h4_get_tx_ptr
+
+	
+
+calc_tx_crc16:
+	pulse crc16
+	enable enable_crc
+crcloop:
+	ifetch 1,contwu
+	inject bucket,8
+	loop crcloop
+	enable enable_parity
+	inject bucket,16
+	disable enable_parity
+	disable enable_crc
+	disable crc16
+	byteswap pdata,pdata
+	rtn
+
+
+
+cmd_exit:
+	jam 0,mem_hci_cmd
+	rtn
+cmd_check_plap:
+	fetch 6,mem_hci_plap
+	fetcht 6,mem_plap
+	isub temp,null
+	rtn
+
+	
+	
+//enable ssp master sm
+cmd_pair:
+	fetch 1,mem_op
+	bbit1 op_inrand_req,cmd_pair_passive
+	call tid_initiate
+	jam LMP_IN_RAND,mem_lmo_opcode2
+	branch cmd_exit
+cmd_pair_passive:
+	set0 op_inrand_req,pdata
+	store 1,mem_op
+	call lmp_accept_inrand
+	setarg 0
+	setflag master,smap_lmptid,pdata		
+	store 1,mem_lmo_tid2
+	branch cmd_exit
+	rtn
+cmd_in_sniff:
+	jam LMP_SNIFF_REQ,mem_lmo_opcode2
+	arg mem_sniff_payload,contw
+	setarg 0
+	isolate1 27,clke_bt
+	setflag true,1,pdata		/* use init 2 if bit27 of clke is 1 */
+	istore 1,contw	
+	setarg 0	/* dsniff */
+	istore 2,contw
+	fetch 2,mem_sniff_param_interval	/* tsniff */
+	istore 2,contw
+	fetch 1,mem_sniff_param_attempt	/* attempt */
+	istore 2,contw
+	fetch 1,mem_sniff_param_timeout	/* timeout */
+	istore 2,contw
+	branch cmd_exit
+	
+cmd_exit_sniff:
+	jam LMP_UNSNIFF_REQ,mem_lmo_opcode2
+	branch cmd_exit
+
+hci_idle_dispatch:
+	call gpio_check_uart_state
+	rtn true
+	arg UART_WAKEUP_RX,temp
+	call gpio_get_bit
+	nbranch uart_wake_up,true
+	jam HCI_RX_WAKE,mem_hci_lt_rx_state
+	rtn
+uart_wake_up:
+	fetch 1,mem_hci_lt_rx_state
+	rtnne HCI_RX_WAKE
+	call hci_exit_lpm
+	branch hci_send_commu_ready_event
+	
+	
+/**
+* the following API is to send the HID data
+* 
+*/
+
+/**
+* the following API is to process the hid  rx data
+* 
+*/
+//handle the hid data
+
+hid_rx_process:
+	bpatchx patch20_5,mem_patch20
+	fetch 2,mem_l2cap_payload_ptr
+	copy pdata,contr
+	ifetch 1,contr
+	and pdata,0x0f,temp
+	rshift4 pdata,pdata //hidtype
+	beq hid_type_set_idle,hid_rx_process_handshake
+	beq hid_type_set_protocol,hid_rx_process_handshake
+	beq hid_type_data,hid_rx_process_data
+	beq HID_TYPE_SET_REPORT,hid_rx_process_set_report
+	beq HID_TYPE_CONTROL,hid_rx_process_hid_control
+	rtn
+
+hid_rx_process_hid_control:
+	copy temp,pdata
+	beq HID_CONTROL_P_VIRTUALCABLEUNPLUG,hid_rx_process_virtual_cable_unplug
+	beq HID_CONTROL_P_SUSPEND,hid_rx_process_suspend
+	rtn
+	
+hid_rx_process_virtual_cable_unplug:
+	jam BT_EVT_VIRTUAL_CABLE_UNPLUG,mem_fifo_temp
+	call ui_ipc_send_event
+	fetch 1,mem_device_option
+	rtnbit0 dvc_op_mouse
+	copy temp,pdata
+	beq HID_CONTROL_P_VIRTUALCABLEUNPLUG,mouse_irtual_cable_unplug
+	rtn
+hid_rx_process_suspend:
+	rtn
+
+hid_rx_process_set_report:
+	call hid_rx_process_data
+	arg 0x01,rega
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_ctrl_remote_cid
+	istore 2,contw
+	setarg 0x00
+	istore 1,contw
+	rtn
+
+hid_rx_process_handshake:
+	arg 1,regA//payload length
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_ctrl_remote_cid
+	istore 2,contw
+	setarg 0
+	istore 1,contw
+	jam 1,mem_ui_data_txbuff_length
+	fetch 1,mem_hid_control_state
+	set1 l2cap_channel_hid_handshake_done
+	store 1,mem_hid_control_state
+	jam BT_EVT_HID_HANDSHAKE,mem_fifo_temp
+	branch ui_ipc_send_event
+
+hid_rx_process_data:
+	ifetch 1,contr
+	beq HID_REPORT_ID_KB,hid_rx_process_data_hid_kb
+	rtn
+
+hid_rx_process_data_hid_kb:
+	rtn
+
+	
+hid_malloc_tx_buff:
+	call l2cap_malloc
+	copy rega,temp
+	storet 1,mem_ui_data_txbuff_length
+	copy pdata,contw
+	copy rega,pdata
+	istore 2,contw //hid payload length
+	rtn
+
+
+
+
+	
+	
+
+
+
+	
+    
+	
+
+/************************************/
+/*initialize L2CAP related variables*/
+/************************************/
+l2cap_init:
+	branch l2cap_init_wake,wake
+l2cap_init_work:
+	setarg mem_l2cap_xmem_end
+	arg mem_l2cap_xmem_start,contw
+	isub contw,loopcnt
+	call clear_mem
+l2cap_init_wake:	
+	bpatchx patch20_6,mem_patch20
+	setarg mem_sdp_mem_end
+	arg mem_sdp_mem_start,contw
+	isub contw,loopcnt
+	call clear_mem
+	setarg mem_l2cap_mem_end
+	arg mem_l2cap_mem_start,contw
+	isub contw,loopcnt
+	call clear_mem
+	branch l2cap_lpm_load_txbuf
+	
+process_rx_l2cap_pkt:
+	bpatchx patch20_7,mem_patch20
+	copy contr,temp
+	//call l2cap_malloc_is_fifo_full
+	//nrtn blank
+	copy temp,contr
+	ifetch 2,contr
+	store 2,mem_l2cap_rx_pkt_length
+	ifetch 2,contr
+	store 2,mem_l2cap_rx_cid
+	deposit contr
+	store 2,mem_l2cap_payload_ptr
+	fetch 1,memui_reconnect_mode
+	beq NO_RECONNECTION,l2cap_rx_multiplexing
+	branch ml2cap_rx_multiplexing
+
+l2cap_rx_multiplexing:
+	fetch 2, mem_l2cap_rx_pkt_length
+	branch l2cap_rx_reset_state,blank
+	bpatchx patch21_0,mem_patch21
+	fetch 1,mem_l2cap_rx_cid
+	beq L2CAP_signal_channel,l2cap_call_proc_signal
+l2cap_rx_multiplexing0:
+	beq L2CAP_SDP_channel,l2cap_call_proc_sdp
+	beq L2CAP_RFCOMM_channel,l2cap_call_proc_rfcomm
+	beq L2CAP_HID_Control_channel,l2cap_call_proc_hid
+	beq L2CAP_HID_Interrupt_channel,l2cap_call_proc_hid
+	branch l2cap_rx_reset_state
+
+l2cap_check_map:
+//	call l2cap_malloc_is_fifo_full
+//	nrtn blank
+	bpatchx patch21_1,mem_patch21
+	call l2cap_malloc_get_full_map
+	fetch 1,mem_used_map
+	beq 0,set_pdata_0
+	beq 1,set_pdata_0
+	beq 2,set_pdata_0
+	beq 3,set_pdata_0
+	beq 0x81,set_pdata_0
+	beq 0xc0,set_pdata_0
+	beq 0x80,set_pdata_0
+	beq 0x40,set_pdata_0
+	rtn
+
+set_pdata_0:
+	setarg 0
+	rtn
+
+
+l2cap_call_proc_signal:
+	call l2cap_check_map
+	nrtn blank
+l2cap_call_proc_signal0:
+	call l2cap_malloc_signal_channel
+	call l2cap_process_signal_pkt
+	fetcht 2,mem_l2cap_signal_tx_length
+	branch l2cap_call_proc_no_reply,blank
+	call l2cap_get_signal_tx_buff
+	fetch 2,mem_l2cap_signal_tx_length
+	istore 2,contw
+	force L2CAP_signal_channel,pdata
+	istore 2,contw
+	branch l2cap_rx_reset_state
+	
+l2cap_call_proc_sigal_pending:
+	fetch 1,mem_l2cap_pending_item
+	rtn blank
+	copy pdata,rega
+	bpatchx patch21_2,mem_patch21
+	fetch 4,mem_l2cap_sdpres_delay_time
+	arg 0x100,temp
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	jam 0,mem_l2cap_pending_item
+	copy rega,pdata
+	beq L2CAP_SDP_channel,l2cap_sdp_conn_succ
+	branch assert
+l2cap_sdp_conn_succ:
+	arg 0,debug
+	call l2cap_malloc_signal_channel
+	call restore_l2cap_req_param
+	call l2cap_get_signal_tx_payload
+	call save_cont_pointers
+	call send_connection_sdp_res
+	call l2cap_get_signal_tx_buff
+	//fetch 2,mem_l2cap_signal_tx_length
+	setarg 0x000c
+	istore 2,contw
+	force L2CAP_signal_channel,pdata
+	istore 2,contw
+	branch l2cap_rx_reset_state
+
+
+
+l2cap_reset_sdp_map:
+	bpatchx patch21_3,mem_patch21
+	fetch 2,mem_sdp_tx_pkt_length
+	increase 4,pdata
+	rshift4 pdata,pdata
+	rshift3 pdata,pdata
+	add pdata,1,temp ///temp: how many128
+	arg mem_tx_fifo3,contr
+	ifetch 3,contr
+	rtn blank
+	store 3,mem_tx_fifo_map_temp
+	fetch 1,mem_tx_fifo_map_temp
+	copy pdata,rega
+	call check_l2cap_map
+	copy regb,pdata
+	store 1,mem_tx_fifo3
+	rtn
+
+check_l2cap_map:
+	arg 0,queue
+	arg 0,regb
+
+check_l2cap_map_loop:
+	sub queue,7,null
+	nrtn positive
+	qisolate1 rega
+	branch check_l2cap_map_used,true
+	branch check_l2cap_map_used2
+
+check_l2cap_map_used:
+	copy temp,pdata
+	branch check_l2cap_map_used2,blank
+	qset1 regb
+	increase -1,temp
+
+check_l2cap_map_used2:
+	increase 1,queue
+	branch check_l2cap_map_loop
+
+l2cap_call_proc_sdp:
+	call l2cap_malloc_is_fifo_empty
+	nrtn blank// not process this packet until fifo empty
+	call l2cap_check_map
+	nrtn blank
+	call l2cap_malloc_sdp_channel
+	call sdp_process
+	call l2cap_reset_sdp_map
+	branch l2cap_call_proc_sdp_common
+
+	
+ml2cap_call_proc_sdp:
+	call l2cap_malloc_is_fifo_empty
+	nrtn blank// not process this packet until fifo empty
+	call l2cap_malloc_sdp_channel
+	call sdp_process
+l2cap_call_proc_sdp_common:
+	call l2cap_get_sdp_tx_buff
+	fetch 2,mem_sdp_tx_pkt_length
+	branch l2cap_call_proc_no_reply,blank
+	istore 2,contw
+	fetch 2,mem_sdp_remote_cid
+	istore 2,contw
+	branch l2cap_rx_reset_state
+
+l2cap_call_proc_hid:
+	call hid_rx_process
+	branch l2cap_rx_reset_state
+
+l2cap_call_proc_rfcomm:
+	bpatchx patch21_4,mem_patch21
+	jam RFCOMM_MALLOC_SUCCEED,mem_rfcomm_malloc_fail_flag
+	call rfcomm_rx_process
+	fetch 1,mem_rfcomm_malloc_fail_flag
+	rtneq RFCOMM_MALLOC_FAIL
+	branch l2cap_rx_reset_state
+l2cap_call_proc_no_reply:
+	call l2cap_malloc_discard
+	//fall through
+l2cap_rx_reset_state:
+	setarg 0
+	store 2,mem_l2cap_rx_pkt_length
+	store 2,mem_l2cap_rx_cid
+	jam L2CAP_RX_DONE,mem_l2cap_rx_done
+	rtn
+/* To process one L2CAP signalling pkt consisting of 1 or more signalling commands.	*/
+l2cap_process_signal_pkt:
+	bpatchx patch21_5,mem_patch21
+	call l2cap_get_signal_tx_payload
+	force 0,regB
+	fetch 2,mem_l2cap_rx_pkt_length
+	copy pdata,regC
+	fetch 2,mem_l2cap_payload_ptr
+	iforce contr
+l2cap_process_signal_pkt_loop:
+	call l2cap_process_one_signal
+	deposit regC
+	increase -4,regC
+	increase -4,pdata
+	nbranch l2cap_process_signal_pkt_loop,blank
+	copy regB,pdata
+	store 2,mem_l2cap_signal_tx_length
+	rtn
+
+l2cap_process_one_signal:
+	bpatchx patch21_6,mem_patch21
+	ifetch 1,contr
+	beq signal_cmd_reject,l2cap_proc_signal_cmd_reject
+	beq signal_connect_req,l2cap_proc_signal_connect_req
+	beq signal_connect_rsp,l2cap_proc_signal_connect_rsp
+	beq signal_config_req,l2cap_proc_signal_config_req
+	beq signal_config_rsp,l2cap_proc_signal_config_rsp
+	beq signal_disconnect_req,l2cap_proc_signal_disconnect_req
+	beq signal_disconnect_rsp,l2cap_proc_signal_disconnect_rsp
+	beq signal_echo_req,l2cap_proc_signal_echo_req
+	beq signal_echo_rsp,l2cap_proc_signal_echo_rsp
+	beq signal_info_req,l2cap_proc_signal_info_req
+	beq signal_info_rsp,l2cap_proc_signal_info_rsp
+	call l2cap_reject_command
+l2cap_process_one_signal_rtn:
+	rtn
+
+l2cap_proc_signal_info_req:
+	ifetch 1,contr //IDs
+	copy pdata,queue
+	ifetch 2,contr //length
+	copy pdata,rega
+	copy regc,pdata
+	isub rega,regc
+	setarg signal_info_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1, contw
+	ifetch 2,contr 
+l2cap_proc_signal_info_req_reply:
+	beq L2CAP_SIG_EXT_FEATRUE,l2cap_proc_signal_info_req_ext
+	beq L2CAP_SIG_FIX_FEATRUE,l2cap_proc_signal_info_req_fix
+	rtn
+l2cap_proc_signal_info_req_ext:
+	setarg 0x020008
+	istore 6, contw
+	setarg 0x0280
+	istore 4, contw
+	force 12,pdata
+	branch l2cap_proc_signal_info_req_common
+l2cap_proc_signal_info_req_fix:
+	setarg 0x3000c
+	istore 6, contw
+	setarg 0x0006
+	istore 8, contw
+	force 16,pdata
+l2cap_proc_signal_info_req_common:
+	iadd regb,regb
+	branch l2cap_process_one_signal_rtn
+	
+ml2cap_proc_signal_info_req:
+	ifetch 1,contr //IDs
+	copy pdata,queue
+	ifetch 2,contr //length
+	copy pdata,rega
+	ifetch 2,contr
+	store 2,mem_temp
+	copy regc,pdata
+	isub rega,regc 
+	call l2cap_get_signal_tx_payload
+	setarg signal_info_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw 
+	fetch 2,mem_temp
+	branch l2cap_proc_signal_info_req_reply
+
+
+/*  Respond to the command reject signal sent from the remote BD.   */
+l2cap_proc_signal_cmd_reject:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	iadd contr,contr
+	copy regC,pdata
+	isub regA,regC
+l2cap_proc_signal_cmd_reject_rtn:
+	branch l2cap_process_one_signal_rtn
+/* Respond to an L2CAP connection request from remote BD. (generate a connection_rsp)	*/
+l2cap_proc_signal_connect_req:
+	call save_cont_pointers
+	//fetch 6,mem_inquiry_bd_addr
+  	//store 6,mem_master_paged_bd_addr
+  	call load_cont_pointers
+	arg 0,debug
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	ifetch 2,contr
+	copy pdata,temp //PSM
+	ifetch 2,contr
+	copy pdata,timeup
+	bpatchx patch21_7,mem_patch21
+	copy temp,pdata
+	beq PSM_SDP,l2cap_proc_signal_connect_req_sdp
+	beq PSM_RFCOMM,l2cap_proc_signal_connect_req_rfcomm
+	beq PSM_HID_control,l2cap_proc_signal_connect_req_hid_ctrl
+	beq PSM_HID_interrupt,l2cap_proc_signal_connect_req_hid_int
+	call l2cap_reject_command
+	branch l2cap_proc_signal_connect_req_rtn
+
+l2cap_proc_signal_connect_req_sdp:
+	call save_cont_pointers
+	arg L2CAP_SDP_channel,temp
+	fetch 2,mem_sdp_remote_cid
+	nbranch already_connected,blank
+	copy timeup,pdata
+	store 2,mem_sdp_remote_cid
+	copy clkn_bt,pdata
+	store 4,mem_l2cap_sdpres_delay_time
+	call store_l2cap_req_param
+	branch  send_connection_pending
+
+store_l2cap_req_param:
+	storet 2,mem_psm
+	deposit timeup
+	store 2,mem_scid
+	deposit rega
+	store 2,mem_cmd_length
+	deposit regb
+	store 2,mem_tt2
+	deposit regc
+	store 2,mem_tt3
+	deposit queue
+	store 2,mem_id
+	rtn
+
+restore_l2cap_req_param:
+	fetcht 2,mem_psm
+	fetch 2,mem_scid
+	copy pdata,timeup
+	fetch 2,mem_cmd_length
+	copy pdata,rega
+	fetch 2,mem_tt2
+	copy pdata,regb
+	fetch 2,mem_tt3
+	copy pdata,regc
+	fetch 2,mem_id
+	copy pdata,queue
+	rtn
+
+l2cap_proc_signal_connect_req_rfcomm:
+	call save_cont_pointers
+	setarg L2CAP_RFCOMM_channel
+	arg L2CAP_RFCOMM_channel,temp
+	fetch 2,mem_RFCOMM_remote_CID
+	nbranch already_connected,blank
+	copy timeup,pdata
+	store 2,mem_RFCOMM_remote_CID
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_rfcomm_state
+	branch send_connection_res
+l2cap_proc_signal_connect_req_hid_ctrl:
+	call save_cont_pointers
+	arg L2CAP_HID_Control_channel,temp
+	fetch 2,mem_hid_ctrl_remote_cid
+	nbranch already_connected,blank
+	copy timeup,pdata
+	store 2,mem_hid_ctrl_remote_cid
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_hid_control_state
+	branch send_connection_res
+l2cap_proc_signal_connect_req_hid_int:
+	call save_cont_pointers
+	deposit clke
+	arg L2CAP_HID_Interrupt_channel,temp
+	fetch 2,mem_hid_int_remote_cid
+	nbranch already_connected,blank
+	copy timeup,pdata
+	store 2,mem_hid_int_remote_cid
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_hid_interrupt_state
+	branch send_connection_res
+
+send_connection_pending:
+	setarg L2CAP_connect_pending
+	store 2,memL2CAP_T1
+	jam L2CAP_SDP_channel,mem_l2cap_pending_item
+	branch send_connection_res0
+send_connection_sdp_res:
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_sdp_state
+send_connection_res:
+	setarg L2CAP_connect_successful
+	store 2,memL2CAP_T1
+send_connection_res0:
+	bpatchx patch22_0,mem_patch22
+	call load_cont_pointers
+	setarg signal_connect_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 0x0008
+	istore 2,contw
+	copy temp,pdata
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	fetch 2,memL2CAP_T1
+	beq L2CAP_connect_pending,connect_pending
+	isolate0 0,debug
+	branch connect_suc,true
+	setarg L2CAP_connect_refused_no_resources
+connect_suc:
+	istore 2,contw
+	force 0x0000,pdata
+	istore 2,contw
+	setarg 12
+	branch connect_req_update_byte_counts
+connect_pending:
+	istore 2,contw
+	force 0x0002,pdata
+	istore 2,contw
+	setarg 12
+	branch connect_req_update_byte_counts
+	
+already_connected:
+	set1 0,debug
+	branch send_connection_res
+connect_req_update_byte_counts:
+	iadd regB,regB
+	copy regC,pdata
+	isub regA,regC
+	branch l2cap_proc_signal_connect_req_rtn
+l2cap_proc_signal_connect_req_rtn:
+	branch l2cap_process_one_signal_rtn
+
+l2cap_proc_signal_connect_rsp:
+	ifetch 1,contr //identifier
+	copy pdata,queue
+	ifetch 2,contr //length
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr //remote cid
+	copy pdata,timeup
+	ifetch 2,contr //local cid
+	copy pdata,temp
+	bpatchx patch22_1,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch l2cap_proc_signal_connect_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch l2cap_proc_signal_connect_rsp_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch l2cap_proc_signal_connect_rsp_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch l2cap_proc_signal_connect_rsp_hid_int,zero
+	rtn
+
+l2cap_proc_signal_connect_rsp_sdp:
+	copy timeup,pdata
+	store 2,mem_sdp_remote_cid
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_sdp_state
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_connect_rsp_rfcomm:
+	copy timeup,pdata
+	store 2,mem_rfcomm_remote_CID
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_rfcomm_state
+	rtn
+l2cap_proc_signal_connect_rsp_hid_int:
+	copy timeup,pdata
+	store 2,mem_hid_ctrl_remote_cid
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_hid_interrupt_state
+	rtn
+l2cap_proc_signal_connect_rsp_hid_ctrl:
+	copy timeup,pdata
+	store 2,mem_hid_int_remote_cid
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_hid_control_state
+	rtn
+
+l2cap_proc_signal_config_req:
+	ifetch 1,contr//identifier
+	copy pdata,queue
+	ifetch 2,contr//length
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr//dest cid
+	copy pdata,temp
+	copy temp,regA
+	bpatchx patch22_2,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch l2cap_proc_signal_config_req_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch l2cap_proc_signal_config_req_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch l2cap_proc_signal_config_req_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch l2cap_proc_signal_config_req_hid_int,zero
+	branch l2cap_reject_command
+	//branch L2CAP_proc_signal_config_req_rtn
+l2cap_proc_signal_config_req_sdp:
+	copy contw, timeup
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	//set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_sdp_state
+	copy timeup,contw
+	arg L2CAP_SDP_channel,timeup
+	fetch 2,mem_sdp_remote_cid
+	copy pdata,temp
+	branch l2cap_send_config_rsp
+l2cap_proc_signal_config_req_hid_ctrl:
+	copy contw, timeup
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	//set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_hid_control_state
+	copy timeup,contw
+	arg L2CAP_HID_Control_channel,timeup
+	fetch 2,mem_hid_ctrl_remote_cid
+	copy pdata,temp
+	branch l2cap_send_config_rsp
+l2cap_proc_signal_config_req_hid_int:
+	copy contw, timeup
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	//set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_hid_interrupt_state
+	copy timeup,contw
+	arg L2CAP_HID_Interrupt_channel,timeup
+	fetch 2,mem_hid_int_remote_cid
+	copy pdata,temp
+	branch l2cap_send_config_rsp
+l2cap_proc_signal_config_req_rfcomm:
+	copy contw, timeup
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	//set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_rfcomm_state
+//	jam UPPERSM_RP_SDP_CONN,mem_upper_sm_remote_page
+	copy timeup,contw
+	arg L2CAP_RFCOMM_channel,timeup
+	fetch 2,mem_RFCOMM_remote_CID
+	copy pdata,temp
+l2cap_send_config_rsp:
+	bpatchx patch22_3,mem_patch22
+	setarg  signal_config_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 0x0006
+	istore 2,contw
+	copy temp,pdata
+	istore 2,contw
+	force 0x00,pdata
+	istore 2,contw
+	force L2CAP_config_success,pdata
+	istore 2,contw
+	force 10,pdata
+	iadd regB,regB
+	//copy temp,pdata
+	storet 2,mem_config_req_dest_CID
+	copy queue,pdata
+	store 1,mem_config_identifier
+	force L2CAP_SDP_channel,pdata
+	icompare 0xff,timeup
+	branch l2cap_send_config_rsp_is_sdp,true
+	increase 1,pdata
+l2cap_send_config_rsp_is_sdp:
+	//store 1,mem_send_config_req
+	rtn
+l2cap_check_channel_state:
+	disable user
+	rtnbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	copy contr,contw
+	increase -1,contw
+	istore 1,contw
+	enable user
+	rtn
+l2cap_send_config_req:
+l2cap_send_config_req_sdp:
+	fetch 1,mem_sdp_state
+	call l2cap_check_channel_state
+	nbranch l2cap_send_config_req_rfcomm,user
+	jam L2CAP_SDP_channel,mem_send_config_req
+	fetch 2,mem_sdp_remote_cid
+	store 2,mem_config_req_dest_CID
+	branch l2cap_generate_config_req
+l2cap_send_config_req_rfcomm:
+	fetch 1,mem_rfcomm_state
+	call l2cap_check_channel_state
+	nbranch l2cap_send_config_req_hid_ctrl,user
+	jam L2CAP_RFCOMM_channel,mem_send_config_req
+	fetch 2,mem_RFCOMM_remote_CID
+	store 2,mem_config_req_dest_CID
+	branch l2cap_generate_config_req
+l2cap_send_config_req_hid_ctrl:
+	fetch 1,mem_hid_control_state
+	call l2cap_check_channel_state
+	nbranch l2cap_send_config_req_hid_int,user
+	jam L2CAP_HID_Control_channel,mem_send_config_req
+	fetch 2,mem_hid_ctrl_remote_cid
+	store 2,mem_config_req_dest_CID
+	branch l2cap_generate_config_req
+l2cap_send_config_req_hid_int:
+	fetch 1,mem_hid_interrupt_state
+	call l2cap_check_channel_state
+	nrtn user//End of sending config req
+	jam L2CAP_HID_Interrupt_channel,mem_send_config_req
+	fetch 2,mem_hid_int_remote_cid
+	store 2,mem_config_req_dest_CID
+	//branch L2CAP_generate_config_req
+
+l2cap_generate_config_req:
+	bpatchx patch22_4,mem_patch22
+	call l2cap_get_req_id
+	call l2cap_malloc_signal_channel
+	force 0,regB
+	call l2cap_get_signal_tx_payload
+	force signal_config_req,pdata
+	istore 1,contw
+	fetch 1,mem_ML2CAP_comm_id
+	istore 1,contw
+	setarg 0x0008
+	istore 2,contw
+	fetch 2,mem_config_req_dest_CID
+	istore 2,contw
+	setarg 0x0000
+	istore 2,contw
+	force 1,pdata
+	istore 1,contw
+	force 2,pdata
+	istore 1,contw
+	fetch 1,mem_send_config_req
+	beq L2CAP_RFCOMM_channel,l2cap_generate_config_req_rfcomm
+	setarg L2CAP_config_MTU_SDP
+	istore 2,contw
+	branch l2cap_generate_config_req_done
+l2cap_generate_config_req_rfcomm:
+	setarg L2CAP_config_MTU_RFCOMM
+	istore 2,contw
+l2cap_generate_config_req_done:
+	arg 0x0c,temp
+	storet 2,mem_l2cap_signal_tx_length
+	call l2cap_get_signal_tx_buff
+	fetch 2,mem_l2cap_signal_tx_length
+	istore 2,contw
+	force L2CAP_signal_channel,pdata
+	istore 2,contw
+	jam 0,mem_send_config_req
+l2cap_proc_signal_config_req_rtn:
+	branch l2cap_process_one_signal_rtn
+
+l2cap_proc_signal_config_rsp:
+	increase 1,contr
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr //source cid
+	copy pdata,regA
+	bpatchx patch22_5,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub rega,null
+	branch l2cap_proc_signal_config_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub rega,null
+	branch l2cap_proc_signal_config_rsp_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub rega,null
+	branch l2cap_proc_signal_config_rsp_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub rega,null
+	branch l2cap_proc_signal_config_rsp_hid_int,zero
+	increase 2,contr
+	ifetch 2,contr
+	iforce null
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_config_rsp_sdp:
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata
+	store 1,mem_sdp_state
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_config_rsp_rfcomm:
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata
+	store 1,mem_rfcomm_state
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_config_rsp_hid_ctrl:
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata
+	store 1,mem_hid_control_state
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_config_rsp_hid_int:
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata
+	store 1,mem_hid_interrupt_state
+	jam BT_EVT_HID_CONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event
+	
+
+
+l2cap_proc_signal_disconnect_req:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr
+	copy pdata,regA
+	ifetch 2,contr
+	copy pdata,timeup
+	copy regA,temp
+	call save_cont_pointers
+	bpatchx patch22_6,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_req_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_req_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_req_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_req_hid_int,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+l2cap_proc_signal_disconnect_req_hid_ctrl:
+	copy timeup,temp
+	fetch 2,mem_hid_ctrl_remote_cid
+	isub temp,null
+	branch l2cap_disconnect_hid_control_now,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+l2cap_proc_signal_disconnect_req_hid_int:
+	copy timeup,temp
+	fetch 2,mem_hid_int_remote_cid
+	isub temp,null
+	branch l2cap_disconnect_hid_interrupt_now,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+
+l2cap_proc_signal_disconnect_req_sdp:
+	copy timeup,temp
+	fetch 2,mem_sdp_remote_cid
+	isub temp,null
+	branch l2cap_disconnect_sdp_now,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+l2cap_disconnect_hid_control_now:
+	call l2cap_reset_hid_ctrl_state
+	branch l2cap_send_disconnect_rsp_pkt
+l2cap_disconnect_hid_interrupt_now:
+	call l2cap_reset_hid_int_state
+	fetch 2, mem_hid_ctrl_remote_cid
+	branch l2cap_send_disconnect_rsp_pkt, blank
+	//set the flag,hid channel close
+	//should we set here?
+	//call HID_mem_lock
+	//fetch 1, mem_hid_cb1
+	//set1 HID_CB_APP_HID_DISCONNECTED,pdata
+	//store 1, mem_hid_cb1
+	//call HID_mem_unlock
+	branch l2cap_send_disconnect_rsp_pkt
+
+l2cap_disconnect_sdp_now:
+	call l2cap_reset_sdp_channel_state
+	fetch 1,mem_upper_sm_ss
+	nbranch l2cap_send_disconnect_rsp_pkt,blank
+	//jam LMP_ENCRYPTION_MODE_REQ,mem_lmo_opcode2
+	//jam UPPERSM_RP_SDP_CONN,mem_upper_sm_remote_page
+	branch l2cap_send_disconnect_rsp_pkt
+l2cap_proc_signal_disconnect_req_rfcomm:
+	copy timeup,temp
+	fetch 2, mem_RFCOMM_remote_CID
+	isub temp,null
+	branch l2cap_disconnect_rfcomm_now,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+l2cap_disconnect_rfcomm_now:
+	call l2cap_reset_rfcomm_channel_state
+	branch l2cap_send_disconnect_rsp_pkt
+l2cap_send_disconnect_rsp_pkt:
+	call load_cont_pointers
+	setarg signal_disconnect_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy regA,pdata
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	force 8,pdata
+	branch l2cap_proc_signal_disconnect_req_rtn
+l2cap_proc_signal_disconnect_req_err_rtn:
+	call load_cont_pointers
+	branch l2cap_proc_signal_disconnect_req_rtn
+l2cap_proc_signal_disconnect_req_rtn:
+	iadd regB,regB
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_disconnect_rsp:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr
+	copy pdata,timeup
+	ifetch 2,contr
+	copy pdata,temp
+	call save_cont_pointers
+	bpatchx patch22_7,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_rsp_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_rsp_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_rsp_hid_int,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_rsp_err_rtn
+l2cap_proc_signal_disconnect_rsp_sdp:
+	copy temp,regA
+	copy timeup,temp
+	fetch 2,mem_sdp_remote_cid
+	isub temp,null
+	call l2cap_reset_sdp_channel_state,zero
+	branch l2cap_proc_signal_disconnect_rsp_rtn
+l2cap_proc_signal_disconnect_rsp_rfcomm:
+	copy temp,regA
+	copy timeup,temp
+	fetch 2,mem_rfcomm_remote_CID
+	isub temp,null
+	call l2cap_reset_rfcomm_channel_state,zero
+	branch l2cap_proc_signal_disconnect_rsp_rtn
+l2cap_proc_signal_disconnect_rsp_hid_ctrl:
+	copy temp,regA
+	copy timeup,temp
+	fetch 2,mem_hid_ctrl_remote_cid
+	isub temp,null
+	call  l2cap_reset_hid_ctrl_state,zero
+	branch l2cap_proc_signal_disconnect_rsp_rtn
+l2cap_proc_signal_disconnect_rsp_hid_int:
+	copy temp,regA
+	copy timeup,temp
+	fetch 2,mem_hid_int_remote_cid
+	isub temp,null
+	call l2cap_reset_hid_int_state,zero
+	branch l2cap_proc_signal_disconnect_rsp_rtn
+l2cap_proc_signal_disconnect_rsp_rtn:
+	call load_cont_pointers
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_disconnect_rsp_err_rtn:
+	branch l2cap_process_one_signal_rtn
+
+/* received an echo request from remote BD.  Will echo the 1st 1 byte back,		*/
+l2cap_proc_signal_echo_req:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	iadd contr,contr
+	setarg 9
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	force 0x0000,pdata
+	istore 2,contw
+	force 4,pdata
+	iadd regB,regB
+	copy regC,pdata
+	isub regA,regC
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_echo_rsp:
+	branch l2cap_process_one_signal_rtn
+
+l2cap_proc_signal_info_rsp:
+	branch l2cap_process_one_signal_rtn
+l2cap_reject_command:
+	force 0,regB
+	call l2cap_get_signal_tx_payload
+	setarg signal_cmd_reject
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 2
+	istore 2,contw
+	setarg cmd_not_understood
+	istore 2,contw
+	increase 6,regB
+	arg 4,regC
+	branch l2cap_process_one_signal_rtn
+
+
+
+l2cap_reset_rfcomm_channel_state:
+	setarg 0
+	store 2,mem_RFCOMM_Tx_pkt_length
+	store 2,mem_RFCOMM_remote_CID
+	jam 0,mem_rfcomm_state
+	rtn
+l2cap_reset_sdp_channel_state:
+	setarg 0
+	store 2,mem_sdp_tx_pkt_length
+	store 2,mem_sdp_remote_cid
+	jam 0,mem_sdp_state
+	rtn
+l2cap_reset_hid_ctrl_state:
+	setarg 0
+	store 2,mem_hid_ctrl_remote_cid
+	jam 0,mem_hid_control_state
+	fetch 1,mem_hid_interrupt_state
+	beq 0,l2cap_reset_hid_disconnected
+	rtn
+
+l2cap_reset_hid_int_state:
+	setarg 0
+	store 2,mem_hid_int_remote_cid
+	jam 0,mem_hid_interrupt_state
+	fetch 1,mem_hid_control_state
+	beq 0,l2cap_reset_hid_disconnected
+	rtn
+	
+l2cap_reset_hid_disconnected:
+	jam BT_EVT_HID_DISCONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event	
+
+l2cap_disconnect_interrupt_req:
+	fetch 1,mem_CONTROL_tasks
+	set0  L2CAP_DISCONNECT_INTERRUPT, pdata
+	store 1,mem_CONTROL_tasks
+	fetch 2, mem_hid_int_remote_cid
+	rtn blank
+	call l2cap_malloc_signal_channel
+	fetch 2, mem_hid_int_remote_cid
+	copy pdata,regA
+	force L2CAP_HID_Interrupt_channel,regB
+	branch l2cap_generate_disconnect_req
+l2cap_disconnect_control_req:
+	fetch 1,mem_CONTROL_tasks
+	set0  L2CAP_DISCONNECT_CONTROL, pdata
+	store 1,mem_CONTROL_tasks
+	fetch 2, mem_hid_ctrl_remote_cid
+	rtn blank
+	call l2cap_malloc_signal_channel
+	fetch 2, mem_hid_ctrl_remote_cid
+	copy pdata,regA
+	force L2CAP_HID_Control_channel,regB
+l2cap_generate_disconnect_req:
+	call l2cap_get_req_id
+	call l2cap_get_signal_tx_payload
+	force signal_disconnect_req,pdata
+	istore 1,contw
+	fetch  1,mem_ML2CAP_comm_id
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy regA,pdata
+	istore 2,contw
+	copy regB,pdata
+	istore 2,contw
+	force 0x08,temp //signal tx length in temp
+	branch ml2cap_send_signal
+
+ml2cap_send_signal_connect_req:
+	bpatchx patch23_0,mem_patch23
+	call l2cap_get_req_id
+	call l2cap_get_signal_tx_payload
+	setarg signal_connect_req
+	istore 1,contw
+	fetch 1,mem_ML2CAP_comm_id
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy temp,pdata	 //PSM
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	arg 8,temp
+	branch ml2cap_send_signal
+ml2cap_send_signal_config_req:
+	bpatchx patch23_1,mem_patch23
+	call l2cap_get_req_id
+	call l2cap_get_signal_tx_payload
+	setarg signal_config_req
+	istore 1,contw
+	fetch 1,mem_ML2CAP_comm_id
+	istore 1,contw
+	setarg 0x0008
+	istore 2,contw
+	/****modigy for nokia*****/
+	copy temp,pdata
+	/*setarg 0x0040*/
+	istore 2,contw
+	setarg 0x0000
+	istore 2,contw
+	setarg 0x01
+	istore 1,contw
+	setarg 0x02
+	istore 1,contw
+	setarg L2CAP_config_MTU_RFCOMM
+	istore 2,contw
+	arg 0xc,temp
+	branch ml2cap_send_signal
+ml2cap_send_signal_disconn_req:
+	bpatchx patch23_2,mem_patch23
+	call l2cap_get_req_id
+	call l2cap_get_signal_tx_payload
+	setarg signal_disconnect_req
+	istore 1,contw
+	fetch 1,mem_ML2CAP_comm_id
+	increase 1,pdata
+	copy contw,regA
+	store 1,mem_ML2CAP_comm_id
+	copy regA,contw
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy temp,pdata
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	arg 0x8,temp
+	//branch ml2cap_send_signal
+	//Fall through
+ml2cap_send_signal:
+	storet 2,mem_l2cap_signal_tx_length
+	copy temp,pdata
+	branch l2cap_malloc_discard,blank
+	call l2cap_get_signal_tx_buff
+	fetch 2,mem_l2cap_signal_tx_length
+	istore 2,contw //make sure that length is still in temp!
+	force L2CAP_signal_channel,pdata
+	istore 2,contw
+	rtn
+
+msdp_send_req_done:
+	fetch 2,mem_sdp_tx_pkt_length
+	branch assert,blank
+	call l2cap_get_sdp_tx_buff
+	fetch 2,mem_sdp_tx_pkt_length
+	istore 2,contw
+	fetch 2,mem_sdp_remote_cid
+	istore 2,contw
+	rtn
+ml2cap_rx_multiplexing:
+	fetch 2, mem_l2cap_rx_pkt_length
+	branch l2cap_rx_reset_state,blank
+	bpatchx patch23_3,mem_patch23
+	fetch 1,mem_l2cap_rx_cid
+	beq L2CAP_signal_channel,ml2cap_call_proc_signal
+	beq L2CAP_SDP_channel,ml2cap_call_proc_sdp
+	beq L2CAP_RFCOMM_channel,l2cap_call_proc_rfcomm
+	beq L2CAP_HID_Control_channel,l2cap_call_proc_hid
+	beq L2CAP_HID_Interrupt_channel,l2cap_call_proc_hid
+	branch l2cap_rx_reset_state
+
+ml2cap_call_proc_signal:
+	bpatchx patch23_4,mem_patch23
+	call l2cap_malloc_signal_channel
+	force 0,regB
+	call l2cap_get_signal_tx_payload
+	copy pdata,contw
+	fetch 2,mem_l2cap_rx_pkt_length
+	copy pdata,regC
+	fetch 2,mem_l2cap_payload_ptr
+	iforce contr
+ml2cap_proc_one_comm_loop:
+	call ml2cap_proc_one_comm
+	increase -4,regC
+	nbranch ml2cap_proc_one_comm_loop,zero
+	copy regB,temp
+	call ml2cap_send_signal
+	branch l2cap_rx_reset_state
+	
+ml2cap_proc_one_comm:
+	ifetch 1,contr
+	beq signal_connect_req,ml2cap_proc_signal_connect_req
+	beq signal_cmd_reject,ml2cap_proc_signal_cmd_reject
+	beq signal_connect_rsp,ml2cap_proc_signal_connect_rsp
+	beq signal_config_rsp,ml2cap_proc_signal_config_rsp
+	beq signal_config_req,ml2cap_proc_signal_config_req
+	beq signal_disconnect_rsp,ml2cap_proc_signal_disconn_rsp
+	beq signal_disconnect_req,ml2cap_proc_signal_disconn_req
+	beq signal_echo_req,l2cap_proc_signal_echo_req
+	beq signal_info_req,ml2cap_proc_signal_info_req
+	branch ml2cap_proc_send_reject
+
+ml2cap_proc_signal_connect_req:
+	call save_cont_pointers
+	//jam NO_RECONNECTION,memui_reconnect_mode
+	call load_cont_pointers
+	branch l2cap_proc_signal_connect_req
+ml2cap_proc_signal_cmd_reject:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+mvptr:
+	ifetch 1,contr
+	increase -1,regA
+	nbranch mvptr,zero
+	rtn
+ml2cap_proc_signal_connect_rsp:
+	ifetch 1,contr //id
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA	//length
+	ifetch 2,contr
+	copy pdata,timeup	//destination	cid
+	ifetch 2,contr
+	copy pdata,temp	//source	cid
+	ifetch 2,contr 		// result
+	sub pdata,0,null
+	branch ml2cap_proc_signal_connect_rsp_sucessful,zero
+	beq L2CAP_connect_refused_PSM_unsupported,ml2cap_proc_signal_connect_refused_result
+	beq L2CAP_connect_refused_no_resources,ml2cap_proc_signal_connect_refused_result
+	branch ml2cap_proc_signal_connect_rsp_mnosucc
+ml2cap_proc_signal_connect_refused_result:
+	jam BT_EVT_ML2CAP_CONN_REFUSED,mem_fifo_temp
+	call ui_ipc_send_event
+ml2cap_proc_signal_connect_rsp_mnosucc:
+	ifetch 2,contr //reason
+	branch mnosucc
+ml2cap_proc_signal_connect_rsp_sucessful:
+	call save_cont_pointers
+	//fetch 1,mem_ML2CAP_comm_id
+	//icompare 0xff,queue
+	//nbranch mnosucc1,true
+	bpatchx patch23_5,mem_patch23
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch ml2cap_proc_signal_connect_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch ml2cap_proc_signal_connect_rsp_rfcomm,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch ml2cap_proc_signal_connect_rsp_hid_int,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch ml2cap_proc_signal_connect_rsp_hid_ctrl,zero
+	branch mnosucc
+ml2cap_proc_signal_connect_rsp_sdp:
+	copy timeup,pdata
+	store 2,mem_sdp_remote_cid
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES
+	store 1,mem_sdp_state
+	branch mnosucc1
+ml2cap_proc_signal_connect_rsp_rfcomm:
+	copy timeup,pdata
+	store 2,mem_RFCOMM_remote_CID
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES
+	store 1,mem_rfcomm_state
+	branch mnosucc1
+ml2cap_proc_signal_connect_rsp_hid_ctrl:
+	copy timeup,pdata
+	store 2,mem_hid_ctrl_remote_cid
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES
+	store 1,mem_hid_control_state
+	branch mnosucc1
+ml2cap_proc_signal_connect_rsp_hid_int:
+	copy timeup,pdata
+	store 2,mem_hid_int_remote_cid
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES
+	store 1,mem_hid_interrupt_state
+	//branch mnosucc1
+
+mnosucc1:
+	call load_cont_pointers
+mnosucc:
+	copy regC,pdata
+	isub regA,regC
+	rtn
+
+ml2cap_proc_signal_config_rsp:
+	ifetch 1,contr		//	Ident
+	copy pdata,queue
+	ifetch 2,contr		//	SigLen
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr		//	DestnCID
+	copy pdata,timeup
+	ifetch 2,contr
+	ifetch 2,contr		//	Get the result value, check success
+	nbranch mcrsdone1,blank
+	call save_cont_pointers
+	//fetch 1,mem_ML2CAP_comm_id
+	//icompare 0xff,queue
+	//nbranch mcfrsdone,true
+	copy timeup,temp
+	bpatchx patch23_6,mem_patch23
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_rsp_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_rsp_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_rsp_hid_int,zero
+ml2cap_proc_signal_config_rsp_sdp:
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+	store 1,mem_sdp_state
+	rtn
+ml2cap_proc_signal_config_rsp_rfcomm:
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+	store 1,mem_rfcomm_state
+	rtn
+ml2cap_proc_signal_config_rsp_hid_ctrl:
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+	store 1,mem_hid_control_state
+	rtn
+ml2cap_proc_signal_config_rsp_hid_int:
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+	store 1,mem_hid_interrupt_state
+	jam BT_EVT_HID_CONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+mcfrsdone:
+	call load_cont_pointers
+mcrsdone1:
+	increase -6,regA
+mloop2:
+	branch mcrsdone,zero
+	increase 1,contr
+	increase -1,regA
+	branch mloop2
+mcrsdone:
+	rtn
+ml2cap_proc_signal_config_req:
+	ifetch 1,contr		//	Ident
+	copy pdata,queue
+	ifetch 2,contr		//	SigLen
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr		//	DestnCID
+	increase 2,contr
+	copy pdata,temp
+	setarg  signal_config_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	increase 2,regA
+	copy regA,pdata
+	istore 2,contw
+	call save_cont_pointers
+	bpatchx patch23_7,mem_patch23
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_req_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_req_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_req_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_req_hid_int,zero
+	branch mcfgrq_done
+ml2cap_proc_signal_config_req_sdp:
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	store 1,mem_sdp_state
+	bbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,ml2cap_proc_signal_config_req_sdp_nsndreq
+	fetcht 1,mem_CONTROL_tasks
+	set1 L2CAP_init_Config_Req,temp
+	storet 1,mem_CONTROL_tasks
+	copy queue,pdata
+	increase 1,pdata
+	store 1,mem_config_identifier
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_sdp_state
+ml2cap_proc_signal_config_req_sdp_nsndreq:
+	fetch 2,mem_sdp_remote_cid
+	store 2,mem_config_req_dest_CID
+	branch mcfgrq_done
+ml2cap_proc_signal_config_req_rfcomm:
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	store 1,mem_rfcomm_state
+	fetch 2,mem_RFCOMM_remote_CID
+	branch mcfgrq_done
+ml2cap_proc_signal_config_req_hid_ctrl:
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	store 1,mem_hid_control_state
+	fetch 2,mem_hid_ctrl_remote_cid
+	branch mcfgrq_done
+ml2cap_proc_signal_config_req_hid_int:
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	store 1,mem_hid_interrupt_state
+	fetch 2,mem_hid_int_remote_cid
+	//branch mcfgrq_done
+
+mcfgrq_done:
+	copy pdata,timeup
+	call load_cont_pointers
+/*******for Nokia**************/
+	copy timeup,pdata
+	/*setarg 0x0040*/
+	istore 2,contw
+	force 0x0000,pdata
+	istore 2,contw
+	force 0x0000,pdata
+	istore 2,contw
+	force 10,pdata
+	iadd regB,regB
+	increase -6,regA
+mloop1:
+	branch mcrqdone,zero
+	ifetch 1,contr
+	istore 1,contw
+	increase 1,regB
+	increase -1,regA
+	branch mloop1
+mcrqdone:
+	rtn
+ml2cap_proc_signal_disconn_req:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+
+	ifetch 2,contr
+	copy pdata,regA
+	ifetch 2,contr
+	copy pdata,timeup
+	call save_cont_pointers
+	bpatchx patch24_0,mem_patch24
+	setarg L2CAP_SDP_channel
+	copy regA,temp
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_sdp,zero
+	setarg L2CAP_HID_Control_channel
+	copy regA,temp
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	copy regA,temp
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_hid_int,zero
+	branch mclsrfc
+ml2cap_proc_signal_disconn_sdp:
+	setarg 0x0000
+	store 2,mem_sdp_tx_pkt_length
+	store 2,mem_sdp_remote_cid
+	store 1,mem_sdp_state
+	branch mclssdp
+ml2cap_proc_signal_disconn_hid_ctrl:
+	call l2cap_reset_hid_ctrl_state
+	branch mclssdp
+ml2cap_proc_signal_disconn_hid_int:
+	call l2cap_reset_hid_int_state
+	//call HID_mem_lock
+	//fetch 1, mem_hid_cb1
+	//set1 HID_CB_APP_HID_DISCONNECTED,pdata
+	//store 1, mem_hid_cb1
+	//call HID_mem_unlock
+	branch mclssdp
+mclsrfc:
+	setarg 0x0000
+	store 2,mem_RFCOMM_Tx_pkt_length
+mclssdp:
+	call load_cont_pointers
+	setarg signal_disconnect_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy regA,pdata
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	force 8,pdata
+	iadd regB,regB
+	rtn
+
+ml2cap_proc_signal_disconn_rsp:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	ifetch 2,contr
+	copy pdata,timeup
+	ifetch 2,contr
+	copy pdata,temp
+	call save_cont_pointers
+	bpatchx patch24_1,mem_patch24
+	fetch 1,mem_ML2CAP_comm_id
+	icompare 0xff,queue
+	nbranch mdisdone,true
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_rsp_rfcomm,zero
+	branch mdisdone
+ml2cap_proc_signal_disconn_rsp_sdp:
+	jam 0,mem_sdp_remote_cid
+	jam 0,mem_sdp_state
+	branch mdisdone
+ml2cap_proc_signal_disconn_rsp_rfcomm:
+	//
+	//
+mdisdone:
+	call load_cont_pointers
+	copy regC,pdata
+	isub regA,regC
+	rtn
+
+ml2cap_proc_send_reject:
+	setarg signal_cmd_reject
+	istore 1,contw
+	ifetch 1,contr
+	istore 1,contw
+	setarg 0x0002
+	istore 2,contw
+	setarg 0x0000
+	istore 2,contw
+	setarg 0x0006
+	iadd regB,regB
+	force 4,regC
+	rtn
+	
+//l2cap command id, 0 is not allowed
+l2cap_get_req_id:
+	fetch 1,mem_ML2CAP_comm_id
+	increase 1,pdata
+	bne 0,l2cap_get_req_id_ok
+	increase 1,pdata
+l2cap_get_req_id_ok:
+	store 1,mem_ML2CAP_comm_id
+	rtn
+
+
+/*********************************************************/
+//char* malloc(short len)
+//input: regA -> len
+//rtn: regB -> pbuff;return from pdata
+//val: queue -> i
+//val: timeup -> buff_cnt
+/*********************************************************/
+l2cap_malloc:
+	bpatchx patch24_2,mem_patch24
+	arg 0,regb
+	call l2cap_malloc_is_fifo_full
+	nbranch assert,blank//assert when fifo full
+	call l2cap_malloc_get_full_map
+	arg mem_tx_buff0,regB//pbuff = buff0;
+	arg 0,queue // i = 0;
+l2cap_malloc_loop:
+	fetcht 1,mem_used_map
+	qisolate1 temp
+	branch l2cap_malloc_next,true//if(1 == (used_map & (1 << i)))goto next;
+	call l2cap_malloc_enough
+	sub timeup,0,null// (0 - timeup)
+	branch l2cap_malloc_next,positive//if(buff_cnt <= 0)goto next;
+	call l2cap_malloc_into_fifo
+	branch l2cap_malloc_rtn//return (pbuff);
+l2cap_malloc_next:
+	increase 128,regB//pbuff += BUFF_SIZE;//point to next buff
+	increase 1,queue
+	setarg 8//BUFF_MAX_COUNT
+	isub queue,null //BUFF_MAX_COUNT - i
+	branch l2cap_malloc_loop,positive//while(i < buff_max_count)
+	arg 0,regB//return NULL
+l2cap_malloc_rtn:
+	copy regB,pdata
+	branch assert,blank
+	rtn//return pointer via pdata
+	
+/*********************************************************/
+//void* l2cap_malloc_fifo_out(void)
+//output:len -> temp
+//output:ptr ->pdata
+//only get ptr,not free
+/*********************************************************/
+l2cap_malloc_fifo_out:
+	bpatchx patch24_3,mem_patch24
+	call l2cap_malloc_fifo_get_first_ptr
+	increase 1,contr
+	ifetch 2,contr //ptr ->pdata
+	rtn 
+
+/*********************************************************/
+//void free_first_buff_in_fifo(void)
+//only free the first one
+/*********************************************************/
+l2cap_malloc_free:
+	bpatchx patch24_4,mem_patch24
+	call l2cap_malloc_fifo_get_first_ptr
+	copy contr,contw
+	copy contr,temp
+	setarg 0
+	istore 3,contw
+	rtn
+/*********************************************************/
+//void l2cap_malloc_discard(void)
+//discard the latest malloc
+/*********************************************************/
+l2cap_malloc_discard:
+	bpatchx patch24_5,mem_patch24
+	call l2cap_malloc_is_fifo_empty
+	branch assert,blank
+	fetch 3,mem_tx_fifo2
+	store 3,mem_tx_fifo3
+	fetch 3,mem_tx_fifo1
+	store 3,mem_tx_fifo2
+	fetch 3,mem_tx_fifo0
+	store 3,mem_tx_fifo1
+	rtn
+/*********************************************************/
+//bool fifo_is_full(void)
+//blank == 1: not full
+//blank == 0: full
+/*********************************************************/
+l2cap_malloc_is_fifo_full:
+	bpatchx patch24_6,mem_patch24
+	fetch 3,mem_tx_fifo0
+	rtn
+/*********************************************************/
+//bool fifo_nearly_full(void)
+//blank == 1: nearly full
+//blank == 0: not nearly full
+/*********************************************************/
+l2cap_malloc_is_fifo_nearly_full:
+	bpatchx patch24_7,mem_patch24
+	fetch 3,mem_tx_fifo1
+	rtn
+/*********************************************************/
+//bool fifo_is_empty(void)
+//blank == 1: empty
+//blank == 0: not empty
+/*********************************************************/
+l2cap_malloc_is_fifo_empty:
+	bpatchx patch25_0,mem_patch25
+	fetch 3,mem_tx_fifo3
+	rtn
+/*********************************************************/
+//char* l2cap_malloc_fifo_get_first_ptr(void)
+//output:contr  -->ptr
+/*********************************************************/	
+l2cap_malloc_fifo_get_first_ptr:
+	call l2cap_malloc_is_fifo_empty
+	branch assert,blank // fifo is empty
+	arg mem_tx_fifo0,contr
+l2cap_malloc_free_loop:
+	ifetch 3,contr
+	branch l2cap_malloc_free_loop,blank
+	increase -3,contr
+	rtn
+
+/*********************************************************/
+//char* l2cap_malloc_get_full_map(void)
+//output:mem_used_map  -->full_map
+//add all maps into one
+/*********************************************************/	
+l2cap_malloc_get_full_map:
+	bpatchx patch25_1,mem_patch25
+	arg 4,loopcnt
+	arg mem_tx_fifo0_map,contr
+	arg 0,temp
+l2cap_malloc_get_full_map_loop:	
+	ifetch 3,contr
+	and pdata,0xff,pdata
+	ior temp,temp
+	loop l2cap_malloc_get_full_map_loop
+	storet 1,mem_used_map
+	rtn
+/*********************************************************/
+//void buff_into_fifo(char buff_index, char buff_cnt, short len)
+//input: regA -> len
+//input: regC -> buff_index
+//input: timeup -> buff_cnt
+//val:temp ->   (fifo->map)
+/*********************************************************/
+l2cap_malloc_into_fifo:
+	bpatchx patch25_2,mem_patch25
+	call l2cap_malloc_is_fifo_full
+	nbranch assert,blank //fifo full
+	call l2cap_malloc_is_fifo_empty
+	branch l2cap_malloc_into_fifo_no_push,blank//fifo empty, no need to push
+	fetch 3,mem_tx_fifo1
+	store 3,mem_tx_fifo0
+	ifetch 3,contr//mem_tx_fifo2
+	istore 3,contw//mem_tx_fifo1
+	ifetch 3,contr//mem_tx_fifo3
+	istore 3,contw//mem_tx_fifo2
+	setarg 0
+	istore 3,contw//mem_tx_fifo3
+l2cap_malloc_into_fifo_no_push:
+	arg 0,temp
+	copy timeup,pdata
+	iadd queue,pdata
+l2cap_malloc_into_fifo_loop:
+	qset1 temp//fifo->map |= 1 << i;
+	increase 1,queue
+	isub queue,null
+	nbranch l2cap_malloc_into_fifo_loop,zero
+	//map in temp
+	lshift8 regB,pdata
+	ior temp,pdata
+	store 3,mem_tx_fifo3
+	rtn
+
+/*********************************************************/
+//char is_size_enough(char buff_index, short len)
+//input: regA -> len
+//input: queue -> buff_index
+//rtn: timeup -> buff_cnt
+//val: max_size_fom_buff_index -> temp
+//val: i -> loopcnt
+/*********************************************************/
+l2cap_malloc_enough:
+	bpatchx patch25_3,mem_patch25
+	call l2cap_malloc_get_full_map
+	copy queue,regC//restore buff_index to regC
+	arg 0,temp
+	arg 0,timeup//default return val
+	//increase 1,queue
+l2cap_malloc_enough_loop:
+	copy queue,pdata
+	beq 8,l2cap_malloc_enough_end
+	fetch 1,mem_used_map
+	qisolate1 pdata
+	branch l2cap_malloc_enough_end,true
+	increase 128,temp
+	increase 1,queue
+	copy regA,pdata
+	isub temp,null
+	branch l2cap_malloc_enough_end,zero//(max_size_fom_buff_index ==  len)
+	branch l2cap_malloc_enough_loop,positive//(max_size_fom_buff_index <  len)
+l2cap_malloc_enough_end:
+	copy temp,pdata
+	isub regA,null
+	nbranch l2cap_malloc_enough_rtn,positive// max_size_fom_buff_index - len > 0
+	copy queue,pdata//i
+	copy regC,temp//buff_index
+	isub temp,timeup//return (i - buff_index)
+l2cap_malloc_enough_rtn:
+	copy regC,queue//restore buff_index to queue
+	rtn
+	
+
+l2cap_malloc_signal_channel:
+	bpatchx patch25_4,mem_patch25
+	arg L2CAP_SIGNAL_MALLOC_SIZE,regA
+	call l2cap_malloc
+	store 2,mem_l2cap_signal_tx_buff_ptr
+	increase 4,pdata
+	store 2,mem_l2cap_signal_tx_payload_ptr
+	setarg 0
+	store 2,mem_l2cap_signal_tx_length
+	rtn
+
+l2cap_get_signal_tx_buff:
+	fetch 2,mem_l2cap_signal_tx_buff_ptr
+	branch l2cap_util_pdata_to_contw
+
+l2cap_get_signal_tx_payload:
+	fetch 2,mem_l2cap_signal_tx_payload_ptr
+	branch l2cap_util_pdata_to_contw
+
+
+l2cap_malloc_sdp_channel:
+	bpatchx patch25_5,mem_patch25
+	arg SDP_MALLOC_SIZE,regA
+	call l2cap_malloc
+	store 2,mem_sdp_tx_buff_ptr
+	increase 4,pdata
+	store 2,mem_sdp_tx_payload_ptr
+	setarg 0
+	store 2,mem_sdp_tx_pkt_length
+	rtn
+
+l2cap_get_sdp_tx_buff:
+	fetch 2,mem_sdp_tx_buff_ptr
+	branch l2cap_util_pdata_to_contw
+
+l2cap_get_sdp_tx_payload:
+	fetch 2,mem_sdp_tx_payload_ptr
+	branch l2cap_util_pdata_to_contw
+
+
+l2cap_malloc_rfcomm_channel:
+	bpatchx patch25_6,mem_patch25
+	call push_stack
+	jam RFCOMM_MALLOC_FAIL,mem_rfcomm_malloc_fail_flag
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	arg RFCOMM_MALLOC_SIZE,regA
+	call l2cap_malloc
+	store 2,mem_rfcomm_tx_buff_ptr
+	increase 4,pdata
+	store 2,mem_rfcomm_tx_payload_ptr
+	setarg 0
+	store 2,mem_rfcomm_tx_pkt_length
+	jam RFCOMM_MALLOC_SUCCEED,mem_rfcomm_malloc_fail_flag
+	branch pop_stack
+
+l2cap_get_rfcomm_tx_buff:
+	fetch 2,mem_rfcomm_tx_buff_ptr
+	branch l2cap_util_pdata_to_contw
+	
+l2cap_util_pdata_to_contw:
+	branch assert,blank
+	copy pdata,contw
+	rtn
+	
+
+l2cap_lpm_save_calc_len:
+	bpatchx patch25_7,mem_patch25
+	arg 0,regb
+	arg mem_tx_fifo0_map,rega
+	increase -2,rega
+l2cap_lpm_save_calc_len_loop:
+	increase 2,rega
+	setarg mem_tx_fifo_end
+	isub rega,null
+	branch l2cap_lpm_save_calc_len_end,zero //end of 2lcap tx fifo
+	ifetch 1,rega
+	increase 1,rega
+	branch l2cap_lpm_save_calc_len_loop,blank
+	ifetcht 2,rega
+	ifetch 2,temp
+	iadd regb,regb
+	increase 4,regb //l2cap header len
+	branch l2cap_lpm_save_calc_len_loop
+l2cap_lpm_save_calc_len_end:
+	copy regb,pdata
+	rtn
+
+
+l2cap_lpm_get_wake_lock:
+	arg wake_lock_l2cap_tx,queue
+	branch lpm_get_wake_lock
+
+l2cap_lpm_put_wake_lock:
+	arg wake_lock_l2cap_tx,queue
+	branch lpm_put_wake_lock
+	
+l2cap_lpm_save_txbuf:
+	bpatchx patch26_0,mem_patch26
+	call l2cap_malloc_get_full_map
+	fetch 1,mem_used_map
+	rtn blank
+	call l2cap_lpm_save_calc_len
+	arg l2cap_lpm_txbuf_len,temp
+	isub temp,null
+	branch l2cap_lpm_get_wake_lock,positive //no enougth space to save l2cap tx data
+	call l2cap_lpm_put_wake_lock
+	arg mem_l2cap_lpm_txbuf,contw
+	arg mem_tx_fifo0,rega
+l2cap_lpm_save_txbuf_loop:
+	setarg mem_tx_fifo_end
+	isub rega,null
+	rtn zero //end of 2lcap tx fifo
+	ifetch 1,rega  //mem_tx_fifoX_map
+	increase 1,rega
+	nbranch l2cap_lpm_save_txbuf_nempty,blank
+	istore 2,contw // length = 0
+	increase 2,rega
+	branch l2cap_lpm_save_txbuf_loop
+l2cap_lpm_save_txbuf_nempty:
+	ifetch 2,rega //ptr
+	increase 2,rega
+	copy pdata,contr
+	ifetch 2,contr  //l2cap len
+	istore 2,contw
+	copy pdata,loopcnt
+	increase 2,loopcnt //add CID len
+	call memcpy
+	branch l2cap_lpm_save_txbuf_loop
+	
+l2cap_lpm_load_txbuf:
+	bpatchx patch26_1,mem_patch26
+	call l2cap_malloc_get_full_map
+	fetch 1,mem_used_map
+	rtn blank
+	arg mem_tx_fifo0_ptr,rega
+	increase -3,rega //mem_tx_fifo0_ptr -3
+	arg mem_l2cap_lpm_txbuf,contr
+l2cap_lpm_load_txbuf_loop:
+	increase 3,rega //mem_tx_fifoX_ptr
+	setarg mem_tx_fifo_end+1
+	isub rega,null
+	rtn zero //end of 2lcap tx fifo
+	ifetch 2,contr
+	branch l2cap_lpm_load_txbuf_loop,blank
+	increase 4,pdata //l2cap header len
+	copy pdata,loopcnt
+	copy contr,regb
+	ifetch 2,rega //ptr
+	copy pdata,contw
+	copy regb,contr
+	increase -2,contr
+	call memcpy
+	branch l2cap_lpm_load_txbuf_loop
+	
+
+
+	
+//******************************************//
+//*************LE INIT ****************//
+//******************************************//
+
+
+le_init_conn:
+	bpatchx patch26_2,mem_patch26
+	disable wake
+	jam 1,mem_le_conn_handle
+	jam 3,mem_le_state
+	jam 1,mem_le_arq
+	setarg -1
+	store 2,mem_le_event_count
+	force 0,pdata
+	store 1,mem_le_ch
+	store 1,mem_le_op
+	store 3,mem_sniff_rcv
+	store 3,mem_sniff_lost
+	store 5,mem_le_pcnt_tx
+	set1 39,pdata
+	store 5,mem_le_pcnt_rx
+	jam 1,mem_le_txheader
+	jam 0,mem_le_txlen
+	branch le_supervision_flush
+
+le_init_master:
+	bpatchx patch26_3,mem_patch26
+	enable master
+	jam lemode_master,mem_le_mode
+	jam 1,mem_le_att_handle
+	jam 1,mem_le_search_handle_start
+	setarg 0xffff
+	store 2,mem_le_search_handle_end
+	force 0,pdata
+	store 5,mem_le_pcnt_rx
+	set1 39,pdata
+	store 5,mem_le_pcnt_tx	
+	branch le_init_conn
+
+
+le_init_slave:
+	bpatchx patch26_4,mem_patch26
+	disable master
+ 	setarg 0x17
+ 	store 2,mem_le_remote_mtu
+	jam lemode_slave,mem_le_mode
+	jam 0,mem_le_adv_enable
+	jam 0,mem_lpm_current_mult
+	jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state
+	jam FLAG_LE_ENC_NULL,mem_le_enc_state
+	fetch 2,mem_le_superto
+	store 2,mem_le_init_superto
+	fetch 2,mem_le_tsniff
+	mul32 pdata,5,pdata
+	rshift4 pdata,pdata
+	store 2,mem_le_superto			// vol.6 part B 4.5.2 only 6*conninterval before establish
+	branch le_init_conn
+	
+
+//******************************************//
+//*************LE main process*********//
+//******************************************//
+le_dispatch:
+	call le_enable
+	call le_scan
+	call le_adv
+	branch le_disable
+
+le_conn_dispatch:
+	bpatchx patch26_5,mem_patch26
+	call le_enable
+	call app_process_ble
+	fetch 1,mem_le_mode
+	beq lemode_master,le_master_dispatch
+	branch le_slave_dispatch
+	
+//******************************************//
+//***********LE master process*********//
+//******************************************//
+	
+le_master_dispatch:
+	bpatchx patch26_6,mem_patch26
+	enable master
+	call le_supervision_update
+	branch le_master_disconn,positive
+	call check_ble_disabled
+	call le_setup
+	call le_prepare_tx
+	disable match
+	call le_transmit_receive_sifs
+	nrtn match
+	bpatchx patch26_7,mem_patch26
+	fetch 1,mem_le_conn_rcv
+	increase 1,pdata
+	store 1,mem_le_conn_rcv
+	call le_acknowledge
+	disable master
+	rtn
+	
+le_master_disconn:
+	call le_disconnect
+	disable master
+	rtn
+	
+//******************************************//
+//***********LE slave process***********//
+//******************************************//
+le_slave_dispatch:
+	bpatchx patch27_0,mem_patch27
+	jam 0,mem_le_md_count
+	call sp_calc_sequence_256
+	call le_secure_connect_sm
+	disable attempt
+	call le_supervision_update
+	branch le_slave_disconn,positive
+	call check_ble_disabled
+	call le_setup
+	call le_receive_slave
+	nbranch le_slave_unsync,sync	// vol.6 part B 4.5.1 respond even crc error
+	call le_got_first_packet
+	branch le_slave_match,match
+	branch le_slave_cont
+	
+
+le_slave_match:
+	bpatchx patch27_1,mem_patch27
+	fetch 1,mem_le_md_count
+	pincrease 1
+	store 1,mem_le_md_count
+	beq LE_MD_MAX_COUNT,le_slave_cont
+	call le_acknowledge
+	call le_prepare_tx
+	call le_transmit_norx
+	call le_parse
+	fetch 2,mem_cb_ble_transmit
+	call callback_func
+	call le_check_md
+	branch le_slave_more_data,user
+le_slave_cont:
+	bpatchx patch27_2,mem_patch27
+	call le_pairing_sm
+ 	call le_check_paring_time
+	call check_51cmd
+	fetch 1,mem_le_op
+	bbit1 op_disconn,le_slave_disconn
+le_slave_unsync:
+	bpatchx patch27_3,mem_patch27
+	call le_lpm_set_mult
+	call le_update_channel_map
+	call le_update_param
+	branch calc_clke_offset
+
+
+le_check_md:
+	disable user
+	bmark1 mark_ble_rx_md,enable_user
+	bmark1 mark_ble_tx_md,enable_user
+	rtn
+
+
+le_slave_more_data:
+	bpatchx patch27_4,mem_patch27
+	enable attempt
+	call le_transmit_receive_sifs_notx
+	branch le_slave_match,match
+	branch le_slave_cont
+
+le_slave_disconn:
+
+	//fall through
+le_disconnect:
+	bpatchx patch27_5,mem_patch27
+	call le_clear_connection_info
+	call app_disconn_reason_collect_ble
+	call sp_initialize_256
+	jam BT_EVT_LE_DISCONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event
+
+le_clear_connection_info:
+	setarg 0
+	store 9,mem_le_tx_buff_used
+	jam 0,mem_le_conn_handle
+	jam lemode_idle,mem_le_mode
+	jam 0,mem_le_state
+	jam FLAG_LE_ENC_NULL,mem_le_enc_state
+	jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state
+	rtn
+	
+le_got_first_packet:
+	bpatchx patch27_6,mem_patch27
+	fetch 1,mem_le_conn_rcv
+	increase 1,pdata
+	store 1,mem_le_conn_rcv
+	fetch 1,mem_le_state
+	rtnbit1 lestate_got_first_packet
+	set1 lestate_got_first_packet
+	store 1,mem_le_state
+	fetch 2,mem_le_init_superto
+	store 2,mem_le_superto
+	setarg 0
+	store 4,mem_le_transmit_window
+	rtn
+
+
+le_enable:
+	bpatchx patch27_7,mem_patch27
+	jam 0x36,rf_adc_goff        /*For BLE, tune AGC_gain_offset, Max added*/
+	jam 0x5f,rf_agc_nsat        //for BLE
+	enable le
+	jam 7,rfen_ulp			/* enable ulp */
+	call check_ble_disabled
+	fetch 1,mem_250k_freq_enable	//default: 0
+	rtn blank
+	jam 0xb8,rf_iq_gain
+	rtn
+	
+le_disable:
+	bpatchx patch28_0,mem_patch28
+	jam 0x2e,rf_adc_goff        /*For BR/EDR, tune AGC_gain_offset, Max added*/
+	jam 0xff,rf_agc_nsat         //for EDR&BR
+	disable le
+	jam 3,rfen_ulp
+	arg 0,stop_watch
+	rtn
+	
+le_prep:
+	disable enable_crc
+	disable enable_white
+	fetch 3,mem_le_crcinit
+	iforce crc24_init
+	fetch 1,mem_le_ch_mapped
+	reverse pdata,temp
+	set1 1,temp
+	rshift temp,white_init
+	rtn
+	
+
+lerx_setfreq:
+	call le_setfreq
+	call set_freq_rx
+	setarg param_pll_setup
+	call sleep
+	branch rf_rx_enable
+
+letx_setfreq:
+	branch txon,match
+letx_setfreq0:
+	call le_setfreq
+	branch set_freq_tx
+le_setfreq:
+	bpatchx patch28_1,mem_patch28
+	call set_sync_on
+	fetch 1, mem_le_testtype
+	nbranch le_ctf_test,blank
+	fetch 1,mem_le_ch_mapped
+	sub pdata,36,null
+	branch le_ctf_normal,positive
+	force 0,temp
+	rtneq 37
+	force 24,temp
+	rtneq 38
+	force 78,temp
+	rtn
+	
+le_ctf_normal:
+	sub pdata,10,null
+	branch le_ctf_low,positive
+	increase 1,pdata
+	
+le_ctf_low:	
+	lshift pdata,pdata
+	add pdata,2,temp
+	rtn
+	
+le_ctf_test:
+	fetch 1,mem_le_ch_mapped
+	lshift pdata,temp
+	rtn
+
+le_sca_map:
+	arg 500,temp
+	rtn blank
+	arg 250,temp
+	rtneq 1
+	arg 150,temp
+	rtneq 2
+	arg 100,temp
+	rtneq 3
+	arg 75,temp
+	rtneq 4
+	arg 50,temp
+	rtneq 5
+	arg 40,temp
+	rtneq 6
+	arg 20,temp
+	rtn
+
+
+	
+le_adv_access:
+	setarg 0x8e89be
+	lshift8 pdata,pdata
+	or_into 0xd6,pdata
+	iforce access
+	setarg 0x555555
+	store 3,mem_le_crcinit
+	rtn
+
+le_setup:
+	bpatchx patch28_2,mem_patch28
+	enable swfine
+	fetch 4,mem_le_access
+	iforce access
+	call le_map_channel
+	setarg 0x200
+	branch le_setup_master,master
+	fetch 2,mem_le_receive_window
+	rshift pdata,pdata
+le_setup_master:
+	arg param_pll_setup,temp
+	iadd temp,pdata
+	call ahead_window
+	deposit clke
+	store 6,mem_le_rxon_ts
+	rtn
+
+le_next_adv_channel:
+	bpatchx patch28_3,mem_patch28
+	fetch 1,mem_le_ch_mapped
+	beq 37,le_next_adv_channel_curr_channel_37
+	beq 38,le_next_adv_channel_curr_channel_38
+	beq 39,le_next_adv_channel_curr_channel_39
+	branch le_next_adv_channel_curr_channel_39
+
+le_next_adv_channel_curr_channel_37:
+	fetcht 1,mem_le_adv_channel_map
+	isolate1 BIT_ADV_CHANNEL_MAP_38,temp		//check 38 channel enable
+	branch set_le_next_adv_channel_38,true
+	isolate1 BIT_ADV_CHANNEL_MAP_39,temp		//check 39 channel enable
+	branch set_le_next_adv_channel_39,true
+	branch set_le_next_adv_channel_37
+
+
+le_next_adv_channel_curr_channel_38:
+	fetcht 1,mem_le_adv_channel_map
+	isolate1 BIT_ADV_CHANNEL_MAP_39,temp		//check 39 channel enable
+	branch set_le_next_adv_channel_39,true
+	isolate1 BIT_ADV_CHANNEL_MAP_37,temp		//check 37 channel enable
+	branch set_le_next_adv_channel_37,true
+	branch set_le_next_adv_channel_38
+
+
+le_next_adv_channel_curr_channel_39:
+	fetcht 1,mem_le_adv_channel_map
+	isolate1 BIT_ADV_CHANNEL_MAP_37,temp		//check 37 channel enable
+	branch set_le_next_adv_channel_37,true
+	isolate1 BIT_ADV_CHANNEL_MAP_38,temp		//check 38 channel enable
+	branch set_le_next_adv_channel_38,true
+	branch set_le_next_adv_channel_39
+
+
+
+set_le_next_adv_channel_37:
+	jam 37,mem_le_ch_mapped
+	fetch 1,mem_le_adv_channel_map_temp
+	set1 BIT_ADV_CHANNEL_MAP_37,pdata
+	store 1,mem_le_adv_channel_map_temp
+	rtn
+
+set_le_next_adv_channel_38:
+	jam 38,mem_le_ch_mapped
+	fetch 1,mem_le_adv_channel_map_temp
+	set1 BIT_ADV_CHANNEL_MAP_38,pdata
+	store 1,mem_le_adv_channel_map_temp
+	rtn
+
+set_le_next_adv_channel_39:
+	jam 39,mem_le_ch_mapped
+	fetch 1,mem_le_adv_channel_map_temp
+	set1 BIT_ADV_CHANNEL_MAP_39,pdata
+	store 1,mem_le_adv_channel_map_temp
+	rtn
+
+
+
+le_context_nexthop:
+	bpatchx patch28_4,mem_patch28
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	rtnbit0 mode_le
+	add rega,coffset_le_event_cnt,contw
+	ifetch 2,contw
+	increase 1,pdata
+	istore 2,contw
+	add rega,coffset_le_hop,contr
+	ifetch 1,contr
+	add rega,coffset_le_ch,contw
+	ifetcht 1,contw
+	iadd temp,pdata
+	sub pdata,36,null
+	branch le_nexthop_nowrap,positive
+	increase -37,pdata
+le_nexthop_nowrap:
+	istore 1,contw
+	rtn
+
+
+le_calc_channel_map:
+	bpatchx patch28_5,mem_patch28
+	fetch 5,mem_le_channel_map
+	force 0,temp
+	force 37,loopcnt
+le_count_channels_loop:
+	bbit0 0,le_count_channels_notused
+	increase 1,temp
+le_count_channels_notused:
+	rshift pdata,pdata
+	loop le_count_channels_loop
+	add temp,-1,pdata
+	store 1,mem_le_channels
+	rtn
+
+le_map_channel:
+	bpatchx patch28_6,mem_patch28
+	fetch 1,mem_le_ch
+	iforce queue
+	fetcht 5,mem_le_channel_map
+	qisolate1 temp
+	branch le_map_channel_end,true
+le_map_channel_next:
+	bpatchx patch28_7,mem_patch28
+	fetch 1,mem_le_channels
+	isub queue,pdata
+	branch le_map_channel_cont,positive
+	sub pdata,-1,queue
+	branch le_map_channel_next
+le_map_channel_cont:
+	copy queue,loopcnt
+	force 0,queue
+le_map_channel_loop:
+	qisolate1 temp
+	branch le_map_channel_skip,true
+	increase 1,loopcnt
+le_map_channel_skip:
+	deposit loopcnt
+	branch le_map_channel_end,blank
+	increase 1,queue
+	increase -1,loopcnt
+	branch le_map_channel_loop
+le_map_channel_end:
+	deposit queue
+	store 1,mem_le_ch_mapped
+	rtn
+
+
+le_wait_tx:
+	branch le_wait_master,master
+	until null,timeout
+	rtn
+	
+le_wait_master:
+	arg 0xea0,timeup
+	until clkn_rt,meet
+	rtn
+
+le_receive_adv:
+	disable swfine
+	fetch 2,mem_le_scan_window
+	copy pdata,timeup
+	branch le_receive_packet
+
+
+le_receive_slave:
+	bpatchx patch29_0,mem_patch29
+	enable swfine
+	fetch 2,mem_le_receive_window
+	fetcht 4,mem_le_transmit_window
+	iadd temp,timeup
+le_receive_packet:
+	call lerx_setfreq
+le_receive_rxon:
+	bpatchx patch29_1,mem_patch29
+	call le_prep
+	disable match
+	enable decode_fec0
+	enable is_rx
+	disable is_tx
+	copy timeup,stop_watch
+	correlate null,timeout
+	branch le_receive_on_attempt,attempt
+	copy clke,temp
+	storet 6,mem_sync_clke
+le_receive_on_attempt:
+	nbranch end_of_packet,sync
+	branch le_receive_skip,attempt
+	arg param_clke_cal_le,clke_rt
+	copy bt_clk,clke_bt
+	fetch 1,mem_le_state
+	bbit0 lestate_got_first_packet,le_receive_skip
+	call lpm_adjust_clk,wake
+le_receive_skip:
+	bpatchx patch29_2,mem_patch29
+	call save_rssi
+	enable enable_white
+	enable enable_crc
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	store 1,mem_le_rxbuf
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	and pdata,0x3f,loopcnt
+	branch lerx_nopayload,zero
+	
+lerx_loop:
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	loop lerx_loop
+	
+lerx_nopayload:
+	bpatchx patch29_3,mem_patch29
+	parse demod,bucket,24	
+	enable swfine
+	arg param_sifs,stop_watch		// start SIFS timer after last bit of crc
+	rshift32 pdata,pdata
+	rshift16 pdata,pdata
+	istore 3,contw
+	branch end_of_packet,crc_failed
+	enable match
+	fetch 1,mem_last_freq
+	add pdata,0,rega				// ble 2M Medium Frequency
+	call rf_write_freq				/* set frequency to tx mode freq */
+	disable decode_fec0
+	branch set_sync_on
+
+le_transmit_receive_sifs:
+	bpatchx patch29_4,mem_patch29
+	call le_transmit
+le_transmit_receive_sifs_notx:
+	fetcht 1,mem_last_freq
+	call set_freq_rx
+	call rf_rx_enable
+	enable swfine
+	arg 5500,timeup 
+	branch le_receive_rxon
+
+le_transmit_norx:
+	call le_transmit
+	branch end_of_packet
+	
+le_transmit:
+	bpatchx patch29_5,mem_patch29
+	call le_prep
+	call letx_setfreq
+	branch le_transmit0
+	
+le_transmit0:
+	set1 TXGFSK,radio_ctrl
+	enable encode_fec0
+	enable is_tx
+	disable is_rx
+	call le_wait_tx
+	rshift16 access,pdata
+	rshift8 pdata,pdata
+	rshift4 pdata,pdata
+	inject mod,40
+	enable enable_white
+	enable enable_crc
+	bpatchx patch29_6,mem_patch29
+	fetch 1,mem_le_txheader
+	inject mod,8
+	ifetch 1,contr
+	and pdata,0x3f,loopcnt
+	inject mod,8
+	branch letr_nopayload,zero
+letr_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop letr_loop
+	
+letr_nopayload:
+	enable enable_parity
+	inject mod,24
+	disable enable_parity
+	until null,tx_clear
+	nop 100          /* flush out the last bit */
+	disable encode_fec0
+	rtn
+	
+le_send_adv_ind:
+	bpatchx patch29_7,mem_patch29
+	fetch 1,mem_le_adv_type
+	beq ADV_DIRECT_IND,le_send_adv_direct_ind
+	fetch 1,mem_le_adv_own_addr_type
+	lshift4 pdata,pdata
+	lshift2 pdata,pdata
+	store 1,mem_le_txheader
+	fetcht 1,mem_le_adv_data_len
+	add temp,6,pdata
+	store 1,mem_le_txlen
+	fetch 6,mem_le_lap
+	store 6,mem_le_txpayload
+	copy temp,loopcnt
+	arg mem_le_adv_data,contr
+	call memcpy_fast
+	branch le_send_adv_transmit
+le_send_adv_direct_ind:
+	fetch 1,mem_le_adv_direct_addr_type
+	lshift4 pdata,pdata
+	lshift2 pdata,pdata
+	increase 1,pdata
+	store 1,mem_le_txheader
+	setarg 12
+	store 1,mem_le_txlen
+	fetch 6,mem_le_lap
+	store 6,mem_le_txpayload
+	fetch 6,mem_hci_plap
+	istore 6,contw
+le_send_adv_transmit:
+	bpatchx patch2a_0,mem_patch2a
+	fetch 1,mem_le_adv_transmit
+	increase 1,pdata
+	store 1,mem_le_adv_transmit
+	arg 1800,stop_watch
+	disable match
+	branch le_transmit_receive_sifs
+	
+le_send_scan_request:
+	bpatchx patch2a_1,mem_patch2a
+	fetch 1,mem_le_scan_type
+	rtnne LE_SCAN_TYPE_ACTIVE
+	fetch 1,mem_le_adv_transmit
+	increase 1,pdata
+	store 1,mem_le_adv_transmit
+	arg 0x0c03,temp// length + SCAN_REQ PDU
+	fetch 1,mem_le_scan_own_addr_type
+	nsetflag blank,LE_SENDER_ADDR_BIT,temp
+	copy regA,pdata
+	nsetflag blank,LE_RECEIVER_ADDR_BIT,temp	
+	storet 2,mem_le_txheader
+	fetch 6,mem_le_lap
+	istore 6,contw
+	fetch 6,mem_le_plap
+	istore 6,contw
+	branch le_transmit_receive_sifs
+
+
+le_send_scan_response:
+	bpatchx patch2a_2,mem_patch2a
+	arg SCAN_RSP,temp
+	fetch 1,mem_le_adv_own_addr_type
+	nsetflag blank,LE_SENDER_ADDR_BIT,temp
+	storet 1,mem_le_txheader
+	fetcht 1,mem_le_scan_data_len
+	add temp,6,pdata
+	store 1,mem_le_txlen
+	fetch 6,mem_le_lap
+	store 6,mem_le_txpayload
+	arg mem_le_scan_data,contr
+	copy temp,loopcnt
+	call memcpy_fast
+	call le_transmit_norx
+	branch le_adv_not_match
+
+le_connect_request:
+	bpatchx patch2a_3,mem_patch2a
+	force -1,pdata
+	setsect 2,1
+	store 5,mem_le_channel_map
+	call le_calc_channel_map	
+	force 4,loopcnt
+	arg mem_le_access,contw
+	call generate_random_loop	
+	fetch 2,mem_le_timeout
+	store 2,mem_le_superto
+le_con_req_hop_retry:
+	random pdata
+	and_into 0xf,pdata
+	sub pdata,4,null
+	branch le_con_req_hop_retry,positive
+	store 1,mem_le_hop
+	store 1,mem_tmp1
+	bpatchx patch2a_4,mem_patch2a
+	fetcht 2,mem_le_conn_interval
+	storet 2,mem_le_tsniff	
+	copy temp,regc			// tsniff in regc
+	add clkn_bt,7,pdata			// leave space for offset
+	idiv regc
+	call wait_div_end
+	remainder rega
+	isub rega,pdata
+	iadd regc,pdata
+	fetcht 2,mem_le_dsniff
+	iadd temp,pdata
+	store 4,mem_le_anchor
+	isub clkn_bt,rega
+	increase -6,rega			// window offset
+	arg 0x2205,regb			// length & CONN_REQ PDU
+	fetch 1,mem_le_conn_own_addr_type
+	nsetflag blank,LE_SENDER_ADDR_BIT,regb
+	fetch 1,mem_le_conn_peer_addr_type
+	nsetflag blank,LE_RECEIVER_ADDR_BIT,regb
+	copy regb,pdata
+	store 2,mem_le_txheader
+	fetch 6,mem_le_lap
+	istore 6,contw//own addr
+	fetch 6,mem_le_plap
+	istore 6,contw// peer addr
+	fetch 4,mem_le_access
+	istore 4,contw
+	random pdata
+	istore 2,contw				/* crc init */
+	random pdata
+	istore 1,contw
+	force 2,pdata				/* window size */	
+	istore 1,contw
+	rshift2 rega,pdata
+	istore 2,contw				/* window offset */
+	rshift2 regc,pdata			
+	istore 2,contw				/* conn Interval */
+	bpatchx patch2a_5,mem_patch2a
+	setarg 0					/* slave latency */
+	istore 2,contw
+	fetch 2,mem_le_timeout
+	istore 2,contw
+	fetch 5,mem_le_channel_map
+	istore 5,contw				/* channel map */
+	fetch 1,mem_le_hop
+	arg param_le_sca,temp
+	ior temp,pdata
+	istore 1,contw
+	call le_transmit_norx
+	setarg mem_le_txheader
+	add pdata,18,contr
+	ifetch 3,contr
+	store 3,mem_le_crcinit
+	rtn
+		
+le_init_adv:
+	bpatchx patch2a_6,mem_patch2a
+	disable master
+	branch le_adv_access
+	
+
+
+le_update_param:
+	fetch 1,mem_le_state
+	rtnbit0 lestate_update_param
+	fetch 2,mem_le_event_count
+	fetcht 2,mem_le_instant
+	isub temp,pdata
+	nrtn positive
+	store 2,mem_pdatatemp
+	bpatchx patch2a_7,mem_patch2a
+	fetch 1,mem_le_state
+	set0 lestate_update_param,pdata
+	set0 lestate_got_first_packet,pdata
+	store 1,mem_le_state
+	fetch 4,mem_le_anchor
+	fetcht 2,mem_le_tsniff
+	storet 2,mem_temp
+	isub temp,rega
+	bpatchx patch2b_0,mem_patch2b
+	fetch 1,mem_le_new_param
+	store 1,mem_le_window_size
+	ifetcht 2,contr
+	ifetch 2,contr
+	lshift2 pdata,pdata
+	store 2,mem_le_tsniff
+	lshift2 temp,temp
+	iadd temp,pdata
+	ifetcht 4,contr
+	storet 4,mem_le_slave_latency	// and superTO
+	iadd rega,pdata
+	copy pdata,regab
+	fetch 2,mem_le_tsniff
+	fetcht 2,mem_temp	//last sniff
+	isub temp,pdata		//last sniff - new sniff
+	fetcht 2,mem_pdatatemp
+	imul32 temp,pdata
+	iadd regab,pdata
+	store 4,mem_le_anchor
+	call le_receive_window_size
+	fetch 2,mem_le_superto
+	store 2,mem_le_init_superto
+	rtn
+
+
+le_update_channel_map:
+	bpatchx patch2b_1,mem_patch2b
+	fetch 1,mem_le_state
+	rtnbit0 lestate_update_map
+	fetch 2,mem_le_event_count
+	fetcht 2,mem_le_instant
+	isub temp,pdata
+	nrtn positive
+	fetch 1,mem_le_state
+	set0 lestate_update_map,pdata
+	store 1,mem_le_state
+ 	fetch 5,mem_le_new_map
+	store 5,mem_le_channel_map
+	branch le_calc_channel_map	
+	
+	
+le_acknowledge:
+	bpatchx patch2b_2,mem_patch2b
+	call le_supervision_flush
+	call le_check_wak
+	fetch 1,mem_le_rxbuf
+	isolate1 md,pdata
+	setflag true,mark_ble_rx_md,mark
+	rshift pdata,pdata
+	ixor temp,pdata
+	isolate1 nesn,pdata
+	setflag true,mark_old_packet,mark	/* retransmit */
+	rtnmark1 mark_old_packet
+	fetch 1,mem_le_rxbuf+1			
+	branch le_ack_unenc,blank		/* empty packet, no decryption */
+	fetch 1,mem_le_state
+	bbit0 lestate_encryption,le_ack_unenc
+	call load_sk
+	call le_decrypt
+	nrtn blank
+le_ack_unenc:
+	fetcht 1,mem_le_arq
+	setflip nesn,temp
+	storet 1,mem_le_arq
+	rtn
+
+	
+le_check_wak:
+	bpatchx patch2b_3,mem_patch2b
+	fetcht 1,mem_le_arq
+	isolate0 wak,temp
+	rtn true
+	fetch 1,mem_le_rxbuf
+	lshift pdata,pdata
+	ixor temp,pdata
+	rtnbit0 sn			/* received NESN is same as SN, NAK */
+	set0 wak,temp
+	setflip sn,temp
+	storet 1,mem_le_arq
+	compare 3,temp,3
+	nrtn true
+	fetch 1,mem_le_txpayload
+	beq LL_START_ENC_REQ,le_set_enc
+	fetch 1,mem_le_enc_state
+	beq FLAG_LE_ENC_PAUSE,le_clear_enc
+	rtn
+	
+
+le_set_enc:
+	fetch 1,mem_le_state
+	set1 lestate_encryption,pdata
+	store 1,mem_le_state
+	rtn	
+	
+le_clear_enc:
+	bpatchx patch2b_4,mem_patch2b
+	jam FLAG_LE_ENC_NULL,mem_le_enc_state
+	arg 0,pdata
+	store 4,mem_le_last_mic
+	store 5,mem_le_pcnt_tx
+	set1 39,pdata
+	store 5,mem_le_pcnt_rx
+	fetch 1,mem_le_state
+	set0 lestate_encryption,pdata
+	store 1,mem_le_state
+	rtn
+
+
+le_wait_adv:
+	bpatchx patch2b_5,mem_patch2b
+	call le_next_adv_channel
+	call le_receive_adv
+	fetch 1,mem_le_adv_waitcnt
+	increase 1,pdata
+	store 1,mem_le_adv_waitcnt
+	rtn
+
+
+le_scan:
+	bpatchx patch2b_6,mem_patch2b
+	fetch 1,mem_le_scan_enable
+	rtnne LE_SCAN_ENABLE
+	arg le_scan_interval_timer,queue
+	call timer_check
+	nrtn blank
+	fetch 2,mem_le_scan_interval
+	fetcht 2,mem_le_scan_window
+	isub temp,pdata
+	arg le_scan_interval_timer,queue
+	call timer_init
+	disable master
+	call le_init_adv
+	call le_wait_adv
+	nrtn match
+	bpatchx patch2b_7,mem_patch2b
+	fetch 6,mem_le_rxbuf+2
+	store 6,mem_le_plap
+//	call le_scan_dongle
+
+	fetch 1,mem_le_adv_rcv
+	increase 1,pdata
+	store 1,mem_le_adv_rcv
+	call le_create_conn
+	rtn master
+	call le_send_scan_request
+	nrtn match
+	bpatchx patch2c_0,mem_patch2c
+	fetch 1,mem_le_scanrsp_rcv
+	increase 1,pdata
+	store 1,mem_le_scanrsp_rcv
+	fetch 9,mem_le_rxbuf+8
+	store 9,mem_tmp_buffer
+	rtn
+	
+le_create_conn:
+	bpatchx patch2c_1,mem_patch2c
+	fetch 1,mem_cmd_le_create_conn
+	rtnne hci_cmd_le_create_conn
+	fetch 6,mem_le_plap
+	fetcht 6,mem_le_conn_peer_addr
+	isub temp,null
+	nrtn zero
+	call context_new
+	nrtn zero
+	call le_connect_request
+	call le_init_master
+	bpatchx patch2c_2,mem_patch2c
+	jam 0,mem_hci_cmd
+	jam 0,mem_le_peer_sca
+	jam 0,mem_le_scan_enable
+	jam 0,mem_cmd_le_create_conn
+	branch context_save
+	
+le_scan_check_sender_addr_type:
+	arg 1,rega// sender_addr_type
+	fetch 1,mem_le_rxbuf
+	rtnbit1 LE_SENDER_ADDR_BIT
+	arg 0,rega
+	rtn
+
+
+
+le_prepare_tx:
+	bpatchx patch2c_3,mem_patch2c
+	fetch 1,mem_le_arq
+	rtnbit1 wak
+	call le_check_tx_md
+	call le_fifo_get_first_tx_ptr	//no packet to send
+	branch le_send_empty,blank
+	ifetch 1,contr
+	ifetcht 1,contr
+	copy temp,rega
+	isub rega,pdata
+	arg LE_MAX_PAKET_LEN,temp
+	call not_greater_than
+	copy pdata,temp
+	ifetch 1,contr
+	copy pdata,type
+	copy rega,pdata
+	iadd contr,contr
+	arg mem_le_txpayload,contw
+	copy temp,loopcnt
+	call memcpy
+	call le_update_tx_type
+	call le_send_packet
+	
+	call le_fifo_get_first_tx_ptr
+	ifetch 1,contr
+	copy pdata,rega
+	copy contr,regc
+	ifetcht 1,contr
+	copy temp,regb
+	isub regb,pdata
+	arg LE_MAX_PAKET_LEN,temp
+	call not_greater_than
+	iadd regb,pdata
+	istore 1,regc
+	isub rega,null
+	nrtn zero
+	branch le_fifo_release_first_node
+
+	
+le_check_tx_md:
+	call le_check_continue
+	rtnmark1 mark_ble_tx_md
+	fetch 1,mem_le_configuration
+	bbit0 BIT_BLE_TRANSMIT_PACKET_BY_MD,le_clear_md
+	call le_fifo_get_second_tx_ptr	//no packet to send
+	branch le_clear_md,blank
+	branch le_set_md
+
+	
+le_check_continue:
+	call le_fifo_get_first_tx_ptr	//no packet to send
+	branch le_clear_md,blank
+	ifetch 1,contr				//pdata:length
+	ifetcht 1,contr				//temp:offest
+	isub temp,pdata			//pdata:length - offset
+	sub pdata,LE_MAX_PAKET_LEN,null	
+	branch le_clear_md,positive				//27 > length -offset
+le_set_md:
+	set1 mark_ble_tx_md,mark
+	rtn
+
+le_clear_md:
+	set0 mark_ble_tx_md,mark
+	rtn
+
+le_update_tx_type:
+	copy rega,pdata
+	rtn blank
+	arg LLID_CONTINUE,type
+	rtn
+
+
+le_att_check_notification_enable: // temp ->handle,output-> pdata,output :contr->rega
+	bpatchx patch2c_4,mem_patch2c
+	increase 1,temp
+	call le_att_get_handle_ptr
+	increase -2,contr
+	ifetch 2,contr
+	arg CLIENT_CHARACTERTIC_CONFIGURATION,temp
+	isub temp,null
+	nrtn zero
+	increase 1,contr
+	copy contr,rega
+	ifetch 1,contr
+	rtn
+	
+
+le_send_empty:
+	force 0,temp
+	force 1,type
+	
+le_send_packet:
+	bpatchx patch2c_5,mem_patch2c
+	storet 1,mem_le_txlen
+	fetcht 1,mem_le_arq
+	set1 wak,temp
+	and temp,0xfc,pdata
+	ior type,pdata
+	store 1,mem_le_arq
+	and_into 0x1f,pdata
+	isolate1 mark_ble_tx_md,mark
+	setflag true,md,pdata
+	store 1,mem_le_txheader
+
+	fetch 1,mem_le_txheader
+	compare 1,type,3
+	nbranch le_send_no_txlen,true
+	fetch 1,mem_le_txlen
+	rtn blank
+le_send_no_txlen:	
+	fetch 1,mem_le_state
+	rtnbit0 lestate_encryption
+	call load_sk
+	branch le_encrypt
+
+
+get_lpm_wake_ble_rx_lock:
+	arg wake_lock_ble_rx,queue
+	branch lpm_get_wake_lock
+
+put_lpm_wake_ble_rx_lock:
+	arg wake_lock_ble_rx,queue
+	branch lpm_put_wake_lock
+
+
+le_parse:
+	bpatchx patch2c_6,mem_patch2c
+	rtnmark1 mark_old_packet
+	call le_fifo_check_full
+	nrtn blank
+	fetch 1,mem_le_rxbuf
+	and pdata,0x3,pdata
+	store 1,mem_le_packet_llid
+	ifetch 1,contr
+	and pdata,0x1f,pdata
+	store 1,mem_le_packet_size
+	rtn blank							//empty rtn
+	copy contr,pdata
+	store 2,mem_le_payload_ptr
+	fetch 1,mem_le_packet_llid
+	beq LLID_LE_LL,le_parse_ll
+le_parse_l2cap:
+	call le_check_l2cap_complete
+	nbranch get_lpm_wake_ble_rx_lock,user
+	call put_lpm_wake_ble_rx_lock
+	fetch 2,mem_le_payload_ptr
+	copy pdata,contr
+	ifetch 2,contr	//l2cap len
+	store 2,mem_le_l2cap_size
+	bpatchx patch2c_7,mem_patch2c
+	ifetch 2,contr
+	beq LE_L2CAP_CID_ATT,le_parse_att
+	beq LE_L2CAP_CID_SMP,le_parse_smp
+	beq LE_L2CAP_CID_SIGNAL,le_parse_signaling
+	rtn
+
+
+le_check_l2cap_complete:
+	fetch 1,mem_le_packet_llid
+	beq LLID_START,le_check_l2cap_llid_start
+	beq LLID_CONTINUE,le_check_l2cap_llid_continue
+	rtn
+
+//input: pdata is CID number
+//output: 	if CID is legal ,enable user
+//		if ICD is illegal,disable user 
+le_check_l2cap_CID_legal:
+	call enable_user
+	arg LE_L2CAP_CID_ATT,temp
+	isub pdata,null
+	rtn zero
+	arg LE_L2CAP_CID_SIGNAL,temp
+	isub pdata,null
+	rtn zero
+	arg LE_L2CAP_CID_SMP,temp
+	isub pdata,null
+	rtn zero
+	branch disable_user
+
+	
+le_check_l2cap_llid_start:
+	fetch 2,mem_le_payload_ptr
+	copy pdata,contr
+	ifetch 2,contr
+	store 2,mem_le_l2cap_size
+	ifetch 2,contr			//CID
+	call le_check_l2cap_CID_legal
+	nrtn user
+	fetcht 1,mem_le_packet_size
+	storet 1,mem_le_packet_len_recved
+	fetch 2,mem_le_l2cap_size
+	increase 4,pdata
+	isub temp,null
+	branch enable_user,zero
+	fetch 1,mem_le_packet_size
+	copy pdata,loopcnt
+	arg mem_le_l2capbuf,contw
+	fetch 2,mem_le_payload_ptr
+	copy pdata,contr
+	call memcpy
+	branch disable_user
+
+//no input
+//output: 	if CID is legal ,enable user
+//		if ICD is illegal,disable user 
+le_check_l2cap_continue_legal:
+	call enable_user
+	fetch 1,mem_le_packet_len_recved
+	nrtn blank
+	branch disable_user
+
+le_check_l2cap_llid_continue:
+	call le_check_l2cap_continue_legal
+	nrtn user
+	fetch 1,mem_le_packet_len_recved
+	arg mem_le_l2capbuf,contw
+	iadd contw,rega
+	fetcht 1,mem_le_packet_size
+	iadd temp,pdata
+	store 1,mem_le_packet_len_recved
+	fetch 1,mem_le_packet_size
+	copy pdata,loopcnt
+	copy rega,contw
+	fetch 2,mem_le_payload_ptr
+	copy pdata,contr
+	call memcpy_fast
+	setarg mem_le_l2capbuf
+	store 2,mem_le_payload_ptr		//update ptr->mem_le_l2capbuff
+	fetch 2,mem_le_l2cap_size
+	increase 4,pdata
+	fetcht 1,mem_le_packet_len_recved
+	isub temp,null
+	branch enable_user,zero
+	branch disable_user
+
+
+
+
+	
+le_get_search_att_type:
+	call store_contr
+	arg mem_le_search_att_type_length,contw
+le_get_search_common:	
+	fetch 2,mem_le_l2cap_size
+	increase -5,pdata
+le_get_search_common2:		
+	istore 1,contw
+	copy pdata,loopcnt
+	call get_contr
+	branch memcpy_fast	
+	
+le_get_search_att_uuid:
+	call store_contr
+	arg mem_le_search_uuid_length,contw
+	branch le_get_search_common
+
+
+	/* rega pointers to data, regb is length */
+le_writeatt_cb:
+	fetch 2,mem_cb_att_write
+	branch callback_func
+	
+le_supervision_update:
+	fetcht 4,mem_le_supervision_timer
+	call get_clkbt
+	isub temp,timeup					/* and to 28 bits */
+	deposit timeup
+	fetcht 2,mem_le_superto
+	lshift4 temp,temp
+	lshift temp,temp
+	isub temp,pdata
+	rtn
+	
+le_supervision_flush:
+	call get_clkbt
+	store 4,mem_le_supervision_timer
+	rtn
+
+
+le_adv:
+	jam 36,mem_le_ch_mapped
+	jam 0,mem_le_adv_channel_map_temp
+le_adv_loop:
+	bpatchx patch2d_0,mem_patch2d
+	fetch 1,mem_le_adv_enable
+	rtn blank
+	arg le_adv_interval_timer,queue
+	call timer_check
+	nrtn blank
+	bpatchx patch2d_1,mem_patch2d
+le_adv_loop_tx:
+	disable master
+	enable swfine
+	call le_init_adv
+	call le_next_adv_channel
+	call le_send_adv_ind
+	nbranch le_adv_not_match,match
+	fetch 1,mem_le_req_rcv
+	increase 1,pdata
+	store 1,mem_le_req_rcv
+	fetch 1,mem_le_rxbuf
+	and pdata,0x0f,pdata
+	beq SCAN_REQ,le_send_scan_response
+	beq CONNECT_REQ,le_parse_connect_req
+le_adv_not_match:
+	bpatchx patch2d_2,mem_patch2d
+	random pdata 
+	arg 0x1ff,temp
+	iand temp,pdata
+	add pdata,250,pdata
+	call delay
+	fetch 1,mem_le_adv_channel_map_temp
+	fetcht 1,mem_le_adv_channel_map
+	isub temp,null
+	nbranch le_adv_loop,zero
+	arg le_adv_interval_timer,queue
+	fetch 2,mem_le_adv_interval
+	branch timer_init
+	
+
+le_receive_window_size:
+	bpatchx patch2d_3,mem_patch2d
+	fetch 1,mem_le_peer_sca
+	call le_sca_map
+	fetch 2,mem_le_tsniff
+	imul32 temp,pdata
+	arg 375,temp
+	imul32 temp,pdata
+	arg 100000,temp
+	idiv temp
+	fetch 1,mem_le_window_size
+	arg 20000,temp
+	imul32 temp,pdata
+	iadd temp,pdata
+	store 4,mem_le_transmit_window
+	bpatchx patch2d_4,mem_patch2d
+	fetch 2,mem_rx_window_sniff
+	call wait_div_end
+	quotient temp
+	iadd temp,pdata
+	store 2,mem_le_receive_window
+	rtn
+
+le_parse_connect_req:
+	bpatchx patch2d_5,mem_patch2d
+	fetch 6,mem_le_rxbuf+8
+	fetcht 6,mem_le_lap
+	isub temp,null
+	nrtn zero
+	call le_scan_check_sender_addr_type
+	copy rega,pdata
+	store 1,mem_le_conn_peer_addr_type
+	fetch 7,mem_le_rxbuf+21
+	store 7,mem_tmp_buffer
+	ifetch 8,contr
+	istore 8,contw
+	fetch 6,mem_le_rxbuf+2
+	store 6,mem_le_plap
+	increase 6,contr
+	ifetch 8,contr
+	store 8,mem_le_access 	// and crcinit & window size
+	ifetcht 2,contr				// transmit offset
+	bpatchx patch2d_6,mem_patch2d
+	lshift2 temp,temp			
+	ifetch 2,contr				// connInterval
+	lshift2 pdata,pdata
+	store 2,mem_le_tsniff
+	store 4,mem_le_anchor
+	isub temp,pdata
+	add pdata,-2,clke_bt
+	ifetch 9,contr
+	store 9,mem_le_slave_latency// and super to & channel map
+	bpatchx patch2d_7,mem_patch2d
+	ifetch 1,contr
+	rshift4 pdata,temp
+	rshift temp,temp
+	storet 1,mem_le_peer_sca
+	and_into 0x1f,pdata
+	store 1,mem_le_hop
+	call le_receive_window_size
+	call le_calc_channel_map
+	call le_init_slave
+	call context_new
+	nrtn zero
+	bpatchx patch2e_0,mem_patch2e
+	call calc_clke_offset
+	call le_l2cap_reset_signaling_identifier
+	jam BT_EVT_LE_CONNECTED,mem_fifo_temp
+	call ui_ipc_send_event
+	branch context_save
+	
+
+le_init_attlist_search:
+	bpatchx patch2e_1,mem_patch2e
+	fetch 2,mem_le_search_handle_start
+	iforce regb
+	fetch 2,mem_le_search_handle_end
+	iforce regc
+	fetch 2,mem_ui_le_uuid_table
+	iforce contr
+	enable user
+	rtn
+
+	/* return handle in pdata, blank:end of list, positive:in range */
+le_att_handle_inrange:
+	ifetch 2,contr
+	rtn blank
+	isub regb,null			/* less than start ? */
+	nrtn positive
+	isub regc,null			/* greater than end ? */
+	rtn zero
+	branch le_att_handle_blank,positive
+	force 1,null
+	rtn
+le_att_handle_blank:
+	force 0,pdata
+	rtn
+
+
+	/* handle in temp, return pointer in contr to length, blank not found */
+le_att_get_handle_ptr:
+	call le_att_get_handle_ptr2
+	branch le_att_get_handle_ptr_found,zero
+	rtn
+	
+le_att_get_handle_ptr2:
+	bpatchx patch2e_2,mem_patch2e
+	fetch 2,mem_ui_le_uuid_table
+	iforce contr
+le_att_get_handle_loop1:
+	ifetch 2,contr
+	rtn blank
+	isub temp,null
+	rtn zero
+	ifetch 1,contr
+	iadd contr,contr	
+	ifetch 1,contr			// length  
+	iadd contr,contr
+	branch le_att_get_handle_loop1
+le_att_get_handle_ptr_found:
+	ifetch 1,contr
+	iadd contr,contr	
+	rtn	
+
+
+
+le_att_get_short_uuid_ptr:
+	bpatchx patch2e_3,mem_patch2e
+	fetch 2,mem_ui_le_uuid_table
+	iforce contr
+le_att_get_short_uuid_loop:
+	ifetch 2,contr
+	rtn blank
+	ifetch 1,contr
+	iadd contr,contr
+	increase -2,contr
+	ifetch 2,contr
+	isub temp,null
+	rtn zero
+	ifetch 1,contr			 
+	iadd contr,contr
+	branch le_att_get_short_uuid_loop	
+
+
+
+le_att_get_handle_info_from_ptr:
+	fetch 2, mem_le_cur_attlist_start_ptr
+	branch le_att_get_handle_info_fast
+
+le_att_get_handle_info:
+	bpatchx patch2e_4,mem_patch2e
+	fetch 2,mem_ui_le_uuid_table
+le_att_get_handle_info_fast:
+	iforce contr
+	copy temp,rega
+le_att_get_handle_loop:
+	ifetch 2,contr
+	branch le_att_unfind_handle,blank
+	isub rega,null
+	branch le_att_finded_handle, zero
+	ifetch 1,contr			// length  
+	iadd contr,contr	
+	ifetch 1,contr			//length 
+	iadd contr,contr
+	branch le_att_get_handle_loop
+le_att_unfind_handle:
+	branch disable_blank
+
+le_att_finded_handle:
+	ifetch 1,contr
+	store 1,mem_le_cur_uuid_length
+	copy pdata,loopcnt
+	arg mem_le_cur_uuid,contw
+	call memcpy_fast
+	ifetch 1,contr
+	store 1,mem_le_curr_att_len
+	call store_contr
+	branch enable_blank
+
+	
+le_modified_name:
+	bpatchx patch2e_5,mem_patch2e
+	call le_modified_name_att_list
+	branch le_modified_name_adv
+
+le_modified_name_att_list:
+	arg UUID_CHRCTR_DEVICE_NAME,temp
+	call le_att_get_short_uuid_ptr
+	rtn blank
+	ifetch 1,contr						// attribute length
+	copy contr,contw
+	fetcht 1,mem_le_name_len
+	copy temp,loopcnt
+	isub temp,null
+	nbranch le_name_length_longer_than_att,positive
+	isub temp,temp
+	arg mem_le_name,contr
+	call memcpy
+	copy temp,loopcnt
+	ncall memcpy_empty,zero
+	rtn
+le_name_length_longer_than_att:
+	copy pdata,loopcnt
+	arg mem_le_name,contr
+	branch memcpy_fast
+
+
+le_modified_name_adv:
+	arg mem_le_adv_data_len+32,regc
+	arg mem_le_adv_data,rega
+	call le_modified_name_adv_and_scan
+	setarg 0
+	setflag user,0,pdata
+	store 1,mem_pdatatemp
+	arg mem_le_scan_data_len+32,regc
+	arg mem_le_scan_data,rega
+	call le_modified_name_adv_and_scan
+	rtn user
+	fetch 1,mem_pdatatemp
+	branch assert,blank
+	rtn
+
+
+le_modified_name_adv_and_scan:
+	bpatchx patch2e_6,mem_patch2e
+	call enable_user
+	call clear_temp_block
+	arg 0,regb	//current length
+	arg mem_le_data_temp,contw
+	call le_modified_name_adv_loop
+	fetch 1,mem_le_name_len
+	add pdata,1,temp
+	iadd regb,rega	
+	increase 2,rega
+	sub rega,0x1f,null
+	nbranch le_modified_name_adv_and_scan_name_overflow,positive
+	istoret 1,contw		//store ble name length
+	arg GAP_ADTYPE_LOCAL_NAME_COMPLETE,temp
+	istoret 1,contw		//store ble name type
+	iforce loopcnt
+	call memcpy_fast
+	copy rega,regb
+le_modified_name_adv_and_scan_store_data:
+	deposit regb
+	store 1,mem_le_data_len_temp
+	arg mem_le_data_len_temp,contr
+	setarg -32
+	iadd regc,contw
+	branch memcpy32
+
+le_modified_name_adv_and_scan_name_overflow:
+	call disable_user
+	branch le_modified_name_adv_and_scan_store_data
+	
+le_modified_name_adv_loop:
+	ifetch 1,rega		//pdata:length
+	rtn blank			//length is zero,ending find
+	pincrease 1		//length += 1
+	ifetcht 1,contr		//pdata:type
+	sub temp,GAP_ADTYPE_LOCAL_NAME_COMPLETE,null
+	branch le_modified_name_adv_found_name,zero
+	iadd regb,regb	
+	copy rega,contr
+	iforce loopcnt
+	call memcpy_fast
+	copy contr,rega
+le_modified_name_adv_loop2:
+	deposit rega
+	isub regc,null
+	rtn positive
+	branch le_modified_name_adv_loop
+
+le_modified_name_adv_found_name:
+	iadd rega,rega
+	branch le_modified_name_adv_loop2
+
+
+memcpy_empty:
+	setarg SPACE
+	istore 1,contw
+	loop memcpy_empty
+	rtn
+
+	
+le_lpm_set_mult:
+	bpatchx patch2e_7,mem_patch2e
+	disable wake
+	branch le_lpm_set_mult_attempt,attempt
+	nbranch le_lpm_lost,match
+le_lpm_set_mult_attempt:
+	call lpm_match
+	fetch 2,mem_rx_window_sniff
+	store 2,mem_le_receive_window
+
+	nbranch lpm_mult_short,match
+	bmark1 mark_old_packet,lpm_mult_short
+
+	fetch 1,mem_le_packet_size
+	nbranch lpm_mult_short,blank		// rx not empty, short interval
+	fetch 1,mem_le_txlen
+	nbranch lpm_mult_short,blank		// tx not empty, short interval
+	
+	fetch 1,mem_le_configuration
+	bbit1 BIT_BLE_SHORT_MULT,lpm_mult_short	//check flag,if flag is 1,always short mult
+	
+	fetch 1,mem_le_state
+	bbit1 lestate_update_param,lpm_mult_short
+	branch lpm_mult_wait_timeout
+	
+le_lpm_lost:
+	fetcht 2,mem_rx_window_sniff
+	rshift temp,temp
+	fetch 2,mem_le_receive_window
+	iadd temp,pdata
+	store 2,mem_le_receive_window
+	branch lpm_lost
+
+///////////////////////////////BLE CONFIG//////////////////////////////////////////
+le_set_config_fixed_tk:
+	arg BIT_BLE_PASSKEY_FIXED_KEY,queue
+	branch le_set_config
+
+le_clr_config_fixed_tk:
+	arg BIT_BLE_PASSKEY_FIXED_KEY,queue
+	branch le_clr_config
+
+le_set_config_fixed_ltk:
+	arg BIT_BLE_PAIRING_FIXED_LTK,queue
+	branch le_set_config
+
+le_clr_config_fixed_ltk:
+	arg BIT_BLE_PAIRING_FIXED_LTK,queue
+	branch le_clr_config
+
+le_set_config_more_data:
+	arg BIT_BLE_TRANSMIT_PACKET_BY_MD,queue
+	branch le_set_config
+
+le_clr_config_more_data:
+	arg BIT_BLE_TRANSMIT_PACKET_BY_MD,queue
+	branch le_clr_config
+
+le_set_config_read_authentication:
+	arg BIT_BLE_READ_AUTH,queue
+	branch le_set_config
+
+le_clr_config_read_authentication:
+	arg BIT_BLE_READ_AUTH,queue
+	branch le_clr_config
+
+le_set_config_write_authentication:
+	arg BIT_BLE_WRITE_AUTH,queue
+	branch le_set_config
+
+le_clr_config_write_authentication:
+	arg BIT_BLE_WRITE_AUTH,queue
+	branch le_clr_config
+
+le_set_config_short_mult:
+	arg BIT_BLE_SHORT_MULT,queue
+	branch le_set_config
+
+le_clr_config_short_mult:
+	arg BIT_BLE_SHORT_MULT,queue
+	branch le_clr_config
+
+
+le_set_config:
+	fetch 1,mem_le_configuration
+	qset1 pdata
+	store 1,mem_le_configuration
+	rtn
+
+le_clr_config:
+	fetch 1,mem_le_configuration
+	qset0 pdata
+	store 1,mem_le_configuration
+	rtn
+
+le_set_fixed_ltk:
+	setarg 0x112233
+	store 3,mem_le_fixed_ltk
+	setarg 0x445566
+	istore 3,contw
+	setarg 0x778899
+	istore 3,contw
+	setarg 0x001122
+	istore 3,contw
+	setarg 0x334455
+	istore 3,contw
+	setarg 0x66
+	istore 1,contw
+	rtn
+
+
+le_set_justwork:
+	setarg 0x01000302
+	store 4,mem_le_pres
+	setarg 0x010010
+	store 3,mem_le_pres_max_keysize
+	jam 1,mem_le_pairing_mode
+	rtn
+
+/////////////////////////////////////////////////////////////////////////
+
+le_fifo_malloc_tx_empty:
+	arg 0,rega
+	arg LLID_EMPTY,type
+	branch le_fifo_malloc_tx
+
+
+//rega:len regb:ll opcode
+le_fifo_malloc_tx_ll:
+	arg LLID_LE_LL,type
+	call le_fifo_malloc_tx
+	copy regb,pdata
+	istore 1,contw
+	rtn
+	
+
+//rega:len regb:cid
+le_fifo_malloc_tx_l2cap:
+	force LLID_L2CAP_START,type
+	increase 4,rega
+	call le_fifo_malloc_tx
+	increase -4,rega
+	copy rega,pdata
+	istore 2,contw
+	copy regb,pdata
+	istore 2,contw
+	rtn
+
+
+//rega:len type:llid
+le_fifo_malloc_tx:
+	sub rega,240,null			//check max len
+	nbranch assert,positive
+	fetch 1,mem_le_tx_buff_used
+	arg 1,temp
+	arg LE_TX_BUFF_COUNT,loopcnt
+le_fifo_malloc_tx_loop:
+	iand temp,null
+	branch le_fifo_malloc_tx_got_empty,zero
+	lshift temp,temp
+	loop le_fifo_malloc_tx_loop
+	branch assert				//no empty buff
+le_fifo_malloc_tx_got_empty:
+	ixor temp,pdata
+	store 1,mem_le_tx_buff_used
+	sub loopcnt,LE_TX_BUFF_COUNT,pdata
+	lshift4 pdata,pdata
+	lshift4 pdata,pdata
+	arg mem_le_tx_buffer0,temp
+	iadd temp,temp
+le_fifo_tx_find_empty_ptr:
+	arg 0,loopcnt
+	arg mem_le_tx_ptr0,contr
+le_fifo_tx_find_empty_ptr_loop:
+	ifetch 2,contr
+	branch le_fifo_tx_found_empty_ptr,blank
+	copy loopcnt,pdata
+	increase 1,loopcnt
+	bne LE_TX_BUFF_COUNT,le_fifo_tx_find_empty_ptr_loop
+	branch assert
+
+	
+le_fifo_tx_found_empty_ptr:
+	increase -2,contr
+	istoret 2,contr
+	copy temp,contw
+	copy rega,pdata
+	istore 1,contw				//lengh
+	setarg 0
+	istore 1,contw				//offset
+	copy type,pdata
+	istore 1,contw				//LLID
+	rtn
+
+
+
+le_fifo_get_first_tx_ptr:
+	fetch 2,mem_le_tx_ptr0
+	copy pdata,contr
+	rtn
+
+le_fifo_get_second_tx_ptr:
+	fetch 2,mem_le_tx_ptr1
+	copy pdata,contr
+	rtn
+
+le_fifo_get_last_tx_ptr:
+	call le_fifo_get_last_tx_ptr0
+	copy pdata,contr
+	rtn
+le_fifo_get_last_tx_ptr0:
+	fetch 2,mem_le_tx_ptr3
+	nrtn blank
+	fetch 2,mem_le_tx_ptr2
+	nrtn blank
+	fetch 2,mem_le_tx_ptr1
+	nrtn blank
+	fetch 2,mem_le_tx_ptr0
+	rtn
+
+le_fifo_get_first_l2cap_ptr:
+	call le_fifo_get_first_tx_ptr
+	increase 3,contr
+	rtn
+
+le_fifo_get_first_att_ptr:
+	call le_fifo_get_first_tx_ptr
+	increase 7,contr
+	rtn
+
+le_fifo_get_last_att_ptr:
+	call le_fifo_get_last_tx_ptr
+	increase 7,contr
+	rtn
+
+le_fifo_get_last_l2cap_ptr:
+	call le_fifo_get_last_tx_ptr
+	increase 3,contr
+	rtn
+
+	
+
+le_fifo_check_full:
+	fetch 2,mem_le_tx_ptr3
+	rtn
+
+
+le_fifo_check_nearly_full:
+	fetch 2,mem_le_tx_ptr2
+	rtn
+
+	
+le_fifo_check_empty:
+	fetch 2,mem_le_tx_ptr0
+	rtn
+
+
+le_fifo_release_first_node:
+	fetch 2,mem_le_tx_ptr0
+	arg mem_le_tx_buffer0,temp
+	isub temp,pdata
+	rshift4 pdata,pdata
+	rshift4 pdata,queue
+	fetch 1,mem_le_tx_buff_used
+	qset0 pdata
+	store 1,mem_le_tx_buff_used
+	arg 0,loopcnt
+le_fifo_release_first_node_loop:
+	lshift loopcnt,pdata
+	arg mem_le_tx_ptr1,temp
+	iadd temp,temp
+	ifetch 2,temp
+	increase -2,temp
+	istore 2,temp
+	copy loopcnt,pdata
+	increase 1,loopcnt
+	bne LE_TX_BUFF_UPDATE_LOOPCNT,le_fifo_release_first_node_loop
+	setarg 0
+	istore 2,temp
+	rtn
+
+
+
+
+
+le_parse_att:
+	ifetch 3,contr
+	store 3,mem_le_att_opcode
+	beq ATTOP_EXCHANGE_MTU_REQUEST,le_parse_att_exchange_mtu_request
+	beq ATTOP_EXCHANGE_MTU_RESPONSE,le_parse_att_exchange_mtu_response
+	beq ATTOP_FIND_INFORMATION_REQUEST,le_parse_att_find_information_request
+	beq ATTOP_FIND_BY_TYPE_VALUE_REQUEST,le_parse_att_find_by_type_value_request
+	beq ATTOP_READ_BY_TYPE_REQUEST,le_parse_att_read_by_type_request
+	beq ATTOP_READ_REQUEST,le_parse_att_read_request
+	beq ATTOP_READ_BLOB_REQUEST,le_parse_att_read_blob_request
+	beq ATTOP_READ_BY_GROUP_TYPE_REQUEST,le_parse_att_read_by_group_type_request
+	beq ATTOP_WRITE_REQUEST,le_parse_att_write_request
+	beq ATTOP_PREPARE_WRITE_REQUEST,le_parse_att_prepare_write_request
+	beq ATTOP_EXECUTE_WRITE_REQUEST,le_parse_att_execute_write_request
+	beq ATTOP_WRITE_COMMAND,le_parse_att_write_command
+	rtn
+
+
+le_send_att_exchange_mtu_requset:
+	force 3,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_EXCHANGE_MTU_REQUEST
+	istore 1,contw
+	fetch 2,mem_le_local_mtu
+	istore 2,contw
+	rtn
+
+
+le_parse_att_exchange_mtu_request:
+	call le_parse_att_exchange_mtu_response
+le_send_att_exchange_mtu_response:
+	force 3,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_EXCHANGE_MTU_RESPONSE
+	istore 1,contw
+	fetch 2,mem_le_local_mtu
+	istore 2,contw
+	rtn
+
+le_parse_att_exchange_mtu_response:
+	rshift8 pdata,pdata
+	store 2,mem_le_remote_mtu
+	rtn
+
+le_parse_att_find_information_request:
+	call le_get_search_handle_start_end_common
+	call enable_user
+	branch le_send_att_find_information_response
+	
+le_send_att_find_information_response:
+	arg 3,timeup
+	call le_init_attlist_search
+le_send_att_find_information_res_loop:
+	call le_att_handle_inrange
+	branch le_send_att_find_information_res_end,blank
+	nbranch le_send_att_find_information_res_next,positive
+	increase -2,contr
+	call store_contr
+	call get_contw
+	nbranch le_send_att_find_information_res_store_info,user
+	call push_stack_rega_b_c
+	call disable_user
+	force 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	call pop_stack_rega_b_c
+	setarg ATTOP_FIND_INFORMATION_RESPONSE
+	istore 1,contw
+	setarg UUID_SIZE_16BIT
+	istore 1,contw
+le_send_att_find_information_res_store_info:
+	call get_contr
+	ifetch 2,contr
+	istore 2,contw
+	ifetch 1,contr
+	copy pdata,loopcnt
+	call memcpy
+	call store_contw
+	increase -1,timeup
+	branch le_send_att_find_information_res_end,zero
+le_send_att_find_information_res_cont:
+	ifetch 1,contr
+	iadd contr,contr
+	branch le_send_att_find_information_res_loop
+le_send_att_find_information_res_next:
+	ifetch 1,contr
+	iadd contr,contr
+	branch le_send_att_find_information_res_cont
+le_send_att_find_information_res_end:
+	branch le_send_att_error_response_notfound,user
+	branch le_send_auto_len_by_mem
+
+
+le_parse_att_find_by_type_value_request:
+	call le_get_search_handle_start_end_common
+	ifetch 2,contr
+	store 2,mem_le_search_uuid
+	call store_contr
+	arg mem_le_search_att_type_length,contw
+	fetch 2,mem_le_l2cap_size
+	increase -7,pdata
+	call le_get_search_common2
+	branch le_send_att_find_by_type_value_response
+
+
+le_start_end_handle_check_1:
+	disable user
+	fetcht 2,mem_le_search_handle_start
+	fetch 2,mem_le_search_handle_end
+	isub temp,null
+	nbranch le_start_end_handle_check_1_fail,positive
+	deposit temp
+	rtnne 0
+le_start_end_handle_check_1_fail:
+	enable user
+	jam ATT_ERR_INVALID_HANDLE,mem_le_err_code
+	branch le_send_att_error_response
+
+
+le_send_att_find_by_type_value_response:
+	call le_start_end_handle_check_1
+	rtn user
+	fetcht 2,mem_le_search_uuid
+	setarg UUID_GATT_PRIMARY_SERVICE
+	isub temp,null
+	branch le_send_att_find_by_type_value_res_primary,zero
+	branch le_send_att_error_response_notfound
+	
+
+le_send_att_find_by_type_value_res_primary:
+	jam LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND,mem_le_search_res
+	fetcht 2,mem_le_search_handle_start
+	storet 2,mem_temp
+	call le_att_get_handle_info
+	nbranch le_send_att_error_response_notfound,blank
+le_send_att_find_primary_search_loop:
+	fetcht 2,mem_temp
+	call le_att_get_handle_info
+	nbranch le_send_att_error_response_notfound2,blank	
+	copy contr,rega
+	fetch 1,mem_le_curr_att_len
+	copy pdata,loopcnt
+	fetcht 1,mem_le_search_att_type_length
+	isub temp,null
+	nbranch le_send_att_find_primary_search_loop1,zero
+	arg mem_le_search_att_type,regb
+	call string_compare
+
+	branch le_send_att_find_primary_search_end_start_handle_found,zero
+
+	fetch 2,mem_le_cur_uuid
+	fetcht 2,mem_le_search_uuid
+	isub temp,null
+	branch le_send_att_find_primary_search_end_ending_handle_found,zero
+le_send_att_find_primary_search_loop1:
+	fetch 2,mem_temp
+	increase 1,pdata
+	store 2,mem_temp
+	branch le_send_att_find_primary_search_loop
+
+le_send_att_error_response_notfound2:
+	fetch 1,mem_le_search_res
+	beq LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE,le_send_att_find_primary_search_end_ending_handle_found
+	branch le_send_att_error_response_notfound
+
+	
+le_send_att_find_primary_search_end_start_handle_found:
+	fetch 2,mem_le_cur_uuid
+	fetcht 2,mem_le_search_uuid
+	isub temp,null
+	nbranch  le_send_att_find_primary_search_loop1,zero
+	jam LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE,mem_le_search_res
+//	copy rega,temp
+	fetcht 2,mem_temp
+	storet 2,mem_le_cur_handle_start
+	branch le_send_att_find_primary_search_loop1
+
+le_send_att_find_primary_search_end_ending_handle_found:
+	fetch 1,mem_le_search_res
+	beq LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND,le_send_att_find_primary_search_loop1
+	jam LE_FIND_BY_TYPE_VAL_RES_FOUND_ENDING_HANDLE,mem_le_search_res
+	fetcht 2,mem_temp
+	increase -1,temp
+	storet 2,mem_le_cur_handle_end
+	
+le_send_att_find_primary_search_end:
+	arg 5,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_FIND_BY_TYPE_VALUE_RESPONSE
+	istore 1,contw
+	fetch 2,mem_le_cur_handle_start
+	istore 2,contw
+	fetch 2,mem_le_cur_handle_end
+	istore 2,contw
+	rtn
+
+
+
+le_parse_att_read_by_type_request:
+	call le_get_search_handle_start_end_common
+	call le_get_search_att_uuid
+	branch le_send_att_read_by_type_response
+	
+le_send_att_read_by_type_response:
+	fetcht 2,mem_le_search_handle_start
+	storet 2,mem_temp
+	call le_init_attlist_search
+	call le_att_get_handle_ptr2
+	increase -2,contr
+	copy contr,pdata
+	store 2,mem_le_cur_attlist_start_ptr
+
+	fetcht 2,mem_le_search_uuid
+	setarg UUID_CHRCTR_DEVICE_NAME
+	isub temp,null
+	branch le_send_att_read_by_type_res_device_name,zero
+	setarg UUID_GATT_CHARACTERISTIC
+	isub temp,null
+	nbranch le_send_att_read_by_type_res_not_characteristic,zero
+	arg 2,timeup
+le_send_att_read_by_type_response_loop:
+	call le_att_check_handle_end
+	nbranch le_send_att_read_by_type_response_end,positive
+	fetcht 2,mem_temp
+	call le_att_get_handle_info_from_ptr
+	beq 1,le_send_att_read_by_type_response_end
+	call le_att_same_uuid
+	nbranch le_send_att_read_by_type_response_next_handle,zero
+	nbranch le_send_att_read_by_type_res_found_next,user
+	disable user
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BY_TYPE_RESPONSE
+	istore 1,contw
+	copy contw,alarm
+	increase 1,contw
+	
+	call le_send_att_read_by_type_write_properties
+	call le_att_next_handle
+	call le_att_get_handle_info_from_ptr
+	call le_send_att_read_by_type_write_uuid
+	fetch 1,mem_le_cur_uuid_length
+	increase 5,pdata
+	istore 1,alarm
+	fetch 1,mem_le_cur_uuid_length
+	beq 16,le_send_att_read_by_type_response_end
+	increase -1,timeup
+	branch le_send_att_read_by_type_response_end,zero
+le_send_att_read_by_type_response_next_handle:
+	call le_att_next_handle
+	branch le_send_att_read_by_type_response_loop
+le_send_att_read_by_type_response_end:
+	branch le_send_att_error_response_notfound,user
+	branch le_send_auto_len_by_mem
+
+le_send_att_read_by_type_res_found_next:
+	call le_store_att_record
+	call le_att_next_handle
+	call le_att_get_handle_info_from_ptr
+	fetch 1,mem_le_cur_uuid_length
+	beq 16,le_send_att_read_by_type_response_end
+	
+	call get_contw
+	fetch 2,mem_temp
+	increase -1,pdata
+	istore 2,contw
+	call le_write_att_record_common
+	call le_send_att_read_by_type_write_uuid
+	increase -1,timeup
+	branch le_send_att_read_by_type_response_end,zero
+	branch le_send_att_read_by_type_response_next_handle
+
+	
+le_send_att_read_by_type_write_properties:
+	fetch 2,mem_temp
+	istore 2,contw
+	
+	fetch 1,mem_le_curr_att_len
+	copy pdata,loopcnt
+	call get_contr
+	call memcpy_fast
+	branch store_contw
+le_send_att_read_by_type_write_uuid:
+	call get_contw
+	fetch 2,mem_temp
+	istore 2,contw
+	call store_contw
+	fetch 1,mem_le_cur_uuid_length
+	copy pdata,loopcnt
+	call get_contw	
+	call get_contr
+	isub loopcnt,contr
+	increase -1,contr
+	call memcpy_fast
+	branch store_contw
+
+
+
+le_send_att_read_by_type_res_not_characteristic:
+	fetcht 2,mem_le_search_handle_start
+	storet 2,mem_temp
+le_send_att_read_by_type_res_not_char_loop:
+	call le_att_check_handle_end
+	nbranch le_send_att_error_response_notfound,positive
+	call le_att_get_handle_info_from_ptr
+	beq 1,le_send_att_error_response_notfound
+	call le_att_same_uuid
+	nbranch le_send_att_read_by_type_res_not_char_next,zero
+
+le_send_att_read_by_type_res_not_char_common:
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BY_TYPE_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_curr_att_len
+	copy pdata,loopcnt
+	increase 2,pdata
+	istore 1,contw
+	fetch 2,mem_temp
+	istore 2,contw
+	call get_contr
+	call memcpy_fast
+	call store_contw
+	branch le_send_auto_len_by_mem
+	
+le_send_att_read_by_type_res_not_char_next:
+ 	call le_att_next_handle
+	branch le_send_att_read_by_type_res_not_char_loop
+
+
+le_send_att_read_by_type_res_device_name:
+	arg UUID_CHRCTR_DEVICE_NAME,temp
+	call le_att_get_short_uuid_ptr
+	rtn blank
+	increase -5,contr // point to handle
+	ifetch 2,contr		
+	store 2,mem_temp
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BY_TYPE_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_name_len
+	copy pdata,loopcnt
+	increase 2,pdata
+	istore 1,contw
+	fetch 2,mem_temp
+	istore 2,contw
+	arg mem_le_name,contr
+	call memcpy_fast
+	call store_contw
+	branch le_send_auto_len_by_mem
+
+
+
+le_parse_att_read_request:
+	fetcht 2,mem_le_att_handle
+	fetch 1,mem_le_configuration
+	bbit1 BIT_BLE_READ_AUTH,le_send_att_read_response_check_auth
+
+le_send_att_read_response:
+	call le_att_get_handle_ptr
+	branch le_send_att_error_response_notfound,blank
+	increase -2,contr
+	ifetch 2,contr
+	arg UUID_CHRCTR_DEVICE_NAME,temp
+	isub temp,null
+	branch le_send_device_name,zero
+	ifetch 1,contr
+	sub pdata,22,null
+	branch le_send_att_read_response_less,positive
+	force 22,pdata
+le_send_att_read_response_less:
+	copy pdata,regc
+	call store_contr
+	add regc,1,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_RESPONSE
+	istore 1,contw
+	copy regc,loopcnt
+	call get_contr
+	branch memcpy
+
+le_send_device_name:
+	call store_contr
+	fetch 1,mem_le_name_len
+	add pdata,1,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_name_len
+	copy pdata,loopcnt
+	arg mem_le_name,contr
+	branch memcpy
+	
+	
+le_send_att_read_response_check_auth:
+	fetch 2,mem_le_pairing_handle
+	isub temp,null
+	nbranch le_send_att_read_response,zero
+//le_send_att_read_response_error_insufficient_auth:
+	call le_check_encrypt_state
+	nbranch le_send_att_read_response,user
+	jam ATT_ERR_INSUFFICIENT_AUTHENTICATION,mem_le_err_code
+	branch le_send_att_error_response
+
+
+le_parse_att_read_blob_request:
+	ifetch 2,contr
+	store 2,mem_le_att_offset
+le_send_att_read_blob_response:
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BLOB_RESPONSE
+	istore 1,contw
+	fetch 2,mem_le_att_offset
+	iforce rega
+	fetcht 2,mem_le_att_handle
+	call le_att_get_handle_ptr 
+	branch le_send_att_error_response_notfound,blank
+	ifetch 1,contr
+	isub rega,loopcnt
+	nbranch le_send_att_error_response_notfound,positive
+	sub loopcnt,22,null
+	branch le_send_att_read_blob_response_less,positive
+	force 22,loopcnt
+le_send_att_read_blob_response_less:
+	deposit rega
+	iadd contr,contr
+	call memcpy_fast
+	call store_contw
+	branch le_send_auto_len_by_mem
+
+
+le_parse_att_read_by_group_type_request:
+	call le_get_search_handle_start_end_common
+ 	call le_get_search_att_type
+	branch le_send_att_read_by_group_type_response
+	
+//mem_le_search_att_type
+//mem_le_search_handle_start
+//mem_le_search_handle_end
+le_send_att_read_by_group_type_response:
+	arg 2,timeup
+	fetcht 2,mem_le_search_handle_start
+//	arg 23,pdata
+//	isub temp,null
+//	call ice_break,zero
+	storet 2,mem_temp
+	call le_init_attlist_search
+	call le_att_get_handle_ptr2
+	increase -2,contr
+	copy contr,pdata
+	store 2,mem_le_cur_attlist_start_ptr
+le_send_att_read_by_group_type_response_loop:
+	call le_att_check_handle_end
+	nbranch le_send_att_read_by_group_type_end0,positive
+	fetcht 2,mem_temp
+	call le_att_get_handle_info_from_ptr
+	beq 1,le_send_att_read_by_group_type_end1
+
+	call le_att_same_type
+	nbranch le_send_att_read_by_group_type_next_handle,zero
+	copy timeup,pdata
+	beq 0,le_send_att_read_by_group_type_end1
+	nbranch le_send_att_read_by_group_type_store_write_record,user		//un first
+	disable user
+	//first att uuid
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BY_GROUP_TYPE_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_curr_att_len
+	increase 4,pdata
+	istore 1,contw
+	call store_contw
+	branch le_send_att_read_by_group_type_store_record
+le_send_att_read_by_group_type_store_write_record:
+	fetch 1,mem_le_curr_att_len
+	beq 16,le_send_att_read_by_group_type_end1
+	fetch 2,mem_temp
+	increase -1,pdata
+	store 2,mem_le_cur_handle_end
+	call le_write_att_record
+le_send_att_read_by_group_type_store_record:
+	fetch 2,mem_temp
+	store 2,mem_le_cur_handle_start
+	call le_store_att_record
+	increase -1,timeup
+//	branch le_send_att_read_by_group_type_last_find,zero		
+le_send_att_read_by_group_type_next_handle:
+	call le_att_next_handle
+	branch le_send_att_read_by_group_type_response_loop
+
+le_send_att_read_by_group_type_end0:	//> att handle end
+	fetch 2,mem_temp
+	store 2,mem_le_cur_handle_end
+	branch le_send_att_read_by_group_type_end_common
+le_send_att_read_by_group_type_end1:	//>att max list handle or diff len 
+	fetch 2,mem_temp
+	increase -1,pdata
+	store 2,mem_le_cur_handle_end
+	branch le_send_att_read_by_group_type_end_common
+le_send_att_read_by_group_type_end_common:
+	branch le_send_att_error_response_notfound,user
+	call le_write_att_record
+	branch le_send_auto_len_by_mem
+
+
+
+
+le_parse_att_write_request:
+	copy contr,rega
+	fetch 2,mem_le_l2cap_size
+	add pdata,-3,regb
+	call le_writeatt_cb
+le_send_att_write_response_check_auth:
+	fetch 1,mem_le_configuration
+	bbit0 BIT_BLE_WRITE_AUTH,le_send_att_write_response
+	
+	fetcht 2,mem_le_att_handle
+	fetch 2,mem_le_pairing_handle
+	isub temp,null
+	nbranch le_send_att_write_response,zero
+	call le_check_encrypt_state
+	nbranch le_send_att_write_response,user
+	jam ATT_ERR_INSUFFICIENT_AUTHENTICATION,mem_le_err_code
+	branch le_send_att_error_response
+
+le_send_att_write_response:
+	force 1,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_WRITE_RESPONSE
+	istore 1,contw
+	rtn
+
+le_check_encrypt_state:
+	call disable_user
+	fetch 1,mem_le_pairing_mode
+	rtneq LE_PAIRING_MODE_NONE
+	fetch 1,mem_context
+	rtnbit1 lestate_encryption
+	branch enable_user
+
+
+le_parse_att_prepare_write_request:
+	add contr,2,rega
+	fetch 2,mem_le_l2cap_size
+	add pdata,-5,regb
+	call le_writeatt_cb
+	branch le_send_att_prepare_write_response
+
+
+le_send_att_prepare_write_response:
+	fetch 2,mem_le_l2cap_size
+	copy pdata,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_PREPARE_WRITE_RESPONSE
+	istore 1,contw
+	fetch 2,mem_le_att_handle
+	istore 2,contw
+	fetch 2,mem_le_l2cap_size
+	add pdata,-5,loopcnt	
+	fetch 2,mem_le_payload_ptr
+	add pdata,7,contr
+	ifetch 2,contr		//offset
+	istore 2,contw
+	branch memcpy_fast
+
+
+
+le_parse_att_execute_write_request:
+
+le_send_att_execute_write_response:
+	force 1,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_EXECUTE_WRITE_RESPONSE
+	istore 1,contw
+	rtn
+
+
+
+le_parse_att_write_command:
+	copy contr,rega
+	fetch 2,mem_le_l2cap_size
+	add pdata,-3,regb
+	branch le_writeatt_cb
+
+
+
+//rga:len temp:handle;rgea,regb,regc already used
+le_att_malloc_tx_notify:
+	copy temp,regc
+	increase 3,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	increase -3,rega
+	setarg ATTOP_HANDLE_VALUE_NOTIFICATION
+	istore 1,contw
+	copy regc,temp
+	istoret 2,contw
+	rtn
+
+//rga:len temp:handle;rgea,regb,regc already used
+le_att_malloc_tx_indication:
+	copy temp,regc
+	increase 3,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	increase -3,rega
+	setarg ATTOP_HANDLE_VALUE_INDICATION
+	istore 1,contw
+	copy regc,temp
+	istoret 2,contw
+	rtn
+
+
+///////////////////////////ATT common function////////////////////////////////////
+
+le_send_att_error_response_notfound:	
+	jam ATT_ERR_ATTRIBUTE_NOT_FOUND,mem_le_err_code
+le_send_att_error_response:	
+	force 5,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_ERROR_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_att_opcode
+	istore 1,contw
+	fetch 2,mem_le_att_handle
+	istore 2,contw
+	fetch 1,mem_le_err_code
+	istore 1,contw
+	rtn
+
+
+le_fifo_malloc_tx_l2cap_gatt:
+	force LE_L2CAP_CID_ATT,regb
+	branch le_fifo_malloc_tx_l2cap
+
+
+le_att_next_handle:
+	fetcht 2,mem_temp
+	increase 1,temp
+	storet 2,mem_temp
+	rtn
+
+le_att_check_handle_end:
+	fetcht 2,mem_temp
+	fetch 2,mem_le_search_handle_end
+	isub temp,null
+	rtn
+
+
+le_att_same_type:
+	fetcht 1,mem_le_search_att_type_length
+	arg mem_le_search_att_type,rega
+le_att_check_same_common:
+	fetch 1,mem_le_cur_uuid_length
+	copy pdata,loopcnt
+	isub temp,null
+	nrtn zero
+	arg mem_le_cur_uuid ,regb
+	branch string_compare
+
+le_att_same_uuid:
+	fetcht 1,mem_le_search_uuid_length
+	arg mem_le_search_uuid,rega
+	branch le_att_check_same_common
+
+
+le_store_att_record:
+	fetch 1,mem_le_curr_att_len
+	store 1, mem_tmp_buffer
+	copy pdata,loopcnt
+	call get_contr
+	branch memcpy_fast
+
+
+le_write_att_record:
+	call get_contw
+	fetch 2,mem_le_cur_handle_start
+	istore 2,contw
+	fetch 2,mem_le_cur_handle_end
+	istore 2,contw
+le_write_att_record_common:
+	fetch 1,mem_tmp_buffer
+	copy pdata,loopcnt
+	call memcpy_fast
+	branch store_contw
+
+
+
+le_send_auto_len_by_mem:
+	call get_contw
+	call le_fifo_get_last_att_ptr
+	copy contw,pdata
+	isub contr,rega
+	call le_fifo_get_last_l2cap_ptr
+	copy rega,pdata
+	istore 2,contr
+	increase 4,rega
+	call le_fifo_get_last_tx_ptr
+	copy rega,pdata
+	istore 1,contr
+	rtn
+
+
+le_get_search_handle_start_end_common:
+	rshift8 pdata,pdata
+	store 2,mem_le_search_handle_start
+	ifetch 2,contr
+	store 2,mem_le_search_handle_end
+	rtn
+
+
+
+
+le_parse_signaling:
+	ifetch 1,contr
+	ifetcht 1,contr //id
+	ifetcht 2,contr //length
+	beq L2CAP_CONNECTION_PARAMETER_UPDATE_RESPONSE,le_l2cap_parse_conn_parameter_update_rsp
+	rtn
+le_l2cap_parse_conn_parameter_update_rsp:
+	ifetch 2,contr	//result
+	store 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	jam BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+//mem_le_interval_min:the ptr that connection parameter,
+//include 	ConnIntervalMin,ConnIntervalMax,
+//		ConnSlaveLatency,ConnSupervisionTimeout
+le_l2cap_tx_update_req:
+	arg 0x0c,rega
+	arg L2CAP_CONNECTION_PARAMETER_UPDATE_REQUEST,regc
+	call le_fifo_malloc_tx_l2cap_signaling
+	setarg 0x08
+	istore 2,contw
+	fetch 8,mem_le_interval_min
+	istore 8,contw
+	rtn
+
+
+//rega:len regc:signaling opcode
+le_fifo_malloc_tx_l2cap_signaling:
+	call le_l2cap_update_signaling_identifier
+	arg LE_L2CAP_CID_SIGNAL,regb
+	call le_fifo_malloc_tx_l2cap
+	copy regc,pdata
+	istore 1,contw
+	fetch 1,mem_le_signaling_identifier
+	istore 1,contw
+	rtn
+
+
+le_l2cap_update_signaling_identifier:
+	fetch 1,mem_le_signaling_identifier
+	//beq 0xff,le_l2cap_signaling_identifier_set_1
+	pincrease 1
+	store 1,mem_le_signaling_identifier
+	rtnne 0
+	
+le_l2cap_reset_signaling_identifier:
+	jam 1,mem_le_signaling_identifier
+	rtn
+
+
+
+
+le_pairing_mode_init:
+	fetch  1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_NONE, le_set_no_pairing
+	beq LE_PAIRING_MODE_LAGACY_JUSTWORK,le_set_pairing_mode_lagacy_just_work
+	beq LE_PAIRING_MODE_LAGACY_PASSKEY,le_set_pairing_mode_lagacy_passkey
+	beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,le_set_pairing_mode_secure_justwork
+	beq LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC,le_set_pairing_mode_secure_numeric
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_set_pairing_mode_secure_passkey
+	rtn
+
+le_set_pairing_mode_secure_justwork:
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	branch le_set_noinputnooutput
+le_set_pairing_mode_secure_numeric:
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	jam FLAG_IOCAP_DISPLAYYESNO,mem_le_pres_iocap
+	rtn
+le_set_pairing_mode_secure_passkey:	
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	branch le_set_displayonly
+le_set_no_pairing:
+	jam FLAG_LE_NO_BONDING_NO_MITM,mem_le_pres_auth
+le_set_noinputnooutput:	
+	jam FLAG_IOCAP_NOINPUTNOOUTPUT,mem_le_pres_iocap
+	rtn
+le_set_pairing_mode_lagacy_just_work:
+	jam FLAG_LE_BONDING_MITM,mem_le_pres_auth
+	branch le_set_noinputnooutput
+le_set_pairing_mode_lagacy_passkey:
+	jam FLAG_LE_BONDING_MITM,mem_le_pres_auth
+le_set_displayonly:	
+	jam FLAG_IOCAP_DISPLAYONLY,mem_le_pres_iocap
+	rtn
+
+	
+le_secure_connection_enable:
+	fetch 1,mem_le_pres_auth
+	set1 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT,pdata
+	store 1,mem_le_pres_auth
+	rtn
+le_secure_connection_disable:
+	fetch 1,mem_le_pres_auth
+	set0 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT,pdata
+	store 1,mem_le_pres_auth
+	rtn
+
+le_parse_smp:
+	ifetch 1,contr
+	beq SMP_PAIRING_REQUEST,le_parse_smp_pairing_request
+//	beq SMP_PAIRING_RESPONSE,le_parse_smp_pairing_response
+	beq SMP_PAIRING_CONFIRM,le_parse_smp_pairing_confirm
+	beq SMP_PAIRING_RANDOM,le_parse_smp_pairing_random
+	beq SMP_PAIRING_FAILED,le_parse_smp_pairing_failed
+	beq SMP_ENCRYPTION_INFORMATION,le_parse_smp_encryption_information
+	beq SMP_MASTER_IDENTIFICATION,le_parse_smp_master_identification
+	beq SMP_IDENTITY_INFORMATION,le_parse_smp_identity_information
+	beq SMP_IDENTITY_ADDRESS_INFORMATION,le_parse_smp_identity_address_information
+	beq SMP_SIGNING_INFORMATION,le_parse_smp_signing_information
+	beq SMP_SECURITY_REQUEST,le_parse_smp_security_request
+	beq SMP_PAIRING_PUBLIC_KEY,le_parse_smp_public_key
+	beq SMP_PAIRING_DHKEY_CHECK,le_parse_smp_dhkey_check
+	rtn
+
+
+
+le_send_smp_security_request:
+	force 2,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_SECURITY_REQUEST
+	istore 1,contw
+	fetch 1,mem_le_pres_auth
+	istore 1,contw
+	rtn
+		
+le_parse_smp_pairing_request:
+	store 1,mem_le_preq
+	ifetch 6,contr
+	istore 6,contw
+	fetch 1,mem_le_pairing_mode
+	beq  LE_PAIRING_MODE_NONE,le_smp_pairing_fail_reason_not_support_pairing
+	call le_send_smp_pairing_response
+	call le_check_master_support_secure_connect
+	jam FLAG_LE_PAIRING_RCV_PAIRING_REQ,mem_le_pairing_state
+	fetch 1,mem_le_preq_iocap
+	beq  FLAG_IOCAP_DISPlAYONLY,le_set_tk_0
+	beq  FLAG_IOCAP_DISPLAYYESNO,le_set_tk_0
+	beq  FLAG_IOCAP_NOINPUTNOOUTPUT,le_set_tk_0
+	fetch 1,mem_le_pairing_mode	
+	beq LE_PAIRING_MODE_LAGACY_PASSKEY,le_parse_smp_pairing_req_passkey
+	rtneq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY
+le_set_tk_0:
+	arg 0,pdata
+	store 4,mem_le_tk
+	rtn
+
+le_parse_smp_pairing_req_passkey:
+	fetch 1,mem_le_configuration
+	bbit1 BIT_BLE_PASSKEY_FIXED_KEY,le_parse_smp_pairing_req_fixed_passkey
+le_genernate_tk:
+	arg mem_le_tk,rega
+	copy rega,contw
+	arg 3,loopcnt
+	call generate_random_loop
+	fetch 2,mem_le_tk + 2
+	and_into 0x7,pdata
+	store 2,mem_le_tk + 2
+le_parse_smp_pairing_req_fixed_passkey:
+	jam BT_EVT_LE_TK_GENERATE,mem_fifo_temp
+	branch ui_ipc_send_event
+
+le_check_master_support_secure_connect:
+	fetch 1,mem_le_preq_auth
+	rtnbit1  LE_AUTH_SECURE_CONNECTION_PAIRING_BIT
+	fetch 1,mem_le_pairing_mode
+	rtnbit0 LE_PAIRING_MODE_SECURE_CONNECT_BIT
+	branch app_ble_disconnect	
+
+le_send_smp_pairing_response:
+	force 7,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	fetch 7,mem_le_pres
+	istore 7,contw
+	rtn
+		
+
+le_parse_smp_pairing_confirm:
+	copy contr,rega
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_parse_smp_pairing_confirm_secure_passkey
+	copy rega,contr
+	arg mem_le_rconfirm,contw
+	call memcpy16
+	branch le_send_smp_pairing_confirm
+le_parse_smp_pairing_confirm_secure_passkey:
+	copy rega,contr
+	arg mem_le_rconfirm,contw
+	call memcpy16
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	jam LE_SC_STAT_PASSKEY_WAIT_CONFIRM,mem_le_secure_connect_state	
+	rtn
+
+
+le_send_smp_pairing_confirm:
+	fetch 1,mem_le_pairing_mode
+	bbit1 LE_PAIRING_MODE_SECURE_CONNECT_BIT,le_send_smp_pairing_confirm_sc
+	call generate_confirm
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_CONFIRM
+	istore 1,contw
+	branch  store_aes_result
+
+	
+le_send_smp_pairing_confirm_sc:
+	arg mem_le_srand,contw	
+	call generate_random
+	call function_f4_cb
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_CONFIRM
+	istore 1,contw
+	branch  load_inverse_result
+
+
+	
+le_parse_smp_pairing_random:	
+	copy contr,rega
+	fetch 1,mem_le_pairing_mode
+	bbit1 LE_PAIRING_MODE_SECURE_CONNECT_BIT,le_parse_smp_pairing_random_sc
+	copy rega,contr
+	call authenticate_rconfirm
+	branch le_parse_smp_pairing_random_success,zero
+le_send_pairing_confirm_value_failed:
+	jam PAIRING_FAILED_CONFIRM_VALUE_FAILED,mem_le_ll_pairing_fail_reason
+le_send_pairing_failed:
+	force 2,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_FAILED
+	istore 1,contw
+	fetch 1,mem_le_ll_pairing_fail_reason
+	istore 1,contw	
+le_parse_smp_pairing_failed:
+	force smp_pairing_timer,queue
+	call timer_stop
+	jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state
+	jam BT_EVT_LE_PAIRING_FAIL,mem_fifo_temp
+	branch ui_ipc_send_event
+
+le_smp_pairing_fail_reason_not_support_pairing:
+	jam PAIRING_FAILED_PAIRING_NOT_SUPPORTED,mem_le_ll_pairing_fail_reason
+	branch le_send_pairing_failed
+	
+	
+le_parse_smp_pairing_random_sc:
+	arg mem_le_mrand,contw
+	copy rega,contr
+	call memcpy16	
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_parse_smp_pairing_random_sc_passkey
+	call function_g2
+//	jam LE_SC_STAT_RECEIVE_RANDOM,mem_le_secure_connect_state
+//	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	call le_send_smp_pairing_random
+	fetch 1,mem_le_pairing_mode
+	rtnne LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC
+	jam BT_EVT_LE_GKEY_GENERATE,mem_fifo_temp
+	branch ui_ipc_send_event	
+	
+le_parse_smp_pairing_random_sc_passkey:
+	call function_f4_ca
+	arg mem_AES_CMAC_temp,contw
+	call load_inverse_result	
+	arg mem_AES_CMAC_temp,rega
+	arg mem_le_rconfirm ,regb
+	arg 16,loopcnt
+	call string_compare
+	nbranch le_send_pairing_confirm_value_failed,zero
+	branch le_send_smp_pairing_random
+	
+le_parse_smp_pairing_random_success:
+	call generate_stk
+	jam BT_EVT_LE_PAIRING_SUCCESS,mem_fifo_temp
+	call ui_ipc_send_event
+	jam 1,mem_ltk_exists
+	jam FLAG_LE_PAIRING_AFTER_AUTH,mem_le_pairing_state
+	
+le_send_smp_pairing_random:
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_RANDOM
+	istore 1,contw
+	arg mem_le_srand,contr
+	branch memcpy16
+	
+le_parse_smp_encryption_information:
+	arg mem_le_peer_ltk,contw
+	branch memcpy16
+
+le_send_smp_encryption_information:
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_ENCRYPTION_INFORMATION
+	istore 1,contw
+	fetch 1,mem_le_configuration
+	bbit1 BIT_BLE_PAIRING_FIXED_LTK,le_send_fixed_ltk
+	arg mem_le_ltk,contr
+	branch memcpy16
+
+le_send_fixed_ltk:
+	arg mem_le_fixed_ltk,contr
+	branch memcpy16
+
+
+le_send_smp_master_identification:
+	arg mem_le_ediv,contw
+	force 10,loopcnt
+	call generate_random_loop
+	force 11,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_MASTER_IDENTIFICATION
+	istore 1,contw
+	fetch 2,mem_le_ediv
+	istore 2,contw
+	fetch 8,mem_le_rand
+	istore 8,contw
+	rtn
+
+le_send_smp_identity_information:
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_IDENTITY_INFORMATION
+	istore 1,contw
+	setarg 0
+	istore 8,contw
+	istore 8,contw
+	rtn
+	
+
+le_send_smp_identity_address_information:
+	force 8,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_IDENTITY_ADDRESS_INFORMATION
+	istore 1,contw
+	fetch 1,mem_le_conn_own_addr_type
+	istore 1,contw
+	fetch 6,mem_le_lap	
+	istore 6,contw
+	rtn	
+
+
+le_send_pairing_fail_unspecified_reason:
+	jam PAIRING_FAILED_UNSPECIFIED_REASON,mem_le_ll_pairing_fail_reason
+	branch le_send_pairing_failed
+
+le_check_init_key_distribution:
+	fetch 1,mem_le_pres_init_key_distribution
+	fetcht 1,mem_le_pres_init_key_distribution
+	iand temp,pdata
+	rtn	
+
+le_parse_smp_identity_information:
+	arg mem_le_irk,contw
+	call memcpy16
+	call le_check_init_key_distribution
+	isolate0 LE_INITATOR_IRK_BIT,pdata
+	branch le_send_pairing_fail_unspecified_reason,true
+	fetch 1,mem_device_option
+	rtnne dvc_op_module
+	call le_check_master_addr_type
+	nrtn user
+	branch app_ble_store_reconn_info
+
+//output:user is enable ,random addr type
+le_check_master_addr_type:
+	call disable_user
+	fetch 1,mem_le_conn_peer_addr_type
+	rtneq MASTER_PUBLIC_ADDR
+	fetch 1,mem_le_plap+5
+	compare 0xc0,pdata,0xc0
+	rtn true
+	branch enable_user
+
+le_parse_smp_identity_address_information:
+	call le_check_init_key_distribution
+	isolate0 LE_INITATOR_IRK_BIT,pdata
+	branch le_send_pairing_fail_unspecified_reason,true
+	rtn
+
+le_parse_smp_master_identification:
+le_parse_smp_signing_information:	
+le_parse_smp_security_request:
+	rtn
+	
+le_parse_smp_public_key:
+	arg mem_le_pubkey_remote_x_256,contw	
+	call memcpy64
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	jam LE_SC_STAT_RECEIVE_PUBLIC_KEY,mem_le_secure_connect_state
+	rtn
+
+le_parse_smp_dhkey_check:
+	arg mem_sp_confirm_remote,contw
+	call memcpy16	
+	jam LE_SC_STAT_RECEIVE_DHKEY,mem_le_secure_connect_state
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	rtn	
+
+le_send_smp_pairing_public_key:
+	force 65,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_PUBLIC_KEY
+	istore 1,contw	
+	arg mem_le_pubkey_local_x_256,contr
+	branch memcpy64
+	
+le_send_smp_pairing_dhkey_check:
+	call function_f6_eb	
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_DHKEY_CHECK
+	istore 1,contw
+	branch load_inverse_result
+	
+
+le_check_paring_time:
+	fetch 1,mem_le_pairing_state
+	rtneq FLAG_LE_PAIRING_END
+	arg FLAG_LE_PAIRING_RCV_PAIRING_REQ,temp
+	isub temp,null
+	nrtn positive
+	arg smp_pairing_timer,queue
+	call timer_check
+	nrtn blank
+	branch le_send_pairing_fail_unspecified_reason
+
+le_pairing_sm:
+	bpatchx patch2f_0,mem_patch2f
+	fetch 1,mem_le_pairing_state
+	beq FLAG_LE_PAIRING_NULL,le_pairing_sm_null
+	beq FLAG_LE_PAIRING_START,le_pairing_sm_start
+	beq FLAG_LE_PAIRING_SEND_RECURITY_REQ,le_pairing_sm_send_sec_req
+	beq FLAG_LE_PAIRING_RCV_PAIRING_REQ,le_pairing_sm_rcv_pairing_req
+	beq FLAG_LE_PAIRING_AFTER_AUTH,le_pairing_sm_after_auth
+	beq FLAG_LE_PARING_SEND_ENC_INFORMATION,le_pairng_sm_send_enc_information
+	beq FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION,le_pairng_sm_send_master_indentification
+	beq FLAG_LE_PARING_SEND_INDENTITY_INFORMATION,le_pairng_sm_send_indentity_information
+	rtn
+
+le_pairing_sm_null:
+le_pairing_sm_send_sec_req:
+	fetch 1,mem_le_enc_state
+	rtnne FLAG_LE_SEND_START_ENC_RSP
+	jam FLAG_LE_ENC_END,mem_le_enc_state
+	jam FLAG_LE_PAIRING_END,mem_le_pairing_state
+	jam BT_EVT_LE_RECONNECT_COMPLETE ,mem_fifo_temp
+	branch ui_ipc_send_event	
+	
+	
+le_pairing_sm_start:
+	jam FLAG_LE_PAIRING_SEND_RECURITY_REQ,mem_le_pairing_state
+	branch le_send_smp_security_request
+
+le_pairing_sm_rcv_pairing_req:
+	jam FLAG_LE_PAIRING_AUTH,mem_le_pairing_state
+	setarg TIMER_SMP_PAIRING_TIMEOUT
+	arg smp_pairing_timer,queue
+	branch timer_init
+	
+le_pairing_sm_after_auth:
+	fetch 1,mem_le_enc_state
+	beq FLAG_LE_SEND_START_ENC_RSP,le_pairing_sm_after_auth_start_enc
+	rtn
+	
+le_pairing_sm_after_auth_start_enc:
+	jam FLAG_LE_PARING_SEND_ENC_INFORMATION,mem_le_pairing_state
+	jam BT_EVT_LE_ENC_INFO,mem_fifo_temp
+	call ui_ipc_send_event
+	call le_send_smp_encryption_information
+	fetch 1,mem_device_option
+	rtnne dvc_op_module
+	call le_check_master_addr_type
+	rtn user
+	branch app_ble_store_reconn_info
+
+
+le_pairng_sm_send_enc_information:	
+	jam FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION,mem_le_pairing_state
+	branch le_send_smp_master_identification
+
+le_pairng_sm_send_master_indentification:	
+	fetch 1,mem_le_preq_resp_key_distribution
+	fetcht 1,mem_le_pres_resp_key_distribution
+	iand temp,pdata
+	isolate0 LE_INITATOR_IRK_BIT,pdata
+	branch le_parse_start_enc_rsp_after_auth_end,true
+	jam FLAG_LE_PARING_SEND_INDENTITY_INFORMATION,mem_le_pairing_state
+	branch le_send_smp_identity_information
+
+le_pairng_sm_send_indentity_information:		
+	call le_send_smp_identity_address_information
+	branch le_parse_start_enc_rsp_after_auth_end
+
+
+le_parse_start_enc_rsp_after_auth_end:
+	force smp_pairing_timer,queue
+	call timer_stop
+	jam FLAG_LE_ENC_END,mem_le_enc_state
+	jam FLAG_LE_PAIRING_END,mem_le_pairing_state
+	jam BT_EVT_LE_PAIRING_COMPLETE ,mem_fifo_temp
+	branch ui_ipc_send_event	
+	
+
+
+le_secure_connect_sm:
+	bpatchx patch2f_1,mem_patch2f
+	fetch 1,mem_le_pairing_mode
+	rtnbit0 LE_PAIRING_MODE_SECURE_CONNECT_BIT
+	fetch 1,mem_le_secure_connect_flag
+	rtnne LE_SP_FLAG_COMMIT_256
+	jam SP_FLAG_STANDBY,mem_le_secure_connect_flag
+	fetch    1,mem_le_secure_connect_state
+	beq  LE_SC_STAT_RECEIVE_PUBLIC_KEY,le_sc_sm_receive_public_key
+	beq LE_SC_STAT_WAIT_SEND_PUBLIC_KEY,le_sc_sm_wait_send_public_key
+	beq LE_SC_STAT_SEND_PUBLIC_KEY,le_sc_sm_send_public_key
+	beq LE_SC_STAT_RECEIVE_DHKEY,le_sc_sm_receive_dhkey
+	beq LE_SC_STAT_WAIT_CONFIRM_GKEY,le_sc_sm_wait_confirm_gkey
+	beq  LE_SC_STAT_PASSKEY_WAIT_CONFIRM,le_sc_sm_passkey_wait_confirm
+	rtn	
+
+
+le_sc_sm_passkey_wait_confirm:
+	fetch 1,mem_authentication_passkey_times
+	copy pdata,queue
+	increase 1,pdata
+	store 1,mem_authentication_passkey_times
+	fetch 4,mem_le_tk
+	qisolate1 pdata
+	setarg 0x80
+	setflag true,0,pdata
+	store 1,mem_passkey_1bit
+	branch le_sc_sm_ready_send_pairing_confirm
+	
+le_sc_sm_wait_confirm_gkey:
+	fetch 1,mem_le_sc_confirm_gkey_flag
+	jam FLAG_LE_SC_CONFRIM_NULL,mem_le_sc_confirm_gkey_flag
+	beq FLAG_LE_SC_CONFRIM_GKEY_OK,le_sc_confirm_gkey_ok
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	rtn
+	
+le_sc_confirm_gkey_ok:
+	jam BT_EVT_LE_PAIRING_SUCCESS,mem_fifo_temp
+	call ui_ipc_send_event	
+	jam FLAG_LE_PAIRING_AFTER_AUTH,mem_le_pairing_state
+	branch le_send_smp_pairing_dhkey_check
+
+le_sc_sm_receive_dhkey:
+	fetch 1,mem_sp_dhkey_invalid
+	beq SP_KEY_VALID_256,le_dhkey_ready
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	rtn
+
+le_dhkey_ready:
+	call function_f5
+//	arg mem_le_r,contw
+//	force 2,loopcnt
+//	call memset0
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY ,le_dhkey_ready_common
+	call le_set_tk_0 
+le_dhkey_ready_common:
+	call function_f6_ea
+	arg mem_AES_CMAC_temp,rega
+	arg mem_sp_confirm_remote ,regb
+	arg 16,loopcnt
+	call string_compare
+	branch le_dhkey_check_ok,zero
+le_dhkey_check_fail:	
+	jam PAIRING_FAILED_DHKEY_CHECK_FAILED,mem_le_ll_pairing_fail_reason
+	branch le_send_pairing_failed
+
+	
+le_dhkey_check_ok:
+	call sp_calc_check_publickey_256
+	nbranch le_dhkey_check_fail,zero
+	jam 1,mem_ltk_exists
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,le_sc_confirm_gkey_ok
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY ,le_sc_confirm_gkey_ok	
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	jam LE_SC_STAT_WAIT_CONFIRM_GKEY,mem_le_secure_connect_state	
+	rtn	
+
+le_sc_sm_send_public_key:
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_sc_sm_send_public_key_passkey
+	jam 0,mem_passkey_1bit
+le_sc_sm_ready_send_pairing_confirm:
+	branch le_send_smp_pairing_confirm
+
+le_sc_sm_send_public_key_passkey:
+//	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+//	jam LE_SC_STAT_PASSKEY_WAIT_CONFIRM,mem_le_secure_connect_state	
+//	branch p_ng_event_le_get_passkey
+	jam 0,mem_authentication_passkey_times
+	branch le_parse_smp_pairing_req_passkey
+
+	
+le_sc_sm_receive_public_key:
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	fetch 1,mem_le_sc_local_key_invalid
+	beq SP_KEY_VALID_256,le_public_key_ready
+//	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	rtn
+	
+le_public_key_ready:
+	jam LE_SC_STAT_WAIT_SEND_PUBLIC_KEY,mem_le_secure_connect_state	
+	jam SP_KEY_INVALID,mem_sp_dhkey_invalid
+	branch sp_dhkey_calc_256	
+
+le_sc_sm_wait_send_public_key:
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	jam LE_SC_STAT_SEND_PUBLIC_KEY,mem_le_secure_connect_state
+	branch le_send_smp_pairing_public_key
+
+
+
+le_fifo_malloc_tx_l2cap_smp:
+	force LE_L2CAP_CID_SMP,regb
+	branch le_fifo_malloc_tx_l2cap
+
+
+
+le_parse_ll:
+	fetch 1,mem_le_rxbuf+2
+	beq LL_CONNECTION_UPDATE_REQ,le_parse_connection_update_req
+	beq LL_CHANNEL_MAP_REQ,le_parse_channel_map_req
+	beq LL_TERMINATE_IND,le_parse_terminate_ind
+	beq LL_ENC_REQ,le_parse_enc_req
+	beq LL_ENC_RSP,le_parse_enc_rsp
+	beq LL_START_ENC_REQ,le_parse_start_enc_req
+	beq LL_START_ENC_RSP,le_parse_start_enc_rsp
+	beq LL_UNKNOWN_RSP,le_parse_unknown_rsp
+	beq LL_FEATURE_REQ,le_parse_feature_req
+	beq LL_FEATURE_RSP,le_parse_feature_rsp
+	beq LL_PAUSE_ENC_REQ,le_parse_pause_enc_req
+	beq LL_PAUSE_ENC_RSP,le_parse_pause_enc_rsp
+	beq LL_VERSION_IND,le_parse_version_ind
+	beq LL_REJECT_IND,le_parse_reject_ind
+	beq LL_PING_REQ,le_parse_ping_req
+	beq LL_PING_RSP,le_parse_ping_rsp
+	arg 2,rega
+	arg LL_UNKNOWN_RSP,regb
+	call le_fifo_malloc_tx_ll
+	fetch 1,mem_le_rxbuf+2
+	istore 1,contw
+	rtn	
+
+
+le_parse_connection_update_req:
+	ifetch 9,contr
+	store 9,mem_le_new_param
+	ifetch 2,contr
+	store 2,mem_le_instant
+	fetch 1,mem_le_state
+	set1 lestate_update_param,pdata
+	store 1,mem_le_state
+	rtn
+
+le_parse_channel_map_req:
+	ifetch 5,contr
+	store 5,mem_le_new_map
+	ifetch 2,contr
+	store 2,mem_le_instant
+	fetcht 2,mem_le_event_count
+	isub temp,null
+	nbranch le_parse_terminate_ind,positive
+	fetch 1,mem_le_state
+	set1 lestate_update_map,pdata
+	store 1,mem_le_state
+	rtn
+
+
+le_parse_terminate_ind:
+	setarg 20 // 200ms
+	store 2,mem_le_superto
+	store 2,mem_le_init_superto
+	rtn
+
+le_send_terminate_ind_user_terminated:
+	arg ERROR_REMOTE_USER_TERMINATED_CONNECTION,regc
+
+//regc:The ErrorCode field shall be set to inform the remote device why the connection is about to be terminated.
+le_send_terminate_ind:
+	arg 2,rega
+	arg LL_TERMINATE_IND,regb
+	call le_fifo_malloc_tx_ll
+	copy regc,pdata
+	istore 1,contw
+	rtn
+
+le_parse_feature_req:
+
+le_send_feature_rsp:
+	arg 9,rega
+	arg LL_FEATURE_RSP,regb
+	call le_fifo_malloc_tx_ll
+	setarg param_le_features
+	istore 8,contw
+	rtn
+
+
+le_parse_version_ind:
+	rtn master
+le_send_version_ind:
+	arg 6,rega
+	arg LL_VERSION_IND,regb
+	call le_fifo_malloc_tx_ll
+	fetch 5,mem_lmp_version
+	istore 5,contw
+	rtn
+
+
+le_parse_ping_req:
+	arg LL_PING_RSP,regb
+	branch le_send_ll_one_lenth
+
+//regb:ll opcode
+le_send_ll_one_lenth:
+	arg 1,rega
+	branch le_fifo_malloc_tx_ll
+
+	
+le_parse_enc_req:
+	ifetch 8,contr
+	store 8,mem_le_rand
+	ifetch 2,contr
+	store 2,mem_le_ediv
+	ifetch 8,contr
+	store 8,mem_le_skdm
+	ifetch 4,contr
+	store 4,mem_le_ivm
+	call le_send_enc_rsp
+	bpatchx patch2f_2,mem_patch2f
+	fetch 1,mem_le_pairing_state
+	beq FLAG_LE_PAIRING_AFTER_AUTH,le_parse_enc_req_after_auth
+	fetch 1,mem_le_configuration
+	bbit1  BIT_BLE_PAIRING_FIXED_LTK,le_parse_enc_req_fixed_ltk
+	fetch 1,mem_nv_data_number
+	ncall load_device_list_mode_4,blank
+	fetch 1,mem_ltk_exists
+	beq 0,le_ltk_lost
+le_parse_enc_req_after_auth:
+	jam FLAG_LE_RCV_ENC_START,mem_le_enc_state
+	call  le_send_start_enc_req
+	branch generate_sk
+
+le_parse_enc_req_fixed_ltk:
+	jam 1,mem_ltk_exists
+	arg mem_le_fixed_ltk,contr
+	arg mem_le_ltk,contw
+	call memcpy16
+	branch le_parse_enc_req_after_auth
+
+
+le_ltk_lost:
+	bpatchx patch2f_3,mem_patch2f
+	jam FLAG_LE_ENC_NULL,mem_le_enc_state
+	jam FLAG_LE_ENC_NULL,mem_le_pairing_state
+	jam BT_EVT_LE_LTK_LOST,mem_fifo_temp
+	branch ui_ipc_send_event
+
+le_send_reject_ind:
+	arg 2,rega
+	arg LL_REJECT_IND,regb
+	call le_fifo_malloc_tx_ll
+	setarg LE_ERR_PIN_OR_KEY_MISSING
+	istore 1,contw
+	rtn		
+	
+le_send_enc_rsp:
+	arg mem_le_skds,contw
+	force 8,loopcnt
+	call generate_random_loop
+	arg mem_le_ivs,contw
+	force 4,loopcnt
+	call generate_random_loop
+	arg 13,rega
+	arg LL_ENC_RSP,regb
+	call le_fifo_malloc_tx_ll
+	fetch 8,mem_le_skds
+	istore 8,contw
+	fetch 4,mem_le_ivs
+	istore 4,contw
+	rtn
+
+le_send_start_enc_req:
+	arg LL_START_ENC_REQ,regb
+	branch le_send_ll_one_lenth
+
+le_send_start_enc_rsp:
+	arg LL_START_ENC_RSP,regb
+	branch le_send_ll_one_lenth
+	
+	
+le_parse_enc_rsp:
+	ifetch 8,contr
+	store 8,mem_le_skds
+	ifetch 4,contr
+	store 4,mem_le_ivs
+	branch generate_sk
+	
+le_parse_start_enc_req:
+	fetch 1,mem_le_state
+	set1 lestate_encryption,pdata
+	store 1,mem_le_state
+	rtn
+	
+le_parse_start_enc_rsp:
+	rtn master
+	jam BT_EVT_LE_START_ENC,mem_fifo_temp
+	call ui_ipc_send_event	
+	jam FLAG_LE_SEND_START_ENC_RSP,mem_le_enc_state
+	branch le_send_start_enc_rsp
+	
+le_parse_pause_enc_req:
+	jam FLAG_LE_ENC_PAUSE,mem_le_enc_state
+	call le_send_pause_enc_rsp	
+	jam BT_EVT_LE_PAUSE_ENC,mem_fifo_temp
+	branch ui_ipc_send_event	
+
+le_send_pause_enc_rsp:
+	arg LL_PAUSE_ENC_RSP,regb
+	branch le_send_ll_one_lenth	
+			
+
+le_parse_feature_rsp:
+le_parse_unknown_rsp:
+le_parse_pause_enc_rsp:
+le_parse_reject_ind:
+le_parse_ping_rsp:
+	rtn
+
+
+	
+/******************************************/
+/*************   LMP Parse   **************/
+/******************************************/
+init_lmp:
+	rtn wake
+init_lmp_work:
+	bpatchx patch2f_4,mem_patch2f
+	setarg 0
+	store 1,mem_lmp_to_send
+	store 1,mem_conn_sm
+	store 1,mem_lmo_opcode1
+	store 1,mem_lmo_opcode2
+	store 1,mem_esco_addr
+	store 1,mem_auth_enable
+	store 1,mem_connection_options
+	store 1,mem_pairing_auth
+	jam SWITCH_FLAG_INIT,mem_switch_flag
+	jam 0,mem_switch_fail_master_count
+	jam NULL_ENCRYP,mem_wait_encryption
+init_lmp_reinit:	
+	jam 0,mem_pairing_auth
+	jam 0,mem_sp_localsm
+	jam 0,mem_lmp_conn_state
+	//fall through
+parse_rx_done:
+	rtn
+
+parse_lmp:
+	bpatchx patch2f_5,mem_patch2f
+	call setlocalsm_master,master	//use this flag in hci
+	ncall setlocalsm_slave,master
+	call lmo_fifo_check
+	nrtn blank
+	fetch 1,mem_state_map
+	rtnbit0 smap_rxlmp
+	set0 smap_rxlmp,pdata
+	set0 mark_rxbuf_inuse,mark
+	store 1,mem_state_map
+	fetch 1,mem_rxbuf
+	fetcht 1,mem_state_map
+	isolate1 smap_lmptidinit,pdata
+	setflag true,smap_lmptid,temp
+	storet 1,mem_state_map
+	and_into 0x2,temp //smap_lmptid only
+	storet 1,mem_lmo_tid2
+	fetcht 1,mem_state_map
+	rshift pdata,pdata			/* align lmp_opcode */
+  	store 1,mem_lmi_opcode2
+	bpatchx patch2f_6,mem_patch2f
+  	fetch 1,mem_lmi_opcode2
+  	beq LMP_ESCAPE,parse_lmp_escape//multi
+  	beq LMP_ACCEPTED,parse_lmp_accepted//multi
+	beq LMP_NOT_ACCEPTED,parse_lmp_not_accepted//multi
+  	beq LMP_SET_AFH, parse_lmp_set_afh
+  	beq LMP_CLKOFFSET_REQ, parse_lmp_clkoffset_req
+ 	beq LMP_ENCRYPTION_MODE_REQ, parse_lmp_encryption_mode_req
+ 	beq LMP_ENCRYPTION_KEY_SIZE_REQ,parse_lmp_crypt_key
+	beq LMP_AUTO_RATE,parse_lmp_auto_rate
+	beq LMP_TEST_CONTROL,parse_lmp_test_control//multi
+	beq LMP_TEST_ACTIVATE,parse_lmp_test_activate
+	beq LMP_SETUP_COMPLETE,parse_lmp_setup_complete
+	beq LMP_SUPERVISION_TIMEOUT,parse_lmp_supervision_timeout
+	beq LMP_FEATURES_REQ,parse_lmp_features_req
+	beq LMP_HOST_CONNECTION_REQ,parse_lmp_conn_req
+	beq LMP_VERSION_REQ,parse_lmp_version_req
+	beq LMP_VERSION_RES,parse_lmp_version_res
+	beq LMP_DETACH,parse_lmp_detach
+	beq LMP_MAX_SLOT,parse_lmp_max_slot
+	beq LMP_MAX_SLOT_REQ,parse_lmp_max_slot_req
+	beq LMP_NAME_REQ,parse_lmp_name_req
+	beq LMP_NAME_RES,parse_lmp_name_res
+	beq LMP_FEATURES_RES,parse_lmp_features_res
+	beq LMP_COMB_KEY,parse_lmp_comb_key
+	beq LMP_AU_RAND, parse_lmp_au_rand
+	beq LMP_IN_RAND,parse_lmp_in_rand
+	beq LMP_SRES,parse_lmp_sres
+	beq LMP_INCR_POWER_REQ,parse_lmp_incr_power
+	beq LMP_DECR_POWER_REQ,parse_lmp_decr_power
+	beq LMP_MAX_POWER, parse_lmp_max_power
+	beq LMP_MIN_POWER, parse_lmp_min_power
+	beq LMP_PAGE_MODE_REQ, parse_lmp_page_mode_req
+	beq LMP_PAGE_SCAN_MODE_REQ, parse_lmp_page_scan_mode_req
+	beq LMP_PREFERRED_RATE, parse_lmp_preferred_rate
+	beq LMP_SLOT_OFFSET, parse_lmp_slot_offset
+	beq LMP_SNIFF_REQ, parse_lmp_sniff_req
+	beq LMP_START_ENCRYPTION_REQ, parse_lmp_start_encryption_req
+	beq LMP_STOP_ENCRYPTION_REQ, parse_lmp_stop_encryption_req
+	beq LMP_SWITCH_REQ, parse_lmp_switch_req
+	beq LMP_TEMP_RAND, parse_lmp_temp_rand
+	beq LMP_TEMP_KEY, parse_lmp_temp_key
+	beq LMP_TIMING_ACCURACY_REQ, parse_lmp_timing_accuracy_req
+	beq LMP_TIMING_ACCURACY_RES, parse_lmp_timing_accuracy_res
+	beq LMP_UNIT_KEY, parse_lmp_unit_key
+	beq LMP_UNSNIFF_REQ, parse_lmp_unsniff_req
+	beq LMP_USE_SEMI_PERMANENT_KEY, parse_lmp_use_semi_permanend_key
+	beq  LMP_ENCAPSULATED_HEADER,parse_lmp_encapsulated_header
+	beq  LMP_ENCAPSULATED_PAYLOAD,parse_lmp_encapsulated_payload
+	beq	LMP_SIMPLE_PAIRING_CONFIRM,parse_simple_pairing_confirm
+	beq  LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_simple_pairing_number
+	beq  LMP_DHKEY_CHECK,parse_dhkey_check
+	beq LMP_CLKOFFSET_RES, parse_lmp_clkoffset_res
+	beq LMP_ENC_KEY_SIZE_MASK_REQ,parse_enc_key_size_mask_req
+/* lmp is not recognized, check to see if we respond to all messages */ 
+/* rejecting the unrecognized message with PDU not recognized */
+reject_unknown_packet:
+	jam UNKNOWN_LMP_PDU,mem_lmo_reason2
+reject_lmp_packet:
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	rtn
+
+parse_lmp_clkoffset_req:
+	jam LMP_CLKOFFSET_RES,mem_lmo_opcode2
+	rtn	
+
+parse_enc_key_size_mask_req:
+	jam LMP_ENC_KEY_SIZE_MASK_RES,mem_lmo_opcode2
+	rtn
+	
+parse_lmp_set_afh:
+	fetch 4,mem_rxbuf+1
+	lshift pdata,pdata
+	store 4,mem_afh_instant
+	fetch 1,mem_rxbuf+5
+	store 1,mem_afh_new_mod
+	fetch 5,mem_rxbuf+6
+	store 5,mem_afh_map_new
+	fetch 5,mem_rxbuf+11
+	istore 5,contw
+	fetch 1,mem_mode
+	set1 afh_change,pdata
+	store 1,mem_mode
+	rtn
+parse_lmp_escape:
+	bpatchx patch2f_7,mem_patch2f
+	fetch 1,mem_rxbuf+1
+	set1 7,pdata
+	store 1,mem_lmi_opcode2
+	beq LMP_EXT_ACCEPTED,parse_lmpext_accepted
+	beq LMP_NOT_ACCEPTED_EXT,parse_lmpext_not_accepted
+	beq LMP_SNIFF_SUBRATING_REQ, parse_lmp_sniff_subrating_req
+	beq LMP_SNIFF_SUBRATING_RES, parse_lmp_sniff_subrating_res
+	beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_packet_type_table_req
+	beq LMP_EXT_FEATURES_REQ,parse_lmpext_features_req
+	beq LMP_EXT_FEATURES_RES,parse_lmpext_features_res
+	beq LMP_EXT_CHN_CLASSIFICATION_REQ,parse_lmpext_chn_classification_req
+	beq LMP_PAUSE_ENCRYPTION_REQ,parse_lmpext_pause_encrypt
+	beq LMP_RESUME_ENCRYPTION_REQ,parse_lmpext_resume_encrypt
+	beq LMP_IO_CAP_REQ,parse_lmpext_iocap_req
+	beq LMP_IO_CAP_RES,parse_lmpext_iocap_res
+	rtneq LMP_EXT_FEATURES_RES
+
+
+reject_unknown_ext_packet:
+	jam LMP_NOT_ACCEPTED_EXT,mem_lmo_opcode2
+	jam UNKNOWN_LMP_PDU,mem_lmo_reason2
+	
+	rtn
+parse_lmpext_chn_classification_req:
+	jam LMP_NOT_ACCEPTED_EXT,mem_lmo_opcode2
+	jam NOT_SUPPORT_CHN_CLASSIFICATION,mem_lmo_reason2
+	rtn
+	
+parse_lmpext_iocap_req:
+	call iocap_lmpext_load
+	jam LMP_IO_CAP_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmpext_iocap_res:
+	call iocap_lmpext_load
+	branch iocap_lmpext_common
+	
+iocap_lmpext_load:
+	arg      mem_sp_iocap_remote,contw
+	fetch 3, mem_rxbuf+2
+	istore    3,contw
+	rtn
+	
+iocap_lmpext_common:
+	branch master_set_mem_master_sp_flag,true//is un very ok to use master flag,but we have to add many codes if wo don't
+	rtn
+parse_lmpext_accepted:
+	fetch 1,mem_rxbuf+3
+	set1 7,pdata
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_accepted_ptt
+	rtn
+
+	
+parse_lmpext_not_accepted:
+	fetch 1,mem_rxbuf+3
+	set1 7,pdata
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_not_accepted_ptt
+	rtn
+
+parse_lmpext_accepted_ptt:
+	fetch 1,mem_ptt
+	fetcht 1,mem_state_map
+	nsetflag blank,smap_edr,temp
+	storet 1,mem_state_map
+parse_lmpext_not_accepted_ptt:
+	fetch 1,mem_state
+	rtnbit0 state_init_seq
+	set0 state_init_seq,pdata
+	store 1,mem_state
+	fetch 1,mem_auth_enable
+	nrtn blank
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	rtn
+
+parse_lmpext_pause_encrypt:
+	nbranch parse_lmpext_pause_encrypt_slave, master
+	jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2
+	branch tid_reply
+
+parse_lmpext_pause_encrypt_slave:	
+	jam LMP_PAUSE_ENCRYPTION_REQ, mem_lmo_opcode2
+	rtn
+
+parse_lmpext_resume_encrypt:
+//trans file to pc may cause pause/resume encrypt
+//if ms is conn_sm_wait_end the controllor won't send ack after recieved start_encypt_accept
+	call tid_reply
+	branch lmp_start_encryption
+
+parse_lmpext_features_req:
+	jam LMP_EXT_FEATURES_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmpext_features_res:
+	fetcht 1,mem_rxbuf+4
+	and temp,0x1,temp
+	storet 1,mem_remote_sppcap
+	fetch 1,mem_hci_cmd
+	bne hci_cmd_wait_remote_ext_feature,parse_lmpext_features_res_not_hci
+	jam 0,mem_hci_cmd
+parse_lmpext_features_res_not_hci:
+	fetch 1,mem_conn_sm
+	rtnne CONN_SM_WAIT_FEATURES_EXT
+	jam CONN_SM_SEND_CONN_REQ,mem_conn_sm
+	branch process_conn_sm
+
+parse_lmp_accepted:
+	bpatchx patch30_0,mem_patch30
+	fetch 1,mem_rxbuf+1
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_HOST_CONNECTION_REQ,parse_lmp_accepted_hostconn//ok
+	beq LMP_IN_RAND,parse_lmp_accepted_inrand//ok
+	beq LMP_ENCRYPTION_MODE_REQ,parse_lmp_accepted_enc_mode//ok
+	beq LMP_ENCRYPTION_KEY_SIZE_REQ,parse_lmp_accepted_enc_keysize//ok
+	beq LMP_START_ENCRYPTION_REQ,parse_lmp_accepted_start_enc//ok
+	beq LMP_STOP_ENCRYPTION_REQ,parse_lmp_accepted_stop_enc//ok
+	beq LMP_UNSNIFF_REQ,parse_lmp_accepted_unsniff_req//ok
+	beq LMP_SNIFF_REQ,parse_lmp_accepted_sniff_req//ok
+	beq LMP_SWITCH_REQ,parse_lmp_accepted_switch
+	// simple pairing 
+	beq LMP_ENCAPSULATED_HEADER,parse_lmp_accepted_encapsulated_header//ok
+	beq LMP_ENCAPSULATED_PAYLOAD,parse_lmp_accepted_encapsulated_payload//ok
+	beq LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_accepted_simple_pairing_number//ok
+	beq LMP_DHKEY_CHECK,parse_lmp_accepted_dhkey_check//ok
+	rtn
+	
+parse_lmp_not_accepted:
+	bpatchx patch30_1,mem_patch30
+	fetch 1,mem_rxbuf+1
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_NAME_REQ,parse_lmp_not_accepted_name_req//ok
+	beq LMP_HOST_CONNECTION_REQ,parse_lmp_not_accepted_hostconn//ok
+	beq LMP_AU_RAND,parse_lmp_not_accepted_aurand//ok
+	beq LMP_IN_RAND,parse_lmp_not_accepted_inrand//ok
+	beq LMP_SWITCH_REQ,parse_lmp_not_accepted_switch//ok
+	/* simple pairing support */
+	beq  LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_not_accepted_simple_pairing_number//ok
+	beq  LMP_DHKEY_CHECK,parse_lmp_not_accepted_dhkey_check//ok
+	beq LMP_UNSNIFF_REQ,parse_lmp_not_accepted_unsniff_req
+	beq LMP_SNIFF_REQ,parse_lmp_not_acdcept_sniff_req
+	rtn
+
+parse_lmp_accepted_switch:
+	jam BT_EVT_SWITCH_ACCEPT,mem_fifo_temp
+	call ui_ipc_send_event
+	branch role_switch_prepare0
+parse_lmp_not_accepted_switch:
+	jam BT_EVT_SWITCH_NOT_ACCEPT,mem_fifo_temp
+	call ui_ipc_send_event
+	jam SWITCH_FLAG_NOT_ACCEPT,mem_switch_flag
+	setarg TIMER_SWITCH_WAITE
+	arg switch_wait_timer,queue
+	branch timer_init
+
+
+parse_lmp_accepted_hostconn:
+	//fetch 1,mem_state
+	//rtnbit0 state_init_seq
+	fetch 1,mem_lmp_conn_state
+	set1 RECEIVED_CONN_REQ,pdata
+	store 1,mem_lmp_conn_state
+	jam BT_EVT_BB_CONNECTED,mem_fifo_temp
+	call ui_ipc_send_event
+	jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmo_opcode2
+	//nbranch parse_lmp_accepted_hostconn_ctn,master
+parse_lmp_accepted_hostconn_ctn:
+	/* checking to see if we requested host connection */
+	fetch 1,mem_conn_sm
+	bne CONN_SM_WAIT_CONN_ACCEPT, parse_rx_done
+	//branch parse_lmp_accepted_hostconn_master,master
+	/* continuing on with host connection state machine */
+	jam CONN_SM_AUTH_PAIR,mem_conn_sm
+	rtn
+	//branch host_create_conn_auth_pair
+
+	/* we need to move fast and send au_rand...jumping to next part of state machine for conn */
+//parse_lmp_accepted_hostconn_master:
+	//jam CONN_SM_AUTH_PAIR ,mem_conn_sm
+//	rtn
+
+parse_lmp_not_accepted_hostconn:
+	jam ACL_CONNECTION_ALREADY_EXISTS,mem_disconn_reason_send
+	jam LMP_DETACH,mem_lmo_opcode2
+	/* clearing connection state machine */
+	jam CONN_SM_STANDBY,mem_conn_sm
+	/* sending error message to host */
+	branch parse_rx_done,true
+	rtn
+
+parse_lmp_accepted_inrand:
+	fetch 1,mem_link_key_exists
+	nrtn blank
+	call clear_linkkey
+	call  lmp_generate_key
+	rtn master
+	set1 mark_slave_in_rand_accepted,mark
+	rtn
+
+parse_lmp_accepted_enc_mode:
+	nrtn master
+	jam LMP_ENCRYPTION_KEY_SIZE_REQ,mem_lmo_opcode2
+	fetch 1,mem_state_map
+	rtnbit0 smap_encryption
+	jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2
+	rtn
+
+parse_lmp_accepted_enc_keysize:
+	branch lmp_start_encryption
+	
+parse_lmp_accepted_start_enc:
+	call send_create_conn_start_l2cap_timer_sm
+	fetch 1,mem_state
+	rtnbit1 state_conn_comp
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	fetch 1,mem_conn_sm
+	rtnne CONN_SM_ENCRYPT_WAIT
+	jam CONN_SM_ENCRYPT_WAIT_CLEAR,mem_conn_sm
+	rtn
+	
+parse_lmp_accepted_stop_enc:
+	/* again this won't work with multipoint. keep track of anyone else encrypting */
+	//jam HOST_STOP_ENCRYPTION,message_queue_B0
+	//jam 1,message_queue_B1
+	//jam HOST_RETURN_SUCCESS,message_queue_B2
+	//fetch 1,mem_lmp_state2
+	//set1 MESSAGE_QUEUE,pdata
+	//store 1,mem_lmp_state2
+	rtn
+
+parse_lmp_not_accepted_aurand:	
+parse_lmp_not_accepted_aurand_send_detach:	
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam OTHER_END_TERMINATED,mem_disconn_reason_send
+	rtn
+/*in pair remote cancel the pair*/
+parse_lmp_not_accepted_inrand:
+	fetch 1,mem_rxbuf+2
+	beq KEY_MISSING,parse_lmp_inrand_key_missing
+	rtnne PAIRING_NOT_ALLOWED
+	jam PAIRING_NOT_ALLOWED,mem_disconn_reason_send
+	jam LMP_DETACH,mem_lmo_opcode2
+	rtn	
+parse_lmp_inrand_key_missing:
+	jam KEY_MISSING,mem_disconn_reason_send
+	jam LMP_DETACH,mem_lmo_opcode2
+	rtn
+	
+parse_lmp_not_accepted_name_req:
+	rtn
+	
+parse_lmp_not_accepted_simple_pairing_number:
+	jam      SP_STAT_NULL,mem_sp_state
+	jam LMP_DETACH,mem_lmo_opcode2
+	branch   parse_rx_done
+	
+parse_lmp_not_accepted_dhkey_check:
+	jam      SP_STAT_NULL,mem_sp_state
+	jam LMP_DETACH,mem_lmo_opcode2
+	branch   parse_rx_done
+parse_lmp_not_accepted_unsniff_req:
+	jam BT_EVT_UNSNIFF_NOT_ACCEPT,mem_fifo_temp
+	branch ui_ipc_send_event
+	
+parse_lmp_accepted_unsniff_req:
+	jam BT_EVT_UNSNIFF_ACCEPT,mem_fifo_temp
+	call ui_ipc_send_event
+	branch sniff_exit
+	
+parse_lmp_accepted_sniff_req:
+	jam BT_EVT_SNIFF_ACCEPT,mem_fifo_temp
+	call ui_ipc_send_event
+	setarg 0
+	store 2,mem_dsniff
+	fetch 2,mem_sniff_param_interval
+	lshift pdata,pdata
+	store 2,mem_tsniff
+	fetch 1,mem_sniff_param_attempt
+	store 1,mem_sniff_attempt
+	fetch 1,mem_sniff_param_timeout
+	store 1,mem_sniff_timeout
+	branch sniff_init
+	
+parse_lmp_not_acdcept_sniff_req:
+	jam BT_EVT_SNIFF_NOT_ACCEPT,mem_fifo_temp
+	branch ui_ipc_send_event
+	
+parse_lmp_crypt_key:
+	fetcht 1,mem_rxbuf+1
+	storet 1,mem_key_size
+	branch accept_lmp_msg
+	
+parse_lmp_setup_complete:
+	fetch 1,mem_lmp_conn_state
+	set1 RECEIVED_SETUP_COMPLETE,pdata
+	store 1,mem_lmp_conn_state
+	rtnbit1 SENT_SETUP_COMPLETE
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	branch parse_rx_done
+	
+parse_lmp_max_slot:
+	//jam LMP_MAX_SLOT,mem_lmi_opcode2
+	//branch accept_lmp_msg
+	rtn
+	
+parse_lmp_max_slot_req:
+	fetch 1,mem_max_slot
+	fetcht 1,mem_rxbuf+1
+	isub temp,null
+	//jam LMP_MAX_SLOT_REQ,mem_lmi_opcode2
+	branch accept_lmp_msg,positive
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	jam UNSPECIFIED_ERROR,mem_lmo_reason2
+	jam LMP_MAX_SLOT_REQ,mem_lmi_opcode2
+	rtn
+	
+parse_lmp_detach:
+	call prepare_disconnect
+	branch accept_lmp_msg
+	
+accept_lmp_msg:
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	rtn
+
+parse_lmp_incr_power:
+	jam LMP_MAX_POWER,mem_lmo_opcode2
+	rtn
+
+parse_lmp_decr_power:
+	jam LMP_MIN_POWER,mem_lmo_opcode2
+	rtn
+	
+parse_lmp_version_res:
+	fetch 1,mem_conn_sm
+	rtneq CONN_SM_WAIT_VERSION
+	/* continuing on with host connection state machine */
+	jam CONN_SM_SEND_FEATURES ,mem_conn_sm
+	/* we need to move fast and send au_rand...jumping to next part of state machine for conn */
+	rtn
+
+
+parse_lmp_auto_rate:
+	rtn	
+
+parse_lmp_in_rand:
+	call lmp_copy_rand
+	jam pincode_state_wait_pincode,mem_pincode_state
+	jam BT_EVT_PINCODE_REQ,mem_fifo_temp
+	call ui_ipc_send_event
+
+	call tid_check
+	nbranch lmp_accept_inrand,true
+	//fetch 1,mem_auth_enable
+	nbranch parse_lmp_inrand_res,master // ignore this because of not ssp temporary
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	jam LMP_IN_RAND,mem_lmi_opcode2
+	jam TRANSACTION_COLLISION,mem_lmo_reason2
+	rtn
+parse_lmp_inrand_res:
+	fetch 1,mem_op
+	set1 op_inrand_req,pdata
+	store 1,mem_op
+	rtn
+
+//store current tid
+pop_tid_follow:
+	fetcht 1,mem_state_map
+	nsetflag blank,smap_lmptid,temp
+	storet 1,mem_state_map
+	rtn
+	
+//restore current tid
+push_tid_follow:
+	fetch 1,mem_lmo_tid2
+	rshift pdata,pdata
+	and_into 1,pdata
+	rtn
+
+parse_lmp_au_rand_moudle:
+	fetch 1,mem_nv_data_number
+	rtn blank
+	fetch 1,mem_pairing_auth
+	call load_device_list,blank
+	rtn	
+
+parse_lmp_au_rand:
+	call parse_lmp_au_rand_moudle
+	call push_tid_follow
+	store 1,mem_sres_tid
+	call lmp_copy_rand
+	jam LMP_SRES,mem_lmo_opcode2
+	fetch 1,mem_link_key_exists
+	nrtn blank
+	fetch 1,mem_state
+	rtnbit1 state_combkey		/* we have comb key, but not verified */
+	jam KEY_MISSING,mem_lmo_reason2
+	branch reject_lmp_packet
+
+parse_lmp_sres:	
+	arg mem_plap,rega
+	call function_e1
+	fetch 4,mem_rxbuf+1
+	fetcht 4,mem_input_store
+	isub temp,null
+	branch authentication_ok,zero
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam AUTHENTICATION_FAILURE_ERROR,mem_disconn_reason_send	
+	rtn
+authentication_ok:
+	call authentication_ok_common
+	fetch 1,mem_ssp_enable
+	branch  pairing_success,blank
+	rtn
+
+	
+authentication_ok_common:
+	call copy_aco
+	call linkkey_ready///save link key
+	fetch 1,mem_op
+	isolate1 op_auth_req,pdata
+	set0 op_auth_req,pdata
+	store 1,mem_op
+	fetch 1,mem_conn_sm
+	beq CONN_SM_AUTH_WAIT,authentication_ok_conn_sm
+	beq CONN_SM_PAIRING_WAIT,authentication_ok_conn_sm
+	rtn
+authentication_ok_conn_sm:
+	fetch 1,mem_pairing_auth
+	rtnne DEFALT_PAIRING_AUTH
+	fetch 1,mem_state_map
+	rtnbit1 smap_encryption
+	branch host_create_conn_encrypt
+
+parse_lmp_comb_key:
+	arg mem_rxbuf+1,rega
+	arg mem_kinit,regb
+	arg mem_random_number,contw
+	call xor16
+	arg mem_plap,rega
+	call generate_linkkey
+	jam LMP_AU_RAND,mem_lmo_opcode2
+	fetch 1,mem_state
+	bbit0 state_combkey,lmp_generate_key
+	rtn
+	
+parse_lmp_name_res:
+	fetch 2,mem_len
+	add pdata,-3,loopcnt	//for remote name length error
+	fetcht 1,mem_rxbuf+1
+	setarg mem_tmp_buffer
+	iadd temp,contw
+	arg mem_rxbuf+3,contr
+	call memcpy
+	fetcht 1,mem_name_offset
+	fetch 1,mem_rxbuf+2
+	isub temp,pdata
+	sub pdata,14,null
+	branch parse_lmp_name_res_end,positive
+	add temp,14,pdata
+	store 1,mem_name_offset
+	jam LMP_NAME_REQ,mem_lmo_opcode2
+	rtn
+parse_lmp_name_res_end:
+	fetch 1,mem_state_map
+	set1 smap_name_res,pdata
+	store 1,mem_state_map
+	bbit1 smap_name_req,lmp_disconnect
+	rtn
+parse_lmp_name_req:
+	fetch 1,mem_rxbuf+1
+	store 1,mem_lmi_opcode2 //offset 
+	jam LMP_NAME_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmp_conn_req:
+	branch accept_lmp_msg
+
+parse_lmp_timing_accuracy_req:
+	jam LMP_TIMING_ACCURACY_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmp_features_req:
+	jam LMP_FEATURES_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmp_version_req:
+	jam LMP_VERSION_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmp_supervision_timeout:
+//	fetch 2,mem_rxbuf+1
+//	store 2,mem_supervision_to
+	rtn
+	
+
+
+parse_lmp_sniff_subrating_req:
+	fetch 2,mem_tsniff
+	iforce temp
+	fetch 1,mem_rxbuf+2
+	store 1,mem_subsniff_rate
+	imul32 temp,temp
+	fetch 2,mem_rxbuf+3
+	lshift pdata,pdata
+	store 2,mem_subsniff_tcmax
+	fetch 4,mem_rxbuf+5
+	lshift pdata,pdata
+ 	store 4,mem_subsniff_instant
+	//product pdata
+	deposit temp
+	store 2,mem_subsniff_tsniff
+	rtn
+parse_lmpext_packet_type_table_req:
+	fetcht 1,mem_ptt
+	fetch 1,mem_rxbuf+2
+	ixor temp,null
+	nbranch reject_unknown_ext_packet,zero
+	isolate1 0,pdata
+	fetch 1,mem_state_map
+	setflag true,smap_edr,pdata
+	store 1,mem_state_map
+	jam LMP_EXT_ACCEPTED,mem_lmo_opcode2
+	jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmi_opcode2
+	rtn
+
+	
+parse_lmp_sniff_subrating_res:
+parse_lmp_preferred_rate:
+parse_lmp_max_power:
+parse_lmp_min_power:
+	rtn
+parse_lmp_page_mode_req:
+	//jam LMP_PAGE_MODE_REQ,mem_lmi_opcode2
+	branch accept_lmp_msg
+parse_lmp_page_scan_mode_req:
+	//this can influence connection. need accepted
+	//jam LMP_PAGE_SCAN_MODE_REQ,mem_lmi_opcode2
+	branch accept_lmp_msg
+
+
+	
+parse_lmp_slot_offset:
+	fetch 2,mem_rxbuf+1
+	store 2,mem_slot_offset
+	rtn
+
+parse_lmp_sniff_req_check_sniff_para:
+	fetch 2,mem_rxbuf+4 /* tsniff */
+	fetcht 1,mem_lpm_mult
+	imul32 temp,pdata
+	arg 0x640,temp
+	isub temp,null
+//	branch lmp_reject_sniff,positive
+	rtn
+	
+parse_lmp_sniff_req:
+	fetch 2,mem_rxbuf+6
+	branch lmp_reject_sniff,blank
+	call parse_lmp_sniff_req_check_sniff_para
+	branch lmp_reject_sniff,positive
+	fetch 1,mem_device_option
+	sub pdata,dvc_op_module,null
+	call module_set_lpm_mult_2,zero
+	fetch 1,mem_state
+	bbit1 state_insniff,lmp_reject_sniff
+	fetch 2,mem_rxbuf+2 /* dsniff */
+	lshift pdata,pdata
+	store 2,mem_dsniff	
+	fetch 2,mem_rxbuf+4 /* tsniff */
+	lshift pdata,pdata
+	store 2,mem_tsniff
+	fetch 2,mem_rxbuf+6 /* sniff attempt */
+	store 1,mem_sniff_attempt
+	iforce temp
+	fetch 2,mem_rxbuf+8 /* sniff timeout */
+	store 1,mem_sniff_timeout
+	isub temp,null
+	nbranch set_big_value_to_attempt,positive
+	store 1,mem_sniff_attempt
+set_big_value_to_attempt:	
+	//call sniff_init
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_SNIFF_REQ,mem_lmi_opcode2
+	rtn
+
+lmp_reject_sniff:
+	jam PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch reject_lmp_packet
+
+parse_lmp_start_encryption_req:
+	call accept_lmp_msg
+	call lmp_copy_rand
+	call function_e3
+	branch start_encryption
+	
+parse_lmp_stop_encryption_req:
+	call accept_lmp_msg
+	branch stop_encryption
+	
+
+parse_lmp_switch_req:
+	fetch 4,mem_rxbuf+1
+	lshift pdata,pdata
+	//branch parse_lmp_switch_req_not_accept
+	branch parse_lmp_switch_accept,master
+	fetcht 1,mem_link_key_exists
+	nbranch parse_lmp_switch_req_clear_mark,blank
+parse_lmp_switch_req_not_accept:
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	jam LMP_SWITCH_REQ,mem_lmi_opcode2
+	jam PDU_NOT_ALLOWED,mem_lmo_reason2
+	rtn
+parse_lmp_switch_req_clear_mark:
+	jam LMP_SLOT_OFFSET,mem_lmo_opcode2
+	jam 0,mem_conn_sm
+	branch role_switch_prepare
+
+parse_lmp_switch_accept:
+	call role_switch_prepare
+	set1 mark_reconn_recieve_switch,mark
+	fetch 1,mem_connection_options
+	set0 CONNECTION_SWITCH,pdata
+	store 1,mem_connection_options
+	branch accept_lmp_msg
+
+	
+
+parse_lmp_temp_rand:
+parse_lmp_temp_key:
+parse_lmp_timing_accuracy_res:	
+parse_lmp_unit_key:	
+parse_lmp_use_semi_permanend_key:
+	rtn
+
+	
+parse_lmp_unsniff_req:
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_UNSNIFF_REQ,mem_lmi_opcode2
+	jam BT_EVT_REMOTE_UNSNIFF,mem_fifo_temp
+	call ui_ipc_send_event
+	branch sniff_exit
+	
+parse_lmp_encapsulated_header:
+	fetch 1,mem_rxbuf+1
+	bne ENCAPSULATED_MAJOR_TYPE_P192,parse_lmp_encapsulated_header_reject
+	fetch 1,mem_rxbuf+2
+	bne ENCAPSULATED_MINOR_TYPE_P192,parse_lmp_encapsulated_header_reject
+	fetch 1,mem_rxbuf+3
+	bne ENCAPSULATED_LEN_P192,parse_lmp_encapsulated_header_reject
+	call check_localsm
+	branch parse_lmp_encapsulated_header_master,true
+	jam SP_STAT_KEY_RECV,mem_sp_state
+parse_lmp_encapsulated_header_master:
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_ENCAPSULATED_HEADER,mem_lmi_opcode2
+	branch parse_rx_done
+	
+parse_lmp_encapsulated_header_reject:
+	jam      PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch   reject_lmp_packet
+	
+parse_lmp_accepted_encapsulated_header:
+	//jam LMP_ENCAPSULATED_PAYLOAD,mem_lmi_opcode2
+	//branch   accept_lmp_msg  	
+	jam LMP_ENCAPSULATED_PAYLOAD,mem_lmo_opcode2
+      //   branch   accept_lmp_msg  	
+         rtn
+parse_lmp_accepted_simple_pairing_number:
+	fetch 1,mem_ssp_mode_flag
+	beq SSP_MODE_SSP_PIN_FLAG,parse_lmp_accepted_simple_pairing_number_ssp_pin
+	beq SSP_MODE_PASSKEY_ENTRY_FLAG,parse_lmp_accepted_simple_pairing_number_passkey
+parse_lmp_accepted_simple_pairing_number_common:
+	call check_localsm
+	rtn true
+	jam SP_STAT_CONFIRM_RECV,mem_sp_state
+	rtn
+
+parse_lmp_accepted_simple_pairing_number_ssp_pin:
+	call g_noninit_number_confirm
+	jam BT_EVT_BT_GKEY_GENERATE,mem_fifo_temp
+	call ui_ipc_send_event
+	branch parse_lmp_accepted_simple_pairing_number_common
+
+
+parse_lmp_accepted_simple_pairing_number_passkey:
+	call check_localsm
+	rtn true
+	fetch 1,mem_authentication_passkey_times
+	beq 19,authentication_passkey_end
+	increase 1,pdata
+	store 1,mem_authentication_passkey_times
+//	branch p_authentication_passkey
+
+authentication_passkey:
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	jam      SP_STAT_COMMIT_CALC,mem_sp_state 
+	fetch 1,mem_authentication_passkey_times
+	copy pdata,queue
+	fetch 6,mem_pin
+	qisolate1 pdata
+	setarg 0x80
+	setflag true,0,pdata
+	store 1,mem_passkey_1bit
+	rtn
+
+authentication_passkey_end:	
+	jam SP_STAT_CONFIRM_RECV,mem_sp_state
+	rtn
+
+parse_lmp_accepted_dhkey_check:
+	call parse_lmp_accepted_dhkey_check_common
+pairing_success:
+	fetch 1,mem_flag_pairing_state
+	rtn blank
+	jam FLAG_PAIRING_STATE_NOT_PAIRING,mem_flag_pairing_state
+	jam BT_EVT_BT_PAIRING_SUCCESS,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+parse_lmp_accepted_dhkey_check_common:
+	//here must be change***  shyd
+	call check_localsm
+	ncall g_noninit,true	//when be master  call g_init
+	call g_init,true
+	call check_localsm
+	rtn true
+	jam SP_STAT_LINK_KEY_CALC,mem_sp_state
+	jam SP_FLAG_COMMIT,mem_sp_flag
+	rtn
+
+parse_simple_pairing_confirm:
+	arg mem_sp_confirm_remote,contw
+	arg mem_rxbuf+1,contr
+	call memcpy16
+	fetch 1,mem_ssp_mode_flag
+	rtneq  SSP_MODE_PASSKEY_ENTRY_FLAG
+	branch master_set_mem_master_sp_flag
+	
+parse_lmp_encapsulated_payload:
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_RANDOM_SEND,parse_encapsulated_payload_master
+	fetch    1,mem_sp_state
+	bne SP_STAT_KEY_RECV,parse_lmp_encapsulated_payload_reject
+parse_encapsulated_payload_master:
+	fetch    1,mem_sp_remote_key_recv_count
+	sub      pdata,0x20,contw
+	nbranch  parse_lmp_encapsulated_payload_reject,positive
+	arg      mem_sp_pubkey_remote,contw
+	iadd     contw,contw
+	fetch 8,mem_rxbuf+1
+	istore   8,contw
+	fetch 8,mem_rxbuf+9
+	istore   8,contw
+	fetch    1,mem_sp_remote_key_recv_count
+	increase 16,pdata
+	store    1,mem_sp_remote_key_recv_count
+	bne ENCAPSULATED_LEN_P192,accept_lmp_msg
+parse_lmp_encapsulated_payload_completed:
+	call check_localsm
+	branch accept_lmp_msg,true
+	jam      SP_KEY_VALID,mem_sp_remote_key_invalid
+	jam      SP_STAT_KEY_GENERATE,mem_sp_state
+	jam      SP_FLAG_COMMIT,mem_sp_flag  
+	branch   accept_lmp_msg
+parse_lmp_encapsulated_payload_reject:
+	jam      PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch   reject_lmp_packet	
+parse_lmp_accepted_encapsulated_payload: 
+	fetch 1,mem_sp_local_key_send_count
+	beq	ENCAPSULATED_LEN_P192,parse_lmp_encapsulated_payload_all_accepted
+	jam LMP_ENCAPSULATED_PAYLOAD,mem_lmo_opcode2
+	branch   parse_rx_done 
+	
+parse_lmp_encapsulated_payload_all_accepted:   
+	call check_localsm
+	branch parse_lmp_encapsulated_payload_all_accepted_master,true
+	fetch 1,mem_ssp_mode_flag
+	beq SSP_MODE_PASSKEY_ENTRY_FLAG,parse_lmp_encapsulated_payload_all_accepted_get_passkey
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	jam      SP_STAT_COMMIT_CALC,mem_sp_state 
+	branch   parse_rx_done
+
+parse_lmp_encapsulated_payload_all_accepted_get_passkey:
+	jam BT_EVT_BT_GET_PASSKEY,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+parse_lmp_encapsulated_payload_all_accepted_master:
+	//call sp_master_generate_local_key
+	branch   parse_rx_done   
+
+parse_lmp_simple_pairing_number:
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_RANDOM_SEND,parse_lmp_simple_pairing_number_master
+	fetch    1,mem_sp_state
+	bne SP_STAT_RANDOM_RECV,parse_lmp_simple_pairing_number_reject
+parse_lmp_simple_pairing_number_master:
+	arg      mem_sp_random_remote,contw
+	fetch 8,mem_rxbuf+1
+	istore   8,contw
+	fetch 8,mem_rxbuf+9
+	istore   8,contw
+	call check_localsm
+	branch parse_lmp_simple_pairing_number_master0,true
+	jam      SP_STAT_RANDOM_SEND,mem_sp_state
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	branch accept_lmp_msg  
+parse_lmp_simple_pairing_number_master0:
+	jam SP_STAT_COMMIT_CALC,mem_master_sp_state
+	branch master_set_mem_master_sp_flag
+	//jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2
+	//branch accept_lmp_msg  
+parse_lmp_simple_pairing_number_reject:
+	jam      PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch reject_lmp_packet
+	
+parse_dhkey_check:
+	fetch    1,mem_master_sp_state
+	beq SP_STAT_CONFIRM_SEND,parse_dhkey_check_master
+	fetch    1,mem_sp_state
+	bne SP_STAT_CONFIRM_RECV,parse_lmp_dhkey_check_reject
+parse_dhkey_check_master:
+	arg      mem_sp_check_result,contw
+	arg mem_rxbuf+1,contr
+	call memcpy16
+	call check_localsm
+	branch parse_dhkey_check_master0,true
+	fetch 1,mem_ssp_mode_flag
+	beq SSP_MODE_SSP_PIN_FLAG,number_comparison_mode
+number_comparison_successed:
+	jam 0,mem_flag_mode_ssp_pin
+	jam SP_STAT_CONFIRM_CHECK,mem_sp_state
+	jam SP_FLAG_COMMIT,mem_sp_flag
+	jam LMP_DHKey_Check,mem_lmi_opcode2
+	branch   parse_rx_done
+	
+parse_dhkey_check_master0:
+	jam      SP_STAT_CONFIRM_CHECK,mem_master_sp_state
+	jam      SP_FLAG_COMMIT,mem_master_sp_flag
+	branch   parse_rx_done
+parse_lmp_dhkey_check_reject:
+	jam      PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch reject_lmp_packet
+
+number_comparison_mode:
+	fetch 1,mem_flag_mode_ssp_pin
+	bbit1 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT ,comparison_result
+	set1 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT,pdata
+	store 1,mem_flag_mode_ssp_pin
+	rtn
+	
+comparison_result:
+	bbit1 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,number_comparison_successed
+	jam 0,mem_flag_mode_ssp_pin
+	branch parse_lmp_dhkey_check_reject
+
+	
+parse_lmp_clkoffset_res:
+	branch parse_rx_done
+		
+parse_lmp_encryption_mode_req:
+	fetch 1,mem_connection_options
+	set0 CONNECTION_ENCRYPT
+	store 1,mem_connection_options
+	call accept_lmp_msg
+	nrtn master					/* do sth only if we're master */
+	fetch 1,mem_rxbuf+1
+	fetcht 1,mem_op
+	setflag blank,op_stop_enc,temp
+	nsetflag blank,op_start_enc,temp
+	storet 1,mem_op
+	rtn 
+	
+parse_lmp_features_res:
+	fetcht 8,mem_rxbuf+1		/*fix bcp(baoshijie) err*/
+parse_lmp_features_res_not_hci:	
+	fetch 1,mem_conn_sm
+	rtnne CONN_SM_WAIT_FEATURES_RES
+
+	fetch 1,mem_connection_options
+	bbit0 CONNECTION_FEATURE_EXT,parse_lmp_send_conn
+
+	jam CONN_SM_SEND_FEATURES_EXT,mem_conn_sm
+	rtn
+parse_lmp_send_conn:
+	jam CONN_SM_SEND_CONN_REQ,mem_conn_sm
+	rtn
+parse_lmp_test_activate:
+	fetch 1,mem_debug_config
+	store 1,mem_test_mode_old_debug_config
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_TEST_ACTIVATE,mem_lmi_opcode2
+	rtn
+parse_lmp_test_control:
+	/* the 9 test control parameters are XORed with 0x55 */
+	/* doing the XOR here and storing in mem_temp_payload */
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_TEST_CONTROL,mem_lmi_opcode2
+	force 9,loopcnt
+	arg mem_rxbuf+1,contr
+	arg mem_temp_payload,contw
+parse_lmp_test_xor:
+	ifetch 1,contr
+	xor_into 0x55,pdata
+	istore 1,contw
+	loop parse_lmp_test_xor
+	fetch 1,test_mode_scenario
+	fetcht 1,mem_tester_emulate
+	set0 tester_no_whitening,temp
+	set0 tester_pattern_test,temp
+	beq EXIT_TEST_MODE,	 parse_lmp_test_control_exit
+	beq PAUSE_TEST_MODE,	 parse_lmp_test_control_pause
+	beq CLOSED_LOOP_BACK_ACL,	 parse_lmp_test_control_loopback
+	beq ACL_WITHOUT_WHITENING,	 parse_lmp_test_control_loopback_nowhite
+	beq CLOSED_LOOP_BACK_SCO,	 parse_lmp_test_control_loopback
+	beq SCO_WITHOUT_WHITENING,	 parse_lmp_test_control_loopback_nowhite
+	beq ZERO_PATTERN,	 parse_lmp_test_control_pattern
+	beq ONE_PATTERN,	 parse_lmp_test_control_pattern
+	beq ALT_PATTERN,	 parse_lmp_test_control_pattern
+	beq ALT2_PATTERN,	 parse_lmp_test_control_pattern
+	beq PSEUDORANDOM,	 parse_lmp_test_control_pattern
+	rtn
+parse_lmp_test_control_exit:
+	/* restoring old parameters */
+	fetch 1,mem_tester_emulate
+	set1 tester_exit,pdata
+	set1 tester_change,pdata
+	store 1,mem_tester_emulate
+	rtn
+parse_lmp_test_control_pattern:
+	set1 tester_pattern_test,temp
+	jam 5,mem_lch_code
+	fetch 2,test_mode_data_length
+	iforce loopcnt
+	store 2,mem_len
+	arg mem_rxbuf,contw
+	call pn9
+parse_lmp_test_control_loopback_nowhite:
+	set1 tester_no_whitening,temp
+parse_lmp_test_control_loopback:
+	set1 tester_change,temp
+	force 0,pdata
+	store 1,mem_slave_rcvcnt
+	store 2,mem_tst_pktcnt_crc
+	store 2,mem_tst_pktcnt_dmh
+	store 2,mem_tst_pktcnt_hec
+	store 2,mem_tst_pktcnt_sync
+	fetch 1,test_mode_hopping_mode
+	compare FIXED_FREQ,pdata,0xff
+	setflag true,tester_fixed_freq,temp
+	storet 1,mem_tester_emulate
+	rtn
+
+parse_lmp_test_control_pause:
+	set0 mark_testmode,mark
+	jam 0,mem_tester_emulate
+	fetch 1,mem_debug_config
+	set0 debug_tx_pattern,pdata
+	store 1,mem_debug_config
+	rtn
+
+
+	
+	
+
+lmp_copy_rand:	
+	arg mem_rxbuf+1,contr
+	arg mem_random_number,contw
+	branch memcpy16
+
+lmp_generate_key:
+	jam LMP_COMB_KEY,mem_lmo_opcode2
+	rtn
+
+lmp_start_encryption:
+	nrtn master
+	jam LMP_START_ENCRYPTION_REQ,mem_lmo_opcode2
+	rtn
+	
+lmp_accept_inrand:
+	arg mem_lap,rega
+	call generate_kinit
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_IN_RAND,mem_lmi_opcode2
+	rtn
+
+lmp_disconnect:
+	jam 10,mem_conn_timer
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam LOCAL_HOST,mem_disconn_reason_send	
+	rtn
+
+/*********************************/
+/*********lmp send*************/
+/********************************/
+	/* enable user if a lmp packet is to send */
+send_lmp:
+	bpatchx patch30_2,mem_patch30
+	disable user
+	call lmo_fifo_process
+	fetch 1,mem_lmp_to_send
+	rtn blank
+/* lmp message to be processed. this will either be because host??? */
+/* wants to send a lmp message or because one resulted from the LMP */
+/* processing section */
+/********* outgoing lmp lookup table *************/
+	bbit1 7,send_lmp_escape
+send_lmp0:
+	beq LMP_NAME_REQ,	 send_lmp_name_req
+	beq LMP_NAME_RES,	 send_lmp_name_res
+	beq LMP_ACCEPTED,	 send_lmp_accepted
+	beq LMP_NOT_ACCEPTED,	 send_lmp_not_accepted
+	beq LMP_FEATURES_REQ,	 send_lmp_features_req
+	beq LMP_FEATURES_RES,	 send_lmp_features_res
+	beq LMP_TIMING_ACCURACY_RES,	 send_lmp_timing_accuracy_res
+	beq LMP_VERSION_REQ,	 send_lmp_version_req
+	beq LMP_VERSION_RES,	 send_lmp_version_res
+	beq LMP_SETUP_COMPLETE,	 send_lmp_setup_complete
+	beq LMP_SUPERVISION_TIMEOUT,	 send_lmp_superto
+	beq LMP_HOST_CONNECTION_REQ,send_lmp_no_payload
+	beq LMP_IN_RAND,send_lmp_inrand
+	beq LMP_COMB_KEY,send_lmp_comb_key
+	beq LMP_AU_RAND,send_lmp_aurand
+	beq LMP_SRES,send_lmp_sres
+	beq LMP_ENCRYPTION_MODE_REQ,send_lmp_encryption_mode_req
+	beq LMP_ENCRYPTION_KEY_SIZE_REQ,send_lmp_encryption_key_size_req
+	beq LMP_START_ENCRYPTION_REQ,send_lmp_start_encryption
+	beq LMP_DETACH,send_lmp_detach
+	beq LMP_QUALITY_OF_SERVICE_REQ, send_lmp_quality_of_service_req
+	beq LMP_UNIT_KEY,send_lmp_unit_key
+	//Optional (O)
+	beq LMP_INCR_POWER_REQ,send_lmp_inc_power	
+	beq LMP_CLKOFFSET_RES, send_lmp_clkoffset_res	
+	beq LMP_MAX_POWER,send_lmp_nopayload_reply
+	beq LMP_MAX_SLOT, send_lmp_max_slot
+	beq LMP_MAX_SLOT_REQ, send_lmp_max_slot_req
+	beq LMP_MIN_POWER,send_lmp_nopayload_reply
+	beq LMP_SLOT_OFFSET, send_lmp_slot_offset
+	beq LMP_SWITCH_REQ, send_lmp_switch_req
+	beq LMP_SNIFF_REQ, send_lmp_sniff_req
+	beq LMP_STOP_ENCRYPTION_REQ, send_lmp_stop_encryption_req	
+	beq LMP_TIMING_ACCURACY_REQ, send_lmp_timing_accuracy_req
+	beq LMP_UNSNIFF_REQ, send_lmp_unsniff_req
+	beq LMP_ENCAPSULATED_HEADER,send_lmp_encapsulated_header
+	beq LMP_ENCAPSULATED_PAYLOAD,send_lmp_encapsulated_payload
+	beq LMP_SIMPLE_PAIRING_CONFIRM,send_lmp_simple_pairing_comfirm
+	beq LMP_SIMPLE_PAIRING_NUMBER,send_lmp_simple_pairing_number
+	beq LMP_DHKEY_CHECK,send_lmp_dhkey_check
+	beq LMP_AUTO_RATE,send_lmp_auto_rate
+	beq LMP_ENC_KEY_SIZE_MASK_RES,send_lmp_enc_key_size_mask_res
+	//master only must(M)
+	beq LMP_CLKOFFSET_REQ, send_lmp_clkoffset_req
+	beq LMP_QUALITY_OF_SERVICE, send_lmp_quality_of_service
+	beq LMP_TEST_ACTIVATE, send_lmp_test_activate
+	beq LMP_TEST_CONTROL, send_lmp_test_control
+send_lmp_error:
+	branch assert
+	rtn
+send_lmp_escape:
+	beq LMP_EXT_ACCEPTED,send_lmpext_accepted
+	beq LMP_EXT_FEATURES_RES,send_lmpext_features_res
+	beq LMP_NOT_ACCEPTED_EXT,send_lmpext_not_accepted
+	beq LMP_EXT_FEATURES_REQ,send_lmpext_features_req
+	beq LMP_PACKET_TYPE_TABLE_REQ,send_lmpext_packet_type_table_req
+	beq LMP_PAUSE_ENCRYPTION_REQ,send_lmpext_pause_encryption_req
+	beq LMP_IO_CAP_REQ,send_lmp_io_cap_req
+         beq LMP_IO_CAP_RES,send_lmpext_io_cap_res
+         beq LMP_SNIFF_SUBRATING_REQ,send_lmpext_sniff_subrating_req
+         beq LMP_SNIFF_SUBRATING_RES,send_lmpext_sniff_subrating_res
+	branch assert
+
+
+/******** LMP follow messages **********/
+/****** TID follow received packet  *******/
+
+send_lmp_accepted:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_lmi_opcode
+	istore 1,contw
+	call send_lmp_follow
+	bpatchx patch30_3,mem_patch30
+	fetch 1,mem_lmi_opcode
+	beq LMP_IN_RAND,send_lmp_accepted_inrand
+	beq LMP_ENCRYPTION_MODE_REQ,send_lmp_accepted_enc_mode
+	beq LMP_ENCRYPTION_KEY_SIZE_REQ,send_lmp_accepted_enc_key
+	beq LMP_SNIFF_REQ,send_lmp_accept_sniff_req
+	beq LMP_HOST_CONNECTION_REQ,send_lmp_accepted_connection
+	beq LMP_DHKEY_CHECK,send_lmp_accept_dhkey_check
+	beq LMP_START_ENCRYPTION_REQ,send_create_conn_start_l2cap_timer_sm  
+	rtn	
+	
+send_create_conn_start_l2cap_timer_sm:
+	fetch 1,mem_conn_sm
+	rtn blank
+	jam CONN_SM_WAIT_DONE,mem_conn_sm
+	setarg TIMER_ENPT_WAITE
+	arg enpt_delay_timer,queue
+	branch timer_init
+	
+send_lmp_accept_sniff_req:
+	branch sniff_init
+send_lmp_not_accepted:
+	force 3,pdata
+	call msg_send_lmp
+	fetch 1,mem_lmi_opcode
+	beq LMP_AU_RAND,send_not_accept_aurand
+	istore 1,contw
+	fetch 1,mem_lmo_reason
+	istore 1,contw
+	branch send_lmp_follow
+
+send_not_accept_aurand:
+	istore 1,contw
+	fetch 1,mem_lmo_reason
+	istore 1,contw
+	arg mem_sres_tid,temp
+	branch special_tid_store
+
+send_lmpext_accepted:	
+	force 4,queue
+	call send_lmpext
+	setarg LMP_ESCAPE
+	istore 1,contw
+	fetch 1,mem_lmi_opcode
+	set0 7,pdata
+	istore 1,contw
+	fetch 1,mem_lmi_opcode
+	branch send_lmp_follow
+
+send_lmpext_not_accepted:
+	force 5,queue
+	call send_lmpext
+	setarg LMP_ESCAPE
+	istore 1,contw
+	fetch 1,mem_lmi_opcode
+	set0 7,pdata
+	istore 1,contw
+	fetch 1,mem_lmo_reason
+	istore 1,contw
+	branch send_lmp_follow
+	
+
+send_lmp_accepted_inrand:
+	call clear_linkkey
+	call tid_check	
+	rtn true
+	branch lmp_generate_key
+
+send_lmp_accepted_enc_mode:
+	fetch 1,mem_op
+	bbit1 op_start_enc,send_lmp_accepted_enc_start
+	rtnbit0 op_stop_enc
+	jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2
+	set0 op_stop_enc,pdata
+	call tid_reply
+	branch send_lmp_accepted_enc_exit
+send_lmp_accepted_enc_start:
+	jam LMP_ENCRYPTION_KEY_SIZE_REQ,mem_lmo_opcode2
+	set0 op_start_enc,pdata
+send_lmp_accepted_enc_exit:
+	store 1,mem_op
+	rtn
+
+send_lmp_accepted_enc_key:
+	call check_localsm
+	branch lmp_start_encryption,true
+	rtn
+
+send_lmp_accepted_connection:
+	jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmo_opcode2
+	//jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	fetch 1,mem_lmp_conn_state
+	set1 RECEIVED_CONN_REQ,pdata
+	store 1,mem_lmp_conn_state
+	jam BT_EVT_BB_CONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+send_lmp_accept_dhkey_check:
+	rtn
+/******** LMP reply messages **********/
+/****** TID always set to remote  *******/
+
+send_lmpext_features_res:
+	force 12,queue
+	call send_lmpext
+	setarg 0x01
+	istore 1,contw
+	fetch 2,mem_lmpext_ssp_enable
+	istore 2,contw
+	setarg 0
+	istore 3,contw
+	setarg 0x00
+	istore 4,contw
+	branch send_lmp_reply
+send_lmpext_io_cap_res:     
+	force 5,queue
+         call send_lmpext
+       	fetch 3,mem_sp_iocap_local
+         istore 3,contw
+	call send_lmp_reply
+	jam FLAG_PAIRING_STATE_PAIRING,mem_flag_pairing_state
+	fetch 1,mem_sp_iocap_local
+	beq DISPLAY_YESNO,responder_iocap_display_yesno
+	beq KEYBOARD_ONLY,responder_iocap_keyboard_only
+	beq NO_INPUT_NO_OUTPUT,responder_iocap_no_input_no_output
+	rtn
+
+responder_iocap_keyboard_only:
+	fetch 1,mem_sp_iocap_remote
+	beq DISPLAY_ONLY,responder_iocap_keyboard_only_initiator_iocap_display_only
+	beq DISPLAY_YESNO,responder_iocap_keyboard_only_initiator_iocap_display_yesno
+	beq KEYBOARD_ONLY,responder_iocap_keyboard_only_initiator_iocap_keyboard_only
+	beq NO_INPUT_NO_OUTPUT,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output
+	rtn
+
+
+responder_iocap_display_yesno:
+	fetch 1,mem_sp_iocap_remote
+	beq DISPLAY_ONLY,responder_iocap_display_yesno_initiator_iocap_display_only
+	beq DISPLAY_YESNO,responder_iocap_display_yesno_initiator_iocap_display_yesno
+	beq KEYBOARD_ONLY,responder_iocap_display_yesno_initiator_iocap_keyboard_only
+	beq NO_INPUT_NO_OUTPUT,responder_iocap_display_yesno_initiator_iocap_no_input_no_output
+	rtn
+
+	
+responder_iocap_no_input_no_output:
+	fetch 1,mem_sp_iocap_remote
+	beq DISPLAY_ONLY,responder_iocap_no_input_no_output_initiator_iocap_display_only
+	beq DISPLAY_YESNO,responder_iocap_no_input_no_output_initiator_iocap_display_yesno
+	beq KEYBOARD_ONLY,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only
+	beq NO_INPUT_NO_OUTPUT,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output
+	rtn
+
+responder_iocap_keyboard_only_initiator_iocap_no_input_no_output:
+responder_iocap_display_yesno_initiator_iocap_no_input_no_output:
+responder_iocap_display_yesno_initiator_iocap_display_only:
+responder_iocap_no_input_no_output_initiator_iocap_display_only:
+responder_iocap_no_input_no_output_initiator_iocap_display_yesno:
+responder_iocap_no_input_no_output_initiator_iocap_keyboard_only:
+responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output:
+set_ssp_mode_justwork: 
+	jam SSP_MODE_JUST_WORK_FLAG,mem_ssp_mode_flag
+	fetch 1,mem_classic_bt_flag
+	bbit1 FLAG_SSP_REJECT_JUSTWORK,app_bt_disconnect
+	rtn
+
+responder_iocap_display_yesno_initiator_iocap_display_yesno:
+set_ssp_mode_numeric_comparison: 
+	jam SSP_MODE_SSP_PIN_FLAG,mem_ssp_mode_flag
+	rtn
+
+responder_iocap_keyboard_only_initiator_iocap_display_yesno:
+responder_iocap_keyboard_only_initiator_iocap_keyboard_only:	
+responder_iocap_keyboard_only_initiator_iocap_display_only:	
+responder_iocap_display_yesno_initiator_iocap_keyboard_only:
+set_ssp_mode_passkey: 
+	jam SSP_MODE_PASSKEY_ENTRY_FLAG,mem_ssp_mode_flag
+	rtn
+
+
+classic_bt_set_reject_justwork_flag:
+	arg FLAG_SSP_REJECT_JUSTWORK,queue
+	branch classic_bluetooth_set_flag
+
+classic_bt_clr_reject_justwork_flag:
+	arg FLAG_SSP_REJECT_JUSTWORK,queue
+	branch classic_bluetooth_clr_flag
+
+classic_bluetooth_set_flag:
+	fetch 1,mem_classic_bt_flag
+	qset1 pdata
+	store 1,mem_classic_bt_flag
+	rtn
+
+classic_bluetooth_clr_flag:
+	fetch 1,mem_classic_bt_flag
+	qset0 pdata
+	store 1,mem_classic_bt_flag
+	rtn
+
+         
+send_lmp_io_cap_req:
+	force 5,queue
+	call send_lmpext
+	fetch 3,mem_sp_iocap_local
+	istore 3,contw
+	branch send_lmp_request
+	
+
+send_lmpext_sniff_subrating_req: 
+
+	rtn
+send_lmpext_sniff_subrating_res: 
+         force 9,queue
+         call send_lmpext
+         fetch 1,mem_subsniff_rate
+         istore 1,contw
+         fetch 2,mem_subsniff_tcmax
+         istore 2,contw
+         fetch 4,mem_subsniff_instant
+         istore 4,contw
+	branch send_lmp_reply
+
+send_lmp_name_res:
+	force 17,pdata
+	call msg_send_lmp
+	fetch 1,mem_lmi_opcode  /* loading name offset */
+	copy pdata,temp
+	beq 0x00,send_lmp_name_res_offset_ok
+	beq 0x0e,send_lmp_name_res_offset_ok
+	beq 0x1c,send_lmp_name_res_offset_ok
+	rtn
+send_lmp_name_res_offset_ok:
+	istore 1,contw	/* writing name offset */
+	fetch 1,mem_local_name_length
+	istore 1,contw	/* writing name length */
+	arg 14,loopcnt
+	setarg mem_local_name
+	iadd temp,contr	/* setting read location */
+	call memcpy
+	branch send_lmp_reply
+
+
+send_lmp_timing_accuracy_res:
+	force 3,pdata
+	call msg_send_lmp
+	setarg 0x0114
+	istore 2,contw
+	branch send_lmp_reply
+
+send_lmp_clkoffset_res:
+	// dopod s505 must wait for this res
+	force 3,pdata
+	call msg_send_lmp
+	fetch 4,mem_clke_bt
+	isub clkn_bt,pdata
+	branch send_lmp_clkoffset_res_master,master
+	sub pdata,0,pdata		/* our role is slave */
+send_lmp_clkoffset_res_master:	
+	// bit 16-2 of clkslave-clkmaster
+	rshift2 pdata,pdata
+	set0 15,pdata
+	istore 2,contw
+	branch send_lmp_reply
+
+send_lmp_version_res:
+	force 6,pdata
+	call msg_send_lmp
+	fetch 5,mem_lmp_version
+	istore 5,contw
+	branch send_lmp_reply
+
+send_lmp_features_res:
+	force 9,pdata
+	call msg_send_lmp
+	fetch 8,mem_features
+	istore 8,contw
+	branch send_lmp_reply  
+
+
+/******** LMP request messages **********/
+/****** TID always set to local initiated *******/
+	
+
+send_lmpext_features_req:
+	force 12,queue
+	call send_lmpext
+	setarg 0x01
+	istore 1,contw
+	fetch 2,mem_lmpext_ssp_enable
+	istore 2,contw
+	setarg 0
+	istore 3,contw
+	setarg 0x00
+	istore 4,contw
+	branch send_lmp_request
+
+send_lmpext_packet_type_table_req:
+	force 3,queue
+	call send_lmpext
+	fetch 1,mem_ptt
+	istore 1,contw
+	disable user
+	call send_lmp_request
+	nrtn user
+	nrtn master
+	fetch 1,mem_afh_cfg
+	rtnbit0 AFH_CFG_ON
+	call afh_init
+	branch afh_open_all_channels
+	
+//default:featrue is enable,extfeature is disable
+ssp_enable:
+	bpatchx patch30_4,mem_patch30
+	fetch 1,mem_features+6
+	set1 param_featrue_ssp,pdata
+	store 1,mem_features+6
+	setarg param_lmpext_ssp_enable
+	store 2,mem_lmpext_ssp_enable
+	rtn
+
+ssp_disable:
+	bpatchx patch30_5,mem_patch30
+	fetch 1,mem_features+6
+	set0 param_featrue_ssp,pdata
+	store 1,mem_features+6
+	setarg 0
+	store 2,mem_lmpext_ssp_enable
+	rtn
+	
+afh_init:
+	jam 0x3,mem_afh_cfg
+	setarg 0
+	store 4,mem_afh_timer
+	arg mem_afh_map_lo,contw
+	call afh_reset_map
+	arg mem_afh_map_new,contw
+	call afh_reset_map
+	arg mem_afh_classify_channel_map,contw
+	call afh_reset_map
+	branch afh_clear_error_counter
+afh_open_all_channels:
+	arg mem_afh_map_new,contw
+	call afh_reset_map
+	call afh_clear_error_counter
+	branch afh_set_send_flag
+
+
+afh_reset_map:
+	setarg 0xffffff
+	istore 3,contw
+	istore 3,contw
+	istore 3,contw
+	setarg 0x7f
+	istore 1,contw
+	rtn
+afh_clear_error_counter:
+	setarg 0
+	store 2,mem_afh_error_total
+	rtn
+afh_set_send_flag:
+	fetch 1,mem_afh_cfg
+	set1 send_lmp_set_afh,pdata
+	store 1,mem_afh_cfg
+	rtn
+
+
+send_lmpext_pause_encryption_req:
+	force 2,queue
+	call send_lmpext
+	nbranch send_lmp_reply,master
+	// assume slave will not send pause req firstly???
+	branch send_lmp_request
+
+
+	
+send_lmp_detach:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_disconn_reason_send
+	istore 1,contw
+	call send_lmp_request
+prepare_disconnect:
+	fetch 1,mem_op
+	set1 op_disconn,pdata
+	store 1,mem_op
+	jam 50,mem_conn_timer
+	rtn
+	
+
+send_lmp_no_payload:
+	force 1,pdata
+	call msg_send_lmp
+	branch send_lmp_request
+send_lmp_nopayload_reply:
+	force 1,pdata
+	call msg_send_lmp
+	branch send_lmp_reply
+	
+	
+send_lmp_encryption_mode_req:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_state_map
+	isolate0 smap_encryption,pdata
+	setflag true,0,pdata
+	and_into 1,pdata
+	istore 1,contw
+	branch send_lmp_request
+
+
+send_lmp_superto:
+	force 3,pdata
+	call msg_send_lmp
+	fetch 2,mem_supervision_to
+	istore 2,contw
+	branch send_lmp_request
+
+send_lmp_name_req:
+	jam 250,mem_conn_timer
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_name_offset
+	istore 1,contw
+	branch send_lmp_request
+
+send_lmp_test_control:
+	force 10,pdata
+	call msg_send_lmp
+	arg mem_temp_payload,contr
+	force 9,loopcnt
+send_lmp_test_control_loop:	
+	ifetch 1,contr
+	xor_into 0x55,pdata
+	istore 1,contw
+	loop send_lmp_test_control_loop
+	branch send_lmp_request  
+
+send_lmp_quality_of_service_req:
+	branch send_lmp_request
+send_lmp_unit_key:
+	branch send_lmp_request
+
+send_lmp_slot_offset:
+	rtn master
+	call calc_slot_offset
+	force 9,pdata
+	call msg_send_lmp
+	fetch 2,mem_slot_offset
+	istore 2,contw
+	fetch 3,mem_lap
+	istore 3,contw
+	fetch 1,mem_uap
+	istore 1,contw
+	fetch 2,mem_nap
+	istore 2,contw
+	bmark0 mark_switch_initiated,send_lmp_slot_offset_reply
+	set0 mark_switch_initiated,mark
+	call send_lmp_request
+	jam LMP_SWITCH_REQ,mem_lmo_opcode2
+	rtn
+send_lmp_slot_offset_reply:
+	call send_lmp_reply
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_SWITCH_REQ,mem_lmi_opcode2
+	rtn
+	
+send_lmp_switch_req:
+	arg 0x200,temp
+	branch switch_on_native,master
+	deposit clke_bt
+	branch switch_slack
+switch_on_native:
+	deposit clkn_bt
+switch_slack:
+	deposit bt_clk
+	iadd temp,pdata
+	and_into 0x1fc,pdata
+	store 4,mem_sniff_anchor
+	force 5,pdata
+	call msg_send_lmp
+	fetch 4,mem_sniff_anchor		/* reused as switch instant */
+	rshift pdata,pdata
+	istore 4,contw
+	branch send_lmp_request
+	
+send_lmp_sniff_req:
+	force 10,pdata
+	call msg_send_lmp
+	arg mem_sniff_payload,contr
+	ifetch 9,contr
+	istore 9,contw
+	branch send_lmp_request
+
+	
+send_lmp_timing_accuracy_req:
+/* default to TID_NORM_SEND */
+	force 3,pdata
+	call msg_send_lmp
+	setarg 0x0114
+	istore 2,contw
+	branch send_lmp_request
+	
+send_lmp_unsniff_req:
+//--------------------need to completa
+	force 1,pdata
+	call msg_send_lmp
+	//fetch 1,mem_unsniff_pending
+	//nbranch send_msg_done,blank
+	//jam 1,mem_unsniff_pending
+	//fetch 2,mem_sniff_attempt
+	//fetch 2,mem_nsniff_attempt
+	//lshift3 pdata,pdata
+	//lshift pdata,pdata
+	//store 1,mem_unsniff_cnt
+	branch send_lmp_request
+
+	
+send_lmp_max_slot:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_max_slot
+	istore 1,contw
+	branch send_lmp_request
+	
+	
+send_lmp_max_slot_req:
+	force 2,pdata
+	call msg_send_lmp
+	setarg 0x05		/*5 slot*/
+	istore 1,contw
+	branch send_lmp_request
+
+
+send_lmp_inc_power:
+	force 2,pdata
+	call msg_send_lmp
+	setarg 0x00		/*5 slot*/
+	istore 1,contw
+	branch send_lmp_request
+
+
+send_lmp_setup_complete_by_module:
+	jam LMP_MAX_SLOT_REQ,mem_lmo_opcode2
+	rtn
+send_lmp_setup_complete:
+	fetch 1,mem_device_option
+	sub pdata,dvc_op_module,null
+	call send_lmp_setup_complete_by_module,zero
+	fetch 1,mem_state
+	set1 state_conn_comp,pdata
+	store 1,mem_state
+	copy clkn_bt,pdata
+	store 4,mem_aurand_send_delay_time
+	fetch 1,mem_lmp_conn_state
+	bbit1 SENT_SETUP_COMPLETE,send_lmp_setup_complete_has_sent
+	set1 SENT_SETUP_COMPLETE,pdata
+	store 1,mem_lmp_conn_state
+	jam BT_EVT_SETUP_COMPLETE,mem_fifo_temp
+	call ui_ipc_send_event
+	force 1,pdata
+	call msg_send_lmp
+	branch send_lmp_request
+send_lmp_setup_complete_has_sent:
+	jam 0,mem_lmp_to_send
+	rtn
+	
+send_lmp_version_req:
+	force 6,pdata
+	call msg_send_lmp
+	fetch 5,mem_lmp_version
+	istore 5,contw
+	branch send_lmp_request
+
+send_lmp_features_req:
+	force 9,pdata
+	call msg_send_lmp
+	fetch 8,mem_features
+	istore 8,contw
+	branch send_lmp_request  
+
+sp_master_send_io_cap_get:
+	jam SP_FLAG_COMMIT,mem_master_sp_flag
+	fetch 1,mem_sp_local_key_invalid
+	rtnne SP_KEY_VALID
+	jam SP_MASTER_STAT_START_DONE,mem_master_sp_state
+	rtn
+
+sp_master_send_io_cap_send:
+	call tid_initiate
+	jam LMP_IO_CAP_REQ,mem_lmo_opcode2
+	jam SP_STAT_KEY_SEND,mem_master_sp_state
+	rtn
+	
+	
+sp_master_send_LMP_ENCAPSULATED_HEADER:
+	call tid_initiate
+	jam      LMP_ENCAPSULATED_HEADER,mem_lmo_opcode2
+	jam SP_STAT_RANDOM_SEND,mem_master_sp_state
+	rtn
+	
+sp_master_commitment_compare:
+	arg mem_sp_calc_result_high,rega
+	arg mem_sp_confirm_remote,regb
+	arg 16,loopcnt
+	call string_compare
+	branch sp_master_commitment_compare_success,zero
+	jam SP_STAT_NULL,mem_master_sp_state
+	call master_clear_mem_master_sp_flag
+	jam   PDU_NOT_ALLOWED,mem_lmo_reason2
+	jam 	LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2 
+	branch reject_lmp_packet
+sp_master_commitment_compare_success:
+	jam 	SP_STAT_CONFIRM_CALC,mem_master_sp_state
+	call master_set_mem_master_sp_flag
+	jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2
+	branch accept_lmp_msg  
+	
+
+	
+sp_master_send_lmp_simple_pairing_number:
+	jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmo_opcode2
+	rtn
+	
+
+
+sp_send_lmp_encapsulated_header:
+	// calculate the private & public key here
+	//jam      LMP_ENCAPSULATED_HEADER,mem_lmp_to_send
+	jam      LMP_ENCAPSULATED_HEADER,mem_lmo_opcode2
+	//jam      TID_PAIRING,mem_lmp_tid
+	rtn
+	//fetch 1,mem_tid_table
+	//set1 TID_PAIRING,pdata
+	//store 1,mem_tid_table
+     
+    
+send_lmp_encapsulated_header: 
+	jam 0,mem_sp_local_key_send_count
+	force 4,pdata
+	call msg_send_lmp
+	force ENCAPSULATED_MAJOR_TYPE_P192,pdata
+	istore 1,contw
+	force ENCAPSULATED_MINOR_TYPE_P192,pdata
+	istore 1,contw  
+	force ENCAPSULATED_LEN_P192,pdata
+	istore 1,contw 
+	call check_localsm
+	branch send_lmp_request,true
+	branch send_lmp_reply
+
+send_lmp_encapsulated_payload:
+	//jam      TID_PAIRING,mem_lmp_tid
+	 force 17,pdata
+	call msg_send_lmp
+	fetch 1,mem_sp_local_key_send_count
+	arg mem_sp_pubkey_local,contr
+	iadd contr,contr    
+	ifetch   8,contr
+	istore   8,contw
+	ifetch   8,contr
+	istore   8,contw
+	fetch    1,mem_sp_local_key_send_count
+	increase 16,pdata
+	store    1,mem_sp_local_key_send_count
+	call check_localsm
+	branch send_lmp_request,true
+	branch send_lmp_reply
+	//branch send_lmp_request
+	
+sp_send_lmp_simple_pairing_comfirm:
+        jam      SP_STAT_RANDOM_RECV,mem_sp_state
+        jam      LMP_SIMPLE_PAIRING_CONFIRM,mem_lmo_opcode2
+        rtn
+send_lmp_simple_pairing_comfirm:
+        //jam      SP_STAT_RANDOM_RECV,mem_sp_state
+        //jam      TID_PAIRING,mem_lmp_tid
+        force    17,pdata
+        call msg_send_lmp   
+        arg      mem_sp_calc_result_high,contr
+        ifetch   8,contr
+        istore   8,contw
+        ifetch   8,contr
+        istore   8,contw 
+        branch send_lmp_reply
+
+sp_send_lmp_simple_pairing_number:
+	jam      LMP_SIMPLE_PAIRING_NUMBER,mem_lmo_opcode2
+	rtn
+
+send_lmp_simple_pairing_number:
+	//jam      TID_PAIRING,mem_lmp_tid
+	call check_localsm
+	call sp_local_random_key_generator,true
+	force    17,pdata
+	call msg_send_lmp
+	arg      mem_sp_random_local,contr
+	ifetch   8,contr
+	istore   8,contw
+	ifetch   8,contr
+	istore   8,contw
+	call check_localsm
+	nbranch send_lmp_reply,true
+	branch send_lmp_request,true
+
+master_sp_sm_end:
+	//jam DEFAULT_STATEMACHINE,mem_sp_localsm
+	jam SP_STAT_DONE,mem_master_sp_state
+sp_aurand_send:
+	call tid_initiate
+	jam LMP_AU_RAND,mem_lmo_opcode2
+	call check_localsm_master
+	branch sp_master_key_prarm_push,true
+	branch sp_link_key_prarm_push
+master_sp_send_lmp_dhkey_check:
+	call tid_reply
+sp_send_lmp_dhkey_check: 
+	jam      LMP_DHKEY_CHECK,mem_lmo_opcode2
+	rtn
+send_lmp_dhkey_check: 
+	//jam      TID_PAIRING,mem_lmp_tid
+	force    17,pdata
+	call     msg_send_lmp
+	arg      mem_sp_calc_result_high,contr
+	ifetch   8,contr
+	istore   8,contw
+	ifetch   8,contr
+	istore   8,contw 
+	call check_localsm
+	nbranch send_lmp_reply,true
+	branch send_lmp_request,true
+
+send_lmp_enc_key_size_mask_res:
+	force 3,pdata
+	call msg_send_lmp   
+	setarg 0xfffe //enc key size mask
+	istore 2,contw
+	branch send_lmp_reply
+
+send_lmp_auto_rate:
+	branch send_lmp_request
+send_lmp_clkoffset_req:
+	branch send_lmp_request
+send_lmp_quality_of_service:
+	branch send_lmp_request
+send_lmp_test_activate:
+	branch send_lmp_request
+
+/******** LMP request/reply messages **********/
+/****** TID transaction specific *******/
+
+send_lmp_comb_key:
+	call generate_random_number
+	arg mem_lap,rega
+	call generate_linkkey
+	force 17,pdata
+	call msg_send_lmp
+	arg mem_kinit,rega
+	arg mem_random_number,regb
+	call xor16
+	nbranch send_lmp_follow,master
+	branch send_lmp_tid
+
+send_lmp_inrand:
+	call generate_random_number
+	arg mem_plap,rega
+	call generate_kinit
+send_lmp_rand:	/* used by in_rand,au_rand,start_encrypt */
+	force 17,pdata
+	call msg_send_lmp
+	arg mem_random_number,contr
+	call memcpy16
+	fetch 1,mem_conn_sm 
+	beq CONN_SM_AUTH_WAIT,send_lmp_request
+	beq CONN_SM_PAIRING_WAIT,send_lmp_request
+	branch send_lmp_tid
+
+send_lmp_aurand:
+	fetch 1,mem_pairing_auth
+	branch send_lmp_aurand_notpairing,blank
+	call check_localsm
+	call tid_initiate,true
+	ncall tid_reply,true
+	branch send_lmp_aurand_common
+send_lmp_aurand_notpairing:
+	call tid_initiate
+send_lmp_aurand_common:
+	call generate_random_number
+	branch send_lmp_rand
+
+send_lmp_sres:
+	arg mem_lap,rega
+	call function_e1
+	force 5,pdata
+	call msg_send_lmp
+	fetch 4,mem_input_store
+	istore 4,contw
+	arg mem_sres_tid,temp
+	call special_tid_store
+	call copy_aco
+	call check_localsm
+	branch send_lmp_sres_master,true
+	jam DONE_ENCRYP,mem_wait_encryption
+	fetch 1,mem_pairing_auth
+	rtn blank
+	jam LMP_AU_RAND,mem_lmo_opcode2
+send_lmp_sres_master:
+	fetch 1,mem_link_key_exists
+	rtn blank
+send_lmp_sres_startenc:
+	call check_localsm
+	nbranch send_lmp_sres_startenc_slave,true
+	fetch 1,mem_auth_enable
+	rtn blank
+	jam LMP_ENCRYPTION_MODE_REQ, mem_lmo_opcode2
+	rtn
+send_lmp_sres_startenc_slave:
+	rtnmark0 mark_slave_in_rand_accepted
+	set0 mark_slave_in_rand_accepted,mark
+	jam LMP_ENCRYPTION_MODE_REQ, mem_lmo_opcode2
+	rtn
+	
+
+	
+send_lmp_start_encryption:
+	call generate_random_number
+	call function_e3
+	force 17,pdata
+	call msg_send_lmp
+	arg mem_random_number,contr
+	call memcpy16
+	branch send_lmp_tid
+
+send_lmp_stop_encryption_req:
+	force 1,pdata
+	call msg_send_lmp
+	branch send_lmp_tid
+
+send_lmp_encryption_key_size_req:
+	force 2,pdata
+	call msg_send_lmp
+	force 16,pdata
+	istore 1,contw
+	store 1,mem_key_size
+	branch send_lmp_tid
+
+msg_send_lmp:
+/* FLOW is set high and LMP is indicated */
+	lshift3 pdata,pdata
+	or_into 0x07,pdata
+	store 1,mem_lmo_header_length
+	arg 17,loopcnt
+	arg mem_lmo_payload,contw
+	call clear_mem
+	arg mem_lmo_payload,contw
+	rtn
+
+send_lmpext:
+	and pdata,0x7f,rega
+	jam LMP_ESCAPE,mem_lmp_to_send
+	deposit queue
+	call msg_send_lmp
+	deposit rega
+	istore 1,contw
+	rtn
+
+send_lmp_follow:
+	fetch 1,mem_lmp_to_send
+	lshift pdata,pdata
+	fetcht 1,mem_state_map
+	isolate1 smap_lmptid,temp
+	setflag true,0,pdata
+	branch send_lmp_exit
+
+
+send_lmp_tid:
+	fetcht 1,mem_state_map
+	and_into 1,temp
+	branch send_lmp_end
+
+send_lmp_reply:
+	force 0,temp
+	branch send_lmp_end
+	
+send_lmp_request:
+	force 1,temp
+send_lmp_end:
+	fetch 1,mem_lmp_to_send
+	lshift pdata,pdata
+	setflag master,0,pdata
+	ixor temp,pdata
+send_lmp_exit:
+	store 1,mem_lmo_header_opcode
+	jam 0,mem_lmp_to_send
+	call lmo_fifo_process_lmo0empty
+	enable user
+	rtn
+
+//blank : not full 
+lmo_fifo_check:
+	fetch 1,mem_lmo_opcode2
+	rtn blank
+	call lmo_fifo_process
+	fetch 1,mem_lmo_opcode2
+	rtn
+
+lmo_fifo_process:
+	bpatchx patch30_6,mem_patch30
+	fetch 1,mem_lmp_to_send
+	branch lmo_fifo_process_lmo0empty,blank
+	fetch 1,mem_lmo_opcode1
+	nrtn blank
+	branch lmo_fifo_process_lmo2to1
+lmo_fifo_process_lmo0empty:
+	fetch 1,mem_lmo_opcode1
+	branch lmo_fifo_process_lmo1_empty,blank
+	fetch 3,mem_lmo_opcode1
+	store 3,mem_lmp_to_send//1=>0
+	fetcht 1,mem_lmo_tid1
+	fetch 1,mem_state_map
+	set0 smap_lmptid,pdata
+	ior temp,pdata
+	store 1,mem_state_map
+	jam 0,mem_lmo_opcode1
+lmo_fifo_process_lmo2to1:
+	fetch 1,mem_lmo_opcode2
+	rtn blank
+	fetch 4,mem_lmo_opcode2
+	store 4,mem_lmo_opcode1//2=>1
+	jam 0,mem_lmo_opcode2
+	rtn
+lmo_fifo_process_lmo1_empty:
+	fetch 1,mem_lmo_opcode2
+	rtn blank
+	fetch 3,mem_lmo_opcode2
+	store 3,mem_lmp_to_send//2=>0	
+	fetcht 1,mem_lmo_tid2
+	fetch 1,mem_state_map
+	set0 smap_lmptid,pdata
+	ior temp,pdata
+	store 1,mem_state_map
+	jam 0,mem_lmo_opcode2
+	rtn
+	
+//input:temp
+special_tid_store:
+	bpatchx patch30_7,mem_patch30
+	fetch 1,mem_state_map
+	copy pdata,regc
+	ifetch 1,temp
+	call pop_tid_follow
+	call send_lmp_follow
+	copy regc,pdata
+	store 1,mem_state_map
+	rtn
+	
+tid_reply:
+	fetcht 1,mem_state_map
+	set0 smap_lmptidinit,temp
+	storet 1,mem_state_map
+	rtn
+	
+tid_initiate:
+	fetcht 1,mem_state_map
+	set1 smap_lmptidinit,temp
+	storet 1,mem_state_map
+	rtn
+	
+	/* true if transaction from remote */
+tid_check:
+	nsetflag master,smap_lmptid,pdata //it is ok
+	fetcht 1,mem_state_map
+	ixor temp,pdata
+	isolate1 smap_lmptid,pdata
+	rtn	
+
+	/* set to remote */
+tid_set_reply:
+	fetch 1,mem_state_map
+	setflag master,smap_lmptid,pdata //it is ok
+	store 1,mem_state_map
+	rtn
+
+	/*rtn true when we lead lmp*/
+check_localsm:
+	fetch 1,mem_sp_localsm
+	compare 	LOCAL_STATEMACHINE,pdata,0x7f
+	rtn
+setlocalsm_master:
+	fetch 1,mem_sp_localsm
+	set1 7,pdata
+	store 1,mem_sp_localsm
+	rtn
+setlocalsm_slave:
+	fetch 1,mem_sp_localsm
+	set0 7,pdata
+	store 1,mem_sp_localsm
+	rtn
+check_localsm_master:
+	fetch 1,mem_sp_localsm
+	isolate1 7,pdata
+	store 1,mem_sp_localsm
+	rtn
+	
+generate_random_number:
+	/* generating a 16 byte random number,storing in ape_random_number */
+	arg mem_random_number,contw
+generate_random:
+	force 16,loopcnt
+generate_random_another:
+generate_random_loop:
+	random pdata
+	istore 1,contw
+	loop generate_random_another
+	rtn
+
+generate_linkkey:
+	call function_e21
+	arg mem_link_key,rega
+	arg mem_input_store,regb
+	ifetch 8,rega					/* check if already got comb key */
+	fetcht 1,mem_state
+	nsetflag blank,state_combkey,temp
+	storet 1,mem_state
+	copy rega,contw
+	call  xor16
+	branch generate_linkkey_continue
+
+/*********************************/
+/*********lmp send*************/
+/********************************/
+
+process_conn_sm:
+	//nrtn master
+	bpatchx patch31_0,mem_patch31
+
+	call lmo_fifo_check
+	nrtn blank
+process_conn_sm_continue:
+	fetch 1,mem_conn_sm
+	rtn blank
+	/* state machine begins in standby */
+	//beq CONN_SM_STANDBY, host_create_conn_begin
+	//beq CONN_SM_WAIT_PAGE, host_create_conn_wait_page
+	beq CONN_SM_SEND_CONN_REQ, host_create_conn_send_conn_req
+	beq CONN_SM_WAIT_CONN_ACCEPT, host_create_conn_wait_accept
+	beq CONN_SM_SEND_FEATURES, host_create_conn_send_features
+	beq CONN_SM_WAIT_FEATURES_RES, host_create_conn_waiting
+	beq CONN_SM_SEND_SWITCH,host_create_conn_send_switch
+	beq CONN_SM_AUTH_PAIR, host_create_conn_auth_pair
+	beq CONN_SM_AUTH_PAIR_WAIT, host_create_conn_auth_pair_wait
+	beq CONN_SM_ENCRYPT, host_create_conn_encrypt
+	beq CONN_SM_ENCRYPT_WAIT, host_create_conn_encrypt_wait
+	beq CONN_SM_ENCRYPT_WAIT_CLEAR, host_create_conn_encrypt_wait_clear
+	beq CONN_SM_SEND_SETUP_COMPLETE, host_create_conn_send_setup_complete
+	beq CONN_SM_WAIT_SETUP_COMPLETE, host_create_conn_wait_setup_complete
+	beq CONN_SM_DETACH_DELAY,host_create_conn_master_detach
+	beq CONN_SM_SEND_VERSION, host_create_conn_send_version
+	beq CONN_SM_WAIT_VERSION, host_create_conn_waiting
+	beq CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION, host_creat_conn_wait_switch
+	beq CONN_SM_SEND_FEATURES_EXT,host_creat_conn_send_feat_ext
+	beq CONN_SM_WAIT_FEATURES_EXT,host_create_conn_waiting
+	beq CONN_SM_PAIRING,host_create_conn_pairing
+	beq CONN_SM_PAIRING_WAIT,host_create_conn_pairing_wait
+	beq CONN_SM_AUTH,host_create_conn_auth
+	beq CONN_SM_AUTH_WAIT,host_create_conn_auth_wait
+	beq CONN_SM_DONE,host_create_conn_done
+	beq CONN_SM_WAIT_DONE,host_create_conn_done_wait
+	jam CONN_SM_STANDBY,mem_conn_sm
+	/* sending error message to host */
+	rtn
+host_create_conn_done:
+	fetch 1,mem_lmp_conn_state		
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	rtnbit0 SENT_SETUP_COMPLETE
+	jam CONN_SM_STANDBY,mem_conn_sm
+	call host_conn_judge_encrypt
+	branch scheduler_start_upper_sm
+	
+host_conn_judge_encrypt:
+	fetch 1,mem_connection_options
+	rtnbit0 CONNECTION_ENCRYPT
+	jam CONN_SM_ENCRYPT_WAIT,mem_conn_sm
+	rtn
+
+host_create_conn_done_wait:
+	arg enpt_delay_timer,queue
+	call timer_check
+	nrtn blank
+	jam CONN_SM_DONE,mem_conn_sm
+	rtn
+	
+host_create_conn_auth:
+	fetch 1,mem_connection_options
+	set0 CONNECTION_AUTH,pdata
+	store 1,mem_connection_options
+	jam CONN_SM_AUTH_WAIT,mem_conn_sm
+	jam LMP_AU_RAND,mem_lmo_opcode2
+	rtn 
+host_create_conn_auth_wait:
+	rtn
+host_create_conn_pairing:
+	fetch 1,mem_pincode_state
+	rtnne pincode_state_pincode_ready //wait for pincode
+	call host_auth
+	jam CONN_SM_PAIRING_WAIT,mem_conn_sm
+	rtn
+
+host_create_conn_pairing_wait:
+	rtn
+host_creat_conn_send_feat_ext:
+	jam CONN_SM_WAIT_FEATURES_EXT,mem_conn_sm
+	jam LMP_EXT_FEATURES_REQ,mem_lmo_opcode2
+	rtn
+host_create_conn_send_version:
+	jam CONN_SM_WAIT_VERSION,mem_conn_sm
+	jam LMP_VERSION_REQ,mem_lmo_opcode2
+	rtn 
+	
+host_creat_conn_wait_switch:
+	fetch 1,mem_switch_flag
+	rtneq SWITCH_FLAG_INIT
+	beq SWITCH_FLAG_ACCEPT,host_create_conn_switch_accept
+	arg switch_wait_timer,queue
+	call timer_check
+	nrtn blank
+	jam SWITCH_FLAG_INIT,mem_switch_flag
+	branch host_create_conn_switch
+host_create_conn_switch_accept:
+	rtn master
+	branch host_create_conn_auth_pair
+
+host_create_conn_send_features:
+	jam CONN_SM_WAIT_FEATURES_RES,mem_conn_sm
+	jam LMP_FEATURES_REQ,mem_lmo_opcode2
+	rtn 
+host_create_conn_send_switch:
+	jam LMP_SWITCH_REQ,mem_lmo_opcode2
+	set1 mark_switch_initiated,mark
+	jam CONN_SM_WAIT_CONN_ACCEPT,mem_conn_sm
+	setarg 0x1ff
+	store 2, mem_soft_timer
+	rtn
+host_create_conn_send_conn_req:
+	jam CONN_SM_WAIT_CONN_ACCEPT,mem_conn_sm
+	jam 0xff,mem_soft_timer
+	set0 mark_reconn_recieve_switch,mark
+	jam LMP_HOST_CONNECTION_REQ,mem_lmo_opcode2
+	branch init_lmp_reinit
+host_create_conn_wait_accept:
+	rtnmark1 mark_reconn_recieve_switch
+	fetch 2,mem_soft_timer
+	sub pdata,1,pdata
+	branch host_create_conn_resend,zero
+	store 2, mem_soft_timer
+	rtn
+host_create_conn_resend:
+	jam CONN_SM_SEND_SWITCH,mem_conn_sm
+	rtn
+host_create_conn_waiting:
+	/* we will exit waiting for connection request accepted, features res, or other commands to finish */
+	rtn 
+
+host_create_conn_switch:
+	fetch 1,mem_lmp_conn_state
+	rtnbit0 SENT_SETUP_COMPLETE
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	fetch 1,mem_connection_options
+	set0 CONNECTION_SWITCH,pdata
+	store 1,mem_connection_options
+	jam LMP_SWITCH_REQ,mem_lmo_opcode2
+	jam CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION,mem_conn_sm
+	rtn 
+
+host_create_conn_send_setup_complete:
+	jam CONN_SM_WAIT_SETUP_COMPLETE,mem_conn_sm	
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	rtn 
+
+host_create_conn_wait_setup_complete:
+	fetch 1,mem_lmp_conn_state
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	jam CONN_SM_STANDBY,mem_conn_sm	
+
+	rtn
+host_create_conn_wait_setup_complete_rtn:	
+	jam CONN_SM_AUTH_PAIR ,mem_conn_sm
+	rtn
+
+host_create_conn_master_detach:
+	fetch 1, mem_soft_timer
+	increase -1,pdata
+	branch host_create_conn_send_detach,blank//detach
+	store 1, mem_soft_timer
+	rtn 
+host_create_conn_send_detach:
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam LOCAL_HOST,mem_disconn_reason_send
+	jam 0,mem_conn_sm
+	rtn
+host_create_conn_auth_pair:
+	/* checking whether or not to do m/s switch */
+	fetch 1,mem_connection_options
+	bbit1 CONNECTION_SWITCH,host_create_conn_switch
+	bbit1 CONNECTION_AUTH,host_create_conn_auth_pair_true
+host_create_conn_sm_done:
+	jam CONN_SM_DONE,mem_conn_sm
+	rtn
+host_create_conn_auth_pair_true:
+	fetch 1,mem_link_key_exists
+	branch host_create_conn_auth_pair_nokey,blank
+	fetch 1,mem_lmp_conn_state
+	rtnbit0 SENT_SETUP_COMPLETE
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	fetch 4,mem_aurand_send_delay_time
+	arg 100,temp
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	branch host_create_conn_auth
+
+
+
+host_create_conn_auth_pair_nokey:
+	jam CONN_SM_PAIRING,mem_conn_sm
+	jam 4,mem_pin_length
+	setarg 0x3030
+	store 2,mem_pin
+	istore 2,contw
+	jam pincode_state_pincode_ready,mem_pincode_state
+	branch host_create_conn_pairing
+
+host_create_conn_auth_pair_wait:
+	rtn
+host_create_conn_encrypt:
+	fetch 1,mem_connection_options
+	bbit1 CONNECTION_ENCRYPT,host_create_conn_encrypt_start
+	jam CONN_SM_DONE,mem_conn_sm
+	rtn 
+
+host_create_conn_encrypt_start:
+	fetch 1,mem_connection_options
+	set0 CONNECTION_ENCRYPT,pdata
+	store 1,mem_connection_options
+	jam LMP_ENCRYPTION_MODE_REQ,mem_lmo_opcode2  
+	rtn
+
+host_create_conn_encrypt_wait:
+	fetch 1, mem_wait_encryption
+	rtn blank
+	jam CONN_SM_STANDBY,mem_conn_sm
+	branch host_create_conn_encrypt_start 
+
+host_create_conn_encrypt_wait_clear:
+	jam CONN_SM_SEND_SETUP_COMPLETE,mem_conn_sm
+	rtn 
+
+host_auth:
+	fetch 1,mem_op
+	bbit1 op_inrand_req,remote_auth
+	call tid_initiate
+	jam LMP_IN_RAND,mem_lmo_opcode2
+	branch cmd_exit
+remote_auth:
+	fetch 1,mem_op
+	set0 op_inrand_req,pdata
+	store 1,mem_op
+	call lmp_accept_inrand
+	call tid_set_reply
+	branch cmd_exit
+
+pincode_reinit:
+	setarg 4
+	store 1,mem_pin_length
+	setarg 0x3030
+	istore 2,contw
+	istore 2,contw
+	rtn
+	
+
+
+/* ===================== two wire SPI gpio ======================= */
+
+twspi_reset:
+	bpatchx patch31_4,mem_patch31
+	hfetch 1,core_gpio_oe3
+	arg 0x06,temp
+	ior temp,pdata
+	hstore 1,core_gpio_oe3
+	hfetch 1,core_gpio_out3
+	ior temp,pdata
+	hstore 1,core_gpio_out3
+	call twspi_disable
+	hfetch 1,core_gpio_out3
+	set0 1,pdata
+	set0 2,pdata
+	hstore 1,core_gpio_out3	
+	nop 30  
+	branch twspi_enable
+
+twspi_reset2:
+	hfetch 1,core_gpio_oe3
+	arg 0xc0,temp
+	ior temp,pdata
+	hstore 1,core_gpio_oe3
+	hfetch 1,core_gpio_out3
+	ior temp,pdata
+	hstore 1,core_gpio_out3
+	call twspi_disable
+	hfetch 1,core_gpio_out3
+	set0 6,pdata
+	set0 7,pdata
+	hstore 1,core_gpio_out3	
+	nop 30  
+	branch twspi_enable2
+
+twspi_disable:
+	hfetch 1,core_gpio_sel1
+	and pdata,0xfc,pdata
+	hstore 1,core_gpio_sel1  //disable spi
+	rtn
+twspi_enable:
+	hfetch 1,core_gpio_sel1
+	or pdata,0x01,pdata
+	hstore 1,core_gpio_sel1  //enable spi
+	rtn
+twspi_enable2:
+	hfetch 1,core_gpio_sel1
+	or pdata,0x03,pdata
+	set0 4,pdata
+	hstore 1,core_gpio_sel1  //enable spi2
+	rtn
+
+// input read reg number: pdata 
+//output reg data: pdata
+sensor_read:
+	copy pdata,regb
+	call spi_ncs_enable
+	nop 100
+	copy regb,pdata
+	call twspi_read
+	copy pdata,regb
+	call spi_ncs_disable
+	nop 100
+	copy regb,pdata
+	rtn
+// input write reg number: pdata 
+sensor_write:
+	copy pdata,regb
+	call spi_ncs_enable
+	nop 100
+	copy regb,pdata
+	call twspi_write
+	call spi_ncs_disable
+	nop 100
+	rtn
+//spi gpio init .
+//0xff :disable spi ncs gpio init
+spi_ncs_gpio_init:
+	fetcht 1,mem_spi_ncs_gpio
+	branch gpio_config_output
+
+//nsc gpio ouput low
+spi_ncs_enable:
+	fetcht 1,mem_spi_ncs_gpio
+	branch gpio_out_active
+
+//ncs gpio output high
+spi_ncs_disable:
+	fetcht 1,mem_spi_ncs_gpio
+	branch gpio_out_inactive
+
+
+twspi_write:
+	branch spid_write_reg
+	
+twspi_read:
+	branch spid_read_reg
+
+
+
+/* ===================== code loading ======================= */
+
+
+read_function_aes:
+	nbranch read_function,user
+	hfetch 1,core_gpio_key2
+	or_into 0x2,pdata   	// enable aes 
+	hstore 1,core_gpio_key2
+read_function:
+	copy temp,null
+	branch read_fuction_zero,zero
+	copy regc,pc
+read_fuction_zero:
+	isolate0 0,null
+	branch set_ucode_status
+	
+/* return temp = block length */
+get_block_header:
+	force 4,temp
+get_block_header0:
+	arg mem_ucode_buf,rega
+	hfetch 1,core_gpio_key2
+	and_into 0xfd,pdata   	// disable aes for header
+	hstore 1,core_gpio_key2
+	call read_function
+	arg 0x55aa,rega
+	fetch 2,mem_ucode_buf
+	ifetcht 2,contr
+	isub rega,null
+	rtn	
+
+read_first_block:
+	arg 2,temp
+	arg mem_ucode_ptr,rega
+	call read_function
+	fetch 2,mem_ucode_ptr
+	store 2,mem_addr_mi
+	call get_iv,user
+	rtn
+	
+get_iv:
+	arg 16,temp
+	arg mem_ucode_keybuf,rega
+	hfetch 1,core_gpio_key2
+	and_into 0xfd,pdata   // disable aes for iv
+	hstore 1,core_gpio_key2
+	call read_function
+	arg mem_ucode_keybuf,contr
+	arg 16,loopcnt
+	call aes_load_data
+	call aes_init
+	call aes_clear_data
+	branch do_aes_cbc					/* generate first IV */
+
+load_storage:
+	disable match
+	call get_block_header
+	nrtn zero
+	enable match
+	jam 0x80, core_ucode_ctrl
+	jam 0,core_ucode_hi
+	jam 0,core_ucode_low
+	arg core_ucode_data,rega
+	call read_function_aes
+	jam 0x0, core_ucode_ctrl
+load_storage_loop:
+	arg 6,temp
+	call get_block_header0
+	nrtn zero
+	ifetch 2,contr
+	iforce rega
+	call read_function
+	branch load_storage_loop
+
+	
+	/* only load memory data from eeprom */
+reload_eeprom:
+	call clean_mem
+	setarg 0x1000
+	store 2,mem_addr_mi
+	arg iicd_read_eep,regc
+	arg 2,loopcnt
+reload_eeprom_loop:
+	call get_block_header
+	nrtn zero
+	fetch 2,mem_addr_mi
+	byteswap pdata,pdata
+	iadd temp,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+	loop reload_eeprom_loop
+	branch load_storage_loop
+	
+loadcode:
+	call clean_mem
+	disable user
+	call otp_enable_chgpump
+	setarg otp_ucode_flag
+	arg mem_otp_ucode_flag,rega
+	arg 2,temp
+	call otpd_read_data
+	fetch 2,mem_otp_ucode_flag
+	bbit0 otp_uflag_aes, loadcode_otp
+	jam 0x25,core_clkoff			// disable debug uart
+	setarg otp_ucode_aeskey
+	arg mem_ucode_keybuf,rega
+	arg 16,temp
+	call otpd_read_data
+	jam lock_otp,core_misc_ctrl	// disable further read/write of key
+	set1 mark_otp_encrypt,mark	
+	arg mem_ucode_keybuf,contr
+	call load_key
+	enable user					// set user for aes
+loadcode_otp:
+	jam 0,mem_loadcode_times
+loadcode_otp_2:
+	call loadcode_check_times
+	fetch 2,mem_otp_ucode_flag
+	byteswap pdata,pdata
+	arg 0x7ff,temp
+	iand temp,pdata
+	branch loadcode_iic, zero
+	call otp_set_addr
+	arg otpd_read_code,regc
+	call get_iv,user
+	call load_storage
+	fetch 1,mem_ucode_status
+	bbit0 0,loadcode_otp_2			// crc error, try again
+	
+loadcode_iic:
+	call otp_disable_chgpump
+	jam 0,mem_loadcode_times
+loadcode_iic_2:	
+	call loadcode_check_times
+	call clear_eeprom_size_2k
+	fetch 1,mem_otp_ucode_flag
+	bbit1 otp_uflag_skip_eep,loadcode_spi
+	call loadcode_iic_by_eeprom
+	nbranch loadcode_iic_eeprom_2k,match
+	fetch 1,mem_ucode_status
+	bbit0 0,loadcode_iic_2			// crc error, try again
+	branch loadcode_hci
+loadcode_iic_eeprom_2k:
+	call set_eeprom_size_2k
+	fetch 1,mem_otp_ucode_flag
+	bbit1 otp_uflag_skip_eep,loadcode_spi
+	call loadcode_iic_by_eeprom
+	nbranch loadcode_spi,match
+	fetch 1,mem_ucode_status
+	bbit0 0,loadcode_iic_2			// crc error, try again
+	branch loadcode_hci
+	
+loadcode_spi:
+	jam 0,mem_loadcode_times
+loadcode_spi_2:
+	call loadcode_check_times
+	fetch 1,mem_otp_ucode_flag
+	bbit1 otp_uflag_skip_flash, loadcode_hci
+	setarg 0x0
+	store 3,mem_addr_hi
+	call spid_init_flash
+	arg spid_load_flash,regc
+	call read_first_block
+	call load_storage
+	nbranch loadcode_hci,match
+	fetch 1,mem_ucode_status
+	bbit0 0,loadcode_spi_2			// crc error, try again
+
+loadcode_hci:
+	bmark1 mark_otp_encrypt,loadcode_hci_enc
+	call clear_key_buf
+loadcode_hci_enc:
+	fetch 1,mem_otp_ucode_flag
+	bbit0 otp_uflag_hci,clear_key_buf
+	jam 0x21,core_clkoff			// enable debug uart
+	call hci_init
+loadcode_hci_loop:
+	call hci_rx_packet
+	branch loadcode_hci_loop
+
+clear_key_buf:
+	setarg 0
+	store 8,mem_ucode_keybuf
+	store 8,mem_ucode_keybuf+8
+	force regidx_key,regext_index
+	call aes_clear
+	jam 0x21,core_clkoff		// enable debug uart
+	rtn
+	
+
+loadcode_iic_by_eeprom:
+	setarg 0x0
+	store 2,mem_addr_mi
+	arg iicd_read_eep,regc
+	call iicd_init_12m
+	call read_first_block
+	branch load_storage
+
+
+loadcode_check_times:
+	fetch 1,mem_loadcode_times
+	increase 1,pdata
+	sub pdata,3,null
+	nbranch loadcode_error,positive
+	store 1,mem_loadcode_times
+	rtn
+
+loadcode_error:
+	call clear_key_buf
+	call ice_break
+	rtn
+
+
+/* true flag is set into status */
+set_ucode_status:
+	fetch 1,mem_ucode_status
+	lshift pdata,pdata
+	setflag true,0,pdata
+	isolate0 15,rega
+	rtn true
+	store 1,mem_ucode_status
+	rtn
+
+	/* queue is bit position of hw done status */
+decrypt_code:
+	hfetch 1,core_gpio_key2
+	rtnbit0 1
+	branch decrypt_code_skip	/* skip to key generation at first for speed */
+decrypt_code_loop:
+	hfetch 1,core_dma_status
+	qisolate1 pdata
+	rtn true
+decrypt_code_skip:
+	hfetch 1,core_misc_status
+	bbit0 1,decrypt_code_loop
+	call do_aes_cbc
+	branch decrypt_code_loop
+
+
+
+load_ucode:
+	fetch 2,mem_patch_ptr
+	rtn blank
+	jam 0x80, core_ucode_ctrl
+	jam 0,core_ucode_hi
+	jam 0,core_ucode_low
+	fetcht 2,mem_patch_len
+	lshift2 temp,loopcnt
+	iforce contr
+load_ucode_loop:
+	ifetch 1,contr
+	hstore 1,core_ucode_data
+	loop load_ucode_loop
+	jam 0x0, core_ucode_ctrl
+	rtn
+
+
+/* ===================== SPI dma ======================= */
+
+spid_init:
+	bpatchx patch31_5,mem_patch31
+	call spid_init_common
+	branch twspi_enable
+
+spid_init2:
+	call spid_init_common
+	call twspi_disable
+	branch twspi_enable2
+	
+spid_init_common:
+	fetch 1,mem_spi_init_clk
+	hstore 1,core_spid_ctrl	// A7530 should at least 34, or write fail
+	fetch 1,mem_spi_init_delay_time
+	hstore 1,core_spid_delay	// 4us delay
+	setarg mem_spid_tbuf
+	hstore 2,core_spid_txaddr
+	setarg mem_spid_rbuf
+	hstore 2,core_spid_rxaddr
+	branch twspi_disable
+	
+spid_reset:
+	hfetch 1,core_spid_ctrl
+	set1 7,pdata
+	hstore 1,core_spid_ctrl
+	set0 7,pdata
+	hstore 1,core_spid_ctrl
+	rtn
+
+
+/* pdata 6:0 is reg address, 15:8 is data to write */
+spid_write_reg:
+	set1 7,pdata
+	store 2,mem_spid_tbuf
+	bpatchx patch31_6,mem_patch31
+	jam 2,core_spid_txlen
+	jam 0,core_spid_rxlen
+	jam spid_start,core_misc_ctrl
+	branch wait_spid_done
+
+/* pdata 6:0 is reg address */
+spid_read_reg:
+	force 1,temp
+/* pdata 6:0 is burst reg address, temp is bytes to read */
+spid_read_regs:
+//	nop 100
+	store 1,mem_spid_tbuf
+	bpatchx patch31_7,mem_patch31
+	jam 1,core_spid_txlen
+	hstoret 2,core_spid_rxlen
+	jam spid_start,core_misc_ctrl
+	call wait_spid_done
+	fetch 1,mem_spid_rbuf
+	rtn
+
+wait_spid_done:
+	fetch 2,mem_afh_error_total
+	increase 1,pdata
+	store 2,mem_afh_error_total
+	hfetch 1,core_dma_status
+	bbit0 spid_done,wait_spid_done
+	rtn
+
+spid_init_flash:
+	jam 0x40,core_spid_ctrl
+	jam 0x0,core_spid_delay
+	hfetch 1,core_gpio_sel1
+	set0 0,pdata
+	set1 1,pdata
+	hstore 1,core_gpio_sel1
+	setarg 0
+	store 4,mem_spid_tbuf
+	rtn
+
+
+spid_unlock_flash:
+	setarg 0
+	hstore 2,core_spid_rxlen
+	setarg 1
+	hstore 2,core_spid_txlen
+	setarg mem_spid_tbuf
+	hstore 2,core_spid_txaddr
+	jam 6,mem_spid_tbuf
+	jam spid_start,core_misc_ctrl
+	branch wait_spid_done
+
+
+/**
+ ******************************************************************************
+ ** \brief  write flash
+ **
+ ** \param [in]  rega: 2byte write ptr    
+ **			pdata:3byte flash address  
+ ** 			temp:2byte write data length
+ **
+ ** \retval user  0: flash buys 1:write flash setting complate
+ **
+ ******************************************************************************/
+
+flash_write:
+	disable user
+	copy pdata,regb
+	fetch 1,mem_spi_write_flash_sm
+	rtnne FLASH_SM_NO_BUYS
+	enable user
+	copy regb,pdata
+	branch flash_write_start
+
+
+flash_write_spi_sm_timer:
+	fetch 1,mem_spi_write_flash_sm 	
+	beq FLASH_SM_START,flash_write_start
+	beq FLASH_SM_ERASE_SECTOR,flash_erase_sector
+	beq FLASH_SM_WAIT_ERASE_SECTOR,flash_wait_erase_sector
+	beq FLASH_SM_WRITE_DATA,flash_write_data
+	beq FLASH_SM_WAIT_WRITE_DATA,flash_wait_write_data
+	rtn
+
+flash_write_start:
+	store 3,mem_spi_write_addr
+	copy rega,pdata
+	store 2,mem_spi_write_ptr
+	storet 2,mem_spi_write_len
+	jam FLASH_SM_ERASE_SECTOR,mem_spi_write_flash_sm
+	branch spid_init_flash
+flash_erase_sector:
+	call spid_init_flash
+	jam FLASH_SM_WAIT_ERASE_SECTOR,mem_spi_write_flash_sm
+	call spid_unlock_flash
+	arg mem_spid_tbuf,rega
+	fetch 3,mem_spi_write_addr
+	jam 4,core_spid_txlen
+	arg FLASH_COMMAND_SECTOR_ERASE,temp
+	branch spid_write_flash_common
+	
+flash_wait_erase_sector:
+	call spid_init_flash
+	call spid_unlock_flash
+	setarg FLASH_READ_SATUS
+	call spid_read_reg
+	rtnbit1 FLASH_STATUS_WIP
+	jam FLASH_SM_WRITE_DATA,mem_spi_write_flash_sm
+	rtn
+flash_write_data:
+	call spid_init_flash
+	jam FLASH_SM_WAIT_WRITE_DATA,mem_spi_write_flash_sm
+	call spid_unlock_flash
+	call flash_data_preserve
+	call spid_write_flash
+	branch flash_data_recover
+flash_wait_write_data:
+	call spid_init_flash
+	call spid_unlock_flash
+	setarg FLASH_READ_SATUS
+	call spid_read_reg
+	rtnbit1 FLASH_STATUS_WIP
+	jam FLASH_SM_NO_BUYS,mem_spi_write_flash_sm
+	fetch 2,mem_cb_spi_flash_write_complate
+	branch callback_func
+flash_data_recover:
+	fetch 4,mem_temp
+	fetcht 2,mem_spi_write_ptr
+	increase -4,temp
+	istore 4,temp
+	rtn
+flash_data_preserve:
+	fetcht 2,mem_spi_write_ptr
+	copy temp,rega
+	increase -4,temp
+	ifetch 4,temp
+	store 4,mem_temp
+	fetcht 2,mem_spi_write_len
+	fetch 3,mem_spi_write_addr
+	rtn
+
+
+/* pdata is flash address, rega pointers to txdata(4 ahead bytes should be left), temp is length */
+spid_write_flash:
+	increase 4,temp
+	hstoret 2,core_spid_txlen
+	arg FLASH_COMMAND_WRITE_DATA,temp
+	increase -4,rega
+spid_write_flash_common:
+
+	istoret 1,rega
+	rshift16 pdata,temp
+	istoret 1,contw
+	rshift8 pdata,temp
+	istoret 1,contw
+	istore 1,contw
+	deposit rega
+	hstore 2,core_spid_txaddr
+	setarg 0
+	hstore 2,core_spid_rxlen
+	jam spid_start,core_misc_ctrl
+	branch wait_spid_done
+
+
+/* temp is length, rega pointers to buf   */
+spid_read_flash:
+	hstoret 2,core_spid_rxlen
+	rshift16 pdata,temp
+	storet 1,mem_addr_hi
+	rshift8 pdata,temp
+	storet 1,mem_addr_mi
+	store 1,mem_addr_lo
+	setarg 4
+	hstore 2,core_spid_txlen
+	jam FLASH_COMMAND_READ_DATA,mem_spid_tbuf
+	setarg mem_spid_tbuf
+	hstore 2,core_spid_txaddr
+	deposit rega
+	hstore 2,core_spid_rxaddr
+	hfetch 1,core_spid_ctrl
+	isolate0 15,rega
+	setflag true,6,pdata
+	hstore 1,core_spid_ctrl
+	jam spid_start,core_misc_ctrl
+spi_read_flash_wait:
+	hfetch 1,core_dma_status
+	bbit1 7,spi_read_flash_wait			// waiting for spid write
+	arg spid_done,queue
+	branch wait_spid_done
+
+
+/* temp is length, rega pointers to buf  */
+spid_load_flash:
+	hstoret 2,core_spid_rxlen
+	setarg 4
+	hstore 2,core_spid_txlen
+	jam 3,mem_spid_tbuf
+	setarg mem_spid_tbuf
+	hstore 2,core_spid_txaddr
+	deposit rega
+	hstore 2,core_spid_rxaddr
+	hfetch 1,core_spid_ctrl
+	isolate0 15,rega
+	setflag true,6,pdata
+	hstore 1,core_spid_ctrl
+	jam spid_start,core_misc_ctrl
+spi_load_flash_wait:
+	hfetch 1,core_dma_status
+	bbit1 7,spi_load_flash_wait			// waiting for spid write
+	arg spid_done,queue
+	call decrypt_code
+	call wait_spid_done
+	isolate1 spid_crcok,pdata
+	call set_ucode_status
+	fetch 1,mem_addr_hi
+	lshift16 pdata,regb
+	fetch 1,mem_addr_mi
+	lshift8 pdata,pdata
+	ior regb,regb
+	fetch 1,mem_addr_lo
+	ior regb,pdata
+	iadd temp,pdata
+	store 1,mem_addr_lo
+	rshift8 pdata,pdata
+	store 1,mem_addr_mi
+	rshift8 pdata,pdata
+	store 1,mem_addr_hi
+	rtn
+
+/*****************************************************************************
+*soft reset chip
+*****************************************************************************/
+soft_reset_chip:
+	jam 1,core_reset
+	rtn
+
+
+
+/* ===================== I2C dma ======================= */
+
+iic_init_390k:	//390khz
+	jam 12,core_iicd_scl_low
+	jam 13,core_iicd_scl_high
+	jam 13,core_iicd_start_setup
+	jam 13,core_iicd_start_hold
+	jam 13,core_iicd_stop_setup
+	jam 12,core_iicd_data_setup
+  	branch iicd_init_gpio	
+
+
+iicd_init_12m:
+	jam 5,core_iicd_scl_low
+ 	jam 7,core_iicd_scl_high
+	jam 7,core_iicd_start_setup
+	jam 7,core_iicd_start_hold
+	jam 7,core_iicd_stop_setup
+	jam 5,core_iicd_data_setup
+iicd_init_gpio:	
+	hfetch 1,core_gpio_pu3
+	or_into 0xc0,pdata
+	hstore 1,core_gpio_pu3
+	hfetch 1,core_gpio_sel1
+	or_into 0x10,pdata
+	hstore 1,core_gpio_sel1
+	rtn
+
+
+
+wait_iicd_done:
+	hfetch 1,core_dma_status
+	bbit0 iicd_done,wait_iicd_done
+	rtn
+
+/*
+pdata is tx length
+rega is points to tx buffer
+regb is points to rx buffer
+temp is rx length
+*/
+iicd_read_data:
+	hstore 2,core_iicd_txlen
+	deposit rega
+	hstore 2,core_iicd_txaddr	
+	deposit regb
+	hstore 2,core_iicd_rxaddr
+	deposit temp	
+	hstore 2,core_iicd_rxlen
+	arg 1,temp
+	nsetflag blank,1,temp
+	hstore 1,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	branch wait_iicd_done
+
+
+set_eeprom_size_2k:
+	set1 mark_eeprom_size,mark
+	jam 0x08,mem_eeprom_block_size
+	rtn
+
+clear_eeprom_size_2k:
+	set0 mark_eeprom_size,mark
+	jam 0x20,mem_eeprom_block_size
+	rtn
+
+
+iicd_read_eep_data_size_2k:
+ 	fetch 1,mem_eeprom_base
+	iadd regb,pdata
+	store 1,mem_addr_mi
+	branch iicd_read_eep_size_2k
+
+iicd_read_eep_size_2k_lcadcode:
+	fetch 2,mem_addr_mi
+	byteswap pdata,pdata
+	store 1,mem_addr_mi
+	
+//length:temp 
+//mem ptr:rega
+//eeprom addr:pdata
+iicd_read_eep_size_2k:
+ 	setarg 3
+	hstore 2,core_iicd_txlen
+	jam 0xa0,mem_iicd_tbuf
+	jam 0xa1,mem_iicd_tbuf+2
+	branch iicd_read_eep_common
+
+
+//length:temp 
+//mem ptr:rega
+//eeprom addr:regb
+iicd_write_protect_eep_data:
+	storet 2,mem_temp
+	call iicd_eeprom_write_enable
+	fetcht 2,mem_temp
+	call iicd_write_eep_data
+	branch iicd_eeprom_write_disable
+	
+iicd_eeprom_write_enable:
+	fetch 1,mem_eeprom_wp_gpio
+	rtneq GPIO_DISABLE
+	bbit0 6,iicd_wp_gpio_output_low
+	setarg 150000
+	call sleep
+iicd_wp_gpio_output_low:
+	fetcht 1,mem_eeprom_wp_gpio
+	branch gpio_out_active
+	
+iicd_eeprom_write_disable:
+	fetcht 1,mem_eeprom_wp_gpio
+	branch gpio_out_inactive
+	
+//length:temp 
+//mem ptr:rega
+//eeprom addr offset:regb
+iicd_read_eep_data:
+	bpatchx patch32_0,mem_patch32
+	bmark1 mark_eeprom_size,iicd_read_eep_data_size_2k
+	fetch 2,mem_eeprom_base
+	iadd regb,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+
+/* rega pointers to buf, temp is length  */
+iicd_read_eep:
+	bpatchx patch32_1,mem_patch32
+	bmark1 mark_eeprom_size,iicd_read_eep_size_2k_lcadcode
+	setarg 4
+	hstore 2,core_iicd_txlen
+	jam 0xa0,mem_iicd_tbuf
+	jam 0xa1,mem_iicd_tbuf+3
+iicd_read_eep_common:	
+	setarg mem_iicd_tbuf
+	hstore 2,core_iicd_txaddr
+	hstoret 2,core_iicd_rxlen
+	deposit rega
+	hstore 2,core_iicd_rxaddr
+	setarg 2
+	isolate0 15,rega
+	setflag true,0,pdata
+	hstore 1,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	arg iicd_done,queue
+	call decrypt_code
+	call wait_iicd_done
+	isolate1 iicd_crcok,pdata
+	call set_ucode_status
+	bmark1 mark_eeprom_size,iicd_read_eep_load_code_size_2k
+	fetch 2,mem_addr_mi
+	byteswap pdata,pdata
+	iadd temp,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+	rtn
+
+iicd_read_eep_load_code_size_2k:
+	fetch 1,mem_addr_mi
+	iadd temp,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+	rtn
+	
+
+//length:temp 
+//mem ptr:rega
+//eeprom addr offset:regb
+iicd_write_eep_data:
+	fetch 2,mem_eeprom_base
+	iadd regb,pdata
+
+//cuur ptr:pdata length:temp buf:rega
+iicd_write_ota_data:
+	store 2,mem_pdatatemp //curr ptr
+	bpatchx patch32_2,mem_patch32
+	storet 2,mem_temp	//len
+	copy rega,pdata
+	store 2,mem_contr
+iicd_write_eep_loop:
+	call iicd_eep_transparency
+
+	fetcht 2,mem_regb
+	fetch 2,mem_contr
+	copy pdata,rega
+	fetch 2,mem_pdatatemp
+	
+	call iicd_write_eep
+	
+	fetch 2,mem_regb
+	fetcht 2,mem_contr
+	iadd temp,temp
+	storet 2,mem_contr
+	fetcht 2,mem_pdatatemp
+	iadd temp,temp
+	storet 2,mem_pdatatemp
+	fetch 2,mem_temp
+	nbranch iicd_write_eep_loop,blank
+	rtn
+	
+//in:
+//1.size 2.len 3.src 4.des
+//mem_regc page's area
+//mem_pdatatemp curr ptr
+//mem_temp all len      
+//mem_regb curr len
+iicd_eep_transparency:
+	bpatchx patch32_3,mem_patch32
+	fetch 1,mem_eeprom_block_size
+	increase -1,pdata
+	fetcht 2,mem_pdatatemp
+	ior temp,pdata
+	increase 1,pdata
+	store 3,mem_regc
+
+	fetch 2,mem_temp
+	iadd temp,pdata
+
+	fetcht 3,mem_regc
+	isub temp,pdata
+	nbranch iicd_eep_deal_short_packet,positive
+	store 2,mem_temp
+	fetch 3,mem_regc
+	fetcht 2,mem_pdatatemp
+	isub temp,pdata
+	store 2,mem_regb
+	rtn
+iicd_eep_deal_short_packet:
+	fetch 2,mem_temp
+	store 2,mem_regb
+	setarg 0
+	store 2,mem_temp
+	rtn
+
+iicd_write_eep_size_2k:
+	increase 2,temp
+	hstoret 2,core_iicd_txlen
+	increase -2,rega
+	ifetcht 3,rega
+	copy temp,regb
+	arg 0xa0,temp
+	istoret 1,rega
+//	byteswap pdata,pdata
+	istore 1,contw
+	branch iicd_write_eep_common
+
+	/* pdata is eeprom address, rega pointers to txdata(3 ahead bytes should be left), temp is length */
+iicd_write_eep:
+	copy pdata,regb
+	bpatchx patch32_4,mem_patch32
+	bmark1 mark_eeprom_size,iicd_write_eep_size_2k
+	copy regb,pdata
+	increase 3,temp
+	hstoret 2,core_iicd_txlen
+	increase -3,rega
+	ifetcht 3,rega
+	copy temp,regb
+	arg 0xa0,temp
+	istoret 1,rega
+	byteswap pdata,pdata
+	istore 2,contw
+iicd_write_eep_common:	
+	deposit rega
+	hstore 2,core_iicd_txaddr
+	setarg 0
+	hstore 2,core_iicd_rxlen
+	jam 1,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	call wait_iicd_done
+	copy regb,pdata
+	istore 3,rega
+	
+iic_check_eeprom_standby:
+	bpatchx patch32_5,mem_patch32
+	jam 0,mem_iicd_tbuf+3
+iic_check_eeprom_standby_wait:
+	setarg 1
+	hstore 2,core_iicd_txlen
+	jam 0xa0,mem_iicd_tbuf
+	setarg mem_iicd_tbuf
+	hstore 2,core_iicd_txaddr
+	setarg 0
+	hstore 2,core_iicd_rxlen
+	hstore 2,core_iicd_rxaddr
+	setarg 3
+	hstore 1,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	call wait_iicd_done
+	hfetch 1,core_dma_status
+	rtnbit0 iicd_ack
+	nop 1500
+	fetch 1,mem_iicd_tbuf+3
+	increase 1,pdata
+	store 1,mem_iicd_tbuf+3
+	sub pdata,40,null
+	nrtn positive//polling timeout 6ms
+	branch iic_check_eeprom_standby_wait
+
+/* ===================== OTP ======================= */
+
+otp_enable_chgpump:
+	jam 0x70,rfen_chgpump
+	nop param_chgpump_delay
+	rtn
+
+otp_disable_chgpump:
+	jam 0x30,rfen_chgpump
+	rtn
+	
+otp_set_addr:
+	lshift3 pdata,pdata
+	hstore 2,core_otp_addr
+	jam 0,core_otpd_ctrl
+	rtn	
+
+/* pdata = otp address, rega pointers data, loopcnt is count */
+otp_write:
+	call otp_set_addr
+	call otp_ce
+otp_program:
+	ifetcht 1,rega
+	increase 1,rega
+	force 0,queue
+otp_program_bit:
+	qisolate0 temp
+	branch otp_skip_0,true
+	hfetch 1,core_otp_din
+	set1 6,pdata				/* din */
+	set1 7,pdata				/* dle */
+	hstore 1,core_otp_din
+	jam 0x02,core_otp_ctrl	/* web */
+	jam 0x82,core_otp_ctrl
+	set0 7,pdata				/* dle */
+	hstore 1,core_otp_din
+	jam 0x8a,core_otp_ctrl	/* pgmen */
+	nop 11
+	jam 0xca,core_otp_ctrl	/* vppen */
+	nop 33
+	jam 0x4a,core_otp_ctrl	/* web 2nd */
+	nop 44
+	jam 0xca,core_otp_ctrl	/* release web */
+	nop 22
+	jam 0x8a,core_otp_ctrl	/* release vppen */
+	nop 33
+	jam 0x82,core_otp_ctrl	/* release pgmen */
+	nop 1
+	jam 0x92,core_otp_ctrl	/* pgmvfy */
+	nop 10
+	jam 0xb2,core_otp_ctrl	/* readen */
+	hfetch 1,core_otp_rdata
+	jam 0x92,core_otp_ctrl	/* release readen */
+	nop 1
+	jam 0x82,core_otp_ctrl	/* release pgmvfy */
+	qisolate0 pdata
+	branch otp_program_bit,true	/* program error */
+otp_skip_0:
+	hfetch 2,core_otp_addr
+	increase 1,pdata
+	hstore 2,core_otp_addr
+	increase 1,queue
+	compare 8,queue,0xf
+	nbranch otp_program_bit,true
+	loop otp_program
+	jam 0x83,core_otp_ctrl
+	rtn
+
+otp_ce:
+	jam 0x82,core_otp_ctrl	/* ceb */
+	nop 12
+	jam 0x80,core_otp_ctrl	/* rstn */
+	jam 0x82,core_otp_ctrl	/* release rstn */
+	nop 150					/* waiting for vdd25 stable */
+	rtn
+
+	/* rega points to data, temp is count */
+otpd_read_init:
+	call otp_ce
+	jam 0xa2,core_otp_ctrl	/* readen */
+	deposit rega
+	hstore 2,core_otpd_addr
+	set1 11,temp
+	isolate0 15,pdata
+	setflag true,15,temp
+	hstoret 2,core_otpd_len
+	jam otpd_start,core_misc_ctrl
+	rtn
+
+otpd_wait_end:
+	hfetch 1,core_dma_status
+	bbit0 otpd_done,otpd_wait_end
+	rtn
+	
+	/* pdata=otp address, rega points to data, temp is count */
+otpd_read_data:
+	call otp_set_addr
+	call otpd_read_init
+	call otpd_wait_end
+	jam 0x83,core_otp_ctrl	/* release ceb */
+	rtn
+
+
+
+/* rega pointers to buf, temp is length */
+otpd_read_code:	
+	hfetch 2,core_current_otp_addr
+	hstore 2,core_otp_addr
+	call otpd_read_init
+	arg otpd_done,queue
+	call decrypt_code
+	call otpd_wait_end
+	isolate1 otpd_crcok,pdata	
+	call set_ucode_status
+	jam 0x83,core_otp_ctrl	/* release ceb */
+	rtn
+
+/* ===================== uart dma ======================= */
+uartd_prepare_tx:
+	hfetch 2,core_uart_twptr
+	iforce contwu
+	rtn
+
+uartd_send:
+	deposit contwu
+	hstore 2,core_uart_twptr
+	rtn
+
+uartd_rxdone:
+	deposit contru
+	hstore 2,core_uart_rrptr
+	rtn
+
+uartd_prepare_rx:
+	hfetch 2,core_uart_rrptr
+	copy pdata,contru
+	rtn
+
+uart_set_baud_by_mem:
+	fetch uart_baud_len,mem_baud
+	hstore uart_baud_len,core_uart_baud
+	rtn
+
+uart_copy_tx_bytes_fast:
+	deposit loopcnt
+	rtn blank
+uart_copy_tx_bytes_fast_loop:
+	increase -8,loopcnt
+	call uart_tx_8_bytes,positive
+	rtn zero
+	branch uart_copy_tx_bytes_fast_loop,positive
+	increase 8,loopcnt
+uart_copy_tx_bytes_fast_loop_four:
+	increase -4,loopcnt
+	call uart_tx_4_bytes,positive
+	rtn zero
+	branch uart_copy_tx_bytes_fast_loop_four,positive
+	increase 4,loopcnt
+	branch uart_copy_tx_bytes
+
+uart_tx_8_bytes:
+	ifetch 8,contr
+	istore 8,contwu
+	rtn
+
+uart_tx_4_bytes:
+	ifetch 4,contr
+	istore 4,contwu
+	rtn
+
+uart_copy_tx_bytes:
+	deposit loopcnt
+	rtn blank
+uart_copy_tx_bytes_loop:
+	ifetch 1,contr
+	istore 1,contwu
+	loop uart_copy_tx_bytes_loop
+	rtn
+
+uart_copy_rx_bytes_fast:
+	deposit loopcnt
+	rtn blank
+uart_copy_rx_bytes_fast_loop:
+	increase -8,loopcnt
+	call uart_rx_8_bytes,positive
+	rtn zero
+	branch uart_copy_rx_bytes_fast_loop,positive
+	increase 8,loopcnt
+uart_copy_rx_bytes_fast_loop_four:
+	increase -4,loopcnt
+	call uart_rx_4_bytes,positive
+	rtn zero
+	branch uart_copy_rx_bytes_fast_loop_four,positive
+	increase 4,loopcnt
+	branch uart_copy_rx_bytes
+
+uart_rx_8_bytes:
+	ifetch 8,contru
+	istore 8,contw
+	rtn
+
+uart_rx_4_bytes:
+	ifetch 4,contru
+	istore 4,contw
+	rtn
+
+
+uart_copy_rx_bytes:
+	deposit loopcnt
+	rtn blank
+uart_copy_rx_bytes_loop:
+	ifetch 1,contru
+	istore 1,contw
+	loop uart_copy_rx_bytes_loop
+	rtn
+
+
+uart_copy_rx2tx:
+	deposit loopcnt
+	rtn blank
+uart_copy_rx2tx_loop:
+	ifetch 1,contru
+	istore 1,contwu
+	loop uart_copy_rx2tx_loop
+	rtn
+
+
+/* ===================== eeprom data ======================= */
+
+app_store_nvram_event:
+	jam BT_EVT_STORE_NVRAM,mem_fifo_temp
+	branch ui_ipc_send_event
+
+check_51cmd_store_reconn_info:
+check_51cmd_update_device_record:
+	bpatchx patch32_6,mem_patch32
+	fetch 1,mem_nv_data_number
+	rtn blank		// not nv data
+	call check_nvram
+	call init_device_list,zero
+	call nvram_find_addr_from_bd_list
+write_device_record:
+	fetch 1,mem_nv_data_number
+	icopy regc
+	fetcht 2,mem_nv_data_ptr
+	storet 2,mem_list_item_ptr
+write_device_loop_find:
+	copy regc,pdata
+	branch app_store_nvram_event,blank  //EEPROM
+	increase -1,regc
+	copy temp,rega
+	ifetch 1,rega
+	fetcht 1,mem_select_list_item
+	isub temp,null
+	call set_index_finded_device,zero
+	branch write_device_loop_find0,positive
+	ifetch 1,rega
+	increase 1,pdata
+	istore 1,rega
+write_device_loop_find0:
+	fetcht 2,mem_list_item_ptr
+	increase NV_DATA_LEN,temp
+	storet 2,mem_list_item_ptr
+	branch write_device_loop_find
+
+set_index_finded_device:
+	setarg 0
+	istore 1,rega
+	fetch 1,mem_temp_reconn_record
+	istore 1,contw	
+	bne REC_3_MODE,set_index_finded_device_ble_mode
+	arg mem_link_key,regb
+set_index_find_device_MASTER_ADDR:
+	ifetch 6,contr
+	istore 8,contw
+	setarg 0
+	istore 8,contw
+	copy regb,contr
+store_rec_data_common:
+	call memcpy16
+	force 1,null
+	rtn
+
+set_index_finded_device_ble_mode:
+	beq REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,set_index_finded_device_IRK
+	beq REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,set_index_finded_device_EDIV
+	arg mem_le_ltk,regb
+	branch set_index_find_device_MASTER_ADDR
+
+set_index_finded_device_IRK:
+	arg mem_le_irk,contr
+	call memcpy16
+store_ble_rec_data_common:
+	arg mem_le_ltk,contr
+	branch store_rec_data_common
+
+set_index_finded_device_EDIV:
+	arg mem_le_rand,contr
+	call memcpy16
+	branch store_ble_rec_data_common
+
+
+nvram_find_addr_from_bd_list:
+	call disable_user
+	fetch 1,mem_nv_data_number
+	rtn blank		// not nv data
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,find_addr_from_bd_list_SPP_mode
+find_addr_from_bd_list_ble_mode:
+	bpatchx patch32_7,mem_patch32
+	fetch 1,mem_le_conn_peer_addr_type
+	beq MASTER_PUBLIC_ADDR,find_addr_from_bd_list_static_addr
+	fetch 1,mem_le_plap+5
+	compare 0xc0,pdata,0xc0
+	branch find_addr_from_bd_list_static_addr,true
+	compare 0x40,pdata,0xc0
+	branch find_addr_from_bd_list_random_addr,true
+	compare 0x00,pdata,0xc0
+	branch find_addr_from_bd_list_random_non_resolvable_private_address,true
+find_addr_from_bd_list_static_addr:
+	jam REC_4_MODE_STATIC_ADDRESS,mem_temp_reconn_record
+	fetch 6,mem_le_plap
+	branch find_addr_from_bd_list_common
+	
+find_addr_from_bd_list_random_non_resolvable_private_address:	
+	jam REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,mem_temp_reconn_record
+	branch find_addr_from_bd_list_common
+
+//input :pdata EDIV and rands
+find_addr_from_bd_list_random_addr:
+	jam REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,mem_temp_reconn_record
+	branch find_addr_from_bd_list_common
+	
+//input :pdata EDIV and rands
+find_addr_from_bd_list_SPP_mode:
+	bpatchx patch33_0,mem_patch33
+	jam REC_3_MODE,mem_temp_reconn_record
+	fetch 6,mem_plap
+find_addr_from_bd_list_common:
+	store 6,mem_temp_reconn_record+1
+	fetch 2,mem_nv_data_ptr
+	ifetcht 1,pdata
+	pincrease 1
+	store 2,mem_list_item_ptr
+	storet 1,mem_select_list_item
+	fetch 1,mem_nv_data_number
+	icopy regc
+nvram_find_addr_from_list:
+	fetch 2,mem_list_item_ptr
+	copy pdata,rega
+	call nvram_find_addr_from_list_compare
+	rtn user
+	fetcht 2,mem_list_item_ptr
+	increase NV_DATA_LEN,temp
+	storet 2,mem_list_item_ptr
+	increase -1,temp
+	ifetch 1,temp
+	store 1,mem_select_list_item
+	increase -1,regc
+	nbranch nvram_find_addr_from_list,zero
+	fetch 1,mem_nv_data_number
+	pincrease DECREASED_ONE
+	store 1,mem_select_list_item
+	rtn
+nvram_find_addr_from_list_compare:
+	fetch 1,mem_temp_reconn_record
+	bne REC_3_MODE,find_addr_from_list_compare_ble_mode
+find_master_addr_from_list_compare:
+	arg mem_temp_reconn_record,regb
+	arg 7,loopcnt
+	call string_compare
+	branch enable_user,zero
+	rtn
+
+find_addr_from_list_compare_ble_mode:
+	beq REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,find_irk_form_list_compare
+	beq REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,find_ediv_form_list_compare
+	branch find_master_addr_from_list_compare
+
+find_irk_form_list_compare:
+	ifetcht 1,rega
+	isub temp,null
+	nrtn zero
+	arg mem_le_prand,contw
+	arg 16,loopcnt
+	call clear_mem
+	fetch 3,mem_le_plap+3
+	store 3,mem_le_prand
+	call genernate_master_MacAddress
+	fetch 2,mem_le_aes_128+13
+	byteswap pdata,pdata
+	lshift8 pdata,temp
+	ifetch 1,contr
+	iadd temp,pdata
+	fetcht 3,mem_le_plap
+	isub temp,null
+	branch enable_user,zero
+	rtn
+
+
+genernate_master_MacAddress:
+	arg mem_le_prand ,contr
+	call load_data128
+//	arg mem_le_irk,contr
+	ifetch 1,rega
+	call load_regext
+	force 0x38,aes_ctrl
+	force 0x0,aes_ctrl
+	call wait_aes
+	arg mem_le_aes_128,contw
+	branch store_aes_result
+
+find_ediv_form_list_compare:
+	ifetcht 1,rega
+	isub temp,null
+	nrtn zero
+	copy contr,rega
+	add contr,8,regc
+	arg mem_le_rand,regb
+	arg 8,loopcnt
+	call string_compare
+	branch enable_user,zero
+	copy regc,rega
+	arg mem_le_irk,regb
+	arg 8,loopcnt
+	call string_compare
+	branch enable_user,zero
+	rtn
+
+check_nvram:
+	fetch 2,mem_nv_data_ptr
+	ifetcht 1,pdata
+	pincrease NV_DATA_LEN
+	ifetch 1,pdata
+	isub temp,null
+	rtn
+
+init_device_list:
+	fetch 1,mem_nv_data_number
+	icopy loopcnt
+	fetcht 2,mem_nv_data_ptr
+	setarg 0
+init_device_list_loop:
+	istore 1,temp
+	increase NV_DATA_LEN,temp
+	pincrease 1
+	loop init_device_list_loop
+	rtn
+
+load_device_list:
+	bpatchx patch33_1,mem_patch33
+	call nvram_find_addr_from_bd_list
+	fetch 1,mem_state
+	setflag user,state_combkey,pdata	/* we have link key */
+	store 1,mem_state
+	nbranch clear_key_exists,user
+	add rega,10,contr
+//	copy rega,contr
+	arg mem_link_key,contw
+	call  memcpy16
+	branch check_link_key_load
+clear_key_exists:
+	jam 0,mem_link_key_exists
+	rtn
+
+load_device_list_mode_4:
+	fetch 9,mem_le_ediv
+	branch clear_ltk_exists,blank
+	call nvram_find_addr_from_bd_list
+	nbranch clear_ltk_exists,user
+	fetch 2,mem_list_item_ptr
+	add pdata,1,contr
+	arg mem_le_irk,contw
+	call  memcpy16
+	arg mem_le_ltk,contw
+	call  memcpy16
+	jam 1,mem_ltk_exists
+	rtn
+
+clear_ltk_exists:
+	jam 0,mem_ltk_exists
+	rtn
+
+
+eeprom_store_le_reconn_info:
+	fetch 6,mem_le_plap
+	store 6,mem_temp_lap
+	jam REC_4_MODE,mem_record_bt_mode
+	branch eeprom_store_reconn_info
+eeprom_store_bd_reconn_info:
+	fetch 6,mem_plap
+	store 6,mem_temp_lap
+	jam REC_3_MODE,mem_record_bt_mode
+eeprom_store_reconn_info:
+	fetch 1,mem_device_option
+	beq dvc_op_module,check_51cmd_update_device_record
+	bbit1 dvc_op_mouse,mouse_store_remote_bdaddr
+	rtn
+	
+
+check_link_key_load:
+	fetch 8,mem_link_key
+	fetcht 8,mem_link_key+8
+	ior temp,pdata
+	rtn blank
+	jam 1,mem_link_key_exists
+	rtn
+	
+
+/* =============== GPIO CONTROL ================= */
+
+
+	//temp [4:0]=GPIO number, 0-31, 
+gpio_set_wake_by_current_state:
+	bpatchx patch33_2,mem_patch33
+	set1 7,temp
+	call gpio_get_bit
+	nsetflag true,7,temp
+	//branch gpio_set_wake
+	//fall through
+	
+	//temp [4:0]=GPIO number, 0-31, [7]=0, low active
+gpio_set_wake:
+	bpatchx patch33_3,mem_patch33
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	isolate0 7,temp
+	and temp,0x1f,queue
+	fetch 4,mem_gpio_wakeup_low
+	qsetflag true,pdata
+	store 4,mem_gpio_wakeup_low
+	fetch 4,mem_gpio_wakeup_high
+	nqsetflag true,pdata
+	store 4,mem_gpio_wakeup_high
+	rtn
+	
+	//temp [4:0]=GPIO number, 0-31, [7]=0, low active
+gpio_clr_wake:
+	bpatchx patch33_4,mem_patch33
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	isolate0 7,temp
+	and temp,0x1f,queue
+	fetch 4,mem_gpio_wakeup_low
+	qset0 pdata
+	store 4,mem_gpio_wakeup_low
+	fetch 4,mem_gpio_wakeup_high
+	qset0 pdata
+	store 4,mem_gpio_wakeup_high
+	rtn
+
+
+gpio_config_input_nowake:
+	call gpio_clr_wake
+	branch gpio_config_input_without_wake
+
+	//temp [4:0]=GPIO number, 0-31, [7]=0, low active
+gpio_config_input:
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	ncall gpio_set_wake,wake
+
+gpio_config_input_without_wake:
+	arg core_gpio_pd0,contw
+	call gpio_set_bit
+	setflip gpio_active_bit,temp
+	arg core_gpio_pu0,contw
+	call gpio_set_bit
+	set0 gpio_active_bit,temp
+	arg core_gpio_oe0,contw
+	branch gpio_set_bit
+
+
+gpio_set_high_impedance:
+	arg core_gpio_pd0,contw
+	call gpio_set_bit
+	set0 gpio_active_bit,temp
+	arg core_gpio_pu0,contw
+	call gpio_set_bit
+	set0 gpio_active_bit,temp
+	arg core_gpio_oe0,contw
+	branch gpio_set_bit
+
+
+	//temp [4:0]=GPIO number, 0-31, [7]=0, low active. set gpio to inactive state
+gpio_config_output:	
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	setflip gpio_active_bit,temp
+	call gpio_out
+gpio_config_output0:
+	set1 gpio_active_bit,temp
+	arg core_gpio_oe0,contw
+	branch gpio_set_bit
+	
+gpio_common:
+	and temp,0x07,queue
+	rshift3 temp,pdata
+	and_into 3,pdata
+	iadd contw,contw
+	ifetch 1,contw
+	rtn
+
+gpio_check_active:
+	arg core_gpio_out0,contw
+	branch get_bit_common
+
+	
+	/* temp is gpio number, return true if gpio active */
+gpio_get_bit:
+	arg core_gpio_in,contw
+get_bit_common:
+	call gpio_common
+	isolate1 gpio_active_bit,temp
+	branch gpio_get_bit_reverse,true
+	qisolate0 pdata
+	rtn
+gpio_get_bit_reverse:
+	qisolate1 pdata
+	rtn
+
+gpio_out_inactive:
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	isolate1 7,null
+	branch gpio_out_flag
+
+gpio_out_active:
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	isolate0 7,null
+
+	/* temp is gpio number,  [7]=1,set out equa true flag if gpio active */
+gpio_out_flag:
+	setarg 0
+	nsetflag true,gpio_active_bit,pdata
+	ixor temp,temp
+	
+	/* temp is gpio number,0-31, [7]=out bit value */
+gpio_out:
+	arg core_gpio_out0,contw
+
+	//temp [4:0]=GPIO number, 0-31, [7]=bit value; contw is gpio reg base
+gpio_set_bit:
+	call gpio_common
+	isolate1 gpio_active_bit,temp
+	qsetflag true,pdata
+	istore 1,contw
+	rtn
+
+gpio_set_before_lpm_common:
+	arg -1,rega
+	hfetch 1,core_gpio_sel1
+	compare 0x02,pdata,0x03
+	call neglact4_from_23_pin,true	//spi
+
+	compare 0x01,pdata,0x03
+	call neglact2_form_25_pin,true	//two spi gpio25 26
+
+	compare 0x03,pdata,0x03
+	call neglact2_form_25_pin,true	//two spi gpio30 31
+	 	 
+	isolate1 2,pdata
+	call neglect2_from_6_pin,true	//uart
+	 
+	isolate1 3,pdata
+	call neglect4_from_9_pin,true	//spi
+
+	isolate1 4,pdata
+	call neglact2_form_30_pin,true	//IIC GPIO30 31
+
+	isolate1 6,pdata
+	nsetflag true,04,rega			//pwm0 gpio4
+
+	isolate1 7,pdata
+	nsetflag true,05,rega			//pwm1 gpio5
+
+	hfetch 1,core_gpio_sel2
+	isolate1 0,pdata
+	nsetflag true,27,rega			//pwm2 gpio27
+	isolate1 1,pdata
+	nsetflag true,28,rega			//pwm3 gpio28
+	isolate1 2,pdata
+	nsetflag true,03,rega			//pwm4 gpio03
+	isolate1 3,pdata
+	nsetflag true,08,rega			//pwm5 gpio08
+	isolate1 4,pdata
+	nsetflag true,20,rega			//pwm0 gpio20
+	isolate1 5,pdata
+	nsetflag true,21,rega			//pwm1 gpio21
+	isolate1 6,pdata
+	nsetflag true,22,rega			//pwm2 gpio22
+	isolate1 7,pdata
+	nsetflag true,23,rega			//pwm3 gpio23
+		
+	hfetch 1,core_gpio_sel
+	isolate1 0,pdata
+	nsetflag true,05,rega			//ADC GPIO05
+	isolate1 1,pdata
+	nsetflag true,06,rega			//ADC GPIO06
+	isolate1 2,pdata
+	nsetflag true,07,rega			//ADC GPIO07
+	isolate1 3,pdata
+	nsetflag true,18,rega			//ADC GPIO18
+	isolate1 4,pdata
+	nsetflag true,19,rega			//ADC GPIO19
+	isolate1 5,pdata
+	nsetflag true,20,rega			//ADC GPIO20
+	isolate1 6,pdata
+	nsetflag true,21,rega			//ADC GPIO21
+	isolate1 7,pdata
+	nsetflag true,22,rega			//ADC GPIO22
+	
+	hfetch 1,core_uart_ctrl
+	isolate1 4,pdata
+	call neglact2_form_2_pin,true
+	bpatchx patch33_5,mem_patch33
+
+	hfetch 4,core_gpio_pu0
+	hfetcht 4,core_gpio_pd0
+	ior temp,pdata
+	invert pdata,pdata
+	iand rega,pdata
+	//set0 4,pdata //revc
+	hstore 4,core_gpio_oe0
+	rtn
+	
+	
+neglect2_from_6_pin: //uart
+	 arg 6,queue
+	 branch neglect_2_pin
+neglect4_from_9_pin:
+	 arg 9,queue
+	 branch neglact_4_pin
+neglact4_from_23_pin:
+	 arg 23,queue
+	 branch neglact_4_pin
+neglact2_form_25_pin:
+	 arg 25,queue
+	 branch neglect_2_pin
+neglact2_form_30_pin:
+	 arg 30,queue
+	 branch neglect_2_pin
+neglact2_form_2_pin:
+	 arg 2,queue
+	 branch neglect_2_pin
+neglact_1_pin:
+	arg 1,loopcnt
+	branch neglect_pin_loop
+neglact_4_pin:
+	 arg 4,loopcnt
+	 branch neglect_pin_loop
+neglect_2_pin:
+	 arg 2,loopcnt
+neglect_pin_loop:
+	 qset0 rega
+	 increase 1,queue
+	 loop neglect_pin_loop
+	 rtn
+
+
+
+
+
+
+/* ===================== sniff GPIO CONTROL ======================= */
+gpio_cfg_uart_tx_output:
+	call gpio_uart2gpio
+	arg UART_WAKEUP_TX,temp
+	branch gpio_config_output
+
+gpio_pu_uart_tx:
+	call gpio_cfg_uart_tx_output
+	arg UART_WAKEUP_TX,temp
+	branch gpio_out_inactive
+
+
+
+gpio_rx_config_input_with_pu:
+	call gpio_uart2gpio
+	hfetch 1, core_gpio_pu0
+	set1 UART_WAKEUP_RX,pdata
+	hstore 1,core_gpio_pu0
+	arg UART_WAKEUP_RX,temp
+	branch gpio_config_input
+	
+gpio_uart2gpio:
+	hfetch 1,core_gpio_sel1
+	and_into 0xfb,pdata
+	hstore 1,core_gpio_sel1
+	rtn
+
+gpio_check_uart_state:
+	hfetch 1,core_gpio_sel1
+	isolate1 2,pdata
+	rtn
+
+load_chip_option:
+	call otp_enable_chgpump
+	setarg OTP_CHIP_FUNCTIONS
+	arg mem_chip_functions,rega
+	arg 0x02,temp
+	call otpd_read_data
+	branch otp_disable_chgpump
+
+
+load_adc_init:
+	call otp_enable_chgpump
+	setarg otp_adc_io_0_5V_addr
+	arg mem_0_5_adc_io_data,rega
+	arg 14,temp
+	call otpd_read_data
+	branch otp_disable_chgpump
+
+
+//mem_adc_config_flag 0:vinlpm 1:Hvin 2: GPIO
+adc_init_data:
+	bpatchx patch33_6,mem_patch33
+
+	call load_adc_init
+	
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_VINLPM,adc_init_data_vinlpm
+	beq ADC_CONFIG_HVIN,adc_init_data_hvin
+	beq ADC_CONFIG_GPIO,adc_init_data_io
+	rtn	
+
+adc_init_data_vinlpm:
+	fetcht 2,mem_otp_adc_flag
+	setarg OTP_ADC_FLAG
+	isub temp,null
+	branch adc_check_data_vinlpm,zero
+	setarg 0x4dfa
+	store 2,mem_3v_adc_vinlpm_data	
+	setarg 0x4894
+	store 2,mem_2v_adc_vinlpm_data
+	branch set_vdd_reference_voltage_1v
+
+adc_check_data_vinlpm:
+	fetch 2,mem_3v_adc_vinlpm_data
+	nbranch adc_check_2v_vinlpm,blank
+	setarg 0x4dfa
+	store 2,mem_3v_adc_vinlpm_data
+adc_check_2v_vinlpm:	
+	fetch 2,mem_2v_adc_vinlpm_data
+	nbranch set_vdd_reference_voltage_1v,blank
+	setarg 0x4894
+	store 2,mem_2v_adc_vinlpm_data
+set_vdd_reference_voltage_1v:
+	setarg 100
+	store 2,mem_reference_voltage //set reference voltage = 1V
+	rtn		
+
+adc_init_data_hvin:
+	fetcht 2,mem_otp_adc_flag
+	setarg OTP_ADC_FLAG
+	isub temp,null
+	branch adc_check_data_hvin,zero
+	setarg 0x5932
+	store 2,mem_5v_adc_hvin_data	
+	setarg 0x4323
+	store 2,mem_1v_adc_hvin_data
+	branch set_vdd_reference_voltage_4v
+
+adc_check_data_hvin:
+	fetch 2,mem_5v_adc_hvin_data
+	nbranch adc_check_1v_hvin,blank
+	setarg 0x5932
+	store 2,mem_5v_adc_hvin_data
+adc_check_1v_hvin:	
+	fetch 2,mem_1v_adc_hvin_data
+	nbranch set_vdd_reference_voltage_4v,blank
+	setarg 0x4323
+	store 2,mem_1v_adc_hvin_data
+set_vdd_reference_voltage_4v:
+	setarg 400
+	store 2,mem_reference_voltage //set reference voltage = 4V
+	rtn 	
+
+adc_init_data_io:
+	fetcht 2,mem_otp_adc_flag
+	setarg OTP_ADC_FLAG
+	isub temp,null
+	branch adc_check_data_io,zero
+	setarg 0x6946
+	store 2,mem_1v_adc_io_data	
+	setarg 0x5377
+	store 2,mem_0_5_adc_io_data
+	branch set_vdd_reference_voltage_0_5v
+
+adc_check_data_io:
+	fetch 2,mem_1v_adc_io_data
+	nbranch adc_check_0_5v_io,blank
+	setarg 0x6946
+	store 2,mem_1v_adc_io_data
+adc_check_0_5v_io:
+	fetch 2,mem_0_5_adc_io_data
+	nbranch set_vdd_reference_voltage_0_5v,blank
+	setarg 0x5377
+	store 2,mem_0_5_adc_io_data
+set_vdd_reference_voltage_0_5v:
+	setarg 50
+	store 2,mem_reference_voltage //set reference voltage = 0.5V
+	rtn	
+
+
+adc_set_mode:
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_VINLPM,adc_check_vinlpm
+	beq ADC_CONFIG_HVIN,adc_check_hvin
+	beq ADC_CONFIG_GPIO,adc_check_gpio
+	rtn
+adc_check_vinlpm:
+	jam 0xbf,rf_adc_mode	//read VINLPM voltage directly	
+	branch read_adc
+adc_check_hvin:
+	jam 0xaf,rf_adc_mode	//read HVIN voltage directly
+	branch read_adc
+adc_check_gpio:
+	jam 0x8f,rf_adc_mode
+	fetch 1,mem_adc_channel
+	hstore 1,rf_adc_ch
+	branch read_adc
+read_adc:
+	bpatchx patch33_7,mem_patch33
+	hfetch 1,core_uart_baud + 1
+	set1 7,pdata
+	hstore 1,core_uart_baud + 1 
+	hfetch 1,rf_adc_ch
+	or_into 0x30,pdata
+	hstore 1,rf_adc_ch
+	jam 0x7c,rfen_adc
+	jam 0xaa,rf_adc_gc
+	nop 5000
+	hfetcht 2,core_adc_sum
+	hfetch 1,core_uart_baud + 1
+	set0 7,pdata
+	hstore 1,core_uart_baud + 1
+	storet 2,mem_adc_current_value
+	rtn
+
+vdd_calculate_by_mode:
+	bpatchx patch34_0,mem_patch34
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_VINLPM,vdd_calculate_vinlpm
+	beq ADC_CONFIG_HVIN,vdd_calculate_hvin
+	beq ADC_CONFIG_GPIO,vdd_calculate_io
+	rtn
+
+vdd_calculate_vinlpm:
+	fetch 2,mem_3v_adc_vinlpm_data
+	fetcht 2,mem_2v_adc_vinlpm_data
+	arg 200,regc
+	branch vdd_calculate
+
+vdd_calculate_hvin:
+	fetch 2,mem_5v_adc_hvin_data
+	fetcht 2,mem_1v_adc_hvin_data
+	arg 100,regc
+	branch vdd_calculate
+
+vdd_calculate_io:
+	fetch 2,mem_1v_adc_io_data
+	fetcht 2,mem_0_5_adc_io_data
+	arg 50,regc
+	branch vdd_calculate
+	
+vdd_calculate:
+	isub temp,rega
+	fetch 2,mem_adc_current_value
+	isub temp,pdata
+	nbranch vdd_calculate1,positive
+	fetcht 2,mem_reference_voltage
+	imul32 temp,regb
+	copy regc,pdata
+	imul32 rega,pdata
+	iadd regb,pdata
+vdd_calculate2:
+	idiv rega
+	call wait_div_end
+	quotient pdata	
+	rtn
+
+vdd_calculate1:
+	copy temp,pdata
+	fetcht 2,mem_adc_current_value
+	isub temp,pdata
+	fetcht 2,mem_reference_voltage
+	imul32 temp,regb
+	copy regc,pdata
+	imul32 rega,pdata
+	isub regb,pdata
+	branch vdd_calculate2
+
+/*	typedef struct
+*	{
+*		uint16 full_vol
+*		uint16 empty_vol
+*		uint16 low_vol
+*		uint16 now_vol
+*	}bat_calculate;
+*/
+//out:	pdata->bat percent
+adc_bat_percent_lowpower_out:
+	ifetch 8,rega
+	store 8,mem_pdatatemp
+	fetch 2,mem_pdatatemp
+	fetcht 2,mem_pdatatemp+2
+	isub temp,rega
+	fetch 2,mem_pdatatemp+6
+	isub temp,regb
+	fetcht 2,mem_pdatatemp+4
+	isub temp,null
+	ncall adc_set_low_power_flag,positive
+	mul32 regb,100,pdata
+	idiv rega
+	call wait_div_end
+	quotient pdata
+	call adc_set_no_power_flag,blank
+	rtn
+adc_set_low_power_flag:
+	fetch 1,mem_adc_power_flag
+	set1 0,pdata
+	store 1,mem_adc_power_flag
+	rtn
+adc_set_no_power_flag:
+	fetcht 1,mem_adc_power_flag
+	set1 1,temp
+	storet 1,mem_adc_power_flag
+	rtn
+
+
+
+/****************************************key scan***************************************/
+keyscan_key_init:
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_key_init_next:
+	rtn blank
+	copy pdata,loopcnt
+//	copy contr,rega
+	fetch 2,mem_keyscan_ptr
+	increase 3,pdata	//mem_key_conf0_pin
+	copy pdata,rega
+keyscan_key_init_lp1:
+	ifetcht 1, rega
+	call gpio_config_input
+	increase KEY_CONF_STRUCT_LEN,rega
+	loop keyscan_key_init_lp1
+keyscan_key_init_end:
+	rtn
+	
+keyscan_scan_key:
+	fetch 2,mem_keyscan_ptr
+	increase 3,pdata	//mem_key_conf0_pin
+	copy pdata,rega
+//	arg mem_key_conf0_pin,rega
+	force 0,regb
+	jam 0,mem_key_value_temp
+keyscan_scan_key_lp1:
+	ifetcht 1, rega
+	call gpio_get_bit
+	bpatchx patch34_1,mem_patch34
+	fetch 2, mem_key_value_temp
+	copy regb,queue
+	qsetflag true,pdata
+	store 2, mem_key_value_temp
+	increase KEY_CONF_STRUCT_LEN,rega
+	increase 1,regb
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_scan_key_lp1_next:
+	ixor regb,null
+	nbranch keyscan_scan_key_lp1,zero
+	fetch 2,mem_key_value_temp
+	fetcht 2,mem_key_value
+	ixor temp,null
+	rtn zero
+	enable user
+	rtn
+
+keyscan_process_lpm_before:
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_process_lpm_before_next:
+	rtn blank
+	copy pdata,loopcnt
+	fetch 2,mem_keyscan_ptr 
+	increase 3,pdata	//mem_key_conf0_pin
+	copy pdata,rega
+keyscan_process_lpm_before_lp1:
+	ifetcht 1, rega
+	call gpio_set_wake_by_current_state
+	increase KEY_CONF_STRUCT_LEN,rega
+	loop keyscan_process_lpm_before_lp1
+keyscan_process_lpm_before_end:
+	rtn
+
+keyscan_key_process:
+	arg key_scan_timer,queue
+	call timer_check
+	nrtn blank
+	setarg 0x20
+	arg key_scan_timer,queue
+	call timer_init
+	disable user
+	call keyscan_process_lpm_before
+	bpatchx patch34_2,mem_patch34
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_key_process_next:
+	rtn blank
+	call keyscan_scan_key
+	nbranch lpm_button_clean_wake_lock,user
+	call lpm_button_get_wake_lock
+	disable user
+	fetch 2, mem_key_value_temp
+	store 2,mem_key_value_temp4
+	jam 0,mem_key_value_temp6
+	force 0,queue
+keyscan_key_lp1:
+	fetch 2, mem_key_value
+	rshift pdata,temp
+	storet 2,mem_key_value
+	and pdata,0x01,pdata
+	fetcht 2, mem_key_value_temp4
+	and temp,0x01,rega
+	rshift temp,temp
+	storet 2,mem_key_value_temp4
+	ixor rega,null
+	ncall keyscan_send_key_data,zero
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_key_lp1_next:
+	fetcht 1, mem_key_value_temp6
+	increase 1,temp
+	storet 1, mem_key_value_temp6
+	copy temp,queue
+	ixor queue,null
+	nbranch keyscan_key_lp1,zero
+	fetch 2,mem_key_value_temp
+	store 2, mem_key_value
+	rtn
+keyscan_send_key_data:
+	bpatchx patch34_3,mem_patch34
+	fetch 2,mem_keyscan_ptr
+	increase 1,pdata
+	ifetch 2,pdata
+	branch callback_func
+
+
+/*************************************pwm*************************************/
+
+//rega:clk select(0:system clk; 1:system clk undivied; 2:lpo)
+/*rega:clk select
+			0x00:select system clock 12M;
+			0x40:select undivied system clock 24M/48M;
+			0x80:select lpo clock:33K
+*/
+pwm_init:
+	hfetch 1,core_clksel
+	ior rega,pdata
+	hstore 1,core_clksel
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_PWM,pdata
+	hstore 2,core_clkoff
+	nop 100
+	rtn
+
+/*	typedef struct
+*	{
+*		uint8 gpio_num
+*		uint8 pwm_channel
+*		uint24 frequency
+*		uint8 duty_cycle   //0-100
+*	}PWM_Style;
+	addr: mem_pdatatemp
+*/
+pwm_out_set:
+	fetcht 3,mem_pdatatemp+2
+	setarg PWM_12MHZ
+	idiv temp
+	call wait_div_end
+	quotient temp
+	fetch 1,mem_pdatatemp+5
+	imul32 temp,pdata
+	div pdata,100
+	call wait_div_end
+	quotient rega
+	copy temp,pdata
+	isub rega,regb	
+	fetch 1,mem_pdatatemp+1
+	call pwm_duty_cycle_set
+	fetch 1,mem_pdatatemp
+	branch pwm_enable
+
+//rega:pcnt ;regb:ncnt ;pdata:pwm channel select
+pwm_duty_cycle_set:
+	beq 0,pwm_pwm0_duty_set
+	beq 1,pwm_pwm1_duty_set
+	beq 2,pwm_pwm2_duty_set
+	beq 3,pwm_pwm3_duty_set
+	beq 4,pwm_pwm4_duty_set
+	beq 5,pwm_pwm5_duty_set
+pwm_pwm0_duty_set:
+	arg core_pwm_pcnt0,contw
+	branch pwm_set_pncnt
+pwm_pwm1_duty_set:
+	arg core_pwm_pcnt1,contw
+	branch pwm_set_pncnt
+pwm_pwm2_duty_set:
+	arg core_pwm_pcnt2,contw
+	branch pwm_set_pncnt
+pwm_pwm3_duty_set:
+	arg core_pwm_pcnt3,contw
+	branch pwm_set_pncnt
+pwm_pwm4_duty_set:
+	arg core_pwm_pcnt4,contw
+	branch pwm_set_pncnt
+pwm_pwm5_duty_set:
+	arg core_pwm_pcnt5,contw
+	branch pwm_set_pncnt
+pwm_set_pncnt:
+	copy rega,pdata
+	istore 2,contw
+	copy regb,pdata
+	istore 2,contw
+	rtn
+
+
+//pdata:gpio select
+pwm_enable:
+	enable user
+	branch pwm_gpio_set
+pwm_disable:
+	disable user
+pwm_gpio_set:
+	beq 4,pwm_gpio4_set
+	beq 5,pwm_gpio5_set
+	beq 27,pwm_gpio27_set
+	beq 28,pwm_gpio28_set
+	beq 3,pwm_gpio3_set
+	beq 8,pwm_gpio8_set
+	beq 20,pwm_gpio20_set
+	beq 21,pwm_gpio21_set
+	beq 22,pwm_gpio22_set
+	beq 23,pwm_gpio23_set
+	rtn
+
+
+pwm_gpio4_set:	//pwm 0
+	arg 6,queue
+	branch pwm_one_set_select
+pwm_gpio5_set:	//pwm 1
+  	arg 7,queue
+	branch pwm_one_set_select
+pwm_gpio27_set:	//pwm 2
+  	arg 8,queue
+	branch pwm_one_set_select
+pwm_gpio28_set:	//pwm 3
+	arg 9,queue
+	branch pwm_one_set_select
+pwm_gpio3_set:	//pwm 4
+ 	arg 10,queue
+	branch pwm_one_set_select
+pwm_gpio8_set:	//pwm 5
+  	arg 11,queue
+	branch pwm_one_set_select
+pwm_gpio20_set:	//pwm 0
+  	arg 12,queue
+	branch pwm_tw0_set_select
+pwm_gpio21_set:	//pwm 1
+  	arg 13,queue
+	branch pwm_tw0_set_select
+pwm_gpio22_set:	//pwm 2
+   	arg 14,queue
+	branch pwm_tw0_set_select
+pwm_gpio23_set:	//pwm 3
+    	arg 15,queue
+	branch pwm_tw0_set_select
+
+pwm_set_select:
+	hfetch 2,core_gpio_sel1
+	qsetflag user,pdata
+	hstore 2,core_gpio_sel1
+	copy rega,queue
+	hfetch 1,core_gpio_key2
+   	qsetflag user,pdata
+   	hstore 1,core_gpio_key2
+	rtn
+
+pwm_one_set_select:
+	add queue,-4,rega
+	branch pwm_set_select
+
+pwm_tw0_set_select:
+	add queue,-10,rega
+	branch pwm_set_select
+
+
+	
+
+rfcomm_init:
+	rtn wake
+	jam 0,mem_rfcomm_send_more_pkt
+	jam BITS9600,memRemoteRPNBitRate        
+	jam DATABITS8,memRemotePRNDataBits      
+	jam 0x11,memRemotePRNXon
+	jam 0x13,memRemotePRNXoff
+	setarg 0
+	store 3,memRemotePRNStopBit
+	store 1,mem_spp_state                  
+	jam 0,memui_reconnect_mode
+	//branch rfcomm_init_spp
+rfcomm_init_spp:
+	bpatchx patch34_4,mem_patch34
+	setarg 0
+	store 1,mem_spp_state
+	store 1,mem_remote_spp_channel
+	store 1,mem_pn_dlci
+	fetch 1,mem_credit_flag
+	beq CREDIT_ENABLE,rfcomm_init_spp_with_credit
+	jam 0x50,mem_credit_given
+	rtn
+
+rfcomm_init_spp_with_credit:
+	jam 0x00,mem_credit_given
+	rtn
+
+set_CR_bit:
+	or_into 0x02,temp
+	rtn
+
+
+/*below added by koufan*/
+
+/*rfcomm_send */
+
+
+
+	/*rfcomm_calculate_FCS_sabm*/
+	/*input: address in temp*/
+	/*output: FCS in pdata  */
+rfcomm_calculate_FCS_sabm:
+	copy temp,pdata
+	reverse pdata,pdata //address
+	store 1,memFCStemp3
+	force INI_TX_SABM,pdata
+	reverse pdata,pdata
+	store 1,memFCStemp2
+	force 0x01,pdata                        
+	reverse pdata,pdata
+	store 1,memFCStemp1
+	call caculate_fcs
+	copy temp,pdata                        
+	rtn
+rfcomm_calculate_FCS_ua:
+	reverse pdata,pdata //address
+	store 1,memFCStemp3
+	force   RSP_TX_UA, pdata
+	reverse pdata, pdata
+	store   1, memFCStemp2
+	force   0x01, pdata
+	reverse pdata, pdata
+	store   1, memFCStemp1
+	branch caculate_fcs
+	/* FCS return from temp                */
+rfcomm_calculate_FCS_dlci0:
+	fetch 1,mem_rfcomm_initiator
+	branch rfcomm_calculate_FCS_dlci0_res,blank
+	setarg 0x70 //FCS of initiator
+	rtn
+rfcomm_calculate_FCS_dlci0_res:
+	setarg 0xaa//FCS of responder
+	rtn
+	
+rfcomm_save_FCS_uih:
+	reverse pdata, pdata //address 
+	store 1,memFCStemp3                     /* contw distroided                    */
+	force RSP_RX_UIH,pdata 
+	call caculate_UIHdata_fcs
+	fetcht 2,mem_contw_temp
+	copy temp,contw
+	istore 1,contw                      /* save FCS for later use              */
+	copy contw,temp
+	storet 2,mem_contw_temp
+	force RSP_RX_UIH_WDATA,pdata             /* P/F =1 + RSP_RX_UIH                 */
+	call caculate_UIHdata_fcs
+	fetcht 2,mem_contw_temp
+	copy temp,contw
+	istore 1,contw             /* save FCS for later use              */
+	rtn	
+/**********************************************************************/
+/* This subroutine caculates the FCS for UIH data                     */
+/* Input:                                                             */
+/*        the address byte at memFCStemp3(bit reversed), control byte */
+/*        at pdata (not bit reversed)                                 */
+/* Output:                                                            */
+/*        pdata: the FCS                                              */
+/**********************************************************************/  
+caculate_UIHdata_fcs:
+	reverse pdata,pdata
+	store   1,memFCStemp2
+	fetch   2, memFCStemp2                     
+	lshift8 pdata,pdata
+	store 3,mem_mod2div_temp
+	arg     0x107,regA
+	arg 0xf,regB
+	call mod2div
+	xor_into     0xd7, pdata
+	invert  pdata,pdata
+	reverse pdata,pdata
+	rtn
+	
+/**********************************************************************/
+/* This subroutine caculates the FCS                                  */
+/* Input:                                                             */
+/*        the address byte at memFCStemp3, control byte at memFCStemp2*/  
+/*        lenght at memFCStemp1 (all above data are bit reversed)     */
+/* Output:                                                            */
+/*        temp: the FCS                                               */
+/**********************************************************************/     
+caculate_fcs:
+	fetch 3, memFCStemp1                    /* load 3 bytes start at memFCStemp1   */
+	store 3,mem_mod2div_temp
+	arg 0x107,regA
+	arg 0xf,regB  //24bit(memFCStemp1+..+memFCStemp3) - 9bit(regA) = 15bit
+	call mod2div
+	lshift8 pdata,pdata 
+	arg 0x7, regB  //16bit(lshift8 pdata,pdata ) - 9bit(regA) = 7bit
+	call mod2div
+	xor_into     0x2b, pdata		//0x3d
+	invert  pdata, pdata                        
+	reverse pdata, pdata                      /* FCS at pdata                        */
+	copy    pdata, temp
+	rtn
+
+mod2div:
+	arg 0,regC
+	copy regB,loopcnt
+	call right_shift_n // right shift pdata (regB)bit
+	icopy temp
+mod2div_loop:
+	//jam 1,0x1fff
+//mod2div_loop1:
+	//fetch 1,0x1fff
+	//nbranch mod2div_loop1,blank
+	copy temp,pdata
+	lshift regC,regC//quotient
+	bbit0 8, mod2div_not_enough_reduction//the high bit of 0x107
+	ixor regA,temp// temp----remainer
+	increase 1,regC// quotient
+mod2div_not_enough_reduction: //Minuend smaller than Subtrahend
+	lshift temp,temp
+	fetch 3,mem_mod2div_temp
+	increase -1,regB
+	compare 0xff,regB,0xff
+	branch mod2div_end,true
+	copy regB,loopcnt
+	call right_shift_n // right shift pdata (regB)bit
+	isolate1 0,pdata
+	setflag true,0,temp //move a new bit from Dividend(queue) into Minuend(pdata)
+	branch mod2div_loop
+mod2div_end:
+	//output:remainer in pdata
+	rshift  temp,pdata
+	rtn
+
+get_rfcomm_snd_adss:
+	fetcht 1,mem_pn_dlci
+dlci_to_address_cmd:
+	//input DLCI from temp
+	lshift2 temp,temp
+	set1 RFCOMM_ADDRESS_EXT_LEN,temp
+	fetch 1,mem_rfcomm_initiator
+	ncall set_CR_bit,blank
+	storet 1,mem_rfcomm_send_adss
+	rtn
+
+channel_to_dlci:
+	//input channel from temp
+	lshift temp,temp
+	fetch 1,mem_rfcomm_initiator
+	setflag blank,0,temp //direction in dlci
+	//output dlci to temp
+	rtn
+rfcomm_rx_process_DLCI0_sabm:
+	fetcht 1,mem_current_channel //address
+	jam 0xd7,mem_current_fcs //FCS
+	call rfcomm_send_ua
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_RFCOMM_ONLY_SABM,pdata
+	set1 L2CAP_CHANNEL_RFCOMM_ONLY_UA,pdata
+	store 1,mem_rfcomm_state
+	jam 0,mem_rfcomm_initiator
+	branch rfcomm_rx_process_end
+rfcomm_rx_process_DLCI0_ua:
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_RFCOMM_ONLY_UA,pdata
+	store 1,mem_rfcomm_state
+	branch rfcomm_rx_process_end
+
+	
+rfcomm_rx_process:
+	bpatchx patch34_5,mem_patch34
+	fetch 1,memui_reconnect_mode
+	beq NO_RECONNECTION,rfcomm_rx_process_remote_page
+	branch rfcomm_rx_process_reconn
+
+rfcomm_rx_process_remote_page:
+	fetch 2,mem_l2cap_payload_ptr
+	copy pdata,contr
+	call get_rfcomm_head_struct
+	fetch 1,mem_current_channel
+	beq 0,parse_dlci0_rp
+	branch parse_uih_rp
+parse_dlci0_rp:
+	bpatchx patch34_6,mem_patch34
+	fetch 1,mem_current_frame_type
+	beq RFCOMM_FRAME_TYPE_SABM,rfcomm_rx_process_DLCI0_sabm
+	beq RFCOMM_FRAME_TYPE_UA,rfcomm_rx_process_DLCI0_ua
+	beq RFCOMM_FRAME_TYPE_UIH,parse_DLCI0_rp_uih
+	beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_rp_spp_disconn_send_event
+	rtn
+
+
+parse_DLCI0_rp_uih:
+	fetch 2,mem_rfcomm_uih_payload_ptr
+	copy pdata,contr
+	call get_rfcomm_uih_head_struct
+	fetch 1,mem_uih_cmd_type
+	beq UIH_PARAM_NEG_CMD,parse_DLCI0_rp_uih_pn_cmd
+	beq UIH_PARAM_NEG_RES,parse_DLCI0_rp_uih_pn_res
+	beq UIH_MODEM_STATUS_CMD,parse_DLCI0_rp_uih_ms_cmd
+	beq UIH_MODEM_STATUS_RES,parse_DLCI0_rp_uih_ms_res
+	beq UIH_PARAM_CMD_REMOVE_PORT,parse_DLCI0_rp_uih_cmd_port	
+	branch rfcomm_rx_process_end
+	
+parse_DLCI0_rp_uih_pn_cmd:
+	call parse_DLCI0_rp_uih_pn_res_common
+
+	branch parse_DLCI0_rp_uih_pn_cmd_spp
+
+parse_DLCI0_rp_uih_pn_cmd_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_PN_CMD,pdata
+	set1 RFCOMM_CHANNEL_STATE_PN_RES,pdata
+	store 1,mem_spp_state
+	call rfcomm_send_param_neg_res
+	branch rfcomm_rx_process_end
+	
+parse_DLCI0_rp_uih_pn_res:
+	call parse_DLCI0_rp_uih_pn_res_common
+	branch rfcomm_rx_process_end
+
+parse_DLCI0_rp_uih_pn_res_common:
+	call get_param_payload_ptr
+	branch  get_rfcomm_prarmer_negotiation
+
+get_rfcomm_param_modem_status:
+	call get_param_payload_ptr
+	ifetch 1,contr
+	rshift3 pdata,pdata
+	store 1,mem_ms_channel
+	ifetch 1,contr
+	store 1,mem_ms_param
+	rtn
+
+
+get_rfcomm_head_struct:
+	ifetch 1,contr
+	store 1,mem_current_adss
+	rshift3 pdata,pdata
+	store 1,mem_current_channel
+	ifetch 1,contr
+	store 1,mem_current_frame_type
+get_rfcomm_current_length:
+	call get_rfcomm_length_common
+	storet 2,mem_current_length
+	copy contr,pdata
+	store 2,mem_rfcomm_uih_payload_ptr
+	rtn
+
+get_rfcomm_uih_head_struct:
+	ifetch 1,contr
+	rshift pdata,pdata
+	store 1,mem_uih_cmd_type
+	call get_rfcomm_length_common
+	storet 2,mem_uih_length
+	copy contr,pdata
+	store 2,mem_param_payload_ptr
+	rtn
+
+
+get_param_payload_ptr:
+	fetch 2,mem_param_payload_ptr
+	copy pdata,contr
+	rtn
+
+get_rfcomm_length_common:
+	ifetch 1,contr
+	copy pdata,temp
+	rshift temp,temp
+	rtnbit1 0
+	ifetch 1,contr
+	lshift3 pdata,pdata
+	lshift4 pdata,pdata
+	iadd temp,temp
+	rtn
+
+get_rfcomm_prarmer_negotiation:
+	ifetch 1,contr
+	store 1,mem_pn_dlci
+	ifetch 1,contr
+	store 1,mem_pn_credit_flow_type_info
+	ifetch 1,contr
+	store 1,mem_pn_priority
+	ifetch 1,contr
+	store 1,mem_pn_acknowledg_timer
+	ifetch 2,contr
+	store 2,mem_pn_max_frame_size
+	ifetch 1,contr
+	store 1,mem_pn_max_retrans
+	ifetch 1,contr
+	store 1,mem_remote_credits
+	rtn
+
+
+parse_DLCI0_rp_uih_ms_cmd:
+	call get_rfcomm_param_modem_status
+
+	branch parse_DLCI0_rp_uih_ms_cmd_spp
+
+parse_DLCI0_rp_uih_ms_cmd_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_RCV_MS_CMD,pdata
+	set1 RFCOMM_CHANNEL_STATE_SND_MS_RES,pdata
+	store 1,mem_spp_state
+	fetcht 1,mem_pn_dlci
+	lshift2 temp,temp
+	or_into 3,temp
+	call rfcomm_send_modem_status_res
+	jam MORE_PKT_MSC_CMD_SPP,mem_rfcomm_send_more_pkt
+	branch rfcomm_rx_process_end
+	
+parse_DLCI0_rp_uih_ms_res:
+	jam BT_EVT_SPP_CONNECTED,mem_fifo_temp
+	call ui_ipc_send_event
+	call get_rfcomm_param_modem_status
+	fetch 1,mem_ms_channel
+	sub pdata,1,null
+	branch parse_DLCI0_rp_uih_MS_RES_spp,zero
+	branch assert
+parse_DLCI0_rp_uih_ms_res_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_RCV_MS_RES,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+
+parse_DLCI0_rp_uih_cmd_port:
+	call get_param_payload_ptr
+	ifetch 1,contr
+	store 1,mem_rpn_dlci
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x000e
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_rfcomm_initiator
+	//setarg 5
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch34_7,mem_patch34
+	setarg 0x15ef
+	istore 2,contw
+	setarg 0x1191
+	istore 2,contw
+	//fetch 1,mem_pn_dlci
+	//setarg 0x0b
+	fetch 1,mem_rpn_dlci
+	istore 1,contw //DLCI
+	setarg 0x000007
+	istore 5,contw
+//	setarg 0 //max frame size
+//	istore 2,contw 
+	setarg 0x01 //max retrans
+	istore 2,contw
+//	setarg 0x00
+//	istore 1,contw // init credits
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	rtn
+
+
+
+parse_uih_rp:
+	branch parse_uih_rp_spp
+
+parse_uih_rp_spp:
+	bpatchx patch35_0,mem_patch35
+	fetch 1,mem_current_frame_type
+	beq RFCOMM_FRAME_TYPE_UA,parse_uih_rp_spp_ua
+	beq RFCOMM_FRAME_TYPE_SABM,parse_uih_rp_spp_sabm
+	beq RFCOMM_FRAME_TYPE_UIH,parse_uih_spp_uih
+	beq RFCOMM_FRAME_TYPE_UIH_CREDITS,parse_uih_spp_uih_credits
+	beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_rp_spp_disconn
+	rtn
+parse_uih_rp_spp_ua:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_UA,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+parse_uih_rp_spp_sabm:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_UA,pdata
+	set1 RFCOMM_CHANNEL_STATE_SABM,pdata
+	store 1,mem_spp_state
+	fetch 1,mem_current_adss
+	call rfcomm_calculate_FCS_ua
+	store 1,mem_current_fcs
+	call rfcomm_send_ua
+	fetch 1,mem_current_adss
+	rshift2 pdata,pdata
+	store 1,mem_pn_dlci
+	lshift2 pdata,pdata
+	set0 RFCOMM_ADDRESS_CR,pdata
+	set1 RFCOMM_ADDRESS_EXT_LEN,pdata 
+	arg mem_HIUfcs_spp,temp // mem_HIUfcs_HF_WCredits in regB++
+	storet 2,mem_contw_temp
+	call rfcomm_save_FCS_uih
+	branch rfcomm_rx_process_end
+	
+parse_uih_spp_uih_credits:
+	fetch 2,mem_rfcomm_uih_payload_ptr
+	copy pdata,contr
+	increase 1,pdata
+	store 2,mem_rfcomm_uih_payload_ptr
+	ifetch 1,contr //remote credits
+	fetcht 1,mem_remote_credits
+	iadd temp,pdata
+	store 1,mem_remote_credits
+parse_uih_spp_uih:
+	call rfcomm_increase_credit_given
+parse_uih_spp_uih_cont:
+	call get_rfcomm_snd_adss
+	call rfcomm_send_uih_without_payload
+	call spp_process_rx_data
+	branch rfcomm_rx_process_end
+
+parse_uih_rp_spp_disconn_send_event:
+	jam BT_EVT_SPP_DISCONNECTED,mem_fifo_temp
+	call ui_ipc_send_event	
+parse_uih_rp_spp_disconn:
+	call rfcomm_init_spp
+	fetch 1,mem_current_adss
+	call rfcomm_calculate_FCS_ua
+	store 1,mem_current_fcs
+	call rfcomm_send_ua
+	branch rfcomm_rx_process_end
+	
+///////////////////////////////////////////
+///////////////////////////////////////////
+///////////////////////////////////////////
+rfcomm_rx_process_reconn:
+	fetch 2,mem_l2cap_payload_ptr
+	copy pdata,contr
+	call get_rfcomm_head_struct
+	fetch 1,mem_current_channel
+	beq 0,parse_DLCI0_reconn
+	branch parse_uih_reconn
+		
+parse_DLCI0_reconn:
+	bpatchx patch35_1,mem_patch35
+	fetch 1,mem_current_frame_type
+	beq RFCOMM_FRAME_TYPE_SABM,rfcomm_rx_process_DLCI0_sabm
+	beq RFCOMM_FRAME_TYPE_UA,rfcomm_rx_process_DLCI0_ua
+	beq RFCOMM_FRAME_TYPE_UIH,parse_DLCI0_reconn_uih
+	branch rfcomm_rx_process_end
+parse_DLCI0_reconn_uih:
+	fetch 2,mem_rfcomm_uih_payload_ptr
+	copy pdata,contr
+	call get_rfcomm_uih_head_struct
+	fetch 1,mem_uih_cmd_type
+	beq UIH_PARAM_NEG_CMD,parse_DLCI0_reconn_uih_pn_cmd
+	beq UIH_PARAM_NEG_RES,parse_DLCI0_reconn_uih_pn_cmd
+	beq UIH_MODEM_STATUS_CMD,parse_DLCI0_reconn_uih_ms_cmd
+	beq UIH_MODEM_STATUS_RES,parse_DLCI0_reconn_uih_ms_res
+	branch rfcomm_rx_process_end
+
+parse_DLCI0_reconn_uih_pn_cmd:
+	call parse_DLCI0_rp_uih_pn_res_common
+	fetch 1,mem_pn_dlci
+	rshift pdata,pdata
+	fetcht 1,mem_remote_spp_channel
+	isub temp,null
+	branch parse_DLCI0_reconn_uih_pn_cmd_spp,zero
+	branch assert
+parse_DLCI0_reconn_uih_pn_cmd_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_PN_RES,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+
+parse_DLCI0_reconn_uih_ms_cmd:
+	call get_rfcomm_param_modem_status
+	fetch 1,mem_ms_channel
+	fetcht 1,mem_remote_spp_channel
+	isub temp,null
+	branch parse_DLCI0_reconn_uih_ms_cmd_spp,zero
+	branch assert
+	branch rfcomm_rx_process_end
+parse_DLCI0_reconn_uih_ms_cmd_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_RCV_MS_CMD,pdata
+	set1 RFCOMM_CHANNEL_STATE_SND_MS_RES,pdata
+	store 1,mem_spp_state
+	fetcht 1,mem_pn_dlci
+	lshift2 temp,temp
+	or_into 3,temp
+	call rfcomm_send_modem_status_res
+	branch rfcomm_rx_process_end
+	
+parse_DLCI0_reconn_uih_ms_res:
+	call get_rfcomm_param_modem_status
+	fetch 1,mem_ms_channel
+	fetcht 1,mem_remote_spp_channel
+	isub temp,null
+	branch parse_DLCI0_reconn_uih_ms_res_spp,zero
+	branch assert
+parse_DLCI0_reconn_uih_ms_res_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_RCV_MS_RES,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+
+parse_uih_reconn:
+	fetch 1,mem_current_channel
+	fetcht 1,mem_remote_spp_channel
+	isub temp,null
+	branch parse_uih_reconn_spp,zero
+	branch assert
+	branch rfcomm_rx_process_end
+
+parse_uih_reconn_spp:
+	fetch 1,mem_current_frame_type
+	beq RFCOMM_FRAME_TYPE_UA,parse_uih_reconn_spp_ua
+	beq RFCOMM_FRAME_TYPE_UIH,parse_uih_spp_uih
+	beq RFCOMM_FRAME_TYPE_UIH_CREDITS,parse_uih_spp_uih_credits
+	beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_reconn_spp_disconn
+parse_uih_reconn_spp_ua:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_UA,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+parse_uih_reconn_spp_sabm:
+	branch parse_uih_reconn_spp_sabm//loop
+parse_uih_reconn_spp_disconn:
+	branch parse_uih_rp_spp_disconn
+rfcomm_rx_process_end:
+	rtn
+	
+rfcomm_send_more_pkt:
+	fetch 1,mem_rfcomm_send_more_pkt
+	rtn blank
+	beq MORE_PKT_MSC_CMD_SPP,rfcomm_send_more_pkt_msc_cmd_spp
+	branch assert
+	
+rfcomm_send_more_pkt_msc_cmd_spp:
+	jam 0,mem_rfcomm_send_more_pkt
+	call l2cap_malloc_rfcomm_channel
+	arg SPP_SLAVE_CHANNEL,temp
+	fetcht 1,mem_pn_dlci
+	lshift2 temp,temp
+rfcomm_send_more_pkt_msc_cmd_spp0:
+	or_into 0x03,temp
+	arg 0xaa,regA
+	call rfcomm_send_modem_status_cmd
+	call l2cap_get_rfcomm_tx_buff
+	copy contw,contr
+	ifetch 2, contr
+	branch assert,blank
+	rtn
+
+rfcomm_send_sabm:
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x0004
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_current_adss
+	istore 1,contw //address
+	bpatchx patch35_2,mem_patch35
+	setarg 0x013f
+	istore 2,contw
+	fetch 1,mem_current_fcs
+	istore 1,contw
+	rtn
+rfcomm_send_ua:
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x0004
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_current_adss
+	istore 1,contw //address
+	bpatchx patch35_3,mem_patch35
+	setarg 0x0173
+	istore 2,contw
+	fetch 1,mem_current_fcs
+	istore 1,contw
+	rtn
+rfcomm_send_param_neg_cmd:
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x000e
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_rfcomm_initiator
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch35_4,mem_patch35
+	setarg 0x15ef
+	istore 2,contw
+	setarg 0x1183
+	istore 2,contw
+	copy temp,pdata //DLCI in temp
+	istore 1,contw
+	setarg 0x0000f0
+	istore 3,contw
+	setarg RFCOMM_MAX_FRAME_SIZE
+	istore 2,contw
+	setarg 0
+	istore 1,contw
+	setarg 0x01		//change here later
+	istore 1,contw
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	jam 0x10,mem_credit_given
+	rtn
+rfcomm_send_param_neg_res:
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x000e
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_rfcomm_initiator
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch35_5,mem_patch35
+	setarg 0x15ef
+	istore 2,contw
+	setarg 0x1181
+	istore 2,contw
+	fetch 1,mem_pn_dlci
+	istore 1,contw //DLCI
+	setarg 0x0000e0
+	istore 3,contw
+	fetch 2,mem_rfcomm_max_frame_size
+	istore 2,contw 
+	setarg 0x00 //max retrans
+	istore 1,contw
+	fetch 1,mem_rfcomm_credit_init_data
+	istore 1,contw // init credits
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	rtn
+rfcomm_send_modem_status_cmd:
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x0008
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_rfcomm_initiator
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch35_6,mem_patch35
+	setarg 0x09ef
+	istore 2,contw
+	setarg 0x05e3
+	istore 2,contw
+	copy temp,pdata //DLCI adress
+	istore 1,contw
+	setarg 0x8d
+	istore 1,contw
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	rtn
+
+rfcomm_send_modem_status_res:
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x0008
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	copy temp,timeup
+	fetch 1,mem_rfcomm_initiator
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch35_7,mem_patch35
+	setarg 0x09ef
+	istore 2,contw
+	setarg 0x05e1
+	istore 2,contw
+	copy timeup,pdata //DLCI address in temp
+	istore 1,contw
+	setarg 0x8d
+	istore 1,contw
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	rtn
+
+rfcomm_send_uih_without_payload:
+	bpatchx patch36_0,mem_patch36
+	fetch 1,mem_credit_given
+	rtn blank
+	hfetch 2,core_uart_rxitems
+	nrtn blank
+	copy rega,pdata
+	store 1,mem_pdatatemp+1
+	storet 1,mem_pdatatemp
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x05
+	istore 2,contw
+	fetch 2,mem_RFCOMM_remote_CID
+	istore 2,contw
+	fetch 1,mem_rfcomm_send_adss
+	istore 1,contw
+	setarg 0x01ff
+	istore 2,contw
+	fetch 1,mem_credit_given
+	istore 1,contw
+	fetch 1,mem_HIUfcs_SPP_WCredits
+	istore 1,contw
+	jam 0,mem_credit_given
+	rtn
+	
+rfcomm_increase_credit_given:
+	bpatchx patch36_1,mem_patch36
+	fetch 1,mem_credit_flag
+	rtneq CREDIT_ENABLE
+	fetch 2,mem_current_length
+	rtn blank
+	fetch 1,mem_credit_given
+	increase 1,pdata
+	store 1,mem_credit_given
+	rtn
+
+spp_process_rx_data:
+	fetch 2,mem_cb_receive_spp_data
+	branch callback_func
+
+spp_tx_rfcomm_packet:
+	bpatchx patch36_2,mem_patch36
+	//credit
+	fetch 1,mem_remote_credits
+	rtn blank
+	increase -1,pdata
+	store 1,mem_remote_credits
+	fetch 2,mem_pn_max_frame_size
+	fetcht 2,mem_current_packet_length
+	isub temp,null
+	branch ssp_tx_rfcomm_from_uart,positive
+	store 2,mem_current_packet_length
+ssp_tx_rfcomm_from_uart:
+	fetch 1,mem_credit_given
+	branch ssp_tx_rfcomm_from_uart_without_credit,blank
+	jam 1,mem_rfcomm_send_offset
+	fetch 1,mem_HIUfcs_SPP_WCredits
+	store 1,mem_rfcomm_send_fcs
+	setarg RSP_RX_UIH_WDATA
+	store 1,mem_rfcomm_send_frame_type
+	branch ssp_tx_rfcomm_from_uart_common
+ssp_tx_rfcomm_from_uart_without_credit:
+	jam 0,mem_rfcomm_send_offset
+	fetch 1,mem_HIUfcs_SPP
+	store 1,mem_rfcomm_send_fcs
+	setarg RSP_TX_UIH
+	store 1,mem_rfcomm_send_frame_type
+ssp_tx_rfcomm_from_uart_common:
+	bpatchx patch36_3,mem_patch36
+	fetch 2,mem_current_packet_length
+	sub pdata,127,null
+	branch ssp_tx_rfcomm_from_uart_common0,positive
+	fetch 1,mem_rfcomm_send_offset
+	increase 1,pdata
+	store 1,mem_rfcomm_send_offset
+ssp_tx_rfcomm_from_uart_common0:
+	call get_rfcomm_snd_adss
+	fetch 2,mem_current_packet_length
+	increase 8,pdata	//fcs + rfcommhead + l2caphead == 8
+	fetcht 1,mem_rfcomm_send_offset
+	iadd temp,rega
+	//rfcomm payload
+	call l2cap_malloc
+	store 2,mem_rfcomm_tx_buff_ptr
+	increase 4,pdata
+	store 2,mem_rfcomm_tx_payload_ptr
+	copy pdata,contw
+	fetch 1,mem_rfcomm_send_adss
+	istore 1,contw
+	fetch 1,mem_rfcomm_send_frame_type
+	istore 1,contw
+	call ssp_tx_write_length
+	call ssp_tx_write_given_credit
+	bpatchx patch36_4,mem_patch36
+	fetch 2,mem_nl_rx_data_src		//src
+	copy pdata,contru
+	fetch 2,mem_current_packet_length
+	copy pdata,loopcnt
+	call uart_copy_rx_bytes_fast
+	copy contw,temp
+	copy contru,pdata
+	store 2,mem_nl_rx_data_src
+	copy temp,contw	
+	fetch 1,mem_rfcomm_send_fcs
+	istore 1,contw
+	fetch 2,mem_rfcomm_tx_buff_ptr
+	copy pdata,contw
+	fetch 2,mem_current_packet_length
+	fetcht 1,mem_rfcomm_send_offset
+	iadd temp,pdata
+	increase 4,pdata
+	istore 2,contw
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw
+	jam 0,mem_credit_given	//whatever mem_credit_given is set to 0
+	fetch 2,mem_nl_rx_len_all
+	beq 0,module_hci_command_tx_spp_tx_complete
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	rtn
+
+ssp_tx_write_length:
+	bpatchx patch36_5,mem_patch36
+	fetch 2,mem_current_packet_length
+	sub pdata,0x7f,null
+	nbranch ssp_tx_write_long_packet,positive
+	lshift pdata,pdata
+	set1 0,pdata
+	istore 1,contw
+	rtn
+ssp_tx_write_long_packet:
+	fetch 2,mem_current_packet_length
+	rshift3 pdata,pdata
+	rshift4 pdata,temp
+	and_into 0x7f,pdata
+	lshift pdata,pdata
+	set0 0,pdata
+	istore 1,contw
+	istoret 1,contw
+	rtn
+ssp_tx_write_given_credit:
+	fetch 1,mem_credit_given
+	rtn blank
+	istore 1,contw
+	rtn
+
+	
+
+
+scheduler_process:
+	bpatchx patch36_6,mem_patch36
+	call check_51cmd
+	call app_process_bb_event
+	call process_conn_sm
+/* check the connection state sequence byte */
+	bpatchx patch36_7,mem_patch36
+	call sp_calc_sequence
+	call simple_pairing_sequence
+	call master_simple_paring_sequence
+//return if it is hci mode. 'cause the following is host part.
+//notify BB to tx a l2cap packet
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	//for conn to MTK 
+	call l2cap_call_proc_sigal_pending
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	bpatchx patch37_0,mem_patch37
+//to generat a new l2cap packet
+	call process_upper_sm
+	call l2cap_send_config_req
+	call rfcomm_send_more_pkt//use this function to send msc_cmd after msc_rep sent
+scheduler_process0:
+	call scheduler_tx_disconnect_hid //may not used
+	bpatchx patch37_1,mem_patch37
+//	call l2cap_malloc_is_fifo_full
+//	nrtn blank
+	branch app_process_bt
+	
+scheduler_tx_disconnect_hid:
+	fetch 1,mem_CONTROL_tasks		
+	bbit1 L2CAP_DISCONNECT_INTERRUPT,L2CAP_disconnect_interrupt_req
+	bbit1 L2CAP_DISCONNECT_CONTROL,L2CAP_disconnect_control_req
+	rtn
+	
+scheduler_tx_l2cap_pkt:
+	bpatchx patch37_2,mem_patch37
+	call l2cap_malloc_is_fifo_empty
+	rtn blank //empty
+	fetch 1,mem_op
+	rtnbit1 op_txl2cap
+	call l2cap_malloc_fifo_out
+	store 2,mem_txptr
+	copy pdata,contr
+	ifetch 2,contr
+	increase 4,pdata
+	store 2,mem_tx_len
+	jam 6,mem_tx_lch//start pkt
+	bpatchx patch37_3,mem_patch37
+	fetch 2,mem_l2cap_tx_multi_offset
+	branch scheduler_tx_l2cap_start_pkt,blank
+	fetch 1,mem_op
+	rtnbit0 op_pkt_comp
+	set0 op_pkt_comp,pdata
+	store 1,mem_op
+	jam 5,mem_tx_lch//continue pkt
+	fetcht 2,mem_l2cap_tx_multi_offset
+	fetch 2,mem_txptr
+	iadd temp,pdata
+	store 2,mem_txptr
+	fetch 2,mem_tx_len
+	isub temp,pdata
+	store 2,mem_tx_len
+scheduler_tx_l2cap_start_pkt:
+	bpatchx patch37_4,mem_patch37
+	fetch 2,mem_tx_len
+	branch assert,blank
+	arg l2cap_max_pkt_len,temp //max len of dh3 pkt
+	isub temp,pdata
+	nbranch scheduler_Tx_l2cap_last_pkt,positive
+	bpatchx patch37_5,mem_patch37
+	storet 2,mem_tx_len //l2cap_max_pkt_len
+	fetch 2,mem_l2cap_tx_multi_offset
+	iadd temp,pdata
+	store 2,mem_l2cap_tx_multi_offset
+	branch scheduler_Tx_l2cap_pkt_end
+scheduler_Tx_l2cap_last_pkt:
+	setarg 0
+	store 2,mem_l2cap_tx_multi_offset
+scheduler_Tx_l2cap_pkt_end:
+	fetch 1,mem_op
+	set1 op_txl2cap,pdata
+	store 1,mem_op
+	rtn
+
+scheduler_start_upper_sm:
+	fetch 1,mem_UI_profile_supported
+	bbit1 support_HID,scheduler_start_upper_sm_hid
+	jam UPPERSM_RECONN_SDP_CONN,mem_upper_sm_reconn
+	rtn
+scheduler_start_upper_sm_hid:
+	jam UPPERSM_RECONN_HID_CTRL_CONN,mem_upper_sm_reconn
+	rtn
+	
+process_upper_sm:
+	fetch 1,memui_reconnect_mode
+	nbranch process_upper_sm_reconn,blank
+process_upper_sm_remote_page:
+	fetch 1,mem_upper_sm_remote_page
+	//beq UPPERSM_RP_IDLE,process_upper_sm_rp_idle
+	rtn blank
+	//nothing to do when remote page to create a connection.
+	jam 0,mem_upper_sm_remote_page
+process_upper_sm_rp_wait:
+	rtn
+
+
+process_upper_sm_reconn:
+	bpatchx patch37_6,mem_patch37
+	fetch 1,mem_upper_sm_reconn
+	rtn blank
+	beq UPPERSM_RECONN_SDP_CONN,process_upper_sm_reconn_sdp_conn
+	beq UPPERSM_RECONN_SDP_CONN_WAIT,process_upper_sm_reconn_sdp_conn_wait
+	beq UPPERSM_RECONN_SDP_CFG,process_upper_sm_reconn_sdp_cfg
+	beq UPPERSM_RECONN_SDP_CFG_WAIT,process_upper_sm_reconn_sdp_cfg_wait
+	beq UPPERSM_RECONN_SS_SPP,process_upper_sm_reconn_ss_spp
+	beq UPPERSM_RECONN_SS_SPP_WAIT,process_upper_sm_reconn_ss_spp_wait
+	beq UPPERSM_RECONN_SDP_DISCONN,process_upper_sm_reconn_sdp_disconn
+	beq UPPERSM_RECONN_SDP_DISCONN_WAIT,process_upper_sm_reconn_sdp_disconn_wait
+	beq UPPERSM_RECONN_HID_CTRL_CONN,process_upper_sm_reconn_hid_ctrl_conn
+	beq UPPERSM_RECONN_HID_CTRL_CONN_WAIT,process_upper_sm_reconn_hid_ctrl_conn_wait
+	beq UPPERSM_RECONN_HID_CTRL_CFG,process_upper_sm_reconn_hid_ctrl_cfg
+	beq UPPERSM_RECONN_HID_CTRL_CFG_WAIT,process_upper_sm_reconn_hid_ctrl_cfg_wait
+	beq UPPERSM_RECONN_HID_INT_CONN,process_upper_sm_reconn_hid_int_conn
+	beq UPPERSM_RECONN_HID_INT_CONN_WAIT,process_upper_sm_reconn_hid_int_conn_wait
+	beq UPPERSM_RECONN_HID_INT_CFG,process_upper_sm_reconn_hid_int_cfg
+	beq UPPERSM_RECONN_HID_INT_CFG_WAIT,process_upper_sm_reconn_hid_int_cfg_wait
+	beq UPPERSM_RECONN_RFCOMM_CONN,process_upper_sm_reconn_rfcomm_conn
+	beq UPPERSM_RECONN_RFCOMM_CONN_WAIT,process_upper_sm_reconn_rfcomm_conn_wait
+	beq UPPERSM_RECONN_RFCOMM_CFG,process_upper_sm_reconn_rfcomm_cfg
+	beq UPPERSM_RECONN_RFCOMM_CFG_WAIT,process_upper_sm_reconn_rfcomm_cfg_wait
+	beq UPPERSM_RECONN_RFCOMM_SABM,process_upper_sm_reconn_rfcomm_sabm
+	beq UPPERSM_RECONN_RFCOMM_SABM_WAIT,process_upper_sm_reconn_rfcomm_sabm_wait
+	beq UPPERSM_RECONN_SPP_CMD_PN,process_upper_sm_reconn_spp_cmd_pn
+	beq UPPERSM_RECONN_SPP_CMD_PN_WAIT,process_upper_sm_reconn_spp_cmd_pn_wait
+	beq UPPERSM_RECONN_SPP_SABM,process_upper_sm_reconn_spp_sabm
+	beq UPPERSM_RECONN_SPP_SABM_WAIT,process_upper_sm_reconn_spp_sabm_wait
+	beq UPPERSM_RECONN_SPP_CMD_MS,process_upper_sm_reconn_spp_cmd_ms
+	beq UPPERSM_RECONN_SPP_CMD_MS_WAIT,process_upper_sm_reconn_spp_cmd_ms_wait
+process_upper_sm_reconn_wait:
+	rtn
+process_upper_sm_reconn_sdp_conn:
+	call upper_sm_send_sdp_conn //return n-user if sending failed
+	jam UPPERSM_RECONN_SDP_CONN_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	store 1,mem_sdp_state
+	rtn
+process_upper_sm_reconn_sdp_cfg:
+	jam UPPERSM_RECONN_SDP_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_sdp_state
+	rtnbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ
+	jam UPPERSM_RECONN_SDP_CFG,mem_upper_sm_reconn
+	call upper_sm_send_sdp_cfg //return n-user if sending failed
+	jam UPPERSM_RECONN_SDP_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_sdp_state
+	rtn
+process_upper_sm_reconn_ss_spp:
+	call l2cap_malloc_is_fifo_empty
+	nrtn blank
+	call upper_sm_send_ss_spp
+	jam UPPERSM_RECONN_SS_SPP_WAIT,mem_upper_sm_reconn
+	rtn
+process_upper_sm_reconn_sdp_disconn:
+	call upper_sm_send_sdp_disconn
+	jam UPPERSM_RECONN_SDP_DISCONN_WAIT,mem_upper_sm_reconn
+	rtn
+process_upper_sm_reconn_hid_ctrl_conn:
+	call upper_sm_send_hid_ctrl_conn
+	jam UPPERSM_RECONN_HID_CTRL_CONN_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	store 1,mem_hid_control_state
+	rtn
+process_upper_sm_reconn_hid_ctrl_cfg:    
+	call upper_sm_send_hid_ctrl_cfg
+	jam UPPERSM_RECONN_HID_CTRL_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_hid_control_state
+	rtn
+process_upper_sm_reconn_hid_int_conn:
+	call upper_sm_send_hid_int_conn
+	jam UPPERSM_RECONN_HID_INT_CONN_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	store 1,mem_hid_interrupt_state
+	rtn
+process_upper_sm_reconn_hid_int_cfg:    
+	call upper_sm_send_hid_int_cfg
+	jam UPPERSM_RECONN_HID_INT_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_hid_interrupt_state
+	rtn
+process_upper_sm_reconn_rfcomm_conn:
+	call upper_sm_send_rfcomm_conn
+	jam UPPERSM_RECONN_RFCOMM_CONN_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	store 1,mem_rfcomm_state
+	rtn
+process_upper_sm_reconn_rfcomm_cfg: 
+	call upper_sm_send_rfcomm_cfg
+	jam UPPERSM_RECONN_RFCOMM_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_rfcomm_state
+	rtn
+process_upper_sm_reconn_rfcomm_sabm:
+	call upper_sm_send_rfcomm_sabm
+	jam UPPERSM_RECONN_RFCOMM_SABM_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_RFCOMM_ONLY_SABM,pdata
+	store 1,mem_rfcomm_state
+	rtn
+process_upper_sm_reconn_spp_cmd_pn: 
+	call upper_sm_send_spp_cmd_pn
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_PN_CMD
+	store 1,mem_spp_state
+	jam UPPERSM_RECONN_SPP_CMD_PN_WAIT,mem_upper_sm_reconn
+	rtn
+process_upper_sm_reconn_spp_sabm:   
+	call upper_sm_send_spp_sabm
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_SABM
+	store 1,mem_spp_state
+	jam UPPERSM_RECONN_SPP_SABM_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_remote_spp_channel //address in pdata
+	lshift3 pdata,pdata
+	or_into 3,pdata
+	arg mem_HIUfcs_SPP,temp // mem_HIUfcs_spp_WCredits in regB++
+	storet 2,mem_contw_temp
+	branch rfcomm_save_FCS_uih
+process_upper_sm_reconn_spp_cmd_ms: 
+	call upper_sm_send_spp_cmd_ms
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_SND_MS_CMD
+	store 1,mem_spp_state
+	jam UPPERSM_RECONN_SPP_CMD_MS_WAIT,mem_upper_sm_reconn
+	rtn
+
+process_upper_sm_reconn_sdp_conn_wait:
+	fetch 1,mem_sdp_state
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES
+	jam UPPERSM_RECONN_SDP_CFG,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_sdp_cfg_wait:
+	fetch 1,mem_sdp_state
+	rtnne L2CAP_CHANNEL_SETUP_COMPLETE
+	jam UPPERSM_RECONN_SS_SPP ,mem_upper_sm_reconn
+process_upper_sm_reconn_ss_spp_wait:
+	fetch 1,mem_message_to_uppersm
+	rtnne RECIEVE_SS_REASULT_HF
+	jam 0,mem_message_to_uppersm
+	jam UPPERSM_RECONN_SDP_DISCONN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_sdp_disconn_wait:
+	fetch 1,mem_sdp_state
+	nrtn blank
+	fetch 1,mem_UI_profile_supported
+	bbit1 support_HID,process_upper_sm_reconn_setup_hid
+	bbit1 support_SPP,process_upper_sm_reconn_setup_rfcomm
+	branch process_upper_sm_reconn_termination
+process_upper_sm_reconn_hid_ctrl_conn_wait:
+	fetch 1,mem_hid_control_state
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES
+	jam UPPERSM_RECONN_HID_CTRL_CFG,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_hid_ctrl_cfg_wait:
+	fetch 1,mem_hid_control_state
+	rtnne L2CAP_CHANNEL_SETUP_COMPLETE
+	jam UPPERSM_RECONN_HID_INT_CONN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_hid_int_conn_wait:  
+	fetch 1,mem_hid_interrupt_state
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES
+	jam UPPERSM_RECONN_HID_INT_CFG,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_hid_int_cfg_wait:  
+	fetch 1,mem_hid_interrupt_state
+	rtnne L2CAP_CHANNEL_SETUP_COMPLETE
+	fetch 1,mem_UI_profile_supported
+	bbit1 support_SPP,process_upper_sm_reconn_setup_rfcomm
+	branch process_upper_sm_reconn_termination
+process_upper_sm_reconn_rfcomm_conn_wait: 
+	fetch 1,mem_rfcomm_state
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES
+	jam UPPERSM_RECONN_RFCOMM_CFG,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_rfcomm_cfg_wait:
+	fetch 1,mem_rfcomm_state
+	rtnne L2CAP_CHANNEL_SETUP_COMPLETE
+	jam UPPERSM_RECONN_RFCOMM_SABM,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_rfcomm_sabm_wait:  
+	fetch 1,mem_rfcomm_state
+	rtnne L2CAP_CHANNEL_RFCOMM_DLCI0_OPENED
+	fetch 1,mem_UI_profile_supported
+	bbit1 support_SPP,process_upper_sm_reconn_setup_spp
+	branch process_upper_sm_reconn_termination
+process_upper_sm_reconn_spp_cmd_pn_wait:
+	fetch 1,mem_spp_state
+	rtnbit0 RFCOMM_CHANNEL_STATE_PN_RES
+	jam UPPERSM_RECONN_SPP_SABM,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_spp_sabm_wait:
+	fetch 1,mem_spp_state
+	rtnbit0 RFCOMM_CHANNEL_STATE_UA
+	jam UPPERSM_RECONN_SPP_CMD_MS ,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_spp_cmd_ms_wait: 
+	fetch 1,mem_spp_state
+	rtnne RFCOMM_CHANNEL_SETUP_COMPLETE
+	branch process_upper_sm_reconn_termination
+
+process_upper_sm_reconn_setup_hid:
+	jam UPPERSM_RECONN_HID_CTRL_CONN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+
+process_upper_sm_reconn_setup_rfcomm:
+	jam UPPERSM_RECONN_RFCOMM_CONN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_setup_spp:
+	jam UPPERSM_RECONN_SPP_CMD_PN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+
+
+
+process_upper_sm_reconn_termination:
+	jam 0,mem_upper_sm_reconn
+	rtn
+upper_sm_send_sdp_conn:
+	bpatchx patch37_7,mem_patch37
+	call l2cap_malloc_signal_channel
+	setarg PSM_SDP
+	copy pdata,temp
+	setarg L2CAP_SDP_channel
+	copy pdata,timeup
+	branch ML2CAP_send_signal_connect_req
+	
+upper_sm_send_sdp_cfg:
+	bpatchx patch38_0,mem_patch38
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_SDP_remote_CID
+	copy pdata,temp
+	branch ML2CAP_send_signal_config_req
+	
+upper_sm_send_sdp_disconn:
+	bpatchx patch38_1,mem_patch38
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_SDP_remote_CID
+	copy pdata,temp
+	arg L2CAP_SDP_channel,timeup
+	call ML2CAP_send_signal_disconn_req
+	fetch 1,mem_sdp_state
+	set0 L2CAP_CHANNEL_STATE_RCV_CFG_RES ,pdata
+	store 1,mem_sdp_state
+	rtn
+//service search
+upper_sm_send_ss_spp:
+	bpatchx patch38_2,mem_patch38
+	call l2cap_malloc_sdp_channel
+	call sdp_send_spp_request
+	branch MSDP_send_req_done
+
+upper_sm_send_rfcomm_conn:
+	bpatchx patch38_3,mem_patch38
+	call l2cap_malloc_signal_channel
+	setarg PSM_RFCOMM
+	copy pdata,temp
+	setarg L2CAP_RFCOMM_channel
+	copy pdata,timeup
+	branch ML2CAP_send_signal_connect_req
+
+upper_sm_send_rfcomm_cfg:
+	bpatchx patch38_4,mem_patch38
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_rfcomm_remote_cid
+	copy pdata,temp
+	branch ML2CAP_send_signal_config_req
+
+upper_sm_send_hid_ctrl_conn:
+	bpatchx patch38_5,mem_patch38
+	call l2cap_malloc_signal_channel
+	setarg PSM_HID_control
+	copy pdata,temp
+	setarg L2CAP_HID_Control_channel
+	copy pdata,timeup
+	branch ML2CAP_send_signal_connect_req
+
+upper_sm_send_hid_ctrl_cfg:
+	bpatchx patch38_6,mem_patch38
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_hid_ctrl_remote_cid
+	copy pdata,temp
+	branch ML2CAP_send_signal_config_req
+
+upper_sm_send_hid_int_conn:
+	bpatchx patch38_7,mem_patch38
+	call l2cap_malloc_signal_channel
+	setarg PSM_HID_interrupt
+	copy pdata,temp
+	setarg L2CAP_HID_interrupt_channel
+	copy pdata,timeup
+	branch ML2CAP_send_signal_connect_req
+	
+upper_sm_send_hid_int_cfg:
+	bpatchx patch39_0,mem_patch39
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_hid_int_remote_cid
+	copy pdata,temp
+	branch ML2CAP_send_signal_config_req
+
+upper_sm_send_rfcomm_sabm:
+	bpatchx patch39_1,mem_patch39
+	call l2cap_malloc_rfcomm_channel
+	//force 3,temp //address
+	jam 3,mem_current_adss
+	jam 0x1c,mem_current_fcs
+	call rfcomm_send_sabm
+	jam 1,mem_rfcomm_initiator
+	rtn
+
+upper_sm_send_spp_cmd_pn:
+	bpatchx patch39_2,mem_patch39
+	call l2cap_malloc_rfcomm_channel
+	fetcht 1,mem_remote_spp_channel
+	call channel_to_dlci
+	storet 1,mem_pn_dlci
+	branch rfcomm_send_param_neg_cmd
+
+upper_sm_send_spp_sabm:
+	bpatchx patch39_3,mem_patch39
+	call l2cap_malloc_rfcomm_channel
+	fetcht 1,mem_pn_dlci
+	call dlci_to_address_cmd
+	call rfcomm_calculate_FCS_sabm //sabm fcs use once only,not need to save
+	store 1,mem_current_fcs
+	fetcht 1,mem_pn_dlci
+	call dlci_to_address_cmd
+	storet 1,mem_current_adss
+	branch rfcomm_send_sabm
+
+upper_sm_send_spp_cmd_ms:
+	bpatchx patch39_4,mem_patch39
+	call l2cap_malloc_rfcomm_channel
+	fetcht 1,mem_pn_dlci
+	call dlci_to_address_cmd //address in temp
+	branch rfcomm_send_modem_status_cmd
+
+
+
+/**********************************************************************/
+/* Subroutine: sdp_process                                         */
+/* Process Service Discovery Request                                  */
+/* Called from L2CAP, check PDUID, branch to different req processings*/
+/*                                                                    */  
+/* Input:       mem_L2CAP_Rx_payload                                  */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length	      */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process:
+	bpatchx patch39_5,mem_patch39
+	fetch 2,mem_l2cap_payload_ptr
+	iforce contr
+//	ifetchr regb,1,contr				/* PDUID */
+//	storer regb,1,mem_sdp_pduid
+	ifetch 1,contr
+	copy pdata,regb
+	store 1,mem_sdp_pduid
+	ifetch 2,contr
+	store 2,mem_sdp_transactionid			/* save transaction id */
+	ifetch 1,contr				/* higher byte of parameter length */
+	lshift8 pdata,timeup				
+	ifetch 1,contr				/* lower byte of parameter length */
+	iadd timeup,timeup				/* parameter length stored in "timeup" */
+	bpatchx patch39_6,mem_patch39
+	copy contr,temp
+	arg 4,loopcnt
+	arg mem_sdp_handle_list,contw
+	call memset0
+	copy temp,contr 
+	deposit regb						/* PDUID  */
+	beq SDP_ERROR_RES,sdp_process_error_res
+	beq SDP_SEARCH_REQ,sdp_process_ss_req
+	beq SDP_SEARCH_RES,sdp_process_ss_res
+	beq SDP_ATTRIBUTE_REQ,sdp_process_sa_req
+	beq SDP_ATTRIBUTE_RES,sdp_process_sa_res
+	beq SDP_SEARCHATTRIB_REQ,sdp_process_ssa_req
+	beq SDP_SEARCHATTRIB_RES,sdp_process_ssa_res
+	branch sdp_insufficient_resource
+
+/**********************************************************************/
+/* ss_req			                              */
+/* Processing Service Search Request                                  */
+/* Call: ask_serviceclassid, empty_response                     */
+/*                                                                    */  
+/* Input:       mem_L2CAP_Rx_payload pointer in contr                 */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length	      */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process_ss_req:
+	bpatchx patch39_7,mem_patch39
+	call ask_serviceclassid
+	compare 1,temp,0xff
+	branch ss_empty_rsp,true
+	compare 0xff,temp,0xff
+	branch sdp_invalid_request_syntax,true
+
+	ifetch 2,contr				/* max aservice record count */
+	store 2,mem_sdp_record_maxcnt
+	increase -2,timeup
+
+	increase -1,timeup				/* continuation state 1 byte (0) */
+	nbranch sdp_invalid_pdu_size,zero		/* invalid pdu size */
+	arg mem_sdp_uuid_search_ptr,timeup
+	ifetch 2,timeup
+	rtn blank
+	call search_all_uuid
+	call l2cap_get_sdp_tx_payload			/* put the pointer to Tx buffer  */
+	force 3,pdata						/* PDUID 3, Service Search Response */
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid			/* write transaction id */
+	istore 2,contw
+	lshift2 queue,pdata
+	add pdata,5,pdata
+	add pdata,5,regc
+	byteswap pdata,pdata
+	istore 2,contw							/* write parLength */
+	deposit queue
+	byteswap pdata,pdata
+	istore 2,contw							/* write TotSrvRecCount */
+	istore 2,contw							/* write CurSrvRecCount */
+	arg mem_sdp_handle_list,contr
+	copy queue,loopcnt
+	branch ss_req_blank,zero
+ss_req_loop:	
+	ifetch 4,contr
+	istore 4,contw
+	loop ss_req_loop
+ss_req_blank:	
+	force 0,pdata
+	istore 1,contw							/* continuation state */
+	deposit regc
+	store 2,mem_sdp_tx_pkt_length
+//	branch assert,blank
+	rtn
+
+/**********************************************************************/
+/* sa_req			                              */
+/* Processing Service Attribute Request                               */
+/* Call: ask_attributeid, empty_response (if 3 stored attr.     */
+/* not asked) or answer_attributelist                              */  
+/* Input:       mem_L2CAP_Rx_payload pointer in contr                 */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length	      */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process_sa_req:
+	bpatchx patch3a_0,mem_patch3a
+	ifetch 4,contr				/* service record handle */
+	store 4,mem_sdp_record_handle	 
+	increase -4,timeup
+	call sdp_store_maxbyte
+	store 2,mem_sdp_attribute_maxbyte
+	increase -2,timeup
+	call dataelementtype6		/* result: data size stored in rega */
+	branch sdp_invalid_request_syntax,zero
+	compare 5,rega,0xff  // length
+	//branch sa_req_all,true
+	branch sa_judge_wholerange,true
+sa_isnot_wholerange:
+	arg mem_sdp_attrib_list,contw
+	force 0,queue
+	branch sa_req_loop
+sa_judge_wholerange:
+	ifetch 1,contr
+	bne SDP_ATTRIBUTE_RANGE,sdp_invalid_request_syntax
+	ifetch 2,contr
+	nbranch sa_judge_wholerange_false1,blank
+	ifetch 1,contr
+	bne 0xff,sa_judge_wholerange_false2
+	ifetch 1,contr
+	bne 0xff,sa_judge_wholerange_false3		//also exist potential bug because mem_sdp_attrib_list length is only 7f
+	branch sa_req_all
+sa_judge_wholerange_false3:
+	increase -5,contr
+	branch sa_isnot_wholerange
+sa_judge_wholerange_false2:
+	increase -4,contr
+	branch sa_isnot_wholerange
+sa_judge_wholerange_false1:
+	increase -3,contr
+	branch sa_isnot_wholerange
+sa_req_loop:	
+	ifetch 1,contr
+	beq SDP_ATTRIBUTE_ID, sa_req_one_id
+	beq SDP_ATTRIBUTE_RANGE, sa_req_range
+sa_req_range:
+	ifetch 2, contr
+	istore 2, contw
+	increase 1,queue
+	byteswap pdata,regb
+	ifetch 2, contr
+	byteswap pdata,pdata
+sa_req_range_id_increase:	
+	increase 1, regb
+	isub regb, null
+	nbranch sa_req_range_id_finish,positive
+	copy pdata, regc
+	byteswap regb,pdata
+	istore 2, contw
+	increase 1,queue
+	copy regc, pdata
+	branch sa_req_range_id_increase
+sa_req_range_id_finish:
+	increase -5,timeup
+	increase -5,rega
+	branch sa_req_check_next_id
+sa_req_one_id:
+	ifetch 2,contr
+	istore 2,contw //save the attribute id in mem_sdp_attrib_list
+	increase 1,queue
+	increase -3,timeup
+	increase -3,rega
+sa_req_check_next_id:	
+	nbranch sdp_invalid_request_syntax,positive
+	nbranch sa_req_loop,zero //another attribute 
+	increase -1,timeup
+	nbranch sdp_invalid_request_syntax,zero
+	
+	call l2cap_get_sdp_tx_payload
+	increase 10,contw
+	arg mem_sdp_attrib_list,rega
+sa_req_handle_attributelist_next:
+	copy queue,pdata
+	branch sa_req_handle_attributelist_end,blank
+	ifetch 2,rega
+	branch sa_req_handle_attributelist_end,blank
+	iforce regb /* regb is the attribute ID */
+	fetch 4,mem_sdp_record_handle	
+	iforce temp
+	call search_handle_attrib
+	copy contr,pdata
+	branch sa_req_handle_attributelist_notfound,blank
+	increase -3,contr
+	ifetch 3,contr
+	istore 3,contw
+	call sdp_data_len
+	iforce loopcnt	
+	call memcpy
+sa_req_handle_attributelist_notfound:
+	increase 2,rega
+	increase -1, queue
+	branch sa_req_handle_attributelist_next
+
+sa_req_handle_attributelist_end:	
+	arg SDP_ATTRIBUTE_RES,rega
+	call ssa_req_range_lastfreg_common
+	fetch 2,mem_sdp_tx_pkt_length	
+	beq 11,sa_empty_rsp
+	branch  ssa_req_range_attrbutes_length_no_continue
+
+
+sdp_store_continue_common:
+	ifetch 1, contr
+	beq 0, sdp_store_continue_0byte
+	beq 1,sdp_store_continue_1byte
+	beq 2, sdp_store_continue_2byte
+sdp_store_continue_0byte:	
+	increase -1,timeup				/* continuation state byte (0) */
+	branch sdp_store_continue_end
+sdp_store_continue_1byte:
+	ifetch 1, contr
+	increase -2,timeup				/* continuation state byte (1) */
+	branch sdp_store_continue_end
+sdp_store_continue_2byte:
+	ifetch 2, contr
+	byteswap pdata,pdata
+	increase -3,timeup				/* continuation state byte (2) */
+sdp_store_continue_end:
+	store 2, mem_sdp_continue_byte	
+	rtn
+	
+sa_req_all:	
+	increase -5,timeup
+	call sdp_store_continue_common
+	nbranch sdp_invalid_pdu_size,zero
+	fetcht 4,mem_sdp_record_handle		
+	call search_handle
+	nbranch sdp_invalid_service_record_handle,zero
+	copy contr,rega
+	call l2cap_get_sdp_tx_payload
+	copy rega,contr
+	increase 3,contw//arg mem_SDP_Tx_payload+3,contw
+	copy contr,timeup //sdp start pointer
+	call sdp_get_data
+	copy pdata, rega //sdp total length
+//	fetchr regb,2,mem_sdp_continue_byte
+	fetch 2,mem_sdp_continue_byte
+	copy pdata,regb
+	copy rega,pdata
+	isub regb,regb //total_length - continue_byte in regb
+	fetch 2, mem_sdp_attribute_maxbyte
+	isub regb, null
+	nbranch sa_req_all_fragment_sdp, positive
+	// the last fragment
+	disable user
+	fetch 2, mem_sdp_continue_byte
+	branch sa_req_all_fisrt_fragment,blank
+	iadd timeup, contr //set the read pointer
+	increase 3,regb //include the total length field, 3 bytes
+	copy regb, loopcnt
+	copy loopcnt, pdata
+	increase 3, pdata
+	byteswap pdata,pdata
+	istore 2, contw
+	copy loopcnt, pdata
+	byteswap pdata,pdata
+	istore 2, contw
+	branch sa_req_all_answer_attributelist_full_loop
+sa_req_all_fisrt_fragment:
+	add rega,6,loopcnt
+	branch sa_req_all_parlength_continue_byte, user
+	byteswap loopcnt,pdata
+	branch sa_req_all_parlength_continue_byte_end
+sa_req_all_parlength_continue_byte:
+	copy loopcnt, pdata
+	increase 2, pdata
+	byteswap pdata,pdata
+sa_req_all_parlength_continue_byte_end:
+	istore 2,contw				/* ParLength */
+	increase -3,loopcnt
+	byteswap loopcnt,pdata			
+	istore 2,contw				/* AttrListByteCount */
+	copy timeup,contr
+	branch sa_req_all_answer_attributelist_full_loop
+sa_req_all_fragment_sdp:
+	enable user
+//	fetchr rega,2,mem_sdp_attribute_maxbyte
+	fetch 2,mem_sdp_attribute_maxbyte
+	copy pdata,rega
+	copy rega,loopcnt
+	fetch 2, mem_sdp_continue_byte
+	branch sa_req_all_fisrt_fragment,blank
+	iadd timeup, contr
+	copy rega,pdata
+	increase 5,pdata
+	byteswap pdata,pdata	
+	istore 2, contw
+	copy rega,pdata
+	byteswap pdata,pdata
+	istore 2, contw
+sa_req_all_answer_attributelist_full_loop:
+	call memcpy
+	nbranch sa_req_all_last_frag_continue, user
+	force 2,pdata
+	istore 1,contw
+	copy contr, pdata
+	isub timeup, pdata
+	byteswap pdata,pdata
+	istore 2, contw   // continuation length
+	branch sa_req_all_frag_end
+sa_req_all_last_frag_continue:
+	force 0,pdata
+	istore 1,contw
+sa_req_all_frag_end:	
+	arg SDP_ATTRIBUTE_RES,rega
+	branch ssa_req_range_common	
+	
+/**********************************************************************/
+/* ssa_req                          		      */
+/* Processing Service Search Attribute Request                        */
+/* Call: ask_serviceclassid, ask_attributeid, empty_response */
+/*       or answer_attributelist                                   */  
+/* Input:       contr                                                 */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length             */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process_ssa_req:
+	bpatchx patch3a_1,mem_patch3a
+	call ask_serviceclassid
+	compare 0xff,temp,0xff
+	branch sdp_invalid_request_syntax,true
+	call sdp_store_maxbyte
+	store 2,mem_sdp_attribute_maxbyte
+	increase -2,timeup
+	call dataelementtype6
+	arg mem_sdp_attrib_list,contw
+	force 0,queue
+ssa_req_loop:	
+	ifetch 1,contr 
+	beq SDP_ATTRIBUTE_RANGE,ssa_req_range
+	ifetch 2,contr 
+	istore 2,contw //save the attribute id in mem_sdp_attrib_list
+	increase 1,queue
+	increase -3,timeup
+	increase -3,rega
+	nbranch sdp_invalid_request_syntax,positive
+	nbranch ssa_req_loop,zero
+	increase -1,timeup
+	nbranch sdp_invalid_request_syntax,zero
+	call l2cap_get_sdp_tx_payload
+	increase 13,contw//arg mem_SDP_Tx_payload+13,contw
+	fetch 2,mem_sdp_uuid_search_ptr
+	iforce regc
+	arg mem_sdp_attrib_list,rega
+ssa_req_attributelist_next:	
+	ifetch 2,rega
+	branch ssa_req_attributelist_end,blank
+	iforce regb						/* regb is the attribute ID */
+	call search_attrib
+	branch ssa_req_attributelist_notfound,blank
+	increase -3,contr
+	ifetch 3,contr
+	istore 3,contw
+	call sdp_data_len
+	iforce loopcnt	
+  	call memcpy
+ssa_req_attributelist_notfound:
+	increase 2,rega
+	branch ssa_req_attributelist_next
+
+ssa_req_attributelist_end:
+	call ssa_req_range_lastfreg
+	fetch 2,mem_sdp_tx_pkt_length	
+	beq 14,ssa_empty_rsp
+	call ssa_req_range_attrbutes_length_no_continue
+	branch ssa_req_range_attrbutes_length_no_continue
+
+
+sdp_store_maxbyte:	
+	ifetch 2,contr				 
+	byteswap pdata,pdata
+	increase -3,pdata	
+	arg 200,temp
+	isub temp,null
+	nrtn positive
+	setarg 200
+	rtn
+	
+
+ssa_req_range:
+	increase 4,contr
+	increase -5,timeup
+	increase -5,rega
+	nbranch sdp_invalid_request_syntax,zero
+	call 	sdp_store_continue_common
+	nbranch sdp_invalid_pdu_size,zero
+	arg mem_sdp_uuid_search_ptr,timeup
+	call search_all_uuid  
+	deposit queue
+	branch ssa_empty_rsp,blank
+	store 1,mem_handle_humber
+//	storer regb,2,mem_sdp_all_length
+	copy regb,pdata
+	store 2,mem_sdp_all_length
+	arg 0,queue
+	arg 0,rega
+	call l2cap_get_sdp_tx_payload
+	increase 10,contw 
+ssa_req_range_find_handle:
+	call ssa_req_range_get_length	
+	nbranch assert,user
+	copy contr,timeup
+	copy pdata,regc
+	iadd rega,rega
+//	copy pdata,rega 
+//	fetch 2,mem_sdp_all_length
+	fetch 2,mem_sdp_continue_byte
+	copy pdata,regb
+	branch ssa_req_range_first_freg,blank
+ssa_req_range_later_freg_with_continue:
+	copy rega,pdata
+	isub regb,regb //total_length - continue_byte in rega
+	branch ssa_req_range_next_handle,zero
+	nbranch ssa_req_range_next_handle,positive
+	fetch 2, mem_sdp_attribute_maxbyte
+	isub regb, null
+	branch ssa_req_range_maxbyte_with_continue,zero
+	nbranch ssa_req_range_maxbyte_with_continue, positive  
+	
+ // data length < =maxbyte 
+ssa_req_range_send_not_maxbyte:
+ 	copy regb,loopcnt
+	call ssa_req_range_maxbyte_with_continue_cpy
+ 	fetch 1,mem_handle_humber
+	increase 1,queue
+	isub queue,null
+	branch ssa_req_range_lastfreg,zero
+	branch ssa_req_range_freg_with_continue
+	
+ssa_req_range_maxbyte_with_continue:
+ 	copy pdata,loopcnt
+ 	call ssa_req_range_maxbyte_with_continue_cpy
+ 	branch ssa_req_range_freg_with_continue
+ 	
+ssa_req_range_maxbyte_with_continue_cpy:
+	increase -3,contw   
+	copy loopcnt,temp
+ 	copy regc,pdata
+	isub regb,pdata
+	iadd timeup,contr
+ 	branch memcpy
+
+ssa_req_range_next_handle:
+	fetch 1,mem_handle_humber
+	increase 1,queue
+	isub queue,null
+	rtn zero //
+	branch ssa_req_range_find_handle
+
+ssa_req_range_get_length:	
+	call disable_user
+	arg mem_sdp_handle_list,contr
+	lshift2 queue,pdata
+	iadd contr,contr
+	ifetcht 4, contr
+	call search_handle
+	nrtn zero
+	call sdp_data_len
+	branch enable_user
+
+ssa_req_range_first_freg:
+	fetch 2, mem_sdp_attribute_maxbyte
+	isub rega, null
+	nbranch ssa_req_range_firstfreg_maxbyte_with_continue,positive
+	copy rega,loopcnt
+	copy loopcnt,temp
+	copy timeup,contr
+	call memcpy
+	fetch 2,mem_sdp_all_length
+	isub rega,null
+	branch ssa_req_range_freg_no_continue,zero
+ssa_req_range_firstfreg_not_maxbyte_with_continue:
+	call ssa_req_range_freg_with_continue
+	branch ssa_req_range_attrbutes_length
+	
+ssa_req_range_freg_no_continue:
+	call ssa_req_range_lastfreg
+	branch ssa_req_range_attrbutes_length
+	
+ssa_req_range_lastfreg:
+	arg SDP_SEARCHATTRIB_RES,rega  //PUD ID
+ssa_req_range_lastfreg_common:
+	force 0,pdata
+	istore 1,contw
+	call ssa_req_range_common
+	fetcht 2,mem_sdp_tx_pkt_length
+	increase -5,temp
+	byteswap temp,pdata
+	istore 2, contw
+	increase -3,temp
+	byteswap temp,pdata
+	istore 2, contw  //attribute length
+	rtn
+
+ssa_req_range_firstfreg_maxbyte_with_continue:
+	copy pdata,loopcnt
+	copy loopcnt,temp
+	copy timeup,contr
+	call memcpy
+	call ssa_req_range_freg_with_continue
+ssa_req_range_attrbutes_length:	
+	setarg 0x36
+	istore 1,contw
+	fetch 2,mem_sdp_all_length
+	byteswap pdata,pdata
+	istore 2, contw 
+	rtn	
+
+ssa_req_range_attrbutes_length_no_continue:	
+	setarg 0x36
+	istore 1,contw
+	increase -3,temp
+	byteswap temp,pdata
+	istore 2, contw 
+	rtn	
+
+ssa_req_range_freg_with_continue:
+	arg SDP_SEARCHATTRIB_RES,rega  //PUD ID
+	setarg 2
+	istore 1,contw	
+	fetch 2,mem_sdp_continue_byte
+	iadd temp,temp
+	byteswap temp,pdata
+	istore 2,contw
+	call ssa_req_range_common
+	fetcht 2,mem_sdp_tx_pkt_length
+	increase -5,temp
+	byteswap temp,pdata
+	istore 2, contw
+	increase -5,temp
+	byteswap temp,pdata
+	istore 2, contw 
+	rtn	
+
+ssa_req_range_common:
+	fetch 2,mem_sdp_tx_payload_ptr
+	isub contw,pdata
+	sub pdata,0,pdata
+	store 2,mem_sdp_tx_pkt_length
+	call l2cap_get_sdp_tx_payload 
+	copy rega,pdata  //PUD ID
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid
+	istore 2,contw
+	rtn
+
+
+
+
+/**********************************************************************/
+/* ssa_res			                      */
+/* Processing Service Search Attribute Response                       */
+/* Call: dataelementtype6, attribute_reading                    */
+/* Input:       contr                                                 */
+/* Output:      mem_sdp_record_handle,mem_sdp_search_failed           */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process_ssa_res:
+sdp_process_ss_res:
+sdp_process_sa_res:
+sdp_process_error_res:
+	rtn
+/*
+sdp_process_ss_res:
+	bpatchx patch3a_2,mem_patch3a
+	ifetch 2,contr
+	ifetch 2,contr
+	byteswap pdata,pdata
+	bne 1,assert
+	ifetch 4,contr
+	store 4,mem_sdp_record_handle
+	fetchr regc,2,mem_sdp_l2capch_ptr
+	add regc,offset_lc_state,regc
+	ifetch 1,regc
+	set1 L2CAP_CHANNEL_STATE_RECV_SEARCH_RES,pdata
+	istore 1,regc
+	rtn
+	
+sdp_process_sa_res:
+	bpatchx patch3a_3,mem_patch3a
+	fetchr regc,2,mem_sdp_l2capch_ptr
+	add regc,offset_lc_state,regc
+	ifetch 1,regc
+	set1 L2CAP_CHANNEL_STATE_RECV_ATTRIB_RES,pdata
+	istore 1,regc
+	copy temp,contr
+	ifetch 2,contr
+	call search_rfcomm_cn
+	store 1,mem_profile_channel	
+	rtn
+*/
+
+				    
+
+sdp_invalid_service_record_handle:		
+	setarg 0x0200
+	store 2,mem_sdp_error_code
+	branch sdp_error_response
+sdp_invalid_pdu_size:				
+	setarg 0x0400
+	store 2,mem_sdp_error_code
+	branch sdp_error_response
+sdp_insufficient_resource:			
+	setarg 0x0600
+	store 2,mem_sdp_error_code
+	branch sdp_error_response
+sdp_invalid_request_syntax:			
+	setarg 0x0300
+	store 2,mem_sdp_error_code
+sdp_error_response:	
+	call l2cap_get_sdp_tx_payload
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid			
+	istore 2,contw
+	setarg 0x0200					
+	istore 2,contw
+	fetch 2,mem_sdp_error_code			
+	istore 2,contw
+	jam  7,mem_sdp_tx_pkt_length
+	rtn
+
+
+//store uuid in mem_sdp_uuid_search_ptr,
+//return temp 0xff if wrong 
+ask_serviceclassid:  
+	arg 0,regb
+	force 0,temp					/* use "temp" to mark syntax error or to mark 128 bit uuid */
+	arg mem_sdp_uuid_search_ptr,contw
+	call dataelementtype6
+	branch asksrv_error,zero
+classidloop:
+	increase 1,regb
+	ifetch 1,contr
+	increase -1,rega
+	increase -1,timeup
+	compare 0x18,pdata,0xf8			/* 5 MSB: b00011: uuid */
+	nbranch asksrv_error,true
+	compare 0x04,pdata,0x07			/* 3 LSB: b100 128 bits uuid */
+	nbranch cmp032,true
+	force 1,temp					/* mark it as 128 bit uuid */
+skip2bytes:
+	ifetch 1,contr
+	increase -1,rega	
+	increase -1,timeup
+	bne 0x00, frstbwrong
+	ifetch 1,contr
+	increase -1,rega	
+	increase -1,timeup
+	beq 0x00, cmpuuid
+	branch scndbwrong
+frstbwrong:  
+	increase 1,contr
+	increase -1,rega	
+	increase -1,timeup
+scndbwrong:  
+	increase 2,contr				/* skip 2 bytes, first 2 bytes already wrong */
+	increase -2,rega	
+	increase -2,timeup
+	compare 0x00,temp,0xff                        /* 128 bits or 32 bits ? */
+	branch loopornot,true
+	increase 12,contr				/* skip 12 bytes, first 2 bytes already wrong */
+	increase -12,rega	
+	increase -12,timeup
+	branch loopornot
+cmp032:
+	compare 0x02,pdata,0x07			/* 3 LSB: b010 32 bits uuid */
+	nbranch cmp016,true
+	branch skip2bytes			
+cmp016:
+	compare 0x01,pdata,0x07			/* 3 LSB: b001 16 bit uuid */
+	nbranch asksrv_error,true
+cmpuuid:
+	increase -2,rega
+	increase -2,timeup
+	ifetch 2,contr				/* higher order byte */
+	sub regb,4,null
+	branch uuidsize,zero //max store uuids =3 
+	istore 2,contw
+uuidsize:
+	compare 0x00,temp,0xff			/* is this 128 bits uuid */
+	branch loopornot,true
+	copy contr,temp
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x10, wrong12b
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x80, wrong12b
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x80, wrong12b
+	ifetch 1,contr
+	bne 0x5f, wrong12b
+	ifetch 1,contr
+	bne 0x9b, wrong12b
+	ifetch 1,contr
+	bne 0x34, wrong12b
+	ifetch 1,contr
+	beq 0xfb, chck12dn
+wrong12b:
+	copy temp,contr  
+wrong12b1:
+	increase 12,contr				/* skip 12 bytes */
+	force 0x00,queue
+	force 0x00,temp
+	branch chck12dn
+
+chck12dn:
+	increase -12,timeup
+	increase -12,rega
+loopornot:
+	force 0x00,temp
+	compare 0x00,rega,0xff
+	nbranch classidloop,true
+	force 0,pdata
+	istore 2,contw			/* end list with null */
+	rtn
+asksrv_error:
+	arg 0xff,temp
+	rtn
+
+/**********************************************************************/
+/* Subroutine: dataelementtype6                                    */
+/* Parse Data Element Sequence, obtain the data size                  */
+/* Input:  SDP Rx Buf Pointer in contr, parameter count in timeup     */
+/* Output: data length in rega, data pointer in contr             */
+/*         and  parameter count in timeup, return with zero flag set: */
+/*         syntax error                                               */
+/**********************************************************************/     
+dataelementtype6:
+	bpatchx patch3a_4,mem_patch3a
+	ifetch 1,contr
+	increase -1,timeup
+	compare 0x30,pdata,0xf8			/* 5 MSB: b00110: type 6 */
+	nbranch dsize_error,true
+	compare 0x07,pdata,0x07			/* 3 LSB: b111: 32 bits */
+	branch dsize32,true
+	compare 0x06,pdata,0x07			/* 3 LSB: b110: 16 bits */
+	branch dsize16,true
+	compare 0x05,pdata,0x07			/* 3 LSB: b101: 8 bits */
+	nbranch dsize_error,true
+//	ifetchr rega,1,contr				/* data length in reg A */
+	ifetch 1,contr
+	copy pdata,rega
+	increase -1,timeup
+	branch dsize
+dsize32:
+	increase 2,contr				 
+	increase -2,timeup
+dsize16:
+	ifetch 2,contr
+	byteswap pdata,rega
+	increase -2,timeup
+dsize:
+	force 0x01,pdata
+	rtn
+dsize_error:
+	force 0x00,pdata
+	rtn
+
+/**********************************************************************/
+/* Subroutine: sa_empty_rsp                                      */
+/* Send empty response                                                */
+/*                                                                    */
+/* Input:       mem_sdp_pduid, mem_sdp_transactionid                  */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length             */
+/*                                                                    */
+/**********************************************************************/     
+ss_empty_rsp:
+	setarg SDP_SEARCH_RES
+	store 1, mem_sdp_pduid
+	branch empty_response
+sa_empty_rsp:
+	setarg SDP_ATTRIBUTE_RES
+	store 1, mem_sdp_pduid
+	branch empty_response
+ssa_empty_rsp:
+	setarg SDP_SEARCHATTRIB_RES
+	store 1, mem_sdp_pduid
+empty_response:
+	call l2cap_get_sdp_tx_payload			/* empty attribute list */
+//	fetchr regb,1,mem_sdp_pduid				/* PDUID */
+//	istorer regb,1,contw
+	fetch 1,mem_sdp_pduid
+	copy pdata,regb
+	istore 1,contw 
+	fetch 2,mem_sdp_transactionid			/* copy back transaction id */
+	istore 2,contw
+	setarg 0x0500
+	istore 2, contw
+	compare SDP_ATTRIBUTE_RES,regb,0xff			 
+	branch fullsearch,true
+	compare SDP_SEARCHATTRIB_RES,regb,0xff			 
+	branch fullsearch,true
+	setarg 0x000000
+	istore 5,contw
+	branch outempty
+
+fullsearch:					/* pduid must be 5 or 7 */
+	setarg 0x350200
+	istore 5,contw
+outempty:
+	jam 10,mem_sdp_tx_pkt_length
+	rtn
+
+//return length in pdata(whole element ,include header and data ), contr not change
+sdp_data_len:
+	call store_contw
+	call store_contr
+	call sdp_get_data
+	call get_contw
+	call get_contr
+	copy temp,pdata
+	rtn
+
+//return data length in pdata, contr is data pionter,return length in temp(whole element ,include header and data )
+sdp_get_data:
+	ifetch 1,contr
+	and pdata,0x7,loopcnt
+	rshift3 pdata,pdata
+	bne 0,sdp_get_data_type_not0
+sdp_get_data_type0:	
+	force 1,pdata
+	force 1,temp
+	rtn
+	
+sdp_get_data_type_not0_sizeindex01234:
+	call left_shift_n
+	add pdata,1,temp  //add header length
+	rtn
+sdp_get_data_type_not0:
+	deposit loopcnt
+	sub pdata,4,null
+	branch sdp_get_data_type_not0_sizeindex01234,positive
+	beq 5,sdp_get_data_type_not0_sizeindex5
+	beq 6,sdp_get_data_type_not0_sizeindex6
+	beq 7,sdp_get_data_type_not0_sizeindex7
+	rtn
+	
+sdp_get_data_type_not0_sizeindex5:
+	ifetch 1,contr
+	add pdata,2,temp  //add header length
+	rtn
+sdp_get_data_type_not0_sizeindex6:
+	ifetch 2,contr
+	byteswap pdata,pdata
+	add pdata,3,temp  //add header length
+	rtn
+sdp_get_data_type_not0_sizeindex7:
+	ifetch 2,contr	
+	byteswap pdata,pdata
+	ifetcht 2,contr	
+	byteswap temp,temp
+	lshift16 temp,temp
+	iadd temp,pdata
+	add pdata,5,temp  //add header length
+	rtn
+
+/* find with uuids
+input uuids pionter in timeup
+return handles in mem_sdp_handle_list; handles number in queue if found 
+return regb all length*/
+search_all_uuid:
+	bpatchx patch3a_5,mem_patch3a
+	force 0,queue
+	arg 0,regb
+	arg mem_sdp_handle_list,contw
+search_all_uuid_llop:
+	ifetch 2,timeup
+ 	rtn blank
+	call search_uuid
+	copy queue,pdata
+	rtneq SDP_MAX_HANDLE_NUMBER 
+	increase 2,timeup
+ 	branch search_all_uuid_llop
+	
+search_uuid:
+//	arg 0,regb
+	iforce regc
+//	force 0,queue
+	fetch 2, mem_ui_uuid_table
+	iforce contr
+search_uuid_next:
+	copy queue,pdata
+	rtneq SDP_MAX_HANDLE_NUMBER   
+	disable user
+	ifetch 1,contr
+	rtn blank
+	iforce loopcnt
+search_uuid_loop:	
+	ifetch 2,contr
+	isub regc,null
+	nbranch search_uuid_not_found,zero
+	enable user					// uuid match
+search_uuid_not_found:
+	loop search_uuid_loop
+	ifetcht 4,contr					// get handle 
+	copy contr,rega
+	nbranch search_uuid_nomatch,user
+	arg mem_sdp_handle_list,contr
+	arg SDP_MAX_HANDLE_NUMBER,loopcnt 
+search_uuid_check_same_handle:
+	ifetch 4,contr
+	branch search_uuid_store_handle,blank
+	isub temp,null
+	branch search_uuid_nomatch,zero
+	loop search_uuid_check_same_handle
+	rtn 
+search_uuid_store_handle:
+	istoret 4,contw
+	increase 1,queue
+	copy rega,contr
+	call sdp_data_len
+	iadd regb,regb
+	iadd contr,contr		 
+	branch search_uuid_next
+search_uuid_nomatch:	
+	copy rega,contr
+	call sdp_get_data
+	iadd contr,contr			// next paragraph 
+	branch search_uuid_next
+
+/* temp is handle,
+return zero  if found
+return data pointer in contr 
+*/
+search_handle:
+	bpatchx patch3a_6,mem_patch3a
+	fetch 2,mem_ui_uuid_table
+	iforce contr
+search_handle_loop:	
+	ifetch 1,contr
+	branch disable_zero,blank
+	lshift pdata,pdata
+	iadd contr,contr
+	ifetch 4,contr
+	isub temp,null
+	rtn zero
+	deposit contw
+	store 2,mem_contw
+	storet 8,mem_temp
+	call sdp_get_data
+	iadd contr,contr
+	copy contr,pdata
+	fetcht 2,mem_contw
+	copy temp,contw
+	fetcht 8,mem_temp
+	copy pdata,contr
+	branch search_handle_loop
+
+/**
+* input regb and regc.regb is the attribute ID and regc is UUID.
+* set contr if find attribute or 0 if not
+*/
+search_attrib:
+	bpatchx patch3a_7,mem_patch3a
+	fetch 2,mem_ui_uuid_table
+	iforce contr
+search_attrib_next:
+	ifetch 1,contr
+	branch search_attrib_end, blank
+	iforce loopcnt
+search_attrib_loop:	
+	ifetch 2,contr
+	isub regc,null						/* regc is UUID, compare it */
+	branch search_attrib_found_uuid,zero
+	loop search_attrib_loop
+	increase 4,contr
+	call sdp_get_data
+	iadd contr,contr			/* next paragraph */
+	branch search_attrib_next	
+search_attrib_found_uuid:
+	increase -1,loopcnt
+	lshift loopcnt,pdata
+	iadd contr,contr
+	increase 4,contr
+	call sdp_get_data
+	iadd contr,timeup					/* attribute list end */
+search_attrib_loop_attribs:	
+	increase 1,contr
+	ifetch 2,contr
+	isub regb,null
+	//force 0x1,pdata,zero
+//	setflag zero, 0,pdata
+//	copy timeup, timeup
+	branch disable_blank,zero			/* attribute found */
+	call sdp_data_len
+	iadd contr,contr
+	deposit timeup
+	isub contr,null
+	branch search_attrib_end, zero /*attribute end, not found the attribute, return contr = 0*/
+	branch search_attrib_loop_attribs	
+search_attrib_end:
+	force 0,contr
+	force 0,pdata
+	rtn
+	
+
+//search the attribute according the record handle
+//record handle in temp, attribute in regb
+//set the contr to zero if not found
+search_handle_attrib:	
+	bpatchx patch3b_0,mem_patch3b
+	fetch 2,mem_ui_uuid_table
+	iforce contr
+search_handle_attrib_next:
+	ifetch 1,contr
+	branch search_handle_attrib_end, blank
+	lshift pdata,pdata
+	iadd contr, contr
+	ifetch 4,contr
+	isub temp,null						/* regc is UUID, compare it */
+	branch search_handl_attrib_found_handle,zero
+	call sdp_get_data
+	iadd contr,contr			/* next paragraph */
+	branch search_handle_attrib_next	
+search_handl_attrib_found_handle:
+	call sdp_get_data
+	iadd contr,timeup					/* attribute list end */
+search_handle_attrib_loop_attribs:	
+	increase 1,contr
+	ifetch 2,contr
+	isub regb,null
+	rtn zero							/* attribute found */
+	call sdp_data_len
+	iadd contr,contr
+	deposit timeup
+	isub contr,null
+	branch search_handle_attrib_end, zero /*attribute end, not found the attribute, return contr = 0*/
+	branch search_handle_attrib_loop_attribs
+search_handle_attrib_end:
+	force 0,contr
+	rtn	
+
+
+//enable user if find rfcomm channel number, pdata is channel number
+search_rfcomm_cn:
+	arg 0x0400,regb  // attribute protocol edscriptor list
+	call search_handl_attrib_found_handle
+	arg 0x0300,regb  // uuid rfcomm
+	call search_uuid_in_data
+	nrtn user
+	sub rega,3,null
+	branch disable_user,positive
+	ifetch 1,contr
+	bne 0x08,disable_user
+	ifetch 1,contr
+	rtn
+	
+ //input timeup is lenth
+ //input contr is data ptr
+ //return contr is end of uuid; enable user if found uuid
+search_uuid_in_data:
+	bpatchx patch3b_1,mem_patch3b
+	call sdp_get_data
+	copy pdata,rega
+search_uuid_in_data_loop:	
+	ifetch 1,contr
+	and pdata,0x7,loopcnt
+	rshift3 pdata,pdata
+	sub pdata,3,null
+	branch search_uuid_in_data_found_uuid,zero
+	copy loopcnt,pdata
+	beq 5,search_uuid_in_data_found_element_index5
+	beq 6,search_uuid_in_data_found_element_index6
+	beq 7,search_uuid_in_data_found_element_index7
+	increase -1,contr
+	call sdp_get_data
+	iadd contr,contr
+	copy rega,pdata
+	isub temp,rega
+	branch disable_user,zero
+	branch search_uuid_in_data_loop
+	
+search_uuid_in_data_found_element_index5:
+	increase -2,rega
+	increase 1,contr
+	branch search_uuid_in_data_loop
+search_uuid_in_data_found_element_index6:
+	increase -3,rega
+	increase 2,contr
+	branch search_uuid_in_data_loop
+search_uuid_in_data_found_element_index7:
+	increase -5,rega
+	increase 4,contr
+	branch search_uuid_in_data_loop		
+	
+search_uuid_in_data_found_uuid:
+	increase -1,rega
+	copy loopcnt,pdata
+	beq 1,search_uuid_in_data_type_uuid_16
+	beq 2,search_uuid_in_data_type_uuid_32
+	beq 4,search_uuid_in_data_type_uuid_128
+	branch disable_user 
+search_uuid_in_data_type_uuid_128:
+	increase -12,rega
+search_uuid_in_data_type_uuid_32:
+	ifetch 2,contr
+	increase -2,rega
+search_uuid_in_data_type_uuid_16:
+	ifetch 2,contr
+	isub regb,null
+	branch enable_user,zero
+	increase -2,rega
+	branch disable_user,zero
+	branch search_uuid_in_data_loop
+
+/*
+//rega:l2cap len ,mem_search_uuid:uuid to search
+sdp_send_search_req:
+	call l2cap_malloc_sdp_req
+	setarg SDP_SEARCH_REQ
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid_local
+	byteswap pdata,pdata
+	istore 2,contw
+	increase -5,rega
+	byteswap rega,rega
+	//istorer rega,2,contw
+	copy rega,pdata
+	istore 2,contw
+	setarg 0x0335
+	istore 2,contw
+	setarg 0x19
+	istore 1,contw
+	fetch 2,mem_search_uuid
+	istore 2,contw
+	setarg 0x0008
+	istore 2,contw
+	setarg 0
+	istore 1,contw
+	rtn
+
+//rega:l2cap len
+sdp_send_attribute_req:
+	call l2cap_malloc_sdp_req
+	setarg SDP_ATTRIBUTE_REQ
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid_local
+	byteswap pdata,pdata
+	istore 2,contw
+	increase -5,rega
+	byteswap rega,rega
+//	istorer rega,2,contw
+	copy rega,pdata
+	istore 2,contw
+	fetch 4,mem_sdp_record_handle
+	istore 4,contw
+	setarg 0x2c01
+	istore 2,contw
+	setarg 0x0535
+	istore 2,contw
+	setarg 0x0a
+	istore 1,contw
+	setarg 0
+	istore 2,contw
+	setarg -1
+	istore 2,contw
+	setarg 0
+	istore 1,contw
+	rtn
+*/	
+	
+
+sdp_send_spp_request:
+	call l2cap_get_sdp_tx_payload
+	copy pdata,contw
+	setarg 6//Search Attr Req
+	istore 1,contw
+	setarg sdp_tid_spp					
+	istore 2,contw
+	setarg 0x0f00 //length15
+	istore 2,contw
+	setarg 0x1a0535
+	istore 3,contw
+	setarg 0x0111
+	lshift16 pdata,pdata //UUID
+	istore 4,contw
+	setarg 0x2600 //max return len
+	istore 2,contw
+	setarg 0x0335
+	istore 2,contw
+	setarg 0x0009
+	istore 2,contw
+	setarg 0x0004
+	istore 2,contw
+	jam 0x14,mem_sdp_tx_pkt_length
+	rtn
+
+
+	
+function_g2:
+	bpatchx patch3b_2,mem_patch3b
+	jam 80,mem_AES_CMAC_data_length
+	arg memdat,contw
+	arg mem_le_srand,contr
+	call memcpy16
+	arg mem_le_pubkey_local_x_256,contr
+	call memcpy32
+	arg mem_le_pubkey_remote_x_256,contr
+	call memcpy32
+	call inverse_memdat	
+	arg mem_le_mrand,contr
+	call store_inverse_k	
+	call function_AES_CMAC	
+
+	arg mem_AES_CMAC_temp,contw
+	call load_inverse_result
+	setarg 1000000
+	copy pdata,rega
+	fetch 4,mem_AES_CMAC_temp
+	idiv rega
+	call wait_div_end
+	remainder pdata
+	store 4,mem_gkey
+//call ice_break
+	rtn
+
+function_f6_eb:
+	jam 65,mem_AES_CMAC_data_length
+	arg memdat,contw
+	call store_addr_common_a
+	call store_addr_common_b
+	fetch 3,mem_le_pres+1
+	istore 3,contw
+//	arg mem_le_r,contr
+//	call memcpy16	
+	call get_r
+	
+	arg mem_le_mrand,contr
+	call memcpy16
+	arg mem_le_srand,contr
+	call memcpy16
+	call inverse_memdat
+	arg mem_le_mackey ,contr
+	arg mem_AES_CMAC_k,contw
+	call memcpy16
+//	call p_store_inverse_k	
+	branch function_AES_CMAC
+//	arg mem_AES_CMAC_temp,contw
+//	branch p_load_inverse_result
+
+get_r:
+	fetch 4,mem_le_tk
+	istore 4,contw
+	call memset0_4
+	branch memset0_8
+
+function_f6_ea:
+	bpatchx patch3b_3,mem_patch3b
+	jam 65,mem_AES_CMAC_data_length
+	arg memdat,contw
+	call store_addr_common_b
+	call store_addr_common_a
+	fetch 3,mem_le_preq+1
+	istore 3,contw
+//	arg mem_le_r,contr
+//	call memcpy16	
+	call get_r
+	arg mem_le_srand,contr
+	call memcpy16
+	arg mem_le_mrand,contr
+	call memcpy16
+	call inverse_memdat
+	arg mem_le_mackey ,contr
+	arg mem_AES_CMAC_k,contw
+	call memcpy16
+//	call p_store_inverse_k	
+	call function_AES_CMAC
+	arg mem_AES_CMAC_temp,contw
+	branch load_inverse_result
+
+function_f5:
+	jam 32,mem_AES_CMAC_data_length
+	arg mem_le_dhkey_256 ,contr
+	arg memdat,contw
+	call memcpy32
+	call inverse_memdat
+	arg mem_le_slat,contr
+	call store_inverse_k	
+	call function_AES_CMAC
+	arg mem_AES_CMAC_k,contw
+	call store_aes_result
+	arg 1,temp
+	call function_f5_common
+	arg mem_le_ltk,contw
+	call load_inverse_result
+	arg 0,temp
+	call function_f5_common
+	arg mem_le_mackey,contw
+//	branch p_load_inverse_result
+	branch store_aes_result
+
+
+function_f5_common:
+	bpatchx patch3b_4,mem_patch3b
+	jam 53,mem_AES_CMAC_data_length
+	setarg 0x100
+	store 2,memdat
+	call store_addr_common_b
+	call store_addr_common_a
+	arg mem_le_srand,contr
+	call memcpy16
+	arg mem_le_mrand,contr
+	call memcpy16
+//	fetch 4,mem_le_keyid 0x62746c65
+	setarg 0x6c65
+	istore 2,contw
+	setarg 0x6274
+	istore 2,contw
+	istoret 1,contw   //counter
+	call inverse_memdat	
+	branch function_AES_CMAC
+
+store_addr_common_b:
+	fetch 6,mem_le_lap
+	istore 6,contw
+	fetch 1,mem_le_conn_own_addr_type
+	istore 1,contw
+	rtn
+
+store_addr_common_a:
+	fetch 6,mem_le_plap
+	istore 6,contw
+//	setarg 0x2dcfc1
+//	istore 3,contw
+//	setarg 0xa71370
+//	istore 3,contw
+	fetch 1,mem_le_conn_peer_addr_type
+	istore 1,contw
+	rtn
+
+function_f4_ca:
+	jam 65,mem_AES_CMAC_data_length
+	fetch 1,mem_passkey_1bit
+	store 1,memdat
+	arg mem_le_pubkey_local_x_256,contr
+	call memcpy32
+	arg mem_le_pubkey_remote_x_256,contr
+	call memcpy32
+	call inverse_memdat
+	arg mem_le_mrand,contr
+	call store_inverse_k	
+	branch function_AES_CMAC
+	
+
+function_f4_cb:
+	jam 65,mem_AES_CMAC_data_length
+	fetch 1,mem_passkey_1bit
+	store 1,memdat
+	arg mem_le_pubkey_remote_x_256,contr
+	call memcpy32
+	arg mem_le_pubkey_local_x_256,contr
+	call memcpy32
+	call inverse_memdat
+	arg mem_le_srand,contr
+	call store_inverse_k	
+	branch function_AES_CMAC
+
+function_AES_CMAC:
+	bpatchx patch3b_5,mem_patch3b
+	call function_AES_CMAC_Generate_Subkey
+//call ice_break
+//	jam 65,mem_AES_CMAC_data_length
+//call ice_break
+	fetch 1,mem_AES_CMAC_data_length
+	copy pdata,temp
+function_ceil16:
+	increase 15,pdata
+	rshift4 pdata,pdata
+	copy pdata,regb
+	branch function_AES_CMAC_set_flag_0_balnk,blank
+	and temp,0x0f,pdata
+	nbranch function_AES_CMAC_set_flag_0,blank
+//	flag =1;
+	arg mem_AES_CMAC_k1,regc
+	arg memdat,pdata
+	increase -16,pdata
+//	iadd temp,pdata
+//	isub rega,rega
+	iadd temp,rega	
+	arg mem_AES_CMAC_M_last,contw
+	arg 4,loopcnt	
+	call xor_loop
+//call ice_break
+//	arg mem_f4_k1,contr
+//	call load_key
+	branch function_AES_CMAC_aes
+
+function_AES_CMAC_set_flag_0_balnk:
+	arg 1,regb
+	arg 0,rega
+//	arg mem_f4_test_data,pdata
+	branch function_AES_CMAC_set_flag_0_common
+//call ice_break
+
+function_AES_CMAC_set_flag_0:
+//	flag = 0;
+	and temp,0x0f,rega
+function_AES_CMAC_set_flag_0_common:
+	arg memdat,pdata
+	iadd temp,pdata
+	isub rega,contr
+//call ice_break
+	arg mem_AES_CMAC_temp,contw
+	call function_AES_CMAC_padding
+//call ice_break
+	arg mem_AES_CMAC_k2,regc
+	arg mem_AES_CMAC_temp,rega
+	arg mem_AES_CMAC_M_last,contw
+	arg 4,loopcnt	
+	call xor_loop	
+//call ice_break
+
+//	arg mem_f4_k2,contr
+//	call load_key
+
+//	branch p_function_f4_aes
+function_AES_CMAC_aes:
+//	arg mem_f4_k,contr
+//	call load_key
+//	arg mem_AES_CMAC_xor,contr
+//	call load_data128
+	call aes_clear_data
+	call aes_init	
+//	arg mem_f4_k,contr
+//	call load_key
+	arg memdat,contr
+function_AES_CMAC_aes_loop:
+//generate_mic_loop:
+	increase -1,regb
+	deposit regb
+	branch function_AES_CMAC_aes_loop_end,blank
+	call load_data128
+	call do_aes_cbc
+	branch function_AES_CMAC_aes_loop
+//generate_mic_end:
+function_AES_CMAC_aes_loop_end:	
+	arg mem_AES_CMAC_temp,contw
+	call store_aes_result
+	arg mem_AES_CMAC_M_last,contr
+	call load_data128
+	call aes_init	
+	arg mem_AES_CMAC_temp,contr
+	call load_data128	
+	branch do_aes_cbc
+
+
+
+load_inverse_result:
+//	arg mem_AES_CMAC_temp,contw
+	copy contw,rega
+	call store_aes_result
+//	arg mem_AES_CMAC_temp,rega
+	arg 16,loopcnt
+	branch inverse_data
+	
+store_inverse_k:
+	arg mem_AES_CMAC_k,contw
+	call memcpy16
+inverse_k:	
+	arg 16,loopcnt
+	arg mem_AES_CMAC_k,rega	
+	branch inverse_data
+	
+inverse_memdat:
+	fetch 1,mem_AES_CMAC_data_length
+	copy pdata,loopcnt
+	arg memdat,rega
+	branch inverse_data
+
+bn_lshift_0_inverse:
+	ifetch 1,regA
+	lshift pdata,pdata
+	isolate1 0,regC
+	setflag true,0,pdata	
+	isolate1 8,pdata
+	setflag true,0,regC	
+	istore 1,rega
+         increase -1,rega
+	loop bn_lshift_0_inverse
+	rtn	
+
+function_AES_CMAC_k1_inverse:
+	arg mem_AES_CMAC_k1,regA
+function_AES_CMAC_inverse_common:
+	increase 15,rega
+	force 16,loopcnt
+	force 0,regC
+	branch  bn_lshift_0_inverse	
+
+function_AES_CMAC_k2_inverse:
+	arg mem_AES_CMAC_k2,regA
+	branch function_AES_CMAC_inverse_common
+	
+
+function_AES_CMAC_Generate_Subkey:
+	arg mem_AES_CMAC_k,contr
+	call load_key
+//	arg mem_AES_CMAC_xor,contr
+//	call aes_load_xor
+	force regidx_xor,regext_index
+	call aes_clear
+	call aes_clear_data
+	call do_aes_ocb
+	
+//	force 0x38,aes_ctrl
+//	force 0x0,aes_ctrl
+//	call wait_aes
+	arg mem_AES_CMAC_k1,contw
+	call store_aes_result
+function_AES_CMAC_k1:
+	bpatchx patch3b_6,mem_patch3b
+	fetch 1,mem_AES_CMAC_k1
+	isolate1 7,pdata
+	nbranch function_AES_CMAC_k1_0,true	
+	call function_AES_CMAC_k1_inverse
+	
+//p_function_f4_k1_xor:
+	arg mem_AES_CMAC_k1,regc
+//	arg mem_AES_CMAC_rb,rega
+	arg mem_AES_CMAC_k1,contw
+//	arg 3,loopcnt
+//	call xor_loop
+	call function_AES_CMAC_xor_rb
+	branch function_AES_CMAC_k2
+function_AES_CMAC_k1_0:	
+	call function_AES_CMAC_k1_inverse
+function_AES_CMAC_k2:
+//call ice_break
+	arg mem_AES_CMAC_k1,contr
+	arg mem_AES_CMAC_k2,contw
+	call memcpy16
+	fetch 1,mem_AES_CMAC_k2
+	isolate1 7,pdata
+	nbranch function_AES_CMAC_k2_inverse,true		
+	call function_AES_CMAC_k2_inverse
+//p_function_f4_k2_xor:
+	arg mem_AES_CMAC_k2,regc
+//	arg mem_AES_CMAC_rb,rega
+	arg mem_AES_CMAC_k2,contw
+//	arg 3,loopcnt
+//	branch xor_loop	
+
+
+//rb:00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 87 
+function_AES_CMAC_xor_rb:
+	arg 3,loopcnt
+function_AES_CMAC_xor_rb_loop:	
+	arg 0,temp
+	call function_AES_CMAC_xor_loop_common	
+	increase 4,regc
+	loop  function_AES_CMAC_xor_rb_loop
+	arg 0x8700,temp
+	lshift16 temp,temp
+function_AES_CMAC_xor_loop_common:	
+	ifetch   4,regc
+	ixor  temp,pdata
+	istore   4,contw	
+	rtn
+		
+
+
+
+//input rega :length <16	contr,contw
+function_AES_CMAC_padding:
+	bpatchx patch3b_7,mem_patch3b
+	arg 16,loopcnt
+	arg 0,pdata
+function_AES_CMAC_padding_loop:
+	isub rega,null
+	branch function_AES_CMAC_padding_beq_length,zero
+	branch function_AES_CMAC_padding_big_length,positive
+	ifetcht 1,contr
+	istoret 1,contw
+function_AES_CMAC_padding_loop2:	
+	increase 1,pdata
+	loop function_AES_CMAC_padding_loop
+	rtn
+function_AES_CMAC_padding_beq_length:	
+	arg 0x80,temp
+function_AES_CMAC_padding_common:
+	istoret 1,contw
+	branch  function_AES_CMAC_padding_loop2
+
+function_AES_CMAC_padding_big_length:
+	arg 0,temp
+	branch function_AES_CMAC_padding_common
+
+	
+generate_kinit:
+	call function_e22
+	arg mem_input_store,contr
+	arg mem_kinit,contw		/* Kinit is ready */
+	branch memcpy16
+
+
+function_e21:	/* rega pointers to bdaddr */
+	disable user
+	call function_expand
+	arg mem_random_number,contr
+	arg mem_x,contw
+	force 15,loopcnt
+	call memcpy			
+	ifetch 1,contr
+	xor_into 6,pdata
+	istore 1,contw
+	setarg mem_y
+	store 2,memp_ar_input
+	setarg mem_x
+	store 2,memp_ar_key
+	set1 mark_ar2,mark
+	branch function_ar
+
+
+	
+function_e22:		/* rega pointers to bdaddr */
+	fetcht 1,mem_pin_length
+	force 16,regb			/* total 16 bytes */
+	add temp,6,regc		/* regc is l' */
+	sub regc,16,null		
+	branch function_e22_pin_init,positive 
+	force 16,regc
+function_e22_pin_init:			/* generate x from pin and bdaddr */
+	arg mem_x,contw
+function_e22_genx_pin:
+	arg mem_pin,contr
+	copy temp,loopcnt
+	disable user
+function_e22_genx_loop:
+	ifetch 1,contr
+	istore 1,contw
+	increase -1,regb
+	branch function_e22_genx_end,zero
+	loop function_e22_genx_loop
+	branch function_e22_genx_pin,user
+	enable user
+	force 6,loopcnt
+	copy rega,contr
+	branch function_e22_genx_loop
+function_e22_genx_end:
+	arg mem_random_number,contr
+	arg mem_y,contw
+	call memcpy16
+	fetch 1,mem_y15
+	ixor regc,pdata
+	store 1,mem_y15	/* inpy[15] = rand_num[15]^l'; */
+	setarg mem_y
+	store 2,memp_ar_input
+	setarg mem_x
+	store 2,memp_ar_key
+	set1 mark_ar2,mark
+	branch function_ar
+
+
+
+
+function_e1:	/* rega pointers to bdaddr */
+	disable user
+	call function_expand
+	branch function_hash
+
+function_e3:
+	arg mem_aco,rega
+	enable user
+	call function_expand
+	call function_hash
+	arg mem_input_store,contr
+	arg mem_kc,contw
+	branch memcpy16
+
+	/* costs 41769 clocks */
+function_hash:
+	setarg mem_random_number
+	store 2,memp_ar_input
+	setarg mem_link_key
+	store 2,memp_ar_key
+	set0 mark_ar2,mark
+	call function_ar
+	arg mem_input_store,rega
+	arg mem_random_number,regb
+	arg mem_x,contw
+	call xor16
+	arg mem_x,rega
+	arg mem_y,regb
+	copy regb,contw
+	enable user
+	call add16
+	call key_offset
+	setarg mem_y
+	store 2,memp_ar_input
+	setarg mem_x
+	store 2,memp_ar_key
+	set1 mark_ar2,mark
+	branch function_ar
+	
+
+	/* totally costs 20700 clocks */
+function_ar:
+	jam 0,mem_ar_hround
+	fetch 2,memp_ar_key
+	iforce contr
+	arg mem_key_store,contw
+	call memcpy16
+	fetch 2,memp_ar_input
+	iforce contr
+	arg mem_input_store,contw
+	call memcpy16
+	
+function_ar_loop:
+	call key_scheduling
+	disable user
+	bmark0 mark_ar2,function_ar_original
+	fetch 1,mem_ar_hround
+	bne 4,function_ar_original
+	fetch 2,memp_ar_input
+	iforce regb
+	call xor_mod32_ar2
+function_ar_original:
+	call xor_mod32
+	call el_boxes
+	fetch 1,mem_ar_hround
+	increase 1,pdata
+	store 1,mem_ar_hround
+
+	call key_scheduling
+	enable user
+	call xor_mod32
+	call pht
+	call permute
+	call pht
+	call permute
+	call pht
+	call permute
+	call pht
+	fetch 1,mem_ar_hround
+	increase 1,pdata
+	store 1,mem_ar_hround
+	bne 16,function_ar_loop
+	call key_scheduling
+	disable user
+	branch xor_mod32
+	
+/* input round number and temp key in mem_key_store, and output the next temp key in mem_key_store */
+/* round key is generated and store in mem_round_key */
+key_scheduling:
+	fetch 1,mem_ar_hround
+	arg mem_key_store,contr
+	branch key_sched_zero,blank
+	iforce regb      			/* regb is half round */
+	force 17,loopcnt
+	copy contr,contw
+key_rotateloop:
+	ifetch 1,contr
+	lshift3 pdata,temp
+	rshift2 pdata,pdata
+	rshift3 pdata,pdata
+	ior temp,pdata
+	istore 1,contw
+	loop key_rotateloop
+	setarg mem_key_store
+	iadd regb,contr
+	force 16,loopcnt    
+	arg mem_round_key,contw
+key_select_octet_loop:
+	ifetch 1,contr
+	istore 1,contw
+	compare mem_key_store_end,contr,0xff
+	nbranch key_select_octet_nwrap,true
+	increase -17,contr
+key_select_octet_nwrap:
+	loop key_select_octet_loop
+	force 0,rega         /* rega is index of octet within row */
+	add regb,-1,regc    /* this is the row index, half_round#1 is 0 */
+	lshift2 regc,regc
+	lshift2 regc,regc
+	call enable_authrom
+	setarg mem_b_box
+	iadd regc,regc       /* regc hold the starting address of the row */
+	arg mem_round_key,contw
+	force 16,loopcnt
+bias_round_key_loop:
+	ifetcht 1,regc
+	ifetch 1,contw
+	iadd temp,pdata
+	istore 1,contw
+	increase 1,regc
+	loop bias_round_key_loop
+	branch disable_authrom
+
+key_sched_zero:    /* round 0, key1 */
+	force 16,loopcnt
+	force 0,temp
+create_byte_16_loop:
+	ifetch 1,contr
+	ixor temp,temp
+	loop create_byte_16_loop
+	deposit temp
+	istore 1,contr    	/* store the byte #16 */
+	arg mem_key_store,contr
+	arg mem_round_key,contw
+	branch memcpy16
+
+xor_mod32:     /* xor on 0,3, add on 1,2. if user is set, invert. x in rega and y in regb, out in contw */
+	arg mem_round_key,regb
+xor_mod32_ar2:
+	force 16,loopcnt
+	arg mem_input_store,rega
+	copy rega,contw
+xor_mod32_loop:	
+	ifetcht 1,rega
+	ifetch 1,regb
+	ixor temp,alarm
+	and loopcnt,3,regc
+	nbranch xor_mod32_invert,user
+	xor_into 3,regc
+xor_mod32_invert:
+	sub regc,1,regc
+	branch xor_even,positive
+	iadd temp,alarm
+xor_even:
+	deposit alarm
+	istore 1,contw
+	increase 1,rega
+	increase 1,regb
+	loop xor_mod32_loop
+	rtn
+
+el_boxes:
+	call enable_authrom
+	force 16,loopcnt
+	arg mem_input_store,rega
+el_box_loop:	
+	ifetch 1,rega
+	arg mem_e_box,contr
+	and loopcnt,3,regc
+	sub regc,1,null
+	branch e_boxes,positive
+	arg mem_l_box,contr
+e_boxes:
+	iadd contr,contr
+	ifetch 1,contr
+	istore 1,rega
+	increase 1,rega
+	loop el_box_loop
+	branch disable_authrom
+
+pht:				
+	force 8,loopcnt
+	arg mem_input_store,contr
+	copy contr,contw
+pht_loop:
+	ifetch 1,contr
+	iforce rega
+	ifetch 1,contr
+	iforce regb
+	lshift rega,pdata
+	iadd regb,pdata
+	istore 1,contw
+	deposit rega
+	iadd regb,pdata
+	istore 1,contw
+	loop pht_loop
+	rtn
+
+/* 8 11 12 15 2 1 6 5 10 9 14 13 0 7 4 3 */
+permute:			
+	setarg 0x8ae42c
+	iforce temp
+	force 7,loopcnt
+	call permute_exchange
+	setarg 0xd751b
+	iforce temp
+	force 5,loopcnt
+	call permute_exchange
+	fetch 1,mem_input_store+15
+	iforce rega
+	fetch 1,mem_input_store+3
+	store 1,mem_input_store+15
+	deposit rega
+	store 1,mem_input_store+3
+	rtn
+
+permute_exchange:
+	and temp,0xf,regb
+permute_loop:
+	and temp,0xf,pdata
+	arg mem_input_store,contw
+	iadd contw,contw
+	ifetch 1,contw
+	iforce regc
+	deposit rega
+	istore 1,contw
+	copy regc,rega
+	rshift4 temp,temp
+	loop permute_loop	
+	setarg mem_input_store
+	iadd regb,contw
+	deposit rega
+	istore 1,contw
+	rtn
+
+add16:
+	enable user
+	branch xor_add16
+
+xor16:
+	disable user
+xor_add16:	/* if user is set, do add, else do xor */
+	force 16,loopcnt	/* rega and regb pointers to src, contw is result */
+xoradd_loop:
+	ifetcht 1,rega
+	ifetch 1,regb
+	branch xoradd_add,user
+	ixor temp,pdata
+	branch xoradd_store
+xoradd_add:	
+	iadd temp,pdata
+xoradd_store:	
+	istore 1,contw
+	increase 1,rega
+	increase 1,regb
+	loop xoradd_loop
+	rtn
+
+	
+function_expand:		/* rega pointers to bdaddr, or aco and user is set */
+	arg mem_y,contw
+	ifetch 6,rega
+	istore 6,contw
+	branch expand_12,user
+	ifetch 6,rega
+	branch expand_cont
+expand_12:
+	ifetch 6,contr
+expand_cont:
+	istore 6,contw
+	ifetch 4,rega
+	istore 4,contw
+	rtn
+
+key_offset:
+	arg mem_link_key,contr
+	arg mem_x,contw
+	arg 0,temp
+	setarg 0x8395a7
+	call concatenate_temp24
+	setarg 0xb3c1df
+	call concatenate_temp24
+	setarg 0xe5e9
+	call concatenate_temp16
+	copy temp,regab
+	disable user
+	call key_addxor
+	copy regab,temp
+	enable user
+	branch key_addxor
+
+key_addxor:
+	force 8,loopcnt
+key_addxor_loop:	
+	ifetch 1,contr
+	compare 1,loopcnt,1
+	branch key_high,user
+	branch key_xor,true
+key_add:	
+	iadd temp,pdata
+	branch key_store
+key_high:
+	branch key_add,true
+key_xor:
+	ixor temp,pdata
+key_store:
+	istore 1,contw
+	rshift8 temp,temp
+	loop key_addxor_loop
+	rtn
+
+copy_aco:
+	fetch 6,mem_input_store+4
+	store 6,mem_aco
+	ifetch 6,contr
+	istore 6,contw
+	rtn
+	
+concatenate_temp24:
+	lshift8 temp,temp
+concatenate_temp16:
+	lshift16 temp,temp
+	ior temp,temp
+	rtn
+
+
+
+loop1:	
+	branch loop1
+
+/* ==================== LE security ================= */
+
+generate_stk:
+	bpatchx patch3c_0,mem_patch3c
+	call function_s1
+	arg mem_le_ltk,contw
+	branch store_aes_result
+
+	/* contr = rand pointer */
+authenticate_rconfirm:
+	arg mem_le_srand,contw
+	branch authenticate_mconfirm,master
+	arg mem_le_mrand,contw
+authenticate_mconfirm:
+	copy contr,rega
+	call memcpy16
+	call function_c1
+	arg mem_le_rconfirm,contr
+	branch compare_res
+
+generate_confirm:
+	arg mem_le_mrand,rega
+	branch generate_mrand,master
+	arg mem_le_srand,rega
+generate_mrand:
+	copy rega,contw
+	call generate_random
+	branch function_c1
+
+generate_sk:
+	arg mem_le_skdm,contr
+	call load_data128
+	arg mem_le_ltk,contr
+	call load_regext
+	force 0x38,aes_ctrl
+	force 0x0,aes_ctrl
+	call wait_aes
+	arg mem_le_sk,contw
+	branch store_aes_result
+
+	/* temp=packet counter, rega = length or block counter*/
+first_block_counter:
+	force 0x49,pdata
+	branch first_block
+first_block_data:
+	force 1,pdata
+first_block:
+	force regidx_data,regext_index			/* B0 */
+	lshift8 temp,regext
+	ior regext,regext
+	increase 1,regext_index
+	rshift8 temp,regext
+	rshift16 regext,regext
+	fetch 2,mem_le_ivm
+	lshift16,pdata,pdata
+	ior regext,regext				/* octet3&octet4 of counter and low 16 bit of IV */
+	increase 1,regext_index
+	ifetch 4,contr					/* IV2-IV5 */
+	iforce regext
+	increase 1,regext_index
+	ifetch 2,contr					/* IV6-IV7 */
+	byteswap rega,regext
+	lshift16 regext,regext
+	ior regext,regext
+	increase 1,regext_index
+	rtn
+
+
+	/* temp=packet counter, regc pointers to data */	
+generate_mic:
+	add regc,1,contr
+	ifetch 1,contr
+	iforce rega
+	call first_block_counter
+	call do_aes_ocb
+
+	force regidx_data,regext_index			/* B1 */
+	ifetch 1,regc
+	and_into 0x3,pdata
+	lshift16 pdata,regext
+	set1 8,regext
+	call clear_hidata
+	call do_aes_cbc
+
+	copy rega,loopcnt
+	add regc,2,contr
+	call padding_data
+generate_mic_loop:
+	call aes_load_data
+	call do_aes_cbc
+	deposit loopcnt
+	branch generate_mic_end,blank
+	branch generate_mic_loop
+generate_mic_end:
+	force regidx_result,regext_index
+	deposit regext
+	store 4,mem_le_mic
+	rtn
+
+aes_crypt_data:
+	increase 1,rega
+	call first_block_data
+	copy regc,contr
+	call aes_load_xor
+	call do_aes_ctr
+	call store_enc_data
+	increase 16,regc
+	increase -16,regb
+	branch aes_crypt_data,positive
+	rtn
+	
+le_encrypt:
+	bpatchx patch3c_1,mem_patch3c
+	arg mem_le_txheader,regc
+	fetcht 5,mem_le_pcnt_tx
+	call generate_mic
+	force regidx_xor,regext_index
+	iforce regext
+	force 0,rega					/* rega is block counter */
+	call first_block_data
+	call do_aes_ctr
+	arg mem_le_txpayload,regc
+	fetch 1,mem_le_txlen
+	add pdata,-1,regb
+	iadd regc,contw
+	force regidx_result,regext_index
+	deposit regext
+	istore 4,contw	
+	call aes_crypt_data
+	fetch 1,mem_le_txlen
+	increase 4,pdata
+	store 1,mem_le_txlen
+	fetcht 5,mem_le_pcnt_tx
+	increase 1,temp
+	storet 5,mem_le_pcnt_tx
+	rtn
+
+le_decrypt:
+	bpatchx patch3c_2,mem_patch3c
+	fetch 1,mem_le_rxbuf+1
+	sub pdata,20,null
+	branch le_dec_cont,positive
+le_dec_cont:
+	arg mem_le_rxbuf+2,regc
+	add pdata,-1,regb
+	increase -4,pdata				/* mic will be discarded */
+	store 1,mem_le_rxbuf+1
+	iadd regc,contr
+	ifetch 4,contr
+	force regidx_xor,regext_index
+	iforce regext
+	force 0,rega					/* rega is block counter */
+	fetcht 5,mem_le_pcnt_rx
+	call first_block_data
+	call do_aes_ctr
+	force regidx_result,regext_index
+	deposit regext
+	store 4,mem_le_peer_mic
+	call aes_crypt_data
+	arg mem_le_rxbuf,regc
+	call generate_mic
+	fetcht 4,mem_le_peer_mic
+	isub temp,pdata				/* MIC ok? */
+	nrtn blank
+	fetch 4,mem_le_last_mic			/* reduntdant packet? */
+	isub temp,pdata
+	rtn blank
+	storet 4,mem_le_last_mic
+	fetch 5,mem_le_pcnt_rx
+	increase 1,pdata
+	store 5,mem_le_pcnt_rx
+	force 0,pdata
+	rtn
+
+wait_aes:
+	nbranch wait_aes,aes_ready
+	rtn
+
+do_aes_ocb:
+	force 0x30,aes_ctrl
+	force 0x0,aes_ctrl
+	branch wait_aes
+
+do_aes_cbc:
+	force 0x32,aes_ctrl
+	force 0x2,aes_ctrl
+	branch wait_aes
+
+do_aes_ctr:
+	force 0x34,aes_ctrl
+	force 0x4,aes_ctrl
+	branch wait_aes
+
+	
+aes_init:
+	force 1,aes_ctrl
+	force 0,aes_ctrl
+	rtn
+function_s1:
+	force regidx_data,regext_index
+	fetch 4,mem_le_mrand
+	iforce regext
+	increase 1,regext_index
+	ifetch 4,contr
+	iforce regext
+	increase 1,regext_index
+	fetch 4,mem_le_srand
+	iforce regext
+	increase 1,regext_index
+	ifetch 4,contr
+	iforce regext
+	increase 1,regext_index
+	call aes_clear
+	increase -4,regext_index
+	fetch 4,mem_le_tk
+	copy pdata,regext
+	increase 4,regext_index
+	force 0x38,aes_ctrl
+	force 0x8,aes_ctrl
+	branch wait_aes
+
+	/* rega pointers to random number */
+function_c1:
+	bpatchx patch3c_3,mem_patch3c
+	fetch 6,mem_le_lap
+	fetcht 6,mem_le_plap
+	branch function_c1_master,master
+	fetch 6,mem_le_plap
+	fetcht 6,mem_le_lap
+function_c1_master:
+	force regidx_xor,regext_index
+	copy temp,regext
+	increase 1,regext_index
+	rshift32 temp,regext
+	lshift16 pdata,pdata
+	ior regext,regext
+	increase 1,regext_index
+	rshift32 pdata,regext
+	increase 1,regext_index
+	force 0,regext					/* p2 = ia || ra */
+	force 0,pdata
+	fetch 1,mem_le_conn_peer_addr_type
+	fetcht 1,mem_le_adv_own_addr_type
+	nbranch function_c1_irat,master
+	//conn as master
+	fetch 1,mem_le_conn_own_addr_type
+	fetcht 1,mem_le_conn_peer_addr_type
+function_c1_irat:
+	store 1,mem_le_iat
+	storet 1,mem_le_rat
+	force regidx_data,regext_index
+	arg mem_le_iat,regb
+	force 4,loopcnt
+function_c1_loop1:
+	ifetch 4,rega		
+	ifetcht 4,regb
+	ixor temp,regext
+	increase 1,regext_index
+	increase 4,rega
+	increase 4,regb
+	loop function_c1_loop1		/* p1 ^ r */
+	call aes_clear				/* k = 0 */
+	increase -4,regext_index
+	fetch 4,mem_le_tk
+	copy pdata,regext
+	increase 4,regext_index
+	force 0x38,aes_ctrl
+	force 0xc,aes_ctrl
+	call wait_aes
+
+	call aes_clear_data
+	force 0x3a,aes_ctrl
+	force 0x8,aes_ctrl
+	branch wait_aes
+
+padding_data:
+	compare 0,loopcnt,3
+	rtn true
+	deposit contr
+	iadd loopcnt,contw
+	force 0,pdata
+padding_loop:
+	istore 1,contw
+	increase 1,loopcnt
+	compare 0,loopcnt,3
+	rtn true
+	branch padding_loop
+
+aes_load_data:
+	force regidx_data,regext_index
+load_data_loop:
+	deposit loopcnt
+	branch load_data_padding,blank
+	ifetch 4,contr
+	increase -4,loopcnt
+load_data_padding:
+	iforce regext
+	increase 1,regext_index
+	compare regidx_key,regext_index,0xf
+	rtn true
+	branch load_data_loop
+
+aes_load_xor:
+	force regidx_xor,regext_index
+	branch load_regext
+load_key:
+	force regidx_key,regext_index
+	branch load_regext
+load_data128:
+	force regidx_data,regext_index
+load_regext:
+	force 4,loopcnt
+load_regext_loop:
+	ifetch 4,contr
+	iforce regext
+	increase 1,regext_index
+	loop load_regext_loop
+	rtn
+
+load_sk:
+	arg mem_le_sk,contr
+	branch load_key
+
+clear_hidata:
+	force 4,loopcnt
+	branch clear_data_rest
+
+aes_clear_data:
+	force regidx_data,regext_index
+aes_clear:
+	force 4,loopcnt
+clear_loop:
+	force 0,regext
+clear_data_rest:
+	increase 1,regext_index
+	loop clear_loop
+	rtn
+
+store_aes_result:
+	force regidx_result,regext_index
+	force 4,loopcnt
+send_aes_result_loop:
+	deposit regext
+	istore 4,contw
+	increase 1,regext_index
+	loop send_aes_result_loop
+	rtn
+
+store_enc_data:
+	force regidx_result,regext_index
+	copy regc,contw
+	add regb,1,loopcnt
+	sub loopcnt,15,null
+	branch store_enc_loop,positive
+	force 16,loopcnt
+store_enc_loop:
+	deposit regext
+	sub loopcnt,3,null
+	branch store_enc_byte,positive
+	istore 4,contw
+	increase -4,loopcnt
+	rtn zero
+	increase 1,regext_index
+	branch store_enc_loop
+store_enc_byte:
+	istore 1,contw
+	rshift8 pdata,pdata
+	loop store_enc_byte
+	rtn
+	
+	/* contr pointers to value to be compared */
+compare_res:
+	force regidx_result,regext_index
+	force 4,loopcnt
+compare_res_loop:
+	ifetch 4,contr
+	isub regext,null
+	nrtn zero
+	increase 1,regext_index
+	loop compare_res_loop
+	force 0,null
+	rtn
+
+enable_authrom:
+	hfetch 1,core_clkoff
+	set0 CLOCK_OFF_AUTH_ROM,pdata
+	hstore 1,core_clkoff
+	rtn
+
+disable_authrom:
+	hfetch 1,core_clkoff
+	set1 CLOCK_OFF_AUTH_ROM,pdata
+	hstore 1,core_clkoff
+	rtn
+
+init_memp:
+	arg mem_p,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3ffff
+	setsect 3,0x3fbff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3ffff
+	setsect 3,0x3ffff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3cfff
+	setsect 3,0x3ffff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3ffef
+	setsect 3,0x3ffff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3ffff
+	setsect 3,0x3ffff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x26c7f
+	setsect 2,0x146b
+	setsect 3,0x37bb3
+	istore 9,contw
+	setsect 0,0x1feb8
+	setsect 1,0x10c12
+	setsect 2,0x2b722
+	setsect 3,0x29fa6
+	istore 9,contw
+	setsect 0,0xe70f
+	setsect 1,0x16720
+	setsect 2,0x519e
+	setsect 3,0x19084
+	istore 9,contw
+	setsect 0,0x31012
+	setsect 1,0x360bf
+	setsect 2,0x3f0af
+	setsect 3,0x3d3
+	istore 9,contw
+	setsect 0,0x3a188
+	setsect 1,0x3ad0
+	setsect 2,0x3cbf2
+	setsect 3,0x243d9
+	istore 9,contw
+	setsect 0,0x2b030
+	setsect 1,0x36a03
+	setsect 2,0x11188
+	setsect 3,0x1e520
+	istore 9,contw
+	setsect 0,0x3a11e
+	setsect 1,0xfe5d
+	setsect 2,0xdd57
+	setsect 3,0x1ac93
+	istore 9,contw
+	setsect 0,0x11ed
+	setsect 1,0x218c4
+	setsect 2,0x8da7
+	setsect 3,0x257ff
+	istore 9,contw
+	setsect 0,0x3192b
+	setsect 1,0x34641
+	setsect 2,0x1be0c
+	setsect 3,0x366ad
+	istore 9,contw
+	setsect 0,0x1f83
+	setsect 1,0x15a23
+	setsect 2,0x3f9b0
+	setsect 3,0x3949
+	istore 9,contw
+	setsect 0,0x13a51
+	setsect 1,0x153fd
+	setsect 2,0x3372a
+	setsect 3,0xf1bb
+	istore 9,contw
+	setsect 0,0x3ae85
+	setsect 1,0x1eed9
+	setsect 2,0x9e66
+	setsect 3,0x1a8
+	istore 8,contw
+	rtn
+	
+
+
+init_memp_256:
+ 	arg mem_p_256,contw
+        setsect 0,0x3ffff
+        setsect 1,0x3ffff
+        setsect 2,0x3ffff
+        setsect 3,0x3ffff
+        istore 9,contw
+        setsect 0,0x3ffff
+        setsect 1,0x3f
+        setsect 2,0x0
+        setsect 3,0x0
+        istore 9,contw
+        setsect 0,0x0
+        setsect 1,0x0
+        setsect 2,0x1000
+        setsect 3,0x0
+        istore 9,contw
+        setsect 0,0x3ff00
+        setsect 1,0x3ffff
+        setsect 2,0x3ffcf
+        setsect 3,0x3ffff
+        istore 9,contw
+        setsect 0,0x3ffff
+        setsect 1,0x3ffff
+        setsect 2,0x3ffff
+        setsect 3,0x3ff
+        istore 9,contw
+        setsect 0,0x0
+        setsect 1,0x0
+        setsect 2,0x0
+        setsect 3,0x0
+        istore 9,contw
+        setsect 0,0x10000
+        setsect 1,0x0
+        setsect 2,0x3f000
+        setsect 3,0x3ffff
+        istore 9,contw
+        setsect 0,0x296ff
+        setsect 1,0x22630
+        setsect 2,0x3945d
+        setsect 3,0x3d284
+        istore 9,contw
+        setsect 0,0x333a0
+        setsect 1,0x4b7a
+        setsect 2,0x37d8
+        setsect 3,0x3c9dc
+        istore 9,contw
+        setsect 0,0x3a440
+        setsect 1,0x1b958
+        setsect 2,0x38bce
+        setsect 3,0x1091f
+        istore 9,contw
+        setsect 0,0x2e12c
+        setsect 1,0x1f47c
+        setsect 2,0x356b1
+        setsect 3,0x2fd47
+        istore 9,contw
+        setsect 0,0x6837
+        setsect 1,0x2ed90
+        setsect 2,0x1ecec
+        setsect 3,0x1acc5
+        istore 9,contw
+        setsect 0,0x23357
+        setsect 1,0x18af3
+        setsect 2,0xf9e1
+        setsect 3,0x129f0
+        istore 9,contw
+        setsect 0,0x2e7eb
+        setsect 1,0x3e6e3
+        setsect 2,0x3e1a7
+        setsect 3,0x10b8b
+        istore 9,contw
+        setsect 0,0x24fe3
+        setsect 1,0x20ef
+        setsect 2,0x1b5a6
+        setsect 3,0xdc2f
+        istore 9,contw
+        setsect 0,0x13860
+        setsect 1,0x2bd69
+        setsect 2,0x391a
+        setsect 3,0x1b222
+        istore 9,contw
+        rtn
+
+
+publickey_init:
+	fetch 1,mem_ssp_enable
+	nbranch sp_initialize,blank
+	branch sp_initialize_256
+
+sp_calc_sequence_256_check:
+	bpatchx patch3c_4,mem_patch3c
+	fetch 1,mem_ssp_enable
+	rtn blank
+	fetch 1,mem_sp_local_key_invalid
+	rtnne SP_KEY_VALID
+	fetch 1,mem_le_secure_connect_enable
+	rtn blank
+	fetch 1,mem_le_sc_local_key_invalid
+	rtneq SP_KEY_VALID_256
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,stop_publickey_calc_256
+	fetch 1,mem_le_sc_calc
+	beq SP_CALC_STANDBY,sp_initialize_256
+	rtn
+stop_publickey_calc_256:
+	jam SP_CALC_STANDBY,mem_le_sc_calc	
+	rtn
+	
+
+sp_initialize:
+	bpatchx patch3c_5,mem_patch3c
+	fetch 1,mem_ssp_enable 
+	branch ssp_disable, blank
+	call ssp_enable
+	call sp_clear_flags
+	branch sp_pubkey_calc 
+	
+sp_clear_flags:
+	setarg 0
+	store 8,mem_sp_state_start
+	store 4,mem_sp_flag_start
+	store 7,mem_sp_iocap_remote
+	rtn
+
+sp_generate_local_key:
+	jam SP_FLAG_COMMIT,mem_sp_flag  
+	branch sp_generate_local_key0
+sp_master_generate_local_key:
+	fetch 1,mem_sp_local_key_invalid
+	beq SP_KEY_VALID,sp_dhkey_calc
+	branch assert
+sp_generate_local_key0:
+	fetch 1,mem_sp_local_key_invalid
+	beq SP_KEY_VALID,sp_start_send_pubkey
+	branch sp_pubkey_calc
+    
+sp_start_send_pubkey:
+	call sp_dhkey_calc
+	fetch 1,mem_master_sp_state
+	nrtn blank
+	jam SP_STAT_KEY_SEND,mem_sp_state
+	rtn
+
+
+sp_calc_check_publickey_256:
+	call sp_calc_b256
+	arg mem_le_pubkey_remote_y_256,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod_256   
+	arg mem_le_pubkey_remote_x_256,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod_256   
+  	arg mem_t2_256,regA
+	arg mem_le_pubkey_remote_x_256,regB
+	arg mem_t2_256,contw
+	call bn_mulmod_256	
+  	arg mem_a_256,regA
+	arg mem_le_pubkey_remote_x_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256	
+  	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod_256	 
+  	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	call bn_addmod_256	 
+	arg 32,loopcnt
+  	arg mem_t7_256,regA
+	arg mem_t0_256,regB
+	branch  string_compare
+	
+sp_calc_b256:
+	arg mem_gy_256,regA
+	arg mem_t0_256,contw
+	call bn_sqrmod_256   
+	arg mem_gx_256,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod_256    
+  	arg mem_t2_256,regA
+	arg mem_gx_256,regB
+	arg mem_t2_256,contw
+	call bn_mulmod_256	
+  	arg mem_a_256,regA
+	arg mem_gx_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256	 
+  	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod_256	 
+  	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	branch  bn_submod_256	
+	
+sp_calc_check_publickey:
+	call sp_calc_b
+	arg mem_sp_pubkey_remote_y,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod 
+	arg mem_sp_pubkey_remote_x,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod
+  	arg mem_t2_256,regA
+	arg mem_sp_pubkey_remote_x,regB
+	arg mem_t2_256,contw
+	call bn_mulmod	
+  	arg mem_a,regA
+	arg mem_sp_pubkey_remote_x,regB
+	arg mem_t3_256,contw
+	call bn_mulmod	
+  	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod	 
+  	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	call bn_addmod	 
+ 	arg 24,loopcnt
+ 	arg mem_t7_256,regA
+	arg mem_t0_256,regB
+	branch  string_compare
+	
+sp_calc_b:
+	arg mem_gy,regA
+	arg mem_t0_256,contw
+	call bn_sqrmod   
+	arg mem_gx,regA
+	arg mem_t2_256,contw
+  	call bn_sqrmod
+  	arg mem_t2_256,regA
+	arg mem_gx,regB
+	arg mem_t2_256,contw
+	call bn_mulmod	
+	arg mem_a,regA
+	arg mem_gx,regB
+	arg mem_t3_256,contw
+	call bn_mulmod	 
+  	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod	 
+  	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	branch  bn_submod	
+
+   
+sp_calculate_commitment:
+	fetch 1,mem_sp_calc
+	bne SP_CALC_STANDBY,sp_calculate_commitment_wait_dhkey_calc
+	call sp_local_random_key_generator
+	arg mem_sp_prarm_stack,contw
+	setarg mem_sp_random_local_end
+	istore 2,contw
+	setarg mem_sp_pubkey_local_x_end
+	istore 2,contw
+	setarg mem_sp_pubkey_remote_x_end
+	istore 2,contw
+	branch sp_calculate_commitment0
+master_sp_calculate_commitment:
+	arg mem_sp_prarm_stack,contw
+	setarg mem_sp_random_remote_end
+	istore 2,contw
+	setarg mem_sp_pubkey_remote_x_end
+	istore 2,contw
+	setarg mem_sp_pubkey_local_x_end
+	istore 2,contw
+sp_calculate_commitment0:
+	call function_f1
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_COMMIT_CALC,master_sp_calculate_commitment0
+	jam SP_FLAG_COMMIT,mem_sp_flag
+	jam SP_STAT_COMMIT_SEND,mem_sp_state
+	rtn
+master_sp_calculate_commitment0:
+	jam SP_STAT_COMMITMENT_COMPARE,mem_master_sp_state
+	call sp_master_generate_local_key
+	branch master_set_mem_master_sp_flag 
+
+sp_local_random_key_generator:
+	arg mem_sp_random_local,contw
+	force 8,queue
+	branch random_generator
+  
+sp_calculate_commitment_wait_dhkey_calc:
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	rtn
+    
+sp_confirm_check:
+    /* calculate Ea here */
+	bpatchx patch3c_6,mem_patch3c
+	arg      mem_addr_value,contw
+	fetch    6,mem_lap
+	istore   6,contw
+	fetch    6,mem_plap
+	istore   6,contw
+	fetch    3,mem_sp_iocap_remote
+	istore   3,contw 
+
+	call     function_f3a
+
+	arg      mem_sp_calc_result_high,regA
+	arg      mem_sp_check_result,regB    
+	force    4,queue 
+	call     compare4
+	nbranch  sp_confirm_check_failed,true  
+
+	call sp_confirm_check_success
+	jam LMP_DHKey_Check,mem_lmi_opcode2
+	branch tid_set_reply
+    
+sp_confirm_check_success:
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_CONFIRM_CHECK,sp_confirm_check_success_master
+	jam SP_STAT_CONFIRM_CALC,mem_sp_state
+	jam SP_FLAG_COMMIT,mem_sp_flag  
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	rtn
+sp_confirm_check_success_master:
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam SP_STATE_END,mem_master_sp_state
+	branch master_set_mem_master_sp_flag
+	//accept opcode?
+	
+sp_confirm_check_failed:
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_CONFIRM_CHECK,sp_confirm_check_failed_master
+	jam SP_STAT_NULL,mem_sp_state
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	//accept opcode?
+	jam      AUTHENTICATION_FAILURE_ERROR,mem_lmo_reason2 
+	rtn
+sp_confirm_check_failed_master:
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	jam SP_STAT_NULL,mem_master_sp_state
+	rtn
+    
+sp_confirm_calc:
+	fetch 1,mem_sp_dh_ready
+	beq SP_FLAG_COMMIT, sp_confirm_calc_ready
+	jam 	SP_STAT_CONFIRM_CALC,mem_master_sp_state
+	branch master_set_mem_master_sp_flag
+sp_confirm_calc_ready:
+	arg      mem_addr_value,contw
+	fetch    6,mem_plap
+	istore   6,contw
+	fetch    6,mem_lap
+	istore   6,contw
+	fetch    3,mem_sp_iocap_local
+	istore   3,contw 
+
+	call     function_f3b
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_CONFIRM_CALC,sp_confirm_calc_master
+	jam      SP_STAT_CONFIRM_SEND,mem_sp_state
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	rtn
+sp_confirm_calc_master:
+	jam      SP_STAT_CONFIRM_SEND,mem_master_sp_state
+	jam      SP_FLAG_COMMIT,mem_master_sp_flag
+	rtn   
+
+sp_master_key_prarm_push:
+	arg mem_sp_prarm_stack,contw
+	fetch    6,mem_plap
+	istore   6,contw
+	fetch    6,mem_lap
+	istore   6,contw
+	setarg mem_sp_random_local_end
+	istore 2,contw
+	setarg mem_sp_random_remote_end
+	istore 2,contw
+	branch sp_link_key_calc
+sp_link_key_prarm_push:
+	jam      SP_STAT_DONE,mem_sp_state    
+	arg mem_sp_prarm_stack,contw
+	fetch    6,mem_lap
+	istore   6,contw
+	fetch    6,mem_plap
+	istore   6,contw
+	setarg mem_sp_random_remote_end
+	istore 2,contw
+	setarg mem_sp_random_local_end
+	istore 2,contw
+sp_link_key_calc:
+    /*calculate Link key here */
+	arg      mem_addr_value,contw
+	fetch    6,mem_sp_prarm_stack
+	istore   6,contw
+	fetch    6,mem_sp_prarm_stack+6
+	istore   6,contw
+	
+	call     function_f2    
+
+	/*handle linkkey  */
+	jam 1,mem_link_key_exists
+	arg mem_link_key,contw
+	arg mem_sp_calc_result_high,contr
+	call memcpy16
+	branch  generate_linkkey_continue
+
+    
+sp_pubkey_calc:
+	bpatchx patch3c_7,mem_patch3c
+	fetch    1,mem_sp_local_key_invalid
+	rtnne SP_KEY_INVALID
+	fetch    1,mem_sp_calc
+	rtnne  SP_CALC_STANDBY
+	arg      mem_sp_private_key,contw 
+	force    11,queue
+	call     random_generator
+	random   pdata
+	rshift   pdata,pdata
+	istore   2,contw 
+/* we don't need fixed private key,generate random key instead */ 
+	arg      mem_k,contw
+	arg      mem_sp_private_key,contr	
+	call     memcpy24 //mem_sp_private_key=>mem_k 24BYTES
+
+	arg      mem_ax,contw
+	arg      mem_gx,contr
+	call     memcpy48 //mem_gx=>mem_ax 48bytes
+
+	arg      mem_az,contw
+	call     bn_zero
+	jam      1,mem_az //0=>mem_az 24bytes
+
+	call     eckp_calc_init
+	jam SP_CALC_PUBKEY,mem_sp_calc
+	rtn    
+	
+sp_pubkey_generated:
+	arg      mem_sp_pubkey_local,contw
+	arg      mem_bx,contr
+	call     memcpy48   
+	jam      SP_KEY_VALID,mem_sp_local_key_invalid
+	jam      SP_CALC_STANDBY,mem_sp_calc
+	rtn
+
+sp_dhkey_calc:
+	bpatchx patch3d_0,mem_patch3d
+	fetch    1,mem_sp_dhkey_invalid
+	rtnne  SP_KEY_INVALID
+	fetch    1,mem_sp_calc
+	rtnne  SP_CALC_STANDBY
+
+	arg      mem_k,contw
+	arg      mem_sp_private_key,contr	
+	call     memcpy24
+
+	arg      mem_ax,contw
+	arg      mem_sp_pubkey_remote,contr
+	call     memcpy48
+
+	arg      mem_az,contw
+	call     bn_zero
+	jam      1,mem_az
+
+	call     eckp_calc_init
+	jam      SP_CALC_DHKEY,mem_sp_calc
+	rtn 	
+	
+sp_dhkey_generated:
+	jam SP_FLAG_COMMIT,mem_sp_dh_ready
+	arg mem_sp_dhkey,contw
+	arg mem_bx,contr
+	call memcpy24
+	jam SP_KEY_VALID,mem_sp_dhkey_invalid
+	jam SP_CALC_STANDBY,mem_sp_calc
+	rtn
+
+random_generator:
+	increase -1,queue
+	nrtn     positive
+	random   pdata
+	istore   2,contw  
+	branch   random_generator
+compare4:
+	increase -1,queue
+	nbranch  compare4_success,positive
+	ifetch   4,regA
+	copy     pdata,temp
+	ifetch   4,regB
+	iflip    temp,pdata
+	nbranch  compare4_failed,zero
+	increase 4,regA
+	increase 4,regB
+	branch   compare4
+compare4_failed:
+	disable  true
+	rtn
+compare4_success:
+	enable   true
+	rtn
+
+/*************************************************/
+/** Message state machine routines ***************/
+/*************************************************/
+// simple pairing support 
+
+simple_pairing_sequence:
+	bpatchx patch3d_1,mem_patch3d
+         fetch 1,mem_sp_flag
+         rtn blank
+	call lmo_fifo_check
+	nrtn blank
+	jam      SP_FLAG_STANDBY,mem_sp_flag
+	fetch    1,mem_sp_state
+	beq  SP_STAT_KEY_SEND,sp_send_LMP_ENCAPSULATED_HEADER
+	beq  SP_STAT_COMMIT_SEND,sp_send_LMP_SIMPLE_PAIRING_COMFIRM
+	beq  SP_STAT_RANDOM_SEND,sp_send_LMP_SIMPLE_PAIRING_NUMBER
+	beq  SP_STAT_CONFIRM_SEND,sp_send_LMP_DHKEY_CHECK
+	beq  SP_STAT_KEY_GENERATE,sp_generate_local_key
+	beq  SP_STAT_COMMIT_CALC,sp_calculate_commitment
+	beq  SP_STAT_CONFIRM_CHECK,sp_confirm_check
+	beq  SP_STAT_CONFIRM_CALC,sp_confirm_calc
+	beq  SP_STAT_LINK_KEY_CALC,sp_link_key_prarm_push
+	//beq  SP_STAT_FEATURE_EXT_SEND,send_LMP_FEATURES_REQ_EXT
+	rtn  
+
+master_simple_paring_sequence:
+	bpatchx patch3d_2,mem_patch3d
+	fetch 1,mem_master_sp_flag
+	rtn blank
+	call lmo_fifo_check
+	nrtn blank
+	jam SP_FLAG_STANDBY,mem_master_sp_flag
+	fetch 1,mem_master_sp_state
+	beq SP_MASTER_STAT_START_SKIP,sp_master_send_io_cap_get
+	beq SP_MASTER_STAT_START_DONE,sp_master_send_io_cap_send
+	beq SP_STAT_KEY_SEND,sp_master_send_LMP_ENCAPSULATED_HEADER
+	beq SP_STAT_COMMIT_CALC,master_sp_calculate_commitment
+	beq SP_STAT_COMMITMENT_COMPARE,sp_master_commitment_compare
+	beq SP_STAT_RANDOM_SEND,sp_master_send_LMP_SIMPLE_PAIRING_NUMBER
+	beq SP_STAT_CONFIRM_CALC,sp_confirm_calc
+	beq SP_STAT_CONFIRM_SEND,master_sp_send_lmp_dhkey_check
+	beq SP_STAT_CONFIRM_CHECK,sp_confirm_check
+	beq SP_STATE_END,master_sp_sm_end
+	rtn
+
+master_set_mem_master_sp_flag:
+	jam SP_FLAG_COMMIT,mem_master_sp_flag
+	rtn
+	
+master_clear_mem_master_sp_flag:
+	jam SP_FLAG_STANDBY,mem_master_sp_flag
+	rtn
+sp_calc_sequence:
+	bpatchx patch3d_3,mem_patch3d
+	fetch 1,mem_ssp_enable
+	rtn blank
+	fetch 1,mem_sp_calc
+	rtn blank
+	increase 0x80,pdata
+	store    1,mem_sp_calc
+	rtnbit1 7
+	fetch    1,mem_ec_loopc
+	branch   sp_calc_sequence_done,blank
+	branch   eckp_calc
+
+sp_calc_sequence_done:    
+	call ecunmapz
+	fetch 1,mem_sp_calc
+	beq  SP_CALC_PUBKEY,sp_pubkey_generated
+	beq  SP_CALC_DHKEY,sp_dhkey_generated
+	rtn
+
+
+bn_testbit:
+	and pdata,7,queue
+	rshift3 pdata,pdata
+	iadd contr,contr
+	ifetch 1,contr
+	qisolate0 pdata
+	rtn
+
+
+ec_copy:
+	call memcpy24
+	call memcpy24
+	branch memcpy24
+	
+	
+bn_eq_zero:
+	ifetch 8,contr
+	nrtn blank
+	ifetch 8,contr
+	nrtn blank
+	ifetch 8,contr
+	rtn
+	
+	
+	/* return zero if eq */
+
+bn_eq_0:	
+	ifetch 4,regA
+	iforce temp
+	ifetch 4,regB
+	isub temp,null
+	nrtn zero
+	increase 4,regA
+	increase 4,regB
+	loop bn_eq_0
+	rtn
+
+	/* return positive if A >= B */
+bn_bigeq:
+	force 6,loopcnt
+	increase 20,regA
+	increase 20,regB
+bn_bigeq_0:	
+	ifetch 4,regB
+	iforce temp
+	ifetch 4,regA
+	isub temp,pdata
+	nrtn positive
+	nrtn blank
+	increase -4,regA
+	increase -4,regB
+	loop bn_bigeq_0
+	rtn
+
+bn_add:
+	force 6,loopcnt
+	force 0,regC
+bn_add_0:	
+	ifetch 4,regA
+	iforce temp
+	ifetch 4,regB
+	iadd temp,pdata
+	iadd regC,pdata
+	istore 4,contw
+	isolate1 32,pdata
+	setflag true,0,regC
+	increase 4,regA
+	increase 4,regB
+	loop bn_add_0
+	rtn
+
+bn_sub:
+	force 6,loopcnt
+	force 0,regC
+bn_sub_0:	
+	ifetch 4,regB
+	iforce temp
+	ifetch 4,regA
+	isub temp,pdata
+	isub regC,pdata
+	istore 4,contw
+	isolate1 32,pdata
+	setflag true,0,regC
+	increase 4,regA
+	increase 4,regB
+	loop bn_sub_0
+	rtn
+
+bn_rshift6:
+	force 6,loopcnt
+	increase 20,regA
+bn_rshift:
+	force 0,regC
+bn_rshift_0:	
+	ifetch 4,regA
+	isolate1 0,pdata
+	setflag true,1,regC
+	rshift pdata,pdata
+	isolate1 0,regC
+	setflag true,31,pdata
+	istore 4,regA
+	increase -4,regA
+	rshift regC,regC
+	loop bn_rshift_0
+	rtn
+
+bn_lshift:
+	force 6,loopcnt
+	force 0,regC
+bn_lshift_0:	
+	ifetch 4,regA
+	isolate1 31,pdata
+	setflag true,1,regC
+	lshift pdata,pdata
+	isolate1 0,regC
+	setflag true,0,pdata
+	istore 4,regA
+	increase 4,regA
+	rshift regC,regC
+	loop bn_lshift_0
+	rtn
+	
+bn_lshiftmod:
+	call bn_lshift
+bn_lshiftmod_ismod:	
+	isolate1 0,regC
+	branch bn_lshiftmod_0,true
+	arg mem_p,regB
+	copy regA,regC
+	increase -24,regA
+	call bn_bigeq
+	nrtn positive
+	copy regC,regA
+bn_lshiftmod_0:
+	increase -24,regA
+	arg mem_p,regB
+	copy regA,contw
+	branch bn_sub
+	
+
+bn_addmod:
+	call bn_add
+	copy contw,regA
+	branch bn_lshiftmod_ismod
+	
+bn_submod:
+	call bn_sub
+	isolate0 0,regC
+	rtn true
+	arg mem_p,regB
+	add contw,-24,regA
+	copy regA,contw
+	branch bn_add
+	
+
+bn_p192mod:
+	copy contw,timeup				/* save result ptr */
+	copy regA,alarm				/* temp save regA */
+	arg mem_tmp2,regB
+	copy regB,contw
+	add regA,24,contr
+	ifetch 8,contr
+	istore 8,contw
+	istore 8,contw
+	force 0,pdata
+	istore 8,contw
+	copy timeup,contw
+	call bn_addmod
+	arg mem_tmp2,regB
+	copy regB,contw
+	force 0,pdata
+	istore 8,contw
+	add alarm,32,contr
+	ifetch 8,contr
+	istore 8,contw
+	istore 8,contw
+	copy timeup,regA
+	copy regA,contw
+	call bn_addmod
+	arg mem_tmp2,regB
+	copy regB,contw
+	add alarm,40,contr
+	ifetch 8,contr
+	istore 8,contw
+	istore 8,contw
+	istore 8,contw
+	copy timeup,regA
+	copy regA,contw
+	branch bn_addmod
+		
+
+bn_load:
+	force 6,loopcnt
+bn_load_0:	
+	ifetch 4,contr
+	iforce regext
+	increase 1,regext_index
+	loop bn_load_0
+	rtn
+
+
+	/* cost 1562 clks */	
+bn_mulmod:
+	copy contw,timeup					/* save result ptr */
+	arg mem_tmp1,contw
+	call bn_zero
+	arg mem_tmp1,contw
+	copy regA,contr
+	force 0,regext_index
+	call bn_load
+	copy regB,contr
+	call bn_load
+	force 0,regB
+bn_mulmod_1:	
+	force 0,temp
+	force 6,regC
+bn_mulmod_0:
+	ifetch 4,contw					/* d[i+j] */
+	iforce regA
+	copy regB,regext_index
+	deposit regext
+	copy regC,regext_index
+	imul32 regext,pdata
+	iadd regA,pdata					/* uv = a[i]*b[j] + d[i+j] */
+	iadd temp,pdata					/* uv += u */
+	istore 4,contw					/* ->d[i+j] */
+	rshift32 pdata,temp				/* temp = u = uv >> 32 */
+	increase 1,regC
+	compare 12,regC,0xff
+	nbranch bn_mulmod_0,true
+	deposit temp
+	istore 4,contw					/* d[i + 12] = u */
+	increase -24,contw
+	increase 1,regB
+	compare 6,regB,0xff
+	nbranch bn_mulmod_1,true
+	arg mem_tmp1,regA
+	copy timeup,contw
+	branch bn_p192mod
+
+	
+bn_sqrmod:
+	copy regA,regB
+	branch bn_mulmod
+
+bn_rshifteven:
+	copy regA,alarm
+bn_rshifteven_1:
+	copy alarm,regA
+	ifetch 1,regA
+	isolate1 0,pdata
+	rtn true
+	call bn_rshift6
+	ifetch 1,regB
+	isolate0 0,pdata
+	branch bn_rshifteven_0,true
+	arg mem_p,regA
+	copy regB,contw
+	call bn_add
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB						/* [6] */
+	increase -24,regB
+bn_rshifteven_0:
+	add regB,24,regA
+	force 7,loopcnt
+	call bn_rshift
+	branch bn_rshifteven_1
+
+	/* cost 141910 clks */
+bn_invmod:
+	copy contw,timeup					/* save result ptr */
+	arg mem_tmp0,contw				/* x */
+	call bn_zero
+	force 0,pdata
+	store 4,mem_tmp5
+	store 4,mem_t2
+	jam 1,mem_tmp0
+	arg mem_tmp1,contw				/* y */
+	call bn_zero
+	arg mem_p,contr
+	arg mem_tmp2,contw				/* a */
+	call memcpy24
+	copy regA,contr
+	arg mem_tmp3,contw				/* b */
+	call memcpy24
+bn_invmod_2:	
+	arg mem_tmp3,contr
+	call bn_eq_zero
+	branch bn_invmod_0,blank
+	arg mem_tmp3,regA
+	arg mem_tmp0,regB
+	call bn_rshifteven
+
+	arg mem_tmp2,regA
+	arg mem_tmp1,regB
+	call bn_rshifteven
+	arg mem_tmp3,regA
+	arg mem_tmp2,regB
+	call bn_bigeq
+	branch bn_invmod_1,positive
+	arg mem_tmp2,regA
+	arg mem_tmp3,regB
+	copy regA,contw
+	call bn_sub
+	arg mem_tmp0,regA
+	arg mem_tmp1,regB
+	copy regB,contw
+	call bn_add
+	ifetch 1,regA
+	iadd regC,regC
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB
+	branch bn_invmod_2
+bn_invmod_1:
+	arg mem_tmp3,regA
+	arg mem_tmp2,regB
+	copy regA,contw
+	call bn_sub
+	arg mem_tmp1,regA
+	arg mem_tmp0,regB
+	copy regB,contw
+	call bn_add
+	ifetch 1,regA
+	iadd regC,regC
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB
+	branch bn_invmod_2
+bn_invmod_0:
+	arg mem_tmp0,contw
+	call bn_zero
+	fetch 1,mem_tmp5
+	store 1,mem_tmp0
+	store 1,mem_tmp0a
+	arg mem_tmp0,regA
+	arg mem_tmp1,regB
+	copy regB,contw
+	call bn_addmod
+	arg mem_p,regA
+	arg mem_tmp1,regB
+	copy timeup,contw
+	branch bn_submod
+	
+
+
+	/* cost 64742 clks */
+ecdbl:
+	arg mem_cz,regA
+	arg mem_t2,contw
+	call bn_sqrmod
+	arg mem_t2,regA
+	arg mem_t3,contw
+	call bn_sqrmod
+	arg mem_a,regA
+	arg mem_t3,regB
+	arg mem_t3,contw
+	call bn_mulmod		/* t3=a*z4	*/
+	arg mem_cx,regA
+	arg mem_t2,contw
+	call bn_sqrmod
+	arg mem_t2,contr
+	arg mem_t1,contw
+	call memcpy24
+	arg mem_t1,regA
+	call bn_lshiftmod
+	arg mem_t2,regA
+	arg mem_t1,regB
+	arg mem_t2,contw
+	call bn_addmod
+	arg mem_t2,regA
+	arg mem_t3,regB
+	arg mem_t2,contw
+	call bn_addmod		/* t2=3*x2 + z*z4		D  */
+	arg mem_cx,contr
+	arg mem_t1,contw
+	call memcpy24
+	arg mem_cy,regA
+	arg mem_t3,contw
+	call bn_sqrmod
+	arg mem_t1,regA
+	call bn_lshiftmod
+	arg mem_t1,regA
+	call bn_lshiftmod
+	arg mem_t1,regA		
+	arg mem_t3,regB
+	arg mem_t1,contw
+	call bn_mulmod		/* t1=4x*y2	B	*/
+	arg mem_t3,regA
+	arg mem_t0,contw
+	call bn_sqrmod
+	arg mem_t0,regA
+	call bn_lshiftmod
+	arg mem_t0,regA
+	call bn_lshiftmod		
+	arg mem_t0,regA		
+	call bn_lshiftmod		/* t0=8*y4		C */
+	arg mem_cy,contr
+	arg mem_t3,contw
+	call memcpy24
+	arg mem_t3,regA
+	call bn_lshiftmod
+	arg mem_t3,regA
+	arg mem_cz,regB
+	arg mem_cz,contw
+	call bn_mulmod		
+	arg mem_t2,regA
+	arg mem_t3,contw
+	call bn_sqrmod
+	arg mem_t3,regA
+	arg mem_t1,regB
+	arg mem_t3,contw
+	call bn_submod
+	arg mem_t3,regA
+	arg mem_t1,regB
+	arg mem_cx,contw
+	call bn_submod
+	arg mem_t1,regA
+	arg mem_cx,regB
+	arg mem_t3,contw
+	call bn_submod
+	arg mem_t3,regA
+	arg mem_t2,regB
+	arg mem_t3,contw
+	call bn_mulmod		
+	arg mem_t3,regA
+	arg mem_t0,regB
+	arg mem_cy,contw
+	branch bn_submod
+	
+
+	/* cost 104904	clks */
+ecadd:
+	arg mem_az,regA
+	arg mem_t7,contw
+	call bn_sqrmod
+	arg mem_cx,regA
+	arg mem_t7,regB
+	arg mem_t0,contw
+	call bn_mulmod		/* n1=t0=xa*zb2  */
+	arg mem_az,regA
+	arg mem_t7,regB
+	arg mem_t7,contw
+	call bn_mulmod	
+	arg mem_cy,regA
+	arg mem_t7,regB
+	arg mem_t1,contw
+	call bn_mulmod		/* n2=t1=ya*zb3 */
+	arg mem_cz,regA
+	arg mem_t7,contw
+	call bn_sqrmod
+	arg mem_ax,regA
+	arg mem_t7,regB
+	arg mem_t2,contw
+	call bn_mulmod		/* n3=t2=xb*za2 */
+	arg mem_cz,regA
+	arg mem_t7,regB
+	arg mem_t7,contw
+	call bn_mulmod	
+	arg mem_ay,regA
+	arg mem_t7,regB
+	arg mem_t3,contw
+	call bn_mulmod		/* n4=t3=yb*za3 */
+	arg mem_t0,regA
+	arg mem_t2,regB
+	arg mem_t7,contw
+	call bn_submod		/* n5=t7=n1-n3=t0-t2 */
+	arg mem_t0,regA
+	arg mem_t2,regB
+	arg mem_t0,contw
+	call bn_addmod		/* n7=t0=n1+n3=t0+t2 */
+	arg mem_t1,regA
+	arg mem_t3,regB
+	arg mem_t2,contw
+	call bn_submod		/* n6=t2=n2-n4=t1-t3 */
+	arg mem_t1,regA
+	arg mem_t3,regB
+	arg mem_t1,contw
+	call bn_addmod		/* n8=t1=n2+n4=t1+t3 */
+	arg mem_t1,regA
+	arg mem_t7,regB
+	arg mem_t1,contw
+	call bn_mulmod		/* t1=n8*n5 */
+	arg mem_cz,regA
+	arg mem_az,regB
+	arg mem_t3,contw
+	call bn_mulmod	
+	arg mem_t3,regA
+	arg mem_t7,regB
+	arg mem_cz,contw
+	call bn_mulmod		/* z=za*zb*n5 */
+	arg mem_t7,regA
+	arg mem_t7,contw
+	call bn_sqrmod		/* t7=n5^2 */
+	arg mem_t7,regA
+	arg mem_t0,regB
+	arg mem_t3,contw
+	call bn_mulmod		/* t3=n5^2*n7 */
+	arg mem_t7,regA
+	arg mem_t1,regB
+	arg mem_t1,contw
+	call bn_mulmod		/* t1=n8*n5^3 */
+	arg mem_t2,regA
+	arg mem_cx,contw
+	call bn_sqrmod		
+	arg mem_cx,regA
+	arg mem_t3,regB
+	arg mem_cx,contw
+	call bn_submod		/* x=n6^2-n5^2*n7 */
+	arg mem_cx,contr
+	arg mem_t7,contw
+	call memcpy24
+	arg mem_t7,regA
+	call bn_lshiftmod		/* t7=2*x */
+	arg mem_t3,regA
+	arg mem_t7,regB
+	arg mem_t3,contw
+	call bn_submod		/* t3=n9 */
+	arg mem_t3,regA
+	arg mem_t2,regB
+	arg mem_t2,contw
+	call bn_mulmod		/* t2=n9*n6 */
+	arg mem_t2,regA
+	arg mem_t1,regB
+	arg mem_cy,contw
+	call bn_submod	
+	arg mem_cy,regA
+	arg mem_p,regB
+	arg mem_cy,contw
+	force 0,regC
+	fetch 1,mem_cy
+	isolate1 0,pdata
+	call bn_add,true
+	copy regC,alarm
+	arg mem_cy,regA
+	call bn_rshift6
+	fetch 1,mem_cy5
+	isolate1 0,alarm
+	setflag true,7,pdata
+	store 1,mem_cy5
+	rtn
+
+	/* cost 22276983 clks */
+
+eckp_0:	
+	fetch 1,mem_ec_loopc
+	increase -1,pdata
+	nrtn positive
+	store 1,mem_ec_loopc
+	fetch 1,mem_ec_infinite
+	call ecdbl,blank
+	fetch 1,mem_ec_loopc
+	arg mem_k,contr
+	call bn_testbit
+	branch eckp_0,true
+	fetch 1,mem_ec_infinite
+	nbranch eckp_1,blank
+	call ecadd
+	branch eckp_0
+eckp_1:
+	jam 0,mem_ec_infinite
+	arg mem_ax,contr
+	arg mem_cx,contw
+	call ec_copy
+	branch eckp_0
+
+	/* cost 162522 clks */
+ecunmapz:
+	arg mem_cz,regA
+	arg mem_t3,contw
+	call bn_invmod			/* t3 = 1/z */
+	arg mem_t3,regA
+	arg mem_t1,contw		
+	call bn_sqrmod			/* t1 = 1/z2 */
+	arg mem_cx,regA
+	arg mem_t1,regB
+	arg mem_bx,contw
+	call bn_mulmod
+	arg mem_t3,regA
+	arg mem_t1,regB
+	arg mem_t2,contw			
+	call bn_mulmod			/* t2 = 1/z3 */
+	arg mem_cy,regA
+	arg mem_t2,regB
+	arg mem_by,contw
+	branch bn_mulmod		
+	
+	
+
+sha_endian_swap2:	
+	ifetch 4,contr
+	force 4,regA
+	increase 3,contw
+sha_endian_loop:	
+	istore 1,contw
+	rshift8 pdata,pdata
+	increase -2,contw
+	increase -1,regA
+	nbranch sha_endian_loop,zero
+	increase 5,contw
+	loop sha_endian_swap2
+	rtn	
+
+
+sha_getw:
+	lshift2 queue,pdata
+	iadd timeup,contr
+	ifetch 4,contr
+	rtn
+	
+sha_r:
+	force 16,alarm
+	arg memdat,timeup
+sha_r_loop:	
+	add alarm,-7,queue
+	call sha_getw
+	iforce temp						/* W[t - 7] */
+	add alarm,-16,queue
+	call sha_getw
+	iadd temp,temp					/* W[t-7] + W[t-16] */
+	add alarm,-2,queue
+	call sha_getw
+	shasx pdata,1,pdata
+	iadd temp,temp					/* S1(W[t -  2]) + W[t-7] + W[t-16] */
+	add alarm,-15,queue
+	call sha_getw
+	shasx pdata,0,pdata
+	iadd temp,temp					/* S0(W[t - 15]) + S1(W[t -  2]) + W[t-7] + W[t-16] */
+	lshift2 alarm,pdata
+	iadd timeup,contw
+	istoret 4,contw
+	increase 1,alarm
+	compare 64,alarm,0xff
+	nbranch sha_r_loop,true
+	rtn
+	
+
+sha_init:
+	arg memh0,contr
+	force 7,regext_index
+sha_init_0:	
+	ifetch 4,contr
+	iforce regext
+	increase -1,regext_index
+	branch sha_init_0,positive
+	rtn
+
+sha:
+	bpatchx patch3d_4,mem_patch3d
+	call sha_r		/* preprocessing data into R() */
+	arg memahbak,contw
+	force 0,regext_index
+sha_0:	
+	deposit regext
+	istore 4,contw
+	increase 1,regext_index
+	compare 8,regext_index,0xff
+	nbranch sha_0,true
+	call enable_authrom
+	arg memk,timeup
+	arg memdat,alarm
+	force 64,loopcnt
+sha_loop:	
+	ifetcht 4,alarm
+	ifetch 4,timeup
+	increase 4,timeup
+	increase 4,alarm
+	iadd temp,pdata			/* x+K */
+	force 7,regext_index
+	iadd regext,temp			/* x+K+h */
+	force 4,regext_index
+	shasx regext,3,pdata
+	iadd temp,temp			/* temp = s3(e)+x+K+h */
+	force 5,regext_index
+	deposit regext
+	force 6,regext_index
+	ixor regext,pdata
+	force 4,regext_index
+	iand regext,pdata			/* (e & (f ^ g)) */
+	force 6,regext_index
+	ixor regext,pdata			/* F1(e, f, g) = g ^ (e & (f ^ g)) */
+	iadd temp,temp			/* temp1 = h + S3(e) + F1(e,f,g) + K + x */
+	force 7,regext_index
+	copy temp,regext			/* save to H */
+	force 3,regext_index
+	deposit regext
+	iadd temp,regext			/* save to D */
+	force 0,regext_index
+	deposit regext
+	force 1,regext_index
+	iand regext,temp			/* a & b */
+	ior regext,pdata			/* a | b */			
+	force 2,regext_index
+	iand regext,pdata			/* (c & (a | b)) */
+	ior temp,temp				/* F0:(a & b) | (c & (a | b)) */
+	force 0,regext_index
+	shasx regext,2,pdata
+	iadd temp,pdata			/* temp2 = S2(a) + F0(a,b,c) */
+	force 7,regext_index
+	iadd regext,regext			/* h = temp1 + temp2 */
+	regexrot					/* rotate move h,a-g => a-h */
+	loop sha_loop
+	arg memahbak,contr
+	force 0,regext_index
+sha_1:	
+	ifetch 4,contr
+	iadd regext,regext
+	increase 1,regext_index
+	compare 8,regext_index,0xff
+	nbranch sha_1,true
+	branch disable_authrom
+
+	
+sha_result:
+	arg   memresult,contw
+	force 7,regext_index
+sha_regext_save:
+	deposit regext
+	istore  4,contw 
+	increase -1,regext_index
+	branch   sha_regext_save,positive
+	rtn	
+
+pad_xor:
+//	arg memx_end,contr
+	arg      memdat,contw
+	increase -4,contr
+	sub      loopcnt,16,regA
+pad_xor_0:	    
+	ifetch   4,contr
+	ixor     temp,pdata
+	istore   4,contw	
+	increase -8,contr	
+	loop  pad_xor_0
+	copy     regA,loopcnt
+	deposit  temp
+pad_xor_1:	
+	istore 4,contw
+	loop pad_xor_1
+	rtn
+
+g_noninit_number_confirm:
+	call g_noninit0
+	call sha_result
+	branch g_common0
+
+g_noninit:
+	call g_noninit0
+	branch g_common0
+	
+g_noninit0:
+ 	arg      mem_sp_pubkey_remote_x_end,contr
+	arg      memdat,contw
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	arg      mem_sp_pubkey_local_x_end,contr
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	arg      mem_sp_random_remote_end,contr
+	call     memcpy_dword_swap4
+	call     sha_init
+	call     sha	
+ 	arg      mem_sp_random_local_end,contr
+	arg      memdat,contw
+	branch g_common
+	
+g_init:
+ 	arg      mem_sp_pubkey_local_x_end,contr
+	arg      memdat,contw
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	arg      mem_sp_pubkey_remote_x_end,contr
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	arg      mem_sp_random_local_end,contr
+	call     memcpy_dword_swap4
+	call     sha_init
+	call     sha	
+ 	arg      mem_sp_random_remote_end,contr
+	arg      memdat,contw
+	call g_common
+	branch g_common0
+	
+g_common:	
+	call     memcpy_dword_swap4
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	force    5,loopcnt
+	call memset0
+	setarg 640
+	istore 4,contw
+	branch sha
+g_common0:
+	fetch 4,memresult
+//	store 4,mem_gkey
+	arg 1000,rega
+	idiv rega
+	call wait_div_end
+	remainder pdata
+	store 4,mem_gkey
+	quotient pdata
+	arg 1000,rega
+	idiv rega
+	call wait_div_end
+	remainder pdata
+	arg 1000,rega
+	imul32 rega,pdata
+	fetcht 4,mem_gkey
+	iadd temp,pdata
+	store 4,mem_gkey
+	rtn
+
+function_f1_no_key:
+	jam 0,mem_passkey_1bit
+	branch function_f1_common
+	
+function_f1:
+	fetch 1,mem_ssp_mode_flag
+	bne  SSP_MODE_PASSKEY_ENTRY_FLAG,function_f1_no_key
+function_f1_common:
+	bpatchx patch3d_5,mem_patch3d
+	setarg   0x363636
+	lshift8  pdata,temp
+	or_into       0x36,temp
+	fetch 2,mem_sp_prarm_stack
+	copy pdata,contr
+	force    4,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	fetch 2,mem_sp_prarm_stack+2
+	copy pdata,contr
+	arg      memdat,contw
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	fetch 2,mem_sp_prarm_stack+4
+	copy pdata,contr
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	setarg   0x800000
+	istore   3,contw
+	
+	fetch 1,mem_passkey_1bit
+	
+	istore   1,contw
+	force    0,pdata
+	istore   8,contw
+	setarg   0x0388
+	istore   4,contw
+	call     sha
+	call     sha_result
+	arg      memresult,contr
+	arg      memahsave,contw 
+	call     memcpy32
+    
+	setarg   0x5c5c5c
+	lshift8  pdata,temp
+	or_into       0x5c,temp
+	fetch 2,mem_sp_prarm_stack
+	copy pdata,contr
+	force    4,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	arg      memahsave_end,contr
+	arg      memdat,contw
+	force    8,loopcnt
+	call     memcpy_dword_swap
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	call		bn_zero
+	setarg   0x0300
+	istore   4,contw
+	call     sha
+	branch     sha_result
+	
+	
+function_f2:
+	setarg   0x363636
+	lshift8  pdata,temp
+	or_into       0x36,temp
+	arg      mem_sp_dhkey_end,contr
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	fetch 2,mem_sp_prarm_stack+12
+	copy pdata,contr
+	arg      memdat,contw
+	call     memcpy_dword_swap4
+	fetch 2,mem_sp_prarm_stack+14
+	copy pdata,contr
+	call     memcpy_dword_swap4
+
+	setarg   0x62746c
+	lshift8  pdata,pdata
+	or_into       0x6b,pdata       
+	istore   4,contw
+	arg      mem_addr_value_end,contr
+	force    3,loopcnt
+	call     memcpy_dword_swap
+	
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	force    0,pdata
+	istore   8,contw
+	setarg   0x0380
+	istore   4,contw
+	call     sha
+
+	call     sha_result
+	arg      memresult,contr
+	arg      memahsave,contw 
+	call     memcpy32
+    
+	setarg   0x5c5c5c
+	lshift8  pdata,temp
+	or_into       0x5c,temp
+	arg      mem_sp_dhkey_end,contr 
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	arg      memahsave_end,contr
+	arg      memdat,contw
+	force    8,loopcnt
+	call     memcpy_dword_swap
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	call bn_zero
+	setarg   0x0300
+	istore   4,contw
+	call     sha
+	branch     sha_result
+	
+
+function_f3a:
+	fetch 1,mem_ssp_mode_flag
+	bne  SSP_MODE_PASSKEY_ENTRY_FLAG,function_f3a_no_pin
+function_f3a_common:
+	bpatchx patch3d_6,mem_patch3d
+	setarg   0x363636
+	lshift8  pdata,temp
+	or_into       0x36,temp
+	arg      mem_sp_dhkey_end,contr
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	arg      mem_sp_random_remote_end,contr
+	arg      memdat,contw
+	call     memcpy_dword_swap4
+	arg      mem_sp_random_local_end,contr
+	call     memcpy_dword_swap4
+	branch function_f3_common
+
+function_f3a_no_pin:
+	setarg 0
+	store 4,mem_pin
+	branch function_f3a_common
+
+function_f3b_no_pin:
+	setarg 0
+	store 4,mem_pin
+	branch function_f3b_common
+
+
+function_f3b:
+	fetch 1,mem_ssp_mode_flag
+	bne  SSP_MODE_PASSKEY_ENTRY_FLAG,function_f3b_no_pin
+function_f3b_common:
+	setarg   0x363636
+	lshift8  pdata,temp
+	or_into       0x36,temp
+	arg      mem_sp_dhkey_end,contr
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+
+	arg      mem_sp_random_local_end,contr
+	arg      memdat,contw
+	call     memcpy_dword_swap4
+	arg      mem_sp_random_remote_end,contr
+	call     memcpy_dword_swap4
+function_f3_common:    
+	setarg   0x0    
+	istore   8,contw
+	istore   4,contw
+	fetch 4,mem_pin
+	istore   4,contw
+	
+	copy     contw,temp
+	jam      0x80,mem_addr_padding
+	copy     temp,contw
+	arg      mem_addr_iocap_end,contr
+	call     memcpy_dword_swap4
+
+	call     sha
+    
+	arg      memdat,contw
+	force 7,loopcnt
+	call memset0
+	istore   4,contw
+	setarg   0x03F8
+	istore   4,contw
+	call     sha
+	call     sha_result
+	
+	arg      memresult,contr
+	arg      memahsave,contw 
+	call     memcpy32
+    
+	setarg   0x5c5c5c
+	lshift8  pdata,temp
+	or_into       0x5c,temp
+	arg      mem_sp_dhkey_end,contr 
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	arg      memahsave_end,contr
+	arg      memdat,contw
+	force    8,loopcnt
+	call     memcpy_dword_swap
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	call bn_zero
+	setarg   0x0300
+	istore   4,contw
+	call     sha	
+	branch     sha_result
+		
+/*
+eckp:
+	jam 192,mem_ec_loopc
+	jam 1,mem_ec_infinite
+*/
+eckp_calc_init:
+	jam      192,mem_ec_loopc
+eckp_calc_init_1:    
+	fetch    1,mem_ec_loopc
+	rtn      blank
+	increase -1,pdata
+	store    1,mem_ec_loopc 	
+	arg      mem_k,contr
+	call     bn_testbit
+	branch eckp_calc_init_1,true
+	arg      mem_ax,contr
+	arg      mem_cx,contw
+	branch     ec_copy	
+	
+eckp_calc:
+	call     ecdbl  
+	fetch    1,mem_ec_loopc
+	increase -1,pdata
+	store    1,mem_ec_loopc
+	arg      mem_k,contr
+	call     bn_testbit
+	rtn	true
+	branch     ecadd                
+	             
+memcpy_dword_swap4:
+	force 4,loopcnt
+memcpy_dword_swap:
+	increase -4,contr
+memcpy_dword_swap_loop:
+	ifetch   4,contr
+	istore   4,contw
+	increase -8,contr
+	loop   memcpy_dword_swap_loop 
+    	rtn
+
+	
+
+
+sp_initialize_256:	
+	bpatchx patch3d_7,mem_patch3d
+	fetch 1,mem_le_secure_connect_enable
+	branch  le_secure_connection_disable,blank
+	call le_secure_connection_enable
+	call sp_clear_flags
+//	jam SP_KEY_INVALID_256,mem_le_sc_local_key_invalid
+	branch sp_pubkey_calc_256
+    	
+
+
+
+sp_pubkey_calc_256:
+	fetch    1,mem_le_sc_local_key_invalid
+	rtnne SP_KEY_INVALID
+	fetch    1,mem_le_sc_calc
+	rtnne  SP_CALC_STANDBY
+	
+	arg      mem_le_private_key_256,contw 
+	force    15,queue
+	call     random_generator
+	random   pdata
+	rshift   pdata,pdata
+	istore   2,contw 
+
+	arg      mem_k_256,contw
+	arg      mem_le_private_key_256,contr	
+	call     memcpy32 //mem_sp_private_key=>mem_k 
+
+	arg      mem_ax_256,contw
+	arg      mem_gx_256,contr
+	call     memcpy64 //mem_gx=>mem_ax 
+	
+	arg      mem_az_256,contw
+	call      clear_mem_256
+	jam      1,mem_az_256 //0=>mem_az 
+
+	call     eckp_calc_init_256
+	jam SP_CALC_PUBKEY_256,mem_le_sc_calc
+	rtn    
+
+sp_pubkey_generated_256:
+	arg      mem_le_pubkey_local_x_256,contw
+	arg      mem_bx_256,contr
+	call     memcpy64   
+	jam      SP_KEY_VALID_256,mem_le_sc_local_key_invalid
+	jam      SP_CALC_STANDBY,mem_le_sc_calc
+	rtn
+	
+
+
+sp_dhkey_calc_256:
+	fetch    1,mem_sp_dhkey_invalid
+	rtnne  SP_KEY_INVALID
+	fetch    1,mem_le_sc_calc
+	rtnne  SP_CALC_STANDBY
+
+	arg      mem_k_256,contw
+	arg      mem_le_private_key_256,contr	
+	call     memcpy32
+
+	arg      mem_ax_256,contw
+	arg      mem_le_pubkey_remote_x_256,contr
+	call     memcpy64
+
+	arg      mem_az_256,contw
+	call     clear_mem_256
+	jam      1,mem_az_256 //0=>mem_az 
+
+	call     eckp_calc_init_256
+	jam     SP_CALC_DHKEY_256,mem_le_sc_calc
+	rtn 
+
+
+sp_dhkey_generated_256:
+//	jam SP_FLAG_COMMIT,mem_sp_dh_ready
+	arg mem_le_dhkey_256,contw
+	arg mem_bx_256,contr
+	call memcpy32
+	jam SP_KEY_VALID_256,mem_sp_dhkey_invalid
+	jam SP_CALC_STANDBY,mem_le_sc_calc
+	rtn
+
+
+
+sp_calc_sequence_256:
+	fetch 1,mem_le_secure_connect_enable
+	rtn blank
+	fetch 1,mem_le_sc_calc
+	rtn blank
+	increase 0x80,pdata
+	store    1,mem_le_sc_calc
+	rtnbit1 7
+	fetch    2,mem_ec_loopc
+	branch   sp_calc_sequence_done_256,blank
+	branch   eckp_calc_256
+
+sp_calc_sequence_done_256:    
+	bpatchx patch3e_0,mem_patch3e
+	call ecunmapz_256
+	fetch 1,mem_le_sc_calc
+	beq  SP_CALC_PUBKEY_256,sp_pubkey_generated_256
+	beq  SP_CALC_DHKEY_256,sp_dhkey_generated_256
+	rtn
+
+
+eckp_calc_256:
+	call     ecdbl_256  
+	fetch    2,mem_ec_loopc
+	increase -1,pdata
+	store    2,mem_ec_loopc
+	arg      mem_k_256,contr
+	call     bn_testbit
+	rtn	true
+	branch     ecadd_256   
+
+eckp_calc_init_256:
+	bpatchx patch3e_1,mem_patch3e
+	setarg 256,pdata
+	store 2,mem_ec_loopc
+eckp_calc_init_256_1:    
+	fetch    2,mem_ec_loopc
+	rtn      blank
+	increase -1,pdata
+	store    2,mem_ec_loopc
+	arg      mem_k_256,contr
+	call     bn_testbit
+	branch eckp_calc_init_256_1,true
+	arg      mem_ax_256,contr
+	arg      mem_cx_256,contw
+	branch     memcpy96	
+
+
+ecunmapz_256:
+	arg mem_cz_256,regA
+	arg mem_t3_256,contw
+	call bn_invmod_256			/* t3 = 1/z */
+	arg mem_t3_256,regA
+	arg mem_t1_256,contw		
+	call bn_sqrmod_256			/* t1 = 1/z2 */
+	arg mem_cx_256,regA
+	arg mem_t1_256,regB
+	arg mem_bx_256,contw
+	call bn_mulmod_256
+	arg mem_t3_256,regA
+	arg mem_t1_256,regB
+	arg mem_t2_256,contw			
+	call bn_mulmod_256			/* t2 = 1/z3 */
+	arg mem_cy_256,regA
+	arg mem_t2_256,regB
+	arg mem_by_256,contw
+	branch bn_mulmod_256	
+	
+ecdbl_256:
+	arg mem_cz_256,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod_256
+	arg mem_t2_256,regA
+	arg mem_t3_256,contw
+	call bn_sqrmod_256
+//call ice_break
+	arg mem_a_256,regA
+	arg mem_t3_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256		/* t3=a*z4	*/
+	arg mem_cx_256,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod_256
+//call ice_break
+	arg mem_t2_256,contr
+	arg mem_t1_256,contw
+	call memcpy32
+	arg mem_t1_256,regA
+	call bn_lshiftmod_256
+	arg mem_t2_256,regA
+	arg mem_t1_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod_256
+//call ice_break
+	arg mem_t2_256,regA
+	arg mem_t3_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod_256		/* t2=3*x2 + z*z4		D  */
+//call ice_break
+	arg mem_cx_256,contr
+	arg mem_t1_256,contw
+	call memcpy32
+	arg mem_cy_256,regA
+	arg mem_t3_256,contw
+	call bn_sqrmod_256
+	arg mem_t1_256,regA
+	call bn_lshiftmod_256
+	arg mem_t1_256,regA
+	call bn_lshiftmod_256
+	arg mem_t1_256,regA		
+	arg mem_t3_256,regB
+	arg mem_t1_256,contw
+	call bn_mulmod_256		//S = 4X1Y1^2/* t1=4x*y2	B	*/
+	arg mem_t3_256,regA
+	arg mem_t0_256,contw
+	call bn_sqrmod_256
+	arg mem_t0_256,regA
+	call bn_lshiftmod_256
+	arg mem_t0_256,regA
+	call bn_lshiftmod_256		
+	arg mem_t0_256,regA		
+	call bn_lshiftmod_256	//T = 8Y1^4	/* t0=8*y4		C */
+	arg mem_cy_256,contr
+	arg mem_t3_256,contw
+	call memcpy32
+	arg mem_t3_256,regA
+	call bn_lshiftmod_256
+	arg mem_t3_256,regA
+	arg mem_cz_256,regB
+	arg mem_cz_256,contw
+	call bn_mulmod_256		//z = 2Y1Z1
+
+
+	arg mem_t2_256,regA
+	arg mem_t3_256,contw
+	call bn_sqrmod_256   // M ^2
+//call ice_break
+	arg mem_t3_256,regA
+	arg mem_t1_256,regB
+	arg mem_t3_256,contw
+	call bn_submod_256  // t2^2 - 4*cx *cy^2 
+	arg mem_t3_256,regA
+	arg mem_t1_256,regB
+	arg mem_cx_256,contw
+	call bn_submod_256   //X2
+	arg mem_t1_256,regA
+	arg mem_cx_256,regB
+	arg mem_t3_256,contw
+	call bn_submod_256   //S-X2
+	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256	//M(S-X2)	
+	arg mem_t3_256,regA
+	arg mem_t0_256,regB
+	arg mem_cy_256,contw
+	branch bn_submod_256  //M(S-X2)-T Y2	
+
+ecadd_256:
+
+	arg mem_az_256,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod_256
+	arg mem_cx_256,regA
+	arg mem_t7_256,regB
+	arg mem_t0_256,contw
+	call bn_mulmod_256		/* n1=t0=xa*zb2 U1 = X1Z0^2*/
+
+
+	arg mem_az_256,regA
+	arg mem_t7_256,regB
+	arg mem_t7_256,contw
+	call bn_mulmod_256	
+	arg mem_cy_256,regA
+	arg mem_t7_256,regB
+	arg mem_t1_256,contw
+	call bn_mulmod_256		/* n2=t1=ya*zb3   S1 = Y1Z0^3*/
+
+
+	arg mem_cz_256,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod_256
+	arg mem_ax_256,regA
+	arg mem_t7_256,regB
+	arg mem_t2_256,contw
+	call bn_mulmod_256		/* n3=t2=xb*za2  U0 = X0Z1^2*/
+
+	arg mem_cz_256,regA
+	arg mem_t7_256,regB
+	arg mem_t7_256,contw
+	call bn_mulmod_256	
+	arg mem_ay_256,regA
+	arg mem_t7_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256		/* n4=t3=yb*za3 S0 = Y0Z1^3*/
+
+
+//	arg mem_t0_256,regA
+//	arg mem_t2_256,regB
+	arg mem_t0_256,regb
+	arg mem_t2_256,rega
+	arg mem_t7_256,contw
+	call bn_submod_256		/* n5=t7=n1-n3=t0-t2   W=U1-U0*/
+	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	call bn_addmod_256		/* n7=t0=n1+n3=t0+t2    T=U1+U0 */
+//	arg mem_t1_256,regA
+//	arg mem_t3_256,regB
+	arg mem_t1_256,regb
+	arg mem_t3_256,rega
+	arg mem_t2_256,contw
+	call bn_submod_256		/* n6=t2=n2-n4=t1-t3  S1-S0 */
+	arg mem_t1_256,regA
+	arg mem_t3_256,regB
+	arg mem_t1_256,contw
+	call bn_addmod_256		/* n8=t1=n2+n4=t1+t3 M=S1+S0*/
+	arg mem_t1_256,regA
+	arg mem_t7_256,regB
+	arg mem_t1_256,contw
+	call bn_mulmod_256		/* t1=n8*n5     MW */
+	arg mem_cz_256,regA
+	arg mem_az_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256	      //Z0Z1
+	arg mem_t3_256,regA
+	arg mem_t7_256,regB
+	arg mem_cz_256,contw
+	call bn_mulmod_256		/* z=za*zb*n5   Z0Z1W */
+
+	arg mem_t7_256,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod_256		/* t7=n5^2 */
+	arg mem_t7_256,regA
+	arg mem_t0_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256		/* t3=n5^2*n7 */
+	arg mem_t7_256,regA
+	arg mem_t1_256,regB
+	arg mem_t1_256,contw
+	call bn_mulmod_256		/* t1=n8*n5^3 */
+	arg mem_t2_256,regA
+	arg mem_cx_256,contw
+	call bn_sqrmod_256		
+	arg mem_cx_256,regA
+	arg mem_t3_256,regB
+	arg mem_cx_256,contw
+	call bn_submod_256		/* x=n6^2-n5^2*n7 */
+	arg mem_cx_256,contr
+	arg mem_t7_256,contw
+	call memcpy32
+	arg mem_t7_256,regA
+	call bn_lshiftmod_256		/* t7=2*x */
+	arg mem_t3_256,regA
+	arg mem_t7_256,regB
+	arg mem_t3_256,contw
+	call bn_submod_256		/* t3=n9 */
+	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_mulmod_256		/* t2=n9*n6 */
+	arg mem_t2_256,regA
+	arg mem_t1_256,regB
+	arg mem_cy_256,contw
+	call bn_submod_256	
+	arg mem_cy_256,regA
+	arg mem_p_256,regB
+	arg mem_cy_256,contw
+	force 0,regC
+	fetch 1,mem_cy_256
+	isolate1 0,pdata
+	call bn_add_256,true
+	copy regC,alarm
+	arg mem_cy_256,regA
+	call bn_rshift_256
+	fetch 1,mem_cy5_256
+	isolate1 0,alarm
+	setflag true,7,pdata
+	store 1,mem_cy5_256
+	rtn	
+
+bn_invmod_256:
+	copy contw,timeup					 
+	arg mem_tmp0_256,contw			 
+	call clear_mem_256
+	force 0,pdata
+//	store 4,mem_tmp52
+	store 4,mem_t2_256
+	jam 1,mem_tmp0_256      //y1
+	arg mem_tmp1_256,contw	//y2			 
+	call clear_mem_512      
+	arg mem_p_256,contr
+	arg mem_tmp2_256,contw		//j		 
+	call memcpy32
+	copy regA,contr
+	arg mem_tmp3_256,contw		//i		 
+	call memcpy32
+	
+//	arg mem_tmp22,regA
+//	arg mem_tmp32,regB
+//	call p_bn_bigeq_256
+//	branch assert,positive
+bn_invmod_256_2:	
+	arg mem_tmp3_256,contr
+	call bn_eq_zero_256
+	branch bn_invmod_256_0,blank
+//call ice_break    	
+//fetch 1,0x4ffe
+//increase 1,pdata
+//store 1,0x4ffe
+	arg mem_tmp3_256,regA
+	arg mem_tmp0_256,regB
+	call bn_rshifteven_256
+	arg mem_tmp2_256,regA
+	arg mem_tmp1_256,regB
+	call bn_rshifteven_256
+	
+	arg mem_tmp3_256,regA
+	arg mem_tmp2_256,regB
+	call bn_bigeq_256
+	branch bn_invmod_256_1,positive
+	arg mem_tmp2_256,regA
+	arg mem_tmp3_256,regB
+	copy regA,contw
+	call bn_sub_256
+	arg mem_tmp0_256,regA
+	arg mem_tmp1_256,regB
+	copy regB,contw
+	call bn_add_256
+	ifetch 1,regA
+	iadd regC,regC
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB
+	branch bn_invmod_256_2
+bn_invmod_256_1:
+	arg mem_tmp3_256,regA
+	arg mem_tmp2_256,regB
+	copy regA,contw
+	call bn_sub_256
+	arg mem_tmp1_256,regA
+	arg mem_tmp0_256,regB
+	copy regB,contw
+	call bn_add_256
+	ifetch 1,regA
+	iadd regC,regC
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB
+	branch bn_invmod_256_2
+bn_invmod_256_0:
+//call ice_break
+	arg mem_tmp1_256,regA
+	copy timeup,contw
+	call  bn_p256mod
+//call ice_break
+	arg mem_p_256,regA
+	copy timeup,regB
+	copy timeup,contw
+	branch bn_submod_256
+
+
+bn_mulmod_256:
+	copy contw,timeup					/* save result ptr */
+	
+	force 0,regext_index
+	
+	arg mem_tmp1_256,contw
+	call clear_mem_512
+	arg mem_regext,contw
+	call clear_mem_512
+//	jam 0,mem_regext_index
+
+//	arg mem_tmp12,contw
+	copy regA,contr
+//	force 0,regext_index
+	jam 0,mem_regext
+	setarg 0
+	call bn_load_mem
+	copy regB,contr
+	call bn_load_256
+//	force 0,regB
+//	jam 0,mem_regb
+	force 0,queue
+	arg mem_tmp1_256,contw	
+bn_mulmod_256_1:	
+//	copy regb,pdata
+//	store 1,
+	arg mem_regext,temp
+	copy queue,regb
+	lshift2 regb,pdata
+//	lshift4 pdata,pdata
+	iadd temp,regb	
+	force 0,temp
+	force 0,regC
+bn_mulmod_256_0:
+//	copy contw,pdata
+//	store 2,mem_contw
+//call ice_break
+//	copy pdata,contw
+	ifetch 4,contw					/* d[i+j] */
+	iforce regA
+//	copy regB,regext_index
+//	deposit regext
+	ifetch 4,regb
+	copy regC,regext_index
+	imul32 regext,pdata
+	iadd regA,pdata					/* uv = a[i]*b[j] + d[i+j] */
+	iadd temp,pdata					/* uv += u */
+	istore 4,contw					/* ->d[i+j] */
+	rshift32 pdata,temp				/* temp = u = uv >> 32 */
+	increase 1,regC
+	compare 8,regC,0xff
+	nbranch bn_mulmod_256_0,true
+//call ice_break
+	deposit temp
+	istore 4,contw					/* d[i + 12] = u */
+	increase -32,contw
+//	fetch 1,mem_regb
+//	copy pdata,regb
+	increase 1,queue
+	compare 8,queue,0xff
+	nbranch bn_mulmod_256_1,true
+	arg mem_tmp1_256,regA
+	copy timeup,contw
+	branch bn_p256mod
+
+bn_p256mod:
+	bpatchx patch3e_2,mem_patch3e
+	copy contw,timeup				/* save result ptr */
+	copy regA,alarm				/* temp save regA */
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	call memset0_4	
+	istore 8,contw
+	add regA,44,contr
+	call memcpy8
+	call memcpy12
+	copy regb,rega
+	call  bn_lshiftmod_256 //2S1
+	arg mem_tmp2_256,regB
+	copy alarm,rega   
+	copy timeup,contw
+	call bn_addmod_256 //T+2S1
+//call ice_break	
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	call memset0_4	
+	istore 8,contw
+	add alarm,48,contr
+	call memcpy16
+	call memset0_4	
+	copy regb,rega
+	call  bn_lshiftmod_256 //2S2
+//call ice_break	
+//	arg 0,regB
+
+	arg mem_tmp2_256,regB
+	copy timeup,rega   
+	copy regA,contw	
+	call bn_addmod_256  //+2S2
+//call ice_break	
+//	arg 0,regB
+		
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,32,contr
+	call memcpy12
+	call memset0_4	
+	istore 8,contw
+	add alarm,56,contr
+	call memcpy8
+	copy timeup,regA
+	copy regA,contw
+	call bn_addmod_256 //+S3
+//call ice_break	
+//	arg 0,regB
+
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,36,contr
+	call memcpy12
+	add alarm,52,contr	
+	call memcpy12
+	add alarm,52,contr
+	call memcpy4
+	add alarm,32,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	call bn_addmod_256 //+S4	
+//call ice_break	
+//	arg 1,regB
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,44,contr
+	call memcpy12
+	call memset0_4	
+	istore 8,contw
+	add alarm,32,contr
+	call memcpy4
+	add alarm,40,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	call bn_submod_256 //-D1	
+//call ice_break	
+//	arg 2,regB
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,48,contr
+	call memcpy8
+	call memcpy8
+	force 0,pdata
+	istore 8,contw
+	add alarm,36,contr
+	call memcpy4
+	add alarm,44,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	call bn_submod_256 //-D2	
+//call ice_break	
+//	arg 3,regB
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,52,contr
+	call memcpy12
+	add alarm,32,contr
+	call memcpy12
+	call memset0_4	
+	add alarm,48,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	call bn_submod_256 //-D3
+//call ice_break	
+//	arg 4,regB
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,56,contr
+	call memcpy8
+	call memset0_4	
+	add alarm,36,contr
+	call memcpy12
+	call memset0_4	
+	add alarm,52,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	branch  bn_submod_256 //-D4	
+
+
+bn_load_mem:
+	force 32,loopcnt
+	arg mem_regext,contw
+	iadd contw,contw
+	branch memcpy
+
+bn_load_256:
+	force 8,loopcnt
+	branch bn_load_0
+
+bn_sqrmod_256:
+	copy regA,regB
+	branch bn_mulmod_256
+
+bn_add_256:
+	force 8,loopcnt
+ 	branch bn_add+1
+
+bn_addmod_256:
+	call bn_add_256
+	copy contw,regA
+	branch bn_lshiftmod_ismod_256
+
+bn_lshiftmod_256:
+	call bn_lshift_256
+bn_lshiftmod_ismod_256:	
+	isolate1 0,regC
+	branch bn_lshiftmod_p_256,true
+	arg mem_p_256,regB
+	copy regA,regC
+	increase -32,regA
+	call bn_bigeq_256
+	nrtn positive
+	copy regC,regA
+	branch sub_p2_256
+	
+bn_lshiftmod_p_256:
+	call sub_p2_256
+//	nrtn true
+	copy regA,regC
+	increase -32,regA
+	arg mem_p_256,regB
+	call bn_bigeq_256
+	nrtn positive
+	copy regC,regA
+	branch sub_p2_256
+		
+	
+sub_p2_256:
+	increase -32,regA
+	arg mem_p_256,regB
+	copy regA,contw
+	branch bn_sub_256
+	
+
+
+	
+bn_submod_256:
+	call bn_sub_256
+//	isolate1 0,regC
+	branch  bn_submod_256_np,true
+//	copy regA,regC
+//	increase -32,regA
+	add contw,-32,regA
+	arg mem_p_256,regB
+	call bn_bigeq_256
+	nrtn positive
+	arg mem_p_256,regB
+	add contw,-32,regA
+//	copy regC,regA
+	copy rega,contw
+	branch  bn_sub_256
+bn_submod_256_np:	
+	add contw,-32,regA
+	arg mem_p_256,regB
+	copy regA,contw
+	call bn_add_256
+//	isolate1 0,regC
+	rtn true
+	add contw,-32,regA
+	arg mem_p_256,regB
+	copy regA,contw
+	branch bn_add_256	
+
+
+ 
+bn_sub_256:
+	force 8,loopcnt
+	branch bn_sub+1
+
+bn_rshift_256:
+	force 8,loopcnt
+	increase 28,regA
+	branch bn_rshift
+
+bn_lshift_256:
+	force 8,loopcnt
+	force 0,regC
+	branch bn_lshift_0
+
+bn_bigeq_256:
+	force 8,loopcnt
+	increase 28,regA
+	increase 28,regB
+	branch bn_bigeq_0
+
+
+bn_eq_zero_256:
+	ifetch 8,contr
+	nrtn blank
+	branch bn_eq_zero
+
+
+
+	
+bn_rshifteven_256:
+	copy regA,alarm
+bn_rshifteven_256_1:
+	copy alarm,regA
+	ifetch 1,regA
+	isolate1 0,pdata
+	rtn true
+	call bn_rshift_256
+	ifetch 1,regB
+	isolate0 0,pdata
+	branch bn_rshifteven_256_0,true
+	arg mem_p_256,regA
+	copy regB,contw
+	call bn_add_256
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB						 
+	increase -32,regB
+bn_rshifteven_256_0:
+	add regB,32,regA
+	force 9,loopcnt
+	call bn_rshift
+	branch bn_rshifteven_256_1		
+
+
+
+ui_init:
+	call lpm_disable_exen_output
+	rtn wake
+	call ui_button_init
+	call ui_timer_init
+	branch ui_led_init_global
+
+ui_dispatch:
+	call ui_led_dispatch
+	
+	branch ui_timer_check
+	
+ui_button_init:
+	fetch 1,mem_ui_button_gpio
+	rtneq UI_BUTTON_GPIO_DISABLE
+	iforce temp
+	call gpio_config_output
+	fetcht 1,mem_ui_button_gpio
+	call gpio_out_inactive
+	nop 100
+	fetcht 1,mem_ui_button_gpio
+	call gpio_config_input
+	branch ui_button_polling
+
+
+	
+ui_button_polling:
+	bpatchx patch3e_3,mem_patch3e
+	fetch 1,mem_ui_button_gpio
+	rtneq UI_BUTTON_GPIO_DISABLE
+	copy pdata,temp
+	call gpio_get_bit
+	nbranch ui_button_up,true
+	//fall through
+ui_button_down:
+	call ui_button_check_long_press
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BTN_DOWN
+	store 2,mem_ui_state_map
+	fetch 1,mem_ui_button_last_state
+	rtneq UI_BUTTON_STATE_DOWN
+	jam UI_BUTTON_STATE_DOWN,mem_ui_button_last_state
+	//Down Edge
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_ui_button_timer //start long press timer
+	call lpm_button_get_wake_lock
+	jam BT_EVT_BUTTON_DOWN,mem_fifo_temp
+	branch ui_ipc_send_event
+ui_button_up:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BTN_DOWN
+	store 2,mem_ui_state_map
+	fetch 1,mem_ui_button_last_state
+	rtneq UI_BUTTON_STATE_UP
+	jam UI_BUTTON_STATE_UP,mem_ui_button_last_state
+	//Up Edge
+	jam 0,mem_ui_button_timer//stop long press timer
+	call lpm_button_clean_wake_lock
+	jam BT_EVT_BUTTON_UP,mem_fifo_temp
+	branch ui_ipc_send_event
+
+ui_button_check_long_press:
+	fetch 1,mem_ui_button_timer
+	rtn blank
+	increase -1,pdata
+	store 1,mem_ui_button_timer
+	nrtn blank
+	//Long Press
+	jam BT_EVT_BUTTON_LONG_PRESSED,mem_fifo_temp
+	branch ui_ipc_send_event
+
+lpm_button_get_wake_lock:
+	arg wake_lock_button,queue
+	branch lpm_get_wake_lock
+	
+lpm_button_clean_wake_lock:
+	arg wake_lock_button,queue
+	branch lpm_put_wake_lock
+
+
+
+/***********************ui led function****************************/
+/******************
+led function
+
+ui_led_init_global
+ui_led_on_global
+
+ui_led_off_global
+//input:rega :struct number
+ui_led_blink_start_global
+
+//input:rega :struct number
+//contr: the point that want to set led style address
+ui_led_set_style_global
+
+******************/
+//input:rega :struct number
+//output:regb :current strutct starting pointer
+calc_curr_struct_prt:
+	fetch 2,mem_ui_led_struct_ptr
+	mul32 rega,LED_OFFSET_LENGTH,regb
+	iadd regb,regb
+	rtn
+
+
+ui_led_init_global:
+	fetch 1,mem_ui_led_struct_num
+	rtn blank
+	copy pdata,loopcnt
+	fetch 2,mem_ui_led_struct_ptr
+	copy pdata,regb
+ui_led_init_loop:
+	add regb,LED_OFFSET_LED_GPIO,regc
+	ifetcht 1,regc
+	call gpio_config_output
+	call ui_led_off_static
+	increase LED_OFFSET_LENGTH,regb
+	loop ui_led_init_loop
+	rtn
+
+	
+//input:rega :struct number
+ui_led_on_global:
+	call calc_curr_struct_prt
+	setarg UI_LED_STATE_LIGHTING
+	istore 1,regb
+	call ui_led_stop_timer
+	branch ui_led_on_static
+
+	
+//input:rega :struct number
+ui_led_blink_stop_global:
+ui_led_off_global:
+	call calc_curr_struct_prt
+	setarg UI_LED_STATE_DARKING
+	istore 1,regb
+	call ui_led_stop_timer
+	branch ui_led_off_static
+
+
+//input:rega :struct number
+ui_led_blink_start_global:
+	call calc_curr_struct_prt
+	setarg UI_LED_STATE_BLINK_START
+	istore 1,regb
+	setarg LED_INFINITE_FLASH_NUM
+	istore 1,contw
+	branch ui_led_off_static
+
+
+//input:rega :struct number
+//REGC: the point that want to set led style address
+ui_led_set_style_global:
+	call calc_curr_struct_prt
+	arg LED_OFFSET_LENGTH,loopcnt
+	copy regc,contr
+	copy regb,contw
+	branch memcpy_fast
+
+
+
+ui_led_dispatch:
+	fetch 1,mem_ui_led_struct_num
+	rtn blank
+	arg 0,rega
+ui_led_blink_polling:
+	call ui_led_change_style_by_type
+	increase 1,rega
+	fetch 1,mem_ui_led_struct_num
+	isub rega,null
+	rtn zero
+	branch ui_led_blink_polling
+
+
+ui_led_off_static:
+	add regb,LED_OFFSET_LED_GPIO,regc
+	ifetcht 1,regc
+	branch gpio_out_inactive
+
+
+ui_led_on_static:
+	add regb,LED_OFFSET_LED_GPIO,regc
+	ifetcht 1,regc
+	branch gpio_out_active
+
+
+//input:rega :struct number
+ui_led_change_style_by_type:
+	add rega,ui_led_blink,queue
+	call timer_check
+	nrtn blank			//timer out
+	
+	call calc_curr_struct_prt
+
+	ifetch 1,regb			//led type
+
+	beq UI_LED_STATE_LIGHTING,ui_led_on_static
+	beq UI_LED_STATE_DARKING,ui_led_off_static
+	beq UI_LED_STATE_BLINK_STOP,ui_led_off_static
+	beq UI_LED_STATE_BLINK_DARKING,ui_led_blink_state_darking
+ui_led_blink_state_lighting:
+	call ui_led_on_static
+	add regb,LED_OFFSET_CB_LEDON,regc
+	call push_stack
+	ifetch 2,regc
+	call callback_func
+	call pop_stack
+	setarg UI_LED_STATE_BLINK_DARKING
+	istore 1,regb
+	add regb,LED_OFFSET_ON_TIME,regc
+	ifetch 2,regc
+	branch ui_led_blink_timer_start
+	
+
+ui_led_blink_state_darking:
+	call ui_led_off_static
+	add regb,LED_OFFSET_CB_LEDOFF,regc
+	call push_stack
+	ifetch 2,regc
+	call callback_func
+	call pop_stack
+	
+	add regb,LED_OFFSET_BLINK_COUNT,regc
+	ifetch 1,regc
+	beq LED_INFINITE_FLASH_NUM,ui_led_blink_infinite
+	increase -1,pdata
+	istore 1,regc
+	branch ui_led_blink_stop_global,blank		//End of flicker
+ui_led_blink_infinite:
+	setarg UI_LED_STATE_BLINK_LIGHTING
+	istore 1,regb
+	add regb,LED_OFFSET_OFF_TIME,regc
+	ifetch 2,regc
+ui_led_blink_timer_start:
+	add rega,ui_led_blink,queue
+	branch timer_init
+
+ui_led_stop_timer:
+	setarg 0
+	branch ui_led_blink_timer_start
+
+/***********************ui led function ending****************************/
+
+
+
+ui_timer_timeout:
+	setarg 0x1000
+	lshift16 pdata,pdata
+	iadd regb,regb
+	rtn
+	
+ui_timer_check:
+	bpatchx patch3e_4,mem_patch3e
+	arg 0,rega
+	fetcht 4,mem_ui_timer_last_btclk
+	copy clkn_bt,regb
+	copy regb,pdata
+	isub temp,null
+	ncall ui_timer_timeout,positive
+	//call ice_break
+ui_timer_check_loop:
+	copy regb,pdata
+	increase 160,temp    //320btclk = 100ms
+	increase 160,temp
+	isub temp,null
+	nbranch ui_timer_check_end,positive
+	increase 1,rega   //increase 1 every 100ms count
+	and rega,0x0f,pdata
+	nbranch ui_timer_check_loop,blank
+	arg 0,rega  //reset timer if it's longer than 1.5s between 2 checks
+	call ui_timer_check_send_evt
+ui_timer_init:
+	copy clkn_bt,pdata
+	store 4,mem_ui_timer_last_btclk
+	rtn
+ui_timer_check_end:
+	bpatchx patch3e_5,mem_patch3e
+	copy rega,pdata
+	rtn blank
+	increase -160,temp    //320btclk = 100ms
+	increase -160,temp
+	set0 28,temp
+	storet 4,mem_ui_timer_last_btclk
+ui_timer_check_send_evt:
+	branch app_evt_timer
+
+	
+
+//**********************************************************//
+//************UI Inter-Processor Communication*******//
+//**********************************************************//
+ui_ipc_get_lock:
+	jam 1,mem_ipc_lock_bt
+ui_ipc_get_lock_wait:
+	fetch 1,mem_ipc_lock_c51
+	nbranch ui_ipc_get_lock_wait,blank
+	rtn
+	
+ui_ipc_put_lock:
+	jam 0,mem_ipc_lock_bt
+	rtn
+	
+
+	
+ui_ipc_send_event:
+	bpatchx patch3e_6,mem_patch3e
+	call ui_ipc_get_lock
+	copy rega,pdata
+	store 4,mem_ipc_rega_temp
+	arg mem_ipc_fifo_bt2c51,rega
+	call fifo_in
+	fetch 4,mem_ipc_rega_temp
+	copy pdata,rega
+	branch ui_ipc_put_lock
+
+ui_ipc_send_cmd:
+	bpatchx patch3e_7,mem_patch3e
+	call ui_ipc_get_lock
+	copy rega,pdata
+	store 4,mem_ipc_rega_temp	
+	arg mem_ipc_fifo_c512bt,rega
+	call fifo_in
+	fetch 4,mem_ipc_rega_temp
+	copy pdata,rega	
+	branch ui_ipc_put_lock
+
+ui_ipc_clean_all_fifo:
+	setarg 0
+	store UTIL_FIFO_LEN,mem_ipc_fifo_c512bt
+	store UTIL_FIFO_LEN,mem_ipc_fifo_bt2c51
+	rtn
+	
+check_51cmd:
+	bpatchx patch3f_0,mem_patch3f
+	fetch 1,mem_hci_cmd
+	nrtn blank
+	arg mem_ipc_fifo_c512bt,rega
+	call fifo_is_empty
+	rtn blank
+	jam IPC_CONTINUE_PROCESS,mem_ipc_skip_continue_proc
+	call check_51cmd_once
+	fetch 1,mem_ipc_skip_continue_proc
+	branch check_51cmd,blank
+	rtn
+
+check_51cmd_once:
+	call ui_ipc_get_lock
+	arg mem_ipc_fifo_c512bt,rega
+	call fifo_out
+	copy pdata,temp
+	call ui_ipc_put_lock
+	bpatchx patch3f_1,mem_patch3f
+	copy temp,pdata
+	rtn blank
+ 	beq BT_CMD_START_DISCOVERY,check_51cmd_start_discovery
+  	beq BT_CMD_STOP_DISCOVERY,check_51cmd_stop_discovery
+  	beq BT_CMD_RECONNECT,check_51cmd_reconnect
+  	beq BT_CMD_ENTER_SNIFF_SUBRATING,check_51cmd_enter_sniff_subrating
+  	beq BT_CMD_EXIT_SNIFF_SUBRATING,check_51cmd_exit_sniff_subrating
+  	beq BT_CMD_SNIFF_TEST,check_51cmd_sniff_test
+	beq BT_CMD_START_INQUIRY,check_51cmd_inq
+	beq BT_CMD_STOP_INQUIRY,check_51cmd_stop_inq
+	beq BT_CMD_START_ADV,check_51cmd_adv
+	beq BT_CMD_STOP_ADV,check_51cmd_stop_adv
+	beq BT_CMD_START_DIRECT_ADV,check_51cmd_direct_adv
+	beq BT_CMD_STOP_DIRECT_ADV,check_51cmd_stop_direct_adv
+	beq BT_CMD_LED_OFF,check_51cmd_led_off
+	beq BT_CMD_LED_ON,check_51cmd_led_on
+	beq BT_CMD_LED_BLINK,check_51cmd_led_start_blink
+	beq BT_CMD_LE_START_CONN,check_51cmd_le_start_con
+	beq BT_CMD_LE_START_SCAN,check_51cmd_start_scan
+	beq BT_CMD_LE_STOP_SCAN,check_51cmd_stop_scan
+	beq BT_CMD_ENTER_HIBERNATE,check_51cmd_hibernate
+	beq BT_CMD_LE_SMP_SECURITY_REQUEST,check_51cmd_le_smp_sec_req
+	beq BT_CMD_BB_RECONN_CANCEL,check_51cmd_bb_reconn_cancel
+	//context related, process in context
+	store 1,mem_fifo_temp
+	bpatchx patch3f_2,mem_patch3f
+	call lmo_fifo_check
+	nbranch check_51cmd_restore,blank  //process this cmd next time while lmo fifo is full
+check_51cmd_once_continue:
+	fetch 1,mem_fifo_temp
+	bmark0 mark_context,check_51cmd_check_idle
+	beq BT_CMD_DISCONNECT,check_51cmd_disconnect
+  	beq BT_CMD_ENTER_SNIFF,cmd_in_sniff
+  	beq BT_CMD_EXIT_SNIFF,cmd_exit_sniff
+  	beq BT_CMD_SET_PIN_CODE,check_51cmd_pincode
+	beq BT_CMD_LE_DISCONNECT,check_51cmd_le_disconnect
+	beq BT_CMD_LE_UPDATE_CONN,check_51cmd_ble_update_connect_param
+	beq BT_CMD_ROLE_SWITCH,check_51cmd_role_switch
+	beq BT_CMD_STORE_RECONN_INFO_LE,eeprom_store_le_reconn_info
+	beq BT_CMD_STORE_RECONN_INFO_BT,eeprom_store_bd_reconn_info
+	beq BT_CMD_DHKEY_NOT_ACCEPT,check_51cmd_dhkey_not_accept
+	beq BT_CMD_STORE_RECONN_INFO,check_51cmd_store_reconn_info
+	rtn
+
+check_51cmd_check_idle:
+	store 1,mem_fifo_temp
+  	call context_check_idle
+	branch check_51cmd_restore,zero
+	call context_search_plap
+	nrtn zero
+check_51cmd_restore:
+	jam IPC_SKIP_CONTINUE_PROCESS,mem_ipc_skip_continue_proc
+	branch ui_ipc_send_cmd
+  
+ /******************** 51COMMAND*********************/
+
+//command opcode 0x01	
+check_51cmd_start_discovery:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_DISCOVERY
+	store 2,mem_ui_state_map
+	jam 3,mem_scan_mode
+	rtn
+
+
+//command opcode 0x02	
+check_51cmd_stop_discovery:
+	jam 0,mem_hid_handshake_timer_count
+	jam 0,mem_scan_mode
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BT_DISCOVERY
+	store 2,mem_ui_state_map
+	rtn	
+
+
+//command opcode 0x03	
+check_51cmd_reconnect:	
+	jam hci_cmd_create_conn,mem_hci_cmd
+	rtn	
+
+
+//command opcode 0x04
+check_51cmd_disconnect:
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam OTHER_END_TERMINATED,mem_disconn_reason_send
+	rtn
+
+	
+//command opcode 0x07
+check_51cmd_enter_sniff_subrating:
+	rtn
+
+
+//command opcode 0x08
+check_51cmd_exit_sniff_subrating:
+	rtn	
+
+
+//command opcode 0x09
+check_51cmd_sniff_test:
+	rtn	
+
+
+//command opcode 0x10
+check_51cmd_pincode:
+	jam pincode_state_pincode_ready,mem_pincode_state
+	branch cmd_pair
+
+
+//command opcode 0x11
+check_51cmd_inq:
+	rtn
+
+
+//command opcode 0x12
+check_51cmd_stop_inq:
+	rtn
+
+
+//command opcode 0x13
+check_51cmd_adv:
+	jam ON,mem_le_adv_enable
+	jam ADV_IND,mem_le_adv_type
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BLE_ADV,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+
+//command opcode 0x14
+check_51cmd_stop_adv:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BLE_ADV,pdata
+	store 2,mem_ui_state_map
+	jam OFF,mem_le_adv_enable
+	rtn
+
+
+//command opcode 0x15
+check_51cmd_direct_adv:
+	jam ON,mem_le_adv_enable
+	jam ADV_DIRECT_IND,mem_le_adv_type
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BLE_ADV,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+
+//command opcode 0x16
+check_51cmd_stop_direct_adv:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BLE_ADV,pdata
+	store 2,mem_ui_state_map
+	jam OFF,mem_le_adv_enable
+	rtn
+
+
+//command opcode 0x17
+check_51cmd_le_disconnect:
+	setarg 20 // 100ms
+	store 2,mem_le_superto
+	store 2,mem_le_init_superto
+	branch le_send_terminate_ind_user_terminated
+
+
+//command opcode 0x18
+check_51cmd_ble_update_connect_param:
+	branch le_l2cap_tx_update_req
+
+
+//command opcode 19
+check_51cmd_led_off:
+	arg 0,rega
+	branch ui_led_off_global
+
+
+//command opcode 20
+check_51cmd_led_on:
+	arg 0,rega
+	branch ui_led_on_global
+
+
+//command opcode 21
+check_51cmd_led_start_blink:
+	arg 0,rega
+	branch ui_led_blink_start_global
+
+
+//command opcode 0x22
+check_51cmd_le_start_con:
+	jam ON,mem_le_scan_enable
+	jam hci_cmd_le_create_conn,mem_hci_cmd
+//	fetch 6,mem_app_peer_addr
+//	store 6,mem_le_conn_peer_addr
+	rtn
+
+
+//command opcode 0x23
+check_51cmd_start_scan:
+	jam ON,mem_le_scan_enable
+	rtn
+
+
+//command opcode 0x24
+check_51cmd_stop_scan:
+	jam OFF,mem_le_scan_enable
+	jam 0,mem_hci_cmd
+	rtn
+
+
+//command opcode 0x25
+check_51cmd_hibernate:
+	fetch 2,mem_cb_before_hibernate
+	call callback_func
+	fetch 1,mem_ui_button_gpio
+	beq UI_BUTTON_GPIO_DISABLE,check_51cmd_hibernate_btn_disabled
+	copy pdata,temp
+	call gpio_config_input
+check_51cmd_hibernate_btn_disabled:
+	call ui_ipc_clean_all_fifo
+	branch lpm_hibernate	
+
+
+//command opcode 0x27
+check_51cmd_le_smp_sec_req:
+	branch le_send_smp_security_request
+
+
+//command opcode 0x29
+check_51cmd_role_switch:
+  	jam LMP_SLOT_OFFSET,mem_lmo_opcode2
+	set1 mark_switch_initiated,mark
+	nrtn master
+	jam SWITCH_FLAG_INIT,mem_switch_flag
+	jam LMP_SWITCH_REQ ,mem_lmo_opcode2
+	fetch 1,mem_connection_options
+	set0 CONNECTION_SWITCH,pdata
+	store 1,mem_connection_options
+	rtn
+
+
+//command opcode 0x30
+check_51cmd_bb_reconn_cancel:
+	force page_length_timer,queue
+	branch timer_stop
+
+
+//command opcode 0x33
+check_51cmd_dhkey_not_accept:
+	call tid_set_reply
+	jam LMP_DHKey_Check,mem_lmi_opcode2
+	branch parse_lmp_dhkey_check_reject	
+
+
+ui_check_paring_button:
+	fetch 1,mem_ui_state_map
+	rtnbit0 UI_STATE_BTN_DOWN
+	rtnbit0 UI_STATE_BT_RECONNECT
+	branch check_51cmd_bb_reconn_cancel
+
+
+
+///////////queue function////////////
+queue_init:
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_CURR_NUM,contw
+	setarg 0
+	istore 3,contw
+	rtn
+	
+//input:rega:the address of the data to which you want to input queue
+//output:if user is disable,mean queue no have space
+queue_push:
+	call disable_user
+	call queue_full
+	rtn blank
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_CURR_NUM,regb
+	ifetcht 1,regb
+	increase 1,temp
+	istoret 1,regb	//number add 
+	
+	ifetcht 1,pdata	//temp:each length
+	copy temp,loopcnt
+	add pdata,QUEUE_OFFSET_WRITE_PTR,regb
+	ifetch 1,regb
+	imul32 temp,pdata	//offset
+	iadd contr,contw
+	copy rega,contr
+calc_queue_next_ptr:
+	call memcpy
+	call queue_get_size
+	pincrease -1
+	ifetcht 1,regb
+	increase 1,temp
+	iand temp,temp
+	istoret 1,regb
+	branch enable_user
+
+
+//input:rega:the address of the data to which you want to output queue
+//output:if user is disable,mean queue no have data
+queue_pop:
+	call disable_user
+	call queue_empty
+	rtn blank
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_CURR_NUM,regb
+	ifetcht 1,regb
+	increase -1,temp
+	istoret 1,regb
+	ifetcht 1,pdata		//each size
+	copy temp,loopcnt
+	add pdata,QUEUE_OFFSET_READ_PTR,regb
+	ifetch 1,regb
+	imul32 temp,pdata	//offset
+	iadd contr,contr
+	increase 1,contr
+	copy rega,contw
+	branch calc_queue_next_ptr
+
+
+//output:if blank is 1,mean queue is empty
+queue_empty:
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_CURR_NUM,contr
+	ifetch 1,contr
+	rtn
+
+//output:if blank is 1,mean queue is full
+queue_full:
+	call queue_get_size
+	ifetcht 1,contr
+	isub temp,pdata
+	rtn
+
+//output:pdata is queue size
+queue_get_size:
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_LENGTH,contr
+	ifetch 1,contr
+	rtn
+
+///////////queue function end////////////
+
+
+
+
+
+right_shift_n: //rshiftN pdata,pdata
+	sub loopcnt,0,null
+	rtn zero
+right_shift_n_loop: 
+	rshift pdata,pdata
+	loop right_shift_n_loop
+	rtn
+
+/* lshift. 0:1 byte; 1:2byte; 2:4byte; 3:8byte; 4:16byte*/
+left_shift_n:
+	force 1,pdata
+	sub loopcnt,0,null
+	rtn zero
+left_shift_n_loop:
+	lshift pdata,pdata
+	loop left_shift_n_loop
+	rtn
+push_stack:
+	deposit contw
+	store 2, mem_contw
+	storet 8,mem_temp
+	deposit timeup
+	store 4,mem_timeup
+	call push_stack_rega_b_c
+	deposit contr
+	store 2, mem_contr
+	rtn
+
+push_stack_rega_b_c:
+	deposit rega
+	store 4, mem_rega
+	deposit regb
+	store 4, mem_regb
+	deposit regc
+	store 3, mem_regc
+	rtn
+
+pop_stack:
+	fetcht 8,mem_temp
+	fetch 4,mem_timeup
+	iforce timeup
+	call pop_stack_rega_b_c
+	fetch 2, mem_contw
+	iforce contw
+	fetch 2, mem_contr
+	iforce contr
+	rtn
+
+pop_stack_rega_b_c:
+	fetch 4, mem_rega
+	iforce rega
+	fetch 4, mem_regb
+	iforce regb
+	fetch 3,mem_regc
+	iforce regc
+	rtn
+
+get_contw:
+	fetch 2,mem_contw
+	copy pdata,contw
+	rtn
+get_contr:
+	fetch 2,mem_contr
+	copy pdata,contr
+	rtn
+store_contw:
+	copy contw,pdata
+	store 2,mem_contw
+	rtn
+store_contr:
+	copy contr,pdata
+	store 2,mem_contr
+	rtn	
+	
+
+//
+save_cont_pointers:
+	copy contw,pdata
+	store 2,mem_hold_contw
+	copy contr,pdata
+	store 2,mem_hold_contr
+	rtn
+load_cont_pointers:
+	fetch 2,mem_hold_contw
+	copy pdata,contw
+	fetch 2,mem_hold_contr
+	copy pdata,contr
+	rtn
+
+memcpy96:
+	call memcpy32
+memcpy64:
+	call memcpy32
+	branch memcpy32
+memcpy12:
+	call memcpy8
+memcpy4:
+	ifetch 4,contr
+	istore 4,contw
+	rtn	
+memcpy8:
+	ifetch 8,contr
+	istore 8,contw
+	rtn	
+
+memcpy48:
+	call memcpy16
+memcpy32:
+	call memcpy8
+memcpy24:
+	call memcpy8
+memcpy16:
+	call memcpy8
+	branch memcpy8
+
+
+
+delay_10ms:
+	arg 10,loopcnt
+delay_ms_wait:
+	nop 12000
+	loop delay_ms_wait
+	rtn
+
+bn_zero:
+	force 3,loopcnt
+memset0:
+	force 0,pdata
+memset8:
+	istore   8,contw
+	loop   memset8
+	rtn
+
+memset0_8:
+	force 0,pdata
+	istore 8,contw
+	rtn
+memset0_4:
+	force 0,pdata
+	istore 4,contw
+	rtn	
+	
+clear_mem_256:
+	force 4,loopcnt
+	branch memset0 
+clear_mem_512:
+	force 8,loopcnt
+	branch memset0 
+
+clear_mem:
+	deposit loopcnt
+	rtn blank
+	setarg 0
+clear_mem_loop:
+	istore 1,contw
+	loop clear_mem_loop
+	rtn
+	
+
+clear_temp_block:
+	arg 32,loopcnt
+	arg mem_temp_block0,contw
+	branch clear_mem
+	
+xor_loop:
+	ifetch   4,regc
+	ifetcht 4,rega
+	ixor     temp,pdata
+	istore   4,contw	
+	increase 4,rega
+	increase 4,regc
+	loop  xor_loop
+	rtn
+	
+// 11 22 -> 22 11; 11 22 33 -> 33 22 11 
+// rega:data addr ;loopnct:length
+inverse_data:
+	bpatchx patch3f_3,mem_patch3f
+	copy loopcnt,pdata
+	sub pdata,1,null
+	rtn positive
+	iadd rega,regb	
+	increase -1,regb
+	rshift loopcnt,loopcnt
+inverse_loop:
+	ifetcht 1,rega
+	ifetch 1,regb
+	istore 1,rega
+	istoret 1,regb
+	increase -1,regb
+	increase 1,rega
+	loop inverse_loop
+	rtn
+
+
+memcpy_fast:
+	deposit loopcnt
+	rtn blank
+memcpy_fast_loop:
+	increase -8,loopcnt
+	call memcpy8,positive
+	rtn zero
+	branch memcpy_fast_loop,positive
+	increase 8,loopcnt
+memcpy_fast_loop_four:
+	increase -4,loopcnt
+	call memcpy4,positive
+	rtn zero
+	branch memcpy_fast_loop_four,positive
+	increase 4,loopcnt
+	branch memcpy
+ 
+memcpy:
+	deposit loopcnt
+	rtn blank
+memcpy_loop:
+	ifetch 1,contr
+	istore 1,contw
+	loop memcpy_loop
+	rtn
+
+timer_stop:
+	setarg 0
+timer_init:
+	rshift clkn_bt,temp
+	storet 4,mem_last_clkn
+	arg mem_timers,contw
+	iforce temp
+	lshift queue,pdata
+	iadd contw,contw
+	istoret 2,contw
+	bpatchx patch3f_4,mem_patch3f
+	rtn
+
+timer_check_timeout:
+	arg 0x800,timeup
+	lshift16 timeup,timeup
+	iadd timeup,pdata
+	rtn
+
+
+timer_reinit:
+	arg 0,queue
+timer_check:
+	bpatchx patch3f_5,mem_patch3f
+	fetcht 4,mem_last_clkn
+	rshift clkn_bt,pdata
+	store 4,mem_last_clkn	
+	isub temp,null
+	ncall timer_check_timeout,positive	
+	isub temp,timeup
+	copy timeup,temp
+	arg mem_timers,contr
+	copy contr,contw
+	arg 16,loopcnt
+timer_loop:
+	ifetch 2,contr
+	isub temp,pdata
+	branch timer_counting,positive
+	force 0,pdata
+timer_counting:
+	istore 2,contw
+	loop timer_loop	
+	arg mem_timers,contr
+	lshift queue,pdata
+	iadd contr,contr
+	ifetch 2,contr
+	rtn
+
+
+
+	/* pdata 28+16 bit add temp 26+16 bit, result in temp */
+clk_add:
+	iadd temp,temp
+	copy temp, loopcnt
+	setarg 3750
+	isub loopcnt,pdata
+	rtn positive
+	sub pdata,0,pdata
+	rshift16 temp,temp
+	increase 1,temp
+	lshift16 temp,temp
+	ior temp,temp
+	rtn
+
+clk_diff_rt:
+	call clk_diff
+	branch clk2rt
+
+/* pdata -temp -> pdata, all are 28+16 bits, set user if negative */
+clk_diff:
+	disable user
+	isub temp,pdata
+	branch clk_diff_pos,positive
+	enable user
+	sub pdata,0,pdata
+clk_diff_pos:
+	rtnbit0 15
+	arg -61786,temp
+	iadd temp,pdata
+	set0 64,pdata
+	rtn
+
+clk2rt:
+	iforce contr
+	rshift16 pdata,pdata
+	arg 3750,temp
+	imul32 temp,pdata
+	iadd contr,pdata
+	rtn
+
+	/* pdata = clks in, temp = lpo out */
+clk2lpo:
+	lshift8 pdata,pdata
+	lshift4 pdata,pdata
+	fetcht 3,mem_clks_per_lpo
+	idiv temp
+	call wait_div_end
+	quotient temp
+	rtn
+
+	/* rt clk -> bt+rt clk */
+clk2bt:
+	arg 3750,temp
+	idiv temp
+	call wait_div_end
+	quotient pdata
+	lshift16 pdata,pdata
+	remainder temp
+	ior temp,temp
+	rtn
+
+
+
+//input:contru 
+//output:temp
+//used register: temp regc
+string2dec_from_uart:
+	arg 0,temp
+string2dec_from_uart_done:
+         copy temp,regc
+	ifetch 1,contru
+	call uchar2dialog	
+	copy regc,temp
+	call swap
+	arg 10,regb
+	imul32 regb,pdata
+	iadd temp,pdata
+	copy pdata,temp
+	loop string2dec_from_uart_done
+	rtn
+	
+
+
+uchar2dialog:
+	arg 0x3a,temp
+	isub temp,null
+	nbranch uchar2dialog_number,positive
+	arg 0x61,temp
+	isub temp,null
+	branch uchar2dialog_a2f,positive
+	arg 0x37,temp
+	isub temp,pdata
+	rtn
+uchar2dialog_number:
+	arg 0x30,temp
+	isub temp,pdata
+	rtn
+uchar2dialog_a2f:
+	arg 0x57,temp
+	isub temp,pdata
+	rtn
+
+pn9:
+	copy temp,alarm
+	setarg 0x1ff
+	force 0,regb
+pn9_loop:	
+	rshift3 pdata,rega
+	rshift rega,rega
+	ixor rega,rega
+	isolate1 0,rega
+	setflag true,9,pdata
+	rshift temp,temp
+	isolate1 0,pdata
+	setflag true,7,temp
+	rshift pdata,pdata
+	increase 1,regb
+	compare 0,regb,0x7
+	nbranch pn9_loop,true
+	istoret 1,contw
+	loop pn9_loop
+	copy alarm,temp
+	rtn
+
+
+wait_div_end:	
+	rtn modone
+	branch wait_div_end
+
+
+
+//input:
+//	count:loopcnt str1:rega str2:regb
+//output:
+//	same:set falg true ,diff set falg false
+// using:
+//	reg:temp null flag:zero
+compare_loop:
+string_compare:
+	ifetch 1,rega
+	ifetcht 1,regb
+	isub temp,null
+	nrtn zero
+	increase 1,rega
+	increase 1,regb
+	loop string_compare
+	force 0,null
+	rtn
+
+	/* pdata = temp if pdata > temp */
+ceiling:
+	isub temp,null
+	nrtn positive
+	deposit temp
+	rtn
+	
+swap:
+	iadd temp,pdata
+	isub temp,temp
+	isub temp,pdata
+	rtn
+
+clean_mem:
+	arg 0x200,loopcnt
+	arg 0x4000,contw
+	branch memset0				// clear xram at boot
+
+	//cb function ptr in pdata
+callback_func:
+	rtn blank
+	copy pdata,pc	//rtn through cb functon.
+	//branch assert
+
+wait_uarttx:
+	hfetch 2,core_uart_txitems
+	nbranch wait_uarttx,blank
+	rtn
+
+ice_break:
+	jam 0x1,core_ice_ctrl
+	rtn
+
+ice_setbp:
+	hstore 2,core_ice_break0
+	hfetch 1,core_ice_ctrl
+	set1 4,pdata
+	hstore 1,core_ice_ctrl
+	rtn
+ice_setbp2:
+	hstore 2,core_ice_break1
+	hfetch 1,core_ice_ctrl
+	set1 6,pdata
+	hstore 1,core_ice_ctrl
+	rtn
+	
+ice_set_write_bp:
+	hstore 2,core_ice_break0
+	jam 0x30,core_ice_ctrl
+	rtn
+	
+
+
+test_enable_white:
+	hfetch 1,core_config
+	set0 whiteoff_bit,pdata
+	hstore 1,core_config			/* whitening on */
+	rtn
+
+check_uart_tx_buff:
+	hfetch 2,core_uart_txitems
+	arg UART_AIR_CONTROL_THRESHOLD,temp
+pdata_sub_temp:
+	isub temp,null
+	rtn
+
+	//fuction fifo_in
+	//rega pointer to fifo memory , *(rega+len) is the end of fifo
+	//mem_fifo_temp data into fifo
+	//assert if fifo was full
+fifo_in:
+	bpatchx patch3f_6,mem_patch3f
+	ifetcht UTIL_FIFO_LEN,rega
+	and temp,0xff,pdata
+	nbranch fifo_in_push,blank
+	rshift8 temp,pdata
+	istore UTIL_FIFO_LEN,rega
+fifo_in_push:
+	increase UTIL_FIFO_LEN+UTIL_FIFO_OFFSET,rega
+	ifetch 1,rega
+	nbranch assert,blank //fifo full
+	fetch 1,mem_fifo_temp
+	istore 1,rega
+	rtn
+	
+	//fuction fifo_out
+	//rega pointer to fifo memory
+	//pdata  data from fifo, blank mains fifo empty
+fifo_out:
+	bpatchx patch3f_7,mem_patch3f
+	arg UTIL_FIFO_LEN,loopcnt
+	ifetch UTIL_FIFO_LEN,rega
+	rtn blank
+fifo_out_loop:
+	ifetch 1,rega
+	nbranch fifo_out_end,blank
+	increase 1,rega
+	loop fifo_out_loop
+	branch assert
+fifo_out_end:
+	arg 0,temp
+	istoret 1,rega
+	rtn
+
+	//fuction fifo_is_empty
+	//rega pointer to fifo memory
+	//blank--- fifo is empty
+fifo_is_empty:
+	ifetch UTIL_FIFO_LEN,rega
+	rtn
+
+	//fuction fifo_is_full
+	//rega pointer to fifo memory
+	//blank--- fifo is NOT full
+fifo_is_full:
+	ifetch 1,rega
+	rtn
+	//rega pointer to fifo memory
+	//blank--- fifo is NOT near full
+fifo_is_near_full:
+	ifetch 2,rega
+	rtn
+
+	//rega pointer to fifo memory
+	//count output via pdata
+fifo_content_count:
+	arg 0,temp
+fifo_content_count_loop:
+	fetch 1,contr
+	loop fifo_content_count_loop,blank
+	increase 1,temp
+	loop fifo_content_count_loop
+	copy temp,pdata
+	rtn
+	
+not_greater_than:
+	isub temp,null
+	nrtn positive
+	copy temp,pdata
+	rtn
+
+
+disable_positive:
+	force -1,null
+	rtn
+enable_positive:
+disable_zero:
+	force 1,null
+	rtn
+enable_zero:
+	force 0,null
+	rtn
+
+enable_user:
+	enable user
+	rtn
+	
+disable_user:
+	disable user
+	rtn
+	
+enable_user2:
+	enable user2
+	rtn
+	
+disable_user2:
+	disable user2
+	rtn
+
+disable_blank:
+	setarg 1
+	rtn
+
+enable_blank:
+	setarg 0
+	rtn
+
+
+reverse_byte:
+	copy loopcnt,pdata
+	rtn blank
+	copy contr,pdata
+	iadd loopcnt,pdata
+	increase -1,pdata
+	copy pdata,contr	
+reverse_loop:
+	ifetch 1,contr
+	increase -2,contr
+	istore 1,contw
+	loop reverse_loop
+	rtn
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/bt_program23.rom
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/bt_program23.rom	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/bt_program23.rom	(working copy)
@@ -0,0 +1,32766 @@
+11000010100001000000000000010011
+11000000000000000000000000101000
+11000000000000001000000000101011
+11000000000000010000000000110011
+11000000010000101000010001110110
+11000000010001001000010001000111
+11000000010001010000010001111000
+11000000010100001000000000111100
+11000000010110001000000001000001
+11000000010110010000000001001011
+11000000011000100000001011001111
+11000000011001001000001100110000
+11000000011001010000001100110100
+11000000011100011000001111000101
+11000000011100110000001111010001
+11000000011101010000001111011010
+11000000011101011000001111011111
+11000000011101100000001111110000
+00100000001000000010101010001110
+11000000000111111000000000010110
+11000000010001100000001111110100
+00100000001000000010101010001110
+01110000100010010000111100110110
+01110000100010010000101101011111
+01111000001110110111110000000000
+01110000100010010001010000000111
+01101000000000001100000111100000
+00100000011110100000000000000000
+01110000100010010000101010111000
+00100000011000000000000000000000
+00011111111000100010001000000000
+01101000000010001100110001110000
+01011000000000000100110001110111
+10011000010000001000101000000000
+00011010001000100111111000000000
+11100000101000001000000000000000
+00011000010000001000010000000001
+00011000010000010000010000000111
+01100000000010001100110001110000
+00100000011000000000000000000000
+01101000000100001000000100111011
+01100000000000001100101100100110
+00100000001000000010000000000010
+11011000101000000000100110101110
+11011111001000000000000000001100
+00100000010000000111111011010100
+00100000010000000110101000000011
+00100000010000000101110011110110
+00100100010101011010110001100101
+00100000010000000111110011001101
+00100000001000000010000000001100
+00100000010101011011001011100011
+00100000010000000111010101101010
+00100000010101011010101101000001
+00100000010000000111011011011100
+01101000000000001100011001011010
+00100000001110100010000000010010
+01101000000000001100010110110001
+00100000001110100000000000110110
+00100000001000000010000000010010
+01011000000000000000101000000110
+01100000000000011100010100010000
+01011000000000000001110110000111
+01100000000000010100010100010011
+00100000001000000010101010100010
+11000110000100110000000000000000
+01101000000000001100011110011100
+00100000001110100111111111101111
+01101000000000001100011111000100
+11000000000000001111111111101111
+01101000000000010100001001001000
+00100100001110100111111111101111
+01101000000000001100100000000110
+00100100001110100111111111101111
+00100000001000000111111111110001
+11000110100100110000000000000000
+01101000000000001100110011110101
+11000000000000001000000001011100
+00100000010000000000000011100101
+00100100001101000000000001110001
+00100000010000000000000011001100
+00100000010000000000000100000111
+01101000000000001100101111000101
+11000001111111111000000000000000
+00100000010000000000010000011010
+00100000010000000000000001110111
+00100100011101000000000000000000
+00100000010000000000001011000000
+01011000000000001110110001010100
+00100000010000000111111101001001
+01100000000010100100000101011011
+00100000001000000010101100101010
+00100000010000000000001010001100
+00100100011101000000000000000000
+00100000010000000000000001101000
+00100000001000000000000001001110
+01110000010011001111010100000000
+01110000010011001111011000000000
+01110000010010111111000000000000
+01101000000000001100101111011011
+01100000000000001100101111011010
+00100000011000000000000000000000
+01101000000000001100101111011100
+00100000001000000000000001100100
+01101000000000001100101111110000
+00011111111000001111111000000001
+01100000000000001100101111110000
+11000000000000100000000001100110
+11000000000000101000000001100010
+00100000011000000000000000000000
+01110000010011001111010100000001
+01110000010011001111011000000000
+00100000011000000000000000000000
+01101000000000001100101111100001
+00100000010110100000000010000000
+00100000010000000000000001110111
+00100100011101000000000000000000
+01101000000000011100101111100100
+00100000001000000000000001011001
+01111000001101000111110000000000
+00100000010000000010101011111010
+01101000000000011100000101101111
+00100000001110100111111111101001
+01101000000000001100000010010001
+00100000001110100111111111101001
+01101000000000001100110011110101
+11000000000000001111111111101001
+00100000001000000000001011000011
+01110000010010111110000100000001
+01110000010011001110101000000000
+00100000010000000000000010010100
+01100000000000001100101101010001
+01011000000000000000000000000000
+01100000000000111100101101010010
+01101000000000100100101111101100
+01100000000000100100101101011001
+01110000010010111011010100001100
+01101000000000001100101110110110
+01111001001000000111111000000011
+01100000000000001100101110110110
+00100000010000000000000011101000
+00100000001000000000000001010001
+00100000010000000110100010101000
+01101000000000100100000010100000
+01100000000000100100101111101100
+00100000011000000000000000000000
+01110000010011001110101100000001
+01110000010011001110110100000000
+01101000000000001100101110110110
+00011111111000010111111000000111
+01100000000000001100101110110110
+00100000011000000000000000000000
+01101000000000001100101110110110
+01111001001000000111111000000100
+01100000000000001100101110110110
+01100000000000001100101101110001
+00100000011000000000000000000000
+01101000000000001100101110110110
+01111001001111111111111000000100
+01100000000000001100101110110110
+00100000011000000000000000000000
+00100000010000000000010000010000
+01101000000000001100110011101100
+11000000000000001000000010100110
+11000000000000010000000010101010
+00100000011000000000000000000000
+01110000010011001110110100000010
+01110000010011001110100100000000
+01110000010011001110101100000000
+00100000001000000000000010010100
+01110000010011001110101000000000
+00100000001000000000000010100111
+01101000000000010100101110111011
+00011111111000001111111000000001
+01100000000000010100101110111011
+11000010100000110000000101001010
+01101000000000001100110011101010
+11000000000000001000000010110101
+01110000010011001110101000000001
+01101000000000001100110011101010
+11000000100000001000000010010100
+01101000000000001100110011101000
+00011111111000001111111000000001
+01100000000000001100110011101000
+11000000000000100000000010111100
+00100000010000000000001000000100
+01110000010010111111101000000010
+00100000001000000000000100000111
+00100000010000000000010000010000
+01110000010011001110100000000000
+00100000001000000000000010010100
+01110000010011001110110100000010
+01110000010011001110101100000001
+01110000010011001110101000000000
+00100000001000000000000010010100
+01101000000000001100110011101100
+11000000000000011000000011000000
+01101000000000001100101110110110
+00101111111011000000000000000100
+00100000001000001000000010010010
+01101000000000001100110011101100
+11000000000000001000000010111111
+11000000000000010000000011000000
+00100000011000000000000000000000
+01101000000000001100101111000101
+11000001111111111000000000000000
+00100000010000000000000011010001
+00100100010101100000000011011001
+00100000011000000000000000000000
+01111000010101100111110000000000
+01101000000000001100110011101011
+11000001100000001000000000000000
+01101000000000001100110011101101
+11000001100000000000000000000000
+01110000010011001110110000000001
+01110000010010111111101000000100
+00100000001000000111111111101011
+01101000000000001100110011101101
+00100000001110100000000011100000
+00011111111000001111111111111111
+01100000000000001100110011101101
+01110000010011001110110000000010
+01110000010010111111101000000100
+00100000001000000000001000000100
+01110000010011001110110000000011
+01101000000000001100110011101010
+00100100001110100000000010110011
+01110000010010111111101000000010
+00100000001000000000001000000100
+01101000000000001100101111000101
+11000000111111111000000101011110
+00100000010000000000000011101011
+00100000010000000000000111110010
+01110000010010111011101000000001
+00100000011000000000000000000000
+01101000000000010100110011100110
+00100000010000000111111110011100
+00100000001101000000000011110001
+01101000000000111100101101010010
+00100000011110100000000000000000
+00100000001000000111111111100111
+01110000010010111110000100000000
+00011010001000001111111000000001
+01100000000000001100101110110101
+00100000010000000000000010010100
+01100000000000001100101101010001
+11101000101010001000000000000000
+11101010010000001000000000000000
+10011000010000011111111000000000
+11100000101000001000000000000000
+00011010010000001010010000000001
+11101010010000100000000000000000
+11100000101000100000000000000000
+00011010010000001010010000000100
+11011000101000000100101101010111
+11011111001000000000000000000010
+11101010010000001000000000000000
+11101000101010001000000000000000
+10011000010000001111111000000000
+11100000101000001000000000000000
+00011010010000001010010000000001
+11000010000000000000000100000000
+00100000011000000000000000000000
+01110000010010111011111000000000
+11011001011000000000110100000000
+00110100011100110000001000000000
+00100000010000000000000100100011
+01101000000000001100101111110001
+11000001000000001000000000000000
+00100100001011000000000100110010
+00100100001101111000000100110010
+00100000010000000000000100011110
+00100000010000000000000101001110
+00100000010000000000010000001100
+01101000000000001100101110110100
+00011111111000001111111000000001
+01100000000000001100101110110100
+01101000000000001100101111000101
+11000000111111111000000100100001
+00100000010000000000000011000011
+01011000000000000000000000000000
+01100000000000010100101110111011
+01100000000000001100101110111101
+01100000000000001100110011101001
+01110000010010111011101000000000
+00100000011000000000000000000000
+11011111001000000000000000000100
+11011000101000000100101101010001
+00100000001000000111111011000110
+00100000010000000000010000001001
+00100000001000000000000101111000
+01111000010101111111110000000000
+00100000010000000000001001101011
+01101000000000001100101111110001
+11000000000000001000000100110000
+00011000000000000010101000000000
+01101000000000100100101111011101
+10011000000000000001001000000000
+01101000000010001000000000010111
+00100000010000000010100100011111
+00100000010000000010100100100100
+00100000010000000000001000100111
+00100000010101111000001001100011
+00100000011000000000000000000000
+00100000010000000000001001100011
+00100000001000000000000100010010
+01101000000000001100101110111101
+00011111111000001111111000000001
+01100000000000001100101110111101
+01101000000000001100101111000101
+11000000111111111000000101000110
+01101000000010001100101110111110
+00011000010000001000010000000001
+01100000000010001100101110111110
+01101000000000001100101111111010
+10011000010001100111111000000000
+00100100001110100000000100001000
+01101000000000001100110011101100
+11000000000000011000000010101100
+01101000000000001100110011101001
+00011111111000001111111000000001
+01100000000000001100110011101001
+11000000000000010000000010100001
+00100000010000000000000010011000
+01110000010010111111101000000001
+00100000001000000000000100000111
+01101000000000001100101110111101
+11000001111111111000000000000000
+01110000010010111011110100000000
+00100000001000000000000101001100
+01011000000000000000000000000000
+01100000000000010100101110111011
+01110000000010101001100100111010
+00100000001000000111110110000110
+00100000010000000000000111010111
+01101000000000001100101110110011
+00100000011110100000000000000000
+10011000000000000111001000000000
+11011000110000000100101100110001
+11011000101000000100101110010011
+00100000001000000111111100000001
+01111001001000000000000000100110
+00100000010000000000000101011001
+01110000010010111100010100000001
+00100000011000000000000000000000
+01110000010000011101111000100000
+01110000010010111011010000000000
+01110000010010111011111101001110
+01101000000000100100101111000001
+00100000001000000000000111100100
+01101000000000001100101110111010
+11000000000000001111111111100111
+01101000000000001100101111000101
+11000000000000001000000101100101
+11000000000000010000000101101000
+11000000000000011000000101101011
+00100000001000000010101010001100
+01110000010010111100010100010001
+01110000000100011001111010101010
+00100000001000000000000101101101
+01110000010010111100010100010010
+01110000000100011001111001010101
+00100000001000000000000101101101
+01110000010010111100010100010011
+01110000000100011001111000100010
+01101000000000001100101110110110
+00011111111000010111111000000111
+01100000000000001001000110011111
+01101000000000100100101111101100
+01100000000000100001000110100000
+01110000000100011010010000000000
+11011010001000000001000110011110
+11011000010000000000000000000111
+00100000010000000000000111010010
+00100000010000000000000011101000
+00100000001000000111111111100111
+01101000000000001100101111000101
+11000001011111111000000000000000
+11000000000010001000000101111110
+11000000000010010000000110000000
+11000000000010011000000110000010
+00100000011000000000000000000000
+01110000010010111100010100000010
+00100000001000000000000100011000
+01110000010010111100010100000011
+00100000001000000000000100011000
+01110000010010111100010111111111
+01110000000010101001100100111001
+00100000010000000111110110000110
+01101000000000100100101110010101
+00100000010000000000000111100100
+00100000001000000000000100011000
+01111001001111111000000000100110
+00100000010000000000000111001000
+01101000000000001100101111000101
+11000001111111111000000000000000
+00100000010000000000000110011101
+01011000000000000000000000000000
+01100000000000010100101111100010
+00100000010000000010101011111010
+00100000000000000000011111010000
+01101000000000001100101111100010
+11000000011111111000000101001100
+00100000010000000000000100100011
+00100100001011000000000110100110
+00100100001101111000000110100110
+01111001001000000000000000100110
+01011000000000000000000000000000
+01100000000000010100101111100010
+01110000000010101001100100111100
+00100000010000000111110110000110
+00100000010000000000000100011110
+00100000001000000000000001101110
+01110000000100011001111011111111
+01101000000000001100101110110110
+01100000000000001001000110011111
+01101000000000100100101111101100
+01100000000000100001000110100000
+11011000010000000000000000000110
+11011010001000000001000110011110
+00100000010000000000000111010010
+00100000001000000000000111110010
+01101000000000010100101111100010
+00011111111000001111111000000001
+01100000000000010100101111100010
+00100000010000000000001000000100
+00100000001000000000000110001111
+01111001001111111000000000100110
+00100000010000000000000111000110
+00100000010000000000000110011101
+01110000010010111110001000000000
+00100000010000000010101011111010
+00100000000000000000011111010000
+01101000000000001100101111100010
+11000000011111111000000101001100
+00100000010000000000000100100011
+00100100001011000000000110111100
+00100100001101111000000110111100
+00100000010000000000000101001110
+01101000000000100100101111011101
+01101000000010100100101111000001
+10011000010001100111110000000000
+00100000001000101000000101010101
+00100000001000000000000110010110
+01101000000000001100101111100010
+00011111111000001111111000000001
+01100000000000001100101111100010
+01101000000000001100110011110011
+00011111111000001111111000000001
+00011111111000010111111000000001
+01100000000000001100110011110011
+11000000000000000000000111001010
+11000000000000001000000111001100
+00100000011000000000000000000000
+01110000010000011101111000100000
+00100000010000000000001100101011
+00100000010000000000000111100101
+00100000001000000000001000000100
+00100000010000000000000111000110
+00100000001000000000000110101111
+00100000010000000000000101011001
+00100000001000000000000110101111
+01111001001111111000000000100110
+00100000010000000101001111001110
+11011000111000000000000000000011
+00100000001000000100001111010010
+01100000000010001100101110110101
+00011000010000100111001000000000
+11011000101000000100101101010001
+00011010001000100000110000000000
+00100000001000000111111100000001
+01101000000000001100101100110000
+00011111111010010111111000000000
+01100000000000001100101110110011
+00011111111000001111111000000001
+11011000110000000100101100110000
+10011000110000001000110000000000
+11101000110000011000000000000000
+01100000000000011100101111110010
+01101000000000001100101100110000
+00011111111000110111111000000000
+00011111111000010111111000000011
+01100000000000001100101111111000
+00100000011000000000000000000000
+01100000000000100100101111011101
+11011010001000000000000000000000
+11011111001000000000000000000100
+11011000110000000100101111011101
+11101000110000001000000000000000
+10011010001000001010001000000000
+11000010000000000000000111101000
+00011010001000100111111000000000
+01100000000000010100110001100110
+01101000000000001100110001100110
+01101000000010001100110001100111
+10011000010000001111111000000000
+01100000000000001100110001101000
+00100000011000000000000000000000
+01101000000000001100101110110101
+00011111111000001111111000000010
+01100000000000001100101110110111
+01101000000000001100101110110110
+01100000000000001100101101110001
+01101000000000001100101110110101
+00011111111010011111111000000000
+01101000000010001100101110110100
+00011000010000010000010000000011
+00011000010000111000010000000000
+10011000010000011111111000000000
+01101000000010001100101111110001
+10011000010000001111111000000000
+11100000101000001000000000000000
+01101000000000001100101110110101
+10011000000000000111001000000000
+11011000110000000100101101010001
+00100000001000000111111100000001
+01101000000010001100101111000000
+00100000010000000000001000001000
+01100000000010001100101111000000
+00100000011000000000000000000000
+00100000010000000000001000001100
+00011000010000001000010000000001
+00011000010000010000010000000011
+00100000011000000000000000000000
+01101000000000001100101111011101
+00011111111000010111111000000011
+00011111111011111010001000000100
+01011000000000000100101111000110
+10011010001000001111111000000000
+10011000010000001000110000000000
+11101000110000001000000000000000
+01100000000000001100101110111111
+00100000011000000000000000000000
+01111000010001001111110000000000
+01111000010000111111110000000000
+01011000010101010101010101010101
+10011000000000000001111000000000
+01101000000000001100101110111111
+00011111111011011000010000000000
+01111001001000000000010000000001
+00011000010000110001110000000000
+00100000011000000000000000000000
+00100000010000000101001111000100
+01101000000000100100101111011101
+10011000000000000001001000000000
+00100000010000000010100100011000
+01101000000010001100101110111111
+00100000010000000010100100011111
+01011000000000000000010100000000
+00100000010000000010101010001111
+00100000010000000010100100100100
+00100000010000000000001000010101
+01111000010101111111110000000000
+01111000001001101111110000000000
+01111000001100001111110000000000
+01111000010100000111110000000000
+01111000001010000111110000000000
+01101000000000010100101110111000
+10011000000000000011011000000000
+00110111110000011000010000000000
+00100100001011000000001001100111
+01111000010001101111110000000000
+01111000001001011111110000000000
+01111000001000111111110000000000
+01111000001001001111110000000000
+00100000010000000000001001100000
+01100000000000001100110001101001
+01101000000010001100110001101000
+10011000010001100111110000000000
+00100100001000101000001001100011
+00100000010000000000001001100000
+01100000000000001100101100101111
+01101000000000001100101111111011
+00011111111001100111110000000010
+00100000001000101000001001000011
+01101000000000001100101100101111
+01101000000010001100101110110110
+10101000010000000000111000000000
+00100100001000001000001001100011
+00100000010000000000001001100000
+11100000101000001000000000000000
+00011111111010010111111000000000
+00011111111000010111001000011111
+00100000001000101000001001001011
+00100000010000000000001001100000
+11100000101000001000000000000000
+11000010000000000000001001001000
+00011000101000100010001000000000
+00100000010000000000001001100000
+01100000000000001100110011110000
+00011010001000100000101000000000
+00001001100000000000000000011000
+01111000001010000111110000000000
+11011011011000000000011001100100
+00011111111011110111111000000000
+00011111111100010111111000000000
+11100000101000011000000000000000
+01111000010001011111110000000000
+00100000001000110000001001100011
+01111000001101111111110000000000
+01101000000000001000000000010111
+00011111111000001010001000000000
+00100000010000000010100110000001
+01111000010001101111110000000000
+00100000010000000010100100011000
+01101000000000001100110011110000
+00100000010000000000000000011110
+00100000011000000000000000000000
+00001001100000000000000000001000
+00011001100010010111111000000000
+00100000011000000000000000000000
+01111000010011011111110000000000
+01111000010001011111110000000000
+00100000010000000010011001001101
+00100000011000000000000000000000
+00100000001000000000001001100011
+00100000010000000010100100011000
+01101000000010001100101110111111
+00100000001000000010100100110011
+00100000010000000101001111000100
+01101000000000100100101111011101
+10011000000000000001001000000000
+00100000010000000000001000010101
+00100000010000000000001001101000
+01111001001000000010101000000000
+01111000001011101111110000000000
+01111000001100000111110000000000
+01111000010100001111110000000000
+00011001001100010111111000000000
+00011111111011001111111000000000
+00011111111100011111111000000000
+00001000000000001000011000101000
+01111000010011101111110000000000
+01111000001011011111110000000000
+01111000001000111111110000000000
+01111000001001001111110000000000
+01101000000000001100110001101000
+00001000000000001000011000001000
+01101000000000001100101110110111
+10011000000000000111001000000000
+11011000110000000100101101110001
+11101000110000001000000000000000
+00001000000000001000011000001000
+11000010000000000000001010000001
+01111000001001000111110000000000
+00001000000000001000011000011000
+01111000010001000111110000000000
+00110111110100111000001000000000
+00100000000000000000000001100100
+01111000010011101111110000000000
+01111000010011011111110000000000
+00100000011000000000000000000000
+00100000010000000111111111101001
+01101000000010100100101111010110
+00011100010000100111111000000000
+10011000010001100111110000000000
+00100100010000010010110100011000
+00011111111000100010010000000000
+01101000000000100100101111010110
+01101000000010001100101111011010
+10011000010000001000010000000000
+00011010010000100111111000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+01111001001111111111111000011100
+01100000000000100100101111010110
+00100000001000000111111111100111
+00100000010000000010100110111011
+00100000011110100000000000000000
+01101000000010001100110001101111
+11011010001000000000110110011110
+00100000010000000000001010100010
+01100000000010001100110001101111
+00100000011000000000000000000000
+00011010001000100111111000000000
+10011000010000001000101000000000
+01101000000000001000000000011000
+11100000101000001000000000000000
+00011000010000001000010000000001
+00011000010000010000010000000111
+00100000011000000000000000000000
+11011000010000000000000000000000
+11011111001000000000000000001000
+00011010001000100000110000000000
+11101000110000001000000000000000
+10011000010000001000010000000000
+11000010000000000000001010101100
+00011000010010010111111000000000
+00011111111000100000010000000000
+11000110100100110000000000000000
+00011111111001101111110000001010
+00100000010000000111111110000110
+00011000000001111111111000000000
+00011111111100100111111000000000
+00011000000001110000010000000000
+10011000010000011000010000000000
+00100000011000000000000000000000
+00100000011000000000000000000000
+11000110000100110000000000000000
+00100000010000000000001011000011
+01101000000000001100000001000000
+11000011000000000000001011000000
+01101000000000001000000010100000
+00100100011110100000000000000000
+01011000000000000000000000000000
+01100000000001000000000010100001
+00100000011000000000000000000000
+00100000010000000000001011001100
+00100000010000000000001011000000
+00100000010000000011111010111111
+01101000000100100000000001110000
+01101000000110100000000001111000
+10011000010000011000010000000000
+00011000010001000000010000000000
+01100000000110100000000001111100
+00100000011000000000000000000000
+01101000000000001100101011111110
+00100000011110100000000000000000
+00100000001000000000001111000110
+00100000010000000011010000010110
+00100000001101011000001011010111
+01101000000000001100000111011110
+01100000000000001100110001101100
+00100000010000000000010000001001
+01101000000000001100011010000101
+01100000000000001100011011011010
+00100000010000000100001111001010
+00100000010000000000001011011100
+00100000001000000111010010111001
+01101000000000001100110001101100
+01100000000000001100000111011110
+00100000011000000000000000000000
+00100100010101011000001100011011
+00100000010000000000001011111010
+00100000011101011000000000000000
+00100000010000000000001101010000
+01101000000000001100101100100110
+11000010100000010000001011100100
+00100000010000000100000010000011
+11000000000000101000001011101000
+00100000001000000000001100111000
+00100000010000000000001011011001
+01101000000000001100001000010000
+00100000011000000000000000000000
+01101000000000100100011011010011
+11000100000010001000000000000000
+11000011100000011000000000000000
+11000110000100110000000000000000
+00100000010000000100010010000010
+11011000111000000000000000000011
+00100000010000000100001111001110
+01011000000000000000000000000000
+01100000000000010100011010101110
+01100000000000001100011010110100
+01100000000000010100101111100010
+00100000010000000100001011001010
+00100000001000000000000101010101
+01101000000000100100011011010011
+11000011000010100011110101100110
+01101000000000001100011101111010
+11000000011111111011110101100110
+00100000001000000011110110000000
+01110000010000100001001001110110
+00100000001000000011110100110110
+00100000010000000000001011111010
+00100000010000000100000011000000
+01101000000000001100011011100000
+11000000000000101100000011010101
+00100000010000000100000011011001
+11000000000110000000001100001010
+11000000000110001000001100001100
+00100000010000000100000011010001
+00100000000000000000001111101000
+00100000001000000000001100000000
+01110000010010101111111000000001
+00100000010000000110010000001111
+00100000010000000000001011111100
+00100000001000000110010000010001
+00100000010000000000001100010001
+00100000001000000100000011100000
+00100000010000000000001100010001
+01101000000000001100011011011110
+11000000001110000100000011101000
+01110000010001101110000000000001
+00100000011000000000000000000000
+01011000000000001000000000000110
+00100000010000000110010000010011
+00100000000000000010111011100000
+00100000001000000000001011110101
+01011000000000000000000000000110
+00100000010000000110010000010100
+00011111111000011111111000001000
+00011111111011010111111000000000
+00011111111000001111111000000110
+00100000001000000110010000010011
+00100000010000000000000010001110
+01101000000100001000101000000000
+01111001001111111111111000000100
+01100000000100001000101000000000
+00100000010000000011111000011110
+01011000000000000001100000000010
+01100000000000010100000010111101
+01011000000000000000000000000000
+01100000000000010100000101010100
+00100000010000000011111001010100
+00100000010000000110010110011100
+01101000000000100100011011010011
+00101111111011111111111000011001
+00100100010000001110010111000010
+00100000010000000100010000111111
+00100000010000000000001100101101
+00100000010000000000001101110110
+00100000001000000110010111011111
+00100000010000000011001111000100
+00100000001000101100001100010110
+00100000001000000011110111001011
+11011000010000000000000000000010
+11011010001000000000101010101010
+11011010010000000000000001100010
+00100000001000000110010111010001
+11011000010000000000000000000010
+11011010001000000000101010011010
+11011010010000000000000001100010
+00100000001000000011001111001000
+00100000001000000000000110101011
+01101000000000100100011011010011
+11000011000011110000001101000000
+01101000000000001000101010111101
+00101111111011000000000000000011
+00100100001000001000001101000000
+00100000010000000000001011111100
+00100000010000000000001100010101
+01101000000000001100011100011111
+01100000000000001100011100011110
+01101000000000100100011011010011
+11000100000010001000000000000000
+00100000010000000000001101000111
+00100000001101000000000110101011
+00100000001000000000000110001000
+11011111001000000000000000000010
+11011000110000000100101111011101
+00100000010000000111111111100111
+01011000000000001111111111111111
+11101000110010010000000000000000
+10011000010001100111110000000000
+00100100010000101111111111101001
+11000010000000000000001101001011
+00100000011000000000000000000000
+01011000000000000000001101100111
+01100000000000010100000111110101
+01011000000000000000001101010101
+01100000000000010100110011100110
+00100000011000000000000000000000
+00100000001000000000001101011010
+00100000010000000100010000000001
+01101000000000010100011010011111
+00100000011110100000000000000000
+00100000001000000000000001101110
+00100000010000000000010001111100
+00100000001000000000001101010111
+01101000000000010100011010011111
+00100000011110100000000000000000
+01110000010010000000011000000001
+01110000010010000000011100000010
+00100000011000000000000000000000
+00100000010000000101100000010100
+01110000010001111001110000000001
+00100000001000000000001100010001
+00100000010000000111111000110100
+00100000010000000011110101101010
+00100000001000000011111011100000
+00011010011000100111111000000000
+11000000000111001000001101101100
+11000000000111010000001101111010
+11000000000111100000001110000101
+00100000001000000100000101111101
+01110000010001111000101100000001
+11011000111000000000000000000011
+00100000010000000100001111010010
+01011000000000000000000000000000
+01100000000000010100011100000111
+01110000010001101010011100000000
+00100000010000000100000001011101
+00100000010000000000000001101110
+00100000010000000000001101110110
+00100000001000000110010111010001
+11011010001000000100101111011101
+11011010010000000000000001011011
+11011000010000000000000000000100
+00100000011000000000000000000000
+01110000010011001111010100000000
+00100000010000000000001011011001
+00100000010000000000000111001110
+00100000001000000110010110011010
+01110000010000011011110100000000
+00100000010000000100001100010110
+11011111001000000000000000000011
+11011000110000000100011100100010
+00100000010000000000001101001001
+00100000001101000000001111000010
+00100000001000000000001011100101
+00100000001000000011111110001101
+01111000001101000111110000000000
+01101000000100100000000100111000
+01111001001101000111111000011010
+01100000000100100000000001001100
+00100000010000000010110000100001
+00100000010000000000001110010000
+00100000010000000111010010111101
+00100000010000000100010010000010
+00100000010000000011111010011111
+00100000001000000000001011000101
+01101000000000001100101011111110
+00100000011110100000000000000000
+01110000010010101111111000000000
+00100000001000000000001100010101
+00100000010000000000001110011001
+00100000010000000000001110111001
+00100000010000000000001110011110
+00100000010000000100001000110100
+00100000001000000100001000111010
+11011010011000000100100000000111
+11011010010000000000001110011100
+00100000001000000011001101101101
+01110000010010000000011000000000
+00100000011000000000000000000000
+01101000000000001100011011110101
+11000010100000100100001110010100
+00100000010000000100000010000011
+11000000000000111000001110101010
+01101000000000001100011010000101
+01100000000000001100011011011010
+01101000000000001100011011011011
+11000001000000001000000000000000
+01110000010001101101101100000001
+11011000111000000000000000001001
+00100000010000000100001111010010
+00100000001000000100001111001010
+01110000010001111001111000101000
+00100000010000000000001110101101
+00100000001000000100001110110000
+11011010011000000100011011011010
+11011010010000000000001110110000
+00100000001000000011001101101101
+01101000000000010100011010000010
+00101111111011111111111000001011
+00100000010000001100001011010100
+01101000000000010100011010000010
+00101111111011111111111000000111
+00100000010000001100001110010010
+11011000111000000000000000001001
+00100000010000000100001111001110
+00100000001000000100001110111000
+01101000000000001100011110011101
+00100000011110100000000000000000
+01101000000000001100011110011110
+00100000001110100000001111000000
+00011111111000001111111111111111
+01100000000000001100011110011110
+00100000011000000000000000000000
+01110000010001111001110100000000
+00100000001000000011010000001010
+01110000010001111001110100000001
+01110000010001111001111000101000
+00100000011000000000000000000000
+00100000010000000100001001001010
+01101000000000001100011011100000
+11000000000000110000001111001001
+00100000001000000011110110000001
+01101000000000001100011101111010
+00100000010110100000001111001111
+01101000000000001100011101111010
+11000000000000001011110110001010
+11000000000000011011110110001110
+00100000001000000011110110001100
+01110000010001110111101000000001
+00100000011000000000000000000000
+01111000010101000111110000000000
+01011000000000000000000000000000
+01100000000000110100011010011011
+00100000010000000011111110110101
+00100000010000000100000001111001
+00100000010000000100000001111110
+00100000010000000100000010011001
+00100100011101000000000000000000
+00100000001000000011111110100000
+01110000010001111001110100000000
+01110000010001111001111000000000
+00101000000011111111111000100110
+00100000010000001000000111001110
+00100000001000000100001001101101
+00100000010000000000001011011001
+01110000010001111001110000000000
+01101000000000010100011010000010
+11000010100001011000001111100101
+01101000000000100100011011010011
+11000011000011000000001111100101
+00100000010000000011010000011000
+01101000000000010100011010000111
+01100000000000010100011010101100
+01110000000000010110110100000110
+01011000000000000000000000000000
+01100000000000010100011010110000
+01100000000000010100011010101110
+11011000111000000000000000000111
+00100000010000000100001111001110
+00100000010000000100001111001010
+00100000001000000100001011000100
+01011000000000000000000000000000
+01100000000000010100011010101100
+00100000010000000000001100010001
+00100000001000000100001011001011
+01101000000100001000000001110111
+00011111111000010111111011111101
+01100000000100001000000001110111
+01101000000110001000000001110011
+00011000010000011000010000000010
+01100000000110001000000001110011
+00100000010000000110001111101110
+00011000010000010000010011111101
+00100000000000000000000000001101
+00100000010000000110001111110010
+01100000000110001000000001110011
+00100000011000000000000000000000
+00100000010000000110001010111100
+00100100001110100111110111011011
+01101000000000001000101010011001
+11000101100001001111110111010110
+11000000000010010000010000000110
+00100000001000000111110111001010
+00100000010000000101100010010000
+00100100011110100000000000000000
+00100000001000000101101010111111
+01110000010011001111000100000001
+01110000010011001110111000000000
+00100000011000000000000000000000
+01101000000000001100110011101110
+00011111111000001111111000000001
+01100000000000001100110011101110
+00100000011000000000000000000000
+01101000000000001100110011101110
+00011111111001100111110000000010
+00100100010000010000010000011000
+01101000000000001100110011101110
+11000001000000000000000000000000
+00011111111000001111111111111111
+01100000000000001100110011101110
+00100000011000000000000000000000
+01110000010011001110111000000011
+00100000011000000000000000000000
+00100000011000000000000000000000
+01101000000000010100011010000010
+11000011100001011000000000000000
+11000011100000111000000000000000
+11000011100000110000000000000000
+11011010001000000100110001110111
+00100000010000000000001010101001
+01100000000010001100110011101111
+01011000000000000000000010000010
+11000101000100110000010000100101
+01011000000000000000000010000000
+10011000010001100111110000000000
+00100100001000010000010000111101
+01101000000000001100110011101110
+00011111111001100111110000000010
+00100100001000010000010000101101
+01101000000000001100110011101110
+11000000000000000000010000111110
+00100000011000000000000000000000
+01101000000000001100110011101110
+11000001100100000000000000000000
+01110000010011001110111000000000
+01101000000010001100110011101111
+01011000000000000000000001110111
+11000101000100110000010000110100
+01011000000000000000000001110101
+10011000010001100111110000000000
+00100100011000010000000000000000
+01101000000000001100110011110001
+11000000000000000000010001000101
+00011111111000001111111111111111
+01100000000000001100110011110001
+11000000000000000000010001000101
+01110000010000011101111000000000
+00100000011000000000000000000000
+01110000010011001110111000000000
+01101000000000001100110011110001
+11000000000000010000010001000011
+00011111111000001111111000000001
+01100000000000001100110011110001
+11000000000000001000010000111011
+01110000010000011101111000000010
+00100000011000000000000000000000
+01110000010000011101111000000100
+00100000011000000000000000000000
+01100000000010001000000000010111
+00011000010000001010001000000000
+00100000010000000010100110000001
+01011000000000000000010100000000
+00100000010000000010101010001111
+01110000100010010000011000000001
+01110000100010010000000000111100
+01110000100010010000000111100000
+00100000000000000000000000001010
+01110000100010010000001000000001
+01110000100010010000001000111101
+00100000000000000000000000001010
+01110000100010010000001110110111
+00100000000000000000000000001010
+01110000100010010000001001111101
+01101000000000001100000111011110
+11000000000000010000010001011111
+11000000000000100000010001100100
+11000000000100000000010001110011
+00100000010000000000010001101001
+01110000100010010101010111010000
+01110000100010010101011011100000
+01110000100010010101100001101100
+00100000001000000010100101001011
+00100000010000000000010001101110
+01110000100010010101010111010000
+01110000100010010101011011100000
+01110000100010010101100000111100
+00100000001000000010100101010011
+00100000010000000000010001101001
+01110000100010010101010111010000
+01110000100010010101011011000000
+01110000100010010101100001101100
+00100000001000000010100101011011
+01110000100010010100110001011011
+01110000100010010100110110010110
+01110000100010010100111000101100
+01110000100010010100111101000110
+00100000011000000000000000000000
+01110000100010010100110011111011
+01110000100010010100110111101111
+01110000100010010100111011101100
+01110000100010010100111101011110
+00100000011000000000000000000000
+01110000100010010101011011000101
+01110000100010010101010111010000
+00100000011000000000000000000000
+00011000000000000010101000001000
+00100000001000000010100011111010
+01110000100010010110100011100110
+00100000010000000010100101111000
+01110000100000000100001000000101
+00100000011000000000000000000000
+01101000000000001100101100101110
+00011111111000001111111000000001
+01100000000000001100101100101110
+00011111111001100111110000110010
+00100000001000010000010010001000
+00011111111001100111110001100100
+00100000001000010000010010010011
+00011111111001100111110010010110
+00100000001000010000010010011011
+00011111111001100111110011001000
+00100000001000010000010010100011
+00100000011000000000000000000000
+01011000000000000000000000000101
+01100000000000010100101100101000
+01011000000000000000000000000000
+01100000000000010100101100101010
+01100000000000001100101100101100
+01100000000000001100101100100111
+01100000000000001100101100101101
+01111000001101000111110000000000
+11011010001000000000000000000111
+11011010010000000100101100100111
+00100000011000000000000000000000
+01011000000000000000000000000101
+01100000000000010100101100101010
+01011000000000000000000000000000
+01100000000000010100101100101000
+01100000000000001100101100101100
+01100000000000001100101100100111
+01100000000000001100101100101101
+00100000001000000000010010001111
+01011000000000001111111111111011
+01100000000000010100101100101000
+01011000000000000000000000000000
+01100000000000010100101100101010
+01100000000000001100101100101100
+01100000000000001100101100100111
+01100000000000001100101100101101
+00100000001000000000010010001111
+01101000000000001100101100101110
+11000000011001000000010010101101
+01011000000000001111111111111011
+01100000000000010100101100101010
+01011000000000000000000000000000
+01100000000000010100101100101000
+01100000000000001100101100101100
+01100000000000001100101100100111
+01100000000000001100101100101101
+00100000001000000000010010001111
+01110000010010110010111000000000
+00100000001000000000010010100101
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+00100000010000000010101010111100
+01000100100000000100000000000000
+00100000100000000000000000000000
+00100000010000000110010000001101
+00100000010000000010100101101100
+00100000010000000110010110100011
+00100000010000000010101010010110
+00100000010000000100110101101010
+01000100100000001100000000000000
+00100000010000000110101000000011
+00100000010000000101110011110110
+00100000010000000111110011001100
+00100000010000000011001011011000
+00100100010101011110100010011100
+01000100100000010100000000000000
+00100000010101011011001011100011
+00100000010000000111010101101010
+00100000010101011010101101000001
+01000100100000011100000000000000
+00100000010000000111011011011100
+00100000010000000111101010101111
+00100000010000000111010101101101
+00100000010000000101001101011100
+01000100100000100100000000000000
+00100000010000000010000000111000
+00100000010000000011001011101101
+00100000010000000010000010001111
+00100000010000000010001011111000
+00100000010000000010001101101010
+00100000010000000010000000100001
+00100000010000000010101101101010
+00100000010000000010110001110010
+00100000001000000010000000010010
+00100000010000000010000000100110
+11000110100001001000000000000000
+01111001001111111000000000001001
+00100000010000000010001000100011
+00100000001000000101001111001110
+01000100100000101100000000000000
+00100000010000000010001001011110
+00100100001000101010000000101111
+00100000010000000010001000001010
+00011010001000001000110000000001
+11101000110000001000000000000000
+11000010100000000101001101100000
+11000010100000001010000101100110
+00100000001000000010001111001111
+00100000010000000010001000101011
+00011111001000100111110000000000
+00100000011000101000000000000000
+00100000010000000010001000001010
+01101000000000001000000000110000
+11000010100000011010000011010011
+01101000000000001000000000110001
+11000010100000001010000101100110
+00100000001000000010001111001111
+01101000000000001100000111001110
+00100000011110100000000000000000
+11000000000000001010000001001000
+11000000000000010010000001001101
+11000000000000011010000001010000
+11000000000000101010000001010101
+11000000000011011010000001000101
+00100000010000000010001001010111
+00100000011000101000000000000000
+00100000010000000010001001011010
+00100000011000101000000000000000
+01110000010000011100111000000000
+00100000011000000000000000000000
+01110000000001001001101100011011
+01110000010000011100111000000000
+00100000011000000000000000000000
+01111001001000000000000000011100
+01111001001111111000000000011110
+01110000000000001000111111111111
+01110000000000001000110100011111
+00100000001000000010000001000011
+01111001001111111000000000011100
+00011000000000000011011000000000
+00100000001000000010000001000011
+00100000010000000010001001011010
+00100000011000101000000000000000
+00011000000000000000010000000001
+01110000000000010110111000000101
+00100000001000000010000001011100
+01000100100000110100000000000000
+01101000000000110100000111010000
+00100000001110100010000001000011
+01110000010001101000000100000001
+01110000000000000101010100000011
+00100000001000000010000001011011
+00011000000000000000010000100101
+01000100100000111100000000000000
+01101000000000001000000011110001
+00100000001110100010000001100010
+00011111111010011111111000000000
+00011111111100100111111000000000
+00011111111000001111111111111111
+01100000000000001100000010100110
+01100000000000001000000011110000
+01110000000000001000111000011111
+01111001001111111000000000001100
+00100000010000000010001000111011
+00100100001000101010000010000011
+00100000010000000010101001101111
+01100000000000001000000001110111
+01100000000010001000000001111100
+01101000000000110100000111010000
+01100000000000110000000001000000
+01000100100001000100000000000001
+00100000010000000111111100010101
+00011000000000000111111000000000
+00101000010000011111111000000001
+01111101001000001111111000000101
+01111001001000000111111000000011
+01100000000000001000000000110000
+01110000000010101001100100000011
+00100000010000000111110110000110
+00011000000000000111111000000000
+01111001001000001111111000000100
+01100000000000001000000001001100
+01011000000000000000000000000000
+01111001001000000111111000000001
+01100000000000001000000000110001
+01111000001101001111110000000000
+00100000010000000010001000100011
+01111000010101001111110000000000
+00011000000000000000111000000011
+01101000000000010100000010111001
+00100000010000000111111100001000
+00100000001000000010000001000011
+01000100100001001100000000000001
+01101000000000110100000111010000
+01100000000000110000000001000000
+00101000010000011111111000000001
+00100000001000001010000010001001
+00100000001000000010000001000011
+11011000101000000000000100000001
+11011111001000000000000000001000
+00100000010000000111111011000110
+01110000000010101001100100000100
+00100000010000000111110110000110
+00100000001000000010000001000011
+11000110100011100000000000000000
+00011000000000000000111000000001
+00100000010000000111111100010110
+01111101001110100000000000011100
+00100100001110100010000010010101
+00100000011000000000000000000000
+01000100100001010100000000000001
+01101000000010010100000010111011
+00011000000000000000111000000100
+00100000010000000010011100011100
+00100000011101000000000000000000
+00100000010000000010100010100100
+00011000000000000100100000000000
+00100000011000011000000000000000
+01111001001111111000000000001011
+01111001001111111000000000000000
+00011100010000001100001000000001
+00101000000011111111111000011110
+01111001001000001100100000000010
+00101100001000000000010000000000
+00100100001000001010000010111110
+01000100100001011100000000000001
+01101000000000001000000000010010
+00011111111000001111111000000001
+01100000000000001000000000010010
+00100000010000000010100011011000
+00100000010000000010100011010010
+00100000010000000010100011110010
+00100000010000000010101001010001
+00100000010000000010101001010110
+00100000010000000010101001100100
+00100000010000000010011001001101
+00100000010000000010000010110001
+00100000001000000010000010011100
+01000100100001100100000000000001
+01101000000000001000000010001101
+00011111111000001111111111111111
+01100000000000001000000010001101
+00100000011000010000000000000000
+01110000000000001000110100011111
+01101000000000001000000010001111
+00011111111000001111111111111111
+01100000000000001000000010001111
+00100000011000010000000000000000
+01111001010000000000000000011110
+01110000000000001000111111111111
+00100000011000000000000000000000
+01000100100001101100000000000001
+00100000010000000010100011011000
+00100000010000000010100011001100
+00100000010000000010100011110010
+00100000010000000010101001011011
+00100000010000000010100111101011
+00100000010000000010101000001101
+00100000001011000010000011001000
+00100000010000000010000010110001
+00100000001000000010000010011111
+01000100100001110100000000000001
+00100000010000000010100110111011
+00100000010000000010101001101011
+00100000010000000010010100011110
+01111001001111111000000000000001
+11000110100001011000000000000000
+01000100100001111100000000000001
+01101000000000001000000000010011
+00011111111000001111111000000001
+01100000000000001000000000010011
+00100000011000000000000000000000
+01000100100010000100000000000010
+01111000001101001111110000000000
+01111000001110000111110000000000
+01101000000000010100000010110101
+00100000001110100010000011011011
+00011000000000000000111000001000
+00100000010000000111111100010110
+00100100011110100000000000000000
+01000100100010001100000000000010
+01101000000010010100000010110111
+00011000000000000000111000101000
+00100000010000000010011100011100
+00100000001101000010000100010100
+00011000000000000000111000000011
+00100000010000000111111100010110
+00100100001110100010000011110000
+01101000000000001000000001001100
+11000010100000100010000011100110
+00100000001000000010000011101001
+11011000101000000000000100000001
+11011111001000000000000000001000
+00100000010000000111111011000110
+01000100100010010100000000000010
+01110000000000000011000000000000
+00100000010000000101110011110111
+01110000010001101000000100000000
+01110000000010101001100100010011
+00100000010000000111110110000110
+00100000001000000010000100010100
+01000100100010011100000000000010
+00011000000000000001011000000000
+00110100011100110000001000000000
+01101000000000001000000011110010
+00011111111000001111111111111111
+10011100010000101111111000000000
+00101111111000000000011000000000
+00100100001000001010000011110000
+00011000100000100111111000000000
+01100000000000001000000110000001
+00011000000000000100110000000000
+00011000000000000100100000000000
+01000100100010100100000000000010
+00100000001000011010000100010100
+00100000010000000010100011011100
+11011001011000000000011000000000
+00110100011100110000001000000000
+01000100100010101100000000000010
+01101000000000100000000011110010
+10011000000000000100001000000000
+00011111111000001111111000000001
+01100000000000100000000011110010
+00101000000011111111111000001100
+01111001001000001100100000000010
+00101100001000000000010000000000
+00100100001000001010000100101000
+01101000000000001000000000001100
+00011111111000001111111000000001
+01100000000000001000000000001100
+00100000010000000010100011010010
+00100000010000000010101001010001
+00100000010000000010101001010110
+00100000010000000010101001100100
+00100000010000000010011001001101
+00100000010000000010000100011010
+00100000001000000010000011111100
+01000100100010110100000000000010
+01111000010101001111110000000000
+01101000000000010100000010110101
+00100000011110100000000000000000
+00011000000000000000111000001000
+00100000001000000111111100001000
+01000100100010111100000000000010
+01101000000000001000000010001110
+00011111111000001111111111111111
+01100000000000001000000010001110
+00100000011000010000000000000000
+01110000000000001000111000011111
+01101000000000001000000011110000
+00011111111000001111111111111111
+01100000000000001000000011110000
+00100000011000010000000000000000
+01111001010000000000000000001100
+01101000000000001100000010100110
+01100000000000001000000011110000
+00100000011000000000000000000000
+01000100100011000100000000000011
+00100000010000000010100011001100
+00100000010000000010101001011011
+00100000010000000010100111101011
+00100000010000000010101000001101
+00100000001011000010000100110000
+00100000010000000010000100011010
+00100000001000000010000100000001
+00100000010000000010011001001101
+01101000000000001000000000001101
+00011111111000001111111000000001
+01100000000000001000000000001101
+00011000000000000011011000000000
+01101000000000100000000011110010
+01000100100011001100000000000011
+00100000010000000010101001001111
+00100000010000000010100011011100
+00011100110000001100110000000001
+00011100001000010100001111111101
+00011100100000010100100111111100
+00100000010000000010100011010010
+00100000010000000010101001010001
+00100000010000000010101001010110
+00100000010000000010101001100100
+00011100010000100111111000000000
+01100000000000100000000101100001
+00011000000000000000100000000000
+00011000000000000000001000000010
+00100000010000000010101001101011
+00100000010000000010011101100110
+01000100100011010100000000000011
+00100000010000000010101001001101
+00011100001000011100001000000010
+00011100100000010100100111111100
+00100000010000000010100011001100
+00100000010000000010101001011011
+00100000010000000010100111101011
+00100000010000000010101000001101
+00100000010011000010011001001101
+00100000001011000010000101010101
+01101000000000001000000000010000
+00100000001110100010000011111100
+00011111111000001111111111111111
+01100000000000001000000000010000
+00100000001000000010000100110110
+01000100100011011100000000000011
+01101000000000001000000000001110
+00011111111000001111111000000001
+01100000000000001000000000001110
+00100000010000000010010000110101
+00100000010000000010001011110010
+00100000001011000010000101011111
+00100000010000000010010001010101
+00100100001110100010000101011010
+00100000001000000010000011111100
+01000100100011100100000000000011
+01101000000000001000000000110000
+01111001001111111111111000000011
+01100000000000001000000000110000
+00100000010000000010010001000000
+01111000010101001111110000000000
+00100000011000000000000000000000
+01000100100011101100000000000011
+01111000001101001111110000000000
+01111000001110000111110000000000
+00100000010000000010000111100001
+00100000011101000000000000000000
+00100000010000000010110001101001
+00100000010000000010101001001111
+00011100010000001100001000000001
+00100000010000000010100011100010
+00011000000000000100100000000011
+00100000010000000110110011000010
+00100000010000000010010010001001
+00100000010000000010100011010010
+00100000010000000010101001010001
+00100000010000000010101001010110
+00100000010000000010101001100100
+00100000010000000010011101100010
+01000100100011110100000000000011
+00100000010000000101110100001000
+00100000010000000010001011100100
+00100100001101101010000110000000
+00100000010000000010101010001000
+00100000010000000010011100101000
+01101000000000001000000000001111
+00011111111000001111111000000001
+01100000000000001000000000001111
+01000100100011111100000000000011
+00100000010000000110110010101010
+00100000010000000010000110001011
+00100100011101001000000000000000
+00100000010000000010011011110011
+00100100001110100010000110001000
+01111000010101001111110000000000
+00100000011000000000000000000000
+00100000010000000010010010001001
+00100000010000000010001011011010
+00100000001000000010000101110111
+00100000001101101010000110001110
+00100000010000000010101001111111
+00100000001000010010000110011100
+00100000010000000010000110100111
+00100100001101000010000110011100
+01101000000000001000000001001100
+11000100000000100000000000000000
+11000011100000011000000000000000
+01101000000000001000000001001011
+11000011100000011000000000000000
+00100000010000000010000110101110
+00100100011110100000000000000000
+01101000000000001000000101101110
+00011111111000001111111111111111
+01100000000000001000000101101110
+00100100011110100000000000000000
+00100000001000000110000000000110
+01000100100100000100000000000100
+00100000010000000010010001011101
+01111000010101001111110000000000
+01101000000000001000000001001100
+11000010100000100010000110100010
+00100000011000000000000000000000
+01101000000000001000000001001100
+11000011100000011000000000000000
+11011000101000000000000100000001
+11011111001000000000000000001000
+00100000001000000111111011000110
+01000100100100001100000000000100
+01111000001101000111110000000000
+01101000000000001000000001001011
+11000100000000011000000000000000
+00100000010000000010000110101110
+00100100011110100000000000000000
+00100000001000000111111111101001
+01101000000000001000000001110010
+00011111111000001111111111111111
+01100000000000001000000001110010
+00100000011000000000000000000000
+01000100100100010100000000000100
+01101000000000001000000000110000
+11000010100000111010000110111011
+01101000000000001000100110110101
+00100000001110100010000110111011
+01110000000010011011010100000000
+01110000000010101001100100011000
+00100000010000000111110110000110
+00100000001000000010000110111011
+01000100100100011100000000000100
+00100000010000000010001001010100
+01101000000000001000000000110000
+01111001001000000111111000000111
+01100000000000001000000000110000
+01110000010000011011110100000001
+01101000000000001000000001010101
+11000000100010110010000111000011
+00100000011000000000000000000000
+01110000000010011011010100000001
+01101000000000001000000000110000
+01111001001111111111111000000111
+01100000000000001000000000110000
+00100000011000000000000000000000
+01000100100100100100000000000100
+01111000010101000111110000000000
+01101000000000010000000000110010
+11011000010000001111111111111111
+10011000010001100111110000000000
+00100100011000101000000000000000
+01101000000000100000000000110100
+00100000001110000010000111010011
+10011101000001100111111000000000
+00100000001000000010000111010100
+10011100010001100111111000000000
+00011111111001100111110000000100
+00100100011000010000000000000000
+00011000000000000111111000000000
+01100000000000010000000000110010
+00100000001000000111111111100111
+00011111111000100000010000000000
+01000100100100101100000000000100
+01100000000010100000000000110100
+01110000010001010101101100000001
+01011000000000001111111111111111
+01100000000000010000000000110010
+01110000000000000111001100000001
+00100000011000000000000000000000
+01000100100100110100000000000100
+00100000010000000010000111001001
+00100100011101000000000000000000
+01111000010101000111110000000000
+01110000000000000001000100100000
+01111001001111111000000000001011
+00100000010000000010101001001111
+00100000010000000010001011100110
+11000101000001011010000111110100
+00100000010000000010010001010101
+00100100001110100010000111100111
+01000100100100111100000000000100
+01111000010101000111110000000000
+00011100010000100111111000000000
+01100000000000100100000011001010
+01111000001110000111110000000000
+01111000001101001111110000000000
+01110000000010101001100100101010
+00100000001000000111110110000110
+01000100100101000100000000000101
+00100000010000000010101001001101
+11011000001000000000000000010000
+00100000010000000010001011011100
+01111000010110000111110000000000
+01111000010101001111110000000000
+00100000010000000010100000011000
+00100000010000000010010000110101
+01000100100101001100000000000101
+00100000010000000010010001111100
+00100000001101101010001000000010
+00100000010000000010010001010101
+00100100001110100010000111111100
+00100000001000000010000111101100
+01101000000000001000000000110001
+01111001001111111111111000000001
+01100000000000001000000000110001
+00100000010000000010101010001000
+00100000010000000010100001000001
+01111000001101000111110000000000
+01110000000010101001100100101011
+00100000001000000111110110000110
+01000100100101010100000000000101
+01111001001000000000000000001001
+00011010001000100111111000000000
+01100000000000010000000000011110
+00011000000000000111001001010000
+11011000101000000000010000111111
+00011010001000001000110000000001
+11101000110000001000000000000000
+00011010001000100000110000000000
+11000010100000000111111100000001
+11011000101000000000000000110000
+00100000010000000111111100000001
+01111000010101110111110000000000
+01101000000000001000000001110111
+10011000000000000000100000000000
+01110000000000001000101000000001
+00100000001101001010001000011100
+01110000000000001000101000000001
+01101000000000001000000000110000
+11000100000000001000000000000000
+01101000000000001000000001110011
+01100000000000001000000010001010
+01101000000000001000000001110100
+01100000000000001000000010001011
+00100000011000000000000000000000
+01000100100101011100000000000101
+01101000000000010000000000011110
+10011000000000000000101000000000
+00011000000000000111001001010000
+11011000110000000000010000111111
+00100000001110110111111100000001
+11011000110000000000000000110000
+00100000001000000111111100000001
+11011111001000000000000000000001
+01101000000010001000000000010101
+00011000010000001000010000000001
+00101000010000011111111000000001
+00100100001000001010001000110001
+11011000010000000000000000000000
+01100000000010001000000000010101
+00011000010011111111111001010000
+11011010001000000100000001000000
+10011010001000001010001000000000
+11101010001000001000000000000000
+11000010100000001010001000111001
+11000011100000000000000000000000
+11000011100000011000000000000000
+11000010000000000010001000101101
+00100000011000000000000000000000
+01000100100101100100000000000101
+11011010011000000010001001101010
+00100000010000000010001001100001
+00100100011000101000000000000000
+00011010001000100111111000000000
+01100000000000010000000000011110
+00011000000000000111110000000000
+00100000011000000000000000000000
+00100000010000000010011100100101
+00100000001000001010001001001011
+01101000000000010000000000011110
+00011111111000001000101000010111
+01101000000000001000000001000111
+11100000101000001000000000000000
+11011010011000000010001010101010
+00100000001000000010001001100001
+01101000000000001000000001000111
+00101111111011111111111000000011
+00100000001000001010001001010000
+00011000000000000111110000000001
+00100000011000000000000000000000
+00011000000000000111110000000000
+00100000011000000000000000000000
+11011010011000000010001010100111
+00100000001000000010001001100001
+01101000000010010000000000011110
+11011010011000000010001011001111
+00100000001000000010001001100001
+01101000000010001100000111001111
+11011010011000000010001001110101
+00100000001000000010001001100001
+01000100100101101100000000000101
+01101000000010110100000111010000
+11011010011000000010001001101110
+00100000001000000010001001100001
+11011010011000000010001001111011
+00100000001000000010001001100001
+11011010011000000010001011000110
+01000100100101110100000000000101
+11011010001000000100000001000000
+11011111001000000000000000000001
+11101010001000001000000000000000
+00011010011000100111101000000000
+00011010001000001010001001010000
+11000010000000000010001001100100
+00011000000000000111110000000001
+00100000011000000000000000000000
+11000010100000000010001001100110
+11000010100000011010001001100110
+00011000000000000111110000000000
+00100000011000000000000000000000
+11000010100000011010001001110000
+11000011000000000010001001100110
+00011010001000001000110000010000
+11101000110000110000000000000000
+10011000010001100111110000000000
+00100000011000101000000000000000
+00100000001000000010001001100110
+11000011000000000010001001100110
+00011010001000001000110000010110
+11101000110000001000000000000000
+10011000010001100111110000000000
+00100000011000101000000000000000
+00100000001000000010001001100110
+11000011000000001010001001100110
+00100000010000000010001010110011
+00100000010000000010001010010111
+10011000010001100111111000000000
+00011111111000001111111000000001
+00100000001000010010001010010001
+00011000110000100010010000000000
+01100000000001001000101010100010
+01101000000000001100010011000000
+00100100001110100010001010001001
+01101000000001001000101010100010
+00011010010000100000110000000000
+00011111111000001111111000000101
+00100000001000000010001010001100
+01101000000001001000101010100010
+00011010010000100000110000000000
+00011111111000001111111000010100
+00100100001000010010001001100110
+00011000010000100100001000000000
+00100000010000000010001010111111
+00011000000000000111110000000000
+00100000011000000000000000000000
+10011000000000000010010000000000
+00011010001000001000110000000010
+11101000110000010000000000000000
+00100000001110100010001010001101
+00100000010000000010001010111111
+00100000001000000010001001111100
+00011111111100010001011000000000
+00011001011011001001011000000000
+00100000001000101010001010100001
+00101001011000000001111000001111
+00100100011000001000000000000000
+00011000010100010001011000000000
+00011001011011001001011000000000
+00100100011000101000000000000000
+01111001001000000000010000011100
+00100000011000000000000000000000
+00011000010100010001011000000000
+00011001011011001001011000000000
+00101001011000000001111000001111
+00100100011000001000000000000000
+01111001001000000111111000011100
+00100000011000000000000000000000
+11000011000000000010001001100110
+00011000000000000111110000000000
+00100000011000000000000000000000
+11000011000000000010001001100110
+00011010001000001000110000000001
+11101000110000001000000000000000
+11000010100000000010001001100110
+00011010001000001000110000010111
+11101000110000001000000000000000
+11000011000000011010001001100110
+00011000000000000111110000000000
+00100000011000000000000000000000
+00011010001000001000110000000001
+11101000110010001000000000000000
+00011100010000100111111000000000
+00101000010011111111111000000001
+00011010001000001000110000000100
+11101000110010100000000000000000
+00100000011000001000000000000000
+00011010001000001000110000001000
+11101000110000110000000000000000
+00100000010000000010100001010100
+00011101000000100111111000000000
+00100000011000000000000000000000
+00011010001000001000110000000010
+00011010001000001000101000000100
+11101000110000010000000000000000
+10011000010000001001011000000000
+00011001011000100111111000000000
+11100000101000100000000000000000
+00100000001000000101010001001001
+11000011000000001010001001100110
+00100000010000000010001010110011
+10011011011000001111111000000000
+10011011011000001111111000000000
+10011000111000001111111000000000
+10011000010001100111110000000000
+00100100001000010010001001100110
+00011000000000000111110000000000
+00100000011000000000000000000000
+11000011000000000010001001100110
+00011000010000100111111000000000
+10011010001001100111110000000000
+00100000001111110010001001100110
+00011010001000001000110000000001
+11101000110000001000000000000000
+11000010100000000010001001100110
+11101010001000001000000000000000
+01111001001111111111111000000111
+11100010001000001000000000000000
+00100000001000000010001001100110
+01000100100101111100000000000101
+00100000010000000010101001001111
+00011100010000001100001000000001
+00100000010000000010100011100010
+00011000000000000100100000000011
+00100000010000000010100011010010
+00100000010000000010101001010001
+00100000010000000010101001010110
+00100000010000000010101001100100
+00100000001000000010011101100010
+01000100100110000100000000000110
+00100000010000000010101001001101
+00011100010000001100001000000001
+00100000010000000010100011100010
+00011000000000000100100000000011
+00100000010000000010100011001100
+00100000010000000010010000101010
+00100000010000000010100111110001
+00100000010000000010101001011011
+00100000010000000010100111101011
+00100000010000000010101000001101
+00100100011011000000000000000000
+00100000010000000010100110111011
+00100000001000000010010100011100
+01000100100110001100000000000110
+01101000000000001000000110000001
+10011000000000000000100000000000
+00011000000000000000001000000001
+00100000010000000010001011011010
+00100000001000000010001011100100
+01101000000000001100000010010011
+11000100000000000000000000000000
+00011000000000000000111000000100
+00100000010000000111111100010110
+00100100011110100000000000000000
+01101000000010010100000010101101
+00011000000000000000111000000100
+00100000010000000010011100011100
+00100000011101000000000000000000
+00100000010000000010001100001000
+00011000000000000000111000000100
+01101000000000010100000010101111
+00100100001011000111111100001000
+00011000000010100111111000000000
+10011110101000010111111000000000
+00100000001000000111111100001000
+01000100100110010100000000000110
+01110000000000011000000100000000
+01111000010110000111110000000000
+01111000010101110111110000000000
+00100000010000000010100010100100
+00011100010000010100001111111100
+00011000000000000100100000000001
+00100000010000000010100011011000
+00100000010000000010100011001100
+01111001010000000000000000011101
+01101000000000001000000000000110
+00011111111000001111111000000001
+01100000000000001000000000000110
+00100000010000000010100011110010
+00100000010000000010100111101011
+00100000010000000010101000010100
+00100100011011000000000000000000
+01000100100110011100000000000110
+00011000000000000011011000000000
+00100000010000000010100011111001
+01101000000000001000000000000111
+00011111111000001111111000000001
+01100000000000001000000000000111
+00100000010000000010100011011000
+00100000010000000010101001001101
+00011100001000011100001000000010
+00011000000000000100100000000001
+00100000010000000010100011010010
+00100000010000000010100011110010
+00100000010000000010101001010001
+00100000010000000010101001011111
+00011100010000100111111000000000
+01100000000000100000000101100001
+00100000010000000010101001100100
+00011000000000000000001000000010
+00011000000000000000100000000000
+00100000010000000010101001101011
+00100000010000000010011101100110
+00100000010000000010001100110010
+00011100001000010100001111111101
+00011100110000001100110000000001
+00100000011000000000000000000000
+01000100100110100100000000000110
+01101000000000001100000011010001
+00100000011110100000000000000000
+11011000101000000000000110001110
+01101000000000001100010100010101
+00011111111000100111001000000000
+00011111111000001111111000000001
+11100000101000001000000000000000
+00011000101000100000010000000000
+00011111111000001111111000000001
+01100000000000010100000111011100
+00011000010000100000101000000000
+01011000000000000000000000001001
+11100000101000001000000000000000
+11011000110000000100010100010110
+00100000010000000111111100000001
+11011010011000000100010110001101
+11011111001000000000000000000100
+00100000010000000010001101010100
+11011010011000000100010101110111
+11011111001000000000000000000001
+00100000010000000010001101010100
+00011000000000000000001000001010
+01110000010000011101101100000010
+01011000000000000000000110001110
+01100000000000010000000101101111
+00100000010000000010101001001101
+00100000010000000010100011010010
+00100000010000000010101001010001
+00100000010000000010101001011111
+00100000010000000010101001100100
+00100000010000000010101001101011
+00100000010000000010011101100110
+00100000011000000000000000000000
+00011000101000100000010000000000
+00011010011000100000110000000000
+11101000110000001000000000000000
+00100000011110100000000000000000
+00011111111000111111111000000000
+11000010000000000010001101011000
+00011111111000100010001000000000
+00011111111000001111111000000010
+00011111111000100000111000000000
+01101000000000010100000111011100
+10011000111000001111111000000000
+01100000000000010100000111011100
+00011000010000100000101000000000
+00011010001000100111111000000000
+00011111111000001111111000000001
+11100000101000001000000000000000
+00011010011000100000110000000000
+11101000110000001000000000000000
+11101000110000001000000000000000
+11100000101000001000000000000000
+00011010001000100111001000000000
+00100000001000000111111100000001
+01101000000000001100000010010011
+11000100000000001000000000000000
+00011000000000000000111000000101
+00100000010000000111111100010110
+00100100011110100000000000000000
+01101000000010010100000010110001
+00011000000000000000111000101000
+00100000010000000010011100011100
+00100000011101000000000000000000
+00011000000000000000100000000000
+01110000000000000001000000001000
+01111001001111111000000000001011
+00100000010000000010001101111010
+00011000000000000000111000000101
+01101000000000010100000010110011
+00100000001000000111111100001000
+01000100100110101100000000000110
+01111000010110000111110000000000
+00100000010000000010100010100100
+01101000000000001000000000001000
+00011111111000001111111000000001
+01100000000000001000000000001000
+00011000000000000100110000000000
+00100000010000000010100011100010
+00011100010000001100001000000001
+00011000000000000100100000000010
+01000100100110110100000000000110
+00100000010000000010100011001100
+00100000010000000010100111101011
+00100000010000000010101000010100
+00100100011011000000000000000000
+00100000010000000010100011111001
+01101000000000001000000000001001
+00011111111000001111111000000001
+01100000000000001000000000001001
+00011000000000000011011000000000
+00100000010000000010101001001101
+00011100001000011100001000000010
+00011000000000000100100000000001
+00100000010000000010100011010010
+00100000010000000010101001010001
+00100000010000000010101001011111
+00100000010000000010101001100100
+00100000010000000010011001001101
+00011000000000000000100000000000
+11011001011000000000011000000000
+00110101001100110000001000000000
+00011101000000011101000000000011
+00011100001000010100001111111101
+01000100100110111100000000000110
+00011100110000001100110000000001
+00100000010000000010100011001100
+00100000010000000010100111101011
+00100000010000000010101000000111
+00100100001011000010001110100100
+00100000010000000010101001101011
+00100000010000000010010100011110
+11000101000001011010001110101011
+01000100100111000100000000000111
+01101000000000001000000000010000
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000001000000000010000
+00100000010000000010101001001111
+00100000001000000010001110011011
+01000100100111001100000000000111
+01111001001111111101000000000001
+01111001001000000101000000000000
+01101000000000001000000000001010
+00011111111000001111111000000001
+01100000000000001000000000001010
+00100000010000000010101001001101
+00011100001000011100001000000010
+00100000010000000010100011010010
+00100000010000000010101001010001
+00100000010000000010101001011111
+00100000010000000010101001100100
+00100000010000000010011001001101
+00101101000000000000011000000011
+00100000001000001010001110111100
+00110111110010111000001000000000
+00100000001000000010001110111000
+01101000000000100000000101100101
+00011111111000011111111000000011
+00011111111000100101000000000000
+01000100100111010100000000000111
+01101000000000110000000101111000
+01100000000000110000000001000000
+00100000010000000010010000110101
+00100000010000000010010001111100
+00100000001101101010001111001000
+00100000010000000010010001010101
+00100100001110100010001111000011
+00100000011000000000000000000000
+01000100100111011100000000000111
+00100000010000000010010001000000
+00100000010000000010001000111011
+00100100011000101000000000000000
+01110000000000000011000100000000
+00100000010000000010100001000001
+00100000001000000010001000100011
+01000100100111100100000000000111
+00100000010000000010100001010000
+00100000010000000010001111110011
+00100000011101000000000000000000
+01000100100111101100000000000111
+00100000010000000010110001101001
+00100000010000000110110010101010
+00100000010000000010010100010100
+00100100001101101010001111100010
+00100000010000000010101010001000
+00100000010000000110110011000010
+00100000010000000010010010001001
+00100000010000000010011101010111
+00100000010000000010011100101000
+00100000010000000101110100001000
+01101000000000001000000000001011
+00011111111000001111111000000001
+01100000000000001000000000001011
+00100000010000000010100001000001
+01000100100111110100000000000111
+00100000010000000010101110110001
+00100000010000000010101001111111
+00100000001000010010001111101011
+00100000010000000010000110100111
+00100100001101000010001111101011
+00100000010000000010011011110011
+00100100001110100010001111010011
+00100000011000000000000000000000
+01000100100111111100000000000111
+01110000000000010101000100000000
+01110000000000010111111100000000
+00100000010000000010010001011101
+01111001001111111000000000010001
+00100000010000000111111110110000
+01101000000000001000000000110000
+00100000011000000000000000000000
+01000100101000000100000000001000
+00100000010000000010000111001001
+00100100011101000000000000000000
+00011000100000100000010000000000
+00100000010000000010101001101111
+01100000000000001000000110000001
+00011000010000100000100000000000
+01110000000000000001000100100000
+01000100101000001100000000001000
+00100000010000000010101001001111
+00011000000000000000001000000010
+00100000010000000010011101001111
+00011100010000100111111000000000
+01100000000000100000000101100001
+00100000010000000010011101100010
+00100000010000000010101001001101
+01111000001101111111110000000000
+00100000010000000010010011110110
+00100000001011000010010000001101
+00100000010000000010100011111001
+00100000010000000010010001010101
+00100100001110100010001111111011
+11000110100000100000000000000000
+01110000000000000111110000110100
+01111001001000000000000000000011
+00100000011000000000000000000000
+01111000001110000111110000000000
+00100000010000000010010000110101
+00100000010000000010100010100100
+01000100101000010100000000001000
+00100000010000000010001011110010
+00100000001011000010010000011001
+00100000010000000010010001010101
+00100100001110100010010000010000
+01111000010110000111110000000000
+00011101000000100111111000000000
+01100000000000100100000011001010
+00100000011000000000000000000000
+01111000001101001111110000000000
+11000101100000100010010000011111
+01111001001111111000000000000100
+01110000000000000111110000000011
+01110000000000000111110100110011
+00100000010000000110001011111000
+00011000100000100111111000000000
+01100000000000001000000001110111
+00011000000000000111111000000000
+01100000000000110000000000111000
+01101000000000001000000000110001
+01111001001000000111111000000001
+01100000000000001000000000110001
+00100000010000000010101010001000
+01111000010101001111110000000000
+01111000001101000111110000000000
+00100000011000000000000000000000
+01000100101000011100000000001000
+01111000010101101111110000000000
+01111001001111111000000000000101
+01111001001111111000000000001010
+01111001001111111000000000010000
+01111001001111111000000000001111
+01101000000000001000000001000111
+01111001001111111111111000000101
+01111001001000000111111000000100
+01100000000000001000000001000111
+00100000011000000000000000000000
+01000100101000100100000000001000
+01110000000000000001000100100000
+01110000000000000100011101010000
+01101000000000010100000010111111
+01100000000000010000000000111110
+00011100010000100111111000000000
+01100000000000100100000011001010
+00100000011110000000000000000000
+00011101000000100111111000000000
+01100000000000100100000011001010
+00100000011000000000000000000000
+01000100101000101100000000001000
+00100000010000000101110100000100
+00100000010000000010010001011001
+01100000000000001000000001000110
+01011000000000000000000000000000
+01100000000000010000001001011101
+01011000000000000001110010000000
+01100000000000010000000001010001
+01101000000000001000000000110000
+01111001001000000111111000000000
+01100000000000001000000000110000
+01110000000000000100101100000000
+01110000000000000100110000000000
+01110000000000001010000000000000
+00100000001000000010101010001000
+01000100101000110100000000001000
+00011000000000000111111000000000
+01100000000001000100000110111110
+11100000101001000000000000000000
+00100000010000000010000111000101
+00100000001000000010001001010100
+01101000000000001000000000010001
+00011111111000001111111111111111
+01100000000000001000000000010001
+00100000011000000000000000000000
+01101000000000001100000011001111
+00011111111000001111111000000001
+01100000000000001100000011001111
+00100000011000000000000000000000
+01000100101000111100000000001000
+01101000000000001100000111001110
+11000000000000011010010001100010
+01101000000000001000000001001000
+11000000100000001010010001100110
+00100000010000000100110100000110
+00100100001000101010010001100110
+00100000010000000010000110100100
+01110000010000011100111000000000
+01000100101001000100000000001001
+00100000010000000011001110101111
+00100000010000000010011011101001
+01110000000010101001100100000010
+00100000010000000111110110000110
+00100000010000000101110011110111
+00100000010000000100110101101011
+00100000010000000111010101111101
+01101000000000001000000000110000
+01111001001111111111111000000000
+01100000000000001000000000110000
+01110000010001101000000100000000
+01101000000000001000000001001100
+00101111111000011000000000000000
+00100000001000001010010001110110
+01111001001111111000000000000001
+01101000000000001000000001000111
+11000011000000011010010001111000
+01101000000000001000000001001011
+11000100000000110000000000000000
+01111001001111111000000000000010
+00100000011000000000000000000000
+01000100101001001100000000001001
+01101000000000001000000101110100
+00100000011110100000000000000000
+00011111111000100000100000000000
+00100000010000000010010100010100
+00100100011101101000000000000000
+00011000000000000000001000000000
+00100000010000000010011101010111
+00011000100000100111111000000000
+01100000000000001000000001110111
+00011000000000000111111000000000
+01100000000000001000000101110100
+00100000011000000000000000000000
+01000100101001010100000000001001
+01101000000000001000000000110000
+11000011000000010010010010010110
+00011000000000000000001000000111
+11000101100000111010010010010101
+00100000010000000010011100100101
+00100100001000001010010010010110
+00100000001101110010010010010110
+00100000010000000010010011000001
+01011000000000000000000000000010
+01100000000000010100000011001000
+00100000011000000000000000000000
+00100100011101110000000000000000
+01000100101001011100000000001001
+00100000010000000010001001000011
+00100100001000101010010010100111
+01101000000000001000000001000111
+11000011000000011010010010110000
+11000101000000101010010010110100
+01101000000000001000000101111111
+11000010100000110010010010111010
+01101000000000010100000011001000
+00011111111000001111111111111111
+01100000000000010100000011001000
+00100000001110100010010010100101
+01101000000000001100000011000101
+10011000000000000000001000000000
+00100000011000000000000000000000
+01000100101001100100000000001001
+00100000010000000010011010000111
+00100000010000000010011100100101
+00100000001000001010010010110000
+00100000010000000110000000001010
+00100000001101000010010010111110
+01101000000000001000000001001011
+11000010100000110010010011000000
+11000101000000101010010010110100
+01101000000000001000000101111111
+11000010100000110010010010111010
+00011000000000000000001000000001
+00100000011101001000000000000000
+00011000000000000000001000000000
+00100000011000000000000000000000
+01000100101001101100000000001001
+01101000000000001000000000011001
+10011000000000000000001000000000
+11000001100000001000000000000000
+00011000000000000000001000000000
+00100000011000000000000000000000
+01101000000000001000000101011000
+00011111111000010000001000001111
+01111001001000000000000000000101
+00100000011000000000000000000000
+00011000000000000000001000010011
+00100000001000000010010011000001
+00100000010000000010010011001010
+01000100101001110100000000001001
+01101000000010001000000001000111
+01111001001000000000010000000011
+01100000000010001000000001000111
+00011000001000100111111000000000
+01100000000000001100000011000101
+01011000000000001111111111111111
+01100000000000010100000011001000
+00100000011000000000000000000000
+01000100101001111100000000001001
+01101000000000001000000001001100
+00101111111011111111111000000101
+01101000000000010100000111011100
+00100000001000001010010011100000
+00011000000000000000001000000011
+00011111111001100111110000010001
+00100000011000010000000000000000
+00011000000000000000001000000100
+00011111111001100111110000011011
+00100000011000010000000000000000
+00011000000000000000001000001010
+00011111111001100111110001111001
+00100000011000010000000000000000
+00011000000000000000001000001011
+00011111111001100111110010110111
+00100000011000010000000000000000
+00011000000000000000001000001110
+00011111111001100111110011100000
+00100000011000010000000000000000
+00011000000000000000001000001111
+00100000011000000000000000000000
+00011000000000000000001000000011
+00011111111001100111110000010001
+00100000011000010000000000000000
+00011000000000000000001000000100
+00011111111001100111110000110110
+00100000011000010000000000000000
+00011000000000000000001000001010
+11011000010000000000000101101111
+10011000010001100111110000000000
+00100100011000010000000000000000
+00011000000000000000001000001110
+11011000010000000000001010100111
+10011000010001100111110000000000
+00100100011000010000000000000000
+00011000000000000000001000001111
+00100000011000000000000000000000
+01101000000000001000000000110000
+11000011000000001010010011110101
+01101000000000010000000000110010
+00100000001110100010010011110101
+00100100001101110010010011110111
+00100000010000000010101001001111
+00011101000000001100001000000001
+01111000001010000111110000000000
+01101000000000010000000000111110
+00011111111000110111111000000000
+11011000010000000000010100000000
+10011000010000001111111000000000
+00100000010000000010101000100100
+00100000010000000010100011101010
+00011000000000000100100000000011
+00100000010000000010100011001100
+00100000010000000010010000101010
+00100000010000000010100111110001
+01000100101010000100000000001010
+01101000000000010000000000111110
+00011111111000110111111000000000
+00100000010000000010101000100100
+00100000010000000010100111101011
+01111000001001101111110000000000
+01101000000000010000000000111110
+11011000010000000000001110111011
+10011000010000001011011000000000
+00110111110000011000010000000000
+00011011010000100000010000000000
+01100000000010110000000010011010
+01111000010001101111110000000000
+00100100011011000000000000000000
+11011101001000000000001110111011
+00011100001000100101000000000000
+00100000001101011010101100000101
+00100000011000000000000000000000
+01000100101010001100000000001010
+00100000010000000010010011110000
+00100100001011000010100011111001
+00100000010000000010100110111011
+11000101100010001010010100011100
+01101000000000010000000011110110
+00011111111000001111111000000001
+01100000000000010000000011110110
+00011100001000110000010000000000
+00011000010000011001110001000000
+01000100101010010100000000001010
+01111000001000111111110000000000
+01111000001001010111110000000000
+01111000001001011111110000000000
+00001001100000000000000000000011
+00011001100011001111111000000000
+01100000000000001000000101011101
+00001001100000000000000000000100
+00001000000000001000000000000111
+00011001100000100111111000000000
+01100000000000001000000000011001
+00001001100000000000000000000011
+00011001100011001111111000000000
+01100000000000001000000101011110
+01101000000000001000000000011001
+00011111111001100111110000000011
+00100000001000010010010100110011
+11000000000000111010010100110011
+01101000000000001000000001001100
+00101111111011111111111000000101
+01111001001000001010101000000001
+01000100101010011100000000001010
+00001001100000000000000000001000
+01111000010001011111110000000000
+01111000010001010111110000000000
+00100000001000110010011000110001
+11000101100010001010010100111100
+01101000000000010000000011111000
+00011111111000001111111000000001
+01100000000000010000000011111000
+01000100101010100100000000001010
+01101000000000001000000101011101
+00101111111000000000111000000000
+01111001001000001000000000001010
+00100000001000001010010101001100
+10101000100000000000111000000000
+00100000001000001010010101001011
+11000101100000111010011001001101
+01101000000010001000000010110000
+10101000010000000000111000000000
+00100100001000001010011001001101
+01101000000000001000000001000111
+01111001001111111111111000000101
+01111001001000000111111000000100
+01100000000000001000000001000111
+01111000001101101111110000000000
+01000100101010101100000000001010
+01101000000000001000000000011001
+00011111111000100000001000000000
+11000101000001010010010101011011
+01101000000010001000000101011110
+01101000000000001000000001000111
+01111001001111111111111000000000
+00101000010011111111111000000000
+01111001001000001111111000000000
+00101000010011111111111000000001
+01111001001000001111111000000001
+01100000000000001000000001000111
+00101000010011000000000000000001
+00100000001000001010010101011011
+00100000010000000010011010000111
+01000100101010110100000000001010
+11011000010000000000000000000000
+00100000010000000010101000011100
+00011000001000010111111000001111
+11000000000000001010010110000111
+11000000000000000010011001001101
+11000000000000010010011001011001
+01101000000010001000000101011110
+01101000000000001000000001000111
+10101000010000000000100000000000
+00100100001000001010010101101001
+11000101100001010010010101101000
+11000011000000111010010101101001
+01111001001000000000000000001111
+01000100101010111100000000001010
+00011000001000100111111000000000
+11000000000000011010010110001001
+11000000000000100010010110001101
+11000000000000111010010101111000
+11000000000001000010010110001100
+11011000010000000000000000000100
+00100000010000000010101000011100
+11000000000001010010010110001000
+11000000000001011010010110001011
+11011000010000000000000000001000
+00100000010000000010101000011100
+11000000000001110010010110001000
+11000000000001111010010110001011
+00100000011000000000000000000000
+01000100101011000100000000001011
+01111000001001101111110000000000
+01111000001001001111110000000000
+01111000001001110111110000000000
+11011000101000000000000011010001
+00011000000000000111001000011110
+00001001100000000000000000001000
+00011001100010010111111000000000
+11100000101000001000000000000000
+11000010000000000010010101111110
+11000101100000111010011001001101
+00001001100000000000000000010000
+01111101001000110000000000001000
+00100000001000110010011000111101
+00100000001000000010011000100000
+00100000001000000010011001001101
+01111001001000000000000000010000
+01111000001001100111110000000000
+00100000001000000010010110001110
+01111001001000000000000000010000
+01111001001000000010101000000010
+01111000001001101111110000000000
+01000100101011001100000000001011
+11000101000000001010011001001101
+00101010101011000000000000000001
+00100000001000001010010110011010
+01111000010000111111110000000000
+01111000001001101111110000000000
+01111000010001100111110000000000
+00011100010000001001011000000010
+00110100010100110000010000000000
+00100100001011000010011000111101
+01111001001000000000000000010000
+01111000001000111111110000000000
+01000100101011010100000000001011
+01111000001001110111110000000000
+01111000001001001111110000000000
+00001001100000000000000000000011
+00011001100011001111111000000000
+01100000000000001000000110000000
+00001001100000000000000000000101
+11000101000010000010010110100101
+00011001100010010111001000000000
+00011111001010010111001000000000
+00100000001000000010010110101000
+00001001100000000000000000000101
+00011001100000110111001000000000
+00001001100000000000000000000011
+01000100101011011100000000001011
+00011111001000100111111000000000
+01100000000000010000000101011111
+00100000001110100010010111101000
+10011110101001100111110000000000
+00100000001000010010011000111101
+01000100101011100100000000001011
+01111001001111111000000000000000
+01101000000000001000000110000000
+00011111111000010111111000000011
+11011000101000000000010101010001
+11000000000000011010010110111010
+11000101000010001010010111100100
+01101000000000001000000110000000
+00011111111000010111111000000011
+11000000000000010010010110111111
+11000000000000001010010111010011
+00100000001000000010011000111101
+01101000000000010000000101011111
+00011111111001100111110001110000
+00100100001000010010011000111101
+11000101000001111010011000100000
+00100000001000000010010111100100
+01000100101011101100000000001011
+11000101000001111010011000100000
+01101000000000010000000101011111
+11011000010000000000001011100000
+10011000010001100111110000000000
+00100000001000010010011000111101
+01101000000000001000001001100011
+11000011000000000010010111001001
+11000011000000001010010111001110
+00100000001000000010011001001101
+01110000000000100110000100000001
+01101000000000010000001001011101
+11000000100000000010011001001101
+11011000101000000001000000000000
+00100000001000000010010111100100
+01110000000000100110000100000010
+01101000000000010000001001011111
+11000000100000000010011001001101
+11011000101000000001010000000000
+00100000001000000010010111100100
+01000100101011110100000000001011
+11000101000001111010011000100000
+01101000000000010000000101011111
+11011000010000000000001011100000
+10011000010001100111110000000000
+00100000001000010010011000111101
+01101000000000001000001001100001
+11000000000000001010010111011101
+11000000000000010010010111100001
+00100000001000000010011001001101
+11011000101000000001000000000000
+01101000000000010000001001011101
+10011000101000001000101000000000
+00100000001000000010010111100100
+11011000101000000001010000000000
+01101000000000010000001001011111
+10011000101000001000101000000000
+00001001100000000000000000001000
+00011001100010010111111000000000
+11100000101000001000000000000000
+11000010000000000010010111100100
+01000100101011111100000000001011
+00001001100000000000000000010000
+00100000001000110010011000110111
+01101000000000001100001101100011
+11000000000000001010011001001101
+11000101000010001010011000001101
+11000101000001111010011001001010
+01101000000000001000000110000000
+00101111111000000000011000000011
+00100000001000001010011000001101
+01101000000000010000000101011111
+00100000001110100010011000001101
+01000100101100000100000000001100
+01101000000000001000001001100001
+11000000000000001010010111111001
+11000000000000010010011000000011
+00100000001000000010101010001100
+01101000000000010000001001011101
+01101000000010010000000101011111
+10011000010000001111111000000000
+01100000000000010000001001011101
+11000000000000000010101010001100
+01101000000010010001000000000000
+00011000010000001000010000000100
+10011000010001100111110000000000
+00100000010000101010011101000111
+00100000001000000010011000001101
+01101000000000010000001001011111
+01101000000010010000000101011111
+10011000010000001111111000000000
+01100000000000010000001001011111
+11000000000000000010101010001100
+01101000000010010001010000000000
+00011000010000001000010000000100
+10011000010001100111110000000000
+00100000010000101010011101001011
+00100000001000000010011000001101
+01000100101100001100000000001100
+01101000000010001000000001001100
+01101000000000001000000110000000
+00101111111000000000011000000011
+01111001001000001000010000000110
+01111101001000001000010000000111
+01100000000010001000000001001100
+00100100001000001010011000010110
+01111001001000000000000000000001
+11000101100010001010011000100000
+00101000010011111111111000000110
+00100000001000001010011000100000
+01101000000000010000000011111010
+00011111111000001111111000000001
+01100000000000010000000011111010
+01111001001000000000000000000101
+01111001001111111000010000000111
+01111001001111111000000000000001
+01100000000010001000000001001100
+01000100101100010100000000001100
+01101000000010001000000101011110
+01101000000000001000000001000111
+01111001001000000111111000000101
+00101000010011111111111000000010
+01111001001000001111111000000010
+00101000000011111111111000001010
+01111001001000001111111000000111
+01100000000000001000000001000111
+01101000000000010000000101011111
+00100100001110100010011001001101
+01101000000000001000000001001100
+01111001001111111111111000000111
+01100000000000001000000001001100
+01101000000000001000000110000000
+00101111111000000000111000000001
+00100000001000000010011001001101
+01000100101100011100000000001100
+01111000010101101111110000000000
+01101000000000010000000000011010
+00011111111000001111111000000001
+01100000000000010000000000011010
+00100000001000000010011001001101
+01101000000000010000000000011100
+00011111111000001111111000000001
+01100000000000010000000000011100
+00100000010000000010011000111110
+11000101100010001010011000111101
+01111001001000000000000000000101
+00100000001000000010011001001101
+01000100101100100100000000001100
+01101000000000001000000110000000
+00101111111000000000011000000011
+00100100001000001010011001000110
+01101000000010001000000001001100
+01111001001111111000010000000110
+01100000000010001000000001001100
+00100000011000000000000000000000
+01101000000010001000000001001100
+01111001001111111000010000000111
+01100000000010001000000001001100
+00100000001000000100110000001011
+01101000000000001000000001000111
+01111001001000000111111000000101
+01100000000000001000000001000111
+01000100101100101100000000001100
+01111000010011101111110000000000
+01111000010011100111110000000000
+01111000010001101111110000000000
+01111000010001100111110000000000
+01111000010001001111110000000000
+01111000010001110111110000000000
+01111000010000111111110000000000
+00100000001100001010100011111001
+00110111110100111000001000000000
+00100000000000000000000001100100
+00100000001000000010100011111001
+01000100101100110100000000001100
+01111000001001001111110000000000
+01111000001001100111110000000000
+00001001100000000000000001001000
+00101111111011111111111000111010
+01111001001000001000000000000000
+00011100000000100000010000000000
+01010111111000000100000000000000
+01010111111000000011110000000000
+01111000001010101111110000000000
+00111000000010111111111111111111
+00111000000011001111111111111111
+00100000000000000000000000100000
+00101001101010000000000000000000
+00011101100000100111111000000000
+01100000000000011000000101111000
+00011101101000100111111000000000
+01100000000000001000000101111011
+00011000010000100100000000000000
+00100000001000001010011001101110
+00100000001000000010011000111101
+01000100101100111100000000001100
+00001001100000000000000001001000
+01010111111000000011111000000000
+01010111111000000000100000000000
+01010111111000000101110000000000
+01010111111000000010010000000000
+00011000000000000111111000000000
+00001001100000000000000000010000
+00100000001000110010011000111101
+01011111111111111111111111111100
+10011010010000010111111000000000
+01100000000000100000000101100101
+00011011101000100111111000000000
+01100000000000011000000101110101
+00011011100000100111111000000000
+01100000000000001000000101110011
+00011000100000100111111000000000
+01100000000000001000000101110100
+00011101110000100111111000000000
+01100000000000010000000101111100
+00011100001000100111111000000000
+00001000000000001000001000100000
+00101000001000000001111000000010
+01111001001000001000000000001011
+00100000001000000010011001001101
+01000100101101000100000000001101
+01101000000000001000000001000111
+11000100000000011000000000000000
+01111001001111111111111000000011
+01111001010000000111111000000110
+01100000000000001000000001000111
+01101000000000001100000011000101
+11000000000010011010011010011100
+11000001000000111000000000000000
+01101000000000001000000001001011
+11000100000000110000000000000000
+01111001001111111111111000000110
+01111001001000000111111000000111
+01100000000000001000000001001011
+01111001001111111000000000000010
+01101000000000010100001001000110
+00100100011110100000000000000000
+01101000000000001000000001001011
+01111001001111111111111000000111
+01100000000000001000000001001011
+00100000001000000101001001011101
+01000100101101001100000000001101
+01101000000000001000010010110111
+00011111111000110111111000000000
+11000000000010001010011010111000
+11000000000010010010011011000000
+11000000000011000010011011101001
+11000000001111111010011010101000
+11000001100000011000000000000000
+01101000000000001000010010111000
+11000000000101011010011010110000
+11000000000010001010011010101011
+00100000011000000000000000000000
+01101000000000001000010010111000
+01111001001000000111111000000111
+00100000011000000000000000000000
+00100000011101001000000000000000
+01101000000000001000000000110000
+11000011100000100000000000000000
+01110000000000000111110000110001
+00100000011000000000000000000000
+00100000011101001000000000000000
+01101000000000001000000000110001
+00101111111011111111111000000100
+00100000001000001010011010110101
+00100000011000000000000000000000
+01111001001111111111111000000100
+01100000000000001000000000110001
+00100000011000000000000000000000
+01000100101101010100000000001101
+01101000000000001000000001001100
+01111001001000000111111000000010
+01100000000000001000000001001100
+01110000100000000001000100000001
+01101000000000001000000000110000
+00101111111011111111111000000100
+00100000011000000000000000000000
+01000100101101011100000000001101
+01101000000000001000000001001100
+01111001001111111111111000000010
+01100000000000001000000001001100
+01110000100000000001000100000000
+00100000011000000000000000000000
+01000100101101100100000000001101
+00011100010000100111111000000000
+01100000000000100100001000001100
+00011100010000001010001000000011
+00100000001101001010011011001100
+00011101000000001010001000000011
+01101000000010010000000000110010
+00011010001000100111111000000000
+01111001001111111111111000011011
+10011000010001101111110000000000
+01101000000000010000000001110101
+00100000010000000111111110000110
+00011000000001110010011000000000
+10011010011001100111111000000000
+00100000001000010010011011010110
+10011000010000001111111000000000
+10011010001000001111111000000000
+01100000000000100000000000110100
+01110000010001010101101100000000
+01101000000000001000000000110000
+01111001001000000111111000000001
+01100000000000001000000000110000
+01101000000000001000000001110011
+01100000000000001000000010001010
+01011000000000000000000000000000
+01100000000000011100000101101001
+01100000000000011100000101101100
+01100000000000001100000101011001
+01110000000010101001100100001011
+00100000010000000111110110000110
+01101000000000010100000011000001
+01100000000000010000000000111110
+00100100011101001000000000000000
+00011000100000001000111111111111
+00100000011000000000000000000000
+01000100101101101100000000001101
+01101000000000001000000000110000
+11000100000000001000000000000000
+01111001001111111111111000000001
+01100000000000001000000000110000
+01101000000000010100000010111111
+01100000000000010000000000111110
+01111000010101011111110000000000
+01110000000010101001100100001100
+00100000001000000111110110000110
+01000100101101110100000000001101
+01111000001101110111110000000000
+01101000000000001000000000110000
+11000010100000001010011100000000
+11000110000010001000000000000000
+01101000000000001000000001000111
+11000011100000011000000000000000
+01101000000000001000000001001000
+00100100011110100000000000000000
+01101000000000001000000001001011
+11000011100000110000000000000000
+00011000000000000111111000000000
+00100000011000000000000000000000
+11000011000000010010011100001111
+01101000000000001000000010001010
+11000000000000010010011100000110
+01101000000000001000000001000111
+11000010100000011010011100011000
+11000101100001000010011100011000
+00100100001101001010011100011000
+01101000000000001000000001001000
+00100100001110100010011100011000
+01101000000000001000000011101111
+00011111111000001111111111111111
+01100000000000001000000011101111
+00100100001110100010011011111110
+01110000000000001110111100010000
+00100000001000000010011100011000
+01101000000000001000000010001010
+11000000100000001010011100011000
+01101000000000001000000010001011
+00100000001110100010011100011000
+00011111111000001111111111111111
+01100000000000001000000010001011
+01101000000000001000000001000111
+11000011100000011000000000000000
+00100100011101101000000000000000
+01101000000000001000000010001010
+00011111111000001111111111111111
+01100000000000001000000010001010
+00100000011000000000000000000000
+01000100101101111100000000001101
+01111000010010000111110000000000
+00011000010000100011011000000000
+00100000010000000010001001100000
+01111000010101000111110000000000
+00100100011000101000000000000000
+00011000000000000011011000000000
+01111000001101000111110000000000
+00100000011000000000000000000000
+01101000000000001100000101011000
+10101000100000011111111000000000
+00100000011000000000000000000000
+01000100101110000100000000001110
+01111001001111111000000000000001
+01110000000000100110101000000000
+01101000000000001000001001100011
+00100000011110100000000000000000
+00101111111011111111111000000000
+11011000110000000001000000000000
+00100000010000001100110101111001
+01000100101110001100000000001110
+01101000000000001000001001101010
+11000000000000001010011100111011
+01110000000000100110101000000000
+01101000000000001000001001100011
+11000100000000001000000000000000
+11011000110000000001010000000000
+00100000010000000100110101111001
+01101000000000001000001001101010
+11000000000000001010011101000001
+00100000011000000000000000000000
+01101000000000001000001001100011
+01111001001111111111111000000000
+01100000000000001000001001100011
+01011000000000000000000000000000
+01100000000000010000001001011101
+00100000011000000000000000000000
+01101000000000001000001001100011
+01111001001111111111111000000001
+01100000000000001000001001100011
+01011000000000000000000000000000
+01100000000000010000001001011111
+00100000011000000000000000000000
+01101000000000001000001001100011
+01111001001000000111111000000000
+01100000000000001000001001100011
+00100000011000000000000000000000
+01101000000000001000001001100011
+01111001001000000111111000000001
+01100000000000001000001001100011
+00100000011000000000000000000000
+01000100101110010100000000001110
+00011101000000001100001000000001
+00100000010000000010100011101010
+00011000000000000100100000000011
+00100000010000000010100011010010
+00100000010000000010101001010001
+00100000010000000010101001011111
+00100000001000000010101001100100
+01000100101110011100000000001110
+00100000010000000010101001001101
+00011101000000100111111000000000
+01101000000010100100000011001010
+10011000010001100111111000000000
+11000001100000001000000000000000
+00101000001000000011111000000000
+00100100001000001010011101100001
+01101000000000001000000000011001
+00100000011110100000000000000000
+00100000010000000010011101001111
+00101000001000000011111000010000
+00100000001000001010011001001101
+00011100001000110000010000000000
+00011000010000011001110001000000
+01000100101110100100000000001110
+01111000001000111111110000000000
+01111000001001010111110000000000
+01111000001011011111110000000000
+01111001001111111000000000010000
+00011000100000100111111000000000
+00001000000000001000011000000011
+00011000001000100111111000000000
+00001000000000001000011000000100
+01101000000000001000000001000111
+00001000000000001000000000000100
+00001000000000001000011000000011
+01111000001001000111110000000000
+00001000000000001000011000001000
+01111000010011011111110000000000
+01111000010001000111110000000000
+01111000010001010111110000000000
+01111001001111111010101000000010
+11011000010000000000000000000000
+00100000010000000010101000011100
+01000100101110101100000000001110
+00011000001000010111111000011111
+11000000000010011010011110110100
+11000000000000000010011001001101
+11000000000000001010011001001101
+11000000000000010010011110010111
+11000000000000011010011111000101
+11000000000000100010011111001011
+11000000000000111010011110001100
+11000000000001000010011111001010
+11011000010000000000000000000100
+00100000010000000010101000011100
+11000000000001010010011111000111
+11000000000001011010011111001101
+11011000010000000000000000001000
+00100000010000000010101000011100
+11000000000001111010011111001101
+00100000001000000010011111000111
+01000100101110110100000000001110
+01111000001011101111110000000000
+01111000001001001111110000000000
+01111000001001110111110000000000
+00011000000000000111001000011110
+11011000110000000000000010110011
+11101000110000001000000000000000
+00001000000000001000011000001000
+11000010000000000010011110010010
+11000101000000111010011111110111
+00100000001000000010011001001101
+01000100101110111100000000001110
+01101000000000001000000110000001
+00011111111000100000100000000000
+01101000000000001000000010010000
+00011111111000100011100000000000
+01101000000000011100000010101010
+00011111111000100011101000000000
+01101000000000010100000010100100
+00011111111000100101110000000000
+01111000001001001111110000000000
+01111000001011100111110000000000
+00011100000000100010001000000000
+00100000010000000010100011100010
+01111000001010101111110000000000
+00100000000000000000000000100000
+00011100001000100001011000000000
+01101000000000100000000101100001
+00011111111000100100001000000000
+01010011110000000111111000000000
+01111001001000000111111000111010
+00001000000000001000011001001000
+01010011111000000111111000000000
+00001000000000001000011001001000
+00011001011000100100001000000000
+00011010001000100100000000000000
+01111000001001000111110000000000
+00001000000000001000011000010000
+01111000010001000111110000000000
+00100000001000000010011001001101
+01000100101111000100000000001111
+01111000001001110111110000000000
+01111000001001001111110000000000
+01111000001011100111110000000000
+01101000000000001000010010110110
+00011111111000010000010111111000
+11011000110000000000010010110110
+00011000010000001000010000001000
+00011000010000001010011110111000
+00100100001000010010011111000010
+11101000110001001000000000000000
+00001000000000001000011001001000
+00011010011000100000010000000000
+00100000001000000010011110111100
+11101000110001001000000000000000
+00001000010000011000011000000000
+00100000001000000010011111110111
+01111000001011100111110000000000
+00100000001000000010011111010000
+01111000001011100111110000000000
+01111001001000000000000000010000
+00100000001000000010011111010000
+01111001001000000010101000000010
+01111000001011101111110000000000
+00100000001000000010011111010000
+01111001001000000010101000000010
+01111000001011101111110000000000
+01111001001000000000000000010000
+01000100101111001100000000001111
+01101000000000001000000001001100
+11000011000000101010011111100101
+00011000001001100111110000000011
+00100000001000010010011111100101
+01111000010001110111110000000000
+01111000010011100111110000000000
+01111000001011101111110000000000
+01111000010000111111110000000000
+01111001001000000010101000000001
+00101010101011111111111000000010
+00100000001000001010011111011111
+01011000000010101011111011101110
+00001000000000001000011000010100
+00100000001000000010011111100011
+01011000010111111010111010111010
+00001000000000001000011000011000
+01011000000000000000000000010010
+00001000000000001000011000000110
+01111000001000111111110000000000
+01111001001000000000000000010000
+01111000001001110111110000000000
+01111000001001001111110000000000
+11000101000000101010100000000000
+01101000000000001100000111011011
+00001000000000001000011000000011
+01101000000000010100000111011100
+10011000000000000111001000000000
+11000101000010000010011111101111
+00001000000000001000011000000101
+00100000001000000010011111110000
+00001000000000001000011000001101
+00011111001000100111111000000000
+00100000001110100010011111110111
+01101000000000010000000101101111
+10011000000000000000110000000000
+11101000110000001000000000000000
+00001000000000001000011000001000
+11000010000000000010011111110100
+01111000001001000111110000000000
+00001000000000001000011000010000
+01111000010001000111110000000000
+00100000010000000010010011000001
+01101000000000001000000001001100
+11000011000000101010011001001101
+00011000000000000111111000000000
+00001000000000001000011000000110
+00100000001000000010011001001101
+01000100101111010100000000001111
+11000101000010000010100000001000
+01101000000000001000000110000000
+00001000000000001000011000000011
+01101000000000001000000101011111
+10011000000000000010011000000000
+00001000000000001000011000000101
+00100000001000000010100000001101
+01101000000000001000000110000000
+00001000000000001000011000000011
+01101000000000010000000101011111
+10011000000000000010011000000000
+00001000000000001000011000001101
+11011000110000000000010101010001
+00011010011000100111110000000000
+00100000001000101010100000010100
+11101000110000001000000000000000
+00001000000000001000011000001000
+00011010011000001010011111111111
+00100000001000000010100000001110
+01101000000000010000000011111100
+00011111111000001111111000000001
+01100000000000010000000011111100
+00100000001000000010011111110111
+01101000000000100000000101100101
+00011111111000001010001000000111
+01101000000000010000000101110001
+00100100001110100010100000011110
+00011010001000001010001111111101
+00100000001000000010100000100110
+00011111111011111111111000001100
+01101000000110010000000001000000
+00011000010000001000010000000001
+10011000010001100111111000000000
+00100100001000010010100000100101
+00011010001000001010001111111111
+00100000001000000010100000100001
+00011111111001100111111000000000
+00110111110100011000001000000000
+00101100010000000000011000000000
+00100100001000001010100000100110
+10011000000000000101001000000000
+00011010001000100101000000000000
+10011000000000000101001000000000
+00100000011000000000000000000000
+01000100101111011100000000001111
+00110111110100010000001000000000
+00011011010000100111111000000000
+10011000000000000000110000000000
+00011111111100010111111000000000
+10011100010001100111001000000000
+00011111001000010111001000000011
+00100100001000101010100000110111
+00011000000000000111111000000000
+00100000001000000010100000111011
+11011000010000000000111010100110
+00011000000000000111111000000000
+10011000010000001111111000000000
+11000010000000000010100000111001
+10011000110000001111111000000000
+00011111111001101111110000001100
+00100000010000000111111110000110
+00011000000001111111111000000000
+01100000000000010000000101110001
+00100000011000000000000000000000
+01000100101111100100000000001111
+00011011010000100111111000000000
+00011011001000100000010000000000
+10011000010001100111110000000000
+01111101001000010111111000101100
+10011000010001100000010000000000
+01011000000000000000111010100110
+00101000010011000000000000001111
+00100000001000001010100001001100
+01011111111111110000111010100110
+10011000010000001000010000000000
+01100000000010110000010001000111
+00100000011110110000000000000000
+01100000000010110000000000111000
+00100000011000000000000000000000
+01111000010110000111110000000000
+01101000000000110000010001000111
+00100000001110110010100001010100
+01101000000000110000000000111000
+10011011001000001110000000000000
+00011110000000001110000000001010
+01011000000000000000111010100110
+10011110000001100111111000000000
+00101111111011000000000000001111
+00100000001000001010100001011110
+01011000000000001111000101011010
+10011110000000001110000000000000
+00011110000000100011010000000000
+00100000011000000000000000000000
+00011000000000000111110000000000
+00100000001000000010100001011100
+01000100101111101100000000001111
+00100000010000000010100100011000
+00011100001000100111111000000000
+00011111111000010111111110000000
+00101100100000000000111000000011
+00100100001000001010100001101001
+00011111111010010111111000000000
+10011010111000001111111000000000
+00100000001000000010100001101010
+00011010111000100111111000000000
+00011111111001101111110001001111
+01111000001010101111110000000000
+00100000010000000111111110000110
+00011000000001110010001000000000
+00011010001000001000010111011000
+00100000001000010010100001110010
+00011010001000111000010000000000
+00100000001000000010100001110100
+00011000010000111000010000000000
+00011000010000001000010000000001
+01000100101111110100000000001111
+01101000000000001000000000110001
+11000011000000011010100010000101
+01101000000000100100000011010010
+10011100001001100111110000000000
+00100000001000010010100010000101
+00100000010000000010100010100100
+01101000000000001100000011011001
+00100000011110100000000000000000
+01101000000000001000000000110001
+01111001001000000111111000000010
+01100000000000001000000000110001
+01101000000000101100000011100111
+01100000000000101100000011011010
+11101000110000101000000000000000
+01100000000000101100000011011111
+00100000010000000010100010101001
+01101000000000001000000000110001
+11000100000000010000000000000000
+00101100001011111111111000000001
+00100000001000001010100010100001
+00011000010010010010001000000000
+00011000010000010000111000000111
+01011000000000000100000011011010
+10011010001000001010001000000000
+11101010001000001000000000000000
+10101111111011000000000000000000
+00100000001000001010100010010010
+00011000010000100111111000000000
+00100000001000000010100010011110
+01101000000000001100000011100100
+10011000000000000010010000000000
+00011100001000100111111000000000
+00011111111000010111111110000000
+00011111111010010111111000000000
+10011010111000001111111000000000
+10011010010001101111110000000000
+01011000000000000100000011110010
+00100000010000000111111110000110
+00011000000001110010001000000000
+10011010001000001000110000000000
+11101000110000001000000000000000
+01100000000000001100000011100101
+10011000000000000000010000000000
+00100000011000000000000000000000
+01101000000000001100000011100101
+10011000000000000000010000000000
+00100000011000000000000000000000
+01101000000000001000000000110001
+01111001001111111111111000000010
+01111001001111111111111000000011
+01100000000000001000000000110001
+00100000011000000000000000000000
+01000100101111111100000000001111
+11011000101000000100000011110010
+00011000000000000111001000001010
+00100000010000000111111011000110
+11011000101000000100000011110010
+00011000000000000010011000000000
+00011000000000000000111000000010
+01101000000000101100000011011010
+10011000000000000000010000000000
+00101000111000011111111000000010
+00100000001000001010100010110101
+00011000010000110000010000000000
+00101000010011000000000000000000
+00100000001000001010100010111001
+00011010011000100111111000000000
+11100000101000001000000000000000
+00011000010010110000010000000000
+00011010011000001010011000000010
+00101010011000011111110000101000
+00100100001000001010100011000010
+01101000000000101100000011011111
+10011000000000000000010000000000
+00101000111000011111111000000010
+00100000001000001010100011000010
+00011000010000110000010000000000
+00011010011001100111110001001110
+00100000001000010010100010110101
+00011000000000000010011000000001
+00011000111000001000111111111111
+00100100001000101010100010110000
+11011010001000000100000011110010
+00011000101000100111111000000000
+10011010001001100111111000000000
+01100000000000001100000011100100
+00100000011000000000000000000000
+01000100110000000100000000010000
+00100000010000000010100001100000
+01101000000000001000000101111111
+11000011000000101010100011010001
+01101000000010001000010011001100
+00100000001000000010100100011111
+01000100110000001100000000010000
+00100000010000000010100001100000
+01101000000000001000000101111111
+11000011000000100010100011010111
+01101000000010001000010011001011
+00100000001000000010100100110011
+00011000000000000101101000000000
+01101000000000011100000010100111
+10011000000000000101100000000000
+00100000011000000000000000000000
+01000100110000010100000000010000
+01101000000000001100000111010011
+00011111111000100101101000000000
+01101000000000011100000111010000
+00011111111000100101100000000000
+00100000011000000000000000000000
+01000100110000011100000000010000
+01101000000000010100000010100100
+00011111111000100101110000000000
+01101000000000001100000010100011
+00011111111000100101101000000000
+01101000000000011100000010100000
+00011111111000100101100000000000
+00100000011000000000000000000000
+01000100110000100100000000010000
+01101000000000010000000001000100
+00011111111000100101110000000000
+01101000000000001000000001000011
+00011111111000100101101000000000
+01101000000000011000000001000000
+00011111111000100101100000000000
+00100000011000000000000000000000
+11000101000100000010100011110101
+11000110100011101000000000000000
+11000110100011111000000000000000
+00011101100000010101100100000000
+01111000001010101111110000000000
+00100000000000000000000000100000
+00100000011000000000000000000000
+01000100110000101100000000010000
+00100000001100001010100100001010
+01110000100010010101010111010100
+00100000000000000000000000000100
+01110000100010010101010111010010
+00100000000000000000000000000100
+01110000100010010101010111010001
+00100000000000000000000000000100
+01101000000000001100000111011110
+11000000000000000010100100001000
+11000000000000001010100100010101
+11000000000000010010100100001000
+11000000000000011010100100010101
+11000000000000100010100100010101
+11000000000100000010100100010101
+01110000100010010101010111010000
+01110000100010010101011011100000
+00011000000000000010101000000000
+01111000010100001111110000000000
+01111000010100000111110000000000
+01111000001011110111110000000000
+01110000100010010000001000000000
+01110000100010010000000100000000
+01110000100010010000000000000000
+01110000100010010000001100000000
+01110000100010010000010001110000
+01110000100010010000011000000000
+00100000011000000000000000000000
+01110000100010010101010111010000
+01110000100010010101011011000000
+00100000001000000010100100001010
+01000100110000110100000000010000
+01110000100010010000001000000000
+01110000100010010000000100000000
+01110000100010010000000000011000
+01110000100010010000001110100111
+01110000100010010000010001111111
+00100000011000000000000000000000
+01000100110000111100000000010000
+01100000000010001000000000010111
+00011000010000001010001000000100
+01110000100010010110110100000111
+00100000001000000010100110000001
+01000100110001000100000000010001
+01110000100010010000000111001111
+00100000000000000000000000001010
+01110000100010010000000011111111
+01110000100010010000001110101111
+01110000100010010000010011111111
+00100000000000000000000000001010
+01110000100010010000001010100000
+00100000011000000000000000000000
+01101000000000001100000111100000
+00100000001110100010100100110001
+00011000010000001010001000000010
+00100000011000000000000000000000
+00011000010000001010001000000000
+00100000011000000000000000000000
+01000100110001001100000000010001
+01100000000010001000000000010111
+00100000010000000010100100101101
+00100000010000000010100110000001
+01011000000000000000010100000000
+00100000010000000010101010001111
+01110000100010010000011000000001
+01110000100010010000000000111100
+01110000100010010000000111100000
+01110000100010010110110100010010
+00100000000000000000000000001010
+01110000100010010000001000000001
+01110000100010010000001000111101
+00100000000000000000000000001010
+01110000100010010000001110110111
+00100000000000000000000000001010
+01110000100010010000001001111111
+01101000000000001100000111011110
+11000000000000000010100101001011
+11000000000000001010100101001111
+11000000000000010010100101010011
+11000000000000011010100101010111
+11000000000000100010100101011011
+11000000000100000010100101011111
+01110000100010010101011011110000
+00100000010000000010100101100101
+01110000100010010101010111011000
+00100000011000000000000000000000
+01110000100010010101011011011111
+00100000010000000010100101100101
+01110000100010010101010111011111
+00100000011000000000000000000000
+01110000100010010101011011111111
+00100000010000000010100101100101
+01110000100010010101010111011111
+00100000011000000000000000000000
+01110000100010010101011011001110
+00100000010000000010100101100101
+01110000100010010101010111011000
+00100000011000000000000000000000
+01110000100010010101011011001011
+00100000010000000010100101100101
+01110000100010010101010111011000
+00100000011000000000000000000000
+01110000100010010101010111010000
+01110000100010010101011011000000
+01110000100010010101011101001100
+01110000100010010101100001101100
+01110000100010010101100101010000
+00100000011000000000000000000000
+00100000000000000000000000000100
+01110000100010010101010111010001
+00100000000000000000000000000100
+01110000100010010101010111010010
+00100000000000000000000000000100
+01110000100010010101010111010100
+00100000011000000000000000000000
+01110000100000000100001000000110
+01101000000000010100000011000011
+11000011000001110010100101101101
+10011000000000000000110000000000
+11011000010000001000100100000000
+11101000110000001000000000000000
+11000000011111111010100101110111
+10011000010000011000101000000000
+11101000110000001000000000000000
+11100000101000001000000000000000
+00100000001000000010100101110001
+01000100110001010100000000010001
+00100000010000000010101111100101
+00100000010000000010100111001001
+01011000000000000000011111010000
+10011100010000001111111000000000
+01100000000000100000000101101001
+01111001001000000010101000000011
+00011000000000000010101000000000
+00100100010101011010100110011000
+00100000001000000010100110101011
+01000100110001011100000000010001
+01011000000000000000100101100000
+10011010001000001000010000000000
+01101000000000001100000010111101
+01110000100010010101111100000100
+10011000010011111111111000000000
+01101000000010001100000010111110
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111010001000000000
+00011000000001110111111000000000
+00011111111100000111111000000000
+00011111111100100111111000000000
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111111111000000000
+00011111111011010111111000000000
+00011111111000111111111000000000
+10011010001000011111111000000000
+01100000000100100000100101100000
+01110000100010010101111101000100
+01110000100010010101111111000100
+00100000011000000000000000000000
+01000100110001100100000000010001
+01110000100010010000011000000010
+01011000000000111101000010010000
+00100000010000000010101010001111
+01110000100010010000000001111111
+00100000000000000000000010000010
+01110000100010010101001000110000
+01110000100010010000000111010000
+01110000100010010101001001110000
+01110000100010010101001011110000
+00011000000000000111001000110010
+01101000000100001000100110000000
+11000010100000101010100110100110
+11000010000000000010100110100011
+01100000000000001100000011001110
+01110000100010010000000100000000
+01110000100010010000000000000000
+01110000100010010000011000000000
+00100000011000000000000000000000
+01000100110001101100000000010001
+01101000000000001100000011001110
+01111001001000000111111000000101
+01100000000100001000100101010010
+01101000000110001000100101010000
+00011000010000010000010000000111
+00011111111010011111111000000000
+10011000010000011111111000000000
+01100000000100001000100101010000
+01101000000100001000100101010001
+01111001001111111111111000000000
+01100000000100001000100101010001
+01101000000100001000100101010010
+01111001001111111111111000000101
+01100000000100001000100101010010
+00100000011000000000000000000000
+01000100110001110100000000010001
+01101000000100010000100110000001
+00011111111100011111111000000000
+00011111111010010111111000000000
+00011111111001100111111000000000
+00011111111000010111111011111111
+00011111111001101111110000001010
+00100000010000000111111110000110
+00011000000001111111111000000000
+00011111111100100111111000000000
+00011000000001110000010000000000
+10011000010000011111111000000000
+01100000000000001000000000011000
+00100000011000000000000000000000
+01110000100000000100001000000110
+01101000000100001000100101101011
+01111001001111111111111000000100
+01111001001111111111111000000101
+01100000000100001000100101101011
+01110000100010010000010100000000
+01110000100010010000010000000000
+01110000100010010000010001110000
+01110000100010010000010111111111
+01101000000100001000100101101011
+01111001001000000111111000000100
+01111001001000000111111000000101
+01100000000100001000100101101011
+00100000010000000010100111101001
+01101000000100001000100101101000
+01111001001000000111111000000111
+01100000000100001000100101101000
+01111001001111111111111000000111
+01100000000100001000100101101000
+01111001001000000111111000000111
+01100000000100001000100101101000
+01110000100000000100001000000101
+00100000000000000000000000000001
+01110000100000000100001000000100
+01101000000100001000100101101011
+00011111111000010111111011001111
+01100000000100001000100101101011
+00011111111000011111111000110000
+01100000000100001000100101101011
+00100000011000000000000000000000
+01011000000000000000111100001111
+00100000001000000010110000011000
+01011000000000000000100000001111
+00100000001000000010110000011000
+01000100110001111100000000010001
+00100000010000000010100100100100
+01111000010100000111110000000000
+01111000001100001111110000000000
+01111000001010110111110000000000
+00100000011000000000000000000000
+01000100110010000100000000010010
+01101000000000001000000001001100
+00101111111011111111111000000010
+01111001001000001111111000000000
+01100000000100001000000000010001
+11011000110000000000000001100010
+11101000110001001000000000000000
+10011000000000000110010000000000
+11101000110000111000000000000000
+10011000000000000110011000000000
+01101000000000001000000001010100
+00011111111000001110100111111111
+01111000001011010111110000000000
+00100000011000000000000000000000
+00011011010000100111111000000000
+01100000000000110000000010011010
+01111000010001101111110000000000
+00100100001011000010100011111001
+11011101001000000000001110111011
+00011101000000001101000000000001
+00011101000000010101000111111100
+00100000011000000000000000000000
+01111000001001101111110000000000
+00110111110010111000010000000000
+00100000001011000010100111111111
+00101101000000000000010000000010
+00100100001000001010101000001000
+00100000001000000010100111111111
+01000100110010001100000000010010
+11011001011000000000011000000000
+01111000001001101111110000000000
+00110100011100110000010000000000
+01111000010001101111110000000000
+00100100001011000010100011111001
+00100000011000000000000000000000
+01000100110010010100000000010010
+01111000001001101111110000000000
+00110111110000011000010000000000
+01111000010001101111110000000000
+00100100001011000010100011111001
+11011101001000000000001110111011
+00011101000000010101000111111100
+00100000011000000000000000000000
+01000100110010011100000000010010
+10011000000000000010001000000000
+00011100001000100111111000000000
+10011000010000001001011000000000
+00011001011000100111111000000000
+01100000000000100100000011001010
+00011010001000100111111000000000
+00100000011000000000000000000000
+00011111111000100000010000000000
+01000100110010100100000000010010
+00011000010000100111111000000000
+00100000010000000111111101010000
+00011100001100000111111000000000
+01111001001000000111111000101100
+00100000010000000111111100111001
+01111001001111111111111000101100
+00100000010000000010101001110111
+00100000010000000111111100111001
+00100000011101000000000000000000
+00100000010000000111111101000011
+10011000000000000011011000000000
+00110111110000011000001000000000
+00100000011000000000000000000000
+01000100110010101100000000010010
+00100000001110000010101000111000
+00110101001100110000001000000000
+00011101000000100000010000000000
+00100000001000000010101000111011
+00100000001101110010101000111010
+00110100011100110000001000000000
+00011100010000100000010000000000
+00100000001101000010101001000111
+00101000010000000000011000000001
+00100100001000001010101000110011
+01000100110010110100000000010010
+01101000000000001000000000110000
+11000100000000000000000000000000
+01101000000000100100000011001010
+10011000010001100111111000000000
+00100100011000010000000000000000
+00011111111001100111110011111111
+00100000001000010010101000110011
+00100000011000000000000000000000
+00101000010000000000011000000011
+00100100001000001010101000110011
+00100000001000000010101000111110
+01000100110010111100000000010010
+11011001011000000000011000000000
+00100000001000000010101000110011
+01111000010101000111110000000000
+00100000001000000010101001001010
+01111000001101000111110000000000
+00100000001000000010101001001010
+01000100110011000100000000010011
+00100000010000000010100111110001
+01111000010100001111110000000000
+01111000001100000111110000000000
+00100000011000000000000000000000
+01000100110011001100000000010011
+11011001011000000000111001000011
+00110100011100110000001000000000
+01111000001010110111110000000000
+00100000011000000000000000000000
+01000100110011010100000000010011
+11011001011000000000110100000000
+00110100011100110000001000000000
+00100000011000000000000000000000
+01000100110011011100000000010011
+11011001011000000000111001000011
+00110101001100110000001000000000
+01111000001010110111110000000000
+00100000011000000000000000000000
+01000100110011100100000000010011
+01010001001000000111111000000000
+01111000001011101111110000000000
+01111001001000000010101000000000
+00001000000000001000011001001000
+01111000010011101111110000000000
+00100000011000000000000000000000
+00011100101000100000010000000000
+00011000010000011000010001100000
+00011000010000100001110000000000
+00100000011000000000000000000000
+01000100110011101100000000010011
+01101000000000001100000010010000
+00011111111000001111111000000001
+11000000100000111010101001110100
+00011000000000000111111000000001
+01100000000000001100000010010000
+10011000000000000000100000000000
+00100000011000000000000000000000
+00011011001000100000010000000000
+00100000011101001000000000000000
+00011011010000100000010000000000
+00100000011000000000000000000000
+00011100010000100111111000000000
+00100000011101001000000000000000
+00011101000000100111111000000000
+00100000011000000000000000000000
+01000100110011110100000000010011
+01101000000010100000000001001101
+00100000010000000010101001111011
+10011000010001100001011000000000
+00011001011000100111111000000000
+01101000000010010000000001010001
+00011000010000111000010000000000
+10011000010001100111111000000000
+00100000011000000000000000000000
+01000100110011111100000000010011
+00100000010000000010101001111011
+01100000000000100000000001001101
+00100000011000000000000000000000
+01000100110100000100000000010100
+00100000001000000010101010001100
+00100000001000000010101010001110
+00100000011110100000000000000000
+00011111111000110111111000000000
+00011111111000001111111111111101
+00011111111000001111111111111111
+00100100001000101010101010010010
+00011000000000000111111000000000
+00100000011000000000000000000000
+11011111001000000000000000010000
+11011000101000000000000000000000
+00100000010000000111111011000110
+11011000101000000000010000111111
+11011111001000000000000000001010
+00100000010000000111111011000110
+01110000000010011011001000000000
+01110000000010101001100100000000
+01110000000001001000110000000000
+01110000000000010111111100000000
+01110000000001001101000100000000
+01000100110100001100000000010100
+01110000000000010110110100000000
+01110000000000010101000100000000
+01110000000000010101110000000000
+01011000100111101000101100110011
+01100000000000011100000010100111
+01011000000000000000000101010011
+01100000000000010000000010000011
+01110000000000001000010100011110
+01110000000000001000011000000001
+01110000000000001000100000000111
+01011000000100101110100100000100
+01100000000000011000000010000000
+01110000000000001001000001100000
+01110000010000001101000000000101
+01110000000000000001010000000010
+01101000000000001100011001011010
+00100100010110100111010011000001
+01101000000000001100010010111110
+00100100010110100111010100011000
+01000100110100010100000000010100
+00100000011101011000000000000000
+01011000000000000000000000000000
+01100000000000010100000111011100
+00011100010000110111111000000000
+01100000000000100100000010010100
+00100000011000000000000000000000
+01011000000000001110111000100001
+01100000000100010000000001010000
+01101000000100100000000100011100
+01100000000000100000101010111110
+01101000000100001000000100111110
+01100000000000001000101010111101
+11000011000000011110010001011011
+01111000001101011111110000000000
+11000011000000111010101011001100
+01111000010101011111110000000000
+00011100111000100111111000000000
+00100100001110100010101011001100
+01101000000100001000000100111011
+11000010100000010010101011001100
+11011000010111111111111111111111
+00100000001000000010101100111100
+01101000000100011000000100111100
+01100000000100011000000001001100
+11101000110000001000000000000000
+00011111111000011111111011101111
+11100000101000001000000000000000
+00100000010000000010110000100011
+01101000000100001000000001001111
+01111001001000000111111000000100
+01100000000100001000000001001111
+00100000010000000010110000100011
+00100000010101011010101011011111
+01101000000100001000000001001110
+01111001001111111111111000000011
+01100000000100001000000001001110
+00100000010000000010110000100011
+00100100001101011110010001011011
+11000110100101011000000000000000
+01110000100000000000011000001000
+00100000011000000000000000000000
+01101000000000001100000110011000
+01100000000100001000000010000110
+01101000000000011100000110001101
+01100000000100011000000010000000
+01101000000000100100000110000001
+01100000000100100000000001110100
+01101000000000100100000101111101
+01100000000100100000000001110000
+01101000000001000100000110000101
+01100000000101000000000001111000
+01101000000001000100000110010000
+10011000000000000000000000000000
+01101000000101000000000101000000
+01100000000001000000000010100001
+00100000010000000110010011001010
+00100000011000000000000000000000
+00011000000000100111111000000000
+01100000000001000100000110010000
+01101000000101000000000001110000
+01100000000001000100000101111101
+11101000110001000000000000000000
+11100000101001000000000000000000
+01101000000100011000000010000000
+01100000000000011100000110001101
+01101000000100001000000010000110
+01100000000000001100000110011000
+00100000001000000010110000101001
+01101000000100001000000001100011
+00100100001110100010101100000000
+01101000000000011100000101101111
+00100100011110100000000000000000
+01110000100000000110001111000000
+01110000100000000000011010000000
+01101000000100001000000100101101
+11000100000000001000000000000000
+01101000000100011000000101001001
+01100000000000011100000101101111
+00100000011000000000000000000000
+01000100110100011100000000010100
+00011011010000100111111000000000
+00100000010000000111111100110111
+01101000000010100100000101011111
+00011000010001100111110011111111
+00100000011000010000000000000000
+00011111111011010111111000000000
+00011111111100100111111000000000
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111111111000000000
+11011000010000000000000011001000
+00100000010000000111111110010001
+01100000000000001000000010011001
+00100100001101000010101100010101
+00011111111001100111111000000000
+01101000000010011100000101101111
+10011000010000001111111000000000
+01100000000000011100000101101111
+01011000000000000000000000000000
+01100000000000100100000101011111
+00100000011000000000000000000000
+01101000000000001100000101110111
+01111001001000000111111000000010
+01100000000000001100000101110111
+00100000001000000010101100100011
+11011000010111111111111111111111
+01101000000000001100000101110110
+01111001001111111111111000000111
+01100000000000001100000101110110
+01000100110100100100000000010100
+00100000010000000010110000101001
+01101000000000001100000101010111
+01100000000000001100000101111100
+01101000000000001100000101111010
+01111001001000000111111000000111
+01100000000000001100000101111010
+01000100110100101100000000010100
+00100000010000000010100111100111
+01101000000000100100000101011111
+10011000010000001111111000000000
+01100000000000100100000101011111
+00100000010000000010101011101111
+01101000000000101100000101111000
+01100000000100100000000001001100
+00011111111011110010001000000000
+00110111110110011000001000000000
+00011011001000100111111000000000
+01100000000000110100000101100011
+01110000100000000000010100000010
+00110111110110011000001000000000
+00110111110110011000001000000000
+00011010001000100111111000000000
+01100000000100001000000001001111
+01110000100000000000010100000010
+00110111110110011000001000000000
+00110111110110011000001000000000
+01100000000110100000000001001100
+01110000100000000000010100010000
+00110111110111111000001000000000
+01000100110100110100000000010100
+01011000000000000000000000000000
+00011100111000100111110000000000
+00100000001000101010101101001100
+01101000000100001000000100111100
+01101000000110001000000100111101
+10011000010001100111110000000000
+00100000001000010010101101001010
+00011000010000100111111000000000
+10011100111001100111111000000000
+00011111111000001111111000000001
+00011111111000001111111000001000
+00110111110110011000001000000000
+10011110001000001111111000000000
+01101000000010100100000101011011
+10011000010000001111111000000000
+01101000000010011100000101101111
+10011000010011111111111000000000
+00011111111011001111111000000000
+00011111111100011111111000000000
+00011111111000001111111001101110
+11011000010000000000111010100110
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111111111000000000
+00011111111100000111111000000000
+00011000000001110000010000000000
+10011000010000011111111000000000
+01101000000010110100000101100011
+00100000010000000111111100101100
+00011000010000100011001000000000
+01101000000000110100000001001000
+00100000010000000010100001010100
+00011011010000100111111000000000
+01100000000000110000101010011010
+00011100111000100111111000000000
+11100000101000001000000000000000
+01101000000100001000000100011101
+00011111111000011111111011110000
+11100000101000001000000000000000
+00100000011000000000000000000000
+01000100110100111100000000010100
+00100000010000000010101011111010
+01101000000000011100000101101111
+00100000011110100000000000000000
+01101000000000001100000010010001
+00100000011110100000000000000000
+01101000000000001100011001011010
+00100000001110100010101101110100
+01101000000000001100010110110001
+00100000011110100000000000000000
+01101000000000001100010011000000
+00100100011110100000000000000000
+00100000010000000010110000111010
+00100100011110100000000000000000
+01101000000000001100000001000000
+00101111111000000000111000000011
+00100100001000001010101110011101
+01101000000000010100000001000010
+00100000011110100000000000000000
+00100000011101011000000000000000
+01000100110101000100000000010101
+01101000000010001000000010100000
+01101000000000010100000001000010
+10011000010011111111111000000000
+00011000010100011000010000000000
+00011000010010110000010000000000
+10011000010001100111111000000000
+01101000000010100100000001000100
+10011000010000001111111000000000
+01101000000010001100000101010110
+10011000010001100111111000000000
+00011111111100000110000000000000
+01000100110101001100000000010101
+01101000000000010100000001001110
+00011111111000110111111000000000
+00100000010000000111111101010000
+00011110000000100111111000000000
+00100000010000000111111100111001
+00011011010000100000010000000000
+00100000010000000111111100110111
+00100000011101000000000000000000
+00100000010000000111111101001001
+01000100110101010100000000010101
+01101000000000001100000101111000
+10011000010001100111110000000000
+00100000001000010010101100011000
+01100000000010100100000101011011
+00100000010000000011001100101000
+00100000010000000101001011111011
+01101000000010100100000101011011
+00100000001000000010101100101010
+01000100110101011100000000010101
+01101000000000001100000001000000
+11000011100000000000000000000000
+11000011100000011000000000000000
+01101000000000001100011001011010
+00100000001110100010101110100101
+01101000000000001100010110110001
+00100000011110100000000000000000
+01000100110101100100000000010101
+01101000000000001100001101101110
+00100100001110100010101110101010
+01101000000000001100000010010011
+00100000011110100000000000000000
+01101000000000010100000101010100
+00100000011110100000000000000000
+01101000000010001100000101010110
+10011000010001100111111000000000
+11011000010000000001110101001100
+10011000010011111111111000000000
+00100000001000000010101110010011
+01000100110101101100000000010101
+01111000010101011111110000000000
+01101000000000001000000000110000
+11000100000000001000000000000000
+00100100001101101010101111010000
+00100000010000000010101111001011
+01101000000000010100000011000001
+01100000000000010000000000111110
+01101000000000001000000001000111
+11000010100000011010101111011110
+11000101100001101010101111011110
+00100000010000000101001001110100
+00100100001110100010101111011110
+01101000000000001100010101011100
+11000010100000001010101111011110
+01110000000000001010000000000000
+11000101100001101010101111011110
+01101000000000001100000101110100
+00100000001110100010101111100010
+00011111111000001111111111111111
+01100000000000001100000101110100
+00100000011000000000000000000000
+11011000111000000000000000000001
+00100000001000000110000011001101
+11011000111000000000000000000001
+00100000001000000110000011010001
+01110000010000010101100100000000
+01101000000000011100000101101001
+00011111111000001111111000000001
+01100000000000011100000101101001
+00100000011000000000000000000000
+01000100110101110100000000010101
+01101000000010010100000011000001
+00011000010000110000010000000000
+01101000000000010000000000111110
+10011000010000001111111000000000
+01100000000000010000000000111110
+01110000000000001010000000000000
+01101000000000011100000101101100
+00011111111000001111111000000001
+01100000000000011100000101101100
+01101000000000001100000101011001
+00011111111000001111111000000001
+01100000000000001100000101011001
+00100000011000000000000000000000
+01110000000000001010000000000000
+01101000000000001100000101110011
+01100000000000001100000101110100
+00100000011000000000000000000000
+01101000000010001100000101110010
+01100000000010001000000010100000
+00100000011000000000000000000000
+01000100110101111100000000010101
+01101000000000001100000101111000
+00100100011110100000000000000000
+01110000100000000100001000000110
+01011000000000000000111100001100
+00100000010000000010110000011000
+01011000000000110000110101000000
+00100000010000000010101010001111
+00110111110110011000001000000000
+00011110001000100110000000000000
+00100000010000000010100111100111
+01110000100000000100001000000100
+00100000000000000000000000001010
+00110111110110011000001000000000
+00011110001000100111111000000000
+10011110000001100111111000000000
+00011111111000001111111000110000
+11011000010000000000000011111111
+00100000010000000111111110010001
+01100000000000001100000101111000
+00100000000000000111010100110000
+00100000000000000111010100110000
+00100000000000000111010100110000
+00100000011000000000000000000000
+01101000000000001100000101111000
+00100100011110100000000000000000
+01110000100000000100010011111111
+01110000100000000100001000000110
+00100000010000000010100111100111
+01011000000000000000001111101000
+10011110001000001110000000000000
+00000111111000000000000000000000
+00011110001000100111111000000000
+00100000000000000010111011100000
+00100000000000000010111011100000
+00100000000000000010111011100000
+00100000000000000010111011100000
+00100000000000000010111011100000
+00100000000000000010111011100000
+00100000000000000010111011100000
+00100000000000000010111011100000
+00100000000000000010111011100000
+10011110000001100111111000000000
+00011111111000001111111000110000
+11011000010000000000000011111111
+00100000010000000111111110010001
+01100000000000001100000101111000
+00100000000000000111010100110000
+00100000000000000111010100110000
+00100000000000000111010100110000
+00100000011000000000000000000000
+11011000101000000000111111111111
+10011000101000010000101000000000
+01101000000000001100000101110101
+00011111111000010111111011110000
+00011111111011010111111000000000
+10011000101000011111111000000000
+01100000000100010000000001001100
+11101000110000010000000000000000
+11100000101000010000000000000000
+01011000000000000000000000000001
+00100000001000000010110000100100
+01011000000000000000000000000010
+00110111110110011000001000000000
+01100000000100001000000000000101
+00110111110110011000001000000000
+00110111110110011000001000000000
+00100000011000000000000000000000
+01000100110110000100000000010110
+01101000000000100000000010100001
+01100000000100100000000001001100
+01011000000000000000000000000100
+00100000010000000010110000100100
+01101000000000100000000010100101
+01100000000100100000000001001100
+01011000000000000000000000001000
+00100000001000000010110000100100
+01101000000000010100000101010010
+11111001001000000111111000000000
+01100000000000010100000101010010
+00100000011000000000000000000000
+01101000000000010100000101010010
+11111001001111111111111000000000
+01100000000000010100000101010010
+00100000011000000000000000000000
+01000100110110001100000000010110
+00100000010000000011001100100110
+01101000000000010100000101010010
+00011111111000100010001000000000
+01101000000000001000000001001100
+00101111111011111111111000000110
+01111001001000001010001000001011
+01101000000000001000000001111000
+01101000000010001000000001111100
+10011000010000001111111000000000
+01101000000010001000000001001000
+10011000010000001111111000000000
+01111101001110100010001000001010
+01101000000000001100010011111111
+01111101001110100010001000000001
+01101000000000010000001001011101
+01101000000010010000001001011111
+10011000010000001111111000000000
+01111101001110100010001000001101
+01101000000001000100011001101000
+01111101001110100010001000001111
+01101000000001000100011001110000
+01111101001110100010001000001110
+01101000000000001100000111001110
+01111101001110100010001000001000
+01101000000000001100000010010010
+00101111111000011111111000001010
+00100000010000001010110001011011
+01011111111111111111111111111000
+10011010001000010010001000000000
+00011010001000100111111000000000
+01100000000000010100000101010010
+00100000011000000000000000000000
+01101000000100010000000100010010
+01111101001110100010001000000110
+01101000000100010000000100001110
+01111101001110100010001000000101
+00100000011000000000000000000000
+01101000000100100000000100111000
+01111001001111111111111000011011
+01100000000100100000000001001100
+00100000010000000010110000100001
+00100000001000000010101010001100
+01101000000100100000000100111100
+01111001001111111111111000010100
+01100000000100100000000001001100
+00100000001000000010110000100011
+01101000000000010100000101010000
+11000010100000000010101010001100
+00100000011000000000000000000000
+01101000000000010100000101010000
+11000010100000001010101010001100
+00100000011000000000000000000000
+01101000000000010100000101010000
+11000010100000010010101010001100
+00100000011000000000000000000000
+01000100110110010100000000010110
+00100000010000000010110001111010
+00011010011000001010010011001101
+11101010010000001000000000000000
+11000001000000000000000000000000
+11000000000000001010110100000110
+11000000000000010010110001111111
+00100000011000000000000000000000
+01101000000010010100001001000001
+00011000010000100010011000000000
+00100000011000000000000000000000
+00100000010000000010111100111101
+00100000001000000011000001111101
+00100000010000000011000010000100
+00100000010000000011000001011010
+00100000010000000011000001011110
+00100000001000000011000010100010
+00100000010000000011001000110001
+01011000000000000000000001001110
+00100000010000000011001000101111
+00100000010000000011001010111010
+00011010011000001010001010010010
+11101010001000100000000000000000
+00100000001000000011001000101100
+00100000010000000010110001111010
+00011010011000001010010010010001
+11101010010010001000000000000000
+00100000010000000010110010010000
+00011010011000001000101010010001
+00100000001000000010111001010110
+00100000010000000010110010010100
+00011000010000001000010000000001
+00011000010000010000010000000011
+00100000011000000000000000000000
+00011010011000001010010010101110
+11101010010000001000000000000000
+00011111111000010111111000000011
+00011111111011111010001000000100
+00011010011000001111111010010111
+10011010001000001111111000000000
+10011000010000001000110000000000
+11101000110000001000000000000000
+00100000001000000011001000101111
+00100000010000000011001001101100
+00100000010000000110011001101010
+01011000000000000000011111100010
+11011010001000000000101010100010
+11011000010000000000000000000100
+00100000010000000110011010110011
+00100000010000000110011001101101
+01101000000000100000101010100010
+00100000010000000011001000100111
+00100100011110100000000000000000
+01101000000000100100000010100000
+00100000001000000011001000100111
+00100000010000000011001001000001
+01011000000000000000000000000000
+00100000010000000011001000111111
+00100000010000000011001000111010
+00011111111000010111111000000111
+00100000001000000011001000111100
+00100000010000000011001000111010
+01111001001000000111111000000100
+00100000010000000011001000111100
+00100000001000000011001000110101
+00100000010000000011001001011101
+11000000000000001010110010110111
+11000000000000010010110010111100
+00100000011000000000000000000000
+00100000010000000011001000111110
+00011010011000001000101011010001
+00100000010000000011001011010110
+00100000010000000011001001000010
+00100000001000000010110010101100
+00100000010000000011001001011010
+00100000001000000010110010111000
+00011010011000001010001010001100
+11101010001000001000000000000000
+00011111111000001111111000000001
+00011010011000001000101010001100
+11100000101000001000000000000000
+11000000000100000010110111010010
+00100000010000000011001001011000
+11000000000000001010110011001010
+01011000000000000000000000000001
+00100000010000000011001001011011
+00100000010000000011001001011000
+11000000100000001010110010101100
+00011010011000001010001011010011
+11101010001000001000000000000000
+00011111111000001111111000000001
+00100000010000000010110011010101
+11000000000000100010110011010010
+00100000010000000010110010001010
+00100000010000000010110100000100
+00100000001000000010110110001111
+00100000010000000010110011010100
+00100000001000000010110010101100
+01011000000000000000000000000000
+00011010011000001000101011010011
+00100000001000000011001010110100
+00100000010000000011001000111110
+00100000010000000011001001011010
+00100000010000000011001001000001
+00100000001000000010110010101100
+00100000010000000011001001011101
+11000000000000011010110011011000
+00100000010000000011001000111010
+00101111111011000000000000000100
+00100000001000001010110010101001
+00100000010000000011001001011101
+11000000000000001010110011010111
+11000000000000010010110011011000
+00100000011000000000000000000000
+00100000010000000011001001010011
+11000001111111111000000000000000
+00100000010000000010110011101001
+00100100010101100010110011110100
+00100000011000000000000000000000
+01111000010101100111110000000000
+00011010011000001010001011001110
+11101010001000001000000000000000
+11000001100000001000000000000000
+00011010011000001010001011010000
+11101010001000001000000000000000
+11000001100000000000000000000000
+01011000000000000000000000000001
+00100000010000000010110011111101
+00100000010000000011001000110111
+00100000001000000111111111101011
+00011010011000001010001011010000
+11101010001000001000000000000000
+00100000001110100010110011111111
+00011111111000001111111111111111
+00100000010000000011001000111111
+01011000000000000000000000000010
+00100000010000000010110011111101
+00100000010000000010110010001010
+00100000001000000011001000110111
+00011010011000001000101011010010
+00100000001000000011001010110100
+01011000000000000000000000000011
+00100000010000000010110011111101
+00100000010000000011001001011000
+00100100001110100010110011001000
+00100000010000000010110010001010
+01011000000000000000000000000010
+00100000001000000011001000111000
+11000110100100110000000000000000
+01111001001000000000000000100111
+01000100110110011100000000010110
+00011010011000001010001010001110
+11101010001000001000000000000000
+11000000000000001010110100001111
+00100000010000000011000001101010
+00100100001101000010110100010110
+00100000010000000010110100011011
+00011010011000001000101010001110
+00100000010000000011001011010110
+00100000010000000010110100101100
+00100100001101000010110101111101
+00100000010000000010110011100100
+00100000010000000010110110001111
+00100000010000000010111001111010
+01111001001111111000000000100111
+00100000011000000000000000000000
+00100000011000101000000000000000
+01111001001000000111111000011100
+00100000011000000000000000000000
+00011010011000001010001011000010
+11101010001000001000000000000000
+00011111111000001111111000000001
+00011010011000001000101011000010
+11100000101000001000000000000000
+11000000000000100010110100100011
+11000000000000101010110100100111
+00100000011000000000000000000000
+00011010011000001010001010101101
+11101010001000001000000000000000
+00011010011000001000101010101011
+00100000001000000011001010110100
+00011010011000001000101011000010
+00100000010000000011001011010110
+00011010011000001010001010101100
+11101010001000001000000000000000
+00100000001000000010110100100101
+00100000010000000011001001010011
+11000000111111111010111010110001
+01000100110110100100000000010110
+00100000010000000010110100111010
+00100100001101000010110100110110
+00100000010000000010110101010011
+00100000010000000010111001110001
+01011000000000000000000000000001
+00011010011000001000101010001011
+00100000001000000011001010110100
+00011010011000001010001010001011
+11101010001000001000000000000000
+11000000000000001111111111100111
+00100000011000000000000000000000
+00011010011000001000010011011000
+11101000010000010000000000000000
+00100000010000000111111110011100
+00100100011101000000000000000000
+00011010001000100111111000000000
+01100000000000001000101010101110
+00011010011000001000101010110010
+00100000010000000011001011010110
+00100000010000000010110010101100
+01100000000000001001000110011110
+01101000000000001000101010101110
+00011111111000100010001000000000
+00011010001000001000010000000001
+11011000101000000001000110011111
+00011010001000100111001000000000
+00011010010000100000110000000000
+00100000010000000111111100000001
+11011010001000000001000110011110
+11000110100100111000000000000000
+00011010011000001000101010000110
+11100000101010001000000000000000
+00011000010000100111001000000000
+00011010011000001000101000100010
+00011010001000100000110000000000
+00100000001000000111111100000001
+00011010011000001010001010000110
+11101010001000001000000000000000
+00011111111000001111111000000010
+00011010011000001000101010001000
+11100000101000001000000000000000
+00100000010000000011001000111010
+00100000010000000011001000110101
+00011010011000001010001010000110
+11101010001000001000000000000000
+00011111111010011111111000000000
+00011010011000001010001010000101
+11101010001010001000000000000000
+00011000010000010000010000000011
+00011000010000111000010000000000
+10011000010000011111111000000000
+00011010011000001010001011000011
+11101010001010001000000000000000
+10011000010000001111111000000000
+11100000101000001000000000000000
+00011010011000001010001010000110
+11101010001000001000000000000000
+10011000000000000111001000000000
+00011010011000001000110000100010
+00100000001000000111111100000001
+00100000010000000011001001001111
+00100000010000000011001001011010
+00100000010000000010111001101101
+00100000010000000010110010101100
+01100000000000001001000110011110
+00100000010000000010110101110111
+00100000010000000011001000111010
+01111001001000000111111000000011
+00100000010000000011001000111100
+00100000010000000010110101010011
+00100000010000000010110100110011
+00100000001000000010110100010100
+01100000000000001001000110011111
+00100000010000000011001000100100
+01100000000000100001000110100000
+11011000010000000000000000000110
+11011010001000000001000110011110
+00100000001000000010110101001100
+00011010011000001010001010110010
+11101010001000001000000000000000
+00100000001110100010110101101011
+00011010011000001010001011011010
+11101010001000010000000000000000
+00100000001000000111111110011100
+00100000010000000010110001111010
+00100000010000000010101011111010
+01101000000000011100000101101111
+00100000011110100000000000000000
+00011010011000001000010011011100
+11101000010000010000000000000000
+00100000010000000111111110011100
+00011010011000001000010010110110
+11101000010001000000000000000000
+00100000010000000111111101001001
+01100000000010100100000101011011
+00100000001000000010101100101010
+00100000010000000010110001111010
+00011010011000001000101010001111
+00100000010000000011001011010110
+00100000010000000010110110100100
+00100100001011000010110110101110
+00100100001101111010110110101110
+00100000010000000010110111010110
+00100000010000000010111001110101
+00100000010000000010110001111010
+00011010011000001010001010000101
+11101010001000001000000000000000
+00011111111000001111111000000001
+00100000010000000011001000110010
+00100000010000000011001001010011
+11000000111111111010111011010000
+00100000010000000010110011011011
+01011000000000000000000000000000
+00011010011000001000101010001100
+11100000101000010000000000000000
+01011000000000000000000000000000
+00100000001000000010110100110100
+01111000010101111111110000000000
+00100000010000000010110111110111
+00100000010000000010110001111010
+00011010011000001010001011000011
+11101010001000001000000000000000
+11000000000000001010110110101100
+00100000010000000010111000010001
+00100000001000000010111001000101
+00100000010000000010111001000101
+00100000001000000010110110010111
+01000100110110101100000000010110
+00011010011000001010001010001101
+11101010001000001000000000000000
+00011111111000001111111000000001
+00011010011000001000101010001101
+11100000101000001000000000000000
+00100000010000000011001001010011
+11000000111111111010110111001100
+00011010011000001010001010001111
+11101010001010001000000000000000
+00011000010000001000010000000001
+00011010011000001000101010001111
+11100000101010001000000000000000
+00011010011000001010001011001100
+11101010001000001000000000000000
+10011000010001100111111000000000
+00100100001110100010110110010010
+01000100110110110100000000010110
+00100000010000000011001001011101
+11000000000000011010110010111110
+00011010011000001010001011010001
+11101010001000001000000000000000
+00011111111000001111111000000001
+00011010011000001000101011010001
+11100000101000001000000000000000
+11000000000000010010110010110011
+00100000010000000010110010101111
+01011000000000000000000000000001
+00100000010000000011001000111000
+00100000001000000010110110001111
+00011010011000001010001010001101
+11101010001000001000000000000000
+11000001111111111000000000000000
+00011010011000001000101010001101
+00100000010000000011001011010110
+00100000001000000010110111010100
+00011010011000001000101010001100
+00100000010000000011001011010110
+01110000000010101001100100111010
+00100000001000000111110110000110
+00100000010000000010110111011110
+00011010011000001010001010000100
+11101010001000001000000000000000
+00100000011110100000000000000000
+10011000000000000111001000000000
+00011010011000001000110000000010
+00011010011000001000101001100100
+00100000001000000111111100000001
+00100000010000000011001001011111
+00011111111010010111111000000000
+00011010011000001000101010000100
+11100000101000001000000000000000
+00011111111000001111111000000001
+00011010011000001000110000000001
+10011000110000001000110000000000
+11101000110000011000000000000000
+00011010011000001000101011000100
+11100000101000011000000000000000
+00100000010000000011001001011111
+00011111111000110111111000000000
+00011111111000010111111000000011
+00011010011000001000101011001010
+11100000101000001000000000000000
+00100000011000000000000000000000
+01111000010001001111110000000000
+01111000010000111111110000000000
+01011000010101010101010101010101
+10011000000000000001111000000000
+00100000011000000000000000000000
+00100000010000000010100100011000
+00011010011000001010001010010000
+11101010001010001000000000000000
+00100000001000000010100100110011
+00100000010000000010110111101110
+00100000010000000010110111110011
+01111001001000000010101000000000
+01111000001011101111110000000000
+01111000001100000111110000000000
+01111000010100001111110000000000
+00100000010000000101001111000100
+00100000010000000011001000101010
+10011000000000000001001000000000
+00001000000000001000011000100000
+01111000001001001111110000000000
+00011010011000001010001010001000
+11101010001000001000000000000000
+10011000000000000111001000000000
+00011010011000001000110001000010
+11101000110000001000000000000000
+00001000000000001000011000001000
+11000010000000000010111000000110
+01111000001001000111110000000000
+00001000000000001000011000011000
+01111000010001000111110000000000
+00110111110100111000001000000000
+01000100110110111100000000010110
+00100000000000000000000001100100
+01111000010011101111110000000000
+00100000011000000000000000000000
+01111000010101111111110000000000
+00011000000000000010101000000000
+00011010011000001010001010010000
+11101010001010001000000000000000
+00100000010000000010100100011111
+00100000010000000010100100100100
+00100000010000000010110111101110
+01111000001001101111110000000000
+01111000001100001111110000000000
+01111000010100000111110000000000
+00100000010000000101001111000100
+00100000010000000011001000101010
+10011000000000000001001000000000
+01111000001010000111110000000000
+00011010011000001010001010001001
+11101010001000010000000000000000
+10011000000000000011011000000000
+00110111110000011000010000000000
+00100100001011000010111001001101
+01111000001001001111110000000000
+00001001100000000000000000001000
+00011001100010010111111000000000
+00011010011000001000101000000000
+11100000101000001000000000000000
+00011010011000001010001011001101
+11101010001000001000000000000000
+11000000000000010010111000110011
+01000100110111000100000000010111
+00011010011000001010001000000000
+11101010001000001000000000000000
+00011010011000001010001010000111
+11101010001010001000000000000000
+10101000010000000000111000000000
+00100100001000001010111001000101
+00001001100000000000000000001000
+00011001100010010111111000000000
+11100000101000001000000000000000
+00011111111010010111111000000000
+00011111111000010111001000011111
+00100000001000101010111000111101
+00001001100000000000000000001000
+00011001100010010111111000000000
+11100000101000001000000000000000
+11000010000000000010111000111001
+00001001100000000000000000011000
+00011111111011110111111000000000
+00011111111100010111111000000000
+11100000101000011000000000000000
+00100000001000110010111001000101
+01111000001101111111110000000000
+01111000010001101111110000000000
+00100000011000000000000000000000
+01111000010011101111110000000000
+01111000010001101111110000000000
+01111000010001001111110000000000
+01111000010000111111110000000000
+00100000001100001010100011111001
+00110111110100111000001000000000
+00100000000000000000000001100100
+00100000001000000010100011111001
+00100000010000000010111001001111
+00100000001000000010111001000101
+00100000010000000010100110111011
+00100000011110100000000000000000
+00011010011000001010001011101010
+11101010001010001000000000000000
+11011010001000000000110110011110
+00100000010000000010111001011000
+00011010011000001000101011101010
+11100000101010001000000000000000
+00100000011000000000000000000000
+11011010010000000000000011111111
+00100000001000000010111001011010
+00011010001000100111111000000000
+10011000010000001000101000000000
+01101000000000001000000000011000
+11100000101000001000000000000000
+00011000010000001000010000000001
+00011010010000100111111000000000
+10011000010000010000010000000000
+00100000011000000000000000000000
+11011000010000000000000000000000
+00011010001000100000110000000000
+11101000110000001000000000000000
+10011000010000001000010000000000
+11000010000000000010111001100100
+00011000010011001000010000000000
+00100000011000000000000000000000
+00100000010000000010110001111010
+00100000010000000010111010011111
+01011000000000000000000000000001
+00100000010000000011001001110010
+01011000000000000000000000000000
+00100000010000000010111001110011
+11100000101000001000000000000000
+00100000011000000000000000000000
+00100000010000000011001001110000
+00011111111000001111111000000001
+00011010011000001000101011111100
+00100000001000000011001010110100
+00011010011000001010001011111101
+11101010001000001000000000000000
+00011111111000001111111000000001
+00011010011000001000101011111101
+00100000001000000011001010110100
+01000100110111001100000000010111
+00100000010000000011001001110000
+00011111111001100111110001111100
+00100000011000010000000000000000
+00011010011000001010001011111101
+11101010001010001000000000000000
+10011000010001100000010000000000
+00100000010000000010111001101101
+01011000000000000000000100000010
+10011010011000001010001000000000
+11101010001000001000000000000000
+10011000010001100111110000000000
+00100100001000010010111010001101
+01011000000000000000000100000011
+10011010011000001010001000000000
+11101010001000001000000000000000
+10011000010001100111110000000000
+00100000001000010010111010011001
+00100000011000000000000000000000
+00011010011000001010001011111110
+11101010001000001000000000000000
+11000000000000010010111010010011
+00011111111000001111111000000001
+00100000010000000011001001110010
+11000000000000001010111010011111
+01011000000000000000000000001010
+00100000010000000011001010110000
+01011000000000000000000000000000
+00100000010000000011001010110010
+00011010011000001010001011111111
+00100000001000000010111010100101
+00011010011000001010001011111110
+11101010001000001000000000000000
+11000000000000000010111010100111
+00011111111000001111111111111111
+00100000010000000011001001110010
+11000000000000000010111010100111
+01011000000000000000000000000101
+00100000010000000011001010110000
+01011000000000000000000000000000
+00100000010000000011001010110010
+01011000000000000000000100000000
+10011010011000001010001000000000
+11101010001000001000000000000000
+00100000001000000011001001101010
+01011000000000000000000000000010
+00100000010000000011001010110000
+01011000000000000000000000000000
+00100000010000000011001010110010
+01011000000000000000000100000001
+00100000001000000010111010100100
+01111001001000000000000000100110
+00100000010000000010110010000011
+01011000000000000000000000000001
+00100000001000000011001001010110
+00011010011000001010001010001011
+11101010001000001000000000000000
+11000000000000001111111111100111
+00100000010000000011001001010011
+11000000000000001010111010111001
+11000000000000010010111010111101
+11000000000000011010111011000001
+00100000001000000010101010001100
+01011000000000000000000000010001
+00100000010000000011001001010110
+01110000000100011001111010101010
+00100000001000000010111011000100
+01011000000000000000000000010010
+00100000010000000011001001010110
+01110000000100011001111001010101
+00100000001000000010111011000100
+01011000000000000000000000010011
+00100000010000000011001001010110
+01110000000100011001111000100010
+00100000010000000011001000111010
+00011111111000010111111000000111
+01100000000000001001000110011111
+00100000010000000011001000100100
+01100000000000100001000110100000
+01110000000100011010010000000000
+11011010001000000001000110011110
+11011000010000000000000000000111
+00100000010000000010110101001100
+00100000010000000010110101010011
+00100000010000000010110100110011
+00100000001000000111111111100111
+00100000010000000011001001010011
+11000001011111111000000000000000
+11000000000010001010111011010110
+11000000000010010010111011011001
+11000000000010011010111011011100
+00100000011000000000000000000000
+01011000000000000000000000000010
+00100000010000000011001001010110
+00100000001000000010110110011111
+01011000000000000000000000000011
+00100000010000000011001001010110
+00100000001000000010110110011111
+01011000000000000000000011111111
+00100000010000000011001001010110
+01110000000010101001100100111001
+00100000010000000111110110000110
+00011010011000001010001001100110
+11101010001000100000000000000000
+00100000010000000011001000101100
+00100000001000000010110110011111
+01111001001111111000000000100110
+00100000010000000010111100001000
+00100000010000000010111100100010
+00100000010000000011001001100011
+00100000000000000000011111010000
+00100000010000000011001001100001
+11000000011111111010110111010100
+00100000010000000010110110100100
+00100100001011000010111011111010
+00100100001101111010111011111010
+00100000010000000010110111010110
+00100000010000000010110001111010
+00011010011000001010001010010010
+11101010001010100000000000000000
+00100000010000000011000010111110
+00100000001000101010111010101101
+00100000010000000010110001111010
+00011010011000001010001001100110
+11101010001000100000000000000000
+11000000000000000010111011100111
+00100000010000000011001000101100
+00100000001000000010111100011100
+00100000010000000011001001100001
+00011111111000001111111000000001
+00100000010000000011001001100100
+00100000010000000010111100000100
+00011111111000001111111000000001
+00011111111000010111111000000001
+00100000010000000010111100000110
+11000000000000000010111100001100
+11000000000000001010111100001110
+00100000011000000000000000000000
+01011000000000000000000110001011
+00100000001000000011001011010000
+11011010001000000000000110001011
+00100000001000000011001010110011
+00100000010000000011001001100111
+00100000010000000011001000100100
+00100000010000000011001000101100
+00100000001000000010110010001010
+00100000010000000010111100001000
+00100000001000000010111011101000
+00100000010000000010110010000011
+00100000001000000010111011101000
+01111001001111111000000000100110
+00100000010000000010110010001010
+00100000010000000011001001010011
+11000001111111111000000000000000
+00100000010000000010111100100010
+00100000010000000011001001100011
+00100000000000000000011111010000
+00100000010000000011001001100001
+11000000011111111010110111010100
+00100000010000000010110110100100
+00100100001011000010111100100111
+00100100001101111010111100100111
+01111001001000000000000000100110
+00100000010000000011001001100011
+01011000000000000000000011111111
+00100000010000000011001001010110
+01110000000010101001100100111100
+00100000001000000111110110000110
+01111001001000000000000000100111
+01110000000100011001111011111111
+00100000010000000011001000111010
+00100000010000000010110101110111
+00100000001000000010110101010011
+00100000010000000011001001100001
+00011111111000001111111000000001
+00100000010000000011001001100100
+00100000010000000010110010001010
+00100000001000000010111100010110
+00100000010000000011001001100111
+01011000000000000000000011111111
+00100000010000000011001001010110
+00100000001000000010111100010000
+01000100110111010100000000010111
+00100000010000000010110001111010
+01011000000000000011000110110000
+00011010011000001000101011011110
+11100000101000010000000000000000
+00100000010000000010111100111101
+00100000010000000100100011101010
+00100000010000000011001010110110
+01000100110111011100000000010111
+11000000000000000011000001010101
+11000000000000001010111101000101
+11000000000001111010111101000001
+00100000001000000010101010001100
+00100000010000000011001001101100
+11011111001000000000000010000000
+11011000101000000000110110011110
+00100000001000000111111011000110
+00100000010000000010111101001100
+00100000010000000010111101001111
+00100000010000000100100011010011
+00100000001000000010111101000010
+01000100110111100100000000010111
+00100000010000000010111101001100
+00100000010000000010111101001111
+00100000010000000010111110111101
+00100000010000000100100011010011
+00100000010000000011000000011001
+00100000001000000010111101000111
+00100000010000000011001010010001
+00100000010000000011001010010110
+00100000001000000011001010011001
+00100000010000000011001010001111
+11000001100000000000000000000000
+00100000010000000010111101010101
+00100000010000000010111101100101
+00100000010000000011000101101011
+00100000001000000010111110010110
+00100000010000000011001010010100
+11000011100000000000000000000000
+01111001001000000111111000000000
+00100000010000000011001010010111
+00100000010000000011001001100111
+00100000010000000011001010011001
+01110000000011010011100000000000
+00100000010000000011001001001111
+00100000010000000010111101100001
+00011010011000001000101000000000
+11011111001000000000000001000010
+00100000001000000111111011010100
+00100000010000000011001000110001
+00100000010000000011001001111101
+00100000010000000011001000101100
+00100000001000000010110010001010
+01000100110111101100000000010111
+00100000010000000011001001001100
+11000000000000001010111110001101
+00100000010000000011001001000101
+11000000000000001010110010001010
+01011000000000000000000100110110
+10011010011000001010001000000000
+11101010001010100000000000000000
+00011100010000100111111000000000
+10011000010001100111110000000000
+00100100010000010010110100011000
+00011111111000100010010000000000
+01011000000000000000000100110110
+10011010011000001010001000000000
+11101010001000100000000000000000
+00011111111000100000010000000000
+01011000000000000000000100111010
+10011010011000001010001000000000
+00011000010000100111111000000000
+11101010001010001000000000000000
+10011000010000001000010000000000
+00011010010000100111111000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+01111001001111111111111000011100
+01011000000000000000000100110110
+10011010011000001000101000000000
+11100000101000100000000000000000
+00100000010000000010110010001010
+00100000010000000011001001111000
+00011111111000001111111000000001
+00100000010000000011001001111011
+11000001100000010000000000000000
+00100000010000000011001001111010
+00100000001000000011001001001111
+00011100010000100111111000000000
+11011010001000000000000100110110
+00100000010000000011001010111111
+11100000101000100000000000000000
+00100000001000000011001001111010
+11011010001000000000110110011110
+00100000010000000010111110010100
+00011010011000001000101011101011
+11100000101010001000000000000000
+00011000010001100111110001010000
+00100100011000010000000000000000
+00100000001000000010110010001010
+11011111001000000000000100000000
+00100000001000000010111001100010
+00100000010000000010111110011001
+00100000010000000010111110100101
+00100000001000000010111110110001
+01011000000000000000000110000000
+00100000010000000011001011010000
+00100000011110100000000000000000
+11011000111000000000000000001011
+00100000010000000111111100010110
+00100100011110100000000000000000
+00100000010000000011001010100111
+01011000000000000000000000000001
+01100000000000001000110101010100
+01011000000000000000000000000000
+11100000101000111000000000000000
+00100000001000000011000110111000
+01011000000000000000000101111110
+00100000010000000011001011010000
+00100000011110100000000000000000
+11011000111000000000000000001110
+00100000010000000111111100010110
+00100100011110100000000000000000
+00100000010000000011001010101010
+11011000101000000000110101100100
+11011111001000000000000000000010
+00100000010000000111111011000110
+01110000000011010110010000000000
+00100000001000000011000111101101
+01011000000000000000000101111111
+00100000010000000011001011010000
+00100000011110100000000000000000
+11011000111000000000000000001100
+00100000010000000111111100010110
+00100100011110100000000000000000
+00100000010000000011001010101101
+11011000101000000000110101110100
+11011111001000000000000000000010
+00100000010000000111111011000110
+01110000000011010111010000000011
+00100000001000000011001000000111
+00100000010000000011001010001111
+11000001100000001000000000000000
+00100000010000000010111111000001
+00100000001000000010111111001011
+00100000010000000011001010010100
+11000011100000001000000000000000
+01111001001000000111111000000001
+00100000010000000011001010010111
+00100000010000000011001010011100
+00100000010000000010110010000011
+01011000000000000000000000000000
+11011010001000000000000100000110
+00100000010000000011001010111111
+00100000001000000011001011000101
+00100000010000000011000101101110
+00100100001101111010111101011110
+00011010011000001000110000000000
+01011000000000000000000100001001
+10011010011000001000101000000000
+11011111001000000000000000001000
+00100000010000000111111100000001
+01011000000000000000000100001011
+00100000010000000011001011010000
+11000000010101010010111111011001
+11000000001010101010111111101101
+11000000000100010011000000000001
+11000000011111111011001000010010
+00100000001000000010111101011110
+00100000010000000011001010111101
+11000000000000001010111111011101
+11000000000000010010111111101000
+00100000011000000000000000000000
+01011000000000000000000000000001
+00100000010000000010111111110111
+01011000000000000000000000000001
+00100000010000000011001010001001
+01011000000000000000000010000000
+11011010001000000000000100110000
+00100000010000000011001010110011
+00100000010000000011001001111101
+11011010001000000000000100110001
+00100000010000000011001010111111
+00100000001000000011001000101101
+01011000000000000000000000000001
+00100000010000000010111111111111
+01011000000000000000000000000010
+00100000010000000011001010001001
+00100000001000000010111111100001
+00100000010000000011001010111101
+11000000000000001010111111110001
+11000000000000010010111111111001
+00100000011000000000000000000000
+00100000010000000010111111011111
+01011000000000000000000100000110
+00100000010000000011001011010000
+11000000000000001010111111110110
+00100000011000000000000000000000
+01011000000000000000000000000010
+11011010001000000000000100000110
+00100000001000000011001010110011
+00100000010000000010111111101010
+01011000000000000000000100000111
+00100000010000000011001011010000
+11000000000000001010111111111110
+00100000011000000000000000000000
+01011000000000000000000000000010
+11011010001000000000000100000111
+00100000001000000011001010110011
+00100000010000000011001010111101
+11000000000000001011000000000101
+11000000000000010011000000010001
+00100000011000000000000000000000
+01011000000000000000000100000110
+00100000010000000011001011010000
+11000000000000010011000000001001
+00100000011000000000000000000000
+00100000010000000011001010001011
+00011111111000011111111000000001
+00100000010000000011001010001101
+01011000000000000000000000000000
+01011000000000000000000100000110
+10011010011000001000101000000000
+11100000101000010000000000000000
+00100000001000000010111101011110
+01011000000000000000000100000111
+00100000010000000011001011010000
+11000000100000000011000000010101
+00100000011000000000000000000000
+00100000010000000011001010001011
+00011111111000011111111000000010
+00100000010000000011001010001101
+00100000001000000011000000001100
+01101000000000001000110101010000
+00100000011110100000000000000000
+01110000000011010101000000000000
+01101000000000010000110101001110
+11011000010000000000001010111010
+10011000010001100111110000000000
+00100100011000101000000000000000
+01101000000000001000110010110110
+11000001110111010000000000000000
+01101000000000001000110010110111
+01000100110111110100000000010111
+11000000010100000011000000111011
+11000000010100001011000000101100
+11000000010100110011000001000001
+11000000010100111011000001000011
+11000000010101001011000001001001
+11000000010110000011000001001101
+01110000000011010100001000000000
+00100000011000000000000000000000
+01101000000000001000110010111000
+11000000000000001011000000110001
+11000000010000100011000000110100
+11000000010100111011000000111001
+00100000001000000011000000101010
+00100000010000000011001010001011
+01100000000000001000110011110111
+00100000001000000011000000111111
+00100000010000000011001010010001
+00100000010000000011001010010110
+00100000010000000011001010001011
+01100000000000001000110011110111
+00100000001000000011000000111111
+01110000000011001111011110100001
+00100000001000000011000000111111
+01101000000000001000110010111000
+11000000010000001011000000111110
+00100000001000000011000000101010
+00100000010000000011000010010000
+01110000000011010100001000000001
+00100000011000000000000000000000
+01110000000011001111011100010101
+00100000001000000011000000111111
+00100000010000000011001010001111
+11000000000000000011000001000111
+11000000000000001011000000111001
+00100000011000000000000000000000
+01110000000011001111011110100000
+00100000001000000011000000111111
+01110000000011001111011100000000
+01110000000011001111100000000000
+01110000000011001111100100000001
+00100000001000000011000000111111
+00100000010000000011001010011100
+01101000000000001000110010111000
+00011111111000001111111000000010
+00011111111000100111001000000000
+11011000110000000000110010110110
+01011000000000000000000100111100
+10011010011000001000101000000000
+00100000001000000111111100000001
+01000100110111111100000000010111
+00100000010000000011000001111101
+00100000010000000010110001111111
+00100000010000000100100011010011
+00100000001000000011000001010111
+00100000010000000011001010001111
+11000001100000000000000000000000
+00100000010000000010111101010001
+00100000001000000011000010011000
+00100000010000000011001010001111
+11000001100000001000000000000000
+00100000010000000010111111000001
+00100000010000000010111111001011
+00100000010000000011001010001011
+00100000011110100000000000000000
+00100000010000000011001010000110
+00100000010000000010111101001100
+00100000010000000011000010010011
+01011000000000000000000000000000
+00011010011000001000101010100111
+00100000001000000011001000101101
+00100000010000000111111111101001
+00011010011000001010001010100111
+11101010001010100000000000000000
+00011100010000100111111000000000
+10011000010001100111110000000000
+00100100010000010010110100011000
+00011111111000100010010000000000
+00011010011000001010001010100111
+11101010001000100000000000000000
+00011010011000001010001010101011
+11101010001010001000000000000000
+10011000010000001000010000000000
+00011010010000100111111000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+01111001001111111111111000011100
+00011010011000001000101010100111
+11100000101000100000000000000000
+00100000001000000111111111100111
+01011000000000000000000000000001
+00100000010000000011001010000111
+00100000010000000011001010000011
+01011000000000000000000011111111
+00011010011000001000101010101011
+11100000101000001000000000000000
+00100000001000000011000001100111
+01011000000000000000000101011100
+00100000010000000011001011010000
+00100000011110100000000000000000
+00100000010000000011000001101010
+00100100011101000000000000000000
+00100000010000000011001010000001
+00011111111000001111111000000001
+00011111111000010111111000000001
+00100000010000000011001010000100
+11000000000000000010111101001100
+11000000000000001011000010010000
+00100000011000000000000000000000
+01011000000000000000000000000001
+00100000010000000011001010010010
+00100000001000000011001010010110
+01011000000000000000000000000001
+00100000010000000011001010100101
+01011000000000000000001010000000
+11011000111000000000000000001000
+00100000001000000111111100001000
+00100000010000000011001010100010
+00100000011110100000000000000000
+11011000111000000000000000001000
+00100000010000000111111100010110
+00100100011110100000000000000000
+00100000010000000011001010100100
+01011000000000000000000000000111
+00100000010000000011001010010010
+00100000010000000011001010010110
+00100000001000000010111101011110
+01000100111000000100000000011000
+00100000010000000011001010001111
+11000001100000111000000000000000
+00100000010000000011000011001011
+00100000010000000011000011100000
+00100000010000000011000101101110
+00100100001101111010111101011110
+00100000010000000011000010111100
+00100000010000101011000101110010
+00100000010000000010111101001100
+00100000010000000011001010010100
+01111001001000000111111000000000
+00100000010000000011001010010111
+00100000010000000010111101011110
+00100000010000000011000010010011
+00100000010000000011000010111100
+00100000001000101011000011000001
+01011000000000000000000101100100
+00100000010000000011001011010011
+00100000010000000011000010111110
+00100000001000101011000011000101
+01011000000000000000000101100000
+00100000010000000011001011010011
+00100000010000000011000010111110
+00100000001000101011000011001000
+00100000011000000000000000000000
+01011000000000000000000100101011
+00100000010000000011001011010011
+00100000010000000011001000101010
+10011000010001100111110000000000
+00100000011000000000000000000000
+01011000000000000000000110000010
+00100000010000000011001011010000
+00011010011000001000101010010001
+00100000001000000011001010110100
+01011000000000000000000110000101
+00100000010000000011001011010000
+00100000001000000011000011000011
+01011000000000000000000110001000
+00100000010000000011001011010000
+00100000001000000011000011000011
+00100000010000000011001010010100
+11000011100000111000000000000000
+01111001001000000111111000000111
+00100000010000000011001010010111
+00100000010000000011001010000011
+00100000010000000011001010011100
+01011000000000000000000000000000
+00011010011000001000101011110101
+11100000101000011000000000000000
+11011010001000000000000110000011
+00100000010000000011001010111111
+11100000101000111000000000000000
+00100000010000000011000010111100
+00100100011000101000000000000000
+00011010011000001010001010010001
+11101010001000001000000000000000
+11011010001000000000000110000010
+00100000010000000011001010110011
+00011010011000001010001010010000
+11101010001000001000000000000000
+00100000001000000011000101001010
+01000100111000001100000000011000
+00100000010000000011001010000001
+00011111111000001111111000000001
+00011111111000010111111000000011
+00100000010000000011001010000100
+11000000000000000011000100001110
+11000000000000001011000100110010
+11000000000000010011000011101010
+11000000000000011011000100110010
+00100000011000000000000000000000
+00100000010000000010111111011111
+01011000000000000000000101100000
+00100000010000000011001001111110
+00100000001110100011000011100000
+00100000010000000011001000101100
+01011000000000000000000110001001
+00100000010000000011001011010000
+00100000010110100011000100001000
+01011000000000000000000110000111
+00100000010000000011001011010000
+00100000010000000011001000101111
+00011010011000001010001011110111
+11101010001010001000000000000000
+11011010001000000000111110011110
+00100000010000000010111001011000
+00011010011000001000101011110111
+11100000101010001000000000000000
+00100000010000000010111110010100
+00011010011000001000101011111010
+11100000101010001000000000000000
+00011000010001100111110001010000
+00100100011000010000000000000000
+01011000000000000000000110001000
+00100000010000000011001001110101
+00100000010000000010110010010000
+11011010001000000000000110001000
+00100000010000000011001011001000
+11100000101010001000000000000000
+11011010001000000000000110000111
+00100000001000000011001010110011
+01011000000000000000000000000001
+11011010001000000000000110001001
+00100000010000000011001010110011
+11011000010000000000000000000000
+00100000010000000010110010010100
+00100000001000000011000100000110
+00100000010000000010111111101010
+01011000000000000000000101100100
+00100000010000000011001001111110
+00100000001110100011000011100000
+00100000010000000011001000101100
+01011000000000000000000110000110
+00100000010000000011001011010000
+00100000010110100011000100101100
+01011000000000000000000110000100
+00100000010000000011001011010000
+00100000010000000011001000101111
+00011010011000001010001011110110
+11101010001010001000000000000000
+11011010001000000001000010011110
+00100000010000000010111001011000
+00011010011000001000101011110110
+11100000101010001000000000000000
+00100000010000000010111110010100
+00011010011000001000101011111001
+11100000101010001000000000000000
+00011000010001100111110001010000
+00100100011000010000000000000000
+01011000000000000000000110000101
+00100000010000000011001001110101
+00100000010000000010110010010000
+11011010001000000000000110000101
+00100000010000000011001011001000
+11100000101010001000000000000000
+11011010001000000000000110000100
+00100000001000000011001010110011
+01011000000000000000000000000001
+11011010001000000000000110000110
+00100000010000000011001010110011
+11011000010000000000000000000000
+00100000010000000010110010010100
+00100000001000000011000100101010
+00100000010000000010111111011111
+00100000010000000011001001111101
+00100000010000000011001000101100
+01011000000000000000000110000011
+00100000010000000011001011010000
+00100000010110100011000101001100
+00100000010000000011000101001111
+00011010011000001010001011110101
+11101010001010001000000000000000
+11011010001000000000111010011110
+00100000010000000010111001011000
+00011010011000001000101011110101
+11100000101010001000000000000000
+00100000010000000010111110010100
+00011010011000001000101011111000
+11100000101010001000000000000000
+00011000010001100111110001010000
+00100100011000010000000000000000
+01011000000000000000000110000010
+00100000010000000011001001110101
+00100000010000000010110010010000
+11011010001000000000000110000010
+00100000010000000011001011001000
+11100000101010001000000000000000
+11011010001000000000000110000001
+00100000001000000011001010110011
+01011000000000000000000000000001
+11011010001000000000000110000011
+00100000010000000011001010110011
+01011000000000000000000110000001
+00100000010000000011001011010000
+00100000001000000011001000101111
+00011010011000001010001000000000
+11101010001000001000000000000000
+00100000010000000011001000111100
+00100000010000000010110111011110
+00100000010000000011001001011111
+00101111111011111111111000000000
+00100000001000001011000101011100
+00100000010000000011000101011101
+00100000010000000010110101010011
+00100000010000000010110111110111
+00100000001000000010111001000101
+01000100111000010100000000011000
+00011010011000001000101010000110
+00100000010000000011001011010110
+01011000000000000000000100111011
+00100000010000000011001011010000
+00100000011110100000000000000000
+01011000000000000000000000000110
+00011010011000001000101010000110
+11100000101000001000000000000000
+11011111001000000000000000000110
+01011000000000000000000100101111
+10011010011000001000110000000000
+00011010011000001000101000100010
+00100000001000000111111100000001
+00100000010000000011000101101110
+00100100001101111010111101011110
+00100000001000000011000101110010
+00100000010000000010111101011110
+00100000010000000010111000010001
+00100100011101111000000000000000
+00100000001000000011000101010010
+01000100111000011100000000011000
+00100000010000000011000110001000
+00100100001101000010111101011110
+00011010011000001010001010000100
+11101010001000001000000000000000
+00100000001110100010111101011110
+00011111111000001111111000000010
+10011000000000000111001000000000
+00011010011000001000110000000000
+01011000000000000000000100001001
+10011010011000001000101000000000
+00100000010000000111111100000001
+00100000010000000011001010000110
+00100000010000000011001010110110
+00100000010110100011000010010011
+01011000000000000000000100001011
+00100000010000000011001011010000
+11000000000000001011000110011110
+11000000000000010011000111000110
+11000000000000011011000111110010
+11000000011111111011001000010010
+00100000001000000010111101011110
+00100000010000000010110001111010
+00100000010000000111111111101001
+00011010011000001010001011001010
+11101010001000001000000000000000
+00011010011000001010001011001011
+11101010001010001000000000000000
+10011000010001100111110000000000
+00100100010000101111111111100111
+00011010011000001010001011001010
+11101010001000001000000000000000
+00011010011000001000101011001011
+11100000101000001000000000000000
+00011010011000001010001011000100
+11101010001000011000000000000000
+00011010011000001010001011000111
+11101010001010011000000000000000
+10011000010001100111110000000000
+00100100010000101111111111100111
+00011010011000001010001011000100
+11101010001000011000000000000000
+00011010011000001000101011000111
+00100000001000000011001011000101
+00100000010000000010111110001000
+00100000010000000011001001001100
+01100000000000001000101010100010
+00100000010000000011001001110100
+01101000000000001000101010100010
+00101000010011111111111000000011
+01111001001000001111111000000000
+00011010011000001000101010110010
+11100000101000001000000000000000
+11000000000000001011001000010110
+00100000010000000011001001000101
+00100000010000000011001001110100
+00101000010011111111111000000100
+01111001001000001111111000000000
+00100000010000000011001001001001
+00011010011000001010001011011110
+11101010001000010000000000000000
+00100000001000000111111110011100
+01011000000000000000000000000001
+01100000000000001000110101010100
+00100000010000000011001010011110
+11100000101000111000000000000000
+00100000010000000011001010011110
+00100100010110100011000110111101
+00100000010000000011001010011110
+00100000010110100011000111000010
+01110000000011010101001000100000
+01101000000000001000110100111000
+01111001001000000111111000000010
+01100000000000001000110100111000
+00100000011000000000000000000000
+01011000000000000000000000000001
+00100000010000000011001010101000
+01011000000000000000000101000000
+11011000111000000000000000001011
+00100000001000000111111100001000
+00100000010000000011001010100111
+01011000000000000000000000000000
+11011000111000000000000000001011
+00100000001000000111111100001000
+00100000010000000011001001110100
+00101000010011111111111000000011
+00100000001000001011001000011011
+11011000101000000000110101100100
+00100000010000000011000111100000
+01101000000001000000110101100100
+00100100010110100011000111100100
+01101000000001000000110101100100
+00100000010110100011000111101001
+00100000010000000010110001111010
+01101000000001000000110101100100
+11011010001000000000000101101000
+00100000010000000011001010111111
+11100000101001000000000000000000
+01011000000000000000000101110000
+10011010011000001010001000000000
+11101010001011000000000000000000
+10011000010001100111110000000000
+00100100010000101011000111101101
+01011000000000000000000101101000
+10011010011000001010001000000000
+11101010001001000000000000000000
+11011010001000000000000101110000
+00100000010000000011001010111111
+11100000101001000000000000000000
+00100000001000000010111101011110
+01011000000000000000000100001011
+10011010011000001000110000000000
+11011111001000000000000000001001
+00100000001000000111111111110011
+01011000000000000000000000000001
+00100000010000000011001010101011
+01011000000000000000000101000000
+11011000111000000000000000001110
+00100000001000000111111100001000
+00100000010000000011001010101010
+01011000000000000000000000000000
+11011000111000000000000000001110
+00100000001000000111111100001000
+01110000000011010101000100010000
+01101000000000001000110100111000
+01111001001000000111111000000001
+01100000000000001000110100111000
+00100000011000000000000000000000
+11011000101000000000110101110100
+00100000010000000011000111100000
+01101000000000010000110101110101
+00100100010110100011001000001001
+01101000000000010000110101110101
+00100000010110100011001000001110
+00100000010000000010110001111010
+01101000000000011000110101110100
+11011010001000000000000101111000
+00100000010000000011001011000100
+01011000000000000000000101111011
+10011010011000001010001000000000
+11101010001010011000000000000000
+10011000010001100111110000000000
+00100100010000101011001000000111
+01011000000000000000000101111000
+10011010011000001010001000000000
+11101010001000011000000000000000
+11011010001000000000000101111011
+00100000010000000011001011000100
+00100000001000000010111101011110
+01110000000011010101001000100001
+00100000001000000011000110111001
+01011000000000000000000000000001
+00100000010000000011001010101110
+01011000000000000000000101000000
+11011000111000000000000000001100
+00100000001000000111111100001000
+00100000010000000011001010101101
+01011000000000000000000000000000
+11011000111000000000000000001100
+00100000001000000111111100001000
+00100000010000000011001010111101
+11000000000000001011001000010110
+11000000000000010011001000011011
+00100000011000000000000000000000
+01011000000000000000000100001101
+00100000010000000011001001111110
+11011010001000000000000101100000
+00100000010000000011001010111111
+00100000001000000011001000101101
+01011000000000000000000100001101
+00100000010000000011001001111110
+11011010001000000000000101100100
+00100000010000000011001010111111
+00100000001000000011001000101101
+00100000010000000010110001111010
+00011010011000001000101011001101
+11100000101000001000000000000000
+00100000011000000000000000000000
+00100000010000000010110001111010
+00011010011000001010001010111110
+00100000001000000011001001111111
+00100000010000000010110001111010
+00011010011000001000101010111110
+00100000001000000011001000101101
+00011010011000001010001010101110
+00100000001000000011001001111111
+00011010011000001000101010101110
+11100000101000100000000000000000
+00100000011000000000000000000000
+00011010011000001000101010010000
+00100000001000000011001010110100
+01011000000000000000000000000000
+00100000010000000010110001111010
+00011010011000001000101010000101
+00100000001000000011001010110100
+00011010011000001000101001000010
+00100000001000000011001010110100
+01011000000000000000000000000100
+00011010011000001000101011001100
+00100000001000000011001010110100
+00011010011000001010001010000111
+00100000001000000011001011010001
+00011010011000001000101010000111
+00100000001000000011001010110100
+01011000000000000000000000000010
+00011010011000001000101011010000
+00100000001000000011001010110100
+01011000000000000000000000000001
+00100000010000000010110001111010
+00011010011000001000101011001110
+00100000001000000011001010110100
+00100000010000000010110001111010
+00011010011000001010001010110100
+00100000001000000011001011010001
+01011000000000000000000000000001
+00100000010000000010110001111010
+00011010011000001000101010110100
+00100000001000000011001010110100
+00100000010000000010110001111010
+00011010011000001010001010110010
+00100000001000000011001011010001
+01011000000000000000000000000001
+00100000010000000010110001111010
+00011010011000001000101010110010
+00100000001000000011001010110100
+00100000010000000010110001111010
+00011010011000001010001010010110
+00100000001000000011001011010001
+00011010011000001000101010010110
+00100000001000000011001010110100
+00011010011000001010001011001111
+00100000001000000011001011010001
+01011000000000000000000000000000
+00011010011000001000101011001111
+00100000001000000011001010110100
+00011010011000001010001011010010
+00100000001000000011001011010001
+00011010011000001010001000000001
+00100000001000000011001011010001
+00011010011000001010001010110101
+00100000001000000011001011010001
+01011000000000000000000000000000
+00100000010000000010110001111010
+00011010011000001000101010110101
+00100000001000000011001010110100
+00100000010000000010110001111010
+00011010011000001010001011111011
+11101010001000001000000000000000
+01100000000000001100000111011110
+00100000011000000000000000000000
+00100000010000000010110001111010
+01101000000000001100000111011110
+00011010011000001000101011111011
+00100000001000000011001010110100
+00011010011000001010001011111100
+00100000001000000011001011010001
+00011010011000001000101011111110
+00100000001000000011001010110100
+01011000000000000000000100001001
+10011010011000001010001000000000
+11101010001010001000000000000000
+00100000011000000000000000000000
+01011000000000000000000100110101
+00100000001000000011001011010000
+01011000000000000000000000000000
+11011010001000000000000100110101
+00100000001000000011001010110011
+01011000000000000000000100101011
+00100000010000000011001011001101
+11101010001000100000000000000000
+00100000011000000000000000000000
+01011000000000000000000101011111
+00100000001000000011001011010000
+01011000000000000000000000000000
+11011010001000000000000101011111
+00100000001000000011001010110011
+01011000000000000000000000000000
+11011010001000000000000101011100
+00100000001000000011001010110011
+11011010001000000000000100101111
+00100000001000000011001010110011
+01011000000000000000000100001000
+00100000001000000011001011010000
+11011010001000000000000100001000
+00100000001000000011001010110011
+01011000000000000000000100000101
+00100000001000000011001011010000
+01011000000000000000000000000000
+11011010001000000000000100000101
+00100000001000000011001010110011
+01011000000000000000000100000100
+00100000001000000011001011010000
+01011000000000000000000000000000
+11011010001000000000000100000100
+00100000001000000011001010110011
+01011000000000000000000000000000
+11011010001000000000000100111011
+00100000001000000011001010110011
+01011000000000000000000000000001
+00100000001000000011001010011010
+01011000000000000000000100001100
+00100000010000000011001011001101
+11101010001000111000000000000000
+00100000011000000000000000000000
+01011000000000000000000101011110
+00100000001000000011001011010000
+01011000000000000000000000000000
+11011010001000000000000101011110
+00100000001000000011001010110011
+01011000000000000000000000000000
+11011010001000000000000110000000
+00100000001000000011001010110011
+01011000000000000000000000000000
+11011010001000000000000101111110
+00100000001000000011001010110011
+01011000000000000000000000000000
+11011010001000000000000101111111
+00100000001000000011001010110011
+11011010001000000000000100000010
+00100000001000000011001010110011
+11011010001000000000000100000011
+00100000010000000011001011000111
+11100000101000001000000000000000
+00100000011000000000000000000000
+01011000000000000000000101011101
+00100000001000000011001011010000
+11011010001000000000000101011101
+00100000001000000011001010110011
+01011000000000000000000110001010
+00100000010000000011001011010000
+00100000001000000011001001101010
+01011000000000000000000100001100
+00100000001000000011001011010000
+00011111111000100000010000000000
+00011010001000100111111000000000
+10011010011000001000101000000000
+00011000010000100111111000000000
+00100000011000000000000000000000
+00100000010000000011001010111111
+11100000101000011000000000000000
+00100000011000000000000000000000
+00100000010000000010110001111010
+00011111111000100010010000000000
+00011010001000100111111000000000
+10011010011000001000101000000000
+00011010010000100111111000000000
+00100000011000000000000000000000
+00100000010000000010110001111010
+10011010011000001010001000000000
+00100000011000000000000000000000
+00100000010000000011001011001101
+11101010001000001000000000000000
+00100000011000000000000000000000
+00100000010000000011001011001101
+11101010001010100000000000000000
+00100000011000000000000000000000
+01011000000000000000000000000000
+00100000001000000011001010110100
+01000100111000100100000000011000
+01101000000000001100000010010010
+00100000001110100011001011011000
+11000000000000100010111100110000
+11000000000001111011010000110110
+11000000000001001100010111011110
+11000000000001010011100100101010
+11000000000001110011010110111111
+11000000000010000100010010100100
+11000010100000110011110100000000
+00100000011000000000000000000000
+01000100111000101100000000011000
+01110000000000010101000100000000
+01110000000000010111111100000000
+01110000000000011000000000000000
+01011000000000000000000000000000
+01100000000000101000100110101110
+01101000000000001100000010010010
+00100000001110100011001011100011
+11000000000001010011100101100010
+00100000011000000000000000000000
+00100000010000000111110011010001
+00100000010000000111110110011100
+00100000010000000011001011110110
+01101000000000010100000111110011
+00100000001000000111111110011100
+01101000000000010100000111110001
+00100000001000000111111110011100
+01101000000000010100000111101111
+00100000001000000111111110011100
+01000100111000110100000000011000
+11011010001000000100011001101000
+00100000010000000111111111000100
+00100000011110100000000000000000
+00011111111000100010011000000000
+00100000010000000011001011111111
+00100000001000000011001100100100
+11011010011000000000000000000000
+00100000011000000000000000000000
+11000000000000001011001100010001
+11000000000010000011001101010111
+11000000000000101011001100110101
+11000000000010010011001100111100
+11000000000000110011001101010011
+11000000000000100011001110010100
+11000000000000010011001110011001
+11000000000010011011001110010100
+11000000000010100011001101001011
+11000000000010101011001101001111
+11000000000000011011001100101110
+11000000000001011011001101000000
+11000000000001100011001101000111
+11000000000010110011001101011011
+11000000000011000011001100101010
+11000000000101010011001100011010
+11000000000101011011001100011000
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001000000111111000000000
+01100000000000010100011010000010
+01101000000000010100001000001010
+01111001001111111111111000000000
+01100000000000010100001000001010
+00100000011000000000000000000000
+01110000000000100010100100000000
+00100000011000000000000000000000
+01101000000000001000001000101001
+00011111111000001111111000000001
+01100000000000001000001000101001
+00011111111001100111110000000001
+00100000001000010011001111011111
+01110000000000100010100100000000
+01101000000000010100001000001010
+01111001001000000111111000001001
+01100000000000010100001000001010
+00100000001000000011001111101001
+01101000000000010100000111110101
+00100000001000000111111110011100
+01101000000000010100000111101001
+00100000001000000111111110011100
+01101000000000010100000111101101
+00100000001000000111111110011100
+01101000000000010100001000001010
+01111001001000000111111000000001
+01100000000000010100001000001010
+00100000001000000011010000010010
+01101000000000010100011010000010
+01111001001000000111111000000111
+01100000000000010100011010000010
+01101000000000010100001000001010
+01111001001000000111111000000010
+01100000000000010100001000001010
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001000000111111000000001
+01100000000000010100011010000010
+01101000000000010100001000001010
+01111001001000000111111000000100
+01100000000000010100001000001010
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001000000111111000000011
+01100000000000010100011010000010
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001000000111111000000101
+01100000000000010100011010000010
+01101000000000010100001000001010
+01111001001000000111111000000011
+01100000000000010100001000001010
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001111111111111000000101
+01100000000000010100011010000010
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001000000111111000001001
+01100000000000010100011010000010
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001111111111111000001001
+01100000000000010100011010000010
+00100000001000000011010000011000
+01101000000000010100011010000010
+01111001001000000111111000000010
+01100000000000010100011010000010
+00100000011000000000000000000000
+01101000000000010100001000001010
+01111001001000000111111000000000
+01100000000000010100001000001010
+00100000011000000000000000000000
+01101000000000010100001000001010
+01111001001000000111111000001000
+01100000000000010100001000001010
+00100000001000000011001111101001
+01000100111000111100000000011000
+01100000000000001000001000101010
+01101000000000001000001000101010
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000001000001000101010
+00100000010000000111110011011101
+00100000010000000011001111010110
+00100000010000000011001110000111
+00100000010000000011001110001101
+00100000010000000110010100011011
+01101000000000010100000111111101
+00100000010000000111111110011100
+00100000001000000011001101100001
+11101010011000001000000000000000
+00100000011110100000000000000000
+00011111111000001111111111111111
+11100010011000001000000000000000
+00100100011110100000000000000000
+00011010010000100111111000000000
+00100000001000000111111110011100
+11101010011000010000000000000000
+00100000011110100000000000000000
+00011111111000001111111111111111
+11100010011000010000000000000000
+00100100011110100000000000000000
+00011010010000100111111000000000
+00100000001000000111111110011100
+01101000000010010100001000111111
+00011000010000001010011000000001
+11011010010000000011001101111111
+00100000001000000011001101101101
+00100000010000000011010000101101
+11000000000000001011001110000010
+00100000001000000011010000001010
+01011000000000000000000000000010
+11100010011000001000000000000000
+00011000010000001010010000001000
+11101010010000010000000000000000
+00100000001000000111111110011100
+11011010011000000100001000000101
+11011010010000000011001110001010
+00100000001000000011001101101101
+00100000010000000010001001010010
+00100000001000101011010000001110
+00100000011000000000000000000000
+11011010011000000100011001111110
+11011010010000000011001110010000
+00100000001000000011001101110100
+00100000010000000011001111110000
+00100000010000000011010000001000
+01101000000000010100000111110111
+00100000001000000111111110011100
+00100000010000000011001110101100
+01101000000000010100011010000010
+01111001001111111111111000000111
+01100000000000010100011010000010
+00100000011000000000000000000000
+01110000010000100000010100000000
+01101000000000010100011010000010
+11000010100000111011001110011110
+00101111111011000000000000000001
+00100000010000001011001011111101
+01000100111001000100000000011001
+01101000000000010100011010000010
+01111001001111111111111000000000
+01111001001111111111111000000001
+01111001001111111111111000000010
+01111001001111111111111000000011
+01111001001111111111111000000111
+01100000000000010100011010000010
+00100000001000000011010000011000
+00100000010000000011001110101001
+00100000001000000011010000001010
+01011000000000000000000000000000
+01100000000000010100001000001000
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000010100001000001010
+00100000011000000000000000000000
+01101000000000010100001000001010
+01100000000000010100001000001000
+01011000000000000000000000000000
+01100000000000010100001000001010
+00100000011000000000000000000000
+01101000000000010100001000001010
+01111001001000000111111000000111
+01100000000000010100001000001000
+01011000000000000000000000000000
+01100000000000010100001000001010
+00100000011000000000000000000000
+01101000000000001100011010000010
+00101111111011111111111000000101
+00100000011000000000000000000000
+01011000000000001010101001010101
+01100000000000010000101010101010
+01000100111001001100000000011001
+11011000010000000000000000000010
+11011010001000000000101010101010
+11011010010000000000000011000011
+00100000001000000110011000000110
+01000100111001010100000000011001
+11011000010000000000000000000010
+11011010001000000000101010011010
+11011010010000000000000011000011
+00100000010000000110010111011111
+01101000000000010000101010011010
+11011000010000001010101001010101
+10011000010001100111110000000000
+00100000011000000000000000000000
+01101000000000001100010101011010
+01100000000000001100001000000101
+00100000011000000000000000000000
+11011000111000000000000000001001
+00100000001000000010110000110010
+11011000111000000000000000001001
+00100000001000000010110000110110
+01110000010000100000011000000101
+00100000001000000011001111010000
+11011010011000000100001000000110
+11011010010000000011001111010010
+00100000001000000011001101101101
+01110000010000110110001100000001
+00100000011000000000000000000000
+01110000010000110110001100000000
+00100000011000000000000000000000
+01110000000010101001100100001010
+00100000001000000111110110001111
+01110000000010101001100100011101
+00100000001000000111110110001111
+01000100111001011100000000011001
+01101000000000001100001000000111
+01100000000000001000000101101101
+01110000000000100010100000000001
+01110000000010101001100100000011
+00100000001000000111110110001111
+01110000000010101001100100011110
+00100000001000000111110110001111
+01110000000010101001100100000100
+00100000001000000111110110001111
+01101000000000010100011010000111
+01100000000000010100011001111110
+00100000010000000011010000000100
+01110000000010101001100100000001
+00100000001000000111110110001111
+01011000000000000000000000000000
+01100000000000010100011001111110
+01110000000010101001100100000010
+00100000001000000111110110001111
+01110000000010101001100100001111
+00100000001000000111110110001111
+01110000000010101001100100010000
+00100000001000000111110110001111
+01110000000010101001100100001110
+00100000001000000111110110001111
+01110000000010101001100100001101
+00100000001000000111110110001111
+01110000000010101001100100010111
+00100000001000000111110110001111
+01110000000010101001100100011000
+00100000001000000111110110001111
+01110000000010101001100100010110
+00100000001000000111110110001111
+01110000000010101001100100010001
+00100000001000000111110110001111
+01110000000010101001100100010101
+00100000001000000111110110001111
+01110000000010101001100100010100
+00100000001000000111110110001111
+01110000000010101001100100010011
+00100000001000000111110110001111
+01110000000010101001100100011001
+00100000001000000111110110001111
+01110000000010101001100100000110
+00100000001000000111110110001111
+01110000000010101001100100000101
+00100000001000000111110110001111
+01110000000010101001100100011111
+00100000001000000111110110001111
+01110000000010101001100100100000
+00100000001000000111110110001111
+01110000000010101001100100100101
+00100000001000000111110110001111
+01111001001000000000000000001101
+00100000011000000000000000000000
+01111001001111111000000000001101
+00100000011000000000000000000000
+00100000010000000011010000101101
+11000000000000010011010000100100
+01011000000000000000000000000001
+11100010011000001000000000000000
+00011000010000001010001000000011
+00011000010000001010010000000110
+11101010001010001000000000000000
+00011010011000001010011000000001
+11100010011010001000000000000000
+00100000001000000011001110000101
+01011000000000000000000000000000
+11100010011000001000000000000000
+01101000000000010100011010000010
+11000011000001001011010000101001
+00100000010000000011010000000010
+01101000000010010100001000111111
+00011000010000001010001000000010
+00011000010000001010010000000100
+00100000001000000011010000100000
+01101000000010010100001000111111
+00011000010000001010011000000000
+11101010011000001000000000000000
+00100000011000000000000000000000
+00100000010000000011010000101101
+11000000100000000011010000110100
+00100000001000000011010000001010
+00011000010000001010010000001010
+00100000001000000011001110000101
+00100000011101011000000000000000
+01110000100000001000000100000000
+01011000000000000011010001100011
+01100000000000010100000111101011
+01011000000000000110100101101100
+01100000000000010100000111101101
+01011000000000000011010011110101
+01100000000000010100000111110011
+01011000000000000011010011110100
+01100000000000010100000111101111
+01011000000000000011010001111110
+01100000000000010100000111110101
+01011000000000000011010010110010
+01100000000000010100000111111101
+01011000000000000011010001100101
+01100000000000010100000111111011
+01011000000000000011010001110000
+01100000000000010100000111101001
+01011000000000000011010100000001
+01100000000000010100000111111001
+01000100111001100100000000011001
+00100000010000000011010110011011
+00100000010000000110100101001000
+00100000010000000011010110101101
+00100000010000000111110100001000
+00100000010000000111110011010011
+01011000000000000011010100001011
+01100000000000010100011101100110
+01011000000000000011010011111100
+01100000000000010100011101011101
+01011000000000000011010011111000
+01100000000000010100011101011111
+01011000000000000011010001101100
+01100000000000010100011101100001
+01011000000000000011010110100010
+01100000000000010100011010101001
+01011000000000000011010110100100
+01100000000000010100011010101011
+01011000000000000011010110101001
+01100000000000010100011010110100
+01011000000000000011010110100110
+01100000000000010100011010110110
+01101000000000010100011010000010
+11000011100001100000000000000000
+00100000001000000011010000001010
+00100000010000000011010110000110
+00100000001000000011010000001010
+00100000010000000101100010010010
+00100100011110100000000000000000
+11011010001000000000101100000110
+00100000010000000111111001010100
+00100100011101000000000000000000
+11011000110000000000101100000110
+00100000001000000100011101000110
+01101000000000010100011110010111
+01100000000000010100011110010001
+01110000010001110101001100000001
+00100000001000000011010110001111
+01101000000000001100011110011101
+11000000000000001011010001111001
+01101000000000010100011010000010
+11000011000001001011010001111001
+01101000000000001100011110011110
+11000000000000001011001111010000
+01101000000000001100011100000000
+00100100001110100011001111010000
+00100000001000000011001111010010
+01101000000000001100011110011011
+01101000000010001100011110011100
+10011000010000011111111000000000
+11000000000000001011001111010000
+00100000001000000011001111010010
+00011010011000100111111000000000
+11000000000101101011010000110001
+11000000000010000011010000011010
+11000000000010100011010011011111
+11000000000010101011010011101000
+11000000001000000011010010000101
+00100000011000000000000000000000
+01101000000000010100010100001001
+11000000000000001011010010001100
+01101000000000010100001111011000
+00100000001110100011010010100010
+01110000010001111000101000000010
+01110000010001111000111100111100
+00100000011000000000000000000000
+01101000000000010100010010011010
+00100000001110100011010010100000
+01110000010001111000101000000001
+01101000000010010100011110110100
+01101000000000010100010010010110
+10011000010000001111111000000000
+01100000000000010100010010010110
+00011111111000100010001000000000
+01101000000000010100010010011000
+10011000010000001111111000000000
+01100000000000010100010010011000
+10011010001000001111111000000000
+00011111111000110000010000000000
+01101000000000010100011111000000
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111111111000000000
+01100000000000010100010010011010
+01110000010001111001000000000001
+00100000011000000000000000000000
+01110000010001111000101000000011
+00100000011000000000000000000000
+01110000010000010111001000000000
+01110000010001111001000000000000
+01101000000000010100001111010110
+01101000000010010100011110111110
+10011000010001100111110000000000
+01111001001000010010001000000000
+01101000000000010100011111000000
+01101000000010010100001111010110
+10011000010001100111111000000000
+01111001001000010010001000000001
+00101010001000000000011000000011
+00100000011000001000000000000000
+01101000000001000100011110111110
+01100000000001000100010010010110
+01110000010001111001000000000001
+00100000011000000000000000000000
+00100000010000000011001101111011
+00100000010000000011010010111001
+00100000010000000011010010111110
+00100000010000000011010011010101
+00100000010000000011010011001010
+00100000010000000011010011000100
+00100000001000000011010011011001
+11011010011000000100011110011001
+11011010010000000011010010111100
+00100000001000000011001101101101
+01110000010001111001101000000000
+00100000011000000000000000000000
+11011010011000000100011110010011
+11011010010000000011010011000001
+00100000001000000011001101110100
+11011010011000000100011010111111
+11011010010000000100011010011110
+00100000001000000011010110010001
+11011010011000000100011110001111
+11011010010000000011010011000111
+00100000001000000011001101101101
+01101000000000010100010010011010
+01100000000000001100000101110010
+00100000011000000000000000000000
+11011010011000000100011110010000
+11011010010000000011010011001101
+00100000001000000011001101101101
+01101000000000001000010000111111
+00101111111000001100000000000000
+00100100001000001011010011010011
+01110000010001111000101000000001
+00100000010000000011010000010110
+00100000001000000101101010111111
+01110000010001111001000000000001
+00100000011000000000000000000000
+11011010011000000100011110010001
+11011010010000000011010011011000
+00100000001000000011001101110100
+00100000001000000011010000011010
+11011010011000000100011110001101
+11011010010000000011010011011100
+00100000001000000011001101110100
+01101000000000010100011110100111
+01100000000000010100011110001101
+00100000001000000011010110101111
+01101000000000010100011110100111
+01100000000000010100011110001101
+01011000000000000000000000000000
+01100000000000010100011110010011
+01100000000000010100011110010001
+00100000010000000011010101011100
+00100000010000000011010110000110
+01110000010000010111001000000000
+00100000001000000011001111111000
+01011000000000000000000000000000
+01100000000000100100011110001101
+01100000000000011100011110001010
+01100000000000010100010100001001
+01110000010001111010000000000001
+01101000000000010100011110010111
+01100000000000010100011110010001
+00100000010000000111111000111000
+01101000000000001100011101011001
+11000001000000000000000000000000
+00100000010000000011010110001111
+00100000001000000011010101101110
+00100000001000000011010100001000
+01101000000000001100011101011001
+11000001100000010000000000000000
+00100000001000000011010100001000
+11011010011000000100011011001101
+00100000010000000011010110000010
+11011010011000000100011011000110
+00100000001000000011010110000100
+01110000010000110110111000000000
+11011010011000000100011011011011
+00100000010000000011010110000010
+11011010011000000100011011010100
+00100000001000000011010011111011
+01101000000000001000010001110111
+11000000000010010011010100000100
+00100000011000000000000000000000
+01101000000000010000010001111000
+11000000000001101011010100110110
+11000000000001011011010101110001
+00100000011000000000000000000000
+01101000000000001100011101010011
+00100000011110100000000000000000
+00100000001000000110100101111000
+00011010001000100111111000000000
+00100000001110100011010100010000
+00011000111000100111111000000000
+11000000000000000011010100010011
+00100000011000000000000000000000
+00011000111000100111111000000000
+11000000000000000011010100011011
+00100000011000000000000000000000
+01110000010001111001110100000001
+11011010011000000100011011110111
+00100000010000000011010110000010
+11011010011000000100011011110000
+00100000010000000011010110000100
+01101000000000010100011010000010
+11000011000001001011010100110010
+00100000001000000011010100100001
+01110000010001111001110100000000
+00100000001000000011010100011101
+01101000000000001100011110011010
+11000001100000001000000000000000
+01110000010001111001100100000101
+00100000011000000000000000000000
+01101000000000001100011110011010
+00011111111000001111111000000001
+01100000000000001100011110011010
+11000000000000001011010100100111
+11000000000000010011010100101011
+00100000011000000000000000000000
+00100000010000000011010101011100
+01110000010001110111000100000001
+11011010011000000100011101101100
+00100000001000000011010101000100
+01110000010001111001101000000000
+01110000010001110111000100000010
+11011010011000000100011101101100
+00100000010000000011010101000100
+01101000000000001100011110011110
+11000000000000001011010101010001
+00100000011000000000000000000000
+01101000000000010100011110010111
+01100000000000010100011110010001
+00100000010000000011010101011100
+00100000001000000011010110001111
+01000100111001101100000000011001
+00100000010000000011011011111100
+11101010001000001000000000000000
+11000000000000011011010100111100
+11000000000000111011010101000000
+00100000011000000000000000000000
+01101000000000001100011110011110
+11000000000000000011010101010001
+11000000000000001011010101011100
+00100000011000000000000000000000
+11101010010000001000000000000000
+11000000000000001011010101100100
+11000000000000000011010101101001
+00100000011000000000000000000000
+01000100111001110100000000011001
+01101000000000001100011110001011
+00101111111011111111111000000000
+00100100011000001000000000000000
+00011010011000001000110000000110
+11101000110000010000000000000000
+00011111111100001111111000000000
+00011111111000001111001000000101
+00011010011000001000110000000011
+00100000010000000011011011110000
+11100000110000001000000000000000
+00011010011000100010001000000000
+00100000001000000111111000111101
+01101000000000001100011101011001
+00100000011110100000000000000000
+01110000010001111001111000000001
+11011010011000000100011011101001
+00100000010000000011010110000010
+11011010011000000100011011100010
+00100000010000000011010110000100
+01110000010001111000000000000100
+01110000010001111000001100000001
+11011010011000000100011101111011
+00100000001000000011010101000100
+01101000000000001100011110011110
+00100000011110100000000000000000
+01110000010001111001111000000000
+00100000010000000011010110000110
+01110000010001111000000000000100
+01110000010001111000001100000000
+11011010011000000100011101111011
+00100000001000000011010101000100
+01110000010001111001111100000001
+01110000010001111000000000000111
+01110000010001111000001100000001
+11011010011000000100011101111011
+00100000001000000011010101000100
+01110000010001111001111100000000
+01110000010001111000000000000111
+01110000010001111000001100000000
+11011010011000000100011101111011
+00100000001000000011010101000100
+01101000000000001100011110011111
+00100000011110100000000000000000
+00100000001000000011010101010001
+11101010001000010000000000000000
+01100000000000010100011110001011
+00101111111011111111111000000000
+00100100011000001000000000000000
+01101000000000001100011110100000
+00100000011110100000000000000000
+01110000010001111010000000000000
+01101000000001000100011110110110
+01100000000001000100010010010110
+01110000010001111001000000000010
+00100000010000000011010110101111
+00100000010000000011010110111001
+01110000010001111000000000000111
+01101000000000001100011110011111
+01100000000000001100011110000011
+11011010011000000100011101111011
+00100000001000000011010101000100
+11011010001000000000000000000001
+00100000001000000011010110000101
+11011010001000000000000000000000
+00100000001000000011010110001100
+11011010001000000000000000000000
+00100000010000000111110100011001
+11011010001000000000000000000001
+00100000010000000111110100011001
+01101000000000001100011110100001
+00100000001000000110100111010111
+00100000010000000111110100000100
+11011111001000000000000000000111
+00100000001000000111110100100110
+11011010011000000100011010111000
+11011010010000000100011010011010
+00100000010000000011010110010110
+00100000010000000011010110000100
+01101000000000010100011110010101
+01100000000000010100011110010011
+00100000001000000011001111111010
+11101010010000010000000000000000
+01100000000000010100000101010100
+11101000110000010000000000000000
+01100000000000010100010010000010
+00100000011000000000000000000000
+11011010001000000000000000000000
+00100000010000000110100110100110
+01101000000000110100011110100001
+01100000000000110000101010011010
+00100000010000000110100110101110
+01101000000000001100011110100001
+00100000001000000110100111010111
+01110000010001111001101100000001
+00100000011000000000000000000000
+01110000010001111001101100000000
+00100000011000000000000000000000
+01110000010001111001110000000000
+01101000000000001100011110100001
+00100000001000000110100111010111
+01110000010001111001110000000001
+01101000000000110100011110100001
+01100000000000110000101010011010
+00100000001000000110100110101110
+01110000010000100010110100000000
+00100000001000000110100010101000
+00100000010000000110100011101011
+00100000010000000110100100001000
+01100000000000010100011110110000
+11011010001000000100011110101010
+00100000010000000110100100110000
+01100000000000001100011110101001
+11000000000000000011010110111110
+00011111111001100111110001100100
+00100100001000010011010110111100
+01100000000000001100011110000011
+01110000010001111000000000000101
+11011010011000000100011101111011
+00100000001000000011010101000100
+01110000010001111000001101100100
+00100000001000000011010110111001
+00100000001000000011010000011010
+00100000011101011000000000000000
+01101000000100001000000010000001
+00011111111000010111111011110000
+01100000000100001000000010000001
+01011000000000000011011000110001
+01100000000000010100000111101011
+01011000000000000011011000110011
+01100000000000010100000111101101
+01011000000000000011010000001010
+01100000000000010100000111110111
+01011000000000000011011000110101
+01100000000000010100000111110011
+01011000000000000011011001001011
+01100000000000010100000111110101
+01011000000000000011001111010000
+01100000000000010100000111101001
+01011000000000000011011011110110
+01100000000000010100000111111001
+01011000000000000011011001111010
+01100000000000010100000111111101
+00100000010000000010110001111010
+01011000000000000011011100100010
+00011010011000001000101011011110
+11100000101000010000000000000000
+01011000000000000011010111101101
+01100000000000010100011101011011
+01011000000000000011010111101111
+01100000000000010100011101011111
+01000100111001111100000000011001
+00100000010000000011011000101000
+00100000010000000111111000111000
+01110000010000010111001000000010
+01110000010010011111011000000000
+01101000000000001100011111001011
+01100000000000001100011010011010
+11000000000000000011010111101110
+01101000000000001100011111001100
+01100000000000001100011010000110
+01110000010000110110111000000000
+00100000010000000011011000001111
+00100000010000000111110011010011
+00100000010000000111110011011101
+01110000010001111111001100000001
+01101000000000010100011010000010
+11000011100001100000000000000000
+00100000001000000011010000001010
+00100000001000000011011000001111
+01110000010001111111001100000010
+01110000010000110110111000000001
+00100000010000000011011000001111
+11011010001000000000000000000000
+00100000010000000111110100011110
+01011000000000000000000000100000
+00100000010000000100011011110000
+11011000101000000100001110110111
+01101000000000001100010010100000
+00011111111000010000010011110000
+00011000010100011000010000000000
+00100000010000000011011000001001
+11100000101010001000000000000000
+00011111111000010000010000001111
+00100000010000000011011000001001
+11100000101010001000000000000000
+00100000010000000101011110100110
+01101000000010001100001110101111
+00011000010000100111001000000000
+11011000101000000100001101110010
+11011000110000000100001110110000
+00100000010000000111111100000001
+01101000000010001100001110101111
+00011000010000100111001000000000
+11011000101000000100001110010010
+11011000110000000100001110110000
+00100000001000000111111100000001
+00011000010001100111110000001001
+00100000001000010011011000001101
+00011000010000001000010000110111
+00100000011000000000000000000000
+00011000010000001000010000110000
+00100000011000000000000000000000
+01101000000000001100011111000000
+11000000111111111011011000100001
+01101000000000001100011110111110
+11000000111111111011011000100100
+01101000000000001100011111001001
+11000000111111111011011000100110
+01101000000000001100011100101100
+00011111111000100111001000000000
+01011000000000000100011100101101
+00011111111000100010001000000000
+00011010001000100000110000000000
+11101000110000001000000000000000
+00011000110000100010001000000000
+11000000011111111011011000011111
+00011111111000100000010000000000
+00100000010000000110100000001110
+11000010000000000011011000011001
+00100000011000000000000000000000
+01101000000001000100011111000000
+01100000000001000100011100101111
+00100000001000000011011000010001
+01100000000000001100011100101101
+00100000001000000011011000010011
+01100000000000001100011100101110
+00100000001000000011011000010101
+11011010001000000000000000000000
+00100000010000000110100110100110
+00100000010000000011011111100100
+00100000010000000010110001111101
+00100000001000000011011000101101
+01110000010001111100111101100100
+01101000000000001100011111001001
+01100000000000001100011101000100
+00100000001000000110100010101000
+00100000010000000110100000110101
+00100000001000000110100101101100
+00100000001000000110100101101100
+00100000001000000110100101111000
+00100000010000000011011001000010
+00100000010000000011011111101110
+00100000010000000011011000111001
+00100000001000000011011000110100
+01101000000000010100011010000010
+11000011100001001000000000000000
+01101000000000001100100111110110
+11000000000000001011011000111110
+00100000011000000000000000000000
+01101000000000001100011111101010
+11000001000000001000000000000000
+01110000010001111110101000000001
+00100000001000000011011001010100
+01101000000000010100011010000010
+11000100000001001000000000000000
+00100000010000000101100010010010
+00100100011110100000000000000000
+11011010001000000100011100011000
+00100000010000000111111001010100
+00100100011101000000000000000000
+11011000110000000100011100011000
+00100000001000000100011101000110
+00011010011000100111111000000000
+11000000000101101011010000110001
+11000000000010000011010000011010
+11000000000010100011011001010001
+11000000000010101011011001100000
+00100000011000000000000000000000
+01011000000000000000000000000000
+00100000010000000011001000100000
+00100000001000000011011001010110
+01101000000000010100011111101011
+01100000000000010100011111101101
+01110000010001111100111000010100
+01110000010000001001000100000000
+00100000010000000011001111111000
+00100000010000000011010000010110
+01101000000000001100011110111101
+11000000000000001011011001011110
+11011010001000000000000000000000
+00100000001000000111110100010100
+11011010001000000000000000000000
+00100000001000000111110100011001
+01011000000000000000000000000010
+00100000010000000011001000100000
+01011000000000000000000000000000
+01100000000000101100011110011100
+01011000000000000000000000000100
+00100000010000000110100111010111
+01011000000000000000000000000101
+00100000010000000110100111010111
+01011000000000000000000000010100
+00100000010000000110100111010111
+01011000000000000000000000010101
+00100000010000000110100111010111
+01011000000000000000000000010110
+00100000010000000110100111010111
+01011000000000000000000000000111
+00100000010000000110100111010111
+00100000010000000111111000111000
+01110000010001110101111000001010
+01110000010001110110000000001010
+01110000010001110110001000001010
+01110000010000010111001000000010
+11011010001000000000000000000000
+00100000010000000111110100011110
+01011000000000000000000000100000
+00100000010000000100011011110000
+00100000001000000011001111111010
+00100000010000000011011100111011
+00100000010000000011011100111110
+00100000010000000011011101000001
+00100000010000000011001101111011
+00100000010000000011011011001000
+00100000010000000011011010100001
+00100000010000000011011010001010
+00100000010000000011011010000011
+00100000001000000011011010001111
+11011010011000000100011110011010
+11011010010000000011011010000110
+00100000001000000011001101101101
+00100000010000000011100001000111
+00100100011000001000000000000000
+01110000010001111001101100000001
+00100000011000000000000000000000
+11011010011000000100011111101101
+11011010010000000011011010001101
+00100000001000000011001101110100
+01110000010001111110101000000010
+00100000001000000011011001100010
+11011010011000000100011111110001
+11011010010000000011011010010010
+00100000001000000011001101101101
+01101000000000001100011111110010
+00100000001110100011011010011110
+01110000010001111111000100000010
+01110000010001111111001000000000
+01011000000000000000101000000010
+01100000000000010100011101010010
+01101000000000001100011110111001
+11000000000000011011011010011011
+00100000001000000011011101100010
+01011000000000000000101000000010
+01100000000000010100011101010100
+00100000001000000011011101100010
+01011000000000000000000000000000
+01100000000000100100011101010010
+00100000001000000011011101100010
+01101000000000001100011111001000
+00100000011110100000000000000000
+01101000000000010100011010000010
+11000011000001001011011011000110
+11011010011000000100011111001110
+11011010010000000011011010101000
+00100000001000000011001101101101
+01101000000000001100011111001101
+01100000000000001100011111001110
+01101000000000001100011111010001
+00100100011110100000000000000000
+00100000010000000110100011101011
+00100000010000000110100100001000
+01100000000000010100011111101000
+11011010001000000100011111100010
+00100000010000000110100100110000
+01101000000010001100011111001111
+10011000010001100111110000000000
+00100000001000010011011010110110
+01100000000000001100011111001111
+00011111111000100000010000000000
+01100000000010001100011111010000
+01101000000000001100011111001010
+10011000010001100111110000000000
+00100000010000010011011011000001
+01100000000010001100011111011011
+11011111001000000000000000000110
+11011000110000000100011111010110
+00100000010000000011011011110000
+01100000000000001100011111011100
+11011010001000000100011111010011
+00100000001000000111111000111101
+01101000000000001100011111010010
+00100100011110100000000000000000
+01110000010001111101001000000001
+11011010001000000000000000000001
+00100000001000000111110100011110
+11011010001000000000000000000001
+00100000001000000111110100011001
+11011010011000000100011110100100
+11011010010000000011011011001011
+00100000001000000011001101101101
+01110000010001111010010000000101
+01110000010001111010011000000000
+01101000000000001100011110100101
+11000000000000001011011011101110
+11000000000000000011011011101100
+11011000110000000100011110011100
+00011000110000100010001000000000
+11011111001000000000000000001000
+00011010001000100000110000000000
+11101000110000001000000000000000
+00011000110000100010001000000000
+11000000000000000011011011100011
+11000000000000001011011011100110
+11000000000000010011011011101001
+01101000000000001100011110100110
+00011111111000001111111000000001
+01100000000000001100011110100110
+11000010000000000011011011010011
+00100000011000000000000000000000
+01101000000000001100011110100110
+11011010010000000100011111000000
+10011010010000001010010000000000
+11101010010010001000000000000000
+00100000011000000000000000000000
+00100000010000000011011011011110
+00100000010000000110100000100101
+00100000001000000011011011011001
+00100000010000000011011011011110
+00100000010000000110100000101001
+00100000001000000011011011011001
+01101000000000001100011110100101
+11000000000000001011011011100011
+00100000001000000011011011100110
+01110000010001111010010100000001
+00100000001000000011011011010000
+01110000010001111010010100000000
+00100000001000000011011011010000
+11011010001000000000000000000000
+11101000110000001000000000000000
+10011010001000001010001000000000
+11000010000000000011011011110001
+00011010001000010111111011111111
+00100000011000000000000000000000
+01101000000000001000010001110111
+11000000000010010011011011111001
+00100000011000000000000000000000
+01101000000000010000010001111000
+11000000000010100011011100010000
+00100000011000000000000000000000
+01000100111010000100000000011010
+11101010001000101000000000000000
+01100000000000101000101100010010
+01101000000000010000101100010010
+11011000010000000110101101011010
+10011000010001100111110000000000
+00100100011000101000000000000000
+01101000000000010000101100010101
+00011111111100001111111000000000
+01100000000000010000101100010101
+00011111111000100111001000000000
+00011010001000001010001000000101
+00011010001000100000110000000000
+11011000101000000000101100010111
+00100000010000000111111100000001
+11101000110000001000000000000000
+01100000000000001000101100100001
+11011010001000000000101100010100
+11011010010000000000101100010111
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000101100011101010010
+01100000000000101100011101010111
+00100000010000000011011011111100
+00011010010000100000110000000000
+11011000101000000100011101010010
+11011111001000000000000000001010
+00100000010000000111111100000001
+01000100111010001100000000011010
+11101010001000001000000000000000
+11000000000000010011011101001010
+11000000000000011011011101011100
+11000000000000100011011101100010
+11000000000000101011011101100010
+11000000000000110011011110110001
+11000000000000111011100001001001
+11000000000001000011100001001100
+00100000011000000000000000000000
+01101000000000010100011010000010
+11000011100001001000000000000000
+01101000000000010100011111101011
+01100000000000010100011111101101
+01110000010010011111011000000001
+01011000000000000000000100001100
+00100000010000000011001011001101
+00100000010000000011011100010000
+01101000000000001000101100010100
+11000000000000100011011100101110
+11000000000000101011011100101110
+00100000011000000000000000000000
+01101000000000001100011101010010
+00100100010110100011011100110101
+01101000000000001100011101010100
+00100100010110100011011100110111
+01101000000000001100011101010110
+00100100010110100011011100111001
+00100000011000000000000000000000
+01110000010010011111001100000101
+00100000011000000000000000000000
+01110000010010011111010000000101
+00100000011000000000000000000000
+01110000010010011111010100000101
+00100000011000000000000000000000
+11011010011000000100100111110011
+11011010010000000011011101000100
+00100000001000000011001101101101
+11011010011000000100100111110100
+11011010010000000011011101000110
+00100000001000000011001101101101
+11011010011000000100100111110101
+11011010010000000011011101001000
+00100000001000000011001101101101
+01110000010001110101001000000000
+00100000001000000011011101100010
+01110000010001110101010000000000
+00100000001000000011011101100010
+01110000010001110101011000000000
+00100000001000000011011101100010
+00100000010000000011011101001100
+00100000001000000011011101001111
+01101000000000001100011101010010
+01100000000000001100011101011111
+00100000001000000011011101110011
+01101000000000001100011101011110
+00100000010000000011011101010100
+01101000000000001100011101010011
+01100000000000001100011101011101
+00100000001000000011011101110000
+11000000000000010011011101011000
+11000000000000011011011101011010
+01100000000000001100011101011110
+00100000011000000000000000000000
+01110000010001110101111000000101
+00100000011000000000000000000000
+01110000010001110101111000001010
+00100000011000000000000000000000
+01101000000000001100011101010010
+00100000010000000011011101010100
+01101000000000001100011101011110
+00100000010000000011011110011110
+00100000010000000011011110100001
+00100000001000000110100111000100
+01101000000000001100011111110000
+00100100011110100000000000000000
+01101000000000110100011101010010
+01100000000000110100011101011101
+01101000000000001100011101011110
+01101000000010001100011101100000
+10011000010000010111111000000000
+01101000000010001100011101100010
+10011000010000010111111000000000
+00100000010110100011011101111001
+01000100111010010100000000011010
+00100000010000000011011101110000
+00100000010000000011011101110011
+00100000001000000011011101110110
+11011010010000000100011101100011
+11011000110000000100011101011101
+00100000001000000011011101111011
+11011010010000000100011101101011
+11011000110000000100011101011111
+00100000001000000011011101111011
+11011010010000000100011101110011
+11011000110000000100011101100001
+00100000001000000011011101111011
+01110000010001111101000100000000
+00100000011000000000000000000000
+11101000110000001000000000000000
+11000000000000000011011110000111
+11000000000000001011011110000000
+11000000000000010011011110000010
+00100000011000000000000000000000
+01110000010001110111101100000000
+00100000001000000011011110000011
+01110000010001110111101100000001
+11101000110000001000000000000000
+01100000000000001100011101111101
+11101010010001000000000000000000
+00100000001000000011011110001100
+11101010010000001000000000000000
+00100000010000000110100111010111
+00011010010000001010010000000001
+11101010010000001000000000000000
+00100000001000000110100111010111
+01100000000001000100011101111110
+01110000010001111101000100000001
+01101000000000001100011101111011
+11000000000000000011011110011010
+01101000000000001100011101111111
+01100000000000001100011110000000
+01101000000000001100011101111110
+00100000010000000110100111010111
+01101000000000001100011101111101
+00100000010000000011011110011110
+01100000000000001100011110000101
+01101000000000110100011110000000
+01100000000000110000101010011010
+00100000001000000110100110101110
+01101000000000001100011101111110
+01100000000000001100011110000000
+01101000000000001100011101111111
+00100000001000000011011110010011
+00011111111011111111111000000101
+00011111111000001111111000110010
+00100000011000000000000000000000
+11011000010000000010111011100000
+10011000010011111111111000000000
+00011111111001101111110001100100
+00100000010000000111111110000110
+00011000000001111000010000000000
+00011000010000100010001000000000
+01011000000000000010111011100000
+10011000010001100010010000000000
+00100000011000000000000000000000
+01101000000100001000000010000010
+01111001001000000111111000000010
+01100000000100001000000010000010
+01011000000000000000000010011110
+01100000000100010000000001101000
+01100000000100010000000001101010
+00100000011000000000000000000000
+01101000000000001100011111110000
+00100100011110100000000000000000
+01101000000000010100011101010010
+01100000000000010100011110000111
+01101000000000001100011111101010
+11000000100000001011011110111001
+01101000000000010100010010100000
+01100000000000010100011110000111
+01000100111010011100000000011010
+00100000010000000011011110101010
+00100000010000000011011111011100
+01011000000000001011101110000000
+00100000010000000010101010001111
+00100000010000000011011111100000
+01011000000000000001110000100000
+00100000010000000010101010001111
+11011111001000000000000000010000
+00100000010000000011011111011100
+01101000000000010100011110000111
+11000010100000000011011111001001
+01011000000000000001110000100000
+00100000010000000010101010001111
+00100000010000000011011111100000
+00100000001000000011011111001100
+01011000000000000011100001000000
+00100000010000000010101010001111
+00100000010000000011011111100000
+01011000000000000001110000100000
+00100000010000000010101010001111
+01101000000000010100011110000111
+00011111111000110111111000000000
+01100000000000010100011110000111
+11000010000000000011011111000010
+01110000010001111111000100000010
+01110000010001111111001000000001
+01011000000000000000101000000001
+01100000000000010100011101010010
+01101000000000001100011110111001
+11000000000000011011011111011001
+00100000001000000011011101100010
+01011000000000000000101000000001
+01100000000000010100011101010100
+00100000001000000011011101100010
+01101000000100001000000010000101
+00011111111000011111111001000000
+01100000000100001000000010000101
+00100000011000000000000000000000
+01101000000100001000000010000101
+00011111111000010111111010111111
+01100000000100001000000010000101
+00100000011000000000000000000000
+01101000000000001100011110111011
+11000001000000000000000000000000
+00100000010000000010110001100101
+01101000000010001100011110111100
+01100000000010001100011110000110
+00100000010000000110011111111011
+00100000010000000011100001000111
+00100100011000001000000000000000
+01110000010001111001101000000001
+00100000011000000000000000000000
+01101000000000001100011110111011
+11000001000000000000000000000000
+01101000000000001100011110011011
+00100100011110100000000000000000
+01101000000000010100011010000010
+11000010100001001011011111110110
+01101000000000001100011111101010
+11000001100000001000000000000000
+01000100111010100100000000011010
+00100000010000000011100001000111
+00100100011000001000000000000000
+01011000000000001000110010100000
+00100000010000000010101010001111
+00100000010000000011100001000111
+00100100011000001000000000000000
+00100000010000000011100000111111
+00100000010000000011100001000010
+00100100011000010000000000000000
+00100000010000000011100001000111
+00100000001000001011011111111110
+11011010001000000000000000000000
+11011111001000000000000000010000
+00100000010000000011100000111111
+00100000010000000011100001000010
+00100100011000010000000000000000
+00100000010000000011100001000111
+00100100001000001011100000000101
+01011000000000000010101000110000
+00100000010000000010101010001111
+00100000010000000011100001000111
+00100000001000001011100000010010
+01011000000000000000000000000000
+00011010001000110010001000000000
+10011010001000011010001000000000
+11000010000000000011100000000101
+00100000001000000011100000011011
+01011000000000001000000000000000
+00011010001000110010001000000000
+10011010001000011010001000000000
+00100000010000000011100000111111
+00100000010000000011100001000010
+00100100011000010000000000000000
+00100000010000000011100001000111
+00100000001000001011100000010110
+11000010000000000011100000000101
+01000100111010101100000000011010
+00011010001000100111111000000000
+01100000000000010100011110001001
+01100000000000010100011110010111
+01101000000000001100011111101010
+11000000000000001011100000100111
+11011111001000000000000000000111
+11011000110000000100011110010010
+00100000010000000011011011110000
+01100000000000001100011110011001
+11011010001000000100011110001111
+00100000001000000111111000111101
+01101000000000001100011111101111
+00011111111000001111111000000001
+01100000000000001100011111101111
+00011111111001101111110000000010
+00100000010000000111111110000110
+00011000000001111000010000000000
+00011000000001110111111000000000
+00100100001110100011100000111000
+01101000000000001100011110111111
+10011000010001100111110000000000
+00100000010000101011100000111101
+11011111111000000100011110011100
+00011000010000001000010111111111
+10011000010000001010001000000000
+11011111111000000000000000000000
+11100010001000001000000000000000
+00100000011000000000000000000000
+11011111111000000100011110011100
+10011000010000001010001000000000
+11011111111000000000000000000010
+11100010001000001000000000000000
+00100000011000000000000000000000
+01110000010001111111000000000001
+00100000011000000000000000000000
+00011100010000100111111000000000
+01100000000000100100011110001011
+00100000011000000000000000000000
+00011100010000100111111000000000
+01101000000010100100011110001011
+10011000010001100111111000000000
+00011111111001100111110011001000
+00100000011000000000000000000000
+01101000000010001100011110000110
+00100000001000000110100000011101
+01101000000001000100011101010010
+01100000000001000100011110011100
+00100000011000000000000000000000
+01101000000000001100011110111001
+01100000000000001100011110101111
+01101000000000001100011110111010
+01100000000000001100011110110000
+01101000000000001100011110111011
+01100000000000001100011110110001
+11011111001000000000000000001101
+11011000110000000100011110101010
+00100000010000000011011011110000
+01100000000000001100011110110111
+11011010001000000100011110100111
+00100000001000000111111000111101
+00100000010000000110010111000010
+01110000010001101111011001111010
+00100000010000000011100001101101
+00100000010000000011100001100111
+01011000000000000011100001100000
+01100000000000010100000111111101
+11011010001000000000000000000000
+00100000001000000110100110100110
+01101000000000010100011010100001
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000010100011010100001
+11000001100000000000000000000000
+01110000010001101010000000000000
+00100000011000000000000000000000
+01000100111010110100000000011010
+01101000000000001100011010100100
+00011111111001100111110000101000
+00100000011000010000000000000000
+01110000010001101010010000000000
+00100000011000000000000000000000
+11011010001000000100011010100100
+11011010010000000000000000000000
+11011000010000000000000001010001
+00100000001000000110010111011111
+01111000010101000111110000000000
+01101000000000001100011010100011
+00011111111000100111001000000000
+11011010001000000100011010100101
+00011010011000100010010000000000
+01000100111010111100000000011010
+00100000010000000011100001111100
+00100000001000101111111111100111
+00011010001000001010001000000100
+11000010000000000011100001110110
+00100000011000000000000000000000
+01000100111011000100000000011011
+11101010001000011000000000000000
+11101010010010011000000000000000
+10011000010001100111110000000000
+00100000011000000000000000000000
+01000100111011001100000000011011
+11101010001000011000000000000000
+11101010010010011000000000000000
+10011000010001100111110000000000
+00100100011000101000000000000000
+11101000110000001000000000000000
+00011111111001100111110000000000
+00100000011000101000000000000000
+00011010001000001000110000000011
+11101000110010001000000000000000
+10011000010001100111110000000000
+00100000011000000000000000000000
+01000100111011010100000000011011
+01111000010101000111110000000000
+01101000000000001100011010100011
+00011111111000100111001000000000
+11011010001000000100011010100101
+00011010011000100010010000000000
+00100000010000000011100010000001
+00100000001000101111111111100111
+00011010001000001010001000000100
+11000010000000000011100010010011
+00100000011000000000000000000000
+01101000000000001000000000000100
+00011111111000001111111000000001
+01100000000000001000000000000100
+11011010011000000000001011100101
+11101010011000010000000000000000
+11011000010000000101010110101010
+10011000010001100111110000000000
+00100100011000101000000000000000
+00011000110000100010011000000000
+11101010011010011000000000000000
+01011000111111111111111111111111
+10011000010001100111110000000000
+00100000001000101011100010101000
+00100000010000000011100010001101
+00100000001101000011100010101000
+00100000011000000000000000000000
+01000100111011011100000000011011
+00011010011000001010011000000100
+11101010011000001000000000000000
+01101000000010001100011011110110
+10011000010001100111110000000000
+00100000011000101000000000000000
+01100000000000001100011011110110
+01101000000000001000000000000011
+00011111111000001111111000000001
+01100000000000001000000000000011
+00011010011000001010011000000001
+11101010011000001000000000000000
+01100000000000001100011011110101
+00011111111000100111001000000000
+00100000011110100000000000000000
+11101000110000001000000000000000
+11000000000000000011100011000010
+11000000000000001011100011001111
+11000000000000010011100011010100
+11000000000000011011100011011001
+11000000000000100011100011011110
+11000000000000101011100011100011
+11000000000000110011100011101000
+11000000011111111011100011101010
+11000010000000000011100010110111
+00100000011000000000000000000000
+00011000110000100010011000000000
+01101000000000001100011010011010
+01100000000000001000101010011010
+11011000010000000000000000000000
+01100000000010001000101010011011
+01011000000000000010011100010000
+01100000000000011000101010011100
+11101010011000001000000000000000
+01100000000000001000101010011111
+00100000010000000110100110101110
+00011010011000010000110000000001
+11000010000000000011100010110111
+00100000011000000000000000000000
+00011010011000100000110000000000
+01101000000000001100011010011011
+01100000000000001000101010011010
+11011000010000000000000000000001
+00100000001000000011100011000110
+00011010011000100000110000000000
+01101000000000001100011010011100
+01100000000000001000101010011010
+11011000010000000000000000000010
+00100000001000000011100011000110
+00011010011000100000110000000000
+01101000000000001100011010011101
+01100000000000001000101010011010
+11011000010000000000000000000011
+00100000001000000011100011000110
+00011010011000100000110000000000
+01101000000000001100011010011110
+01100000000000001000101010011010
+11011000010000000000000000000100
+00100000001000000011100011000110
+00011010011000100000110000000000
+01101000000000001100011010011111
+01100000000000001000101010011010
+11011000010000000000000000000101
+00100000001000000011100011000110
+11101000110000001000000000000000
+00100000011000000000000000000000
+00011000110000100010011000000000
+01101000000000001100011010100000
+11000000100000001011100011101110
+00100000010000000011100011110000
+00011010011000010000110000000100
+00100000011000000000000000000000
+01000100111011100100000000011011
+00100000010000000011100001110001
+00100000001101000011100011111110
+01101000000000001100011010100100
+00011111111000100000010000000000
+00011111111000001111111000000001
+01100000000000001100011010100100
+00100000010000000011100001100111
+00011000010010111000010000000000
+01011000000000000100011010100101
+10011000010000001000101000000000
+11101010011000100000000000000000
+11100000101000100000000000000000
+00100000001000000011100100000011
+00011010011000001000110000000011
+11101000110000001000000000000000
+00100000011110100000000000000000
+11101010011000100000000000000000
+11100010001000100000000000000000
+11011010001000000100011010100100
+11011010010000000000000000000000
+11011000010000000000000001010001
+00100000001000000110011000000110
+01101000000010001100011010011010
+00100000010000000110100000100101
+00100000011000000000000000000000
+01101000000010001100011010011010
+00100000010000000110100000101001
+01101000000010001100011010011010
+00100000010000000110100000100101
+00100000010000000011100100011101
+01101000000000001100011010100111
+00100100011110100000000000000000
+00100000010000000010110000101001
+01101000000100100000000100111000
+01111001001111111111111000001111
+01100000000100100000000001001100
+00100000010000000010110000100001
+11011000010111111111111111111111
+00100000001000000010101100101010
+01101000000000001100011010100111
+00100000001110100101011011111001
+00011111111000001111111111111111
+01100000000000001100011010100111
+00100000001000000101011011111001
+00011111111011111111111000010100
+11011000110000000100011010101000
+10011000110000001000110000000000
+11101000110000001000000000000000
+00100000011110100000000000000000
+00011111111000100010001000000000
+00011010001000100111001000000000
+11011000101000000100001101110010
+00100000010000000111111100000001
+00011010001000100111111000000000
+00011111111000001111111000000010
+01100000000000001100001101101111
+00100000011000000000000000000000
+00100000011101011000000000000000
+00100000010000000101011110100011
+00100000010000000110100010101000
+01011000000000000011100110000010
+01100000000000010100000111110011
+01011000000000000011100101101110
+01100000000000010100000111110001
+01011000000000000011100110000110
+01100000000000010100000111110101
+01011000000000000011100101101101
+01100000000000010100000111101111
+01011000000000000011100101101001
+01100000000000010100000111101001
+01011000000000000011101010110111
+01100000000000010100000111111011
+01011000000000000011110000110010
+01100000000000010100010101101111
+01011000000000000011110011000010
+01100000000000010100000111111001
+01011000000000000011110011010111
+01100000000000010100000111111101
+00100000010000000011100101111111
+01000100111011101100000000011011
+00100000010000000011100101000101
+00100000010000000011100101100100
+00100000010000000010110001101111
+00100000001000000011110001001000
+01101000000000100100011010101010
+01100000000100100000000001010100
+01101000000000100100011010101110
+01100000000100100000000001011010
+01101000000100001000000010000001
+00011111111000011111111000000100
+00011111111000010111111011111100
+01100000000100001000000010000001
+01110000100000000110001000000000
+01101000000000010100011010101010
+01100000000100010000000001011000
+01101000000000010100011010101110
+01100000000100010000000001011110
+01100000000100010000000001100000
+01101000000100100000000001111000
+01111001001000000111111000000111
+01100000000100100000000001111000
+01101000000100010000000001010000
+01111001001111111111111000001111
+01100000000100010000000001010000
+00100000010000000110011011001110
+01110000100000000100001100000000
+01110000100000000110001010000001
+01101000000000001100011010111111
+00101111111011111111111000000000
+01101000000110001000000001100010
+01111001001000001000010000000100
+01100000000110001000000001100010
+00100000011000000000000000000000
+00100000010000000011100101111111
+00100000001000000011100101000101
+01101000000010001100011010011110
+00100000010000000110100000001110
+00100000010000000011100111100110
+01101000000010001100011010011100
+00100000001000000110011111111011
+01101000000010001100011010011100
+00100000010000000110100000011101
+00100100001000001011001111010010
+00100000001000000011001111010000
+00100000011000000000000000000000
+00100000010000000011100101110000
+00100000001000000011110011101001
+01101000000000001100011010000010
+11000011000000100011100101111111
+01000100111011110100000000011011
+01011000000000000011111011111111
+01101000000010100100011011000101
+10011000010000001000010000000000
+00011100010000100111111000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+01101000000000010100011010000010
+11000010100000101011100101111111
+01101000000000001100011010111111
+11000011100000110000000000000000
+00100000010000000011110011101100
+00100000010000000011010000001110
+00011100010000100111111000000000
+01100000000000100100011011000101
+00100000011000000000000000000000
+00100000010000000011110011101001
+00100000010000000101001001101110
+00100100011110100000000000000000
+00100000001000000011100111101011
+00011010011000100111111000000000
+11000000000000001011100111010100
+11000000000000010011100110100011
+11000000000000100011100111010111
+11000000000000101011100111000100
+11000000000001000011100110101010
+11000000000001001011100110110001
+11000000000001010011100111001001
+11000000000001011011100110110110
+11000000000001100011100111000010
+11000000000010011011100111010111
+11000000000010100011100111001111
+11000000000010101011100111000110
+11000000000100001011100111001010
+11000000000100011011100111001011
+11000000000100100011100111001110
+11000000000110000011110010001010
+11000000000110001011110010001100
+11000000000110010011110010011010
+11000000000110011011110010011000
+11000000000110100011110010000100
+11000000000110101011110001110011
+11000000000110110011110010000010
+11000000000110111011110010001110
+11000000000111000011110010010000
+11000000000111011011110010100001
+11000000000111101011110001101010
+11000000001000001011100111011001
+00100000011000000000000000000000
+00100000010000000011100101111111
+01101000000000001100011001100101
+00100100010110100011110010001110
+00100000010000000011100111010111
+01101000000000010100011010000010
+11000100000000100000000000000000
+00100000001000000011100110110001
+01101000000000010100011010000010
+01111001001000000111111000000100
+01100000000000010100011010000010
+01101000000000001100011010100111
+01100000000000001100000101110010
+00100000010000000011100111100110
+00100000001000000011110000011101
+01101000000000010100011010000010
+11000100000000100000000000000000
+01111001001111111111111000000100
+01100000000000010100011010000010
+00100000001000000011110000100001
+00100000010000000011100101111111
+01101000000000010100000001000010
+00011111111000110111111000000000
+01101000000010010100000111100011
+10011000010001100111110000000000
+00100100001000101011100110111101
+00100000001000000011010000010110
+01101000000000001100011010111111
+11000011100000101000000000000000
+01101000000100010000000100010010
+00100100010110100011110011110000
+00100000001000000011010000001100
+00100000010000000011110011101110
+00100000001000000011010000011000
+00100000010000000011100101111111
+00100000001000000011100111011101
+00100000010000000101100000010110
+00100000010000000011100111010111
+00100000001000000011110000100011
+00100000001000000011001111011101
+00100000001000000011110011101110
+01101000000000001100011010111111
+11000011000000101011010000001110
+00100000001000000011110011110010
+00100000001000000011110011110010
+00100000010000000101100010111010
+00100000010000000011100111011101
+01101000000000001100011010101000
+01100000000000001100000101110010
+00100000001000000011110000011111
+01110000010001100110000100000000
+00100000010000000011110011101110
+00100000001000000011110011110010
+00100000010000000011101001010010
+00100000001000000011100111011011
+00100000010000000101110011001001
+00100000001000000101101100000010
+01101000000010001100011010011110
+00100000001000000110100000101001
+00100000010000000011100111011111
+00100000001000000011100111100110
+01101000000000001100011010100001
+00101111111011111111111000000000
+00100000010000001011001111110000
+01101000000000001100011010100001
+00101111111011111111111000000001
+00100000010000001011001111111000
+00100000011000000000000000000000
+01101000000010001100011010011110
+00100000001000000110100000100101
+01101000000000001100010101101011
+11000001000000000000000000000000
+00100000001000000110110000101000
+01101000000100001000000100001100
+11000010100000011011100111101000
+00100000010000000110011011001011
+11101000011000001000000000000000
+11000000100000001011101000000001
+01101000000100010000000100010010
+00011111111001100111110000000010
+00100000011000010000000000000000
+11101000011000001000000000000000
+01100000000000001000101100000011
+11101000011010001000000000000000
+00011000011000100010001000000000
+01100000000010001000101100000100
+00011000010000001000010000000011
+01101000000100010000000100010010
+10011000010001100000010000000000
+00100100011000010000000000000000
+01110000000010110000010100000001
+00100000010000000011101000010111
+01101000000000001000101100000101
+11000001000000000000000000000000
+00100000001000000011101000010010
+00100000010000000111111011000001
+00100000010000000011110001111001
+00100000001000000011101000000100
+01000100111011111100000000011011
+01101000000100010000000100010010
+00100000011110100000000000000000
+00100000010000000110011011001011
+11101000011000001000000000000000
+00011111111001100111110000000001
+00100100010000101011101000010110
+00100100001000101011101000000100
+11101000011000001000000000000000
+11000001000000101000000000000000
+11000001000101001000000000000000
+00011000011000001000011111111111
+00100000010000000011101000010110
+00100000001000000011101000000100
+00100000010000000110011011001011
+00011000011000001000011000000010
+11101000011000001000000000000000
+10011000011000001000011000000000
+00100000001000000110011011001000
+01000100111100000100000000011100
+01101000000000001000101100000011
+11000000000000000011101000111111
+11000000000000001011101001000100
+11000000000000010011101001001001
+11000000000000011011101001011111
+11000000000000100011101001101011
+11000000000000101011101001110101
+11000000000001001011101010011010
+11000000000001011011101011010111
+11000000000001100011101011011000
+11000000000001101011101011101100
+11000000000001110011101011110100
+11000000000001111011101011111010
+11000000000010000011101100000110
+11000000000010001011101100001110
+11000000000010010011101100010010
+11000000000100110011101100010110
+11000000000101000011101100011101
+11000000000101001011101100101101
+11000000000101010011101100110110
+11000000000101011011101101101001
+11000000000101100011101101101111
+11000000000110000011101101110110
+11000000000110001011101101111100
+11000000000110010011101110010000
+11000000000110011011101110011000
+11000000000110100011101110111011
+11000000000110101011101111000100
+11000000000110110011101111001101
+11000000000110111011101111010111
+11000000000111000011101111011010
+11000000001000000011101111100010
+11000000001000010011101111101100
+11000000001001000011101111110001
+11000000001001001011101111111100
+11000000001010001011110000000010
+11000000001100001011110000000110
+11000000011111111011110000010101
+00100000001000000011110000010111
+01101000000000001000101100000100
+11000000100000110011110000010111
+11101000011000110000000000000000
+01100000000000110100000010100000
+00100000001000000011110000011010
+01101000000000001000101100000100
+11000000100000110011110000010111
+11101000011000110000000000000000
+01100000000000110100010010100000
+00100000001000000011110000011010
+01101000000000001000101100000100
+11000000100000001011110000010111
+00011010001000100000011000000000
+00100000010000000011110000011010
+11101000011010001000000000000000
+01100000000010001100011010101001
+01101000000000010100011010000010
+11000011100001001000000000000000
+11000011100000000000000000000000
+01101000000000001100011010100001
+00101111111011111111111000000000
+00100100001000001011101001011000
+01101000000010001100011010101001
+00011000010000010111111000000011
+01100000000000001100000010010011
+01101000000000001100011010100001
+00101111111011111111111000000001
+00100100011000001000000000000000
+01101000000010001100011010101001
+00101000010011111111111000000010
+00100000001000001011001111111010
+00100000001000000011001111111000
+01101000000000001000101100000100
+00011111111001100111110001000011
+00100100001000010011110000010111
+01100000000000001100010100010101
+11011111001000000000000000001000
+00100000010000000111111011000110
+01101000000000001000101100000100
+00011111111000100111001000000000
+00011010001000100000011000000000
+11011000101000000100010100010110
+00100000010000000110011011101010
+00100000001000000011110000011010
+01101000000000001000101100000100
+00011111111001100111110000011101
+00100100001000010011110000010111
+01100000000000001100001110101111
+00011111111000100111001000000000
+00011010001000100000011000000000
+11011000101000000100001110110000
+00100000010000000110011011101010
+00100000010000000101011110100011
+00100000001000000011110000011010
+01101000000000001100011010000010
+11000011000000100011110000010111
+00100000010000000011001110111010
+00100000001000001011101010000110
+01110000000010110000010100000000
+00100000010000000011100101111111
+01101000000000001100010101101000
+00100000011110100000000000000000
+01101000000000010100010101110011
+11000000100000000011101010000100
+01101000000000001000101100000100
+01100000000000010100010101110011
+00011010001000100000011000000000
+00011000011000100111111000000000
+01100000000000010100010101110001
+00100000010000000011101010001000
+00100000001000000110110001001101
+01110000000010110000010100000000
+00100000001000000011110011010001
+00100000010000000011101010001110
+01101000000000010100010101110011
+01101000000010010100011010011111
+10011000010001100111111000000000
+01100000000000010100010101110011
+00100000011000000000000000000000
+01101000000000010100010101110011
+11011000010000000000000001101110
+00100000010000000111111111011101
+01101000000010010100010101101100
+00100000010000000111111111011101
+01101000000010010100010101011110
+00100000010000000111111111011101
+01100000000000010100011010011111
+00100000011000000000000000000000
+01110000000010110000010100000001
+01110000000010110000001100000101
+00100000001000000011110000011010
+01101000000000010100011010000010
+11000011000001001011110000010111
+00100000010000000011101011010100
+00100000001101000011110000010111
+01110000000010110000010100000000
+01101000000000001100011010111111
+11000010100000100011101010110100
+01101000000000001100011011000000
+00100100011110100000000000000000
+01110000000010110000010100000001
+11101000011000010000000000000000
+01100000000000010100011011000001
+00011000011000100111111000000000
+01100000000000010100011011000011
+01101000000000001000101100000100
+00011111111000001111111111111110
+00100100001000010011110000010111
+00100000001000101011110000010111
+01100000000000001100011011000000
+01110000000010110000010100000000
+00100000010000000101100000010100
+00100000010000000011101010110111
+00100000010000000011101010110111
+00100000010000000011101010110111
+01101000000000001100011010111111
+11000100000000100000000000000000
+01110000000010110000010100000001
+00100000010000000011110011110110
+00100000001000000011110000011010
+01101000000000001100011011000000
+00100000011110100000000000000000
+00100000010000000101100010010010
+00100100011110100000000000000000
+00100000010000000011101011001111
+01000100111100001100000000011100
+00011000010000001111111111111101
+01101000000010001100011011000000
+00100000010000000111111111011101
+00011111111000100010001000000000
+00011000010000100111111000000000
+10011010001001100111111000000000
+01100000000000001100011011000000
+01101000000010010100011011000001
+00100000010000000101101001100100
+01101000000000010100011011000011
+00011111111000100000011000000000
+00011010001000100111001000000000
+00100000010000000110011011101010
+00011000011000100111111000000000
+01100000000000010100011011000011
+01101000000000001100011011000000
+00100100011110100000000000000000
+00100000001000000011110011110100
+11011000010000000000000000010111
+01101000000000001100011010111111
+11000011100000001000000000000000
+01101000000010010100010010101000
+00100000011000000000000000000000
+01101000000000001100011010111111
+11000010100000010101101001000010
+00100000001000000111111111101001
+00100000001000000011110001001100
+00011010001000100000011000000000
+11101000011000001000000000000000
+11000000000000000011101011011111
+11000000000000001011101011100010
+11000000000000010011101011101000
+11000000000000011011101011101010
+00100000001000000011110000010111
+00100000010000000110000100101011
+01110000010001100101101000000000
+00100000001000000011110000011010
+01011000000001000000000000000011
+01100000000000011100011001011011
+01100000000000001100011001100010
+00100000010000000110000100100100
+01110000010001100101101000000001
+00100000001000000011110000011010
+01011000000001000000000000000010
+00100000001000000011101011100011
+01011000000001000000000000000001
+00100000001000000011101011100011
+01101000000000001000101100000100
+00011111111001100111110000010000
+00100100001000010011110000010111
+01100000000000001100011010001001
+00011111111000100111001000000000
+11011000101000000100011010001010
+00100000010000000110011011111101
+00100000001000000011110000011010
+00011010001000100000011000000000
+11101000011000001000000000000000
+01101000000110001000000001100010
+01111101001110100000010000000100
+01100000000110001000000001100010
+00100000001000000011110000011010
+01101000000000001000101100000100
+00011111111000100111001000000000
+00011010001000100000011000000000
+00100000010000000111111101011000
+01011001011011100011011000000000
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111111111000000000
+01100000000000010100001001000011
+00100000010000000011110000011010
+00100000010000000111111110011110
+00100000001000000110011011001110
+11011010001000000000000000000010
+11011010010000000100011010011010
+11011000010000000000000000000000
+00100000001000000011110000100101
+01100000000000010000101011000010
+11011010010000000000101011000010
+11011000010000000000000000000000
+00100000001000000011110000100101
+01101000000000010100011010000010
+11000011000000000011110000010111
+00100000010000000011110000011010
+00100000001000000011001111101001
+01101000000000010100011010000010
+11000011000001001011110000010111
+00100000010000000011110000011010
+00100000001000000011010000000010
+01101000000000001000101100000100
+00011111111000100111001000000000
+00011010001000100000011000000000
+01101000000000010100001000010101
+00011111111000100000101000000000
+00100000010000000110011011101010
+00100000001000000011110000011010
+01101000000000001100011010000010
+11000011000000000011110000010111
+11101000011000001000000000000000
+01101000000010001100011001100001
+01111001001110100000010000000000
+01111001001000000000010000000111
+01100000000010001100011001100001
+00100000010000000011110000011010
+01101000000000001100011001100001
+11000010100000110011101100101011
+00100000011000000000000000000000
+01110000010001100110000100000000
+01110000000010101001100100100001
+00100000001000000111110110001111
+11000010100000000101111110010101
+00100000001000000011101100101000
+01101000000000001100011010000010
+11000100000000100000000000000000
+01101000000000001100010101101011
+11000001000000000000000000000000
+11101000011000001000000000000000
+01101000000010001100010101101001
+10011000010000001000010000000000
+01100000000010001100010101101001
+00100000011000000000000000000000
+11011111001000000000000001000000
+11011000101000000100001101101111
+00100000010000000111111011010100
+01011000000000000000000000000000
+01100000000000001000101010110010
+00011010001000100000011000000000
+00011000011000100111111000000000
+01100000000000010000101010110110
+00100000010000000011101101100100
+01101000000000001000101010110010
+01101000000010001000101010100010
+00011000010000001000010000000001
+10011000010000001111111000000000
+01100000000000001000101010110010
+00011111111001100111110000011111
+00100100001000010011101101010000
+01101000000010001100001101101111
+01011000000000000100001101110000
+10011000010000001111111000000000
+01100000000000010000101010111011
+01101000000010001000101010100010
+00011000010000001000010000000001
+01101000000000001100001101101111
+10011000010000001111111000000000
+01100000000000001100001101101111
+00100000001000000011101101011001
+01101000000010001100001110001111
+01011000000000000100001110010000
+10011000010000001111111000000000
+01100000000000010000101010111011
+01101000000010001000101010100010
+00011000010000001000010000000001
+01101000000000001100001110001111
+10011000010000001111111000000000
+01100000000000001100001110001111
+01101000000000010000101010111011
+00011111111000100000101000000000
+01101000000000010000101010110110
+00011111111000100000011000000000
+00011000010000100111001000000000
+00100000010000000110011011101010
+01101000000000001000101100000100
+01101000000010001000101010110010
+10011000010001100111110000000000
+00100100001000101011101100111100
+00100000001000000011110000011010
+11101000011000001000000000000000
+01100000000000001000101010100010
+11101000011000001000000000000000
+01100000000000001000101010101110
+00100000011000000000000000000000
+11011000010000000000000000000000
+11011010001000000000000000000010
+01101000000000010100011010110100
+01100000000000010000101011000010
+11011010010000000000101011000010
+00100000001000000011110000100101
+01101000000000001000101100000100
+11000000100000001011110000010111
+11101000011000001000000000000000
+01100000000000001100011010110010
+01011000000000000000000000000000
+01100000000000010100011010110100
+00100000001000000011110000011010
+11101000011000100000000000000000
+01100000000000100100011010001010
+01110000010001101000100100000100
+01110000010001100110001100000000
+00100000010000000011110000011010
+00100000001000000101111100110001
+01101000000000001000101100000100
+11000000100000011011110000010111
+11101000011000001000000000000000
+11000000000000000011101110000010
+11000000000000001011101110001010
+00100000001000000011110000010111
+11101000011010001000000000000000
+11101000011000001000000000000000
+11000000000000010011101110001000
+01111101001110100000010000000111
+00100000010000000110011111111011
+00100000001000000011110000011010
+00100000010000000110100000000110
+00100000001000000011110000011010
+11101000011010001000000000000000
+00100000010000000110100000010010
+11101000011000001000000000000000
+00101111111011111111111000000000
+00100000010000000110100000101100
+00100000001000000011110000011010
+01101000000000001000101100000100
+11000000100000001011110000010111
+11101000011010001000000000000000
+00100000010000000110100000011101
+01011000000000000000000000000000
+01111101001000001111111000000000
+11011010001000000000000000000001
+00100000001000000011101100001010
+00011010001000100000011000000000
+11101000011000001000000000000000
+00011111111000100000010000000000
+11000000010000001011101110100011
+11000000010000010011101110101000
+11000000010000011011101110101110
+01100000000000001100010011000110
+11000000000000000011101110110011
+11000000000000001011101110110110
+11000000000000010011101110111000
+00100000001000000011110000010111
+01101000000000001100010010111110
+00100000001110100011110000010111
+01100000000010001100010011000110
+01110000010001000101011000001101
+00100000001000000011101110110100
+01101000000000001100010010111110
+00100000001110100011110000010111
+01100000000010001100010011000110
+01110000010001000101011000001101
+01110000010001000101010000000001
+00100000001000000011110000011010
+01101000000000001100010010111110
+00100000001110100011110000010111
+01100000000010001100010011000110
+01110000010001000101011000001101
+00100000001000000011101110111001
+01110000010001000101011000000000
+01110000010001000101010000000011
+00100000001000000011110000011010
+01110000010001000101011000000101
+00100000001000000011101110110100
+01110000010001000101011000000101
+01110000010001000101010000000000
+00100000001000000011110000011010
+01101000000000001000101100000100
+00011111111001100111110000011111
+00100100001000010011110000010111
+01100000000000001100001101101111
+00011111111000100111001000000000
+00011010001000100000011000000000
+11011000101000000100001101110000
+00100000010000000110011011101010
+00100000001000000011110000011010
+01101000000000001000101100000100
+00011111111001100111110000011111
+00100100001000010011110000010111
+01100000000000001100001110001111
+00011111111000100111001000000000
+00011010001000100000011000000000
+11011000101000000100001110010000
+00100000010000000110011011101010
+00100000001000000011110000011010
+01101000000000010100011010000010
+11000011000001001011110000010111
+01101000000000001000101100000100
+11000000100001000011110000010111
+00011010001000100000011000000000
+11101000011001000000000000000000
+01100000000001000100010010010110
+01110000000010101001100100010010
+00100000010000000111110110001111
+00100000001000000011110000011010
+11101000011000010000000000000000
+01100000000000010100010010000010
+00100000001000000011110000011010
+01101000000000001100010011000110
+00100000001110100011110000010111
+01101000000000001100010011000100
+11000000100000000011110000010111
+01101000000000001100010011000101
+11000000100000000011110000010111
+00100000010000000111111000100101
+00100000001000000011110000011010
+01101000000000001000101100000100
+11000000100000101011110000010111
+11101000011000001000000000000000
+01100000000000001100011010100010
+11101000011000100000000000000000
+01100000000000100100011010100011
+01101000000010001100011010100010
+00100000010000000110100000001110
+00100000010000000011110010111100
+00100000001000000011110000011010
+01101000000000001000101100000100
+11000000100000001011110000010111
+11101000011000001000000000000000
+01100000000000001100000111011110
+00100000001000000011110000011010
+11101000011000001000000000000000
+11000000000000001011101111111010
+01101000000000001100010011000001
+11000000000000011011101111111000
+11000000000000110011101111111000
+11000000000000111011101111111000
+00100000001000000011110000010111
+01110000010001001100001000000001
+00100000001000000011110000011010
+00100000010000000101101101010011
+00100000001000000011110000011010
+01101000000000001000101100000100
+11000000100000001011110000010111
+00100000010000000011110000011010
+11101000011000001000000000000000
+00100000001110100110000011001011
+00100000001000000110000011001001
+00100000010000000011110000011010
+00100000010000000111111110011110
+01110000100000000001000000000001
+00100000001000000010101010001110
+01101000000000001000101100000100
+11000000000000000011110000010111
+11101000011000001000000000000000
+00100000001110100011110000010011
+01101000000000001000101100000100
+11000000100000101011110000010111
+11101000011000100000000000000000
+11011000010011110100001001000000
+10011000010001100111110000000000
+00100000001000010011110000010111
+01100000000000100100010011000111
+00100000010000000101100000001100
+00100000001000000011110000011010
+00100000010000000101100000001110
+00100000001000000011110000011010
+01110000010000001001000100000000
+00100000001000000011110000011010
+11011000010000000000000000000001
+11011010001000000000000000000000
+00100000001000000011110000100101
+11011000010000000000000000000000
+11011010001000000000000000000000
+00100000001000000011110000100101
+01110000000010110000001100000000
+00100000001000000011110001001001
+01110000000010110000001100000010
+00100000001000000011110001001001
+01110000000010110000001100000011
+00100000001000000011110001001001
+01110000000010110000001100000101
+00100000001000000011110001001001
+01101000000000001000101100000011
+00011111111000100010011000000000
+01110000000010110000001100000110
+01011000000000000000000000000010
+10011010001000001111111000000000
+00100000010000000011110010100111
+00011010011000100111111000000000
+11100001010000001000000000000000
+11100001010010001000000000000000
+00011010001000100111001000000000
+00011010010000100000110000000000
+00100000010000000110011011100100
+00100000001000000110011011000101
+00100000010000000011100101111111
+01110000000010110000001100000111
+01101000000000001000010011111111
+00100000011110100000000000000000
+00100000010000000011110010100111
+01101000000000001000010011111111
+00011111111000100111001000000000
+01101000000000010000010100000001
+00011111111000100000110000000000
+00100000010000000110011011010001
+00100000001000000110011011000101
+01110000000010110000001100001000
+01101000000000001100011010110110
+00011111111000100111001000000000
+00011111111000001111111000000010
+00100000010000000011110010100111
+01101000000000010100011010111001
+11100001010000010000000000000000
+01101000000000010100011010110111
+00011111111000100000110000000000
+00100000010000000110011011010001
+00100000001000000110011011000101
+01110000000010110000001100001001
+01011000000000000000000000000000
+00100000010000000011110010100111
+00100000001000000110011011000101
+01110000000010110000001100001010
+01011000000000000000000000000001
+00100000010000000011110010100111
+00100000010000000011110001011101
+01101000000000010100011010000010
+11011000111000000000000000000010
+10101111111011111111111111111111
+01111001001000001000010000000011
+11011000111000000000000000001001
+10101111111011111111111111111111
+01111001001000001000010000000101
+01101000000000001100011010000010
+11011000111000000000000000000100
+10101111111011111111111111111111
+01111001001000001000010000000100
+11100001010010001000000000000000
+00100000001000000110011011000101
+11011000010000000000000000000000
+01101000000000001100000010010011
+11011000111000000000000000000000
+10101111111011111111111111111111
+01111001001000001000010000000000
+11011000111000000000000000000001
+10101111111011111111111111111111
+01111001001000001000010000000001
+01101000000000001100001101101110
+11011000111000000000000000000000
+10101111111011111111111111111111
+01111001001000001000010000000010
+00100000011000000000000000000000
+01110000000010110000001100001101
+01101000000000001100001000010111
+00011111111011111111111000100010
+00011111111000100111001000000000
+00100000010000000011110010100111
+01101000000000010100001000010101
+00011111111000100000110000000000
+00100000010000000110011011010001
+00100000001000000110011011000101
+01110000000010110000001100001110
+01011000000000000000000000000100
+00100000010000000011110010100111
+01101000000000100000100110111010
+11100001010000100000000000000000
+00100000001000000110011011000101
+01110000000010110000001100001111
+01101000000100010000000100010010
+11011000010000000000000011111111
+00100000010000000111111111011101
+00011111111000100111001000000000
+00100000010000000011110010100111
+00100000010000000110011011001011
+00100000010000000110011100000011
+00100000001000000110011011000101
+01110000000010110000001100010000
+00100000001000000011110001001001
+01110000000010110000001100010001
+01011000000000000000000000000100
+00100000010000000011110010100111
+01101000000000100100010011000111
+11100001010000100000000000000000
+00100000001000000110011011000101
+11011010001000000000000110000000
+00100000001000000011110010010001
+11011010001000000000000010000000
+00100000001000000011110010010001
+11011010001000000000000100000001
+00100000001000000011110010010001
+11011010001000000000000000000001
+01110000010001100110000100000000
+01110000000010110000001100010100
+01011000000000000000000000000010
+00100000010000000011110010100111
+00011010001000100111111000000000
+11100001010000010000000000000000
+00100000001000000110011011000101
+11011010011000000000000000000000
+00100000001000000011110010011011
+11011010011000000000000000000001
+01110000000010110000001100010101
+01011000000000000000000000000001
+00100000010000000011110010100111
+00011010011000100111111000000000
+11100001010000001000000000000000
+00100000001000000110011011000101
+01110000000010110000001100011101
+01011000000000000000000000000100
+00100000010000000011110010100111
+01101000000000100000100110111010
+11100001010000100000000000000000
+00100000001000000110011011000101
+01110000000010110000001000000010
+01100000000000001000101100000100
+01100000000011000000101010100010
+01000100111100010100000000011100
+00100000010000000011110010110001
+01101000000011000000101010100010
+00100000010000000110011011000010
+01101000000000011000101100000010
+11100001010000011000000000000000
+00100000011000000000000000000000
+00100000010000000011110010111010
+00100000011000001000000000000000
+00100000010000000011110010111000
+01101000000000100100011010100011
+00011111111010110111111000000000
+00100000011110100000000000000000
+00100000001000000011110010111110
+01101000000010001100011010100010
+00100000001000000110100000101001
+01101000000010001100011010100010
+00100000001000000110100000011011
+01101000000010001100011010100010
+00100000001000000110100000100101
+00011111111000001111111111111111
+00100000000000000000000000100110
+00100100001110100011110010111110
+00100000011000000000000000000000
+00100000010000000011101011010100
+00100000011101000000000000000000
+00011010001000100111111000000000
+01100000000000010100011010110111
+00011010010000100111111000000000
+01100000000000001100011010110110
+01101000000000010000010001111000
+01101000000010010100011010111011
+10011000010001100111110000000000
+00100000001000101011110011001111
+01101000000010010100011010111101
+10011000010001100111110000000000
+00100100011000101000000000000000
+01100000000000010100011010111001
+00100000001000000011110000111101
+01101000000000001100011010111111
+11000011100000101000000000000000
+00100000010000000011110011110000
+00100000001000000011010000001100
+01110000010000010111001000000010
+00100000011000000000000000000000
+00100000001000000011110011011000
+01101000000000001100011010110010
+00100000011110100000000000000000
+01101000000000001100011010110011
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000001100011010110011
+00100100011110100000000000000000
+01110000010001101011001100001010
+00100000010000000110100011101011
+00100000010000000110100100001000
+00011111111001101111110001100100
+00100000010000000111111110000110
+00011000000001111111111000000000
+00011000000001110000010000000000
+01100000000000001100011010110100
+01100000000010001100011010110101
+00100000011000000000000000000000
+00100000010000000111111110110100
+00100000001000010011001111011001
+00100000001000000011001111011011
+11011000111000000000000000000110
+00100000001000000011110011111100
+11011000111000000000000000000110
+00100000001000000011110011111000
+11011000111000000000000000000101
+00100000001000000011110011111100
+11011000111000000000000000000101
+00100000001000000011110011111000
+11011000111000000000000000000100
+00100000001000000011110011111100
+11011000111000000000000000000100
+00100000001000000011110011111000
+01101000000000001100011010111111
+11111001001111111111111000000000
+01100000000000001100011010111111
+00100000011000000000000000000000
+01101000000000001100011010111111
+11111001001000000111111000000000
+01100000000000001100011010111111
+00100000011000000000000000000000
+00100000010000000011110100111001
+00100000010000000110010000001111
+00100000010000000100000011000110
+00100000010000000011110101100110
+00100000010000000110010000010001
+00100000011101011000000000000000
+00100000010000000011110100010110
+00100000010000000011110100011001
+01101000000000100100011011010011
+11000011100010000000000000000000
+00100000010000000011110101001110
+11000110000100110000000000000000
+01101000000000010100011010000010
+11000010100001100100001010110000
+00100000001000000100001010100010
+01101000000000100100011011010011
+11000100000011011000000000000000
+11011111001000000000000000010100
+01011000000000110000110101000000
+00100000010000000010101010001111
+11000010000000000111111011000001
+00100000011000000000000000000000
+01101000000000100100011011010011
+11000100000010000000000000000000
+00100000001000000100100011101010
+01011000000000000100000101101101
+01100000000000010100000111101111
+01011000000000000011111101110111
+01100000000000010100000111110001
+01011000000000000011111010111011
+01100000000000010100000111101101
+01011000000000000100000101111100
+01100000000000010100000111110101
+01011000000000000011110111100011
+01100000000000010100000111110011
+01011000000000000011111010110011
+01100000000000010100000111101011
+01011000000000000011110101011011
+01100000000000010100000111111001
+00100000010000000010110001111010
+01011000000000000100010000000001
+00011010011000001000101011011000
+11100000101000010000000000000000
+01011000000000000100010000000110
+00011010011000001000101011011010
+11100000101000010000000000000000
+01011000000000000011111010111111
+00011010011000001000101011011100
+11100000101000010000000000000000
+01011000000000000100000111111001
+01100000000000010100000111111101
+01011000000000000011110100110110
+01100000000000010100001000000001
+00100000011000000000000000000000
+01101000000000100100011011010011
+11000011000010010110010011010111
+00100000001000000110010011011010
+00100000011101011000000000000000
+00100000010000000010110010011101
+00100000010000000011111001101110
+00100000010000000011111000011110
+00100000010000000011111001010100
+00100000010000000101100000010000
+00100000010000000101100000111001
+00100000010000000101100000101100
+00100000010000000101100000011000
+01101000000000100100011011010011
+11000010100010100011110101000110
+11000010100010011100010000010100
+00100000011000000000000000000000
+00100000010000000110010110011100
+01101000000000100100011011010011
+00101111111011111111111000011001
+00100100010000001110010111000010
+00100000010000000100010000111111
+00100000010000000011110111001001
+00100000010000000100000110101010
+00100000001000000110010111011111
+01101000000000100100011011010011
+11000011000011110011110101010011
+01101000000000001000101010111101
+00101111111011000000000000000011
+00100100011000001000000000000000
+01101000000000001100011100011111
+01100000000000001100011100011110
+01101000000000001100011011110101
+11000011100000110000000000000000
+01101000000000100100011011010011
+11000100000010001000000000000000
+11000010100011101010111011100100
+00100000001000000010111100101100
+01101000000000001000010001111000
+00011111111001100111111000011010
+00100100011000101000000000000000
+01110000000010101001100100010010
+00100000010000000111110110001111
+11011000111000000000000000000000
+00100000001000000100000110111001
+01101000000000001100011010110110
+11000001000000001000000000000000
+01110000010001101011011000000001
+00100000011000000000000000000000
+01101000000000001100011011100001
+00011111111000010111111000001111
+01100000000000001100011101111010
+00100000001000000011110110000000
+01101000000010001100011011100111
+00100000010000000110100000011101
+00100100001000001011110101100010
+01101000000000001100011010110110
+11000001000000000000000000000000
+01110000010001101011011000000000
+01101000000000001100011101111010
+00011111111000001111111000000001
+00011111111000010111111000000011
+01100000000000001100011101111010
+00100000010000000011110101111110
+01101000000000100100011011010011
+11000010100010100100010000111011
+11000010100010011011110101111001
+00100000011000000000000000000000
+11011000010000000000000000011110
+00100000010000000110100000001110
+11011000010000000000000000011111
+00100000010000000110100000001110
+00100000001000000100010000110101
+01000100111100011100000000011100
+00100000010000000100001001001010
+01101000000000001100011011100000
+11000000000000101011110110101010
+11000000000000100011110110010110
+01101000000000001100011101111010
+11000000000000000011110110001010
+11000000000000001011110110001000
+11000000000000010011110110001100
+11000000000000011011110110001110
+01101000000000001100011110000000
+00100000001000000011110110111110
+01101000000000001100011101111111
+00100000001000000011110110111110
+01101000000000001100011110000001
+00100000001000000011110110111110
+01101000000000001100011110000010
+00100000001000000011110110111110
+01101000000000001100011011100000
+11000001000000110000000000000000
+01101000000000001100011010110101
+00011111111000001111111000000001
+01100000000000001100011010110101
+00100000011000000000000000000000
+01101000000000001100011101111010
+11000000000000000011110110011101
+11000000000000001011110110011011
+11000000000000010011110110011111
+11000000000000011011110110100001
+01101000000000001100011110000100
+00100000001000000011110110100010
+01101000000000001100011110000011
+00100000001000000011110110100010
+01101000000000001100011110000101
+00100000001000000011110110100010
+01101000000000001100011110000110
+01100000000000001100011010110101
+00011111111011010111111000000000
+00011111111000100010001000000000
+00011111111000001111111000001101
+00100000010000000110010000010011
+00011010001000100111111000000000
+00011111111000001111111000001110
+00100000001000000110010000010011
+01101000000000001100011101111010
+11000000000000000011110110110001
+11000000000000001011110110101111
+11000000000000010011110110110011
+11000000000000011011110110110101
+01101000000000001100011110001000
+00100000001000000011110110110110
+01101000000000001100011110000111
+00100000001000000011110110110110
+01101000000000001100011110001001
+00100000001000000011110110110110
+01101000000000001100011110001010
+01100000000000001100011010110101
+00100000010000000100000011000000
+01101000000000001100011010110101
+00011111111000001111111010000000
+00011111111011010111111000000000
+00011111111000001111111000000101
+00011111111000100010001000000000
+00100000001000000100000101011010
+01100000000000001100011010110101
+00100000010000000011110110010000
+01101000000000001100011010110101
+01011000000000000000000000000110
+00100000010000000110010000010100
+00011111111000010000010011111000
+01101000000000001100011010110101
+10011000010000001111111000000000
+00011111111011010111111000000000
+00011111111000001111111000000110
+00100000001000000110010000010011
+00100000010000000011001111000100
+00100000001000101100001100010110
+00100000010000000100010000011100
+00100000010000000100001011100100
+00100000001000000011001110111101
+01101000000000010100011100000111
+00100000011110100000000000000000
+01101000000000100100011011010011
+11000100000010001000000000000000
+11000011100000011000000000000000
+11000110000100110000000000000000
+00100000010000000100000010000011
+11000001100000111000000000000000
+00100000010000000100010010000010
+11011000111000000000000000000011
+00100000010000000100001111001110
+01011000000000000000000000000000
+01100000000000010100011010101110
+01100000000000001100011010110100
+00100000010000000011001001100011
+01101000000000010100011010000010
+11000010100000111100001110010010
+11000010100001001011010000000010
+11000010100000000011001111101001
+00100000010000000100001011001010
+00100000001000000010111010101101
+00100000010000000011110111001110
+00100000010000000111111000110100
+00100000010000000011110101101010
+00100000010000000011110111101001
+00100000010000000011111011100000
+00100000001000000011110111110111
+01101000000000100100011011010011
+11000100000010000000000000000000
+00100000010000000100100011010011
+00100000001000000100100011111101
+01101000000100001000101000000100
+11000011000000111011110111110001
+11000010100000111011110111110100
+00100000011000000000000000000000
+01101000000000001100011011111111
+11000100000000111000000000000000
+00100000001000000110010110011010
+01101000000000001100011011111111
+11000011100000111000000000000000
+00100000001000000100001110000001
+00100000010000000011110111101101
+01101000000100001000101000000100
+01100000000000001100011011111111
+11000100000000111000000000000000
+00100000010000000011111000000111
+01101000000000100100011011111001
+01101000000010001100011011111101
+10011000010000001000010000000000
+00011100010000100111111000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+01100000000000100100011011111001
+00100000010000000011111110010111
+00100100011101000000000000000000
+01110000000011010011100000000100
+00100000001000000011111000001111
+01101000000010100100011011111001
+00011100010000100111111000000000
+10011000010001100111110000000000
+00100100010000010011111000001100
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000100100011011111001
+00100000011000000000000000000000
+01101000000000001000110100111000
+11000100000000010000000000000000
+00100000001000000011111000010010
+01101000000100001000101000000100
+11000100000000111000000000000000
+01110000000011010101001000100000
+01011000000000000000000000000001
+01100000000000001000110101010100
+01101000000000111100011010011010
+11100000101000111000000000000000
+00100000011000000000000000000000
+01101000000100010000000001010000
+01111001001111111111111000001011
+01100000000100010000000001010000
+00100000011000000000000000000000
+01011000000000001000110000000000
+01100000000000010100010101110101
+01011000000000001000111001111010
+01100000000000010100010010111100
+01011000000000000010010000000010
+01100000000000010100000010111101
+01011000000000000010010110000000
+01100000000000011100000010101010
+01110000010000010111001100000011
+01110000010000010101011000001000
+01110000010001101101100100000001
+01011000000000000000001000000000
+01100000000000010100000101010100
+01110000010001001010011000010111
+01110000010001001010100000010111
+01011000000000000000101001110111
+01100000000000010100001000010010
+00111000000000000000001100000110
+00111000000001000100010001000000
+00111000000010010000000000000000
+00111000000011000100010000001000
+01100000000001001100010101110111
+00111000000000000001001000100100
+00111000000001000100000000000000
+00111000000010000000000000000000
+11100000101000101000000000000000
+00111000000000111111111111111111
+00111000000001101111111000100011
+00111000000010011001100111011001
+00111000000011000000001000001101
+01100000000001000100000010011000
+01011000000000000000000100101100
+01100000000000010100011100000111
+00100000010000000101011110100011
+01101000000000100100011011010011
+11000100000011111000000000000000
+00100000010000000011111001000100
+00100000001000000011111001001100
+01101000000010001100011011110111
+00100000010000000110011111111011
+01101000000010001100011011110111
+00100000010000000110100000011101
+01110000010001101111011000000011
+00100000011000001000000000000000
+01110000010001101111011000000010
+00100000011000000000000000000000
+01101000000010001100011011111000
+00100000010000000110011111111011
+01101000000010001100011011111000
+00100000010000000110100000011101
+01110000010000100010110100000000
+00100000011000001000000000000000
+01110000010000100010110100000010
+00100000011000000000000000000000
+01101000000000001100001000101101
+11000000000000000011111001011001
+11000000000000001011111001100010
+11000000000000010011111001101011
+00100000001000000011111001011001
+01101000000010010100001000100001
+01101000000000010100001000100111
+10011000010001100111111000000000
+00011111111011111111111000010100
+00011111111001101111110001100100
+00100000010000000111111110000110
+00011000000001111111111000000000
+01100000000000010100011011010000
+00100000011000000000000000000000
+01101000000010010100001000011111
+01101000000000010100001000100101
+10011000010001100111111000000000
+00011111111011111111111011100110
+00011111111001101111110110010000
+00100000010000000111111110000110
+00011000000001111111111000000000
+01100000000000010100011011010000
+00100000011000000000000000000000
+01101000000000010100001000100011
+01100000000000010100011011010000
+00100000011000000000000000000000
+01101000000010001100001000111010
+00100000010000000110100000001110
+00100000010000000100100011111011
+01101000000010001100011011100010
+00100000010000000110011111111011
+01101000000010001100011011100011
+00100000010000000110011111111011
+01101000000010001100011011100100
+00100000010000000110011111111011
+01101000000010001100011011110011
+00100000010000000110011111111011
+01101000000010001100011011011100
+00100000010000000110100000001110
+01101000000010001100011011101000
+00100000010000000110011111111011
+01101000000010001100011011101001
+00100000010000000110011111111011
+01101000000010001100011011101010
+00100000010000000110011111111011
+01101000000010001100011011101011
+00100000010000000110011111111011
+01101000000010001100011011100101
+00100000010000000110011111111011
+01101000000010001100011011100110
+00100000010000000110011111111011
+01101000000010001100011011101111
+00100000010000000110100000001110
+01101000000010001100011011110000
+00100000010000000110100000001110
+01101000000010001100011011110001
+00100000010000000110100000001110
+01101000000010001100011011110010
+00100000010000000110100000001110
+01101000000010001100011011110100
+00100000010000000110100000001110
+01101000000010001100011011101101
+00100000010000000110011111111011
+01101000000010001100011011101100
+00100000010000000110011111111011
+01101000000010001100011011100111
+00100000001000000110011111111011
+01101000000010001100011011101000
+00100000010000000110011111011101
+01101000000010001100011011101001
+00100000010000000110011111011101
+01101000000010001100011011101010
+00100000010000000110011111011101
+01101000000010001100011011101011
+00100000001000000110011111011101
+01101000000010001100011011101000
+00100000010000000011111010100111
+01101000000010001100011011101001
+00100000010000000011111010100111
+01101000000010001100011011101010
+00100000010000000011111010100111
+01101000000010001100011011101011
+00100000001000000011111010100111
+00011000010001100111110011111111
+00100000011000101000000000000000
+00011000010000010000111001111111
+01101000000100100000000100011100
+10101111111011111111111111111111
+01101000000100100000000001111000
+11111001001000001111111000000000
+01100000000100100000000001111000
+01101000000100100000000001111100
+11111101001000001111111000000000
+01100000000100100000000001111100
+00100000011000000000000000000000
+01111000001101000111110000000000
+01101000000100100000000100111000
+01111001001101000111111000011010
+01100000000100100000000001001100
+00100000010000000010110000100001
+00100000010000000100010010000010
+00100000010000000011111010011111
+00100000001000000011111010111111
+00100000010000000011111010111111
+01101000000000001000000010100000
+00100100011110100000000000000000
+00100000001000000110011111101101
+00100000010000000011111011100000
+11011000010000000000000000011001
+01101000000000100100011011010011
+00101111111011111111111000010010
+00100000010000001011111011011110
+00100000010000000110100000001110
+00100000010000000110001111101110
+01101000000010001100011011100010
+00100000010000000110011111011101
+01101000000010001100011011100011
+00100000010000000110011111011101
+01101000000010001100011011100100
+00100000010000000110011111011101
+01101000000010001100011011100101
+00100000010000000110011111011101
+01101000000010001100011011100110
+00100000010000000110011111011101
+01101000000010001100011011100111
+00100000010000000110011111011101
+01101000000010001100011011101101
+00100000010000000110011111011101
+01101000000010001100011011101000
+00100000010000000110011111011101
+01101000000010001100011011101001
+00100000010000000110011111011101
+01101000000010001100011011101010
+00100000010000000110011111011101
+01101000000010001100011011101011
+00100000010000000110011111011101
+01101000000010001100011011110011
+00100000001000000110011111100001
+11011000010000000000000000011110
+00100000011000000000000000000000
+01000100111100100100000000011100
+00100000010000000011111011101110
+00100000010000000011111100110110
+01101000000000001100011010111000
+01101000000010001100011010110111
+01100000000000001100011010110111
+10011000010001100111110000000000
+00100100001000101011001111010100
+01101000000000001100011010111110
+01101000000010001100011010111101
+01100000000000001100011010111101
+10011000010001100111110000000000
+00100100001000101011001111010100
+00100000011000000000000000000000
+01101000000000001100011011101010
+11000001011111111000000000000000
+11011010001000000000000000000000
+01101000000010001100011011101010
+00100000010000000110100000011101
+01111001001000001010001000000000
+01101000000010001100011011101011
+00100000010000000110100000011101
+01111001001000001010001000000001
+00011010001000100111111000000000
+01100000000000001100011010111000
+11000000000000001011111011111110
+11000000000000010011111100000010
+01101000000000001100011010111001
+11000010100000111011111100001110
+00100000011000000000000000000000
+01101000000000001100011010110111
+11000000000000000011111100000110
+11000000000000011011111100001000
+00100000011000000000000000000000
+01101000000000001100011010110111
+11000000000000000011111100001010
+11000000000000011011111100001100
+00100000011000000000000000000000
+01110000010001101011100110000010
+00100000011000000000000000000000
+01110000010001101011100110000001
+00100000011000000000000000000000
+01110000010001101011100110000000
+00100000011000000000000000000000
+01110000010001101011100110000011
+00100000011000000000000000000000
+01101000000000001100011010111001
+01111001001111111111111000000111
+01100000000000001100011010111001
+11000000000000000011111100010110
+11000000000000001011111100011001
+11000000000000010011111100011100
+11000000000000011011111100011111
+00100000011000000000000000000000
+01101000000000001100011010111000
+11000000000000011011111100100010
+00100000011000000000000000000000
+01101000000000001100011010111000
+11000000000000000011111100100010
+00100000011000000000000000000000
+01101000000000001100011010111000
+11000000000000011011111100101100
+00100000011000000000000000000000
+01101000000000001100011010111000
+11000000000000000011111100101100
+00100000011000000000000000000000
+01101000000000001100011010111100
+00011111111000001111111000000001
+01100000000000001100011010111100
+00011111111001100111110000000001
+00100000011000010000000000000000
+01110000010001101011110000000000
+01101000000000001100011010111010
+00011111111000001111111000000001
+01100000000000001100011010111010
+00100000011000000000000000000000
+01101000000000001100011010111011
+00011111111000001111111000000001
+01100000000000001100011010111011
+00011111111001100111110000000001
+00100000011000010000000000000000
+01110000010001101011101100000000
+01101000000000001100011010111010
+00011111111000001111111111111111
+01100000000000001100011010111010
+00100000011000000000000000000000
+01101000000000001100011011101000
+11000001011111111000000000000000
+11011010001000000000000000000000
+01101000000010001100011011101000
+00100000010000000110100000011101
+01111001001000001010001000000000
+01101000000010001100011011101001
+00100000010000000110100000011101
+01111001001000001010001000000001
+00011010001000100111111000000000
+01100000000000001100011010111110
+11000000000000001011111101000110
+11000000000000010011111101001010
+01101000000000001100011010111111
+11000010100000111011111101010110
+00100000011000000000000000000000
+01101000000000001100011010111101
+11000000000000000011111101001110
+11000000000000011011111101010000
+00100000011000000000000000000000
+01101000000000001100011010111101
+11000000000000000011111101010010
+11000000000000011011111101010100
+00100000011000000000000000000000
+01110000010001101011111110000010
+00100000011000000000000000000000
+01110000010001101011111110000001
+00100000011000000000000000000000
+01110000010001101011111110000000
+00100000011000000000000000000000
+01110000010001101011111110000011
+00100000011000000000000000000000
+01101000000000001100011010111111
+01111001001111111111111000000111
+01100000000000001100011010111111
+11000000000000000011111101011110
+11000000000000001011111101100001
+11000000000000010011111101100100
+11000000000000011011111101100111
+00100000011000000000000000000000
+01101000000000001100011010111110
+11000000000000011011111101101010
+00100000011000000000000000000000
+01101000000000001100011010111110
+11000000000000000011111101101010
+00100000011000000000000000000000
+01101000000000001100011010111110
+11000000000000011011111101101111
+00100000011000000000000000000000
+01101000000000001100011010111110
+11000000000000000011111101101111
+00100000011000000000000000000000
+01110000010001101100001000000000
+01101000000000001100011011000000
+00011111111000001111111000000001
+01100000000000001100011011000000
+00100000011000000000000000000000
+01110000010001101100000100000000
+01101000000000001100011011000000
+00011111111000001111111111111111
+01100000000000001100011011000000
+00100000011000000000000000000000
+01011000000000000000000000000010
+01100000000000001100011010000000
+00100000011000000000000000000000
+01101000000000001100000111100010
+00100000011110100000000000000000
+00100000010000000101001001110001
+00100100011110100000000000000000
+01101000000000100100011011010011
+11000010100000011011111110001010
+11000010100000000011111110001010
+11000010100000101011111110001010
+00100000010000000011111110010111
+00100100011101000000000000000000
+11011010001000000000000000001001
+00100000010000000100110101100011
+01101000000000010100001001001110
+11100000101000010000000000000000
+01011000000000000000001010100001
+11100000101000010000000000000000
+01101000000000111100011010011010
+11100000101000111000000000000000
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000111100011010011010
+00100000001000000011111110000001
+01101000000000010100011010101010
+01100000000000010100011010110000
+00100000011000000000000000000000
+01000100111100101100000000011100
+11011010001000000000000000000111
+01101000000010010100010001101111
+00100000010000000101101001100100
+01101000000000111100011010011010
+11100000101000111000000000000000
+00100000011000000000000000000000
+01000100111100110100000000011100
+01111000010101000111110000000000
+01011000000000000000000000000000
+01100000000000110100011010011011
+00100000010000000011111110110101
+00100000010000000100000001111001
+00100000010000000100000001111110
+00100000010000000100000010011001
+00100100011101000000000000000000
+00100000010000000011111110001101
+11011000111000000000000000001000
+00100000001000000100001111001110
+01101000000000010100011010011011
+00011111111001100111111000000000
+01100000000000010100011010011011
+00100000001000000111111111100111
+01101000000000010100011010011101
+00011111111001100111111000000000
+01100000000000010100011010011101
+00100000001000000111111111100111
+01101000000000010100011010011101
+00011111111001100111111000000000
+01100000000000010100011010011101
+01101000000000010100011010011011
+00011111111001100111111000000000
+01100000000000010100011010011011
+00100000010000000100000000000010
+00100000001000000111111111100111
+00100000010000000100000000000010
+00100000001000000111111111100111
+01101000000000001100001000111001
+11000001100000000000000000000000
+01101000000000001100011011100000
+11000000000000000011111111100010
+11000000000000001011111111100010
+11000000000000010011111111100010
+11000000000000011011111111100010
+11000000000000100011111111000100
+11000000000000101100000000010000
+11000000000000110011111111100010
+00100000001000000011111111100010
+01101000000000001100011010100111
+00100000010110100100000001011101
+01110000010001101010011100000001
+00100000011000000000000000000000
+00100000010000000011111111000000
+01101000000010001100011011110011
+00100000010000000110100000011101
+00100100011000001000000000000000
+01011000000000000000000000000000
+00100000010000000110010000010100
+11000000100110000100000011010001
+01011000000000000000000000000010
+00100000010000000110010000010100
+11000100000000111000000000000000
+00100000010000000100000001011101
+00100000010000000011111111011110
+01100000000000001100011010100001
+00011111111100011111111000000000
+00100000010000000100000101101001
+01100000000000001100011010011100
+01101000000000001100011010100001
+00011111111000010111111000001111
+00100000010000000100000101101001
+01100000000000001100011010011110
+01101000000000001100011011110110
+11000000000000000011111110100011
+11000000000000001011111110101011
+11000000000000010011111110100111
+11000000000000011011111110110011
+00100000011000000000000000000000
+01011000000000000000000000010010
+00100000001000000110010000010100
+11000000000110001011111111101010
+00100000001000000100000011010001
+00100000010000000011111111000000
+01111000010101000111110000000000
+01101000000010001100011011110011
+00100000010000000110100000011101
+00100100011000001000000000000000
+01011000000000000000000000000000
+00100000010000000110010000010100
+11000000100110000011111111100000
+01011000000000000000000000000010
+00100000010000000110010000010100
+11000100000000111000000000000000
+00100000010000000100000001011101
+01101000000000001100011010011011
+00100000010000000100000101100101
+01100000000000010100011010011011
+01101000000000001100011010011101
+00100000010000000100000101100101
+01100000000000010100011010011101
+01101000000000001100011011110110
+11000000000000000011111111111010
+11000000000000001011111111111100
+11000000000000010011111111111110
+11000000000000011100000000000000
+00100000011000000000000000000000
+00100000010000000011111110100011
+00100000001000000100000010110011
+00100000010000000011111110101011
+00100000001000000100000010110011
+00100000010000000011111110100111
+00100000001000000100000010110011
+00100000010000000011111110110011
+00100000001000000100000010110011
+01101000000000010100011010011101
+01101000000010010100011010011011
+01100000000000010100011010011011
+01100000000010010100011010011101
+00100000011000000000000000000000
+00100000010000000110010000001111
+00100000000000000000000001100100
+00011010010000100111111000000000
+00100000010000000110010000010100
+00011111111000100010010000000000
+00100000010000000110010000010001
+00100000000000000000000001100100
+00011010010000100111111000000000
+00100000011000000000000000000000
+01111000010101000111110000000000
+01101000000010001100011011110011
+00100000010000000110100000011101
+00100100011000001000000000000000
+11011010010000000000000000000010
+00100000010000000100000000000111
+11000100000000111000000000000000
+11011010010000000000000000000000
+00100000010000000100000000000111
+01100000000000001100011011011101
+11000000100111110100000101000101
+01101000000000001100011010100111
+00100000010110100100000000111001
+01110000010001101010011100000001
+00100000010000000100000000111001
+01101000000000001100011010100001
+00011111111100011111111000000000
+00100000010000000100000101101001
+01100000000000001100011010011100
+01101000000000001100011010100001
+00011111111000010111111000001111
+00100000010000000100000101101001
+01100000000000001100011010011110
+01101000000000001100011011110110
+11000000000000000100000000110001
+11000000000000001100000000110101
+11000000000000010100000000110011
+11000000000000011100000000110111
+00100000011000000000000000000000
+01101000000000001100011010100100
+11000000000000000100000001010001
+11000000000000001100000001000101
+00100000011000000000000000000000
+00100000010000000011111110100011
+00100000001000000100000000101101
+00100000010000000011111110100111
+00100000001000000100000000101101
+00100000010000000011111110101011
+00100000001000000100000000101101
+00100000010000000011111110110011
+00100000001000000100000000101101
+00100000010000000110010000001111
+00100000010000000100000001011101
+11011111111000000000000000000101
+00100000010000000110010000010100
+01100000000000001100011010100001
+11011111111000000000000000000111
+00100000010000000110010000010100
+01100000000000001100011010100010
+11011111111000000000000000001000
+00100000010000000110010000010100
+01100000000000001100011010100011
+00100000001000000110010000010001
+01101000000000001100011010100010
+11000001100000000000000000000000
+01101000000000001100011010100011
+00011111111001100111110000101101
+00100000011000010000000000000000
+01110000010001101010010000000000
+01011000000000001011101001000001
+00100000010000000110010000000101
+01011000000000000000000000110010
+00100000010000000110010000000101
+01011000000000001011010101000001
+00100000001000000110010000000101
+01101000000000001100011010100010
+11000001100000000000000000000000
+01101000000000001100011010100011
+00011111111001100111110000101101
+00100100011000010000000000000000
+01110000010001101010010000000001
+01011000000000001011101001000001
+00100000010000000110010000000101
+01011000000000001000000000110010
+00100000010000000110010000000101
+01011000000000001011010101000001
+00100000001000000110010000000101
+11011111111000000000000000000011
+00100000010000000110010000010100
+01100000000000010100011010011011
+11011111111000000000000000000100
+00100000010000000110010000010100
+01100000000000010100011010011101
+00100000011000000000000000000000
+11011000010000000000000000011011
+00100000010000000110011111111011
+11011000010000000000000000011011
+00100000010000000110100000011101
+00100000011000001000000000000000
+01101000000100001000000100001001
+01111001001000000111111000000100
+01100000000100001000000100001001
+00100000011000000000000000000000
+01101000000010001100011011000000
+01101000000100001000000100001001
+10011000010000001111111000000000
+00100000011110100000000000000000
+01100000000000001100011010011111
+01110000010001101100000000000000
+00100000001000000111111111100111
+01101000000010001100011011000000
+01101000000100001000000100001001
+10011000010000001111111000000000
+01100000000000001100011011000000
+00100000011000000000000000000000
+01101000000000001100011011000000
+00100000011110100000000000000000
+01100000000000001100011010011111
+01110000010001101100000000000000
+00100000001000000111111111100111
+01101000000000001100011010111010
+00100000011110100000000000000000
+01100000000000001100011010100000
+01110000010001101011101000000000
+00100000001000000111111111100111
+11011010001000000000000000000000
+01101000000010001100011011100010
+00100000010000000110100000011101
+01111001001000001010001000000000
+01101000000010001100011011100011
+00100000010000000110100000011101
+01111001001000001010001000000001
+01101000000010001100011011100100
+00100000010000000110100000011101
+01111001001000001010001000000010
+00100000010000000100000010010000
+00011010001000100111111000000000
+00100000011000000000000000000000
+01101000000000001100011011100101
+11000001011111111000000000000000
+01101000000010001100011011100101
+00100000010000000110100000011101
+01111001001000001010001000000011
+01101000000010001100011011100110
+00100000010000000110100000011101
+01111001001000001010001000000100
+00100000011000000000000000000000
+00100000010000000100000010000011
+00100000010000000100000010101000
+00100000010000000100000010100011
+00011010001000100111111000000000
+01101000000010001100011010011010
+01100000000000001100011010011010
+10011000010000101111111000000000
+00011111111001100111110000000000
+00100000011000101000000000000000
+00100000001000000111111111100111
+11000110100100110000000000000000
+00011010001000100111111000000000
+00100000011110100000000000000000
+01100000000000001100011010011010
+00100000001000000111111111100111
+01101000000000010100011010000010
+11000010100001001100000010101101
+01101000000000010100011010000010
+11000010100000000100000010110000
+00100000011000000000000000000000
+00011010001000100111111000000000
+00100100001110100101100000100000
+00100000001000000101100000100010
+00011010001000100111111000000000
+00100100001110100010101111000111
+00100000001000000010101111001001
+01000100111100111100000000011100
+11011000010000000000000000011010
+01101000000000100100011011010011
+00101111111011111111111000010010
+00100000010000001100000010111110
+00100000010000000110100000011101
+00100000011000001000000000000000
+01011000000000000000000000001010
+00100000010000000110010000010100
+00100000000000000000001111101000
+00100000001000000100000010110011
+11011000010000000000000000011111
+00100000011000000000000000000000
+01101000000000100100011011010011
+11000010100010010100000011000100
+11011000010000000000000000011010
+00100000001000000110011111111110
+11011000010000000000000000011111
+00100000001000000110011111111110
+00100000010000000011110100110110
+00100000011101011000000000000000
+00100000010000000100000011000000
+01101000000000001100011011100000
+11000000000000101100000011010101
+00100000010000000100000011011001
+11000000000110000100000011100000
+11000000000110001100000011101010
+00100000010000000100000011010001
+00100000000000000000001111101000
+00100000001000000100000011001011
+01000100111101000100000000011101
+01101000000000100100011011010011
+11000010100010010110001111100000
+00100000001000000110001111010001
+00100000010000000100000011011001
+11000000000111110100000101001011
+00100000010000000100000101000101
+00100000001000000100000011010101
+01011000000000000000000000000001
+00100000010000000110010000010100
+01100000000000001100011011011110
+01011000000000000000000000000000
+00100000010000000110010000010100
+01100000000000001100011011011101
+00100000011000000000000000000000
+01101000000000001100011011011110
+11000000011010001100000100111001
+11000000011010010100000011111000
+11000000000000010100000011101110
+11000000001010100100000011100110
+00100000011000000000000000000000
+01110000010001101110000000000010
+00100000011000000000000000000000
+01110000010001101110000000000110
+00100000011000000000000000000000
+01101000000000001100011011011110
+11000000001110000100000011101000
+01110000010001101110000000000001
+00100000011000000000000000000000
+01110000010001101110000000000100
+00100000010000000100000011110110
+01011000000000000011010000100110
+00100000010000000110010000010011
+01011000000000000000010000011001
+00100000010000000110010000010011
+01011000000000000000000000001001
+00100000001000000110010000010011
+01011000000000000101101000001001
+00100000001000000110010000010011
+01110000010001101110000000000011
+00100000010000000100000011110110
+01011000000000000000111100001101
+00100000010000000110010000010011
+01011000000000001110001100011101
+00100000010000000110010000010011
+01011000000000001101001001111101
+00100000010000000110010000010011
+00100000010000000100000100000010
+00100000001000000100000100011010
+01011000000000000011010100011011
+00100000010000000110010000010011
+01011000000000001011010000101000
+00100000010000000110010000010011
+01011000000000000100011000101001
+00100000010000000110010000010011
+01011000000000001001011000101010
+00100000010000000110010000010011
+01011000000000001000110000101011
+00100000010000000110010000010011
+01011000000000000110111000101100
+00100000010000000110010000010011
+01011000000000000110010000101101
+00100000010000000110010000010011
+01011000000000000101111100111000
+00100000010000000110010000010011
+01011000000000000000111100111001
+00100000010000000110010000010011
+01011000000000000011001000111010
+00100000010000000110010000010011
+01011000000000000100011100111011
+00100000010000000110010000010011
+01011000000000000001000001000010
+00100000001000000110010000010011
+01011000000000000010111001010100
+00100000010000000110010000010011
+01011000000000001111001001010101
+00100000010000000110010000010011
+01011000000000001111010001100001
+00100000010000000110010000010011
+01011000000000000111000001100011
+00100000010000000110010000010011
+01011000000000000101001001110101
+00100000010000000110010000010011
+01011000000000000100000101110110
+00100000010000000110010000010011
+01011000000000001110110101110111
+00100000010000000110010000010011
+01011000000000000010001101111000
+00100000010000000110010000010011
+01011000000000000100011001111001
+00100000010000000110010000010011
+01011000000000001110010101111010
+00100000010000000110010000010011
+01011000000000000100100001111100
+00100000010000000110010000010011
+01011000000000000111011101111110
+00100000010000000110010000010011
+01011000000000000000000101111111
+00100000010000000110010000010011
+01011000000000000000000000001011
+00100000010000000110010000010011
+01011000000000000000000001111111
+00100000010000000110010000010011
+00100000001000000100000011110100
+01110000010001101110000000000000
+00100000010000000100000011110110
+01011000000000000001000000001101
+00100000010000000110010000010011
+01011000000000001110110100011101
+00100000010000000110010000010011
+01011000000000001000000001111101
+00100000010000000110010000010011
+00100000010000000100000100000010
+01011000000000000000100101000011
+00100000010000000110010000010011
+00100000001000000100000100011010
+01101000000010001100011011011100
+00100000010000000110100000101001
+00100000010000000111111011000001
+01101000000010001100011011011100
+00100000010000000110100000100101
+00100000001000000111111011000001
+01110000010001101110000000000101
+01011000000000001011101001000001
+00100000010000000110010000000101
+01011000000000000000110100010001
+00100000010000000110010000000101
+01011000000000000000010000011011
+00100000010000000110010000000101
+01011000000000000000010000011100
+00100000010000000110010000000101
+01011000000000000000111100011101
+00100000010000000110010000000101
+01011000000000000000000000110010
+00100000010000000110010000000101
+01011000000000001011010101000001
+00100000001000000110010000000101
+01011000000000001011101001000001
+00100000010000000110010000000101
+00100000000000000000111110100000
+01011000000000001111111101111111
+00100000010000000110010000000101
+00011010001000100111111000000000
+00100000010000000110010000000101
+01011000000000000000000001111111
+00100000010000000110010000000101
+01011000000000001011010101000001
+00100000001000000110010000000101
+11000100000000111000000000000000
+11011000010000001111111100000000
+10011000010000011111111000000000
+00100000011000000000000000000000
+11000100000000011000000000000000
+11011000010000000000000011110000
+10011000010000011111111000000000
+00100000011000000000000000000000
+00100000010000000101100010010010
+00100100011110100000000000000000
+01101000000000001100011011000101
+00011111111000010111111000000011
+11000001100000011000000000000000
+01101000000000100100011011010011
+11000010100000011100000101111001
+11000010100000000100000101111001
+11000010100000101100000101111001
+00100000010000000011111110010111
+00100100011101000000000000000000
+00100000001000000011111110010000
+01011000000000000000000000000000
+01100000000000111100011010011010
+00100000001000000011111110010000
+00011010011000100111111000000000
+11000000000010100100000111000011
+11000000000000001100001011001010
+11000000000010101100000111011001
+11000000000000010100000111011001
+11000000000000101100000111010110
+11000000000010000100001001101100
+11000000000010010100001010011011
+11000000000000110100000111010101
+11000000000000100100000111001100
+11000000000010011100000111001100
+11000000000001010100000111001010
+11000000000101110011001111001101
+11000000000110001100000110110100
+11000000000110010100000110110110
+11000000000111110100000110010001
+11000000000100111100001110001110
+11000000000111001100000110011100
+11000000000111010100000110010010
+11000000000111100100000110011010
+00100000011000000000000000000000
+00100000001000000011010000010000
+01110000010001111000101100000001
+01101000000000001100011100011110
+00100100001110100100010010010010
+01101000000000001100011100100000
+01101000000010001100011100000011
+10011000010001100111110000000000
+00100000001000101011010000001010
+00100000011000000000000000000000
+01110000010001111000101100000001
+00100000011000000000000000000000
+01110000010001111000101100000001
+11011000111000000000000000000011
+00100000010000000100001111010010
+01011000000000000000000000000000
+01100000000000010100011100000111
+01110000010001101010011100000000
+01101000000000001100011011100000
+00011111111001100111110000000101
+00100000010000101100000000111001
+00100100010000101100000001011101
+01101000000000001000000000000100
+11000010100010011100000110101111
+00100000010000000100000110101010
+00100000001000000110010111010001
+00100000010000000010110001111010
+00011010011000001010001010101110
+11011010010000000000000001011011
+11011000010000000000000000000100
+00100000011000000000000000000000
+00100000010000000010110001111010
+00011010011000001010010010101110
+11101010010000001000000000000000
+01100000000000001100011101111011
+00100000001000000100010000110101
+11011000111000000000000000000010
+00100000001000000100000110111001
+01110000010001101100011000000010
+11011000111000000000000000000001
+00100000001000000100000110111001
+01101000000000001100011011000101
+11111001001000000111111000000000
+01100000000000001100011011000101
+00100000011000000000000000000000
+01101000000000001100011011000101
+11111001001111111111111000000000
+01100000000000001100011011000101
+00100000011000000000000000000000
+01110000010001101100010100000000
+00100000011000000000000000000000
+01101000000000010100001000001010
+01111001001111111111111000000000
+01100000000000010100001000001010
+01011000000000000000000000000000
+01100000000000010100011010101110
+00100000010000000011111110001101
+00100000001000000100001011001010
+00100000010000000110001111001011
+00100000001000000011001111011101
+01101000000000001100011100011110
+00100100001110100100010010010010
+01101000000000010100011010000010
+11000010100001100100001010110000
+01101000000000100100011011010011
+11000010100000000100000111010111
+11000010100000101100001010110000
+11000010100000011010111010101101
+00100000001000000011001110100111
+00100000001000000011111101110100
+00100000011000000000000000000000
+00100000010000000100001111000000
+00100000001000000110010110011010
+01000100111101001100000000011101
+00100000010000000100000111100111
+01101000000000100100011011010011
+11000010100000000100000111010111
+11000010100000011010111010101101
+01101000000000001100011100011110
+00100100001110100100010010010010
+01101000000000010100001000001000
+11000010100000111100000111110101
+11000010100000000011001110101001
+11000010100000001100000111101111
+11000010100000010100000111110010
+11000010100000011100000111110010
+00100000001000000100001010110000
+01011000000000000000000000000000
+01100000000001000100011010110111
+11100000101000100000000000000000
+01110000010001101011010000000000
+01110000010001101010011100000000
+01110000010000011110001000000000
+01110000010001000010100100000000
+00100000011000000000000000000000
+11000010100000101100000111110010
+11000010100000011100000111110010
+00100000001000000100001010110000
+01101000000000010100011010000010
+11000010100001100100001010110000
+00100000001000000011001110100111
+00100000010000000100000111000001
+01101000000000010100001000001000
+11000010100000000011001110101001
+00100000001000000011001110100111
+00100000010000000100001111010110
+00100000010000000100001001000011
+00100000010000000100001001000110
+00100000010000000100001001010000
+00100000010000000100010001011101
+00100000010000000100010001000011
+00100000010000000100001100110011
+00100000010000000100001110100101
+00100000010000000100001111101011
+00100000010000000100001000001001
+00100000010000000100001000110001
+00100000010000000100001000110100
+00100000010000000100001000110111
+00100000010000000100001000111010
+00100000010000000100001000111101
+00100000001000000100001001000000
+01101000000000001100011100010001
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000001100011100010001
+00100100011110100000000000000000
+00100000001000000100001000001111
+01101000000000001100011100010010
+11000001000000000000000000000000
+11000000000000101100001000010110
+00100000010000000100001000100101
+01110000010001110001001000000101
+01110000010001110001000100000101
+00100000011000000000000000000000
+00100000010000000100001000101100
+01110000010001110001001000000100
+01110000010001110001000100000101
+00100000011000000000000000000000
+01011000000000001000000000000110
+00100000010000000110010000010011
+00100000000000000000001111101000
+01110000010001110001000100000000
+01110000010001110001001000000000
+00100000001000000100000011100000
+01011000000000001010000000000110
+00100000010000000110010000010011
+01011000000000001010000000000101
+00100000001000000110010000010011
+01110000010001110001000100000000
+01101000000000001100011011100000
+11000000000000100100001000100000
+01011000000000000000000100000110
+00100000010000000110010000010011
+01011000000000001010000100000101
+00100000001000000110010000010011
+01110000010001110001000100000000
+01011000000000000000100100000110
+00100000001000000110010000010011
+01110000010001110001000100000101
+01110000010001110001001000000001
+00100000011000000000000000000000
+11011010011000000100011010000000
+11011010010000000100001010011011
+00100000001000000011001101101101
+11011010011000000100011010101100
+11011010010000000100001001100100
+00100000001000000011001101110100
+11011010011000000100011010101110
+11011010010000000100001001100110
+00100000001000000011001101110100
+11011010011000000100011010110000
+11011010010000000100001001101010
+00100000001000000011001101110100
+11011010011000000100011011000100
+11011010010000000100010001111000
+00100000001000000011001101101101
+11011010011000000100011011000110
+11011010010000000100001001011110
+00100000001000000011001101101101
+11011010011000000100011100000100
+11011010010000000100001001001001
+00100000001000000011001101101101
+11011010011000000100011100000111
+11011010010000000100001001001001
+00100000001000000011001101110100
+00100000011000000000000000000000
+01101000000000100100011011010011
+11000100000010111000000000000000
+01110000010001101101111100001010
+01101000000000001100011011110100
+01100000000000001100011100010101
+00100000011000000000000000000000
+11011010011000000100011011011111
+11011010010000000100001001010011
+00100000001000000011001101101101
+01101000000000001100011011110100
+01100000000000001100011100010101
+01011000000000000000000110010000
+01100000000000010100011100010110
+01100000000000010100011100011000
+11011010001000000000000000000000
+01101000000010001100011101111010
+00011000010000001000010000000001
+01100000000010001100011100010100
+01110000010001110001001100000001
+00100000011000000000000000000000
+01101000000000001100011011000101
+11000011100000010000000000000000
+01110000000010101001100100010010
+00100000010000000111110110001111
+11011000111000000000000000000000
+00100000001000000100000110111001
+00100000010000000100001011001010
+00100000001000000011010000001010
+00100000010000000011001111110110
+01101000000000001100011100011110
+00100100001110100100010010010010
+00100000001000000011010000001010
+11000101000100110111111000011101
+00100000001000000100001110000110
+01000100111101010100000000011101
+01110000010001101011010000000000
+00100000010000000100001110000110
+00100000010000000100000111000001
+00100000001000000100001010110000
+01101000000000110100000111010000
+00100000001110100011001111101011
+00100000010000000100001001111110
+01110000000000010110110100010111
+01101000000000001100011001011010
+00100100001110100011001111100001
+01110000000000010110110100000100
+00100000001000000011001111100001
+01101000000000010100011010101000
+01100000000000010100011010101110
+00100000010000000100001001111110
+00100000010000000011010000011000
+00100000001000000111110111110100
+01011000000000000000000011001000
+01100000000000010100011100010110
+01100000000000010100011100011000
+00100000001000000100001010000101
+01011000000000000000001111101000
+01100000000000010100011100010110
+01100000000000010100011100011000
+01101000000000001100011100100000
+11000000000000001100001010001010
+11000000000000010100001010001100
+11000000000000011100001010001110
+00100000011000000000000000000000
+01101000000000001100011011110000
+00100000001000000100001010001111
+01101000000000001100011011110001
+00100000001000000100001010001111
+01101000000000001100011011110010
+01100000000000001000101010100010
+00100000010000000100010010000010
+01101000000000001000101010100010
+01100000000000001100011100010101
+11011010001000000000000000000000
+01110000010001110001001100000001
+00100000001000000111110100011110
+11011010001000000000000000000000
+00100000001000000111110100011001
+11011010001000000000000000000000
+00100000001000000111110100010100
+00100000001000000100000111000001
+01110000010000011110001000000001
+00100000010000000011010000010110
+00100000010000000011010000010010
+01011000000000000000000000000000
+01100000000000010100011001111110
+01100000000000001100011010000000
+00100000001000000011010000001110
+00100000010000000100001101011111
+01101000000000001100011100100000
+01101000000010001100011100000011
+10011000010001100111110000000000
+00100000001000101100001010101011
+01101000000000001100001000010000
+11000000000110011100001001110001
+11000000000110100100001001111001
+00100000001000000100001010110000
+00100000010000000011110101010111
+11000110000100110000000000000000
+01101000000000001100011100011110
+00100100001110100100010010010010
+00100000011000000000000000000000
+01000100111101011100000000011101
+01101000000000010100011010000010
+11000010100001011100001010110111
+01101000000000100100011011010011
+11000011000011000100001010110111
+00011000000010100111111000000000
+01100000000000001100010010100001
+00100000010000000011010000011000
+01101000000000010100011010000111
+01100000000000010100011010101100
+01110000000000010110110100000110
+01011000000000000000000000000000
+01100000000000010100011010110000
+01100000000000010100011010101110
+11011000111000000000000000000111
+00100000010000000100001111001110
+00100000010000000100001111001010
+01101000000000001100000010010010
+00101111111011111111111000000001
+00100000010000001111110111110100
+01101000000000001100000010010010
+00101111111011111111111000000000
+00100000010000001111110111011101
+01101000000000100100011011010011
+11000010100011100100001000101110
+00100000001000000100001010000010
+01000100111101100100000000011101
+01101000000000001100000010010010
+00101111111011111111111000000001
+00100000010000001100001011010100
+01101000000000001100000010010010
+00101111111011111111111000000000
+00100000010000001100001011010111
+01101000000000100100011011010011
+11000010100011100100001000011010
+00100000001000000100010010000010
+01011000000000000000000000000000
+01100000000000010100011010101110
+00100000001000000111110111111010
+01011000000000000000000000000000
+01100000000000010100011010101100
+00100000001000000111110111100010
+01101000000000100100011011010011
+11000100000000111000000000000000
+11011000111000000000000000000111
+00100000010000000100001111010010
+00100000010000000100001011101000
+00100000010000000100001011111011
+01101000000000100100011011010011
+11000010100010011100010000110101
+11000010100010100100001011100100
+00100000011000000000000000000000
+11011000010000000000000001011000
+11011010001000000100011100100000
+11011010010000000000000000000000
+00100000001000000110010111010001
+01101000000000001000000110000101
+11000000000110100100001011101100
+11000000000110011100001011101111
+00100000011000000000000000000000
+01100000000000001100011011000111
+01101000000000110000010001001111
+00100000001000000100001011110001
+01100000000000001100011011000111
+01101000000000110000000001000000
+01100000000000110100011011001000
+01101000000000111100011011000111
+11011000110000000100011100100001
+11011111001000000000000000000011
+11101000110010111000000000000000
+10011000010001100111110000000000
+00100000001000101100001100010000
+00011000110000001000110000010110
+11000010000000000100001011110101
+00100000011000000000000000000000
+11011010001000000100011100100001
+01101000000000001100011100100000
+00011111111000001111111111111111
+00011111111011111111111000011101
+10011010001000001010001000000000
+01101000000000001000000110000101
+11100010001000001000000000000000
+11000000000110100100001100000101
+11000000000110011100001100001100
+00100000011000000000000000000000
+01101000000000110000010001001111
+11100000101000110000000000000000
+11011000110000000100010000011001
+00100000010000000111111010111111
+01101000000000110100010010100000
+11100000101000110000000000000000
+00100000011000000000000000000000
+01101000000000110000000001000000
+11100000101000110000000000000000
+11011000110000000100000110111110
+00100000001000000111111010111111
+00011000110000001000110111111010
+00011000110000100000101000000000
+01101000000010110100011011001000
+00011000010000001000010000000011
+11100000101010110000000000000000
+00100000011000000000000000000000
+11011000010000000000000001011000
+11011010001000000100011100100000
+11011010010000000000000000000000
+00100000010000000110010111011111
+11011010001000000100011100100001
+01101000000000001100011100100000
+01101000000010001100011100000011
+10011000010001100111110000000000
+00100000011000101000000000000000
+00011111111000001111111111111111
+00011111111011111111111000011101
+10011010001000001010001000000000
+11101010001000001000000000000000
+01100000000000001100001000010000
+11000000000110011100001100100111
+11000000000110100100001100101100
+00100000011000000000000000000000
+11101000110000110000000000000000
+01100000000000110100000111010000
+11011000101000000100000110111110
+00100000010000000111111010111111
+00100000001000000110011111010111
+11101000110000110000000000000000
+01100000000000110100000111010000
+11011000101000000100010000011001
+00100000010000000111111010111111
+11101000110000110000000000000000
+01100000000000110100010010100000
+00100000011000000000000000000000
+01101000000000001100011011110101
+11000010100000101100001101001001
+11000010100000110100001101011001
+00100000001000000100001100110111
+00100000010000000100000010000011
+11000000000000110100001100111110
+01110000010001101101100000011110
+01101000000000001100011011011001
+11000001000000001000000000000000
+01110000010001101101100100000001
+00100000011000000000000000000000
+00100000010000000100001101000011
+01101000000000001100011011011001
+11000001000000000000000000000000
+01110000010001101101100100000000
+00100000001000000100001111000000
+01101000000000001100011011011000
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000001100011011011000
+00100100011110100000000000000000
+00100000001000000100001101110000
+01101000000000001100011011101101
+11000001011111111000000000000000
+01101000000010001100011011101101
+00100000010000000110100000011101
+00100000001000001100001101010100
+01101000000000001100011011011001
+11000001000000001000000000000000
+01110000010001101101100100000001
+01101000000000100100011011010011
+11000011100000110000000000000000
+00100000001000000100001101110000
+01101000000000001100011011011001
+11000001000000000000000000000000
+01110000010001101101100100000000
+11011000111000000000000000000110
+00100000001000000100001111010010
+01101000000000001000000000000100
+11000100000000110000000000000000
+01101000000000001100011100100000
+11000000000000001100001101101001
+11000000000000010100001101101100
+00100000011000000000000000000000
+01101000000000001000000000000100
+11000100000000110000000000000000
+01101000000010001100011011101101
+00100000010000000110100000011101
+00100000001000001100001101100110
+01110000010001110010000000000001
+00100000011000000000000000000000
+01101000000000001100011100000011
+01100000000000001100011100100000
+00100000011000000000000000000000
+01101000000010001100011011101101
+00100100001000001100001101110000
+00100000011000000000000000000000
+01101000000010001100011011101101
+00100000010000000110100000011101
+00100000001000001100001101010100
+00100000011000000000000000000000
+01101000000010001100011100100000
+00011000010000001000010000000001
+01101000000000001100011011010010
+10011000010001100111110000000000
+00100100010000010100001111001100
+01100000000010001100011100100000
+01110000010000011011110100000000
+00100000010000000100001101111010
+00100000010000000100001111000000
+00100000001000000100001101111110
+11011000010000000000000000000001
+11011010001000000100011100100000
+11011010010000000000000000000000
+00100000001000000110011000000110
+00100000010000000100001110000001
+00100000010000000100001111000010
+00100000001000000100000111010111
+01101000000000010100011010000010
+11000010100000111100001110010010
+11000010100001001011010000000010
+11000010100000000011001111101001
+00100000001000000100001011001010
+01000100111101101100000000011101
+01011000000000000000000000000000
+01100000000000010100011010110000
+01101000000000010100011010000010
+11000010100001001011010000000010
+01101000000000010100011010000010
+11000010100000000011001111101001
+00100000011000000000000000000000
+01011000000000000000000000000001
+01100000000000110000000001000000
+01110000000000011000010100110011
+00100000001000000100001011011111
+00100000010000000100001111000100
+00100000001000000111111000101111
+01101000000000001100011011101100
+11000001011111111000000000000000
+01101000000010001100011011101100
+00100000010000000110100000011101
+00100000001000001100001110011111
+01101000000000001100011010000101
+01100000000000001100011011011010
+01101000000000001100011011011011
+11000001000000001000000000000000
+01110000010001101101101100000001
+00100000001000000100001111001010
+00100000010000000100001110110101
+01101000000000001100011011011011
+11000001000000000000000000000000
+01110000010001101101101100000000
+00100000010000000111111000101111
+00100000001000000100001111001000
+01101000000000001100011011110101
+11000010100000100100001110010100
+00100000010000000100000010000011
+11000000000000111100001110101111
+01101000000000001100011010000101
+01100000000000001100011011011010
+01101000000000001100011011011011
+11000001000000001000000000000000
+01110000010001101101101100000001
+00100000001000000100001111001010
+00100000010000000100001110110101
+01101000000000001100011011011011
+11000001000000000000000000000000
+01110000010001101101101100000000
+00100000010000000111111000101111
+00100000001000000100001111001000
+11011010011000000100011011011010
+11011010010000000100001110111000
+00100000001000000011001101101101
+11011000111000000000000000000110
+00100000010000000100001111001110
+00100000010000000011001101010111
+00100000001000000100001001101100
+11011000111000000000000000000001
+00100000001000000100001111001110
+11011000111000000000000000000001
+00100000001000000100001111010010
+11011000111000000000000000000000
+00100000001000000100001111001110
+11011000111000000000000000000000
+00100000001000000100001111010010
+11011000111000000000000000000010
+00100000001000000100001111001110
+11011000111000000000000000000010
+00100000001000000100001111010010
+11011000111000000000000000000101
+00100000001000000100001111001110
+11011000111000000000000000000101
+00100000001000000100001111010010
+11011000010000000000000000000001
+00100000011000000000000000000000
+01101000000000100100011011010011
+11111001001000000111111000000000
+01100000000000100100011011010011
+00100000011000000000000000000000
+01101000000000100100011011010011
+11111001001111111111111000000000
+01100000000000100100011011010011
+00100000011000000000000000000000
+01101000000000100100011011010011
+11000100000011010000000000000000
+01101000000000001100011011001110
+00011111111000001111111000000001
+01100000000000001100011011001110
+00011111111001100111110000001010
+00100000011000010000000000000000
+01110000010001101100111000000000
+00100000010000000110100011101011
+00100000010000000110100100001000
+01100000000000010100011100001111
+11011010001000000100011100001001
+00100000010000000110100100110000
+01101000000000001100001000110001
+11000010100000001100010010100000
+11000011000000000100001111101001
+00100000001000000100001111100111
+11011000111000000000000000000100
+00100000001000000100001111001110
+11011000111000000000000000000100
+00100000001000000100001111010010
+01101000000000100100011011010011
+11000100000000100000000000000000
+01101000000000001100011011101111
+01100000000000001100011100010101
+01101000000000001100011011001111
+00011111111000001111111000000001
+01100000000000001100011011001111
+00011111111001100111110000010100
+00100100010000010100001111111001
+11000000000000010100001111111011
+11000000000000100100001111111110
+11000000000000110100001111111011
+11000000000001000100001111111110
+00100000011000000000000000000000
+01110000010001101100111100000001
+00100000001000000100001111111110
+11011010001000000000000000000000
+01110000010001110001001100000010
+00100000001000000111110100010100
+11011010001000000000000000000000
+01110000010001110001001100000010
+00100000001000000111110100011001
+00100000010000000011111110010111
+00100100011101000000000000000000
+11011010001000000000000000000111
+11011010010000000100011010011010
+00100000011000000000000000000000
+01101000000000001100011110001011
+00100000011110100000000000000000
+01101000000010001100011011100111
+00100000010000000110100000011101
+00100000010000001100010000010000
+01101000000000001100011100000100
+00100100011110100000000000000000
+00100000010000000100000010000011
+00100100011110100000000000000000
+00100000001000000010110110000011
+01101000000000001100011011100111
+11000001011111111000000000000000
+01110000010001110000010000001010
+00100000011000000000000000000000
+00100000010000000100010000100011
+01101000000000010100011101111000
+11011000010000001010101001010101
+10011000010001100111110000000000
+00100000001000101100010000101011
+01100000000010010100011101111000
+00100000010000000100010000011100
+00100000001000000100010000110101
+01101000000000110100010010100000
+01100000000000110100011100111000
+00011111111000001111111100000000
+01100000000000110100011101010101
+00011111111000001111111100000000
+01100000000000110100011101110010
+00100000011000000000000000000000
+01011000000000000100011101111000
+11011000010000000100011100100000
+10011000010001100000010000000000
+01101000000000011100011100000000
+10011000010000001111111000000000
+11011000010000000000000000000010
+11011010001000000100011101111000
+00100000001000000110010101100010
+01011000000000000100011101111111
+11011000010000000100011100100000
+10011000010001100000010000000000
+01101000000000011100011100000000
+11011010001000000100011100100000
+00100000010000000110010101100010
+00100000010000000100001100011010
+01101000000000100100011101111011
+00100000010000000010110001111010
+00100000001000000011001000101100
+01011000000000000100011101111111
+11011000010000000100011100100000
+10011000010001100000010000000000
+11011010001000000100011100100000
+01101000000000011100011100000000
+00100000001000000110010100010100
+11011000010000000000000000000001
+11011010001000000100011101111010
+11011010010000000000000001011010
+00100000001000000110010111010001
+11011000010000000000000000000001
+11011010001000000100011101111010
+11011010010000000000000001011010
+00100000001000000110010111011111
+11000110000100110000000000000000
+01101000000000100100011011010011
+11000100000010110000000000000000
+01101000000000001100011100000101
+00011111111000001111111000000001
+00011111111000010111111000000111
+01100000000000001100011100000101
+11000001100000111000000000000000
+01101000000000010100011010000010
+11000010100000000100010001001111
+11000010100001001100010001001111
+00100000011000000000000000000000
+01000100111101110100000000011101
+01101000000000001100011100000110
+00100100011110100000000000000000
+01101000000000100100011011010011
+11000100000001000000000000000000
+01101000000000001100011010100101
+00100000010000000110001111111011
+01100000000000001100011010100110
+00011111111001100111110000010000
+00100000001000010100010001011011
+01110000010001110000011000000000
+00100000011000000000000000000000
+01110000010001110000011000011110
+00100000011000000000000000000000
+11011010011000000100011100000110
+11011010010000000100010001100000
+00100000001000000011001101101101
+01101000000000001100011010100101
+00100000010000000110010000010100
+00011111111001100111110000010000
+00100100011000010000000000000000
+01101000000000100100011011010011
+11000100000001000000000000000000
+11011000111000000000000000001000
+00100000010000000100001111010010
+01110000010000010111001000000000
+01110000010001101100010000011110
+00100000010000000100010010000010
+01101000000000100100011011010011
+11000010100010101100010001110001
+01101000000000001100011100100000
+11000000000000001100010010001001
+11000000000000010100010001110110
+00100000011000000000000000000000
+01101000000000001100011100100000
+11000000000000001100010010001001
+11000000000000010100010010001100
+11000000000000011100010010001111
+00100000011000000000000000000000
+01101000000000001100011011110000
+00100000001000000100001010001111
+01110000010000010111001000100000
+00100000001000000100010010000010
+01101000000000001100011011110000
+11000001011111111000000000000000
+01100000000000001100011100010101
+00100000001000000100001010010110
+01101000000000001100011011110001
+11000001011111111000000000000000
+01100000000000001100011100010101
+00100000001000000100001010010110
+00100000010000000100001010010110
+00100000010000000100010001111010
+00100000010000000100010001111110
+01101000000000001100011011110010
+11000001011111111000000000000000
+01100000000000001100011100010101
+00100000001000000100001010010110
+01101000000000001100011011110000
+01100000000000001100011100010101
+00100000001000000100001010011000
+01101000000000001100011011110001
+01100000000000001100011100010101
+00100000001000000100001010011000
+01101000000000001100011011110010
+01100000000000001100011100010101
+00100000001000000100001010011000
+01000100111101111100000000011101
+01101000000000001100011100011110
+00011111111000001111111111111111
+01100000000000001100011100011110
+01101000000010001100011100100000
+00011000010000001000010000000001
+01101000000000001100011011010010
+10011000010001100111110000000000
+00100100010000010100001111001100
+01100000000010001100011100100000
+01110000010000011011110100000000
+00100000010000000100001101111010
+00100000010000000100001011111011
+00100000001000000100001010100010
+00100000010000000100010010000010
+01011000000000000000000000000000
+01100000000001000000000010100001
+00100000001000000010101100011111
+00100000011101011000000000000000
+01101000000100001000000010000001
+00011111111000010111111011110000
+01100000000100001000000010000001
+00100000010000000110100101001000
+01011000000000000100010011100110
+01100000000000010100000111101011
+01011000000000000100010011101001
+01100000000000010100000111101101
+01011000000000000100010011101111
+01100000000000010100000111110011
+01011000000000000100010011110010
+01100000000000010100000111110101
+01011000000000000011001111010000
+01100000000000010100000111101001
+00100000010000000010110001111010
+01011000000000000100010111000010
+00011010011000001000101011011000
+11100000101000010000000000000000
+01011000000000000100010011101010
+00011010011000001000101011011010
+11100000101000010000000000000000
+01011000000000000100010011101001
+00011010011000001000101011011100
+11100000101000010000000000000000
+01011000000000000100010100001110
+01100000000000010100000111111101
+01011000000000000100010011011010
+01100000000000010100011101011011
+01011000000000000100010011010110
+01100000000000010100011101011111
+01011000000000000100010101100000
+01100000000000010100011100001111
+01000100111110000100000000011110
+00100000010000000100010011100010
+00100000010000000111111000111000
+01110000010000010111001000000010
+01101000000000001100011100101011
+01100000000000001100011010011010
+11000000000000000100010011010101
+01101000000000001100011100101100
+01100000000000001100011010000110
+00100000010000000100010011011011
+00100000010000000111110011010011
+00100000010000000111110011011101
+01110000010001110101011100000001
+01101000000000010100011010000010
+11000011100001100000000000000000
+00100000001000000011010000001010
+01110000010001110101011100000010
+00100000010000000100010011011011
+11011010001000000000000000000000
+00100000010000000111110100011110
+00100000001000000010111011100100
+00100000001000000100010011011011
+01000100111110001100000000011110
+01101000000000001100011100101001
+11000000111111111100010011100000
+01101000000010001100011100000110
+00100000001000000110100000001110
+01100000000000001100011100000110
+00100000001000000100010011011110
+00100000010000000010110010011101
+01101000000000010100011101010011
+01100000000000010100011101010101
+00100000001000000100010100010101
+00100000010000000110100000110101
+00100000010000000100010011101001
+00100000001000000011010000001010
+00100000001000000110100101101100
+01101000000000001100011101100101
+00100000011110100000000000000000
+00100000001000000010110110000011
+00100000011000000000000000000000
+00100000001000000110100101111000
+00100000010000000100010101000100
+00100000010000000100010100000011
+00100000001000000100010011101110
+00011010011000100111111000000000
+11000000000101101011010000110001
+11000000000010000011010000011010
+11000000000111001100010011111011
+11000000000111100100010011111111
+11000000000111010100010011111001
+00100000011000000000000000000000
+01110000010001110110010100000001
+00100000011000000000000000000000
+01110000010001110110010100000001
+01110000010001110110001100000001
+01110000010001110110010000000001
+00100000011000000000000000000000
+01110000010001110110010100000001
+01110000010001110110001100000001
+01110000010001110110010000000001
+00100000011000000000000000000000
+01101000000000001100011101100011
+11000001000000000000000000000000
+01101000000000001100011101100010
+11000001000000001000000000000000
+01110000010001110110001000000001
+11011010001000000000000000000000
+00100000001000000111110100011001
+11011010001000000000000000000000
+00100000010000000111110100011001
+00100000010000000100010011011011
+00100000001000000011010000001010
+00100000010000000011001101111011
+00100000001000000100010100010000
+01101000000000001100011100101101
+00100000011110100000000000000000
+11011010011000000100011101010101
+11011010010000000100010100001010
+00100000001000000011001101110100
+00100000010000000100010100011010
+01100000000010010100011100011010
+00100000010000000100010100011111
+01100000000010010100011100011100
+00100000011000000000000000000000
+01101000000000010100011100011010
+01100000000000010100011100011110
+00100000010000000100010101000000
+00100000010000000100010100100101
+01100000000000001100011100100100
+01101000000000010100011100011100
+01100000000000010100011100011110
+00100000010000000100010101000010
+00100000010000000100010100100101
+01100000000000001100011100100101
+00100000011000000000000000000000
+01101000000000010100011100100000
+00011111111000100010001000000000
+01101000000000010100011100011110
+00100000010000000100010100101110
+01101000000000001100011100011001
+00100100001110100100010100110111
+00100100011000010000000000000000
+01101000000010010100011100011110
+00100000011000000000000000000000
+10011000010001100111111000000000
+00100000001000010100010100110100
+00011111111001100111111000000000
+01110000010001110001100000000001
+10011010001001100111110000000000
+00100000011000000000000000000000
+01110000010001110001100000000000
+10011010001001100111110000000000
+00100000011000000000000000000000
+00100100001000010100010100111110
+01101000000000001100011100011000
+00100100001110100100010100111100
+01011000000000000000000000000001
+00100000011000000000000000000000
+01011000000000000000000000000010
+00100000011000000000000000000000
+01011000000000000000000000000000
+00100000011000000000000000000000
+01110000010000100010111000110011
+00100000001000000110100011101011
+01110000010000100010111000110100
+00100000001000000110100011101011
+01101000000000001100011100101010
+11000001100000001000000000000000
+01000100111110010100000000011110
+01110000010001110001100100000001
+00100000010000000100010100011010
+01101000000000010100011100100100
+01101000000010010100011100100010
+10011000010001100111110000000000
+00100000011000101000000000000000
+01100000000000010100011100100010
+00100000010000000100010101010000
+00100000001000000100010101010100
+01101000000000001100011100100100
+00100000001110100100010101011010
+00011111111000001111111111111111
+00100000001000000100010101010111
+01101000000000001100011100100101
+00100000001110100100010101011101
+00011111111000001111111000000001
+00011111111000100000111000000000
+11011010001000000000000000000001
+00100000001000000100010101100000
+11011000111000000000000000000000
+11011010001000000000000000000000
+00100000001000000100010101100000
+11011000111000000000000000000010
+11011010001000000000000000000000
+00100000001000000100010101100000
+00011010001000100111111000000000
+01100000000000001100011101100001
+01101000000000001100011101100011
+11000000000000000010111011100100
+01101000000000010100011101010011
+01100000000000010100011101010101
+01101000000000001100011101100001
+00100000001110100100010110000000
+01000100111110011100000000011110
+11011010001000000000000000000000
+00100000010000000111110100010100
+00011000111000100111111000000000
+11000000000000100100010110100011
+11000000000000101100010110100101
+11000000000000110100010110100111
+00100000010000000100010110001011
+11000000000000000100010101110100
+11000000000000010100010101111010
+11000000000000011100010101110100
+00100000011000000000000000000000
+00011000111000100111111000000000
+11000000000000000100010110001111
+11000000000000001100010110010001
+11000000000000010100010110010011
+11000000000000011100010110010101
+00100000011000000000000000000000
+00011000111000100111111000000000
+11000000000000000100010110010111
+11000000000000001100010110011010
+11000000000000010100010110011101
+11000000000000011100010110100000
+00100000011000000000000000000000
+01000100111110100100000000011110
+11011010001000000000000000000000
+00100000010000000111110100011001
+00011000111000100111111000000000
+11000000000000100100010110111100
+11000000000000101100010110111100
+00100000010000000100010110001011
+11000000000000000100010110101001
+11000000000000010100010110101111
+11000000000000011100010110101001
+00100000011000000000000000000000
+01101000000000001100011100101000
+01101000000010001100011100100111
+10011000010000011111111000000000
+00100000011000000000000000000000
+01110000010001110011010000000001
+00100000001000000100010110111110
+01110000010001110011010000000010
+00100000001000000100010110111110
+01110000010001110011011000000001
+00100000001000000100010110111110
+01110000010001110011011000000010
+00100000001000000100010110111110
+01110000010001110011010000000001
+01110000010001110011011000000001
+00100000001000000100010110111110
+01110000010001110011010000000010
+01110000010001110011011000000010
+00100000001000000100010110111110
+01110000010001110011010000000010
+01110000010001110011011000000001
+00100000001000000100010110111110
+01110000010001110011010000000001
+01110000010001110011011000000010
+00100000001000000100010110111110
+01110000010001110011100000000001
+00100000001000000100010110111110
+01110000010001110011100000000010
+00100000001000000100010110111110
+01110000010001110100000100000001
+00100000001000000100010111000000
+00011000111000100111111000000000
+11000000000000000100010110110101
+11000000000000001100010110110101
+11000000000000010100010110110111
+11000000000000011100010110110111
+00100000011000000000000000000000
+00011000111000100111111000000000
+11000000000000000100010110111001
+11000000000000001100010110111001
+11000000000000010100010110111001
+11000000000000011100010110111001
+00100000011000000000000000000000
+01110000010001110011010000000000
+00100000001000000100010110111110
+01110000010001110011011000000000
+00100000001000000100010110111110
+01110000010001110011010000000000
+01110000010001110011011000000000
+00100000001000000100010110111110
+01110000010001110011100000000000
+00100000001000000100010110111110
+11011010001000000100011100101110
+00100000001000000111111000111101
+11011010001000000100011100111011
+00100000001000000111111000111101
+01101000000000001100011101100100
+11000000000000001100010111001100
+11011010001000000100011101000100
+00100000010000000111111001010100
+00100100001101000100010111010001
+11011000110000000100011101000100
+11101000110000001000000000000000
+00011111111000100010001000000000
+11011010010000000100011101000101
+00100000011000000000000000000000
+01110000010001110110010000000000
+01111000001101000111110000000000
+11011010001000000000000000000001
+11011010010000000100011101100110
+00100000011000000000000000000000
+01101000000000001100011101000111
+11000000000000100100010111010101
+11000000000000101100010111010101
+00100000011000000000000000000000
+01101000000000001100011101001010
+00100100001110100100010111011100
+01101000000000001100011101001100
+00100100001110100100010111011100
+01101000000000001100011101001110
+00100100001110100100010111011100
+00100000011000000000000000000000
+01111000001101000111110000000000
+00100000001000000100010111000111
+00100000011101011000000000000000
+01101000000100001000000010000001
+00011111111000010111111011111100
+01100000000100001000000010000001
+01011000000000000100011010110100
+01100000000000010100000111101011
+01011000000000000100011010110011
+01100000000000010100000111101101
+01011000000000000011010000001010
+01100000000000010100000111110111
+01011000000000000100011010110001
+01100000000000010100000111110011
+01011000000000000100011000010010
+01100000000000010100000111110101
+01011000000000000100011000001100
+01100000000000010100000111101001
+01011000000000000100011101101010
+01100000000000010100000111111001
+01011000000000000100011010000110
+01100000000000010100000111111101
+01011000000000000100011100101001
+01100000000000010100011011100111
+01011000000000000100100000000110
+01100000000000010100011011100010
+01011000000000000100100000000111
+01100000000000010100011011100100
+00100000010000000101011110100011
+00100000010000000100011111011010
+00100000010000000100011110001000
+00100000010000000100011101101101
+00100000010000000110100101001000
+00100000010000000100011101111010
+00100000010000000111111000111000
+00100000010000000111110100001000
+00100000010000000100011110010011
+00100000010000000100011111000111
+01000100111110101100000000011110
+00100000010000000100011001001111
+01101000000000001100011011011101
+11000000000000000100011000001001
+01101000000000001100011011011110
+01100000000000001100011010000110
+00100000001000000100100000001110
+01110000010001101000011011111111
+01110000010001101101111100000001
+00100000001000000100011011011001
+01101000000000001100011011011111
+11000000000000010011001111010000
+00100000010000000101001001111110
+01101000000000001100001001010110
+00100100001110100011001111010000
+00100000001000000011001111010010
+00011010011000100111111000000000
+11000000000000001100011000100110
+11000000000000010100011000101001
+11000000000000100100011000110001
+11000000000000101100011000110011
+11000000000000110100011000110101
+11000000000000111100011000111000
+11000000000010010100011000111100
+11000000000010011100011001000100
+11000000000100111100011001000101
+11000000000101110100011001001000
+11000000000111101100011001001001
+11000000000010100100011001011000
+11000000000010101100011001011100
+11000000000111111100011001011111
+11000000001000000100011001100101
+11000000000010000100011001101011
+11000000000101100100011001101100
+11000000000101101100011001110111
+00100000011000000000000000000000
+01110000010001101010110100000000
+01110000010001101010110000000000
+00100000011000000000000000000000
+00100000010000000100011000101011
+00100000001000000100011000110001
+01110000010000011110001000000000
+01110000010001101000000000000000
+01110000010000100000010100000000
+01110000010001101010110000000000
+01110000010001101010110100000000
+00100000001000000111111000111000
+00100000010000000011001110101001
+00100000001000000100011011000010
+00100000010000000100011010110110
+00100000001000000011010000001000
+01011000000000000000000000000010
+01100000000000001100011010000000
+00100000011000000000000000000000
+01110000010001101010110000000000
+01011000000000000000000000000001
+01100000000000001100011010101101
+00100000011000000000000000000000
+01101000000000001100000111100010
+11000001000000001000000000000000
+01110000010000011110001000000001
+00100000010000000011010000010110
+00100000010000000011010000010100
+00100000010000000100011010110110
+00100000010000000011010000001000
+00100000001000000011010000001110
+00100000001000000100011000110001
+01011000000000000000000000000101
+01100000000000001100011010101100
+00100000011000000000000000000000
+00100000001000000011001111001101
+11011010010000000000000000000000
+01101000000000001100001000010111
+00011111111011111000010000100010
+01101000000000010100001000010101
+00011111111000100010001000000000
+00100000001000000110011000000110
+11011010010000000000000000000000
+01101000000000001100011010011010
+11000100000000001000000000000000
+01101000000000001100001000010111
+00100000011110100000000000000000
+00011111111011111000010000100010
+01101000000000010100001000010101
+00011111111000100010001000000000
+00100000001000000110010111011111
+00100000010000000100011010110110
+01011000000000000000000000000000
+01100000000000010100011010110111
+00100000001000000011010000001000
+00100000010000000111111000111000
+01110000010001101011000000000000
+00100000001000000100011011011001
+00100000010000000111111000111000
+01110000010001101011000000000001
+01101000000001000100011011000001
+01100000000001000100010010010110
+00100000010000000011010000010110
+00100000001000000101101010111111
+01101000000000010100010100001001
+11000001000000000000000000000000
+01101000000001000100011011001001
+00100000011110100000000000000000
+01100000000001000100010010010110
+00100000001000000101101010111111
+00100000001000000100100000011111
+01101000000000001100011011011101
+11000001000000000000000000000000
+01101000000000001100011011011111
+11000001100000001000000000000000
+00100000010000000100011001110010
+00100000001000000011010000000110
+01110000010010001101111100000001
+11011111001000000000000000001011
+11011000101000000100100011100000
+11011000110000000100100011001001
+00100000001000000111111100000001
+01101000000000001100011011011101
+11000001000000000000000000000000
+01101000000000001100011011011111
+11000000000000001100011001111100
+00100000001000000100100000011011
+01101000000000001100100011011111
+11000001100000001000000000000000
+01110000010010001101111100000000
+01101000000000010100011010000010
+11000010100000000011010000001000
+11000010100001001011010000001000
+11011111001000000000000000001011
+11011000110000000100100011100000
+11011000101000000100100011001001
+00100000001000000111111100000001
+00100000010000000100011010001100
+00100000010000000100011010010011
+00100000010000000100011010011110
+00100000010000000100011010100110
+00100000010000000100011010101001
+00100000001000000100011010101100
+11011010011000000100011011011011
+11011010010000000100011010001111
+00100000001000000011001101110100
+01110000010001101101111100000010
+00100000010000000011010000001000
+00100000010000000100011011110100
+00100000001000000100100000001011
+11011010011000000100100011101100
+11011010010000000100011010010110
+00100000001000000011001101101101
+01101000000000010100011010000010
+11000010100001001100100000001011
+11000010100000000100100000001011
+01101000000000001100100011001001
+11000000000000001100100000001011
+11000000000000100100100000001011
+11000000000000101100100000001011
+00100000001000000011010000001010
+11011010011000000100011010101100
+11011010010000000100011010100001
+00100000001000000011001101101101
+01101000000000001000001001111111
+01111001001000000111111000000000
+01111001001000000111111000000111
+01100000000000001000001001111111
+00100000011000000000000000000000
+11011010011000000100011010000000
+11011010010000000100011000111100
+00100000001000000011001101101101
+11011010011000000100011010101101
+11011010010000000011001111101001
+00100000001000000011001101101101
+01101000000000001100011011011111
+11000001100000001000000000000000
+11011010011000000100011010110111
+11011010010000000100011011000010
+00100000001000000011001101110100
+00100000010000000100011100111010
+00100000001000000110100101111000
+00100000001000000110100101101100
+00100000010000000110100000110101
+00100000001000000100011010110011
+01101000000000001100011010011010
+11000010100000001100011010111110
+11000010100000000100011010111010
+00100000011000000000000000000000
+01101000000000010100011011010111
+01100000000000010100011011011001
+01100000000000010100011011011011
+00100000001000000011001111111000
+01101000000000010100011011010011
+01100000000000010100011011011001
+01100000000000010100011011011011
+00100000001000000011001111110000
+01101000000000001100011011011111
+11000001100000001000000000000000
+01101000000000001100011010011010
+11000010100000001100011011001000
+11000010100000000100011011001100
+00100000011000000000000000000000
+01101000000000010100011011010001
+01100000000000010100011011011001
+01100000000000010100011011011011
+00100000001000000011001111101011
+01101000000000010100011010000010
+11000011100001001000000000000000
+01101000000000010100011011010101
+01100000000000010100011011011001
+01100000000000010100011011011011
+01101000000000010100011010110011
+00100000010000000100011011110000
+00100000010000000011010000000100
+01101000000000100100011010111101
+01100000000000100100100011001100
+01101000000000010100011010000010
+11000011100001011000000000000000
+00100000001000000011001111111010
+01101000000000001100011011011111
+11000001100000001000000000000000
+01101000000000001100011010011010
+11000010100000001100011011011111
+11000010100000000100011011100100
+00100000011000000000000000000000
+00100000010000000100011011111000
+00100000001110100100011011000010
+00100000010000000011010000000110
+00100000010000000011001111110000
+00100000001000000011001111100001
+01101000000000010100011010110111
+01101000000010010100011010110101
+01100000000010010100011010110111
+00100100011110100000000000000000
+01101000000000010100011010110001
+00100000010000000100011011110000
+00100000010000000011010000000100
+01101000000000100100011010111001
+01100000000000100100100011001100
+01101000000000010100011010000010
+11000011100001011000000000000000
+00100000001000000011001111111010
+01100000000000010100000101010100
+00011111111000001111111111111100
+01100000000000010100010010000010
+00100000011000000000000000000000
+01101000000000010100011010000010
+11000010100001001011010000000010
+11000010100000000011001111101001
+00100000001000000100011010110110
+01101000000000001100001000010111
+00011111111000100111001000000000
+01101000000000010100001000010101
+00011111111000100010001000000000
+11101010001000010000000000000000
+11000000000000000100011100000001
+00011010001000001010001000100010
+11000010000000000100011011111100
+00100000001000000111111111110001
+11101000110000110000000000000000
+01100000000000110100000111010000
+00011000110000001000110000001010
+11011000101000000100000110111110
+00100000010000000111111010111111
+00100000010000000110011111010111
+00100000001000000111111111101111
+00100000010000000111111111101001
+01101000000000010100011010000010
+11000010100000000100011100001101
+11000010100001001100011100010000
+00100000011000000000000000000000
+01101000000000001100001001010011
+11000001100111111000000000000000
+00100000001000000111111111100111
+01101000000000001100011010110000
+00100000011110100000000000000000
+00100000001000000111111111100111
+00100000010000000111111111101001
+01101000000000010100011010000010
+11000011100000000000000000000000
+11000011100001001000000000000000
+00100000001000000111111111100111
+01101000000000001100011010011010
+11000010100000001100011100011100
+11000010100000000100011100011111
+00100000011000000000000000000000
+01101000000000001100000010010011
+11000001100000011000000000000000
+00100000001000000100011011011001
+00100000001000000100011011011001
+01111000010101100111110000000000
+01101000000000010100011011011001
+01100000000000010100011011011011
+00100000010000000100011100010011
+00100000001101000100011100011000
+00100000010000000100011100001000
+00100100011101000000000000000000
+01111000001101100111110000000000
+00100000011000000000000000000000
+00100000010000000100011100100000
+00100100011101100000000000000000
+00011010001000100111111000000000
+00100000001110100100011100110000
+00100000010000000011010000000110
+11011010011000000100011011110001
+00100000001000000100011100110010
+00100000010000000011010000001000
+11011010011000000100011100011001
+11011111111000000000000000000101
+10011000111011111111111000000000
+10011010011000001010011000000000
+11101010011000001000000000000000
+00100000011110100000000000000000
+00100000010000000100011101100010
+00011010011000001010011000000001
+00100000001000000100011100110101
+01101000000000010100011010000010
+11000010100001001100011100111110
+11000010100000000100011101001110
+00100000011000000000000000000000
+00100000010000000101100010010010
+00100100011110100000000000000000
+00100000010000000100011101100101
+00100100011101000000000000000000
+00011111111000001111111111111111
+00011111111011111111111000000101
+11011000010000000100011101000001
+10011000010000001000110000000000
+11101000110000001000000000000000
+00011111111000100010001000000000
+11101000110010010000000000000000
+00100000010000000111111010100101
+00100000010000000101101001100100
+00011010001000100111001000000000
+00100000010000000111111010011111
+00100000001000000111111100000001
+00100000010000000101001001110001
+00100100011110100000000000000000
+00100000010000000100011101100101
+00100100011101000000000000000000
+00011111111000001111111111111111
+00011111111011111111111000000101
+11011000010000000100011110100000
+10011000010000001000110000000000
+11101000110000101000000000000000
+01100000000000101100011110011011
+01101000000000001100011110011011
+00011111111000100010001000000000
+00100000010000000100110101100011
+01101000000000010100001001001110
+11100000101000010000000000000000
+01011000000000000000000010100001
+11100000101000001000000000000000
+01101000000000100100011110011100
+11100000101001001000000000000000
+00100000011000000000000000000000
+01100000000000001000101010011010
+11011010001000000000101010011010
+00100000001000000111111000111101
+11011010001000000000101010011010
+00100000010000000111111001010100
+00100100011101000000000000000000
+01101000000000001000101010011010
+00100000011000000000000000000000
+01101000000000010000010001111000
+11000000000011000100011001011111
+00100000011000000000000000000000
+01011000000000000000000000000010
+01100000000000001100100011101011
+01011000001000000000000000001000
+01100000000000100100011011000001
+01011001001011000000000000000101
+11100000101000100000000000000000
+01110000010001001010011000010111
+01011000000000000000000000011011
+01100000000000010100010011111010
+00100000010000000101100000010000
+00100000010000000101100000101100
+00100000010000000101100000111001
+00100000001000000101100000011000
+11011111001000000000000000101000
+11011000101000000100011101000001
+11011000110000001001010010011111
+00100000010000000111111011110100
+11011111001000000000000000101000
+11011000101000000100011110100000
+11011000110000001001010011000111
+00100000001000000111111011110100
+11011111001000000000000101111110
+11011000110000001001000100111010
+00100000001000000111111011110100
+11011111001000000000000111100111
+11011000110000001001001010111000
+00100000001000000111111011110100
+00100000010000000100011110101110
+00100100011101000000000000000000
+01101000000000001100011010011111
+00100000010000000100011110010000
+01101000000000001100011010100000
+00100000010000000100011110010000
+01101000000000001100011010100001
+00100000001000000100011110010000
+00100000011110100000000000000000
+00011111111000011000010010000000
+00100000001000000110011111111001
+00100000010000000100011110101110
+00100100011101000000000000000000
+00100000010000000100011110010111
+00100000001000000100011110110100
+11011010001000000000000000000000
+01101000000000001100011010011111
+00100000010000000100011110101001
+01111101001110100010001000000000
+01101000000000001100011010100000
+00100000010000000100011110101001
+01111101001110100010001000000001
+01101000000000001100011010100001
+00100000010000000100011110101001
+01111101001110100010001000000010
+00011010001000100111111000000000
+01100000000000001100011010101001
+01101000000000001100011010011110
+10011010001011111111111000000000
+01101000000010010100011010011100
+10011000010000001111111000000000
+01100000000000010100011010101010
+00100000011000000000000000000000
+00100000011110100000000000000000
+00011111111000011000010010000000
+00100000010000000110100000011101
+00100100001000001111111111110001
+00100000001000000111111111101111
+00100000010000000111111111101001
+01101000000000001100011010101000
+00100100011110100000000000000000
+01101000000000001100011010011011
+00100000011110100000000000000000
+00100000001000000111111111100111
+00100000010000000110011001101010
+01101000000000010100011010101010
+11011010001000000000101011000010
+01101000000010001100011010011110
+00100000010000000110011010110011
+00100000010000000110011001101101
+01101000000000001000101011000010
+00011111111000100111001000000000
+01100000000000001100001110101111
+00100000010000000111111011110100
+01101000000000001000101011000010
+00011111111000100111001000000000
+01100000000000001100010100010101
+00100000010000000111111011110100
+11101000110000001000000000000000
+01100000000000001100011011100110
+11101000110000001000000000000000
+01100000000000001100011011011101
+00100000011000000000000000000000
+01101000000000001100011010011010
+11000100000000001000000000000000
+11011000010000000000000000000011
+01101000000000010100011010100100
+00011111111000100010010000000000
+11011010001000000100011010100110
+00100000010000000110010111011111
+01101000000010010100011010100110
+01011000000000000001101100111010
+10011000010001100111110000000000
+00100100011000101000000000000000
+01101000000000001100011010101000
+00100000011110100000000000000000
+00011111111000100000010000000000
+01101000000000010100011010100100
+00011111111000001010010000000011
+11011010001000000000101011000010
+00100000010000000110010111011111
+00100000001000000100011111101000
+01101000000000010100011010100010
+00100000011110100000000000000000
+00100000010000000110011001101010
+11011000010000000000000000000001
+11011010001000000100011010101000
+00100000010000000110011010110011
+01101000000000001100011010101000
+00100000011110100000000000000000
+01101000000000010100011010100010
+00011111111000001111111000000001
+11011010001000000000101011000010
+01101000000010001100011010101000
+00100000010000000110011010110011
+00100000010000000110011001101101
+00100000010000000100011110111010
+11101000110000010000000000000000
+00100000011110100000000000000000
+00011111111000100000101000000000
+11101000110010001000000000000000
+00011000010000100111001000000000
+00100000010000000111111100000001
+00100000001000000100011111101001
+01101000000000001100011010011010
+11000100000000001000000000000000
+01101000000000010100011010101110
+00011111111000100010010000000000
+11011000010000000000000000000100
+11011010001000000000101011000010
+00100000010000000110010111011111
+01101000000000001000101011000010
+11000000100000001100011111111001
+01011000000000000000000000000001
+01100000000000001000101011000010
+00011000000000000111001000000011
+00100000010000000110001100001101
+01101000000000010100011010101110
+00011111111000100010010000000000
+11011000010000000000000000000100
+11011010001000000000101011000010
+00100000010000000110011000000110
+01101000000000011000101011000011
+01100000000000011100000010100000
+01100000000000011100010010100000
+00100000011000000000000000000000
+00100000001000000100011011011001
+11011010001000000000000000000000
+11011010011000000100100011010100
+00100000010000000111110100100100
+00100000010000000100011011110100
+01101000000000001100100011101011
+01100000000000001100100011101100
+00100000011000000000000000000000
+01011000000000000000000000000000
+00100000010000000100100000010110
+01110000010001100111100100000001
+00100000010000000111110011010011
+00100000010000000111110011011101
+01101000000000010100011010000010
+11000011100001100000000000000000
+00100000001000000011010000001010
+01101000000010010100001000111111
+11100000010000001000000000000000
+11101000101000001000000000000000
+01100000000000001100011010000101
+00100000011000000000000000000000
+01101000000000010100001000111111
+11101111111000001000000000000000
+11000001100000000000000000000000
+00100000001000000011010000001010
+01101000000010010100001000111111
+11101000010000001000000000000000
+11000000000000001100100000101010
+01011000000000000000000000000001
+01101000000010010100001000111111
+11100000010000001000000000000000
+00011000010000001000110000000010
+11101000110000001000000000000000
+11100000101000001000000000000000
+11101000110000010000000000000000
+00100000001000000111111110011100
+01011000000000000000000000000010
+00100000010000000100100000010110
+00011000010000001000110000000101
+11101000110000010000000000000000
+00100000001110100011010000001010
+00100000001000000111111110011100
+01100000000000110000000100000001
+01101000000000001000000100000001
+01100000000000001000000100001100
+11101000110000001000000000000000
+01100000000000001000000100001011
+11101000110000001000000000000000
+01100000000000001000000100001010
+11101000110000001000000000000000
+01100000000000001000000100001001
+11101000110000001000000000000000
+01100000000000001000000100001000
+11101000110000001000000000000000
+01100000000000001000000100000111
+01101000000000110000000100000111
+00100000011000000000000000000000
+00100000010000000110100010100010
+01101000000000001100001000100011
+01100000000000001100010010100000
+01101000000000001100001000100101
+11100000101000001000000000000000
+01101000000000001100001000100111
+11100000101000001000000000000000
+01101000000000011100010010100000
+01100000000000011100000010100000
+00100000011000000000000000000000
+01101000000000010100001000000011
+10011010010000001111111000000000
+00011111111100001111111000000000
+01100000000000010000000111110111
+00011000010000100010010000000000
+00100000010000000100100010011011
+01011000000000000000000010100000
+00100000010000000100100010001101
+01101000000000001000000111110111
+00100000010000000100100010001101
+11000101000101000100100001010110
+01101000000000001000000111111000
+00100000010000000100100010001101
+00100000010000000100100010100001
+00100000010000000100100010011011
+01011000000000000000000010100001
+00100000010000000100100010001101
+00100000010000000100100001111111
+11100010001000001000000000000000
+00011010001000001010001000000001
+00011010010000001010010111111111
+00100100001000101100100001011010
+00100000001000000100100010100001
+00011010010100001111111000000000
+01100000000000010000000111110111
+00011000010000100010010000000000
+00100000010000000100100010011011
+01011000000000000000000010100000
+00100000010000000100100010001101
+01101000000000001000000111110111
+00100000010000000100100010001101
+11000101000101000100100001101011
+01101000000000001000000111111000
+00100000010000000100100010001101
+11101010001000001000000000000000
+00100000010000000100100010001101
+00011010001000001010001000000001
+00011010010000001010010111111111
+00100100001000101100100001101011
+00100000001000000100100010100001
+11011111001000000000000000001010
+00100000010000000100100010111110
+00100000010000000100100010100110
+00100000010000000100100011010010
+00100000010000000100100011000111
+00100000001110100100100010101001
+11000010000000000100100001110101
+00100000001000000100100010101001
+00100000010000000100100010101001
+00100000010000000100100010101111
+00100000010000000100100011010010
+00100000010000000100100010100110
+00100000010000000100100011010010
+00100000001000000100100010101001
+11011111001000000000000000001000
+11011010011000000000000000000000
+00100000010000000100100010111110
+00100000010000000100100010100110
+00100000010000000100100011010010
+00011010011000111010011000000000
+00100000010000000100100011000111
+10011010011000001010011000000000
+00100000010000000100100011010010
+00100000010000000100100010101001
+11000010000000000100100010000010
+00100000010000000100100001111001
+00011010011000100111111000000000
+00100000011000000000000000000000
+11011111001000000000000000001000
+00011111111000100010011000000000
+00100000010000000100100010101001
+00101010011011111111111000000111
+00100000010000001100100010101100
+00100100010000001100100010101111
+00011010011000111010011000000000
+00100000010000000100100011010010
+00100000010000000100100010100110
+00100000010000000100100011010010
+00100000010000000100100010101001
+00100000010000000100100011010010
+11000010000000000100100010010000
+00100000001000000100100001110001
+00100000010000000100100010101100
+00100000010000000100100010100110
+00100000010000000100100011010010
+00100000010000000100100010101111
+00100000010000000100100011010010
+00100000001000000100100010101001
+00100000010000000100100010101111
+00100000010000000100100010100110
+00100000010000000100100011010010
+00100000010000000100100010101100
+00100000001000000100100011010010
+01111000001101000111110000000000
+01101000000000001100111111111110
+00100000001000000100100010110010
+01111000010101000111110000000000
+01101000000000001100111111111110
+00100000001000000100100010110010
+01111000001101000111110000000000
+01101000000000001100111111111111
+00100000001000000100100010110010
+01111000010101000111110000000000
+01101000000000001100111111111111
+00100000001000000100100010110010
+00011111111000010000111000000111
+00011111111010010111111000000000
+11011000010000001000000001110000
+10011000010000001000010000000000
+11101000010000001000000000000000
+11111001001000000111111000000000
+11100000010000001000000000000000
+00011000010000001000010000000100
+11101000010000001000000000000000
+11111001001101000111111000000000
+11100000010000001000000000000000
+00100000011000000000000000000000
+01101000000000001100111111111111
+00011111111000010000111000000111
+00011111111010010111111000000000
+11011000010000001000000001110000
+10011000010000001000010000000000
+11101000010000001000000000000000
+11111001001111111111111000000000
+11100000010000001000000000000000
+00100000011000000000000000000000
+00100000000000000000000000000100
+01101000000000001100111111111111
+00011111111000010000111000000111
+00011111111010010111111000000000
+11011000010000001000000100011100
+10011000010000001000010000000000
+01011000000000000000000000000000
+11101000010010001000000000000000
+10101000010011111111111111111111
+01111001001000001111111000000000
+00100000011000000000000000000000
+00100000011000000000000000000000
+01000100111110110100000000011110
+01101000000100001000101000100110
+00101111111011111111111000000111
+00100000010000001100100011101010
+00100000010000000100100100101110
+01101000000100001000101000100110
+01100000000000001000101100100010
+01101000000100001000101000100111
+01100000000000001000101100100011
+01100000000100001000101000100111
+00011111111001000111111000000000
+01101000000010001000110100110111
+10011000010000010111111000000000
+01100000000000001000110100110111
+01110000100010100010011011100000
+01101000000000001000101100100011
+00101111111000000000001000000001
+00100000010000001100100101000001
+01101000000000001000101100100010
+00101111111000000000001000000001
+00100000010000001100100101001010
+00100000010000000100101101100001
+00100000001000000100100100000011
+01000100111110111100000000011110
+00100000010000000100100100011001
+01110000100010100000000000000000
+00100000000000000010011100010000
+01110000100010100001000011000000
+01101000000100010000000001010000
+01111001001111111111111000001010
+01100000000100010000000001010000
+01110000100010100000000000111100
+01110000100010100010011011111111
+01110000100010100010011111111111
+01110000100010100000010000000000
+01110000000011000110101100000010
+01011000000000000000110110011101
+11011000101000000000110001101110
+10011000101001100111001000000000
+00100000001000000111111011010100
+01101000000010001000110001101100
+00100000001000000110011111111011
+01101000000000001000110101000101
+00100000011110100000000000000000
+01101000000010001000110001101100
+00100000010000000110100000011101
+00100000001000001100100011101010
+00100000011000000000000000000000
+11011000111000000000000000000000
+00100000010000000111111100010110
+00100100011110100000000000000000
+01101000000000001000110101000110
+00100100011110100000000000000000
+01101000000000001000110101000101
+00100100010110100100101110110111
+00100000011000000000000000000000
+11011000101000000000101101101000
+00111000000000010001001000010010
+00111000000001001000000000000000
+00111000000010000000000000000000
+00111000000011010000000000000000
+11100000101001001000000000000000
+00111000000000100010010000010010
+00111000000001001000011000000100
+00111000000010000001000000000000
+00111000000011000000000000001000
+11100000101001001000000000000000
+00111000000000000000000000000001
+11100000101000001000000000000000
+00100000011000000000000000000000
+01110000000011000110101100000010
+01011000000000000000000000000000
+01100000000000001000101101100111
+01100000000000010000110001100101
+00011111111000001111111000000001
+01100000000000010000110001100111
+00011111111000001111111000000001
+01100000000000010000110001101001
+01011000000000001000111111111010
+01100000000000010000101101111100
+01011000000000001001000000111010
+01100000000000010000101101111110
+11011000101000000000101110000000
+11011000110000001001000011111110
+00100000010000000111111010110011
+01101000000000001000110001101101
+00100100010110100100100100101011
+00100000001000000100100100001011
+01100000000000001000101110100010
+01100000000000001000101110111011
+00100000011000000000000000000000
+01101000000100001000101000100110
+11000010100000110100100100110001
+00100000011000000000000000000000
+00100000010000000100100100110110
+00100000010000000111111100010101
+01011000000000000000001010000000
+11011000111000000000000000000000
+00100000001000000111111100001000
+01101000000000001000110100110110
+11000000100000010100100100111011
+01110000000011010100011000000000
+01110000000011010100011100000000
+00100000011000000000000000000000
+01101000000000001000110101010011
+00100000011110100000000000000000
+01110000000011010101001100000000
+01110000000011010011011000000010
+01110000000011010100010100000001
+00100000011000000000000000000000
+01110000100010100010011100000001
+00100000001000000100101100110111
+01101000000000001000101100100010
+11000010100000100100100101010101
+00100000011000000000000000000000
+01101000000100001000101000011000
+11100000101000001000000000000000
+11000010000000000100100101000110
+00100000011000000000000000000000
+01000100111111000100000000011111
+01110000100010100010011000010001
+01101000000100001000101000100000
+01100000000000001000101100100100
+00011111111000100111001000000000
+00100000001110100100100101000011
+11011000101000000000110001101110
+00100000010000000100100101000110
+01101000000000001000101100100100
+00011111111001100111110000000111
+00100000011000010000000000000000
+01101000000000001000110001101110
+00011111111000010111111010000000
+11000000010000000100100101011010
+11000000000000000100100101100010
+00100000001000000010101010001100
+01101000000000001000110001101110
+00011111111100011111111000000000
+00011111111000110111111000000000
+00011111111000010111111000000011
+11000000000000000100100101101010
+11000000000000001100100101110000
+11000000000000010100100101110101
+00100000001000000010101010001100
+01101000000000001000110001101110
+00011111111100011111111000000000
+00011111111000110111111000000000
+00011111111000010111111000000011
+11000000000000000100100101110110
+11000000000000001100100101111110
+11000000000000010100100110000011
+00100000001000000010101010001100
+01101000000000001000110001101111
+11000000000001000100100110001010
+11000000000000110100100110100000
+11000000000001010100100111101010
+11000000000000000100100111111100
+00100000001000000100100110000100
+01101000000000001000110001101111
+11000000000000010100101000101111
+11000000000000001100101000110011
+11000000000000011100101001000101
+00100000001000000100100110000100
+00100000001000000100100110000100
+01101000000000001000110001101111
+11000000000000001100101001001111
+11000000000000011100101001111001
+11000000000000101100101010100011
+11000000000001001100101010111100
+11000000000001011100101011010111
+11000000000000111100100110000100
+00100000001000000100100110000100
+01101000000000001000110001101111
+11000000000001010100101011101000
+11000000000001001100101011111001
+11000000000001011100101100010001
+00100000001000000100100110000100
+00100000001000000100100110000100
+01101000000100001000101000010001
+01111001001000000111111000000000
+01100000000100001000101000010001
+00100000001000000100100110001000
+01110000100010100001001001000000
+00100000011000000000000000000000
+01101000000000001000110001101110
+11000000110000000100100110000100
+01101000000000001000110001110010
+11000000100000000100100110000100
+01101000000000001000110001110011
+11000000100000000100100110000100
+01101000000000001000110001110100
+11000000100000001100100110000100
+01101000000000001000110001110101
+11000000100000000100100110000100
+01101000000000001000110001110000
+11000000100000000100100110000100
+01101000000000001000110001110001
+11000000100000000100100110000100
+01101000000000001000110001101011
+11000000000000100100100110011100
+11000000000000011100100110011110
+00100000001000000100100110000100
+11011010010000000000000000000001
+00100000001000000100101000010100
+11011010010000000000000000000001
+00100000001000000100101000010010
+01000100111111001100000000011111
+01111001001111111000000000100011
+01101000000000001000110001110001
+11000000000000001100100110110110
+11000000000000010100100111001111
+11000000000000011100100111010010
+11000000000100001100100110101001
+11000000000100010100100111100000
+00100000001000000100100110000100
+01110000000011010100101100000000
+01101000000000001000110001110010
+11000000000000000100100110101110
+11000000000000001100100110110010
+00100000001000000100100110000100
+11011010001000000000101110010011
+11101010001000001000000000000000
+10011000000000000010010000000000
+00100000001000000100101100100001
+11011010001000000000101110101100
+11101010001000001000000000000000
+10011000000000000010010000000000
+00100000001000000100101100100001
+01101000000000001000110101001000
+00100100010110100100100111000111
+01011000000000000000101101101000
+01101000000010001000101101101000
+01100000000000010000110100111111
+01100000000010001000110101000001
+01101000000000001000110001110100
+10011000010001100111110000000000
+00100100001000010100100111000101
+01101000000000001000110101000001
+10011000000000000010010000000000
+01101000000000010000110100111111
+00011111111000001111111000000001
+10011000000000000010001000000000
+00100000001000000100101100100001
+01101000000000001000110001110100
+00100000001000000100100111000000
+01101000000100001000101000000100
+00100100010110100100100111001011
+01110000000011010100100000000000
+00100000011000000000000000000000
+01101000000100001000101000000100
+01111001001000000111111000000111
+01100000000100001000101000000100
+00100000011000000000000000000000
+01011000000000000000101110000000
+01101000000010001000101110000000
+00100000001000000100100110111010
+01101000000000001000110001110000
+00011111111001100111110000000011
+00100100001000010100100110000100
+01101000000000001000110001110000
+11011010001000000000101111100100
+11000000000000000100101100011110
+01111001001000000000000000100011
+11011010001000000000101111101001
+11000000000000001100101100011110
+11011010001000000000110000000111
+11000000000000010100101100011110
+11011010001000000000110001000111
+11000000000000011100101100011110
+00100000011000000000000000000000
+01101000000000010000110001110010
+11000000000000001100100111100101
+01101000000000010000101101111100
+00011111111000100010001000000000
+00100000001000000100101100011110
+01110000000011010100010100000001
+01110000000011010011011000000001
+01101000000000010000101101111110
+00011111111000100010001000000000
+00100000001000000100101100011110
+01101000000000001000110001101011
+11000000100000100100100110000100
+01101000000000001000110001101110
+11000000110000001100100110000100
+01101000000000001000110001110000
+11000000100000000100100110000100
+01101000000000001000110001110001
+11000000100000000100100110000100
+01101000000000001000110001110100
+11000000100000001100100110000100
+01101000000000001000110001110101
+11000000100000000100100110000100
+01101000000000001000110001110010
+11000000100000000100100110000100
+01101000000000001000110001110011
+11000000100000000100100110000100
+11011010010000000000000000000001
+00100000001000000100101000010010
+01101000000000001000110001101011
+11000000000000010100100110000100
+01101000000000001000110001110000
+11000000100000000100100110000100
+01101000000000001000110001110001
+11000000100000000100100110000100
+01101000000000001000110001110100
+11000000100000010100100110000100
+01101000000000001000110001110101
+11000000100000000100100110000100
+01101000000000001000110001110011
+11000000100000000100100110000100
+01101000000000001000110001101110
+11000000010000000100101000001101
+11000000010000001100101000011000
+11000000010000010100101000011100
+00100000001000000100100110000100
+01101000000000001000110001110010
+11000000100000000100100110000100
+11011010010000000000000000000010
+01101000000000001000110100111001
+11000000000000001100101000010110
+11011010001000000000110001100101
+00100000001000000100101100100001
+11011010001000000000110001100111
+00100000001000000100101100100001
+11011010001000000000110001101001
+00100000001000000100101100100001
+01101000000000001000110001101011
+11000000100000100100100110000100
+11011010010000000000000000000010
+00100000001000000100101000010010
+01101000000000001000110001101011
+11000000100000100100100110000100
+01101000000000001000110001110010
+11000000010000001100101000101001
+11000000010000010100101000101011
+11000000010000011100101000101101
+00011111111000010111111001111111
+11000000000000000100101000100101
+00100000001000000100100110000100
+01101000000000001000110100111011
+11011010010000000000000000000010
+11000000000000001100101000010100
+00100000001000000100101000010010
+01101000000000001000110100111100
+00100000001000000100101000100110
+01101000000000001000110100111101
+00100000001000000100101000100110
+01101000000000001000110100111110
+00100000001000000100101000100110
+01110000000011010100110000000001
+11011010001000000000110101001101
+11011010010000000000000000000001
+00100000001000000100101100100001
+01101000000000010000110001110000
+11011000010000000000000110111010
+10011000010001100111110000000000
+00100100001000101100100110000100
+01111001001111111000000000100011
+01101000000000001000110101000010
+00100100001110100100101001000010
+01110000000011001111011000000000
+01101000000000001000110001110100
+10011000000000000010010000000000
+11011010001000000000110011110110
+00100000010000000100101100100001
+11011000101000000000110011110110
+11011111001000000000000000001000
+00100000001000000111111011000110
+01110000000011010100001000000000
+01110000000011001111011000000001
+00100000001000000100101000111011
+01101000000000001000110001110100
+11000000100000001100100110000100
+01110000000011010100101100000001
+11011010010000000000000000000001
+01101000000000001000110101001001
+11000000000000000100101001001101
+11000000000000001100101001001110
+00100000001000000100101000010010
+00100000001000000100101000010100
+00100000001000000100101000010010
+01101000000000001000110001101011
+11000000100000100100100110000100
+01101000000000001000110001110100
+11000000100000000100100110000100
+01101000000000001000110001110101
+11000000100000000100100110000100
+01101000000000001000110001110001
+11000000100000000100100110000100
+01101000000000001000110001110011
+11000000100000000100100110000100
+01101000000000001000110001101110
+11000000000000000100101001011110
+11000000000000001100101001100110
+11000000000000010100101001100111
+00100000001000000100100110000100
+01101000000000001000110001110000
+11000000100000001100100110000100
+01101000000100001000101000000000
+01111001001111111111111000000111
+01100000000100001000101000000000
+01110000000011010011100100000000
+01110000000011010011101000000001
+00100000001000000100100110001000
+00100000001000000100100110000100
+01101000000000001000110001110000
+11000000100000000100100110000100
+01101000000000001000110001110010
+11000000010000001100101001110010
+11000000010000010100101001110101
+11000000010000011100101001110111
+00011111111000010111111001111111
+11000000000000000100101001110000
+00100000001000000100100110000100
+01110000000011010011101100000000
+00100000001000000100100110001000
+01110000000011010011110000000000
+01110000000011010101001100000001
+00100000001000000100100110001000
+01110000000011010011110100000000
+00100000001000000100101001110011
+01110000000011010011111000000000
+00100000001000000100101001110011
+01101000000000001000110001110100
+11000000100000000100100110000100
+01101000000000001000110001110101
+11000000100000000100100110000100
+01101000000000001000110001101110
+11000000000000000100101010000010
+11000000000000001100101010001111
+11000000000000010100101010010000
+00100000001000000100100110000100
+01101000000000001000110001110000
+11000000100000001100100110000100
+01101000000100001000101000000000
+01111001001000000111111000000111
+01100000000100001000101000000000
+01110000000011010011100100000001
+01110000000011010011011000000011
+01110000000011010100001100000000
+00100000010000000100100110001000
+00100000010000000111111100010101
+01011000000000000001001110001000
+11011000111000000000000000001111
+00100000001000000111111100001000
+00100000001000000100100110000100
+01101000000000001000110001110000
+11000000100000000100100110000100
+01101000000000001000110001110001
+11000000100000000100100110000100
+01101000000000001000110001110010
+11000000010000001100101010011101
+11000000010000010100101010011111
+11000000010000011100101010100001
+00011111111000010111111001111111
+11000000000000000100101010011011
+00100000001000000100100110000100
+01110000000011010011101100000001
+00100000001000000100100110001000
+01110000000011010011110000000001
+00100000001000000100100110001000
+01110000000011010011110100000001
+00100000001000000100100110001000
+01110000000011010011111000000001
+00100000001000000100100110001000
+01101000000000001000110001101110
+11000000100000000100100110000100
+01101000000000001000110001110010
+11000000100000000100100110000100
+01101000000000001000110001110011
+11000000100000000100100110000100
+01101000000000001000110001110100
+11000000100000000100100110000100
+01101000000000001000110001110101
+11000000100000000100100110000100
+01101000000000001000110001110001
+11000000100000000100100110000100
+01101000000000001000110001110000
+00011111111000010111111010000000
+11000000100000000100100110000100
+01101000000000001000110001110000
+11000000100000000100101010111010
+01110000000011000110101100000010
+01101000000000001000110001110000
+01100000000100001000101000000100
+00100000010000000100100110001000
+01110000000011010100100000000001
+00100000011000000000000000000000
+01110000000011000110101100000011
+00100000001000000100101010110101
+01101000000000001000110001101011
+11000000000000010100100110000100
+01101000000000001000110001101110
+11000000100000000100100110000100
+01101000000000001000110001110010
+11000000100000000100100110000100
+01101000000000001000110001110011
+11000000100000000100100110000100
+01101000000000001000110001110100
+11000000100000000100100110000100
+01101000000000001000110001110101
+11000000100000000100100110000100
+01101000000000001000110001110001
+11000000100000000100100110000100
+01101000000000001000110001110000
+00011111111001100111110000000001
+00100100001000010100100110000100
+01101000000000001000110001101011
+11000000000000011100101011010001
+11000000000000100100101011010001
+00100000001000000100100110000100
+01101000000000001000110001110000
+11000000000000000100101011010101
+01110000000011000110101100000100
+00100000001000000100100110001000
+01110000000011000110101100000011
+00100000001000000100100110001000
+01101000000000001000110001101011
+11000000100000100100100110000100
+01101000000000001000110001101110
+11000000100000001100100110000100
+01101000000000001000110001110000
+11000000100000000100100110000100
+01101000000000001000110001110001
+11000000100000000100100110000100
+01101000000000001000110001110100
+11000000100000000100100110000100
+01101000000000001000110001110101
+11000000100000000100100110000100
+01101000000000001000110001110010
+11000000100000000100100110000100
+01101000000000001000110001110011
+11000000100000000100100110000100
+00100000001000000100100110001000
+01110000000011010100110000000001
+01101000000000001000110001110001
+01100000000000001000110101001101
+01101000000000001000110001110010
+00011111111001100111110000000001
+00100000010000101100101011110101
+01101000000000001000110100110110
+11000000100000100100100110001000
+01110000000011010011011000000010
+00100000010000000100100110001000
+00100000000000000111010100110000
+00100000000000000111010100110000
+00100000011000000000000000000000
+01110000000011010100010100000001
+01110000000011010011101000000000
+01110000000011010011011000000100
+00100000011000000000000000000000
+01110000000011010101000000000001
+00100000010000000100101100000011
+01101000000000010000110001110000
+01100000000000010000110101001110
+01101000000000001000110001110100
+10011000000000000111001000000000
+11011000110000000000110001110110
+11011000101000000000110010110110
+00100000010000000111111100000001
+00100000001000000100100110001000
+01101000000000010000110001110000
+11011000010000000000001000000000
+10011000010001100111110000000000
+00100100011000101000000000000000
+01101000000000010000110001110010
+11011000010000000000000000000000
+10011000010001100111110000000000
+00100100011000101000000000000000
+01101000000000010000110001110100
+11011000010000000000000000000001
+10011000010001100111110000000000
+00100100011000101000000000000000
+01110000000011010100001100000001
+00100000011000000000000000000000
+01101000000000001000110001110100
+11000000100000000100100110000100
+01101000000000001000110001110000
+11000000000000000100101100010111
+11000000000000001100101100011010
+00100000001000000100100110000100
+01110000000011010100101000000000
+01110000000011010100100100000001
+00100000001000000100100110001000
+01110000000011010100010000000001
+01110000000011010100101000000001
+01110000000011010100100100000000
+00100000001000000100100110001000
+11101010001000001000000000000000
+10011000000000000010010000000000
+00011010001000001010001000000001
+01000100111111010100000000011111
+11000101100100011100101100101100
+00011010010000001111111000000001
+00011111111000111111111000000000
+01100000000100001000101000011000
+01110000100010100001100000000011
+01101000000000001000110001110100
+00011111111000001111111111111110
+00011111111000110111111000000000
+01100000000000001000110001110100
+11000000000000000100101100110101
+01101000000000010000110001110100
+10011010010001100111110000000000
+00100000001000010100101100110000
+00011111111000100010010000000000
+00011010001000100111111000000000
+01100000000000010000101101100101
+00011010010000100111111000000000
+01100000000000001000101101100111
+00100000001000000100101100110111
+11011000111000000000000000000000
+00100000001000000100101101010111
+01000100111111011100000000011111
+01101000000000001000101101100111
+00100000011110100000000000000000
+00011111111000100111001000000000
+00011111111001100111110001000000
+00100000001000010100101100111110
+11011111001000000000000001000000
+01101000000000001000101101100111
+10011111001001100111111000000000
+01100000000000001000101101100111
+01101000000000010000101101100101
+00011111111000100000110000000000
+11101000110000001000000000000000
+01100000000100001000101000011000
+11000101100100011100101101000111
+01110000100010100001100000000000
+11000010000000000100101101000011
+00011000110000100111111000000000
+01100000000000010000101101100101
+11011000111000000000000000000000
+00100000010000000100101101010111
+01101000000000001000101101100111
+00100100011110100000000000000000
+01101000000000001000110100110110
+11000001100000001000000000000000
+01110000000011010011011000000010
+00100000011000000000000000000000
+11011010001000001000101000011001
+11011000111000000000000000000001
+11101000110000001000000000000000
+11100010001000001000000000000000
+11000010000000000100101101010100
+01011000000000000000000000000000
+11111001001000000111111000000000
+01100000000100001000101000010000
+01101000000010001000110100110111
+10011000010000011111111000000000
+01100000000000001000110100110111
+00100000011000000000000000000000
+11011000111000000000000000000010
+11011010001000001000101000011010
+00100000001000000100101101010100
+01000100111111100100000000011111
+01101000000000001000110100111000
+00100000011110100000000000000000
+01101000000000001000110100110111
+00100100001110100100101110101100
+01101000000000001000110101000101
+00100000001110100100101110000110
+01101000000000001000110100110110
+11000000000000011100101110111111
+11000000100000010100101110000110
+01101000000000001000110100111010
+00100100001110100100101110000110
+00100000010000000100101101101111
+00100000001000000100101101111010
+01101000000000001000110100111000
+11000100000000001000000000000000
+01101000000000001000110100110111
+11000011100000001000000000000000
+01101000000000001000110100111000
+01111001001111111111111000000001
+01100000000000001000110100111000
+01101000000000001000110101010001
+00100000011110100000000000000000
+11000000000010000100101110101000
+00100000001000000010101010001100
+01101000000000001000110100111000
+11000100000000010000000000000000
+01101000000000001000110100110111
+11000011100000010000000000000000
+01101000000000001000110100111000
+01111001001111111111111000000010
+01100000000000001000110100111000
+01101000000000001000110101010010
+00100000011110100000000000000000
+11000000000100000100101110001001
+11000000000100001100101110100100
+00100000001000000010101010001100
+11011000101000000000110101010100
+11011111001000000000000000000110
+00100000001000000111111011000110
+01101000000000001000110101001100
+01101000000010001000110101001011
+10011000010000010111111000000000
+00100000001110100100101110100000
+01101000000010001000110101001010
+10011000010000001111111000000000
+11000000000000001100101110010001
+00100000001000000100101110100000
+01110000000011010101001000000000
+01101000000000001000110101010101
+11000000000000010100101110100001
+11000000000000011100101110100001
+01101000000000001000110101010101
+01100000000000001000110101010100
+01101000000000001000110101010110
+11100000101000001000000000000000
+01101000000000001000110101011000
+11100000101000001000000000000000
+01101000000000001000110101011010
+11100000101000001000000000000000
+11011111001000000000000000000100
+11011000110000000000110101010100
+00100000001000000100101101011110
+01110000000011010101001000000000
+11011111001000000000000000001000
+11011000110000000000110101010100
+00100000001000000100101101011110
+01110000000011010101001000000000
+11011111001000000000000000000011
+11011000110000000000110101110100
+00100000001000000100101101011110
+01110000000011010101000100000000
+11011111001000000000000000001000
+11011000110000000000110101100100
+00100000001000000100101101010010
+01101000000000001000110100110110
+11000000000000011100101110110000
+11000000000000010100101110110010
+00100000011000000000000000000000
+01110000000011010011011100000000
+00100000011000000000000000000000
+01101000000100001000101000000000
+01111001001000000111111000000111
+01100000000100001000101000000000
+01110000000011010100011100000001
+00100000011000000000000000000000
+01101000000000001000110100110110
+11000001000000011000000000000000
+11000000000000010100101110111011
+00100000011000000000000000000000
+01101000000000001000110101000111
+00100000011110100000000000000000
+01110000000011010100011000000001
+00100000001000000100101111000010
+11011000111000000000000000001111
+00100000010000000111111100010110
+00100100011110100000000000000000
+01101000000100001000101000000000
+11000100000000111000000000000000
+01110000100010100000000011111100
+00100000000000000111010100110000
+01110000100010100000000000111100
+00100000011000000000000000000000
+01000100111111101100000000011111
+01101000000000001100000111001110
+00100100011110100000000000000000
+00100000010000000100101111001110
+00100100010101000100101111100110
+00100000011000000000000000000000
+01000100111111110100000000011111
+00011000011000100010001000000000
+11011000010000000000000000000100
+11101000011000001000000000000000
+11000000000000001100101111011000
+00011000010000001000010000000001
+11000000000000010100101111011000
+00011000011000100111111000000000
+01100000000100010000000001011000
+00100000011000000000000000000000
+01101000000100010000000100010010
+10011000010001100111110000000000
+00100100001000010100101111011000
+01111000010101000111110000000000
+00011010001000100000011000000000
+00100000010000000100101111101110
+10011000010000001000010000000000
+01101000000100010000000100010010
+10011000010001100111110000000000
+00100100001000010100101111011111
+00011010001000100000011000000000
+11101000011000001000000000000000
+11000000000000001100110000111111
+00100000001000000010101010001100
+01000100111111111100000000011111
+01101000000100010000000001011000
+10011000000000000000011000000000
+00100000010000000100101111101110
+10011000011000001000011000000000
+00011000011000100111111000000000
+01100000000100010000000001011000
+00100000011000000000000000000000
+11101000011000001000000000000000
+00011000011000001000011000000010
+11000000000000010100101111110011
+11101000011000001000000000000000
+00100000011000000000000000000000
+11101000011000010000000000000000
+00100000011000000000000000000000
+01101000000100010000000001011110
+00011001010000001001010111111011
+10011001010000001001010000000000
+00100000011000000000000000000000
+11011000010000000000000000000100
+00100000001000000100101111111100
+11011000010000000000000000000010
+01000111000000000100000000100000
+00011111001000001111001000000001
+01101000000100010000000001011110
+00011111111000100001010000000000
+00011111001000100111111000000000
+11100001010010001000000000000000
+00011111111000001111111111111111
+10011001010000001001010000000000
+00011001010000100111111000000000
+01100000000000010000001001011000
+00011000010000100111111000000000
+11000001000000010000000000000000
+01101000000000010000001001011000
+01100000000100010000000001011110
+00100000001000000100110000001011
+01011000000000000000000000000000
+01100000000000010000001001011000
+00100000011000000000000000000000
+00100000011101011000000000000000
+01011000000000000100110100101000
+01100000000000010100000111110011
+01011000000000000000000110100000
+01100000000000010100001001000011
+01011000000000000001100000000000
+01100000000100010000000001010100
+01011000000000000001101111111111
+01100000000100010000000001010110
+01011000000000000001110000000000
+01100000000100010000000001011010
+00100000010000000100110000101000
+01110000100000000110001000000000
+01011000000000000001110000000000
+01100000000100010000000001011110
+01100000000100010000000001100000
+01011000000000000001100000000000
+01100000000100010000000001011000
+01100000000000010000001001000100
+01101000000100010000000001010000
+01111001001111111111111000001111
+01100000000100010000000001010000
+00100000010000000110011011001110
+01110000100000000100001100000001
+01110000100000000110001010000001
+00100000011000000000000000000000
+01011000000000000001111111111111
+01100000000100010000000001011100
+01101000000100001000000010000001
+00011111111000011111111000000111
+01100000000100001000000010000001
+00100000011000000000000000000000
+01000111000000001100000000100000
+01101000000100001000000100001100
+10011000000000000010010000000000
+11000011000000011100110000110111
+01101000000100010000000100010010
+10011000000000000010011000000000
+11011000010000000000010001001111
+10011000010001100111110000000000
+00100100011000101000000000000000
+01101000000100010000000001011000
+10011000000000000000011000000000
+00100000001000000100101111001000
+01101000000110001000000100001100
+00101000010011111111111000000110
+00100000001000001100110000111010
+01100000000100001000000000010101
+00100000011000000000000000000000
+01000111000000010100000000100000
+01101000000000001100000111001110
+00100000001110100100110001000100
+01111000001101000111110000000000
+00100000011000000000000000000000
+11101000011000010000000000000000
+10011000000000000110000000000000
+10011000000000000000111000000000
+11101000011000001000000000000000
+10011000000000000000010000000000
+00011110000010110111111000000000
+00011111111011001111111000000000
+11000000000111111100110001001101
+00100000011000000000000000000000
+01000111000000011100000000100000
+00011000111000100111111000000000
+11000000000000000100110011011100
+11000000000000001100110001100110
+11000000000000010100110001101011
+11000000000000011100110001111010
+11000000000000100100110010110011
+11000000000000101100110011011100
+11000000000000110100110011000110
+11000000000000111100110001011100
+11000000000010000100110011001001
+11000000000010001100110011010001
+11000000000010010100110010100101
+11000000000010011100110010000101
+00100000001000000100110011011100
+00100000010000000100110011011100
+00100000010000000111111110011110
+00100000010000000110100010001100
+00100000010000000011001111010010
+00100000010000000011001111011001
+00100000001000000110100010001111
+01110000010000100100010100000000
+00100000010000000011001111010000
+00100000010000000100110000010011
+00100000001000000011001111011011
+00100000010000000100110011110010
+01101000000100010000000000000000
+11100001010000010000000000000000
+00011000000000000111001000000110
+00100000001000000100110011011101
+11101000011000010000000000000000
+01100000000000010100001001000011
+01100000000100010000000001010010
+00100000011000000000000000000000
+11101000011000001000000000000000
+00011111111000100000010000000000
+01100000000100001000000000100100
+11101000011000001000000000000000
+10011000010000001000010000000000
+01111001001000000111111000000111
+01100000000100001000000000100011
+11101000011000001000000000000000
+10011000010000001000010000000000
+00011111111000100111001000000000
+00100000011000000000000000000000
+11000101000101011100110011000100
+00100000010000000100110001101111
+11101000011000001000000000000000
+01100000000100001000000000100101
+10011000010000001000010000000000
+11000010000000000100110001111100
+00011000010000010000010011111111
+11101000011000001000000000000000
+10011000010001100111110000000000
+00100100001000101100110011000100
+00100000001000000100110011011100
+11000101100101011100110011000100
+00100000010000000100110001101111
+01100000000001000000101010011010
+00100000010000000111010000100010
+11011111001000000000000000010000
+11011000101000000000101011000010
+00100000010000000100110010100000
+01100000000011000000101010100010
+11011000101000000000101011010010
+00100000010000000111010010010111
+11011010001000000000101011010010
+11011010010000000000101011000010
+11011000101000000000101011100010
+00100000010000000111001101010010
+11011111001000000000000000010000
+11011000110000000000101011100010
+00100000010000000100110010011100
+01101000000011000000101010100010
+01101000000001000000101010011010
+00011111111000001111111111110000
+01100000000001000000101010011010
+00100100001110100100110010001000
+00100000001000000100110010000000
+11101000110000001000000000000000
+01100000000100001000000000100101
+11000010000000000100110010011100
+00100000011000000000000000000000
+11101000011000001000000000000000
+11100000101000001000000000000000
+10011000010000001000010000000000
+11000010000000000100110010100000
+00100000011000000000000000000000
+11000101100101011100110011000100
+11011000010000000000000000000000
+11011111001000000000000000010000
+11011000101000000000101011000010
+00100000010000000100110010100000
+01101000000100001000000010000101
+00011111111000010111111011111101
+01100000000100001000000010000101
+11011000110000000000101011000010
+11011111001000000000000000010000
+00100000010000000111010001111000
+00100000010000000111010000101000
+00100000010000000111010010010001
+00100000001000000100110010000000
+11011111001000000000000000100000
+11011000101000000100000000000000
+11011000010000000000000000000000
+11101000011000001000000000000000
+11100000101000001000000000000000
+10011000010000001000010000000000
+11000010000000000100110010110110
+00011000010000010000010011111111
+11101000011000001000000000000000
+10011000010001100111110000000000
+00100100001000101100110011000100
+01110000100000000010001100000000
+00100000010000000100110011011100
+00100000010000000100101111100110
+00100000010000000110010010100011
+00100000010000000111111110011110
+00100000001000000010000000000001
+01110000100000000010001100000000
+00100000001000000010000000000000
+11101000011000110000000000000000
+01100000000000110100000010100000
+00100000001000000100110011011100
+11101000011000001000000000000000
+01100000000000001000001001011010
+00011111111000100111001000000000
+11101000011000010000000000000000
+01100000000000010000001001011011
+00011111111000100000101000000000
+00100000010000000110011011111101
+00100000001000000100110011011100
+11101000011000001000000000000000
+01100000000000001000001001011010
+00011111111000100111001000000000
+11101000011000010000000000000000
+01100000000000010000001001011011
+11011000101000000001000000000000
+00100000010000000110011011111101
+01101000000010001000001001011010
+11011010001000000001000000000000
+01101000000000010000001001011011
+00100000001000000110011000001000
+00011000000000000111001000000100
+00100000010000000100110011110100
+00011000000000000111111000000001
+11100001010000001000000000000000
+00011110000000100111111000000000
+11100001010000011000000000000000
+00011000000000000000111000001110
+01000111000000100100000000100000
+00100000010000000100110011110110
+00011000111000100111111000000000
+11100001010000001000000000000000
+00011111001000100111111000000000
+11100001010000001000000000000000
+00011000000000000000111000000101
+00011111001000001111001000000010
+00100000001000000100101111111001
+00011000000000000000111011111111
+00100000010000000100110011110100
+01011000000000000000000000000001
+11100001010000001000000000000000
+00011000000000000111001000000001
+00100000001000000100110011100011
+00011000000000000001010000001100
+00100000001000000100110011110111
+00011000000000000001010000001000
+00100000001000000100110011110111
+00011000000000000001010000000110
+00100000001000000100101111110101
+01111000001001111111110000000000
+01111000001001001111110000000000
+11101001010000001000000000000000
+00001000000000001000000000001000
+11000010000000000100110011111010
+01111000001001000111110000000000
+00001000000000001000000000010000
+01111000010001000111110000000000
+01111000010001001111110000000000
+01111000010001111111110000000000
+00011111111100001111111000000000
+00100000011000000000000000000000
+01110000010000011100111000000000
+00100000011000000000000000000000
+01101000000000110100000111010000
+01101000000010110000000001000000
+10011000010001100111110000000000
+00100000011000000000000000000000
+01101000000000001000000001001011
+11000010100000010100110100001111
+00100000010000000110001011101111
+01110000000000000111110000001000
+00100000001000000100110100000100
+01111001001111111111111000000010
+01100000000000001000000001001011
+00100000010000000110000000000001
+01011000000000000000000000000000
+01111001001101001111111000000001
+01100000000000001000000001111111
+00100000001000000100110100000100
+00100000011000000000000000000000
+01110000000000000111110000010111
+11011000101000000000010011011001
+01011000000000000000000000000000
+00101101000011111111111000011011
+01111001001000001111111000000001
+11100000101000001000000000000000
+01011000000000000000000000000000
+11100000101000010000000000000000
+01101000000000010100000111100011
+11100000101000010000000000000000
+01101000000000001100000111100101
+11100000101000010000000000000000
+01101000000000001100000111100111
+11100000101000010000000000000000
+00100000001000000100110100000100
+01110000000000000111110000011000
+00100000001000000100110100000100
+00100000010000000110100010011001
+00100000011000001000000000000000
+11011000010000000000000000000111
+00100000010000000110100000011101
+00100100001000001100110100101111
+01110000010000100100010100000001
+00100000011000000000000000000000
+01101000000000001100001001000101
+11000001100000001000000000000000
+00100000010000000100110001100010
+00100000001000000100110011101100
+01000111000000101100000000100000
+01101000000000010000001001100100
+00011111111000100000110000000000
+11101000110000001000000000000000
+00011111111000010000010000001111
+00011111111100011111111000000000
+11000000000001001100110101010011
+11000000000000111100110101010011
+11000000000001010100110101011111
+11000000000000101100110101001011
+11000000000000001100110100111111
+00100000011000000000000000000000
+00011000010000100111111000000000
+11000000000000101100110101000011
+11000000000000011100110101001010
+00100000011000000000000000000000
+01110000000010101001100100100111
+00100000010000000111110110000110
+01101000000000001100000010010010
+11000100000000110000000000000000
+00011000010000100111111000000000
+11000000000000101100001110001110
+00100000011000000000000000000000
+00100000011000000000000000000000
+00100000010000000100110101011111
+11011010001000000000000000000001
+00100000010000000100110101100011
+01101000000000010100001001001100
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+11011010001000000000000000000001
+00100000010000000100110101100011
+01101000000000010100001001001100
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000001000000000000000
+01110000000010101000111000000001
+01101000000000001100001001010010
+01111001001000000111111000000110
+01100000000000001100001001010010
+01110000000010101001100100010010
+00100000001000000111110110000110
+11101000110000001000000000000000
+11000000000000001100110101100010
+00100000011000000000000000000000
+00100000011000000000000000000000
+00100000010000000101001001000000
+00011010001000100000010000000000
+01100000000010001000101010001110
+00011111111000100000101000000000
+00011010001000100111111000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+00100000001101011100110101101111
+01011000000000000100001101100101
+11011000101000000100001001000110
+10011000101001100111001000000000
+00100000010000000111111011010100
+01000111000000110100000000100000
+01011000000000000000010101010001
+11011000101000000000010100010001
+10011000101001100111001000000000
+00100000010000000111111011010100
+01011000000000000000001011001001
+11011000101000000000001001011101
+10011000101001100111001000000000
+00100000010000000111111011010100
+00100000001000000101001100011000
+01000111000000111100000000100000
+00011000110000100000010000000000
+00011000010000100000110000000000
+11101000110000010000000000000000
+01100000000000010000001001100110
+11101000110000010000000000000000
+01100000000000010000001001101000
+00011000110000100111111000000000
+01100000000000010000001001100100
+01101000000000001100011010000001
+11000000000000000100110110000101
+00100000001000000101000011101111
+01101000000000010000001001100110
+00100000001110100100110111111100
+01000111000001000100000000100001
+01101000000000001000001001101000
+11000000000000001100110110011101
+11000000001010000100110111100000
+11000000001010001100110111110101
+11000000001010010100110111110011
+11000000001010011100110111110011
+00100000001000000100110111111100
+01000111000001001100000000100001
+00100000010000000101001001111110
+01101000000000001100001001010110
+11000000000000000100110110011011
+11000000000000001100110110011011
+11000000000000010100110110011011
+11000000000000011100110110011011
+11000000010000001100110110011011
+11000000011000000100110110011011
+11000000010000000100110110011011
+11000000001000000100110110011011
+00100000011000000000000000000000
+01011000000000000000000000000000
+00100000011000000000000000000000
+00100000010000000100110110001111
+00100100011110100000000000000000
+00100000010000000101001010111000
+00100000010000000100111000000001
+01101000000010010000001001101111
+00100000001110100100110111111011
+00100000010000000101001011000001
+01101000000000010000001001101111
+11100000101000010000000000000000
+00011000000000000111111000000001
+11100000101000010000000000000000
+00100000001000000100110111111100
+01101000000000001100001101100100
+00100000011110100000000000000000
+00011111111000100010001000000000
+01000111000001010100000000100001
+01101000000000100000001011010101
+11011000010000000000000100000000
+10011000010000001000010000000000
+00011100010000100111111000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+01110000010000110110010000000000
+00011010001000100111111000000000
+11000000001010000100110110110111
+00100000001000000010101010001100
+11011001000000000000000000000000
+00100000010000000101001010111000
+00100000010000000100111001111010
+00100000010000000101001011000011
+00100000010000000111111010101000
+00100000010000000100111010101101
+00100000010000000101001011000001
+01011000000000000000000000001100
+11100000101000010000000000000000
+00011000000000000111111000000001
+11100000101000010000000000000000
+00100000001000000100110111111100
+01000111000001011100000000100001
+01101000000000010000001001110101
+00011111111000001111111000000100
+00011111111100011111111000000000
+00011111111010010111111000000000
+00011111111000001000010000000001
+11011000110000000100001001100000
+11101000110000011000000000000000
+00100000011110100000000000000000
+01100000000000011000101011000010
+01101000000000001000101011000010
+00011111111000100010001000000000
+00100000010000000100110111010011
+00011010010000100111111000000000
+01100000000000001100001001100000
+00100000011000000000000000000000
+11011000111000000000000000000000
+11011010010000000000000000000000
+00011000111001100111110000000111
+00100100011000010000000000000000
+10101010001011111111111111111111
+00100000001000001100110111011010
+00100000001000000100110111011110
+00011000010000100111111000000000
+00100000001110100100110111011110
+11111001001000000010010000000000
+00011000010000001000010111111111
+00011000111000001000111000000001
+00100000001000000100110111010101
+00100000010000000101001001110100
+00100100011110100000000000000000
+00100000010000000100110110001111
+00100100011110100000000000000000
+00100000010000000101001011000101
+00100000010000000110111000010001
+00100000010000000100110111000011
+00100000001000000100110111101100
+00100000010000000101001001110100
+00100100011110100000000000000000
+00100000010000000101001011000101
+00100000010000000110111000010001
+00100000010000000101001011001110
+01101000000000010000001001110101
+00100000001110100100110111111011
+11100000101000010000000000000000
+01101000000000010100001001001000
+11100000101000010000000000000000
+00100000001000000100110111111100
+00100000010000000100110100110011
+00100000001000000100110111111100
+01000111000001100100000000100001
+01110000000000101000010000000000
+00100000010000000110101010001010
+01101000000000001000001010000100
+11000001000000001000000000000000
+00100000001000000100110111111100
+00100000010000000101001001100100
+01011000000000000000000000000000
+01100000000000010000001001100110
+01100000000000010000001001101000
+01110000000000100110101000000001
+00100000011000000000000000000000
+01000111000001101100000000100001
+00100000010000000101001011000011
+00011000000000000010010000000000
+01101000000000010000001001100110
+00011111111000100010011000000000
+01101000000000010000001001100100
+10011000000000000000110000000000
+00100000010000000100111000010000
+00011010011000100111111000000000
+00011010011000001010011111111100
+00011111111000001111111111111100
+00100100001110100100111000001000
+00011010010000100111111000000000
+01100000000000010000001001101111
+00100000011000000000000000000000
+01000111000001110100000000100001
+11101000110000001000000000000000
+11000000000000001100111001001001
+11000000000000010100111001010001
+11000000000000011100111011010101
+11000000000000100100111100000101
+11000000000000101100111110100010
+11000000000000110100111111001011
+11000000000000111101000000011011
+11000000000001000101000001010000
+11000000000001001101000001100000
+11000000000001010100111000011111
+11000000000001011101000001100001
+00100000010000000101000001100010
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+01011000000000000000000000001011
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+11101000110000010000000000000000
+11000000000000010100111000101101
+11000000000000011100111000110011
+00100000011000000000000000000000
+01011000000000100000000000001000
+11100000101000110000000000000000
+01011000000000000000001010000000
+11100000101000100000000000000000
+00011000000000000111111000001100
+00100000001000000100111000111000
+01011000000000110000000000001100
+11100000101000110000000000000000
+01011000000000000000000000000110
+11100000101001000000000000000000
+00011000000000000111111000010000
+10011010010000001010010000000000
+00100000001000000100111000011110
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+11101000110000010000000000000000
+01100000000000010000101010100010
+00011010011000100111111000000000
+10011010001001100010011000000000
+00100000010000000101001011000011
+01011000000000000000000000001011
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+01101000000000010000101010100010
+00100000001000000100111000101010
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+10011000110000001000110000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+00100000001000000100111000011110
+00100000010000000111111010101000
+00100000010000000111111010101101
+11011001000000000000000000000000
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+11101000110000010000000000000000
+00011111111000100000010000000000
+11101000110000010000000000000000
+00011111111000100001011000000000
+01000111000001111100000000100001
+00011000010000100111111000000000
+11000000000000001100111001100100
+11000000000000011100111010000110
+11000000000010001100111010010010
+11000000000010011100111010011101
+00100000010000000101000001100010
+00100000001000000100111011010100
+00100000010000000111111010101000
+11011000010000000000000001010000
+01101000000000010100001001001000
+00100100001110100100111011001110
+00011001011000100111111000000000
+01100000000000010100001001001000
+00011100010000100111111000000000
+01100000000000100000001011010101
+00100000010000000100111001101110
+00100000001000000100111010101001
+01100000000010010000001011010011
+00011001011000100111111000000000
+01100000000000010000001011001001
+00011010001000100111111000000000
+01100000000000010000001011001011
+00011010010000100111111000000000
+01100000000000010000001011001101
+00011010011000100111111000000000
+01100000000000010000001011001111
+00011000111000100111111000000000
+01100000000000010000001011010001
+00100000011000000000000000000000
+01101000000010010000001011010011
+01101000000000010000001011001001
+00011111111000100001011000000000
+01101000000000010000001011001011
+00011111111000100010001000000000
+01101000000000010000001011001101
+00011111111000100010010000000000
+01101000000000010000001011001111
+00011111111000100010011000000000
+01101000000000010000001011010001
+00011111111000100000111000000000
+00100000011000000000000000000000
+00100000010000000111111010101000
+01011000000000000000000001010001
+11011000010000000000000001010001
+01101000000000010100001001001010
+00100100001110100100111011001110
+00011001011000100111111000000000
+01100000000000010100001001001010
+01101000000000001100001001010001
+01111001001000000111111000000000
+01111001001000000111111000000001
+01100000000000001100001001010001
+00100000001000000100111010110001
+00100000010000000111111010101000
+11011000010000000000000001010010
+01101000000000010100001001001100
+00100100001110100100111011001110
+00011001011000100111111000000000
+01100000000000010100001001001100
+01101000000000001100001001010010
+01111001001000000111111000000000
+01111001001000000111111000000001
+01100000000000001100001001010010
+00100000001000000100111010110001
+00100000010000000111111010101000
+00011011010000100111111000000000
+11011000010000000000000001010011
+01101000000000010100001001001110
+00100100001110100100111011001110
+00011001011000100111111000000000
+01100000000000010100001001001110
+01101000000000001100001001010011
+01111001001000000111111000000000
+01111001001000000111111000000001
+01100000000000001100001001010011
+00100000001000000100111010110001
+01011000000000000000000000000001
+01100000000000010000001001111101
+01110000010000110110010001010000
+00100000001000000100111010110011
+01101000000000001100001001010000
+01111001001000000111111000000000
+01111001001000000111111000000001
+01100000000000001100001001010000
+01011000000000000000000000000000
+01100000000000010000001001111101
+01000111000010000100000000100010
+00100000010000000111111010101101
+01011000000000000000000000000011
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000000001000
+11100000101000010000000000000000
+00011000010000100111111000000000
+11100000101000010000000000000000
+00011001011000100111111000000000
+11100000101000010000000000000000
+01101000000000010000001001111101
+11000000000000001100111011001001
+00101001000011000000000000000000
+00100000001000001100111011000100
+01011000000000000000000000000100
+11100000101000010000000000000000
+00011000000000000111111000000000
+11100000101000010000000000000000
+01011000000000000000000000001100
+00100000001000000100111011010000
+11100000101000010000000000000000
+00011000000000000111111000000010
+11100000101000010000000000000000
+01011000000000000000000000001100
+00100000001000000100111011010000
+01111001001000000001000000000000
+00100000001000000100111010110001
+10011010010000001010010000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+00100000001000000100111011010100
+00100000001000000100111000011110
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000010000000000000000
+00011111111000100001011000000000
+11101000110000010000000000000000
+00011111111000100000010000000000
+01000111000010001100000000100010
+01011000000000000000000001010000
+10011000010001100111110000000000
+00100000001000101100111011101101
+01011000000000000000000001010001
+10011000010001100111110000000000
+00100000001000101100111011110011
+01011000000000000000000001010010
+10011000010001100111110000000000
+00100000001000101100111011111111
+01011000000000000000000001010011
+10011000010001100111110000000000
+00100000001000101100111011111001
+00100000011000000000000000000000
+00011001011000100111111000000000
+01100000000000010100001001001000
+01101000000000001100001001010000
+01111001001000000111111000000001
+01100000000000001100001001010000
+00100000001000000100111000011110
+00011001011000100111111000000000
+01100000000000010100001001001010
+01101000000000001100001001010001
+01111001001000000111111000000001
+01100000000000001100001001010001
+00100000011000000000000000000000
+00011001011000100111111000000000
+01100000000000010100001001001100
+01101000000000001100001001010011
+01111001001000000111111000000001
+01100000000000001100001001010011
+00100000011000000000000000000000
+00011001011000100111111000000000
+01100000000000010100001001001110
+01101000000000001100001001010010
+01111001001000000111111000000001
+01100000000000001100001001010010
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000010000000000000000
+00011111111000100000010000000000
+00011000010000100010001000000000
+01000111000010010100000000100010
+01011000000000000000000001010000
+10011000010001100111110000000000
+00100000001000101100111100011100
+01011000000000000000000001010001
+10011000010001100111110000000000
+00100000001000101100111100111010
+01011000000000000000000001010010
+10011000010001100111110000000000
+00100000001000101100111100100110
+01011000000000000000000001010011
+10011000010001100111110000000000
+00100000001000101100111100110000
+00100000001000000101000001100010
+00011000101000100001011000000000
+01101000000000001100001001010000
+01111001001000000111111000000100
+01111001001000000111111000000011
+01100000000000001100001001010000
+00011001011000100000101000000000
+11011001011000000000000001010000
+01101000000000010100001001001000
+00011111111000100000010000000000
+00100000001000000100111101000011
+00011000101000100001011000000000
+01101000000000001100001001010010
+01111001001000000111111000000100
+01111001001000000111111000000011
+01100000000000001100001001010010
+00011001011000100000101000000000
+11011001011000000000000001010010
+01101000000000010100001001001100
+00011111111000100000010000000000
+00100000001000000100111101000011
+00011000101000100001011000000000
+01101000000000001100001001010011
+01111001001000000111111000000100
+01111001001000000111111000000011
+01100000000000001100001001010011
+00011001011000100000101000000000
+11011001011000000000000001010011
+01101000000000010100001001001110
+00011111111000100000010000000000
+00100000001000000100111101000011
+00011000101000100001011000000000
+01101000000000001100001001010001
+01111001001000000111111000000100
+01111001001000000111111000000011
+01100000000000001100001001010001
+00011001011000100000101000000000
+11011001011000000000000001010001
+01101000000000010100001001001010
+00011111111000100000010000000000
+01000111000010011100000000100010
+01011000000000000000000000000101
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000000000110
+11100000101000010000000000000000
+00011000010000100111111000000000
+11100000101000010000000000000000
+00011000000000000111111000000000
+11100000101000010000000000000000
+00011000000000000111111000000000
+11100000101000010000000000000000
+00011000000000000111111000001010
+10011010010000001010010000000000
+01100000000010010000001010000010
+00011000111000100111111000000000
+01100000000000001000001010000001
+00011000000000000111111001010000
+10101001011000011111111000000000
+00100000001000001100111101011001
+00011111111000001111111000000001
+00100000011000000000000000000000
+01111000010101000111110000000000
+11000011100000010000000000000000
+11000100000000000000000000000000
+11000100000000001000000000000000
+01111001001000000111111000000010
+00011000110000100000101000000000
+00011000101000001000101111111111
+11100000101000001000000000000000
+01111000001101000111110000000000
+00100000011000000000000000000000
+01101000000000001100001001010000
+00100000010000000100111101011010
+00100100001101000100111101101011
+01110000000000101000000001010000
+01101000000000010100001001001000
+01100000000000010000001010000010
+00100000001000000100111101111111
+01101000000000001100001001010001
+00100000010000000100111101011010
+00100100001101000100111101110010
+01110000000000101000000001010001
+01101000000000010100001001001010
+01100000000000010000001010000010
+00100000001000000100111101111111
+01101000000000001100001001010010
+00100000010000000100111101011010
+00100100001101000100111101111001
+01110000000000101000000001010010
+01101000000000010100001001001100
+01100000000000010000001010000010
+00100000001000000100111101111111
+01101000000000001100001001010011
+00100000010000000100111101011010
+00100100011101000000000000000000
+01110000000000101000000001010011
+01101000000000010100001001001110
+01100000000000010000001010000010
+01000111000010100100000000100010
+00100000010000000101001000111010
+00100000010000000101001010111000
+00011000000000000010010000000000
+00100000010000000101001011000011
+00011000000000000111111000000100
+11100000101000001000000000000000
+01101000000000001100001001010101
+11100000101000001000000000000000
+01011000000000000000000000001000
+11100000101000010000000000000000
+01101000000000010000001010000010
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000010000000000000000
+00011000000000000111111000000001
+11100000101000001000000000000000
+00011000000000000111111000000010
+11100000101000001000000000000000
+01101000000000001000001010000000
+11000000001010001100111110010111
+01011000000000000000000000110000
+11100000101000010000000000000000
+00100000001000000100111110011001
+01011000000000000000001111100011
+11100000101000010000000000000000
+11011000010000000000000000001100
+01100000000010010000001001101111
+00100000010000000101001011000001
+01101000000000010000001001101111
+11100000101000010000000000000000
+00011000000000000111111000000001
+11100000101000010000000000000000
+01110000000000101000000000000000
+00100000001000000100111000011110
+00011000110000001000110000000001
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+01000111000010101100000000100010
+01011000000000000000000001010000
+10011010001001100111110000000000
+00100000001000101100111110111010
+01011000000000000000000001010001
+10011010001001100111110000000000
+00100000001000101100111110111110
+01011000000000000000000001010010
+10011010001001100111110000000000
+00100000001000101100111111000010
+01011000000000000000000001010011
+10011010001001100111110000000000
+00100000001000101100111111000110
+00011000110000001000110000000010
+11101000110000010000000000000000
+10011000000000000111110000000000
+00100000001000000100111000011110
+01101000000000001100001001010000
+01111001001000000111111000000101
+01100000000000001100001001010000
+00100000001000000100111000011110
+01101000000000001100001001010001
+01111001001000000111111000000101
+01100000000000001100001001010001
+00100000001000000100111000011110
+01101000000000001100001001010010
+01111001001000000111111000000101
+01100000000000001100001001010010
+00100000001000000100111000011110
+01101000000000001100001001010011
+01111001001000000111111000000101
+01100000000000001100001001010011
+01110000000010101001100100000110
+00100000001000000111110110000110
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+11101000110000010000000000000000
+00011111111000100001011000000000
+00011010001000100000010000000000
+00100000010000000111111010101000
+01000111000010110100000000100010
+01011000000000000000000001010000
+10011000010001100111110000000000
+00100000001000101100111111110010
+01011000000000000000000001010001
+10011000010001100111110000000000
+00100000001000101101000000000010
+01011000000000000000000001010010
+10011000010001100111110000000000
+00100000001000101100111111100110
+01011000000000000000000001010011
+10011000010001100111110000000000
+00100000001000101100111111101100
+00100000010000000101000001100010
+00100000001000000101000000010111
+00011001011000100000010000000000
+01101000000000010100001001001100
+10011000010001100111110000000000
+00100000001000101100111111111000
+00100000010000000101000001100010
+00100000001000000101000000010111
+00011001011000100000010000000000
+01101000000000010100001001001110
+10011000010001100111110000000000
+00100000001000101100111111111010
+00100000010000000101000001100010
+00100000001000000101000000010111
+00011001011000100000010000000000
+01101000000000010100001001001000
+10011000010001100111110000000000
+00100000001000101100111111111110
+00100000010000000101000001100010
+00100000001000000101000000010111
+00100000010000000101000001111001
+00100000001000000101000000001010
+00100000010000000101000001111111
+01101000000000010100001001001100
+00100000001110100101000000001010
+00100000001000000101000000001010
+00100000010000000101000001110100
+01101000000000001000001010001000
+00100100001110100101000000001010
+00100000001000000101000000001010
+00011001011000100000010000000000
+01101000000000010100001001001010
+10011000010001100111110000000000
+00100000001000101101000000001000
+00100000010000000101000001100010
+00100000001000000101000000010111
+00100000010000000101000001101111
+00100000001000000101000000001010
+00100000010000000111111010101101
+01011000000000000000000000000111
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000000000100
+11100000101000010000000000000000
+00011010001000100111111000000000
+11100000101000010000000000000000
+00011001011000100111111000000000
+11100000101000010000000000000000
+00011000000000000111111000001000
+00100000001000000101000000011001
+00100000010000000111111010101101
+00100000001000000101000000011001
+10011010010000001010010000000000
+00100000001000000100111000011110
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000010000000000000000
+00011111111000100001011000000000
+11101000110000010000000000000000
+00011111111000100000010000000000
+00100000010000000111111010101000
+01000111000010111100000000100010
+01011000000000000000000001010000
+10011000010001100111110000000000
+00100000001000101101000000110101
+01011000000000000000000001010001
+10011000010001100111110000000000
+00100000001000101101000000111011
+01011000000000000000000001010010
+10011000010001100111110000000000
+00100000001000101101000001000001
+01011000000000000000000001010011
+10011000010001100111110000000000
+00100000001000101101000001000111
+00100000010000000101000001100010
+00100000001000000101000001001111
+00011000010000100010001000000000
+00011001011000100000010000000000
+01101000000000010100001001001000
+10011000010001100111110000000000
+00100000010000101101000001110100
+00100000001000000101000001001101
+00011000010000100010001000000000
+00011001011000100000010000000000
+01101000000000010100001001001010
+10011000010001100111110000000000
+00100000010000101101000001101111
+00100000001000000101000001001101
+00011000010000100010001000000000
+00011001011000100000010000000000
+01101000000000010100001001001100
+10011000010001100111110000000000
+00100000010000101101000001111001
+00100000001000000101000001001101
+00011000010000100010001000000000
+00011001011000100000010000000000
+01101000000000010100001001001110
+10011000010001100111110000000000
+00100000010000101101000001111111
+00100000001000000101000001001101
+00100000010000000111111010101101
+00100000001000000100111000011110
+00100000001000000100111000011110
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+10011000110000001000110000000000
+01011000000000000000000000001001
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+00011000000000000111111000000000
+11100000101000010000000000000000
+00011000000000000111111000000100
+10011010010000001010010000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+00100000001000000100111000011110
+00100000001000000100111000011110
+00100000001000000100111000011110
+00011000000000000010010000000000
+00100000010000000101001011000011
+01011000000000000000000000000001
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000000000010
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000010000000000000000
+00011010010000001010010000000110
+11011010011000000000000000000100
+00100000001000000100111000011110
+01011000000000000000000000000000
+01100000000000010000001001111011
+01100000000000010100001001001010
+01110000010000100101000100000000
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000010000001001110101
+01100000000000010100001001001000
+01110000010000100101000000000000
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000010100001001001100
+01110000010000100101001000000000
+01101000000000001100001001010011
+11000000000000000101000010000101
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000010100001001001110
+01110000010000100101001100000000
+01101000000000001100001001010010
+11000000000000000101000010000101
+00100000011000000000000000000000
+01110000000010101001100100000111
+00100000001000000111110110000110
+01101000000000001000001001111111
+01111001001111111111111000000000
+01100000000000001000001001111111
+01101000000000010100001001001110
+00100000011110100000000000000000
+00100000010000000101001010111000
+01101000000000010100001001001110
+00011111111000100010001000000000
+00011000000000000010010001010011
+00100000001000000101000010011010
+01101000000000001000001001111111
+01111001001111111111111000000111
+01100000000000001000001001111111
+01101000000000010100001001001100
+00100000011110100000000000000000
+00100000010000000101001010111000
+01101000000000010100001001001100
+00011111111000100010001000000000
+00011000000000000010010001010010
+00100000010000000101001000111010
+00100000010000000101001011000011
+00011000000000000111111000000110
+11100000101000001000000000000000
+01101000000000001100001001010101
+11100000101000001000000000000000
+01011000000000000000000000000100
+11100000101000010000000000000000
+00011010001000100111111000000000
+11100000101000010000000000000000
+00011010010000100111111000000000
+11100000101000010000000000000000
+00011000000000000000010000001000
+00100000001000000101000011011110
+01000111000011000100000000100011
+00100000010000000101001000111010
+00100000010000000101001011000011
+01011000000000000000000000000010
+11100000101000001000000000000000
+01101000000000001100001001010101
+11100000101000001000000000000000
+01011000000000000000000000000100
+11100000101000010000000000000000
+00011000010000100111111000000000
+11100000101000010000000000000000
+00011001011000100111111000000000
+11100000101000010000000000000000
+11011000010000000000000000001000
+00100000001000000101000011011110
+01000111000011001100000000100011
+00100000010000000101001000111010
+00100000010000000101001011000011
+01011000000000000000000000000100
+11100000101000001000000000000000
+01101000000000001100001001010101
+11100000101000001000000000000000
+01011000000000000000000000001000
+11100000101000010000000000000000
+00011000010000100111111000000000
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000010000000000000000
+01011000000000000000000000000001
+11100000101000001000000000000000
+01011000000000000000000000000010
+11100000101000001000000000000000
+01011000000000000000001111100011
+11100000101000010000000000000000
+11011000010000000000000000001100
+00100000001000000101000011011110
+01000111000011010100000000100011
+00100000010000000101001000111010
+00100000010000000101001011000011
+01011000000000000000000000000110
+11100000101000001000000000000000
+01101000000000001100001001010101
+00011111111000001111111000000001
+00011000101000100010001000000000
+01100000000000001100001001010101
+00011010001000100000101000000000
+11100000101000001000000000000000
+01011000000000000000000000000100
+11100000101000010000000000000000
+00011000010000100111111000000000
+11100000101000010000000000000000
+00011001011000100111111000000000
+11100000101000010000000000000000
+11011000010000000000000000001000
+01100000000010010000001001101111
+00011000010000100111111000000000
+00100000001110100101001001100100
+00100000010000000101001011000001
+01101000000000010000001001101111
+11100000101000010000000000000000
+00011000000000000111111000000001
+11100000101000010000000000000000
+00100000011000000000000000000000
+01101000000000010000001001110101
+00100000001110100010101010001100
+00100000010000000101001011001110
+01101000000000010000001001110101
+11100000101000010000000000000000
+01101000000000010100001001001000
+11100000101000010000000000000000
+00100000011000000000000000000000
+01101000000000010000001001100110
+00100000001110100100110111111100
+01000111000011011100000000100011
+01101000000000001000001001101000
+11000000000000001101000011111001
+11000000001010000100110111101000
+11000000001010001100110111110101
+11000000001010010100110111110011
+11000000001010011100110111110011
+00100000001000000100110111111100
+01000111000011100100000000100011
+00100000010000000101001010111000
+00011000000000000010010000000000
+00100000010000000101001011000011
+00011111111000100000101000000000
+01101000000000010000001001100110
+00011111111000100010011000000000
+01101000000000010000001001100100
+10011000000000000000110000000000
+00100000010000000101000100001000
+00011010011000001010011111111100
+00100100001000101101000100000010
+00011010010000100000010000000000
+00100000010000000101000011011110
+00100000001000000100110111111100
+11101000110000001000000000000000
+11000000000000010101000100010011
+11000000000000001101000100010110
+11000000000000011101000100100000
+11000000000000101101000101011100
+11000000000000100101000110001110
+11000000000000111101001000010011
+11000000000000110101000111100001
+11000000000001000101000001010000
+11000000000001010100111000111010
+00100000001000000101001000101110
+00100000010000000111111010101000
+00100000010000000111111010101101
+00100000001000000100111001010001
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000001000000000000000
+00011010001000001010001111111111
+00100100001000101101000100011100
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+11101000110000010000000000000000
+00011111111000100001011000000000
+11101000110000010000000000000000
+00011111111000100000010000000000
+11101000110000010000000000000000
+00011111111001100111110000000000
+00100000001000101101000100110010
+11000000000000010101000100101110
+11000000000000100101000100101110
+00100000001000000101000100110000
+01110000000010101001100100010110
+00100000010000000111110110000110
+11101000110000010000000000000000
+00100000001000000101000101011001
+00100000010000000111111010101000
+01000111000011101100000000100011
+01011000000000000000000001010000
+10011000010001100111110000000000
+00100000001000101101000101000001
+01011000000000000000000001010001
+10011000010001100111110000000000
+00100000001000101101000101000111
+01011000000000000000000001010011
+10011000010001100111110000000000
+00100000001000101101000101010011
+01011000000000000000000001010010
+10011000010001100111110000000000
+00100000001000101101000101001101
+00100000001000000101000101011001
+00011001011000100111111000000000
+01100000000000010100001001001000
+01101000000000001100001001010000
+01111001001000000111111000000001
+01100000000000001100001001010000
+00100000001000000101000101011000
+00011001011000100111111000000000
+01100000000000010100001001001010
+01101000000000001100001001010001
+01111001001000000111111000000001
+01100000000000001100001001010001
+00100000001000000101000101011000
+00011001011000100111111000000000
+01100000000000010100001001001100
+01101000000000001100001001010010
+01111001001000000111111000000001
+01100000000000001100001001010010
+00100000001000000101000101011000
+00011001011000100111111000000000
+01100000000000010100001001001110
+01101000000000001100001001010011
+01111001001000000111111000000001
+01100000000000001100001001010011
+00100000010000000111111010101101
+00011010011000100111111000000000
+10011010001001100010011000000000
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000010000000000000000
+00011111111000100001011000000000
+11101000110000010000000000000000
+11101000110000010000000000000000
+00100100001110100101000110001000
+00100000010000000111111010101000
+00011001011000100000010000000000
+01000111000011110100000000100011
+01011000000000000000000001010000
+10011000010001100111110000000000
+00100000001000101101000101110110
+01011000000000000000000001010001
+10011000010001100111110000000000
+00100000001000101101000101111010
+01011000000000000000000001010010
+10011000010001100111110000000000
+00100000001000101101000101111110
+01011000000000000000000001010011
+10011000010001100111110000000000
+00100000001000101101000110000010
+01101000000000001100001001010000
+01111001001000000111111000000101
+01100000000000001100001001010000
+00100000011000000000000000000000
+01101000000000001100001001010001
+01111001001000000111111000000101
+01100000000000001100001001010001
+00100000011000000000000000000000
+01101000000000001100001001010010
+01111001001000000111111000000101
+01100000000000001100001001010010
+00100000011000000000000000000000
+01101000000000001100001001010011
+01111001001000000111111000000101
+01100000000000001100001001010011
+01110000000010101001100100000110
+00100000001000000111110110000110
+00100000010000000111111010101101
+00011010001000001010001111111010
+00100000001000101101000110001101
+00011000110000001000110000000001
+00011010001000001010001111111111
+00100000001000000101000110001001
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000010000000000000000
+00011000110000001000110000000010
+00011111111000100000010000000000
+01011000000000000000000000000101
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+00011010001000001010001000000010
+00011010001000100111111000000000
+11100000101000010000000000000000
+00100000010000000111111010101000
+01000111000011111100000000100011
+01011000000000000000000001010000
+10011000010001100111110000000000
+00100000001000101101000110101101
+01011000000000000000000001010001
+10011000010001100111110000000000
+00100000001000101101000110111110
+01011000000000000000000001010010
+10011000010001100111110000000000
+00100000001000101101000111000100
+01011000000000000000000001010011
+10011000010001100111110000000000
+00100000001000101101000111001010
+00100000001000000101000111001111
+01101000000000001100001001010000
+01111001001000000111111000000100
+01111001001000000111111000000011
+01100000000000001100001001010000
+11000010100000010101000110111011
+01101000000010001000001001111111
+01111001001000000000010000000110
+01100000000010001000001001111111
+00011000111000100111111000000000
+00011111111000001111111000000001
+01100000000000001000001010000001
+01101000000000001100001001010000
+01111001001000000111111000000010
+01100000000000001100001001010000
+01101000000000010100001001001000
+01100000000000010000001010000010
+00100000001000000101000111001111
+01101000000000001100001001010001
+01111001001000000111111000000100
+01111001001000000111111000000011
+01100000000000001100001001010001
+01101000000000010100001001001010
+00100000001000000101000111001111
+01101000000000001100001001010010
+01111001001000000111111000000100
+01111001001000000111111000000011
+01100000000000001100001001010010
+01101000000000010100001001001100
+00100000001000000101000111001111
+01101000000000001100001001010011
+01111001001000000111111000000100
+01111001001000000111111000000011
+01100000000000001100001001010011
+01101000000000010100001001001110
+00011111111000100001011000000000
+00100000010000000111111010101101
+00011001011000100111111000000000
+11100000101000010000000000000000
+00011000000000000111111000000000
+11100000101000010000000000000000
+00011000000000000111111000000000
+11100000101000010000000000000000
+00011000000000000111111000001010
+10011010010000001010010000000000
+00011010001000001010001111111010
+00100000001000101101000111100000
+11101000110000001000000000000000
+11100000101000001000000000000000
+00011010010000001010010000000001
+00011010001000001010001111111111
+00100000001000000101000111011010
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+11101000110000010000000000000000
+00011111111000100001011000000000
+00100000010000000111111010101000
+01000111000100000100000000100100
+01011000000000000000000001010000
+00011010001000100000010000000000
+10011000010001100111110000000000
+00100000001000101101000111111010
+01011000000000000000000001010010
+00011010001000100000010000000000
+10011000010001100111110000000000
+00100000001000101101000111111111
+01011000000000000000000001010011
+00011010001000100000010000000000
+10011000010001100111110000000000
+00100000001000101101001000000001
+00100000001000000101001000000011
+01011000000000000000000000000000
+01100000000000010000001001110101
+01100000000000010100001001001000
+01100000000000001100001001010000
+00100000001000000101001000000101
+00100000010000000101000001111001
+00100000001000000101001000000101
+00100000010000000101000001111111
+00100000001000000101001000000101
+01011000000000000000000000000000
+01100000000000010000001001111011
+00100000010000000111111010101101
+01011000000000000000000000000111
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000000000100
+11100000101000010000000000000000
+00011010001000100111111000000000
+11100000101000010000000000000000
+00011001011000100111111000000000
+11100000101000010000000000000000
+00011000000000000111111000001000
+10011010010000001010010000000000
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+11101000110000010000000000000000
+00011111111000100001011000000000
+11101000110000010000000000000000
+00011111111000100000010000000000
+00100000010000000111111010101000
+01000111000100001100000000100100
+01101000000000001100001001010101
+10101000111000011111111000000000
+00100100001000001101001000101010
+01011000000000000000000001010000
+10011000010001100111110000000000
+00100000001000101101001000100111
+01011000000000000000000001010001
+10011000010001100111110000000000
+00100000001000101101001000101010
+00100000001000000101001000101010
+01110000010000100100100000000000
+01110000010000100101000000000000
+00100000001000000101001000101010
+00100000010000000111111010101101
+00011010011000100111111000000000
+10011010001001100010011000000000
+00100000011000000000000000000000
+01011000000000000000000000000001
+11100000101000001000000000000000
+11101000110000001000000000000000
+11100000101000001000000000000000
+01011000000000000000000000000010
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000010000000000000000
+01011000000000000000000000000110
+10011010010000001010010000000000
+00011000000000000010011000000100
+00100000011000000000000000000000
+01101000000000001100001001010101
+00011111111000001111111000000001
+11000000100000000101001000111110
+00011111111000001111111000000001
+01100000000000001100001001010101
+00100000011000000000000000000000
+01000111000100010100000000100100
+11011010010000000000000000000000
+00100000010000000101001001101110
+00100100001110100010101010001100
+00100000010000000101001001111110
+11011010010000000001100000000000
+11011000111000000000000000000000
+01101000000010001100001001010110
+10101000010011111111111111111111
+00100000001000001101001001001111
+00100000010000000101001010100000
+00011001011001100111110000000000
+00100000001000010101001001001111
+00100000010000000101001010001000
+00100000001000000101001001010101
+00011010010000001010010010000000
+00011000111000001000111000000001
+01011000000000000000000000001000
+10011000111001100111110000000000
+00100000001000010101001001000111
+11011010010000000000000000000000
+00011010010000100111111000000000
+00100000001110100010101010001100
+00100000011000000000000000000000
+01000111000100011100000000100100
+00100000010000000101001001110111
+00011000110000001000110000000001
+11101000110000010000000000000000
+00100000011000000000000000000000
+01000111000100100100000000100100
+00100000010000000101001001110111
+00011000110000100000101000000000
+00011000110000100000010000000000
+01011000000000000000000000000000
+11100000101000011000000000000000
+00100000011000000000000000000000
+01000111000100101100000000100100
+00100000010000000101001001110100
+00100000001110100010101010001100
+01101000000000011100001001011101
+01100000000000011100001001100000
+01101000000000011100001001011010
+01100000000000011100001001011101
+01101000000000011100001001010111
+01100000000000011100001001011010
+00100000011000000000000000000000
+01000111000100110100000000100100
+01101000000000011100001001010111
+00100000011000000000000000000000
+01000111000100111100000000100100
+01101000000000011100001001011010
+00100000011000000000000000000000
+01000111000101000100000000100101
+01101000000000011100001001100000
+00100000011000000000000000000000
+00100000010000000101001001110100
+00100000001110100010101010001100
+11011000110000000100001001010111
+11101000110000011000000000000000
+00100000001110100101001001111010
+00011000110000001000110111111101
+00100000011000000000000000000000
+01000111000101001100000000100101
+11011111001000000000000000000100
+11011000110000000100001001010111
+11011000010000000000000000000000
+11101000110000011000000000000000
+00011111111000010111111011111111
+10011000010000011000010000000000
+11000010000000000101001010000010
+01100000000010001100001001010110
+00100000011000000000000000000000
+01000111000101010100000000100101
+00100000010000000101001001101110
+00100100001110100010101010001100
+00100000010000000101001001110100
+00100000001110100101001010010101
+01101000000000011100001001011010
+01100000000000011100001001010111
+11101000110000011000000000000000
+11100000101000011000000000000000
+11101000110000011000000000000000
+11100000101000011000000000000000
+01011000000000000000000000000000
+11100000101000011000000000000000
+11011000010000000000000000000000
+00011001011000100111111000000000
+10011000111000001111111000000000
+11111001001000000000010000000000
+00011000111000001000111000000001
+10011000111001100111110000000000
+00100100001000101101001010011000
+00011010010011010111111000000000
+10011000010000011111111000000000
+01100000000000011100001001100000
+00100000011000000000000000000000
+01000111000101011100000000100101
+00100000010000000101001001111110
+00011000111000100010011000000000
+11011000010000000000000000000000
+11011001011000000000000000000000
+00011000111000100111111000000000
+11000000000001000101001010110000
+01101000000000001100001001010110
+10101111111011111111111111111111
+00100000001000001101001010110000
+00011000010000001000010010000000
+00011000111000001000111000000001
+00011010001000100111111000000000
+10011000010001100111110000000000
+00100000001000101101001010110000
+00100000001000010101001010100101
+00011000010000100111111000000000
+10011010001001100111110000000000
+00100100001000010101001010110110
+00011000111000100111111000000000
+00011010011000100000010000000000
+10011000010001100001011000000000
+00011010011000100000111000000000
+00100000011000000000000000000000
+01000111000101100100000000100101
+11011010001000000000000001111111
+00100000010000000101001001000000
+01100000000000010000001001101011
+00011111111000001111111000000100
+01100000000000010000001001101101
+01011000000000000000000000000000
+01100000000000010000001001101111
+00100000011000000000000000000000
+01101000000000010000001001101011
+00100000001000000101001011100010
+01101000000000010000001001101101
+00100000001000000101001011100010
+01000111000101101100000000100101
+11011010001000000000000011111010
+00100000010000000101001001000000
+01100000000000010000001001110001
+00011111111000001111111000000100
+01100000000000010000001001110011
+01011000000000000000000000000000
+01100000000000010000001001110101
+00100000011000000000000000000000
+01101000000000010000001001110001
+00100000001000000101001011100010
+01101000000000010000001001110011
+00100000001000000101001011100010
+01000111000101110100000000100101
+00100000010000000111111001111100
+01110000000000101000010000000001
+00100000010000000101001001101110
+00100100011110100000000000000000
+11011010001000000000000001111111
+00100000010000000101001001000000
+01100000000000010000001001110111
+00011111111000001111111000000100
+01100000000000010000001001111001
+01011000000000000000000000000000
+01100000000000010000001001111011
+01110000000000101000010000000000
+00100000001000000111111010001100
+01101000000000010000001001110111
+00100000001000000101001011100010
+00100000001110100010101010001100
+00011111111000100000101000000000
+00100000011000000000000000000000
+01000111000101111100000000100101
+11011010010000000000000000000000
+11011010001000000100001001010111
+00011010001000001010001111111110
+00011010001000001010001000000010
+01011000000000000100001001100011
+10011010001001100111110000000000
+00100000001000101101001011110101
+11101010001000001000000000000000
+00011010001000001010001000000001
+00100000001110100101001011101001
+11101010001010010000000000000000
+11101000010000010000000000000000
+10011010010000001010010000000000
+00011010010000001010010000000100
+00100000001000000101001011101001
+00011010010000100111111000000000
+00100000011000000000000000000000
+11011000111000000000000000001100
+00100000001000000010110000110010
+11011000111000000000000000001100
+00100000001000000010110000110110
+01000111000110000100000000100110
+00100000010000000101001001111110
+01101000000000001100001001010110
+00100000011110100000000000000000
+00100000010000000101001011100101
+11011000010000000000000100000000
+10011000010001100111110000000000
+00100000001000010101001011110111
+00100000010000000101001011111001
+11011000101000000100001001100011
+11011010001000000100001001010111
+01011000000000000100001001100011
+10011010001001100111110000000000
+00100000011000101000000000000000
+11101010001000001000000000000000
+00011010001000001010001000000001
+00100100001110100101001100001111
+11100000101000010000000000000000
+00011010001000001010001000000010
+00100000001000000101001100000110
+11101010001000010000000000000000
+00011010001000001010001000000010
+00011111111000100000110000000000
+11101000110000010000000000000000
+11100000101000010000000000000000
+00011111111000100111001000000000
+00011111001000001111001000000010
+00100000010000000111111100000001
+00100000001000000101001100000110
+01000111000110001100000000100110
+00100000010000000101001001111110
+01101000000000001100001001010110
+00100000011110100000000000000000
+11011010001000000100001001011000
+00011010001000001010001111111101
+11011000110000000100001001100011
+00011010001000001010001000000011
+01011000000000000100001001100100
+10011010001001100111110000000000
+00100000011000101000000000000000
+11101000110000010000000000000000
+00100000001110100101001100011111
+00011111111000001111111000000100
+00011111111000100111001000000000
+00011000110000100010010000000000
+11101010001000010000000000000000
+00011111111000100000101000000000
+00011010010000100000110000000000
+00011000110000001000110111111110
+00100000010000000111111100000001
+00100000001000000101001100011111
+01000111000110010100000000100110
+01111000010101011111110000000000
+01110000000001000101010100000001
+01110000000001000011111100000011
+01110000000001000101011000000001
+01011111111111111111111111111111
+01100000000000010000010001011001
+00011000000000000111111000000000
+01100000000000001000010001010111
+01100000000000001000010001100010
+01100000000000011100000101101001
+01100000000000011100000101101100
+01100000000000101100010000000011
+01111001001000000111111000100111
+01100000000000101100010000001000
+01110000010000111101110000000001
+01110000010000111101110100000000
+00100000001000000101011011101101
+01000111000110011100000000100110
+01111000001101001111110000000000
+01110000000001000100000000000011
+01110000000001000111100000000001
+01110000010001000101101000000001
+01011000000000001111111111111111
+01100000000000010100010001011100
+00011000000000000111111000000000
+01100000000000101100010000001000
+01111001001000000111111000100111
+01100000000000101100010000000011
+00100000001000000101001100101110
+01000111000110100100000000100110
+01111000010101001111110000000000
+01011000000000000000000000010111
+01100000000000010100010010101000
+01110000000001000100000000000001
+01110000010000110110111000000000
+01110000000000001010000000000000
+01110000010001001100010000000000
+01110000010001001100010100000000
+01101000000000010000010001101101
+01100000000000010100010010111010
+01101000000000010000010001000001
+00011111111011111111111000000101
+00011111111100011111111000000000
+01100000000000010000010001101101
+00100000001000000101001100101110
+00100000010000000101001111000100
+00100000010000000101010111101000
+00100000010000000101011011110000
+00100000001000000101001111001110
+01000111000110101100000000100110
+00100000010000000101001111000100
+00100000010000000011001011110100
+01101000000000001000010001000000
+11000000000000011101001101100110
+00100000001000000101001101111010
+01000111000110110100000000100110
+01111000001101001111110000000000
+00100000010000000101011011100100
+00100000001000010101001101110111
+00100000010000000010110001101100
+00100000010000000101010000010011
+00100000010000000101011000011110
+01111000010101101111110000000000
+00100000010000000101010010111111
+00100100011101101000000000000000
+01000111000110111100000000100110
+01101000000000001000000000000101
+00011111111000001111111000000001
+01100000000000001000000000000101
+00100000010000000101010110101010
+01111000010101001111110000000000
+00100000011000000000000000000000
+00100000010000000101001110101001
+01111000010101001111110000000000
+00100000011000000000000000000000
+01000111000111000100000000100111
+01110000010001010000111100000000
+00100000010000000111101010101111
+00100000010000000101110000011000
+01111000010101110111110000000000
+00100000010000000101011011100100
+00100000001000010101001110101001
+00100000010000000010110001101100
+00100000010000000101010000010011
+00100000010000000101010010001001
+00100100001011000101001110011011
+00100000010000000101001110110111
+00100000001101101101001110001000
+00100000001000000101001110010101
+01000111000111001100000000100111
+01101000000000001100010100001111
+00011111111000001111111000000001
+01100000000000001100010100001111
+11000000000001100101001110010101
+00100000010000000101010110101010
+00100000010000000101011000011110
+00100000010000000101010011000111
+00100000010000000101011001111110
+01101000000000010100000111111011
+00100000010000000111111110011100
+00100000010000000101001110100000
+00100000001101000101001110100100
+01000111000111010100000000100111
+00100000010000000101101111100100
+00100000010000000101101111011011
+00100000010000000111110110011100
+01101000000000001000010001100010
+11000010100000011101001110101001
+01000111000111011100000000100111
+00100000010000000101011111110100
+00100000010000000101010110011101
+00100000010000000101010101110101
+00100000001000000010100001000001
+01111000010101000111110000000000
+11000101000101010111111111100111
+11000101000101001111111111100111
+00100000011000000000000000000000
+01000111000111100100000000100111
+01111000001101110111110000000000
+00100000010000000101010011000001
+00100000001101101101001110001000
+00100000001000000101001110010101
+01000111000111101100000000100111
+00100000010000000101001110101111
+00100000010000000011001110110100
+00100000010000000111101001110111
+01110000000010101001100100010101
+00100000001000000111110110000110
+01011000000000000000000000000000
+01100000000001001100010011111111
+01110000000001000101010100000000
+01110000000001000100000000000000
+01110000000001000011111100000000
+01110000010001001100010100000000
+01110000010001001100010000000000
+00100000011000000000000000000000
+01000111000111110100000000100111
+01101000000000001000000000000101
+00011111111000001111111000000001
+01100000000000001000000000000101
+01101000000000001000010000111111
+11000011100000011000000000000000
+01111001001000000111111000000011
+01100000000000001000010000111111
+01101000000000010100010010111010
+01100000000000010000010001101101
+01011000000000000000000000000000
+01100000000000100100010011100101
+00100000011000000000000000000000
+01000111000111111100000000100111
+01110000100010010000111100110110
+01110000100010010000101101011111
+01111000001110110111110000000000
+01110000100010010001010000000111
+00100000010000000010110001101100
+01101000000000001100000111100000
+00100000011110100000000000000000
+01110000100010010000101010111000
+00100000011000000000000000000000
+01000111001000000100000000101000
+01110000100010010000111100101110
+01110000100010010000101111111111
+01111000010110110111110000000000
+01110000100010010001010000000011
+11011011011000000000000000000000
+00100000011000000000000000000000
+01111000010001001111110000000000
+01111000010000111111110000000000
+01101000000000011000010001100111
+10011000000000000001111000000000
+01101000000000001000000000010110
+00011111111011011000010000000000
+01111001001000000000010000000001
+00011000010000110001110000000000
+00100000011000000000000000000000
+00100000010000000101001111100110
+00100000010000000010100100011111
+01011000000000000000010100000000
+00100000010000000010101010001111
+00100000001000000010100100100100
+00100000001101101010100100111001
+00100000010000000101001111100110
+00100000001000000010100100110011
+01000111001000001100000000101000
+00100000010000000010100100011000
+01101000000000001000010010001100
+00100100001110100101001111111001
+01101000000000001000000000010110
+00011111111001100111110000100100
+00100000001000010101001111110011
+00011000000000000000010000000000
+11000001000100101000000000000000
+00011000000000000000010000011000
+11000001000100110000000000000000
+00011000000000000000010001001110
+00100000011000000000000000000000
+00011111111001100111110000001010
+00100000001000010101001111110110
+00011111111000001111111000000001
+00011111111000111111111000000000
+00011111111000001000010000000010
+00100000011000000000000000000000
+01101000000000001000000000010110
+00011111111000111000010000000000
+00100000011000000000000000000000
+11011000010000000000000111110100
+00100000011110100000000000000000
+11011000010000000000000011111010
+11000001000000001000000000000000
+11011000010000000000000010010110
+11000001000000010000000000000000
+11011000010000000000000001100100
+11000001000000011000000000000000
+11011000010000000000000001001011
+11000001000000100000000000000000
+11011000010000000000000000110010
+11000001000000101000000000000000
+11011000010000000000000000101000
+11000001000000110000000000000000
+11011000010000000000000000010100
+00100000011000000000000000000000
+01011000100011101000100110111110
+00011111111011010111111000000000
+00011111111000011111111011010110
+10011000000000000001001000000000
+01011000010101010101010101010101
+01100000000000011000010001100111
+00100000011000000000000000000000
+01000111001000010100000000101000
+01111000001010000111110000000000
+01101000000000100000010001100011
+10011000000000000001001000000000
+00100000010000000101010001100110
+01011000000000000000001000000000
+00100000001101001101010000011100
+01101000000000010000010001001101
+00011111111000110111111000000000
+11011000010000000000010100000000
+10011000010000001111111000000000
+00100000010000000010101000100100
+00011011010000100111111000000000
+01100000000000110000010010010001
+00100000011000000000000000000000
+01000111001000011100000000101000
+01101000000000001000000000010110
+11000000000100101101010000101000
+11000000000100110101010000101110
+11000000000100111101010000110100
+00100000001000000101010000110100
+01101000000010001100010010001101
+00101000010011111111111000000001
+00100000001000001101010000111111
+00101000010011111111111000000010
+00100000001000001101010001000100
+00100000001000000101010000111010
+01101000000010001100010010001101
+00101000010011111111111000000010
+00100000001000001101010001000100
+00101000010011111111111000000000
+00100000001000001101010000111010
+00100000001000000101010000111111
+01101000000010001100010010001101
+00101000010011111111111000000000
+00100000001000001101010000111010
+00101000010011111111111000000001
+00100000001000001101010000111111
+00100000001000000101010001000100
+01110000000000000001011000100101
+01101000000000001000101011000010
+01111001001000000111111000000000
+01100000000000001000101011000010
+00100000011000000000000000000000
+01110000000000000001011000100110
+01101000000000001000101011000010
+01111001001000000111111000000001
+01100000000000001000101011000010
+00100000011000000000000000000000
+01110000000000000001011000100111
+01101000000000001000101011000010
+01111001001000000111111000000010
+01100000000000001000101011000010
+00100000011000000000000000000000
+01000111001000100100000000101000
+00011010001000001000110000000001
+11101000110000001000000000000000
+11000100000000000000000000000000
+00011010001000001000101000011010
+11101000101000010000000000000000
+00011111111000001111111000000001
+11100000101000010000000000000000
+00011010001000001000110000011001
+11101000110000001000000000000000
+00011010001000001000101000011000
+11101000101010001000000000000000
+10011000010000001111111000000000
+00011111111001100111110000100100
+00100000001000010101010001011001
+00011111111000001111111111011011
+11100000101000001000000000000000
+00100000011000000000000000000000
+01000111001000101100000000101000
+01101000000000101000010001101111
+00011000000000000000010000000000
+00011000000000000111001000100101
+11000011000000000101010001100001
+00011000010000001000010000000001
+00011111111000110111111000000000
+11000010000000000101010001011111
+00011000010000001111111111111111
+01100000000000001000010001100001
+00100000011000000000000000000000
+01000111001000110100000000101000
+01101000000000001000010001010111
+10011000000000000000111000000000
+01101000000010101000010001101111
+10101000010011111111111111111111
+00100000001000001101010001111100
+01000111001000111100000000101000
+01101000000000001000010001100001
+10011000111001100111111000000000
+00100000001000010101010001110010
+00011111111001100000111111111111
+00100000001000000101010001101100
+00011000111000100111001000000000
+00011000000000000000111000000000
+10101000010011111111111111111111
+00100000001000001101010001110111
+00011111001000001111001000000001
+00011111001000100111111000000000
+00100000001110100101010001111100
+00011000111000001000111000000001
+00011111001000001111001111111111
+00100000001000000101010001110100
+00011000111000100111111000000000
+01100000000000001000000000010110
+00100000011000000000000000000000
+00100000001101001101010010000010
+00110111110000011000001000000000
+00100000011000000000000000000000
+11011001011000000000111010100000
+00110100011100110000001000000000
+00100000011000000000000000000000
+01111000010010000111110000000000
+01101000000000010100001101101100
+00011111111000100001011000000000
+00100000001000000101010010001110
+01000111001001000100000000101001
+01111000001010000111110000000000
+01101000000000010000010001001101
+01101000000010100100010011100101
+10011000010000001001011000000000
+00100000010000000101001111011110
+01000111001001001100000000101001
+00100000010000000101001111010101
+01111000010101101111110000000000
+01111000001001101111110000000000
+01111000001100001111110000000000
+01111000010100000111110000000000
+00011001011000100011011000000000
+00110111110000011000010000000000
+00100000001101110101010010011010
+00011011010000100000010000000000
+01100000000010110000000010011010
+00100100001011000010011001001101
+00100000001101110101010010100001
+11011101001000000000000111100000
+00011100001000100101000000000000
+01101000000000001000010000111111
+11000011000000011101010010100001
+00100000010101011010101100000101
+01000111001001010100000000101001
+00100000010000000010100110111011
+01111000001000111111110000000000
+01111000001001001111110000000000
+00001001100000000000000000001000
+00011001100010010111111000000000
+01100000000000001000001011011001
+00001001100000000000000000001000
+00011001100010010111111000000000
+11100000101000001000000000000000
+00011111111000010111001000111111
+00100000001000101101010010110001
+00001001100000000000000000001000
+00011001100010010111111000000000
+11100000101000001000000000000000
+11000010000000000101010010101101
+01000111001001011100000000101001
+00001001100000000000000000011000
+01111000001010000111110000000000
+11011011011000000000011001100100
+00011111111011110111111000000000
+00011111111100010111111000000000
+11100000101000011000000000000000
+00100000001000110010011001001101
+01111000001101101111110000000000
+01101000000000001000000000010111
+00011111111000001010001000000000
+00100000010000000010100110000001
+01111000010001101111110000000000
+00100000001000000010100100011000
+01000111001001100100000000101001
+00100000010000000101010011001001
+01101000000010001000000000010111
+00100000010000000010100100011111
+00100000010000000010100100100100
+01111000001010000111110000000000
+11011001011000000001010101111100
+00100000001000000101010010001111
+00100000010000000101010011001001
+00100000001000000010011001001101
+01000111001001101100000000101001
+00100000010000000101001111010101
+00100000010000000101001111100011
+00100000001000000101010011001101
+01111001001000000010101000000000
+01111000001011101111110000000000
+01111000001100000111110000000000
+01111000010100001111110000000000
+00100000010000000101010001111111
+00011001001100010111111000000000
+00011111111011001111111000000000
+00011111111100011111111000000000
+00001000000000001000011000101000
+01111000001000111111110000000000
+01111000001001001111110000000000
+01000111001001110100000000101001
+01101000000000001100001111011100
+00001000000000001000011000001000
+11101000110000001000000000000000
+00011111111000010111001000111111
+00001000000000001000011000001000
+00100000001000101101010011100010
+11101000110000001000000000000000
+00001000000000001000011000001000
+11000010000000000101010011011111
+01111000001001000111110000000000
+00001000000000001000011000011000
+01111000010001000111110000000000
+00110111110100111000001000000000
+00100000000000000000000001100100
+01111000010011101111110000000000
+00100000011000000000000000000000
+01000111001001111100000000101001
+01101000000000001100010010000100
+11000000000000001101010011111001
+01101000000000001100010010000101
+00011111111100100111111000000000
+00011111111010111111111000000000
+01100000000000001100001111011100
+01101000000010001100001101101111
+00011000010000001111111000000110
+01100000000000001100001111011101
+01101000000000110100010010100000
+01100000000000110100001111011110
+00011000010000100111001000000000
+11011000110000000100001101110000
+00100000010000000111111011110100
+00100000001000000101010100000100
+01101000000000001100010010000110
+00011111111100100111111000000000
+00011111111010111111111000000000
+00011111111000001111111000000001
+01100000000000001100001111011100
+01011000000000000000000000001100
+01100000000000001100001111011101
+01101000000000110100010010100000
+01100000000000110100001111011110
+01101000000000110100000111010000
+11100000101000110000000000000000
+01000111001010000100000000101010
+01101000000000001000000000000000
+00011111111000001111111000000001
+01100000000000001000000000000000
+11011011011000000000011100001000
+01111000010101101111110000000000
+00100000001000000101010010111111
+01000111001010001100000000101010
+01101000000000001100010010011110
+11000001100000001000000000000000
+01101000000000001000000000000000
+00011111111000001111111000000001
+01100000000000001000000000000000
+11011000010000000000110000000011
+01101000000000001100010010011111
+01111101001110100000010000000110
+00011010001000100111111000000000
+01111101001110100000010000000111
+01100000000010010100001111011100
+01101000000000110100010010100000
+11100000101000110000000000000000
+01101000000000110000010001001111
+11100000101000110000000000000000
+00100000001000000101010010111111
+01000111001010010100000000101010
+11011000010000000000000000000100
+01101000000000001100010010000101
+01111101001110100000010000000110
+01100000000010001100001111011100
+01101000000010001100001110001111
+00011000010000001111111000000110
+01100000000000001100001111011101
+01101000000000110100010010100000
+01100000000000110100001111011110
+11011000110000000100001110010000
+00011000010000100111001000000000
+00100000010000000111111011110100
+00100000010000000101010011000111
+00100000001000000101011100000110
+01000111001010011100000000101010
+00011000000000000111111111111111
+00111000000010000000000000000001
+01100000000000101000010001101111
+00100000010000000101010001011011
+00011000000000000111001000000100
+11011000101000000000010001100011
+00100000010000000110001100001101
+01101000000000010100010010011100
+01100000000000010000010001101101
+00011000000010100111111000000000
+00011111111000010111111000001111
+00011111111001100111110000000100
+00100000001000010101010100110101
+01100000000000001000010001011000
+01100000000000001000011011100110
+01000111001010100100000000101010
+01101000000010010100001101100111
+01100000000010010000010001000001
+00011000010000100010011000000000
+00011100010000001111111000000111
+10011010011001101111110000000000
+00100000010000000111111110000110
+00011000000001110010001000000000
+10011010001001100111111000000000
+10011010011000001111111000000000
+01101000000010010100001101100101
+10011000010000001111111000000000
+01100000000000100000010001000011
+10011100010001100010001000000000
+00011010001000001010001111111010
+11011010010000000010001000000101
+01101000000000001100010010010101
+01111101001110100010010000000110
+01101000000000001100010010001110
+01111101001110100010010000000111
+00011010010000100111111000000000
+01100000000000010100001111011100
+01101000000000110100010010100000
+11100000101000110000000000000000
+01101000000000110000010001001111
+11100000101000110000000000000000
+01101000000000100000010001100011
+11100000101000100000000000000000
+00011000000010100111111000000000
+11100000101000010000000000000000
+00011000000010100111111000000000
+11100000101000001000000000000000
+00011000000000000111111000000010
+11100000101000001000000000000000
+00011010001010110111111000000000
+11100000101000010000000000000000
+00011010011010110111111000000000
+11100000101000010000000000000000
+01000111001010101100000000101010
+01011000000000000000000000000000
+11100000101000010000000000000000
+01101000000000010100010010011100
+11100000101000010000000000000000
+01101000000000101000010001101111
+11100000101000101000000000000000
+01101000000000001000010001011000
+11011000010000000000000010100000
+10011000010000011111111000000000
+11100000101000001000000000000000
+00100000010000000101010011000111
+01011000000000000100001111011100
+00011111111000001000110000010010
+11101000110000011000000000000000
+01100000000000011000010001100111
+00100000011000000000000000000000
+01000111001010110100000000101010
+01111000010101001111110000000000
+00100000001000000101010000001100
+01101000000000001000010000111111
+11000100000000101000000000000000
+01101000000000010000010001011001
+01101000000010010000010001011111
+10011000010001100111111000000000
+00100100011000010000000000000000
+01100000000000010000101010011010
+01000111001010111100000000101010
+01101000000000001000010000111111
+01111001001111111111111000000101
+01111001001111111111111000000011
+01100000000000001000010000111111
+01101000000000100000010001000011
+01101000000010010000010001000001
+01100000000010010000101010100010
+10011000010001100010001000000000
+01000111001011000100000000101011
+01101000000000001100001111010011
+01100000000000001000010001101010
+11101000110010010000000000000000
+11101000110000010000000000000000
+00011111111010111111111000000000
+01100000000000010000010001000001
+00011000010010111000010000000000
+10011000010000001111111000000000
+11101000110010100000000000000000
+01100000000010100000010001101011
+10011010001000001111111000000000
+00011111111000100010100000000000
+01101000000000010000010001000001
+01101000000010010000101010100010
+10011000010001100111111000000000
+01101000000010010000101010011010
+10011000010011111111111000000000
+10011010100000001111111000000000
+01100000000000100000010001000011
+00100000010000000101011100010011
+01101000000000010000010001101101
+01100000000000010100010010111010
+00100000011000000000000000000000
+01000111001011001100000000101011
+01101000000000001000010000111111
+11000100000000110000000000000000
+01101000000000010000010001011001
+01101000000010010000010001011111
+10011000010001100111111000000000
+00100100011000010000000000000000
+01101000000000001000010000111111
+01111001001111111111111000000110
+01100000000000001000010000111111
+01101000000000101100001111001110
+01100000000000101000010001101111
+00100000001000000101010001011011
+01000111001011010100000000101011
+00100000010000000101011011101101
+00100000010000000101010111000000
+01101000000000001000001011011001
+00101111111011111111111000000100
+01111001001000001000000000101010
+00011111111000110111111000000000
+10011000010000101111111000000000
+00101111111011111111111000000010
+01111001001000001000000000001111
+11000110000001111000000000000000
+01101000000000001000001011011010
+00100000001110100101010110111100
+01101000000000001000010000111111
+11000011000000100101010110111100
+00100000010000000111010010001101
+00100000010000000111001111111011
+00100100011110100000000000000000
+01101000000010001000010001010110
+01111001010000000000010000000010
+01100000000010001000010001010110
+00100000011000000000000000000000
+01000111001011011100000000101011
+01101000000010001000010001010110
+00101000010011000000000000000101
+00100000011000001000000000000000
+01101000000000001000001011011001
+00011111111000111111111000000000
+10011000010000101111111000000000
+11000100000000011000000000000000
+01111001001111111000010000000101
+01111001010000000000010000000011
+01100000000010001000010001010110
+00101000010000000000011000000011
+00100100011000001000000000000000
+01101000000000001100001111011110
+11000000000000101101010111010010
+01101000000000001100010011000101
+11000000000000010101010111010110
+00100000011000000000000000000000
+01101000000000001000010000111111
+01111001001000000111111000000100
+01100000000000001000010000111111
+00100000011000000000000000000000
+01000111001011100100000000101011
+01110000010001001100010100000000
+11011111111000000000000000000000
+01100000000000100100010000001101
+01100000000000101100010000000011
+01111001001000000111111000100111
+01100000000000101100010000001000
+01101000000000001000010000111111
+01111001001111111111111000000100
+01100000000000001000010000111111
+00100000011000000000000000000000
+01000111001011101100000000101011
+00100000010000000101010000100010
+00100000010000000101010010000101
+01101000000000001000000000000001
+00011111111000001111111000000001
+01100000000000001000000000000001
+00100000011000000000000000000000
+01000111001011110100000000101011
+01101000000000001100001101101001
+11000001100000001000000000000000
+11011000111000000000000000000010
+00100000010000000111111100010110
+00100100011110100000000000000000
+01101000000000010100001101101010
+01101000000010010100001101101100
+10011000010001100111111000000000
+11011000111000000000000000000010
+00100000010000000111111100001000
+01111000010101001111110000000000
+00100000010000000101010101110010
+00100000010000000101010111100001
+00100100011101101000000000000000
+01000111001011111100000000101011
+01101000000000110000001011011011
+01100000000000110000010001001111
+01101000000000001000000000000010
+00011111111000001111111000000001
+01100000000000001000000000000010
+00100000010000000101011000001000
+00100000011101001000000000000000
+00100000010000000101010100001011
+00100100011101101000000000000000
+01000111001100000100000000101100
+01101000000000001000000000000100
+00011111111000001111111000000001
+01100000000000001000000000000100
+01101000000001001000001011100001
+01100000000001001000000100000001
+00100000011000000000000000000000
+01000111001100001100000000101100
+01101000000000001000010010011011
+11000001100011011000000000000000
+01101000000000110000010001001111
+01101000000010110100010010001111
+10011000010001100111110000000000
+00100100011000101000000000000000
+00100000010000000010001000111011
+00100100011000101000000000000000
+00100000010000000101010100101011
+00100000010000000101001101000000
+01000111001100010100000000101100
+01110000010000011100111000000000
+01110000000001000111011000000000
+01110000010000110110100100000000
+01110000000001001001101100000000
+00100000001000000010001000100011
+11011010001000000000000000000001
+01101000000000001000001011011001
+11000011100000110000000000000000
+11011010001000000000000000000000
+00100000011000000000000000000000
+01000111001100011100000000101100
+01101000000000001000010001010110
+11000011100000101000000000000000
+00100000010000000101011001000010
+00100000010000000101100001110011
+00100000001110100101011001100100
+11101000110000001000000000000000
+11101000110010001000000000000000
+00011000010000100010001000000000
+10011010001001100111111000000000
+11011000010000000000000000011011
+00100000010000000111111111011101
+00011111111000100000010000000000
+11101000110000001000000000000000
+00011111111000100000001000000000
+00011010001000100111111000000000
+10011000110000001000110000000000
+11011000101000000100001111011110
+00011000010000100111001000000000
+00100000010000000111111100000001
+00100000010000000101011001010100
+00100000010000000101011001100110
+00100000010000000101100001110011
+11101000110000001000000000000000
+00011111111000100010001000000000
+00011000110000100010011000000000
+11101000110010001000000000000000
+00011000010000100010010000000000
+10011010010001100111111000000000
+11011000010000000000000000011011
+00100000010000000111111111011101
+10011010010000001111111000000000
+11100010011000001000000000000000
+10011010001001100111110000000000
+00100100011000101000000000000000
+00100000001000000101100010010110
+00100000010000000101011001001001
+11000110000101001000000000000000
+01101000000000001100010011101001
+11000011000000010101011001010010
+00100000010000000101100001110110
+00100000001110100101011001010010
+00100000001000000101011001010000
+00100000010000000101100001110011
+00100000001110100101011001010010
+11101000110000001000000000000000
+11101000110010001000000000000000
+10011000010001100111111000000000
+00011111111001100111110000011011
+00100000001000010101011001010010
+01111001001000000000000000101001
+00100000011000000000000000000000
+01111001001111111000000000101001
+00100000011000000000000000000000
+00011010001000100111111000000000
+00100000011110100000000000000000
+11011000001000000000000000000001
+00100000011000000000000000000000
+01000111001100100100000000101100
+00011000010000001000010000000001
+00100000010000000101011101101010
+00011000110000001000110111111110
+11101000110000010000000000000000
+11011000010000000010100100000010
+10011000010001100111110000000000
+00100100011000101000000000000000
+00011000110000001000110000000001
+00011000110000100010001000000000
+11101000110000001000000000000000
+00100000011000000000000000000000
+00011000000000000000010000000000
+00011000000000000000001000000001
+01000111001100101100000000101100
+01100000000010001100001111011101
+01101000000010001000010001010110
+01111001001000000000010000000101
+00011000010000010111111011111100
+10011000001000011111111000000000
+01100000000000001000010001010110
+00011111111000010111111000011111
+00101000000011111111111000101001
+01111001001000001111111000000100
+01100000000000001100001111011100
+01101000000000001100001111011100
+00101000001000000000011000000001
+00100100001000001101011001110110
+01101000000000001100001111011101
+00100000011110100000000000000000
+01101000000000001000010000111111
+11000100000000100000000000000000
+00100000010000000111010010001101
+00100000001000000111001111100011
+11011000111000000000000000000000
+00100000001000000010110000110010
+11011000111000000000000000000000
+00100000001000000010110000110110
+01000111001100110100000000101100
+11000110000001111000000000000000
+00100000010000000101100010010000
+00100100011110100000000000000000
+01101000000000001000001011011001
+00011111111000010111111000000011
+01100000000000001100010100001100
+11101000110000001000000000000000
+00011111111000010111111000011111
+01100000000000001100010100001011
+00100000011110100000000000000000
+00011000110000100111111000000000
+01100000000000010100010100001101
+01101000000000001100010100001100
+11000000000000011101110001100100
+00100000010000000101011010011010
+00100100001101000101011001111010
+00100000010000000101011001111100
+01101000000000010100010100001101
+00011111111000100000110000000000
+11101000110000010000000000000000
+01100000000000010100010011111100
+01000111001100111100000000101100
+11101000110000010000000000000000
+11000000000000100101100010101011
+11000000000000110101101011110100
+11000000000000101101101010110110
+00100000011000000000000000000000
+01101000000000001100010100001100
+11000000000000010101011010101001
+11000000000000001101011011000001
+00100000011000000000000000000000
+00100000010000000111111111100111
+11011000010000000000000000000100
+10011111111001100111110000000000
+00100000011000101000000000000000
+11011000010000000000000000000101
+10011111111001100111110000000000
+00100000011000101000000000000000
+11011000010000000000000000000110
+10011111111001100111110000000000
+00100000011000101000000000000000
+00100000001000000111111111101001
+01101000000000010100010100001101
+00011111111000100000110000000000
+11101000110000010000000000000000
+01100000000000010100010011111100
+11101000110000010000000000000000
+00100000010000000101011010011110
+00100100011101000000000000000000
+01101000000010001100010100001011
+01100000000010001100010011111110
+01101000000000010100010011111100
+00011111111000001111111000000100
+10011000010001100111110000000000
+00100000001000101111111111100111
+01101000000000001100010100001011
+00011111111000100111001000000000
+11011000101000000000001100010001
+01101000000000010100010100001101
+00011111111000100000110000000000
+00100000010000000111111100000001
+00100000001000000111111111101001
+00100000010000000111111111100111
+01101000000000001100010011111110
+00100100011110100000000000000000
+00100000001000000111111111101001
+00100000010000000101011010111101
+00100100011101000000000000000000
+01101000000000001100010011111110
+11011000101000000000001100010001
+10011000101000001010001000000000
+01101000000010001100010100001011
+10011000010000001111111000000000
+01100000000000001100010011111110
+01101000000000001100010100001011
+00011111111000100111001000000000
+00011010001000100000101000000000
+01101000000000010100010100001101
+00011111111000100000110000000000
+00100000010000000111111011110100
+01011000000000000000001100010001
+01100000000000010100010100001101
+01101000000000010100010011111100
+00011111111000001111111000000100
+01101000000010001100010011111110
+10011000010001100111110000000000
+00100000001000101111111111100111
+00100000001000000111111111101001
+00100000010000000111111010100101
+11011000101000000100010001011110
+01101000000000010100010011111100
+00011111111000001111111111111011
+11100000101000001000000000000000
+00011111111000100111001000000000
+00100000010000000111111010011111
+00100000001000000111111011110100
+00100000010000000111111010100101
+11011000101000000100010001110001
+00100000001000000101011011011001
+01101000000000010100000111111001
+00100000001000000111111110011100
+01101000000010100000010001011011
+00100000010000000010101001111011
+10011000010001100001011000000000
+00011001011000100111111000000000
+01101000000010010000010001101101
+00011000010100100000010000000000
+00011000010000111000010000000000
+10011000010001100111111000000000
+00100000011000000000000000000000
+00100000010000000010101001111011
+01100000000000100000010001011011
+00100000011000000000000000000000
+01110000000000000001011000100100
+01110000000010101100001000000000
+01000111001101000100000000101101
+01101000000000001100001101101110
+00100000011110100000000000000000
+11011000111000000000000000000000
+00100000010000000111111100010110
+00100100011110100000000000000000
+01000111001101001100000000101101
+01111000010101001111110000000000
+01111000001010000111110000000000
+00100000010000000101010101110010
+00100000010000000101010000100010
+00100000010000000101010011101001
+00100100001101101101011100000110
+01101000000000001000000000000011
+00011111111000001111111000000001
+01100000000000001000000000000011
+01101000000000001000001011011001
+00011111111000010111111000001111
+11000000000000011101010100011100
+11000000000000101101011100101000
+01000111001101010100000000101101
+00011000000010100111111000000000
+11011000010000000000000111111111
+10011000010000010111111000000000
+00011111111000001111111011111010
+00100000010000000011110010111110
+01101000000000001000101011000010
+01101000000010001100010010001101
+10011000010001100111110000000000
+00100100001000101101011011110010
+11011000111000000000000000000000
+01101000000000010100010010000010
+00100000001000000111111100001000
+01000111001101011100000000101101
+01101000000000001000010001110110
+00100000010000000101001111111100
+01101000000000010000010001000001
+10011000010011111111111000000000
+11011000010000000000000101110111
+10011000010011111111111000000000
+11011000010000011000011010100000
+10011000010001101111110000000000
+01101000000000001000010001101010
+11011000010000000100111000100000
+10011000010011111111111000000000
+10011000010000001111111000000000
+01100000000000100100010011100101
+01000111001101100100000000101101
+01101000000000010100000011000001
+00100000010000000111111110000110
+00011000000001111000010000000000
+10011000010000001111111000000000
+01100000000000010000010001001101
+00100000011000000000000000000000
+01000111001101101100000000101101
+01101000000000110000001011100001
+01101000000010110100010010100000
+10011000010001100111110000000000
+00100100011000101000000000000000
+00100000010000000101011000011001
+00011010001000100111111000000000
+01100000000000001100010010001110
+01101000000000111000001011101110
+01100000000000111000000100000001
+11101000110001000000000000000000
+11100000101001000000000000000000
+01101000000000110000001011011011
+01100000000000110000010001001111
+00011000110000001000110000000110
+11101000110001000000000000000000
+01100000000001000000010001100011
+11101000110010010000000000000000
+01000111001101110100000000101101
+00011000010010111000010000000000
+11101000110000010000000000000000
+00011111111010111111111000000000
+01100000000000010000010001000001
+01100000000000100000010001000011
+10011000010001100111111000000000
+00011111111000001101000111111110
+11101000110001001000000000000000
+01100000000001001000010001101011
+01000111001101111100000000101101
+11101000110000001000000000000000
+00011111111100011000010000000000
+00011000010000110000010000000000
+01100000000010001000010001110110
+00011111111000010111111000011111
+01100000000000001000010001011000
+00100000010000000101011100010011
+00100000010000000101010001011011
+00100000010000000101001101001100
+00100000010000000010001000111011
+00100100011000101000000000000000
+01000111001110000100000000101110
+00100000010000000010100001000001
+00100000010000000101101011010011
+01110000000010101001100100010100
+00100000010000000111110110000110
+00100000001000000010001000100011
+01000111001110001100000000101110
+01101000000000010100010001011010
+10011000000000000010010000000000
+01101000000000010100010001011100
+10011000000000000010011000000000
+01101000000000010100010010111100
+10011000000000000000110000000000
+01111000001101000111110000000000
+00100000011000000000000000000000
+11101000110000010000000000000000
+00100000011110100000000000000000
+10011010010001100111110000000000
+00100100011000010000000000000000
+10011010011001100111110000000000
+00100000011000101000000000000000
+00100000001000010101011101101000
+00011000000000000111110000000001
+00100000011000000000000000000000
+00011000000000000111111000000000
+00100000011000000000000000000000
+00100000010000000101011101101101
+00100000001000101101011101111001
+00100000011000000000000000000000
+01000111001110010100000000101110
+01101000000000010100010010111100
+10011000000000000000110000000000
+11101000110000010000000000000000
+00100000011110100000000000000000
+10011000010001100111110000000000
+00100000011000101000000000000000
+11101000110000001000000000000000
+10011000110000001000110000000000
+11101000110000001000000000000000
+10011000110000001000110000000000
+00100000001000000101011101110000
+11101000110000001000000000000000
+10011000110000001000110000000000
+00100000011000000000000000000000
+01000111001110011100000000101110
+01101000000000010100010010111100
+10011000000000000000110000000000
+11101000110000010000000000000000
+00100000011110100000000000000000
+11101000110000001000000000000000
+10011000110000001000110000000000
+00011000110000001000110111111110
+11101000110000010000000000000000
+10011000010001100111110000000000
+00100000011000101000000000000000
+11101000110000001000000000000000
+10011000110000001000110000000000
+00100000001000000101011101111111
+01101000000000010000010010011100
+00100000001000000101011110001110
+01000111001110100100000000101110
+01101000000000010100010010111100
+10011000000000000000110000000000
+00011000010000100010001000000000
+11101000110000010000000000000000
+00100000001110100101011110011001
+10011010001001100111110000000000
+00100000001000101101011110011010
+11101000110000001000000000000000
+10011000110000001000110000000000
+11101000110000001000000000000000
+10011000110000001000110000000000
+00100000001000000101011110010000
+00100000001000000111111111101111
+11101000110000001000000000000000
+01100000000000001000010010100010
+00011111111000100111001000000000
+11011000101000000000010010100011
+00100000010000000111111011110100
+11101000110000001000000000000000
+01100000000000001000010010110011
+00100000010000000111111010100101
+00100000001000000111111111110001
+01000111001110101100000000101110
+00100000010000000101011110100110
+00100000001000000101011110111000
+11011000010000000010101000000000
+00100000010000000101011101111100
+00100000011110100000000000000000
+11101000110000001000000000000000
+00011000110000100000101000000000
+01101000000010001100001110101111
+00011000010000100111001000000000
+10011000010001100111110000000000
+00100100001000010101011110110101
+10011000010001100000010000000000
+11011000110000000100001110110000
+00100000010000000111111100000001
+00011000010000100111001000000000
+00100100010000101101011111110000
+00100000011000000000000000000000
+00011111111000100111001000000000
+11011000110000000100001110110000
+00100000001000000111111011110100
+11011010011000000100001110001111
+11011010001000000100001101110000
+00100000010000000101011111000101
+01011000000000000000000000000000
+01111001001101000111111000000000
+01100000000000001000101010011010
+11011010011000000100001110101111
+11011010001000000100001110010000
+00100000010000000101011111000101
+00100000011101000000000000000000
+01101000000000001000101010011010
+00100000001110100010101010001100
+00100000011000000000000000000000
+01000111001110110100000000101110
+00100000010000000111111111100111
+00100000010000000111111011011010
+11011010010000000000000000000000
+11011000101000000000101011000011
+00100000010000000101011111011111
+01101000000000001100001110101111
+00011111111000001000010000000001
+10011010010000001010001000000000
+00011010001000001010001000000010
+00011010001001100111110000011111
+00100100001000010101011111011101
+11100000101010001000000000000000
+11011000010000000000000000001001
+11100000101010001000000000000000
+10011000000000000111001000000000
+00100000010000000111111011110100
+00011010001000100010010000000000
+00011010010000100111111000000000
+01100000000000001000101011000010
+11011000110000000000101011000010
+01011111111111111111111111100000
+10011010011000001000101000000000
+00100000001000000111111010111101
+00100000010000000111111111101001
+00100000001000000101011111010111
+11101010001000001000000000000000
+00100000011110100000000000000000
+00011111111000001111111000000001
+11101000110010001000000000000000
+00011000010001100111110000001001
+00100000001000101101011111101110
+10011010010000001010010000000000
+00011010001000100000110000000000
+10011000000000000111001000000000
+00100000010000000111111011110100
+00011000110000100010001000000000
+00011010001000100111111000000000
+10011010011001100111110000000000
+00100000011000010000000000000000
+00100000001000000101011111011111
+10011010001000001010001000000000
+00100000001000000101011111101010
+01011000000000000000000000100000
+11100000101000001000000000000000
+11000010000000000101011111110000
+00100000011000000000000000000000
+01000111001110111100000000101110
+01111000010101011111110000000000
+00100000001101110101011111111000
+00100100001101101101100000000110
+00100000010000000010101111001011
+01101000000000010100000011000001
+01100000000000010000010001001101
+00100100001101101010101111011110
+11000101000001111010101111011110
+01101000000000001100010100001011
+00100100001110100010101111011110
+01101000000000001100001111011101
+00100100001110100010101111011110
+01101000000000001100010011101001
+11000010100000101010101111011110
+01101000000000001000010000111111
+11000010100000101010101111011110
+00100000001000000010101111000000
+01101000000010010100000011000001
+00011000010000110000010000000000
+01101000000000010000010001001101
+10011000010000001111111000000000
+01100000000000010000010001001101
+00100000001000000010101111010110
+11011000111000000000000000000000
+00100000001000000101100000100100
+11011000111000000000000000000000
+00100000001000000101100000101000
+11011000111000000000000000000001
+00100000001000000101100000100100
+11011000111000000000000000000001
+00100000001000000101100000101000
+11011000111000000000000000000010
+00100000001000000101100000100100
+11011000111000000000000000000010
+00100000001000000101100000101000
+11011000111000000000000000000011
+00100000001000000101100000100100
+11011000111000000000000000000011
+00100000001000000101100000101000
+11011000111000000000000000000100
+00100000001000000101100000100100
+11011000111000000000000000000100
+00100000001000000101100000101000
+11011000111000000000000000000101
+00100000001000000101100000100100
+11011000111000000000000000000101
+00100000001000000101100000101000
+01101000000000001100010011101001
+11111001001000000111111000000000
+01100000000000001100010011101001
+00100000011000000000000000000000
+01101000000000001100010011101001
+11111001001111111111111000000000
+01100000000000001100010011101001
+00100000011000000000000000000000
+01011000000100010010001000110011
+01100000000000011100010011101010
+01011000010001000101010101100110
+11100000101000011000000000000000
+01011000011101111000100010011001
+11100000101000011000000000000000
+01011000000000000001000100100010
+11100000101000011000000000000000
+01011000001100110100010001010101
+11100000101000011000000000000000
+01011000000000000000000001100110
+11100000101000001000000000000000
+00100000011000000000000000000000
+01011001000000000000001100000010
+01100000000000100100010001010011
+01011000000000010000000000010000
+01100000000000011100010001010111
+01110000010001001100011000000001
+00100000011000000000000000000000
+11011010001000000000000000000000
+11011000001000000000000000000001
+00100000001000000101100001010000
+11011000001000000000000000000011
+00100000010000000101100001010000
+00011010010000100111111000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+00011000000000000000001000000010
+00011010001000001010001000000100
+00100000010000000101100001010000
+00011010001000001010001111111100
+00011010001000100111111000000000
+11100000101000010000000000000000
+00011010010000100111111000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+00011010001001100111110011110000
+00100100001000010010101010001100
+01101000000000001100010011111111
+11011000010000000000000000000001
+11011111001000000000000000000100
+10011000010000010111110000000000
+00100000001000101101100001011010
+00011000010000111000010000000000
+11000010000000000101100001010101
+00100000001000000010101010001100
+10011000010000101111111000000000
+01100000000000001100010011111111
+00011111001001100111111000000100
+00011111111100100111111000000000
+00011111111100100111111000000000
+11011000010000000001100000000000
+10011000010000001000010000000000
+11011111001000000000000000000000
+11011000110000000100010100000000
+11101000110000010000000000000000
+00100000001110100101100001101001
+00011111001000100111111000000000
+00011111001000001111001000000001
+11000000100000100101100001100011
+00100000001000000010101010001100
+00011000110000001000110111111110
+11100000110010010000000000000000
+00011000010000100000101000000000
+00011010001000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000000000000
+11100000101000001000000000000000
+00011000001000100111111000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+01101000000000010100010100000000
+00011111111000100000110000000000
+00100000011000000000000000000000
+01101000000000010100010100000010
+00011111111000100000110000000000
+00100000011000000000000000000000
+00100000010000000101100001111100
+00011111111000100000110000000000
+00100000011000000000000000000000
+01101000000000010100010100000110
+00100100011110100000000000000000
+01101000000000010100010100000100
+00100100011110100000000000000000
+01101000000000010100010100000010
+00100100011110100000000000000000
+01101000000000010100010100000000
+00100000011000000000000000000000
+00100000010000000101100001110011
+00011000110000001000110000000011
+00100000011000000000000000000000
+00100000010000000101100001110011
+00011000110000001000110000000111
+00100000011000000000000000000000
+00100000010000000101100001111001
+00011000110000001000110000000111
+00100000011000000000000000000000
+00100000010000000101100001111001
+00011000110000001000110000000011
+00100000011000000000000000000000
+01101000000000010100010100000110
+00100000011000000000000000000000
+01101000000000010100010100000100
+00100000011000000000000000000000
+01101000000000010100010100000000
+00100000011000000000000000000000
+01101000000000010100010100000000
+11011000010000000001100000000000
+10011000010001100111111000000000
+00011111111100011111111000000000
+00011111111100011000111000000000
+01101000000000001100010011111111
+11111001001111111111111000000000
+01100000000000001100010011111111
+11011111001000000000000000000000
+00011111001000111111111000000000
+11011000010000000100010100000010
+10011000010000001000010000000000
+11101000010000010000000000000000
+00011000010000001000010111111110
+11100000010000010000000000000000
+00011111001000100111111000000000
+00011111001000001111001000000001
+11000000100000011101100010011111
+01011000000000000000000000000000
+11100000010000010000000000000000
+00100000011000000000000000000000
+11101000110000011000000000000000
+01100000000000011000010001110111
+11000000000000010101100011000001
+11000000000000011101100011001001
+11000000000000100101100011001100
+11000000000000110101100011110010
+11000000000001000101100100111111
+11000000000001010101100110111100
+11000000000001100101100111100100
+11000000000010000101100111111010
+11000000000010010101101000101111
+11000000000010110101101001001000
+11000000000011000101101001011011
+11000000001010010101101001100000
+00100000011000000000000000000000
+00011000000000000010001000000011
+00100000010000000101101010000010
+01011000000000000000000000000010
+11100000101000001000000000000000
+01101000000000010100010010100110
+11100000101000010000000000000000
+00100000011000000000000000000000
+00100000010000000101100011001001
+00011000000000000010001000000011
+00100000010000000101101010000010
+01011000000000000000000000000011
+11100000101000001000000000000000
+01101000000000010100010010100110
+11100000101000010000000000000000
+00100000011000000000000000000000
+00011111111011001111111000000000
+01100000000000010100010010101000
+00100000011000000000000000000000
+00100000010000000101101010110001
+00100000010000000111111111100111
+00100000001000000101100011001111
+11011001011000000000000000000011
+00100000010000000101011101010110
+00100000010000000101011101011111
+00100000001110100101100011110000
+00100100001000010101100011101101
+00011000110000001000110111111110
+00100000010000000111111010100101
+00100000010000000111111010011100
+00100100001101000101100011100001
+00100000010000000111111010000101
+00100000010000000111111111101001
+00011000000000000010001000010100
+00100000010000000101101010000010
+00100000010000000111111010010101
+01011000000000000000000000000101
+11100000101000001000000000000000
+01011000000000000000000000000001
+11100000101000001000000000000000
+00100000010000000111111010011111
+11101000110000010000000000000000
+11100000101000010000000000000000
+11101000110000001000000000000000
+00011111111000100111001000000000
+00100000010000000111111100000001
+00100000010000000111111010100010
+00011001011000001001011111111111
+00100000001000101101100011110000
+11101000110000001000000000000000
+10011000110000001000110000000000
+00100000001000000101100011010001
+11101000110000001000000000000000
+10011000110000001000110000000000
+00100000001000000101100011101010
+00100000001101000101101001110110
+00100000001000000101101010100101
+00100000010000000101101010110001
+11101000110000010000000000000000
+01100000000000010100010001110010
+00100000010000000111111010100101
+11011000101000000100010001011110
+01101000000000010100010011111100
+00011111111000001111111111111001
+00100000010000000101011011011011
+00100000001000000101100100000101
+01111000010101000111110000000000
+01101000000010010100010001011010
+01101000000000010100010001011100
+10011000010001100111110000000000
+00100100001000010101100100000010
+00011000010000100111111000000000
+11000001100000000000000000000000
+01111000001101000111110000000000
+01110000000001000111101000000001
+00100000001000000101101001110111
+00100000010000000101100011111011
+00100000011101000000000000000000
+01101000000010010100010001110010
+01011000000000000010100000000000
+10011000010001100111110000000000
+00100000001000101101100100001100
+00100000001000000101101001110110
+01110000000001001011010000000000
+01101000000010010100010001011010
+01100000000010010000101010100010
+00100000010000000101011110001100
+00100100001110100101101001110110
+01101000000010010000101010100010
+00100000010000000101011110001100
+00100100001110100101100100100101
+00011000110000100010001000000000
+01101000000000001000010010110011
+00011111111000100111001000000000
+01101000000010001100010001011110
+10011000010001100111110000000000
+00100100001000101101100100100001
+11011010010000000100010001011111
+00100000010000000111111110001000
+00100000001000101101100100101000
+01101000000000010000010010100011
+01101000000010010100010001110010
+10011000010001100111110000000000
+00100000001000101101100100110000
+01101000000000010000101010100010
+00011111111000001111111000000001
+01100000000000010000101010100010
+00100000001000000101100100010001
+01101000000000001000010010110100
+11000000000000001101100100110000
+00100000001000000101101001110110
+01101000000000010000010010100011
+01101000000010010100010001110010
+10011000010001100111110000000000
+00100100001000101101100100100001
+01110000000001001011010000000001
+01101000000010010000101010100010
+01100000000010010000010010011110
+00100000001000000101100100100001
+01101000000000001000010010110100
+11000000000000000101100100100001
+01110000000001001011010000000010
+01101000000010010000101010100010
+00011000010000001000010111111111
+01100000000010010000010010100000
+11011010001000000000000000000101
+00100000010000000101101010000010
+01011000000000000000000000000111
+11100000101000001000000000000000
+01101000000000010000010010011110
+11100000101000010000000000000000
+01101000000000010000010010100000
+11100000101000010000000000000000
+00100000011000000000000000000000
+00100000010000000101101010110001
+00100000010000000101011011011111
+00100000001000000101100101000010
+01101000000010010100010001011010
+01100000000010010000101010100010
+00100000010000000101011101010110
+00100000010000000101011101101101
+00011000110000001000110111111110
+00011000110000100111111000000000
+01100000000000010000010010011100
+01101000000010010100010001110010
+01011000000000000010101000000000
+10011000010001100111110000000000
+00100000001000101101100110101000
+01011000000000000010100000000011
+10011000010001100111110000000000
+00100100001000101101100110010000
+11011001011000000000000000000010
+00100000010000000101101010001000
+00100100001000010101100101101101
+01101000000010010000101010100010
+00100000010000000101011110001010
+11000000000000001101100101101101
+00100000010000000101101010010100
+00100100001000101101100101101011
+00100100001101000101100101101111
+01111000010101000111110000000000
+11011010001000000000000000010100
+00100000010000000101101010000010
+01011000000000000000000000001001
+11100000101000001000000000000000
+00011000101000100110000000000000
+00011000101000001000101000000001
+00100000010000000101100101111101
+00100000010000000101101010000100
+00100000010000000101011110001010
+00100000010000000101100110000100
+01101000000000001000010010100010
+00011111111000001111111000000101
+11100110000000001000000000000000
+01101000000000001000010010100010
+11000000000010000101100101101101
+00011001011000001001011111111111
+00100000001000101101100101101101
+00100000010000000101101010000100
+00100000001000000101100101010001
+00100000001101000101101001110110
+00100000001000000101101010100101
+00100000010000000101101010010111
+00100000010000000101101010000100
+00100000010000000101011110001010
+01101000000000001000010010100010
+11000000000010000101100101101101
+00100000010000000111111010011100
+01101000000000010000101010100010
+00011111111000001111111111111111
+11100000101000010000000000000000
+00100000010000000101101010100001
+00100000010000000101100110000100
+00011001011000001001011111111111
+00100000001000101101100101101101
+00100000001000000101100101101011
+01101000000000010000101010100010
+11100000101000010000000000000000
+01101000000000001000010010110011
+00011111111000100111001000000000
+00100000010000000111111010011111
+00100000010000000111111011110100
+00100000001000000111111010100010
+00100000010000000111111010011100
+01101000000000010000101010100010
+11100000101000010000000000000000
+00100000010000000111111010100010
+01101000000000001000010010100010
+00011111111000100111001000000000
+00100000010000000111111010011100
+00100000010000000111111010011111
+10011111001001100000110000000000
+00011000110000001000110111111111
+00100000010000000111111011110100
+00100000001000000111111010100010
+01101000000010010100010001011010
+01100000000010010000101010100010
+00100000010000000101101010001000
+00100100001000010101101001110110
+00100000010000000101011110001010
+11000000000000001101101001110110
+00100000010000000101101010010100
+00100100001000101101100110100110
+11011010001000000000000000010100
+00100000010000000101101010000010
+01011000000000000000000000001001
+11100000101000001000000000000000
+01101000000000001000010010110011
+00011111111000100111001000000000
+00011111111000001111111000000010
+11100000101000001000000000000000
+01101000000000010000101010100010
+11100000101000010000000000000000
+00100000010000000111111010011111
+00100000010000000111111011110100
+00100000010000000111111010100010
+00100000001000000101101010100101
+00100000010000000101101010000100
+00100000001000000101100110010010
+11011000010000000010101000000000
+00100000010000000101011101111100
+00100000011110100000000000000000
+00011000110000001000110111111011
+11101000110000010000000000000000
+01100000000000010000101010100010
+11011010001000000000000000010100
+00100000010000000101101010000010
+01011000000000000000000000001001
+11100000101000001000000000000000
+01101000000000001100001110101111
+00011111111000100111001000000000
+00011111111000001111111000000010
+11100000101000001000000000000000
+01101000000000010000101010100010
+11100000101000010000000000000000
+11011000110000000100001110110000
+00100000010000000111111011110100
+00100000010000000111111010100010
+00100000001000000101101010100101
+01101000000010010000010001111000
+01101000000000001100010011101001
+11000010100000011101100111011101
+00100000010000000101011101101010
+00100000001110100101101001110110
+00011000110000001000110111111110
+11101000110000010000000000000000
+11011000010000000010101000000000
+10011000010001100111110000000000
+00100000001000101101100111010011
+11101000110000001000000000000000
+00011111111001100111110000010110
+00100000001000010101100111001010
+00011000000000000111111000010110
+00011111111000100010011000000000
+00100000010000000111111010100101
+00011010011000001010001000000001
+00100000010000000101101010000010
+01011000000000000000000000001011
+11100000101000001000000000000000
+00011010011000100111001000000000
+00100000010000000111111010011111
+00100000001000000111111100000001
+00100000010000000111111010100101
+01101000000000001100001110101111
+00011111111000001010001000000001
+00100000010000000101101010000010
+01011000000000000000000000001011
+11100000101000001000000000000000
+01101000000000001100001110101111
+00011111111000100111001000000000
+11011000110000000100001110110000
+00100000001000000111111100000001
+01101000000000010100010011111010
+10011000010001100111110000000000
+00100100001000101101100110111111
+00100000010000000101101001000010
+00100100001101000101100110111111
+01110000000001000111101000000101
+00100000001000000101101001110111
+11101000110000010000000000000000
+01100000000000010100010001011110
+11011010001000000000000000010100
+00100000010000000101101010000010
+01011000000000000000000000001101
+11100000101000001000000000000000
+01101000000000010100010001011110
+10011000000000000010001000000000
+01101000000010010000010001111000
+00100000010000000101011101101010
+00100000001110100101101001110110
+11101000110000001000000000000000
+10011010001001100111001000000000
+00100100001000010101101001110110
+00011111001001100111110000010110
+00100000001000010101100111110101
+00011000000000000111001000010110
+00011010001000100111111000000000
+10011000110000001000110000000000
+00100000010000000111111011110100
+00100000010000000111111010100010
+00100000001000000101101010100101
+00100000010000000101101010110001
+00100000010000000101011011010111
+00100000001000000101100111111101
+11011001011000000000000000000010
+01101000000010010100010001011010
+01100000000010010000101010100010
+00100000010000000101011101010110
+00100000010000000101011101101101
+00011000110000001000110111111110
+00011000110000100111111000000000
+01100000000000010000010010011100
+00100000010000000101101010001000
+00100100001000010101101000100101
+01101000000010010000101010100010
+00100000010000000101011110001010
+11000000000000001101101000101000
+00100000010000000101101010001100
+00100100001000101101101000100011
+00011001011000100111111000000000
+11000000000000000101101000101000
+00100100001101000101101000011001
+01111000010101000111110000000000
+11011010001000000000000000010100
+00100000010000000101101010000010
+01011000000000000000000000010001
+11100000101000001000000000000000
+01101000000000001000010010110011
+00011111111000001111111000000100
+11100000101000001000000000000000
+00100000010000000111111010100010
+00100000001000000101101000011111
+01101000000000001000010010110011
+11000000000010000101101000101000
+01101000000000010000101010100010
+00011111111000001111111111111111
+01100000000000010000010010100000
+00100000010000000101101010011100
+01101000000000010000101010100010
+01100000000000010000010010011110
+00100000010000000101101010010111
+00011001011000001001011111111111
+00100000010000000101101010000100
+00100000001000000101101000000101
+01101000000000010000101010100010
+01100000000000010000010010100000
+00100000001000000101101000101100
+01101000000000010000101010100010
+00011111111000001111111111111111
+01100000000000010000010010100000
+00100000001000000101101000101100
+00100000001101000101101001110110
+00100000010000000101101010011100
+00100000001000000101101010100101
+00011000110000100010001000000000
+01101000000000010100010011111100
+00011111111000001010010111111101
+00100000010000000101011011100010
+01101000000000001100010011101001
+11000011000000100101101000111101
+01101000000010010000010001111000
+01101000000000010100010011111010
+10011000010001100111110000000000
+00100100001000101101101000111101
+00100000010000000101101001000010
+00100100001101000101101000111101
+01110000000001000111101000000101
+00100000001000000101101001110111
+00011000000000000010001000000001
+00100000010000000101101010000010
+01011000000000000000000000010011
+11100000101000001000000000000000
+00100000011000000000000000000000
+00100000010000000111111111101001
+01101000000000001100010011000110
+11000001000000000000000000000000
+01101000000000001100000001000000
+11000011100000100000000000000000
+00100000001000000111111111100111
+00011000110000001010001000000010
+01101000000000010100010011111100
+00011111111000001010010111111011
+00100000010000000101011011100010
+00100000001000000101101001001101
+01101000000000010100010011111100
+00011111111000100010001000000000
+00100000010000000101101010000010
+01011000000000000000000000010111
+11100000101000001000000000000000
+01101000000000010000010001111000
+11100000101000010000000000000000
+01101000000000010100010011111100
+00011111111000001111001111111011
+01101000000000010100010100001101
+00011111111000001000110000000111
+11101000110000010000000000000000
+11100000101000010000000000000000
+00100000001000000111111011110100
+00011000000000000010001000000001
+00100000010000000101101010000010
+01011000000000000000000000011001
+11100000101000001000000000000000
+00100000011000000000000000000000
+00011000110000100010001000000000
+01101000000000010100010011111100
+00011111111000001010010111111101
+00100000001000000101011011100010
+00011000010000100010011000000000
+00011010001000001010001000000011
+00100000010000000101101010000010
+00011010001000001010001111111101
+01011000000000000000000000011011
+11100000101000001000000000000000
+00011010011000100000010000000000
+11100000101010010000000000000000
+00100000011000000000000000000000
+00011000010000100010011000000000
+00011010001000001010001000000011
+00100000010000000101101010000010
+00011010001000001010001111111101
+01011000000000000000000000011101
+11100000101000001000000000000000
+00011010011000100000010000000000
+11100000101010010000000000000000
+00100000011000000000000000000000
+01110000000001000111101000001010
+00011000000000000010001000000101
+00100000010000000101101010000010
+01011000000000000000000000000001
+11100000101000001000000000000000
+01101000000000001000010001110111
+11100000101000001000000000000000
+01101000000000010000010001111000
+11100000101000010000000000000000
+01101000000000001000010001111010
+11100000101000001000000000000000
+00100000011000000000000000000000
+00011000000000000010010000000100
+00100000001000000101100001000111
+01101000000010010000101010100010
+00011000010000001000010000000001
+01100000000010010000101010100010
+00100000011000000000000000000000
+01101000000010010000101010100010
+01101000000000010100010001011100
+10011000010001100111110000000000
+00100000011000000000000000000000
+01101000000010001100010001011110
+11011010001000000100010001011111
+01101000000000001000010010100010
+00011111111000100111001000000000
+10011000010001100111110000000000
+00100100011000101000000000000000
+11011010010000000000010010100011
+00100000001000000111111110001000
+01101000000010001100010001110001
+11011010001000000100010001110010
+00100000001000000101101010001110
+01101000000000001000010010110011
+01100000000000001000000100000001
+00011111111000100111001000000000
+00100000010000000111111010011111
+00100000001000000111111011110100
+00100000010000000111111010011100
+01101000000000010000010010011110
+11100000101000010000000000000000
+01101000000000010000010010100000
+11100000101000010000000000000000
+01101000000000001000000100000001
+00011111111000100111001000000000
+00100000010000000111111011110100
+00100000001000000111111010100010
+00100000010000000111111010011100
+00100000010000000101100010001010
+00011000101000100111111000000000
+10011000110001100010001000000000
+00100000010000000101100010001101
+00011010001000100111111000000000
+11100000110000010000000000000000
+00011010001000001010001000000100
+00100000010000000101100001111001
+00011010001000100111111000000000
+11100000110000001000000000000000
+00100000011000000000000000000000
+00011111111011001111111000000000
+01100000000000010100010001011010
+11101000110000010000000000000000
+01100000000000010100010001011100
+00100000011000000000000000000000
+11101000110000001000000000000000
+11101000110010001000000000000000
+11101000110010010000000000000000
+11000000000010011101101010111011
+00100000011000000000000000000000
+11101000110000010000000000000000
+01100000000000010100010100001001
+01110000000010101001100101000000
+00100000001000000111110110000110
+11011010001000000000000000001100
+11011010011000000000000000010010
+00100000010000000101101011000111
+01011000000000000000000000001000
+11100000101000010000000000000000
+01101000000001000100010010010110
+11100000101001000000000000000000
+00100000011000000000000000000000
+00100000010000000101101011001111
+11011010010000000000000000000101
+00100000010000000101100001000111
+00011010011000100111111000000000
+11100000101000001000000000000000
+01101000000000001100010100001000
+11100000101000001000000000000000
+00100000011000000000000000000000
+01101000000000001100010100001000
+00011111111000001111111000000001
+01100000000000001100010100001000
+11000001100000000000000000000000
+01110000010001010000100000000001
+00100000011000000000000000000000
+01101000000000001100010011000110
+11000000000000000101101011100100
+11000000000000001101101011100111
+11000000000000010101101011101001
+11000000010000001101101011011101
+11000000010000010101101011011111
+11000000010000011101101011100010
+00100000011000000000000000000000
+01110000010001000101011000001101
+00100000001000000101101011100101
+01110000010001000101011000001101
+01110000010001000101010000000001
+00100000011000000000000000000000
+01110000010001000101011000001101
+00100000001000000101101011101010
+01110000010001000101011000000000
+01110000010001000101010000000011
+00100000011000000000000000000000
+01110000010001000101011000000101
+00100000001000000101101011100101
+01110000010001000101011000000101
+01110000010001000101010000000000
+00100000011000000000000000000000
+01101000000000001100010001010110
+01111001001000000111111000000011
+01100000000000001100010001010110
+00100000011000000000000000000000
+01101000000000001100010001010110
+01111001001111111111111000000011
+01100000000000001100010001010110
+00100000011000000000000000000000
+11101000110000001000000000000000
+11000000000000001101101100001001
+11000000000000011101101100110000
+11000000000000100101101101001101
+11000000000000101101101101011010
+11000000000000110101101110000000
+11000000000000111101101111000100
+11000000000001000101101110101111
+11000000000001001101101111000000
+11000000000001010101101111000100
+11000000000001011101101111000100
+11000000000001100101101111000101
+11000000000001101101101111001010
+00100000011000000000000000000000
+00011000000000000010001000000010
+00100000010000000101110001100010
+01011000000000000000000000001011
+11100000101000001000000000000000
+01101000000000001100010001010110
+11100000101000001000000000000000
+00100000011000000000000000000000
+01100000000000001100010001001100
+11101000110000110000000000000000
+11100000101000110000000000000000
+01101000000000001100010011000110
+11000000000000000101101101011111
+00100000010000000101101100101011
+00100000010000000101101100100110
+01110000010001001100010000000011
+01101000000000001100010001001101
+11000000000000000101101100011000
+11000000000000001101101100011000
+11000000000000011101101100011000
+01101000000000001100010011000110
+11000000000000010101101100011011
+11000001010000011000000000000000
+11011111111000000000000000000000
+01100000000000100100010011000111
+00100000011000000000000000000000
+01101000000000001100010011101001
+11000010100000000101101100100100
+11011010001000000100010011000111
+00011010001000100000101000000000
+11011111001000000000000000000011
+00100000010000000110001100001101
+01101000000000010100010011001001
+00011111111000010111111000000111
+01100000000000010100010011001001
+01110000000010101001100100110100
+00100000001000000111110110000110
+01101000000000001100010001001111
+11000011100000011000000000000000
+01101000000000001100010011000110
+11000100000000111000000000000000
+00100000001000000011010000000010
+00011000000000000010001000000111
+00100000010000000101110001100010
+01101000000000111100010001010011
+11100000101000111000000000000000
+00100000011000000000000000000000
+00011000110000100010001000000000
+01101000000000001100010011000110
+11000000010000011101101100110111
+00011010001000100000110000000000
+11011000101000000100010000101010
+00100000010000000111111010111111
+00100000001000000101101100111101
+00011010001000100000110000000000
+11011000101000000100010000101010
+00100000010000000111111010111111
+01110000010001001011111100000010
+01110000010001001100000100001000
+00100000011000000000000000000000
+01101000000000001100010011000110
+11000010100000111101101101000101
+00100000010000000111001110011100
+00011000000000000010001000010001
+00100000010000000101110001100010
+01011000000000000000000000000011
+11100000101000001000000000000000
+00100000001000000111010010010111
+11011000101000000100010000111010
+00100000010000000110001100001100
+00100000010000000111000111000101
+00011000000000000010001000010001
+00100000010000000101110001100010
+01011000000000000000000000000011
+11100000101000001000000000000000
+00100000001000000111001000000001
+00011000110000100010001000000000
+01101000000000001100010011000110
+11000010100000111101101101100001
+00011010001000100000110000000000
+00100000010000000111001110010100
+00100000001000101101101101110101
+01110000000001000111101100000100
+00011000000000000010001000000010
+00100000010000000101110001100010
+01011000000000000000000000000101
+11100000101000001000000000000000
+01101000000000001000010001111011
+11100000101000001000000000000000
+00011000000000000000111000001010
+00100000010000000111111100000111
+01110000010001001100010000000000
+01110000000010101001100100110000
+00100000001000000111110110000110
+01110000000001000111101100000101
+00100000001000000101101101010100
+11011000101000000000010000101111
+00011010001000100000110000000000
+00100000010000000111111010111111
+01101000000000001100010011000110
+11000000010000011101101101101100
+00100000010000000111000101001111
+00100000010000000101101101111010
+01101000000000001100010011000110
+11000001110000010000000000000000
+01110000000010101001100100111011
+00100000001000000111110110000110
+00100000010000000111000110111010
+11011000101000000000101011110010
+00100000010000000111001000000001
+11011010001000000000101011110010
+11011010010000000100010000101010
+11011111001000000000000000010000
+00100000010000000111111110001000
+00100100001000101101101101010011
+00100000001000000101101101111010
+00100000010000000111001110010000
+01110000000010101001100100110001
+00100000010000000111110110000110
+01110000010001000010100100000001
+01110000010001001100010000000101
+00011000000000000010001000010001
+00100000010000000101110001100010
+01011000000000000000000000000100
+11100000101000001000000000000000
+11011000110000000100010000111010
+00100000001000000111111010111111
+11011000101000000000010000011111
+00100000001000000111111010111111
+00011000000000000010001000010001
+00100000010000000101110001100010
+01011000000000000000000000000110
+11100000101000001000000000000000
+01101000000000001100010011101001
+11000010100000001101101110001010
+11011000110000000100010000011001
+00100000001000000111111010111111
+11011000110000000100010011101010
+00100000001000000111111010111111
+11011000101000000100010011001011
+00011000000000000111001000001010
+00100000010000000110001100001101
+00011000000000000010001000001011
+00100000010000000101110001100010
+01011000000000000000000000000111
+11100000101000001000000000000000
+01101000000000010100010011001011
+11100000101000010000000000000000
+01101000000001000100010011001101
+11100000101001000000000000000000
+00100000011000000000000000000000
+00011000000000000010001000010001
+00100000010000000101110001100010
+01011000000000000000000000001000
+11100000101000001000000000000000
+01011000000000000000000000000000
+11100000101001000000000000000000
+11100000101001000000000000000000
+00100000011000000000000000000000
+00011000000000000010001000001000
+00100000010000000101110001100010
+01011000000000000000000000001001
+11100000101000001000000000000000
+01101000000000001100010010010101
+11100000101000001000000000000000
+01101000000000110100010010100000
+11100000101000110000000000000000
+00100000011000000000000000000000
+01110000000001000111101100001000
+00100000001000000101101101010100
+01101000000000001100010001011000
+01101000000010001100010001011000
+10011000010000010111111000000000
+00100000011000000000000000000000
+11011000101000000100010011010101
+00100000010000000111111010111111
+00100000010000000101101110101011
+00101111111011000000000000000001
+00100000001000001101101110101001
+01101000000000001100000010010010
+11000001100001010000000000000000
+00100000010000000101101110111001
+00100100011101000000000000000000
+00100000001000000011010000010000
+00100000010000000111111111101001
+01101000000000001100010010001110
+11000001000000000000000000000000
+01101000000000001000010001010100
+00101111111000011000000011000000
+00100000011000001000000000000000
+00100000001000000111111111100111
+00100000010000000101101110101011
+00101111111011000000000000000001
+00100000001000001101101110101001
+00100000011000000000000000000000
+00100000011000000000000000000000
+11011000101000000000100110111110
+00100000010000000111111010110011
+01110000010001001011111100000010
+01110000010001001100000100000001
+00100000011000000000000000000000
+11011000101000000000101001101110
+00100000010000000111111010111111
+01110000010001001100000100000110
+01110000010001001011111100000010
+00100000011000000000000000000000
+00011000000000000010001001000001
+00100000010000000101110001100010
+01011000000000000000000000001100
+11100000101000001000000000000000
+11011000110000000100010111010010
+00100000001000000111111010110011
+00100000010000000111000101100110
+00011000000000000010001000010001
+00100000010000000101110001100010
+01011000000000000000000000001101
+11100000101000001000000000000000
+00100000001000000111001000000001
+01101000000000001100010011000100
+11000001011111111000000000000000
+11011000010000000000000000000011
+10011000010001100111110000000000
+00100100011000010000000000000000
+11011000111000000000000000001010
+00100000010000000111111100010110
+00100100011110100000000000000000
+00100000001000000101101110101001
+01000111001111000100000000101111
+01101000000000001100010011000100
+11000000000000000101101111101111
+11000000000000001101101111110101
+11000000000000010101101111101111
+11000000000000011101101111110111
+11000000000000101101101111111011
+11000000000000111101110000000111
+11000000000001000101110000001001
+11000000000001001101110000010000
+00100000011000000000000000000000
+01101000000000001100010011000101
+11000001100000100000000000000000
+01110000010001001100010111111111
+01110000010001001100010011111111
+01110000000010101001100100111111
+00100000001000000111110110000110
+01110000010001001100010000000010
+00100000001000000101101100000010
+01110000010001001100010000000100
+01011000000000010111011100000000
+11011000111000000000000000001010
+00100000001000000111111100001000
+01101000000000001100010011000101
+11000000000000100101101111111110
+00100000011000000000000000000000
+01110000010001001100010000000111
+01110000000010101001100100101001
+00100000010000000111110110000110
+00100000010000000101101110000010
+01101000000000001100000010010010
+11000001100001010000000000000000
+00100000010000000101101110111001
+00100000011101000000000000000000
+00100000001000000011010000010000
+01110000010001001100010000001000
+00100000001000000101101110001100
+01101000000000001100010001010010
+01101000000010001100010001011001
+10011000010000010111111000000000
+00101111111011000000000000000001
+00100000001000001101110000010010
+01110000010001001100010000001001
+00100000001000000101101110011000
+00100000010000000101101110100000
+00100000001000000101110000010010
+00011000000000000000111000001010
+00100000010000000111111100000111
+01110000010001001100010111111111
+01110000010001001100010011111111
+01110000000010101001100100111110
+00100000001000000111110110000110
+01000111001111001100000000101111
+01101000000000001100010011000110
+11000100000000111000000000000000
+01101000000000001100010010111111
+11000001100000010000000000000000
+01110000010001001011111100000000
+01101000000000001100010011000001
+11000000000000001101110001011000
+11000000000000010101110001011111
+11000000000000011101110001010010
+11000000000000110101110000111001
+11000000000000111101110000110000
+11000000000001000101110000100110
+00100000011000000000000000000000
+01101000000000001100011001100011
+00011111111000100000111000000000
+00011111111000001111111000000001
+01100000000000001100011001100011
+01101000000000100100010011000111
+10101111111011111111111111111111
+01011000000000000000000010000000
+01111001001000001111111000000000
+01100000000000001100011001100100
+00100000001000000101110001010101
+01101000000000001100010011000010
+01110000010001001100001000000000
+11000000000000001101110000110101
+01110000010001001011111100000010
+00100000011000000000000000000000
+01110000000010101001100100110001
+00100000010000000111110110000110
+01110000010001001100010000000101
+00100000001000000101101111010101
+01101000000000001000100110111001
+11000000000000011101110000111101
+01110000010001001011111100000010
+00100000011000000000000000000000
+00100000010000000111000110001101
+01101000000000001100010011000110
+11000000010000011101110001000001
+00100000010000000101101100011000
+00100000010000000111000101111010
+11011010001000000000101011110010
+11011010010000000000101001101110
+11011111001000000000000000010000
+00100000010000000111111110001000
+00100000001000101101110001001001
+01110000000001000111101100001011
+00100000001000000101101101010100
+00100000010000000111010110010101
+00100100001000101101110001000111
+01110000010001000010100100000001
+01101000000000001100010011000110
+11000000010000001101110000110101
+11000000010000011101110000110101
+01110000010001001011111100000010
+01110000010001001100000100000111
+00100000011000000000000000000000
+01101000000000001100010011000110
+11000000010000011101110001010110
+01110000010001100110010000000000
+00100000001000000101101100111101
+01110000010001100110001100000000
+00100000001000000101101100011011
+01110000010001001011111100000010
+01101000000000001100010011000011
+11000000000000011101110001011100
+00100000011000000000000000000000
+01110000010001001100000100000010
+01110000000010011011100100000000
+00100000001000000111101010011001
+01110000010001001011111100000010
+01110000010001001100000100000011
+00100000001000000101101111001111
+00011000000000000010010000000110
+00100000001000000101100001000111
+01101000000000001000001011011011
+11000000000000000101110001111011
+11000000000000001101110010000011
+11000000000000010101110010001110
+11000000000000011101110010101010
+11000000000000100101110011100001
+11000000000000101101110011100110
+11000000000000110101110011101010
+11000000000000111101110011110101
+11000000000001000101110010011001
+11000000000001001101110011110101
+11000000000001010101110011101111
+11000000000001011101110011110101
+11000000000001100101110010011111
+11000000000001101101110011110101
+11000000000010010101110010100110
+11000000000010011101110011110101
+11011010001000000000000000000010
+11011010010000000000000000000111
+00100000010000000101100001000010
+01101000000000001000001011011011
+11100000101000001000000000000000
+00100000011000000000000000000000
+11101000110001001000000000000000
+01100000000001001100001111010011
+11101000110000010000000000000000
+01100000000000010000010001011111
+01101000000000001000010000111111
+01111001001000000111111000000101
+01100000000000001000010000111111
+00100000011000000000000000000000
+11101000110000101000000000000000
+01100000000000101100001111001110
+11101000110000010000000000000000
+01100000000000010000010001011111
+01101000000010010000010001011001
+10011000010001100111110000000000
+00100100001000010101110010001110
+01101000000000001000010000111111
+01111001001000000111111000000110
+01100000000000001000010000111111
+00100000011000000000000000000000
+01011000000000000000000000010100
+01100000000000010000010001101101
+01100000000000010100010010111010
+00100000011000000000000000000000
+11011010011000000000000000010011
+11011010001000000000000000000010
+11011010010000000000000000000010
+00100000010000000101100001000010
+00011010011000100111111000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+11011010001000000000000000001001
+11011010010000000000000000001001
+00100000010000000101100001000010
+01011000000000000000000000000001
+11100000101001000000000000000000
+00100000011000000000000000000000
+00100000011101001000000000000000
+11011010001000000000000000000110
+11011010010000000000000000001100
+00100000010000000101100001000010
+01101000000000101100010100010000
+11100000101000101000000000000000
+00100000011000000000000000000000
+11011010010000000000000000010011
+00100000001000000101110010101000
+11011010001000000000000000000001
+00100000001000000101100001000010
+11101000110001000000000000000000
+01100000000001000100010011001101
+11101000110000010000000000000000
+01100000000000010100010011001011
+11101000110001000000000000000000
+01100000000001000100010010101010
+11101000110000100000000000000000
+01100000000000100100010000010001
+00100000010000000101110011001111
+01000111001111010100000000101111
+01101000000000001100010011000100
+11000000000000101101110010111100
+01101000000000001100010011101001
+11000010100000001101110010111111
+01101000000000001100001000010111
+00100100010110100110011110111110
+01101000000000001100010000101001
+11000000000000000101110011000100
+01110000010001001100010100000001
+00100000010000000101110011011101
+00100000001000000111001110100010
+01110000010001000010100100000001
+11011000110000000100010011101010
+11011000101000000100010000011001
+00100000010000000111111010111111
+00100000001000000101110010111100
+01000111001111011100000000101111
+01110000010001001100010100000000
+01110000010001001100010000000000
+01110000000010101001100101000001
+00100000001000000111110110000110
+11011010001000000000000000000010
+11011010010000000000000000001101
+00100000010000000101100001000010
+01011000000000000000000000000110
+11100000101000001000000000000000
+00100000011000000000000000000000
+11011000101000000100010010110010
+00011000000000000111001000001000
+00100000010000000110001100001101
+11011000101000000100010000010101
+00011000000000000111001000000100
+00100000010000000110001100001101
+11011010001000000000000000001101
+11011010010000000000000000000100
+00100000010000000101100001000010
+01101000000001000100010010110010
+11100000101001000000000000000000
+01101000000000100100010000010101
+11100000101000100000000000000000
+00100000011000000000000000000000
+11011010010000000000000000000101
+00100000001000000101110010101000
+11011010010000000000000000000110
+00100000001000000101110010101000
+11101000110001000000000000000000
+01100000000001000100010010110010
+11101000110000100000000000000000
+01100000000000100100010000010101
+00100000001000000111001110100010
+01101000000000001000010000111111
+01111001001000000111111000000100
+01100000000000001000010000111111
+00100000011000000000000000000000
+00100000011101001000000000000000
+01110000000010101001100100110010
+00100000010000000111110110000110
+01110000010001001100010100000100
+00100000001000000101110011011111
+01110000010001001100010100000010
+00100000010000000101110011110011
+01110000000010101001100100110011
+00100000001000000111110110000110
+11011010010000000000000000001011
+00100000001000000101110010101000
+00100000011000000000000000000000
+00100000011101011000000000000000
+01000111001111100100000000101111
+01011000000000000000000000000000
+01100000000000001000000001001000
+01100000000000001000000001010101
+01100000000000001000000001111000
+01100000000000001000000001111100
+01100000000000001100000101011000
+01100000000000001000010011010111
+01100000000000001000000101101101
+01100000000000001000100110110101
+01110000010001010101101100000000
+01110000000000100010100100000000
+01110000000001001101100000000000
+01110000000010011011010100000000
+01110000000010011011010000000000
+01110000000001001101000100000000
+00100000011000000000000000000000
+01000111001111101100000000101111
+00100000010101001110001011111111
+00100100010101001110001100000011
+00100000010000000110001010111100
+00100100011110100000000000000000
+01101000000000001000000001001100
+11000100000000110000000000000000
+01111001001111111111111000000110
+01111001001111111000000000000001
+01100000000000001000000001001100
+01101000000000001000010101010001
+01101000000010001000000001001100
+00101111111011111111111000000000
+01111001001000001000010000000001
+01100000000010001000000001001100
+00011000010000010000010000000010
+01100000000010001000000001111111
+01101000000010001000000001001100
+00011111111000110111111000000000
+01100000000000001000000001111101
+01000111001111110100000000101111
+01101000000000001000000001111101
+11000000001111111101110101100110
+11000000000000011101110110110001
+11000000000000100101110111000010
+11000000000111100101110101011001
+11000000000000101101110101010101
+11000000000001111101111110101000
+11000000000010000101111000100100
+11000000000100011101111001000010
+11000000000111001101111111000001
+11000000000111000101111110111100
+11000000000110001101111000100111
+11000000000110111101111010110000
+11000000000100111101111010101100
+11000000000110011101111010101001
+11000000000100101101111010101110
+11000000000100110101111000111110
+11000000000000111101111000110110
+11000000000101101101111000101101
+11000000000101110101111000101110
+11000000000000001101111010100101
+11000000000000010101111010010000
+11000000000101000101111110110011
+11000000000001001101111010000110
+11000000000001011101111001011111
+11000000000001000101111001000011
+11000000000001100101111001101010
+11000000000011111101111000111010
+11000000000100000101111000111100
+11000000000100001101111011001010
+11000000000100010101111011001010
+11000000000110101101111011001011
+11000000000110110101111011001100
+11000000000100100101111011001010
+11000000000110100101111011001101
+11000000000010111101111011010110
+11000000000010001101111011110010
+11000000000010010101111011110110
+11000000000010011101111011111000
+11000000000001101101111100001010
+11000000000001110101111100001010
+11000000000101111101111010101010
+11000000000110000101111100001010
+11000000000001010101111100001010
+11000000000011000101111100001011
+11000000000110010101111100001010
+11000000000111101101111100010000
+11000000000111110101111101010001
+11000000000111111101111101001011
+11000000001000000101111101111000
+11000000001000001101111110001010
+11000000000000110101111110100111
+11000000000111010101110101010111
+01110000000000000111111000011001
+01110000000000000111110000000100
+00100000011000000000000000000000
+01110000000000000111110000000110
+00100000011000000000000000000000
+01110000000000000111110000111011
+00100000011000000000000000000000
+01101000000000100000010101010010
+00011111111000111111111000000000
+01100000000000100100000011010010
+01101000000000001000010101010110
+01100000000000001100000011011001
+01101000000000101000010101010111
+01100000000000101100000011100111
+01101000000000101000010101011100
+11100000101000101000000000000000
+01101000000000001000000000110001
+01111001001000000111111000000011
+01100000000000001000000000110001
+00100000011000000000000000000000
+01000111001111111100000000101111
+01101000000000001000010101010010
+01111001001000000111111000000111
+01100000000000001000000001111101
+11000000010000001101110110001000
+11000000010000010101110110001101
+11000000010010101101111010110001
+11000000010010110101111011001010
+11000000010001011101111010111111
+11000000010000011101110110100101
+11000000010000100101110110100111
+11000000010010000101110101111010
+11000000010010111101110110011110
+11000000010011000101110110100011
+11000000010011001101110101111101
+11000000010011010101110110000000
+11000001010000100000000000000000
+01110000000000000111110010000010
+01110000000000000111111000011001
+00100000011000000000000000000000
+01110000000000000111110010000010
+01110000000000000111111000101110
+00100000011000000000000000000000
+00100000010000000101110110000010
+01110000000000000111110010011010
+00100000011000000000000000000000
+00100000010000000101110110000010
+00100000001000000101110110000110
+11011000101000000100011001011110
+01101000000000011000010101010011
+11100000101000011000000000000000
+00100000011000000000000000000000
+00100000001000001111011011011000
+00100000011000000000000000000000
+01101000000000001000010101010100
+01111001001000000111111000000111
+01100000000000001000010011001001
+11000000010001011101110110010010
+00100000011000000000000000000000
+01101000000000001000010101010100
+01111001001000000111111000000111
+01100000000000001000010011001001
+11000000010001011101110110010110
+00100000011000000000000000000000
+01101000000000001100000101011010
+01101000000010001000000001001100
+01111101001110100000010000000101
+01100000000010001000000001001100
+01101000000000001000000000110000
+11000100000000101000000000000000
+01111001001111111111111000000101
+01100000000000001000000000110000
+01101000000000001000010011010111
+00100100011110100000000000000000
+01110000000000000111110000110001
+00100000011000000000000000000000
+00100100001101001101110110100001
+01110000000000000111110000010010
+00100000001000000110001011101011
+01110000000000000111110010010111
+00100000011000000000000000000000
+00100000010000000110001011101011
+00100000001000000101111111111110
+01110000000000000111110010000100
+00100000011000000000000000000000
+01101000000010001000010101010101
+00011000010000010000010000000001
+01100000000010001000010011010000
+01101000000000001100000111001110
+11000000101010001101110110101101
+01110000010000011100111000000000
+01101000000000001000000001010101
+11000001100010101000000000000000
+01110000000000000101010100000100
+00100000001000000110001100011011
+01000111010000000100000000110000
+01101000000000001000010101010010
+01100000000000001000010011001001
+11000000000110011101110111011000
+11000000000001000101110111100111
+11000000000001111101110111101110
+11000000000010000101110111110100
+11000000000010001101110111110101
+11000000000010010101110111111101
+11000000000011000101111000010011
+11000000000010111101111000010110
+11000000000010011101110111001111
+11000000000111101101111100011110
+11000000000111110101111101101010
+11000000001000000101111100100000
+11000000001000001101111100111101
+00100000011000000000000000000000
+01000111010000001100000000110000
+01101000000000001000010101010010
+01100000000000001000010011001001
+11000000000000001101111000001010
+11000000000110011101110111100010
+11000000000001011101110111111110
+11000000000001000101111000000001
+11000000000010011101110111010010
+11000000001000000101111000001011
+11000000001000001101111000001110
+11000000000011000101111000010001
+11000000000010111101111000100010
+00100000011000000000000000000000
+01110000000010101001100100100000
+00100000010000000111110110000110
+00100000001000000010000111011100
+01110000000010101001100100011001
+00100000010000000111110110000110
+01110000010001010101101100000010
+01011000000000000000000001010000
+11011000111000000000000000000110
+00100000001000000111111100001000
+01101000000000001000010011010001
+01111001001000000111111000000000
+01100000000000001000010011010001
+01110000000010101001100100000001
+00100000010000000111110110000110
+01110000000000000111110010001011
+01101000000000001000000001010101
+11000000100000101101110100000111
+01110000000000000101010100000110
+00100000011000000000000000000000
+01110000000001001100101000001011
+01110000000000000111110000000111
+01110000000000000101010100000000
+00100000001000001101110100000111
+00100000011000000000000000000000
+01101000000000001100000110111101
+00100100011110100000000000000000
+00100000010000000010010001001111
+00100000010000000101111111111100
+00100000011101001000000000000000
+01111001001000000000000000100001
+00100000011000000000000000000000
+00100100011101001000000000000000
+01110000000000000111110000010000
+01101000000000001000000001001100
+11000100000000010000000000000000
+01110000000000000111110000010010
+00100000011000000000000000000000
+00100000001000000101111111111110
+00100000010000000110000001011001
+01101000000000001000000000110000
+11000011100000100000000000000000
+01110000000000000111110000110001
+01101000000000001000000001010101
+11000001100001010000000000000000
+01110000000000000101010100001011
+00100000011000000000000000000000
+00100000011000000000000000000000
+01110000000000000111110000000111
+01110000000001001100101000010011
+00100000011000000000000000000000
+01101000000000001000010101010011
+11000000000000110101111000000111
+11000001100011000000000000000000
+01110000000001001100101000011000
+01110000000000000111110000000111
+00100000011000000000000000000000
+01110000000001001100101000000110
+01110000000000000111110000000111
+00100000011000000000000000000000
+00100000011000000000000000000000
+01110000000010011010111000000000
+01110000000000000111110000000111
+00100000001000000101110100000111
+01110000000010011010111000000000
+01110000000000000111110000000111
+00100000001000000101110100000111
+01110000000010101001100100100100
+00100000001000000111110110000110
+01110000000010101001100100100011
+00100000010000000111110110000110
+00100000001000000010011011101001
+01110000000010101001100100100010
+00100000010000000111110110000110
+01011000000000000000000000000000
+01100000000000010000000001110101
+01101000000000010100000111100011
+00011111111000111111111000000000
+01100000000000010000000000110010
+01101000000000001100000111100101
+01100000000000001000000001110011
+01101000000000001100000111100111
+01100000000000001000000001110100
+00100000001000000010011011000110
+01110000000010101001100100100001
+00100000001000000111110110000110
+01101000000010001000010101010010
+01100000000010001000000001010100
+00100000001000000101111000111000
+01101000000000001000010011010001
+01111001001000000111111000000010
+01100000000000001000010011010001
+11000011100000011000000000000000
+01110000000000000111110000110001
+00100000001000000101110100000111
+00100000011000000000000000000000
+01101000000000001100000011010000
+01101000000010001000010101010010
+10011000010001100111110000000000
+00100000001000010101111000111000
+01110000000000000111110000000100
+01110000000000000111111000011111
+01110000000000000111110100101110
+00100000011000000000000000000000
+00100000010000000110000101010111
+00100000001000000101111000111000
+01110000000000000111110000000011
+00100000011000000000000000000000
+01110000000000000111110000100001
+00100000011000000000000000000000
+01110000000000000111110000100010
+00100000011000000000000000000000
+01101000000000001000000001010101
+11000001000010011000000000000000
+01110000000000000101010100000010
+00100000011000000000000000000000
+00100000011000000000000000000000
+00100000010000000101111111111001
+01110000000001001101010000000001
+01110000000010101001100100001010
+00100000010000000111110110000110
+00100000010000000110001011110011
+00100100001000001110000000000001
+00100100001101001101111001001110
+01110000000000000111110000000100
+01110000000000000111110100001000
+01110000000000000111111000100011
+00100000011000000000000000000000
+01101000000000001000000001001011
+01111001001000000111111000000010
+01100000000000001000000001001011
+00100000011000000000000000000000
+01101000000010001000000001001100
+01111101001110100000010000000001
+01100000000010001000000001001100
+00100000011000000000000000000000
+01101000000000001000000001111111
+00011111111000110111111000000000
+00011111111000010111111000000001
+00100000011000000000000000000000
+01101000000000001100001000010111
+00100000011110100000000000000000
+01101000000000001000100110110101
+00100000010110100110011110110010
+00100000011000000000000000000000
+00100000010000000101111001011010
+00100000010000000101111001010110
+01100000000000001000010011010101
+00100000010000000101111111111001
+01110000000000000111110000001100
+01101000000000001100000110111101
+00100100011110100000000000000000
+01101000000000001000000000110000
+11000011100000110000000000000000
+01110000000000000111111000000110
+00100000001000000101110101010011
+11011010001000000000000001000000
+00100000010000000111001010001000
+01101000000000100000010101010010
+01101000000010100000010110010010
+10011000010001100111110000000000
+00100000001000101101111001110011
+01110000000000000111110000000111
+01110000000001001100101000000101
+00100000011000000000000000000000
+00100000010000000101111001110111
+01101000000000001100011001011010
+00100000001110100101111100111110
+00100000011000000000000000000000
+00100000010000000111001110000110
+00100000010000000010000110110010
+01101000000000001000000001001011
+00101111111011111111111000000001
+01111001001111111111111000000001
+01100000000000001000000001001011
+01101000000000001000000001010101
+11000000000011001101111010000001
+11000000000011000101111010000001
+00100000011000000000000000000000
+01101000000000001000100110110101
+11000001100000000000000000000000
+01101000000000001000000001001100
+11000011100000010000000000000000
+00100000001000000110001110110001
+11011010001000000000010101010010
+11011010010000000000010110000010
+11011000101000000000010101100010
+00100000010000000111001101010010
+11011010001000000000000001000000
+00100000010000000110001100010001
+01110000000000000111110000001011
+01101000000000001000000000110000
+11000011000000110101111111111100
+00100000011000000000000000000000
+01101000000000010000000101011111
+00011111111000001111001111111101
+01101000000010001000010101010010
+01011000000000000000000100000001
+10011000010000001000101000000000
+11011000110000000000010101010100
+00100000010000000111111100000001
+01101000000010001000000001010011
+01101000000000001000010101010011
+10011000010001100111111000000000
+00011111111001100111110000001110
+00100000001000010101111010100000
+00011000010000001111111000001110
+01100000000000001000000001010011
+01110000000000000111110000000001
+00100000011000000000000000000000
+01101000000000001000000001001100
+01111001001000000111111000000011
+01100000000000001000000001001100
+11000010100000100110000000000110
+00100000011000000000000000000000
+01101000000000001000010101010010
+01100000000000001000000001111101
+01110000000000000111110000000010
+00100000011000000000000000000000
+00100000001000000101111000111000
+01110000000000000111110000110000
+00100000011000000000000000000000
+01110000000000000111110000101000
+00100000011000000000000000000000
+01110000000000000111110000100110
+00100000011000000000000000000000
+00100000011000000000000000000000
+01101000000000010000000000110010
+10011000000000000000010000000000
+01101000000000001000010101010011
+01100000000000001000000010010101
+10011000010011111000010000000000
+01101000000000010000010101010100
+00011111111000111111111000000000
+01100000000000010000000010010110
+01101000000000100000010101010110
+00011111111000111111111000000000
+01100000000000100000000010010001
+00011000010000100111111000000000
+01100000000000010000000010011000
+00100000011000000000000000000000
+01101000000010001100000101011010
+01101000000000001000010101010011
+10011000010000101111110000000000
+00100100001000101101110101110111
+00101111111011111111111000000000
+01101000000000001000000001001100
+01111001001000001111111000000101
+01100000000000001000000001001100
+01110000000000000111110010000001
+01110000000000000111110110001011
+00100000011000000000000000000000
+00100000011000000000000000000000
+00100000001000000101111000111000
+00100000001000000101111000111000
+01101000000000010000010101010010
+01100000000000010000000101110001
+00100000011000000000000000000000
+01101000000000010000010101010101
+01101000000010001100000101110010
+10011000010011111111111000000000
+11011000010000000000011001000000
+10011000010001100111110000000000
+00100000011000000000000000000000
+01101000000000010000010101010111
+00100000001110100101111011110000
+00100000010000000101111011010000
+00100000001000010101111011110000
+01101000000000001100000010010010
+00011111111001100111110000001010
+00100000010000101011110011010101
+01101000000000001000000000110000
+11000010100000001101111011110000
+01101000000000010000010101010011
+00011111111000111111111000000000
+01100000000000010000000001110101
+01101000000000010000010101010101
+00011111111000111111111000000000
+01100000000000010000000000110010
+01101000000000010000010101010111
+01100000000000001000000001110011
+10011000000000000000010000000000
+01101000000000010000010101011001
+01100000000000001000000001110100
+10011000010001100111110000000000
+00100100001000010101111011101101
+01100000000000001000000001110011
+01110000000000000111110000000011
+01110000000000000111110100010111
+00100000011000000000000000000000
+01110000000000000111111000100100
+00100000001000000101110101010011
+00100000010000000101111000111000
+00100000010000000101111111111001
+00100000010000000111001010001011
+00100000001000000010011010111000
+00100000010000000101111000111000
+00100000001000000010011011000000
+01101000000000100000010101010010
+00011111111000111111111000000000
+00100000001101001101111100000100
+01101000000010001100000110111101
+00100100001110100101111100000001
+01110000000000000111110000000100
+01110000000000000111110100010011
+01110000000000000111111000100100
+00100000011000000000000000000000
+01110000000000000111110000110100
+01110000000000000101010100000000
+00100000001000000010000111011001
+00100000010000000010000111011001
+01111001001000000000000000100010
+01101000000000001000000101101101
+01111001001111111111111000000010
+01100000000000001000000101101101
+00100000001000000101111000111000
+00100000011000000000000000000000
+01110000000000000111110000000011
+01110000000000000111110100011000
+01110000000010101001100100101110
+00100000010000000111110110000110
+00100000001000000010011011101001
+01101000000000001000010101010010
+11000000100000001101111100011100
+01101000000000001000010101010011
+11000000100000001101111100011100
+01101000000000001000010101010100
+11000000100110000101111100011100
+00100000010000000110001011111100
+00100000001000001101111100011001
+01110000000010011010111000000001
+01110000000000000111110000000011
+01110000000000000111110100111101
+00100000001000000101110100000111
+01110000000000000111111000100100
+00100000001000000101110101010011
+01110000000000000111110000111110
+00100000011000000000000000000000
+01101000000000001100011001100010
+11000000000000001101111100100111
+11000000000000010101111100101011
+00100000010000000110001011111100
+00100000011000001000000000000000
+01110000000010011010111000001000
+00100000011000000000000000000000
+00100000010000000111100101100010
+01110000000010101001100100110101
+00100000010000000111110110000110
+00100000001000000101111100100011
+00100000010000000110001011111100
+00100000011000001000000000000000
+01101000000000001100011001100011
+11000000000010011101111100111011
+00011111111000001111111000000001
+01100000000000001100011001100011
+01110000000010011011000000000001
+01110000000010011010111000000100
+01101000000000001100011001100011
+00011111111000100000111000000000
+01101000000000110100011010001010
+10101111111011111111111111111111
+01011000000000000000000010000000
+01111001001000001111111000000000
+01100000000000001100011001100100
+00100000011000000000000000000000
+01110000000010011010111000001000
+00100000011000000000000000000000
+00100000010000000101111101000011
+01101000000000001100011001100101
+00100000011110100000000000000000
+01110000010001100110010100000000
+01110000000010101001100100111000
+00100000001000000111110110000110
+00100000010000000110001011111100
+00100100010000001111100101100101
+00100000010000001111100101110101
+00100000010000000110001011111100
+00100000011000001000000000000000
+01110000000010011010111000001100
+01110000000010011011000000000001
+00100000011000000000000000000000
+11011000101000000000101001101110
+11011000110000000000010101010010
+00100000010000000111111010111111
+01101000000000001100011001100010
+11000001000000010000000000000000
+00100000001000000111011011011000
+01101000000000001000100110101111
+11000000000000111101111101010101
+01101000000000001000100110101110
+11000000100000001101111101101000
+01101000000000001000100110110111
+00011111111001100000101000100000
+00100100001000010101111101101000
+11011000101000000000100111000110
+10011000101000001000101000000000
+01101000000001000000010101010010
+11100000101001000000000000000000
+01101000000001000000010101011010
+11100000101001000000000000000000
+01101000000000001000100110110111
+00011111111000001111111000010000
+01100000000000001000100110110111
+11000000100110000101111000111000
+00100000010000000110001011111100
+00100000001000001101111000111000
+01110000000010011011100000000001
+01110000000010011010111000000010
+01110000000010011011000000000001
+00100000001000000101111000111000
+01110000000000000111111000100100
+00100000001000000101110101010011
+01101000000000001000100110110110
+11000000000110000101111101101110
+01110000000000000111110000111110
+00100000001000000101110100000111
+00100000010000000110001011111100
+00100000001000001101111101110111
+01101000000000001100011001100010
+11000000000000010101111101110101
+01110000000010011011000000000001
+01110000000010011010111000000100
+00100000001000000101110100000111
+01110000000010101001100100110110
+00100000001000000111110110000110
+00100000001000000101110100000111
+01101000000000001000100110101111
+11000000000000111101111101111100
+01101000000000001000100110101110
+11000000100000110101111110001000
+11011000101000000000101000101110
+01101000000001000000010101010010
+11100000101001000000000000000000
+01101000000001000000010101011010
+11100000101001000000000000000000
+00100000010000000110001011111100
+00100000001000001101111110000110
+01110000000010011010111000000111
+01110000000010011011000000000001
+00100000001000000101111000111000
+01110000000010011010111100000100
+00100000001000000111011011011000
+01110000000000000111111000100100
+00100000001000000101110101010011
+01101000000000001000100110101111
+11000000000001011101111110001110
+01101000000000001000100110101110
+11000000100001000101111110011101
+11011000101000000000101001011110
+11011000110000000000010101010010
+00100000010000000111111010111111
+00100000010000000110001011111100
+00100000001000001101111110011010
+01101000000000001100011001100010
+11000000000000001101111110011111
+01110000010001100110000100000000
+01110000000010011010111000001001
+01110000000010011011000000000001
+01110000000000000111110101000001
+00100000001000000101110100000111
+01110000000010011010111100001001
+01110000000010011011000100000001
+00100000001000000101110100000111
+01110000000000000111111000100100
+00100000001000000101110101010011
+01101000000000001100011001100001
+11000010100000111101111110100100
+01111001001000000111111000000110
+01100000000000001100011001100001
+00100000011000000000000000000000
+11000010100000000101111110010101
+01110000010001100110000100000000
+00100000001000000101111110011101
+00100000001000000101110100000111
+01101000000000001000000101101101
+01111001001111111111111000000001
+01100000000000001000000101101101
+00100000010000000101111000111000
+00100100011101001000000000000000
+01101000000000001000010101010010
+01101000000010001000000001001011
+01111001001110100000010000000100
+01111101001110100000010000000101
+01100000000010001000000001001011
+00100000011000000000000000000000
+01101000000011000000010101010010
+01101000000000001000000001010101
+11000001100000011000000000000000
+01101000000000001000000101101101
+11000011000000100101111110111010
+01110000000000000101010100010100
+00100000011000000000000000000000
+01110000000000000101010100000100
+00100000011000000000000000000000
+01101000000000001000000101111111
+01100000000000001000000101011011
+01110000000000000111110000000011
+01110000000000000111110100111000
+00100000011000000000000000000000
+01110000000000000111110000000011
+01110000000000000111110100111001
+00011000000000000111001000001001
+11011000110000000000010101010010
+11011000101000000000000101010010
+11101000110000001000000000000000
+00011111111000101111111001010101
+11100000101000001000000000000000
+11000010000000000101111111000110
+01101000000000001000000101010010
+01101000000010001000000101010001
+01111001001111111000010000000111
+01111001001111111000010000000100
+11000000011111111101111111011010
+11000000000000000101111111110011
+11000000000000101101111111100111
+11000000000000111101111111100110
+11000000000000110101111111100111
+11000000000001000101111111100110
+11000000000000001101111111011111
+11000000000000010101111111011111
+11000000000000011101111111011111
+11000000000001001101111111011111
+11000000000000100101111111011111
+00100000011000000000000000000000
+01101000000000001000000101010001
+01111001001000000111111000000011
+01111001001000000111111000000010
+01100000000000001000000101010001
+00100000011000000000000000000000
+01111001001000000000010000000100
+01110000000000011000000000000101
+01101000000000010000000101011001
+10011000000000000111001000000000
+01100000000000010000000101011111
+11011000101000000000010101010001
+00100000010000000111111101110011
+01111001001000000000010000000111
+01111001001000000000010000000010
+00011000000000000111111000000000
+01100000000000001000000000001011
+01100000000000010000000011111010
+01100000000000010000000011111100
+01100000000000010000000011111000
+01100000000000010000000011110110
+01101000000000001000000101010011
+00101111111000011111111000000000
+01111001001000001000010000000110
+01100000000010001000000101010001
+00100000011000000000000000000000
+01111001001111111000000000010001
+01110000000000010101000100000000
+01101000000000001000000101111111
+01111001001111111111111000000110
+01100000000000001000000101111111
+00100000011000000000000000000000
+11011000110000000000010101010010
+11011000101000000000010101100010
+00100000001000000111111010111111
+01110000000000000111110000001001
+00100000011000000000000000000000
+00100100011101001000000000000000
+01110000000000000111110000010001
+00100000011000000000000000000000
+11011010001000000100000010100000
+00100000010000000111001001010101
+01110000000000000111110000000011
+01110000000000000111110100001000
+00100000011000000000000000000000
+01110000000000000111001000001010
+01110000000000000111110000000111
+01110000000001001100101000010110
+00100000011000000000000000000000
+01000111010000010100000000110000
+01111000010101000111110000000000
+00100000010000000110001011000001
+01101000000000001000000001001000
+00100000011110100000000000000000
+11000010100000111110000000111111
+11000000000000001110000101101111
+11000000000000010110000011100100
+11000000000000011110000001001010
+11000000000000100110000001100000
+11000000000100111110000111011011
+11000000000101000110000100001000
+11000000000110000110000011110100
+11000000000100101110000111010110
+11000000000100110110000100000011
+11000000000110001110000111000011
+11000000000110111110000101101010
+11000000000110011110000101011100
+11000000000001000110001001011001
+11000000000001001110001001001111
+11000000000001011110001001100100
+11000000000001100110001001101101
+11000000000001111110000101100010
+11000000000010000110001010010010
+11000000000010001110001010001000
+11000000000000111110000101010010
+11000000000101010110000101111110
+11000000000001010110000101111111
+11000000000011111110000110111100
+11000000000000110110000011111001
+11000000000100001110000101011111
+11000000000101101110000110110010
+11000000000101110110000110110111
+11000000000100010110000101011111
+11000000000110100110000110000000
+11000000000010011110000110010101
+11000000000010111110000110100100
+11000000000010010110001010001111
+11000000000101111110000110101010
+11000000000011000110000110101111
+11000000000111101110000111111111
+11000000000111110110001000001011
+11000000000111111110001000011101
+11000000001000000110001000100111
+11000000001000001110001000111100
+11000000000100011110001001001011
+11000000000111011110001001000110
+11000000000000101110001001001100
+11000000000101001110001001001101
+11000000000111000110001001001110
+11000000000111001110000101110101
+00100000001000000010101010001100
+00100000011000000000000000000000
+11000000010000001110000001101101
+11000000010000100110000010011001
+11000000010000010110000001110110
+11000000010000011110000100001101
+11000000010001011110000100011000
+11000000010010111110000101001110
+11000000010011001110000011010101
+11000000010011010110000010100100
+11000000010010101110000011011010
+11000000010010110110000011011011
+00100000001000000010101010001100
+00011000000000000111111000000010
+00100000010000000110001010011000
+01101000000000001000000001001001
+11100000101000001000000000000000
+00100000010000000110001010100111
+01000111010000011100000000110000
+01101000000000001000000001001001
+11000000000001000110000010000000
+11000000000001111110000010000100
+11000000000010000110000010001111
+11000000000010111110000001011111
+11000000000110011110000010010010
+11000000001000001110000010011000
+11000000000010001110000001011001
+00100000011000000000000000000000
+01101000000000001000000001010101
+00100000011110100000000000000000
+01110000000000000101010100011011
+01011000000000000000000000001100
+11011000111000000000000000000111
+00100000001000000111111100001000
+00100000001000000010011011000110
+00011000000000000111111000000011
+00100000010000000110001010011000
+01101000000000001000000001001001
+11000000000001011110000001101000
+11100000101000001000000000000000
+01101000000000001000000001001010
+11100000101000001000000000000000
+00100000001000000110001010100111
+11100000101000001000000000000000
+01101000000000001000000001001010
+11100000101000001000000000000000
+11011000010000000000010011010101
+00100000001000000110001011100010
+00011000000000000000111000000100
+00100000010000000110001010100000
+01011000000000000000000001111111
+11100000101000001000000000000000
+01101000000000001000000001001001
+01111001001111111111111000000111
+11100000101000001000000000000000
+01101000000000001000000001001001
+00100000001000000110001010100111
+00011000000000000000111000000101
+00100000010000000110001010100000
+01011000000000000000000001111111
+11100000101000001000000000000000
+01101000000000001000000001001001
+01111001001111111111111000000111
+11100000101000001000000000000000
+01101000000000001000000001001010
+11100000101000001000000000000000
+00100000001000000110001010100111
+00100000010000000010010001001111
+00100000010000000110001011110011
+00100000011000001000000000000000
+00100000001000000101111111111100
+01101000000000001000000001001011
+11000010100000101110000010001011
+11000100000000100000000000000000
+01110000000000000111110000010010
+01111001001111111111111000000100
+00100000010000000110001011101011
+00100000001000000110000010001101
+01110000000000000111110000010000
+01111001001111111111111000000101
+01100000000000001000000001001011
+00100000011000000000000000000000
+00100000010000000110001011111100
+00100000001000001101111111111110
+00100000011000000000000000000000
+01110000000000000111110010001011
+01101000000000001000010011010001
+01111001001000000111111000000000
+01100000000000001000010011010001
+01110000000010101001100100000001
+00100000001000000111110110000110
+00100000011000000000000000000000
+00011000000000000000111000001100
+00100000010000000110001010100000
+01011000000000000000000000000001
+11100000101000001000000000000000
+01101000000000010000010011001110
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000011000000000000000
+01011000000000000000000000000000
+11100000101000100000000000000000
+00100000001000000110001010110000
+00011000000000000000111000000101
+00100000010000000110001010100000
+01101000000000011100011001011011
+11100000101000011000000000000000
+00100000010000000110001010110000
+01110000010001100110010100000001
+01101000000000001100011001011011
+11000000000000001110000010110101
+11000000000000010110000010101111
+11000000000000011110000010111011
+00100000011000000000000000000000
+01101000000000001100011001011110
+11000000000000000110000011000111
+11000000000000001110000011000111
+11000000000000010110000011000111
+11000000000000011110000011000001
+00100000011000000000000000000000
+01101000000000001100011001011110
+11000000000000000110000011000001
+11000000000000001110000011000101
+11000000000000010110000011000111
+11000000000000011110000011000001
+00100000011000000000000000000000
+01101000000000001100011001011110
+11000000000000000110000011000001
+11000000000000001110000011000001
+11000000000000010110000011000001
+11000000000000011110000011000001
+00100000011000000000000000000000
+01110000010001100110001000000011
+01101000000000001100010101011100
+11000010100000000011001111101001
+00100000011000000000000000000000
+01110000010001100110001000000001
+00100000011000000000000000000000
+01110000010001100110001000000010
+00100000011000000000000000000000
+11011000111000000000000000000000
+00100000001000000110000011001101
+11011000111000000000000000000000
+00100000001000000110000011010001
+01101000000000001100010101011100
+11111001001000000111111000000000
+01100000000000001100010101011100
+00100000011000000000000000000000
+01101000000000001100010101011100
+11111001001111111111111000000000
+01100000000000001100010101011100
+00100000011000000000000000000000
+00011000000000000000111000000101
+00100000010000000110001010100000
+01101000000000011100011001011011
+11100000101000011000000000000000
+00100000001000000110001010110010
+00100000011000000000000000000000
+00011000000000000000111000001001
+00100000010000000110001010100000
+01101000000000001000000010010101
+11100000101000001000000000000000
+01101000000000010000000010010110
+11100000101000010000000000000000
+01101000000000100000000010010001
+11100000101000100000000000000000
+00100000001000000110001010110000
+00011000000000000111111000010001
+00100000010000000110001010011000
+01101000000000001000000001001001
+00011111111000100000010000000000
+11000000000000000110000011101100
+11000000000001110110000011101100
+11000000000011100110000011101100
+00100000011000000000000000000000
+11100000101000001000000000000000
+01101000000000001100010100010101
+11100000101000001000000000000000
+11011111001000000000000000001110
+01011000000000000100010100010110
+10011000010000001000110000000000
+00100000010000000111111100000001
+00100000001000000110001010110000
+00011000000000000111111000000011
+00100000010000000110001010011000
+01011000000000000000000100010100
+11100000101000010000000000000000
+00100000001000000110001010110000
+00011000000000000111111000000011
+00100000010000000110001010011000
+01101000000000100000000101100101
+10011100010001100111111000000000
+00100000001101001110000011111111
+00011111111001100111111000000000
+00011111111010110111111000000000
+01111001001111111111111000001111
+11100000101000010000000000000000
+00100000001000000110001010110000
+00011000000000000111111000000110
+00100000010000000110001010011000
+01101000000000101100010100010000
+11100000101000101000000000000000
+00100000001000000110001010110000
+00011000000000000111111000001001
+00100000010000000110001010011000
+01101000000001000100000010011000
+11100000101001000000000000000000
+00100000001000000110001010110000
+00011000000000000000111000001100
+00100000010000000110001010100000
+01011000000000000000000000000001
+11100000101000001000000000000000
+01101000000000010000010011001110
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000011000000000000000
+01011000000000000000000000000000
+11100000101000100000000000000000
+00100000001000000110001010110010
+00011000000000000000111000000011
+00100000010000000110001010100000
+01101000000000001100000101011010
+11100000101000001000000000000000
+01111000010101000111110000000000
+00100000010000000110001010110010
+00100100011101000000000000000000
+00100100011101001000000000000000
+01101000000000001100000011011000
+11000100000000000000000000000000
+00100000010000000110000100110010
+00100000001000000110000100111100
+01000111010000100100000000110000
+01101000000000001100000010011110
+01111001001000000111111000000011
+01100000000000001100000010011110
+01011000000000000000000100000001
+01100000000000010000010011001110
+00100000011000000000000000000000
+01000111010000101100000000110000
+01101000000000001100000010011110
+01111001001111111111111000000011
+01100000000000001100000010011110
+01011000000000000000000000000000
+01100000000000010000010011001110
+00100000011000000000000000000000
+01110000010000001101100000000011
+01011000000000000000000000000000
+01100000000000100100000101000010
+11011000101000000100000011011010
+00100000010000000110000101000000
+11011000101000000100000011100111
+00100000010000000110000101000000
+11011000101000000100000101000110
+00100000010000000110000101000000
+00100000001000000110000101000111
+11011000101000000100000011100111
+00100000010000000110000101000000
+00100000010000000110000101000111
+00100000001000000110000101001010
+01011000111111111111111111111111
+11100000101000011000000000000000
+11100000101000011000000000000000
+11100000101000011000000000000000
+01011000000000000000000001111111
+11100000101000001000000000000000
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000010100000011010110
+00100000011000000000000000000000
+01101000000000001100000011011000
+01111001001000000111111000000010
+01100000000000001100000011011000
+00100000011000000000000000000000
+00011000000000000000111000000010
+00100000010000000110001010100000
+00100100001101001110001010110000
+00100000001000000110001010110010
+00011000000000000111111000000010
+00100000010000000110001010011000
+01101000000000001000010011001010
+11100000101000001000000000000000
+00100000010000000110001010110010
+01101000000000001000000001001011
+01111001001000000111111000000011
+01100000000000001000000001001011
+01110000000000000111001000110010
+00100000011000000000000000000000
+00011000000000000111111000000001
+00100000010000000110001010011000
+00100000001000000110001010110010
+00011000000000000111111000000001
+00100000010000000110001010011000
+00100000001000000110001010110000
+00011000000000000111111000000010
+00100000010000000110001010011000
+01101000000000001000000001001100
+00101111111011000000000000000010
+01111001001000001111111000000000
+00011111111000010111111000000001
+11100000101000001000000000000000
+00100000001000000110001010110010
+00011000000000000111111000000011
+00100000010000000110001010011000
+01101000000000010000000001010001
+11100000101000010000000000000000
+00100000001000000110001010110010
+01110000000000000111001011111010
+00011000000000000111111000000010
+00100000010000000110001010011000
+01101000000000001000000001010011
+11100000101000001000000000000000
+00100000001000000110001010110010
+00011000000000000111111000001010
+00100000010000000110001010011000
+11011000110000000000000101010010
+00011000000000000111001000001001
+11101000110000001000000000000000
+00011111111000101111111001010101
+11100000101000001000000000000000
+11000010000000000110000101111001
+00100000001000000110001010110010
+00100000001000000110001010110010
+00100000001000000110001010110010
+00100000011101001000000000000000
+00100000010000000010100000101101
+00011000000000000111111000001001
+00100000010000000110001010011000
+01101000000000010000000101110001
+11100000101000010000000000000000
+01101000000000011100000010100000
+11100000101000011000000000000000
+01101000000000001100000010100011
+11100000101000001000000000000000
+01101000000000010100000010100100
+11100000101000010000000000000000
+11000101100000011110000110010001
+01111001001111111000000000000011
+00100000010000000110001010110010
+01110000000000000111110000010011
+00100000011000000000000000000000
+00100000010000000110001010110000
+01110000000000000111110000000011
+01110000000000000111110100010011
+00100000011000000000000000000000
+11011000010000000000001000000000
+00100000001101001110000110011001
+00011101000000100111111000000000
+00100000001000000110000110011010
+00011100010000100111111000000000
+00011100001000100111111000000000
+10011000010000001111111000000000
+00011111111000010111111111111100
+01100000000000100000000000110100
+00011000000000000111111000000101
+00100000010000000110001010011000
+01101000000000100000000000110100
+00011111111000110111111000000000
+11100000101000100000000000000000
+00100000001000000110001010110010
+00011000000000000111111000001010
+00100000010000000110001010011000
+11011000110000000000010011011001
+11101000110001001000000000000000
+11100000101001001000000000000000
+00100000001000000110001010110010
+00011000000000000111111000000011
+00100000010000000110001010011000
+01011000000000000000000100010100
+11100000101000010000000000000000
+00100000001000000110001010110010
+00011000000000000111111000000001
+00100000010000000110001010011000
+00100000001000000110001010110010
+00011000000000000111111000000010
+00100000010000000110001010011000
+01101000000000001100000011010000
+11100000101000001000000000000000
+00100000001000000110001010110010
+00011000000000000111111000000010
+00100000010000000110001010011000
+01011000000000000000000000000101
+11100000101000001000000000000000
+00100000001000000110001010110010
+00011000000000000111111000000010
+00100000010000000110001010011000
+01011000000000000000000000000000
+11100000101000001000000000000000
+00100000001000000110001010110010
+01110000000000000111110000101110
+00100000011000000000000000000000
+01101000000000001100000010010010
+00011111111001100111110000001010
+00100000010000101110000111000001
+01101000000000001000000000110000
+01111001001000000111111000000100
+01100000000000001000000000110000
+00011100010000100111111000000000
+01100000000000100000010011101001
+01101000000000001000010011010001
+11000010100000011110000111010100
+01111001001000000111111000000011
+01100000000000001000010011010001
+01110000000010101001100100000101
+00100000010000000111110110000110
+00011000000000000111111000000001
+00100000010000000110001010011000
+00100000001000000110001010110010
+01110000000000000100100000000000
+00100000011000000000000000000000
+00011000000000000111111000000110
+00100000010000000110001010011000
+01101000000000101100010100010000
+11100000101000101000000000000000
+00100000001000000110001010110010
+00011000000000000111111000001001
+00100000010000000110001010011000
+01101000000001000100000010011000
+11100000101001000000000000000000
+00100000001000000110001010110010
+01110000000010011011000100000001
+01101000000000001100010110110001
+11000001100000001000000000000000
+01110000000010011010111100010011
+00100000011000000000000000000000
+00100000010000000110001011101111
+01110000000000000111110010011001
+01110000000010011010111100000011
+00100000011000000000000000000000
+00100000010000000110001011101111
+01110000000000000111110000111101
+01110000000010011010111100000111
+00100000011000000000000000000000
+11011010001000000000101001001110
+11011010010000000000101001101110
+11011111001000000000000000010000
+00100000010000000111111110001000
+00100000001000101110000111110111
+01110000000010011010111100000000
+00100000010000000111011011011010
+01110000000000000111111000100100
+01110000000000000111110101000000
+00100000001000000101110101010011
+01110000000010011010111100001010
+00100000010000000111011011011000
+01110000000000000111110101000000
+00100000001000000101111000111000
+01110000000000000111110001000000
+00100000011000000000000000000000
+01110000000000000111110000111101
+00100000011000000000000000000000
+01110000000010011011011000000000
+00011000000000000111111000000100
+00100000010000000110001010011000
+00011000000000000111111000000001
+11100000101000001000000000000000
+00011000000000000111111000000001
+11100000101000001000000000000000
+00011000000000000111111000110000
+11100000101000001000000000000000
+00100000010000000110001011111100
+00100000001000001110001010110010
+00100000001000000110001010110000
+00011000000000000111111000010001
+00100000010000000110001010011000
+01101000000000001000100110110110
+11011000110000000100011000101010
+10011000110000001000110000000000
+11101000110001000000000000000000
+11100000101001000000000000000000
+11101000110001000000000000000000
+11100000101001000000000000000000
+01101000000000001000100110110110
+00011111111000001111111000010000
+01100000000000001000100110110110
+00100000010000000110001011111100
+00100000001000001110001010110010
+00100000001000000110001010110000
+01110000000010011010111000000110
+01110000000000000111110000111111
+00100000011000000000000000000000
+00011000000000000111111000010001
+00100000010000000110001010011000
+11011000110000000000101001001110
+11101000110001000000000000000000
+11100000101001000000000000000000
+11101000110001000000000000000000
+11100000101001000000000000000000
+00100000001000000110001010110000
+01110000000000000111110001000000
+00100000011000000000000000000000
+00100000010000000110001011111100
+00100000010000001111011000010010
+00011000000000000111111000010001
+00100000010000000110001010011000
+11011000110000000000101000011110
+11101000110001000000000000000000
+11100000101001000000000000000000
+11101000110001000000000000000000
+11100000101001000000000000000000
+00100000010000000110001011111100
+00100100001000001110001010110000
+00100000001000001110001010110010
+01110000000010011010111100001111
+00100000010000000110001011101111
+01110000000000000111110000001011
+00100000010000000110001100000111
+00100000001000001111011001001110
+00100000001000000111011001011000
+00100000010000000110001011101011
+01110000000000000111110001000001
+00100000011000000000000000000000
+00011000000000000111111000010001
+00100000010000000110001010011000
+11011000110000000000101001001110
+11101000110001000000000000000000
+11100000101001000000000000000000
+11101000110001000000000000000000
+11100000101001000000000000000000
+00100000010000000110001011111100
+00100100001000001110001010110000
+00100000001000001110001010110010
+00011000000000000111111000000011
+00100000010000000110001010011000
+01011000000000001111111111111110
+11100000101000010000000000000000
+00100000001000000110001010110000
+00100000001000000110001010110010
+00100000001000000110001010110010
+00100000001000000110001010110010
+00100000001000000110001010110010
+00100000010000000110001100001011
+11011010001000000100000010100000
+00100000010000000110001100010001
+00011000000000000111111000010001
+00100000010000000110001010011000
+11011010001000000000010110000010
+11011010010000000000010101100010
+00100000010000000111001101010010
+00100100001101001110001010100111
+00100000001000000110001010101101
+00100000010000000110001100001011
+11011010001000000000000001000000
+00100000010000000111001001010101
+00011000000000000111111000010001
+00100000010000000110001010011000
+11011000110000000000010101100010
+00100000010000000111111010111111
+01101000000000001000000001010101
+11000000000011001110001010110010
+11000000000011000110001010110010
+00100000001000000110001010101101
+01101000000000001000100110110101
+00100000001110100110001001101010
+00100000010000000110001011111100
+00100000010000001110001011101111
+00100100010000001110001011101011
+00100000001000000110001001101011
+00100000010000000110001011101111
+00100000010000000110001100001011
+00100000001000000110001001011100
+11011010001000000100000010100000
+00100000010000000111001010001000
+00011000000000000111111000000101
+00100000010000000110001010011000
+01101000000000100000010110010010
+11100000101000100000000000000000
+11011000010000000000010011010101
+00100000010000000110001011100010
+00100000010000000111001110000110
+00100000010000000110001011111100
+00100000001000001110001001111100
+01110000000001001101100000000001
+01101000000000001000100110110101
+00100000011110100000000000000000
+01110000000000000111110000001011
+01101000000000001100000110111101
+00100000011110100000000000000000
+00100000010000000110001011111100
+00100100001000001110001010000100
+01101000000000001000010011010111
+00100000011110100000000000000000
+01110000000000000111110000001111
+00100000011000000000000000000000
+11000110100100001000000000000000
+01111001001111111000000000100001
+01110000000000000111110000001111
+00100000011000000000000000000000
+00100000010000000110001100001011
+00100000010000000111001010001011
+00011000000000000111111000010001
+00100000010000000110001010011000
+11011000110000000000010101100010
+00100000010000000111111010111111
+00100000001000000110001010101101
+00011000000000000111111000000001
+00100000010000000110001010011000
+00100000001000000110001010101101
+00011000000000000111111000000010
+00100000010000000110001010011000
+00011000000000000111111000010000
+11100000101000001000000000000000
+01100000000000001000000001010100
+00100000001000000110001010101101
+00011111111010011111111000000000
+00011111111000011111111000000111
+01100000000000001000010010110110
+11011111001000000000000000010001
+11011000101000000000010010111000
+00100000010000000111111011010100
+11011000101000000000010010111000
+00100000011000000000000000000000
+00011111111000010010001001111111
+01110000000000000100100001111111
+00011000111000100111111000000000
+00100000010000000110001010011000
+00011010001000100111111000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+01101000000000001000000001001000
+00011111111000111111111000000000
+01101000000010001000000001001100
+00101000010011111111111000000001
+01111001001000001111111000000000
+00100000001000000110001010110111
+01101000000010001000000001001100
+00011000010000010000010000000001
+00100000001000000110001010110011
+00011000000000000000010000000000
+00100000001000000110001010110011
+00011000000000000000010000000001
+01101000000000001000000001001000
+00011111111000111111111000000000
+01111001001101001111111000000000
+10011000010000101111111000000000
+01100000000000001000010010110111
+01110000000000000100100000000000
+00100000010000000110001011000111
+01111000001101000111110000000000
+00100000011000000000000000000000
+01101000000000001000000001111100
+00100000011110100000000000000000
+00100000010000000110001011000001
+01101000000000001000000001111100
+00100000011000000000000000000000
+01000111010000110100000000110000
+01101000000000001000000001001000
+00100000001110100110001011000111
+01101000000000001000000001111000
+00100100011110100000000000000000
+00100000001000000110001011010001
+01101000000000001000000001111000
+00100000001110100110001011010111
+01101000000000011000000001111000
+01100000000000011000000001001000
+01101000000010001000000001111011
+01101000000000001000000001001100
+01111001001111111111111000000001
+10011000010000011111111000000000
+01100000000000001000000001001100
+01110000000000000111100000000000
+01101000000000001000000001111100
+00100000011110100000000000000000
+01101000000000100000000001111100
+01100000000000100000000001111000
+01110000000000000111110000000000
+00100000011000000000000000000000
+01101000000000001000000001111100
+00100000011110100000000000000000
+01101000000000011000000001111100
+01100000000000011000000001001000
+01101000000010001000000001111111
+01101000000000001000000001001100
+01111001001111111111111000000001
+10011000010000011111111000000000
+01100000000000001000000001001100
+01110000000000000111110000000000
+00100000011000000000000000000000
+01000111010000111100000000110000
+01101000000000001000000001001100
+00011111111000100010011000000000
+11101000010000001000000000000000
+00100000010000000101111001010010
+00100000010000000110001010100111
+00011010011000100111111000000000
+01100000000000001000000001001100
+00100000011000000000000000000000
+01101000000010001000000001001100
+01111001001111111000010000000000
+01100000000010001000000001001100
+00100000011000000000000000000000
+01101000000010001000000001001100
+01111001001000000000010000000000
+01100000000010001000000001001100
+00100000011000000000000000000000
+01111101001101001111111000000001
+01101000000010001000000001001100
+10011000010000101111111000000000
+00101111111011111111111000000001
+00100000011000000000000000000000
+01101000000000001000000001001100
+01111001001101001111111000000001
+01100000000000001000000001001100
+00100000011000000000000000000000
+01101000000000001000100110110100
+00101111111000001111111000000001
+00100000011000000000000000000000
+01101000000000001000100110110100
+01111001001000000111111000000111
+01100000000000001000100110110100
+00100000011000000000000000000000
+01101000000000001000100110110100
+01111001001111111111111000000111
+01100000000000001000100110110100
+00100000011000000000000000000000
+01101000000000001000100110110100
+00101111111011111111111000000111
+01100000000000001000100110110100
+00100000011000000000000000000000
+11011000101000000000010101100010
+00011000000000000111001000010000
+00011000000010100111111000000000
+11100000101000001000000000000000
+11000010000000000110001100001101
+00100000011000000000000000000000
+00100000010000000111001001011001
+11011010001000000100000110111110
+11011010010000000000010110010010
+11101010001001000000000000000000
+01101000000010001000000000110000
+01111101001110100000010000000110
+01100000000010001000000000110000
+00011010001000100000101000000000
+00100000010000000111001101010010
+00100000001000000010000111000100
+01000111010001000100000000110001
+00100000010000000110001010111100
+00100100011110100000000000000000
+01101000000000001000000001010101
+00100000011110100000000000000000
+11000000000000100110001101101111
+11000000000000101110001101110100
+11000000000000010110001101100110
+11000000000000011110001101111100
+11000000000001110110001101101001
+11000000000000110110001110011000
+11000000000000111110001110110000
+11000000000001001110001110110001
+11000000000001010110001110111010
+11000000000001011110001110111110
+11000000000001100110001110000110
+11000000000001101110001110001001
+11000000000001111110001110001111
+11000000000010010110001101011001
+11000000000010011110001101111100
+11000000000010000110001101011100
+11000000000010100110001101010110
+11000000000010101110001101111100
+11000000000010110110001101010000
+11000000000011000110001101010101
+11000000000010111110001101001001
+11000000000011001110001101001111
+11000000000011010110001100111010
+11000000000011011110001101000100
+01110000000000000101010100000000
+00100000011000000000000000000000
+01101000000000001000010011010001
+11000100000000010000000000000000
+11000100000000011000000000000000
+01110000000000000101010100000000
+00100000010000000110001101000000
+00100000001000000110110011101111
+01101000000000001000000101101101
+11000100000000001000000000000000
+01110000000000000101010100001010
+00100000011000000000000000000000
+11011000111000000000000000000111
+00100000010000000111111100010110
+00100100011110100000000000000000
+01110000000000000101010100011010
+00100000011000000000000000000000
+01101000000000001000000101101101
+01111001001111111111111000000000
+01100000000000001000000101101101
+01110000000000000101010100011001
+01110000000000000111110000001011
+00100000011000000000000000000000
+00100000011000000000000000000000
+01101000000000001000010011010100
+11000001100000010000000000000000
+00100000010000000110001111000000
+01110000000000000101010100011000
+00100000011000000000000000000000
+00100000011000000000000000000000
+01110000000000000101010100010101
+01110000000000000111110010000011
+00100000011000000000000000000000
+01110000000000000101010100010011
+01110000000000000111110000100101
+00100000011000000000000000000000
+01101000000000001100010101011011
+11000001000000000000000000000000
+11000000000000001110001101100100
+11011000111000000000000000000110
+00100000010000000111111100010110
+00100100011110100000000000000000
+01110000010001010101101100000000
+00100000001000000110001101111101
+00100000011101001000000000000000
+00100000001000000110001110011000
+01110000000000000101010100000011
+01110000000000000111110000100111
+00100000011000000000000000000000
+01110000000000000111110000010011
+01111001001000000000000000000011
+01110000000000000101010100000101
+01011000000000000000000111111111
+01100000000000010000010011010010
+00100000011000000000000000000000
+01110000000000000101010100000101
+01110000000001001101001011111111
+01111001001111111000000000100010
+01110000000000000111110000110011
+00100000001000000101110100000100
+11000110000100010000000000000000
+01101000000000010000010011010010
+00011111111001100111111000000001
+00100000001000101110001101111010
+01100000000000010000010011010010
+00100000011000000000000000000000
+01110000000000000101010100001110
+00100000011000000000000000000000
+00100000011000000000000000000000
+01101000000000001000010011010001
+11000100000000011000000000000000
+11000100000000010000000000000000
+01101000000000001000000101101101
+01111001001111111111111000000010
+01100000000000001000000101101101
+01110000000000000111110000010011
+01110000000000000101010100010000
+00100000011000000000000000000000
+01110000000000000101010100001101
+01110000000000000111110000110001
+00100000011000000000000000000000
+01101000000000001000010011010001
+11000100000000010000000000000000
+01110000000000000101010100000000
+00100000011000000000000000000000
+01110000000000000101010100000110
+00100000011000000000000000000000
+01101000000000001000010011010010
+00011111111000001111111111111111
+00100000001110100110001110010100
+01100000000000001000010011010010
+00100000011000000000000000000000
+01110000000000000111110000000111
+01110000000001001100101000010110
+01110000000000000101010100000000
+00100000011000000000000000000000
+01101000000000001000000101101101
+11000010100000010110001101111101
+11000010100000000110001110011101
+01110000000000000101010100011010
+00100000011000000000000000000000
+01101000000000001100000110111101
+00100000001110100110001110101001
+01101000000000001000010011010001
+11000100000000011000000000000000
+11000100000000010000000000000000
+01101000000000100000010011101001
+11011000010000000000000001100100
+10011000010000001000010000000000
+00011100010000100111111000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+00100000001000000110001101001001
+01110000000000000101010100010110
+01110000010001101000100100000100
+01011000000000000011000000110000
+01100000000000010100011010001010
+11100000101000010000000000000000
+01110000000001001101010000000010
+00100000001000000110001101010000
+00100000011000000000000000000000
+01101000000000001000000101101101
+11000010100000001110001110110101
+01110000000000000101010100011010
+00100000011000000000000000000000
+01101000000000001000000101101101
+01111001001111111111111000000001
+01100000000000001000000101101101
+01110000000000000111110000001111
+00100000011000000000000000000000
+01101000000000001000010011011000
+00100000011110100000000000000000
+01110000000000000101010100000000
+00100000001000000110001110110101
+01110000000000000101010100001100
+00100000011000000000000000000000
+01101000000000001000000001001011
+11000010100000010110001111000101
+00100000010000000110001011101111
+01110000000000000111110000001000
+00100000001000000100110100000100
+01101000000000001000000001001011
+01111001001111111111111000000010
+01100000000000001000000001001011
+00100000010000000110000000000001
+00100000010000000110001011111000
+00100000001000000100110100000100
+01011000000000000000000000000100
+01100000000000001100011010001001
+01011000000000000011000000110000
+11100000101000010000000000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+01000111010001100100000000110001
+01101000000100001000000001110011
+11011000010000000000000000000110
+10011000010000011111111000000000
+01100000000100001000000001110011
+01101000000100001000000001110111
+10011000010000011111111000000000
+01100000000100001000000001110111
+00100000010000000110001111101110
+01101000000100001000000001110111
+01111001001111111111111000000001
+01111001001111111111111000000010
+01100000000100001000000001110111
+00100000000000000000000000011110
+00100000001000000110001111110010
+01101000000100001000000001110011
+11011000010000000000000011000000
+10011000010000011111111000000000
+01100000000100001000000001110011
+01101000000100001000000001110111
+10011000010000011111111000000000
+01100000000100001000000001110111
+00100000010000000110001111101110
+01101000000100001000000001110111
+01111001001111111111111000000110
+01111001001111111111111000000111
+01100000000100001000000001110111
+00100000000000000000000000011110
+00100000001000000110001111110110
+01101000000100001000000010000001
+00011111111000010111111011111100
+01100000000100001000000010000001
+00100000011000000000000000000000
+01101000000100001000000010000001
+00011111111000011111111000000001
+01100000000100001000000010000001
+00100000011000000000000000000000
+01101000000100001000000010000001
+00011111111000011111111000000011
+01111001001111111111111000000100
+01100000000100001000000010000001
+00100000011000000000000000000000
+00011111111000100010010000000000
+00100000010000000110010000001111
+00100000000000000000000001100100
+00011010010000100111111000000000
+00100000010000000110010000010100
+00011111111000100010010000000000
+00100000010000000110010000010001
+00100000000000000000000001100100
+00011010010000100111111000000000
+00100000011000000000000000000000
+00011111111000100010010000000000
+00100000010000000110010000001111
+00100000000000000000000001100100
+00011010010000100111111000000000
+00100000010000000110010000010011
+00100000010000000110010000010001
+00100000000000000000000001100100
+00100000011000000000000000000000
+01101000000010001100001000010100
+00100000001000000110100000001110
+01101000000010001100001000010100
+00100000001000000110100000101001
+01101000000010001100001000010100
+00100000001000000110100000100101
+00100000001000000110010011101100
+00100000001000000110010011110011
+00100100001101000110010000011001
+01101000000100001000000010000101
+00011111111000011111111000000010
+01100000000100001000000010000101
+00011000010000100111110000000000
+00100000001000101110010000011100
+00011010011000100111101000000000
+00101111110011000000000000000000
+00100000001000000110010010111001
+00011000000000000000010000000100
+11011010001000000000000111111110
+01101000000100001000000010000101
+00011111111000010111111011111101
+01100000000100001000000010000101
+00100000010000000110010000011001
+11011010001000000101010110101010
+01101000000000010000000111111110
+11101000110010010000000000000000
+10011010001001100111110000000000
+00100000011000000000000000000000
+11011000010000000000000000000010
+11011010001000000000001000000100
+00100000010000000110010000011001
+01101000000000010000001000000100
+01100000000000010000000111110111
+00100000010101000110010000110000
+00100000011000000000000000000000
+11011000010000000000000000010000
+11011010001000000000001000000110
+01101000000100001000000010000101
+00011111111000010111111011111101
+01100000000100001000000010000101
+00100000010000000110010000011001
+11011000110000000000001000000110
+11011111001000000000000000010000
+00100000010000000111010001111000
+00100000010000000111010000101000
+00100000010000000111010010010001
+00100000001000000111010000100010
+01111000010101101111110000000000
+00100000010000000110010000011110
+00100100011000101000000000000000
+01111000001101101111110000000000
+01110000100000000010001110000000
+01110000100000000010001000000000
+01110000100000000010010000000000
+11011010001000001000000000100101
+00100000010000000110010000010101
+01110000100000000010001100000000
+11011000010000000000000000000110
+00100000010000000110010000011111
+00100100011000101000000000000000
+11101000110000010000000000000000
+10011000000000000010001000000000
+00100000010000000110010000011001
+00100000001000000110010001000110
+00100000010000000111111110011001
+01011000000000000001000000000000
+01100000000000010000000111110111
+11011010011000000110010111100101
+11011111001000000000000000000010
+00100000010000000110010000011110
+00100100011000101000000000000000
+01101000000000010000000111110111
+00011111111100001111111000000000
+10011000010000001111111000000000
+00011111111100001111111000000000
+01100000000000010000000111110111
+11000010000000000110010001010010
+00100000001000000110010001000110
+00100000010000000111111110011001
+01111000010101000111110000000000
+00100000010000000110011001101010
+01011000000000000000000000000000
+11011010001000000000000111110011
+11011000010000000000000000000010
+00100000010000000110011010110011
+01101000000000010000000111110011
+11000011000000111110010001101110
+01110000100000000101000000100101
+01011000000000000000011111110000
+11011010001000000000001000000110
+11011000010000000000000000010000
+00100000010000000110011010110011
+01110000100000000000011000001000
+01111001001000000000000000101011
+11011000110000000000001000000110
+00100000010000000111010010000100
+01111000001101000111110000000000
+01110000010000011101101000000000
+00100000010000000110010010110000
+01101000000000010000000111110011
+00011111111100001111111000000000
+11011000010000000000011111111111
+10011000010000010111111000000000
+00100000001000101110010001111011
+00100000010000000110011001101111
+11011010011000000110011010111000
+00100000010101000110010000110000
+00100000010000000110010000111100
+01101000000000001000000111110010
+11000011000000000110010001101111
+00100000010000000110011001101101
+01110000010000011101101000000000
+00100000010000000110010010110000
+00100000010000000110010111000010
+01101000000000001000000111110011
+11000010100000110110010010001110
+00100000010000000110010010101010
+00100100001101101110010010000110
+01101000000000001000000111110010
+11000011000000000110010001111101
+00100000001000000110010010011011
+00100000010000000110010110111111
+01101000000000001000000111110011
+11000010100000110110010010001110
+00100000010000000110010010101010
+00100100001101101110010010001110
+01101000000000001000000111110010
+11000011000000000110010001111101
+00100000001000000110010010011011
+01110000010000011101101000000000
+00100000010000000110010010110000
+01101000000000001000000111110011
+11000010100000101110010010011011
+01011000000000000000000000000000
+01100000000000011000000111110110
+00100000010000000110010100000010
+11011010011000000110010101111000
+00100000010000000110010000101001
+00100000010000000110010000111100
+00100100001101101110010010011011
+01101000000000001000000111110010
+11000011000000000110010010001111
+11000101000101011110010010011101
+00100000010000000110010010100011
+01101000000000001000000111110011
+11000011000000100110010010100011
+01110000100000000101000000100001
+00100000010000000100110000001110
+00100000010000000100110000101110
+00100000001000000110010010100001
+01011000000000000000000000000000
+01100000000001000000001000000110
+01100000000001000000001000001110
+00011000000000000111000000000100
+00100000010000000111010010010010
+01110000100000000101000000100001
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000010000000111110111
+11011010011000000110010111100101
+00100000010000000110010110100011
+00100000010000000110010000101001
+00100000001000000110010000111100
+01101000000000001100000111011010
+00011111111000001111111000000001
+00011111111001100111110000000011
+00100100001000010110010010110110
+01100000000000001100000111011010
+00100000011000000000000000000000
+00100000010000000110010010100011
+00100000010000000111111110100001
+00100000011000000000000000000000
+01101000000000001000000111110010
+00011111111000111111111000000000
+01111001001000001111111000000000
+00101010001011000000000000001111
+00100000011000001000000000000000
+01100000000000001000000111110010
+00100000011000000000000000000000
+01101000000100001000000010000101
+11000100000000001000000000000000
+00100000001000000110010011000110
+01101000000100001000000100101100
+10101111111011111111111111111111
+00100000011000001000000000000000
+01101000000100001000000100001000
+11000011000000001110010011000011
+00100000010000000111010000100010
+00100000001000000110010011000011
+01101000000000010100000110011001
+00100000011110100000000000000000
+01110000100000000010001110000000
+01110000100000000010001000000000
+01110000100000000010010000000000
+01101000000010010100000110011011
+00011000010010111111001000000000
+10011000000000000000110000000000
+11101000110000001000000000000000
+01100000000100001000000000100101
+11000010000000000110010011010010
+01110000100000000010001100000000
+00100000011000000000000000000000
+01000111010001101100000000110001
+00100000010000000110010011011101
+00100000001000000110001111110010
+00100000010000000110010011011101
+00100000010000000110001111101110
+00100000001000000110001111110110
+01101000000000001100001000010010
+01100000000100001000000010000110
+01101000000000001100001000010011
+01100000000100001000000010000111
+01011000000000000000000111110101
+01100000000100010000000010001010
+01011000000000000000000111111010
+01100000000100010000000010001100
+00100000001000000110001111101110
+01101000000100001000000010000110
+01111001001000000111111000000111
+01100000000100001000000010000110
+01111001001111111111111000000111
+01100000000100001000000010000110
+00100000011000000000000000000000
+01111001001000000111111000000111
+01100000000000010000000111110101
+01000111010001110100000000110001
+01110000100000001000100000000010
+01110000100000001000111000000000
+01110000100000000000011000000010
+00100000001000000110010011111100
+00011000000000000000010000000001
+01100000000000001000000111110101
+01000111010001111100000000110001
+01110000100000001000100000000001
+01100000000110010000000010001110
+01110000100000000000011000000010
+00100000010000000110010011111100
+01101000000000001000000111111010
+00100000011000000000000000000000
+01101000000000010100000011010110
+00011111111000001111111000000001
+01100000000000010100000011010110
+01101000000100001000000100101100
+11000011000000011110010011111100
+00100000011000000000000000000000
+01110000100000001000011001000000
+01110000100000001000011100000000
+01101000000100001000000010000001
+01111001001111111111111000000000
+01111001001000000111111000000001
+01100000000100001000000010000001
+01011000000000000000000000000000
+01100000000000100000000111110101
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000100010000000010001110
+01011000000000000000000000000001
+01100000000100010000000010001000
+01011000000000000000000111110101
+01100000000100010000000010001010
+01110000000000011111010100000110
+01110000100000000000011000000010
+00100000001000000110010011111100
+01111000010101000111110000000000
+00011111111000100010010000000000
+01101000000000001100001000111001
+11000001100000000000000000000000
+01111000001101000111110000000000
+00011010010000100111111000000000
+00100000001000000110010100100010
+01101000000000001100001000111001
+11000000000000001110010100100010
+11000000000000010110010100101000
+11000000000000011110010100110000
+11000000000000100110010100110111
+11000000000000101110010100111101
+00100000011000000000000000000000
+01100000000000011100001000110010
+00011010001000100111111000000000
+01100000000000010100001000110101
+01100000000010010100001000110111
+01110000010000100011100100000010
+00100000001000000110010100000010
+00100000010000000110010100000010
+01110000010000100011100100000011
+00100000010000000110010100001011
+11011010001000000000000111110101
+01101000000000011100001000110010
+01110000100000001000100000000100
+11011000010000000000000000100000
+00100000001000000110010101010110
+00100000010000000110010100000010
+00100000010000000110010100001011
+01011000000000000000000000000101
+00100000010000000110010011110011
+11000011100000000000000000000000
+01110000010000100011100100000100
+00100000011000000000000000000000
+00100000010000000110010100000010
+01110000010000100011100100000101
+00100000010000000110010100001011
+00100000010000000110010101001010
+00100000010000000110010101010010
+00100000001000000110010101000101
+00100000010000000110010100000010
+00100000010000000110010100001011
+01011000000000000000000000000101
+00100000010000000110010011110011
+11000011100000000000000000000000
+01110000010000100011100100000000
+01101000000000010100001000000001
+00100000001000000111111110011100
+01101000000000100000101010100010
+01101000000010010100001000110101
+00011000010000001000010111111100
+11100000010000100000000000000000
+00100000011000000000000000000000
+01101000000010010100001000110101
+00011000010000100010001000000000
+00011000010000001000010111111100
+11101000010000100000000000000000
+01100000000000100000101010100010
+01101000000010010100001000110111
+01101000000000011100001000110010
+00100000011000000000000000000000
+00011000010000001000010000000100
+01100000000110010000000010001000
+11011000010000000000000000000010
+00011010001000001010001111111100
+11100010001010001000000000000000
+00011111111100010000010000000000
+11100000101010001000000000000000
+00011111111011001000010000000000
+11100000101010001000000000000000
+11100000101000001000000000000000
+00011010001000100111111000000000
+01100000000100010000000010001010
+01011000000000000000000000000000
+01100000000100010000000010001110
+01110000100000000000011000000010
+00100000001000000110010011111100
+01100000000110010000000010001110
+00011111111100010000010000000000
+01100000000010001000000111110110
+00011111111011001000010000000000
+01100000000010001000000111110111
+01100000000000001000000111111000
+01011000000000000000000000000100
+01100000000100010000000010001000
+01110000000000011111010100000011
+01011000000000000000000111110101
+01100000000100010000000010001010
+00011010001000100111111000000000
+01100000000100010000000010001100
+01101000000100001000000010000110
+00101010001011000000000000001111
+01111001001000001111111000000110
+01100000000100001000000010000110
+01110000100000000000011000000010
+01101000000100001000000100101100
+11000010100000111110010101110100
+11011000111000000000000000000011
+00100000001000000110010011111100
+01100000000110010000000010001110
+01011000000000000000000000000100
+01100000000100010000000010001000
+01110000000000011111010100000011
+01011000000000000000000111110101
+01100000000100010000000010001010
+00011010001000100111111000000000
+01100000000100010000000010001100
+01101000000100001000000010000110
+00101010001011000000000000001111
+01111001001000001111111000000110
+01100000000100001000000010000110
+01110000100000000000011000000010
+01101000000100001000000100101100
+11000010100000111110010110000101
+11011000111000000000000000000011
+00100000010000000110010011000000
+00100000010000000110010011111100
+00101111111011111111111000000010
+00100000010000000110010010111001
+01101000000000001000000111110110
+00011111111100000010010000000000
+01101000000000001000000111110111
+00011111111011010111111000000000
+10011010010000011010010000000000
+01101000000000001000000111111000
+10011010010000011111111000000000
+10011000010000001111111000000000
+01100000000000001000000111111000
+00011111111011001111111000000000
+01100000000000001000000111110111
+00011111111011001111111000000000
+01100000000000001000000111110110
+00100000011000000000000000000000
+01110000100000000001000000000001
+00100000011000000000000000000000
+01110000100000001001000100001100
+01110000100000001001001000001101
+01110000100000001001001100001101
+01110000100000001001010000001101
+01110000100000001001010100001101
+01110000100000001001011000001100
+00100000001000000110010110101001
+01110000100000001001000100000101
+01110000100000001001001000000111
+01110000100000001001001100000111
+01110000100000001001010000000111
+01110000100000001001010100000111
+01110000100000001001011000000101
+01101000000100001000000001111011
+00011111111000011111111011000000
+01100000000100001000000001111011
+01101000000100001000000010000001
+00011111111000011111111000010000
+01100000000100001000000010000001
+00100000011000000000000000000000
+01101000000100001000000100101100
+11000011000000101110010110110000
+00100000011000000000000000000000
+01100000000100010000000010011000
+00011010001000100111111000000000
+01100000000100010000000010011010
+00011010010000100111111000000000
+01100000000100010000000010011100
+00011000010000100111111000000000
+01100000000100010000000010011110
+11011000010000000000000000000001
+01111101001110100000010000000001
+01100000000100001000000010010000
+01110000100000000000011000000100
+00100000001000000110010110110000
+01111001001000000000000000101000
+01110000010000100001000100001000
+00100000011000000000000000000000
+01111001001111111000000000101000
+01110000010000100001000100100000
+00100000011000000000000000000000
+01101000000000001100001000000011
+10011010010000001111111000000000
+01100000000000001000000111110111
+00100000001000000110010111001100
+01101000000000010000000111110111
+00011111111100001111111000000000
+01100000000000001000000111110111
+01011000000000000000000000000011
+01100000000100010000000010011000
+01110000000000011111011010100000
+01110000000000011111100010100001
+00100000001000000110010111101011
+01100000000010010000101010100010
+00100000010000000110010111010110
+01101000000010010000101010100010
+00100000010000000110011000000110
+00100000001000000110010111011101
+01101000000000001100001000111010
+11000001011111111000000000000000
+11000011000000110110010111011011
+01011000000000100100100111110000
+00100000010000000010101010001111
+01101000000010001100001000111010
+00100000001000000110100000101001
+01101000000010001100001000111010
+00100000001000000110100000100101
+01000111010010000100000000110010
+11000101000101000110010111000101
+01101000000000010100001000000011
+10011010010000001111111000000000
+00011111111100001111111000000000
+01100000000000010000000111110111
+01000111010010001100000000110010
+11000101000101000110010111001001
+01011000000000000000000000000100
+01100000000100010000000010011000
+01110000000000011111011010100000
+01110000000000011111100110100001
+01011000000000000000000111110110
+01100000000100010000000010011010
+01100000000110010000000010011110
+00011010001000100111111000000000
+01100000000100010000000010011100
+01011000000000000000000000000010
+00101010001011000000000000001111
+01111001001000001111111000000000
+01100000000100001000000010010000
+01110000100000000000011000000100
+11011000111000000000000000000101
+00100000010000000110010011000000
+00100000010000000110010110110000
+00101111111011111111111000000100
+00100000010000000110010010111001
+11000101000101000110011000000001
+01101000000000010000000111110111
+00011111111100001111111000000000
+10011000010000001111111000000000
+00011111111100001111111000000000
+01100000000000010000000111110111
+00100000011000000000000000000000
+01101000000000001000000111110111
+10011000010000001111111000000000
+00011111111100001111111000000000
+01100000000000010000000111110111
+00100000011000000000000000000000
+01101000000000010100001000000011
+10011010010000001111111000000000
+01100000000000010000101010011010
+01000111010010010100000000110010
+01100000000010010000101010100010
+00011010001000100111111000000000
+01100000000000010000101010111001
+00100000010000000110011000011101
+01101000000010010000101010110010
+01101000000000010000101010111001
+00011111111000100010001000000000
+01101000000000010000101010011010
+00100000010000000110011000111101
+01101000000000010000101010110010
+01101000000010010000101010111001
+10011000010000001000010000000000
+01100000000010010000101010111001
+01101000000010010000101010011010
+10011000010000001000010000000000
+01100000000010010000101010011010
+01101000000000010000101010100010
+00100100001110100110011000001101
+00100000011000000000000000000000
+01000111010010011100000000110010
+01101000000000001100001000010001
+00011111111000001111111111111111
+01101000000010010000101010011010
+10011000010000011111111000000000
+00011111111000001111111000000001
+01100000000000011000101010110110
+01101000000000010000101010100010
+10011000010000001111111000000000
+01101000000010011000101010110110
+10011000010001100111111000000000
+00100100001000010110011000101111
+01100000000000010000101010100010
+01101000000000011000101010110110
+01101000000010010000101010011010
+10011000010001100111111000000000
+01100000000000010000101010110010
+00100000011000000000000000000000
+01101000000000010000101010100010
+01100000000000010000101010110010
+01011000000000000000000000000000
+01100000000000010000101010100010
+00100000011000000000000000000000
+00011000010000001000010000000010
+01100000000110010000000010011000
+00011010001000001010001111111110
+11101010001010011000000000000000
+00011000010000100010010000000000
+11011000010000000000000010100000
+11100010001010001000000000000000
+11100000101000001000000000000000
+00100000001000000110011001001010
+00011111111000100010010000000000
+01000111010010100100000000110010
+11000101000101000110011000110100
+00011010010000100111111000000000
+00011000010000001000010000000011
+01100000000110010000000010011000
+00011010001000001010001111111101
+11101010001010011000000000000000
+00011000010000100010010000000000
+11011000010000000000000010100000
+11100010001010001000000000000000
+00011111111100001111111000000000
+11100000101000010000000000000000
+00011010001000100111111000000000
+01100000000100010000000010011010
+01011000000000000000000000000000
+01100000000100010000000010011110
+01110000100000001001000000000001
+01110000100000000000011000000100
+00100000010000000110010110110000
+00011010010000100111111000000000
+11100010001000011000000000000000
+01000111010010101100000000110010
+01110000000000011111100100000000
+01011000000000000000000000000001
+01100000000100010000000010011000
+01110000000000011111011010100000
+01011000000000000000000111110110
+01100000000100010000000010011010
+01011000000000000000000000000000
+01100000000100010000000010011110
+01100000000100010000000010011100
+01011000000000000000000000000011
+01100000000100001000000010010000
+01110000100000000000011000000100
+00100000010000000110010110110000
+01101000000100001000000100101100
+11000100000000110000000000000000
+00100000000000000000010111011100
+01101000000000001000000111111001
+00011111111000001111111000000001
+01100000000000001000000111111001
+00011111111001100111110000101000
+00100100011000010000000000000000
+00100000001000000110011001010101
+01110000100010010111001101110000
+00100000000000000000101110111000
+00100000011000000000000000000000
+01110000100010010111001100110000
+00100000011000000000000000000000
+00011111111010011111111000000000
+01100000000100010000000001000101
+01110000100000000100101100000000
+00100000011000000000000000000000
+00100000010000000110011001101111
+00100000010000000110011010100000
+11101010001010001000000000000000
+00011010001000001010001000000001
+00011000000000000000111000000000
+10101000010011000000000000000000
+00100000001000001110011010010111
+01101000000100001000000001000110
+01111001001000000111111000000110
+01111001001000000111111000000111
+01100000000100001000000001000110
+01110000100000000100011100000010
+01110000100000000100011110000010
+01111001001111111111111000000111
+01100000000100001000000001000110
+01110000100000000100011110001010
+00100000000000000000000000001011
+01110000100000000100011111001010
+00100000000000000000000000100001
+01110000100000000100011101001010
+00100000000000000000000000101100
+01110000100000000100011111001010
+00100000000000000000000000010110
+01110000100000000100011110001010
+00100000000000000000000000100001
+01110000100000000100011110000010
+00100000000000000000000000000001
+01110000100000000100011110010010
+00100000000000000000000000001010
+01110000100000000100011110110010
+01101000000100001000000000000111
+01110000100000000100011110010010
+00100000000000000000000000000001
+01110000100000000100011110000010
+10101111111011000000000000000000
+00100000001000001110011001111000
+01101000000100010000000001000101
+00011111111000001111111000000001
+01100000000100010000000001000101
+00011000111000001000111000000001
+00101000111000000001111000001000
+00100100001000001110011001111000
+11000010000000000110011001110101
+01110000100000000100011110000011
+00100000011000000000000000000000
+01110000100000000100011110000010
+00100000000000000000000000001100
+01110000100000000100011110000000
+01110000100000000100011110000010
+00100000000000000000000010010110
+00100000011000000000000000000000
+00100000010000000110011010100000
+01110000100000000100011110100010
+00011010001000100111111000000000
+01100000000100010000000001001000
+01111001001000000000010000001011
+00101111111011000000000000001111
+01111001001000001000010000001111
+01100000000110010000000001001010
+01110000100000000000011000000001
+00100000011000000000000000000000
+01101000000100001000000100101100
+11000011000000001110011010110000
+00100000011000000000000000000000
+00100000010000000110011001101111
+00100000010000000110011010100110
+00100000010000000110011010110000
+01110000100000000100011110000011
+00100000011000000000000000000000
+01101000000100010000000100100100
+01100000000100010000000001000101
+00100000010000000110011010100110
+11011000111000000000000000000001
+00100000010000000110010011000000
+00100000010000000110011010110000
+00101111111011111111111000000000
+00100000010000000110010010111001
+01110000100000000100011110000011
+00100000011000000000000000000000
+01101000000100010000000001011110
+10011000000000000001010000000000
+00100000011000000000000000000000
+00011001010000100111111000000000
+01100000000100010000000001011110
+00100000011000000000000000000000
+00011000011000100111111000000000
+01100000000100010000000001011000
+00100000011000000000000000000000
+01101000000100010000000001011000
+00011111111000100000011000000000
+00100000011000000000000000000000
+01101000000000010100001001000011
+01100000000100010000000001010010
+00100000011000000000000000000000
+00011111001000100111111000000000
+00100000011110100000000000000000
+00011111001000001111001111111000
+00100000010000010110011011011110
+00100000011000101000000000000000
+00100000001000010110011011010011
+00011111001000001111001000001000
+00011111001000001111001111111100
+00100000010000010110011011100001
+00100000011000101000000000000000
+00100000001000010110011011011000
+00011111001000001111001000000100
+00100000001000000110011011100100
+11101000110001000000000000000000
+11100001010001000000000000000000
+00100000011000000000000000000000
+11101000110000100000000000000000
+11100001010000100000000000000000
+00100000011000000000000000000000
+00011111001000100111111000000000
+00100000011110100000000000000000
+11101000110000001000000000000000
+11100001010000001000000000000000
+11000010000000000110011011100110
+00100000011000000000000000000000
+00011111001000100111111000000000
+00100000011110100000000000000000
+00011111001000001111001111111000
+00100000010000010110011011110111
+00100000011000101000000000000000
+00100000001000010110011011101100
+00011111001000001111001000001000
+00011111001000001111001111111100
+00100000010000010110011011111010
+00100000011000101000000000000000
+00100000001000010110011011110001
+00011111001000001111001000000100
+00100000001000000110011011111101
+11101000011001000000000000000000
+11100000101001000000000000000000
+00100000011000000000000000000000
+11101000011000100000000000000000
+11100000101000100000000000000000
+00100000011000000000000000000000
+00011111001000100111111000000000
+00100000011110100000000000000000
+11101000011000001000000000000000
+11100000101000001000000000000000
+11000010000000000110011011111111
+00100000011000000000000000000000
+00011111001000100111111000000000
+00100000011110100000000000000000
+11101000011000001000000000000000
+11100001010000001000000000000000
+11000010000000000110011100000101
+00100000011000000000000000000000
+01110000000010101001100100111101
+00100000001000000111110110000110
+01000111010010110100000000110010
+01101000000000001100001000010111
+00100000011110100000000000000000
+00100000010000000110011110100011
+00100000010000101110011110101001
+00100000010000000110011100111110
+01101000000000001100001000010111
+00011111111000100010011000000000
+01101000000010010100001000010101
+01100000000010010000000110001100
+00011010011000100111111000000000
+00100000001110100110011100001001
+00011010011000001010011111111111
+00011000010000100010001000000000
+11101010001000001000000000000000
+01101000000010001000000110000100
+10011000010001100111110000000000
+00100000010000101110011100100101
+00100000001000010110011100100001
+11101010001000001000000000000000
+00011111111000001111111000000001
+11100010001000001000000000000000
+01101000000010010000000110001100
+00011000010000001000010000100010
+01100000000010010000000110001100
+00100000001000000110011100010101
+01011000000000000000000000000000
+11100010001000001000000000000000
+01101000000000001000000110000101
+11100000101000001000000000000000
+11000000100110011110011100110011
+11011010010000000100000110111110
+11101000110000110000000000000000
+11100000101001000000000000000000
+01011000000000000000000000000000
+11100000101001000000000000000000
+00011010010000100000110000000000
+00100000010000000111111010111111
+00011000000000000111110000000001
+00100000011000000000000000000000
+11000000000110110110011100110111
+11000000000110111110011100111011
+11011010010000000100010000011001
+00100000001000000110011100101011
+11011000110000000100010011010101
+00100000010000000111111010111111
+11011000110000000100010000011001
+00100000001000000110011100110000
+11011000110000000100010011001101
+00100000010000000111111010111111
+00100000001000000110011100111001
+00100000010000000111111111101001
+01101000000000001100001000010111
+00100000011110100000000000000000
+01101000000000010100011010000010
+11000010100000000110011101010100
+01000111010010111100000000110010
+01101000000000001100010010001110
+11000000000000000110011101001101
+01101000000000001000010001010100
+00101111111000011000000011000000
+00100000001000001110011101001101
+00101111111000011000000001000000
+00100000001000001110011101010010
+00101111111000011000000000000000
+00100000001000001110011101010000
+01110000000000011000010100110101
+01101000000000110000010001001111
+00100000001000000110011101010111
+01110000000000011000010100110111
+00100000001000000110011101010111
+01110000000000011000010100110110
+00100000001000000110011101010111
+01000111010011000100000000110011
+01110000000000011000010100110011
+01101000000000110000000001000000
+01100000000000110000000110000110
+01101000000000010100001000010101
+11101111111010001000000000000000
+00011111111000001111111000000001
+01100000000000010000000110001100
+01100000000010001000000110000100
+01101000000000001100001000010111
+00011111111000100010011000000000
+01101000000000010000000110001100
+00011111111000100010001000000000
+00100000010000000110011101101111
+00100000011101000000000000000000
+01101000000010010000000110001100
+00011000010000001000010000100010
+01100000000010010000000110001100
+00011000010000001000010111111111
+11101000010000001000000000000000
+01100000000000001000000110000100
+00011010011000001010011111111111
+00100100001000101110011101011111
+01101000000000001100001000010111
+00011111111000001111111111111111
+01100000000000001000000110000100
+00100000011000000000000000000000
+01101000000000001000000110000101
+11000000100110011110011101110110
+11011010010000000000000110000101
+11011111001000000000000000000111
+00100000010000000111111110001000
+00100000001000101111111111100111
+00100000011000000000000000000000
+11000000000110110110011101111001
+11000000000110111110011110010100
+00100000001000000110011101110001
+11101010001010001000000000000000
+10011000010001100111110000000000
+00100100011000101000000000000000
+11011000101000000000101011000010
+11011111001000000000000000010000
+00100000010000000111111011010100
+01101000000000011000010001010010
+01100000000000011000101011000010
+00100000010000000110011110001011
+01101000000000010000101011011111
+00011111111100001111111000000000
+00011111111011010000010000000000
+11101000110000001000000000000000
+10011000010000001111111000000000
+01101000000010011000010001001111
+10011000010001100111110000000000
+00100000001000101111111111100111
+00100000011000000000000000000000
+11011000110000000000101011000010
+00100000010000000111010010000110
+11101010001000001000000000000000
+00100000010000000111010010000111
+00011000000000000110110000111000
+00011000000000000110110000000000
+00100000010000000111010000011101
+11011000101000000000101011010010
+00100000001000000111010010010111
+11101010001010001000000000000000
+10011000010001100111110000000000
+00100100011000101000000000000000
+00011000110000100010001000000000
+00011000110000001010011000001000
+11011010010000000100010011001101
+11011111001000000000000000001000
+00100000010000000111111110001000
+00100000001000101111111111100111
+00011010011000100010001000000000
+11011010010000000100010011010101
+11011111001000000000000000001000
+00100000010000000111111110001000
+00100000001000101111111111100111
+00100000011000000000000000000000
+01101000000000010100001000010101
+11101111111010001000000000000000
+00011111111000001111111000100010
+11101111111000001000000000000000
+10011000010001100111110000000000
+00100000011000000000000000000000
+01101000000000001100001000010111
+00011111111000100111001000000000
+01101000000010010100001000010101
+01011000000000000000000000000000
+11100000010000001000000000000000
+00011000010000001000010000100010
+00011111111000001111111000000001
+11000010000000000110011110101101
+00100000011000000000000000000000
+01000111010011001100000000110011
+00100000010000000110011100111110
+01101000000000001000000000110000
+01111001001101000111111000000110
+01100000000000001000000000110000
+00100100001101000110011110111100
+00011010001000001000110000001010
+11011000101000000100000110111110
+00100000010000000111111010111111
+00100000001000000110011111010111
+01110000010000011011110100000000
+00100000011000000000000000000000
+01101000000001001100010011001011
+00100000001110100110011111001010
+00100000010000000110011100111110
+00100100001101000110011111001010
+01101000000000010000000110001100
+00011111111000001000110000000001
+11011000101000000100010011010101
+00100000010000000111111010111111
+11011000101000000100010000011001
+00100000010000000111111010111111
+01110000010001000010100100000001
+00100000011000000000000000000000
+01110000010001000010100100000000
+00100000011000000000000000000000
+01101000000000110000010001001111
+01100000000000110000000110000110
+01110000000000011000010100110100
+00100000001000000110011111010011
+01101000000000110000000001000000
+01100000000000110000000110000110
+01110000000000011000010100110011
+01101000000000001100000010010010
+11000000000001010110011100001011
+11000010100000110100001011011010
+00100000011000000000000000000000
+01101000000001000100000110111110
+01101000000011000100000111000110
+10011000010000011111111000000000
+00100000011110100000000000000000
+01110000010000011011110100000001
+00100000011000000000000000000000
+01000111010011010100000000110011
+01111001001000000000010000000111
+00100000010000000110100000011101
+01111101001000001000010000000111
+01000111010011011100000000110011
+00011000010001100111110011111111
+00100000011000101000000000000000
+00101000010011000000000000000111
+00011000010000010000111000011111
+01101000000000100000000010100001
+11111001001000001111111000000000
+01100000000000100000000010100001
+01101000000000100000000010100101
+11111101001000001111111000000000
+01100000000000100000000010100101
+00100000011000000000000000000000
+01000111010011100100000000110011
+00011000010001100111110011111111
+00100000011000101000000000000000
+00101000010011000000000000000111
+00011000010000010000111000011111
+01101000000000100000000010100001
+11111001001111111111111000000000
+01100000000000100000000010100001
+01101000000000100000000010100101
+11111001001111111111111000000000
+01100000000000100000000010100101
+00100000011000000000000000000000
+00100000010000000110011111101101
+00100000001000000110011111111110
+00011000010001100111110011111111
+00100000011000101000000000000000
+00100100010101011110011111100001
+11011000101000001000000001111100
+00100000010000000110100000110000
+01111001010000000000010000000111
+11011000101000001000000001111000
+00100000010000000110100000110000
+01111001001111111000010000000111
+11011000101000001000000001110000
+00100000001000000110100000110000
+11011000101000001000000001111100
+00100000010000000110100000110000
+01111001001111111000010000000111
+11011000101000001000000001111000
+00100000010000000110100000110000
+01111001001111111000010000000111
+11011000101000001000000001110000
+00100000001000000110100000110000
+00011000010001100111110011111111
+00100000011000101000000000000000
+01111001010000000000010000000111
+00100000010000000110100000101111
+01111001001000000000010000000111
+11011000101000001000000001110000
+00100000001000000110100000110000
+00011000010000010000111000000111
+00011000010010010111111000000000
+00011111111000010111111000000011
+10011000101000001000101000000000
+11101000101000001000000000000000
+00100000011000000000000000000000
+11011000101000001000000001110100
+00100000001000000110100000011110
+11011000101000001000000100011100
+00100000010000000110100000010101
+00101000010011111111111000000111
+00100000001000001110100000100011
+10101111111011000000000000000000
+00100000011000000000000000000000
+10101111111011111111111111111111
+00100000011000000000000000000000
+00011000010001100111110011111111
+00100000011000101000000000000000
+00101111110011111111111000000111
+00100000001000000110100000101100
+00011000010001100111110011111111
+00100000011000101000000000000000
+00101111110011000000000000000111
+01011000000000000000000000000000
+01111101001000001111111000000111
+10011000010000101000010000000000
+11011000101000001000000001110100
+00100000010000000110100000010101
+00101000010011111111111000000111
+11111001001000001111111000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+11011010001111111111111111111111
+01101000000100001000000010000001
+00101111111000000000011000000010
+00100000010000001110100001111000
+00101111111000000000011000000001
+00100000010000001110100001111010
+00101111111000000000011000000011
+00100000010000001110100001111010
+00101111111011111111111000000010
+00100000010000001110100001110100
+00101111111011111111111000000011
+00100000010000001110100001110110
+00101111111011111111111000000100
+00100000010000001110100001111100
+00101111111011111111111000000110
+01111101001000001010001000000100
+00101111111011111111111000000111
+01111101001000001010001000000101
+01101000000100001000000010000010
+00101111111011111111111000000000
+01111101001000001010001000011011
+00101111111011111111111000000001
+01111101001000001010001000011100
+00101111111011111111111000000010
+01111101001000001010001000000011
+00101111111011111111111000000011
+01111101001000001010001000001000
+00101111111011111111111000000100
+01111101001000001010001000010100
+00101111111011111111111000000101
+01111101001000001010001000010101
+00101111111011111111111000000110
+01111101001000001010001000010110
+00101111111011111111111000000111
+01111101001000001010001000010111
+01101000000100001000000010000000
+00101111111011111111111000000000
+01111101001000001010001000000101
+00101111111011111111111000000001
+01111101001000001010001000000110
+00101111111011111111111000000010
+01111101001000001010001000000111
+00101111111011111111111000000011
+01111101001000001010001000010010
+00101111111011111111111000000100
+01111101001000001010001000010011
+00101111111011111111111000000101
+01111101001000001010001000010100
+00101111111011111111111000000110
+01111101001000001010001000010101
+00101111111011111111111000000111
+01111101001000001010001000010110
+01101000000100001000000001100010
+00101111111011111111111000000100
+00100000010000001110100001111110
+01000111010011101100000000110011
+01101000000100100000000001111000
+01101000000110100000000001111100
+10011000010000011111111000000000
+00011111111001000111111000000000
+10011010001000010111111000000000
+01100000000100100000000001110000
+00100000011000000000000000000000
+11011000111000000000000000000110
+00100000001000000110100010000100
+11011000111000000000000000001001
+00100000001000000110100010000010
+11011000111000000000000000010111
+00100000001000000110100010000010
+11011000111000000000000000011001
+00100000001000000110100010000100
+11011000111000000000000000011110
+00100000001000000110100010000100
+11011000111000000000000000000010
+00100000001000000110100010000100
+11011111001000000000000000000001
+00100000001000000110100010000101
+11011111001000000000000000000100
+00100000001000000110100010000101
+11011111001000000000000000000010
+11111001001111111010001000000000
+00011000111000001000111000000001
+11000010000000000110100010000101
+00100000011000000000000000000000
+00100000010000000110100010010101
+11011000010000000000000000000110
+00100000001000000110100000001110
+00100000010000000110100010001001
+11011000010000000000000000000110
+00100000001000000110100000100101
+00100000010000000110100010010101
+01101000000100001000000001111000
+01111001001000000111111000000111
+01100000000100001000000001111000
+11011000010000000000000000000111
+00100000001000000110011111111011
+01101000000100001000000010000001
+00011111111000010111111011111011
+01100000000100001000000010000001
+00100000011000000000000000000000
+01101000000100001000000010000001
+00101111111011111111111000000010
+00100000011000000000000000000000
+00100000010000000110011001101010
+01011000000000000000011111100000
+11011010001000000100000101010000
+11011000010000000000000000000010
+00100000010000000110011010110011
+00100000001000000110011001101101
+00100000010000000110011001101010
+01011000000000000000011111100010
+11011010001000000100001000011101
+11011000010000000000000000001110
+00100000010000000110011010110011
+00100000001000000110011001101101
+01000111010011110100000000110011
+00100000010000000110100010100010
+01101000000000001100001000101101
+11000000000000000110100010101111
+11000000000000001110100011000011
+11000000000000010110100011010111
+00100000011000000000000000000000
+01101000000010010100001000101001
+01011000000000001010101001010101
+10011000010001100111110000000000
+00100000001000101110100010111000
+01011000000000000100110111111010
+01100000000000010100001000100111
+01011000000000000100100010010100
+01100000000000010100001000100001
+00100000001000000110100011000000
+01101000000000010100001000100111
+00100100001110100110100010111100
+01011000000000000100110111111010
+01100000000000010100001000100111
+01101000000000010100001000100001
+00100100001110100110100011000000
+01011000000000000100100010010100
+01100000000000010100001000100001
+01011000000000000000000001100100
+01100000000000010100001000101011
+00100000011000000000000000000000
+01101000000010010100001000101001
+01011000000000001010101001010101
+10011000010001100111110000000000
+00100000001000101110100011001100
+01011000000000000101100100110010
+01100000000000010100001000100101
+01011000000000000100001100100011
+01100000000000010100001000011111
+00100000001000000110100011010100
+01101000000000010100001000100101
+00100100001110100110100011010000
+01011000000000000101100100110010
+01100000000000010100001000100101
+01101000000000010100001000011111
+00100100001110100110100011010100
+01011000000000000100001100100011
+01100000000000010100001000011111
+01011000000000000000000110010000
+01100000000000010100001000101011
+00100000011000000000000000000000
+01101000000010010100001000101001
+01011000000000001010101001010101
+10011000010001100111110000000000
+00100000001000101110100011100000
+01011000000000000110100101000110
+01100000000000010100001000100011
+01011000000000000101001101110111
+01100000000000010100001000011101
+00100000001000000110100011101000
+01101000000000010100001000100011
+00100100001110100110100011100100
+01011000000000000110100101000110
+01100000000000010100001000100011
+01101000000000010100001000011101
+00100100001110100110100011101000
+01011000000000000101001101110111
+01100000000000010100001000011101
+01011000000000000000000000110010
+01100000000000010100001000101011
+00100000011000000000000000000000
+01101000000000001100001000101101
+11000000000000000110100011110000
+11000000000000001110100011110010
+11000000000000010110100011110100
+00100000011000000000000000000000
+01110000100010010111000110111111
+00100000001000000110100011111000
+01110000100010010111000110101111
+00100000001000000110100011111000
+01110000100010010111000110001111
+01101000000000001100001000101110
+01100000000100001000100101110011
+00100000001000000110100011111000
+01000111010011111100000000110011
+01101000000100001000000001010011
+01111001001000000111111000000111
+01100000000100001000000001010011
+01101000000100001000100101110011
+00011111111000011111111000110000
+01100000000100001000100101110011
+01110000100010010000011001111100
+01110000100010010111001010101010
+00100000000000000001001110001000
+01101000000110010000000101010000
+01101000000100001000000001010011
+01111001001111111111111000000111
+01100000000100001000000001010011
+01100000000010010100001000101111
+00100000011000000000000000000000
+01000111010100000100000000110100
+01101000000000001100001000101101
+11000000000000000110100100001110
+11000000000000001110100100010010
+11000000000000010110100100010110
+00100000011000000000000000000000
+01101000000000010100001000100111
+01101000000010010100001000100001
+11011010011000000000000011001000
+00100000001000000110100100011010
+01101000000000010100001000100101
+01101000000010010100001000011111
+11011010011000000000000001100100
+00100000001000000110100100011010
+01101000000000010100001000100011
+01101000000010010100001000011101
+11011010011000000000000000110010
+00100000001000000110100100011010
+10011000010001100010001000000000
+01101000000000010100001000101111
+10011000010001100111111000000000
+00100100001000010110100100100111
+01101000000010010100001000101011
+10011000010011111010010000000000
+00011010011000100111111000000000
+10011010001011111111111000000000
+10011010010000001111111000000000
+10011010001001101111110000000000
+00100000010000000111111110000110
+00011000000001111111111000000000
+00100000011000000000000000000000
+00011000010000100111111000000000
+01101000000010010100001000101111
+10011000010001100111111000000000
+01101000000010010100001000101011
+10011000010011111010010000000000
+00011010011000100111111000000000
+10011010001011111111111000000000
+10011010010001100111111000000000
+00100000001000000110100100100011
+11101010001001000000000000000000
+01100000000001000000101010011010
+01101000000000010000101010011010
+01101000000010010000101010011100
+10011000010001100010001000000000
+01101000000000010000101010100000
+10011000010001100010010000000000
+01101000000010010000101010011110
+10011000010001100111110000000000
+00100100010000010110100101000000
+00011010010011111111111001100100
+10011010001001101111110000000000
+00100000010000000111111110000110
+00011000000001111111111000000000
+00100000010110100110100101000100
+00100000011000000000000000000000
+01101000000000001100001000110001
+01111001001000000111111000000000
+01100000000000001100001000110001
+00100000011000000000000000000000
+01101000000010001100001000110001
+01111001001000000000010000000001
+01100000000010001100001000110001
+00100000011000000000000000000000
+01101000000000010100001000111101
+11101111111000001000000000000000
+00100000011110100000000000000000
+00011111111000100111001000000000
+01101000000000010100001000111101
+00011111111000001111111000000011
+00011111111000100010001000000000
+11101010001010001000000000000000
+00100000010000000110011111111011
+00011010001000001010001000000001
+11000010000000000110100101001111
+00100000011000000000000000000000
+01101000000000010100001000111101
+00011111111000001111111000000011
+00011111111000100010001000000000
+00011000000000000010010000000000
+01110000000010110001001000000000
+11101010001010001000000000000000
+00100000010000000110100000011101
+01000111010100001100000000110100
+01101000000000010000101100010010
+00011010010000100000111000000000
+11111001001000001111111000000000
+01100000000000010000101100010010
+00011010001000001010001000000001
+00011010010000001010010000000001
+01101000000000010100001000111101
+11101111111000001000000000000000
+10011010010000101111110000000000
+00100100001000101110100101011001
+01101000000000010000101100010010
+01101000000010010000101100010100
+10011000010000101111110000000000
+00100000011000101000000000000000
+01111000001101000111110000000000
+00100000011000000000000000000000
+01101000000000010100001000111101
+11101111111000001000000000000000
+00100000011110100000000000000000
+00011111111000100111001000000000
+01101000000000010100001000111101
+00011111111000001111111000000011
+00011111111000100010001000000000
+11101010001010001000000000000000
+00100000010000000110011111011101
+00011010001000001010001000000001
+11000010000000000110100101110011
+00100000011000000000000000000000
+11011000111000000000000000001001
+00100000010000000111111100010110
+00100100011110100000000000000000
+01011000000000000000000000100000
+11011000111000000000000000001001
+00100000010000000111111100001000
+01111000010101000111110000000000
+00100000010000000110100101101100
+01000111010100010100000000110100
+01101000000000010100001000111101
+11101111111000001000000000000000
+00100000011110100000000000000000
+00100000010000000110100101010100
+00100100001101000111110100000010
+00100000010000000111110100000000
+01111000010101000111110000000000
+01101000000000010000101100010010
+01100000000000010000101100011001
+01110000000010110001101100000000
+00011000000000000000111000000000
+01101000000000010000101100010100
+00011111111000110000010000000000
+01100000000010010000101100010100
+00011111111000010111111000000001
+01101000000010010000101100011001
+00011000010000010010001000000001
+00011000010000110000010000000000
+01100000000010010000101100011001
+10011010001000101111110000000000
+00100100010000101110100110100001
+01101000000000010100001000111101
+11101111111000001000000000000000
+01101000000010001000101100011011
+00011000010000001000010000000001
+01100000000010001000101100011011
+00011000010000100000111000000000
+10011000111000101111110000000000
+00100100001000101110100110001100
+01101000000000010000101100010010
+01100000000000010000101100010100
+00100000011000000000000000000000
+01000111010100011100000000110100
+01101000000000010100001000111101
+00011111111000001111111000000001
+11101111111000010000000000000000
+00100000001000000111111110011100
+01101000000100001000000001000010
+10011010001000011111111000000000
+01100000000100001000000001000010
+01101000000100010000000001010000
+01111001001111111111111000001101
+01100000000100010000000001010000
+00100000000000000000000001100100
+00100000011000000000000000000000
+01101000000010011000101010011100
+01011000101101110001101100000000
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111000010000000000
+01101000000000001000101010011111
+10011000010011111111111000000000
+00011111111001101111110001100100
+00100000010000000111111110000110
+00011000000001111010001000000000
+00011000010000100111111000000000
+10011010001001100010010000000000
+01101000000000001000101010011011
+00100000010000000110100110111110
+01101000000000001000101010011010
+00100000001000000110100111010101
+11000000000000000110100111000100
+11000000000000001110100111000110
+11000000000000010110100111001000
+11000000000000011110100111001010
+11000000000000100110100111001100
+11000000000000101110100111001110
+11011000101000001000000010100000
+00100000001000000110100111010000
+11011000101000001000000010100100
+00100000001000000110100111010000
+11011000101000001000000010101000
+00100000001000000110100111010000
+11011000101000001000000001100100
+00100000001000000110100111010000
+11011000101000001000000001101000
+00100000001000000110100111010000
+11011000101000001000000001101100
+00100000001000000110100111010000
+00011010001000100111111000000000
+11100000101000010000000000000000
+00011010010000100111111000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+01111000001101000111110000000000
+00100000001000000110100111011000
+01111000010101000111110000000000
+11000000000000100110100111100011
+11000000000000101110100111100101
+11000000000011011110100111100111
+11000000000011100110100111101001
+11000000000000011110100111101011
+11000000000001000110100111101101
+11000000000010100110100111101111
+11000000000010101110100111110001
+11000000000010110110100111110011
+11000000000010111110100111110101
+00100000011000000000000000000000
+11011000111000000000000000000110
+00100000001000000110100111111111
+11011000111000000000000000000111
+00100000001000000110100111111111
+11011000111000000000000000001000
+00100000001000000110100111111111
+11011000111000000000000000001001
+00100000001000000110100111111111
+11011000111000000000000000001010
+00100000001000000110100111111111
+11011000111000000000000000001011
+00100000001000000110100111111111
+11011000111000000000000000001100
+00100000001000000110101000000001
+11011000111000000000000000001101
+00100000001000000110101000000001
+11011000111000000000000000001110
+00100000001000000110101000000001
+11011000111000000000000000001111
+00100000001000000110101000000001
+01101000000100010000000010000001
+11111001001101000111111000000000
+01100000000100010000000010000001
+00011010001000100000111000000000
+01101000000100001000000010000101
+11111001001101000111111000000000
+01100000000100001000000010000101
+00100000011000000000000000000000
+00011000111000001010001111111100
+00100000001000000110100111110111
+00011000111000001010001111110110
+00100000001000000110100111110111
+00100000011101011000000000000000
+01110000010001010110011100000000
+01110000000001001110110100000011
+01110000000001001110111000000011
+01110000000001001111001000010001
+01110000000001001111001100010011
+01011000000000000000000000000000
+01100000000000011000010011101111
+01100000000000001100001001010100
+01110000010001101000000100000000
+01000111010100100100000000110100
+01011000000000000000000000000000
+01100000000000001100001001010100
+01100000000000001100010101100100
+01100000000000001100010101011101
+01101000000000001100010101101011
+11000000000000001110101000010110
+01110000010001010110100101010000
+00100000011000000000000000000000
+01110000010001010110100100000000
+00100000011000000000000000000000
+00011000010000011000010000000010
+00100000011000000000000000000000
+00011000010000100111111000000000
+00011111111011011111111000000000
+01100000000000001100010101100010
+00011000000000000111111000111111
+00011111111011011111111000000000
+01100000000000001100010101100001
+00011000000000000111111000000001
+00011111111011011111111000000000
+01100000000000001100010101100000
+00100000010000000110101001010000
+00011000010000100111111000000000
+00100000011000000000000000000000
+00011111111011011111111000000000
+01100000000000001100010101100010
+00011000000000000111111001110011
+00011111111011011111111000000000
+01100000000000001100010101100001
+00011000000000000111111000000001
+00011111111011011111111000000000
+01100000000000001100010101100000
+00100000001000000110101001010000
+01101000000000001100010101100011
+00100000001110100110101000110011
+01011000000000000000000001110000
+00100000011000000000000000000000
+01011000000000000000000010101010
+00100000011000000000000000000000
+00011111111011011111111000000000
+01100000000000001100010101100010
+00011000000000000111111011101111
+00100000010000000110101001000100
+01101000000010010000010011110111
+00011000010000100000101000000000
+11100000101000001000000000000000
+00011000101000100000010000000000
+01100000000010010000010011110111
+00011000000000000111111011111111
+00100000010000000110101001000100
+01101000000010010000010011110111
+00011000010000100000101000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+00011111111011011111111000000000
+01100000000000001100010101100001
+01101000000000010100010101100001
+00011111111011010111111000000000
+01100000000000011000010011110100
+11011010001000000000000100000111
+11011010010000000000000000001111
+00100000010000000110101001011101
+00011111111000101111111011010111
+00011111111001000111111000000000
+00011111111011011111111000000000
+00100000011000000000000000000000
+01101000000000011100010101100000
+01100000000000011000010011110100
+11011010001000000000000100000111
+11011010010000000000000000001111
+00100000010000000110101001011101
+00011111111011010111111000000000
+11011010010000000000000000000111
+00100000010000000110101001011101
+00011111111000101111111000101011
+00011111111001000111111000000000
+00011111111011011111111000000000
+00011111111000100000010000000000
+00100000011000000000000000000000
+11011010011000000000000000000000
+00011010010000100111001000000000
+00100000010000000111111001110001
+00011111111000100000010000000000
+00011000010000100111111000000000
+00011010011000111010011000000000
+11000011000001000110101001100110
+10011010001000101000010000000000
+00011010011000001010011000000001
+00011000010000111000010000000000
+01101000000000011000010011110100
+00011010010000001010010111111111
+00101010010000011111111011111111
+00100000001000001110101001110000
+00011010010000100111001000000000
+00100000010000000111111001110001
+00101111111011111111111000000000
+01111001001000001000010000000000
+00100000001000000110101001100001
+00011000010000110111111000000000
+00100000011000000000000000000000
+01101000000010001100010101011101
+00011000010010111000010000000000
+01111001001000000000010000000000
+01101000000000001100010101100011
+00100100010110100110101000011000
+01100000000010001000010100001101
+00100000011000000000000000000000
+00011000010000111000010000000000
+01101000000000001100010101100011
+01111001001110100000010000000000
+00100000011000000000000000000000
+01101000000010001000010011111100
+01110000000001001111111011010111
+00100000010000000110101110110110
+01101000000000001100001001010001
+01111001001000000111111000000110
+01111001001000000111111000000111
+01100000000000001100001001010001
+01110000010001010110001100000000
+00100000001000000110101110010111
+01101000000000001100001001010001
+01111001001000000111111000000111
+01100000000000001100001001010001
+00100000001000000110101110010111
+01000111010100101100000000110100
+01101000000000001100011010000001
+11000000000000000110101010001110
+00100000001000000110101101001100
+01101000000000010000001001100100
+00011111111000100000110000000000
+00100000010000000110101010111000
+01101000000000001000010011111100
+11000000000000000110101010010100
+00100000001000000110101100011000
+01000111010100110100000000110100
+01101000000000001000010011111101
+11000000000111111110101001111101
+11000000001110011110101010000110
+11000000011101111110101010011011
+11000000001010011110101101000100
+00100000011000000000000000000000
+01101000000000010000010100000001
+00011111111000100000110000000000
+00100000010000000110101011000011
+01101000000000001000010100000011
+11000000001000001110101010100101
+11000000001000000110101010101101
+11000000001110001110101011100110
+11000000001110000110101011110010
+11000000001001001110101011111101
+00100000001000000110101110010111
+00100000010000000110101010101111
+00100000001000000110101010100111
+01101000000000001100001001010100
+01111001001000000111111000000000
+01111001001000000111111000000001
+01100000000000001100001001010100
+00100000010000000110101111100000
+00100000001000000110101110010111
+00100000010000000110101010101111
+00100000001000000110101110010111
+00100000010000000110101011001011
+00100000001000000110101011010111
+00100000010000000110101011001011
+11101000110000001000000000000000
+00011111111010010111111000000000
+01100000000000001100010101101010
+11101000110000001000000000000000
+01100000000000001000010100001000
+00100000011000000000000000000000
+11101000110000001000000000000000
+01100000000000001000010011111011
+00011111111010010111111000000000
+01100000000000001000010011111100
+11101000110000001000000000000000
+01100000000000001000010011111101
+00100000010000000110101011001110
+01100000000010010000010011111111
+00011000110000100111111000000000
+01100000000000010000010100000001
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000110111111000000000
+01100000000000001000010100000011
+00100000010000000110101011001110
+01100000000010010000010100000100
+00011000110000100111111000000000
+01100000000000010000010100000110
+00100000011000000000000000000000
+01101000000000010000010100000110
+00011111111000100000110000000000
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000100000010000000000
+00011000010000110000010000000000
+11000011100000000000000000000000
+11101000110000001000000000000000
+00011111111010011111111000000000
+00011111111100100111111000000000
+10011000010000001000010000000000
+00100000011000000000000000000000
+11101000110000001000000000000000
+01100000000000001100010101011101
+11101000110000001000000000000000
+01100000000000001000010100001001
+11101000110000001000000000000000
+01100000000000001000010100001010
+11101000110000001000000000000000
+01100000000000001000010100001011
+11101000110000010000000000000000
+01100000000000010100010101011110
+11101000110000001000000000000000
+01100000000000001000010100001100
+11101000110000001000000000000000
+01100000000000001100010101101000
+00100000011000000000000000000000
+00100000010000000110101010110001
+00100000001000000110101011101000
+01101000000000001100001001010100
+01111001001000000111111000000101
+01111001001000000111111000000110
+01100000000000001100001001010100
+01101000000010001100010101011101
+00011000010010111000010000000000
+00011000010000011000010000000011
+00100000010000000110110000010001
+01110000010001010110011100000011
+00100000001000000110101110010111
+01110000000010101001100100001000
+00100000010000000111110110000110
+00100000010000000110101010110001
+01101000000000001100010101101010
+00011111111001100111110000000001
+00100000001000101110101011111001
+00100000001000000010101010001100
+01101000000000001100001001010100
+01111001001000000111111000000111
+01100000000000001100001001010100
+00100000001000000110101110010111
+00100000010000000110101011001011
+11101000110000001000000000000000
+01100000000000001000101011000010
+00100000010000000101001011010010
+00100000010000000101001011100000
+01011000000000000000000000001110
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+01101000000000001100010101100011
+00011111111000111111111000000000
+01111001001000000111111000000000
+11100000101000001000000000000000
+01000111010100111100000000110100
+01011000000000000001010111101111
+11100000101000010000000000000000
+01011000000000000001000110010001
+11100000101000010000000000000000
+01101000000000001000101011000010
+11100000101000001000000000000000
+01011000000000000000000000000111
+11100000101000101000000000000000
+01011000000000000000000000000001
+11100000101000010000000000000000
+00100000010000000110101000101111
+11100000101000001000000000000000
+00100000011000000000000000000000
+00100000001000000110101100011001
+01000111010101000100000000110101
+01101000000000001000010011111101
+11000000001110011110101100100001
+11000000000111111110101100100101
+11000000011101111110101100111111
+11000000011111111110101100110111
+11000000001010011110101101000110
+00100000011000000000000000000000
+01101000000000001100001001010100
+01111001001000000111111000000011
+01100000000000001100001001010100
+00100000001000000110101110010111
+01101000000000001100001001010100
+01111001001000000111111000000011
+01111001001000000111111000000010
+01100000000000001100001001010100
+01101000000000001000010011111011
+00100000010000000110101000100110
+01100000000000001000010011111110
+00100000010000000110101110110110
+01101000000000001000010011111011
+00011111111010110111111000000000
+01100000000000001100010101011101
+00011111111010111111111000000000
+01111001001111111111111000000001
+01111001001000000111111000000000
+11011000010000000100010101100101
+01100000000010010000010011110111
+00100000010000000110101000110101
+00100000001000000110101110010111
+01101000000000010000010100000001
+00011111111000100000110000000000
+00011111111000001111111000000001
+01100000000000010000010100000001
+11101000110000001000000000000000
+01101000000010001100010101101000
+10011000010000001111111000000000
+01100000000000001100010101101000
+00100000010000000110110001000010
+00100000010000000110101001110010
+00100000010000000110110000101000
+00100000010000000110110001001011
+00100000001000000110101110010111
+01110000000010101001100100001001
+00100000010000000111110110000110
+00100000010000000110101000001101
+01101000000000001000010011111011
+00100000010000000110101000100110
+01100000000000001000010011111110
+00100000010000000110101110110110
+00100000001000000110101110010111
+01101000000000010000001001100100
+00011111111000100000110000000000
+00100000010000000110101010111000
+01101000000000001000010011111100
+11000000000000000110101101010010
+00100000001000000110101110000110
+01000111010101001100000000110101
+01101000000000001000010011111101
+11000000000111111110101001111101
+11000000001110011110101010000110
+11000000011101111110101101011000
+00100000001000000110101110010111
+01101000000000010000010100000001
+00011111111000100000110000000000
+00100000010000000110101011000011
+01101000000000001000010100000011
+11000000001000001110101101100001
+11000000001000000110101101100001
+11000000001110001110101101101100
+11000000001110000110101101111100
+00100000001000000110101110010111
+00100000010000000110101010101111
+01101000000000001100010101011101
+00011111111000110111111000000000
+01101000000010001100010101100100
+10011000010001100111110000000000
+00100000001000101110101101101000
+00100000001000000010101010001100
+01101000000000001100001001010100
+01111001001000000111111000000001
+01100000000000001100001001010100
+00100000001000000110101110010111
+00100000010000000110101010110001
+01101000000000001100010101101010
+01101000000010001100010101100100
+10011000010001100111110000000000
+00100000001000101110101101110011
+00100000001000000010101010001100
+00100000001000000110101110010111
+01101000000000001100001001010100
+01111001001000000111111000000101
+01111001001000000111111000000110
+01100000000000001100001001010100
+01101000000010001100010101011101
+00011000010010111000010000000000
+00011000010000011000010000000011
+00100000010000000110110000010001
+00100000001000000110101110010111
+00100000010000000110101010110001
+01101000000000001100010101101010
+01101000000010001100010101100100
+10011000010001100111110000000000
+00100000001000101110101110000010
+00100000001000000010101010001100
+01101000000000001100001001010100
+01111001001000000111111000000111
+01100000000000001100001001010100
+00100000001000000110101110010111
+01101000000000001000010011111100
+01101000000010001100010101100100
+10011000010001100111110000000000
+00100000001000101110101110001100
+00100000001000000010101010001100
+00100000001000000110101110010111
+01101000000000001000010011111101
+11000000001110011110101110010001
+11000000011101111110101100111111
+11000000011111111110101100110111
+11000000001010011110101110010110
+01101000000000001100001001010100
+01111001001000000111111000000011
+01100000000000001100001001010100
+00100000001000000110101110010111
+00100000001000000110101110010101
+00100000001000000110101101000110
+00100000011000000000000000000000
+01101000000000001100010101100111
+00100000011110100000000000000000
+11000000000000011110101110011100
+00100000001000000010101010001100
+01110000010001010110011100000000
+00100000010000000101001011010010
+11011000010000000000000000000001
+01101000000010001100010101011101
+00011000010010111000010000000000
+00011000010000011000010000000011
+11011010001000000000000010101010
+00100000010000000110101111111100
+00100000010000000101001011100000
+00011000101000100000110000000000
+11101000110000010000000000000000
+00100000001110100010101010001100
+00100000011000000000000000000000
+00100000010000000101001011100000
+01011000000000000000000000000100
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+01101000000000001000010011111011
+11100000101000001000000000000000
+01000111010101010100000000110101
+01011000000000000000000100111111
+11100000101000010000000000000000
+01101000000000001000010011111110
+11100000101000001000000000000000
+00100000011000000000000000000000
+00100000010000000101001011010010
+00100000010000000101001011100000
+01011000000000000000000000000100
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+01101000000000001000010011111011
+11100000101000001000000000000000
+01000111010101011100000000110101
+01011000000000000000000101110011
+11100000101000010000000000000000
+01101000000000001000010011111110
+11100000101000001000000000000000
+00100000011000000000000000000000
+00100000010000000101001011100000
+01011000000000000000000000001110
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+01101000000000001100010101100011
+00011111111000111111111000000000
+01111001001000000111111000000000
+11100000101000001000000000000000
+01000111010101100100000000110101
+01011000000000000001010111101111
+11100000101000010000000000000000
+01011000000000000001000110000011
+11100000101000010000000000000000
+00011000010000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000011110000
+11100000101000011000000000000000
+01011000000000000000000001111111
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000001000000000000000
+01011000000000000000000000000001
+11100000101000001000000000000000
+00100000010000000110101000101111
+11100000101000001000000000000000
+01110000010001010110100100010000
+00100000011000000000000000000000
+00100000010000000101001011010010
+00100000010000000101001011100000
+01011000000000000000000000001110
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+01101000000000001100010101100011
+00011111111000111111111000000000
+01111001001000000111111000000000
+11100000101000001000000000000000
+01000111010101101100000000110101
+01011000000000000001010111101111
+11100000101000010000000000000000
+01011000000000000001000110000001
+11100000101000010000000000000000
+01101000000000001100010101011101
+11100000101000001000000000000000
+01011000000000000000000011100000
+11100000101000011000000000000000
+01101000000000010100010101101100
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000001000000000000000
+01101000000000001100010101101110
+11100000101000001000000000000000
+00100000010000000110101000101111
+11100000101000001000000000000000
+00100000011000000000000000000000
+00100000010000000101001011100000
+01011000000000000000000000001000
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+01101000000000001100010101100011
+00011111111000111111111000000000
+01111001001000000111111000000000
+11100000101000001000000000000000
+01000111010101110100000000110101
+01011000000000000000100111101111
+11100000101000010000000000000000
+01011000000000000000010111100011
+11100000101000010000000000000000
+00011000010000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000010001101
+11100000101000001000000000000000
+00100000010000000110101000101111
+11100000101000001000000000000000
+00100000011000000000000000000000
+00100000010000000101001011010010
+00100000010000000101001011100000
+01011000000000000000000000001000
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+00011000010000100001011000000000
+01101000000000001100010101100011
+00011111111000111111111000000000
+01111001001000000111111000000000
+11100000101000001000000000000000
+01000111010101111100000000110101
+01011000000000000000100111101111
+11100000101000010000000000000000
+01011000000000000000010111100001
+11100000101000010000000000000000
+00011001011000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000010001101
+11100000101000001000000000000000
+00100000010000000110101000101111
+11100000101000001000000000000000
+00100000011000000000000000000000
+01000111010110000100000000110110
+01101000000000001100010101101001
+00100000011110100000000000000000
+01101000000100010000000100010010
+00100100011110100000000000000000
+00011010001000100111111000000000
+01100000000000001000101010011011
+01100000000010001000101010011010
+00100000010000000101001001101110
+00100100011110100000000000000000
+00100000010000000101001011010010
+00100000010000000101001011100000
+01011000000000000000000000000101
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+01101000000000001000010100001101
+11100000101000001000000000000000
+01011000000000000000000111111111
+11100000101000010000000000000000
+01101000000000001100010101101001
+11100000101000001000000000000000
+01101000000000001100010101100110
+11100000101000001000000000000000
+01110000010001010110100100000000
+00100000011000000000000000000000
+01000111010110001100000000110110
+01101000000000001100010101101011
+11000001000000001000000000000000
+01101000000000010000010011111111
+00100000011110100000000000000000
+01101000000000001100010101101001
+00011111111000001111111000000001
+01100000000000001100010101101001
+00100000011000000000000000000000
+01101000000000010100010101101111
+00100000001000000111111110011100
+01000111010110010100000000110110
+01101000000000001100010101101000
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000001100010101101000
+01101000000000010100010101011110
+01101000000010010100011010011111
+10011000010001100111110000000000
+00100000001000010110110001010111
+01100000000000010100011010011111
+01101000000000001100010101101001
+00100000001110100110110001011111
+01110000000001010001000000000001
+01101000000000001100010101100110
+01100000000000001000010100001111
+01011000000000000000000011111111
+01100000000000001000010100001110
+00100000001000000110110001100100
+01110000000001010001000000000000
+01101000000000001100010101100101
+01100000000000001000010100001111
+01011000000000000000000011101111
+01100000000000001000010100001110
+01000111010110011100000000110110
+01101000000000010100011010011111
+00011111111001100111110001111111
+00100000001000010110110001101011
+01101000000000001000010100010000
+00011111111000001111111000000001
+01100000000000001000010100010000
+00100000010000000110101001110010
+01101000000000010100011010011111
+00011111111000001111111000001000
+01101000000010001000010100010000
+10011000010000001010001000000000
+00100000010000000101001001000000
+01100000000000010000001001110111
+00011111111000001111111000000100
+01100000000000010000001001111001
+00011111111000100000101000000000
+01101000000000001000010100001101
+11100000101000001000000000000000
+01101000000000001000010100001110
+11100000101000001000000000000000
+00100000010000000110110010010101
+00100000010000000110110010100110
+01000111010110100100000000110110
+01101000000000010100010101110001
+00011111111000100000011000000000
+01101000000000010100011010011111
+00011111111000100111001000000000
+00100000010000000110011011101010
+00011000101000100000010000000000
+00011000011000100111111000000000
+01100000000000010100010101110001
+00011000010000100000101000000000
+01101000000000001000010100001111
+11100000101000001000000000000000
+01101000000000010000001001110111
+00011111111000100000101000000000
+01101000000000010100011010011111
+01101000000010001000010100010000
+10011000010000001111111000000000
+00011111111000001111111000000100
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+01110000010001010110100100000000
+01101000000000010100010101110011
+11000000000000000011101010010111
+01110000000010110000010100000000
+00100000011000000000000000000000
+01000111010110101100000000110110
+01101000000000010100011010011111
+00011111111001100111110001111111
+00100100001000010110110010011101
+00011111111000111111111000000000
+01111001001000000111111000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+01101000000000010100011010011111
+00011111111010010111111000000000
+00011111111100011000010000000000
+00011111111000010111111001111111
+00011111111000111111111000000000
+01111001001111111111111000000000
+11100000101000001000000000000000
+11100000101010001000000000000000
+00100000011000000000000000000000
+01101000000000001100010101101001
+00100000011110100000000000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+01000111010110110100000000110110
+00100000010000000111110110011100
+00100000010000000011001011110110
+00100000010000000110001100011011
+01000111010110111100000000110110
+00100000010000000111011011011100
+00100000010000000111011010110101
+00100000010000000111011011000110
+00100000010000000101001001101110
+00100100011110100000000000000000
+00100000010000000100110110101001
+00100000010000000101001001101110
+00100100011110100000000000000000
+01000111010111000100000000110111
+00100000010000000110110011110101
+00100000010000000100111101100100
+00100000010000000110101110011000
+00100000010000000110110010111110
+01000111010111001100000000110111
+00100000001000000011001011110010
+01101000000000001000001001111111
+11000010100000000101000010000111
+11000010100000111101000010010001
+00100000011000000000000000000000
+01000111010111010100000000110111
+00100000010000000101001001110100
+00100000011110100000000000000000
+01101000000000001000000001001011
+11000011100000110000000000000000
+00100000010000000101001001011000
+01100000000000010000000101101111
+00011111111000100000110000000000
+11101000110000010000000000000000
+00011111111000001111111000000100
+01100000000000010100000111011100
+01110000010000011101101100000110
+01000111010111011100000000110111
+01101000000000010100001001000110
+00100000001110100110110011011101
+01101000000000001000000001001011
+11000100000000111000000000000000
+01111001001111111111111000000111
+01100000000000001000000001001011
+01110000010000011101101100000101
+01101000000010010100001001000110
+01101000000000010000000101101111
+10011000010000001111111000000000
+01100000000000010000000101101111
+01101000000000010100000111011100
+10011000010001100111111000000000
+01100000000000010100000111011100
+01000111010111100100000000110111
+01101000000000010100000111011100
+00100000001110100010101010001100
+11011000010000000000000100000100
+10011000010001100111111000000000
+00100100001000010110110011101001
+01000111010111101100000000110111
+01100000000010010100000111011100
+01101000000000010100001001000110
+10011000010000001111111000000000
+01100000000000010100001001000110
+00100000001000000110110011101011
+01011000000000000000000000000000
+01100000000000010100001001000110
+01101000000000001000000001001011
+01111001001000000111111000000110
+01100000000000001000000001001011
+00100000011000000000000000000000
+01101000000000001100011010000100
+11000010100000000110110011110011
+01110000000000101000011100000001
+00100000011000000000000000000000
+01110000000000101000011100001111
+00100000011000000000000000000000
+01101000000000001100011010000001
+00100100001110100110110011111011
+01101000000000001000001010000110
+00100000011110100000000000000000
+01110000000000101000011000000000
+00100000011000000000000000000000
+01000111010111110100000000110111
+01101000000000001000001010000111
+00100000011110100000000000000000
+11000000000000001110110100011011
+11000000000000010110110101110100
+11000000000000011110110100100001
+11000000000000100110110101111000
+11000000000111011110110100101011
+11000000000111100110110101111011
+11000000000001101110110100110000
+11000000000001110110110110000000
+11000000000001111110110100110011
+11000000000010000110110110000110
+11000000000010001110110100111001
+11000000000010010110110110001010
+11000000000010011110110100111111
+11000000000010100110110110001110
+11000000000010101110110101000101
+11000000000010110110110110010010
+11000000000010111110110101001011
+11000000000011000110110110010111
+11000000000011001110110101010001
+11000000000011010110110110011011
+11000000000011011110110101010111
+11000000000011100110110110011111
+11000000000011101110110101011101
+11000000000011110110110110100100
+11000000000011111110110101100011
+11000000000100000110110110101000
+11000000000100001110110101101110
+11000000000100010110110110101100
+00100000011000000000000000000000
+00100000010000000110110110110111
+01110000000000101000011100000010
+01101000000000001100001001010000
+01111001001000000111111000000000
+01100000000000001100001001010000
+00100000011000000000000000000000
+01110000000000101000011100000100
+01101000000000001100001001010000
+11000011100000010000000000000000
+01110000000000101000011100000011
+00100000010000000110110110111110
+01110000000000101000011100000100
+01101000000000001100001001010000
+01111001001000000111111000000010
+01100000000000001100001001010000
+00100000011000000000000000000000
+00100000010000000101001001110100
+00100100011110100000000000000000
+00100000010000000110110111001101
+01110000000000101000011100111100
+00100000011000000000000000000000
+00100000010000000110110111000011
+01110000000000101000011100001110
+00100000011000000000000000000000
+00100000010000000110110111011101
+01110000000000101000011100010000
+01101000000000001100001001010010
+01111001001000000111111000000000
+01100000000000001100001001010010
+00100000011000000000000000000000
+00100000010000000110110111100100
+01110000000000101000011100010010
+01101000000000001100001001010010
+01111001001000000111111000000010
+01100000000000001100001001010010
+00100000011000000000000000000000
+00100000010000000110110111101001
+01110000000000101000011100010100
+01101000000000001100001001010011
+01111001001000000111111000000000
+01100000000000001100001001010011
+00100000011000000000000000000000
+00100000010000000110110111110000
+01110000000000101000011100010110
+01101000000000001100001001010011
+01111001001000000111111000000010
+01100000000000001100001001010011
+00100000011000000000000000000000
+00100000010000000110110111010001
+01110000000000101000011100011000
+01101000000000001100001001010001
+01111001001000000111111000000000
+01100000000000001100001001010001
+00100000011000000000000000000000
+00100000010000000110110111011000
+01110000000000101000011100011010
+01101000000000001100001001010001
+01111001001000000111111000000010
+01100000000000001100001001010001
+00100000011000000000000000000000
+00100000010000000110110111110101
+01110000000000101000011100011100
+01101000000000001100001001010001
+01111001001000000111111000000110
+01100000000000001100001001010001
+00100000011000000000000000000000
+00100000010000000110110111111100
+01101000000000001100001001010100
+01111001001000000111111000000000
+01100000000000001100001001010100
+01110000000000101000011100011110
+00100000011000000000000000000000
+00100000010000000110111000000010
+01101000000000001100001001010100
+01111001001000000111111000000010
+01100000000000001100001001010100
+01110000000000101000011100100000
+01101000000000001100010101100100
+00011111111010011111111000000000
+00011111111000011111111000000011
+11011000010000000100010101100101
+01100000000010010000010011110111
+00100000001000000110101000110101
+00100000010000000110111000001100
+01101000000000001100001001010100
+01111001001000000111111000000100
+01100000000000001100001001010100
+01110000000000101000011100100010
+00100000011000000000000000000000
+01101000000000001100001001010000
+11000100000000001000000000000000
+01110000000000101000011100000011
+00100000001000000110110011111011
+01101000000000001100001001010000
+11000001100111111000000000000000
+01110000000000101000011100111011
+01101000000000001000001010000101
+11000001100010111000000000000000
+01110000000000101000010100000000
+01110000000000101000011100001101
+00100000001000000110110011111011
+01101000000000001100001001010000
+00100100011110100000000000000000
+01101000000000001100011010000100
+11000010100000000110110110101111
+11000010100000110110110110110001
+00100000001000000110110110110101
+01101000000000001100001001010010
+11000100000000001000000000000000
+01110000000000101000011100010001
+00100000001000000110110011111011
+01101000000000001100001001010010
+11000001100111111000000000000000
+01110000000000101000011100010011
+00100000001000000110110011111011
+01101000000000001100001001010011
+11000100000000001000000000000000
+01110000000000101000011100010101
+00100000001000000110110011111011
+01101000000000001100001001010011
+11000001100111111000000000000000
+01101000000000001100011010000100
+11000010100000110110110110110001
+00100000001000000110110110110101
+01101000000000001100001001010001
+11000100000000001000000000000000
+01110000000000101000011100011001
+00100000001000000110110011111011
+01101000000000001100001001010001
+11000001100111111000000000000000
+01110000000000101000011100011011
+00100000001000000110110011111011
+01101000000000001100001001010001
+11000001111111111000000000000000
+01101000000000001100011010000100
+11000010100000110110110110110011
+00100000001000000110110110110101
+01101000000000001100001001010100
+11000100000000001000000000000000
+01110000000000101000011100011111
+00100000001000000110110011111011
+01101000000000001100001001010100
+11000100000000011000000000000000
+01110000000000101000011100100001
+00100000001000000110110011111011
+01101000000000001100001001010100
+11000001111111111000000000000000
+00100000001000000110110110110101
+01110000000000101000011100001111
+00100000001000000110110011111011
+01110000000000101000011100010111
+00100000001000000110110011111011
+01110000000000101000011100011101
+00100000001000000110110011111011
+01110000000000101000011100000000
+00100000011000000000000000000000
+01000111010111111100000000110111
+00100000010000000101001010111000
+01011000000000000000000000000001
+00011111111000100000010000000000
+01011000000000000000000001010000
+00011111111000100001011000000000
+00100000001000000101000010101000
+01000111011000000100000000111000
+00100000010000000101001010111000
+01101000000000010100001001001000
+00011111111000100000010000000000
+00100000001000000101000010110111
+01000111011000001100000000111000
+00100000010000000101001010111000
+01101000000000010100001001001000
+00011111111000100000010000000000
+11011001011000000000000001010000
+00100000010000000101000011001100
+01101000000000001100001001010000
+01111001001111111111111000000101
+01100000000000001100001001010000
+00100000011000000000000000000000
+01000111011000010100000000111000
+00100000010000000101001011000101
+00100000010000000111000100111000
+00100000001000000101000011100111
+01000111011000011100000000111000
+00100000010000000101001010111000
+01011000000000000000000000000011
+00011111111000100000010000000000
+01011000000000000000000001010001
+00011111111000100001011000000000
+00100000001000000101000010101000
+01000111011000100100000000111000
+00100000010000000101001010111000
+01101000000000010100001001001010
+00011111111000100000010000000000
+00100000001000000101000010110111
+01000111011000101100000000111000
+00100000010000000101001010111000
+01011000000000000000000000010001
+00011111111000100000010000000000
+01011000000000000000000001010010
+00011111111000100001011000000000
+00100000001000000101000010101000
+01000111011000110100000000111000
+00100000010000000101001010111000
+01101000000000010100001001001100
+00011111111000100000010000000000
+00100000001000000101000010110111
+01000111011000111100000000111000
+00100000010000000101001010111000
+01011000000000000000000000010011
+00011111111000100000010000000000
+01011000000000000000000001010011
+00011111111000100001011000000000
+00100000001000000101000010101000
+01000111011001000100000000111001
+00100000010000000101001010111000
+01101000000000010100001001001110
+00011111111000100000010000000000
+00100000001000000101000010110111
+01000111011001001100000000111001
+00100000010000000101001011010010
+01110000000001001111101100000011
+01110000000001001111111000011100
+00100000010000000110101110101001
+01110000010001010110001100000001
+00100000011000000000000000000000
+01000111011001010100000000111001
+00100000010000000101001011010010
+01101000000010001100010101100100
+00100000010000000110101001111001
+01100000000010001100010101011101
+00100000001000000110101111000100
+01000111011001011100000000111001
+00100000010000000101001011010010
+01101000000010001100010101011101
+00100000010000000110101001110011
+00100000010000000110101000011010
+01100000000000001000010011111110
+01101000000010001100010101011101
+00100000010000000110101001110011
+01100000000010001000010011111011
+00100000001000000110101110101001
+01000111011001100100000000111001
+00100000010000000101001011010010
+01101000000010001100010101011101
+00100000010000000110101001110011
+00100000001000000110101111111100
+01000111011001101100000000111001
+01101000000000010000001001100100
+10011000000000000000110000000000
+11101000110000001000000000000000
+00011111111000100010010000000000
+01100000000000001000010100011011
+11101000110000010000000000000000
+01100000000000010000010100011100
+11101000110000001000000000000000
+00011111111011010001011000000000
+11101000110000001000000000000000
+10011001011000001001011000000000
+01000111011001110100000000111001
+00011000110000100000010000000000
+11011111001000000000000000000100
+11011000101000000000010100101010
+00100000010000000111111011000110
+00011000010000100000110000000000
+00011010010000100111111000000000
+11000000000000001110111110111010
+11000000000000010110111000101100
+11000000000000011110111110111010
+11000000000000100110111001010100
+11000000000000101110111110111010
+11000000000000110110111100000010
+11000000000000111110111110111010
+00100000001000000110111111000001
+01000111011001111100000000111001
+00100000010000000110111111010000
+00101000010000011111111000000001
+00100000001000001111000001000000
+00101000010000011111111011111111
+00100000001000001110111111000100
+11101000110000010000000000000000
+01100000000000010000010100100010
+00011001011000001001011111111110
+00011001011000001001011111111111
+00100100001000101110111110111110
+11011001011000000000010100010001
+11101001011000010000000000000000
+00100000011110100000000000000000
+00100000010000000111000010000010
+00100000010000000101001011010000
+00011000000000000111111000000011
+11100000101000001000000000000000
+01101000000000010000010100011100
+11100000101000010000000000000000
+00011000111010111111111000000000
+00011111111000001111111000000101
+00011111111000001010011000000101
+00011111111100001111111000000000
+11100000101000010000000000000000
+00011000111000100111111000000000
+00011111111100001111111000000000
+11100000101000010000000000000000
+11100000101000010000000000000000
+11011000110000000000010100101010
+00011000111000100111001000000000
+00100000001000101110111001001111
+11101000110000100000000000000000
+11100000101000100000000000000000
+11000010000000000110111001001100
+00011000000000000111111000000000
+11100000101000001000000000000000
+00011010011000100111111000000000
+01100000000000010000001001110101
+00100000011000000000000000000000
+01000111011010000100000000111010
+11101000110000100000000000000000
+01100000000000100000010100100100
+00011001011000001001011111111100
+00100000010000000110111100101110
+01100000000000010000010100100000
+00011001011000001001011111111110
+00100000010000000111000000101000
+00100000001000101110111111000100
+00101010001000011111111000000101
+00100000001000001110111001100010
+11011000101000000000010100101010
+00011000000000000000111000000000
+00100000001000000110111001110001
+11101000110000001000000000000000
+11000000100001010110111111000100
+11101000110000010000000000000000
+00100100001110100110111001101111
+11101000110000001000000000000000
+11000000111111111110111001101101
+11101000110000001000000000000000
+11000000111111111110111001101011
+00100000001000000110111010111000
+00011000110000001000110111111011
+00100000001000000110111001011111
+00011000110000001000110111111100
+00100000001000000110111001011111
+00011000110000001000110111111101
+00100000001000000110111001011111
+11101000110000001000000000000000
+11000000000001001110111010000110
+11000000000001010110111001110100
+11101000110000010000000000000000
+11100000101000010000000000000000
+00011000111000001000111000000001
+00011111111100001010010000000000
+11101000110000010000000000000000
+00011111111100001111111000000000
+00011010010000001010010000000001
+10011010010001100111110000000000
+00100100001000010110111010000011
+00011111111000100010011000000000
+00011010010100001111111000000000
+11100000101000010000000000000000
+00011000111000001000111000000001
+00011010011000100111111000000000
+00100000001000000110111001111010
+00011001011000001001011111111011
+00011010001000001010001111111011
+00100000001000000110111010001011
+11101000110000010000000000000000
+11100000101000010000000000000000
+00011000111000001000111000000001
+00011001011000001001011111111101
+00011010001000001010001111111101
+00100100001000010110111111000100
+00100100001000101110111001110001
+00011001011000001001011111111111
+00100100001000101110111111000100
+00100000010000000101001011010000
+00011000101000001000101000001010
+11011010001000000000010100101010
+00011000111000100111111000000000
+00100000001110100110111010100101
+11101010001000010000000000000000
+00100000001110100110111010100101
+10011000000000000010010000000000
+01101000000000100000010100100100
+10011000000000000000010000000000
+00100000010000000111000011100111
+00011000110000100111111000000000
+00100000001110100110111010100010
+00011000110000001000110111111101
+11101000110000011000000000000000
+11100000101000011000000000000000
+00100000010000000111000001011011
+10011000000000000111001000000000
+00100000010000000111111100000001
+00011010001000001010001000000010
+00011000111000001000111111111111
+00100000001000000110111010010010
+11011010001000000000000000000101
+00100000010000000110111110000100
+01101000000000010000001001110101
+11000000000001011111000001000011
+00100000001000000110111110011010
+11101000110000001000000000000000
+11000000000000000110111010101110
+11000000000000001110111010110000
+11000000000000010110111010110011
+00011001011000001001011111111111
+00100000001000000110111010110110
+11101000110000001000000000000000
+00011001011000001001011111111110
+00100000001000000110111010110110
+11101000110000010000000000000000
+00011111111100001111111000000000
+00011001011000001001011111111101
+01100000000000010000010100011001
+00100000011000000000000000000000
+00011001011000001001011111111011
+00100000010000000110111010101010
+00100100001000101110111110111110
+01101000000010100000010100100100
+00100000010000000111000010110001
+00100100001000101110111110111011
+00011000110000100010001000000000
+00100000010000000101001011010000
+00011010001000100000110000000000
+00011000101000001000101000000011
+00011000110000100001011000000000
+00100000010000000111000001100010
+00011111111000100010001000000000
+01101000000000010000010100011001
+00011111111000100010010000000000
+00011010001000100111111000000000
+10011010010001100010010000000000
+01101000000000010000010100100000
+10011010010001100111110000000000
+00100100001000010110111011100111
+01111000010101000111110000000000
+01101000000000010000010100011001
+00100000001110100110111011011010
+10011001011000001000110000000000
+00011010010000001010010000000011
+00011010010000100111001000000000
+00011111001000100111111000000000
+00011111111000001111111000000011
+00011111111100001111111000000000
+11100000101000010000000000000000
+00011111001000100111111000000000
+00011111111100001111111000000000
+11100000101000010000000000000000
+00100000001000000110111011110101
+00011010001000001111001000000110
+00100000001101000110111011011110
+00011111001100001111111000000000
+00100000001000000110111011100001
+00011111001000100111111000000000
+00011111111000001111111000000010
+00011111111100001111111000000000
+11100000101000010000000000000000
+00011111001000001111001111111101
+00011111001100001111111000000000
+11100000101000010000000000000000
+00011001011000100000110000000000
+00100000001000000110111011110101
+01111000001101000111110000000000
+01101000000000010000010100100000
+00011111111000100010001000000000
+00011010001000100111001000000000
+01101000000000010000010100011001
+00100000001110100110111011011010
+10011001011000001000110000000000
+00011010001000100111111000000000
+00011111111000001111111000000101
+00011111111100001111111000000000
+11100000101000010000000000000000
+00011010001000100111111000000000
+00011111111100001111111000000000
+11100000101000010000000000000000
+00100000010000000111111100000001
+00100100001101000110111011111110
+00011000000000000111111000000010
+11100000101000001000000000000000
+00011000110000100111111000000000
+10011001011001100111111000000000
+00011111111100001111111000000000
+11100000101000010000000000000000
+00100000001000000110111100000000
+00011000000000000111111000000000
+11100000101000001000000000000000
+11011010001000000000000000000101
+00100000001000000110111110110000
+01000111011010001100000000111010
+00100000010000000110111111010000
+00101000010000011111111011111111
+00100000001000001110111111000100
+00100000010000000110111100101110
+01100000000000010000010100100000
+00011001011000001001011111111110
+00100000010000000111000000101000
+11011000101000000000010100101010
+00011000000000000000111000000000
+11101000110000001000000000000000
+11000000000001010110111100110110
+11101000110000010000000000000000
+11100000101000010000000000000000
+00011000111000001000111000000001
+00011001011000001001011111111101
+00011010001000001010001111111101
+00100100001000010110111111000100
+00100100001000101110111100001100
+00011001011000001001011111111111
+00100100001000101110111111000100
+00100000010000000101001011010000
+00011000101000001000101000001101
+01101000000000010000010100010001
+10011000000000000010011000000000
+11011010001000000000010100101010
+11101010001000010000000000000000
+00100000001110100110111100101001
+10011000000000000010010000000000
+00100000010000000111000011000110
+00100000001110100110111100100111
+00011000110000001000110111111101
+11101000110000011000000000000000
+11100000101000011000000000000000
+00100000010000000111000001011011
+10011000000000000111001000000000
+00100000010000000111111100000001
+00011010001000001010001000000010
+00100000001000000110111100011100
+00100000010000000110111110000011
+01101000000000010000001001110101
+11000000000001110111000001000110
+00100000010000000110111110011010
+00100000001000000110111110011010
+11101000110000010000000000000000
+00011111111100001111111000000000
+00011111111000001111111111111101
+11011000010000000000000011001000
+10011000010001100111110000000000
+00100100011000010000000000000000
+01011000000000000000000011001000
+00100000011000000000000000000000
+00011000110000001000110000000100
+00011001011000001001011111111011
+00011010001000001010001111111011
+00100100001000101110111111000100
+00100000010000000110111010101010
+00100100001000101110111110111110
+11011001011000000000010100010001
+00100000010000000111000010000010
+00011000111000100111111000000000
+00100000001110100111000001000110
+01100000000000001000010101001110
+00011010010000100111111000000000
+01100000000000010000010101001100
+11011000111000000000000000000000
+11011010001000000000000000000000
+00100000010000000101001011010000
+00011000101000001000101000001010
+00100000010000000110111101101100
+00100100001101000010101010001100
+00011000110000100001011000000000
+00011111111000100010011000000000
+10011010001000001010001000000000
+01101000000000010000010100011001
+00011111111000100010010000000000
+00100000001110100110111101110101
+00011010001000100111111000000000
+10011010010001100010010000000000
+00100000001000101110111101100111
+00100100001000010110111101100111
+01101000000000010000010100100000
+10011010010001100111110000000000
+00100000001000101110111101011110
+00100100001000010110111101011110
+00011010010000100111001000000000
+00100000010000000110111101100001
+01101000000000001000010101001110
+00011000111000001000111000000001
+10011000111001100111110000000000
+00100000001000101110111110000011
+00100000001000000110111110100000
+00011111111000100111001000000000
+00100000010000000110111101100001
+00100000001000000110111110100000
+00011000101000001000101111111101
+00011111001000100000010000000000
+00011010011000100111111000000000
+10011010010001100111111000000000
+10011001011000001000110000000000
+00100000001000000111111100000001
+01101000000000001000010101001110
+00011000111000001000111000000001
+10011000111001100111110000000000
+00100000011000101000000000000000
+00100000001000000110111101000111
+00100000010000000111111111101001
+11011000110000000000010100101010
+00011000111010111111111000000000
+10011000110000001000110000000000
+11101000110010100000000000000000
+00100000010000000111000010110001
+00100100011000101000000000000000
+00100000010000000111000001011011
+00100000001000000111111111100111
+01101000000000010000010100100000
+10011010001001100111110000000000
+00100100001000010110111110001111
+00011010001000100111001000000000
+00011111001000100000010000000000
+00011001011000100000110000000000
+00100000010000000111111100000001
+01101000000000010000010101001100
+10011010001001100111110000000000
+00100000001000101110111110000001
+00100000010000000110111110100000
+00100000001000000110111110010100
+00100000010000000110111110000011
+00100000001000000110111110010100
+11011010001000000000000000000111
+00011000000000000111111000000000
+11100000101000001000000000000000
+00100000010000000110111110110000
+01101000000010010000001001110101
+00011000010000001000010111111011
+00011000010100001111111000000000
+11100000101000010000000000000000
+00011000010000001000010111111101
+00011000010100001111111000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+00011111111000100111001000000000
+00011111001000100000010000000000
+00011001011000100000110000000000
+00100000010000000111111100000001
+00100000010000000110111110100000
+01011000000000000000000000110110
+11100000101000001000000000000000
+01101000000000010000010101001100
+00011111111100001111111000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+01011000000000000000000000110110
+11100000101000001000000000000000
+00011000010000001000010111111101
+00011000010100001111111000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+11011010001000000000000000000111
+01011000000000000000000000000010
+11100000101000001000000000000000
+01101000000000010000010100011001
+10011000010000001000010000000000
+00011000010100001111111000000000
+11100000101000010000000000000000
+00100000010000000110111110110000
+01101000000010010000001001110101
+00011000010000001000010111111011
+00011000010100001111111000000000
+11100000101000010000000000000000
+00011000010000001000010111111011
+00011000010100001111111000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+01101000000000010000001001110011
+10011000101001100111111000000000
+00011111111001100111111000000000
+01100000000000010000001001110101
+00100000010000000101001011010000
+00011010001000100111111000000000
+11100000101000001000000000000000
+01101000000000010000010100011100
+11100000101000010000000000000000
+00100000011000000000000000000000
+00100000011000000000000000000000
+01011000000000000000001000000000
+01100000000000010000010101001010
+00100000001000000110111111000110
+01011000000000000000010000000000
+01100000000000010000010101001010
+00100000001000000110111111000110
+01011000000000000000011000000000
+01100000000000010000010101001010
+00100000001000000110111111000110
+01011000000000000000001100000000
+01100000000000010000010101001010
+00100000010000000101001011010000
+11100000101000001000000000000000
+01101000000000010000010100011100
+11100000101000010000000000000000
+01011000000000000000001000000000
+11100000101000010000000000000000
+01101000000000010000010101001010
+11100000101000010000000000000000
+01110000000000100111010100000111
+00100000011000000000000000000000
+11011010010000000000000000000000
+00011000000000000000010000000000
+11011000101000000000010100010001
+00100000010000000111000000101000
+00100000001000101111000000100110
+00011010010000001010010000000001
+11101000110000001000000000000000
+00011010001000001010001111111111
+00011001011000001001011111111111
+00101111111000011111000000011000
+00100100001000001111000000100110
+00101111111000000000111000000100
+00100100001000001110111111110011
+00011000000000000000010000000001
+11101000110000001000000000000000
+00011010001000001010001111111111
+00011001011000001001011111111111
+11000000100000000110111111100111
+11101000110000001000000000000000
+00011010001000001010001111111111
+00011001011000001001011111111111
+11000000000000000110111111111000
+00100000001000000110111111101010
+00011000110000001000110000000001
+00011010001000001010001111111111
+00011001011000001001011111111111
+00011000110000001000110000000010
+00011010001000001010001111111110
+00011001011000001001011111111110
+00101000010000011111111000000000
+00100000001000001111000000100000
+00011000110000001000110000001100
+00011010001000001010001111110100
+00011001011000001001011111110100
+00100000001000000111000000100000
+00101111111000000000111000000010
+00100100001000001110111111110110
+00100000001000000110111111011110
+00101111111000000000111000000001
+00100100001000001111000000100110
+00011010001000001010001111111110
+00011001011000001001011111111110
+11101000110000010000000000000000
+00011010010001100111110000000100
+00100000001000101110111111111110
+11100000101000010000000000000000
+00101000010000011111111000000000
+00100000001000001111000000100000
+00011000110000100000010000000000
+11101000110000001000000000000000
+11000000100000000111000000011001
+11101000110000001000000000000000
+11000000100000000111000000011001
+11101000110000001000000000000000
+11000000100010000111000000011001
+11101000110000001000000000000000
+11000000100000000111000000011001
+11101000110000001000000000000000
+11000000110000000111000000011001
+11101000110000001000000000000000
+11000000100000000111000000011001
+11101000110000001000000000000000
+11000000100000000111000000011001
+11101000110000001000000000000000
+11000000110000000111000000011001
+11101000110000001000000000000000
+11000000101011111111000000011001
+11101000110000001000000000000000
+11000000110011011111000000011001
+11101000110000001000000000000000
+11000000100110100111000000011001
+11101000110000001000000000000000
+11000000011111011111000000011110
+00011000010000100000110000000000
+00011000110000001000110000001100
+00011000000000000000111000000000
+00011000000000000000010000000000
+00100000001000000111000000011110
+00011001011000001001011111110100
+00011010001000001010001111110100
+00011000000000000000010000000000
+00101010001000011111111000000000
+00100100001000001110111111010101
+00011000000000000111111000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+11011000010000000000000011111111
+00100000011000000000000000000000
+01000111011010100100000000111010
+11101000110000001000000000000000
+00011001011000001001011111111111
+00101111111000011111000000110000
+00100100001000001111000000111110
+00101111111000000000111000000111
+00100000001000001111000000110111
+00101111111000000000111000000110
+00100000001000001111000000111001
+00101111111000000000111000000101
+00100100001000001111000000111110
+11101000110000001000000000000000
+00011111111000100010001000000000
+00011001011000001001011111111111
+00100000001000000111000000111100
+00011000110000001000110000000010
+00011001011000001001011111111110
+11101000110000010000000000000000
+00011111111100001010001000000000
+00011001011000001001011111111110
+00011000000000000111111000000001
+00100000011000000000000000000000
+00011000000000000111111000000000
+00100000011000000000000000000000
+01011000000000000000000000000011
+01100000000000001000010100011011
+00100000001000000111000001001000
+01011000000000000000000000000101
+01100000000000001000010100011011
+00100000001000000111000001001000
+01011000000000000000000000000111
+01100000000000001000010100011011
+00100000010000000101001011010000
+01101000000000001000010100011011
+00011111111000100010010000000000
+11100000101000001000000000000000
+01101000000000010000010100011100
+11100000101000010000000000000000
+01011000000000000000010100000000
+11100000101000010000000000000000
+00101010010000011111111000000101
+00100000001000001111000001010111
+00101010010000011111111000000111
+00100000001000001111000001010111
+01011000000000000000000000000000
+11100000101000101000000000000000
+00100000001000000111000001011001
+01011000001101010000001000000000
+11100000101000101000000000000000
+01110000000000100111010100001010
+00100000011000000000000000000000
+00100000010000000111111010100010
+00100000010000000111111010100101
+00100000010000000111000001100010
+00100000010000000111111010011100
+00100000010000000111111010011111
+00011000010000100111111000000000
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000010111001000000111
+00011111111010010111111000000000
+11000000100000000111000001101100
+00011000000000000111111000000001
+00011000000000000000010000000001
+00100000011000000000000000000000
+00100000010000000111111001110110
+00011111111000001000010000000001
+00100000011000000000000000000000
+00011111001000100111111000000000
+00011111111001100111110000000100
+00100000001000010111000001101001
+11000000000000101111000001110011
+11000000000000110111000001110110
+11000000000000111111000001111010
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000001000010000000010
+00100000011000000000000000000000
+11101000110000010000000000000000
+00011111111100001111111000000000
+00011111111000001000010000000011
+00100000011000000000000000000000
+11101000110000010000000000000000
+00011111111100001111111000000000
+11101000110010010000000000000000
+00011000010100001000010000000000
+00011000010100000000010000000000
+10011000010000001111111000000000
+00011111111000001000010000000101
+00100000011000000000000000000000
+01000111011010101100000000111010
+00011000000000000000111000000000
+11011010010000000000000000000000
+11011000101000000000010100101010
+11101001011000010000000000000000
+00100000011110100000000000000000
+00100000010000000111000010001101
+00011000111000100111111000000000
+11000001000000111000000000000000
+00011001011000001001011000000010
+00100000001000000111000010000110
+10011000000000000010011000000000
+01101000000000010100010101110101
+10011000000000000000110000000000
+00011000111000100111111000000000
+11000001000000111000000000000000
+01111000010101000111110000000000
+11101000110000001000000000000000
+00100000011110100000000000000000
+10011000000000000111001000000000
+11101000110000010000000000000000
+10011010011001100111110000000000
+00100100001000101111000010011010
+01111000001101000111110000000000
+11000010000000000111000010010110
+11101000110010100000000000000000
+00011000110000100010001000000000
+00100100001101000111000010101101
+11011000110000000000010100101010
+11011111001000000000000000000111
+11101000110000100000000000000000
+00100000001110100111000010100110
+10011000010001100111110000000000
+00100000001000101111000010101101
+11000010000000000111000010100000
+00100000011000000000000000000000
+11100000101010100000000000000000
+00011000111000001000111000000001
+00011010001000100000110000000000
+00100000010000000111000001011011
+10011010010000001010010000000000
+10011000110000001000110000000000
+00100000001000000111000010010000
+00011010001000100000110000000000
+00100000010000000111000001100010
+10011000110000001000110000000000
+00100000001000000111000010010000
+01000111011010110100000000111010
+01101000000000010100010101110101
+10011000000000000000110000000000
+11101000110000001000000000000000
+00100000001110100111111111100011
+00011111111000111111111000000000
+10011000110000001000110000000000
+11101000110000100000000000000000
+10011000010001100111110000000000
+00100000011000101000000000000000
+00011000101000100111111000000000
+01100000000000010000101010111011
+01100000000011000000101010100010
+00100000010000000111000001100010
+10011000110000001000110000000000
+00011000110000100111111000000000
+01101000000010010000101010111011
+00011000010000100000101000000000
+01101000000011000000101010100010
+00011111111000100000110000000000
+00100000001000000111000010110100
+01000111011010111100000000111010
+01101000000000010100010101110101
+10011000000000000000110000000000
+11101000110000001000000000000000
+00100000001110100111000011100100
+10011000000000000111001000000000
+11101000110000010000000000000000
+10011010011001100111110000000000
+00100000001000101111000011010100
+11000010000000000111000011001100
+00011000110000001000110000000100
+00100000010000000111000001100010
+10011000110000001000110000000000
+00100000001000000111000011001001
+00011111001000001111001111111111
+00011111001000111111111000000000
+10011000110000001000110000000000
+00011000110000001000110000000100
+00100000010000000111000001100010
+10011000110000001001011000000000
+00011000110000001000110000000001
+11101000110000010000000000000000
+10011010010001100111110000000000
+00100000001000101111111111101111
+00100000010000000111000001011011
+10011000110000001000110000000000
+00011001011000100111111000000000
+10011000110001100111110000000000
+00100000001000101111000011100100
+00100000001000000111000011011010
+00011000000000000000110000000000
+00011000000000000111111000000000
+00100000011000000000000000000000
+01000111011011000100000000111011
+01101000000000010100010101110101
+10011000000000000000110000000000
+11101000110000001000000000000000
+00100000001110100111000100000000
+00011111111000111111111000000000
+10011000110000001000110000000000
+11101000110000100000000000000000
+10011000010001100111110000000000
+00100000001000101111000011110100
+00100000010000000111000001100010
+10011000110000001000110000000000
+00100000001000000111000011101010
+00100000010000000111000001100010
+10011000110000001001011000000000
+00011000110000001000110000000001
+11101000110000010000000000000000
+10011010010001100111110000000000
+00100000011000101000000000000000
+00100000010000000111000001011011
+10011000110000001000110000000000
+00011001011000100111111000000000
+10011000110001100111110000000000
+00100000001000101111000100000000
+00100000001000000111000011110110
+00011000000000000000110000000000
+00100000011000000000000000000000
+11011010010000000000010000000000
+00100000010000000111000011110100
+11011010010000000000001100000000
+00100000010000000111000100001101
+00100100011101000000000000000000
+00011010001001100111110000000011
+00100000001000010111111111101001
+11101000110000001000000000000000
+11000000100001000111111111101001
+11101000110000001000000000000000
+00100000011000000000000000000000
+01000111011011001100000000111011
+00100000010000000111000001100010
+00011111111000100010001000000000
+11101000110000001000000000000000
+00011111111000010111001000000111
+00011111111010010111111000000000
+00011111111001100111110000000011
+00100000001000101111000100101001
+00011111001000100111111000000000
+11000000000000101111000100100000
+11000000000000110111000100100011
+11000000000000111111000100100110
+00011000110000001000110111111111
+00100000010000000111000001100010
+10011000110000001000110000000000
+00011010001000100111111000000000
+10011000010001100010001000000000
+00100000001000101111111111101001
+00100000001000000111000100010000
+00011010001000001010001111111110
+00011000110000001000110000000001
+00100000001000000111000100010000
+00011010001000001010001111111101
+00011000110000001000110000000010
+00100000001000000111000100010000
+00011010001000001010001111111011
+00011000110000001000110000000100
+00100000001000000111000100010000
+00011010001000001010001111111111
+00011111001000100111111000000000
+11000000000000001111000100110010
+11000000000000010111000100110000
+11000000000000100111000100101111
+00100000001000000111111111101001
+00011010001000001010001111110100
+11101000110000010000000000000000
+00011010001000001010001111111110
+11101000110000010000000000000000
+10011010010001100111110000000000
+00100000001000101111111111100111
+00011010001000001010001111111110
+00100000001000101111111111101001
+00100000001000000111000100010000
+00100000010000000101001011010000
+00011111111000100000101000000000
+01011000000000000000000000000110
+11100000101000001000000000000000
+01011000000000000000000001101110
+11100000101000010000000000000000
+01011000000000000000111100000000
+11100000101000010000000000000000
+01011000000110100000010100110101
+11100000101000011000000000000000
+01011000000000000000000100010001
+00011111111100000111111000000000
+11100000101000100000000000000000
+01011000000000000010011000000000
+11100000101000010000000000000000
+01011000000000000000001100110101
+11100000101000010000000000000000
+01011000000000000000000000001001
+11100000101000010000000000000000
+01011000000000000000000000000100
+11100000101000010000000000000000
+01110000000000100111010100010100
+00100000011000000000000000000000
+01000111011011010100000000111011
+01110000000001011110010101010000
+11011000101000000000010111100110
+11011000110000000100010000111010
+00100000010000000111111010111111
+11011000110000000100010111010010
+00100000010000000111111010111101
+11011000110000000000100110111110
+00100000010000000111111010111101
+00100000010000000111001000001010
+11011000110000000000010000101111
+00100000010000000111001000000101
+00100000010000000111000111010000
+11011000101000000000101011110010
+00100000010000000111001000000001
+01011000000011110100001001000000
+00011111111000100010001000000000
+01101000000000100000101011110010
+10011010001001101111110000000000
+00100000010000000111111110000110
+00011000000001110111111000000000
+01100000000000100000100110111010
+00100000011000000000000000000000
+01110000000001011110010101000001
+11011000101000000000010111100110
+00100000010000000111000110110101
+00100000010000000111000110110000
+01101000000000011100010001010100
+11100000101000011000000000000000
+00100000010000000111000101110110
+11011000110000000000010000101111
+00100000010000000111111010111111
+11011000110000000100010000111010
+00100000010000000111111010111111
+00100000010000000111001000001010
+11011000110000000000101100010010
+11011000101000000000101011000010
+00100000010000000111111010111111
+00100000001000000111000111010000
+01101000000000100100010011000111
+11100000101000100000000000000000
+00100000010000000111111011001101
+00100000001000000111111011001010
+01000111011011011100000000111011
+01110000000001011110010101000001
+11011000101000000000010111100110
+00100000010000000111000110110000
+00100000010000000111000110110101
+01101000000000011100010001001101
+11100000101000011000000000000000
+00100000010000000111000101110110
+11011000110000000100010000111010
+00100000010000000111111010111111
+11011000110000000000010000101111
+00100000010000000111111010111111
+00100000010000000111001000001010
+11011000110000000000101100010010
+11011000101000000000101011000010
+00100000010000000111111010111111
+00100000010000000111000111010000
+11011000101000000000101011110010
+00100000001000000111001000000001
+01110000000001011110010100100000
+11011000110000000000100111111110
+11011000101000000000010111100110
+00100000010000000111111010111101
+00100000010000000111001000001010
+11011000110000000000100110011110
+00100000010000000111001000000101
+00100000010000000111000111010000
+11011000101000000000101011000010
+00100000010000000111010010010111
+11011000010000000000000000000001
+00100000010000000111000110011111
+11011000101000000100010000011001
+00100000010000000111001000000001
+11011000010000000000000000000000
+00100000010000000111000110011111
+11011000101000000000101100010010
+00100000001000000111010010010111
+01000111011011100100000000111011
+01110000000001011110010100110101
+01011000000000000000000100000000
+01100000000000010000010111100110
+00100000010000000111000110110000
+00100000010000000111000110110101
+11011000110000000100010000111010
+00100000010000000111111010111111
+11011000110000000000010000101111
+00100000010000000111111010111111
+01011000000000000110110001100101
+11100000101000010000000000000000
+01011000000000000110001001110100
+11100000101000010000000000000000
+11100000101010001000000000000000
+00100000010000000111001000001010
+00100000001000000111000111010000
+01101000000000110100010010100000
+11100000101000110000000000000000
+01101000000000001100010010010101
+11100000101000001000000000000000
+00100000011000000000000000000000
+01101000000000110000010001001111
+11100000101000110000000000000000
+01101000000000001100010010001110
+11100000101000001000000000000000
+00100000011000000000000000000000
+01110000000001011110010101000001
+01101000000000001100011001100100
+01100000000000001000010111100110
+11011000110000000100010111010010
+00100000010000000111111010111101
+11011000110000000000100110111110
+00100000010000000111111010111101
+00100000010000000111001000001010
+11011000110000000000010000101111
+00100000010000000111001000000101
+00100000001000000111000111010000
+01110000000001011110010101000001
+01101000000000001100011001100100
+01100000000000001000010111100110
+11011000110000000000100110111110
+00100000010000000111111010111101
+11011000110000000100010111010010
+00100000010000000111111010111101
+00100000010000000111001000001010
+11011000110000000100010000111010
+00100000010000000111001000000101
+00100000001000000111000111010000
+01000111011011101100000000111011
+00100000010000000111001000011111
+01101000000000001000010111100101
+00011111111000100000010000000000
+00011111111000001111111000001111
+00011111111100011111111000000000
+00011111111000100010010000000000
+00100000001110100111000111100010
+00011000010000010111111000001111
+00100100001110100111000111100101
+11011010011000000000101011010010
+11011111111000000000010111100110
+00011111111000001111111111110000
+10011000010000001010001000000000
+11011000101000000000101100000010
+11011111001000000000000000000100
+00100000010000000111111011011101
+00100000001000000111000111110000
+11011010010000000000000000000001
+11011010001000000000000000000000
+00100000001000000111000111100110
+00011000010000010010001000001111
+11011111111000000000010111100110
+10011000010000001111111000000000
+10011010001001100000110000000000
+11011000101000000000101011110010
+00100000010000000111001001000101
+11011010011000000000101011100010
+11011010001000000000101011110010
+11011000101000000000101100000010
+11011111001000000000000000000100
+00100000010000000111111011011101
+00100000010000000111010010010001
+00100000010000000111010000101000
+11011000110000000000010111100110
+00011010010000001010010111111111
+00011010010000100111111000000000
+00100000001110100111000111111001
+00100000010000000111010010000110
+00100000010000000111010000100010
+00100000001000000111000111110011
+11011000101000000000101011110010
+00100000010000000111010010010111
+11011000110000000000101100000010
+00100000010000000111010010000110
+00100000010000000111010000101000
+11011000110000000000101011110010
+00100000010000000111010010000110
+00100000001000000111010000100010
+00011000101000100010001000000000
+00100000010000000111010010010111
+11011111001000000000000000010000
+00100000001000000111111011100101
+11011000101000000000101011000010
+00100000010000000111111010111111
+11011111001000000000000000010000
+11011010001000000000101011000010
+00100000001000000111111011100101
+01101000000000001000010111100101
+00011111111000100111001000000000
+11011010001000000000010111100110
+00100000001000000111111011100101
+11101010001000001000000000000000
+00011111111000111111111000000000
+00101010011011111111111000000000
+01111001001000001111111000000000
+00101111111011111111111000001000
+01111001001000001010011000000000
+11100010001000001000000000000000
+00011010001000001010001111111111
+11000010000000000111001000001110
+00100000011000000000000000000000
+11011010001000000000101011010010
+00011010001000001010001000001111
+00011000000000000111001000010000
+00011000000000000010011000000000
+00100000001000000111001000001110
+11011010001000000000101011100010
+00100000001000000111001000011001
+11011000110000000000101011000010
+00100000010000000111010010000100
+00011000000000000111000000001000
+00100000010000000111010010010010
+00100000010000000111010010010001
+00100000010000000111010000011111
+11011000101000000000101011010010
+00100000010000000111010010010111
+01000111011011110100000000111011
+01101000000000001000101011010010
+00101111111011111111111000000111
+00100100001000001111001000110000
+00100000010000000111001000011000
+11011010011000000000101011010010
+11011000101000000000101011010010
+00100000010000000111001000111010
+00100000001000000111001000110001
+00100000010000000111001000011000
+11011000110000000000101011010010
+11011000101000000000101011100010
+00100000010000000111111010111111
+01101000000000001000101011100010
+00101111111011111111111000000111
+00100100001000001111001000011101
+00100000010000000111001000011101
+11011010011000000000101011100010
+11011000101000000000101011100010
+11011111001000000000000000000011
+11011000010000000000000000000000
+00100000010000000111001001000001
+00011010011000001010011000000100
+11000010000000000111001000111011
+11011000010000001000011100000000
+00011000010100000000010000000000
+11101010011000100000000000000000
+10011000010000101111111000000000
+11100000101000100000000000000000
+00100000011000000000000000000000
+01000111011011111100000000111011
+11011111001000000000000000010000
+11011111111000000000000000000000
+10011010001001100111110000000000
+00100000001000101111001001010000
+00100000001000010111001001010011
+11101000110010001000000000000000
+11100000101010001000000000000000
+00011111111000001111111000000001
+11000010000000000111001001001000
+00100000011000000000000000000000
+11011000010000000000000010000000
+11100000101010001000000000000000
+00100000001000000111001001001101
+11011000010000000000000000000000
+00100000001000000111001001010001
+00100000010000000111001001101000
+11011000110000000000010110010010
+11011000101000000000010110000010
+00100000001000000111111010111111
+01111000010101000111110000000000
+00100000010000000111001101011111
+11011000110000000000010101100010
+11011000101000000000010110100010
+00011000000000000111001000001111
+00100000010000000111111100000001
+11101000110000001000000000000000
+00011111111000101111111000000110
+11100000101000001000000000000000
+01011000000000000000010110110010
+01100000000000010000010111010110
+01011000000000000000010110100010
+01100000000000010000010111010100
+01111001001000000000000000010010
+00100000001000000111001010101000
+01101000000010001100011010001001
+00011000000000000010010000010000
+00011000010000001010011000000110
+00011010011001100111110000010000
+00100000001000010111001001101110
+00011000000000000010011000010000
+11011000101000000000010110100010
+11011000110000000100011010001010
+00011000010000100111001000000000
+01111000010101000111110000000000
+11101000110000001000000000000000
+11100000101000001000000000000000
+00011010010000001010010111111111
+00100000001000101111001001111100
+11000010000000000111001001110010
+00100000001101000111001001101111
+01111000001101000111110000000000
+00011000000000000111001000000110
+00011010001000100000110000000000
+00100000001000000111001001110010
+11011000110000000000010101100010
+11011000101000000000010110110010
+00100000010000000111111010111111
+01101000000000001000010111000001
+10011010011000101111111000000000
+01100000000000001000010111000001
+01011000000000000000010110110010
+01100000000000010000010111010110
+01011000000000000000010110100010
+01100000000000010000010111010100
+01111001001000000000000000010010
+00100000001000000111001010101000
+01111000010101000111110000000000
+00100000010000000111001101011111
+00100000001000000111001010010010
+11011010001000000000000001010110
+01111000001101000111110000000000
+00100000010000000111001101011111
+00100000010000000111001010010010
+11011000110000000000010110010010
+11011000101000000000000001100010
+00100000001000000111111010111111
+01011000000000000000010101100010
+01100000000000010000010111010110
+01011000000000000100000110111110
+01100000000000010000010111010100
+01111001001111111000000000010010
+00100000010000000111001010101000
+11011010001000000000010110010010
+11011010010000000000010101100010
+11011000101000000000010110100010
+00100000010000000111001101010010
+11011010001000000000010110100010
+11011010010000000000010110110010
+00011010010000100000101000000000
+01111000001101000111110000000000
+00100000010000000111001101010000
+00100000010000000111001101101010
+01011000000000000000010110110010
+01100000000000010000010111010110
+01011000000000000000010110100010
+01100000000000010000010111010100
+01111001001000000000000000010010
+00100000001000000111001010101000
+01110000000001011101100000000000
+01101000000000010000010111010100
+10011000000000000000110000000000
+11011000101000000000010111000010
+00100000010000000111111010111111
+01101000000000010000010111010110
+10011000000000000000110000000000
+11011000101000000000010110010010
+00100000010000000111111010111111
+00100000010000000111001011001111
+01111000010101000111110000000000
+11000101100010010111001010111001
+01101000000000001000010111011000
+11000000100000100111001010111001
+01101000000000010000010111010110
+10011000000000000010010000000000
+00100000010000000111001100000001
+00100000010000000111001100000000
+00100000010000000111001100010011
+01101000000000001000010111011000
+00011111111000001111111000000001
+01100000000000001000010111011000
+00100000010000000111001011001111
+01111000001101000111110000000000
+00100000010000000111001100000000
+00100000010000000111001100100010
+00100000010000000111001100110001
+00100000010000000111001100100010
+00100000010000000111001100110001
+00100000010000000111001100100010
+00100000010000000111001100110001
+00100000010000000111001100100010
+01101000000000001000010111011000
+00011111111000001111111000000001
+01100000000000001000010111011000
+11000000100010000111001010110001
+00100000010000000111001011001111
+01111000010101000111110000000000
+00100000001000000111001100000000
+01101000000000001000010111011000
+11011000110000000000010111000010
+00100000001110100111001011110110
+10011000000000000010010000000000
+00011000000000000111001000010001
+00011000110000100000101000000000
+11101000110000001000000000000000
+00011111111010011000010000000000
+00011111111010110111111000000000
+00011111111010010111111000000000
+10011000010000011111111000000000
+11100000101000001000000000000000
+11000010000000000111001011010101
+01011000000000000000010111000010
+10011010010000001000110000000000
+00011000000000000111001000010000
+11011000101000000000010101110010
+11101000110000001000000000000000
+11100000101000001000000000000000
+00101000110000011111111111010011
+00100100001000001111001011100101
+00011000110000001000110111101111
+11000010000000000111001011100000
+00011000000000000010001000000000
+00011010010000001010011111111111
+00011010011010111010011000000000
+00011010011010111010011000000000
+00100000010000000111010010111001
+01011000000000001000010000000000
+10011010011000001010011000000000
+11011000101000000000010101110010
+00011000000000000111001000010000
+11101010011010001000000000000000
+11101000101000001000000000000000
+10011000010000001111111000000000
+11100000101000001000000000000000
+00011010011000001010011000000001
+11000010000000000111001011101111
+00100000001000000111010010111101
+00011000000000000111001000010000
+00011000000000000000010000000000
+11101000110000001000000000000000
+10011000010000101000010000000000
+11000010000000000111001011111000
+00011000010000100111111000000000
+11100000110000001000000000000000
+11011000110000000000010111000010
+11011000101000000000010101110010
+00100000001000000111111010111111
+11011010010000000000010101110010
+00011000000000000111001000010000
+11011010001000000000010110010010
+00011010001000100000101000000000
+11101010001010001000000000000000
+11101010010000001000000000000000
+10011000010000101110000000000000
+00011111001000010010011000000011
+00100100001101000111001100001010
+00011010011000101010011000000011
+00011010011001100010011000000001
+00100000001000010111001100001101
+10011000010000001110000000000000
+00011110000000100111111000000000
+11100000101000001000000000000000
+00011010001000001010001000000001
+00011010010000001010010000000001
+11000010000000000111001100000100
+00100000011000000000000000000000
+00100000010000000111010010111001
+00011000000000000111001000010000
+11011010001000000000010110010010
+11101010001000001000000000000000
+11011000110000001000010100000000
+00011111001000010010011000000011
+00011010011001100111110000000001
+00100000001000010111001100011100
+11011000110000001000011000000000
+10011000110000001000110000000000
+11101000110000001000000000000000
+11100010001000001000000000000000
+00011010001000001010001000000001
+11000010000000000111001100010110
+00100000001000000111010010111101
+00011000000000000111001000001000
+11011000110000000000010110010010
+00011000110000100000101000000000
+11101000110000001000000000000000
+10011000000000000010001000000000
+11101000110000001000000000000000
+10011000000000000010010000000000
+00011010001000111111111000000000
+10011010010000001111111000000000
+11100000101000001000000000000000
+00011010001000100111111000000000
+10011010010000001111111000000000
+11100000101000001000000000000000
+11000010000000000111001100100101
+00100000011000000000000000000000
+01011000100010101110010000101100
+10011000000000000000010000000000
+00011000000000000111001000000111
+00100000010000000111001101000000
+01011000000011010111010100011011
+10011000000000000000010000000000
+00011000000000000111001000000101
+00100000010000000111001101000000
+01101000000000001000010110100001
+10011000000000000010001000000000
+01101000000000001000010110010101
+01100000000000001000010110100001
+00011010001000100111111000000000
+01100000000000001000010110010101
+00100000011000000000000000000000
+00011000010000010010010000001111
+00011000010000010111111000001111
+11011000101000000000010110010010
+10011000101000001000101000000000
+11101000101000001000000000000000
+10011000000000000010011000000000
+00011010001000100111111000000000
+11100000101000001000000000000000
+00011010011000100010001000000000
+00011000010100011000010000000000
+11000010000000000111001101000001
+01011000000000000000010110010010
+10011010010000001000101000000000
+00011010001000100111111000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+01111000001101000111110000000000
+00100000001000000111001101010011
+01111000010101000111110000000000
+00011000000000000111001000010000
+11101010001010001000000000000000
+11101010010000001000000000000000
+00100000001101000111001101011001
+10011000010000101111111000000000
+00100000001000000111001101011010
+10011000010000001111111000000000
+11100000101000001000000000000000
+00011010001000001010001000000001
+00011010010000001010010000000001
+11000010000000000111001101010100
+00100000011000000000000000000000
+11011000101000000000010110110010
+11101010001000110000000000000000
+11100000101000110000000000000000
+00100000001101000111001101100101
+11101010001000110000000000000000
+00100000001000000111001101100110
+11101000110000110000000000000000
+11100000101000110000000000000000
+11101010001000100000000000000000
+11100000101000100000000000000000
+00100000011000000000000000000000
+11011000110000000100000110111110
+11011000101000000000010110100010
+11011000010000000000000000000000
+01011000100000111001010110100111
+00100000010000000111001110001011
+01011000101100111100000111011111
+00100000010000000111001110001011
+01011000000000001110010111101001
+00100000010000000111001110001100
+00011000010000100010100000000000
+01111000010101000111110000000000
+00100000010000000111001101111001
+00011010100000100000010000000000
+01111000001101000111110000000000
+00100000001000000111001101111001
+00011000000000000111001000001000
+11101000110000001000000000000000
+00101111001000000000001000000001
+00100000001101000111001110000000
+00100000001000001111001110000001
+10011000010000001111111000000000
+00100000001000000111001110000010
+00100000001000001111001101111110
+10011000010000101111111000000000
+11100000101000001000000000000000
+00011000010011001000010000000000
+11000010000000000111001101111010
+00100000011000000000000000000000
+01101000000000110000010110010110
+01100000000000110000000001010110
+11101000110000110000000000000000
+11100000101000110000000000000000
+00100000011000000000000000000000
+00011000010011010000010000000000
+00011000010100000000010000000000
+10011000010000011000010000000000
+00100000011000000000000000000000
+00100000001000000111001110001111
+01000111011100000100000000111100
+00100000010000000111010000101011
+11011000101000000100010000011001
+00100000001000000111010010010111
+11011000101000000100010000111010
+00100000001101001111001110010111
+11011000101000000000010000101111
+00011000110000100010001000000000
+00100000010000000111111010111111
+00100000010000000111010001000000
+11011000110000000100010000101010
+00100000001000000111010010110000
+11011010001000000000010000101111
+00100000001101001111001110011111
+11011010001000000100010000111010
+00011010001000100000101000000000
+00100000010000000110001100001100
+00100000001000000111010001000000
+11011000110000000100010010101010
+00100000010000000111010010000110
+11011000110000000100010000011001
+00100000010000000111010010000111
+00011000000000000110110000111000
+00011000000000000110110000000000
+00100000010000000111010000011101
+11011000101000000000010001111100
+00100000001000000111010010010111
+00011000000000000111111001001001
+00100000001000000111001110101110
+00011000000000000111111000000001
+00011000000000000111000000000000
+00011000010011010101111000000000
+10011101111000011101111000000000
+00011111000000001111000000000001
+00011000010011001101111000000000
+00011101111100010101111000000000
+01101000000000010100010000010001
+00011111111100000111111000000000
+10011101111000011101111000000000
+00011111000000001111000000000001
+11101000110000100000000000000000
+10011000000000000101111000000000
+00011111000000001111000000000001
+11101000110000010000000000000000
+00011010001100001101111000000000
+00011101111100000101111000000000
+10011101111000011101111000000000
+00011111000000001111000000000001
+00100000011000000000000000000000
+00011010011000001000110000000001
+11101000110000001000000000000000
+10011000000000000010001000000000
+00100000010000000111001110101011
+00100000010000000111010000011111
+00011000000000000111000000000000
+11101010011000001000000000000000
+00011111111000010111111000000011
+00011111111100000101111000000000
+01111001001000000101111000001000
+00100000010000000111010010001111
+00100000010000000111010000100010
+00011010001000100111001000000000
+00011010011000001000110000000010
+00100000010000000111010001101110
+00100000010000000111010001111000
+00100000010000000111010000100010
+00011111001000100111111000000000
+00100000001110100111001111010101
+00100000001000000111001111010000
+00011000000000000111000000001100
+00011101111000100111111000000000
+01100000000000100000010000010111
+00100000011000000000000000000000
+00011010001000001010001000000001
+00100000010000000111001110101101
+00011010011000100000110000000000
+00100000010000000111010010000010
+00100000010000000111010000100101
+00100000010000000111010010011110
+00011010011000001010011000010000
+00011010010000001010010111110000
+00100000001000010111001111011001
+00100000011000000000000000000000
+01000111011100001100000000111100
+11011010011000000100001111011100
+01101000000010101100010000000011
+00100000010000000111001111000001
+00011000000000000111000000001000
+10011000000000000101111000000000
+00011000000000000010001000000000
+00100000010000000111001110101101
+00100000010000000111010000100101
+11011010011000000100001111011110
+01101000000000001100001111011101
+00011111111000001010010111111111
+10011010011000001000101000000000
+00011000000000000111000000001100
+00011101111000100111111000000000
+11100000101000100000000000000000
+00100000010000000111001111011001
+01101000000000001100001111011101
+00011111111000001111111000000100
+01100000000000001100001111011101
+01101000000010101100010000000011
+00011000010000001000010000000001
+01100000000010101100010000000011
+00100000011000000000000000000000
+01000111011100010100000000111100
+01101000000000001000001011011010
+00011111111001100111110000010100
+00100000001000010111001111111111
+11011010011000000000001011011011
+00011111111000001010010111111111
+00011111111000001111111111111100
+01100000000000001000001011011010
+10011010011000001000110000000000
+11101000110000100000000000000000
+00011000000000000111000000001000
+10011000000000000101111000000000
+00011000000000000010001000000000
+01101000000010101100010000001000
+00100000010000000111001110101101
+00100000010000000111010000100101
+00011000000000000111000000001100
+00011101111000100111111000000000
+01100000000000100000010000011011
+00100000010000000111001111011001
+11011010011000000000001011011001
+00100000010000000111001111000001
+01101000000010100000010000011011
+10011000010001100111111000000000
+00100100011110100000000000000000
+01101000000000100100010000001101
+10011000010001100111111000000000
+00100000011110100000000000000000
+01100000000010100100010000001101
+01101000000000101100010000001000
+00011111111000001111111000000001
+01100000000000101100010000001000
+00011000000000000111111000000000
+00100000011000000000000000000000
+00100100001110111111010000011101
+00100000011000000000000000000000
+00011000000000000110110000110000
+00011000000000000110110000000000
+00100000001000000111010000011101
+00011000000000000110110000110010
+00011000000000000110110000000010
+00100000001000000111010000011101
+00011000000000000110110000110100
+00011000000000000110110000000100
+00100000001000000111010000011101
+00011000000000000110110000000001
+00011000000000000110110000000000
+00100000011000000000000000000000
+00011000000000000111000000000000
+01101000000000100000010000101111
+10011000000000000101111000000000
+00011111000000001111000000000001
+11101000110000100000000000000000
+10011000000000000101111000000000
+00011111000000001111000000000001
+01101000000000100100010000111010
+10011000000000000101111000000000
+00011111000000001111000000000001
+11101000110000100000000000000000
+10011000000000000101111000000000
+00011111000000001111000000000001
+00100000010000000111010010010010
+00011111000000001111000111111100
+01101000000000100100010011000111
+00011111111000100101111000000000
+00011111000000001111000000000100
+00011000000000000110110000111000
+00011000000000000110110000001000
+00100000001000000111010000011101
+01000111011100011100000000111100
+01101000000000110100010010100000
+01101000000010110000010001001111
+00100000001101001111010001000110
+01101000000000110000010001001111
+01101000000010110100010010100000
+00011000000000000111000000001000
+00011000010000100101111000000000
+00011111000000001111000000000001
+00011000010011110101111000000000
+00011111111100000111111000000000
+10011101111000011101111000000000
+00011111000000001111000000000001
+00011111111011110101111000000000
+00011111000000001111000000000001
+00011000000000000101111000000000
+00011000000000000111111000000000
+01101000000000001100010010001110
+01101000000010001100010010000101
+00100100001101001111010001010110
+01101000000000001100010010010101
+01101000000010001100010010001110
+01100000000000001100010001001010
+01100000000010001100010001001011
+00011000000000000111000000000000
+11011010010000000100010001001010
+00011000000000000111001000000100
+11101010001000100000000000000000
+11101010010010100000000000000000
+10011000010000101101111000000000
+00011111000000001111000000000001
+00011010001000001010001000000100
+00011010010000001010010000000100
+11000010000000000111010001011011
+00100000010000000111010010010010
+00011111000000001111000111111100
+01101000000000100100010011000111
+00011111111000100101111000000000
+00011111000000001111000000000100
+00011000000000000110110000111000
+00011000000000000110110000001100
+00100000010000000111010000011101
+00100000010000000111010010010001
+00011000000000000110110000111010
+00011000000000000110110000001000
+00100000001000000111010000011101
+00101111001000000000011000000000
+00100000011000001000000000000000
+00011000110000100111111000000000
+10011111001000001000101000000000
+00011000000000000111111000000000
+11100000101000001000000000000000
+00011111001000001111001000000001
+00101111001000000000011000000000
+00100000011000001000000000000000
+00100000001000000111010001110011
+00011000000000000111000000000000
+00011111001000100111111000000000
+00100000001110100111010001111101
+11101000110000100000000000000000
+00011111001000001111001111111100
+10011000000000000101111000000000
+00011111000000001111000000000001
+00101111000000000001111000000100
+00100000011000001000000000000000
+00100000001000000111010001111001
+00011000000000000111000000001000
+00100000001000000111010010000111
+00011000000000000111000000000100
+00100000001000000111010010000111
+00011000000000000111000000000000
+00011000000000000111001000000100
+11101000110000100000000000000000
+10011000000000000101111000000000
+00011111000000001111000000000001
+11000010000000000111010010001000
+00100000011000000000000000000000
+11011000110000000000010001111100
+00100000001000000111010010000100
+00011000000000000111001000000100
+00100000001000000111010010010100
+00011000000000000111000000000000
+00011000000000000111001000000100
+00011000000000000101111000000000
+00011111000000001111000000000001
+11000010000000000111010010010011
+00100000011000000000000000000000
+00011000000000000111000000001100
+00011000000000000111001000000100
+00011101111000100111111000000000
+11100000101000100000000000000000
+00011111000000001111000000000001
+11000010000000000111010010011001
+00100000011000000000000000000000
+00011000000000000111000000001100
+00011010011000100000101000000000
+00011010010000001111001000000001
+00011111001001100111110000001111
+00100000001000010111010010100100
+00011000000000000111001000010000
+00011101111000100111111000000000
+00011111001001100111110000000011
+00100000001000010111010010101100
+11100000101000100000000000000000
+00011111001000001111001111111100
+00100000011000101000000000000000
+00011111000000001111000000000001
+00100000001000000111010010100100
+11100000101000001000000000000000
+00011111111011001111111000000000
+11000010000000000111010010101100
+00100000011000000000000000000000
+00011000000000000111000000001100
+00011000000000000111001000000100
+11101000110000100000000000000000
+10011101111001100111110000000000
+00100100011000101000000000000000
+00011111000000001111000000000001
+11000010000000000111010010110010
+00011000000000000111110000000000
+00100000011000000000000000000000
+01101000000100001000000001010000
+01111001001111111111111000000000
+01100000000100001000000001010000
+00100000011000000000000000000000
+01101000000100001000000001010000
+01111001001000000111111000000000
+01100000000100001000000001010000
+00100000011000000000000000000000
+11011000101000000000100010000110
+00111000000000111111111111111111
+00111000000001111111111111111111
+00111000000010111111111111111111
+00111000000011111111101111111111
+11100000101001001000000000000000
+00111000000000111111111111111111
+00111000000001111111111111111111
+00111000000010111111111111111111
+00111000000011111111111111111111
+11100000101001001000000000000000
+00111000000000111111111111111111
+00111000000001111111111111111111
+00111000000010111100111111111111
+00111000000011111111111111111111
+11100000101001001000000000000000
+00111000000000111111111111111111
+00111000000001111111111111111111
+00111000000010111111111111101111
+00111000000011111111111111111111
+11100000101001001000000000000000
+00111000000000111111111111111111
+00111000000001111111111111111111
+00111000000010111111111111111111
+00111000000011111111111111111111
+11100000101001001000000000000000
+00111000000000111111111111111111
+00111000000001100110110001111111
+00111000000010000001010001101011
+00111000000011110111101110110011
+11100000101001001000000000000000
+00111000000000011111111010111000
+00111000000001010000110000010010
+00111000000010101011011100100010
+00111000000011101001111110100110
+11100000101001001000000000000000
+00111000000000001110011100001111
+00111000000001010110011100100000
+00111000000010000101000110011110
+00111000000011011001000010000100
+11100000101001001000000000000000
+00111000000000110001000000010010
+00111000000001110110000010111111
+00111000000010111111000010101111
+00111000000011000000001111010011
+11100000101001001000000000000000
+00111000000000111010000110001000
+00111000000001000011101011010000
+00111000000010111100101111110010
+00111000000011100100001111011001
+11100000101001001000000000000000
+00111000000000101011000000110000
+00111000000001110110101000000011
+00111000000010010001000110001000
+00111000000011011110010100100000
+11100000101001001000000000000000
+00111000000000111010000100011110
+00111000000001001111111001011101
+00111000000010001101110101010111
+00111000000011011010110010010011
+11100000101001001000000000000000
+00111000000000000001000111101101
+00111000000001100001100011000100
+00111000000010001000110110100111
+00111000000011100101011111111111
+11100000101001001000000000000000
+00111000000000110001100100101011
+00111000000001110100011001000001
+00111000000010011011111000001100
+00111000000011110110011010101101
+11100000101001001000000000000000
+00111000000000000001111110000011
+00111000000001010101101000100011
+00111000000010111111100110110000
+00111000000011000011100101001001
+11100000101001001000000000000000
+00111000000000010011101001010001
+00111000000001010101001111111101
+00111000000010110011011100101010
+00111000000011001111000110111011
+11100000101001001000000000000000
+00111000000000111010111010000101
+00111000000001011110111011011001
+00111000000010001001111001100110
+00111000000011000000000110101000
+11100000101001000000000000000000
+00100000011000000000000000000000
+11011000101000000000100100011110
+00111000000000111111111111111111
+00111000000001111111111111111111
+00111000000010111111111111111111
+00111000000011111111111111111111
+11100000101001001000000000000000
+00111000000000111111111111111111
+00111000000001000000000000111111
+00111000000010000000000000000000
+00111000000011000000000000000000
+11100000101001001000000000000000
+00111000000000000000000000000000
+00111000000001000000000000000000
+00111000000010000001000000000000
+00111000000011000000000000000000
+11100000101001001000000000000000
+00111000000000111111111100000000
+00111000000001111111111111111111
+00111000000010111111111111001111
+00111000000011111111111111111111
+11100000101001001000000000000000
+00111000000000111111111111111111
+00111000000001111111111111111111
+00111000000010111111111111111111
+00111000000011000000001111111111
+11100000101001001000000000000000
+00111000000000000000000000000000
+00111000000001000000000000000000
+00111000000010000000000000000000
+00111000000011000000000000000000
+11100000101001001000000000000000
+00111000000000010000000000000000
+00111000000001000000000000000000
+00111000000010111111000000000000
+00111000000011111111111111111111
+11100000101001001000000000000000
+00111000000000101001011011111111
+00111000000001100010011000110000
+00111000000010111001010001011101
+00111000000011111101001010000100
+11100000101001001000000000000000
+00111000000000110011001110100000
+00111000000001000100101101111010
+00111000000010000011011111011000
+00111000000011111100100111011100
+11100000101001001000000000000000
+00111000000000111010010001000000
+00111000000001011011100101011000
+00111000000010111000101111001110
+00111000000011010000100100011111
+11100000101001001000000000000000
+00111000000000101110000100101100
+00111000000001011111010001111100
+00111000000010110101011010110001
+00111000000011101111110101000111
+11100000101001001000000000000000
+00111000000000000110100000110111
+00111000000001101110110110010000
+00111000000010011110110011101100
+00111000000011011010110011000101
+11100000101001001000000000000000
+00111000000000100011001101010111
+00111000000001011000101011110011
+00111000000010001111100111100001
+00111000000011010010100111110000
+11100000101001001000000000000000
+00111000000000101110011111101011
+00111000000001111110011011100011
+00111000000010111110000110100111
+00111000000011010000101110001011
+11100000101001001000000000000000
+00111000000000100100111111100011
+00111000000001000010000011101111
+00111000000010011011010110100110
+00111000000011001101110000101111
+11100000101001001000000000000000
+00111000000000010011100001100000
+00111000000001101011110101101001
+00111000000010000011100100011010
+00111000000011011011001000100010
+11100000101001001000000000000000
+00100000011000000000000000000000
+01101000000000001100011001011010
+00100100001110100111010101111101
+00100000001000000111101001110111
+01000111011100100100000000111100
+01101000000000001100011001011010
+00100000011110100000000000000000
+01101000000000001100010110110001
+11000001100000001000000000000000
+01101000000000001100010010111110
+00100000011110100000000000000000
+01101000000000001100010011000011
+11000001000000011000000000000000
+01101000000000010100011010000010
+11000010100000000111010101111011
+01101000000000001100010011000000
+11000000000000000111101001110111
+00100000011000000000000000000000
+01110000010001001100000000000000
+00100000011000000000000000000000
+01000111011100101100000000111100
+01101000000000001100011001011010
+00100000001110100110000100101011
+00100000010000000110000100100100
+00100000010000000111010110000011
+00100000001000000111011001101101
+01011000000000000000000000000000
+01100000000001000000100110101110
+01100000000000100000100110110110
+01100000000000111100011001011110
+00100000011000000000000000000000
+01110000000010011011000000000001
+00100000001000000111010110001101
+01101000000000001100010110110001
+11000000000000001111011010001010
+00100000001000000010101010001100
+01101000000000001100010110110001
+11000000000000001111010110010000
+00100000001000000111011001101101
+00100000010000000111011010001010
+01101000000000001000100110101111
+00100100011110100000000000000000
+01110000000010011010111000000011
+00100000011000000000000000000000
+00100000010000000111010110110000
+11011010001000000000100111011110
+11011000101000000000100001100110
+00100000010000000111110001111001
+11011010001000000000100110111110
+11011000101000000000100000100110
+00100000010000000111110001111001
+11011010001000000000100000100110
+11011010010000000000100110111110
+11011000101000000000100000100110
+00100000010000000111101111100001
+11011010001000000000100100111110
+11011010010000000000100110111110
+11011000101000000000100001000110
+00100000010000000111101111100001
+11011010001000000000100001000110
+11011010010000000000100000100110
+11011000101000000000100000100110
+00100000010000000111110001111101
+11011010001000000000100000000110
+11011010010000000000100000100110
+11011000101000000000100000000110
+00100000010000000111110001111101
+11011111001000000000000000100000
+11011010001000000000100001100110
+11011010010000000000100000000110
+00100000001000000111111110001000
+11011010001000000000100101111110
+11011000101000000000100000000110
+00100000010000000111110001111001
+11011010001000000000100101011110
+11011000101000000000100000100110
+00100000010000000111110001111001
+11011010001000000000100000100110
+11011010010000000000100101011110
+11011000101000000000100000100110
+00100000010000000111101111100001
+11011010001000000000100100111110
+11011010010000000000100101011110
+11011000101000000000100001000110
+00100000010000000111101111100001
+11011010001000000000100001000110
+11011010010000000000100000100110
+11011000101000000000100000100110
+00100000010000000111110001111101
+11011010001000000000100000000110
+11011010010000000000100000100110
+11011000101000000000100000000110
+00100000001000000111110010010110
+00100000010000000111010111100001
+11011010001000000000100111100110
+11011000101000000000100001100110
+00100000010000000111011110101000
+11011010001000000000100111000110
+11011000101000000000100000100110
+00100000010000000111011110101000
+11011010001000000000100000100110
+11011010010000000000100111000110
+11011000101000000000100000100110
+00100000010000000111011110000110
+11011010001000000000100010011110
+11011010010000000000100111000110
+11011000101000000000100001000110
+00100000010000000111011110000110
+11011010001000000000100001000110
+11011010010000000000100000100110
+11011000101000000000100000100110
+00100000010000000111011101010101
+11011010001000000000100000000110
+11011010010000000000100000100110
+11011000101000000000100000000110
+00100000010000000111011101010101
+11011111001000000000000000011000
+11011010001000000000100001100110
+11011010010000000000100000000110
+00100000001000000111111110001000
+11011010001000000000100011100110
+11011000101000000000100000000110
+00100000010000000111011110101000
+11011010001000000000100011001110
+11011000101000000000100000100110
+00100000010000000111011110101000
+11011010001000000000100000100110
+11011010010000000000100011001110
+11011000101000000000100000100110
+00100000010000000111011110000110
+11011010001000000000100010011110
+11011010010000000000100011001110
+11011000101000000000100001000110
+00100000010000000111011110000110
+11011010001000000000100001000110
+11011010010000000000100000100110
+11011000101000000000100000100110
+00100000010000000111011101010101
+11011010001000000000100000000110
+11011010010000000000100000100110
+11011000101000000000100000000110
+00100000001000000111011101011000
+01101000000000001000100110110010
+11000000100000000111011000010101
+00100000010000000111011000010010
+11011000101000000000101001111110
+01011000000000000000101000101110
+11100000101000010000000000000000
+01011000000000000100011001000010
+11100000101000010000000000000000
+01011000000000000000100111011110
+11100000101000010000000000000000
+00100000001000000111011000001001
+11011000101000000000101001111110
+01011000000000000000101000111110
+11100000101000010000000000000000
+01011000000000000000100111011110
+11100000101000010000000000000000
+01011000000000000100011001000010
+11100000101000010000000000000000
+00100000010000000111100110100000
+01101000000000001000100110101111
+11000000000000100111011000001111
+01110000000010011011000000000001
+01110000000010011010111000000101
+00100000011000000000000000000000
+01110000000010011010111100010100
+00100000010000000111010110001010
+00100000001000000111011011011000
+11011000101000000000101000011110
+00011000000000000000111000001000
+00100000001000000111011010100010
+01110000000010011011000000000001
+00100000011000000000000000000000
+01000111011100110100000000111100
+11011000101000000000011100100111
+01101000000000110100000010100000
+11100000101000110000000000000000
+01101000000000110000000001000000
+11100000101000110000000000000000
+01101000000000011100011001011110
+11100000101000011000000000000000
+00100000010000000111101000001101
+11011010001000000000101001001110
+11011010010000000000101001011110
+00011000000000000000111000000100
+00100000010000000111011010100111
+00100100001000001111011000110001
+00100000010000000111011000101000
+01110000000000000111110101000001
+00100000001000000110001011111000
+01101000000000001000100110101111
+11000000000001001111011000101110
+01110000000010011010111000001010
+01110000000010011011000000000001
+01110000000000000111110000000011
+00100000011000000000000000000000
+01110000000000000111110000000011
+01110000000010011010111100010101
+00100000001000000111011011011000
+01101000000000001000100110101111
+11000000000001001111011000110111
+01110000000010011010111000000000
+01110000000000000111110000000100
+01110000000000000111111000000101
+00100000011000000000000000000000
+01110000000000000111110000000100
+01110000000010011010111100000000
+00100000011000000000000000000000
+01101000000000001000100110110011
+11000000000000001111011000111110
+01110000000010011010111100001010
+00100000001000000111011011011000
+11011000101000000000011100100111
+01101000000000110000000001000000
+11100000101000110000000000000000
+01101000000000110100000010100000
+11100000101000110000000000000000
+01101000000000011100011001011011
+11100000101000011000000000000000
+00100000010000000111101000100100
+01101000000000001000100110101111
+11000000000001010111011001001011
+01110000000010011010111000001011
+01110000000010011011000000000001
+00100000011000000000000000000000
+01110000000010011010111100001011
+01110000000010011011000100000001
+00100000011000000000000000000000
+11011000101000000000101001111110
+01101000000000110000000001000000
+11100000101000110000000000000000
+01101000000000110100000010100000
+11100000101000110000000000000000
+01011000000000000000101000101110
+11100000101000010000000000000000
+01011000000000000000101000111110
+11100000101000010000000000000000
+00100000001000000111011001100010
+01110000000010011010111000001111
+11011000101000000000101001111110
+01101000000000110100000010100000
+11100000101000110000000000000000
+01101000000000110000000001000000
+11100000101000110000000000000000
+01011000000000000000101000111110
+11100000101000010000000000000000
+01011000000000000000101000101110
+11100000101000010000000000000000
+11011000101000000000011100100111
+01101000000000110000101001111110
+11100000101000110000000000000000
+01101000000000110000101010000100
+11100000101000110000000000000000
+00100000010000000111100111010111
+01110000010000011011110100000001
+11011000101000000100000110111110
+11011000110000000000101001001110
+00100000010000000111111010111111
+00100000001000000010000111000100
+01000111011100111100000000111100
+01101000000000001100010110110001
+11000001100000000000000000000000
+01101000000000001000100110110010
+11000001100000000000000000000000
+11011000101000000100011000010010
+00011000000000000000111000001011
+00100000010000000111011010100010
+00011000000010100111111000000000
+00011111111000110111111000000000
+11100000101000010000000000000000
+11011000101000000000011010111110
+11011000110000000100011000010010
+00100000010000000111111010111110
+11011000101000000000010111100110
+11011000110000000000100011001110
+00100000010000000111111010111100
+11011000101000000000011000010110
+00100000010000000111111011000101
+01110000000001100001011000000001
+00100000010000000111101001011101
+01110000000010011011001000000001
+00100000011000000000000000000000
+11011000101000000100011000101010
+11011000110000000000011000101110
+00100000010000000111111010111100
+01110000010001011011000100000001
+01110000000010011011001000000000
+00100000011000000000000000000000
+01000111011101000100000000111101
+01101000000000001000100110111001
+11000001100000000000000000000000
+01101000000000001000100110110010
+11000001100000000000000000000000
+11011000101000000000011010111110
+11011000110000000100011000010010
+00100000010000000111111010111110
+11011000101000000000010111100110
+11011000110000000000100111000110
+00100000010000000111111010111100
+11011000101000000000011000010110
+00100000010000000111111011000101
+01110000000001100001011000000001
+00100000010000000111101001011101
+01110000000010011011001000000010
+00100000011000000000000000000000
+01110000000010011011001100000001
+11011000101000000000101000000110
+11011000110000000000011000101110
+00100000010000000111111010111110
+01110000000010011011100100000001
+01110000000010011011001000000000
+00100000011000000000000000000000
+00011000111000001000111111111111
+00100100011000010000000000000000
+00011000000010100111111000000000
+11100000101000010000000000000000
+00100000001000000111011010100010
+00011000111000001000111111111111
+00100100001000010111011010110011
+11101010001000100000000000000000
+00011111111000100000010000000000
+11101010010000100000000000000000
+10011000010000101111111000000000
+00100100001000101111011010110001
+00011010001000001010001000000100
+00011010010000001010010000000100
+00100000001000000111011010100111
+01111000010000001111110000000000
+00100000011000000000000000000000
+01111000001000001111110000000000
+00100000011000000000000000000000
+01000111011101001100000000111101
+01101000000000001000100110110000
+00100000011110100000000000000000
+00100000010000000110001010111100
+00100100011110100000000000000000
+01110000000010011011000000000000
+01101000000000001000100110101110
+11000000000000011110000111111101
+11000000000000101110001000011010
+11000000000000111110001000100101
+11000000000001011110001000111010
+11000000000000010111010110001000
+11000000000000100111010111110111
+11000000000001001111011000010111
+11000000000001010111011000111010
+11000000000001100111011001011000
+00100000011000000000000000000000
+01000111011101010100000000111101
+01101000000000001000100110110001
+00100000011110100000000000000000
+00100000010000000110001010111100
+00100100011110100000000000000000
+01110000000010011011000100000000
+01101000000000001000100110101111
+11000000000010010110000111100000
+11000000000010011110000111100101
+11000000000000011110000111101001
+11000000000000100111011000000010
+11000000000010100110000111101101
+11000000000000111110000111111011
+11000000000001010111011000111010
+11000000000001011110001000111001
+11000000000001001111011000010111
+11000000000010101110001000110011
+00100000011000000000000000000000
+01110000000010011011000100000001
+00100000011000000000000000000000
+01110000000010011011000100000000
+00100000011000000000000000000000
+01000111011101011100000000111101
+01101000000000001100011001011010
+00100000011110100000000000000000
+01101000000000001000100110110010
+00100000011110100000000000000000
+00011111111000001111111010000000
+01100000000000001000100110110010
+11000011100000111000000000000000
+01101000000000001000010111100011
+00100000001110100111011011100111
+00100000001000000111101001101000
+00100000010000000111100011010011
+01101000000000001000100110110010
+11000000000000001111011010000100
+11000000000000010111011010011011
+00100000011000000000000000000000
+00011111111000010000111000000111
+00011111111010010111111000000000
+10011000110000001000110000000000
+11101000110000001000000000000000
+10101111111011000000000000000000
+00100000011000000000000000000000
+00100000010000000111111010111110
+00100000010000000111111010111110
+00100000001000000111111010111110
+11101000110001000000000000000000
+00100100011110100000000000000000
+11101000110001000000000000000000
+00100100011110100000000000000000
+11101000110001000000000000000000
+00100000011000000000000000000000
+11101010001000100000000000000000
+10011000000000000000010000000000
+11101010010000100000000000000000
+10011000010001100111110000000000
+00100100011000101000000000000000
+00011010001000001010001000000100
+00011010010000001010010000000100
+11000010000000000111011011111011
+00100000011000000000000000000000
+00011000000000000111001000000110
+00011010001000001010001000010100
+00011010010000001010010000010100
+11101010010000100000000000000000
+10011000000000000000010000000000
+11101010001000100000000000000000
+10011000010001100111111000000000
+00100100011000010000000000000000
+00100100011110100000000000000000
+00011010001000001010001111111100
+00011010010000001010010111111100
+11000010000000000111011100000111
+00100000011000000000000000000000
+00011000000000000111001000000110
+00011000000000000010011000000000
+11101010001000100000000000000000
+10011000000000000000010000000000
+11101010010000100000000000000000
+10011000010000001111111000000000
+10011010011000001111111000000000
+11100000101000100000000000000000
+00101111111011111111111000100000
+01111001001000001010011000000000
+00011010001000001010001000000100
+00011010010000001010010000000100
+11000010000000000111011100010011
+00100000011000000000000000000000
+00011000000000000111001000000110
+00011000000000000010011000000000
+11101010010000100000000000000000
+10011000000000000000010000000000
+11101010001000100000000000000000
+10011000010001100111111000000000
+10011010011001100111111000000000
+11100000101000100000000000000000
+00101111111011111111111000100000
+01111001001000001010011000000000
+00011010001000001010001000000100
+00011010010000001010010000000100
+11000010000000000111011100100001
+00100000011000000000000000000000
+00011000000000000111001000000110
+00011010001000001010001000010100
+00011000000000000010011000000000
+11101010001000100000000000000000
+00101111111011111111111000000000
+01111001001000001010011000000001
+00011111111000110111111000000000
+00101010011011111111111000000000
+01111001001000001111111000011111
+11100010001000100000000000000000
+00011010001000001010001111111100
+00011010011000110010011000000000
+11000010000000000111011100110000
+00100000011000000000000000000000
+00011000000000000111001000000110
+00011000000000000010011000000000
+11101010001000100000000000000000
+00101111111011111111111000011111
+01111001001000001010011000000001
+00011111111000111111111000000000
+00101010011011111111111000000000
+01111001001000001111111000000000
+11100010001000100000000000000000
+00011010001000001010001000000100
+00011010011000110010011000000000
+11000010000000000111011100111101
+00100000011000000000000000000000
+00100000010000000111011100111011
+00101010011011111111111000000000
+00100000001000001111011101010001
+11011010010000000000100010000110
+00011010001000100010011000000000
+00011010001000001010001111101000
+00100000010000000111011100000100
+00100100011000010000000000000000
+00011010011000100010001000000000
+00011010001000001010001111101000
+11011010010000000000100010000110
+00011010001000100000101000000000
+00100000001000000111011100011111
+00100000010000000111011100010001
+00011000101000100010001000000000
+00100000001000000111011101001001
+00100000010000000111011100011111
+00101010011011000000000000000000
+00100000011000001000000000000000
+11011010010000000000100010000110
+00011000101000001010001111101000
+00011010001000100000101000000000
+00100000001000000111011100010001
+00011000101000100001011000000000
+00011010001000100110000000000000
+11011010010000000000011100010110
+00011010010000100000101000000000
+00011010001000001000110000011000
+11101000110001000000000000000000
+11100000101001000000000000000000
+11100000101001000000000000000000
+00011000000000000111111000000000
+11100000101001000000000000000000
+00011001011000100000101000000000
+00100000010000000111011101010101
+11011010010000000000011100010110
+00011010010000100000101000000000
+00011000000000000111111000000000
+11100000101001000000000000000000
+00011110000000001000110000100000
+11101000110001000000000000000000
+11100000101001000000000000000000
+11100000101001000000000000000000
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000010000000111011101010101
+11011010010000000000011100010110
+00011010010000100000101000000000
+00011110000000001000110000101000
+11101000110001000000000000000000
+11100000101001000000000000000000
+11100000101001000000000000000000
+11100000101001000000000000000000
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000001000000111011101010101
+00011000000000000111001000000110
+11101000110000100000000000000000
+10011000000000000101111000000000
+00011111000000001111000000000001
+11000010000000000111011110000001
+00100000011000000000000000000000
+00011000101000100001011000000000
+11011000101000000000011011100110
+00100000010000000111111011000101
+11011000101000000000011011100110
+00011010001000100000110000000000
+00011000000000000111000000000000
+00100000010000000111011110000000
+00011010010000100000110000000000
+00100000010000000111011110000000
+00011000000000000010010000000000
+00011000000000000000010000000000
+00011000000000000010011000000110
+11101000101000100000000000000000
+10011000000000000010001000000000
+00011010010000100111000000000000
+00011101111000100111111000000000
+00011010011000100111000000000000
+10011101111011111111111000000000
+10011010001000001111111000000000
+10011000010000001111111000000000
+11100000101000100000000000000000
+00011111111011110000010000000000
+00011010011000001010011000000001
+00101010011000011111111000001100
+00100100001000001111011110010010
+00011000010000100111111000000000
+11100000101000100000000000000000
+00011000101000001000101111101000
+00011010010000001010010000000001
+00101010010000011111111000000110
+00100100001000001111011110010000
+11011010001000000000011011100110
+00011001011000100000101000000000
+00100000001000000111011101011111
+00011010001000100010010000000000
+00100000001000000111011110000110
+00011010001000100110000000000000
+00011110000000100010001000000000
+11101010001000001000000000000000
+00101111111011111111111000000000
+00100000011000001000000000000000
+00100000010000000111011100101101
+11101010010000001000000000000000
+00101111111011000000000000000000
+00100000001000001111011110111010
+11011010001000000000100010000110
+00011010010000100000101000000000
+00100000010000000111011100010001
+11101010010000001000000000000000
+10011010011000001111111000000000
+11100010010000001000000000000000
+00011010010000001010010111101000
+00011010010000001010001000011000
+00011000000000000111001000000111
+00100000010000000111011100101111
+00100000001000000111011110101011
+00011000101000100001011000000000
+11011000101000000000011101000110
+00100000010000000111111011000101
+00011000000000000111111000000000
+01100000000000100000011011111110
+01100000000000100000011101011110
+01110000000001110100011000000001
+11011000101000000000011011100110
+00100000010000000111111011000101
+11011000110000000000100010000110
+11011000101000000000011100010110
+00100000010000000111111010111110
+00011010001000100000110000000000
+11011000101000000000011100101110
+00100000010000000111111010111110
+11011000110000000000011100101110
+00100000010000000111011011110101
+00100000001110100111011111110110
+11011010001000000000011100101110
+11011010010000000000011101000110
+00100000010000000111011110101010
+11011010001000000000011100010110
+11011010010000000000011011100110
+00100000010000000111011110101010
+11011010001000000000011100101110
+11011010010000000000011100010110
+00100000010000000111011100000100
+00100000001000010111011111101000
+11011010001000000000011100010110
+11011010010000000000011100101110
+00011010001000100000101000000000
+00100000010000000111011100011111
+11011010001000000000011101000110
+11011010010000000000011011100110
+00011010010000100000101000000000
+00100000010000000111011100010001
+11101010001000001000000000000000
+10011010011000001010011000000000
+11101010010000001000000000000000
+10011010011000001111111000000000
+11100010010000001000000000000000
+00100000001000000111011111001101
+11011010001000000000011100101110
+11011010010000000000011100010110
+00011010001000100000101000000000
+00100000010000000111011100011111
+11011010001000000000011011100110
+11011010010000000000011101000110
+00011010010000100000101000000000
+00100000010000000111011100010001
+11101010001000001000000000000000
+10011010011000001010011000000000
+11101010010000001000000000000000
+10011010011000001111111000000000
+11100010010000001000000000000000
+00100000001000000111011111001101
+11011000101000000000011101000110
+00100000010000000111111011000101
+01101000000000001000011011111110
+01100000000000001000011101000110
+01100000000000001000011101001110
+11011010001000000000011101000110
+11011010010000000000011011100110
+00011010010000100000101000000000
+00100000010000000111011101010101
+11011010001000000000100010000110
+11011010010000000000011011100110
+00011001011000100000101000000000
+00100000001000000111011101011000
+11011010001000000000011010100110
+11011000101000000000011101011110
+00100000010000000111011110101000
+11011010001000000000011101011110
+11011000101000000000011101110110
+00100000010000000111011110101000
+11011010001000000000100010011110
+11011010010000000000011101110110
+11011000101000000000011101110110
+00100000010000000111011110000110
+11011010001000000000011001110110
+11011000101000000000011101011110
+00100000010000000111011110101000
+11011000110000000000011101011110
+11011000101000000000011100101110
+00100000010000000111111010111110
+11011010001000000000011100101110
+00100000010000000111011101001000
+11011010001000000000011101011110
+11011010010000000000011100101110
+11011000101000000000011101011110
+00100000010000000111011101010101
+11011010001000000000011101011110
+11011010010000000000011101110110
+11011000101000000000011101011110
+00100000010000000111011101010101
+11011000110000000000011001110110
+11011000101000000000011100101110
+00100000010000000111111010111110
+11011010001000000000011010001110
+11011000101000000000011101110110
+00100000010000000111011110101000
+11011010001000000000011100101110
+00100000010000000111011101001000
+11011010001000000000011100101110
+00100000010000000111011101001000
+11011010001000000000011100101110
+11011010010000000000011101110110
+11011000101000000000011100101110
+00100000010000000111011110000110
+11011010001000000000011101110110
+11011000101000000000011101000110
+00100000010000000111011110101000
+11011010001000000000011101000110
+00100000010000000111011101001000
+11011010001000000000011101000110
+00100000010000000111011101001000
+11011010001000000000011101000110
+00100000010000000111011101001000
+11011000110000000000011010001110
+11011000101000000000011101110110
+00100000010000000111111010111110
+11011010001000000000011101110110
+00100000010000000111011101001000
+11011010001000000000011101110110
+11011010010000000000011010100110
+11011000101000000000011010100110
+00100000010000000111011110000110
+11011010001000000000011101011110
+11011000101000000000011101110110
+00100000010000000111011110101000
+11011010001000000000011101110110
+11011010010000000000011100101110
+11011000101000000000011101110110
+00100000010000000111011101011000
+11011010001000000000011101110110
+11011010010000000000011100101110
+11011000101000000000011001110110
+00100000010000000111011101011000
+11011010001000000000011100101110
+11011010010000000000011001110110
+11011000101000000000011101110110
+00100000010000000111011101011000
+11011010001000000000011101110110
+11011010010000000000011101011110
+11011000101000000000011101110110
+00100000010000000111011110000110
+11011010001000000000011101110110
+11011010010000000000011101000110
+11011000101000000000011010001110
+00100000001000000111011101011000
+11011010001000000000011000010110
+11011000101000000000011110001110
+00100000010000000111011110101000
+11011010001000000000011001110110
+11011010010000000000011110001110
+11011000101000000000011101000110
+00100000010000000111011110000110
+11011010001000000000011000010110
+11011010010000000000011110001110
+11011000101000000000011110001110
+00100000010000000111011110000110
+11011010001000000000011010001110
+11011010010000000000011110001110
+11011000101000000000011100101110
+00100000010000000111011110000110
+11011010001000000000011010100110
+11011000101000000000011110001110
+00100000010000000111011110101000
+11011010001000000000010111100110
+11011010010000000000011110001110
+11011000101000000000011101011110
+00100000010000000111011110000110
+11011010001000000000011010100110
+11011010010000000000011110001110
+11011000101000000000011110001110
+00100000010000000111011110000110
+11011010001000000000010111111110
+11011010010000000000011110001110
+11011000101000000000011101110110
+00100000010000000111011110000110
+11011010001000000000011101000110
+11011010010000000000011101011110
+11011000101000000000011110001110
+00100000010000000111011101011000
+11011010001000000000011101000110
+11011010010000000000011101011110
+11011000101000000000011101000110
+00100000010000000111011101010101
+11011010001000000000011100101110
+11011010010000000000011101110110
+11011000101000000000011101011110
+00100000010000000111011101011000
+11011010001000000000011100101110
+11011010010000000000011101110110
+11011000101000000000011100101110
+00100000010000000111011101010101
+11011010001000000000011100101110
+11011010010000000000011110001110
+11011000101000000000011100101110
+00100000010000000111011110000110
+11011010001000000000011010100110
+11011010010000000000011000010110
+11011000101000000000011101110110
+00100000010000000111011110000110
+11011010001000000000011101110110
+11011010010000000000011110001110
+11011000101000000000011010100110
+00100000010000000111011110000110
+11011010001000000000011110001110
+11011000101000000000011110001110
+00100000010000000111011110101000
+11011010001000000000011110001110
+11011010010000000000011101000110
+11011000101000000000011101110110
+00100000010000000111011110000110
+11011010001000000000011110001110
+11011010010000000000011100101110
+11011000101000000000011100101110
+00100000010000000111011110000110
+11011010001000000000011101011110
+11011000101000000000011001110110
+00100000010000000111011110101000
+11011010001000000000011001110110
+11011010010000000000011101110110
+11011000101000000000011001110110
+00100000010000000111011101011000
+11011000110000000000011001110110
+11011000101000000000011110001110
+00100000010000000111111010111110
+11011010001000000000011110001110
+00100000010000000111011101001000
+11011010001000000000011101110110
+11011010010000000000011110001110
+11011000101000000000011101110110
+00100000010000000111011101011000
+11011010001000000000011101110110
+11011010010000000000011101011110
+11011000101000000000011101011110
+00100000010000000111011110000110
+11011010001000000000011101011110
+11011010010000000000011100101110
+11011000101000000000011010001110
+00100000010000000111011101011000
+11011010001000000000011010001110
+11011010010000000000100010000110
+11011000101000000000011010001110
+00011000000000000010011000000000
+01101000000000001000011010001110
+00101111111011111111111000000000
+00100000010000001111011100010001
+00011010011000100110000000000000
+11011010001000000000011010001110
+00100000010000000111011100101101
+01101000000000001000011010100101
+00101110000011111111111000000000
+01111001001000001111111000000111
+01100000000000001000011010100101
+00100000011000000000000000000000
+01101000000000001000010111100011
+00011111111000001111111111111111
+00100100011000010000000000000000
+01100000000000001000010111100011
+01101000000000001000010111100010
+00100000010110100111100000000011
+01101000000000001000010111100011
+11011000110000000000011010111110
+00100000010000000111011011101100
+00100000001000001111100011000000
+01101000000000001000010111100010
+00100100001110100111100011001110
+00100000010000000111100001010100
+00100000001000000111100011000000
+01110000000001011110001000000000
+11011000110000000000010111100110
+11011000101000000000011001110110
+00100000010000000111011011110010
+00100000001000000111100011000000
+11011010001000000000011010100110
+11011000101000000000011101110110
+00100000010000000111011110111110
+11011010001000000000011101110110
+11011000101000000000011100101110
+00100000010000000111011110101000
+11011010001000000000011001110110
+11011010010000000000011100101110
+11011000101000000000011000101110
+00100000010000000111011110000110
+11011010001000000000011101110110
+11011010010000000000011100101110
+11011000101000000000011101011110
+00100000010000000111011110000110
+11011010001000000000011010001110
+11011010010000000000011101011110
+11011000101000000000011001000110
+00100000001000000111011110000110
+11101000110000100000000000000000
+00011000000000000010001000000100
+00011000101000001000101000000011
+11100000101000001000000000000000
+00011111111011001111111000000000
+00011000101000001000101111111110
+00011010001000001010001111111111
+00100100001000101111100011101000
+00011000101000001000101000000101
+11000010000000000111100011100101
+00100000011000000000000000000000
+00011000111010111111111000000000
+10011001011000001000110000000000
+11101000110000100000000000000000
+00100000011000000000000000000000
+00011000000000000110000000010000
+11011001011000000000010111100110
+00011110000000001000111111111001
+00100000010000000111100011110000
+10011000000000000000010000000000
+00011110000000001000111111110000
+00100000010000000111100011110000
+10011000010000001000010000000000
+00011110000000001000111111111110
+00100000010000000111100011110000
+00011111111011100111111000000001
+10011000010000001000010000000000
+00011110000000001000111111110001
+00100000010000000111100011110000
+00011111111011100111111000000000
+10011000010000001000010000000000
+00011110000010111111111000000000
+10011001011000001000101000000000
+11100000101010100000000000000000
+00011110000000001110000000000001
+00101110000000011111111001000000
+00100100001000001111100011110110
+00100000011000000000000000000000
+11011000110000000000100011111110
+00011000000000000111000000000111
+11101000110000100000000000000000
+10011000000000000101111000000000
+00011111000000001111000111111111
+00100000001000010111100100001101
+00100000011000000000000000000000
+01000111011101100100000000111101
+00100000010000000111100011110100
+11011000101000000000011011100110
+00011000000000000111000000000000
+00011101111000100111111000000000
+11100000101000100000000000000000
+00011111000000001111000000000001
+00101111000000011111111000001000
+00100100001000001111100100010110
+00100000010000000111010010111001
+11011001011000001000011100000000
+11011110000000000000010111100110
+00011000000000000111001001000000
+11101110000010100000000000000000
+11101001011000100000000000000000
+00011001011000001001011000000100
+00011110000000001110000000000100
+10011000010000001111111000000000
+00011000000000000111000000000111
+10011101111000001000010000000000
+00011000000000000111000000000100
+00011101111011100111111000000011
+10011000010000001000010000000000
+00011000000000000111000000000101
+00011101111000100111111000000000
+00011000000000000111000000000110
+10011101111000101111111000000000
+00011000000000000111000000000100
+10011101111000010111111000000000
+00011000000000000111000000000110
+10011101111000101111111000000000
+10011000010000001000010000000000
+00011000000000000111000000000111
+00011000010000100101111000000000
+00011000000000000111000000000011
+00011101111000100111111000000000
+10011000010000001101111000000000
+00011000000000000111000000000000
+00011101111000100111111000000000
+00011000000000000111000000000001
+10011101111000010000010000000000
+10011101111000011111111000000000
+00011000000000000111000000000010
+10011101111000010111111000000000
+10011000010000011000010000000000
+00011000000000000111000000000000
+00011101111011100111111000000010
+10011000010000001111111000000000
+00011000000000000111000000000111
+10011101111000001101111000000000
+10011000000011101111110000000000
+11000010000000000111100100011111
+11011000110000000000011011100110
+00011000000000000111000000000000
+11101000110000100000000000000000
+10011101111000001101111000000000
+00011111000000001111000000000001
+00101111000000011111111000001000
+00100100001000001111100101001000
+00100000001000000111010010111101
+11011000101000000000101000111110
+00011000000000000111000000000111
+00011101111000100111111000000000
+11100000101000100000000000000000
+00011111000000001111000111111111
+00100000001000010111100101010000
+00100000011000000000000000000000
+11011000101000000000010111100110
+00011000110000001000110111111100
+00011111001001100010001000010000
+11101000110000100000000000000000
+10011000010000101111111000000000
+11100000101000100000000000000000
+00011000110000001000110111111000
+11000010000000000111100101011000
+00011010001000100111001000000000
+00011000010000100111111000000000
+11100000101000100000000000000000
+11000010000000000111100101011111
+00100000011000000000000000000000
+00100000010000000111100101100111
+00100000010000000111100101001110
+00100000001000000111100110001101
+00100000010000000111100101100111
+00100000001000000111100110001101
+11011000110000000000100111011110
+11011000101000000000010111100110
+00011000000000000111001000000110
+00100000010000000111101001110001
+11011000110000000100011001000010
+00011000000000000111001000000110
+00100000010000000111101001110001
+11011000110000000000101000111110
+00100000010000000111101001110000
+00100000010000000111100100001011
+00100000010000000111100100010010
+11011000110000000000101000101110
+11011000101000000000010111100110
+00100000001000000111100110000100
+11011000110000000100011001000010
+11011000101000000000010111100110
+00011000000000000111001000000110
+00100000010000000111101001110001
+11011000110000000000100111011110
+00011000000000000111001000000110
+00100000010000000111101001110001
+11011000110000000000101000101110
+00100000010000000111101001110000
+00100000010000000111100100001011
+00100000010000000111100100010010
+11011000110000000000101000111110
+11011000101000000000010111100110
+00100000010000000111100110000100
+00100000001000000111100110001101
+00100000010000000111101001110000
+01011000100000000000000000000000
+00011111111011010111111000000000
+11100000101000100000000000000000
+00011000000000000111001000000101
+00100000010000000111111011000110
+01011000000000000000001010000000
+11100000101000100000000000000000
+00100000001000000111100100010010
+01101000000000100000101000111110
+11011010001000000000001111101000
+10011010001001101111110000000000
+00100000010000000111111110000110
+00011000000001110111111000000000
+01100000000000100000100110111010
+00011000000001111111111000000000
+11011010001000000000001111101000
+10011010001001101111110000000000
+00100000010000000111111110000110
+00011000000001110111111000000000
+11011010001000000000001111101000
+10011010001011111111111000000000
+01101000000010100000100110111010
+10011000010000001111111000000000
+01100000000000100000100110111010
+00100000011000000000000000000000
+01110000010001100110010000000000
+00100000001000000111100110100010
+01101000000000001100011001100010
+11000000100000010111100110011110
+01000111011101101100000000111101
+01011000001101100011011000110110
+00011111111011010000010000000000
+00011000010000011000010000110110
+01101000000000010000101001111110
+00011111111000100000110000000000
+00011000000000000111001000000100
+00100000010000000111100101010101
+00100000010000000111100100001011
+00100000010000000111100100010010
+01101000000000010000101010000000
+00011111111000100000110000000000
+11011000101000000000010111100110
+00011000000000000111001000000110
+00100000010000000111101001110001
+01101000000000010000101010000010
+00011111111000100000110000000000
+00011000000000000111001000000110
+00100000010000000111101001110001
+01011000100000000000000000000000
+11100000101000011000000000000000
+01101000000000001100011001100100
+11100000101000001000000000000000
+00011000000000000111111000000000
+11100000101001000000000000000000
+01011000000000000000001110001000
+11100000101000100000000000000000
+00100000010000000111100100010010
+00100000010000000111100101001110
+11011000110000000000101000111110
+11011000101000000000011100000110
+00100000010000000111111010111101
+01011000010111000101110001011100
+00011111111011010000010000000000
+00011000010000011000010001011100
+01101000000000010000101001111110
+00011111111000100000110000000000
+00011000000000000111001000000100
+00100000010000000111100101010101
+00100000010000000111100100001011
+00100000010000000111100100010010
+11011000110000000000011100100110
+11011000101000000000010111100110
+00011000000000000111001000001000
+00100000010000000111101001110001
+01011000100000000000000000000000
+00011111111011010111111000000000
+11100000101000100000000000000000
+00100000010000000111111011000101
+01011000000000000000001100000000
+11100000101000100000000000000000
+00100000010000000111100100010010
+00100000001000000111100101001110
+01011000001101100011011000110110
+00011111111011010000010000000000
+00011000010000011000010000110110
+11011000110000000000101000011110
+00011000000000000111001000000110
+00100000010000000111100101010101
+00100000010000000111100100001011
+00100000010000000111100100010010
+01101000000000010000101010001010
+00011111111000100000110000000000
+11011000101000000000010111100110
+00100000010000000111101001110000
+01101000000000010000101010001100
+00011111111000100000110000000000
+00100000010000000111101001110000
+01011000011000100111010001101100
+00011111111011010111111000000000
+00011111111000011111111001101011
+11100000101000100000000000000000
+11011000110000000000011100110011
+00011000000000000111001000000011
+00100000010000000111101001110001
+01011000100000000000000000000000
+00011111111011010111111000000000
+11100000101000100000000000000000
+00011000000000000111111000000000
+11100000101001000000000000000000
+01011000000000000000001110000000
+11100000101000100000000000000000
+00100000010000000111100100010010
+00100000010000000111100101001110
+11011000110000000000101000111110
+11011000101000000000011100000110
+00100000010000000111111010111101
+01011000010111000101110001011100
+00011111111011010000010000000000
+00011000010000011000010001011100
+11011000110000000000101000011110
+00011000000000000111001000000110
+00100000010000000111100101010101
+00100000010000000111100100001011
+00100000010000000111100100010010
+11011000110000000000011100100110
+11011000101000000000010111100110
+00011000000000000111001000001000
+00100000010000000111101001110001
+01011000100000000000000000000000
+00011111111011010111111000000000
+11100000101000100000000000000000
+00100000010000000111111011000101
+01011000000000000000001100000000
+11100000101000100000000000000000
+00100000010000000111100100010010
+00100000001000000111100101001110
+01101000000000001100011001100010
+11000000100000010111101000011110
+01000111011101110100000000111101
+01011000001101100011011000110110
+00011111111011010000010000000000
+00011000010000011000010000110110
+11011000110000000000101000011110
+00011000000000000111001000000110
+00100000010000000111100101010101
+00100000010000000111100100001011
+00100000010000000111100100010010
+11011000110000000000101000111110
+11011000101000000000010111100110
+00100000010000000111101001110000
+11011000110000000000101000101110
+00100000010000000111101001110000
+00100000001000000111101000110011
+01011000000000000000000000000000
+01100000000000100100011010001010
+00100000001000000111101000001111
+01011000000000000000000000000000
+01100000000000100100011010001010
+00100000001000000111101000100110
+01101000000000001100011001100010
+11000000100000010111101000100001
+01011000001101100011011000110110
+00011111111011010000010000000000
+00011000010000011000010000110110
+11011000110000000000101000011110
+00011000000000000111001000000110
+00100000010000000111100101010101
+00100000010000000111100100001011
+00100000010000000111100100010010
+11011000110000000000101000101110
+11011000101000000000010111100110
+00100000010000000111101001110000
+11011000110000000000101000111110
+00100000010000000111101001110000
+01011000000000000000000000000000
+11100000101001000000000000000000
+11100000101000100000000000000000
+01101000000000100100011010001010
+11100000101000100000000000000000
+00011000101000100000010000000000
+01110000000001110010011010000000
+00011000010000100000101000000000
+11011000110000000000011100110110
+00100000010000000111101001110000
+00100000010000000111100100010010
+11011000101000000000010111100110
+00011000000000000111001000000111
+00100000010000000111111011000110
+11100000101000100000000000000000
+01011000000000000000001111111000
+11100000101000100000000000000000
+00100000010000000111100100010010
+00100000010000000111100101001110
+11011000110000000000101000111110
+11011000101000000000011100000110
+00100000010000000111111010111101
+01011000010111000101110001011100
+00011111111011010000010000000000
+00011000010000011000010001011100
+11011000110000000000101000011110
+00011000000000000111001000000110
+00100000010000000111100101010101
+00100000010000000111100100001011
+00100000010000000111100100010010
+11011000110000000000011100100110
+11011000101000000000010111100110
+00011000000000000111001000001000
+00100000010000000111101001110001
+01011000100000000000000000000000
+00011111111011010111111000000000
+11100000101000100000000000000000
+00100000010000000111111011000101
+01011000000000000000001100000000
+11100000101000100000000000000000
+00100000010000000111100100010010
+00100000001000000111100101001110
+01110000000001011110001111000000
+01101000000000001000010111100011
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000001000010111100011
+11011000110000000000011010111110
+00100000010000000111011011101100
+00100000001000001111101001011110
+11011000110000000000010111100110
+11011000101000000000011001110110
+00100000001000000111011011110010
+00100000010000000111100000000011
+01101000000000001000010111100011
+00011111111000001111111111111111
+01100000000000001000010111100011
+11011000110000000000011010111110
+00100000010000000111011011101100
+00100000011000001000000000000000
+00100000001000000111100001010100
+00011000000000000111001000000100
+00011000110000001000110111111100
+11101000110000100000000000000000
+11100000101000100000000000000000
+00011000110000001000110111111000
+11000010000000000111101001110010
+00100000011000000000000000000000
+01000111011101111100000000111101
+01101000000000001100010010111110
+00100000001110100101101011110000
+00100000010000000101101011101100
+00100000010000000111010110000011
+00100000001000000111101001111101
+01101000000000001100010011000011
+11000001100000000000000000000000
+01101000000000001100010011000000
+11000001100000000000000000000000
+11011000101000000100010110110010
+00011000000000000000111000001111
+00100000010000000111011010100010
+00011000000010100111111000000000
+00011111111000110111111000000000
+11100000101000010000000000000000
+11011000101000000000011101100110
+11011000110000000100010110110010
+00100000010000000111111010111101
+11011000101000000000011001000110
+11011000110000000000100101011110
+00100000010000000111111010110011
+11011000101000000000011010000110
+00100000010000000111111011010000
+01110000000001101000011000000001
+00100000010000000111101011000111
+01110000010001001100000000000011
+00100000011000000000000000000000
+11011000101000000100010111010010
+11011000110000000000011010100110
+00100000010000000111111010110011
+01110000010001001100001100000011
+01110000010001001100000000000000
+00100000011000000000000000000000
+01101000000000001000100110111001
+11000001100000000000000000000000
+01101000000000001100010011000000
+11000001100000000000000000000000
+11011000101000000000011101100110
+11011000110000000100010110110010
+00100000010000000111111010111101
+11011000101000000000011001000110
+11011000110000000000100110111110
+00100000010000000111111010110011
+11011000101000000000011010000110
+00100000010000000111111011010000
+01110000000001101000011000000001
+00100000010000000111101011000111
+01110000010001001100000000000100
+00100000011000000000000000000000
+11011000101000000000100111111110
+11011000110000000000011010100110
+00100000010000000111111010111101
+01110000000010011011100100000011
+01110000010001001100000000000000
+00100000011000000000000000000000
+01101000000000001100010010111110
+00100000011110100000000000000000
+01101000000000001100010011000000
+00100000011110100000000000000000
+00011111111000001111111010000000
+01100000000000001100010011000000
+11000011100000111000000000000000
+01101000000000010000010111100011
+00100000001110100111101010111001
+00100000001000000111101010111111
+01000111011110000100000000111110
+00100000010000000111101011010100
+01101000000000001100010011000000
+11000000000000011111101010010011
+11000000000000100111101010101001
+00100000011000000000000000000000
+00100000010000000111101011100110
+01101000000000010000010111100011
+00011111111000001111111111111111
+01100000000000010000010111100011
+11011000110000000000011101100110
+00100000010000000111011011101100
+00100000011000001000000000000000
+00100000001000000111101100110111
+01000111011110001100000000111110
+01011000000000000000000100000000
+01100000000000010000010111100011
+01101000000000010000010111100011
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000010000010111100011
+11011000110000000000011101100110
+00100000010000000111011011101100
+00100000001000001111101011001010
+11011000110000000000011001000110
+11011000101000000000011100000110
+00100000001000000111111010110010
+11011010001000000000011101000110
+11011000101000000000100001000110
+00100000010000000111101110100011
+11011010001000000000100001000110
+11011000101000000000011111100110
+00100000010000000111110001111001
+11011010001000000000011100000110
+11011010010000000000011111100110
+11011000101000000000011010100110
+00100000010000000111101111100001
+11011010001000000000100001000110
+11011010010000000000011111100110
+11011000101000000000100000100110
+00100000010000000111101111100001
+11011010001000000000011100100110
+11011010010000000000100000100110
+11011000101000000000011011000110
+00100000001000000111101111100001
+11011010001000000000011101000110
+11011000101000000000100000100110
+00100000010000000111110001111001
+11011010001000000000100000100110
+11011000101000000000100001000110
+00100000010000000111110001111001
+11011010001000000000100100111110
+11011010010000000000100001000110
+11011000101000000000100001000110
+00100000010000000111101111100001
+11011010001000000000011100000110
+11011000101000000000100000100110
+00100000010000000111110001111001
+11011000110000000000100000100110
+11011000101000000000011111100110
+00100000010000000111111010111101
+11011010001000000000011111100110
+00100000010000000111110010000000
+11011010001000000000100000100110
+11011010010000000000011111100110
+11011000101000000000100000100110
+00100000010000000111110001111101
+11011010001000000000100000100110
+11011010010000000000100001000110
+11011000101000000000100000100110
+00100000010000000111110001111101
+11011000110000000000011100000110
+11011000101000000000011111100110
+00100000010000000111111010111101
+11011010001000000000011100100110
+11011000101000000000100001000110
+00100000010000000111110001111001
+11011010001000000000011111100110
+00100000010000000111110010000000
+11011010001000000000011111100110
+00100000010000000111110010000000
+11011010001000000000011111100110
+11011010010000000000100001000110
+11011000101000000000011111100110
+00100000010000000111101111100001
+11011010001000000000100001000110
+11011000101000000000100000000110
+00100000010000000111110001111001
+11011010001000000000100000000110
+00100000010000000111110010000000
+11011010001000000000100000000110
+00100000010000000111110010000000
+11011010001000000000100000000110
+00100000010000000111110010000000
+11011000110000000000011100100110
+11011000101000000000100001000110
+00100000010000000111111010111101
+11011010001000000000100001000110
+00100000010000000111110010000000
+11011010001000000000100001000110
+11011010010000000000011101000110
+11011000101000000000011101000110
+00100000010000000111101111100001
+11011010001000000000100000100110
+11011000101000000000100001000110
+00100000010000000111110001111001
+11011010001000000000100001000110
+11011010010000000000011111100110
+11011000101000000000100001000110
+00100000010000000111110010010110
+11011010001000000000100001000110
+11011010010000000000011111100110
+11011000101000000000011100000110
+00100000010000000111110010010110
+11011010001000000000011111100110
+11011010010000000000011100000110
+11011000101000000000100001000110
+00100000010000000111110010010110
+11011010001000000000100001000110
+11011010010000000000100000100110
+11011000101000000000100001000110
+00100000010000000111101111100001
+11011010001000000000100001000110
+11011010010000000000100000000110
+11011000101000000000011100100110
+00100000001000000111110010010110
+11011010001000000000011010000110
+11011000101000000000100001100110
+00100000010000000111110001111001
+11011010001000000000011100000110
+11011010010000000000100001100110
+11011000101000000000100000000110
+00100000010000000111101111100001
+11011010001000000000011010000110
+11011010010000000000100001100110
+11011000101000000000100001100110
+00100000010000000111101111100001
+11011010001000000000011100100110
+11011010010000000000100001100110
+11011000101000000000011111100110
+00100000010000000111101111100001
+11011010001000000000011101000110
+11011000101000000000100001100110
+00100000010000000111110001111001
+11011010001000000000011001000110
+11011010010000000000100001100110
+11011000101000000000100000100110
+00100000010000000111101111100001
+11011010001000000000011101000110
+11011010010000000000100001100110
+11011000101000000000100001100110
+00100000010000000111101111100001
+11011010001000000000011001100110
+11011010010000000000100001100110
+11011000101000000000100001000110
+00100000010000000111101111100001
+11011010010000000000100000000110
+11011010001000000000100000100110
+11011000101000000000100001100110
+00100000010000000111110010010110
+11011010001000000000100000000110
+11011010010000000000100000100110
+11011000101000000000100000000110
+00100000010000000111110001111101
+11011010010000000000011111100110
+11011010001000000000100001000110
+11011000101000000000100000100110
+00100000010000000111110010010110
+11011010001000000000011111100110
+11011010010000000000100001000110
+11011000101000000000011111100110
+00100000010000000111110001111101
+11011010001000000000011111100110
+11011010010000000000100001100110
+11011000101000000000011111100110
+00100000010000000111101111100001
+11011010001000000000011101000110
+11011010010000000000011010000110
+11011000101000000000100001000110
+00100000010000000111101111100001
+11011010001000000000100001000110
+11011010010000000000100001100110
+11011000101000000000011101000110
+00100000010000000111101111100001
+11011010001000000000100001100110
+11011000101000000000100001100110
+00100000010000000111110001111001
+11011010001000000000100001100110
+11011010010000000000100000000110
+11011000101000000000100001000110
+00100000010000000111101111100001
+11011010001000000000100001100110
+11011010010000000000011111100110
+11011000101000000000011111100110
+00100000010000000111101111100001
+11011010001000000000100000100110
+11011000101000000000011100000110
+00100000010000000111110001111001
+11011010001000000000011100000110
+11011010010000000000100001000110
+11011000101000000000011100000110
+00100000010000000111110010010110
+11011000110000000000011100000110
+11011000101000000000100001100110
+00100000010000000111111010111101
+11011010001000000000100001100110
+00100000010000000111110010000000
+11011010001000000000100001000110
+11011010010000000000100001100110
+11011000101000000000100001000110
+00100000010000000111110010010110
+11011010001000000000100001000110
+11011010010000000000100000100110
+11011000101000000000100000100110
+00100000010000000111101111100001
+11011010001000000000100000100110
+11011010010000000000011111100110
+11011000101000000000011100100110
+00100000010000000111110010010110
+11011010001000000000011100100110
+11011010010000000000100100011110
+11011000101000000000011100100110
+00011000000000000010011000000000
+01101000000000001000011100100110
+00101111111011111111111000000000
+00100000010000001111110001111011
+00011010011000100110000000000000
+11011010001000000000011100100110
+00100000010000000111110010101011
+01101000000000001000011101000101
+00101110000011111111111000000000
+01111001001000001111111000000111
+01100000000000001000011101000101
+00100000011000000000000000000000
+00011000101000100001011000000000
+11011000101000000000100000000110
+00100000010000000111111011010000
+00011000000000000111111000000000
+01100000000000100000100000100110
+01110000000010000000011000000001
+11011000101000000000011110000110
+00100000010000000111111011010010
+11011000110000000000100100011110
+11011000101000000000011111000110
+00100000010000000111111010111101
+00011010001000100000110000000000
+11011000101000000000011111100110
+00100000010000000111111010111101
+11011000110000000000011111100110
+00100000010000000111110010110101
+00100000001110100111101111011010
+11011010001000000000011111100110
+11011010010000000000100000000110
+00100000010000000111110010111000
+11011010001000000000011111000110
+11011010010000000000011110000110
+00100000010000000111110010111000
+11011010001000000000011111100110
+11011010010000000000011111000110
+00100000010000000111110010110001
+00100000001000010111101111001100
+11011010001000000000011111000110
+11011010010000000000011111100110
+00011010001000100000101000000000
+00100000010000000111110010101001
+11011010001000000000100000000110
+11011010010000000000011110000110
+00011010010000100000101000000000
+00100000010000000111110001111011
+11101010001000001000000000000000
+10011010011000001010011000000000
+11101010010000001000000000000000
+10011010011000001111111000000000
+11100010010000001000000000000000
+00100000001000000111101110110001
+11011010001000000000011111100110
+11011010010000000000011111000110
+00011010001000100000101000000000
+00100000010000000111110010101001
+11011010001000000000011110000110
+11011010010000000000100000000110
+00011010010000100000101000000000
+00100000010000000111110001111011
+11101010001000001000000000000000
+10011010011000001010011000000000
+11101010010000001000000000000000
+10011010011000001111111000000000
+11100010010000001000000000000000
+00100000001000000111101110110001
+11011010001000000000011110000110
+00011001011000100000101000000000
+00100000010000000111110000001010
+11011010001000000000100100011110
+00011001011000100010010000000000
+00011001011000100000101000000000
+00100000001000000111110010010110
+00011000101000100001011000000000
+00011000000000000111000000000000
+11011000101000000000011110000110
+00100000010000000111111011010010
+11011000101000000000101011010010
+00100000010000000111111011010010
+00011010001000100000110000000000
+01110000000010101101001000000000
+01011000000000000000000000000000
+00100000010000000111110001110011
+00011010010000100000110000000000
+00100000010000000111110001110111
+00011000000000000000111000000000
+11011000101000000000011110000110
+11011000010000000000101011010010
+00011000111000100010010000000000
+00011010010010111111111000000000
+10011000010000001010010000000000
+00011000000000000000010000000000
+00011000000000000010011000000000
+11101000101000100000000000000000
+10011000000000000010001000000000
+11101010010000100000000000000000
+00011010011000100111000000000000
+10011101111011111111111000000000
+10011010001000001111111000000000
+10011000010000001111111000000000
+11100000101000100000000000000000
+00011111111011110000010000000000
+00011010011000001010011000000001
+00101010011000011111111000001000
+00100100001000001111101111110101
+00011000010000100111111000000000
+11100000101000100000000000000000
+00011000101000001000101111100000
+00011000111000001000111000000001
+00101000111000011111111000001000
+00100100001000001111101111101111
+11011010001000000000011110000110
+00011001011000100000101000000000
+00100000001000000111110000001010
+01000111011110010100000000111110
+00011000101000100001011000000000
+00011010001000100110000000000000
+11011010010000000000011111000110
+00011010010000100000101000000000
+00100000010000000111111011001101
+11100000101001000000000000000000
+00011010001000001000110000101100
+00100000010000000111111010111001
+00100000010000000111111010110101
+00011010010000100010001000000000
+00100000010000000111110010000000
+11011010010000000000011111000110
+00011110000000100010001000000000
+00011001011000100000101000000000
+00100000010000000111110001111101
+11011010010000000000011111000110
+00011010010000100000101000000000
+00100000010000000111111011001101
+11100000101001000000000000000000
+00011110000000001000110000110000
+00100000010000000111111010111111
+00100000010000000111111011001101
+00011010010000100010001000000000
+00100000010000000111110010000000
+11011010010000000000011111000110
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000010000000111110001111101
+11011010010000000000011111000110
+00011010010000100000101000000000
+00011110000000001000110000100000
+00100000010000000111111010110101
+00100000010000000111111011001101
+11100000101001000000000000000000
+00011110000000001000110000111000
+00100000010000000111111010111001
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000010000000111110001111101
+11011010010000000000011111000110
+00011010010000100000101000000000
+00011110000000001000110000100100
+00100000010000000111111010110101
+00011110000000001000110000110100
+00100000010000000111111010110101
+00011110000000001000110000110100
+00100000010000000111111010110110
+00011110000000001000110000100000
+00100000010000000111111010110110
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000010000000111110001111101
+11011010010000000000011111000110
+00011010010000100000101000000000
+00011110000000001000110000101100
+00100000010000000111111010110101
+00100000010000000111111011001101
+11100000101001000000000000000000
+00011110000000001000110000100000
+00100000010000000111111010110110
+00011110000000001000110000101000
+00100000010000000111111010110110
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000010000000111110010010110
+11011010010000000000011111000110
+00011010010000100000101000000000
+00011110000000001000110000110000
+00100000010000000111111010111001
+00100000010000000111111010111001
+00011000000000000111111000000000
+11100000101001000000000000000000
+00011110000000001000110000100100
+00100000010000000111111010110110
+00011110000000001000110000101100
+00100000010000000111111010110110
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000010000000111110010010110
+11011010010000000000011111000110
+00011010010000100000101000000000
+00011110000000001000110000110100
+00100000010000000111111010110101
+00011110000000001000110000100000
+00100000010000000111111010110101
+00100000010000000111111011001101
+00011110000000001000110000110000
+00100000010000000111111010110110
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000010000000111110010010110
+11011010010000000000011111000110
+00011010010000100000101000000000
+00011110000000001000110000111000
+00100000010000000111111010111001
+00100000010000000111111011001101
+00011110000000001000110000100100
+00100000010000000111111010110101
+00100000010000000111111011001101
+00011110000000001000110000110100
+00100000010000000111111010110110
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000001000000111110010010110
+00011000000000000111001000100000
+11011000101000000000101011010010
+10011000101000001000101000000000
+00100000001000000111111100000001
+00011000000000000111001000001000
+00100000001000000111011110000001
+00011010001000100010010000000000
+00100000001000000111101111100001
+00011000000000000111001000001000
+00100000001000000111011100010010
+00100000010000000111110001111011
+00011000101000100010001000000000
+00100000001000000111110010000001
+00100000010000000111110010101110
+00101010011011111111111000000000
+00100000001000001111110010001010
+11011010010000000000100100011110
+00011010001000100010011000000000
+00011010001000001010001111100000
+00100000010000000111110010110001
+00100100011000010000000000000000
+00011010011000100010001000000000
+00100000001000000111110010010010
+00100000010000000111110010010010
+00011010001000100010011000000000
+00011010001000001010001111100000
+11011010010000000000100100011110
+00100000010000000111110010110001
+00100100011000010000000000000000
+00011010011000100010001000000000
+00100000001000000111110010010010
+00011010001000001010001111100000
+11011010010000000000100100011110
+00011010001000100000101000000000
+00100000001000000111110010101001
+00100000010000000111110010101001
+00100000001000001111110010100000
+00011000101000001010001111100000
+11011010010000000000100100011110
+00100000010000000111110010110001
+00100100011000010000000000000000
+11011010010000000000100100011110
+00011000101000001010001111100000
+00011010001000100000101000000000
+00100000001000000111110010101001
+00011000101000001010001111100000
+11011010010000000000100100011110
+00011010001000100000101000000000
+00100000010000000111110001111011
+00100000011000001000000000000000
+00011000101000001010001111100000
+11011010010000000000100100011110
+00011010001000100000101000000000
+00100000001000000111110001111011
+00011000000000000111001000001000
+00100000001000000111011100100000
+00011000000000000111001000001000
+00011010001000001010001000011100
+00100000001000000111011100101111
+00011000000000000111001000001000
+00011000000000000010011000000000
+00100000001000000111011100111101
+00011000000000000111001000001000
+00011010001000001010001000011100
+00011010010000001010010000011100
+00100000001000000111011100000111
+11101000110001000000000000000000
+00100100011110100000000000000000
+00100000001000000111011011110101
+00011010001000100110000000000000
+00011110000000100010001000000000
+11101010001000001000000000000000
+00101111111011111111111000000000
+00100000011000001000000000000000
+00100000010000000111110010101011
+11101010010000001000000000000000
+00101111111011000000000000000000
+00100000001000001111110011001000
+11011010001000000000100100011110
+00011010010000100000101000000000
+00100000010000000111110001111011
+11101010010000001000000000000000
+10011010011000001111111000000000
+11100010010000001000000000000000
+00011010010000001010010111100000
+00011010010000001010001000100000
+00011000000000000111001000001001
+00100000010000000111011100101111
+00100000001000000111110010111001
+00100000010000000010110001100101
+00100000011101011000000000000000
+00100000010000000111110011010011
+00100000010000000111110101110101
+00100000001000000111110100001000
+00100000010000000111110100101001
+00100000001000000111110101100100
+01101000000000001100011010000110
+11000001011111111000000000000000
+10011000000000000000010000000000
+00100000010000000110100000001110
+01101000000010001100011010000110
+00100000010000000110100000100101
+00100000000000000000000001100100
+01101000000010001100011010000110
+00100000010000000110011111111011
+00100000001000000111110011011101
+01000111011110011100000000111110
+01101000000000001100011010000110
+11000001011111111000000000000000
+00011111111000100000010000000000
+00100000010000000110100000011101
+00100100001000001111110011101111
+00100000010000000111110011111001
+01101000000000010100011010000010
+01111001001000000111111000001100
+01100000000000010100011010000010
+01101000000000001100011001111001
+11000001000000000000000000000000
+01110000010001100111100100000000
+01101000000000001100011010000101
+01100000000000001100011001111000
+00100000010000000111110100000000
+01110000000010101001100100101100
+00100000001000000111110110000110
+01101000000000010100011010000010
+01111001001111111111111000001100
+01100000000000010100011010000010
+01101000000000001100011001111001
+11000001000000001000000000000000
+01110000010001100111100100000001
+01110000010001100111100000000000
+00100000010000000111110100000010
+01110000000010101001100100101101
+00100000001000000111110110000110
+01101000000000001100011001111000
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000001100011001111000
+00100100011110100000000000000000
+01110000000010101001100100010000
+00100000001000000111110110000110
+11011000111000000000000000000111
+00100000001000000010110000110010
+11011000111000000000000000000111
+00100000001000000010110000110110
+01101000000000010100001000011011
+00011010001011111010010000001011
+10011010010000001010010000000000
+00100000011000000000000000000000
+01101000000000001100001000011010
+00100000011110100000000000000000
+00011111111000100111001000000000
+01101000000000010100001000011011
+00011111111000100010010000000000
+00011010010000001010011000000010
+11101010011010001000000000000000
+00100000010000000110100000001110
+00100000010000000111110100110010
+00011010010000001010010000001011
+11000010000000000111110100001101
+00100000011000000000000000000000
+00100000010000000111110100000100
+01011000000000000000000000000010
+11100010010000001000000000000000
+00100000010000000111110101011110
+00100000001000000111110100110101
+00100000010000000111110100000100
+01011000000000000000000000000011
+11100010010000001000000000000000
+00100000010000000111110101011110
+00100000001000000111110100110010
+00100000010000000111110100000100
+01011000000000000000000000000001
+11100010010000001000000000000000
+01011000000000000000000011111111
+11100000101000001000000000000000
+00100000001000000111110100110010
+00100000010000000111110100000100
+11011111001000000000000000001011
+00011010011000100000110000000000
+00011010010000100000101000000000
+00100000001000000111111011110100
+01101000000000001100001000011010
+00100000011110100000000000000000
+11011010001000000000000000000000
+00100000010000000111110100111000
+00011010001000001010001000000001
+01101000000000001100001000011010
+10011010001001100111110000000000
+00100000011000101000000000000000
+00100000001000000111110100101100
+00011010010000001010011000000010
+11101010011010001000000000000000
+00100000001000000110100000100101
+00011010010000001010011000000010
+11101010011010001000000000000000
+00100000001000000110100000101001
+00011010001000001000111000001011
+00100000010000000111111100010110
+00100100011110100000000000000000
+00100000010000000111110100000100
+11101010010000001000000000000000
+11000000000000010111110100110101
+11000000000000011111110100110010
+11000000000000000111110100110010
+11000000000000101111110101001100
+00100000010000000111110100110101
+00011010010000001010011000000111
+00100000010000000111111001111100
+11101010011000010000000000000000
+00100000010000000111111110011100
+00100000010000000111111010001100
+01011000000000000000000000000101
+11100010010000001000000000000000
+00011010010000001010011000000011
+11101010011000010000000000000000
+00100000001000000111110101011100
+00100000010000000111110100110010
+00011010010000001010011000001001
+00100000010000000111111001111100
+11101010011000010000000000000000
+00100000010000000111111110011100
+00100000010000000111111010001100
+00011010010000001010011000000001
+11101010011000001000000000000000
+11000000011111111111110101011000
+00011111111000001111111111111111
+11100010011000001000000000000000
+00100000001110100111110100011001
+01011000000000000000000000000100
+11100010010000001000000000000000
+00011010010000001010011000000101
+11101010011000010000000000000000
+00011010001000001000111000001011
+00100000001000000111111100001000
+01011000000000000000000000000000
+00100000001000000111110101011100
+01011000000000000001000000000000
+00011111111100000111111000000000
+10011010010000001010010000000000
+00100000011000000000000000000000
+01000111011110100100000000111110
+11011010001000000000000000000000
+01101000000010100100011001111010
+00011100010000100010010000000000
+00011010010000100111111000000000
+10011000010001100111110000000000
+00100100010000010111110101100000
+00011010010000100111111000000000
+00011000010000001000010010100000
+00011000010000001000010010100000
+10011000010001100111110000000000
+00100100001000010111110101111000
+00011010001000001010001000000001
+00011010001000010111111000001111
+00100100001110100111110101101011
+11011010001000000000000000000000
+00100000010000000111110101111111
+00011100010000100111111000000000
+01100000000000100100011001111010
+00100000011000000000000000000000
+01000111011110101100000000111110
+00011010001000100111111000000000
+00100000011110100000000000000000
+00011000010000001000010101100000
+00011000010000001000010101100000
+01111001001111111000010000011100
+01100000000010100100011001111010
+00100000001000000011001101011111
+01110000010001100110011000000001
+01101000000000001100011001100111
+00100100001110100111110110000001
+00100000011000000000000000000000
+01110000010001100110011000000000
+00100000011000000000000000000000
+01000111011110110100000000111110
+00100000010000000111110110000000
+00011010001000100111111000000000
+01100000000000100000101010010001
+11011010001000000100011001101000
+00100000010000000111111110111000
+01101000000000100000101010010001
+00011111111000100010001000000000
+00100000001000000111110110000100
+01000111011110111100000000111110
+00100000010000000111110110000000
+00011010001000100111111000000000
+01100000000000100000101010010001
+11011010001000000100011001110000
+00100000010000000111111110111000
+01101000000000100000101010010001
+00011111111000100010001000000000
+00100000001000000111110110000100
+01011000000000000000000000000000
+01100000000001000100011001110000
+01100000000001000100011001101000
+00100000011000000000000000000000
+01000111011111000100000000111111
+01101000000000001100000111001110
+00100100011110100000000000000000
+11011010001000000100011001110000
+00100000010000000111111111010000
+00100000011110100000000000000000
+01110000000010101001000000000000
+00100000010000000111110110100111
+01101000000000001000101010010000
+00100000001110100111110110011100
+00100000011000000000000000000000
+00100000010000000111110110000000
+11011010001000000100011001110000
+00100000010000000111111111000100
+00011111111000100000010000000000
+00100000010000000111110110000100
+01000111011111001100000000111111
+00011000010000100111111000000000
+00100000011110100000000000000000
+11000000000000001111110111011101
+11000000000000010111110111100010
+11000000000000011111110111101000
+11000000000000111111110111101101
+11000000000001000111110111101110
+11000000000001001111110111101111
+11000000000001011111110111110010
+11000000000001100111110111110011
+11000000000001101111110111110100
+11000000000001110111110111111010
+11000000000001111111110111111111
+11000000000010000111111000000101
+11000000000010011111111000001111
+11000000000010100111111000010001
+11000000000010101111111000010011
+11000000000010110111111000010101
+11000000000010111111111000011000
+11000000000011000111111000011010
+11000000000011001111111000011101
+11000000000011011111111000100101
+11000000000011110111111000101111
+01100000000000001000101010011001
+01000111011111010100000000111111
+00100000010000000110001010111100
+00100100001110100111110111011011
+01101000000000001000101010011001
+11000101100001001111110111010110
+11000000000000100111110111101010
+11000000000000101100110100010111
+11000000000000110100110100100110
+11000000000001010111110111110000
+11000000000010001111111000001010
+11000000000010010111111000001110
+11000000000011101111111000100110
+11000000000011111110011111001100
+11000000000100000110011111010000
+11000000000100001111111000110001
+11000000000100101110011100001011
+00100000011000000000000000000000
+01100000000000001000101010011001
+00100000010000000010001001010010
+00100000001000101111110111011011
+00100000010000000010001001011010
+00100100011000101000000000000000
+01110000000010101001000000000001
+00100000001000000111110110001111
+01101000000000010100011010000010
+01111001001000000111111000000110
+01100000000000010100011010000010
+01110000010000001001001100000011
+00100000011000000000000000000000
+01110000010001101000000000000000
+01110000010000001001001100000000
+01101000000000010100011010000010
+01111001001111111111111000000110
+01100000000000010100011010000010
+00100000011000000000000000000000
+01110000010000011100111000000101
+00100000011000000000000000000000
+01110000000000000111110000000111
+01110000000001001100101000010011
+00100000011000000000000000000000
+00100000011000000000000000000000
+00100000011000000000000000000000
+00100000011000000000000000000000
+01110000000001001101010000000010
+00100000001000000100110100001010
+00100000011000000000000000000000
+00100000011000000000000000000000
+01110000010000110110111000000001
+01110000010001001000010000000000
+01101000000000010100011010000010
+01111001001000000111111000001011
+01100000000000010100011010000010
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001111111111111000001011
+01100000000000010100011010000010
+01110000010000110110111000000000
+00100000011000000000000000000000
+01110000010000110110111000000001
+01110000010001001000010000000001
+01101000000000010100011010000010
+01111001001000000111111000001011
+01100000000000010100011010000010
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001111111111111000001011
+01100000000000010100011010000010
+01110000010000110110111000000000
+00100000011000000000000000000000
+01011000000000000000000000010100
+01100000000000010000010001101101
+01100000000000010100010010111010
+00100000001000000101110010010010
+00100000001000000101101010111111
+11011010001000000000000000000000
+00100000001000000111110100011001
+11011010001000000000000000000000
+00100000001000000111110100010100
+11011010001000000000000000000000
+00100000001000000111110100011110
+01110000010000110110100100000001
+01110000010000011100111000011011
+00100000011000000000000000000000
+01110000010000110110100100000001
+00100000011000000000000000000000
+01110000010000110110100100000000
+01110000010000011100111000000000
+00100000011000000000000000000000
+01101000000000010100000111101011
+00100000010000000111111110011100
+01101000000000001100011010000110
+11000000011111111111111000100011
+00011111111000100000010000000000
+00100000010000000110011111111011
+00100000010000000111110110011000
+00100000001000000010101100011111
+00100000001000000101101100000010
+01110000000000000111110000110100
+01111001001000000000000000000011
+00100100011101001000000000000000
+01110000010001010101101100000000
+01110000000000000111110000010011
+01101000000000001000000101101101
+01111001001111111111111000000010
+01100000000000001000000101101101
+00100000011000000000000000000000
+00011000000000000000111000000011
+00100000001000000111111100000111
+00100000010000000110001011111000
+01110000000000000111110101000001
+00100000001000000101111110011101
+01101000000000001100011010000010
+11000100000001100000000000000000
+11000100000000111000000000000000
+00100000001000000111111000101111
+01101000000000010100001000011000
+00011111111000001000101000000010
+01011000000000000000000000000000
+11100000101000011000000000000000
+00100000011000000000000000000000
+00100000010000000111111111101001
+00100000010000000111111001101001
+00100000011110100000000000000000
+01101000000000010100001000011000
+00011111111000001010010000000010
+11101010010010001000000000000000
+00011000010000001000010000000001
+11100010010010001000000000000000
+11101111111010001000000000000000
+00011000010000100111001000000000
+00011111111000001010010000000100
+11101010010000001000000000000000
+10011000010011111111111000000000
+10011000110000001000101000000000
+00011010001000100000110000000000
+00100000010000000111111100000001
+00100000010000000111111001101101
+00011111111000001111111111111111
+11101010010010001000000000000000
+00011000010000001000010000000001
+10011000010000010000010000000000
+11100010010010001000000000000000
+00100000001000000111111111100111
+00100000010000000111111111101001
+00100000010000000111111001100101
+00100000011110100000000000000000
+01101000000000010100001000011000
+00011111111000001010010000000010
+11101010010010001000000000000000
+00011000010000001000010111111111
+11100010010010001000000000000000
+11101111111010001000000000000000
+00011000010000100111001000000000
+00011111111000001010010000000011
+11101010010000001000000000000000
+10011000010011111111111000000000
+10011000110000001000110000000000
+00011000110000001000110000000001
+00011010001000100000101000000000
+00100000001000000111111001001100
+01101000000000010100001000011000
+00011111111000001000110000000010
+11101000110000001000000000000000
+00100000011000000000000000000000
+00100000010000000111111001101101
+11101000110010001000000000000000
+10011000010001100111111000000000
+00100000011000000000000000000000
+01101000000000010100001000011000
+00011111111000001000110000000001
+11101000110000001000000000000000
+00100000011000000000000000000000
+00011111001001100111110000000000
+00100000011000101000000000000000
+00011111111000110111111000000000
+11000010000000000111111001110011
+00100000011000000000000000000000
+00011000000000000111111000000001
+00011111001001100111110000000000
+00100000011000101000000000000000
+00011111111000111111111000000000
+11000010000000000111111001111001
+00100000011000000000000000000000
+00011000101000100111111000000000
+01100000000000010000101010111011
+01100000000011000000101010100010
+00011001011000100111111000000000
+01100000000000100000101010101010
+00100000010000000111111010000101
+00011000110000100111111000000000
+01100000000000010000101010111001
+00100000011000000000000000000000
+00011010001000100111111000000000
+01100000000000100000101010101110
+00011010010000100111111000000000
+01100000000000100000101010110010
+00011010011000100111111000000000
+01100000000000011000101010110110
+00100000011000000000000000000000
+01101000000011000000101010100010
+01101000000000100000101010101010
+10011000000000000001011000000000
+00100000010000000111111010010101
+01101000000000010000101010111011
+10011000000000000000101000000000
+01101000000000010000101010111001
+10011000000000000000110000000000
+00100000011000000000000000000000
+01101000000000100000101010101110
+10011000000000000010001000000000
+01101000000000100000101010110010
+10011000000000000010010000000000
+01101000000000011000101010110110
+10011000000000000010011000000000
+00100000011000000000000000000000
+01101000000000010000101010111011
+00011111111000100000101000000000
+00100000011000000000000000000000
+01101000000000010000101010111001
+00011111111000100000110000000000
+00100000011000000000000000000000
+00011000101000100111111000000000
+01100000000000010000101010111011
+00100000011000000000000000000000
+00011000110000100111111000000000
+01100000000000010000101010111001
+00100000011000000000000000000000
+00011000101000100111111000000000
+01100000000000010000101010010111
+00011000110000100111111000000000
+01100000000000010000101010010101
+00100000011000000000000000000000
+01101000000000010000101010010111
+00011111111000100000101000000000
+01101000000000010000101010010101
+00011111111000100000110000000000
+00100000011000000000000000000000
+00100000010000000111111010111101
+00100000010000000111111010111101
+00100000001000000111111010111101
+00100000010000000111111010111001
+11101000110000100000000000000000
+11100000101000100000000000000000
+00100000011000000000000000000000
+11101000110001000000000000000000
+11100000101001000000000000000000
+00100000011000000000000000000000
+00100000010000000111111010111111
+00100000010000000111111010111001
+00100000010000000111111010111001
+00100000010000000111111010111001
+00100000001000000111111010111001
+11011111001000000000000000001010
+00100000000000000010111011100000
+11000010000000000111111011000010
+00100000011000000000000000000000
+00011000000000000111001000000011
+00011000000000000111111000000000
+11100000101001000000000000000000
+11000010000000000111111011000111
+00100000011000000000000000000000
+00011000000000000111111000000000
+11100000101001000000000000000000
+00100000011000000000000000000000
+00011000000000000111111000000000
+11100000101000100000000000000000
+00100000011000000000000000000000
+00011000000000000111001000000100
+00100000001000000111111011000110
+00011000000000000111001000001000
+00100000001000000111111011000110
+00011111001000100111111000000000
+00100000011110100000000000000000
+01011000000000000000000000000000
+11100000101000001000000000000000
+11000010000000000111111011010111
+00100000011000000000000000000000
+11011111001000000000000000100000
+11011000101000000000101011000010
+00100000001000000111111011010100
+11101010011000100000000000000000
+11101010001010100000000000000000
+10011000010000101111111000000000
+11100000101000100000000000000000
+00011010001000001010001000000100
+00011010011000001010011000000100
+11000010000000000111111011011101
+00100000011000000000000000000000
+01000111011111011100000000111111
+00011111001000100111111000000000
+00011111111001100111110000000001
+00100000011000010000000000000000
+10011010001000001010010000000000
+00011010010000001010010111111111
+00011111001000110111001000000000
+11101010001010001000000000000000
+11101010010000001000000000000000
+11100010001000001000000000000000
+11100010010010001000000000000000
+00011010010000001010010111111111
+00011010001000001010001000000001
+11000010000000000111111011101100
+00100000011000000000000000000000
+00011111001000100111111000000000
+00100000011110100000000000000000
+00011111001000001111001111111000
+00100000010000010111111010111001
+00100000011000101000000000000000
+00100000001000010111111011110110
+00011111001000001111001000001000
+00011111001000001111001111111100
+00100000010000010111111010110110
+00100000011000101000000000000000
+00100000001000010111111011111011
+00011111001000001111001000000100
+00100000001000000111111100000001
+00011111001000100111111000000000
+00100000011110100000000000000000
+11101000110000001000000000000000
+11100000101000001000000000000000
+11000010000000000111111100000011
+00100000011000000000000000000000
+01011000000000000000000000000000
+00011100010000110000010000000000
+01100000000010100100000010010100
+11011000101000000100000110011101
+10011000000000000000010000000000
+00011000111000111111111000000000
+10011000101000001000101000000000
+11100000101010010000000000000000
+01000111011111100100000000111111
+00100000011000000000000000000000
+11011001011000000000100000000000
+00011001011100000001011000000000
+10011001011000001111111000000000
+00100000011000000000000000000000
+11011000111000000000000000000000
+01000111011111101100000000111111
+01101000000010100100000010010100
+00011100010000110111111000000000
+01100000000000100100000010010100
+10011000010001100111110000000000
+00100100010000010111111100010001
+10011000010001100001011000000000
+00011001011000100000010000000000
+11011000110000000100000110011101
+00011000110000100000101000000000
+11011111001000000000000000010000
+11101000110000010000000000000000
+10011000010001100111111000000000
+00100000001000010111111100100101
+00011000000000000111111000000000
+11100000101000010000000000000000
+11000010000000000111111100100001
+11011000110000000100000110011101
+00011000111000111111111000000000
+10011000110000001000110000000000
+11101000110000010000000000000000
+00100000011000000000000000000000
+10011000010000001000010000000000
+00011000010000100111001000000000
+01011000000000000000111010100110
+10011111001001100111111000000000
+00100000011000010000000000000000
+00011111111001100111111000000000
+00011000010100010000010000000000
+00011000010000001000010000000001
+00011000010100000000010000000000
+10011000010000011000010000000000
+00100000011000000000000000000000
+00100000010000000111111100111001
+00100000001000000111111101000011
+01111000010101000111110000000000
+10011000010001100111111000000000
+00100000001000010111111100111110
+01111000001101000111110000000000
+00011111111001100111111000000000
+11000100000001111000000000000000
+11011000010111110000111010100110
+10011000010000001111111000000000
+01111001001111111111111001000000
+00100000011000000000000000000000
+10011000000000000000110000000000
+00011111111100010111111000000000
+11011000010000000000111010100110
+10011000010011111111111000000000
+10011000110000001111111000000000
+00100000011000000000000000000000
+00011111111011010111111000000000
+00011111111100100111111000000000
+01101000000010011100000101101111
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111000010000000000
+00100000011000000000000000000000
+11011000010000000000111010100110
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111111111000000000
+00011111111100000111111000000000
+00011000000001110000010000000000
+10011000010000011000010000000000
+00100000011000000000000000000000
+11011000010000000000000000000000
+00011000010000100010011000000000
+11101000011000001000000000000000
+00100000010000000111111101100100
+00011010011000100000010000000000
+00100000010000000111111110010101
+11011010010000000000000000001010
+10011010010011111111111000000000
+10011000010000001111111000000000
+00011111111000100000010000000000
+11000010000000000111111101011001
+00100000011000000000000000000000
+11011000010000000000000000111010
+10011000010001100111110000000000
+00100100001000010111111101101101
+11011000010000000000000001100001
+10011000010001100111110000000000
+00100000001000010111111101110000
+11011000010000000000000000110111
+10011000010001100111111000000000
+00100000011000000000000000000000
+11011000010000000000000000110000
+10011000010001100111111000000000
+00100000011000000000000000000000
+11011000010000000000000001010111
+10011000010001100111111000000000
+00100000011000000000000000000000
+00011000010000100110000000000000
+01011000000000000000000111111111
+00011000000000000010010000000000
+00011111111010010010001000000000
+00011010001000110010001000000000
+10011010001000101010001000000000
+00101010001011111111111000000000
+01111001001000001111111000001001
+00011000010000110000010000000000
+00101111111011111111111000000000
+01111001001000001000010000000111
+00011111111000110111111000000000
+00011010010000001010010000000001
+00101010010000000000111000000000
+00100100001000001111111101110110
+11100000101010001000000000000000
+11000010000000000111111101110110
+00011110000000100000010000000000
+00100000011000000000000000000000
+00100000011110101000000000000000
+00100000001000000111111110000110
+11101010001000001000000000000000
+11101010010010001000000000000000
+10011000010001100111110000000000
+00100100011000101000000000000000
+00011010001000001010001000000001
+00011010010000001010010000000001
+11000010000000000111111110001000
+00011000000000000111110000000000
+00100000011000000000000000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+00011000010000100111111000000000
+00100000011000000000000000000000
+10011000010000001111111000000000
+10011000010001100000010000000000
+10011000010001100111111000000000
+00100000011000000000000000000000
+11011111001000000000001000000000
+11011000101000000100000000000000
+00100000001000000111111011000110
+00100000011110100000000000000000
+00011111111000100111101000000000
+01101000000100010000000100001110
+00100100001110100111111110011110
+00100000011000000000000000000000
+01110000100000100000001100000001
+00100000011000000000000000000000
+01100000000100010000001000000101
+01101000000100001000001000000011
+01111001001000000111111000000100
+01100000000100001000001000000011
+00100000011000000000000000000000
+01100000000100010000001000000111
+01101000000100001000001000000011
+01111001001000000111111000000110
+01100000000100001000001000000011
+00100000011000000000000000000000
+01100000000100010000001000000101
+01110000100000100000001100110000
+00100000011000000000000000000000
+01101000000100001000000001000011
+01111001001111111111111000000100
+01100000000100001000000001000011
+00100000011000000000000000000000
+01101000000100010000000100001110
+11011000010000000000001000000000
+10011000010001100111110000000000
+00100000011000000000000000000000
+01000111011111110100000000111111
+11101010001011000000000000000000
+00011000010000010111111011111111
+00100100001110100111111110111110
+00011000010011001111111000000000
+11100010001001000000000000000000
+00011010001000001010001000000111
+11101010001000001000000000000000
+00100100001110100010101010001100
+01101000000000001000101010011001
+11100010001000001000000000000000
+00100000011000000000000000000000
+01000111011111111100000000111111
+11011111001000000000000000001000
+11101010001001000000000000000000
+00100000011110100000000000000000
+11101010001000001000000000000000
+00100100001110100111111111001101
+00011010001000001010001000000001
+11000010000000000111111111001000
+00100000001000000010101010001100
+11011000010000000000000000000000
+11100010001010001000000000000000
+00100000011000000000000000000000
+11101010001001000000000000000000
+00100000011000000000000000000000
+11101010001000001000000000000000
+00100000011000000000000000000000
+11101010001000010000000000000000
+00100000011000000000000000000000
+11011000010000000000000000000000
+01101000000000001000000000000110
+11000010000000000111111111010111
+00011000010000001000010000000001
+11000010000000000111111111010111
+00011000010000100111111000000000
+00100000011000000000000000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+00011000010000100111111000000000
+00100000011000000000000000000000
+00011000000000000111110111111111
+00100000011000000000000000000000
+00011000000000000111110000000001
+00100000011000000000000000000000
+00011000000000000111110000000000
+00100000011000000000000000000000
+01111000001101000111110000000000
+00100000011000000000000000000000
+01111000010101000111110000000000
+00100000011000000000000000000000
+01111000001101100111110000000000
+00100000011000000000000000000000
+01111000010101100111110000000000
+00100000011000000000000000000000
+01011000000000000000000000000001
+00100000011000000000000000000000
+01011000000000000000000000000000
+00100000011000000000000000000000
+00011111001000100111111000000000
+00100000011110100000000000000000
+00011000110000100111111000000000
+10011111001000001111111000000000
+00011111111000001111111111111111
+00011111111000100000110000000000
+11101000110000001000000000000000
+00011000110000001000110111111110
+11100000101000001000000000000000
+11000010000000000111111111111001
+00100000011000000000000000000000
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/eeprom.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/eeprom.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/eeprom.dat	(working copy)
@@ -0,0 +1,5450 @@
+00
+02
+aa
+55
+be
+12
+c2
+84
+00
+13
+c0
+00
+00
+28
+c0
+00
+80
+2b
+c0
+01
+00
+33
+c0
+42
+84
+76
+c0
+44
+84
+47
+c0
+45
+04
+78
+c0
+50
+80
+3c
+c0
+58
+80
+41
+c0
+59
+00
+4b
+c0
+62
+02
+cf
+c0
+64
+83
+30
+c0
+65
+03
+34
+c0
+71
+83
+c5
+c0
+73
+03
+d1
+c0
+75
+03
+da
+c0
+75
+83
+df
+c0
+76
+03
+f0
+20
+20
+2a
+8e
+c0
+1f
+80
+16
+c0
+46
+03
+f4
+20
+20
+2a
+8e
+70
+89
+0f
+36
+70
+89
+0b
+5f
+78
+3b
+7c
+00
+70
+89
+14
+07
+68
+00
+c1
+e0
+20
+7a
+00
+00
+70
+89
+0a
+b8
+20
+60
+00
+00
+1f
+e2
+22
+00
+68
+08
+cc
+70
+58
+00
+4c
+77
+98
+40
+8a
+00
+1a
+22
+7e
+00
+e0
+a0
+80
+00
+18
+40
+84
+01
+18
+41
+04
+07
+60
+08
+cc
+70
+20
+60
+00
+00
+68
+10
+81
+3b
+60
+00
+cb
+26
+20
+20
+20
+02
+d8
+a0
+09
+ae
+df
+20
+00
+0c
+20
+40
+7e
+d4
+20
+40
+6a
+03
+20
+40
+5c
+f6
+24
+55
+ac
+65
+20
+40
+7c
+cd
+20
+20
+20
+0c
+20
+55
+b2
+e3
+20
+40
+75
+6a
+20
+55
+ab
+41
+20
+40
+76
+dc
+68
+00
+c6
+5a
+20
+3a
+20
+12
+68
+00
+c5
+b1
+20
+3a
+00
+36
+20
+20
+20
+12
+58
+00
+0a
+06
+60
+01
+c5
+10
+58
+00
+1d
+87
+60
+01
+45
+13
+20
+20
+2a
+a2
+c6
+13
+00
+00
+68
+00
+c7
+9c
+20
+3a
+7f
+ef
+68
+00
+c7
+c4
+c0
+00
+ff
+ef
+68
+01
+42
+48
+24
+3a
+7f
+ef
+68
+00
+c8
+06
+24
+3a
+7f
+ef
+20
+20
+7f
+f1
+c6
+93
+00
+00
+68
+00
+cc
+f5
+c0
+00
+80
+5c
+20
+40
+00
+e5
+24
+34
+00
+71
+20
+40
+00
+cc
+20
+40
+01
+07
+68
+00
+cb
+c5
+c1
+ff
+80
+00
+20
+40
+04
+1a
+20
+40
+00
+77
+24
+74
+00
+00
+20
+40
+02
+c0
+58
+00
+ec
+54
+20
+40
+7f
+49
+60
+0a
+41
+5b
+20
+20
+2b
+2a
+20
+40
+02
+8c
+24
+74
+00
+00
+20
+40
+00
+68
+20
+20
+00
+4e
+70
+4c
+f5
+00
+70
+4c
+f6
+00
+70
+4b
+f0
+00
+68
+00
+cb
+db
+60
+00
+cb
+da
+20
+60
+00
+00
+68
+00
+cb
+dc
+20
+20
+00
+64
+68
+00
+cb
+f0
+1f
+e0
+fe
+01
+60
+00
+cb
+f0
+c0
+02
+00
+66
+c0
+02
+80
+62
+20
+60
+00
+00
+70
+4c
+f5
+01
+70
+4c
+f6
+00
+20
+60
+00
+00
+68
+00
+cb
+e1
+20
+5a
+00
+80
+20
+40
+00
+77
+24
+74
+00
+00
+68
+01
+cb
+e4
+20
+20
+00
+59
+78
+34
+7c
+00
+20
+40
+2a
+fa
+68
+01
+c1
+6f
+20
+3a
+7f
+e9
+68
+00
+c0
+91
+20
+3a
+7f
+e9
+68
+00
+cc
+f5
+c0
+00
+ff
+e9
+20
+20
+02
+c3
+70
+4b
+e1
+01
+70
+4c
+ea
+00
+20
+40
+00
+94
+60
+00
+cb
+51
+58
+00
+00
+00
+60
+03
+cb
+52
+68
+02
+4b
+ec
+60
+02
+4b
+59
+70
+4b
+b5
+0c
+68
+00
+cb
+b6
+79
+20
+7e
+03
+60
+00
+cb
+b6
+20
+40
+00
+e8
+20
+20
+00
+51
+20
+40
+68
+a8
+68
+02
+40
+a0
+60
+02
+4b
+ec
+20
+60
+00
+00
+70
+4c
+eb
+01
+70
+4c
+ed
+00
+68
+00
+cb
+b6
+1f
+e1
+7e
+07
+60
+00
+cb
+b6
+20
+60
+00
+00
+68
+00
+cb
+b6
+79
+20
+7e
+04
+60
+00
+cb
+b6
+60
+00
+cb
+71
+20
+60
+00
+00
+68
+00
+cb
+b6
+79
+3f
+fe
+04
+60
+00
+cb
+b6
+20
+60
+00
+00
+20
+40
+04
+10
+68
+00
+cc
+ec
+c0
+00
+80
+a6
+c0
+01
+00
+aa
+20
+60
+00
+00
+70
+4c
+ed
+02
+70
+4c
+e9
+00
+70
+4c
+eb
+00
+20
+20
+00
+94
+70
+4c
+ea
+00
+20
+20
+00
+a7
+68
+01
+4b
+bb
+1f
+e0
+fe
+01
+60
+01
+4b
+bb
+c2
+83
+01
+4a
+68
+00
+cc
+ea
+c0
+00
+80
+b5
+70
+4c
+ea
+01
+68
+00
+cc
+ea
+c0
+80
+80
+94
+68
+00
+cc
+e8
+1f
+e0
+fe
+01
+60
+00
+cc
+e8
+c0
+02
+00
+bc
+20
+40
+02
+04
+70
+4b
+fa
+02
+20
+20
+01
+07
+20
+40
+04
+10
+70
+4c
+e8
+00
+20
+20
+00
+94
+70
+4c
+ed
+02
+70
+4c
+eb
+01
+70
+4c
+ea
+00
+20
+20
+00
+94
+68
+00
+cc
+ec
+c0
+01
+80
+c0
+68
+00
+cb
+b6
+2f
+ec
+00
+04
+20
+20
+80
+92
+68
+00
+cc
+ec
+c0
+00
+80
+bf
+c0
+01
+00
+c0
+20
+60
+00
+00
+68
+00
+cb
+c5
+c1
+ff
+80
+00
+20
+40
+00
+d1
+24
+56
+00
+d9
+20
+60
+00
+00
+78
+56
+7c
+00
+68
+00
+cc
+eb
+c1
+80
+80
+00
+68
+00
+cc
+ed
+c1
+80
+00
+00
+70
+4c
+ec
+01
+70
+4b
+fa
+04
+20
+20
+7f
+eb
+68
+00
+cc
+ed
+20
+3a
+00
+e0
+1f
+e0
+ff
+ff
+60
+00
+cc
+ed
+70
+4c
+ec
+02
+70
+4b
+fa
+04
+20
+20
+02
+04
+70
+4c
+ec
+03
+68
+00
+cc
+ea
+24
+3a
+00
+b3
+70
+4b
+fa
+02
+20
+20
+02
+04
+68
+00
+cb
+c5
+c0
+ff
+81
+5e
+20
+40
+00
+eb
+20
+40
+01
+f2
+70
+4b
+ba
+01
+20
+60
+00
+00
+68
+01
+4c
+e6
+20
+40
+7f
+9c
+20
+34
+00
+f1
+68
+03
+cb
+52
+20
+7a
+00
+00
+20
+20
+7f
+e7
+70
+4b
+e1
+00
+1a
+20
+fe
+01
+60
+00
+cb
+b5
+20
+40
+00
+94
+60
+00
+cb
+51
+e8
+a8
+80
+00
+ea
+40
+80
+00
+98
+41
+fe
+00
+e0
+a0
+80
+00
+1a
+40
+a4
+01
+ea
+42
+00
+00
+e0
+a2
+00
+00
+1a
+40
+a4
+04
+d8
+a0
+4b
+57
+df
+20
+00
+02
+ea
+40
+80
+00
+e8
+a8
+80
+00
+98
+40
+fe
+00
+e0
+a0
+80
+00
+1a
+40
+a4
+01
+c2
+00
+01
+00
+20
+60
+00
+00
+70
+4b
+be
+00
+d9
+60
+0d
+00
+34
+73
+02
+00
+20
+40
+01
+23
+68
+00
+cb
+f1
+c1
+00
+80
+00
+24
+2c
+01
+32
+24
+37
+81
+32
+20
+40
+01
+1e
+20
+40
+01
+4e
+20
+40
+04
+0c
+68
+00
+cb
+b4
+1f
+e0
+fe
+01
+60
+00
+cb
+b4
+68
+00
+cb
+c5
+c0
+ff
+81
+21
+20
+40
+00
+c3
+58
+00
+00
+00
+60
+01
+4b
+bb
+60
+00
+cb
+bd
+60
+00
+cc
+e9
+70
+4b
+ba
+00
+20
+60
+00
+00
+df
+20
+00
+04
+d8
+a0
+4b
+51
+20
+20
+7e
+c6
+20
+40
+04
+09
+20
+20
+01
+78
+78
+57
+fc
+00
+20
+40
+02
+6b
+68
+00
+cb
+f1
+c0
+00
+81
+30
+18
+00
+2a
+00
+68
+02
+4b
+dd
+98
+00
+12
+00
+68
+08
+80
+17
+20
+40
+29
+1f
+20
+40
+29
+24
+20
+40
+02
+27
+20
+57
+82
+63
+20
+60
+00
+00
+20
+40
+02
+63
+20
+20
+01
+12
+68
+00
+cb
+bd
+1f
+e0
+fe
+01
+60
+00
+cb
+bd
+68
+00
+cb
+c5
+c0
+ff
+81
+46
+68
+08
+cb
+be
+18
+40
+84
+01
+60
+08
+cb
+be
+68
+00
+cb
+fa
+98
+46
+7e
+00
+24
+3a
+01
+08
+68
+00
+cc
+ec
+c0
+01
+80
+ac
+68
+00
+cc
+e9
+1f
+e0
+fe
+01
+60
+00
+cc
+e9
+c0
+01
+00
+a1
+20
+40
+00
+98
+70
+4b
+fa
+01
+20
+20
+01
+07
+68
+00
+cb
+bd
+c1
+ff
+80
+00
+70
+4b
+bd
+00
+20
+20
+01
+4c
+58
+00
+00
+00
+60
+01
+4b
+bb
+70
+0a
+99
+3a
+20
+20
+7d
+86
+20
+40
+01
+d7
+68
+00
+cb
+b3
+20
+7a
+00
+00
+98
+00
+72
+00
+d8
+c0
+4b
+31
+d8
+a0
+4b
+93
+20
+20
+7f
+01
+79
+20
+00
+26
+20
+40
+01
+59
+70
+4b
+c5
+01
+20
+60
+00
+00
+70
+41
+de
+20
+70
+4b
+b4
+00
+70
+4b
+bf
+4e
+68
+02
+4b
+c1
+20
+20
+01
+e4
+68
+00
+cb
+ba
+c0
+00
+ff
+e7
+68
+00
+cb
+c5
+c0
+00
+81
+65
+c0
+01
+01
+68
+c0
+01
+81
+6b
+20
+20
+2a
+8c
+70
+4b
+c5
+11
+70
+11
+9e
+aa
+20
+20
+01
+6d
+70
+4b
+c5
+12
+70
+11
+9e
+55
+20
+20
+01
+6d
+70
+4b
+c5
+13
+70
+11
+9e
+22
+68
+00
+cb
+b6
+1f
+e1
+7e
+07
+60
+00
+91
+9f
+68
+02
+4b
+ec
+60
+02
+11
+a0
+70
+11
+a4
+00
+da
+20
+11
+9e
+d8
+40
+00
+07
+20
+40
+01
+d2
+20
+40
+00
+e8
+20
+20
+7f
+e7
+68
+00
+cb
+c5
+c1
+7f
+80
+00
+c0
+08
+81
+7e
+c0
+09
+01
+80
+c0
+09
+81
+82
+20
+60
+00
+00
+70
+4b
+c5
+02
+20
+20
+01
+18
+70
+4b
+c5
+03
+20
+20
+01
+18
+70
+4b
+c5
+ff
+70
+0a
+99
+39
+20
+40
+7d
+86
+68
+02
+4b
+95
+20
+40
+01
+e4
+20
+20
+01
+18
+79
+3f
+80
+26
+20
+40
+01
+c8
+68
+00
+cb
+c5
+c1
+ff
+80
+00
+20
+40
+01
+9d
+58
+00
+00
+00
+60
+01
+4b
+e2
+20
+40
+2a
+fa
+20
+00
+07
+d0
+68
+00
+cb
+e2
+c0
+7f
+81
+4c
+20
+40
+01
+23
+24
+2c
+01
+a6
+24
+37
+81
+a6
+79
+20
+00
+26
+58
+00
+00
+00
+60
+01
+4b
+e2
+70
+0a
+99
+3c
+20
+40
+7d
+86
+20
+40
+01
+1e
+20
+20
+00
+6e
+70
+11
+9e
+ff
+68
+00
+cb
+b6
+60
+00
+91
+9f
+68
+02
+4b
+ec
+60
+02
+11
+a0
+d8
+40
+00
+06
+da
+20
+11
+9e
+20
+40
+01
+d2
+20
+20
+01
+f2
+68
+01
+4b
+e2
+1f
+e0
+fe
+01
+60
+01
+4b
+e2
+20
+40
+02
+04
+20
+20
+01
+8f
+79
+3f
+80
+26
+20
+40
+01
+c6
+20
+40
+01
+9d
+70
+4b
+e2
+00
+20
+40
+2a
+fa
+20
+00
+07
+d0
+68
+00
+cb
+e2
+c0
+7f
+81
+4c
+20
+40
+01
+23
+24
+2c
+01
+bc
+24
+37
+81
+bc
+20
+40
+01
+4e
+68
+02
+4b
+dd
+68
+0a
+4b
+c1
+98
+46
+7c
+00
+20
+22
+81
+55
+20
+20
+01
+96
+68
+00
+cb
+e2
+1f
+e0
+fe
+01
+60
+00
+cb
+e2
+68
+00
+cc
+f3
+1f
+e0
+fe
+01
+1f
+e1
+7e
+01
+60
+00
+cc
+f3
+c0
+00
+01
+ca
+c0
+00
+81
+cc
+20
+60
+00
+00
+70
+41
+de
+20
+20
+40
+03
+2b
+20
+40
+01
+e5
+20
+20
+02
+04
+20
+40
+01
+c6
+20
+20
+01
+af
+20
+40
+01
+59
+20
+20
+01
+af
+79
+3f
+80
+26
+20
+40
+53
+ce
+d8
+e0
+00
+03
+20
+20
+43
+d2
+60
+08
+cb
+b5
+18
+42
+72
+00
+d8
+a0
+4b
+51
+1a
+22
+0c
+00
+20
+20
+7f
+01
+68
+00
+cb
+30
+1f
+e9
+7e
+00
+60
+00
+cb
+b3
+1f
+e0
+fe
+01
+d8
+c0
+4b
+30
+98
+c0
+8c
+00
+e8
+c1
+80
+00
+60
+01
+cb
+f2
+68
+00
+cb
+30
+1f
+e3
+7e
+00
+1f
+e1
+7e
+03
+60
+00
+cb
+f8
+20
+60
+00
+00
+60
+02
+4b
+dd
+da
+20
+00
+00
+df
+20
+00
+04
+d8
+c0
+4b
+dd
+e8
+c0
+80
+00
+9a
+20
+a2
+00
+c2
+00
+01
+e8
+1a
+22
+7e
+00
+60
+01
+4c
+66
+68
+00
+cc
+66
+68
+08
+cc
+67
+98
+40
+fe
+00
+60
+00
+cc
+68
+20
+60
+00
+00
+68
+00
+cb
+b5
+1f
+e0
+fe
+02
+60
+00
+cb
+b7
+68
+00
+cb
+b6
+60
+00
+cb
+71
+68
+00
+cb
+b5
+1f
+e9
+fe
+00
+68
+08
+cb
+b4
+18
+41
+04
+03
+18
+43
+84
+00
+98
+41
+fe
+00
+68
+08
+cb
+f1
+98
+40
+fe
+00
+e0
+a0
+80
+00
+68
+00
+cb
+b5
+98
+00
+72
+00
+d8
+c0
+4b
+51
+20
+20
+7f
+01
+68
+08
+cb
+c0
+20
+40
+02
+08
+60
+08
+cb
+c0
+20
+60
+00
+00
+20
+40
+02
+0c
+18
+40
+84
+01
+18
+41
+04
+03
+20
+60
+00
+00
+68
+00
+cb
+dd
+1f
+e1
+7e
+03
+1f
+ef
+a2
+04
+58
+00
+4b
+c6
+9a
+20
+fe
+00
+98
+40
+8c
+00
+e8
+c0
+80
+00
+60
+00
+cb
+bf
+20
+60
+00
+00
+78
+44
+fc
+00
+78
+43
+fc
+00
+58
+55
+55
+55
+98
+00
+1e
+00
+68
+00
+cb
+bf
+1f
+ed
+84
+00
+79
+20
+04
+01
+18
+43
+1c
+00
+20
+60
+00
+00
+20
+40
+53
+c4
+68
+02
+4b
+dd
+98
+00
+12
+00
+20
+40
+29
+18
+68
+08
+cb
+bf
+20
+40
+29
+1f
+58
+00
+05
+00
+20
+40
+2a
+8f
+20
+40
+29
+24
+20
+40
+02
+15
+78
+57
+fc
+00
+78
+26
+fc
+00
+78
+30
+fc
+00
+78
+50
+7c
+00
+78
+28
+7c
+00
+68
+01
+4b
+b8
+98
+00
+36
+00
+37
+c1
+84
+00
+24
+2c
+02
+67
+78
+46
+fc
+00
+78
+25
+fc
+00
+78
+23
+fc
+00
+78
+24
+fc
+00
+20
+40
+02
+60
+60
+00
+cc
+69
+68
+08
+cc
+68
+98
+46
+7c
+00
+24
+22
+82
+63
+20
+40
+02
+60
+60
+00
+cb
+2f
+68
+00
+cb
+fb
+1f
+e6
+7c
+02
+20
+22
+82
+43
+68
+00
+cb
+2f
+68
+08
+cb
+b6
+a8
+40
+0e
+00
+24
+20
+82
+63
+20
+40
+02
+60
+e0
+a0
+80
+00
+1f
+e9
+7e
+00
+1f
+e1
+72
+1f
+20
+22
+82
+4b
+20
+40
+02
+60
+e0
+a0
+80
+00
+c2
+00
+02
+48
+18
+a2
+22
+00
+20
+40
+02
+60
+60
+00
+cc
+f0
+1a
+22
+0a
+00
+09
+80
+00
+18
+78
+28
+7c
+00
+db
+60
+06
+64
+1f
+ef
+7e
+00
+1f
+f1
+7e
+00
+e0
+a1
+80
+00
+78
+45
+fc
+00
+20
+23
+02
+63
+78
+37
+fc
+00
+68
+00
+80
+17
+1f
+e0
+a2
+00
+20
+40
+29
+81
+78
+46
+fc
+00
+20
+40
+29
+18
+68
+00
+cc
+f0
+20
+40
+00
+1e
+20
+60
+00
+00
+09
+80
+00
+08
+19
+89
+7e
+00
+20
+60
+00
+00
+78
+4d
+fc
+00
+78
+45
+fc
+00
+20
+40
+26
+4d
+20
+60
+00
+00
+20
+20
+02
+63
+20
+40
+29
+18
+68
+08
+cb
+bf
+20
+20
+29
+33
+20
+40
+53
+c4
+68
+02
+4b
+dd
+98
+00
+12
+00
+20
+40
+02
+15
+20
+40
+02
+68
+79
+20
+2a
+00
+78
+2e
+fc
+00
+78
+30
+7c
+00
+78
+50
+fc
+00
+19
+31
+7e
+00
+1f
+ec
+fe
+00
+1f
+f1
+fe
+00
+08
+00
+86
+28
+78
+4e
+fc
+00
+78
+2d
+fc
+00
+78
+23
+fc
+00
+78
+24
+fc
+00
+68
+00
+cc
+68
+08
+00
+86
+08
+68
+00
+cb
+b7
+98
+00
+72
+00
+d8
+c0
+4b
+71
+e8
+c0
+80
+00
+08
+00
+86
+08
+c2
+00
+02
+81
+78
+24
+7c
+00
+08
+00
+86
+18
+78
+44
+7c
+00
+37
+d3
+82
+00
+20
+00
+00
+64
+78
+4e
+fc
+00
+78
+4d
+fc
+00
+20
+60
+00
+00
+20
+40
+7f
+e9
+68
+0a
+4b
+d6
+1c
+42
+7e
+00
+98
+46
+7c
+00
+24
+41
+2d
+18
+1f
+e2
+24
+00
+68
+02
+4b
+d6
+68
+08
+cb
+da
+98
+40
+84
+00
+1a
+42
+7e
+00
+98
+46
+7c
+00
+24
+61
+00
+00
+79
+3f
+fe
+1c
+60
+02
+4b
+d6
+20
+20
+7f
+e7
+20
+40
+29
+bb
+20
+7a
+00
+00
+68
+08
+cc
+6f
+da
+20
+0d
+9e
+20
+40
+02
+a2
+60
+08
+cc
+6f
+20
+60
+00
+00
+1a
+22
+7e
+00
+98
+40
+8a
+00
+68
+00
+80
+18
+e0
+a0
+80
+00
+18
+40
+84
+01
+18
+41
+04
+07
+20
+60
+00
+00
+d8
+40
+00
+00
+df
+20
+00
+08
+1a
+22
+0c
+00
+e8
+c0
+80
+00
+98
+40
+84
+00
+c2
+00
+02
+ac
+18
+49
+7e
+00
+1f
+e2
+04
+00
+c6
+93
+00
+00
+1f
+e6
+fc
+0a
+20
+40
+7f
+86
+18
+07
+fe
+00
+1f
+f2
+7e
+00
+18
+07
+04
+00
+98
+41
+84
+00
+20
+60
+00
+00
+20
+60
+00
+00
+c6
+13
+00
+00
+20
+40
+02
+c3
+68
+00
+c0
+40
+c3
+00
+02
+c0
+68
+00
+80
+a0
+24
+7a
+00
+00
+58
+00
+00
+00
+60
+04
+00
+a1
+20
+60
+00
+00
+20
+40
+02
+cc
+20
+40
+02
+c0
+20
+40
+3e
+bf
+68
+12
+00
+70
+68
+1a
+00
+78
+98
+41
+84
+00
+18
+44
+04
+00
+60
+1a
+00
+7c
+20
+60
+00
+00
+68
+00
+ca
+fe
+20
+7a
+00
+00
+20
+20
+03
+c6
+20
+40
+34
+16
+20
+35
+82
+d7
+68
+00
+c1
+de
+60
+00
+cc
+6c
+20
+40
+04
+09
+68
+00
+c6
+85
+60
+00
+c6
+da
+20
+40
+43
+ca
+20
+40
+02
+dc
+20
+20
+74
+b9
+68
+00
+cc
+6c
+60
+00
+c1
+de
+20
+60
+00
+00
+24
+55
+83
+1b
+20
+40
+02
+fa
+20
+75
+80
+00
+20
+40
+03
+50
+68
+00
+cb
+26
+c2
+81
+02
+e4
+20
+40
+40
+83
+c0
+02
+82
+e8
+20
+20
+03
+38
+20
+40
+02
+d9
+68
+00
+c2
+10
+20
+60
+00
+00
+68
+02
+46
+d3
+c4
+08
+80
+00
+c3
+81
+80
+00
+c6
+13
+00
+00
+20
+40
+44
+82
+d8
+e0
+00
+03
+20
+40
+43
+ce
+58
+00
+00
+00
+60
+01
+46
+ae
+60
+00
+c6
+b4
+60
+01
+4b
+e2
+20
+40
+42
+ca
+20
+20
+01
+55
+68
+02
+46
+d3
+c3
+0a
+3d
+66
+68
+00
+c7
+7a
+c0
+7f
+bd
+66
+20
+20
+3d
+80
+70
+42
+12
+76
+20
+20
+3d
+36
+20
+40
+02
+fa
+20
+40
+40
+c0
+68
+00
+c6
+e0
+c0
+02
+c0
+d5
+20
+40
+40
+d9
+c0
+18
+03
+0a
+c0
+18
+83
+0c
+20
+40
+40
+d1
+20
+00
+03
+e8
+20
+20
+03
+00
+70
+4a
+fe
+01
+20
+40
+64
+0f
+20
+40
+02
+fc
+20
+20
+64
+11
+20
+40
+03
+11
+20
+20
+40
+e0
+20
+40
+03
+11
+68
+00
+c6
+de
+c0
+38
+40
+e8
+70
+46
+e0
+01
+20
+60
+00
+00
+58
+00
+80
+06
+20
+40
+64
+13
+20
+00
+2e
+e0
+20
+20
+02
+f5
+58
+00
+00
+06
+20
+40
+64
+14
+1f
+e1
+fe
+08
+1f
+ed
+7e
+00
+1f
+e0
+fe
+06
+20
+20
+64
+13
+20
+40
+00
+8e
+68
+10
+8a
+00
+79
+3f
+fe
+04
+60
+10
+8a
+00
+20
+40
+3e
+1e
+58
+00
+18
+02
+60
+01
+40
+bd
+58
+00
+00
+00
+60
+01
+41
+54
+20
+40
+3e
+54
+20
+40
+65
+9c
+68
+02
+46
+d3
+2f
+ef
+fe
+19
+24
+40
+e5
+c2
+20
+40
+44
+3f
+20
+40
+03
+2d
+20
+40
+03
+76
+20
+20
+65
+df
+20
+40
+33
+c4
+20
+22
+c3
+16
+20
+20
+3d
+cb
+d8
+40
+00
+02
+da
+20
+0a
+aa
+da
+40
+00
+62
+20
+20
+65
+d1
+d8
+40
+00
+02
+da
+20
+0a
+9a
+da
+40
+00
+62
+20
+20
+33
+c8
+20
+20
+01
+ab
+68
+02
+46
+d3
+c3
+0f
+03
+40
+68
+00
+8a
+bd
+2f
+ec
+00
+03
+24
+20
+83
+40
+20
+40
+02
+fc
+20
+40
+03
+15
+68
+00
+c7
+1f
+60
+00
+c7
+1e
+68
+02
+46
+d3
+c4
+08
+80
+00
+20
+40
+03
+47
+20
+34
+01
+ab
+20
+20
+01
+88
+df
+20
+00
+02
+d8
+c0
+4b
+dd
+20
+40
+7f
+e7
+58
+00
+ff
+ff
+e8
+c9
+00
+00
+98
+46
+7c
+00
+24
+42
+ff
+e9
+c2
+00
+03
+4b
+20
+60
+00
+00
+58
+00
+03
+67
+60
+01
+41
+f5
+58
+00
+03
+55
+60
+01
+4c
+e6
+20
+60
+00
+00
+20
+20
+03
+5a
+20
+40
+44
+01
+68
+01
+46
+9f
+20
+7a
+00
+00
+20
+20
+00
+6e
+20
+40
+04
+7c
+20
+20
+03
+57
+68
+01
+46
+9f
+20
+7a
+00
+00
+70
+48
+06
+01
+70
+48
+07
+02
+20
+60
+00
+00
+20
+40
+58
+14
+70
+47
+9c
+01
+20
+20
+03
+11
+20
+40
+7e
+34
+20
+40
+3d
+6a
+20
+20
+3e
+e0
+1a
+62
+7e
+00
+c0
+1c
+83
+6c
+c0
+1d
+03
+7a
+c0
+1e
+03
+85
+20
+20
+41
+7d
+70
+47
+8b
+01
+d8
+e0
+00
+03
+20
+40
+43
+d2
+58
+00
+00
+00
+60
+01
+47
+07
+70
+46
+a7
+00
+20
+40
+40
+5d
+20
+40
+00
+6e
+20
+40
+03
+76
+20
+20
+65
+d1
+da
+20
+4b
+dd
+da
+40
+00
+5b
+d8
+40
+00
+04
+20
+60
+00
+00
+70
+4c
+f5
+00
+20
+40
+02
+d9
+20
+40
+01
+ce
+20
+20
+65
+9a
+70
+41
+bd
+00
+20
+40
+43
+16
+df
+20
+00
+03
+d8
+c0
+47
+22
+20
+40
+03
+49
+20
+34
+03
+c2
+20
+20
+02
+e5
+20
+20
+3f
+8d
+78
+34
+7c
+00
+68
+12
+01
+38
+79
+34
+7e
+1a
+60
+12
+00
+4c
+20
+40
+2c
+21
+20
+40
+03
+90
+20
+40
+74
+bd
+20
+40
+44
+82
+20
+40
+3e
+9f
+20
+20
+02
+c5
+68
+00
+ca
+fe
+20
+7a
+00
+00
+70
+4a
+fe
+00
+20
+20
+03
+15
+20
+40
+03
+99
+20
+40
+03
+b9
+20
+40
+03
+9e
+20
+40
+42
+34
+20
+20
+42
+3a
+da
+60
+48
+07
+da
+40
+03
+9c
+20
+20
+33
+6d
+70
+48
+06
+00
+20
+60
+00
+00
+68
+00
+c6
+f5
+c2
+82
+43
+94
+20
+40
+40
+83
+c0
+03
+83
+aa
+68
+00
+c6
+85
+60
+00
+c6
+da
+68
+00
+c6
+db
+c1
+00
+80
+00
+70
+46
+db
+01
+d8
+e0
+00
+09
+20
+40
+43
+d2
+20
+20
+43
+ca
+70
+47
+9e
+28
+20
+40
+03
+ad
+20
+20
+43
+b0
+da
+60
+46
+da
+da
+40
+03
+b0
+20
+20
+33
+6d
+68
+01
+46
+82
+2f
+ef
+fe
+0b
+20
+40
+c2
+d4
+68
+01
+46
+82
+2f
+ef
+fe
+07
+20
+40
+c3
+92
+d8
+e0
+00
+09
+20
+40
+43
+ce
+20
+20
+43
+b8
+68
+00
+c7
+9d
+20
+7a
+00
+00
+68
+00
+c7
+9e
+20
+3a
+03
+c0
+1f
+e0
+ff
+ff
+60
+00
+c7
+9e
+20
+60
+00
+00
+70
+47
+9d
+00
+20
+20
+34
+0a
+70
+47
+9d
+01
+70
+47
+9e
+28
+20
+60
+00
+00
+20
+40
+42
+4a
+68
+00
+c6
+e0
+c0
+03
+03
+c9
+20
+20
+3d
+81
+68
+00
+c7
+7a
+20
+5a
+03
+cf
+68
+00
+c7
+7a
+c0
+00
+bd
+8a
+c0
+01
+bd
+8e
+20
+20
+3d
+8c
+70
+47
+7a
+01
+20
+60
+00
+00
+78
+54
+7c
+00
+58
+00
+00
+00
+60
+03
+46
+9b
+20
+40
+3f
+b5
+20
+40
+40
+79
+20
+40
+40
+7e
+20
+40
+40
+99
+24
+74
+00
+00
+20
+20
+3f
+a0
+70
+47
+9d
+00
+70
+47
+9e
+00
+28
+0f
+fe
+26
+20
+40
+81
+ce
+20
+20
+42
+6d
+20
+40
+02
+d9
+70
+47
+9c
+00
+68
+01
+46
+82
+c2
+85
+83
+e5
+68
+02
+46
+d3
+c3
+0c
+03
+e5
+20
+40
+34
+18
+68
+01
+46
+87
+60
+01
+46
+ac
+70
+01
+6d
+06
+58
+00
+00
+00
+60
+01
+46
+b0
+60
+01
+46
+ae
+d8
+e0
+00
+07
+20
+40
+43
+ce
+20
+40
+43
+ca
+20
+20
+42
+c4
+58
+00
+00
+00
+60
+01
+46
+ac
+20
+40
+03
+11
+20
+20
+42
+cb
+68
+10
+80
+77
+1f
+e1
+7e
+fd
+60
+10
+80
+77
+68
+18
+80
+73
+18
+41
+84
+02
+60
+18
+80
+73
+20
+40
+63
+ee
+18
+41
+04
+fd
+20
+00
+00
+0d
+20
+40
+63
+f2
+60
+18
+80
+73
+20
+60
+00
+00
+20
+40
+62
+bc
+24
+3a
+7d
+db
+68
+00
+8a
+99
+c5
+84
+fd
+d6
+c0
+09
+04
+06
+20
+20
+7d
+ca
+20
+40
+58
+90
+24
+7a
+00
+00
+20
+20
+5a
+bf
+70
+4c
+f1
+01
+70
+4c
+ee
+00
+20
+60
+00
+00
+68
+00
+cc
+ee
+1f
+e0
+fe
+01
+60
+00
+cc
+ee
+20
+60
+00
+00
+68
+00
+cc
+ee
+1f
+e6
+7c
+02
+24
+41
+04
+18
+68
+00
+cc
+ee
+c1
+00
+00
+00
+1f
+e0
+ff
+ff
+60
+00
+cc
+ee
+20
+60
+00
+00
+70
+4c
+ee
+03
+20
+60
+00
+00
+20
+60
+00
+00
+68
+01
+46
+82
+c3
+85
+80
+00
+c3
+83
+80
+00
+c3
+83
+00
+00
+da
+20
+4c
+77
+20
+40
+02
+a9
+60
+08
+cc
+ef
+58
+00
+00
+82
+c5
+13
+04
+25
+58
+00
+00
+80
+98
+46
+7c
+00
+24
+21
+04
+3d
+68
+00
+cc
+ee
+1f
+e6
+7c
+02
+24
+21
+04
+2d
+68
+00
+cc
+ee
+c0
+00
+04
+3e
+20
+60
+00
+00
+68
+00
+cc
+ee
+c1
+90
+00
+00
+70
+4c
+ee
+00
+68
+08
+cc
+ef
+58
+00
+00
+77
+c5
+13
+04
+34
+58
+00
+00
+75
+98
+46
+7c
+00
+24
+61
+00
+00
+68
+00
+cc
+f1
+c0
+00
+04
+45
+1f
+e0
+ff
+ff
+60
+00
+cc
+f1
+c0
+00
+04
+45
+70
+41
+de
+00
+20
+60
+00
+00
+70
+4c
+ee
+00
+68
+00
+cc
+f1
+c0
+01
+04
+43
+1f
+e0
+fe
+01
+60
+00
+cc
+f1
+c0
+00
+84
+3b
+70
+41
+de
+02
+20
+60
+00
+00
+70
+41
+de
+04
+20
+60
+00
+00
+60
+08
+80
+17
+18
+40
+a2
+00
+20
+40
+29
+81
+58
+00
+05
+00
+20
+40
+2a
+8f
+70
+89
+06
+01
+70
+89
+00
+3c
+70
+89
+01
+e0
+20
+00
+00
+0a
+70
+89
+02
+01
+70
+89
+02
+3d
+20
+00
+00
+0a
+70
+89
+03
+b7
+20
+00
+00
+0a
+70
+89
+02
+7d
+68
+00
+c1
+de
+c0
+01
+04
+5f
+c0
+02
+04
+64
+c0
+10
+04
+73
+20
+40
+04
+69
+70
+89
+55
+d0
+70
+89
+56
+e0
+70
+89
+58
+6c
+20
+20
+29
+4b
+20
+40
+04
+6e
+70
+89
+55
+d0
+70
+89
+56
+e0
+70
+89
+58
+3c
+20
+20
+29
+53
+20
+40
+04
+69
+70
+89
+55
+d0
+70
+89
+56
+c0
+70
+89
+58
+6c
+20
+20
+29
+5b
+70
+89
+4c
+5b
+70
+89
+4d
+96
+70
+89
+4e
+2c
+70
+89
+4f
+46
+20
+60
+00
+00
+70
+89
+4c
+fb
+70
+89
+4d
+ef
+70
+89
+4e
+ec
+70
+89
+4f
+5e
+20
+60
+00
+00
+70
+89
+56
+c5
+70
+89
+55
+d0
+20
+60
+00
+00
+18
+00
+2a
+08
+20
+20
+28
+fa
+70
+89
+68
+e6
+20
+40
+29
+78
+70
+80
+42
+05
+20
+60
+00
+00
+68
+00
+cb
+2e
+1f
+e0
+fe
+01
+60
+00
+cb
+2e
+1f
+e6
+7c
+32
+20
+21
+04
+88
+1f
+e6
+7c
+64
+20
+21
+04
+93
+1f
+e6
+7c
+96
+20
+21
+04
+9b
+1f
+e6
+7c
+c8
+20
+21
+04
+a3
+20
+60
+00
+00
+58
+00
+00
+05
+60
+01
+4b
+28
+58
+00
+00
+00
+60
+01
+4b
+2a
+60
+00
+cb
+2c
+60
+00
+cb
+27
+60
+00
+cb
+2d
+78
+34
+7c
+00
+da
+20
+00
+07
+da
+40
+4b
+27
+20
+60
+00
+00
+58
+00
+00
+05
+60
+01
+4b
+2a
+58
+00
+00
+00
+60
+01
+4b
+28
+60
+00
+cb
+2c
+60
+00
+cb
+27
+60
+00
+cb
+2d
+20
+20
+04
+8f
+58
+00
+ff
+fb
+60
+01
+4b
+28
+58
+00
+00
+00
+60
+01
+4b
+2a
+60
+00
+cb
+2c
+60
+00
+cb
+27
+60
+00
+cb
+2d
+20
+20
+04
+8f
+68
+00
+cb
+2e
+c0
+64
+04
+ad
+58
+00
+ff
+fb
+60
+01
+4b
+2a
+58
+00
+00
+00
+60
+01
+4b
+28
+60
+00
+cb
+2c
+60
+00
+cb
+27
+60
+00
+cb
+2d
+20
+20
+04
+8f
+70
+4b
+2e
+00
+20
+20
+04
+a5
+31
+3a
+aa
+55
+08
+00
+a1
+00
+00
+00
+00
+00
+00
+00
+00
+00
+aa
+55
+01
+00
+6c
+0c
+ff
+aa
+55
+0a
+00
+9e
+11
+00
+00
+00
+00
+00
+00
+00
+00
+00
+00
+aa
+55
+01
+00
+00
+40
+07
+aa
+55
+0e
+00
+10
+40
+20
+06
+00
+00
+02
+00
+06
+00
+10
+06
+00
+00
+48
+1c
+aa
+55
+01
+00
+27
+40
+80
+aa
+55
+01
+00
+31
+40
+10
+aa
+55
+02
+00
+91
+40
+01
+40
+aa
+55
+06
+00
+a0
+40
+20
+51
+17
+01
+20
+20
+aa
+55
+18
+00
+ad
+40
+12
+00
+00
+02
+12
+00
+00
+02
+00
+00
+20
+00
+00
+40
+20
+00
+00
+00
+80
+04
+00
+08
+8f
+47
+aa
+55
+01
+00
+d1
+40
+01
+aa
+55
+0b
+00
+72
+41
+20
+00
+00
+8f
+1b
+ce
+00
+0a
+0b
+ef
+07
+aa
+55
+05
+00
+e3
+41
+0e
+00
+01
+00
+02
+aa
+55
+05
+00
+03
+42
+90
+1f
+00
+00
+06
+aa
+55
+04
+00
+11
+42
+80
+00
+00
+ff
+aa
+55
+03
+00
+1a
+42
+01
+13
+47
+aa
+55
+01
+00
+3a
+42
+14
+aa
+55
+02
+00
+41
+42
+00
+84
+aa
+55
+0c
+00
+6f
+43
+1f
+02
+01
+05
+03
+03
+12
+18
+03
+19
+c2
+03
+aa
+55
+0e
+00
+8f
+43
+1f
+0c
+09
+42
+54
+35
+2e
+30
+20
+4d
+6f
+75
+73
+65
+aa
+55
+0c
+00
+af
+43
+0b
+42
+54
+35
+2e
+30
+20
+4d
+6f
+75
+73
+65
+aa
+55
+02
+00
+6f
+44
+19
+00
+aa
+55
+01
+00
+8d
+44
+07
+aa
+55
+08
+00
+96
+44
+07
+00
+07
+00
+20
+00
+2c
+01
+aa
+55
+06
+00
+a0
+44
+8e
+b1
+3a
+0e
+8e
+ed
+aa
+55
+01
+00
+e5
+44
+50
+aa
+55
+02
+00
+fa
+44
+22
+00
+aa
+55
+0c
+00
+15
+45
+0b
+42
+54
+33
+2e
+30
+20
+4d
+6f
+75
+73
+65
+aa
+55
+01
+00
+5a
+45
+0a
+aa
+55
+04
+00
+5a
+46
+01
+03
+00
+04
+aa
+55
+01
+00
+62
+46
+03
+aa
+55
+05
+00
+84
+46
+01
+1e
+ff
+08
+07
+aa
+55
+07
+00
+a5
+46
+07
+00
+00
+50
+00
+70
+17
+aa
+55
+05
+00
+d2
+46
+02
+00
+00
+12
+41
+aa
+55
+1e
+00
+db
+46
+01
+ff
+00
+00
+00
+00
+02
+06
+08
+04
+ff
+ff
+ff
+1b
+1c
+ff
+ff
+ff
+ff
+ff
+ff
+05
+ff
+ff
+03
+ff
+00
+00
+ff
+ff
+aa
+55
+01
+00
+03
+47
+02
+aa
+55
+08
+00
+20
+47
+01
+ff
+ff
+ff
+ff
+ff
+ff
+ff
+aa
+55
+04
+00
+7f
+47
+00
+01
+02
+03
+aa
+55
+0e
+00
+8e
+47
+03
+4b
+ba
+55
+d0
+56
+e0
+57
+88
+58
+6c
+59
+10
+ff
+aa
+55
+41
+00
+c5
+47
+20
+25
+00
+02
+03
+28
+01
+12
+26
+00
+02
+4d
+2a
+07
+00
+00
+00
+00
+00
+00
+00
+27
+00
+02
+02
+29
+02
+00
+00
+28
+00
+02
+08
+29
+02
+11
+01
+29
+00
+02
+03
+28
+01
+0e
+2a
+00
+02
+4d
+2a
+07
+00
+00
+00
+00
+00
+00
+00
+2b
+00
+02
+08
+29
+02
+11
+02
+aa
+55
+14
+00
+10
+4b
+06
+ff
+06
+00
+03
+00
+80
+0c
+09
+42
+54
+35
+2e
+30
+20
+4d
+6f
+75
+73
+65
+aa
+55
+04
+00
+b6
+4b
+01
+00
+c0
+12
+aa
+55
+15
+00
+c1
+4b
+20
+15
+10
+05
+ff
+00
+13
+2c
+42
+06
+15
+36
+48
+0f
+1a
+3a
+4c
+11
+23
+31
+4d
+aa
+55
+03
+00
+da
+4b
+19
+19
+1c
+aa
+55
+03
+00
+e4
+4b
+00
+48
+60
+aa
+55
+02
+00
+fa
+4b
+04
+01
+9b
+9a
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/memmap.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/memmap.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/memmap.format	(working copy)
@@ -0,0 +1,1895 @@
+0x0000 mem_le_adv_transmit
+0x0001 mem_le_adv_waitcnt
+0x0002 mem_le_adv_rcv
+0x0003 mem_le_req_rcv
+0x0004 mem_le_scanrsp_rcv
+0x0005 mem_le_conn_rcv
+0x0006 mem_inquiryscan_waitcnt
+0x0007 mem_inquiryscan_rcvcnt
+0x0008 mem_pagescan_waitcnt
+0x0009 mem_pagescan_rcvcnt
+0x000a mem_pagescan_rcvfhscnt
+0x000b mem_slave_rcvcnt
+0x000c mem_page_transmit
+0x000d mem_page_rcv
+0x000e mem_page_rcv_fhs
+0x000f mem_master_rcvcnt
+0x0010 mem_fhs_wait_counter
+0x0011 mem_newconnto_counter
+0x0012 mem_inquiry_transmit
+0x0013 mem_inquiry_rcv
+0x0014 mem_fw_ver
+0x0015 mem_current_context
+0x0016 mem_le_ch_mapped
+0x0017 mem_last_freq
+0x0018 mem_rssi
+0x0019 mem_rx_type
+0x001a mem_rx_hec_err
+0x001c mem_rx_crc_err
+0x001e mem_context_ptr
+0x0020 mem_display
+0x0028 mem_bcd
+0x0030 mem_state
+0x0031 mem_mode
+0x0032 mem_tsniff
+0x0034 mem_sniff_anchor
+0x0038 mem_clk_offset
+0x003e mem_rx_window
+0x0040 mem_plap
+0x0043 mem_puap
+0x0044 mem_pnap
+0x0046 mem_conn_handle
+0x0047 mem_arq
+0x0048 mem_lmp_to_send
+0x0049 mem_lmi_opcode
+0x004a mem_lmo_reason
+0x004b mem_op
+0x004c mem_state_map
+0x004d mem_supervision_timer
+0x0051 mem_supervision_to
+0x0053 mem_name_offset
+0x0054 mem_key_size
+0x0055 mem_conn_sm
+0x0056 mem_aco
+0x0062 mem_kc
+0x0072 mem_conn_timer
+0x0073 mem_sniff_attempt
+0x0074 mem_sniff_timeout
+0x0075 mem_dsniff
+0x0077 mem_amaddr
+0x0078 mem_lmo_opcode1
+0x0079 mem_lmi_opcode1
+0x007a mem_lmo_reason1
+0x007b mem_lmo_tid1
+0x007c mem_lmo_opcode2
+0x007d mem_lmi_opcode2
+0x007e mem_lmo_reason2
+0x007f mem_lmo_tid2
+0x0080 mem_hci_version
+0x0083 mem_acl_pktlen
+0x0085 mem_sco_pktlen
+0x0086 mem_acl_pktcnt
+0x0088 mem_sco_pktcnt
+0x008a mem_current_sniff_attempt
+0x008b mem_current_sniff_timeout
+0x008c mem_sniff_timeout_temp
+0x008d mem_nfreq_index_inq
+0x008e mem_nfreq_index_page
+0x008f mem_ninqy_index
+0x0090 mem_fhs_misc
+0x0091 mem_subsniff_instant
+0x0095 mem_subsniff_rate
+0x0096 mem_subsniff_tcmax
+0x0098 mem_subsniff_tsniff
+0x0099 mem_lpm_adjust
+0x009a mem_sync_clke
+0x00a0 mem_lpm_current_mult
+0x00a1 mem_gpio_wakeup_low
+0x00a5 mem_gpio_wakeup_high
+0x00a9 mem_air_mode
+0x00aa mem_sco_asso_handle
+0x00ab mem_sco_handle
+0x00ad mem_esco_desco
+0x00ae mem_esco_type
+0x00af mem_neogotiation_state
+0x00b0 mem_saved_amaddr
+0x00b1 mem_esco_arq
+0x00b2 mem_esco_saved_arq
+0x00b3 mem_sco_obuf
+0x00d1 mem_sco_ibuf
+0x00ef mem_sco_poll
+0x00f0 mem_npage_index
+0x00f1 mem_page_mode
+0x00f2 mem_page_clk
+0x00f6 mem_tst_pktcnt_sync
+0x00f8 mem_tst_pktcnt_hec
+0x00fa mem_tst_pktcnt_crc
+0x00fc mem_tst_pktcnt_dmh
+0x00fe mem_tmp_buffer_head
+0x0101 mem_tmp_buffer
+0x0151 mem_tester_emulate
+0x0152 mem_temp_payload
+0x0152 test_mode_scenario
+0x0153 test_mode_hopping_mode
+0x0154 test_mode_tx_freq
+0x0155 test_mode_rx_freq
+0x0156 test_mode_power_mode
+0x0157 test_mode_poll_period
+0x0158 test_mode_packet_type
+0x0159 test_mode_data_length
+0x015b mem_test_mode_old_debug_config
+0x015c mem_tester_cnt
+0x015d mem_temp_am_addr
+0x015e mem_temp_arq
+0x015f mem_len
+0x0161 mem_clkn_bt
+0x0165 mem_clke_bt
+0x0169 mem_dpll_clkn
+0x016d mem_connection_options
+0x016e mem_nameres_cnt
+0x016f mem_txptr
+0x0171 mem_slot_offset
+0x0173 extm_fhs_misc
+0x0174 extm_newconn_am_addr
+0x0175 extm_class
+0x0178 extm_lap
+0x017b extm_uap
+0x017c extm_nap
+0x017f mem_debug_config
+0x0180 mem_lch_code
+0x0181 mem_fhs_am_addr
+0x0182 mem_dpll_error
+0x0184 mem_select_list_item
+0x0185 mem_temp_reconn_record
+0x0185 mem_record_bt_mode
+0x0186 mem_temp_lap
+0x018c mem_list_item_ptr
+0x018e mem_eir
+0x01f2 mem_ucode_status
+0x01f3 mem_otp_ucode_flag
+0x01f5 mem_spid_tbuf/* spid buf: 03 addr[23:16] addr[15:8] addr[7:0] */
+0x01f6 mem_iicd_tbuf/* iicd buf: iic_adr addr[15:8] addr[7:0] iic_adr */
+0x01f6 mem_addr_hi
+0x01f7 mem_addr_mi
+0x01f8 mem_addr_lo
+0x01f9 mem_iicd_addr
+0x01fa mem_spid_rbuf
+0x01fe mem_ucode_buf
+0x0200 mem_ucode_len
+0x0202 mem_sched_addr
+0x0204 mem_ucode_ptr
+0x0206 mem_ucode_keybuf
+0x0216 mem_check_plap_temp
+0x0228 mem_reconnect_flag
+0x0229 mem_switch_fail_master_count
+0x022a mem_app_evt_timer_count
+0x022b mem_init_cnt
+0x022d mem_h5rx_ackcnt
+0x022e mem_check_err_acl_cont
+0x022f mem_rp_packets
+0x0230 mem_packet_type
+0x0232 mem_hci_sniff_conn_handle
+0x0234 mem_hci_sniff_max_interval
+0x0236 mem_hci_sniff_min_interval
+0x0238 mem_hci_sniff_attempt
+0x023a mem_hci_sniff_timeout
+0x023c mem_voice_setting
+0x023e mem_retransmission_effort
+0x023f mem_sco_ptype
+0x0241 mem_extm_uap_restore
+0x0244 mem_h5rx_rptr
+0x0246 mem_h5rx_ack
+0x0247 mem_h5tx_ack
+0x0248 mem_h5tx_rptr
+0x024a mem_h5tx_wptr
+0x024c mem_h5tx_free
+0x024e mem_h5rx_tmp
+0x024f mem_h5tx_seq
+0x0250 mem_hci_acl_queue_wptr
+0x0252 mem_hci_acl_queue_rptr
+0x0254 mem_hci_acl_queue_end
+0x0256 mem_hci_acl_queue_wcnt
+0x0257 mem_hci_acl_cnt
+0x0258 mem_hci_acl_tx_trigger_wptr//tx via uart
+0x025a mem_hci_curr_len
+0x025b mem_hci_curr_target
+0x025d mem_l2cap_mem_start
+0x025d mem_l2cap_rxbuff1_len
+0x025f mem_l2cap_rxbuff2_len
+0x0261 mem_l2cap_rxbuff_new
+0x0263 mem_l2cap_rxbuff_inuse
+0x0264 mem_l2cap_payload_ptr
+0x0266 mem_l2cap_rx_pkt_length
+0x0268 mem_l2cap_rx_cid
+0x026a mem_l2cap_rx_done
+0x026b mem_l2cap_signal_tx_buff_ptr
+0x026d mem_l2cap_signal_tx_payload_ptr
+0x026f mem_l2cap_signal_tx_length
+0x0271 mem_sdp_tx_buff_ptr
+0x0273 mem_sdp_tx_payload_ptr
+0x0275 mem_sdp_tx_pkt_length
+0x0277 mem_rfcomm_tx_buff_ptr
+0x0279 mem_rfcomm_tx_payload_ptr
+0x027b mem_rfcomm_tx_pkt_length
+0x027d memL2CAP_T1
+0x027f mem_CONTROL_tasks
+0x0280 mem_send_config_req
+0x0281 mem_config_identifier
+0x0282 mem_config_req_dest_CID
+0x0284 mem_rfcomm_malloc_fail_flag
+0x0285 mem_message_to_uppersm
+0x0286 mem_upper_sm_remote_page
+0x0287 mem_upper_sm_reconn
+0x0288 mem_upper_sm_ss
+0x0289 mem_tx_malloc_log
+0x02c9 mem_l2cap_mem_end
+0x02c9 mem_scid
+0x02cb mem_cmd_length
+0x02cd mem_tt2
+0x02cf mem_tt3
+0x02d1 mem_id
+0x02d3 mem_psm
+0x02d5 mem_l2cap_sdpres_delay_time
+0x02d9 mem_le_rxbuf
+0x0311 mem_le_l2capbuf
+0x0417 mem_le_mic
+0x041b mem_le_peer_mic
+0x041f mem_le_peer_ltk
+0x042f mem_le_mrand
+0x043f mem_le_state
+0x0440 mem_le_mode
+0x0441 mem_le_tsniff
+0x0443 mem_le_anchor
+0x0447 mem_le_clk_offset
+0x044d mem_le_receive_window
+0x044f mem_le_plap
+0x0455 mem_le_conn_handle
+0x0456 mem_le_arq
+0x0457 mem_le_ch
+0x0458 mem_le_hop
+0x0459 mem_le_event_count
+0x045b mem_le_supervision_timer
+0x045f mem_le_instant
+0x0461 mem_le_channels
+0x0462 mem_le_op
+0x0463 mem_le_access
+0x0467 mem_le_crcinit
+0x046a mem_le_window_size
+0x046b mem_le_slave_latency
+0x046d mem_le_superto
+0x046f mem_le_channel_map
+0x0474 mem_le_no_using
+0x0476 mem_le_peer_sca
+0x0477 mem_le_att_opcode
+0x0478 mem_le_att_handle
+0x047a mem_le_err_code
+0x047b mem_le_ll_pairing_fail_reason
+0x047c mem_le_sk
+0x048c mem_le_testtype
+0x048d mem_le_test_sync
+0x048f mem_le_test_pcnt
+0x0491 mem_le_rxon_ts
+0x0497 mem_le_rx_ll_opcode
+0x0498 mem_le_notify_attr_start
+0x049a mem_le_notify_len
+0x049b mem_cmd_le_create_conn
+0x049c mem_le_cur_attlist_start_ptr
+0x049e mem_le_cur_handle_start
+0x04a0 mem_le_cur_handle_end
+0x04a2 mem_le_cur_uuid_length
+0x04a3 mem_le_cur_uuid
+0x04b3 mem_le_curr_att_len
+0x04b4 mem_le_search_res
+0x04b5 mem_le_continue_type
+0x04b6 mem_lmo_header_length
+0x04b7 mem_lmo_header_opcode
+0x04b8 mem_lmo_payload
+0x04c9 mem_lmi_accepted_opcode
+0x04ca mem_disconn_reason_send
+0x04cb mem_tx_fixed_freq
+0x04cc mem_rx_fixed_freq
+0x04cd mem_ext_features_page
+0x04ce mem_lmpext_ssp_enable
+0x04d0 mem_remote_sppcap
+0x04d1 mem_lmp_conn_state
+0x04d2 mem_soft_timer
+0x04d4 mem_pincode_state
+0x04d5 mem_sres_tid
+0x04d6 mem_accptsco_tid
+0x04d7 mem_auth_enable
+0x04d8 mem_wait_encryption
+0x04d9 mem_sniff_payload
+0x04e9 mem_aurand_send_delay_time
+0x04ed memRemoteRPNBitRate
+0x04ee memRemotePRNDataBits
+0x04ef memRemotePRNStopBit
+0x04f0 memRemotePRNParity
+0x04f1 memRemotePRNFlowControl
+0x04f2 memRemotePRNXon
+0x04f3 memRemotePRNXoff
+0x04f4 mem_mod2div_temp
+0x04f7 mem_contw_temp
+0x04f9 mem_attrib_list
+0x04fb mem_current_adss
+0x04fc mem_current_channel
+0x04fd mem_current_frame_type
+0x04fe mem_current_fcs
+0x04ff mem_current_length
+0x0501 mem_rfcomm_uih_payload_ptr
+0x0503 mem_uih_cmd_type
+0x0504 mem_uih_length
+0x0506 mem_param_payload_ptr
+0x0508 mem_ms_param
+0x0509 mem_pn_credit_flow_type_info
+0x050a mem_pn_priority
+0x050b mem_pn_acknowledg_timer
+0x050c mem_pn_max_retrans
+0x050d mem_rfcomm_send_adss
+0x050e mem_rfcomm_send_frame_type
+0x050f mem_rfcomm_send_fcs
+0x0510 mem_rfcomm_send_offset
+0x0511 mem_sdp_mem_start
+0x0511 mem_sdp_uuid_search_ptr
+0x0519 mem_sdp_continue_byte
+0x051b mem_sdp_pduid
+0x051c mem_sdp_transactionid
+0x051e mem_sdp_transactionid_local
+0x0520 mem_sdp_attribute_maxbyte
+0x0522 mem_sdp_record_maxcnt
+0x0524 mem_sdp_record_handle
+0x0528 mem_sdp_LACAP_found
+0x0529 mem_sdp_RFCOMM_found
+0x052a mem_sdp_handle_list
+0x052a mem_sdp_attrib_list
+0x054a mem_sdp_error_code
+0x054c mem_sdp_all_length
+0x054e mem_handle_humber
+0x054f mem_search_uuid
+0x0551 mem_sdp_mem_end
+0x0551 mem_rxbuf
+0x0562 mem_random_number
+0x0572 mem_round_key
+0x0582 mem_kinit
+0x0592 mem_input_store
+0x05a2 mem_x
+0x05b2 mem_y
+0x05c1 mem_y15
+0x05c2 mem_key_store
+0x05d3 mem_key_store_end
+0x05d4 memp_ar_key
+0x05d6 memp_ar_input
+0x05d8 mem_ar_hround
+0x05e2 mem_ec_infinite
+0x05e3 mem_ec_loopc
+0x05e5 mem_aes_cmac_data_length
+0x05e6 memdat
+0x05e6 mem_ax
+0x05fe mem_ay
+0x0616 mem_az
+0x062e mem_bx
+0x0646 mem_ax_256//32 bytes
+0x0646 mem_by
+0x065e mem_bz
+0x0666 mem_ay_256// 32 bytes
+0x0676 mem_cx
+0x0686 mem_az_256// 32 bytes
+0x068e mem_cy
+0x06a5 mem_cy5
+0x06a6 mem_bx_256// 32 bytes
+0x06a6 mem_cz
+0x06be mem_k
+0x06c6 mem_by_256// 31 bytes
+0x06d6 mem_align
+0x06e6 mem_bz_256//32 bytes
+0x06e6 mem_tmp1
+0x06e6 memahbak
+0x06fe mem_tmp5
+0x0706 mem_cx_256//32 bytes
+0x0706 memahsave
+0x0716 mem_tmp2
+0x0726 mem_cy_256// 32 bytes
+0x0726 memahsave_end
+0x0726 mem_addr_padding
+0x0727 mem_addr_value/* 12 bytes     */ 
+0x072e mem_tmp3
+0x072e mem_t1
+0x0733 mem_addr_value_end
+0x0736 mem_addr_iocap_end
+0x0745 mem_cy5_256// 1 byte
+0x0746 mem_cz_256// 32 bytes
+0x0746 mem_tmp0
+0x0746 mem_t0
+0x074e mem_tmp0a
+0x075e mem_t2
+0x0766 mem_k_256//32 bytes
+0x0776 mem_t3
+0x0786 mem_tmp1_256//32 bytes
+0x078e mem_t7
+0x07a6 mem_tmp5_256
+0x07c6 mem_tmp2_256
+0x07e6 mem_tmp3_256
+0x07e6 mem_t1_256
+0x0806 mem_tmp0_256
+0x0806 mem_t0_256
+0x0826 mem_t2_256
+0x0846 mem_t3_256
+0x0866 mem_t7_256
+0x0886 mem_p
+0x089e mem_a
+0x08b6 mem_b
+0x08ce mem_gx
+0x08e6 mem_gy
+0x08fe memh0
+0x091e mem_p_256
+0x093e mem_a_256
+0x095e mem_gx_256
+0x097e mem_gy_256
+0x099e mem_le_slat
+0x09ae mem_sp_state_start
+0x09ae mem_sp_state
+0x09af mem_master_sp_state
+0x09b0 mem_sp_flag
+0x09b1 mem_master_sp_flag
+0x09b2 mem_sp_calc
+0x09b3 mem_sp_dh_ready
+0x09b4 mem_sp_localsm
+0x09b5 mem_pairing_auth
+0x09b6 mem_sp_flag_start
+0x09b6 mem_sp_local_key_send_count
+0x09b7 mem_sp_remote_key_recv_count
+0x09b8 mem_sp_remote_key_invalid
+0x09b9 mem_sp_dhkey_invalid
+0x09ba mem_gkey
+0x09be mem_le_pubkey_remote_x_256
+0x09c6 mem_sp_pubkey_remote
+0x09c6 mem_sp_pubkey_remote_x
+0x09de mem_sp_pubkey_remote_x_end
+0x09de mem_le_pubkey_remote_y_256
+0x09e6 mem_sp_pubkey_remote_y
+0x09fe mem_le_dhkey_256
+0x0a06 mem_sp_dhkey
+0x0a1e mem_sp_dhkey_end
+0x0a1e mem_sp_random_local
+0x0a2e mem_sp_random_local_end
+0x0a2e mem_sp_random_remote
+0x0a3e mem_sp_random_remote_end
+0x0a3e memresult
+0x0a3e mem_sp_calc_result
+0x0a3e memh
+0x0a42 memg
+0x0a46 memf
+0x0a4a meme
+0x0a4e mem_sp_calc_result_high
+0x0a4e memd
+0x0a52 memc
+0x0a56 memb
+0x0a5a mema
+0x0a5e mem_sp_check_result
+0x0a6e mem_sp_confirm_remote
+0x0a7e mem_sp_prarm_stack
+0x0a8e mem_UI_data_txbuff_length
+0x0a90 mem_ipc_skip_continue_proc
+0x0a91 mem_ui_timer_temp//length 4
+0x0a91 mem_ipc_rega_temp
+0x0a95 mem_hold_contr
+0x0a97 mem_hold_contw
+0x0a99 mem_fifo_temp
+0x0a9a mem_pdatatemp
+0x0aa2 mem_temp//8 bytes
+0x0aaa mem_timeup// 4 bytes
+0x0aae mem_rega//4 bytes
+0x0ab2 mem_regb//4 bytes
+0x0ab6 mem_regc//3 bytes
+0x0ab9 mem_contr//2 bytes
+0x0abb mem_contw//2 bytes
+0x0abd mem_wakup_from_power_flag
+0x0abe mem_saved_gpio_in
+0x0ac2 mem_shutter_random_mac_data_temp
+0x0ac2 mem_shutter_config_data_temp
+0x0ac2 mem_le_adv_channel_map_temp
+0x0ac2 mem_le_data_len_temp//1byte
+0x0ac2 mem_tx_fifo_map_temp
+0x0ac2 mem_rpn_dlci//1byte
+0x0ac2 mem_event_cmd_response_content//2byte
+0x0ac2 mem_le_prand//16byte
+0x0ac2 mem_AES_CMAC_k//16 bytes
+0x0ac2 mem_regext_index//1 bytes
+0x0ac2 mem_temp_block0
+0x0ac3 mem_le_data_temp//15bytes
+0x0ac3 mem_temp_block1
+0x0ad2 mem_le_aes_128//16byte
+0x0ad2 mem_regext//64 bytes
+0x0ad2 mem_AES_CMAC_k1//16 bytes
+0x0ad2 mem_temp_block2
+0x0ae2 mem_AES_CMAC_k2//16 bytes
+0x0ae2 mem_temp_block3
+0x0af2 mem_AES_CMAC_temp// 16 bytes
+0x0af2 mem_temp_block4
+0x0b02 mem_AES_CMAC_M_last// 16 bytes
+0x0b02 mem_module_uart_cmd
+0x0b03 mem_module_uart_opcode
+0x0b04 mem_module_uart_len
+0x0b05 mem_module_temp_nl_discard_packet
+0x0b06 mem_temp_block5
+0x0b12 mem_le_mackey//16 bytes
+0x0b12 mem_app_receive_temp
+0x0b12 mem_key_value_temp
+0x0b14 mem_key_value
+0x0b16 mem_key_value_temp1
+0x0b17 mem_key_value_temp2
+0x0b18 mem_key_value_temp3
+0x0b19 mem_key_value_temp4
+0x0b1a mem_key_value_temp5
+0x0b1b mem_key_value_temp6
+0x0b1c mem_temp_block6
+0x0b22 mem_usb_status
+0x0b23 mem_usb_fifo_empty
+0x0b24 mem_usb_read_len
+0x0b25 mem_usb_rxbuf
+0x0b65 mem_bufptr
+0x0b67 mem_remain
+0x0b68 mem_devicedesc
+0x0b7c mem_hidreportdesc_kb
+0x0b7e mem_hidreportdesc_m
+0x0b80 mem_confdesc
+0x0be4 mem_string0
+0x0be9 mem_string1
+0x0c07 mem_string2
+0x0c47 mem_string3
+0x0c65 mem_usb_zero_packet
+0x0c67 mem_usb_ones_packet
+0x0c69 mem_usb_two_packet
+0x0c6b mem_usb0_state
+0x0c6c mem_usb_offline_check_gpio
+0x0c6d mem_usb_tx_interval
+0x0c6e mem_usb_clear_mem_start
+0x0c6e mem_usb_setup
+0x0c6e mem_usb_setup_bmRequestType
+0x0c6f mem_usb_setup_bRequest
+0x0c70 mem_usb_setup_bValue
+0x0c71 mem_usb_setup_bValueH
+0x0c72 mem_usb_setup_wIndex
+0x0c74 mem_usb_setup_bLength
+0x0c75 mem_usb_setup_bLengthH
+0x0c76 mem_usb0_setup
+0x0cb6 mem_usb0_set_report_data
+0x0cf6 mem_usb0_get_report_data
+0x0d36 mem_usb_state
+0x0d37 mem_usb_tx_wait
+0x0d38 mem_usb_tx_enable
+0x0d39 mem_usb_remote_wakeup
+0x0d3a mem_usb_clear_remote_wakeup
+0x0d3b mem_usb_ep0_stall_status
+0x0d3c mem_usb_ep1_stall_status
+0x0d3d mem_usb_ep2_stall_status
+0x0d3e mem_usb_ep3_stall_status
+0x0d3f mem_dsc_info_data_pointer
+0x0d41 mem_dsc_info_len
+0x0d42 mem_usb0_data_ready_report
+0x0d43 mem_usb_tx_win_enable
+0x0d44 mem_usb_tx_mac_enable
+0x0d45 mem_usb_device_enumeration_endflag
+0x0d46 mem_usb_wakestate_onetime_flag
+0x0d47 mem_usb_mac_wakeup_trig
+0x0d48 mem_usb_set_high_addr_flag
+0x0d49 mem_usb_set_protocol_value
+0x0d4a mem_usb_set_protocol_status
+0x0d4b mem_usb_get_protocol_flag
+0x0d4c mem_usb_idle_flag
+0x0d4d mem_usb_idle_rate
+0x0d4e mem_usb_setup_bValue_temp
+0x0d50 mem_usb0_get_set_report
+0x0d51 mem_usb_ep1_data
+0x0d52 mem_usb_ep2_data
+0x0d53 mem_usb_clear_halt
+0x0d54 mem_usb_mouse_data
+0x0d64 mem_usb_kb_data
+0x0d74 mem_usb_kb_multikey
+0x0d84 mem_usb_kb_data_sta_data
+0x0d8c mem_usb_kb_data_last_data
+0x0d94 mem_usb_kb_multikey_sta_data
+0x0d97 mem_usb_kb_multikey_last_data
+0x0d9a mem_usb_kb_blank_data_enable
+0x0d9b mem_usb_kb_mul_blank_data_enable
+0x0d9c mem_usb_test_cnt
+0x0d9d mem_usb_clear_mem_end
+0x0d9d mem_usb_test_kb
+0x0d9e mem_rssi_noise_buffer
+0x0e9e mem_rssi_noise_dg_buffer
+0x0f9e mem_rssi_noise_ms_buffer
+0x109e mem_rssi_noise_kb_buffer
+0x119e mem_24g_common_temp
+0x11be mem_data_pre
+0x11c0 mem_data_current
+0x11c2 mem_data_sum
+0x4000 mem_patch00
+0x4001 mem_patch01
+0x4002 mem_patch02
+0x4003 mem_patch03
+0x4004 mem_patch04
+0x4005 mem_patch05
+0x4006 mem_patch06
+0x4007 mem_patch07
+0x4008 mem_patch08
+0x4009 mem_patch09
+0x400a mem_patch0a
+0x400b mem_patch0b
+0x400c mem_patch0c
+0x400d mem_patch0d
+0x400e mem_patch0e
+0x400f mem_patch0f
+0x4010 mem_patch10
+0x4011 mem_patch11
+0x4012 mem_patch12
+0x4013 mem_patch13
+0x4014 mem_patch14
+0x4015 mem_patch15
+0x4016 mem_patch16
+0x4017 mem_patch17
+0x4018 mem_patch18
+0x4019 mem_patch19
+0x401a mem_patch1a
+0x401b mem_patch1b
+0x401c mem_patch1c
+0x401d mem_patch1d
+0x401e mem_patch1e
+0x401f mem_patch1f
+0x4020 mem_patch20
+0x4021 mem_patch21
+0x4022 mem_patch22
+0x4023 mem_patch23
+0x4024 mem_patch24
+0x4025 mem_patch25
+0x4026 mem_patch26
+0x4027 mem_patch27
+0x4028 mem_patch28
+0x4029 mem_patch29
+0x402a mem_patch2a
+0x402b mem_patch2b
+0x402c mem_patch2c
+0x402d mem_patch2d
+0x402e mem_patch2e
+0x402f mem_patch2f
+0x4030 mem_patch30
+0x4031 mem_patch31
+0x4032 mem_patch32
+0x4033 mem_patch33
+0x4034 mem_patch34
+0x4035 mem_patch35
+0x4036 mem_patch36
+0x4037 mem_patch37
+0x4038 mem_patch38
+0x4039 mem_patch39
+0x403a mem_patch3a
+0x403b mem_patch3b
+0x403c mem_patch3c
+0x403d mem_patch3d
+0x403e mem_patch3e
+0x403f mem_patch3f
+0x4040 mem_context
+0x4090 mem_current_amaddr
+0x4091 mem_lpm_mode
+0x4092 mem_device_option
+0x4093 mem_scan_mode
+0x4094 mem_last_clkn
+0x4098 mem_features
+0x40a0 mem_lap
+0x40a3 mem_uap
+0x40a4 mem_nap
+0x40a6 mem_npage
+0x40a7 mem_glap
+0x40aa mem_class
+0x40ad mem_iscan_window
+0x40af mem_iscan_interval
+0x40b1 mem_pscan_window
+0x40b3 mem_pscan_interval
+0x40b5 mem_page_interval
+0x40b7 mem_page_window
+0x40b9 mem_page_to
+0x40bb mem_inq_window
+0x40bd mem_fcomp_mul
+0x40be mem_fcomp_div
+0x40bf mem_rx_window_init
+0x40c1 mem_rx_window_sniff
+0x40c3 mem_rf_init_ptr
+0x40c5 mem_last_type
+0x40c6 mem_last_type_esco
+0x40c7 mem_last_type_saved
+0x40c8 mem_retransmission_cnt
+0x40ca mem_next_btclk
+0x40ce mem_rf_rccal
+0x40cf mem_handle_num
+0x40d0 mem_max_slot
+0x40d1 mem_eir_enable
+0x40d2 mem_afh_instant
+0x40d6 mem_afh_error_total
+0x40d8 mem_afh_cfg
+0x40d9 mem_afh_new_mod
+0x40da mem_afh_map_lo
+0x40df mem_afh_map_hi
+0x40e4 mem_afh_used
+0x40e5 mem_afh_index
+0x40e7 mem_afh_map_new
+0x40f2 mem_afh_map
+0x4142 mem_afh_timer
+0x4146 mem_afh_classify_channel_map
+0x4150 mem_chip_functions
+0x4152 mem_lpm_wake_lock
+0x4154 mem_lpm_interval
+0x4156 mem_lpm_overhead
+0x4157 mem_lpm_hibernate_switch
+0x4158 mem_esco_addr
+0x4159 mem_sniff_unint_lost
+0x415a mem_ptt
+0x415b mem_sleep_counter//should be 0x41fc in REVC
+0x415f mem_sleep_counter_all
+0x4163 mem_sleep_clkn
+0x4169 mem_sniff_rcv
+0x416c mem_sniff_lost
+0x416f mem_clks_per_lpo
+0x4172 mem_lpm_mult
+0x4173 mem_lpm_mult_timeout
+0x4174 mem_lpm_mult_cnt
+0x4175 mem_lpm_config
+0x4178 mem_lpm_xtalcnt
+0x4179 mem_lpm_buckcnt
+0x417a mem_lpm_ldocnt
+0x417b mem_lpm_isogate
+0x417c mem_lpm_isogate_final
+0x417d mem_saved_gpio// should be 0x421e in REVC
+0x418d mem_saved_gsel
+0x4190 mem_saved_mark
+0x4198 mem_saved_spidctrl
+0x4199 mem_patch_ptr
+0x419b mem_patch_len
+0x419d mem_timers
+0x41bd mem_link_key_exists
+0x41be mem_link_key
+0x41ce mem_hci_cmd
+0x41cf mem_hci_conn_handle
+0x41d0 mem_hci_plap
+0x41d3 mem_hci_puap
+0x41d4 mem_hci_pnap
+0x41d6 mem_uartd_rxitems_got_data
+0x41d7 mem_uartd_rxitems_threshold
+0x41d8 mem_uartd_rx_timeout
+0x41da mem_loadcode_times
+0x41db mem_tx_lch
+0x41dc mem_tx_len
+0x41de mem_tx_power
+0x41df mem_context_number
+0x41e0 mem_250k_freq_enable
+0x41e1 mem_rf_init_data
+0x41e2 mem_app_handshake_flag
+0x41e3 mem_sniff_param_interval
+0x41e5 mem_sniff_param_attempt
+0x41e7 mem_sniff_param_timeout
+0x41e9 mem_cb_check_wakelock
+0x41eb mem_cb_before_hibernate
+0x41ed mem_cb_before_lpm
+0x41ef mem_cb_le_process
+0x41f1 mem_cb_bt_process
+0x41f3 mem_cb_idle_process
+0x41f5 mem_cb_bb_event_process
+0x41f7 mem_cb_discovry_timeout
+0x41f9 mem_cb_att_write
+0x41fb mem_cb_ble_transmit
+0x41fd mem_cb_event_timer
+0x41ff mem_cb_bt_set_mult
+0x4201 mem_cb_spi_flash_write_complate
+0x4203 mem_eeprom_base
+0x4205 mem_unsniff2sniff_timer_count
+0x4206 mem_wake_up_delay_timer
+0x4207 mem_app_connection_options
+0x4208 mem_app_disconn_reason
+0x420a mem_app_disconn_reason_flag
+0x420c mem_lpm_delay_after_sniff
+0x4210 mem_xrecord_mode
+0x4211 mem_eeprom_block_size
+0x4212 mem_spi_init_clk
+0x4213 mem_spi_init_delay_time
+0x4214 mem_spi_ncs_gpio
+0x4215 mem_nv_data_ptr
+0x4217 mem_nv_data_number
+0x4218 mem_queue_ptr
+0x421a mem_ui_led_struct_num
+0x421b mem_ui_led_struct_ptr
+0x421d mem_0_5_adc_io_data
+0x421f mem_1v_adc_hvin_data
+0x4221 mem_2v_adc_vinlpm_data
+0x4223 mem_1v_adc_io_data
+0x4225 mem_5v_adc_hvin_data
+0x4227 mem_3v_adc_vinlpm_data
+0x4229 mem_otp_adc_flag
+0x422b mem_reference_voltage
+0x422d mem_adc_config_flag
+0x422e mem_adc_channel
+0x422f mem_adc_current_value
+0x4231 mem_adc_power_flag//bit0:low power falg ; bit1:no power flag
+0x4232 mem_spi_write_addr
+0x4235 mem_spi_write_ptr
+0x4237 mem_spi_write_len
+0x4239 mem_spi_write_flash_sm
+0x423a mem_eeprom_wp_gpio
+0x423b mem_kscan_ptr
+0x423d mem_key_num_ptr
+0x423d mem_keyscan_ptr
+0x423f mem_power_param_ptr
+0x4241 mem_24g_head_ptr
+0x4243 mem_baud
+0x4245 mem_hci_lt_rx_state
+0x4246 mem_l2cap_xmem_start
+0x4246 mem_l2cap_tx_multi_offset//0 means single packet
+0x4248 mem_sdp_remote_cid
+0x424a mem_rfcomm_remote_cid
+0x424c mem_hid_ctrl_remote_cid
+0x424e mem_hid_int_remote_cid
+0x4250 mem_sdp_state
+0x4251 mem_rfcomm_state
+0x4252 mem_hid_control_state
+0x4253 mem_hid_interrupt_state
+0x4254 mem_spp_state
+0x4255 mem_ML2CAP_comm_id
+0x4256 mem_used_map
+0x4257 mem_tx_fifo0
+0x4257 mem_tx_fifo0_map
+0x4258 mem_tx_fifo0_ptr
+0x425a mem_tx_fifo1
+0x425a mem_tx_fifo1_map
+0x425b mem_tx_fifo1_ptr
+0x425d mem_tx_fifo2
+0x425d mem_tx_fifo2_map
+0x425e mem_tx_fifo2_ptr
+0x4260 mem_tx_fifo3
+0x4260 mem_tx_fifo3_map
+0x4261 mem_tx_fifo3_ptr
+0x4263 mem_tx_fifo_end
+0x4263 mem_l2cap_lpm_txbuf
+0x4363 mem_l2cap_flow_ctrl_flag
+0x4364 mem_l2cap_pending_item
+0x4365 mem_l2cap_xmem_end
+0x4365 mem_le_dsniff
+0x4367 mem_le_conn_interval
+0x4369 mem_le_scan_enable
+0x436a mem_le_scan_interval
+0x436c mem_le_scan_window
+0x436e mem_le_adv_enable
+0x436f mem_le_adv_data_len
+0x4370 mem_le_adv_data
+0x438f mem_le_scan_data_len
+0x4390 mem_le_scan_data
+0x43af mem_le_name_len
+0x43b0 mem_le_name
+0x43ce mem_le_new_map
+0x43d3 mem_le_new_param
+0x43d3 mem_le_new_transmitwindowsize
+0x43d4 mem_le_new_transmitwindowoffset
+0x43d6 mem_le_new_conninterval
+0x43d8 mem_le_new_connslavelatency
+0x43da mem_le_new_connsupervisiontimeout
+0x43dc mem_le_txheader
+0x43dd mem_le_txlen
+0x43de mem_le_txpayload
+0x43e0 mem_le_txcid
+0x43e2 mem_le_l2cap
+0x43e3 mem_le_l2cap_response
+0x43e4 mem_le_txbdy
+0x4403 mem_le_pcnt_tx
+0x4408 mem_le_pcnt_rx
+0x440d mem_le_last_mic
+0x4411 mem_le_ivm
+0x4415 mem_le_ivs
+0x4419 mem_le_ltk
+0x4429 mem_ltk_exists
+0x442a mem_le_rconfirm
+0x443a mem_le_srand
+0x444a mem_le_iat
+0x444b mem_le_rat
+0x444c mem_le_preq
+0x444d mem_le_preq_iocap
+0x444e mem_le_preq_oob
+0x444f mem_le_preq_auth
+0x4450 mem_le_preq_max_keysize
+0x4451 mem_le_preq_init_key_distribution
+0x4452 mem_le_preq_resp_key_distribution
+0x4453 mem_le_pres
+0x4454 mem_le_pres_iocap
+0x4455 mem_le_pres_oob
+0x4456 mem_le_pres_auth
+0x4457 mem_le_pres_max_keysize
+0x4458 mem_le_pres_init_key_distribution
+0x4459 mem_le_pres_resp_key_distribution
+0x445a mem_le_search_handle_start
+0x445c mem_le_search_handle_end
+0x445e mem_le_att_offset
+0x445e mem_le_search_att_type_length
+0x445f mem_le_search_att_type
+0x446f mem_le_notify_handle
+0x4471 mem_le_search_uuid_length
+0x4472 mem_le_search_uuid
+0x4482 mem_le_adv_param
+0x4482 mem_le_adv_interval
+0x4484 mem_le_adv_type
+0x4485 mem_le_adv_own_addr_type
+0x4486 mem_le_adv_direct_addr_type
+0x4487 mem_le_adv_direct_addr
+0x448d mem_le_adv_channel_map
+0x448e mem_le_conn_param
+0x448e mem_le_conn_peer_addr_type
+0x448f mem_le_conn_peer_addr
+0x4495 mem_le_conn_own_addr_type
+0x4496 mem_le_interval_min
+0x4498 mem_le_interval_max
+0x449a mem_le_latency
+0x449c mem_le_timeout
+0x449e mem_le_scan_params
+0x449e mem_le_scan_type
+0x449f mem_le_scan_own_addr_type
+0x44a0 mem_le_lap
+0x44a3 mem_le_uap
+0x44a4 mem_le_nap
+0x44a6 mem_le_local_mtu
+0x44a8 mem_le_remote_mtu
+0x44aa mem_le_skdm
+0x44b2 mem_le_skds
+0x44ba mem_le_init_superto
+0x44bc mem_ui_le_uuid_table
+0x44be mem_le_secure_connect_enable
+0x44bf mem_le_secure_connect_flag
+0x44c0 mem_le_sc_calc
+0x44c1 mem_le_secure_connect_state
+0x44c2 mem_le_sc_confirm_gkey_flag
+0x44c3 mem_le_sc_local_key_invalid
+0x44c4 mem_le_pairing_state
+0x44c5 mem_le_enc_state
+0x44c6 mem_le_pairing_mode
+0x44c7 mem_le_tk
+0x44cb mem_le_ediv
+0x44cd mem_le_rand
+0x44d5 mem_le_irk
+0x44e5 mem_le_transmit_window
+0x44e9 mem_le_configuration
+0x44ea mem_le_fixed_ltk
+0x44fa mem_le_pairing_handle
+0x44fc mem_le_l2cap_size
+0x44fe mem_le_packet_len_recved
+0x44ff mem_le_tx_buff_used
+0x4500 mem_le_tx_ptr0
+0x4502 mem_le_tx_ptr1
+0x4504 mem_le_tx_ptr2
+0x4506 mem_le_tx_ptr3
+0x4508 mem_le_signaling_identifier
+0x4509 mem_le_l2cap_signaling_conn_param_update_rsp_result
+0x450b mem_le_packet_size
+0x450c mem_le_packet_llid
+0x450d mem_le_payload_ptr
+0x450f mem_le_md_count
+0x4510 mem_lmp_version
+0x4513 mem_lmp_subversion
+0x4515 mem_local_name_length
+0x4516 mem_local_name
+0x4519 mem_local_name2
+0x4559 mem_local_name_end
+0x455a mem_unsniff2sniff_timer
+0x455b mem_switch_flag
+0x455c mem_classic_bt_flag
+0x455d mem_pn_dlci
+0x455e mem_pn_max_frame_size
+0x4560 memFCStemp1
+0x4561 memFCStemp2
+0x4562 memFCStemp3
+0x4563 mem_rfcomm_initiator
+0x4564 mem_remote_spp_channel
+0x4565 mem_HIUfcs_SPP
+0x4566 mem_HIUfcs_SPP_WCredits
+0x4567 mem_rfcomm_send_more_pkt
+0x4568 mem_remote_credits
+0x4569 mem_credit_given
+0x456a mem_ms_channel
+0x456b mem_credit_flag
+0x456c mem_rfcomm_max_frame_size
+0x456e mem_rfcomm_credit_init_data
+0x456f mem_cb_receive_spp_data
+0x4571 mem_nl_rx_data_src
+0x4573 mem_nl_rx_len_all
+0x4575 mem_ui_uuid_table
+0x4577 mem_all_uuid_16bits
+0x458d mem_all_uuid_128bits
+0x45af mem_sdp_l2capch_ptr
+0x45b1 mem_sp_local_key_invalid
+0x45b2 mem_le_private_key_256
+0x45d2 mem_le_pubkey_local_x_256
+0x45f2 mem_le_pubkey_local_y_256
+0x4612 mem_sp_private_key
+0x462a mem_sp_pubkey_local
+0x462a mem_sp_pubkey_local_x
+0x4642 mem_sp_pubkey_local_x_end
+0x4642 mem_sp_pubkey_local_y
+0x465a mem_ssp_enable
+0x465b mem_sp_iocap_local
+0x465e mem_sp_iocap_remote
+0x4661 mem_flag_mode_ssp_pin
+0x4662 mem_ssp_mode_flag
+0x4663 mem_authentication_passkey_times
+0x4664 mem_passkey_1bit
+0x4665 mem_flag_pairing_state
+0x4666 mem_ipc_lock_bt
+0x4667 mem_ipc_lock_c51
+0x4668 mem_ipc_fifo_bt2c51
+0x4670 mem_ipc_fifo_c512bt
+0x4678 mem_ui_button_timer
+0x4679 mem_ui_button_last_state
+0x467a mem_ui_timer_last_btclk
+0x467e mem_discovery_timeout_timer_count
+0x4680 mem_hid_handshake_timer_count
+0x4681 memui_reconnect_mode
+0x4682 mem_ui_state_map
+0x4684 mem_ui_profile_supported
+0x4685 mem_ui_button_timeout
+0x4686 mem_ui_button_gpio
+0x4687 mem_discovery_timeout
+0x4689 mem_pin_length
+0x468a mem_pin
+0x469a mem_antl_lpm_interval
+0x469c mem_antl_adv_interval
+0x469e mem_antl_slow_adv_lpm_interval
+0x46a0 mem_antl_slow_adv_adv_interval
+0x46a2 mem_antl_led_style
+0x46a2 mem_antl_led_type
+0x46a3 mem_antl_led_blink_count
+0x46a4 mem_antl_led_gpio
+0x46a5 mem_antl_led_on_time
+0x46a7 mem_antl_led_off_time
+0x46a9 mem_antl_led_cb_on
+0x46ab mem_antl_led_cb_off
+0x46ad mem_antl_buzzer_style
+0x46ad mem_antl_buzzer_type
+0x46ae mem_antl_buzzer_blink_count
+0x46af mem_antl_buzzer_gpio
+0x46b0 mem_antl_buzzer_on_time
+0x46b2 mem_antl_buzzer_off_time
+0x46b4 mem_antl_buzzer_cb_on
+0x46b6 mem_antl_buzzer_cb_off
+0x46b8 mem_antl_fast_adv_led_style
+0x46b8 mem_antl_fast_adv_led_type
+0x46b9 mem_antl_fast_adv_led_blink_count
+0x46ba mem_antl_fast_adv_led_gpio
+0x46bb mem_antl_fast_adv_led_on_time
+0x46bd mem_antl_fast_adv_led_off_time
+0x46bf mem_antl_slow_adv_led_style
+0x46bf mem_antl_slow_adv_led_type
+0x46c0 mem_antl_slow_adv_led_blink_count
+0x46c1 mem_antl_slow_adv_led_gpio
+0x46c2 mem_antl_slow_adv_led_on_time
+0x46c4 mem_antl_slow_adv_led_off_time
+0x46c6 mem_antl_power_starting_led_style
+0x46c6 mem_antl_power_starting_led_type
+0x46c7 mem_antl_power_starting_led_blink_count
+0x46c8 mem_antl_power_starting_led_gpio
+0x46c9 mem_antl_power_starting_led_on_time
+0x46cb mem_antl_power_starting_led_off_time
+0x46cd mem_antl_power_starting_buzzer_style
+0x46d4 mem_antl_power_off_led_style
+0x46d4 mem_antl_power_off_led_type
+0x46d5 mem_antl_power_off_led_link_count
+0x46d6 mem_antl_power_off_led_gpio
+0x46d7 mem_antl_power_off_led_on_time
+0x46d9 mem_antl_power_off_led_off_time
+0x46db mem_antl_power_off_buzzer_style
+0x46db mem_antl_power_off_buzzer_type
+0x46dc mem_antl_power_off_buzzer_link_count
+0x46dd mem_antl_power_off_buzzer_gpio
+0x46de mem_antl_power_off_buzzer_on_time
+0x46e0 mem_antl_power_off_buzzer_off_time
+0x46e2 mem_antl_alert_led_stlye
+0x46e9 mem_antl_alert_buzzer_stlye
+0x46e9 mem_antl_alert_buzzer_type
+0x46ea mem_antl_alert_buzzer_blink_count
+0x46eb mem_antl_alert_buzzer_gpio
+0x46ec mem_antl_alert_buzzer_on_time
+0x46ee mem_antl_alert_buzzer_off_time
+0x46f0 mem_antl_key_led_style
+0x46f0 mem_antl_key_led_type
+0x46f1 mem_antl_key_led_blink_count
+0x46f2 mem_antl_key_led_gpio
+0x46f3 mem_antl_key_led_on_time
+0x46f5 mem_antl_key_led_off_time
+0x46f7 mem_antl_key_buzzer_style
+0x46fe mem_antl_queue_width
+0x46ff mem_antl_queue_depth
+0x4700 mem_antl_queue_curr_num
+0x4701 mem_antl_queue_read_ptr
+0x4702 mem_antl_queue_write_ptr
+0x4703 mem_antl_queue_buff
+0x4753 mem_antl_key_scan_enable
+0x4754 mem_antl_led_num
+0x4755 mem_antl_led_gpio_map
+0x4759 mem_antl_power_param
+0x4759 mem_antl_power_state
+0x475a mem_antl_power_timer
+0x475b mem_antl_power_off_timeout
+0x475c mem_antl_power_starting_timeout
+0x475d mem_antl_power_off_cb
+0x475f mem_antl_power_starting_cb
+0x4761 mem_antl_power_standby_cb
+0x4763 mem_event_button_up_cb
+0x4765 mem_antl_key_num
+0x4766 mem_cb_antl_key
+0x4768 mem_antl_key_conf0
+0x476c mem_antl_key0_press
+0x477b mem_antl_key0_release
+0x478a mem_antl_conn_updata_procedure_state
+0x478b mem_client_characteristic_configuration_descriptor
+0x478d mem_adc_timer
+0x478f mem_antl_conn_update_timer
+0x4790 mem_antl_send_updata_le_param_timer
+0x4791 mem_antl_le_sleep_timer
+0x4793 mem_antl_fast_adv_timer
+0x4795 mem_antl_fast_adv_timeout
+0x4797 mem_antl_le_sleep_timeout
+0x4799 mem_double_click_timer
+0x479a mem_butten_click_cnt
+0x479b mem_antl_led_state
+0x479c mem_antl_buzzer_state
+0x479d mem_antl_key_state
+0x479e mem_antl_lost_mode
+0x479f mem_alarm_config
+0x47a0 mem_alarm_config_notfy_cnt
+0x47a1 mem_buzzer_pwm_conf
+0x47a7 mem_adc_timeout
+0x47a9 mem_voltage_remain_percent
+0x47aa mem_battery_calculate_set
+0x47aa mem_battery_full_voltage
+0x47ac mem_battery_empty_voltage
+0x47ae mem_battery_low_voltage
+0x47b0 mem_battery_current_voltage
+0x47b2 mem_rx_window_sniff_inc
+0x47b4 mem_interval_increment
+0x47b6 mem_antl_le_interval_min
+0x47b8 mem_antl_le_interval_max
+0x47ba mem_antl_le_latency
+0x47bc mem_antl_le_timeout
+0x47be mem_antl_le_unnormal_interval_min
+0x47c0 mem_antl_le_unnormal_interval_max
+0x47c2 mem_antl_le_unnormal_latency
+0x47c4 mem_antl_le_unnormal_timeout
+0x47c6 mem_AntiLost_le_att_list
+0x469a mem_car_hard_soft_switch
+0x469b mem_car_queue_each_size
+0x469c mem_car__queue_length
+0x469d mem_car_queue_curr_num
+0x469e mem_car_queue_read_ptr
+0x469f mem_car_queue_write_ptr
+0x46a0 mem_car_queue_ele
+0x4718 mem_car_pop_queue_buff
+0x472c mem_car_led_num
+0x472d mem_car_led_map
+0x4737 mem_car_style1_led_type
+0x4738 mem_car_style1_blink_count
+0x4739 mem_car_style1_struct_led_gpio
+0x473a mem_car_style1_on_time
+0x473c mem_car_style1_off_time
+0x473e mem_car_style1_cb_ledon
+0x4740 mem_car_style1_cb_ledoff
+0x4742 mem_car_style2_led_type
+0x4743 mem_car_style2_blink_count
+0x4744 mem_car_style2_struct_led_gpio
+0x4745 mem_car_style2_on_time
+0x4747 mem_car_style2_off_time
+0x4749 mem_car_style2_cb_ledon
+0x474b mem_car_style2_cb_ledoff
+0x474d mem_le_receive_data
+0x474d mem_le_receive_packet_head
+0x474f mem_le_receive_cmd
+0x4750 mem_le_receive_length
+0x4752 mem_le_receive_payload
+0x475c mem_le_receive_checksum
+0x475d mem_motor1_status
+0x475e mem_motor1_speed
+0x475f mem_motor2_status
+0x4760 mem_motor2_speed
+0x4761 mem_motor3_status
+0x4762 mem_motor3_speed
+0x4763 mem_motor1_pwm_set
+0x4763 mem_motor1_pwm_pin1_set
+0x4764 mem_motor1_pwm_pin2_set
+0x4765 mem_motor1_pwm_pin_set
+0x4766 mem_motor1_pwm_channel_set
+0x4767 mem_motor1_pwm_freq_set
+0x476a mem_motor1_pwm_dute_set
+0x476b mem_motor2_pwm_set
+0x476b mem_motor2_pwm_pin1_set
+0x476c mem_motor2_pwm_pin2_set
+0x476d mem_motor2_pwm_pin_set
+0x476e mem_motor2_pwm_channel_set
+0x476f mem_motor2_pwm_freq_set
+0x4772 mem_motor2_pwm_dute_set
+0x4773 mem_motor3_pwm_set
+0x4773 mem_motor3_pwm_pin1_set
+0x4774 mem_motor3_pwm_pin2_set
+0x4775 mem_motor3_pwm_pin_set
+0x4776 mem_motor3_pwm_channel_set
+0x4777 mem_motor3_pwm_freq_set
+0x477a mem_motor3_pwm_dute_set
+0x477b mem_motor_select_p_n
+0x477c mem_car_motor_status
+0x477d mem_car_motor_speed
+0x477e mem_motor_pwm_set
+0x477e mem_motor_pwm_pin1_set
+0x477f mem_motor_pwm_pin2_set
+0x4780 mem_motor_pwm_pin_set
+0x4781 mem_motor_pwm_channel_set
+0x4782 mem_motor_pwm_freq_set
+0x4785 mem_motor_pwm_dute_set
+0x4786 mem_ir_rx_gpio
+0x4787 mem_ir_data
+0x4789 mem_ir_rx_buf
+0x478b mem_ir_receive_clkn
+0x478f mem_ir_notify_data
+0x4792 mem_ir_notify_data_head
+0x4797 mem_ir_notify_data_payload
+0x4799 mem_ir_notify_data_check_sum
+0x479a mem_car_ir_breakdown_check_timer
+0x479b mem_car_ir_breakdown_flag
+0x479c mem_car_led_control
+0x479c mem_car_led1_status
+0x479d mem_car_led2_status
+0x479e mem_car_led3_status
+0x479f mem_car_led4_status
+0x47a0 mem_car_led5_status
+0x47a1 mem_car_led6_status
+0x47a2 mem_car_led7_status
+0x47a3 mem_car_led8_status
+0x47a4 mem_car_led_control_timer
+0x47a5 mem_car_led_blink_status
+0x47a6 mem_car_led_no
+0x47a7 mem_car_info_request
+0x47aa mem_car_info_request_head
+0x47af mem_car_info_request_payload
+0x47b7 mem_car_info_request_checksum
+0x47b8 mem_car_config_param
+0x47b8 mem_car_config_setting_flag
+0x47b9 mem_car_config_device_select
+0x47ba mem_car_config_motor_layout
+0x47bb mem_car_config_ir_enable
+0x47bc mem_car_config_ir_rx_gpio
+0x47bd mem_car_config_pairing_led_conn_status
+0x47be mem_car_config_pairing_led_gpio
+0x47bf mem_car_config_led_num
+0x47c0 mem_car_config_blood_led_gpio
+0x47c0 mem_car_config_blood_led1_gpio
+0x47c1 mem_car_config_blood_led2_gpio
+0x47c2 mem_car_config_blood_led3_gpio
+0x47c3 mem_car_config_blood_led4_gpio
+0x47c4 mem_car_config_blood_led5_gpio
+0x47c5 mem_car_config_blood_led6_gpio
+0x47c6 mem_car_config_blood_led7_gpio
+0x47c7 mem_car_config_blood_led8_gpio
+0x47c8 mem_car_config_bat_notify_enable
+0x47c9 mem_car_config_low_voltage_led_gpio
+0x47ca mem_car_config_low_voltage_percent
+0x47cb mem_car_config_soft_switch_enable
+0x47cc mem_car_config_soft_switch_gpio
+0x47cd mem_car_notify_vdd_count
+0x47ce mem_car_notify_vdd_timer
+0x47cf mem_car_notify_vdd_value_last
+0x47d0 mem_car_notify_vdd_percent
+0x47d1 mem_car_working_flag
+0x47d2 mem_low_bat_flag
+0x47d3 mem_notify_bat_packet
+0x47d6 mem_notify_bat_head
+0x47db mem_notify_bat_payload
+0x47dc mem_notify_bat_check_sum
+0x47dd mem_vdd_notify_flag
+0x47de mem_car_current_vdd_value_temp
+0x47e0 mem_car_last_vdd_value
+0x47e2 mem_vdd_calculate_set
+0x47e2 mem_vdd_full_vol
+0x47e4 mem_vdd_empty_vol
+0x47e6 mem_vdd_low_vol
+0x47e8 mem_vdd_now_vol
+0x47ea mem_car_24g_status
+0x47eb mem_car_24g_no_data_timeout_count
+0x47ed mem_car_24g_no_data_timeout_timer
+0x47ef mem_car_24g_ir_receive_attack_count
+0x47f0 mem_car_24g_go_die_flag
+0x47f1 mem_car_attack_shake_timer
+0x47f2 mem_car_attack_shake_flag
+0x47f3 mem_car_soft_power
+0x47f3 mem_car_power_state
+0x47f4 mem_car_power_timer
+0x47f5 mem_car_power_off_timeout
+0x47f6 mem_car_power_starting_timeout
+0x47f7 mem_car_power_off_cb
+0x47f9 mem_car_power_starting_cb
+0x47fb mem_car_power_standby_cb
+0x47fd mem_car_ui_button_up_cb
+0x47ff mem_car_le_att_list
+0x49f3 mem_car_moto1_blank_timer
+0x49f4 mem_car_moto2_blank_timer
+0x49f5 mem_car_moto3_blank_timer
+0x49f6 mem_car_24g_received_pac
+0x49f7 mem_24g_car_head_ptr
+0x469a mem_light_pwm0
+0x469b mem_light_pwm1
+0x469c mem_light_pwm2
+0x469d mem_light_pwm3
+0x469e mem_light_pwm4
+0x469f mem_light_pwm5
+0x46a0 mem_light_pairing_enable
+0x46a1 mem_light_pairing_timer
+0x46a3 mem_light_cnum
+0x46a4 mem_light_next_record
+0x46a5 mem_light_clist
+0x46f5 mem_light_crr_cmd_count
+0x46f6 mem_curr_packet_num
+0x469a mem_lightc_led_gpio
+0x469b mem_lightc_row
+0x46a1 mem_lightc_col
+0x46a7 mem_adv_time
+0x46a8 mem_cmd0_string
+0x46bc mem_cmd1_string
+0x46d0 mem_cmd2_string
+0x46e4 mem_cmd3_string
+0x46f8 mem_cmd4_string
+0x470c mem_cmd5_string
+0x4720 mem_cmd6_string
+0x4734 mem_cmd7_string
+0x4748 mem_cmd8_string
+0x475c mem_cmd9_string
+0x4770 mem_cmd10_string
+0x4784 mem_cmd11_string
+0x4798 mem_cmd12_string
+0x47ac mem_cmd13_string
+0x47c0 mem_cmd14_string
+0x47d4 mem_cmd15_string
+0x47e8 mem_cmd16_string
+0x47fc mem_cmd17_string
+0x4810 mem_cmd18_string
+0x4824 mem_cmd19_string
+0x4838 mem_cmd20_string
+0x469a mem_soft_version_num
+0x469c mem_module_wake_up_gpio
+0x469d mem_module_state_gpio
+0x469e mem_module_connect_state_gpio
+0x469f mem_current_packet_length
+0x46a1 mem_module_state
+0x46a2 mem_module_mcu_wake_pin
+0x46a3 mem_module_mcu_wake_delay_us
+0x46a7 mem_module_spp_lpm_mult
+0x46a8 mem_module_le_lpm_mult
+0x46a9 mem_module_bluetooth_stauts_by_command
+0x46aa mem_module_uart_rx_buffer
+0x46ac mem_module_uart_rx_buffer_end
+0x46ae mem_module_uart_tx_buffer
+0x46b0 mem_module_uart_tx_buffer_end
+0x46b2 mem_module_read_vdd_flag
+0x46b3 mem_module_read_vdd_count
+0x46b4 mem_module_vdd_quotient
+0x46b5 mem_module_vdd_remainder
+0x46b6 mem_module_le_rx_data_len
+0x46b7 mem_module_le_rx_data_address
+0x46b9 mem_module_le_rx_data_handle
+0x46bb mem_module_data_write_handle
+0x46bd mem_module_data_write_handle2
+0x46bf mem_module_flag
+0x46c0 mem_module_hci_notify_len
+0x46c1 mem_module_hci_notify_handle
+0x46c3 mem_module_hci_nofiy_addr
+0x46c5 mem_last_transmite_clock
+0x46c9 mem_module_uuid_list
+0x47f5 mem_module_uuid_list_end
+0x47f5 mem_module_le_att_list
+0x4a4d mem_module_le_att_list_end
+0x4a4d mem_module_nv_data
+0x4a4d mem_module_nv_data0
+0x4a6f mem_module_nv_data1
+0x4a91 mem_module_nv_data2
+0x4ab3 mem_module_nv_data3
+0x4ad5 mem_module_nv_data4
+0x469a mem_remote_car_hard_soft_switch
+0x469b mem_remote_car_queue_each_size
+0x469c mem_remote_car_queue_length
+0x469d mem_remote_car_queue_curr_num
+0x469e mem_remote_car_queue_read_ptr
+0x469f mem_remote_car_queue_write_ptr
+0x46a0 mem_remote_car_queue_ele
+0x46fa mem_remote_style_led_type
+0x46fb mem_remote_style_blink_count
+0x46fc mem_remote_style_struct_led_gpio
+0x46fd mem_remote_style_on_time
+0x46ff mem_remote_style_off_time
+0x4701 mem_remote_style_cb_ledon
+0x4703 mem_remote_style_cb_ledoff
+0x4705 mem_remote_car_led_num
+0x4706 mem_remote_car_led_map
+0x470e mem_remote_car_keyscan
+0x470e mem_remote_car_key_num
+0x470f mem_cb_remote_car_keyscan
+0x4711 mem_remote_car_key_conf0
+0x4711 mem_remote_car_key_conf0_pin
+0x4712 mem_remote_car_key_conf1
+0x4712 mem_remote_car_key_conf1_pin
+0x4713 mem_remote_car_key_conf2
+0x4713 mem_remote_car_key_conf2_pin
+0x4714 mem_remote_car_key_conf3
+0x4714 mem_remote_car_key_conf3_pin
+0x4715 mem_remote_car_key_conf4
+0x4715 mem_remote_car_key_conf4_pin
+0x4716 mem_remote_car_key_conf5
+0x4716 mem_remote_car_key_conf5_pin
+0x4717 mem_remote_car_key_conf6
+0x4717 mem_remote_car_key_conf6_pin
+0x4718 mem_rocker_negative_flag
+0x4719 mem_rocker_work_status
+0x471a mem_current_vdd_value_default_mid_x
+0x471c mem_current_vdd_value_default_mid_y
+0x471e mem_current_vdd_value_default_mid_temp
+0x4720 mem_current_vdd_default_range
+0x4722 mem_rocker_last_status
+0x4724 mem_rocker_status
+0x4724 mem_rocker_x_status
+0x4725 mem_rocker_y_status
+0x4726 mem_remote_car_config_param
+0x4726 mem_remote_car_config_setting_flag
+0x4727 mem_remote_car_config_key_map
+0x4728 mem_remote_car_config_layout
+0x4729 mem_remote_car_config_connect_led_gpio
+0x472a mem_remote_car_config_check_way
+0x472b mem_remote_car_config_soft_switch_enable
+0x472c mem_remote_car_config_soft_switch_gpio
+0x472d mem_remote_car_config_timeout_shutdown_enable
+0x472e mem_remote_car_24g_motor_packet
+0x472e mem_remote_car_24g_motor_packet_lenght
+0x472f mem_remote_car_24g_motor_send_packet_head
+0x4731 mem_remote_car_24g_motor_send_cmd
+0x4732 mem_remote_car_24g_motor_send_length
+0x4734 mem_remote_car_24g_motor_send_payload
+0x4734 mem_remote_car_24g_motor1_payload
+0x4736 mem_remote_car_24g_motor2_payload
+0x4738 mem_remote_car_24g_motor3_payload
+0x473a mem_remote_car_24g_motor_send_checksum
+0x473b mem_remote_car_24g_fire_packet
+0x473b mem_remote_car_24g_fire_packet_lenght
+0x473c mem_remote_car_24g_fire_send_packet_head
+0x473e mem_remote_car_24g_fire_send_cmd
+0x473f mem_remote_car_24g_fire_send_length
+0x4741 mem_remote_car_24g_fire_send_payload
+0x4743 mem_remote_car_24g_fire_send_checksum
+0x4744 mem_remote_car_24g_tx_temp
+0x4753 mem_remote_car_no_data_timeout
+0x4755 mem_remote_car_no_data_timer
+0x4757 mem_remote_car_soft_power
+0x4757 mem_remote_car_power_state
+0x4758 mem_remote_car_power_timer
+0x4759 mem_remote_car_power_off_timeout
+0x475a mem_remote_car_power_starting_timeout
+0x475b mem_remote_car_power_off_cb
+0x475d mem_remote_car_power_starting_cb
+0x475f mem_remote_car_power_standby_cb
+0x4761 mem_remote_key_status
+0x4762 mem_remote_car_24g_status
+0x4763 mem_remote_car_24g_auto_work_step
+0x4764 mem_remote_car_24g_pair_success_flag
+0x4765 mem_remote_car_24g_enter_lpm_enable
+0x4766 mem_remote_car_empty_packet
+0x4767 mem_24g_RC_head_ptr
+0x469a mem_shutter_bluetooth_type
+0x469b mem_shutter_config_enable
+0x469c mem_shutter_config_otp_base_address
+0x469e mem_shutter_config_size
+0x469f mem_shutter_config_select_gpio1
+0x46a0 mem_shutter_config_select_gpio2
+0x46a1 mem_shutter_config_select_gpio3
+0x46a2 mem_shutter_config_user_otp_address
+0x46a4 mem_shutter_config_eeprom_offset_addr
+0x46a6 mem_shutter_config_eeprom_start_flag
+0x46a8 mem_shutter_config_user_size
+0x46a9 mem_shutter_config_label
+0x46aa mem_shutter_config_otp_addr
+0x46ac mem_classic_shutter_cable_unplug_conut
+0x46ad mem_classic_shutter_hid_disconn_count
+0x46ae mem_classic_shutter_random_mac_offset_addr
+0x46b0 mem_ble_shutter_enable_notify
+0x46b1 mem_ble_shutter_reconn_dav_interval
+0x46b3 mem_ble_shutter_discovery_adv_interval
+0x46b5 mem_ble_shutter_reconn_timeout
+0x46b7 mem_ble_shutter_reconn_timer
+0x46b9 mem_ble_shutter_reconn_blink_on_time
+0x46bb mem_ble_shutter_reconn_blink_off_time
+0x46bd mem_ble_shutter_discovery_blink_on_time
+0x46bf mem_ble_shutter_discovery_blink_off_time
+0x46c1 mem_ble_shutter_interval_min
+0x46c3 mem_ble_shutter_interval_max
+0x46c5 mem_ble_shutter_latency
+0x46c7 mem_ble_shutter_timeout
+0x46c9 mem_ble_shutter_interval_min_new
+0x46cb mem_ble_shutter_interval_max_new
+0x46cd mem_ble_shutter_latency_new
+0x46cf mem_ble_shutter_timeout_new
+0x46d1 mem_classic_shutter_discovery_timeout
+0x46d3 mem_classic_shutter_connect_timeout
+0x46d5 mem_ble_shutter_discovery_timeout
+0x46d7 mem_ble_shutter_connect_timeout
+0x46d9 mem_shutter_sleep_timeout
+0x46db mem_shutter_sleep_timer
+0x46dd mem_shutter_hard_soft_switch_case
+0x46de mem_shutter_soft_switch_button_gpio
+0x46df mem_shutter_soft_switch_power_state
+0x46e0 mem_shutter_soft_switch_poweron_time
+0x46e1 mem_shutter_soft_switch_poweroff_time
+0x46e2 mem_shutter_soft_switch_poweron_callback_function
+0x46e4 mem_shutter_soft_switch_poweroff_callback_function
+0x46e6 mem_shutter_keyscan
+0x46e6 mem_shutter_key_num
+0x46e7 mem_cb_shutter_keycan
+0x46e9 mem_shutter_key_conf0
+0x46ea mem_shutter_key_conf1
+0x46eb mem_shutter_key_conf2
+0x46ec mem_shutter_key_conf3
+0x46ed mem_shutter_key_conf4
+0x46ee mem_shutter_key_conf5
+0x46ef mem_shutter_key_conf6
+0x46f0 mem_shutter_key_conf7
+0x46f1 mem_key0_press
+0x46f6 mem_key1_press
+0x46fb mem_key2_press
+0x4700 mem_key3_press
+0x4705 mem_key4_press
+0x470a mem_key5_press
+0x470f mem_key6_press
+0x4714 mem_key7_press
+0x4719 mem_key0_release
+0x471e mem_key1_release
+0x4723 mem_key2_release
+0x4728 mem_key3_release
+0x472d mem_key4_release
+0x4732 mem_key5_release
+0x4737 mem_key6_release
+0x473c mem_key7_release
+0x4741 mem_ble_data_buffer1
+0x4746 mem_ble_data_buffer2
+0x474b mem_ble_data_buffer3
+0x4750 mem_ble_data_buffer4
+0x4755 mem_ble_data_buffer5
+0x475a mem_ble_data_buffer6
+0x475f mem_ble_data_buffer7
+0x4764 mem_ble_data_buffer8
+0x4769 mem_ble_data_buffer9_58
+0x479b mem_classic_data_buffer
+0x47a0 mem_classic_data_buffer1
+0x47a5 mem_classic_data_buffer2
+0x47aa mem_classic_data_buffer3
+0x47af mem_classic_data_buffer4
+0x47b4 mem_classic_data_buffer5
+0x47b9 mem_classic_data_buffer6
+0x47be mem_classic_data_buffer7
+0x47c3 mem_classic_data_buffer8
+0x47c8 mem_classic_data_buffer9_58
+0x47fa mem_queue_each_size
+0x47fb mem_queue_length
+0x47fc mem_queue_curr_num
+0x47fd mem_queue_read_ptr
+0x47fe mem_queue_write_ptr
+0x47ff mem_queue_ele
+0x481f mem_shutter_nv_data
+0x48c9 mem_shutter_led_struct_app_led
+0x48c9 mem_shutter_led_struct_app_led_type
+0x48ca mem_shutter_led_struct_app_led_blink_count
+0x48cb mem_shutter_led_struct_app_led_gpio
+0x48cc mem_shutter_led_struct_app_led_on_time
+0x48ce mem_shutter_led_struct_app_led_off_time
+0x48d0 mem_shutter_led_struct_app_led_on_callback
+0x48d2 mem_shutter_led_struct_app_led_off_callback
+0x48d4 mem_shutter_power_off_led_style
+0x48d4 mem_shutter_power_off_led_style_type
+0x48d5 mem_shutter_power_off_led_style_blink_count
+0x48d6 mem_shutter_power_off_led_style_gpio
+0x48d7 mem_shutter_power_off_led_style_on_time
+0x48d9 mem_shutter_power_off_led_style_off_time
+0x48db mem_shutter_power_off_led_style_on_callback
+0x48dd mem_shutter_power_off_led_style_off_callback
+0x48df mem_shutter_soft_swtich_botton_down
+0x48e0 mem_shutter_soft_swtich_led_struct_temp
+0x48eb mem_shutter_power_off_timeout
+0x48ec mem_shutter_power_off_timer
+0x469a mem_mouse_key
+0x469b mem_mouse_x
+0x469d mem_mouse_y
+0x469f mem_mouse_z
+0x46a0 mem_mouse_tz
+0x46a1 mem_mouse_xy_h
+0x46a2 mem_sensor_shutter_hi
+0x46a3 mem_sensor_shutter_lo
+0x46a4 mem_sensor_smart_flag
+0x46a5 mem_sensor_squal_reg
+0x46a6 mem_sensor_iqc
+0x46a7 mem_mouse_move_flag
+0x46a8 mem_mouse_direct_timeout
+0x46aa mem_mouse_no_data_timeout
+0x46ac mem_mouse_discovery_timer
+0x46ae mem_mouse_direct_timer
+0x46b0 mem_mouse_no_data_timer
+0x46b2 mem_mouse_blank_data_timer
+0x46b4 mem_mouse_send_blank_timer
+0x46b5 mem_mouse_cpi_count
+0x46b6 mem_mouse_dpi_button_state
+0x46b7 mem_wheel_tb_old_pinlevel
+0x46b8 mem_wheel_tb_new_pinlevel
+0x46b9 mem_wheel_tog
+0x46ba mem_mouse_tz_data
+0x46bb mem_mouse_tz_data_count
+0x46bc mem_mouse_tz_data_count1
+0x46bd mem_mwheel_b_old_pinlevel
+0x46be mem_mwheel_b_new_pinlevel
+0x46bf mem_mwheel_tog
+0x46c0 mem_mouse_z_data
+0x46c1 mem_mouse_z_data_count
+0x46c2 mem_mouse_z_data_count1
+0x46c3 mem_reconn_mode
+0x46c4 mem_mouse_statue_led_timer
+0x46c5 mem_le_connect_status_flag
+0x46c6 mem_le_start_encrypt_timer
+0x46c7 mem_device_addr_temp
+0x46ce mem_adc_read_timer
+0x46cf mem_adc_low_volatage_led_timer_count
+0x46d0 mem_adc_reference_voltage
+0x46d2 mem_device_number
+0x46d3 mem_mouse_flag
+0x46d5 mem_mouse_function_enable
+0x46d7 mem_combination_select_device_timer_init
+0x46d8 mem_combination_select_device_count
+0x46d9 mem_select_device_button_statue
+0x46da mem_combination_ui_button_count
+0x46db mem_bt_discovey_button_statue
+0x46dc mem_sensor_reset_gpio
+0x46dd mem_sensor_id1
+0x46de mem_sensor_id2
+0x46df mem_mouse_dpi_led_delay_count
+0x46e0 mem_config_sensor_type
+0x46e1 mem_config_sensor_motion
+0x46e2 mem_lbutton_gpio
+0x46e3 mem_rbutton_gpio
+0x46e4 mem_mbutton_gpio
+0x46e5 mem_bk_button_gpio
+0x46e6 mem_fw_button_gpio
+0x46e7 mem_dpi_button_gpio
+0x46e8 mem_whee_a_data_gpio
+0x46e9 mem_whee_b_data_gpio
+0x46ea mem_whee_ta_data_gpio
+0x46eb mem_whee_tb_data_gpio
+0x46ec mem_config_bt_button_gpio
+0x46ed mem_config_select_device_button_gpio
+0x46ee mem_config_paraing_led_gpio
+0x46ef mem_config_low_voltage_alarm_gpio
+0x46f0 mem_config_device1_led_gpio
+0x46f1 mem_config_device2_led_gpio
+0x46f2 mem_config_device3_led_gpio
+0x46f3 mem_sensor_data_gpio
+0x46f4 mem_dpi_led_gpio
+0x46f5 mem_config_function_enable
+0x46f6 mem_config_sensor_angle
+0x46f7 mem_select_sensor_angle_gpio
+0x46f8 mem_select_adc_gpio
+0x46f9 mem_config_end
+0x46f9 mem_btclk_sensor
+0x46fd mem_wire_usb_interval
+0x46fe mem_mouse_mode_flag
+0x46ff mem_usb_addr
+0x4700 mem_flash_base
+0x4703 mem_24g_device_number
+0x4704 mem_24g_enter_lpm_timer
+0x4705 mem_mouse_1step_up_count
+0x4706 mem_mouse_2step_up_count
+0x4707 mem_24g_pairing_timer_count
+0x4709 mem_mouse_vdd_calculate_set
+0x4709 mem_mouse_vdd_full_vol
+0x470b mem_mouse_vdd_empty_vol
+0x470d mem_mouse_vdd_low_vol
+0x470f mem_mouse_vdd_now_vol
+0x4711 mem_mouse_sensor_timer_count
+0x4712 mem_sensor_led_style
+0x4713 mem_mouse_led_type
+0x4714 mem_mouse_blink_count
+0x4715 mem_mouse_struct_led_gpio
+0x4716 mem_mouse_on_time
+0x4718 mem_mouse_off_time
+0x471a mem_mouse_cb_ledon
+0x471c mem_mouse_cb_ledoff
+0x471e mem_reconn_times
+0x471f mem_reconn_times_init
+0x4720 mem_mouse_information_start
+0x4720 mem_device_flag
+0x4721 mem_device1_type
+0x4722 mem_device1_addr
+0x4728 mem_device1_link_key
+0x4738 mem_device1_locall_addr
+0x473e mem_device2_type
+0x473f mem_device2_addr
+0x4745 mem_device2_link_key
+0x4755 mem_device2_locall_addr
+0x475b mem_device3_type
+0x475c mem_device3_addr
+0x4762 mem_device3_link_key
+0x4772 mem_device3_locall_addr
+0x4778 mem_store_flag
+0x477a mem_mouse_dpi
+0x477b mem_mouse_24g_addr
+0x477f mem_mouse_information_end
+0x477f mem_mouse_dpi_seting
+0x477f mem_320x_dpi_1
+0x4780 mem_320x_dpi_2
+0x4781 mem_320x_dpi_3
+0x4782 mem_320x_dpi_4
+0x4783 mem_3212_dpi_1
+0x4784 mem_3212_dpi_2
+0x4785 mem_3212_dpi_3
+0x4786 mem_3212_dpi_4
+0x4787 mem_3610_dpi_1
+0x4788 mem_3610_dpi_2
+0x4789 mem_3610_dpi_3
+0x478a mem_3610_dpi_4
+0x478b mem_mouse_24g_enter_lpm_enable
+0x478c mem_le_rx_window_inc
+0x478e mem_empty_count
+0x478f mem_rf_init_data_new
+0x479c mem_mouse_clear_sensor_data_flag
+0x479d mem_mouse_null_enter_hibernate_flag
+0x479e mem_mouse_null_enter_hibernate_timer
+0x479f mem_mouse_le_reconnect_flag
+0x47a0 mem_mouse_data_queue
+0x47c1 mem_mouse_data_queue_num
+0x47c2 mem_random_addr_increase_count
+0x47c4 mem_mouse_le_conn_param_reject
+0x47c5 mem_lpm_mult_init
+0x47c6 mem_mouse_le_uuid_sup
+0x4806 mem_mouse_wheel_trigger
+0x4807 mem_mouse_wheel_trigger_timer
+0x4808 mem_mouse_enter_sniff_count
+0x4809 mem_mouse_send_switch_req_timer
+0x480a mem_le_tx_buffer0_omemalloc
+0x4825 mem_le_tx_buffer1_omemalloc
+0x4840 mem_le_tx_buffer2_omemalloc
+0x485b mem_le_tx_buffer3_omemalloc
+0x4876 mem_mouse_uuid_list
+0x4afc mem_lmi_opcode_temp
+0x4afd mem_mouse_adc_last_low_voltage_flag
+0x4afe mem_mouse_init_sensor_reset_flag
+0x4aff mem_bt_rcvd_switch_req_accept
+0x4b00 mem_bt_send_max_slot_req_accept_after_switch
+0x4b01 mem_bt_send_lmp_setup_complete
+0x4b02 mem_l2cap_rcv
+0x4b03 mem_mouse_bt_boot_mode
+0x4b04 mem_mouse_bt_boot_data
+0x4b09 mem_mouse_bt_send_first_package_timer
+0x4b0a mem_mouse_bt_send_first_package_flag
+0x4b0b mem_mouse_asm_flag
+0x4b0c mem_mouse_x_pre
+0x4b0e mem_mouse_y_pre
+0x4b10 mem_le_adv_swift_pair
+0x4b23 mem_bt_125hz_cnt
+0x4b24 mem_mouse_send_secutiry_request_timer
+0x4b25 mem_le_send_security_request_flag
+0x4b26 mem_power_on_flag
+0x4b27 mem_m_key
+0x4b28 mem_m_x
+0x4b2a mem_m_y
+0x4b2c mem_m_z
+0x4b2d mem_m_tz
+0x4b2e mem_24g_matrix_cnt
+0x4b2f mem_24g_rxbuf
+0x4b51 mem_24g_txbuf
+0x4b71 mem_24g_txpayload
+0x4b93 mem_24g_rxpayload
+0x4bb3 mem_24g_rxdata_length
+0x4bb4 mem_24g_pid
+0x4bb5 mem_24g_datalen
+0x4bb6 mem_24g_data_type
+0x4bb7 mem_24g_txlen
+0x4bb8 mem_24g_rx_window
+0x4bba mem_24g_ensure
+0x4bbb mem_24g_txfail_cnt
+0x4bbd mem_24g_get_ack_fail
+0x4bbe mem_24g_retry
+0x4bbf mem_24g_ch
+0x4bc0 mem_24g_current_ch_number
+0x4bc1 mem_24g_paring_addr
+0x4bc5 mem_24g_pairing_sm
+0x4bc6 mem_24g_ch_map1
+0x4bca mem_24g_ch_map2
+0x4bce mem_24g_ch_map3
+0x4bd2 mem_24g_ch_map4
+0x4bd6 mem_24g_tx_btclk
+0x4bda mem_24g_interval
+0x4bdb mem_24g_interval_min
+0x4bdc mem_24g_interval_max
+0x4bdd mem_24g_addr
+0x4be1 mem_24g_abort_pac
+0x4be2 mem_24g_check_dongle_times
+0x4be4 mem_24g_enter_hibernate
+0x4bec mem_24g_device_addr
+0x4bf0 mem_24g_pac_index
+0x4bf1 mem_24g_no_ack
+0x4bf2 mem_24g_sta_crc
+0x4bf5 mem_24g_last_crc
+0x4bf8 mem_24g_sta_pid
+0x4bf9 mem_24g_last_pid
+0x4bfa mem_24g_max_retry
+0x4bfb mem_24g_mode
+0x4bfc mem_24g_rxdata_temp
+0x4c1e mem_24g_rx_addr
+0x4c22 mem_dongle_mode_init
+0x4c23 mem_dongle_work_mode
+0x4c24 mem_dongle_ms_bind_step
+0x4c25 mem_dongle_kb_bind_step
+0x4c26 mem_dongle_bind_device_status
+0x4c27 mem_24g_bind_payload
+0x4c2f mem_24g_abort_packet
+0x4c30 mem_24g_rf_laststa
+0x4c31 mem_24g_hop_btclk
+0x4c35 mem_24g_hop_interval
+0x4c36 mem_24g_mode_switch
+0x4c37 mem_24g_ackpayload_enable
+0x4c38 mem_24g_hop_packet
+0x4c39 mem_24g_pair_mode
+0x4c3a mem_24g_nodata_timer_enable
+0x4c3b mem_24g_time_slice
+0x4c3c mem_24g_kb_data_sta_data
+0x4c44 mem_24g_kb_data_last_data
+0x4c4c mem_24g_kb_multikey_sta_data
+0x4c4f mem_24g_kb_multikey_last_data
+0x4c52 mem_24g_kb_blank_data_enable
+0x4c53 mem_24g_kb_mul_blank_data_enable
+0x4c54 mem_24g_ms_blank_data_enable
+0x4c55 mem_24g_kb_addr
+0x4c59 mem_24g_ms_addr
+0x4c5d mem_24g_dg_last_ch
+0x4c5e mem_24g_dg_ch_number
+0x4c5f mem_24g_dg_config_ch_once
+0x4c60 mem_24g_kb_last_ch
+0x4c61 mem_24g_kb_ch_number
+0x4c62 mem_24g_kb_config_ch_once
+0x4c63 mem_24g_ms_last_ch
+0x4c64 mem_24g_ms_ch_number
+0x4c65 mem_24g_ms_config_ch_once
+0x4c66 mem_24g_syncword
+0x4c68 mem_24g_syncword_crc8
+0x4c69 mem_24g_get_syncword_crc8
+0x4c6a mem_24g_ota_sta_pid
+0x4c6c mem_tx_power_temp
+0x4c6d mem_rssi_hex
+0x4c6e mem_rssi_noise_avg
+0x4c6f mem_rssi_noise_index
+0x4c70 mem_rssi_signal_index
+0x4c71 mem_rssi_noise_dg_avg
+0x4c72 mem_rssi_noise_kb_avg
+0x4c73 mem_rssi_noise_ms_avg
+0x4c74 mem_rssi_noise_dg_index
+0x4c75 mem_rssi_noise_kb_index
+0x4c76 mem_rssi_noise_ms_index
+0x4c77 mem_rssi_signal_buf
+0x4c7f mem_queue_ele_num
+0x4c80 mem_queue_read
+0x4c82 mem_queue_write
+0x4c84 mem_queue_start
+0x4c84 mem_data_ele0
+0x4ca4 mem_data_ele1
+0x4cc4 mem_data_ele2
+0x4ce4 mem_queue_end
+0x4ce4 mem_queue_temp
+0x4ce6 mem_cb_24g_data
+0x4ce8 mem_24g_hop_fastly_cnt
+0x4ce9 mem_24g_hop_pac_retry
+0x4cea mem_24g_rf_hop_ch
+0x4ceb mem_24g_rf_last_sta
+0x4cec mem_24g_rf_work_stage
+0x4ced mem_24g_sync_cnt
+0x4cee mem_power_ctrl_pac_succ_cnt
+0x4cef mem_rssi_avg_received
+0x4cf0 mem_rssi_hex_received
+0x4cf1 mem_power_ctrl_level
+0x4cf2 mem_seqi
+0x4cf3 mem_24g_auto_paring_switch
+0x4cf4 mem_24g_paccnt
+0x4cf5 mem_24g_transmit_by_interrupt
+0x4cf6 mem_24g_transmit_by_interrupt_exit_count
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/otp.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/otp.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/otp.dat	(working copy)
@@ -0,0 +1,8 @@
+00
+02
+aa
+55
+00
+00
+b3
+23
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/program.lis
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/program.lis	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/program.lis	(working copy)
@@ -0,0 +1,34251 @@
+include "bt_format "
+org 0x0000
+0000 c2840013 bbit1 8 ,pf_patch_ext 
+0001 c0000028 beq patch00_0 ,p_soft_reset 
+0002 c000802b beq patch00_1 ,p_soft_reset_1 
+0003 c0010033 beq patch00_2 ,p_soft_reset_2 
+0004 c0428476 beq patch10_5 ,p_shutdown_radio 
+0005 c0448447 beq patch11_1 ,p_set_freq_tx 
+0006 c0450478 beq patch11_2 ,p_initialize_radio_cont 
+0007 c050803c beq patch14_1 ,p_init_param 
+0008 c0588041 beq patch16_1 ,p_lpm_check_wake_lock 
+0009 c059004b beq patch16_2 ,p_g24_dispatch 
+000a c06202cf beq patch18_4 ,p_device_init 
+000b c0648330 beq patch19_1 ,p_app_flag_store 
+000c c0650334 beq patch19_2 ,p_app_initflag_check 
+000d c07183c5 beq patch1c_3 ,p_mouse_seting_dpi 
+000e c07303d1 beq patch1c_6 ,p_mouse_motion 
+000f c07503da beq patch1d_2 ,p_mouse_bb_event_discovery_btn 
+0010 c07583df beq patch1d_3 ,p_mouse_start_discovery 
+0011 c07603f0 beq patch1d_4 ,p_mouse_stop_discovery 
+0012 20202a8e branch loop 
+
+pf_patch_ext:
+0013 c01f8016 beq patch27_7 ,p_le_enable 
+0014 c04603f4 beq patch31_4 ,p_twspi_reset 
+0015 20202a8e branch loop 
+
+p_le_enable:
+0016 70890f36 jam 0x36 ,rf_adc_goff 
+0017 70890b5f jam 0x5f ,rf_agc_nsat 
+0018 783b7c00 enable le 
+0019 70891407 jam 7 ,rfen_ulp 
+001a 6800c1e0 fetch 1 ,mem_250k_freq_enable 
+001b 207a0000 rtn blank 
+001c 70890ab8 jam 0xb8 ,rf_iq_gain 
+001d 20600000 rtn 
+
+p_rssi_signal:
+001e 1fe22200 copy pdata ,rega 
+001f 6808cc70 fetcht 1 ,mem_rssi_signal_index 
+0020 58004c77 setarg mem_rssi_signal_buf 
+0021 98408a00 iadd temp ,contw 
+0022 1a227e00 copy rega ,pdata 
+0023 e0a08000 istore 1 ,contw 
+0024 18408401 increase 1 ,temp 
+0025 18410407 and_into rssi_buf_len_signal ,temp 
+0026 6008cc70 storet 1 ,mem_rssi_signal_index 
+0027 20600000 rtn 
+
+p_soft_reset:
+0028 6810813b hfetch 1 ,0x813b 
+0029 6000cb26 store 1 ,mem_power_on_flag 
+002a 20202002 branch soft_reset + 1 
+
+p_soft_reset_1:
+002b d8a009ae arg mem_sp_state ,contw 
+002c df20000c arg 12 ,loopcnt 
+002d 20407ed4 call clear_mem 
+002e 20406a03 call rfcomm_init 
+002f 20405cf6 call init_lmp 
+0030 2455ac65 ncall lpm_disable_exen_output ,wake 
+0031 20407ccd call ui_init + 1 
+0032 2020200c branch soft_reset + 11 
+
+p_soft_reset_2:
+0033 2055b2e3 call app_lpm_init ,wake 
+0034 2040756a call publickey_init 
+0035 2055ab41 call lpm_recover_clk ,wake 
+
+p_sp_cal_loop:
+0036 204076dc call sp_calc_sequence 
+0037 6800c65a fetch 1 ,mem_ssp_enable 
+0038 203a2012 branch main_loop ,blank 
+0039 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 
+003a 203a0036 branch p_sp_cal_loop ,blank 
+003b 20202012 branch main_loop 
+
+p_init_param:
+003c 58000a06 setarg param_le_version 
+003d 6001c510 store 3 ,mem_lmp_version 
+003e 58001d87 setarg param_le_subversion 
+003f 60014513 store 2 ,mem_lmp_version + 3 
+0040 20202aa2 branch init_param + 12 
+
+p_lpm_check_wake_lock:
+0041 c6130000 rtnmark1 mark_24g 
+0042 6800c79c fetch 1 ,mem_mouse_clear_sensor_data_flag 
+0043 203a7fef branch disable_blank ,blank 
+0044 6800c7c4 fetch 1 ,mem_mouse_le_conn_param_reject 
+0045 c000ffef beq le_lpm_disable ,disable_blank 
+0046 68014248 fetch 2 ,mem_sdp_remote_cid 
+0047 243a7fef nbranch disable_blank ,blank 
+0048 6800c806 fetch 1 ,mem_mouse_wheel_trigger 
+0049 243a7fef nbranch disable_blank ,blank 
+004a 20207ff1 branch enable_blank 
+
+p_g24_dispatch:
+004b c6930000 rtnmark0 mark_24g 
+004c 6800ccf5 fetch 1 ,mem_24g_transmit_by_interrupt 
+004d c000805c beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt 
+
+p_g24_transmit_process:
+004e 204000e5 call p_g24_txdata_prep 
+004f 24340071 nbranch p_g24_nodata_transmit ,user 
+0050 204000cc call p_g24_rf_sta_check 
+
+p_g24_transmit_start:
+0051 20400107 call p_g24_transmit_packet 
+0052 6800cbc5 fetch 1 ,mem_24g_pairing_sm 
+0053 c1ff8000 rtnne state_24g_pairing_success 
+0054 2040041a call power_ctrl_start 
+
+p_g24_short_sleep:
+0055 20400077 call p_g24_lpm_wait 
+0056 24740000 nrtn user 
+0057 204002c0 call p_clear_wake 
+0058 5800ec54 setarg 60500 
+
+p_g24_enter_sleep:
+0059 20407f49 call clk2lpo 
+005a 600a415b storet 4 ,mem_sleep_counter 
+005b 20202b2a branch lpm_sleep 
+
+p_g24_transmit_by_interrupt:
+005c 2040028c call p_g24_timer_check 
+005d 24740000 nrtn user 
+005e 20400068 call p_g24_interval_calibrate 
+005f 2020004e branch p_g24_transmit_process 
+
+p_g24_transmit_by_interrupt_exit:
+0060 704cf500 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt 
+0061 704cf600 jam 0 ,mem_24g_transmit_by_interrupt_exit_count 
+
+p_g24_interval_min:
+0062 704bf000 jam 0 ,mem_24g_pac_index 
+0063 6800cbdb fetch 1 ,mem_24g_interval_min 
+
+p_g24_current_interval_store:
+0064 6000cbda store 1 ,mem_24g_interval 
+0065 20600000 rtn 
+
+p_g24_interval_max:
+0066 6800cbdc fetch 1 ,mem_24g_interval_max 
+0067 20200064 branch p_g24_current_interval_store 
+
+p_g24_interval_calibrate:
+0068 6800cbf0 fetch 1 ,mem_24g_pac_index 
+0069 1fe0fe01 increase 1 ,pdata 
+006a 6000cbf0 store 1 ,mem_24g_pac_index 
+006b c0020066 beq 4 ,p_g24_interval_max 
+006c c0028062 beq 5 ,p_g24_interval_min 
+006d 20600000 rtn 
+
+p_g24_transmit_by_interrupt_enable:
+006e 704cf501 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt 
+006f 704cf600 jam 0 ,mem_24g_transmit_by_interrupt_exit_count 
+0070 20600000 rtn 
+
+p_g24_nodata_transmit:
+0071 6800cbe1 fetch 1 ,mem_24g_abort_pac 
+0072 205a0080 call p_g24_send_abort_packet ,blank 
+
+p_g24_long_sleep:
+0073 20400077 call p_g24_lpm_wait 
+0074 24740000 nrtn user 
+0075 6801cbe4 fetch 3 ,mem_24g_enter_hibernate 
+0076 20200059 branch p_g24_enter_sleep 
+
+p_g24_lpm_wait:
+0077 78347c00 enable user 
+0078 20402afa call lpo_calibration 
+0079 6801c16f fetch 3 ,mem_clks_per_lpo 
+007a 203a7fe9 branch disable_user ,blank 
+007b 6800c091 fetch 1 ,mem_lpm_mode 
+007c 203a7fe9 branch disable_user ,blank 
+007d 6800ccf5 fetch 1 ,mem_24g_transmit_by_interrupt 
+007e c000ffe9 beq g24_tx_timer_int_enable ,disable_user 
+007f 202002c3 branch p_mouse_setgpio_lpm 
+
+p_g24_send_abort_packet:
+0080 704be101 jam 1 ,mem_24g_abort_pac 
+0081 704cea00 jam 0 ,mem_24g_rf_hop_ch 
+0082 20400094 call p_g24_transmit_rf_ctrl_clear 
+0083 6000cb51 store 1 ,mem_24g_txbuf 
+0084 58000000 setarg 0 
+0085 6003cb52 store 7 ,mem_24g_txbuf + 1 
+0086 68024bec fetch 4 ,mem_24g_device_addr 
+0087 60024b59 store 4 ,mem_24g_txbuf + 8 
+0088 704bb50c jam 12 ,mem_24g_datalen 
+0089 6800cbb6 fetch 1 ,mem_24g_data_type 
+008a 79207e03 set1 bit_abort ,pdata 
+008b 6000cbb6 store 1 ,mem_24g_data_type 
+008c 204000e8 call p_g24_txdata_enable_tx 
+008d 20200051 branch p_g24_transmit_start 
+
+p_g24_set_device_addr:
+008e 204068a8 call adc_init_data 
+008f 680240a0 fetch 4 ,mem_lap 
+0090 60024bec store 4 ,mem_24g_device_addr 
+0091 20600000 rtn 
+
+p_g24_transmit_rf_sta_init:
+0092 704ceb01 jam 1 ,mem_24g_rf_last_sta 
+0093 704ced00 jam 0 ,mem_24g_sync_cnt 
+
+p_g24_transmit_rf_ctrl_clear:
+0094 6800cbb6 fetch 1 ,mem_24g_data_type 
+0095 1fe17e07 and_into bits_data ,pdata 
+0096 6000cbb6 store 1 ,mem_24g_data_type 
+0097 20600000 rtn 
+
+p_g24_hop_ch_enable:
+0098 6800cbb6 fetch 1 ,mem_24g_data_type 
+0099 79207e04 set1 bit_hop ,pdata 
+009a 6000cbb6 store 1 ,mem_24g_data_type 
+009b 6000cb71 store 1 ,mem_24g_txpayload 
+009c 20600000 rtn 
+
+p_g24_hop_ch_disable:
+009d 6800cbb6 fetch 1 ,mem_24g_data_type 
+009e 793ffe04 set0 bit_hop ,pdata 
+009f 6000cbb6 store 1 ,mem_24g_data_type 
+00a0 20600000 rtn 
+
+p_g24_transmit_hop_pac_fail:
+00a1 20400410 call power_ctrl_pac_succ_decrs 
+00a2 6800ccec fetch 1 ,mem_24g_rf_work_stage 
+00a3 c00080a6 beq 1 ,p_g24_transmit_hop_pac_fail_wo_hop 
+00a4 c00100aa beq 2 ,p_g24_transmit_hop_pac_fail_hop_stage2 
+00a5 20600000 rtn 
+
+p_g24_transmit_hop_pac_fail_wo_hop:
+00a6 704ced02 jam 2 ,mem_24g_sync_cnt 
+
+p_g24_transmit_hop_pac_fail_stage1:
+00a7 704ce900 jam 0 ,mem_24g_hop_pac_retry 
+00a8 704ceb00 jam 0 ,mem_24g_rf_last_sta 
+00a9 20200094 branch p_g24_transmit_rf_ctrl_clear 
+
+p_g24_transmit_hop_pac_fail_hop_stage2:
+00aa 704cea00 jam 0 ,mem_24g_rf_hop_ch 
+00ab 202000a7 branch p_g24_transmit_hop_pac_fail_stage1 
+
+p_g24_transmit_pac_fail_hop_stage3:
+00ac 68014bbb fetch 2 ,mem_24g_txfail_cnt 
+00ad 1fe0fe01 increase 1 ,pdata 
+00ae 60014bbb store 2 ,mem_24g_txfail_cnt 
+00af c283014a bbit1 6 ,p_g24_tx_attempt_fail 
+00b0 6800ccea fetch 1 ,mem_24g_rf_hop_ch 
+00b1 c00080b5 beq 1 ,p_g24_rf_hop_fastly 
+00b2 704cea01 jam 1 ,mem_24g_rf_hop_ch 
+
+p_g24_rf_hop_attemp_again:
+00b3 6800ccea fetch 1 ,mem_24g_rf_hop_ch 
+00b4 c0808094 bne 1 ,p_g24_transmit_rf_ctrl_clear 
+
+p_g24_rf_hop_fastly:
+00b5 6800cce8 fetch 1 ,mem_24g_hop_fastly_cnt 
+00b6 1fe0fe01 increase 1 ,pdata 
+00b7 6000cce8 store 1 ,mem_24g_hop_fastly_cnt 
+00b8 c00200bc beq 4 ,p_g24_rf_hop_fastly_exit 
+00b9 20400204 call p_g24_ch 
+00ba 704bfa02 jam 2 ,mem_24g_max_retry 
+00bb 20200107 branch p_g24_transmit_packet 
+
+p_g24_rf_hop_fastly_exit:
+00bc 20400410 call power_ctrl_pac_succ_decrs 
+00bd 704ce800 jam 0 ,mem_24g_hop_fastly_cnt 
+00be 20200094 branch p_g24_transmit_rf_ctrl_clear 
+
+p_g24_transmit_hop_pac_succ_wo_hop:
+00bf 704ced02 jam 2 ,mem_24g_sync_cnt 
+
+p_g24_transmit_hop_pac_succ:
+00c0 704ceb01 jam 1 ,mem_24g_rf_last_sta 
+00c1 704cea00 jam 0 ,mem_24g_rf_hop_ch 
+00c2 20200094 branch p_g24_transmit_rf_ctrl_clear 
+
+p_g24_transmit_succ_rf_config:
+00c3 6800ccec fetch 1 ,mem_24g_rf_work_stage 
+00c4 c00180c0 beq 3 ,p_g24_transmit_hop_pac_succ 
+00c5 6800cbb6 fetch 1 ,mem_24g_data_type 
+00c6 2fec0004 isolate0 bit_hop ,pdata 
+00c7 20208092 branch p_g24_transmit_rf_sta_init ,true 
+00c8 6800ccec fetch 1 ,mem_24g_rf_work_stage 
+00c9 c00080bf beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop 
+00ca c00100c0 beq 2 ,p_g24_transmit_hop_pac_succ 
+00cb 20600000 rtn 
+
+p_g24_rf_sta_check:
+00cc 6800cbc5 fetch 1 ,mem_24g_pairing_sm 
+00cd c1ff8000 rtnne state_24g_pairing_success 
+00ce 204000d1 call p_g24_rf_laststa_synccnt_check 
+00cf 245600d9 ncall p_g24_rf_sync_cnt_check ,user2 
+00d0 20600000 rtn 
+
+p_g24_rf_laststa_synccnt_check:
+00d1 78567c00 disable user2 
+00d2 6800cceb fetch 1 ,mem_24g_rf_last_sta 
+00d3 c1808000 rtnne 1 
+00d4 6800cced fetch 1 ,mem_24g_sync_cnt 
+00d5 c1800000 rtnne 0 
+00d6 704cec01 jam 1 ,mem_24g_rf_work_stage 
+00d7 704bfa04 jam 4 ,mem_24g_max_retry 
+00d8 20207feb branch enable_user2 
+
+p_g24_rf_sync_cnt_check:
+00d9 6800cced fetch 1 ,mem_24g_sync_cnt 
+00da 203a00e0 branch p_g24_rf_hop_attemp ,blank 
+00db 1fe0ffff increase -1 ,pdata 
+00dc 6000cced store 1 ,mem_24g_sync_cnt 
+00dd 704cec02 jam 2 ,mem_24g_rf_work_stage 
+00de 704bfa04 jam 4 ,mem_24g_max_retry 
+00df 20200204 branch p_g24_ch 
+
+p_g24_rf_hop_attemp:
+00e0 704cec03 jam 3 ,mem_24g_rf_work_stage 
+00e1 6800ccea fetch 1 ,mem_24g_rf_hop_ch 
+00e2 243a00b3 nbranch p_g24_rf_hop_attemp_again ,blank 
+00e3 704bfa02 jam 2 ,mem_24g_max_retry 
+00e4 20200204 branch p_g24_ch 
+
+p_g24_txdata_prep:
+00e5 6800cbc5 fetch 1 ,mem_24g_pairing_sm 
+00e6 c0ff815e bne state_24g_pairing_success ,p_g24_pairing_sm 
+
+p_g24_txdata_prep_packeage_data:
+00e7 204000eb call p_g24_package_data 
+
+p_g24_txdata_enable_tx:
+00e8 204001f2 call p_g24_transmit_prep 
+00e9 704bba01 jam ensure_on_24g ,mem_24g_ensure 
+00ea 20600000 rtn 
+
+p_g24_package_data:
+00eb 68014ce6 fetch 2 ,mem_cb_24g_data 
+00ec 20407f9c call callback_func 
+00ed 203400f1 branch p_g24_accumulate_mouse_data ,user 
+00ee 6803cb52 fetch 7 ,mem_24g_txbuf + 1 
+00ef 207a0000 rtn blank 
+00f0 20207fe7 branch enable_user 
+
+p_g24_accumulate_mouse_data:
+00f1 704be100 jam 0 ,mem_24g_abort_pac 
+00f2 1a20fe01 add rega ,1 ,pdata 
+00f3 6000cbb5 store 1 ,mem_24g_datalen 
+00f4 20400094 call p_g24_transmit_rf_ctrl_clear 
+00f5 6000cb51 store 1 ,mem_24g_txbuf 
+00f6 e8a88000 ifetcht 1 ,contw 
+00f7 ea408000 ifetch 1 ,regb 
+00f8 9841fe00 ior temp ,pdata 
+00f9 e0a08000 istore 1 ,contw 
+00fa 1a40a401 increase 1 ,regb 
+00fb ea420000 ifetch 4 ,regb 
+00fc e0a20000 istore 4 ,contw 
+00fd 1a40a404 increase 4 ,regb 
+00fe d8a04b57 arg mem_24g_txbuf + 6 ,contw 
+00ff df200002 arg 2 ,loopcnt 
+
+p_g24_accumulation_loop:
+0100 ea408000 ifetch 1 ,regb 
+0101 e8a88000 ifetcht 1 ,contw 
+0102 9840fe00 iadd temp ,pdata 
+0103 e0a08000 istore 1 ,contw 
+0104 1a40a401 increase 1 ,regb 
+0105 c2000100 loop p_g24_accumulation_loop 
+0106 20600000 rtn 
+
+p_g24_transmit_packet:
+0107 704bbe00 jam 0 ,mem_24g_retry 
+
+p_g24_transmit_loop:
+0108 d9600d00 arg param_rx_setup ,timeup 
+0109 34730200 until clkn_rt ,meet 
+010a 20400123 call p_g24_transmit_receive_ack 
+010b 6800cbf1 fetch 1 ,mem_24g_no_ack 
+010c c1008000 rtneq no_ack_24g 
+010d 242c0132 nbranch p_g24_retransmit ,sync 
+010e 24378132 nbranch p_g24_retransmit ,user3 
+010f 2040011e call p_g24_txbuf_clear 
+0110 2040014e call p_g24_ackpayload_parse 
+0111 2040040c call power_ctrl_pac_succ_incrs 
+
+p_g24_transmit_next_packet:
+0112 6800cbb4 fetch 1 ,mem_24g_pid 
+0113 1fe0fe01 increase 1 ,pdata 
+0114 6000cbb4 store 1 ,mem_24g_pid 
+0115 6800cbc5 fetch 1 ,mem_24g_pairing_sm 
+0116 c0ff8121 bne state_24g_pairing_success ,p_g24_paring_mode_start 
+0117 204000c3 call p_g24_transmit_succ_rf_config 
+
+p_g24_transmit_abandon:
+0118 58000000 setarg 0 
+0119 60014bbb store 2 ,mem_24g_txfail_cnt 
+011a 6000cbbd store 1 ,mem_24g_get_ack_fail 
+011b 6000cce9 store 1 ,mem_24g_hop_pac_retry 
+011c 704bba00 jam ensure_off_24g ,mem_24g_ensure 
+011d 20600000 rtn 
+
+p_g24_txbuf_clear:
+011e df200004 arg 4 ,loopcnt 
+011f d8a04b51 arg mem_24g_txbuf ,contw 
+0120 20207ec6 branch memset0 
+
+p_g24_paring_mode_start:
+0121 20400409 call power_ctrl_pac_succ_cnt_init 
+0122 20200178 branch p_g24_paring_mode 
+
+p_g24_transmit_receive_ack:
+0123 7857fc00 disable user3 
+0124 2040026b call p_g24_transmit 
+0125 6800cbf1 fetch 1 ,mem_24g_no_ack 
+0126 c0008130 beq no_ack_24g ,p_g24_transmit_no_ack 
+0127 18002a00 force 0 ,radio_ctrl 
+0128 68024bdd fetch 4 ,mem_24g_addr 
+0129 98001200 iforce access 
+012a 68088017 fetcht 1 ,mem_last_freq 
+012b 2040291f call set_freq_rx 
+012c 20402924 call rf_rx_enable 
+012d 20400227 call p_g24_receive_rxon 
+012e 20578263 call p_g24_end_of_packet ,user3 
+012f 20600000 rtn 
+
+p_g24_transmit_no_ack:
+0130 20400263 call p_g24_end_of_packet 
+0131 20200112 branch p_g24_transmit_next_packet 
+
+p_g24_retransmit:
+0132 6800cbbd fetch 1 ,mem_24g_get_ack_fail 
+0133 1fe0fe01 increase 1 ,pdata 
+0134 6000cbbd store 1 ,mem_24g_get_ack_fail 
+0135 6800cbc5 fetch 1 ,mem_24g_pairing_sm 
+0136 c0ff8146 bne state_24g_pairing_success ,p_g24_tx_paring_retry 
+0137 6808cbbe fetcht 1 ,mem_24g_retry 
+0138 18408401 increase 1 ,temp 
+0139 6008cbbe storet 1 ,mem_24g_retry 
+013a 6800cbfa fetch 1 ,mem_24g_max_retry 
+013b 98467e00 isub temp ,pdata 
+013c 243a0108 nbranch p_g24_transmit_loop ,blank 
+013d 6800ccec fetch 1 ,mem_24g_rf_work_stage 
+013e c00180ac beq 3 ,p_g24_transmit_pac_fail_hop_stage3 
+013f 6800cce9 fetch 1 ,mem_24g_hop_pac_retry 
+0140 1fe0fe01 increase 1 ,pdata 
+0141 6000cce9 store 1 ,mem_24g_hop_pac_retry 
+0142 c00100a1 beq 2 ,p_g24_transmit_hop_pac_fail 
+0143 20400098 call p_g24_hop_ch_enable 
+0144 704bfa01 jam 1 ,mem_24g_max_retry 
+0145 20200107 branch p_g24_transmit_packet 
+
+p_g24_tx_paring_retry:
+0146 6800cbbd fetch 1 ,mem_24g_get_ack_fail 
+0147 c1ff8000 rtnne 0xff 
+0148 704bbd00 jam 0 ,mem_24g_get_ack_fail 
+0149 2020014c branch p_g24_stop_g24_mode 
+
+p_g24_tx_attempt_fail:
+014a 58000000 setarg 0 
+014b 60014bbb store 2 ,mem_24g_txfail_cnt 
+
+p_g24_stop_g24_mode:
+014c 700a993a jam bt_evt_24g_attempt_fail ,mem_fifo_temp 
+014d 20207d86 branch ui_ipc_send_event 
+
+p_g24_ackpayload_parse:
+014e 204001d7 call p_g24_read_len_pid_crc 
+014f 6800cbb3 fetch 1 ,mem_24g_rxdata_length 
+0150 207a0000 rtn blank 
+0151 98007200 iforce loopcnt 
+0152 d8c04b31 arg mem_24g_rxbuf + 2 ,contr 
+0153 d8a04b93 arg mem_24g_rxpayload ,contw 
+0154 20207f01 branch memcpy 
+
+p_g24_start_pairing_sm1:
+0155 79200026 set1 mark_24g ,mark 
+0156 20400159 call p_g24_pair_init 
+
+p_g24_set_pairing_sm_1:
+0157 704bc501 jam state_24g_pairing_1 ,mem_24g_pairing_sm 
+0158 20600000 rtn 
+
+p_g24_pair_init:
+0159 7041de20 jam tx_power_pair ,mem_tx_power 
+015a 704bb400 jam 0 ,mem_24g_pid 
+015b 704bbf4e jam g24_pair_ch ,mem_24g_ch 
+015c 68024bc1 fetch 4 ,mem_24g_paring_addr 
+015d 202001e4 branch p_g24_update_addr_and_synccrc8 
+
+p_g24_pairing_sm:
+015e 6800cbba fetch 1 ,mem_24g_ensure 
+015f c000ffe7 beq ensure_on_24g ,enable_user 
+0160 6800cbc5 fetch 1 ,mem_24g_pairing_sm 
+0161 c0008165 beq state_24g_pairing_1 ,p_g24_pairing_sm_1 
+0162 c0010168 beq state_24g_pairing_2 ,p_g24_pairing_sm_2 
+0163 c001816b beq state_24g_pairing_3 ,p_g24_pairing_sm_3 
+0164 20202a8c branch assert 
+
+p_g24_pairing_sm_1:
+0165 704bc511 jam state_24g_pairing_1_waiting_ack ,mem_24g_pairing_sm 
+0166 70119eaa jam 0xaa ,mem_24g_common_temp 
+0167 2020016d branch p_g24_pairing_sm_common 
+
+p_g24_pairing_sm_2:
+0168 704bc512 jam state_24g_pairing_2_waiting_ack ,mem_24g_pairing_sm 
+0169 70119e55 jam 0x55 ,mem_24g_common_temp 
+016a 2020016d branch p_g24_pairing_sm_common 
+
+p_g24_pairing_sm_3:
+016b 704bc513 jam state_24g_pairing_3_waiting_ack ,mem_24g_pairing_sm 
+016c 70119e22 jam 0x22 ,mem_24g_common_temp 
+
+p_g24_pairing_sm_common:
+016d 6800cbb6 fetch 1 ,mem_24g_data_type 
+016e 1fe17e07 and_into bits_data ,pdata 
+016f 6000919f store 1 ,mem_24g_common_temp + 1 
+0170 68024bec fetch 4 ,mem_24g_device_addr 
+0171 600211a0 store 4 ,mem_24g_common_temp + 2 
+
+p_g24_put_pairing_data_in_buff:
+0172 7011a400 jam 0 ,mem_24g_common_temp + 6 
+0173 da20119e arg mem_24g_common_temp ,rega 
+0174 d8400007 arg 7 ,temp 
+0175 204001d2 call p_g24_put_data_in_buff 
+0176 204000e8 call p_g24_txdata_enable_tx 
+0177 20207fe7 branch enable_user 
+
+p_g24_paring_mode:
+0178 6800cbc5 fetch 1 ,mem_24g_pairing_sm 
+0179 c17f8000 rtneq state_24g_pairing_success 
+017a c008817e beq state_24g_pairing_1_waiting_ack ,p_g24_pairing_sm_1_waiting_ack 
+017b c0090180 beq state_24g_pairing_2_waiting_ack ,p_g24_pairing_sm_2_waiting_ack 
+017c c0098182 beq state_24g_pairing_3_waiting_ack ,p_g24_pairing_sm_3_waiting_ack 
+017d 20600000 rtn 
+
+p_g24_pairing_sm_1_waiting_ack:
+017e 704bc502 jam state_24g_pairing_2 ,mem_24g_pairing_sm 
+017f 20200118 branch p_g24_transmit_abandon 
+
+p_g24_pairing_sm_2_waiting_ack:
+0180 704bc503 jam state_24g_pairing_3 ,mem_24g_pairing_sm 
+0181 20200118 branch p_g24_transmit_abandon 
+
+p_g24_pairing_sm_3_waiting_ack:
+0182 704bc5ff jam state_24g_pairing_success ,mem_24g_pairing_sm 
+0183 700a9939 jam bt_evt_24g_pairing_complete ,mem_fifo_temp 
+0184 20407d86 call ui_ipc_send_event 
+0185 68024b95 fetch 4 ,mem_24g_rxpayload + 2 
+0186 204001e4 call p_g24_update_addr_and_synccrc8 
+0187 20200118 branch p_g24_transmit_abandon 
+
+p_g24_start_24g_mode:
+0188 793f8026 set0 mark_24g ,mark 
+0189 204001c8 call p_g24_ch_syncword_crc8_init 
+018a 6800cbc5 fetch 1 ,mem_24g_pairing_sm 
+018b c1ff8000 rtnne state_24g_pairing_success 
+018c 2040019d call p_g24_tx_attemp_data_prep 
+
+p_g24_tx_attemp_dongle:
+018d 58000000 setarg 0 
+018e 60014be2 store 2 ,mem_24g_check_dongle_times 
+
+p_g24_tx_attemp_dongle_loop:
+018f 20402afa call lpo_calibration 
+0190 200007d0 nop 2000 
+0191 6800cbe2 fetch 1 ,mem_24g_check_dongle_times 
+0192 c07f814c beq 0xff ,p_g24_stop_g24_mode 
+0193 20400123 call p_g24_transmit_receive_ack 
+0194 242c01a6 nbranch p_g24_attemp_txdata_retry ,sync 
+0195 243781a6 nbranch p_g24_attemp_txdata_retry ,user3 
+
+p_g24_tx_attemp_dongle_succ:
+0196 79200026 set1 mark_24g ,mark 
+0197 58000000 setarg 0 
+0198 60014be2 store 2 ,mem_24g_check_dongle_times 
+0199 700a993c jam bt_evt_24g_attempt_success ,mem_fifo_temp 
+019a 20407d86 call ui_ipc_send_event 
+019b 2040011e call p_g24_txbuf_clear 
+019c 2020006e branch p_g24_transmit_by_interrupt_enable 
+
+p_g24_tx_attemp_data_prep:
+019d 70119eff jam 0xff ,mem_24g_common_temp 
+019e 6800cbb6 fetch 1 ,mem_24g_data_type 
+019f 6000919f store 1 ,mem_24g_common_temp + 1 
+01a0 68024bec fetch 4 ,mem_24g_device_addr 
+01a1 600211a0 store 4 ,mem_24g_common_temp + 2 
+01a2 d8400006 arg 6 ,temp 
+01a3 da20119e arg mem_24g_common_temp ,rega 
+01a4 204001d2 call p_g24_put_data_in_buff 
+01a5 202001f2 branch p_g24_transmit_prep 
+
+p_g24_attemp_txdata_retry:
+01a6 68014be2 fetch 2 ,mem_24g_check_dongle_times 
+01a7 1fe0fe01 increase 1 ,pdata 
+01a8 60014be2 store 2 ,mem_24g_check_dongle_times 
+01a9 20400204 call p_g24_ch 
+01aa 2020018f branch p_g24_tx_attemp_dongle_loop 
+
+p_g24_auto_pair_start:
+01ab 793f8026 set0 mark_24g ,mark 
+01ac 204001c6 call p_g24_auto_pair_all_powerful 
+01ad 2040019d call p_g24_tx_attemp_data_prep 
+
+p_g24_auto_pair_restart:
+01ae 704be200 jam 0 ,mem_24g_check_dongle_times 
+
+p_g24_auto_pair_start_loop:
+01af 20402afa call lpo_calibration 
+01b0 200007d0 nop 2000 
+01b1 6800cbe2 fetch 1 ,mem_24g_check_dongle_times 
+01b2 c07f814c beq 0xff ,p_g24_stop_g24_mode 
+01b3 20400123 call p_g24_transmit_receive_ack 
+01b4 242c01bc nbranch p_g24_auto_pair_retry ,sync 
+01b5 243781bc nbranch p_g24_auto_pair_retry ,user3 
+01b6 2040014e call p_g24_ackpayload_parse 
+01b7 68024bdd fetch 4 ,mem_24g_addr 
+01b8 680a4bc1 fetcht 4 ,mem_24g_paring_addr 
+01b9 98467c00 isub temp ,null 
+01ba 20228155 branch p_g24_start_pairing_sm1 ,zero 
+01bb 20200196 branch p_g24_tx_attemp_dongle_succ 
+
+p_g24_auto_pair_retry:
+01bc 6800cbe2 fetch 1 ,mem_24g_check_dongle_times 
+01bd 1fe0fe01 increase 1 ,pdata 
+01be 6000cbe2 store 1 ,mem_24g_check_dongle_times 
+01bf 6800ccf3 fetch 1 ,mem_24g_auto_paring_switch 
+01c0 1fe0fe01 increase 1 ,pdata 
+01c1 1fe17e01 and_into 1 ,pdata 
+01c2 6000ccf3 store 1 ,mem_24g_auto_paring_switch 
+01c3 c00001ca beq 0 ,p_g24_auto_pair_device_attemp 
+01c4 c00081cc beq 1 ,p_g24_auto_pair_pair_attemp 
+01c5 20600000 rtn 
+
+p_g24_auto_pair_all_powerful:
+01c6 7041de20 jam tx_power_pair ,mem_tx_power 
+01c7 2040032b call p_mouse_read_24g_addr 
+
+p_g24_ch_syncword_crc8_init:
+01c8 204001e5 call p_g24_syncword_crc8 
+01c9 20200204 branch p_g24_ch 
+
+p_g24_auto_pair_device_attemp:
+01ca 204001c6 call p_g24_auto_pair_all_powerful 
+01cb 202001af branch p_g24_auto_pair_start_loop 
+
+p_g24_auto_pair_pair_attemp:
+01cc 20400159 call p_g24_pair_init 
+01cd 202001af branch p_g24_auto_pair_start_loop 
+
+p_g24_check_51cmd_stop_24g:
+01ce 793f8026 set0 mark_24g ,mark 
+01cf 204053ce call le_disable 
+
+p_mouse_disable_g24_pairing_flag:
+01d0 d8e00003 arg mosue_24g_pairing_flag ,queue 
+01d1 202043d2 branch mouse_disable_function_flag 
+
+p_g24_put_data_in_buff:
+01d2 6008cbb5 storet 1 ,mem_24g_datalen 
+01d3 18427200 copy temp ,loopcnt 
+01d4 d8a04b51 arg mem_24g_txbuf ,contw 
+01d5 1a220c00 copy rega ,contr 
+01d6 20207f01 branch memcpy 
+
+p_g24_read_len_pid_crc:
+01d7 6800cb30 fetch 1 ,mem_24g_rxbuf + 1 
+01d8 1fe97e00 rshift3 pdata ,pdata 
+01d9 6000cbb3 store 1 ,mem_24g_rxdata_length 
+01da 1fe0fe01 increase 1 ,pdata 
+01db d8c04b30 arg mem_24g_rxbuf + 1 ,contr 
+01dc 98c08c00 iadd contr ,contr 
+01dd e8c18000 ifetch 3 ,contr 
+01de 6001cbf2 store 3 ,mem_24g_sta_crc 
+01df 6800cb30 fetch 1 ,mem_24g_rxbuf + 1 
+01e0 1fe37e00 rshift pdata ,pdata 
+01e1 1fe17e03 and pdata ,0x03 ,pdata 
+01e2 6000cbf8 store 1 ,mem_24g_sta_pid 
+01e3 20600000 rtn 
+
+p_g24_update_addr_and_synccrc8:
+01e4 60024bdd store 4 ,mem_24g_addr 
+
+p_g24_syncword_crc8:
+01e5 da200000 arg 0 ,rega 
+01e6 df200004 arg 4 ,loopcnt 
+01e7 d8c04bdd arg mem_24g_addr ,contr 
+
+p_g24_syncword_crc8_loop:
+01e8 e8c08000 ifetch 1 ,contr 
+01e9 9a20a200 iadd rega ,rega 
+01ea c20001e8 loop p_g24_syncword_crc8_loop 
+01eb 1a227e00 copy rega ,pdata 
+01ec 60014c66 store 2 ,mem_24g_syncword 
+01ed 6800cc66 fetch 1 ,mem_24g_syncword 
+01ee 6808cc67 fetcht 1 ,mem_24g_syncword + 1 
+01ef 9840fe00 iadd temp ,pdata 
+01f0 6000cc68 store 1 ,mem_24g_syncword_crc8 
+01f1 20600000 rtn 
+
+p_g24_transmit_prep:
+01f2 6800cbb5 fetch 1 ,mem_24g_datalen 
+01f3 1fe0fe02 increase 2 ,pdata 
+01f4 6000cbb7 store 1 ,mem_24g_txlen 
+01f5 6800cbb6 fetch 1 ,mem_24g_data_type 
+01f6 6000cb71 store 1 ,mem_24g_txpayload 
+01f7 6800cbb5 fetch 1 ,mem_24g_datalen 
+01f8 1fe9fe00 lshift3 pdata ,pdata 
+01f9 6808cbb4 fetcht 1 ,mem_24g_pid 
+01fa 18410403 and temp ,0x03 ,temp 
+01fb 18438400 lshift temp ,temp 
+01fc 9841fe00 ior temp ,pdata 
+01fd 6808cbf1 fetcht 1 ,mem_24g_no_ack 
+01fe 9840fe00 iadd temp ,pdata 
+01ff e0a08000 istore 1 ,contw 
+0200 6800cbb5 fetch 1 ,mem_24g_datalen 
+0201 98007200 iforce loopcnt 
+0202 d8c04b51 arg mem_24g_txbuf ,contr 
+0203 20207f01 branch memcpy 
+
+p_g24_ch:
+0204 6808cbc0 fetcht 1 ,mem_24g_current_ch_number 
+0205 20400208 call p_g24_ch_map_size 
+0206 6008cbc0 storet 1 ,mem_24g_current_ch_number 
+0207 20600000 rtn 
+
+p_g24_ch_map_size:
+0208 2040020c call p_g24_ch_calc 
+0209 18408401 increase 1 ,temp 
+020a 18410403 and_into 3 ,temp 
+020b 20600000 rtn 
+
+p_g24_ch_calc:
+020c 6800cbdd fetch 1 ,mem_24g_addr 
+020d 1fe17e03 and_into 0x03 ,pdata 
+020e 1fefa204 mul32 pdata ,4 ,rega 
+020f 58004bc6 setarg mem_24g_ch_map1 
+0210 9a20fe00 iadd rega ,pdata 
+0211 98408c00 iadd temp ,contr 
+0212 e8c08000 ifetch 1 ,contr 
+0213 6000cbbf store 1 ,mem_24g_ch 
+0214 20600000 rtn 
+
+p_g24_prep:
+0215 7844fc00 disable enable_crc 
+0216 7843fc00 disable enable_white 
+0217 58555555 setarg 0x555555 
+0218 98001e00 iforce crc24_init 
+0219 6800cbbf fetch 1 ,mem_24g_ch 
+021a 1fed8400 reverse pdata ,temp 
+021b 79200401 set1 1 ,temp 
+021c 18431c00 rshift temp ,white_init 
+021d 20600000 rtn 
+
+p_g24_receive_packet:
+021e 204053c4 call le_enable 
+021f 68024bdd fetch 4 ,mem_24g_addr 
+0220 98001200 iforce access 
+0221 20402918 call set_sync_on 
+0222 6808cbbf fetcht 1 ,mem_24g_ch 
+0223 2040291f call set_freq_rx 
+0224 58000500 setarg param_pll_setup 
+0225 20402a8f call sleep 
+0226 20402924 call rf_rx_enable 
+
+p_g24_receive_rxon:
+0227 20400215 call p_g24_prep 
+0228 7857fc00 disable user3 
+0229 7826fc00 enable decode_fec0 
+022a 7830fc00 enable is_rx 
+022b 78507c00 disable is_tx 
+022c 78287c00 enable swfine 
+022d 68014bb8 fetch 2 ,mem_24g_rx_window 
+022e 98003600 iforce stop_watch 
+022f 37c18400 correlate null ,timeout 
+0230 242c0267 nbranch p_g24_sync_timeout ,sync 
+0231 7846fc00 disable decode_fec0 
+0232 7825fc00 enable decode_fec1 
+0233 7823fc00 enable enable_white 
+0234 7824fc00 enable enable_crc 
+0235 20400260 call p_g24_receive_byte 
+0236 6000cc69 store 1 ,mem_24g_get_syncword_crc8 
+0237 6808cc68 fetcht 1 ,mem_24g_syncword_crc8 
+0238 98467c00 isub temp ,null 
+0239 24228263 nbranch p_g24_end_of_packet ,zero 
+023a 20400260 call p_g24_receive_byte 
+023b 6000cb2f store 1 ,mem_24g_rxbuf 
+023c 6800cbfb fetch 1 ,mem_24g_mode 
+023d 1fe67c02 sub pdata ,rx_24g ,null 
+023e 20228243 branch p_g24_receive_skip ,zero 
+023f 6800cb2f fetch 1 ,mem_24g_rxbuf 
+0240 6808cbb6 fetcht 1 ,mem_24g_data_type 
+0241 a8400e00 icompare bits_data ,temp 
+0242 24208263 nbranch p_g24_end_of_packet ,true 
+
+p_g24_receive_skip:
+0243 20400260 call p_g24_receive_byte 
+0244 e0a08000 istore 1 ,contw 
+0245 1fe97e00 rshift3 pdata ,pdata 
+0246 1fe1721f and pdata ,0x1f ,loopcnt 
+0247 2022824b branch p_g24rx_nopayload ,zero 
+
+p_g24rx_loop:
+0248 20400260 call p_g24_receive_byte 
+0249 e0a08000 istore 1 ,contw 
+024a c2000248 loop p_g24rx_loop 
+
+p_g24rx_nopayload:
+024b 18a22200 copy contw ,rega 
+024c 20400260 call p_g24_receive_byte 
+024d 6000ccf0 store 1 ,mem_rssi_hex_received 
+024e 1a220a00 copy rega ,contw 
+024f 09800018 parse demod ,bucket ,24 
+0250 78287c00 enable swfine 
+0251 db600664 arg param_sifs ,stop_watch 
+0252 1fef7e00 rshift32 pdata ,pdata 
+0253 1ff17e00 rshift16 pdata ,pdata 
+0254 e0a18000 istore 3 ,contw 
+0255 7845fc00 disable decode_fec1 
+0256 20230263 branch p_g24_end_of_packet ,crc_failed 
+0257 7837fc00 enable user3 
+0258 68008017 fetch 1 ,mem_last_freq 
+0259 1fe0a200 add pdata ,0 ,rega 
+025a 20402981 call rf_write_freq 
+025b 7846fc00 disable decode_fec0 
+025c 20402918 call set_sync_on 
+025d 6800ccf0 fetch 1 ,mem_rssi_hex_received 
+025e 2040001e call p_rssi_signal 
+025f 20600000 rtn 
+
+p_g24_receive_byte:
+0260 09800008 parse demod ,bucket ,8 
+0261 19897e00 rshift3 pwindow ,pdata 
+0262 20600000 rtn 
+
+p_g24_end_of_packet:
+0263 784dfc00 disable encode_fec1 
+0264 7845fc00 disable decode_fec1 
+0265 2040264d call end_of_packet 
+0266 20600000 rtn 
+
+p_g24_sync_timeout:
+0267 20200263 branch p_g24_end_of_packet 
+
+p_g24_set_freq_tx:
+0268 20402918 call set_sync_on 
+0269 6808cbbf fetcht 1 ,mem_24g_ch 
+026a 20202933 branch set_freq_tx 
+
+p_g24_transmit:
+026b 204053c4 call le_enable 
+026c 68024bdd fetch 4 ,mem_24g_addr 
+026d 98001200 iforce access 
+026e 20400215 call p_g24_prep 
+026f 20400268 call p_g24_set_freq_tx 
+0270 79202a00 set1 txgfsk ,radio_ctrl 
+0271 782efc00 enable encode_fec0 
+0272 78307c00 enable is_tx 
+0273 7850fc00 disable is_rx 
+0274 19317e00 rshift16 access ,pdata 
+0275 1fecfe00 rshift8 pdata ,pdata 
+0276 1ff1fe00 rshift4 pdata ,pdata 
+0277 08008628 inject mod ,40 
+0278 784efc00 disable encode_fec0 
+0279 782dfc00 enable encode_fec1 
+027a 7823fc00 enable enable_white 
+027b 7824fc00 enable enable_crc 
+027c 6800cc68 fetch 1 ,mem_24g_syncword_crc8 
+027d 08008608 inject mod ,8 
+027e 6800cbb7 fetch 1 ,mem_24g_txlen 
+027f 98007200 iforce loopcnt 
+0280 d8c04b71 arg mem_24g_txpayload ,contr 
+
+p_g24tr_loop:
+0281 e8c08000 ifetch 1 ,contr 
+0282 08008608 inject mod ,8 
+0283 c2000281 loop p_g24tr_loop 
+0284 78247c00 enable enable_parity 
+0285 08008618 inject mod ,24 
+0286 78447c00 disable enable_parity 
+0287 37d38200 until null ,tx_clear 
+0288 20000064 nop 100 
+0289 784efc00 disable encode_fec0 
+028a 784dfc00 disable encode_fec1 
+028b 20600000 rtn 
+
+p_g24_timer_check:
+028c 20407fe9 call disable_user 
+028d 680a4bd6 fetcht 4 ,mem_24g_tx_btclk 
+028e 1c427e00 copy clkn_bt ,pdata 
+028f 98467c00 isub temp ,null 
+0290 24412d18 ncall g24_timer_timeout ,positive 
+0291 1fe22400 copy pdata ,regb 
+0292 68024bd6 fetch 4 ,mem_24g_tx_btclk 
+0293 6808cbda fetcht 1 ,mem_24g_interval 
+0294 98408400 iadd temp ,temp 
+0295 1a427e00 copy regb ,pdata 
+0296 98467c00 isub temp ,null 
+0297 24610000 nrtn positive 
+0298 793ffe1c set0 28 ,pdata 
+0299 60024bd6 store 4 ,mem_24g_tx_btclk 
+029a 20207fe7 branch enable_user 
+
+p_rssi_noise:
+029b 204029bb call save_rssi 
+029c 207a0000 rtn blank 
+029d 6808cc6f fetcht 1 ,mem_rssi_noise_index 
+029e da200d9e arg mem_rssi_noise_buffer ,rega 
+029f 204002a2 call p_rssi_store 
+02a0 6008cc6f storet 1 ,mem_rssi_noise_index 
+02a1 20600000 rtn 
+
+p_rssi_store:
+02a2 1a227e00 copy rega ,pdata 
+02a3 98408a00 iadd temp ,contw 
+02a4 68008018 fetch 1 ,mem_rssi 
+02a5 e0a08000 istore 1 ,contw 
+02a6 18408401 increase 1 ,temp 
+02a7 18410407 and_into rssi_buf_len_signal ,temp 
+02a8 20600000 rtn 
+
+p_rssi_average:
+02a9 d8400000 arg 0 ,temp 
+02aa df200008 arg rssi_buf_len_signal + 1 ,loopcnt 
+02ab 1a220c00 copy rega ,contr 
+
+p_rssi_average_loop:
+02ac e8c08000 ifetch 1 ,contr 
+02ad 98408400 iadd temp ,temp 
+02ae c20002ac loop p_rssi_average_loop 
+02af 18497e00 rshift3 temp ,pdata 
+02b0 1fe20400 copy pdata ,temp 
+02b1 c6930000 rtnmark0 mark_24g 
+02b2 1fe6fc0a div pdata ,10 
+02b3 20407f86 call wait_div_end 
+02b4 1807fe00 quotient pdata 
+02b5 1ff27e00 lshift4 pdata ,pdata 
+02b6 18070400 remainder temp 
+02b7 98418400 ior temp ,temp 
+02b8 20600000 rtn 
+02b9 20600000 rtn 
+
+p_mouse_before_lpm:
+02ba c6130000 rtnmark1 mark_24g 
+02bb 204002c3 call p_mouse_setgpio_lpm 
+02bc 6800c040 fetch 1 ,mem_context 
+02bd c30002c0 bbit0 state_inconn ,p_clear_wake 
+02be 680080a0 fetch 1 ,mem_lpm_current_mult 
+02bf 247a0000 nrtn blank 
+
+p_clear_wake:
+02c0 58000000 setarg 0 
+02c1 600400a1 store 8 ,mem_gpio_wakeup_low 
+02c2 20600000 rtn 
+
+p_mouse_setgpio_lpm:
+02c3 204002cc call p_mouse_set_sdio_high 
+02c4 204002c0 call p_clear_wake 
+
+p_mouse_setgpio_lpm_before:
+02c5 20403ebf call mouse_lpm_before_common 
+02c6 68120070 hfetch 4 ,core_gpio_oe0 
+02c7 681a0078 hfetcht 4 ,core_gpio_pu0 
+02c8 98418400 ior temp ,temp 
+02c9 18440400 invert temp ,temp 
+02ca 601a007c hstoret 4 ,core_gpio_pd0 
+02cb 20600000 rtn 
+
+p_mouse_set_sdio_high:
+02cc 6800cafe fetch 1 ,mem_mouse_init_sensor_reset_flag 
+02cd 207a0000 rtn blank 
+02ce 202003c6 branch p_mouse_seting_dpi_diff 
+
+p_device_init:
+02cf 20403416 call app_lpm_mult_enable 
+02d0 203582d7 branch p_device_init_common ,wake 
+02d1 6800c1de fetch 1 ,mem_tx_power 
+02d2 6000cc6c store 1 ,mem_tx_power_temp 
+02d3 20400409 call power_ctrl_pac_succ_cnt_init 
+02d4 6800c685 fetch 1 ,mem_ui_button_timeout 
+02d5 6000c6da store 1 ,mem_combination_ui_button_count 
+02d6 204043ca call mouse_bt_discovery_button_down_disable 
+
+p_device_init_common:
+02d7 204002dc call p_mouse_init 
+02d8 202074b9 branch enable_authrom 
+
+p_mouse_tx_power_init:
+02d9 6800cc6c fetch 1 ,mem_tx_power_temp 
+02da 6000c1de store 1 ,mem_tx_power 
+02db 20600000 rtn 
+
+p_mouse_init:
+02dc 2455831b ncall p_mouse_setting_config ,wake 
+02dd 204002fa call p_mouse_spi_init 
+02de 20758000 rtn wake 
+02df 20400350 call p_mouse_cb_fuction 
+02e0 6800cb26 fetch 1 ,mem_power_on_flag 
+02e1 c28102e4 bbit1 2 ,p_mouse_skip_24g_pair 
+02e2 20404083 call mouse_check_key_gpio 
+02e3 c00282e8 beq mouse_lm_button ,p_mouse_24g_pairing_button 
+
+p_mouse_skip_24g_pair:
+02e4 20200338 branch p_mouse_wakeup_from_power 
+
+p_mouse_check_reconn_target:
+02e5 204002d9 call p_mouse_tx_power_init 
+02e6 6800c210 fetch 1 ,mem_xrecord_mode 
+02e7 20600000 rtn 
+
+p_mouse_24g_pairing_button:
+02e8 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+02e9 c4088000 rtnbit0 mouse_enable_24g 
+02ea c3818000 rtnbit1 mosue_24g_pairing_flag 
+02eb c6130000 rtnmark1 mark_24g 
+02ec 20404482 call mouse_devce_led_off 
+02ed d8e00003 arg mosue_24g_pairing_flag ,queue 
+02ee 204043ce call mouse_enable_function_flag 
+02ef 58000000 setarg 0 
+02f0 600146ae store 2 ,mem_mouse_direct_timer 
+02f1 6000c6b4 store 1 ,mem_mouse_send_blank_timer 
+02f2 60014be2 store 2 ,mem_24g_check_dongle_times 
+02f3 204042ca call mouse_stop_discovery 
+02f4 20200155 branch p_g24_start_pairing_sm1 
+
+p_mouse_dpi_config:
+02f5 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+02f6 c30a3d66 bbit0 mouse_enable_eeprom ,mouse_dpi_config 
+02f7 6800c77a fetch 1 ,mem_mouse_dpi 
+02f8 c07fbd66 beq 0xff ,mouse_dpi_config 
+02f9 20203d80 branch mouse_seting_dpi + 2 
+
+p_mouse_spi_init:
+02fa 70421276 jam 0x76 ,mem_spi_init_clk 
+02fb 20203d36 branch mouse_spi_init 
+
+p_mouse_init_sunt:
+02fc 204002fa call p_mouse_spi_init 
+02fd 204040c0 call mouse_spi_sdio_gpio_pollup 
+02fe 6800c6e0 fetch 1 ,mem_config_sensor_type 
+02ff c002c0d5 beq p3610 ,mouse_init_3610sensor 
+
+p_mouse_init_sensor:
+0300 204040d9 call mouse_read_sensor_id 
+0301 c018030a beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge 
+0302 c018830c beq p3065_id1 ,p_mouse_p3065_init_param 
+0303 204040d1 call mouse_twspi_reset 
+0304 200003e8 nop 1000 
+0305 20200300 branch p_mouse_init_sensor 
+
+p_mouse_init_sensor_reset:
+0306 704afe01 jam 1 ,mem_mouse_init_sensor_reset_flag 
+0307 2040640f call spi_ncs_enable 
+0308 204002fc call p_mouse_init_sunt 
+0309 20206411 branch spi_ncs_disable 
+
+p_mouse_init_p32xx_id2_judge:
+030a 20400311 call p_mouse_sensor_poweron 
+030b 202040e0 branch mouse_init_p32xx_id2_judge 
+
+p_mouse_p3065_init_param:
+030c 20400311 call p_mouse_sensor_poweron 
+030d 6800c6de fetch 1 ,mem_sensor_id2 
+030e c03840e8 beq p3065_xy_id2 ,mouse_p3065xy_init_param 
+030f 7046e001 jam p3065 ,mem_config_sensor_type 
+0310 20600000 rtn 
+
+p_mouse_sensor_poweron:
+0311 58008006 setarg 0x8006 
+0312 20406413 call twspi_write 
+0313 20002ee0 nop 12000 
+0314 202002f5 branch p_mouse_dpi_config 
+
+p_mouse_sensor_powerdown:
+0315 58000006 setarg 0x06 
+0316 20406414 call twspi_read 
+0317 1fe1fe08 or pdata ,0x08 ,pdata 
+0318 1fed7e00 lshift8 pdata ,pdata 
+0319 1fe0fe06 add pdata ,0x06 ,pdata 
+031a 20206413 branch twspi_write 
+
+p_mouse_setting_config:
+031b 2040008e call p_g24_set_device_addr 
+031c 68108a00 hfetch 1 ,core_usb_config 
+031d 793ffe04 set0 4 ,pdata 
+031e 60108a00 hstore 1 ,core_usb_config 
+031f 20403e1e call mouse_param_init 
+0320 58001802 setarg 0x1802 
+0321 600140bd store 2 ,mem_fcomp_mul 
+0322 58000000 setarg 0 
+0323 60014154 store 2 ,mem_lpm_interval 
+0324 20403e54 call mouse_adc_init 
+
+p_mouse_init_iic:
+0325 2040659c call iic_init_390k 
+0326 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+0327 2feffe19 isolate1 mouse_enable_2k_eeprom ,pdata 
+0328 2440e5c2 ncall clear_eeprom_size_2k ,true 
+0329 2040443f call mouse_load_eeprom_dpi 
+032a 2040032d call p_mouse_init_environment 
+
+p_mouse_read_24g_addr:
+032b 20400376 call p_mouse_set_24g_addr_eeprom 
+032c 202065df branch iicd_read_eep_data 
+
+p_mouse_init_environment:
+032d 204033c4 call app_initflag_check 
+032e 2022c316 branch mouse_eeprom_load_recon_info ,zero 
+032f 20203dcb branch mouse_init_environment + 2 
+
+p_app_flag_store:
+0330 d8400002 arg 2 ,temp 
+0331 da200aaa arg mem_timeup ,rega 
+0332 da400062 arg mouse_eeprom_module_init_flag ,regb 
+0333 202065d1 branch iicd_write_protect_eep_data 
+
+p_app_initflag_check:
+0334 d8400002 arg 2 ,temp 
+0335 da200a9a arg mem_pdatatemp ,rega 
+0336 da400062 arg mouse_eeprom_module_init_flag ,regb 
+0337 202033c8 branch app_initflag_check + 4 
+
+p_mouse_wakeup_from_power:
+0338 202001ab branch p_g24_auto_pair_start 
+0339 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+033a c30f0340 bbit0 mouse_enable_wakeup_from_power ,p_mouse_wakeup_no_from_power 
+033b 68008abd fetch 1 ,mem_wakup_from_power_flag 
+033c 2fec0003 isolate0 gpio_latch ,pdata 
+033d 24208340 nbranch p_mouse_wakeup_no_from_power ,true 
+033e 204002fc call p_mouse_init_sunt 
+033f 20400315 call p_mouse_sensor_powerdown 
+
+p_mouse_wakeup_no_from_power:
+0340 6800c71f fetch 1 ,mem_reconn_times_init 
+0341 6000c71e store 1 ,mem_reconn_times 
+
+p_mouse_start_24g_mode:
+0342 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+0343 c4088000 rtnbit0 mouse_enable_24g 
+0344 20400347 call p_g24_factory_check 
+0345 203401ab branch p_g24_auto_pair_start ,user 
+0346 20200188 branch p_g24_start_24g_mode 
+
+p_g24_factory_check:
+0347 df200002 arg 2 ,loopcnt 
+0348 d8c04bdd arg mem_24g_addr ,contr 
+
+p_pdata_0xff_check:
+0349 20407fe7 call enable_user 
+034a 5800ffff setarg 0xffff 
+
+p_pdata_0xff_check_loop:
+034b e8c90000 ifetcht 2 ,contr 
+034c 98467c00 isub temp ,null 
+034d 2442ffe9 ncall disable_user ,zero 
+034e c200034b loop p_pdata_0xff_check_loop 
+034f 20600000 rtn 
+
+p_mouse_cb_fuction:
+0350 58000367 setarg p_mouse_priority_bb_event 
+0351 600141f5 store 2 ,mem_cb_bb_event_process 
+0352 58000355 setarg p_mouse_g24_package_data 
+0353 60014ce6 store 2 ,mem_cb_24g_data 
+0354 20600000 rtn 
+
+p_mouse_g24_package_data:
+0355 2020035a branch p_mouse_g24_package_data_allpower 
+
+p_mouse_g24_package_data_normal:
+0356 20404401 call mouse_g24_package_data 
+0357 6801469f fetch 2 ,mem_mouse_z 
+0358 207a0000 rtn blank 
+0359 2020006e branch p_g24_transmit_by_interrupt_enable 
+
+p_mouse_g24_package_data_allpower:
+035a 2040047c call p_g24_matrix_data 
+035b 20200357 branch p_mouse_g24_package_data_normal + 1 
+
+p_mouse_wheel_trigger:
+035c 6801469f fetch 2 ,mem_mouse_z 
+035d 207a0000 rtn blank 
+035e 70480601 jam 1 ,mem_mouse_wheel_trigger 
+035f 70480702 jam 2 ,mem_mouse_wheel_trigger_timer 
+0360 20600000 rtn 
+
+p_mouse_clear_sensor_data:
+0361 20405814 call le_set_config_more_data 
+0362 70479c01 jam 1 ,mem_mouse_clear_sensor_data_flag 
+0363 20200311 branch p_mouse_sensor_poweron 
+
+p_mouse_idle:
+0364 20407e34 call ui_check_paring_button 
+0365 20403d6a call mouse_dpi_cheak 
+0366 20203ee0 branch mouse_wheel_check 
+
+p_mouse_priority_bb_event:
+0367 1a627e00 copy regc ,pdata 
+0368 c01c836c beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete 
+0369 c01d037a beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail 
+036a c01e0385 beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success 
+036b 2020417d branch mouse_priority_bb_event + 1 
+
+p_mouse_24g_pairing_complete:
+036c 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable 
+036d d8e00003 arg mosue_24g_pairing_flag ,queue 
+036e 204043d2 call mouse_disable_function_flag 
+036f 58000000 setarg 0 
+0370 60014707 store 2 ,mem_24g_pairing_timer_count 
+0371 7046a700 jam 0 ,mem_mouse_move_flag 
+0372 2040405d call mouse_read_sensor_common 
+0373 2040006e call p_g24_transmit_by_interrupt_enable 
+0374 20400376 call p_mouse_set_24g_addr_eeprom 
+0375 202065d1 branch iicd_write_protect_eep_data 
+
+p_mouse_set_24g_addr_eeprom:
+0376 da204bdd arg mem_24g_addr ,rega 
+0377 da40005b arg mouse_g24_addr_eeprom_offect ,regb 
+0378 d8400004 arg 4 ,temp 
+0379 20600000 rtn 
+
+p_mouse_24g_attempt_fail:
+037a 704cf500 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt 
+037b 204002d9 call p_mouse_tx_power_init 
+037c 204001ce call p_g24_check_51cmd_stop_24g 
+037d 2020659a branch soft_reset_chip 
+037e 7041bd00 jam 0 ,mem_link_key_exists 
+037f 20404316 call mouse_eeprom_load_recon_info 
+0380 df200003 arg 3 ,loopcnt 
+0381 d8c04722 arg mem_device1_addr ,contr 
+0382 20400349 call p_pdata_0xff_check 
+0383 203403c2 branch p_mouse_null_enter_hibernate_count ,user 
+0384 202002e5 branch p_mouse_check_reconn_target 
+
+p_mouse_24g_attempt_success:
+0385 20203f8d branch mouse_no_data_timer_init 
+
+p_mouse_before_hibernate:
+0386 78347c00 enable user 
+0387 68120138 hfetch 4 ,0x8138 
+0388 79347e1a setflag user ,26 ,pdata 
+0389 6012004c hstore 4 ,core_lpm_reg 
+038a 20402c21 call lpm_write_ctrl 
+038b 20400390 call p_mouse_sensor_powerdown_check 
+038c 204074bd call disable_authrom 
+038d 20404482 call mouse_devce_led_off 
+038e 20403e9f call mouse_before_hibernate_wheel_gpio_set 
+038f 202002c5 branch p_mouse_setgpio_lpm_before 
+
+p_mouse_sensor_powerdown_check:
+0390 6800cafe fetch 1 ,mem_mouse_init_sensor_reset_flag 
+0391 207a0000 rtn blank 
+0392 704afe00 jam 0 ,mem_mouse_init_sensor_reset_flag 
+0393 20200315 branch p_mouse_sensor_powerdown 
+
+p_mouse_bb_event_timer:
+0394 20400399 call p_mouse_wheel_trigger_timer 
+0395 204003b9 call p_mouse_null_enter_hibernate_check 
+0396 2040039e call p_mouse_bt_discovery_check 
+0397 20404234 call mouse_check_discovery_timeout_timer 
+0398 2020423a branch mouse_check_no_data_timeout_timer 
+
+p_mouse_wheel_trigger_timer:
+0399 da604807 arg mem_mouse_wheel_trigger_timer ,regc 
+039a da40039c arg p_mouse_wheel_trigger_disable ,regb 
+039b 2020336d branch timer_single_step 
+
+p_mouse_wheel_trigger_disable:
+039c 70480600 jam 0 ,mem_mouse_wheel_trigger 
+039d 20600000 rtn 
+
+p_mouse_bt_discovery_check:
+039e 6800c6f5 fetch 1 ,mem_config_function_enable 
+039f c2824394 bbit1 enable_bt_button ,mouse_bt_discovery_by_button 
+
+p_mouse_bt_discovery_commbination_key:
+03a0 20404083 call mouse_check_key_gpio 
+03a1 c00383aa beq mouse_lmr_button ,p_mouse_bt_discovery_commbination_key_down 
+
+p_mouse_bt_discovery_commbination_key_up:
+03a2 6800c685 fetch 1 ,mem_ui_button_timeout 
+03a3 6000c6da store 1 ,mem_combination_ui_button_count 
+03a4 6800c6db fetch 1 ,mem_bt_discovey_button_statue 
+03a5 c1008000 rtneq dpi_button_state_up 
+03a6 7046db01 jam dpi_button_state_up ,mem_bt_discovey_button_statue 
+03a7 d8e00009 arg mouse_bt_discovery_button_long_down_flag ,queue 
+03a8 204043d2 call mouse_disable_function_flag 
+03a9 202043ca branch mouse_bt_discovery_button_down_disable 
+
+p_mouse_bt_discovery_commbination_key_down:
+03aa 70479e28 jam 40 ,mem_mouse_null_enter_hibernate_timer 
+03ab 204003ad call p_mouse_bt_discovery_timer 
+03ac 202043b0 branch mouse_bt_discovery_commbination_key_down + 1 
+
+p_mouse_bt_discovery_timer:
+03ad da6046da arg mem_combination_ui_button_count ,regc 
+03ae da4003b0 arg p_mouse_long_button_bt_discovery ,regb 
+03af 2020336d branch timer_single_step 
+
+p_mouse_long_button_bt_discovery:
+03b0 68014682 fetch 2 ,mem_ui_state_map 
+03b1 2feffe0b isolate1 ui_state_ble_adv ,pdata 
+03b2 2040c2d4 call mouse_stop_le_adv ,true 
+03b3 68014682 fetch 2 ,mem_ui_state_map 
+03b4 2feffe07 isolate1 ui_state_bt_reconnect ,pdata 
+03b5 2040c392 call mouse_cancel_reconnect ,true 
+03b6 d8e00009 arg mouse_bt_discovery_button_long_down_flag ,queue 
+03b7 204043ce call mouse_enable_function_flag 
+03b8 202043b8 branch mouse_long_button_bt_discovry 
+
+p_mouse_null_enter_hibernate_check:
+03b9 6800c79d fetch 1 ,mem_mouse_null_enter_hibernate_flag 
+03ba 207a0000 rtn blank 
+03bb 6800c79e fetch 1 ,mem_mouse_null_enter_hibernate_timer 
+03bc 203a03c0 branch p_mouse_null_enter_hibernate ,blank 
+03bd 1fe0ffff increase -1 ,pdata 
+03be 6000c79e store 1 ,mem_mouse_null_enter_hibernate_timer 
+03bf 20600000 rtn 
+
+p_mouse_null_enter_hibernate:
+03c0 70479d00 jam 0 ,mem_mouse_null_enter_hibernate_flag 
+03c1 2020340a branch app_enter_hibernate 
+
+p_mouse_null_enter_hibernate_count:
+03c2 70479d01 jam 1 ,mem_mouse_null_enter_hibernate_flag 
+03c3 70479e28 jam 40 ,mem_mouse_null_enter_hibernate_timer 
+03c4 20600000 rtn 
+
+p_mouse_seting_dpi:
+03c5 2040424a call mosue_dpi_led_blink_init 
+
+p_mouse_seting_dpi_diff:
+03c6 6800c6e0 fetch 1 ,mem_config_sensor_type 
+03c7 c00303c9 beq p3065_xy ,p_mouse_seting_3065xy_dpi 
+03c8 20203d81 branch mouse_seting_dpi + 3 
+
+p_mouse_seting_3065xy_dpi:
+03c9 6800c77a fetch 1 ,mem_mouse_dpi 
+03ca 205a03cf call p_mouse_3065xy_dpi_recount ,blank 
+03cb 6800c77a fetch 1 ,mem_mouse_dpi 
+03cc c000bd8a beq mouse_dpi_level2 ,mouse_set_cpi1 
+03cd c001bd8e beq mouse_dpi_level4 ,mouse_set_cpi4 
+03ce 20203d8c branch mouse_set_cpi3 
+
+p_mouse_3065xy_dpi_recount:
+03cf 70477a01 jam 1 ,mem_mouse_dpi 
+03d0 20600000 rtn 
+
+p_mouse_motion:
+03d1 78547c00 disable user 
+03d2 58000000 setarg 0 
+03d3 6003469b store 6 ,mem_mouse_x 
+03d4 20403fb5 call mouse_cheak_sensor_data 
+03d5 20404079 call mouse_zwheel 
+03d6 2040407e call mouse_t_zwheel 
+03d7 20404099 call mouse_key 
+03d8 24740000 nrtn user 
+03d9 20203fa0 branch mouse_motion + 9 
+
+p_mouse_bb_event_discovery_btn:
+03da 70479d00 jam 0 ,mem_mouse_null_enter_hibernate_flag 
+03db 70479e00 jam 0 ,mem_mouse_null_enter_hibernate_timer 
+03dc 280ffe26 isolate1 mark_24g ,mark 
+03dd 204081ce call p_g24_check_51cmd_stop_24g ,true 
+03de 2020426d branch mouse_bb_event_discovery_btn + 1 
+
+p_mouse_start_discovery:
+03df 204002d9 call p_mouse_tx_power_init 
+03e0 70479c00 jam 0 ,mem_mouse_clear_sensor_data_flag 
+03e1 68014682 fetch 2 ,mem_ui_state_map 
+03e2 c28583e5 bbit1 ui_state_ble_adv ,p_mouse_start_discovery_norandom 
+03e3 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+03e4 c30c03e5 bbit0 mouse_enable_ble_random_addre ,p_mouse_start_discovery_norandom 
+
+p_mouse_start_discovery_norandom:
+03e5 20403418 call app_lpm_mult_disable 
+03e6 68014687 fetch 2 ,mem_discovery_timeout 
+03e7 600146ac store 2 ,mem_mouse_discovery_timer 
+03e8 70016d06 jam 6 ,mem_connection_options 
+03e9 58000000 setarg 0 
+03ea 600146b0 store 2 ,mem_mouse_no_data_timer 
+03eb 600146ae store 2 ,mem_mouse_direct_timer 
+03ec d8e00007 arg mouse_store_eeprom_flag ,queue 
+03ed 204043ce call mouse_enable_function_flag 
+03ee 204043ca call mouse_bt_discovery_button_down_disable 
+03ef 202042c4 branch mouse_start_discovery_norandom + 13 
+
+p_mouse_stop_discovery:
+03f0 58000000 setarg 0 
+03f1 600146ac store 2 ,mem_mouse_discovery_timer 
+03f2 20400311 call p_mouse_sensor_poweron 
+03f3 202042cb branch mouse_stop_discovery + 1 
+
+p_twspi_reset:
+03f4 68108077 hfetch 1 ,core_gpio_out3 
+03f5 1fe17efd and_into 0xfd ,pdata 
+03f6 60108077 hstore 1 ,core_gpio_out3 
+03f7 68188073 hfetcht 1 ,core_gpio_oe3 
+03f8 18418402 or_into 0x2 ,temp 
+03f9 60188073 hstoret 1 ,core_gpio_oe3 
+03fa 204063ee call twspi_disable 
+03fb 184104fd and_into 0xfd ,temp 
+03fc 2000000d nop 13 
+03fd 204063f2 call twspi_enable 
+03fe 60188073 hstoret 1 ,core_gpio_oe3 
+03ff 20600000 rtn 
+
+p_check_51cmd_once_continue:
+0400 204062bc call lmo_fifo_check 
+0401 243a7ddb nbranch check_51cmd_restore ,blank 
+0402 68008a99 fetch 1 ,mem_fifo_temp 
+0403 c584fdd6 bmark0 mark_context ,check_51cmd_check_idle 
+0404 c0090406 beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param 
+0405 20207dca branch check_51cmd_once_continue + 2 
+
+p_check_51cmd_ble_update_connect_param:
+0406 20405890 call le_fifo_check_full 
+0407 247a0000 nrtn blank 
+0408 20205abf branch le_l2cap_tx_update_req 
+
+power_ctrl_pac_succ_cnt_init:
+0409 704cf101 jam 1 ,mem_power_ctrl_level 
+040a 704cee00 jam 0 ,mem_power_ctrl_pac_succ_cnt 
+040b 20600000 rtn 
+
+power_ctrl_pac_succ_incrs:
+040c 6800ccee fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+040d 1fe0fe01 increase 1 ,pdata 
+040e 6000ccee store 1 ,mem_power_ctrl_pac_succ_cnt 
+040f 20600000 rtn 
+
+power_ctrl_pac_succ_decrs:
+0410 6800ccee fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0411 1fe67c02 sub pdata ,2 ,null 
+0412 24410418 ncall power_ctrl_pac_succ_cnt_reinit ,positive 
+0413 6800ccee fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0414 c1000000 rtneq 0 
+0415 1fe0ffff increase -1 ,pdata 
+0416 6000ccee store 1 ,mem_power_ctrl_pac_succ_cnt 
+0417 20600000 rtn 
+
+power_ctrl_pac_succ_cnt_reinit:
+0418 704cee03 jam 3 ,mem_power_ctrl_pac_succ_cnt 
+0419 20600000 rtn 
+
+power_ctrl_start:
+041a 20600000 rtn 
+041b 68014682 fetch 2 ,mem_ui_state_map 
+041c c3858000 rtnbit1 ui_state_ble_adv 
+041d c3838000 rtnbit1 ui_state_bt_reconnect 
+041e c3830000 rtnbit1 ui_state_bt_discovery 
+041f da204c77 arg mem_rssi_signal_buf ,rega 
+0420 204002a9 call p_rssi_average 
+0421 6008ccef storet 1 ,mem_rssi_avg_received 
+0422 58000082 setarg rssi_dis_max_24g 
+0423 c5130425 bmark1 mark_24g ,power_ctrl_start_next 
+0424 58000080 setarg rssi_dis_max_ble 
+
+power_ctrl_start_next:
+0425 98467c00 isub temp ,null 
+0426 2421043d nbranch power_ctrl_txpower_incrs_force ,positive 
+0427 6800ccee fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0428 1fe67c02 sub pdata ,2 ,null 
+0429 2421042d nbranch power_ctrl_txpower_decrs_check ,positive 
+042a 6800ccee fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+042b c000043e beq 0 ,power_ctrl_txpower_incrs 
+042c 20600000 rtn 
+
+power_ctrl_txpower_decrs_check:
+042d 6800ccee fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+042e c1900000 rtnne 32 
+042f 704cee00 jam 0 ,mem_power_ctrl_pac_succ_cnt 
+
+power_ctrl_txpower_decrs:
+0430 6808ccef fetcht 1 ,mem_rssi_avg_received 
+0431 58000077 setarg rssi_dis_min_24g 
+0432 c5130434 bmark1 mark_24g ,power_ctrl_txpower_decrs_next 
+0433 58000075 setarg rssi_dis_min_ble 
+
+power_ctrl_txpower_decrs_next:
+0434 98467c00 isub temp ,null 
+0435 24610000 nrtn positive 
+0436 6800ccf1 fetch 1 ,mem_power_ctrl_level 
+0437 c0000445 beq 0 ,power_ctrl_decrs_level0 
+0438 1fe0ffff increase -1 ,pdata 
+0439 6000ccf1 store 1 ,mem_power_ctrl_level 
+043a c0000445 beq 0 ,power_ctrl_decrs_level0 
+
+power_ctrl_decrs_level1:
+
+power_ctrl_incrs_level1:
+043b 7041de00 jam tx_power_0db ,mem_tx_power 
+043c 20600000 rtn 
+
+power_ctrl_txpower_incrs_force:
+043d 704cee00 jam 0 ,mem_power_ctrl_pac_succ_cnt 
+
+power_ctrl_txpower_incrs:
+043e 6800ccf1 fetch 1 ,mem_power_ctrl_level 
+043f c0010443 beq 2 ,power_ctrl_incrs_level2 
+0440 1fe0fe01 increase 1 ,pdata 
+0441 6000ccf1 store 1 ,mem_power_ctrl_level 
+0442 c000843b beq 1 ,power_ctrl_incrs_level1 
+
+power_ctrl_incrs_level2:
+0443 7041de02 jam tx_power_5db ,mem_tx_power 
+0444 20600000 rtn 
+
+power_ctrl_decrs_level0:
+0445 7041de04 jam tx_power_f5db ,mem_tx_power 
+0446 20600000 rtn 
+
+p_set_freq_tx:
+0447 60088017 storet 1 ,mem_last_freq 
+0448 1840a200 add temp ,0 ,rega 
+0449 20402981 call rf_write_freq 
+044a 58000500 setarg param_pll_setup 
+044b 20402a8f call sleep 
+
+p_rf_tx_enable:
+044c 70890601 jam 0x1 ,rfen_adc 
+044d 7089003c jam 0x3c ,rfen_rx 
+044e 708901e0 jam 0xe0 ,rfen_tx 
+044f 2000000a nop 10 
+0450 70890201 jam 0x01 ,rfen_mdm 
+0451 7089023d jam 0x3d ,rfen_mdm 
+0452 2000000a nop 10 
+0453 708903b7 jam 0xb7 ,rfen_sn 
+0454 2000000a nop 10 
+0455 7089027d jam 0x7d ,rfen_mdm 
+0456 6800c1de fetch 1 ,mem_tx_power 
+0457 c001045f beq tx_power_5db ,p_set_tx_power_5db 
+0458 c0020464 beq tx_power_f5db ,p_set_tx_power_f5db 
+0459 c0100473 beq tx_power_pair ,p_set_tx_power_pair 
+
+p_set_tx_power_0db:
+045a 20400469 call p_rx_low_sens 
+045b 708955d0 jam 0xd0 ,0x8955 
+045c 708956e0 jam 0xe0 ,0x8956 
+045d 7089586c jam 0x6c ,0x8958 
+045e 2020294b branch set_tx_power_0db 
+
+p_set_tx_power_5db:
+045f 2040046e call p_rx_high_sens 
+0460 708955d0 jam 0xd0 ,0x8955 
+0461 708956e0 jam 0xe0 ,0x8956 
+0462 7089583c jam 0x3c ,0x8958 
+0463 20202953 branch set_tx_power_5db 
+
+p_set_tx_power_f5db:
+0464 20400469 call p_rx_low_sens 
+0465 708955d0 jam 0xd0 ,0x8955 
+0466 708956c0 jam 0xc0 ,0x8956 
+0467 7089586c jam 0x6c ,0x8958 
+0468 2020295b branch set_tx_power_f5db 
+
+p_rx_low_sens:
+0469 70894c5b jam 0x5b ,0x894c 
+046a 70894d96 jam 0x96 ,0x894d 
+046b 70894e2c jam 0x2c ,0x894e 
+046c 70894f46 jam 0x46 ,0x894f 
+046d 20600000 rtn 
+
+p_rx_high_sens:
+046e 70894cfb jam 0xfb ,0x894c 
+046f 70894def jam 0xef ,0x894d 
+0470 70894eec jam 0xec ,0x894e 
+0471 70894f5e jam 0x5e ,0x894f 
+0472 20600000 rtn 
+
+p_set_tx_power_pair:
+0473 708956c5 jam 0xc5 ,0x8956 
+0474 708955d0 jam 0xd0 ,0x8955 
+0475 20600000 rtn 
+
+p_shutdown_radio:
+0476 18002a08 force 8 ,radio_ctrl 
+0477 202028fa branch shutdown_radio + 1 
+
+p_initialize_radio_cont:
+0478 708968e6 jam 0xe6 ,0x8968 
+0479 20402978 call initialize_radio_cont + 1 
+047a 70804205 jam clksel_dpll ,core_clksel 
+047b 20600000 rtn 
+
+p_g24_matrix_data:
+047c 6800cb2e fetch 1 ,mem_24g_matrix_cnt 
+047d 1fe0fe01 increase 1 ,pdata 
+047e 6000cb2e store 1 ,mem_24g_matrix_cnt 
+047f 1fe67c32 sub pdata ,50 ,null 
+0480 20210488 branch p_ms_x_right ,positive 
+0481 1fe67c64 sub pdata ,100 ,null 
+0482 20210493 branch p_ms_y_up ,positive 
+0483 1fe67c96 sub pdata ,150 ,null 
+0484 2021049b branch p_ms_x_left ,positive 
+0485 1fe67cc8 sub pdata ,200 ,null 
+0486 202104a3 branch p_ms_y_down ,positive 
+0487 20600000 rtn 
+
+p_ms_x_right:
+0488 58000005 setarg 0x05 
+0489 60014b28 store 2 ,mem_m_x 
+048a 58000000 setarg 0 
+048b 60014b2a store 2 ,mem_m_y 
+048c 6000cb2c store 1 ,mem_m_z 
+048d 6000cb27 store 1 ,mem_m_key 
+048e 6000cb2d store 1 ,mem_m_tz 
+
+p_data:
+048f 78347c00 enable user 
+0490 da200007 arg 7 ,rega 
+0491 da404b27 arg mem_m_key ,regb 
+0492 20600000 rtn 
+
+p_ms_y_up:
+0493 58000005 setarg 0x05 
+0494 60014b2a store 2 ,mem_m_y 
+0495 58000000 setarg 0 
+0496 60014b28 store 2 ,mem_m_x 
+0497 6000cb2c store 1 ,mem_m_z 
+0498 6000cb27 store 1 ,mem_m_key 
+0499 6000cb2d store 1 ,mem_m_tz 
+049a 2020048f branch p_data 
+
+p_ms_x_left:
+049b 5800fffb setarg 0xfffb 
+049c 60014b28 store 2 ,mem_m_x 
+049d 58000000 setarg 0 
+049e 60014b2a store 2 ,mem_m_y 
+049f 6000cb2c store 1 ,mem_m_z 
+04a0 6000cb27 store 1 ,mem_m_key 
+04a1 6000cb2d store 1 ,mem_m_tz 
+04a2 2020048f branch p_data 
+
+p_ms_y_down:
+04a3 6800cb2e fetch 1 ,mem_24g_matrix_cnt 
+04a4 c06404ad beq 200 ,p_mem_usb_data_square_cnt_set0 
+04a5 5800fffb setarg 0xfffb 
+04a6 60014b2a store 2 ,mem_m_y 
+04a7 58000000 setarg 0 
+04a8 60014b28 store 2 ,mem_m_x 
+04a9 6000cb2c store 1 ,mem_m_z 
+04aa 6000cb27 store 1 ,mem_m_key 
+04ab 6000cb2d store 1 ,mem_m_tz 
+04ac 2020048f branch p_data 
+
+p_mem_usb_data_square_cnt_set0:
+04ad 704b2e00 jam 0 ,mem_24g_matrix_cnt 
+04ae 202004a5 branch p_ms_y_down + 2 
+org 0x2000
+
+start:
+2000 20402abc call lpmstate 
+
+soft_reset:
+2001 44804000 bpatch patch00_0 ,mem_patch00 
+2002 20800000 clear_stack 
+2003 2040640d call spi_ncs_gpio_init 
+2004 2040296c call initialize_radio 
+2005 204065a3 call iicd_init_12m 
+2006 20402a96 call init_param 
+2007 20404d6a call l2cap_init 
+2008 4480c000 bpatch patch00_1 ,mem_patch00 
+2009 20406a03 call rfcomm_init 
+200a 20405cf6 call init_lmp 
+200b 20407ccc call ui_init 
+200c 204032d8 call app_init 
+200d 2455e89c ncall load_chip_option ,wake 
+200e 44814000 bpatch patch00_2 ,mem_patch00 
+200f 2055b2e3 call app_lpm_init ,wake 
+2010 2040756a call publickey_init 
+
+soft_reset_2:
+2011 2055ab41 call lpm_recover_clk ,wake 
+
+main_loop:
+2012 4481c000 bpatch patch00_3 ,mem_patch00 
+2013 204076dc call sp_calc_sequence 
+2014 20407aaf call sp_calc_sequence_256 
+2015 2040756d call sp_calc_sequence_256_check 
+2016 2040535c call le_dispatch 
+2017 44824000 bpatch patch00_4 ,mem_patch00 
+2018 20402038 call idle_dispatch 
+2019 204032ed call app_process_idle 
+201a 2040208f call inquiry_dispatch 
+201b 204022f8 call inquiry_scan_dispatch 
+201c 2040236a call page_scan_dispatch 
+201d 20402021 call connection_dispatch 
+201e 20402b6a call lpm_dispatch 
+201f 20402c72 call g24_dispatch 
+2020 20202012 branch main_loop 
+
+connection_dispatch:
+2021 20402026 call connection_incontext 
+2022 c6848000 rtnmark0 mark_context 
+2023 793f8009 set0 mark_context ,mark 
+2024 20402223 call context_save 
+2025 202053ce branch le_disable 
+
+connection_incontext:
+2026 4482c000 bpatch patch00_5 ,mem_patch00 
+2027 2040225e call context_search_insniff 
+2028 2422a02f nbranch connection_nosniff ,zero 
+2029 2040220a call context_load 
+202a 1a208c01 add rega ,coffset_mode ,contr 
+202b e8c08000 ifetch 1 ,contr 
+202c c2805360 bbit1 mode_le ,le_conn_dispatch 
+202d c280a166 bbit1 mode_master ,master_dispatch 
+202e 202023cf branch slave_dispatch 
+
+connection_nosniff:
+202f 2040222b call context_get_next 
+2030 1f227c00 copy loopcnt ,null 
+2031 20628000 rtn zero 
+2032 2040220a call context_load 
+2033 68008030 fetch 1 ,mem_state 
+2034 c281a0d3 bbit1 state_inpage ,master_page 
+2035 68008031 fetch 1 ,mem_mode 
+2036 c280a166 bbit1 mode_master ,master_dispatch 
+2037 202023cf branch slave_dispatch 
+
+idle_dispatch:
+2038 6800c1ce fetch 1 ,mem_hci_cmd 
+2039 207a0000 rtn blank 
+203a c000a048 beq hci_cmd_inquiry ,idle_inquiry 
+203b c001204d beq hci_cmd_inquiry_cancel ,idle_inquiry_cancel 
+203c c001a050 beq hci_cmd_remote_name_req ,idle_remote_name_req 
+203d c002a055 beq hci_cmd_create_conn ,idle_create_conn 
+203e c00da045 beq hci_cmd_le_create_conn ,idle_le_create_conn 
+203f 20402257 call context_search_conn_handle 
+2040 20628000 rtn zero 
+2041 2040225a call context_search_plap 
+2042 20628000 rtn zero 
+
+idle_exit:
+2043 7041ce00 jam 0 ,mem_hci_cmd 
+2044 20600000 rtn 
+
+idle_le_create_conn:
+2045 70049b1b jam hci_cmd_le_create_conn ,mem_cmd_le_create_conn 
+2046 7041ce00 jam 0 ,mem_hci_cmd 
+2047 20600000 rtn 
+
+idle_inquiry:
+2048 7920001c set1 mark_inquiry_on ,mark 
+2049 793f801e set0 mark_inquiry_trainb ,mark 
+204a 70008fff jam param_ninquiry ,mem_ninqy_index 
+204b 70008d1f jam 31 ,mem_nfreq_index_inq 
+204c 20202043 branch idle_exit 
+
+idle_inquiry_cancel:
+204d 793f801c set0 mark_inquiry_on ,mark 
+204e 18003600 force 0 ,stop_watch 
+204f 20202043 branch idle_exit 
+
+idle_remote_name_req:
+2050 2040225a call context_search_plap 
+2051 20628000 rtn zero 
+2052 18000401 force lmp_name_req ,temp 
+2053 70016e05 jam 5 ,mem_nameres_cnt 
+2054 2020205c branch idle_start_page 
+
+idle_create_conn:
+2055 44834000 bpatch patch00_6 ,mem_patch00 
+
+idle_create_conn_device:
+2056 680341d0 fetch 6 ,mem_hci_plap 
+2057 203a2043 branch idle_exit ,blank 
+2058 70468101 jam reconnect_hid ,memui_reconnect_mode 
+2059 70005503 jam conn_sm_wait_features_res ,mem_conn_sm 
+205a 2020205b branch idle_create_conn_cont 
+
+idle_create_conn_cont:
+205b 18000425 force lmp_version_req ,temp 
+
+idle_start_page:
+205c 4483c000 bpatch patch00_7 ,mem_patch00 
+205d 680080f1 fetch 1 ,mem_page_mode 
+205e 203a2062 branch idle_page_mode_r0 ,blank 
+205f 1fe9fe00 lshift3 pdata ,pdata 
+2060 1ff27e00 lshift4 pdata ,pdata 
+2061 1fe0ffff increase -1 ,pdata 
+
+idle_page_mode_r0:
+2062 6000c0a6 store 1 ,mem_npage 
+2063 600080f0 store 1 ,mem_npage_index 
+2064 70008e1f jam 31 ,mem_nfreq_index_page 
+2065 793f800c set0 mark_page_trainb ,mark 
+2066 2040223b call context_new 
+2067 2422a083 nbranch idle_page_fail ,zero 
+2068 20402a6f call get_free_amaddr 
+2069 60008077 store 1 ,mem_amaddr 
+206a 6008807c storet 1 ,mem_lmo_opcode2 
+206b 680341d0 fetch 6 ,mem_hci_plap 
+206c 60030040 store 6 ,mem_plap 
+206d 44844001 bpatch patch01_0 ,mem_patch01 
+206e 20407f15 call timer_reinit 
+206f 18007e00 force 0 ,pdata 
+2070 2841fe01 compare lmp_name_req ,temp ,0xff 
+2071 7d20fe05 nsetflag true ,state_init_seq ,pdata 
+2072 79207e03 set1 state_inpage ,pdata 
+2073 60008030 store 1 ,mem_state 
+2074 700a9903 jam bt_evt_reconn_started ,mem_fifo_temp 
+2075 20407d86 call ui_ipc_send_event 
+2076 18007e00 force 0 ,pdata 
+2077 7920fe04 setflag true ,smap_name_req ,pdata 
+2078 6000804c store 1 ,mem_state_map 
+2079 58000000 setarg 0 
+207a 79207e01 set1 mode_master ,pdata 
+207b 60008031 store 1 ,mem_mode 
+207c 7834fc00 enable master 
+207d 20402223 call context_save 
+207e 7854fc00 disable master 
+207f 18000e03 force page_length_timer ,queue 
+2080 680140b9 fetch 2 ,mem_page_to 
+2081 20407f08 call timer_init 
+2082 20202043 branch idle_exit 
+
+idle_page_fail:
+2083 4484c001 bpatch patch01_1 ,mem_patch01 
+2084 680341d0 fetch 6 ,mem_hci_plap 
+2085 60030040 store 6 ,mem_plap 
+2086 2841fe01 compare lmp_name_req ,temp ,0xff 
+2087 2020a089 branch idle_name_fail ,true 
+2088 20202043 branch idle_exit 
+
+idle_name_fail:
+2089 d8a00101 arg mem_tmp_buffer ,contw 
+208a df200008 arg 8 ,loopcnt 
+208b 20407ec6 call memset0 
+208c 700a9904 jam bt_evt_reconn_failed ,mem_fifo_temp 
+208d 20407d86 call ui_ipc_send_event 
+208e 20202043 branch idle_exit 
+
+inquiry_dispatch:
+208f c68e0000 rtnmark0 mark_inquiry_on 
+2090 18000e01 force inquiry_length_timer ,queue 
+2091 20407f16 call timer_check 
+2092 7d3a001c nsetflag blank ,mark_inquiry_on ,mark 
+2093 243a2095 nbranch inquiry_start ,blank 
+2094 20600000 rtn 
+
+inquiry_start:
+2095 44854001 bpatch patch01_2 ,mem_patch01 
+2096 680940bb fetcht 2 ,mem_inq_window 
+2097 18000e04 force 4 ,queue 
+2098 2040271c call sniff_check_window 
+2099 20740000 rtn user 
+209a 204028a4 call afh_clear 
+209b 18004800 force 0 ,freq_mode 
+
+inquiry_restart:
+209c 20618000 rtn timeout 
+209d 793f800b set0 mark_fhs_already_good ,mark 
+209e 793f8000 set0 mark_fhs_eir ,mark 
+
+inquiry_rx_restart:
+209f 1c40c201 add clkn_bt ,1 ,bt_clk 
+20a0 280ffe1e isolate1 mark_inquiry_trainb ,mark 
+20a1 7920c802 setflag true ,2 ,freq_mode 
+20a2 2c200400 compare 0x00 ,bt_clk ,0x02 
+20a3 2420a0be nbranch inquiry_receive ,true 
+
+inquiry_transmit:
+20a4 4485c001 bpatch patch01_3 ,mem_patch01 
+20a5 68008012 fetch 1 ,mem_inquiry_transmit 
+20a6 1fe0fe01 increase 1 ,pdata 
+20a7 60008012 store 1 ,mem_inquiry_transmit 
+20a8 204028d8 call fetch_giac 
+20a9 204028d2 call tx_radio_freq 
+20aa 204028f2 call fetch_diac 
+20ab 20402a51 call start_transmitter 
+20ac 20402a56 call start_tx_native 
+20ad 20402a64 call send_access_word 
+20ae 2040264d call end_of_packet 
+20af 204020b1 call inquiry_check_train 
+20b0 2020209c branch inquiry_restart 
+
+inquiry_check_train:
+20b1 44864001 bpatch patch01_4 ,mem_patch01 
+20b2 6800808d fetch 1 ,mem_nfreq_index_inq 
+20b3 1fe0ffff increase -1 ,pdata 
+20b4 6000808d store 1 ,mem_nfreq_index_inq 
+20b5 20610000 rtn positive 
+20b6 70008d1f jam 31 ,mem_nfreq_index_inq 
+20b7 6800808f fetch 1 ,mem_ninqy_index 
+20b8 1fe0ffff increase -1 ,pdata 
+20b9 6000808f store 1 ,mem_ninqy_index 
+20ba 20610000 rtn positive 
+20bb 7940001e setflip mark_inquiry_trainb ,mark 
+20bc 70008fff jam param_ninquiry ,mem_ninqy_index 
+20bd 20600000 rtn 
+
+inquiry_receive:
+20be 4486c001 bpatch patch01_5 ,mem_patch01 
+20bf 204028d8 call fetch_giac 
+20c0 204028cc call rx_radio_freq 
+20c1 204028f2 call fetch_diac 
+20c2 20402a5b call start_rx_native 
+20c3 204029eb call start_receiver 
+20c4 20402a0d call wait_access_clkn_rt 
+20c5 202c20c8 branch inquiry_sync ,sync 
+20c6 204020b1 call inquiry_check_train 
+20c7 2020209f branch inquiry_rx_restart 
+
+inquiry_sync:
+20c8 44874001 bpatch patch01_6 ,mem_patch01 
+20c9 204029bb call save_rssi 
+20ca 20402a6b call scan_mode_whiten 
+20cb 2040251e call receive_packet_whitened 
+20cc 793f8001 set0 mark_rxbuf_inuse ,mark 
+20cd c6858000 rtnmark0 mark_fhs_already_good 
+
+inquiry_receive_rtn:
+20ce 4487c001 bpatch patch01_7 ,mem_patch01 
+
+inquiry_receive_eir_rtn:
+20cf 68008013 fetch 1 ,mem_inquiry_rcv 
+20d0 1fe0fe01 increase 1 ,pdata 
+20d1 60008013 store 1 ,mem_inquiry_rcv 
+20d2 20600000 rtn 
+
+master_page:
+20d3 44884002 bpatch patch02_0 ,mem_patch02 
+20d4 7834fc00 enable master 
+20d5 78387c00 enable clknt 
+20d6 680140b5 fetch 2 ,mem_page_interval 
+20d7 203a20db branch master_page_no_interval ,blank 
+20d8 18000e08 force page_interval_timer ,queue 
+20d9 20407f16 call timer_check 
+20da 247a0000 nrtn blank 
+
+master_page_no_interval:
+20db 4488c002 bpatch patch02_1 ,mem_patch02 
+20dc 680940b7 fetcht 2 ,mem_page_window 
+20dd 18000e28 force 40 ,queue 
+20de 2040271c call sniff_check_window 
+20df 20342114 branch page_exit ,user 
+20e0 18000e03 force page_length_timer ,queue 
+20e1 20407f16 call timer_check 
+20e2 243a20f0 nbranch page_start ,blank 
+20e3 6800804c fetch 1 ,mem_state_map 
+20e4 c28220e6 bbit1 smap_name_req ,master_npage_timeout 
+20e5 202020e9 branch master_page_timeout 
+
+master_npage_timeout:
+20e6 d8a00101 arg mem_tmp_buffer ,contw 
+20e7 df200008 arg 8 ,loopcnt 
+20e8 20407ec6 call memset0 
+
+master_page_timeout:
+20e9 44894002 bpatch patch02_2 ,mem_patch02 
+20ea 70003000 jam 0 ,mem_state 
+20eb 20405cf7 call init_lmp_work 
+20ec 70468100 jam 0 ,memui_reconnect_mode 
+20ed 700a9913 jam bt_evt_reconn_page_timeout ,mem_fifo_temp 
+20ee 20407d86 call ui_ipc_send_event 
+20ef 20202114 branch page_exit 
+
+page_start:
+20f0 4489c002 bpatch patch02_3 ,mem_patch02 
+20f1 18001600 force 0 ,timeup 
+20f2 34730200 until clkn_rt ,meet 
+20f3 680080f2 fetch 1 ,mem_page_clk 
+20f4 1fe0ffff increase -1 ,pdata 
+20f5 9c42fe00 ixor clkn_bt ,pdata 
+20f6 2fe00600 compare 0 ,pdata ,3 
+20f7 2420a0f0 nbranch page_start ,true 
+20f8 18827e00 deposit am_addr 
+20f9 60008181 store 1 ,mem_fhs_am_addr 
+20fa 18004c00 force 0 ,n_tx_slot 
+20fb 18004800 force 0 ,freq_mode 
+
+page_restart:
+20fc 448a4002 bpatch patch02_4 ,mem_patch02 
+20fd 2021a114 branch page_exit ,timeout 
+20fe 204028dc call fetch_page_bt_adr 
+20ff d9600600 arg param_rf_setup ,timeup 
+2100 34730200 until clkn_rt ,meet 
+
+page_rx_restart:
+2101 448ac002 bpatch patch02_5 ,mem_patch02 
+2102 680200f2 fetch 4 ,mem_page_clk 
+2103 98004200 iforce bt_clk 
+2104 1fe0fe01 increase 1 ,pdata 
+2105 600200f2 store 4 ,mem_page_clk 
+2106 280ffe0c isolate1 mark_page_trainb ,mark 
+2107 7920c802 setflag true ,2 ,freq_mode 
+2108 2c200400 compare 0x00 ,bt_clk ,0x02 
+2109 2420a128 nbranch page_receive ,true 
+210a 6800800c fetch 1 ,mem_page_transmit 
+210b 1fe0fe01 increase 1 ,pdata 
+210c 6000800c store 1 ,mem_page_transmit 
+210d 204028d2 call tx_radio_freq 
+210e 20402a51 call start_transmitter 
+210f 20402a56 call start_tx_native 
+2110 20402a64 call send_access_word 
+2111 2040264d call end_of_packet 
+2112 2040211a call page_check_train 
+2113 202020fc branch page_restart 
+
+page_exit:
+2114 448b4002 bpatch patch02_6 ,mem_patch02 
+2115 7854fc00 disable master 
+2116 680140b5 fetch 2 ,mem_page_interval 
+2117 207a0000 rtn blank 
+2118 18000e08 force page_interval_timer ,queue 
+2119 20207f08 branch timer_init 
+
+page_check_train:
+211a 448bc002 bpatch patch02_7 ,mem_patch02 
+211b 6800808e fetch 1 ,mem_nfreq_index_page 
+211c 1fe0ffff increase -1 ,pdata 
+211d 6000808e store 1 ,mem_nfreq_index_page 
+211e 20610000 rtn positive 
+211f 70008e1f jam 31 ,mem_nfreq_index_page 
+2120 680080f0 fetch 1 ,mem_npage_index 
+2121 1fe0ffff increase -1 ,pdata 
+2122 600080f0 store 1 ,mem_npage_index 
+2123 20610000 rtn positive 
+2124 7940000c setflip mark_page_trainb ,mark 
+2125 6800c0a6 fetch 1 ,mem_npage 
+2126 600080f0 store 1 ,mem_npage_index 
+2127 20600000 rtn 
+
+page_receive:
+2128 448c4003 bpatch patch03_0 ,mem_patch03 
+2129 204028cc call rx_radio_freq 
+212a 20402a5b call start_rx_native 
+212b 204029eb call start_receiver 
+212c 20402a0d call wait_access_clkn_rt 
+212d 202c2130 branch page_sync ,sync 
+212e 2040211a call page_check_train 
+212f 20202101 branch page_rx_restart 
+
+page_sync:
+2130 2040264d call end_of_packet 
+2131 6800800d fetch 1 ,mem_page_rcv 
+2132 1fe0fe01 increase 1 ,pdata 
+2133 6000800d store 1 ,mem_page_rcv 
+2134 18003600 force 0 ,stop_watch 
+2135 680200f2 fetch 4 ,mem_page_clk 
+
+page_send_fhs:
+2136 448cc003 bpatch patch03_1 ,mem_patch03 
+2137 20402a4f call rf_setup_time_master_slot 
+2138 204028dc call fetch_page_bt_adr 
+2139 1cc0cc01 increase 1 ,n_tx_slot 
+
+page_send_fhs_continue:
+213a 1c2143fd and_into 0x1fd ,bt_clk 
+213b 1c8149fc and_into 0x1fc ,freq_mode 
+213c 204028d2 call tx_radio_freq 
+213d 20402a51 call start_transmitter 
+213e 20402a56 call start_tx_native 
+213f 20402a64 call send_access_word 
+2140 1c427e00 deposit clkn_bt 
+2141 60020161 store 4 ,mem_clkn_bt 
+2142 18000800 force 0 ,am_addr 
+2143 18000202 force type_fhs ,type 
+2144 20402a6b call scan_mode_whiten 
+2145 20402766 call transmit_packet_whitened 
+
+page_wait_fhs_reply:
+2146 448d4003 bpatch patch03_2 ,mem_patch03 
+2147 20402a4d call rf_setup_time_slave_slot 
+2148 1c21c202 or_into 0x02 ,bt_clk 
+2149 1c8149fc and_into 0x1fc ,freq_mode 
+214a 204028cc call rx_radio_freq 
+214b 20402a5b call start_rx_native 
+214c 204029eb call start_receiver 
+214d 20402a0d call wait_access_clkn_rt 
+214e 204c264d call end_of_packet ,sync 
+214f 202c2155 branch page_wait_fhs_reply_ok ,sync 
+2150 68008010 fetch 1 ,mem_fhs_wait_counter 
+2151 203a20fc branch page_restart ,blank 
+2152 1fe0ffff increase -1 ,pdata 
+2153 60008010 store 1 ,mem_fhs_wait_counter 
+2154 20202136 branch page_send_fhs 
+
+page_wait_fhs_reply_ok:
+2155 448dc003 bpatch patch03_3 ,mem_patch03 
+2156 6800800e fetch 1 ,mem_page_rcv_fhs 
+2157 1fe0fe01 increase 1 ,pdata 
+2158 6000800e store 1 ,mem_page_rcv_fhs 
+2159 20402435 call prepare_newconn 
+
+master_newconn_loop:
+215a 204022f2 call master_newconn_once 
+215b 202c215f branch newconn_poll_responded ,sync 
+215c 20402455 call new_conn_timeout 
+215d 243a215a nbranch master_newconn_loop ,blank 
+215e 202020fc branch page_restart 
+
+newconn_poll_responded:
+215f 448e4003 bpatch patch03_4 ,mem_patch03 
+2160 68008030 fetch 1 ,mem_state 
+2161 793ffe03 set0 state_inpage ,pdata 
+2162 60008030 store 1 ,mem_state 
+2163 20402440 call newconn_init 
+2164 7854fc00 disable master 
+2165 20600000 rtn 
+
+master_dispatch:
+2166 448ec003 bpatch patch03_5 ,mem_patch03 
+2167 7834fc00 enable master 
+2168 78387c00 enable clknt 
+2169 204021e1 call role_switch_master 
+216a 20740000 rtn user 
+216b 20402c69 call check_bt_disabled 
+216c 20402a4f call rf_setup_time_master_slot 
+216d 1c40c201 add clkn_bt ,1 ,bt_clk 
+216e 204028e2 call fetch_self_bt_adr 
+216f 18004803 force 0x03 ,freq_mode 
+2170 20406cc2 call scheduler_tx_l2cap_pkt 
+2171 20402489 call prepare_tx 
+2172 204028d2 call tx_radio_freq 
+2173 20402a51 call start_transmitter 
+2174 20402a56 call start_tx_native 
+2175 20402a64 call send_access_word 
+2176 20402762 call transmit_packet 
+
+master_loop:
+2177 448f4003 bpatch patch03_6 ,mem_patch03 
+2178 20405d08 call parse_lmp 
+2179 204022e4 call master_conn_recv_packet 
+217a 2436a180 nbranch master_notmatch ,match 
+217b 20402a88 call supervision_flush 
+217c 20402728 call parse_l2cap 
+217d 6800800f fetch 1 ,mem_master_rcvcnt 
+217e 1fe0fe01 increase 1 ,pdata 
+217f 6000800f store 1 ,mem_master_rcvcnt 
+
+master_notmatch:
+2180 448fc003 bpatch patch03_7 ,mem_patch03 
+2181 20406caa call scheduler_process 
+2182 2040218b call check_master_disconnect 
+2183 24748000 nrtn master 
+2184 204026f3 call check_attempt 
+2185 243a2188 nbranch master_attempt ,blank 
+
+master_exit:
+2186 7854fc00 disable master 
+2187 20600000 rtn 
+
+master_attempt:
+2188 20402489 call prepare_tx 
+2189 204022da call master_conn_send_packet 
+218a 20202177 branch master_loop 
+
+check_master_disconnect:
+218b 2036a18e branch check_master_match ,match 
+218c 20402a7f call supervision_update 
+218d 2021219c branch master_disconnect ,positive 
+
+check_master_match:
+218e 204021a7 call check_disconnect_timeout 
+218f 2434219c nbranch master_disconnect ,user 
+2190 6800804c fetch 1 ,mem_state_map 
+2191 c4020000 rtnbit0 smap_name_req 
+2192 c3818000 rtnbit1 smap_name_res 
+2193 6800804b fetch 1 ,mem_op 
+2194 c3818000 rtnbit1 op_disconn 
+2195 204021ae call conn_timer_expired 
+2196 247a0000 nrtn blank 
+2197 6800816e fetch 1 ,mem_nameres_cnt 
+2198 1fe0ffff increase -1 ,pdata 
+2199 6000816e store 1 ,mem_nameres_cnt 
+219a 247a0000 nrtn blank 
+219b 20206006 branch lmp_disconnect 
+
+master_disconnect:
+219c 44904004 bpatch patch04_0 ,mem_patch04 
+219d 2040245d call quit_connection 
+219e 7854fc00 disable master 
+219f 6800804c fetch 1 ,mem_state_map 
+21a0 c28221a2 bbit1 smap_name_req ,master_name_disconnect 
+21a1 20600000 rtn 
+
+master_name_disconnect:
+21a2 6800804c fetch 1 ,mem_state_map 
+21a3 c3818000 rtnbit1 smap_name_res 
+
+master_name_error:
+21a4 d8a00101 arg mem_tmp_buffer ,contw 
+21a5 df200008 arg 8 ,loopcnt 
+21a6 20207ec6 branch memset0 
+
+check_disconnect_timeout:
+21a7 4490c004 bpatch patch04_1 ,mem_patch04 
+21a8 78347c00 enable user 
+21a9 6800804b fetch 1 ,mem_op 
+21aa c4018000 rtnbit0 op_disconn 
+21ab 204021ae call conn_timer_expired 
+21ac 247a0000 nrtn blank 
+21ad 20207fe9 branch disable_user 
+
+conn_timer_expired:
+21ae 68008072 fetch 1 ,mem_conn_timer 
+21af 1fe0ffff increase -1 ,pdata 
+21b0 60008072 store 1 ,mem_conn_timer 
+21b1 20600000 rtn 
+
+linkkey_ready:
+21b2 44914004 bpatch patch04_2 ,mem_patch04 
+21b3 68008030 fetch 1 ,mem_state 
+21b4 c283a1bb bbit1 state_linkkey ,linkkey_set 
+21b5 680089b5 fetch 1 ,mem_pairing_auth 
+21b6 203a21bb branch linkkey_set ,blank 
+21b7 7009b500 jam defalt_pairing_auth ,mem_pairing_auth 
+21b8 700a9918 jam bt_evt_linkkey_generate ,mem_fifo_temp 
+21b9 20407d86 call ui_ipc_send_event 
+21ba 202021bb branch linkkey_set 
+
+linkkey_set:
+21bb 4491c004 bpatch patch04_3 ,mem_patch04 
+21bc 20402254 call context_traverse_linkkey 
+21bd 68008030 fetch 1 ,mem_state 
+21be 79207e07 set1 state_linkkey ,pdata 
+21bf 60008030 store 1 ,mem_state 
+21c0 7041bd01 jam 1 ,mem_link_key_exists 
+21c1 68008055 fetch 1 ,mem_conn_sm 
+21c2 c08b21c3 bne conn_sm_pairing ,linkkey_set_continue 
+
+linkkey_set_continue:
+21c3 20600000 rtn 
+
+generate_linkkey_continue:
+21c4 7009b501 jam pairing_auth ,mem_pairing_auth 
+
+clear_linkstate:
+21c5 68008030 fetch 1 ,mem_state 
+21c6 793ffe07 set0 state_linkkey ,pdata 
+21c7 60008030 store 1 ,mem_state 
+21c8 20600000 rtn 
+
+role_switch_check:
+21c9 44924004 bpatch patch04_4 ,mem_patch04 
+21ca 78547c00 disable user 
+21cb 68010032 fetch 2 ,mem_tsniff 
+21cc d840ffff arg 0xffff ,temp 
+21cd 98467c00 isub temp ,null 
+21ce 24628000 nrtn zero 
+21cf 68020034 fetch 4 ,mem_sniff_anchor 
+21d0 203821d3 branch role_switch_clkn ,clknt 
+21d1 9d067e00 isub clke_bt ,pdata 
+21d2 202021d4 branch role_switch_clke 
+
+role_switch_clkn:
+21d3 9c467e00 isub clkn_bt ,pdata 
+
+role_switch_clke:
+21d4 1fe67c04 sub pdata ,4 ,null 
+21d5 24610000 nrtn positive 
+21d6 18007e00 force 0 ,pdata 
+21d7 60010032 store 2 ,mem_tsniff 
+21d8 20207fe7 branch enable_user 
+
+role_switch_prepare:
+21d9 1fe20400 copy pdata ,temp 
+21da 4492c004 bpatch patch04_5 ,mem_patch04 
+21db 600a0034 storet 4 ,mem_sniff_anchor 
+
+role_switch_prepare0:
+21dc 70455b01 jam switch_flag_accept ,mem_switch_flag 
+21dd 5800ffff setarg 0xffff 
+21de 60010032 store 2 ,mem_tsniff 
+21df 70007301 jam 1 ,mem_sniff_attempt 
+21e0 20600000 rtn 
+
+role_switch_master:
+21e1 44934004 bpatch patch04_6 ,mem_patch04 
+21e2 204021c9 call role_switch_check 
+21e3 24740000 nrtn user 
+21e4 78547c00 disable user 
+21e5 70001120 jam param_newconnto ,mem_newconnto_counter 
+21e6 793f800b set0 mark_fhs_already_good ,mark 
+
+roles_waitfhs_loop:
+21e7 20402a4f call rf_setup_time_master_slot 
+21e8 204022e6 call master_recv_packet 
+21e9 c505a1f4 bmark1 mark_fhs_already_good ,roles_replyto_fhs 
+21ea 20402455 call new_conn_timeout 
+21eb 243a21e7 nbranch roles_waitfhs_loop ,blank 
+
+role_switch_fail_master:
+21ec 4493c004 bpatch patch04_7 ,mem_patch04 
+21ed 78547c00 disable user 
+21ee 1c427e00 deposit clkn_bt 
+21ef 600240ca store 4 ,mem_next_btclk 
+21f0 78387c00 enable clknt 
+21f1 7834fc00 enable master 
+21f2 700a992a jam bt_evt_switch_fail_master ,mem_fifo_temp 
+21f3 20207d86 branch ui_ipc_send_event 
+
+roles_replyto_fhs:
+21f4 44944005 bpatch patch05_0 ,mem_patch05 
+21f5 20402a4d call rf_setup_time_slave_slot 
+21f6 d8200010 arg type_id ,type 
+21f7 204022dc call master_send_packet 
+21f8 78587c00 disable clknt 
+21f9 7854fc00 disable master 
+21fa 20402818 call apply_switch_clke 
+21fb 20402435 call prepare_newconn 
+
+roles_newconns_loop:
+21fc 4494c005 bpatch patch05_1 ,mem_patch05 
+21fd 2040247c call slave_newconn_once 
+21fe 2036a202 branch roles_newconns_responded ,match 
+21ff 20402455 call new_conn_timeout 
+2200 243a21fc nbranch roles_newconns_loop ,blank 
+2201 202021ec branch role_switch_fail_master 
+
+roles_newconns_responded:
+2202 68008031 fetch 1 ,mem_mode 
+2203 793ffe01 set0 mode_master ,pdata 
+2204 60008031 store 1 ,mem_mode 
+2205 20402a88 call supervision_flush 
+2206 20402841 call calc_clke_offset 
+2207 78347c00 enable user 
+2208 700a992b jam bt_evt_switch_success_master ,mem_fifo_temp 
+2209 20207d86 branch ui_ipc_send_event 
+
+context_load:
+220a 44954005 bpatch patch05_2 ,mem_patch05 
+220b 79200009 set1 mark_context ,mark 
+220c 1a227e00 deposit rega 
+220d 6001001e store 2 ,mem_context_ptr 
+220e 18007250 force context_size ,loopcnt 
+220f d8a0043f arg mem_le_state ,contw 
+2210 1a208c01 add rega ,coffset_mode ,contr 
+2211 e8c08000 ifetch 1 ,contr 
+2212 1a220c00 copy rega ,contr 
+2213 c2807f01 bbit1 mode_le ,memcpy 
+2214 d8a00030 arg mem_state ,contw 
+2215 20407f01 call memcpy 
+2216 78577c00 disable attempt 
+2217 68008077 fetch 1 ,mem_amaddr 
+2218 98000800 iforce am_addr 
+2219 70008a01 jam 1 ,mem_current_sniff_attempt 
+221a 2034a21c branch context_load_master ,master 
+221b 70008a01 jam 1 ,mem_current_sniff_attempt 
+
+context_load_master:
+221c 68008030 fetch 1 ,mem_state 
+221d c4008000 rtnbit0 state_insniff 
+221e 68008073 fetch 1 ,mem_sniff_attempt 
+221f 6000808a store 1 ,mem_current_sniff_attempt 
+2220 68008074 fetch 1 ,mem_sniff_timeout 
+2221 6000808b store 1 ,mem_current_sniff_timeout 
+2222 20600000 rtn 
+
+context_save:
+2223 4495c005 bpatch patch05_3 ,mem_patch05 
+2224 6801001e fetch 2 ,mem_context_ptr 
+2225 98000a00 iforce contw 
+2226 18007250 force context_size ,loopcnt 
+2227 d8c0043f arg mem_le_state ,contr 
+2228 203b7f01 branch memcpy ,le 
+2229 d8c00030 arg mem_state ,contr 
+222a 20207f01 branch memcpy 
+
+context_get_next:
+222b df200001 arg context_num ,loopcnt 
+222c 68088015 fetcht 1 ,mem_current_context 
+
+context_get_next_loop:
+222d 18408401 increase 1 ,temp 
+222e 2841fe01 compare context_num ,temp ,0xff 
+222f 2420a231 nbranch context_get_next_cont ,true 
+2230 d8400000 arg 0 ,temp 
+
+context_get_next_cont:
+2231 60088015 storet 1 ,mem_current_context 
+2232 184ffe50 mul32 temp ,context_size ,pdata 
+2233 da204040 arg mem_context ,rega 
+2234 9a20a200 iadd rega ,rega 
+2235 ea208000 ifetch 1 ,rega 
+2236 c280a239 bbit1 state_insniff ,context_get_next_sniff 
+2237 c3800000 rtnbit1 state_inconn 
+2238 c3818000 rtnbit1 state_inpage 
+
+context_get_next_sniff:
+2239 c200222d loop context_get_next_loop 
+223a 20600000 rtn 
+
+context_new:
+223b 44964005 bpatch patch05_4 ,mem_patch05 
+223c da60226a arg context_search_empty ,regc 
+223d 20402261 call context_search 
+223e 24628000 nrtn zero 
+223f 1a227e00 deposit rega 
+2240 6001001e store 2 ,mem_context_ptr 
+2241 18007c00 force 0 ,null 
+2242 20600000 rtn 
+
+context_check_all_wack:
+2243 20402725 call check_esco_amaddr 
+2244 2020a24b branch context_check_esco_wack ,true 
+2245 6801001e fetch 2 ,mem_context_ptr 
+2246 1fe08a17 add pdata ,coffset_arq ,contw 
+2247 68008047 fetch 1 ,mem_arq 
+2248 e0a08000 istore 1 ,contw 
+2249 da6022aa arg context_check_a_wack ,regc 
+224a 20202261 branch context_search 
+
+context_check_esco_wack:
+224b 68008047 fetch 1 ,mem_arq 
+224c 2feffe03 isolate1 wack ,pdata 
+224d 2020a250 branch context_esco_wack ,true 
+224e 18007c01 force 1 ,null 
+224f 20600000 rtn 
+
+context_esco_wack:
+2250 18007c00 force 0 ,null 
+2251 20600000 rtn 
+
+context_check_idle:
+2252 da6022a7 arg context_check_inconn ,regc 
+2253 20202261 branch context_search 
+
+context_traverse_linkkey:
+2254 6809001e fetcht 2 ,mem_context_ptr 
+2255 da6022cf arg context_traverse_clearkey ,regc 
+2256 20202261 branch context_search 
+
+context_search_conn_handle:
+2257 6808c1cf fetcht 1 ,mem_hci_conn_handle 
+
+context_search_conn_handle2:
+2258 da602275 arg context_search_handle ,regc 
+2259 20202261 branch context_search 
+
+context_search_plap:
+225a 4496c005 bpatch patch05_5 ,mem_patch05 
+225b 680b41d0 fetcht 6 ,mem_hci_plap 
+
+context_search_plap2:
+225c da60226e arg context_search_lap ,regc 
+225d 20202261 branch context_search 
+
+context_search_insniff:
+225e da60227b arg context_search_sniff ,regc 
+225f 20202261 branch context_search 
+
+context_search_sniff_window:
+2260 da6022c6 arg context_search_window ,regc 
+
+context_search:
+2261 44974005 bpatch patch05_6 ,mem_patch05 
+2262 da204040 arg mem_context ,rega 
+2263 df200001 arg context_num ,loopcnt 
+
+context_search_loop:
+2264 ea208000 ifetch 1 ,rega 
+2265 1a627a00 copy regc ,pc 
+
+context_search_next:
+2266 1a20a250 increase context_size ,rega 
+2267 c2002264 loop context_search_loop 
+2268 18007c01 force 1 ,null 
+2269 20600000 rtn 
+
+context_search_empty:
+226a c2802266 bbit1 state_inconn ,context_search_next 
+226b c281a266 bbit1 state_inpage ,context_search_next 
+226c 18007c00 force 0 ,null 
+226d 20600000 rtn 
+
+context_search_lap:
+226e c281a270 bbit1 state_inpage ,context_search_lap_cont 
+226f c3002266 bbit0 state_inconn ,context_search_next 
+
+context_search_lap_cont:
+2270 1a208c10 add rega ,coffset_plap ,contr 
+2271 e8c30000 ifetch 6 ,contr 
+2272 98467c00 isub temp ,null 
+2273 20628000 rtn zero 
+2274 20202266 branch context_search_next 
+
+context_search_handle:
+2275 c3002266 bbit0 state_inconn ,context_search_next 
+2276 1a208c16 add rega ,coffset_conn_handle ,contr 
+2277 e8c08000 ifetch 1 ,contr 
+2278 98467c00 isub temp ,null 
+2279 20628000 rtn zero 
+227a 20202266 branch context_search_next 
+
+context_search_sniff:
+227b c300a266 bbit0 state_insniff ,context_search_next 
+
+context_search_sniff_loop:
+227c 204022b3 call context_get_anchor 
+227d 20402297 call sign_pdata_temp 
+227e 98467e00 isub temp ,pdata 
+227f 1fe0fe01 increase 1 ,pdata 
+2280 20212291 branch context_search_sniff_miss ,positive 
+2281 18c22400 copy contr ,regb 
+2282 60048aa2 store 9 ,mem_temp 
+2283 6800c4c0 fetch 1 ,mem_le_sc_calc 
+2284 243a2289 nbranch context_search_sniff_sc ,blank 
+2285 68048aa2 fetch 9 ,mem_temp 
+2286 1a420c00 copy regb ,contr 
+2287 1fe0fe05 increase 5 ,pdata 
+2288 2020228c branch context_search_meet1 
+
+context_search_sniff_sc:
+2289 68048aa2 fetch 9 ,mem_temp 
+228a 1a420c00 copy regb ,contr 
+228b 1fe0fe14 increase 20 ,pdata 
+
+context_search_meet1:
+228c 24212266 nbranch context_search_next ,positive 
+
+context_search_meet:
+228d 18424200 copy temp ,bt_clk 
+228e 204022bf call context_next_anchor 
+228f 18007c00 force 0 ,null 
+2290 20600000 rtn 
+
+context_search_sniff_miss:
+2291 98002400 iforce regb 
+2292 1a208c02 add rega ,coffset_tsniff ,contr 
+2293 e8c10000 ifetch 2 ,contr 
+2294 203a228d branch context_search_meet ,blank 
+2295 204022bf call context_next_anchor 
+2296 2020227c branch context_search_sniff_loop 
+
+sign_pdata_temp:
+2297 1ff11600 rshift16 pdata ,timeup 
+2298 196c9600 rshift8 timeup ,timeup 
+2299 2022a2a1 branch sign_pdata_temp_p0 ,zero 
+229a 29601e0f compare 0xf ,timeup ,0xf 
+229b 24608000 nrtn true 
+229c 18511600 rshift16 temp ,timeup 
+229d 196c9600 rshift8 timeup ,timeup 
+229e 24628000 nrtn zero 
+229f 7920041c set1 28 ,temp 
+22a0 20600000 rtn 
+
+sign_pdata_temp_p0:
+22a1 18511600 rshift16 temp ,timeup 
+22a2 196c9600 rshift8 timeup ,timeup 
+22a3 29601e0f compare 0xf ,timeup ,0xf 
+22a4 24608000 nrtn true 
+22a5 79207e1c set1 28 ,pdata 
+22a6 20600000 rtn 
+
+context_check_inconn:
+22a7 c3002266 bbit0 state_inconn ,context_search_next 
+22a8 18007c00 force 0 ,null 
+22a9 20600000 rtn 
+
+context_check_a_wack:
+22aa c3002266 bbit0 state_inconn ,context_search_next 
+22ab 1a208c01 add rega ,coffset_mode ,contr 
+22ac e8c08000 ifetch 1 ,contr 
+22ad c2802266 bbit1 mode_le ,context_search_next 
+22ae 1a208c17 add rega ,coffset_arq ,contr 
+22af e8c08000 ifetch 1 ,contr 
+22b0 c301a266 bbit0 wack ,context_search_next 
+22b1 18007c00 force 0 ,null 
+22b2 20600000 rtn 
+
+context_get_anchor:
+22b3 1a208c01 add rega ,coffset_mode ,contr 
+22b4 e8c88000 ifetcht 1 ,contr 
+22b5 1c427e00 deposit clkn_bt 
+22b6 284ffe01 isolate1 mode_master ,temp 
+22b7 1a208c04 add rega ,coffset_sniff_anchor ,contr 
+22b8 e8ca0000 ifetcht 4 ,contr 
+22b9 20608000 rtn true 
+22ba 1a208c08 add rega ,coffset_clk_offset ,contr 
+22bb e8c30000 ifetch 6 ,contr 
+22bc 20402854 call calc_clke2 
+22bd 1d027e00 deposit clke_bt 
+22be 20600000 rtn 
+
+context_next_anchor:
+22bf 1a208c02 add rega ,coffset_tsniff ,contr 
+22c0 1a208a04 add rega ,coffset_sniff_anchor ,contw 
+22c1 e8c10000 ifetch 2 ,contr 
+22c2 98409600 iadd temp ,timeup 
+22c3 19627e00 deposit timeup 
+22c4 e0a20000 istore 4 ,contw 
+22c5 20205449 branch le_context_nexthop 
+
+context_search_window:
+22c6 c300a266 bbit0 state_insniff ,context_search_next 
+22c7 204022b3 call context_get_anchor 
+22c8 9b60fe00 iadd stop_watch ,pdata 
+22c9 9b60fe00 iadd stop_watch ,pdata 
+22ca 98e0fe00 iadd queue ,pdata 
+22cb 98467c00 isub temp ,null 
+22cc 24212266 nbranch context_search_next ,positive 
+22cd 18007c00 force 0 ,null 
+22ce 20600000 rtn 
+
+context_traverse_clearkey:
+22cf c3002266 bbit0 state_inconn ,context_search_next 
+22d0 18427e00 deposit temp 
+22d1 9a267c00 isub rega ,null 
+22d2 203f2266 branch context_search_next ,null 
+22d3 1a208c01 add rega ,coffset_mode ,contr 
+22d4 e8c08000 ifetch 1 ,contr 
+22d5 c2802266 bbit1 mode_le ,context_search_next 
+22d6 ea208000 ifetch 1 ,rega 
+22d7 793ffe07 set0 state_linkkey ,pdata 
+22d8 e2208000 istore 1 ,rega 
+22d9 20202266 branch context_search_next 
+
+master_conn_send_packet:
+22da 4497c005 bpatch patch05_7 ,mem_patch05 
+22db 20402a4f call rf_setup_time_master_slot 
+
+master_send_packet:
+22dc 1c40c201 add clkn_bt ,1 ,bt_clk 
+22dd 204028e2 call fetch_self_bt_adr 
+22de 18004803 force 0x03 ,freq_mode 
+22df 204028d2 call tx_radio_freq 
+22e0 20402a51 call start_transmitter 
+22e1 20402a56 call start_tx_native 
+22e2 20402a64 call send_access_word 
+22e3 20202762 branch transmit_packet 
+
+master_conn_recv_packet:
+22e4 44984006 bpatch patch06_0 ,mem_patch06 
+22e5 20402a4d call rf_setup_time_slave_slot 
+
+master_recv_packet:
+22e6 1c40c201 add clkn_bt ,1 ,bt_clk 
+22e7 204028e2 call fetch_self_bt_adr 
+22e8 18004803 force 0x03 ,freq_mode 
+22e9 204028cc call rx_radio_freq 
+22ea 2040242a call init_rx_packet_flags 
+22eb 204029f1 call prep_crypt 
+22ec 20402a5b call start_rx_native 
+22ed 204029eb call start_receiver 
+
+master_rx_conn_finish_packet:
+22ee 20402a0d call wait_access_clkn_rt 
+22ef 246c0000 nrtn sync 
+22f0 204029bb call save_rssi 
+22f1 2020251c branch receive_packet 
+
+master_newconn_once:
+22f2 4498c006 bpatch patch06_1 ,mem_patch06 
+22f3 68008181 fetch 1 ,mem_fhs_am_addr 
+22f4 98000800 iforce am_addr 
+22f5 18000201 force type_poll ,type 
+22f6 204022da call master_conn_send_packet 
+22f7 202022e4 branch master_conn_recv_packet 
+
+inquiry_scan_dispatch:
+22f8 6800c093 fetch 1 ,mem_scan_mode 
+22f9 c4000000 rtnbit0 inq_scan_mode 
+22fa 18000e04 force iscan_interval_timer ,queue 
+22fb 20407f16 call timer_check 
+22fc 247a0000 nrtn blank 
+22fd 680940ad fetcht 2 ,mem_iscan_window 
+22fe 18000e04 force 4 ,queue 
+22ff 2040271c call sniff_check_window 
+2300 20740000 rtn user 
+2301 20402308 call inquiry_scan_start 
+2302 18000e04 force iscan_interval_timer ,queue 
+2303 680140af fetch 2 ,mem_iscan_interval 
+2304 242c7f08 nbranch timer_init ,sync 
+2305 180a7e00 random pdata 
+2306 9ea17e00 iand mask3ff ,pdata 
+2307 20207f08 branch timer_init 
+
+inquiry_scan_start:
+2308 44994006 bpatch patch06_2 ,mem_patch06 
+2309 70018100 jam 0 ,mem_fhs_am_addr 
+230a 78587c00 disable clknt 
+230b 78577c00 disable attempt 
+230c 204028a4 call afh_clear 
+230d 1c4143fc and clkn_bt ,0x1fc ,bt_clk 
+230e 18004801 force 0x01 ,freq_mode 
+230f 204028d8 call fetch_giac 
+2310 204028cc call rx_radio_freq 
+2311 7940001d setflip mark_inquiry_state ,mark 
+2312 68008006 fetch 1 ,mem_inquiryscan_waitcnt 
+2313 1fe0fe01 increase 1 ,pdata 
+2314 60008006 store 1 ,mem_inquiryscan_waitcnt 
+2315 204028f2 call fetch_diac 
+2316 204029eb call start_receiver 
+2317 20402a14 call wait_access_forever 
+2318 246c0000 nrtn sync 
+2319 4499c006 bpatch patch06_3 ,mem_patch06 
+231a 18003600 force 0 ,stop_watch 
+231b 204028f9 call shutdown_radio 
+231c 68008007 fetch 1 ,mem_inquiryscan_rcvcnt 
+231d 1fe0fe01 increase 1 ,pdata 
+231e 60008007 store 1 ,mem_inquiryscan_rcvcnt 
+231f 204028d8 call fetch_giac 
+2320 20402a4d call rf_setup_time_slave_slot 
+2321 1c21c202 or_into 0x002 ,bt_clk 
+2322 18004801 force 0x01 ,freq_mode 
+2323 204028d2 call tx_radio_freq 
+2324 204028f2 call fetch_diac 
+2325 20402a51 call start_transmitter 
+2326 20402a5f call start_tx_external 
+2327 1c427e00 deposit clkn_bt 
+2328 60020161 store 4 ,mem_clkn_bt 
+2329 20402a64 call send_access_word 
+232a 18000202 force type_fhs ,type 
+232b 18000800 force 0 ,am_addr 
+232c 20402a6b call scan_mode_whiten 
+232d 20402766 call transmit_packet_whitened 
+232e 20402332 call send_eir 
+232f 1c2143fd and_into 0x1fd ,bt_clk 
+2330 1cc0cc01 increase 1 ,n_tx_slot 
+2331 20600000 rtn 
+
+send_eir:
+2332 449a4006 bpatch patch06_4 ,mem_patch06 
+2333 6800c0d1 fetch 1 ,mem_eir_enable 
+2334 207a0000 rtn blank 
+2335 d8a0018e arg mem_eir ,contw 
+2336 6800c515 fetch 1 ,mem_local_name_length 
+2337 1fe27200 copy pdata ,loopcnt 
+2338 1fe0fe01 increase 1 ,pdata 
+2339 e0a08000 istore 1 ,contw 
+233a 18a20400 copy contw ,temp 
+233b 1fe0fe01 increase 1 ,pdata 
+233c 600141dc store 2 ,mem_tx_len 
+233d 18420a00 copy temp ,contw 
+233e 58000009 setarg 0x09 
+233f e0a08000 istore 1 ,contw 
+2340 d8c04516 arg mem_local_name ,contr 
+2341 20407f01 call memcpy 
+2342 da60458d arg mem_all_uuid_128bits ,regc 
+2343 df200004 arg 4 ,loopcnt 
+2344 20402354 call get_all_uuid 
+2345 da604577 arg mem_all_uuid_16bits ,regc 
+2346 df200001 arg 1 ,loopcnt 
+2347 20402354 call get_all_uuid 
+2348 1800020a force type_dm3 ,type 
+2349 7041db02 jam 2 ,mem_tx_lch 
+234a 5800018e setarg mem_eir 
+234b 6001016f store 2 ,mem_txptr 
+234c 20402a4d call rf_setup_time_slave_slot 
+234d 204028d2 call tx_radio_freq 
+234e 20402a51 call start_transmitter 
+234f 20402a5f call start_tx_external 
+2350 20402a64 call send_access_word 
+2351 20402a6b call scan_mode_whiten 
+2352 20402766 call transmit_packet_whitened 
+2353 20600000 rtn 
+
+get_all_uuid:
+2354 18a20400 copy contw ,temp 
+2355 1a620c00 copy regc ,contr 
+2356 e8c08000 ifetch 1 ,contr 
+2357 207a0000 rtn blank 
+
+lshift_loop:
+2358 1fe3fe00 lshift pdata ,pdata 
+2359 c2002358 loop lshift_loop 
+235a 1fe22200 copy pdata ,rega 
+235b 1fe0fe02 increase 2 ,pdata 
+235c 1fe20e00 copy pdata ,queue 
+235d 680141dc fetch 2 ,mem_tx_len 
+235e 98e0fe00 iadd queue ,pdata 
+235f 600141dc store 2 ,mem_tx_len 
+2360 18420a00 copy temp ,contw 
+2361 1a227e00 copy rega ,pdata 
+2362 1fe0fe01 increase 1 ,pdata 
+2363 e0a08000 istore 1 ,contw 
+2364 1a620c00 copy regc ,contr 
+2365 e8c08000 ifetch 1 ,contr 
+2366 e8c08000 ifetch 1 ,contr 
+2367 e0a08000 istore 1 ,contw 
+2368 1a227200 copy rega ,loopcnt 
+2369 20207f01 branch memcpy 
+
+page_scan_dispatch:
+236a 6800c093 fetch 1 ,mem_scan_mode 
+236b c4008000 rtnbit0 page_scan_mode 
+236c 18000e05 force pscan_interval_timer ,queue 
+236d 20407f16 call timer_check 
+236e 247a0000 nrtn blank 
+236f 680940b1 fetcht 2 ,mem_pscan_window 
+2370 18000e28 force 40 ,queue 
+2371 2040271c call sniff_check_window 
+2372 20740000 rtn user 
+2373 18000800 force 0 ,am_addr 
+2374 70001008 jam param_pagerespto ,mem_fhs_wait_counter 
+2375 793f800b set0 mark_fhs_already_good ,mark 
+2376 2040237a call page_scan_start 
+2377 18000e05 force pscan_interval_timer ,queue 
+2378 680140b3 fetch 2 ,mem_pscan_interval 
+2379 20207f08 branch timer_init 
+
+page_scan_start:
+237a 449ac006 bpatch patch06_5 ,mem_patch06 
+237b 78587c00 disable clknt 
+237c 204028a4 call afh_clear 
+237d 68008008 fetch 1 ,mem_pagescan_waitcnt 
+237e 1fe0fe01 increase 1 ,pdata 
+237f 60008008 store 1 ,mem_pagescan_waitcnt 
+2380 18004c00 force 0 ,n_tx_slot 
+2381 204028e2 call fetch_self_bt_adr 
+2382 1c40c201 add clkn_bt ,1 ,bt_clk 
+2383 18004802 force 0x02 ,freq_mode 
+2384 449b4006 bpatch patch06_6 ,mem_patch06 
+2385 204028cc call rx_radio_freq 
+2386 204029eb call start_receiver 
+2387 20402a14 call wait_access_forever 
+2388 246c0000 nrtn sync 
+2389 204028f9 call shutdown_radio 
+238a 68008009 fetch 1 ,mem_pagescan_rcvcnt 
+238b 1fe0fe01 increase 1 ,pdata 
+238c 60008009 store 1 ,mem_pagescan_rcvcnt 
+238d 18003600 force 0 ,stop_watch 
+238e 20402a4d call rf_setup_time_slave_slot 
+238f 1c21c202 or_into 0x002 ,bt_clk 
+2390 18004801 force 0x01 ,freq_mode 
+2391 204028d2 call tx_radio_freq 
+2392 20402a51 call start_transmitter 
+2393 20402a5f call start_tx_external 
+2394 20402a64 call send_access_word 
+2395 2040264d call end_of_packet 
+2396 18000800 force 0 ,am_addr 
+2397 d9600600 arg param_rf_setup ,timeup 
+2398 35330200 until clke_rt ,meet 
+2399 1d01d003 or_into 0x03 ,clke_bt 
+239a 1c2143fd and_into 0x1fd ,bt_clk 
+
+page_scan_wait_fhs_restart:
+239b 449bc006 bpatch patch06_7 ,mem_patch06 
+239c 1cc0cc01 increase 1 ,n_tx_slot 
+239d 204028cc call rx_radio_freq 
+239e 204029eb call start_receiver 
+239f 20402a07 call wait_access_mhalfbnd 
+23a0 242c23a4 nbranch page_scan_wait_fhs_again ,sync 
+23a1 20402a6b call scan_mode_whiten 
+23a2 2040251e call receive_packet_whitened 
+23a3 c505a3ab bmark1 mark_fhs_already_good ,page_scan_reply_to_fhs 
+
+page_scan_wait_fhs_again:
+23a4 449c4007 bpatch patch07_0 ,mem_patch07 
+23a5 68008010 fetch 1 ,mem_fhs_wait_counter 
+23a6 207a0000 rtn blank 
+23a7 1fe0ffff increase -1 ,pdata 
+23a8 60008010 store 1 ,mem_fhs_wait_counter 
+23a9 20402a4f call rf_setup_time_master_slot 
+23aa 2020239b branch page_scan_wait_fhs_restart 
+
+page_scan_reply_to_fhs:
+23ab 449cc007 bpatch patch07_1 ,mem_patch07 
+23ac 793fd001 set0 1 ,clke_bt 
+23ad 79205000 set1 0 ,clke_bt 
+23ae 6800800a fetch 1 ,mem_pagescan_rcvfhscnt 
+23af 1fe0fe01 increase 1 ,pdata 
+23b0 6000800a store 1 ,mem_pagescan_rcvfhscnt 
+23b1 20402a4d call rf_setup_time_slave_slot 
+23b2 1c21c202 or_into 0x02 ,bt_clk 
+23b3 204028d2 call tx_radio_freq 
+23b4 20402a51 call start_transmitter 
+23b5 20402a5f call start_tx_external 
+23b6 20402a64 call send_access_word 
+23b7 2040264d call end_of_packet 
+
+slave_apply_clke_bt:
+23b8 2d000603 compare 0x03 ,clke_bt ,0x03 
+23b9 2020a3bc branch slave_apply_clke_bt_now ,true 
+23ba 37cb8200 until null ,mhalfbnd 
+23bb 202023b8 branch slave_apply_clke_bt 
+
+slave_apply_clke_bt_now:
+23bc 68020165 fetch 4 ,mem_clke_bt 
+23bd 1fe1fe03 or_into 0x03 ,pdata 
+23be 1fe25000 icopy clke_bt 
+
+start_slave_connection:
+23bf 449d4007 bpatch patch07_2 ,mem_patch07 
+23c0 68030178 fetch 6 ,extm_lap 
+23c1 60030040 store 6 ,mem_plap 
+23c2 20402435 call prepare_newconn 
+
+slave_newconn_loop:
+23c3 2040247c call slave_newconn_once 
+23c4 2036a3c8 branch sconn_successful ,match 
+23c5 20402455 call new_conn_timeout 
+23c6 243a23c3 nbranch slave_newconn_loop ,blank 
+23c7 20600000 rtn 
+
+sconn_successful:
+23c8 449dc007 bpatch patch07_3 ,mem_patch07 
+23c9 20402440 call newconn_init 
+23ca 2040223b call context_new 
+23cb 24628000 nrtn zero 
+23cc 70003100 jam 0 ,mem_mode 
+23cd 20402841 call calc_clke_offset 
+23ce 20202223 branch context_save 
+
+slave_dispatch:
+23cf 449e4007 bpatch patch07_4 ,mem_patch07 
+23d0 20402850 call calc_clke 
+23d1 204023f3 call role_switch_slave 
+23d2 20740000 rtn user 
+
+slave_loop:
+23d3 449ec007 bpatch patch07_5 ,mem_patch07 
+23d4 20402c69 call check_bt_disabled 
+23d5 20406caa call scheduler_process 
+23d6 20402514 call slave_conn_recv_packet 
+23d7 2436a3e2 nbranch slave_notmatch ,match 
+23d8 20402a88 call supervision_flush 
+23d9 20406cc2 call scheduler_tx_l2cap_pkt 
+23da 20402489 call prepare_tx 
+23db 20402757 call slave_conn_send_packet 
+23dc 20402728 call parse_l2cap 
+23dd 20405d08 call parse_lmp 
+23de 6800800b fetch 1 ,mem_slave_rcvcnt 
+23df 1fe0fe01 increase 1 ,pdata 
+23e0 6000800b store 1 ,mem_slave_rcvcnt 
+23e1 20402841 call calc_clke_offset 
+
+slave_notmatch:
+23e2 449f4007 bpatch patch07_6 ,mem_patch07 
+23e3 20402bb1 call lpm_set_mult 
+23e4 20402a7f call supervision_update 
+23e5 202123eb branch slave_disconnect ,positive 
+23e6 204021a7 call check_disconnect_timeout 
+23e7 243423eb nbranch slave_disconnect ,user 
+23e8 204026f3 call check_attempt 
+23e9 243a23d3 nbranch slave_loop ,blank 
+23ea 20600000 rtn 
+
+slave_disconnect:
+23eb 449fc007 bpatch patch07_7 ,mem_patch07 
+23ec 70015100 jam 0 ,mem_tester_emulate 
+23ed 70017f00 jam 0 ,mem_debug_config 
+23ee 2040245d call quit_connection 
+23ef 793f8011 set0 mark_testmode ,mark 
+23f0 20407fb0 call test_enable_white 
+23f1 68008030 fetch 1 ,mem_state 
+23f2 20600000 rtn 
+
+role_switch_slave:
+23f3 44a04008 bpatch patch08_0 ,mem_patch08 
+23f4 204021c9 call role_switch_check 
+23f5 24740000 nrtn user 
+23f6 18820400 copy am_addr ,temp 
+23f7 20402a6f call get_free_amaddr 
+23f8 60008181 store 1 ,mem_fhs_am_addr 
+23f9 18420800 copy temp ,am_addr 
+23fa 70001120 jam param_newconnto ,mem_newconnto_counter 
+
+roles_sendfhs_loop:
+23fb 44a0c008 bpatch patch08_1 ,mem_patch08 
+23fc 20402a4f call rf_setup_time_master_slot 
+23fd 18000202 force type_fhs ,type 
+23fe 2040274f call slave_send_access 
+23ff 1c427e00 deposit clkn_bt 
+2400 60020161 store 4 ,mem_clkn_bt 
+2401 20402762 call transmit_packet 
+2402 20402a4d call rf_setup_time_slave_slot 
+2403 7837fc00 enable user3 
+2404 204024f6 call slave_receive_access 
+2405 202c240d branch roles_got_fhs_reply ,sync 
+2406 204028f9 call shutdown_radio 
+2407 20402455 call new_conn_timeout 
+2408 243a23fb nbranch roles_sendfhs_loop ,blank 
+2409 c6820000 rtnmark0 mark_accept_switch 
+240a 70007c34 jam lmp_slot_offset ,mem_lmo_opcode2 
+240b 79200003 set1 mark_switch_initiated ,mark 
+240c 20600000 rtn 
+
+roles_got_fhs_reply:
+240d 78387c00 enable clknt 
+240e 20402435 call prepare_newconn 
+240f 204028a4 call afh_clear 
+
+roles_newconn_loop:
+2410 44a14008 bpatch patch08_2 ,mem_patch08 
+2411 204022f2 call master_newconn_once 
+2412 202c2419 branch roles_newconn_responded ,sync 
+2413 20402455 call new_conn_timeout 
+2414 243a2410 nbranch roles_newconn_loop ,blank 
+2415 78587c00 disable clknt 
+2416 1d027e00 deposit clke_bt 
+2417 600240ca store 4 ,mem_next_btclk 
+2418 20600000 rtn 
+
+roles_newconn_responded:
+2419 7834fc00 enable master 
+241a c582241f bmark0 mark_accept_switch ,roles_newconn_nolmp 
+241b 793f8004 set0 mark_accept_switch ,mark 
+241c 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+241d 70007d33 jam lmp_host_connection_req ,mem_lmi_opcode2 
+241e 204062f8 call tid_set_reply 
+
+roles_newconn_nolmp:
+241f 18827e00 deposit am_addr 
+2420 60008077 store 1 ,mem_amaddr 
+2421 18007e00 force 0 ,pdata 
+2422 60030038 store 6 ,mem_clk_offset 
+2423 68008031 fetch 1 ,mem_mode 
+2424 79207e01 set1 mode_master ,pdata 
+2425 60008031 store 1 ,mem_mode 
+2426 20402a88 call supervision_flush 
+2427 7854fc00 disable master 
+2428 78347c00 enable user 
+2429 20600000 rtn 
+
+init_rx_packet_flags:
+242a 44a1c008 bpatch patch08_3 ,mem_patch08 
+242b 7856fc00 disable match 
+242c 793f8005 set0 mark_loopback ,mark 
+242d 793f800a set0 mark_am_addr_broadcast ,mark 
+242e 793f8010 set0 mark_longpacket ,mark 
+242f 793f800f set0 mark_old_packet ,mark 
+2430 68008047 fetch 1 ,mem_arq 
+2431 793ffe05 set0 arqnx ,pdata 
+2432 79207e04 set1 flowx ,pdata 
+2433 60008047 store 1 ,mem_arq 
+2434 20600000 rtn 
+
+prepare_newconn:
+2435 44a24008 bpatch patch08_4 ,mem_patch08 
+2436 70001120 jam param_newconnto ,mem_newconnto_counter 
+2437 70004750 jam param_newconn_arq ,mem_arq 
+2438 680140bf fetch 2 ,mem_rx_window_init 
+2439 6001003e store 2 ,mem_rx_window 
+243a 1c427e00 deposit clkn_bt 
+243b 600240ca store 4 ,mem_next_btclk 
+243c 20780000 rtn clknt 
+243d 1d027e00 deposit clke_bt 
+243e 600240ca store 4 ,mem_next_btclk 
+243f 20600000 rtn 
+
+newconn_init:
+2440 44a2c008 bpatch patch08_5 ,mem_patch08 
+2441 20405d04 call init_lmp_reinit 
+2442 20402459 call new_conn_handle 
+2443 60008046 store 1 ,mem_conn_handle 
+2444 58000000 setarg 0 
+2445 6001025d store 2 ,mem_l2cap_rxbuff1_len 
+2446 58001c80 setarg param_supervision_to 
+2447 60010051 store 2 ,mem_supervision_to 
+2448 68008030 fetch 1 ,mem_state 
+2449 79207e00 set1 state_inconn ,pdata 
+244a 60008030 store 1 ,mem_state 
+244b 70004b00 jam 0 ,mem_op 
+244c 70004c00 jam 0 ,mem_state_map 
+244d 7000a000 jam 0 ,mem_lpm_current_mult 
+244e 20202a88 branch supervision_flush 
+
+clear_linkkey:
+244f 44a34008 bpatch patch08_6 ,mem_patch08 
+2450 18007e00 force 0 ,pdata 
+2451 600441be store 8 ,mem_link_key 
+2452 e0a40000 istore 8 ,contw 
+2453 204021c5 call clear_linkstate 
+2454 20202254 branch context_traverse_linkkey 
+
+new_conn_timeout:
+2455 68008011 fetch 1 ,mem_newconnto_counter 
+2456 1fe0ffff increase -1 ,pdata 
+2457 60008011 store 1 ,mem_newconnto_counter 
+2458 20600000 rtn 
+
+new_conn_handle:
+2459 6800c0cf fetch 1 ,mem_handle_num 
+245a 1fe0fe01 increase 1 ,pdata 
+245b 6000c0cf store 1 ,mem_handle_num 
+245c 20600000 rtn 
+
+quit_connection:
+245d 44a3c008 bpatch patch08_7 ,mem_patch08 
+245e 6800c1ce fetch 1 ,mem_hci_cmd 
+245f c001a462 beq hci_cmd_remote_name_req ,quit_connection_name 
+2460 68008048 fetch 1 ,mem_lmp_to_send 
+2461 c080a466 bne lmp_name_req ,quit_connection_cont 
+
+quit_connection_name:
+2462 20404d06 call cmd_check_plap 
+2463 2422a466 nbranch quit_connection_cont ,zero 
+2464 204021a4 call master_name_error 
+2465 7041ce00 jam 0 ,mem_hci_cmd 
+
+quit_connection_cont:
+2466 44a44009 bpatch patch09_0 ,mem_patch09 
+2467 204033af call app_disconn_reason_collect_bt 
+2468 204026e9 call sniff_exit 
+2469 700a9902 jam bt_evt_bb_disconnected ,mem_fifo_temp 
+246a 20407d86 call ui_ipc_send_event 
+246b 20405cf7 call init_lmp_work 
+246c 20404d6b call l2cap_init_work 
+246d 2040757d call sp_initialize 
+246e 68008030 fetch 1 ,mem_state 
+246f 793ffe00 set0 state_inconn 
+2470 60008030 store 1 ,mem_state 
+2471 70468100 jam 0 ,memui_reconnect_mode 
+2472 6800804c fetch 1 ,mem_state_map 
+2473 2fe18000 compare 0x0 ,pdata ,0xc0 
+2474 2020a476 branch quit_connection_not_clear_mark ,true 
+2475 793f8001 set0 mark_rxbuf_inuse ,mark 
+
+quit_connection_not_clear_mark:
+2476 68008047 fetch 1 ,mem_arq 
+2477 c301a478 bbit0 wack ,quit_connection_not_clear_tx 
+
+quit_connection_not_clear_tx:
+2478 6800804b fetch 1 ,mem_op 
+2479 c4030000 rtnbit0 op_txl2cap 
+247a 793f8002 set0 mark_tx_l2cap ,mark 
+247b 20600000 rtn 
+
+slave_newconn_once:
+247c 44a4c009 bpatch patch09_1 ,mem_patch09 
+247d 68008174 fetch 1 ,extm_newconn_am_addr 
+247e 207a0000 rtn blank 
+247f 1fe20800 icopy am_addr 
+2480 20402514 call slave_conn_recv_packet 
+2481 24768000 nrtn match 
+2482 18000200 force type_null ,type 
+2483 20402757 call slave_conn_send_packet 
+2484 18827e00 deposit am_addr 
+2485 60008077 store 1 ,mem_amaddr 
+2486 18007e00 force 0 ,pdata 
+2487 60008174 store 1 ,extm_newconn_am_addr 
+2488 20600000 rtn 
+
+prepare_tx:
+2489 44a54009 bpatch patch09_2 ,mem_patch09 
+248a 68008030 fetch 1 ,mem_state 
+248b c3012496 bbit0 state_insco ,prepare_tx_not_sco 
+248c 18000207 force type_hv3 ,type 
+248d c583a495 bmark0 mark_esco ,prepare_tx_not_esco 
+248e 20402725 call check_esco_amaddr 
+248f 2420a496 nbranch prepare_tx_not_sco ,true 
+2490 20372496 branch prepare_tx_not_sco ,attempt 
+2491 204024c1 call set_wait_ack 
+2492 58000002 setarg 2 
+2493 600140c8 store 2 ,mem_retransmission_cnt 
+2494 20600000 rtn 
+
+prepare_tx_not_esco:
+2495 24770000 nrtn attempt 
+
+prepare_tx_not_sco:
+2496 44a5c009 bpatch patch09_3 ,mem_patch09 
+2497 20402243 call context_check_all_wack 
+2498 2422a4a7 nbranch prepare_tx_no_retransmit ,zero 
+2499 68008047 fetch 1 ,mem_arq 
+249a c301a4b0 bbit0 wack ,prepare_tx_pollnull 
+
+prepare_tx_retransmit:
+249b c502a4b4 bmark1 mark_loopback ,prepare_tx_loopback 
+249c 6800817f fetch 1 ,mem_debug_config 
+249d c28324ba bbit1 debug_tx_pattern ,prepare_tx_txpat 
+249e 680140c8 fetch 2 ,mem_retransmission_cnt 
+249f 1fe0ffff increase -1 ,pdata 
+24a0 600140c8 store 2 ,mem_retransmission_cnt 
+24a1 203a24a5 branch prepare_tx_nomore_retransmit ,blank 
+24a2 6800c0c5 fetch 1 ,mem_last_type 
+24a3 98000200 iforce type 
+24a4 20600000 rtn 
+
+prepare_tx_nomore_retransmit:
+24a5 44a64009 bpatch patch09_4 ,mem_patch09 
+24a6 20402687 call clear_got_tx 
+
+prepare_tx_no_retransmit:
+24a7 20402725 call check_esco_amaddr 
+24a8 2020a4b0 branch prepare_tx_pollnull ,true 
+24a9 2040600a call send_lmp 
+24aa 203424be branch prepare_tx_sendlmp ,user 
+24ab 6800804b fetch 1 ,mem_op 
+24ac c28324c0 bbit1 op_txl2cap ,prepare_tx_sendl2cap 
+24ad c502a4b4 bmark1 mark_loopback ,prepare_tx_loopback 
+24ae 6800817f fetch 1 ,mem_debug_config 
+24af c28324ba bbit1 debug_tx_pattern ,prepare_tx_txpat 
+
+prepare_tx_pollnull:
+24b0 18000201 force type_poll ,type 
+24b1 20748000 rtn master 
+24b2 18000200 force type_null ,type 
+24b3 20600000 rtn 
+
+prepare_tx_loopback:
+24b4 44a6c009 bpatch patch09_5 ,mem_patch09 
+24b5 68008019 fetch 1 ,mem_rx_type 
+24b6 98000200 iforce type 
+24b7 c1808000 rtnne 1 
+24b8 18000200 force type_null ,type 
+24b9 20600000 rtn 
+
+prepare_tx_txpat:
+24ba 68008158 fetch 1 ,test_mode_packet_type 
+24bb 1fe1020f and pdata ,0xf ,type 
+24bc 79200005 set1 mark_loopback ,mark 
+24bd 20600000 rtn 
+
+prepare_tx_sendlmp:
+24be 18000213 force type_lmp ,type 
+24bf 202024c1 branch set_wait_ack 
+
+prepare_tx_sendl2cap:
+24c0 204024ca call tx_l2cap_type 
+
+set_wait_ack:
+24c1 44a74009 bpatch patch09_6 ,mem_patch09 
+24c2 68088047 fetcht 1 ,mem_arq 
+24c3 79200403 set1 wack ,temp 
+24c4 60088047 storet 1 ,mem_arq 
+24c5 18227e00 deposit type 
+24c6 6000c0c5 store 1 ,mem_last_type 
+24c7 5800ffff setarg 0xffff 
+24c8 600140c8 store 2 ,mem_retransmission_cnt 
+24c9 20600000 rtn 
+
+tx_l2cap_type:
+24ca 44a7c009 bpatch patch09_7 ,mem_patch09 
+24cb 6800804c fetch 1 ,mem_state_map 
+24cc 2feffe05 isolate1 smap_edr ,pdata 
+24cd 680141dc fetch 2 ,mem_tx_len 
+24ce 2020a4e0 branch tx_l2cap_type_edr ,true 
+24cf 18000203 force type_dm1 ,type 
+24d0 1fe67c11 sub pdata ,17 ,null 
+24d1 20610000 rtn positive 
+24d2 18000204 force type_dh1 ,type 
+24d3 1fe67c1b sub pdata ,27 ,null 
+24d4 20610000 rtn positive 
+24d5 1800020a force type_dm3 ,type 
+24d6 1fe67c79 sub pdata ,121 ,null 
+24d7 20610000 rtn positive 
+24d8 1800020b force type_dh3 ,type 
+24d9 1fe67cb7 sub pdata ,183 ,null 
+24da 20610000 rtn positive 
+24db 1800020e force type_dm5 ,type 
+24dc 1fe67ce0 sub pdata ,224 ,null 
+24dd 20610000 rtn positive 
+24de 1800020f force type_dh5 ,type 
+24df 20600000 rtn 
+
+tx_l2cap_type_edr:
+24e0 18000203 force type_dm1 ,type 
+24e1 1fe67c11 sub pdata ,17 ,null 
+24e2 20610000 rtn positive 
+24e3 18000204 force type_dh1 ,type 
+24e4 1fe67c36 sub pdata ,54 ,null 
+24e5 20610000 rtn positive 
+24e6 1800020a force type_dm3 ,type 
+24e7 d840016f arg 367 ,temp 
+24e8 98467c00 isub temp ,null 
+24e9 24610000 nrtn positive 
+24ea 1800020e force type_dm5 ,type 
+24eb d84002a7 arg 679 ,temp 
+24ec 98467c00 isub temp ,null 
+24ed 24610000 nrtn positive 
+24ee 1800020f force type_dh5 ,type 
+24ef 20600000 rtn 
+
+slave_receive_master_slot:
+24f0 68008030 fetch 1 ,mem_state 
+24f1 c300a4f5 bbit0 state_insniff ,slave_receive_notsniff 
+24f2 68010032 fetch 2 ,mem_tsniff 
+24f3 203a24f5 branch slave_receive_notsniff ,blank 
+24f4 243724f7 nbranch slave_receive_sniff ,attempt 
+
+slave_receive_notsniff:
+24f5 20402a4f call rf_setup_time_master_slot 
+
+slave_receive_access:
+24f6 1d00c201 add clke_bt ,1 ,bt_clk 
+
+slave_receive_sniff:
+24f7 78287c00 enable swfine 
+24f8 6801003e fetch 2 ,mem_rx_window 
+24f9 1fe37e00 rshift pdata ,pdata 
+24fa d8400500 arg param_pll_setup ,temp 
+24fb 9840fe00 iadd temp ,pdata 
+24fc 20402a24 call ahead_window 
+24fd 204028ea call fetch_extm_bt_adr 
+24fe 18004803 force 0x03 ,freq_mode 
+24ff 204028cc call rx_radio_freq 
+2500 2040242a call init_rx_packet_flags 
+2501 204029f1 call prep_crypt 
+2502 44a8400a bpatch patch0a_0 ,mem_patch0a 
+2503 6801003e fetch 2 ,mem_rx_window 
+2504 1fe37e00 rshift pdata ,pdata 
+2505 20402a24 call ahead_window 
+2506 204029eb call start_receiver 
+2507 7826fc00 enable decode_fec0 
+2508 6801003e fetch 2 ,mem_rx_window 
+2509 d84003bb arg param_clke_cal ,temp 
+250a 9840b600 iadd temp ,stop_watch 
+250b 37c18400 correlate null ,timeout 
+250c 1b420400 copy clke ,temp 
+250d 600b009a storet 6 ,mem_sync_clke 
+250e 7846fc00 disable decode_fec0 
+250f 246c0000 nrtn sync 
+2510 dd2003bb arg param_clke_cal ,clke_rt 
+2511 1c225000 copy bt_clk ,clke_bt 
+2512 2035ab05 branch lpm_adjust_clk ,wake 
+2513 20600000 rtn 
+
+slave_conn_recv_packet:
+2514 44a8c00a bpatch patch0a_1 ,mem_patch0a 
+2515 204024f0 call slave_receive_master_slot 
+2516 242c28f9 nbranch shutdown_radio ,sync 
+2517 204029bb call save_rssi 
+2518 c588a51c bmark0 mark_testmode ,receive_packet 
+2519 680100f6 fetch 2 ,mem_tst_pktcnt_sync 
+251a 1fe0fe01 increase 1 ,pdata 
+251b 600100f6 store 2 ,mem_tst_pktcnt_sync 
+
+receive_packet:
+251c 1c230400 rshift bt_clk ,temp 
+251d 18419c40 or temp ,0x40 ,white_init 
+
+receive_packet_whitened:
+251e 44a9400a bpatch patch0a_2 ,mem_patch0a 
+251f 7823fc00 enable enable_white 
+2520 78257c00 enable enable_hec 
+2521 7825fc00 enable decode_fec1 
+2522 09800003 parse demod ,bucket ,3 
+2523 198cfe00 rshift8 pwindow ,pdata 
+2524 6000815d store 1 ,mem_temp_am_addr 
+2525 09800004 parse demod ,bucket ,4 
+2526 08008007 inject bucket ,7 
+2527 19827e00 copy pwindow ,pdata 
+2528 60008019 store 1 ,mem_rx_type 
+2529 09800003 parse demod ,bucket ,3 
+252a 198cfe00 rshift8 pwindow ,pdata 
+252b 6000815e store 1 ,mem_temp_arq 
+252c 68008019 fetch 1 ,mem_rx_type 
+252d 1fe67c03 sub pdata ,3 ,null 
+252e 20212533 branch receive_packet_noedr ,positive 
+252f c003a533 beq 7 ,receive_packet_noedr 
+2530 6800804c fetch 1 ,mem_state_map 
+2531 2feffe05 isolate1 smap_edr ,pdata 
+2532 7920aa01 setflag true ,psk ,radio_ctrl 
+
+receive_packet_noedr:
+2533 44a9c00a bpatch patch0a_3 ,mem_patch0a 
+2534 09800008 parse demod ,bucket ,8 
+2535 7845fc00 disable decode_fec1 
+2536 78457c00 disable enable_hec 
+2537 20232631 branch error_header ,crc_failed 
+2538 c588a53c bmark0 mark_testmode ,receive_packet_amchk 
+2539 680100f8 fetch 2 ,mem_tst_pktcnt_hec 
+253a 1fe0fe01 increase 1 ,pdata 
+253b 600100f8 store 2 ,mem_tst_pktcnt_hec 
+
+receive_packet_amchk:
+253c 44aa400a bpatch patch0a_4 ,mem_patch0a 
+253d 6800815d fetch 1 ,mem_temp_am_addr 
+253e 2fe00e00 compare 0 ,pdata ,0x07 
+253f 7920800a setflag true ,mark_am_addr_broadcast ,mark 
+2540 2020a54c branch am_addr_ok ,true 
+2541 a8800e00 icompare 0x07 ,am_addr 
+2542 2020a54b branch am_addr_match ,true 
+2543 c583a64d bmark0 mark_esco ,end_of_packet 
+2544 680880b0 fetcht 1 ,mem_saved_amaddr 
+2545 a8400e00 icompare 0x7 ,temp 
+2546 2420a64d nbranch end_of_packet ,true 
+2547 68008047 fetch 1 ,mem_arq 
+2548 793ffe05 set0 arqnx ,pdata 
+2549 79207e04 set1 flowx ,pdata 
+254a 60008047 store 1 ,mem_arq 
+
+am_addr_match:
+254b 7836fc00 enable match 
+
+am_addr_ok:
+254c 44aac00a bpatch patch0a_5 ,mem_patch0a 
+254d 68008019 fetch 1 ,mem_rx_type 
+254e 1fe20200 icopy type 
+254f c505255b bmark1 mark_am_addr_broadcast ,arqn_bypass 
+2550 6808815e fetcht 1 ,mem_temp_arq 
+2551 68008047 fetch 1 ,mem_arq 
+2552 793ffe00 set0 flow ,pdata 
+2553 284ffe00 isolate1 flow ,temp 
+2554 7920fe00 setflag true ,flow ,pdata 
+2555 284ffe01 isolate1 arqn ,temp 
+2556 7920fe01 setflag true ,arqn ,pdata 
+2557 60008047 store 1 ,mem_arq 
+2558 284c0001 isolate0 arqn ,temp 
+2559 2020a55b branch arqn_bypass ,true 
+255a 20402687 call clear_got_tx 
+
+arqn_bypass:
+255b 44ab400a bpatch patch0a_6 ,mem_patch0a 
+255c d8400000 arg 0 ,temp 
+255d 20402a1c call reserve_slot 
+255e 18217e0f and type ,0xf ,pdata 
+255f c000a587 beq type_poll ,process_poll 
+2560 c000264d beq type_null ,end_of_packet 
+2561 c0012659 beq type_fhs ,process_fhs 
+2562 6808815e fetcht 1 ,mem_temp_arq 
+2563 68008047 fetch 1 ,mem_arq 
+2564 a8400800 icompare 0x04 ,temp 
+2565 2420a569 nbranch rx_type_dispatch ,true 
+2566 c5852568 bmark0 mark_am_addr_broadcast ,failed_seqn 
+2567 c303a569 bbit0 bcast1 ,rx_type_dispatch 
+
+failed_seqn:
+2568 7920000f set1 mark_old_packet ,mark 
+
+rx_type_dispatch:
+2569 44abc00a bpatch patch0a_7 ,mem_patch0a 
+256a 18227e00 deposit type 
+256b c001a589 beq type_dm1 ,process_dm1 
+256c c002258d beq type_dh1 ,process_dh1 
+256d c003a578 beq type_hv3 ,process_hev 
+256e c004258c beq type_3dh1 ,process_3dh1 
+256f d8400004 arg 4 ,temp 
+2570 20402a1c call reserve_slot 
+2571 c0052588 beq type_dm3 ,process_dm3 
+2572 c005a58b beq type_dh3 ,process_dh3 
+2573 d8400008 arg 8 ,temp 
+2574 20402a1c call reserve_slot 
+2575 c0072588 beq type_dm5 ,process_dm5 
+2576 c007a58b beq type_dh5 ,process_dh5 
+2577 20600000 rtn 
+
+process_hev:
+2578 44ac400b bpatch patch0b_0 ,mem_patch0b 
+2579 7826fc00 enable decode_fec0 
+257a 7824fc00 enable enable_crc 
+257b 78277c00 enable encrypt 
+257c d8a000d1 arg mem_sco_ibuf ,contw 
+257d 1800721e force 30 ,loopcnt 
+
+process_hev_loop:
+257e 09800008 parse demod ,bucket ,8 
+257f 19897e00 rshift3 pwindow ,pdata 
+2580 e0a08000 istore 1 ,contw 
+2581 c200257e loop process_hev_loop 
+2582 c583a64d bmark0 mark_esco ,end_of_packet 
+2583 09800010 parse demod ,bucket ,16 
+2584 7d230008 nsetflag crc_failed ,mark_esco_rxok ,mark 
+2585 2023263d branch error_payload ,crc_failed 
+2586 20202620 branch ack_payload 
+
+process_poll:
+2587 2020264d branch end_of_packet 
+
+process_dm3:
+
+process_dm5:
+2588 79200010 set1 mark_longpacket ,mark 
+
+process_dm1:
+2589 78267c00 enable decode_fec2 
+258a 2020258e branch process_dmh 
+
+process_dh3:
+
+process_dh5:
+258b 79200010 set1 mark_longpacket ,mark 
+
+process_3dh1:
+258c 79202a02 set1 psk3m ,radio_ctrl 
+
+process_dh1:
+258d 7826fc00 enable decode_fec0 
+
+process_dmh:
+258e 44acc00b bpatch patch0b_1 ,mem_patch0b 
+258f c500a64d bmark1 mark_rxbuf_inuse ,end_of_packet 
+2590 2aac0001 isolate0 psk ,radio_ctrl 
+2591 2020a59a branch process_dmh_noedr ,true 
+2592 7843fc00 disable enable_white 
+2593 7826fc00 enable decode_fec0 
+2594 78467c00 disable decode_fec2 
+2595 1c409602 add clkn_bt ,2 ,timeup 
+2596 34530400 correlate clkn_bt ,meet 
+2597 242c263d nbranch error_payload ,sync 
+2598 79200010 set1 mark_longpacket ,mark 
+2599 7823fc00 enable enable_white 
+
+process_dmh_noedr:
+259a 44ad400b bpatch patch0b_2 ,mem_patch0b 
+259b 78277c00 enable encrypt 
+259c 7824fc00 enable enable_crc 
+259d 09800003 parse demod ,bucket ,3 
+259e 198cfe00 rshift8 pwindow ,pdata 
+259f 60008180 store 1 ,mem_lch_code 
+25a0 09800005 parse demod ,bucket ,5 
+25a1 c50825a5 bmark1 mark_longpacket ,process_dmh_long 
+25a2 19897200 rshift3 pwindow ,loopcnt 
+25a3 1f297200 rshift3 loopcnt ,loopcnt 
+25a4 202025a8 branch process_dmh_common 
+
+process_dmh_long:
+25a5 09800005 parse demod ,bucket ,5 
+25a6 19837200 rshift pwindow ,loopcnt 
+25a7 09800003 parse demod ,bucket ,3 
+
+process_dmh_common:
+25a8 44adc00b bpatch patch0b_3 ,mem_patch0b 
+25a9 1f227e00 deposit loopcnt 
+25aa 6001015f store 2 ,mem_len 
+25ab 203a25e8 branch process_dmh_data_end ,blank 
+25ac 9ea67c00 isub mask3ff ,null 
+25ad 2021263d branch error_payload ,positive 
+25ae 44ae400b bpatch patch0b_4 ,mem_patch0b 
+25af 793f8000 set0 mark_fhs_eir ,mark 
+25b0 68008180 fetch 1 ,mem_lch_code 
+25b1 1fe17e03 and_into 0x03 ,pdata 
+25b2 d8a00551 arg mem_rxbuf ,contw 
+25b3 c001a5ba beq llid_lmp ,process_lmp 
+25b4 c508a5e4 bmark1 mark_testmode ,process_dmh_data 
+25b5 68008180 fetch 1 ,mem_lch_code 
+25b6 1fe17e03 and_into 0x03 ,pdata 
+25b7 c00125bf beq llid_l2cap_start ,process_dmh_data_l2cap_start_pkt 
+25b8 c000a5d3 beq llid_l2cap_cont ,process_dmh_data_l2cap_continue_pkt 
+25b9 2020263d branch error_payload 
+
+process_lmp:
+25ba 6801015f fetch 2 ,mem_len 
+25bb 1fe67c70 sub pdata ,0x70 ,null 
+25bc 2421263d nbranch error_payload ,positive 
+25bd c507a620 bmark1 mark_old_packet ,ack_payload 
+25be 202025e4 branch process_dmh_data 
+
+process_dmh_data_l2cap_start_pkt:
+25bf 44aec00b bpatch patch0b_5 ,mem_patch0b 
+25c0 c507a620 bmark1 mark_old_packet ,ack_payload 
+25c1 6801015f fetch 2 ,mem_len 
+25c2 d84002e0 arg 0x2e0 ,temp 
+25c3 98467c00 isub temp ,null 
+25c4 2021263d branch error_payload ,positive 
+25c5 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 
+25c6 c30025c9 bbit0 l2cap_inuse_buff1 ,process_dmh_data_into_buff1 
+25c7 c300a5ce bbit0 l2cap_inuse_buff2 ,process_dmh_data_into_buff2 
+25c8 2020264d branch end_of_packet 
+
+process_dmh_data_into_buff1:
+25c9 70026101 jam 1 ,mem_l2cap_rxbuff_new 
+25ca 6801025d fetch 2 ,mem_l2cap_rxbuff1_len 
+25cb c080264d bne 0 ,end_of_packet 
+25cc d8a01000 arg mem_l2cap_rxbuff1 ,contw 
+25cd 202025e4 branch process_dmh_data 
+
+process_dmh_data_into_buff2:
+25ce 70026102 jam 2 ,mem_l2cap_rxbuff_new 
+25cf 6801025f fetch 2 ,mem_l2cap_rxbuff2_len 
+25d0 c080264d bne 0 ,end_of_packet 
+25d1 d8a01400 arg mem_l2cap_rxbuff2 ,contw 
+25d2 202025e4 branch process_dmh_data 
+
+process_dmh_data_l2cap_continue_pkt:
+25d3 44af400b bpatch patch0b_6 ,mem_patch0b 
+25d4 c507a620 bmark1 mark_old_packet ,ack_payload 
+25d5 6801015f fetch 2 ,mem_len 
+25d6 d84002e0 arg 0x2e0 ,temp 
+25d7 98467c00 isub temp ,null 
+25d8 2021263d branch error_payload ,positive 
+25d9 68008261 fetch 1 ,mem_l2cap_rxbuff_new 
+25da c000a5dd beq 1 ,process_dmh_data_l2cap_continue_pkt1 
+25db c00125e1 beq 2 ,process_dmh_data_l2cap_continue_pkt2 
+25dc 2020264d branch end_of_packet 
+
+process_dmh_data_l2cap_continue_pkt1:
+25dd d8a01000 arg mem_l2cap_rxbuff1 ,contw 
+25de 6801025d fetch 2 ,mem_l2cap_rxbuff1_len 
+25df 98a08a00 iadd contw ,contw 
+25e0 202025e4 branch process_dmh_data 
+
+process_dmh_data_l2cap_continue_pkt2:
+25e1 d8a01400 arg mem_l2cap_rxbuff2 ,contw 
+25e2 6801025f fetch 2 ,mem_l2cap_rxbuff2_len 
+25e3 98a08a00 iadd contw ,contw 
+
+process_dmh_data:
+25e4 09800008 parse demod ,bucket ,8 
+25e5 19897e00 rshift3 pwindow ,pdata 
+25e6 e0a08000 istore 1 ,contw 
+25e7 c20025e4 loop process_dmh_data 
+
+process_dmh_data_end:
+25e8 44afc00b bpatch patch0b_7 ,mem_patch0b 
+25e9 09800010 parse demod ,bucket ,16 
+25ea 20232637 branch error_payload_crc ,crc_failed 
+25eb 6800c363 fetch 1 ,mem_l2cap_flow_ctrl_flag 
+25ec c000a64d beq l2cap_flow_ctrl_enable ,end_of_packet 
+25ed c508a60d bmark1 mark_testmode ,process_dmh_cont 
+25ee c507a64a bmark1 mark_old_packet ,redundant_payload 
+25ef 68008180 fetch 1 ,mem_lch_code 
+25f0 2fe00603 compare 3 ,pdata ,3 
+25f1 2020a60d branch process_dmh_cont ,true 
+25f2 6801015f fetch 2 ,mem_len 
+25f3 203a260d branch process_dmh_cont ,blank 
+25f4 44b0400c bpatch patch0c_0 ,mem_patch0c 
+25f5 68008261 fetch 1 ,mem_l2cap_rxbuff_new 
+25f6 c000a5f9 beq 1 ,process_l2cap_pass_crc_buff1 
+25f7 c0012603 beq 2 ,process_l2cap_pass_crc_buff2 
+25f8 20202a8c branch assert 
+
+process_l2cap_pass_crc_buff1:
+25f9 6801025d fetch 2 ,mem_l2cap_rxbuff1_len 
+25fa 6809015f fetcht 2 ,mem_len 
+25fb 9840fe00 iadd temp ,pdata 
+25fc 6001025d store 2 ,mem_l2cap_rxbuff1_len 
+25fd c0002a8c beq 0 ,assert 
+25fe 68091000 fetcht 2 ,mem_l2cap_rxbuff1 
+25ff 18408404 increase 4 ,temp 
+2600 98467c00 isub temp ,null 
+2601 2042a747 call l2cap_buff1_inuse ,zero 
+2602 2020260d branch process_dmh_cont 
+
+process_l2cap_pass_crc_buff2:
+2603 6801025f fetch 2 ,mem_l2cap_rxbuff2_len 
+2604 6809015f fetcht 2 ,mem_len 
+2605 9840fe00 iadd temp ,pdata 
+2606 6001025f store 2 ,mem_l2cap_rxbuff2_len 
+2607 c0002a8c beq 0 ,assert 
+2608 68091400 fetcht 2 ,mem_l2cap_rxbuff2 
+2609 18408404 add temp ,4 ,temp 
+260a 98467c00 isub temp ,null 
+260b 2042a74b call l2cap_buff2_inuse ,zero 
+260c 2020260d branch process_dmh_cont 
+
+process_dmh_cont:
+260d 44b0c00c bpatch patch0c_1 ,mem_patch0c 
+260e 6808804c fetcht 1 ,mem_state_map 
+260f 68008180 fetch 1 ,mem_lch_code 
+2610 2fe00603 compare 3 ,pdata ,0x03 
+2611 79208406 setflag true ,smap_rxlmp ,temp 
+2612 7d208407 nsetflag true ,smap_rxl2cap ,temp 
+2613 6008804c storet 1 ,mem_state_map 
+2614 2420a616 nbranch process_dmh_cont_rxbuf_not_use ,true 
+2615 79200001 set1 mark_rxbuf_inuse ,mark 
+
+process_dmh_cont_rxbuf_not_use:
+2616 c588a620 bmark0 mark_testmode ,ack_payload 
+2617 284ffe06 isolate1 smap_rxlmp ,temp 
+2618 2020a620 branch ack_payload ,true 
+2619 680100fa fetch 2 ,mem_tst_pktcnt_crc 
+261a 1fe0fe01 increase 1 ,pdata 
+261b 600100fa store 2 ,mem_tst_pktcnt_crc 
+261c 79200005 set1 mark_loopback ,mark 
+261d 793f8407 set0 smap_rxl2cap ,temp 
+261e 793f8001 set0 mark_rxbuf_inuse ,mark 
+261f 6008804c storet 1 ,mem_state_map 
+
+ack_payload:
+2620 44b1400c bpatch patch0c_2 ,mem_patch0c 
+2621 6808815e fetcht 1 ,mem_temp_arq 
+2622 68008047 fetch 1 ,mem_arq 
+2623 79207e05 set1 arqnx ,pdata 
+2624 284ffe02 isolate1 seqn ,temp 
+2625 7920fe02 setflag true ,seqn ,pdata 
+2626 280ffe0a isolate1 mark_am_addr_broadcast ,mark 
+2627 7920fe07 setflag true ,bcast1 ,pdata 
+2628 60008047 store 1 ,mem_arq 
+2629 6801015f fetch 2 ,mem_len 
+262a 243a264d nbranch end_of_packet ,blank 
+262b 6800804c fetch 1 ,mem_state_map 
+262c 793ffe07 set0 smap_rxl2cap ,pdata 
+262d 6000804c store 1 ,mem_state_map 
+262e 68008180 fetch 1 ,mem_lch_code 
+262f 2fe00e01 compare 0x01 ,pdata ,0x07 
+2630 2020264d branch end_of_packet 
+
+error_header:
+2631 44b1c00c bpatch patch0c_3 ,mem_patch0c 
+2632 7856fc00 disable match 
+2633 6801001a fetch 2 ,mem_rx_hec_err 
+2634 1fe0fe01 increase 1 ,pdata 
+2635 6001001a store 2 ,mem_rx_hec_err 
+2636 2020264d branch end_of_packet 
+
+error_payload_crc:
+2637 6801001c fetch 2 ,mem_rx_crc_err 
+2638 1fe0fe01 increase 1 ,pdata 
+2639 6001001c store 2 ,mem_rx_crc_err 
+263a 2040263e call discard_pkt 
+263b c588a63d bmark0 mark_testmode ,error_payload 
+263c 79200005 set1 mark_loopback ,mark 
+
+error_payload:
+263d 2020264d branch end_of_packet 
+
+discard_pkt:
+263e 44b2400c bpatch patch0c_4 ,mem_patch0c 
+263f 68008180 fetch 1 ,mem_lch_code 
+2640 2fe00603 compare 3 ,pdata ,0x03 
+2641 2420a646 nbranch discard_pkt_l2cap ,true 
+
+discard_pkt_lmp:
+2642 6808804c fetcht 1 ,mem_state_map 
+2643 793f8406 set0 smap_rxlmp ,temp 
+2644 6008804c storet 1 ,mem_state_map 
+2645 20600000 rtn 
+
+discard_pkt_l2cap:
+2646 6808804c fetcht 1 ,mem_state_map 
+2647 793f8407 set0 smap_rxl2cap ,temp 
+2648 6008804c storet 1 ,mem_state_map 
+2649 20204c0b branch h4_send_acl_trigger_clear 
+
+redundant_payload:
+264a 68008047 fetch 1 ,mem_arq 
+264b 79207e05 set1 arqnx ,pdata 
+264c 60008047 store 1 ,mem_arq 
+
+end_of_packet:
+264d 44b2c00c bpatch patch0c_5 ,mem_patch0c 
+264e 784efc00 disable encode_fec0 
+264f 784e7c00 disable encode_fec2 
+2650 7846fc00 disable decode_fec0 
+2651 78467c00 disable decode_fec2 
+2652 7844fc00 disable enable_crc 
+2653 78477c00 disable encrypt 
+2654 7843fc00 disable enable_white 
+2655 2030a8f9 branch shutdown_radio ,is_rx 
+2656 37d38200 until null ,tx_clear 
+2657 20000064 nop 100 
+2658 202028f9 branch shutdown_radio 
+
+process_fhs:
+2659 44b3400c bpatch patch0c_6 ,mem_patch0c 
+265a 7824fc00 enable enable_crc 
+265b 78267c00 enable decode_fec2 
+265c 09800048 parse demod ,bucket ,72 
+265d 2feffe3a isolate1 58 ,pdata 
+265e 79208000 setflag true ,mark_fhs_eir ,mark 
+265f 1c020400 copy bt_adr ,temp 
+2660 57e04000 ialigned bt_adr 
+2661 57e03c00 ialigned fhs0 
+2662 782afc00 pulse recalc 
+2663 380bffff setsect 2 ,0xfffff 
+2664 380cffff setsect 3 ,0x0ffff 
+2665 20000020 nop 32 
+2666 29a80000 iverify fhs_parity 
+2667 1d827e00 deposit lap 
+2668 60018178 store 3 ,extm_lap 
+2669 1da27e00 deposit uap 
+266a 6000817b store 1 ,extm_uap 
+266b 18424000 copy temp ,bt_adr 
+266c 2020a66e branch fhs_parity_ok ,true 
+266d 2020263d branch error_payload 
+
+fhs_parity_ok:
+266e 44b3c00c bpatch patch0c_7 ,mem_patch0c 
+266f 09800048 parse demod ,bucket ,72 
+2670 57e03e00 ialigned fhs1 
+2671 57e00800 ialigned am_addr 
+2672 57e05c00 ialigned nap 
+2673 57e02400 ialigned regb 
+2674 18007e00 force 0 ,pdata 
+2675 09800010 parse demod ,bucket ,16 
+2676 2023263d branch error_payload ,crc_failed 
+2677 5ffffffc setarg 0x0ffffffc 
+2678 9a417e00 iand regb ,pdata 
+2679 60020165 store 4 ,mem_clke_bt 
+267a 1ba27e00 deposit fhs_class 
+267b 60018175 store 3 ,extm_class 
+267c 1b827e00 deposit fhs_misc 
+267d 60008173 store 1 ,extm_fhs_misc 
+267e 18827e00 deposit am_addr 
+267f 60008174 store 1 ,extm_newconn_am_addr 
+2680 1dc27e00 deposit nap 
+2681 6001017c store 2 ,extm_nap 
+2682 1c227e00 deposit bt_clk 
+2683 08008220 inject rxf ,32 
+2684 28201e02 compare type_fhs ,type ,0x0f 
+2685 7920800b setflag true ,mark_fhs_already_good ,mark 
+2686 2020264d branch end_of_packet 
+
+clear_got_tx:
+2687 44b4400d bpatch patch0d_0 ,mem_patch0d 
+2688 68008047 fetch 1 ,mem_arq 
+2689 c4018000 rtnbit0 wack 
+268a 793ffe03 set0 wack ,pdata 
+268b 79407e06 setflip seqnx ,pdata 
+268c 60008047 store 1 ,mem_arq 
+268d 6800c0c5 fetch 1 ,mem_last_type 
+268e c009a69c beq type_lmp ,clear_got_txlmp 
+268f c1038000 rtneq type_hv3 
+2690 6800804b fetch 1 ,mem_op 
+2691 c4030000 rtnbit0 op_txl2cap ,pdata 
+2692 793ffe06 set0 op_txl2cap ,pdata 
+2693 79207e07 set1 op_pkt_comp ,pdata 
+2694 6000804b store 1 ,mem_op 
+2695 793f8002 set0 mark_tx_l2cap ,mark 
+2696 68014246 fetch 2 ,mem_l2cap_tx_multi_offset 
+2697 247a0000 nrtn blank 
+2698 6800804b fetch 1 ,mem_op 
+2699 793ffe07 set0 op_pkt_comp ,pdata 
+269a 6000804b store 1 ,mem_op 
+269b 2020525d branch l2cap_malloc_free 
+
+clear_got_txlmp:
+269c 44b4c00d bpatch patch0d_1 ,mem_patch0d 
+269d 680084b7 fetch 1 ,mem_lmo_header_opcode 
+269e 1fe37e00 rshift pdata ,pdata 
+269f c008a6b8 beq lmp_start_encryption_req ,start_encryption 
+26a0 c00926c0 beq lmp_stop_encryption_req ,stop_encryption 
+26a1 c00c26e9 beq lmp_unsniff_req ,sniff_exit 
+26a2 c03fa6a8 beq lmp_escape ,clear_lmp_escape 
+26a3 c1818000 rtnne lmp_accepted 
+26a4 680084b8 fetch 1 ,mem_lmo_payload 
+26a5 c015a6b0 beq lmp_sco_link_req ,sco_link_req_by_slave 
+26a6 c008a6ab beq lmp_start_encryption_req ,clear_send_setup_complete 
+26a7 20600000 rtn 
+
+clear_lmp_escape:
+26a8 680084b8 fetch 1 ,mem_lmo_payload 
+26a9 79207e07 set1 7 ,pdata 
+26aa 20600000 rtn 
+
+clear_send_setup_complete:
+26ab 20748000 rtn master 
+26ac 68008030 fetch 1 ,mem_state 
+26ad c3820000 rtnbit1 state_conn_comp 
+26ae 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 
+26af 20600000 rtn 
+
+sco_link_req_by_slave:
+26b0 20748000 rtn master 
+26b1 68008031 fetch 1 ,mem_mode 
+26b2 2feffe04 isolate1 send_sco_when_slave ,pdata 
+26b3 2020a6b5 branch clean_mem_mode ,true 
+26b4 20600000 rtn 
+
+clean_mem_mode:
+26b5 793ffe04 set0 send_sco_when_slave ,pdata 
+26b6 60008031 store 1 ,mem_mode 
+26b7 20600000 rtn 
+
+start_encryption:
+26b8 44b5400d bpatch patch0d_2 ,mem_patch0d 
+26b9 6800804c fetch 1 ,mem_state_map 
+26ba 79207e02 set1 smap_encryption ,pdata 
+26bb 6000804c store 1 ,mem_state_map 
+26bc 70801101 jam 1 ,core_encrypt 
+26bd 68008030 fetch 1 ,mem_state 
+26be 2feffe04 isolate1 state_conn_comp ,pdata 
+26bf 20600000 rtn 
+
+stop_encryption:
+26c0 44b5c00d bpatch patch0d_3 ,mem_patch0d 
+26c1 6800804c fetch 1 ,mem_state_map 
+26c2 793ffe02 set0 smap_encryption ,pdata 
+26c3 6000804c store 1 ,mem_state_map 
+26c4 70801100 jam 0 ,core_encrypt 
+26c5 20600000 rtn 
+
+sniff_init:
+26c6 44b6400d bpatch patch0d_4 ,mem_patch0d 
+26c7 1c427e00 copy clkn_bt ,pdata 
+26c8 6002420c store 4 ,mem_lpm_delay_after_sniff 
+26c9 1c40a203 add clkn_bt ,3 ,rega 
+26ca 2034a6cc branch sniff_init_master ,master 
+26cb 1d00a203 add clke_bt ,3 ,rega 
+
+sniff_init_master:
+26cc 68090032 fetcht 2 ,mem_tsniff 
+26cd 1a227e00 deposit rega 
+26ce 793ffe1b set0 27 ,pdata 
+26cf 9846fc00 idiv temp 
+26d0 68010075 fetch 2 ,mem_dsniff 
+26d1 20407f86 call wait_div_end 
+26d2 18072600 remainder regc 
+26d3 9a667e00 isub regc ,pdata 
+26d4 202126d6 branch sniff_init_nowrap ,positive 
+26d5 9840fe00 iadd temp ,pdata 
+
+sniff_init_nowrap:
+26d6 9a20fe00 iadd rega ,pdata 
+26d7 60020034 store 4 ,mem_sniff_anchor 
+26d8 70455b00 jam switch_flag_init ,mem_switch_flag 
+26d9 68008030 fetch 1 ,mem_state 
+26da 79207e01 set1 state_insniff ,pdata 
+26db 60008030 store 1 ,mem_state 
+26dc 68008073 fetch 1 ,mem_sniff_attempt 
+26dd 6000808a store 1 ,mem_current_sniff_attempt 
+26de 58000000 setarg 0 
+26df 6001c169 store 3 ,mem_sniff_rcv 
+26e0 6001c16c store 3 ,mem_sniff_lost 
+26e1 6000c159 store 1 ,mem_sniff_unint_lost 
+26e2 700a990b jam bt_evt_enter_sniff ,mem_fifo_temp 
+26e3 20407d86 call ui_ipc_send_event 
+26e4 680140c1 fetch 2 ,mem_rx_window_sniff 
+26e5 6001003e store 2 ,mem_rx_window 
+26e6 24748000 nrtn master 
+26e7 18808fff add am_addr ,-1 ,queue 
+26e8 20600000 rtn 
+
+sniff_exit:
+26e9 44b6c00d bpatch patch0d_5 ,mem_patch0d 
+26ea 68008030 fetch 1 ,mem_state 
+26eb c4008000 rtnbit0 state_insniff 
+26ec 793ffe01 set0 state_insniff ,pdata 
+26ed 60008030 store 1 ,mem_state 
+26ee 680140bf fetch 2 ,mem_rx_window_init 
+26ef 6001003e store 2 ,mem_rx_window 
+26f0 7855fc00 disable wake 
+26f1 700a990c jam bt_evt_exit_sniff ,mem_fifo_temp 
+26f2 20207d86 branch ui_ipc_send_event 
+
+check_attempt:
+26f3 44b7400d bpatch patch0d_6 ,mem_patch0d 
+26f4 78377c00 enable attempt 
+26f5 68008030 fetch 1 ,mem_state 
+26f6 c280a700 bbit1 state_insniff ,check_attempt_sniff 
+26f7 c6088000 rtnmark1 mark_testmode 
+26f8 68008047 fetch 1 ,mem_arq 
+26f9 c3818000 rtnbit1 wack 
+26fa 68008048 fetch 1 ,mem_lmp_to_send 
+26fb 247a0000 nrtn blank 
+26fc 6800804b fetch 1 ,mem_op 
+26fd c3830000 rtnbit1 op_txl2cap 
+
+check_attempt_nomore:
+26fe 18007e00 force 0 ,pdata 
+26ff 20600000 rtn 
+
+check_attempt_sniff:
+2700 c301270f bbit0 state_insco ,check_attempt_not_sco 
+2701 6800808a fetch 1 ,mem_current_sniff_attempt 
+2702 c0012706 beq 2 ,check_attempt_sniff_restore_sco 
+2703 68008047 fetch 1 ,mem_arq 
+2704 c281a718 bbit1 wack ,check_attempt_notimeout 
+2705 c5842718 bmark0 mark_esco_rxok ,check_attempt_notimeout 
+
+check_attempt_sniff_restore_sco:
+2706 2434a718 nbranch check_attempt_notimeout ,master 
+2707 68008048 fetch 1 ,mem_lmp_to_send 
+2708 243a2718 nbranch check_attempt_notimeout ,blank 
+
+check_attempt_sco_master:
+2709 680080ef fetch 1 ,mem_sco_poll 
+270a 1fe0ffff increase -1 ,pdata 
+270b 600080ef store 1 ,mem_sco_poll 
+270c 243a26fe nbranch check_attempt_nomore ,blank 
+270d 7000ef10 jam param_sco_poll ,mem_sco_poll 
+270e 20202718 branch check_attempt_notimeout 
+
+check_attempt_not_sco:
+270f 6800808a fetch 1 ,mem_current_sniff_attempt 
+2710 c080a718 bne 1 ,check_attempt_notimeout 
+2711 6800808b fetch 1 ,mem_current_sniff_timeout 
+2712 203a2718 branch check_attempt_notimeout ,blank 
+2713 1fe0ffff increase -1 ,pdata 
+2714 6000808b store 1 ,mem_current_sniff_timeout 
+2715 68008047 fetch 1 ,mem_arq 
+2716 c3818000 rtnbit1 wack 
+2717 24768000 nrtn match 
+
+check_attempt_notimeout:
+2718 6800808a fetch 1 ,mem_current_sniff_attempt 
+2719 1fe0ffff increase -1 ,pdata 
+271a 6000808a store 1 ,mem_current_sniff_attempt 
+271b 20600000 rtn 
+
+sniff_check_window:
+271c 44b7c00d bpatch patch0d_7 ,mem_patch0d 
+271d 78487c00 disable swfine 
+271e 18423600 copy temp ,stop_watch 
+271f 20402260 call context_search_sniff_window 
+2720 78547c00 disable user 
+2721 24628000 nrtn zero 
+2722 18003600 force 0 ,stop_watch 
+2723 78347c00 enable user 
+2724 20600000 rtn 
+
+check_esco_amaddr:
+2725 6800c158 fetch 1 ,mem_esco_addr 
+2726 a881fe00 icompare 0xff ,am_addr 
+2727 20600000 rtn 
+
+parse_l2cap:
+2728 44b8400e bpatch patch0e_0 ,mem_patch0e 
+2729 793f8001 set0 mark_rxbuf_inuse ,mark 
+
+parse_l2cap_cont:
+272a 70026a00 jam l2cap_rx_clear ,mem_l2cap_rx_done 
+272b 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 
+272c 207a0000 rtn blank 
+272d 2feffe00 isolate1 l2cap_inuse_buff1 ,pdata 
+272e d8c01000 arg mem_l2cap_rxbuff1 ,contr 
+272f 2040cd79 call process_rx_l2cap_pkt ,true 
+2730 44b8c00e bpatch patch0e_1 ,mem_patch0e 
+2731 6800826a fetch 1 ,mem_l2cap_rx_done 
+2732 c000a73b beq l2cap_rx_done ,parse_l2cap_release_buff1 
+2733 70026a00 jam l2cap_rx_clear ,mem_l2cap_rx_done 
+2734 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 
+2735 c4008000 rtnbit0 l2cap_inuse_buff2 
+2736 d8c01400 arg mem_l2cap_rxbuff2 ,contr 
+2737 20404d79 call process_rx_l2cap_pkt 
+2738 6800826a fetch 1 ,mem_l2cap_rx_done 
+2739 c000a741 beq l2cap_rx_done ,parse_l2cap_release_buff2 
+273a 20600000 rtn 
+
+parse_l2cap_release_buff1:
+273b 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 
+273c 793ffe00 set0 l2cap_inuse_buff1 ,pdata 
+273d 60008263 store 1 ,mem_l2cap_rxbuff_inuse 
+273e 58000000 setarg 0 
+273f 6001025d store 2 ,mem_l2cap_rxbuff1_len 
+2740 20600000 rtn 
+
+parse_l2cap_release_buff2:
+2741 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 
+2742 793ffe01 set0 l2cap_inuse_buff2 ,pdata 
+2743 60008263 store 1 ,mem_l2cap_rxbuff_inuse 
+2744 58000000 setarg 0 
+2745 6001025f store 2 ,mem_l2cap_rxbuff2_len 
+2746 20600000 rtn 
+
+l2cap_buff1_inuse:
+2747 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 
+2748 79207e00 set1 l2cap_inuse_buff1 ,pdata 
+2749 60008263 store 1 ,mem_l2cap_rxbuff_inuse 
+274a 20600000 rtn 
+
+l2cap_buff2_inuse:
+274b 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 
+274c 79207e01 set1 l2cap_inuse_buff2 ,pdata 
+274d 60008263 store 1 ,mem_l2cap_rxbuff_inuse 
+274e 20600000 rtn 
+
+slave_send_access:
+274f 44b9400e bpatch patch0e_2 ,mem_patch0e 
+2750 1d00c201 add clke_bt ,1 ,bt_clk 
+2751 204028ea call fetch_extm_bt_adr 
+2752 18004803 force 0x03 ,freq_mode 
+2753 204028d2 call tx_radio_freq 
+2754 20402a51 call start_transmitter 
+2755 20402a5f call start_tx_external 
+2756 20202a64 branch send_access_word 
+
+slave_conn_send_packet:
+2757 44b9c00e bpatch patch0e_3 ,mem_patch0e 
+2758 20402a4d call rf_setup_time_slave_slot 
+2759 1d027e00 deposit clke_bt 
+275a 680a40ca fetcht 4 ,mem_next_btclk 
+275b 98467e00 isub temp ,pdata 
+275c c1808000 rtnne 1 
+275d 28203e00 compare type_null ,type ,0x1f 
+275e 2420a761 nbranch slave_conn_send_access ,true 
+275f 68008019 fetch 1 ,mem_rx_type 
+2760 207a0000 rtn blank 
+
+slave_conn_send_access:
+2761 2040274f call slave_send_access 
+
+transmit_packet:
+2762 28203e10 compare type_id ,type ,0x1f 
+2763 2020a64d branch end_of_packet ,true 
+2764 1c230400 rshift bt_clk ,temp 
+2765 18419c40 or temp ,0x40 ,white_init 
+
+transmit_packet_whitened:
+2766 44ba400e bpatch patch0e_4 ,mem_patch0e 
+2767 7823fc00 enable enable_white 
+2768 78257c00 enable enable_hec 
+2769 782dfc00 enable encode_fec1 
+276a 793f8010 set0 mark_longpacket ,mark 
+276b 18827e00 deposit am_addr 
+276c 08008603 inject mod ,3 
+276d 18227e00 deposit type 
+276e 08008604 inject mod ,4 
+276f 68008047 fetch 1 ,mem_arq 
+2770 08008004 inject bucket ,4 
+2771 08008603 inject mod ,3 
+2772 78247c00 enable enable_parity 
+2773 08008608 inject mod ,8 
+2774 784dfc00 disable encode_fec1 
+2775 78447c00 disable enable_parity 
+2776 78457c00 disable enable_hec 
+2777 793faa02 set0 psk3m ,radio_ctrl 
+2778 d8400000 arg 0 ,temp 
+2779 20402a1c call reserve_slot 
+277a 44bac00e bpatch patch0e_5 ,mem_patch0e 
+277b 18217e1f and type ,0x1f ,pdata 
+277c c009a7b4 beq type_lmp ,transmit_lmp 
+277d c000264d beq type_null ,end_of_packet 
+277e c000a64d beq type_poll ,end_of_packet 
+277f c0012797 beq type_fhs ,transmit_fhs 
+2780 c001a7c5 beq type_dm1 ,transmit_dm1 
+2781 c00227cb beq type_dh1 ,transmit_dh1 
+2782 c003a78c beq type_hv3 ,transmit_hev 
+2783 c00427ca beq type_3dh1 ,transmit_3dh1 
+2784 d8400004 arg 4 ,temp 
+2785 20402a1c call reserve_slot 
+2786 c00527c7 beq type_dm3 ,transmit_dm3 
+2787 c005a7cd beq type_dh3 ,transmit_dh3 
+2788 d8400008 arg 8 ,temp 
+2789 20402a1c call reserve_slot 
+278a c007a7cd beq type_dh5 ,transmit_dh5 
+278b 202027c7 branch transmit_dm5 
+
+transmit_hev:
+278c 44bb400e bpatch patch0e_6 ,mem_patch0e 
+278d 782efc00 enable encode_fec0 
+278e 7824fc00 enable enable_crc 
+278f 78277c00 enable encrypt 
+2790 1800721e force 30 ,loopcnt 
+2791 d8c000b3 arg mem_sco_obuf ,contr 
+
+transmit_ev_loop:
+2792 e8c08000 ifetch 1 ,contr 
+2793 08008608 inject mod ,8 
+2794 c2002792 loop transmit_ev_loop 
+2795 c503a7f7 bmark1 mark_esco ,transmit_end 
+2796 2020264d branch end_of_packet 
+
+transmit_fhs:
+2797 44bbc00e bpatch patch0e_7 ,mem_patch0e 
+2798 68008181 fetch 1 ,mem_fhs_am_addr 
+2799 1fe20800 icopy am_addr 
+279a 68008090 fetch 1 ,mem_fhs_misc 
+279b 1fe23800 icopy fhs_misc 
+279c 6801c0aa fetch 3 ,mem_class 
+279d 1fe23a00 icopy fhs_class 
+279e 680140a4 fetch 2 ,mem_nap 
+279f 1fe25c00 icopy nap 
+27a0 7824fc00 enable enable_crc 
+27a1 782e7c00 enable encode_fec2 
+27a2 1c022200 copy bt_adr ,rega 
+27a3 204028e2 call fetch_self_bt_adr 
+27a4 782afc00 pulse recalc 
+27a5 20000020 nop 32 
+27a6 1c221600 copy bt_clk ,timeup 
+27a7 68020161 fetch 4 ,mem_clkn_bt 
+27a8 1fe24200 icopy bt_clk 
+27a9 53c07e00 preload fhs0 
+27aa 79207e3a set1 58 ,pdata 
+27ab 08008648 inject mod ,72 
+27ac 53e07e00 preload fhs1 
+27ad 08008648 inject mod ,72 
+27ae 19624200 copy timeup ,bt_clk 
+27af 1a224000 copy rega ,bt_adr 
+27b0 78247c00 enable enable_parity 
+27b1 08008610 inject mod ,16 
+27b2 78447c00 disable enable_parity 
+27b3 2020264d branch end_of_packet 
+
+transmit_lmp:
+27b4 44bc400f bpatch patch0f_0 ,mem_patch0f 
+27b5 78277c00 enable encrypt 
+27b6 7824fc00 enable enable_crc 
+27b7 782e7c00 enable encode_fec2 
+27b8 680084b6 fetch 1 ,mem_lmo_header_length 
+27b9 1fe105f8 and pdata ,0x1f8 ,temp 
+27ba d8c004b6 arg mem_lmo_header_length ,contr 
+27bb 18408408 increase 8 ,temp 
+
+transmit_lmp_loop:
+27bc 1840a7b8 add temp ,-72 ,regc 
+27bd 242127c2 nbranch transmit_lmp_finish ,positive 
+27be e8c48000 ifetch 9 ,contr 
+27bf 08008648 inject mod ,72 
+27c0 1a620400 copy regc ,temp 
+27c1 202027bc branch transmit_lmp_loop 
+
+transmit_lmp_finish:
+27c2 e8c48000 ifetch 9 ,contr 
+27c3 08418600 iinject mod ,temp 
+27c4 202027f7 branch transmit_end 
+
+transmit_dm1:
+27c5 782e7c00 enable encode_fec2 
+27c6 202027d0 branch transmit_dmh 
+
+transmit_dm3:
+
+transmit_dm5:
+27c7 782e7c00 enable encode_fec2 
+27c8 79200010 set1 mark_longpacket ,mark 
+27c9 202027d0 branch transmit_dmh 
+
+transmit_3dh1:
+27ca 79202a02 set1 psk3m ,radio_ctrl 
+
+transmit_dh1:
+27cb 782efc00 enable encode_fec0 
+27cc 202027d0 branch transmit_dmh 
+
+transmit_dh3:
+
+transmit_dh5:
+27cd 79202a02 set1 psk3m ,radio_ctrl 
+27ce 782efc00 enable encode_fec0 
+27cf 79200010 set1 mark_longpacket ,mark 
+
+transmit_dmh:
+27d0 44bcc00f bpatch patch0f_1 ,mem_patch0f 
+27d1 6800804c fetch 1 ,mem_state_map 
+27d2 c302a7e5 bbit0 smap_edr ,transmit_noedr 
+27d3 18267c03 sub type ,3 ,null 
+27d4 202127e5 branch transmit_noedr ,positive 
+27d5 78477c00 disable encrypt 
+27d6 784e7c00 disable encode_fec2 
+27d7 782efc00 enable encode_fec0 
+27d8 7843fc00 disable enable_white 
+27d9 79202a01 set1 psk ,radio_ctrl 
+27da 2aaffe02 isolate1 psk3m ,radio_ctrl 
+27db 2020a7df branch transmit_edr3m ,true 
+27dc 580abeee setarg 0xabeee 
+27dd 08008614 inject mod ,20 
+27de 202027e3 branch transmit_edr_sync_end 
+
+transmit_edr3m:
+27df 585faeba setarg 0x5faeba 
+27e0 08008618 inject mod ,24 
+27e1 58000012 setarg 0x12 
+27e2 08008606 inject mod ,6 
+
+transmit_edr_sync_end:
+27e3 7823fc00 enable enable_white 
+27e4 79200010 set1 mark_longpacket ,mark 
+
+transmit_noedr:
+27e5 78277c00 enable encrypt 
+27e6 7824fc00 enable enable_crc 
+27e7 c502a800 bmark1 mark_loopback ,transmit_loopback 
+27e8 6800c1db fetch 1 ,mem_tx_lch 
+27e9 08008603 inject mod ,3 
+27ea 680141dc fetch 2 ,mem_tx_len 
+27eb 98007200 iforce loopcnt 
+27ec c50827ef bmark1 mark_longpacket ,transmit_long 
+27ed 08008605 inject mod ,5 
+27ee 202027f0 branch transmit_stuff 
+
+transmit_long:
+27ef 0800860d inject mod ,13 
+
+transmit_stuff:
+27f0 1f227e00 deposit loopcnt 
+27f1 203a27f7 branch transmit_end ,blank 
+27f2 6801016f fetch 2 ,mem_txptr 
+27f3 98000c00 iforce contr 
+
+transmit_stuff_loop:
+27f4 e8c08000 ifetch 1 ,contr 
+27f5 08008608 inject mod ,8 
+27f6 c20027f4 loop transmit_stuff_loop 
+
+transmit_end:
+27f7 78247c00 enable enable_parity 
+27f8 08008610 inject mod ,16 
+27f9 78447c00 disable enable_parity 
+27fa 204024c1 call set_wait_ack 
+27fb 6800804c fetch 1 ,mem_state_map 
+27fc c302a64d bbit0 smap_edr ,end_of_packet 
+27fd 18007e00 force 0 ,pdata 
+27fe 08008606 inject mod ,6 
+27ff 2020264d branch end_of_packet 
+
+transmit_loopback:
+2800 44bd400f bpatch patch0f_2 ,mem_patch0f 
+2801 c5082808 bmark1 mark_longpacket ,transmit_loopback_long 
+
+transmit_loopback_short:
+2802 68008180 fetch 1 ,mem_lch_code 
+2803 08008603 inject mod ,3 
+2804 6800815f fetch 1 ,mem_len 
+2805 98002600 iforce regc 
+2806 08008605 inject mod ,5 
+2807 2020280d branch transmit_loopback_cont 
+
+transmit_loopback_long:
+2808 68008180 fetch 1 ,mem_lch_code 
+2809 08008603 inject mod ,3 
+280a 6801015f fetch 2 ,mem_len 
+280b 98002600 iforce regc 
+280c 0800860d inject mod ,13 
+
+transmit_loopback_cont:
+280d d8c00551 arg mem_rxbuf ,contr 
+
+transmit_loopback_loop:
+280e 1a627c00 copy regc ,null 
+280f 2022a814 branch transmit_loopback_end ,zero 
+2810 e8c08000 ifetch 1 ,contr 
+2811 08008608 inject mod ,8 
+2812 1a60a7ff increase -1 ,regc 
+2813 2020280e branch transmit_loopback_loop 
+
+transmit_loopback_end:
+2814 680100fc fetch 2 ,mem_tst_pktcnt_dmh 
+2815 1fe0fe01 increase 1 ,pdata 
+2816 600100fc store 2 ,mem_tst_pktcnt_dmh 
+2817 202027f7 branch transmit_end 
+
+apply_switch_clke:
+2818 68020165 fetch 4 ,mem_clke_bt 
+2819 1fe0a207 add pdata ,7 ,rega 
+281a 68010171 fetch 2 ,mem_slot_offset 
+281b 243a281e nbranch apply_switch_nozero ,blank 
+281c 1a20a3fd increase -3 ,rega 
+281d 20202826 branch apply_switch_wait_loop 
+
+apply_switch_nozero:
+281e 1feffe0c mul32 pdata ,12 ,pdata 
+281f 68190040 hfetcht 2 ,core_halfslot 
+2820 18408401 increase 1 ,temp 
+
+apply_switch_loop:
+2821 98467e00 isub temp ,pdata 
+2822 24212825 nbranch apply_switch_bt ,positive 
+2823 1a20a3ff increase -1 ,rega 
+2824 20202821 branch apply_switch_loop 
+
+apply_switch_bt:
+2825 1fe67e00 sub pdata ,0 ,pdata 
+
+apply_switch_wait_loop:
+2826 37d18200 until null ,oneslot 
+2827 2c400600 compare 0 ,clkn_bt ,3 
+2828 2420a826 nbranch apply_switch_wait_loop ,true 
+2829 98005200 iforce clke_rt 
+282a 1a225000 copy rega ,clke_bt 
+282b 98005200 iforce clke_rt 
+282c 20600000 rtn 
+
+calc_slot_offset:
+282d 44bdc00f bpatch patch0f_3 ,mem_patch0f 
+282e 37d10200 until null ,halfslot 
+282f 1b427e00 deposit clke 
+2830 98000c00 iforce contr 
+2831 1ff17e00 rshift16 ,pdata ,pdata 
+2832 9c467200 isub clkn_bt ,loopcnt 
+2833 1f217203 and_into 3 ,loopcnt 
+2834 2422a837 nbranch calc_bt_portion ,zero 
+2835 18007e00 force 0 ,pdata 
+2836 2020283b branch calc_skip_bt 
+
+calc_bt_portion:
+2837 d8400ea6 arg 3750 ,temp 
+2838 18007e00 force 0 ,pdata 
+
+calc_slot_offset_loop:
+2839 9840fe00 iadd temp ,pdata 
+283a c2002839 loop calc_slot_offset_loop 
+
+calc_skip_bt:
+283b 98c0fe00 iadd contr ,pdata 
+283c 1fe6fc0c div pdata ,12 
+283d 20407f86 call wait_div_end 
+283e 1807fe00 quotient pdata 
+283f 60010171 store 2 ,mem_slot_offset 
+2840 20600000 rtn 
+
+calc_clke_offset:
+2841 44be400f bpatch patch0f_4 ,mem_patch0f 
+2842 1b427e00 deposit clke 
+2843 1b220400 copy clkn ,temp 
+2844 98467c00 isub temp ,null 
+2845 7d217e2c nsetflag positive ,44 ,pdata 
+2846 98460400 isub temp ,temp 
+2847 58000ea6 setarg 3750 
+2848 284c000f isolate0 15 ,temp 
+2849 2020a84c branch calc_clke_pos ,true 
+284a 5fff0ea6 setarg -61786 
+284b 98408400 iadd temp ,temp 
+
+calc_clke_pos:
+284c 600b0447 storet 6 ,mem_le_clk_offset 
+284d 207b0000 rtn le 
+284e 600b0038 storet 6 ,mem_clk_offset 
+284f 20600000 rtn 
+
+calc_clke:
+2850 78587c00 disable clknt 
+2851 68030447 fetch 6 ,mem_le_clk_offset 
+2852 203b2854 branch calc_clke2 ,le 
+2853 68030038 fetch 6 ,mem_clk_offset 
+
+calc_clke2:
+2854 9b20e000 iadd clkn ,alarm 
+2855 1e00e00a increase 10 ,alarm 
+2856 58000ea6 setarg 3750 
+2857 9e067e00 isub alarm ,pdata 
+2858 2fec000f isolate0 15 ,pdata 
+2859 2020a85e branch calc_clke_pos_adj ,true 
+285a 5800f15a setarg 0xf15a 
+285b 9e00e000 iadd alarm ,alarm 
+
+calc_clke_pos2:
+285c 1e023400 copy alarm ,clke 
+285d 20600000 rtn 
+
+calc_clke_pos_adj:
+285e 18007c00 force 0 ,null 
+285f 2020285c branch calc_clke_pos2 
+
+calc_radio_freq:
+2860 44bec00f bpatch patch0f_5 ,mem_patch0f 
+2861 20402918 call set_sync_on 
+2862 1c227e00 copy bt_clk ,pdata 
+2863 1fe17f80 and_into 0x180 ,pdata 
+2864 2c800e03 compare 3 ,freq_mode ,0x07 
+2865 2420a869 nbranch freq_not_connection ,true 
+2866 1fe97e00 rshift3 pdata ,pdata 
+2867 9ae0fe00 iadd freq_index ,pdata 
+2868 2020286a branch do_hop_mod_now 
+
+freq_not_connection:
+2869 1ae27e00 copy freq_index ,pdata 
+
+do_hop_mod_now:
+286a 1fe6fc4f div pdata ,79 
+286b 782afc00 pulse recalc 
+286c 20407f86 call wait_div_end 
+286d 18072200 remainder rega 
+286e 1a2085d8 add rega ,-40 ,temp 
+286f 20212872 branch odd_half ,positive 
+2870 1a238400 lshift rega ,temp 
+2871 20202874 branch freq_result 
+
+odd_half:
+2872 18438400 lshift temp ,temp 
+2873 18408401 increase 1 ,temp 
+
+freq_result:
+2874 44bf400f bpatch patch0f_6 ,mem_patch0f 
+2875 68008031 fetch 1 ,mem_mode 
+2876 c301a885 bbit0 afh_change ,afh_process_con 
+
+afh_process_0:
+2877 680240d2 fetch 4 ,mem_afh_instant 
+2878 9c267c00 isub bt_clk ,null 
+2879 20212885 branch afh_process_con ,positive 
+287a 204028a4 call afh_clear 
+287b 6800c0d9 fetch 1 ,mem_afh_new_mod 
+287c 207a0000 rtn blank 
+287d 68008031 fetch 1 ,mem_mode 
+287e 79207e02 set1 afh_enable ,pdata 
+287f 60008031 store 1 ,mem_mode 
+2880 6802c0e7 fetch 5 ,mem_afh_map_new 
+2881 6002c0da store 5 ,mem_afh_map_lo 
+2882 e8c28000 ifetch 5 ,contr 
+2883 6002c0df store 5 ,mem_afh_map_hi 
+2884 204028a9 call afh_process_freq_map 
+
+afh_process_con:
+2885 68008031 fetch 1 ,mem_mode 
+2886 c4010000 rtnbit0 afh_enable 
+2887 2c2ffe01 isolate1 1 ,bt_clk 
+2888 2020a8a1 branch afh_same_channel ,true 
+2889 18492200 rshift3 temp ,rega 
+288a 18410e07 and temp ,7 ,queue 
+288b 580040da setarg mem_afh_map_lo 
+288c 9a20a200 iadd rega ,rega 
+288d ea208000 ifetch 1 ,rega 
+288e afec0000 qisolate0 pdata 
+288f 2020a892 branch afh_process_1 ,true 
+2890 18427e00 deposit temp 
+2891 2020289e branch afh_process_end 
+
+afh_process_1:
+2892 6800c0e4 fetch 1 ,mem_afh_used 
+2893 98002400 iforce regb 
+2894 1c227e00 deposit bt_clk 
+2895 1fe17f80 and_into 0x180 ,pdata 
+2896 1fe97e00 rshift3 pdata ,pdata 
+2897 9ae0fe00 iadd freq_index ,pdata 
+2898 9a46fc00 idiv regb 
+2899 580040f2 setarg mem_afh_map 
+289a 20407f86 call wait_div_end 
+289b 18072200 remainder rega 
+289c 9a208c00 iadd rega ,contr 
+289d e8c08000 ifetch 1 ,contr 
+
+afh_process_end:
+289e 6000c0e5 store 1 ,mem_afh_index 
+289f 98000400 iforce temp 
+28a0 20600000 rtn 
+
+afh_same_channel:
+28a1 6800c0e5 fetch 1 ,mem_afh_index 
+28a2 98000400 iforce temp 
+28a3 20600000 rtn 
+
+afh_clear:
+28a4 68008031 fetch 1 ,mem_mode 
+28a5 793ffe02 set0 afh_enable ,pdata 
+28a6 793ffe03 set0 afh_change ,pdata 
+28a7 60008031 store 1 ,mem_mode 
+28a8 20600000 rtn 
+
+afh_process_freq_map:
+28a9 44bfc00f bpatch patch0f_7 ,mem_patch0f 
+28aa d8a040f2 arg mem_afh_map ,contw 
+28ab 1800720a force 10 ,loopcnt 
+28ac 20407ec6 call memset0 
+28ad d8a040f2 arg mem_afh_map ,contw 
+28ae 18002600 force 0 ,regc 
+28af 18000e02 force 2 ,queue 
+
+process_freq_3:
+28b0 6802c0da fetch 5 ,mem_afh_map_lo 
+28b1 98000400 iforce temp 
+28b2 28e1fe02 compare 2 ,queue ,0xff 
+28b3 2020a8b5 branch process_freq_1 ,true 
+28b4 18430400 rshift temp ,temp 
+
+process_freq_1:
+28b5 284c0000 isolate0 0 ,temp 
+28b6 2020a8b9 branch process_freq_0 ,true 
+28b7 1a627e00 deposit regc 
+28b8 e0a08000 istore 1 ,contw 
+
+process_freq_0:
+28b9 184b0400 rshift2 temp ,temp 
+28ba 1a60a602 increase 2 ,regc 
+28bb 2a61fc28 compare 40 ,regc ,0xfe 
+28bc 2420a8c2 nbranch process_freq_2 ,true 
+28bd 6802c0df fetch 5 ,mem_afh_map_hi 
+28be 98000400 iforce temp 
+28bf 28e1fe02 compare 2 ,queue ,0xff 
+28c0 2020a8c2 branch process_freq_2 ,true 
+28c1 18430400 rshift temp ,temp 
+
+process_freq_2:
+28c2 1a667c4e sub regc ,78 ,null 
+28c3 202128b5 branch process_freq_1 ,positive 
+28c4 18002601 force 1 ,regc 
+28c5 18e08fff increase -1 ,queue 
+28c6 2422a8b0 nbranch process_freq_3 ,zero 
+28c7 da2040f2 arg mem_afh_map ,rega 
+28c8 18a27e00 deposit contw 
+28c9 9a267e00 isub rega ,pdata 
+28ca 6000c0e4 store 1 ,mem_afh_used 
+28cb 20600000 rtn 
+
+rx_radio_freq:
+28cc 44c04010 bpatch patch10_0 ,mem_patch10 
+28cd 20402860 call calc_radio_freq 
+28ce 6800817f fetch 1 ,mem_debug_config 
+28cf c302a8d1 bbit0 debug_rx_fixed_freq ,rx_radio_freq_now 
+28d0 680884cc fetcht 1 ,mem_rx_fixed_freq 
+
+rx_radio_freq_now:
+28d1 2020291f branch set_freq_rx 
+
+tx_radio_freq:
+28d2 44c0c010 bpatch patch10_1 ,mem_patch10 
+28d3 20402860 call calc_radio_freq 
+28d4 6800817f fetch 1 ,mem_debug_config 
+28d5 c30228d7 bbit0 debug_tx_fixed_freq ,tx_radio_freq_now 
+28d6 680884cb fetcht 1 ,mem_tx_fixed_freq 
+
+tx_radio_freq_now:
+28d7 20202933 branch set_freq_tx 
+
+fetch_giac:
+28d8 18005a00 force 0 ,uap 
+28d9 6801c0a7 fetch 3 ,mem_glap 
+28da 98005800 iforce lap 
+28db 20600000 rtn 
+
+fetch_page_bt_adr:
+28dc 44c14010 bpatch patch10_2 ,mem_patch10 
+28dd 6800c1d3 fetch 1 ,mem_hci_puap 
+28de 1fe25a00 icopy uap 
+28df 6801c1d0 fetch 3 ,mem_hci_plap 
+28e0 1fe25800 icopy lap 
+28e1 20600000 rtn 
+
+fetch_self_bt_adr:
+28e2 44c1c010 bpatch patch10_3 ,mem_patch10 
+28e3 680140a4 fetch 2 ,mem_nap 
+28e4 1fe25c00 icopy nap 
+28e5 6800c0a3 fetch 1 ,mem_uap 
+28e6 1fe25a00 icopy uap 
+28e7 6801c0a0 fetch 3 ,mem_lap 
+28e8 1fe25800 icopy lap 
+28e9 20600000 rtn 
+
+fetch_extm_bt_adr:
+28ea 44c24010 bpatch patch10_4 ,mem_patch10 
+28eb 68010044 fetch 2 ,mem_pnap 
+28ec 1fe25c00 icopy nap 
+28ed 68008043 fetch 1 ,mem_puap 
+28ee 1fe25a00 icopy uap 
+28ef 68018040 fetch 3 ,mem_plap 
+28f0 1fe25800 icopy lap 
+28f1 20600000 rtn 
+
+fetch_diac:
+28f2 c51028f5 bmark1 mark_all_diac ,fetch_diac_do 
+28f3 c68e8000 rtnmark0 mark_inquiry_state 
+28f4 c68f8000 rtnmark0 mark_periodical_diac 
+
+fetch_diac_do:
+28f5 1d815900 and_into -256 ,lap 
+28f6 782afc00 pulse recalc 
+28f7 20000020 nop 32 
+28f8 20600000 rtn 
+
+shutdown_radio:
+28f9 44c2c010 bpatch patch10_5 ,mem_patch10 
+28fa 2030a90a branch shutdown_radio0 ,is_rx 
+28fb 708955d4 jam 0xd4 ,rf_tx_pa_ib 
+28fc 20000004 nop 4 
+28fd 708955d2 jam 0xd2 ,rf_tx_pa_ib 
+28fe 20000004 nop 4 
+28ff 708955d1 jam 0xd1 ,rf_tx_pa_ib 
+2900 20000004 nop 4 
+2901 6800c1de fetch 1 ,mem_tx_power 
+2902 c0002908 beq tx_power_0db ,shutdown_radio_0db 
+2903 c000a915 beq tx_power_3db ,shutdown_radio_3db 
+2904 c0012908 beq tx_power_5db ,shutdown_radio_5db 
+2905 c001a915 beq tx_power_f3db ,shutdown_radio_f3db 
+2906 c0022915 beq tx_power_f5db ,shutdown_radio_f5db 
+2907 c0102915 beq tx_power_pair ,shutdown_radio_pair 
+
+shutdown_radio_5db:
+
+shutdown_radio_0db:
+2908 708955d0 jam 0xd0 ,rf_tx_pa_ib 
+2909 708956e0 jam 0xe0 ,rf_tx_pa_gc 
+
+shutdown_radio0:
+290a 18002a00 force 0 ,radio_ctrl 
+290b 7850fc00 disable is_rx 
+290c 78507c00 disable is_tx 
+290d 782f7c00 pulse packet_end 
+290e 70890200 jam 0x0 ,rfen_mdm 
+290f 70890100 jam 0x0 ,rfen_tx 
+2910 70890000 jam 0x0 ,rfen_rx 
+2911 70890300 jam 0 ,rfen_sn 
+2912 70890470 jam 0x70 ,rfen_msc 
+2913 70890600 jam 0x0 ,rfen_adc 
+2914 20600000 rtn 
+
+shutdown_radio_pair:
+
+shutdown_radio_f5db:
+
+shutdown_radio_f3db:
+
+shutdown_radio_3db:
+2915 708955d0 jam 0xd0 ,rf_tx_pa_ib 
+2916 708956c0 jam 0xc0 ,rf_tx_pa_gc 
+2917 2020290a branch shutdown_radio0 
+
+set_sync_on:
+2918 44c34010 bpatch patch10_6 ,mem_patch10 
+2919 70890200 jam 0x0 ,rfen_mdm 
+291a 70890100 jam 0x0 ,rfen_tx 
+291b 70890018 jam 0x18 ,rfen_rx 
+291c 708903a7 jam 0xa7 ,rfen_sn 
+291d 7089047f jam 0x7f ,rfen_msc 
+291e 20600000 rtn 
+
+set_freq_rx:
+291f 44c3c010 bpatch patch10_7 ,mem_patch10 
+2920 60088017 storet 1 ,mem_last_freq 
+2921 1840a204 add temp ,rx_freq_offset ,rega 
+2922 70896d07 jam 0x07 ,rf_balun_ctrim 
+2923 20202981 branch rf_write_freq 
+
+rf_rx_enable:
+2924 44c44011 bpatch patch11_0 ,mem_patch11 
+2925 708901cf jam 0xcf ,rfen_tx 
+2926 2000000a nop 10 
+2927 708900ff jam 0xff ,rfen_rx 
+2928 708903af jam 0xaf ,rfen_sn 
+2929 708904ff jam 0xff ,rfen_msc 
+292a 2000000a nop 10 
+292b 708902a0 jam 0xa0 ,rfen_mdm 
+292c 20600000 rtn 
+
+set_freq_tx_offset:
+292d 6800c1e0 fetch 1 ,mem_250k_freq_enable 
+292e 203a2931 branch set_freq_tx_2m_offset ,blank 
+
+set_freq_tx_0m_offset:
+292f 1840a202 add temp ,2 ,rega 
+2930 20600000 rtn 
+
+set_freq_tx_2m_offset:
+2931 1840a200 add temp ,0 ,rega 
+2932 20600000 rtn 
+
+set_freq_tx:
+2933 44c4c011 bpatch patch11_1 ,mem_patch11 
+2934 60088017 storet 1 ,mem_last_freq 
+2935 2040292d call set_freq_tx_offset 
+2936 20402981 call rf_write_freq 
+2937 58000500 setarg param_pll_setup 
+2938 20402a8f call sleep 
+
+txon:
+2939 70890601 jam 0x1 ,rfen_adc 
+293a 7089003c jam 0x3c ,rfen_rx 
+293b 708901e0 jam 0xe0 ,rfen_tx 
+293c 70896d12 jam 0x12 ,rf_balun_ctrim 
+293d 2000000a nop 10 
+293e 70890201 jam 0x01 ,rfen_mdm 
+293f 7089023d jam 0x3d ,rfen_mdm 
+2940 2000000a nop 10 
+2941 708903b7 jam 0xb7 ,rfen_sn 
+2942 2000000a nop 10 
+2943 7089027f jam 0x7f ,rfen_mdm 
+
+txon_power_select:
+2944 6800c1de fetch 1 ,mem_tx_power 
+2945 c000294b beq tx_power_0db ,set_tx_power_0db 
+2946 c000a94f beq tx_power_3db ,set_tx_power_3db 
+2947 c0012953 beq tx_power_5db ,set_tx_power_5db 
+2948 c001a957 beq tx_power_f3db ,set_tx_power_f3db 
+2949 c002295b beq tx_power_f5db ,set_tx_power_f5db 
+294a c010295f beq tx_power_pair ,set_tx_power_pair 
+
+set_tx_power_0db:
+294b 708956f0 jam 0xf0 ,rf_tx_pa_gc 
+294c 20402965 call txon_common 
+294d 708955d8 jam 0xd8 ,rf_tx_pa_ib 
+294e 20600000 rtn 
+
+set_tx_power_3db:
+294f 708956df jam 0xdf ,rf_tx_pa_gc 
+2950 20402965 call txon_common 
+2951 708955df jam 0xdf ,rf_tx_pa_ib 
+2952 20600000 rtn 
+
+set_tx_power_5db:
+2953 708956ff jam 0xff ,rf_tx_pa_gc 
+2954 20402965 call txon_common 
+2955 708955df jam 0xdf ,rf_tx_pa_ib 
+2956 20600000 rtn 
+
+set_tx_power_f3db:
+2957 708956ce jam 0xce ,rf_tx_pa_gc 
+2958 20402965 call txon_common 
+2959 708955d8 jam 0xd8 ,rf_tx_pa_ib 
+295a 20600000 rtn 
+
+set_tx_power_f5db:
+295b 708956cb jam 0xcb ,rf_tx_pa_gc 
+295c 20402965 call txon_common 
+295d 708955d8 jam 0xd8 ,rf_tx_pa_ib 
+295e 20600000 rtn 
+
+set_tx_power_pair:
+295f 708955d0 jam 0xd0 ,rf_tx_pa_ib 
+2960 708956c0 jam 0xc0 ,rf_tx_pa_gc 
+2961 7089574c jam 0x4c ,0x8957 
+2962 7089586c jam 0x6c ,0x8958 
+2963 70895950 jam 0x50 ,0x8959 
+2964 20600000 rtn 
+
+txon_common:
+2965 20000004 nop 4 
+2966 708955d1 jam 0xd1 ,rf_tx_pa_ib 
+2967 20000004 nop 4 
+2968 708955d2 jam 0xd2 ,rf_tx_pa_ib 
+2969 20000004 nop 4 
+296a 708955d4 jam 0xd4 ,rf_tx_pa_ib 
+296b 20600000 rtn 
+
+initialize_radio:
+296c 70804206 jam clksel_rc ,core_clksel 
+
+initialize_radio_wait:
+296d 680140c3 fetch 2 ,mem_rf_init_ptr 
+296e c307296d bbit0 14 ,initialize_radio_wait 
+296f 98000c00 iforce contr 
+2970 d8408900 arg 0x8900 ,temp 
+
+initialize_radio_loop:
+2971 e8c08000 ifetch 1 ,contr 
+2972 c07fa977 beq 0xff ,initialize_radio_cont 
+2973 98418a00 ior temp ,contw 
+2974 e8c08000 ifetch 1 ,contr 
+2975 e0a08000 istore 1 ,contw 
+2976 20202971 branch initialize_radio_loop 
+
+initialize_radio_cont:
+2977 44c54011 bpatch patch11_2 ,mem_patch11 
+2978 20402be5 call lpm_cal_xtal_startup 
+2979 204029c9 call switchto_dpllclk 
+297a 580007d0 setarg param_dpll_start_delay 
+297b 9c40fe00 iadd clkn_bt ,pdata 
+297c 60020169 store 4 ,mem_dpll_clkn 
+297d 79202a03 set1 reset ,radio_ctrl 
+297e 18002a00 force 0 ,radio_ctrl 
+297f 2455a998 ncall do_rccal ,wake 
+2980 202029ab branch set_rccal 
+
+rf_write_freq:
+2981 44c5c011 bpatch patch11_3 ,mem_patch11 
+2982 58000960 setarg 2400 
+2983 9a208400 iadd rega ,temp 
+2984 6800c0bd fetch 1 ,mem_fcomp_mul 
+2985 70895f04 jam 0x04 ,rf_pll_rstn 
+2986 984ffe00 imul32 temp ,pdata 
+2987 6808c0be fetcht 1 ,mem_fcomp_div 
+2988 9846fc00 idiv temp 
+2989 20407f86 call wait_div_end 
+298a 1807a200 quotient rega 
+298b 18077e00 remainder pdata 
+298c 1ff07e00 lshift16 pdata ,pdata 
+298d 1ff27e00 lshift4 pdata ,pdata 
+298e 9846fc00 idiv temp 
+298f 20407f86 call wait_div_end 
+2990 1807fe00 quotient pdata 
+2991 1fed7e00 lshift8 pdata ,pdata 
+2992 1fe3fe00 lshift pdata ,pdata 
+2993 9a21fe00 ior rega ,pdata 
+2994 60120960 hstore 4 ,rf_pll_intg 
+2995 70895f44 jam 0x44 ,rf_pll_rstn 
+2996 70895fc4 jam 0xc4 ,rf_pll_rstn 
+2997 20600000 rtn 
+
+do_rccal:
+2998 44c64011 bpatch patch11_4 ,mem_patch11 
+2999 70890602 jam 0x02 ,rfen_adc 
+299a 5803d090 setarg 250000 
+299b 20402a8f call sleep 
+299c 7089007f jam 0x7f ,rfen_rx 
+299d 20000082 nop 130 
+299e 70895230 jam 0x30 ,rf_rccal_ctrl 
+299f 708901d0 jam 0xd0 ,rfen_tx 
+29a0 70895270 jam 0x70 ,rf_rccal_ctrl 
+29a1 708952f0 jam 0xf0 ,rf_rccal_ctrl 
+29a2 18007232 force 50 ,loopcnt 
+
+do_rccal_loop:
+29a3 68108980 hfetch 1 ,rf_rccal_result 
+29a4 c282a9a6 bbit1 5 ,do_rccal_end 
+29a5 c20029a3 loop do_rccal_loop 
+
+do_rccal_end:
+29a6 6000c0ce store 1 ,mem_rf_rccal 
+29a7 70890100 jam 0 ,rfen_tx 
+29a8 70890000 jam 0 ,rfen_rx 
+29a9 70890600 jam 0x00 ,rfen_adc 
+29aa 20600000 rtn 
+
+set_rccal:
+29ab 44c6c011 bpatch patch11_5 ,mem_patch11 
+29ac 6800c0ce fetch 1 ,mem_rf_rccal 
+29ad 79207e05 set1 5 ,pdata 
+29ae 60108952 hstore 1 ,rf_rccal_ctrl 
+29af 68188950 hfetcht 1 ,rf_bpf_ctrim 
+29b0 18410407 and_into 7 ,temp 
+29b1 1fe9fe00 lshift3 pdata ,pdata 
+29b2 9841fe00 ior temp ,pdata 
+29b3 60108950 hstore 1 ,rf_bpf_ctrim 
+29b4 68108951 hfetch 1 ,rf_bpf_ib 
+29b5 793ffe00 set0 bpf_rccal ,pdata 
+29b6 60108951 hstore 1 ,rf_bpf_ib 
+29b7 68108952 hfetch 1 ,rf_adc_rccal 
+29b8 793ffe05 set0 adc_rccal ,pdata 
+29b9 60108952 hstore 1 ,rf_adc_rccal 
+29ba 20600000 rtn 
+
+save_rssi:
+29bb 44c74011 bpatch patch11_6 ,mem_patch11 
+29bc 68110981 hfetch 2 ,rf_afc_d2a 
+29bd 1ff1fe00 rshift4 pdata ,pdata 
+29be 1fe97e00 rshift3 pdata ,pdata 
+29bf 1fe67e00 sub pdata ,0 ,pdata 
+
+bcd:
+29c0 1fe17eff and_into 0xff ,pdata 
+29c1 1fe6fc0a div pdata ,10 
+29c2 20407f86 call wait_div_end 
+29c3 1807fe00 quotient pdata 
+29c4 1ff27e00 lshift4 pdata ,pdata 
+29c5 18070400 remainder temp 
+29c6 9841fe00 ior temp ,pdata 
+29c7 60008018 store 1 ,mem_rssi 
+29c8 20600000 rtn 
+
+switchto_dpllclk:
+29c9 70804206 jam clksel_rc ,core_clksel 
+29ca 6810896b hfetch 1 ,rf_clkpll_frac + 2 
+29cb 793ffe04 set0 4 ,pdata 
+29cc 793ffe05 set0 5 ,pdata 
+29cd 6010896b hstore 1 ,rf_clkpll_frac + 2 
+29ce 70890500 jam 0x00 ,rfen_ck 
+29cf 70890400 jam 0x00 ,rfen_msc 
+29d0 70890470 jam 0x70 ,rfen_msc 
+29d1 708905ff jam 0xff ,rfen_ck 
+29d2 6810896b hfetch 1 ,rf_clkpll_frac + 2 
+29d3 79207e04 set1 4 ,pdata 
+29d4 79207e05 set1 5 ,pdata 
+29d5 6010896b hstore 1 ,rf_clkpll_frac + 2 
+29d6 204029e9 call init_lpm_ctrl 
+29d7 68108968 hfetch 1 ,rf_clkpll_int 
+29d8 79207e07 set1 7 ,pdata 
+29d9 60108968 hstore 1 ,rf_clkpll_int 
+29da 793ffe07 set0 7 ,pdata 
+29db 60108968 hstore 1 ,rf_clkpll_int 
+29dc 79207e07 set1 7 ,pdata 
+29dd 60108968 hstore 1 ,rf_clkpll_int 
+29de 70804205 jam clksel_dpll ,core_clksel 
+29df 20000001 nop 1 
+29e0 70804204 jam clksel_xtal ,core_clksel 
+29e1 6810896b hfetch 1 ,rf_clkpll_frac + 2 
+29e2 1fe17ecf and_into 0xcf ,pdata 
+29e3 6010896b hstore 1 ,rf_clkpll_frac + 2 
+29e4 1fe1fe30 or_into 0x30 ,pdata 
+29e5 6010896b hstore 1 ,rf_clkpll_frac + 2 
+29e6 20600000 rtn 
+
+xtal_fast_wake:
+29e7 58000f0f setarg 0xf0f 
+29e8 20202c18 branch lpm_write_config 
+
+init_lpm_ctrl:
+29e9 5800080f setarg 0x80f 
+29ea 20202c18 branch lpm_write_config 
+
+start_receiver:
+29eb 44c7c011 bpatch patch11_7 ,mem_patch11 
+29ec 20402924 call rf_rx_enable 
+29ed 78507c00 disable is_tx 
+29ee 7830fc00 enable is_rx 
+29ef 782b7c00 pulse init_encrypt 
+29f0 20600000 rtn 
+
+prep_crypt:
+29f1 44c84012 bpatch patch12_0 ,mem_patch12 
+29f2 6800804c fetch 1 ,mem_state_map 
+29f3 2feffe02 isolate1 smap_encryption ,pdata 
+29f4 7920fe00 setflag true ,0 ,pdata 
+29f5 60108011 hstore 1 ,core_encrypt 
+29f6 d8c00062 arg mem_kc ,contr 
+29f7 e8c48000 ifetch 9 ,contr 
+29f8 98006400 iforce kc_ls 
+29f9 e8c38000 ifetch 7 ,contr 
+29fa 98006600 iforce kc_ms 
+29fb 68008054 fetch 1 ,mem_key_size 
+29fc 1fe0e9ff add pdata ,-1 ,g1l 
+29fd 782d7c00 pulse kc_p_activate 
+29fe 20600000 rtn 
+
+wait_access_end:
+29ff 1b427e00 deposit clke 
+2a00 6003009a store 6 ,mem_sync_clke 
+2a01 7846fc00 disable decode_fec0 
+2a02 242c28f9 nbranch shutdown_radio ,sync 
+2a03 dd2003bb arg param_clke_cal ,clke_rt 
+2a04 1d00d001 increase 1 ,clke_bt 
+2a05 1d0151fc and_into 0x1fc ,clke_bt 
+2a06 20600000 rtn 
+
+wait_access_mhalfbnd:
+2a07 7826fc00 enable decode_fec0 
+
+wait_access_mhalfbnd_correlate:
+2a08 37cb8400 correlate null ,mhalfbnd 
+2a09 202c29ff branch wait_access_end ,sync 
+2a0a 2d000402 compare 0x02 ,clke_bt ,0x02 
+2a0b 2420aa08 nbranch wait_access_mhalfbnd_correlate ,true 
+2a0c 202029ff branch wait_access_end 
+
+wait_access_clkn_rt:
+2a0d 44c8c012 bpatch patch12_1 ,mem_patch12 
+2a0e d9600600 arg param_conn_access ,timeup 
+2a0f 7826fc00 enable decode_fec0 
+2a10 34730400 correlate clkn_rt ,meet 
+2a11 7846fc00 disable decode_fec0 
+2a12 242c28f9 nbranch shutdown_radio ,sync 
+2a13 20600000 rtn 
+
+wait_access_forever:
+2a14 44c94012 bpatch patch12_2 ,mem_patch12 
+2a15 7826fc00 enable decode_fec0 
+2a16 37c18400 correlate null ,timeout 
+2a17 7846fc00 disable decode_fec0 
+2a18 242c28f9 nbranch shutdown_radio ,sync 
+2a19 dd2003bb arg param_clke_cal ,clke_rt 
+2a1a 1d0151fc and_into 0x1fc ,clke_bt 
+2a1b 20600000 rtn 
+
+reserve_slot:
+2a1c 44c9c012 bpatch patch12_3 ,mem_patch12 
+2a1d 98002200 iforce rega 
+2a1e 1c227e00 deposit bt_clk 
+2a1f 98409600 iadd temp ,timeup 
+2a20 19627e00 copy timeup ,pdata 
+2a21 600240ca store 4 ,mem_next_btclk 
+2a22 1a227e00 deposit rega 
+2a23 20600000 rtn 
+
+ahead_window:
+2a24 1fe20400 copy pdata ,temp 
+2a25 44ca4012 bpatch patch12_4 ,mem_patch12 
+2a26 18427e00 copy temp ,pdata 
+2a27 20407f50 call clk2bt 
+2a28 1c307e00 lshift16 bt_clk ,pdata 
+2a29 79207e2c set1 44 ,pdata 
+2a2a 20407f39 call clk_diff 
+2a2b 793ffe2c set0 44 ,pdata 
+2a2c 20402a77 call get_clk 
+2a2d 20407f39 call clk_diff 
+2a2e 20740000 rtn user 
+2a2f 20407f43 call clk2rt 
+2a30 98003600 iforce stop_watch 
+2a31 37c18200 until null ,timeout 
+2a32 20600000 rtn 
+
+setup_clk:
+2a33 44cac012 bpatch patch12_5 ,mem_patch12 
+2a34 20382a38 branch setup_clkn ,clknt 
+2a35 35330200 until clke_rt ,meet 
+
+skip_setup_clke:
+2a36 1d020400 copy clke_bt ,temp 
+2a37 20202a3b branch setup_clknbt 
+
+setup_clkn:
+2a38 20372a3a branch skip_setup_clkn ,attempt 
+2a39 34730200 until clkn_rt ,meet 
+
+skip_setup_clkn:
+2a3a 1c420400 copy clkn_bt ,temp 
+
+setup_clknbt:
+2a3b 20342a47 branch setup_clk11 ,user 
+2a3c 28400601 compare 1 ,temp ,3 
+2a3d 2420aa33 nbranch setup_clk ,true 
+
+setup_complete:
+2a3e 44cb4012 bpatch patch12_6 ,mem_patch12 
+2a3f 68008030 fetch 1 ,mem_state 
+2a40 c4000000 rtnbit0 state_inconn 
+2a41 680240ca fetch 4 ,mem_next_btclk 
+2a42 98467e00 isub temp ,pdata 
+2a43 24610000 nrtn positive 
+2a44 1fe67cff sub pdata ,0xff ,null 
+2a45 20212a33 branch setup_clk ,positive 
+2a46 20600000 rtn 
+
+setup_clk11:
+2a47 28400603 compare 3 ,temp ,3 
+2a48 2420aa33 nbranch setup_clk ,true 
+2a49 20202a3e branch setup_complete 
+
+rf_setup_time:
+2a4a 44cbc012 bpatch patch12_7 ,mem_patch12 
+2a4b d9600600 arg param_rf_setup ,timeup 
+2a4c 20202a33 branch setup_clk 
+
+rf_setup_time_slave_slot:
+2a4d 78547c00 disable user 
+2a4e 20202a4a branch rf_setup_time 
+
+rf_setup_time_master_slot:
+2a4f 78347c00 enable user 
+2a50 20202a4a branch rf_setup_time 
+
+start_transmitter:
+2a51 44cc4013 bpatch patch13_0 ,mem_patch13 
+2a52 204029f1 call prep_crypt 
+2a53 7850fc00 disable is_rx 
+2a54 78307c00 enable is_tx 
+2a55 20600000 rtn 
+
+start_tx_native:
+2a56 44ccc013 bpatch patch13_1 ,mem_patch13 
+2a57 d9600e43 arg param_tx_setup ,timeup 
+2a58 34730200 until clkn_rt ,meet 
+2a59 782b7c00 pulse init_encrypt 
+2a5a 20600000 rtn 
+
+start_rx_native:
+2a5b 44cd4013 bpatch patch13_2 ,mem_patch13 
+2a5c d9600d00 arg param_rx_setup ,timeup 
+2a5d 34730200 until clkn_rt ,meet 
+2a5e 20600000 rtn 
+
+start_tx_external:
+2a5f 44cdc013 bpatch patch13_3 ,mem_patch13 
+2a60 d9600e43 arg param_tx_setup ,timeup 
+2a61 35330200 until clke_rt ,meet 
+2a62 782b7c00 pulse init_encrypt 
+2a63 20600000 rtn 
+
+send_access_word:
+2a64 44ce4013 bpatch patch13_4 ,mem_patch13 
+2a65 51207e00 preload access 
+2a66 782efc00 enable encode_fec0 
+2a67 79202a00 set1 txgfsk ,radio_ctrl 
+2a68 08008648 inject mod ,72 
+2a69 784efc00 disable encode_fec0 
+2a6a 20600000 rtn 
+
+scan_mode_whiten:
+2a6b 1ca20400 copy xin ,temp 
+2a6c 18418460 or_into 0x60 ,temp 
+2a6d 18421c00 copy temp ,white_init 
+2a6e 20600000 rtn 
+
+get_free_amaddr:
+2a6f 44cec013 bpatch patch13_5 ,mem_patch13 
+2a70 6800c090 fetch 1 ,mem_current_amaddr 
+2a71 1fe0fe01 increase 1 ,pdata 
+2a72 c083aa74 bne param_esco_addr ,get_free_amaddr_cont 
+2a73 18007e01 force 1 ,pdata 
+
+get_free_amaddr_cont:
+2a74 6000c090 store 1 ,mem_current_amaddr 
+2a75 98000800 iforce am_addr 
+2a76 20600000 rtn 
+
+get_clk:
+2a77 1b220400 copy clkn ,temp 
+2a78 20748000 rtn master 
+2a79 1b420400 copy clke ,temp 
+2a7a 20600000 rtn 
+
+get_clkbt:
+2a7b 1c427e00 deposit clkn_bt 
+2a7c 20748000 rtn master 
+2a7d 1d027e00 deposit clke_bt 
+2a7e 20600000 rtn 
+
+supervision_update:
+2a7f 44cf4013 bpatch patch13_6 ,mem_patch13 
+2a80 680a004d fetcht 4 ,mem_supervision_timer 
+2a81 20402a7b call get_clkbt 
+2a82 98461600 isub temp ,timeup 
+2a83 19627e00 deposit timeup 
+2a84 68090051 fetcht 2 ,mem_supervision_to 
+2a85 18438400 lshift temp ,temp 
+2a86 98467e00 isub temp ,pdata 
+2a87 20600000 rtn 
+
+supervision_flush:
+2a88 44cfc013 bpatch patch13_7 ,mem_patch13 
+2a89 20402a7b call get_clkbt 
+2a8a 6002004d store 4 ,mem_supervision_timer 
+2a8b 20600000 rtn 
+
+assert:
+2a8c 44d04014 bpatch patch14_0 ,mem_patch14 
+2a8d 20202a8c branch assert 
+
+loop:
+2a8e 20202a8e branch loop 
+
+sleep:
+2a8f 207a0000 rtn blank 
+2a90 1fe37e00 rshift pdata ,pdata 
+2a91 1fe0fffd increase -3 ,pdata 
+
+sleep_loop:
+2a92 1fe0ffff increase -1 ,pdata 
+2a93 2422aa92 nbranch sleep_loop ,zero 
+2a94 18007e00 force 0 ,pdata 
+2a95 20600000 rtn 
+
+init_param:
+2a96 df200010 arg 0x10 ,loopcnt 
+2a97 d8a00000 arg 0 ,contw 
+2a98 20407ec6 call memset0 
+2a99 d8a0043f arg mem_le_state ,contw 
+2a9a df20000a arg 10 ,loopcnt 
+2a9b 20407ec6 call memset0 
+2a9c 7009b200 jam 0 ,mem_sp_calc 
+2a9d 700a9900 jam 0 ,mem_fifo_temp 
+2a9e 70048c00 jam 0 ,mem_le_testtype 
+2a9f 70017f00 jam 0 ,mem_debug_config 
+2aa0 7004d100 jam 0 ,mem_lmp_conn_state 
+2aa1 44d0c014 bpatch patch14_1 ,mem_patch14 
+2aa2 70016d00 jam 0 ,mem_connection_options 
+2aa3 70015100 jam 0 ,mem_tester_emulate 
+2aa4 70015c00 jam 0 ,mem_tester_cnt 
+2aa5 589e8b33 setarg param_glap 
+2aa6 6001c0a7 store 3 ,mem_glap 
+2aa7 58000153 setarg param_acl_pktlen 
+2aa8 60010083 store 2 ,mem_acl_pktlen 
+2aa9 7000851e jam param_sco_pktlen ,mem_sco_pktlen 
+2aaa 70008601 jam param_acl_pktcnt ,mem_acl_pktcnt 
+2aab 70008807 jam param_sco_pktcnt ,mem_sco_pktcnt 
+2aac 5812e904 setarg param_hci_version 
+2aad 60018080 store 3 ,mem_hci_version 
+2aae 70009060 jam 0x60 ,mem_fhs_misc 
+2aaf 7040d005 jam param_max_slot ,mem_max_slot 
+2ab0 70001402 jam 0x02 ,mem_fw_ver 
+2ab1 6800c65a fetch 1 ,mem_ssp_enable 
+2ab2 245a74c1 ncall init_memp ,blank 
+2ab3 6800c4be fetch 1 ,mem_le_secure_connect_enable 
+2ab4 245a7518 ncall init_memp_256 ,blank 
+2ab5 44d14014 bpatch patch14_2 ,mem_patch14 
+2ab6 20758000 rtn wake 
+2ab7 58000000 setarg 0 
+2ab8 600141dc store 2 ,mem_tx_len 
+2ab9 1c437e00 rshift clkn_bt ,pdata 
+2aba 60024094 store 4 ,mem_last_clkn 
+2abb 20600000 rtn 
+
+lpmstate:
+2abc 5800ee21 setarg 0xee21 
+2abd 60110050 hstore 2 ,core_clkoff 
+2abe 6812011c hfetch 4 ,core_gpio_in 
+2abf 60020abe store 4 ,mem_saved_gpio_in 
+2ac0 6810813e hfetch 1 ,core_lpm_ldocnt 
+2ac1 60008abd store 1 ,mem_wakup_from_power_flag 
+2ac2 c301e45b bbit0 gpio_latch ,loadcode 
+2ac3 7835fc00 enable wake 
+2ac4 c303aacc bbit0 cold_wake ,lpmwake 
+2ac5 7855fc00 disable wake 
+2ac6 1ce27e00 deposit auxcnt 
+2ac7 243a2acc nbranch lpmwake ,blank 
+2ac8 6810813b hfetch 1 ,core_lpm_ctrl + 3 
+2ac9 c2812acc bbit1 reload_code ,lpmwake 
+2aca d85fffff arg param_hibernate_clks ,temp 
+2acb 20202b3c branch lpm_enter_sleep 
+
+lpmwake:
+2acc 6811813c hfetch 3 ,core_lpm_xtalcnt 
+2acd 6011804c hstore 3 ,core_lpm_reg 
+2ace e8c08000 ifetch 1 ,contr 
+2acf 1fe1feef or_into isogate_mask ,pdata 
+2ad0 e0a08000 istore 1 ,contw 
+2ad1 20402c23 call lpm_write_ctrl2 
+2ad2 6810804f hfetch 1 ,core_lpm_isogate 
+2ad3 79207e04 set1 enable_retmem ,pdata 
+2ad4 6010804f hstore 1 ,core_lpm_isogate 
+2ad5 20402c23 call lpm_write_ctrl2 
+2ad6 2055aadf call lpm_load_context ,wake 
+2ad7 6810804e hfetch 1 ,core_lpm_reg + 2 
+2ad8 793ffe03 set0 gpio_latch ,pdata 
+2ad9 6010804e hstore 1 ,core_lpm_reg + 2 
+2ada 20402c23 call lpm_write_ctrl2 
+2adb 2435e45b nbranch loadcode ,wake 
+2adc c6958000 rtnmark0 mark_otp_encrypt 
+2add 70800608 jam lock_otp ,core_misc_ctrl 
+2ade 20600000 rtn 
+
+lpm_load_context:
+2adf 6800c198 fetch 1 ,mem_saved_spidctrl 
+2ae0 60108086 hstore 1 ,core_spid_ctrl 
+2ae1 6801c18d fetch 3 ,mem_saved_gsel 
+2ae2 60118080 hstore 3 ,core_gpio_sel 
+2ae3 68024181 fetch 4 ,mem_saved_gpio + 4 
+2ae4 60120074 hstore 4 ,core_gpio_out0 
+2ae5 6802417d fetch 4 ,mem_saved_gpio 
+2ae6 60120070 hstore 4 ,core_gpio_oe0 
+2ae7 68044185 fetch 8 ,mem_saved_gpio + 8 
+2ae8 60140078 hstore 8 ,core_gpio_pu0 
+2ae9 68044190 fetch 8 ,mem_saved_mark 
+2aea 98000000 iforce mark 
+2aeb 68140140 hfetch 8 ,core_gpio_wakeup_low 
+2aec 600400a1 store 8 ,mem_gpio_wakeup_low 
+2aed 204064ca call load_ucode 
+2aee 20600000 rtn 
+
+lpm_save_context:
+2aef 18027e00 deposit mark 
+2af0 60044190 store 8 ,mem_saved_mark 
+2af1 68140070 hfetch 8 ,core_gpio_oe0 
+2af2 6004417d store 8 ,mem_saved_gpio 
+2af3 e8c40000 ifetch 8 ,contr 
+2af4 e0a40000 istore 8 ,contw 
+2af5 68118080 hfetch 3 ,core_gpio_sel 
+2af6 6001c18d store 3 ,mem_saved_gsel 
+2af7 68108086 hfetch 1 ,core_spid_ctrl 
+2af8 6000c198 store 1 ,mem_saved_spidctrl 
+2af9 20202c29 branch lpm_write_gpio_wakeup 
+
+lpo_calibration:
+2afa 68108063 hfetch 1 ,core_bist_ctrl 
+2afb 243a2b00 nbranch lpo_cal_inited ,blank 
+2afc 6801c16f fetch 3 ,mem_clks_per_lpo 
+2afd 247a0000 nrtn blank 
+2afe 708063c0 jam 0xc0 ,core_bist_ctrl 
+2aff 70800680 jam ccnt_start ,core_misc_ctrl 
+
+lpo_cal_inited:
+2b00 6810812d hfetch 1 ,core_perf_status 
+2b01 c4008000 rtnbit0 1 
+2b02 68118149 hfetch 3 ,core_clk_counter 
+2b03 6001c16f store 3 ,mem_clks_per_lpo 
+2b04 20600000 rtn 
+
+lpm_adjust_clk:
+2b05 44d1c014 bpatch patch14_3 ,mem_patch14 
+2b06 1b427e00 deposit clke 
+2b07 20407f37 call clk_diff_rt 
+2b08 680a415f fetcht 4 ,mem_sleep_counter_all 
+2b09 18467cff sub temp ,0xff ,null 
+2b0a 20610000 rtn positive 
+2b0b 1fed7e00 lshift8 pdata ,pdata 
+2b0c 1ff27e00 lshift4 pdata ,pdata 
+2b0d 9846fc00 idiv temp 
+2b0e 20407f86 call wait_div_end 
+2b0f 1807fe00 quotient pdata 
+2b10 d84000c8 arg param_lpm_adjmax ,temp 
+2b11 20407f91 call ceiling 
+2b12 60008099 store 1 ,mem_lpm_adjust 
+2b13 24342b15 nbranch lpm_adjust_positive ,user 
+2b14 1fe67e00 sub pdata ,0 ,pdata 
+
+lpm_adjust_positive:
+2b15 6809c16f fetcht 3 ,mem_clks_per_lpo 
+2b16 9840fe00 iadd temp ,pdata 
+2b17 6001c16f store 3 ,mem_clks_per_lpo 
+
+lpm_clear_counter:
+2b18 58000000 setarg 0 
+2b19 6002415f store 4 ,mem_sleep_counter_all 
+2b1a 20600000 rtn 
+
+lpm_doze:
+2b1b 6800c177 fetch 1 ,mem_lpm_config + 2 
+2b1c 79207e02 set1 reload_code ,pdata 
+2b1d 6000c177 store 1 ,mem_lpm_config + 2 
+2b1e 20202b23 branch lpm_hibernate_normal 
+
+lpm_hibernate:
+2b1f d85fffff arg param_hibernate_clks ,temp 
+2b20 6800c176 fetch 1 ,mem_lpm_config + 1 
+2b21 793ffe07 set0 7 ,pdata 
+2b22 6000c176 store 1 ,mem_lpm_config + 1 
+
+lpm_hibernate_normal:
+2b23 44d24014 bpatch patch14_4 ,mem_patch14 
+2b24 20402c29 call lpm_write_gpio_wakeup 
+2b25 6800c157 fetch 1 ,mem_lpm_hibernate_switch 
+2b26 6000c17c store 1 ,mem_lpm_xtalcnt + 4 
+2b27 6800c17a fetch 1 ,mem_lpm_xtalcnt + 2 
+2b28 79207e07 set1 cold_wake ,pdata 
+2b29 6000c17a store 1 ,mem_lpm_xtalcnt + 2 
+
+lpm_sleep:
+2b2a 44d2c014 bpatch patch14_5 ,mem_patch14 
+2b2b 204029e7 call xtal_fast_wake 
+2b2c 6802415f fetch 4 ,mem_sleep_counter_all 
+2b2d 9840fe00 iadd temp ,pdata 
+2b2e 6002415f store 4 ,mem_sleep_counter_all 
+2b2f 20402aef call lpm_save_context 
+2b30 6802c178 fetch 5 ,mem_lpm_xtalcnt 
+2b31 6012004c hstore 4 ,core_lpm_reg 
+2b32 1fef2200 rshift32 pdata ,rega 
+2b33 37d98200 until null ,lpo_edge 
+2b34 1b227e00 deposit clkn 
+2b35 60034163 store 6 ,mem_sleep_clkn 
+2b36 70800502 jam lpmreg_sel_ctrl2 ,core_lpm_wr 
+2b37 37d98200 until null ,lpo_edge 
+2b38 37d98200 until null ,lpo_edge 
+2b39 1a227e00 deposit rega 
+2b3a 6010804f hstore 1 ,core_lpm_isogate 
+2b3b 70800502 jam lpmreg_sel_ctrl2 ,core_lpm_wr 
+
+lpm_enter_sleep:
+2b3c 37d98200 until null ,lpo_edge 
+2b3d 37d98200 until null ,lpo_edge 
+2b3e 601a004c hstoret 4 ,core_lpm_reg 
+2b3f 70800510 jam lpmreg_sel_counter ,core_lpm_wr 
+2b40 37df8200 until null ,never 
+
+lpm_recover_clk:
+2b41 44d34014 bpatch patch14_6 ,mem_patch14 
+2b42 58000000 setarg 0 
+2b43 1ce27c00 copy auxcnt ,null 
+2b44 2022ab4c branch lpm_recover_timeout ,zero 
+2b45 6810813c hfetch 1 ,core_lpm_xtalcnt 
+2b46 6818813d hfetcht 1 ,core_lpm_buckcnt 
+2b47 98467c00 isub temp ,null 
+2b48 20212b4a branch lpm_recover_xtal ,positive 
+2b49 18427e00 deposit temp 
+
+lpm_recover_xtal:
+2b4a 9ce67e00 isub auxcnt ,pdata 
+2b4b 1fe0fe01 increase 1 ,pdata 
+
+lpm_recover_timeout:
+2b4c 1fe0fe08 increase 8 ,pdata 
+2b4d 37d98200 until null ,lpo_edge 
+2b4e 9e20fe00 iadd lpo_time ,pdata 
+2b4f 680a415b fetcht 4 ,mem_sleep_counter 
+2b50 9840fe00 iadd temp ,pdata 
+2b51 6809c16f fetcht 3 ,mem_clks_per_lpo 
+2b52 984ffe00 imul32 temp ,pdata 
+2b53 1fecfe00 rshift8 pdata ,pdata 
+2b54 1ff1fe00 rshift4 pdata ,pdata 
+2b55 1fe0fe6e increase param_lpm_fix ,pdata 
+2b56 d8400ea6 arg 3750 ,temp 
+2b57 9846fc00 idiv temp 
+2b58 20407f86 call wait_div_end 
+2b59 1807fe00 quotient pdata 
+2b5a 1ff07e00 lshift16 pdata ,pdata 
+2b5b 18070400 remainder temp 
+2b5c 9841fe00 ior temp ,pdata 
+2b5d 680b4163 fetcht 6 ,mem_sleep_clkn 
+2b5e 20407f2c call clk_add 
+2b5f 18423200 copy temp ,clkn 
+2b60 68034048 fetch 6 ,mem_context + coffset_clk_offset 
+2b61 20402854 call calc_clke2 
+2b62 1b427e00 deposit clke 
+2b63 60030a9a store 6 ,mem_pdatatemp 
+2b64 1ce27e00 deposit auxcnt 
+2b65 e0a08000 istore 1 ,contw 
+2b66 6810811d hfetch 1 ,core_gpio_in1 
+2b67 1fe1fef0 or_into 0xf0 ,pdata 
+2b68 e0a08000 istore 1 ,contw 
+2b69 20600000 rtn 
+
+lpm_dispatch:
+2b6a 44d3c014 bpatch patch14_7 ,mem_patch14 
+2b6b 20402afa call lpo_calibration 
+2b6c 6801c16f fetch 3 ,mem_clks_per_lpo 
+2b6d 207a0000 rtn blank 
+2b6e 6800c091 fetch 1 ,mem_lpm_mode 
+2b6f 207a0000 rtn blank 
+2b70 6800c65a fetch 1 ,mem_ssp_enable 
+2b71 203a2b74 branch lpm_dispatch_next ,blank 
+2b72 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 
+2b73 207a0000 rtn blank 
+
+lpm_dispatch_next:
+2b74 6800c4c0 fetch 1 ,mem_le_sc_calc 
+2b75 247a0000 nrtn blank 
+2b76 20402c3a call lpm_check_wake_lock 
+2b77 247a0000 nrtn blank 
+2b78 6800c040 fetch 1 ,mem_context 
+2b79 2fe00e03 compare 3 ,pdata ,0x7 
+2b7a 2420ab9d nbranch lpm_dispatch_unconn ,true 
+2b7b 68014042 fetch 2 ,mem_context + coffset_tsniff 
+2b7c 207a0000 rtn blank 
+2b7d 20758000 rtn wake 
+2b7e 44d44015 bpatch patch15_0 ,mem_patch15 
+
+lpm_dispatch_next2:
+2b7f 680880a0 fetcht 1 ,mem_lpm_current_mult 
+2b80 68014042 fetch 2 ,mem_context + coffset_tsniff 
+2b81 984ffe00 imul32 temp ,pdata 
+2b82 18518400 rshift4 temp ,temp 
+2b83 184b0400 rshift2 temp ,temp 
+2b84 98467e00 isub temp ,pdata 
+2b85 680a4044 fetcht 4 ,mem_context + coffset_sniff_anchor 
+2b86 9840fe00 iadd temp ,pdata 
+2b87 6808c156 fetcht 1 ,mem_lpm_overhead 
+2b88 98467e00 isub temp ,pdata 
+2b89 1ff06000 lshift16 pdata ,alarm 
+2b8a 44d4c015 bpatch patch15_1 ,mem_patch15 
+2b8b 6801404e fetch 2 ,mem_context + coffset_rx_window 
+2b8c 1fe37e00 rshift pdata ,pdata 
+2b8d 20407f50 call clk2bt 
+2b8e 1e027e00 deposit alarm 
+2b8f 20407f39 call clk_diff 
+2b90 1b420400 copy clke ,temp 
+2b91 20407f37 call clk_diff_rt 
+2b92 20740000 rtn user 
+
+lpm_dispatch_sleep:
+2b93 20407f49 call clk2lpo 
+
+lpm_dispatch_lpo:
+2b94 44d54015 bpatch patch15_2 ,mem_patch15 
+2b95 6800c178 fetch 1 ,mem_lpm_xtalcnt 
+2b96 98467c00 isub temp ,null 
+2b97 20212b18 branch lpm_clear_counter ,positive 
+2b98 600a415b storet 4 ,mem_sleep_counter 
+2b99 20403328 call app_will_enter_lpm 
+2b9a 204052fb call l2cap_lpm_save_txbuf 
+2b9b 680a415b fetcht 4 ,mem_sleep_counter 
+2b9c 20202b2a branch lpm_sleep 
+
+lpm_dispatch_unconn:
+2b9d 44d5c015 bpatch patch15_3 ,mem_patch15 
+2b9e 6800c040 fetch 1 ,mem_context 
+2b9f c3800000 rtnbit1 state_inconn 
+2ba0 c3818000 rtnbit1 state_inpage 
+2ba1 6800c65a fetch 1 ,mem_ssp_enable 
+2ba2 203a2ba5 branch lpm_unconn_nossp ,blank 
+2ba3 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 
+2ba4 207a0000 rtn blank 
+
+lpm_unconn_nossp:
+2ba5 44d64015 bpatch patch15_4 ,mem_patch15 
+2ba6 6800c36e fetch 1 ,mem_le_adv_enable 
+2ba7 243a2baa nbranch lpm_unconn_cont ,blank 
+2ba8 6800c093 fetch 1 ,mem_scan_mode 
+2ba9 207a0000 rtn blank 
+
+lpm_unconn_cont:
+2baa 68014154 fetch 2 ,mem_lpm_interval 
+2bab 207a0000 rtn blank 
+
+lpm_sleep_btclk:
+2bac 6808c156 fetcht 1 ,mem_lpm_overhead 
+2bad 98467e00 isub temp ,pdata 
+2bae d8401d4c arg 7500 ,temp 
+2baf 984ffe00 imul32 temp ,pdata 
+2bb0 20202b93 branch lpm_dispatch_sleep 
+
+lpm_set_mult:
+2bb1 44d6c015 bpatch patch15_5 ,mem_patch15 
+2bb2 7855fc00 disable wake 
+2bb3 68008030 fetch 1 ,mem_state 
+2bb4 c4008000 rtnbit0 state_insniff 
+2bb5 2436abd0 nbranch lpm_not_match ,match 
+2bb6 20402bcb call lpm_match 
+2bb7 680140c1 fetch 2 ,mem_rx_window_sniff 
+2bb8 6001003e store 2 ,mem_rx_window 
+2bb9 68008047 fetch 1 ,mem_arq 
+2bba c281abde bbit1 wack ,lpm_mult_short 
+2bbb c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short 
+2bbc 20405274 call l2cap_malloc_is_fifo_empty 
+2bbd 243a2bde nbranch lpm_mult_short ,blank 
+2bbe 6800c55c fetch 1 ,mem_classic_bt_flag 
+2bbf c280abde bbit1 short_mult_flag ,lpm_mult_short 
+
+lpm_mult_wait_timeout:
+2bc0 7000a000 jam 0 ,mem_lpm_current_mult 
+2bc1 c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short 
+2bc2 6800c174 fetch 1 ,mem_lpm_mult_cnt 
+2bc3 203a2be2 branch lpm_mult_long ,blank 
+2bc4 1fe0ffff increase -1 ,pdata 
+2bc5 6000c174 store 1 ,mem_lpm_mult_cnt 
+2bc6 20600000 rtn 
+
+classic_bt_set_mult_short_flag:
+2bc7 d8e00001 arg short_mult_flag ,queue 
+2bc8 202060cd branch classic_bluetooth_set_flag 
+
+classic_bt_clr_mult_short_flag:
+2bc9 d8e00001 arg short_mult_flag ,queue 
+2bca 202060d1 branch classic_bluetooth_clr_flag 
+
+lpm_match:
+2bcb 70415900 jam 0 ,mem_sniff_unint_lost 
+2bcc 6801c169 fetch 3 ,mem_sniff_rcv 
+2bcd 1fe0fe01 increase 1 ,pdata 
+2bce 6001c169 store 3 ,mem_sniff_rcv 
+2bcf 20600000 rtn 
+
+lpm_not_match:
+2bd0 44d74015 bpatch patch15_6 ,mem_patch15 
+2bd1 680940c1 fetcht 2 ,mem_rx_window_sniff 
+2bd2 18430400 rshift temp ,temp 
+2bd3 6801003e fetch 2 ,mem_rx_window 
+2bd4 9840fe00 iadd temp ,pdata 
+2bd5 6001003e store 2 ,mem_rx_window 
+
+lpm_lost:
+2bd6 7000a000 jam 0 ,mem_lpm_current_mult 
+2bd7 6801c16c fetch 3 ,mem_sniff_lost 
+2bd8 1fe0fe01 increase 1 ,pdata 
+2bd9 6001c16c store 3 ,mem_sniff_lost 
+2bda 6800c159 fetch 1 ,mem_sniff_unint_lost 
+2bdb 1fe0fe01 increase 1 ,pdata 
+2bdc 6000c159 store 1 ,mem_sniff_unint_lost 
+2bdd 20600000 rtn 
+
+lpm_mult_short:
+2bde 7000a000 jam 0 ,mem_lpm_current_mult 
+2bdf 6800c173 fetch 1 ,mem_lpm_mult_timeout 
+2be0 6000c174 store 1 ,mem_lpm_mult_cnt 
+2be1 20600000 rtn 
+
+lpm_mult_long:
+2be2 6808c172 fetcht 1 ,mem_lpm_mult 
+2be3 600880a0 storet 1 ,mem_lpm_current_mult 
+2be4 20600000 rtn 
+
+lpm_cal_xtal_startup:
+2be5 44d7c015 bpatch patch15_7 ,mem_patch15 
+2be6 6800c178 fetch 1 ,mem_lpm_xtalcnt 
+2be7 247a0000 nrtn blank 
+2be8 70804206 jam clksel_rc ,core_clksel 
+2be9 58000f0c setarg 0xf0c 
+2bea 20402c18 call lpm_write_config 
+2beb 58030d40 setarg 200000 
+2bec 20402a8f call sleep 
+2bed 37d98200 until null ,lpo_edge 
+2bee 1e226000 copy lpo_time ,alarm 
+2bef 204029e7 call xtal_fast_wake 
+2bf0 70804204 jam clksel_xtal ,core_clksel 
+2bf1 2000000a nop 10 
+2bf2 37d98200 until null ,lpo_edge 
+2bf3 1e227e00 deposit lpo_time 
+2bf4 9e067e00 isub alarm ,pdata 
+2bf5 1fe0fe30 increase 0x30 ,pdata 
+2bf6 d84000ff arg 0xff ,temp 
+2bf7 20407f91 call ceiling 
+2bf8 6000c178 store 1 ,mem_lpm_xtalcnt 
+2bf9 20007530 nop 30000 
+2bfa 20007530 nop 30000 
+2bfb 20007530 nop 30000 
+2bfc 20600000 rtn 
+
+lpm_cal_xtal_startup_by_snooze:
+2bfd 6800c178 fetch 1 ,mem_lpm_xtalcnt 
+2bfe 247a0000 nrtn blank 
+2bff 708044ff jam 0xff ,core_xtal_stable_time 
+2c00 70804206 jam clksel_rc ,core_clksel 
+2c01 204029e7 call xtal_fast_wake 
+2c02 580003e8 setarg 1000 
+2c03 9e20e000 iadd lpo_time ,alarm 
+2c04 07e00000 snooze 
+2c05 1e227e00 deposit lpo_time 
+2c06 20002ee0 nop 12000 
+2c07 20002ee0 nop 12000 
+2c08 20002ee0 nop 12000 
+2c09 20002ee0 nop 12000 
+2c0a 20002ee0 nop 12000 
+2c0b 20002ee0 nop 12000 
+2c0c 20002ee0 nop 12000 
+2c0d 20002ee0 nop 12000 
+2c0e 20002ee0 nop 12000 
+2c0f 9e067e00 isub alarm ,pdata 
+2c10 1fe0fe30 add pdata ,0x30 ,pdata 
+2c11 d84000ff arg 0xff ,temp 
+2c12 20407f91 call ceiling 
+2c13 6000c178 store 1 ,mem_lpm_xtalcnt 
+2c14 20007530 nop 30000 
+2c15 20007530 nop 30000 
+2c16 20007530 nop 30000 
+2c17 20600000 rtn 
+
+lpm_write_config:
+2c18 d8a00fff arg 0xfff ,contw 
+2c19 98a10a00 iand contw ,contw 
+2c1a 6800c175 fetch 1 ,mem_lpm_config 
+2c1b 1fe17ef0 and_into 0xf0 ,pdata 
+2c1c 1fed7e00 lshift8 pdata ,pdata 
+2c1d 98a1fe00 ior contw ,pdata 
+2c1e 6011004c hstore 2 ,core_lpm_reg 
+2c1f e8c10000 ifetch 2 ,contr 
+2c20 e0a10000 istore 2 ,contw 
+
+lpm_write_ctrl:
+2c21 58000001 setarg lpmreg_sel_ctrl 
+2c22 20202c24 branch lpm_write 
+
+lpm_write_ctrl2:
+2c23 58000002 setarg lpmreg_sel_ctrl2 
+
+lpm_write:
+2c24 37d98200 until null ,lpo_edge 
+2c25 60108005 hstore 1 ,core_lpm_wr 
+2c26 37d98200 until null ,lpo_edge 
+2c27 37d98200 until null ,lpo_edge 
+2c28 20600000 rtn 
+
+lpm_write_gpio_wakeup:
+2c29 44d84016 bpatch patch16_0 ,mem_patch16 
+2c2a 680200a1 fetch 4 ,mem_gpio_wakeup_low 
+2c2b 6012004c hstore 4 ,core_lpm_reg 
+2c2c 58000004 setarg lpmreg_sel_gpiolow 
+2c2d 20402c24 call lpm_write 
+2c2e 680200a5 fetch 4 ,mem_gpio_wakeup_high 
+2c2f 6012004c hstore 4 ,core_lpm_reg 
+2c30 58000008 setarg lpmreg_sel_gpiohigh 
+2c31 20202c24 branch lpm_write 
+
+lpm_get_wake_lock:
+2c32 68014152 fetch 2 ,mem_lpm_wake_lock 
+2c33 f9207e00 qset1 pdata 
+2c34 60014152 store 2 ,mem_lpm_wake_lock 
+2c35 20600000 rtn 
+
+lpm_put_wake_lock:
+2c36 68014152 fetch 2 ,mem_lpm_wake_lock 
+2c37 f93ffe00 qset0 pdata 
+2c38 60014152 store 2 ,mem_lpm_wake_lock 
+2c39 20600000 rtn 
+
+lpm_check_wake_lock:
+2c3a 44d8c016 bpatch patch16_1 ,mem_patch16 
+2c3b 20403326 call app_check_wake_lock 
+2c3c 68014152 fetch 2 ,mem_lpm_wake_lock 
+2c3d 1fe22200 copy pdata ,rega 
+2c3e 6800804c fetch 1 ,mem_state_map 
+2c3f 2feffe06 isolate1 smap_rxlmp ,pdata 
+2c40 7920a20b setflag true ,wake_lock_lmp_rx ,rega 
+2c41 68008078 fetch 1 ,mem_lmo_opcode1 
+2c42 6808807c fetcht 1 ,mem_lmo_opcode2 
+2c43 9840fe00 iadd temp ,pdata 
+2c44 68088048 fetcht 1 ,mem_lmp_to_send 
+2c45 9840fe00 iadd temp ,pdata 
+2c46 7d3a220a nsetflag blank ,wake_lock_lmp_tx ,rega 
+2c47 6800c4ff fetch 1 ,mem_le_tx_buff_used 
+2c48 7d3a2201 nsetflag blank ,wake_lock_ble_tx ,rega 
+2c49 6801025d fetch 2 ,mem_l2cap_rxbuff1_len 
+2c4a 6809025f fetcht 2 ,mem_l2cap_rxbuff2_len 
+2c4b 9840fe00 iadd temp ,pdata 
+2c4c 7d3a220d nsetflag blank ,wake_lock_l2cap_rx ,rega 
+2c4d 68044668 fetch util_fifo_len ,mem_ipc_fifo_bt2c51 
+2c4e 7d3a220f nsetflag blank ,wake_lock_ipc_bt2c51 ,rega 
+2c4f 68044670 fetch util_fifo_len ,mem_ipc_fifo_c512bt 
+2c50 7d3a220e nsetflag blank ,wake_lock_ipc_c512bt ,rega 
+2c51 6800c1ce fetch 1 ,mem_hci_cmd 
+2c52 7d3a2208 nsetflag blank ,wake_lock_cmd ,rega 
+2c53 6800c092 fetch 1 ,mem_device_option 
+2c54 2fe1fe0a compare dvc_op_module ,pdata ,0xff 
+2c55 2040ac5b call lpm_uart_wake_lock ,true 
+2c56 5ffffff8 setarg -8 
+2c57 9a212200 iand rega ,rega 
+2c58 1a227e00 copy rega ,pdata 
+2c59 60014152 store 2 ,mem_lpm_wake_lock 
+2c5a 20600000 rtn 
+
+lpm_uart_wake_lock:
+2c5b 68110112 hfetch 2 ,core_uart_rxitems 
+2c5c 7d3a2206 nsetflag blank ,wake_lock_uart_rx ,rega 
+2c5d 6811010e hfetch 2 ,core_uart_txitems 
+2c5e 7d3a2205 nsetflag blank ,wake_lock_uart_tx ,rega 
+2c5f 20600000 rtn 
+
+lpm_shut_down:
+2c60 68120138 hfetch 4 ,core_lpm_ctrl 
+2c61 793ffe1b set0 27 ,pdata 
+2c62 6012004c hstore 4 ,core_lpm_reg 
+2c63 20402c21 call lpm_write_ctrl 
+2c64 20202a8c branch assert 
+
+lpm_disable_exen_output:
+2c65 6812013c hfetch 4 ,core_lpm_xtalcnt 
+2c66 793ffe14 set0 20 ,pdata 
+2c67 6012004c hstore 4 ,core_lpm_reg 
+2c68 20202c23 branch lpm_write_ctrl2 
+
+check_bt_disabled:
+2c69 68014150 fetch 2 ,mem_chip_functions 
+2c6a c2802a8c bbit1 bt_disabled ,assert 
+2c6b 20600000 rtn 
+
+check_ble_disabled:
+2c6c 68014150 fetch 2 ,mem_chip_functions 
+2c6d c280aa8c bbit1 ble_disabled ,assert 
+2c6e 20600000 rtn 
+
+check_module_disabled:
+2c6f 68014150 fetch 2 ,mem_chip_functions 
+2c70 c2812a8c bbit1 module_disable ,assert 
+2c71 20600000 rtn 
+
+g24_dispatch:
+2c72 44d94016 bpatch patch16_2 ,mem_patch16 
+2c73 20402c7a call g24_head_ptr2regc 
+2c74 1a60a4cd add regc ,offset_24g_mode ,regb 
+2c75 ea408000 ifetch 1 ,regb 
+2c76 c1000000 rtneq disable_24g 
+2c77 c000ad06 beq tx_24g ,g24_transmit_process 
+2c78 c0012c7f beq rx_24g ,g24_receive_process 
+2c79 20600000 rtn 
+
+g24_head_ptr2regc:
+2c7a 68094241 fetcht 2 ,mem_24g_head_ptr 
+2c7b 18422600 copy temp ,regc 
+2c7c 20600000 rtn 
+
+g24_receive_process_init:
+2c7d 20402f3d call g24_receive_init 
+2c7e 2020307d branch g24_mode_switch_init 
+
+g24_receive_process:
+2c7f 20403084 call g24_mode_switch 
+2c80 2040305a call g24_dongle_work_mode_auto 
+2c81 2040305e call g24_dongle_bind_mode_auto 
+2c82 202030a2 branch g24_dongle_search_mode_auto 
+
+g24_pair_init:
+2c83 20403231 call g24_set0_mem_pid 
+2c84 5800004e setarg g24_pair_ch 
+2c85 2040322f call g24_store_mem_ch 
+2c86 204032ba call g24_store_mem_pair_txpower 
+2c87 1a60a292 add regc ,offset_24g_paring_addr ,rega 
+2c88 ea220000 ifetch 4 ,rega 
+2c89 2020322c branch g24_store_mem_addr 
+
+g24_ch:
+2c8a 20402c7a call g24_head_ptr2regc 
+2c8b 1a60a491 add regc ,offset_24g_current_ch_number ,regb 
+2c8c ea488000 ifetcht 1 ,regb 
+2c8d 20402c90 call g24_ch_temp_incre_size4 
+2c8e 1a608a91 add regc ,offset_24g_current_ch_number ,contw 
+2c8f 20202e56 branch g24_contw_istoret_1byte 
+
+g24_ch_temp_incre_size4:
+2c90 20402c94 call g24_ch_calc 
+2c91 18408401 increase 1 ,temp 
+2c92 18410403 and_into 3 ,temp 
+2c93 20600000 rtn 
+
+g24_ch_calc:
+2c94 1a60a4ae add regc ,offset_24g_addr ,regb 
+2c95 ea408000 ifetch 1 ,regb 
+2c96 1fe17e03 and_into 0x03 ,pdata 
+2c97 1fefa204 mul32 pdata ,4 ,rega 
+2c98 1a60fe97 add regc ,offset_24g_ch_map1 ,pdata 
+2c99 9a20fe00 iadd rega ,pdata 
+2c9a 98408c00 iadd temp ,contr 
+2c9b e8c08000 ifetch 1 ,contr 
+2c9c 2020322f branch g24_store_mem_ch 
+
+g24_set_device_addr:
+2c9d 2040326c call g24_store_mem_tx_power_temp 
+2c9e 2040666a call otp_enable_chgpump 
+2c9f 580007e2 setarg 0x7e2 
+2ca0 da200aa2 arg mem_temp ,rega 
+2ca1 d8400004 arg 4 ,temp 
+2ca2 204066b3 call otpd_read_data 
+2ca3 2040666d call otp_disable_chgpump 
+2ca4 68020aa2 fetch 4 ,mem_temp 
+2ca5 20403227 call g24_store_mem_device_addr 
+2ca6 247a0000 nrtn blank 
+2ca7 680240a0 fetch 4 ,mem_lap 
+2ca8 20203227 branch g24_store_mem_device_addr 
+
+g24_transmit_rf_sta_init:
+2ca9 20403241 call g24_set1_mem_rf_last_sta 
+2caa 58000000 setarg 0 
+2cab 2040323f call g24_store_mem_sync_cnt 
+
+g24_transmit_rf_ctrl_clear:
+2cac 2040323a call g24_fetch_mem_data_type 
+2cad 1fe17e07 and_into bits_data ,pdata 
+2cae 2020323c branch g24_store_mem_data_type 
+
+g24_hop_ch_enable:
+2caf 2040323a call g24_fetch_mem_data_type 
+2cb0 79207e04 set1 bit_hop ,pdata 
+2cb1 2040323c call g24_store_mem_data_type 
+2cb2 20203235 branch g24_store_mem_txpayload 
+
+g24_transmit_hop_pac_fail:
+2cb3 2040325d call g24_fetch_mem_rf_work_stage 
+2cb4 c000acb7 beq 1 ,g24_transmit_hop_pac_fail_wo_hop 
+2cb5 c0012cbc beq 2 ,g24_transmit_hop_pac_fail_hop_stage2 
+2cb6 20600000 rtn 
+
+g24_transmit_hop_pac_fail_wo_hop:
+2cb7 2040323e call g24_set2_mem_sync_cnt 
+
+g24_transmit_hop_pac_fail_stage1:
+2cb8 1a608ad1 add regc ,offset_24g_hop_pac_retry ,contw 
+2cb9 204032d6 call g24_mem_set0 
+2cba 20403242 call g24_store_mem_rf_last_sta 
+2cbb 20202cac branch g24_transmit_rf_ctrl_clear 
+
+g24_transmit_hop_pac_fail_hop_stage2:
+2cbc 2040325a call g24_set0_mem_rf_hop_ch 
+2cbd 20202cb8 branch g24_transmit_hop_pac_fail_stage1 
+
+g24_transmit_pac_fail_hop_stage3:
+2cbe 1a60a28c add regc ,offset_24g_txfail_cnt ,rega 
+2cbf ea208000 ifetch 1 ,rega 
+2cc0 1fe0fe01 increase 1 ,pdata 
+2cc1 1a608a8c add regc ,offset_24g_txfail_cnt ,contw 
+2cc2 e0a08000 istore 1 ,contw 
+2cc3 c0102dd2 beq 0x20 ,g24_tx_attempt_fail 
+2cc4 20403258 call g24_fetch_mem_rf_hop_ch 
+2cc5 c000acca beq 1 ,g24_rf_hop_fastly 
+2cc6 58000001 setarg 1 
+2cc7 2040325b call g24_store_mem_rf_hop_ch 
+
+g24_rf_hop_attemp_again:
+2cc8 20403258 call g24_fetch_mem_rf_hop_ch 
+2cc9 c080acac bne 1 ,g24_transmit_rf_ctrl_clear 
+
+g24_rf_hop_fastly:
+2cca 1a60a2d3 add regc ,offset_24g_hop_fastly_cnt ,rega 
+2ccb ea208000 ifetch 1 ,rega 
+2ccc 1fe0fe01 increase 1 ,pdata 
+2ccd 20402cd5 call g24_store_mem_hop_fastly_cnt 
+2cce c0022cd2 beq 4 ,g24_rf_hop_fastly_exit 
+2ccf 20402c8a call g24_ch 
+2cd0 20402d04 call g24_set2_mem_max_retry 
+2cd1 20202d8f branch g24_transmit_packet 
+
+g24_rf_hop_fastly_exit:
+2cd2 20402cd4 call g24_set0_mem_hop_fastly_cnt 
+2cd3 20202cac branch g24_transmit_rf_ctrl_clear 
+
+g24_set0_mem_hop_fastly_cnt:
+2cd4 58000000 setarg 0 
+
+g24_store_mem_hop_fastly_cnt:
+2cd5 1a608ad3 add regc ,offset_24g_hop_fastly_cnt ,contw 
+2cd6 202032b4 branch g24_contw_istore_1byte 
+
+g24_transmit_hop_pac_succ_wo_hop:
+2cd7 2040323e call g24_set2_mem_sync_cnt 
+
+g24_transmit_hop_pac_succ:
+2cd8 2040325a call g24_set0_mem_rf_hop_ch 
+2cd9 20403241 call g24_set1_mem_rf_last_sta 
+2cda 20202cac branch g24_transmit_rf_ctrl_clear 
+
+g24_transmit_succ_rf_config:
+2cdb 2040325d call g24_fetch_mem_rf_work_stage 
+2cdc c001acd8 beq 3 ,g24_transmit_hop_pac_succ 
+2cdd 2040323a call g24_fetch_mem_data_type 
+2cde 2fec0004 isolate0 bit_hop ,pdata 
+2cdf 2020aca9 branch g24_transmit_rf_sta_init ,true 
+2ce0 2040325d call g24_fetch_mem_rf_work_stage 
+2ce1 c000acd7 beq 1 ,g24_transmit_hop_pac_succ_wo_hop 
+2ce2 c0012cd8 beq 2 ,g24_transmit_hop_pac_succ 
+2ce3 20600000 rtn 
+
+g24_rf_sta_check:
+2ce4 20403253 call g24_fetch_mem_pairing_sm 
+2ce5 c1ff8000 rtnne state_24g_pairing_success 
+2ce6 20402ce9 call g24_rf_laststa_synccnt_check 
+2ce7 24562cf4 ncall g24_rf_sync_cnt_check ,user2 
+2ce8 20600000 rtn 
+
+g24_rf_laststa_synccnt_check:
+2ce9 78567c00 disable user2 
+2cea 1a60a2ce add regc ,offset_24g_rf_last_sta ,rega 
+2ceb ea208000 ifetch 1 ,rega 
+2cec c1808000 rtnne 1 
+2ced 1a60a2d0 add regc ,offset_24g_sync_cnt ,rega 
+2cee ea208000 ifetch 1 ,rega 
+2cef c1800000 rtnne 0 
+2cf0 58000001 setarg 1 
+2cf1 20402cfd call g24_store_mem_rf_work_stage 
+2cf2 20403237 call g24_set4_mem_max_retry 
+2cf3 20207feb branch enable_user2 
+
+g24_rf_sync_cnt_check:
+2cf4 1a60a2d0 add regc ,offset_24g_sync_cnt ,rega 
+2cf5 ea208000 ifetch 1 ,rega 
+2cf6 203a2cff branch g24_rf_hop_attemp ,blank 
+2cf7 1fe0ffff increase -1 ,pdata 
+2cf8 2040323f call g24_store_mem_sync_cnt 
+2cf9 58000002 setarg 2 
+2cfa 20402cfd call g24_store_mem_rf_work_stage 
+2cfb 20402c8a call g24_ch 
+2cfc 20203237 branch g24_set4_mem_max_retry 
+
+g24_store_mem_rf_work_stage:
+2cfd 1a608ad2 add regc ,offset_24g_rf_work_stage ,contw 
+2cfe 202032b4 branch g24_contw_istore_1byte 
+
+g24_rf_hop_attemp:
+2cff 58000003 setarg 3 
+2d00 20402cfd call g24_store_mem_rf_work_stage 
+2d01 20403258 call g24_fetch_mem_rf_hop_ch 
+2d02 243a2cc8 nbranch g24_rf_hop_attemp_again ,blank 
+2d03 20402c8a call g24_ch 
+
+g24_set2_mem_max_retry:
+2d04 58000002 setarg 2 
+2d05 20203238 branch g24_store_mem_max_retry 
+
+g24_transmit_process:
+2d06 c6930000 rtnmark0 mark_24g 
+2d07 79200027 set1 mark_24g_conext ,mark 
+2d08 44d9c016 bpatch patch16_3 ,mem_patch16 
+2d09 1a60a28e add regc ,offset_24g_tx_without_int ,rega 
+2d0a ea208000 ifetch 1 ,rega 
+2d0b c000ad0f beq 1 ,g24_transmit_without_int 
+2d0c 2040306a call g24_timer_check 
+2d0d 24342d16 nbranch g24_transmit_exit ,user 
+2d0e 20402d1b call g24_interval_calibrate 
+
+g24_transmit_without_int:
+2d0f 1a608a8e add regc ,offset_24g_tx_without_int ,contw 
+2d10 204032d6 call g24_mem_set0 
+2d11 20402d2c call g24_txdata_prep 
+2d12 24342d7d nbranch g24_enter_lpm ,user 
+2d13 20402ce4 call g24_rf_sta_check 
+
+g24_transmit_start:
+2d14 20402d8f call g24_transmit_packet 
+2d15 20402e7a call g24_power_ctrl 
+
+g24_transmit_exit:
+2d16 793f8027 set0 mark_24g_conext ,mark 
+2d17 20600000 rtn 
+
+g24_timer_timeout:
+2d18 20628000 rtn zero 
+2d19 79207e1c set1 28 ,pdata 
+2d1a 20600000 rtn 
+
+g24_interval_calibrate:
+2d1b 1a60a2c2 add regc ,offset_24g_pac_index ,rega 
+2d1c ea208000 ifetch 1 ,rega 
+2d1d 1fe0fe01 increase 1 ,pdata 
+2d1e 1a608ac2 add regc ,offset_24g_pac_index ,contw 
+2d1f e0a08000 istore 1 ,contw 
+2d20 c0022d23 beq 4 ,g24_interval_max 
+2d21 c002ad27 beq 5 ,g24_interval_min 
+2d22 20600000 rtn 
+
+g24_interval_max:
+2d23 1a60a2ad add regc ,offset_24g_interval_max ,rega 
+2d24 ea208000 ifetch 1 ,rega 
+
+g24_interval_update:
+2d25 1a608aab add regc ,offset_24g_interval ,contw 
+2d26 202032b4 branch g24_contw_istore_1byte 
+
+g24_interval_min:
+2d27 1a608ac2 add regc ,offset_24g_pac_index ,contw 
+2d28 204032d6 call g24_mem_set0 
+2d29 1a60a2ac add regc ,offset_24g_interval_min ,rega 
+2d2a ea208000 ifetch 1 ,rega 
+2d2b 20202d25 branch g24_interval_update 
+
+g24_txdata_prep:
+2d2c 20403253 call g24_fetch_mem_pairing_sm 
+2d2d c0ffaeb1 bne state_24g_pairing_success ,g24_pairing_sm 
+2d2e 44da4016 bpatch patch16_4 ,mem_patch16 
+2d2f 20402d3a call g24_package_data 
+2d30 24342d36 nbranch g24_txdata_last_pac ,user 
+2d31 20402d53 call g24_transmit_prep 
+2d32 20402e71 call g24_power_ctrl_pac_incrs 
+
+g24_txdata_enable_tx:
+2d33 58000001 setarg ensure_on_24g 
+
+g24_store_mem_ensure:
+2d34 1a608a8b add regc ,offset_24g_ensure ,contw 
+2d35 202032b4 branch g24_contw_istore_1byte 
+
+g24_txdata_last_pac:
+2d36 1a60a28b add regc ,offset_24g_ensure ,rega 
+2d37 ea208000 ifetch 1 ,rega 
+2d38 c000ffe7 beq ensure_on_24g ,enable_user 
+2d39 20600000 rtn 
+
+g24_package_data:
+2d3a 1a6084d8 add regc ,offset_24g_cb_data ,temp 
+2d3b e8410000 ifetch 2 ,temp 
+2d3c 20407f9c call callback_func 
+2d3d 24740000 nrtn user 
+2d3e 1a227e00 copy rega ,pdata 
+2d3f 60008aae store 1 ,mem_rega 
+2d40 1a608ab2 add regc ,offset_24g_abort_pac ,contw 
+2d41 204032d6 call g24_mem_set0 
+2d42 20402cac call g24_transmit_rf_ctrl_clear 
+2d43 6000919e store 1 ,mem_24g_common_temp 
+2d44 68008aae fetch 1 ,mem_rega 
+2d45 1fe22200 copy pdata ,rega 
+2d46 1a208401 add rega ,1 ,temp 
+2d47 d8a0119f arg mem_24g_common_temp + 1 ,contw 
+2d48 1a227200 copy rega ,loopcnt 
+2d49 1a420c00 copy regb ,contr 
+2d4a 20407f01 call memcpy 
+2d4b da20119e arg mem_24g_common_temp ,rega 
+
+g24_put_data_in_buff:
+2d4c c6938000 rtnmark0 mark_24g_conext 
+2d4d 1a608a86 add regc ,offset_24g_datalen ,contw 
+2d4e e0a88000 istoret 1 ,contw 
+2d4f 18427200 copy temp ,loopcnt 
+2d50 1a608a22 add regc ,offset_24g_txbuf ,contw 
+2d51 1a220c00 copy rega ,contr 
+2d52 20207f01 branch memcpy 
+
+g24_transmit_prep:
+2d53 1a60a286 add regc ,offset_24g_datalen ,rega 
+2d54 ea208000 ifetch 1 ,rega 
+2d55 1fe0fe02 increase 2 ,pdata 
+2d56 1a608a88 add regc ,offset_24g_txlen ,contw 
+2d57 e0a08000 istore 1 ,contw 
+2d58 2040323a call g24_fetch_mem_data_type 
+2d59 20403235 call g24_store_mem_txpayload 
+2d5a 1a60a286 add regc ,offset_24g_datalen ,rega 
+2d5b ea208000 ifetch 1 ,rega 
+2d5c 1fe9fe00 lshift3 pdata ,pdata 
+2d5d 1a60a285 add regc ,offset_24g_pid ,rega 
+2d5e ea288000 ifetcht 1 ,rega 
+2d5f 18410403 and temp ,0x03 ,temp 
+2d60 18438400 lshift temp ,temp 
+2d61 9841fe00 ior temp ,pdata 
+2d62 1a60a2c3 add regc ,offset_24g_no_ack ,rega 
+2d63 ea288000 ifetcht 1 ,rega 
+2d64 9840fe00 iadd temp ,pdata 
+2d65 e0a08000 istore 1 ,contw 
+2d66 1a60a286 add regc ,offset_24g_datalen ,rega 
+2d67 ea208000 ifetch 1 ,rega 
+2d68 98007200 iforce loopcnt 
+2d69 1a608c22 add regc ,offset_24g_txbuf ,contr 
+2d6a 20207f01 branch memcpy 
+
+g24_send_abort_packet:
+2d6b 2040324f call g24_set1_mem_abort_pac 
+2d6c 2040325a call g24_set0_mem_rf_hop_ch 
+2d6d 20402e6d call g24_power_ctrl_reinit 
+2d6e 20402cac call g24_transmit_rf_ctrl_clear 
+2d6f 6000919e store 1 ,mem_24g_common_temp 
+2d70 20402d77 call g24_put_data_in_buff_pre 
+2d71 2040323a call g24_fetch_mem_data_type 
+2d72 79207e03 set1 bit_abort ,pdata 
+2d73 2040323c call g24_store_mem_data_type 
+2d74 20402d53 call g24_transmit_prep 
+2d75 20402d33 call g24_txdata_enable_tx 
+2d76 20202d14 branch g24_transmit_start 
+
+g24_put_data_in_buff_pre:
+2d77 6000919f store 1 ,mem_24g_common_temp + 1 
+2d78 20403224 call g24_fetch_mem_device_addr 
+2d79 600211a0 store 4 ,mem_24g_common_temp + 2 
+2d7a d8400006 arg 6 ,temp 
+2d7b da20119e arg mem_24g_common_temp ,rega 
+2d7c 20202d4c branch g24_put_data_in_buff 
+
+g24_enter_lpm:
+2d7d 1a60a2b2 add regc ,offset_24g_abort_pac ,rega 
+2d7e ea208000 ifetch 1 ,rega 
+2d7f 203a2d6b branch g24_send_abort_packet ,blank 
+
+g24_enter_lpm_prepare:
+2d80 1a60a2da add regc ,offset_24g_cb_lpm_prepare ,rega 
+2d81 ea210000 ifetch 2 ,rega 
+2d82 20207f9c branch callback_func 
+
+g24_lpm_long_sleep:
+2d83 20402c7a call g24_head_ptr2regc 
+2d84 20402afa call lpo_calibration 
+2d85 6801c16f fetch 3 ,mem_clks_per_lpo 
+2d86 207a0000 rtn blank 
+2d87 1a6084dc add regc ,offset_24g_cb_lpm_before ,temp 
+2d88 e8410000 ifetch 2 ,temp 
+2d89 20407f9c call callback_func 
+2d8a 1a6084b6 add regc ,offset_24g_enter_hibernate ,temp 
+2d8b e8440000 ifetch 8 ,temp 
+2d8c 20407f49 call clk2lpo 
+2d8d 600a415b storet 4 ,mem_sleep_counter 
+2d8e 20202b2a branch lpm_sleep 
+
+g24_transmit_packet:
+2d8f 20402c7a call g24_head_ptr2regc 
+2d90 1a608a8f add regc ,offset_24g_retry ,contw 
+2d91 204032d6 call g24_mem_set0 
+
+g24_transmit_loop:
+2d92 20402da4 call g24_transmit_receive_ack 
+2d93 242c2dae nbranch g24_retransmit ,sync 
+2d94 2437adae nbranch g24_retransmit ,user3 
+2d95 20402dd6 call g24_ackpayload_parse 
+2d96 20402e75 call g24_power_ctrl_ack_incrs 
+
+g24_transmit_next_packet:
+2d97 20402c7a call g24_head_ptr2regc 
+2d98 1a60a285 add regc ,offset_24g_pid ,rega 
+2d99 ea208000 ifetch 1 ,rega 
+2d9a 1fe0fe01 increase 1 ,pdata 
+2d9b 20403232 call g24_store_mem_pid 
+2d9c 20403253 call g24_fetch_mem_pairing_sm 
+2d9d c0ffaed0 bne state_24g_pairing_success ,g24_paring_mode 
+2d9e 20402cdb call g24_transmit_succ_rf_config 
+
+g24_transmit_abandon:
+2d9f 58000000 setarg 0 
+2da0 1a608a8c add regc ,offset_24g_txfail_cnt ,contw 
+2da1 e0a10000 istore 2 ,contw 
+2da2 58000000 setarg ensure_off_24g 
+2da3 20202d34 branch g24_store_mem_ensure 
+
+g24_transmit_receive_ack:
+2da4 7857fc00 disable user3 
+2da5 20402df7 call g24_transmit 
+2da6 20402c7a call g24_head_ptr2regc 
+2da7 1a60a2c3 add regc ,offset_24g_no_ack ,rega 
+2da8 ea208000 ifetch 1 ,rega 
+2da9 c000adac beq no_ack_24g ,g24_transmit_no_ack 
+2daa 20402e11 call g24_receive_packet 
+2dab 20202e45 branch g24_end_of_packet 
+
+g24_transmit_no_ack:
+2dac 20402e45 call g24_end_of_packet 
+2dad 20202d97 branch g24_transmit_next_packet 
+
+g24_retransmit:
+2dae 44dac016 bpatch patch16_5 ,mem_patch16 
+2daf 1a60a28d add regc ,offset_24g_get_ack_fail ,rega 
+2db0 ea208000 ifetch 1 ,rega 
+2db1 1fe0fe01 increase 1 ,pdata 
+2db2 1a608a8d add regc ,offset_24g_get_ack_fail ,contw 
+2db3 e0a08000 istore 1 ,contw 
+2db4 20403253 call g24_fetch_mem_pairing_sm 
+2db5 c0ffadcc bne state_24g_pairing_success ,g24_tx_paring_retry 
+2db6 1a60a28f add regc ,offset_24g_retry ,rega 
+2db7 ea288000 ifetcht 1 ,rega 
+2db8 18408401 increase 1 ,temp 
+2db9 1a608a8f add regc ,offset_24g_retry ,contw 
+2dba e0a88000 istoret 1 ,contw 
+2dbb 1a60a2cc add regc ,offset_24g_max_retry ,rega 
+2dbc ea208000 ifetch 1 ,rega 
+2dbd 98467e00 isub temp ,pdata 
+2dbe 243a2d92 nbranch g24_transmit_loop ,blank 
+2dbf 44db4016 bpatch patch16_6 ,mem_patch16 
+2dc0 2040325d call g24_fetch_mem_rf_work_stage 
+2dc1 c001acbe beq 3 ,g24_transmit_pac_fail_hop_stage3 
+2dc2 1a60a2d1 add regc ,offset_24g_hop_pac_retry ,rega 
+2dc3 ea208000 ifetch 1 ,rega 
+2dc4 1fe0fe01 increase 1 ,pdata 
+2dc5 1a608ad1 add regc ,offset_24g_hop_pac_retry ,contw 
+2dc6 e0a08000 istore 1 ,contw 
+2dc7 c0012cb3 beq 2 ,g24_transmit_hop_pac_fail 
+2dc8 20402caf call g24_hop_ch_enable 
+2dc9 58000001 setarg 1 
+2dca 20403238 call g24_store_mem_max_retry 
+2dcb 20202d8f branch g24_transmit_packet 
+
+g24_tx_paring_retry:
+2dcc 1a60a28d add regc ,offset_24g_get_ack_fail ,rega 
+2dcd ea208000 ifetch 1 ,rega 
+2dce c1ff8000 rtnne 0xff 
+2dcf 1a608a8d add regc ,offset_24g_get_ack_fail ,contw 
+2dd0 204032d6 call g24_mem_set0 
+2dd1 20202dd4 branch g24_stop_24g_mode 
+
+g24_tx_attempt_fail:
+2dd2 1a608a8c add regc ,offset_24g_txfail_cnt ,contw 
+2dd3 204032d6 call g24_mem_set0 
+
+g24_stop_24g_mode:
+2dd4 700a993a jam bt_evt_24g_attempt_fail ,mem_fifo_temp 
+2dd5 20207d86 branch ui_ipc_send_event 
+
+g24_ackpayload_parse:
+2dd6 20402dde call g24_read_len_pid_crc 
+2dd7 1a60a284 add regc ,offset_24g_rxdata_length ,rega 
+2dd8 ea208000 ifetch 1 ,rega 
+2dd9 207a0000 rtn blank 
+2dda 98007200 iforce loopcnt 
+2ddb 1a608c02 add regc ,offset_24g_rxbuf_add2 ,contr 
+2ddc 1a608a64 add regc ,offset_24g_rxpayload ,contw 
+2ddd 20207f01 branch memcpy 
+
+g24_read_len_pid_crc:
+2dde 2040325f call g24_fetch_mem_rxbuf_add1 
+2ddf 1fe97e00 rshift3 pdata ,pdata 
+2de0 1a608a84 add regc ,offset_24g_rxdata_length ,contw 
+2de1 e0a08000 istore 1 ,contw 
+2de2 1fe0fe01 increase 1 ,pdata 
+2de3 1a608c01 add regc ,offset_24g_rxbuf_add1 ,contr 
+2de4 98c08c00 iadd contr ,contr 
+2de5 e8c18000 ifetch 3 ,contr 
+2de6 1a608ac4 add regc ,offset_24g_sta_crc ,contw 
+2de7 e0a18000 istore 3 ,contw 
+2de8 2040325f call g24_fetch_mem_rxbuf_add1 
+2de9 1fe37e00 rshift pdata ,pdata 
+2dea 1fe17e03 and pdata ,0x03 ,pdata 
+2deb 1a608aca add regc ,offset_24g_sta_pid ,contw 
+2dec e0a08000 istore 1 ,contw 
+2ded 20600000 rtn 
+
+g24_prep:
+2dee 7844fc00 disable enable_crc 
+2def 7843fc00 disable enable_white 
+2df0 58555555 setarg 0x555555 
+2df1 98001e00 iforce crc24_init 
+2df2 20600000 rtn 
+
+g24_set_freq_tx:
+2df3 20402918 call set_sync_on 
+2df4 1a60a290 add regc ,offset_24g_ch ,rega 
+2df5 ea288000 ifetcht 1 ,rega 
+2df6 20202933 branch set_freq_tx 
+
+g24_transmit:
+2df7 20402dee call g24_prep 
+2df8 20402df3 call g24_set_freq_tx 
+2df9 79202a00 set1 txgfsk ,radio_ctrl 
+2dfa 782efc00 enable encode_fec0 
+2dfb 78307c00 enable is_tx 
+2dfc 7850fc00 disable is_rx 
+2dfd 204053c4 call le_enable 
+2dfe 2040322a call g24_fetch_mem_addr 
+2dff 98001200 iforce access 
+2e00 08008620 inject mod ,32 
+2e01 7824fc00 enable enable_crc 
+2e02 1a60a288 add regc ,offset_24g_txlen ,rega 
+2e03 ea208000 ifetch 1 ,rega 
+2e04 98007200 iforce loopcnt 
+2e05 1a608c42 add regc ,offset_24g_txpayload ,contr 
+
+g24tr_loop:
+2e06 e8c08000 ifetch 1 ,contr 
+2e07 08008608 inject mod ,8 
+2e08 c2002e06 loop g24tr_loop 
+2e09 78247c00 enable enable_parity 
+2e0a 08008618 inject mod ,24 
+2e0b 78447c00 disable enable_parity 
+2e0c 37d38200 until null ,tx_clear 
+2e0d 44dbc016 bpatch patch16_7 ,mem_patch16 
+2e0e 20000064 nop 100 
+2e0f 784efc00 disable encode_fec0 
+2e10 20600000 rtn 
+
+g24_receive_packet:
+2e11 7857fc00 disable user3 
+2e12 18002a00 force 0 ,radio_ctrl 
+2e13 1a60a290 add regc ,offset_24g_ch ,rega 
+2e14 ea288000 ifetcht 1 ,rega 
+2e15 2040291f call set_freq_rx 
+2e16 20402924 call rf_rx_enable 
+
+g24_receive_rxon:
+2e17 20402dee call g24_prep 
+2e18 7826fc00 enable decode_fec0 
+2e19 7830fc00 enable is_rx 
+2e1a 78507c00 disable is_tx 
+2e1b 204053c4 call le_enable 
+2e1c 2040322a call g24_fetch_mem_addr 
+2e1d 98001200 iforce access 
+2e1e 78287c00 enable swfine 
+2e1f 1a60a289 add regc ,offset_24g_rx_window ,rega 
+2e20 ea210000 ifetch 2 ,rega 
+2e21 98003600 iforce stop_watch 
+2e22 37c18400 correlate null ,timeout 
+2e23 242c2e4d nbranch g24_sync_timeout ,sync 
+2e24 7824fc00 enable enable_crc 
+2e25 09800008 parse demod ,bucket ,8 
+2e26 19897e00 rshift3 pwindow ,pdata 
+2e27 1a608a00 add regc ,offset_24g_rxbuf ,contw 
+2e28 e0a08000 istore 1 ,contw 
+2e29 1a60a2cd add regc ,offset_24g_mode ,rega 
+2e2a ea208000 ifetch 1 ,rega 
+2e2b c0012e33 beq rx_24g ,g24_receive_skip 
+2e2c 44dc4017 bpatch patch17_0 ,mem_patch17 
+2e2d 1a60a200 add regc ,offset_24g_rxbuf ,rega 
+2e2e ea208000 ifetch 1 ,rega 
+2e2f 1a60a287 add regc ,offset_24g_data_type ,rega 
+2e30 ea288000 ifetcht 1 ,rega 
+2e31 a8400e00 icompare bits_data ,temp 
+2e32 2420ae45 nbranch g24_end_of_packet ,true 
+
+g24_receive_skip:
+2e33 09800008 parse demod ,bucket ,8 
+2e34 19897e00 rshift3 pwindow ,pdata 
+2e35 e0a08000 istore 1 ,contw 
+2e36 1fe97e00 rshift3 pdata ,pdata 
+2e37 1fe1721f and pdata ,0x1f ,loopcnt 
+2e38 2022ae3d branch g24rx_nopayload ,zero 
+
+g24rx_loop:
+2e39 09800008 parse demod ,bucket ,8 
+2e3a 19897e00 rshift3 pwindow ,pdata 
+2e3b e0a08000 istore 1 ,contw 
+2e3c c2002e39 loop g24rx_loop 
+
+g24rx_nopayload:
+2e3d 09800018 parse demod ,bucket ,24 
+2e3e 1fef7e00 rshift32 pdata ,pdata 
+2e3f 1ff17e00 rshift16 pdata ,pdata 
+2e40 e0a18000 istore 3 ,contw 
+2e41 20232e45 branch g24_end_of_packet ,crc_failed 
+2e42 7837fc00 enable user3 
+2e43 7846fc00 disable decode_fec0 
+2e44 20600000 rtn 
+
+g24_end_of_packet:
+2e45 784efc00 disable encode_fec0 
+2e46 7846fc00 disable decode_fec0 
+2e47 7844fc00 disable enable_crc 
+2e48 7843fc00 disable enable_white 
+2e49 2030a8f9 branch shutdown_radio ,is_rx 
+2e4a 37d38200 until null ,tx_clear 
+2e4b 20000064 nop 100 
+2e4c 202028f9 branch shutdown_radio 
+
+g24_sync_timeout:
+2e4d 20402e4f call rssi_noise 
+2e4e 20202e45 branch g24_end_of_packet 
+
+rssi_noise:
+2e4f 204029bb call save_rssi 
+2e50 207a0000 rtn blank 
+2e51 1a60a2ea add regc ,offset_rssi_noise_index ,rega 
+2e52 ea288000 ifetcht 1 ,rega 
+2e53 da200d9e arg mem_rssi_noise_buffer ,rega 
+2e54 20402e58 call rssi_noise_store 
+2e55 1a608aea add regc ,offset_rssi_noise_index ,contw 
+
+g24_contw_istoret_1byte:
+2e56 e0a88000 istoret 1 ,contw 
+2e57 20600000 rtn 
+
+rssi_noise_store:
+2e58 da4000ff arg rssi_buf_len_noise ,regb 
+2e59 20202e5a branch rssi_store 
+
+rssi_store:
+2e5a 1a227e00 copy rega ,pdata 
+2e5b 98408a00 iadd temp ,contw 
+2e5c 68008018 fetch 1 ,mem_rssi 
+2e5d e0a08000 istore 1 ,contw 
+2e5e 18408401 increase 1 ,temp 
+2e5f 1a427e00 copy regb ,pdata 
+2e60 98410400 iand_into temp 
+2e61 20600000 rtn 
+
+rssi_average:
+2e62 d8400000 arg 0 ,temp 
+2e63 1a220c00 copy rega ,contr 
+
+rssi_average_loop:
+2e64 e8c08000 ifetch 1 ,contr 
+2e65 98408400 iadd temp ,temp 
+2e66 c2002e64 loop rssi_average_loop 
+2e67 184c8400 rshift8 temp ,temp 
+2e68 20600000 rtn 
+
+g24_power_ctrl_init:
+2e69 20402c7a call g24_head_ptr2regc 
+2e6a 20402e9f call g24_power_ctrl_incrs_level1 
+2e6b 58000001 setarg 1 
+2e6c 20403272 call g24_store_mem_power_ctrl_level 
+
+g24_power_ctrl_reinit:
+2e6d 58000000 setarg 0 
+2e6e 20402e73 call g24_store_mem_power_ctrl_pac 
+2e6f e0a08000 istore 1 ,contw 
+2e70 20600000 rtn 
+
+g24_power_ctrl_pac_incrs:
+2e71 20403270 call g24_fetch_mem_power_ctrl_pac 
+2e72 1fe0fe01 increase 1 ,pdata 
+
+g24_store_mem_power_ctrl_pac:
+2e73 1a608afc add regc ,offset_power_ctrl_packet_cnt ,contw 
+2e74 202032b4 branch g24_contw_istore_1byte 
+
+g24_power_ctrl_ack_incrs:
+2e75 1a60a2fd add regc ,offset_power_ctrl_ack_cnt ,rega 
+2e76 ea208000 ifetch 1 ,rega 
+2e77 1fe0fe01 increase 1 ,pdata 
+2e78 1a608afd add regc ,offset_power_ctrl_ack_cnt ,contw 
+2e79 202032b4 branch g24_contw_istore_1byte 
+
+g24_power_ctrl:
+2e7a 44dcc017 bpatch patch17_1 ,mem_patch17 
+2e7b 20403270 call g24_fetch_mem_power_ctrl_pac 
+2e7c 1fe67c7c sub pdata ,power_ctrl_max_packet_cnt ,null 
+2e7d 20610000 rtn positive 
+2e7e 1a60a2fd add regc ,offset_power_ctrl_ack_cnt ,rega 
+2e7f ea288000 ifetcht 1 ,rega 
+2e80 98460400 isub temp ,temp 
+2e81 20402e6d call g24_power_ctrl_reinit 
+2e82 58000102 setarg offset_power_ctrl_threshold_up 
+2e83 9a60a200 iadd regc ,rega 
+2e84 ea208000 ifetch 1 ,rega 
+2e85 98467c00 isub temp ,null 
+2e86 24212e8d nbranch g24_power_ctrl_incrs ,positive 
+2e87 58000103 setarg offset_power_ctrl_threshold_down 
+2e88 9a60a200 iadd regc ,rega 
+2e89 ea208000 ifetch 1 ,rega 
+2e8a 98467c00 isub temp ,null 
+2e8b 20212e99 branch g24_power_ctrl_decrs ,positive 
+2e8c 20600000 rtn 
+
+g24_power_ctrl_incrs:
+2e8d 1a60a2fe add regc ,offset_power_ctrl_level ,rega 
+2e8e ea208000 ifetch 1 ,rega 
+2e8f c0012e93 beq 2 ,g24_power_ctrl_incrs_level2 
+2e90 1fe0fe01 increase 1 ,pdata 
+2e91 20403272 call g24_store_mem_power_ctrl_level 
+2e92 c000ae9f beq 1 ,g24_power_ctrl_incrs_level1 
+
+g24_power_ctrl_incrs_level2:
+2e93 5800000a setarg power_ctrl_losspac_thresh_up2 
+2e94 204032b0 call g24_store_mem_power_ctrl_threshold_up 
+2e95 58000000 setarg power_ctrl_losspac_thresh_down2 
+2e96 204032b2 call g24_store_mem_power_ctrl_threshold_down 
+2e97 1a60a2ff add regc ,offset_power_ctrl_txpwr_level2 ,rega 
+2e98 20202ea5 branch g24_ifetch_rega_store_mem_txpower 
+
+g24_power_ctrl_decrs:
+2e99 1a60a2fe add regc ,offset_power_ctrl_level ,rega 
+2e9a ea208000 ifetch 1 ,rega 
+2e9b c0002ea7 beq 0 ,g24_power_ctrl_decrs_level0 
+2e9c 1fe0ffff increase -1 ,pdata 
+2e9d 20403272 call g24_store_mem_power_ctrl_level 
+2e9e c0002ea7 beq 0 ,g24_power_ctrl_decrs_level0 
+
+g24_power_ctrl_decrs_level1:
+
+g24_power_ctrl_incrs_level1:
+2e9f 58000005 setarg power_ctrl_losspac_thresh_up1 
+2ea0 204032b0 call g24_store_mem_power_ctrl_threshold_up 
+2ea1 58000000 setarg power_ctrl_losspac_thresh_down1 
+2ea2 204032b2 call g24_store_mem_power_ctrl_threshold_down 
+2ea3 58000100 setarg offset_power_ctrl_txpwr_level1 
+
+g24_iadd_offset_mem_txpower:
+2ea4 9a60a200 iadd regc ,rega 
+
+g24_ifetch_rega_store_mem_txpower:
+2ea5 ea208000 ifetch 1 ,rega 
+2ea6 2020326a branch g24_store_mem_txpower 
+
+g24_power_ctrl_decrs_level0:
+2ea7 58000002 setarg power_ctrl_losspac_thresh_up0 
+2ea8 204032b0 call g24_store_mem_power_ctrl_threshold_up 
+2ea9 58000000 setarg power_ctrl_losspac_thresh_down0 
+2eaa 204032b2 call g24_store_mem_power_ctrl_threshold_down 
+2eab 58000101 setarg offset_power_ctrl_txpwr_level0 
+2eac 20202ea4 branch g24_iadd_offset_mem_txpower 
+
+g24_start_pairing_sm1:
+2ead 79200026 set1 mark_24g ,mark 
+2eae 20402c83 call g24_pair_init 
+
+g24_set_pairing_sm_1:
+2eaf 58000001 setarg state_24g_pairing_1 
+2eb0 20203256 branch g24_store_mem_pairing_sm 
+
+g24_pairing_sm:
+2eb1 1a60a28b add regc ,offset_24g_ensure ,rega 
+2eb2 ea208000 ifetch 1 ,rega 
+2eb3 c000ffe7 beq ensure_on_24g ,enable_user 
+2eb4 20403253 call g24_fetch_mem_pairing_sm 
+2eb5 c000aeb9 beq state_24g_pairing_1 ,g24_pairing_sm_1 
+2eb6 c0012ebd beq state_24g_pairing_2 ,g24_pairing_sm_2 
+2eb7 c001aec1 beq state_24g_pairing_3 ,g24_pairing_sm_3 
+2eb8 20202a8c branch assert 
+
+g24_pairing_sm_1:
+2eb9 58000011 setarg state_24g_pairing_1_waiting_ack 
+2eba 20403256 call g24_store_mem_pairing_sm 
+2ebb 70119eaa jam 0xaa ,mem_24g_common_temp 
+2ebc 20202ec4 branch g24_pairing_sm_common 
+
+g24_pairing_sm_2:
+2ebd 58000012 setarg state_24g_pairing_2_waiting_ack 
+2ebe 20403256 call g24_store_mem_pairing_sm 
+2ebf 70119e55 jam 0x55 ,mem_24g_common_temp 
+2ec0 20202ec4 branch g24_pairing_sm_common 
+
+g24_pairing_sm_3:
+2ec1 58000013 setarg state_24g_pairing_3_waiting_ack 
+2ec2 20403256 call g24_store_mem_pairing_sm 
+2ec3 70119e22 jam 0x22 ,mem_24g_common_temp 
+
+g24_pairing_sm_common:
+2ec4 2040323a call g24_fetch_mem_data_type 
+2ec5 1fe17e07 and_into bits_data ,pdata 
+2ec6 6000919f store 1 ,mem_24g_common_temp + 1 
+2ec7 20403224 call g24_fetch_mem_device_addr 
+2ec8 600211a0 store 4 ,mem_24g_common_temp + 2 
+
+g24_put_pairing_data_in_buff:
+2ec9 7011a400 jam 0 ,mem_24g_common_temp + 6 
+2eca da20119e arg mem_24g_common_temp ,rega 
+2ecb d8400007 arg 7 ,temp 
+2ecc 20402d4c call g24_put_data_in_buff 
+2ecd 20402d53 call g24_transmit_prep 
+2ece 20402d33 call g24_txdata_enable_tx 
+2ecf 20207fe7 branch enable_user 
+
+g24_paring_mode:
+2ed0 20403253 call g24_fetch_mem_pairing_sm 
+2ed1 c17f8000 rtneq state_24g_pairing_success 
+2ed2 c008aed6 beq state_24g_pairing_1_waiting_ack ,g24_pairing_sm_1_waiting_ack 
+2ed3 c0092ed9 beq state_24g_pairing_2_waiting_ack ,g24_pairing_sm_2_waiting_ack 
+2ed4 c009aedc beq state_24g_pairing_3_waiting_ack ,g24_pairing_sm_3_waiting_ack 
+2ed5 20600000 rtn 
+
+g24_pairing_sm_1_waiting_ack:
+2ed6 58000002 setarg state_24g_pairing_2 
+2ed7 20403256 call g24_store_mem_pairing_sm 
+2ed8 20202d9f branch g24_transmit_abandon 
+
+g24_pairing_sm_2_waiting_ack:
+2ed9 58000003 setarg state_24g_pairing_3 
+2eda 20403256 call g24_store_mem_pairing_sm 
+2edb 20202d9f branch g24_transmit_abandon 
+
+g24_pairing_sm_3_waiting_ack:
+2edc 580000ff setarg state_24g_pairing_success 
+2edd 20403256 call g24_store_mem_pairing_sm 
+2ede 700a9939 jam bt_evt_24g_pairing_complete ,mem_fifo_temp 
+2edf 20407d86 call ui_ipc_send_event 
+2ee0 1a60a266 add regc ,offset_24g_rxpayload_add2 ,rega 
+2ee1 ea220000 ifetch 4 ,rega 
+2ee2 2040322c call g24_store_mem_addr 
+2ee3 20202d9f branch g24_transmit_abandon 
+
+g24_auto_pair_start:
+2ee4 793f8026 set0 mark_24g ,mark 
+2ee5 20402f08 call g24_auto_pair_set_device_info 
+2ee6 20402f22 call g24_tx_attemp_data_prep 
+
+g24_auto_pair_restart:
+2ee7 20403263 call g24_set0_mem_check_dongle_times 
+
+g24_auto_pair_start_loop:
+2ee8 200007d0 nop 2000 
+2ee9 20403261 call g24_fetch_mem_check_dongle_times 
+2eea c07fadd4 beq 0xff ,g24_stop_24g_mode 
+2eeb 20402da4 call g24_transmit_receive_ack 
+2eec 242c2efa nbranch g24_auto_pair_retry ,sync 
+2eed 2437aefa nbranch g24_auto_pair_retry ,user3 
+2eee 20402dd6 call g24_ackpayload_parse 
+2eef 20402c7a call g24_head_ptr2regc 
+2ef0 1a60a292 add regc ,offset_24g_paring_addr ,rega 
+2ef1 ea2a0000 ifetcht 4 ,rega 
+2ef2 204030be call g24_fetch_mem_addr_isub_temp 
+2ef3 2022aead branch g24_start_pairing_sm1 ,zero 
+2ef4 20402c7a call g24_head_ptr2regc 
+2ef5 1a60a266 add regc ,offset_24g_rxpayload_add2 ,rega 
+2ef6 ea220000 ifetch 4 ,rega 
+2ef7 c0002ee7 beq 0 ,g24_auto_pair_restart 
+2ef8 2040322c call g24_store_mem_addr 
+2ef9 20202f1c branch g24_tx_attemp_dongle_succ 
+
+g24_auto_pair_retry:
+2efa 20403261 call g24_fetch_mem_check_dongle_times 
+2efb 1fe0fe01 increase 1 ,pdata 
+2efc 20403264 call g24_store_mem_check_dongle_times 
+2efd 20402f04 call g24_fetch_mem_auto_paring_switch 
+2efe 1fe0fe01 increase 1 ,pdata 
+2eff 1fe17e01 and_into 1 ,pdata 
+2f00 20402f06 call g24_store_mem_auto_paring_switch 
+2f01 c0002f0c beq 0 ,g24_auto_pair_device_attemp 
+2f02 c000af0e beq 1 ,g24_auto_pair_pair_attemp 
+2f03 20600000 rtn 
+
+g24_fetch_mem_auto_paring_switch:
+2f04 5800018b setarg offset_24g_auto_pair_switch 
+2f05 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_store_mem_auto_paring_switch:
+2f06 da20018b arg offset_24g_auto_pair_switch ,rega 
+2f07 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_auto_pair_set_device_info:
+2f08 20403267 call g24_store_mem_tx_power 
+2f09 20403224 call g24_fetch_mem_device_addr 
+2f0a 2040322c call g24_store_mem_addr 
+2f0b 20202c8a branch g24_ch 
+
+g24_auto_pair_device_attemp:
+2f0c 20402f08 call g24_auto_pair_set_device_info 
+2f0d 20202ee8 branch g24_auto_pair_start_loop 
+
+g24_auto_pair_pair_attemp:
+2f0e 20402c83 call g24_pair_init 
+2f0f 20202ee8 branch g24_auto_pair_start_loop 
+
+g24_start_24g_mode:
+2f10 793f8026 set0 mark_24g ,mark 
+2f11 20402c8a call g24_ch 
+2f12 20403253 call g24_fetch_mem_pairing_sm 
+2f13 c1ff8000 rtnne state_24g_pairing_success 
+2f14 20402f22 call g24_tx_attemp_data_prep 
+2f15 20403263 call g24_set0_mem_check_dongle_times 
+
+g24_tx_attemp_dongle_loop:
+2f16 200007d0 nop 2000 
+2f17 20403261 call g24_fetch_mem_check_dongle_times 
+2f18 c07fadd4 beq 0xff ,g24_stop_24g_mode 
+2f19 20402da4 call g24_transmit_receive_ack 
+2f1a 242c2f27 nbranch g24_attemp_txdata_retry ,sync 
+2f1b 2437af27 nbranch g24_attemp_txdata_retry ,user3 
+
+g24_tx_attemp_dongle_succ:
+2f1c 79200026 set1 mark_24g ,mark 
+2f1d 20403263 call g24_set0_mem_check_dongle_times 
+2f1e 580000ff setarg state_24g_pairing_success 
+2f1f 20403256 call g24_store_mem_pairing_sm 
+2f20 700a993c jam bt_evt_24g_attempt_success ,mem_fifo_temp 
+2f21 20207d86 branch ui_ipc_send_event 
+
+g24_tx_attemp_data_prep:
+2f22 79200027 set1 mark_24g_conext ,mark 
+2f23 70119eff jam 0xff ,mem_24g_common_temp 
+2f24 2040323a call g24_fetch_mem_data_type 
+2f25 20402d77 call g24_put_data_in_buff_pre 
+2f26 20202d53 branch g24_transmit_prep 
+
+g24_attemp_txdata_retry:
+2f27 20403261 call g24_fetch_mem_check_dongle_times 
+2f28 1fe0fe01 increase 1 ,pdata 
+2f29 20403264 call g24_store_mem_check_dongle_times 
+2f2a 20402c8a call g24_ch 
+2f2b 20202f16 branch g24_tx_attemp_dongle_loop 
+
+g24_check_51cmd_start_24g:
+2f2c 20403267 call g24_store_mem_tx_power 
+2f2d 580000ff setarg state_24g_pairing_success 
+2f2e 20403256 call g24_store_mem_pairing_sm 
+2f2f 20202f10 branch g24_start_24g_mode 
+
+dongle_init:
+2f30 44dd4017 bpatch patch17_2 ,mem_patch17 
+2f31 20402c7a call g24_head_ptr2regc 
+2f32 580031b0 setarg dongle_rxdata_type1 
+2f33 1a608ade add regc ,offset_24g_cb_rxdata_type1 ,contw 
+2f34 e0a10000 istore 2 ,contw 
+2f35 20402f3d call g24_receive_init 
+2f36 204048ea call usb_init 
+2f37 204032b6 call g24_fetch_mem_pair_mode 
+2f38 44ddc017 bpatch patch17_3 ,mem_patch17 
+2f39 c0003055 beq 0x00 ,dongle_auto_bind 
+2f3a c000af45 beq 0x01 ,dongle_pc_bind 
+2f3b c007af41 beq 0x0f ,dongle_all_powerful 
+2f3c 20202a8c branch assert 
+
+g24_receive_init:
+2f3d 2040326c call g24_store_mem_tx_power_temp 
+2f3e df200080 arg 0x80 ,loopcnt 
+2f3f d8a00d9e arg mem_rssi_noise_buffer ,contw 
+2f40 20207ec6 branch memset0 
+
+dongle_all_powerful:
+2f41 20402f4c call dongle_check_mode 
+
+dongle_all_powerful_loop:
+2f42 20402f4f call g24_dongle_work_mode 
+2f43 204048d3 call usb_isr 
+2f44 20202f42 branch dongle_all_powerful_loop 
+
+dongle_pc_bind:
+2f45 44de4017 bpatch patch17_4 ,mem_patch17 
+2f46 20402f4c call dongle_check_mode 
+
+dongle_pc_bind_loop:
+2f47 20402f4f call g24_dongle_work_mode 
+2f48 20402fbd call g24_dongle_bind_mode 
+2f49 204048d3 call usb_isr 
+2f4a 20403019 call dongle_usb_dispatch 
+2f4b 20202f47 branch dongle_pc_bind_loop 
+
+dongle_check_mode:
+2f4c 20403291 call g24_set_work_mem_dongle_work_mode 
+2f4d 20403296 call g24_set0_mem_dongle_mode_init 
+2f4e 20203299 branch g24_set0_mem_ackpayload_enable 
+
+g24_dongle_work_mode:
+2f4f 2040328f call g24_fetch_mem_dongle_work_mode 
+2f50 c1800000 rtnne dongle_work 
+
+g24_dongle_work_mode_start:
+2f51 20402f55 call g24_dongle_work_init 
+2f52 20402f65 call g24_ch_process 
+2f53 2040316b call g24_receive_packet_start 
+2f54 20202f96 branch g24_blank_data_process 
+
+g24_dongle_work_init:
+2f55 20403294 call g24_fetch_mem_dongle_mode_init 
+2f56 c3800000 rtnbit1 dongle_work 
+2f57 79207e00 set1 dongle_work ,pdata 
+2f58 20403297 call g24_store_mem_dongle_mode_init 
+2f59 20403267 call g24_store_mem_tx_power 
+2f5a 20403299 call g24_set0_mem_ackpayload_enable 
+2f5b 700d3800 jam 0 ,mem_usb_tx_enable 
+2f5c 2040324f call g24_set1_mem_abort_pac 
+2f5d 20402f61 call g24_dongle_init 
+
+g24_rx_interrupt_clear:
+2f5e 1a608a00 add regc ,offset_24g_rxbuf ,contw 
+2f5f df200042 arg 66 ,loopcnt 
+2f60 20207ed4 branch clear_mem 
+
+g24_dongle_init:
+2f61 20403231 call g24_set0_mem_pid 
+2f62 2040327d call g24_fetch_mem_rx_addr 
+2f63 2040322c call g24_store_mem_addr 
+2f64 20202c8a branch g24_ch 
+
+g24_ch_process:
+2f65 44dec017 bpatch patch17_5 ,mem_patch17 
+2f66 2040324c call g24_fetch_mem_abort_pac 
+2f67 c000af8d beq 1 ,g24_noise_rssi 
+2f68 20403245 call g24_fetch_mem_hop_pac 
+2f69 c000ac8a beq 1 ,g24_ch 
+2f6a 58000136 setarg offset_24g_hop_btclk 
+2f6b 9a60a200 iadd regc ,rega 
+2f6c ea2a0000 ifetcht 4 ,rega 
+2f6d 1c427e00 copy clkn_bt ,pdata 
+2f6e 98467c00 isub temp ,null 
+2f6f 24412d18 ncall g24_timer_timeout ,positive 
+2f70 1fe22400 copy pdata ,regb 
+2f71 58000136 setarg offset_24g_hop_btclk 
+2f72 9a60a200 iadd regc ,rega 
+2f73 ea220000 ifetch 4 ,rega 
+2f74 1fe20400 copy pdata ,temp 
+2f75 5800013a setarg offset_24g_hop_interval 
+2f76 9a60a200 iadd regc ,rega 
+2f77 18427e00 copy temp ,pdata 
+2f78 ea288000 ifetcht 1 ,rega 
+2f79 98408400 iadd temp ,temp 
+2f7a 1a427e00 copy regb ,pdata 
+2f7b 98467c00 isub temp ,null 
+2f7c 24610000 nrtn positive 
+2f7d 793ffe1c set0 28 ,pdata 
+2f7e 58000136 setarg offset_24g_hop_btclk 
+2f7f 9a608a00 iadd regc ,contw 
+2f80 e0a20000 istore 4 ,contw 
+
+g24_ch_update:
+2f81 20402c8a call g24_ch 
+2f82 20403278 call g24_fetch_mem_rf_laststa 
+2f83 1fe0fe01 increase 1 ,pdata 
+2f84 2040327b call g24_store_mem_rf_laststa 
+2f85 c1810000 rtnne 2 
+2f86 2040327a call g24_set0_mem_rf_laststa 
+2f87 2020324f branch g24_set1_mem_abort_pac 
+
+g24_ch_timer_reinit:
+2f88 1c427e00 copy clkn_bt ,pdata 
+2f89 da200136 arg offset_24g_hop_btclk ,rega 
+2f8a 204032bf call g24_set_contw_with_temp 
+2f8b e0a20000 istore 4 ,contw 
+2f8c 2020327a branch g24_set0_mem_rf_laststa 
+
+g24_noise_rssi:
+2f8d da200d9e arg mem_rssi_noise_buffer ,rega 
+2f8e 20402f94 call g24_noise_rssi_average 
+2f8f 1a608aeb add regc ,offset_rssi_noise_avg ,contw 
+2f90 e0a88000 istoret 1 ,contw 
+2f91 18467c50 sub temp ,rssi_thresh_noise ,null 
+2f92 24610000 nrtn positive 
+2f93 20202c8a branch g24_ch 
+
+g24_noise_rssi_average:
+2f94 df200100 arg rssi_buf_len_noise + 1 ,loopcnt 
+2f95 20202e62 branch rssi_average 
+
+g24_blank_data_process:
+2f96 20402f99 call g24_ms_blank_data 
+2f97 20402fa5 call g24_kb_blank_data 
+2f98 20202fb1 branch g24_kb_mul_blank_data 
+
+g24_ms_blank_data:
+2f99 58000180 setarg offset_24g_ms_blank_data_enable 
+2f9a 204032d0 call g24_set_rega_ifetch_1byte 
+2f9b 207a0000 rtn blank 
+2f9c d8e0000b arg timer_ms_blank ,queue 
+2f9d 20407f16 call timer_check 
+2f9e 247a0000 nrtn blank 
+2f9f 204032a7 call g24_set0_mem_ms_blank_data_enable 
+
+g24_ms_blank_data_2usb:
+2fa0 58000001 setarg ms_report_id 
+2fa1 60008d54 store 1 ,mem_usb_mouse_data 
+2fa2 58000000 setarg 0 
+2fa3 e0a38000 istore 7 ,contw 
+2fa4 202031b8 branch g24_data_type1_usbtx_enable 
+
+g24_kb_blank_data:
+2fa5 5800017e setarg offset_24g_kb_blank_data_enable 
+2fa6 204032d0 call g24_set_rega_ifetch_1byte 
+2fa7 207a0000 rtn blank 
+2fa8 d8e0000e arg timer_kb_blank ,queue 
+2fa9 20407f16 call timer_check 
+2faa 247a0000 nrtn blank 
+2fab 204032aa call g24_set0_mem_kb_blank_data_enable 
+
+g24_kb_blank_data_2usb:
+2fac d8a00d64 arg mem_usb_kb_data ,contw 
+2fad df200002 arg 2 ,loopcnt 
+2fae 20407ec6 call memset0 
+2faf 700d6400 jam kb_normal_report_id ,mem_usb_kb_data 
+2fb0 202031ed branch g24_kb_data_into_ep1_fifo 
+
+g24_kb_mul_blank_data:
+2fb1 5800017f setarg offset_24g_kb_mul_blank_data_enable 
+2fb2 204032d0 call g24_set_rega_ifetch_1byte 
+2fb3 207a0000 rtn blank 
+2fb4 d8e0000c arg timer_kb_mul_blank ,queue 
+2fb5 20407f16 call timer_check 
+2fb6 247a0000 nrtn blank 
+2fb7 204032ad call g24_set0_mem_kb_mul_blank_data_enable 
+
+g24_kb_mul_blank_data_2usb:
+2fb8 d8a00d74 arg mem_usb_kb_multikey ,contw 
+2fb9 df200002 arg 2 ,loopcnt 
+2fba 20407ec6 call memset0 
+2fbb 700d7403 jam kb_multikey_report_id ,mem_usb_kb_multikey 
+2fbc 20203207 branch g24_kb_mul_data_into_ep2_fifo 
+
+g24_dongle_bind_mode:
+2fbd 2040328f call g24_fetch_mem_dongle_work_mode 
+2fbe c1808000 rtnne dongle_bind 
+2fbf 20402fc1 call g24_dongle_bind_init 
+2fc0 20202fcb branch g24_dongle_bind_data_process 
+
+g24_dongle_bind_init:
+2fc1 20403294 call g24_fetch_mem_dongle_mode_init 
+2fc2 c3808000 rtnbit1 dongle_bind 
+2fc3 79207e01 set1 dongle_bind ,pdata 
+2fc4 20403297 call g24_store_mem_dongle_mode_init 
+2fc5 2040329c call g24_set1_mem_ackpayload_enable 
+2fc6 20402c83 call g24_pair_init 
+2fc7 58000000 setarg 0 
+2fc8 da200106 arg offset_dongle_ms_bind_step ,rega 
+2fc9 204032bf call g24_set_contw_with_temp 
+2fca 202032c5 branch g24_contw_istore_3byte 
+
+g24_dongle_bind_data_process:
+2fcb 2040316e call g24_receive_transmit_ack 
+2fcc 2437af5e nbranch g24_rx_interrupt_clear ,user3 
+2fcd 1a608c00 add regc ,offset_24g_rxbuf ,contr 
+2fce 58000109 setarg offset_24g_rxdata_temp 
+2fcf 9a608a00 iadd regc ,contw 
+2fd0 df200008 arg 8 ,loopcnt 
+2fd1 20407f01 call memcpy 
+2fd2 5800010b setarg offset_24g_rxdata_temp_add2 
+2fd3 204032d0 call g24_set_rega_ifetch_1byte 
+2fd4 c0552fd9 beq datatype_bind ,g24_dongle_bind_first_step 
+2fd5 c02aafed beq datatype_config ,g24_dongle_bind_second_step 
+2fd6 c0113001 beq datatype_ok ,g24_dongle_bind_third_step 
+2fd7 c07fb212 beq 0xff ,g24_data_attemp 
+2fd8 20202f5e branch g24_rx_interrupt_clear 
+
+g24_dongle_bind_first_step:
+2fd9 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte 
+2fda c000afdd beq bind_mouse ,g24_dongle_bind_first_step_mouse 
+2fdb c0012fe8 beq bind_keyboard ,g24_dongle_bind_first_step_keyboard 
+2fdc 20600000 rtn 
+
+g24_dongle_bind_first_step_mouse:
+2fdd 58000001 setarg 1 
+2fde 20402ff7 call g24_store_mem_ms_bind_step 
+
+g24_dongle_bind_ms_payload_cfg:
+2fdf 58000001 setarg datatype_mouse 
+2fe0 20403289 call g24_store_mem_bind_payload 
+
+g24_dongle_bind_payload_cfg:
+2fe1 58000080 setarg 0x80 
+2fe2 da200130 arg offset_24g_bind_payload_add1 ,rega 
+2fe3 204032b3 call g24_set_contw_with_regb_store_1byte 
+2fe4 2040327d call g24_fetch_mem_rx_addr 
+2fe5 da200131 arg offset_24g_bind_payload_add2 ,rega 
+2fe6 204032bf call g24_set_contw_with_temp 
+2fe7 2020322d branch g24_contw_istore_4byte 
+
+g24_dongle_bind_first_step_keyboard:
+2fe8 58000001 setarg 1 
+2fe9 20402fff call g24_store_mem_kb_bind_step 
+
+g24_dongle_bind_kb_payload_cfg:
+2fea 58000002 setarg datatype_keyboard 
+2feb 20403289 call g24_store_mem_bind_payload 
+2fec 20202fe1 branch g24_dongle_bind_payload_cfg 
+
+g24_dongle_bind_second_step:
+2fed 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte 
+2fee c000aff1 beq bind_mouse ,g24_dongle_bind_second_step_mouse 
+2fef c0012ff9 beq bind_keyboard ,g24_dongle_bind_second_step_keyboard 
+2ff0 20600000 rtn 
+
+g24_dongle_bind_second_step_mouse:
+2ff1 20402fdf call g24_dongle_bind_ms_payload_cfg 
+2ff2 58000106 setarg offset_dongle_ms_bind_step 
+2ff3 204032d0 call g24_set_rega_ifetch_1byte 
+2ff4 c000aff6 beq 1 ,g24_dongle_ms_bind_step_set2 
+2ff5 20600000 rtn 
+
+g24_dongle_ms_bind_step_set2:
+2ff6 58000002 setarg 2 
+
+g24_store_mem_ms_bind_step:
+2ff7 da200106 arg offset_dongle_ms_bind_step ,rega 
+2ff8 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_dongle_bind_second_step_keyboard:
+2ff9 20402fea call g24_dongle_bind_kb_payload_cfg 
+2ffa 58000107 setarg offset_dongle_kb_bind_step 
+2ffb 204032d0 call g24_set_rega_ifetch_1byte 
+2ffc c000affe beq 1 ,g24_dongle_kb_bind_step_set2 
+2ffd 20600000 rtn 
+
+g24_dongle_kb_bind_step_set2:
+2ffe 58000002 setarg 2 
+
+g24_store_mem_kb_bind_step:
+2fff da200107 arg offset_dongle_kb_bind_step ,rega 
+3000 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_dongle_bind_third_step:
+3001 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte 
+3002 c000b005 beq bind_mouse ,g24_dongle_bind_third_step_mouse 
+3003 c0013011 beq bind_keyboard ,g24_dongle_bind_third_step_keyboard 
+3004 20600000 rtn 
+
+g24_dongle_bind_third_step_mouse:
+3005 58000106 setarg offset_dongle_ms_bind_step 
+3006 204032d0 call g24_set_rega_ifetch_1byte 
+3007 c0013009 beq 2 ,g24_dongle_ms_bind_step_success 
+3008 20600000 rtn 
+
+g24_dongle_ms_bind_step_success:
+3009 2040328b call g24_fetch_mem_bind_device_status 
+300a 1fe1fe01 or_into 0x01 ,pdata 
+300b 2040328d call g24_store_mem_bind_device_status 
+
+g24_dongle_bind_exit:
+300c 58000000 setarg 0 
+300d 58000106 setarg offset_dongle_ms_bind_step 
+300e 9a608a00 iadd regc ,contw 
+300f e0a10000 istore 2 ,contw 
+3010 20202f5e branch g24_rx_interrupt_clear 
+
+g24_dongle_bind_third_step_keyboard:
+3011 58000107 setarg offset_dongle_kb_bind_step 
+3012 204032d0 call g24_set_rega_ifetch_1byte 
+3013 c0803015 bne 0 ,g24_dongle_kb_bind_step_success 
+3014 20600000 rtn 
+
+g24_dongle_kb_bind_step_success:
+3015 2040328b call g24_fetch_mem_bind_device_status 
+3016 1fe1fe02 or_into 0x02 ,pdata 
+3017 2040328d call g24_store_mem_bind_device_status 
+3018 2020300c branch g24_dongle_bind_exit 
+
+dongle_usb_dispatch:
+3019 68008d50 fetch 1 ,mem_usb0_get_set_report 
+301a 207a0000 rtn blank 
+301b 700d5000 jam 0 ,mem_usb0_get_set_report 
+301c 68010d4e fetch 2 ,mem_usb_setup_bvalue_temp 
+301d d84002ba arg pc_set_report ,temp 
+301e 98467c00 isub temp ,null 
+301f 24628000 nrtn zero 
+3020 68008cb6 fetch 1 ,mem_usb0_set_report_data 
+3021 c1dd0000 rtnne pc_report_id 
+3022 68008cb7 fetch 1 ,mem_usb0_set_report_data + 1 
+3023 44df4017 bpatch patch17_6 ,mem_patch17 
+3024 c050303b beq command_mode ,dongle_dispose_cmd_mode 
+3025 c050b02c beq command_bind ,dongle_dispose_cmd_bind 
+3026 c0533041 beq command_current_project ,dongle_dispose_cmd_current_project 
+3027 c053b043 beq command_current_mode ,dongle_dispose_cmd_current_mode 
+3028 c054b049 beq command_current_fw_version ,dongle_dispose_cmd_current_fw_version 
+3029 c058304d beq command_user_defined ,dongle_dispose_cmd_user_defined 
+
+usb0_data_ready_report_set0:
+302a 700d4200 jam 0 ,mem_usb0_data_ready_report 
+302b 20600000 rtn 
+
+dongle_dispose_cmd_bind:
+302c 68008cb8 fetch 1 ,mem_usb0_set_report_data + 2 
+302d c000b031 beq com_bind_get ,dongle_dispose_cmd_get_bind 
+302e c0423034 beq com_bind_exit ,dongle_dispose_cmd_exit_bind 
+302f c053b039 beq com_read_mode ,dongle_dispose_cmd_read_mode 
+3030 2020302a branch usb0_data_ready_report_set0 
+
+dongle_dispose_cmd_get_bind:
+3031 2040328b call g24_fetch_mem_bind_device_status 
+3032 60008cf7 store 1 ,mem_usb0_get_report_data + 1 
+3033 2020303f branch usb0_data_ready_report_set1 
+
+dongle_dispose_cmd_exit_bind:
+3034 20403291 call g24_set_work_mem_dongle_work_mode 
+3035 20403296 call g24_set0_mem_dongle_mode_init 
+3036 2040328b call g24_fetch_mem_bind_device_status 
+3037 60008cf7 store 1 ,mem_usb0_get_report_data + 1 
+3038 2020303f branch usb0_data_ready_report_set1 
+
+dongle_dispose_cmd_read_mode:
+
+dongle_dispose_in_bind_mode:
+3039 700cf7a1 jam command_bind ,mem_usb0_get_report_data + 1 
+303a 2020303f branch usb0_data_ready_report_set1 
+
+dongle_dispose_cmd_mode:
+303b 68008cb8 fetch 1 ,mem_usb0_set_report_data + 2 
+303c c040b03e beq com_mode_bind ,dongle_enter_bind_mode 
+303d 2020302a branch usb0_data_ready_report_set0 
+
+dongle_enter_bind_mode:
+303e 20403090 call g24_bind_mode_enable 
+
+usb0_data_ready_report_set1:
+303f 700d4201 jam 1 ,mem_usb0_data_ready_report 
+3040 20600000 rtn 
+
+dongle_dispose_cmd_current_project:
+3041 700cf715 jam product_id ,mem_usb0_get_report_data + 1 
+3042 2020303f branch usb0_data_ready_report_set1 
+
+dongle_dispose_cmd_current_mode:
+3043 2040328f call g24_fetch_mem_dongle_work_mode 
+3044 c0003047 beq dongle_work ,dongle_dispose_in_work_mode 
+3045 c000b039 beq dongle_bind ,dongle_dispose_in_bind_mode 
+3046 20600000 rtn 
+
+dongle_dispose_in_work_mode:
+3047 700cf7a0 jam command_mode ,mem_usb0_get_report_data + 1 
+3048 2020303f branch usb0_data_ready_report_set1 
+
+dongle_dispose_cmd_current_fw_version:
+3049 700cf700 jam fw_version0 ,mem_usb0_get_report_data + 1 
+304a 700cf800 jam fw_version1 ,mem_usb0_get_report_data + 2 
+304b 700cf901 jam fw_version2 ,mem_usb0_get_report_data + 3 
+304c 2020303f branch usb0_data_ready_report_set1 
+
+dongle_dispose_cmd_user_defined:
+304d 2040329c call g24_set1_mem_ackpayload_enable 
+304e 68008cb8 fetch 1 ,mem_usb0_set_report_data + 2 
+304f 1fe0fe02 increase 2 ,pdata 
+3050 1fe27200 copy pdata ,loopcnt 
+3051 d8c00cb6 arg mem_usb0_set_report_data ,contr 
+3052 5800013c setarg offset_24g_ackpayload 
+3053 9a608a00 iadd regc ,contw 
+3054 20207f01 branch memcpy 
+
+dongle_auto_bind:
+3055 44dfc017 bpatch patch17_7 ,mem_patch17 
+3056 2040307d call g24_mode_switch_init 
+
+dongle_auto_bind_loop:
+3057 20402c7f call g24_receive_process 
+3058 204048d3 call usb_isr 
+3059 20203057 branch dongle_auto_bind_loop 
+
+g24_dongle_work_mode_auto:
+305a 2040328f call g24_fetch_mem_dongle_work_mode 
+305b c1800000 rtnne dongle_work 
+305c 20402f51 call g24_dongle_work_mode_start 
+305d 20203098 branch g24_rx_nodata_process 
+
+g24_dongle_bind_mode_auto:
+305e 2040328f call g24_fetch_mem_dongle_work_mode 
+305f c1808000 rtnne dongle_bind 
+3060 20402fc1 call g24_dongle_bind_init 
+3061 20402fcb call g24_dongle_bind_data_process 
+3062 2040328b call g24_fetch_mem_bind_device_status 
+3063 207a0000 rtn blank 
+3064 20403286 call g24_set0_mem_mode_switch 
+3065 20402f4c call dongle_check_mode 
+3066 20403093 call g24_enable_nodata_timer 
+
+g24_timer_init:
+3067 58000000 setarg 0 
+3068 1a608aa7 add regc ,offset_24g_tx_btclk ,contw 
+3069 2020322d branch g24_contw_istore_4byte 
+
+g24_timer_check:
+306a 20407fe9 call disable_user 
+306b 1a60a2a7 add regc ,offset_24g_tx_btclk ,rega 
+306c ea2a0000 ifetcht 4 ,rega 
+306d 1c427e00 copy clkn_bt ,pdata 
+306e 98467c00 isub temp ,null 
+306f 24412d18 ncall g24_timer_timeout ,positive 
+3070 1fe22400 copy pdata ,regb 
+3071 1a60a2a7 add regc ,offset_24g_tx_btclk ,rega 
+3072 ea220000 ifetch 4 ,rega 
+3073 1a60a2ab add regc ,offset_24g_interval ,rega 
+3074 ea288000 ifetcht 1 ,rega 
+3075 98408400 iadd temp ,temp 
+3076 1a427e00 copy regb ,pdata 
+3077 98467c00 isub temp ,null 
+3078 24610000 nrtn positive 
+3079 793ffe1c set0 28 ,pdata 
+307a 1a608aa7 add regc ,offset_24g_tx_btclk ,contw 
+307b e0a20000 istore 4 ,contw 
+307c 20207fe7 branch enable_user 
+
+g24_mode_switch_init:
+307d 58000001 setarg 1 
+307e 20403287 call g24_store_mem_mode_switch 
+307f 20403283 call g24_set0_mem_time_slice 
+3080 580000ff setarg 0xff 
+3081 1a608aab add regc ,offset_24g_interval ,contw 
+3082 e0a08000 istore 1 ,contw 
+3083 20203067 branch g24_timer_init 
+
+g24_mode_switch:
+3084 5800015c setarg offset_24g_mode_switch 
+3085 204032d0 call g24_set_rega_ifetch_1byte 
+3086 207a0000 rtn blank 
+3087 2040306a call g24_timer_check 
+3088 24740000 nrtn user 
+3089 20403281 call g24_fetch_mem_time_slice 
+308a 1fe0fe01 increase 1 ,pdata 
+308b 1fe17e01 and_into 1 ,pdata 
+308c 20403284 call g24_store_mem_time_slice 
+308d c0002f4c beq 0 ,dongle_check_mode 
+308e c000b090 beq 1 ,g24_bind_mode_enable 
+308f 20600000 rtn 
+
+g24_bind_mode_enable:
+3090 58000001 setarg dongle_bind 
+3091 20403292 call g24_store_mem_dongle_work_mode 
+3092 20203296 branch g24_set0_mem_dongle_mode_init 
+
+g24_enable_nodata_timer:
+3093 58000001 setarg 1 
+3094 204032a5 call g24_store_mem_nodata_timer_enable 
+
+g24_enable_nodata_timer_init:
+3095 58000280 setarg timer_nodata_delay 
+3096 d8e00008 arg timer_nodata ,queue 
+3097 20207f08 branch timer_init 
+
+g24_rx_nodata_process:
+3098 204032a2 call g24_fetch_mem_nodata_timer_enable 
+3099 207a0000 rtn blank 
+309a d8e00008 arg timer_nodata ,queue 
+309b 20407f16 call timer_check 
+309c 247a0000 nrtn blank 
+309d 204032a4 call g24_set0_mem_nodata_timer_enable 
+309e 58000007 setarg dongle_search 
+309f 20403292 call g24_store_mem_dongle_work_mode 
+30a0 20403296 call g24_set0_mem_dongle_mode_init 
+30a1 20202f5e branch g24_rx_interrupt_clear 
+
+g24_dongle_search_mode_auto:
+30a2 44e04018 bpatch patch18_0 ,mem_patch18 
+30a3 2040328f call g24_fetch_mem_dongle_work_mode 
+30a4 c1838000 rtnne dongle_search 
+30a5 204030cb call g24_dongle_search_mode_init 
+30a6 204030e0 call g24_rx_auto_addr_ch_search 
+30a7 2040316e call g24_receive_transmit_ack 
+30a8 2437af5e nbranch g24_rx_interrupt_clear ,user3 
+30a9 204030bc call g24_dongle_search_addr_check 
+30aa 2042b172 call g24_receive_packet_parse ,zero 
+30ab 20402f4c call dongle_check_mode 
+30ac 20403294 call g24_fetch_mem_dongle_mode_init 
+30ad 79207e00 set1 dongle_work ,pdata 
+30ae 20403297 call g24_store_mem_dongle_mode_init 
+30af 20402f5e call g24_rx_interrupt_clear 
+30b0 20403093 call g24_enable_nodata_timer 
+30b1 204030bc call g24_dongle_search_addr_check 
+30b2 2022b0c1 branch g24_dg_ch_num_reinit ,zero 
+30b3 58000164 setarg offset_24g_kb_addr 
+30b4 204032d3 call g24_set_rega_ifetcht_4byte 
+30b5 204030be call g24_fetch_mem_addr_isub_temp 
+30b6 2022b0c5 branch g24_kb_ch_num_reinit ,zero 
+30b7 58000160 setarg offset_24g_mouse_addr 
+30b8 204032d3 call g24_set_rega_ifetcht_4byte 
+30b9 204030be call g24_fetch_mem_addr_isub_temp 
+30ba 2022b0c8 branch g24_ms_ch_num_reinit ,zero 
+30bb 20600000 rtn 
+
+g24_dongle_search_addr_check:
+30bc 5800012b setarg offset_24g_rx_addr 
+30bd 204032d3 call g24_set_rega_ifetcht_4byte 
+
+g24_fetch_mem_addr_isub_temp:
+30be 2040322a call g24_fetch_mem_addr 
+30bf 98467c00 isub temp ,null 
+30c0 20600000 rtn 
+
+g24_dg_ch_num_reinit:
+30c1 58000182 setarg offset_24g_dg_ch_number 
+30c2 204032d0 call g24_set_rega_ifetch_1byte 
+
+g24_current_ch_num_reinit:
+30c3 1a608a91 add regc ,offset_24g_current_ch_number ,contw 
+30c4 202032b4 branch g24_contw_istore_1byte 
+
+g24_kb_ch_num_reinit:
+30c5 58000185 setarg offset_24g_kb_ch_number 
+30c6 204032d0 call g24_set_rega_ifetch_1byte 
+30c7 202030c3 branch g24_current_ch_num_reinit 
+
+g24_ms_ch_num_reinit:
+30c8 58000188 setarg offset_24g_ms_ch_number 
+30c9 204032d0 call g24_set_rega_ifetch_1byte 
+30ca 202030c3 branch g24_current_ch_num_reinit 
+
+g24_dongle_search_mode_init:
+30cb 20403294 call g24_fetch_mem_dongle_mode_init 
+30cc c3838000 rtnbit1 dongle_search 
+30cd 79207e07 set1 dongle_search ,pdata 
+30ce 20403297 call g24_store_mem_dongle_mode_init 
+30cf 20403283 call g24_set0_mem_time_slice 
+30d0 2040329c call g24_set1_mem_ackpayload_enable 
+30d1 58000000 setarg 0 
+30d2 1a608af5 add regc ,offset_rssi_noise_dg_index ,contw 
+30d3 e0a18000 istore 3 ,contw 
+30d4 da200183 arg offset_24g_dg_config_ch_once ,rega 
+30d5 204032bf call g24_set_contw_with_temp 
+30d6 e0a38000 istore 7 ,contw 
+30d7 204030bc call g24_dongle_search_addr_check 
+30d8 24628000 nrtn zero 
+30d9 1a60a291 add regc ,offset_24g_current_ch_number ,rega 
+30da ea208000 ifetch 1 ,rega 
+30db da200182 arg offset_24g_dg_ch_number ,rega 
+30dc 204032b3 call g24_set_contw_with_regb_store_1byte 
+30dd 1a60a290 add regc ,offset_24g_ch ,rega 
+30de ea208000 ifetch 1 ,rega 
+30df 2020314a branch g24_store_mem_dg_last_ch 
+
+g24_rx_auto_addr_ch_search:
+30e0 44e0c018 bpatch patch18_1 ,mem_patch18 
+30e1 20403281 call g24_fetch_mem_time_slice 
+30e2 1fe0fe01 increase 1 ,pdata 
+30e3 1fe17e03 and_into 3 ,pdata 
+30e4 20403284 call g24_store_mem_time_slice 
+30e5 c000310e beq 0 ,g24_rx_auto_bind_config_kb 
+30e6 c000b132 beq 1 ,g24_rx_auto_bind_config_dongle 
+30e7 c00130ea beq 2 ,g24_rx_auto_bind_config_mouse 
+30e8 c001b132 beq 3 ,g24_rx_auto_bind_config_dongle 
+30e9 20600000 rtn 
+
+g24_rx_auto_bind_config_mouse:
+30ea 20402fdf call g24_dongle_bind_ms_payload_cfg 
+30eb 58000160 setarg offset_24g_mouse_addr 
+30ec 2040327e call g24_set_rega_ifetch_4byte 
+30ed 203a30e0 branch g24_rx_auto_addr_ch_search ,blank 
+30ee 2040322c call g24_store_mem_addr 
+30ef 58000189 setarg offset_24g_ms_config_ch_once 
+30f0 204032d0 call g24_set_rega_ifetch_1byte 
+30f1 205a3108 call g24_ms_config_ch_once ,blank 
+30f2 58000187 setarg offset_24g_ms_last_ch 
+30f3 204032d0 call g24_set_rega_ifetch_1byte 
+30f4 2040322f call g24_store_mem_ch 
+30f5 1a60a2f7 add regc ,offset_rssi_noise_ms_index ,rega 
+30f6 ea288000 ifetcht 1 ,rega 
+30f7 da200f9e arg mem_rssi_noise_ms_buffer ,rega 
+30f8 20402e58 call rssi_noise_store 
+30f9 1a608af7 add regc ,offset_rssi_noise_ms_index ,contw 
+30fa e0a88000 istoret 1 ,contw 
+30fb 20402f94 call g24_noise_rssi_average 
+30fc 1a608afa add regc ,offset_rssi_noise_ms_avg ,contw 
+30fd e0a88000 istoret 1 ,contw 
+30fe 18467c50 sub temp ,rssi_thresh_noise ,null 
+30ff 24610000 nrtn positive 
+3100 58000188 setarg offset_24g_ms_ch_number 
+3101 20403275 call g24_set_rega_ifetcht_1byte 
+3102 20402c90 call g24_ch_temp_incre_size4 
+3103 da200188 arg offset_24g_ms_ch_number ,rega 
+3104 204032c8 call g24_set_contw_with_regb2 
+3105 e0a88000 istoret 1 ,contw 
+
+g24_store_mem_ms_last_ch:
+3106 da200187 arg offset_24g_ms_last_ch ,rega 
+3107 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_ms_config_ch_once:
+3108 58000001 setarg 1 
+3109 da200189 arg offset_24g_ms_config_ch_once ,rega 
+310a 204032b3 call g24_set_contw_with_regb_store_1byte 
+310b d8400000 arg 0 ,temp 
+310c 20402c94 call g24_ch_calc 
+310d 20203106 branch g24_store_mem_ms_last_ch 
+
+g24_rx_auto_bind_config_kb:
+310e 20402fea call g24_dongle_bind_kb_payload_cfg 
+310f 58000164 setarg offset_24g_kb_addr 
+3110 2040327e call g24_set_rega_ifetch_4byte 
+3111 203a30e0 branch g24_rx_auto_addr_ch_search ,blank 
+3112 2040322c call g24_store_mem_addr 
+3113 58000186 setarg offset_24g_kb_config_ch_once 
+3114 204032d0 call g24_set_rega_ifetch_1byte 
+3115 205a312c call g24_kb_config_ch_once ,blank 
+3116 58000184 setarg offset_24g_kb_last_ch 
+3117 204032d0 call g24_set_rega_ifetch_1byte 
+3118 2040322f call g24_store_mem_ch 
+3119 1a60a2f6 add regc ,offset_rssi_noise_kb_index ,rega 
+311a ea288000 ifetcht 1 ,rega 
+311b da20109e arg mem_rssi_noise_kb_buffer ,rega 
+311c 20402e58 call rssi_noise_store 
+311d 1a608af6 add regc ,offset_rssi_noise_kb_index ,contw 
+311e e0a88000 istoret 1 ,contw 
+311f 20402f94 call g24_noise_rssi_average 
+3120 1a608af9 add regc ,offset_rssi_noise_kb_avg ,contw 
+3121 e0a88000 istoret 1 ,contw 
+3122 18467c50 sub temp ,rssi_thresh_noise ,null 
+3123 24610000 nrtn positive 
+3124 58000185 setarg offset_24g_kb_ch_number 
+3125 20403275 call g24_set_rega_ifetcht_1byte 
+3126 20402c90 call g24_ch_temp_incre_size4 
+3127 da200185 arg offset_24g_kb_ch_number ,rega 
+3128 204032c8 call g24_set_contw_with_regb2 
+3129 e0a88000 istoret 1 ,contw 
+
+g24_store_mem_kb_last_ch:
+312a da200184 arg offset_24g_kb_last_ch ,rega 
+312b 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_kb_config_ch_once:
+312c 58000001 setarg 1 
+312d da200186 arg offset_24g_kb_config_ch_once ,rega 
+312e 204032b3 call g24_set_contw_with_regb_store_1byte 
+312f d8400000 arg 0 ,temp 
+3130 20402c94 call g24_ch_calc 
+3131 2020312a branch g24_store_mem_kb_last_ch 
+
+g24_rx_auto_bind_config_dongle:
+3132 20402fdf call g24_dongle_bind_ms_payload_cfg 
+3133 2040327d call g24_fetch_mem_rx_addr 
+3134 2040322c call g24_store_mem_addr 
+3135 58000183 setarg offset_24g_dg_config_ch_once 
+3136 204032d0 call g24_set_rega_ifetch_1byte 
+3137 205a314c call g24_dg_config_ch_once ,blank 
+3138 2040314f call g24_dg_store_config_ch 
+3139 1a60a2f5 add regc ,offset_rssi_noise_dg_index ,rega 
+313a ea288000 ifetcht 1 ,rega 
+313b da200e9e arg mem_rssi_noise_dg_buffer ,rega 
+313c 20402e58 call rssi_noise_store 
+313d 1a608af5 add regc ,offset_rssi_noise_dg_index ,contw 
+313e e0a88000 istoret 1 ,contw 
+313f 20402f94 call g24_noise_rssi_average 
+3140 1a608af8 add regc ,offset_rssi_noise_dg_avg ,contw 
+3141 e0a88000 istoret 1 ,contw 
+3142 18467c50 sub temp ,rssi_thresh_noise ,null 
+3143 24610000 nrtn positive 
+3144 58000182 setarg offset_24g_dg_ch_number 
+3145 20403275 call g24_set_rega_ifetcht_1byte 
+3146 20402c90 call g24_ch_temp_incre_size4 
+3147 da200182 arg offset_24g_dg_ch_number ,rega 
+3148 204032c8 call g24_set_contw_with_regb2 
+3149 e0a88000 istoret 1 ,contw 
+
+g24_store_mem_dg_last_ch:
+314a da200181 arg offset_24g_dg_last_ch ,rega 
+314b 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_dg_config_ch_once:
+314c 58000001 setarg 1 
+314d da200183 arg offset_24g_dg_config_ch_once ,rega 
+314e 204032b3 call g24_set_contw_with_regb_store_1byte 
+
+g24_dg_store_config_ch:
+314f 58000181 setarg offset_24g_dg_last_ch 
+3150 204032d0 call g24_set_rega_ifetch_1byte 
+3151 2020322f branch g24_store_mem_ch 
+
+g24_transmit_ack:
+3152 1a60a200 add regc ,offset_24g_rxbuf ,rega 
+3153 ea208000 ifetch 1 ,rega 
+3154 2040323c call g24_store_mem_data_type 
+3155 20402dde call g24_read_len_pid_crc 
+3156 2040325f call g24_fetch_mem_rxbuf_add1 
+3157 2feffe00 isolate1 bit_ack_24g ,pdata 
+3158 2020b15c branch g24tx_no_ack ,true 
+
+g24tx_with_ack:
+3159 2040315d call g24_ackpayload_prep 
+315a 20402d53 call g24_transmit_prep 
+315b 20402df7 call g24_transmit 
+
+g24tx_no_ack:
+315c 20202e45 branch g24_end_of_packet 
+
+g24_ackpayload_prep:
+315d 44e14018 bpatch patch18_2 ,mem_patch18 
+315e 1a608a86 add regc ,offset_24g_datalen ,contw 
+315f 204032d6 call g24_mem_set0 
+3160 5800013b setarg offset_24g_ackpayload_enable 
+3161 204032d0 call g24_set_rega_ifetch_1byte 
+3162 207a0000 rtn blank 
+3163 58000006 setarg 0x06 
+3164 1a608a86 add regc ,offset_24g_datalen ,contw 
+3165 e0a08000 istore 1 ,contw 
+3166 df200006 arg 0x06 ,loopcnt 
+3167 5800012f setarg offset_24g_bind_payload 
+3168 9a608c00 iadd regc ,contr 
+3169 1a608a22 add regc ,offset_24g_txbuf ,contw 
+316a 20207f01 branch memcpy 
+
+g24_receive_packet_start:
+316b 2040316e call g24_receive_transmit_ack 
+316c 2437af5e nbranch g24_rx_interrupt_clear ,user3 
+316d 20203172 branch g24_receive_packet_parse 
+
+g24_receive_transmit_ack:
+316e 20402f5e call g24_rx_interrupt_clear 
+316f 20402e11 call g24_receive_packet 
+3170 24778000 nrtn user3 
+3171 20203152 branch g24_transmit_ack 
+
+g24_receive_packet_parse:
+3172 44e1c018 bpatch patch18_3 ,mem_patch18 
+3173 20403188 call g24_receive_packet_parse_pid_crc 
+3174 24342f5e nbranch g24_rx_interrupt_clear ,user 
+3175 1a60a284 add regc ,offset_24g_rxdata_length ,rega 
+3176 ea208000 ifetch 1 ,rega 
+3177 203a2f5e branch g24_rx_interrupt_clear ,blank 
+3178 1fe0fe02 increase 2 ,pdata 
+3179 98007200 iforce loopcnt 
+317a 1a608c00 add regc ,offset_24g_rxbuf ,contr 
+317b 58000109 setarg offset_24g_rxdata_temp 
+317c 9a608a00 iadd regc ,contw 
+317d 20407f01 call memcpy 
+317e 20403286 call g24_set0_mem_mode_switch 
+317f 204032b6 call g24_fetch_mem_pair_mode 
+3180 205a3093 call g24_enable_nodata_timer ,blank 
+3181 5800010b setarg offset_24g_rxdata_temp_add2 
+3182 204032d0 call g24_set_rega_ifetch_1byte 
+3183 c000b19e beq 0x01 ,g24_data_type1 
+3184 c00131c6 beq 0x02 ,g24_data_type2 
+3185 c001b1f2 beq 0x03 ,g24_data_type3 
+3186 c07fb212 beq 0xff ,g24_data_attemp 
+3187 20202f5e branch g24_rx_interrupt_clear 
+
+g24_receive_packet_parse_pid_crc:
+3188 20402c7a call g24_head_ptr2regc 
+3189 20407fe9 call disable_user 
+318a 1a60a2ca add regc ,offset_24g_sta_pid ,rega 
+318b ea208000 ifetch 1 ,rega 
+318c 1a60a2cb add regc ,offset_24g_last_pid ,rega 
+318d ea288000 ifetcht 1 ,rega 
+318e 98467c00 isub temp ,null 
+318f 2442ffe7 ncall enable_user ,zero 
+3190 1a60a2ca add regc ,offset_24g_sta_pid ,rega 
+3191 ea208000 ifetch 1 ,rega 
+3192 1a608acb add regc ,offset_24g_last_pid ,contw 
+3193 e0a08000 istore 1 ,contw 
+3194 1a60a2c4 add regc ,offset_24g_sta_crc ,rega 
+3195 ea218000 ifetch 3 ,rega 
+3196 1a60a2c7 add regc ,offset_24g_last_crc ,rega 
+3197 ea298000 ifetcht 3 ,rega 
+3198 98467c00 isub temp ,null 
+3199 2442ffe7 ncall enable_user ,zero 
+319a 1a60a2c4 add regc ,offset_24g_sta_crc ,rega 
+319b ea218000 ifetch 3 ,rega 
+319c 1a608ac7 add regc ,offset_24g_last_crc ,contw 
+319d 202032c5 branch g24_contw_istore_3byte 
+
+g24_data_type1:
+319e 20402f88 call g24_ch_timer_reinit 
+319f 2040324c call g24_fetch_mem_abort_pac 
+31a0 60008aa2 store 1 ,mem_temp 
+31a1 20403274 call g24_fetcht_mem_rxdata_temp 
+31a2 68008aa2 fetch 1 ,mem_temp 
+31a3 284ffe03 isolate1 bit_abort ,temp 
+31a4 7920fe00 setflag true ,0 ,pdata 
+31a5 1a608ab2 add regc ,offset_24g_abort_pac ,contw 
+31a6 e0a08000 istore 1 ,contw 
+31a7 c000b216 beq 1 ,g24_data_attemp_mouse 
+31a8 20403245 call g24_fetch_mem_hop_pac 
+31a9 20403274 call g24_fetcht_mem_rxdata_temp 
+31aa 284ffe04 isolate1 bit_hop ,temp 
+31ab 7920fe00 setflag true ,0 ,pdata 
+31ac 20403249 call g24_store_mem_hop_pac 
+31ad 1a60a2de add regc ,offset_24g_cb_rxdata_type1 ,rega 
+31ae ea210000 ifetch 2 ,rega 
+31af 20207f9c branch callback_func 
+
+dongle_rxdata_type1:
+31b0 58000001 setarg ms_report_id 
+31b1 60008d54 store 1 ,mem_usb_mouse_data 
+31b2 2040329e call g24_fetch_mem_rxdata_temp_add3_7byte 
+31b3 e0a38000 istore 7 ,contw 
+31b4 2040329e call g24_fetch_mem_rxdata_temp_add3_7byte 
+31b5 245a31bd ncall g24_ms_enable_blank_data_forcibly ,blank 
+31b6 2040329e call g24_fetch_mem_rxdata_temp_add3_7byte 
+31b7 205a31c2 call g24_ms_disable_blank_data_forcibly ,blank 
+
+g24_data_type1_usbtx_enable:
+31b8 700d5220 jam usb_ep2_ms ,mem_usb_ep2_data 
+
+g24_data_type1_usbtx_enable_ep2:
+31b9 68008d38 fetch 1 ,mem_usb_tx_enable 
+31ba 79207e02 set1 2 ,pdata 
+31bb 60008d38 store 1 ,mem_usb_tx_enable 
+31bc 20600000 rtn 
+
+g24_ms_enable_blank_data_forcibly:
+31bd 58000001 setarg 1 
+31be 204032a8 call g24_store_mem_ms_blank_data_enable 
+
+g24_ms_enable_blank_data_timer:
+31bf 58000140 setarg timer_ms_blank_delay 
+31c0 d8e0000b arg timer_ms_blank ,queue 
+31c1 20207f08 branch timer_init 
+
+g24_ms_disable_blank_data_forcibly:
+31c2 204032a7 call g24_set0_mem_ms_blank_data_enable 
+
+g24_ms_disable_blank_data_timer:
+31c3 58000000 setarg 0 
+31c4 d8e0000b arg timer_ms_blank ,queue 
+31c5 20207f08 branch timer_init 
+
+g24_data_type2:
+31c6 20403274 call g24_fetcht_mem_rxdata_temp 
+31c7 284ffe03 isolate1 bit_abort ,temp 
+31c8 2020b21b branch g24_data_attemp_kbd ,true 
+31c9 d8a00d64 arg mem_usb_kb_data ,contw 
+31ca 204031e0 call g24_data_type2_reverse_data 
+31cb 68040d64 fetch 8 ,mem_usb_kb_data 
+31cc 245a31e4 ncall g24_kb_enable_blank_data_forcibly ,blank 
+31cd 68040d64 fetch 8 ,mem_usb_kb_data 
+31ce 205a31e9 call g24_kb_disable_blank_data_forcibly ,blank 
+31cf 20402c7a call g24_head_ptr2regc 
+31d0 68040d64 fetch 8 ,mem_usb_kb_data 
+31d1 da200168 arg offset_24g_kb_data_sta_data ,rega 
+31d2 204032bf call g24_set_contw_with_temp 
+31d3 e0a40000 istore 8 ,contw 
+31d4 58000170 setarg offset_24g_kb_data_last_data 
+31d5 9a60a200 iadd regc ,rega 
+31d6 ea2c0000 ifetcht 8 ,rega 
+31d7 98467c00 isub temp ,null 
+31d8 2442b1ed ncall g24_kb_data_dispose ,zero 
+31d9 58000168 setarg offset_24g_kb_data_sta_data 
+31da 9a60a200 iadd regc ,rega 
+31db ea240000 ifetch 8 ,rega 
+31dc da200170 arg offset_24g_kb_data_last_data ,rega 
+31dd 204032bf call g24_set_contw_with_temp 
+31de e0a40000 istore 8 ,contw 
+31df 20202f5e branch g24_rx_interrupt_clear 
+
+g24_data_type2_reverse_data:
+31e0 5800010b setarg offset_24g_rxdata_temp_add2 
+31e1 9a608c00 iadd regc ,contr 
+31e2 df200009 arg 9 ,loopcnt 
+31e3 20207ff3 branch reverse_byte 
+
+g24_kb_enable_blank_data_forcibly:
+31e4 58000001 setarg 1 
+31e5 204032ab call g24_store_mem_kb_blank_data_enable 
+
+g24_kb_enable_blank_data_timer:
+31e6 58000140 setarg timer_kb_blank_delay 
+31e7 d8e0000e arg timer_kb_blank ,queue 
+31e8 20207f08 branch timer_init 
+
+g24_kb_disable_blank_data_forcibly:
+31e9 204032aa call g24_set0_mem_kb_blank_data_enable 
+
+g24_kb_disable_blank_data_timer:
+31ea 58000000 setarg 0 
+31eb d8e0000e arg timer_kb_blank ,queue 
+31ec 20207f08 branch timer_init 
+
+g24_kb_data_dispose:
+
+g24_kb_data_into_ep1_fifo:
+31ed 700d5110 jam usb_ep1_kb ,mem_usb_ep1_data 
+31ee 68008d38 fetch 1 ,mem_usb_tx_enable 
+31ef 79207e01 set1 1 ,pdata 
+31f0 60008d38 store 1 ,mem_usb_tx_enable 
+31f1 20600000 rtn 
+
+g24_data_type3:
+31f2 d8a00d74 arg mem_usb_kb_multikey ,contw 
+31f3 204031e0 call g24_data_type2_reverse_data 
+31f4 68010d75 fetch 2 ,mem_usb_kb_multikey + 1 
+31f5 245a3209 ncall g24_kb_mul_enable_blank_data_forcibly ,blank 
+31f6 68010d75 fetch 2 ,mem_usb_kb_multikey + 1 
+31f7 205a320e call g24_kb_mul_disable_blank_data_forcibly ,blank 
+31f8 20402c7a call g24_head_ptr2regc 
+31f9 68018d74 fetch 3 ,mem_usb_kb_multikey 
+31fa da200178 arg offset_24g_kb_multikey_sta_data ,rega 
+31fb 204032c4 call g24_set_contw_with_temp_store_3byte 
+31fc 5800017b setarg offset_24g_kb_multikey_last_data 
+31fd 9a60a200 iadd regc ,rega 
+31fe ea298000 ifetcht 3 ,rega 
+31ff 98467c00 isub temp ,null 
+3200 2442b207 ncall g24_kb_mul_data_into_ep2_fifo ,zero 
+3201 58000178 setarg offset_24g_kb_multikey_sta_data 
+3202 9a60a200 iadd regc ,rega 
+3203 ea218000 ifetch 3 ,rega 
+3204 da20017b arg offset_24g_kb_multikey_last_data ,rega 
+3205 204032c4 call g24_set_contw_with_temp_store_3byte 
+3206 20202f5e branch g24_rx_interrupt_clear 
+
+g24_kb_mul_data_into_ep2_fifo:
+3207 700d5221 jam usb_ep2_multikey ,mem_usb_ep2_data 
+3208 202031b9 branch g24_data_type1_usbtx_enable_ep2 
+
+g24_kb_mul_enable_blank_data_forcibly:
+3209 58000001 setarg 1 
+320a 204032ae call g24_store_mem_kb_mul_blank_data_enable 
+
+g24_kb_mul_enable_blank_data_timer:
+320b 58000140 setarg timer_kb_mul_blank_delay 
+320c d8e0000c arg timer_kb_mul_blank ,queue 
+320d 20207f08 branch timer_init 
+
+g24_kb_mul_disable_blank_data_forcibly:
+320e 204032ad call g24_set0_mem_kb_mul_blank_data_enable 
+
+g24_kb_mul_disable_blank_data_timer:
+320f 58000000 setarg 0 
+3210 d8e0000c arg timer_kb_mul_blank ,queue 
+3211 20207f08 branch timer_init 
+
+g24_data_attemp:
+3212 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte 
+3213 c000b216 beq datatype_mouse ,g24_data_attemp_mouse 
+3214 c001321b beq datatype_keyboard ,g24_data_attemp_kbd 
+3215 20600000 rtn 
+
+g24_data_attemp_mouse:
+3216 5800010d setarg offset_24g_rxdata_temp_add4 
+3217 2040327e call g24_set_rega_ifetch_4byte 
+3218 da200160 arg offset_24g_mouse_addr ,rega 
+3219 204032bf call g24_set_contw_with_temp 
+321a 2020322d branch g24_contw_istore_4byte 
+
+g24_data_attemp_kbd:
+321b 5800010d setarg offset_24g_rxdata_temp_add4 
+321c 2040327e call g24_set_rega_ifetch_4byte 
+321d da200164 arg offset_24g_kb_addr ,rega 
+321e 204032bf call g24_set_contw_with_temp 
+321f 2020322d branch g24_contw_istore_4byte 
+
+g24_store_mem_24g_mode:
+3220 20402c7a call g24_head_ptr2regc 
+3221 1a608acd add regc ,offset_24g_mode ,contw 
+3222 e0a08000 istore 1 ,contw 
+3223 20600000 rtn 
+
+g24_fetch_mem_device_addr:
+3224 20402c7a call g24_head_ptr2regc 
+3225 1a60a2be add regc ,offset_24g_device_addr ,rega 
+3226 2020327f branch g24_rega_ifetch_4byte 
+
+g24_store_mem_device_addr:
+3227 20402c7a call g24_head_ptr2regc 
+3228 1a608abe add regc ,offset_24g_device_addr ,contw 
+3229 2020322d branch g24_contw_istore_4byte 
+
+g24_fetch_mem_addr:
+322a 1a60a2ae add regc ,offset_24g_addr ,rega 
+322b 2020327f branch g24_rega_ifetch_4byte 
+
+g24_store_mem_addr:
+322c 1a608aae add regc ,offset_24g_addr ,contw 
+
+g24_contw_istore_4byte:
+322d e0a20000 istore 4 ,contw 
+322e 20600000 rtn 
+
+g24_store_mem_ch:
+322f 1a608a90 add regc ,offset_24g_ch ,contw 
+3230 202032b4 branch g24_contw_istore_1byte 
+
+g24_set0_mem_pid:
+3231 58000000 setarg 0 
+
+g24_store_mem_pid:
+3232 20402c7a call g24_head_ptr2regc 
+3233 1a608a85 add regc ,offset_24g_pid ,contw 
+3234 202032b4 branch g24_contw_istore_1byte 
+
+g24_store_mem_txpayload:
+3235 1a608a42 add regc ,offset_24g_txpayload ,contw 
+3236 202032b4 branch g24_contw_istore_1byte 
+
+g24_set4_mem_max_retry:
+3237 58000004 setarg 4 
+
+g24_store_mem_max_retry:
+3238 1a608acc add regc ,offset_24g_max_retry ,contw 
+3239 202032b4 branch g24_contw_istore_1byte 
+
+g24_fetch_mem_data_type:
+323a 1a60a287 add regc ,offset_24g_data_type ,rega 
+323b 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_store_mem_data_type:
+323c 1a608a87 add regc ,offset_24g_data_type ,contw 
+323d 202032b4 branch g24_contw_istore_1byte 
+
+g24_set2_mem_sync_cnt:
+323e 58000002 setarg 2 
+
+g24_store_mem_sync_cnt:
+323f 1a608ad0 add regc ,offset_24g_sync_cnt ,contw 
+3240 202032b4 branch g24_contw_istore_1byte 
+
+g24_set1_mem_rf_last_sta:
+3241 58000001 setarg 1 
+
+g24_store_mem_rf_last_sta:
+3242 20402c7a call g24_head_ptr2regc 
+3243 1a608ace add regc ,offset_24g_rf_last_sta ,contw 
+3244 202032b4 branch g24_contw_istore_1byte 
+
+g24_fetch_mem_hop_pac:
+3245 20402c7a call g24_head_ptr2regc 
+3246 1a60a2b4 add regc ,offset_24g_hop_pac ,rega 
+3247 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_set1_mem_hop_pac:
+3248 58000001 setarg 1 
+
+g24_store_mem_hop_pac:
+3249 20402c7a call g24_head_ptr2regc 
+324a 1a608ab4 add regc ,offset_24g_hop_pac ,contw 
+324b 202032b4 branch g24_contw_istore_1byte 
+
+g24_fetch_mem_abort_pac:
+324c 20402c7a call g24_head_ptr2regc 
+324d 1a60a2b2 add regc ,offset_24g_abort_pac ,rega 
+324e 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_set1_mem_abort_pac:
+324f 58000001 setarg 1 
+
+g24_store_mem_abort_pac:
+3250 20402c7a call g24_head_ptr2regc 
+3251 1a608ab2 add regc ,offset_24g_abort_pac ,contw 
+3252 202032b4 branch g24_contw_istore_1byte 
+
+g24_fetch_mem_pairing_sm:
+3253 20402c7a call g24_head_ptr2regc 
+3254 1a60a296 add regc ,offset_24g_pairing_sm ,rega 
+3255 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_store_mem_pairing_sm:
+3256 1a608a96 add regc ,offset_24g_pairing_sm ,contw 
+3257 202032b4 branch g24_contw_istore_1byte 
+
+g24_fetch_mem_rf_hop_ch:
+3258 1a60a2cf add regc ,offset_24g_rf_hop_ch ,rega 
+3259 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_set0_mem_rf_hop_ch:
+325a 58000000 setarg 0 
+
+g24_store_mem_rf_hop_ch:
+325b 1a608acf add regc ,offset_24g_rf_hop_ch ,contw 
+325c 202032b4 branch g24_contw_istore_1byte 
+
+g24_fetch_mem_rf_work_stage:
+325d 1a60a2d2 add regc ,offset_24g_rf_work_stage ,rega 
+325e 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_fetch_mem_rxbuf_add1:
+325f 1a60a201 add regc ,offset_24g_rxbuf_add1 ,rega 
+3260 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_fetch_mem_check_dongle_times:
+3261 1a60a2b5 add regc ,offset_24g_check_dongle_times ,rega 
+3262 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_set0_mem_check_dongle_times:
+3263 58000000 setarg 0 
+
+g24_store_mem_check_dongle_times:
+3264 20402c7a call g24_head_ptr2regc 
+3265 1a608ab5 add regc ,offset_24g_check_dongle_times ,contw 
+3266 202032b4 branch g24_contw_istore_1byte 
+
+g24_store_mem_tx_power:
+3267 20402c7a call g24_head_ptr2regc 
+3268 1a60a2fb add regc ,offset_tx_power_temp ,rega 
+3269 ea208000 ifetch 1 ,rega 
+
+g24_store_mem_txpower:
+326a 6000c1de store 1 ,mem_tx_power 
+326b 20600000 rtn 
+
+g24_store_mem_tx_power_temp:
+326c 20402c7a call g24_head_ptr2regc 
+326d 6800c1de fetch 1 ,mem_tx_power 
+326e 1a608afb add regc ,offset_tx_power_temp ,contw 
+326f 202032b4 branch g24_contw_istore_1byte 
+
+g24_fetch_mem_power_ctrl_pac:
+3270 1a60a2fc add regc ,offset_power_ctrl_packet_cnt ,rega 
+3271 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_store_mem_power_ctrl_level:
+3272 1a608afe add regc ,offset_power_ctrl_level ,contw 
+3273 202032b4 branch g24_contw_istore_1byte 
+
+g24_fetcht_mem_rxdata_temp:
+3274 58000109 setarg offset_24g_rxdata_temp 
+
+g24_set_rega_ifetcht_1byte:
+3275 9a60a200 iadd regc ,rega 
+3276 ea288000 ifetcht 1 ,rega 
+3277 20600000 rtn 
+
+g24_fetch_mem_rf_laststa:
+3278 58000135 setarg offset_24g_rf_laststa 
+3279 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_set0_mem_rf_laststa:
+327a 58000000 setarg 0 
+
+g24_store_mem_rf_laststa:
+327b da200135 arg offset_24g_rf_laststa ,rega 
+327c 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_fetch_mem_rx_addr:
+327d 5800012b setarg offset_24g_rx_addr 
+
+g24_set_rega_ifetch_4byte:
+327e 204032cd call g24_set_rega 
+
+g24_rega_ifetch_4byte:
+327f ea220000 ifetch 4 ,rega 
+3280 20600000 rtn 
+
+g24_fetch_mem_time_slice:
+3281 5800015f setarg offset_24g_time_slice 
+3282 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_set0_mem_time_slice:
+3283 58000000 setarg 0 
+
+g24_store_mem_time_slice:
+3284 da20015f arg offset_24g_time_slice ,rega 
+3285 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_set0_mem_mode_switch:
+3286 58000000 setarg 0 
+
+g24_store_mem_mode_switch:
+3287 da20015c arg offset_24g_mode_switch ,rega 
+3288 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_store_mem_bind_payload:
+3289 da20012f arg offset_24g_bind_payload ,rega 
+328a 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_fetch_mem_bind_device_status:
+328b 58000108 setarg offset_dongle_bind_device_status 
+328c 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_store_mem_bind_device_status:
+328d da200108 arg offset_dongle_bind_device_status ,rega 
+328e 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_fetch_mem_dongle_work_mode:
+328f 58000105 setarg offset_dongle_work_mode 
+3290 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_set_work_mem_dongle_work_mode:
+3291 58000000 setarg dongle_work 
+
+g24_store_mem_dongle_work_mode:
+3292 da200105 arg offset_dongle_work_mode ,rega 
+3293 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_fetch_mem_dongle_mode_init:
+3294 58000104 setarg offset_dongle_mode_init 
+3295 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_set0_mem_dongle_mode_init:
+3296 58000000 setarg clear_init 
+
+g24_store_mem_dongle_mode_init:
+3297 da200104 arg offset_dongle_mode_init ,rega 
+3298 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_set0_mem_ackpayload_enable:
+3299 58000000 setarg 0 
+
+g24_store_mem_ackpayload_enable:
+329a da20013b arg offset_24g_ackpayload_enable ,rega 
+329b 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_set1_mem_ackpayload_enable:
+329c 58000001 setarg 1 
+329d 2020329a branch g24_store_mem_ackpayload_enable 
+
+g24_fetch_mem_rxdata_temp_add3_7byte:
+329e 5800010c setarg offset_24g_rxdata_temp_add3 
+329f 204032cd call g24_set_rega 
+32a0 ea238000 ifetch 7 ,rega 
+32a1 20600000 rtn 
+
+g24_fetch_mem_nodata_timer_enable:
+32a2 5800015e setarg offset_24g_nodata_timer_enable 
+32a3 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_set0_mem_nodata_timer_enable:
+32a4 58000000 setarg 0 
+
+g24_store_mem_nodata_timer_enable:
+32a5 da20015e arg offset_24g_nodata_timer_enable ,rega 
+32a6 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_set0_mem_ms_blank_data_enable:
+32a7 58000000 setarg 0 
+
+g24_store_mem_ms_blank_data_enable:
+32a8 da200180 arg offset_24g_ms_blank_data_enable ,rega 
+32a9 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_set0_mem_kb_blank_data_enable:
+32aa 58000000 setarg 0 
+
+g24_store_mem_kb_blank_data_enable:
+32ab da20017e arg offset_24g_kb_blank_data_enable ,rega 
+32ac 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_set0_mem_kb_mul_blank_data_enable:
+32ad 58000000 setarg 0 
+
+g24_store_mem_kb_mul_blank_data_enable:
+32ae da20017f arg offset_24g_kb_mul_blank_data_enable ,rega 
+32af 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_store_mem_power_ctrl_threshold_up:
+32b0 da200102 arg offset_power_ctrl_threshold_up ,rega 
+32b1 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_store_mem_power_ctrl_threshold_down:
+32b2 da200103 arg offset_power_ctrl_threshold_down ,rega 
+
+g24_set_contw_with_regb_store_1byte:
+32b3 204032c7 call g24_set_contw_with_regb 
+
+g24_contw_istore_1byte:
+32b4 e0a08000 istore 1 ,contw 
+32b5 20600000 rtn 
+
+g24_fetch_mem_pair_mode:
+32b6 5800015d setarg offset_24g_pair_mode 
+32b7 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_store_mem_pair_mode:
+32b8 da20015d arg offset_24g_pair_mode ,rega 
+32b9 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_store_mem_pair_txpower:
+32ba 5800018a setarg offset_24g_pair_txpower 
+32bb 204032d0 call g24_set_rega_ifetch_1byte 
+32bc 2020326a branch g24_store_mem_txpower 
+
+g24_fetch_mem_rxdata_temp_add3_1byte:
+32bd 5800010c setarg offset_24g_rxdata_temp_add3 
+32be 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_set_contw_with_temp:
+32bf 1fe20400 copy pdata ,temp 
+32c0 1a227e00 copy rega ,pdata 
+32c1 9a608a00 iadd regc ,contw 
+32c2 18427e00 copy temp ,pdata 
+32c3 20600000 rtn 
+
+g24_set_contw_with_temp_store_3byte:
+32c4 204032bf call g24_set_contw_with_temp 
+
+g24_contw_istore_3byte:
+32c5 e0a18000 istore 3 ,contw 
+32c6 20600000 rtn 
+
+g24_set_contw_with_regb:
+32c7 20402c7a call g24_head_ptr2regc 
+
+g24_set_contw_with_regb2:
+32c8 1fe22400 copy pdata ,regb 
+32c9 1a227e00 copy rega ,pdata 
+32ca 9a608a00 iadd regc ,contw 
+32cb 1a427e00 copy regb ,pdata 
+32cc 20600000 rtn 
+
+g24_set_rega:
+32cd 20402c7a call g24_head_ptr2regc 
+32ce 9a60a200 iadd regc ,rega 
+32cf 20600000 rtn 
+
+g24_set_rega_ifetch_1byte:
+32d0 204032cd call g24_set_rega 
+
+g24_rega_ifetch_1byte:
+32d1 ea208000 ifetch 1 ,rega 
+32d2 20600000 rtn 
+
+g24_set_rega_ifetcht_4byte:
+32d3 204032cd call g24_set_rega 
+32d4 ea2a0000 ifetcht 4 ,rega 
+32d5 20600000 rtn 
+
+g24_mem_set0:
+32d6 58000000 setarg 0 
+32d7 202032b4 branch g24_contw_istore_1byte 
+
+app_init:
+32d8 44e24018 bpatch patch18_4 ,mem_patch18 
+32d9 6800c092 fetch 1 ,mem_device_option 
+32da 203a32d8 branch app_init ,blank 
+32db c0022f30 beq dvc_op_dongle ,dongle_init 
+32dc c007b436 beq dvc_op_antilost ,antilost_init 
+32dd c004c5de beq dvc_op_shutter ,shutter_init 
+32de c005392a beq dvc_op_module ,module_init 
+32df c00735bf beq dvc_op_car ,car_init 
+32e0 c00844a4 beq dvc_op_remote_car ,remote_car_init 
+32e1 c2833d00 bbit1 dvc_op_mouse ,mouse_init 
+32e2 20600000 rtn 
+
+app_lpm_init:
+32e3 44e2c018 bpatch patch18_5 ,mem_patch18 
+32e4 70015100 jam 0 ,mem_tester_emulate 
+32e5 70017f00 jam 0 ,mem_debug_config 
+32e6 70018000 jam 0 ,mem_lch_code 
+32e7 58000000 setarg 0 
+32e8 600289ae store 5 ,mem_sp_state_start 
+32e9 6800c092 fetch 1 ,mem_device_option 
+32ea 203a32e3 branch app_lpm_init ,blank 
+32eb c0053962 beq dvc_op_module ,module_lpm_init 
+
+app_lpm_init0:
+32ec 20600000 rtn 
+
+app_process_idle:
+32ed 20407cd1 call ui_dispatch 
+32ee 20407d9c call check_51cmd 
+32ef 204032f6 call app_process_bb_event 
+32f0 680141f3 fetch 2 ,mem_cb_idle_process 
+32f1 20207f9c branch callback_func 
+
+app_process_bt:
+32f2 680141f1 fetch 2 ,mem_cb_bt_process 
+32f3 20207f9c branch callback_func 
+
+app_process_ble:
+32f4 680141ef fetch 2 ,mem_cb_le_process 
+32f5 20207f9c branch callback_func 
+
+app_process_bb_event:
+32f6 44e34018 bpatch patch18_6 ,mem_patch18 
+32f7 da204668 arg mem_ipc_fifo_bt2c51 ,rega 
+32f8 20407fc4 call fifo_out 
+32f9 207a0000 rtn blank 
+32fa 1fe22600 copy pdata ,regc 
+32fb 204032ff call app_event_normal_process 
+32fc 20203324 branch app_process_bb_event_priority 
+
+app_discard_event:
+32fd da600000 arg 0 ,regc 
+32fe 20600000 rtn 
+
+app_event_normal_process:
+32ff c000b311 beq bt_evt_bb_connected ,app_evt_bt_conn 
+3300 c0083357 beq bt_evt_button_long_pressed ,app_evt_button_long_pressed 
+3301 c002b335 beq bt_evt_setup_complete ,app_evt_setup_complete 
+3302 c009333c beq bt_evt_hid_handshake ,app_evt_hid_handshake 
+3303 c0033353 beq bt_evt_hid_connected ,app_bb_event_hid_connected 
+3304 c0023394 beq bt_evt_reconn_failed ,app_bb_event_reconn_failed 
+3305 c0013399 beq bt_evt_bb_disconnected ,app_bb_event_bb_disconn 
+3306 c009b394 beq bt_evt_reconn_page_timeout ,app_bb_event_reconn_failed 
+3307 c00a334b beq bt_evt_le_connected ,app_le_event_bb_connected 
+3308 c00ab34f beq bt_evt_le_disconnected ,app_le_event_bb_disconn 
+3309 c001b32e beq bt_evt_reconn_started ,app_event_reconn_start 
+330a c005b340 beq bt_evt_enter_sniff ,app_event_enter_sniff 
+330b c0063347 beq bt_evt_exit_sniff ,app_event_exit_sniff 
+330c c00b335b beq bt_evt_ml2cap_conn_refused ,app_event_ml2cap_conn_refused 
+330d c00c332a beq bt_evt_linkkey_generate ,app_event_linkkey_generate 
+330e c015331a beq bt_evt_switch_fail_master ,app_event_switch_fail_master 
+330f c015b318 beq bt_evt_switch_success_master ,app_event_switch_success 
+3310 20600000 rtn 
+
+app_evt_bt_conn:
+3311 68014682 fetch 2 ,mem_ui_state_map 
+3312 79207e00 set1 ui_state_bt_connected ,pdata 
+3313 60014682 store 2 ,mem_ui_state_map 
+3314 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3315 793ffe00 set0 app_disc_by_button ,pdata 
+3316 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3317 20600000 rtn 
+
+app_event_switch_success:
+3318 70022900 jam 0 ,mem_switch_fail_master_count 
+3319 20600000 rtn 
+
+app_event_switch_fail_master:
+331a 68008229 fetch 1 ,mem_switch_fail_master_count 
+331b 1fe0fe01 increase 1 ,pdata 
+331c 60008229 store 1 ,mem_switch_fail_master_count 
+331d 1fe67c01 sub pdata ,1 ,null 
+331e 202133df branch app_bt_role_switch ,positive 
+331f 70022900 jam 0 ,mem_switch_fail_master_count 
+3320 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3321 79207e09 set1 app_disc_switch_fail ,pdata 
+3322 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3323 202033e9 branch app_bt_disconnect 
+
+app_process_bb_event_priority:
+3324 680141f5 fetch 2 ,mem_cb_bb_event_process 
+3325 20207f9c branch callback_func 
+
+app_check_wake_lock:
+3326 680141e9 fetch 2 ,mem_cb_check_wakelock 
+3327 20207f9c branch callback_func 
+
+app_will_enter_lpm:
+3328 680141ed fetch 2 ,mem_cb_before_lpm 
+3329 20207f9c branch callback_func 
+
+app_event_linkkey_generate:
+332a 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+332b 79207e01 set1 app_disc_after_pairing ,pdata 
+332c 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+332d 20203412 branch app_bt_store_reconn_info 
+
+app_event_reconn_start:
+332e 68014682 fetch 2 ,mem_ui_state_map 
+332f 79207e07 set1 ui_state_bt_reconnect ,pdata 
+3330 60014682 store 2 ,mem_ui_state_map 
+3331 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3332 79207e02 set1 app_disc_after_reconn ,pdata 
+3333 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3334 20600000 rtn 
+
+app_evt_setup_complete:
+3335 68014682 fetch 2 ,mem_ui_state_map 
+3336 79207e01 set1 ui_state_bt_setup_complete ,pdata 
+3337 60014682 store 2 ,mem_ui_state_map 
+3338 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3339 79207e04 set1 app_disc_after_setup_done ,pdata 
+333a 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+333b 20600000 rtn 
+
+app_evt_hid_handshake:
+333c 68014682 fetch 2 ,mem_ui_state_map 
+333d 79207e03 set1 ui_state_bt_hid_handshake ,pdata 
+333e 60014682 store 2 ,mem_ui_state_map 
+333f 20600000 rtn 
+
+app_event_enter_sniff:
+3340 68014682 fetch 2 ,mem_ui_state_map 
+3341 79207e05 set1 ui_state_bt_sniff ,pdata 
+3342 60014682 store 2 ,mem_ui_state_map 
+3343 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3344 79207e03 set1 app_disc_after_sniff ,pdata 
+3345 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3346 20600000 rtn 
+
+app_event_exit_sniff:
+3347 68014682 fetch 2 ,mem_ui_state_map 
+3348 793ffe05 set0 ui_state_bt_sniff ,pdata 
+3349 60014682 store 2 ,mem_ui_state_map 
+334a 20600000 rtn 
+
+app_le_event_bb_connected:
+334b 68014682 fetch 2 ,mem_ui_state_map 
+334c 79207e09 set1 ui_state_ble_connected ,pdata 
+334d 60014682 store 2 ,mem_ui_state_map 
+334e 20600000 rtn 
+
+app_le_event_bb_disconn:
+334f 68014682 fetch 2 ,mem_ui_state_map 
+3350 793ffe09 set0 ui_state_ble_connected ,pdata 
+3351 60014682 store 2 ,mem_ui_state_map 
+3352 20203418 branch app_lpm_mult_disable 
+
+app_bb_event_hid_connected:
+3353 68014682 fetch 2 ,mem_ui_state_map 
+3354 79207e02 set1 ui_state_bt_hid_conn ,pdata 
+3355 60014682 store 2 ,mem_ui_state_map 
+3356 20600000 rtn 
+
+app_evt_button_long_pressed:
+3357 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3358 79207e00 set1 app_disc_by_button ,pdata 
+3359 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+335a 20600000 rtn 
+
+app_event_ml2cap_conn_refused:
+335b 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+335c 79207e08 set1 app_disc_l2cap_refused ,pdata 
+335d 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+335e 202033e9 branch app_bt_disconnect 
+
+app_evt_timer:
+335f 44e3c018 bpatch patch18_7 ,mem_patch18 
+3360 6000822a store 1 ,mem_app_evt_timer_count 
+
+app_evt_100ms_loop:
+3361 6800822a fetch 1 ,mem_app_evt_timer_count 
+3362 207a0000 rtn blank 
+3363 1fe0ffff increase -1 ,pdata 
+3364 6000822a store 1 ,mem_app_evt_timer_count 
+3365 20407cdd call ui_button_polling 
+3366 204033d6 call app_lpm_wake_auto_lock_timer 
+3367 20403387 call app_unsniff_delay_timer 
+3368 2040338d call app_discovery_timer 
+3369 2040651b call flash_write_spi_sm_timer 
+336a 680141fd fetch 2 ,mem_cb_event_timer 
+336b 20407f9c call callback_func 
+336c 20203361 branch app_evt_100ms_loop 
+
+timer_single_step:
+336d ea608000 ifetch 1 ,regc 
+336e 207a0000 rtn blank 
+336f 1fe0ffff pincrease -1 
+3370 e2608000 istore 1 ,regc 
+3371 247a0000 nrtn blank 
+3372 1a427e00 copy regb ,pdata 
+3373 20207f9c branch callback_func 
+
+timer_single_step_2b:
+3374 ea610000 ifetch 2 ,regc 
+3375 207a0000 rtn blank 
+3376 1fe0ffff pincrease -1 
+3377 e2610000 istore 2 ,regc 
+3378 247a0000 nrtn blank 
+3379 1a427e00 copy regb ,pdata 
+337a 20207f9c branch callback_func 
+
+app_power_timer:
+337b 6809423f fetcht 2 ,mem_power_param_ptr 
+337c 1840a601 add temp ,power_timer_offset ,regc 
+337d da40337f arg app_power_timer_timeout ,regb 
+337e 2020336d branch timer_single_step 
+
+app_power_timer_timeout:
+337f 2040342d call app_got_power_state_common 
+3380 c000b382 beq power_starting ,app_enter_power_stanby_state 
+
+app_enter_power_off_state:
+3381 2020340a branch app_enter_hibernate 
+
+app_enter_power_stanby_state:
+3382 58000002 setarg power_standby 
+3383 e2608000 istore 1 ,regc 
+3384 1840a408 add temp ,power_standby_cb_offset ,regb 
+
+app_power_cb_common:
+3385 ea410000 ifetch 2 ,regb 
+3386 20207f9c branch callback_func 
+
+app_unsniff_delay_timer:
+3387 da604205 arg mem_unsniff2sniff_timer_count ,regc 
+3388 da40338a arg app_unsniff_delay_timeout ,regb 
+3389 2020336d branch timer_single_step 
+
+app_unsniff_delay_timeout:
+338a 20402252 call context_check_idle 
+338b 2022b40e branch app_bt_enter_sniff ,zero 
+338c 20600000 rtn 
+
+app_discovery_timer:
+338d da60467e arg mem_discovery_timeout_timer_count ,regc 
+338e da403390 arg app_discovery_timeout ,regb 
+338f 20203374 branch timer_single_step_2b 
+
+app_discovery_timeout:
+3390 204033f0 call app_bt_stop_discovery 
+3391 20403408 call app_led_off 
+3392 680141f7 fetch 2 ,mem_cb_discovry_timeout 
+3393 20207f9c branch callback_func 
+
+app_bb_event_reconn_failed:
+3394 204033ac call app_disconn_reason_flag_clear 
+
+app_clear_reconnect_flag:
+3395 68014682 fetch 2 ,mem_ui_state_map 
+3396 793ffe07 set0 ui_state_bt_reconnect ,pdata 
+3397 60014682 store 2 ,mem_ui_state_map 
+3398 20600000 rtn 
+
+app_bb_event_bb_disconn:
+3399 70420500 jam 0 ,mem_unsniff2sniff_timer_count 
+339a 68014682 fetch 2 ,mem_ui_state_map 
+339b c283b39e bbit1 ui_state_bt_reconnect ,app_bb_event_bb_reconn_disconn 
+339c 2fec0001 isolate0 ui_state_bt_setup_complete ,pdata 
+339d 2040b2fd call app_discard_event ,true 
+
+app_bb_event_bb_reconn_disconn:
+339e 44e44019 bpatch patch19_0 ,mem_patch19 
+339f 68014682 fetch 2 ,mem_ui_state_map 
+33a0 793ffe00 set0 ui_state_bt_connected ,pdata 
+33a1 793ffe01 set0 ui_state_bt_setup_complete ,pdata 
+33a2 793ffe02 set0 ui_state_bt_hid_conn ,pdata 
+33a3 793ffe03 set0 ui_state_bt_hid_handshake ,pdata 
+33a4 793ffe07 set0 ui_state_bt_reconnect ,pdata 
+33a5 60014682 store 2 ,mem_ui_state_map 
+33a6 20203418 branch app_lpm_mult_disable 
+
+app_bb_hibernate:
+33a7 204033a9 call app_disconn_reason_clear 
+33a8 2020340a branch app_enter_hibernate 
+
+app_disconn_reason_clear:
+33a9 58000000 setarg 0 
+33aa 60014208 store app_disc_rsn_size ,mem_app_disconn_reason 
+33ab 20600000 rtn 
+
+app_disconn_reason_flag_clear:
+33ac 58000000 setarg 0 
+33ad 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+33ae 20600000 rtn 
+
+app_disconn_reason_collect_bt:
+33af 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+33b0 60014208 store app_disc_rsn_size ,mem_app_disconn_reason 
+33b1 58000000 setarg 0 
+33b2 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+33b3 20600000 rtn 
+
+app_disconn_reason_collect_ble:
+33b4 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+33b5 79207e07 set1 app_disc_ble ,pdata 
+33b6 60014208 store app_disc_rsn_size ,mem_app_disconn_reason 
+33b7 58000000 setarg 0 
+33b8 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+33b9 20600000 rtn 
+
+app_check_sniff:
+33ba 6800c682 fetch 1 ,mem_ui_state_map 
+33bb 2feffe05 isolate1 ui_state_bt_sniff ,pdata 
+33bc 20600000 rtn 
+
+app_initflag_store:
+33bd 5800aa55 setarg eeprom_init_flag 
+
+app_flag_store:
+33be 60010aaa store 2 ,mem_timeup 
+33bf 44e4c019 bpatch patch19_1 ,mem_patch19 
+33c0 d8400002 arg 2 ,temp 
+33c1 da200aaa arg mem_timeup ,rega 
+33c2 da4000c3 arg eeprom_module_init_flag ,regb 
+33c3 20206606 branch iicd_write_eep_data 
+
+app_initflag_check:
+33c4 44e54019 bpatch patch19_2 ,mem_patch19 
+33c5 d8400002 arg 2 ,temp 
+33c6 da200a9a arg mem_pdatatemp ,rega 
+33c7 da4000c3 arg eeprom_module_init_flag ,regb 
+33c8 204065df call iicd_read_eep_data 
+33c9 68010a9a fetch 2 ,mem_pdatatemp 
+33ca d840aa55 arg eeprom_init_flag ,temp 
+33cb 98467c00 isub temp ,null 
+33cc 20600000 rtn 
+
+app_start_auto_sniff:
+33cd 6800c55a fetch 1 ,mem_unsniff2sniff_timer 
+33ce 6000c205 store 1 ,mem_unsniff2sniff_timer_count 
+33cf 20600000 rtn 
+
+app_get_lpm_wake_lock:
+33d0 d8e00009 arg wake_lock_app ,queue 
+33d1 20202c32 branch lpm_get_wake_lock 
+
+app_put_lpm_wake_lock:
+33d2 d8e00009 arg wake_lock_app ,queue 
+33d3 20202c36 branch lpm_put_wake_lock 
+
+app_lpm_wake_auto_lock:
+33d4 70420605 jam lpm_wake_up_delay_timer ,mem_wake_up_delay_timer 
+33d5 202033d0 branch app_get_lpm_wake_lock 
+
+app_lpm_wake_auto_lock_timer:
+33d6 da604206 arg mem_wake_up_delay_timer ,regc 
+33d7 da4033d2 arg app_put_lpm_wake_lock ,regb 
+33d8 2020336d branch timer_single_step 
+
+app_l2cap_flow_control_enable:
+33d9 70436301 jam l2cap_flow_ctrl_enable ,mem_l2cap_flow_ctrl_flag 
+33da 20600000 rtn 
+
+app_l2cap_flow_control_disable:
+33db 70436300 jam l2cap_flow_ctrl_disable ,mem_l2cap_flow_ctrl_flag 
+33dc 20600000 rtn 
+
+app_bt_set_pincode:
+33dd 700a990a jam bt_cmd_set_pin_code ,mem_fifo_temp 
+33de 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_role_switch:
+33df 700a991d jam bt_cmd_role_switch ,mem_fifo_temp 
+33e0 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_start_reconnect:
+33e1 44e5c019 bpatch patch19_3 ,mem_patch19 
+33e2 6800c207 fetch 1 ,mem_app_connection_options 
+33e3 6000816d store 1 ,mem_connection_options 
+33e4 70022801 jam app_flag_reconnect ,mem_reconnect_flag 
+33e5 700a9903 jam bt_cmd_reconnect ,mem_fifo_temp 
+33e6 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_reconnect_cancel:
+33e7 700a991e jam bt_cmd_bb_reconn_cancel ,mem_fifo_temp 
+33e8 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_disconnect:
+33e9 700a9904 jam bt_cmd_disconnect ,mem_fifo_temp 
+33ea 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_start_discovery_short:
+33eb 68014687 fetch 2 ,mem_discovery_timeout 
+33ec 6001467e store 2 ,mem_discovery_timeout_timer_count 
+
+app_bt_start_discovery_led_blink:
+33ed 20403404 call app_led_start_blink 
+
+app_bt_start_discovery:
+33ee 700a9901 jam bt_cmd_start_discovery ,mem_fifo_temp 
+33ef 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_stop_discovery:
+33f0 58000000 setarg 0 
+33f1 6001467e store 2 ,mem_discovery_timeout_timer_count 
+33f2 700a9902 jam bt_cmd_stop_discovery ,mem_fifo_temp 
+33f3 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_start_direct_adv:
+33f4 700a990f jam bt_cmd_start_direct_adv ,mem_fifo_temp 
+33f5 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_stop_direct_adv:
+33f6 700a9910 jam bt_cmd_stop_direct_adv ,mem_fifo_temp 
+33f7 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_stop_adv:
+33f8 700a990e jam bt_cmd_stop_adv ,mem_fifo_temp 
+33f9 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_start_adv:
+33fa 700a990d jam bt_cmd_start_adv ,mem_fifo_temp 
+33fb 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_start_scan:
+33fc 700a9917 jam bt_cmd_le_start_scan ,mem_fifo_temp 
+33fd 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_stop_scan:
+33fe 700a9918 jam bt_cmd_le_stop_scan ,mem_fifo_temp 
+33ff 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_start_conn:
+3400 700a9916 jam bt_cmd_le_start_conn ,mem_fifo_temp 
+3401 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_disconnect:
+3402 700a9911 jam bt_cmd_le_disconnect ,mem_fifo_temp 
+3403 20207d8f branch ui_ipc_send_cmd 
+
+app_led_start_blink:
+3404 700a9915 jam bt_cmd_led_blink ,mem_fifo_temp 
+3405 20207d8f branch ui_ipc_send_cmd 
+
+app_led_on:
+3406 700a9914 jam bt_cmd_led_on ,mem_fifo_temp 
+3407 20207d8f branch ui_ipc_send_cmd 
+
+app_led_stop_blink:
+
+app_led_off:
+3408 700a9913 jam bt_cmd_led_off ,mem_fifo_temp 
+3409 20207d8f branch ui_ipc_send_cmd 
+
+app_enter_hibernate:
+340a 700a9919 jam bt_cmd_enter_hibernate ,mem_fifo_temp 
+340b 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_sniff_exit:
+340c 700a9906 jam bt_cmd_exit_sniff ,mem_fifo_temp 
+340d 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_enter_sniff:
+340e 700a9905 jam bt_cmd_enter_sniff ,mem_fifo_temp 
+340f 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_store_reconn_info:
+3410 700a991f jam bt_cmd_store_reconn_info_le ,mem_fifo_temp 
+3411 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_store_reconn_info:
+3412 700a9920 jam bt_cmd_store_reconn_info_bt ,mem_fifo_temp 
+3413 20207d8f branch ui_ipc_send_cmd 
+
+app_store_reconn_info:
+3414 700a9925 jam bt_cmd_store_reconn_info ,mem_fifo_temp 
+3415 20207d8f branch ui_ipc_send_cmd 
+
+app_lpm_mult_enable:
+3416 7920000d set1 mark_lpm_mult_enable ,mark 
+3417 20600000 rtn 
+
+app_lpm_mult_disable:
+3418 793f800d set0 mark_lpm_mult_enable ,mark 
+3419 20600000 rtn 
+
+app_button_long_pressed:
+341a 2040342d call app_got_power_state_common 
+341b c0013424 beq power_standby ,app_power_shutting_down 
+
+app_power_starting:
+341c 58000001 setarg power_starting 
+341d e2608000 istore 1 ,regc 
+341e 1840a203 add temp ,power_starting_timeout_offset ,rega 
+341f 1840a406 add temp ,power_starting_cb_offset ,regb 
+
+app_power_common:
+3420 ea288000 ifetcht 1 ,rega 
+3421 1a60a601 increase 1 ,regc 
+3422 e2688000 istoret 1 ,regc 
+3423 20203385 branch app_power_cb_common 
+
+app_power_shutting_down:
+3424 58000000 setarg power_off 
+3425 e2608000 istore 1 ,regc 
+3426 68014682 fetch 2 ,mem_ui_state_map 
+3427 c304b429 bbit0 ui_state_ble_connected ,app_power_off_end 
+3428 20403402 call app_ble_disconnect 
+
+app_power_off_end:
+3429 6809423f fetcht 2 ,mem_power_param_ptr 
+342a 1840a202 add temp ,power_off_timeout_offset ,rega 
+342b 1840a404 add temp ,power_off_cb_offset ,regb 
+342c 20203420 branch app_power_common 
+
+app_got_power_state_common:
+342d 6809423f fetcht 2 ,mem_power_param_ptr 
+342e 1840a600 add temp ,power_state_offset ,regc 
+342f ea608000 ifetch 1 ,regc 
+3430 20600000 rtn 
+
+app_event_button_up:
+3431 2040342d call app_got_power_state_common 
+3432 c0803434 bne power_off ,app_power_release 
+3433 2020340a branch app_enter_hibernate 
+
+app_power_release:
+3434 1840a40a add temp ,ui_butten_up_cb_offset ,regb 
+3435 20203385 branch app_power_cb_common 
+
+antilost_init:
+3436 20758000 rtn wake 
+3437 70808100 jam 0x00 ,core_gpio_sel1 
+3438 58003463 setarg antilost_le_before_hibernate 
+3439 600141eb store 2 ,mem_cb_before_hibernate 
+343a 5800696c setarg keyscan_process_lpm_before 
+343b 600141ed store 2 ,mem_cb_before_lpm 
+343c 580034f5 setarg antilost_idle_process 
+343d 600141f3 store 2 ,mem_cb_idle_process 
+343e 580034f4 setarg antilost_le_conn_process 
+343f 600141ef store 2 ,mem_cb_le_process 
+3440 5800347e setarg antilost_bb_event_process 
+3441 600141f5 store 2 ,mem_cb_bb_event_process 
+3442 580034b2 setarg antilost_le_bb_event_timer 
+3443 600141fd store 2 ,mem_cb_event_timer 
+3444 58003465 setarg antilost_le_notification 
+3445 600141fb store 2 ,mem_cb_ble_transmit 
+3446 58003470 setarg antilost_lpm_lock_process 
+3447 600141e9 store 2 ,mem_cb_check_wakelock 
+3448 58003501 setarg antilost_le_receive_data_process 
+3449 600141f9 store 2 ,mem_cb_att_write 
+344a 44e64019 bpatch patch19_4 ,mem_patch19 
+344b 2040359b call antilost_buzzer_pwm_init 
+344c 20406948 call keyscan_key_init 
+344d 204035ad call antilost_adc_init 
+344e 20407d08 call ui_led_init_global 
+344f 20407cd3 call ui_button_init 
+3450 5800350b setarg antilost_key_up_down 
+3451 60014766 store 2 ,mem_cb_antl_key 
+3452 580034fc setarg antilost_power_off_cb 
+3453 6001475d store 2 ,mem_antl_power_off_cb 
+3454 580034f8 setarg antilost_power_starting_cb 
+3455 6001475f store 2 ,mem_antl_power_starting_cb 
+3456 5800346c setarg antilost_power_standby_cb 
+3457 60014761 store 2 ,mem_antl_power_standby_cb 
+3458 580035a2 setarg antilost_led_on_cb 
+3459 600146a9 store 2 ,mem_antl_led_cb_on 
+345a 580035a4 setarg antilost_led_off_cb 
+345b 600146ab store 2 ,mem_antl_led_cb_off 
+345c 580035a9 setarg antilost_buzzer_on 
+345d 600146b4 store 2 ,mem_antl_buzzer_cb_on 
+345e 580035a6 setarg antilost_buzzer_off 
+345f 600146b6 store 2 ,mem_antl_buzzer_cb_off 
+3460 68014682 fetch 2 ,mem_ui_state_map 
+3461 c3860000 rtnbit1 ui_state_btn_down 
+3462 2020340a branch app_enter_hibernate 
+
+antilost_le_before_hibernate:
+3463 20403586 call antilost_led_buzzer_stop_blink 
+3464 2020340a branch app_enter_hibernate 
+
+antilost_le_notification:
+3465 20405892 call le_fifo_check_nearly_full 
+3466 247a0000 nrtn blank 
+3467 da200b06 arg mem_temp_block5 ,rega 
+3468 20407e54 call queue_pop 
+3469 24740000 nrtn user 
+346a d8c00b06 arg mem_temp_block5 ,contr 
+346b 20204746 branch le_send_notify_from_list 
+
+antilost_power_standby_cb:
+346c 68014797 fetch 2 ,mem_antl_le_sleep_timeout 
+346d 60014791 store 2 ,mem_antl_le_sleep_timer 
+346e 70475301 jam 1 ,mem_antl_key_scan_enable 
+346f 2020358f branch antilost_fast_adv_start 
+
+antilost_lpm_lock_process:
+3470 6800c79d fetch 1 ,mem_antl_key_state 
+3471 c000b479 beq 1 ,antilost_lpm_ctrl_for_led_buzzer 
+3472 68014682 fetch 2 ,mem_ui_state_map 
+3473 c304b479 bbit0 ui_state_ble_connected ,antilost_lpm_ctrl_for_led_buzzer 
+3474 6800c79e fetch 1 ,mem_antl_lost_mode 
+3475 c000b3d0 beq 1 ,app_get_lpm_wake_lock 
+3476 6800c700 fetch 1 ,mem_antl_queue_curr_num 
+3477 243a33d0 nbranch app_get_lpm_wake_lock ,blank 
+3478 202033d2 branch app_put_lpm_wake_lock 
+
+antilost_lpm_ctrl_for_led_buzzer:
+3479 6800c79b fetch 1 ,mem_antl_led_state 
+347a 6808c79c fetcht 1 ,mem_antl_buzzer_state 
+347b 9841fe00 ior temp ,pdata 
+347c c000b3d0 beq 1 ,app_get_lpm_wake_lock 
+347d 202033d2 branch app_put_lpm_wake_lock 
+
+antilost_bb_event_process:
+347e 1a627e00 copy regc ,pdata 
+347f c016b431 beq bt_evt_button_up ,app_event_button_up 
+3480 c008341a beq bt_evt_button_long_pressed ,app_button_long_pressed 
+3481 c00a34df beq bt_evt_le_connected ,antilost_le_process_conn 
+3482 c00ab4e8 beq bt_evt_le_disconnected ,antilost_le_process_discon 
+3483 c0203485 beq bt_evt_le_parse_conn_papa_update_rsp ,antilost_le_conn_param_update_rsp_recieved 
+3484 20600000 rtn 
+
+antilost_le_conn_param_update_rsp_recieved:
+3485 68014509 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 
+3486 c000b48c beq ble_signaling_connect_parameter_update_rejected ,antilost_le_conn_param_rejected 
+
+antilost_le_conn_param_accepted:
+3487 680143d8 fetch 2 ,mem_le_new_connslavelatency 
+3488 203a34a2 branch antilost_master_nonsupport_latency ,blank 
+
+antilost_le_conn_param_updata_procedure_sucsess:
+3489 70478a02 jam conn_param_updata_procedure_complete ,mem_antl_conn_updata_procedure_state 
+348a 70478f3c jam 60 ,mem_antl_conn_update_timer 
+348b 20600000 rtn 
+
+antilost_le_conn_param_rejected:
+348c 6801449a fetch 2 ,mem_le_latency 
+348d 203a34a0 branch antilost_conn_param_updata_procedure_faild ,blank 
+
+antilost_conn_param_retransimiting:
+348e 70478a01 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state 
+348f 680947b4 fetcht 2 ,mem_interval_increment 
+3490 68014496 fetch 2 ,mem_le_interval_min 
+3491 9840fe00 iadd temp ,pdata 
+3492 60014496 store 2 ,mem_le_interval_min 
+3493 1fe22200 copy pdata ,rega 
+3494 68014498 fetch 2 ,mem_le_interval_max 
+3495 9840fe00 iadd temp ,pdata 
+3496 60014498 store 2 ,mem_le_interval_max 
+3497 9a20fe00 iadd rega ,pdata 
+3498 1fe30400 rshift pdata ,temp 
+3499 680147c0 fetch 2 ,mem_antl_le_unnormal_interval_max 
+349a 9846fc00 idiv temp 
+349b 20407f86 call wait_div_end 
+349c 1807fe00 quotient pdata 
+349d 6001449a store 2 ,mem_le_latency 
+349e 70479001 jam 1 ,mem_antl_send_updata_le_param_timer 
+349f 20600000 rtn 
+
+antilost_conn_param_updata_procedure_faild:
+34a0 70478a03 jam conn_param_updata_procedure_faild ,mem_antl_conn_updata_procedure_state 
+34a1 20600000 rtn 
+
+antilost_master_nonsupport_latency:
+34a2 70417200 jam 0 ,mem_lpm_mult 
+34a3 70479000 jam 0 ,mem_antl_send_updata_le_param_timer 
+34a4 680143d6 fetch 2 ,mem_le_new_conninterval 
+34a5 680947be fetcht 2 ,mem_antl_le_unnormal_interval_min 
+34a6 98467c00 isub temp ,null 
+34a7 79212200 setflag positive ,0 ,rega 
+34a8 680147c0 fetch 2 ,mem_antl_le_unnormal_interval_max 
+34a9 680943d6 fetcht 2 ,mem_le_new_conninterval 
+34aa 98467e00 isub temp ,pdata 
+34ab 79212201 setflag positive ,1 ,rega 
+34ac 2a200603 compare 0x03 ,rega ,0x03 
+34ad 20608000 rtn true 
+34ae 680447be fetch 8 ,mem_antl_le_unnormal_interval_min 
+34af 60044496 store 8 ,mem_le_interval_min 
+34b0 70479001 jam 1 ,mem_antl_send_updata_le_param_timer 
+34b1 20600000 rtn 
+
+antilost_le_bb_event_timer:
+34b2 2040337b call app_power_timer 
+34b3 204034b9 call antilost_double_click_timer 
+34b4 204034be call antilost_le_fast_adv_timer 
+34b5 204034d5 call antilost_le_sleep_timer 
+34b6 204034ca call antilost_app_updata_le_param_timer 
+34b7 204034c4 call antilost_conn_update_timer 
+34b8 202034d9 branch antilost_adc_check_timer 
+
+antilost_double_click_timer:
+34b9 da604799 arg mem_double_click_timer ,regc 
+34ba da4034bc arg antilost_double_click_timeout ,regb 
+34bb 2020336d branch timer_single_step 
+
+antilost_double_click_timeout:
+34bc 70479a00 jam 0 ,mem_butten_click_cnt 
+34bd 20600000 rtn 
+
+antilost_le_fast_adv_timer:
+34be da604793 arg mem_antl_fast_adv_timer ,regc 
+34bf da4034c1 arg antilost_le_fast_adv_timeout ,regb 
+34c0 20203374 branch timer_single_step_2b 
+
+antilost_le_fast_adv_timeout:
+34c1 da6046bf arg mem_antl_slow_adv_led_style ,regc 
+34c2 da40469e arg mem_antl_slow_adv_lpm_interval ,regb 
+34c3 20203591 branch antilost_adv_start_common 
+
+antilost_conn_update_timer:
+34c4 da60478f arg mem_antl_conn_update_timer ,regc 
+34c5 da4034c7 arg antilost_conn_update_timer_time_out ,regb 
+34c6 2020336d branch timer_single_step 
+
+antilost_conn_update_timer_time_out:
+34c7 6801449a fetch 2 ,mem_le_latency 
+34c8 6000c172 store 1 ,mem_lpm_mult 
+34c9 20600000 rtn 
+
+antilost_app_updata_le_param_timer:
+34ca da604790 arg mem_antl_send_updata_le_param_timer ,regc 
+34cb da4034cd arg antilost_app_updata_le_param_timeout ,regb 
+34cc 2020336d branch timer_single_step 
+
+antilost_app_updata_le_param_timeout:
+34cd 6800843f fetch 1 ,mem_le_state 
+34ce 2fe0c000 compare 0 ,pdata ,0x60 
+34cf 2420b4d3 nbranch antilost_wait_for_updata_param_instant_expire ,true 
+34d0 70478a01 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state 
+34d1 20403416 call app_lpm_mult_enable 
+34d2 20205abf branch le_l2cap_tx_update_req 
+
+antilost_wait_for_updata_param_instant_expire:
+34d3 70479001 jam 1 ,mem_antl_send_updata_le_param_timer 
+34d4 20600000 rtn 
+
+antilost_le_sleep_timer:
+34d5 da604791 arg mem_antl_le_sleep_timer ,regc 
+34d6 da4034d8 arg antilost_le_sleep_timer_timeout ,regb 
+34d7 20203374 branch timer_single_step_2b 
+
+antilost_le_sleep_timer_timeout:
+34d8 2020341a branch app_button_long_pressed 
+
+antilost_adc_check_timer:
+34d9 da60478d arg mem_adc_timer ,regc 
+34da da4034dc arg antilost_adc_check_timer_timeout ,regb 
+34db 20203374 branch timer_single_step_2b 
+
+antilost_adc_check_timer_timeout:
+34dc 680147a7 fetch 2 ,mem_adc_timeout 
+34dd 6001478d store 2 ,mem_adc_timer 
+34de 202035af branch antilost_battery_process 
+
+antilost_le_process_conn:
+34df 680147a7 fetch 2 ,mem_adc_timeout 
+34e0 6001478d store 2 ,mem_adc_timer 
+34e1 58000000 setarg 0 
+34e2 60014793 store 2 ,mem_antl_fast_adv_timer 
+34e3 60014791 store 2 ,mem_antl_le_sleep_timer 
+34e4 2040355c call antilost_alert_off 
+34e5 20403586 call antilost_led_buzzer_stop_blink 
+34e6 70417200 jam 0 ,mem_lpm_mult 
+34e7 202033f8 branch app_ble_stop_adv 
+
+antilost_le_process_discon:
+34e8 58000000 setarg 0 
+34e9 6002478d store 4 ,mem_adc_timer 
+34ea 6001c78a store 3 ,mem_antl_conn_updata_procedure_state 
+34eb 60014509 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 
+34ec 7047a001 jam 1 ,mem_alarm_config_notfy_cnt 
+34ed 68014797 fetch 2 ,mem_antl_le_sleep_timeout 
+34ee 60014791 store 2 ,mem_antl_le_sleep_timer 
+34ef 20407e38 call queue_init 
+34f0 6800c759 fetch 1 ,mem_antl_power_state 
+34f1 c1000000 rtneq power_off 
+34f2 2040358f call antilost_fast_adv_start 
+34f3 2020356e branch antilost_on_off_alarm_after_disconn 
+
+antilost_le_conn_process:
+34f4 20203508 branch antilost_key_process 
+
+antilost_idle_process:
+34f5 6800c759 fetch 1 ,mem_antl_power_state 
+34f6 c1810000 rtnne power_standby 
+34f7 20203508 branch antilost_key_process 
+
+antilost_power_starting_cb:
+34f8 da6046cd arg mem_antl_power_starting_buzzer_style ,regc 
+34f9 20403582 call antilost_buzzer_configuration 
+34fa da6046c6 arg mem_antl_power_starting_led_style ,regc 
+
+antilost_power_common:
+34fb 20203584 branch antilost_led_configuration 
+
+antilost_power_off_cb:
+34fc 70436e00 jam off ,mem_le_adv_enable 
+34fd da6046db arg mem_antl_power_off_buzzer_style ,regc 
+34fe 20403582 call antilost_buzzer_configuration 
+34ff da6046d4 arg mem_antl_power_off_led_style ,regc 
+3500 202034fb branch antilost_power_common 
+
+antilost_le_receive_data_process:
+3501 68008477 fetch 1 ,mem_le_att_opcode 
+3502 c0093504 beq attop_write_request ,antilost_le_parse_att_write_request 
+3503 20600000 rtn 
+
+antilost_le_parse_att_write_request:
+3504 68010478 fetch 2 ,mem_le_att_handle 
+3505 c006b536 beq new_spec_write_handle ,antilost_cmd_parse_for_application 
+3506 c005b571 beq new_spec_notification_enable_handle ,antilost_notify_alarm_config_first_time 
+3507 20600000 rtn 
+
+antilost_key_process:
+3508 6800c753 fetch 1 ,mem_antl_key_scan_enable 
+3509 207a0000 rtn blank 
+350a 20206978 branch keyscan_key_process 
+
+antilost_key_up_down:
+350b 1a227e00 copy rega ,pdata 
+350c 203a3510 branch antilost_key_is_up ,blank 
+
+antilost_key_is_down:
+350d 18e27e00 copy queue ,pdata 
+350e c0003513 beq 0 ,antilost_key0_down 
+350f 20600000 rtn 
+
+antilost_key_is_up:
+3510 18e27e00 copy queue ,pdata 
+3511 c000351b beq 0 ,antilost_key0_up 
+3512 20600000 rtn 
+
+antilost_key0_down:
+3513 70479d01 jam 1 ,mem_antl_key_state 
+3514 da6046f7 arg mem_antl_key_buzzer_style ,regc 
+3515 20403582 call antilost_buzzer_configuration 
+3516 da6046f0 arg mem_antl_key_led_style ,regc 
+3517 20403584 call antilost_led_configuration 
+3518 68014682 fetch 2 ,mem_ui_state_map 
+3519 c304b532 bbit0 ui_state_ble_connected ,antilost_butten_down_while_disconn 
+351a 20203521 branch antilost_butten_down_after_conn 
+
+antilost_key0_up:
+351b 70479d00 jam 0 ,mem_antl_key_state 
+351c 2020351d branch antilost_double_click_timer_init 
+
+antilost_double_click_timer_init:
+351d 6800c79a fetch 1 ,mem_butten_click_cnt 
+351e c1808000 rtnne 1 
+351f 70479905 jam 5 ,mem_double_click_timer 
+3520 20600000 rtn 
+
+antilost_butten_down_after_conn:
+3521 6800c79a fetch 1 ,mem_butten_click_cnt 
+3522 1fe0fe01 pincrease 1 
+3523 6000c79a store 1 ,mem_butten_click_cnt 
+3524 c000b527 beq 1 ,antilost_click_once 
+3525 c001352b beq 2 ,antilost_click_twice 
+3526 20600000 rtn 
+
+antilost_click_once:
+3527 2040355c call antilost_alert_off 
+3528 70477101 jam opcode1_butten_click_once ,mem_antl_key0_press + 5 
+3529 da60476c arg mem_antl_key0_press ,regc 
+352a 20203544 branch antilost_prepare_data_and_send 
+
+antilost_click_twice:
+352b 70479a00 jam 0 ,mem_butten_click_cnt 
+352c 70477102 jam opcode2_butten_double_click ,mem_antl_key0_press + 5 
+352d da60476c arg mem_antl_key0_press ,regc 
+352e 20403544 call antilost_prepare_data_and_send 
+352f 6800c79e fetch 1 ,mem_antl_lost_mode 
+3530 c000b551 beq 1 ,antilost_alert_on 
+3531 20600000 rtn 
+
+antilost_butten_down_while_disconn:
+3532 68014797 fetch 2 ,mem_antl_le_sleep_timeout 
+3533 60014791 store 2 ,mem_antl_le_sleep_timer 
+3534 2040355c call antilost_alert_off 
+3535 2020358f branch antilost_fast_adv_start 
+
+antilost_cmd_parse_for_application:
+3536 44e6c019 bpatch patch19_5 ,mem_patch19 
+3537 204036fc call le_app_receive_data 
+3538 ea208000 ifetch 1 ,rega 
+3539 c001b53c beq opcode3_antl_start_alram ,antilost_on_of_alram 
+353a c003b540 beq opcode7_antl_config_alram ,antilost_configuration_for_alram 
+353b 20600000 rtn 
+
+antilost_on_of_alram:
+353c 6800c79e fetch 1 ,mem_antl_lost_mode 
+353d c0003551 beq anti_le_alarm_off ,antilost_alert_on 
+353e c000b55c beq anti_le_alarm_on ,antilost_alert_off 
+353f 20600000 rtn 
+
+antilost_configuration_for_alram:
+3540 ea408000 ifetch 1 ,regb 
+3541 c000b564 beq 1 ,antilost_set_start_alarm_after_disconn 
+3542 c0003569 beq 0 ,antilost_set_no_alarm_after_disconn 
+3543 20600000 rtn 
+
+antilost_prepare_data_and_send:
+3544 44e74019 bpatch patch19_6 ,mem_patch19 
+3545 6800c78b fetch 1 ,mem_client_characteristic_configuration_descriptor 
+3546 2feffe00 isolate1 notification_enable_bit ,pdata 
+3547 24608000 nrtn true 
+3548 1a608c06 add regc ,6 ,contr 
+3549 e8c10000 ifetch 2 ,contr 
+354a 1ff0fe00 byteswap pdata ,pdata 
+354b 1fe0f205 add pdata ,5 ,loopcnt 
+354c 1a608c03 add regc ,3 ,contr 
+354d 204036f0 call calc_check_sum_start 
+354e e0c08000 istore 1 ,contr 
+354f 1a622200 copy regc ,rega 
+3550 20207e3d branch queue_push 
+
+antilost_alert_on:
+3551 6800c759 fetch 1 ,mem_antl_power_state 
+3552 207a0000 rtn blank 
+3553 70479e01 jam 1 ,mem_antl_lost_mode 
+3554 da6046e9 arg mem_antl_alert_buzzer_stlye ,regc 
+3555 20403582 call antilost_buzzer_configuration 
+3556 da6046e2 arg mem_antl_alert_led_stlye ,regc 
+3557 20403584 call antilost_led_configuration 
+3558 70478004 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 
+3559 70478301 jam 1 ,mem_antl_key0_release + 8 
+355a da60477b arg mem_antl_key0_release ,regc 
+355b 20203544 branch antilost_prepare_data_and_send 
+
+antilost_alert_off:
+355c 6800c79e fetch 1 ,mem_antl_lost_mode 
+355d 207a0000 rtn blank 
+355e 70479e00 jam 0 ,mem_antl_lost_mode 
+355f 20403586 call antilost_led_buzzer_stop_blink 
+3560 70478004 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 
+3561 70478300 jam 0 ,mem_antl_key0_release + 8 
+3562 da60477b arg mem_antl_key0_release ,regc 
+3563 20203544 branch antilost_prepare_data_and_send 
+
+antilost_set_start_alarm_after_disconn:
+3564 70479f01 jam 1 ,mem_alarm_config 
+3565 70478007 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 
+3566 70478301 jam 1 ,mem_antl_key0_release + 8 
+3567 da60477b arg mem_antl_key0_release ,regc 
+3568 20203544 branch antilost_prepare_data_and_send 
+
+antilost_set_no_alarm_after_disconn:
+3569 70479f00 jam 0 ,mem_alarm_config 
+356a 70478007 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 
+356b 70478300 jam 0 ,mem_antl_key0_release + 8 
+356c da60477b arg mem_antl_key0_release ,regc 
+356d 20203544 branch antilost_prepare_data_and_send 
+
+antilost_on_off_alarm_after_disconn:
+356e 6800c79f fetch 1 ,mem_alarm_config 
+356f 207a0000 rtn blank 
+3570 20203551 branch antilost_alert_on 
+
+antilost_notify_alarm_config_first_time:
+3571 ea210000 ifetch 2 ,rega 
+3572 6001478b store 2 ,mem_client_characteristic_configuration_descriptor 
+3573 2feffe00 isolate1 notification_enable_bit ,pdata 
+3574 24608000 nrtn true 
+3575 6800c7a0 fetch 1 ,mem_alarm_config_notfy_cnt 
+3576 207a0000 rtn blank 
+3577 7047a000 jam 0 ,mem_alarm_config_notfy_cnt 
+3578 680447b6 fetch 8 ,mem_antl_le_interval_min 
+3579 60044496 store 8 ,mem_le_interval_min 
+357a 70479002 jam 2 ,mem_antl_send_updata_le_param_timer 
+357b 204035af call antilost_battery_process 
+357c 204035b9 call antilost_battery_calculate_end 
+357d 70478007 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 
+357e 6800c79f fetch 1 ,mem_alarm_config 
+357f 6000c783 store 1 ,mem_antl_key0_release + 8 
+3580 da60477b arg mem_antl_key0_release ,regc 
+3581 20203544 branch antilost_prepare_data_and_send 
+
+antilost_buzzer_configuration:
+3582 da200001 arg 1 ,rega 
+3583 20203585 branch antilost_configuration_common 
+
+antilost_led_configuration:
+3584 da200000 arg 0 ,rega 
+
+antilost_configuration_common:
+3585 2020358c branch antilost_led_buzzer_style_configuration 
+
+antilost_led_buzzer_stop_blink:
+3586 da200000 arg 0 ,rega 
+3587 20407d19 call ui_led_blink_stop_global 
+3588 da200001 arg 1 ,rega 
+3589 20407d19 call ui_led_blink_stop_global 
+358a 6800c7a1 fetch 1 ,mem_buzzer_pwm_conf 
+358b 202069d7 branch pwm_disable 
+
+antilost_led_buzzer_style_configuration:
+358c 20407d04 call calc_curr_struct_prt 
+358d df200007 arg 7 ,loopcnt 
+358e 20207d26 branch ui_led_set_style_global + 2 
+
+antilost_fast_adv_start:
+358f da6046b8 arg mem_antl_fast_adv_led_style ,regc 
+3590 da40469a arg mem_antl_lpm_interval ,regb 
+
+antilost_adv_start_common:
+3591 20403596 call antilost_adv_interval_lpm_interval_set 
+3592 20403584 call antilost_led_configuration 
+3593 68014795 fetch 2 ,mem_antl_fast_adv_timeout 
+3594 60014793 store 2 ,mem_antl_fast_adv_timer 
+3595 202033fa branch app_ble_start_adv 
+
+antilost_adv_interval_lpm_interval_set:
+3596 ea410000 ifetch 2 ,regb 
+3597 60014154 store 2 ,mem_lpm_interval 
+3598 e8c10000 ifetch 2 ,contr 
+3599 60014482 store 2 ,mem_le_adv_interval 
+359a 20600000 rtn 
+
+antilost_buzzer_pwm_init:
+359b da200000 arg 0 ,rega 
+359c 204069a6 call pwm_init 
+359d 680347a1 fetch 6 ,mem_buzzer_pwm_conf 
+359e 60030a9a store 6 ,mem_pdatatemp 
+359f 204069ae call pwm_out_set 
+35a0 6800c7a1 fetch 1 ,mem_buzzer_pwm_conf 
+35a1 202069d7 branch pwm_disable 
+
+antilost_led_on_cb:
+35a2 70479b01 jam 1 ,mem_antl_led_state 
+35a3 20600000 rtn 
+
+antilost_led_off_cb:
+35a4 70479b00 jam 0 ,mem_antl_led_state 
+35a5 20600000 rtn 
+
+antilost_buzzer_off:
+35a6 70479c00 jam 0 ,mem_antl_buzzer_state 
+35a7 6800c7a1 fetch 1 ,mem_buzzer_pwm_conf 
+35a8 202069d7 branch pwm_disable 
+
+antilost_buzzer_on:
+35a9 70479c01 jam 1 ,mem_antl_buzzer_state 
+35aa 680347a1 fetch 6 ,mem_buzzer_pwm_conf 
+35ab 60030a9a store 6 ,mem_pdatatemp 
+35ac 202069ae branch pwm_out_set 
+
+antilost_adc_init:
+35ad 70422d00 jam 0 ,mem_adc_config_flag 
+35ae 202068a8 branch adc_init_data 
+
+antilost_battery_process:
+35af 204068eb call adc_set_mode 
+35b0 20406908 call vdd_calculate_by_mode 
+35b1 600147b0 store 2 ,mem_battery_current_voltage 
+35b2 da2047aa arg mem_battery_calculate_set ,rega 
+35b3 20406930 call adc_bat_percent_lowpower_out 
+35b4 6000c7a9 store 1 ,mem_voltage_remain_percent 
+35b5 c00035be beq 0 ,antilost_low_battery 
+35b6 1fe67c64 sub pdata ,0x64 ,null 
+35b7 242135bc nbranch antilost_full_battery ,positive 
+35b8 6000c783 store 1 ,mem_antl_key0_release + 8 
+
+antilost_battery_calculate_end:
+35b9 70478005 jam opcode5_batter_information ,mem_antl_key0_release + 5 
+35ba da60477b arg mem_antl_key0_release ,regc 
+35bb 20203544 branch antilost_prepare_data_and_send 
+
+antilost_full_battery:
+35bc 70478364 jam 100 ,mem_antl_key0_release + 8 
+35bd 202035b9 branch antilost_battery_calculate_end 
+
+antilost_low_battery:
+35be 2020341a branch app_button_long_pressed 
+
+car_init:
+35bf 20758000 rtn wake 
+35c0 68108081 hfetch 1 ,core_gpio_sel1 
+35c1 1fe17ef0 and_into 0xf0 ,pdata 
+35c2 60108081 hstore 1 ,core_gpio_sel1 
+35c3 58003631 setarg car_le_before_hibernate 
+35c4 600141eb store 2 ,mem_cb_before_hibernate 
+35c5 58003633 setarg car_le_process_lpm_before 
+35c6 600141ed store 2 ,mem_cb_before_lpm 
+35c7 5800340a setarg app_enter_hibernate 
+35c8 600141f7 store 2 ,mem_cb_discovry_timeout 
+35c9 58003635 setarg car_scale_process_idle 
+35ca 600141f3 store 2 ,mem_cb_idle_process 
+35cb 5800364b setarg car_scale_process_bb_event 
+35cc 600141f5 store 2 ,mem_cb_bb_event_process 
+35cd 580033d0 setarg app_get_lpm_wake_lock 
+35ce 600141e9 store 2 ,mem_cb_check_wakelock 
+35cf 580036f6 setarg car_le_receive_data 
+35d0 600141f9 store 2 ,mem_cb_att_write 
+35d1 5800367a setarg car_le_bb_event_timer 
+35d2 600141fd store 2 ,mem_cb_event_timer 
+35d3 20402c7a call g24_head_ptr2regc 
+35d4 58003722 setarg car_24g_receive_data 
+35d5 1a608ade add regc ,offset_24g_cb_rxdata_type1 ,contw 
+35d6 e0a10000 istore 2 ,contw 
+35d7 580035ed setarg car_power_off_signal 
+35d8 6001475b store 2 ,mem_remote_car_power_off_cb 
+35d9 580035ef setarg car_soft_switch_power_on_signal 
+35da 6001475f store 2 ,mem_remote_car_power_standby_cb 
+35db 44e7c019 bpatch patch19_7 ,mem_patch19 
+35dc 20403628 call car_init_environment 
+35dd 20407e38 call queue_init 
+35de 70417202 jam 2 ,mem_lpm_mult 
+35df 7049f600 jam power_on ,mem_car_24g_received_pac 
+35e0 6800c7cb fetch 1 ,mem_car_config_soft_switch_enable 
+35e1 6000c69a store 1 ,mem_car_hard_soft_switch 
+35e2 c00035ee beq hard_switch ,car_hard_switch_power_on_signal 
+35e3 6800c7cc fetch 1 ,mem_car_config_soft_switch_gpio 
+35e4 6000c686 store 1 ,mem_ui_button_gpio 
+35e5 70436e00 jam off ,mem_le_adv_enable 
+
+car_soft_switch_power_on_init:
+35e6 2040360f call car_ui_led_init 
+35e7 20407cd3 call ui_button_init 
+35e8 20407cdd call ui_button_polling 
+35e9 7047f301 jam power_starting ,mem_car_power_state 
+35ea 68014682 fetch 2 ,mem_ui_state_map 
+35eb c3860000 rtnbit1 ui_state_btn_down 
+35ec 2020340a branch app_enter_hibernate 
+
+car_power_off_signal:
+35ed 2020360f branch car_ui_led_init 
+
+car_hard_switch_power_on_signal:
+35ee 7047f302 jam power_standby ,mem_car_power_state 
+
+car_soft_switch_power_on_signal:
+35ef 70436e01 jam on ,mem_le_adv_enable 
+35f0 2040360f call car_ui_led_init 
+35f1 da200000 arg 0 ,rega 
+35f2 20407d1e call ui_led_blink_start_global 
+35f3 58000020 setarg fast_adv_interval_value_car 
+35f4 204046f0 call shutter_ble_adv_interval_set 
+
+car_le_modified_name_adv:
+35f5 d8a043b7 arg mem_le_name + 7 ,contw 
+35f6 6800c4a0 fetch 1 ,mem_le_lap 
+
+car_name_loop:
+35f7 1fe104f0 and pdata ,0xF0 ,temp 
+35f8 18518400 rshift4 temp ,temp 
+35f9 20403609 call car_hex_to_ascii 
+35fa e0a88000 istoret 1 ,contw 
+35fb 1fe1040f and pdata ,0x0F ,temp 
+35fc 20403609 call car_hex_to_ascii 
+35fd e0a88000 istoret 1 ,contw 
+35fe 204057a6 call le_modified_name_att_list 
+35ff 6808c3af fetcht 1 ,mem_le_name_len 
+3600 18427200 copy temp ,loopcnt 
+3601 d8a04372 arg mem_le_adv_data + 2 ,contw 
+3602 d8c043b0 arg mem_le_name ,contr 
+3603 20407f01 call memcpy 
+
+car_le_modified_name_scan:
+3604 6808c3af fetcht 1 ,mem_le_name_len 
+3605 18427200 copy temp ,loopcnt 
+3606 d8a04392 arg mem_le_scan_data + 2 ,contw 
+3607 d8c043b0 arg mem_le_name ,contr 
+3608 20207f01 branch memcpy 
+
+car_hex_to_ascii:
+3609 18467c09 sub temp ,9 ,null 
+360a 2021360d branch car_hex_num ,positive 
+360b 18408437 add temp ,55 ,temp 
+360c 20600000 rtn 
+
+car_hex_num:
+360d 18408430 add temp ,48 ,temp 
+360e 20600000 rtn 
+
+car_ui_led_init:
+360f 6800c7c0 fetch 1 ,mem_car_config_blood_led1_gpio 
+3610 c0ffb621 bne invalid_pin_num ,car_blood_led_gpio_set 
+
+car_ui_led_init_1:
+3611 6800c7be fetch 1 ,mem_car_config_pairing_led_gpio 
+3612 c0ffb624 bne invalid_pin_num ,car_pairing_led_gpio_set 
+
+car_ui_led_init_2:
+3613 6800c7c9 fetch 1 ,mem_car_config_low_voltage_led_gpio 
+3614 c0ffb626 bne invalid_pin_num ,car_low_voltage_led_gpio_set 
+
+car_ui_led_init_3:
+3615 6800c72c fetch 1 ,mem_car_led_num 
+3616 1fe27200 copy pdata ,loopcnt 
+3617 5800472d setarg mem_car_led_map 
+3618 1fe22200 copy pdata ,rega 
+
+car_in_lp1:
+3619 1a220c00 copy rega ,contr 
+361a e8c08000 ifetch 1 ,contr 
+361b 18c22200 copy contr ,rega 
+361c c07fb61f beq invalid_pin_num ,car_in_lp1_end 
+361d 1fe20400 copy pdata ,temp 
+361e 2040680e call gpio_config_output 
+
+car_in_lp1_end:
+361f c2003619 loop car_in_lp1 
+
+car_ui_led_init_end:
+3620 20600000 rtn 
+
+car_blood_led_gpio_set:
+3621 680447c0 fetch 8 ,mem_car_config_blood_led1_gpio 
+3622 6004472f store 8 ,mem_car_led_map + 2 
+3623 20203611 branch car_ui_led_init_1 
+
+car_pairing_led_gpio_set:
+3624 6000c72d store 1 ,mem_car_led_map 
+3625 20203613 branch car_ui_led_init_2 
+
+car_low_voltage_led_gpio_set:
+3626 6000c72e store 1 ,mem_car_led_map + 1 
+3627 20203615 branch car_ui_led_init_3 
+
+car_init_environment:
+3628 da200000 arg 0 ,rega 
+3629 204069a6 call pwm_init 
+362a 204037e4 call car_ir_rx_init 
+362b 20402c7d call g24_receive_process_init 
+362c 2020362d branch car_init_adc_hvin 
+
+car_init_adc_hvin:
+362d 7047cf64 jam 100 ,mem_car_notify_vdd_value_last 
+362e 6800c7c9 fetch 1 ,mem_car_config_low_voltage_led_gpio 
+362f 6000c744 store 1 ,mem_car_style2_struct_led_gpio 
+3630 202068a8 branch adc_init_data 
+
+car_le_before_hibernate:
+3631 20406835 call gpio_set_before_lpm_common 
+3632 2020696c branch keyscan_process_lpm_before 
+
+car_le_process_lpm_before:
+3633 2020696c branch keyscan_process_lpm_before 
+
+car_key_scan_process:
+3634 20206978 branch keyscan_key_process 
+
+car_scale_process_idle:
+3635 20403642 call car_le_send_packet 
+3636 204037ee call car_ir_receive_process 
+3637 20403639 call car_g24_status_process 
+3638 20203634 branch car_key_scan_process 
+
+car_g24_status_process:
+3639 68014682 fetch 2 ,mem_ui_state_map 
+363a c3848000 rtnbit1 ui_state_ble_connected 
+363b 6800c9f6 fetch 1 ,mem_car_24g_received_pac 
+363c c000b63e beq work_paired ,car_g24_connected_event 
+363d 20600000 rtn 
+
+car_g24_connected_event:
+363e 6800c7ea fetch 1 ,mem_car_24g_status 
+363f c1008000 rtneq work_paired 
+3640 7047ea01 jam work_paired ,mem_car_24g_status 
+3641 20203654 branch car_g24_connected 
+
+car_le_send_packet:
+3642 68014682 fetch 2 ,mem_ui_state_map 
+3643 c4048000 rtnbit0 ui_state_ble_connected 
+3644 20405892 call le_fifo_check_nearly_full 
+3645 247a0000 nrtn blank 
+3646 da204718 arg mem_car_pop_queue_buff ,rega 
+3647 20407e54 call queue_pop 
+3648 24740000 nrtn user 
+3649 d8c04718 arg mem_car_pop_queue_buff ,contr 
+364a 20204746 branch le_send_notify_from_list 
+
+car_scale_process_bb_event:
+364b 1a627e00 copy regc ,pdata 
+364c c016b431 beq bt_evt_button_up ,app_event_button_up 
+364d c008341a beq bt_evt_button_long_pressed ,app_button_long_pressed 
+364e c00a3651 beq bt_evt_le_connected ,car_scale_event_le_conn 
+364f c00ab660 beq bt_evt_le_disconnected ,car_scale_event_le_discon 
+3650 20600000 rtn 
+
+car_scale_event_le_conn:
+3651 58000000 setarg disable_24g 
+3652 20403220 call g24_store_mem_24g_mode 
+3653 20203656 branch car_scale_process_conn 
+
+car_g24_connected:
+3654 680147eb fetch 2 ,mem_car_24g_no_data_timeout_count 
+3655 600147ed store 2 ,mem_car_24g_no_data_timeout_timer 
+
+car_scale_process_conn:
+3656 7047ce14 jam 0x14 ,mem_car_notify_vdd_timer 
+3657 70409100 jam 0 ,mem_lpm_mode 
+3658 204033f8 call app_ble_stop_adv 
+3659 20403416 call app_lpm_mult_enable 
+365a 6800c7bd fetch 1 ,mem_car_config_pairing_led_conn_status 
+365b c000b65e beq 0x01 ,car_pairing_led_conn_status_setting 
+
+car_scale_process_conn_next:
+365c da200000 arg 0 ,rega 
+365d 20207d14 branch ui_led_on_global 
+
+car_pairing_led_conn_status_setting:
+365e da200000 arg 0 ,rega 
+365f 20207d19 branch ui_led_blink_stop_global 
+
+car_scale_event_le_discon:
+3660 58000002 setarg rx_24g 
+3661 20403220 call g24_store_mem_24g_mode 
+
+car_g24_disconnect:
+3662 58000000 setarg 0 
+3663 6002c79c store 5 ,mem_car_led_control 
+3664 58000004 setarg 4 
+3665 204069d7 call pwm_disable 
+3666 58000005 setarg 5 
+3667 204069d7 call pwm_disable 
+3668 58000014 setarg 20 
+3669 204069d7 call pwm_disable 
+366a 58000015 setarg 21 
+366b 204069d7 call pwm_disable 
+366c 58000016 setarg 22 
+366d 204069d7 call pwm_disable 
+366e 58000007 setarg 7 
+366f 204069d7 call pwm_disable 
+3670 20407e38 call queue_init 
+3671 70475e0a jam 10 ,mem_motor1_speed 
+3672 7047600a jam 10 ,mem_motor2_speed 
+3673 7047620a jam 10 ,mem_motor3_speed 
+3674 70417202 jam 2 ,mem_lpm_mult 
+3675 da200000 arg 0 ,rega 
+3676 20407d1e call ui_led_blink_start_global 
+3677 58000020 setarg fast_adv_interval_value_car 
+3678 204046f0 call shutter_ble_adv_interval_set 
+3679 202033fa branch app_ble_start_adv 
+
+car_le_bb_event_timer:
+367a 2040373b call car_moto1_blank_data_timer 
+367b 2040373e call car_moto2_blank_data_timer 
+367c 20403741 call car_moto3_blank_data_timer 
+367d 2040337b call app_power_timer 
+367e 204036c8 call car_led_control_timer 
+367f 204036a1 call car_notify_vdd_timer 
+3680 2040368a call car_24g_no_data_timeout_timer 
+3681 20403683 call car_ir_breakdown_timer 
+3682 2020368f branch car_attack_shake_timer 
+
+car_ir_breakdown_timer:
+3683 da60479a arg mem_car_ir_breakdown_check_timer ,regc 
+3684 da403686 arg car_ir_breakdown_timeout ,regb 
+3685 2020336d branch timer_single_step 
+
+car_ir_breakdown_timeout:
+3686 20403847 call car_ir_gpio_get_status 
+3687 24608000 nrtn true 
+3688 70479b01 jam 1 ,mem_car_ir_breakdown_flag 
+3689 20600000 rtn 
+
+car_24g_no_data_timeout_timer:
+368a da6047ed arg mem_car_24g_no_data_timeout_timer ,regc 
+368b da40368d arg car_24g_no_data_timer_timeout ,regb 
+368c 20203374 branch timer_single_step_2b 
+
+car_24g_no_data_timer_timeout:
+368d 7047ea02 jam work_search ,mem_car_24g_status 
+368e 20203662 branch car_g24_disconnect 
+
+car_attack_shake_timer:
+368f da6047f1 arg mem_car_attack_shake_timer ,regc 
+3690 da403692 arg car_attack_shake ,regb 
+3691 2020336d branch timer_single_step 
+
+car_attack_shake:
+3692 6800c7f2 fetch 1 ,mem_car_attack_shake_flag 
+3693 203a369e branch car_attack_shake_stop ,blank 
+3694 7047f102 jam 2 ,mem_car_attack_shake_timer 
+3695 7047f200 jam 0 ,mem_car_attack_shake_flag 
+3696 58000a02 setarg 0x0a02 
+3697 60014752 store 2 ,mem_le_receive_payload 
+3698 6800c7b9 fetch 1 ,mem_car_config_device_select 
+3699 c001b69b beq device_battle_tank ,car_attack_shake_front_battle_tank 
+
+car_attack_shake_front_battle_car:
+369a 20203762 branch car_motor_control 
+
+car_attack_shake_front_battle_tank:
+369b 58000a02 setarg 0x0a02 
+369c 60014754 store 2 ,mem_le_receive_payload + 2 
+369d 20203762 branch car_motor_control 
+
+car_attack_shake_stop:
+369e 58000000 setarg 0 
+369f 60024752 store 4 ,mem_le_receive_payload 
+36a0 20203762 branch car_motor_control 
+
+car_notify_vdd_timer:
+36a1 6800c7c8 fetch 1 ,mem_car_config_bat_notify_enable 
+36a2 207a0000 rtn blank 
+36a3 68014682 fetch 2 ,mem_ui_state_map 
+36a4 c304b6c6 bbit0 ui_state_ble_connected ,car_low_bat_led_off 
+36a5 da6047ce arg mem_car_notify_vdd_timer ,regc 
+36a6 da4036a8 arg car_notify_vdd ,regb 
+36a7 2020336d branch timer_single_step 
+
+car_notify_vdd:
+36a8 6800c7cd fetch 1 ,mem_car_notify_vdd_count 
+36a9 6000c7ce store 1 ,mem_car_notify_vdd_timer 
+36aa 6800c7d1 fetch 1 ,mem_car_working_flag 
+36ab 247a0000 nrtn blank 
+
+car_read_hvin:
+36ac 204068eb call adc_set_mode 
+36ad 20406908 call vdd_calculate_by_mode 
+36ae 600147e8 store 2 ,mem_vdd_now_vol 
+36af da2047e2 arg mem_vdd_calculate_set ,rega 
+36b0 20406930 call adc_bat_percent_lowpower_out 
+36b1 6808c7cf fetcht 1 ,mem_car_notify_vdd_value_last 
+36b2 98467c00 isub temp ,null 
+36b3 202136b6 branch car_notify_vdd_next2 ,positive 
+36b4 6000c7cf store 1 ,mem_car_notify_vdd_value_last 
+36b5 1fe20400 copy pdata ,temp 
+
+car_notify_vdd_next2:
+36b6 6008c7d0 storet 1 ,mem_car_notify_vdd_percent 
+36b7 6800c7ca fetch 1 ,mem_car_config_low_voltage_percent 
+36b8 98467c00 isub temp ,null 
+36b9 204136c1 call car_enter_low_bat ,positive 
+36ba 6008c7db storet 1 ,mem_notify_bat_payload 
+36bb df200006 arg 6 ,loopcnt 
+36bc d8c047d6 arg mem_notify_bat_head ,contr 
+36bd 204036f0 call calc_check_sum_start 
+36be 6000c7dc store 1 ,mem_notify_bat_check_sum 
+36bf da2047d3 arg mem_notify_bat_packet ,rega 
+36c0 20207e3d branch queue_push 
+
+car_enter_low_bat:
+36c1 6800c7d2 fetch 1 ,mem_low_bat_flag 
+36c2 247a0000 nrtn blank 
+36c3 7047d201 jam 1 ,mem_low_bat_flag 
+36c4 da200001 arg 1 ,rega 
+36c5 20207d1e branch ui_led_blink_start_global 
+
+car_low_bat_led_off:
+36c6 da200001 arg 1 ,rega 
+36c7 20207d19 branch ui_led_blink_stop_global 
+
+car_led_control_timer:
+36c8 da6047a4 arg mem_car_led_control_timer ,regc 
+36c9 da4036cb arg car_led_control ,regb 
+36ca 2020336d branch timer_single_step 
+
+car_led_control:
+36cb 7047a405 jam 5 ,mem_car_led_control_timer 
+36cc 7047a600 jam 0 ,mem_car_led_no 
+36cd 6800c7a5 fetch 1 ,mem_car_led_blink_status 
+36ce c000b6ee beq led_on ,car_led_control_blink_off 
+36cf c00036ec beq led_off ,car_led_control_blink_on 
+
+car_led_control_set:
+36d0 d8c0479c arg mem_car_led_control ,contr 
+36d1 18c22200 copy contr ,rega 
+36d2 df200008 arg 8 ,loopcnt 
+
+car_led_control_timer_next:
+36d3 1a220c00 copy rega ,contr 
+36d4 e8c08000 ifetch 1 ,contr 
+36d5 18c22200 copy contr ,rega 
+36d6 c00036e3 beq led_off ,car_led_control_off 
+36d7 c000b6e6 beq led_on ,car_led_control_on 
+36d8 c00136e9 beq led_blink ,car_led_control_blink 
+
+car_led_control_timer_next_2:
+36d9 6800c7a6 fetch 1 ,mem_car_led_no 
+36da 1fe0fe01 increase 1 ,pdata 
+36db 6000c7a6 store 1 ,mem_car_led_no 
+36dc c20036d3 loop car_led_control_timer_next 
+36dd 20600000 rtn 
+
+car_led_switch:
+36de 6800c7a6 fetch 1 ,mem_car_led_no 
+36df da4047c0 arg mem_car_config_blood_led_gpio ,regb 
+36e0 9a40a400 iadd regb ,regb 
+36e1 ea488000 ifetcht 1 ,regb 
+36e2 20600000 rtn 
+
+car_led_control_off:
+36e3 204036de call car_led_switch 
+36e4 20406825 call gpio_out_inactive 
+36e5 202036d9 branch car_led_control_timer_next_2 
+
+car_led_control_on:
+36e6 204036de call car_led_switch 
+36e7 20406829 call gpio_out_active 
+36e8 202036d9 branch car_led_control_timer_next_2 
+
+car_led_control_blink:
+36e9 6800c7a5 fetch 1 ,mem_car_led_blink_status 
+36ea c000b6e3 beq led_on ,car_led_control_off 
+36eb 202036e6 branch car_led_control_on 
+
+car_led_control_blink_on:
+36ec 7047a501 jam led_on ,mem_car_led_blink_status 
+36ed 202036d0 branch car_led_control_set 
+
+car_led_control_blink_off:
+36ee 7047a500 jam led_off ,mem_car_led_blink_status 
+36ef 202036d0 branch car_led_control_set 
+
+calc_check_sum_start:
+36f0 da200000 arg 0 ,rega 
+
+calc_check_sum_loop:
+36f1 e8c08000 ifetch 1 ,contr 
+36f2 9a20a200 iadd rega ,rega 
+36f3 c20036f1 loop calc_check_sum_loop 
+
+calc_check_sum_and:
+36f4 1a217eff and rega ,0xff ,pdata 
+36f5 20600000 rtn 
+
+car_le_receive_data:
+36f6 68008477 fetch 1 ,mem_le_att_opcode 
+36f7 c00936f9 beq attop_write_request ,car_le_parse_att_write_request 
+36f8 20600000 rtn 
+
+car_le_parse_att_write_request:
+36f9 68010478 fetch 2 ,mem_le_att_handle 
+36fa c00a3710 beq att_car_control_handle ,car_control_le_receive 
+36fb 20600000 rtn 
+
+le_app_receive_data:
+36fc 44e8401a bpatch patch1a_0 ,mem_patch1a 
+36fd ea228000 ifetch 5 ,rega 
+36fe 60028b12 store 5 ,mem_app_receive_temp 
+36ff 68010b12 fetch 2 ,mem_app_receive_temp 
+3700 d8406b5a arg le_receive_packet_head ,temp 
+3701 98467c00 isub temp ,null 
+3702 24628000 nrtn zero 
+3703 68010b15 fetch 2 ,mem_app_receive_temp + 3 
+3704 1ff0fe00 byteswap pdata ,pdata 
+3705 60010b15 store 2 ,mem_app_receive_temp + 3 
+3706 1fe27200 copy pdata ,loopcnt 
+3707 1a20a205 increase 5 ,rega 
+3708 1a220c00 copy rega ,contr 
+3709 d8a00b17 arg mem_app_receive_temp + 5 ,contw 
+370a 20407f01 call memcpy 
+370b e8c08000 ifetch 1 ,contr 
+370c 60008b21 store 1 ,mem_app_receive_temp + 15 
+370d da200b14 arg mem_app_receive_temp + 2 ,rega 
+370e da400b17 arg mem_app_receive_temp + 5 ,regb 
+370f 20600000 rtn 
+
+car_control_le_receive:
+3710 58000000 setarg 0 
+3711 6002c752 store 5 ,mem_le_receive_payload 
+3712 6002c757 store 5 ,mem_le_receive_payload + 5 
+3713 204036fc call le_app_receive_data 
+3714 1a420c00 copy regb ,contr 
+3715 d8a04752 arg mem_le_receive_payload ,contw 
+3716 df20000a arg 10 ,loopcnt 
+3717 20407f01 call memcpy 
+
+car_receive_cmd_select:
+3718 44e8c01a bpatch patch1a_1 ,mem_patch1a 
+3719 ea208000 ifetch 1 ,rega 
+371a c001374a beq car_cmd_old_car_control ,car_drive_old 
+371b c001b75c beq car_cmd_old_speed_control ,car_speed_set_old 
+371c c0023762 beq car_cmd_l_r_motor_control ,car_motor_control 
+371d c002b762 beq car_cmd_f_b_motor_control ,car_motor_control 
+371e c00337b1 beq car_cmd_ir_control ,car_ir_data_rx_from_app 
+371f c003b849 beq car_cmd_led_control ,car_led_control_receive 
+3720 c004384c beq car_cmd_device_info ,car_info_request 
+3721 20600000 rtn 
+
+car_24g_receive_data:
+3722 68014682 fetch 2 ,mem_ui_state_map 
+3723 c3848000 rtnbit1 ui_state_ble_connected 
+3724 680147eb fetch 2 ,mem_car_24g_no_data_timeout_count 
+3725 600147ed store 2 ,mem_car_24g_no_data_timeout_timer 
+3726 7049f601 jam work_paired ,mem_car_24g_received_pac 
+3727 5800010c setarg offset_24g_rxdata_temp_add3 
+3728 204032cd call g24_set_rega 
+3729 20403710 call car_control_le_receive 
+372a 68008b14 fetch 1 ,mem_app_receive_temp + 2 
+372b c002372e beq car_cmd_l_r_motor_control ,car_24g_receive_data_next 
+372c c002b72e beq car_cmd_f_b_motor_control ,car_24g_receive_data_next 
+372d 20600000 rtn 
+
+car_24g_receive_data_next:
+372e 6800c752 fetch 1 ,mem_le_receive_payload 
+372f 245a3735 ncall car_moto1_enable_blank_data_timer ,blank 
+3730 6800c754 fetch 1 ,mem_le_receive_payload + 2 
+3731 245a3737 ncall car_moto2_enable_blank_data_timer ,blank 
+3732 6800c756 fetch 1 ,mem_le_receive_payload + 4 
+3733 245a3739 ncall car_moto3_enable_blank_data_timer ,blank 
+3734 20600000 rtn 
+
+car_moto1_enable_blank_data_timer:
+3735 7049f305 jam 5 ,mem_car_moto1_blank_timer 
+3736 20600000 rtn 
+
+car_moto2_enable_blank_data_timer:
+3737 7049f405 jam 5 ,mem_car_moto2_blank_timer 
+3738 20600000 rtn 
+
+car_moto3_enable_blank_data_timer:
+3739 7049f505 jam 5 ,mem_car_moto3_blank_timer 
+373a 20600000 rtn 
+
+car_moto1_blank_data_timer:
+373b da6049f3 arg mem_car_moto1_blank_timer ,regc 
+373c da403744 arg car_moto1_blank_data ,regb 
+373d 2020336d branch timer_single_step 
+
+car_moto2_blank_data_timer:
+373e da6049f4 arg mem_car_moto2_blank_timer ,regc 
+373f da403746 arg car_moto2_blank_data ,regb 
+3740 2020336d branch timer_single_step 
+
+car_moto3_blank_data_timer:
+3741 da6049f5 arg mem_car_moto3_blank_timer ,regc 
+3742 da403748 arg car_moto3_blank_data ,regb 
+3743 2020336d branch timer_single_step 
+
+car_moto1_blank_data:
+3744 70475200 jam 0 ,mem_le_receive_payload 
+3745 20203762 branch car_motor_control 
+
+car_moto2_blank_data:
+3746 70475400 jam 0 ,mem_le_receive_payload + 2 
+3747 20203762 branch car_motor_control 
+
+car_moto3_blank_data:
+3748 70475600 jam 0 ,mem_le_receive_payload + 4 
+3749 20203762 branch car_motor_control 
+
+car_drive_old:
+374a 2040374c call car_left_right_control_old 
+374b 2020374f branch car_front_back_control_old 
+
+car_left_right_control_old:
+374c 6800c752 fetch 1 ,mem_le_receive_payload 
+374d 6000c75f store 1 ,mem_motor2_status 
+374e 20203773 branch car_motor2_control 
+
+car_front_back_control_old:
+374f 6800c75e fetch 1 ,mem_motor1_speed 
+3750 20403754 call car_reset_old_speed 
+3751 6800c753 fetch 1 ,mem_le_receive_payload + 1 
+3752 6000c75d store 1 ,mem_motor1_status 
+3753 20203770 branch car_motor1_control 
+
+car_reset_old_speed:
+3754 c0013758 beq speed_level_2 ,car_reset_old_speed2 
+3755 c001b75a beq speed_level_3 ,car_reset_old_speed3 
+3756 6000c75e store 1 ,mem_motor1_speed 
+3757 20600000 rtn 
+
+car_reset_old_speed2:
+3758 70475e05 jam speed_level_5 ,mem_motor1_speed 
+3759 20600000 rtn 
+
+car_reset_old_speed3:
+375a 70475e0a jam speed_level_10 ,mem_motor1_speed 
+375b 20600000 rtn 
+
+car_speed_set_old:
+375c 6800c752 fetch 1 ,mem_le_receive_payload 
+375d 20403754 call car_reset_old_speed 
+375e 6800c75e fetch 1 ,mem_motor1_speed 
+375f 2040379e call car_motor_speed_duty_setting 
+3760 204037a1 call car_motor_speed_duty_transform 
+3761 202069c4 branch pwm_pwm0_duty_set 
+
+car_motor_control:
+3762 6800c7f0 fetch 1 ,mem_car_24g_go_die_flag 
+3763 247a0000 nrtn blank 
+3764 68034752 fetch 6 ,mem_le_receive_payload 
+3765 6003475d store 6 ,mem_motor1_status 
+3766 6800c75e fetch 1 ,mem_motor1_speed 
+3767 6808c760 fetcht 1 ,mem_motor2_speed 
+3768 98417e00 iand temp ,pdata 
+3769 6808c762 fetcht 1 ,mem_motor3_speed 
+376a 98417e00 iand temp ,pdata 
+376b 205a3779 call car_motor_working_flag ,blank 
+376c 44e9401a bpatch patch1a_2 ,mem_patch1a 
+376d 20403770 call car_motor1_control 
+376e 20403773 call car_motor2_control 
+376f 20203776 branch car_motor3_control 
+
+car_motor1_control:
+3770 da404763 arg mem_motor1_pwm_set ,regb 
+3771 d8c0475d arg mem_motor1_status ,contr 
+3772 2020377b branch car_motor_status_select 
+
+car_motor2_control:
+3773 da40476b arg mem_motor2_pwm_set ,regb 
+3774 d8c0475f arg mem_motor2_status ,contr 
+3775 2020377b branch car_motor_status_select 
+
+car_motor3_control:
+3776 da404773 arg mem_motor3_pwm_set ,regb 
+3777 d8c04761 arg mem_motor3_status ,contr 
+3778 2020377b branch car_motor_status_select 
+
+car_motor_working_flag:
+3779 7047d100 jam 0 ,mem_car_working_flag 
+377a 20600000 rtn 
+
+car_motor_status_select:
+377b e8c08000 ifetch 1 ,contr 
+377c c0003787 beq motor_stop ,car_motor_stop 
+377d c000b780 beq go_front ,car_motor_positive 
+377e c0013782 beq go_back ,car_motor_negative 
+377f 20600000 rtn 
+
+car_motor_positive:
+3780 70477b00 jam 0 ,mem_motor_select_p_n 
+3781 20203783 branch car_motor_negative + 1 
+
+car_motor_negative:
+3782 70477b01 jam 1 ,mem_motor_select_p_n 
+3783 e8c08000 ifetch 1 ,contr 
+3784 6000c77d store 1 ,mem_car_motor_speed 
+3785 ea440000 ifetch 8 ,regb 
+3786 2020378c branch car_motor_work 
+
+car_motor_stop:
+3787 ea408000 ifetch 1 ,regb 
+3788 204069d7 call pwm_disable 
+3789 1a40a401 increase 1 ,regb 
+378a ea408000 ifetch 1 ,regb 
+378b 202069d7 branch pwm_disable 
+
+car_motor_work:
+378c 6004477e store 8 ,mem_motor_pwm_pin1_set 
+378d 7047d101 jam 1 ,mem_car_working_flag 
+378e 6800c77b fetch 1 ,mem_motor_select_p_n 
+378f c000379a beq 0 ,car_motor_select_positive 
+
+car_motor_select_negative:
+3790 6800c77f fetch 1 ,mem_motor_pwm_pin2_set 
+3791 6000c780 store 1 ,mem_motor_pwm_pin_set 
+3792 6800c77e fetch 1 ,mem_motor_pwm_pin1_set 
+
+car_motor_work_next:
+3793 204069d7 call pwm_disable 
+3794 6800c77d fetch 1 ,mem_car_motor_speed 
+3795 2040379e call car_motor_speed_duty_setting 
+3796 6000c785 store 1 ,mem_motor_pwm_dute_set 
+3797 68034780 fetch 6 ,mem_motor_pwm_pin_set 
+3798 60030a9a store 6 ,mem_pdatatemp 
+3799 202069ae branch pwm_out_set 
+
+car_motor_select_positive:
+379a 6800c77e fetch 1 ,mem_motor_pwm_pin1_set 
+379b 6000c780 store 1 ,mem_motor_pwm_pin_set 
+379c 6800c77f fetch 1 ,mem_motor_pwm_pin2_set 
+379d 20203793 branch car_motor_work_next 
+
+car_motor_speed_duty_setting:
+379e 1feffe05 mul32 pdata ,5 ,pdata 
+379f 1fe0fe32 add pdata ,50 ,pdata 
+37a0 20600000 rtn 
+
+car_motor_speed_duty_transform:
+37a1 d8402ee0 arg 12000 ,temp 
+37a2 984ffe00 imul32 temp ,pdata 
+37a3 1fe6fc64 div pdata ,100 
+37a4 20407f86 call wait_div_end 
+37a5 18078400 quotient temp 
+37a6 18422200 copy temp ,rega 
+37a7 58002ee0 setarg 12000 
+37a8 98462400 isub temp ,regb 
+37a9 20600000 rtn 
+
+car_ir_init:
+37aa 68108082 hfetch 1 ,core_gpio_sel2 
+37ab 79207e02 set1 2 ,pdata 
+37ac 60108082 hstore 1 ,core_gpio_sel2 
+37ad 5800009e setarg 158 
+37ae 60110068 hstore 2 ,core_pwm_pcnt4 
+37af 6011006a hstore 2 ,core_pwm_ncnt4 
+37b0 20600000 rtn 
+
+car_ir_data_rx_from_app:
+37b1 6800c7f0 fetch 1 ,mem_car_24g_go_die_flag 
+37b2 247a0000 nrtn blank 
+37b3 68014752 fetch 2 ,mem_le_receive_payload 
+37b4 60014787 store 2 ,mem_ir_data 
+37b5 6800c7ea fetch 1 ,mem_car_24g_status 
+37b6 c080b7b9 bne work_paired ,car_ir_data_tx 
+37b7 680144a0 fetch 2 ,mem_le_lap 
+37b8 60014787 store 2 ,mem_ir_data 
+
+car_ir_data_tx:
+37b9 44e9c01a bpatch patch1a_3 ,mem_patch1a 
+37ba 204037aa call car_ir_init 
+37bb 204037dc call car_ir_enable 
+37bc 5800bb80 setarg 48000 
+37bd 20402a8f call sleep 
+37be 204037e0 call car_ir_disable 
+37bf 58001c20 setarg 7200 
+37c0 20402a8f call sleep 
+37c1 df200010 arg 16 ,loopcnt 
+
+car_ir_send_loop:
+37c2 204037dc call car_ir_enable 
+37c3 68014787 fetch 2 ,mem_ir_data 
+37c4 c28037c9 bbit1 0 ,car_ir_is_bit1 
+37c5 58001c20 setarg 7200 
+37c6 20402a8f call sleep 
+37c7 204037e0 call car_ir_disable 
+37c8 202037cc branch car_ir_wait_finish 
+
+car_ir_is_bit1:
+37c9 58003840 setarg 14400 
+37ca 20402a8f call sleep 
+37cb 204037e0 call car_ir_disable 
+
+car_ir_wait_finish:
+37cc 58001c20 setarg 7200 
+37cd 20402a8f call sleep 
+37ce 68014787 fetch 2 ,mem_ir_data 
+37cf 1fe37e00 rshift pdata ,pdata 
+37d0 60014787 store 2 ,mem_ir_data 
+37d1 c20037c2 loop car_ir_send_loop 
+37d2 7047f102 jam 2 ,mem_car_attack_shake_timer 
+37d3 7047f201 jam 1 ,mem_car_attack_shake_flag 
+37d4 58000a01 setarg 0x0a01 
+37d5 60014752 store 2 ,mem_le_receive_payload 
+37d6 6800c7b9 fetch 1 ,mem_car_config_device_select 
+37d7 c001b7d9 beq device_battle_tank ,car_attack_shake_back_battle_tank 
+
+car_attack_shake_back_battle_car:
+37d8 20203762 branch car_motor_control 
+
+car_attack_shake_back_battle_tank:
+37d9 58000a01 setarg 0x0a01 
+37da 60014754 store 2 ,mem_le_receive_payload + 2 
+37db 20203762 branch car_motor_control 
+
+car_ir_enable:
+37dc 68108085 hfetch 1 ,core_gpio_key2 
+37dd 1fe1fe40 or_into 0x40 ,pdata 
+37de 60108085 hstore 1 ,core_gpio_key2 
+37df 20600000 rtn 
+
+car_ir_disable:
+37e0 68108085 hfetch 1 ,core_gpio_key2 
+37e1 1fe17ebf and_into 0xbf ,pdata 
+37e2 60108085 hstore 1 ,core_gpio_key2 
+37e3 20600000 rtn 
+
+car_ir_rx_init:
+37e4 6800c7bb fetch 1 ,mem_car_config_ir_enable 
+37e5 c1000000 rtneq 0x00 
+37e6 20402c65 call lpm_disable_exen_output 
+37e7 6808c7bc fetcht 1 ,mem_car_config_ir_rx_gpio 
+37e8 6008c786 storet 1 ,mem_ir_rx_gpio 
+37e9 204067fb call gpio_config_input 
+37ea 20403847 call car_ir_gpio_get_status 
+37eb 24608000 nrtn true 
+37ec 70479a01 jam 1 ,mem_car_ir_breakdown_check_timer 
+37ed 20600000 rtn 
+
+car_ir_receive_process:
+37ee 6800c7bb fetch 1 ,mem_car_config_ir_enable 
+37ef c1000000 rtneq flag_ir_disable 
+37f0 6800c79b fetch 1 ,mem_car_ir_breakdown_flag 
+37f1 247a0000 nrtn blank 
+37f2 68014682 fetch 2 ,mem_ui_state_map 
+37f3 c284b7f6 bbit1 ui_state_ble_connected ,car_ir_receive_process_next 
+37f4 6800c7ea fetch 1 ,mem_car_24g_status 
+37f5 c1808000 rtnne work_paired 
+
+car_ir_receive_process_next:
+37f6 44ea401a bpatch patch1a_4 ,mem_patch1a 
+37f7 20403847 call car_ir_gpio_get_status 
+37f8 24608000 nrtn true 
+37f9 58008ca0 setarg 36000 
+37fa 20402a8f call sleep 
+37fb 20403847 call car_ir_gpio_get_status 
+37fc 24608000 nrtn true 
+37fd 2040383f call car_ir_clk_get 
+
+car_ir_packet_head_wait_end:
+37fe 20403842 call car_ir_clk_check 
+37ff 24610000 nrtn positive 
+3800 20403847 call car_ir_gpio_get_status 
+3801 2020b7fe branch car_ir_packet_head_wait_end ,true 
+3802 da200000 arg 0 ,rega 
+3803 df200010 arg 16 ,loopcnt 
+3804 2040383f call car_ir_clk_get 
+
+car_ir_receive_process_loop:
+3805 20403842 call car_ir_clk_check 
+3806 24610000 nrtn positive 
+3807 20403847 call car_ir_gpio_get_status 
+3808 2420b805 nbranch car_ir_receive_process_loop ,true 
+3809 58002a30 setarg 10800 
+380a 20402a8f call sleep 
+380b 20403847 call car_ir_gpio_get_status 
+380c 2020b812 branch car_ir_get_bit1 ,true 
+
+car_ir_get_bit0:
+380d 58000000 setarg 0 
+380e 1a232200 rshift rega ,rega 
+380f 9a21a200 ior rega ,rega 
+3810 c2003805 loop car_ir_receive_process_loop 
+3811 2020381b branch car_ir_receive_process_end 
+
+car_ir_get_bit1:
+3812 58008000 setarg 0x8000 
+3813 1a232200 rshift rega ,rega 
+3814 9a21a200 ior rega ,rega 
+3815 2040383f call car_ir_clk_get 
+
+car_ir_get_bit1_wait_low_end:
+3816 20403842 call car_ir_clk_check 
+3817 24610000 nrtn positive 
+3818 20403847 call car_ir_gpio_get_status 
+3819 2020b816 branch car_ir_get_bit1_wait_low_end ,true 
+381a c2003805 loop car_ir_receive_process_loop 
+
+car_ir_receive_process_end:
+381b 44eac01a bpatch patch1a_5 ,mem_patch1a 
+381c 1a227e00 copy rega ,pdata 
+381d 60014789 store 2 ,mem_ir_rx_buf 
+381e 60014797 store 2 ,mem_ir_notify_data + 8 
+381f 6800c7ea fetch 1 ,mem_car_24g_status 
+3820 c000b827 beq work_paired ,car_ir_24g_receive_attack 
+
+car_ir_data_notify:
+3821 df200007 arg 0x07 ,loopcnt 
+3822 d8c04792 arg mem_ir_notify_data_head ,contr 
+3823 204036f0 call calc_check_sum_start 
+3824 6000c799 store 1 ,mem_ir_notify_data_check_sum 
+3825 da20478f arg mem_ir_notify_data ,rega 
+3826 20207e3d branch queue_push 
+
+car_ir_24g_receive_attack:
+3827 6800c7ef fetch 1 ,mem_car_24g_ir_receive_attack_count 
+3828 1fe0fe01 increase 1 ,pdata 
+3829 6000c7ef store 1 ,mem_car_24g_ir_receive_attack_count 
+382a 1fe6fc02 div pdata ,2 
+382b 20407f86 call wait_div_end 
+382c 18078400 quotient temp 
+382d 18077e00 remainder pdata 
+382e 243a3838 nbranch car_ir_24g_receive_attack_blink ,blank 
+
+car_ir_24g_receive_attack_off:
+382f 6800c7bf fetch 1 ,mem_car_config_led_num 
+3830 98467c00 isub temp ,null 
+3831 2042b83d call car_ir_24g_go_die ,zero 
+3832 dfe0479c arg mem_car_led_control ,pdata 
+3833 184085ff increase -1 ,temp 
+3834 9840a200 iadd temp ,rega 
+3835 dfe00000 arg 0 ,pdata 
+3836 e2208000 istore 1 ,rega 
+3837 20600000 rtn 
+
+car_ir_24g_receive_attack_blink:
+3838 dfe0479c arg mem_car_led_control ,pdata 
+3839 9840a200 iadd temp ,rega 
+383a dfe00002 arg 2 ,pdata 
+383b e2208000 istore 1 ,rega 
+383c 20600000 rtn 
+
+car_ir_24g_go_die:
+383d 7047f001 jam 1 ,mem_car_24g_go_die_flag 
+383e 20600000 rtn 
+
+car_ir_clk_get:
+383f 1c427e00 copy clkn_bt ,pdata 
+3840 6002478b store 4 ,mem_ir_receive_clkn 
+3841 20600000 rtn 
+
+car_ir_clk_check:
+3842 1c427e00 copy clkn_bt ,pdata 
+3843 680a478b fetcht 4 ,mem_ir_receive_clkn 
+3844 98467e00 isub temp ,pdata 
+3845 1fe67cc8 sub pdata ,200 ,null 
+3846 20600000 rtn 
+
+car_ir_gpio_get_status:
+3847 6808c786 fetcht 1 ,mem_ir_rx_gpio 
+3848 2020681d branch gpio_get_bit 
+
+car_led_control_receive:
+3849 68044752 fetch 8 ,mem_le_receive_payload 
+384a 6004479c store 8 ,mem_car_led_control 
+384b 20600000 rtn 
+
+car_info_request:
+384c 6800c7b9 fetch 1 ,mem_car_config_device_select 
+384d 6000c7af store 1 ,mem_car_info_request_payload 
+384e 6800c7ba fetch 1 ,mem_car_config_motor_layout 
+384f 6000c7b0 store 1 ,mem_car_info_request_payload + 1 
+3850 6800c7bb fetch 1 ,mem_car_config_ir_enable 
+3851 6000c7b1 store 1 ,mem_car_info_request_payload + 2 
+3852 df20000d arg 13 ,loopcnt 
+3853 d8c047aa arg mem_car_info_request_head ,contr 
+3854 204036f0 call calc_check_sum_start 
+3855 6000c7b7 store 1 ,mem_car_info_request_checksum 
+3856 da2047a7 arg mem_car_info_request ,rega 
+3857 20207e3d branch queue_push 
+
+light_init:
+3858 204065c2 call clear_eeprom_size_2k 
+3859 7046f67a jam 0x7a ,mem_curr_packet_num 
+385a 2040386d call light_load_controler_list 
+385b 20403867 call light_init_crr_cmd_count 
+385c 58003860 setarg light_pairing_timer 
+385d 600141fd store 2 ,mem_cb_event_timer 
+385e da200000 arg 0 ,rega 
+385f 202069a6 branch pwm_init 
+
+light_pairing_timer:
+3860 680146a1 fetch 2 ,mem_light_pairing_timer 
+3861 207a0000 rtn blank 
+3862 1fe0ffff increase -1 ,pdata 
+3863 600146a1 store 2 ,mem_light_pairing_timer 
+3864 c1800000 rtnne 0 
+3865 7046a000 jam 0 ,mem_light_pairing_enable 
+3866 20600000 rtn 
+
+light_init_crr_cmd_count:
+3867 44eb401a bpatch patch1a_6 ,mem_patch1a 
+3868 6800c6a4 fetch 1 ,mem_light_next_record 
+3869 1fe67c28 sub pdata ,40 ,null 
+386a 20610000 rtn positive 
+386b 7046a400 jam 0 ,mem_light_next_record 
+386c 20600000 rtn 
+
+light_load_controler_list:
+386d da2046a4 arg mem_light_next_record ,rega 
+386e da400000 arg 0 ,regb 
+386f d8400051 arg 81 ,temp 
+3870 202065df branch iicd_read_eep_data 
+
+light_find_controler_pairing:
+3871 78547c00 disable user 
+3872 6800c6a3 fetch 1 ,mem_light_cnum 
+3873 1fe27200 copy pdata ,loopcnt 
+3874 da2046a5 arg mem_light_clist ,rega 
+3875 1a622400 copy regc ,regb 
+
+light_find_controler_pairing_loop:
+3876 44ebc01a bpatch patch1a_7 ,mem_patch1a 
+3877 2040387c call light_compare_addr_record 
+3878 2022ffe7 branch enable_user ,zero 
+
+light_find_single_pairing_diff:
+3879 1a20a204 increase 4 ,rega 
+387a c2003876 loop light_find_controler_pairing_loop 
+387b 20600000 rtn 
+
+light_compare_addr_record:
+387c 44ec401b bpatch patch1b_0 ,mem_patch1b 
+387d ea218000 ifetch 3 ,rega 
+387e ea498000 ifetcht 3 ,regb 
+387f 98467c00 isub temp ,null 
+3880 20600000 rtn 
+
+light_compare_single_record:
+3881 44ecc01b bpatch patch1b_1 ,mem_patch1b 
+3882 ea218000 ifetch 3 ,rega 
+3883 ea498000 ifetcht 3 ,regb 
+3884 98467c00 isub temp ,null 
+3885 24628000 nrtn zero 
+3886 e8c08000 ifetch 1 ,contr 
+3887 1fe67c00 sub pdata ,0 ,null 
+3888 20628000 rtn zero 
+3889 1a208c03 add rega ,3 ,contr 
+388a e8c88000 ifetcht 1 ,contr 
+388b 98467c00 isub temp ,null 
+388c 20600000 rtn 
+
+light_find_controler_cmd:
+388d 44ed401b bpatch patch1b_2 ,mem_patch1b 
+388e 78547c00 disable user 
+388f 6800c6a3 fetch 1 ,mem_light_cnum 
+3890 1fe27200 copy pdata ,loopcnt 
+3891 da2046a5 arg mem_light_clist ,rega 
+3892 1a622400 copy regc ,regb 
+
+light_find_controler_cmd_loop:
+3893 20403881 call light_compare_single_record 
+3894 2022ffe7 branch enable_user ,zero 
+3895 1a20a204 increase 4 ,rega 
+3896 c2003893 loop light_find_controler_cmd_loop 
+3897 20600000 rtn 
+
+light_recv_adv:
+3898 68008004 fetch 1 ,mem_le_scanrsp_rcv 
+3899 1fe0fe01 increase 1 ,pdata 
+389a 60008004 store 1 ,mem_le_scanrsp_rcv 
+389b da6002e5 arg mem_le_rxbuf + 12 ,regc 
+
+light_anylize_command:
+389c ea610000 ifetch 2 ,regc 
+389d d84055aa arg 0x55aa ,temp 
+389e 98467c00 isub temp ,null 
+389f 24628000 nrtn zero 
+38a0 18c22600 copy contr ,regc 
+38a1 ea698000 ifetcht 3 ,regc 
+38a2 58ffffff setarg 0xffffff 
+38a3 98467c00 isub temp ,null 
+38a4 2022b8a8 branch light_parse_cmd ,zero 
+38a5 2040388d call light_find_controler_cmd 
+38a6 203438a8 branch light_parse_cmd ,user 
+38a7 20600000 rtn 
+
+light_parse_cmd:
+38a8 44edc01b bpatch patch1b_3 ,mem_patch1b 
+38a9 1a60a604 increase 4 ,regc 
+38aa ea608000 ifetch 1 ,regc 
+38ab 6808c6f6 fetcht 1 ,mem_curr_packet_num 
+38ac 98467c00 isub temp ,null 
+38ad 20628000 rtn zero 
+38ae 6000c6f6 store 1 ,mem_curr_packet_num 
+38af 68008003 fetch 1 ,mem_le_req_rcv 
+38b0 1fe0fe01 increase 1 ,pdata 
+38b1 60008003 store 1 ,mem_le_req_rcv 
+38b2 1a60a601 increase 1 ,regc 
+38b3 ea608000 ifetch 1 ,regc 
+38b4 6000c6f5 store 1 ,mem_light_crr_cmd_count 
+38b5 1fe27200 copy pdata ,loopcnt 
+38b6 207a0000 rtn blank 
+
+light_parse_cmd_loop:
+38b7 e8c08000 ifetch 1 ,contr 
+38b8 c00038c2 beq light_cmd_pwm0 ,light_parse_cmd_pwm0 
+38b9 c000b8cf beq light_cmd_pwm1 ,light_parse_cmd_pwm1 
+38ba c00138d4 beq light_cmd_pwm2 ,light_parse_cmd_pwm2 
+38bb c001b8d9 beq light_cmd_pwm3 ,light_parse_cmd_pwm3 
+38bc c00238de beq light_cmd_pwm4 ,light_parse_cmd_pwm4 
+38bd c002b8e3 beq light_cmd_pwm5 ,light_parse_cmd_pwm5 
+38be c00338e8 beq light_cmd_auto_mode ,light_parse_auto_mode 
+38bf c07fb8ea beq light_cmd_pairing ,light_parse_pairing 
+38c0 c20038b7 loop light_parse_cmd_loop 
+38c1 20600000 rtn 
+
+light_parse_cmd_pwm0:
+38c2 18c22600 copy contr ,regc 
+38c3 6800c69a fetch 1 ,mem_light_pwm0 
+38c4 60008a9a store 1 ,mem_pdatatemp 
+38c5 d8400000 arg 0 ,temp 
+
+light_parse_cmd_pwm_common:
+38c6 60088a9b storet 1 ,mem_pdatatemp + 1 
+38c7 58002710 setarg 10000 
+38c8 60018a9c store 3 ,mem_pdatatemp + 2 
+38c9 ea608000 ifetch 1 ,regc 
+38ca 60008a9f store 1 ,mem_pdatatemp + 5 
+38cb 204069ae call pwm_out_set 
+38cc 1a610c01 and regc ,1 ,contr 
+38cd c20038b7 loop light_parse_cmd_loop 
+38ce 20600000 rtn 
+
+light_parse_cmd_pwm1:
+38cf 1a620c00 copy regc ,contr 
+38d0 6800c69b fetch 1 ,mem_light_pwm1 
+38d1 60008a9a store 1 ,mem_pdatatemp 
+38d2 d8400001 arg 1 ,temp 
+38d3 202038c6 branch light_parse_cmd_pwm_common 
+
+light_parse_cmd_pwm2:
+38d4 1a620c00 copy regc ,contr 
+38d5 6800c69c fetch 1 ,mem_light_pwm2 
+38d6 60008a9a store 1 ,mem_pdatatemp 
+38d7 d8400002 arg 2 ,temp 
+38d8 202038c6 branch light_parse_cmd_pwm_common 
+
+light_parse_cmd_pwm3:
+38d9 1a620c00 copy regc ,contr 
+38da 6800c69d fetch 1 ,mem_light_pwm3 
+38db 60008a9a store 1 ,mem_pdatatemp 
+38dc d8400003 arg 3 ,temp 
+38dd 202038c6 branch light_parse_cmd_pwm_common 
+
+light_parse_cmd_pwm4:
+38de 1a620c00 copy regc ,contr 
+38df 6800c69e fetch 1 ,mem_light_pwm4 
+38e0 60008a9a store 1 ,mem_pdatatemp 
+38e1 d8400004 arg 4 ,temp 
+38e2 202038c6 branch light_parse_cmd_pwm_common 
+
+light_parse_cmd_pwm5:
+38e3 1a620c00 copy regc ,contr 
+38e4 6800c69f fetch 1 ,mem_light_pwm5 
+38e5 60008a9a store 1 ,mem_pdatatemp 
+38e6 d8400005 arg 5 ,temp 
+38e7 202038c6 branch light_parse_cmd_pwm_common 
+
+light_parse_auto_mode:
+38e8 e8c08000 ifetch 1 ,contr 
+38e9 20600000 rtn 
+
+light_parse_pairing:
+38ea 18c22600 copy contr ,regc 
+38eb 6800c6a0 fetch 1 ,mem_light_pairing_enable 
+38ec c080b8ee bne 1 ,light_parse_pairing_abandon 
+38ed 204038f0 call update_controler_list 
+
+light_parse_pairing_abandon:
+38ee 1a610c04 and regc ,4 ,contr 
+38ef 20600000 rtn 
+
+update_controler_list:
+38f0 44ee401b bpatch patch1b_4 ,mem_patch1b 
+38f1 20403871 call light_find_controler_pairing 
+38f2 203438fe branch update_conrtoler_list_found ,user 
+38f3 6800c6a4 fetch 1 ,mem_light_next_record 
+38f4 1fe20400 copy pdata ,temp 
+38f5 1fe0fe01 increase 1 ,pdata 
+38f6 6000c6a4 store 1 ,mem_light_next_record 
+38f7 20403867 call light_init_crr_cmd_count 
+38f8 184b8400 lshift2 temp ,temp 
+38f9 580046a5 setarg mem_light_clist 
+38fa 98408a00 iadd temp ,contw 
+38fb ea620000 ifetch 4 ,regc 
+38fc e0a20000 istore 4 ,contw 
+38fd 20203903 branch update_conrtoler_store_list 
+
+update_conrtoler_list_found:
+38fe 1a608c03 add regc ,3 ,contr 
+38ff e8c08000 ifetch 1 ,contr 
+3900 207a0000 rtn blank 
+3901 ea620000 ifetch 4 ,regc 
+3902 e2220000 istore 4 ,rega 
+
+update_conrtoler_store_list:
+3903 da2046a4 arg mem_light_next_record ,rega 
+3904 da400000 arg 0 ,regb 
+3905 d8400051 arg 81 ,temp 
+3906 20206606 branch iicd_write_eep_data 
+
+lightc_init:
+3907 6808c69a fetcht 1 ,mem_lightc_led_gpio 
+3908 20406825 call gpio_out_inactive 
+3909 20600000 rtn 
+
+lightc_dispatch:
+390a 6808c69a fetcht 1 ,mem_lightc_led_gpio 
+390b 20406829 call gpio_out_active 
+390c 6808c69a fetcht 1 ,mem_lightc_led_gpio 
+390d 20406825 call gpio_out_inactive 
+390e 2040391d call lightc_start_adv 
+390f 6800c6a7 fetch 1 ,mem_adv_time 
+3910 247a0000 nrtn blank 
+3911 20402c29 call lpm_write_gpio_wakeup 
+3912 68120138 hfetch 4 ,core_lpm_ctrl 
+3913 793ffe0f set0 15 ,pdata 
+3914 6012004c hstore 4 ,core_lpm_reg 
+3915 20402c21 call lpm_write_ctrl 
+3916 d85fffff arg param_hibernate_clks ,temp 
+3917 20202b2a branch lpm_sleep 
+
+lightc_adv:
+3918 6800c6a7 fetch 1 ,mem_adv_time 
+3919 203a56f9 branch le_adv_loop_tx ,blank 
+391a 1fe0ffff increase -1 ,pdata 
+391b 6000c6a7 store 1 ,mem_adv_time 
+391c 202056f9 branch le_adv_loop_tx 
+
+lightc_start_adv:
+391d 1feffe14 mul32 pdata ,20 ,pdata 
+391e d8c046a8 arg mem_cmd0_string ,contr 
+391f 98c08c00 iadd contr ,contr 
+3920 e8c08000 ifetch 1 ,contr 
+3921 207a0000 rtn blank 
+3922 1fe22200 copy pdata ,rega 
+3923 1a227200 copy rega ,loopcnt 
+3924 d8a04372 arg mem_le_adv_data + 2 ,contw 
+3925 20407f01 call memcpy 
+3926 1a227e00 copy rega ,pdata 
+3927 1fe0fe02 increase 2 ,pdata 
+3928 6000c36f store 1 ,mem_le_adv_data_len 
+3929 20600000 rtn 
+
+module_init:
+392a 20758000 rtn wake 
+392b 204057a3 call le_modified_name 
+392c 204068a8 call adc_init_data 
+392d 58003982 setarg module_process_idle 
+392e 600141f3 store 2 ,mem_cb_idle_process 
+392f 5800396e setarg module_bt_conn_process 
+3930 600141f1 store 2 ,mem_cb_bt_process 
+3931 58003986 setarg module_process_bb_event 
+3932 600141f5 store 2 ,mem_cb_bb_event_process 
+3933 5800396d setarg module_le_conn_process 
+3934 600141ef store 2 ,mem_cb_le_process 
+3935 58003969 setarg module_lpm_lock 
+3936 600141e9 store 2 ,mem_cb_check_wakelock 
+3937 58003ab7 setarg module_hci_cmd_transmit_le_notify 
+3938 600141fb store 2 ,mem_cb_ble_transmit 
+3939 58003c32 setarg module_hci_event_receive_spp_data 
+393a 6001456f store 2 ,mem_cb_receive_spp_data 
+393b 58003cc2 setarg module_le_receive_data 
+393c 600141f9 store 2 ,mem_cb_att_write 
+393d 58003cd7 setarg module_bb_event_timer 
+393e 600141fd store 2 ,mem_cb_event_timer 
+393f 2040397f call module_spp_clear_last_transmite_clock 
+3940 44eec01b bpatch patch1b_5 ,mem_patch1b 
+3941 20403945 call module_lpm_uart_init 
+3942 20403964 call module_gpio_init 
+3943 20402c6f call check_module_disabled 
+3944 20203c48 branch module_hci_event_enter_standby_mode 
+
+module_lpm_uart_init:
+3945 680246aa fetch 4 ,mem_module_uart_rx_buffer 
+3946 60120054 hstore 4 ,core_uart_rsaddr 
+3947 680246ae fetch 4 ,mem_module_uart_tx_buffer 
+3948 6012005a hstore 4 ,core_uart_tsaddr 
+3949 68108081 hfetch 1 ,core_gpio_sel1 
+394a 1fe1fe04 or_into 0x04 ,pdata 
+394b 1fe17efc and_into 0xfc ,pdata 
+394c 60108081 hstore 1 ,core_gpio_sel1 
+394d 70806200 jam 0x00 ,core_uart_ctrl 
+394e 680146aa fetch 2 ,mem_module_uart_rx_buffer 
+394f 60110058 hstore 2 ,core_uart_rrptr 
+3950 680146ae fetch 2 ,mem_module_uart_tx_buffer 
+3951 6011005e hstore 2 ,core_uart_twptr 
+3952 60110060 hstore 2 ,core_uart_trptrp 
+3953 68120078 hfetch 4 ,core_gpio_pu0 
+3954 79207e07 set1 7 ,pdata 
+3955 60120078 hstore 4 ,core_gpio_pu0 
+3956 68110050 hfetch 2 ,core_clkoff 
+3957 793ffe0f set0 clock_off_uart ,pdata 
+3958 60110050 hstore 2 ,core_clkoff 
+3959 204066ce call uart_set_baud_by_mem 
+395a 70804300 jam uartclk_crystal ,core_uart_clksel 
+395b 70806281 jam uart_ctrl_h4 ,core_uart_ctrl 
+395c 6800c6bf fetch 1 ,mem_module_flag 
+395d 2feffe00 isolate1 module_flag_uart_flow_control ,pdata 
+395e 68188062 hfetcht 1 ,core_uart_ctrl 
+395f 79208404 setflag true ,4 ,temp 
+3960 60188062 hstoret 1 ,core_uart_ctrl 
+3961 20600000 rtn 
+
+module_lpm_init:
+3962 2040397f call module_spp_clear_last_transmite_clock 
+3963 20203945 branch module_lpm_uart_init 
+
+module_gpio_init:
+3964 6808c69e fetcht 1 ,mem_module_connect_state_gpio 
+3965 2040680e call gpio_config_output 
+3966 204039e6 call module_set_conn_pin_low 
+3967 6808c69c fetcht 1 ,mem_module_wake_up_gpio 
+3968 202067fb branch gpio_config_input 
+
+module_lpm_lock:
+3969 6808c69c fetcht 1 ,mem_module_wake_up_gpio 
+396a 2040681d call gpio_get_bit 
+396b 2420b3d2 nbranch app_put_lpm_wake_lock ,true 
+396c 202033d0 branch app_get_lpm_wake_lock 
+
+module_le_conn_process:
+396d 20600000 rtn 
+
+module_bt_conn_process:
+396e 20403970 call module_spp_enter_sniff 
+396f 20203ce9 branch module_control_air_flow 
+
+module_spp_enter_sniff:
+3970 6800c682 fetch 1 ,mem_ui_state_map 
+3971 c302397f bbit0 ui_state_bt_spp_conn ,module_spp_clear_last_transmite_clock 
+3972 44ef401b bpatch patch1b_6 ,mem_patch1b 
+3973 58003eff setarg 0x3eff 
+3974 680a46c5 fetcht 4 ,mem_last_transmite_clock 
+3975 98408400 iadd temp ,temp 
+3976 1c427e00 copy clkn_bt ,pdata 
+3977 98467c00 isub temp ,null 
+3978 24610000 nrtn positive 
+3979 68014682 fetch 2 ,mem_ui_state_map 
+397a c282b97f bbit1 ui_state_bt_sniff ,module_spp_clear_last_transmite_clock 
+397b 6800c6bf fetch 1 ,mem_module_flag 
+397c c3830000 rtnbit1 moudle_task_sniff 
+397d 20403cec call module_set_sniff_task_flag 
+397e 2040340e call app_bt_enter_sniff 
+
+module_spp_clear_last_transmite_clock:
+397f 1c427e00 copy clkn_bt ,pdata 
+3980 600246c5 store 4 ,mem_last_transmite_clock 
+3981 20600000 rtn 
+
+module_process_idle:
+3982 20403ce9 call module_control_air_flow 
+3983 2040526e call l2cap_malloc_is_fifo_full 
+3984 247a0000 nrtn blank 
+3985 202039eb branch module_process 
+
+module_process_bb_event:
+3986 1a627e00 copy regc ,pdata 
+3987 c000b9d4 beq bt_evt_bb_connected ,module_process_bb_conn 
+3988 c00139a3 beq bt_evt_bb_disconnected ,module_process_bb_event_disconned 
+3989 c00239d7 beq bt_evt_reconn_failed ,module_process_reconn_fail 
+398a c002b9c4 beq bt_evt_setup_complete ,module_process_setup_complete 
+398b c00439aa beq bt_evt_spp_connected ,module_process_spp_connected 
+398c c004b9b1 beq bt_evt_spp_disconnected ,module_process_spp_disconnected 
+398d c00539c9 beq bt_evt_pincode_req ,module_process_evt_pincode_req 
+398e c005b9b6 beq bt_evt_enter_sniff ,module_process_enter_sniff 
+398f c00639c2 beq bt_evt_exit_sniff ,module_process_exit_sniff 
+3990 c009b9d7 beq bt_evt_reconn_page_timeout ,module_process_page_time_out 
+3991 c00a39cf beq bt_evt_le_connected ,module_process_le_conn 
+3992 c00ab9c6 beq bt_evt_le_disconnected ,module_process_bb_even_le_disconn 
+3993 c010b9ca beq bt_evt_sniff_not_accept ,module_process_sniff_not_accept 
+3994 c011b9cb beq bt_evt_unsniff_accept ,module_process_unsniff_accept 
+3995 c01239ce beq bt_evt_unsniff_not_accept ,module_process_unsniff_not_accept 
+3996 c0183c8a beq bt_evt_le_pairing_fail ,module_hci_event_le_pairing_fail 
+3997 c018bc8c beq bt_evt_le_pairing_success ,module_hci_event_le_pairing_success 
+3998 c0193c9a beq bt_evt_le_start_enc ,module_hci_event_start_enc 
+3999 c019bc98 beq bt_evt_le_pause_enc ,module_hci_event_pause_enc 
+399a c01a3c84 beq bt_evt_le_tk_generate ,module_hci_event_le_tk 
+399b c01abc73 beq bt_evt_bt_gkey_generate ,module_hci_event_gkey_generate 
+399c c01b3c82 beq bt_evt_bt_get_passkey ,module_hci_event_passkey_entry_mode 
+399d c01bbc8e beq bt_evt_bt_pairing_fail ,module_hci_event_bt_pairing_fail 
+399e c01c3c90 beq bt_evt_bt_pairing_success ,module_hci_event_bt_pairing_success 
+399f c01dbca1 beq bt_evt_le_gkey_generate ,module_hci_event_le_gkey 
+39a0 c01ebc6a beq bt_evt_store_nvram ,module_hci_event_store_device 
+39a1 c020b9d9 beq bt_evt_le_ltk_lost ,module_process_ble_ltk_lost 
+39a2 20600000 rtn 
+
+module_process_bb_event_disconned:
+39a3 2040397f call module_spp_clear_last_transmite_clock 
+39a4 6800c665 fetch 1 ,mem_flag_pairing_state 
+39a5 245a3c8e ncall module_hci_event_bt_pairing_fail ,blank 
+39a6 204039d7 call module_disconn_start 
+39a7 68014682 fetch 2 ,mem_ui_state_map 
+39a8 c4020000 rtnbit0 ui_state_bt_spp_conn 
+39a9 202039b1 branch module_spp_disconnected 
+
+module_process_spp_connected:
+39aa 68014682 fetch 2 ,mem_ui_state_map 
+39ab 79207e04 set1 ui_state_bt_spp_conn ,pdata 
+39ac 60014682 store 2 ,mem_ui_state_map 
+39ad 6800c6a7 fetch 1 ,mem_module_spp_lpm_mult 
+39ae 6000c172 store 1 ,mem_lpm_mult 
+39af 204039e6 call module_set_conn_pin_low 
+39b0 20203c1d branch module_hci_event_spp_connect 
+
+module_process_spp_disconnected:
+
+module_spp_disconnected:
+39b1 68014682 fetch 2 ,mem_ui_state_map 
+39b2 c4020000 rtnbit0 ui_state_bt_spp_conn 
+39b3 793ffe04 set0 ui_state_bt_spp_conn ,pdata 
+39b4 60014682 store 2 ,mem_ui_state_map 
+39b5 20203c21 branch module_hci_event_spp_disconnect 
+
+module_process_enter_sniff:
+
+module_sniff_param_check:
+39b6 2040397f call module_spp_clear_last_transmite_clock 
+39b7 68014042 fetch 2 ,mem_context + coffset_tsniff 
+39b8 1fe37e00 rshift pdata ,pdata 
+39b9 680941e3 fetcht 2 ,mem_sniff_param_interval 
+39ba 98467c00 isub temp ,null 
+39bb 2422b9bd nbranch module_sniff_param_check_unsniff ,zero 
+39bc 20203416 branch app_lpm_mult_enable 
+
+module_sniff_param_check_unsniff:
+39bd 6800c6bf fetch 1 ,mem_module_flag 
+39be c3828000 rtnbit1 moudle_task_unsniff 
+39bf 68110112 hfetch 2 ,core_uart_rxitems 
+39c0 245a3cf0 ncall module_set_unsniff_task_flag ,blank 
+39c1 2020340c branch app_bt_sniff_exit 
+
+module_process_exit_sniff:
+39c2 20403cee call module_clear_sniff_task_flag 
+39c3 20203418 branch app_lpm_mult_disable 
+
+module_process_setup_complete:
+39c4 2040397f call module_spp_clear_last_transmite_clock 
+39c5 202039dd branch module_conn_start 
+
+module_process_bb_even_le_disconn:
+39c6 20405816 call le_clr_config_more_data 
+39c7 204039d7 call module_disconn_start 
+39c8 20203c23 branch module_hci_event_le_disconnect 
+
+module_process_evt_pincode_req:
+39c9 202033dd branch app_bt_set_pincode 
+
+module_process_sniff_not_accept:
+39ca 20203cee branch module_clear_sniff_task_flag 
+
+module_process_unsniff_accept:
+39cb 6800c6bf fetch 1 ,mem_module_flag 
+39cc c302b40e bbit0 moudle_task_unsniff ,app_bt_enter_sniff 
+39cd 20203cf2 branch module_clear_unsniff_task_flag 
+
+module_process_unsniff_not_accept:
+39ce 20203cf2 branch module_clear_unsniff_task_flag 
+
+module_process_le_conn:
+39cf 204058ba call le_send_att_exchange_mtu_requset 
+39d0 204039dd call module_conn_start 
+39d1 6800c6a8 fetch 1 ,mem_module_le_lpm_mult 
+39d2 6000c172 store 1 ,mem_lpm_mult 
+39d3 20203c1f branch module_hci_event_le_connect 
+
+module_process_bb_conn:
+39d4 70466100 jam 0 ,mem_flag_mode_ssp_pin 
+39d5 20403cee call module_clear_sniff_task_flag 
+39d6 20203cf2 branch module_clear_unsniff_task_flag 
+
+module_process_page_time_out:
+
+module_process_reconn_fail:
+
+module_disconn_start:
+39d7 20403a52 call module_start_adv_discovery_by_command 
+39d8 202039db branch module_set_conn_pin_high 
+
+module_process_ble_ltk_lost:
+39d9 20405cc9 call le_send_reject_ind 
+39da 20205b02 branch le_send_smp_security_request 
+
+module_set_conn_pin_high:
+39db 6808c69e fetcht 1 ,mem_module_connect_state_gpio 
+39dc 20206829 branch gpio_out_active 
+
+module_conn_start:
+39dd 204039df call module_stop_adv_discovery 
+39de 202039e6 branch module_set_conn_pin_low 
+
+module_stop_adv_discovery:
+39df 6800c6a1 fetch 1 ,mem_module_state 
+39e0 2feffe00 isolate1 moudle_state_bt_bit ,pdata 
+39e1 2040b3f0 call app_bt_stop_discovery ,true 
+39e2 6800c6a1 fetch 1 ,mem_module_state 
+39e3 2feffe01 isolate1 moudle_state_ble_bit ,pdata 
+39e4 2040b3f8 call app_ble_stop_adv ,true 
+39e5 20600000 rtn 
+
+module_set_conn_pin_low:
+39e6 6808c69e fetcht 1 ,mem_module_connect_state_gpio 
+39e7 20206825 branch gpio_out_inactive 
+
+module_process_with_credit:
+39e8 6800c56b fetch 1 ,mem_credit_flag 
+39e9 c1000000 rtneq credit_disable 
+39ea 20206c28 branch rfcomm_send_uih_without_payload 
+
+module_process:
+39eb 6810810c hfetch 1 ,core_uart_status 
+39ec c281b9e8 bbit1 uart_status_rx_fifo_empty ,module_process_with_credit 
+39ed 204066cb call uartd_prepare_rx 
+39ee e8608000 ifetch 1 ,contru 
+39ef c080ba01 bne 0x01 ,module_hci_in_excp 
+39f0 68110112 hfetch 2 ,core_uart_rxitems 
+39f1 1fe67c02 sub pdata ,2 ,null 
+39f2 20610000 rtn positive 
+39f3 e8608000 ifetch 1 ,contru 
+39f4 60008b03 store 1 ,mem_module_uart_opcode 
+39f5 e8688000 ifetcht 1 ,contru 
+39f6 18622200 copy contru ,rega 
+39f7 60088b04 storet 1 ,mem_module_uart_len 
+39f8 18408403 add temp ,3 ,temp 
+39f9 68110112 hfetch 2 ,core_uart_rxitems 
+39fa 98460400 isub temp ,temp 
+39fb 24610000 nrtn positive 
+39fc 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 
+39fd 20403a17 call module_hci_cmd_control 
+39fe 68008b05 fetch 1 ,mem_module_temp_nl_discard_packet 
+39ff c1000000 rtneq hci_not_discard_packet 
+3a00 20203a12 branch module_hci_dicard_packet 
+
+module_hci_in_excp:
+3a01 20407ec1 call delay_10ms 
+3a02 20403c79 call module_hci_event_invalid_packet 
+3a03 20203a04 branch module_hci_release_except 
+
+module_hci_release_except:
+3a04 44efc01b bpatch patch1b_7 ,mem_patch1b 
+3a05 68110112 hfetch 2 ,core_uart_rxitems 
+3a06 207a0000 rtn blank 
+3a07 204066cb call uartd_prepare_rx 
+3a08 e8608000 ifetch 1 ,contru 
+3a09 1fe67c01 sub pdata ,0x01 ,null 
+3a0a 2442ba16 ncall module_hci_dicard_bytes ,zero 
+3a0b 2422ba04 nbranch module_hci_release_except ,zero 
+3a0c e8608000 ifetch 1 ,contru 
+3a0d c1028000 rtneq hci_cmd_spp_data_req 
+3a0e c1148000 rtneq hci_cmd_set_credit_given 
+3a0f 186087ff increase -1 ,contru 
+3a10 20403a16 call module_hci_dicard_bytes 
+3a11 20203a04 branch module_hci_release_except 
+
+module_hci_dicard_packet:
+3a12 204066cb call uartd_prepare_rx 
+3a13 18608602 increase 2 ,contru 
+3a14 e8608000 ifetch 1 ,contru 
+3a15 98608600 iadd contru ,contru 
+
+module_hci_dicard_bytes:
+3a16 202066c8 branch uartd_rxdone 
+
+module_hci_cmd_control:
+3a17 44f0401c bpatch patch1c_0 ,mem_patch1c 
+3a18 68008b03 fetch 1 ,mem_module_uart_opcode 
+3a19 c0003a3f beq hci_cmd_set_bt_addr_req ,module_hci_cmd_set_bt_addr 
+3a1a c000ba44 beq hci_cmd_set_le_addr_req ,module_hci_cmd_set_le_addr 
+3a1b c0013a49 beq hci_cmd_set_visibility_req ,module_hci_cmd_set_visibility 
+3a1c c001ba5f beq hci_cmd_set_bt_name_req ,module_hci_cmd_set_bt_name 
+3a1d c0023a6b beq hci_cmd_set_le_name_req ,module_hci_cmd_set_le_name 
+3a1e c002ba75 beq hci_cmd_spp_data_req ,module_hci_cmd_receive_spp_data 
+3a1f c004ba9a beq hci_cmd_le_data_req ,module_hci_cmd_receive_le_data 
+3a20 c005bad7 beq hci_cmd_status_irq ,module_hci_cmd_inquire_status 
+3a21 c0063ad8 beq hci_cmd_set_pairing_req ,module_hci_cmd_set_pairing_mode 
+3a22 c006baec beq hci_cmd_set_pincode_req ,module_hci_cmd_set_pincode 
+3a23 c0073af4 beq hci_cmd_set_uartcontrol_req ,module_hci_cmd_set_uart_control_mode 
+3a24 c007bafa beq hci_cmd_set_uart_baud_req ,module_hci_cmd_set_uart_baud 
+3a25 c0083b06 beq hci_cmd_version_req ,module_hci_cmd_version_request 
+3a26 c008bb0e beq hci_cmd_bt_disconnect ,module_hci_cmd_bt_disconnect 
+3a27 c0093b12 beq hci_cmd_ble_disconnect ,module_hci_cmd_ble_disconnect 
+3a28 c0133b16 beq hci_cmd_set_nvram_req ,module_hci_cmd_set_nvram 
+3a29 c0143b1d beq hci_cmd_confirm_gkey ,module_hci_cmd_confirm_gkey 
+3a2a c014bb2d beq hci_cmd_set_credit_given ,module_hci_cmd_set_credit_given 
+3a2b c0153b36 beq hci_cmd_auto_adv_scan ,module_hci_cmd_auto_adv 
+3a2c c015bb69 beq hci_cmd_power_req ,module_hci_cmd_power_request 
+3a2d c0163b6f beq hci_cmd_power_set ,module_hci_cmd_power_set 
+3a2e c0183b76 beq hci_cmd_passkey_entry ,module_hci_cmd_passkey_entry 
+3a2f c018bb7c beq hci_cmd_set_gpio ,module_hci_cmd_set_gpio 
+3a30 c0193b90 beq hci_cmd_read_gpio ,module_hci_cmd_read_gpio 
+3a31 c019bb98 beq hci_cmd_le_set_pairing ,module_hci_cmd_le_set_pairing_mode 
+3a32 c01a3bbb beq hci_cmd_le_set_adv_data ,module_hci_cmd_le_set_adv_data 
+3a33 c01abbc4 beq hci_cmd_le_set_scan_data ,module_hci_cmd_le_set_scan_data 
+3a34 c01b3bcd beq hci_cmd_le_send_conn_update_req ,module_hci_cmd_le_send_conn_update_req 
+3a35 c01bbbd7 beq hci_cmd_le_set_adv_parm ,module_hci_cmd_set_le_adv_parameter 
+3a36 c01c3bda beq hci_cmd_le_start_pairing ,module_hci_cmd_le_start_pairing 
+3a37 c0203be2 beq hci_cmd_set_wake_gpio ,module_hci_cmd_set_wake_gpio 
+3a38 c0213bec beq hci_cmd_set_tx_power ,module_hci_cmd_set_tx_power 
+3a39 c0243bf1 beq hci_cmd_le_confirm_gkey ,module_hci_cmd_le_confirm_gkey 
+3a3a c024bbfc beq hci_cmd_reject_justwork ,module_hci_cmd_set_reject_justwork_flag 
+3a3b c028bc02 beq hci_cmd_reset_chip_req ,module_hci_cmd_reset_chip 
+3a3c c030bc06 beq hci_cmd_le_set_fixed_passkey ,module_hci_cmd_le_set_fixed_passkey 
+3a3d c07fbc15 beq hci_test_cmd_close_lpm ,module_hci_test_cmde_close_lpm 
+3a3e 20203c17 branch module_hci_event_receive_invalid_cmd 
+
+module_hci_cmd_set_bt_addr:
+3a3f 68008b04 fetch 1 ,mem_module_uart_len 
+3a40 c0833c17 bne 6 ,module_hci_event_receive_invalid_cmd 
+3a41 e8630000 ifetch 6 ,contru 
+3a42 600340a0 store 6 ,mem_lap 
+3a43 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_le_addr:
+3a44 68008b04 fetch 1 ,mem_module_uart_len 
+3a45 c0833c17 bne 6 ,module_hci_event_receive_invalid_cmd 
+3a46 e8630000 ifetch 6 ,contru 
+3a47 600344a0 store 6 ,mem_le_lap 
+3a48 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_visibility:
+3a49 68008b04 fetch 1 ,mem_module_uart_len 
+3a4a c080bc17 bne 1 ,module_hci_event_receive_invalid_cmd 
+3a4b 1a220600 copy rega ,contru 
+3a4c 20403c1a call module_hci_event_receive_valid_cmd 
+3a4d e8688000 ifetcht 1 ,contru 
+3a4e 6008c6a9 storet 1 ,mem_module_bluetooth_stauts_by_command 
+3a4f 68014682 fetch 2 ,mem_ui_state_map 
+3a50 c3848000 rtnbit1 ui_state_ble_connected 
+3a51 c3800000 rtnbit1 ui_state_bt_connected 
+
+module_start_adv_discovery_by_command:
+3a52 6800c6a1 fetch 1 ,mem_module_state 
+3a53 2feffe00 isolate1 moudle_state_bt_bit ,pdata 
+3a54 2420ba58 nbranch moudle_start_adv_by_command ,true 
+3a55 6808c6a9 fetcht 1 ,mem_module_bluetooth_stauts_by_command 
+3a56 18417e03 and temp ,0x03 ,pdata 
+3a57 6000c093 store 1 ,mem_scan_mode 
+
+moudle_start_adv_by_command:
+3a58 6800c6a1 fetch 1 ,mem_module_state 
+3a59 2feffe01 isolate1 moudle_state_ble_bit ,pdata 
+3a5a 24608000 nrtn true 
+3a5b 6808c6a9 fetcht 1 ,mem_module_bluetooth_stauts_by_command 
+3a5c 284ffe02 isolate1 2 ,temp 
+3a5d 2020b3fa branch app_ble_start_adv ,true 
+3a5e 202033f8 branch app_ble_stop_adv 
+
+module_hci_cmd_set_bt_name:
+3a5f 68008b04 fetch 1 ,mem_module_uart_len 
+3a60 1fe67c43 sub pdata ,67 ,null 
+3a61 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 
+3a62 6000c515 store 1 ,mem_local_name_length 
+3a63 df200008 arg 8 ,loopcnt 
+3a64 20407ec6 call memset0 
+3a65 68008b04 fetch 1 ,mem_module_uart_len 
+3a66 1fe27200 copy pdata ,loopcnt 
+3a67 1a220600 copy rega ,contru 
+3a68 d8a04516 arg mem_local_name ,contw 
+3a69 204066ea call uart_copy_rx_bytes_fast 
+3a6a 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_le_name:
+3a6b 68008b04 fetch 1 ,mem_module_uart_len 
+3a6c 1fe67c1d sub pdata ,29 ,null 
+3a6d 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 
+3a6e 6000c3af store 1 ,mem_le_name_len 
+3a6f 1fe27200 copy pdata ,loopcnt 
+3a70 1a220600 copy rega ,contru 
+3a71 d8a043b0 arg mem_le_name ,contw 
+3a72 204066ea call uart_copy_rx_bytes_fast 
+3a73 204057a3 call le_modified_name 
+3a74 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_receive_spp_data:
+3a75 6800c682 fetch 1 ,mem_ui_state_map 
+3a76 c3023c17 bbit0 ui_state_bt_spp_conn ,module_hci_event_receive_invalid_cmd 
+3a77 204033ba call app_check_sniff 
+3a78 2020ba86 branch module_hci_cmd_spp_exit_sniff ,true 
+3a79 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+3a7a 2040397f call module_spp_clear_last_transmite_clock 
+3a7b 6800c568 fetch 1 ,mem_remote_credits 
+3a7c 207a0000 rtn blank 
+3a7d 68014573 fetch 2 ,mem_nl_rx_len_all 
+3a7e c0803a84 bne 0 ,module_hci_cmd_pass_init_ng_rx_len_all 
+3a7f 68008b04 fetch 1 ,mem_module_uart_len 
+3a80 60014573 store 2 ,mem_nl_rx_len_all 
+3a81 1a220600 copy rega ,contru 
+3a82 18627e00 copy contru ,pdata 
+3a83 60014571 store 2 ,mem_nl_rx_data_src 
+
+module_hci_cmd_pass_init_ng_rx_len_all:
+3a84 20403a88 call module_hci_cmd_get_current_packet_len_and_remain_len 
+3a85 20206c4d branch spp_tx_rfcomm_packet 
+
+module_hci_cmd_spp_exit_sniff:
+3a86 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+3a87 20203cd1 branch module_exit_sniff 
+
+module_hci_cmd_get_current_packet_len_and_remain_len:
+3a88 20403a8e call module_hci_cmd_get_current_patcket_len 
+3a89 68014573 fetch 2 ,mem_nl_rx_len_all 
+3a8a 6809469f fetcht 2 ,mem_current_packet_length 
+3a8b 98467e00 isub temp ,pdata 
+3a8c 60014573 store 2 ,mem_nl_rx_len_all 
+3a8d 20600000 rtn 
+
+module_hci_cmd_get_current_patcket_len:
+3a8e 68014573 fetch 2 ,mem_nl_rx_len_all 
+3a8f d840006e arg dm_refcom_buff_len ,temp 
+3a90 20407fdd call not_greater_than 
+3a91 6809456c fetcht 2 ,mem_rfcomm_max_frame_size 
+3a92 20407fdd call not_greater_than 
+3a93 6809455e fetcht 2 ,mem_pn_max_frame_size 
+3a94 20407fdd call not_greater_than 
+3a95 6001469f store 2 ,mem_current_packet_length 
+3a96 20600000 rtn 
+
+module_hci_command_tx_spp_tx_complete:
+3a97 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 
+3a98 700b0305 jam hci_cmd_spp_data_req ,mem_module_uart_opcode 
+3a99 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_receive_le_data:
+3a9a 68014682 fetch 2 ,mem_ui_state_map 
+3a9b c304bc17 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd 
+3a9c 20403ad4 call module_check_ble_encrypt_state 
+3a9d 20343c17 branch module_hci_event_receive_invalid_cmd ,user 
+3a9e 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+3a9f 6800c6bf fetch 1 ,mem_module_flag 
+3aa0 c2823ab4 bbit1 module_flag_ble_data_finish ,module_hci_cmd_receive_le_data_finish 
+3aa1 6800c6c0 fetch 1 ,mem_module_hci_notify_len 
+3aa2 247a0000 nrtn blank 
+3aa3 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 
+3aa4 e8610000 ifetch 2 ,contru 
+3aa5 600146c1 store 2 ,mem_module_hci_notify_handle 
+3aa6 18627e00 copy contru ,pdata 
+3aa7 600146c3 store 2 ,mem_module_hci_nofiy_addr 
+3aa8 68008b04 fetch 1 ,mem_module_uart_len 
+3aa9 1fe0fffe pincrease -2 
+3aaa 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 
+3aab 2022bc17 branch module_hci_event_receive_invalid_cmd ,zero 
+3aac 6000c6c0 store 1 ,mem_module_hci_notify_len 
+3aad 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+3aae 20405814 call le_set_config_more_data 
+3aaf 20403ab7 call module_hci_cmd_transmit_le_notify 
+3ab0 20403ab7 call module_hci_cmd_transmit_le_notify 
+3ab1 20403ab7 call module_hci_cmd_transmit_le_notify 
+3ab2 6800c6bf fetch 1 ,mem_module_flag 
+3ab3 c4020000 rtnbit0 module_flag_ble_data_finish 
+
+module_hci_cmd_receive_le_data_finish:
+3ab4 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 
+3ab5 20403cf6 call module_clear_le_tx_data_flag 
+3ab6 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_transmit_le_notify:
+3ab7 6800c6c0 fetch 1 ,mem_module_hci_notify_len 
+3ab8 207a0000 rtn blank 
+3ab9 20405892 call le_fifo_check_nearly_full 
+3aba 247a0000 nrtn blank 
+3abb 20403acf call module_get_le_remote_mtu 
+3abc 44f0c01c bpatch patch1c_1 ,mem_patch1c 
+3abd 1840fffd add temp ,-3 ,pdata 
+3abe 6808c6c0 fetcht 1 ,mem_module_hci_notify_len 
+3abf 20407fdd call not_greater_than 
+3ac0 1fe22200 copy pdata ,rega 
+3ac1 18427e00 copy temp ,pdata 
+3ac2 9a267e00 isub rega ,pdata 
+3ac3 6000c6c0 store 1 ,mem_module_hci_notify_len 
+3ac4 680946c1 fetcht 2 ,mem_module_hci_notify_handle 
+3ac5 20405a64 call le_att_malloc_tx_notify 
+3ac6 680146c3 fetch 2 ,mem_module_hci_nofiy_addr 
+3ac7 1fe20600 copy pdata ,contru 
+3ac8 1a227200 copy rega ,loopcnt 
+3ac9 204066ea call uart_copy_rx_bytes_fast 
+3aca 18627e00 copy contru ,pdata 
+3acb 600146c3 store 2 ,mem_module_hci_nofiy_addr 
+3acc 6800c6c0 fetch 1 ,mem_module_hci_notify_len 
+3acd 247a0000 nrtn blank 
+3ace 20203cf4 branch module_set_le_tx_data_flag 
+
+module_get_le_remote_mtu:
+3acf d8400017 arg 0x17 ,temp 
+3ad0 6800c6bf fetch 1 ,mem_module_flag 
+3ad1 c3808000 rtnbit1 module_flag_ble_send_mtu23 
+3ad2 680944a8 fetcht 2 ,mem_le_remote_mtu 
+3ad3 20600000 rtn 
+
+module_check_ble_encrypt_state:
+3ad4 6800c6bf fetch 1 ,mem_module_flag 
+3ad5 c2815a42 bbit1 module_flag_ble_data_encrypt ,le_check_encrypt_state 
+3ad6 20207fe9 branch disable_user 
+
+module_hci_cmd_inquire_status:
+3ad7 20203c4c branch module_hci_event_status_res 
+
+module_hci_cmd_set_pairing_mode:
+3ad8 1a220600 copy rega ,contru 
+3ad9 e8608000 ifetch 1 ,contru 
+3ada c0003adf beq pairing_pincode ,module_hci_pairing_pincode_mode 
+3adb c000bae2 beq pairing_justwork ,module_hci_pairing_just_work_mode 
+3adc c0013ae8 beq pairing_passkey ,module_hci_pairing_passkey 
+3add c001baea beq pairing_confirm ,module_hci_pairing_numeric_comparison 
+3ade 20203c17 branch module_hci_event_receive_invalid_cmd 
+
+module_hci_pairing_pincode_mode:
+3adf 2040612b call ssp_disable 
+3ae0 70465a00 jam 0 ,mem_ssp_enable 
+3ae1 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_pairing_just_work_mode:
+3ae2 58040003 setarg ssp_mode_just_work_io_cap_data 
+
+module_hci_sspairing_mode:
+3ae3 6001c65b store 3 ,mem_sp_iocap_local 
+3ae4 6000c662 store 1 ,mem_ssp_mode_flag 
+3ae5 20406124 call ssp_enable 
+3ae6 70465a01 jam 1 ,mem_ssp_enable 
+3ae7 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_pairing_passkey:
+3ae8 58040002 setarg ssp_mode_passkey_io_cap_data 
+3ae9 20203ae3 branch module_hci_sspairing_mode 
+
+module_hci_pairing_numeric_comparison:
+3aea 58040001 setarg ssp_mode_ssp_pin_io_cap_data 
+3aeb 20203ae3 branch module_hci_sspairing_mode 
+
+module_hci_cmd_set_pincode:
+3aec 68008b04 fetch 1 ,mem_module_uart_len 
+3aed 1fe67c10 sub pdata ,16 ,null 
+3aee 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 
+3aef 6000c689 store 1 ,mem_pin_length 
+3af0 1fe27200 copy pdata ,loopcnt 
+3af1 d8a0468a arg mem_pin ,contw 
+3af2 204066fd call uart_copy_rx_bytes 
+3af3 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_uart_control_mode:
+3af4 1a220600 copy rega ,contru 
+3af5 e8608000 ifetch 1 ,contru 
+3af6 68188062 hfetcht 1 ,core_uart_ctrl 
+3af7 7d3a0404 nsetflag blank ,4 ,temp 
+3af8 60188062 hstoret 1 ,core_uart_ctrl 
+3af9 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_uart_baud:
+3afa 68008b04 fetch 1 ,mem_module_uart_len 
+3afb 1fe27200 copy pdata ,loopcnt 
+3afc 1a220600 copy rega ,contru 
+3afd 20407f58 call string2dec_from_uart 
+3afe 596e3600 setarg uart_clk_24 
+3aff 9846fc00 idiv temp 
+3b00 20407f86 call wait_div_end 
+3b01 1807fe00 quotient pdata 
+
+module_hci_cmd_set_uart_baud_ok:
+3b02 60014243 store uart_baud_len ,mem_baud 
+3b03 20403c1a call module_hci_event_receive_valid_cmd 
+3b04 20407f9e call wait_uarttx 
+3b05 202066ce branch uart_set_baud_by_mem 
+
+module_hci_cmd_version_request:
+3b06 da200002 arg 2 ,rega 
+3b07 da40469a arg mem_soft_version_num ,regb 
+3b08 d8400000 arg 0 ,temp 
+3b09 20203c25 branch module_hci_event_set_cmd 
+
+module_hci_event_set_cmd_send_response:
+3b0a 60010ac2 store 2 ,mem_event_cmd_response_content 
+3b0b da400ac2 arg mem_event_cmd_response_content ,regb 
+3b0c d8400000 arg 0 ,temp 
+3b0d 20203c25 branch module_hci_event_set_cmd 
+
+module_hci_cmd_bt_disconnect:
+3b0e 68014682 fetch 2 ,mem_ui_state_map 
+3b0f c3003c17 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd 
+
+module_hci_cmd_bt_disconnect_doing:
+3b10 20403c1a call module_hci_event_receive_valid_cmd 
+3b11 202033e9 branch app_bt_disconnect 
+
+module_hci_cmd_ble_disconnect:
+3b12 68014682 fetch 2 ,mem_ui_state_map 
+3b13 c304bc17 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd 
+
+module_hci_cmd_ble_disconnect_doing:
+3b14 20403c1a call module_hci_event_receive_valid_cmd 
+3b15 20203402 branch app_ble_disconnect 
+
+module_hci_cmd_set_nvram:
+3b16 68008b04 fetch 1 ,mem_module_uart_len 
+3b17 1fe27200 copy pdata ,loopcnt 
+3b18 1a220600 copy rega ,contru 
+3b19 68014215 fetch 2 ,mem_nv_data_ptr 
+3b1a 1fe20a00 icopy contw 
+3b1b 204066ea call uart_copy_rx_bytes_fast 
+3b1c 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_confirm_gkey:
+3b1d 6800c682 fetch 1 ,mem_ui_state_map 
+3b1e c3003c17 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd 
+3b1f e8608000 ifetch 1 ,contru 
+3b20 6808c661 fetcht 1 ,mem_flag_mode_ssp_pin 
+3b21 793a0400 setflag blank ,flag_mode_ssp_pin_comparison_result_bit ,temp 
+3b22 79200407 set1 flag_mode_ssp_pin_reviceve_comparison_bit ,temp 
+3b23 6008c661 storet 1 ,mem_flag_mode_ssp_pin 
+3b24 20403c1a call module_hci_event_receive_valid_cmd 
+3b25 6800c661 fetch 1 ,mem_flag_mode_ssp_pin 
+3b26 c2833b2b bbit1 flag_mode_ssp_pin_recieve_dhkey_bit ,module_hci_cmd_spp_number_comparison_result_is1 
+3b27 20600000 rtn 
+
+dhkey_not_accept:
+3b28 70466100 jam 0 ,mem_flag_mode_ssp_pin 
+3b29 700a9921 jam bt_cmd_dhkey_not_accept ,mem_fifo_temp 
+3b2a 20207d8f branch ui_ipc_send_cmd 
+
+module_hci_cmd_spp_number_comparison_result_is1:
+3b2b c2805f95 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed 
+3b2c 20203b28 branch dhkey_not_accept 
+
+module_hci_cmd_set_credit_given:
+3b2d 6800c682 fetch 1 ,mem_ui_state_map 
+3b2e c4020000 rtnbit0 ui_state_bt_spp_conn 
+3b2f 6800c56b fetch 1 ,mem_credit_flag 
+3b30 c1000000 rtneq credit_disable 
+3b31 e8608000 ifetch 1 ,contru 
+3b32 6808c569 fetcht 1 ,mem_credit_given 
+3b33 98408400 iadd temp ,temp 
+3b34 6008c569 storet 1 ,mem_credit_given 
+3b35 20600000 rtn 
+
+module_hci_cmd_auto_adv:
+3b36 df200040 arg 0x40 ,loopcnt 
+3b37 d8a0436f arg mem_le_adv_data_len ,contw 
+3b38 20407ed4 call clear_mem 
+3b39 58000000 setarg 0 
+3b3a 60008ab2 store 1 ,mem_regb 
+3b3b 1a220600 copy rega ,contru 
+
+module_hci_cmd_auto_adv_loop:
+3b3c 18627e00 copy contru ,pdata 
+3b3d 60010ab6 store 2 ,mem_regc 
+3b3e 20403b64 call module_hci_cmd_auto_adv_adv_analys 
+3b3f 68008ab2 fetch 1 ,mem_regb 
+3b40 68088aa2 fetcht 1 ,mem_temp 
+3b41 18408401 increase 1 ,temp 
+3b42 9840fe00 iadd temp ,pdata 
+3b43 60008ab2 store 1 ,mem_regb 
+3b44 1fe67c1f sub pdata ,31 ,null 
+3b45 24213b50 nbranch module_hci_cmd_auto_adv_store_scan ,positive 
+
+module_hci_cmd_auto_adv_store_adv:
+3b46 6808c36f fetcht 1 ,mem_le_adv_data_len 
+3b47 58004370 setarg mem_le_adv_data 
+3b48 9840fe00 iadd temp ,pdata 
+3b49 60010abb store 2 ,mem_contw 
+3b4a 68088aa2 fetcht 1 ,mem_temp 
+3b4b 18408401 increase 1 ,temp 
+3b4c 6800c36f fetch 1 ,mem_le_adv_data_len 
+3b4d 9840fe00 iadd temp ,pdata 
+3b4e 6000c36f store 1 ,mem_le_adv_data_len 
+3b4f 20203b59 branch module_hci_cmd_auto_adv_store_common 
+
+module_hci_cmd_auto_adv_store_scan:
+3b50 6808c38f fetcht 1 ,mem_le_scan_data_len 
+3b51 58004390 setarg mem_le_scan_data 
+3b52 9840fe00 iadd temp ,pdata 
+3b53 60010abb store 2 ,mem_contw 
+3b54 68088aa2 fetcht 1 ,mem_temp 
+3b55 18408401 increase 1 ,temp 
+3b56 6800c38f fetch 1 ,mem_le_scan_data_len 
+3b57 9840fe00 iadd temp ,pdata 
+3b58 6000c38f store 1 ,mem_le_scan_data_len 
+
+module_hci_cmd_auto_adv_store_common:
+3b59 68010abb fetch 2 ,mem_contw 
+3b5a 1fe20a00 copy pdata ,contw 
+3b5b 68010ab6 fetch 2 ,mem_regc 
+3b5c 1fe20600 copy pdata ,contru 
+3b5d 18427200 copy temp ,loopcnt 
+3b5e 204066ea call uart_copy_rx_bytes_fast 
+3b5f 68008b04 fetch 1 ,mem_module_uart_len 
+3b60 68088ab2 fetcht 1 ,mem_regb 
+3b61 98467c00 isub temp ,null 
+3b62 2422bb3c nbranch module_hci_cmd_auto_adv_loop ,zero 
+3b63 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_auto_adv_adv_analys:
+3b64 e8608000 ifetch 1 ,contru 
+3b65 60008aa2 store 1 ,mem_temp 
+3b66 e8608000 ifetch 1 ,contru 
+3b67 60008aae store 1 ,mem_rega 
+3b68 20600000 rtn 
+
+module_hci_cmd_power_request:
+3b69 d8400000 arg 0 ,temp 
+3b6a da200002 arg 2 ,rega 
+3b6b 680146b4 fetch 2 ,mem_module_vdd_quotient 
+3b6c 60010ac2 store 2 ,mem_event_cmd_response_content 
+3b6d da400ac2 arg mem_event_cmd_response_content ,regb 
+3b6e 20203c25 branch module_hci_event_set_cmd 
+
+module_hci_cmd_power_set:
+3b6f 68008b04 fetch 1 ,mem_module_uart_len 
+3b70 c080bc17 bne 1 ,module_hci_event_receive_invalid_cmd 
+3b71 e8608000 ifetch 1 ,contru 
+3b72 6000c6b2 store 1 ,mem_module_read_vdd_flag 
+3b73 58000000 setarg 0x00 
+3b74 600146b4 store 2 ,mem_module_vdd_quotient 
+3b75 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_passkey_entry:
+3b76 e8620000 ifetch 4 ,contru 
+3b77 6002468a store 4 ,mem_pin 
+3b78 70468904 jam 4 ,mem_pin_length 
+3b79 70466300 jam 0 ,mem_authentication_passkey_times 
+3b7a 20403c1a call module_hci_event_receive_valid_cmd 
+3b7b 20205f31 branch authentication_passkey 
+
+module_hci_cmd_set_gpio:
+3b7c 68008b04 fetch 1 ,mem_module_uart_len 
+3b7d c081bc17 bne 3 ,module_hci_event_receive_invalid_cmd 
+3b7e e8608000 ifetch 1 ,contru 
+3b7f c0003b82 beq hci_cmd_config_gpio_input ,module_set_gpio_input 
+3b80 c000bb8a beq hci_cmd_config_gpio_output ,module_set_gpio_output 
+3b81 20203c17 branch module_hci_event_receive_invalid_cmd 
+
+module_set_gpio_input:
+3b82 e8688000 ifetcht 1 ,contru 
+3b83 e8608000 ifetch 1 ,contru 
+3b84 c0013b88 beq gpio_input_high_impedance ,module_set_gpio_high_impedance 
+3b85 7d3a0407 nsetflag blank ,7 ,temp 
+3b86 204067fb call gpio_config_input 
+3b87 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_set_gpio_high_impedance:
+3b88 20406806 call gpio_set_high_impedance 
+3b89 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_set_gpio_output:
+3b8a e8688000 ifetcht 1 ,contru 
+3b8b 20406812 call gpio_config_output0 
+3b8c e8608000 ifetch 1 ,contru 
+3b8d 2feffe00 isolate1 0 ,pdata 
+3b8e 2040682c call gpio_out_flag 
+3b8f 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_read_gpio:
+3b90 68008b04 fetch 1 ,mem_module_uart_len 
+3b91 c080bc17 bne 1 ,module_hci_event_receive_invalid_cmd 
+3b92 e8688000 ifetcht 1 ,contru 
+3b93 2040681d call gpio_get_bit 
+3b94 58000000 setarg 0x0 
+3b95 7d20fe00 nsetflag true ,0 ,pdata 
+3b96 da200001 arg 1 ,rega 
+3b97 20203b0a branch module_hci_event_set_cmd_send_response 
+
+module_hci_cmd_le_set_pairing_mode:
+3b98 1a220600 copy rega ,contru 
+3b99 e8608000 ifetch 1 ,contru 
+3b9a 1fe20400 copy pdata ,temp 
+3b9b c040bba3 beq le_pairing_mode_secure_connect_justwork ,module_le_set_pairing_mode_secure_justwork 
+3b9c c0413ba8 beq le_pairing_mode_secure_connect_numeric ,module_le_set_pairing_mode_secure_numeric 
+3b9d c041bbae beq le_pairing_mode_secure_connect_passkey ,module_le_set_pairing_mode_secure_passkey 
+3b9e 6000c4c6 store 1 ,mem_le_pairing_mode 
+3b9f c0003bb3 beq le_pairing_mode_none ,module_le_set_no_pairing 
+3ba0 c000bbb6 beq le_pairing_mode_lagacy_justwork ,module_le_set_pairing_mode_lagacy_just_work 
+3ba1 c0013bb8 beq le_pairing_mode_lagacy_passkey ,module_le_set_pairing_mode_lagacy_passkey 
+3ba2 20203c17 branch module_hci_event_receive_invalid_cmd 
+
+module_le_set_pairing_mode_secure_justwork:
+3ba3 6800c4be fetch 1 ,mem_le_secure_connect_enable 
+3ba4 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank 
+3ba5 6008c4c6 storet 1 ,mem_le_pairing_mode 
+3ba6 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+3ba7 20203bb4 branch module_le_set_noinputnooutput 
+
+module_le_set_pairing_mode_secure_numeric:
+3ba8 6800c4be fetch 1 ,mem_le_secure_connect_enable 
+3ba9 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank 
+3baa 6008c4c6 storet 1 ,mem_le_pairing_mode 
+3bab 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+3bac 70445401 jam flag_iocap_displayyesno ,mem_le_pres_iocap 
+3bad 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_le_set_pairing_mode_secure_passkey:
+3bae 6800c4be fetch 1 ,mem_le_secure_connect_enable 
+3baf 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank 
+3bb0 6008c4c6 storet 1 ,mem_le_pairing_mode 
+3bb1 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+3bb2 20203bb9 branch module_le_set_displayonly 
+
+module_le_set_no_pairing:
+3bb3 70445600 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth 
+
+module_le_set_noinputnooutput:
+3bb4 70445403 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap 
+3bb5 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_le_set_pairing_mode_lagacy_just_work:
+3bb6 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth 
+3bb7 20203bb4 branch module_le_set_noinputnooutput 
+
+module_le_set_pairing_mode_lagacy_passkey:
+3bb8 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth 
+
+module_le_set_displayonly:
+3bb9 70445400 jam flag_iocap_displayonly ,mem_le_pres_iocap 
+3bba 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_le_set_adv_data:
+3bbb 68008b04 fetch 1 ,mem_module_uart_len 
+3bbc 1fe67c1f sub pdata ,31 ,null 
+3bbd 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 
+3bbe 6000c36f store 1 ,mem_le_adv_data_len 
+3bbf 1fe27200 copy pdata ,loopcnt 
+3bc0 1a220600 copy rega ,contru 
+3bc1 d8a04370 arg mem_le_adv_data ,contw 
+3bc2 204066ea call uart_copy_rx_bytes_fast 
+3bc3 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_le_set_scan_data:
+3bc4 68008b04 fetch 1 ,mem_module_uart_len 
+3bc5 1fe67c1f sub pdata ,31 ,null 
+3bc6 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 
+3bc7 6000c38f store 1 ,mem_le_scan_data_len 
+3bc8 1fe27200 copy pdata ,loopcnt 
+3bc9 1a220600 copy rega ,contru 
+3bca d8a04390 arg mem_le_scan_data ,contw 
+3bcb 204066ea call uart_copy_rx_bytes_fast 
+3bcc 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_le_send_conn_update_req:
+3bcd 68014682 fetch 2 ,mem_ui_state_map 
+3bce c304bc17 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd 
+3bcf 68008b04 fetch 1 ,mem_module_uart_len 
+3bd0 c0843c17 bne 0x08 ,module_hci_event_receive_invalid_cmd 
+3bd1 1a220600 copy rega ,contru 
+3bd2 e8640000 ifetch 8 ,contru 
+3bd3 60044496 store 8 ,mem_le_interval_min 
+3bd4 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp 
+3bd5 20407d8f call ui_ipc_send_cmd 
+3bd6 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_le_adv_parameter:
+3bd7 e8610000 ifetch 2 ,contru 
+3bd8 60014482 store 2 ,mem_le_adv_interval 
+3bd9 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_le_start_pairing:
+3bda 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+3bdb 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank 
+3bdc 6800c4c4 fetch 1 ,mem_le_pairing_state 
+3bdd c0803c17 bne flag_le_pairing_null ,module_hci_event_receive_invalid_cmd 
+3bde 6800c4c5 fetch 1 ,mem_le_enc_state 
+3bdf c0803c17 bne flag_le_enc_null ,module_hci_event_receive_invalid_cmd 
+3be0 20407e25 call check_51cmd_le_smp_sec_req 
+3be1 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_wake_gpio:
+3be2 68008b04 fetch 1 ,mem_module_uart_len 
+3be3 c082bc17 bne 5 ,module_hci_event_receive_invalid_cmd 
+3be4 e8608000 ifetch 1 ,contru 
+3be5 6000c6a2 store 1 ,mem_module_mcu_wake_pin 
+3be6 e8620000 ifetch 4 ,contru 
+3be7 600246a3 store 4 ,mem_module_mcu_wake_delay_us 
+3be8 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin 
+3be9 2040680e call gpio_config_output 
+3bea 20403cbc call module_set_mcu_wake_pin_low 
+3beb 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_tx_power:
+3bec 68008b04 fetch 1 ,mem_module_uart_len 
+3bed c080bc17 bne 0x01 ,module_hci_event_receive_invalid_cmd 
+3bee e8608000 ifetch 1 ,contru 
+3bef 6000c1de store 1 ,mem_tx_power 
+3bf0 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_le_confirm_gkey:
+3bf1 e8608000 ifetch 1 ,contru 
+3bf2 c000bbfa beq 0x01 ,module_hci_cmd_le_confirm_gkey_fail 
+3bf3 6800c4c1 fetch 1 ,mem_le_secure_connect_state 
+3bf4 c001bbf8 beq le_sc_stat_send_public_key ,module_hci_cmd_le_confirm_gkey_ok 
+3bf5 c0033bf8 beq le_sc_stat_receive_dhkey ,module_hci_cmd_le_confirm_gkey_ok 
+3bf6 c003bbf8 beq le_sc_stat_wait_confirm_gkey ,module_hci_cmd_le_confirm_gkey_ok 
+3bf7 20203c17 branch module_hci_event_receive_invalid_cmd 
+
+module_hci_cmd_le_confirm_gkey_ok:
+3bf8 7044c201 jam flag_le_sc_confrim_gkey_ok ,mem_le_sc_confirm_gkey_flag 
+3bf9 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_le_confirm_gkey_fail:
+3bfa 20405b53 call le_send_pairing_confirm_value_failed 
+3bfb 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_reject_justwork_flag:
+3bfc 68008b04 fetch 1 ,mem_module_uart_len 
+3bfd c080bc17 bne 0x01 ,module_hci_event_receive_invalid_cmd 
+3bfe 20403c1a call module_hci_event_receive_valid_cmd 
+3bff e8608000 ifetch 1 ,contru 
+3c00 203a60cb branch classic_bt_clr_reject_justwork_flag ,blank 
+3c01 202060c9 branch classic_bt_set_reject_justwork_flag 
+
+module_hci_cmd_reset_chip:
+3c02 20403c1a call module_hci_event_receive_valid_cmd 
+3c03 20407f9e call wait_uarttx 
+3c04 70801001 jam 0x01 ,core_reset 
+3c05 20202a8e branch loop 
+
+module_hci_cmd_le_set_fixed_passkey:
+3c06 68008b04 fetch 1 ,mem_module_uart_len 
+3c07 c0003c17 beq 0 ,module_hci_event_receive_invalid_cmd 
+3c08 e8608000 ifetch 1 ,contru 
+3c09 203a3c13 branch module_hci_cmd_le_set_random_passkey ,blank 
+3c0a 68008b04 fetch 1 ,mem_module_uart_len 
+3c0b c082bc17 bne 5 ,module_hci_event_receive_invalid_cmd 
+3c0c e8620000 ifetch 4 ,contru 
+3c0d d84f4240 arg 1000000 ,temp 
+3c0e 98467c00 isub temp ,null 
+3c0f 20213c17 branch module_hci_event_receive_invalid_cmd ,positive 
+3c10 600244c7 store 4 ,mem_le_tk 
+3c11 2040580c call le_set_config_fixed_tk 
+3c12 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_le_set_random_passkey:
+3c13 2040580e call le_clr_config_fixed_tk 
+3c14 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_test_cmde_close_lpm:
+3c15 70409100 jam 0 ,mem_lpm_mode 
+3c16 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_event_receive_invalid_cmd:
+3c17 d8400001 arg 1 ,temp 
+3c18 da200000 arg 0 ,rega 
+3c19 20203c25 branch module_hci_event_set_cmd 
+
+module_hci_event_receive_valid_cmd:
+3c1a d8400000 arg 0 ,temp 
+3c1b da200000 arg 0 ,rega 
+3c1c 20203c25 branch module_hci_event_set_cmd 
+
+module_hci_event_spp_connect:
+3c1d 700b0300 jam hci_event_spp_conn_rep ,mem_module_uart_opcode 
+3c1e 20203c49 branch module_hci_event_enter_standby_mode_len0 
+
+module_hci_event_le_connect:
+3c1f 700b0302 jam hci_event_le_conn_rep ,mem_module_uart_opcode 
+3c20 20203c49 branch module_hci_event_enter_standby_mode_len0 
+
+module_hci_event_spp_disconnect:
+3c21 700b0303 jam hci_event_spp_dis_rep ,mem_module_uart_opcode 
+3c22 20203c49 branch module_hci_event_enter_standby_mode_len0 
+
+module_hci_event_le_disconnect:
+3c23 700b0305 jam hci_event_le_dis_rep ,mem_module_uart_opcode 
+3c24 20203c49 branch module_hci_event_enter_standby_mode_len0 
+
+module_hci_event_set_cmd:
+3c25 68008b03 fetch 1 ,mem_module_uart_opcode 
+3c26 1fe22600 copy pdata ,regc 
+3c27 700b0306 jam hci_event_cmd_res ,mem_module_uart_opcode 
+3c28 58000002 setarg 2 
+3c29 9a20fe00 iadd rega ,pdata 
+3c2a 20403ca7 call module_hci_prepare_tx 
+3c2b 1a627e00 copy regc ,pdata 
+3c2c e1408000 istore 1 ,contwu 
+3c2d e1488000 istoret 1 ,contwu 
+3c2e 1a227200 copy rega ,loopcnt 
+3c2f 1a420c00 copy regb ,contr 
+3c30 204066e4 call uart_copy_tx_bytes 
+3c31 202066c5 branch uartd_send 
+
+module_hci_event_receive_spp_data:
+3c32 2040397f call module_spp_clear_last_transmite_clock 
+3c33 700b0307 jam hci_event_spp_data_rep ,mem_module_uart_opcode 
+3c34 680084ff fetch 1 ,mem_current_length 
+3c35 207a0000 rtn blank 
+3c36 20403ca7 call module_hci_prepare_tx 
+3c37 680084ff fetch 1 ,mem_current_length 
+3c38 1fe27200 copy pdata ,loopcnt 
+3c39 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr 
+3c3a 1fe20c00 copy pdata ,contr 
+3c3b 204066d1 call uart_copy_tx_bytes_fast 
+3c3c 202066c5 branch uartd_send 
+
+module_hci_event_receive_le_data:
+3c3d 700b0308 jam hci_event_le_data_rep ,mem_module_uart_opcode 
+3c3e 6800c6b6 fetch 1 ,mem_module_le_rx_data_len 
+3c3f 1fe27200 icopy loopcnt 
+3c40 1fe0fe02 increase 2 ,pdata 
+3c41 20403ca7 call module_hci_prepare_tx 
+3c42 680146b9 fetch 2 ,mem_module_le_rx_data_handle 
+3c43 e1410000 istore 2 ,contwu 
+3c44 680146b7 fetch 2 ,mem_module_le_rx_data_address 
+3c45 1fe20c00 icopy contr 
+3c46 204066d1 call uart_copy_tx_bytes_fast 
+3c47 202066c5 branch uartd_send 
+
+module_hci_event_enter_standby_mode:
+3c48 700b0309 jam hci_event_standby_rep ,mem_module_uart_opcode 
+
+module_hci_event_enter_standby_mode_len0:
+3c49 58000000 setarg 0 
+3c4a 20403ca7 call module_hci_prepare_tx 
+3c4b 202066c5 branch uartd_send 
+
+module_hci_event_status_res:
+3c4c 700b030a jam hci_event_status_res ,mem_module_uart_opcode 
+3c4d 58000001 setarg 1 
+3c4e 20403ca7 call module_hci_prepare_tx 
+3c4f 20403c5d call module_hci_read_bt_status 
+3c50 68014682 fetch 2 ,mem_ui_state_map 
+3c51 d8e00002 arg ui_state_bt_hid_conn ,queue 
+3c52 afefffff qisolate1 pdata 
+3c53 79208403 setflag true ,3 ,temp 
+3c54 d8e00009 arg ui_state_ble_connected ,queue 
+3c55 afefffff qisolate1 pdata 
+3c56 79208405 setflag true ,5 ,temp 
+3c57 6800c682 fetch 1 ,mem_ui_state_map 
+3c58 d8e00004 arg ui_state_bt_spp_conn ,queue 
+3c59 afefffff qisolate1 pdata 
+3c5a 79208404 setflag true ,4 ,temp 
+3c5b e1488000 istoret 1 ,contwu 
+3c5c 202066c5 branch uartd_send 
+
+module_hci_read_bt_status:
+3c5d d8400000 arg 0 ,temp 
+3c5e 6800c093 fetch 1 ,mem_scan_mode 
+3c5f d8e00000 arg inq_scan_mode ,queue 
+3c60 afefffff qisolate1 pdata 
+3c61 79208400 setflag true ,0 ,temp 
+3c62 d8e00001 arg page_scan_mode ,queue 
+3c63 afefffff qisolate1 pdata 
+3c64 79208401 setflag true ,1 ,temp 
+3c65 6800c36e fetch 1 ,mem_le_adv_enable 
+3c66 d8e00000 arg 0 ,queue 
+3c67 afefffff qisolate1 pdata 
+3c68 79208402 setflag true ,2 ,temp 
+3c69 20600000 rtn 
+
+module_hci_event_store_device:
+3c6a 700b030d jam hci_event_nvram_rep ,mem_module_uart_opcode 
+3c6b 6800c217 fetch 1 ,mem_nv_data_number 
+3c6c 1feffe22 mul32 pdata ,34 ,pdata 
+3c6d 1fe27200 icopy loopcnt 
+3c6e 20403ca7 call module_hci_prepare_tx 
+3c6f 68014215 fetch 2 ,mem_nv_data_ptr 
+3c70 1fe20c00 icopy contr 
+3c71 204066d1 call uart_copy_tx_bytes_fast 
+3c72 202066c5 branch uartd_send 
+
+module_hci_event_gkey_generate:
+3c73 700b030e jam hci_event_gkey ,mem_module_uart_opcode 
+3c74 58000004 setarg 4 
+3c75 20403ca7 call module_hci_prepare_tx 
+3c76 680209ba fetch 4 ,mem_gkey 
+3c77 e1420000 istore 4 ,contwu 
+3c78 202066c5 branch uartd_send 
+
+module_hci_event_invalid_packet:
+3c79 700b030f jam hci_event_invalid_packet ,mem_module_uart_opcode 
+3c7a 68110112 hfetch 2 ,core_uart_rxitems 
+3c7b d84000ff arg 0xff ,temp 
+3c7c 20407fdd call not_greater_than 
+3c7d 1fe27200 copy pdata ,loopcnt 
+3c7e 20403ca7 call module_hci_prepare_tx 
+3c7f 204066cb call uartd_prepare_rx 
+3c80 20406703 call uart_copy_rx2tx 
+3c81 202066c5 branch uartd_send 
+
+module_hci_event_passkey_entry_mode:
+3c82 700b0310 jam hci_event_get_passkey ,mem_module_uart_opcode 
+3c83 20203c49 branch module_hci_event_enter_standby_mode_len0 
+
+module_hci_event_le_tk:
+3c84 700b0311 jam hci_event_le_tk ,mem_module_uart_opcode 
+3c85 58000004 setarg 4 
+3c86 20403ca7 call module_hci_prepare_tx 
+3c87 680244c7 fetch 4 ,mem_le_tk 
+3c88 e1420000 istore 4 ,contwu 
+3c89 202066c5 branch uartd_send 
+
+module_hci_event_le_pairing_fail:
+3c8a da200180 arg flag_ble_pairing_fail ,rega 
+3c8b 20203c91 branch module_hci_event_pairing_completed 
+
+module_hci_event_le_pairing_success:
+3c8c da200080 arg flag_ble_pairing_success ,rega 
+3c8d 20203c91 branch module_hci_event_pairing_completed 
+
+module_hci_event_bt_pairing_fail:
+3c8e da200101 arg flag_bt_pairing_fail ,rega 
+3c8f 20203c91 branch module_hci_event_pairing_completed 
+
+module_hci_event_bt_pairing_success:
+3c90 da200001 arg flag_bt_pairing_success ,rega 
+
+module_hci_event_pairing_completed:
+3c91 70466100 jam 0 ,mem_flag_mode_ssp_pin 
+3c92 700b0314 jam hci_event_le_pairing_state ,mem_module_uart_opcode 
+3c93 58000002 setarg 2 
+3c94 20403ca7 call module_hci_prepare_tx 
+3c95 1a227e00 copy rega ,pdata 
+3c96 e1410000 istore 2 ,contwu 
+3c97 202066c5 branch uartd_send 
+
+module_hci_event_pause_enc:
+3c98 da600000 arg flag_event_pause_enc ,regc 
+3c99 20203c9b branch module_hci_event_enc 
+
+module_hci_event_start_enc:
+3c9a da600001 arg flag_event_start_enc ,regc 
+
+module_hci_event_enc:
+3c9b 700b0315 jam hci_event_le_encryption_state ,mem_module_uart_opcode 
+3c9c 58000001 setarg 1 
+3c9d 20403ca7 call module_hci_prepare_tx 
+3c9e 1a627e00 copy regc ,pdata 
+3c9f e1408000 istore 1 ,contwu 
+3ca0 202066c5 branch uartd_send 
+
+module_hci_event_le_gkey:
+3ca1 700b031d jam hci_event_le_gkey ,mem_module_uart_opcode 
+3ca2 58000004 setarg 4 
+3ca3 20403ca7 call module_hci_prepare_tx 
+3ca4 680209ba fetch 4 ,mem_gkey 
+3ca5 e1420000 istore 4 ,contwu 
+3ca6 202066c5 branch uartd_send 
+
+module_hci_prepare_tx:
+3ca7 700b0202 jam 0x02 ,mem_module_uart_cmd 
+3ca8 60008b04 store 1 ,mem_module_uart_len 
+3ca9 600c0aa2 storet 8 ,mem_temp 
+3caa 44f1401c bpatch patch1c_2 ,mem_patch1c 
+3cab 20403cb1 call module_set_mcu_wake_pin_high_delay 
+3cac 680c0aa2 fetcht 8 ,mem_temp 
+3cad 204066c2 call uartd_prepare_tx 
+3cae 68018b02 fetch 3 ,mem_module_uart_cmd 
+3caf e1418000 istore 3 ,contwu 
+3cb0 20600000 rtn 
+
+module_set_mcu_wake_pin_high_delay:
+3cb1 20403cba call module_check_mcu_wake_pin_high 
+3cb2 20608000 rtn true 
+
+module_set_mcu_wake_pin_h_delay:
+3cb3 20403cb8 call module_set_mcu_wake_pin_high 
+3cb4 680246a3 fetch 4 ,mem_module_mcu_wake_delay_us 
+3cb5 1feb7e00 rshift2 pdata ,pdata 
+3cb6 207a0000 rtn blank 
+3cb7 20203cbe branch delay 
+
+module_set_mcu_wake_pin_high:
+3cb8 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin 
+3cb9 20206829 branch gpio_out_active 
+
+module_check_mcu_wake_pin_high:
+3cba 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin 
+3cbb 2020681b branch gpio_check_active 
+
+module_set_mcu_wake_pin_low:
+3cbc 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin 
+3cbd 20206825 branch gpio_out_inactive 
+
+delay:
+3cbe 1fe0ffff increase -1 ,pdata 
+3cbf 20000026 nop 38 
+3cc0 243a3cbe nbranch delay ,blank 
+3cc1 20600000 rtn 
+
+module_le_receive_data:
+3cc2 20403ad4 call module_check_ble_encrypt_state 
+3cc3 20740000 rtn user 
+3cc4 1a227e00 copy rega ,pdata 
+3cc5 600146b7 store 2 ,mem_module_le_rx_data_address 
+3cc6 1a427e00 copy regb ,pdata 
+3cc7 6000c6b6 store 1 ,mem_module_le_rx_data_len 
+3cc8 68010478 fetch 2 ,mem_le_att_handle 
+3cc9 680946bb fetcht 2 ,mem_module_data_write_handle 
+3cca 98467c00 isub temp ,null 
+3ccb 2022bccf branch module_le_receive_data_ok ,zero 
+3ccc 680946bd fetcht 2 ,mem_module_data_write_handle2 
+3ccd 98467c00 isub temp ,null 
+3cce 24628000 nrtn zero 
+
+module_le_receive_data_ok:
+3ccf 600146b9 store 2 ,mem_module_le_rx_data_handle 
+3cd0 20203c3d branch module_hci_event_receive_le_data 
+
+module_exit_sniff:
+3cd1 6800c6bf fetch 1 ,mem_module_flag 
+3cd2 c3828000 rtnbit1 moudle_task_unsniff 
+3cd3 20403cf0 call module_set_unsniff_task_flag 
+3cd4 2020340c branch app_bt_sniff_exit 
+
+module_set_lpm_mult_2:
+3cd5 70417202 jam 2 ,mem_lpm_mult 
+3cd6 20600000 rtn 
+
+module_bb_event_timer:
+3cd7 20203cd8 branch module_read_vdd_timer 
+
+module_read_vdd_timer:
+3cd8 6800c6b2 fetch 1 ,mem_module_read_vdd_flag 
+3cd9 207a0000 rtn blank 
+3cda 6800c6b3 fetch 1 ,mem_module_read_vdd_count 
+3cdb 207a0000 rtn blank 
+3cdc 1fe0ffff increase -1 ,pdata 
+3cdd 6000c6b3 store 1 ,mem_module_read_vdd_count 
+3cde 247a0000 nrtn blank 
+3cdf 7046b30a jam flag_module_read_vdd_count ,mem_module_read_vdd_count 
+3ce0 204068eb call adc_set_mode 
+3ce1 20406908 call vdd_calculate_by_mode 
+3ce2 1fe6fc64 div pdata ,0x64 
+3ce3 20407f86 call wait_div_end 
+3ce4 1807fe00 quotient pdata 
+3ce5 18070400 remainder temp 
+3ce6 6000c6b4 store 1 ,mem_module_vdd_quotient 
+3ce7 6008c6b5 storet 1 ,mem_module_vdd_remainder 
+3ce8 20600000 rtn 
+
+module_control_air_flow:
+3ce9 20407fb4 call check_uart_tx_buff 
+3cea 202133d9 branch app_l2cap_flow_control_enable ,positive 
+3ceb 202033db branch app_l2cap_flow_control_disable 
+
+module_set_sniff_task_flag:
+3cec d8e00006 arg moudle_task_sniff ,queue 
+3ced 20203cfc branch module_set_state 
+
+module_clear_sniff_task_flag:
+3cee d8e00006 arg moudle_task_sniff ,queue 
+3cef 20203cf8 branch module_clr_state 
+
+module_set_unsniff_task_flag:
+3cf0 d8e00005 arg moudle_task_unsniff ,queue 
+3cf1 20203cfc branch module_set_state 
+
+module_clear_unsniff_task_flag:
+3cf2 d8e00005 arg moudle_task_unsniff ,queue 
+3cf3 20203cf8 branch module_clr_state 
+
+module_set_le_tx_data_flag:
+3cf4 d8e00004 arg module_flag_ble_data_finish ,queue 
+3cf5 20203cfc branch module_set_state 
+
+module_clear_le_tx_data_flag:
+3cf6 d8e00004 arg module_flag_ble_data_finish ,queue 
+3cf7 20203cf8 branch module_clr_state 
+
+module_clr_state:
+3cf8 6800c6bf fetch 1 ,mem_module_flag 
+3cf9 f93ffe00 qset0 pdata 
+3cfa 6000c6bf store 1 ,mem_module_flag 
+3cfb 20600000 rtn 
+
+module_set_state:
+3cfc 6800c6bf fetch 1 ,mem_module_flag 
+3cfd f9207e00 qset1 pdata 
+3cfe 6000c6bf store 1 ,mem_module_flag 
+3cff 20600000 rtn 
+
+mouse_init:
+3d00 20403d39 call mouse_setting_config 
+3d01 2040640f call spi_ncs_enable 
+3d02 204040c6 call mouse_init_sunt 
+3d03 20403d66 call mouse_dpi_config 
+3d04 20406411 call spi_ncs_disable 
+3d05 20758000 rtn wake 
+3d06 20403d16 call mouse_cheak_enable_usb 
+3d07 20403d19 call mouse_cb_fuction 
+3d08 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d09 c3880000 rtnbit1 mouse_enable_usb 
+3d0a 20403d4e call mouse_wakeup_from_power 
+3d0b c6130000 rtnmark1 mark_24g 
+3d0c 68014682 fetch 2 ,mem_ui_state_map 
+3d0d c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery 
+3d0e 202042a2 branch mouse_check_reconn_target 
+
+mouse_delay_4s:
+3d0f 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d10 c40d8000 rtnbit0 mouse_enable_init_delay 
+3d11 df200014 arg 20 ,loopcnt 
+
+mouse_delay_20ms:
+3d12 58030d40 setarg 200000 
+3d13 20402a8f call sleep 
+3d14 c2007ec1 loop delay_10ms 
+3d15 20600000 rtn 
+
+mouse_cheak_enable_usb:
+3d16 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d17 c4080000 rtnbit0 mouse_enable_usb 
+3d18 202048ea branch usb_init 
+
+mouse_cb_fuction:
+3d19 5800416d setarg mouse_le 
+3d1a 600141ef store 2 ,mem_cb_le_process 
+3d1b 58003f77 setarg mouse_send_process 
+3d1c 600141f1 store 2 ,mem_cb_bt_process 
+3d1d 58003ebb setarg mouse_process_lpm_before 
+3d1e 600141ed store 2 ,mem_cb_before_lpm 
+3d1f 5800417c setarg mouse_priority_bb_event 
+3d20 600141f5 store 2 ,mem_cb_bb_event_process 
+3d21 58003de3 setarg mouse_idle 
+3d22 600141f3 store 2 ,mem_cb_idle_process 
+3d23 58003eb3 setarg mouse_before_hibernate 
+3d24 600141eb store 2 ,mem_cb_before_hibernate 
+3d25 58003d5b setarg le_mouse_bb_event_connect_complete 
+3d26 600141f9 store 2 ,mem_cb_att_write 
+3d27 20402c7a call g24_head_ptr2regc 
+3d28 58004401 setarg mouse_g24_package_data 
+3d29 1a608ad8 add regc ,offset_24g_cb_data ,contw 
+3d2a e0a10000 istore 2 ,contw 
+3d2b 58004406 setarg mouse_g24_enter_lpm 
+3d2c 1a608ada add regc ,offset_24g_cb_lpm_prepare ,contw 
+3d2d e0a10000 istore 2 ,contw 
+3d2e 58003ebf setarg mouse_lpm_before_common 
+3d2f 1a608adc add regc ,offset_24g_cb_lpm_before ,contw 
+3d30 e0a10000 istore 2 ,contw 
+3d31 580041f9 setarg mouse_bb_event_timer 
+3d32 600141fd store 2 ,mem_cb_event_timer 
+3d33 58003d36 setarg mouse_spi_write_flash_cb 
+3d34 60014201 store 2 ,mem_cb_spi_flash_write_complate 
+3d35 20600000 rtn 
+
+mouse_spi_write_flash_cb:
+
+mouse_spi_init:
+3d36 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d37 c30964d7 bbit0 mouse_enable_spi2 ,spid_init 
+3d38 202064da branch spid_init2 
+
+mouse_setting_config:
+3d39 20758000 rtn wake 
+3d3a 20402c9d call g24_set_device_addr 
+3d3b 20403e6e call mouse_gpio_init 
+3d3c 20403e1e call mouse_param_init 
+3d3d 20403e54 call mouse_adc_init 
+3d3e 20405810 call le_set_config_fixed_ltk 
+3d3f 20405839 call le_set_justwork 
+3d40 2040582c call le_set_fixed_ltk 
+3d41 20405818 call le_set_config_read_authentication 
+3d42 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d43 c28a3d46 bbit1 mouse_enable_eeprom ,mouse_init_iic 
+3d44 c289c414 bbit1 mouse_enable_flash ,mouse_load_flash_info_cheak 
+3d45 20600000 rtn 
+
+mouse_init_iic:
+3d46 2040659c call iic_init_390k 
+3d47 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d48 2feffe19 isolate1 mouse_enable_2k_eeprom ,pdata 
+3d49 2440e5c2 ncall clear_eeprom_size_2k ,true 
+3d4a 2040443f call mouse_load_eeprom_dpi 
+3d4b 20403dc9 call mouse_init_environment 
+3d4c 204041aa call mouse_set_24g_addr_eeprom 
+3d4d 202065df branch iicd_read_eep_data 
+
+mouse_wakeup_from_power:
+3d4e 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d4f c30f3d53 bbit0 mouse_enable_wakeup_from_power ,mouse_wakeup_no_from_power 
+3d50 68008abd fetch 1 ,mem_wakup_from_power_flag 
+3d51 2fec0003 isolate0 gpio_latch ,pdata 
+3d52 24608000 nrtn true 
+
+mouse_wakeup_no_from_power:
+3d53 6800c71f fetch 1 ,mem_reconn_times_init 
+3d54 6000c71e store 1 ,mem_reconn_times 
+3d55 6800c6f5 fetch 1 ,mem_config_function_enable 
+3d56 c3830000 rtnbit1 enable_select_device_by_switch 
+
+mouse_start_24g_mode:
+3d57 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d58 c4088000 rtnbit0 mouse_enable_24g 
+3d59 c28eaee4 bbit1 mouse_enable_auto_24g_paring ,g24_auto_pair_start 
+3d5a 20202f2c branch g24_check_51cmd_start_24g 
+
+le_mouse_bb_event_connect_complete:
+3d5b 68008478 fetch 1 ,mem_le_att_handle 
+3d5c 1fe67e1a sub pdata ,26 ,pdata 
+3d5d 24628000 nrtn zero 
+3d5e 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp 
+3d5f 20407d8f call ui_ipc_send_cmd 
+
+mouse_le_write_enable:
+3d60 d8e00000 arg write_req_enable_flag ,queue 
+3d61 202041b9 branch mouse_le_enable_connect_flag 
+
+mouse_dpi_up:
+3d62 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state 
+3d63 c1008000 rtneq dpi_button_state_up 
+3d64 7046b601 jam dpi_button_state_up ,mem_mouse_dpi_button_state 
+3d65 20600000 rtn 
+
+mouse_dpi_config:
+3d66 6800c6e1 fetch 1 ,mem_config_sensor_motion 
+3d67 1fe17e0f and pdata ,0x0f ,pdata 
+3d68 6000c77a store 1 ,mem_mouse_dpi 
+3d69 20203d80 branch mouse_seting_dpi + 2 
+
+mouse_dpi_cheak:
+3d6a 6808c6e7 fetcht 1 ,mem_dpi_button_gpio 
+3d6b 2040681d call gpio_get_bit 
+3d6c 2420bd62 nbranch mouse_dpi_up ,true 
+
+mouse_dpi_down:
+3d6d 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state 
+3d6e c1000000 rtneq dpi_button_state_down 
+3d6f 7046b600 jam dpi_button_state_down ,mem_mouse_dpi_button_state 
+3d70 6800c77a fetch 1 ,mem_mouse_dpi 
+3d71 1fe0fe01 increase 1 ,pdata 
+3d72 1fe17e03 and pdata ,0x03 ,pdata 
+3d73 6000c77a store 1 ,mem_mouse_dpi 
+3d74 20403d7e call mouse_seting_dpi 
+3d75 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d76 c28a443b bbit1 mouse_enable_eeprom ,mouse_store_eerpom_dpi 
+3d77 c289bd79 bbit1 mouse_enable_flash ,mouse_before_store_flash_cpi 
+3d78 20600000 rtn 
+
+mouse_before_store_flash_cpi:
+3d79 d840001e arg mouse_spi2_clk_gpio ,temp 
+3d7a 2040680e call gpio_config_output 
+3d7b d840001f arg mouse_spi2_sdio_gpio ,temp 
+3d7c 2040680e call gpio_config_output 
+3d7d 20204435 branch mouse_store_flash_device_info 
+
+mouse_seting_dpi:
+3d7e 44f1c01c bpatch patch1c_3 ,mem_patch1c 
+3d7f 2040424a call mosue_dpi_led_blink_init 
+3d80 6800c6e0 fetch 1 ,mem_config_sensor_type 
+3d81 c002bdaa beq p3610 ,mouse_seting_3610_dpi 
+3d82 c0023d96 beq p3212 ,mouse_seting_3212_dpi 
+3d83 6800c77a fetch 1 ,mem_mouse_dpi 
+3d84 c0003d8a beq mouse_dpi_level1 ,mouse_set_cpi1 
+3d85 c000bd88 beq mouse_dpi_level2 ,mouse_set_cpi2 
+3d86 c0013d8c beq mouse_dpi_level3 ,mouse_set_cpi3 
+3d87 c001bd8e beq mouse_dpi_level4 ,mouse_set_cpi4 
+
+mouse_set_cpi2:
+3d88 6800c780 fetch 1 ,mem_320x_dpi_2 
+3d89 20203dbe branch mouse_p3205_dpi 
+
+mouse_set_cpi1:
+3d8a 6800c77f fetch 1 ,mem_320x_dpi_1 
+3d8b 20203dbe branch mouse_p3205_dpi 
+
+mouse_set_cpi3:
+3d8c 6800c781 fetch 1 ,mem_320x_dpi_3 
+3d8d 20203dbe branch mouse_p3205_dpi 
+
+mouse_set_cpi4:
+3d8e 6800c782 fetch 1 ,mem_320x_dpi_4 
+3d8f 20203dbe branch mouse_p3205_dpi 
+
+moue_seting_cpi_count:
+3d90 6800c6e0 fetch 1 ,mem_config_sensor_type 
+3d91 c1030000 rtneq p3065_xy 
+3d92 6800c6b5 fetch 1 ,mem_mouse_cpi_count 
+3d93 1fe0fe01 increase 1 ,pdata 
+3d94 6000c6b5 store 1 ,mem_mouse_cpi_count 
+3d95 20600000 rtn 
+
+mouse_seting_3212_dpi:
+3d96 6800c77a fetch 1 ,mem_mouse_dpi 
+3d97 c0003d9d beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 
+3d98 c000bd9b beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 
+3d99 c0013d9f beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 
+3d9a c001bda1 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 
+
+mouse_set_p3212_cpi2:
+3d9b 6800c784 fetch 1 ,mem_3212_dpi_2 
+3d9c 20203da2 branch mouse_p3212_dpi 
+
+mouse_set_p3212_cpi1:
+3d9d 6800c783 fetch 1 ,mem_3212_dpi_1 
+3d9e 20203da2 branch mouse_p3212_dpi 
+
+mouse_set_p3212_cpi3:
+3d9f 6800c785 fetch 1 ,mem_3212_dpi_3 
+3da0 20203da2 branch mouse_p3212_dpi 
+
+mouse_set_p3212_cpi4:
+3da1 6800c786 fetch 1 ,mem_3212_dpi_4 
+
+mouse_p3212_dpi:
+3da2 6000c6b5 store 1 ,mem_mouse_cpi_count 
+3da3 1fed7e00 lshift8 pdata ,pdata 
+3da4 1fe22200 copy pdata ,rega 
+3da5 1fe0fe0d add pdata ,mouse_p3212_dpi_xaddress ,pdata 
+3da6 20406413 call twspi_write 
+3da7 1a227e00 copy rega ,pdata 
+3da8 1fe0fe0e add pdata ,mouse_p3212_dpi_yaddress ,pdata 
+3da9 20206413 branch twspi_write 
+
+mouse_seting_3610_dpi:
+3daa 6800c77a fetch 1 ,mem_mouse_dpi 
+3dab c0003db1 beq mouse_dpi_level1 ,mouse_set_p3610_cpi1 
+3dac c000bdaf beq mouse_dpi_level2 ,mouse_set_p3610_cpi2 
+3dad c0013db3 beq mouse_dpi_level3 ,mouse_set_p3610_cpi3 
+3dae c001bdb5 beq mouse_dpi_level4 ,mouse_set_p3610_cpi4 
+
+mouse_set_p3610_cpi2:
+3daf 6800c788 fetch 1 ,mem_3610_dpi_2 
+3db0 20203db6 branch mouse_p3610_dpi 
+
+mouse_set_p3610_cpi1:
+3db1 6800c787 fetch 1 ,mem_3610_dpi_1 
+3db2 20203db6 branch mouse_p3610_dpi 
+
+mouse_set_p3610_cpi3:
+3db3 6800c789 fetch 1 ,mem_3610_dpi_3 
+3db4 20203db6 branch mouse_p3610_dpi 
+
+mouse_set_p3610_cpi4:
+3db5 6800c78a fetch 1 ,mem_3610_dpi_4 
+
+mouse_p3610_dpi:
+3db6 6000c6b5 store 1 ,mem_mouse_cpi_count 
+3db7 204040c0 call mouse_spi_sdio_gpio_pollup 
+3db8 6800c6b5 fetch 1 ,mem_mouse_cpi_count 
+
+mouse_reset_p3610_dpi:
+3db9 1fe0fe80 add pdata ,0x80 ,pdata 
+3dba 1fed7e00 lshift8 pdata ,pdata 
+3dbb 1fe0fe05 add pdata ,mouse_p3610_dpi_address ,pdata 
+3dbc 1fe22200 copy pdata ,rega 
+3dbd 2020415a branch mouse_set_sensor_reg 
+
+mouse_p3205_dpi:
+3dbe 6000c6b5 store 1 ,mem_mouse_cpi_count 
+3dbf 20403d90 call moue_seting_cpi_count 
+3dc0 6800c6b5 fetch 1 ,mem_mouse_cpi_count 
+3dc1 58000006 setarg mouse_dpi_address 
+3dc2 20406414 call twspi_read 
+3dc3 1fe104f8 and pdata ,0xf8 ,temp 
+3dc4 6800c6b5 fetch 1 ,mem_mouse_cpi_count 
+3dc5 9840fe00 iadd temp ,pdata 
+3dc6 1fed7e00 lshift8 pdata ,pdata 
+3dc7 1fe0fe06 add pdata ,mouse_dpi_address ,pdata 
+3dc8 20206413 branch twspi_write 
+
+mouse_init_environment:
+3dc9 204033c4 call app_initflag_check 
+3dca 2022c316 branch mouse_eeprom_load_recon_info ,zero 
+3dcb 2040441c call mouse_ble_init_address 
+3dcc 204042e4 call mouse_store_eeprom_device_info 
+3dcd 202033bd branch app_initflag_store 
+
+mouse_24g_pairing_button:
+3dce 68014707 fetch 2 ,mem_24g_pairing_timer_count 
+3dcf 207a0000 rtn blank 
+3dd0 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3dd1 c4088000 rtnbit0 mouse_enable_24g 
+3dd2 c3818000 rtnbit1 mosue_24g_pairing_flag 
+3dd3 c6130000 rtnmark1 mark_24g 
+3dd4 20404083 call mouse_check_key_gpio 
+3dd5 c1838000 rtnne mouse_lmr_button 
+3dd6 20404482 call mouse_devce_led_off 
+3dd7 d8e00003 arg mosue_24g_pairing_flag ,queue 
+3dd8 204043ce call mouse_enable_function_flag 
+3dd9 58000000 setarg 0 
+3dda 600146ae store 2 ,mem_mouse_direct_timer 
+3ddb 6000c6b4 store 1 ,mem_mouse_send_blank_timer 
+3ddc 20403263 call g24_set0_mem_check_dongle_times 
+3ddd 68014682 fetch 2 ,mem_ui_state_map 
+3dde c283c392 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect 
+3ddf c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect 
+3de0 c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect 
+3de1 204042ca call mouse_stop_discovery 
+3de2 20202ead branch g24_start_pairing_sm1 
+
+mouse_idle:
+3de3 20403dce call mouse_24g_pairing_button 
+3de4 20407e34 call ui_check_paring_button 
+3de5 20403d6a call mouse_dpi_cheak 
+3de6 20403de9 call mouse_usb_isr 
+3de7 20403ee0 call mouse_wheel_check 
+3de8 20203df7 branch mouse_usb_mode 
+
+mouse_usb_isr:
+3de9 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3dea c4080000 rtnbit0 mouse_enable_usb 
+3deb 204048d3 call usb_isr 
+3dec 202048fd branch usb_offline_state 
+
+mouse_cheak_usb:
+3ded 68108a04 hfetch 1 ,core_usb_addr 
+3dee c303bdf1 bbit0 7 ,mouse_usb_no_exsit 
+3def c283bdf4 bbit1 7 ,mouse_usb_exsit 
+3df0 20600000 rtn 
+
+mouse_usb_no_exsit:
+3df1 6800c6ff fetch 1 ,mem_usb_addr 
+3df2 c4038000 rtnbit0 7 
+3df3 2020659a branch soft_reset_chip 
+
+mouse_usb_exsit:
+3df4 6800c6ff fetch 1 ,mem_usb_addr 
+3df5 c3838000 rtnbit1 7 
+3df6 20204381 branch mouse_stop_bluetooth_mode 
+
+mouse_usb_mode:
+3df7 20403ded call mouse_cheak_usb 
+3df8 68108a04 hfetch 1 ,core_usb_addr 
+3df9 6000c6ff store 1 ,mem_usb_addr 
+3dfa c4038000 rtnbit0 7 
+3dfb 20403e07 call mouse_clkn_check 
+3dfc 680246f9 fetch 4 ,mem_btclk_sensor 
+3dfd 6808c6fd fetcht 1 ,mem_wire_usb_interval 
+3dfe 98408400 iadd temp ,temp 
+3dff 1c427e00 copy clkn_bt ,pdata 
+3e00 98467c00 isub temp ,null 
+3e01 24610000 nrtn positive 
+3e02 600246f9 store 4 ,mem_btclk_sensor 
+3e03 20403f97 call mouse_motion 
+3e04 24740000 nrtn user 
+3e05 700d3804 jam 4 ,mem_usb_tx_enable 
+3e06 20203e0f branch mouse_wired_to_usb 
+
+mouse_clkn_check:
+3e07 680a46f9 fetcht 4 ,mem_btclk_sensor 
+3e08 1c427e00 copy clkn_bt ,pdata 
+3e09 98467c00 isub temp ,null 
+3e0a 24413e0c ncall mouse_clkn_timeout ,positive 
+3e0b 20600000 rtn 
+
+mouse_clkn_timeout:
+3e0c 58000000 setarg 0 
+3e0d 600246f9 store 4 ,mem_btclk_sensor 
+3e0e 20600000 rtn 
+
+mouse_wired_to_usb:
+3e0f 68008d38 fetch 1 ,mem_usb_tx_enable 
+3e10 c4010000 rtnbit0 2 
+3e11 20203e12 branch mouse_data_push 
+
+mouse_data_push:
+3e12 68108a04 hfetch 1 ,core_usb_addr 
+3e13 c4038000 rtnbit0 7 
+3e14 700d5220 jam usb_ep2_ms ,mem_usb_ep2_data 
+3e15 58000001 setarg ms_report_id 
+3e16 60008d54 store 1 ,mem_usb_mouse_data 
+3e17 6803c69a fetch 7 ,mem_mouse_key 
+3e18 e0a38000 istore 7 ,contw 
+3e19 20600000 rtn 
+
+mouse_enable_clock_qdecoder:
+3e1a 68110050 hfetch 2 ,core_clkoff 
+3e1b 793ffe0b set0 clock_off_qdecoder ,pdata 
+3e1c 60110050 hstore 2 ,core_clkoff 
+3e1d 20600000 rtn 
+
+mouse_param_init:
+3e1e 58008c00 setarg 0x8c00 
+3e1f 60014575 store 2 ,mem_ui_uuid_table 
+3e20 58008e7a setarg 0x8e7a 
+3e21 600144bc store 2 ,mem_ui_le_uuid_table 
+3e22 58002402 setarg 0x2402 
+3e23 600140bd store 2 ,mem_fcomp_mul 
+3e24 58002580 setarg 0x2580 
+3e25 6001c0aa store 3 ,mem_class 
+3e26 70417303 jam 3 ,mem_lpm_mult_timeout 
+3e27 70415608 jam 8 ,mem_lpm_overhead 
+3e28 7046d901 jam dpi_button_state_up ,mem_select_device_button_statue 
+3e29 58000200 setarg 0x0200 
+3e2a 60014154 store 2 ,mem_lpm_interval 
+3e2b 7044a617 jam 0x17 ,mem_le_local_mtu 
+3e2c 7044a817 jam 0x17 ,mem_le_remote_mtu 
+3e2d 58000a77 setarg 0x0a77 
+3e2e 60014212 store 2 ,mem_spi_init_clk 
+3e2f 38000306 setsect 0 ,0x306 
+3e30 38044440 setsect 1 ,0x4440 
+3e31 38090000 setsect 2 ,0x10000 
+3e32 380c4408 setsect 3 ,0x4408 
+3e33 6004c577 store 9 ,mem_all_uuid_16bits 
+3e34 38001224 setsect 0 ,0x1224 
+3e35 38044000 setsect 1 ,0x4000 
+3e36 38080000 setsect 2 ,0x0 
+3e37 e0a28000 istore 5 ,contw 
+3e38 3803ffff setsect 0 ,0x3ffff 
+3e39 3806fe23 setsect 1 ,0x2fe23 
+3e3a 380999d9 setsect 2 ,0x199d9 
+3e3b 380c020d setsect 3 ,0x20d 
+3e3c 60044098 store 8 ,mem_features 
+3e3d 5800012c setarg 0x012c 
+3e3e 60014707 store 2 ,mem_24g_pairing_timer_count 
+3e3f 204057a3 call le_modified_name 
+3e40 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3e41 c40f8000 rtnbit0 mouse_enable_gpio_control_adc_sensor 
+3e42 20403e44 call mouse_sensor_set_angle 
+3e43 20203e4c branch mouse_select_adc 
+
+mouse_sensor_set_angle:
+3e44 6808c6f7 fetcht 1 ,mem_select_sensor_angle_gpio 
+3e45 204067fb call gpio_config_input 
+3e46 6808c6f7 fetcht 1 ,mem_select_sensor_angle_gpio 
+3e47 2040681d call gpio_get_bit 
+3e48 7046f603 jam mouse_3clk_angle ,mem_config_sensor_angle 
+3e49 20608000 rtn true 
+3e4a 7046f602 jam mouse_12clk_angle ,mem_config_sensor_angle 
+3e4b 20600000 rtn 
+
+mouse_select_adc:
+3e4c 6808c6f8 fetcht 1 ,mem_select_adc_gpio 
+3e4d 204067fb call gpio_config_input 
+3e4e 6808c6f8 fetcht 1 ,mem_select_adc_gpio 
+3e4f 2040681d call gpio_get_bit 
+3e50 70422d00 jam adc_config_vinlpm ,mem_adc_config_flag 
+3e51 20608000 rtn true 
+3e52 70422d02 jam adc_config_gpio ,mem_adc_config_flag 
+3e53 20600000 rtn 
+
+mouse_adc_init:
+3e54 6800c22d fetch 1 ,mem_adc_config_flag 
+3e55 c0003e59 beq adc_config_vinlpm ,mouse_adc_init_data_vinlpm 
+3e56 c000be62 beq adc_config_hvin ,mouse_adc_init_data_hvin 
+3e57 c0013e6b beq adc_config_gpio ,mouse_adc_init_data_io 
+3e58 20203e59 branch mouse_adc_init_data_vinlpm 
+
+mouse_adc_init_data_vinlpm:
+3e59 68094221 fetcht 2 ,mem_2v_adc_vinlpm_data 
+3e5a 68014227 fetch 2 ,mem_3v_adc_vinlpm_data 
+3e5b 98467e00 isub temp ,pdata 
+3e5c 1feffe14 mul32 pdata ,20 ,pdata 
+3e5d 1fe6fc64 div pdata ,100 
+3e5e 20407f86 call wait_div_end 
+3e5f 1807fe00 quotient pdata 
+3e60 600146d0 store 2 ,mem_adc_reference_voltage 
+3e61 20600000 rtn 
+
+mouse_adc_init_data_hvin:
+3e62 6809421f fetcht 2 ,mem_1v_adc_hvin_data 
+3e63 68014225 fetch 2 ,mem_5v_adc_hvin_data 
+3e64 98467e00 isub temp ,pdata 
+3e65 1feffee6 mul32 pdata ,230 ,pdata 
+3e66 1fe6fd90 div pdata ,400 
+3e67 20407f86 call wait_div_end 
+3e68 1807fe00 quotient pdata 
+3e69 600146d0 store 2 ,mem_adc_reference_voltage 
+3e6a 20600000 rtn 
+
+mouse_adc_init_data_io:
+3e6b 68014223 fetch 2 ,mem_1v_adc_io_data 
+3e6c 600146d0 store 2 ,mem_adc_reference_voltage 
+3e6d 20600000 rtn 
+
+mouse_gpio_init:
+3e6e 6808c23a fetcht 1 ,mem_eeprom_wp_gpio 
+3e6f 2040680e call gpio_config_output 
+3e70 204048fb call usb_offline_check_init 
+3e71 6808c6e2 fetcht 1 ,mem_lbutton_gpio 
+3e72 204067fb call gpio_config_input 
+3e73 6808c6e3 fetcht 1 ,mem_rbutton_gpio 
+3e74 204067fb call gpio_config_input 
+3e75 6808c6e4 fetcht 1 ,mem_mbutton_gpio 
+3e76 204067fb call gpio_config_input 
+3e77 6808c6f3 fetcht 1 ,mem_sensor_data_gpio 
+3e78 204067fb call gpio_config_input 
+3e79 6808c6dc fetcht 1 ,mem_sensor_reset_gpio 
+3e7a 2040680e call gpio_config_output 
+3e7b 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio 
+3e7c 204067fb call gpio_config_input 
+3e7d 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio 
+3e7e 204067fb call gpio_config_input 
+3e7f 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio 
+3e80 204067fb call gpio_config_input 
+3e81 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio 
+3e82 204067fb call gpio_config_input 
+3e83 6808c6e5 fetcht 1 ,mem_bk_button_gpio 
+3e84 204067fb call gpio_config_input 
+3e85 6808c6e6 fetcht 1 ,mem_fw_button_gpio 
+3e86 204067fb call gpio_config_input 
+3e87 6808c6ef fetcht 1 ,mem_config_low_voltage_alarm_gpio 
+3e88 2040680e call gpio_config_output 
+3e89 6808c6f0 fetcht 1 ,mem_config_device1_led_gpio 
+3e8a 2040680e call gpio_config_output 
+3e8b 6808c6f1 fetcht 1 ,mem_config_device2_led_gpio 
+3e8c 2040680e call gpio_config_output 
+3e8d 6808c6f2 fetcht 1 ,mem_config_device3_led_gpio 
+3e8e 2040680e call gpio_config_output 
+3e8f 6808c6f4 fetcht 1 ,mem_dpi_led_gpio 
+3e90 2040680e call gpio_config_output 
+3e91 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 
+3e92 204067fb call gpio_config_input 
+3e93 6808c6ec fetcht 1 ,mem_config_bt_button_gpio 
+3e94 204067fb call gpio_config_input 
+3e95 6808c6e7 fetcht 1 ,mem_dpi_button_gpio 
+3e96 202067fb branch gpio_config_input 
+
+mouse_wheel_gpio_set_wake:
+3e97 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio 
+3e98 204067dd call gpio_set_wake_by_current_state 
+3e99 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio 
+3e9a 204067dd call gpio_set_wake_by_current_state 
+3e9b 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio 
+3e9c 204067dd call gpio_set_wake_by_current_state 
+3e9d 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio 
+3e9e 202067dd branch gpio_set_wake_by_current_state 
+
+mouse_before_hibernate_wheel_gpio_set:
+3e9f 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio 
+3ea0 20403ea7 call mouse_gpio_set_pupd_by_input 
+3ea1 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio 
+3ea2 20403ea7 call mouse_gpio_set_pupd_by_input 
+3ea3 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio 
+3ea4 20403ea7 call mouse_gpio_set_pupd_by_input 
+3ea5 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio 
+3ea6 20203ea7 branch mouse_gpio_set_pupd_by_input 
+
+mouse_gpio_set_pupd_by_input:
+3ea7 18467cff sub temp ,ui_button_gpio_disable ,null 
+3ea8 20628000 rtn zero 
+3ea9 18410e7f and temp ,0x7f ,queue 
+3eaa 6812011c hfetch 4 ,core_gpio_in 
+3eab afefffff qisolate1 pdata 
+3eac 68120078 hfetch 4 ,core_gpio_pu0 
+3ead f920fe00 qsetflag true ,pdata 
+3eae 60120078 hstore 4 ,core_gpio_pu0 
+3eaf 6812007c hfetch 4 ,core_gpio_pd0 
+3eb0 fd20fe00 nqsetflag true ,pdata 
+3eb1 6012007c hstore 4 ,core_gpio_pd0 
+3eb2 20600000 rtn 
+
+mouse_before_hibernate:
+3eb3 78347c00 enable user 
+3eb4 68120138 hfetch 4 ,0x8138 
+3eb5 79347e1a setflag user ,26 ,pdata 
+3eb6 6012004c hstore 4 ,core_lpm_reg 
+3eb7 20402c21 call lpm_write_ctrl 
+3eb8 20404482 call mouse_devce_led_off 
+3eb9 20403e9f call mouse_before_hibernate_wheel_gpio_set 
+3eba 20203ebf branch mouse_lpm_before_common 
+
+mouse_process_lpm_before:
+3ebb 20403ebf call mouse_lpm_before_common 
+3ebc 680080a0 fetch 1 ,mem_lpm_current_mult 
+3ebd 247a0000 nrtn blank 
+3ebe 202067ed branch gpio_clr_wake 
+
+mouse_lpm_before_common:
+3ebf 20403ee0 call mouse_wheel_check 
+3ec0 d8400019 arg mouse_spi1_clk_gpio ,temp 
+3ec1 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3ec2 2feffe12 isolate1 mouse_enable_spi2 ,pdata 
+3ec3 2040bede call mouse_spi_clk_gpio ,true 
+3ec4 2040680e call gpio_config_output 
+3ec5 204063ee call twspi_disable 
+3ec6 6808c6e2 fetcht 1 ,mem_lbutton_gpio 
+3ec7 204067dd call gpio_set_wake_by_current_state 
+3ec8 6808c6e3 fetcht 1 ,mem_rbutton_gpio 
+3ec9 204067dd call gpio_set_wake_by_current_state 
+3eca 6808c6e4 fetcht 1 ,mem_mbutton_gpio 
+3ecb 204067dd call gpio_set_wake_by_current_state 
+3ecc 6808c6e5 fetcht 1 ,mem_bk_button_gpio 
+3ecd 204067dd call gpio_set_wake_by_current_state 
+3ece 6808c6e6 fetcht 1 ,mem_fw_button_gpio 
+3ecf 204067dd call gpio_set_wake_by_current_state 
+3ed0 6808c6e7 fetcht 1 ,mem_dpi_button_gpio 
+3ed1 204067dd call gpio_set_wake_by_current_state 
+3ed2 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 
+3ed3 204067dd call gpio_set_wake_by_current_state 
+3ed4 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio 
+3ed5 204067dd call gpio_set_wake_by_current_state 
+3ed6 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio 
+3ed7 204067dd call gpio_set_wake_by_current_state 
+3ed8 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio 
+3ed9 204067dd call gpio_set_wake_by_current_state 
+3eda 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio 
+3edb 204067dd call gpio_set_wake_by_current_state 
+3edc 6808c6f3 fetcht 1 ,mem_sensor_data_gpio 
+3edd 202067e1 branch gpio_set_wake 
+
+mouse_spi_clk_gpio:
+3ede d840001e arg mouse_spi2_clk_gpio ,temp 
+3edf 20600000 rtn 
+
+mouse_wheel_check:
+3ee0 44f2401c bpatch patch1c_4 ,mem_patch1c 
+3ee1 20403eee call mouse_t_wheel_scan 
+3ee2 20403f36 call mouse_wheel_scan 
+3ee3 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel 
+3ee4 6808c6b7 fetcht 1 ,mem_wheel_tb_old_pinlevel 
+3ee5 6000c6b7 store 1 ,mem_wheel_tb_old_pinlevel 
+3ee6 98467c00 isub temp ,null 
+3ee7 2422b3d4 nbranch app_lpm_wake_auto_lock ,zero 
+3ee8 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel 
+3ee9 6808c6bd fetcht 1 ,mem_mwheel_b_old_pinlevel 
+3eea 6000c6bd store 1 ,mem_mwheel_b_old_pinlevel 
+3eeb 98467c00 isub temp ,null 
+3eec 2422b3d4 nbranch app_lpm_wake_auto_lock ,zero 
+3eed 20600000 rtn 
+
+mouse_t_wheel_scan:
+3eee 6800c6ea fetch 1 ,mem_whee_ta_data_gpio 
+3eef c17f8000 rtneq gpio_disable 
+3ef0 da200000 arg 0 ,rega 
+3ef1 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio 
+3ef2 2040681d call gpio_get_bit 
+3ef3 7920a200 setflag true ,0 ,rega 
+3ef4 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio 
+3ef5 2040681d call gpio_get_bit 
+3ef6 7920a201 setflag true ,1 ,rega 
+3ef7 1a227e00 copy rega ,pdata 
+3ef8 6000c6b8 store 1 ,mem_wheel_tb_new_pinlevel 
+3ef9 c000befe beq 0x01 ,mouse_t_wheel_scan_judge1 
+3efa c0013f02 beq 0x02 ,mouse_t_wheel_scan_judge2 
+3efb 6800c6b9 fetch 1 ,mem_wheel_tog 
+3efc c283bf0e bbit1 7 ,mouse_t_wheel_scan_judge3 
+3efd 20600000 rtn 
+
+mouse_t_wheel_scan_judge1:
+3efe 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel 
+3eff c0003f06 beq 0 ,mouse_t_wheel_scan_judge11 
+3f00 c001bf08 beq 3 ,mouse_t_wheel_scan_judge12 
+3f01 20600000 rtn 
+
+mouse_t_wheel_scan_judge2:
+3f02 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel 
+3f03 c0003f0a beq 0 ,mouse_t_wheel_scan_judge21 
+3f04 c001bf0c beq 3 ,mouse_t_wheel_scan_judge22 
+3f05 20600000 rtn 
+
+mouse_t_wheel_scan_judge11:
+3f06 7046b982 jam 0x82 ,mem_wheel_tog 
+3f07 20600000 rtn 
+
+mouse_t_wheel_scan_judge12:
+3f08 7046b981 jam 0x81 ,mem_wheel_tog 
+3f09 20600000 rtn 
+
+mouse_t_wheel_scan_judge21:
+3f0a 7046b980 jam 0x80 ,mem_wheel_tog 
+3f0b 20600000 rtn 
+
+mouse_t_wheel_scan_judge22:
+3f0c 7046b983 jam 0x83 ,mem_wheel_tog 
+3f0d 20600000 rtn 
+
+mouse_t_wheel_scan_judge3:
+3f0e 6800c6b9 fetch 1 ,mem_wheel_tog 
+3f0f 793ffe07 set0 7 ,pdata 
+3f10 6000c6b9 store 1 ,mem_wheel_tog 
+3f11 c0003f16 beq 0 ,mouse_t_wheel_scan_judge30 
+3f12 c000bf19 beq 1 ,mouse_t_wheel_scan_judge31 
+3f13 c0013f1c beq 2 ,mouse_t_wheel_scan_judge32 
+3f14 c001bf1f beq 3 ,mouse_t_wheel_scan_judge33 
+3f15 20600000 rtn 
+
+mouse_t_wheel_scan_judge30:
+3f16 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel 
+3f17 c001bf22 beq 3 ,mouse_wheel_t_forward 
+3f18 20600000 rtn 
+
+mouse_t_wheel_scan_judge31:
+3f19 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel 
+3f1a c0003f22 beq 0 ,mouse_wheel_t_forward 
+3f1b 20600000 rtn 
+
+mouse_t_wheel_scan_judge32:
+3f1c 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel 
+3f1d c001bf2c beq 3 ,mouse_wheel_t_back 
+3f1e 20600000 rtn 
+
+mouse_t_wheel_scan_judge33:
+3f1f 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel 
+3f20 c0003f2c beq 0 ,mouse_wheel_t_back 
+3f21 20600000 rtn 
+
+mouse_wheel_t_forward:
+3f22 6800c6bc fetch 1 ,mem_mouse_tz_data_count1 
+3f23 1fe0fe01 increase 1 ,pdata 
+3f24 6000c6bc store 1 ,mem_mouse_tz_data_count1 
+3f25 1fe67c01 sub pdata ,1 ,null 
+3f26 20610000 rtn positive 
+3f27 7046bc00 jam 0 ,mem_mouse_tz_data_count1 
+3f28 6800c6ba fetch 1 ,mem_mouse_tz_data 
+3f29 1fe0fe01 increase 1 ,pdata 
+3f2a 6000c6ba store 1 ,mem_mouse_tz_data 
+3f2b 20600000 rtn 
+
+mouse_wheel_t_back:
+3f2c 6800c6bb fetch 1 ,mem_mouse_tz_data_count 
+3f2d 1fe0fe01 increase 1 ,pdata 
+3f2e 6000c6bb store 1 ,mem_mouse_tz_data_count 
+3f2f 1fe67c01 sub pdata ,1 ,null 
+3f30 20610000 rtn positive 
+3f31 7046bb00 jam 0 ,mem_mouse_tz_data_count 
+3f32 6800c6ba fetch 1 ,mem_mouse_tz_data 
+3f33 1fe0ffff increase -1 ,pdata 
+3f34 6000c6ba store 1 ,mem_mouse_tz_data 
+3f35 20600000 rtn 
+
+mouse_wheel_scan:
+3f36 6800c6e8 fetch 1 ,mem_whee_a_data_gpio 
+3f37 c17f8000 rtneq gpio_disable 
+3f38 da200000 arg 0 ,rega 
+3f39 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio 
+3f3a 2040681d call gpio_get_bit 
+3f3b 7920a200 setflag true ,0 ,rega 
+3f3c 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio 
+3f3d 2040681d call gpio_get_bit 
+3f3e 7920a201 setflag true ,1 ,rega 
+3f3f 1a227e00 copy rega ,pdata 
+3f40 6000c6be store 1 ,mem_mwheel_b_new_pinlevel 
+3f41 c000bf46 beq 0x01 ,mouse_wheel_scan_judge1 
+3f42 c0013f4a beq 0x02 ,mouse_wheel_scan_judge2 
+3f43 6800c6bf fetch 1 ,mem_mwheel_tog 
+3f44 c283bf56 bbit1 7 ,mouse_wheel_scan_judge3 
+3f45 20600000 rtn 
+
+mouse_wheel_scan_judge1:
+3f46 6800c6bd fetch 1 ,mem_mwheel_b_old_pinlevel 
+3f47 c0003f4e beq 0 ,mouse_wheel_scan_judge11 
+3f48 c001bf50 beq 3 ,mouse_wheel_scan_judge12 
+3f49 20600000 rtn 
+
+mouse_wheel_scan_judge2:
+3f4a 6800c6bd fetch 1 ,mem_mwheel_b_old_pinlevel 
+3f4b c0003f52 beq 0 ,mouse_wheel_scan_judge21 
+3f4c c001bf54 beq 3 ,mouse_wheel_scan_judge22 
+3f4d 20600000 rtn 
+
+mouse_wheel_scan_judge11:
+3f4e 7046bf82 jam 0x82 ,mem_mwheel_tog 
+3f4f 20600000 rtn 
+
+mouse_wheel_scan_judge12:
+3f50 7046bf81 jam 0x81 ,mem_mwheel_tog 
+3f51 20600000 rtn 
+
+mouse_wheel_scan_judge21:
+3f52 7046bf80 jam 0x80 ,mem_mwheel_tog 
+3f53 20600000 rtn 
+
+mouse_wheel_scan_judge22:
+3f54 7046bf83 jam 0x83 ,mem_mwheel_tog 
+3f55 20600000 rtn 
+
+mouse_wheel_scan_judge3:
+3f56 6800c6bf fetch 1 ,mem_mwheel_tog 
+3f57 793ffe07 set0 7 ,pdata 
+3f58 6000c6bf store 1 ,mem_mwheel_tog 
+3f59 c0003f5e beq 0 ,mouse_wheel_scan_judge30 
+3f5a c000bf61 beq 1 ,mouse_wheel_scan_judge31 
+3f5b c0013f64 beq 2 ,mouse_wheel_scan_judge32 
+3f5c c001bf67 beq 3 ,mouse_wheel_scan_judge33 
+3f5d 20600000 rtn 
+
+mouse_wheel_scan_judge30:
+3f5e 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel 
+3f5f c001bf6a beq 3 ,mouse_wheel_forward 
+3f60 20600000 rtn 
+
+mouse_wheel_scan_judge31:
+3f61 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel 
+3f62 c0003f6a beq 0 ,mouse_wheel_forward 
+3f63 20600000 rtn 
+
+mouse_wheel_scan_judge32:
+3f64 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel 
+3f65 c001bf6f beq 3 ,mouse_wheel_back 
+3f66 20600000 rtn 
+
+mouse_wheel_scan_judge33:
+3f67 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel 
+3f68 c0003f6f beq 0 ,mouse_wheel_back 
+3f69 20600000 rtn 
+
+mouse_wheel_forward:
+3f6a 7046c200 jam 0 ,mem_mouse_z_data_count1 
+3f6b 6800c6c0 fetch 1 ,mem_mouse_z_data 
+3f6c 1fe0fe01 increase 1 ,pdata 
+3f6d 6000c6c0 store 1 ,mem_mouse_z_data 
+3f6e 20600000 rtn 
+
+mouse_wheel_back:
+3f6f 7046c100 jam 0 ,mem_mouse_z_data_count 
+3f70 6800c6c0 fetch 1 ,mem_mouse_z_data 
+3f71 1fe0ffff increase -1 ,pdata 
+3f72 6000c6c0 store 1 ,mem_mouse_z_data 
+3f73 20600000 rtn 
+
+mouse_hid_connected:
+3f74 58000002 setarg hid_handshake_timeout 
+3f75 6000c680 store 1 ,mem_hid_handshake_timer_count 
+3f76 20600000 rtn 
+
+mouse_send_process:
+3f77 6800c1e2 fetch 1 ,mem_app_handshake_flag 
+3f78 207a0000 rtn blank 
+3f79 20405271 call l2cap_malloc_is_fifo_nearly_full 
+3f7a 247a0000 nrtn blank 
+3f7b 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3f7c c281bf8a bbit1 mosue_24g_pairing_flag ,mouse_send_empty_data 
+3f7d c2803f8a bbit1 mouse_select_device_flag ,mouse_send_empty_data 
+3f7e c282bf8a bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data 
+3f7f 20403f97 call mouse_motion 
+3f80 24740000 nrtn user 
+
+mouse_send_data:
+3f81 da200009 arg 9 ,rega 
+3f82 20404d63 call hid_malloc_tx_buff 
+3f83 6801424e fetch 2 ,mem_hid_int_remote_cid 
+3f84 e0a10000 istore 2 ,contw 
+3f85 580002a1 setarg 0x02a1 
+3f86 e0a10000 istore 2 ,contw 
+3f87 6803c69a fetch 7 ,mem_mouse_key 
+3f88 e0a38000 istore 7 ,contw 
+3f89 20600000 rtn 
+
+mouse_send_empty_data:
+3f8a 58000000 setarg 0 
+3f8b 6003c69a store 7 ,mem_mouse_key 
+3f8c 20203f81 branch mouse_send_data 
+
+mouse_no_data_timer_init:
+3f8d 680146aa fetch 2 ,mem_mouse_no_data_timeout 
+3f8e 600146b0 store 2 ,mem_mouse_no_data_timer 
+3f8f 20600000 rtn 
+
+mouse_fill_data_le:
+3f90 44f2c01c bpatch patch1c_5 ,mem_patch1c 
+3f91 da200007 arg 7 ,rega 
+3f92 6809446f fetcht 2 ,mem_le_notify_handle 
+3f93 20405a64 call le_att_malloc_tx_notify 
+3f94 6803c69a fetch 7 ,mem_mouse_key 
+3f95 e0a38000 istore 7 ,contw 
+3f96 20600000 rtn 
+
+mouse_motion:
+3f97 44f3401c bpatch patch1c_6 ,mem_patch1c 
+3f98 78547c00 disable user 
+3f99 58000000 setarg 0 
+3f9a 6003469b store 6 ,mem_mouse_x 
+3f9b 20403fb5 call mouse_cheak_sensor_data 
+3f9c 20404079 call mouse_zwheel 
+3f9d 2040407e call mouse_t_zwheel 
+3f9e 20404099 call mouse_key 
+3f9f 24740000 nrtn user 
+3fa0 20403f8d call mouse_no_data_timer_init 
+3fa1 d8e00008 arg mouse_statue_up_flag ,queue 
+3fa2 202043ce branch mouse_enable_function_flag 
+
+motion_6clk_direction_dispose:
+3fa3 6801469b fetch 2 ,mem_mouse_x 
+3fa4 1fe67e00 sub pdata ,0 ,pdata 
+3fa5 6001469b store 2 ,mem_mouse_x 
+3fa6 20207fe7 branch enable_user 
+
+motion_12clk_direction_dispose:
+3fa7 6801469d fetch 2 ,mem_mouse_y 
+3fa8 1fe67e00 sub pdata ,0 ,pdata 
+3fa9 6001469d store 2 ,mem_mouse_y 
+3faa 20207fe7 branch enable_user 
+
+motion_9clk_direction_dispose:
+3fab 6801469d fetch 2 ,mem_mouse_y 
+3fac 1fe67e00 sub pdata ,0 ,pdata 
+3fad 6001469d store 2 ,mem_mouse_y 
+3fae 6801469b fetch 2 ,mem_mouse_x 
+3faf 1fe67e00 sub pdata ,0 ,pdata 
+3fb0 6001469b store 2 ,mem_mouse_x 
+3fb1 20404002 call mouse_sensor_data_swap_places 
+3fb2 20207fe7 branch enable_user 
+
+motion_3clk_direction_dispose:
+3fb3 20404002 call mouse_sensor_data_swap_places 
+3fb4 20207fe7 branch enable_user 
+
+mouse_cheak_sensor_data:
+3fb5 6800c239 fetch 1 ,mem_spi_write_flash_sm 
+3fb6 c1800000 rtnne flash_sm_no_buys 
+3fb7 6800c6e0 fetch 1 ,mem_config_sensor_type 
+3fb8 c0003fe2 beq p3205 ,mouse_p32xx_sensor_motion 
+3fb9 c000bfe2 beq p3065 ,mouse_p32xx_sensor_motion 
+3fba c0013fe2 beq ka8 ,mouse_p32xx_sensor_motion 
+3fbb c001bfe2 beq p3204 ,mouse_p32xx_sensor_motion 
+3fbc c0023fc4 beq p3212 ,mouse_p3212_sensor_motion 
+3fbd c002c010 beq p3610 ,mouse_p3610_sensor_motion 
+3fbe c0033fe2 beq p3065_xy ,mouse_p32xx_sensor_motion 
+3fbf 20203fe2 branch mouse_p32xx_sensor_motion 
+
+mouse_clear_sensor_data:
+3fc0 6800c6a7 fetch 1 ,mem_mouse_move_flag 
+3fc1 205a405d call mouse_read_sensor_common ,blank 
+3fc2 7046a701 jam 1 ,mem_mouse_move_flag 
+3fc3 20600000 rtn 
+
+mouse_p3212_sensor_motion:
+3fc4 20403fc0 call mouse_clear_sensor_data 
+3fc5 6808c6f3 fetcht 1 ,mem_sensor_data_gpio 
+3fc6 2040681d call gpio_get_bit 
+3fc7 24608000 nrtn true 
+3fc8 58000000 setarg pan_reg_pid_l 
+3fc9 20406414 call twspi_read 
+3fca c09840d1 bne p32xx_id1 ,mouse_twspi_reset 
+3fcb 58000002 setarg pan_reg_motion_staus 
+3fcc 20406414 call twspi_read 
+3fcd c4038000 rtnbit0 7 
+3fce 2040405d call mouse_read_sensor_common 
+3fcf 20403fde call mouse_read_3212sensor_xy_high 
+3fd0 6000c6a1 store 1 ,mem_mouse_xy_h 
+3fd1 1ff1fe00 rshift4 pdata ,pdata 
+3fd2 20404169 call extsign_bit3 
+3fd3 6000c69c store 1 ,mem_mouse_x + 1 
+3fd4 6800c6a1 fetch 1 ,mem_mouse_xy_h 
+3fd5 1fe17e0f and pdata ,0x0f ,pdata 
+3fd6 20404169 call extsign_bit3 
+3fd7 6000c69e store 1 ,mem_mouse_y + 1 
+3fd8 6800c6f6 fetch 1 ,mem_config_sensor_angle 
+3fd9 c0003fa3 beq mouse_6clk_angle ,motion_6clk_direction_dispose 
+3fda c000bfab beq mouse_9clk_angle ,motion_9clk_direction_dispose 
+3fdb c0013fa7 beq mouse_12clk_angle ,motion_12clk_direction_dispose 
+3fdc c001bfb3 beq mouse_3clk_angle ,motion_3clk_direction_dispose 
+3fdd 20600000 rtn 
+
+mouse_read_3212sensor_xy_high:
+3fde 58000012 setarg 0x12 
+3fdf 20206414 branch twspi_read 
+
+mouse_p3065_judge:
+3fe0 c018bfea beq p3065_id1 ,mouse_p32xx_sensor_motion_1 
+3fe1 202040d1 branch mouse_twspi_reset 
+
+mouse_p32xx_sensor_motion:
+3fe2 20403fc0 call mouse_clear_sensor_data 
+3fe3 78547c00 disable user 
+3fe4 6808c6f3 fetcht 1 ,mem_sensor_data_gpio 
+3fe5 2040681d call gpio_get_bit 
+3fe6 24608000 nrtn true 
+3fe7 58000000 setarg pan_reg_pid_l 
+3fe8 20406414 call twspi_read 
+3fe9 c0983fe0 bne p32xx_id1 ,mouse_p3065_judge 
+
+mouse_p32xx_sensor_motion_1:
+3fea 58000002 setarg pan_reg_motion_staus 
+3feb 20406414 call twspi_read 
+3fec c4038000 rtnbit0 7 
+3fed 2040405d call mouse_read_sensor_common 
+3fee 6800c69b fetch 1 ,mem_mouse_x 
+3fef 20404165 call extsign 
+3ff0 6001469b store 2 ,mem_mouse_x 
+3ff1 6800c69d fetch 1 ,mem_mouse_y 
+3ff2 20404165 call extsign 
+3ff3 6001469d store 2 ,mem_mouse_y 
+3ff4 6800c6f6 fetch 1 ,mem_config_sensor_angle 
+3ff5 c0003ffa beq mouse_6clk_angle ,motion32xx_6clk_direction_selection 
+3ff6 c000bffc beq mouse_9clk_angle ,motion32xx_9clk_direction_selection 
+3ff7 c0013ffe beq mouse_12clk_angle ,motion32xx_12clk_direction_selection 
+3ff8 c001c000 beq mouse_3clk_angle ,motion32xx_3clk_direction_selection 
+3ff9 20600000 rtn 
+
+motion32xx_6clk_direction_selection:
+3ffa 20403fa3 call motion_6clk_direction_dispose 
+3ffb 202040b3 branch mouse_sensor_sdio_low 
+
+motion32xx_9clk_direction_selection:
+3ffc 20403fab call motion_9clk_direction_dispose 
+3ffd 202040b3 branch mouse_sensor_sdio_low 
+
+motion32xx_12clk_direction_selection:
+3ffe 20403fa7 call motion_12clk_direction_dispose 
+3fff 202040b3 branch mouse_sensor_sdio_low 
+
+motion32xx_3clk_direction_selection:
+4000 20403fb3 call motion_3clk_direction_dispose 
+4001 202040b3 branch mouse_sensor_sdio_low 
+
+mouse_sensor_data_swap_places:
+4002 6801469d fetch 2 ,mem_mouse_y 
+4003 6809469b fetcht 2 ,mem_mouse_x 
+4004 6001469b store 2 ,mem_mouse_x 
+4005 6009469d storet 2 ,mem_mouse_y 
+4006 20600000 rtn 
+
+mouse_p3610sensor_read:
+4007 2040640f call spi_ncs_enable 
+4008 20000064 nop 100 
+4009 1a427e00 copy regb ,pdata 
+400a 20406414 call twspi_read 
+400b 1fe22400 copy pdata ,regb 
+400c 20406411 call spi_ncs_disable 
+400d 20000064 nop 100 
+400e 1a427e00 copy regb ,pdata 
+400f 20600000 rtn 
+
+mouse_p3610_sensor_motion:
+4010 78547c00 disable user 
+4011 6808c6f3 fetcht 1 ,mem_sensor_data_gpio 
+4012 2040681d call gpio_get_bit 
+4013 24608000 nrtn true 
+4014 da400002 arg pan_reg_motion_staus ,regb 
+4015 20404007 call mouse_p3610sensor_read 
+4016 c4038000 rtnbit0 7 
+4017 da400000 arg pan_reg_pid_l ,regb 
+4018 20404007 call mouse_p3610sensor_read 
+4019 6000c6dd store 1 ,mem_sensor_id1 
+401a c09f4145 bne p3610_id1 ,mouse_init_3610sensor_reset 
+401b 6800c6a7 fetch 1 ,mem_mouse_move_flag 
+401c 205a4039 call mouse_read_sensor3610_data ,blank 
+401d 7046a701 jam 1 ,mem_mouse_move_flag 
+401e 20404039 call mouse_read_sensor3610_data 
+401f 6800c6a1 fetch 1 ,mem_mouse_xy_h 
+4020 1ff1fe00 rshift4 pdata ,pdata 
+4021 20404169 call extsign_bit3 
+4022 6000c69c store 1 ,mem_mouse_x + 1 
+4023 6800c6a1 fetch 1 ,mem_mouse_xy_h 
+4024 1fe17e0f and pdata ,0x0f ,pdata 
+4025 20404169 call extsign_bit3 
+4026 6000c69e store 1 ,mem_mouse_y + 1 
+4027 6800c6f6 fetch 1 ,mem_config_sensor_angle 
+4028 c0004031 beq 0 ,motion3610_6clk_direction_selection 
+4029 c000c035 beq 1 ,motion3610_9clk_direction_selection 
+402a c0014033 beq 2 ,motion3610_12clk_direction_selection 
+402b c001c037 beq 3 ,motion3610_3clk_direction_selection 
+402c 20600000 rtn 
+
+mouse_3610_smart_select:
+402d 6800c6a4 fetch 1 ,mem_sensor_smart_flag 
+402e c0004051 beq p3610_smart_enable ,mouse_3610_smart_disable 
+402f c000c045 beq p3610_smart_disable ,mouse_3610_smart_enable 
+4030 20600000 rtn 
+
+motion3610_6clk_direction_selection:
+4031 20403fa3 call motion_6clk_direction_dispose 
+4032 2020402d branch mouse_3610_smart_select 
+
+motion3610_12clk_direction_selection:
+4033 20403fa7 call motion_12clk_direction_dispose 
+4034 2020402d branch mouse_3610_smart_select 
+
+motion3610_9clk_direction_selection:
+4035 20403fab call motion_9clk_direction_dispose 
+4036 2020402d branch mouse_3610_smart_select 
+
+motion3610_3clk_direction_selection:
+4037 20403fb3 call motion_3clk_direction_dispose 
+4038 2020402d branch mouse_3610_smart_select 
+
+mouse_read_sensor3610_data:
+4039 2040640f call spi_ncs_enable 
+403a 2040405d call mouse_read_sensor_common 
+403b dfe00005 arg 5 ,pdata 
+403c 20406414 call twspi_read 
+403d 6000c6a1 store 1 ,mem_mouse_xy_h 
+403e dfe00007 arg 7 ,pdata 
+403f 20406414 call twspi_read 
+4040 6000c6a2 store 1 ,mem_sensor_shutter_hi 
+4041 dfe00008 arg 8 ,pdata 
+4042 20406414 call twspi_read 
+4043 6000c6a3 store 1 ,mem_sensor_shutter_lo 
+4044 20206411 branch spi_ncs_disable 
+
+mouse_3610_smart_enable:
+4045 6800c6a2 fetch 1 ,mem_sensor_shutter_hi 
+4046 c1800000 rtnne 0 
+4047 6800c6a3 fetch 1 ,mem_sensor_shutter_lo 
+4048 1fe67c2d sub pdata ,45 ,null 
+4049 20610000 rtn positive 
+404a 7046a400 jam p3610_smart_enable ,mem_sensor_smart_flag 
+404b 5800ba41 setarg 0xba41 
+404c 20406405 call sensor_write 
+404d 58000032 setarg 0x0032 
+404e 20406405 call sensor_write 
+404f 5800b541 setarg 0xb541 
+4050 20206405 branch sensor_write 
+
+mouse_3610_smart_disable:
+4051 6800c6a2 fetch 1 ,mem_sensor_shutter_hi 
+4052 c1800000 rtnne 0 
+4053 6800c6a3 fetch 1 ,mem_sensor_shutter_lo 
+4054 1fe67c2d sub pdata ,45 ,null 
+4055 24610000 nrtn positive 
+4056 7046a401 jam p3610_smart_disable ,mem_sensor_smart_flag 
+4057 5800ba41 setarg 0xba41 
+4058 20406405 call sensor_write 
+4059 58008032 setarg 0x8032 
+405a 20406405 call sensor_write 
+405b 5800b541 setarg 0xb541 
+405c 20206405 branch sensor_write 
+
+mouse_read_sensor_common:
+405d dfe00003 arg pan_reg_delta_x ,pdata 
+405e 20406414 call twspi_read 
+405f 6001469b store 2 ,mem_mouse_x 
+4060 dfe00004 arg pan_reg_delta_y ,pdata 
+4061 20406414 call twspi_read 
+4062 6001469d store 2 ,mem_mouse_y 
+4063 20600000 rtn 
+
+mouse_set_qdecoder_x:
+4064 d840001b arg mouse_default_xa_gpio ,temp 
+4065 204067fb call gpio_config_input 
+4066 d840001b arg mouse_default_xa_gpio ,temp 
+4067 2040681d call gpio_get_bit 
+4068 20608000 rtn true 
+4069 68108109 hfetch 1 ,core_qdec_cntx 
+406a 79207e04 set1 4 ,pdata 
+406b 60108109 hstore 1 ,core_qdec_cntx 
+406c 20600000 rtn 
+
+mouse_hardware_zwheel:
+406d 6808c6c0 fetcht 1 ,mem_mouse_z_data 
+406e 68108109 hfetch 1 ,core_qdec_cntx 
+406f 9840fe00 iadd temp ,pdata 
+4070 207a0000 rtn blank 
+4071 6000c69f store 1 ,mem_mouse_z 
+4072 7046c000 jam 0 ,mem_mouse_z_data 
+4073 20207fe7 branch enable_user 
+
+mouse_hardware_zwheel_beforelpm:
+4074 6808c6c0 fetcht 1 ,mem_mouse_z_data 
+4075 68108109 hfetch 1 ,core_qdec_cntx 
+4076 9840fe00 iadd temp ,pdata 
+4077 6000c6c0 store 1 ,mem_mouse_z_data 
+4078 20600000 rtn 
+
+mouse_zwheel:
+4079 6800c6c0 fetch 1 ,mem_mouse_z_data 
+407a 207a0000 rtn blank 
+407b 6000c69f store 1 ,mem_mouse_z 
+407c 7046c000 jam 0 ,mem_mouse_z_data 
+407d 20207fe7 branch enable_user 
+
+mouse_t_zwheel:
+407e 6800c6ba fetch 1 ,mem_mouse_tz_data 
+407f 207a0000 rtn blank 
+4080 6000c6a0 store 1 ,mem_mouse_tz 
+4081 7046ba00 jam 0 ,mem_mouse_tz_data 
+4082 20207fe7 branch enable_user 
+
+mouse_check_key_gpio:
+4083 da200000 arg 0 ,rega 
+4084 6808c6e2 fetcht 1 ,mem_lbutton_gpio 
+4085 2040681d call gpio_get_bit 
+4086 7920a200 setflag true ,0 ,rega 
+4087 6808c6e3 fetcht 1 ,mem_rbutton_gpio 
+4088 2040681d call gpio_get_bit 
+4089 7920a201 setflag true ,1 ,rega 
+408a 6808c6e4 fetcht 1 ,mem_mbutton_gpio 
+408b 2040681d call gpio_get_bit 
+408c 7920a202 setflag true ,2 ,rega 
+408d 20404090 call mouse_check_s_key_gpio 
+408e 1a227e00 copy rega ,pdata 
+408f 20600000 rtn 
+
+mouse_check_s_key_gpio:
+4090 6800c6e5 fetch 1 ,mem_bk_button_gpio 
+4091 c17f8000 rtneq gpio_disable 
+4092 6808c6e5 fetcht 1 ,mem_bk_button_gpio 
+4093 2040681d call gpio_get_bit 
+4094 7920a203 setflag true ,3 ,rega 
+4095 6808c6e6 fetcht 1 ,mem_fw_button_gpio 
+4096 2040681d call gpio_get_bit 
+4097 7920a204 setflag true ,4 ,rega 
+4098 20600000 rtn 
+
+mouse_key:
+4099 20404083 call mouse_check_key_gpio 
+409a 204040a8 call mouse_set_mult 
+409b 204040a3 call mouse_24g_key 
+409c 1a227e00 copy rega ,pdata 
+409d 6808c69a fetcht 1 ,mem_mouse_key 
+409e 6000c69a store 1 ,mem_mouse_key 
+409f 9842fe00 ixor temp ,pdata 
+40a0 1fe67c00 sub pdata ,0 ,null 
+40a1 20628000 rtn zero 
+40a2 20207fe7 branch enable_user 
+
+mouse_24g_key:
+40a3 c6930000 rtnmark0 mark_24g 
+40a4 1a227e00 copy rega ,pdata 
+40a5 207a0000 rtn blank 
+40a6 6000c69a store 1 ,mem_mouse_key 
+40a7 20207fe7 branch enable_user 
+
+mouse_set_mult:
+40a8 68014682 fetch 2 ,mem_ui_state_map 
+40a9 c284c0ad bbit1 ui_state_ble_connected ,mouse_set_ble_mult 
+40aa 68014682 fetch 2 ,mem_ui_state_map 
+40ab c28040b0 bbit1 ui_state_bt_connected ,mouse_set_bt_mult 
+40ac 20600000 rtn 
+
+mouse_set_ble_mult:
+40ad 1a227e00 copy rega ,pdata 
+40ae 243a5820 nbranch le_set_config_short_mult ,blank 
+40af 20205822 branch le_clr_config_short_mult 
+
+mouse_set_bt_mult:
+40b0 1a227e00 copy rega ,pdata 
+40b1 243a2bc7 nbranch classic_bt_set_mult_short_flag ,blank 
+40b2 20202bc9 branch classic_bt_clr_mult_short_flag 
+
+mouse_sensor_sdio_low:
+40b3 44f3c01c bpatch patch1c_7 ,mem_patch1c 
+40b4 d840001a arg mouse_spi1_sdio_gpio ,temp 
+40b5 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+40b6 2feffe12 isolate1 mouse_enable_spi2 ,pdata 
+40b7 2040c0be call mouse_sensor_sdio_low2 ,true 
+40b8 2040681d call gpio_get_bit 
+40b9 20608000 rtn true 
+40ba 5800000a setarg 0x0a 
+40bb 20406414 call twspi_read 
+40bc 200003e8 nop 1000 
+40bd 202040b3 branch mouse_sensor_sdio_low 
+
+mouse_sensor_sdio_low2:
+40be d840001f arg mouse_spi2_sdio_gpio ,temp 
+40bf 20600000 rtn 
+
+mouse_spi_sdio_gpio_pollup:
+40c0 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+40c1 c28940c4 bbit1 mouse_enable_spi2 ,mouse_spi2_sdio_gpio_pollup 
+
+mouse_spi1_sdio_gpio_pollup:
+40c2 d840001a arg mouse_spi1_sdio_gpio ,temp 
+40c3 202067fe branch gpio_config_input_without_wake 
+
+mouse_spi2_sdio_gpio_pollup:
+40c4 d840001f arg mouse_spi2_sdio_gpio ,temp 
+40c5 202067fe branch gpio_config_input_without_wake 
+
+mouse_init_sunt:
+40c6 20403d36 call mouse_spi_init 
+40c7 20758000 rtn wake 
+40c8 204040c0 call mouse_spi_sdio_gpio_pollup 
+40c9 6800c6e0 fetch 1 ,mem_config_sensor_type 
+40ca c002c0d5 beq p3610 ,mouse_init_3610sensor 
+
+mouse_init_sensor:
+40cb 204040d9 call mouse_read_sensor_id 
+40cc c01840e0 beq p32xx_id1 ,mouse_init_p32xx_id2_judge 
+40cd c018c0ea beq p3065_id1 ,mouse_p3065_init_param 
+40ce 204040d1 call mouse_twspi_reset 
+40cf 200003e8 nop 1000 
+40d0 202040cb branch mouse_init_sensor 
+
+mouse_twspi_reset:
+40d1 44f4401d bpatch patch1d_0 ,mem_patch1d 
+40d2 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+40d3 c28963e0 bbit1 mouse_enable_spi2 ,twspi_reset2 
+40d4 202063d1 branch twspi_reset 
+
+mouse_init_3610sensor:
+40d5 204040d9 call mouse_read_sensor_id 
+40d6 c01f414b beq p3610_id1 ,mouse_init_p3610 
+40d7 20404145 call mouse_init_3610sensor_reset 
+40d8 202040d5 branch mouse_init_3610sensor 
+
+mouse_read_sensor_id:
+40d9 58000001 setarg pan_reg_pid_h 
+40da 20406414 call twspi_read 
+40db 6000c6de store 1 ,mem_sensor_id2 
+40dc 58000000 setarg pan_reg_pid_l 
+40dd 20406414 call twspi_read 
+40de 6000c6dd store 1 ,mem_sensor_id1 
+40df 20600000 rtn 
+
+mouse_init_p32xx_id2_judge:
+40e0 6800c6de fetch 1 ,mem_sensor_id2 
+40e1 c068c139 beq p3205_tj3t_id2 ,mouse_3205_3t_init_param 
+40e2 c06940f8 beq p3204_tj3l_id2 ,mouse_3204_3l_init_param 
+40e3 c00140ee beq p3212_id2 ,mouse_3212_init_param 
+40e4 c02a40e6 beq pka8_id2 ,mouse_ka8_init_param 
+40e5 20600000 rtn 
+
+mouse_ka8_init_param:
+40e6 7046e002 jam ka8 ,mem_config_sensor_type 
+40e7 20600000 rtn 
+
+mouse_p3065xy_init_param:
+40e8 7046e006 jam p3065_xy ,mem_config_sensor_type 
+40e9 20600000 rtn 
+
+mouse_p3065_init_param:
+40ea 6800c6de fetch 1 ,mem_sensor_id2 
+40eb c03840e8 beq p3065_xy_id2 ,mouse_p3065xy_init_param 
+40ec 7046e001 jam p3065 ,mem_config_sensor_type 
+40ed 20600000 rtn 
+
+mouse_3212_init_param:
+40ee 7046e004 jam p3212 ,mem_config_sensor_type 
+40ef 204040f6 call mouse_sensor_disable_wp 
+40f0 58003426 setarg 0x3426 
+40f1 20406413 call twspi_write 
+40f2 58000419 setarg 0x0419 
+40f3 20406413 call twspi_write 
+
+mouse_sensor_enable_wp:
+40f4 58000009 setarg 0x0009 
+40f5 20206413 branch twspi_write 
+
+mouse_sensor_disable_wp:
+40f6 58005a09 setarg 0x5a09 
+40f7 20206413 branch twspi_write 
+
+mouse_3204_3l_init_param:
+40f8 7046e003 jam p3204 ,mem_config_sensor_type 
+40f9 204040f6 call mouse_sensor_disable_wp 
+40fa 58000f0d setarg 0x0f0d 
+40fb 20406413 call twspi_write 
+40fc 5800e31d setarg 0xe31d 
+40fd 20406413 call twspi_write 
+40fe 5800d27d setarg 0xd27d 
+40ff 20406413 call twspi_write 
+4100 20404102 call mouse_32xx_init_param 
+4101 2020411a branch mouse_32xx_init_param_1 
+
+mouse_32xx_init_param:
+4102 5800351b setarg 0x351b 
+4103 20406413 call twspi_write 
+4104 5800b428 setarg 0xb428 
+4105 20406413 call twspi_write 
+4106 58004629 setarg 0x4629 
+4107 20406413 call twspi_write 
+4108 5800962a setarg 0x962a 
+4109 20406413 call twspi_write 
+410a 58008c2b setarg 0x8c2b 
+410b 20406413 call twspi_write 
+410c 58006e2c setarg 0x6e2c 
+410d 20406413 call twspi_write 
+410e 5800642d setarg 0x642d 
+410f 20406413 call twspi_write 
+4110 58005f38 setarg 0x5f38 
+4111 20406413 call twspi_write 
+4112 58000f39 setarg 0x0f39 
+4113 20406413 call twspi_write 
+4114 5800323a setarg 0x323a 
+4115 20406413 call twspi_write 
+4116 5800473b setarg 0x473b 
+4117 20406413 call twspi_write 
+4118 58001042 setarg 0x1042 
+4119 20206413 branch twspi_write 
+
+mouse_32xx_init_param_1:
+411a 58002e54 setarg 0x2e54 
+411b 20406413 call twspi_write 
+411c 5800f255 setarg 0xf255 
+411d 20406413 call twspi_write 
+411e 5800f461 setarg 0xf461 
+411f 20406413 call twspi_write 
+4120 58007063 setarg 0x7063 
+4121 20406413 call twspi_write 
+4122 58005275 setarg 0x5275 
+4123 20406413 call twspi_write 
+4124 58004176 setarg 0x4176 
+4125 20406413 call twspi_write 
+4126 5800ed77 setarg 0xed77 
+4127 20406413 call twspi_write 
+4128 58002378 setarg 0x2378 
+4129 20406413 call twspi_write 
+412a 58004679 setarg 0x4679 
+412b 20406413 call twspi_write 
+412c 5800e57a setarg 0xe57a 
+412d 20406413 call twspi_write 
+412e 5800487c setarg 0x487c 
+412f 20406413 call twspi_write 
+4130 5800777e setarg 0x777e 
+4131 20406413 call twspi_write 
+4132 5800017f setarg 0x017f 
+4133 20406413 call twspi_write 
+4134 5800000b setarg 0x000b 
+4135 20406413 call twspi_write 
+4136 5800007f setarg 0x007f 
+4137 20406413 call twspi_write 
+4138 202040f4 branch mouse_sensor_enable_wp 
+
+mouse_3205_3t_init_param:
+4139 7046e000 jam p3205 ,mem_config_sensor_type 
+413a 204040f6 call mouse_sensor_disable_wp 
+413b 5800100d setarg 0x100d 
+413c 20406413 call twspi_write 
+413d 5800ed1d setarg 0xed1d 
+413e 20406413 call twspi_write 
+413f 5800807d setarg 0x807d 
+4140 20406413 call twspi_write 
+4141 20404102 call mouse_32xx_init_param 
+4142 58000943 setarg 0x0943 
+4143 20406413 call twspi_write 
+4144 2020411a branch mouse_32xx_init_param_1 
+
+mouse_init_3610sensor_reset:
+4145 6808c6dc fetcht 1 ,mem_sensor_reset_gpio 
+4146 20406829 call gpio_out_active 
+4147 20407ec1 call delay_10ms 
+4148 6808c6dc fetcht 1 ,mem_sensor_reset_gpio 
+4149 20406825 call gpio_out_inactive 
+414a 20207ec1 branch delay_10ms 
+
+mouse_init_p3610:
+414b 7046e005 jam p3610 ,mem_config_sensor_type 
+414c 5800ba41 setarg 0xba41 
+414d 20406405 call sensor_write 
+414e 58000d11 setarg 0x0d11 
+414f 20406405 call sensor_write 
+4150 5800041b setarg 0x041b 
+4151 20406405 call sensor_write 
+4152 5800041c setarg 0x041c 
+4153 20406405 call sensor_write 
+4154 58000f1d setarg 0x0f1d 
+4155 20406405 call sensor_write 
+4156 58000032 setarg 0x0032 
+4157 20406405 call sensor_write 
+4158 5800b541 setarg 0xb541 
+4159 20206405 branch sensor_write 
+
+mouse_set_sensor_reg:
+415a 5800ba41 setarg 0xba41 
+415b 20406405 call sensor_write 
+415c 20000fa0 nop 4000 
+415d 5800ff7f setarg 0xff7f 
+415e 20406405 call sensor_write 
+415f 1a227e00 copy rega ,pdata 
+4160 20406405 call sensor_write 
+4161 5800007f setarg 0x007f 
+4162 20406405 call sensor_write 
+4163 5800b541 setarg 0xb541 
+4164 20206405 branch sensor_write 
+
+extsign:
+4165 c4038000 rtnbit0 7 
+4166 d840ff00 arg 0xff00 ,temp 
+4167 9841fe00 ior temp ,pdata 
+4168 20600000 rtn 
+
+extsign_bit3:
+4169 c4018000 rtnbit0 3 
+416a d84000f0 arg 0xf0 ,temp 
+416b 9841fe00 ior temp ,pdata 
+416c 20600000 rtn 
+
+mouse_le:
+416d 20405892 call le_fifo_check_nearly_full 
+416e 247a0000 nrtn blank 
+416f 6800c6c5 fetch 1 ,mem_le_connect_status_flag 
+4170 1fe17e03 and pdata ,0x03 ,pdata 
+4171 c1818000 rtnne 0x03 
+4172 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+4173 c281c179 bbit1 mosue_24g_pairing_flag ,mouse_le_send_empty_packet 
+4174 c2804179 bbit1 mouse_select_device_flag ,mouse_le_send_empty_packet 
+4175 c282c179 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet 
+4176 20403f97 call mouse_motion 
+4177 24740000 nrtn user 
+4178 20203f90 branch mouse_fill_data_le 
+
+mouse_le_send_empty_packet:
+4179 58000000 setarg 0 
+417a 6003c69a store 7 ,mem_mouse_key 
+417b 20203f90 branch mouse_fill_data_le 
+
+mouse_priority_bb_event:
+417c 1a627e00 copy regc ,pdata 
+417d c00a41c3 beq bt_evt_le_connected ,mouse_le_bb_event_connected 
+417e c000c2ca beq bt_evt_bb_connected ,mouse_stop_discovery 
+417f c00ac1d9 beq bt_evt_le_disconnected ,mouse_bb_disconnected 
+4180 c00141d9 beq bt_evt_bb_disconnected ,mouse_bb_disconnected 
+4181 c002c1d6 beq bt_evt_setup_complete ,mouse_bt_event_setup_complete 
+4182 c008426c beq bt_evt_button_long_pressed ,mouse_bb_event_discovery_btn 
+4183 c009429b beq bt_evt_hid_handshake ,mouse_bt_hid_handshake 
+4184 c00341d5 beq bt_evt_hid_connected ,mouse_bt_hid_connected 
+4185 c00241cc beq bt_evt_reconn_failed ,mouse_bb_event_reconn_failed 
+4186 c009c1cc beq bt_evt_reconn_page_timeout ,mouse_bb_event_reconn_timeout 
+4187 c00541ca beq bt_evt_pincode_req ,mouse_bb_event_pincode 
+4188 c01733cd beq bt_evt_remote_unsniff ,app_start_auto_sniff 
+4189 c018c1b4 beq bt_evt_le_pairing_success ,mouse_le_pairing_success 
+418a c01941b6 beq bt_evt_le_start_enc ,mouse_le_ll_start_encryt 
+418b c01f4191 beq bt_evt_le_pairing_complete ,mouse_le_pairing_complete 
+418c c013c38e beq bt_evt_virtual_cable_unplug ,mouse_irtual_cable_unplug 
+418d c01cc19c beq bt_evt_24g_pairing_complete ,mouse_24g_pairing_complete 
+418e c01d4192 beq bt_evt_24g_attempt_fail ,mouse_24g_attempt_fail 
+418f c01e419a beq bt_evt_24g_attempt_success ,mouse_24g_attempt_success 
+4190 20600000 rtn 
+
+mouse_le_pairing_complete:
+4191 20203410 branch app_ble_store_reconn_info 
+
+mouse_24g_attempt_fail:
+4192 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable 
+4193 6800c71e fetch 1 ,mem_reconn_times 
+4194 243a4492 nbranch mouse_polling_device ,blank 
+4195 6800c720 fetch 1 ,mem_device_flag 
+4196 6808c703 fetcht 1 ,mem_24g_device_number 
+4197 98467c00 isub temp ,null 
+4198 2022b40a branch app_enter_hibernate ,zero 
+4199 20600000 rtn 
+
+mouse_24g_attempt_success:
+419a 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable 
+419b 20600000 rtn 
+
+mouse_24g_pairing_complete:
+419c 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable 
+419d d8e00003 arg mosue_24g_pairing_flag ,queue 
+419e 204043d2 call mouse_disable_function_flag 
+419f 58000000 setarg 0 
+41a0 60014707 store 2 ,mem_24g_pairing_timer_count 
+41a1 7046a700 jam 0 ,mem_mouse_move_flag 
+41a2 6800c6e0 fetch 1 ,mem_config_sensor_type 
+41a3 1fe67c05 sub pdata ,p3610 ,null 
+41a4 2042c039 call mouse_read_sensor3610_data ,zero 
+41a5 2442c05d ncall mouse_read_sensor_common ,zero 
+41a6 68008004 fetch 1 ,mouse_flag_len ,mem_mouse_flag 
+41a7 c289c1af bbit1 mouse_enable_flash ,mouse_store_flash_24g_address 
+41a8 204041aa call mouse_set_24g_addr_eeprom 
+41a9 202065d1 branch iicd_write_protect_eep_data 
+
+mouse_set_24g_addr_eeprom:
+41aa 20402c7a call g24_head_ptr2regc 
+41ab 1a60a2ae add regc ,offset_24g_addr ,rega 
+41ac da40005b arg mouse_g24_addr_eeprom_offect ,regb 
+41ad d8400004 arg 4 ,temp 
+41ae 20600000 rtn 
+
+mouse_store_flash_24g_address:
+41af 20402c7a call g24_head_ptr2regc 
+41b0 1a60a4ae add regc ,offset_24g_addr ,regb 
+41b1 ea408000 ifetch 1 ,regb 
+41b2 6000c77b store 1 ,mem_mouse_24g_addr 
+41b3 20204435 branch mouse_store_flash_device_info 
+
+mouse_le_pairing_success:
+41b4 d8e00002 arg ll_pairing_success_flag ,queue 
+41b5 202041b9 branch mouse_le_enable_connect_flag 
+
+mouse_le_ll_start_encryt:
+41b6 7046c602 jam 2 ,mem_le_start_encrypt_timer 
+41b7 d8e00001 arg ll_start_enc_flag ,queue 
+41b8 202041b9 branch mouse_le_enable_connect_flag 
+
+mouse_le_enable_connect_flag:
+41b9 6800c6c5 fetch 1 ,mem_le_connect_status_flag 
+41ba f9207e00 qset1 pdata 
+41bb 6000c6c5 store 1 ,mem_le_connect_status_flag 
+41bc 20600000 rtn 
+
+mouse_le_disable_connect_flag:
+41bd 6800c6c5 fetch 1 ,mem_le_connect_status_flag 
+41be f93ffe00 qset0 pdata 
+41bf 6000c6c5 store 1 ,mem_le_connect_status_flag 
+41c0 20600000 rtn 
+
+mouse_le_clean_connect_flag:
+41c1 7046c500 jam 0 ,mem_le_connect_status_flag 
+41c2 20600000 rtn 
+
+mouse_le_bb_event_connected:
+41c3 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+41c4 793ffe00 set0 app_disc_by_button ,pdata 
+41c5 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+41c6 58000000 setarg 0 
+41c7 600146ae store 2 ,mem_mouse_direct_timer 
+41c8 20403f8d call mouse_no_data_timer_init 
+41c9 202042ca branch mouse_stop_discovery 
+
+mouse_bb_event_pincode:
+41ca 204063cb call pincode_reinit 
+41cb 202033dd branch app_bt_set_pincode 
+
+mouse_bb_event_reconn_timeout:
+
+mouse_bb_event_reconn_failed:
+41cc 6800c71e fetch 1 ,mem_reconn_times 
+41cd 243a4492 nbranch mouse_polling_device ,blank 
+41ce 68014682 fetch 2 ,mem_ui_state_map 
+41cf c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery 
+41d0 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+41d1 c28041d7 bbit1 mouse_select_device_flag ,mouse_soft_reset 
+41d2 c282c2b0 bbit1 mouse_bt_discovery_button_down_flag ,mouse_start_discovery 
+41d3 c281aead bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 
+41d4 202033a7 branch app_bb_hibernate 
+
+mouse_bt_hid_connected:
+41d5 20203f74 branch mouse_hid_connected 
+
+mouse_bt_event_setup_complete:
+41d6 20600000 rtn 
+
+mouse_soft_reset:
+41d7 204043c0 call mouse_select_device_enable 
+41d8 2020659a branch soft_reset_chip 
+
+mouse_bb_disconnected:
+41d9 44f4c01d bpatch patch1d_1 ,mem_patch1d 
+41da 204041e7 call mouse_bb_discon_clear_stack 
+41db 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+41dc c28041d7 bbit1 mouse_select_device_flag ,mouse_soft_reset 
+41dd c281aead bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 
+41de 6800c71e fetch 1 ,mem_reconn_times 
+41df 243a4492 nbranch mouse_polling_device ,blank 
+41e0 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason 
+41e1 c283c1f5 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn 
+41e2 c28033a9 bbit1 app_disc_by_button ,app_disconn_reason_clear 
+41e3 c280c1ef bbit1 app_disc_after_pairing ,mouse_event_light_state_pairing 
+41e4 c28141f2 bbit1 app_disc_after_reconn ,mouse_event_light_state_hibernate 
+41e5 c281c1f2 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate 
+41e6 202042b0 branch mouse_start_discovery 
+
+mouse_bb_discon_clear_stack:
+41e7 58000000 setarg 0 
+41e8 600446b7 store 8 ,mem_wheel_tb_old_pinlevel 
+41e9 e0a20000 istore 4 ,contw 
+41ea 7046b400 jam 0 ,mem_mouse_send_blank_timer 
+41eb 7046a700 jam 0 ,mem_mouse_move_flag 
+41ec 7041e200 jam app_handshake_null ,mem_app_handshake_flag 
+41ed 70442900 jam 0 ,mem_ltk_exists 
+41ee 20600000 rtn 
+
+mouse_event_light_state_pairing:
+41ef c282c1f2 bbit1 app_disc_after_handshake ,mouse_event_light_state_hibernate 
+41f0 c281c1f2 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate 
+41f1 202042b0 branch mouse_start_discovery 
+
+mouse_event_light_state_hibernate:
+41f2 68014682 fetch 2 ,mem_ui_state_map 
+41f3 c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery 
+41f4 202033a7 branch app_bb_hibernate 
+
+mouse4_0_event_bb_disconn:
+41f5 204041c1 call mouse_le_clean_connect_flag 
+41f6 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason 
+41f7 c28033a9 bbit1 app_disc_by_button ,app_disconn_reason_clear 
+41f8 202033a7 branch app_bb_hibernate 
+
+mouse_bb_event_timer:
+41f9 204043d6 call mouse_adc_read 
+41fa 20404243 call mouse_24g_delay_timer 
+41fb 20404246 call mouse_ban_24g_pairing_timer 
+41fc 20404250 call mouse_dpi_led_blink_delay_timer 
+41fd 2040445d call mouse_statue_up_timer 
+41fe 20404443 call mouse_statue_cheak_timer 
+41ff 20404333 call mouse_select_device 
+4200 204043a5 call mouse_bt_discovery_cheak 
+4201 204043eb call mouse_low_voltage_led_timer 
+4202 20404209 call mouse_sensor_led_contrl_timer 
+4203 20404231 call mouse_check_hid_handshake_timer 
+4204 20404234 call mouse_check_discovery_timeout_timer 
+4205 20404237 call mouse_check_direct_timeout_timer 
+4206 2040423a call mouse_check_no_data_timeout_timer 
+4207 2040423d call mouse_check_mouse_state_timer 
+4208 20204240 branch mouse_le_enable_att_list_timer 
+
+mouse_sensor_led_contrl_timer:
+4209 6800c711 fetch 1 ,mem_mouse_sensor_timer_count 
+420a 207a0000 rtn blank 
+420b 1fe0ffff increase -1 ,pdata 
+420c 6000c711 store 1 ,mem_mouse_sensor_timer_count 
+420d 247a0000 nrtn blank 
+420e 2020420f branch mouse_sensor_led_contrl 
+
+mouse_sensor_led_contrl:
+420f 6800c712 fetch 1 ,mem_sensor_led_style 
+4210 c1000000 rtneq ui_led_state_blink_stop 
+4211 c002c216 beq ui_led_state_blink_darking ,mouse_sensor_led_blink_state_darking 
+
+mouse_sensor_led_blink_state_lighting:
+4212 20404225 call mouse_sensor_led_on 
+4213 70471205 jam ui_led_state_blink_darking ,mem_sensor_led_style 
+4214 70471105 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count 
+4215 20600000 rtn 
+
+mouse_sensor_led_blink_state_darking:
+4216 2040422c call mouse_sensor_led_off 
+4217 70471204 jam ui_led_state_blink_lighting ,mem_sensor_led_style 
+4218 70471105 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count 
+4219 20600000 rtn 
+
+mouse_sensor_led_blink_stop:
+
+mouse_sensor_reset:
+421a 58008006 setarg 0x8006 
+421b 20406413 call twspi_write 
+421c 200003e8 nop 1000 
+421d 70471100 jam 0x00 ,mem_mouse_sensor_timer_count 
+421e 70471200 jam ui_led_state_blink_stop ,mem_sensor_led_style 
+421f 202040e0 branch mouse_init_p32xx_id2_judge 
+
+mouse_p3212sensor_led_on:
+4220 5800a006 setarg 0xa006 
+4221 20406413 call twspi_write 
+4222 5800a005 setarg 0xa005 
+4223 20206413 branch twspi_write 
+
+mouse_sensor_led_on_global:
+4224 70471100 jam 0 ,mem_mouse_sensor_timer_count 
+
+mouse_sensor_led_on:
+4225 6800c6e0 fetch 1 ,mem_config_sensor_type 
+4226 c0024220 beq p3212 ,mouse_p3212sensor_led_on 
+4227 58000106 setarg 0x0106 
+4228 20406413 call twspi_write 
+4229 5800a105 setarg 0xa105 
+422a 20206413 branch twspi_write 
+
+mouse_sensor_led_off_global:
+422b 70471100 jam 0 ,mem_mouse_sensor_timer_count 
+
+mouse_sensor_led_off:
+422c 58000906 setarg 0x0906 
+422d 20206413 branch twspi_write 
+
+mouse_sensor_start_blink:
+422e 70471105 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count 
+422f 70471201 jam ui_led_state_blink_start ,mem_sensor_led_style 
+4230 20600000 rtn 
+
+mouse_check_hid_handshake_timer:
+4231 da604680 arg mem_hid_handshake_timer_count ,regc 
+4232 da40429b arg mouse_bt_hid_handshake ,regb 
+4233 2020336d branch timer_single_step 
+
+mouse_check_discovery_timeout_timer:
+4234 da6046ac arg mem_mouse_discovery_timer ,regc 
+4235 da404264 arg mouse_check_discovery_timeout ,regb 
+4236 20203374 branch timer_single_step_2b 
+
+mouse_check_direct_timeout_timer:
+4237 da6046ae arg mem_mouse_direct_timer ,regc 
+4238 da404266 arg mouse_check_direct_timeout ,regb 
+4239 20203374 branch timer_single_step_2b 
+
+mouse_check_no_data_timeout_timer:
+423a da6046b0 arg mem_mouse_no_data_timer ,regc 
+423b da40426a arg mouse_check_no_data_timeout ,regb 
+423c 20203374 branch timer_single_step_2b 
+
+mouse_check_mouse_state_timer:
+423d da6046c4 arg mem_mouse_statue_led_timer ,regc 
+423e da404478 arg mouse_statue_led_off ,regb 
+423f 2020336d branch timer_single_step 
+
+mouse_le_enable_att_list_timer:
+4240 da6046c6 arg mem_le_start_encrypt_timer ,regc 
+4241 da40425e arg mouse_le_enable_att_list ,regb 
+4242 2020336d branch timer_single_step 
+
+mouse_24g_delay_timer:
+4243 da604704 arg mem_24g_enter_lpm_timer ,regc 
+4244 da404249 arg mouse_24g_delay ,regb 
+4245 2020336d branch timer_single_step 
+
+mouse_ban_24g_pairing_timer:
+4246 da604707 arg mem_24g_pairing_timer_count ,regc 
+4247 da404249 arg mouse_ban_24g_pairing ,regb 
+4248 20203374 branch timer_single_step_2b 
+
+mouse_ban_24g_pairing:
+
+mouse_24g_delay:
+4249 20600000 rtn 
+
+mosue_dpi_led_blink_init:
+424a 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+424b c40b8000 rtnbit0 mouse_enable_dpi_led_blink 
+424c 7046df0a jam 10 ,mem_mouse_dpi_led_delay_count 
+424d 6800c6f4 fetch 1 ,mem_dpi_led_gpio 
+424e 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+424f 20600000 rtn 
+
+mouse_dpi_led_blink_delay_timer:
+4250 da6046df arg mem_mouse_dpi_led_delay_count ,regc 
+4251 da404253 arg mouse_dpi_led_setting ,regb 
+4252 2020336d branch timer_single_step 
+
+mouse_dpi_led_setting:
+4253 6800c6f4 fetch 1 ,mem_dpi_led_gpio 
+4254 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+4255 58000190 setarg led_dpi_blink 
+4256 60014716 store 2 ,mem_mouse_on_time 
+4257 60014718 store 2 ,mem_mouse_off_time 
+4258 da200000 arg 0 ,rega 
+4259 6808c77a fetcht 1 ,mem_mouse_dpi 
+425a 18408401 increase 1 ,temp 
+425b 6008c714 storet 1 ,mem_mouse_blink_count 
+425c 70471301 jam ui_led_state_blink_start ,mem_mouse_led_type 
+425d 20600000 rtn 
+
+mouse_le_enable_att_list:
+425e 6800c6c5 fetch 1 ,mem_le_connect_status_flag 
+425f c3810000 rtnbit1 ll_pairing_success_flag 
+4260 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp 
+4261 20407d8f call ui_ipc_send_cmd 
+4262 d8e00000 arg write_req_enable_flag ,queue 
+4263 202041b9 branch mouse_le_enable_connect_flag 
+
+mouse_check_discovery_timeout:
+4264 204042ca call mouse_stop_discovery 
+4265 2020340a branch app_enter_hibernate 
+
+mouse_check_direct_timeout:
+4266 204033f6 call app_ble_stop_direct_adv 
+4267 6800c71e fetch 1 ,mem_reconn_times 
+4268 243a4492 nbranch mouse_polling_device ,blank 
+4269 2020340a branch app_enter_hibernate 
+
+mouse_check_no_data_timeout:
+426a c5137e1d bmark1 mark_24g ,check_51cmd_hibernate 
+426b 20204386 branch mouse_disconnect 
+
+mouse_bb_event_discovery_btn:
+426c 44f5401d bpatch patch1d_2 ,mem_patch1d 
+426d 7046b400 jam 0 ,mem_mouse_send_blank_timer 
+426e 20404386 call mouse_disconnect 
+426f 204041c1 call mouse_le_clean_connect_flag 
+4270 202042b0 branch mouse_start_discovery 
+
+mouse3_0_check_reconn_target:
+4271 680341d0 fetch 6 ,mem_hci_plap 
+4272 203a33eb branch app_bt_start_discovery_short ,blank 
+4273 2040427e call mouse_reconn_setting_led_gpio 
+4274 70016d17 jam 0x17 ,mem_connection_options 
+4275 6800c65a fetch 1 ,mem_ssp_enable 
+4276 243a33e1 nbranch app_bt_start_reconnect ,blank 
+4277 70016d04 jam 0x04 ,mem_connection_options 
+4278 202033e1 branch app_bt_start_reconnect 
+
+mouse4_0_check_reconn_target:
+4279 680146a8 fetch 2 ,mem_mouse_direct_timeout 
+427a 600146ae store 2 ,mem_mouse_direct_timer 
+427b 2040427e call mouse_reconn_setting_led_gpio 
+427c 20403418 call app_lpm_mult_disable 
+427d 20207df4 branch check_51cmd_adv 
+
+mouse_reconn_setting_led_gpio:
+427e 580000c8 setarg led_reconnect_blink 
+427f 60014716 store 2 ,mem_mouse_on_time 
+4280 60014718 store 2 ,mem_mouse_off_time 
+4281 20204285 branch mouse_setting_led_gpio_comman 
+
+mouse_discover_setting_led_gpio:
+4282 580003e8 setarg led_discovery_blink 
+4283 60014716 store 2 ,mem_mouse_on_time 
+4284 60014718 store 2 ,mem_mouse_off_time 
+
+mouse_setting_led_gpio_comman:
+4285 6800c720 fetch 1 ,mem_device_flag 
+4286 c000c28a beq mode_bt_device1 ,mouse_device_led1 
+4287 c001428c beq mode_bt_device2 ,mouse_device_led2 
+4288 c001c28e beq mode_bt_device3 ,mouse_device_led3 
+4289 20600000 rtn 
+
+mouse_device_led1:
+428a 6800c6f0 fetch 1 ,mem_config_device1_led_gpio 
+428b 2020428f branch mouse_led_blink 
+
+mouse_device_led2:
+428c 6800c6f1 fetch 1 ,mem_config_device2_led_gpio 
+428d 2020428f branch mouse_led_blink 
+
+mouse_device_led3:
+428e 6800c6f2 fetch 1 ,mem_config_device3_led_gpio 
+
+mouse_led_blink:
+428f 60008aa2 store 1 ,mem_temp 
+4290 20404482 call mouse_devce_led_off 
+4291 68008aa2 fetch 1 ,mem_temp 
+4292 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+4293 da200000 arg 0 ,rega 
+4294 70471301 jam ui_led_state_blink_start ,mem_mouse_led_type 
+4295 20207d1e branch ui_led_blink_start_global 
+
+mouse_led_off:
+4296 da200000 arg 0 ,rega 
+4297 20207d19 branch ui_led_off_global 
+
+mouse_led_on:
+4298 da200000 arg 0 ,rega 
+4299 20207d14 branch ui_led_on_global 
+
+mouse4_0_bb_event_discovery_btn:
+429a 202041c1 branch mouse_le_clean_connect_flag 
+
+mouse_bt_hid_handshake:
+429b 7041e201 jam app_handshake_done ,mem_app_handshake_flag 
+429c 20403416 call app_lpm_mult_enable 
+429d 20403412 call app_bt_store_reconn_info 
+429e 58000000 setarg 0 
+429f 6001467e store 2 ,mem_discovery_timeout_timer_count 
+42a0 6000c680 store 1 ,mem_hid_handshake_timer_count 
+42a1 2020340e branch app_bt_enter_sniff 
+
+mouse_check_reconn_target:
+42a2 2040435f call mouse_cheak_select_device_by_switch 
+42a3 6800c720 fetch 1 ,mem_device_flag 
+42a4 6808c703 fetcht 1 ,mem_24g_device_number 
+42a5 98467c00 isub temp ,null 
+42a6 2022c2ab branch mouse_connect_24g_mode ,zero 
+42a7 6800c210 fetch 1 ,mem_xrecord_mode 
+42a8 c019c271 beq rec_3_mode ,mouse3_0_check_reconn_target 
+42a9 c01a4279 beq rec_4_mode ,mouse4_0_check_reconn_target 
+42aa 202042b0 branch mouse_start_discovery 
+
+mouse_connect_24g_mode:
+42ab 20403d57 call mouse_start_24g_mode 
+42ac c6130000 rtnmark1 mark_24g 
+42ad 6800c71e fetch 1 ,mem_reconn_times 
+42ae 243a4492 nbranch mouse_polling_device ,blank 
+42af 20600000 rtn 
+
+mouse_start_discovery:
+42b0 44f5c01d bpatch patch1d_3 ,mem_patch1d 
+42b1 68014682 fetch 2 ,mem_ui_state_map 
+42b2 c285c2b7 bbit1 ui_state_ble_adv ,mouse_start_discovery_norandom 
+42b3 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+42b4 c30c42b7 bbit0 mouse_enable_ble_random_addre ,mouse_start_discovery_norandom 
+42b5 180a7e00 random pdata 
+42b6 6000c4a1 store 1 ,mem_le_lap + 1 
+
+mouse_start_discovery_norandom:
+42b7 20403418 call app_lpm_mult_disable 
+42b8 68014687 fetch 2 ,mem_discovery_timeout 
+42b9 600146ac store 2 ,mem_mouse_discovery_timer 
+42ba 70016d06 jam 6 ,mem_connection_options 
+42bb 58000000 setarg 0 
+42bc 600146b0 store 2 ,mem_mouse_no_data_timer 
+42bd 600146ae store 2 ,mem_mouse_direct_timer 
+42be d8e00007 arg mouse_store_eeprom_flag ,queue 
+42bf 204043ce call mouse_enable_function_flag 
+42c0 204043ca call mouse_bt_discovery_button_down_disable 
+42c1 6800c092 fetch 1 ,mem_device_option 
+42c2 2feffe01 isolate1 mode_4_mouse ,pdata 
+42c3 2040fdf4 call check_51cmd_adv ,true 
+42c4 6800c092 fetch 1 ,mem_device_option 
+42c5 2feffe00 isolate1 mode_3_mouse ,pdata 
+42c6 2040fddd call check_51cmd_start_discovery ,true 
+42c7 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+42c8 c28e422e bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_start_blink 
+42c9 20204282 branch mouse_discover_setting_led_gpio 
+
+mouse_stop_discovery:
+42ca 44f6401d bpatch patch1d_4 ,mem_patch1d 
+42cb 6800c092 fetch 1 ,mem_device_option 
+42cc 2feffe01 isolate1 mode_4_mouse ,pdata 
+42cd 2040c2d4 call mouse_stop_le_adv ,true 
+42ce 6800c092 fetch 1 ,mem_device_option 
+42cf 2feffe00 isolate1 mode_3_mouse ,pdata 
+42d0 2040c2d7 call mouse_stop_bt3_discovery ,true 
+42d1 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+42d2 c28e421a bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_led_blink_stop 
+42d3 20204482 branch mouse_devce_led_off 
+
+mouse_stop_le_adv:
+42d4 58000000 setarg 0 
+42d5 600146ae store 2 ,mem_mouse_direct_timer 
+42d6 20207dfa branch check_51cmd_stop_adv 
+
+mouse_stop_bt3_discovery:
+42d7 58000000 setarg 0 
+42d8 600146ac store 2 ,mem_mouse_discovery_timer 
+42d9 20207de2 branch check_51cmd_stop_discovery 
+
+mouse_store_remote_bdaddr:
+42da 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+42db c4038000 rtnbit0 mouse_store_eeprom_flag 
+42dc d8e00007 arg mouse_store_eeprom_flag ,queue 
+42dd 204043d2 call mouse_disable_function_flag 
+42de 204042e8 call mouse_check_device_addr 
+
+mouse_unplug_clean_bdaddr:
+42df 204042fb call mouse_before_store_reconn_info 
+42e0 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+42e1 c289c435 bbit1 mouse_enable_flash ,mouse_store_flash_device_info 
+42e2 c28a42e4 bbit1 mouse_enable_eeprom ,mouse_store_eeprom_device_info 
+42e3 20600000 rtn 
+
+mouse_store_eeprom_device_info:
+42e4 d8400058 arg 88 ,temp 
+42e5 da204720 arg mem_device_flag ,rega 
+42e6 da400000 arg mouse_info_eeprom_offect ,regb 
+42e7 202065d1 branch iicd_write_protect_eep_data 
+
+mouse_check_device_addr:
+42e8 68008185 fetch 1 ,mem_record_bt_mode 
+42e9 c01a42ec beq rec_4_mode ,mouse_check_le_device_addr 
+42ea c019c2ef beq rec_3_mode ,mouse_check_bt_device_addr 
+42eb 20600000 rtn 
+
+mouse_check_le_device_addr:
+42ec 6000c6c7 store 1 ,mem_device_addr_temp 
+42ed 6803044f fetch 6 ,mem_le_plap 
+42ee 202042f1 branch mouse_check_bt_device_addr_common 
+
+mouse_check_bt_device_addr:
+42ef 6000c6c7 store 1 ,mem_device_addr_temp 
+42f0 68030040 fetch 6 ,mem_plap 
+
+mouse_check_bt_device_addr_common:
+42f1 600346c8 store 6 ,mem_device_addr_temp + 1 
+42f2 6803c6c7 fetch 7 ,mem_device_addr_temp 
+42f3 d8c04721 arg mem_device1_type ,contr 
+42f4 df200003 arg 3 ,loopcnt 
+
+mouse_check_device_addr_end:
+42f5 e8cb8000 ifetcht 7 ,contr 
+42f6 98467c00 isub temp ,null 
+42f7 2022c310 branch mouse_clean_addr ,zero 
+42f8 18c08c16 increase 22 ,contr 
+42f9 c20042f5 loop mouse_check_device_addr_end 
+42fa 20600000 rtn 
+
+mouse_before_store_reconn_info:
+42fb da204721 arg mem_device1_type ,rega 
+42fc 6800c720 fetch 1 ,mem_device_flag 
+42fd 1fe0ffff increase -1 ,pdata 
+42fe 1feffe1d mul32 pdata ,29 ,pdata 
+42ff 9a20a200 iadd rega ,rega 
+4300 68008185 fetch 1 ,mem_record_bt_mode 
+4301 e2208000 istore 1 ,rega 
+4302 c01a4305 beq rec_4_mode ,mouse_store_le_device 
+4303 c019c30c beq rec_3_mode ,mouse_store_bt_device 
+4304 20600000 rtn 
+
+mouse_store_le_device:
+4305 6803044f fetch 6 ,mem_le_plap 
+4306 e0a30000 istore 6 ,contw 
+4307 d8c04419 arg mem_le_ltk ,contr 
+4308 20407ebf call memcpy16 
+4309 680344a0 fetch 6 ,mem_le_lap 
+430a e0a30000 istore 6 ,contw 
+430b 20600000 rtn 
+
+mouse_store_bt_device:
+430c 68030040 fetch 6 ,mem_plap 
+430d e0a30000 istore 6 ,contw 
+430e d8c041be arg mem_link_key ,contr 
+430f 20207ebf branch memcpy16 
+
+mouse_clean_addr:
+4310 18c08dfa increase -6 ,contr 
+4311 18c20a00 copy contr ,contw 
+4312 680b46c8 fetcht 6 ,mem_device_addr_temp + 1 
+4313 18408403 increase 3 ,temp 
+4314 e0ab0000 istoret 6 ,contw 
+4315 20600000 rtn 
+
+mouse_eeprom_load_recon_info:
+4316 d8400058 arg 88 ,temp 
+4317 da204720 arg mem_device_flag ,rega 
+4318 da400000 arg mouse_info_eeprom_offect ,regb 
+4319 204065df call iicd_read_eep_data 
+
+mouse_select_reconn_device:
+431a da204721 arg mem_device1_type ,rega 
+431b 6800c720 fetch 1 ,mem_device_flag 
+431c 6808c703 fetcht 1 ,mem_24g_device_number 
+431d 98467c00 isub temp ,null 
+431e 20628000 rtn zero 
+431f 1fe0ffff increase -1 ,pdata 
+4320 1feffe1d mul32 pdata ,29 ,pdata 
+4321 9a20a200 iadd rega ,rega 
+4322 ea208000 ifetch 1 ,rega 
+4323 6000c210 store 1 ,mem_xrecord_mode 
+4324 c019c327 beq rec_3_mode ,mouse_load_bt_device 
+4325 c01a432c beq rec_4_mode ,mouse_load_le_device 
+4326 20600000 rtn 
+
+mouse_load_bt_device:
+4327 e8c30000 ifetch 6 ,contr 
+
+mouse_load_bt_device_end:
+4328 600341d0 store 6 ,mem_hci_plap 
+4329 d8a041be arg mem_link_key ,contw 
+432a 20407ebf call memcpy16 
+432b 202067d7 branch check_link_key_load 
+
+mouse_load_le_device:
+432c e8c30000 ifetch 6 ,contr 
+
+mouse_load_le_device_end:
+432d 600341d0 store 6 ,mem_hci_plap 
+432e d8a04419 arg mem_le_ltk ,contw 
+432f 20407ebf call memcpy16 
+4330 e8c30000 ifetch 6 ,contr 
+4331 600344a0 store 6 ,mem_le_lap 
+4332 20600000 rtn 
+
+mouse_select_device:
+4333 6800c6f5 fetch 1 ,mem_config_function_enable 
+4334 c282c349 bbit1 enable_select_device_by_gpio_button ,mouse_select_device_by_button 
+4335 c2834359 bbit1 enable_select_device_by_switch ,mouse_select_device_by_switch 
+4336 20204337 branch mouse_select_device_by_combination_key 
+
+mouse_select_device_by_combination_key:
+4337 20404083 call mouse_check_key_gpio 
+4338 c003433e beq mouse_rm_button ,mouse_select_device_commbination_key_down 
+
+mouse_select_device_commbination_key_up:
+4339 7046d81e jam 30 ,mem_combination_select_device_count 
+433a 6800c6d9 fetch 1 ,mem_select_device_button_statue 
+433b c1008000 rtneq dpi_button_state_up 
+433c 7046d901 jam dpi_button_state_up ,mem_select_device_button_statue 
+433d 20600000 rtn 
+
+mouse_select_device_commbination_key_down:
+433e 20404343 call mouse_combination_select_device_timer 
+433f 6800c6d9 fetch 1 ,mem_select_device_button_statue 
+4340 c1000000 rtneq dpi_button_state_down 
+4341 7046d900 jam dpi_button_state_down ,mem_select_device_button_statue 
+4342 202043c0 branch mouse_select_device_enable 
+
+mouse_combination_select_device_timer:
+4343 6800c6d8 fetch 1 ,mem_combination_select_device_count 
+4344 207a0000 rtn blank 
+4345 1fe0ffff pincrease -1 
+4346 6000c6d8 store 1 ,mem_combination_select_device_count 
+4347 247a0000 nrtn blank 
+4348 20204370 branch mouse_ready_reconnection_by_button 
+
+mouse_select_device_by_button:
+4349 6800c6ed fetch 1 ,mem_config_select_device_button_gpio 
+434a c17f8000 rtneq gpio_disable 
+434b 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 
+434c 2040681d call gpio_get_bit 
+434d 2020c354 branch mouse_select_device_button_down ,true 
+
+mouse_select_device_button_up:
+434e 6800c6d9 fetch 1 ,mem_select_device_button_statue 
+434f c1008000 rtneq dpi_button_state_up 
+4350 7046d901 jam dpi_button_state_up ,mem_select_device_button_statue 
+4351 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+4352 c3830000 rtnbit1 mouse_long_bt_button_flag 
+4353 20204370 branch mouse_ready_reconnection_by_button 
+
+mouse_select_device_button_down:
+4354 6800c6d9 fetch 1 ,mem_select_device_button_statue 
+4355 c1000000 rtneq dpi_button_state_down 
+4356 7046d900 jam dpi_button_state_down ,mem_select_device_button_statue 
+4357 d8e00006 arg mouse_long_bt_button_flag ,queue 
+4358 202043d2 branch mouse_disable_function_flag 
+
+mouse_select_device_by_switch:
+4359 68008004 fetch 1 ,mouse_flag_len ,mem_mouse_flag 
+435a c4030000 rtnbit0 enable_select_device_by_switch 
+435b 6800c720 fetch 1 ,mem_device_flag 
+435c c000c369 beq mode_bt_device1 ,mouse_select1_device 
+435d c001436c beq mode_24g_device ,mouse_select2_device 
+435e 20600000 rtn 
+
+mouse_cheak_select_device_by_switch:
+435f 68008004 fetch 1 ,mouse_flag_len ,mem_mouse_flag 
+4360 c4030000 rtnbit0 enable_select_device_by_switch 
+4361 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 
+4362 2040681d call gpio_get_bit 
+4363 2020c366 branch mouse_cheak_select_24gdevice ,true 
+
+mouse_select_btdevice:
+4364 70472001 jam mode_bt_device1 ,mem_device_flag 
+4365 20600000 rtn 
+
+mouse_cheak_select_24gdevice:
+4366 6800c703 fetch 1 ,mem_24g_device_number 
+4367 6000c720 store 1 ,mem_device_flag 
+4368 20600000 rtn 
+
+mouse_select1_device:
+4369 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 
+436a 2420c370 nbranch mouse_ready_reconnection_by_button ,true 
+436b 20600000 rtn 
+
+mouse_select2_device:
+436c 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 
+436d 2040681d call gpio_get_bit 
+436e 2020c354 branch mouse_select_device_button_down ,true 
+436f 20600000 rtn 
+
+mouse_ready_reconnection_by_button:
+4370 6808c720 fetcht 1 ,mem_device_flag 
+4371 18408401 increase 1 ,temp 
+4372 6800c6d2 fetch 1 ,mem_device_number 
+4373 98467c00 isub temp ,null 
+4374 244143cc ncall mouse_select_device_count_clean ,positive 
+4375 6008c720 storet 1 ,mem_device_flag 
+4376 7041bd00 jam 0 ,mem_link_key_exists 
+4377 2040437a call mouse_store_device_number2eeprom 
+4378 204043c0 call mouse_select_device_enable 
+4379 2020437e branch mouse_set_reconnection 
+
+mouse_store_device_number2eeprom:
+437a d8400001 arg 1 ,temp 
+437b da204720 arg mem_device_flag ,rega 
+437c da400000 arg 0 ,regb 
+437d 20206606 branch iicd_write_eep_data 
+
+mouse_set_reconnection:
+437e 20404381 call mouse_stop_bluetooth_mode 
+437f 204043c2 call mouse_select_device_disable 
+4380 202041d7 branch mouse_soft_reset 
+
+mouse_stop_bluetooth_mode:
+4381 68014682 fetch 2 ,mem_ui_state_map 
+4382 c283c392 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect 
+4383 c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect 
+4384 c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect 
+4385 202042ca branch mouse_stop_discovery 
+
+mouse_disconnect:
+4386 44f6c01d bpatch patch1d_5 ,mem_patch1d 
+4387 58000000 setarg 0 
+4388 600146b0 store 2 ,mem_mouse_no_data_timer 
+4389 68014682 fetch 2 ,mem_ui_state_map 
+438a c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect 
+438b 68014682 fetch 2 ,mem_ui_state_map 
+438c c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect 
+438d 20600000 rtn 
+
+mouse_irtual_cable_unplug:
+438e 58000001 setarg 0x01 
+438f 60030040 store 6 ,mem_plap 
+4390 70018533 jam rec_3_mode ,mem_record_bt_mode 
+4391 202042df branch mouse_unplug_clean_bdaddr 
+
+mouse_cancel_reconnect:
+4392 204043c4 call mouse_bt_cannel_reconn_enable 
+4393 20207e2f branch check_51cmd_bb_reconn_cancel 
+
+mouse_bt_discovery_by_button:
+4394 6800c6ec fetch 1 ,mem_config_bt_button_gpio 
+4395 c17f8000 rtneq gpio_disable 
+4396 6808c6ec fetcht 1 ,mem_config_bt_button_gpio 
+4397 2040681d call gpio_get_bit 
+4398 2020c39f branch mouse_bt_discovery_button_down ,true 
+
+mouse_bt_discovery_button_up:
+4399 6800c685 fetch 1 ,mem_ui_button_timeout 
+439a 6000c6da store 1 ,mem_combination_ui_button_count 
+439b 6800c6db fetch 1 ,mem_bt_discovey_button_statue 
+439c c1008000 rtneq dpi_button_state_up 
+439d 7046db01 jam dpi_button_state_up ,mem_bt_discovey_button_statue 
+439e 202043ca branch mouse_bt_discovery_button_down_disable 
+
+mouse_bt_discovery_button_down:
+439f 204043b5 call mouse_bt_discovry_timer 
+43a0 6800c6db fetch 1 ,mem_bt_discovey_button_statue 
+43a1 c1000000 rtneq dpi_button_state_down 
+43a2 7046db00 jam dpi_button_state_down ,mem_bt_discovey_button_statue 
+43a3 20407e2f call check_51cmd_bb_reconn_cancel 
+43a4 202043c8 branch mouse_bt_discovery_button_down_enable 
+
+mouse_bt_discovery_cheak:
+43a5 6800c6f5 fetch 1 ,mem_config_function_enable 
+43a6 c2824394 bbit1 enable_bt_button ,mouse_bt_discovery_by_button 
+
+mouse_bt_discovery_commbination_key:
+43a7 20404083 call mouse_check_key_gpio 
+43a8 c003c3af beq mouse_lmr_button ,mouse_bt_discovery_commbination_key_down 
+
+mouse_bt_discovery_commbination_key_up:
+43a9 6800c685 fetch 1 ,mem_ui_button_timeout 
+43aa 6000c6da store 1 ,mem_combination_ui_button_count 
+43ab 6800c6db fetch 1 ,mem_bt_discovey_button_statue 
+43ac c1008000 rtneq dpi_button_state_up 
+43ad 7046db01 jam dpi_button_state_up ,mem_bt_discovey_button_statue 
+43ae 202043ca branch mouse_bt_discovery_button_down_disable 
+
+mouse_bt_discovery_commbination_key_down:
+43af 204043b5 call mouse_bt_discovry_timer 
+43b0 6800c6db fetch 1 ,mem_bt_discovey_button_statue 
+43b1 c1000000 rtneq dpi_button_state_down 
+43b2 7046db00 jam dpi_button_state_down ,mem_bt_discovey_button_statue 
+43b3 20407e2f call check_51cmd_bb_reconn_cancel 
+43b4 202043c8 branch mouse_bt_discovery_button_down_enable 
+
+mouse_bt_discovry_timer:
+43b5 da6046da arg mem_combination_ui_button_count ,regc 
+43b6 da4043b8 arg mouse_long_button_bt_discovry ,regb 
+43b7 2020336d branch timer_single_step 
+
+mouse_long_button_bt_discovry:
+43b8 d8e00006 arg mouse_long_bt_button_flag ,queue 
+43b9 204043ce call mouse_enable_function_flag 
+43ba 20403357 call app_evt_button_long_pressed 
+43bb 2020426c branch mouse_bb_event_discovery_btn 
+
+mouse_cpi_enable:
+43bc d8e00001 arg mouse_cpi_flag ,queue 
+43bd 202043ce branch mouse_enable_function_flag 
+
+mouse_cpi_disable:
+43be d8e00001 arg mouse_cpi_flag ,queue 
+43bf 202043d2 branch mouse_disable_function_flag 
+
+mouse_select_device_enable:
+43c0 d8e00000 arg mouse_select_device_flag ,queue 
+43c1 202043ce branch mouse_enable_function_flag 
+
+mouse_select_device_disable:
+43c2 d8e00000 arg mouse_select_device_flag ,queue 
+43c3 202043d2 branch mouse_disable_function_flag 
+
+mouse_bt_cannel_reconn_enable:
+43c4 d8e00002 arg mouse_bt_cannel_reconn_flag ,queue 
+43c5 202043ce branch mouse_enable_function_flag 
+
+mouse_bt_cannel_reconn_disable:
+43c6 d8e00002 arg mouse_bt_cannel_reconn_flag ,queue 
+43c7 202043d2 branch mouse_disable_function_flag 
+
+mouse_bt_discovery_button_down_enable:
+43c8 d8e00005 arg mouse_bt_discovery_button_down_flag ,queue 
+43c9 202043ce branch mouse_enable_function_flag 
+
+mouse_bt_discovery_button_down_disable:
+43ca d8e00005 arg mouse_bt_discovery_button_down_flag ,queue 
+43cb 202043d2 branch mouse_disable_function_flag 
+
+mouse_select_device_count_clean:
+43cc d8400001 arg 1 ,temp 
+43cd 20600000 rtn 
+
+mouse_enable_function_flag:
+43ce 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+43cf f9207e00 qset1 pdata 
+43d0 600246d3 store mouse_flag_len ,mem_mouse_flag 
+43d1 20600000 rtn 
+
+mouse_disable_function_flag:
+43d2 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+43d3 f93ffe00 qset0 pdata 
+43d4 600246d3 store mouse_flag_len ,mem_mouse_flag 
+43d5 20600000 rtn 
+
+mouse_adc_read:
+43d6 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+43d7 c40d0000 rtnbit0 mouse_enable_adc 
+43d8 6800c6ce fetch 1 ,mem_adc_read_timer 
+43d9 1fe0fe01 increase 1 ,pdata 
+43da 6000c6ce store 1 ,mem_adc_read_timer 
+43db 1fe67c0a sub pdata ,10 ,null 
+43dc 20610000 rtn positive 
+43dd 7046ce00 jam 0 ,mem_adc_read_timer 
+43de 204068eb call adc_set_mode 
+43df 20406908 call vdd_calculate_by_mode 
+43e0 6001470f store 2 ,mem_mouse_vdd_now_vol 
+43e1 da204709 arg mem_mouse_vdd_calculate_set ,rega 
+43e2 20406930 call adc_bat_percent_lowpower_out 
+43e3 6800c231 fetch 1 ,mem_adc_power_flag 
+43e4 c280c4a0 bbit1 1 ,mouse_power_down 
+43e5 c30043e9 bbit0 0 ,mouse_adc_no_low_voltage 
+43e6 202043e7 branch mouse_adc_low_voltage 
+
+mouse_adc_low_voltage:
+43e7 d8e00004 arg mouse_low_voltage_flag ,queue 
+43e8 202043ce branch mouse_enable_function_flag 
+
+mouse_adc_no_low_voltage:
+43e9 d8e00004 arg mouse_low_voltage_flag ,queue 
+43ea 202043d2 branch mouse_disable_function_flag 
+
+mouse_low_voltage_led_timer:
+43eb 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+43ec c4020000 rtnbit0 mouse_low_voltage_flag 
+43ed 6800c6ef fetch 1 ,mem_config_low_voltage_alarm_gpio 
+43ee 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+43ef 6800c6cf fetch 1 ,mem_adc_low_volatage_led_timer_count 
+43f0 1fe0fe01 pincrease 1 
+43f1 6000c6cf store 1 ,mem_adc_low_volatage_led_timer_count 
+43f2 1fe67c14 sub pdata ,20 ,null 
+43f3 244143f9 ncall mouse_adc_low_volatage_led_timer_count_clean ,positive 
+43f4 c00143fb beq 2 ,mouse_low_voltage_led_on 
+43f5 c00243fe beq 4 ,mouse_low_voltage_led_off 
+43f6 c00343fb beq 6 ,mouse_low_voltage_led_on 
+43f7 c00443fe beq 8 ,mouse_low_voltage_led_off 
+43f8 20600000 rtn 
+
+mouse_adc_low_volatage_led_timer_count_clean:
+43f9 7046cf01 jam 1 ,mem_adc_low_volatage_led_timer_count 
+43fa 202043fe branch mouse_low_voltage_led_off 
+
+mouse_low_voltage_led_on:
+43fb da200000 arg 0 ,rega 
+43fc 70471302 jam ui_led_state_lighting ,mem_mouse_led_type 
+43fd 20207d14 branch ui_led_on_global 
+
+mouse_low_voltage_led_off:
+43fe da200000 arg 0 ,rega 
+43ff 70471302 jam ui_led_state_lighting ,mem_mouse_led_type 
+4400 20207d19 branch ui_led_off_global 
+
+mouse_g24_package_data:
+4401 20403f97 call mouse_motion 
+4402 24740000 nrtn user 
+4403 da200007 arg 7 ,rega 
+4404 da40469a arg mem_mouse_key ,regb 
+4405 20600000 rtn 
+
+mouse_g24_enter_lpm:
+4406 6800c78b fetch 1 ,mem_mouse_24g_enter_lpm_enable 
+4407 207a0000 rtn blank 
+4408 6808c6e7 fetcht 1 ,mem_dpi_button_gpio 
+4409 2040681d call gpio_get_bit 
+440a 2040c410 call mouse_24g_dpi_delay_init ,true 
+440b 6800c704 fetch 1 ,mem_24g_enter_lpm_timer 
+440c 247a0000 nrtn blank 
+440d 20404083 call mouse_check_key_gpio 
+440e 247a0000 nrtn blank 
+440f 20202d83 branch g24_lpm_long_sleep 
+
+mouse_24g_dpi_delay_init:
+4410 6800c6e7 fetch 1 ,mem_dpi_button_gpio 
+4411 c17f8000 rtneq ui_button_gpio_disable 
+4412 7047040a jam 10 ,mem_24g_enter_lpm_timer 
+4413 20600000 rtn 
+
+mouse_load_flash_info_cheak:
+4414 20404423 call mouse_load_flash_flag 
+4415 68014778 fetch 2 ,mem_store_flag 
+4416 d840aa55 arg eeprom_init_flag ,temp 
+4417 98467c00 isub temp ,null 
+4418 2022c42b branch mouse_load_flash_device_info ,zero 
+4419 60094778 storet 2 ,mem_store_flag 
+441a 2040441c call mouse_ble_init_address 
+441b 20204435 branch mouse_store_flash_device_info 
+
+mouse_ble_init_address:
+441c 680344a0 fetch 6 ,mem_le_lap 
+441d 60034738 store 6 ,mem_device1_locall_addr 
+441e 1fe0ff00 add pdata ,0x0100 ,pdata 
+441f 60034755 store 6 ,mem_device2_locall_addr 
+4420 1fe0ff00 add pdata ,0x0100 ,pdata 
+4421 60034772 store 6 ,mem_device3_locall_addr 
+4422 20600000 rtn 
+
+mouse_load_flash_flag:
+4423 58004778 setarg mem_store_flag 
+4424 d8404720 arg mem_mouse_information_start ,temp 
+4425 98460400 isub temp ,temp 
+4426 6801c700 fetch 3 ,mem_flash_base 
+4427 9840fe00 iadd temp ,pdata 
+4428 d8400002 arg 2 ,temp 
+4429 da204778 arg mem_store_flag ,rega 
+442a 20206562 branch spid_read_flash 
+
+mouse_load_flash_device_info:
+442b 5800477f setarg mem_mouse_information_end 
+442c d8404720 arg mem_mouse_information_start ,temp 
+442d 98460400 isub temp ,temp 
+442e 6801c700 fetch 3 ,mem_flash_base 
+442f da204720 arg mem_mouse_information_start ,rega 
+4430 20406562 call spid_read_flash 
+4431 2040431a call mouse_select_reconn_device 
+4432 6802477b fetch 4 ,mem_mouse_24g_addr 
+4433 20402c7a call g24_head_ptr2regc 
+4434 2020322c branch g24_store_mem_addr 
+
+mouse_store_flash_device_info:
+4435 5800477f setarg mem_mouse_information_end 
+4436 d8404720 arg mem_mouse_information_start ,temp 
+4437 98460400 isub temp ,temp 
+4438 da204720 arg mem_mouse_information_start ,rega 
+4439 6801c700 fetch 3 ,mem_flash_base 
+443a 20206514 branch flash_write 
+
+mouse_store_eerpom_dpi:
+443b d8400001 arg 1 ,temp 
+443c da20477a arg mem_mouse_dpi ,rega 
+443d da40005a arg mouse_dpi_eeprom_offect ,regb 
+443e 202065d1 branch iicd_write_protect_eep_data 
+
+mouse_load_eeprom_dpi:
+443f d8400001 arg 1 ,temp 
+4440 da20477a arg mem_mouse_dpi ,rega 
+4441 da40005a arg mouse_dpi_eeprom_offect ,regb 
+4442 202065df branch iicd_read_eep_data 
+
+mouse_statue_cheak_timer:
+4443 c6130000 rtnmark1 mark_24g 
+4444 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+4445 c40b0000 rtnbit0 mouse_enable_statue_up 
+4446 6800c705 fetch 1 ,mem_mouse_1step_up_count 
+4447 1fe0fe01 pincrease 1 
+4448 1fe17e07 and pdata ,0x07 ,pdata 
+4449 6000c705 store 1 ,mem_mouse_1step_up_count 
+444a c1838000 rtnne 0x07 
+444b 68014682 fetch 2 ,mem_ui_state_map 
+444c c280444f bbit1 ui_state_bt_connected ,mouse_check_statue_up 
+444d c284c44f bbit1 ui_state_ble_connected ,mouse_check_statue_up 
+444e 20600000 rtn 
+
+mouse_check_statue_up:
+444f 44f7401d bpatch patch1d_6 ,mem_patch1d 
+4450 6800c706 fetch 1 ,mem_mouse_2step_up_count 
+4451 247a0000 nrtn blank 
+4452 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+4453 c4040000 rtnbit0 mouse_statue_up_flag 
+4454 6800c6a5 fetch 1 ,mem_sensor_squal_reg 
+4455 204063fb call sensor_read 
+4456 6000c6a6 store 1 ,mem_sensor_iqc 
+4457 1fe67c10 sub pdata ,0x10 ,null 
+4458 2021445b branch mouse_statue_up_timer_init ,positive 
+4459 70470600 jam 0 ,mem_mouse_2step_up_count 
+445a 20600000 rtn 
+
+mouse_statue_up_timer_init:
+445b 7047061e jam 30 ,mem_mouse_2step_up_count 
+445c 20600000 rtn 
+
+mouse_statue_up_timer:
+445d da604706 arg mem_mouse_2step_up_count ,regc 
+445e da404460 arg mouse_statue_up ,regb 
+445f 2020336d branch timer_single_step 
+
+mouse_statue_up:
+4460 6800c6a5 fetch 1 ,mem_sensor_squal_reg 
+4461 20406414 call twspi_read 
+4462 1fe67c10 sub pdata ,0x10 ,null 
+4463 24610000 nrtn positive 
+4464 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+4465 c4040000 rtnbit0 mouse_statue_up_flag 
+4466 d8e00008 arg mouse_statue_up_flag ,queue 
+4467 204043d2 call mouse_disable_function_flag 
+4468 70417200 jam 0 ,mem_lpm_mult 
+4469 7046c41e jam 30 ,mem_mouse_statue_led_timer 
+446a 20404482 call mouse_devce_led_off 
+446b 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+446c c28ac471 bbit1 mouse_enable_statue_up_three_led ,mouse_three_device_statue_up 
+
+mouse_two_device_statue_up:
+446d 6800c720 fetch 1 ,mem_device_flag 
+446e c000c489 beq mode_bt_device1 ,mouse_device1_led_on 
+446f c0014476 beq mode_bt_device2 ,mouse_device_blink_led_init 
+4470 20600000 rtn 
+
+mouse_three_device_statue_up:
+4471 6800c720 fetch 1 ,mem_device_flag 
+4472 c000c489 beq mode_bt_device1 ,mouse_device1_led_on 
+4473 c001448c beq mode_bt_device2 ,mouse_device2_led_on 
+4474 c001c48f beq mode_bt_device3 ,mouse_device3_led_on 
+4475 20600000 rtn 
+
+mouse_device_blink_led_init:
+4476 6800c6f0 fetch 1 ,mem_config_device1_led_gpio 
+4477 2020428f branch mouse_led_blink 
+
+mouse_statue_led_off:
+4478 70417220 jam 0x20 ,mem_lpm_mult 
+4479 20204482 branch mouse_devce_led_off 
+
+mouse_devce1_led_off:
+447a 6800c6f0 fetch 1 ,mem_config_device1_led_gpio 
+447b c17f8000 rtneq gpio_disable 
+447c 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+447d 20204296 branch mouse_led_off 
+
+mouse_devce2_led_off:
+447e 6800c6f1 fetch 1 ,mem_config_device2_led_gpio 
+447f c17f8000 rtneq gpio_disable 
+4480 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+4481 20204296 branch mouse_led_off 
+
+mouse_devce_led_off:
+4482 20404296 call mouse_led_off 
+4483 2040447a call mouse_devce1_led_off 
+4484 2040447e call mouse_devce2_led_off 
+
+mouse_devce3_led_off:
+4485 6800c6f2 fetch 1 ,mem_config_device3_led_gpio 
+4486 c17f8000 rtneq gpio_disable 
+4487 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+4488 20204296 branch mouse_led_off 
+
+mouse_device1_led_on:
+4489 6800c6f0 fetch 1 ,mem_config_device1_led_gpio 
+448a 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+448b 20204298 branch mouse_led_on 
+
+mouse_device2_led_on:
+448c 6800c6f1 fetch 1 ,mem_config_device2_led_gpio 
+448d 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+448e 20204298 branch mouse_led_on 
+
+mouse_device3_led_on:
+448f 6800c6f2 fetch 1 ,mem_config_device3_led_gpio 
+4490 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+4491 20204298 branch mouse_led_on 
+
+mouse_polling_device:
+4492 44f7c01d bpatch patch1d_7 ,mem_patch1d 
+4493 6800c71e fetch 1 ,mem_reconn_times 
+4494 1fe0ffff increase -1 ,pdata 
+4495 6000c71e store 1 ,mem_reconn_times 
+4496 6808c720 fetcht 1 ,mem_device_flag 
+4497 18408401 increase 1 ,temp 
+4498 6800c6d2 fetch 1 ,mem_device_number 
+4499 98467c00 isub temp ,null 
+449a 244143cc ncall mouse_select_device_count_clean ,positive 
+449b 6008c720 storet 1 ,mem_device_flag 
+449c 7041bd00 jam 0 ,mem_link_key_exists 
+449d 2040437a call mouse_store_device_number2eeprom 
+449e 204042fb call mouse_before_store_reconn_info 
+449f 202042a2 branch mouse_check_reconn_target 
+
+mouse_power_down:
+44a0 20404482 call mouse_devce_led_off 
+44a1 58000000 setarg 0 
+44a2 600400a1 store 8 ,mem_gpio_wakeup_low 
+44a3 20202b1f branch lpm_hibernate 
+
+remote_car_init:
+44a4 20758000 rtn wake 
+44a5 68108081 hfetch 1 ,core_gpio_sel1 
+44a6 1fe17ef0 and_into 0xf0 ,pdata 
+44a7 60108081 hstore 1 ,core_gpio_sel1 
+44a8 20406948 call keyscan_key_init 
+44a9 580044e6 setarg remote_car_le_before_hibernate 
+44aa 600141eb store 2 ,mem_cb_before_hibernate 
+44ab 580044e9 setarg remote_car_process_lpm_before 
+44ac 600141ed store 2 ,mem_cb_before_lpm 
+44ad 580044ef setarg remote_car_scale_process_idle 
+44ae 600141f3 store 2 ,mem_cb_idle_process 
+44af 580044f2 setarg remote_car_scale_process_bb_event 
+44b0 600141f5 store 2 ,mem_cb_bb_event_process 
+44b1 580033d0 setarg app_get_lpm_wake_lock 
+44b2 600141e9 store 2 ,mem_cb_check_wakelock 
+44b3 20402c7a call g24_head_ptr2regc 
+44b4 580045c2 setarg remote_car_g24_package_data 
+44b5 1a608ad8 add regc ,offset_24g_cb_data ,contw 
+44b6 e0a10000 istore 2 ,contw 
+44b7 580044ea setarg remote_car_g24_enter_lpm 
+44b8 1a608ada add regc ,offset_24g_cb_lpm_prepare ,contw 
+44b9 e0a10000 istore 2 ,contw 
+44ba 580044e9 setarg remote_car_process_lpm_before 
+44bb 1a608adc add regc ,offset_24g_cb_lpm_before ,contw 
+44bc e0a10000 istore 2 ,contw 
+44bd 5800450e setarg remote_car_event_timer 
+44be 600141fd store 2 ,mem_cb_event_timer 
+44bf 580044da setarg remote_car_power_off_signal 
+44c0 6001475b store 2 ,mem_remote_car_power_off_cb 
+44c1 580044d6 setarg remote_car_soft_switch_power_on_signal 
+44c2 6001475f store 2 ,mem_remote_car_power_standby_cb 
+44c3 58004560 setarg remote_car_send_key_data 
+44c4 6001470f store 2 ,mem_cb_remote_car_keyscan 
+44c5 44f8401e bpatch patch1e_0 ,mem_patch1e 
+44c6 204044e2 call remote_car_init_environment 
+44c7 20407e38 call queue_init 
+44c8 70417202 jam 2 ,mem_lpm_mult 
+44c9 6800c72b fetch 1 ,mem_remote_car_config_soft_switch_enable 
+44ca 6000c69a store 1 ,mem_remote_car_hard_soft_switch 
+44cb c00044d5 beq hard_switch ,remote_car_hard_switch_power_on_signal 
+44cc 6800c72c fetch 1 ,mem_remote_car_config_soft_switch_gpio 
+44cd 6000c686 store 1 ,mem_ui_button_gpio 
+
+remote_car_soft_switch_power_on_init:
+44ce 204044db call remote_car_ui_led_init 
+44cf 20407cd3 call ui_button_init 
+44d0 20407cdd call ui_button_polling 
+44d1 70475701 jam power_starting ,mem_remote_car_power_state 
+44d2 68014682 fetch 2 ,mem_ui_state_map 
+44d3 c3860000 rtnbit1 ui_state_btn_down 
+44d4 2020340a branch app_enter_hibernate 
+
+remote_car_hard_switch_power_on_signal:
+44d5 70475702 jam power_standby ,mem_remote_car_power_state 
+
+remote_car_soft_switch_power_on_signal:
+44d6 204044db call remote_car_ui_led_init 
+44d7 da200000 arg 0 ,rega 
+44d8 20407d1e call ui_led_blink_start_global 
+
+remote_car_connect_24g_mode:
+44d9 20202ee4 branch g24_auto_pair_start 
+
+remote_car_power_off_signal:
+44da 202044db branch remote_car_ui_led_init 
+
+remote_car_ui_led_init:
+44db 44f8c01e bpatch patch1e_1 ,mem_patch1e 
+44dc 6800c729 fetch 1 ,mem_remote_car_config_connect_led_gpio 
+44dd c0ffc4e0 bne invalid_pin_num ,remote_car_pairing_led_gpio_set 
+
+remote_car_ui_led_init_1:
+44de 6808c706 fetcht 1 ,mem_remote_car_led_map 
+44df 2020680e branch gpio_config_output 
+
+remote_car_pairing_led_gpio_set:
+44e0 6000c706 store 1 ,mem_remote_car_led_map 
+44e1 202044de branch remote_car_ui_led_init_1 
+
+remote_car_init_environment:
+44e2 20402c9d call g24_set_device_addr 
+44e3 68014753 fetch 2 ,mem_remote_car_no_data_timeout 
+44e4 60014755 store 2 ,mem_remote_car_no_data_timer 
+44e5 20204515 branch remote_car_get_adc_default_data 
+
+remote_car_le_before_hibernate:
+
+remote_car_in_enter_hibernate:
+44e6 20406835 call gpio_set_before_lpm_common 
+44e7 204044e9 call remote_car_process_lpm_before 
+44e8 2020340a branch app_enter_hibernate 
+
+remote_car_process_lpm_before:
+44e9 2020696c branch keyscan_process_lpm_before 
+
+remote_car_g24_enter_lpm:
+44ea 6800c765 fetch 1 ,mem_remote_car_24g_enter_lpm_enable 
+44eb 207a0000 rtn blank 
+44ec 20202d83 branch g24_lpm_long_sleep 
+
+remote_car_process_auto_pair_exit:
+44ed 20600000 rtn 
+
+remote_car_key_scan_process:
+44ee 20206978 branch keyscan_key_process 
+
+remote_car_scale_process_idle:
+44ef 20404544 call remote_car_rocker_process 
+44f0 20404503 call remote_car_24g_status_process 
+44f1 202044ee branch remote_car_key_scan_process 
+
+remote_car_scale_process_bb_event:
+44f2 1a627e00 copy regc ,pdata 
+44f3 c016b431 beq bt_evt_button_up ,app_event_button_up 
+44f4 c008341a beq bt_evt_button_long_pressed ,app_button_long_pressed 
+44f5 c01cc4fb beq bt_evt_24g_pairing_complete ,remote_car_24g_pairing_complete 
+44f6 c01e44ff beq bt_evt_24g_attempt_success ,remote_car_24g_attempt_success 
+44f7 c01d44f9 beq bt_evt_24g_attempt_fail ,remote_car_24g_attempt_fail 
+44f8 20600000 rtn 
+
+remote_car_24g_attempt_fail:
+44f9 70476501 jam 1 ,mem_remote_car_24g_enter_lpm_enable 
+44fa 20600000 rtn 
+
+remote_car_24g_pairing_complete:
+44fb 70476501 jam 1 ,mem_remote_car_24g_enter_lpm_enable 
+44fc 70476301 jam work_paired ,mem_remote_car_24g_auto_work_step 
+44fd 70476401 jam work_paired ,mem_remote_car_24g_pair_success_flag 
+44fe 20600000 rtn 
+
+remote_car_24g_attempt_success:
+44ff 70476501 jam 1 ,mem_remote_car_24g_enter_lpm_enable 
+4500 70476301 jam work_paired ,mem_remote_car_24g_auto_work_step 
+4501 70476401 jam work_paired ,mem_remote_car_24g_pair_success_flag 
+4502 20600000 rtn 
+
+remote_car_24g_status_process:
+4503 6800c763 fetch 1 ,mem_remote_car_24g_auto_work_step 
+4504 c1000000 rtneq power_on 
+4505 6800c762 fetch 1 ,mem_remote_car_24g_status 
+4506 c1008000 rtneq work_paired 
+4507 70476201 jam work_paired ,mem_remote_car_24g_status 
+
+remote_car_scale_process_paired:
+4508 da200000 arg 0 ,rega 
+4509 20207d19 branch ui_led_off_global 
+
+remote_car_scale_process_shutdown:
+450a da200000 arg 0 ,rega 
+450b 20407d19 call ui_led_off_global 
+450c 204044db call remote_car_ui_led_init 
+450d 2020340a branch app_enter_hibernate 
+
+remote_car_event_timer:
+450e 2040337b call app_power_timer 
+450f 20204510 branch remote_car_no_data_timer 
+
+remote_car_no_data_timer:
+4510 6800c72d fetch 1 ,mem_remote_car_config_timeout_shutdown_enable 
+4511 207a0000 rtn blank 
+4512 da604755 arg mem_remote_car_no_data_timer ,regc 
+4513 da40450a arg remote_car_scale_process_shutdown ,regb 
+4514 20203374 branch timer_single_step_2b 
+
+remote_car_get_adc_default_data:
+4515 2040451a call remote_car_rocker_get_x 
+4516 6009471a storet 2 ,mem_current_vdd_value_default_mid_x 
+4517 2040451f call remote_car_rocker_get_y 
+4518 6009471c storet 2 ,mem_current_vdd_value_default_mid_y 
+4519 20600000 rtn 
+
+remote_car_rocker_data_get:
+
+remote_car_rocker_get_x:
+451a 6801471a fetch 2 ,mem_current_vdd_value_default_mid_x 
+451b 6001471e store 2 ,mem_current_vdd_value_default_mid_temp 
+451c 20404540 call remote_car_get_adc_from_gpio6 
+451d 20404525 call remote_car_rocker_get_value 
+451e 6000c724 store 1 ,mem_rocker_status 
+
+remote_car_rocker_get_y:
+451f 6801471c fetch 2 ,mem_current_vdd_value_default_mid_y 
+4520 6001471e store 2 ,mem_current_vdd_value_default_mid_temp 
+4521 20404542 call remote_car_get_adc_from_gpio7 
+4522 20404525 call remote_car_rocker_get_value 
+4523 6000c725 store 1 ,mem_rocker_status + 1 
+4524 20600000 rtn 
+
+remote_car_rocker_get_value:
+4525 68014720 fetch 2 ,mem_current_vdd_default_range 
+4526 1fe22200 copy pdata ,rega 
+4527 6801471e fetch 2 ,mem_current_vdd_value_default_mid_temp 
+4528 2040452e call remote_car_rocker_mid_value_adjust 
+4529 6800c719 fetch 1 ,mem_rocker_work_status 
+452a 243a4537 nbranch remote_car_rocker_translate_key ,blank 
+452b 24610000 nrtn positive 
+452c 6809471e fetcht 2 ,mem_current_vdd_value_default_mid_temp 
+452d 20600000 rtn 
+
+remote_car_rocker_mid_value_adjust:
+452e 98467e00 isub temp ,pdata 
+452f 20214534 branch remote_car_rocker_mid_adjust_positive ,positive 
+4530 1fe67e00 sub pdata ,0 ,pdata 
+4531 70471801 jam 1 ,mem_rocker_negative_flag 
+4532 9a267c00 isub rega ,null 
+4533 20600000 rtn 
+
+remote_car_rocker_mid_adjust_positive:
+4534 70471800 jam 0 ,mem_rocker_negative_flag 
+4535 9a267c00 isub rega ,null 
+4536 20600000 rtn 
+
+remote_car_rocker_translate_key:
+4537 2421453e nbranch remote_car_rocker_middle_key ,positive 
+4538 6800c718 fetch 1 ,mem_rocker_negative_flag 
+4539 243a453c nbranch remote_car_rocker_negative_key ,blank 
+
+remote_car_rocker_positive_key:
+453a 58000001 setarg rocker_positive_key 
+453b 20600000 rtn 
+
+remote_car_rocker_negative_key:
+453c 58000002 setarg rocker_negative_key 
+453d 20600000 rtn 
+
+remote_car_rocker_middle_key:
+453e 58000000 setarg rocker_middle_key 
+453f 20600000 rtn 
+
+remote_car_get_adc_from_gpio6:
+4540 70422e33 jam 0x33 ,mem_adc_channel 
+4541 202068eb branch adc_set_mode 
+
+remote_car_get_adc_from_gpio7:
+4542 70422e34 jam 0x34 ,mem_adc_channel 
+4543 202068eb branch adc_set_mode 
+
+remote_car_rocker_process:
+4544 6800c72a fetch 1 ,mem_remote_car_config_check_way 
+4545 c1808000 rtnne car_remote_check_rocker 
+
+remote_car_read_rocker_check_start:
+4546 44f9401e bpatch patch1e_2 ,mem_patch1e 
+4547 70471901 jam 1 ,mem_rocker_work_status 
+4548 2040451a call remote_car_rocker_data_get 
+4549 68014724 fetch 2 ,mem_rocker_status 
+454a 68094722 fetcht 2 ,mem_rocker_last_status 
+454b 98467c00 isub temp ,null 
+454c 20628000 rtn zero 
+454d 60014722 store 2 ,mem_rocker_last_status 
+454e 20404550 call remote_car_rocker_x_to_key 
+454f 20204554 branch remote_car_rocker_y_to_key 
+
+remote_car_rocker_x_to_key:
+4550 6800c724 fetch 1 ,mem_rocker_x_status 
+4551 203a455a branch rocker_to_queue_set_0 ,blank 
+4552 1fe0ffff increase -1 ,pdata 
+4553 20204557 branch remote_car_rocker_to_key 
+
+remote_car_rocker_y_to_key:
+4554 6800c725 fetch 1 ,mem_rocker_y_status 
+4555 203a455d branch rocker_to_queue_set_2 ,blank 
+4556 1fe0fe01 increase 1 ,pdata 
+
+remote_car_rocker_to_key:
+4557 1fe20e00 copy pdata ,queue 
+4558 da200001 arg 1 ,rega 
+4559 20204560 branch remote_car_send_key_data 
+
+rocker_to_queue_set_0:
+455a d8e00000 arg 0 ,queue 
+455b da200000 arg 0 ,rega 
+455c 20204560 branch remote_car_send_key_data 
+
+rocker_to_queue_set_2:
+455d d8e00002 arg 2 ,queue 
+455e da200000 arg 0 ,rega 
+455f 20204560 branch remote_car_send_key_data 
+
+remote_car_send_key_data:
+4560 1a227e00 copy rega ,pdata 
+4561 6000c761 store 1 ,mem_remote_key_status 
+4562 6800c763 fetch 1 ,mem_remote_car_24g_auto_work_step 
+4563 c0002ee4 beq power_on ,g24_auto_pair_start 
+4564 68014753 fetch 2 ,mem_remote_car_no_data_timeout 
+4565 60014755 store 2 ,mem_remote_car_no_data_timer 
+4566 6800c761 fetch 1 ,mem_remote_key_status 
+4567 203a4580 branch remote_car_key_is_release ,blank 
+
+remote_car_key_is_press:
+4568 44f9c01e bpatch patch1e_3 ,mem_patch1e 
+4569 da200000 arg 0 ,rega 
+456a 20407d14 call ui_led_on_global 
+
+remote_car_attack_key_press:
+456b 18e27e00 copy queue ,pdata 
+456c c00245a3 beq 4 ,remote_car_send_attack_key4_press 
+456d c002c5a5 beq 5 ,remote_car_send_attack_key5_press 
+456e c00345a7 beq 6 ,remote_car_send_fire_key6_press 
+
+remote_car_motor_key_press:
+456f 2040458b call remote_car_device_layout_select 
+4570 c0004574 beq control_f_b_ten ,remote_car_single_motor_key_is_press 
+4571 c001457a beq control_l_r_ten ,remote_car_double_motor_key_press 
+4572 c001c574 beq control_l_r_lr ,remote_car_single_motor_key_is_press 
+4573 20600000 rtn 
+
+remote_car_single_motor_key_is_press:
+4574 18e27e00 copy queue ,pdata 
+4575 c000458f beq 0 ,remote_car_send_motor1_key0_press 
+4576 c000c591 beq 1 ,remote_car_send_motor1_key1_press 
+4577 c0014593 beq 2 ,remote_car_send_motor2_key2_press 
+4578 c001c595 beq 3 ,remote_car_send_motor2_key3_press 
+4579 20600000 rtn 
+
+remote_car_double_motor_key_press:
+457a 18e27e00 copy queue ,pdata 
+457b c0004597 beq 0 ,remote_car_send_double_motor_key0_press 
+457c c000c59a beq 1 ,remote_car_send_double_motor_key1_press 
+457d c001459d beq 2 ,remote_car_send_double_motor_key2_press 
+457e c001c5a0 beq 3 ,remote_car_send_double_motor_key3_press 
+457f 20600000 rtn 
+
+remote_car_key_is_release:
+4580 44fa401e bpatch patch1e_4 ,mem_patch1e 
+4581 da200000 arg 0 ,rega 
+4582 20407d19 call ui_led_off_global 
+
+remote_car_attack_key_release:
+4583 18e27e00 copy queue ,pdata 
+4584 c00245bc beq 4 ,remote_car_send_attack_key4_rel 
+4585 c002c5bc beq 5 ,remote_car_send_attack_key5_rel 
+
+remote_car_motor_key_release:
+4586 2040458b call remote_car_device_layout_select 
+4587 c00045a9 beq control_f_b_ten ,remote_car_single_motor_key_rel 
+4588 c00145af beq control_l_r_ten ,remote_car_double_motor_key_rel 
+4589 c001c5a9 beq control_l_r_lr ,remote_car_single_motor_key_rel 
+458a 20600000 rtn 
+
+remote_car_device_layout_select:
+458b 6800c728 fetch 1 ,mem_remote_car_config_layout 
+458c 6808c727 fetcht 1 ,mem_remote_car_config_key_map 
+458d 9841fe00 ior temp ,pdata 
+458e 20600000 rtn 
+
+remote_car_send_motor1_key0_press:
+458f 70473401 jam motor_positive ,mem_remote_car_24g_motor1_payload 
+4590 202045be branch remote_car_send_key 
+
+remote_car_send_motor1_key1_press:
+4591 70473402 jam motor_negative ,mem_remote_car_24g_motor1_payload 
+4592 202045be branch remote_car_send_key 
+
+remote_car_send_motor2_key2_press:
+4593 70473601 jam motor_positive ,mem_remote_car_24g_motor2_payload 
+4594 202045be branch remote_car_send_key 
+
+remote_car_send_motor2_key3_press:
+4595 70473602 jam motor_negative ,mem_remote_car_24g_motor2_payload 
+4596 202045be branch remote_car_send_key 
+
+remote_car_send_double_motor_key0_press:
+4597 70473401 jam motor_positive ,mem_remote_car_24g_motor1_payload 
+4598 70473601 jam motor_positive ,mem_remote_car_24g_motor2_payload 
+4599 202045be branch remote_car_send_key 
+
+remote_car_send_double_motor_key1_press:
+459a 70473402 jam motor_negative ,mem_remote_car_24g_motor1_payload 
+459b 70473602 jam motor_negative ,mem_remote_car_24g_motor2_payload 
+459c 202045be branch remote_car_send_key 
+
+remote_car_send_double_motor_key2_press:
+459d 70473402 jam motor_negative ,mem_remote_car_24g_motor1_payload 
+459e 70473601 jam motor_positive ,mem_remote_car_24g_motor2_payload 
+459f 202045be branch remote_car_send_key 
+
+remote_car_send_double_motor_key3_press:
+45a0 70473401 jam motor_positive ,mem_remote_car_24g_motor1_payload 
+45a1 70473602 jam motor_negative ,mem_remote_car_24g_motor2_payload 
+45a2 202045be branch remote_car_send_key 
+
+remote_car_send_attack_key4_press:
+45a3 70473801 jam motor_positive ,mem_remote_car_24g_motor3_payload 
+45a4 202045be branch remote_car_send_key 
+
+remote_car_send_attack_key5_press:
+45a5 70473802 jam motor_negative ,mem_remote_car_24g_motor3_payload 
+45a6 202045be branch remote_car_send_key 
+
+remote_car_send_fire_key6_press:
+45a7 70474101 jam 0x01 ,mem_remote_car_24g_fire_send_payload 
+45a8 202045c0 branch remote_car_send_attack 
+
+remote_car_single_motor_key_rel:
+45a9 18e27e00 copy queue ,pdata 
+45aa c00045b5 beq 0 ,remote_car_send_motor1_key0_rel 
+45ab c000c5b5 beq 1 ,remote_car_send_motor1_key1_rel 
+45ac c00145b7 beq 2 ,remote_car_send_motor2_key2_rel 
+45ad c001c5b7 beq 3 ,remote_car_send_motor2_key3_rel 
+45ae 20600000 rtn 
+
+remote_car_double_motor_key_rel:
+45af 18e27e00 copy queue ,pdata 
+45b0 c00045b9 beq 0 ,remote_car_send_double_motor_key0_rel 
+45b1 c000c5b9 beq 1 ,remote_car_send_double_motor_key1_rel 
+45b2 c00145b9 beq 2 ,remote_car_send_double_motor_key2_rel 
+45b3 c001c5b9 beq 3 ,remote_car_send_double_motor_key3_rel 
+45b4 20600000 rtn 
+
+remote_car_send_motor1_key0_rel:
+
+remote_car_send_motor1_key1_rel:
+45b5 70473400 jam motor_stop ,mem_remote_car_24g_motor1_payload 
+45b6 202045be branch remote_car_send_key 
+
+remote_car_send_motor2_key2_rel:
+
+remote_car_send_motor2_key3_rel:
+45b7 70473600 jam motor_stop ,mem_remote_car_24g_motor2_payload 
+45b8 202045be branch remote_car_send_key 
+
+remote_car_send_double_motor_key0_rel:
+
+remote_car_send_double_motor_key1_rel:
+
+remote_car_send_double_motor_key2_rel:
+
+remote_car_send_double_motor_key3_rel:
+45b9 70473400 jam motor_stop ,mem_remote_car_24g_motor1_payload 
+45ba 70473600 jam motor_stop ,mem_remote_car_24g_motor2_payload 
+45bb 202045be branch remote_car_send_key 
+
+remote_car_send_attack_key4_rel:
+
+remote_car_send_attack_key5_rel:
+45bc 70473800 jam motor_stop ,mem_remote_car_24g_motor3_payload 
+45bd 202045be branch remote_car_send_key 
+
+remote_car_send_key:
+45be da20472e arg mem_remote_car_24g_motor_packet ,rega 
+45bf 20207e3d branch queue_push 
+
+remote_car_send_attack:
+45c0 da20473b arg mem_remote_car_24g_fire_packet ,rega 
+45c1 20207e3d branch queue_push 
+
+remote_car_g24_package_data:
+45c2 6800c764 fetch 1 ,mem_remote_car_24g_pair_success_flag 
+45c3 c000c5cc beq work_paired ,remote_car_g24_send_empty 
+45c4 da204744 arg mem_remote_car_24g_tx_temp ,rega 
+45c5 20407e54 call queue_pop 
+45c6 243445d1 nbranch remote_car_moto_data ,user 
+
+remote_car_g24_package_data_continue:
+45c7 d8c04744 arg mem_remote_car_24g_tx_temp ,contr 
+45c8 e8c08000 ifetch 1 ,contr 
+45c9 1fe22200 copy pdata ,rega 
+45ca da404745 arg mem_remote_car_24g_tx_temp + 1 ,regb 
+45cb 20600000 rtn 
+
+remote_car_g24_send_empty:
+45cc 70476400 jam 0 ,mem_remote_car_24g_pair_success_flag 
+45cd 78347c00 enable user 
+45ce da200001 arg 1 ,rega 
+45cf da404766 arg mem_remote_car_empty_packet ,regb 
+45d0 20600000 rtn 
+
+remote_car_moto_data:
+45d1 6800c747 fetch 1 ,mem_remote_car_24g_tx_temp + 3 
+45d2 c00245d5 beq car_cmd_l_r_motor_control ,remote_car_moto_data_next 
+45d3 c002c5d5 beq car_cmd_f_b_motor_control ,remote_car_moto_data_next 
+45d4 20600000 rtn 
+
+remote_car_moto_data_next:
+45d5 6800c74a fetch 1 ,mem_remote_car_24g_tx_temp + 6 
+45d6 243a45dc nbranch remote_car_moto_data_enable_user ,blank 
+45d7 6800c74c fetch 1 ,mem_remote_car_24g_tx_temp + 8 
+45d8 243a45dc nbranch remote_car_moto_data_enable_user ,blank 
+45d9 6800c74e fetch 1 ,mem_remote_car_24g_tx_temp + 10 
+45da 243a45dc nbranch remote_car_moto_data_enable_user ,blank 
+45db 20600000 rtn 
+
+remote_car_moto_data_enable_user:
+45dc 78347c00 enable user 
+45dd 202045c7 branch remote_car_g24_package_data_continue 
+
+shutter_init:
+45de 20758000 rtn wake 
+45df 68108081 hfetch 1 ,core_gpio_sel1 
+45e0 1fe17efc and_into 0xfc ,pdata 
+45e1 60108081 hstore 1 ,core_gpio_sel1 
+45e2 580046b4 setarg shutter_le_before_hibernate 
+45e3 600141eb store 2 ,mem_cb_before_hibernate 
+45e4 580046b3 setarg shutter_process_lpm_before 
+45e5 600141ed store 2 ,mem_cb_before_lpm 
+45e6 5800340a setarg app_enter_hibernate 
+45e7 600141f7 store 2 ,mem_cb_discovry_timeout 
+45e8 580046b1 setarg shutter_process_idle 
+45e9 600141f3 store 2 ,mem_cb_idle_process 
+45ea 58004612 setarg shutter_process_bb_event 
+45eb 600141f5 store 2 ,mem_cb_bb_event_process 
+45ec 5800460c setarg shutter_le_scale_lpm_lock 
+45ed 600141e9 store 2 ,mem_cb_check_wakelock 
+45ee 5800476a setarg ble_shutter_receive_data 
+45ef 600141f9 store 2 ,mem_cb_att_write 
+45f0 58004686 setarg shutter_le_bb_event_timer 
+45f1 600141fd store 2 ,mem_cb_event_timer 
+45f2 58004729 setarg shutter_key_change 
+45f3 600146e7 store 2 ,mem_cb_shutter_keycan 
+45f4 58004806 setarg shutter_soft_swtich_power_on 
+45f5 600146e2 store 2 ,mem_shutter_soft_switch_poweron_callback_function 
+45f6 58004807 setarg shutter_soft_swtich_power_off 
+45f7 600146e4 store 2 ,mem_shutter_soft_switch_poweroff_callback_function 
+45f8 204057a3 call le_modified_name 
+45f9 204047da call shutter_load_bluetooth_config_by_user_config 
+45fa 20404788 call shutter_init_bluetooth_config 
+45fb 2040476d call shutter_init_param 
+45fc 20406948 call keyscan_key_init 
+45fd 2040477a call shutter_load_buffer_config_form_datarom 
+45fe 20407e38 call queue_init 
+45ff 20407d08 call ui_led_init_global 
+4600 20404793 call shutter_load_bluetooth_config 
+4601 204047c7 call shutter_load_bluetooth_config_by_eeprom 
+4602 44fac01e bpatch patch1e_5 ,mem_patch1e 
+4603 2040464f call classic_shutter_load_reconn_info 
+4604 6800c6dd fetch 1 ,mem_shutter_hard_soft_switch_case 
+4605 c0004609 beq hard_switch ,shutter_hart_swtich_power_on 
+4606 6800c6de fetch 1 ,mem_shutter_soft_switch_button_gpio 
+4607 6000c686 store 1 ,mem_ui_button_gpio 
+4608 2020480e branch ui_soft_swtich_init 
+
+shutter_hart_swtich_power_on:
+4609 704686ff jam ui_button_gpio_disable ,mem_ui_button_gpio 
+460a 7046df01 jam ss_state_power_on ,mem_shutter_soft_switch_power_state 
+460b 202046d9 branch shutter_start_reconnect 
+
+shutter_le_scale_lpm_lock:
+460c 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 
+460d c00133d0 beq ss_state_power_off ,app_get_lpm_wake_lock 
+460e 2040527e call l2cap_malloc_get_full_map 
+460f 6800c256 fetch 1 ,mem_used_map 
+4610 243a33d0 nbranch app_get_lpm_wake_lock ,blank 
+4611 202033d2 branch app_put_lpm_wake_lock 
+
+shutter_process_bb_event:
+4612 1a627e00 copy regc ,pdata 
+4613 c000c626 beq bt_evt_bb_connected ,classic_shutter_process_baseband_connect 
+4614 c0014629 beq bt_evt_bb_disconnected ,classic_shutter_process_baseband_disconnect 
+4615 c0024631 beq bt_evt_reconn_failed ,classic_shutter_process_reconnect_failed 
+4616 c002c633 beq bt_evt_setup_complete ,classic_shutter_process_setup_complete 
+4617 c0034635 beq bt_evt_hid_connected ,classic_shutter_process_hid_connect 
+4618 c003c638 beq bt_evt_hid_disconnected ,classic_shutter_process_hid_disconnect 
+4619 c009463c beq bt_evt_hid_handshake ,classic_shutter_process_hid_handshake 
+461a c009c644 beq bt_evt_reconn_page_timeout ,classic_shutter_process_reconnect_page_timeout 
+461b c013c645 beq bt_evt_virtual_cable_unplug ,classic_shutter_process_virtual_cable_unplug 
+461c c0174648 beq bt_evt_remote_unsniff ,classic_shutter_process_remote_unsniff 
+461d c01ec649 beq bt_evt_store_nvram ,classic_shutter_process_store_reconnect_information 
+461e c00a4658 beq bt_evt_le_connected ,ble_shutter_process_baseband_connect 
+461f c00ac65c beq bt_evt_le_disconnected ,ble_shutter_process_baseband_disconnect 
+4620 c01fc65f beq bt_evt_le_reconnect_complete ,ble_shutter_process_reconnect_complete 
+4621 c0204665 beq bt_evt_le_parse_conn_papa_update_rsp ,ble_shutter_process_parse_connect_parameter_update_response 
+4622 c008466b beq bt_evt_button_long_pressed ,shutter_process_soft_swtich_button_long_press 
+4623 c016466c beq bt_evt_button_down ,shutter_process_soft_swtich_button_down 
+4624 c016c677 beq bt_evt_button_up ,shutter_process_soft_swtich_button_up 
+4625 20600000 rtn 
+
+classic_shutter_process_baseband_connect:
+4626 7046ad00 jam 0 ,mem_classic_shutter_hid_disconn_count 
+4627 7046ac00 jam 0 ,mem_classic_shutter_cable_unplug_conut 
+4628 20600000 rtn 
+
+classic_shutter_process_baseband_disconnect:
+4629 2040462b call classic_shutter_disconnect_clear_flag 
+462a 20204631 branch classic_shutter_process_reconnect_failed 
+
+classic_shutter_disconnect_clear_flag:
+462b 7041e200 jam app_handshake_null ,mem_app_handshake_flag 
+462c 70468000 jam 0 ,mem_hid_handshake_timer_count 
+462d 70420500 jam 0 ,mem_unsniff2sniff_timer_count 
+462e 7046ac00 jam 0 ,mem_classic_shutter_cable_unplug_conut 
+462f 7046ad00 jam 0 ,mem_classic_shutter_hid_disconn_count 
+4630 20207e38 branch queue_init 
+
+classic_shutter_process_reconnect_failed:
+4631 204033a9 call app_disconn_reason_clear 
+4632 202046c2 branch shutter_start_bluetooth_discovery 
+
+classic_shutter_process_setup_complete:
+4633 204046b6 call shutter_stop_bluetooth_discovery 
+4634 20203408 branch app_led_stop_blink 
+
+classic_shutter_process_hid_connect:
+4635 58000002 setarg hid_handshake_timeout 
+4636 6000c680 store 1 ,mem_hid_handshake_timer_count 
+4637 20600000 rtn 
+
+classic_shutter_process_hid_disconnect:
+4638 7046ac00 jam 0 ,mem_classic_shutter_cable_unplug_conut 
+4639 58000001 setarg flag_shutter_hid_disconn_timeout 
+463a 6000c6ad store 1 ,mem_classic_shutter_hid_disconn_count 
+463b 20600000 rtn 
+
+classic_shutter_process_hid_handshake:
+463c 6800c1e2 fetch 1 ,mem_app_handshake_flag 
+463d c1008000 rtneq app_handshake_done 
+463e 7041e201 jam app_handshake_done ,mem_app_handshake_flag 
+463f 20403416 call app_lpm_mult_enable 
+4640 20403414 call app_store_reconn_info 
+4641 204046b6 call shutter_stop_bluetooth_discovery 
+4642 20403408 call app_led_off 
+4643 2020340e branch app_bt_enter_sniff 
+
+classic_shutter_process_reconnect_page_timeout:
+4644 20204631 branch classic_shutter_process_reconnect_failed 
+
+classic_shutter_process_virtual_cable_unplug:
+4645 58000005 setarg flag_shutter_cable_unplug_timeout 
+4646 6000c6ac store 1 ,mem_classic_shutter_cable_unplug_conut 
+4647 20600000 rtn 
+
+classic_shutter_process_remote_unsniff:
+4648 202033cd branch app_start_auto_sniff 
+
+classic_shutter_process_store_reconnect_information:
+4649 da400000 arg nvram_eeprom_offset ,regb 
+464a 6800c217 fetch 1 ,mem_nv_data_number 
+464b 1fef8422 mul32 pdata ,34 ,temp 
+464c 68014215 fetch 2 ,mem_nv_data_ptr 
+464d 1fe22200 copy pdata ,rega 
+464e 20206606 branch iicd_write_eep_data 
+
+classic_shutter_load_reconn_info:
+464f da400000 arg nvram_eeprom_offset ,regb 
+4650 6800c69a fetch 1 ,mem_shutter_bluetooth_type 
+4651 c4008000 rtnbit0 classic_shutter 
+4652 6800c217 fetch 1 ,mem_nv_data_number 
+4653 207a0000 rtn blank 
+4654 1fef8422 mul32 pdata ,34 ,temp 
+4655 68014215 fetch 2 ,mem_nv_data_ptr 
+4656 1fe22200 copy pdata ,rega 
+4657 202065df branch iicd_read_eep_data 
+
+ble_shutter_process_baseband_connect:
+4658 204046b6 call shutter_stop_bluetooth_discovery 
+4659 58000000 setarg 0 
+465a 600146b7 store 2 ,mem_ble_shutter_reconn_timer 
+465b 20203408 branch app_led_off 
+
+ble_shutter_process_baseband_disconnect:
+465c 20407e38 call queue_init 
+465d 7046b000 jam 0 ,mem_ble_shutter_enable_notify 
+465e 202046d9 branch shutter_start_reconnect 
+
+ble_shutter_process_reconnect_complete:
+465f 20407e38 call queue_init 
+4660 7046b001 jam 1 ,mem_ble_shutter_enable_notify 
+4661 680446c1 fetch 8 ,mem_ble_shutter_interval_min 
+4662 60044496 store 8 ,mem_le_interval_min 
+4663 20403416 call app_lpm_mult_enable 
+4664 20205abf branch le_l2cap_tx_update_req 
+
+ble_shutter_process_parse_connect_parameter_update_response:
+4665 68014509 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 
+4666 c1000000 rtneq ble_signaling_connect_parameter_update_accepted 
+4667 680446c9 fetch 8 ,mem_ble_shutter_interval_min_new 
+4668 207a0000 rtn blank 
+4669 60044496 store 8 ,mem_le_interval_min 
+466a 20205abf branch le_l2cap_tx_update_req 
+
+shutter_process_soft_swtich_button_long_press:
+466b 2020481f branch ui_soft_switch_botton_long_press 
+
+shutter_process_soft_swtich_button_down:
+466c 6800c6dd fetch 1 ,mem_shutter_hard_soft_switch_case 
+466d c1000000 rtneq hard_switch 
+466e 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 
+466f c1808000 rtnne ss_state_power_on 
+4670 20404672 call shutter_store_currenct_led_state 
+4671 20203406 branch app_led_on 
+
+shutter_store_currenct_led_state:
+4672 7048df01 jam 1 ,mem_shutter_soft_swtich_botton_down 
+4673 df20000b arg 11 ,loopcnt 
+4674 d8a048e0 arg mem_shutter_soft_swtich_led_struct_temp ,contw 
+4675 d8c048c9 arg mem_shutter_led_struct_app_led ,contr 
+4676 20207f01 branch memcpy 
+
+shutter_process_soft_swtich_button_up:
+4677 6800c6dd fetch 1 ,mem_shutter_hard_soft_switch_case 
+4678 c1000000 rtneq hard_switch 
+4679 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 
+467a c000c67c beq ss_state_power_on ,shutter_load_currenct_led_state 
+467b 2020481b branch ui_soft_switch_botton_up 
+
+shutter_load_currenct_led_state:
+467c 6800c8df fetch 1 ,mem_shutter_soft_swtich_botton_down 
+467d c1808000 rtnne 1 
+467e 7048df00 jam 0 ,mem_shutter_soft_swtich_botton_down 
+467f 68014682 fetch 2 ,mem_ui_state_map 
+4680 c2803408 bbit1 ui_state_bt_connected ,app_led_off 
+4681 c284b408 bbit1 ui_state_ble_connected ,app_led_off 
+4682 df20000b arg 11 ,loopcnt 
+4683 d8c048e0 arg mem_shutter_soft_swtich_led_struct_temp ,contr 
+4684 d8a048c9 arg mem_shutter_led_struct_app_led ,contw 
+4685 20207f01 branch memcpy 
+
+shutter_le_bb_event_timer:
+4686 2040468c call shutter_check_sleep_timer 
+4687 20404693 call shutter_check_power_off_timer 
+4688 2040469e call classic_shutter_check_unplug_timer 
+4689 204046a6 call classic_shutter_hid_handshake_timer 
+468a 204046a9 call classic_shutter_hid_disconn_timer 
+468b 202046ac branch ble_shutter_reconn_timer 
+
+shutter_check_sleep_timer:
+468c da6046db arg mem_shutter_sleep_timer ,regc 
+468d da40468f arg shutter_sleep_timeout ,regb 
+468e 20203374 branch timer_single_step_2b 
+
+shutter_sleep_timeout:
+468f 7046df02 jam ss_state_power_off ,mem_shutter_soft_switch_power_state 
+4690 20403408 call app_led_off 
+4691 204046f4 call shutter_disconnect_current_connection 
+4692 2020480b branch shutter_wait_power_off 
+
+shutter_check_power_off_timer:
+4693 da6048ec arg mem_shutter_power_off_timer ,regc 
+4694 da404696 arg shutter_check_power_off_timeout ,regb 
+4695 2020336d branch timer_single_step 
+
+shutter_check_power_off_timeout:
+4696 68014682 fetch 2 ,mem_ui_state_map 
+4697 c284c80b bbit1 ui_state_ble_connected ,shutter_wait_power_off 
+4698 c280480b bbit1 ui_state_bt_connected ,shutter_wait_power_off 
+4699 6800c8c9 fetch 1 ,mem_shutter_led_struct_app_led_type 
+469a c000c80b beq ui_led_state_blink_start ,shutter_wait_power_off 
+469b c002480b beq ui_led_state_blink_lighting ,shutter_wait_power_off 
+469c c002c80b beq ui_led_state_blink_darking ,shutter_wait_power_off 
+469d 2020340a branch app_enter_hibernate 
+
+classic_shutter_check_unplug_timer:
+469e da6046ac arg mem_classic_shutter_cable_unplug_conut ,regc 
+469f da4046a1 arg classic_shutter_unplug_timeout ,regb 
+46a0 2020336d branch timer_single_step 
+
+classic_shutter_unplug_timeout:
+46a1 6800827f fetch 1 ,mem_control_tasks 
+46a2 79207e00 set1 l2cap_disconnect_interrupt ,pdata 
+46a3 79207e07 set1 l2cap_disconnect_control ,pdata 
+46a4 6000827f store 1 ,mem_control_tasks 
+46a5 20600000 rtn 
+
+classic_shutter_hid_handshake_timer:
+46a6 da604680 arg mem_hid_handshake_timer_count ,regc 
+46a7 da40463c arg classic_shutter_process_hid_handshake ,regb 
+46a8 2020336d branch timer_single_step 
+
+classic_shutter_hid_disconn_timer:
+46a9 da6046ad arg mem_classic_shutter_hid_disconn_count ,regc 
+46aa da4033e9 arg app_bt_disconnect ,regb 
+46ab 2020336d branch timer_single_step 
+
+ble_shutter_reconn_timer:
+46ac 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 
+46ad c1808000 rtnne ss_state_power_on 
+46ae da6046b7 arg mem_ble_shutter_reconn_timer ,regc 
+46af da4046c2 arg shutter_start_bluetooth_discovery ,regb 
+46b0 20203374 branch timer_single_step_2b 
+
+shutter_process_idle:
+46b1 2040473a call shutter_send_data_to_master 
+46b2 20206978 branch keyscan_key_process 
+
+shutter_process_lpm_before:
+46b3 2020696c branch keyscan_process_lpm_before 
+
+shutter_le_before_hibernate:
+46b4 20406835 call gpio_set_before_lpm_common 
+46b5 202046b3 branch shutter_process_lpm_before 
+
+shutter_stop_bluetooth_discovery:
+46b6 6800c69a fetch 1 ,mem_shutter_bluetooth_type 
+46b7 c280c6be bbit1 classic_shutter ,classic_shutter_stop_bluetooth_discovery 
+46b8 c28046ba bbit1 ble_shutter ,ble_shutter_stop_bluetooth_discovery 
+46b9 20600000 rtn 
+
+ble_shutter_stop_bluetooth_discovery:
+46ba 680146d7 fetch 2 ,mem_ble_shutter_connect_timeout 
+46bb 600146d9 store 2 ,mem_shutter_sleep_timeout 
+46bc 600146db store 2 ,mem_shutter_sleep_timer 
+46bd 202033f8 branch app_ble_stop_adv 
+
+classic_shutter_stop_bluetooth_discovery:
+46be 680146d3 fetch 2 ,mem_classic_shutter_connect_timeout 
+46bf 600146d9 store 2 ,mem_shutter_sleep_timeout 
+46c0 600146db store 2 ,mem_shutter_sleep_timer 
+46c1 202033f0 branch app_bt_stop_discovery 
+
+shutter_start_bluetooth_discovery:
+46c2 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 
+46c3 c1808000 rtnne ss_state_power_on 
+46c4 6800c69a fetch 1 ,mem_shutter_bluetooth_type 
+46c5 c280c6c8 bbit1 classic_shutter ,classic_shutter_start_discovery 
+46c6 c28046cc bbit1 ble_shutter ,ble_shutter_start_discovery 
+46c7 20600000 rtn 
+
+classic_shutter_start_discovery:
+46c8 680146d1 fetch 2 ,mem_classic_shutter_discovery_timeout ,
+46c9 600146d9 store 2 ,mem_shutter_sleep_timeout 
+46ca 600146db store 2 ,mem_shutter_sleep_timer 
+46cb 202033eb branch app_bt_start_discovery_short 
+
+ble_shutter_start_discovery:
+46cc 68014682 fetch 2 ,mem_ui_state_map 
+46cd c3848000 rtnbit1 ui_state_ble_connected 
+46ce 680146d5 fetch 2 ,mem_ble_shutter_discovery_timeout 
+46cf 600146d9 store 2 ,mem_shutter_sleep_timeout 
+46d0 600146db store 2 ,mem_shutter_sleep_timer 
+46d1 680146b3 fetch 2 ,mem_ble_shutter_discovery_adv_interval 
+46d2 204046f0 call shutter_ble_adv_interval_set 
+46d3 20403404 call app_led_start_blink 
+46d4 680246bd fetch 4 ,mem_ble_shutter_discovery_blink_on_time 
+46d5 600248cc store 4 ,mem_shutter_led_struct_app_led_on_time 
+46d6 68014682 fetch 2 ,mem_ui_state_map 
+46d7 c3858000 rtnbit1 ui_state_ble_adv 
+46d8 202033fa branch app_ble_start_adv 
+
+shutter_start_reconnect:
+46d9 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 
+46da c1808000 rtnne ss_state_power_on 
+46db 6800c69a fetch 1 ,mem_shutter_bluetooth_type 
+46dc c280c6df bbit1 classic_shutter ,classic_shutter_start_reconnect 
+46dd c28046e4 bbit1 ble_shutter ,ble_shutter_start_reconnect 
+46de 20600000 rtn 
+
+classic_shutter_start_reconnect:
+46df 204046f8 call app_check_reconn_target 
+46e0 203a46c2 branch shutter_start_bluetooth_discovery ,blank 
+46e1 20403406 call app_led_on 
+46e2 204033f0 call app_bt_stop_discovery 
+46e3 202033e1 branch app_bt_start_reconnect 
+
+ble_shutter_start_reconnect:
+46e4 680146b7 fetch 2 ,mem_ble_shutter_reconn_timer 
+46e5 680946b5 fetcht 2 ,mem_ble_shutter_reconn_timeout 
+46e6 600946b7 storet 2 ,mem_ble_shutter_reconn_timer 
+46e7 247a0000 nrtn blank 
+46e8 680146b1 fetch 2 ,mem_ble_shutter_reconn_dav_interval 
+46e9 204046f0 call shutter_ble_adv_interval_set 
+46ea 20403404 call app_led_start_blink 
+46eb 680246b9 fetch 4 ,mem_ble_shutter_reconn_blink_on_time 
+46ec 600248cc store 4 ,mem_shutter_led_struct_app_led_on_time 
+46ed 68014682 fetch 2 ,mem_ui_state_map 
+46ee c3858000 rtnbit1 ui_state_ble_adv 
+46ef 202033fa branch app_ble_start_adv 
+
+shutter_ble_adv_interval_set:
+46f0 60014154 store 2 ,mem_lpm_interval 
+46f1 1fe0fffc increase -4 ,pdata 
+46f2 60014482 store 2 ,mem_le_adv_interval 
+46f3 20600000 rtn 
+
+shutter_disconnect_current_connection:
+46f4 68014682 fetch 2 ,mem_ui_state_map 
+46f5 c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect 
+46f6 c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect 
+46f7 202046b6 branch shutter_stop_bluetooth_discovery 
+
+app_check_reconn_target:
+46f8 6800c217 fetch 1 ,mem_nv_data_number 
+46f9 1fe27200 copy pdata ,loopcnt 
+46fa 68014215 fetch 2 ,mem_nv_data_ptr 
+46fb 1fe22200 copy pdata ,rega 
+
+app_check_reconn_target_loop:
+46fc ea210000 ifetch 2 ,rega 
+46fd c0004701 beq 0 ,found_reconn_device 
+46fe 1a20a222 increase nv_data_len ,rega 
+46ff c20046fc loop app_check_reconn_target_loop 
+4700 20207ff1 branch enable_blank 
+
+found_reconn_device:
+4701 e8c30000 ifetch 6 ,contr 
+4702 600341d0 store 6 ,mem_hci_plap 
+4703 18c08c0a increase 10 ,contr 
+4704 d8a041be arg mem_link_key ,contw 
+4705 20407ebf call memcpy16 
+4706 204067d7 call check_link_key_load 
+4707 20207fef branch disable_blank 
+
+shutter_check_data_enable:
+4708 20407fe9 call disable_user 
+4709 68014682 fetch 2 ,mem_ui_state_map 
+470a c280470d bbit1 ui_state_bt_connected ,shutter_check_bt_data_enable 
+470b c284c710 bbit1 ui_state_ble_connected ,shutter_check_ble_data_enable 
+470c 20600000 rtn 
+
+shutter_check_bt_data_enable:
+470d 6800c253 fetch 1 ,mem_hid_interrupt_state 
+470e c19f8000 rtnne 0x3f 
+470f 20207fe7 branch enable_user 
+
+shutter_check_ble_data_enable:
+4710 6800c6b0 fetch 1 ,mem_ble_shutter_enable_notify 
+4711 207a0000 rtn blank 
+4712 20207fe7 branch enable_user 
+
+shutter_check_bluetooth_conn:
+4713 20407fe9 call disable_user 
+4714 68014682 fetch 2 ,mem_ui_state_map 
+4715 c3800000 rtnbit1 ui_state_bt_connected 
+4716 c3848000 rtnbit1 ui_state_ble_connected 
+4717 20207fe7 branch enable_user 
+
+shutter_change_bluetooth_status_bt_disconn:
+4718 6800c69a fetch 1 ,mem_shutter_bluetooth_type 
+4719 c280c71c bbit1 classic_shutter ,classic_shutter_change_bluetooth_status_bt_disconn 
+471a c280471f bbit1 ble_shutter ,ble_shutter_change_bluetooth_status_bt_disconn 
+471b 20600000 rtn 
+
+classic_shutter_change_bluetooth_status_bt_disconn:
+471c 6800c093 fetch 1 ,mem_scan_mode 
+471d c1818000 rtnne 0x03 
+471e 202046d9 branch shutter_start_reconnect 
+
+ble_shutter_change_bluetooth_status_bt_disconn:
+471f 202046d9 branch shutter_start_reconnect 
+
+shutter_check_send_data:
+4720 78567c00 disable user2 
+4721 680146d9 fetch 2 ,mem_shutter_sleep_timeout 
+4722 600146db store 2 ,mem_shutter_sleep_timer 
+4723 20404713 call shutter_check_bluetooth_conn 
+4724 20344718 branch shutter_change_bluetooth_status_bt_disconn ,user 
+4725 20404708 call shutter_check_data_enable 
+4726 24740000 nrtn user 
+4727 78367c00 enable user2 
+4728 20600000 rtn 
+
+shutter_key_change:
+4729 20404720 call shutter_check_send_data 
+472a 24760000 nrtn user2 
+472b 1a227e00 deposit rega 
+472c 203a4730 branch shutter_key_release ,blank 
+
+shutter_key_press:
+472d 20403406 call app_led_on 
+472e da6046f1 arg mem_key0_press ,regc 
+472f 20204732 branch push_queue_press_or_release 
+
+shutter_key_release:
+4730 20403408 call app_led_off 
+4731 da604719 arg mem_key0_release ,regc 
+
+push_queue_press_or_release:
+4732 dfe00005 arg max_queue_num ,pdata 
+4733 98effe00 imul32 queue ,pdata 
+4734 9a60a600 iadd regc ,regc 
+
+push_buffer_in_queue:
+4735 ea608000 ifetch 1 ,regc 
+4736 207a0000 rtn blank 
+4737 20404762 call queue_push_one_byte 
+4738 1a60a601 increase 1 ,regc 
+4739 20204735 branch push_buffer_in_queue 
+
+shutter_send_data_to_master:
+473a 68014682 fetch 2 ,mem_ui_state_map 
+473b c284c73e bbit1 ui_state_ble_connected ,pop_queue_to_ble_data 
+473c c280474e bbit1 ui_state_bt_connected ,pop_queue_to_classic_data 
+473d 20600000 rtn 
+
+pop_queue_to_ble_data:
+473e 20405892 call le_fifo_check_nearly_full 
+473f 247a0000 nrtn blank 
+4740 20404765 call queue_pop_one_byte 
+4741 24740000 nrtn user 
+4742 1fe0ffff pincrease -1 
+4743 1feffe05 mul32 pdata ,shutter_ble_data_buffer ,pdata 
+4744 d8404741 arg mem_ble_data_buffer1 ,temp 
+4745 98408c00 iadd temp ,contr 
+
+le_send_notify_from_list:
+4746 e8c08000 ifetch 1 ,contr 
+4747 1fe22200 copy pdata ,rega 
+4748 e8c90000 ifetcht 2 ,contr 
+4749 20407ea5 call store_contr 
+474a 20405a64 call le_att_malloc_tx_notify 
+474b 1a227200 copy rega ,loopcnt 
+474c 20407e9f call get_contr 
+474d 20207f01 branch memcpy 
+
+pop_queue_to_classic_data:
+474e 20405271 call l2cap_malloc_is_fifo_nearly_full 
+474f 247a0000 nrtn blank 
+4750 20404765 call queue_pop_one_byte 
+4751 24740000 nrtn user 
+4752 1fe0ffff pincrease -1 
+4753 1feffe05 mul32 pdata ,shutter_classic_data_buffer ,pdata 
+4754 d84047a0 arg mem_classic_data_buffer1 ,temp 
+4755 98408c00 iadd temp ,contr 
+4756 e8c28000 ifetch 5 ,contr 
+4757 6002c79b store 5 ,mem_classic_data_buffer 
+
+classic_send_hid_data:
+4758 6800c79b fetch 1 ,mem_classic_data_buffer 
+4759 1fe22200 copy pdata ,rega 
+475a 20404d63 call hid_malloc_tx_buff 
+475b 6801424e fetch 2 ,mem_hid_int_remote_cid 
+475c e0a10000 istore 2 ,contw 
+475d 580000a1 setarg 0xa1 
+475e e0a08000 istore 1 ,contw 
+475f 6802479c fetch 4 ,mem_classic_data_buffer + 1 
+4760 e0a48000 istore 9 ,contw 
+4761 20600000 rtn 
+
+queue_push_one_byte:
+4762 60008a9a store 1 ,mem_pdatatemp 
+4763 da200a9a arg mem_pdatatemp ,rega 
+4764 20207e3d branch queue_push 
+
+queue_pop_one_byte:
+4765 da200a9a arg mem_pdatatemp ,rega 
+4766 20407e54 call queue_pop 
+4767 24740000 nrtn user 
+4768 68008a9a fetch 1 ,mem_pdatatemp 
+4769 20600000 rtn 
+
+ble_shutter_receive_data:
+476a 68010478 fetch 2 ,mem_le_att_handle 
+476b c00c465f beq gatt_keyboard_write_handle ,ble_shutter_process_reconnect_complete 
+476c 20600000 rtn 
+
+shutter_init_param:
+476d 58000002 setarg 0x02 
+476e 6000c8eb store 1 ,mem_shutter_power_off_timeout 
+476f 58200008 setarg 0x00200008 
+4770 600246c1 store 4 ,mem_ble_shutter_interval_min 
+4771 592c0005 setarg 0x012c0005 
+4772 e0a20000 istore 4 ,contw 
+4773 7044a617 jam 0x17 ,mem_le_local_mtu 
+4774 5800001b setarg 0x1b 
+4775 600144fa store 2 ,mem_le_pairing_handle 
+4776 20405810 call le_set_config_fixed_ltk 
+4777 2040582c call le_set_fixed_ltk 
+4778 20405839 call le_set_justwork 
+4779 20205818 branch le_set_config_read_authentication 
+
+shutter_load_buffer_config_form_datarom:
+477a df200028 arg ble_key_value_list_size ,loopcnt 
+477b d8a04741 arg mem_ble_data_buffer1 ,contw 
+477c d8c0949f arg ble_shutter_key_value_list ,contr 
+477d 20407ef4 call memcpy_fast 
+477e df200028 arg bt_key_value_list_size ,loopcnt 
+477f d8a047a0 arg mem_classic_data_buffer1 ,contw 
+4780 d8c094c7 arg classic_shutter_key_value_list ,contr 
+4781 20207ef4 branch memcpy_fast 
+
+shutter_load_ble_gatt_form_datarom:
+4782 df20017e arg ble_gatt_list_size ,loopcnt 
+4783 d8c0913a arg ble_shutter_gatt_list ,contr 
+4784 20207ef4 branch memcpy_fast 
+
+shutter_load_bt_sdp_form_datarom:
+4785 df2001e7 arg bt_sdp_list_size ,loopcnt 
+4786 d8c092b8 arg classic_shutter_sdp_list ,contr 
+4787 20207ef4 branch memcpy_fast 
+
+shutter_init_bluetooth_config:
+4788 204047ae call shutter_check_load_config_flag 
+4789 24740000 nrtn user 
+478a 6800c69f fetch 1 ,mem_shutter_config_select_gpio1 
+478b 20404790 call shutter_init_bluetooth_config_gpio_input 
+478c 6800c6a0 fetch 1 ,mem_shutter_config_select_gpio2 
+478d 20404790 call shutter_init_bluetooth_config_gpio_input 
+478e 6800c6a1 fetch 1 ,mem_shutter_config_select_gpio3 
+478f 20204790 branch shutter_init_bluetooth_config_gpio_input 
+
+shutter_init_bluetooth_config_gpio_input:
+4790 207a0000 rtn blank 
+4791 1fe18480 or pdata ,0x80 ,temp 
+4792 202067f9 branch gpio_config_input_nowake 
+
+shutter_load_bluetooth_config:
+4793 204047ae call shutter_check_load_config_flag 
+4794 24740000 nrtn user 
+4795 20404797 call shutter_load_bluetooth_config_label 
+4796 202047b4 branch shutter_load_bluetooth_config_by_otp 
+
+shutter_load_bluetooth_config_label:
+4797 da200000 arg 0 ,rega 
+4798 6800c69f fetch 1 ,mem_shutter_config_select_gpio1 
+4799 204047a9 call shutter_load_bluetooth_config_read_gpio_input 
+479a 7d3a2200 nsetflag blank ,0 ,rega 
+479b 6800c6a0 fetch 1 ,mem_shutter_config_select_gpio2 
+479c 204047a9 call shutter_load_bluetooth_config_read_gpio_input 
+479d 7d3a2201 nsetflag blank ,1 ,rega 
+479e 6800c6a1 fetch 1 ,mem_shutter_config_select_gpio3 
+479f 204047a9 call shutter_load_bluetooth_config_read_gpio_input 
+47a0 7d3a2202 nsetflag blank ,2 ,rega 
+47a1 1a227e00 copy rega ,pdata 
+47a2 6000c6a9 store 1 ,mem_shutter_config_label 
+47a3 6800c69e fetch 1 ,mem_shutter_config_size 
+47a4 9a2ffe00 imul32 rega ,pdata 
+47a5 6809469c fetcht 2 ,mem_shutter_config_otp_base_address 
+47a6 9840fe00 iadd temp ,pdata 
+47a7 600146aa store 2 ,mem_shutter_config_otp_addr 
+47a8 20600000 rtn 
+
+shutter_load_bluetooth_config_read_gpio_input:
+47a9 207a0000 rtn blank 
+47aa 1fe18480 or pdata ,0x80 ,temp 
+47ab 2040681d call gpio_get_bit 
+47ac 2420fff1 nbranch enable_blank ,true 
+47ad 20207fef branch disable_blank 
+
+shutter_check_load_config_flag:
+47ae 20407fe9 call disable_user 
+47af 6800c6a8 fetch 1 ,mem_shutter_config_user_size 
+47b0 247a0000 nrtn blank 
+47b1 6800c69b fetch 1 ,mem_shutter_config_enable 
+47b2 207a0000 rtn blank 
+47b3 20207fe7 branch enable_user 
+
+shutter_load_bluetooth_config_by_otp:
+47b4 2040666a call otp_enable_chgpump 
+47b5 680146aa fetch 2 ,mem_shutter_config_otp_addr 
+47b6 da200ac2 arg mem_shutter_config_data_temp ,rega 
+47b7 6808c69e fetcht 1 ,mem_shutter_config_size 
+47b8 204066b3 call otpd_read_data 
+47b9 2040666d call otp_disable_chgpump 
+
+shutter_load_bluetooth_config_store_name:
+47ba 68008ac2 fetch 1 ,mem_shutter_config_data_temp 
+47bb 1fe27200 copy pdata ,loopcnt 
+47bc 6000c3af store 1 ,mem_le_name_len 
+47bd 20407ef4 call memcpy_fast 
+47be 68008ac2 fetch 1 ,mem_shutter_config_data_temp 
+47bf 1fe27200 copy pdata ,loopcnt 
+47c0 6000c515 store 1 ,mem_local_name_length 
+47c1 20407ef4 call memcpy_fast 
+47c2 e8c08000 ifetch 1 ,contr 
+47c3 6000c6e6 store 1 ,mem_shutter_key_num 
+47c4 e8c08000 ifetch 1 ,contr 
+47c5 6000c6dd store 1 ,mem_shutter_hard_soft_switch_case 
+47c6 20600000 rtn 
+
+shutter_load_bluetooth_config_by_eeprom:
+47c7 6800c69a fetch 1 ,mem_shutter_bluetooth_type 
+47c8 c4008000 rtnbit0 classic_shutter 
+47c9 d8400003 arg 3 ,temp 
+47ca 680146a4 fetch 2 ,mem_shutter_config_eeprom_offset_addr 
+47cb 1fe22400 copy pdata ,regb 
+47cc da2046a6 arg mem_shutter_config_eeprom_start_flag ,rega 
+47cd 204065df call iicd_read_eep_data 
+47ce 680946a6 fetcht 2 ,mem_shutter_config_eeprom_start_flag 
+47cf 58001b3a setarg shutter_eeprom_config_crc 
+47d0 98467c00 isub temp ,null 
+47d1 24628000 nrtn zero 
+47d2 6800c6a8 fetch 1 ,mem_shutter_config_user_size 
+47d3 207a0000 rtn blank 
+47d4 1fe20400 copy pdata ,temp 
+47d5 680146a4 fetch 2 ,mem_shutter_config_eeprom_offset_addr 
+47d6 1fe0a403 add pdata ,3 ,regb 
+47d7 da200ac2 arg mem_shutter_config_data_temp ,rega 
+47d8 204065df call iicd_read_eep_data 
+47d9 202047e8 branch shutter_store_config 
+
+shutter_load_bluetooth_config_by_user_config:
+47da 680146a2 fetch 2 ,mem_shutter_config_user_otp_address 
+47db 207a0000 rtn blank 
+47dc 2040666a call otp_enable_chgpump 
+47dd d8400001 arg 1 ,temp 
+47de da2046a8 arg mem_shutter_config_user_size ,rega 
+47df 204066b3 call otpd_read_data 
+47e0 6800c6a8 fetch 1 ,mem_shutter_config_user_size 
+47e1 207a0000 rtn blank 
+47e2 680146a2 fetch 2 ,mem_shutter_config_user_otp_address 
+47e3 1fe0fe01 pincrease 1 
+47e4 da200ac2 arg mem_shutter_config_data_temp ,rega 
+47e5 6808c6a8 fetcht 1 ,mem_shutter_config_user_size 
+47e6 204066b3 call otpd_read_data 
+47e7 2040666d call otp_disable_chgpump 
+
+shutter_store_config:
+47e8 204047ba call shutter_load_bluetooth_config_store_name 
+
+shutter_load_bluetooth_config_custom:
+47e9 e8c10000 ifetch 2 ,contr 
+47ea 207a0000 rtn blank 
+47eb 1fe20a00 copy pdata ,contw 
+47ec e8c88000 ifetcht 1 ,contr 
+47ed 18427200 copy temp ,loopcnt 
+47ee 20407f01 call memcpy 
+47ef 202047e9 branch shutter_load_bluetooth_config_custom 
+
+shutter_random_mac_addr:
+47f0 6800c69a fetch 1 ,mem_shutter_bluetooth_type 
+47f1 c4008000 rtnbit0 classic_shutter 
+47f2 680146ae fetch 2 ,mem_classic_shutter_random_mac_offset_addr 
+47f3 1fe22400 copy pdata ,regb 
+47f4 d8400004 arg 4 ,temp 
+47f5 da200ac2 arg mem_shutter_random_mac_data_temp ,rega 
+47f6 204065df call iicd_read_eep_data 
+47f7 68008ac2 fetch 1 ,mem_shutter_random_mac_data_temp 
+47f8 c080c7f9 bne 1 ,shutter_write_random_mac_addr_to_eeprom 
+
+shutter_write_random_mac_addr_to_eeprom:
+47f9 58000001 setarg 1 
+47fa 60008ac2 store 1 ,mem_shutter_random_mac_data_temp 
+47fb 18007203 force 3 ,loopcnt 
+47fc 2040630d call generate_random_loop 
+47fd 680146ae fetch 2 ,mem_classic_shutter_random_mac_offset_addr 
+47fe 1fe22400 copy pdata ,regb 
+47ff d8400004 arg 4 ,temp 
+4800 da200ac2 arg mem_shutter_random_mac_data_temp ,rega 
+4801 20406606 call iicd_write_eep_data 
+
+shutter_write_random_mac_addr:
+4802 68018ac3 fetch 3 ,mem_shutter_random_mac_data_temp + 1 
+4803 6001c0a0 store 3 ,mem_lap 
+4804 6001c4a0 store 3 ,mem_le_lap 
+4805 20600000 rtn 
+
+shutter_soft_swtich_power_on:
+4806 202046d9 branch shutter_start_reconnect 
+
+shutter_soft_swtich_power_off:
+4807 da200000 arg 0 ,rega 
+4808 da6048d4 arg mem_shutter_power_off_led_style ,regc 
+4809 20407d24 call ui_led_set_style_global 
+480a 204046f4 call shutter_disconnect_current_connection 
+
+shutter_wait_power_off:
+480b 6800c8eb fetch 1 ,mem_shutter_power_off_timeout 
+480c 6000c8ec store 1 ,mem_shutter_power_off_timer 
+480d 20600000 rtn 
+
+ui_soft_swtich_init:
+480e 58000000 setarg ss_state_power_up 
+480f 20404816 call ui_soft_swtich_init_power_on_time 
+4810 70467901 jam ui_button_state_up ,mem_ui_button_last_state 
+4811 20407cd3 call ui_button_init 
+4812 20407cdd call ui_button_polling 
+4813 68014682 fetch 2 ,mem_ui_state_map 
+4814 c3860000 rtnbit1 ui_state_btn_down 
+4815 2020340a branch app_enter_hibernate 
+
+ui_soft_swtich_init_power_on_time:
+4816 6809423f fetcht 2 ,mem_power_param_ptr 
+4817 e0408000 istore 1 ,temp 
+4818 e8a08000 ifetch 1 ,contw 
+4819 6000c685 store 1 ,mem_ui_button_timeout 
+481a 20600000 rtn 
+
+ui_soft_switch_botton_up:
+481b 6801423f fetch 2 ,mem_power_param_ptr 
+481c efe08000 ifetch 1 ,pdata 
+481d c1800000 rtnne ss_state_power_up 
+481e 2020340a branch app_enter_hibernate 
+
+ui_soft_switch_botton_long_press:
+481f 6809423f fetcht 2 ,mem_power_param_ptr 
+4820 e8408000 ifetch 1 ,temp 
+4821 c000c82a beq ss_state_power_on ,ui_soft_switch_power_off 
+
+ui_soft_switch_power_on:
+4822 58000001 setarg ss_state_power_on 
+4823 6809423f fetcht 2 ,mem_power_param_ptr 
+4824 e0408000 istore 1 ,temp 
+4825 18408c02 add temp ,ss_power_off_time ,contr 
+4826 e8c08000 ifetch 1 ,contr 
+4827 e0a08000 istore 1 ,mem_ui_button_timeout 
+4828 e8c10000 ifetch 2 ,contr 
+4829 20207f9c branch callback_func 
+
+ui_soft_switch_power_off:
+482a 58000002 setarg ss_state_power_off 
+482b 20404816 call ui_soft_swtich_init_power_on_time 
+482c 18408c05 add temp ,ss_power_off_cb ,contr 
+482d e8c10000 ifetch 2 ,contr 
+482e 203a340a branch app_enter_hibernate ,blank 
+482f 20207f9c branch callback_func 
+
+shutter_byteswap:
+4830 60030101 store 6 ,mem_tmp_buffer 
+4831 68008101 fetch 1 ,mem_tmp_buffer 
+4832 6000810c store 1 ,mem_tmp_buffer + 11 
+4833 e8c08000 ifetch 1 ,contr 
+4834 6000810b store 1 ,mem_tmp_buffer + 10 
+4835 e8c08000 ifetch 1 ,contr 
+4836 6000810a store 1 ,mem_tmp_buffer + 9 
+4837 e8c08000 ifetch 1 ,contr 
+4838 60008109 store 1 ,mem_tmp_buffer + 8 
+4839 e8c08000 ifetch 1 ,contr 
+483a 60008108 store 1 ,mem_tmp_buffer + 7 
+483b e8c08000 ifetch 1 ,contr 
+483c 60008107 store 1 ,mem_tmp_buffer + 6 
+483d 68030107 fetch 6 ,mem_tmp_buffer + 6 
+483e 20600000 rtn 
+
+shutter_random_addr_by_otp:
+483f 204068a2 call load_adc_init 
+4840 6800c223 fetch 1 ,mem_1v_adc_io_data 
+4841 6000c4a0 store 1 ,mem_le_lap 
+4842 6800c225 fetch 1 ,mem_5v_adc_hvin_data 
+4843 e0a08000 istore 1 ,contw 
+4844 6800c227 fetch 1 ,mem_3v_adc_vinlpm_data 
+4845 e0a08000 istore 1 ,contw 
+4846 6801c4a0 fetch 3 ,mem_le_lap 
+4847 6001c0a0 store 3 ,mem_lap 
+4848 20600000 rtn 
+
+sim_iic_read_eep_data:
+4849 68014203 fetch 2 ,mem_eeprom_base 
+484a 9a40fe00 iadd regb ,pdata 
+484b 1ff0fe00 byteswap pdata ,pdata 
+484c 600101f7 store 2 ,mem_addr_mi 
+484d 18422400 copy temp ,regb 
+484e 2040489b call sim_iic_start 
+484f 580000a0 setarg 0xa0 
+4850 2040488d call sim_iic_send_byte 
+4851 680081f7 fetch 1 ,mem_addr_mi 
+4852 2040488d call sim_iic_send_byte 
+4853 c5144856 bmark1 mark_eeprom_size ,sim_iic_read_eep_data_2k 
+4854 680081f8 fetch 1 ,mem_addr_mi + 1 
+4855 2040488d call sim_iic_send_byte 
+
+sim_iic_read_eep_data_2k:
+4856 204048a1 call sim_iic_stop 
+4857 2040489b call sim_iic_start 
+4858 580000a1 setarg 0xa1 
+4859 2040488d call sim_iic_send_byte 
+
+sim_iic_read_eep_data_loop:
+485a 2040487f call sim_iic_read_byte 
+485b e2208000 istore 1 ,rega 
+485c 1a20a201 increase 1 ,rega 
+485d 1a40a5ff increase -1 ,regb 
+485e 2422c85a nbranch sim_iic_read_eep_data_loop ,zero 
+485f 202048a1 branch sim_iic_stop 
+
+sim_iic_write_eep_data:
+4860 1a50fe00 byteswap regb ,pdata 
+4861 600101f7 store 2 ,mem_addr_mi 
+4862 18422400 copy temp ,regb 
+4863 2040489b call sim_iic_start 
+4864 580000a0 setarg 0xa0 
+4865 2040488d call sim_iic_send_byte 
+4866 680081f7 fetch 1 ,mem_addr_mi 
+4867 2040488d call sim_iic_send_byte 
+4868 c514486b bmark1 mark_eeprom_size ,sim_iic_write_eep_data_loop 
+4869 680081f8 fetch 1 ,mem_addr_mi + 1 
+486a 2040488d call sim_iic_send_byte 
+
+sim_iic_write_eep_data_loop:
+486b ea208000 ifetch 1 ,rega 
+486c 2040488d call sim_iic_send_byte 
+486d 1a20a201 increase 1 ,rega 
+486e 1a40a5ff increase -1 ,regb 
+486f 2422c86b nbranch sim_iic_write_eep_data_loop ,zero 
+4870 202048a1 branch sim_iic_stop 
+
+sim_iic_wait_ack:
+4871 df20000a arg 10 ,loopcnt 
+4872 204048be call sim_iic_release_sda 
+4873 204048a6 call sim_iic_scl_output_high 
+4874 204048d2 call sim_iic_delay 
+
+sim_iic_wait_ack_loop:
+4875 204048c7 call sim_iic_read_sda_level 
+4876 203a48a9 branch sim_iic_scl_output_low ,blank 
+4877 c2004875 loop sim_iic_wait_ack_loop 
+4878 202048a9 branch sim_iic_scl_output_low 
+
+sim_iic_ack_slave:
+4879 204048a9 call sim_iic_scl_output_low 
+487a 204048af call sim_iic_sda_output_low 
+487b 204048d2 call sim_iic_delay 
+487c 204048a6 call sim_iic_scl_output_high 
+487d 204048d2 call sim_iic_delay 
+487e 202048a9 branch sim_iic_scl_output_low 
+
+sim_iic_read_byte:
+487f df200008 arg 8 ,loopcnt 
+4880 da600000 arg 0 ,regc 
+4881 204048be call sim_iic_release_sda 
+
+sim_iic_read_byte_loop:
+4882 204048a6 call sim_iic_scl_output_high 
+4883 204048d2 call sim_iic_delay 
+4884 1a63a600 lshift regc ,regc 
+4885 204048c7 call sim_iic_read_sda_level 
+4886 9a60a600 iadd regc ,regc 
+4887 204048d2 call sim_iic_delay 
+4888 204048a9 call sim_iic_scl_output_low 
+4889 c2004882 loop sim_iic_read_byte_loop 
+488a 20404879 call sim_iic_ack_slave 
+488b 1a627e00 copy regc ,pdata 
+488c 20600000 rtn 
+
+sim_iic_send_byte:
+488d df200008 arg 8 ,loopcnt 
+488e 1fe22600 copy pdata ,regc 
+488f 204048a9 call sim_iic_scl_output_low 
+
+sim_iic_send_byte_loop:
+4890 2a6ffe07 isolate1 7 ,regc 
+4891 2040c8ac call sim_iic_sda_output_high ,true 
+4892 2440c8af ncall sim_iic_sda_output_low ,true 
+4893 1a63a600 lshift regc ,regc 
+4894 204048d2 call sim_iic_delay 
+4895 204048a6 call sim_iic_scl_output_high 
+4896 204048d2 call sim_iic_delay 
+4897 204048a9 call sim_iic_scl_output_low 
+4898 204048d2 call sim_iic_delay 
+4899 c2004890 loop sim_iic_send_byte_loop 
+489a 20204871 branch sim_iic_wait_ack 
+
+sim_iic_start:
+489b 204048ac call sim_iic_sda_output_high 
+489c 204048a6 call sim_iic_scl_output_high 
+489d 204048d2 call sim_iic_delay 
+489e 204048af call sim_iic_sda_output_low 
+489f 204048d2 call sim_iic_delay 
+48a0 202048a9 branch sim_iic_scl_output_low 
+
+sim_iic_stop:
+48a1 204048af call sim_iic_sda_output_low 
+48a2 204048a6 call sim_iic_scl_output_high 
+48a3 204048d2 call sim_iic_delay 
+48a4 204048ac call sim_iic_sda_output_high 
+48a5 202048d2 branch sim_iic_delay 
+
+sim_iic_scl_output_high:
+48a6 78347c00 enable user 
+48a7 6800cffe fetch 1 ,sim_iic_scl_gpio_num 
+48a8 202048b2 branch sim_iic_config_gpio 
+
+sim_iic_scl_output_low:
+48a9 78547c00 disable user 
+48aa 6800cffe fetch 1 ,sim_iic_scl_gpio_num 
+48ab 202048b2 branch sim_iic_config_gpio 
+
+sim_iic_sda_output_high:
+48ac 78347c00 enable user 
+48ad 6800cfff fetch 1 ,sim_iic_sda_gpio_num 
+48ae 202048b2 branch sim_iic_config_gpio 
+
+sim_iic_sda_output_low:
+48af 78547c00 disable user 
+48b0 6800cfff fetch 1 ,sim_iic_sda_gpio_num 
+48b1 202048b2 branch sim_iic_config_gpio 
+
+sim_iic_config_gpio:
+48b2 1fe10e07 and pdata ,0x07 ,queue 
+48b3 1fe97e00 rshift3 pdata ,pdata 
+48b4 d8408070 arg core_gpio_oe0 ,temp 
+48b5 98408400 iadd temp ,temp 
+48b6 e8408000 ifetch 1 ,temp 
+48b7 f9207e00 qset1 pdata 
+48b8 e0408000 istore 1 ,temp 
+48b9 18408404 increase 4 ,temp 
+48ba e8408000 ifetch 1 ,temp 
+48bb f9347e00 qsetflag user ,pdata 
+48bc e0408000 istore 1 ,temp 
+48bd 20600000 rtn 
+
+sim_iic_release_sda:
+48be 6800cfff fetch 1 ,sim_iic_sda_gpio_num 
+48bf 1fe10e07 and pdata ,0x07 ,queue 
+48c0 1fe97e00 rshift3 pdata ,pdata 
+48c1 d8408070 arg core_gpio_oe0 ,temp 
+48c2 98408400 iadd temp ,temp 
+48c3 e8408000 ifetch 1 ,temp 
+48c4 f93ffe00 qset0 pdata 
+48c5 e0408000 istore 1 ,temp 
+48c6 20600000 rtn 
+
+sim_iic_read_sda_level:
+48c7 20000004 nop 4 
+48c8 6800cfff fetch 1 ,sim_iic_sda_gpio_num 
+48c9 1fe10e07 and pdata ,0x07 ,queue 
+48ca 1fe97e00 rshift3 pdata ,pdata 
+48cb d840811c arg core_gpio_in ,temp 
+48cc 98408400 iadd temp ,temp 
+48cd 58000000 setarg 0 
+48ce e8488000 ifetcht 1 ,temp 
+48cf a84fffff qisolate1 temp 
+48d0 7920fe00 setflag true ,0 ,pdata 
+48d1 20600000 rtn 
+
+sim_iic_delay:
+48d2 20600000 rtn 
+
+usb_isr:
+48d3 44fb401e bpatch patch1e_6 ,mem_patch1e 
+48d4 68108a26 hfetch 1 ,core_usb_status 
+48d5 2feffe07 isolate1 7 ,pdata 
+48d6 2040c8ea call usb_init ,true 
+48d7 2040492e call usb_nak_state_judge 
+48d8 68108a26 hfetch 1 ,core_usb_status 
+48d9 60008b22 store 1 ,mem_usb_status 
+48da 68108a27 hfetch 1 ,core_usb_fifo_empty 
+48db 60008b23 store 1 ,mem_usb_fifo_empty 
+48dc 60108a27 hstore 1 ,core_usb_fifo_empty 
+48dd 1fe47e00 pinvert 
+48de 68088d37 fetcht 1 ,mem_usb_tx_wait 
+48df 98417e00 iand temp ,pdata 
+48e0 60008d37 store 1 ,mem_usb_tx_wait 
+48e1 708a26e0 jam 0xe0 ,core_usb_status 
+48e2 68008b23 fetch 1 ,mem_usb_fifo_empty 
+48e3 2fe00201 compare 0x1 ,pdata ,0x1 
+48e4 2040c941 call usb0_fifo_empty ,true 
+48e5 68008b22 fetch 1 ,mem_usb_status 
+48e6 2fe00201 compare 0x1 ,pdata ,0x1 
+48e7 2040c94a call usb_status1 ,true 
+48e8 20404b61 call usb_tx 
+48e9 20204903 branch usb_nak_state 
+
+usb_init:
+48ea 44fbc01e bpatch patch1e_7 ,mem_patch1e 
+48eb 20404919 call usb_init_param 
+48ec 708a0000 jam 0x00 ,core_usb_config 
+48ed 20002710 nop 10000 
+48ee 708a10c0 jam 0xc0 ,core_usb_trig 
+48ef 68110050 hfetch 2 ,core_clkoff 
+48f0 793ffe0a set0 clock_off_usb ,pdata 
+48f1 60110050 hstore 2 ,core_clkoff 
+48f2 708a003c jam 0x3c ,core_usb_config 
+48f3 708a26ff jam 0xff ,core_usb_status 
+48f4 708a27ff jam 0xff ,core_usb_fifo_empty 
+48f5 708a0400 jam 0 ,core_usb_addr 
+48f6 700c6b02 jam dev_default ,mem_usb0_state 
+48f7 58000d9d setarg mem_usb_clear_mem_end 
+48f8 d8a00c6e arg mem_usb_clear_mem_start ,contw 
+48f9 98a67200 isub contw ,loopcnt 
+48fa 20207ed4 branch clear_mem 
+
+usb_offline_check_init:
+48fb 68088c6c fetcht 1 ,mem_usb_offline_check_gpio 
+48fc 202067fb branch gpio_config_input 
+
+usb_offline_state:
+48fd 68008d45 fetch 1 ,mem_usb_device_enumeration_endflag 
+48fe 207a0000 rtn blank 
+48ff 68088c6c fetcht 1 ,mem_usb_offline_check_gpio 
+4900 2040681d call gpio_get_bit 
+4901 2020c8ea branch usb_init ,true 
+4902 20600000 rtn 
+
+usb_nak_state:
+4903 d8e00000 arg timer_nak ,queue 
+4904 20407f16 call timer_check 
+4905 247a0000 nrtn blank 
+4906 68008d46 fetch 1 ,mem_usb_wakestate_onetime_flag 
+4907 247a0000 nrtn blank 
+4908 68008d45 fetch 1 ,mem_usb_device_enumeration_endflag 
+4909 245a4bb7 ncall usb_mac_wakeup_judge ,blank 
+490a 20600000 rtn 
+
+usb_mem_devicedesc_init:
+490b d8a00b68 arg mem_devicedesc ,contw 
+490c 38011212 setsect 0 ,0x11212 
+490d 38048000 setsect 1 ,0x8000 
+490e 38080000 setsect 2 ,0x0 
+490f 380d0000 setsect 3 ,0x10000 
+4910 e0a48000 istore 9 ,contw 
+4911 38022412 setsect 0 ,0x22412 
+4912 38048604 setsect 1 ,0x8604 
+4913 38081000 setsect 2 ,0x1000 
+4914 380c0008 setsect 3 ,0x8 
+4915 e0a48000 istore 9 ,contw 
+4916 38000001 setsect 0 ,0x1 
+4917 e0a08000 istore 1 ,contw 
+4918 20600000 rtn 
+
+usb_init_param:
+4919 700c6b02 jam 2 ,mem_usb0_state 
+491a 58000000 setarg 0x0 
+491b 60008b67 store 1 ,mem_remain 
+491c 60010c65 store 2 ,mem_usb_zero_packet 
+491d 1fe0fe01 pincrease 1 
+491e 60010c67 store 2 ,mem_usb_ones_packet 
+491f 1fe0fe01 pincrease 1 
+4920 60010c69 store 2 ,mem_usb_two_packet 
+4921 58008ffa setarg hid_kbdata_addr 
+4922 60010b7c store 2 ,mem_hidreportdesc_kb 
+4923 5800903a setarg hid_msdata_addr 
+4924 60010b7e store 2 ,mem_hidreportdesc_m 
+4925 d8a00b80 arg mem_confdesc ,contw 
+4926 d8c090fe arg hid_confdata_addr ,contr 
+4927 20407eb3 call memcpy64 
+4928 68008c6d fetch 1 ,mem_usb_tx_interval 
+4929 245a492b ncall usb_tx_interval_config ,blank 
+492a 2020490b branch usb_mem_devicedesc_init 
+
+usb_tx_interval_config:
+492b 60008ba2 store 1 ,mem_confdesc + 34 
+492c 60008bbb store 1 ,mem_confdesc + 59 
+492d 20600000 rtn 
+
+usb_nak_state_judge:
+492e 68108a26 hfetch 1 ,core_usb_status 
+492f c2834931 bbit1 usb_status_nak ,usb_nak_state_timer_init 
+4930 20600000 rtn 
+
+usb_nak_state_timer_init:
+4931 20404936 call usb0_attached_state_judge 
+4932 20407f15 call timer_reinit 
+4933 58000280 setarg timer_nak_delay 
+4934 d8e00000 arg timer_nak ,queue 
+4935 20207f08 branch timer_init 
+
+usb0_attached_state_judge:
+4936 68008d36 fetch 1 ,mem_usb_state 
+4937 c081493b bne usb_connected ,usb_clear_halt_dispose 
+4938 700d4600 jam 0 ,mem_usb_wakestate_onetime_flag 
+4939 700d4700 jam 0 ,mem_usb_mac_wakeup_trig 
+493a 20600000 rtn 
+
+usb_clear_halt_dispose:
+493b 68008d53 fetch 1 ,mem_usb_clear_halt 
+493c 207a0000 rtn blank 
+493d 700d5300 jam 0 ,mem_usb_clear_halt 
+493e 700d3602 jam usb_connected ,mem_usb_state 
+493f 700d4501 jam 1 ,mem_usb_device_enumeration_endflag 
+4940 20600000 rtn 
+
+usb0_fifo_empty:
+4941 708a2701 jam 0x1 ,core_usb_fifo_empty 
+4942 20204b37 branch usb0_tx 
+
+usb_rx_no_data:
+4943 68008b22 fetch 1 ,mem_usb_status 
+4944 c2824955 bbit1 usb_status_setup ,usb_class_type 
+4945 20600000 rtn 
+
+usb_rx_read:
+4946 68108a18 hfetch 1 ,core_usb_ep 
+4947 e0a08000 istore 1 ,contw 
+4948 c2004946 loop usb_rx_read 
+4949 20600000 rtn 
+
+usb_status1:
+494a 44fc401f bpatch patch1f_0 ,mem_patch1f 
+494b 708a2611 jam 0x11 ,core_usb_status 
+494c 68108a20 hfetch 1 ,core_usb_ep_len 
+494d 60008b24 store 1 ,mem_usb_read_len 
+494e 1fe27200 copy pdata ,loopcnt 
+494f 203a4943 branch usb_rx_no_data ,blank 
+4950 d8a00c6e arg mem_usb_setup ,contw 
+4951 20404946 call usb_rx_read 
+4952 68008b24 fetch 1 ,mem_usb_read_len 
+4953 1fe67c07 sub pdata ,7 ,null 
+4954 20610000 rtn positive 
+
+usb_class_type:
+4955 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+4956 1fe17e80 and_into 0x80 ,pdata 
+4957 c040495a beq in_device ,usb_in_device 
+4958 c0004962 beq out_device ,usb_out_device 
+4959 20202a8c branch assert 
+
+usb_in_device:
+495a 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+495b 1ff1fe00 rshift4 pdata ,pdata 
+495c 1fe37e00 rshift pdata ,pdata 
+495d 1fe17e03 and_into 0x03 ,pdata 
+495e c000496a beq standard_req ,usb_in_standard_req 
+495f c000c970 beq class_req ,usb_in_class_req 
+4960 c0014975 beq manufacturer_req ,usb_in_manufacturer_req 
+4961 20202a8c branch assert 
+
+usb_out_device:
+4962 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+4963 1ff1fe00 rshift4 pdata ,pdata 
+4964 1fe37e00 rshift pdata ,pdata 
+4965 1fe17e03 and_into 0x03 ,pdata 
+4966 c0004976 beq standard_req ,usb_out_standard_req 
+4967 c000c97e beq class_req ,usb_out_class_req 
+4968 c0014983 beq manufacturer_req ,usb_out_manufacturer_req 
+4969 20202a8c branch assert 
+
+usb_in_standard_req:
+496a 68008c6f fetch 1 ,mem_usb_setup_brequest 
+496b c004498a beq get_configuration ,usb0_request_get_configuration 
+496c c00349a0 beq get_descriptor ,usb0_request_get_descriptor 
+496d c00549ea beq get_interface ,usb0_request_get_interface 
+496e c00049fc beq get_status ,usb0_request_get_status 
+496f 20204984 branch usb0_force_stall 
+
+usb_in_class_req:
+4970 68008c6f fetch 1 ,mem_usb_setup_brequest 
+4971 c0014a2f beq get_idle ,usb_get_idle 
+4972 c000ca33 beq get_report ,usb_get_report 
+4973 c001ca45 beq get_protocol ,usb_get_protocol_req 
+4974 20204984 branch usb0_force_stall 
+
+usb_in_manufacturer_req:
+4975 20204984 branch usb0_force_stall 
+
+usb_out_standard_req:
+4976 68008c6f fetch 1 ,mem_usb_setup_brequest 
+4977 c000ca4f beq clear_feature ,usb0_request_clear_feature 
+4978 c001ca79 beq set_feature ,usb0_request_set_feature 
+4979 c002caa3 beq set_address ,usb0_request_set_address 
+497a c004cabc beq set_configuration ,usb0_request_set_configuration 
+497b c005cad7 beq set_interface ,usb0_request_set_interface 
+497c c003c984 beq set_descriptor ,usb0_force_stall 
+497d 20204984 branch usb0_force_stall 
+
+usb_out_class_req:
+497e 68008c6f fetch 1 ,mem_usb_setup_brequest 
+497f c0054ae8 beq set_idle ,usb_set_idle 
+4980 c004caf9 beq set_report ,usb_set_report 
+4981 c005cb11 beq set_protocol ,usb_set_protocol_req 
+4982 20204984 branch usb0_force_stall 
+
+usb_out_manufacturer_req:
+4983 20204984 branch usb0_force_stall 
+
+usb0_force_stall:
+4984 68108a11 hfetch 1 ,core_usb_stall 
+4985 79207e00 set1 0 ,pdata 
+4986 60108a11 hstore 1 ,core_usb_stall 
+4987 20204988 branch usb0_reply_zerolen 
+
+usb0_reply_zerolen:
+4988 708a1240 jam 0x40 ,core_usb_clear 
+4989 20600000 rtn 
+
+usb0_request_get_configuration:
+498a 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+498b c0c04984 bne in_device ,usb0_force_stall 
+498c 68008c72 fetch 1 ,mem_usb_setup_windex 
+498d c0804984 bne 0 ,usb0_force_stall 
+498e 68008c73 fetch 1 ,mem_usb_setup_windex + 1 
+498f c0804984 bne 0 ,usb0_force_stall 
+4990 68008c74 fetch 1 ,mem_usb_setup_blength 
+4991 c080c984 bne 1 ,usb0_force_stall 
+4992 68008c75 fetch 1 ,mem_usb_setup_blengthh 
+4993 c0804984 bne 0 ,usb0_force_stall 
+4994 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4995 c0804984 bne 0 ,usb0_force_stall 
+4996 68008c71 fetch 1 ,mem_usb_setup_bvalue + 1 
+4997 c0804984 bne 0 ,usb0_force_stall 
+4998 68008c6b fetch 1 ,mem_usb0_state 
+4999 c002499c beq dev_configured ,usb0_request_get_cfg_dev_cfg 
+499a c001c99e beq dev_address ,usb0_request_get_cfg_dev_addr 
+499b 20204984 branch usb0_force_stall 
+
+usb0_request_get_cfg_dev_cfg:
+499c da400001 arg 1 ,regb 
+499d 20204a14 branch usb_send_ones_packet 
+
+usb0_request_get_cfg_dev_addr:
+499e da400001 arg 1 ,regb 
+499f 20204a12 branch usb_send_zero_packet 
+
+usb0_request_get_descriptor:
+49a0 44fcc01f bpatch patch1f_1 ,mem_patch1f 
+49a1 793f8023 set0 mark_isstr ,mark 
+49a2 68008c71 fetch 1 ,mem_usb_setup_bvalueh 
+49a3 c000c9b6 beq dsc_device ,dsc_device_info 
+49a4 c00149cf beq dsc_config ,dsc_config_info 
+49a5 c001c9d2 beq dsc_string ,dsc_string_info 
+49a6 c010c9a9 beq dsc_hid ,dsc_hid_info 
+49a7 c01149e0 beq dsc_hid_report ,dsc_hid_report_info 
+49a8 20204984 branch usb0_force_stall 
+
+dsc_hid_info:
+49a9 700d4b00 jam 0 ,mem_usb_get_protocol_flag 
+49aa 68008c72 fetch 1 ,mem_usb_setup_windex 
+49ab c00049ae beq 0 ,dsc_hid_info_interface0 
+49ac c000c9b2 beq 1 ,dsc_hid_info_interface1 
+49ad 20204984 branch usb0_force_stall 
+
+dsc_hid_info_interface0:
+49ae da200b93 arg mem_confdesc + 19 ,rega 
+49af ea208000 ifetch 1 ,rega 
+49b0 98002400 iforce regb 
+49b1 20204b21 branch usb0_respond 
+
+dsc_hid_info_interface1:
+49b2 da200bac arg mem_confdesc + 44 ,rega 
+49b3 ea208000 ifetch 1 ,rega 
+49b4 98002400 iforce regb 
+49b5 20204b21 branch usb0_respond 
+
+dsc_device_info:
+49b6 68008d48 fetch 1 ,mem_usb_set_high_addr_flag 
+49b7 245a49c7 ncall usb_set_high_addr ,blank 
+49b8 58000b68 setarg mem_devicedesc 
+49b9 68088b68 fetcht 1 ,mem_devicedesc 
+
+dsc_info_set_data_len:
+49ba 60010d3f store 2 ,mem_dsc_info_data_pointer 
+49bb 60088d41 storet 1 ,mem_dsc_info_len 
+49bc 68008c74 fetch 1 ,mem_usb_setup_blength 
+49bd 98467c00 isub temp ,null 
+49be 242149c5 nbranch dsc_info_set_current_data_len ,positive 
+
+dsc_info_set_initial_data_len:
+49bf 68008d41 fetch 1 ,mem_dsc_info_len 
+
+dsc_info_set_data_size_completed:
+49c0 98002400 iforce regb 
+49c1 68010d3f fetch 2 ,mem_dsc_info_data_pointer 
+49c2 1fe0fe01 add pdata ,1 ,pdata 
+49c3 98002200 iforce rega 
+49c4 20204b21 branch usb0_respond 
+
+dsc_info_set_current_data_len:
+49c5 68008c74 fetch 1 ,mem_usb_setup_blength 
+49c6 202049c0 branch dsc_info_set_data_size_completed 
+
+usb_set_high_addr:
+49c7 68108a04 hfetch 1 ,core_usb_addr 
+49c8 245a49cb ncall usb0_set_addr ,blank 
+49c9 700d4800 jam 0 ,mem_usb_set_high_addr_flag 
+49ca 20600000 rtn 
+
+usb0_set_addr:
+49cb 68108a04 hfetch 1 ,core_usb_addr 
+49cc 79207e07 set1 7 ,pdata 
+49cd 60108a04 hstore 1 ,core_usb_addr 
+49ce 20600000 rtn 
+
+dsc_config_info:
+49cf 58000b80 setarg mem_confdesc 
+49d0 68088b80 fetcht 1 ,mem_confdesc 
+49d1 202049ba branch dsc_info_set_data_len 
+
+dsc_string_info:
+49d2 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+49d3 1fe67c03 sub pdata ,3 ,null 
+49d4 24214984 nbranch usb0_force_stall ,positive 
+49d5 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+49d6 da200be4 arg mem_string0 ,rega 
+49d7 c0004b1e beq 0 ,usb0_respond_length 
+49d8 79200023 set1 mark_isstr ,mark 
+49d9 da200be9 arg mem_string1 ,rega 
+49da c000cb1e beq 1 ,usb0_respond_length 
+49db da200c07 arg mem_string2 ,rega 
+49dc c0014b1e beq 2 ,usb0_respond_length 
+49dd da200c47 arg mem_string3 ,rega 
+49de c001cb1e beq 3 ,usb0_respond_length 
+49df 20600000 rtn 
+
+dsc_hid_report_info:
+49e0 68010c72 fetch 2 ,mem_usb_setup_windex 
+49e1 c000c9e5 beq 1 ,dsc_hid_report_info0 
+49e2 68010b7c fetch 2 ,mem_hidreportdesc_kb 
+49e3 1fe22200 copy pdata ,rega 
+49e4 20204b1e branch usb0_respond_length 
+
+dsc_hid_report_info0:
+49e5 700d4501 jam 1 ,mem_usb_device_enumeration_endflag 
+49e6 700d3601 jam usb_got_report_req ,mem_usb_state 
+49e7 68010b7e fetch 2 ,mem_hidreportdesc_m 
+49e8 1fe22200 copy pdata ,rega 
+49e9 20204b1e branch usb0_respond_length 
+
+usb0_request_get_interface:
+49ea 68008c6b fetch 1 ,mem_usb0_state 
+49eb c0824984 bne dev_configured ,usb0_force_stall 
+49ec 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+49ed c0c0c984 bne in_interface ,usb0_force_stall 
+49ee 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+49ef c0804984 bne 0 ,usb0_force_stall 
+49f0 68008c71 fetch 1 ,mem_usb_setup_bvalueh 
+49f1 c0804984 bne 0 ,usb0_force_stall 
+49f2 68008c74 fetch 1 ,mem_usb_setup_blength 
+49f3 c080c984 bne 1 ,usb0_force_stall 
+49f4 68008c75 fetch 1 ,mem_usb_setup_blengthh 
+49f5 c0804984 bne 0 ,usb0_force_stall 
+49f6 68008c72 fetch 1 ,mem_usb_setup_windex 
+49f7 c0804984 bne 0 ,usb0_force_stall 
+49f8 68008c73 fetch 1 ,mem_usb_setup_windex + 1 
+49f9 c0804984 bne 0 ,usb0_force_stall 
+49fa da400001 arg 1 ,regb 
+49fb 20204a12 branch usb_send_zero_packet 
+
+usb0_request_get_status:
+49fc 68008c6b fetch 1 ,mem_usb0_state 
+49fd c0014984 beq dev_default ,usb0_force_stall 
+49fe 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+49ff c0804984 bne 0 ,usb0_force_stall 
+4a00 68008c71 fetch 1 ,mem_usb_setup_bvalueh 
+4a01 c0804984 bne 0 ,usb0_force_stall 
+4a02 68008c74 fetch 1 ,mem_usb_setup_blength 
+4a03 c0814984 bne 2 ,usb0_force_stall 
+4a04 68008c75 fetch 1 ,mem_usb_setup_blengthh 
+4a05 c0804984 bne 0 ,usb0_force_stall 
+4a06 68008c73 fetch 1 ,mem_usb_setup_windex + 1 
+4a07 c0804984 bne 0 ,usb0_force_stall 
+4a08 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+4a09 c0404a0d beq in_device ,usb0_get_status_in_device 
+4a0a c040ca18 beq in_interface ,usb0_get_status_in_interface 
+4a0b c0414a1c beq in_endpoint ,usb0_get_status_in_endpoint 
+4a0c 20204984 branch usb0_force_stall 
+
+usb0_get_status_in_device:
+4a0d 68008c72 fetch 1 ,mem_usb_setup_windex 
+4a0e c0804984 bne 0 ,usb0_force_stall 
+4a0f da400002 arg 2 ,regb 
+4a10 68008d39 fetch 1 ,mem_usb_remote_wakeup 
+4a11 c000ca16 beq 0x01 ,usb_send_two_packet 
+
+usb_send_zero_packet:
+4a12 da200c65 arg mem_usb_zero_packet ,rega 
+4a13 20204b21 branch usb0_respond 
+
+usb_send_ones_packet:
+4a14 da200c67 arg mem_usb_ones_packet ,rega 
+4a15 20204b21 branch usb0_respond 
+
+usb_send_two_packet:
+4a16 da200c69 arg mem_usb_two_packet ,rega 
+4a17 20204b21 branch usb0_respond 
+
+usb0_get_status_in_interface:
+4a18 68008c6b fetch 1 ,mem_usb0_state 
+4a19 c0824984 bne dev_configured ,usb0_force_stall 
+4a1a da400002 arg 2 ,regb 
+4a1b 20204a12 branch usb_send_zero_packet 
+
+usb0_get_status_in_endpoint:
+4a1c 68008c6b fetch 1 ,mem_usb0_state 
+4a1d c0824984 bne dev_configured ,usb0_force_stall 
+4a1e 68008c72 fetch 1 ,mem_usb_setup_windex 
+4a1f c040ca29 beq in_ep1 ,usb0_get_status_in_ep_in_ep1 
+4a20 c0414a2b beq in_ep2 ,usb0_get_status_in_ep_in_ep2 
+4a21 c041ca2d beq in_ep3 ,usb0_get_status_in_ep_in_ep3 
+4a22 1fe17e7f and_into 0x7f ,pdata 
+4a23 c0004a25 beq 0x00 ,usb0_get_status_in_ep_in_ep0 
+4a24 20204984 branch usb0_force_stall 
+
+usb0_get_status_in_ep_in_ep0:
+4a25 68008d3b fetch 1 ,mem_usb_ep0_stall_status 
+
+usb0_get_status_in_ep_in_ack:
+4a26 da400002 arg 2 ,regb 
+4a27 c000ca14 beq 1 ,usb_send_ones_packet 
+4a28 20204a12 branch usb_send_zero_packet 
+
+usb0_get_status_in_ep_in_ep1:
+4a29 68008d3c fetch 1 ,mem_usb_ep1_stall_status 
+4a2a 20204a26 branch usb0_get_status_in_ep_in_ack 
+
+usb0_get_status_in_ep_in_ep2:
+4a2b 68008d3d fetch 1 ,mem_usb_ep2_stall_status 
+4a2c 20204a26 branch usb0_get_status_in_ep_in_ack 
+
+usb0_get_status_in_ep_in_ep3:
+4a2d 68008d3e fetch 1 ,mem_usb_ep3_stall_status 
+4a2e 20204a26 branch usb0_get_status_in_ep_in_ack 
+
+usb_get_idle:
+4a2f 700d4c01 jam 1 ,mem_usb_idle_flag 
+4a30 da200d4d arg mem_usb_idle_rate ,rega 
+4a31 da400001 arg 1 ,regb 
+4a32 20204b21 branch usb0_respond 
+
+usb_get_report:
+4a33 68010c70 fetch 2 ,mem_usb_setup_bvalue 
+4a34 d84001ba arg pc_get_report ,temp 
+4a35 98467c00 isub temp ,null 
+4a36 2422c984 nbranch usb0_force_stall ,zero 
+4a37 793f8023 set0 mark_isstr ,mark 
+
+usb_get_report_dispose:
+4a38 68008d42 fetch 1 ,mem_usb0_data_ready_report 
+4a39 243a4a42 nbranch usb_get_report_data_success ,blank 
+4a3a 700cf600 jam pc_get_nondata ,mem_usb0_get_report_data 
+
+usb_get_report_send_data:
+4a3b 68008c74 fetch 1 ,mem_usb_setup_blength 
+4a3c 98002400 iforce regb 
+4a3d da200cf6 arg mem_usb0_get_report_data ,rega 
+4a3e 20404b21 call usb0_respond 
+
+usb_get_report_data_release:
+4a3f d8a00cf6 arg mem_usb0_get_report_data ,contw 
+4a40 df200008 arg 8 ,loopcnt 
+4a41 20207ec6 branch memset0 
+
+usb_get_report_data_success:
+4a42 700d4200 jam 0 ,mem_usb0_data_ready_report 
+4a43 700cf601 jam pc_get_data ,mem_usb0_get_report_data 
+4a44 20204a3b branch usb_get_report_send_data 
+
+usb_get_protocol_req:
+4a45 68008c74 fetch 1 ,mem_usb_setup_blength 
+4a46 c080c984 bne 1 ,usb0_force_stall 
+4a47 700d4b01 jam 1 ,mem_usb_get_protocol_flag 
+4a48 da400001 arg 1 ,regb 
+4a49 68008d49 fetch 1 ,mem_usb_set_protocol_value 
+4a4a c0004a4d beq 0 ,usb_get_report_protocol 
+4a4b c000ca4e beq 1 ,usb_get_boot_protocol 
+4a4c 20204a12 branch usb_send_zero_packet 
+
+usb_get_report_protocol:
+4a4d 20204a14 branch usb_send_ones_packet 
+
+usb_get_boot_protocol:
+4a4e 20204a12 branch usb_send_zero_packet 
+
+usb0_request_clear_feature:
+4a4f 68008c6b fetch 1 ,mem_usb0_state 
+4a50 c0824984 bne dev_configured ,usb0_force_stall 
+4a51 68008c74 fetch 1 ,mem_usb_setup_blength 
+4a52 c0804984 bne 0 ,usb0_force_stall 
+4a53 68008c75 fetch 1 ,mem_usb_setup_blengthh 
+4a54 c0804984 bne 0 ,usb0_force_stall 
+4a55 68008c71 fetch 1 ,mem_usb_setup_bvalueh 
+4a56 c0804984 bne 0 ,usb0_force_stall 
+4a57 68008c73 fetch 1 ,mem_usb_setup_windex + 1 
+4a58 c0804984 bne 0 ,usb0_force_stall 
+4a59 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+4a5a c0004a5e beq out_device ,usb0_request_clear_feature_out_device 
+4a5b c000ca66 beq out_interface ,usb0_request_clear_feature_out_interface 
+4a5c c0014a67 beq out_endpoint ,usb0_request_clear_feature_out_endpoint 
+4a5d 20204984 branch usb0_force_stall 
+
+usb0_request_clear_feature_out_device:
+4a5e 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4a5f c080c984 bne device_remote_wakeup ,usb0_force_stall 
+4a60 68108a00 hfetch 1 ,core_usb_config 
+4a61 793ffe07 set0 7 ,pdata 
+4a62 60108a00 hstore 1 ,core_usb_config 
+4a63 700d3900 jam 0 ,mem_usb_remote_wakeup 
+4a64 700d3a01 jam 1 ,mem_usb_clear_remote_wakeup 
+4a65 20204988 branch usb0_reply_zerolen 
+
+usb0_request_clear_feature_out_interface:
+4a66 20204984 branch usb0_force_stall 
+
+usb0_request_clear_feature_out_endpoint:
+4a67 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4a68 c0804984 bne endpoint_halt ,usb0_force_stall 
+4a69 68008c72 fetch 1 ,mem_usb_setup_windex 
+4a6a c040ca72 beq in_ep1 ,usb0_force_stall_ep1_in_off 
+4a6b c0414a75 beq in_ep2 ,usb0_force_stall_ep2_in_off 
+4a6c c041ca77 beq in_ep3 ,usb0_force_stall_ep3_in_off 
+4a6d 1fe17e7f and_into 0x7f ,pdata 
+4a6e c0004a70 beq 0x00 ,usb0_force_stall_ep0_in_off 
+4a6f 20204984 branch usb0_force_stall 
+
+usb0_force_stall_ep0_in_off:
+4a70 700d3b00 jam 0 ,mem_usb_ep0_stall_status 
+4a71 20204988 branch usb0_reply_zerolen 
+
+usb0_force_stall_ep1_in_off:
+4a72 700d3c00 jam 0 ,mem_usb_ep1_stall_status 
+
+usb0_force_stall_ep1_in_off_reply:
+4a73 700d5301 jam 1 ,mem_usb_clear_halt 
+4a74 20204988 branch usb0_reply_zerolen 
+
+usb0_force_stall_ep2_in_off:
+4a75 700d3d00 jam 0 ,mem_usb_ep2_stall_status 
+4a76 20204a73 branch usb0_force_stall_ep1_in_off_reply 
+
+usb0_force_stall_ep3_in_off:
+4a77 700d3e00 jam 0 ,mem_usb_ep3_stall_status 
+4a78 20204a73 branch usb0_force_stall_ep1_in_off_reply 
+
+usb0_request_set_feature:
+4a79 68008c74 fetch 1 ,mem_usb_setup_blength 
+4a7a c0804984 bne 0 ,usb0_force_stall 
+4a7b 68008c75 fetch 1 ,mem_usb_setup_blengthh 
+4a7c c0804984 bne 0 ,usb0_force_stall 
+4a7d 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+4a7e c0004a82 beq out_device ,usb0_request_set_feature_out_device 
+4a7f c000ca8f beq out_interface ,usb0_request_set_feature_out_interface 
+4a80 c0014a90 beq out_endpoint ,usb0_request_set_feature_out_endpoint 
+4a81 20204984 branch usb0_force_stall 
+
+usb0_request_set_feature_out_device:
+4a82 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4a83 c080c984 bne device_remote_wakeup ,usb0_force_stall 
+4a84 68108a00 hfetch 1 ,core_usb_config 
+4a85 79207e07 set1 7 ,pdata 
+4a86 60108a00 hstore 1 ,core_usb_config 
+4a87 700d3901 jam 1 ,mem_usb_remote_wakeup 
+4a88 700d3603 jam usb_sleep ,mem_usb_state 
+4a89 700d4300 jam 0 ,mem_usb_tx_win_enable 
+4a8a 20404988 call usb0_reply_zerolen 
+
+usb_wakeup_timer_reinit:
+4a8b 20407f15 call timer_reinit 
+4a8c 58001388 setarg timer_wakeup_delay 
+4a8d d8e0000f arg timer_wakeup ,queue 
+4a8e 20207f08 branch timer_init 
+
+usb0_request_set_feature_out_interface:
+4a8f 20204984 branch usb0_force_stall 
+
+usb0_request_set_feature_out_endpoint:
+4a90 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4a91 c0804984 bne endpoint_halt ,usb0_force_stall 
+4a92 68008c71 fetch 1 ,mem_usb_setup_bvalueh 
+4a93 c0804984 bne 0 ,usb0_force_stall 
+4a94 68008c72 fetch 1 ,mem_usb_setup_windex 
+4a95 c040ca9d beq in_ep1 ,usb0_force_stall_ep1_in_on 
+4a96 c0414a9f beq in_ep2 ,usb0_force_stall_ep2_in_on 
+4a97 c041caa1 beq in_ep3 ,usb0_force_stall_ep3_in_on 
+4a98 1fe17e7f and_into 0x7f ,pdata 
+4a99 c0004a9b beq 0x00 ,usb0_force_stall_ep0_in_on 
+4a9a 20204984 branch usb0_force_stall 
+
+usb0_force_stall_ep0_in_on:
+4a9b 700d3b01 jam 1 ,mem_usb_ep0_stall_status 
+4a9c 20204988 branch usb0_reply_zerolen 
+
+usb0_force_stall_ep1_in_on:
+4a9d 700d3c01 jam 1 ,mem_usb_ep1_stall_status 
+4a9e 20204988 branch usb0_reply_zerolen 
+
+usb0_force_stall_ep2_in_on:
+4a9f 700d3d01 jam 1 ,mem_usb_ep2_stall_status 
+4aa0 20204988 branch usb0_reply_zerolen 
+
+usb0_force_stall_ep3_in_on:
+4aa1 700d3e01 jam 1 ,mem_usb_ep3_stall_status 
+4aa2 20204988 branch usb0_reply_zerolen 
+
+usb0_request_set_address:
+4aa3 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+4aa4 c0804984 bne out_device ,usb0_force_stall 
+4aa5 68008c72 fetch 1 ,mem_usb_setup_windex 
+4aa6 c0804984 bne 0 ,usb0_force_stall 
+4aa7 68008c73 fetch 1 ,mem_usb_setup_windex + 1 
+4aa8 c0804984 bne 0 ,usb0_force_stall 
+4aa9 68008c74 fetch 1 ,mem_usb_setup_blength 
+4aaa c0804984 bne 0 ,usb0_force_stall 
+4aab 68008c75 fetch 1 ,mem_usb_setup_blengthh 
+4aac c0804984 bne 0 ,usb0_force_stall 
+4aad 68008c71 fetch 1 ,mem_usb_setup_bvalueh 
+4aae c0804984 bne 0 ,usb0_force_stall 
+4aaf 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4ab0 1fe17e80 and_into 0x80 ,pdata 
+4ab1 c0804984 bne 0 ,usb0_force_stall 
+4ab2 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4ab3 c0804aba bne 0 ,usb_usb0_state_set_dev_addr 
+
+usb_usb0_state_set_dev_default:
+4ab4 700c6b02 jam dev_default ,mem_usb0_state 
+
+usb0_request_set_wait_address:
+4ab5 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4ab6 60108a04 hstore 1 ,core_usb_addr 
+4ab7 20404988 call usb0_reply_zerolen 
+4ab8 700d4801 jam 1 ,mem_usb_set_high_addr_flag 
+4ab9 20600000 rtn 
+
+usb_usb0_state_set_dev_addr:
+4aba 700c6b03 jam dev_address ,mem_usb0_state 
+4abb 20204ab5 branch usb0_request_set_wait_address 
+
+usb0_request_set_configuration:
+4abc 68008c6b fetch 1 ,mem_usb0_state 
+4abd c0014984 beq dev_default ,usb0_force_stall 
+4abe 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+4abf c0804984 bne out_device ,usb0_force_stall 
+4ac0 68008c72 fetch 1 ,mem_usb_setup_windex 
+4ac1 c0804984 bne 0 ,usb0_force_stall 
+4ac2 68008c73 fetch 1 ,mem_usb_setup_windex + 1 
+4ac3 c0804984 bne 0 ,usb0_force_stall 
+4ac4 68008c74 fetch 1 ,mem_usb_setup_blength 
+4ac5 c0804984 bne 0 ,usb0_force_stall 
+4ac6 68008c75 fetch 1 ,mem_usb_setup_blengthh 
+4ac7 c0804984 bne 0 ,usb0_force_stall 
+4ac8 68008c71 fetch 1 ,mem_usb_setup_bvalue + 1 
+4ac9 c0804984 bne 0 ,usb0_force_stall 
+4aca 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4acb 1fe67c01 sub pdata ,usb_max_num_cfg ,null 
+4acc 24214984 nbranch usb0_force_stall ,positive 
+4acd 68008c6b fetch 1 ,mem_usb0_state 
+4ace c001cad1 beq dev_address ,usb0_request_set_cfg_addr_state 
+4acf c0024ad1 beq dev_configured ,usb0_request_set_cfg_cfg_state 
+4ad0 20204984 branch usb0_force_stall 
+
+usb0_request_set_cfg_addr_state:
+
+usb0_request_set_cfg_cfg_state:
+4ad1 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4ad2 c0004ad5 beq 0 ,usb0_request_set_cfg_stay_addr_state 
+4ad3 700c6b04 jam dev_configured ,mem_usb0_state 
+4ad4 20204988 branch usb0_reply_zerolen 
+
+usb0_request_set_cfg_stay_addr_state:
+4ad5 700c6b03 jam dev_address ,mem_usb0_state 
+4ad6 20204988 branch usb0_reply_zerolen 
+
+usb0_request_set_interface:
+4ad7 68008c6b fetch 1 ,mem_usb0_state 
+4ad8 c0824984 bne dev_configured ,usb0_force_stall 
+4ad9 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+4ada c080c984 bne out_interface ,usb0_force_stall 
+4adb 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4adc c0804984 bne 0 ,usb0_force_stall 
+4add 68008c71 fetch 1 ,mem_usb_setup_bvalueh 
+4ade c0804984 bne 0 ,usb0_force_stall 
+4adf 68008c74 fetch 1 ,mem_usb_setup_blength 
+4ae0 c0804984 bne 0 ,usb0_force_stall 
+4ae1 68008c75 fetch 1 ,mem_usb_setup_blengthh 
+4ae2 c0804984 bne 0 ,usb0_force_stall 
+4ae3 68008c72 fetch 1 ,mem_usb_setup_windex 
+4ae4 c0804984 bne 0 ,usb0_force_stall 
+4ae5 68008c73 fetch 1 ,mem_usb_setup_windex + 1 
+4ae6 c0804984 bne 0 ,usb0_force_stall 
+4ae7 20204988 branch usb0_reply_zerolen 
+
+usb_set_idle:
+4ae8 700d4c01 jam 1 ,mem_usb_idle_flag 
+4ae9 68008c71 fetch 1 ,mem_usb_setup_bvalueh 
+4aea 60008d4d store 1 ,mem_usb_idle_rate 
+4aeb 68008c72 fetch 1 ,mem_usb_setup_windex 
+4aec 1fe67c01 sub pdata ,1 ,null 
+4aed 2042caf5 call usb_clear_remote_wakeup_set0 ,zero 
+4aee 68008d36 fetch 1 ,mem_usb_state 
+4aef c0824988 bne usb_resume ,usb0_reply_zerolen 
+4af0 700d3602 jam usb_connected ,mem_usb_state 
+4af1 20404988 call usb0_reply_zerolen 
+4af2 20007530 nop 30000 
+4af3 20007530 nop 30000 
+4af4 20600000 rtn 
+
+usb_clear_remote_wakeup_set0:
+4af5 700d4501 jam 1 ,mem_usb_device_enumeration_endflag 
+4af6 700d3a00 jam 0 ,mem_usb_clear_remote_wakeup 
+4af7 700d3604 jam usb_resume ,mem_usb_state 
+4af8 20600000 rtn 
+
+usb_set_report:
+4af9 700d5001 jam 1 ,mem_usb0_get_set_report 
+4afa 20404b03 call usb_set_report_resume_judge 
+4afb 68010c70 fetch 2 ,mem_usb_setup_bvalue 
+4afc 60010d4e store 2 ,mem_usb_setup_bvalue_temp 
+4afd 68008c74 fetch 1 ,mem_usb_setup_blength 
+4afe 98007200 iforce loopcnt 
+4aff d8c00c76 arg mem_usb0_setup ,contr 
+4b00 d8a00cb6 arg mem_usb0_set_report_data ,contw 
+4b01 20407f01 call memcpy 
+4b02 20204988 branch usb0_reply_zerolen 
+
+usb_set_report_resume_judge:
+4b03 68010c70 fetch 2 ,mem_usb_setup_bvalue 
+4b04 d8400200 arg pc_set_report_bvalue ,temp 
+4b05 98467c00 isub temp ,null 
+4b06 24628000 nrtn zero 
+4b07 68010c72 fetch 2 ,mem_usb_setup_windex 
+4b08 d8400000 arg pc_set_report_windex ,temp 
+4b09 98467c00 isub temp ,null 
+4b0a 24628000 nrtn zero 
+4b0b 68010c74 fetch 2 ,mem_usb_setup_blength 
+4b0c d8400001 arg pc_set_report_blength ,temp 
+4b0d 98467c00 isub temp ,null 
+4b0e 24628000 nrtn zero 
+4b0f 700d4301 jam 1 ,mem_usb_tx_win_enable 
+4b10 20600000 rtn 
+
+usb_set_protocol_req:
+4b11 68008c74 fetch 1 ,mem_usb_setup_blength 
+4b12 c0804984 bne 0 ,usb0_force_stall 
+4b13 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4b14 c0004b17 beq boot_protocol ,usb_set_boot_protocol 
+4b15 c000cb1a beq report_protocol ,usb_set_report_protocol 
+4b16 20204984 branch usb0_force_stall 
+
+usb_set_boot_protocol:
+4b17 700d4a00 jam 0 ,mem_usb_set_protocol_status 
+4b18 700d4901 jam 1 ,mem_usb_set_protocol_value 
+4b19 20204988 branch usb0_reply_zerolen 
+
+usb_set_report_protocol:
+4b1a 700d4401 jam 1 ,mem_usb_tx_mac_enable 
+4b1b 700d4a01 jam 1 ,mem_usb_set_protocol_status 
+4b1c 700d4900 jam 0 ,mem_usb_set_protocol_value 
+4b1d 20204988 branch usb0_reply_zerolen 
+
+usb0_respond_length:
+4b1e ea208000 ifetch 1 ,rega 
+4b1f 98002400 iforce regb 
+4b20 1a20a201 increase 1 ,rega 
+
+usb0_respond:
+4b21 44fd401f bpatch patch1f_2 ,mem_patch1f 
+4b22 c591cb2c bmark0 mark_isstr ,usb0_respond0 
+4b23 1a40fe01 add regb ,1 ,pdata 
+4b24 1fe3fe00 lshift pdata ,pdata 
+4b25 60108a18 hstore 1 ,core_usb_dfifo0 
+4b26 708a1803 jam 3 ,core_usb_dfifo0 
+4b27 68008c74 fetch 1 ,mem_usb_setup_blength 
+4b28 1fe0fffe increase -2 ,pdata 
+4b29 1fe37e00 rshift pdata ,pdata 
+4b2a 60008c74 store 1 ,mem_usb_setup_blength 
+4b2b c0004b35 beq 0 ,usb_no_respond_data 
+
+usb0_respond0:
+4b2c 68010c74 fetch 2 ,mem_usb_setup_blength 
+4b2d 9a467c00 isub regb ,null 
+4b2e 20214b30 branch usb0_respond1 ,positive 
+4b2f 1fe22400 copy pdata ,regb 
+
+usb0_respond1:
+4b30 1a227e00 deposit rega 
+4b31 60010b65 store 2 ,mem_bufptr 
+4b32 1a427e00 deposit regb 
+4b33 60008b67 store 1 ,mem_remain 
+4b34 20204b37 branch usb0_tx 
+
+usb_no_respond_data:
+4b35 d8e00000 arg 0 ,queue 
+4b36 20204b57 branch usb_trig 
+
+usb0_tx:
+4b37 44fdc01f bpatch patch1f_3 ,mem_patch1f 
+4b38 68008b67 fetch 1 ,mem_remain 
+4b39 207a0000 rtn blank 
+4b3a 1fe27200 copy pdata ,loopcnt 
+4b3b 1fe67c40 sub pdata ,ep0_packet_size ,null 
+4b3c 20214b3e branch usb0_tx_info ,positive 
+4b3d df200040 arg ep0_packet_size ,loopcnt 
+
+usb0_tx_info:
+4b3e 68008b67 fetch 1 ,mem_remain 
+4b3f 9f267e00 isub loopcnt ,pdata 
+4b40 60008b67 store 1 ,mem_remain 
+4b41 68010b65 fetch 2 ,mem_bufptr 
+4b42 1fe20c00 copy pdata ,contr 
+
+usb0_tx0:
+4b43 e8c08000 ifetch 1 ,contr 
+4b44 60108a18 hstore 1 ,core_usb_dfifo0 
+4b45 c591cb47 bmark0 mark_isstr ,usb0_tx1 
+4b46 708a1800 jam 0 ,core_usb_dfifo0 
+
+usb0_tx1:
+4b47 c2004b43 loop usb0_tx0 
+4b48 18c27e00 copy contr ,pdata 
+4b49 60010b65 store 2 ,mem_bufptr 
+4b4a d8e00000 arg 0 ,queue 
+4b4b 20404b57 call usb_trig 
+4b4c 68008b67 fetch 1 ,mem_remain 
+4b4d 247a0000 nrtn blank 
+4b4e 68008d36 fetch 1 ,mem_usb_state 
+4b4f c1808000 rtnne usb_got_report_req 
+4b50 700d3602 jam usb_connected ,mem_usb_state 
+4b51 20600000 rtn 
+
+usb_tx_ep1:
+4b52 da208a19 arg core_usb_dfifo1 ,rega 
+4b53 d8e00001 arg 1 ,queue 
+
+usb_tx_loop:
+4b54 e8c08000 ifetch 1 ,contr 
+4b55 e2208000 istore 1 ,rega 
+4b56 c2004b54 loop usb_tx_loop 
+
+usb_trig:
+4b57 58000000 setarg 0 
+4b58 f9207e00 qset1 pdata 
+4b59 60108a10 hstore 1 ,core_usb_trig 
+4b5a 68088d37 fetcht 1 ,mem_usb_tx_wait 
+4b5b 9841fe00 ior temp ,pdata 
+4b5c 60008d37 store 1 ,mem_usb_tx_wait 
+4b5d 20600000 rtn 
+
+usb_tx_ep2:
+4b5e d8e00002 arg 2 ,queue 
+4b5f da208a1a arg core_usb_dfifo2 ,rega 
+4b60 20204b54 branch usb_tx_loop 
+
+usb_tx:
+4b61 44fe401f bpatch patch1f_4 ,mem_patch1f 
+4b62 68008d38 fetch 1 ,mem_usb_tx_enable 
+4b63 207a0000 rtn blank 
+4b64 68008d37 fetch 1 ,mem_usb_tx_wait 
+4b65 243a4bac nbranch usb_inwake_state_tx_dispose ,blank 
+4b66 68008d45 fetch 1 ,mem_usb_device_enumeration_endflag 
+4b67 203a4b86 branch usb_tx_fifo_release ,blank 
+4b68 68008d36 fetch 1 ,mem_usb_state 
+4b69 c001cbbf beq usb_sleep ,usb_windows_wakeup 
+4b6a c0814b86 bne usb_connected ,usb_tx_fifo_release 
+4b6b 68008d3a fetch 1 ,mem_usb_clear_remote_wakeup 
+4b6c 243a4b86 nbranch usb_tx_fifo_release ,blank 
+4b6d 20404b6f call usb_tx_data_ep1 
+4b6e 20204b7a branch usb_tx_data_ep2 
+
+usb_tx_data_ep1:
+4b6f 68008d38 fetch 1 ,mem_usb_tx_enable 
+4b70 c4008000 rtnbit0 1 
+4b71 68008d37 fetch 1 ,mem_usb_tx_wait 
+4b72 c3808000 rtnbit1 1 
+4b73 68008d38 fetch 1 ,mem_usb_tx_enable 
+4b74 793ffe01 set0 1 ,pdata 
+4b75 60008d38 store 1 ,mem_usb_tx_enable 
+4b76 68008d51 fetch 1 ,mem_usb_ep1_data 
+4b77 207a0000 rtn blank 
+4b78 c0084ba8 beq usb_ep1_kb ,usb_tx_kb_normal_data 
+4b79 20202a8c branch assert 
+
+usb_tx_data_ep2:
+4b7a 68008d38 fetch 1 ,mem_usb_tx_enable 
+4b7b c4010000 rtnbit0 2 
+4b7c 68008d37 fetch 1 ,mem_usb_tx_wait 
+4b7d c3810000 rtnbit1 2 
+4b7e 68008d38 fetch 1 ,mem_usb_tx_enable 
+4b7f 793ffe02 set0 2 ,pdata 
+4b80 60008d38 store 1 ,mem_usb_tx_enable 
+4b81 68008d52 fetch 1 ,mem_usb_ep2_data 
+4b82 207a0000 rtn blank 
+4b83 c0104b89 beq usb_ep2_ms ,usb_tx_ms_data 
+4b84 c010cba4 beq usb_ep2_multikey ,usb_tx_kb_multikey_data 
+4b85 20202a8c branch assert 
+
+usb_tx_fifo_release:
+4b86 d8a00d54 arg mem_usb_mouse_data ,contw 
+4b87 df200006 arg 6 ,loopcnt 
+4b88 20207ec6 branch memset0 
+
+usb_tx_ms_data:
+4b89 68008d4c fetch 1 ,mem_usb_idle_flag 
+4b8a 68088d4b fetcht 1 ,mem_usb_get_protocol_flag 
+4b8b 98417e00 iand temp ,pdata 
+4b8c 203a4ba0 branch usb_tx_ms_data_normal_mode ,blank 
+4b8d 68088d4a fetcht 1 ,mem_usb_set_protocol_status 
+4b8e 9840fe00 iadd temp ,pdata 
+4b8f c000cb91 beq mac_boot_mode ,usb_tx_ms_data_mac_boot_mode 
+4b90 20204ba0 branch usb_tx_ms_data_normal_mode 
+
+usb_tx_ms_data_mac_boot_mode:
+4b91 700d5200 jam 0 ,mem_usb_ep2_data 
+
+usb_tx_ms_data_mac_boot_regroup:
+4b92 68008d55 fetch 1 ,mem_usb_mouse_data + 1 
+4b93 c0014ba1 beq r_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey 
+4b94 c001cba1 beq lr_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey 
+4b95 68008d55 fetch 1 ,mem_usb_mouse_data + 1 
+4b96 60008d54 store 1 ,mem_usb_mouse_data 
+4b97 68008d56 fetch 1 ,mem_usb_mouse_data + 2 
+4b98 e0a08000 istore 1 ,contw 
+4b99 68008d58 fetch 1 ,mem_usb_mouse_data + 4 
+4b9a e0a08000 istore 1 ,contw 
+4b9b 68008d5a fetch 1 ,mem_usb_mouse_data + 6 
+4b9c e0a08000 istore 1 ,contw 
+4b9d df200004 arg 4 ,loopcnt 
+4b9e d8c00d54 arg mem_usb_mouse_data ,contr 
+4b9f 20204b5e branch usb_tx_ep2 
+
+usb_tx_ms_data_normal_mode:
+4ba0 700d5200 jam 0 ,mem_usb_ep2_data 
+
+usb_tx_mac_boot_ms_regroup_r_or_lrkey:
+4ba1 df200008 arg 8 ,loopcnt 
+4ba2 d8c00d54 arg mem_usb_mouse_data ,contr 
+4ba3 20204b5e branch usb_tx_ep2 
+
+usb_tx_kb_multikey_data:
+4ba4 700d5200 jam 0 ,mem_usb_ep2_data 
+4ba5 df200003 arg 3 ,loopcnt 
+4ba6 d8c00d74 arg mem_usb_kb_multikey ,contr 
+4ba7 20204b5e branch usb_tx_ep2 
+
+usb_tx_kb_normal_data:
+4ba8 700d5100 jam 0 ,mem_usb_ep1_data 
+4ba9 df200008 arg 8 ,loopcnt 
+4baa d8c00d64 arg mem_usb_kb_data ,contr 
+4bab 20204b52 branch usb_tx_ep1 
+
+usb_inwake_state_tx_dispose:
+4bac 68008d36 fetch 1 ,mem_usb_state 
+4bad c001cbb0 beq usb_sleep ,usb_clear_tx_wait 
+4bae c0014bb2 beq usb_connected ,usb_mac_wakeup_trig 
+4baf 20600000 rtn 
+
+usb_clear_tx_wait:
+4bb0 700d3700 jam 0 ,mem_usb_tx_wait 
+4bb1 20600000 rtn 
+
+usb_mac_wakeup_trig:
+4bb2 68108a00 hfetch 1 ,core_usb_config 
+4bb3 79207e07 set1 7 ,pdata 
+4bb4 60108a00 hstore 1 ,core_usb_config 
+4bb5 700d4701 jam 1 ,mem_usb_mac_wakeup_trig 
+4bb6 20600000 rtn 
+
+usb_mac_wakeup_judge:
+4bb7 68008d36 fetch 1 ,mem_usb_state 
+4bb8 c1018000 rtneq usb_sleep 
+4bb9 c0014bbb beq usb_connected ,usb_mac_wakeup 
+4bba 20600000 rtn 
+
+usb_mac_wakeup:
+4bbb 68008d47 fetch 1 ,mem_usb_mac_wakeup_trig 
+4bbc 207a0000 rtn blank 
+4bbd 700d4601 jam 1 ,mem_usb_wakestate_onetime_flag 
+4bbe 20204bc2 branch usb_wakeup 
+
+usb_windows_wakeup:
+4bbf d8e0000f arg timer_wakeup ,queue 
+4bc0 20407f16 call timer_check 
+4bc1 247a0000 nrtn blank 
+
+usb_wakeup:
+4bc2 68108a00 hfetch 1 ,core_usb_config 
+4bc3 c4038000 rtnbit0 7 
+4bc4 708a00fc jam 0xfc ,core_usb_config 
+4bc5 20007530 nop 30000 
+4bc6 708a003c jam 0x3c ,core_usb_config 
+4bc7 20600000 rtn 
+
+hci_rx_h4:
+4bc8 44fec01f bpatch patch1f_5 ,mem_patch1f 
+4bc9 6800c1ce fetch 1 ,mem_hci_cmd 
+4bca 247a0000 nrtn blank 
+
+hci_rx_h4_1:
+4bcb 20404bce call hci_h4_parse_packet 
+4bcc 24544be6 ncall h4_rx_discard_packet ,user 
+4bcd 20600000 rtn 
+
+hci_h4_parse_packet:
+4bce 44ff401f bpatch patch1f_6 ,mem_patch1f 
+4bcf 18622200 copy contru ,rega 
+4bd0 d8400004 arg 4 ,temp 
+4bd1 e8608000 ifetch 1 ,contru 
+4bd2 c000cbd8 beq hci_h4_type_cmd ,hci_h4_parse_packet_wait_len 
+4bd3 18408401 increase 1 ,temp 
+4bd4 c0014bd8 beq hci_h4_type_acl ,hci_h4_parse_packet_wait_len 
+4bd5 18627e00 copy contru ,pdata 
+4bd6 60110058 hstore 2 ,core_uart_rrptr 
+4bd7 20600000 rtn 
+
+hci_h4_parse_packet_wait_len:
+4bd8 68110112 hfetch 2 ,core_uart_rxitems 
+4bd9 98467c00 isub temp ,null 
+4bda 24214bd8 nbranch hci_h4_parse_packet_wait_len ,positive 
+4bdb 78547c00 disable user 
+4bdc 1a220600 copy rega ,contru 
+4bdd 20404bee call h4_get_rx_payload_len 
+4bde 98408400 iadd temp ,temp 
+
+hci_h4_parse_packet_wait:
+4bdf 68110112 hfetch 2 ,core_uart_rxitems 
+4be0 98467c00 isub temp ,null 
+4be1 24214bdf nbranch hci_h4_parse_packet_wait ,positive 
+4be2 1a220600 copy rega ,contru 
+4be3 e8608000 ifetch 1 ,contru 
+4be4 c000cc3f beq hci_h4_type_cmd ,process_hci_cmd 
+4be5 20202a8c branch assert 
+
+h4_rx_discard_packet:
+4be6 44ffc01f bpatch patch1f_7 ,mem_patch1f 
+4be7 68110058 hfetch 2 ,core_uart_rrptr 
+4be8 98000600 iforce contru 
+4be9 20404bee call h4_get_rx_payload_len 
+4bea 98608600 iadd contru ,contru 
+4beb 18627e00 deposit contru 
+4bec 60110058 hstore 2 ,core_uart_rrptr 
+4bed 20600000 rtn 
+
+h4_get_rx_payload_len:
+4bee e8608000 ifetch 1 ,contru 
+4bef 18608602 increase 2 ,contru 
+4bf0 c0014bf3 beq hci_h4_type_acl ,h4_get_rx_payload_len_acl 
+4bf1 e8608000 ifetch 1 ,contru 
+4bf2 20600000 rtn 
+
+h4_get_rx_payload_len_acl:
+4bf3 e8610000 ifetch 2 ,contru 
+4bf4 20600000 rtn 
+
+h4_get_tx_ptr:
+4bf5 6811005e hfetch 2 ,core_uart_twptr 
+4bf6 194095fb increase -5 ,contwu 
+4bf7 99409400 iadd contwu ,contwu 
+4bf8 20600000 rtn 
+
+h4_send_packet_event:
+4bf9 d8400004 arg hci_h4_type_event ,temp 
+4bfa 20204bfc branch h4_send_packet 
+
+h4_send_packet_acl:
+4bfb d8400002 arg hci_h4_type_acl ,temp 
+
+h4_send_packet:
+4bfc 47004020 bpatchx patch20_0 ,mem_patch20 
+4bfd 1f20f201 increase 1 ,loopcnt 
+4bfe 6811005e hfetch 2 ,core_uart_twptr 
+4bff 1fe21400 copy pdata ,contwu 
+4c00 1f227e00 copy loopcnt ,pdata 
+4c01 e1488000 istoret 1 ,contwu 
+4c02 1fe0ffff increase -1 ,pdata 
+4c03 99409400 iadd contwu ,contwu 
+4c04 19427e00 copy contwu ,pdata 
+4c05 60010258 store 2 ,mem_hci_acl_tx_trigger_wptr 
+4c06 18427e00 copy temp ,pdata 
+4c07 c1010000 rtneq hci_h4_type_acl 
+4c08 68010258 fetch 2 ,mem_hci_acl_tx_trigger_wptr 
+4c09 6011005e hstore 2 ,core_uart_twptr 
+4c0a 20204c0b branch h4_send_acl_trigger_clear 
+
+h4_send_acl_trigger_clear:
+4c0b 58000000 setarg 0 
+4c0c 60010258 store 2 ,mem_hci_acl_tx_trigger_wptr 
+4c0d 20600000 rtn 
+
+hci_init:
+4c0e 20758000 rtn wake 
+4c0f 58004d28 setarg hci_idle_dispatch 
+4c10 600141f3 store 2 ,mem_cb_idle_process 
+4c11 580001a0 setarg uart_baud_115200 
+4c12 60014243 store uart_baud_len ,mem_baud 
+
+hci_lpm_init:
+4c13 58001800 setarg mem_h5rx_buf 
+4c14 60110054 hstore 2 ,core_uart_rsaddr 
+4c15 58001bff setarg mem_h5rx_buf_end 
+4c16 60110056 hstore 2 ,core_uart_readdr 
+4c17 58001c00 setarg mem_h5tx_buf 
+4c18 6011005a hstore 2 ,core_uart_tsaddr 
+4c19 20404c28 call hci_sel_init 
+
+hci_reinit:
+4c1a 70806200 jam 0x0 ,core_uart_ctrl 
+4c1b 58001c00 setarg mem_h5tx_buf 
+4c1c 6011005e hstore 2 ,core_uart_twptr 
+4c1d 60110060 hstore 2 ,core_uart_trptrp 
+4c1e 58001800 setarg mem_h5rx_buf 
+4c1f 60110058 hstore 2 ,core_uart_rrptr 
+4c20 60010244 store 2 ,mem_h5rx_rptr 
+
+hci_init_common:
+4c21 68110050 hfetch 2 ,core_clkoff 
+4c22 793ffe0f set0 clock_off_uart ,pdata 
+4c23 60110050 hstore 2 ,core_clkoff 
+4c24 204066ce call uart_set_baud_by_mem 
+4c25 70804301 jam uartclk_dpll ,core_uart_clksel 
+4c26 70806281 jam uart_ctrl_h4 ,core_uart_ctrl 
+4c27 20600000 rtn 
+
+hci_sel_init:
+4c28 58001fff setarg mem_h5tx_buf_end 
+4c29 6011005c hstore 2 ,core_uart_teaddr 
+4c2a 68108081 hfetch 1 ,core_gpio_sel1 
+4c2b 1fe1fe07 or_into 0x07 ,pdata 
+4c2c 60108081 hstore 1 ,core_gpio_sel1 
+4c2d 20600000 rtn 
+
+hci_rx_packet:
+4c2e 4700c020 bpatchx patch20_1 ,mem_patch20 
+4c2f 6810810c hfetch 1 ,core_uart_status 
+4c30 98002400 iforce regb 
+4c31 c301cc37 bbit0 uart_status_rx_fifo_empty ,hci_rx_packet_cont 
+4c32 68110112 hfetch 2 ,core_uart_rxitems 
+4c33 98002600 iforce regc 
+4c34 d840044f arg 0x44f ,temp 
+4c35 98467c00 isub temp ,null 
+4c36 24628000 nrtn zero 
+
+hci_rx_packet_cont:
+4c37 68110058 hfetch 2 ,core_uart_rrptr 
+4c38 98000600 iforce contru 
+4c39 20204bc8 branch hci_rx_h4 
+
+uart_send_byte:
+4c3a 6818810c hfetcht 1 ,core_uart_status 
+4c3b 284ffe06 isolate1 6 ,temp 
+4c3c 2020cc3a branch uart_send_byte ,true 
+4c3d 60108015 hstore 1 ,core_uart_txd 
+4c3e 20600000 rtn 
+
+process_hci_cmd:
+4c3f 47014020 bpatchx patch20_2 ,mem_patch20 
+4c40 6800c1ce fetch 1 ,mem_hci_cmd 
+4c41 203a4c44 branch process_hci_cmd_cont ,blank 
+4c42 78347c00 enable user 
+4c43 20600000 rtn 
+
+process_hci_cmd_cont:
+4c44 e8610000 ifetch 2 ,contru 
+4c45 98006000 iforce alarm 
+4c46 98000e00 iforce queue 
+4c47 e8608000 ifetch 1 ,contru 
+4c48 98000400 iforce temp 
+4c49 1e0b7e00 rshift2 alarm ,pdata 
+4c4a 1fecfe00 rshift8 pdata ,pdata 
+4c4b c01fcc4d beq hci_ogf_vendor_specific ,phci_grp_vendor_specific 
+4c4c 20600000 rtn 
+
+phci_grp_vendor_specific:
+4c4d 4701c020 bpatchx patch20_3 ,mem_patch20 
+4c4e 18e27e00 deposit queue 
+4c4f c0004cdc beq hci_vendor_cmd_reset ,hci_normal_reply 
+4c50 c000cc66 beq hci_vendor_cmd_chipid ,phci_grp_vendor_chipid 
+4c51 c0014c6b beq hci_vendor_cmd_baud ,phci_grp_vendor_baud 
+4c52 c001cc7a beq hci_vendor_cmd_patch ,phci_grp_vendor_patch 
+4c53 c0024cb3 beq hci_vendor_cmd_patch_done ,phci_grp_vendor_done 
+4c54 c002ccdc beq hci_vendor_cmd_echo ,hci_normal_reply 
+4c55 c0034cc6 beq hci_vendor_cmd_bdaddr ,phci_grp_vendor_bdaddr 
+4c56 c003cc5c beq hci_vendor_cmd_enter_lpm ,phci_grp_vendor_enter_lpm 
+4c57 c0084cc9 beq hci_vendor_cmd_mem ,phci_grp_vendor_mem 
+4c58 c008ccd1 beq hci_vendor_cmd_eep ,phci_grp_vendor_eep 
+4c59 c0094ca5 beq hci_vendor_cmd_patch_sec_init ,phci_grp_vendor_patch_sec_init 
+4c5a c009cc85 beq hci_vendor_cmd_patch_sec ,phci_grp_vendor_patch_sec 
+4c5b 20204cdc branch hci_normal_reply 
+
+phci_grp_vendor_enter_lpm:
+4c5c 20404cdc call hci_normal_reply 
+4c5d 20407f9e call wait_uarttx 
+4c5e 2040688c call gpio_pu_uart_tx 
+
+hci_enter_lpm:
+4c5f 204033d2 call app_put_lpm_wake_lock 
+4c60 204033d9 call app_l2cap_flow_control_enable 
+4c61 2020688f branch gpio_rx_config_input_with_pu 
+
+hci_exit_lpm:
+4c62 70424500 jam hci_rx_ready ,mem_hci_lt_rx_state 
+4c63 204033d0 call app_get_lpm_wake_lock 
+4c64 20404c13 call hci_lpm_init 
+4c65 202033db branch app_l2cap_flow_control_disable 
+
+phci_grp_vendor_chipid:
+4c66 20404cf2 call hci_get_cmd_complete_ptr 
+4c67 68110000 hfetch 2 ,core_chipid 
+4c68 e1410000 istore 2 ,contwu 
+4c69 18007206 force 6 ,loopcnt 
+4c6a 20204cdd branch hci_command_complete 
+
+phci_grp_vendor_baud:
+4c6b e8610000 ifetch 2 ,contru 
+4c6c 60014243 store 2 ,mem_baud 
+4c6d 60110052 hstore 2 ,core_uart_baud 
+4c6e 20600000 rtn 
+
+phci_grp_vendor_patch_common:
+4c6f e8608000 ifetch 1 ,contru 
+4c70 1fe20400 copy pdata ,temp 
+4c71 60108024 hstore 1 ,core_ucode_low 
+4c72 e8608000 ifetch 1 ,contru 
+4c73 98408400 iadd temp ,temp 
+4c74 79207e07 set1 7 ,pdata 
+4c75 60108023 hstore 1 ,core_ucode_ctrl 
+4c76 e8608000 ifetch 1 ,contru 
+4c77 98408400 iadd temp ,temp 
+4c78 1fe27200 copy pdata ,loopcnt 
+4c79 20600000 rtn 
+
+phci_grp_vendor_patch:
+4c7a c515ccc4 bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad 
+4c7b 20404c6f call phci_grp_vendor_patch_common 
+
+phci_grp_vendor_patch_loop:
+4c7c e8608000 ifetch 1 ,contru 
+4c7d 60108025 hstore 1 ,core_ucode_data 
+4c7e 98408400 iadd temp ,temp 
+4c7f c2004c7c loop phci_grp_vendor_patch_loop 
+
+phci_grp_vendor_patch_check_sum:
+4c80 184104ff and temp ,0xff ,temp 
+4c81 e8608000 ifetch 1 ,contru 
+4c82 98467c00 isub temp ,null 
+4c83 2422ccc4 nbranch phci_grp_vendor_patch_bad ,zero 
+4c84 20204cdc branch hci_normal_reply 
+
+phci_grp_vendor_patch_sec:
+4c85 c595ccc4 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad 
+4c86 20404c6f call phci_grp_vendor_patch_common 
+4c87 60040a9a store 8 ,mem_pdatatemp 
+
+phci_grp_vendor_patch_sec_loop:
+4c88 20407422 call do_aes_cbc 
+4c89 df200010 arg 16 ,loopcnt 
+4c8a d8a00ac2 arg mem_temp_block0 ,contw 
+4c8b 20404ca0 call load_uart_sum_loop 
+4c8c 600c0aa2 storet 8 ,mem_temp 
+4c8d d8a00ad2 arg mem_temp_block2 ,contw 
+4c8e 20407497 call store_aes_result 
+4c8f da200ad2 arg mem_temp_block2 ,rega 
+4c90 da400ac2 arg mem_temp_block0 ,regb 
+4c91 d8a00ae2 arg mem_temp_block3 ,contw 
+4c92 20407352 call xor16 
+4c93 df200010 arg 16 ,loopcnt 
+4c94 d8c00ae2 arg mem_temp_block3 ,contr 
+4c95 20404c9c call load_ucode_only_loop 
+4c96 680c0aa2 fetcht 8 ,mem_temp 
+4c97 68040a9a fetch 8 ,mem_pdatatemp 
+4c98 1fe0fff0 increase -16 ,pdata 
+4c99 60040a9a store 8 ,mem_pdatatemp 
+4c9a 243a4c88 nbranch phci_grp_vendor_patch_sec_loop ,blank 
+4c9b 20204c80 branch phci_grp_vendor_patch_check_sum 
+
+load_ucode_only_loop:
+4c9c e8c08000 ifetch 1 ,contr 
+4c9d 60108025 hstore 1 ,core_ucode_data 
+4c9e c2004c9c loop load_ucode_only_loop 
+4c9f 20600000 rtn 
+
+load_uart_sum_loop:
+4ca0 e8608000 ifetch 1 ,contru 
+4ca1 e0a08000 istore 1 ,contw 
+4ca2 98408400 iadd temp ,temp 
+4ca3 c2004ca0 loop load_uart_sum_loop 
+4ca4 20600000 rtn 
+
+phci_grp_vendor_patch_sec_init:
+4ca5 c595ccc4 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad 
+4ca6 d8400000 arg 0 ,temp 
+4ca7 df200010 arg 16 ,loopcnt 
+4ca8 d8a00ac2 arg mem_temp_block0 ,contw 
+4ca9 20404ca0 call load_uart_sum_loop 
+4caa 68108085 hfetch 1 ,core_gpio_key2 
+4cab 1fe17efd and_into 0xfd ,pdata 
+4cac 60108085 hstore 1 ,core_gpio_key2 
+4cad d8c00ac2 arg mem_temp_block0 ,contr 
+4cae df200010 arg 16 ,loopcnt 
+4caf 20407478 call aes_load_data 
+4cb0 20407428 call aes_init 
+4cb1 20407491 call aes_clear_data 
+4cb2 20204c80 branch phci_grp_vendor_patch_check_sum 
+
+phci_grp_vendor_done:
+4cb3 df200020 arg 0x20 ,loopcnt 
+4cb4 d8a04000 arg mem_patch00 ,contw 
+4cb5 d8400000 arg 0 ,temp 
+
+phci_grp_vendor_done_loop:
+4cb6 e8608000 ifetch 1 ,contru 
+4cb7 e0a08000 istore 1 ,contw 
+4cb8 98408400 iadd temp ,temp 
+4cb9 c2004cb6 loop phci_grp_vendor_done_loop 
+4cba 184104ff and temp ,0xff ,temp 
+4cbb e8608000 ifetch 1 ,contru 
+4cbc 98467c00 isub temp ,null 
+4cbd 2422ccc4 nbranch phci_grp_vendor_patch_bad ,zero 
+4cbe 70802300 jam 0 ,core_ucode_ctrl 
+4cbf 20404cdc call hci_normal_reply 
+4cc0 20404be6 call h4_rx_discard_packet 
+4cc1 204064a3 call clear_key_buf 
+4cc2 20407f9e call wait_uarttx 
+4cc3 20202001 branch soft_reset 
+
+phci_grp_vendor_patch_bad:
+4cc4 70802300 jam 0 ,core_ucode_ctrl 
+4cc5 20202000 branch start 
+
+phci_grp_vendor_bdaddr:
+4cc6 e8630000 ifetch 6 ,contru 
+4cc7 600340a0 store 6 ,mem_lap 
+4cc8 20204cdc branch hci_normal_reply 
+
+phci_grp_vendor_mem:
+4cc9 e8608000 ifetch 1 ,contru 
+4cca 6000825a store 1 ,mem_hci_curr_len 
+4ccb 1fe27200 copy pdata ,loopcnt 
+4ccc e8610000 ifetch 2 ,contru 
+4ccd 6001025b store 2 ,mem_hci_curr_target 
+4cce 1fe20a00 copy pdata ,contw 
+4ccf 204066fd call uart_copy_rx_bytes 
+4cd0 20204cdc branch hci_normal_reply 
+
+phci_grp_vendor_eep:
+4cd1 e8608000 ifetch 1 ,contru 
+4cd2 6000825a store 1 ,mem_hci_curr_len 
+4cd3 1fe27200 copy pdata ,loopcnt 
+4cd4 e8610000 ifetch 2 ,contru 
+4cd5 6001025b store 2 ,mem_hci_curr_target 
+4cd6 d8a01000 arg mem_l2cap_rxbuff1 ,contw 
+4cd7 204066fd call uart_copy_rx_bytes 
+4cd8 6808825a fetcht 1 ,mem_hci_curr_len 
+4cd9 da201000 arg mem_l2cap_rxbuff1 ,rega 
+4cda 6801025b fetch 2 ,mem_hci_curr_target 
+4cdb 20206608 branch iicd_write_ota_data 
+
+hci_normal_reply:
+4cdc 18007204 force 4 ,loopcnt 
+
+hci_command_complete:
+4cdd 20404cf4 call hci_get_payload_ptr 
+4cde 18007e01 force 0x1 ,pdata 
+4cdf e1408000 istore 1 ,contwu 
+4ce0 1e027e00 deposit alarm 
+4ce1 e1418000 istore 3 ,contwu 
+4ce2 18000e0e force hci_event_command_complete ,queue 
+
+hci_send_event:
+4ce3 47024020 bpatchx patch20_4 ,mem_patch20 
+4ce4 20404cf6 call hci_get_packet_ptr 
+4ce5 18e27e00 deposit queue 
+4ce6 e1408000 istore 1 ,contwu 
+4ce7 1f227e00 deposit loopcnt 
+4ce8 e1408000 istore 1 ,contwu 
+
+hci_send_event_raw:
+4ce9 18000e05 force 5 ,queue 
+4cea 1f20f202 increase 2 ,loopcnt 
+
+hci_send_packet:
+4ceb 20204bf9 branch h4_send_packet_event 
+
+hci_send_commu_ready_event:
+4cec 18000eff force hci_event_vendor_specific ,queue 
+4ced 20404cf4 call hci_get_payload_ptr 
+4cee 58000001 setarg hci_vendor_event_commu_ready 
+4cef e1408000 istore 1 ,contwu 
+4cf0 18007201 force 1 ,loopcnt 
+4cf1 20204ce3 branch hci_send_event 
+
+hci_get_cmd_complete_ptr:
+4cf2 1800140c force 12 ,contwu 
+4cf3 20204cf7 branch hci_get_tx_ptr 
+
+hci_get_payload_ptr:
+4cf4 18001408 force 8 ,contwu 
+4cf5 20204cf7 branch hci_get_tx_ptr 
+
+hci_get_packet_ptr:
+4cf6 18001406 force 6 ,contwu 
+
+hci_get_tx_ptr:
+4cf7 20204bf5 branch h4_get_tx_ptr 
+
+calc_tx_crc16:
+4cf8 7827fc00 pulse crc16 
+4cf9 7824fc00 enable enable_crc 
+
+crcloop:
+4cfa e9408000 ifetch 1 ,contwu 
+4cfb 08008008 inject bucket ,8 
+4cfc c2004cfa loop crcloop 
+4cfd 78247c00 enable enable_parity 
+4cfe 08008010 inject bucket ,16 
+4cff 78447c00 disable enable_parity 
+4d00 7844fc00 disable enable_crc 
+4d01 7847fc00 disable crc16 
+4d02 1ff0fe00 byteswap pdata ,pdata 
+4d03 20600000 rtn 
+
+cmd_exit:
+4d04 7041ce00 jam 0 ,mem_hci_cmd 
+4d05 20600000 rtn 
+
+cmd_check_plap:
+4d06 680341d0 fetch 6 ,mem_hci_plap 
+4d07 680b0040 fetcht 6 ,mem_plap 
+4d08 98467c00 isub temp ,null 
+4d09 20600000 rtn 
+
+cmd_pair:
+4d0a 6800804b fetch 1 ,mem_op 
+4d0b c2814d0f bbit1 op_inrand_req ,cmd_pair_passive 
+4d0c 204062ef call tid_initiate 
+4d0d 70007c08 jam lmp_in_rand ,mem_lmo_opcode2 
+4d0e 20204d04 branch cmd_exit 
+
+cmd_pair_passive:
+4d0f 793ffe02 set0 op_inrand_req ,pdata 
+4d10 6000804b store 1 ,mem_op 
+4d11 20406001 call lmp_accept_inrand 
+4d12 58000000 setarg 0 
+4d13 7934fe01 setflag master ,smap_lmptid ,pdata 
+4d14 6000807f store 1 ,mem_lmo_tid2 
+4d15 20204d04 branch cmd_exit 
+4d16 20600000 rtn 
+
+cmd_in_sniff:
+4d17 70007c17 jam lmp_sniff_req ,mem_lmo_opcode2 
+4d18 d8a004d9 arg mem_sniff_payload ,contw 
+4d19 58000000 setarg 0 
+4d1a 2d0ffe1b isolate1 27 ,clke_bt 
+4d1b 7920fe01 setflag true ,1 ,pdata 
+4d1c e0a08000 istore 1 ,contw 
+4d1d 58000000 setarg 0 
+4d1e e0a10000 istore 2 ,contw 
+4d1f 680141e3 fetch 2 ,mem_sniff_param_interval 
+4d20 e0a10000 istore 2 ,contw 
+4d21 6800c1e5 fetch 1 ,mem_sniff_param_attempt 
+4d22 e0a10000 istore 2 ,contw 
+4d23 6800c1e7 fetch 1 ,mem_sniff_param_timeout 
+4d24 e0a10000 istore 2 ,contw 
+4d25 20204d04 branch cmd_exit 
+
+cmd_exit_sniff:
+4d26 70007c18 jam lmp_unsniff_req ,mem_lmo_opcode2 
+4d27 20204d04 branch cmd_exit 
+
+hci_idle_dispatch:
+4d28 20406899 call gpio_check_uart_state 
+4d29 20608000 rtn true 
+4d2a d8400007 arg uart_wakeup_rx ,temp 
+4d2b 2040681d call gpio_get_bit 
+4d2c 2420cd2f nbranch uart_wake_up ,true 
+4d2d 70424501 jam hci_rx_wake ,mem_hci_lt_rx_state 
+4d2e 20600000 rtn 
+
+uart_wake_up:
+4d2f 6800c245 fetch 1 ,mem_hci_lt_rx_state 
+4d30 c1808000 rtnne hci_rx_wake 
+4d31 20404c62 call hci_exit_lpm 
+4d32 20204cec branch hci_send_commu_ready_event 
+
+hid_rx_process:
+4d33 4702c020 bpatchx patch20_5 ,mem_patch20 
+4d34 68010264 fetch 2 ,mem_l2cap_payload_ptr 
+4d35 1fe20c00 copy pdata ,contr 
+4d36 e8c08000 ifetch 1 ,contr 
+4d37 1fe1040f and pdata ,0x0f ,temp 
+4d38 1ff1fe00 rshift4 pdata ,pdata 
+4d39 c004cd53 beq hid_type_set_idle ,hid_rx_process_handshake 
+4d3a c003cd53 beq hid_type_set_protocol ,hid_rx_process_handshake 
+4d3b c0054d5f beq hid_type_data ,hid_rx_process_data 
+4d3c c002cd4b beq hid_type_set_report ,hid_rx_process_set_report 
+4d3d c000cd3f beq hid_type_control ,hid_rx_process_hid_control 
+4d3e 20600000 rtn 
+
+hid_rx_process_hid_control:
+4d3f 18427e00 copy temp ,pdata 
+4d40 c002cd43 beq hid_control_p_virtualcableunplug ,hid_rx_process_virtual_cable_unplug 
+4d41 c001cd4a beq hid_control_p_suspend ,hid_rx_process_suspend 
+4d42 20600000 rtn 
+
+hid_rx_process_virtual_cable_unplug:
+4d43 700a9927 jam bt_evt_virtual_cable_unplug ,mem_fifo_temp 
+4d44 20407d86 call ui_ipc_send_event 
+4d45 6800c092 fetch 1 ,mem_device_option 
+4d46 c4030000 rtnbit0 dvc_op_mouse 
+4d47 18427e00 copy temp ,pdata 
+4d48 c002c38e beq hid_control_p_virtualcableunplug ,mouse_irtual_cable_unplug 
+4d49 20600000 rtn 
+
+hid_rx_process_suspend:
+4d4a 20600000 rtn 
+
+hid_rx_process_set_report:
+4d4b 20404d5f call hid_rx_process_data 
+4d4c da200001 arg 0x01 ,rega 
+4d4d 20404d63 call hid_malloc_tx_buff 
+4d4e 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+4d4f e0a10000 istore 2 ,contw 
+4d50 58000000 setarg 0x00 
+4d51 e0a08000 istore 1 ,contw 
+4d52 20600000 rtn 
+
+hid_rx_process_handshake:
+4d53 da200001 arg 1 ,rega 
+4d54 20404d63 call hid_malloc_tx_buff 
+4d55 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+4d56 e0a10000 istore 2 ,contw 
+4d57 58000000 setarg 0 
+4d58 e0a08000 istore 1 ,contw 
+4d59 700a8e01 jam 1 ,mem_ui_data_txbuff_length 
+4d5a 6800c252 fetch 1 ,mem_hid_control_state 
+4d5b 79207e06 set1 l2cap_channel_hid_handshake_done 
+4d5c 6000c252 store 1 ,mem_hid_control_state 
+4d5d 700a9912 jam bt_evt_hid_handshake ,mem_fifo_temp 
+4d5e 20207d86 branch ui_ipc_send_event 
+
+hid_rx_process_data:
+4d5f e8c08000 ifetch 1 ,contr 
+4d60 c000cd62 beq hid_report_id_kb ,hid_rx_process_data_hid_kb 
+4d61 20600000 rtn 
+
+hid_rx_process_data_hid_kb:
+4d62 20600000 rtn 
+
+hid_malloc_tx_buff:
+4d63 20405240 call l2cap_malloc 
+4d64 1a220400 copy rega ,temp 
+4d65 60088a8e storet 1 ,mem_ui_data_txbuff_length 
+4d66 1fe20a00 copy pdata ,contw 
+4d67 1a227e00 copy rega ,pdata 
+4d68 e0a10000 istore 2 ,contw 
+4d69 20600000 rtn 
+
+l2cap_init:
+4d6a 2035cd6f branch l2cap_init_wake ,wake 
+
+l2cap_init_work:
+4d6b 58004365 setarg mem_l2cap_xmem_end 
+4d6c d8a04246 arg mem_l2cap_xmem_start ,contw 
+4d6d 98a67200 isub contw ,loopcnt 
+4d6e 20407ed4 call clear_mem 
+
+l2cap_init_wake:
+4d6f 47034020 bpatchx patch20_6 ,mem_patch20 
+4d70 58000551 setarg mem_sdp_mem_end 
+4d71 d8a00511 arg mem_sdp_mem_start ,contw 
+4d72 98a67200 isub contw ,loopcnt 
+4d73 20407ed4 call clear_mem 
+4d74 580002c9 setarg mem_l2cap_mem_end 
+4d75 d8a0025d arg mem_l2cap_mem_start ,contw 
+4d76 98a67200 isub contw ,loopcnt 
+4d77 20407ed4 call clear_mem 
+4d78 20205318 branch l2cap_lpm_load_txbuf 
+
+process_rx_l2cap_pkt:
+4d79 4703c020 bpatchx patch20_7 ,mem_patch20 
+4d7a 18c20400 copy contr ,temp 
+4d7b 18420c00 copy temp ,contr 
+4d7c e8c10000 ifetch 2 ,contr 
+4d7d 60010266 store 2 ,mem_l2cap_rx_pkt_length 
+4d7e e8c10000 ifetch 2 ,contr 
+4d7f 60010268 store 2 ,mem_l2cap_rx_cid 
+4d80 18c27e00 deposit contr 
+4d81 60010264 store 2 ,mem_l2cap_payload_ptr 
+4d82 6800c681 fetch 1 ,memui_reconnect_mode 
+4d83 c0004d85 beq no_reconnection ,l2cap_rx_multiplexing 
+4d84 202050ef branch ml2cap_rx_multiplexing 
+
+l2cap_rx_multiplexing:
+4d85 68010266 fetch 2 ,mem_l2cap_rx_pkt_length 
+4d86 203a4dfc branch l2cap_rx_reset_state ,blank 
+4d87 47044021 bpatchx patch21_0 ,mem_patch21 
+4d88 68008268 fetch 1 ,mem_l2cap_rx_cid 
+4d89 c000cd9d beq l2cap_signal_channel ,l2cap_call_proc_signal 
+
+l2cap_rx_multiplexing0:
+4d8a c0284de0 beq l2cap_sdp_channel ,l2cap_call_proc_sdp 
+4d8b c028cdf5 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm 
+4d8c c0294df3 beq l2cap_hid_control_channel ,l2cap_call_proc_hid 
+4d8d c029cdf3 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid 
+4d8e 20204dfc branch l2cap_rx_reset_state 
+
+l2cap_check_map:
+4d8f 4704c021 bpatchx patch21_1 ,mem_patch21 
+4d90 2040527e call l2cap_malloc_get_full_map 
+4d91 6800c256 fetch 1 ,mem_used_map 
+4d92 c0004d9b beq 0 ,set_pdata_0 
+4d93 c000cd9b beq 1 ,set_pdata_0 
+4d94 c0014d9b beq 2 ,set_pdata_0 
+4d95 c001cd9b beq 3 ,set_pdata_0 
+4d96 c040cd9b beq 0x81 ,set_pdata_0 
+4d97 c0604d9b beq 0xc0 ,set_pdata_0 
+4d98 c0404d9b beq 0x80 ,set_pdata_0 
+4d99 c0204d9b beq 0x40 ,set_pdata_0 
+4d9a 20600000 rtn 
+
+set_pdata_0:
+4d9b 58000000 setarg 0 
+4d9c 20600000 rtn 
+
+l2cap_call_proc_signal:
+4d9d 20404d8f call l2cap_check_map 
+4d9e 247a0000 nrtn blank 
+
+l2cap_call_proc_signal0:
+4d9f 204052b8 call l2cap_malloc_signal_channel 
+4da0 20404e01 call l2cap_process_signal_pkt 
+4da1 6809026f fetcht 2 ,mem_l2cap_signal_tx_length 
+4da2 203a4dfb branch l2cap_call_proc_no_reply ,blank 
+4da3 204052c1 call l2cap_get_signal_tx_buff 
+4da4 6801026f fetch 2 ,mem_l2cap_signal_tx_length 
+4da5 e0a10000 istore 2 ,contw 
+4da6 18007e01 force l2cap_signal_channel ,pdata 
+4da7 e0a10000 istore 2 ,contw 
+4da8 20204dfc branch l2cap_rx_reset_state 
+
+l2cap_call_proc_sigal_pending:
+4da9 6800c364 fetch 1 ,mem_l2cap_pending_item 
+4daa 207a0000 rtn blank 
+4dab 1fe22200 copy pdata ,rega 
+4dac 47054021 bpatchx patch21_2 ,mem_patch21 
+4dad 680202d5 fetch 4 ,mem_l2cap_sdpres_delay_time 
+4dae d8400100 arg 0x100 ,temp 
+4daf 98408400 iadd temp ,temp 
+4db0 1c427e00 copy clkn_bt ,pdata 
+4db1 98467c00 isub temp ,null 
+4db2 24610000 nrtn positive 
+4db3 70436400 jam 0 ,mem_l2cap_pending_item 
+4db4 1a227e00 copy rega ,pdata 
+4db5 c0284db7 beq l2cap_sdp_channel ,l2cap_sdp_conn_succ 
+4db6 20202a8c branch assert 
+
+l2cap_sdp_conn_succ:
+4db7 d9000000 arg 0 ,debug 
+4db8 204052b8 call l2cap_malloc_signal_channel 
+4db9 20404e7a call restore_l2cap_req_param 
+4dba 204052c3 call l2cap_get_signal_tx_payload 
+4dbb 20407ea8 call save_cont_pointers 
+4dbc 20404ead call send_connection_sdp_res 
+4dbd 204052c1 call l2cap_get_signal_tx_buff 
+4dbe 5800000c setarg 0x000c 
+4dbf e0a10000 istore 2 ,contw 
+4dc0 18007e01 force l2cap_signal_channel ,pdata 
+4dc1 e0a10000 istore 2 ,contw 
+4dc2 20204dfc branch l2cap_rx_reset_state 
+
+l2cap_reset_sdp_map:
+4dc3 4705c021 bpatchx patch21_3 ,mem_patch21 
+4dc4 68010275 fetch 2 ,mem_sdp_tx_pkt_length 
+4dc5 1fe0fe04 increase 4 ,pdata 
+4dc6 1ff1fe00 rshift4 pdata ,pdata 
+4dc7 1fe97e00 rshift3 pdata ,pdata 
+4dc8 1fe08401 add pdata ,1 ,temp 
+4dc9 d8c04260 arg mem_tx_fifo3 ,contr 
+4dca e8c18000 ifetch 3 ,contr 
+4dcb 207a0000 rtn blank 
+4dcc 60018ac2 store 3 ,mem_tx_fifo_map_temp 
+4dcd 68008ac2 fetch 1 ,mem_tx_fifo_map_temp 
+4dce 1fe22200 copy pdata ,rega 
+4dcf 20404dd3 call check_l2cap_map 
+4dd0 1a427e00 copy regb ,pdata 
+4dd1 6000c260 store 1 ,mem_tx_fifo3 
+4dd2 20600000 rtn 
+
+check_l2cap_map:
+4dd3 d8e00000 arg 0 ,queue 
+4dd4 da400000 arg 0 ,regb 
+
+check_l2cap_map_loop:
+4dd5 18e67c07 sub queue ,7 ,null 
+4dd6 24610000 nrtn positive 
+4dd7 aa2fffff qisolate1 rega 
+4dd8 2020cdda branch check_l2cap_map_used ,true 
+4dd9 20204dde branch check_l2cap_map_used2 
+
+check_l2cap_map_used:
+4dda 18427e00 copy temp ,pdata 
+4ddb 203a4dde branch check_l2cap_map_used2 ,blank 
+4ddc f9202400 qset1 regb 
+4ddd 184085ff increase -1 ,temp 
+
+check_l2cap_map_used2:
+4dde 18e08e01 increase 1 ,queue 
+4ddf 20204dd5 branch check_l2cap_map_loop 
+
+l2cap_call_proc_sdp:
+4de0 20405274 call l2cap_malloc_is_fifo_empty 
+4de1 247a0000 nrtn blank 
+4de2 20404d8f call l2cap_check_map 
+4de3 247a0000 nrtn blank 
+4de4 204052c5 call l2cap_malloc_sdp_channel 
+4de5 20406e11 call sdp_process 
+4de6 20404dc3 call l2cap_reset_sdp_map 
+4de7 20204dec branch l2cap_call_proc_sdp_common 
+
+ml2cap_call_proc_sdp:
+4de8 20405274 call l2cap_malloc_is_fifo_empty 
+4de9 247a0000 nrtn blank 
+4dea 204052c5 call l2cap_malloc_sdp_channel 
+4deb 20406e11 call sdp_process 
+
+l2cap_call_proc_sdp_common:
+4dec 204052ce call l2cap_get_sdp_tx_buff 
+4ded 68010275 fetch 2 ,mem_sdp_tx_pkt_length 
+4dee 203a4dfb branch l2cap_call_proc_no_reply ,blank 
+4def e0a10000 istore 2 ,contw 
+4df0 68014248 fetch 2 ,mem_sdp_remote_cid 
+4df1 e0a10000 istore 2 ,contw 
+4df2 20204dfc branch l2cap_rx_reset_state 
+
+l2cap_call_proc_hid:
+4df3 20404d33 call hid_rx_process 
+4df4 20204dfc branch l2cap_rx_reset_state 
+
+l2cap_call_proc_rfcomm:
+4df5 47064021 bpatchx patch21_4 ,mem_patch21 
+4df6 70028400 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag 
+4df7 20406a8a call rfcomm_rx_process 
+4df8 68008284 fetch 1 ,mem_rfcomm_malloc_fail_flag 
+4df9 c1008000 rtneq rfcomm_malloc_fail 
+4dfa 20204dfc branch l2cap_rx_reset_state 
+
+l2cap_call_proc_no_reply:
+4dfb 20405264 call l2cap_malloc_discard 
+
+l2cap_rx_reset_state:
+4dfc 58000000 setarg 0 
+4dfd 60010266 store 2 ,mem_l2cap_rx_pkt_length 
+4dfe 60010268 store 2 ,mem_l2cap_rx_cid 
+4dff 70026a01 jam l2cap_rx_done ,mem_l2cap_rx_done 
+4e00 20600000 rtn 
+
+l2cap_process_signal_pkt:
+4e01 4706c021 bpatchx patch21_5 ,mem_patch21 
+4e02 204052c3 call l2cap_get_signal_tx_payload 
+4e03 18002400 force 0 ,regb 
+4e04 68010266 fetch 2 ,mem_l2cap_rx_pkt_length 
+4e05 1fe22600 copy pdata ,regc 
+4e06 68010264 fetch 2 ,mem_l2cap_payload_ptr 
+4e07 98000c00 iforce contr 
+
+l2cap_process_signal_pkt_loop:
+4e08 20404e10 call l2cap_process_one_signal 
+4e09 1a627e00 deposit regc 
+4e0a 1a60a7fc increase -4 ,regc 
+4e0b 1fe0fffc increase -4 ,pdata 
+4e0c 243a4e08 nbranch l2cap_process_signal_pkt_loop ,blank 
+4e0d 1a427e00 copy regb ,pdata 
+4e0e 6001026f store 2 ,mem_l2cap_signal_tx_length 
+4e0f 20600000 rtn 
+
+l2cap_process_one_signal:
+4e10 47074021 bpatchx patch21_6 ,mem_patch21 
+4e11 e8c08000 ifetch 1 ,contr 
+4e12 c000ce49 beq signal_cmd_reject ,l2cap_proc_signal_cmd_reject 
+4e13 c0014e51 beq signal_connect_req ,l2cap_proc_signal_connect_req 
+4e14 c001ced5 beq signal_connect_rsp ,l2cap_proc_signal_connect_rsp 
+4e15 c0024f05 beq signal_config_req ,l2cap_proc_signal_config_req 
+4e16 c002cfa2 beq signal_config_rsp ,l2cap_proc_signal_config_rsp 
+4e17 c0034fcb beq signal_disconnect_req ,l2cap_proc_signal_disconnect_req 
+4e18 c003d01b beq signal_disconnect_rsp ,l2cap_proc_signal_disconnect_rsp 
+4e19 c0045050 beq signal_echo_req ,l2cap_proc_signal_echo_req 
+4e1a c004d060 beq signal_echo_rsp ,l2cap_proc_signal_echo_rsp 
+4e1b c0054e1f beq signal_info_req ,l2cap_proc_signal_info_req 
+4e1c c005d061 beq signal_info_rsp ,l2cap_proc_signal_info_rsp 
+4e1d 20405062 call l2cap_reject_command 
+
+l2cap_process_one_signal_rtn:
+4e1e 20600000 rtn 
+
+l2cap_proc_signal_info_req:
+4e1f e8c08000 ifetch 1 ,contr 
+4e20 1fe20e00 copy pdata ,queue 
+4e21 e8c10000 ifetch 2 ,contr 
+4e22 1fe22200 copy pdata ,rega 
+4e23 1a627e00 copy regc ,pdata 
+4e24 9a262600 isub rega ,regc 
+4e25 5800000b setarg signal_info_rsp 
+4e26 e0a08000 istore 1 ,contw 
+4e27 18e27e00 copy queue ,pdata 
+4e28 e0a08000 istore 1 ,contw 
+4e29 e8c10000 ifetch 2 ,contr 
+
+l2cap_proc_signal_info_req_reply:
+4e2a c0014e2d beq l2cap_sig_ext_featrue ,l2cap_proc_signal_info_req_ext 
+4e2b c001ce33 beq l2cap_sig_fix_featrue ,l2cap_proc_signal_info_req_fix 
+4e2c 20600000 rtn 
+
+l2cap_proc_signal_info_req_ext:
+4e2d 58020008 setarg 0x020008 
+4e2e e0a30000 istore 6 ,contw 
+4e2f 58000280 setarg 0x0280 
+4e30 e0a20000 istore 4 ,contw 
+4e31 18007e0c force 12 ,pdata 
+4e32 20204e38 branch l2cap_proc_signal_info_req_common 
+
+l2cap_proc_signal_info_req_fix:
+4e33 5803000c setarg 0x3000c 
+4e34 e0a30000 istore 6 ,contw 
+4e35 58000006 setarg 0x0006 
+4e36 e0a40000 istore 8 ,contw 
+4e37 18007e10 force 16 ,pdata 
+
+l2cap_proc_signal_info_req_common:
+4e38 9a40a400 iadd regb ,regb 
+4e39 20204e1e branch l2cap_process_one_signal_rtn 
+
+ml2cap_proc_signal_info_req:
+4e3a e8c08000 ifetch 1 ,contr 
+4e3b 1fe20e00 copy pdata ,queue 
+4e3c e8c10000 ifetch 2 ,contr 
+4e3d 1fe22200 copy pdata ,rega 
+4e3e e8c10000 ifetch 2 ,contr 
+4e3f 60010aa2 store 2 ,mem_temp 
+4e40 1a627e00 copy regc ,pdata 
+4e41 9a262600 isub rega ,regc 
+4e42 204052c3 call l2cap_get_signal_tx_payload 
+4e43 5800000b setarg signal_info_rsp 
+4e44 e0a08000 istore 1 ,contw 
+4e45 18e27e00 copy queue ,pdata 
+4e46 e0a08000 istore 1 ,contw 
+4e47 68010aa2 fetch 2 ,mem_temp 
+4e48 20204e2a branch l2cap_proc_signal_info_req_reply 
+
+l2cap_proc_signal_cmd_reject:
+4e49 e8c08000 ifetch 1 ,contr 
+4e4a 1fe20e00 copy pdata ,queue 
+4e4b e8c10000 ifetch 2 ,contr 
+4e4c 1fe22200 copy pdata ,rega 
+4e4d 98c08c00 iadd contr ,contr 
+4e4e 1a627e00 copy regc ,pdata 
+4e4f 9a262600 isub rega ,regc 
+
+l2cap_proc_signal_cmd_reject_rtn:
+4e50 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_connect_req:
+4e51 20407ea8 call save_cont_pointers 
+4e52 20407ead call load_cont_pointers 
+4e53 d9000000 arg 0 ,debug 
+4e54 e8c08000 ifetch 1 ,contr 
+4e55 1fe20e00 copy pdata ,queue 
+4e56 e8c10000 ifetch 2 ,contr 
+4e57 1fe22200 copy pdata ,rega 
+4e58 e8c10000 ifetch 2 ,contr 
+4e59 1fe20400 copy pdata ,temp 
+4e5a e8c10000 ifetch 2 ,contr 
+4e5b 1fe21600 copy pdata ,timeup 
+4e5c 4707c021 bpatchx patch21_7 ,mem_patch21 
+4e5d 18427e00 copy temp ,pdata 
+4e5e c000ce64 beq psm_sdp ,l2cap_proc_signal_connect_req_sdp 
+4e5f c001ce86 beq psm_rfcomm ,l2cap_proc_signal_connect_req_rfcomm 
+4e60 c008ce92 beq psm_hid_control ,l2cap_proc_signal_connect_req_hid_ctrl 
+4e61 c009ce9d beq psm_hid_interrupt ,l2cap_proc_signal_connect_req_hid_int 
+4e62 20405062 call l2cap_reject_command 
+4e63 20204ed4 branch l2cap_proc_signal_connect_req_rtn 
+
+l2cap_proc_signal_connect_req_sdp:
+4e64 20407ea8 call save_cont_pointers 
+4e65 d8400050 arg l2cap_sdp_channel ,temp 
+4e66 68014248 fetch 2 ,mem_sdp_remote_cid 
+4e67 243a4ece nbranch already_connected ,blank 
+4e68 19627e00 copy timeup ,pdata 
+4e69 60014248 store 2 ,mem_sdp_remote_cid 
+4e6a 1c427e00 copy clkn_bt ,pdata 
+4e6b 600202d5 store 4 ,mem_l2cap_sdpres_delay_time 
+4e6c 20404e6e call store_l2cap_req_param 
+4e6d 20204ea9 branch send_connection_pending 
+
+store_l2cap_req_param:
+4e6e 600902d3 storet 2 ,mem_psm 
+4e6f 19627e00 deposit timeup 
+4e70 600102c9 store 2 ,mem_scid 
+4e71 1a227e00 deposit rega 
+4e72 600102cb store 2 ,mem_cmd_length 
+4e73 1a427e00 deposit regb 
+4e74 600102cd store 2 ,mem_tt2 
+4e75 1a627e00 deposit regc 
+4e76 600102cf store 2 ,mem_tt3 
+4e77 18e27e00 deposit queue 
+4e78 600102d1 store 2 ,mem_id 
+4e79 20600000 rtn 
+
+restore_l2cap_req_param:
+4e7a 680902d3 fetcht 2 ,mem_psm 
+4e7b 680102c9 fetch 2 ,mem_scid 
+4e7c 1fe21600 copy pdata ,timeup 
+4e7d 680102cb fetch 2 ,mem_cmd_length 
+4e7e 1fe22200 copy pdata ,rega 
+4e7f 680102cd fetch 2 ,mem_tt2 
+4e80 1fe22400 copy pdata ,regb 
+4e81 680102cf fetch 2 ,mem_tt3 
+4e82 1fe22600 copy pdata ,regc 
+4e83 680102d1 fetch 2 ,mem_id 
+4e84 1fe20e00 copy pdata ,queue 
+4e85 20600000 rtn 
+
+l2cap_proc_signal_connect_req_rfcomm:
+4e86 20407ea8 call save_cont_pointers 
+4e87 58000051 setarg l2cap_rfcomm_channel 
+4e88 d8400051 arg l2cap_rfcomm_channel ,temp 
+4e89 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+4e8a 243a4ece nbranch already_connected ,blank 
+4e8b 19627e00 copy timeup ,pdata 
+4e8c 6001424a store 2 ,mem_rfcomm_remote_cid 
+4e8d 6800c251 fetch 1 ,mem_rfcomm_state 
+4e8e 79207e00 set1 l2cap_channel_state_conn_req ,pdata 
+4e8f 79207e01 set1 l2cap_channel_state_conn_res ,pdata 
+4e90 6000c251 store 1 ,mem_rfcomm_state 
+4e91 20204eb1 branch send_connection_res 
+
+l2cap_proc_signal_connect_req_hid_ctrl:
+4e92 20407ea8 call save_cont_pointers 
+4e93 d8400052 arg l2cap_hid_control_channel ,temp 
+4e94 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+4e95 243a4ece nbranch already_connected ,blank 
+4e96 19627e00 copy timeup ,pdata 
+4e97 6001424c store 2 ,mem_hid_ctrl_remote_cid 
+4e98 6800c252 fetch 1 ,mem_hid_control_state 
+4e99 79207e00 set1 l2cap_channel_state_conn_req ,pdata 
+4e9a 79207e01 set1 l2cap_channel_state_conn_res ,pdata 
+4e9b 6000c252 store 1 ,mem_hid_control_state 
+4e9c 20204eb1 branch send_connection_res 
+
+l2cap_proc_signal_connect_req_hid_int:
+4e9d 20407ea8 call save_cont_pointers 
+4e9e 1b427e00 deposit clke 
+4e9f d8400053 arg l2cap_hid_interrupt_channel ,temp 
+4ea0 6801424e fetch 2 ,mem_hid_int_remote_cid 
+4ea1 243a4ece nbranch already_connected ,blank 
+4ea2 19627e00 copy timeup ,pdata 
+4ea3 6001424e store 2 ,mem_hid_int_remote_cid 
+4ea4 6800c253 fetch 1 ,mem_hid_interrupt_state 
+4ea5 79207e00 set1 l2cap_channel_state_conn_req ,pdata 
+4ea6 79207e01 set1 l2cap_channel_state_conn_res ,pdata 
+4ea7 6000c253 store 1 ,mem_hid_interrupt_state 
+4ea8 20204eb1 branch send_connection_res 
+
+send_connection_pending:
+4ea9 58000001 setarg l2cap_connect_pending 
+4eaa 6001027d store 2 ,meml2cap_t1 
+4eab 70436450 jam l2cap_sdp_channel ,mem_l2cap_pending_item 
+4eac 20204eb3 branch send_connection_res0 
+
+send_connection_sdp_res:
+4ead 6800c250 fetch 1 ,mem_sdp_state 
+4eae 79207e00 set1 l2cap_channel_state_conn_req ,pdata 
+4eaf 79207e01 set1 l2cap_channel_state_conn_res ,pdata 
+4eb0 6000c250 store 1 ,mem_sdp_state 
+
+send_connection_res:
+4eb1 58000000 setarg l2cap_connect_successful 
+4eb2 6001027d store 2 ,meml2cap_t1 
+
+send_connection_res0:
+4eb3 47084022 bpatchx patch22_0 ,mem_patch22 
+4eb4 20407ead call load_cont_pointers 
+4eb5 58000003 setarg signal_connect_rsp 
+4eb6 e0a08000 istore 1 ,contw 
+4eb7 18e27e00 copy queue ,pdata 
+4eb8 e0a08000 istore 1 ,contw 
+4eb9 58000008 setarg 0x0008 
+4eba e0a10000 istore 2 ,contw 
+4ebb 18427e00 copy temp ,pdata 
+4ebc e0a10000 istore 2 ,contw 
+4ebd 19627e00 copy timeup ,pdata 
+4ebe e0a10000 istore 2 ,contw 
+4ebf 6801027d fetch 2 ,meml2cap_t1 
+4ec0 c000cec9 beq l2cap_connect_pending ,connect_pending 
+4ec1 290c0000 isolate0 0 ,debug 
+4ec2 2020cec4 branch connect_suc ,true 
+4ec3 58000004 setarg l2cap_connect_refused_no_resources 
+
+connect_suc:
+4ec4 e0a10000 istore 2 ,contw 
+4ec5 18007e00 force 0x0000 ,pdata 
+4ec6 e0a10000 istore 2 ,contw 
+4ec7 5800000c setarg 12 
+4ec8 20204ed0 branch connect_req_update_byte_counts 
+
+connect_pending:
+4ec9 e0a10000 istore 2 ,contw 
+4eca 18007e02 force 0x0002 ,pdata 
+4ecb e0a10000 istore 2 ,contw 
+4ecc 5800000c setarg 12 
+4ecd 20204ed0 branch connect_req_update_byte_counts 
+
+already_connected:
+4ece 79201000 set1 0 ,debug 
+4ecf 20204eb1 branch send_connection_res 
+
+connect_req_update_byte_counts:
+4ed0 9a40a400 iadd regb ,regb 
+4ed1 1a627e00 copy regc ,pdata 
+4ed2 9a262600 isub rega ,regc 
+4ed3 20204ed4 branch l2cap_proc_signal_connect_req_rtn 
+
+l2cap_proc_signal_connect_req_rtn:
+4ed4 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_connect_rsp:
+4ed5 e8c08000 ifetch 1 ,contr 
+4ed6 1fe20e00 copy pdata ,queue 
+4ed7 e8c10000 ifetch 2 ,contr 
+4ed8 1fe22200 copy pdata ,rega 
+4ed9 1a627e00 copy regc ,pdata 
+4eda 9a262600 isub rega ,regc 
+4edb e8c10000 ifetch 2 ,contr 
+4edc 1fe21600 copy pdata ,timeup 
+4edd e8c10000 ifetch 2 ,contr 
+4ede 1fe20400 copy pdata ,temp 
+4edf 4708c022 bpatchx patch22_1 ,mem_patch22 
+4ee0 58000050 setarg l2cap_sdp_channel 
+4ee1 98467c00 isub temp ,null 
+4ee2 2022ceed branch l2cap_proc_signal_connect_rsp_sdp ,zero 
+4ee3 58000051 setarg l2cap_rfcomm_channel 
+4ee4 98467c00 isub temp ,null 
+4ee5 2022cef3 branch l2cap_proc_signal_connect_rsp_rfcomm ,zero 
+4ee6 58000052 setarg l2cap_hid_control_channel 
+4ee7 98467c00 isub temp ,null 
+4ee8 2022ceff branch l2cap_proc_signal_connect_rsp_hid_ctrl ,zero 
+4ee9 58000053 setarg l2cap_hid_interrupt_channel 
+4eea 98467c00 isub temp ,null 
+4eeb 2022cef9 branch l2cap_proc_signal_connect_rsp_hid_int ,zero 
+4eec 20600000 rtn 
+
+l2cap_proc_signal_connect_rsp_sdp:
+4eed 19627e00 copy timeup ,pdata 
+4eee 60014248 store 2 ,mem_sdp_remote_cid 
+4eef 6800c250 fetch 1 ,mem_sdp_state 
+4ef0 79207e01 set1 l2cap_channel_state_conn_res ,pdata 
+4ef1 6000c250 store 1 ,mem_sdp_state 
+4ef2 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_connect_rsp_rfcomm:
+4ef3 19627e00 copy timeup ,pdata 
+4ef4 6001424a store 2 ,mem_rfcomm_remote_cid 
+4ef5 6800c251 fetch 1 ,mem_rfcomm_state 
+4ef6 79207e01 set1 l2cap_channel_state_conn_res ,pdata 
+4ef7 6000c251 store 1 ,mem_rfcomm_state 
+4ef8 20600000 rtn 
+
+l2cap_proc_signal_connect_rsp_hid_int:
+4ef9 19627e00 copy timeup ,pdata 
+4efa 6001424c store 2 ,mem_hid_ctrl_remote_cid 
+4efb 6800c253 fetch 1 ,mem_hid_interrupt_state 
+4efc 79207e01 set1 l2cap_channel_state_conn_res ,pdata 
+4efd 6000c253 store 1 ,mem_hid_interrupt_state 
+4efe 20600000 rtn 
+
+l2cap_proc_signal_connect_rsp_hid_ctrl:
+4eff 19627e00 copy timeup ,pdata 
+4f00 6001424e store 2 ,mem_hid_int_remote_cid 
+4f01 6800c252 fetch 1 ,mem_hid_control_state 
+4f02 79207e01 set1 l2cap_channel_state_conn_res ,pdata 
+4f03 6000c252 store 1 ,mem_hid_control_state 
+4f04 20600000 rtn 
+
+l2cap_proc_signal_config_req:
+4f05 e8c08000 ifetch 1 ,contr 
+4f06 1fe20e00 copy pdata ,queue 
+4f07 e8c10000 ifetch 2 ,contr 
+4f08 1fe22200 copy pdata ,rega 
+4f09 1a627e00 copy regc ,pdata 
+4f0a 9a262600 isub rega ,regc 
+4f0b e8c10000 ifetch 2 ,contr 
+4f0c 1fe20400 copy pdata ,temp 
+4f0d 18422200 copy temp ,rega 
+4f0e 47094022 bpatchx patch22_2 ,mem_patch22 
+4f0f 58000050 setarg l2cap_sdp_channel 
+4f10 98467c00 isub temp ,null 
+4f11 2022cf1c branch l2cap_proc_signal_config_req_sdp ,zero 
+4f12 58000051 setarg l2cap_rfcomm_channel 
+4f13 98467c00 isub temp ,null 
+4f14 2022cf3a branch l2cap_proc_signal_config_req_rfcomm ,zero 
+4f15 58000052 setarg l2cap_hid_control_channel 
+4f16 98467c00 isub temp ,null 
+4f17 2022cf26 branch l2cap_proc_signal_config_req_hid_ctrl ,zero 
+4f18 58000053 setarg l2cap_hid_interrupt_channel 
+4f19 98467c00 isub temp ,null 
+4f1a 2022cf30 branch l2cap_proc_signal_config_req_hid_int ,zero 
+4f1b 20205062 branch l2cap_reject_command 
+
+l2cap_proc_signal_config_req_sdp:
+4f1c 18a21600 copy contw ,timeup 
+4f1d 6800c250 fetch 1 ,mem_sdp_state 
+4f1e 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+4f1f 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+4f20 6000c250 store 1 ,mem_sdp_state 
+4f21 19620a00 copy timeup ,contw 
+4f22 d9600050 arg l2cap_sdp_channel ,timeup 
+4f23 68014248 fetch 2 ,mem_sdp_remote_cid 
+4f24 1fe20400 copy pdata ,temp 
+4f25 20204f43 branch l2cap_send_config_rsp 
+
+l2cap_proc_signal_config_req_hid_ctrl:
+4f26 18a21600 copy contw ,timeup 
+4f27 6800c252 fetch 1 ,mem_hid_control_state 
+4f28 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+4f29 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+4f2a 6000c252 store 1 ,mem_hid_control_state 
+4f2b 19620a00 copy timeup ,contw 
+4f2c d9600052 arg l2cap_hid_control_channel ,timeup 
+4f2d 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+4f2e 1fe20400 copy pdata ,temp 
+4f2f 20204f43 branch l2cap_send_config_rsp 
+
+l2cap_proc_signal_config_req_hid_int:
+4f30 18a21600 copy contw ,timeup 
+4f31 6800c253 fetch 1 ,mem_hid_interrupt_state 
+4f32 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+4f33 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+4f34 6000c253 store 1 ,mem_hid_interrupt_state 
+4f35 19620a00 copy timeup ,contw 
+4f36 d9600053 arg l2cap_hid_interrupt_channel ,timeup 
+4f37 6801424e fetch 2 ,mem_hid_int_remote_cid 
+4f38 1fe20400 copy pdata ,temp 
+4f39 20204f43 branch l2cap_send_config_rsp 
+
+l2cap_proc_signal_config_req_rfcomm:
+4f3a 18a21600 copy contw ,timeup 
+4f3b 6800c251 fetch 1 ,mem_rfcomm_state 
+4f3c 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+4f3d 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+4f3e 6000c251 store 1 ,mem_rfcomm_state 
+4f3f 19620a00 copy timeup ,contw 
+4f40 d9600051 arg l2cap_rfcomm_channel ,timeup 
+4f41 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+4f42 1fe20400 copy pdata ,temp 
+
+l2cap_send_config_rsp:
+4f43 4709c022 bpatchx patch22_3 ,mem_patch22 
+4f44 58000005 setarg signal_config_rsp 
+4f45 e0a08000 istore 1 ,contw 
+4f46 18e27e00 copy queue ,pdata 
+4f47 e0a08000 istore 1 ,contw 
+4f48 58000006 setarg 0x0006 
+4f49 e0a10000 istore 2 ,contw 
+4f4a 18427e00 copy temp ,pdata 
+4f4b e0a10000 istore 2 ,contw 
+4f4c 18007e00 force 0x00 ,pdata 
+4f4d e0a10000 istore 2 ,contw 
+4f4e 18007e00 force l2cap_config_success ,pdata 
+4f4f e0a10000 istore 2 ,contw 
+4f50 18007e0a force 10 ,pdata 
+4f51 9a40a400 iadd regb ,regb 
+4f52 60090282 storet 2 ,mem_config_req_dest_cid 
+4f53 18e27e00 copy queue ,pdata 
+4f54 60008281 store 1 ,mem_config_identifier 
+4f55 18007e50 force l2cap_sdp_channel ,pdata 
+4f56 a961fe00 icompare 0xff ,timeup 
+4f57 2020cf59 branch l2cap_send_config_rsp_is_sdp ,true 
+4f58 1fe0fe01 increase 1 ,pdata 
+
+l2cap_send_config_rsp_is_sdp:
+4f59 20600000 rtn 
+
+l2cap_check_channel_state:
+4f5a 78547c00 disable user 
+4f5b c3810000 rtnbit1 l2cap_channel_state_snd_cfg_req ,pdata 
+4f5c c4000000 rtnbit0 l2cap_channel_state_conn_req ,pdata 
+4f5d c4008000 rtnbit0 l2cap_channel_state_conn_res ,pdata 
+4f5e 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+4f5f 18c20a00 copy contr ,contw 
+4f60 18a08bff increase -1 ,contw 
+4f61 e0a08000 istore 1 ,contw 
+4f62 78347c00 enable user 
+4f63 20600000 rtn 
+
+l2cap_send_config_req:
+
+l2cap_send_config_req_sdp:
+4f64 6800c250 fetch 1 ,mem_sdp_state 
+4f65 20404f5a call l2cap_check_channel_state 
+4f66 24344f6b nbranch l2cap_send_config_req_rfcomm ,user 
+4f67 70028050 jam l2cap_sdp_channel ,mem_send_config_req 
+4f68 68014248 fetch 2 ,mem_sdp_remote_cid 
+4f69 60010282 store 2 ,mem_config_req_dest_cid 
+4f6a 20204f7f branch l2cap_generate_config_req 
+
+l2cap_send_config_req_rfcomm:
+4f6b 6800c251 fetch 1 ,mem_rfcomm_state 
+4f6c 20404f5a call l2cap_check_channel_state 
+4f6d 24344f72 nbranch l2cap_send_config_req_hid_ctrl ,user 
+4f6e 70028051 jam l2cap_rfcomm_channel ,mem_send_config_req 
+4f6f 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+4f70 60010282 store 2 ,mem_config_req_dest_cid 
+4f71 20204f7f branch l2cap_generate_config_req 
+
+l2cap_send_config_req_hid_ctrl:
+4f72 6800c252 fetch 1 ,mem_hid_control_state 
+4f73 20404f5a call l2cap_check_channel_state 
+4f74 24344f79 nbranch l2cap_send_config_req_hid_int ,user 
+4f75 70028052 jam l2cap_hid_control_channel ,mem_send_config_req 
+4f76 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+4f77 60010282 store 2 ,mem_config_req_dest_cid 
+4f78 20204f7f branch l2cap_generate_config_req 
+
+l2cap_send_config_req_hid_int:
+4f79 6800c253 fetch 1 ,mem_hid_interrupt_state 
+4f7a 20404f5a call l2cap_check_channel_state 
+4f7b 24740000 nrtn user 
+4f7c 70028053 jam l2cap_hid_interrupt_channel ,mem_send_config_req 
+4f7d 6801424e fetch 2 ,mem_hid_int_remote_cid 
+4f7e 60010282 store 2 ,mem_config_req_dest_cid 
+
+l2cap_generate_config_req:
+4f7f 470a4022 bpatchx patch22_4 ,mem_patch22 
+4f80 2040523a call l2cap_get_req_id 
+4f81 204052b8 call l2cap_malloc_signal_channel 
+4f82 18002400 force 0 ,regb 
+4f83 204052c3 call l2cap_get_signal_tx_payload 
+4f84 18007e04 force signal_config_req ,pdata 
+4f85 e0a08000 istore 1 ,contw 
+4f86 6800c255 fetch 1 ,mem_ml2cap_comm_id 
+4f87 e0a08000 istore 1 ,contw 
+4f88 58000008 setarg 0x0008 
+4f89 e0a10000 istore 2 ,contw 
+4f8a 68010282 fetch 2 ,mem_config_req_dest_cid 
+4f8b e0a10000 istore 2 ,contw 
+4f8c 58000000 setarg 0x0000 
+4f8d e0a10000 istore 2 ,contw 
+4f8e 18007e01 force 1 ,pdata 
+4f8f e0a08000 istore 1 ,contw 
+4f90 18007e02 force 2 ,pdata 
+4f91 e0a08000 istore 1 ,contw 
+4f92 68008280 fetch 1 ,mem_send_config_req 
+4f93 c028cf97 beq l2cap_rfcomm_channel ,l2cap_generate_config_req_rfcomm 
+4f94 58000030 setarg l2cap_config_mtu_sdp 
+4f95 e0a10000 istore 2 ,contw 
+4f96 20204f99 branch l2cap_generate_config_req_done 
+
+l2cap_generate_config_req_rfcomm:
+4f97 580003e3 setarg l2cap_config_mtu_rfcomm 
+4f98 e0a10000 istore 2 ,contw 
+
+l2cap_generate_config_req_done:
+4f99 d840000c arg 0x0c ,temp 
+4f9a 6009026f storet 2 ,mem_l2cap_signal_tx_length 
+4f9b 204052c1 call l2cap_get_signal_tx_buff 
+4f9c 6801026f fetch 2 ,mem_l2cap_signal_tx_length 
+4f9d e0a10000 istore 2 ,contw 
+4f9e 18007e01 force l2cap_signal_channel ,pdata 
+4f9f e0a10000 istore 2 ,contw 
+4fa0 70028000 jam 0 ,mem_send_config_req 
+
+l2cap_proc_signal_config_req_rtn:
+4fa1 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_config_rsp:
+4fa2 18c08c01 increase 1 ,contr 
+4fa3 e8c10000 ifetch 2 ,contr 
+4fa4 1fe22200 copy pdata ,rega 
+4fa5 1a627e00 copy regc ,pdata 
+4fa6 9a262600 isub rega ,regc 
+4fa7 e8c10000 ifetch 2 ,contr 
+4fa8 1fe22200 copy pdata ,rega 
+4fa9 470ac022 bpatchx patch22_5 ,mem_patch22 
+4faa 58000050 setarg l2cap_sdp_channel 
+4fab 9a267c00 isub rega ,null 
+4fac 2022cfba branch l2cap_proc_signal_config_rsp_sdp ,zero 
+4fad 58000051 setarg l2cap_rfcomm_channel 
+4fae 9a267c00 isub rega ,null 
+4faf 2022cfbe branch l2cap_proc_signal_config_rsp_rfcomm ,zero 
+4fb0 58000052 setarg l2cap_hid_control_channel 
+4fb1 9a267c00 isub rega ,null 
+4fb2 2022cfc2 branch l2cap_proc_signal_config_rsp_hid_ctrl ,zero 
+4fb3 58000053 setarg l2cap_hid_interrupt_channel 
+4fb4 9a267c00 isub rega ,null 
+4fb5 2022cfc6 branch l2cap_proc_signal_config_rsp_hid_int ,zero 
+4fb6 18c08c02 increase 2 ,contr 
+4fb7 e8c10000 ifetch 2 ,contr 
+4fb8 98007c00 iforce null 
+4fb9 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_config_rsp_sdp:
+4fba 6800c250 fetch 1 ,mem_sdp_state 
+4fbb 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata 
+4fbc 6000c250 store 1 ,mem_sdp_state 
+4fbd 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_config_rsp_rfcomm:
+4fbe 6800c251 fetch 1 ,mem_rfcomm_state 
+4fbf 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata 
+4fc0 6000c251 store 1 ,mem_rfcomm_state 
+4fc1 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_config_rsp_hid_ctrl:
+4fc2 6800c252 fetch 1 ,mem_hid_control_state 
+4fc3 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata 
+4fc4 6000c252 store 1 ,mem_hid_control_state 
+4fc5 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_config_rsp_hid_int:
+4fc6 6800c253 fetch 1 ,mem_hid_interrupt_state 
+4fc7 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata 
+4fc8 6000c253 store 1 ,mem_hid_interrupt_state 
+4fc9 700a9906 jam bt_evt_hid_connected ,mem_fifo_temp 
+4fca 20207d86 branch ui_ipc_send_event 
+
+l2cap_proc_signal_disconnect_req:
+4fcb e8c08000 ifetch 1 ,contr 
+4fcc 1fe20e00 copy pdata ,queue 
+4fcd e8c10000 ifetch 2 ,contr 
+4fce 1fe22200 copy pdata ,rega 
+4fcf 1a627e00 copy regc ,pdata 
+4fd0 9a262600 isub rega ,regc 
+4fd1 e8c10000 ifetch 2 ,contr 
+4fd2 1fe22200 copy pdata ,rega 
+4fd3 e8c10000 ifetch 2 ,contr 
+4fd4 1fe21600 copy pdata ,timeup 
+4fd5 1a220400 copy rega ,temp 
+4fd6 20407ea8 call save_cont_pointers 
+4fd7 470b4022 bpatchx patch22_6 ,mem_patch22 
+4fd8 58000050 setarg l2cap_sdp_channel 
+4fd9 98467c00 isub temp ,null 
+4fda 2022cff2 branch l2cap_proc_signal_disconnect_req_sdp ,zero 
+4fdb 58000051 setarg l2cap_rfcomm_channel 
+4fdc 98467c00 isub temp ,null 
+4fdd 2022d002 branch l2cap_proc_signal_disconnect_req_rfcomm ,zero 
+4fde 58000052 setarg l2cap_hid_control_channel 
+4fdf 98467c00 isub temp ,null 
+4fe0 2022cfe6 branch l2cap_proc_signal_disconnect_req_hid_ctrl ,zero 
+4fe1 58000053 setarg l2cap_hid_interrupt_channel 
+4fe2 98467c00 isub temp ,null 
+4fe3 2022cfec branch l2cap_proc_signal_disconnect_req_hid_int ,zero 
+4fe4 20405062 call l2cap_reject_command 
+4fe5 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn 
+
+l2cap_proc_signal_disconnect_req_hid_ctrl:
+4fe6 19620400 copy timeup ,temp 
+4fe7 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+4fe8 98467c00 isub temp ,null 
+4fe9 2022cff8 branch l2cap_disconnect_hid_control_now ,zero 
+4fea 20405062 call l2cap_reject_command 
+4feb 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn 
+
+l2cap_proc_signal_disconnect_req_hid_int:
+4fec 19620400 copy timeup ,temp 
+4fed 6801424e fetch 2 ,mem_hid_int_remote_cid 
+4fee 98467c00 isub temp ,null 
+4fef 2022cffa branch l2cap_disconnect_hid_interrupt_now ,zero 
+4ff0 20405062 call l2cap_reject_command 
+4ff1 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn 
+
+l2cap_proc_signal_disconnect_req_sdp:
+4ff2 19620400 copy timeup ,temp 
+4ff3 68014248 fetch 2 ,mem_sdp_remote_cid 
+4ff4 98467c00 isub temp ,null 
+4ff5 2022cffe branch l2cap_disconnect_sdp_now ,zero 
+4ff6 20405062 call l2cap_reject_command 
+4ff7 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn 
+
+l2cap_disconnect_hid_control_now:
+4ff8 20405079 call l2cap_reset_hid_ctrl_state 
+4ff9 2020500a branch l2cap_send_disconnect_rsp_pkt 
+
+l2cap_disconnect_hid_interrupt_now:
+4ffa 2040507f call l2cap_reset_hid_int_state 
+4ffb 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+4ffc 203a500a branch l2cap_send_disconnect_rsp_pkt ,blank 
+4ffd 2020500a branch l2cap_send_disconnect_rsp_pkt 
+
+l2cap_disconnect_sdp_now:
+4ffe 20405074 call l2cap_reset_sdp_channel_state 
+4fff 68008288 fetch 1 ,mem_upper_sm_ss 
+5000 243a500a nbranch l2cap_send_disconnect_rsp_pkt ,blank 
+5001 2020500a branch l2cap_send_disconnect_rsp_pkt 
+
+l2cap_proc_signal_disconnect_req_rfcomm:
+5002 19620400 copy timeup ,temp 
+5003 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+5004 98467c00 isub temp ,null 
+5005 2022d008 branch l2cap_disconnect_rfcomm_now ,zero 
+5006 20405062 call l2cap_reject_command 
+5007 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn 
+
+l2cap_disconnect_rfcomm_now:
+5008 2040506f call l2cap_reset_rfcomm_channel_state 
+5009 2020500a branch l2cap_send_disconnect_rsp_pkt 
+
+l2cap_send_disconnect_rsp_pkt:
+500a 20407ead call load_cont_pointers 
+500b 58000007 setarg signal_disconnect_rsp 
+500c e0a08000 istore 1 ,contw 
+500d 18e27e00 copy queue ,pdata 
+500e e0a08000 istore 1 ,contw 
+500f 58000004 setarg 0x0004 
+5010 e0a10000 istore 2 ,contw 
+5011 1a227e00 copy rega ,pdata 
+5012 e0a10000 istore 2 ,contw 
+5013 19627e00 copy timeup ,pdata 
+5014 e0a10000 istore 2 ,contw 
+5015 18007e08 force 8 ,pdata 
+5016 20205019 branch l2cap_proc_signal_disconnect_req_rtn 
+
+l2cap_proc_signal_disconnect_req_err_rtn:
+5017 20407ead call load_cont_pointers 
+5018 20205019 branch l2cap_proc_signal_disconnect_req_rtn 
+
+l2cap_proc_signal_disconnect_req_rtn:
+5019 9a40a400 iadd regb ,regb 
+501a 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_disconnect_rsp:
+501b e8c08000 ifetch 1 ,contr 
+501c 1fe20e00 copy pdata ,queue 
+501d e8c10000 ifetch 2 ,contr 
+501e 1fe22200 copy pdata ,rega 
+501f 1a627e00 copy regc ,pdata 
+5020 9a262600 isub rega ,regc 
+5021 e8c10000 ifetch 2 ,contr 
+5022 1fe21600 copy pdata ,timeup 
+5023 e8c10000 ifetch 2 ,contr 
+5024 1fe20400 copy pdata ,temp 
+5025 20407ea8 call save_cont_pointers 
+5026 470bc022 bpatchx patch22_7 ,mem_patch22 
+5027 58000050 setarg l2cap_sdp_channel 
+5028 98467c00 isub temp ,null 
+5029 2022d035 branch l2cap_proc_signal_disconnect_rsp_sdp ,zero 
+502a 58000051 setarg l2cap_rfcomm_channel 
+502b 98467c00 isub temp ,null 
+502c 2022d03b branch l2cap_proc_signal_disconnect_rsp_rfcomm ,zero 
+502d 58000052 setarg l2cap_hid_control_channel 
+502e 98467c00 isub temp ,null 
+502f 2022d041 branch l2cap_proc_signal_disconnect_rsp_hid_ctrl ,zero 
+5030 58000053 setarg l2cap_hid_interrupt_channel 
+5031 98467c00 isub temp ,null 
+5032 2022d047 branch l2cap_proc_signal_disconnect_rsp_hid_int ,zero 
+5033 20405062 call l2cap_reject_command 
+5034 2020504f branch l2cap_proc_signal_disconnect_rsp_err_rtn 
+
+l2cap_proc_signal_disconnect_rsp_sdp:
+5035 18422200 copy temp ,rega 
+5036 19620400 copy timeup ,temp 
+5037 68014248 fetch 2 ,mem_sdp_remote_cid 
+5038 98467c00 isub temp ,null 
+5039 2042d074 call l2cap_reset_sdp_channel_state ,zero 
+503a 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn 
+
+l2cap_proc_signal_disconnect_rsp_rfcomm:
+503b 18422200 copy temp ,rega 
+503c 19620400 copy timeup ,temp 
+503d 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+503e 98467c00 isub temp ,null 
+503f 2042d06f call l2cap_reset_rfcomm_channel_state ,zero 
+5040 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn 
+
+l2cap_proc_signal_disconnect_rsp_hid_ctrl:
+5041 18422200 copy temp ,rega 
+5042 19620400 copy timeup ,temp 
+5043 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+5044 98467c00 isub temp ,null 
+5045 2042d079 call l2cap_reset_hid_ctrl_state ,zero 
+5046 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn 
+
+l2cap_proc_signal_disconnect_rsp_hid_int:
+5047 18422200 copy temp ,rega 
+5048 19620400 copy timeup ,temp 
+5049 6801424e fetch 2 ,mem_hid_int_remote_cid 
+504a 98467c00 isub temp ,null 
+504b 2042d07f call l2cap_reset_hid_int_state ,zero 
+504c 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn 
+
+l2cap_proc_signal_disconnect_rsp_rtn:
+504d 20407ead call load_cont_pointers 
+504e 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_disconnect_rsp_err_rtn:
+504f 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_echo_req:
+5050 e8c08000 ifetch 1 ,contr 
+5051 1fe20e00 copy pdata ,queue 
+5052 e8c10000 ifetch 2 ,contr 
+5053 1fe22200 copy pdata ,rega 
+5054 98c08c00 iadd contr ,contr 
+5055 58000009 setarg 9 
+5056 e0a08000 istore 1 ,contw 
+5057 18e27e00 copy queue ,pdata 
+5058 e0a08000 istore 1 ,contw 
+5059 18007e00 force 0x0000 ,pdata 
+505a e0a10000 istore 2 ,contw 
+505b 18007e04 force 4 ,pdata 
+505c 9a40a400 iadd regb ,regb 
+505d 1a627e00 copy regc ,pdata 
+505e 9a262600 isub rega ,regc 
+505f 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_echo_rsp:
+5060 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_info_rsp:
+5061 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_reject_command:
+5062 18002400 force 0 ,regb 
+5063 204052c3 call l2cap_get_signal_tx_payload 
+5064 58000001 setarg signal_cmd_reject 
+5065 e0a08000 istore 1 ,contw 
+5066 18e27e00 copy queue ,pdata 
+5067 e0a08000 istore 1 ,contw 
+5068 58000002 setarg 2 
+5069 e0a10000 istore 2 ,contw 
+506a 58000000 setarg cmd_not_understood 
+506b e0a10000 istore 2 ,contw 
+506c 1a40a406 increase 6 ,regb 
+506d da600004 arg 4 ,regc 
+506e 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_reset_rfcomm_channel_state:
+506f 58000000 setarg 0 
+5070 6001027b store 2 ,mem_rfcomm_tx_pkt_length 
+5071 6001424a store 2 ,mem_rfcomm_remote_cid 
+5072 70425100 jam 0 ,mem_rfcomm_state 
+5073 20600000 rtn 
+
+l2cap_reset_sdp_channel_state:
+5074 58000000 setarg 0 
+5075 60010275 store 2 ,mem_sdp_tx_pkt_length 
+5076 60014248 store 2 ,mem_sdp_remote_cid 
+5077 70425000 jam 0 ,mem_sdp_state 
+5078 20600000 rtn 
+
+l2cap_reset_hid_ctrl_state:
+5079 58000000 setarg 0 
+507a 6001424c store 2 ,mem_hid_ctrl_remote_cid 
+507b 70425200 jam 0 ,mem_hid_control_state 
+507c 6800c253 fetch 1 ,mem_hid_interrupt_state 
+507d c0005085 beq 0 ,l2cap_reset_hid_disconnected 
+507e 20600000 rtn 
+
+l2cap_reset_hid_int_state:
+507f 58000000 setarg 0 
+5080 6001424e store 2 ,mem_hid_int_remote_cid 
+5081 70425300 jam 0 ,mem_hid_interrupt_state 
+5082 6800c252 fetch 1 ,mem_hid_control_state 
+5083 c0005085 beq 0 ,l2cap_reset_hid_disconnected 
+5084 20600000 rtn 
+
+l2cap_reset_hid_disconnected:
+5085 700a9907 jam bt_evt_hid_disconnected ,mem_fifo_temp 
+5086 20207d86 branch ui_ipc_send_event 
+
+l2cap_disconnect_interrupt_req:
+5087 6800827f fetch 1 ,mem_control_tasks 
+5088 793ffe00 set0 l2cap_disconnect_interrupt ,pdata 
+5089 6000827f store 1 ,mem_control_tasks 
+508a 6801424e fetch 2 ,mem_hid_int_remote_cid 
+508b 207a0000 rtn blank 
+508c 204052b8 call l2cap_malloc_signal_channel 
+508d 6801424e fetch 2 ,mem_hid_int_remote_cid 
+508e 1fe22200 copy pdata ,rega 
+508f 18002453 force l2cap_hid_interrupt_channel ,regb 
+5090 2020509a branch l2cap_generate_disconnect_req 
+
+l2cap_disconnect_control_req:
+5091 6800827f fetch 1 ,mem_control_tasks 
+5092 793ffe07 set0 l2cap_disconnect_control ,pdata 
+5093 6000827f store 1 ,mem_control_tasks 
+5094 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+5095 207a0000 rtn blank 
+5096 204052b8 call l2cap_malloc_signal_channel 
+5097 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+5098 1fe22200 copy pdata ,rega 
+5099 18002452 force l2cap_hid_control_channel ,regb 
+
+l2cap_generate_disconnect_req:
+509a 2040523a call l2cap_get_req_id 
+509b 204052c3 call l2cap_get_signal_tx_payload 
+509c 18007e06 force signal_disconnect_req ,pdata 
+509d e0a08000 istore 1 ,contw 
+509e 6800c255 fetch 1 ,mem_ml2cap_comm_id 
+509f e0a08000 istore 1 ,contw 
+50a0 58000004 setarg 0x0004 
+50a1 e0a10000 istore 2 ,contw 
+50a2 1a227e00 copy rega ,pdata 
+50a3 e0a10000 istore 2 ,contw 
+50a4 1a427e00 copy regb ,pdata 
+50a5 e0a10000 istore 2 ,contw 
+50a6 18000408 force 0x08 ,temp 
+50a7 202050de branch ml2cap_send_signal 
+
+ml2cap_send_signal_connect_req:
+50a8 470c4023 bpatchx patch23_0 ,mem_patch23 
+50a9 2040523a call l2cap_get_req_id 
+50aa 204052c3 call l2cap_get_signal_tx_payload 
+50ab 58000002 setarg signal_connect_req 
+50ac e0a08000 istore 1 ,contw 
+50ad 6800c255 fetch 1 ,mem_ml2cap_comm_id 
+50ae e0a08000 istore 1 ,contw 
+50af 58000004 setarg 0x0004 
+50b0 e0a10000 istore 2 ,contw 
+50b1 18427e00 copy temp ,pdata 
+50b2 e0a10000 istore 2 ,contw 
+50b3 19627e00 copy timeup ,pdata 
+50b4 e0a10000 istore 2 ,contw 
+50b5 d8400008 arg 8 ,temp 
+50b6 202050de branch ml2cap_send_signal 
+
+ml2cap_send_signal_config_req:
+50b7 470cc023 bpatchx patch23_1 ,mem_patch23 
+50b8 2040523a call l2cap_get_req_id 
+50b9 204052c3 call l2cap_get_signal_tx_payload 
+50ba 58000004 setarg signal_config_req 
+50bb e0a08000 istore 1 ,contw 
+50bc 6800c255 fetch 1 ,mem_ml2cap_comm_id 
+50bd e0a08000 istore 1 ,contw 
+50be 58000008 setarg 0x0008 
+50bf e0a10000 istore 2 ,contw 
+50c0 18427e00 copy temp ,pdata 
+50c1 e0a10000 istore 2 ,contw 
+50c2 58000000 setarg 0x0000 
+50c3 e0a10000 istore 2 ,contw 
+50c4 58000001 setarg 0x01 
+50c5 e0a08000 istore 1 ,contw 
+50c6 58000002 setarg 0x02 
+50c7 e0a08000 istore 1 ,contw 
+50c8 580003e3 setarg l2cap_config_mtu_rfcomm 
+50c9 e0a10000 istore 2 ,contw 
+50ca d840000c arg 0xc ,temp 
+50cb 202050de branch ml2cap_send_signal 
+
+ml2cap_send_signal_disconn_req:
+50cc 470d4023 bpatchx patch23_2 ,mem_patch23 
+50cd 2040523a call l2cap_get_req_id 
+50ce 204052c3 call l2cap_get_signal_tx_payload 
+50cf 58000006 setarg signal_disconnect_req 
+50d0 e0a08000 istore 1 ,contw 
+50d1 6800c255 fetch 1 ,mem_ml2cap_comm_id 
+50d2 1fe0fe01 increase 1 ,pdata 
+50d3 18a22200 copy contw ,rega 
+50d4 6000c255 store 1 ,mem_ml2cap_comm_id 
+50d5 1a220a00 copy rega ,contw 
+50d6 e0a08000 istore 1 ,contw 
+50d7 58000004 setarg 0x0004 
+50d8 e0a10000 istore 2 ,contw 
+50d9 18427e00 copy temp ,pdata 
+50da e0a10000 istore 2 ,contw 
+50db 19627e00 copy timeup ,pdata 
+50dc e0a10000 istore 2 ,contw 
+50dd d8400008 arg 0x8 ,temp 
+
+ml2cap_send_signal:
+50de 6009026f storet 2 ,mem_l2cap_signal_tx_length 
+50df 18427e00 copy temp ,pdata 
+50e0 203a5264 branch l2cap_malloc_discard ,blank 
+50e1 204052c1 call l2cap_get_signal_tx_buff 
+50e2 6801026f fetch 2 ,mem_l2cap_signal_tx_length 
+50e3 e0a10000 istore 2 ,contw 
+50e4 18007e01 force l2cap_signal_channel ,pdata 
+50e5 e0a10000 istore 2 ,contw 
+50e6 20600000 rtn 
+
+msdp_send_req_done:
+50e7 68010275 fetch 2 ,mem_sdp_tx_pkt_length 
+50e8 203a2a8c branch assert ,blank 
+50e9 204052ce call l2cap_get_sdp_tx_buff 
+50ea 68010275 fetch 2 ,mem_sdp_tx_pkt_length 
+50eb e0a10000 istore 2 ,contw 
+50ec 68014248 fetch 2 ,mem_sdp_remote_cid 
+50ed e0a10000 istore 2 ,contw 
+50ee 20600000 rtn 
+
+ml2cap_rx_multiplexing:
+50ef 68010266 fetch 2 ,mem_l2cap_rx_pkt_length 
+50f0 203a4dfc branch l2cap_rx_reset_state ,blank 
+50f1 470dc023 bpatchx patch23_3 ,mem_patch23 
+50f2 68008268 fetch 1 ,mem_l2cap_rx_cid 
+50f3 c000d0f9 beq l2cap_signal_channel ,ml2cap_call_proc_signal 
+50f4 c0284de8 beq l2cap_sdp_channel ,ml2cap_call_proc_sdp 
+50f5 c028cdf5 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm 
+50f6 c0294df3 beq l2cap_hid_control_channel ,l2cap_call_proc_hid 
+50f7 c029cdf3 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid 
+50f8 20204dfc branch l2cap_rx_reset_state 
+
+ml2cap_call_proc_signal:
+50f9 470e4023 bpatchx patch23_4 ,mem_patch23 
+50fa 204052b8 call l2cap_malloc_signal_channel 
+50fb 18002400 force 0 ,regb 
+50fc 204052c3 call l2cap_get_signal_tx_payload 
+50fd 1fe20a00 copy pdata ,contw 
+50fe 68010266 fetch 2 ,mem_l2cap_rx_pkt_length 
+50ff 1fe22600 copy pdata ,regc 
+5100 68010264 fetch 2 ,mem_l2cap_payload_ptr 
+5101 98000c00 iforce contr 
+
+ml2cap_proc_one_comm_loop:
+5102 20405108 call ml2cap_proc_one_comm 
+5103 1a60a7fc increase -4 ,regc 
+5104 2422d102 nbranch ml2cap_proc_one_comm_loop ,zero 
+5105 1a420400 copy regb ,temp 
+5106 204050de call ml2cap_send_signal 
+5107 20204dfc branch l2cap_rx_reset_state 
+
+ml2cap_proc_one_comm:
+5108 e8c08000 ifetch 1 ,contr 
+5109 c0015113 beq signal_connect_req ,ml2cap_proc_signal_connect_req 
+510a c000d116 beq signal_cmd_reject ,ml2cap_proc_signal_cmd_reject 
+510b c001d120 beq signal_connect_rsp ,ml2cap_proc_signal_connect_rsp 
+510c c002d15c beq signal_config_rsp ,ml2cap_proc_signal_config_rsp 
+510d c002518e beq signal_config_req ,ml2cap_proc_signal_config_req 
+510e c003d213 beq signal_disconnect_rsp ,ml2cap_proc_signal_disconn_rsp 
+510f c00351e1 beq signal_disconnect_req ,ml2cap_proc_signal_disconn_req 
+5110 c0045050 beq signal_echo_req ,l2cap_proc_signal_echo_req 
+5111 c0054e3a beq signal_info_req ,ml2cap_proc_signal_info_req 
+5112 2020522e branch ml2cap_proc_send_reject 
+
+ml2cap_proc_signal_connect_req:
+5113 20407ea8 call save_cont_pointers 
+5114 20407ead call load_cont_pointers 
+5115 20204e51 branch l2cap_proc_signal_connect_req 
+
+ml2cap_proc_signal_cmd_reject:
+5116 e8c08000 ifetch 1 ,contr 
+5117 1fe20e00 copy pdata ,queue 
+5118 e8c10000 ifetch 2 ,contr 
+5119 1fe22200 copy pdata ,rega 
+511a 1a627e00 copy regc ,pdata 
+511b 9a262600 isub rega ,regc 
+
+mvptr:
+511c e8c08000 ifetch 1 ,contr 
+511d 1a20a3ff increase -1 ,rega 
+511e 2422d11c nbranch mvptr ,zero 
+511f 20600000 rtn 
+
+ml2cap_proc_signal_connect_rsp:
+5120 e8c08000 ifetch 1 ,contr 
+5121 1fe20e00 copy pdata ,queue 
+5122 e8c10000 ifetch 2 ,contr 
+5123 1fe22200 copy pdata ,rega 
+5124 e8c10000 ifetch 2 ,contr 
+5125 1fe21600 copy pdata ,timeup 
+5126 e8c10000 ifetch 2 ,contr 
+5127 1fe20400 copy pdata ,temp 
+5128 e8c10000 ifetch 2 ,contr 
+5129 1fe67c00 sub pdata ,0 ,null 
+512a 2022d132 branch ml2cap_proc_signal_connect_rsp_sucessful ,zero 
+512b c001512e beq l2cap_connect_refused_psm_unsupported ,ml2cap_proc_signal_connect_refused_result 
+512c c002512e beq l2cap_connect_refused_no_resources ,ml2cap_proc_signal_connect_refused_result 
+512d 20205130 branch ml2cap_proc_signal_connect_rsp_mnosucc 
+
+ml2cap_proc_signal_connect_refused_result:
+512e 700a9916 jam bt_evt_ml2cap_conn_refused ,mem_fifo_temp 
+512f 20407d86 call ui_ipc_send_event 
+
+ml2cap_proc_signal_connect_rsp_mnosucc:
+5130 e8c10000 ifetch 2 ,contr 
+5131 20205159 branch mnosucc 
+
+ml2cap_proc_signal_connect_rsp_sucessful:
+5132 20407ea8 call save_cont_pointers 
+5133 470ec023 bpatchx patch23_5 ,mem_patch23 
+5134 58000050 setarg l2cap_sdp_channel 
+5135 98467c00 isub temp ,null 
+5136 2022d141 branch ml2cap_proc_signal_connect_rsp_sdp ,zero 
+5137 58000051 setarg l2cap_rfcomm_channel 
+5138 98467c00 isub temp ,null 
+5139 2022d147 branch ml2cap_proc_signal_connect_rsp_rfcomm ,zero 
+513a 58000053 setarg l2cap_hid_interrupt_channel 
+513b 98467c00 isub temp ,null 
+513c 2022d153 branch ml2cap_proc_signal_connect_rsp_hid_int ,zero 
+513d 58000052 setarg l2cap_hid_control_channel 
+513e 98467c00 isub temp ,null 
+513f 2022d14d branch ml2cap_proc_signal_connect_rsp_hid_ctrl ,zero 
+5140 20205159 branch mnosucc 
+
+ml2cap_proc_signal_connect_rsp_sdp:
+5141 19627e00 copy timeup ,pdata 
+5142 60014248 store 2 ,mem_sdp_remote_cid 
+5143 6800c250 fetch 1 ,mem_sdp_state 
+5144 79207e01 set1 l2cap_channel_state_conn_res 
+5145 6000c250 store 1 ,mem_sdp_state 
+5146 20205158 branch mnosucc1 
+
+ml2cap_proc_signal_connect_rsp_rfcomm:
+5147 19627e00 copy timeup ,pdata 
+5148 6001424a store 2 ,mem_rfcomm_remote_cid 
+5149 6800c251 fetch 1 ,mem_rfcomm_state 
+514a 79207e01 set1 l2cap_channel_state_conn_res 
+514b 6000c251 store 1 ,mem_rfcomm_state 
+514c 20205158 branch mnosucc1 
+
+ml2cap_proc_signal_connect_rsp_hid_ctrl:
+514d 19627e00 copy timeup ,pdata 
+514e 6001424c store 2 ,mem_hid_ctrl_remote_cid 
+514f 6800c252 fetch 1 ,mem_hid_control_state 
+5150 79207e01 set1 l2cap_channel_state_conn_res 
+5151 6000c252 store 1 ,mem_hid_control_state 
+5152 20205158 branch mnosucc1 
+
+ml2cap_proc_signal_connect_rsp_hid_int:
+5153 19627e00 copy timeup ,pdata 
+5154 6001424e store 2 ,mem_hid_int_remote_cid 
+5155 6800c253 fetch 1 ,mem_hid_interrupt_state 
+5156 79207e01 set1 l2cap_channel_state_conn_res 
+5157 6000c253 store 1 ,mem_hid_interrupt_state 
+
+mnosucc1:
+5158 20407ead call load_cont_pointers 
+
+mnosucc:
+5159 1a627e00 copy regc ,pdata 
+515a 9a262600 isub rega ,regc 
+515b 20600000 rtn 
+
+ml2cap_proc_signal_config_rsp:
+515c e8c08000 ifetch 1 ,contr 
+515d 1fe20e00 copy pdata ,queue 
+515e e8c10000 ifetch 2 ,contr 
+515f 1fe22200 copy pdata ,rega 
+5160 1a627e00 copy regc ,pdata 
+5161 9a262600 isub rega ,regc 
+5162 e8c10000 ifetch 2 ,contr 
+5163 1fe21600 copy pdata ,timeup 
+5164 e8c10000 ifetch 2 ,contr 
+5165 e8c10000 ifetch 2 ,contr 
+5166 243a5188 nbranch mcrsdone1 ,blank 
+5167 20407ea8 call save_cont_pointers 
+5168 19620400 copy timeup ,temp 
+5169 470f4023 bpatchx patch23_6 ,mem_patch23 
+516a 58000050 setarg l2cap_sdp_channel 
+516b 98467c00 isub temp ,null 
+516c 2022d176 branch ml2cap_proc_signal_config_rsp_sdp ,zero 
+516d 58000051 setarg l2cap_rfcomm_channel 
+516e 98467c00 isub temp ,null 
+516f 2022d17a branch ml2cap_proc_signal_config_rsp_rfcomm ,zero 
+5170 58000052 setarg l2cap_hid_control_channel 
+5171 98467c00 isub temp ,null 
+5172 2022d17e branch ml2cap_proc_signal_config_rsp_hid_ctrl ,zero 
+5173 58000053 setarg l2cap_hid_interrupt_channel 
+5174 98467c00 isub temp ,null 
+5175 2022d182 branch ml2cap_proc_signal_config_rsp_hid_int ,zero 
+
+ml2cap_proc_signal_config_rsp_sdp:
+5176 6800c250 fetch 1 ,mem_sdp_state 
+5177 79207e05 set1 l2cap_channel_state_rcv_cfg_res 
+5178 6000c250 store 1 ,mem_sdp_state 
+5179 20600000 rtn 
+
+ml2cap_proc_signal_config_rsp_rfcomm:
+517a 6800c251 fetch 1 ,mem_rfcomm_state 
+517b 79207e05 set1 l2cap_channel_state_rcv_cfg_res 
+517c 6000c251 store 1 ,mem_rfcomm_state 
+517d 20600000 rtn 
+
+ml2cap_proc_signal_config_rsp_hid_ctrl:
+517e 6800c252 fetch 1 ,mem_hid_control_state 
+517f 79207e05 set1 l2cap_channel_state_rcv_cfg_res 
+5180 6000c252 store 1 ,mem_hid_control_state 
+5181 20600000 rtn 
+
+ml2cap_proc_signal_config_rsp_hid_int:
+5182 6800c253 fetch 1 ,mem_hid_interrupt_state 
+5183 79207e05 set1 l2cap_channel_state_rcv_cfg_res 
+5184 6000c253 store 1 ,mem_hid_interrupt_state 
+5185 700a9906 jam bt_evt_hid_connected ,mem_fifo_temp 
+5186 20207d86 branch ui_ipc_send_event 
+
+mcfrsdone:
+5187 20407ead call load_cont_pointers 
+
+mcrsdone1:
+5188 1a20a3fa increase -6 ,rega 
+
+mloop2:
+5189 2022d18d branch mcrsdone ,zero 
+518a 18c08c01 increase 1 ,contr 
+518b 1a20a3ff increase -1 ,rega 
+518c 20205189 branch mloop2 
+
+mcrsdone:
+518d 20600000 rtn 
+
+ml2cap_proc_signal_config_req:
+518e e8c08000 ifetch 1 ,contr 
+518f 1fe20e00 copy pdata ,queue 
+5190 e8c10000 ifetch 2 ,contr 
+5191 1fe22200 copy pdata ,rega 
+5192 1a627e00 copy regc ,pdata 
+5193 9a262600 isub rega ,regc 
+5194 e8c10000 ifetch 2 ,contr 
+5195 18c08c02 increase 2 ,contr 
+5196 1fe20400 copy pdata ,temp 
+5197 58000005 setarg signal_config_rsp 
+5198 e0a08000 istore 1 ,contw 
+5199 18e27e00 copy queue ,pdata 
+519a e0a08000 istore 1 ,contw 
+519b 1a20a202 increase 2 ,rega 
+519c 1a227e00 copy rega ,pdata 
+519d e0a10000 istore 2 ,contw 
+519e 20407ea8 call save_cont_pointers 
+519f 470fc023 bpatchx patch23_7 ,mem_patch23 
+51a0 58000050 setarg l2cap_sdp_channel 
+51a1 98467c00 isub temp ,null 
+51a2 2022d1ad branch ml2cap_proc_signal_config_req_sdp ,zero 
+51a3 58000051 setarg l2cap_rfcomm_channel 
+51a4 98467c00 isub temp ,null 
+51a5 2022d1be branch ml2cap_proc_signal_config_req_rfcomm ,zero 
+51a6 58000052 setarg l2cap_hid_control_channel 
+51a7 98467c00 isub temp ,null 
+51a8 2022d1c4 branch ml2cap_proc_signal_config_req_hid_ctrl ,zero 
+51a9 58000053 setarg l2cap_hid_interrupt_channel 
+51aa 98467c00 isub temp ,null 
+51ab 2022d1ca branch ml2cap_proc_signal_config_req_hid_int ,zero 
+51ac 202051cf branch mcfgrq_done 
+
+ml2cap_proc_signal_config_req_sdp:
+51ad 6800c250 fetch 1 ,mem_sdp_state 
+51ae 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+51af 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+51b0 6000c250 store 1 ,mem_sdp_state 
+51b1 c28151bb bbit1 l2cap_channel_state_snd_cfg_req ,ml2cap_proc_signal_config_req_sdp_nsndreq 
+51b2 6808827f fetcht 1 ,mem_control_tasks 
+51b3 79200406 set1 l2cap_init_config_req ,temp 
+51b4 6008827f storet 1 ,mem_control_tasks 
+51b5 18e27e00 copy queue ,pdata 
+51b6 1fe0fe01 increase 1 ,pdata 
+51b7 60008281 store 1 ,mem_config_identifier 
+51b8 6800c250 fetch 1 ,mem_sdp_state 
+51b9 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+51ba 6000c250 store 1 ,mem_sdp_state 
+
+ml2cap_proc_signal_config_req_sdp_nsndreq:
+51bb 68014248 fetch 2 ,mem_sdp_remote_cid 
+51bc 60010282 store 2 ,mem_config_req_dest_cid 
+51bd 202051cf branch mcfgrq_done 
+
+ml2cap_proc_signal_config_req_rfcomm:
+51be 6800c251 fetch 1 ,mem_rfcomm_state 
+51bf 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+51c0 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+51c1 6000c251 store 1 ,mem_rfcomm_state 
+51c2 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+51c3 202051cf branch mcfgrq_done 
+
+ml2cap_proc_signal_config_req_hid_ctrl:
+51c4 6800c252 fetch 1 ,mem_hid_control_state 
+51c5 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+51c6 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+51c7 6000c252 store 1 ,mem_hid_control_state 
+51c8 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+51c9 202051cf branch mcfgrq_done 
+
+ml2cap_proc_signal_config_req_hid_int:
+51ca 6800c253 fetch 1 ,mem_hid_interrupt_state 
+51cb 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+51cc 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+51cd 6000c253 store 1 ,mem_hid_interrupt_state 
+51ce 6801424e fetch 2 ,mem_hid_int_remote_cid 
+
+mcfgrq_done:
+51cf 1fe21600 copy pdata ,timeup 
+51d0 20407ead call load_cont_pointers 
+51d1 19627e00 copy timeup ,pdata 
+51d2 e0a10000 istore 2 ,contw 
+51d3 18007e00 force 0x0000 ,pdata 
+51d4 e0a10000 istore 2 ,contw 
+51d5 18007e00 force 0x0000 ,pdata 
+51d6 e0a10000 istore 2 ,contw 
+51d7 18007e0a force 10 ,pdata 
+51d8 9a40a400 iadd regb ,regb 
+51d9 1a20a3fa increase -6 ,rega 
+
+mloop1:
+51da 2022d1e0 branch mcrqdone ,zero 
+51db e8c08000 ifetch 1 ,contr 
+51dc e0a08000 istore 1 ,contw 
+51dd 1a40a401 increase 1 ,regb 
+51de 1a20a3ff increase -1 ,rega 
+51df 202051da branch mloop1 
+
+mcrqdone:
+51e0 20600000 rtn 
+
+ml2cap_proc_signal_disconn_req:
+51e1 e8c08000 ifetch 1 ,contr 
+51e2 1fe20e00 copy pdata ,queue 
+51e3 e8c10000 ifetch 2 ,contr 
+51e4 1fe22200 copy pdata ,rega 
+51e5 1a627e00 copy regc ,pdata 
+51e6 9a262600 isub rega ,regc 
+51e7 e8c10000 ifetch 2 ,contr 
+51e8 1fe22200 copy pdata ,rega 
+51e9 e8c10000 ifetch 2 ,contr 
+51ea 1fe21600 copy pdata ,timeup 
+51eb 20407ea8 call save_cont_pointers 
+51ec 47104024 bpatchx patch24_0 ,mem_patch24 
+51ed 58000050 setarg l2cap_sdp_channel 
+51ee 1a220400 copy rega ,temp 
+51ef 98467c00 isub temp ,null 
+51f0 2022d1fa branch ml2cap_proc_signal_disconn_sdp ,zero 
+51f1 58000052 setarg l2cap_hid_control_channel 
+51f2 1a220400 copy rega ,temp 
+51f3 98467c00 isub temp ,null 
+51f4 2022d1ff branch ml2cap_proc_signal_disconn_hid_ctrl ,zero 
+51f5 58000053 setarg l2cap_hid_interrupt_channel 
+51f6 1a220400 copy rega ,temp 
+51f7 98467c00 isub temp ,null 
+51f8 2022d201 branch ml2cap_proc_signal_disconn_hid_int ,zero 
+51f9 20205203 branch mclsrfc 
+
+ml2cap_proc_signal_disconn_sdp:
+51fa 58000000 setarg 0x0000 
+51fb 60010275 store 2 ,mem_sdp_tx_pkt_length 
+51fc 60014248 store 2 ,mem_sdp_remote_cid 
+51fd 6000c250 store 1 ,mem_sdp_state 
+51fe 20205205 branch mclssdp 
+
+ml2cap_proc_signal_disconn_hid_ctrl:
+51ff 20405079 call l2cap_reset_hid_ctrl_state 
+5200 20205205 branch mclssdp 
+
+ml2cap_proc_signal_disconn_hid_int:
+5201 2040507f call l2cap_reset_hid_int_state 
+5202 20205205 branch mclssdp 
+
+mclsrfc:
+5203 58000000 setarg 0x0000 
+5204 6001027b store 2 ,mem_rfcomm_tx_pkt_length 
+
+mclssdp:
+5205 20407ead call load_cont_pointers 
+5206 58000007 setarg signal_disconnect_rsp 
+5207 e0a08000 istore 1 ,contw 
+5208 18e27e00 copy queue ,pdata 
+5209 e0a08000 istore 1 ,contw 
+520a 58000004 setarg 0x0004 
+520b e0a10000 istore 2 ,contw 
+520c 1a227e00 copy rega ,pdata 
+520d e0a10000 istore 2 ,contw 
+520e 19627e00 copy timeup ,pdata 
+520f e0a10000 istore 2 ,contw 
+5210 18007e08 force 8 ,pdata 
+5211 9a40a400 iadd regb ,regb 
+5212 20600000 rtn 
+
+ml2cap_proc_signal_disconn_rsp:
+5213 e8c08000 ifetch 1 ,contr 
+5214 1fe20e00 copy pdata ,queue 
+5215 e8c10000 ifetch 2 ,contr 
+5216 1fe22200 copy pdata ,rega 
+5217 e8c10000 ifetch 2 ,contr 
+5218 1fe21600 copy pdata ,timeup 
+5219 e8c10000 ifetch 2 ,contr 
+521a 1fe20400 copy pdata ,temp 
+521b 20407ea8 call save_cont_pointers 
+521c 4710c024 bpatchx patch24_1 ,mem_patch24 
+521d 6800c255 fetch 1 ,mem_ml2cap_comm_id 
+521e a8e1fe00 icompare 0xff ,queue 
+521f 2420d22a nbranch mdisdone ,true 
+5220 58000050 setarg l2cap_sdp_channel 
+5221 98467c00 isub temp ,null 
+5222 2022d227 branch ml2cap_proc_signal_disconn_rsp_sdp ,zero 
+5223 58000051 setarg l2cap_rfcomm_channel 
+5224 98467c00 isub temp ,null 
+5225 2022d22a branch ml2cap_proc_signal_disconn_rsp_rfcomm ,zero 
+5226 2020522a branch mdisdone 
+
+ml2cap_proc_signal_disconn_rsp_sdp:
+5227 70424800 jam 0 ,mem_sdp_remote_cid 
+5228 70425000 jam 0 ,mem_sdp_state 
+5229 2020522a branch mdisdone 
+
+ml2cap_proc_signal_disconn_rsp_rfcomm:
+
+mdisdone:
+522a 20407ead call load_cont_pointers 
+522b 1a627e00 copy regc ,pdata 
+522c 9a262600 isub rega ,regc 
+522d 20600000 rtn 
+
+ml2cap_proc_send_reject:
+522e 58000001 setarg signal_cmd_reject 
+522f e0a08000 istore 1 ,contw 
+5230 e8c08000 ifetch 1 ,contr 
+5231 e0a08000 istore 1 ,contw 
+5232 58000002 setarg 0x0002 
+5233 e0a10000 istore 2 ,contw 
+5234 58000000 setarg 0x0000 
+5235 e0a10000 istore 2 ,contw 
+5236 58000006 setarg 0x0006 
+5237 9a40a400 iadd regb ,regb 
+5238 18002604 force 4 ,regc 
+5239 20600000 rtn 
+
+l2cap_get_req_id:
+523a 6800c255 fetch 1 ,mem_ml2cap_comm_id 
+523b 1fe0fe01 increase 1 ,pdata 
+523c c080523e bne 0 ,l2cap_get_req_id_ok 
+523d 1fe0fe01 increase 1 ,pdata 
+
+l2cap_get_req_id_ok:
+523e 6000c255 store 1 ,mem_ml2cap_comm_id 
+523f 20600000 rtn 
+
+l2cap_malloc:
+5240 47114024 bpatchx patch24_2 ,mem_patch24 
+5241 da400000 arg 0 ,regb 
+5242 2040526e call l2cap_malloc_is_fifo_full 
+5243 243a2a8c nbranch assert ,blank 
+5244 2040527e call l2cap_malloc_get_full_map 
+5245 da401800 arg mem_tx_buff0 ,regb 
+5246 d8e00000 arg 0 ,queue 
+
+l2cap_malloc_loop:
+5247 6808c256 fetcht 1 ,mem_used_map 
+5248 a84fffff qisolate1 temp 
+5249 2020d24f branch l2cap_malloc_next ,true 
+524a 204052a0 call l2cap_malloc_enough 
+524b 19667c00 sub timeup ,0 ,null 
+524c 2021524f branch l2cap_malloc_next ,positive 
+524d 20405288 call l2cap_malloc_into_fifo 
+524e 20205255 branch l2cap_malloc_rtn 
+
+l2cap_malloc_next:
+524f 1a40a480 increase 128 ,regb 
+5250 18e08e01 increase 1 ,queue 
+5251 58000008 setarg 8 
+5252 98e67c00 isub queue ,null 
+5253 20215247 branch l2cap_malloc_loop ,positive 
+5254 da400000 arg 0 ,regb 
+
+l2cap_malloc_rtn:
+5255 1a427e00 copy regb ,pdata 
+5256 203a2a8c branch assert ,blank 
+5257 20600000 rtn 
+
+l2cap_malloc_fifo_out:
+5258 4711c024 bpatchx patch24_3 ,mem_patch24 
+5259 20405277 call l2cap_malloc_fifo_get_first_ptr 
+525a 18c08c01 increase 1 ,contr 
+525b e8c10000 ifetch 2 ,contr 
+525c 20600000 rtn 
+
+l2cap_malloc_free:
+525d 47124024 bpatchx patch24_4 ,mem_patch24 
+525e 20405277 call l2cap_malloc_fifo_get_first_ptr 
+525f 18c20a00 copy contr ,contw 
+5260 18c20400 copy contr ,temp 
+5261 58000000 setarg 0 
+5262 e0a18000 istore 3 ,contw 
+5263 20600000 rtn 
+
+l2cap_malloc_discard:
+5264 4712c024 bpatchx patch24_5 ,mem_patch24 
+5265 20405274 call l2cap_malloc_is_fifo_empty 
+5266 203a2a8c branch assert ,blank 
+5267 6801c25d fetch 3 ,mem_tx_fifo2 
+5268 6001c260 store 3 ,mem_tx_fifo3 
+5269 6801c25a fetch 3 ,mem_tx_fifo1 
+526a 6001c25d store 3 ,mem_tx_fifo2 
+526b 6801c257 fetch 3 ,mem_tx_fifo0 
+526c 6001c25a store 3 ,mem_tx_fifo1 
+526d 20600000 rtn 
+
+l2cap_malloc_is_fifo_full:
+526e 47134024 bpatchx patch24_6 ,mem_patch24 
+526f 6801c257 fetch 3 ,mem_tx_fifo0 
+5270 20600000 rtn 
+
+l2cap_malloc_is_fifo_nearly_full:
+5271 4713c024 bpatchx patch24_7 ,mem_patch24 
+5272 6801c25a fetch 3 ,mem_tx_fifo1 
+5273 20600000 rtn 
+
+l2cap_malloc_is_fifo_empty:
+5274 47144025 bpatchx patch25_0 ,mem_patch25 
+5275 6801c260 fetch 3 ,mem_tx_fifo3 
+5276 20600000 rtn 
+
+l2cap_malloc_fifo_get_first_ptr:
+5277 20405274 call l2cap_malloc_is_fifo_empty 
+5278 203a2a8c branch assert ,blank 
+5279 d8c04257 arg mem_tx_fifo0 ,contr 
+
+l2cap_malloc_free_loop:
+527a e8c18000 ifetch 3 ,contr 
+527b 203a527a branch l2cap_malloc_free_loop ,blank 
+527c 18c08dfd increase -3 ,contr 
+527d 20600000 rtn 
+
+l2cap_malloc_get_full_map:
+527e 4714c025 bpatchx patch25_1 ,mem_patch25 
+527f df200004 arg 4 ,loopcnt 
+5280 d8c04257 arg mem_tx_fifo0_map ,contr 
+5281 d8400000 arg 0 ,temp 
+
+l2cap_malloc_get_full_map_loop:
+5282 e8c18000 ifetch 3 ,contr 
+5283 1fe17eff and pdata ,0xff ,pdata 
+5284 98418400 ior temp ,temp 
+5285 c2005282 loop l2cap_malloc_get_full_map_loop 
+5286 6008c256 storet 1 ,mem_used_map 
+5287 20600000 rtn 
+
+l2cap_malloc_into_fifo:
+5288 47154025 bpatchx patch25_2 ,mem_patch25 
+5289 2040526e call l2cap_malloc_is_fifo_full 
+528a 243a2a8c nbranch assert ,blank 
+528b 20405274 call l2cap_malloc_is_fifo_empty 
+528c 203a5295 branch l2cap_malloc_into_fifo_no_push ,blank 
+528d 6801c25a fetch 3 ,mem_tx_fifo1 
+528e 6001c257 store 3 ,mem_tx_fifo0 
+528f e8c18000 ifetch 3 ,contr 
+5290 e0a18000 istore 3 ,contw 
+5291 e8c18000 ifetch 3 ,contr 
+5292 e0a18000 istore 3 ,contw 
+5293 58000000 setarg 0 
+5294 e0a18000 istore 3 ,contw 
+
+l2cap_malloc_into_fifo_no_push:
+5295 d8400000 arg 0 ,temp 
+5296 19627e00 copy timeup ,pdata 
+5297 98e0fe00 iadd queue ,pdata 
+
+l2cap_malloc_into_fifo_loop:
+5298 f9200400 qset1 temp 
+5299 18e08e01 increase 1 ,queue 
+529a 98e67c00 isub queue ,null 
+529b 2422d298 nbranch l2cap_malloc_into_fifo_loop ,zero 
+529c 1a4d7e00 lshift8 regb ,pdata 
+529d 9841fe00 ior temp ,pdata 
+529e 6001c260 store 3 ,mem_tx_fifo3 
+529f 20600000 rtn 
+
+l2cap_malloc_enough:
+52a0 4715c025 bpatchx patch25_3 ,mem_patch25 
+52a1 2040527e call l2cap_malloc_get_full_map 
+52a2 18e22600 copy queue ,regc 
+52a3 d8400000 arg 0 ,temp 
+52a4 d9600000 arg 0 ,timeup 
+
+l2cap_malloc_enough_loop:
+52a5 18e27e00 copy queue ,pdata 
+52a6 c00452b0 beq 8 ,l2cap_malloc_enough_end 
+52a7 6800c256 fetch 1 ,mem_used_map 
+52a8 afefffff qisolate1 pdata 
+52a9 2020d2b0 branch l2cap_malloc_enough_end ,true 
+52aa 18408480 increase 128 ,temp 
+52ab 18e08e01 increase 1 ,queue 
+52ac 1a227e00 copy rega ,pdata 
+52ad 98467c00 isub temp ,null 
+52ae 2022d2b0 branch l2cap_malloc_enough_end ,zero 
+52af 202152a5 branch l2cap_malloc_enough_loop ,positive 
+
+l2cap_malloc_enough_end:
+52b0 18427e00 copy temp ,pdata 
+52b1 9a267c00 isub rega ,null 
+52b2 242152b6 nbranch l2cap_malloc_enough_rtn ,positive 
+52b3 18e27e00 copy queue ,pdata 
+52b4 1a620400 copy regc ,temp 
+52b5 98461600 isub temp ,timeup 
+
+l2cap_malloc_enough_rtn:
+52b6 1a620e00 copy regc ,queue 
+52b7 20600000 rtn 
+
+l2cap_malloc_signal_channel:
+52b8 47164025 bpatchx patch25_4 ,mem_patch25 
+52b9 da20007f arg l2cap_signal_malloc_size ,rega 
+52ba 20405240 call l2cap_malloc 
+52bb 6001026b store 2 ,mem_l2cap_signal_tx_buff_ptr 
+52bc 1fe0fe04 increase 4 ,pdata 
+52bd 6001026d store 2 ,mem_l2cap_signal_tx_payload_ptr 
+52be 58000000 setarg 0 
+52bf 6001026f store 2 ,mem_l2cap_signal_tx_length 
+52c0 20600000 rtn 
+
+l2cap_get_signal_tx_buff:
+52c1 6801026b fetch 2 ,mem_l2cap_signal_tx_buff_ptr 
+52c2 202052e2 branch l2cap_util_pdata_to_contw 
+
+l2cap_get_signal_tx_payload:
+52c3 6801026d fetch 2 ,mem_l2cap_signal_tx_payload_ptr 
+52c4 202052e2 branch l2cap_util_pdata_to_contw 
+
+l2cap_malloc_sdp_channel:
+52c5 4716c025 bpatchx patch25_5 ,mem_patch25 
+52c6 da2000fa arg sdp_malloc_size ,rega 
+52c7 20405240 call l2cap_malloc 
+52c8 60010271 store 2 ,mem_sdp_tx_buff_ptr 
+52c9 1fe0fe04 increase 4 ,pdata 
+52ca 60010273 store 2 ,mem_sdp_tx_payload_ptr 
+52cb 58000000 setarg 0 
+52cc 60010275 store 2 ,mem_sdp_tx_pkt_length 
+52cd 20600000 rtn 
+
+l2cap_get_sdp_tx_buff:
+52ce 68010271 fetch 2 ,mem_sdp_tx_buff_ptr 
+52cf 202052e2 branch l2cap_util_pdata_to_contw 
+
+l2cap_get_sdp_tx_payload:
+52d0 68010273 fetch 2 ,mem_sdp_tx_payload_ptr 
+52d1 202052e2 branch l2cap_util_pdata_to_contw 
+
+l2cap_malloc_rfcomm_channel:
+52d2 47174025 bpatchx patch25_6 ,mem_patch25 
+52d3 20407e7c call push_stack 
+52d4 70028401 jam rfcomm_malloc_fail ,mem_rfcomm_malloc_fail_flag 
+52d5 2040526e call l2cap_malloc_is_fifo_full 
+52d6 247a0000 nrtn blank 
+52d7 da20007f arg rfcomm_malloc_size ,rega 
+52d8 20405240 call l2cap_malloc 
+52d9 60010277 store 2 ,mem_rfcomm_tx_buff_ptr 
+52da 1fe0fe04 increase 4 ,pdata 
+52db 60010279 store 2 ,mem_rfcomm_tx_payload_ptr 
+52dc 58000000 setarg 0 
+52dd 6001027b store 2 ,mem_rfcomm_tx_pkt_length 
+52de 70028400 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag 
+52df 20207e8c branch pop_stack 
+
+l2cap_get_rfcomm_tx_buff:
+52e0 68010277 fetch 2 ,mem_rfcomm_tx_buff_ptr 
+52e1 202052e2 branch l2cap_util_pdata_to_contw 
+
+l2cap_util_pdata_to_contw:
+52e2 203a2a8c branch assert ,blank 
+52e3 1fe20a00 copy pdata ,contw 
+52e4 20600000 rtn 
+
+l2cap_lpm_save_calc_len:
+52e5 4717c025 bpatchx patch25_7 ,mem_patch25 
+52e6 da400000 arg 0 ,regb 
+52e7 da204257 arg mem_tx_fifo0_map ,rega 
+52e8 1a20a3fe increase -2 ,rega 
+
+l2cap_lpm_save_calc_len_loop:
+52e9 1a20a202 increase 2 ,rega 
+52ea 58004263 setarg mem_tx_fifo_end 
+52eb 9a267c00 isub rega ,null 
+52ec 2022d2f5 branch l2cap_lpm_save_calc_len_end ,zero 
+52ed ea208000 ifetch 1 ,rega 
+52ee 1a20a201 increase 1 ,rega 
+52ef 203a52e9 branch l2cap_lpm_save_calc_len_loop ,blank 
+52f0 ea290000 ifetcht 2 ,rega 
+52f1 e8410000 ifetch 2 ,temp 
+52f2 9a40a400 iadd regb ,regb 
+52f3 1a40a404 increase 4 ,regb 
+52f4 202052e9 branch l2cap_lpm_save_calc_len_loop 
+
+l2cap_lpm_save_calc_len_end:
+52f5 1a427e00 copy regb ,pdata 
+52f6 20600000 rtn 
+
+l2cap_lpm_get_wake_lock:
+52f7 d8e0000c arg wake_lock_l2cap_tx ,queue 
+52f8 20202c32 branch lpm_get_wake_lock 
+
+l2cap_lpm_put_wake_lock:
+52f9 d8e0000c arg wake_lock_l2cap_tx ,queue 
+52fa 20202c36 branch lpm_put_wake_lock 
+
+l2cap_lpm_save_txbuf:
+52fb 47184026 bpatchx patch26_0 ,mem_patch26 
+52fc 2040527e call l2cap_malloc_get_full_map 
+52fd 6800c256 fetch 1 ,mem_used_map 
+52fe 207a0000 rtn blank 
+52ff 204052e5 call l2cap_lpm_save_calc_len 
+5300 d8400100 arg l2cap_lpm_txbuf_len ,temp 
+5301 98467c00 isub temp ,null 
+5302 202152f7 branch l2cap_lpm_get_wake_lock ,positive 
+5303 204052f9 call l2cap_lpm_put_wake_lock 
+5304 d8a04263 arg mem_l2cap_lpm_txbuf ,contw 
+5305 da204257 arg mem_tx_fifo0 ,rega 
+
+l2cap_lpm_save_txbuf_loop:
+5306 58004263 setarg mem_tx_fifo_end 
+5307 9a267c00 isub rega ,null 
+5308 20628000 rtn zero 
+5309 ea208000 ifetch 1 ,rega 
+530a 1a20a201 increase 1 ,rega 
+530b 243a530f nbranch l2cap_lpm_save_txbuf_nempty ,blank 
+530c e0a10000 istore 2 ,contw 
+530d 1a20a202 increase 2 ,rega 
+530e 20205306 branch l2cap_lpm_save_txbuf_loop 
+
+l2cap_lpm_save_txbuf_nempty:
+530f ea210000 ifetch 2 ,rega 
+5310 1a20a202 increase 2 ,rega 
+5311 1fe20c00 copy pdata ,contr 
+5312 e8c10000 ifetch 2 ,contr 
+5313 e0a10000 istore 2 ,contw 
+5314 1fe27200 copy pdata ,loopcnt 
+5315 1f20f202 increase 2 ,loopcnt 
+5316 20407f01 call memcpy 
+5317 20205306 branch l2cap_lpm_save_txbuf_loop 
+
+l2cap_lpm_load_txbuf:
+5318 4718c026 bpatchx patch26_1 ,mem_patch26 
+5319 2040527e call l2cap_malloc_get_full_map 
+531a 6800c256 fetch 1 ,mem_used_map 
+531b 207a0000 rtn blank 
+531c da204258 arg mem_tx_fifo0_ptr ,rega 
+531d 1a20a3fd increase -3 ,rega 
+531e d8c04263 arg mem_l2cap_lpm_txbuf ,contr 
+
+l2cap_lpm_load_txbuf_loop:
+531f 1a20a203 increase 3 ,rega 
+5320 58004264 setarg mem_tx_fifo_end + 1 
+5321 9a267c00 isub rega ,null 
+5322 20628000 rtn zero 
+5323 e8c10000 ifetch 2 ,contr 
+5324 203a531f branch l2cap_lpm_load_txbuf_loop ,blank 
+5325 1fe0fe04 increase 4 ,pdata 
+5326 1fe27200 copy pdata ,loopcnt 
+5327 18c22400 copy contr ,regb 
+5328 ea210000 ifetch 2 ,rega 
+5329 1fe20a00 copy pdata ,contw 
+532a 1a420c00 copy regb ,contr 
+532b 18c08dfe increase -2 ,contr 
+532c 20407f01 call memcpy 
+532d 2020531f branch l2cap_lpm_load_txbuf_loop 
+
+le_init_conn:
+532e 47194026 bpatchx patch26_2 ,mem_patch26 
+532f 7855fc00 disable wake 
+5330 70045501 jam 1 ,mem_le_conn_handle 
+5331 70043f03 jam 3 ,mem_le_state 
+5332 70045601 jam 1 ,mem_le_arq 
+5333 5fffffff setarg -1 
+5334 60010459 store 2 ,mem_le_event_count 
+5335 18007e00 force 0 ,pdata 
+5336 60008457 store 1 ,mem_le_ch 
+5337 60008462 store 1 ,mem_le_op 
+5338 6001c169 store 3 ,mem_sniff_rcv 
+5339 6001c16c store 3 ,mem_sniff_lost 
+533a 6002c403 store 5 ,mem_le_pcnt_tx 
+533b 79207e27 set1 39 ,pdata 
+533c 6002c408 store 5 ,mem_le_pcnt_rx 
+533d 7043dc01 jam 1 ,mem_le_txheader 
+533e 7043dd00 jam 0 ,mem_le_txlen 
+533f 202056ed branch le_supervision_flush 
+
+le_init_master:
+5340 4719c026 bpatchx patch26_3 ,mem_patch26 
+5341 7834fc00 enable master 
+5342 70044003 jam lemode_master ,mem_le_mode 
+5343 70047801 jam 1 ,mem_le_att_handle 
+5344 70445a01 jam 1 ,mem_le_search_handle_start 
+5345 5800ffff setarg 0xffff 
+5346 6001445c store 2 ,mem_le_search_handle_end 
+5347 18007e00 force 0 ,pdata 
+5348 6002c408 store 5 ,mem_le_pcnt_rx 
+5349 79207e27 set1 39 ,pdata 
+534a 6002c403 store 5 ,mem_le_pcnt_tx 
+534b 2020532e branch le_init_conn 
+
+le_init_slave:
+534c 471a4026 bpatchx patch26_4 ,mem_patch26 
+534d 7854fc00 disable master 
+534e 58000017 setarg 0x17 
+534f 600144a8 store 2 ,mem_le_remote_mtu 
+5350 70044001 jam lemode_slave ,mem_le_mode 
+5351 70436e00 jam 0 ,mem_le_adv_enable 
+5352 7000a000 jam 0 ,mem_lpm_current_mult 
+5353 7044c400 jam flag_le_pairing_null ,mem_le_pairing_state 
+5354 7044c500 jam flag_le_enc_null ,mem_le_enc_state 
+5355 6801046d fetch 2 ,mem_le_superto 
+5356 600144ba store 2 ,mem_le_init_superto 
+5357 68010441 fetch 2 ,mem_le_tsniff 
+5358 1feffe05 mul32 pdata ,5 ,pdata 
+5359 1ff1fe00 rshift4 pdata ,pdata 
+535a 6001046d store 2 ,mem_le_superto 
+535b 2020532e branch le_init_conn 
+
+le_dispatch:
+535c 204053c4 call le_enable 
+535d 204055e8 call le_scan 
+535e 204056f0 call le_adv 
+535f 202053ce branch le_disable 
+
+le_conn_dispatch:
+5360 471ac026 bpatchx patch26_5 ,mem_patch26 
+5361 204053c4 call le_enable 
+5362 204032f4 call app_process_ble 
+5363 68008440 fetch 1 ,mem_le_mode 
+5364 c001d366 beq lemode_master ,le_master_dispatch 
+5365 2020537a branch le_slave_dispatch 
+
+le_master_dispatch:
+5366 471b4026 bpatchx patch26_6 ,mem_patch26 
+5367 7834fc00 enable master 
+5368 204056e4 call le_supervision_update 
+5369 20215377 branch le_master_disconn ,positive 
+536a 20402c6c call check_ble_disabled 
+536b 20405413 call le_setup 
+536c 2040561e call le_prepare_tx 
+536d 7856fc00 disable match 
+536e 204054bf call le_transmit_receive_sifs 
+536f 24768000 nrtn match 
+5370 471bc026 bpatchx patch26_7 ,mem_patch26 
+5371 68008005 fetch 1 ,mem_le_conn_rcv 
+5372 1fe0fe01 increase 1 ,pdata 
+5373 60008005 store 1 ,mem_le_conn_rcv 
+5374 204055aa call le_acknowledge 
+5375 7854fc00 disable master 
+5376 20600000 rtn 
+
+le_master_disconn:
+5377 204053a9 call le_disconnect 
+5378 7854fc00 disable master 
+5379 20600000 rtn 
+
+le_slave_dispatch:
+537a 471c4027 bpatchx patch27_0 ,mem_patch27 
+537b 70450f00 jam 0 ,mem_le_md_count 
+537c 20407aaf call sp_calc_sequence_256 
+537d 20405c18 call le_secure_connect_sm 
+537e 78577c00 disable attempt 
+537f 204056e4 call le_supervision_update 
+5380 202153a9 branch le_slave_disconn ,positive 
+5381 20402c6c call check_ble_disabled 
+5382 20405413 call le_setup 
+5383 20405489 call le_receive_slave 
+5384 242c539b nbranch le_slave_unsync ,sync 
+5385 204053b7 call le_got_first_packet 
+5386 2036d388 branch le_slave_match ,match 
+5387 20205395 branch le_slave_cont 
+
+le_slave_match:
+5388 471cc027 bpatchx patch27_1 ,mem_patch27 
+5389 6800c50f fetch 1 ,mem_le_md_count 
+538a 1fe0fe01 pincrease 1 
+538b 6000c50f store 1 ,mem_le_md_count 
+538c c0065395 beq le_md_max_count ,le_slave_cont 
+538d 204055aa call le_acknowledge 
+538e 2040561e call le_prepare_tx 
+538f 204054c7 call le_transmit_norx 
+5390 2040567e call le_parse 
+5391 680141fb fetch 2 ,mem_cb_ble_transmit 
+5392 20407f9c call callback_func 
+5393 204053a0 call le_check_md 
+5394 203453a4 branch le_slave_more_data ,user 
+
+le_slave_cont:
+5395 471d4027 bpatchx patch27_2 ,mem_patch27 
+5396 20405be4 call le_pairing_sm 
+5397 20405bdb call le_check_paring_time 
+5398 20407d9c call check_51cmd 
+5399 68008462 fetch 1 ,mem_le_op 
+539a c281d3a9 bbit1 op_disconn ,le_slave_disconn 
+
+le_slave_unsync:
+539b 471dc027 bpatchx patch27_3 ,mem_patch27 
+539c 204057f4 call le_lpm_set_mult 
+539d 2040559d call le_update_channel_map 
+539e 20405575 call le_update_param 
+539f 20202841 branch calc_clke_offset 
+
+le_check_md:
+53a0 78547c00 disable user 
+53a1 c5157fe7 bmark1 mark_ble_rx_md ,enable_user 
+53a2 c514ffe7 bmark1 mark_ble_tx_md ,enable_user 
+53a3 20600000 rtn 
+
+le_slave_more_data:
+53a4 471e4027 bpatchx patch27_4 ,mem_patch27 
+53a5 78377c00 enable attempt 
+53a6 204054c1 call le_transmit_receive_sifs_notx 
+53a7 2036d388 branch le_slave_match ,match 
+53a8 20205395 branch le_slave_cont 
+
+le_slave_disconn:
+
+le_disconnect:
+53a9 471ec027 bpatchx patch27_5 ,mem_patch27 
+53aa 204053af call le_clear_connection_info 
+53ab 204033b4 call app_disconn_reason_collect_ble 
+53ac 20407a77 call sp_initialize_256 
+53ad 700a9915 jam bt_evt_le_disconnected ,mem_fifo_temp 
+53ae 20207d86 branch ui_ipc_send_event 
+
+le_clear_connection_info:
+53af 58000000 setarg 0 
+53b0 6004c4ff store 9 ,mem_le_tx_buff_used 
+53b1 70045500 jam 0 ,mem_le_conn_handle 
+53b2 70044000 jam lemode_idle ,mem_le_mode 
+53b3 70043f00 jam 0 ,mem_le_state 
+53b4 7044c500 jam flag_le_enc_null ,mem_le_enc_state 
+53b5 7044c400 jam flag_le_pairing_null ,mem_le_pairing_state 
+53b6 20600000 rtn 
+
+le_got_first_packet:
+53b7 471f4027 bpatchx patch27_6 ,mem_patch27 
+53b8 68008005 fetch 1 ,mem_le_conn_rcv 
+53b9 1fe0fe01 increase 1 ,pdata 
+53ba 60008005 store 1 ,mem_le_conn_rcv 
+53bb 6800843f fetch 1 ,mem_le_state 
+53bc c3818000 rtnbit1 lestate_got_first_packet 
+53bd 79207e03 set1 lestate_got_first_packet 
+53be 6000843f store 1 ,mem_le_state 
+53bf 680144ba fetch 2 ,mem_le_init_superto 
+53c0 6001046d store 2 ,mem_le_superto 
+53c1 58000000 setarg 0 
+53c2 600244e5 store 4 ,mem_le_transmit_window 
+53c3 20600000 rtn 
+
+le_enable:
+53c4 471fc027 bpatchx patch27_7 ,mem_patch27 
+53c5 70890f36 jam 0x36 ,rf_adc_goff 
+53c6 70890b5f jam 0x5f ,rf_agc_nsat 
+53c7 783b7c00 enable le 
+53c8 70891407 jam 7 ,rfen_ulp 
+53c9 20402c6c call check_ble_disabled 
+53ca 6800c1e0 fetch 1 ,mem_250k_freq_enable 
+53cb 207a0000 rtn blank 
+53cc 70890ab8 jam 0xb8 ,rf_iq_gain 
+53cd 20600000 rtn 
+
+le_disable:
+53ce 47204028 bpatchx patch28_0 ,mem_patch28 
+53cf 70890f2e jam 0x2e ,rf_adc_goff 
+53d0 70890bff jam 0xff ,rf_agc_nsat 
+53d1 785b7c00 disable le 
+53d2 70891403 jam 3 ,rfen_ulp 
+53d3 db600000 arg 0 ,stop_watch 
+53d4 20600000 rtn 
+
+le_prep:
+53d5 7844fc00 disable enable_crc 
+53d6 7843fc00 disable enable_white 
+53d7 68018467 fetch 3 ,mem_le_crcinit 
+53d8 98001e00 iforce crc24_init 
+53d9 68008016 fetch 1 ,mem_le_ch_mapped 
+53da 1fed8400 reverse pdata ,temp 
+53db 79200401 set1 1 ,temp 
+53dc 18431c00 rshift temp ,white_init 
+53dd 20600000 rtn 
+
+lerx_setfreq:
+53de 204053e6 call le_setfreq 
+53df 2040291f call set_freq_rx 
+53e0 58000500 setarg param_pll_setup 
+53e1 20402a8f call sleep 
+53e2 20202924 branch rf_rx_enable 
+
+letx_setfreq:
+53e3 2036a939 branch txon ,match 
+
+letx_setfreq0:
+53e4 204053e6 call le_setfreq 
+53e5 20202933 branch set_freq_tx 
+
+le_setfreq:
+53e6 4720c028 bpatchx patch28_1 ,mem_patch28 
+53e7 20402918 call set_sync_on 
+53e8 6800848c fetch 1 ,mem_le_testtype 
+53e9 243a53f9 nbranch le_ctf_test ,blank 
+53ea 68008016 fetch 1 ,mem_le_ch_mapped 
+53eb 1fe67c24 sub pdata ,36 ,null 
+53ec 202153f3 branch le_ctf_normal ,positive 
+53ed 18000400 force 0 ,temp 
+53ee c1128000 rtneq 37 
+53ef 18000418 force 24 ,temp 
+53f0 c1130000 rtneq 38 
+53f1 1800044e force 78 ,temp 
+53f2 20600000 rtn 
+
+le_ctf_normal:
+53f3 1fe67c0a sub pdata ,10 ,null 
+53f4 202153f6 branch le_ctf_low ,positive 
+53f5 1fe0fe01 increase 1 ,pdata 
+
+le_ctf_low:
+53f6 1fe3fe00 lshift pdata ,pdata 
+53f7 1fe08402 add pdata ,2 ,temp 
+53f8 20600000 rtn 
+
+le_ctf_test:
+53f9 68008016 fetch 1 ,mem_le_ch_mapped 
+53fa 1fe38400 lshift pdata ,temp 
+53fb 20600000 rtn 
+
+le_sca_map:
+53fc d84001f4 arg 500 ,temp 
+53fd 207a0000 rtn blank 
+53fe d84000fa arg 250 ,temp 
+53ff c1008000 rtneq 1 
+5400 d8400096 arg 150 ,temp 
+5401 c1010000 rtneq 2 
+5402 d8400064 arg 100 ,temp 
+5403 c1018000 rtneq 3 
+5404 d840004b arg 75 ,temp 
+5405 c1020000 rtneq 4 
+5406 d8400032 arg 50 ,temp 
+5407 c1028000 rtneq 5 
+5408 d8400028 arg 40 ,temp 
+5409 c1030000 rtneq 6 
+540a d8400014 arg 20 ,temp 
+540b 20600000 rtn 
+
+le_adv_access:
+540c 588e89be setarg 0x8e89be 
+540d 1fed7e00 lshift8 pdata ,pdata 
+540e 1fe1fed6 or_into 0xd6 ,pdata 
+540f 98001200 iforce access 
+5410 58555555 setarg 0x555555 
+5411 60018467 store 3 ,mem_le_crcinit 
+5412 20600000 rtn 
+
+le_setup:
+5413 47214028 bpatchx patch28_2 ,mem_patch28 
+5414 78287c00 enable swfine 
+5415 68020463 fetch 4 ,mem_le_access 
+5416 98001200 iforce access 
+5417 20405466 call le_map_channel 
+5418 58000200 setarg 0x200 
+5419 2034d41c branch le_setup_master ,master 
+541a 6801044d fetch 2 ,mem_le_receive_window 
+541b 1fe37e00 rshift pdata ,pdata 
+
+le_setup_master:
+541c d8400500 arg param_pll_setup ,temp 
+541d 9840fe00 iadd temp ,pdata 
+541e 20402a24 call ahead_window 
+541f 1b427e00 deposit clke 
+5420 60030491 store 6 ,mem_le_rxon_ts 
+5421 20600000 rtn 
+
+le_next_adv_channel:
+5422 4721c028 bpatchx patch28_3 ,mem_patch28 
+5423 68008016 fetch 1 ,mem_le_ch_mapped 
+5424 c012d428 beq 37 ,le_next_adv_channel_curr_channel_37 
+5425 c013542e beq 38 ,le_next_adv_channel_curr_channel_38 
+5426 c013d434 beq 39 ,le_next_adv_channel_curr_channel_39 
+5427 20205434 branch le_next_adv_channel_curr_channel_39 
+
+le_next_adv_channel_curr_channel_37:
+5428 6808c48d fetcht 1 ,mem_le_adv_channel_map 
+5429 284ffe01 isolate1 bit_adv_channel_map_38 ,temp 
+542a 2020d43f branch set_le_next_adv_channel_38 ,true 
+542b 284ffe02 isolate1 bit_adv_channel_map_39 ,temp 
+542c 2020d444 branch set_le_next_adv_channel_39 ,true 
+542d 2020543a branch set_le_next_adv_channel_37 
+
+le_next_adv_channel_curr_channel_38:
+542e 6808c48d fetcht 1 ,mem_le_adv_channel_map 
+542f 284ffe02 isolate1 bit_adv_channel_map_39 ,temp 
+5430 2020d444 branch set_le_next_adv_channel_39 ,true 
+5431 284ffe00 isolate1 bit_adv_channel_map_37 ,temp 
+5432 2020d43a branch set_le_next_adv_channel_37 ,true 
+5433 2020543f branch set_le_next_adv_channel_38 
+
+le_next_adv_channel_curr_channel_39:
+5434 6808c48d fetcht 1 ,mem_le_adv_channel_map 
+5435 284ffe00 isolate1 bit_adv_channel_map_37 ,temp 
+5436 2020d43a branch set_le_next_adv_channel_37 ,true 
+5437 284ffe01 isolate1 bit_adv_channel_map_38 ,temp 
+5438 2020d43f branch set_le_next_adv_channel_38 ,true 
+5439 20205444 branch set_le_next_adv_channel_39 
+
+set_le_next_adv_channel_37:
+543a 70001625 jam 37 ,mem_le_ch_mapped 
+543b 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp 
+543c 79207e00 set1 bit_adv_channel_map_37 ,pdata 
+543d 60008ac2 store 1 ,mem_le_adv_channel_map_temp 
+543e 20600000 rtn 
+
+set_le_next_adv_channel_38:
+543f 70001626 jam 38 ,mem_le_ch_mapped 
+5440 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp 
+5441 79207e01 set1 bit_adv_channel_map_38 ,pdata 
+5442 60008ac2 store 1 ,mem_le_adv_channel_map_temp 
+5443 20600000 rtn 
+
+set_le_next_adv_channel_39:
+5444 70001627 jam 39 ,mem_le_ch_mapped 
+5445 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp 
+5446 79207e02 set1 bit_adv_channel_map_39 ,pdata 
+5447 60008ac2 store 1 ,mem_le_adv_channel_map_temp 
+5448 20600000 rtn 
+
+le_context_nexthop:
+5449 47224028 bpatchx patch28_4 ,mem_patch28 
+544a 1a208c01 add rega ,coffset_mode ,contr 
+544b e8c08000 ifetch 1 ,contr 
+544c c4000000 rtnbit0 mode_le 
+544d 1a208a1a add rega ,coffset_le_event_cnt ,contw 
+544e e8a10000 ifetch 2 ,contw 
+544f 1fe0fe01 increase 1 ,pdata 
+5450 e0a10000 istore 2 ,contw 
+5451 1a208c19 add rega ,coffset_le_hop ,contr 
+5452 e8c08000 ifetch 1 ,contr 
+5453 1a208a18 add rega ,coffset_le_ch ,contw 
+5454 e8a88000 ifetcht 1 ,contw 
+5455 9840fe00 iadd temp ,pdata 
+5456 1fe67c24 sub pdata ,36 ,null 
+5457 20215459 branch le_nexthop_nowrap ,positive 
+5458 1fe0ffdb increase -37 ,pdata 
+
+le_nexthop_nowrap:
+5459 e0a08000 istore 1 ,contw 
+545a 20600000 rtn 
+
+le_calc_channel_map:
+545b 4722c028 bpatchx patch28_5 ,mem_patch28 
+545c 6802846f fetch 5 ,mem_le_channel_map 
+545d 18000400 force 0 ,temp 
+545e 18007225 force 37 ,loopcnt 
+
+le_count_channels_loop:
+545f c3005461 bbit0 0 ,le_count_channels_notused 
+5460 18408401 increase 1 ,temp 
+
+le_count_channels_notused:
+5461 1fe37e00 rshift pdata ,pdata 
+5462 c200545f loop le_count_channels_loop 
+5463 1840ffff add temp ,-1 ,pdata 
+5464 60008461 store 1 ,mem_le_channels 
+5465 20600000 rtn 
+
+le_map_channel:
+5466 47234028 bpatchx patch28_6 ,mem_patch28 
+5467 68008457 fetch 1 ,mem_le_ch 
+5468 98000e00 iforce queue 
+5469 680a846f fetcht 5 ,mem_le_channel_map 
+546a a84fffff qisolate1 temp 
+546b 2020d47c branch le_map_channel_end ,true 
+
+le_map_channel_next:
+546c 4723c028 bpatchx patch28_7 ,mem_patch28 
+546d 68008461 fetch 1 ,mem_le_channels 
+546e 98e67e00 isub queue ,pdata 
+546f 20215472 branch le_map_channel_cont ,positive 
+5470 1fe60fff sub pdata ,-1 ,queue 
+5471 2020546c branch le_map_channel_next 
+
+le_map_channel_cont:
+5472 18e27200 copy queue ,loopcnt 
+5473 18000e00 force 0 ,queue 
+
+le_map_channel_loop:
+5474 a84fffff qisolate1 temp 
+5475 2020d477 branch le_map_channel_skip ,true 
+5476 1f20f201 increase 1 ,loopcnt 
+
+le_map_channel_skip:
+5477 1f227e00 deposit loopcnt 
+5478 203a547c branch le_map_channel_end ,blank 
+5479 18e08e01 increase 1 ,queue 
+547a 1f20f3ff increase -1 ,loopcnt 
+547b 20205474 branch le_map_channel_loop 
+
+le_map_channel_end:
+547c 18e27e00 deposit queue 
+547d 60008016 store 1 ,mem_le_ch_mapped 
+547e 20600000 rtn 
+
+le_wait_tx:
+547f 2034d482 branch le_wait_master ,master 
+5480 37c18200 until null ,timeout 
+5481 20600000 rtn 
+
+le_wait_master:
+5482 d9600ea0 arg 0xea0 ,timeup 
+5483 34730200 until clkn_rt ,meet 
+5484 20600000 rtn 
+
+le_receive_adv:
+5485 78487c00 disable swfine 
+5486 6801436c fetch 2 ,mem_le_scan_window 
+5487 1fe21600 copy pdata ,timeup 
+5488 2020548e branch le_receive_packet 
+
+le_receive_slave:
+5489 47244029 bpatchx patch29_0 ,mem_patch29 
+548a 78287c00 enable swfine 
+548b 6801044d fetch 2 ,mem_le_receive_window 
+548c 680a44e5 fetcht 4 ,mem_le_transmit_window 
+548d 98409600 iadd temp ,timeup 
+
+le_receive_packet:
+548e 204053de call lerx_setfreq 
+
+le_receive_rxon:
+548f 4724c029 bpatchx patch29_1 ,mem_patch29 
+5490 204053d5 call le_prep 
+5491 7856fc00 disable match 
+5492 7826fc00 enable decode_fec0 
+5493 7830fc00 enable is_rx 
+5494 78507c00 disable is_tx 
+5495 19623600 copy timeup ,stop_watch 
+5496 37c18400 correlate null ,timeout 
+5497 2037549a branch le_receive_on_attempt ,attempt 
+5498 1b420400 copy clke ,temp 
+5499 600b009a storet 6 ,mem_sync_clke 
+
+le_receive_on_attempt:
+549a 242c264d nbranch end_of_packet ,sync 
+549b 203754a1 branch le_receive_skip ,attempt 
+549c dd2001e0 arg param_clke_cal_le ,clke_rt 
+549d 1c225000 copy bt_clk ,clke_bt 
+549e 6800843f fetch 1 ,mem_le_state 
+549f c301d4a1 bbit0 lestate_got_first_packet ,le_receive_skip 
+54a0 2055ab05 call lpm_adjust_clk ,wake 
+
+le_receive_skip:
+54a1 47254029 bpatchx patch29_2 ,mem_patch29 
+54a2 204029bb call save_rssi 
+54a3 7823fc00 enable enable_white 
+54a4 7824fc00 enable enable_crc 
+54a5 09800008 parse demod ,bucket ,8 
+54a6 19897e00 rshift3 pwindow ,pdata 
+54a7 600082d9 store 1 ,mem_le_rxbuf 
+54a8 09800008 parse demod ,bucket ,8 
+54a9 19897e00 rshift3 pwindow ,pdata 
+54aa e0a08000 istore 1 ,contw 
+54ab 1fe1723f and pdata ,0x3f ,loopcnt 
+54ac 2022d4b1 branch lerx_nopayload ,zero 
+
+lerx_loop:
+54ad 09800008 parse demod ,bucket ,8 
+54ae 19897e00 rshift3 pwindow ,pdata 
+54af e0a08000 istore 1 ,contw 
+54b0 c20054ad loop lerx_loop 
+
+lerx_nopayload:
+54b1 4725c029 bpatchx patch29_3 ,mem_patch29 
+54b2 09800018 parse demod ,bucket ,24 
+54b3 78287c00 enable swfine 
+54b4 db600664 arg param_sifs ,stop_watch 
+54b5 1fef7e00 rshift32 pdata ,pdata 
+54b6 1ff17e00 rshift16 pdata ,pdata 
+54b7 e0a18000 istore 3 ,contw 
+54b8 2023264d branch end_of_packet ,crc_failed 
+54b9 7836fc00 enable match 
+54ba 68008017 fetch 1 ,mem_last_freq 
+54bb 1fe0a200 add pdata ,0 ,rega 
+54bc 20402981 call rf_write_freq 
+54bd 7846fc00 disable decode_fec0 
+54be 20202918 branch set_sync_on 
+
+le_transmit_receive_sifs:
+54bf 47264029 bpatchx patch29_4 ,mem_patch29 
+54c0 204054c9 call le_transmit 
+
+le_transmit_receive_sifs_notx:
+54c1 68088017 fetcht 1 ,mem_last_freq 
+54c2 2040291f call set_freq_rx 
+54c3 20402924 call rf_rx_enable 
+54c4 78287c00 enable swfine 
+54c5 d960157c arg 5500 ,timeup 
+54c6 2020548f branch le_receive_rxon 
+
+le_transmit_norx:
+54c7 204054c9 call le_transmit 
+54c8 2020264d branch end_of_packet 
+
+le_transmit:
+54c9 4726c029 bpatchx patch29_5 ,mem_patch29 
+54ca 204053d5 call le_prep 
+54cb 204053e3 call letx_setfreq 
+54cc 202054cd branch le_transmit0 
+
+le_transmit0:
+54cd 79202a00 set1 txgfsk ,radio_ctrl 
+54ce 782efc00 enable encode_fec0 
+54cf 78307c00 enable is_tx 
+54d0 7850fc00 disable is_rx 
+54d1 2040547f call le_wait_tx 
+54d2 19317e00 rshift16 access ,pdata 
+54d3 1fecfe00 rshift8 pdata ,pdata 
+54d4 1ff1fe00 rshift4 pdata ,pdata 
+54d5 08008628 inject mod ,40 
+54d6 7823fc00 enable enable_white 
+54d7 7824fc00 enable enable_crc 
+54d8 47274029 bpatchx patch29_6 ,mem_patch29 
+54d9 6800c3dc fetch 1 ,mem_le_txheader 
+54da 08008608 inject mod ,8 
+54db e8c08000 ifetch 1 ,contr 
+54dc 1fe1723f and pdata ,0x3f ,loopcnt 
+54dd 08008608 inject mod ,8 
+54de 2022d4e2 branch letr_nopayload ,zero 
+
+letr_loop:
+54df e8c08000 ifetch 1 ,contr 
+54e0 08008608 inject mod ,8 
+54e1 c20054df loop letr_loop 
+
+letr_nopayload:
+54e2 78247c00 enable enable_parity 
+54e3 08008618 inject mod ,24 
+54e4 78447c00 disable enable_parity 
+54e5 37d38200 until null ,tx_clear 
+54e6 20000064 nop 100 
+54e7 784efc00 disable encode_fec0 
+54e8 20600000 rtn 
+
+le_send_adv_ind:
+54e9 4727c029 bpatchx patch29_7 ,mem_patch29 
+54ea 6800c484 fetch 1 ,mem_le_adv_type 
+54eb c000d4f9 beq adv_direct_ind ,le_send_adv_direct_ind 
+54ec 6800c485 fetch 1 ,mem_le_adv_own_addr_type 
+54ed 1ff27e00 lshift4 pdata ,pdata 
+54ee 1febfe00 lshift2 pdata ,pdata 
+54ef 6000c3dc store 1 ,mem_le_txheader 
+54f0 6808c36f fetcht 1 ,mem_le_adv_data_len 
+54f1 1840fe06 add temp ,6 ,pdata 
+54f2 6000c3dd store 1 ,mem_le_txlen 
+54f3 680344a0 fetch 6 ,mem_le_lap 
+54f4 600343de store 6 ,mem_le_txpayload 
+54f5 18427200 copy temp ,loopcnt 
+54f6 d8c04370 arg mem_le_adv_data ,contr 
+54f7 20407ef4 call memcpy_fast 
+54f8 20205504 branch le_send_adv_transmit 
+
+le_send_adv_direct_ind:
+54f9 6800c486 fetch 1 ,mem_le_adv_direct_addr_type 
+54fa 1ff27e00 lshift4 pdata ,pdata 
+54fb 1febfe00 lshift2 pdata ,pdata 
+54fc 1fe0fe01 increase 1 ,pdata 
+54fd 6000c3dc store 1 ,mem_le_txheader 
+54fe 5800000c setarg 12 
+54ff 6000c3dd store 1 ,mem_le_txlen 
+5500 680344a0 fetch 6 ,mem_le_lap 
+5501 600343de store 6 ,mem_le_txpayload 
+5502 680341d0 fetch 6 ,mem_hci_plap 
+5503 e0a30000 istore 6 ,contw 
+
+le_send_adv_transmit:
+5504 4728402a bpatchx patch2a_0 ,mem_patch2a 
+5505 68008000 fetch 1 ,mem_le_adv_transmit 
+5506 1fe0fe01 increase 1 ,pdata 
+5507 60008000 store 1 ,mem_le_adv_transmit 
+5508 db600708 arg 1800 ,stop_watch 
+5509 7856fc00 disable match 
+550a 202054bf branch le_transmit_receive_sifs 
+
+le_send_scan_request:
+550b 4728c02a bpatchx patch2a_1 ,mem_patch2a 
+550c 6800c49e fetch 1 ,mem_le_scan_type 
+550d c1808000 rtnne le_scan_type_active 
+550e 68008000 fetch 1 ,mem_le_adv_transmit 
+550f 1fe0fe01 increase 1 ,pdata 
+5510 60008000 store 1 ,mem_le_adv_transmit 
+5511 d8400c03 arg 0x0c03 ,temp 
+5512 6800c49f fetch 1 ,mem_le_scan_own_addr_type 
+5513 7d3a0406 nsetflag blank ,le_sender_addr_bit ,temp 
+5514 1a227e00 copy rega ,pdata 
+5515 7d3a0407 nsetflag blank ,le_receiver_addr_bit ,temp 
+5516 600943dc storet 2 ,mem_le_txheader 
+5517 680344a0 fetch 6 ,mem_le_lap 
+5518 e0a30000 istore 6 ,contw 
+5519 6803044f fetch 6 ,mem_le_plap 
+551a e0a30000 istore 6 ,contw 
+551b 202054bf branch le_transmit_receive_sifs 
+
+le_send_scan_response:
+551c 4729402a bpatchx patch2a_2 ,mem_patch2a 
+551d d8400004 arg scan_rsp ,temp 
+551e 6800c485 fetch 1 ,mem_le_adv_own_addr_type 
+551f 7d3a0406 nsetflag blank ,le_sender_addr_bit ,temp 
+5520 6008c3dc storet 1 ,mem_le_txheader 
+5521 6808c38f fetcht 1 ,mem_le_scan_data_len 
+5522 1840fe06 add temp ,6 ,pdata 
+5523 6000c3dd store 1 ,mem_le_txlen 
+5524 680344a0 fetch 6 ,mem_le_lap 
+5525 600343de store 6 ,mem_le_txpayload 
+5526 d8c04390 arg mem_le_scan_data ,contr 
+5527 18427200 copy temp ,loopcnt 
+5528 20407ef4 call memcpy_fast 
+5529 204054c7 call le_transmit_norx 
+552a 20205706 branch le_adv_not_match 
+
+le_connect_request:
+552b 4729c02a bpatchx patch2a_3 ,mem_patch2a 
+552c 18007fff force -1 ,pdata 
+552d 38080001 setsect 2 ,1 
+552e 6002846f store 5 ,mem_le_channel_map 
+552f 2040545b call le_calc_channel_map 
+5530 18007204 force 4 ,loopcnt 
+5531 d8a00463 arg mem_le_access ,contw 
+5532 2040630d call generate_random_loop 
+5533 6801449c fetch 2 ,mem_le_timeout 
+5534 6001046d store 2 ,mem_le_superto 
+
+le_con_req_hop_retry:
+5535 180a7e00 random pdata 
+5536 1fe17e0f and_into 0xf ,pdata 
+5537 1fe67c04 sub pdata ,4 ,null 
+5538 20215535 branch le_con_req_hop_retry ,positive 
+5539 60008458 store 1 ,mem_le_hop 
+553a 600086e6 store 1 ,mem_tmp1 
+553b 472a402a bpatchx patch2a_4 ,mem_patch2a 
+553c 68094367 fetcht 2 ,mem_le_conn_interval 
+553d 60090441 storet 2 ,mem_le_tsniff 
+553e 18422600 copy temp ,regc 
+553f 1c40fe07 add clkn_bt ,7 ,pdata 
+5540 9a66fc00 idiv regc 
+5541 20407f86 call wait_div_end 
+5542 18072200 remainder rega 
+5543 9a267e00 isub rega ,pdata 
+5544 9a60fe00 iadd regc ,pdata 
+5545 68094365 fetcht 2 ,mem_le_dsniff 
+5546 9840fe00 iadd temp ,pdata 
+5547 60020443 store 4 ,mem_le_anchor 
+5548 9c462200 isub clkn_bt ,rega 
+5549 1a20a3fa increase -6 ,rega 
+554a da402205 arg 0x2205 ,regb 
+554b 6800c495 fetch 1 ,mem_le_conn_own_addr_type 
+554c 7d3a2406 nsetflag blank ,le_sender_addr_bit ,regb 
+554d 6800c48e fetch 1 ,mem_le_conn_peer_addr_type 
+554e 7d3a2407 nsetflag blank ,le_receiver_addr_bit ,regb 
+554f 1a427e00 copy regb ,pdata 
+5550 600143dc store 2 ,mem_le_txheader 
+5551 680344a0 fetch 6 ,mem_le_lap 
+5552 e0a30000 istore 6 ,contw 
+5553 6803044f fetch 6 ,mem_le_plap 
+5554 e0a30000 istore 6 ,contw 
+5555 68020463 fetch 4 ,mem_le_access 
+5556 e0a20000 istore 4 ,contw 
+5557 180a7e00 random pdata 
+5558 e0a10000 istore 2 ,contw 
+5559 180a7e00 random pdata 
+555a e0a08000 istore 1 ,contw 
+555b 18007e02 force 2 ,pdata 
+555c e0a08000 istore 1 ,contw 
+555d 1a2b7e00 rshift2 rega ,pdata 
+555e e0a10000 istore 2 ,contw 
+555f 1a6b7e00 rshift2 regc ,pdata 
+5560 e0a10000 istore 2 ,contw 
+5561 472ac02a bpatchx patch2a_5 ,mem_patch2a 
+5562 58000000 setarg 0 
+5563 e0a10000 istore 2 ,contw 
+5564 6801449c fetch 2 ,mem_le_timeout 
+5565 e0a10000 istore 2 ,contw 
+5566 6802846f fetch 5 ,mem_le_channel_map 
+5567 e0a28000 istore 5 ,contw 
+5568 68008458 fetch 1 ,mem_le_hop 
+5569 d84000a0 arg param_le_sca ,temp 
+556a 9841fe00 ior temp ,pdata 
+556b e0a08000 istore 1 ,contw 
+556c 204054c7 call le_transmit_norx 
+556d 580043dc setarg mem_le_txheader 
+556e 1fe08c12 add pdata ,18 ,contr 
+556f e8c18000 ifetch 3 ,contr 
+5570 60018467 store 3 ,mem_le_crcinit 
+5571 20600000 rtn 
+
+le_init_adv:
+5572 472b402a bpatchx patch2a_6 ,mem_patch2a 
+5573 7854fc00 disable master 
+5574 2020540c branch le_adv_access 
+
+le_update_param:
+5575 6800843f fetch 1 ,mem_le_state 
+5576 c4028000 rtnbit0 lestate_update_param 
+5577 68010459 fetch 2 ,mem_le_event_count 
+5578 6809045f fetcht 2 ,mem_le_instant 
+5579 98467e00 isub temp ,pdata 
+557a 24610000 nrtn positive 
+557b 60010a9a store 2 ,mem_pdatatemp 
+557c 472bc02a bpatchx patch2a_7 ,mem_patch2a 
+557d 6800843f fetch 1 ,mem_le_state 
+557e 793ffe05 set0 lestate_update_param ,pdata 
+557f 793ffe03 set0 lestate_got_first_packet ,pdata 
+5580 6000843f store 1 ,mem_le_state 
+5581 68020443 fetch 4 ,mem_le_anchor 
+5582 68090441 fetcht 2 ,mem_le_tsniff 
+5583 60090aa2 storet 2 ,mem_temp 
+5584 98462200 isub temp ,rega 
+5585 472c402b bpatchx patch2b_0 ,mem_patch2b 
+5586 6800c3d3 fetch 1 ,mem_le_new_param 
+5587 6000846a store 1 ,mem_le_window_size 
+5588 e8c90000 ifetcht 2 ,contr 
+5589 e8c10000 ifetch 2 ,contr 
+558a 1febfe00 lshift2 pdata ,pdata 
+558b 60010441 store 2 ,mem_le_tsniff 
+558c 184b8400 lshift2 temp ,temp 
+558d 9840fe00 iadd temp ,pdata 
+558e e8ca0000 ifetcht 4 ,contr 
+558f 600a046b storet 4 ,mem_le_slave_latency 
+5590 9a20fe00 iadd rega ,pdata 
+5591 1fe22800 copy pdata ,regab 
+5592 68010441 fetch 2 ,mem_le_tsniff 
+5593 68090aa2 fetcht 2 ,mem_temp 
+5594 98467e00 isub temp ,pdata 
+5595 68090a9a fetcht 2 ,mem_pdatatemp 
+5596 984ffe00 imul32 temp ,pdata 
+5597 9a80fe00 iadd regab ,pdata 
+5598 60020443 store 4 ,mem_le_anchor 
+5599 20405713 call le_receive_window_size 
+559a 6801046d fetch 2 ,mem_le_superto 
+559b 600144ba store 2 ,mem_le_init_superto 
+559c 20600000 rtn 
+
+le_update_channel_map:
+559d 472cc02b bpatchx patch2b_1 ,mem_patch2b 
+559e 6800843f fetch 1 ,mem_le_state 
+559f c4030000 rtnbit0 lestate_update_map 
+55a0 68010459 fetch 2 ,mem_le_event_count 
+55a1 6809045f fetcht 2 ,mem_le_instant 
+55a2 98467e00 isub temp ,pdata 
+55a3 24610000 nrtn positive 
+55a4 6800843f fetch 1 ,mem_le_state 
+55a5 793ffe06 set0 lestate_update_map ,pdata 
+55a6 6000843f store 1 ,mem_le_state 
+55a7 6802c3ce fetch 5 ,mem_le_new_map 
+55a8 6002846f store 5 ,mem_le_channel_map 
+55a9 2020545b branch le_calc_channel_map 
+
+le_acknowledge:
+55aa 472d402b bpatchx patch2b_2 ,mem_patch2b 
+55ab 204056ed call le_supervision_flush 
+55ac 204055c0 call le_check_wak 
+55ad 680082d9 fetch 1 ,mem_le_rxbuf 
+55ae 2feffe04 isolate1 md ,pdata 
+55af 7920802a setflag true ,mark_ble_rx_md ,mark 
+55b0 1fe37e00 rshift pdata ,pdata 
+55b1 9842fe00 ixor temp ,pdata 
+55b2 2feffe02 isolate1 nesn ,pdata 
+55b3 7920800f setflag true ,mark_old_packet ,mark 
+55b4 c6078000 rtnmark1 mark_old_packet 
+55b5 680082da fetch 1 ,mem_le_rxbuf + 1 
+55b6 203a55bc branch le_ack_unenc ,blank 
+55b7 6800843f fetch 1 ,mem_le_state 
+55b8 c30255bc bbit0 lestate_encryption ,le_ack_unenc 
+55b9 2040748d call load_sk 
+55ba 204073fb call le_decrypt 
+55bb 247a0000 nrtn blank 
+
+le_ack_unenc:
+55bc 68088456 fetcht 1 ,mem_le_arq 
+55bd 79400402 setflip nesn ,temp 
+55be 60088456 storet 1 ,mem_le_arq 
+55bf 20600000 rtn 
+
+le_check_wak:
+55c0 472dc02b bpatchx patch2b_3 ,mem_patch2b 
+55c1 68088456 fetcht 1 ,mem_le_arq 
+55c2 284c0005 isolate0 wak ,temp 
+55c3 20608000 rtn true 
+55c4 680082d9 fetch 1 ,mem_le_rxbuf 
+55c5 1fe3fe00 lshift pdata ,pdata 
+55c6 9842fe00 ixor temp ,pdata 
+55c7 c4018000 rtnbit0 sn 
+55c8 793f8405 set0 wak ,temp 
+55c9 79400403 setflip sn ,temp 
+55ca 60088456 storet 1 ,mem_le_arq 
+55cb 28400603 compare 3 ,temp ,3 
+55cc 24608000 nrtn true 
+55cd 6800c3de fetch 1 ,mem_le_txpayload 
+55ce c002d5d2 beq ll_start_enc_req ,le_set_enc 
+55cf 6800c4c5 fetch 1 ,mem_le_enc_state 
+55d0 c00155d6 beq flag_le_enc_pause ,le_clear_enc 
+55d1 20600000 rtn 
+
+le_set_enc:
+55d2 6800843f fetch 1 ,mem_le_state 
+55d3 79207e04 set1 lestate_encryption ,pdata 
+55d4 6000843f store 1 ,mem_le_state 
+55d5 20600000 rtn 
+
+le_clear_enc:
+55d6 472e402b bpatchx patch2b_4 ,mem_patch2b 
+55d7 7044c500 jam flag_le_enc_null ,mem_le_enc_state 
+55d8 dfe00000 arg 0 ,pdata 
+55d9 6002440d store 4 ,mem_le_last_mic 
+55da 6002c403 store 5 ,mem_le_pcnt_tx 
+55db 79207e27 set1 39 ,pdata 
+55dc 6002c408 store 5 ,mem_le_pcnt_rx 
+55dd 6800843f fetch 1 ,mem_le_state 
+55de 793ffe04 set0 lestate_encryption ,pdata 
+55df 6000843f store 1 ,mem_le_state 
+55e0 20600000 rtn 
+
+le_wait_adv:
+55e1 472ec02b bpatchx patch2b_5 ,mem_patch2b 
+55e2 20405422 call le_next_adv_channel 
+55e3 20405485 call le_receive_adv 
+55e4 68008001 fetch 1 ,mem_le_adv_waitcnt 
+55e5 1fe0fe01 increase 1 ,pdata 
+55e6 60008001 store 1 ,mem_le_adv_waitcnt 
+55e7 20600000 rtn 
+
+le_scan:
+55e8 472f402b bpatchx patch2b_6 ,mem_patch2b 
+55e9 6800c369 fetch 1 ,mem_le_scan_enable 
+55ea c1808000 rtnne le_scan_enable 
+55eb d8e00002 arg le_scan_interval_timer ,queue 
+55ec 20407f16 call timer_check 
+55ed 247a0000 nrtn blank 
+55ee 6801436a fetch 2 ,mem_le_scan_interval 
+55ef 6809436c fetcht 2 ,mem_le_scan_window 
+55f0 98467e00 isub temp ,pdata 
+55f1 d8e00002 arg le_scan_interval_timer ,queue 
+55f2 20407f08 call timer_init 
+55f3 7854fc00 disable master 
+55f4 20405572 call le_init_adv 
+55f5 204055e1 call le_wait_adv 
+55f6 24768000 nrtn match 
+55f7 472fc02b bpatchx patch2b_7 ,mem_patch2b 
+55f8 680302db fetch 6 ,mem_le_rxbuf + 2 
+55f9 6003044f store 6 ,mem_le_plap 
+55fa 68008002 fetch 1 ,mem_le_adv_rcv 
+55fb 1fe0fe01 increase 1 ,pdata 
+55fc 60008002 store 1 ,mem_le_adv_rcv 
+55fd 20405608 call le_create_conn 
+55fe 20748000 rtn master 
+55ff 2040550b call le_send_scan_request 
+5600 24768000 nrtn match 
+5601 4730402c bpatchx patch2c_0 ,mem_patch2c 
+5602 68008004 fetch 1 ,mem_le_scanrsp_rcv 
+5603 1fe0fe01 increase 1 ,pdata 
+5604 60008004 store 1 ,mem_le_scanrsp_rcv 
+5605 680482e1 fetch 9 ,mem_le_rxbuf + 8 
+5606 60048101 store 9 ,mem_tmp_buffer 
+5607 20600000 rtn 
+
+le_create_conn:
+5608 4730c02c bpatchx patch2c_1 ,mem_patch2c 
+5609 6800849b fetch 1 ,mem_cmd_le_create_conn 
+560a c18d8000 rtnne hci_cmd_le_create_conn 
+560b 6803044f fetch 6 ,mem_le_plap 
+560c 680b448f fetcht 6 ,mem_le_conn_peer_addr 
+560d 98467c00 isub temp ,null 
+560e 24628000 nrtn zero 
+560f 2040223b call context_new 
+5610 24628000 nrtn zero 
+5611 2040552b call le_connect_request 
+5612 20405340 call le_init_master 
+5613 4731402c bpatchx patch2c_2 ,mem_patch2c 
+5614 7041ce00 jam 0 ,mem_hci_cmd 
+5615 70047600 jam 0 ,mem_le_peer_sca 
+5616 70436900 jam 0 ,mem_le_scan_enable 
+5617 70049b00 jam 0 ,mem_cmd_le_create_conn 
+5618 20202223 branch context_save 
+
+le_scan_check_sender_addr_type:
+5619 da200001 arg 1 ,rega 
+561a 680082d9 fetch 1 ,mem_le_rxbuf 
+561b c3830000 rtnbit1 le_sender_addr_bit 
+561c da200000 arg 0 ,rega 
+561d 20600000 rtn 
+
+le_prepare_tx:
+561e 4731c02c bpatchx patch2c_3 ,mem_patch2c 
+561f 68008456 fetch 1 ,mem_le_arq 
+5620 c3828000 rtnbit1 wak 
+5621 20405642 call le_check_tx_md 
+5622 20405873 call le_fifo_get_first_tx_ptr 
+5623 203a5664 branch le_send_empty ,blank 
+5624 e8c08000 ifetch 1 ,contr 
+5625 e8c88000 ifetcht 1 ,contr 
+5626 18422200 copy temp ,rega 
+5627 9a267e00 isub rega ,pdata 
+5628 d840001b arg le_max_paket_len ,temp 
+5629 20407fdd call not_greater_than 
+562a 1fe20400 copy pdata ,temp 
+562b e8c08000 ifetch 1 ,contr 
+562c 1fe20200 copy pdata ,type 
+562d 1a227e00 copy rega ,pdata 
+562e 98c08c00 iadd contr ,contr 
+562f d8a043de arg mem_le_txpayload ,contw 
+5630 18427200 copy temp ,loopcnt 
+5631 20407f01 call memcpy 
+5632 20405654 call le_update_tx_type 
+5633 20405666 call le_send_packet 
+5634 20405873 call le_fifo_get_first_tx_ptr 
+5635 e8c08000 ifetch 1 ,contr 
+5636 1fe22200 copy pdata ,rega 
+5637 18c22600 copy contr ,regc 
+5638 e8c88000 ifetcht 1 ,contr 
+5639 18422400 copy temp ,regb 
+563a 9a467e00 isub regb ,pdata 
+563b d840001b arg le_max_paket_len ,temp 
+563c 20407fdd call not_greater_than 
+563d 9a40fe00 iadd regb ,pdata 
+563e e2608000 istore 1 ,regc 
+563f 9a267c00 isub rega ,null 
+5640 24628000 nrtn zero 
+5641 20205896 branch le_fifo_release_first_node 
+
+le_check_tx_md:
+5642 20405649 call le_check_continue 
+5643 c6148000 rtnmark1 mark_ble_tx_md 
+5644 6800c4e9 fetch 1 ,mem_le_configuration 
+5645 c3015652 bbit0 bit_ble_transmit_packet_by_md ,le_clear_md 
+5646 20405876 call le_fifo_get_second_tx_ptr 
+5647 203a5652 branch le_clear_md ,blank 
+5648 20205650 branch le_set_md 
+
+le_check_continue:
+5649 20405873 call le_fifo_get_first_tx_ptr 
+564a 203a5652 branch le_clear_md ,blank 
+564b e8c08000 ifetch 1 ,contr 
+564c e8c88000 ifetcht 1 ,contr 
+564d 98467e00 isub temp ,pdata 
+564e 1fe67c1b sub pdata ,le_max_paket_len ,null 
+564f 20215652 branch le_clear_md ,positive 
+
+le_set_md:
+5650 79200029 set1 mark_ble_tx_md ,mark 
+5651 20600000 rtn 
+
+le_clear_md:
+5652 793f8029 set0 mark_ble_tx_md ,mark 
+5653 20600000 rtn 
+
+le_update_tx_type:
+5654 1a227e00 copy rega ,pdata 
+5655 207a0000 rtn blank 
+5656 d8200001 arg llid_continue ,type 
+5657 20600000 rtn 
+
+le_att_check_notification_enable:
+5658 4732402c bpatchx patch2c_4 ,mem_patch2c 
+5659 18408401 increase 1 ,temp 
+565a 2040576a call le_att_get_handle_ptr 
+565b 18c08dfe increase -2 ,contr 
+565c e8c10000 ifetch 2 ,contr 
+565d d8402902 arg client_charactertic_configuration ,temp 
+565e 98467c00 isub temp ,null 
+565f 24628000 nrtn zero 
+5660 18c08c01 increase 1 ,contr 
+5661 18c22200 copy contr ,rega 
+5662 e8c08000 ifetch 1 ,contr 
+5663 20600000 rtn 
+
+le_send_empty:
+5664 18000400 force 0 ,temp 
+5665 18000201 force 1 ,type 
+
+le_send_packet:
+5666 4732c02c bpatchx patch2c_5 ,mem_patch2c 
+5667 6008c3dd storet 1 ,mem_le_txlen 
+5668 68088456 fetcht 1 ,mem_le_arq 
+5669 79200405 set1 wak ,temp 
+566a 18417efc and temp ,0xfc ,pdata 
+566b 9821fe00 ior type ,pdata 
+566c 60008456 store 1 ,mem_le_arq 
+566d 1fe17e1f and_into 0x1f ,pdata 
+566e 280ffe29 isolate1 mark_ble_tx_md ,mark 
+566f 7920fe04 setflag true ,md ,pdata 
+5670 6000c3dc store 1 ,mem_le_txheader 
+5671 6800c3dc fetch 1 ,mem_le_txheader 
+5672 28200601 compare 1 ,type ,3 
+5673 2420d676 nbranch le_send_no_txlen ,true 
+5674 6800c3dd fetch 1 ,mem_le_txlen 
+5675 207a0000 rtn blank 
+
+le_send_no_txlen:
+5676 6800843f fetch 1 ,mem_le_state 
+5677 c4020000 rtnbit0 lestate_encryption 
+5678 2040748d call load_sk 
+5679 202073e3 branch le_encrypt 
+
+get_lpm_wake_ble_rx_lock:
+567a d8e00000 arg wake_lock_ble_rx ,queue 
+567b 20202c32 branch lpm_get_wake_lock 
+
+put_lpm_wake_ble_rx_lock:
+567c d8e00000 arg wake_lock_ble_rx ,queue 
+567d 20202c36 branch lpm_put_wake_lock 
+
+le_parse:
+567e 4733402c bpatchx patch2c_6 ,mem_patch2c 
+567f c6078000 rtnmark1 mark_old_packet 
+5680 20405890 call le_fifo_check_full 
+5681 247a0000 nrtn blank 
+5682 680082d9 fetch 1 ,mem_le_rxbuf 
+5683 1fe17e03 and pdata ,0x3 ,pdata 
+5684 6000c50c store 1 ,mem_le_packet_llid 
+5685 e8c08000 ifetch 1 ,contr 
+5686 1fe17e1f and pdata ,0x1f ,pdata 
+5687 6000c50b store 1 ,mem_le_packet_size 
+5688 207a0000 rtn blank 
+5689 18c27e00 copy contr ,pdata 
+568a 6001450d store 2 ,mem_le_payload_ptr 
+568b 6800c50c fetch 1 ,mem_le_packet_llid 
+568c c001dc64 beq llid_le_ll ,le_parse_ll 
+
+le_parse_l2cap:
+568d 2040569a call le_check_l2cap_complete 
+568e 2434567a nbranch get_lpm_wake_ble_rx_lock ,user 
+568f 2040567c call put_lpm_wake_ble_rx_lock 
+5690 6801450d fetch 2 ,mem_le_payload_ptr 
+5691 1fe20c00 copy pdata ,contr 
+5692 e8c10000 ifetch 2 ,contr 
+5693 600144fc store 2 ,mem_le_l2cap_size 
+5694 4733c02c bpatchx patch2c_7 ,mem_patch2c 
+5695 e8c10000 ifetch 2 ,contr 
+5696 c00258ab beq le_l2cap_cid_att ,le_parse_att 
+5697 c0035af4 beq le_l2cap_cid_smp ,le_parse_smp 
+5698 c002dab6 beq le_l2cap_cid_signal ,le_parse_signaling 
+5699 20600000 rtn 
+
+le_check_l2cap_complete:
+569a 6800c50c fetch 1 ,mem_le_packet_llid 
+569b c00156a9 beq llid_start ,le_check_l2cap_llid_start 
+569c c000d6c1 beq llid_continue ,le_check_l2cap_llid_continue 
+569d 20600000 rtn 
+
+le_check_l2cap_cid_legal:
+569e 20407fe7 call enable_user 
+569f d8400004 arg le_l2cap_cid_att ,temp 
+56a0 9fe67c00 isub pdata ,null 
+56a1 20628000 rtn zero 
+56a2 d8400005 arg le_l2cap_cid_signal ,temp 
+56a3 9fe67c00 isub pdata ,null 
+56a4 20628000 rtn zero 
+56a5 d8400006 arg le_l2cap_cid_smp ,temp 
+56a6 9fe67c00 isub pdata ,null 
+56a7 20628000 rtn zero 
+56a8 20207fe9 branch disable_user 
+
+le_check_l2cap_llid_start:
+56a9 6801450d fetch 2 ,mem_le_payload_ptr 
+56aa 1fe20c00 copy pdata ,contr 
+56ab e8c10000 ifetch 2 ,contr 
+56ac 600144fc store 2 ,mem_le_l2cap_size 
+56ad e8c10000 ifetch 2 ,contr 
+56ae 2040569e call le_check_l2cap_cid_legal 
+56af 24740000 nrtn user 
+56b0 6808c50b fetcht 1 ,mem_le_packet_size 
+56b1 6008c4fe storet 1 ,mem_le_packet_len_recved 
+56b2 680144fc fetch 2 ,mem_le_l2cap_size 
+56b3 1fe0fe04 increase 4 ,pdata 
+56b4 98467c00 isub temp ,null 
+56b5 2022ffe7 branch enable_user ,zero 
+56b6 6800c50b fetch 1 ,mem_le_packet_size 
+56b7 1fe27200 copy pdata ,loopcnt 
+56b8 d8a00311 arg mem_le_l2capbuf ,contw 
+56b9 6801450d fetch 2 ,mem_le_payload_ptr 
+56ba 1fe20c00 copy pdata ,contr 
+56bb 20407f01 call memcpy 
+56bc 20207fe9 branch disable_user 
+
+le_check_l2cap_continue_legal:
+56bd 20407fe7 call enable_user 
+56be 6800c4fe fetch 1 ,mem_le_packet_len_recved 
+56bf 247a0000 nrtn blank 
+56c0 20207fe9 branch disable_user 
+
+le_check_l2cap_llid_continue:
+56c1 204056bd call le_check_l2cap_continue_legal 
+56c2 24740000 nrtn user 
+56c3 6800c4fe fetch 1 ,mem_le_packet_len_recved 
+56c4 d8a00311 arg mem_le_l2capbuf ,contw 
+56c5 98a0a200 iadd contw ,rega 
+56c6 6808c50b fetcht 1 ,mem_le_packet_size 
+56c7 9840fe00 iadd temp ,pdata 
+56c8 6000c4fe store 1 ,mem_le_packet_len_recved 
+56c9 6800c50b fetch 1 ,mem_le_packet_size 
+56ca 1fe27200 copy pdata ,loopcnt 
+56cb 1a220a00 copy rega ,contw 
+56cc 6801450d fetch 2 ,mem_le_payload_ptr 
+56cd 1fe20c00 copy pdata ,contr 
+56ce 20407ef4 call memcpy_fast 
+56cf 58000311 setarg mem_le_l2capbuf 
+56d0 6001450d store 2 ,mem_le_payload_ptr 
+56d1 680144fc fetch 2 ,mem_le_l2cap_size 
+56d2 1fe0fe04 increase 4 ,pdata 
+56d3 6808c4fe fetcht 1 ,mem_le_packet_len_recved 
+56d4 98467c00 isub temp ,null 
+56d5 2022ffe7 branch enable_user ,zero 
+56d6 20207fe9 branch disable_user 
+
+le_get_search_att_type:
+56d7 20407ea5 call store_contr 
+56d8 d8a0445e arg mem_le_search_att_type_length ,contw 
+
+le_get_search_common:
+56d9 680144fc fetch 2 ,mem_le_l2cap_size 
+56da 1fe0fffb increase -5 ,pdata 
+
+le_get_search_common2:
+56db e0a08000 istore 1 ,contw 
+56dc 1fe27200 copy pdata ,loopcnt 
+56dd 20407e9f call get_contr 
+56de 20207ef4 branch memcpy_fast 
+
+le_get_search_att_uuid:
+56df 20407ea5 call store_contr 
+56e0 d8a04471 arg mem_le_search_uuid_length ,contw 
+56e1 202056d9 branch le_get_search_common 
+
+le_writeatt_cb:
+56e2 680141f9 fetch 2 ,mem_cb_att_write 
+56e3 20207f9c branch callback_func 
+
+le_supervision_update:
+56e4 680a045b fetcht 4 ,mem_le_supervision_timer 
+56e5 20402a7b call get_clkbt 
+56e6 98461600 isub temp ,timeup 
+56e7 19627e00 deposit timeup 
+56e8 6809046d fetcht 2 ,mem_le_superto 
+56e9 18520400 lshift4 temp ,temp 
+56ea 18438400 lshift temp ,temp 
+56eb 98467e00 isub temp ,pdata 
+56ec 20600000 rtn 
+
+le_supervision_flush:
+56ed 20402a7b call get_clkbt 
+56ee 6002045b store 4 ,mem_le_supervision_timer 
+56ef 20600000 rtn 
+
+le_adv:
+56f0 70001624 jam 36 ,mem_le_ch_mapped 
+56f1 700ac200 jam 0 ,mem_le_adv_channel_map_temp 
+
+le_adv_loop:
+56f2 4734402d bpatchx patch2d_0 ,mem_patch2d 
+56f3 6800c36e fetch 1 ,mem_le_adv_enable 
+56f4 207a0000 rtn blank 
+56f5 d8e00000 arg le_adv_interval_timer ,queue 
+56f6 20407f16 call timer_check 
+56f7 247a0000 nrtn blank 
+56f8 4734c02d bpatchx patch2d_1 ,mem_patch2d 
+
+le_adv_loop_tx:
+56f9 7854fc00 disable master 
+56fa 78287c00 enable swfine 
+56fb 20405572 call le_init_adv 
+56fc 20405422 call le_next_adv_channel 
+56fd 204054e9 call le_send_adv_ind 
+56fe 2436d706 nbranch le_adv_not_match ,match 
+56ff 68008003 fetch 1 ,mem_le_req_rcv 
+5700 1fe0fe01 increase 1 ,pdata 
+5701 60008003 store 1 ,mem_le_req_rcv 
+5702 680082d9 fetch 1 ,mem_le_rxbuf 
+5703 1fe17e0f and pdata ,0x0f ,pdata 
+5704 c001d51c beq scan_req ,le_send_scan_response 
+5705 c002d728 beq connect_req ,le_parse_connect_req 
+
+le_adv_not_match:
+5706 4735402d bpatchx patch2d_2 ,mem_patch2d 
+5707 180a7e00 random pdata 
+5708 d84001ff arg 0x1ff ,temp 
+5709 98417e00 iand temp ,pdata 
+570a 1fe0fefa add pdata ,250 ,pdata 
+570b 20403cbe call delay 
+570c 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp 
+570d 6808c48d fetcht 1 ,mem_le_adv_channel_map 
+570e 98467c00 isub temp ,null 
+570f 2422d6f2 nbranch le_adv_loop ,zero 
+5710 d8e00000 arg le_adv_interval_timer ,queue 
+5711 68014482 fetch 2 ,mem_le_adv_interval 
+5712 20207f08 branch timer_init 
+
+le_receive_window_size:
+5713 4735c02d bpatchx patch2d_3 ,mem_patch2d 
+5714 68008476 fetch 1 ,mem_le_peer_sca 
+5715 204053fc call le_sca_map 
+5716 68010441 fetch 2 ,mem_le_tsniff 
+5717 984ffe00 imul32 temp ,pdata 
+5718 d8400177 arg 375 ,temp 
+5719 984ffe00 imul32 temp ,pdata 
+571a d84186a0 arg 100000 ,temp 
+571b 9846fc00 idiv temp 
+571c 6800846a fetch 1 ,mem_le_window_size 
+571d d8404e20 arg 20000 ,temp 
+571e 984ffe00 imul32 temp ,pdata 
+571f 9840fe00 iadd temp ,pdata 
+5720 600244e5 store 4 ,mem_le_transmit_window 
+5721 4736402d bpatchx patch2d_4 ,mem_patch2d 
+5722 680140c1 fetch 2 ,mem_rx_window_sniff 
+5723 20407f86 call wait_div_end 
+5724 18078400 quotient temp 
+5725 9840fe00 iadd temp ,pdata 
+5726 6001044d store 2 ,mem_le_receive_window 
+5727 20600000 rtn 
+
+le_parse_connect_req:
+5728 4736c02d bpatchx patch2d_5 ,mem_patch2d 
+5729 680302e1 fetch 6 ,mem_le_rxbuf + 8 
+572a 680b44a0 fetcht 6 ,mem_le_lap 
+572b 98467c00 isub temp ,null 
+572c 24628000 nrtn zero 
+572d 20405619 call le_scan_check_sender_addr_type 
+572e 1a227e00 copy rega ,pdata 
+572f 6000c48e store 1 ,mem_le_conn_peer_addr_type 
+5730 680382ee fetch 7 ,mem_le_rxbuf + 21 
+5731 60038101 store 7 ,mem_tmp_buffer 
+5732 e8c40000 ifetch 8 ,contr 
+5733 e0a40000 istore 8 ,contw 
+5734 680302db fetch 6 ,mem_le_rxbuf + 2 
+5735 6003044f store 6 ,mem_le_plap 
+5736 18c08c06 increase 6 ,contr 
+5737 e8c40000 ifetch 8 ,contr 
+5738 60040463 store 8 ,mem_le_access 
+5739 e8c90000 ifetcht 2 ,contr 
+573a 4737402d bpatchx patch2d_6 ,mem_patch2d 
+573b 184b8400 lshift2 temp ,temp 
+573c e8c10000 ifetch 2 ,contr 
+573d 1febfe00 lshift2 pdata ,pdata 
+573e 60010441 store 2 ,mem_le_tsniff 
+573f 60020443 store 4 ,mem_le_anchor 
+5740 98467e00 isub temp ,pdata 
+5741 1fe0d1fe add pdata ,-2 ,clke_bt 
+5742 e8c48000 ifetch 9 ,contr 
+5743 6004846b store 9 ,mem_le_slave_latency 
+5744 4737c02d bpatchx patch2d_7 ,mem_patch2d 
+5745 e8c08000 ifetch 1 ,contr 
+5746 1ff18400 rshift4 pdata ,temp 
+5747 18430400 rshift temp ,temp 
+5748 60088476 storet 1 ,mem_le_peer_sca 
+5749 1fe17e1f and_into 0x1f ,pdata 
+574a 60008458 store 1 ,mem_le_hop 
+574b 20405713 call le_receive_window_size 
+574c 2040545b call le_calc_channel_map 
+574d 2040534c call le_init_slave 
+574e 2040223b call context_new 
+574f 24628000 nrtn zero 
+5750 4738402e bpatchx patch2e_0 ,mem_patch2e 
+5751 20402841 call calc_clke_offset 
+5752 20405ad3 call le_l2cap_reset_signaling_identifier 
+5753 700a9914 jam bt_evt_le_connected ,mem_fifo_temp 
+5754 20407d86 call ui_ipc_send_event 
+5755 20202223 branch context_save 
+
+le_init_attlist_search:
+5756 4738c02e bpatchx patch2e_1 ,mem_patch2e 
+5757 6801445a fetch 2 ,mem_le_search_handle_start 
+5758 98002400 iforce regb 
+5759 6801445c fetch 2 ,mem_le_search_handle_end 
+575a 98002600 iforce regc 
+575b 680144bc fetch 2 ,mem_ui_le_uuid_table 
+575c 98000c00 iforce contr 
+575d 78347c00 enable user 
+575e 20600000 rtn 
+
+le_att_handle_inrange:
+575f e8c10000 ifetch 2 ,contr 
+5760 207a0000 rtn blank 
+5761 9a467c00 isub regb ,null 
+5762 24610000 nrtn positive 
+5763 9a667c00 isub regc ,null 
+5764 20628000 rtn zero 
+5765 20215768 branch le_att_handle_blank ,positive 
+5766 18007c01 force 1 ,null 
+5767 20600000 rtn 
+
+le_att_handle_blank:
+5768 18007e00 force 0 ,pdata 
+5769 20600000 rtn 
+
+le_att_get_handle_ptr:
+576a 2040576d call le_att_get_handle_ptr2 
+576b 2022d779 branch le_att_get_handle_ptr_found ,zero 
+576c 20600000 rtn 
+
+le_att_get_handle_ptr2:
+576d 4739402e bpatchx patch2e_2 ,mem_patch2e 
+576e 680144bc fetch 2 ,mem_ui_le_uuid_table 
+576f 98000c00 iforce contr 
+
+le_att_get_handle_loop1:
+5770 e8c10000 ifetch 2 ,contr 
+5771 207a0000 rtn blank 
+5772 98467c00 isub temp ,null 
+5773 20628000 rtn zero 
+5774 e8c08000 ifetch 1 ,contr 
+5775 98c08c00 iadd contr ,contr 
+5776 e8c08000 ifetch 1 ,contr 
+5777 98c08c00 iadd contr ,contr 
+5778 20205770 branch le_att_get_handle_loop1 
+
+le_att_get_handle_ptr_found:
+5779 e8c08000 ifetch 1 ,contr 
+577a 98c08c00 iadd contr ,contr 
+577b 20600000 rtn 
+
+le_att_get_short_uuid_ptr:
+577c 4739c02e bpatchx patch2e_3 ,mem_patch2e 
+577d 680144bc fetch 2 ,mem_ui_le_uuid_table 
+577e 98000c00 iforce contr 
+
+le_att_get_short_uuid_loop:
+577f e8c10000 ifetch 2 ,contr 
+5780 207a0000 rtn blank 
+5781 e8c08000 ifetch 1 ,contr 
+5782 98c08c00 iadd contr ,contr 
+5783 18c08dfe increase -2 ,contr 
+5784 e8c10000 ifetch 2 ,contr 
+5785 98467c00 isub temp ,null 
+5786 20628000 rtn zero 
+5787 e8c08000 ifetch 1 ,contr 
+5788 98c08c00 iadd contr ,contr 
+5789 2020577f branch le_att_get_short_uuid_loop 
+
+le_att_get_handle_info_from_ptr:
+578a 6801049c fetch 2 ,mem_le_cur_attlist_start_ptr 
+578b 2020578e branch le_att_get_handle_info_fast 
+
+le_att_get_handle_info:
+578c 473a402e bpatchx patch2e_4 ,mem_patch2e 
+578d 680144bc fetch 2 ,mem_ui_le_uuid_table 
+
+le_att_get_handle_info_fast:
+578e 98000c00 iforce contr 
+578f 18422200 copy temp ,rega 
+
+le_att_get_handle_loop:
+5790 e8c10000 ifetch 2 ,contr 
+5791 203a5799 branch le_att_unfind_handle ,blank 
+5792 9a267c00 isub rega ,null 
+5793 2022d79a branch le_att_finded_handle ,zero 
+5794 e8c08000 ifetch 1 ,contr 
+5795 98c08c00 iadd contr ,contr 
+5796 e8c08000 ifetch 1 ,contr 
+5797 98c08c00 iadd contr ,contr 
+5798 20205790 branch le_att_get_handle_loop 
+
+le_att_unfind_handle:
+5799 20207fef branch disable_blank 
+
+le_att_finded_handle:
+579a e8c08000 ifetch 1 ,contr 
+579b 600084a2 store 1 ,mem_le_cur_uuid_length 
+579c 1fe27200 copy pdata ,loopcnt 
+579d d8a004a3 arg mem_le_cur_uuid ,contw 
+579e 20407ef4 call memcpy_fast 
+579f e8c08000 ifetch 1 ,contr 
+57a0 600084b3 store 1 ,mem_le_curr_att_len 
+57a1 20407ea5 call store_contr 
+57a2 20207ff1 branch enable_blank 
+
+le_modified_name:
+57a3 473ac02e bpatchx patch2e_5 ,mem_patch2e 
+57a4 204057a6 call le_modified_name_att_list 
+57a5 202057b8 branch le_modified_name_adv 
+
+le_modified_name_att_list:
+57a6 d8402a00 arg uuid_chrctr_device_name ,temp 
+57a7 2040577c call le_att_get_short_uuid_ptr 
+57a8 207a0000 rtn blank 
+57a9 e8c08000 ifetch 1 ,contr 
+57aa 18c20a00 copy contr ,contw 
+57ab 6808c3af fetcht 1 ,mem_le_name_len 
+57ac 18427200 copy temp ,loopcnt 
+57ad 98467c00 isub temp ,null 
+57ae 242157b5 nbranch le_name_length_longer_than_att ,positive 
+57af 98460400 isub temp ,temp 
+57b0 d8c043b0 arg mem_le_name ,contr 
+57b1 20407f01 call memcpy 
+57b2 18427200 copy temp ,loopcnt 
+57b3 2442d7f0 ncall memcpy_empty ,zero 
+57b4 20600000 rtn 
+
+le_name_length_longer_than_att:
+57b5 1fe27200 copy pdata ,loopcnt 
+57b6 d8c043b0 arg mem_le_name ,contr 
+57b7 20207ef4 branch memcpy_fast 
+
+le_modified_name_adv:
+57b8 da60438f arg mem_le_adv_data_len + 32 ,regc 
+57b9 da204370 arg mem_le_adv_data ,rega 
+57ba 204057c5 call le_modified_name_adv_and_scan 
+57bb 58000000 setarg 0 
+57bc 79347e00 setflag user ,0 ,pdata 
+57bd 60008a9a store 1 ,mem_pdatatemp 
+57be da6043af arg mem_le_scan_data_len + 32 ,regc 
+57bf da204390 arg mem_le_scan_data ,rega 
+57c0 204057c5 call le_modified_name_adv_and_scan 
+57c1 20740000 rtn user 
+57c2 68008a9a fetch 1 ,mem_pdatatemp 
+57c3 203a2a8c branch assert ,blank 
+57c4 20600000 rtn 
+
+le_modified_name_adv_and_scan:
+57c5 473b402e bpatchx patch2e_6 ,mem_patch2e 
+57c6 20407fe7 call enable_user 
+57c7 20407eda call clear_temp_block 
+57c8 da400000 arg 0 ,regb 
+57c9 d8a00ac3 arg mem_le_data_temp ,contw 
+57ca 204057df call le_modified_name_adv_loop 
+57cb 6800c3af fetch 1 ,mem_le_name_len 
+57cc 1fe08401 add pdata ,1 ,temp 
+57cd 9a40a200 iadd regb ,rega 
+57ce 1a20a202 increase 2 ,rega 
+57cf 1a267c1f sub rega ,0x1f ,null 
+57d0 242157dd nbranch le_modified_name_adv_and_scan_name_overflow ,positive 
+57d1 e0a88000 istoret 1 ,contw 
+57d2 d8400009 arg gap_adtype_local_name_complete ,temp 
+57d3 e0a88000 istoret 1 ,contw 
+57d4 98007200 iforce loopcnt 
+57d5 20407ef4 call memcpy_fast 
+57d6 1a222400 copy rega ,regb 
+
+le_modified_name_adv_and_scan_store_data:
+57d7 1a427e00 deposit regb 
+57d8 60008ac2 store 1 ,mem_le_data_len_temp 
+57d9 d8c00ac2 arg mem_le_data_len_temp ,contr 
+57da 5fffffe0 setarg -32 
+57db 9a608a00 iadd regc ,contw 
+57dc 20207ebd branch memcpy32 
+
+le_modified_name_adv_and_scan_name_overflow:
+57dd 20407fe9 call disable_user 
+57de 202057d7 branch le_modified_name_adv_and_scan_store_data 
+
+le_modified_name_adv_loop:
+57df ea208000 ifetch 1 ,rega 
+57e0 207a0000 rtn blank 
+57e1 1fe0fe01 pincrease 1 
+57e2 e8c88000 ifetcht 1 ,contr 
+57e3 18467c09 sub temp ,gap_adtype_local_name_complete ,null 
+57e4 2022d7ee branch le_modified_name_adv_found_name ,zero 
+57e5 9a40a400 iadd regb ,regb 
+57e6 1a220c00 copy rega ,contr 
+57e7 98007200 iforce loopcnt 
+57e8 20407ef4 call memcpy_fast 
+57e9 18c22200 copy contr ,rega 
+
+le_modified_name_adv_loop2:
+57ea 1a227e00 deposit rega 
+57eb 9a667c00 isub regc ,null 
+57ec 20610000 rtn positive 
+57ed 202057df branch le_modified_name_adv_loop 
+
+le_modified_name_adv_found_name:
+57ee 9a20a200 iadd rega ,rega 
+57ef 202057ea branch le_modified_name_adv_loop2 
+
+memcpy_empty:
+57f0 58000020 setarg space 
+57f1 e0a08000 istore 1 ,contw 
+57f2 c20057f0 loop memcpy_empty 
+57f3 20600000 rtn 
+
+le_lpm_set_mult:
+57f4 473bc02e bpatchx patch2e_7 ,mem_patch2e 
+57f5 7855fc00 disable wake 
+57f6 203757f8 branch le_lpm_set_mult_attempt ,attempt 
+57f7 2436d806 nbranch le_lpm_lost ,match 
+
+le_lpm_set_mult_attempt:
+57f8 20402bcb call lpm_match 
+57f9 680140c1 fetch 2 ,mem_rx_window_sniff 
+57fa 6001044d store 2 ,mem_le_receive_window 
+57fb 2436abde nbranch lpm_mult_short ,match 
+57fc c507abde bmark1 mark_old_packet ,lpm_mult_short 
+57fd 6800c50b fetch 1 ,mem_le_packet_size 
+57fe 243a2bde nbranch lpm_mult_short ,blank 
+57ff 6800c3dd fetch 1 ,mem_le_txlen 
+5800 243a2bde nbranch lpm_mult_short ,blank 
+5801 6800c4e9 fetch 1 ,mem_le_configuration 
+5802 c282abde bbit1 bit_ble_short_mult ,lpm_mult_short 
+5803 6800843f fetch 1 ,mem_le_state 
+5804 c282abde bbit1 lestate_update_param ,lpm_mult_short 
+5805 20202bc0 branch lpm_mult_wait_timeout 
+
+le_lpm_lost:
+5806 680940c1 fetcht 2 ,mem_rx_window_sniff 
+5807 18430400 rshift temp ,temp 
+5808 6801044d fetch 2 ,mem_le_receive_window 
+5809 9840fe00 iadd temp ,pdata 
+580a 6001044d store 2 ,mem_le_receive_window 
+580b 20202bd6 branch lpm_lost 
+
+le_set_config_fixed_tk:
+580c d8e00000 arg bit_ble_passkey_fixed_key ,queue 
+580d 20205824 branch le_set_config 
+
+le_clr_config_fixed_tk:
+580e d8e00000 arg bit_ble_passkey_fixed_key ,queue 
+580f 20205828 branch le_clr_config 
+
+le_set_config_fixed_ltk:
+5810 d8e00001 arg bit_ble_pairing_fixed_ltk ,queue 
+5811 20205824 branch le_set_config 
+
+le_clr_config_fixed_ltk:
+5812 d8e00001 arg bit_ble_pairing_fixed_ltk ,queue 
+5813 20205828 branch le_clr_config 
+
+le_set_config_more_data:
+5814 d8e00002 arg bit_ble_transmit_packet_by_md ,queue 
+5815 20205824 branch le_set_config 
+
+le_clr_config_more_data:
+5816 d8e00002 arg bit_ble_transmit_packet_by_md ,queue 
+5817 20205828 branch le_clr_config 
+
+le_set_config_read_authentication:
+5818 d8e00003 arg bit_ble_read_auth ,queue 
+5819 20205824 branch le_set_config 
+
+le_clr_config_read_authentication:
+581a d8e00003 arg bit_ble_read_auth ,queue 
+581b 20205828 branch le_clr_config 
+
+le_set_config_write_authentication:
+581c d8e00004 arg bit_ble_write_auth ,queue 
+581d 20205824 branch le_set_config 
+
+le_clr_config_write_authentication:
+581e d8e00004 arg bit_ble_write_auth ,queue 
+581f 20205828 branch le_clr_config 
+
+le_set_config_short_mult:
+5820 d8e00005 arg bit_ble_short_mult ,queue 
+5821 20205824 branch le_set_config 
+
+le_clr_config_short_mult:
+5822 d8e00005 arg bit_ble_short_mult ,queue 
+5823 20205828 branch le_clr_config 
+
+le_set_config:
+5824 6800c4e9 fetch 1 ,mem_le_configuration 
+5825 f9207e00 qset1 pdata 
+5826 6000c4e9 store 1 ,mem_le_configuration 
+5827 20600000 rtn 
+
+le_clr_config:
+5828 6800c4e9 fetch 1 ,mem_le_configuration 
+5829 f93ffe00 qset0 pdata 
+582a 6000c4e9 store 1 ,mem_le_configuration 
+582b 20600000 rtn 
+
+le_set_fixed_ltk:
+582c 58112233 setarg 0x112233 
+582d 6001c4ea store 3 ,mem_le_fixed_ltk 
+582e 58445566 setarg 0x445566 
+582f e0a18000 istore 3 ,contw 
+5830 58778899 setarg 0x778899 
+5831 e0a18000 istore 3 ,contw 
+5832 58001122 setarg 0x001122 
+5833 e0a18000 istore 3 ,contw 
+5834 58334455 setarg 0x334455 
+5835 e0a18000 istore 3 ,contw 
+5836 58000066 setarg 0x66 
+5837 e0a08000 istore 1 ,contw 
+5838 20600000 rtn 
+
+le_set_justwork:
+5839 59000302 setarg 0x01000302 
+583a 60024453 store 4 ,mem_le_pres 
+583b 58010010 setarg 0x010010 
+583c 6001c457 store 3 ,mem_le_pres_max_keysize 
+583d 7044c601 jam 1 ,mem_le_pairing_mode 
+583e 20600000 rtn 
+
+le_fifo_malloc_tx_empty:
+583f da200000 arg 0 ,rega 
+5840 d8200001 arg llid_empty ,type 
+5841 20205850 branch le_fifo_malloc_tx 
+
+le_fifo_malloc_tx_ll:
+5842 d8200003 arg llid_le_ll ,type 
+5843 20405850 call le_fifo_malloc_tx 
+5844 1a427e00 copy regb ,pdata 
+5845 e0a08000 istore 1 ,contw 
+5846 20600000 rtn 
+
+le_fifo_malloc_tx_l2cap:
+5847 18000202 force llid_l2cap_start ,type 
+5848 1a20a204 increase 4 ,rega 
+5849 20405850 call le_fifo_malloc_tx 
+584a 1a20a3fc increase -4 ,rega 
+584b 1a227e00 copy rega ,pdata 
+584c e0a10000 istore 2 ,contw 
+584d 1a427e00 copy regb ,pdata 
+584e e0a10000 istore 2 ,contw 
+584f 20600000 rtn 
+
+le_fifo_malloc_tx:
+5850 1a267cf0 sub rega ,240 ,null 
+5851 24212a8c nbranch assert ,positive 
+5852 6800c4ff fetch 1 ,mem_le_tx_buff_used 
+5853 d8400001 arg 1 ,temp 
+5854 df200004 arg le_tx_buff_count ,loopcnt 
+
+le_fifo_malloc_tx_loop:
+5855 98417c00 iand temp ,null 
+5856 2022d85a branch le_fifo_malloc_tx_got_empty ,zero 
+5857 18438400 lshift temp ,temp 
+5858 c2005855 loop le_fifo_malloc_tx_loop 
+5859 20202a8c branch assert 
+
+le_fifo_malloc_tx_got_empty:
+585a 9842fe00 ixor temp ,pdata 
+585b 6000c4ff store 1 ,mem_le_tx_buff_used 
+585c 1f267e04 sub loopcnt ,le_tx_buff_count ,pdata 
+585d 1ff27e00 lshift4 pdata ,pdata 
+585e 1ff27e00 lshift4 pdata ,pdata 
+585f d8401800 arg mem_le_tx_buffer0 ,temp 
+5860 98408400 iadd temp ,temp 
+
+le_fifo_tx_find_empty_ptr:
+5861 df200000 arg 0 ,loopcnt 
+5862 d8c04500 arg mem_le_tx_ptr0 ,contr 
+
+le_fifo_tx_find_empty_ptr_loop:
+5863 e8c10000 ifetch 2 ,contr 
+5864 203a5869 branch le_fifo_tx_found_empty_ptr ,blank 
+5865 1f227e00 copy loopcnt ,pdata 
+5866 1f20f201 increase 1 ,loopcnt 
+5867 c0825863 bne le_tx_buff_count ,le_fifo_tx_find_empty_ptr_loop 
+5868 20202a8c branch assert 
+
+le_fifo_tx_found_empty_ptr:
+5869 18c08dfe increase -2 ,contr 
+586a e0c90000 istoret 2 ,contr 
+586b 18420a00 copy temp ,contw 
+586c 1a227e00 copy rega ,pdata 
+586d e0a08000 istore 1 ,contw 
+586e 58000000 setarg 0 
+586f e0a08000 istore 1 ,contw 
+5870 18227e00 copy type ,pdata 
+5871 e0a08000 istore 1 ,contw 
+5872 20600000 rtn 
+
+le_fifo_get_first_tx_ptr:
+5873 68014500 fetch 2 ,mem_le_tx_ptr0 
+5874 1fe20c00 copy pdata ,contr 
+5875 20600000 rtn 
+
+le_fifo_get_second_tx_ptr:
+5876 68014502 fetch 2 ,mem_le_tx_ptr1 
+5877 1fe20c00 copy pdata ,contr 
+5878 20600000 rtn 
+
+le_fifo_get_last_tx_ptr:
+5879 2040587c call le_fifo_get_last_tx_ptr0 
+587a 1fe20c00 copy pdata ,contr 
+587b 20600000 rtn 
+
+le_fifo_get_last_tx_ptr0:
+587c 68014506 fetch 2 ,mem_le_tx_ptr3 
+587d 247a0000 nrtn blank 
+587e 68014504 fetch 2 ,mem_le_tx_ptr2 
+587f 247a0000 nrtn blank 
+5880 68014502 fetch 2 ,mem_le_tx_ptr1 
+5881 247a0000 nrtn blank 
+5882 68014500 fetch 2 ,mem_le_tx_ptr0 
+5883 20600000 rtn 
+
+le_fifo_get_first_l2cap_ptr:
+5884 20405873 call le_fifo_get_first_tx_ptr 
+5885 18c08c03 increase 3 ,contr 
+5886 20600000 rtn 
+
+le_fifo_get_first_att_ptr:
+5887 20405873 call le_fifo_get_first_tx_ptr 
+5888 18c08c07 increase 7 ,contr 
+5889 20600000 rtn 
+
+le_fifo_get_last_att_ptr:
+588a 20405879 call le_fifo_get_last_tx_ptr 
+588b 18c08c07 increase 7 ,contr 
+588c 20600000 rtn 
+
+le_fifo_get_last_l2cap_ptr:
+588d 20405879 call le_fifo_get_last_tx_ptr 
+588e 18c08c03 increase 3 ,contr 
+588f 20600000 rtn 
+
+le_fifo_check_full:
+5890 68014506 fetch 2 ,mem_le_tx_ptr3 
+5891 20600000 rtn 
+
+le_fifo_check_nearly_full:
+5892 68014504 fetch 2 ,mem_le_tx_ptr2 
+5893 20600000 rtn 
+
+le_fifo_check_empty:
+5894 68014500 fetch 2 ,mem_le_tx_ptr0 
+5895 20600000 rtn 
+
+le_fifo_release_first_node:
+5896 68014500 fetch 2 ,mem_le_tx_ptr0 
+5897 d8401800 arg mem_le_tx_buffer0 ,temp 
+5898 98467e00 isub temp ,pdata 
+5899 1ff1fe00 rshift4 pdata ,pdata 
+589a 1ff18e00 rshift4 pdata ,queue 
+589b 6800c4ff fetch 1 ,mem_le_tx_buff_used 
+589c f93ffe00 qset0 pdata 
+589d 6000c4ff store 1 ,mem_le_tx_buff_used 
+589e df200000 arg 0 ,loopcnt 
+
+le_fifo_release_first_node_loop:
+589f 1f23fe00 lshift loopcnt ,pdata 
+58a0 d8404502 arg mem_le_tx_ptr1 ,temp 
+58a1 98408400 iadd temp ,temp 
+58a2 e8410000 ifetch 2 ,temp 
+58a3 184085fe increase -2 ,temp 
+58a4 e0410000 istore 2 ,temp 
+58a5 1f227e00 copy loopcnt ,pdata 
+58a6 1f20f201 increase 1 ,loopcnt 
+58a7 c081d89f bne le_tx_buff_update_loopcnt ,le_fifo_release_first_node_loop 
+58a8 58000000 setarg 0 
+58a9 e0410000 istore 2 ,temp 
+58aa 20600000 rtn 
+
+le_parse_att:
+58ab e8c18000 ifetch 3 ,contr 
+58ac 60018477 store 3 ,mem_le_att_opcode 
+58ad c00158c1 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request 
+58ae c001d8c9 beq attop_exchange_mtu_response ,le_parse_att_exchange_mtu_response 
+58af c00258cc beq attop_find_information_request ,le_parse_att_find_information_request 
+58b0 c00358f2 beq attop_find_by_type_value_request ,le_parse_att_find_by_type_value_request 
+58b1 c004593f beq attop_read_by_type_request ,le_parse_att_read_by_type_request 
+58b2 c00559bc beq attop_read_request ,le_parse_att_read_request 
+58b3 c00659e4 beq attop_read_blob_request ,le_parse_att_read_blob_request 
+58b4 c00859fa beq attop_read_by_group_type_request ,le_parse_att_read_by_group_type_request 
+58b5 c0095a2f beq attop_write_request ,le_parse_att_write_request 
+58b6 c00b5a48 beq attop_prepare_write_request ,le_parse_att_prepare_write_request 
+58b7 c00c5a5b beq attop_execute_write_request ,le_parse_att_execute_write_request 
+58b8 c0295a60 beq attop_write_command ,le_parse_att_write_command 
+58b9 20600000 rtn 
+
+le_send_att_exchange_mtu_requset:
+58ba 18002203 force 3 ,rega 
+58bb 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+58bc 58000002 setarg attop_exchange_mtu_request 
+58bd e0a08000 istore 1 ,contw 
+58be 680144a6 fetch 2 ,mem_le_local_mtu 
+58bf e0a10000 istore 2 ,contw 
+58c0 20600000 rtn 
+
+le_parse_att_exchange_mtu_request:
+58c1 204058c9 call le_parse_att_exchange_mtu_response 
+
+le_send_att_exchange_mtu_response:
+58c2 18002203 force 3 ,rega 
+58c3 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+58c4 58000003 setarg attop_exchange_mtu_response 
+58c5 e0a08000 istore 1 ,contw 
+58c6 680144a6 fetch 2 ,mem_le_local_mtu 
+58c7 e0a10000 istore 2 ,contw 
+58c8 20600000 rtn 
+
+le_parse_att_exchange_mtu_response:
+58c9 1fecfe00 rshift8 pdata ,pdata 
+58ca 600144a8 store 2 ,mem_le_remote_mtu 
+58cb 20600000 rtn 
+
+le_parse_att_find_information_request:
+58cc 20405ab1 call le_get_search_handle_start_end_common 
+58cd 20407fe7 call enable_user 
+58ce 202058cf branch le_send_att_find_information_response 
+
+le_send_att_find_information_response:
+58cf d9600003 arg 3 ,timeup 
+58d0 20405756 call le_init_attlist_search 
+
+le_send_att_find_information_res_loop:
+58d1 2040575f call le_att_handle_inrange 
+58d2 203a58f0 branch le_send_att_find_information_res_end ,blank 
+58d3 242158ed nbranch le_send_att_find_information_res_next ,positive 
+58d4 18c08dfe increase -2 ,contr 
+58d5 20407ea5 call store_contr 
+58d6 20407e9c call get_contw 
+58d7 243458e1 nbranch le_send_att_find_information_res_store_info ,user 
+58d8 20407e85 call push_stack_rega_b_c 
+58d9 20407fe9 call disable_user 
+58da 18002214 force 20 ,rega 
+58db 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+58dc 20407e95 call pop_stack_rega_b_c 
+58dd 58000005 setarg attop_find_information_response 
+58de e0a08000 istore 1 ,contw 
+58df 58000001 setarg uuid_size_16bit 
+58e0 e0a08000 istore 1 ,contw 
+
+le_send_att_find_information_res_store_info:
+58e1 20407e9f call get_contr 
+58e2 e8c10000 ifetch 2 ,contr 
+58e3 e0a10000 istore 2 ,contw 
+58e4 e8c08000 ifetch 1 ,contr 
+58e5 1fe27200 copy pdata ,loopcnt 
+58e6 20407f01 call memcpy 
+58e7 20407ea2 call store_contw 
+58e8 196097ff increase -1 ,timeup 
+58e9 2022d8f0 branch le_send_att_find_information_res_end ,zero 
+
+le_send_att_find_information_res_cont:
+58ea e8c08000 ifetch 1 ,contr 
+58eb 98c08c00 iadd contr ,contr 
+58ec 202058d1 branch le_send_att_find_information_res_loop 
+
+le_send_att_find_information_res_next:
+58ed e8c08000 ifetch 1 ,contr 
+58ee 98c08c00 iadd contr ,contr 
+58ef 202058ea branch le_send_att_find_information_res_cont 
+
+le_send_att_find_information_res_end:
+58f0 20345a76 branch le_send_att_error_response_notfound ,user 
+58f1 20205aa5 branch le_send_auto_len_by_mem 
+
+le_parse_att_find_by_type_value_request:
+58f2 20405ab1 call le_get_search_handle_start_end_common 
+58f3 e8c10000 ifetch 2 ,contr 
+58f4 60014472 store 2 ,mem_le_search_uuid 
+58f5 20407ea5 call store_contr 
+58f6 d8a0445e arg mem_le_search_att_type_length ,contw 
+58f7 680144fc fetch 2 ,mem_le_l2cap_size 
+58f8 1fe0fff9 increase -7 ,pdata 
+58f9 204056db call le_get_search_common2 
+58fa 20205905 branch le_send_att_find_by_type_value_response 
+
+le_start_end_handle_check_1:
+58fb 78547c00 disable user 
+58fc 6809445a fetcht 2 ,mem_le_search_handle_start 
+58fd 6801445c fetch 2 ,mem_le_search_handle_end 
+58fe 98467c00 isub temp ,null 
+58ff 24215902 nbranch le_start_end_handle_check_1_fail ,positive 
+5900 18427e00 deposit temp 
+5901 c1800000 rtnne 0 
+
+le_start_end_handle_check_1_fail:
+5902 78347c00 enable user 
+5903 70047a01 jam att_err_invalid_handle ,mem_le_err_code 
+5904 20205a77 branch le_send_att_error_response 
+
+le_send_att_find_by_type_value_response:
+5905 204058fb call le_start_end_handle_check_1 
+5906 20740000 rtn user 
+5907 68094472 fetcht 2 ,mem_le_search_uuid 
+5908 58002800 setarg uuid_gatt_primary_service 
+5909 98467c00 isub temp ,null 
+590a 2022d90c branch le_send_att_find_by_type_value_res_primary ,zero 
+590b 20205a76 branch le_send_att_error_response_notfound 
+
+le_send_att_find_by_type_value_res_primary:
+590c 7004b400 jam le_find_by_type_val_res_not_found ,mem_le_search_res 
+590d 6809445a fetcht 2 ,mem_le_search_handle_start 
+590e 60090aa2 storet 2 ,mem_temp 
+590f 2040578c call le_att_get_handle_info 
+5910 243a5a76 nbranch le_send_att_error_response_notfound ,blank 
+
+le_send_att_find_primary_search_loop:
+5911 68090aa2 fetcht 2 ,mem_temp 
+5912 2040578c call le_att_get_handle_info 
+5913 243a5925 nbranch le_send_att_error_response_notfound2 ,blank 
+5914 18c22200 copy contr ,rega 
+5915 680084b3 fetch 1 ,mem_le_curr_att_len 
+5916 1fe27200 copy pdata ,loopcnt 
+5917 6808c45e fetcht 1 ,mem_le_search_att_type_length 
+5918 98467c00 isub temp ,null 
+5919 2422d921 nbranch le_send_att_find_primary_search_loop1 ,zero 
+591a da40445f arg mem_le_search_att_type ,regb 
+591b 20407f88 call string_compare 
+591c 2022d928 branch le_send_att_find_primary_search_end_start_handle_found ,zero 
+591d 680104a3 fetch 2 ,mem_le_cur_uuid 
+591e 68094472 fetcht 2 ,mem_le_search_uuid 
+591f 98467c00 isub temp ,null 
+5920 2022d930 branch le_send_att_find_primary_search_end_ending_handle_found ,zero 
+
+le_send_att_find_primary_search_loop1:
+5921 68010aa2 fetch 2 ,mem_temp 
+5922 1fe0fe01 increase 1 ,pdata 
+5923 60010aa2 store 2 ,mem_temp 
+5924 20205911 branch le_send_att_find_primary_search_loop 
+
+le_send_att_error_response_notfound2:
+5925 680084b4 fetch 1 ,mem_le_search_res 
+5926 c000d930 beq le_find_by_type_val_res_found_starting_handle ,le_send_att_find_primary_search_end_ending_handle_found 
+5927 20205a76 branch le_send_att_error_response_notfound 
+
+le_send_att_find_primary_search_end_start_handle_found:
+5928 680104a3 fetch 2 ,mem_le_cur_uuid 
+5929 68094472 fetcht 2 ,mem_le_search_uuid 
+592a 98467c00 isub temp ,null 
+592b 2422d921 nbranch le_send_att_find_primary_search_loop1 ,zero 
+592c 7004b401 jam le_find_by_type_val_res_found_starting_handle ,mem_le_search_res 
+592d 68090aa2 fetcht 2 ,mem_temp 
+592e 6009049e storet 2 ,mem_le_cur_handle_start 
+592f 20205921 branch le_send_att_find_primary_search_loop1 
+
+le_send_att_find_primary_search_end_ending_handle_found:
+5930 680084b4 fetch 1 ,mem_le_search_res 
+5931 c0005921 beq le_find_by_type_val_res_not_found ,le_send_att_find_primary_search_loop1 
+5932 7004b402 jam le_find_by_type_val_res_found_ending_handle ,mem_le_search_res 
+5933 68090aa2 fetcht 2 ,mem_temp 
+5934 184085ff increase -1 ,temp 
+5935 600904a0 storet 2 ,mem_le_cur_handle_end 
+
+le_send_att_find_primary_search_end:
+5936 da200005 arg 5 ,rega 
+5937 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+5938 58000007 setarg attop_find_by_type_value_response 
+5939 e0a08000 istore 1 ,contw 
+593a 6801049e fetch 2 ,mem_le_cur_handle_start 
+593b e0a10000 istore 2 ,contw 
+593c 680104a0 fetch 2 ,mem_le_cur_handle_end 
+593d e0a10000 istore 2 ,contw 
+593e 20600000 rtn 
+
+le_parse_att_read_by_type_request:
+593f 20405ab1 call le_get_search_handle_start_end_common 
+5940 204056df call le_get_search_att_uuid 
+5941 20205942 branch le_send_att_read_by_type_response 
+
+le_send_att_read_by_type_response:
+5942 6809445a fetcht 2 ,mem_le_search_handle_start 
+5943 60090aa2 storet 2 ,mem_temp 
+5944 20405756 call le_init_attlist_search 
+5945 2040576d call le_att_get_handle_ptr2 
+5946 18c08dfe increase -2 ,contr 
+5947 18c27e00 copy contr ,pdata 
+5948 6001049c store 2 ,mem_le_cur_attlist_start_ptr 
+5949 68094472 fetcht 2 ,mem_le_search_uuid 
+594a 58002a00 setarg uuid_chrctr_device_name 
+594b 98467c00 isub temp ,null 
+594c 2022d9a8 branch le_send_att_read_by_type_res_device_name ,zero 
+594d 58002803 setarg uuid_gatt_characteristic 
+594e 98467c00 isub temp ,null 
+594f 2422d990 nbranch le_send_att_read_by_type_res_not_characteristic ,zero 
+5950 d9600002 arg 2 ,timeup 
+
+le_send_att_read_by_type_response_loop:
+5951 20405a88 call le_att_check_handle_end 
+5952 2421596d nbranch le_send_att_read_by_type_response_end ,positive 
+5953 68090aa2 fetcht 2 ,mem_temp 
+5954 2040578a call le_att_get_handle_info_from_ptr 
+5955 c000d96d beq 1 ,le_send_att_read_by_type_response_end 
+5956 20405a94 call le_att_same_uuid 
+5957 2422d96b nbranch le_send_att_read_by_type_response_next_handle ,zero 
+5958 2434596f nbranch le_send_att_read_by_type_res_found_next ,user 
+5959 78547c00 disable user 
+595a da200014 arg 20 ,rega 
+595b 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+595c 58000009 setarg attop_read_by_type_response 
+595d e0a08000 istore 1 ,contw 
+595e 18a26000 copy contw ,alarm 
+595f 18a08a01 increase 1 ,contw 
+5960 2040597d call le_send_att_read_by_type_write_properties 
+5961 20405a84 call le_att_next_handle 
+5962 2040578a call le_att_get_handle_info_from_ptr 
+5963 20405984 call le_send_att_read_by_type_write_uuid 
+5964 680084a2 fetch 1 ,mem_le_cur_uuid_length 
+5965 1fe0fe05 increase 5 ,pdata 
+5966 e6008000 istore 1 ,alarm 
+5967 680084a2 fetch 1 ,mem_le_cur_uuid_length 
+5968 c008596d beq 16 ,le_send_att_read_by_type_response_end 
+5969 196097ff increase -1 ,timeup 
+596a 2022d96d branch le_send_att_read_by_type_response_end ,zero 
+
+le_send_att_read_by_type_response_next_handle:
+596b 20405a84 call le_att_next_handle 
+596c 20205951 branch le_send_att_read_by_type_response_loop 
+
+le_send_att_read_by_type_response_end:
+596d 20345a76 branch le_send_att_error_response_notfound ,user 
+596e 20205aa5 branch le_send_auto_len_by_mem 
+
+le_send_att_read_by_type_res_found_next:
+596f 20405a97 call le_store_att_record 
+5970 20405a84 call le_att_next_handle 
+5971 2040578a call le_att_get_handle_info_from_ptr 
+5972 680084a2 fetch 1 ,mem_le_cur_uuid_length 
+5973 c008596d beq 16 ,le_send_att_read_by_type_response_end 
+5974 20407e9c call get_contw 
+5975 68010aa2 fetch 2 ,mem_temp 
+5976 1fe0ffff increase -1 ,pdata 
+5977 e0a10000 istore 2 ,contw 
+5978 20405aa1 call le_write_att_record_common 
+5979 20405984 call le_send_att_read_by_type_write_uuid 
+597a 196097ff increase -1 ,timeup 
+597b 2022d96d branch le_send_att_read_by_type_response_end ,zero 
+597c 2020596b branch le_send_att_read_by_type_response_next_handle 
+
+le_send_att_read_by_type_write_properties:
+597d 68010aa2 fetch 2 ,mem_temp 
+597e e0a10000 istore 2 ,contw 
+597f 680084b3 fetch 1 ,mem_le_curr_att_len 
+5980 1fe27200 copy pdata ,loopcnt 
+5981 20407e9f call get_contr 
+5982 20407ef4 call memcpy_fast 
+5983 20207ea2 branch store_contw 
+
+le_send_att_read_by_type_write_uuid:
+5984 20407e9c call get_contw 
+5985 68010aa2 fetch 2 ,mem_temp 
+5986 e0a10000 istore 2 ,contw 
+5987 20407ea2 call store_contw 
+5988 680084a2 fetch 1 ,mem_le_cur_uuid_length 
+5989 1fe27200 copy pdata ,loopcnt 
+598a 20407e9c call get_contw 
+598b 20407e9f call get_contr 
+598c 9f260c00 isub loopcnt ,contr 
+598d 18c08dff increase -1 ,contr 
+598e 20407ef4 call memcpy_fast 
+598f 20207ea2 branch store_contw 
+
+le_send_att_read_by_type_res_not_characteristic:
+5990 6809445a fetcht 2 ,mem_le_search_handle_start 
+5991 60090aa2 storet 2 ,mem_temp 
+
+le_send_att_read_by_type_res_not_char_loop:
+5992 20405a88 call le_att_check_handle_end 
+5993 24215a76 nbranch le_send_att_error_response_notfound ,positive 
+5994 2040578a call le_att_get_handle_info_from_ptr 
+5995 c000da76 beq 1 ,le_send_att_error_response_notfound 
+5996 20405a94 call le_att_same_uuid 
+5997 2422d9a6 nbranch le_send_att_read_by_type_res_not_char_next ,zero 
+
+le_send_att_read_by_type_res_not_char_common:
+5998 da200014 arg 20 ,rega 
+5999 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+599a 58000009 setarg attop_read_by_type_response 
+599b e0a08000 istore 1 ,contw 
+599c 680084b3 fetch 1 ,mem_le_curr_att_len 
+599d 1fe27200 copy pdata ,loopcnt 
+599e 1fe0fe02 increase 2 ,pdata 
+599f e0a08000 istore 1 ,contw 
+59a0 68010aa2 fetch 2 ,mem_temp 
+59a1 e0a10000 istore 2 ,contw 
+59a2 20407e9f call get_contr 
+59a3 20407ef4 call memcpy_fast 
+59a4 20407ea2 call store_contw 
+59a5 20205aa5 branch le_send_auto_len_by_mem 
+
+le_send_att_read_by_type_res_not_char_next:
+59a6 20405a84 call le_att_next_handle 
+59a7 20205992 branch le_send_att_read_by_type_res_not_char_loop 
+
+le_send_att_read_by_type_res_device_name:
+59a8 d8402a00 arg uuid_chrctr_device_name ,temp 
+59a9 2040577c call le_att_get_short_uuid_ptr 
+59aa 207a0000 rtn blank 
+59ab 18c08dfb increase -5 ,contr 
+59ac e8c10000 ifetch 2 ,contr 
+59ad 60010aa2 store 2 ,mem_temp 
+59ae da200014 arg 20 ,rega 
+59af 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+59b0 58000009 setarg attop_read_by_type_response 
+59b1 e0a08000 istore 1 ,contw 
+59b2 6800c3af fetch 1 ,mem_le_name_len 
+59b3 1fe27200 copy pdata ,loopcnt 
+59b4 1fe0fe02 increase 2 ,pdata 
+59b5 e0a08000 istore 1 ,contw 
+59b6 68010aa2 fetch 2 ,mem_temp 
+59b7 e0a10000 istore 2 ,contw 
+59b8 d8c043b0 arg mem_le_name ,contr 
+59b9 20407ef4 call memcpy_fast 
+59ba 20407ea2 call store_contw 
+59bb 20205aa5 branch le_send_auto_len_by_mem 
+
+le_parse_att_read_request:
+59bc 68090478 fetcht 2 ,mem_le_att_handle 
+59bd 6800c4e9 fetch 1 ,mem_le_configuration 
+59be c281d9dd bbit1 bit_ble_read_auth ,le_send_att_read_response_check_auth 
+
+le_send_att_read_response:
+59bf 2040576a call le_att_get_handle_ptr 
+59c0 203a5a76 branch le_send_att_error_response_notfound ,blank 
+59c1 18c08dfe increase -2 ,contr 
+59c2 e8c10000 ifetch 2 ,contr 
+59c3 d8402a00 arg uuid_chrctr_device_name ,temp 
+59c4 98467c00 isub temp ,null 
+59c5 2022d9d3 branch le_send_device_name ,zero 
+59c6 e8c08000 ifetch 1 ,contr 
+59c7 1fe67c16 sub pdata ,22 ,null 
+59c8 202159ca branch le_send_att_read_response_less ,positive 
+59c9 18007e16 force 22 ,pdata 
+
+le_send_att_read_response_less:
+59ca 1fe22600 copy pdata ,regc 
+59cb 20407ea5 call store_contr 
+59cc 1a60a201 add regc ,1 ,rega 
+59cd 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+59ce 5800000b setarg attop_read_response 
+59cf e0a08000 istore 1 ,contw 
+59d0 1a627200 copy regc ,loopcnt 
+59d1 20407e9f call get_contr 
+59d2 20207f01 branch memcpy 
+
+le_send_device_name:
+59d3 20407ea5 call store_contr 
+59d4 6800c3af fetch 1 ,mem_le_name_len 
+59d5 1fe0a201 add pdata ,1 ,rega 
+59d6 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+59d7 5800000b setarg attop_read_response 
+59d8 e0a08000 istore 1 ,contw 
+59d9 6800c3af fetch 1 ,mem_le_name_len 
+59da 1fe27200 copy pdata ,loopcnt 
+59db d8c043b0 arg mem_le_name ,contr 
+59dc 20207f01 branch memcpy 
+
+le_send_att_read_response_check_auth:
+59dd 680144fa fetch 2 ,mem_le_pairing_handle 
+59de 98467c00 isub temp ,null 
+59df 2422d9bf nbranch le_send_att_read_response ,zero 
+59e0 20405a42 call le_check_encrypt_state 
+59e1 243459bf nbranch le_send_att_read_response ,user 
+59e2 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code 
+59e3 20205a77 branch le_send_att_error_response 
+
+le_parse_att_read_blob_request:
+59e4 e8c10000 ifetch 2 ,contr 
+59e5 6001445e store 2 ,mem_le_att_offset 
+
+le_send_att_read_blob_response:
+59e6 da200014 arg 20 ,rega 
+59e7 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+59e8 5800000d setarg attop_read_blob_response 
+59e9 e0a08000 istore 1 ,contw 
+59ea 6801445e fetch 2 ,mem_le_att_offset 
+59eb 98002200 iforce rega 
+59ec 68090478 fetcht 2 ,mem_le_att_handle 
+59ed 2040576a call le_att_get_handle_ptr 
+59ee 203a5a76 branch le_send_att_error_response_notfound ,blank 
+59ef e8c08000 ifetch 1 ,contr 
+59f0 9a267200 isub rega ,loopcnt 
+59f1 24215a76 nbranch le_send_att_error_response_notfound ,positive 
+59f2 1f267c16 sub loopcnt ,22 ,null 
+59f3 202159f5 branch le_send_att_read_blob_response_less ,positive 
+59f4 18007216 force 22 ,loopcnt 
+
+le_send_att_read_blob_response_less:
+59f5 1a227e00 deposit rega 
+59f6 98c08c00 iadd contr ,contr 
+59f7 20407ef4 call memcpy_fast 
+59f8 20407ea2 call store_contw 
+59f9 20205aa5 branch le_send_auto_len_by_mem 
+
+le_parse_att_read_by_group_type_request:
+59fa 20405ab1 call le_get_search_handle_start_end_common 
+59fb 204056d7 call le_get_search_att_type 
+59fc 202059fd branch le_send_att_read_by_group_type_response 
+
+le_send_att_read_by_group_type_response:
+59fd d9600002 arg 2 ,timeup 
+59fe 6809445a fetcht 2 ,mem_le_search_handle_start 
+59ff 60090aa2 storet 2 ,mem_temp 
+5a00 20405756 call le_init_attlist_search 
+5a01 2040576d call le_att_get_handle_ptr2 
+5a02 18c08dfe increase -2 ,contr 
+5a03 18c27e00 copy contr ,pdata 
+5a04 6001049c store 2 ,mem_le_cur_attlist_start_ptr 
+
+le_send_att_read_by_group_type_response_loop:
+5a05 20405a88 call le_att_check_handle_end 
+5a06 24215a25 nbranch le_send_att_read_by_group_type_end0 ,positive 
+5a07 68090aa2 fetcht 2 ,mem_temp 
+5a08 2040578a call le_att_get_handle_info_from_ptr 
+5a09 c000da28 beq 1 ,le_send_att_read_by_group_type_end1 
+5a0a 20405a8c call le_att_same_type 
+5a0b 2422da23 nbranch le_send_att_read_by_group_type_next_handle ,zero 
+5a0c 19627e00 copy timeup ,pdata 
+5a0d c0005a28 beq 0 ,le_send_att_read_by_group_type_end1 
+5a0e 24345a19 nbranch le_send_att_read_by_group_type_store_write_record ,user 
+5a0f 78547c00 disable user 
+5a10 da200014 arg 20 ,rega 
+5a11 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+5a12 58000011 setarg attop_read_by_group_type_response 
+5a13 e0a08000 istore 1 ,contw 
+5a14 680084b3 fetch 1 ,mem_le_curr_att_len 
+5a15 1fe0fe04 increase 4 ,pdata 
+5a16 e0a08000 istore 1 ,contw 
+5a17 20407ea2 call store_contw 
+5a18 20205a1f branch le_send_att_read_by_group_type_store_record 
+
+le_send_att_read_by_group_type_store_write_record:
+5a19 680084b3 fetch 1 ,mem_le_curr_att_len 
+5a1a c0085a28 beq 16 ,le_send_att_read_by_group_type_end1 
+5a1b 68010aa2 fetch 2 ,mem_temp 
+5a1c 1fe0ffff increase -1 ,pdata 
+5a1d 600104a0 store 2 ,mem_le_cur_handle_end 
+5a1e 20405a9c call le_write_att_record 
+
+le_send_att_read_by_group_type_store_record:
+5a1f 68010aa2 fetch 2 ,mem_temp 
+5a20 6001049e store 2 ,mem_le_cur_handle_start 
+5a21 20405a97 call le_store_att_record 
+5a22 196097ff increase -1 ,timeup 
+
+le_send_att_read_by_group_type_next_handle:
+5a23 20405a84 call le_att_next_handle 
+5a24 20205a05 branch le_send_att_read_by_group_type_response_loop 
+
+le_send_att_read_by_group_type_end0:
+5a25 68010aa2 fetch 2 ,mem_temp 
+5a26 600104a0 store 2 ,mem_le_cur_handle_end 
+5a27 20205a2c branch le_send_att_read_by_group_type_end_common 
+
+le_send_att_read_by_group_type_end1:
+5a28 68010aa2 fetch 2 ,mem_temp 
+5a29 1fe0ffff increase -1 ,pdata 
+5a2a 600104a0 store 2 ,mem_le_cur_handle_end 
+5a2b 20205a2c branch le_send_att_read_by_group_type_end_common 
+
+le_send_att_read_by_group_type_end_common:
+5a2c 20345a76 branch le_send_att_error_response_notfound ,user 
+5a2d 20405a9c call le_write_att_record 
+5a2e 20205aa5 branch le_send_auto_len_by_mem 
+
+le_parse_att_write_request:
+5a2f 18c22200 copy contr ,rega 
+5a30 680144fc fetch 2 ,mem_le_l2cap_size 
+5a31 1fe0a5fd add pdata ,-3 ,regb 
+5a32 204056e2 call le_writeatt_cb 
+
+le_send_att_write_response_check_auth:
+5a33 6800c4e9 fetch 1 ,mem_le_configuration 
+5a34 c3025a3d bbit0 bit_ble_write_auth ,le_send_att_write_response 
+5a35 68090478 fetcht 2 ,mem_le_att_handle 
+5a36 680144fa fetch 2 ,mem_le_pairing_handle 
+5a37 98467c00 isub temp ,null 
+5a38 2422da3d nbranch le_send_att_write_response ,zero 
+5a39 20405a42 call le_check_encrypt_state 
+5a3a 24345a3d nbranch le_send_att_write_response ,user 
+5a3b 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code 
+5a3c 20205a77 branch le_send_att_error_response 
+
+le_send_att_write_response:
+5a3d 18002201 force 1 ,rega 
+5a3e 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+5a3f 58000013 setarg attop_write_response 
+5a40 e0a08000 istore 1 ,contw 
+5a41 20600000 rtn 
+
+le_check_encrypt_state:
+5a42 20407fe9 call disable_user 
+5a43 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5a44 c1000000 rtneq le_pairing_mode_none 
+5a45 6800c040 fetch 1 ,mem_context 
+5a46 c3820000 rtnbit1 lestate_encryption 
+5a47 20207fe7 branch enable_user 
+
+le_parse_att_prepare_write_request:
+5a48 18c0a202 add contr ,2 ,rega 
+5a49 680144fc fetch 2 ,mem_le_l2cap_size 
+5a4a 1fe0a5fb add pdata ,-5 ,regb 
+5a4b 204056e2 call le_writeatt_cb 
+5a4c 20205a4d branch le_send_att_prepare_write_response 
+
+le_send_att_prepare_write_response:
+5a4d 680144fc fetch 2 ,mem_le_l2cap_size 
+5a4e 1fe22200 copy pdata ,rega 
+5a4f 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+5a50 58000017 setarg attop_prepare_write_response 
+5a51 e0a08000 istore 1 ,contw 
+5a52 68010478 fetch 2 ,mem_le_att_handle 
+5a53 e0a10000 istore 2 ,contw 
+5a54 680144fc fetch 2 ,mem_le_l2cap_size 
+5a55 1fe0f3fb add pdata ,-5 ,loopcnt 
+5a56 6801450d fetch 2 ,mem_le_payload_ptr 
+5a57 1fe08c07 add pdata ,7 ,contr 
+5a58 e8c10000 ifetch 2 ,contr 
+5a59 e0a10000 istore 2 ,contw 
+5a5a 20207ef4 branch memcpy_fast 
+
+le_parse_att_execute_write_request:
+
+le_send_att_execute_write_response:
+5a5b 18002201 force 1 ,rega 
+5a5c 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+5a5d 58000019 setarg attop_execute_write_response 
+5a5e e0a08000 istore 1 ,contw 
+5a5f 20600000 rtn 
+
+le_parse_att_write_command:
+5a60 18c22200 copy contr ,rega 
+5a61 680144fc fetch 2 ,mem_le_l2cap_size 
+5a62 1fe0a5fd add pdata ,-3 ,regb 
+5a63 202056e2 branch le_writeatt_cb 
+
+le_att_malloc_tx_notify:
+5a64 18422600 copy temp ,regc 
+5a65 1a20a203 increase 3 ,rega 
+5a66 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+5a67 1a20a3fd increase -3 ,rega 
+5a68 5800001b setarg attop_handle_value_notification 
+5a69 e0a08000 istore 1 ,contw 
+5a6a 1a620400 copy regc ,temp 
+5a6b e0a90000 istoret 2 ,contw 
+5a6c 20600000 rtn 
+
+le_att_malloc_tx_indication:
+5a6d 18422600 copy temp ,regc 
+5a6e 1a20a203 increase 3 ,rega 
+5a6f 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+5a70 1a20a3fd increase -3 ,rega 
+5a71 5800001d setarg attop_handle_value_indication 
+5a72 e0a08000 istore 1 ,contw 
+5a73 1a620400 copy regc ,temp 
+5a74 e0a90000 istoret 2 ,contw 
+5a75 20600000 rtn 
+
+le_send_att_error_response_notfound:
+5a76 70047a0a jam att_err_attribute_not_found ,mem_le_err_code 
+
+le_send_att_error_response:
+5a77 18002205 force 5 ,rega 
+5a78 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+5a79 58000001 setarg attop_error_response 
+5a7a e0a08000 istore 1 ,contw 
+5a7b 68008477 fetch 1 ,mem_le_att_opcode 
+5a7c e0a08000 istore 1 ,contw 
+5a7d 68010478 fetch 2 ,mem_le_att_handle 
+5a7e e0a10000 istore 2 ,contw 
+5a7f 6800847a fetch 1 ,mem_le_err_code 
+5a80 e0a08000 istore 1 ,contw 
+5a81 20600000 rtn 
+
+le_fifo_malloc_tx_l2cap_gatt:
+5a82 18002404 force le_l2cap_cid_att ,regb 
+5a83 20205847 branch le_fifo_malloc_tx_l2cap 
+
+le_att_next_handle:
+5a84 68090aa2 fetcht 2 ,mem_temp 
+5a85 18408401 increase 1 ,temp 
+5a86 60090aa2 storet 2 ,mem_temp 
+5a87 20600000 rtn 
+
+le_att_check_handle_end:
+5a88 68090aa2 fetcht 2 ,mem_temp 
+5a89 6801445c fetch 2 ,mem_le_search_handle_end 
+5a8a 98467c00 isub temp ,null 
+5a8b 20600000 rtn 
+
+le_att_same_type:
+5a8c 6808c45e fetcht 1 ,mem_le_search_att_type_length 
+5a8d da20445f arg mem_le_search_att_type ,rega 
+
+le_att_check_same_common:
+5a8e 680084a2 fetch 1 ,mem_le_cur_uuid_length 
+5a8f 1fe27200 copy pdata ,loopcnt 
+5a90 98467c00 isub temp ,null 
+5a91 24628000 nrtn zero 
+5a92 da4004a3 arg mem_le_cur_uuid ,regb 
+5a93 20207f88 branch string_compare 
+
+le_att_same_uuid:
+5a94 6808c471 fetcht 1 ,mem_le_search_uuid_length 
+5a95 da204472 arg mem_le_search_uuid ,rega 
+5a96 20205a8e branch le_att_check_same_common 
+
+le_store_att_record:
+5a97 680084b3 fetch 1 ,mem_le_curr_att_len 
+5a98 60008101 store 1 ,mem_tmp_buffer 
+5a99 1fe27200 copy pdata ,loopcnt 
+5a9a 20407e9f call get_contr 
+5a9b 20207ef4 branch memcpy_fast 
+
+le_write_att_record:
+5a9c 20407e9c call get_contw 
+5a9d 6801049e fetch 2 ,mem_le_cur_handle_start 
+5a9e e0a10000 istore 2 ,contw 
+5a9f 680104a0 fetch 2 ,mem_le_cur_handle_end 
+5aa0 e0a10000 istore 2 ,contw 
+
+le_write_att_record_common:
+5aa1 68008101 fetch 1 ,mem_tmp_buffer 
+5aa2 1fe27200 copy pdata ,loopcnt 
+5aa3 20407ef4 call memcpy_fast 
+5aa4 20207ea2 branch store_contw 
+
+le_send_auto_len_by_mem:
+5aa5 20407e9c call get_contw 
+5aa6 2040588a call le_fifo_get_last_att_ptr 
+5aa7 18a27e00 copy contw ,pdata 
+5aa8 98c62200 isub contr ,rega 
+5aa9 2040588d call le_fifo_get_last_l2cap_ptr 
+5aaa 1a227e00 copy rega ,pdata 
+5aab e0c10000 istore 2 ,contr 
+5aac 1a20a204 increase 4 ,rega 
+5aad 20405879 call le_fifo_get_last_tx_ptr 
+5aae 1a227e00 copy rega ,pdata 
+5aaf e0c08000 istore 1 ,contr 
+5ab0 20600000 rtn 
+
+le_get_search_handle_start_end_common:
+5ab1 1fecfe00 rshift8 pdata ,pdata 
+5ab2 6001445a store 2 ,mem_le_search_handle_start 
+5ab3 e8c10000 ifetch 2 ,contr 
+5ab4 6001445c store 2 ,mem_le_search_handle_end 
+5ab5 20600000 rtn 
+
+le_parse_signaling:
+5ab6 e8c08000 ifetch 1 ,contr 
+5ab7 e8c88000 ifetcht 1 ,contr 
+5ab8 e8c90000 ifetcht 2 ,contr 
+5ab9 c009dabb beq l2cap_connection_parameter_update_response ,le_l2cap_parse_conn_parameter_update_rsp 
+5aba 20600000 rtn 
+
+le_l2cap_parse_conn_parameter_update_rsp:
+5abb e8c10000 ifetch 2 ,contr 
+5abc 60014509 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 
+5abd 700a9940 jam bt_evt_le_parse_conn_papa_update_rsp ,mem_fifo_temp 
+5abe 20207d86 branch ui_ipc_send_event 
+
+le_l2cap_tx_update_req:
+5abf da20000c arg 0x0c ,rega 
+5ac0 da600012 arg l2cap_connection_parameter_update_request ,regc 
+5ac1 20405ac7 call le_fifo_malloc_tx_l2cap_signaling 
+5ac2 58000008 setarg 0x08 
+5ac3 e0a10000 istore 2 ,contw 
+5ac4 68044496 fetch 8 ,mem_le_interval_min 
+5ac5 e0a40000 istore 8 ,contw 
+5ac6 20600000 rtn 
+
+le_fifo_malloc_tx_l2cap_signaling:
+5ac7 20405acf call le_l2cap_update_signaling_identifier 
+5ac8 da400005 arg le_l2cap_cid_signal ,regb 
+5ac9 20405847 call le_fifo_malloc_tx_l2cap 
+5aca 1a627e00 copy regc ,pdata 
+5acb e0a08000 istore 1 ,contw 
+5acc 6800c508 fetch 1 ,mem_le_signaling_identifier 
+5acd e0a08000 istore 1 ,contw 
+5ace 20600000 rtn 
+
+le_l2cap_update_signaling_identifier:
+5acf 6800c508 fetch 1 ,mem_le_signaling_identifier 
+5ad0 1fe0fe01 pincrease 1 
+5ad1 6000c508 store 1 ,mem_le_signaling_identifier 
+5ad2 c1800000 rtnne 0 
+
+le_l2cap_reset_signaling_identifier:
+5ad3 70450801 jam 1 ,mem_le_signaling_identifier 
+5ad4 20600000 rtn 
+
+le_pairing_mode_init:
+5ad5 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5ad6 c0005ae4 beq le_pairing_mode_none ,le_set_no_pairing 
+5ad7 c000dae7 beq le_pairing_mode_lagacy_justwork ,le_set_pairing_mode_lagacy_just_work 
+5ad8 c0015ae9 beq le_pairing_mode_lagacy_passkey ,le_set_pairing_mode_lagacy_passkey 
+5ad9 c040dadd beq le_pairing_mode_secure_connect_justwork ,le_set_pairing_mode_secure_justwork 
+5ada c0415adf beq le_pairing_mode_secure_connect_numeric ,le_set_pairing_mode_secure_numeric 
+5adb c041dae2 beq le_pairing_mode_secure_connect_passkey ,le_set_pairing_mode_secure_passkey 
+5adc 20600000 rtn 
+
+le_set_pairing_mode_secure_justwork:
+5add 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+5ade 20205ae5 branch le_set_noinputnooutput 
+
+le_set_pairing_mode_secure_numeric:
+5adf 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+5ae0 70445401 jam flag_iocap_displayyesno ,mem_le_pres_iocap 
+5ae1 20600000 rtn 
+
+le_set_pairing_mode_secure_passkey:
+5ae2 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+5ae3 20205aea branch le_set_displayonly 
+
+le_set_no_pairing:
+5ae4 70445600 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth 
+
+le_set_noinputnooutput:
+5ae5 70445403 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap 
+5ae6 20600000 rtn 
+
+le_set_pairing_mode_lagacy_just_work:
+5ae7 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth 
+5ae8 20205ae5 branch le_set_noinputnooutput 
+
+le_set_pairing_mode_lagacy_passkey:
+5ae9 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth 
+
+le_set_displayonly:
+5aea 70445400 jam flag_iocap_displayonly ,mem_le_pres_iocap 
+5aeb 20600000 rtn 
+
+le_secure_connection_enable:
+5aec 6800c456 fetch 1 ,mem_le_pres_auth 
+5aed 79207e03 set1 le_auth_secure_connection_pairing_bit ,pdata 
+5aee 6000c456 store 1 ,mem_le_pres_auth 
+5aef 20600000 rtn 
+
+le_secure_connection_disable:
+5af0 6800c456 fetch 1 ,mem_le_pres_auth 
+5af1 793ffe03 set0 le_auth_secure_connection_pairing_bit ,pdata 
+5af2 6000c456 store 1 ,mem_le_pres_auth 
+5af3 20600000 rtn 
+
+le_parse_smp:
+5af4 e8c08000 ifetch 1 ,contr 
+5af5 c000db09 beq smp_pairing_request ,le_parse_smp_pairing_request 
+5af6 c001db30 beq smp_pairing_confirm ,le_parse_smp_pairing_confirm 
+5af7 c0025b4d beq smp_pairing_random ,le_parse_smp_pairing_random 
+5af8 c002db5a beq smp_pairing_failed ,le_parse_smp_pairing_failed 
+5af9 c0035b80 beq smp_encryption_information ,le_parse_smp_encryption_information 
+5afa c003dbc4 beq smp_master_identification ,le_parse_smp_master_identification 
+5afb c0045baf beq smp_identity_information ,le_parse_smp_identity_information 
+5afc c004dbc0 beq smp_identity_address_information ,le_parse_smp_identity_address_information 
+5afd c0055bc4 beq smp_signing_information ,le_parse_smp_signing_information 
+5afe c005dbc4 beq smp_security_request ,le_parse_smp_security_request 
+5aff c0065bc5 beq smp_pairing_public_key ,le_parse_smp_public_key 
+5b00 c006dbca beq smp_pairing_dhkey_check ,le_parse_smp_dhkey_check 
+5b01 20600000 rtn 
+
+le_send_smp_security_request:
+5b02 18002202 force 2 ,rega 
+5b03 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b04 5800000b setarg smp_security_request 
+5b05 e0a08000 istore 1 ,contw 
+5b06 6800c456 fetch 1 ,mem_le_pres_auth 
+5b07 e0a08000 istore 1 ,contw 
+5b08 20600000 rtn 
+
+le_parse_smp_pairing_request:
+5b09 6000c44c store 1 ,mem_le_preq 
+5b0a e8c30000 ifetch 6 ,contr 
+5b0b e0a30000 istore 6 ,contw 
+5b0c 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5b0d c0005b5f beq le_pairing_mode_none ,le_smp_pairing_fail_reason_not_support_pairing 
+5b0e 20405b2b call le_send_smp_pairing_response 
+5b0f 20405b26 call le_check_master_support_secure_connect 
+5b10 7044c403 jam flag_le_pairing_rcv_pairing_req ,mem_le_pairing_state 
+5b11 6800c44d fetch 1 ,mem_le_preq_iocap 
+5b12 c0005b18 beq flag_iocap_displayonly ,le_set_tk_0 
+5b13 c000db18 beq flag_iocap_displayyesno ,le_set_tk_0 
+5b14 c001db18 beq flag_iocap_noinputnooutput ,le_set_tk_0 
+5b15 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5b16 c0015b1b beq le_pairing_mode_lagacy_passkey ,le_parse_smp_pairing_req_passkey 
+5b17 c1418000 rtneq le_pairing_mode_secure_connect_passkey 
+
+le_set_tk_0:
+5b18 dfe00000 arg 0 ,pdata 
+5b19 600244c7 store 4 ,mem_le_tk 
+5b1a 20600000 rtn 
+
+le_parse_smp_pairing_req_passkey:
+5b1b 6800c4e9 fetch 1 ,mem_le_configuration 
+5b1c c2805b24 bbit1 bit_ble_passkey_fixed_key ,le_parse_smp_pairing_req_fixed_passkey 
+
+le_genernate_tk:
+5b1d da2044c7 arg mem_le_tk ,rega 
+5b1e 1a220a00 copy rega ,contw 
+5b1f df200003 arg 3 ,loopcnt 
+5b20 2040630d call generate_random_loop 
+5b21 680144c9 fetch 2 ,mem_le_tk + 2 
+5b22 1fe17e07 and_into 0x7 ,pdata 
+5b23 600144c9 store 2 ,mem_le_tk + 2 
+
+le_parse_smp_pairing_req_fixed_passkey:
+5b24 700a9934 jam bt_evt_le_tk_generate ,mem_fifo_temp 
+5b25 20207d86 branch ui_ipc_send_event 
+
+le_check_master_support_secure_connect:
+5b26 6800c44f fetch 1 ,mem_le_preq_auth 
+5b27 c3818000 rtnbit1 le_auth_secure_connection_pairing_bit 
+5b28 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5b29 c4038000 rtnbit0 le_pairing_mode_secure_connect_bit 
+5b2a 20203402 branch app_ble_disconnect 
+
+le_send_smp_pairing_response:
+5b2b 18002207 force 7 ,rega 
+5b2c 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b2d 6803c453 fetch 7 ,mem_le_pres 
+5b2e e0a38000 istore 7 ,contw 
+5b2f 20600000 rtn 
+
+le_parse_smp_pairing_confirm:
+5b30 18c22200 copy contr ,rega 
+5b31 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5b32 c041db37 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_confirm_secure_passkey 
+5b33 1a220c00 copy rega ,contr 
+5b34 d8a0442a arg mem_le_rconfirm ,contw 
+5b35 20407ebf call memcpy16 
+5b36 20205b3d branch le_send_smp_pairing_confirm 
+
+le_parse_smp_pairing_confirm_secure_passkey:
+5b37 1a220c00 copy rega ,contr 
+5b38 d8a0442a arg mem_le_rconfirm ,contw 
+5b39 20407ebf call memcpy16 
+5b3a 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+5b3b 7044c108 jam le_sc_stat_passkey_wait_confirm ,mem_le_secure_connect_state 
+5b3c 20600000 rtn 
+
+le_send_smp_pairing_confirm:
+5b3d 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5b3e c283db45 bbit1 le_pairing_mode_secure_connect_bit ,le_send_smp_pairing_confirm_sc 
+5b3f 2040739c call generate_confirm 
+5b40 18002211 force 17 ,rega 
+5b41 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b42 58000003 setarg smp_pairing_confirm 
+5b43 e0a08000 istore 1 ,contw 
+5b44 20207497 branch store_aes_result 
+
+le_send_smp_pairing_confirm_sc:
+5b45 d8a0443a arg mem_le_srand ,contw 
+5b46 2040630c call generate_random 
+5b47 204071c5 call function_f4_cb 
+5b48 18002211 force 17 ,rega 
+5b49 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b4a 58000003 setarg smp_pairing_confirm 
+5b4b e0a08000 istore 1 ,contw 
+5b4c 20207201 branch load_inverse_result 
+
+le_parse_smp_pairing_random:
+5b4d 18c22200 copy contr ,rega 
+5b4e 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5b4f c283db61 bbit1 le_pairing_mode_secure_connect_bit ,le_parse_smp_pairing_random_sc 
+5b50 1a220c00 copy rega ,contr 
+5b51 20407394 call authenticate_rconfirm 
+5b52 2022db75 branch le_parse_smp_pairing_random_success ,zero 
+
+le_send_pairing_confirm_value_failed:
+5b53 70047b04 jam pairing_failed_confirm_value_failed ,mem_le_ll_pairing_fail_reason 
+
+le_send_pairing_failed:
+5b54 18002202 force 2 ,rega 
+5b55 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b56 58000005 setarg smp_pairing_failed 
+5b57 e0a08000 istore 1 ,contw 
+5b58 6800847b fetch 1 ,mem_le_ll_pairing_fail_reason 
+5b59 e0a08000 istore 1 ,contw 
+
+le_parse_smp_pairing_failed:
+5b5a 18000e0a force smp_pairing_timer ,queue 
+5b5b 20407f07 call timer_stop 
+5b5c 7044c400 jam flag_le_pairing_null ,mem_le_pairing_state 
+5b5d 700a9930 jam bt_evt_le_pairing_fail ,mem_fifo_temp 
+5b5e 20207d86 branch ui_ipc_send_event 
+
+le_smp_pairing_fail_reason_not_support_pairing:
+5b5f 70047b05 jam pairing_failed_pairing_not_supported ,mem_le_ll_pairing_fail_reason 
+5b60 20205b54 branch le_send_pairing_failed 
+
+le_parse_smp_pairing_random_sc:
+5b61 d8a0042f arg mem_le_mrand ,contw 
+5b62 1a220c00 copy rega ,contr 
+5b63 20407ebf call memcpy16 
+5b64 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5b65 c041db6c beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_random_sc_passkey 
+5b66 2040714f call function_g2 
+5b67 20405b7a call le_send_smp_pairing_random 
+5b68 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5b69 c1c10000 rtnne le_pairing_mode_secure_connect_numeric 
+5b6a 700a993b jam bt_evt_le_gkey_generate ,mem_fifo_temp 
+5b6b 20207d86 branch ui_ipc_send_event 
+
+le_parse_smp_pairing_random_sc_passkey:
+5b6c 204071ba call function_f4_ca 
+5b6d d8a00af2 arg mem_aes_cmac_temp ,contw 
+5b6e 20407201 call load_inverse_result 
+5b6f da200af2 arg mem_aes_cmac_temp ,rega 
+5b70 da40442a arg mem_le_rconfirm ,regb 
+5b71 df200010 arg 16 ,loopcnt 
+5b72 20407f88 call string_compare 
+5b73 2422db53 nbranch le_send_pairing_confirm_value_failed ,zero 
+5b74 20205b7a branch le_send_smp_pairing_random 
+
+le_parse_smp_pairing_random_success:
+5b75 20407390 call generate_stk 
+5b76 700a9931 jam bt_evt_le_pairing_success ,mem_fifo_temp 
+5b77 20407d86 call ui_ipc_send_event 
+5b78 70442901 jam 1 ,mem_ltk_exists 
+5b79 7044c405 jam flag_le_pairing_after_auth ,mem_le_pairing_state 
+
+le_send_smp_pairing_random:
+5b7a 18002211 force 17 ,rega 
+5b7b 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b7c 58000004 setarg smp_pairing_random 
+5b7d e0a08000 istore 1 ,contw 
+5b7e d8c0443a arg mem_le_srand ,contr 
+5b7f 20207ebf branch memcpy16 
+
+le_parse_smp_encryption_information:
+5b80 d8a0041f arg mem_le_peer_ltk ,contw 
+5b81 20207ebf branch memcpy16 
+
+le_send_smp_encryption_information:
+5b82 18002211 force 17 ,rega 
+5b83 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b84 58000006 setarg smp_encryption_information 
+5b85 e0a08000 istore 1 ,contw 
+5b86 6800c4e9 fetch 1 ,mem_le_configuration 
+5b87 c280db8a bbit1 bit_ble_pairing_fixed_ltk ,le_send_fixed_ltk 
+5b88 d8c04419 arg mem_le_ltk ,contr 
+5b89 20207ebf branch memcpy16 
+
+le_send_fixed_ltk:
+5b8a d8c044ea arg mem_le_fixed_ltk ,contr 
+5b8b 20207ebf branch memcpy16 
+
+le_send_smp_master_identification:
+5b8c d8a044cb arg mem_le_ediv ,contw 
+5b8d 1800720a force 10 ,loopcnt 
+5b8e 2040630d call generate_random_loop 
+5b8f 1800220b force 11 ,rega 
+5b90 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b91 58000007 setarg smp_master_identification 
+5b92 e0a08000 istore 1 ,contw 
+5b93 680144cb fetch 2 ,mem_le_ediv 
+5b94 e0a10000 istore 2 ,contw 
+5b95 680444cd fetch 8 ,mem_le_rand 
+5b96 e0a40000 istore 8 ,contw 
+5b97 20600000 rtn 
+
+le_send_smp_identity_information:
+5b98 18002211 force 17 ,rega 
+5b99 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b9a 58000008 setarg smp_identity_information 
+5b9b e0a08000 istore 1 ,contw 
+5b9c 58000000 setarg 0 
+5b9d e0a40000 istore 8 ,contw 
+5b9e e0a40000 istore 8 ,contw 
+5b9f 20600000 rtn 
+
+le_send_smp_identity_address_information:
+5ba0 18002208 force 8 ,rega 
+5ba1 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5ba2 58000009 setarg smp_identity_address_information 
+5ba3 e0a08000 istore 1 ,contw 
+5ba4 6800c495 fetch 1 ,mem_le_conn_own_addr_type 
+5ba5 e0a08000 istore 1 ,contw 
+5ba6 680344a0 fetch 6 ,mem_le_lap 
+5ba7 e0a30000 istore 6 ,contw 
+5ba8 20600000 rtn 
+
+le_send_pairing_fail_unspecified_reason:
+5ba9 70047b08 jam pairing_failed_unspecified_reason ,mem_le_ll_pairing_fail_reason 
+5baa 20205b54 branch le_send_pairing_failed 
+
+le_check_init_key_distribution:
+5bab 6800c458 fetch 1 ,mem_le_pres_init_key_distribution 
+5bac 6808c458 fetcht 1 ,mem_le_pres_init_key_distribution 
+5bad 98417e00 iand temp ,pdata 
+5bae 20600000 rtn 
+
+le_parse_smp_identity_information:
+5baf d8a044d5 arg mem_le_irk ,contw 
+5bb0 20407ebf call memcpy16 
+5bb1 20405bab call le_check_init_key_distribution 
+5bb2 2fec0001 isolate0 le_initator_irk_bit ,pdata 
+5bb3 2020dba9 branch le_send_pairing_fail_unspecified_reason ,true 
+5bb4 6800c092 fetch 1 ,mem_device_option 
+5bb5 c1850000 rtnne dvc_op_module 
+5bb6 20405bb9 call le_check_master_addr_type 
+5bb7 24740000 nrtn user 
+5bb8 20203410 branch app_ble_store_reconn_info 
+
+le_check_master_addr_type:
+5bb9 20407fe9 call disable_user 
+5bba 6800c48e fetch 1 ,mem_le_conn_peer_addr_type 
+5bbb c1000000 rtneq master_public_addr 
+5bbc 68008454 fetch 1 ,mem_le_plap + 5 
+5bbd 2fe180c0 compare 0xc0 ,pdata ,0xc0 
+5bbe 20608000 rtn true 
+5bbf 20207fe7 branch enable_user 
+
+le_parse_smp_identity_address_information:
+5bc0 20405bab call le_check_init_key_distribution 
+5bc1 2fec0001 isolate0 le_initator_irk_bit ,pdata 
+5bc2 2020dba9 branch le_send_pairing_fail_unspecified_reason ,true 
+5bc3 20600000 rtn 
+
+le_parse_smp_master_identification:
+
+le_parse_smp_signing_information:
+
+le_parse_smp_security_request:
+5bc4 20600000 rtn 
+
+le_parse_smp_public_key:
+5bc5 d8a009be arg mem_le_pubkey_remote_x_256 ,contw 
+5bc6 20407eb3 call memcpy64 
+5bc7 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+5bc8 7044c101 jam le_sc_stat_receive_public_key ,mem_le_secure_connect_state 
+5bc9 20600000 rtn 
+
+le_parse_smp_dhkey_check:
+5bca d8a00a6e arg mem_sp_confirm_remote ,contw 
+5bcb 20407ebf call memcpy16 
+5bcc 7044c106 jam le_sc_stat_receive_dhkey ,mem_le_secure_connect_state 
+5bcd 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+5bce 20600000 rtn 
+
+le_send_smp_pairing_public_key:
+5bcf 18002241 force 65 ,rega 
+5bd0 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5bd1 5800000c setarg smp_pairing_public_key 
+5bd2 e0a08000 istore 1 ,contw 
+5bd3 d8c045d2 arg mem_le_pubkey_local_x_256 ,contr 
+5bd4 20207eb3 branch memcpy64 
+
+le_send_smp_pairing_dhkey_check:
+5bd5 20407166 call function_f6_eb 
+5bd6 18002211 force 17 ,rega 
+5bd7 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5bd8 5800000d setarg smp_pairing_dhkey_check 
+5bd9 e0a08000 istore 1 ,contw 
+5bda 20207201 branch load_inverse_result 
+
+le_check_paring_time:
+5bdb 6800c4c4 fetch 1 ,mem_le_pairing_state 
+5bdc c17f8000 rtneq flag_le_pairing_end 
+5bdd d8400003 arg flag_le_pairing_rcv_pairing_req ,temp 
+5bde 98467c00 isub temp ,null 
+5bdf 24610000 nrtn positive 
+5be0 d8e0000a arg smp_pairing_timer ,queue 
+5be1 20407f16 call timer_check 
+5be2 247a0000 nrtn blank 
+5be3 20205ba9 branch le_send_pairing_fail_unspecified_reason 
+
+le_pairing_sm:
+5be4 473c402f bpatchx patch2f_0 ,mem_patch2f 
+5be5 6800c4c4 fetch 1 ,mem_le_pairing_state 
+5be6 c0005bef beq flag_le_pairing_null ,le_pairing_sm_null 
+5be7 c000dbf5 beq flag_le_pairing_start ,le_pairing_sm_start 
+5be8 c0015bef beq flag_le_pairing_send_recurity_req ,le_pairing_sm_send_sec_req 
+5be9 c001dbf7 beq flag_le_pairing_rcv_pairing_req ,le_pairing_sm_rcv_pairing_req 
+5bea c002dbfb beq flag_le_pairing_after_auth ,le_pairing_sm_after_auth 
+5beb c003dc07 beq flag_le_paring_send_enc_information ,le_pairng_sm_send_enc_information 
+5bec c0045c09 beq flag_le_paring_send_master_identification ,le_pairng_sm_send_master_indentification 
+5bed c004dc10 beq flag_le_paring_send_indentity_information ,le_pairng_sm_send_indentity_information 
+5bee 20600000 rtn 
+
+le_pairing_sm_null:
+
+le_pairing_sm_send_sec_req:
+5bef 6800c4c5 fetch 1 ,mem_le_enc_state 
+5bf0 c1820000 rtnne flag_le_send_start_enc_rsp 
+5bf1 7044c5ff jam flag_le_enc_end ,mem_le_enc_state 
+5bf2 7044c4ff jam flag_le_pairing_end ,mem_le_pairing_state 
+5bf3 700a993f jam bt_evt_le_reconnect_complete ,mem_fifo_temp 
+5bf4 20207d86 branch ui_ipc_send_event 
+
+le_pairing_sm_start:
+5bf5 7044c402 jam flag_le_pairing_send_recurity_req ,mem_le_pairing_state 
+5bf6 20205b02 branch le_send_smp_security_request 
+
+le_pairing_sm_rcv_pairing_req:
+5bf7 7044c404 jam flag_le_pairing_auth ,mem_le_pairing_state 
+5bf8 58017700 setarg timer_smp_pairing_timeout 
+5bf9 d8e0000a arg smp_pairing_timer ,queue 
+5bfa 20207f08 branch timer_init 
+
+le_pairing_sm_after_auth:
+5bfb 6800c4c5 fetch 1 ,mem_le_enc_state 
+5bfc c0025bfe beq flag_le_send_start_enc_rsp ,le_pairing_sm_after_auth_start_enc 
+5bfd 20600000 rtn 
+
+le_pairing_sm_after_auth_start_enc:
+5bfe 7044c407 jam flag_le_paring_send_enc_information ,mem_le_pairing_state 
+5bff 700a9929 jam bt_evt_le_enc_info ,mem_fifo_temp 
+5c00 20407d86 call ui_ipc_send_event 
+5c01 20405b82 call le_send_smp_encryption_information 
+5c02 6800c092 fetch 1 ,mem_device_option 
+5c03 c1850000 rtnne dvc_op_module 
+5c04 20405bb9 call le_check_master_addr_type 
+5c05 20740000 rtn user 
+5c06 20203410 branch app_ble_store_reconn_info 
+
+le_pairng_sm_send_enc_information:
+5c07 7044c408 jam flag_le_paring_send_master_identification ,mem_le_pairing_state 
+5c08 20205b8c branch le_send_smp_master_identification 
+
+le_pairng_sm_send_master_indentification:
+5c09 6800c452 fetch 1 ,mem_le_preq_resp_key_distribution 
+5c0a 6808c459 fetcht 1 ,mem_le_pres_resp_key_distribution 
+5c0b 98417e00 iand temp ,pdata 
+5c0c 2fec0001 isolate0 le_initator_irk_bit ,pdata 
+5c0d 2020dc12 branch le_parse_start_enc_rsp_after_auth_end ,true 
+5c0e 7044c409 jam flag_le_paring_send_indentity_information ,mem_le_pairing_state 
+5c0f 20205b98 branch le_send_smp_identity_information 
+
+le_pairng_sm_send_indentity_information:
+5c10 20405ba0 call le_send_smp_identity_address_information 
+5c11 20205c12 branch le_parse_start_enc_rsp_after_auth_end 
+
+le_parse_start_enc_rsp_after_auth_end:
+5c12 18000e0a force smp_pairing_timer ,queue 
+5c13 20407f07 call timer_stop 
+5c14 7044c5ff jam flag_le_enc_end ,mem_le_enc_state 
+5c15 7044c4ff jam flag_le_pairing_end ,mem_le_pairing_state 
+5c16 700a993e jam bt_evt_le_pairing_complete ,mem_fifo_temp 
+5c17 20207d86 branch ui_ipc_send_event 
+
+le_secure_connect_sm:
+5c18 473cc02f bpatchx patch2f_1 ,mem_patch2f 
+5c19 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5c1a c4038000 rtnbit0 le_pairing_mode_secure_connect_bit 
+5c1b 6800c4bf fetch 1 ,mem_le_secure_connect_flag 
+5c1c c1810000 rtnne le_sp_flag_commit_256 
+5c1d 7044bf00 jam sp_flag_standby ,mem_le_secure_connect_flag 
+5c1e 6800c4c1 fetch 1 ,mem_le_secure_connect_state 
+5c1f c000dc58 beq le_sc_stat_receive_public_key ,le_sc_sm_receive_public_key 
+5c20 c0015c5f beq le_sc_stat_wait_send_public_key ,le_sc_sm_wait_send_public_key 
+5c21 c001dc52 beq le_sc_stat_send_public_key ,le_sc_sm_send_public_key 
+5c22 c0035c39 beq le_sc_stat_receive_dhkey ,le_sc_sm_receive_dhkey 
+5c23 c003dc30 beq le_sc_stat_wait_confirm_gkey ,le_sc_sm_wait_confirm_gkey 
+5c24 c0045c26 beq le_sc_stat_passkey_wait_confirm ,le_sc_sm_passkey_wait_confirm 
+5c25 20600000 rtn 
+
+le_sc_sm_passkey_wait_confirm:
+5c26 6800c663 fetch 1 ,mem_authentication_passkey_times 
+5c27 1fe20e00 copy pdata ,queue 
+5c28 1fe0fe01 increase 1 ,pdata 
+5c29 6000c663 store 1 ,mem_authentication_passkey_times 
+5c2a 680244c7 fetch 4 ,mem_le_tk 
+5c2b afefffff qisolate1 pdata 
+5c2c 58000080 setarg 0x80 
+5c2d 7920fe00 setflag true ,0 ,pdata 
+5c2e 6000c664 store 1 ,mem_passkey_1bit 
+5c2f 20205c55 branch le_sc_sm_ready_send_pairing_confirm 
+
+le_sc_sm_wait_confirm_gkey:
+5c30 6800c4c2 fetch 1 ,mem_le_sc_confirm_gkey_flag 
+5c31 7044c200 jam flag_le_sc_confrim_null ,mem_le_sc_confirm_gkey_flag 
+5c32 c000dc35 beq flag_le_sc_confrim_gkey_ok ,le_sc_confirm_gkey_ok 
+5c33 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+5c34 20600000 rtn 
+
+le_sc_confirm_gkey_ok:
+5c35 700a9931 jam bt_evt_le_pairing_success ,mem_fifo_temp 
+5c36 20407d86 call ui_ipc_send_event 
+5c37 7044c405 jam flag_le_pairing_after_auth ,mem_le_pairing_state 
+5c38 20205bd5 branch le_send_smp_pairing_dhkey_check 
+
+le_sc_sm_receive_dhkey:
+5c39 680089b9 fetch 1 ,mem_sp_dhkey_invalid 
+5c3a c001dc3d beq sp_key_valid_256 ,le_dhkey_ready 
+5c3b 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+5c3c 20600000 rtn 
+
+le_dhkey_ready:
+5c3d 2040718d call function_f5 
+5c3e 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5c3f c041dc41 beq le_pairing_mode_secure_connect_passkey ,le_dhkey_ready_common 
+5c40 20405b18 call le_set_tk_0 
+
+le_dhkey_ready_common:
+5c41 2040717a call function_f6_ea 
+5c42 da200af2 arg mem_aes_cmac_temp ,rega 
+5c43 da400a6e arg mem_sp_confirm_remote ,regb 
+5c44 df200010 arg 16 ,loopcnt 
+5c45 20407f88 call string_compare 
+5c46 2022dc49 branch le_dhkey_check_ok ,zero 
+
+le_dhkey_check_fail:
+5c47 70047b0b jam pairing_failed_dhkey_check_failed ,mem_le_ll_pairing_fail_reason 
+5c48 20205b54 branch le_send_pairing_failed 
+
+le_dhkey_check_ok:
+5c49 20407595 call sp_calc_check_publickey_256 
+5c4a 2422dc47 nbranch le_dhkey_check_fail ,zero 
+5c4b 70442901 jam 1 ,mem_ltk_exists 
+5c4c 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5c4d c040dc35 beq le_pairing_mode_secure_connect_justwork ,le_sc_confirm_gkey_ok 
+5c4e c041dc35 beq le_pairing_mode_secure_connect_passkey ,le_sc_confirm_gkey_ok 
+5c4f 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+5c50 7044c107 jam le_sc_stat_wait_confirm_gkey ,mem_le_secure_connect_state 
+5c51 20600000 rtn 
+
+le_sc_sm_send_public_key:
+5c52 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5c53 c041dc56 beq le_pairing_mode_secure_connect_passkey ,le_sc_sm_send_public_key_passkey 
+5c54 70466400 jam 0 ,mem_passkey_1bit 
+
+le_sc_sm_ready_send_pairing_confirm:
+5c55 20205b3d branch le_send_smp_pairing_confirm 
+
+le_sc_sm_send_public_key_passkey:
+5c56 70466300 jam 0 ,mem_authentication_passkey_times 
+5c57 20205b1b branch le_parse_smp_pairing_req_passkey 
+
+le_sc_sm_receive_public_key:
+5c58 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+5c59 6800c4c3 fetch 1 ,mem_le_sc_local_key_invalid 
+5c5a c001dc5c beq sp_key_valid_256 ,le_public_key_ready 
+5c5b 20600000 rtn 
+
+le_public_key_ready:
+5c5c 7044c102 jam le_sc_stat_wait_send_public_key ,mem_le_secure_connect_state 
+5c5d 7009b900 jam sp_key_invalid ,mem_sp_dhkey_invalid 
+5c5e 20207a99 branch sp_dhkey_calc_256 
+
+le_sc_sm_wait_send_public_key:
+5c5f 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+5c60 7044c103 jam le_sc_stat_send_public_key ,mem_le_secure_connect_state 
+5c61 20205bcf branch le_send_smp_pairing_public_key 
+
+le_fifo_malloc_tx_l2cap_smp:
+5c62 18002406 force le_l2cap_cid_smp ,regb 
+5c63 20205847 branch le_fifo_malloc_tx_l2cap 
+
+le_parse_ll:
+5c64 680082db fetch 1 ,mem_le_rxbuf + 2 
+5c65 c0005c7b beq ll_connection_update_req ,le_parse_connection_update_req 
+5c66 c000dc83 beq ll_channel_map_req ,le_parse_channel_map_req 
+5c67 c0015c8e beq ll_terminate_ind ,le_parse_terminate_ind 
+5c68 c001dcaa beq ll_enc_req ,le_parse_enc_req 
+5c69 c0025ce1 beq ll_enc_rsp ,le_parse_enc_rsp 
+5c6a c002dce6 beq ll_start_enc_req ,le_parse_start_enc_req 
+5c6b c0035cea beq ll_start_enc_rsp ,le_parse_start_enc_rsp 
+5c6c c003dcf5 beq ll_unknown_rsp ,le_parse_unknown_rsp 
+5c6d c0045c99 beq ll_feature_req ,le_parse_feature_req 
+5c6e c004dcf5 beq ll_feature_rsp ,le_parse_feature_rsp 
+5c6f c0055cef beq ll_pause_enc_req ,le_parse_pause_enc_req 
+5c70 c005dcf5 beq ll_pause_enc_rsp ,le_parse_pause_enc_rsp 
+5c71 c0065c9f beq ll_version_ind ,le_parse_version_ind 
+5c72 c006dcf5 beq ll_reject_ind ,le_parse_reject_ind 
+5c73 c0095ca6 beq ll_ping_req ,le_parse_ping_req 
+5c74 c009dcf5 beq ll_ping_rsp ,le_parse_ping_rsp 
+5c75 da200002 arg 2 ,rega 
+5c76 da400007 arg ll_unknown_rsp ,regb 
+5c77 20405842 call le_fifo_malloc_tx_ll 
+5c78 680082db fetch 1 ,mem_le_rxbuf + 2 
+5c79 e0a08000 istore 1 ,contw 
+5c7a 20600000 rtn 
+
+le_parse_connection_update_req:
+5c7b e8c48000 ifetch 9 ,contr 
+5c7c 6004c3d3 store 9 ,mem_le_new_param 
+5c7d e8c10000 ifetch 2 ,contr 
+5c7e 6001045f store 2 ,mem_le_instant 
+5c7f 6800843f fetch 1 ,mem_le_state 
+5c80 79207e05 set1 lestate_update_param ,pdata 
+5c81 6000843f store 1 ,mem_le_state 
+5c82 20600000 rtn 
+
+le_parse_channel_map_req:
+5c83 e8c28000 ifetch 5 ,contr 
+5c84 6002c3ce store 5 ,mem_le_new_map 
+5c85 e8c10000 ifetch 2 ,contr 
+5c86 6001045f store 2 ,mem_le_instant 
+5c87 68090459 fetcht 2 ,mem_le_event_count 
+5c88 98467c00 isub temp ,null 
+5c89 24215c8e nbranch le_parse_terminate_ind ,positive 
+5c8a 6800843f fetch 1 ,mem_le_state 
+5c8b 79207e06 set1 lestate_update_map ,pdata 
+5c8c 6000843f store 1 ,mem_le_state 
+5c8d 20600000 rtn 
+
+le_parse_terminate_ind:
+5c8e 58000014 setarg 20 
+5c8f 6001046d store 2 ,mem_le_superto 
+5c90 600144ba store 2 ,mem_le_init_superto 
+5c91 20600000 rtn 
+
+le_send_terminate_ind_user_terminated:
+5c92 da600013 arg error_remote_user_terminated_connection ,regc 
+
+le_send_terminate_ind:
+5c93 da200002 arg 2 ,rega 
+5c94 da400002 arg ll_terminate_ind ,regb 
+5c95 20405842 call le_fifo_malloc_tx_ll 
+5c96 1a627e00 copy regc ,pdata 
+5c97 e0a08000 istore 1 ,contw 
+5c98 20600000 rtn 
+
+le_parse_feature_req:
+
+le_send_feature_rsp:
+5c99 da200009 arg 9 ,rega 
+5c9a da400009 arg ll_feature_rsp ,regb 
+5c9b 20405842 call le_fifo_malloc_tx_ll 
+5c9c 58000001 setarg param_le_features 
+5c9d e0a40000 istore 8 ,contw 
+5c9e 20600000 rtn 
+
+le_parse_version_ind:
+5c9f 20748000 rtn master 
+
+le_send_version_ind:
+5ca0 da200006 arg 6 ,rega 
+5ca1 da40000c arg ll_version_ind ,regb 
+5ca2 20405842 call le_fifo_malloc_tx_ll 
+5ca3 6802c510 fetch 5 ,mem_lmp_version 
+5ca4 e0a28000 istore 5 ,contw 
+5ca5 20600000 rtn 
+
+le_parse_ping_req:
+5ca6 da400013 arg ll_ping_rsp ,regb 
+5ca7 20205ca8 branch le_send_ll_one_lenth 
+
+le_send_ll_one_lenth:
+5ca8 da200001 arg 1 ,rega 
+5ca9 20205842 branch le_fifo_malloc_tx_ll 
+
+le_parse_enc_req:
+5caa e8c40000 ifetch 8 ,contr 
+5cab 600444cd store 8 ,mem_le_rand 
+5cac e8c10000 ifetch 2 ,contr 
+5cad 600144cb store 2 ,mem_le_ediv 
+5cae e8c40000 ifetch 8 ,contr 
+5caf 600444aa store 8 ,mem_le_skdm 
+5cb0 e8c20000 ifetch 4 ,contr 
+5cb1 60024411 store 4 ,mem_le_ivm 
+5cb2 20405ccf call le_send_enc_rsp 
+5cb3 473d402f bpatchx patch2f_2 ,mem_patch2f 
+5cb4 6800c4c4 fetch 1 ,mem_le_pairing_state 
+5cb5 c002dcbc beq flag_le_pairing_after_auth ,le_parse_enc_req_after_auth 
+5cb6 6800c4e9 fetch 1 ,mem_le_configuration 
+5cb7 c280dcbf bbit1 bit_ble_pairing_fixed_ltk ,le_parse_enc_req_fixed_ltk 
+5cb8 6800c217 fetch 1 ,mem_nv_data_number 
+5cb9 245a67be ncall load_device_list_mode_4 ,blank 
+5cba 6800c429 fetch 1 ,mem_ltk_exists 
+5cbb c0005cc4 beq 0 ,le_ltk_lost 
+
+le_parse_enc_req_after_auth:
+5cbc 7044c501 jam flag_le_rcv_enc_start ,mem_le_enc_state 
+5cbd 20405cdd call le_send_start_enc_req 
+5cbe 202073a2 branch generate_sk 
+
+le_parse_enc_req_fixed_ltk:
+5cbf 70442901 jam 1 ,mem_ltk_exists 
+5cc0 d8c044ea arg mem_le_fixed_ltk ,contr 
+5cc1 d8a04419 arg mem_le_ltk ,contw 
+5cc2 20407ebf call memcpy16 
+5cc3 20205cbc branch le_parse_enc_req_after_auth 
+
+le_ltk_lost:
+5cc4 473dc02f bpatchx patch2f_3 ,mem_patch2f 
+5cc5 7044c500 jam flag_le_enc_null ,mem_le_enc_state 
+5cc6 7044c400 jam flag_le_enc_null ,mem_le_pairing_state 
+5cc7 700a9941 jam bt_evt_le_ltk_lost ,mem_fifo_temp 
+5cc8 20207d86 branch ui_ipc_send_event 
+
+le_send_reject_ind:
+5cc9 da200002 arg 2 ,rega 
+5cca da40000d arg ll_reject_ind ,regb 
+5ccb 20405842 call le_fifo_malloc_tx_ll 
+5ccc 58000006 setarg le_err_pin_or_key_missing 
+5ccd e0a08000 istore 1 ,contw 
+5cce 20600000 rtn 
+
+le_send_enc_rsp:
+5ccf d8a044b2 arg mem_le_skds ,contw 
+5cd0 18007208 force 8 ,loopcnt 
+5cd1 2040630d call generate_random_loop 
+5cd2 d8a04415 arg mem_le_ivs ,contw 
+5cd3 18007204 force 4 ,loopcnt 
+5cd4 2040630d call generate_random_loop 
+5cd5 da20000d arg 13 ,rega 
+5cd6 da400004 arg ll_enc_rsp ,regb 
+5cd7 20405842 call le_fifo_malloc_tx_ll 
+5cd8 680444b2 fetch 8 ,mem_le_skds 
+5cd9 e0a40000 istore 8 ,contw 
+5cda 68024415 fetch 4 ,mem_le_ivs 
+5cdb e0a20000 istore 4 ,contw 
+5cdc 20600000 rtn 
+
+le_send_start_enc_req:
+5cdd da400005 arg ll_start_enc_req ,regb 
+5cde 20205ca8 branch le_send_ll_one_lenth 
+
+le_send_start_enc_rsp:
+5cdf da400006 arg ll_start_enc_rsp ,regb 
+5ce0 20205ca8 branch le_send_ll_one_lenth 
+
+le_parse_enc_rsp:
+5ce1 e8c40000 ifetch 8 ,contr 
+5ce2 600444b2 store 8 ,mem_le_skds 
+5ce3 e8c20000 ifetch 4 ,contr 
+5ce4 60024415 store 4 ,mem_le_ivs 
+5ce5 202073a2 branch generate_sk 
+
+le_parse_start_enc_req:
+5ce6 6800843f fetch 1 ,mem_le_state 
+5ce7 79207e04 set1 lestate_encryption ,pdata 
+5ce8 6000843f store 1 ,mem_le_state 
+5ce9 20600000 rtn 
+
+le_parse_start_enc_rsp:
+5cea 20748000 rtn master 
+5ceb 700a9932 jam bt_evt_le_start_enc ,mem_fifo_temp 
+5cec 20407d86 call ui_ipc_send_event 
+5ced 7044c504 jam flag_le_send_start_enc_rsp ,mem_le_enc_state 
+5cee 20205cdf branch le_send_start_enc_rsp 
+
+le_parse_pause_enc_req:
+5cef 7044c502 jam flag_le_enc_pause ,mem_le_enc_state 
+5cf0 20405cf3 call le_send_pause_enc_rsp 
+5cf1 700a9933 jam bt_evt_le_pause_enc ,mem_fifo_temp 
+5cf2 20207d86 branch ui_ipc_send_event 
+
+le_send_pause_enc_rsp:
+5cf3 da40000b arg ll_pause_enc_rsp ,regb 
+5cf4 20205ca8 branch le_send_ll_one_lenth 
+
+le_parse_feature_rsp:
+
+le_parse_unknown_rsp:
+
+le_parse_pause_enc_rsp:
+
+le_parse_reject_ind:
+
+le_parse_ping_rsp:
+5cf5 20600000 rtn 
+
+init_lmp:
+5cf6 20758000 rtn wake 
+
+init_lmp_work:
+5cf7 473e402f bpatchx patch2f_4 ,mem_patch2f 
+5cf8 58000000 setarg 0 
+5cf9 60008048 store 1 ,mem_lmp_to_send 
+5cfa 60008055 store 1 ,mem_conn_sm 
+5cfb 60008078 store 1 ,mem_lmo_opcode1 
+5cfc 6000807c store 1 ,mem_lmo_opcode2 
+5cfd 6000c158 store 1 ,mem_esco_addr 
+5cfe 600084d7 store 1 ,mem_auth_enable 
+5cff 6000816d store 1 ,mem_connection_options 
+5d00 600089b5 store 1 ,mem_pairing_auth 
+5d01 70455b00 jam switch_flag_init ,mem_switch_flag 
+5d02 70022900 jam 0 ,mem_switch_fail_master_count 
+5d03 7004d800 jam null_encryp ,mem_wait_encryption 
+
+init_lmp_reinit:
+5d04 7009b500 jam 0 ,mem_pairing_auth 
+5d05 7009b400 jam 0 ,mem_sp_localsm 
+5d06 7004d100 jam 0 ,mem_lmp_conn_state 
+
+parse_rx_done:
+5d07 20600000 rtn 
+
+parse_lmp:
+5d08 473ec02f bpatchx patch2f_5 ,mem_patch2f 
+5d09 2054e2ff call setlocalsm_master ,master 
+5d0a 2454e303 ncall setlocalsm_slave ,master 
+5d0b 204062bc call lmo_fifo_check 
+5d0c 247a0000 nrtn blank 
+5d0d 6800804c fetch 1 ,mem_state_map 
+5d0e c4030000 rtnbit0 smap_rxlmp 
+5d0f 793ffe06 set0 smap_rxlmp ,pdata 
+5d10 793f8001 set0 mark_rxbuf_inuse ,mark 
+5d11 6000804c store 1 ,mem_state_map 
+5d12 68008551 fetch 1 ,mem_rxbuf 
+5d13 6808804c fetcht 1 ,mem_state_map 
+5d14 2feffe00 isolate1 smap_lmptidinit ,pdata 
+5d15 79208401 setflag true ,smap_lmptid ,temp 
+5d16 6008804c storet 1 ,mem_state_map 
+5d17 18410402 and_into 0x2 ,temp 
+5d18 6008807f storet 1 ,mem_lmo_tid2 
+5d19 6808804c fetcht 1 ,mem_state_map 
+5d1a 1fe37e00 rshift pdata ,pdata 
+5d1b 6000807d store 1 ,mem_lmi_opcode2 
+5d1c 473f402f bpatchx patch2f_6 ,mem_patch2f 
+5d1d 6800807d fetch 1 ,mem_lmi_opcode2 
+5d1e c03fdd66 beq lmp_escape ,parse_lmp_escape 
+5d1f c001ddb1 beq lmp_accepted ,parse_lmp_accepted 
+5d20 c0025dc2 beq lmp_not_accepted ,parse_lmp_not_accepted 
+5d21 c01e5d59 beq lmp_set_afh ,parse_lmp_set_afh 
+5d22 c002dd55 beq lmp_clkoffset_req ,parse_lmp_clkoffset_req 
+5d23 c007dfa8 beq lmp_encryption_mode_req ,parse_lmp_encryption_mode_req 
+5d24 c0085e24 beq lmp_encryption_key_size_req ,parse_lmp_crypt_key 
+5d25 c011de42 beq lmp_auto_rate ,parse_lmp_auto_rate 
+5d26 c01cdfc1 beq lmp_test_control ,parse_lmp_test_control 
+5d27 c01c5fbc beq lmp_test_activate ,parse_lmp_test_activate 
+5d28 c018de27 beq lmp_setup_complete ,parse_lmp_setup_complete 
+5d29 c01bdeb0 beq lmp_supervision_timeout ,parse_lmp_supervision_timeout 
+5d2a c013deac beq lmp_features_req ,parse_lmp_features_req 
+5d2b c019dea9 beq lmp_host_connection_req ,parse_lmp_conn_req 
+5d2c c012deae beq lmp_version_req ,parse_lmp_version_req 
+5d2d c0135e3e beq lmp_version_res ,parse_lmp_version_res 
+5d2e c003de36 beq lmp_detach ,parse_lmp_detach 
+5d2f c016de2d beq lmp_max_slot ,parse_lmp_max_slot 
+5d30 c0175e2e beq lmp_max_slot_req ,parse_lmp_max_slot_req 
+5d31 c000dea5 beq lmp_name_req ,parse_lmp_name_req 
+5d32 c0015e90 beq lmp_name_res ,parse_lmp_name_res 
+5d33 c0145fb3 beq lmp_features_res ,parse_lmp_features_res 
+5d34 c004de86 beq lmp_comb_key ,parse_lmp_comb_key 
+5d35 c005de5f beq lmp_au_rand ,parse_lmp_au_rand 
+5d36 c0045e43 beq lmp_in_rand ,parse_lmp_in_rand 
+5d37 c0065e6a beq lmp_sres ,parse_lmp_sres 
+5d38 c00fde3a beq lmp_incr_power_req ,parse_lmp_incr_power 
+5d39 c0105e3c beq lmp_decr_power_req ,parse_lmp_decr_power 
+5d3a c010deca beq lmp_max_power ,parse_lmp_max_power 
+5d3b c0115eca beq lmp_min_power ,parse_lmp_min_power 
+5d3c c01adecb beq lmp_page_mode_req ,parse_lmp_page_mode_req 
+5d3d c01b5ecc beq lmp_page_scan_mode_req ,parse_lmp_page_scan_mode_req 
+5d3e c0125eca beq lmp_preferred_rate ,parse_lmp_preferred_rate 
+5d3f c01a5ecd beq lmp_slot_offset ,parse_lmp_slot_offset 
+5d40 c00bded6 beq lmp_sniff_req ,parse_lmp_sniff_req 
+5d41 c008def2 beq lmp_start_encryption_req ,parse_lmp_start_encryption_req 
+5d42 c0095ef6 beq lmp_stop_encryption_req ,parse_lmp_stop_encryption_req 
+5d43 c009def8 beq lmp_switch_req ,parse_lmp_switch_req 
+5d44 c006df0a beq lmp_temp_rand ,parse_lmp_temp_rand 
+5d45 c0075f0a beq lmp_temp_key ,parse_lmp_temp_key 
+5d46 c017deaa beq lmp_timing_accuracy_req ,parse_lmp_timing_accuracy_req 
+5d47 c0185f0a beq lmp_timing_accuracy_res ,parse_lmp_timing_accuracy_res 
+5d48 c0055f0a beq lmp_unit_key ,parse_lmp_unit_key 
+5d49 c00c5f0b beq lmp_unsniff_req ,parse_lmp_unsniff_req 
+5d4a c0195f0a beq lmp_use_semi_permanent_key ,parse_lmp_use_semi_permanend_key 
+5d4b c01edf10 beq lmp_encapsulated_header ,parse_lmp_encapsulated_header 
+5d4c c01f5f51 beq lmp_encapsulated_payload ,parse_lmp_encapsulated_payload 
+5d4d c01fdf4b beq lmp_simple_pairing_confirm ,parse_simple_pairing_confirm 
+5d4e c0205f78 beq lmp_simple_pairing_number ,parse_lmp_simple_pairing_number 
+5d4f c020df8a beq lmp_dhkey_check ,parse_dhkey_check 
+5d50 c0035fa7 beq lmp_clkoffset_res ,parse_lmp_clkoffset_res 
+5d51 c01d5d57 beq lmp_enc_key_size_mask_req ,parse_enc_key_size_mask_req 
+
+reject_unknown_packet:
+5d52 70007e19 jam unknown_lmp_pdu ,mem_lmo_reason2 
+
+reject_lmp_packet:
+5d53 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 
+5d54 20600000 rtn 
+
+parse_lmp_clkoffset_req:
+5d55 70007c06 jam lmp_clkoffset_res ,mem_lmo_opcode2 
+5d56 20600000 rtn 
+
+parse_enc_key_size_mask_req:
+5d57 70007c3b jam lmp_enc_key_size_mask_res ,mem_lmo_opcode2 
+5d58 20600000 rtn 
+
+parse_lmp_set_afh:
+5d59 68020552 fetch 4 ,mem_rxbuf + 1 
+5d5a 1fe3fe00 lshift pdata ,pdata 
+5d5b 600240d2 store 4 ,mem_afh_instant 
+5d5c 68008556 fetch 1 ,mem_rxbuf + 5 
+5d5d 6000c0d9 store 1 ,mem_afh_new_mod 
+5d5e 68028557 fetch 5 ,mem_rxbuf + 6 
+5d5f 6002c0e7 store 5 ,mem_afh_map_new 
+5d60 6802855c fetch 5 ,mem_rxbuf + 11 
+5d61 e0a28000 istore 5 ,contw 
+5d62 68008031 fetch 1 ,mem_mode 
+5d63 79207e03 set1 afh_change ,pdata 
+5d64 60008031 store 1 ,mem_mode 
+5d65 20600000 rtn 
+
+parse_lmp_escape:
+5d66 473fc02f bpatchx patch2f_7 ,mem_patch2f 
+5d67 68008552 fetch 1 ,mem_rxbuf + 1 
+5d68 79207e07 set1 7 ,pdata 
+5d69 6000807d store 1 ,mem_lmi_opcode2 
+5d6a c040dd88 beq lmp_ext_accepted ,parse_lmpext_accepted 
+5d6b c0415d8d beq lmp_not_accepted_ext ,parse_lmpext_not_accepted 
+5d6c c04adeb1 beq lmp_sniff_subrating_req ,parse_lmp_sniff_subrating_req 
+5d6d c04b5eca beq lmp_sniff_subrating_res ,parse_lmp_sniff_subrating_res 
+5d6e c045debf beq lmp_packet_type_table_req ,parse_lmpext_packet_type_table_req 
+5d6f c041dda5 beq lmp_ext_features_req ,parse_lmpext_features_req 
+5d70 c0425da7 beq lmp_ext_features_res ,parse_lmpext_features_res 
+5d71 c0485d7a beq lmp_ext_chn_classification_req ,parse_lmpext_chn_classification_req 
+5d72 c04bdd9e beq lmp_pause_encryption_req ,parse_lmpext_pause_encrypt 
+5d73 c04c5da3 beq lmp_resume_encryption_req ,parse_lmpext_resume_encrypt 
+5d74 c04cdd7d beq lmp_io_cap_req ,parse_lmpext_iocap_req 
+5d75 c04d5d80 beq lmp_io_cap_res ,parse_lmpext_iocap_res 
+5d76 c1420000 rtneq lmp_ext_features_res 
+
+reject_unknown_ext_packet:
+5d77 70007c82 jam lmp_not_accepted_ext ,mem_lmo_opcode2 
+5d78 70007e19 jam unknown_lmp_pdu ,mem_lmo_reason2 
+5d79 20600000 rtn 
+
+parse_lmpext_chn_classification_req:
+5d7a 70007c82 jam lmp_not_accepted_ext ,mem_lmo_opcode2 
+5d7b 70007e2e jam not_support_chn_classification ,mem_lmo_reason2 
+5d7c 20600000 rtn 
+
+parse_lmpext_iocap_req:
+5d7d 20405d82 call iocap_lmpext_load 
+5d7e 70007c9a jam lmp_io_cap_res ,mem_lmo_opcode2 
+5d7f 20600000 rtn 
+
+parse_lmpext_iocap_res:
+5d80 20405d82 call iocap_lmpext_load 
+5d81 20205d86 branch iocap_lmpext_common 
+
+iocap_lmpext_load:
+5d82 d8a0465e arg mem_sp_iocap_remote ,contw 
+5d83 68018553 fetch 3 ,mem_rxbuf + 2 
+5d84 e0a18000 istore 3 ,contw 
+5d85 20600000 rtn 
+
+iocap_lmpext_common:
+5d86 2020f6d8 branch master_set_mem_master_sp_flag ,true 
+5d87 20600000 rtn 
+
+parse_lmpext_accepted:
+5d88 68008554 fetch 1 ,mem_rxbuf + 3 
+5d89 79207e07 set1 7 ,pdata 
+5d8a 600084c9 store 1 ,mem_lmi_accepted_opcode 
+5d8b c045dd92 beq lmp_packet_type_table_req ,parse_lmpext_accepted_ptt 
+5d8c 20600000 rtn 
+
+parse_lmpext_not_accepted:
+5d8d 68008554 fetch 1 ,mem_rxbuf + 3 
+5d8e 79207e07 set1 7 ,pdata 
+5d8f 600084c9 store 1 ,mem_lmi_accepted_opcode 
+5d90 c045dd96 beq lmp_packet_type_table_req ,parse_lmpext_not_accepted_ptt 
+5d91 20600000 rtn 
+
+parse_lmpext_accepted_ptt:
+5d92 6800c15a fetch 1 ,mem_ptt 
+5d93 6808804c fetcht 1 ,mem_state_map 
+5d94 7d3a0405 nsetflag blank ,smap_edr ,temp 
+5d95 6008804c storet 1 ,mem_state_map 
+
+parse_lmpext_not_accepted_ptt:
+5d96 68008030 fetch 1 ,mem_state 
+5d97 c4028000 rtnbit0 state_init_seq 
+5d98 793ffe05 set0 state_init_seq ,pdata 
+5d99 60008030 store 1 ,mem_state 
+5d9a 680084d7 fetch 1 ,mem_auth_enable 
+5d9b 247a0000 nrtn blank 
+5d9c 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 
+5d9d 20600000 rtn 
+
+parse_lmpext_pause_encrypt:
+5d9e 2434dda1 nbranch parse_lmpext_pause_encrypt_slave ,master 
+5d9f 70007c12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 
+5da0 202062eb branch tid_reply 
+
+parse_lmpext_pause_encrypt_slave:
+5da1 70007c97 jam lmp_pause_encryption_req ,mem_lmo_opcode2 
+5da2 20600000 rtn 
+
+parse_lmpext_resume_encrypt:
+5da3 204062eb call tid_reply 
+5da4 20205ffe branch lmp_start_encryption 
+
+parse_lmpext_features_req:
+5da5 70007c84 jam lmp_ext_features_res ,mem_lmo_opcode2 
+5da6 20600000 rtn 
+
+parse_lmpext_features_res:
+5da7 68088555 fetcht 1 ,mem_rxbuf + 4 
+5da8 18410401 and temp ,0x1 ,temp 
+5da9 600884d0 storet 1 ,mem_remote_sppcap 
+5daa 6800c1ce fetch 1 ,mem_hci_cmd 
+5dab c0a8ddad bne hci_cmd_wait_remote_ext_feature ,parse_lmpext_features_res_not_hci 
+5dac 7041ce00 jam 0 ,mem_hci_cmd 
+
+parse_lmpext_features_res_not_hci:
+5dad 68008055 fetch 1 ,mem_conn_sm 
+5dae c18a8000 rtnne conn_sm_wait_features_ext 
+5daf 70005504 jam conn_sm_send_conn_req ,mem_conn_sm 
+5db0 2020631b branch process_conn_sm 
+
+parse_lmp_accepted:
+5db1 47404030 bpatchx patch30_0 ,mem_patch30 
+5db2 68008552 fetch 1 ,mem_rxbuf + 1 
+5db3 600084c9 store 1 ,mem_lmi_accepted_opcode 
+5db4 c019ddd8 beq lmp_host_connection_req ,parse_lmp_accepted_hostconn 
+5db5 c0045de7 beq lmp_in_rand ,parse_lmp_accepted_inrand 
+5db6 c007ddee beq lmp_encryption_mode_req ,parse_lmp_accepted_enc_mode 
+5db7 c0085df4 beq lmp_encryption_key_size_req ,parse_lmp_accepted_enc_keysize 
+5db8 c008ddf5 beq lmp_start_encryption_req ,parse_lmp_accepted_start_enc 
+5db9 c0095dfd beq lmp_stop_encryption_req ,parse_lmp_accepted_stop_enc 
+5dba c00c5e13 beq lmp_unsniff_req ,parse_lmp_accepted_unsniff_req 
+5dbb c00bde16 beq lmp_sniff_req ,parse_lmp_accepted_sniff_req 
+5dbc c009ddcf beq lmp_switch_req ,parse_lmp_accepted_switch 
+5dbd c01edf1e beq lmp_encapsulated_header ,parse_lmp_accepted_encapsulated_header 
+5dbe c01f5f6a beq lmp_encapsulated_payload ,parse_lmp_accepted_encapsulated_payload 
+5dbf c0205f20 beq lmp_simple_pairing_number ,parse_lmp_accepted_simple_pairing_number 
+5dc0 c020df3d beq lmp_dhkey_check ,parse_lmp_accepted_dhkey_check 
+5dc1 20600000 rtn 
+
+parse_lmp_not_accepted:
+5dc2 4740c030 bpatchx patch30_1 ,mem_patch30 
+5dc3 68008552 fetch 1 ,mem_rxbuf + 1 
+5dc4 600084c9 store 1 ,mem_lmi_accepted_opcode 
+5dc5 c000de0a beq lmp_name_req ,parse_lmp_not_accepted_name_req 
+5dc6 c019dde2 beq lmp_host_connection_req ,parse_lmp_not_accepted_hostconn 
+5dc7 c005ddfe beq lmp_au_rand ,parse_lmp_not_accepted_aurand 
+5dc8 c0045e01 beq lmp_in_rand ,parse_lmp_not_accepted_inrand 
+5dc9 c009ddd2 beq lmp_switch_req ,parse_lmp_not_accepted_switch 
+5dca c0205e0b beq lmp_simple_pairing_number ,parse_lmp_not_accepted_simple_pairing_number 
+5dcb c020de0e beq lmp_dhkey_check ,parse_lmp_not_accepted_dhkey_check 
+5dcc c00c5e11 beq lmp_unsniff_req ,parse_lmp_not_accepted_unsniff_req 
+5dcd c00bde22 beq lmp_sniff_req ,parse_lmp_not_acdcept_sniff_req 
+5dce 20600000 rtn 
+
+parse_lmp_accepted_switch:
+5dcf 700a9920 jam bt_evt_switch_accept ,mem_fifo_temp 
+5dd0 20407d86 call ui_ipc_send_event 
+5dd1 202021dc branch role_switch_prepare0 
+
+parse_lmp_not_accepted_switch:
+5dd2 700a9919 jam bt_evt_switch_not_accept ,mem_fifo_temp 
+5dd3 20407d86 call ui_ipc_send_event 
+5dd4 70455b02 jam switch_flag_not_accept ,mem_switch_flag 
+5dd5 58000050 setarg timer_switch_waite 
+5dd6 d8e00006 arg switch_wait_timer ,queue 
+5dd7 20207f08 branch timer_init 
+
+parse_lmp_accepted_hostconn:
+5dd8 680084d1 fetch 1 ,mem_lmp_conn_state 
+5dd9 79207e00 set1 received_conn_req ,pdata 
+5dda 600084d1 store 1 ,mem_lmp_conn_state 
+5ddb 700a9901 jam bt_evt_bb_connected ,mem_fifo_temp 
+5ddc 20407d86 call ui_ipc_send_event 
+5ddd 70007c8b jam lmp_packet_type_table_req ,mem_lmo_opcode2 
+
+parse_lmp_accepted_hostconn_ctn:
+5dde 68008055 fetch 1 ,mem_conn_sm 
+5ddf c082dd07 bne conn_sm_wait_conn_accept ,parse_rx_done 
+5de0 70005506 jam conn_sm_auth_pair ,mem_conn_sm 
+5de1 20600000 rtn 
+
+parse_lmp_not_accepted_hostconn:
+5de2 7004ca0b jam acl_connection_already_exists ,mem_disconn_reason_send 
+5de3 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+5de4 70005500 jam conn_sm_standby ,mem_conn_sm 
+5de5 2020dd07 branch parse_rx_done ,true 
+5de6 20600000 rtn 
+
+parse_lmp_accepted_inrand:
+5de7 6800c1bd fetch 1 ,mem_link_key_exists 
+5de8 247a0000 nrtn blank 
+5de9 2040244f call clear_linkkey 
+5dea 20405ffc call lmp_generate_key 
+5deb 20748000 rtn master 
+5dec 79200021 set1 mark_slave_in_rand_accepted ,mark 
+5ded 20600000 rtn 
+
+parse_lmp_accepted_enc_mode:
+5dee 24748000 nrtn master 
+5def 70007c10 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 
+5df0 6800804c fetch 1 ,mem_state_map 
+5df1 c4010000 rtnbit0 smap_encryption 
+5df2 70007c12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 
+5df3 20600000 rtn 
+
+parse_lmp_accepted_enc_keysize:
+5df4 20205ffe branch lmp_start_encryption 
+
+parse_lmp_accepted_start_enc:
+5df5 20406059 call send_create_conn_start_l2cap_timer_sm 
+5df6 68008030 fetch 1 ,mem_state 
+5df7 c3820000 rtnbit1 state_conn_comp 
+5df8 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 
+5df9 68008055 fetch 1 ,mem_conn_sm 
+5dfa c1850000 rtnne conn_sm_encrypt_wait 
+5dfb 7000550b jam conn_sm_encrypt_wait_clear ,mem_conn_sm 
+5dfc 20600000 rtn 
+
+parse_lmp_accepted_stop_enc:
+5dfd 20600000 rtn 
+
+parse_lmp_not_accepted_aurand:
+
+parse_lmp_not_accepted_aurand_send_detach:
+5dfe 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+5dff 7004ca13 jam other_end_terminated ,mem_disconn_reason_send 
+5e00 20600000 rtn 
+
+parse_lmp_not_accepted_inrand:
+5e01 68008553 fetch 1 ,mem_rxbuf + 2 
+5e02 c0035e07 beq key_missing ,parse_lmp_inrand_key_missing 
+5e03 c18c0000 rtnne pairing_not_allowed 
+5e04 7004ca18 jam pairing_not_allowed ,mem_disconn_reason_send 
+5e05 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+5e06 20600000 rtn 
+
+parse_lmp_inrand_key_missing:
+5e07 7004ca06 jam key_missing ,mem_disconn_reason_send 
+5e08 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+5e09 20600000 rtn 
+
+parse_lmp_not_accepted_name_req:
+5e0a 20600000 rtn 
+
+parse_lmp_not_accepted_simple_pairing_number:
+5e0b 7009ae00 jam sp_stat_null ,mem_sp_state 
+5e0c 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+5e0d 20205d07 branch parse_rx_done 
+
+parse_lmp_not_accepted_dhkey_check:
+5e0e 7009ae00 jam sp_stat_null ,mem_sp_state 
+5e0f 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+5e10 20205d07 branch parse_rx_done 
+
+parse_lmp_not_accepted_unsniff_req:
+5e11 700a9924 jam bt_evt_unsniff_not_accept ,mem_fifo_temp 
+5e12 20207d86 branch ui_ipc_send_event 
+
+parse_lmp_accepted_unsniff_req:
+5e13 700a9923 jam bt_evt_unsniff_accept ,mem_fifo_temp 
+5e14 20407d86 call ui_ipc_send_event 
+5e15 202026e9 branch sniff_exit 
+
+parse_lmp_accepted_sniff_req:
+5e16 700a9922 jam bt_evt_sniff_accept ,mem_fifo_temp 
+5e17 20407d86 call ui_ipc_send_event 
+5e18 58000000 setarg 0 
+5e19 60010075 store 2 ,mem_dsniff 
+5e1a 680141e3 fetch 2 ,mem_sniff_param_interval 
+5e1b 1fe3fe00 lshift pdata ,pdata 
+5e1c 60010032 store 2 ,mem_tsniff 
+5e1d 6800c1e5 fetch 1 ,mem_sniff_param_attempt 
+5e1e 60008073 store 1 ,mem_sniff_attempt 
+5e1f 6800c1e7 fetch 1 ,mem_sniff_param_timeout 
+5e20 60008074 store 1 ,mem_sniff_timeout 
+5e21 202026c6 branch sniff_init 
+
+parse_lmp_not_acdcept_sniff_req:
+5e22 700a9921 jam bt_evt_sniff_not_accept ,mem_fifo_temp 
+5e23 20207d86 branch ui_ipc_send_event 
+
+parse_lmp_crypt_key:
+5e24 68088552 fetcht 1 ,mem_rxbuf + 1 
+5e25 60088054 storet 1 ,mem_key_size 
+5e26 20205e38 branch accept_lmp_msg 
+
+parse_lmp_setup_complete:
+5e27 680084d1 fetch 1 ,mem_lmp_conn_state 
+5e28 79207e02 set1 received_setup_complete ,pdata 
+5e29 600084d1 store 1 ,mem_lmp_conn_state 
+5e2a c3818000 rtnbit1 sent_setup_complete 
+5e2b 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 
+5e2c 20205d07 branch parse_rx_done 
+
+parse_lmp_max_slot:
+5e2d 20600000 rtn 
+
+parse_lmp_max_slot_req:
+5e2e 6800c0d0 fetch 1 ,mem_max_slot 
+5e2f 68088552 fetcht 1 ,mem_rxbuf + 1 
+5e30 98467c00 isub temp ,null 
+5e31 20215e38 branch accept_lmp_msg ,positive 
+5e32 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 
+5e33 70007e1f jam unspecified_error ,mem_lmo_reason2 
+5e34 70007d2e jam lmp_max_slot_req ,mem_lmi_opcode2 
+5e35 20600000 rtn 
+
+parse_lmp_detach:
+5e36 20406157 call prepare_disconnect 
+5e37 20205e38 branch accept_lmp_msg 
+
+accept_lmp_msg:
+5e38 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+5e39 20600000 rtn 
+
+parse_lmp_incr_power:
+5e3a 70007c21 jam lmp_max_power ,mem_lmo_opcode2 
+5e3b 20600000 rtn 
+
+parse_lmp_decr_power:
+5e3c 70007c22 jam lmp_min_power ,mem_lmo_opcode2 
+5e3d 20600000 rtn 
+
+parse_lmp_version_res:
+5e3e 68008055 fetch 1 ,mem_conn_sm 
+5e3f c1098000 rtneq conn_sm_wait_version 
+5e40 70005502 jam conn_sm_send_features ,mem_conn_sm 
+5e41 20600000 rtn 
+
+parse_lmp_auto_rate:
+5e42 20600000 rtn 
+
+parse_lmp_in_rand:
+5e43 20405ff9 call lmp_copy_rand 
+5e44 7004d401 jam pincode_state_wait_pincode ,mem_pincode_state 
+5e45 700a990a jam bt_evt_pincode_req ,mem_fifo_temp 
+5e46 20407d86 call ui_ipc_send_event 
+5e47 204062f3 call tid_check 
+5e48 2420e001 nbranch lmp_accept_inrand ,true 
+5e49 2434de4e nbranch parse_lmp_inrand_res ,master 
+5e4a 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 
+5e4b 70007d08 jam lmp_in_rand ,mem_lmi_opcode2 
+5e4c 70007e23 jam transaction_collision ,mem_lmo_reason2 
+5e4d 20600000 rtn 
+
+parse_lmp_inrand_res:
+5e4e 6800804b fetch 1 ,mem_op 
+5e4f 79207e02 set1 op_inrand_req ,pdata 
+5e50 6000804b store 1 ,mem_op 
+5e51 20600000 rtn 
+
+pop_tid_follow:
+5e52 6808804c fetcht 1 ,mem_state_map 
+5e53 7d3a0401 nsetflag blank ,smap_lmptid ,temp 
+5e54 6008804c storet 1 ,mem_state_map 
+5e55 20600000 rtn 
+
+push_tid_follow:
+5e56 6800807f fetch 1 ,mem_lmo_tid2 
+5e57 1fe37e00 rshift pdata ,pdata 
+5e58 1fe17e01 and_into 1 ,pdata 
+5e59 20600000 rtn 
+
+parse_lmp_au_rand_moudle:
+5e5a 6800c217 fetch 1 ,mem_nv_data_number 
+5e5b 207a0000 rtn blank 
+5e5c 680089b5 fetch 1 ,mem_pairing_auth 
+5e5d 205a67b2 call load_device_list ,blank 
+5e5e 20600000 rtn 
+
+parse_lmp_au_rand:
+5e5f 20405e5a call parse_lmp_au_rand_moudle 
+5e60 20405e56 call push_tid_follow 
+5e61 600084d5 store 1 ,mem_sres_tid 
+5e62 20405ff9 call lmp_copy_rand 
+5e63 70007c0c jam lmp_sres ,mem_lmo_opcode2 
+5e64 6800c1bd fetch 1 ,mem_link_key_exists 
+5e65 247a0000 nrtn blank 
+5e66 68008030 fetch 1 ,mem_state 
+5e67 c3830000 rtnbit1 state_combkey 
+5e68 70007e06 jam key_missing ,mem_lmo_reason2 
+5e69 20205d53 branch reject_lmp_packet 
+
+parse_lmp_sres:
+5e6a da200040 arg mem_plap ,rega 
+5e6b 20407288 call function_e1 
+5e6c 68020552 fetch 4 ,mem_rxbuf + 1 
+5e6d 680a0592 fetcht 4 ,mem_input_store 
+5e6e 98467c00 isub temp ,null 
+5e6f 2022de73 branch authentication_ok ,zero 
+5e70 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+5e71 7004ca05 jam authentication_failure_error ,mem_disconn_reason_send 
+5e72 20600000 rtn 
+
+authentication_ok:
+5e73 20405e77 call authentication_ok_common 
+5e74 6800c65a fetch 1 ,mem_ssp_enable 
+5e75 203a5f3e branch pairing_success ,blank 
+5e76 20600000 rtn 
+
+authentication_ok_common:
+5e77 20407386 call copy_aco 
+5e78 204021b2 call linkkey_ready 
+5e79 6800804b fetch 1 ,mem_op 
+5e7a 2feffe01 isolate1 op_auth_req ,pdata 
+5e7b 793ffe01 set0 op_auth_req ,pdata 
+5e7c 6000804b store 1 ,mem_op 
+5e7d 68008055 fetch 1 ,mem_conn_sm 
+5e7e c00cde81 beq conn_sm_auth_wait ,authentication_ok_conn_sm 
+5e7f c00c5e81 beq conn_sm_pairing_wait ,authentication_ok_conn_sm 
+5e80 20600000 rtn 
+
+authentication_ok_conn_sm:
+5e81 680089b5 fetch 1 ,mem_pairing_auth 
+5e82 c1800000 rtnne defalt_pairing_auth 
+5e83 6800804c fetch 1 ,mem_state_map 
+5e84 c3810000 rtnbit1 smap_encryption 
+5e85 202063b1 branch host_create_conn_encrypt 
+
+parse_lmp_comb_key:
+5e86 da200552 arg mem_rxbuf + 1 ,rega 
+5e87 da400582 arg mem_kinit ,regb 
+5e88 d8a00562 arg mem_random_number ,contw 
+5e89 20407352 call xor16 
+5e8a da200040 arg mem_plap ,rega 
+5e8b 20406311 call generate_linkkey 
+5e8c 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 
+5e8d 68008030 fetch 1 ,mem_state 
+5e8e c3035ffc bbit0 state_combkey ,lmp_generate_key 
+5e8f 20600000 rtn 
+
+parse_lmp_name_res:
+5e90 6801015f fetch 2 ,mem_len 
+5e91 1fe0f3fd add pdata ,-3 ,loopcnt 
+5e92 68088552 fetcht 1 ,mem_rxbuf + 1 
+5e93 58000101 setarg mem_tmp_buffer 
+5e94 98408a00 iadd temp ,contw 
+5e95 d8c00554 arg mem_rxbuf + 3 ,contr 
+5e96 20407f01 call memcpy 
+5e97 68088053 fetcht 1 ,mem_name_offset 
+5e98 68008553 fetch 1 ,mem_rxbuf + 2 
+5e99 98467e00 isub temp ,pdata 
+5e9a 1fe67c0e sub pdata ,14 ,null 
+5e9b 20215ea0 branch parse_lmp_name_res_end ,positive 
+5e9c 1840fe0e add temp ,14 ,pdata 
+5e9d 60008053 store 1 ,mem_name_offset 
+5e9e 70007c01 jam lmp_name_req ,mem_lmo_opcode2 
+5e9f 20600000 rtn 
+
+parse_lmp_name_res_end:
+5ea0 6800804c fetch 1 ,mem_state_map 
+5ea1 79207e03 set1 smap_name_res ,pdata 
+5ea2 6000804c store 1 ,mem_state_map 
+5ea3 c2826006 bbit1 smap_name_req ,lmp_disconnect 
+5ea4 20600000 rtn 
+
+parse_lmp_name_req:
+5ea5 68008552 fetch 1 ,mem_rxbuf + 1 
+5ea6 6000807d store 1 ,mem_lmi_opcode2 
+5ea7 70007c02 jam lmp_name_res ,mem_lmo_opcode2 
+5ea8 20600000 rtn 
+
+parse_lmp_conn_req:
+5ea9 20205e38 branch accept_lmp_msg 
+
+parse_lmp_timing_accuracy_req:
+5eaa 70007c30 jam lmp_timing_accuracy_res ,mem_lmo_opcode2 
+5eab 20600000 rtn 
+
+parse_lmp_features_req:
+5eac 70007c28 jam lmp_features_res ,mem_lmo_opcode2 
+5ead 20600000 rtn 
+
+parse_lmp_version_req:
+5eae 70007c26 jam lmp_version_res ,mem_lmo_opcode2 
+5eaf 20600000 rtn 
+
+parse_lmp_supervision_timeout:
+5eb0 20600000 rtn 
+
+parse_lmp_sniff_subrating_req:
+5eb1 68010032 fetch 2 ,mem_tsniff 
+5eb2 98000400 iforce temp 
+5eb3 68008553 fetch 1 ,mem_rxbuf + 2 
+5eb4 60008095 store 1 ,mem_subsniff_rate 
+5eb5 984f8400 imul32 temp ,temp 
+5eb6 68010554 fetch 2 ,mem_rxbuf + 3 
+5eb7 1fe3fe00 lshift pdata ,pdata 
+5eb8 60010096 store 2 ,mem_subsniff_tcmax 
+5eb9 68020556 fetch 4 ,mem_rxbuf + 5 
+5eba 1fe3fe00 lshift pdata ,pdata 
+5ebb 60020091 store 4 ,mem_subsniff_instant 
+5ebc 18427e00 deposit temp 
+5ebd 60010098 store 2 ,mem_subsniff_tsniff 
+5ebe 20600000 rtn 
+
+parse_lmpext_packet_type_table_req:
+5ebf 6808c15a fetcht 1 ,mem_ptt 
+5ec0 68008553 fetch 1 ,mem_rxbuf + 2 
+5ec1 9842fc00 ixor temp ,null 
+5ec2 2422dd77 nbranch reject_unknown_ext_packet ,zero 
+5ec3 2feffe00 isolate1 0 ,pdata 
+5ec4 6800804c fetch 1 ,mem_state_map 
+5ec5 7920fe05 setflag true ,smap_edr ,pdata 
+5ec6 6000804c store 1 ,mem_state_map 
+5ec7 70007c81 jam lmp_ext_accepted ,mem_lmo_opcode2 
+5ec8 70007d8b jam lmp_packet_type_table_req ,mem_lmi_opcode2 
+5ec9 20600000 rtn 
+
+parse_lmp_sniff_subrating_res:
+
+parse_lmp_preferred_rate:
+
+parse_lmp_max_power:
+
+parse_lmp_min_power:
+5eca 20600000 rtn 
+
+parse_lmp_page_mode_req:
+5ecb 20205e38 branch accept_lmp_msg 
+
+parse_lmp_page_scan_mode_req:
+5ecc 20205e38 branch accept_lmp_msg 
+
+parse_lmp_slot_offset:
+5ecd 68010552 fetch 2 ,mem_rxbuf + 1 
+5ece 60010171 store 2 ,mem_slot_offset 
+5ecf 20600000 rtn 
+
+parse_lmp_sniff_req_check_sniff_para:
+5ed0 68010555 fetch 2 ,mem_rxbuf + 4 
+5ed1 6808c172 fetcht 1 ,mem_lpm_mult 
+5ed2 984ffe00 imul32 temp ,pdata 
+5ed3 d8400640 arg 0x640 ,temp 
+5ed4 98467c00 isub temp ,null 
+5ed5 20600000 rtn 
+
+parse_lmp_sniff_req:
+5ed6 68010557 fetch 2 ,mem_rxbuf + 6 
+5ed7 203a5ef0 branch lmp_reject_sniff ,blank 
+5ed8 20405ed0 call parse_lmp_sniff_req_check_sniff_para 
+5ed9 20215ef0 branch lmp_reject_sniff ,positive 
+5eda 6800c092 fetch 1 ,mem_device_option 
+5edb 1fe67c0a sub pdata ,dvc_op_module ,null 
+5edc 2042bcd5 call module_set_lpm_mult_2 ,zero 
+5edd 68008030 fetch 1 ,mem_state 
+5ede c280def0 bbit1 state_insniff ,lmp_reject_sniff 
+5edf 68010553 fetch 2 ,mem_rxbuf + 2 
+5ee0 1fe3fe00 lshift pdata ,pdata 
+5ee1 60010075 store 2 ,mem_dsniff 
+5ee2 68010555 fetch 2 ,mem_rxbuf + 4 
+5ee3 1fe3fe00 lshift pdata ,pdata 
+5ee4 60010032 store 2 ,mem_tsniff 
+5ee5 68010557 fetch 2 ,mem_rxbuf + 6 
+5ee6 60008073 store 1 ,mem_sniff_attempt 
+5ee7 98000400 iforce temp 
+5ee8 68010559 fetch 2 ,mem_rxbuf + 8 
+5ee9 60008074 store 1 ,mem_sniff_timeout 
+5eea 98467c00 isub temp ,null 
+5eeb 24215eed nbranch set_big_value_to_attempt ,positive 
+5eec 60008073 store 1 ,mem_sniff_attempt 
+
+set_big_value_to_attempt:
+5eed 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+5eee 70007d17 jam lmp_sniff_req ,mem_lmi_opcode2 
+5eef 20600000 rtn 
+
+lmp_reject_sniff:
+5ef0 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 
+5ef1 20205d53 branch reject_lmp_packet 
+
+parse_lmp_start_encryption_req:
+5ef2 20405e38 call accept_lmp_msg 
+5ef3 20405ff9 call lmp_copy_rand 
+5ef4 2040728b call function_e3 
+5ef5 202026b8 branch start_encryption 
+
+parse_lmp_stop_encryption_req:
+5ef6 20405e38 call accept_lmp_msg 
+5ef7 202026c0 branch stop_encryption 
+
+parse_lmp_switch_req:
+5ef8 68020552 fetch 4 ,mem_rxbuf + 1 
+5ef9 1fe3fe00 lshift pdata ,pdata 
+5efa 2034df04 branch parse_lmp_switch_accept ,master 
+5efb 6808c1bd fetcht 1 ,mem_link_key_exists 
+5efc 243a5f01 nbranch parse_lmp_switch_req_clear_mark ,blank 
+
+parse_lmp_switch_req_not_accept:
+5efd 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 
+5efe 70007d13 jam lmp_switch_req ,mem_lmi_opcode2 
+5eff 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 
+5f00 20600000 rtn 
+
+parse_lmp_switch_req_clear_mark:
+5f01 70007c34 jam lmp_slot_offset ,mem_lmo_opcode2 
+5f02 70005500 jam 0 ,mem_conn_sm 
+5f03 202021d9 branch role_switch_prepare 
+
+parse_lmp_switch_accept:
+5f04 204021d9 call role_switch_prepare 
+5f05 79200022 set1 mark_reconn_recieve_switch ,mark 
+5f06 6800816d fetch 1 ,mem_connection_options 
+5f07 793ffe02 set0 connection_switch ,pdata 
+5f08 6000816d store 1 ,mem_connection_options 
+5f09 20205e38 branch accept_lmp_msg 
+
+parse_lmp_temp_rand:
+
+parse_lmp_temp_key:
+
+parse_lmp_timing_accuracy_res:
+
+parse_lmp_unit_key:
+
+parse_lmp_use_semi_permanend_key:
+5f0a 20600000 rtn 
+
+parse_lmp_unsniff_req:
+5f0b 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+5f0c 70007d18 jam lmp_unsniff_req ,mem_lmi_opcode2 
+5f0d 700a992e jam bt_evt_remote_unsniff ,mem_fifo_temp 
+5f0e 20407d86 call ui_ipc_send_event 
+5f0f 202026e9 branch sniff_exit 
+
+parse_lmp_encapsulated_header:
+5f10 68008552 fetch 1 ,mem_rxbuf + 1 
+5f11 c080df1c bne encapsulated_major_type_p192 ,parse_lmp_encapsulated_header_reject 
+5f12 68008553 fetch 1 ,mem_rxbuf + 2 
+5f13 c080df1c bne encapsulated_minor_type_p192 ,parse_lmp_encapsulated_header_reject 
+5f14 68008554 fetch 1 ,mem_rxbuf + 3 
+5f15 c0985f1c bne encapsulated_len_p192 ,parse_lmp_encapsulated_header_reject 
+5f16 204062fc call check_localsm 
+5f17 2020df19 branch parse_lmp_encapsulated_header_master ,true 
+5f18 7009ae01 jam sp_stat_key_recv ,mem_sp_state 
+
+parse_lmp_encapsulated_header_master:
+5f19 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+5f1a 70007d3d jam lmp_encapsulated_header ,mem_lmi_opcode2 
+5f1b 20205d07 branch parse_rx_done 
+
+parse_lmp_encapsulated_header_reject:
+5f1c 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 
+5f1d 20205d53 branch reject_lmp_packet 
+
+parse_lmp_accepted_encapsulated_header:
+5f1e 70007c3e jam lmp_encapsulated_payload ,mem_lmo_opcode2 
+5f1f 20600000 rtn 
+
+parse_lmp_accepted_simple_pairing_number:
+5f20 6800c662 fetch 1 ,mem_ssp_mode_flag 
+5f21 c000df27 beq ssp_mode_ssp_pin_flag ,parse_lmp_accepted_simple_pairing_number_ssp_pin 
+5f22 c0015f2b beq ssp_mode_passkey_entry_flag ,parse_lmp_accepted_simple_pairing_number_passkey 
+
+parse_lmp_accepted_simple_pairing_number_common:
+5f23 204062fc call check_localsm 
+5f24 20608000 rtn true 
+5f25 7009ae08 jam sp_stat_confirm_recv ,mem_sp_state 
+5f26 20600000 rtn 
+
+parse_lmp_accepted_simple_pairing_number_ssp_pin:
+5f27 20407962 call g_noninit_number_confirm 
+5f28 700a9935 jam bt_evt_bt_gkey_generate ,mem_fifo_temp 
+5f29 20407d86 call ui_ipc_send_event 
+5f2a 20205f23 branch parse_lmp_accepted_simple_pairing_number_common 
+
+parse_lmp_accepted_simple_pairing_number_passkey:
+5f2b 204062fc call check_localsm 
+5f2c 20608000 rtn true 
+5f2d 6800c663 fetch 1 ,mem_authentication_passkey_times 
+5f2e c009df3b beq 19 ,authentication_passkey_end 
+5f2f 1fe0fe01 increase 1 ,pdata 
+5f30 6000c663 store 1 ,mem_authentication_passkey_times 
+
+authentication_passkey:
+5f31 7009b001 jam sp_flag_commit ,mem_sp_flag 
+5f32 7009ae04 jam sp_stat_commit_calc ,mem_sp_state 
+5f33 6800c663 fetch 1 ,mem_authentication_passkey_times 
+5f34 1fe20e00 copy pdata ,queue 
+5f35 6803468a fetch 6 ,mem_pin 
+5f36 afefffff qisolate1 pdata 
+5f37 58000080 setarg 0x80 
+5f38 7920fe00 setflag true ,0 ,pdata 
+5f39 6000c664 store 1 ,mem_passkey_1bit 
+5f3a 20600000 rtn 
+
+authentication_passkey_end:
+5f3b 7009ae08 jam sp_stat_confirm_recv ,mem_sp_state 
+5f3c 20600000 rtn 
+
+parse_lmp_accepted_dhkey_check:
+5f3d 20405f43 call parse_lmp_accepted_dhkey_check_common 
+
+pairing_success:
+5f3e 6800c665 fetch 1 ,mem_flag_pairing_state 
+5f3f 207a0000 rtn blank 
+5f40 70466500 jam flag_pairing_state_not_pairing ,mem_flag_pairing_state 
+5f41 700a9938 jam bt_evt_bt_pairing_success ,mem_fifo_temp 
+5f42 20207d86 branch ui_ipc_send_event 
+
+parse_lmp_accepted_dhkey_check_common:
+5f43 204062fc call check_localsm 
+5f44 2440f965 ncall g_noninit ,true 
+5f45 2040f975 call g_init ,true 
+5f46 204062fc call check_localsm 
+5f47 20608000 rtn true 
+5f48 7009ae0c jam sp_stat_link_key_calc ,mem_sp_state 
+5f49 7009b001 jam sp_flag_commit ,mem_sp_flag 
+5f4a 20600000 rtn 
+
+parse_simple_pairing_confirm:
+5f4b d8a00a6e arg mem_sp_confirm_remote ,contw 
+5f4c d8c00552 arg mem_rxbuf + 1 ,contr 
+5f4d 20407ebf call memcpy16 
+5f4e 6800c662 fetch 1 ,mem_ssp_mode_flag 
+5f4f c1010000 rtneq ssp_mode_passkey_entry_flag 
+5f50 202076d8 branch master_set_mem_master_sp_flag 
+
+parse_lmp_encapsulated_payload:
+5f51 680089af fetch 1 ,mem_master_sp_state 
+5f52 c003df55 beq sp_stat_random_send ,parse_encapsulated_payload_master 
+5f53 680089ae fetch 1 ,mem_sp_state 
+5f54 c080df68 bne sp_stat_key_recv ,parse_lmp_encapsulated_payload_reject 
+
+parse_encapsulated_payload_master:
+5f55 680089b7 fetch 1 ,mem_sp_remote_key_recv_count 
+5f56 1fe60a20 sub pdata ,0x20 ,contw 
+5f57 24215f68 nbranch parse_lmp_encapsulated_payload_reject ,positive 
+5f58 d8a009c6 arg mem_sp_pubkey_remote ,contw 
+5f59 98a08a00 iadd contw ,contw 
+5f5a 68040552 fetch 8 ,mem_rxbuf + 1 
+5f5b e0a40000 istore 8 ,contw 
+5f5c 6804055a fetch 8 ,mem_rxbuf + 9 
+5f5d e0a40000 istore 8 ,contw 
+5f5e 680089b7 fetch 1 ,mem_sp_remote_key_recv_count 
+5f5f 1fe0fe10 increase 16 ,pdata 
+5f60 600089b7 store 1 ,mem_sp_remote_key_recv_count 
+5f61 c0985e38 bne encapsulated_len_p192 ,accept_lmp_msg 
+
+parse_lmp_encapsulated_payload_completed:
+5f62 204062fc call check_localsm 
+5f63 2020de38 branch accept_lmp_msg ,true 
+5f64 7009b801 jam sp_key_valid ,mem_sp_remote_key_invalid 
+5f65 7009ae02 jam sp_stat_key_generate ,mem_sp_state 
+5f66 7009b001 jam sp_flag_commit ,mem_sp_flag 
+5f67 20205e38 branch accept_lmp_msg 
+
+parse_lmp_encapsulated_payload_reject:
+5f68 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 
+5f69 20205d53 branch reject_lmp_packet 
+
+parse_lmp_accepted_encapsulated_payload:
+5f6a 680089b6 fetch 1 ,mem_sp_local_key_send_count 
+5f6b c0185f6e beq encapsulated_len_p192 ,parse_lmp_encapsulated_payload_all_accepted 
+5f6c 70007c3e jam lmp_encapsulated_payload ,mem_lmo_opcode2 
+5f6d 20205d07 branch parse_rx_done 
+
+parse_lmp_encapsulated_payload_all_accepted:
+5f6e 204062fc call check_localsm 
+5f6f 2020df77 branch parse_lmp_encapsulated_payload_all_accepted_master ,true 
+5f70 6800c662 fetch 1 ,mem_ssp_mode_flag 
+5f71 c0015f75 beq ssp_mode_passkey_entry_flag ,parse_lmp_encapsulated_payload_all_accepted_get_passkey 
+5f72 7009b001 jam sp_flag_commit ,mem_sp_flag 
+5f73 7009ae04 jam sp_stat_commit_calc ,mem_sp_state 
+5f74 20205d07 branch parse_rx_done 
+
+parse_lmp_encapsulated_payload_all_accepted_get_passkey:
+5f75 700a9936 jam bt_evt_bt_get_passkey ,mem_fifo_temp 
+5f76 20207d86 branch ui_ipc_send_event 
+
+parse_lmp_encapsulated_payload_all_accepted_master:
+5f77 20205d07 branch parse_rx_done 
+
+parse_lmp_simple_pairing_number:
+5f78 680089af fetch 1 ,mem_master_sp_state 
+5f79 c003df7c beq sp_stat_random_send ,parse_lmp_simple_pairing_number_master 
+5f7a 680089ae fetch 1 ,mem_sp_state 
+5f7b c0835f88 bne sp_stat_random_recv ,parse_lmp_simple_pairing_number_reject 
+
+parse_lmp_simple_pairing_number_master:
+5f7c d8a00a2e arg mem_sp_random_remote ,contw 
+5f7d 68040552 fetch 8 ,mem_rxbuf + 1 
+5f7e e0a40000 istore 8 ,contw 
+5f7f 6804055a fetch 8 ,mem_rxbuf + 9 
+5f80 e0a40000 istore 8 ,contw 
+5f81 204062fc call check_localsm 
+5f82 2020df86 branch parse_lmp_simple_pairing_number_master0 ,true 
+5f83 7009ae07 jam sp_stat_random_send ,mem_sp_state 
+5f84 7009b001 jam sp_flag_commit ,mem_sp_flag 
+5f85 20205e38 branch accept_lmp_msg 
+
+parse_lmp_simple_pairing_number_master0:
+5f86 7009af04 jam sp_stat_commit_calc ,mem_master_sp_state 
+5f87 202076d8 branch master_set_mem_master_sp_flag 
+
+parse_lmp_simple_pairing_number_reject:
+5f88 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 
+5f89 20205d53 branch reject_lmp_packet 
+
+parse_dhkey_check:
+5f8a 680089af fetch 1 ,mem_master_sp_state 
+5f8b c005df8e beq sp_stat_confirm_send ,parse_dhkey_check_master 
+5f8c 680089ae fetch 1 ,mem_sp_state 
+5f8d c0845f9d bne sp_stat_confirm_recv ,parse_lmp_dhkey_check_reject 
+
+parse_dhkey_check_master:
+5f8e d8a00a5e arg mem_sp_check_result ,contw 
+5f8f d8c00552 arg mem_rxbuf + 1 ,contr 
+5f90 20407ebf call memcpy16 
+5f91 204062fc call check_localsm 
+5f92 2020df9a branch parse_dhkey_check_master0 ,true 
+5f93 6800c662 fetch 1 ,mem_ssp_mode_flag 
+5f94 c000df9f beq ssp_mode_ssp_pin_flag ,number_comparison_mode 
+
+number_comparison_successed:
+5f95 70466100 jam 0 ,mem_flag_mode_ssp_pin 
+5f96 7009ae09 jam sp_stat_confirm_check ,mem_sp_state 
+5f97 7009b001 jam sp_flag_commit ,mem_sp_flag 
+5f98 70007d41 jam lmp_dhkey_check ,mem_lmi_opcode2 
+5f99 20205d07 branch parse_rx_done 
+
+parse_dhkey_check_master0:
+5f9a 7009af09 jam sp_stat_confirm_check ,mem_master_sp_state 
+5f9b 7009b101 jam sp_flag_commit ,mem_master_sp_flag 
+5f9c 20205d07 branch parse_rx_done 
+
+parse_lmp_dhkey_check_reject:
+5f9d 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 
+5f9e 20205d53 branch reject_lmp_packet 
+
+number_comparison_mode:
+5f9f 6800c661 fetch 1 ,mem_flag_mode_ssp_pin 
+5fa0 c283dfa4 bbit1 flag_mode_ssp_pin_reviceve_comparison_bit ,comparison_result 
+5fa1 79207e06 set1 flag_mode_ssp_pin_recieve_dhkey_bit ,pdata 
+5fa2 6000c661 store 1 ,mem_flag_mode_ssp_pin 
+5fa3 20600000 rtn 
+
+comparison_result:
+5fa4 c2805f95 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed 
+5fa5 70466100 jam 0 ,mem_flag_mode_ssp_pin 
+5fa6 20205f9d branch parse_lmp_dhkey_check_reject 
+
+parse_lmp_clkoffset_res:
+5fa7 20205d07 branch parse_rx_done 
+
+parse_lmp_encryption_mode_req:
+5fa8 6800816d fetch 1 ,mem_connection_options 
+5fa9 793ffe01 set0 connection_encrypt 
+5faa 6000816d store 1 ,mem_connection_options 
+5fab 20405e38 call accept_lmp_msg 
+5fac 24748000 nrtn master 
+5fad 68008552 fetch 1 ,mem_rxbuf + 1 
+5fae 6808804b fetcht 1 ,mem_op 
+5faf 793a0404 setflag blank ,op_stop_enc ,temp 
+5fb0 7d3a0405 nsetflag blank ,op_start_enc ,temp 
+5fb1 6008804b storet 1 ,mem_op 
+5fb2 20600000 rtn 
+
+parse_lmp_features_res:
+5fb3 680c0552 fetcht 8 ,mem_rxbuf + 1 
+
+parse_lmp_features_res_not_hci:
+5fb4 68008055 fetch 1 ,mem_conn_sm 
+5fb5 c1818000 rtnne conn_sm_wait_features_res 
+5fb6 6800816d fetch 1 ,mem_connection_options 
+5fb7 c3025fba bbit0 connection_feature_ext ,parse_lmp_send_conn 
+5fb8 70005514 jam conn_sm_send_features_ext ,mem_conn_sm 
+5fb9 20600000 rtn 
+
+parse_lmp_send_conn:
+5fba 70005504 jam conn_sm_send_conn_req ,mem_conn_sm 
+5fbb 20600000 rtn 
+
+parse_lmp_test_activate:
+5fbc 6800817f fetch 1 ,mem_debug_config 
+5fbd 6000815b store 1 ,mem_test_mode_old_debug_config 
+5fbe 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+5fbf 70007d38 jam lmp_test_activate ,mem_lmi_opcode2 
+5fc0 20600000 rtn 
+
+parse_lmp_test_control:
+5fc1 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+5fc2 70007d39 jam lmp_test_control ,mem_lmi_opcode2 
+5fc3 18007209 force 9 ,loopcnt 
+5fc4 d8c00552 arg mem_rxbuf + 1 ,contr 
+5fc5 d8a00152 arg mem_temp_payload ,contw 
+
+parse_lmp_test_xor:
+5fc6 e8c08000 ifetch 1 ,contr 
+5fc7 1fe2fe55 xor_into 0x55 ,pdata 
+5fc8 e0a08000 istore 1 ,contw 
+5fc9 c2005fc6 loop parse_lmp_test_xor 
+5fca 68008152 fetch 1 ,test_mode_scenario 
+5fcb 68088151 fetcht 1 ,mem_tester_emulate 
+5fcc 793f8407 set0 tester_no_whitening ,temp 
+5fcd 793f8404 set0 tester_pattern_test ,temp 
+5fce c07fdfda beq exit_test_mode ,parse_lmp_test_control_exit 
+5fcf c0005ff3 beq pause_test_mode ,parse_lmp_test_control_pause 
+5fd0 c002dfe7 beq closed_loop_back_acl ,parse_lmp_test_control_loopback 
+5fd1 c003dfe6 beq acl_without_whitening ,parse_lmp_test_control_loopback_nowhite 
+5fd2 c0035fe7 beq closed_loop_back_sco ,parse_lmp_test_control_loopback 
+5fd3 c0045fe6 beq sco_without_whitening ,parse_lmp_test_control_loopback_nowhite 
+5fd4 c000dfdf beq zero_pattern ,parse_lmp_test_control_pattern 
+5fd5 c0015fdf beq one_pattern ,parse_lmp_test_control_pattern 
+5fd6 c001dfdf beq alt_pattern ,parse_lmp_test_control_pattern 
+5fd7 c004dfdf beq alt2_pattern ,parse_lmp_test_control_pattern 
+5fd8 c0025fdf beq pseudorandom ,parse_lmp_test_control_pattern 
+5fd9 20600000 rtn 
+
+parse_lmp_test_control_exit:
+5fda 68008151 fetch 1 ,mem_tester_emulate 
+5fdb 79207e03 set1 tester_exit ,pdata 
+5fdc 79207e02 set1 tester_change ,pdata 
+5fdd 60008151 store 1 ,mem_tester_emulate 
+5fde 20600000 rtn 
+
+parse_lmp_test_control_pattern:
+5fdf 79200404 set1 tester_pattern_test ,temp 
+5fe0 70018005 jam 5 ,mem_lch_code 
+5fe1 68010159 fetch 2 ,test_mode_data_length 
+5fe2 98007200 iforce loopcnt 
+5fe3 6001015f store 2 ,mem_len 
+5fe4 d8a00551 arg mem_rxbuf ,contw 
+5fe5 20407f73 call pn9 
+
+parse_lmp_test_control_loopback_nowhite:
+5fe6 79200407 set1 tester_no_whitening ,temp 
+
+parse_lmp_test_control_loopback:
+5fe7 79200402 set1 tester_change ,temp 
+5fe8 18007e00 force 0 ,pdata 
+5fe9 6000800b store 1 ,mem_slave_rcvcnt 
+5fea 600100fa store 2 ,mem_tst_pktcnt_crc 
+5feb 600100fc store 2 ,mem_tst_pktcnt_dmh 
+5fec 600100f8 store 2 ,mem_tst_pktcnt_hec 
+5fed 600100f6 store 2 ,mem_tst_pktcnt_sync 
+5fee 68008153 fetch 1 ,test_mode_hopping_mode 
+5fef 2fe1fe00 compare fixed_freq ,pdata ,0xff 
+5ff0 79208406 setflag true ,tester_fixed_freq ,temp 
+5ff1 60088151 storet 1 ,mem_tester_emulate 
+5ff2 20600000 rtn 
+
+parse_lmp_test_control_pause:
+5ff3 793f8011 set0 mark_testmode ,mark 
+5ff4 70015100 jam 0 ,mem_tester_emulate 
+5ff5 6800817f fetch 1 ,mem_debug_config 
+5ff6 793ffe06 set0 debug_tx_pattern ,pdata 
+5ff7 6000817f store 1 ,mem_debug_config 
+5ff8 20600000 rtn 
+
+lmp_copy_rand:
+5ff9 d8c00552 arg mem_rxbuf + 1 ,contr 
+5ffa d8a00562 arg mem_random_number ,contw 
+5ffb 20207ebf branch memcpy16 
+
+lmp_generate_key:
+5ffc 70007c09 jam lmp_comb_key ,mem_lmo_opcode2 
+5ffd 20600000 rtn 
+
+lmp_start_encryption:
+5ffe 24748000 nrtn master 
+5fff 70007c11 jam lmp_start_encryption_req ,mem_lmo_opcode2 
+6000 20600000 rtn 
+
+lmp_accept_inrand:
+6001 da2040a0 arg mem_lap ,rega 
+6002 20407255 call generate_kinit 
+6003 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+6004 70007d08 jam lmp_in_rand ,mem_lmi_opcode2 
+6005 20600000 rtn 
+
+lmp_disconnect:
+6006 7000720a jam 10 ,mem_conn_timer 
+6007 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+6008 7004ca16 jam local_host ,mem_disconn_reason_send 
+6009 20600000 rtn 
+
+send_lmp:
+600a 47414030 bpatchx patch30_2 ,mem_patch30 
+600b 78547c00 disable user 
+600c 204062c1 call lmo_fifo_process 
+600d 68008048 fetch 1 ,mem_lmp_to_send 
+600e 207a0000 rtn blank 
+600f c283e03f bbit1 7 ,send_lmp_escape 
+
+send_lmp0:
+6010 c000e16f beq lmp_name_req ,send_lmp_name_req 
+6011 c00160e4 beq lmp_name_res ,send_lmp_name_res 
+6012 c001e04a beq lmp_accepted ,send_lmp_accepted 
+6013 c0026060 beq lmp_not_accepted ,send_lmp_not_accepted 
+6014 c013e1db beq lmp_features_req ,send_lmp_features_req 
+6015 c0146108 beq lmp_features_res ,send_lmp_features_res 
+6016 c01860f4 beq lmp_timing_accuracy_res ,send_lmp_timing_accuracy_res 
+6017 c012e1d6 beq lmp_version_req ,send_lmp_version_req 
+6018 c0136103 beq lmp_version_res ,send_lmp_version_res 
+6019 c018e1c3 beq lmp_setup_complete ,send_lmp_setup_complete 
+601a c01be16a beq lmp_supervision_timeout ,send_lmp_superto 
+601b c019e15c beq lmp_host_connection_req ,send_lmp_no_payload 
+601c c0046259 beq lmp_in_rand ,send_lmp_inrand 
+601d c004e24f beq lmp_comb_key ,send_lmp_comb_key 
+601e c005e264 beq lmp_au_rand ,send_lmp_aurand 
+601f c006626d beq lmp_sres ,send_lmp_sres 
+6020 c007e162 beq lmp_encryption_mode_req ,send_lmp_encryption_mode_req 
+6021 c0086292 beq lmp_encryption_key_size_req ,send_lmp_encryption_key_size_req 
+6022 c008e288 beq lmp_start_encryption_req ,send_lmp_start_encryption 
+6023 c003e152 beq lmp_detach ,send_lmp_detach 
+6024 c015617e beq lmp_quality_of_service_req ,send_lmp_quality_of_service_req 
+6025 c005617f beq lmp_unit_key ,send_lmp_unit_key 
+6026 c00fe1bc beq lmp_incr_power_req ,send_lmp_inc_power 
+6027 c00360f9 beq lmp_clkoffset_res ,send_lmp_clkoffset_res 
+6028 c010e15f beq lmp_max_power ,send_lmp_nopayload_reply 
+6029 c016e1b2 beq lmp_max_slot ,send_lmp_max_slot 
+602a c01761b7 beq lmp_max_slot_req ,send_lmp_max_slot_req 
+602b c011615f beq lmp_min_power ,send_lmp_nopayload_reply 
+602c c01a6180 beq lmp_slot_offset ,send_lmp_slot_offset 
+602d c009e195 beq lmp_switch_req ,send_lmp_switch_req 
+602e c00be1a4 beq lmp_sniff_req ,send_lmp_sniff_req 
+602f c009628f beq lmp_stop_encryption_req ,send_lmp_stop_encryption_req 
+6030 c017e1aa beq lmp_timing_accuracy_req ,send_lmp_timing_accuracy_req 
+6031 c00c61af beq lmp_unsniff_req ,send_lmp_unsniff_req 
+6032 c01ee1ff beq lmp_encapsulated_header ,send_lmp_encapsulated_header 
+6033 c01f620b beq lmp_encapsulated_payload ,send_lmp_encapsulated_payload 
+6034 c01fe21d beq lmp_simple_pairing_confirm ,send_lmp_simple_pairing_comfirm 
+6035 c0206227 beq lmp_simple_pairing_number ,send_lmp_simple_pairing_number 
+6036 c020e23c beq lmp_dhkey_check ,send_lmp_dhkey_check 
+6037 c011e24b beq lmp_auto_rate ,send_lmp_auto_rate 
+6038 c01de246 beq lmp_enc_key_size_mask_res ,send_lmp_enc_key_size_mask_res 
+6039 c002e24c beq lmp_clkoffset_req ,send_lmp_clkoffset_req 
+603a c014e24d beq lmp_quality_of_service ,send_lmp_quality_of_service 
+603b c01c624e beq lmp_test_activate ,send_lmp_test_activate 
+603c c01ce175 beq lmp_test_control ,send_lmp_test_control 
+
+send_lmp_error:
+603d 20202a8c branch assert 
+603e 20600000 rtn 
+
+send_lmp_escape:
+603f c040e06d beq lmp_ext_accepted ,send_lmpext_accepted 
+6040 c0426099 beq lmp_ext_features_res ,send_lmpext_features_res 
+6041 c0416076 beq lmp_not_accepted_ext ,send_lmpext_not_accepted 
+6042 c041e10d beq lmp_ext_features_req ,send_lmpext_features_req 
+6043 c045e118 beq lmp_packet_type_table_req ,send_lmpext_packet_type_table_req 
+6044 c04be14e beq lmp_pause_encryption_req ,send_lmpext_pause_encryption_req 
+6045 c04ce0d5 beq lmp_io_cap_req ,send_lmp_io_cap_req 
+6046 c04d60a4 beq lmp_io_cap_res ,send_lmpext_io_cap_res 
+6047 c04ae0da beq lmp_sniff_subrating_req ,send_lmpext_sniff_subrating_req 
+6048 c04b60db beq lmp_sniff_subrating_res ,send_lmpext_sniff_subrating_res 
+6049 20202a8c branch assert 
+
+send_lmp_accepted:
+604a 18007e02 force 2 ,pdata 
+604b 20406298 call msg_send_lmp 
+604c 68008049 fetch 1 ,mem_lmi_opcode 
+604d e0a08000 istore 1 ,contw 
+604e 204062a7 call send_lmp_follow 
+604f 4741c030 bpatchx patch30_3 ,mem_patch30 
+6050 68008049 fetch 1 ,mem_lmi_opcode 
+6051 c0046080 beq lmp_in_rand ,send_lmp_accepted_inrand 
+6052 c007e084 beq lmp_encryption_mode_req ,send_lmp_accepted_enc_mode 
+6053 c008608f beq lmp_encryption_key_size_req ,send_lmp_accepted_enc_key 
+6054 c00be05f beq lmp_sniff_req ,send_lmp_accept_sniff_req 
+6055 c019e092 beq lmp_host_connection_req ,send_lmp_accepted_connection 
+6056 c020e098 beq lmp_dhkey_check ,send_lmp_accept_dhkey_check 
+6057 c008e059 beq lmp_start_encryption_req ,send_create_conn_start_l2cap_timer_sm 
+6058 20600000 rtn 
+
+send_create_conn_start_l2cap_timer_sm:
+6059 68008055 fetch 1 ,mem_conn_sm 
+605a 207a0000 rtn blank 
+605b 7000551b jam conn_sm_wait_done ,mem_conn_sm 
+605c 5800000c setarg timer_enpt_waite 
+605d d8e00007 arg enpt_delay_timer ,queue 
+605e 20207f08 branch timer_init 
+
+send_lmp_accept_sniff_req:
+605f 202026c6 branch sniff_init 
+
+send_lmp_not_accepted:
+6060 18007e03 force 3 ,pdata 
+6061 20406298 call msg_send_lmp 
+6062 68008049 fetch 1 ,mem_lmi_opcode 
+6063 c005e068 beq lmp_au_rand ,send_not_accept_aurand 
+6064 e0a08000 istore 1 ,contw 
+6065 6800804a fetch 1 ,mem_lmo_reason 
+6066 e0a08000 istore 1 ,contw 
+6067 202062a7 branch send_lmp_follow 
+
+send_not_accept_aurand:
+6068 e0a08000 istore 1 ,contw 
+6069 6800804a fetch 1 ,mem_lmo_reason 
+606a e0a08000 istore 1 ,contw 
+606b d84004d5 arg mem_sres_tid ,temp 
+606c 202062e2 branch special_tid_store 
+
+send_lmpext_accepted:
+606d 18000e04 force 4 ,queue 
+606e 204062a0 call send_lmpext 
+606f 5800007f setarg lmp_escape 
+6070 e0a08000 istore 1 ,contw 
+6071 68008049 fetch 1 ,mem_lmi_opcode 
+6072 793ffe07 set0 7 ,pdata 
+6073 e0a08000 istore 1 ,contw 
+6074 68008049 fetch 1 ,mem_lmi_opcode 
+6075 202062a7 branch send_lmp_follow 
+
+send_lmpext_not_accepted:
+6076 18000e05 force 5 ,queue 
+6077 204062a0 call send_lmpext 
+6078 5800007f setarg lmp_escape 
+6079 e0a08000 istore 1 ,contw 
+607a 68008049 fetch 1 ,mem_lmi_opcode 
+607b 793ffe07 set0 7 ,pdata 
+607c e0a08000 istore 1 ,contw 
+607d 6800804a fetch 1 ,mem_lmo_reason 
+607e e0a08000 istore 1 ,contw 
+607f 202062a7 branch send_lmp_follow 
+
+send_lmp_accepted_inrand:
+6080 2040244f call clear_linkkey 
+6081 204062f3 call tid_check 
+6082 20608000 rtn true 
+6083 20205ffc branch lmp_generate_key 
+
+send_lmp_accepted_enc_mode:
+6084 6800804b fetch 1 ,mem_op 
+6085 c282e08b bbit1 op_start_enc ,send_lmp_accepted_enc_start 
+6086 c4020000 rtnbit0 op_stop_enc 
+6087 70007c12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 
+6088 793ffe04 set0 op_stop_enc ,pdata 
+6089 204062eb call tid_reply 
+608a 2020608d branch send_lmp_accepted_enc_exit 
+
+send_lmp_accepted_enc_start:
+608b 70007c10 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 
+608c 793ffe05 set0 op_start_enc ,pdata 
+
+send_lmp_accepted_enc_exit:
+608d 6000804b store 1 ,mem_op 
+608e 20600000 rtn 
+
+send_lmp_accepted_enc_key:
+608f 204062fc call check_localsm 
+6090 2020dffe branch lmp_start_encryption ,true 
+6091 20600000 rtn 
+
+send_lmp_accepted_connection:
+6092 70007c8b jam lmp_packet_type_table_req ,mem_lmo_opcode2 
+6093 680084d1 fetch 1 ,mem_lmp_conn_state 
+6094 79207e00 set1 received_conn_req ,pdata 
+6095 600084d1 store 1 ,mem_lmp_conn_state 
+6096 700a9901 jam bt_evt_bb_connected ,mem_fifo_temp 
+6097 20207d86 branch ui_ipc_send_event 
+
+send_lmp_accept_dhkey_check:
+6098 20600000 rtn 
+
+send_lmpext_features_res:
+6099 18000e0c force 12 ,queue 
+609a 204062a0 call send_lmpext 
+609b 58000001 setarg 0x01 
+609c e0a08000 istore 1 ,contw 
+609d 680104ce fetch 2 ,mem_lmpext_ssp_enable 
+609e e0a10000 istore 2 ,contw 
+609f 58000000 setarg 0 
+60a0 e0a18000 istore 3 ,contw 
+60a1 58000000 setarg 0x00 
+60a2 e0a20000 istore 4 ,contw 
+60a3 202062b0 branch send_lmp_reply 
+
+send_lmpext_io_cap_res:
+60a4 18000e05 force 5 ,queue 
+60a5 204062a0 call send_lmpext 
+60a6 6801c65b fetch 3 ,mem_sp_iocap_local 
+60a7 e0a18000 istore 3 ,contw 
+60a8 204062b0 call send_lmp_reply 
+60a9 70466501 jam flag_pairing_state_pairing ,mem_flag_pairing_state 
+60aa 6800c65b fetch 1 ,mem_sp_iocap_local 
+60ab c000e0b5 beq display_yesno ,responder_iocap_display_yesno 
+60ac c00160af beq keyboard_only ,responder_iocap_keyboard_only 
+60ad c001e0bb beq no_input_no_output ,responder_iocap_no_input_no_output 
+60ae 20600000 rtn 
+
+responder_iocap_keyboard_only:
+60af 6800c65e fetch 1 ,mem_sp_iocap_remote 
+60b0 c00060c7 beq display_only ,responder_iocap_keyboard_only_initiator_iocap_display_only 
+60b1 c000e0c7 beq display_yesno ,responder_iocap_keyboard_only_initiator_iocap_display_yesno 
+60b2 c00160c7 beq keyboard_only ,responder_iocap_keyboard_only_initiator_iocap_keyboard_only 
+60b3 c001e0c1 beq no_input_no_output ,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output 
+60b4 20600000 rtn 
+
+responder_iocap_display_yesno:
+60b5 6800c65e fetch 1 ,mem_sp_iocap_remote 
+60b6 c00060c1 beq display_only ,responder_iocap_display_yesno_initiator_iocap_display_only 
+60b7 c000e0c5 beq display_yesno ,responder_iocap_display_yesno_initiator_iocap_display_yesno 
+60b8 c00160c7 beq keyboard_only ,responder_iocap_display_yesno_initiator_iocap_keyboard_only 
+60b9 c001e0c1 beq no_input_no_output ,responder_iocap_display_yesno_initiator_iocap_no_input_no_output 
+60ba 20600000 rtn 
+
+responder_iocap_no_input_no_output:
+60bb 6800c65e fetch 1 ,mem_sp_iocap_remote 
+60bc c00060c1 beq display_only ,responder_iocap_no_input_no_output_initiator_iocap_display_only 
+60bd c000e0c1 beq display_yesno ,responder_iocap_no_input_no_output_initiator_iocap_display_yesno 
+60be c00160c1 beq keyboard_only ,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only 
+60bf c001e0c1 beq no_input_no_output ,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output 
+60c0 20600000 rtn 
+
+responder_iocap_keyboard_only_initiator_iocap_no_input_no_output:
+
+responder_iocap_display_yesno_initiator_iocap_no_input_no_output:
+
+responder_iocap_display_yesno_initiator_iocap_display_only:
+
+responder_iocap_no_input_no_output_initiator_iocap_display_only:
+
+responder_iocap_no_input_no_output_initiator_iocap_display_yesno:
+
+responder_iocap_no_input_no_output_initiator_iocap_keyboard_only:
+
+responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output:
+
+set_ssp_mode_justwork:
+60c1 70466203 jam ssp_mode_just_work_flag ,mem_ssp_mode_flag 
+60c2 6800c55c fetch 1 ,mem_classic_bt_flag 
+60c3 c28033e9 bbit1 flag_ssp_reject_justwork ,app_bt_disconnect 
+60c4 20600000 rtn 
+
+responder_iocap_display_yesno_initiator_iocap_display_yesno:
+
+set_ssp_mode_numeric_comparison:
+60c5 70466201 jam ssp_mode_ssp_pin_flag ,mem_ssp_mode_flag 
+60c6 20600000 rtn 
+
+responder_iocap_keyboard_only_initiator_iocap_display_yesno:
+
+responder_iocap_keyboard_only_initiator_iocap_keyboard_only:
+
+responder_iocap_keyboard_only_initiator_iocap_display_only:
+
+responder_iocap_display_yesno_initiator_iocap_keyboard_only:
+
+set_ssp_mode_passkey:
+60c7 70466202 jam ssp_mode_passkey_entry_flag ,mem_ssp_mode_flag 
+60c8 20600000 rtn 
+
+classic_bt_set_reject_justwork_flag:
+60c9 d8e00000 arg flag_ssp_reject_justwork ,queue 
+60ca 202060cd branch classic_bluetooth_set_flag 
+
+classic_bt_clr_reject_justwork_flag:
+60cb d8e00000 arg flag_ssp_reject_justwork ,queue 
+60cc 202060d1 branch classic_bluetooth_clr_flag 
+
+classic_bluetooth_set_flag:
+60cd 6800c55c fetch 1 ,mem_classic_bt_flag 
+60ce f9207e00 qset1 pdata 
+60cf 6000c55c store 1 ,mem_classic_bt_flag 
+60d0 20600000 rtn 
+
+classic_bluetooth_clr_flag:
+60d1 6800c55c fetch 1 ,mem_classic_bt_flag 
+60d2 f93ffe00 qset0 pdata 
+60d3 6000c55c store 1 ,mem_classic_bt_flag 
+60d4 20600000 rtn 
+
+send_lmp_io_cap_req:
+60d5 18000e05 force 5 ,queue 
+60d6 204062a0 call send_lmpext 
+60d7 6801c65b fetch 3 ,mem_sp_iocap_local 
+60d8 e0a18000 istore 3 ,contw 
+60d9 202062b2 branch send_lmp_request 
+
+send_lmpext_sniff_subrating_req:
+60da 20600000 rtn 
+
+send_lmpext_sniff_subrating_res:
+60db 18000e09 force 9 ,queue 
+60dc 204062a0 call send_lmpext 
+60dd 68008095 fetch 1 ,mem_subsniff_rate 
+60de e0a08000 istore 1 ,contw 
+60df 68010096 fetch 2 ,mem_subsniff_tcmax 
+60e0 e0a10000 istore 2 ,contw 
+60e1 68020091 fetch 4 ,mem_subsniff_instant 
+60e2 e0a20000 istore 4 ,contw 
+60e3 202062b0 branch send_lmp_reply 
+
+send_lmp_name_res:
+60e4 18007e11 force 17 ,pdata 
+60e5 20406298 call msg_send_lmp 
+60e6 68008049 fetch 1 ,mem_lmi_opcode 
+60e7 1fe20400 copy pdata ,temp 
+60e8 c00060ec beq 0x00 ,send_lmp_name_res_offset_ok 
+60e9 c00760ec beq 0x0e ,send_lmp_name_res_offset_ok 
+60ea c00e60ec beq 0x1c ,send_lmp_name_res_offset_ok 
+60eb 20600000 rtn 
+
+send_lmp_name_res_offset_ok:
+60ec e0a08000 istore 1 ,contw 
+60ed 6800c515 fetch 1 ,mem_local_name_length 
+60ee e0a08000 istore 1 ,contw 
+60ef df20000e arg 14 ,loopcnt 
+60f0 58004516 setarg mem_local_name 
+60f1 98408c00 iadd temp ,contr 
+60f2 20407f01 call memcpy 
+60f3 202062b0 branch send_lmp_reply 
+
+send_lmp_timing_accuracy_res:
+60f4 18007e03 force 3 ,pdata 
+60f5 20406298 call msg_send_lmp 
+60f6 58000114 setarg 0x0114 
+60f7 e0a10000 istore 2 ,contw 
+60f8 202062b0 branch send_lmp_reply 
+
+send_lmp_clkoffset_res:
+60f9 18007e03 force 3 ,pdata 
+60fa 20406298 call msg_send_lmp 
+60fb 68020165 fetch 4 ,mem_clke_bt 
+60fc 9c467e00 isub clkn_bt ,pdata 
+60fd 2034e0ff branch send_lmp_clkoffset_res_master ,master 
+60fe 1fe67e00 sub pdata ,0 ,pdata 
+
+send_lmp_clkoffset_res_master:
+60ff 1feb7e00 rshift2 pdata ,pdata 
+6100 793ffe0f set0 15 ,pdata 
+6101 e0a10000 istore 2 ,contw 
+6102 202062b0 branch send_lmp_reply 
+
+send_lmp_version_res:
+6103 18007e06 force 6 ,pdata 
+6104 20406298 call msg_send_lmp 
+6105 6802c510 fetch 5 ,mem_lmp_version 
+6106 e0a28000 istore 5 ,contw 
+6107 202062b0 branch send_lmp_reply 
+
+send_lmp_features_res:
+6108 18007e09 force 9 ,pdata 
+6109 20406298 call msg_send_lmp 
+610a 68044098 fetch 8 ,mem_features 
+610b e0a40000 istore 8 ,contw 
+610c 202062b0 branch send_lmp_reply 
+
+send_lmpext_features_req:
+610d 18000e0c force 12 ,queue 
+610e 204062a0 call send_lmpext 
+610f 58000001 setarg 0x01 
+6110 e0a08000 istore 1 ,contw 
+6111 680104ce fetch 2 ,mem_lmpext_ssp_enable 
+6112 e0a10000 istore 2 ,contw 
+6113 58000000 setarg 0 
+6114 e0a18000 istore 3 ,contw 
+6115 58000000 setarg 0x00 
+6116 e0a20000 istore 4 ,contw 
+6117 202062b2 branch send_lmp_request 
+
+send_lmpext_packet_type_table_req:
+6118 18000e03 force 3 ,queue 
+6119 204062a0 call send_lmpext 
+611a 6800c15a fetch 1 ,mem_ptt 
+611b e0a08000 istore 1 ,contw 
+611c 78547c00 disable user 
+611d 204062b2 call send_lmp_request 
+611e 24740000 nrtn user 
+611f 24748000 nrtn master 
+6120 6800c0d8 fetch 1 ,mem_afh_cfg 
+6121 c4000000 rtnbit0 afh_cfg_on 
+6122 20406132 call afh_init 
+6123 2020613c branch afh_open_all_channels 
+
+ssp_enable:
+6124 47424030 bpatchx patch30_4 ,mem_patch30 
+6125 6800c09e fetch 1 ,mem_features + 6 
+6126 79207e03 set1 param_featrue_ssp ,pdata 
+6127 6000c09e store 1 ,mem_features + 6 
+6128 58000101 setarg param_lmpext_ssp_enable 
+6129 600104ce store 2 ,mem_lmpext_ssp_enable 
+612a 20600000 rtn 
+
+ssp_disable:
+612b 4742c030 bpatchx patch30_5 ,mem_patch30 
+612c 6800c09e fetch 1 ,mem_features + 6 
+612d 793ffe03 set0 param_featrue_ssp ,pdata 
+612e 6000c09e store 1 ,mem_features + 6 
+612f 58000000 setarg 0 
+6130 600104ce store 2 ,mem_lmpext_ssp_enable 
+6131 20600000 rtn 
+
+afh_init:
+6132 7040d803 jam 0x3 ,mem_afh_cfg 
+6133 58000000 setarg 0 
+6134 60024142 store 4 ,mem_afh_timer 
+6135 d8a040da arg mem_afh_map_lo ,contw 
+6136 20406140 call afh_reset_map 
+6137 d8a040e7 arg mem_afh_map_new ,contw 
+6138 20406140 call afh_reset_map 
+6139 d8a04146 arg mem_afh_classify_channel_map ,contw 
+613a 20406140 call afh_reset_map 
+613b 20206147 branch afh_clear_error_counter 
+
+afh_open_all_channels:
+613c d8a040e7 arg mem_afh_map_new ,contw 
+613d 20406140 call afh_reset_map 
+613e 20406147 call afh_clear_error_counter 
+613f 2020614a branch afh_set_send_flag 
+
+afh_reset_map:
+6140 58ffffff setarg 0xffffff 
+6141 e0a18000 istore 3 ,contw 
+6142 e0a18000 istore 3 ,contw 
+6143 e0a18000 istore 3 ,contw 
+6144 5800007f setarg 0x7f 
+6145 e0a08000 istore 1 ,contw 
+6146 20600000 rtn 
+
+afh_clear_error_counter:
+6147 58000000 setarg 0 
+6148 600140d6 store 2 ,mem_afh_error_total 
+6149 20600000 rtn 
+
+afh_set_send_flag:
+614a 6800c0d8 fetch 1 ,mem_afh_cfg 
+614b 79207e02 set1 send_lmp_set_afh ,pdata 
+614c 6000c0d8 store 1 ,mem_afh_cfg 
+614d 20600000 rtn 
+
+send_lmpext_pause_encryption_req:
+614e 18000e02 force 2 ,queue 
+614f 204062a0 call send_lmpext 
+6150 2434e2b0 nbranch send_lmp_reply ,master 
+6151 202062b2 branch send_lmp_request 
+
+send_lmp_detach:
+6152 18007e02 force 2 ,pdata 
+6153 20406298 call msg_send_lmp 
+6154 680084ca fetch 1 ,mem_disconn_reason_send 
+6155 e0a08000 istore 1 ,contw 
+6156 204062b2 call send_lmp_request 
+
+prepare_disconnect:
+6157 6800804b fetch 1 ,mem_op 
+6158 79207e03 set1 op_disconn ,pdata 
+6159 6000804b store 1 ,mem_op 
+615a 70007232 jam 50 ,mem_conn_timer 
+615b 20600000 rtn 
+
+send_lmp_no_payload:
+615c 18007e01 force 1 ,pdata 
+615d 20406298 call msg_send_lmp 
+615e 202062b2 branch send_lmp_request 
+
+send_lmp_nopayload_reply:
+615f 18007e01 force 1 ,pdata 
+6160 20406298 call msg_send_lmp 
+6161 202062b0 branch send_lmp_reply 
+
+send_lmp_encryption_mode_req:
+6162 18007e02 force 2 ,pdata 
+6163 20406298 call msg_send_lmp 
+6164 6800804c fetch 1 ,mem_state_map 
+6165 2fec0002 isolate0 smap_encryption ,pdata 
+6166 7920fe00 setflag true ,0 ,pdata 
+6167 1fe17e01 and_into 1 ,pdata 
+6168 e0a08000 istore 1 ,contw 
+6169 202062b2 branch send_lmp_request 
+
+send_lmp_superto:
+616a 18007e03 force 3 ,pdata 
+616b 20406298 call msg_send_lmp 
+616c 68010051 fetch 2 ,mem_supervision_to 
+616d e0a10000 istore 2 ,contw 
+616e 202062b2 branch send_lmp_request 
+
+send_lmp_name_req:
+616f 700072fa jam 250 ,mem_conn_timer 
+6170 18007e02 force 2 ,pdata 
+6171 20406298 call msg_send_lmp 
+6172 68008053 fetch 1 ,mem_name_offset 
+6173 e0a08000 istore 1 ,contw 
+6174 202062b2 branch send_lmp_request 
+
+send_lmp_test_control:
+6175 18007e0a force 10 ,pdata 
+6176 20406298 call msg_send_lmp 
+6177 d8c00152 arg mem_temp_payload ,contr 
+6178 18007209 force 9 ,loopcnt 
+
+send_lmp_test_control_loop:
+6179 e8c08000 ifetch 1 ,contr 
+617a 1fe2fe55 xor_into 0x55 ,pdata 
+617b e0a08000 istore 1 ,contw 
+617c c2006179 loop send_lmp_test_control_loop 
+617d 202062b2 branch send_lmp_request 
+
+send_lmp_quality_of_service_req:
+617e 202062b2 branch send_lmp_request 
+
+send_lmp_unit_key:
+617f 202062b2 branch send_lmp_request 
+
+send_lmp_slot_offset:
+6180 20748000 rtn master 
+6181 2040282d call calc_slot_offset 
+6182 18007e09 force 9 ,pdata 
+6183 20406298 call msg_send_lmp 
+6184 68010171 fetch 2 ,mem_slot_offset 
+6185 e0a10000 istore 2 ,contw 
+6186 6801c0a0 fetch 3 ,mem_lap 
+6187 e0a18000 istore 3 ,contw 
+6188 6800c0a3 fetch 1 ,mem_uap 
+6189 e0a08000 istore 1 ,contw 
+618a 680140a4 fetch 2 ,mem_nap 
+618b e0a10000 istore 2 ,contw 
+618c c581e191 bmark0 mark_switch_initiated ,send_lmp_slot_offset_reply 
+618d 793f8003 set0 mark_switch_initiated ,mark 
+618e 204062b2 call send_lmp_request 
+618f 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 
+6190 20600000 rtn 
+
+send_lmp_slot_offset_reply:
+6191 204062b0 call send_lmp_reply 
+6192 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+6193 70007d13 jam lmp_switch_req ,mem_lmi_opcode2 
+6194 20600000 rtn 
+
+send_lmp_switch_req:
+6195 d8400200 arg 0x200 ,temp 
+6196 2034e199 branch switch_on_native ,master 
+6197 1d027e00 deposit clke_bt 
+6198 2020619a branch switch_slack 
+
+switch_on_native:
+6199 1c427e00 deposit clkn_bt 
+
+switch_slack:
+619a 1c227e00 deposit bt_clk 
+619b 9840fe00 iadd temp ,pdata 
+619c 1fe17ffc and_into 0x1fc ,pdata 
+619d 60020034 store 4 ,mem_sniff_anchor 
+619e 18007e05 force 5 ,pdata 
+619f 20406298 call msg_send_lmp 
+61a0 68020034 fetch 4 ,mem_sniff_anchor 
+61a1 1fe37e00 rshift pdata ,pdata 
+61a2 e0a20000 istore 4 ,contw 
+61a3 202062b2 branch send_lmp_request 
+
+send_lmp_sniff_req:
+61a4 18007e0a force 10 ,pdata 
+61a5 20406298 call msg_send_lmp 
+61a6 d8c004d9 arg mem_sniff_payload ,contr 
+61a7 e8c48000 ifetch 9 ,contr 
+61a8 e0a48000 istore 9 ,contw 
+61a9 202062b2 branch send_lmp_request 
+
+send_lmp_timing_accuracy_req:
+61aa 18007e03 force 3 ,pdata 
+61ab 20406298 call msg_send_lmp 
+61ac 58000114 setarg 0x0114 
+61ad e0a10000 istore 2 ,contw 
+61ae 202062b2 branch send_lmp_request 
+
+send_lmp_unsniff_req:
+61af 18007e01 force 1 ,pdata 
+61b0 20406298 call msg_send_lmp 
+61b1 202062b2 branch send_lmp_request 
+
+send_lmp_max_slot:
+61b2 18007e02 force 2 ,pdata 
+61b3 20406298 call msg_send_lmp 
+61b4 6800c0d0 fetch 1 ,mem_max_slot 
+61b5 e0a08000 istore 1 ,contw 
+61b6 202062b2 branch send_lmp_request 
+
+send_lmp_max_slot_req:
+61b7 18007e02 force 2 ,pdata 
+61b8 20406298 call msg_send_lmp 
+61b9 58000005 setarg 0x05 
+61ba e0a08000 istore 1 ,contw 
+61bb 202062b2 branch send_lmp_request 
+
+send_lmp_inc_power:
+61bc 18007e02 force 2 ,pdata 
+61bd 20406298 call msg_send_lmp 
+61be 58000000 setarg 0x00 
+61bf e0a08000 istore 1 ,contw 
+61c0 202062b2 branch send_lmp_request 
+
+send_lmp_setup_complete_by_module:
+61c1 70007c2e jam lmp_max_slot_req ,mem_lmo_opcode2 
+61c2 20600000 rtn 
+
+send_lmp_setup_complete:
+61c3 6800c092 fetch 1 ,mem_device_option 
+61c4 1fe67c0a sub pdata ,dvc_op_module ,null 
+61c5 2042e1c1 call send_lmp_setup_complete_by_module ,zero 
+61c6 68008030 fetch 1 ,mem_state 
+61c7 79207e04 set1 state_conn_comp ,pdata 
+61c8 60008030 store 1 ,mem_state 
+61c9 1c427e00 copy clkn_bt ,pdata 
+61ca 600204e9 store 4 ,mem_aurand_send_delay_time 
+61cb 680084d1 fetch 1 ,mem_lmp_conn_state 
+61cc c281e1d4 bbit1 sent_setup_complete ,send_lmp_setup_complete_has_sent 
+61cd 79207e03 set1 sent_setup_complete ,pdata 
+61ce 600084d1 store 1 ,mem_lmp_conn_state 
+61cf 700a9905 jam bt_evt_setup_complete ,mem_fifo_temp 
+61d0 20407d86 call ui_ipc_send_event 
+61d1 18007e01 force 1 ,pdata 
+61d2 20406298 call msg_send_lmp 
+61d3 202062b2 branch send_lmp_request 
+
+send_lmp_setup_complete_has_sent:
+61d4 70004800 jam 0 ,mem_lmp_to_send 
+61d5 20600000 rtn 
+
+send_lmp_version_req:
+61d6 18007e06 force 6 ,pdata 
+61d7 20406298 call msg_send_lmp 
+61d8 6802c510 fetch 5 ,mem_lmp_version 
+61d9 e0a28000 istore 5 ,contw 
+61da 202062b2 branch send_lmp_request 
+
+send_lmp_features_req:
+61db 18007e09 force 9 ,pdata 
+61dc 20406298 call msg_send_lmp 
+61dd 68044098 fetch 8 ,mem_features 
+61de e0a40000 istore 8 ,contw 
+61df 202062b2 branch send_lmp_request 
+
+sp_master_send_io_cap_get:
+61e0 7009b101 jam sp_flag_commit ,mem_master_sp_flag 
+61e1 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 
+61e2 c1808000 rtnne sp_key_valid 
+61e3 7009af13 jam sp_master_stat_start_done ,mem_master_sp_state 
+61e4 20600000 rtn 
+
+sp_master_send_io_cap_send:
+61e5 204062ef call tid_initiate 
+61e6 70007c99 jam lmp_io_cap_req ,mem_lmo_opcode2 
+61e7 7009af03 jam sp_stat_key_send ,mem_master_sp_state 
+61e8 20600000 rtn 
+
+sp_master_send_lmp_encapsulated_header:
+61e9 204062ef call tid_initiate 
+61ea 70007c3d jam lmp_encapsulated_header ,mem_lmo_opcode2 
+61eb 7009af07 jam sp_stat_random_send ,mem_master_sp_state 
+61ec 20600000 rtn 
+
+sp_master_commitment_compare:
+61ed da200a4e arg mem_sp_calc_result_high ,rega 
+61ee da400a6e arg mem_sp_confirm_remote ,regb 
+61ef df200010 arg 16 ,loopcnt 
+61f0 20407f88 call string_compare 
+61f1 2022e1f7 branch sp_master_commitment_compare_success ,zero 
+61f2 7009af00 jam sp_stat_null ,mem_master_sp_state 
+61f3 204076da call master_clear_mem_master_sp_flag 
+61f4 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 
+61f5 70007d40 jam lmp_simple_pairing_number ,mem_lmi_opcode2 
+61f6 20205d53 branch reject_lmp_packet 
+
+sp_master_commitment_compare_success:
+61f7 7009af0a jam sp_stat_confirm_calc ,mem_master_sp_state 
+61f8 204076d8 call master_set_mem_master_sp_flag 
+61f9 70007d40 jam lmp_simple_pairing_number ,mem_lmi_opcode2 
+61fa 20205e38 branch accept_lmp_msg 
+
+sp_master_send_lmp_simple_pairing_number:
+61fb 70007c40 jam lmp_simple_pairing_number ,mem_lmo_opcode2 
+61fc 20600000 rtn 
+
+sp_send_lmp_encapsulated_header:
+61fd 70007c3d jam lmp_encapsulated_header ,mem_lmo_opcode2 
+61fe 20600000 rtn 
+
+send_lmp_encapsulated_header:
+61ff 7009b600 jam 0 ,mem_sp_local_key_send_count 
+6200 18007e04 force 4 ,pdata 
+6201 20406298 call msg_send_lmp 
+6202 18007e01 force encapsulated_major_type_p192 ,pdata 
+6203 e0a08000 istore 1 ,contw 
+6204 18007e01 force encapsulated_minor_type_p192 ,pdata 
+6205 e0a08000 istore 1 ,contw 
+6206 18007e30 force encapsulated_len_p192 ,pdata 
+6207 e0a08000 istore 1 ,contw 
+6208 204062fc call check_localsm 
+6209 2020e2b2 branch send_lmp_request ,true 
+620a 202062b0 branch send_lmp_reply 
+
+send_lmp_encapsulated_payload:
+620b 18007e11 force 17 ,pdata 
+620c 20406298 call msg_send_lmp 
+620d 680089b6 fetch 1 ,mem_sp_local_key_send_count 
+620e d8c0462a arg mem_sp_pubkey_local ,contr 
+620f 98c08c00 iadd contr ,contr 
+6210 e8c40000 ifetch 8 ,contr 
+6211 e0a40000 istore 8 ,contw 
+6212 e8c40000 ifetch 8 ,contr 
+6213 e0a40000 istore 8 ,contw 
+6214 680089b6 fetch 1 ,mem_sp_local_key_send_count 
+6215 1fe0fe10 increase 16 ,pdata 
+6216 600089b6 store 1 ,mem_sp_local_key_send_count 
+6217 204062fc call check_localsm 
+6218 2020e2b2 branch send_lmp_request ,true 
+6219 202062b0 branch send_lmp_reply 
+
+sp_send_lmp_simple_pairing_comfirm:
+621a 7009ae06 jam sp_stat_random_recv ,mem_sp_state 
+621b 70007c3f jam lmp_simple_pairing_confirm ,mem_lmo_opcode2 
+621c 20600000 rtn 
+
+send_lmp_simple_pairing_comfirm:
+621d 18007e11 force 17 ,pdata 
+621e 20406298 call msg_send_lmp 
+621f d8c00a4e arg mem_sp_calc_result_high ,contr 
+6220 e8c40000 ifetch 8 ,contr 
+6221 e0a40000 istore 8 ,contw 
+6222 e8c40000 ifetch 8 ,contr 
+6223 e0a40000 istore 8 ,contw 
+6224 202062b0 branch send_lmp_reply 
+
+sp_send_lmp_simple_pairing_number:
+6225 70007c40 jam lmp_simple_pairing_number ,mem_lmo_opcode2 
+6226 20600000 rtn 
+
+send_lmp_simple_pairing_number:
+6227 204062fc call check_localsm 
+6228 2040f612 call sp_local_random_key_generator ,true 
+6229 18007e11 force 17 ,pdata 
+622a 20406298 call msg_send_lmp 
+622b d8c00a1e arg mem_sp_random_local ,contr 
+622c e8c40000 ifetch 8 ,contr 
+622d e0a40000 istore 8 ,contw 
+622e e8c40000 ifetch 8 ,contr 
+622f e0a40000 istore 8 ,contw 
+6230 204062fc call check_localsm 
+6231 2420e2b0 nbranch send_lmp_reply ,true 
+6232 2020e2b2 branch send_lmp_request ,true 
+
+master_sp_sm_end:
+6233 7009af0f jam sp_stat_done ,mem_master_sp_state 
+
+sp_aurand_send:
+6234 204062ef call tid_initiate 
+6235 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 
+6236 20406307 call check_localsm_master 
+6237 2020f64e branch sp_master_key_prarm_push ,true 
+6238 20207658 branch sp_link_key_prarm_push 
+
+master_sp_send_lmp_dhkey_check:
+6239 204062eb call tid_reply 
+
+sp_send_lmp_dhkey_check:
+623a 70007c41 jam lmp_dhkey_check ,mem_lmo_opcode2 
+623b 20600000 rtn 
+
+send_lmp_dhkey_check:
+623c 18007e11 force 17 ,pdata 
+623d 20406298 call msg_send_lmp 
+623e d8c00a4e arg mem_sp_calc_result_high ,contr 
+623f e8c40000 ifetch 8 ,contr 
+6240 e0a40000 istore 8 ,contw 
+6241 e8c40000 ifetch 8 ,contr 
+6242 e0a40000 istore 8 ,contw 
+6243 204062fc call check_localsm 
+6244 2420e2b0 nbranch send_lmp_reply ,true 
+6245 2020e2b2 branch send_lmp_request ,true 
+
+send_lmp_enc_key_size_mask_res:
+6246 18007e03 force 3 ,pdata 
+6247 20406298 call msg_send_lmp 
+6248 5800fffe setarg 0xfffe 
+6249 e0a10000 istore 2 ,contw 
+624a 202062b0 branch send_lmp_reply 
+
+send_lmp_auto_rate:
+624b 202062b2 branch send_lmp_request 
+
+send_lmp_clkoffset_req:
+624c 202062b2 branch send_lmp_request 
+
+send_lmp_quality_of_service:
+624d 202062b2 branch send_lmp_request 
+
+send_lmp_test_activate:
+624e 202062b2 branch send_lmp_request 
+
+send_lmp_comb_key:
+624f 2040630b call generate_random_number 
+6250 da2040a0 arg mem_lap ,rega 
+6251 20406311 call generate_linkkey 
+6252 18007e11 force 17 ,pdata 
+6253 20406298 call msg_send_lmp 
+6254 da200582 arg mem_kinit ,rega 
+6255 da400562 arg mem_random_number ,regb 
+6256 20407352 call xor16 
+6257 2434e2a7 nbranch send_lmp_follow ,master 
+6258 202062ad branch send_lmp_tid 
+
+send_lmp_inrand:
+6259 2040630b call generate_random_number 
+625a da200040 arg mem_plap ,rega 
+625b 20407255 call generate_kinit 
+
+send_lmp_rand:
+625c 18007e11 force 17 ,pdata 
+625d 20406298 call msg_send_lmp 
+625e d8c00562 arg mem_random_number ,contr 
+625f 20407ebf call memcpy16 
+6260 68008055 fetch 1 ,mem_conn_sm 
+6261 c00ce2b2 beq conn_sm_auth_wait ,send_lmp_request 
+6262 c00c62b2 beq conn_sm_pairing_wait ,send_lmp_request 
+6263 202062ad branch send_lmp_tid 
+
+send_lmp_aurand:
+6264 680089b5 fetch 1 ,mem_pairing_auth 
+6265 203a626a branch send_lmp_aurand_notpairing ,blank 
+6266 204062fc call check_localsm 
+6267 2040e2ef call tid_initiate ,true 
+6268 2440e2eb ncall tid_reply ,true 
+6269 2020626b branch send_lmp_aurand_common 
+
+send_lmp_aurand_notpairing:
+626a 204062ef call tid_initiate 
+
+send_lmp_aurand_common:
+626b 2040630b call generate_random_number 
+626c 2020625c branch send_lmp_rand 
+
+send_lmp_sres:
+626d da2040a0 arg mem_lap ,rega 
+626e 20407288 call function_e1 
+626f 18007e05 force 5 ,pdata 
+6270 20406298 call msg_send_lmp 
+6271 68020592 fetch 4 ,mem_input_store 
+6272 e0a20000 istore 4 ,contw 
+6273 d84004d5 arg mem_sres_tid ,temp 
+6274 204062e2 call special_tid_store 
+6275 20407386 call copy_aco 
+6276 204062fc call check_localsm 
+6277 2020e27c branch send_lmp_sres_master ,true 
+6278 7004d801 jam done_encryp ,mem_wait_encryption 
+6279 680089b5 fetch 1 ,mem_pairing_auth 
+627a 207a0000 rtn blank 
+627b 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 
+
+send_lmp_sres_master:
+627c 6800c1bd fetch 1 ,mem_link_key_exists 
+627d 207a0000 rtn blank 
+
+send_lmp_sres_startenc:
+627e 204062fc call check_localsm 
+627f 2420e284 nbranch send_lmp_sres_startenc_slave ,true 
+6280 680084d7 fetch 1 ,mem_auth_enable 
+6281 207a0000 rtn blank 
+6282 70007c0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 
+6283 20600000 rtn 
+
+send_lmp_sres_startenc_slave:
+6284 c6908000 rtnmark0 mark_slave_in_rand_accepted 
+6285 793f8021 set0 mark_slave_in_rand_accepted ,mark 
+6286 70007c0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 
+6287 20600000 rtn 
+
+send_lmp_start_encryption:
+6288 2040630b call generate_random_number 
+6289 2040728b call function_e3 
+628a 18007e11 force 17 ,pdata 
+628b 20406298 call msg_send_lmp 
+628c d8c00562 arg mem_random_number ,contr 
+628d 20407ebf call memcpy16 
+628e 202062ad branch send_lmp_tid 
+
+send_lmp_stop_encryption_req:
+628f 18007e01 force 1 ,pdata 
+6290 20406298 call msg_send_lmp 
+6291 202062ad branch send_lmp_tid 
+
+send_lmp_encryption_key_size_req:
+6292 18007e02 force 2 ,pdata 
+6293 20406298 call msg_send_lmp 
+6294 18007e10 force 16 ,pdata 
+6295 e0a08000 istore 1 ,contw 
+6296 60008054 store 1 ,mem_key_size 
+6297 202062ad branch send_lmp_tid 
+
+msg_send_lmp:
+6298 1fe9fe00 lshift3 pdata ,pdata 
+6299 1fe1fe07 or_into 0x07 ,pdata 
+629a 600084b6 store 1 ,mem_lmo_header_length 
+629b df200011 arg 17 ,loopcnt 
+629c d8a004b8 arg mem_lmo_payload ,contw 
+629d 20407ed4 call clear_mem 
+629e d8a004b8 arg mem_lmo_payload ,contw 
+629f 20600000 rtn 
+
+send_lmpext:
+62a0 1fe1227f and pdata ,0x7f ,rega 
+62a1 7000487f jam lmp_escape ,mem_lmp_to_send 
+62a2 18e27e00 deposit queue 
+62a3 20406298 call msg_send_lmp 
+62a4 1a227e00 deposit rega 
+62a5 e0a08000 istore 1 ,contw 
+62a6 20600000 rtn 
+
+send_lmp_follow:
+62a7 68008048 fetch 1 ,mem_lmp_to_send 
+62a8 1fe3fe00 lshift pdata ,pdata 
+62a9 6808804c fetcht 1 ,mem_state_map 
+62aa 284ffe01 isolate1 smap_lmptid ,temp 
+62ab 7920fe00 setflag true ,0 ,pdata 
+62ac 202062b7 branch send_lmp_exit 
+
+send_lmp_tid:
+62ad 6808804c fetcht 1 ,mem_state_map 
+62ae 18410401 and_into 1 ,temp 
+62af 202062b3 branch send_lmp_end 
+
+send_lmp_reply:
+62b0 18000400 force 0 ,temp 
+62b1 202062b3 branch send_lmp_end 
+
+send_lmp_request:
+62b2 18000401 force 1 ,temp 
+
+send_lmp_end:
+62b3 68008048 fetch 1 ,mem_lmp_to_send 
+62b4 1fe3fe00 lshift pdata ,pdata 
+62b5 7934fe00 setflag master ,0 ,pdata 
+62b6 9842fe00 ixor temp ,pdata 
+
+send_lmp_exit:
+62b7 600084b7 store 1 ,mem_lmo_header_opcode 
+62b8 70004800 jam 0 ,mem_lmp_to_send 
+62b9 204062c7 call lmo_fifo_process_lmo0empty 
+62ba 78347c00 enable user 
+62bb 20600000 rtn 
+
+lmo_fifo_check:
+62bc 6800807c fetch 1 ,mem_lmo_opcode2 
+62bd 207a0000 rtn blank 
+62be 204062c1 call lmo_fifo_process 
+62bf 6800807c fetch 1 ,mem_lmo_opcode2 
+62c0 20600000 rtn 
+
+lmo_fifo_process:
+62c1 47434030 bpatchx patch30_6 ,mem_patch30 
+62c2 68008048 fetch 1 ,mem_lmp_to_send 
+62c3 203a62c7 branch lmo_fifo_process_lmo0empty ,blank 
+62c4 68008078 fetch 1 ,mem_lmo_opcode1 
+62c5 247a0000 nrtn blank 
+62c6 202062d1 branch lmo_fifo_process_lmo2to1 
+
+lmo_fifo_process_lmo0empty:
+62c7 68008078 fetch 1 ,mem_lmo_opcode1 
+62c8 203a62d7 branch lmo_fifo_process_lmo1_empty ,blank 
+62c9 68018078 fetch 3 ,mem_lmo_opcode1 
+62ca 60018048 store 3 ,mem_lmp_to_send 
+62cb 6808807b fetcht 1 ,mem_lmo_tid1 
+62cc 6800804c fetch 1 ,mem_state_map 
+62cd 793ffe01 set0 smap_lmptid ,pdata 
+62ce 9841fe00 ior temp ,pdata 
+62cf 6000804c store 1 ,mem_state_map 
+62d0 70007800 jam 0 ,mem_lmo_opcode1 
+
+lmo_fifo_process_lmo2to1:
+62d1 6800807c fetch 1 ,mem_lmo_opcode2 
+62d2 207a0000 rtn blank 
+62d3 6802007c fetch 4 ,mem_lmo_opcode2 
+62d4 60020078 store 4 ,mem_lmo_opcode1 
+62d5 70007c00 jam 0 ,mem_lmo_opcode2 
+62d6 20600000 rtn 
+
+lmo_fifo_process_lmo1_empty:
+62d7 6800807c fetch 1 ,mem_lmo_opcode2 
+62d8 207a0000 rtn blank 
+62d9 6801807c fetch 3 ,mem_lmo_opcode2 
+62da 60018048 store 3 ,mem_lmp_to_send 
+62db 6808807f fetcht 1 ,mem_lmo_tid2 
+62dc 6800804c fetch 1 ,mem_state_map 
+62dd 793ffe01 set0 smap_lmptid ,pdata 
+62de 9841fe00 ior temp ,pdata 
+62df 6000804c store 1 ,mem_state_map 
+62e0 70007c00 jam 0 ,mem_lmo_opcode2 
+62e1 20600000 rtn 
+
+special_tid_store:
+62e2 4743c030 bpatchx patch30_7 ,mem_patch30 
+62e3 6800804c fetch 1 ,mem_state_map 
+62e4 1fe22600 copy pdata ,regc 
+62e5 e8408000 ifetch 1 ,temp 
+62e6 20405e52 call pop_tid_follow 
+62e7 204062a7 call send_lmp_follow 
+62e8 1a627e00 copy regc ,pdata 
+62e9 6000804c store 1 ,mem_state_map 
+62ea 20600000 rtn 
+
+tid_reply:
+62eb 6808804c fetcht 1 ,mem_state_map 
+62ec 793f8400 set0 smap_lmptidinit ,temp 
+62ed 6008804c storet 1 ,mem_state_map 
+62ee 20600000 rtn 
+
+tid_initiate:
+62ef 6808804c fetcht 1 ,mem_state_map 
+62f0 79200400 set1 smap_lmptidinit ,temp 
+62f1 6008804c storet 1 ,mem_state_map 
+62f2 20600000 rtn 
+
+tid_check:
+62f3 7d34fe01 nsetflag master ,smap_lmptid ,pdata 
+62f4 6808804c fetcht 1 ,mem_state_map 
+62f5 9842fe00 ixor temp ,pdata 
+62f6 2feffe01 isolate1 smap_lmptid ,pdata 
+62f7 20600000 rtn 
+
+tid_set_reply:
+62f8 6800804c fetch 1 ,mem_state_map 
+62f9 7934fe01 setflag master ,smap_lmptid ,pdata 
+62fa 6000804c store 1 ,mem_state_map 
+62fb 20600000 rtn 
+
+check_localsm:
+62fc 680089b4 fetch 1 ,mem_sp_localsm 
+62fd 2fe0fe01 compare local_statemachine ,pdata ,0x7f 
+62fe 20600000 rtn 
+
+setlocalsm_master:
+62ff 680089b4 fetch 1 ,mem_sp_localsm 
+6300 79207e07 set1 7 ,pdata 
+6301 600089b4 store 1 ,mem_sp_localsm 
+6302 20600000 rtn 
+
+setlocalsm_slave:
+6303 680089b4 fetch 1 ,mem_sp_localsm 
+6304 793ffe07 set0 7 ,pdata 
+6305 600089b4 store 1 ,mem_sp_localsm 
+6306 20600000 rtn 
+
+check_localsm_master:
+6307 680089b4 fetch 1 ,mem_sp_localsm 
+6308 2feffe07 isolate1 7 ,pdata 
+6309 600089b4 store 1 ,mem_sp_localsm 
+630a 20600000 rtn 
+
+generate_random_number:
+630b d8a00562 arg mem_random_number ,contw 
+
+generate_random:
+630c 18007210 force 16 ,loopcnt 
+
+generate_random_another:
+
+generate_random_loop:
+630d 180a7e00 random pdata 
+630e e0a08000 istore 1 ,contw 
+630f c200630d loop generate_random_another 
+6310 20600000 rtn 
+
+generate_linkkey:
+6311 20407259 call function_e21 
+6312 da2041be arg mem_link_key ,rega 
+6313 da400592 arg mem_input_store ,regb 
+6314 ea240000 ifetch 8 ,rega 
+6315 68088030 fetcht 1 ,mem_state 
+6316 7d3a0406 nsetflag blank ,state_combkey ,temp 
+6317 60088030 storet 1 ,mem_state 
+6318 1a220a00 copy rega ,contw 
+6319 20407352 call xor16 
+631a 202021c4 branch generate_linkkey_continue 
+
+process_conn_sm:
+631b 47444031 bpatchx patch31_0 ,mem_patch31 
+631c 204062bc call lmo_fifo_check 
+631d 247a0000 nrtn blank 
+
+process_conn_sm_continue:
+631e 68008055 fetch 1 ,mem_conn_sm 
+631f 207a0000 rtn blank 
+6320 c002636f beq conn_sm_send_conn_req ,host_create_conn_send_conn_req 
+6321 c002e374 beq conn_sm_wait_conn_accept ,host_create_conn_wait_accept 
+6322 c0016366 beq conn_sm_send_features ,host_create_conn_send_features 
+6323 c001e37c beq conn_sm_wait_features_res ,host_create_conn_waiting 
+6324 c0076369 beq conn_sm_send_switch ,host_create_conn_send_switch 
+6325 c0036398 beq conn_sm_auth_pair ,host_create_conn_auth_pair 
+6326 c003e3b0 beq conn_sm_auth_pair_wait ,host_create_conn_auth_pair_wait 
+6327 c004e3b1 beq conn_sm_encrypt ,host_create_conn_encrypt 
+6328 c00563ba beq conn_sm_encrypt_wait ,host_create_conn_encrypt_wait 
+6329 c005e3be beq conn_sm_encrypt_wait_clear ,host_create_conn_encrypt_wait_clear 
+632a c0066386 beq conn_sm_send_setup_complete ,host_create_conn_send_setup_complete 
+632b c006e389 beq conn_sm_wait_setup_complete ,host_create_conn_wait_setup_complete 
+632c c007e38f beq conn_sm_detach_delay ,host_create_conn_master_detach 
+632d c0096359 beq conn_sm_send_version ,host_create_conn_send_version 
+632e c009e37c beq conn_sm_wait_version ,host_create_conn_waiting 
+632f c008635c beq conn_sm_wait_switch_after_host_connection ,host_creat_conn_wait_switch 
+6330 c00a6356 beq conn_sm_send_features_ext ,host_creat_conn_send_feat_ext 
+6331 c00ae37c beq conn_sm_wait_features_ext ,host_create_conn_waiting 
+6332 c00b6350 beq conn_sm_pairing ,host_create_conn_pairing 
+6333 c00c6355 beq conn_sm_pairing_wait ,host_create_conn_pairing_wait 
+6334 c00be349 beq conn_sm_auth ,host_create_conn_auth 
+6335 c00ce34f beq conn_sm_auth_wait ,host_create_conn_auth_wait 
+6336 c00d633a beq conn_sm_done ,host_create_conn_done 
+6337 c00de344 beq conn_sm_wait_done ,host_create_conn_done_wait 
+6338 70005500 jam conn_sm_standby ,mem_conn_sm 
+6339 20600000 rtn 
+
+host_create_conn_done:
+633a 680084d1 fetch 1 ,mem_lmp_conn_state 
+633b c4010000 rtnbit0 received_setup_complete 
+633c c4018000 rtnbit0 sent_setup_complete 
+633d 70005500 jam conn_sm_standby ,mem_conn_sm 
+633e 20406340 call host_conn_judge_encrypt 
+633f 20206cef branch scheduler_start_upper_sm 
+
+host_conn_judge_encrypt:
+6340 6800816d fetch 1 ,mem_connection_options 
+6341 c4008000 rtnbit0 connection_encrypt 
+6342 7000550a jam conn_sm_encrypt_wait ,mem_conn_sm 
+6343 20600000 rtn 
+
+host_create_conn_done_wait:
+6344 d8e00007 arg enpt_delay_timer ,queue 
+6345 20407f16 call timer_check 
+6346 247a0000 nrtn blank 
+6347 7000551a jam conn_sm_done ,mem_conn_sm 
+6348 20600000 rtn 
+
+host_create_conn_auth:
+6349 6800816d fetch 1 ,mem_connection_options 
+634a 793ffe00 set0 connection_auth ,pdata 
+634b 6000816d store 1 ,mem_connection_options 
+634c 70005519 jam conn_sm_auth_wait ,mem_conn_sm 
+634d 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 
+634e 20600000 rtn 
+
+host_create_conn_auth_wait:
+634f 20600000 rtn 
+
+host_create_conn_pairing:
+6350 680084d4 fetch 1 ,mem_pincode_state 
+6351 c1810000 rtnne pincode_state_pincode_ready 
+6352 204063c0 call host_auth 
+6353 70005518 jam conn_sm_pairing_wait ,mem_conn_sm 
+6354 20600000 rtn 
+
+host_create_conn_pairing_wait:
+6355 20600000 rtn 
+
+host_creat_conn_send_feat_ext:
+6356 70005515 jam conn_sm_wait_features_ext ,mem_conn_sm 
+6357 70007c83 jam lmp_ext_features_req ,mem_lmo_opcode2 
+6358 20600000 rtn 
+
+host_create_conn_send_version:
+6359 70005513 jam conn_sm_wait_version ,mem_conn_sm 
+635a 70007c25 jam lmp_version_req ,mem_lmo_opcode2 
+635b 20600000 rtn 
+
+host_creat_conn_wait_switch:
+635c 6800c55b fetch 1 ,mem_switch_flag 
+635d c1000000 rtneq switch_flag_init 
+635e c000e364 beq switch_flag_accept ,host_create_conn_switch_accept 
+635f d8e00006 arg switch_wait_timer ,queue 
+6360 20407f16 call timer_check 
+6361 247a0000 nrtn blank 
+6362 70455b00 jam switch_flag_init ,mem_switch_flag 
+6363 2020637d branch host_create_conn_switch 
+
+host_create_conn_switch_accept:
+6364 20748000 rtn master 
+6365 20206398 branch host_create_conn_auth_pair 
+
+host_create_conn_send_features:
+6366 70005503 jam conn_sm_wait_features_res ,mem_conn_sm 
+6367 70007c27 jam lmp_features_req ,mem_lmo_opcode2 
+6368 20600000 rtn 
+
+host_create_conn_send_switch:
+6369 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 
+636a 79200003 set1 mark_switch_initiated ,mark 
+636b 70005505 jam conn_sm_wait_conn_accept ,mem_conn_sm 
+636c 580001ff setarg 0x1ff 
+636d 600104d2 store 2 ,mem_soft_timer 
+636e 20600000 rtn 
+
+host_create_conn_send_conn_req:
+636f 70005505 jam conn_sm_wait_conn_accept ,mem_conn_sm 
+6370 7004d2ff jam 0xff ,mem_soft_timer 
+6371 793f8022 set0 mark_reconn_recieve_switch ,mark 
+6372 70007c33 jam lmp_host_connection_req ,mem_lmo_opcode2 
+6373 20205d04 branch init_lmp_reinit 
+
+host_create_conn_wait_accept:
+6374 c6110000 rtnmark1 mark_reconn_recieve_switch 
+6375 680104d2 fetch 2 ,mem_soft_timer 
+6376 1fe67e01 sub pdata ,1 ,pdata 
+6377 2022e37a branch host_create_conn_resend ,zero 
+6378 600104d2 store 2 ,mem_soft_timer 
+6379 20600000 rtn 
+
+host_create_conn_resend:
+637a 7000550e jam conn_sm_send_switch ,mem_conn_sm 
+637b 20600000 rtn 
+
+host_create_conn_waiting:
+637c 20600000 rtn 
+
+host_create_conn_switch:
+637d 680084d1 fetch 1 ,mem_lmp_conn_state 
+637e c4018000 rtnbit0 sent_setup_complete 
+637f c4010000 rtnbit0 received_setup_complete 
+6380 6800816d fetch 1 ,mem_connection_options 
+6381 793ffe02 set0 connection_switch ,pdata 
+6382 6000816d store 1 ,mem_connection_options 
+6383 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 
+6384 70005510 jam conn_sm_wait_switch_after_host_connection ,mem_conn_sm 
+6385 20600000 rtn 
+
+host_create_conn_send_setup_complete:
+6386 7000550d jam conn_sm_wait_setup_complete ,mem_conn_sm 
+6387 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 
+6388 20600000 rtn 
+
+host_create_conn_wait_setup_complete:
+6389 680084d1 fetch 1 ,mem_lmp_conn_state 
+638a c4010000 rtnbit0 received_setup_complete 
+638b 70005500 jam conn_sm_standby ,mem_conn_sm 
+638c 20600000 rtn 
+
+host_create_conn_wait_setup_complete_rtn:
+638d 70005506 jam conn_sm_auth_pair ,mem_conn_sm 
+638e 20600000 rtn 
+
+host_create_conn_master_detach:
+638f 680084d2 fetch 1 ,mem_soft_timer 
+6390 1fe0ffff increase -1 ,pdata 
+6391 203a6394 branch host_create_conn_send_detach ,blank 
+6392 600084d2 store 1 ,mem_soft_timer 
+6393 20600000 rtn 
+
+host_create_conn_send_detach:
+6394 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+6395 7004ca16 jam local_host ,mem_disconn_reason_send 
+6396 70005500 jam 0 ,mem_conn_sm 
+6397 20600000 rtn 
+
+host_create_conn_auth_pair:
+6398 6800816d fetch 1 ,mem_connection_options 
+6399 c281637d bbit1 connection_switch ,host_create_conn_switch 
+639a c280639d bbit1 connection_auth ,host_create_conn_auth_pair_true 
+
+host_create_conn_sm_done:
+639b 7000551a jam conn_sm_done ,mem_conn_sm 
+639c 20600000 rtn 
+
+host_create_conn_auth_pair_true:
+639d 6800c1bd fetch 1 ,mem_link_key_exists 
+639e 203a63a9 branch host_create_conn_auth_pair_nokey ,blank 
+639f 680084d1 fetch 1 ,mem_lmp_conn_state 
+63a0 c4018000 rtnbit0 sent_setup_complete 
+63a1 c4010000 rtnbit0 received_setup_complete 
+63a2 680204e9 fetch 4 ,mem_aurand_send_delay_time 
+63a3 d8400064 arg 100 ,temp 
+63a4 98408400 iadd temp ,temp 
+63a5 1c427e00 copy clkn_bt ,pdata 
+63a6 98467c00 isub temp ,null 
+63a7 24610000 nrtn positive 
+63a8 20206349 branch host_create_conn_auth 
+
+host_create_conn_auth_pair_nokey:
+63a9 70005516 jam conn_sm_pairing ,mem_conn_sm 
+63aa 70468904 jam 4 ,mem_pin_length 
+63ab 58003030 setarg 0x3030 
+63ac 6001468a store 2 ,mem_pin 
+63ad e0a10000 istore 2 ,contw 
+63ae 7004d402 jam pincode_state_pincode_ready ,mem_pincode_state 
+63af 20206350 branch host_create_conn_pairing 
+
+host_create_conn_auth_pair_wait:
+63b0 20600000 rtn 
+
+host_create_conn_encrypt:
+63b1 6800816d fetch 1 ,mem_connection_options 
+63b2 c280e3b5 bbit1 connection_encrypt ,host_create_conn_encrypt_start 
+63b3 7000551a jam conn_sm_done ,mem_conn_sm 
+63b4 20600000 rtn 
+
+host_create_conn_encrypt_start:
+63b5 6800816d fetch 1 ,mem_connection_options 
+63b6 793ffe01 set0 connection_encrypt ,pdata 
+63b7 6000816d store 1 ,mem_connection_options 
+63b8 70007c0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 
+63b9 20600000 rtn 
+
+host_create_conn_encrypt_wait:
+63ba 680084d8 fetch 1 ,mem_wait_encryption 
+63bb 207a0000 rtn blank 
+63bc 70005500 jam conn_sm_standby ,mem_conn_sm 
+63bd 202063b5 branch host_create_conn_encrypt_start 
+
+host_create_conn_encrypt_wait_clear:
+63be 7000550c jam conn_sm_send_setup_complete ,mem_conn_sm 
+63bf 20600000 rtn 
+
+host_auth:
+63c0 6800804b fetch 1 ,mem_op 
+63c1 c28163c5 bbit1 op_inrand_req ,remote_auth 
+63c2 204062ef call tid_initiate 
+63c3 70007c08 jam lmp_in_rand ,mem_lmo_opcode2 
+63c4 20204d04 branch cmd_exit 
+
+remote_auth:
+63c5 6800804b fetch 1 ,mem_op 
+63c6 793ffe02 set0 op_inrand_req ,pdata 
+63c7 6000804b store 1 ,mem_op 
+63c8 20406001 call lmp_accept_inrand 
+63c9 204062f8 call tid_set_reply 
+63ca 20204d04 branch cmd_exit 
+
+pincode_reinit:
+63cb 58000004 setarg 4 
+63cc 6000c689 store 1 ,mem_pin_length 
+63cd 58003030 setarg 0x3030 
+63ce e0a10000 istore 2 ,contw 
+63cf e0a10000 istore 2 ,contw 
+63d0 20600000 rtn 
+
+twspi_reset:
+63d1 47464031 bpatchx patch31_4 ,mem_patch31 
+63d2 68108073 hfetch 1 ,core_gpio_oe3 
+63d3 d8400006 arg 0x06 ,temp 
+63d4 9841fe00 ior temp ,pdata 
+63d5 60108073 hstore 1 ,core_gpio_oe3 
+63d6 68108077 hfetch 1 ,core_gpio_out3 
+63d7 9841fe00 ior temp ,pdata 
+63d8 60108077 hstore 1 ,core_gpio_out3 
+63d9 204063ee call twspi_disable 
+63da 68108077 hfetch 1 ,core_gpio_out3 
+63db 793ffe01 set0 1 ,pdata 
+63dc 793ffe02 set0 2 ,pdata 
+63dd 60108077 hstore 1 ,core_gpio_out3 
+63de 2000001e nop 30 
+63df 202063f2 branch twspi_enable 
+
+twspi_reset2:
+63e0 68108073 hfetch 1 ,core_gpio_oe3 
+63e1 d84000c0 arg 0xc0 ,temp 
+63e2 9841fe00 ior temp ,pdata 
+63e3 60108073 hstore 1 ,core_gpio_oe3 
+63e4 68108077 hfetch 1 ,core_gpio_out3 
+63e5 9841fe00 ior temp ,pdata 
+63e6 60108077 hstore 1 ,core_gpio_out3 
+63e7 204063ee call twspi_disable 
+63e8 68108077 hfetch 1 ,core_gpio_out3 
+63e9 793ffe06 set0 6 ,pdata 
+63ea 793ffe07 set0 7 ,pdata 
+63eb 60108077 hstore 1 ,core_gpio_out3 
+63ec 2000001e nop 30 
+63ed 202063f6 branch twspi_enable2 
+
+twspi_disable:
+63ee 68108081 hfetch 1 ,core_gpio_sel1 
+63ef 1fe17efc and pdata ,0xfc ,pdata 
+63f0 60108081 hstore 1 ,core_gpio_sel1 
+63f1 20600000 rtn 
+
+twspi_enable:
+63f2 68108081 hfetch 1 ,core_gpio_sel1 
+63f3 1fe1fe01 or pdata ,0x01 ,pdata 
+63f4 60108081 hstore 1 ,core_gpio_sel1 
+63f5 20600000 rtn 
+
+twspi_enable2:
+63f6 68108081 hfetch 1 ,core_gpio_sel1 
+63f7 1fe1fe03 or pdata ,0x03 ,pdata 
+63f8 793ffe04 set0 4 ,pdata 
+63f9 60108081 hstore 1 ,core_gpio_sel1 
+63fa 20600000 rtn 
+
+sensor_read:
+63fb 1fe22400 copy pdata ,regb 
+63fc 2040640f call spi_ncs_enable 
+63fd 20000064 nop 100 
+63fe 1a427e00 copy regb ,pdata 
+63ff 20406414 call twspi_read 
+6400 1fe22400 copy pdata ,regb 
+6401 20406411 call spi_ncs_disable 
+6402 20000064 nop 100 
+6403 1a427e00 copy regb ,pdata 
+6404 20600000 rtn 
+
+sensor_write:
+6405 1fe22400 copy pdata ,regb 
+6406 2040640f call spi_ncs_enable 
+6407 20000064 nop 100 
+6408 1a427e00 copy regb ,pdata 
+6409 20406413 call twspi_write 
+640a 20406411 call spi_ncs_disable 
+640b 20000064 nop 100 
+640c 20600000 rtn 
+
+spi_ncs_gpio_init:
+640d 6808c214 fetcht 1 ,mem_spi_ncs_gpio 
+640e 2020680e branch gpio_config_output 
+
+spi_ncs_enable:
+640f 6808c214 fetcht 1 ,mem_spi_ncs_gpio 
+6410 20206829 branch gpio_out_active 
+
+spi_ncs_disable:
+6411 6808c214 fetcht 1 ,mem_spi_ncs_gpio 
+6412 20206825 branch gpio_out_inactive 
+
+twspi_write:
+6413 202064ec branch spid_write_reg 
+
+twspi_read:
+6414 202064f3 branch spid_read_reg 
+
+read_function_aes:
+6415 24346419 nbranch read_function ,user 
+6416 68108085 hfetch 1 ,core_gpio_key2 
+6417 1fe1fe02 or_into 0x2 ,pdata 
+6418 60108085 hstore 1 ,core_gpio_key2 
+
+read_function:
+6419 18427c00 copy temp ,null 
+641a 2022e41c branch read_fuction_zero ,zero 
+641b 1a627a00 copy regc ,pc 
+
+read_fuction_zero:
+641c 2fcc0000 isolate0 0 ,null 
+641d 202064b9 branch set_ucode_status 
+
+get_block_header:
+641e 18000404 force 4 ,temp 
+
+get_block_header0:
+641f da2001fe arg mem_ucode_buf ,rega 
+6420 68108085 hfetch 1 ,core_gpio_key2 
+6421 1fe17efd and_into 0xfd ,pdata 
+6422 60108085 hstore 1 ,core_gpio_key2 
+6423 20406419 call read_function 
+6424 da2055aa arg 0x55aa ,rega 
+6425 680101fe fetch 2 ,mem_ucode_buf 
+6426 e8c90000 ifetcht 2 ,contr 
+6427 9a267c00 isub rega ,null 
+6428 20600000 rtn 
+
+read_first_block:
+6429 d8400002 arg 2 ,temp 
+642a da200204 arg mem_ucode_ptr ,rega 
+642b 20406419 call read_function 
+642c 68010204 fetch 2 ,mem_ucode_ptr 
+642d 600101f7 store 2 ,mem_addr_mi 
+642e 20546430 call get_iv ,user 
+642f 20600000 rtn 
+
+get_iv:
+6430 d8400010 arg 16 ,temp 
+6431 da200206 arg mem_ucode_keybuf ,rega 
+6432 68108085 hfetch 1 ,core_gpio_key2 
+6433 1fe17efd and_into 0xfd ,pdata 
+6434 60108085 hstore 1 ,core_gpio_key2 
+6435 20406419 call read_function 
+6436 d8c00206 arg mem_ucode_keybuf ,contr 
+6437 df200010 arg 16 ,loopcnt 
+6438 20407478 call aes_load_data 
+6439 20407428 call aes_init 
+643a 20407491 call aes_clear_data 
+643b 20207422 branch do_aes_cbc 
+
+load_storage:
+643c 7856fc00 disable match 
+643d 2040641e call get_block_header 
+643e 24628000 nrtn zero 
+643f 7836fc00 enable match 
+6440 70802380 jam 0x80 ,core_ucode_ctrl 
+6441 70802200 jam 0 ,core_ucode_hi 
+6442 70802400 jam 0 ,core_ucode_low 
+6443 da208025 arg core_ucode_data ,rega 
+6444 20406415 call read_function_aes 
+6445 70802300 jam 0x0 ,core_ucode_ctrl 
+
+load_storage_loop:
+6446 d8400006 arg 6 ,temp 
+6447 2040641f call get_block_header0 
+6448 24628000 nrtn zero 
+6449 e8c10000 ifetch 2 ,contr 
+644a 98002200 iforce rega 
+644b 20406419 call read_function 
+644c 20206446 branch load_storage_loop 
+
+reload_eeprom:
+644d 20407f99 call clean_mem 
+644e 58001000 setarg 0x1000 
+644f 600101f7 store 2 ,mem_addr_mi 
+6450 da6065e5 arg iicd_read_eep ,regc 
+6451 df200002 arg 2 ,loopcnt 
+
+reload_eeprom_loop:
+6452 2040641e call get_block_header 
+6453 24628000 nrtn zero 
+6454 680101f7 fetch 2 ,mem_addr_mi 
+6455 1ff0fe00 byteswap pdata ,pdata 
+6456 9840fe00 iadd temp ,pdata 
+6457 1ff0fe00 byteswap pdata ,pdata 
+6458 600101f7 store 2 ,mem_addr_mi 
+6459 c2006452 loop reload_eeprom_loop 
+645a 20206446 branch load_storage_loop 
+
+loadcode:
+645b 20407f99 call clean_mem 
+645c 78547c00 disable user 
+645d 2040666a call otp_enable_chgpump 
+645e 58000000 setarg otp_ucode_flag 
+645f da2001f3 arg mem_otp_ucode_flag ,rega 
+6460 d8400002 arg 2 ,temp 
+6461 204066b3 call otpd_read_data 
+6462 680101f3 fetch 2 ,mem_otp_ucode_flag 
+6463 c303e46e bbit0 otp_uflag_aes ,loadcode_otp 
+6464 70805025 jam 0x25 ,core_clkoff 
+6465 580007f0 setarg otp_ucode_aeskey 
+6466 da200206 arg mem_ucode_keybuf ,rega 
+6467 d8400010 arg 16 ,temp 
+6468 204066b3 call otpd_read_data 
+6469 70800608 jam lock_otp ,core_misc_ctrl 
+646a 7920002b set1 mark_otp_encrypt ,mark 
+646b d8c00206 arg mem_ucode_keybuf ,contr 
+646c 20407484 call load_key 
+646d 78347c00 enable user 
+
+loadcode_otp:
+646e 7041da00 jam 0 ,mem_loadcode_times 
+
+loadcode_otp_2:
+646f 204064b0 call loadcode_check_times 
+6470 680101f3 fetch 2 ,mem_otp_ucode_flag 
+6471 1ff0fe00 byteswap pdata ,pdata 
+6472 d84007ff arg 0x7ff ,temp 
+6473 98417e00 iand temp ,pdata 
+6474 2022e47b branch loadcode_iic ,zero 
+6475 2040666f call otp_set_addr 
+6476 da6066b8 arg otpd_read_code ,regc 
+6477 20546430 call get_iv ,user 
+6478 2040643c call load_storage 
+6479 680081f2 fetch 1 ,mem_ucode_status 
+647a c300646f bbit0 0 ,loadcode_otp_2 
+
+loadcode_iic:
+647b 2040666d call otp_disable_chgpump 
+647c 7041da00 jam 0 ,mem_loadcode_times 
+
+loadcode_iic_2:
+647d 204064b0 call loadcode_check_times 
+647e 204065c2 call clear_eeprom_size_2k 
+647f 680081f3 fetch 1 ,mem_otp_ucode_flag 
+6480 c283648e bbit1 otp_uflag_skip_eep ,loadcode_spi 
+6481 204064aa call loadcode_iic_by_eeprom 
+6482 2436e486 nbranch loadcode_iic_eeprom_2k ,match 
+6483 680081f2 fetch 1 ,mem_ucode_status 
+6484 c300647d bbit0 0 ,loadcode_iic_2 
+6485 2020649b branch loadcode_hci 
+
+loadcode_iic_eeprom_2k:
+6486 204065bf call set_eeprom_size_2k 
+6487 680081f3 fetch 1 ,mem_otp_ucode_flag 
+6488 c283648e bbit1 otp_uflag_skip_eep ,loadcode_spi 
+6489 204064aa call loadcode_iic_by_eeprom 
+648a 2436e48e nbranch loadcode_spi ,match 
+648b 680081f2 fetch 1 ,mem_ucode_status 
+648c c300647d bbit0 0 ,loadcode_iic_2 
+648d 2020649b branch loadcode_hci 
+
+loadcode_spi:
+648e 7041da00 jam 0 ,mem_loadcode_times 
+
+loadcode_spi_2:
+648f 204064b0 call loadcode_check_times 
+6490 680081f3 fetch 1 ,mem_otp_ucode_flag 
+6491 c282e49b bbit1 otp_uflag_skip_flash ,loadcode_hci 
+6492 58000000 setarg 0x0 
+6493 600181f6 store 3 ,mem_addr_hi 
+6494 20406502 call spid_init_flash 
+6495 da606578 arg spid_load_flash ,regc 
+6496 20406429 call read_first_block 
+6497 2040643c call load_storage 
+6498 2436e49b nbranch loadcode_hci ,match 
+6499 680081f2 fetch 1 ,mem_ucode_status 
+649a c300648f bbit0 0 ,loadcode_spi_2 
+
+loadcode_hci:
+649b c515e49d bmark1 mark_otp_encrypt ,loadcode_hci_enc 
+649c 204064a3 call clear_key_buf 
+
+loadcode_hci_enc:
+649d 680081f3 fetch 1 ,mem_otp_ucode_flag 
+649e c30264a3 bbit0 otp_uflag_hci ,clear_key_buf 
+649f 70805021 jam 0x21 ,core_clkoff 
+64a0 20404c0e call hci_init 
+
+loadcode_hci_loop:
+64a1 20404c2e call hci_rx_packet 
+64a2 202064a1 branch loadcode_hci_loop 
+
+clear_key_buf:
+64a3 58000000 setarg 0 
+64a4 60040206 store 8 ,mem_ucode_keybuf 
+64a5 6004020e store 8 ,mem_ucode_keybuf + 8 
+64a6 18007004 force regidx_key ,regext_index 
+64a7 20407492 call aes_clear 
+64a8 70805021 jam 0x21 ,core_clkoff 
+64a9 20600000 rtn 
+
+loadcode_iic_by_eeprom:
+64aa 58000000 setarg 0x0 
+64ab 600101f7 store 2 ,mem_addr_mi 
+64ac da6065e5 arg iicd_read_eep ,regc 
+64ad 204065a3 call iicd_init_12m 
+64ae 20406429 call read_first_block 
+64af 2020643c branch load_storage 
+
+loadcode_check_times:
+64b0 6800c1da fetch 1 ,mem_loadcode_times 
+64b1 1fe0fe01 increase 1 ,pdata 
+64b2 1fe67c03 sub pdata ,3 ,null 
+64b3 242164b6 nbranch loadcode_error ,positive 
+64b4 6000c1da store 1 ,mem_loadcode_times 
+64b5 20600000 rtn 
+
+loadcode_error:
+64b6 204064a3 call clear_key_buf 
+64b7 20407fa1 call ice_break 
+64b8 20600000 rtn 
+
+set_ucode_status:
+64b9 680081f2 fetch 1 ,mem_ucode_status 
+64ba 1fe3fe00 lshift pdata ,pdata 
+64bb 7920fe00 setflag true ,0 ,pdata 
+64bc 2a2c000f isolate0 15 ,rega 
+64bd 20608000 rtn true 
+64be 600081f2 store 1 ,mem_ucode_status 
+64bf 20600000 rtn 
+
+decrypt_code:
+64c0 68108085 hfetch 1 ,core_gpio_key2 
+64c1 c4008000 rtnbit0 1 
+64c2 202064c6 branch decrypt_code_skip 
+
+decrypt_code_loop:
+64c3 6810812c hfetch 1 ,core_dma_status 
+64c4 afefffff qisolate1 pdata 
+64c5 20608000 rtn true 
+
+decrypt_code_skip:
+64c6 68108108 hfetch 1 ,core_misc_status 
+64c7 c300e4c3 bbit0 1 ,decrypt_code_loop 
+64c8 20407422 call do_aes_cbc 
+64c9 202064c3 branch decrypt_code_loop 
+
+load_ucode:
+64ca 68014199 fetch 2 ,mem_patch_ptr 
+64cb 207a0000 rtn blank 
+64cc 70802380 jam 0x80 ,core_ucode_ctrl 
+64cd 70802200 jam 0 ,core_ucode_hi 
+64ce 70802400 jam 0 ,core_ucode_low 
+64cf 6809419b fetcht 2 ,mem_patch_len 
+64d0 184bf200 lshift2 temp ,loopcnt 
+64d1 98000c00 iforce contr 
+
+load_ucode_loop:
+64d2 e8c08000 ifetch 1 ,contr 
+64d3 60108025 hstore 1 ,core_ucode_data 
+64d4 c20064d2 loop load_ucode_loop 
+64d5 70802300 jam 0x0 ,core_ucode_ctrl 
+64d6 20600000 rtn 
+
+spid_init:
+64d7 4746c031 bpatchx patch31_5 ,mem_patch31 
+64d8 204064dd call spid_init_common 
+64d9 202063f2 branch twspi_enable 
+
+spid_init2:
+64da 204064dd call spid_init_common 
+64db 204063ee call twspi_disable 
+64dc 202063f6 branch twspi_enable2 
+
+spid_init_common:
+64dd 6800c212 fetch 1 ,mem_spi_init_clk 
+64de 60108086 hstore 1 ,core_spid_ctrl 
+64df 6800c213 fetch 1 ,mem_spi_init_delay_time 
+64e0 60108087 hstore 1 ,core_spid_delay 
+64e1 580001f5 setarg mem_spid_tbuf 
+64e2 6011008a hstore 2 ,core_spid_txaddr 
+64e3 580001fa setarg mem_spid_rbuf 
+64e4 6011008c hstore 2 ,core_spid_rxaddr 
+64e5 202063ee branch twspi_disable 
+
+spid_reset:
+64e6 68108086 hfetch 1 ,core_spid_ctrl 
+64e7 79207e07 set1 7 ,pdata 
+64e8 60108086 hstore 1 ,core_spid_ctrl 
+64e9 793ffe07 set0 7 ,pdata 
+64ea 60108086 hstore 1 ,core_spid_ctrl 
+64eb 20600000 rtn 
+
+spid_write_reg:
+64ec 79207e07 set1 7 ,pdata 
+64ed 600101f5 store 2 ,mem_spid_tbuf 
+64ee 47474031 bpatchx patch31_6 ,mem_patch31 
+64ef 70808802 jam 2 ,core_spid_txlen 
+64f0 70808e00 jam 0 ,core_spid_rxlen 
+64f1 70800602 jam spid_start ,core_misc_ctrl 
+64f2 202064fc branch wait_spid_done 
+
+spid_read_reg:
+64f3 18000401 force 1 ,temp 
+
+spid_read_regs:
+64f4 600081f5 store 1 ,mem_spid_tbuf 
+64f5 4747c031 bpatchx patch31_7 ,mem_patch31 
+64f6 70808801 jam 1 ,core_spid_txlen 
+64f7 6019008e hstoret 2 ,core_spid_rxlen 
+64f8 70800602 jam spid_start ,core_misc_ctrl 
+64f9 204064fc call wait_spid_done 
+64fa 680081fa fetch 1 ,mem_spid_rbuf 
+64fb 20600000 rtn 
+
+wait_spid_done:
+64fc 680140d6 fetch 2 ,mem_afh_error_total 
+64fd 1fe0fe01 increase 1 ,pdata 
+64fe 600140d6 store 2 ,mem_afh_error_total 
+64ff 6810812c hfetch 1 ,core_dma_status 
+6500 c301e4fc bbit0 spid_done ,wait_spid_done 
+6501 20600000 rtn 
+
+spid_init_flash:
+6502 70808640 jam 0x40 ,core_spid_ctrl 
+6503 70808700 jam 0x0 ,core_spid_delay 
+6504 68108081 hfetch 1 ,core_gpio_sel1 
+6505 793ffe00 set0 0 ,pdata 
+6506 79207e01 set1 1 ,pdata 
+6507 60108081 hstore 1 ,core_gpio_sel1 
+6508 58000000 setarg 0 
+6509 600201f5 store 4 ,mem_spid_tbuf 
+650a 20600000 rtn 
+
+spid_unlock_flash:
+650b 58000000 setarg 0 
+650c 6011008e hstore 2 ,core_spid_rxlen 
+650d 58000001 setarg 1 
+650e 60110088 hstore 2 ,core_spid_txlen 
+650f 580001f5 setarg mem_spid_tbuf 
+6510 6011008a hstore 2 ,core_spid_txaddr 
+6511 7001f506 jam 6 ,mem_spid_tbuf 
+6512 70800602 jam spid_start ,core_misc_ctrl 
+6513 202064fc branch wait_spid_done 
+
+flash_write:
+6514 78547c00 disable user 
+6515 1fe22400 copy pdata ,regb 
+6516 6800c239 fetch 1 ,mem_spi_write_flash_sm 
+6517 c1800000 rtnne flash_sm_no_buys 
+6518 78347c00 enable user 
+6519 1a427e00 copy regb ,pdata 
+651a 20206522 branch flash_write_start 
+
+flash_write_spi_sm_timer:
+651b 6800c239 fetch 1 ,mem_spi_write_flash_sm 
+651c c000e522 beq flash_sm_start ,flash_write_start 
+651d c0016528 beq flash_sm_erase_sector ,flash_erase_sector 
+651e c001e530 beq flash_sm_wait_erase_sector ,flash_wait_erase_sector 
+651f c0026537 beq flash_sm_write_data ,flash_write_data 
+6520 c002e53d beq flash_sm_wait_write_data ,flash_wait_write_data 
+6521 20600000 rtn 
+
+flash_write_start:
+6522 6001c232 store 3 ,mem_spi_write_addr 
+6523 1a227e00 copy rega ,pdata 
+6524 60014235 store 2 ,mem_spi_write_ptr 
+6525 60094237 storet 2 ,mem_spi_write_len 
+6526 70423902 jam flash_sm_erase_sector ,mem_spi_write_flash_sm 
+6527 20206502 branch spid_init_flash 
+
+flash_erase_sector:
+6528 20406502 call spid_init_flash 
+6529 70423903 jam flash_sm_wait_erase_sector ,mem_spi_write_flash_sm 
+652a 2040650b call spid_unlock_flash 
+652b da2001f5 arg mem_spid_tbuf ,rega 
+652c 6801c232 fetch 3 ,mem_spi_write_addr 
+652d 70808804 jam 4 ,core_spid_txlen 
+652e d8400020 arg flash_command_sector_erase ,temp 
+652f 20206556 branch spid_write_flash_common 
+
+flash_wait_erase_sector:
+6530 20406502 call spid_init_flash 
+6531 2040650b call spid_unlock_flash 
+6532 58000005 setarg flash_read_satus 
+6533 204064f3 call spid_read_reg 
+6534 c3800000 rtnbit1 flash_status_wip 
+6535 70423904 jam flash_sm_write_data ,mem_spi_write_flash_sm 
+6536 20600000 rtn 
+
+flash_write_data:
+6537 20406502 call spid_init_flash 
+6538 70423905 jam flash_sm_wait_write_data ,mem_spi_write_flash_sm 
+6539 2040650b call spid_unlock_flash 
+653a 2040654a call flash_data_preserve 
+653b 20406552 call spid_write_flash 
+653c 20206545 branch flash_data_recover 
+
+flash_wait_write_data:
+653d 20406502 call spid_init_flash 
+653e 2040650b call spid_unlock_flash 
+653f 58000005 setarg flash_read_satus 
+6540 204064f3 call spid_read_reg 
+6541 c3800000 rtnbit1 flash_status_wip 
+6542 70423900 jam flash_sm_no_buys ,mem_spi_write_flash_sm 
+6543 68014201 fetch 2 ,mem_cb_spi_flash_write_complate 
+6544 20207f9c branch callback_func 
+
+flash_data_recover:
+6545 68020aa2 fetch 4 ,mem_temp 
+6546 68094235 fetcht 2 ,mem_spi_write_ptr 
+6547 184085fc increase -4 ,temp 
+6548 e0420000 istore 4 ,temp 
+6549 20600000 rtn 
+
+flash_data_preserve:
+654a 68094235 fetcht 2 ,mem_spi_write_ptr 
+654b 18422200 copy temp ,rega 
+654c 184085fc increase -4 ,temp 
+654d e8420000 ifetch 4 ,temp 
+654e 60020aa2 store 4 ,mem_temp 
+654f 68094237 fetcht 2 ,mem_spi_write_len 
+6550 6801c232 fetch 3 ,mem_spi_write_addr 
+6551 20600000 rtn 
+
+spid_write_flash:
+6552 18408404 increase 4 ,temp 
+6553 60190088 hstoret 2 ,core_spid_txlen 
+6554 d8400002 arg flash_command_write_data ,temp 
+6555 1a20a3fc increase -4 ,rega 
+
+spid_write_flash_common:
+6556 e2288000 istoret 1 ,rega 
+6557 1ff10400 rshift16 pdata ,temp 
+6558 e0a88000 istoret 1 ,contw 
+6559 1fec8400 rshift8 pdata ,temp 
+655a e0a88000 istoret 1 ,contw 
+655b e0a08000 istore 1 ,contw 
+655c 1a227e00 deposit rega 
+655d 6011008a hstore 2 ,core_spid_txaddr 
+655e 58000000 setarg 0 
+655f 6011008e hstore 2 ,core_spid_rxlen 
+6560 70800602 jam spid_start ,core_misc_ctrl 
+6561 202064fc branch wait_spid_done 
+
+spid_read_flash:
+6562 6019008e hstoret 2 ,core_spid_rxlen 
+6563 1ff10400 rshift16 pdata ,temp 
+6564 600881f6 storet 1 ,mem_addr_hi 
+6565 1fec8400 rshift8 pdata ,temp 
+6566 600881f7 storet 1 ,mem_addr_mi 
+6567 600081f8 store 1 ,mem_addr_lo 
+6568 58000004 setarg 4 
+6569 60110088 hstore 2 ,core_spid_txlen 
+656a 7001f503 jam flash_command_read_data ,mem_spid_tbuf 
+656b 580001f5 setarg mem_spid_tbuf 
+656c 6011008a hstore 2 ,core_spid_txaddr 
+656d 1a227e00 deposit rega 
+656e 6011008c hstore 2 ,core_spid_rxaddr 
+656f 68108086 hfetch 1 ,core_spid_ctrl 
+6570 2a2c000f isolate0 15 ,rega 
+6571 7920fe06 setflag true ,6 ,pdata 
+6572 60108086 hstore 1 ,core_spid_ctrl 
+6573 70800602 jam spid_start ,core_misc_ctrl 
+
+spi_read_flash_wait:
+6574 6810812c hfetch 1 ,core_dma_status 
+6575 c283e574 bbit1 7 ,spi_read_flash_wait 
+6576 d8e00003 arg spid_done ,queue 
+6577 202064fc branch wait_spid_done 
+
+spid_load_flash:
+6578 6019008e hstoret 2 ,core_spid_rxlen 
+6579 58000004 setarg 4 
+657a 60110088 hstore 2 ,core_spid_txlen 
+657b 7001f503 jam 3 ,mem_spid_tbuf 
+657c 580001f5 setarg mem_spid_tbuf 
+657d 6011008a hstore 2 ,core_spid_txaddr 
+657e 1a227e00 deposit rega 
+657f 6011008c hstore 2 ,core_spid_rxaddr 
+6580 68108086 hfetch 1 ,core_spid_ctrl 
+6581 2a2c000f isolate0 15 ,rega 
+6582 7920fe06 setflag true ,6 ,pdata 
+6583 60108086 hstore 1 ,core_spid_ctrl 
+6584 70800602 jam spid_start ,core_misc_ctrl 
+
+spi_load_flash_wait:
+6585 6810812c hfetch 1 ,core_dma_status 
+6586 c283e585 bbit1 7 ,spi_load_flash_wait 
+6587 d8e00003 arg spid_done ,queue 
+6588 204064c0 call decrypt_code 
+6589 204064fc call wait_spid_done 
+658a 2feffe02 isolate1 spid_crcok ,pdata 
+658b 204064b9 call set_ucode_status 
+658c 680081f6 fetch 1 ,mem_addr_hi 
+658d 1ff02400 lshift16 pdata ,regb 
+658e 680081f7 fetch 1 ,mem_addr_mi 
+658f 1fed7e00 lshift8 pdata ,pdata 
+6590 9a41a400 ior regb ,regb 
+6591 680081f8 fetch 1 ,mem_addr_lo 
+6592 9a41fe00 ior regb ,pdata 
+6593 9840fe00 iadd temp ,pdata 
+6594 600081f8 store 1 ,mem_addr_lo 
+6595 1fecfe00 rshift8 pdata ,pdata 
+6596 600081f7 store 1 ,mem_addr_mi 
+6597 1fecfe00 rshift8 pdata ,pdata 
+6598 600081f6 store 1 ,mem_addr_hi 
+6599 20600000 rtn 
+
+soft_reset_chip:
+659a 70801001 jam 1 ,core_reset 
+659b 20600000 rtn 
+
+iic_init_390k:
+659c 7080910c jam 12 ,core_iicd_scl_low 
+659d 7080920d jam 13 ,core_iicd_scl_high 
+659e 7080930d jam 13 ,core_iicd_start_setup 
+659f 7080940d jam 13 ,core_iicd_start_hold 
+65a0 7080950d jam 13 ,core_iicd_stop_setup 
+65a1 7080960c jam 12 ,core_iicd_data_setup 
+65a2 202065a9 branch iicd_init_gpio 
+
+iicd_init_12m:
+65a3 70809105 jam 5 ,core_iicd_scl_low 
+65a4 70809207 jam 7 ,core_iicd_scl_high 
+65a5 70809307 jam 7 ,core_iicd_start_setup 
+65a6 70809407 jam 7 ,core_iicd_start_hold 
+65a7 70809507 jam 7 ,core_iicd_stop_setup 
+65a8 70809605 jam 5 ,core_iicd_data_setup 
+
+iicd_init_gpio:
+65a9 6810807b hfetch 1 ,core_gpio_pu3 
+65aa 1fe1fec0 or_into 0xc0 ,pdata 
+65ab 6010807b hstore 1 ,core_gpio_pu3 
+65ac 68108081 hfetch 1 ,core_gpio_sel1 
+65ad 1fe1fe10 or_into 0x10 ,pdata 
+65ae 60108081 hstore 1 ,core_gpio_sel1 
+65af 20600000 rtn 
+
+wait_iicd_done:
+65b0 6810812c hfetch 1 ,core_dma_status 
+65b1 c302e5b0 bbit0 iicd_done ,wait_iicd_done 
+65b2 20600000 rtn 
+
+iicd_read_data:
+65b3 60110098 hstore 2 ,core_iicd_txlen 
+65b4 1a227e00 deposit rega 
+65b5 6011009a hstore 2 ,core_iicd_txaddr 
+65b6 1a427e00 deposit regb 
+65b7 6011009c hstore 2 ,core_iicd_rxaddr 
+65b8 18427e00 deposit temp 
+65b9 6011009e hstore 2 ,core_iicd_rxlen 
+65ba d8400001 arg 1 ,temp 
+65bb 7d3a0401 nsetflag blank ,1 ,temp 
+65bc 60108090 hstore 1 ,core_iicd_ctrl 
+65bd 70800604 jam iicd_start ,core_misc_ctrl 
+65be 202065b0 branch wait_iicd_done 
+
+set_eeprom_size_2k:
+65bf 79200028 set1 mark_eeprom_size ,mark 
+65c0 70421108 jam 0x08 ,mem_eeprom_block_size 
+65c1 20600000 rtn 
+
+clear_eeprom_size_2k:
+65c2 793f8028 set0 mark_eeprom_size ,mark 
+65c3 70421120 jam 0x20 ,mem_eeprom_block_size 
+65c4 20600000 rtn 
+
+iicd_read_eep_data_size_2k:
+65c5 6800c203 fetch 1 ,mem_eeprom_base 
+65c6 9a40fe00 iadd regb ,pdata 
+65c7 600081f7 store 1 ,mem_addr_mi 
+65c8 202065cc branch iicd_read_eep_size_2k 
+
+iicd_read_eep_size_2k_lcadcode:
+65c9 680101f7 fetch 2 ,mem_addr_mi 
+65ca 1ff0fe00 byteswap pdata ,pdata 
+65cb 600081f7 store 1 ,mem_addr_mi 
+
+iicd_read_eep_size_2k:
+65cc 58000003 setarg 3 
+65cd 60110098 hstore 2 ,core_iicd_txlen 
+65ce 7001f6a0 jam 0xa0 ,mem_iicd_tbuf 
+65cf 7001f8a1 jam 0xa1 ,mem_iicd_tbuf + 2 
+65d0 202065eb branch iicd_read_eep_common 
+
+iicd_write_protect_eep_data:
+65d1 60090aa2 storet 2 ,mem_temp 
+65d2 204065d6 call iicd_eeprom_write_enable 
+65d3 68090aa2 fetcht 2 ,mem_temp 
+65d4 20406606 call iicd_write_eep_data 
+65d5 202065dd branch iicd_eeprom_write_disable 
+
+iicd_eeprom_write_enable:
+65d6 6800c23a fetch 1 ,mem_eeprom_wp_gpio 
+65d7 c17f8000 rtneq gpio_disable 
+65d8 c30365db bbit0 6 ,iicd_wp_gpio_output_low 
+65d9 580249f0 setarg 150000 
+65da 20402a8f call sleep 
+
+iicd_wp_gpio_output_low:
+65db 6808c23a fetcht 1 ,mem_eeprom_wp_gpio 
+65dc 20206829 branch gpio_out_active 
+
+iicd_eeprom_write_disable:
+65dd 6808c23a fetcht 1 ,mem_eeprom_wp_gpio 
+65de 20206825 branch gpio_out_inactive 
+
+iicd_read_eep_data:
+65df 47484032 bpatchx patch32_0 ,mem_patch32 
+65e0 c51465c5 bmark1 mark_eeprom_size ,iicd_read_eep_data_size_2k 
+65e1 68014203 fetch 2 ,mem_eeprom_base 
+65e2 9a40fe00 iadd regb ,pdata 
+65e3 1ff0fe00 byteswap pdata ,pdata 
+65e4 600101f7 store 2 ,mem_addr_mi 
+
+iicd_read_eep:
+65e5 4748c032 bpatchx patch32_1 ,mem_patch32 
+65e6 c51465c9 bmark1 mark_eeprom_size ,iicd_read_eep_size_2k_lcadcode 
+65e7 58000004 setarg 4 
+65e8 60110098 hstore 2 ,core_iicd_txlen 
+65e9 7001f6a0 jam 0xa0 ,mem_iicd_tbuf 
+65ea 7001f9a1 jam 0xa1 ,mem_iicd_tbuf + 3 
+
+iicd_read_eep_common:
+65eb 580001f6 setarg mem_iicd_tbuf 
+65ec 6011009a hstore 2 ,core_iicd_txaddr 
+65ed 6019009e hstoret 2 ,core_iicd_rxlen 
+65ee 1a227e00 deposit rega 
+65ef 6011009c hstore 2 ,core_iicd_rxaddr 
+65f0 58000002 setarg 2 
+65f1 2a2c000f isolate0 15 ,rega 
+65f2 7920fe00 setflag true ,0 ,pdata 
+65f3 60108090 hstore 1 ,core_iicd_ctrl 
+65f4 70800604 jam iicd_start ,core_misc_ctrl 
+65f5 d8e00005 arg iicd_done ,queue 
+65f6 204064c0 call decrypt_code 
+65f7 204065b0 call wait_iicd_done 
+65f8 2feffe04 isolate1 iicd_crcok ,pdata 
+65f9 204064b9 call set_ucode_status 
+65fa c5146601 bmark1 mark_eeprom_size ,iicd_read_eep_load_code_size_2k 
+65fb 680101f7 fetch 2 ,mem_addr_mi 
+65fc 1ff0fe00 byteswap pdata ,pdata 
+65fd 9840fe00 iadd temp ,pdata 
+65fe 1ff0fe00 byteswap pdata ,pdata 
+65ff 600101f7 store 2 ,mem_addr_mi 
+6600 20600000 rtn 
+
+iicd_read_eep_load_code_size_2k:
+6601 680081f7 fetch 1 ,mem_addr_mi 
+6602 9840fe00 iadd temp ,pdata 
+6603 1ff0fe00 byteswap pdata ,pdata 
+6604 600101f7 store 2 ,mem_addr_mi 
+6605 20600000 rtn 
+
+iicd_write_eep_data:
+6606 68014203 fetch 2 ,mem_eeprom_base 
+6607 9a40fe00 iadd regb ,pdata 
+
+iicd_write_ota_data:
+6608 60010a9a store 2 ,mem_pdatatemp 
+6609 47494032 bpatchx patch32_2 ,mem_patch32 
+660a 60090aa2 storet 2 ,mem_temp 
+660b 1a227e00 copy rega ,pdata 
+660c 60010ab9 store 2 ,mem_contr 
+
+iicd_write_eep_loop:
+660d 2040661d call iicd_eep_transparency 
+660e 68090ab2 fetcht 2 ,mem_regb 
+660f 68010ab9 fetch 2 ,mem_contr 
+6610 1fe22200 copy pdata ,rega 
+6611 68010a9a fetch 2 ,mem_pdatatemp 
+6612 2040663d call iicd_write_eep 
+6613 68010ab2 fetch 2 ,mem_regb 
+6614 68090ab9 fetcht 2 ,mem_contr 
+6615 98408400 iadd temp ,temp 
+6616 60090ab9 storet 2 ,mem_contr 
+6617 68090a9a fetcht 2 ,mem_pdatatemp 
+6618 98408400 iadd temp ,temp 
+6619 60090a9a storet 2 ,mem_pdatatemp 
+661a 68010aa2 fetch 2 ,mem_temp 
+661b 243a660d nbranch iicd_write_eep_loop ,blank 
+661c 20600000 rtn 
+
+iicd_eep_transparency:
+661d 4749c032 bpatchx patch32_3 ,mem_patch32 
+661e 6800c211 fetch 1 ,mem_eeprom_block_size 
+661f 1fe0ffff increase -1 ,pdata 
+6620 68090a9a fetcht 2 ,mem_pdatatemp 
+6621 9841fe00 ior temp ,pdata 
+6622 1fe0fe01 increase 1 ,pdata 
+6623 60018ab6 store 3 ,mem_regc 
+6624 68010aa2 fetch 2 ,mem_temp 
+6625 9840fe00 iadd temp ,pdata 
+6626 68098ab6 fetcht 3 ,mem_regc 
+6627 98467e00 isub temp ,pdata 
+6628 2421662f nbranch iicd_eep_deal_short_packet ,positive 
+6629 60010aa2 store 2 ,mem_temp 
+662a 68018ab6 fetch 3 ,mem_regc 
+662b 68090a9a fetcht 2 ,mem_pdatatemp 
+662c 98467e00 isub temp ,pdata 
+662d 60010ab2 store 2 ,mem_regb 
+662e 20600000 rtn 
+
+iicd_eep_deal_short_packet:
+662f 68010aa2 fetch 2 ,mem_temp 
+6630 60010ab2 store 2 ,mem_regb 
+6631 58000000 setarg 0 
+6632 60010aa2 store 2 ,mem_temp 
+6633 20600000 rtn 
+
+iicd_write_eep_size_2k:
+6634 18408402 increase 2 ,temp 
+6635 60190098 hstoret 2 ,core_iicd_txlen 
+6636 1a20a3fe increase -2 ,rega 
+6637 ea298000 ifetcht 3 ,rega 
+6638 18422400 copy temp ,regb 
+6639 d84000a0 arg 0xa0 ,temp 
+663a e2288000 istoret 1 ,rega 
+663b e0a08000 istore 1 ,contw 
+663c 2020664a branch iicd_write_eep_common 
+
+iicd_write_eep:
+663d 1fe22400 copy pdata ,regb 
+663e 474a4032 bpatchx patch32_4 ,mem_patch32 
+663f c5146634 bmark1 mark_eeprom_size ,iicd_write_eep_size_2k 
+6640 1a427e00 copy regb ,pdata 
+6641 18408403 increase 3 ,temp 
+6642 60190098 hstoret 2 ,core_iicd_txlen 
+6643 1a20a3fd increase -3 ,rega 
+6644 ea298000 ifetcht 3 ,rega 
+6645 18422400 copy temp ,regb 
+6646 d84000a0 arg 0xa0 ,temp 
+6647 e2288000 istoret 1 ,rega 
+6648 1ff0fe00 byteswap pdata ,pdata 
+6649 e0a10000 istore 2 ,contw 
+
+iicd_write_eep_common:
+664a 1a227e00 deposit rega 
+664b 6011009a hstore 2 ,core_iicd_txaddr 
+664c 58000000 setarg 0 
+664d 6011009e hstore 2 ,core_iicd_rxlen 
+664e 70809001 jam 1 ,core_iicd_ctrl 
+664f 70800604 jam iicd_start ,core_misc_ctrl 
+6650 204065b0 call wait_iicd_done 
+6651 1a427e00 copy regb ,pdata 
+6652 e2218000 istore 3 ,rega 
+
+iic_check_eeprom_standby:
+6653 474ac032 bpatchx patch32_5 ,mem_patch32 
+6654 7001f900 jam 0 ,mem_iicd_tbuf + 3 
+
+iic_check_eeprom_standby_wait:
+6655 58000001 setarg 1 
+6656 60110098 hstore 2 ,core_iicd_txlen 
+6657 7001f6a0 jam 0xa0 ,mem_iicd_tbuf 
+6658 580001f6 setarg mem_iicd_tbuf 
+6659 6011009a hstore 2 ,core_iicd_txaddr 
+665a 58000000 setarg 0 
+665b 6011009e hstore 2 ,core_iicd_rxlen 
+665c 6011009c hstore 2 ,core_iicd_rxaddr 
+665d 58000003 setarg 3 
+665e 60108090 hstore 1 ,core_iicd_ctrl 
+665f 70800604 jam iicd_start ,core_misc_ctrl 
+6660 204065b0 call wait_iicd_done 
+6661 6810812c hfetch 1 ,core_dma_status 
+6662 c4030000 rtnbit0 iicd_ack 
+6663 200005dc nop 1500 
+6664 680081f9 fetch 1 ,mem_iicd_tbuf + 3 
+6665 1fe0fe01 increase 1 ,pdata 
+6666 600081f9 store 1 ,mem_iicd_tbuf + 3 
+6667 1fe67c28 sub pdata ,40 ,null 
+6668 24610000 nrtn positive 
+6669 20206655 branch iic_check_eeprom_standby_wait 
+
+otp_enable_chgpump:
+666a 70897370 jam 0x70 ,rfen_chgpump 
+666b 20000bb8 nop param_chgpump_delay 
+666c 20600000 rtn 
+
+otp_disable_chgpump:
+666d 70897330 jam 0x30 ,rfen_chgpump 
+666e 20600000 rtn 
+
+otp_set_addr:
+666f 1fe9fe00 lshift3 pdata ,pdata 
+6670 60110045 hstore 2 ,core_otp_addr 
+6671 70804b00 jam 0 ,core_otpd_ctrl 
+6672 20600000 rtn 
+
+otp_write:
+6673 2040666f call otp_set_addr 
+6674 204066a0 call otp_ce 
+
+otp_program:
+6675 ea288000 ifetcht 1 ,rega 
+6676 1a20a201 increase 1 ,rega 
+6677 18000e00 force 0 ,queue 
+
+otp_program_bit:
+6678 a84c0000 qisolate0 temp 
+6679 2020e697 branch otp_skip_0 ,true 
+667a 68108046 hfetch 1 ,core_otp_din 
+667b 79207e06 set1 6 ,pdata 
+667c 79207e07 set1 7 ,pdata 
+667d 60108046 hstore 1 ,core_otp_din 
+667e 70804702 jam 0x02 ,core_otp_ctrl 
+667f 70804782 jam 0x82 ,core_otp_ctrl 
+6680 793ffe07 set0 7 ,pdata 
+6681 60108046 hstore 1 ,core_otp_din 
+6682 7080478a jam 0x8a ,core_otp_ctrl 
+6683 2000000b nop 11 
+6684 708047ca jam 0xca ,core_otp_ctrl 
+6685 20000021 nop 33 
+6686 7080474a jam 0x4a ,core_otp_ctrl 
+6687 2000002c nop 44 
+6688 708047ca jam 0xca ,core_otp_ctrl 
+6689 20000016 nop 22 
+668a 7080478a jam 0x8a ,core_otp_ctrl 
+668b 20000021 nop 33 
+668c 70804782 jam 0x82 ,core_otp_ctrl 
+668d 20000001 nop 1 
+668e 70804792 jam 0x92 ,core_otp_ctrl 
+668f 2000000a nop 10 
+6690 708047b2 jam 0xb2 ,core_otp_ctrl 
+6691 68108007 hfetch 1 ,core_otp_rdata 
+6692 70804792 jam 0x92 ,core_otp_ctrl 
+6693 20000001 nop 1 
+6694 70804782 jam 0x82 ,core_otp_ctrl 
+6695 afec0000 qisolate0 pdata 
+6696 2020e678 branch otp_program_bit ,true 
+
+otp_skip_0:
+6697 68110045 hfetch 2 ,core_otp_addr 
+6698 1fe0fe01 increase 1 ,pdata 
+6699 60110045 hstore 2 ,core_otp_addr 
+669a 18e08e01 increase 1 ,queue 
+669b 28e01e08 compare 8 ,queue ,0xf 
+669c 2420e678 nbranch otp_program_bit ,true 
+669d c2006675 loop otp_program 
+669e 70804783 jam 0x83 ,core_otp_ctrl 
+669f 20600000 rtn 
+
+otp_ce:
+66a0 70804782 jam 0x82 ,core_otp_ctrl 
+66a1 2000000c nop 12 
+66a2 70804780 jam 0x80 ,core_otp_ctrl 
+66a3 70804782 jam 0x82 ,core_otp_ctrl 
+66a4 20000096 nop 150 
+66a5 20600000 rtn 
+
+otpd_read_init:
+66a6 204066a0 call otp_ce 
+66a7 708047a2 jam 0xa2 ,core_otp_ctrl 
+66a8 1a227e00 deposit rega 
+66a9 60110048 hstore 2 ,core_otpd_addr 
+66aa 7920040b set1 11 ,temp 
+66ab 2fec000f isolate0 15 ,pdata 
+66ac 7920840f setflag true ,15 ,temp 
+66ad 6019004a hstoret 2 ,core_otpd_len 
+66ae 70800601 jam otpd_start ,core_misc_ctrl 
+66af 20600000 rtn 
+
+otpd_wait_end:
+66b0 6810812c hfetch 1 ,core_dma_status 
+66b1 c300e6b0 bbit0 otpd_done ,otpd_wait_end 
+66b2 20600000 rtn 
+
+otpd_read_data:
+66b3 2040666f call otp_set_addr 
+66b4 204066a6 call otpd_read_init 
+66b5 204066b0 call otpd_wait_end 
+66b6 70804783 jam 0x83 ,core_otp_ctrl 
+66b7 20600000 rtn 
+
+otpd_read_code:
+66b8 68110124 hfetch 2 ,core_current_otp_addr 
+66b9 60110045 hstore 2 ,core_otp_addr 
+66ba 204066a6 call otpd_read_init 
+66bb d8e00001 arg otpd_done ,queue 
+66bc 204064c0 call decrypt_code 
+66bd 204066b0 call otpd_wait_end 
+66be 2feffe00 isolate1 otpd_crcok ,pdata 
+66bf 204064b9 call set_ucode_status 
+66c0 70804783 jam 0x83 ,core_otp_ctrl 
+66c1 20600000 rtn 
+
+uartd_prepare_tx:
+66c2 6811005e hfetch 2 ,core_uart_twptr 
+66c3 98001400 iforce contwu 
+66c4 20600000 rtn 
+
+uartd_send:
+66c5 19427e00 deposit contwu 
+66c6 6011005e hstore 2 ,core_uart_twptr 
+66c7 20600000 rtn 
+
+uartd_rxdone:
+66c8 18627e00 deposit contru 
+66c9 60110058 hstore 2 ,core_uart_rrptr 
+66ca 20600000 rtn 
+
+uartd_prepare_rx:
+66cb 68110058 hfetch 2 ,core_uart_rrptr 
+66cc 1fe20600 copy pdata ,contru 
+66cd 20600000 rtn 
+
+uart_set_baud_by_mem:
+66ce 68014243 fetch uart_baud_len ,mem_baud 
+66cf 60110052 hstore uart_baud_len ,core_uart_baud 
+66d0 20600000 rtn 
+
+uart_copy_tx_bytes_fast:
+66d1 1f227e00 deposit loopcnt 
+66d2 207a0000 rtn blank 
+
+uart_copy_tx_bytes_fast_loop:
+66d3 1f20f3f8 increase -8 ,loopcnt 
+66d4 204166de call uart_tx_8_bytes ,positive 
+66d5 20628000 rtn zero 
+66d6 202166d3 branch uart_copy_tx_bytes_fast_loop ,positive 
+66d7 1f20f208 increase 8 ,loopcnt 
+
+uart_copy_tx_bytes_fast_loop_four:
+66d8 1f20f3fc increase -4 ,loopcnt 
+66d9 204166e1 call uart_tx_4_bytes ,positive 
+66da 20628000 rtn zero 
+66db 202166d8 branch uart_copy_tx_bytes_fast_loop_four ,positive 
+66dc 1f20f204 increase 4 ,loopcnt 
+66dd 202066e4 branch uart_copy_tx_bytes 
+
+uart_tx_8_bytes:
+66de e8c40000 ifetch 8 ,contr 
+66df e1440000 istore 8 ,contwu 
+66e0 20600000 rtn 
+
+uart_tx_4_bytes:
+66e1 e8c20000 ifetch 4 ,contr 
+66e2 e1420000 istore 4 ,contwu 
+66e3 20600000 rtn 
+
+uart_copy_tx_bytes:
+66e4 1f227e00 deposit loopcnt 
+66e5 207a0000 rtn blank 
+
+uart_copy_tx_bytes_loop:
+66e6 e8c08000 ifetch 1 ,contr 
+66e7 e1408000 istore 1 ,contwu 
+66e8 c20066e6 loop uart_copy_tx_bytes_loop 
+66e9 20600000 rtn 
+
+uart_copy_rx_bytes_fast:
+66ea 1f227e00 deposit loopcnt 
+66eb 207a0000 rtn blank 
+
+uart_copy_rx_bytes_fast_loop:
+66ec 1f20f3f8 increase -8 ,loopcnt 
+66ed 204166f7 call uart_rx_8_bytes ,positive 
+66ee 20628000 rtn zero 
+66ef 202166ec branch uart_copy_rx_bytes_fast_loop ,positive 
+66f0 1f20f208 increase 8 ,loopcnt 
+
+uart_copy_rx_bytes_fast_loop_four:
+66f1 1f20f3fc increase -4 ,loopcnt 
+66f2 204166fa call uart_rx_4_bytes ,positive 
+66f3 20628000 rtn zero 
+66f4 202166f1 branch uart_copy_rx_bytes_fast_loop_four ,positive 
+66f5 1f20f204 increase 4 ,loopcnt 
+66f6 202066fd branch uart_copy_rx_bytes 
+
+uart_rx_8_bytes:
+66f7 e8640000 ifetch 8 ,contru 
+66f8 e0a40000 istore 8 ,contw 
+66f9 20600000 rtn 
+
+uart_rx_4_bytes:
+66fa e8620000 ifetch 4 ,contru 
+66fb e0a20000 istore 4 ,contw 
+66fc 20600000 rtn 
+
+uart_copy_rx_bytes:
+66fd 1f227e00 deposit loopcnt 
+66fe 207a0000 rtn blank 
+
+uart_copy_rx_bytes_loop:
+66ff e8608000 ifetch 1 ,contru 
+6700 e0a08000 istore 1 ,contw 
+6701 c20066ff loop uart_copy_rx_bytes_loop 
+6702 20600000 rtn 
+
+uart_copy_rx2tx:
+6703 1f227e00 deposit loopcnt 
+6704 207a0000 rtn blank 
+
+uart_copy_rx2tx_loop:
+6705 e8608000 ifetch 1 ,contru 
+6706 e1408000 istore 1 ,contwu 
+6707 c2006705 loop uart_copy_rx2tx_loop 
+6708 20600000 rtn 
+
+app_store_nvram_event:
+6709 700a993d jam bt_evt_store_nvram ,mem_fifo_temp 
+670a 20207d86 branch ui_ipc_send_event 
+
+check_51cmd_store_reconn_info:
+
+check_51cmd_update_device_record:
+670b 474b4032 bpatchx patch32_6 ,mem_patch32 
+670c 6800c217 fetch 1 ,mem_nv_data_number 
+670d 207a0000 rtn blank 
+670e 204067a3 call check_nvram 
+670f 2042e7a9 call init_device_list ,zero 
+6710 2040673e call nvram_find_addr_from_bd_list 
+
+write_device_record:
+6711 6800c217 fetch 1 ,mem_nv_data_number 
+6712 1fe22600 icopy regc 
+6713 68094215 fetcht 2 ,mem_nv_data_ptr 
+6714 6009018c storet 2 ,mem_list_item_ptr 
+
+write_device_loop_find:
+6715 1a627e00 copy regc ,pdata 
+6716 203a6709 branch app_store_nvram_event ,blank 
+6717 1a60a7ff increase -1 ,regc 
+6718 18422200 copy temp ,rega 
+6719 ea208000 ifetch 1 ,rega 
+671a 68088184 fetcht 1 ,mem_select_list_item 
+671b 98467c00 isub temp ,null 
+671c 2042e725 call set_index_finded_device ,zero 
+671d 20216721 branch write_device_loop_find0 ,positive 
+671e ea208000 ifetch 1 ,rega 
+671f 1fe0fe01 increase 1 ,pdata 
+6720 e2208000 istore 1 ,rega 
+
+write_device_loop_find0:
+6721 6809018c fetcht 2 ,mem_list_item_ptr 
+6722 18408422 increase nv_data_len ,temp 
+6723 6009018c storet 2 ,mem_list_item_ptr 
+6724 20206715 branch write_device_loop_find 
+
+set_index_finded_device:
+6725 58000000 setarg 0 
+6726 e2208000 istore 1 ,rega 
+6727 68008185 fetch 1 ,mem_temp_reconn_record 
+6728 e0a08000 istore 1 ,contw 
+6729 c099e733 bne rec_3_mode ,set_index_finded_device_ble_mode 
+672a da4041be arg mem_link_key ,regb 
+
+set_index_find_device_master_addr:
+672b e8c30000 ifetch 6 ,contr 
+672c e0a40000 istore 8 ,contw 
+672d 58000000 setarg 0 
+672e e0a40000 istore 8 ,contw 
+672f 1a420c00 copy regb ,contr 
+
+store_rec_data_common:
+6730 20407ebf call memcpy16 
+6731 18007c01 force 1 ,null 
+6732 20600000 rtn 
+
+set_index_finded_device_ble_mode:
+6733 c01b6737 beq rec_4_mode_random_resolvable_private_address ,set_index_finded_device_irk 
+6734 c01be73b beq rec_4_mode_random_non_resolvable_private_address ,set_index_finded_device_ediv 
+6735 da404419 arg mem_le_ltk ,regb 
+6736 2020672b branch set_index_find_device_master_addr 
+
+set_index_finded_device_irk:
+6737 d8c044d5 arg mem_le_irk ,contr 
+6738 20407ebf call memcpy16 
+
+store_ble_rec_data_common:
+6739 d8c04419 arg mem_le_ltk ,contr 
+673a 20206730 branch store_rec_data_common 
+
+set_index_finded_device_ediv:
+673b d8c044cd arg mem_le_rand ,contr 
+673c 20407ebf call memcpy16 
+673d 20206739 branch store_ble_rec_data_common 
+
+nvram_find_addr_from_bd_list:
+673e 20407fe9 call disable_user 
+673f 6800c217 fetch 1 ,mem_nv_data_number 
+6740 207a0000 rtn blank 
+6741 68014682 fetch 2 ,mem_ui_state_map 
+6742 c2806754 bbit1 ui_state_bt_connected ,find_addr_from_bd_list_spp_mode 
+
+find_addr_from_bd_list_ble_mode:
+6743 474bc032 bpatchx patch32_7 ,mem_patch32 
+6744 6800c48e fetch 1 ,mem_le_conn_peer_addr_type 
+6745 c000674d beq master_public_addr ,find_addr_from_bd_list_static_addr 
+6746 68008454 fetch 1 ,mem_le_plap + 5 
+6747 2fe180c0 compare 0xc0 ,pdata ,0xc0 
+6748 2020e74d branch find_addr_from_bd_list_static_addr ,true 
+6749 2fe18040 compare 0x40 ,pdata ,0xc0 
+674a 2020e752 branch find_addr_from_bd_list_random_addr ,true 
+674b 2fe18000 compare 0x00 ,pdata ,0xc0 
+674c 2020e750 branch find_addr_from_bd_list_random_non_resolvable_private_address ,true 
+
+find_addr_from_bd_list_static_addr:
+674d 70018535 jam rec_4_mode_static_address ,mem_temp_reconn_record 
+674e 6803044f fetch 6 ,mem_le_plap 
+674f 20206757 branch find_addr_from_bd_list_common 
+
+find_addr_from_bd_list_random_non_resolvable_private_address:
+6750 70018537 jam rec_4_mode_random_non_resolvable_private_address ,mem_temp_reconn_record 
+6751 20206757 branch find_addr_from_bd_list_common 
+
+find_addr_from_bd_list_random_addr:
+6752 70018536 jam rec_4_mode_random_resolvable_private_address ,mem_temp_reconn_record 
+6753 20206757 branch find_addr_from_bd_list_common 
+
+find_addr_from_bd_list_spp_mode:
+6754 474c4033 bpatchx patch33_0 ,mem_patch33 
+6755 70018533 jam rec_3_mode ,mem_temp_reconn_record 
+6756 68030040 fetch 6 ,mem_plap 
+
+find_addr_from_bd_list_common:
+6757 60030186 store 6 ,mem_temp_reconn_record + 1 
+6758 68014215 fetch 2 ,mem_nv_data_ptr 
+6759 efe88000 ifetcht 1 ,pdata 
+675a 1fe0fe01 pincrease 1 
+675b 6001018c store 2 ,mem_list_item_ptr 
+675c 60088184 storet 1 ,mem_select_list_item 
+675d 6800c217 fetch 1 ,mem_nv_data_number 
+675e 1fe22600 icopy regc 
+
+nvram_find_addr_from_list:
+675f 6801018c fetch 2 ,mem_list_item_ptr 
+6760 1fe22200 copy pdata ,rega 
+6761 2040676f call nvram_find_addr_from_list_compare 
+6762 20740000 rtn user 
+6763 6809018c fetcht 2 ,mem_list_item_ptr 
+6764 18408422 increase nv_data_len ,temp 
+6765 6009018c storet 2 ,mem_list_item_ptr 
+6766 184085ff increase -1 ,temp 
+6767 e8408000 ifetch 1 ,temp 
+6768 60008184 store 1 ,mem_select_list_item 
+6769 1a60a7ff increase -1 ,regc 
+676a 2422e75f nbranch nvram_find_addr_from_list ,zero 
+676b 6800c217 fetch 1 ,mem_nv_data_number 
+676c 1fe0ffff pincrease decreased_one 
+676d 60008184 store 1 ,mem_select_list_item 
+676e 20600000 rtn 
+
+nvram_find_addr_from_list_compare:
+676f 68008185 fetch 1 ,mem_temp_reconn_record 
+6770 c099e776 bne rec_3_mode ,find_addr_from_list_compare_ble_mode 
+
+find_master_addr_from_list_compare:
+6771 da400185 arg mem_temp_reconn_record ,regb 
+6772 df200007 arg 7 ,loopcnt 
+6773 20407f88 call string_compare 
+6774 2022ffe7 branch enable_user ,zero 
+6775 20600000 rtn 
+
+find_addr_from_list_compare_ble_mode:
+6776 c01b6779 beq rec_4_mode_random_resolvable_private_address ,find_irk_form_list_compare 
+6777 c01be794 beq rec_4_mode_random_non_resolvable_private_address ,find_ediv_form_list_compare 
+6778 20206771 branch find_master_addr_from_list_compare 
+
+find_irk_form_list_compare:
+6779 ea288000 ifetcht 1 ,rega 
+677a 98467c00 isub temp ,null 
+677b 24628000 nrtn zero 
+677c d8a00ac2 arg mem_le_prand ,contw 
+677d df200010 arg 16 ,loopcnt 
+677e 20407ed4 call clear_mem 
+677f 68018452 fetch 3 ,mem_le_plap + 3 
+6780 60018ac2 store 3 ,mem_le_prand 
+6781 2040678b call genernate_master_macaddress 
+6782 68010adf fetch 2 ,mem_le_aes_128 + 13 
+6783 1ff0fe00 byteswap pdata ,pdata 
+6784 1fed0400 lshift8 pdata ,temp 
+6785 e8c08000 ifetch 1 ,contr 
+6786 9840fe00 iadd temp ,pdata 
+6787 6809844f fetcht 3 ,mem_le_plap 
+6788 98467c00 isub temp ,null 
+6789 2022ffe7 branch enable_user ,zero 
+678a 20600000 rtn 
+
+genernate_master_macaddress:
+678b d8c00ac2 arg mem_le_prand ,contr 
+678c 20407486 call load_data128 
+678d ea208000 ifetch 1 ,rega 
+678e 20407487 call load_regext 
+678f 18006c38 force 0x38 ,aes_ctrl 
+6790 18006c00 force 0x0 ,aes_ctrl 
+6791 2040741d call wait_aes 
+6792 d8a00ad2 arg mem_le_aes_128 ,contw 
+6793 20207497 branch store_aes_result 
+
+find_ediv_form_list_compare:
+6794 ea288000 ifetcht 1 ,rega 
+6795 98467c00 isub temp ,null 
+6796 24628000 nrtn zero 
+6797 18c22200 copy contr ,rega 
+6798 18c0a608 add contr ,8 ,regc 
+6799 da4044cd arg mem_le_rand ,regb 
+679a df200008 arg 8 ,loopcnt 
+679b 20407f88 call string_compare 
+679c 2022ffe7 branch enable_user ,zero 
+679d 1a622200 copy regc ,rega 
+679e da4044d5 arg mem_le_irk ,regb 
+679f df200008 arg 8 ,loopcnt 
+67a0 20407f88 call string_compare 
+67a1 2022ffe7 branch enable_user ,zero 
+67a2 20600000 rtn 
+
+check_nvram:
+67a3 68014215 fetch 2 ,mem_nv_data_ptr 
+67a4 efe88000 ifetcht 1 ,pdata 
+67a5 1fe0fe22 pincrease nv_data_len 
+67a6 efe08000 ifetch 1 ,pdata 
+67a7 98467c00 isub temp ,null 
+67a8 20600000 rtn 
+
+init_device_list:
+67a9 6800c217 fetch 1 ,mem_nv_data_number 
+67aa 1fe27200 icopy loopcnt 
+67ab 68094215 fetcht 2 ,mem_nv_data_ptr 
+67ac 58000000 setarg 0 
+
+init_device_list_loop:
+67ad e0408000 istore 1 ,temp 
+67ae 18408422 increase nv_data_len ,temp 
+67af 1fe0fe01 pincrease 1 
+67b0 c20067ad loop init_device_list_loop 
+67b1 20600000 rtn 
+
+load_device_list:
+67b2 474cc033 bpatchx patch33_1 ,mem_patch33 
+67b3 2040673e call nvram_find_addr_from_bd_list 
+67b4 68008030 fetch 1 ,mem_state 
+67b5 79347e06 setflag user ,state_combkey ,pdata 
+67b6 60008030 store 1 ,mem_state 
+67b7 243467bc nbranch clear_key_exists ,user 
+67b8 1a208c0a add rega ,10 ,contr 
+67b9 d8a041be arg mem_link_key ,contw 
+67ba 20407ebf call memcpy16 
+67bb 202067d7 branch check_link_key_load 
+
+clear_key_exists:
+67bc 7041bd00 jam 0 ,mem_link_key_exists 
+67bd 20600000 rtn 
+
+load_device_list_mode_4:
+67be 6804c4cb fetch 9 ,mem_le_ediv 
+67bf 203a67ca branch clear_ltk_exists ,blank 
+67c0 2040673e call nvram_find_addr_from_bd_list 
+67c1 243467ca nbranch clear_ltk_exists ,user 
+67c2 6801018c fetch 2 ,mem_list_item_ptr 
+67c3 1fe08c01 add pdata ,1 ,contr 
+67c4 d8a044d5 arg mem_le_irk ,contw 
+67c5 20407ebf call memcpy16 
+67c6 d8a04419 arg mem_le_ltk ,contw 
+67c7 20407ebf call memcpy16 
+67c8 70442901 jam 1 ,mem_ltk_exists 
+67c9 20600000 rtn 
+
+clear_ltk_exists:
+67ca 70442900 jam 0 ,mem_ltk_exists 
+67cb 20600000 rtn 
+
+eeprom_store_le_reconn_info:
+67cc 6803044f fetch 6 ,mem_le_plap 
+67cd 60030186 store 6 ,mem_temp_lap 
+67ce 70018534 jam rec_4_mode ,mem_record_bt_mode 
+67cf 202067d3 branch eeprom_store_reconn_info 
+
+eeprom_store_bd_reconn_info:
+67d0 68030040 fetch 6 ,mem_plap 
+67d1 60030186 store 6 ,mem_temp_lap 
+67d2 70018533 jam rec_3_mode ,mem_record_bt_mode 
+
+eeprom_store_reconn_info:
+67d3 6800c092 fetch 1 ,mem_device_option 
+67d4 c005670b beq dvc_op_module ,check_51cmd_update_device_record 
+67d5 c28342da bbit1 dvc_op_mouse ,mouse_store_remote_bdaddr 
+67d6 20600000 rtn 
+
+check_link_key_load:
+67d7 680441be fetch 8 ,mem_link_key 
+67d8 680c41c6 fetcht 8 ,mem_link_key + 8 
+67d9 9841fe00 ior temp ,pdata 
+67da 207a0000 rtn blank 
+67db 7041bd01 jam 1 ,mem_link_key_exists 
+67dc 20600000 rtn 
+
+gpio_set_wake_by_current_state:
+67dd 474d4033 bpatchx patch33_2 ,mem_patch33 
+67de 79200407 set1 7 ,temp 
+67df 2040681d call gpio_get_bit 
+67e0 7d208407 nsetflag true ,7 ,temp 
+
+gpio_set_wake:
+67e1 474dc033 bpatchx patch33_3 ,mem_patch33 
+67e2 18467cff sub temp ,ui_button_gpio_disable ,null 
+67e3 20628000 rtn zero 
+67e4 284c0007 isolate0 7 ,temp 
+67e5 18410e1f and temp ,0x1f ,queue 
+67e6 680200a1 fetch 4 ,mem_gpio_wakeup_low 
+67e7 f920fe00 qsetflag true ,pdata 
+67e8 600200a1 store 4 ,mem_gpio_wakeup_low 
+67e9 680200a5 fetch 4 ,mem_gpio_wakeup_high 
+67ea fd20fe00 nqsetflag true ,pdata 
+67eb 600200a5 store 4 ,mem_gpio_wakeup_high 
+67ec 20600000 rtn 
+
+gpio_clr_wake:
+67ed 474e4033 bpatchx patch33_4 ,mem_patch33 
+67ee 18467cff sub temp ,ui_button_gpio_disable ,null 
+67ef 20628000 rtn zero 
+67f0 284c0007 isolate0 7 ,temp 
+67f1 18410e1f and temp ,0x1f ,queue 
+67f2 680200a1 fetch 4 ,mem_gpio_wakeup_low 
+67f3 f93ffe00 qset0 pdata 
+67f4 600200a1 store 4 ,mem_gpio_wakeup_low 
+67f5 680200a5 fetch 4 ,mem_gpio_wakeup_high 
+67f6 f93ffe00 qset0 pdata 
+67f7 600200a5 store 4 ,mem_gpio_wakeup_high 
+67f8 20600000 rtn 
+
+gpio_config_input_nowake:
+67f9 204067ed call gpio_clr_wake 
+67fa 202067fe branch gpio_config_input_without_wake 
+
+gpio_config_input:
+67fb 18467cff sub temp ,ui_button_gpio_disable ,null 
+67fc 20628000 rtn zero 
+67fd 2455e7e1 ncall gpio_set_wake ,wake 
+
+gpio_config_input_without_wake:
+67fe d8a0807c arg core_gpio_pd0 ,contw 
+67ff 20406830 call gpio_set_bit 
+6800 79400407 setflip gpio_active_bit ,temp 
+6801 d8a08078 arg core_gpio_pu0 ,contw 
+6802 20406830 call gpio_set_bit 
+6803 793f8407 set0 gpio_active_bit ,temp 
+6804 d8a08070 arg core_gpio_oe0 ,contw 
+6805 20206830 branch gpio_set_bit 
+
+gpio_set_high_impedance:
+6806 d8a0807c arg core_gpio_pd0 ,contw 
+6807 20406830 call gpio_set_bit 
+6808 793f8407 set0 gpio_active_bit ,temp 
+6809 d8a08078 arg core_gpio_pu0 ,contw 
+680a 20406830 call gpio_set_bit 
+680b 793f8407 set0 gpio_active_bit ,temp 
+680c d8a08070 arg core_gpio_oe0 ,contw 
+680d 20206830 branch gpio_set_bit 
+
+gpio_config_output:
+680e 18467cff sub temp ,ui_button_gpio_disable ,null 
+680f 20628000 rtn zero 
+6810 79400407 setflip gpio_active_bit ,temp 
+6811 2040682f call gpio_out 
+
+gpio_config_output0:
+6812 79200407 set1 gpio_active_bit ,temp 
+6813 d8a08070 arg core_gpio_oe0 ,contw 
+6814 20206830 branch gpio_set_bit 
+
+gpio_common:
+6815 18410e07 and temp ,0x07 ,queue 
+6816 18497e00 rshift3 temp ,pdata 
+6817 1fe17e03 and_into 3 ,pdata 
+6818 98a08a00 iadd contw ,contw 
+6819 e8a08000 ifetch 1 ,contw 
+681a 20600000 rtn 
+
+gpio_check_active:
+681b d8a08074 arg core_gpio_out0 ,contw 
+681c 2020681e branch get_bit_common 
+
+gpio_get_bit:
+681d d8a0811c arg core_gpio_in ,contw 
+
+get_bit_common:
+681e 20406815 call gpio_common 
+681f 284ffe07 isolate1 gpio_active_bit ,temp 
+6820 2020e823 branch gpio_get_bit_reverse ,true 
+6821 afec0000 qisolate0 pdata 
+6822 20600000 rtn 
+
+gpio_get_bit_reverse:
+6823 afefffff qisolate1 pdata 
+6824 20600000 rtn 
+
+gpio_out_inactive:
+6825 18467cff sub temp ,ui_button_gpio_disable ,null 
+6826 20628000 rtn zero 
+6827 2fcffe07 isolate1 7 ,null 
+6828 2020682c branch gpio_out_flag 
+
+gpio_out_active:
+6829 18467cff sub temp ,ui_button_gpio_disable ,null 
+682a 20628000 rtn zero 
+682b 2fcc0007 isolate0 7 ,null 
+
+gpio_out_flag:
+682c 58000000 setarg 0 
+682d 7d20fe07 nsetflag true ,gpio_active_bit ,pdata 
+682e 98428400 ixor temp ,temp 
+
+gpio_out:
+682f d8a08074 arg core_gpio_out0 ,contw 
+
+gpio_set_bit:
+6830 20406815 call gpio_common 
+6831 284ffe07 isolate1 gpio_active_bit ,temp 
+6832 f920fe00 qsetflag true ,pdata 
+6833 e0a08000 istore 1 ,contw 
+6834 20600000 rtn 
+
+gpio_set_before_lpm_common:
+6835 da3fffff arg -1 ,rega 
+6836 68108081 hfetch 1 ,core_gpio_sel1 
+6837 2fe00602 compare 0x02 ,pdata ,0x03 
+6838 2040e878 call neglact4_from_23_pin ,true 
+6839 2fe00601 compare 0x01 ,pdata ,0x03 
+683a 2040e87a call neglact2_form_25_pin ,true 
+683b 2fe00603 compare 0x03 ,pdata ,0x03 
+683c 2040e87a call neglact2_form_25_pin ,true 
+683d 2feffe02 isolate1 2 ,pdata 
+683e 2040e874 call neglect2_from_6_pin ,true 
+683f 2feffe03 isolate1 3 ,pdata 
+6840 2040e876 call neglect4_from_9_pin ,true 
+6841 2feffe04 isolate1 4 ,pdata 
+6842 2040e87c call neglact2_form_30_pin ,true 
+6843 2feffe06 isolate1 6 ,pdata 
+6844 7d20a204 nsetflag true ,04 ,rega 
+6845 2feffe07 isolate1 7 ,pdata 
+6846 7d20a205 nsetflag true ,05 ,rega 
+6847 68108082 hfetch 1 ,core_gpio_sel2 
+6848 2feffe00 isolate1 0 ,pdata 
+6849 7d20a21b nsetflag true ,27 ,rega 
+684a 2feffe01 isolate1 1 ,pdata 
+684b 7d20a21c nsetflag true ,28 ,rega 
+684c 2feffe02 isolate1 2 ,pdata 
+684d 7d20a203 nsetflag true ,03 ,rega 
+684e 2feffe03 isolate1 3 ,pdata 
+684f 7d20a208 nsetflag true ,08 ,rega 
+6850 2feffe04 isolate1 4 ,pdata 
+6851 7d20a214 nsetflag true ,20 ,rega 
+6852 2feffe05 isolate1 5 ,pdata 
+6853 7d20a215 nsetflag true ,21 ,rega 
+6854 2feffe06 isolate1 6 ,pdata 
+6855 7d20a216 nsetflag true ,22 ,rega 
+6856 2feffe07 isolate1 7 ,pdata 
+6857 7d20a217 nsetflag true ,23 ,rega 
+6858 68108080 hfetch 1 ,core_gpio_sel 
+6859 2feffe00 isolate1 0 ,pdata 
+685a 7d20a205 nsetflag true ,05 ,rega 
+685b 2feffe01 isolate1 1 ,pdata 
+685c 7d20a206 nsetflag true ,06 ,rega 
+685d 2feffe02 isolate1 2 ,pdata 
+685e 7d20a207 nsetflag true ,07 ,rega 
+685f 2feffe03 isolate1 3 ,pdata 
+6860 7d20a212 nsetflag true ,18 ,rega 
+6861 2feffe04 isolate1 4 ,pdata 
+6862 7d20a213 nsetflag true ,19 ,rega 
+6863 2feffe05 isolate1 5 ,pdata 
+6864 7d20a214 nsetflag true ,20 ,rega 
+6865 2feffe06 isolate1 6 ,pdata 
+6866 7d20a215 nsetflag true ,21 ,rega 
+6867 2feffe07 isolate1 7 ,pdata 
+6868 7d20a216 nsetflag true ,22 ,rega 
+6869 68108062 hfetch 1 ,core_uart_ctrl 
+686a 2feffe04 isolate1 4 ,pdata 
+686b 2040e87e call neglact2_form_2_pin ,true 
+686c 474ec033 bpatchx patch33_5 ,mem_patch33 
+686d 68120078 hfetch 4 ,core_gpio_pu0 
+686e 681a007c hfetcht 4 ,core_gpio_pd0 
+686f 9841fe00 ior temp ,pdata 
+6870 1fe47e00 invert pdata ,pdata 
+6871 9a217e00 iand rega ,pdata 
+6872 60120070 hstore 4 ,core_gpio_oe0 
+6873 20600000 rtn 
+
+neglect2_from_6_pin:
+6874 d8e00006 arg 6 ,queue 
+6875 20206884 branch neglect_2_pin 
+
+neglect4_from_9_pin:
+6876 d8e00009 arg 9 ,queue 
+6877 20206882 branch neglact_4_pin 
+
+neglact4_from_23_pin:
+6878 d8e00017 arg 23 ,queue 
+6879 20206882 branch neglact_4_pin 
+
+neglact2_form_25_pin:
+687a d8e00019 arg 25 ,queue 
+687b 20206884 branch neglect_2_pin 
+
+neglact2_form_30_pin:
+687c d8e0001e arg 30 ,queue 
+687d 20206884 branch neglect_2_pin 
+
+neglact2_form_2_pin:
+687e d8e00002 arg 2 ,queue 
+687f 20206884 branch neglect_2_pin 
+
+neglact_1_pin:
+6880 df200001 arg 1 ,loopcnt 
+6881 20206885 branch neglect_pin_loop 
+
+neglact_4_pin:
+6882 df200004 arg 4 ,loopcnt 
+6883 20206885 branch neglect_pin_loop 
+
+neglect_2_pin:
+6884 df200002 arg 2 ,loopcnt 
+
+neglect_pin_loop:
+6885 f93fa200 qset0 rega 
+6886 18e08e01 increase 1 ,queue 
+6887 c2006885 loop neglect_pin_loop 
+6888 20600000 rtn 
+
+gpio_cfg_uart_tx_output:
+6889 20406895 call gpio_uart2gpio 
+688a d8400006 arg uart_wakeup_tx ,temp 
+688b 2020680e branch gpio_config_output 
+
+gpio_pu_uart_tx:
+688c 20406889 call gpio_cfg_uart_tx_output 
+688d d8400006 arg uart_wakeup_tx ,temp 
+688e 20206825 branch gpio_out_inactive 
+
+gpio_rx_config_input_with_pu:
+688f 20406895 call gpio_uart2gpio 
+6890 68108078 hfetch 1 ,core_gpio_pu0 
+6891 79207e07 set1 uart_wakeup_rx ,pdata 
+6892 60108078 hstore 1 ,core_gpio_pu0 
+6893 d8400007 arg uart_wakeup_rx ,temp 
+6894 202067fb branch gpio_config_input 
+
+gpio_uart2gpio:
+6895 68108081 hfetch 1 ,core_gpio_sel1 
+6896 1fe17efb and_into 0xfb ,pdata 
+6897 60108081 hstore 1 ,core_gpio_sel1 
+6898 20600000 rtn 
+
+gpio_check_uart_state:
+6899 68108081 hfetch 1 ,core_gpio_sel1 
+689a 2feffe02 isolate1 2 ,pdata 
+689b 20600000 rtn 
+
+load_chip_option:
+689c 2040666a call otp_enable_chgpump 
+689d 580007e0 setarg otp_chip_functions 
+689e da204150 arg mem_chip_functions ,rega 
+689f d8400002 arg 0x02 ,temp 
+68a0 204066b3 call otpd_read_data 
+68a1 2020666d branch otp_disable_chgpump 
+
+load_adc_init:
+68a2 2040666a call otp_enable_chgpump 
+68a3 580007e2 setarg otp_adc_io_0_5v_addr 
+68a4 da20421d arg mem_0_5_adc_io_data ,rega 
+68a5 d840000e arg 14 ,temp 
+68a6 204066b3 call otpd_read_data 
+68a7 2020666d branch otp_disable_chgpump 
+
+adc_init_data:
+68a8 474f4033 bpatchx patch33_6 ,mem_patch33 
+68a9 204068a2 call load_adc_init 
+68aa 6800c22d fetch 1 ,mem_adc_config_flag 
+68ab c00068af beq adc_config_vinlpm ,adc_init_data_vinlpm 
+68ac c000e8c3 beq adc_config_hvin ,adc_init_data_hvin 
+68ad c00168d7 beq adc_config_gpio ,adc_init_data_io 
+68ae 20600000 rtn 
+
+adc_init_data_vinlpm:
+68af 68094229 fetcht 2 ,mem_otp_adc_flag 
+68b0 5800aa55 setarg otp_adc_flag 
+68b1 98467c00 isub temp ,null 
+68b2 2022e8b8 branch adc_check_data_vinlpm ,zero 
+68b3 58004dfa setarg 0x4dfa 
+68b4 60014227 store 2 ,mem_3v_adc_vinlpm_data 
+68b5 58004894 setarg 0x4894 
+68b6 60014221 store 2 ,mem_2v_adc_vinlpm_data 
+68b7 202068c0 branch set_vdd_reference_voltage_1v 
+
+adc_check_data_vinlpm:
+68b8 68014227 fetch 2 ,mem_3v_adc_vinlpm_data 
+68b9 243a68bc nbranch adc_check_2v_vinlpm ,blank 
+68ba 58004dfa setarg 0x4dfa 
+68bb 60014227 store 2 ,mem_3v_adc_vinlpm_data 
+
+adc_check_2v_vinlpm:
+68bc 68014221 fetch 2 ,mem_2v_adc_vinlpm_data 
+68bd 243a68c0 nbranch set_vdd_reference_voltage_1v ,blank 
+68be 58004894 setarg 0x4894 
+68bf 60014221 store 2 ,mem_2v_adc_vinlpm_data 
+
+set_vdd_reference_voltage_1v:
+68c0 58000064 setarg 100 
+68c1 6001422b store 2 ,mem_reference_voltage 
+68c2 20600000 rtn 
+
+adc_init_data_hvin:
+68c3 68094229 fetcht 2 ,mem_otp_adc_flag 
+68c4 5800aa55 setarg otp_adc_flag 
+68c5 98467c00 isub temp ,null 
+68c6 2022e8cc branch adc_check_data_hvin ,zero 
+68c7 58005932 setarg 0x5932 
+68c8 60014225 store 2 ,mem_5v_adc_hvin_data 
+68c9 58004323 setarg 0x4323 
+68ca 6001421f store 2 ,mem_1v_adc_hvin_data 
+68cb 202068d4 branch set_vdd_reference_voltage_4v 
+
+adc_check_data_hvin:
+68cc 68014225 fetch 2 ,mem_5v_adc_hvin_data 
+68cd 243a68d0 nbranch adc_check_1v_hvin ,blank 
+68ce 58005932 setarg 0x5932 
+68cf 60014225 store 2 ,mem_5v_adc_hvin_data 
+
+adc_check_1v_hvin:
+68d0 6801421f fetch 2 ,mem_1v_adc_hvin_data 
+68d1 243a68d4 nbranch set_vdd_reference_voltage_4v ,blank 
+68d2 58004323 setarg 0x4323 
+68d3 6001421f store 2 ,mem_1v_adc_hvin_data 
+
+set_vdd_reference_voltage_4v:
+68d4 58000190 setarg 400 
+68d5 6001422b store 2 ,mem_reference_voltage 
+68d6 20600000 rtn 
+
+adc_init_data_io:
+68d7 68094229 fetcht 2 ,mem_otp_adc_flag 
+68d8 5800aa55 setarg otp_adc_flag 
+68d9 98467c00 isub temp ,null 
+68da 2022e8e0 branch adc_check_data_io ,zero 
+68db 58006946 setarg 0x6946 
+68dc 60014223 store 2 ,mem_1v_adc_io_data 
+68dd 58005377 setarg 0x5377 
+68de 6001421d store 2 ,mem_0_5_adc_io_data 
+68df 202068e8 branch set_vdd_reference_voltage_0_5v 
+
+adc_check_data_io:
+68e0 68014223 fetch 2 ,mem_1v_adc_io_data 
+68e1 243a68e4 nbranch adc_check_0_5v_io ,blank 
+68e2 58006946 setarg 0x6946 
+68e3 60014223 store 2 ,mem_1v_adc_io_data 
+
+adc_check_0_5v_io:
+68e4 6801421d fetch 2 ,mem_0_5_adc_io_data 
+68e5 243a68e8 nbranch set_vdd_reference_voltage_0_5v ,blank 
+68e6 58005377 setarg 0x5377 
+68e7 6001421d store 2 ,mem_0_5_adc_io_data 
+
+set_vdd_reference_voltage_0_5v:
+68e8 58000032 setarg 50 
+68e9 6001422b store 2 ,mem_reference_voltage 
+68ea 20600000 rtn 
+
+adc_set_mode:
+68eb 6800c22d fetch 1 ,mem_adc_config_flag 
+68ec c00068f0 beq adc_config_vinlpm ,adc_check_vinlpm 
+68ed c000e8f2 beq adc_config_hvin ,adc_check_hvin 
+68ee c00168f4 beq adc_config_gpio ,adc_check_gpio 
+68ef 20600000 rtn 
+
+adc_check_vinlpm:
+68f0 708971bf jam 0xbf ,rf_adc_mode 
+68f1 202068f8 branch read_adc 
+
+adc_check_hvin:
+68f2 708971af jam 0xaf ,rf_adc_mode 
+68f3 202068f8 branch read_adc 
+
+adc_check_gpio:
+68f4 7089718f jam 0x8f ,rf_adc_mode 
+68f5 6800c22e fetch 1 ,mem_adc_channel 
+68f6 60108973 hstore 1 ,rf_adc_ch 
+68f7 202068f8 branch read_adc 
+
+read_adc:
+68f8 474fc033 bpatchx patch33_7 ,mem_patch33 
+68f9 68108053 hfetch 1 ,core_uart_baud + 1 
+68fa 79207e07 set1 7 ,pdata 
+68fb 60108053 hstore 1 ,core_uart_baud + 1 
+68fc 68108973 hfetch 1 ,rf_adc_ch 
+68fd 1fe1fe30 or_into 0x30 ,pdata 
+68fe 60108973 hstore 1 ,rf_adc_ch 
+68ff 7089067c jam 0x7c ,rfen_adc 
+6900 708972aa jam 0xaa ,rf_adc_gc 
+6901 20001388 nop 5000 
+6902 68190150 hfetcht 2 ,core_adc_sum 
+6903 68108053 hfetch 1 ,core_uart_baud + 1 
+6904 793ffe07 set0 7 ,pdata 
+6905 60108053 hstore 1 ,core_uart_baud + 1 
+6906 6009422f storet 2 ,mem_adc_current_value 
+6907 20600000 rtn 
+
+vdd_calculate_by_mode:
+6908 47504034 bpatchx patch34_0 ,mem_patch34 
+6909 6800c22d fetch 1 ,mem_adc_config_flag 
+690a c000690e beq adc_config_vinlpm ,vdd_calculate_vinlpm 
+690b c000e912 beq adc_config_hvin ,vdd_calculate_hvin 
+690c c0016916 beq adc_config_gpio ,vdd_calculate_io 
+690d 20600000 rtn 
+
+vdd_calculate_vinlpm:
+690e 68014227 fetch 2 ,mem_3v_adc_vinlpm_data 
+690f 68094221 fetcht 2 ,mem_2v_adc_vinlpm_data 
+6910 da6000c8 arg 200 ,regc 
+6911 2020691a branch vdd_calculate 
+
+vdd_calculate_hvin:
+6912 68014225 fetch 2 ,mem_5v_adc_hvin_data 
+6913 6809421f fetcht 2 ,mem_1v_adc_hvin_data 
+6914 da600064 arg 100 ,regc 
+6915 2020691a branch vdd_calculate 
+
+vdd_calculate_io:
+6916 68014223 fetch 2 ,mem_1v_adc_io_data 
+6917 6809421d fetcht 2 ,mem_0_5_adc_io_data 
+6918 da600032 arg 50 ,regc 
+6919 2020691a branch vdd_calculate 
+
+vdd_calculate:
+691a 98462200 isub temp ,rega 
+691b 6801422f fetch 2 ,mem_adc_current_value 
+691c 98467e00 isub temp ,pdata 
+691d 24216927 nbranch vdd_calculate1 ,positive 
+691e 6809422b fetcht 2 ,mem_reference_voltage 
+691f 984fa400 imul32 temp ,regb 
+6920 1a627e00 copy regc ,pdata 
+6921 9a2ffe00 imul32 rega ,pdata 
+6922 9a40fe00 iadd regb ,pdata 
+
+vdd_calculate2:
+6923 9a26fc00 idiv rega 
+6924 20407f86 call wait_div_end 
+6925 1807fe00 quotient pdata 
+6926 20600000 rtn 
+
+vdd_calculate1:
+6927 18427e00 copy temp ,pdata 
+6928 6809422f fetcht 2 ,mem_adc_current_value 
+6929 98467e00 isub temp ,pdata 
+692a 6809422b fetcht 2 ,mem_reference_voltage 
+692b 984fa400 imul32 temp ,regb 
+692c 1a627e00 copy regc ,pdata 
+692d 9a2ffe00 imul32 rega ,pdata 
+692e 9a467e00 isub regb ,pdata 
+692f 20206923 branch vdd_calculate2 
+
+adc_bat_percent_lowpower_out:
+6930 ea240000 ifetch 8 ,rega 
+6931 60040a9a store 8 ,mem_pdatatemp 
+6932 68010a9a fetch 2 ,mem_pdatatemp 
+6933 68090a9c fetcht 2 ,mem_pdatatemp + 2 
+6934 98462200 isub temp ,rega 
+6935 68010aa0 fetch 2 ,mem_pdatatemp + 6 
+6936 98462400 isub temp ,regb 
+6937 68090a9e fetcht 2 ,mem_pdatatemp + 4 
+6938 98467c00 isub temp ,null 
+6939 24416940 ncall adc_set_low_power_flag ,positive 
+693a 1a4ffe64 mul32 regb ,100 ,pdata 
+693b 9a26fc00 idiv rega 
+693c 20407f86 call wait_div_end 
+693d 1807fe00 quotient pdata 
+693e 205a6944 call adc_set_no_power_flag ,blank 
+693f 20600000 rtn 
+
+adc_set_low_power_flag:
+6940 6800c231 fetch 1 ,mem_adc_power_flag 
+6941 79207e00 set1 0 ,pdata 
+6942 6000c231 store 1 ,mem_adc_power_flag 
+6943 20600000 rtn 
+
+adc_set_no_power_flag:
+6944 6808c231 fetcht 1 ,mem_adc_power_flag 
+6945 79200401 set1 1 ,temp 
+6946 6008c231 storet 1 ,mem_adc_power_flag 
+6947 20600000 rtn 
+
+keyscan_key_init:
+6948 6801423d fetch 2 ,mem_key_num_ptr 
+6949 efe08000 ifetch 1 ,pdata 
+
+keyscan_key_init_next:
+694a 207a0000 rtn blank 
+694b 1fe27200 copy pdata ,loopcnt 
+694c 6801423d fetch 2 ,mem_keyscan_ptr 
+694d 1fe0fe03 increase 3 ,pdata 
+694e 1fe22200 copy pdata ,rega 
+
+keyscan_key_init_lp1:
+694f ea288000 ifetcht 1 ,rega 
+6950 204067fb call gpio_config_input 
+6951 1a20a201 increase key_conf_struct_len ,rega 
+6952 c200694f loop keyscan_key_init_lp1 
+
+keyscan_key_init_end:
+6953 20600000 rtn 
+
+keyscan_scan_key:
+6954 6801423d fetch 2 ,mem_keyscan_ptr 
+6955 1fe0fe03 increase 3 ,pdata 
+6956 1fe22200 copy pdata ,rega 
+6957 18002400 force 0 ,regb 
+6958 700b1200 jam 0 ,mem_key_value_temp 
+
+keyscan_scan_key_lp1:
+6959 ea288000 ifetcht 1 ,rega 
+695a 2040681d call gpio_get_bit 
+695b 4750c034 bpatchx patch34_1 ,mem_patch34 
+695c 68010b12 fetch 2 ,mem_key_value_temp 
+695d 1a420e00 copy regb ,queue 
+695e f920fe00 qsetflag true ,pdata 
+695f 60010b12 store 2 ,mem_key_value_temp 
+6960 1a20a201 increase key_conf_struct_len ,rega 
+6961 1a40a401 increase 1 ,regb 
+6962 6801423d fetch 2 ,mem_key_num_ptr 
+6963 efe08000 ifetch 1 ,pdata 
+
+keyscan_scan_key_lp1_next:
+6964 9a42fc00 ixor regb ,null 
+6965 2422e959 nbranch keyscan_scan_key_lp1 ,zero 
+6966 68010b12 fetch 2 ,mem_key_value_temp 
+6967 68090b14 fetcht 2 ,mem_key_value 
+6968 9842fc00 ixor temp ,null 
+6969 20628000 rtn zero 
+696a 78347c00 enable user 
+696b 20600000 rtn 
+
+keyscan_process_lpm_before:
+696c 6801423d fetch 2 ,mem_key_num_ptr 
+696d efe08000 ifetch 1 ,pdata 
+
+keyscan_process_lpm_before_next:
+696e 207a0000 rtn blank 
+696f 1fe27200 copy pdata ,loopcnt 
+6970 6801423d fetch 2 ,mem_keyscan_ptr 
+6971 1fe0fe03 increase 3 ,pdata 
+6972 1fe22200 copy pdata ,rega 
+
+keyscan_process_lpm_before_lp1:
+6973 ea288000 ifetcht 1 ,rega 
+6974 204067dd call gpio_set_wake_by_current_state 
+6975 1a20a201 increase key_conf_struct_len ,rega 
+6976 c2006973 loop keyscan_process_lpm_before_lp1 
+
+keyscan_process_lpm_before_end:
+6977 20600000 rtn 
+
+keyscan_key_process:
+6978 d8e00009 arg key_scan_timer ,queue 
+6979 20407f16 call timer_check 
+697a 247a0000 nrtn blank 
+697b 58000020 setarg 0x20 
+697c d8e00009 arg key_scan_timer ,queue 
+697d 20407f08 call timer_init 
+697e 78547c00 disable user 
+697f 2040696c call keyscan_process_lpm_before 
+6980 47514034 bpatchx patch34_2 ,mem_patch34 
+6981 6801423d fetch 2 ,mem_key_num_ptr 
+6982 efe08000 ifetch 1 ,pdata 
+
+keyscan_key_process_next:
+6983 207a0000 rtn blank 
+6984 20406954 call keyscan_scan_key 
+6985 24347d02 nbranch lpm_button_clean_wake_lock ,user 
+6986 20407d00 call lpm_button_get_wake_lock 
+6987 78547c00 disable user 
+6988 68010b12 fetch 2 ,mem_key_value_temp 
+6989 60010b19 store 2 ,mem_key_value_temp4 
+698a 700b1b00 jam 0 ,mem_key_value_temp6 
+698b 18000e00 force 0 ,queue 
+
+keyscan_key_lp1:
+698c 68010b14 fetch 2 ,mem_key_value 
+698d 1fe30400 rshift pdata ,temp 
+698e 60090b14 storet 2 ,mem_key_value 
+698f 1fe17e01 and pdata ,0x01 ,pdata 
+6990 68090b19 fetcht 2 ,mem_key_value_temp4 
+6991 18412201 and temp ,0x01 ,rega 
+6992 18430400 rshift temp ,temp 
+6993 60090b19 storet 2 ,mem_key_value_temp4 
+6994 9a22fc00 ixor rega ,null 
+6995 2442e9a1 ncall keyscan_send_key_data ,zero 
+6996 6801423d fetch 2 ,mem_key_num_ptr 
+6997 efe08000 ifetch 1 ,pdata 
+
+keyscan_key_lp1_next:
+6998 68088b1b fetcht 1 ,mem_key_value_temp6 
+6999 18408401 increase 1 ,temp 
+699a 60088b1b storet 1 ,mem_key_value_temp6 
+699b 18420e00 copy temp ,queue 
+699c 98e2fc00 ixor queue ,null 
+699d 2422e98c nbranch keyscan_key_lp1 ,zero 
+699e 68010b12 fetch 2 ,mem_key_value_temp 
+699f 60010b14 store 2 ,mem_key_value 
+69a0 20600000 rtn 
+
+keyscan_send_key_data:
+69a1 4751c034 bpatchx patch34_3 ,mem_patch34 
+69a2 6801423d fetch 2 ,mem_keyscan_ptr 
+69a3 1fe0fe01 increase 1 ,pdata 
+69a4 efe10000 ifetch 2 ,pdata 
+69a5 20207f9c branch callback_func 
+
+pwm_init:
+69a6 68108042 hfetch 1 ,core_clksel 
+69a7 9a21fe00 ior rega ,pdata 
+69a8 60108042 hstore 1 ,core_clksel 
+69a9 68110050 hfetch 2 ,core_clkoff 
+69aa 793ffe0d set0 clock_off_pwm ,pdata 
+69ab 60110050 hstore 2 ,core_clkoff 
+69ac 20000064 nop 100 
+69ad 20600000 rtn 
+
+pwm_out_set:
+69ae 68098a9c fetcht 3 ,mem_pdatatemp + 2 
+69af 58b71b00 setarg pwm_12mhz 
+69b0 9846fc00 idiv temp 
+69b1 20407f86 call wait_div_end 
+69b2 18078400 quotient temp 
+69b3 68008a9f fetch 1 ,mem_pdatatemp + 5 
+69b4 984ffe00 imul32 temp ,pdata 
+69b5 1fe6fc64 div pdata ,100 
+69b6 20407f86 call wait_div_end 
+69b7 1807a200 quotient rega 
+69b8 18427e00 copy temp ,pdata 
+69b9 9a262400 isub rega ,regb 
+69ba 68008a9b fetch 1 ,mem_pdatatemp + 1 
+69bb 204069be call pwm_duty_cycle_set 
+69bc 68008a9a fetch 1 ,mem_pdatatemp 
+69bd 202069d5 branch pwm_enable 
+
+pwm_duty_cycle_set:
+69be c00069c4 beq 0 ,pwm_pwm0_duty_set 
+69bf c000e9c6 beq 1 ,pwm_pwm1_duty_set 
+69c0 c00169c8 beq 2 ,pwm_pwm2_duty_set 
+69c1 c001e9ca beq 3 ,pwm_pwm3_duty_set 
+69c2 c00269cc beq 4 ,pwm_pwm4_duty_set 
+69c3 c002e9ce beq 5 ,pwm_pwm5_duty_set 
+
+pwm_pwm0_duty_set:
+69c4 d8a080a0 arg core_pwm_pcnt0 ,contw 
+69c5 202069d0 branch pwm_set_pncnt 
+
+pwm_pwm1_duty_set:
+69c6 d8a080a4 arg core_pwm_pcnt1 ,contw 
+69c7 202069d0 branch pwm_set_pncnt 
+
+pwm_pwm2_duty_set:
+69c8 d8a080a8 arg core_pwm_pcnt2 ,contw 
+69c9 202069d0 branch pwm_set_pncnt 
+
+pwm_pwm3_duty_set:
+69ca d8a08064 arg core_pwm_pcnt3 ,contw 
+69cb 202069d0 branch pwm_set_pncnt 
+
+pwm_pwm4_duty_set:
+69cc d8a08068 arg core_pwm_pcnt4 ,contw 
+69cd 202069d0 branch pwm_set_pncnt 
+
+pwm_pwm5_duty_set:
+69ce d8a0806c arg core_pwm_pcnt5 ,contw 
+69cf 202069d0 branch pwm_set_pncnt 
+
+pwm_set_pncnt:
+69d0 1a227e00 copy rega ,pdata 
+69d1 e0a10000 istore 2 ,contw 
+69d2 1a427e00 copy regb ,pdata 
+69d3 e0a10000 istore 2 ,contw 
+69d4 20600000 rtn 
+
+pwm_enable:
+69d5 78347c00 enable user 
+69d6 202069d8 branch pwm_gpio_set 
+
+pwm_disable:
+69d7 78547c00 disable user 
+
+pwm_gpio_set:
+69d8 c00269e3 beq 4 ,pwm_gpio4_set 
+69d9 c002e9e5 beq 5 ,pwm_gpio5_set 
+69da c00de9e7 beq 27 ,pwm_gpio27_set 
+69db c00e69e9 beq 28 ,pwm_gpio28_set 
+69dc c001e9eb beq 3 ,pwm_gpio3_set 
+69dd c00469ed beq 8 ,pwm_gpio8_set 
+69de c00a69ef beq 20 ,pwm_gpio20_set 
+69df c00ae9f1 beq 21 ,pwm_gpio21_set 
+69e0 c00b69f3 beq 22 ,pwm_gpio22_set 
+69e1 c00be9f5 beq 23 ,pwm_gpio23_set 
+69e2 20600000 rtn 
+
+pwm_gpio4_set:
+69e3 d8e00006 arg 6 ,queue 
+69e4 202069ff branch pwm_one_set_select 
+
+pwm_gpio5_set:
+69e5 d8e00007 arg 7 ,queue 
+69e6 202069ff branch pwm_one_set_select 
+
+pwm_gpio27_set:
+69e7 d8e00008 arg 8 ,queue 
+69e8 202069ff branch pwm_one_set_select 
+
+pwm_gpio28_set:
+69e9 d8e00009 arg 9 ,queue 
+69ea 202069ff branch pwm_one_set_select 
+
+pwm_gpio3_set:
+69eb d8e0000a arg 10 ,queue 
+69ec 202069ff branch pwm_one_set_select 
+
+pwm_gpio8_set:
+69ed d8e0000b arg 11 ,queue 
+69ee 202069ff branch pwm_one_set_select 
+
+pwm_gpio20_set:
+69ef d8e0000c arg 12 ,queue 
+69f0 20206a01 branch pwm_tw0_set_select 
+
+pwm_gpio21_set:
+69f1 d8e0000d arg 13 ,queue 
+69f2 20206a01 branch pwm_tw0_set_select 
+
+pwm_gpio22_set:
+69f3 d8e0000e arg 14 ,queue 
+69f4 20206a01 branch pwm_tw0_set_select 
+
+pwm_gpio23_set:
+69f5 d8e0000f arg 15 ,queue 
+69f6 20206a01 branch pwm_tw0_set_select 
+
+pwm_set_select:
+69f7 68110081 hfetch 2 ,core_gpio_sel1 
+69f8 f9347e00 qsetflag user ,pdata 
+69f9 60110081 hstore 2 ,core_gpio_sel1 
+69fa 1a220e00 copy rega ,queue 
+69fb 68108085 hfetch 1 ,core_gpio_key2 
+69fc f9347e00 qsetflag user ,pdata 
+69fd 60108085 hstore 1 ,core_gpio_key2 
+69fe 20600000 rtn 
+
+pwm_one_set_select:
+69ff 18e0a3fc add queue ,-4 ,rega 
+6a00 202069f7 branch pwm_set_select 
+
+pwm_tw0_set_select:
+6a01 18e0a3f6 add queue ,-10 ,rega 
+6a02 202069f7 branch pwm_set_select 
+
+rfcomm_init:
+6a03 20758000 rtn wake 
+6a04 70456700 jam 0 ,mem_rfcomm_send_more_pkt 
+6a05 7004ed03 jam bits9600 ,memremoterpnbitrate 
+6a06 7004ee03 jam databits8 ,memremoteprndatabits 
+6a07 7004f211 jam 0x11 ,memremoteprnxon 
+6a08 7004f313 jam 0x13 ,memremoteprnxoff 
+6a09 58000000 setarg 0 
+6a0a 600184ef store 3 ,memremoteprnstopbit 
+6a0b 6000c254 store 1 ,mem_spp_state 
+6a0c 70468100 jam 0 ,memui_reconnect_mode 
+
+rfcomm_init_spp:
+6a0d 47524034 bpatchx patch34_4 ,mem_patch34 
+6a0e 58000000 setarg 0 
+6a0f 6000c254 store 1 ,mem_spp_state 
+6a10 6000c564 store 1 ,mem_remote_spp_channel 
+6a11 6000c55d store 1 ,mem_pn_dlci 
+6a12 6800c56b fetch 1 ,mem_credit_flag 
+6a13 c000ea16 beq credit_enable ,rfcomm_init_spp_with_credit 
+6a14 70456950 jam 0x50 ,mem_credit_given 
+6a15 20600000 rtn 
+
+rfcomm_init_spp_with_credit:
+6a16 70456900 jam 0x00 ,mem_credit_given 
+6a17 20600000 rtn 
+
+set_cr_bit:
+6a18 18418402 or_into 0x02 ,temp 
+6a19 20600000 rtn 
+
+rfcomm_calculate_fcs_sabm:
+6a1a 18427e00 copy temp ,pdata 
+6a1b 1fedfe00 reverse pdata ,pdata 
+6a1c 6000c562 store 1 ,memfcstemp3 
+6a1d 18007e3f force ini_tx_sabm ,pdata 
+6a1e 1fedfe00 reverse pdata ,pdata 
+6a1f 6000c561 store 1 ,memfcstemp2 
+6a20 18007e01 force 0x01 ,pdata 
+6a21 1fedfe00 reverse pdata ,pdata 
+6a22 6000c560 store 1 ,memfcstemp1 
+6a23 20406a50 call caculate_fcs 
+6a24 18427e00 copy temp ,pdata 
+6a25 20600000 rtn 
+
+rfcomm_calculate_fcs_ua:
+6a26 1fedfe00 reverse pdata ,pdata 
+6a27 6000c562 store 1 ,memfcstemp3 
+6a28 18007e73 force rsp_tx_ua ,pdata 
+6a29 1fedfe00 reverse pdata ,pdata 
+6a2a 6000c561 store 1 ,memfcstemp2 
+6a2b 18007e01 force 0x01 ,pdata 
+6a2c 1fedfe00 reverse pdata ,pdata 
+6a2d 6000c560 store 1 ,memfcstemp1 
+6a2e 20206a50 branch caculate_fcs 
+
+rfcomm_calculate_fcs_dlci0:
+6a2f 6800c563 fetch 1 ,mem_rfcomm_initiator 
+6a30 203a6a33 branch rfcomm_calculate_fcs_dlci0_res ,blank 
+6a31 58000070 setarg 0x70 
+6a32 20600000 rtn 
+
+rfcomm_calculate_fcs_dlci0_res:
+6a33 580000aa setarg 0xaa 
+6a34 20600000 rtn 
+
+rfcomm_save_fcs_uih:
+6a35 1fedfe00 reverse pdata ,pdata 
+6a36 6000c562 store 1 ,memfcstemp3 
+6a37 18007eef force rsp_rx_uih ,pdata 
+6a38 20406a44 call caculate_uihdata_fcs 
+6a39 680904f7 fetcht 2 ,mem_contw_temp 
+6a3a 18420a00 copy temp ,contw 
+6a3b e0a08000 istore 1 ,contw 
+6a3c 18a20400 copy contw ,temp 
+6a3d 600904f7 storet 2 ,mem_contw_temp 
+6a3e 18007eff force rsp_rx_uih_wdata ,pdata 
+6a3f 20406a44 call caculate_uihdata_fcs 
+6a40 680904f7 fetcht 2 ,mem_contw_temp 
+6a41 18420a00 copy temp ,contw 
+6a42 e0a08000 istore 1 ,contw 
+6a43 20600000 rtn 
+
+caculate_uihdata_fcs:
+6a44 1fedfe00 reverse pdata ,pdata 
+6a45 6000c561 store 1 ,memfcstemp2 
+6a46 68014561 fetch 2 ,memfcstemp2 
+6a47 1fed7e00 lshift8 pdata ,pdata 
+6a48 600184f4 store 3 ,mem_mod2div_temp 
+6a49 da200107 arg 0x107 ,rega 
+6a4a da40000f arg 0xf ,regb 
+6a4b 20406a5d call mod2div 
+6a4c 1fe2fed7 xor_into 0xd7 ,pdata 
+6a4d 1fe47e00 invert pdata ,pdata 
+6a4e 1fedfe00 reverse pdata ,pdata 
+6a4f 20600000 rtn 
+
+caculate_fcs:
+6a50 6801c560 fetch 3 ,memfcstemp1 
+6a51 600184f4 store 3 ,mem_mod2div_temp 
+6a52 da200107 arg 0x107 ,rega 
+6a53 da40000f arg 0xf ,regb 
+6a54 20406a5d call mod2div 
+6a55 1fed7e00 lshift8 pdata ,pdata 
+6a56 da400007 arg 0x7 ,regb 
+6a57 20406a5d call mod2div 
+6a58 1fe2fe2b xor_into 0x2b ,pdata 
+6a59 1fe47e00 invert pdata ,pdata 
+6a5a 1fedfe00 reverse pdata ,pdata 
+6a5b 1fe20400 copy pdata ,temp 
+6a5c 20600000 rtn 
+
+mod2div:
+6a5d da600000 arg 0 ,regc 
+6a5e 1a427200 copy regb ,loopcnt 
+6a5f 20407e71 call right_shift_n 
+6a60 1fe20400 icopy temp 
+
+mod2div_loop:
+6a61 18427e00 copy temp ,pdata 
+6a62 1a63a600 lshift regc ,regc 
+6a63 c3046a66 bbit0 8 ,mod2div_not_enough_reduction 
+6a64 9a228400 ixor rega ,temp 
+6a65 1a60a601 increase 1 ,regc 
+
+mod2div_not_enough_reduction:
+6a66 18438400 lshift temp ,temp 
+6a67 680184f4 fetch 3 ,mem_mod2div_temp 
+6a68 1a40a5ff increase -1 ,regb 
+6a69 2a41feff compare 0xff ,regb ,0xff 
+6a6a 2020ea70 branch mod2div_end ,true 
+6a6b 1a427200 copy regb ,loopcnt 
+6a6c 20407e71 call right_shift_n 
+6a6d 2feffe00 isolate1 0 ,pdata 
+6a6e 79208400 setflag true ,0 ,temp 
+6a6f 20206a61 branch mod2div_loop 
+
+mod2div_end:
+6a70 18437e00 rshift temp ,pdata 
+6a71 20600000 rtn 
+
+get_rfcomm_snd_adss:
+6a72 6808c55d fetcht 1 ,mem_pn_dlci 
+
+dlci_to_address_cmd:
+6a73 184b8400 lshift2 temp ,temp 
+6a74 79200400 set1 rfcomm_address_ext_len ,temp 
+6a75 6800c563 fetch 1 ,mem_rfcomm_initiator 
+6a76 245a6a18 ncall set_cr_bit ,blank 
+6a77 6008850d storet 1 ,mem_rfcomm_send_adss 
+6a78 20600000 rtn 
+
+channel_to_dlci:
+6a79 18438400 lshift temp ,temp 
+6a7a 6800c563 fetch 1 ,mem_rfcomm_initiator 
+6a7b 793a0400 setflag blank ,0 ,temp 
+6a7c 20600000 rtn 
+
+rfcomm_rx_process_dlci0_sabm:
+6a7d 680884fc fetcht 1 ,mem_current_channel 
+6a7e 7004fed7 jam 0xd7 ,mem_current_fcs 
+6a7f 20406bb6 call rfcomm_send_ua 
+6a80 6800c251 fetch 1 ,mem_rfcomm_state 
+6a81 79207e06 set1 l2cap_channel_rfcomm_only_sabm ,pdata 
+6a82 79207e07 set1 l2cap_channel_rfcomm_only_ua ,pdata 
+6a83 6000c251 store 1 ,mem_rfcomm_state 
+6a84 70456300 jam 0 ,mem_rfcomm_initiator 
+6a85 20206b97 branch rfcomm_rx_process_end 
+
+rfcomm_rx_process_dlci0_ua:
+6a86 6800c251 fetch 1 ,mem_rfcomm_state 
+6a87 79207e07 set1 l2cap_channel_rfcomm_only_ua ,pdata 
+6a88 6000c251 store 1 ,mem_rfcomm_state 
+6a89 20206b97 branch rfcomm_rx_process_end 
+
+rfcomm_rx_process:
+6a8a 4752c034 bpatchx patch34_5 ,mem_patch34 
+6a8b 6800c681 fetch 1 ,memui_reconnect_mode 
+6a8c c0006a8e beq no_reconnection ,rfcomm_rx_process_remote_page 
+6a8d 20206b4c branch rfcomm_rx_process_reconn 
+
+rfcomm_rx_process_remote_page:
+6a8e 68010264 fetch 2 ,mem_l2cap_payload_ptr 
+6a8f 1fe20c00 copy pdata ,contr 
+6a90 20406ab8 call get_rfcomm_head_struct 
+6a91 680084fc fetch 1 ,mem_current_channel 
+6a92 c0006a94 beq 0 ,parse_dlci0_rp 
+6a93 20206b18 branch parse_uih_rp 
+
+parse_dlci0_rp:
+6a94 47534034 bpatchx patch34_6 ,mem_patch34 
+6a95 680084fd fetch 1 ,mem_current_frame_type 
+6a96 c01fea7d beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm 
+6a97 c039ea86 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua 
+6a98 c077ea9b beq rfcomm_frame_type_uih ,parse_dlci0_rp_uih 
+6a99 c029eb44 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn_send_event 
+6a9a 20600000 rtn 
+
+parse_dlci0_rp_uih:
+6a9b 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr 
+6a9c 1fe20c00 copy pdata ,contr 
+6a9d 20406ac3 call get_rfcomm_uih_head_struct 
+6a9e 68008503 fetch 1 ,mem_uih_cmd_type 
+6a9f c020eaa5 beq uih_param_neg_cmd ,parse_dlci0_rp_uih_pn_cmd 
+6aa0 c0206aad beq uih_param_neg_res ,parse_dlci0_rp_uih_pn_res 
+6aa1 c038eae6 beq uih_modem_status_cmd ,parse_dlci0_rp_uih_ms_cmd 
+6aa2 c0386af2 beq uih_modem_status_res ,parse_dlci0_rp_uih_ms_res 
+6aa3 c024eafd beq uih_param_cmd_remove_port ,parse_dlci0_rp_uih_cmd_port 
+6aa4 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_rp_uih_pn_cmd:
+6aa5 20406aaf call parse_dlci0_rp_uih_pn_res_common 
+6aa6 20206aa7 branch parse_dlci0_rp_uih_pn_cmd_spp 
+
+parse_dlci0_rp_uih_pn_cmd_spp:
+6aa7 6800c254 fetch 1 ,mem_spp_state 
+6aa8 79207e00 set1 rfcomm_channel_state_pn_cmd ,pdata 
+6aa9 79207e01 set1 rfcomm_channel_state_pn_res ,pdata 
+6aaa 6000c254 store 1 ,mem_spp_state 
+6aab 20406be0 call rfcomm_send_param_neg_res 
+6aac 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_rp_uih_pn_res:
+6aad 20406aaf call parse_dlci0_rp_uih_pn_res_common 
+6aae 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_rp_uih_pn_res_common:
+6aaf 20406acb call get_param_payload_ptr 
+6ab0 20206ad7 branch get_rfcomm_prarmer_negotiation 
+
+get_rfcomm_param_modem_status:
+6ab1 20406acb call get_param_payload_ptr 
+6ab2 e8c08000 ifetch 1 ,contr 
+6ab3 1fe97e00 rshift3 pdata ,pdata 
+6ab4 6000c56a store 1 ,mem_ms_channel 
+6ab5 e8c08000 ifetch 1 ,contr 
+6ab6 60008508 store 1 ,mem_ms_param 
+6ab7 20600000 rtn 
+
+get_rfcomm_head_struct:
+6ab8 e8c08000 ifetch 1 ,contr 
+6ab9 600084fb store 1 ,mem_current_adss 
+6aba 1fe97e00 rshift3 pdata ,pdata 
+6abb 600084fc store 1 ,mem_current_channel 
+6abc e8c08000 ifetch 1 ,contr 
+6abd 600084fd store 1 ,mem_current_frame_type 
+
+get_rfcomm_current_length:
+6abe 20406ace call get_rfcomm_length_common 
+6abf 600904ff storet 2 ,mem_current_length 
+6ac0 18c27e00 copy contr ,pdata 
+6ac1 60010501 store 2 ,mem_rfcomm_uih_payload_ptr 
+6ac2 20600000 rtn 
+
+get_rfcomm_uih_head_struct:
+6ac3 e8c08000 ifetch 1 ,contr 
+6ac4 1fe37e00 rshift pdata ,pdata 
+6ac5 60008503 store 1 ,mem_uih_cmd_type 
+6ac6 20406ace call get_rfcomm_length_common 
+6ac7 60090504 storet 2 ,mem_uih_length 
+6ac8 18c27e00 copy contr ,pdata 
+6ac9 60010506 store 2 ,mem_param_payload_ptr 
+6aca 20600000 rtn 
+
+get_param_payload_ptr:
+6acb 68010506 fetch 2 ,mem_param_payload_ptr 
+6acc 1fe20c00 copy pdata ,contr 
+6acd 20600000 rtn 
+
+get_rfcomm_length_common:
+6ace e8c08000 ifetch 1 ,contr 
+6acf 1fe20400 copy pdata ,temp 
+6ad0 18430400 rshift temp ,temp 
+6ad1 c3800000 rtnbit1 0 
+6ad2 e8c08000 ifetch 1 ,contr 
+6ad3 1fe9fe00 lshift3 pdata ,pdata 
+6ad4 1ff27e00 lshift4 pdata ,pdata 
+6ad5 98408400 iadd temp ,temp 
+6ad6 20600000 rtn 
+
+get_rfcomm_prarmer_negotiation:
+6ad7 e8c08000 ifetch 1 ,contr 
+6ad8 6000c55d store 1 ,mem_pn_dlci 
+6ad9 e8c08000 ifetch 1 ,contr 
+6ada 60008509 store 1 ,mem_pn_credit_flow_type_info 
+6adb e8c08000 ifetch 1 ,contr 
+6adc 6000850a store 1 ,mem_pn_priority 
+6add e8c08000 ifetch 1 ,contr 
+6ade 6000850b store 1 ,mem_pn_acknowledg_timer 
+6adf e8c10000 ifetch 2 ,contr 
+6ae0 6001455e store 2 ,mem_pn_max_frame_size 
+6ae1 e8c08000 ifetch 1 ,contr 
+6ae2 6000850c store 1 ,mem_pn_max_retrans 
+6ae3 e8c08000 ifetch 1 ,contr 
+6ae4 6000c568 store 1 ,mem_remote_credits 
+6ae5 20600000 rtn 
+
+parse_dlci0_rp_uih_ms_cmd:
+6ae6 20406ab1 call get_rfcomm_param_modem_status 
+6ae7 20206ae8 branch parse_dlci0_rp_uih_ms_cmd_spp 
+
+parse_dlci0_rp_uih_ms_cmd_spp:
+6ae8 6800c254 fetch 1 ,mem_spp_state 
+6ae9 79207e05 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata 
+6aea 79207e06 set1 rfcomm_channel_state_snd_ms_res ,pdata 
+6aeb 6000c254 store 1 ,mem_spp_state 
+6aec 6808c55d fetcht 1 ,mem_pn_dlci 
+6aed 184b8400 lshift2 temp ,temp 
+6aee 18418403 or_into 3 ,temp 
+6aef 20406c11 call rfcomm_send_modem_status_res 
+6af0 70456703 jam more_pkt_msc_cmd_spp ,mem_rfcomm_send_more_pkt 
+6af1 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_rp_uih_ms_res:
+6af2 700a9908 jam bt_evt_spp_connected ,mem_fifo_temp 
+6af3 20407d86 call ui_ipc_send_event 
+6af4 20406ab1 call get_rfcomm_param_modem_status 
+6af5 6800c56a fetch 1 ,mem_ms_channel 
+6af6 1fe67c01 sub pdata ,1 ,null 
+6af7 2022eaf9 branch parse_dlci0_rp_uih_ms_res_spp ,zero 
+6af8 20202a8c branch assert 
+
+parse_dlci0_rp_uih_ms_res_spp:
+6af9 6800c254 fetch 1 ,mem_spp_state 
+6afa 79207e07 set1 rfcomm_channel_state_rcv_ms_res ,pdata 
+6afb 6000c254 store 1 ,mem_spp_state 
+6afc 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_rp_uih_cmd_port:
+6afd 20406acb call get_param_payload_ptr 
+6afe e8c08000 ifetch 1 ,contr 
+6aff 60008ac2 store 1 ,mem_rpn_dlci 
+6b00 204052d2 call l2cap_malloc_rfcomm_channel 
+6b01 204052e0 call l2cap_get_rfcomm_tx_buff 
+6b02 5800000e setarg 0x000e 
+6b03 e0a10000 istore 2 ,contw 
+6b04 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6b05 e0a10000 istore 2 ,contw 
+6b06 6800c563 fetch 1 ,mem_rfcomm_initiator 
+6b07 1fe3fe00 lshift pdata ,pdata 
+6b08 79207e00 set1 0 ,pdata 
+6b09 e0a08000 istore 1 ,contw 
+6b0a 4753c034 bpatchx patch34_7 ,mem_patch34 
+6b0b 580015ef setarg 0x15ef 
+6b0c e0a10000 istore 2 ,contw 
+6b0d 58001191 setarg 0x1191 
+6b0e e0a10000 istore 2 ,contw 
+6b0f 68008ac2 fetch 1 ,mem_rpn_dlci 
+6b10 e0a08000 istore 1 ,contw 
+6b11 58000007 setarg 0x000007 
+6b12 e0a28000 istore 5 ,contw 
+6b13 58000001 setarg 0x01 
+6b14 e0a10000 istore 2 ,contw 
+6b15 20406a2f call rfcomm_calculate_fcs_dlci0 
+6b16 e0a08000 istore 1 ,contw 
+6b17 20600000 rtn 
+
+parse_uih_rp:
+6b18 20206b19 branch parse_uih_rp_spp 
+
+parse_uih_rp_spp:
+6b19 47544035 bpatchx patch35_0 ,mem_patch35 
+6b1a 680084fd fetch 1 ,mem_current_frame_type 
+6b1b c039eb21 beq rfcomm_frame_type_ua ,parse_uih_rp_spp_ua 
+6b1c c01feb25 beq rfcomm_frame_type_sabm ,parse_uih_rp_spp_sabm 
+6b1d c077eb3f beq rfcomm_frame_type_uih ,parse_uih_spp_uih 
+6b1e c07feb37 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits 
+6b1f c029eb46 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn 
+6b20 20600000 rtn 
+
+parse_uih_rp_spp_ua:
+6b21 6800c254 fetch 1 ,mem_spp_state 
+6b22 79207e03 set1 rfcomm_channel_state_ua ,pdata 
+6b23 6000c254 store 1 ,mem_spp_state 
+6b24 20206b97 branch rfcomm_rx_process_end 
+
+parse_uih_rp_spp_sabm:
+6b25 6800c254 fetch 1 ,mem_spp_state 
+6b26 79207e03 set1 rfcomm_channel_state_ua ,pdata 
+6b27 79207e02 set1 rfcomm_channel_state_sabm ,pdata 
+6b28 6000c254 store 1 ,mem_spp_state 
+6b29 680084fb fetch 1 ,mem_current_adss 
+6b2a 20406a26 call rfcomm_calculate_fcs_ua 
+6b2b 600084fe store 1 ,mem_current_fcs 
+6b2c 20406bb6 call rfcomm_send_ua 
+6b2d 680084fb fetch 1 ,mem_current_adss 
+6b2e 1feb7e00 rshift2 pdata ,pdata 
+6b2f 6000c55d store 1 ,mem_pn_dlci 
+6b30 1febfe00 lshift2 pdata ,pdata 
+6b31 793ffe01 set0 rfcomm_address_cr ,pdata 
+6b32 79207e00 set1 rfcomm_address_ext_len ,pdata 
+6b33 d8404565 arg mem_hiufcs_spp ,temp 
+6b34 600904f7 storet 2 ,mem_contw_temp 
+6b35 20406a35 call rfcomm_save_fcs_uih 
+6b36 20206b97 branch rfcomm_rx_process_end 
+
+parse_uih_spp_uih_credits:
+6b37 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr 
+6b38 1fe20c00 copy pdata ,contr 
+6b39 1fe0fe01 increase 1 ,pdata 
+6b3a 60010501 store 2 ,mem_rfcomm_uih_payload_ptr 
+6b3b e8c08000 ifetch 1 ,contr 
+6b3c 6808c568 fetcht 1 ,mem_remote_credits 
+6b3d 9840fe00 iadd temp ,pdata 
+6b3e 6000c568 store 1 ,mem_remote_credits 
+
+parse_uih_spp_uih:
+6b3f 20406c42 call rfcomm_increase_credit_given 
+
+parse_uih_spp_uih_cont:
+6b40 20406a72 call get_rfcomm_snd_adss 
+6b41 20406c28 call rfcomm_send_uih_without_payload 
+6b42 20406c4b call spp_process_rx_data 
+6b43 20206b97 branch rfcomm_rx_process_end 
+
+parse_uih_rp_spp_disconn_send_event:
+6b44 700a9909 jam bt_evt_spp_disconnected ,mem_fifo_temp 
+6b45 20407d86 call ui_ipc_send_event 
+
+parse_uih_rp_spp_disconn:
+6b46 20406a0d call rfcomm_init_spp 
+6b47 680084fb fetch 1 ,mem_current_adss 
+6b48 20406a26 call rfcomm_calculate_fcs_ua 
+6b49 600084fe store 1 ,mem_current_fcs 
+6b4a 20406bb6 call rfcomm_send_ua 
+6b4b 20206b97 branch rfcomm_rx_process_end 
+
+rfcomm_rx_process_reconn:
+6b4c 68010264 fetch 2 ,mem_l2cap_payload_ptr 
+6b4d 1fe20c00 copy pdata ,contr 
+6b4e 20406ab8 call get_rfcomm_head_struct 
+6b4f 680084fc fetch 1 ,mem_current_channel 
+6b50 c0006b52 beq 0 ,parse_dlci0_reconn 
+6b51 20206b86 branch parse_uih_reconn 
+
+parse_dlci0_reconn:
+6b52 4754c035 bpatchx patch35_1 ,mem_patch35 
+6b53 680084fd fetch 1 ,mem_current_frame_type 
+6b54 c01fea7d beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm 
+6b55 c039ea86 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua 
+6b56 c077eb58 beq rfcomm_frame_type_uih ,parse_dlci0_reconn_uih 
+6b57 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_reconn_uih:
+6b58 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr 
+6b59 1fe20c00 copy pdata ,contr 
+6b5a 20406ac3 call get_rfcomm_uih_head_struct 
+6b5b 68008503 fetch 1 ,mem_uih_cmd_type 
+6b5c c020eb61 beq uih_param_neg_cmd ,parse_dlci0_reconn_uih_pn_cmd 
+6b5d c0206b61 beq uih_param_neg_res ,parse_dlci0_reconn_uih_pn_cmd 
+6b5e c038eb6c beq uih_modem_status_cmd ,parse_dlci0_reconn_uih_ms_cmd 
+6b5f c0386b7c beq uih_modem_status_res ,parse_dlci0_reconn_uih_ms_res 
+6b60 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_reconn_uih_pn_cmd:
+6b61 20406aaf call parse_dlci0_rp_uih_pn_res_common 
+6b62 6800c55d fetch 1 ,mem_pn_dlci 
+6b63 1fe37e00 rshift pdata ,pdata 
+6b64 6808c564 fetcht 1 ,mem_remote_spp_channel 
+6b65 98467c00 isub temp ,null 
+6b66 2022eb68 branch parse_dlci0_reconn_uih_pn_cmd_spp ,zero 
+6b67 20202a8c branch assert 
+
+parse_dlci0_reconn_uih_pn_cmd_spp:
+6b68 6800c254 fetch 1 ,mem_spp_state 
+6b69 79207e01 set1 rfcomm_channel_state_pn_res ,pdata 
+6b6a 6000c254 store 1 ,mem_spp_state 
+6b6b 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_reconn_uih_ms_cmd:
+6b6c 20406ab1 call get_rfcomm_param_modem_status 
+6b6d 6800c56a fetch 1 ,mem_ms_channel 
+6b6e 6808c564 fetcht 1 ,mem_remote_spp_channel 
+6b6f 98467c00 isub temp ,null 
+6b70 2022eb73 branch parse_dlci0_reconn_uih_ms_cmd_spp ,zero 
+6b71 20202a8c branch assert 
+6b72 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_reconn_uih_ms_cmd_spp:
+6b73 6800c254 fetch 1 ,mem_spp_state 
+6b74 79207e05 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata 
+6b75 79207e06 set1 rfcomm_channel_state_snd_ms_res ,pdata 
+6b76 6000c254 store 1 ,mem_spp_state 
+6b77 6808c55d fetcht 1 ,mem_pn_dlci 
+6b78 184b8400 lshift2 temp ,temp 
+6b79 18418403 or_into 3 ,temp 
+6b7a 20406c11 call rfcomm_send_modem_status_res 
+6b7b 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_reconn_uih_ms_res:
+6b7c 20406ab1 call get_rfcomm_param_modem_status 
+6b7d 6800c56a fetch 1 ,mem_ms_channel 
+6b7e 6808c564 fetcht 1 ,mem_remote_spp_channel 
+6b7f 98467c00 isub temp ,null 
+6b80 2022eb82 branch parse_dlci0_reconn_uih_ms_res_spp ,zero 
+6b81 20202a8c branch assert 
+
+parse_dlci0_reconn_uih_ms_res_spp:
+6b82 6800c254 fetch 1 ,mem_spp_state 
+6b83 79207e07 set1 rfcomm_channel_state_rcv_ms_res ,pdata 
+6b84 6000c254 store 1 ,mem_spp_state 
+6b85 20206b97 branch rfcomm_rx_process_end 
+
+parse_uih_reconn:
+6b86 680084fc fetch 1 ,mem_current_channel 
+6b87 6808c564 fetcht 1 ,mem_remote_spp_channel 
+6b88 98467c00 isub temp ,null 
+6b89 2022eb8c branch parse_uih_reconn_spp ,zero 
+6b8a 20202a8c branch assert 
+6b8b 20206b97 branch rfcomm_rx_process_end 
+
+parse_uih_reconn_spp:
+6b8c 680084fd fetch 1 ,mem_current_frame_type 
+6b8d c039eb91 beq rfcomm_frame_type_ua ,parse_uih_reconn_spp_ua 
+6b8e c077eb3f beq rfcomm_frame_type_uih ,parse_uih_spp_uih 
+6b8f c07feb37 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits 
+6b90 c029eb96 beq rfcomm_frame_type_disconn ,parse_uih_reconn_spp_disconn 
+
+parse_uih_reconn_spp_ua:
+6b91 6800c254 fetch 1 ,mem_spp_state 
+6b92 79207e03 set1 rfcomm_channel_state_ua ,pdata 
+6b93 6000c254 store 1 ,mem_spp_state 
+6b94 20206b97 branch rfcomm_rx_process_end 
+
+parse_uih_reconn_spp_sabm:
+6b95 20206b95 branch parse_uih_reconn_spp_sabm 
+
+parse_uih_reconn_spp_disconn:
+6b96 20206b46 branch parse_uih_rp_spp_disconn 
+
+rfcomm_rx_process_end:
+6b97 20600000 rtn 
+
+rfcomm_send_more_pkt:
+6b98 6800c567 fetch 1 ,mem_rfcomm_send_more_pkt 
+6b99 207a0000 rtn blank 
+6b9a c001eb9c beq more_pkt_msc_cmd_spp ,rfcomm_send_more_pkt_msc_cmd_spp 
+6b9b 20202a8c branch assert 
+
+rfcomm_send_more_pkt_msc_cmd_spp:
+6b9c 70456700 jam 0 ,mem_rfcomm_send_more_pkt 
+6b9d 204052d2 call l2cap_malloc_rfcomm_channel 
+6b9e d8400001 arg spp_slave_channel ,temp 
+6b9f 6808c55d fetcht 1 ,mem_pn_dlci 
+6ba0 184b8400 lshift2 temp ,temp 
+
+rfcomm_send_more_pkt_msc_cmd_spp0:
+6ba1 18418403 or_into 0x03 ,temp 
+6ba2 da2000aa arg 0xaa ,rega 
+6ba3 20406bfc call rfcomm_send_modem_status_cmd 
+6ba4 204052e0 call l2cap_get_rfcomm_tx_buff 
+6ba5 18a20c00 copy contw ,contr 
+6ba6 e8c10000 ifetch 2 ,contr 
+6ba7 203a2a8c branch assert ,blank 
+6ba8 20600000 rtn 
+
+rfcomm_send_sabm:
+6ba9 204052e0 call l2cap_get_rfcomm_tx_buff 
+6baa 58000004 setarg 0x0004 
+6bab e0a10000 istore 2 ,contw 
+6bac 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6bad e0a10000 istore 2 ,contw 
+6bae 680084fb fetch 1 ,mem_current_adss 
+6baf e0a08000 istore 1 ,contw 
+6bb0 47554035 bpatchx patch35_2 ,mem_patch35 
+6bb1 5800013f setarg 0x013f 
+6bb2 e0a10000 istore 2 ,contw 
+6bb3 680084fe fetch 1 ,mem_current_fcs 
+6bb4 e0a08000 istore 1 ,contw 
+6bb5 20600000 rtn 
+
+rfcomm_send_ua:
+6bb6 204052d2 call l2cap_malloc_rfcomm_channel 
+6bb7 204052e0 call l2cap_get_rfcomm_tx_buff 
+6bb8 58000004 setarg 0x0004 
+6bb9 e0a10000 istore 2 ,contw 
+6bba 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6bbb e0a10000 istore 2 ,contw 
+6bbc 680084fb fetch 1 ,mem_current_adss 
+6bbd e0a08000 istore 1 ,contw 
+6bbe 4755c035 bpatchx patch35_3 ,mem_patch35 
+6bbf 58000173 setarg 0x0173 
+6bc0 e0a10000 istore 2 ,contw 
+6bc1 680084fe fetch 1 ,mem_current_fcs 
+6bc2 e0a08000 istore 1 ,contw 
+6bc3 20600000 rtn 
+
+rfcomm_send_param_neg_cmd:
+6bc4 204052e0 call l2cap_get_rfcomm_tx_buff 
+6bc5 5800000e setarg 0x000e 
+6bc6 e0a10000 istore 2 ,contw 
+6bc7 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6bc8 e0a10000 istore 2 ,contw 
+6bc9 6800c563 fetch 1 ,mem_rfcomm_initiator 
+6bca 1fe3fe00 lshift pdata ,pdata 
+6bcb 79207e00 set1 0 ,pdata 
+6bcc e0a08000 istore 1 ,contw 
+6bcd 47564035 bpatchx patch35_4 ,mem_patch35 
+6bce 580015ef setarg 0x15ef 
+6bcf e0a10000 istore 2 ,contw 
+6bd0 58001183 setarg 0x1183 
+6bd1 e0a10000 istore 2 ,contw 
+6bd2 18427e00 copy temp ,pdata 
+6bd3 e0a08000 istore 1 ,contw 
+6bd4 580000f0 setarg 0x0000f0 
+6bd5 e0a18000 istore 3 ,contw 
+6bd6 5800007f setarg rfcomm_max_frame_size 
+6bd7 e0a10000 istore 2 ,contw 
+6bd8 58000000 setarg 0 
+6bd9 e0a08000 istore 1 ,contw 
+6bda 58000001 setarg 0x01 
+6bdb e0a08000 istore 1 ,contw 
+6bdc 20406a2f call rfcomm_calculate_fcs_dlci0 
+6bdd e0a08000 istore 1 ,contw 
+6bde 70456910 jam 0x10 ,mem_credit_given 
+6bdf 20600000 rtn 
+
+rfcomm_send_param_neg_res:
+6be0 204052d2 call l2cap_malloc_rfcomm_channel 
+6be1 204052e0 call l2cap_get_rfcomm_tx_buff 
+6be2 5800000e setarg 0x000e 
+6be3 e0a10000 istore 2 ,contw 
+6be4 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6be5 e0a10000 istore 2 ,contw 
+6be6 6800c563 fetch 1 ,mem_rfcomm_initiator 
+6be7 1fe3fe00 lshift pdata ,pdata 
+6be8 79207e00 set1 0 ,pdata 
+6be9 e0a08000 istore 1 ,contw 
+6bea 4756c035 bpatchx patch35_5 ,mem_patch35 
+6beb 580015ef setarg 0x15ef 
+6bec e0a10000 istore 2 ,contw 
+6bed 58001181 setarg 0x1181 
+6bee e0a10000 istore 2 ,contw 
+6bef 6800c55d fetch 1 ,mem_pn_dlci 
+6bf0 e0a08000 istore 1 ,contw 
+6bf1 580000e0 setarg 0x0000e0 
+6bf2 e0a18000 istore 3 ,contw 
+6bf3 6801456c fetch 2 ,mem_rfcomm_max_frame_size 
+6bf4 e0a10000 istore 2 ,contw 
+6bf5 58000000 setarg 0x00 
+6bf6 e0a08000 istore 1 ,contw 
+6bf7 6800c56e fetch 1 ,mem_rfcomm_credit_init_data 
+6bf8 e0a08000 istore 1 ,contw 
+6bf9 20406a2f call rfcomm_calculate_fcs_dlci0 
+6bfa e0a08000 istore 1 ,contw 
+6bfb 20600000 rtn 
+
+rfcomm_send_modem_status_cmd:
+6bfc 204052e0 call l2cap_get_rfcomm_tx_buff 
+6bfd 58000008 setarg 0x0008 
+6bfe e0a10000 istore 2 ,contw 
+6bff 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6c00 e0a10000 istore 2 ,contw 
+6c01 6800c563 fetch 1 ,mem_rfcomm_initiator 
+6c02 1fe3fe00 lshift pdata ,pdata 
+6c03 79207e00 set1 0 ,pdata 
+6c04 e0a08000 istore 1 ,contw 
+6c05 47574035 bpatchx patch35_6 ,mem_patch35 
+6c06 580009ef setarg 0x09ef 
+6c07 e0a10000 istore 2 ,contw 
+6c08 580005e3 setarg 0x05e3 
+6c09 e0a10000 istore 2 ,contw 
+6c0a 18427e00 copy temp ,pdata 
+6c0b e0a08000 istore 1 ,contw 
+6c0c 5800008d setarg 0x8d 
+6c0d e0a08000 istore 1 ,contw 
+6c0e 20406a2f call rfcomm_calculate_fcs_dlci0 
+6c0f e0a08000 istore 1 ,contw 
+6c10 20600000 rtn 
+
+rfcomm_send_modem_status_res:
+6c11 204052d2 call l2cap_malloc_rfcomm_channel 
+6c12 204052e0 call l2cap_get_rfcomm_tx_buff 
+6c13 58000008 setarg 0x0008 
+6c14 e0a10000 istore 2 ,contw 
+6c15 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6c16 e0a10000 istore 2 ,contw 
+6c17 18421600 copy temp ,timeup 
+6c18 6800c563 fetch 1 ,mem_rfcomm_initiator 
+6c19 1fe3fe00 lshift pdata ,pdata 
+6c1a 79207e00 set1 0 ,pdata 
+6c1b e0a08000 istore 1 ,contw 
+6c1c 4757c035 bpatchx patch35_7 ,mem_patch35 
+6c1d 580009ef setarg 0x09ef 
+6c1e e0a10000 istore 2 ,contw 
+6c1f 580005e1 setarg 0x05e1 
+6c20 e0a10000 istore 2 ,contw 
+6c21 19627e00 copy timeup ,pdata 
+6c22 e0a08000 istore 1 ,contw 
+6c23 5800008d setarg 0x8d 
+6c24 e0a08000 istore 1 ,contw 
+6c25 20406a2f call rfcomm_calculate_fcs_dlci0 
+6c26 e0a08000 istore 1 ,contw 
+6c27 20600000 rtn 
+
+rfcomm_send_uih_without_payload:
+6c28 47584036 bpatchx patch36_0 ,mem_patch36 
+6c29 6800c569 fetch 1 ,mem_credit_given 
+6c2a 207a0000 rtn blank 
+6c2b 68110112 hfetch 2 ,core_uart_rxitems 
+6c2c 247a0000 nrtn blank 
+6c2d 1a227e00 copy rega ,pdata 
+6c2e 60008a9b store 1 ,mem_pdatatemp + 1 
+6c2f 60088a9a storet 1 ,mem_pdatatemp 
+6c30 2040526e call l2cap_malloc_is_fifo_full 
+6c31 247a0000 nrtn blank 
+6c32 204052d2 call l2cap_malloc_rfcomm_channel 
+6c33 204052e0 call l2cap_get_rfcomm_tx_buff 
+6c34 58000005 setarg 0x05 
+6c35 e0a10000 istore 2 ,contw 
+6c36 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6c37 e0a10000 istore 2 ,contw 
+6c38 6800850d fetch 1 ,mem_rfcomm_send_adss 
+6c39 e0a08000 istore 1 ,contw 
+6c3a 580001ff setarg 0x01ff 
+6c3b e0a10000 istore 2 ,contw 
+6c3c 6800c569 fetch 1 ,mem_credit_given 
+6c3d e0a08000 istore 1 ,contw 
+6c3e 6800c566 fetch 1 ,mem_hiufcs_spp_wcredits 
+6c3f e0a08000 istore 1 ,contw 
+6c40 70456900 jam 0 ,mem_credit_given 
+6c41 20600000 rtn 
+
+rfcomm_increase_credit_given:
+6c42 4758c036 bpatchx patch36_1 ,mem_patch36 
+6c43 6800c56b fetch 1 ,mem_credit_flag 
+6c44 c1008000 rtneq credit_enable 
+6c45 680104ff fetch 2 ,mem_current_length 
+6c46 207a0000 rtn blank 
+6c47 6800c569 fetch 1 ,mem_credit_given 
+6c48 1fe0fe01 increase 1 ,pdata 
+6c49 6000c569 store 1 ,mem_credit_given 
+6c4a 20600000 rtn 
+
+spp_process_rx_data:
+6c4b 6801456f fetch 2 ,mem_cb_receive_spp_data 
+6c4c 20207f9c branch callback_func 
+
+spp_tx_rfcomm_packet:
+6c4d 47594036 bpatchx patch36_2 ,mem_patch36 
+6c4e 6800c568 fetch 1 ,mem_remote_credits 
+6c4f 207a0000 rtn blank 
+6c50 1fe0ffff increase -1 ,pdata 
+6c51 6000c568 store 1 ,mem_remote_credits 
+6c52 6801455e fetch 2 ,mem_pn_max_frame_size 
+6c53 6809469f fetcht 2 ,mem_current_packet_length 
+6c54 98467c00 isub temp ,null 
+6c55 20216c57 branch ssp_tx_rfcomm_from_uart ,positive 
+6c56 6001469f store 2 ,mem_current_packet_length 
+
+ssp_tx_rfcomm_from_uart:
+6c57 6800c569 fetch 1 ,mem_credit_given 
+6c58 203a6c5f branch ssp_tx_rfcomm_from_uart_without_credit ,blank 
+6c59 70051001 jam 1 ,mem_rfcomm_send_offset 
+6c5a 6800c566 fetch 1 ,mem_hiufcs_spp_wcredits 
+6c5b 6000850f store 1 ,mem_rfcomm_send_fcs 
+6c5c 580000ff setarg rsp_rx_uih_wdata 
+6c5d 6000850e store 1 ,mem_rfcomm_send_frame_type 
+6c5e 20206c64 branch ssp_tx_rfcomm_from_uart_common 
+
+ssp_tx_rfcomm_from_uart_without_credit:
+6c5f 70051000 jam 0 ,mem_rfcomm_send_offset 
+6c60 6800c565 fetch 1 ,mem_hiufcs_spp 
+6c61 6000850f store 1 ,mem_rfcomm_send_fcs 
+6c62 580000ef setarg rsp_tx_uih 
+6c63 6000850e store 1 ,mem_rfcomm_send_frame_type 
+
+ssp_tx_rfcomm_from_uart_common:
+6c64 4759c036 bpatchx patch36_3 ,mem_patch36 
+6c65 6801469f fetch 2 ,mem_current_packet_length 
+6c66 1fe67c7f sub pdata ,127 ,null 
+6c67 20216c6b branch ssp_tx_rfcomm_from_uart_common0 ,positive 
+6c68 68008510 fetch 1 ,mem_rfcomm_send_offset 
+6c69 1fe0fe01 increase 1 ,pdata 
+6c6a 60008510 store 1 ,mem_rfcomm_send_offset 
+
+ssp_tx_rfcomm_from_uart_common0:
+6c6b 20406a72 call get_rfcomm_snd_adss 
+6c6c 6801469f fetch 2 ,mem_current_packet_length 
+6c6d 1fe0fe08 increase 8 ,pdata 
+6c6e 68088510 fetcht 1 ,mem_rfcomm_send_offset 
+6c6f 9840a200 iadd temp ,rega 
+6c70 20405240 call l2cap_malloc 
+6c71 60010277 store 2 ,mem_rfcomm_tx_buff_ptr 
+6c72 1fe0fe04 increase 4 ,pdata 
+6c73 60010279 store 2 ,mem_rfcomm_tx_payload_ptr 
+6c74 1fe20a00 copy pdata ,contw 
+6c75 6800850d fetch 1 ,mem_rfcomm_send_adss 
+6c76 e0a08000 istore 1 ,contw 
+6c77 6800850e fetch 1 ,mem_rfcomm_send_frame_type 
+6c78 e0a08000 istore 1 ,contw 
+6c79 20406c95 call ssp_tx_write_length 
+6c7a 20406ca6 call ssp_tx_write_given_credit 
+6c7b 475a4036 bpatchx patch36_4 ,mem_patch36 
+6c7c 68014571 fetch 2 ,mem_nl_rx_data_src 
+6c7d 1fe20600 copy pdata ,contru 
+6c7e 6801469f fetch 2 ,mem_current_packet_length 
+6c7f 1fe27200 copy pdata ,loopcnt 
+6c80 204066ea call uart_copy_rx_bytes_fast 
+6c81 18a20400 copy contw ,temp 
+6c82 18627e00 copy contru ,pdata 
+6c83 60014571 store 2 ,mem_nl_rx_data_src 
+6c84 18420a00 copy temp ,contw 
+6c85 6800850f fetch 1 ,mem_rfcomm_send_fcs 
+6c86 e0a08000 istore 1 ,contw 
+6c87 68010277 fetch 2 ,mem_rfcomm_tx_buff_ptr 
+6c88 1fe20a00 copy pdata ,contw 
+6c89 6801469f fetch 2 ,mem_current_packet_length 
+6c8a 68088510 fetcht 1 ,mem_rfcomm_send_offset 
+6c8b 9840fe00 iadd temp ,pdata 
+6c8c 1fe0fe04 increase 4 ,pdata 
+6c8d e0a10000 istore 2 ,contw 
+6c8e 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6c8f e0a10000 istore 2 ,contw 
+6c90 70456900 jam 0 ,mem_credit_given 
+6c91 68014573 fetch 2 ,mem_nl_rx_len_all 
+6c92 c0003a97 beq 0 ,module_hci_command_tx_spp_tx_complete 
+6c93 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+6c94 20600000 rtn 
+
+ssp_tx_write_length:
+6c95 475ac036 bpatchx patch36_5 ,mem_patch36 
+6c96 6801469f fetch 2 ,mem_current_packet_length 
+6c97 1fe67c7f sub pdata ,0x7f ,null 
+6c98 24216c9d nbranch ssp_tx_write_long_packet ,positive 
+6c99 1fe3fe00 lshift pdata ,pdata 
+6c9a 79207e00 set1 0 ,pdata 
+6c9b e0a08000 istore 1 ,contw 
+6c9c 20600000 rtn 
+
+ssp_tx_write_long_packet:
+6c9d 6801469f fetch 2 ,mem_current_packet_length 
+6c9e 1fe97e00 rshift3 pdata ,pdata 
+6c9f 1ff18400 rshift4 pdata ,temp 
+6ca0 1fe17e7f and_into 0x7f ,pdata 
+6ca1 1fe3fe00 lshift pdata ,pdata 
+6ca2 793ffe00 set0 0 ,pdata 
+6ca3 e0a08000 istore 1 ,contw 
+6ca4 e0a88000 istoret 1 ,contw 
+6ca5 20600000 rtn 
+
+ssp_tx_write_given_credit:
+6ca6 6800c569 fetch 1 ,mem_credit_given 
+6ca7 207a0000 rtn blank 
+6ca8 e0a08000 istore 1 ,contw 
+6ca9 20600000 rtn 
+
+scheduler_process:
+6caa 475b4036 bpatchx patch36_6 ,mem_patch36 
+6cab 20407d9c call check_51cmd 
+6cac 204032f6 call app_process_bb_event 
+6cad 2040631b call process_conn_sm 
+6cae 475bc036 bpatchx patch36_7 ,mem_patch36 
+6caf 204076dc call sp_calc_sequence 
+6cb0 204076b5 call simple_pairing_sequence 
+6cb1 204076c6 call master_simple_paring_sequence 
+6cb2 2040526e call l2cap_malloc_is_fifo_full 
+6cb3 247a0000 nrtn blank 
+6cb4 20404da9 call l2cap_call_proc_sigal_pending 
+6cb5 2040526e call l2cap_malloc_is_fifo_full 
+6cb6 247a0000 nrtn blank 
+6cb7 475c4037 bpatchx patch37_0 ,mem_patch37 
+6cb8 20406cf5 call process_upper_sm 
+6cb9 20404f64 call l2cap_send_config_req 
+6cba 20406b98 call rfcomm_send_more_pkt 
+
+scheduler_process0:
+6cbb 20406cbe call scheduler_tx_disconnect_hid 
+6cbc 475cc037 bpatchx patch37_1 ,mem_patch37 
+6cbd 202032f2 branch app_process_bt 
+
+scheduler_tx_disconnect_hid:
+6cbe 6800827f fetch 1 ,mem_control_tasks 
+6cbf c2805087 bbit1 l2cap_disconnect_interrupt ,l2cap_disconnect_interrupt_req 
+6cc0 c283d091 bbit1 l2cap_disconnect_control ,l2cap_disconnect_control_req 
+6cc1 20600000 rtn 
+
+scheduler_tx_l2cap_pkt:
+6cc2 475d4037 bpatchx patch37_2 ,mem_patch37 
+6cc3 20405274 call l2cap_malloc_is_fifo_empty 
+6cc4 207a0000 rtn blank 
+6cc5 6800804b fetch 1 ,mem_op 
+6cc6 c3830000 rtnbit1 op_txl2cap 
+6cc7 20405258 call l2cap_malloc_fifo_out 
+6cc8 6001016f store 2 ,mem_txptr 
+6cc9 1fe20c00 copy pdata ,contr 
+6cca e8c10000 ifetch 2 ,contr 
+6ccb 1fe0fe04 increase 4 ,pdata 
+6ccc 600141dc store 2 ,mem_tx_len 
+6ccd 7041db06 jam 6 ,mem_tx_lch 
+6cce 475dc037 bpatchx patch37_3 ,mem_patch37 
+6ccf 68014246 fetch 2 ,mem_l2cap_tx_multi_offset 
+6cd0 203a6cdd branch scheduler_tx_l2cap_start_pkt ,blank 
+6cd1 6800804b fetch 1 ,mem_op 
+6cd2 c4038000 rtnbit0 op_pkt_comp 
+6cd3 793ffe07 set0 op_pkt_comp ,pdata 
+6cd4 6000804b store 1 ,mem_op 
+6cd5 7041db05 jam 5 ,mem_tx_lch 
+6cd6 68094246 fetcht 2 ,mem_l2cap_tx_multi_offset 
+6cd7 6801016f fetch 2 ,mem_txptr 
+6cd8 9840fe00 iadd temp ,pdata 
+6cd9 6001016f store 2 ,mem_txptr 
+6cda 680141dc fetch 2 ,mem_tx_len 
+6cdb 98467e00 isub temp ,pdata 
+6cdc 600141dc store 2 ,mem_tx_len 
+
+scheduler_tx_l2cap_start_pkt:
+6cdd 475e4037 bpatchx patch37_4 ,mem_patch37 
+6cde 680141dc fetch 2 ,mem_tx_len 
+6cdf 203a2a8c branch assert ,blank 
+6ce0 d8400104 arg l2cap_max_pkt_len ,temp 
+6ce1 98467e00 isub temp ,pdata 
+6ce2 24216ce9 nbranch scheduler_tx_l2cap_last_pkt ,positive 
+6ce3 475ec037 bpatchx patch37_5 ,mem_patch37 
+6ce4 600941dc storet 2 ,mem_tx_len 
+6ce5 68014246 fetch 2 ,mem_l2cap_tx_multi_offset 
+6ce6 9840fe00 iadd temp ,pdata 
+6ce7 60014246 store 2 ,mem_l2cap_tx_multi_offset 
+6ce8 20206ceb branch scheduler_tx_l2cap_pkt_end 
+
+scheduler_tx_l2cap_last_pkt:
+6ce9 58000000 setarg 0 
+6cea 60014246 store 2 ,mem_l2cap_tx_multi_offset 
+
+scheduler_tx_l2cap_pkt_end:
+6ceb 6800804b fetch 1 ,mem_op 
+6cec 79207e06 set1 op_txl2cap ,pdata 
+6ced 6000804b store 1 ,mem_op 
+6cee 20600000 rtn 
+
+scheduler_start_upper_sm:
+6cef 6800c684 fetch 1 ,mem_ui_profile_supported 
+6cf0 c2806cf3 bbit1 support_hid ,scheduler_start_upper_sm_hid 
+6cf1 70028701 jam uppersm_reconn_sdp_conn ,mem_upper_sm_reconn 
+6cf2 20600000 rtn 
+
+scheduler_start_upper_sm_hid:
+6cf3 7002870f jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn 
+6cf4 20600000 rtn 
+
+process_upper_sm:
+6cf5 6800c681 fetch 1 ,memui_reconnect_mode 
+6cf6 243a6cfb nbranch process_upper_sm_reconn ,blank 
+
+process_upper_sm_remote_page:
+6cf7 68008286 fetch 1 ,mem_upper_sm_remote_page 
+6cf8 207a0000 rtn blank 
+6cf9 70028600 jam 0 ,mem_upper_sm_remote_page 
+
+process_upper_sm_rp_wait:
+6cfa 20600000 rtn 
+
+process_upper_sm_reconn:
+6cfb 475f4037 bpatchx patch37_6 ,mem_patch37 
+6cfc 68008287 fetch 1 ,mem_upper_sm_reconn 
+6cfd 207a0000 rtn blank 
+6cfe c000ed1b beq uppersm_reconn_sdp_conn ,process_upper_sm_reconn_sdp_conn 
+6cff c0016d74 beq uppersm_reconn_sdp_conn_wait ,process_upper_sm_reconn_sdp_conn_wait 
+6d00 c001ed21 beq uppersm_reconn_sdp_cfg ,process_upper_sm_reconn_sdp_cfg 
+6d01 c0026d78 beq uppersm_reconn_sdp_cfg_wait ,process_upper_sm_reconn_sdp_cfg_wait 
+6d02 c01ded2b beq uppersm_reconn_ss_spp ,process_upper_sm_reconn_ss_spp 
+6d03 c01e6d7b beq uppersm_reconn_ss_spp_wait ,process_upper_sm_reconn_ss_spp_wait 
+6d04 c006ed30 beq uppersm_reconn_sdp_disconn ,process_upper_sm_reconn_sdp_disconn 
+6d05 c0076d80 beq uppersm_reconn_sdp_disconn_wait ,process_upper_sm_reconn_sdp_disconn_wait 
+6d06 c007ed33 beq uppersm_reconn_hid_ctrl_conn ,process_upper_sm_reconn_hid_ctrl_conn 
+6d07 c0086d86 beq uppersm_reconn_hid_ctrl_conn_wait ,process_upper_sm_reconn_hid_ctrl_conn_wait 
+6d08 c008ed39 beq uppersm_reconn_hid_ctrl_cfg ,process_upper_sm_reconn_hid_ctrl_cfg 
+6d09 c0096d8a beq uppersm_reconn_hid_ctrl_cfg_wait ,process_upper_sm_reconn_hid_ctrl_cfg_wait 
+6d0a c009ed3f beq uppersm_reconn_hid_int_conn ,process_upper_sm_reconn_hid_int_conn 
+6d0b c00a6d8e beq uppersm_reconn_hid_int_conn_wait ,process_upper_sm_reconn_hid_int_conn_wait 
+6d0c c00aed45 beq uppersm_reconn_hid_int_cfg ,process_upper_sm_reconn_hid_int_cfg 
+6d0d c00b6d92 beq uppersm_reconn_hid_int_cfg_wait ,process_upper_sm_reconn_hid_int_cfg_wait 
+6d0e c00bed4b beq uppersm_reconn_rfcomm_conn ,process_upper_sm_reconn_rfcomm_conn 
+6d0f c00c6d97 beq uppersm_reconn_rfcomm_conn_wait ,process_upper_sm_reconn_rfcomm_conn_wait 
+6d10 c00ced51 beq uppersm_reconn_rfcomm_cfg ,process_upper_sm_reconn_rfcomm_cfg 
+6d11 c00d6d9b beq uppersm_reconn_rfcomm_cfg_wait ,process_upper_sm_reconn_rfcomm_cfg_wait 
+6d12 c00ded57 beq uppersm_reconn_rfcomm_sabm ,process_upper_sm_reconn_rfcomm_sabm 
+6d13 c00e6d9f beq uppersm_reconn_rfcomm_sabm_wait ,process_upper_sm_reconn_rfcomm_sabm_wait 
+6d14 c00eed5d beq uppersm_reconn_spp_cmd_pn ,process_upper_sm_reconn_spp_cmd_pn 
+6d15 c00f6da4 beq uppersm_reconn_spp_cmd_pn_wait ,process_upper_sm_reconn_spp_cmd_pn_wait 
+6d16 c00fed63 beq uppersm_reconn_spp_sabm ,process_upper_sm_reconn_spp_sabm 
+6d17 c0106da8 beq uppersm_reconn_spp_sabm_wait ,process_upper_sm_reconn_spp_sabm_wait 
+6d18 c010ed6e beq uppersm_reconn_spp_cmd_ms ,process_upper_sm_reconn_spp_cmd_ms 
+6d19 c0116dac beq uppersm_reconn_spp_cmd_ms_wait ,process_upper_sm_reconn_spp_cmd_ms_wait 
+
+process_upper_sm_reconn_wait:
+6d1a 20600000 rtn 
+
+process_upper_sm_reconn_sdp_conn:
+6d1b 20406db7 call upper_sm_send_sdp_conn 
+6d1c 70028702 jam uppersm_reconn_sdp_conn_wait ,mem_upper_sm_reconn 
+6d1d 6800c250 fetch 1 ,mem_sdp_state 
+6d1e 79207e00 set1 l2cap_channel_state_conn_req ,pdata 
+6d1f 6000c250 store 1 ,mem_sdp_state 
+6d20 20600000 rtn 
+
+process_upper_sm_reconn_sdp_cfg:
+6d21 70028704 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn 
+6d22 6800c250 fetch 1 ,mem_sdp_state 
+6d23 c3810000 rtnbit1 l2cap_channel_state_snd_cfg_req 
+6d24 70028703 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn 
+6d25 20406dbe call upper_sm_send_sdp_cfg 
+6d26 70028704 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn 
+6d27 6800c250 fetch 1 ,mem_sdp_state 
+6d28 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+6d29 6000c250 store 1 ,mem_sdp_state 
+6d2a 20600000 rtn 
+
+process_upper_sm_reconn_ss_spp:
+6d2b 20405274 call l2cap_malloc_is_fifo_empty 
+6d2c 247a0000 nrtn blank 
+6d2d 20406dcd call upper_sm_send_ss_spp 
+6d2e 7002873c jam uppersm_reconn_ss_spp_wait ,mem_upper_sm_reconn 
+6d2f 20600000 rtn 
+
+process_upper_sm_reconn_sdp_disconn:
+6d30 20406dc3 call upper_sm_send_sdp_disconn 
+6d31 7002870e jam uppersm_reconn_sdp_disconn_wait ,mem_upper_sm_reconn 
+6d32 20600000 rtn 
+
+process_upper_sm_reconn_hid_ctrl_conn:
+6d33 20406ddd call upper_sm_send_hid_ctrl_conn 
+6d34 70028710 jam uppersm_reconn_hid_ctrl_conn_wait ,mem_upper_sm_reconn 
+6d35 6800c252 fetch 1 ,mem_hid_control_state 
+6d36 79207e00 set1 l2cap_channel_state_conn_req ,pdata 
+6d37 6000c252 store 1 ,mem_hid_control_state 
+6d38 20600000 rtn 
+
+process_upper_sm_reconn_hid_ctrl_cfg:
+6d39 20406de4 call upper_sm_send_hid_ctrl_cfg 
+6d3a 70028712 jam uppersm_reconn_hid_ctrl_cfg_wait ,mem_upper_sm_reconn 
+6d3b 6800c252 fetch 1 ,mem_hid_control_state 
+6d3c 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+6d3d 6000c252 store 1 ,mem_hid_control_state 
+6d3e 20600000 rtn 
+
+process_upper_sm_reconn_hid_int_conn:
+6d3f 20406de9 call upper_sm_send_hid_int_conn 
+6d40 70028714 jam uppersm_reconn_hid_int_conn_wait ,mem_upper_sm_reconn 
+6d41 6800c253 fetch 1 ,mem_hid_interrupt_state 
+6d42 79207e00 set1 l2cap_channel_state_conn_req ,pdata 
+6d43 6000c253 store 1 ,mem_hid_interrupt_state 
+6d44 20600000 rtn 
+
+process_upper_sm_reconn_hid_int_cfg:
+6d45 20406df0 call upper_sm_send_hid_int_cfg 
+6d46 70028716 jam uppersm_reconn_hid_int_cfg_wait ,mem_upper_sm_reconn 
+6d47 6800c253 fetch 1 ,mem_hid_interrupt_state 
+6d48 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+6d49 6000c253 store 1 ,mem_hid_interrupt_state 
+6d4a 20600000 rtn 
+
+process_upper_sm_reconn_rfcomm_conn:
+6d4b 20406dd1 call upper_sm_send_rfcomm_conn 
+6d4c 70028718 jam uppersm_reconn_rfcomm_conn_wait ,mem_upper_sm_reconn 
+6d4d 6800c251 fetch 1 ,mem_rfcomm_state 
+6d4e 79207e00 set1 l2cap_channel_state_conn_req ,pdata 
+6d4f 6000c251 store 1 ,mem_rfcomm_state 
+6d50 20600000 rtn 
+
+process_upper_sm_reconn_rfcomm_cfg:
+6d51 20406dd8 call upper_sm_send_rfcomm_cfg 
+6d52 7002871a jam uppersm_reconn_rfcomm_cfg_wait ,mem_upper_sm_reconn 
+6d53 6800c251 fetch 1 ,mem_rfcomm_state 
+6d54 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+6d55 6000c251 store 1 ,mem_rfcomm_state 
+6d56 20600000 rtn 
+
+process_upper_sm_reconn_rfcomm_sabm:
+6d57 20406df5 call upper_sm_send_rfcomm_sabm 
+6d58 7002871c jam uppersm_reconn_rfcomm_sabm_wait ,mem_upper_sm_reconn 
+6d59 6800c251 fetch 1 ,mem_rfcomm_state 
+6d5a 79207e06 set1 l2cap_channel_rfcomm_only_sabm ,pdata 
+6d5b 6000c251 store 1 ,mem_rfcomm_state 
+6d5c 20600000 rtn 
+
+process_upper_sm_reconn_spp_cmd_pn:
+6d5d 20406dfc call upper_sm_send_spp_cmd_pn 
+6d5e 6800c254 fetch 1 ,mem_spp_state 
+6d5f 79207e00 set1 rfcomm_channel_state_pn_cmd 
+6d60 6000c254 store 1 ,mem_spp_state 
+6d61 7002871e jam uppersm_reconn_spp_cmd_pn_wait ,mem_upper_sm_reconn 
+6d62 20600000 rtn 
+
+process_upper_sm_reconn_spp_sabm:
+6d63 20406e02 call upper_sm_send_spp_sabm 
+6d64 6800c254 fetch 1 ,mem_spp_state 
+6d65 79207e02 set1 rfcomm_channel_state_sabm 
+6d66 6000c254 store 1 ,mem_spp_state 
+6d67 70028720 jam uppersm_reconn_spp_sabm_wait ,mem_upper_sm_reconn 
+6d68 6800c564 fetch 1 ,mem_remote_spp_channel 
+6d69 1fe9fe00 lshift3 pdata ,pdata 
+6d6a 1fe1fe03 or_into 3 ,pdata 
+6d6b d8404565 arg mem_hiufcs_spp ,temp 
+6d6c 600904f7 storet 2 ,mem_contw_temp 
+6d6d 20206a35 branch rfcomm_save_fcs_uih 
+
+process_upper_sm_reconn_spp_cmd_ms:
+6d6e 20406e0c call upper_sm_send_spp_cmd_ms 
+6d6f 6800c254 fetch 1 ,mem_spp_state 
+6d70 79207e04 set1 rfcomm_channel_state_snd_ms_cmd 
+6d71 6000c254 store 1 ,mem_spp_state 
+6d72 70028722 jam uppersm_reconn_spp_cmd_ms_wait ,mem_upper_sm_reconn 
+6d73 20600000 rtn 
+
+process_upper_sm_reconn_sdp_conn_wait:
+6d74 6800c250 fetch 1 ,mem_sdp_state 
+6d75 c4008000 rtnbit0 l2cap_channel_state_conn_res 
+6d76 70028703 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn 
+6d77 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_sdp_cfg_wait:
+6d78 6800c250 fetch 1 ,mem_sdp_state 
+6d79 c19f8000 rtnne l2cap_channel_setup_complete 
+6d7a 7002873b jam uppersm_reconn_ss_spp ,mem_upper_sm_reconn 
+
+process_upper_sm_reconn_ss_spp_wait:
+6d7b 68008285 fetch 1 ,mem_message_to_uppersm 
+6d7c c18b8000 rtnne recieve_ss_reasult_hf 
+6d7d 70028500 jam 0 ,mem_message_to_uppersm 
+6d7e 7002870d jam uppersm_reconn_sdp_disconn ,mem_upper_sm_reconn 
+6d7f 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_sdp_disconn_wait:
+6d80 6800c250 fetch 1 ,mem_sdp_state 
+6d81 247a0000 nrtn blank 
+6d82 6800c684 fetch 1 ,mem_ui_profile_supported 
+6d83 c2806daf bbit1 support_hid ,process_upper_sm_reconn_setup_hid 
+6d84 c2836db1 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm 
+6d85 20206db5 branch process_upper_sm_reconn_termination 
+
+process_upper_sm_reconn_hid_ctrl_conn_wait:
+6d86 6800c252 fetch 1 ,mem_hid_control_state 
+6d87 c4008000 rtnbit0 l2cap_channel_state_conn_res 
+6d88 70028711 jam uppersm_reconn_hid_ctrl_cfg ,mem_upper_sm_reconn 
+6d89 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_hid_ctrl_cfg_wait:
+6d8a 6800c252 fetch 1 ,mem_hid_control_state 
+6d8b c19f8000 rtnne l2cap_channel_setup_complete 
+6d8c 70028713 jam uppersm_reconn_hid_int_conn ,mem_upper_sm_reconn 
+6d8d 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_hid_int_conn_wait:
+6d8e 6800c253 fetch 1 ,mem_hid_interrupt_state 
+6d8f c4008000 rtnbit0 l2cap_channel_state_conn_res 
+6d90 70028715 jam uppersm_reconn_hid_int_cfg ,mem_upper_sm_reconn 
+6d91 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_hid_int_cfg_wait:
+6d92 6800c253 fetch 1 ,mem_hid_interrupt_state 
+6d93 c19f8000 rtnne l2cap_channel_setup_complete 
+6d94 6800c684 fetch 1 ,mem_ui_profile_supported 
+6d95 c2836db1 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm 
+6d96 20206db5 branch process_upper_sm_reconn_termination 
+
+process_upper_sm_reconn_rfcomm_conn_wait:
+6d97 6800c251 fetch 1 ,mem_rfcomm_state 
+6d98 c4008000 rtnbit0 l2cap_channel_state_conn_res 
+6d99 70028719 jam uppersm_reconn_rfcomm_cfg ,mem_upper_sm_reconn 
+6d9a 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_rfcomm_cfg_wait:
+6d9b 6800c251 fetch 1 ,mem_rfcomm_state 
+6d9c c19f8000 rtnne l2cap_channel_setup_complete 
+6d9d 7002871b jam uppersm_reconn_rfcomm_sabm ,mem_upper_sm_reconn 
+6d9e 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_rfcomm_sabm_wait:
+6d9f 6800c251 fetch 1 ,mem_rfcomm_state 
+6da0 c1ff8000 rtnne l2cap_channel_rfcomm_dlci0_opened 
+6da1 6800c684 fetch 1 ,mem_ui_profile_supported 
+6da2 c2836db3 bbit1 support_spp ,process_upper_sm_reconn_setup_spp 
+6da3 20206db5 branch process_upper_sm_reconn_termination 
+
+process_upper_sm_reconn_spp_cmd_pn_wait:
+6da4 6800c254 fetch 1 ,mem_spp_state 
+6da5 c4008000 rtnbit0 rfcomm_channel_state_pn_res 
+6da6 7002871f jam uppersm_reconn_spp_sabm ,mem_upper_sm_reconn 
+6da7 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_spp_sabm_wait:
+6da8 6800c254 fetch 1 ,mem_spp_state 
+6da9 c4018000 rtnbit0 rfcomm_channel_state_ua 
+6daa 70028721 jam uppersm_reconn_spp_cmd_ms ,mem_upper_sm_reconn 
+6dab 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_spp_cmd_ms_wait:
+6dac 6800c254 fetch 1 ,mem_spp_state 
+6dad c1ff8000 rtnne rfcomm_channel_setup_complete 
+6dae 20206db5 branch process_upper_sm_reconn_termination 
+
+process_upper_sm_reconn_setup_hid:
+6daf 7002870f jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn 
+6db0 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_setup_rfcomm:
+6db1 70028717 jam uppersm_reconn_rfcomm_conn ,mem_upper_sm_reconn 
+6db2 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_setup_spp:
+6db3 7002871d jam uppersm_reconn_spp_cmd_pn ,mem_upper_sm_reconn 
+6db4 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_termination:
+6db5 70028700 jam 0 ,mem_upper_sm_reconn 
+6db6 20600000 rtn 
+
+upper_sm_send_sdp_conn:
+6db7 475fc037 bpatchx patch37_7 ,mem_patch37 
+6db8 204052b8 call l2cap_malloc_signal_channel 
+6db9 58000001 setarg psm_sdp 
+6dba 1fe20400 copy pdata ,temp 
+6dbb 58000050 setarg l2cap_sdp_channel 
+6dbc 1fe21600 copy pdata ,timeup 
+6dbd 202050a8 branch ml2cap_send_signal_connect_req 
+
+upper_sm_send_sdp_cfg:
+6dbe 47604038 bpatchx patch38_0 ,mem_patch38 
+6dbf 204052b8 call l2cap_malloc_signal_channel 
+6dc0 68014248 fetch 2 ,mem_sdp_remote_cid 
+6dc1 1fe20400 copy pdata ,temp 
+6dc2 202050b7 branch ml2cap_send_signal_config_req 
+
+upper_sm_send_sdp_disconn:
+6dc3 4760c038 bpatchx patch38_1 ,mem_patch38 
+6dc4 204052b8 call l2cap_malloc_signal_channel 
+6dc5 68014248 fetch 2 ,mem_sdp_remote_cid 
+6dc6 1fe20400 copy pdata ,temp 
+6dc7 d9600050 arg l2cap_sdp_channel ,timeup 
+6dc8 204050cc call ml2cap_send_signal_disconn_req 
+6dc9 6800c250 fetch 1 ,mem_sdp_state 
+6dca 793ffe05 set0 l2cap_channel_state_rcv_cfg_res ,pdata 
+6dcb 6000c250 store 1 ,mem_sdp_state 
+6dcc 20600000 rtn 
+
+upper_sm_send_ss_spp:
+6dcd 47614038 bpatchx patch38_2 ,mem_patch38 
+6dce 204052c5 call l2cap_malloc_sdp_channel 
+6dcf 20407138 call sdp_send_spp_request 
+6dd0 202050e7 branch msdp_send_req_done 
+
+upper_sm_send_rfcomm_conn:
+6dd1 4761c038 bpatchx patch38_3 ,mem_patch38 
+6dd2 204052b8 call l2cap_malloc_signal_channel 
+6dd3 58000003 setarg psm_rfcomm 
+6dd4 1fe20400 copy pdata ,temp 
+6dd5 58000051 setarg l2cap_rfcomm_channel 
+6dd6 1fe21600 copy pdata ,timeup 
+6dd7 202050a8 branch ml2cap_send_signal_connect_req 
+
+upper_sm_send_rfcomm_cfg:
+6dd8 47624038 bpatchx patch38_4 ,mem_patch38 
+6dd9 204052b8 call l2cap_malloc_signal_channel 
+6dda 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6ddb 1fe20400 copy pdata ,temp 
+6ddc 202050b7 branch ml2cap_send_signal_config_req 
+
+upper_sm_send_hid_ctrl_conn:
+6ddd 4762c038 bpatchx patch38_5 ,mem_patch38 
+6dde 204052b8 call l2cap_malloc_signal_channel 
+6ddf 58000011 setarg psm_hid_control 
+6de0 1fe20400 copy pdata ,temp 
+6de1 58000052 setarg l2cap_hid_control_channel 
+6de2 1fe21600 copy pdata ,timeup 
+6de3 202050a8 branch ml2cap_send_signal_connect_req 
+
+upper_sm_send_hid_ctrl_cfg:
+6de4 47634038 bpatchx patch38_6 ,mem_patch38 
+6de5 204052b8 call l2cap_malloc_signal_channel 
+6de6 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+6de7 1fe20400 copy pdata ,temp 
+6de8 202050b7 branch ml2cap_send_signal_config_req 
+
+upper_sm_send_hid_int_conn:
+6de9 4763c038 bpatchx patch38_7 ,mem_patch38 
+6dea 204052b8 call l2cap_malloc_signal_channel 
+6deb 58000013 setarg psm_hid_interrupt 
+6dec 1fe20400 copy pdata ,temp 
+6ded 58000053 setarg l2cap_hid_interrupt_channel 
+6dee 1fe21600 copy pdata ,timeup 
+6def 202050a8 branch ml2cap_send_signal_connect_req 
+
+upper_sm_send_hid_int_cfg:
+6df0 47644039 bpatchx patch39_0 ,mem_patch39 
+6df1 204052b8 call l2cap_malloc_signal_channel 
+6df2 6801424e fetch 2 ,mem_hid_int_remote_cid 
+6df3 1fe20400 copy pdata ,temp 
+6df4 202050b7 branch ml2cap_send_signal_config_req 
+
+upper_sm_send_rfcomm_sabm:
+6df5 4764c039 bpatchx patch39_1 ,mem_patch39 
+6df6 204052d2 call l2cap_malloc_rfcomm_channel 
+6df7 7004fb03 jam 3 ,mem_current_adss 
+6df8 7004fe1c jam 0x1c ,mem_current_fcs 
+6df9 20406ba9 call rfcomm_send_sabm 
+6dfa 70456301 jam 1 ,mem_rfcomm_initiator 
+6dfb 20600000 rtn 
+
+upper_sm_send_spp_cmd_pn:
+6dfc 47654039 bpatchx patch39_2 ,mem_patch39 
+6dfd 204052d2 call l2cap_malloc_rfcomm_channel 
+6dfe 6808c564 fetcht 1 ,mem_remote_spp_channel 
+6dff 20406a79 call channel_to_dlci 
+6e00 6008c55d storet 1 ,mem_pn_dlci 
+6e01 20206bc4 branch rfcomm_send_param_neg_cmd 
+
+upper_sm_send_spp_sabm:
+6e02 4765c039 bpatchx patch39_3 ,mem_patch39 
+6e03 204052d2 call l2cap_malloc_rfcomm_channel 
+6e04 6808c55d fetcht 1 ,mem_pn_dlci 
+6e05 20406a73 call dlci_to_address_cmd 
+6e06 20406a1a call rfcomm_calculate_fcs_sabm 
+6e07 600084fe store 1 ,mem_current_fcs 
+6e08 6808c55d fetcht 1 ,mem_pn_dlci 
+6e09 20406a73 call dlci_to_address_cmd 
+6e0a 600884fb storet 1 ,mem_current_adss 
+6e0b 20206ba9 branch rfcomm_send_sabm 
+
+upper_sm_send_spp_cmd_ms:
+6e0c 47664039 bpatchx patch39_4 ,mem_patch39 
+6e0d 204052d2 call l2cap_malloc_rfcomm_channel 
+6e0e 6808c55d fetcht 1 ,mem_pn_dlci 
+6e0f 20406a73 call dlci_to_address_cmd 
+6e10 20206bfc branch rfcomm_send_modem_status_cmd 
+
+sdp_process:
+6e11 4766c039 bpatchx patch39_5 ,mem_patch39 
+6e12 68010264 fetch 2 ,mem_l2cap_payload_ptr 
+6e13 98000c00 iforce contr 
+6e14 e8c08000 ifetch 1 ,contr 
+6e15 1fe22400 copy pdata ,regb 
+6e16 6000851b store 1 ,mem_sdp_pduid 
+6e17 e8c10000 ifetch 2 ,contr 
+6e18 6001051c store 2 ,mem_sdp_transactionid 
+6e19 e8c08000 ifetch 1 ,contr 
+6e1a 1fed1600 lshift8 pdata ,timeup 
+6e1b e8c08000 ifetch 1 ,contr 
+6e1c 99609600 iadd timeup ,timeup 
+6e1d 47674039 bpatchx patch39_6 ,mem_patch39 
+6e1e 18c20400 copy contr ,temp 
+6e1f df200004 arg 4 ,loopcnt 
+6e20 d8a0052a arg mem_sdp_handle_list ,contw 
+6e21 20407ec6 call memset0 
+6e22 18420c00 copy temp ,contr 
+6e23 1a427e00 deposit regb 
+6e24 c000efba beq sdp_error_res ,sdp_process_error_res 
+6e25 c0016e2c beq sdp_search_req ,sdp_process_ss_req 
+6e26 c001efba beq sdp_search_res ,sdp_process_ss_res 
+6e27 c0026e54 beq sdp_attribute_req ,sdp_process_sa_req 
+6e28 c002efba beq sdp_attribute_res ,sdp_process_sa_res 
+6e29 c0036f02 beq sdp_searchattrib_req ,sdp_process_ssa_req 
+6e2a c003efba beq sdp_searchattrib_res ,sdp_process_ssa_res 
+6e2b 20206fc1 branch sdp_insufficient_resource 
+
+sdp_process_ss_req:
+6e2c 4767c039 bpatchx patch39_7 ,mem_patch39 
+6e2d 20406fd0 call ask_serviceclassid 
+6e2e 2841fe01 compare 1 ,temp ,0xff 
+6e2f 2020f040 branch ss_empty_rsp ,true 
+6e30 2841feff compare 0xff ,temp ,0xff 
+6e31 2020efc4 branch sdp_invalid_request_syntax ,true 
+6e32 e8c10000 ifetch 2 ,contr 
+6e33 60010522 store 2 ,mem_sdp_record_maxcnt 
+6e34 196097fe increase -2 ,timeup 
+6e35 196097ff increase -1 ,timeup 
+6e36 2422efbe nbranch sdp_invalid_pdu_size ,zero 
+6e37 d9600511 arg mem_sdp_uuid_search_ptr ,timeup 
+6e38 e9610000 ifetch 2 ,timeup 
+6e39 207a0000 rtn blank 
+6e3a 20407082 call search_all_uuid 
+6e3b 204052d0 call l2cap_get_sdp_tx_payload 
+6e3c 18007e03 force 3 ,pdata 
+6e3d e0a08000 istore 1 ,contw 
+6e3e 6801051c fetch 2 ,mem_sdp_transactionid 
+6e3f e0a10000 istore 2 ,contw 
+6e40 18ebfe00 lshift2 queue ,pdata 
+6e41 1fe0fe05 add pdata ,5 ,pdata 
+6e42 1fe0a605 add pdata ,5 ,regc 
+6e43 1ff0fe00 byteswap pdata ,pdata 
+6e44 e0a10000 istore 2 ,contw 
+6e45 18e27e00 deposit queue 
+6e46 1ff0fe00 byteswap pdata ,pdata 
+6e47 e0a10000 istore 2 ,contw 
+6e48 e0a10000 istore 2 ,contw 
+6e49 d8c0052a arg mem_sdp_handle_list ,contr 
+6e4a 18e27200 copy queue ,loopcnt 
+6e4b 2022ee4f branch ss_req_blank ,zero 
+
+ss_req_loop:
+6e4c e8c20000 ifetch 4 ,contr 
+6e4d e0a20000 istore 4 ,contw 
+6e4e c2006e4c loop ss_req_loop 
+
+ss_req_blank:
+6e4f 18007e00 force 0 ,pdata 
+6e50 e0a08000 istore 1 ,contw 
+6e51 1a627e00 deposit regc 
+6e52 60010275 store 2 ,mem_sdp_tx_pkt_length 
+6e53 20600000 rtn 
+
+sdp_process_sa_req:
+6e54 4768403a bpatchx patch3a_0 ,mem_patch3a 
+6e55 e8c20000 ifetch 4 ,contr 
+6e56 60020524 store 4 ,mem_sdp_record_handle 
+6e57 196097fc increase -4 ,timeup 
+6e58 20406f2e call sdp_store_maxbyte 
+6e59 60010520 store 2 ,mem_sdp_attribute_maxbyte 
+6e5a 196097fe increase -2 ,timeup 
+6e5b 20407028 call dataelementtype6 
+6e5c 2022efc4 branch sdp_invalid_request_syntax ,zero 
+6e5d 2a21fe05 compare 5 ,rega ,0xff 
+6e5e 2020ee62 branch sa_judge_wholerange ,true 
+
+sa_isnot_wholerange:
+6e5f d8a0052a arg mem_sdp_attrib_list ,contw 
+6e60 18000e00 force 0 ,queue 
+6e61 20206e71 branch sa_req_loop 
+
+sa_judge_wholerange:
+6e62 e8c08000 ifetch 1 ,contr 
+6e63 c0856fc4 bne sdp_attribute_range ,sdp_invalid_request_syntax 
+6e64 e8c10000 ifetch 2 ,contr 
+6e65 243a6e6f nbranch sa_judge_wholerange_false1 ,blank 
+6e66 e8c08000 ifetch 1 ,contr 
+6e67 c0ffee6d bne 0xff ,sa_judge_wholerange_false2 
+6e68 e8c08000 ifetch 1 ,contr 
+6e69 c0ffee6b bne 0xff ,sa_judge_wholerange_false3 
+6e6a 20206eb8 branch sa_req_all 
+
+sa_judge_wholerange_false3:
+6e6b 18c08dfb increase -5 ,contr 
+6e6c 20206e5f branch sa_isnot_wholerange 
+
+sa_judge_wholerange_false2:
+6e6d 18c08dfc increase -4 ,contr 
+6e6e 20206e5f branch sa_isnot_wholerange 
+
+sa_judge_wholerange_false1:
+6e6f 18c08dfd increase -3 ,contr 
+6e70 20206e5f branch sa_isnot_wholerange 
+
+sa_req_loop:
+6e71 e8c08000 ifetch 1 ,contr 
+6e72 c004ee86 beq sdp_attribute_id ,sa_req_one_id 
+6e73 c0056e74 beq sdp_attribute_range ,sa_req_range 
+
+sa_req_range:
+6e74 e8c10000 ifetch 2 ,contr 
+6e75 e0a10000 istore 2 ,contw 
+6e76 18e08e01 increase 1 ,queue 
+6e77 1ff0a400 byteswap pdata ,regb 
+6e78 e8c10000 ifetch 2 ,contr 
+6e79 1ff0fe00 byteswap pdata ,pdata 
+
+sa_req_range_id_increase:
+6e7a 1a40a401 increase 1 ,regb 
+6e7b 9a467c00 isub regb ,null 
+6e7c 24216e83 nbranch sa_req_range_id_finish ,positive 
+6e7d 1fe22600 copy pdata ,regc 
+6e7e 1a50fe00 byteswap regb ,pdata 
+6e7f e0a10000 istore 2 ,contw 
+6e80 18e08e01 increase 1 ,queue 
+6e81 1a627e00 copy regc ,pdata 
+6e82 20206e7a branch sa_req_range_id_increase 
+
+sa_req_range_id_finish:
+6e83 196097fb increase -5 ,timeup 
+6e84 1a20a3fb increase -5 ,rega 
+6e85 20206e8b branch sa_req_check_next_id 
+
+sa_req_one_id:
+6e86 e8c10000 ifetch 2 ,contr 
+6e87 e0a10000 istore 2 ,contw 
+6e88 18e08e01 increase 1 ,queue 
+6e89 196097fd increase -3 ,timeup 
+6e8a 1a20a3fd increase -3 ,rega 
+
+sa_req_check_next_id:
+6e8b 24216fc4 nbranch sdp_invalid_request_syntax ,positive 
+6e8c 2422ee71 nbranch sa_req_loop ,zero 
+6e8d 196097ff increase -1 ,timeup 
+6e8e 2422efc4 nbranch sdp_invalid_request_syntax ,zero 
+6e8f 204052d0 call l2cap_get_sdp_tx_payload 
+6e90 18a08a0a increase 10 ,contw 
+6e91 da20052a arg mem_sdp_attrib_list ,rega 
+
+sa_req_handle_attributelist_next:
+6e92 18e27e00 copy queue ,pdata 
+6e93 203a6ea5 branch sa_req_handle_attributelist_end ,blank 
+6e94 ea210000 ifetch 2 ,rega 
+6e95 203a6ea5 branch sa_req_handle_attributelist_end ,blank 
+6e96 98002400 iforce regb 
+6e97 68020524 fetch 4 ,mem_sdp_record_handle 
+6e98 98000400 iforce temp 
+6e99 204070e7 call search_handle_attrib 
+6e9a 18c27e00 copy contr ,pdata 
+6e9b 203a6ea2 branch sa_req_handle_attributelist_notfound ,blank 
+6e9c 18c08dfd increase -3 ,contr 
+6e9d e8c18000 ifetch 3 ,contr 
+6e9e e0a18000 istore 3 ,contw 
+6e9f 2040705b call sdp_data_len 
+6ea0 98007200 iforce loopcnt 
+6ea1 20407f01 call memcpy 
+
+sa_req_handle_attributelist_notfound:
+6ea2 1a20a202 increase 2 ,rega 
+6ea3 18e08fff increase -1 ,queue 
+6ea4 20206e92 branch sa_req_handle_attributelist_next 
+
+sa_req_handle_attributelist_end:
+6ea5 da200005 arg sdp_attribute_res ,rega 
+6ea6 20406f84 call ssa_req_range_lastfreg_common 
+6ea7 68010275 fetch 2 ,mem_sdp_tx_pkt_length 
+6ea8 c005f043 beq 11 ,sa_empty_rsp 
+6ea9 20206f9a branch ssa_req_range_attrbutes_length_no_continue 
+
+sdp_store_continue_common:
+6eaa e8c08000 ifetch 1 ,contr 
+6eab c0006eae beq 0 ,sdp_store_continue_0byte 
+6eac c000eeb0 beq 1 ,sdp_store_continue_1byte 
+6ead c0016eb3 beq 2 ,sdp_store_continue_2byte 
+
+sdp_store_continue_0byte:
+6eae 196097ff increase -1 ,timeup 
+6eaf 20206eb6 branch sdp_store_continue_end 
+
+sdp_store_continue_1byte:
+6eb0 e8c08000 ifetch 1 ,contr 
+6eb1 196097fe increase -2 ,timeup 
+6eb2 20206eb6 branch sdp_store_continue_end 
+
+sdp_store_continue_2byte:
+6eb3 e8c10000 ifetch 2 ,contr 
+6eb4 1ff0fe00 byteswap pdata ,pdata 
+6eb5 196097fd increase -3 ,timeup 
+
+sdp_store_continue_end:
+6eb6 60010519 store 2 ,mem_sdp_continue_byte 
+6eb7 20600000 rtn 
+
+sa_req_all:
+6eb8 196097fb increase -5 ,timeup 
+6eb9 20406eaa call sdp_store_continue_common 
+6eba 2422efbe nbranch sdp_invalid_pdu_size ,zero 
+6ebb 680a0524 fetcht 4 ,mem_sdp_record_handle 
+6ebc 204070b1 call search_handle 
+6ebd 2422efbb nbranch sdp_invalid_service_record_handle ,zero 
+6ebe 18c22200 copy contr ,rega 
+6ebf 204052d0 call l2cap_get_sdp_tx_payload 
+6ec0 1a220c00 copy rega ,contr 
+6ec1 18a08a03 increase 3 ,contw 
+6ec2 18c21600 copy contr ,timeup 
+6ec3 20407062 call sdp_get_data 
+6ec4 1fe22200 copy pdata ,rega 
+6ec5 68010519 fetch 2 ,mem_sdp_continue_byte 
+6ec6 1fe22400 copy pdata ,regb 
+6ec7 1a227e00 copy rega ,pdata 
+6ec8 9a462400 isub regb ,regb 
+6ec9 68010520 fetch 2 ,mem_sdp_attribute_maxbyte 
+6eca 9a467c00 isub regb ,null 
+6ecb 24216ee7 nbranch sa_req_all_fragment_sdp ,positive 
+6ecc 78547c00 disable user 
+6ecd 68010519 fetch 2 ,mem_sdp_continue_byte 
+6ece 203a6eda branch sa_req_all_fisrt_fragment ,blank 
+6ecf 99608c00 iadd timeup ,contr 
+6ed0 1a40a403 increase 3 ,regb 
+6ed1 1a427200 copy regb ,loopcnt 
+6ed2 1f227e00 copy loopcnt ,pdata 
+6ed3 1fe0fe03 increase 3 ,pdata 
+6ed4 1ff0fe00 byteswap pdata ,pdata 
+6ed5 e0a10000 istore 2 ,contw 
+6ed6 1f227e00 copy loopcnt ,pdata 
+6ed7 1ff0fe00 byteswap pdata ,pdata 
+6ed8 e0a10000 istore 2 ,contw 
+6ed9 20206ef5 branch sa_req_all_answer_attributelist_full_loop 
+
+sa_req_all_fisrt_fragment:
+6eda 1a20f206 add rega ,6 ,loopcnt 
+6edb 20346ede branch sa_req_all_parlength_continue_byte ,user 
+6edc 1f30fe00 byteswap loopcnt ,pdata 
+6edd 20206ee1 branch sa_req_all_parlength_continue_byte_end 
+
+sa_req_all_parlength_continue_byte:
+6ede 1f227e00 copy loopcnt ,pdata 
+6edf 1fe0fe02 increase 2 ,pdata 
+6ee0 1ff0fe00 byteswap pdata ,pdata 
+
+sa_req_all_parlength_continue_byte_end:
+6ee1 e0a10000 istore 2 ,contw 
+6ee2 1f20f3fd increase -3 ,loopcnt 
+6ee3 1f30fe00 byteswap loopcnt ,pdata 
+6ee4 e0a10000 istore 2 ,contw 
+6ee5 19620c00 copy timeup ,contr 
+6ee6 20206ef5 branch sa_req_all_answer_attributelist_full_loop 
+
+sa_req_all_fragment_sdp:
+6ee7 78347c00 enable user 
+6ee8 68010520 fetch 2 ,mem_sdp_attribute_maxbyte 
+6ee9 1fe22200 copy pdata ,rega 
+6eea 1a227200 copy rega ,loopcnt 
+6eeb 68010519 fetch 2 ,mem_sdp_continue_byte 
+6eec 203a6eda branch sa_req_all_fisrt_fragment ,blank 
+6eed 99608c00 iadd timeup ,contr 
+6eee 1a227e00 copy rega ,pdata 
+6eef 1fe0fe05 increase 5 ,pdata 
+6ef0 1ff0fe00 byteswap pdata ,pdata 
+6ef1 e0a10000 istore 2 ,contw 
+6ef2 1a227e00 copy rega ,pdata 
+6ef3 1ff0fe00 byteswap pdata ,pdata 
+6ef4 e0a10000 istore 2 ,contw 
+
+sa_req_all_answer_attributelist_full_loop:
+6ef5 20407f01 call memcpy 
+6ef6 24346efe nbranch sa_req_all_last_frag_continue ,user 
+6ef7 18007e02 force 2 ,pdata 
+6ef8 e0a08000 istore 1 ,contw 
+6ef9 18c27e00 copy contr ,pdata 
+6efa 99667e00 isub timeup ,pdata 
+6efb 1ff0fe00 byteswap pdata ,pdata 
+6efc e0a10000 istore 2 ,contw 
+6efd 20206f00 branch sa_req_all_frag_end 
+
+sa_req_all_last_frag_continue:
+6efe 18007e00 force 0 ,pdata 
+6eff e0a08000 istore 1 ,contw 
+
+sa_req_all_frag_end:
+6f00 da200005 arg sdp_attribute_res ,rega 
+6f01 20206fb0 branch ssa_req_range_common 
+
+sdp_process_ssa_req:
+6f02 4768c03a bpatchx patch3a_1 ,mem_patch3a 
+6f03 20406fd0 call ask_serviceclassid 
+6f04 2841feff compare 0xff ,temp ,0xff 
+6f05 2020efc4 branch sdp_invalid_request_syntax ,true 
+6f06 20406f2e call sdp_store_maxbyte 
+6f07 60010520 store 2 ,mem_sdp_attribute_maxbyte 
+6f08 196097fe increase -2 ,timeup 
+6f09 20407028 call dataelementtype6 
+6f0a d8a0052a arg mem_sdp_attrib_list ,contw 
+6f0b 18000e00 force 0 ,queue 
+
+ssa_req_loop:
+6f0c e8c08000 ifetch 1 ,contr 
+6f0d c0056f36 beq sdp_attribute_range ,ssa_req_range 
+6f0e e8c10000 ifetch 2 ,contr 
+6f0f e0a10000 istore 2 ,contw 
+6f10 18e08e01 increase 1 ,queue 
+6f11 196097fd increase -3 ,timeup 
+6f12 1a20a3fd increase -3 ,rega 
+6f13 24216fc4 nbranch sdp_invalid_request_syntax ,positive 
+6f14 2422ef0c nbranch ssa_req_loop ,zero 
+6f15 196097ff increase -1 ,timeup 
+6f16 2422efc4 nbranch sdp_invalid_request_syntax ,zero 
+6f17 204052d0 call l2cap_get_sdp_tx_payload 
+6f18 18a08a0d increase 13 ,contw 
+6f19 68010511 fetch 2 ,mem_sdp_uuid_search_ptr 
+6f1a 98002600 iforce regc 
+6f1b da20052a arg mem_sdp_attrib_list ,rega 
+
+ssa_req_attributelist_next:
+6f1c ea210000 ifetch 2 ,rega 
+6f1d 203a6f29 branch ssa_req_attributelist_end ,blank 
+6f1e 98002400 iforce regb 
+6f1f 204070c6 call search_attrib 
+6f20 203a6f27 branch ssa_req_attributelist_notfound ,blank 
+6f21 18c08dfd increase -3 ,contr 
+6f22 e8c18000 ifetch 3 ,contr 
+6f23 e0a18000 istore 3 ,contw 
+6f24 2040705b call sdp_data_len 
+6f25 98007200 iforce loopcnt 
+6f26 20407f01 call memcpy 
+
+ssa_req_attributelist_notfound:
+6f27 1a20a202 increase 2 ,rega 
+6f28 20206f1c branch ssa_req_attributelist_next 
+
+ssa_req_attributelist_end:
+6f29 20406f83 call ssa_req_range_lastfreg 
+6f2a 68010275 fetch 2 ,mem_sdp_tx_pkt_length 
+6f2b c0077046 beq 14 ,ssa_empty_rsp 
+6f2c 20406f9a call ssa_req_range_attrbutes_length_no_continue 
+6f2d 20206f9a branch ssa_req_range_attrbutes_length_no_continue 
+
+sdp_store_maxbyte:
+6f2e e8c10000 ifetch 2 ,contr 
+6f2f 1ff0fe00 byteswap pdata ,pdata 
+6f30 1fe0fffd increase -3 ,pdata 
+6f31 d84000c8 arg 200 ,temp 
+6f32 98467c00 isub temp ,null 
+6f33 24610000 nrtn positive 
+6f34 580000c8 setarg 200 
+6f35 20600000 rtn 
+
+ssa_req_range:
+6f36 18c08c04 increase 4 ,contr 
+6f37 196097fb increase -5 ,timeup 
+6f38 1a20a3fb increase -5 ,rega 
+6f39 2422efc4 nbranch sdp_invalid_request_syntax ,zero 
+6f3a 20406eaa call sdp_store_continue_common 
+6f3b 2422efbe nbranch sdp_invalid_pdu_size ,zero 
+6f3c d9600511 arg mem_sdp_uuid_search_ptr ,timeup 
+6f3d 20407082 call search_all_uuid 
+6f3e 18e27e00 deposit queue 
+6f3f 203a7046 branch ssa_empty_rsp ,blank 
+6f40 6000854e store 1 ,mem_handle_humber 
+6f41 1a427e00 copy regb ,pdata 
+6f42 6001054c store 2 ,mem_sdp_all_length 
+6f43 d8e00000 arg 0 ,queue 
+6f44 da200000 arg 0 ,rega 
+6f45 204052d0 call l2cap_get_sdp_tx_payload 
+6f46 18a08a0a increase 10 ,contw 
+
+ssa_req_range_find_handle:
+6f47 20406f6c call ssa_req_range_get_length 
+6f48 24342a8c nbranch assert ,user 
+6f49 18c21600 copy contr ,timeup 
+6f4a 1fe22600 copy pdata ,regc 
+6f4b 9a20a200 iadd rega ,rega 
+6f4c 68010519 fetch 2 ,mem_sdp_continue_byte 
+6f4d 1fe22400 copy pdata ,regb 
+6f4e 203a6f75 branch ssa_req_range_first_freg ,blank 
+
+ssa_req_range_later_freg_with_continue:
+6f4f 1a227e00 copy rega ,pdata 
+6f50 9a462400 isub regb ,regb 
+6f51 2022ef67 branch ssa_req_range_next_handle ,zero 
+6f52 24216f67 nbranch ssa_req_range_next_handle ,positive 
+6f53 68010520 fetch 2 ,mem_sdp_attribute_maxbyte 
+6f54 9a467c00 isub regb ,null 
+6f55 2022ef5e branch ssa_req_range_maxbyte_with_continue ,zero 
+6f56 24216f5e nbranch ssa_req_range_maxbyte_with_continue ,positive 
+
+ssa_req_range_send_not_maxbyte:
+6f57 1a427200 copy regb ,loopcnt 
+6f58 20406f61 call ssa_req_range_maxbyte_with_continue_cpy 
+6f59 6800854e fetch 1 ,mem_handle_humber 
+6f5a 18e08e01 increase 1 ,queue 
+6f5b 98e67c00 isub queue ,null 
+6f5c 2022ef83 branch ssa_req_range_lastfreg ,zero 
+6f5d 20206fa0 branch ssa_req_range_freg_with_continue 
+
+ssa_req_range_maxbyte_with_continue:
+6f5e 1fe27200 copy pdata ,loopcnt 
+6f5f 20406f61 call ssa_req_range_maxbyte_with_continue_cpy 
+6f60 20206fa0 branch ssa_req_range_freg_with_continue 
+
+ssa_req_range_maxbyte_with_continue_cpy:
+6f61 18a08bfd increase -3 ,contw 
+6f62 1f220400 copy loopcnt ,temp 
+6f63 1a627e00 copy regc ,pdata 
+6f64 9a467e00 isub regb ,pdata 
+6f65 99608c00 iadd timeup ,contr 
+6f66 20207f01 branch memcpy 
+
+ssa_req_range_next_handle:
+6f67 6800854e fetch 1 ,mem_handle_humber 
+6f68 18e08e01 increase 1 ,queue 
+6f69 98e67c00 isub queue ,null 
+6f6a 20628000 rtn zero 
+6f6b 20206f47 branch ssa_req_range_find_handle 
+
+ssa_req_range_get_length:
+6f6c 20407fe9 call disable_user 
+6f6d d8c0052a arg mem_sdp_handle_list ,contr 
+6f6e 18ebfe00 lshift2 queue ,pdata 
+6f6f 98c08c00 iadd contr ,contr 
+6f70 e8ca0000 ifetcht 4 ,contr 
+6f71 204070b1 call search_handle 
+6f72 24628000 nrtn zero 
+6f73 2040705b call sdp_data_len 
+6f74 20207fe7 branch enable_user 
+
+ssa_req_range_first_freg:
+6f75 68010520 fetch 2 ,mem_sdp_attribute_maxbyte 
+6f76 9a267c00 isub rega ,null 
+6f77 24216f8f nbranch ssa_req_range_firstfreg_maxbyte_with_continue ,positive 
+6f78 1a227200 copy rega ,loopcnt 
+6f79 1f220400 copy loopcnt ,temp 
+6f7a 19620c00 copy timeup ,contr 
+6f7b 20407f01 call memcpy 
+6f7c 6801054c fetch 2 ,mem_sdp_all_length 
+6f7d 9a267c00 isub rega ,null 
+6f7e 2022ef81 branch ssa_req_range_freg_no_continue ,zero 
+
+ssa_req_range_firstfreg_not_maxbyte_with_continue:
+6f7f 20406fa0 call ssa_req_range_freg_with_continue 
+6f80 20206f94 branch ssa_req_range_attrbutes_length 
+
+ssa_req_range_freg_no_continue:
+6f81 20406f83 call ssa_req_range_lastfreg 
+6f82 20206f94 branch ssa_req_range_attrbutes_length 
+
+ssa_req_range_lastfreg:
+6f83 da200007 arg sdp_searchattrib_res ,rega 
+
+ssa_req_range_lastfreg_common:
+6f84 18007e00 force 0 ,pdata 
+6f85 e0a08000 istore 1 ,contw 
+6f86 20406fb0 call ssa_req_range_common 
+6f87 68090275 fetcht 2 ,mem_sdp_tx_pkt_length 
+6f88 184085fb increase -5 ,temp 
+6f89 1850fe00 byteswap temp ,pdata 
+6f8a e0a10000 istore 2 ,contw 
+6f8b 184085fd increase -3 ,temp 
+6f8c 1850fe00 byteswap temp ,pdata 
+6f8d e0a10000 istore 2 ,contw 
+6f8e 20600000 rtn 
+
+ssa_req_range_firstfreg_maxbyte_with_continue:
+6f8f 1fe27200 copy pdata ,loopcnt 
+6f90 1f220400 copy loopcnt ,temp 
+6f91 19620c00 copy timeup ,contr 
+6f92 20407f01 call memcpy 
+6f93 20406fa0 call ssa_req_range_freg_with_continue 
+
+ssa_req_range_attrbutes_length:
+6f94 58000036 setarg 0x36 
+6f95 e0a08000 istore 1 ,contw 
+6f96 6801054c fetch 2 ,mem_sdp_all_length 
+6f97 1ff0fe00 byteswap pdata ,pdata 
+6f98 e0a10000 istore 2 ,contw 
+6f99 20600000 rtn 
+
+ssa_req_range_attrbutes_length_no_continue:
+6f9a 58000036 setarg 0x36 
+6f9b e0a08000 istore 1 ,contw 
+6f9c 184085fd increase -3 ,temp 
+6f9d 1850fe00 byteswap temp ,pdata 
+6f9e e0a10000 istore 2 ,contw 
+6f9f 20600000 rtn 
+
+ssa_req_range_freg_with_continue:
+6fa0 da200007 arg sdp_searchattrib_res ,rega 
+6fa1 58000002 setarg 2 
+6fa2 e0a08000 istore 1 ,contw 
+6fa3 68010519 fetch 2 ,mem_sdp_continue_byte 
+6fa4 98408400 iadd temp ,temp 
+6fa5 1850fe00 byteswap temp ,pdata 
+6fa6 e0a10000 istore 2 ,contw 
+6fa7 20406fb0 call ssa_req_range_common 
+6fa8 68090275 fetcht 2 ,mem_sdp_tx_pkt_length 
+6fa9 184085fb increase -5 ,temp 
+6faa 1850fe00 byteswap temp ,pdata 
+6fab e0a10000 istore 2 ,contw 
+6fac 184085fb increase -5 ,temp 
+6fad 1850fe00 byteswap temp ,pdata 
+6fae e0a10000 istore 2 ,contw 
+6faf 20600000 rtn 
+
+ssa_req_range_common:
+6fb0 68010273 fetch 2 ,mem_sdp_tx_payload_ptr 
+6fb1 98a67e00 isub contw ,pdata 
+6fb2 1fe67e00 sub pdata ,0 ,pdata 
+6fb3 60010275 store 2 ,mem_sdp_tx_pkt_length 
+6fb4 204052d0 call l2cap_get_sdp_tx_payload 
+6fb5 1a227e00 copy rega ,pdata 
+6fb6 e0a08000 istore 1 ,contw 
+6fb7 6801051c fetch 2 ,mem_sdp_transactionid 
+6fb8 e0a10000 istore 2 ,contw 
+6fb9 20600000 rtn 
+
+sdp_process_ssa_res:
+
+sdp_process_ss_res:
+
+sdp_process_sa_res:
+
+sdp_process_error_res:
+6fba 20600000 rtn 
+
+sdp_invalid_service_record_handle:
+6fbb 58000200 setarg 0x0200 
+6fbc 6001054a store 2 ,mem_sdp_error_code 
+6fbd 20206fc6 branch sdp_error_response 
+
+sdp_invalid_pdu_size:
+6fbe 58000400 setarg 0x0400 
+6fbf 6001054a store 2 ,mem_sdp_error_code 
+6fc0 20206fc6 branch sdp_error_response 
+
+sdp_insufficient_resource:
+6fc1 58000600 setarg 0x0600 
+6fc2 6001054a store 2 ,mem_sdp_error_code 
+6fc3 20206fc6 branch sdp_error_response 
+
+sdp_invalid_request_syntax:
+6fc4 58000300 setarg 0x0300 
+6fc5 6001054a store 2 ,mem_sdp_error_code 
+
+sdp_error_response:
+6fc6 204052d0 call l2cap_get_sdp_tx_payload 
+6fc7 e0a08000 istore 1 ,contw 
+6fc8 6801051c fetch 2 ,mem_sdp_transactionid 
+6fc9 e0a10000 istore 2 ,contw 
+6fca 58000200 setarg 0x0200 
+6fcb e0a10000 istore 2 ,contw 
+6fcc 6801054a fetch 2 ,mem_sdp_error_code 
+6fcd e0a10000 istore 2 ,contw 
+6fce 70027507 jam 7 ,mem_sdp_tx_pkt_length 
+6fcf 20600000 rtn 
+
+ask_serviceclassid:
+6fd0 da400000 arg 0 ,regb 
+6fd1 18000400 force 0 ,temp 
+6fd2 d8a00511 arg mem_sdp_uuid_search_ptr ,contw 
+6fd3 20407028 call dataelementtype6 
+6fd4 2022f026 branch asksrv_error ,zero 
+
+classidloop:
+6fd5 1a40a401 increase 1 ,regb 
+6fd6 e8c08000 ifetch 1 ,contr 
+6fd7 1a20a3ff increase -1 ,rega 
+6fd8 196097ff increase -1 ,timeup 
+6fd9 2fe1f018 compare 0x18 ,pdata ,0xf8 
+6fda 2420f026 nbranch asksrv_error ,true 
+6fdb 2fe00e04 compare 0x04 ,pdata ,0x07 
+6fdc 2420eff3 nbranch cmp032 ,true 
+6fdd 18000401 force 1 ,temp 
+
+skip2bytes:
+6fde e8c08000 ifetch 1 ,contr 
+6fdf 1a20a3ff increase -1 ,rega 
+6fe0 196097ff increase -1 ,timeup 
+6fe1 c0806fe7 bne 0x00 ,frstbwrong 
+6fe2 e8c08000 ifetch 1 ,contr 
+6fe3 1a20a3ff increase -1 ,rega 
+6fe4 196097ff increase -1 ,timeup 
+6fe5 c0006ff8 beq 0x00 ,cmpuuid 
+6fe6 20206fea branch scndbwrong 
+
+frstbwrong:
+6fe7 18c08c01 increase 1 ,contr 
+6fe8 1a20a3ff increase -1 ,rega 
+6fe9 196097ff increase -1 ,timeup 
+
+scndbwrong:
+6fea 18c08c02 increase 2 ,contr 
+6feb 1a20a3fe increase -2 ,rega 
+6fec 196097fe increase -2 ,timeup 
+6fed 2841fe00 compare 0x00 ,temp ,0xff 
+6fee 2020f020 branch loopornot ,true 
+6fef 18c08c0c increase 12 ,contr 
+6ff0 1a20a3f4 increase -12 ,rega 
+6ff1 196097f4 increase -12 ,timeup 
+6ff2 20207020 branch loopornot 
+
+cmp032:
+6ff3 2fe00e02 compare 0x02 ,pdata ,0x07 
+6ff4 2420eff6 nbranch cmp016 ,true 
+6ff5 20206fde branch skip2bytes 
+
+cmp016:
+6ff6 2fe00e01 compare 0x01 ,pdata ,0x07 
+6ff7 2420f026 nbranch asksrv_error ,true 
+
+cmpuuid:
+6ff8 1a20a3fe increase -2 ,rega 
+6ff9 196097fe increase -2 ,timeup 
+6ffa e8c10000 ifetch 2 ,contr 
+6ffb 1a467c04 sub regb ,4 ,null 
+6ffc 2022effe branch uuidsize ,zero 
+6ffd e0a10000 istore 2 ,contw 
+
+uuidsize:
+6ffe 2841fe00 compare 0x00 ,temp ,0xff 
+6fff 2020f020 branch loopornot ,true 
+7000 18c20400 copy contr ,temp 
+7001 e8c08000 ifetch 1 ,contr 
+7002 c0807019 bne 0x00 ,wrong12b 
+7003 e8c08000 ifetch 1 ,contr 
+7004 c0807019 bne 0x00 ,wrong12b 
+7005 e8c08000 ifetch 1 ,contr 
+7006 c0887019 bne 0x10 ,wrong12b 
+7007 e8c08000 ifetch 1 ,contr 
+7008 c0807019 bne 0x00 ,wrong12b 
+7009 e8c08000 ifetch 1 ,contr 
+700a c0c07019 bne 0x80 ,wrong12b 
+700b e8c08000 ifetch 1 ,contr 
+700c c0807019 bne 0x00 ,wrong12b 
+700d e8c08000 ifetch 1 ,contr 
+700e c0807019 bne 0x00 ,wrong12b 
+700f e8c08000 ifetch 1 ,contr 
+7010 c0c07019 bne 0x80 ,wrong12b 
+7011 e8c08000 ifetch 1 ,contr 
+7012 c0aff019 bne 0x5f ,wrong12b 
+7013 e8c08000 ifetch 1 ,contr 
+7014 c0cdf019 bne 0x9b ,wrong12b 
+7015 e8c08000 ifetch 1 ,contr 
+7016 c09a7019 bne 0x34 ,wrong12b 
+7017 e8c08000 ifetch 1 ,contr 
+7018 c07df01e beq 0xfb ,chck12dn 
+
+wrong12b:
+7019 18420c00 copy temp ,contr 
+
+wrong12b1:
+701a 18c08c0c increase 12 ,contr 
+701b 18000e00 force 0x00 ,queue 
+701c 18000400 force 0x00 ,temp 
+701d 2020701e branch chck12dn 
+
+chck12dn:
+701e 196097f4 increase -12 ,timeup 
+701f 1a20a3f4 increase -12 ,rega 
+
+loopornot:
+7020 18000400 force 0x00 ,temp 
+7021 2a21fe00 compare 0x00 ,rega ,0xff 
+7022 2420efd5 nbranch classidloop ,true 
+7023 18007e00 force 0 ,pdata 
+7024 e0a10000 istore 2 ,contw 
+7025 20600000 rtn 
+
+asksrv_error:
+7026 d84000ff arg 0xff ,temp 
+7027 20600000 rtn 
+
+dataelementtype6:
+7028 476a403a bpatchx patch3a_4 ,mem_patch3a 
+7029 e8c08000 ifetch 1 ,contr 
+702a 196097ff increase -1 ,timeup 
+702b 2fe1f030 compare 0x30 ,pdata ,0xf8 
+702c 2420f03e nbranch dsize_error ,true 
+702d 2fe00e07 compare 0x07 ,pdata ,0x07 
+702e 2020f037 branch dsize32 ,true 
+702f 2fe00e06 compare 0x06 ,pdata ,0x07 
+7030 2020f039 branch dsize16 ,true 
+7031 2fe00e05 compare 0x05 ,pdata ,0x07 
+7032 2420f03e nbranch dsize_error ,true 
+7033 e8c08000 ifetch 1 ,contr 
+7034 1fe22200 copy pdata ,rega 
+7035 196097ff increase -1 ,timeup 
+7036 2020703c branch dsize 
+
+dsize32:
+7037 18c08c02 increase 2 ,contr 
+7038 196097fe increase -2 ,timeup 
+
+dsize16:
+7039 e8c10000 ifetch 2 ,contr 
+703a 1ff0a200 byteswap pdata ,rega 
+703b 196097fe increase -2 ,timeup 
+
+dsize:
+703c 18007e01 force 0x01 ,pdata 
+703d 20600000 rtn 
+
+dsize_error:
+703e 18007e00 force 0x00 ,pdata 
+703f 20600000 rtn 
+
+ss_empty_rsp:
+7040 58000003 setarg sdp_search_res 
+7041 6000851b store 1 ,mem_sdp_pduid 
+7042 20207048 branch empty_response 
+
+sa_empty_rsp:
+7043 58000005 setarg sdp_attribute_res 
+7044 6000851b store 1 ,mem_sdp_pduid 
+7045 20207048 branch empty_response 
+
+ssa_empty_rsp:
+7046 58000007 setarg sdp_searchattrib_res 
+7047 6000851b store 1 ,mem_sdp_pduid 
+
+empty_response:
+7048 204052d0 call l2cap_get_sdp_tx_payload 
+7049 6800851b fetch 1 ,mem_sdp_pduid 
+704a 1fe22400 copy pdata ,regb 
+704b e0a08000 istore 1 ,contw 
+704c 6801051c fetch 2 ,mem_sdp_transactionid 
+704d e0a10000 istore 2 ,contw 
+704e 58000500 setarg 0x0500 
+704f e0a10000 istore 2 ,contw 
+7050 2a41fe05 compare sdp_attribute_res ,regb ,0xff 
+7051 2020f057 branch fullsearch ,true 
+7052 2a41fe07 compare sdp_searchattrib_res ,regb ,0xff 
+7053 2020f057 branch fullsearch ,true 
+7054 58000000 setarg 0x000000 
+7055 e0a28000 istore 5 ,contw 
+7056 20207059 branch outempty 
+
+fullsearch:
+7057 58350200 setarg 0x350200 
+7058 e0a28000 istore 5 ,contw 
+
+outempty:
+7059 7002750a jam 10 ,mem_sdp_tx_pkt_length 
+705a 20600000 rtn 
+
+sdp_data_len:
+705b 20407ea2 call store_contw 
+705c 20407ea5 call store_contr 
+705d 20407062 call sdp_get_data 
+705e 20407e9c call get_contw 
+705f 20407e9f call get_contr 
+7060 18427e00 copy temp ,pdata 
+7061 20600000 rtn 
+
+sdp_get_data:
+7062 e8c08000 ifetch 1 ,contr 
+7063 1fe17207 and pdata ,0x7 ,loopcnt 
+7064 1fe97e00 rshift3 pdata ,pdata 
+7065 c080706c bne 0 ,sdp_get_data_type_not0 
+
+sdp_get_data_type0:
+7066 18007e01 force 1 ,pdata 
+7067 18000401 force 1 ,temp 
+7068 20600000 rtn 
+
+sdp_get_data_type_not0_sizeindex01234:
+7069 20407e76 call left_shift_n 
+706a 1fe08401 add pdata ,1 ,temp 
+706b 20600000 rtn 
+
+sdp_get_data_type_not0:
+706c 1f227e00 deposit loopcnt 
+706d 1fe67c04 sub pdata ,4 ,null 
+706e 20217069 branch sdp_get_data_type_not0_sizeindex01234 ,positive 
+706f c002f073 beq 5 ,sdp_get_data_type_not0_sizeindex5 
+7070 c0037076 beq 6 ,sdp_get_data_type_not0_sizeindex6 
+7071 c003f07a beq 7 ,sdp_get_data_type_not0_sizeindex7 
+7072 20600000 rtn 
+
+sdp_get_data_type_not0_sizeindex5:
+7073 e8c08000 ifetch 1 ,contr 
+7074 1fe08402 add pdata ,2 ,temp 
+7075 20600000 rtn 
+
+sdp_get_data_type_not0_sizeindex6:
+7076 e8c10000 ifetch 2 ,contr 
+7077 1ff0fe00 byteswap pdata ,pdata 
+7078 1fe08403 add pdata ,3 ,temp 
+7079 20600000 rtn 
+
+sdp_get_data_type_not0_sizeindex7:
+707a e8c10000 ifetch 2 ,contr 
+707b 1ff0fe00 byteswap pdata ,pdata 
+707c e8c90000 ifetcht 2 ,contr 
+707d 18508400 byteswap temp ,temp 
+707e 18500400 lshift16 temp ,temp 
+707f 9840fe00 iadd temp ,pdata 
+7080 1fe08405 add pdata ,5 ,temp 
+7081 20600000 rtn 
+
+search_all_uuid:
+7082 476ac03a bpatchx patch3a_5 ,mem_patch3a 
+7083 18000e00 force 0 ,queue 
+7084 da400000 arg 0 ,regb 
+7085 d8a0052a arg mem_sdp_handle_list ,contw 
+
+search_all_uuid_llop:
+7086 e9610000 ifetch 2 ,timeup 
+7087 207a0000 rtn blank 
+7088 2040708d call search_uuid 
+7089 18e27e00 copy queue ,pdata 
+708a c1038000 rtneq sdp_max_handle_number 
+708b 19609602 increase 2 ,timeup 
+708c 20207086 branch search_all_uuid_llop 
+
+search_uuid:
+708d 98002600 iforce regc 
+708e 68014575 fetch 2 ,mem_ui_uuid_table 
+708f 98000c00 iforce contr 
+
+search_uuid_next:
+7090 18e27e00 copy queue ,pdata 
+7091 c1038000 rtneq sdp_max_handle_number 
+7092 78547c00 disable user 
+7093 e8c08000 ifetch 1 ,contr 
+7094 207a0000 rtn blank 
+7095 98007200 iforce loopcnt 
+
+search_uuid_loop:
+7096 e8c10000 ifetch 2 ,contr 
+7097 9a667c00 isub regc ,null 
+7098 2422f09a nbranch search_uuid_not_found ,zero 
+7099 78347c00 enable user 
+
+search_uuid_not_found:
+709a c2007096 loop search_uuid_loop 
+709b e8ca0000 ifetcht 4 ,contr 
+709c 18c22200 copy contr ,rega 
+709d 243470ad nbranch search_uuid_nomatch ,user 
+709e d8c0052a arg mem_sdp_handle_list ,contr 
+709f df200007 arg sdp_max_handle_number ,loopcnt 
+
+search_uuid_check_same_handle:
+70a0 e8c20000 ifetch 4 ,contr 
+70a1 203a70a6 branch search_uuid_store_handle ,blank 
+70a2 98467c00 isub temp ,null 
+70a3 2022f0ad branch search_uuid_nomatch ,zero 
+70a4 c20070a0 loop search_uuid_check_same_handle 
+70a5 20600000 rtn 
+
+search_uuid_store_handle:
+70a6 e0aa0000 istoret 4 ,contw 
+70a7 18e08e01 increase 1 ,queue 
+70a8 1a220c00 copy rega ,contr 
+70a9 2040705b call sdp_data_len 
+70aa 9a40a400 iadd regb ,regb 
+70ab 98c08c00 iadd contr ,contr 
+70ac 20207090 branch search_uuid_next 
+
+search_uuid_nomatch:
+70ad 1a220c00 copy rega ,contr 
+70ae 20407062 call sdp_get_data 
+70af 98c08c00 iadd contr ,contr 
+70b0 20207090 branch search_uuid_next 
+
+search_handle:
+70b1 476b403a bpatchx patch3a_6 ,mem_patch3a 
+70b2 68014575 fetch 2 ,mem_ui_uuid_table 
+70b3 98000c00 iforce contr 
+
+search_handle_loop:
+70b4 e8c08000 ifetch 1 ,contr 
+70b5 203a7fe3 branch disable_zero ,blank 
+70b6 1fe3fe00 lshift pdata ,pdata 
+70b7 98c08c00 iadd contr ,contr 
+70b8 e8c20000 ifetch 4 ,contr 
+70b9 98467c00 isub temp ,null 
+70ba 20628000 rtn zero 
+70bb 18a27e00 deposit contw 
+70bc 60010abb store 2 ,mem_contw 
+70bd 600c0aa2 storet 8 ,mem_temp 
+70be 20407062 call sdp_get_data 
+70bf 98c08c00 iadd contr ,contr 
+70c0 18c27e00 copy contr ,pdata 
+70c1 68090abb fetcht 2 ,mem_contw 
+70c2 18420a00 copy temp ,contw 
+70c3 680c0aa2 fetcht 8 ,mem_temp 
+70c4 1fe20c00 copy pdata ,contr 
+70c5 202070b4 branch search_handle_loop 
+
+search_attrib:
+70c6 476bc03a bpatchx patch3a_7 ,mem_patch3a 
+70c7 68014575 fetch 2 ,mem_ui_uuid_table 
+70c8 98000c00 iforce contr 
+
+search_attrib_next:
+70c9 e8c08000 ifetch 1 ,contr 
+70ca 203a70e4 branch search_attrib_end ,blank 
+70cb 98007200 iforce loopcnt 
+
+search_attrib_loop:
+70cc e8c10000 ifetch 2 ,contr 
+70cd 9a667c00 isub regc ,null 
+70ce 2022f0d4 branch search_attrib_found_uuid ,zero 
+70cf c20070cc loop search_attrib_loop 
+70d0 18c08c04 increase 4 ,contr 
+70d1 20407062 call sdp_get_data 
+70d2 98c08c00 iadd contr ,contr 
+70d3 202070c9 branch search_attrib_next 
+
+search_attrib_found_uuid:
+70d4 1f20f3ff increase -1 ,loopcnt 
+70d5 1f23fe00 lshift loopcnt ,pdata 
+70d6 98c08c00 iadd contr ,contr 
+70d7 18c08c04 increase 4 ,contr 
+70d8 20407062 call sdp_get_data 
+70d9 98c09600 iadd contr ,timeup 
+
+search_attrib_loop_attribs:
+70da 18c08c01 increase 1 ,contr 
+70db e8c10000 ifetch 2 ,contr 
+70dc 9a467c00 isub regb ,null 
+70dd 2022ffef branch disable_blank ,zero 
+70de 2040705b call sdp_data_len 
+70df 98c08c00 iadd contr ,contr 
+70e0 19627e00 deposit timeup 
+70e1 98c67c00 isub contr ,null 
+70e2 2022f0e4 branch search_attrib_end ,zero 
+70e3 202070da branch search_attrib_loop_attribs 
+
+search_attrib_end:
+70e4 18000c00 force 0 ,contr 
+70e5 18007e00 force 0 ,pdata 
+70e6 20600000 rtn 
+
+search_handle_attrib:
+70e7 476c403b bpatchx patch3b_0 ,mem_patch3b 
+70e8 68014575 fetch 2 ,mem_ui_uuid_table 
+70e9 98000c00 iforce contr 
+
+search_handle_attrib_next:
+70ea e8c08000 ifetch 1 ,contr 
+70eb 203a7100 branch search_handle_attrib_end ,blank 
+70ec 1fe3fe00 lshift pdata ,pdata 
+70ed 98c08c00 iadd contr ,contr 
+70ee e8c20000 ifetch 4 ,contr 
+70ef 98467c00 isub temp ,null 
+70f0 2022f0f4 branch search_handl_attrib_found_handle ,zero 
+70f1 20407062 call sdp_get_data 
+70f2 98c08c00 iadd contr ,contr 
+70f3 202070ea branch search_handle_attrib_next 
+
+search_handl_attrib_found_handle:
+70f4 20407062 call sdp_get_data 
+70f5 98c09600 iadd contr ,timeup 
+
+search_handle_attrib_loop_attribs:
+70f6 18c08c01 increase 1 ,contr 
+70f7 e8c10000 ifetch 2 ,contr 
+70f8 9a467c00 isub regb ,null 
+70f9 20628000 rtn zero 
+70fa 2040705b call sdp_data_len 
+70fb 98c08c00 iadd contr ,contr 
+70fc 19627e00 deposit timeup 
+70fd 98c67c00 isub contr ,null 
+70fe 2022f100 branch search_handle_attrib_end ,zero 
+70ff 202070f6 branch search_handle_attrib_loop_attribs 
+
+search_handle_attrib_end:
+7100 18000c00 force 0 ,contr 
+7101 20600000 rtn 
+
+search_rfcomm_cn:
+7102 da400400 arg 0x0400 ,regb 
+7103 204070f4 call search_handl_attrib_found_handle 
+7104 da400300 arg 0x0300 ,regb 
+7105 2040710d call search_uuid_in_data 
+7106 24740000 nrtn user 
+7107 1a267c03 sub rega ,3 ,null 
+7108 20217fe9 branch disable_user ,positive 
+7109 e8c08000 ifetch 1 ,contr 
+710a c0847fe9 bne 0x08 ,disable_user 
+710b e8c08000 ifetch 1 ,contr 
+710c 20600000 rtn 
+
+search_uuid_in_data:
+710d 476cc03b bpatchx patch3b_1 ,mem_patch3b 
+710e 20407062 call sdp_get_data 
+710f 1fe22200 copy pdata ,rega 
+
+search_uuid_in_data_loop:
+7110 e8c08000 ifetch 1 ,contr 
+7111 1fe17207 and pdata ,0x7 ,loopcnt 
+7112 1fe97e00 rshift3 pdata ,pdata 
+7113 1fe67c03 sub pdata ,3 ,null 
+7114 2022f129 branch search_uuid_in_data_found_uuid ,zero 
+7115 1f227e00 copy loopcnt ,pdata 
+7116 c002f120 beq 5 ,search_uuid_in_data_found_element_index5 
+7117 c0037123 beq 6 ,search_uuid_in_data_found_element_index6 
+7118 c003f126 beq 7 ,search_uuid_in_data_found_element_index7 
+7119 18c08dff increase -1 ,contr 
+711a 20407062 call sdp_get_data 
+711b 98c08c00 iadd contr ,contr 
+711c 1a227e00 copy rega ,pdata 
+711d 98462200 isub temp ,rega 
+711e 2022ffe9 branch disable_user ,zero 
+711f 20207110 branch search_uuid_in_data_loop 
+
+search_uuid_in_data_found_element_index5:
+7120 1a20a3fe increase -2 ,rega 
+7121 18c08c01 increase 1 ,contr 
+7122 20207110 branch search_uuid_in_data_loop 
+
+search_uuid_in_data_found_element_index6:
+7123 1a20a3fd increase -3 ,rega 
+7124 18c08c02 increase 2 ,contr 
+7125 20207110 branch search_uuid_in_data_loop 
+
+search_uuid_in_data_found_element_index7:
+7126 1a20a3fb increase -5 ,rega 
+7127 18c08c04 increase 4 ,contr 
+7128 20207110 branch search_uuid_in_data_loop 
+
+search_uuid_in_data_found_uuid:
+7129 1a20a3ff increase -1 ,rega 
+712a 1f227e00 copy loopcnt ,pdata 
+712b c000f132 beq 1 ,search_uuid_in_data_type_uuid_16 
+712c c0017130 beq 2 ,search_uuid_in_data_type_uuid_32 
+712d c002712f beq 4 ,search_uuid_in_data_type_uuid_128 
+712e 20207fe9 branch disable_user 
+
+search_uuid_in_data_type_uuid_128:
+712f 1a20a3f4 increase -12 ,rega 
+
+search_uuid_in_data_type_uuid_32:
+7130 e8c10000 ifetch 2 ,contr 
+7131 1a20a3fe increase -2 ,rega 
+
+search_uuid_in_data_type_uuid_16:
+7132 e8c10000 ifetch 2 ,contr 
+7133 9a467c00 isub regb ,null 
+7134 2022ffe7 branch enable_user ,zero 
+7135 1a20a3fe increase -2 ,rega 
+7136 2022ffe9 branch disable_user ,zero 
+7137 20207110 branch search_uuid_in_data_loop 
+
+sdp_send_spp_request:
+7138 204052d0 call l2cap_get_sdp_tx_payload 
+7139 1fe20a00 copy pdata ,contw 
+713a 58000006 setarg 6 
+713b e0a08000 istore 1 ,contw 
+713c 5800006e setarg sdp_tid_spp 
+713d e0a10000 istore 2 ,contw 
+713e 58000f00 setarg 0x0f00 
+713f e0a10000 istore 2 ,contw 
+7140 581a0535 setarg 0x1a0535 
+7141 e0a18000 istore 3 ,contw 
+7142 58000111 setarg 0x0111 
+7143 1ff07e00 lshift16 pdata ,pdata 
+7144 e0a20000 istore 4 ,contw 
+7145 58002600 setarg 0x2600 
+7146 e0a10000 istore 2 ,contw 
+7147 58000335 setarg 0x0335 
+7148 e0a10000 istore 2 ,contw 
+7149 58000009 setarg 0x0009 
+714a e0a10000 istore 2 ,contw 
+714b 58000004 setarg 0x0004 
+714c e0a10000 istore 2 ,contw 
+714d 70027514 jam 0x14 ,mem_sdp_tx_pkt_length 
+714e 20600000 rtn 
+
+function_g2:
+714f 476d403b bpatchx patch3b_2 ,mem_patch3b 
+7150 7005e550 jam 80 ,mem_aes_cmac_data_length 
+7151 d8a005e6 arg memdat ,contw 
+7152 d8c0443a arg mem_le_srand ,contr 
+7153 20407ebf call memcpy16 
+7154 d8c045d2 arg mem_le_pubkey_local_x_256 ,contr 
+7155 20407ebd call memcpy32 
+7156 d8c009be arg mem_le_pubkey_remote_x_256 ,contr 
+7157 20407ebd call memcpy32 
+7158 2040720a call inverse_memdat 
+7159 d8c0042f arg mem_le_mrand ,contr 
+715a 20407205 call store_inverse_k 
+715b 204071d0 call function_aes_cmac 
+715c d8a00af2 arg mem_aes_cmac_temp ,contw 
+715d 20407201 call load_inverse_result 
+715e 580f4240 setarg 1000000 
+715f 1fe22200 copy pdata ,rega 
+7160 68020af2 fetch 4 ,mem_aes_cmac_temp 
+7161 9a26fc00 idiv rega 
+7162 20407f86 call wait_div_end 
+7163 18077e00 remainder pdata 
+7164 600209ba store 4 ,mem_gkey 
+7165 20600000 rtn 
+
+function_f6_eb:
+7166 7005e541 jam 65 ,mem_aes_cmac_data_length 
+7167 d8a005e6 arg memdat ,contw 
+7168 204071b5 call store_addr_common_a 
+7169 204071b0 call store_addr_common_b 
+716a 6801c454 fetch 3 ,mem_le_pres + 1 
+716b e0a18000 istore 3 ,contw 
+716c 20407176 call get_r 
+716d d8c0042f arg mem_le_mrand ,contr 
+716e 20407ebf call memcpy16 
+716f d8c0443a arg mem_le_srand ,contr 
+7170 20407ebf call memcpy16 
+7171 2040720a call inverse_memdat 
+7172 d8c00b12 arg mem_le_mackey ,contr 
+7173 d8a00ac2 arg mem_aes_cmac_k ,contw 
+7174 20407ebf call memcpy16 
+7175 202071d0 branch function_aes_cmac 
+
+get_r:
+7176 680244c7 fetch 4 ,mem_le_tk 
+7177 e0a20000 istore 4 ,contw 
+7178 20407ecd call memset0_4 
+7179 20207eca branch memset0_8 
+
+function_f6_ea:
+717a 476dc03b bpatchx patch3b_3 ,mem_patch3b 
+717b 7005e541 jam 65 ,mem_aes_cmac_data_length 
+717c d8a005e6 arg memdat ,contw 
+717d 204071b0 call store_addr_common_b 
+717e 204071b5 call store_addr_common_a 
+717f 6801c44d fetch 3 ,mem_le_preq + 1 
+7180 e0a18000 istore 3 ,contw 
+7181 20407176 call get_r 
+7182 d8c0443a arg mem_le_srand ,contr 
+7183 20407ebf call memcpy16 
+7184 d8c0042f arg mem_le_mrand ,contr 
+7185 20407ebf call memcpy16 
+7186 2040720a call inverse_memdat 
+7187 d8c00b12 arg mem_le_mackey ,contr 
+7188 d8a00ac2 arg mem_aes_cmac_k ,contw 
+7189 20407ebf call memcpy16 
+718a 204071d0 call function_aes_cmac 
+718b d8a00af2 arg mem_aes_cmac_temp ,contw 
+718c 20207201 branch load_inverse_result 
+
+function_f5:
+718d 7005e520 jam 32 ,mem_aes_cmac_data_length 
+718e d8c009fe arg mem_le_dhkey_256 ,contr 
+718f d8a005e6 arg memdat ,contw 
+7190 20407ebd call memcpy32 
+7191 2040720a call inverse_memdat 
+7192 d8c0099e arg mem_le_slat ,contr 
+7193 20407205 call store_inverse_k 
+7194 204071d0 call function_aes_cmac 
+7195 d8a00ac2 arg mem_aes_cmac_k ,contw 
+7196 20407497 call store_aes_result 
+7197 d8400001 arg 1 ,temp 
+7198 2040719f call function_f5_common 
+7199 d8a04419 arg mem_le_ltk ,contw 
+719a 20407201 call load_inverse_result 
+719b d8400000 arg 0 ,temp 
+719c 2040719f call function_f5_common 
+719d d8a00b12 arg mem_le_mackey ,contw 
+719e 20207497 branch store_aes_result 
+
+function_f5_common:
+719f 476e403b bpatchx patch3b_4 ,mem_patch3b 
+71a0 7005e535 jam 53 ,mem_aes_cmac_data_length 
+71a1 58000100 setarg 0x100 
+71a2 600105e6 store 2 ,memdat 
+71a3 204071b0 call store_addr_common_b 
+71a4 204071b5 call store_addr_common_a 
+71a5 d8c0443a arg mem_le_srand ,contr 
+71a6 20407ebf call memcpy16 
+71a7 d8c0042f arg mem_le_mrand ,contr 
+71a8 20407ebf call memcpy16 
+71a9 58006c65 setarg 0x6c65 
+71aa e0a10000 istore 2 ,contw 
+71ab 58006274 setarg 0x6274 
+71ac e0a10000 istore 2 ,contw 
+71ad e0a88000 istoret 1 ,contw 
+71ae 2040720a call inverse_memdat 
+71af 202071d0 branch function_aes_cmac 
+
+store_addr_common_b:
+71b0 680344a0 fetch 6 ,mem_le_lap 
+71b1 e0a30000 istore 6 ,contw 
+71b2 6800c495 fetch 1 ,mem_le_conn_own_addr_type 
+71b3 e0a08000 istore 1 ,contw 
+71b4 20600000 rtn 
+
+store_addr_common_a:
+71b5 6803044f fetch 6 ,mem_le_plap 
+71b6 e0a30000 istore 6 ,contw 
+71b7 6800c48e fetch 1 ,mem_le_conn_peer_addr_type 
+71b8 e0a08000 istore 1 ,contw 
+71b9 20600000 rtn 
+
+function_f4_ca:
+71ba 7005e541 jam 65 ,mem_aes_cmac_data_length 
+71bb 6800c664 fetch 1 ,mem_passkey_1bit 
+71bc 600085e6 store 1 ,memdat 
+71bd d8c045d2 arg mem_le_pubkey_local_x_256 ,contr 
+71be 20407ebd call memcpy32 
+71bf d8c009be arg mem_le_pubkey_remote_x_256 ,contr 
+71c0 20407ebd call memcpy32 
+71c1 2040720a call inverse_memdat 
+71c2 d8c0042f arg mem_le_mrand ,contr 
+71c3 20407205 call store_inverse_k 
+71c4 202071d0 branch function_aes_cmac 
+
+function_f4_cb:
+71c5 7005e541 jam 65 ,mem_aes_cmac_data_length 
+71c6 6800c664 fetch 1 ,mem_passkey_1bit 
+71c7 600085e6 store 1 ,memdat 
+71c8 d8c009be arg mem_le_pubkey_remote_x_256 ,contr 
+71c9 20407ebd call memcpy32 
+71ca d8c045d2 arg mem_le_pubkey_local_x_256 ,contr 
+71cb 20407ebd call memcpy32 
+71cc 2040720a call inverse_memdat 
+71cd d8c0443a arg mem_le_srand ,contr 
+71ce 20407205 call store_inverse_k 
+71cf 202071d0 branch function_aes_cmac 
+
+function_aes_cmac:
+71d0 476ec03b bpatchx patch3b_5 ,mem_patch3b 
+71d1 2040721f call function_aes_cmac_generate_subkey 
+71d2 680085e5 fetch 1 ,mem_aes_cmac_data_length 
+71d3 1fe20400 copy pdata ,temp 
+
+function_ceil16:
+71d4 1fe0fe0f increase 15 ,pdata 
+71d5 1ff1fe00 rshift4 pdata ,pdata 
+71d6 1fe22400 copy pdata ,regb 
+71d7 203a71e2 branch function_aes_cmac_set_flag_0_balnk ,blank 
+71d8 18417e0f and temp ,0x0f ,pdata 
+71d9 243a71e5 nbranch function_aes_cmac_set_flag_0 ,blank 
+71da da600ad2 arg mem_aes_cmac_k1 ,regc 
+71db dfe005e6 arg memdat ,pdata 
+71dc 1fe0fff0 increase -16 ,pdata 
+71dd 9840a200 iadd temp ,rega 
+71de d8a00b02 arg mem_aes_cmac_m_last ,contw 
+71df df200004 arg 4 ,loopcnt 
+71e0 20407edd call xor_loop 
+71e1 202071f0 branch function_aes_cmac_aes 
+
+function_aes_cmac_set_flag_0_balnk:
+71e2 da400001 arg 1 ,regb 
+71e3 da200000 arg 0 ,rega 
+71e4 202071e6 branch function_aes_cmac_set_flag_0_common 
+
+function_aes_cmac_set_flag_0:
+71e5 1841220f and temp ,0x0f ,rega 
+
+function_aes_cmac_set_flag_0_common:
+71e6 dfe005e6 arg memdat ,pdata 
+71e7 9840fe00 iadd temp ,pdata 
+71e8 9a260c00 isub rega ,contr 
+71e9 d8a00af2 arg mem_aes_cmac_temp ,contw 
+71ea 20407245 call function_aes_cmac_padding 
+71eb da600ae2 arg mem_aes_cmac_k2 ,regc 
+71ec da200af2 arg mem_aes_cmac_temp ,rega 
+71ed d8a00b02 arg mem_aes_cmac_m_last ,contw 
+71ee df200004 arg 4 ,loopcnt 
+71ef 20407edd call xor_loop 
+
+function_aes_cmac_aes:
+71f0 20407491 call aes_clear_data 
+71f1 20407428 call aes_init 
+71f2 d8c005e6 arg memdat ,contr 
+
+function_aes_cmac_aes_loop:
+71f3 1a40a5ff increase -1 ,regb 
+71f4 1a427e00 deposit regb 
+71f5 203a71f9 branch function_aes_cmac_aes_loop_end ,blank 
+71f6 20407486 call load_data128 
+71f7 20407422 call do_aes_cbc 
+71f8 202071f3 branch function_aes_cmac_aes_loop 
+
+function_aes_cmac_aes_loop_end:
+71f9 d8a00af2 arg mem_aes_cmac_temp ,contw 
+71fa 20407497 call store_aes_result 
+71fb d8c00b02 arg mem_aes_cmac_m_last ,contr 
+71fc 20407486 call load_data128 
+71fd 20407428 call aes_init 
+71fe d8c00af2 arg mem_aes_cmac_temp ,contr 
+71ff 20407486 call load_data128 
+7200 20207422 branch do_aes_cbc 
+
+load_inverse_result:
+7201 18a22200 copy contw ,rega 
+7202 20407497 call store_aes_result 
+7203 df200010 arg 16 ,loopcnt 
+7204 20207ee5 branch inverse_data 
+
+store_inverse_k:
+7205 d8a00ac2 arg mem_aes_cmac_k ,contw 
+7206 20407ebf call memcpy16 
+
+inverse_k:
+7207 df200010 arg 16 ,loopcnt 
+7208 da200ac2 arg mem_aes_cmac_k ,rega 
+7209 20207ee5 branch inverse_data 
+
+inverse_memdat:
+720a 680085e5 fetch 1 ,mem_aes_cmac_data_length 
+720b 1fe27200 copy pdata ,loopcnt 
+720c da2005e6 arg memdat ,rega 
+720d 20207ee5 branch inverse_data 
+
+bn_lshift_0_inverse:
+720e ea208000 ifetch 1 ,rega 
+720f 1fe3fe00 lshift pdata ,pdata 
+7210 2a6ffe00 isolate1 0 ,regc 
+7211 7920fe00 setflag true ,0 ,pdata 
+7212 2feffe08 isolate1 8 ,pdata 
+7213 7920a600 setflag true ,0 ,regc 
+7214 e2208000 istore 1 ,rega 
+7215 1a20a3ff increase -1 ,rega 
+7216 c200720e loop bn_lshift_0_inverse 
+7217 20600000 rtn 
+
+function_aes_cmac_k1_inverse:
+7218 da200ad2 arg mem_aes_cmac_k1 ,rega 
+
+function_aes_cmac_inverse_common:
+7219 1a20a20f increase 15 ,rega 
+721a 18007210 force 16 ,loopcnt 
+721b 18002600 force 0 ,regc 
+721c 2020720e branch bn_lshift_0_inverse 
+
+function_aes_cmac_k2_inverse:
+721d da200ae2 arg mem_aes_cmac_k2 ,rega 
+721e 20207219 branch function_aes_cmac_inverse_common 
+
+function_aes_cmac_generate_subkey:
+721f d8c00ac2 arg mem_aes_cmac_k ,contr 
+7220 20407484 call load_key 
+7221 18007008 force regidx_xor ,regext_index 
+7222 20407492 call aes_clear 
+7223 20407491 call aes_clear_data 
+7224 2040741f call do_aes_ocb 
+7225 d8a00ad2 arg mem_aes_cmac_k1 ,contw 
+7226 20407497 call store_aes_result 
+
+function_aes_cmac_k1:
+7227 476f403b bpatchx patch3b_6 ,mem_patch3b 
+7228 68008ad2 fetch 1 ,mem_aes_cmac_k1 
+7229 2feffe07 isolate1 7 ,pdata 
+722a 2420f230 nbranch function_aes_cmac_k1_0 ,true 
+722b 20407218 call function_aes_cmac_k1_inverse 
+722c da600ad2 arg mem_aes_cmac_k1 ,regc 
+722d d8a00ad2 arg mem_aes_cmac_k1 ,contw 
+722e 2040723a call function_aes_cmac_xor_rb 
+722f 20207231 branch function_aes_cmac_k2 
+
+function_aes_cmac_k1_0:
+7230 20407218 call function_aes_cmac_k1_inverse 
+
+function_aes_cmac_k2:
+7231 d8c00ad2 arg mem_aes_cmac_k1 ,contr 
+7232 d8a00ae2 arg mem_aes_cmac_k2 ,contw 
+7233 20407ebf call memcpy16 
+7234 68008ae2 fetch 1 ,mem_aes_cmac_k2 
+7235 2feffe07 isolate1 7 ,pdata 
+7236 2420f21d nbranch function_aes_cmac_k2_inverse ,true 
+7237 2040721d call function_aes_cmac_k2_inverse 
+7238 da600ae2 arg mem_aes_cmac_k2 ,regc 
+7239 d8a00ae2 arg mem_aes_cmac_k2 ,contw 
+
+function_aes_cmac_xor_rb:
+723a df200003 arg 3 ,loopcnt 
+
+function_aes_cmac_xor_rb_loop:
+723b d8400000 arg 0 ,temp 
+723c 20407241 call function_aes_cmac_xor_loop_common 
+723d 1a60a604 increase 4 ,regc 
+723e c200723b loop function_aes_cmac_xor_rb_loop 
+723f d8408700 arg 0x8700 ,temp 
+7240 18500400 lshift16 temp ,temp 
+
+function_aes_cmac_xor_loop_common:
+7241 ea620000 ifetch 4 ,regc 
+7242 9842fe00 ixor temp ,pdata 
+7243 e0a20000 istore 4 ,contw 
+7244 20600000 rtn 
+
+function_aes_cmac_padding:
+7245 476fc03b bpatchx patch3b_7 ,mem_patch3b 
+7246 df200010 arg 16 ,loopcnt 
+7247 dfe00000 arg 0 ,pdata 
+
+function_aes_cmac_padding_loop:
+7248 9a267c00 isub rega ,null 
+7249 2022f250 branch function_aes_cmac_padding_beq_length ,zero 
+724a 20217253 branch function_aes_cmac_padding_big_length ,positive 
+724b e8c88000 ifetcht 1 ,contr 
+724c e0a88000 istoret 1 ,contw 
+
+function_aes_cmac_padding_loop2:
+724d 1fe0fe01 increase 1 ,pdata 
+724e c2007248 loop function_aes_cmac_padding_loop 
+724f 20600000 rtn 
+
+function_aes_cmac_padding_beq_length:
+7250 d8400080 arg 0x80 ,temp 
+
+function_aes_cmac_padding_common:
+7251 e0a88000 istoret 1 ,contw 
+7252 2020724d branch function_aes_cmac_padding_loop2 
+
+function_aes_cmac_padding_big_length:
+7253 d8400000 arg 0 ,temp 
+7254 20207251 branch function_aes_cmac_padding_common 
+
+generate_kinit:
+7255 20407268 call function_e22 
+7256 d8c00592 arg mem_input_store ,contr 
+7257 d8a00582 arg mem_kinit ,contw 
+7258 20207ebf branch memcpy16 
+
+function_e21:
+7259 78547c00 disable user 
+725a 2040735f call function_expand 
+725b d8c00562 arg mem_random_number ,contr 
+725c d8a005a2 arg mem_x ,contw 
+725d 1800720f force 15 ,loopcnt 
+725e 20407f01 call memcpy 
+725f e8c08000 ifetch 1 ,contr 
+7260 1fe2fe06 xor_into 6 ,pdata 
+7261 e0a08000 istore 1 ,contw 
+7262 580005b2 setarg mem_y 
+7263 600105d6 store 2 ,memp_ar_input 
+7264 580005a2 setarg mem_x 
+7265 600105d4 store 2 ,memp_ar_key 
+7266 79200012 set1 mark_ar2 ,mark 
+7267 202072a8 branch function_ar 
+
+function_e22:
+7268 6808c689 fetcht 1 ,mem_pin_length 
+7269 18002410 force 16 ,regb 
+726a 1840a606 add temp ,6 ,regc 
+726b 1a667c10 sub regc ,16 ,null 
+726c 2021726e branch function_e22_pin_init ,positive 
+726d 18002610 force 16 ,regc 
+
+function_e22_pin_init:
+726e d8a005a2 arg mem_x ,contw 
+
+function_e22_genx_pin:
+726f d8c0468a arg mem_pin ,contr 
+7270 18427200 copy temp ,loopcnt 
+7271 78547c00 disable user 
+
+function_e22_genx_loop:
+7272 e8c08000 ifetch 1 ,contr 
+7273 e0a08000 istore 1 ,contw 
+7274 1a40a5ff increase -1 ,regb 
+7275 2022f27c branch function_e22_genx_end ,zero 
+7276 c2007272 loop function_e22_genx_loop 
+7277 2034726f branch function_e22_genx_pin ,user 
+7278 78347c00 enable user 
+7279 18007206 force 6 ,loopcnt 
+727a 1a220c00 copy rega ,contr 
+727b 20207272 branch function_e22_genx_loop 
+
+function_e22_genx_end:
+727c d8c00562 arg mem_random_number ,contr 
+727d d8a005b2 arg mem_y ,contw 
+727e 20407ebf call memcpy16 
+727f 680085c1 fetch 1 ,mem_y15 
+7280 9a62fe00 ixor regc ,pdata 
+7281 600085c1 store 1 ,mem_y15 
+7282 580005b2 setarg mem_y 
+7283 600105d6 store 2 ,memp_ar_input 
+7284 580005a2 setarg mem_x 
+7285 600105d4 store 2 ,memp_ar_key 
+7286 79200012 set1 mark_ar2 ,mark 
+7287 202072a8 branch function_ar 
+
+function_e1:
+7288 78547c00 disable user 
+7289 2040735f call function_expand 
+728a 20207292 branch function_hash 
+
+function_e3:
+728b da200056 arg mem_aco ,rega 
+728c 78347c00 enable user 
+728d 2040735f call function_expand 
+728e 20407292 call function_hash 
+728f d8c00592 arg mem_input_store ,contr 
+7290 d8a00062 arg mem_kc ,contw 
+7291 20207ebf branch memcpy16 
+
+function_hash:
+7292 58000562 setarg mem_random_number 
+7293 600105d6 store 2 ,memp_ar_input 
+7294 580041be setarg mem_link_key 
+7295 600105d4 store 2 ,memp_ar_key 
+7296 793f8012 set0 mark_ar2 ,mark 
+7297 204072a8 call function_ar 
+7298 da200592 arg mem_input_store ,rega 
+7299 da400562 arg mem_random_number ,regb 
+729a d8a005a2 arg mem_x ,contw 
+729b 20407352 call xor16 
+729c da2005a2 arg mem_x ,rega 
+729d da4005b2 arg mem_y ,regb 
+729e 1a420a00 copy regb ,contw 
+729f 78347c00 enable user 
+72a0 20407350 call add16 
+72a1 2040736a call key_offset 
+72a2 580005b2 setarg mem_y 
+72a3 600105d6 store 2 ,memp_ar_input 
+72a4 580005a2 setarg mem_x 
+72a5 600105d4 store 2 ,memp_ar_key 
+72a6 79200012 set1 mark_ar2 ,mark 
+72a7 202072a8 branch function_ar 
+
+function_ar:
+72a8 7005d800 jam 0 ,mem_ar_hround 
+72a9 680105d4 fetch 2 ,memp_ar_key 
+72aa 98000c00 iforce contr 
+72ab d8a005c2 arg mem_key_store ,contw 
+72ac 20407ebf call memcpy16 
+72ad 680105d6 fetch 2 ,memp_ar_input 
+72ae 98000c00 iforce contr 
+72af d8a00592 arg mem_input_store ,contw 
+72b0 20407ebf call memcpy16 
+
+function_ar_loop:
+72b1 204072cf call key_scheduling 
+72b2 78547c00 disable user 
+72b3 c58972b9 bmark0 mark_ar2 ,function_ar_original 
+72b4 680085d8 fetch 1 ,mem_ar_hround 
+72b5 c08272b9 bne 4 ,function_ar_original 
+72b6 680105d6 fetch 2 ,memp_ar_input 
+72b7 98002400 iforce regb 
+72b8 20407301 call xor_mod32_ar2 
+
+function_ar_original:
+72b9 20407300 call xor_mod32 
+72ba 20407313 call el_boxes 
+72bb 680085d8 fetch 1 ,mem_ar_hround 
+72bc 1fe0fe01 increase 1 ,pdata 
+72bd 600085d8 store 1 ,mem_ar_hround 
+72be 204072cf call key_scheduling 
+72bf 78347c00 enable user 
+72c0 20407300 call xor_mod32 
+72c1 20407322 call pht 
+72c2 20407331 call permute 
+72c3 20407322 call pht 
+72c4 20407331 call permute 
+72c5 20407322 call pht 
+72c6 20407331 call permute 
+72c7 20407322 call pht 
+72c8 680085d8 fetch 1 ,mem_ar_hround 
+72c9 1fe0fe01 increase 1 ,pdata 
+72ca 600085d8 store 1 ,mem_ar_hround 
+72cb c08872b1 bne 16 ,function_ar_loop 
+72cc 204072cf call key_scheduling 
+72cd 78547c00 disable user 
+72ce 20207300 branch xor_mod32 
+
+key_scheduling:
+72cf 680085d8 fetch 1 ,mem_ar_hround 
+72d0 d8c005c2 arg mem_key_store ,contr 
+72d1 203a72f6 branch key_sched_zero ,blank 
+72d2 98002400 iforce regb 
+72d3 18007211 force 17 ,loopcnt 
+72d4 18c20a00 copy contr ,contw 
+
+key_rotateloop:
+72d5 e8c08000 ifetch 1 ,contr 
+72d6 1fe98400 lshift3 pdata ,temp 
+72d7 1feb7e00 rshift2 pdata ,pdata 
+72d8 1fe97e00 rshift3 pdata ,pdata 
+72d9 9841fe00 ior temp ,pdata 
+72da e0a08000 istore 1 ,contw 
+72db c20072d5 loop key_rotateloop 
+72dc 580005c2 setarg mem_key_store 
+72dd 9a408c00 iadd regb ,contr 
+72de 18007210 force 16 ,loopcnt 
+72df d8a00572 arg mem_round_key ,contw 
+
+key_select_octet_loop:
+72e0 e8c08000 ifetch 1 ,contr 
+72e1 e0a08000 istore 1 ,contw 
+72e2 28c1ffd3 compare mem_key_store_end ,contr ,0xff 
+72e3 2420f2e5 nbranch key_select_octet_nwrap ,true 
+72e4 18c08def increase -17 ,contr 
+
+key_select_octet_nwrap:
+72e5 c20072e0 loop key_select_octet_loop 
+72e6 18002200 force 0 ,rega 
+72e7 1a40a7ff add regb ,-1 ,regc 
+72e8 1a6ba600 lshift2 regc ,regc 
+72e9 1a6ba600 lshift2 regc ,regc 
+72ea 204074b9 call enable_authrom 
+72eb 58008400 setarg mem_b_box 
+72ec 9a60a600 iadd regc ,regc 
+72ed d8a00572 arg mem_round_key ,contw 
+72ee 18007210 force 16 ,loopcnt 
+
+bias_round_key_loop:
+72ef ea688000 ifetcht 1 ,regc 
+72f0 e8a08000 ifetch 1 ,contw 
+72f1 9840fe00 iadd temp ,pdata 
+72f2 e0a08000 istore 1 ,contw 
+72f3 1a60a601 increase 1 ,regc 
+72f4 c20072ef loop bias_round_key_loop 
+72f5 202074bd branch disable_authrom 
+
+key_sched_zero:
+72f6 18007210 force 16 ,loopcnt 
+72f7 18000400 force 0 ,temp 
+
+create_byte_16_loop:
+72f8 e8c08000 ifetch 1 ,contr 
+72f9 98428400 ixor temp ,temp 
+72fa c20072f8 loop create_byte_16_loop 
+72fb 18427e00 deposit temp 
+72fc e0c08000 istore 1 ,contr 
+72fd d8c005c2 arg mem_key_store ,contr 
+72fe d8a00572 arg mem_round_key ,contw 
+72ff 20207ebf branch memcpy16 
+
+xor_mod32:
+7300 da400572 arg mem_round_key ,regb 
+
+xor_mod32_ar2:
+7301 18007210 force 16 ,loopcnt 
+7302 da200592 arg mem_input_store ,rega 
+7303 1a220a00 copy rega ,contw 
+
+xor_mod32_loop:
+7304 ea288000 ifetcht 1 ,rega 
+7305 ea408000 ifetch 1 ,regb 
+7306 9842e000 ixor temp ,alarm 
+7307 1f212603 and loopcnt ,3 ,regc 
+7308 2434730a nbranch xor_mod32_invert ,user 
+7309 1a62a603 xor_into 3 ,regc 
+
+xor_mod32_invert:
+730a 1a662601 sub regc ,1 ,regc 
+730b 2021730d branch xor_even ,positive 
+730c 9840e000 iadd temp ,alarm 
+
+xor_even:
+730d 1e027e00 deposit alarm 
+730e e0a08000 istore 1 ,contw 
+730f 1a20a201 increase 1 ,rega 
+7310 1a40a401 increase 1 ,regb 
+7311 c2007304 loop xor_mod32_loop 
+7312 20600000 rtn 
+
+el_boxes:
+7313 204074b9 call enable_authrom 
+7314 18007210 force 16 ,loopcnt 
+7315 da200592 arg mem_input_store ,rega 
+
+el_box_loop:
+7316 ea208000 ifetch 1 ,rega 
+7317 d8c08500 arg mem_e_box ,contr 
+7318 1f212603 and loopcnt ,3 ,regc 
+7319 1a667c01 sub regc ,1 ,null 
+731a 2021731c branch e_boxes ,positive 
+731b d8c08600 arg mem_l_box ,contr 
+
+e_boxes:
+731c 98c08c00 iadd contr ,contr 
+731d e8c08000 ifetch 1 ,contr 
+731e e2208000 istore 1 ,rega 
+731f 1a20a201 increase 1 ,rega 
+7320 c2007316 loop el_box_loop 
+7321 202074bd branch disable_authrom 
+
+pht:
+7322 18007208 force 8 ,loopcnt 
+7323 d8c00592 arg mem_input_store ,contr 
+7324 18c20a00 copy contr ,contw 
+
+pht_loop:
+7325 e8c08000 ifetch 1 ,contr 
+7326 98002200 iforce rega 
+7327 e8c08000 ifetch 1 ,contr 
+7328 98002400 iforce regb 
+7329 1a23fe00 lshift rega ,pdata 
+732a 9a40fe00 iadd regb ,pdata 
+732b e0a08000 istore 1 ,contw 
+732c 1a227e00 deposit rega 
+732d 9a40fe00 iadd regb ,pdata 
+732e e0a08000 istore 1 ,contw 
+732f c2007325 loop pht_loop 
+7330 20600000 rtn 
+
+permute:
+7331 588ae42c setarg 0x8ae42c 
+7332 98000400 iforce temp 
+7333 18007207 force 7 ,loopcnt 
+7334 20407340 call permute_exchange 
+7335 580d751b setarg 0xd751b 
+7336 98000400 iforce temp 
+7337 18007205 force 5 ,loopcnt 
+7338 20407340 call permute_exchange 
+7339 680085a1 fetch 1 ,mem_input_store + 15 
+733a 98002200 iforce rega 
+733b 68008595 fetch 1 ,mem_input_store + 3 
+733c 600085a1 store 1 ,mem_input_store + 15 
+733d 1a227e00 deposit rega 
+733e 60008595 store 1 ,mem_input_store + 3 
+733f 20600000 rtn 
+
+permute_exchange:
+7340 1841240f and temp ,0xf ,regb 
+
+permute_loop:
+7341 18417e0f and temp ,0xf ,pdata 
+7342 d8a00592 arg mem_input_store ,contw 
+7343 98a08a00 iadd contw ,contw 
+7344 e8a08000 ifetch 1 ,contw 
+7345 98002600 iforce regc 
+7346 1a227e00 deposit rega 
+7347 e0a08000 istore 1 ,contw 
+7348 1a622200 copy regc ,rega 
+7349 18518400 rshift4 temp ,temp 
+734a c2007341 loop permute_loop 
+734b 58000592 setarg mem_input_store 
+734c 9a408a00 iadd regb ,contw 
+734d 1a227e00 deposit rega 
+734e e0a08000 istore 1 ,contw 
+734f 20600000 rtn 
+
+add16:
+7350 78347c00 enable user 
+7351 20207353 branch xor_add16 
+
+xor16:
+7352 78547c00 disable user 
+
+xor_add16:
+7353 18007210 force 16 ,loopcnt 
+
+xoradd_loop:
+7354 ea288000 ifetcht 1 ,rega 
+7355 ea408000 ifetch 1 ,regb 
+7356 20347359 branch xoradd_add ,user 
+7357 9842fe00 ixor temp ,pdata 
+7358 2020735a branch xoradd_store 
+
+xoradd_add:
+7359 9840fe00 iadd temp ,pdata 
+
+xoradd_store:
+735a e0a08000 istore 1 ,contw 
+735b 1a20a201 increase 1 ,rega 
+735c 1a40a401 increase 1 ,regb 
+735d c2007354 loop xoradd_loop 
+735e 20600000 rtn 
+
+function_expand:
+735f d8a005b2 arg mem_y ,contw 
+7360 ea230000 ifetch 6 ,rega 
+7361 e0a30000 istore 6 ,contw 
+7362 20347365 branch expand_12 ,user 
+7363 ea230000 ifetch 6 ,rega 
+7364 20207366 branch expand_cont 
+
+expand_12:
+7365 e8c30000 ifetch 6 ,contr 
+
+expand_cont:
+7366 e0a30000 istore 6 ,contw 
+7367 ea220000 ifetch 4 ,rega 
+7368 e0a20000 istore 4 ,contw 
+7369 20600000 rtn 
+
+key_offset:
+736a d8c041be arg mem_link_key ,contr 
+736b d8a005a2 arg mem_x ,contw 
+736c d8400000 arg 0 ,temp 
+736d 588395a7 setarg 0x8395a7 
+736e 2040738b call concatenate_temp24 
+736f 58b3c1df setarg 0xb3c1df 
+7370 2040738b call concatenate_temp24 
+7371 5800e5e9 setarg 0xe5e9 
+7372 2040738c call concatenate_temp16 
+7373 18422800 copy temp ,regab 
+7374 78547c00 disable user 
+7375 20407379 call key_addxor 
+7376 1a820400 copy regab ,temp 
+7377 78347c00 enable user 
+7378 20207379 branch key_addxor 
+
+key_addxor:
+7379 18007208 force 8 ,loopcnt 
+
+key_addxor_loop:
+737a e8c08000 ifetch 1 ,contr 
+737b 2f200201 compare 1 ,loopcnt ,1 
+737c 20347380 branch key_high ,user 
+737d 2020f381 branch key_xor ,true 
+
+key_add:
+737e 9840fe00 iadd temp ,pdata 
+737f 20207382 branch key_store 
+
+key_high:
+7380 2020f37e branch key_add ,true 
+
+key_xor:
+7381 9842fe00 ixor temp ,pdata 
+
+key_store:
+7382 e0a08000 istore 1 ,contw 
+7383 184c8400 rshift8 temp ,temp 
+7384 c200737a loop key_addxor_loop 
+7385 20600000 rtn 
+
+copy_aco:
+7386 68030596 fetch 6 ,mem_input_store + 4 
+7387 60030056 store 6 ,mem_aco 
+7388 e8c30000 ifetch 6 ,contr 
+7389 e0a30000 istore 6 ,contw 
+738a 20600000 rtn 
+
+concatenate_temp24:
+738b 184d0400 lshift8 temp ,temp 
+
+concatenate_temp16:
+738c 18500400 lshift16 temp ,temp 
+738d 98418400 ior temp ,temp 
+738e 20600000 rtn 
+
+loop1:
+738f 2020738f branch loop1 
+
+generate_stk:
+7390 4770403c bpatchx patch3c_0 ,mem_patch3c 
+7391 2040742b call function_s1 
+7392 d8a04419 arg mem_le_ltk ,contw 
+7393 20207497 branch store_aes_result 
+
+authenticate_rconfirm:
+7394 d8a0443a arg mem_le_srand ,contw 
+7395 2034f397 branch authenticate_mconfirm ,master 
+7396 d8a0042f arg mem_le_mrand ,contw 
+
+authenticate_mconfirm:
+7397 18c22200 copy contr ,rega 
+7398 20407ebf call memcpy16 
+7399 20407440 call function_c1 
+739a d8c0442a arg mem_le_rconfirm ,contr 
+739b 202074b0 branch compare_res 
+
+generate_confirm:
+739c da20042f arg mem_le_mrand ,rega 
+739d 2034f39f branch generate_mrand ,master 
+739e da20443a arg mem_le_srand ,rega 
+
+generate_mrand:
+739f 1a220a00 copy rega ,contw 
+73a0 2040630c call generate_random 
+73a1 20207440 branch function_c1 
+
+generate_sk:
+73a2 d8c044aa arg mem_le_skdm ,contr 
+73a3 20407486 call load_data128 
+73a4 d8c04419 arg mem_le_ltk ,contr 
+73a5 20407487 call load_regext 
+73a6 18006c38 force 0x38 ,aes_ctrl 
+73a7 18006c00 force 0x0 ,aes_ctrl 
+73a8 2040741d call wait_aes 
+73a9 d8a0047c arg mem_le_sk ,contw 
+73aa 20207497 branch store_aes_result 
+
+first_block_counter:
+73ab 18007e49 force 0x49 ,pdata 
+73ac 202073ae branch first_block 
+
+first_block_data:
+73ad 18007e01 force 1 ,pdata 
+
+first_block:
+73ae 18007000 force regidx_data ,regext_index 
+73af 184d5e00 lshift8 temp ,regext 
+73b0 9de1de00 ior regext ,regext 
+73b1 1f00f001 increase 1 ,regext_index 
+73b2 184cde00 rshift8 temp ,regext 
+73b3 1df15e00 rshift16 regext ,regext 
+73b4 68014411 fetch 2 ,mem_le_ivm 
+73b5 1ff07e00 lshift16 ,pdata ,pdata 
+73b6 9de1de00 ior regext ,regext 
+73b7 1f00f001 increase 1 ,regext_index 
+73b8 e8c20000 ifetch 4 ,contr 
+73b9 98005e00 iforce regext 
+73ba 1f00f001 increase 1 ,regext_index 
+73bb e8c10000 ifetch 2 ,contr 
+73bc 1a30de00 byteswap rega ,regext 
+73bd 1df05e00 lshift16 regext ,regext 
+73be 9de1de00 ior regext ,regext 
+73bf 1f00f001 increase 1 ,regext_index 
+73c0 20600000 rtn 
+
+generate_mic:
+73c1 1a608c01 add regc ,1 ,contr 
+73c2 e8c08000 ifetch 1 ,contr 
+73c3 98002200 iforce rega 
+73c4 204073ab call first_block_counter 
+73c5 2040741f call do_aes_ocb 
+73c6 18007000 force regidx_data ,regext_index 
+73c7 ea608000 ifetch 1 ,regc 
+73c8 1fe17e03 and_into 0x3 ,pdata 
+73c9 1ff05e00 lshift16 pdata ,regext 
+73ca 79205e08 set1 8 ,regext 
+73cb 2040748f call clear_hidata 
+73cc 20407422 call do_aes_cbc 
+73cd 1a227200 copy rega ,loopcnt 
+73ce 1a608c02 add regc ,2 ,contr 
+73cf 2040746e call padding_data 
+
+generate_mic_loop:
+73d0 20407478 call aes_load_data 
+73d1 20407422 call do_aes_cbc 
+73d2 1f227e00 deposit loopcnt 
+73d3 203a73d5 branch generate_mic_end ,blank 
+73d4 202073d0 branch generate_mic_loop 
+
+generate_mic_end:
+73d5 1800700c force regidx_result ,regext_index 
+73d6 1de27e00 deposit regext 
+73d7 60020417 store 4 ,mem_le_mic 
+73d8 20600000 rtn 
+
+aes_crypt_data:
+73d9 1a20a201 increase 1 ,rega 
+73da 204073ad call first_block_data 
+73db 1a620c00 copy regc ,contr 
+73dc 20407482 call aes_load_xor 
+73dd 20407425 call do_aes_ctr 
+73de 2040749e call store_enc_data 
+73df 1a60a610 increase 16 ,regc 
+73e0 1a40a5f0 increase -16 ,regb 
+73e1 202173d9 branch aes_crypt_data ,positive 
+73e2 20600000 rtn 
+
+le_encrypt:
+73e3 4770c03c bpatchx patch3c_1 ,mem_patch3c 
+73e4 da6043dc arg mem_le_txheader ,regc 
+73e5 680ac403 fetcht 5 ,mem_le_pcnt_tx 
+73e6 204073c1 call generate_mic 
+73e7 18007008 force regidx_xor ,regext_index 
+73e8 98005e00 iforce regext 
+73e9 18002200 force 0 ,rega 
+73ea 204073ad call first_block_data 
+73eb 20407425 call do_aes_ctr 
+73ec da6043de arg mem_le_txpayload ,regc 
+73ed 6800c3dd fetch 1 ,mem_le_txlen 
+73ee 1fe0a5ff add pdata ,-1 ,regb 
+73ef 9a608a00 iadd regc ,contw 
+73f0 1800700c force regidx_result ,regext_index 
+73f1 1de27e00 deposit regext 
+73f2 e0a20000 istore 4 ,contw 
+73f3 204073d9 call aes_crypt_data 
+73f4 6800c3dd fetch 1 ,mem_le_txlen 
+73f5 1fe0fe04 increase 4 ,pdata 
+73f6 6000c3dd store 1 ,mem_le_txlen 
+73f7 680ac403 fetcht 5 ,mem_le_pcnt_tx 
+73f8 18408401 increase 1 ,temp 
+73f9 600ac403 storet 5 ,mem_le_pcnt_tx 
+73fa 20600000 rtn 
+
+le_decrypt:
+73fb 4771403c bpatchx patch3c_2 ,mem_patch3c 
+73fc 680082da fetch 1 ,mem_le_rxbuf + 1 
+73fd 1fe67c14 sub pdata ,20 ,null 
+73fe 202173ff branch le_dec_cont ,positive 
+
+le_dec_cont:
+73ff da6002db arg mem_le_rxbuf + 2 ,regc 
+7400 1fe0a5ff add pdata ,-1 ,regb 
+7401 1fe0fffc increase -4 ,pdata 
+7402 600082da store 1 ,mem_le_rxbuf + 1 
+7403 9a608c00 iadd regc ,contr 
+7404 e8c20000 ifetch 4 ,contr 
+7405 18007008 force regidx_xor ,regext_index 
+7406 98005e00 iforce regext 
+7407 18002200 force 0 ,rega 
+7408 680ac408 fetcht 5 ,mem_le_pcnt_rx 
+7409 204073ad call first_block_data 
+740a 20407425 call do_aes_ctr 
+740b 1800700c force regidx_result ,regext_index 
+740c 1de27e00 deposit regext 
+740d 6002041b store 4 ,mem_le_peer_mic 
+740e 204073d9 call aes_crypt_data 
+740f da6002d9 arg mem_le_rxbuf ,regc 
+7410 204073c1 call generate_mic 
+7411 680a041b fetcht 4 ,mem_le_peer_mic 
+7412 98467e00 isub temp ,pdata 
+7413 247a0000 nrtn blank 
+7414 6802440d fetch 4 ,mem_le_last_mic 
+7415 98467e00 isub temp ,pdata 
+7416 207a0000 rtn blank 
+7417 600a440d storet 4 ,mem_le_last_mic 
+7418 6802c408 fetch 5 ,mem_le_pcnt_rx 
+7419 1fe0fe01 increase 1 ,pdata 
+741a 6002c408 store 5 ,mem_le_pcnt_rx 
+741b 18007e00 force 0 ,pdata 
+741c 20600000 rtn 
+
+wait_aes:
+741d 243bf41d nbranch wait_aes ,aes_ready 
+741e 20600000 rtn 
+
+do_aes_ocb:
+741f 18006c30 force 0x30 ,aes_ctrl 
+7420 18006c00 force 0x0 ,aes_ctrl 
+7421 2020741d branch wait_aes 
+
+do_aes_cbc:
+7422 18006c32 force 0x32 ,aes_ctrl 
+7423 18006c02 force 0x2 ,aes_ctrl 
+7424 2020741d branch wait_aes 
+
+do_aes_ctr:
+7425 18006c34 force 0x34 ,aes_ctrl 
+7426 18006c04 force 0x4 ,aes_ctrl 
+7427 2020741d branch wait_aes 
+
+aes_init:
+7428 18006c01 force 1 ,aes_ctrl 
+7429 18006c00 force 0 ,aes_ctrl 
+742a 20600000 rtn 
+
+function_s1:
+742b 18007000 force regidx_data ,regext_index 
+742c 6802042f fetch 4 ,mem_le_mrand 
+742d 98005e00 iforce regext 
+742e 1f00f001 increase 1 ,regext_index 
+742f e8c20000 ifetch 4 ,contr 
+7430 98005e00 iforce regext 
+7431 1f00f001 increase 1 ,regext_index 
+7432 6802443a fetch 4 ,mem_le_srand 
+7433 98005e00 iforce regext 
+7434 1f00f001 increase 1 ,regext_index 
+7435 e8c20000 ifetch 4 ,contr 
+7436 98005e00 iforce regext 
+7437 1f00f001 increase 1 ,regext_index 
+7438 20407492 call aes_clear 
+7439 1f00f1fc increase -4 ,regext_index 
+743a 680244c7 fetch 4 ,mem_le_tk 
+743b 1fe25e00 copy pdata ,regext 
+743c 1f00f004 increase 4 ,regext_index 
+743d 18006c38 force 0x38 ,aes_ctrl 
+743e 18006c08 force 0x8 ,aes_ctrl 
+743f 2020741d branch wait_aes 
+
+function_c1:
+7440 4771c03c bpatchx patch3c_3 ,mem_patch3c 
+7441 680344a0 fetch 6 ,mem_le_lap 
+7442 680b044f fetcht 6 ,mem_le_plap 
+7443 2034f446 branch function_c1_master ,master 
+7444 6803044f fetch 6 ,mem_le_plap 
+7445 680b44a0 fetcht 6 ,mem_le_lap 
+
+function_c1_master:
+7446 18007008 force regidx_xor ,regext_index 
+7447 18425e00 copy temp ,regext 
+7448 1f00f001 increase 1 ,regext_index 
+7449 184f5e00 rshift32 temp ,regext 
+744a 1ff07e00 lshift16 pdata ,pdata 
+744b 9de1de00 ior regext ,regext 
+744c 1f00f001 increase 1 ,regext_index 
+744d 1fef5e00 rshift32 pdata ,regext 
+744e 1f00f001 increase 1 ,regext_index 
+744f 18005e00 force 0 ,regext 
+7450 18007e00 force 0 ,pdata 
+7451 6800c48e fetch 1 ,mem_le_conn_peer_addr_type 
+7452 6808c485 fetcht 1 ,mem_le_adv_own_addr_type 
+7453 2434f456 nbranch function_c1_irat ,master 
+7454 6800c495 fetch 1 ,mem_le_conn_own_addr_type 
+7455 6808c48e fetcht 1 ,mem_le_conn_peer_addr_type 
+
+function_c1_irat:
+7456 6000c44a store 1 ,mem_le_iat 
+7457 6008c44b storet 1 ,mem_le_rat 
+7458 18007000 force regidx_data ,regext_index 
+7459 da40444a arg mem_le_iat ,regb 
+745a 18007204 force 4 ,loopcnt 
+
+function_c1_loop1:
+745b ea220000 ifetch 4 ,rega 
+745c ea4a0000 ifetcht 4 ,regb 
+745d 9842de00 ixor temp ,regext 
+745e 1f00f001 increase 1 ,regext_index 
+745f 1a20a204 increase 4 ,rega 
+7460 1a40a404 increase 4 ,regb 
+7461 c200745b loop function_c1_loop1 
+7462 20407492 call aes_clear 
+7463 1f00f1fc increase -4 ,regext_index 
+7464 680244c7 fetch 4 ,mem_le_tk 
+7465 1fe25e00 copy pdata ,regext 
+7466 1f00f004 increase 4 ,regext_index 
+7467 18006c38 force 0x38 ,aes_ctrl 
+7468 18006c0c force 0xc ,aes_ctrl 
+7469 2040741d call wait_aes 
+746a 20407491 call aes_clear_data 
+746b 18006c3a force 0x3a ,aes_ctrl 
+746c 18006c08 force 0x8 ,aes_ctrl 
+746d 2020741d branch wait_aes 
+
+padding_data:
+746e 2f200600 compare 0 ,loopcnt ,3 
+746f 20608000 rtn true 
+7470 18c27e00 deposit contr 
+7471 9f208a00 iadd loopcnt ,contw 
+7472 18007e00 force 0 ,pdata 
+
+padding_loop:
+7473 e0a08000 istore 1 ,contw 
+7474 1f20f201 increase 1 ,loopcnt 
+7475 2f200600 compare 0 ,loopcnt ,3 
+7476 20608000 rtn true 
+7477 20207473 branch padding_loop 
+
+aes_load_data:
+7478 18007000 force regidx_data ,regext_index 
+
+load_data_loop:
+7479 1f227e00 deposit loopcnt 
+747a 203a747d branch load_data_padding ,blank 
+747b e8c20000 ifetch 4 ,contr 
+747c 1f20f3fc increase -4 ,loopcnt 
+
+load_data_padding:
+747d 98005e00 iforce regext 
+747e 1f00f001 increase 1 ,regext_index 
+747f 2f001e04 compare regidx_key ,regext_index ,0xf 
+7480 20608000 rtn true 
+7481 20207479 branch load_data_loop 
+
+aes_load_xor:
+7482 18007008 force regidx_xor ,regext_index 
+7483 20207487 branch load_regext 
+
+load_key:
+7484 18007004 force regidx_key ,regext_index 
+7485 20207487 branch load_regext 
+
+load_data128:
+7486 18007000 force regidx_data ,regext_index 
+
+load_regext:
+7487 18007204 force 4 ,loopcnt 
+
+load_regext_loop:
+7488 e8c20000 ifetch 4 ,contr 
+7489 98005e00 iforce regext 
+748a 1f00f001 increase 1 ,regext_index 
+748b c2007488 loop load_regext_loop 
+748c 20600000 rtn 
+
+load_sk:
+748d d8c0047c arg mem_le_sk ,contr 
+748e 20207484 branch load_key 
+
+clear_hidata:
+748f 18007204 force 4 ,loopcnt 
+7490 20207494 branch clear_data_rest 
+
+aes_clear_data:
+7491 18007000 force regidx_data ,regext_index 
+
+aes_clear:
+7492 18007204 force 4 ,loopcnt 
+
+clear_loop:
+7493 18005e00 force 0 ,regext 
+
+clear_data_rest:
+7494 1f00f001 increase 1 ,regext_index 
+7495 c2007493 loop clear_loop 
+7496 20600000 rtn 
+
+store_aes_result:
+7497 1800700c force regidx_result ,regext_index 
+7498 18007204 force 4 ,loopcnt 
+
+send_aes_result_loop:
+7499 1de27e00 deposit regext 
+749a e0a20000 istore 4 ,contw 
+749b 1f00f001 increase 1 ,regext_index 
+749c c2007499 loop send_aes_result_loop 
+749d 20600000 rtn 
+
+store_enc_data:
+749e 1800700c force regidx_result ,regext_index 
+749f 1a620a00 copy regc ,contw 
+74a0 1a40f201 add regb ,1 ,loopcnt 
+74a1 1f267c0f sub loopcnt ,15 ,null 
+74a2 202174a4 branch store_enc_loop ,positive 
+74a3 18007210 force 16 ,loopcnt 
+
+store_enc_loop:
+74a4 1de27e00 deposit regext 
+74a5 1f267c03 sub loopcnt ,3 ,null 
+74a6 202174ac branch store_enc_byte ,positive 
+74a7 e0a20000 istore 4 ,contw 
+74a8 1f20f3fc increase -4 ,loopcnt 
+74a9 20628000 rtn zero 
+74aa 1f00f001 increase 1 ,regext_index 
+74ab 202074a4 branch store_enc_loop 
+
+store_enc_byte:
+74ac e0a08000 istore 1 ,contw 
+74ad 1fecfe00 rshift8 pdata ,pdata 
+74ae c20074ac loop store_enc_byte 
+74af 20600000 rtn 
+
+compare_res:
+74b0 1800700c force regidx_result ,regext_index 
+74b1 18007204 force 4 ,loopcnt 
+
+compare_res_loop:
+74b2 e8c20000 ifetch 4 ,contr 
+74b3 9de67c00 isub regext ,null 
+74b4 24628000 nrtn zero 
+74b5 1f00f001 increase 1 ,regext_index 
+74b6 c20074b2 loop compare_res_loop 
+74b7 18007c00 force 0 ,null 
+74b8 20600000 rtn 
+
+enable_authrom:
+74b9 68108050 hfetch 1 ,core_clkoff 
+74ba 793ffe00 set0 clock_off_auth_rom ,pdata 
+74bb 60108050 hstore 1 ,core_clkoff 
+74bc 20600000 rtn 
+
+disable_authrom:
+74bd 68108050 hfetch 1 ,core_clkoff 
+74be 79207e00 set1 clock_off_auth_rom ,pdata 
+74bf 60108050 hstore 1 ,core_clkoff 
+74c0 20600000 rtn 
+
+init_memp:
+74c1 d8a00886 arg mem_p ,contw 
+74c2 3803ffff setsect 0 ,0x3ffff 
+74c3 3807ffff setsect 1 ,0x3ffff 
+74c4 380bffff setsect 2 ,0x3ffff 
+74c5 380ffbff setsect 3 ,0x3fbff 
+74c6 e0a48000 istore 9 ,contw 
+74c7 3803ffff setsect 0 ,0x3ffff 
+74c8 3807ffff setsect 1 ,0x3ffff 
+74c9 380bffff setsect 2 ,0x3ffff 
+74ca 380fffff setsect 3 ,0x3ffff 
+74cb e0a48000 istore 9 ,contw 
+74cc 3803ffff setsect 0 ,0x3ffff 
+74cd 3807ffff setsect 1 ,0x3ffff 
+74ce 380bcfff setsect 2 ,0x3cfff 
+74cf 380fffff setsect 3 ,0x3ffff 
+74d0 e0a48000 istore 9 ,contw 
+74d1 3803ffff setsect 0 ,0x3ffff 
+74d2 3807ffff setsect 1 ,0x3ffff 
+74d3 380bffef setsect 2 ,0x3ffef 
+74d4 380fffff setsect 3 ,0x3ffff 
+74d5 e0a48000 istore 9 ,contw 
+74d6 3803ffff setsect 0 ,0x3ffff 
+74d7 3807ffff setsect 1 ,0x3ffff 
+74d8 380bffff setsect 2 ,0x3ffff 
+74d9 380fffff setsect 3 ,0x3ffff 
+74da e0a48000 istore 9 ,contw 
+74db 3803ffff setsect 0 ,0x3ffff 
+74dc 38066c7f setsect 1 ,0x26c7f 
+74dd 3808146b setsect 2 ,0x146b 
+74de 380f7bb3 setsect 3 ,0x37bb3 
+74df e0a48000 istore 9 ,contw 
+74e0 3801feb8 setsect 0 ,0x1feb8 
+74e1 38050c12 setsect 1 ,0x10c12 
+74e2 380ab722 setsect 2 ,0x2b722 
+74e3 380e9fa6 setsect 3 ,0x29fa6 
+74e4 e0a48000 istore 9 ,contw 
+74e5 3800e70f setsect 0 ,0xe70f 
+74e6 38056720 setsect 1 ,0x16720 
+74e7 3808519e setsect 2 ,0x519e 
+74e8 380d9084 setsect 3 ,0x19084 
+74e9 e0a48000 istore 9 ,contw 
+74ea 38031012 setsect 0 ,0x31012 
+74eb 380760bf setsect 1 ,0x360bf 
+74ec 380bf0af setsect 2 ,0x3f0af 
+74ed 380c03d3 setsect 3 ,0x3d3 
+74ee e0a48000 istore 9 ,contw 
+74ef 3803a188 setsect 0 ,0x3a188 
+74f0 38043ad0 setsect 1 ,0x3ad0 
+74f1 380bcbf2 setsect 2 ,0x3cbf2 
+74f2 380e43d9 setsect 3 ,0x243d9 
+74f3 e0a48000 istore 9 ,contw 
+74f4 3802b030 setsect 0 ,0x2b030 
+74f5 38076a03 setsect 1 ,0x36a03 
+74f6 38091188 setsect 2 ,0x11188 
+74f7 380de520 setsect 3 ,0x1e520 
+74f8 e0a48000 istore 9 ,contw 
+74f9 3803a11e setsect 0 ,0x3a11e 
+74fa 3804fe5d setsect 1 ,0xfe5d 
+74fb 3808dd57 setsect 2 ,0xdd57 
+74fc 380dac93 setsect 3 ,0x1ac93 
+74fd e0a48000 istore 9 ,contw 
+74fe 380011ed setsect 0 ,0x11ed 
+74ff 380618c4 setsect 1 ,0x218c4 
+7500 38088da7 setsect 2 ,0x8da7 
+7501 380e57ff setsect 3 ,0x257ff 
+7502 e0a48000 istore 9 ,contw 
+7503 3803192b setsect 0 ,0x3192b 
+7504 38074641 setsect 1 ,0x34641 
+7505 3809be0c setsect 2 ,0x1be0c 
+7506 380f66ad setsect 3 ,0x366ad 
+7507 e0a48000 istore 9 ,contw 
+7508 38001f83 setsect 0 ,0x1f83 
+7509 38055a23 setsect 1 ,0x15a23 
+750a 380bf9b0 setsect 2 ,0x3f9b0 
+750b 380c3949 setsect 3 ,0x3949 
+750c e0a48000 istore 9 ,contw 
+750d 38013a51 setsect 0 ,0x13a51 
+750e 380553fd setsect 1 ,0x153fd 
+750f 380b372a setsect 2 ,0x3372a 
+7510 380cf1bb setsect 3 ,0xf1bb 
+7511 e0a48000 istore 9 ,contw 
+7512 3803ae85 setsect 0 ,0x3ae85 
+7513 3805eed9 setsect 1 ,0x1eed9 
+7514 38089e66 setsect 2 ,0x9e66 
+7515 380c01a8 setsect 3 ,0x1a8 
+7516 e0a40000 istore 8 ,contw 
+7517 20600000 rtn 
+
+init_memp_256:
+7518 d8a0091e arg mem_p_256 ,contw 
+7519 3803ffff setsect 0 ,0x3ffff 
+751a 3807ffff setsect 1 ,0x3ffff 
+751b 380bffff setsect 2 ,0x3ffff 
+751c 380fffff setsect 3 ,0x3ffff 
+751d e0a48000 istore 9 ,contw 
+751e 3803ffff setsect 0 ,0x3ffff 
+751f 3804003f setsect 1 ,0x3f 
+7520 38080000 setsect 2 ,0x0 
+7521 380c0000 setsect 3 ,0x0 
+7522 e0a48000 istore 9 ,contw 
+7523 38000000 setsect 0 ,0x0 
+7524 38040000 setsect 1 ,0x0 
+7525 38081000 setsect 2 ,0x1000 
+7526 380c0000 setsect 3 ,0x0 
+7527 e0a48000 istore 9 ,contw 
+7528 3803ff00 setsect 0 ,0x3ff00 
+7529 3807ffff setsect 1 ,0x3ffff 
+752a 380bffcf setsect 2 ,0x3ffcf 
+752b 380fffff setsect 3 ,0x3ffff 
+752c e0a48000 istore 9 ,contw 
+752d 3803ffff setsect 0 ,0x3ffff 
+752e 3807ffff setsect 1 ,0x3ffff 
+752f 380bffff setsect 2 ,0x3ffff 
+7530 380c03ff setsect 3 ,0x3ff 
+7531 e0a48000 istore 9 ,contw 
+7532 38000000 setsect 0 ,0x0 
+7533 38040000 setsect 1 ,0x0 
+7534 38080000 setsect 2 ,0x0 
+7535 380c0000 setsect 3 ,0x0 
+7536 e0a48000 istore 9 ,contw 
+7537 38010000 setsect 0 ,0x10000 
+7538 38040000 setsect 1 ,0x0 
+7539 380bf000 setsect 2 ,0x3f000 
+753a 380fffff setsect 3 ,0x3ffff 
+753b e0a48000 istore 9 ,contw 
+753c 380296ff setsect 0 ,0x296ff 
+753d 38062630 setsect 1 ,0x22630 
+753e 380b945d setsect 2 ,0x3945d 
+753f 380fd284 setsect 3 ,0x3d284 
+7540 e0a48000 istore 9 ,contw 
+7541 380333a0 setsect 0 ,0x333a0 
+7542 38044b7a setsect 1 ,0x4b7a 
+7543 380837d8 setsect 2 ,0x37d8 
+7544 380fc9dc setsect 3 ,0x3c9dc 
+7545 e0a48000 istore 9 ,contw 
+7546 3803a440 setsect 0 ,0x3a440 
+7547 3805b958 setsect 1 ,0x1b958 
+7548 380b8bce setsect 2 ,0x38bce 
+7549 380d091f setsect 3 ,0x1091f 
+754a e0a48000 istore 9 ,contw 
+754b 3802e12c setsect 0 ,0x2e12c 
+754c 3805f47c setsect 1 ,0x1f47c 
+754d 380b56b1 setsect 2 ,0x356b1 
+754e 380efd47 setsect 3 ,0x2fd47 
+754f e0a48000 istore 9 ,contw 
+7550 38006837 setsect 0 ,0x6837 
+7551 3806ed90 setsect 1 ,0x2ed90 
+7552 3809ecec setsect 2 ,0x1ecec 
+7553 380dacc5 setsect 3 ,0x1acc5 
+7554 e0a48000 istore 9 ,contw 
+7555 38023357 setsect 0 ,0x23357 
+7556 38058af3 setsect 1 ,0x18af3 
+7557 3808f9e1 setsect 2 ,0xf9e1 
+7558 380d29f0 setsect 3 ,0x129f0 
+7559 e0a48000 istore 9 ,contw 
+755a 3802e7eb setsect 0 ,0x2e7eb 
+755b 3807e6e3 setsect 1 ,0x3e6e3 
+755c 380be1a7 setsect 2 ,0x3e1a7 
+755d 380d0b8b setsect 3 ,0x10b8b 
+755e e0a48000 istore 9 ,contw 
+755f 38024fe3 setsect 0 ,0x24fe3 
+7560 380420ef setsect 1 ,0x20ef 
+7561 3809b5a6 setsect 2 ,0x1b5a6 
+7562 380cdc2f setsect 3 ,0xdc2f 
+7563 e0a48000 istore 9 ,contw 
+7564 38013860 setsect 0 ,0x13860 
+7565 3806bd69 setsect 1 ,0x2bd69 
+7566 3808391a setsect 2 ,0x391a 
+7567 380db222 setsect 3 ,0x1b222 
+7568 e0a48000 istore 9 ,contw 
+7569 20600000 rtn 
+
+publickey_init:
+756a 6800c65a fetch 1 ,mem_ssp_enable 
+756b 243a757d nbranch sp_initialize ,blank 
+756c 20207a77 branch sp_initialize_256 
+
+sp_calc_sequence_256_check:
+756d 4772403c bpatchx patch3c_4 ,mem_patch3c 
+756e 6800c65a fetch 1 ,mem_ssp_enable 
+756f 207a0000 rtn blank 
+7570 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 
+7571 c1808000 rtnne sp_key_valid 
+7572 6800c4be fetch 1 ,mem_le_secure_connect_enable 
+7573 207a0000 rtn blank 
+7574 6800c4c3 fetch 1 ,mem_le_sc_local_key_invalid 
+7575 c1018000 rtneq sp_key_valid_256 
+7576 68014682 fetch 2 ,mem_ui_state_map 
+7577 c280757b bbit1 ui_state_bt_connected ,stop_publickey_calc_256 
+7578 6800c4c0 fetch 1 ,mem_le_sc_calc 
+7579 c0007a77 beq sp_calc_standby ,sp_initialize_256 
+757a 20600000 rtn 
+
+stop_publickey_calc_256:
+757b 7044c000 jam sp_calc_standby ,mem_le_sc_calc 
+757c 20600000 rtn 
+
+sp_initialize:
+757d 4772c03c bpatchx patch3c_5 ,mem_patch3c 
+757e 6800c65a fetch 1 ,mem_ssp_enable 
+757f 203a612b branch ssp_disable ,blank 
+7580 20406124 call ssp_enable 
+7581 20407583 call sp_clear_flags 
+7582 2020766d branch sp_pubkey_calc 
+
+sp_clear_flags:
+7583 58000000 setarg 0 
+7584 600409ae store 8 ,mem_sp_state_start 
+7585 600209b6 store 4 ,mem_sp_flag_start 
+7586 6003c65e store 7 ,mem_sp_iocap_remote 
+7587 20600000 rtn 
+
+sp_generate_local_key:
+7588 7009b001 jam sp_flag_commit ,mem_sp_flag 
+7589 2020758d branch sp_generate_local_key0 
+
+sp_master_generate_local_key:
+758a 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 
+758b c000f68a beq sp_key_valid ,sp_dhkey_calc 
+758c 20202a8c branch assert 
+
+sp_generate_local_key0:
+758d 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 
+758e c000f590 beq sp_key_valid ,sp_start_send_pubkey 
+758f 2020766d branch sp_pubkey_calc 
+
+sp_start_send_pubkey:
+7590 2040768a call sp_dhkey_calc 
+7591 680089af fetch 1 ,mem_master_sp_state 
+7592 247a0000 nrtn blank 
+7593 7009ae03 jam sp_stat_key_send ,mem_sp_state 
+7594 20600000 rtn 
+
+sp_calc_check_publickey_256:
+7595 204075b0 call sp_calc_b256 
+7596 da2009de arg mem_le_pubkey_remote_y_256 ,rega 
+7597 d8a00866 arg mem_t7_256 ,contw 
+7598 20407c79 call bn_sqrmod_256 
+7599 da2009be arg mem_le_pubkey_remote_x_256 ,rega 
+759a d8a00826 arg mem_t2_256 ,contw 
+759b 20407c79 call bn_sqrmod_256 
+759c da200826 arg mem_t2_256 ,rega 
+759d da4009be arg mem_le_pubkey_remote_x_256 ,regb 
+759e d8a00826 arg mem_t2_256 ,contw 
+759f 20407be1 call bn_mulmod_256 
+75a0 da20093e arg mem_a_256 ,rega 
+75a1 da4009be arg mem_le_pubkey_remote_x_256 ,regb 
+75a2 d8a00846 arg mem_t3_256 ,contw 
+75a3 20407be1 call bn_mulmod_256 
+75a4 da200846 arg mem_t3_256 ,rega 
+75a5 da400826 arg mem_t2_256 ,regb 
+75a6 d8a00826 arg mem_t2_256 ,contw 
+75a7 20407c7d call bn_addmod_256 
+75a8 da200806 arg mem_t0_256 ,rega 
+75a9 da400826 arg mem_t2_256 ,regb 
+75aa d8a00806 arg mem_t0_256 ,contw 
+75ab 20407c7d call bn_addmod_256 
+75ac df200020 arg 32 ,loopcnt 
+75ad da200866 arg mem_t7_256 ,rega 
+75ae da400806 arg mem_t0_256 ,regb 
+75af 20207f88 branch string_compare 
+
+sp_calc_b256:
+75b0 da20097e arg mem_gy_256 ,rega 
+75b1 d8a00806 arg mem_t0_256 ,contw 
+75b2 20407c79 call bn_sqrmod_256 
+75b3 da20095e arg mem_gx_256 ,rega 
+75b4 d8a00826 arg mem_t2_256 ,contw 
+75b5 20407c79 call bn_sqrmod_256 
+75b6 da200826 arg mem_t2_256 ,rega 
+75b7 da40095e arg mem_gx_256 ,regb 
+75b8 d8a00826 arg mem_t2_256 ,contw 
+75b9 20407be1 call bn_mulmod_256 
+75ba da20093e arg mem_a_256 ,rega 
+75bb da40095e arg mem_gx_256 ,regb 
+75bc d8a00846 arg mem_t3_256 ,contw 
+75bd 20407be1 call bn_mulmod_256 
+75be da200846 arg mem_t3_256 ,rega 
+75bf da400826 arg mem_t2_256 ,regb 
+75c0 d8a00826 arg mem_t2_256 ,contw 
+75c1 20407c7d call bn_addmod_256 
+75c2 da200806 arg mem_t0_256 ,rega 
+75c3 da400826 arg mem_t2_256 ,regb 
+75c4 d8a00806 arg mem_t0_256 ,contw 
+75c5 20207c96 branch bn_submod_256 
+
+sp_calc_check_publickey:
+75c6 204075e1 call sp_calc_b 
+75c7 da2009e6 arg mem_sp_pubkey_remote_y ,rega 
+75c8 d8a00866 arg mem_t7_256 ,contw 
+75c9 204077a8 call bn_sqrmod 
+75ca da2009c6 arg mem_sp_pubkey_remote_x ,rega 
+75cb d8a00826 arg mem_t2_256 ,contw 
+75cc 204077a8 call bn_sqrmod 
+75cd da200826 arg mem_t2_256 ,rega 
+75ce da4009c6 arg mem_sp_pubkey_remote_x ,regb 
+75cf d8a00826 arg mem_t2_256 ,contw 
+75d0 20407786 call bn_mulmod 
+75d1 da20089e arg mem_a ,rega 
+75d2 da4009c6 arg mem_sp_pubkey_remote_x ,regb 
+75d3 d8a00846 arg mem_t3_256 ,contw 
+75d4 20407786 call bn_mulmod 
+75d5 da200846 arg mem_t3_256 ,rega 
+75d6 da400826 arg mem_t2_256 ,regb 
+75d7 d8a00826 arg mem_t2_256 ,contw 
+75d8 20407755 call bn_addmod 
+75d9 da200806 arg mem_t0_256 ,rega 
+75da da400826 arg mem_t2_256 ,regb 
+75db d8a00806 arg mem_t0_256 ,contw 
+75dc 20407755 call bn_addmod 
+75dd df200018 arg 24 ,loopcnt 
+75de da200866 arg mem_t7_256 ,rega 
+75df da400806 arg mem_t0_256 ,regb 
+75e0 20207f88 branch string_compare 
+
+sp_calc_b:
+75e1 da2008e6 arg mem_gy ,rega 
+75e2 d8a00806 arg mem_t0_256 ,contw 
+75e3 204077a8 call bn_sqrmod 
+75e4 da2008ce arg mem_gx ,rega 
+75e5 d8a00826 arg mem_t2_256 ,contw 
+75e6 204077a8 call bn_sqrmod 
+75e7 da200826 arg mem_t2_256 ,rega 
+75e8 da4008ce arg mem_gx ,regb 
+75e9 d8a00826 arg mem_t2_256 ,contw 
+75ea 20407786 call bn_mulmod 
+75eb da20089e arg mem_a ,rega 
+75ec da4008ce arg mem_gx ,regb 
+75ed d8a00846 arg mem_t3_256 ,contw 
+75ee 20407786 call bn_mulmod 
+75ef da200846 arg mem_t3_256 ,rega 
+75f0 da400826 arg mem_t2_256 ,regb 
+75f1 d8a00826 arg mem_t2_256 ,contw 
+75f2 20407755 call bn_addmod 
+75f3 da200806 arg mem_t0_256 ,rega 
+75f4 da400826 arg mem_t2_256 ,regb 
+75f5 d8a00806 arg mem_t0_256 ,contw 
+75f6 20207758 branch bn_submod 
+
+sp_calculate_commitment:
+75f7 680089b2 fetch 1 ,mem_sp_calc 
+75f8 c0807615 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc 
+75f9 20407612 call sp_local_random_key_generator 
+75fa d8a00a7e arg mem_sp_prarm_stack ,contw 
+75fb 58000a2e setarg mem_sp_random_local_end 
+75fc e0a10000 istore 2 ,contw 
+75fd 58004642 setarg mem_sp_pubkey_local_x_end 
+75fe e0a10000 istore 2 ,contw 
+75ff 580009de setarg mem_sp_pubkey_remote_x_end 
+7600 e0a10000 istore 2 ,contw 
+7601 20207609 branch sp_calculate_commitment0 
+
+master_sp_calculate_commitment:
+7602 d8a00a7e arg mem_sp_prarm_stack ,contw 
+7603 58000a3e setarg mem_sp_random_remote_end 
+7604 e0a10000 istore 2 ,contw 
+7605 580009de setarg mem_sp_pubkey_remote_x_end 
+7606 e0a10000 istore 2 ,contw 
+7607 58004642 setarg mem_sp_pubkey_local_x_end 
+7608 e0a10000 istore 2 ,contw 
+
+sp_calculate_commitment0:
+7609 204079a0 call function_f1 
+760a 680089af fetch 1 ,mem_master_sp_state 
+760b c002760f beq sp_stat_commit_calc ,master_sp_calculate_commitment0 
+760c 7009b001 jam sp_flag_commit ,mem_sp_flag 
+760d 7009ae05 jam sp_stat_commit_send ,mem_sp_state 
+760e 20600000 rtn 
+
+master_sp_calculate_commitment0:
+760f 7009af14 jam sp_stat_commitment_compare ,mem_master_sp_state 
+7610 2040758a call sp_master_generate_local_key 
+7611 202076d8 branch master_set_mem_master_sp_flag 
+
+sp_local_random_key_generator:
+7612 d8a00a1e arg mem_sp_random_local ,contw 
+7613 18000e08 force 8 ,queue 
+7614 202076a2 branch random_generator 
+
+sp_calculate_commitment_wait_dhkey_calc:
+7615 7009b001 jam sp_flag_commit ,mem_sp_flag 
+7616 20600000 rtn 
+
+sp_confirm_check:
+7617 4773403c bpatchx patch3c_6 ,mem_patch3c 
+7618 d8a00727 arg mem_addr_value ,contw 
+7619 680340a0 fetch 6 ,mem_lap 
+761a e0a30000 istore 6 ,contw 
+761b 68030040 fetch 6 ,mem_plap 
+761c e0a30000 istore 6 ,contw 
+761d 6801c65e fetch 3 ,mem_sp_iocap_remote 
+761e e0a18000 istore 3 ,contw 
+761f 20407a0d call function_f3a 
+7620 da200a4e arg mem_sp_calc_result_high ,rega 
+7621 da400a5e arg mem_sp_check_result ,regb 
+7622 18000e04 force 4 ,queue 
+7623 204076a7 call compare4 
+7624 2420f631 nbranch sp_confirm_check_failed ,true 
+7625 20407628 call sp_confirm_check_success 
+7626 70007d41 jam lmp_dhkey_check ,mem_lmi_opcode2 
+7627 202062f8 branch tid_set_reply 
+
+sp_confirm_check_success:
+7628 680089af fetch 1 ,mem_master_sp_state 
+7629 c004f62e beq sp_stat_confirm_check ,sp_confirm_check_success_master 
+762a 7009ae0a jam sp_stat_confirm_calc ,mem_sp_state 
+762b 7009b001 jam sp_flag_commit ,mem_sp_flag 
+762c 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+762d 20600000 rtn 
+
+sp_confirm_check_success_master:
+762e 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+762f 7009af15 jam sp_state_end ,mem_master_sp_state 
+7630 202076d8 branch master_set_mem_master_sp_flag 
+
+sp_confirm_check_failed:
+7631 680089af fetch 1 ,mem_master_sp_state 
+7632 c004f637 beq sp_stat_confirm_check ,sp_confirm_check_failed_master 
+7633 7009ae00 jam sp_stat_null ,mem_sp_state 
+7634 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 
+7635 70007e05 jam authentication_failure_error ,mem_lmo_reason2 
+7636 20600000 rtn 
+
+sp_confirm_check_failed_master:
+7637 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 
+7638 7009af00 jam sp_stat_null ,mem_master_sp_state 
+7639 20600000 rtn 
+
+sp_confirm_calc:
+763a 680089b3 fetch 1 ,mem_sp_dh_ready 
+763b c000f63e beq sp_flag_commit ,sp_confirm_calc_ready 
+763c 7009af0a jam sp_stat_confirm_calc ,mem_master_sp_state 
+763d 202076d8 branch master_set_mem_master_sp_flag 
+
+sp_confirm_calc_ready:
+763e d8a00727 arg mem_addr_value ,contw 
+763f 68030040 fetch 6 ,mem_plap 
+7640 e0a30000 istore 6 ,contw 
+7641 680340a0 fetch 6 ,mem_lap 
+7642 e0a30000 istore 6 ,contw 
+7643 6801c65b fetch 3 ,mem_sp_iocap_local 
+7644 e0a18000 istore 3 ,contw 
+7645 20407a24 call function_f3b 
+7646 680089af fetch 1 ,mem_master_sp_state 
+7647 c005764b beq sp_stat_confirm_calc ,sp_confirm_calc_master 
+7648 7009ae0b jam sp_stat_confirm_send ,mem_sp_state 
+7649 7009b001 jam sp_flag_commit ,mem_sp_flag 
+764a 20600000 rtn 
+
+sp_confirm_calc_master:
+764b 7009af0b jam sp_stat_confirm_send ,mem_master_sp_state 
+764c 7009b101 jam sp_flag_commit ,mem_master_sp_flag 
+764d 20600000 rtn 
+
+sp_master_key_prarm_push:
+764e d8a00a7e arg mem_sp_prarm_stack ,contw 
+764f 68030040 fetch 6 ,mem_plap 
+7650 e0a30000 istore 6 ,contw 
+7651 680340a0 fetch 6 ,mem_lap 
+7652 e0a30000 istore 6 ,contw 
+7653 58000a2e setarg mem_sp_random_local_end 
+7654 e0a10000 istore 2 ,contw 
+7655 58000a3e setarg mem_sp_random_remote_end 
+7656 e0a10000 istore 2 ,contw 
+7657 20207662 branch sp_link_key_calc 
+
+sp_link_key_prarm_push:
+7658 7009ae0f jam sp_stat_done ,mem_sp_state 
+7659 d8a00a7e arg mem_sp_prarm_stack ,contw 
+765a 680340a0 fetch 6 ,mem_lap 
+765b e0a30000 istore 6 ,contw 
+765c 68030040 fetch 6 ,mem_plap 
+765d e0a30000 istore 6 ,contw 
+765e 58000a3e setarg mem_sp_random_remote_end 
+765f e0a10000 istore 2 ,contw 
+7660 58000a2e setarg mem_sp_random_local_end 
+7661 e0a10000 istore 2 ,contw 
+
+sp_link_key_calc:
+7662 d8a00727 arg mem_addr_value ,contw 
+7663 68030a7e fetch 6 ,mem_sp_prarm_stack 
+7664 e0a30000 istore 6 ,contw 
+7665 68030a84 fetch 6 ,mem_sp_prarm_stack + 6 
+7666 e0a30000 istore 6 ,contw 
+7667 204079d7 call function_f2 
+7668 7041bd01 jam 1 ,mem_link_key_exists 
+7669 d8a041be arg mem_link_key ,contw 
+766a d8c00a4e arg mem_sp_calc_result_high ,contr 
+766b 20407ebf call memcpy16 
+766c 202021c4 branch generate_linkkey_continue 
+
+sp_pubkey_calc:
+766d 4773c03c bpatchx patch3c_7 ,mem_patch3c 
+766e 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 
+766f c1800000 rtnne sp_key_invalid 
+7670 680089b2 fetch 1 ,mem_sp_calc 
+7671 c1800000 rtnne sp_calc_standby 
+7672 d8a04612 arg mem_sp_private_key ,contw 
+7673 18000e0b force 11 ,queue 
+7674 204076a2 call random_generator 
+7675 180a7e00 random pdata 
+7676 1fe37e00 rshift pdata ,pdata 
+7677 e0a10000 istore 2 ,contw 
+7678 d8a006be arg mem_k ,contw 
+7679 d8c04612 arg mem_sp_private_key ,contr 
+767a 20407ebe call memcpy24 
+767b d8a005e6 arg mem_ax ,contw 
+767c d8c008ce arg mem_gx ,contr 
+767d 20407ebc call memcpy48 
+767e d8a00616 arg mem_az ,contw 
+767f 20407ec5 call bn_zero 
+7680 70061601 jam 1 ,mem_az 
+7681 20407a5d call eckp_calc_init 
+7682 7009b201 jam sp_calc_pubkey ,mem_sp_calc 
+7683 20600000 rtn 
+
+sp_pubkey_generated:
+7684 d8a0462a arg mem_sp_pubkey_local ,contw 
+7685 d8c0062e arg mem_bx ,contr 
+7686 20407ebc call memcpy48 
+7687 7045b101 jam sp_key_valid ,mem_sp_local_key_invalid 
+7688 7009b200 jam sp_calc_standby ,mem_sp_calc 
+7689 20600000 rtn 
+
+sp_dhkey_calc:
+768a 4774403d bpatchx patch3d_0 ,mem_patch3d 
+768b 680089b9 fetch 1 ,mem_sp_dhkey_invalid 
+768c c1800000 rtnne sp_key_invalid 
+768d 680089b2 fetch 1 ,mem_sp_calc 
+768e c1800000 rtnne sp_calc_standby 
+768f d8a006be arg mem_k ,contw 
+7690 d8c04612 arg mem_sp_private_key ,contr 
+7691 20407ebe call memcpy24 
+7692 d8a005e6 arg mem_ax ,contw 
+7693 d8c009c6 arg mem_sp_pubkey_remote ,contr 
+7694 20407ebc call memcpy48 
+7695 d8a00616 arg mem_az ,contw 
+7696 20407ec5 call bn_zero 
+7697 70061601 jam 1 ,mem_az 
+7698 20407a5d call eckp_calc_init 
+7699 7009b202 jam sp_calc_dhkey ,mem_sp_calc 
+769a 20600000 rtn 
+
+sp_dhkey_generated:
+769b 7009b301 jam sp_flag_commit ,mem_sp_dh_ready 
+769c d8a00a06 arg mem_sp_dhkey ,contw 
+769d d8c0062e arg mem_bx ,contr 
+769e 20407ebe call memcpy24 
+769f 7009b901 jam sp_key_valid ,mem_sp_dhkey_invalid 
+76a0 7009b200 jam sp_calc_standby ,mem_sp_calc 
+76a1 20600000 rtn 
+
+random_generator:
+76a2 18e08fff increase -1 ,queue 
+76a3 24610000 nrtn positive 
+76a4 180a7e00 random pdata 
+76a5 e0a10000 istore 2 ,contw 
+76a6 202076a2 branch random_generator 
+
+compare4:
+76a7 18e08fff increase -1 ,queue 
+76a8 242176b3 nbranch compare4_success ,positive 
+76a9 ea220000 ifetch 4 ,rega 
+76aa 1fe20400 copy pdata ,temp 
+76ab ea420000 ifetch 4 ,regb 
+76ac 9842fe00 iflip temp ,pdata 
+76ad 2422f6b1 nbranch compare4_failed ,zero 
+76ae 1a20a204 increase 4 ,rega 
+76af 1a40a404 increase 4 ,regb 
+76b0 202076a7 branch compare4 
+
+compare4_failed:
+76b1 7840fc00 disable true 
+76b2 20600000 rtn 
+
+compare4_success:
+76b3 7820fc00 enable true 
+76b4 20600000 rtn 
+
+simple_pairing_sequence:
+76b5 4774c03d bpatchx patch3d_1 ,mem_patch3d 
+76b6 680089b0 fetch 1 ,mem_sp_flag 
+76b7 207a0000 rtn blank 
+76b8 204062bc call lmo_fifo_check 
+76b9 247a0000 nrtn blank 
+76ba 7009b000 jam sp_flag_standby ,mem_sp_flag 
+76bb 680089ae fetch 1 ,mem_sp_state 
+76bc c001e1fd beq sp_stat_key_send ,sp_send_lmp_encapsulated_header 
+76bd c002e21a beq sp_stat_commit_send ,sp_send_lmp_simple_pairing_comfirm 
+76be c003e225 beq sp_stat_random_send ,sp_send_lmp_simple_pairing_number 
+76bf c005e23a beq sp_stat_confirm_send ,sp_send_lmp_dhkey_check 
+76c0 c0017588 beq sp_stat_key_generate ,sp_generate_local_key 
+76c1 c00275f7 beq sp_stat_commit_calc ,sp_calculate_commitment 
+76c2 c004f617 beq sp_stat_confirm_check ,sp_confirm_check 
+76c3 c005763a beq sp_stat_confirm_calc ,sp_confirm_calc 
+76c4 c0067658 beq sp_stat_link_key_calc ,sp_link_key_prarm_push 
+76c5 20600000 rtn 
+
+master_simple_paring_sequence:
+76c6 4775403d bpatchx patch3d_2 ,mem_patch3d 
+76c7 680089b1 fetch 1 ,mem_master_sp_flag 
+76c8 207a0000 rtn blank 
+76c9 204062bc call lmo_fifo_check 
+76ca 247a0000 nrtn blank 
+76cb 7009b100 jam sp_flag_standby ,mem_master_sp_flag 
+76cc 680089af fetch 1 ,mem_master_sp_state 
+76cd c00961e0 beq sp_master_stat_start_skip ,sp_master_send_io_cap_get 
+76ce c009e1e5 beq sp_master_stat_start_done ,sp_master_send_io_cap_send 
+76cf c001e1e9 beq sp_stat_key_send ,sp_master_send_lmp_encapsulated_header 
+76d0 c0027602 beq sp_stat_commit_calc ,master_sp_calculate_commitment 
+76d1 c00a61ed beq sp_stat_commitment_compare ,sp_master_commitment_compare 
+76d2 c003e1fb beq sp_stat_random_send ,sp_master_send_lmp_simple_pairing_number 
+76d3 c005763a beq sp_stat_confirm_calc ,sp_confirm_calc 
+76d4 c005e239 beq sp_stat_confirm_send ,master_sp_send_lmp_dhkey_check 
+76d5 c004f617 beq sp_stat_confirm_check ,sp_confirm_check 
+76d6 c00ae233 beq sp_state_end ,master_sp_sm_end 
+76d7 20600000 rtn 
+
+master_set_mem_master_sp_flag:
+76d8 7009b101 jam sp_flag_commit ,mem_master_sp_flag 
+76d9 20600000 rtn 
+
+master_clear_mem_master_sp_flag:
+76da 7009b100 jam sp_flag_standby ,mem_master_sp_flag 
+76db 20600000 rtn 
+
+sp_calc_sequence:
+76dc 4775c03d bpatchx patch3d_3 ,mem_patch3d 
+76dd 6800c65a fetch 1 ,mem_ssp_enable 
+76de 207a0000 rtn blank 
+76df 680089b2 fetch 1 ,mem_sp_calc 
+76e0 207a0000 rtn blank 
+76e1 1fe0fe80 increase 0x80 ,pdata 
+76e2 600089b2 store 1 ,mem_sp_calc 
+76e3 c3838000 rtnbit1 7 
+76e4 680085e3 fetch 1 ,mem_ec_loopc 
+76e5 203a76e7 branch sp_calc_sequence_done ,blank 
+76e6 20207a68 branch eckp_calc 
+
+sp_calc_sequence_done:
+76e7 204078d3 call ecunmapz 
+76e8 680089b2 fetch 1 ,mem_sp_calc 
+76e9 c000f684 beq sp_calc_pubkey ,sp_pubkey_generated 
+76ea c001769b beq sp_calc_dhkey ,sp_dhkey_generated 
+76eb 20600000 rtn 
+
+bn_testbit:
+76ec 1fe10e07 and pdata ,7 ,queue 
+76ed 1fe97e00 rshift3 pdata ,pdata 
+76ee 98c08c00 iadd contr ,contr 
+76ef e8c08000 ifetch 1 ,contr 
+76f0 afec0000 qisolate0 pdata 
+76f1 20600000 rtn 
+
+ec_copy:
+76f2 20407ebe call memcpy24 
+76f3 20407ebe call memcpy24 
+76f4 20207ebe branch memcpy24 
+
+bn_eq_zero:
+76f5 e8c40000 ifetch 8 ,contr 
+76f6 247a0000 nrtn blank 
+76f7 e8c40000 ifetch 8 ,contr 
+76f8 247a0000 nrtn blank 
+76f9 e8c40000 ifetch 8 ,contr 
+76fa 20600000 rtn 
+
+bn_eq_0:
+76fb ea220000 ifetch 4 ,rega 
+76fc 98000400 iforce temp 
+76fd ea420000 ifetch 4 ,regb 
+76fe 98467c00 isub temp ,null 
+76ff 24628000 nrtn zero 
+7700 1a20a204 increase 4 ,rega 
+7701 1a40a404 increase 4 ,regb 
+7702 c20076fb loop bn_eq_0 
+7703 20600000 rtn 
+
+bn_bigeq:
+7704 18007206 force 6 ,loopcnt 
+7705 1a20a214 increase 20 ,rega 
+7706 1a40a414 increase 20 ,regb 
+
+bn_bigeq_0:
+7707 ea420000 ifetch 4 ,regb 
+7708 98000400 iforce temp 
+7709 ea220000 ifetch 4 ,rega 
+770a 98467e00 isub temp ,pdata 
+770b 24610000 nrtn positive 
+770c 247a0000 nrtn blank 
+770d 1a20a3fc increase -4 ,rega 
+770e 1a40a5fc increase -4 ,regb 
+770f c2007707 loop bn_bigeq_0 
+7710 20600000 rtn 
+
+bn_add:
+7711 18007206 force 6 ,loopcnt 
+7712 18002600 force 0 ,regc 
+
+bn_add_0:
+7713 ea220000 ifetch 4 ,rega 
+7714 98000400 iforce temp 
+7715 ea420000 ifetch 4 ,regb 
+7716 9840fe00 iadd temp ,pdata 
+7717 9a60fe00 iadd regc ,pdata 
+7718 e0a20000 istore 4 ,contw 
+7719 2feffe20 isolate1 32 ,pdata 
+771a 7920a600 setflag true ,0 ,regc 
+771b 1a20a204 increase 4 ,rega 
+771c 1a40a404 increase 4 ,regb 
+771d c2007713 loop bn_add_0 
+771e 20600000 rtn 
+
+bn_sub:
+771f 18007206 force 6 ,loopcnt 
+7720 18002600 force 0 ,regc 
+
+bn_sub_0:
+7721 ea420000 ifetch 4 ,regb 
+7722 98000400 iforce temp 
+7723 ea220000 ifetch 4 ,rega 
+7724 98467e00 isub temp ,pdata 
+7725 9a667e00 isub regc ,pdata 
+7726 e0a20000 istore 4 ,contw 
+7727 2feffe20 isolate1 32 ,pdata 
+7728 7920a600 setflag true ,0 ,regc 
+7729 1a20a204 increase 4 ,rega 
+772a 1a40a404 increase 4 ,regb 
+772b c2007721 loop bn_sub_0 
+772c 20600000 rtn 
+
+bn_rshift6:
+772d 18007206 force 6 ,loopcnt 
+772e 1a20a214 increase 20 ,rega 
+
+bn_rshift:
+772f 18002600 force 0 ,regc 
+
+bn_rshift_0:
+7730 ea220000 ifetch 4 ,rega 
+7731 2feffe00 isolate1 0 ,pdata 
+7732 7920a601 setflag true ,1 ,regc 
+7733 1fe37e00 rshift pdata ,pdata 
+7734 2a6ffe00 isolate1 0 ,regc 
+7735 7920fe1f setflag true ,31 ,pdata 
+7736 e2220000 istore 4 ,rega 
+7737 1a20a3fc increase -4 ,rega 
+7738 1a632600 rshift regc ,regc 
+7739 c2007730 loop bn_rshift_0 
+773a 20600000 rtn 
+
+bn_lshift:
+773b 18007206 force 6 ,loopcnt 
+773c 18002600 force 0 ,regc 
+
+bn_lshift_0:
+773d ea220000 ifetch 4 ,rega 
+773e 2feffe1f isolate1 31 ,pdata 
+773f 7920a601 setflag true ,1 ,regc 
+7740 1fe3fe00 lshift pdata ,pdata 
+7741 2a6ffe00 isolate1 0 ,regc 
+7742 7920fe00 setflag true ,0 ,pdata 
+7743 e2220000 istore 4 ,rega 
+7744 1a20a204 increase 4 ,rega 
+7745 1a632600 rshift regc ,regc 
+7746 c200773d loop bn_lshift_0 
+7747 20600000 rtn 
+
+bn_lshiftmod:
+7748 2040773b call bn_lshift 
+
+bn_lshiftmod_ismod:
+7749 2a6ffe00 isolate1 0 ,regc 
+774a 2020f751 branch bn_lshiftmod_0 ,true 
+774b da400886 arg mem_p ,regb 
+774c 1a222600 copy rega ,regc 
+774d 1a20a3e8 increase -24 ,rega 
+774e 20407704 call bn_bigeq 
+774f 24610000 nrtn positive 
+7750 1a622200 copy regc ,rega 
+
+bn_lshiftmod_0:
+7751 1a20a3e8 increase -24 ,rega 
+7752 da400886 arg mem_p ,regb 
+7753 1a220a00 copy rega ,contw 
+7754 2020771f branch bn_sub 
+
+bn_addmod:
+7755 20407711 call bn_add 
+7756 18a22200 copy contw ,rega 
+7757 20207749 branch bn_lshiftmod_ismod 
+
+bn_submod:
+7758 2040771f call bn_sub 
+7759 2a6c0000 isolate0 0 ,regc 
+775a 20608000 rtn true 
+775b da400886 arg mem_p ,regb 
+775c 18a0a3e8 add contw ,-24 ,rega 
+775d 1a220a00 copy rega ,contw 
+775e 20207711 branch bn_add 
+
+bn_p192mod:
+775f 18a21600 copy contw ,timeup 
+7760 1a226000 copy rega ,alarm 
+7761 da400716 arg mem_tmp2 ,regb 
+7762 1a420a00 copy regb ,contw 
+7763 1a208c18 add rega ,24 ,contr 
+7764 e8c40000 ifetch 8 ,contr 
+7765 e0a40000 istore 8 ,contw 
+7766 e0a40000 istore 8 ,contw 
+7767 18007e00 force 0 ,pdata 
+7768 e0a40000 istore 8 ,contw 
+7769 19620a00 copy timeup ,contw 
+776a 20407755 call bn_addmod 
+776b da400716 arg mem_tmp2 ,regb 
+776c 1a420a00 copy regb ,contw 
+776d 18007e00 force 0 ,pdata 
+776e e0a40000 istore 8 ,contw 
+776f 1e008c20 add alarm ,32 ,contr 
+7770 e8c40000 ifetch 8 ,contr 
+7771 e0a40000 istore 8 ,contw 
+7772 e0a40000 istore 8 ,contw 
+7773 19622200 copy timeup ,rega 
+7774 1a220a00 copy rega ,contw 
+7775 20407755 call bn_addmod 
+7776 da400716 arg mem_tmp2 ,regb 
+7777 1a420a00 copy regb ,contw 
+7778 1e008c28 add alarm ,40 ,contr 
+7779 e8c40000 ifetch 8 ,contr 
+777a e0a40000 istore 8 ,contw 
+777b e0a40000 istore 8 ,contw 
+777c e0a40000 istore 8 ,contw 
+777d 19622200 copy timeup ,rega 
+777e 1a220a00 copy rega ,contw 
+777f 20207755 branch bn_addmod 
+
+bn_load:
+7780 18007206 force 6 ,loopcnt 
+
+bn_load_0:
+7781 e8c20000 ifetch 4 ,contr 
+7782 98005e00 iforce regext 
+7783 1f00f001 increase 1 ,regext_index 
+7784 c2007781 loop bn_load_0 
+7785 20600000 rtn 
+
+bn_mulmod:
+7786 18a21600 copy contw ,timeup 
+7787 d8a006e6 arg mem_tmp1 ,contw 
+7788 20407ec5 call bn_zero 
+7789 d8a006e6 arg mem_tmp1 ,contw 
+778a 1a220c00 copy rega ,contr 
+778b 18007000 force 0 ,regext_index 
+778c 20407780 call bn_load 
+778d 1a420c00 copy regb ,contr 
+778e 20407780 call bn_load 
+778f 18002400 force 0 ,regb 
+
+bn_mulmod_1:
+7790 18000400 force 0 ,temp 
+7791 18002606 force 6 ,regc 
+
+bn_mulmod_0:
+7792 e8a20000 ifetch 4 ,contw 
+7793 98002200 iforce rega 
+7794 1a427000 copy regb ,regext_index 
+7795 1de27e00 deposit regext 
+7796 1a627000 copy regc ,regext_index 
+7797 9deffe00 imul32 regext ,pdata 
+7798 9a20fe00 iadd rega ,pdata 
+7799 9840fe00 iadd temp ,pdata 
+779a e0a20000 istore 4 ,contw 
+779b 1fef0400 rshift32 pdata ,temp 
+779c 1a60a601 increase 1 ,regc 
+779d 2a61fe0c compare 12 ,regc ,0xff 
+779e 2420f792 nbranch bn_mulmod_0 ,true 
+779f 18427e00 deposit temp 
+77a0 e0a20000 istore 4 ,contw 
+77a1 18a08be8 increase -24 ,contw 
+77a2 1a40a401 increase 1 ,regb 
+77a3 2a41fe06 compare 6 ,regb ,0xff 
+77a4 2420f790 nbranch bn_mulmod_1 ,true 
+77a5 da2006e6 arg mem_tmp1 ,rega 
+77a6 19620a00 copy timeup ,contw 
+77a7 2020775f branch bn_p192mod 
+
+bn_sqrmod:
+77a8 1a222400 copy rega ,regb 
+77a9 20207786 branch bn_mulmod 
+
+bn_rshifteven:
+77aa 1a226000 copy rega ,alarm 
+
+bn_rshifteven_1:
+77ab 1e022200 copy alarm ,rega 
+77ac ea208000 ifetch 1 ,rega 
+77ad 2feffe00 isolate1 0 ,pdata 
+77ae 20608000 rtn true 
+77af 2040772d call bn_rshift6 
+77b0 ea408000 ifetch 1 ,regb 
+77b1 2fec0000 isolate0 0 ,pdata 
+77b2 2020f7ba branch bn_rshifteven_0 ,true 
+77b3 da200886 arg mem_p ,rega 
+77b4 1a420a00 copy regb ,contw 
+77b5 20407711 call bn_add 
+77b6 ea408000 ifetch 1 ,regb 
+77b7 9a60fe00 iadd regc ,pdata 
+77b8 e2408000 istore 1 ,regb 
+77b9 1a40a5e8 increase -24 ,regb 
+
+bn_rshifteven_0:
+77ba 1a40a218 add regb ,24 ,rega 
+77bb 18007207 force 7 ,loopcnt 
+77bc 2040772f call bn_rshift 
+77bd 202077ab branch bn_rshifteven_1 
+
+bn_invmod:
+77be 18a21600 copy contw ,timeup 
+77bf d8a00746 arg mem_tmp0 ,contw 
+77c0 20407ec5 call bn_zero 
+77c1 18007e00 force 0 ,pdata 
+77c2 600206fe store 4 ,mem_tmp5 
+77c3 6002075e store 4 ,mem_t2 
+77c4 70074601 jam 1 ,mem_tmp0 
+77c5 d8a006e6 arg mem_tmp1 ,contw 
+77c6 20407ec5 call bn_zero 
+77c7 d8c00886 arg mem_p ,contr 
+77c8 d8a00716 arg mem_tmp2 ,contw 
+77c9 20407ebe call memcpy24 
+77ca 1a220c00 copy rega ,contr 
+77cb d8a0072e arg mem_tmp3 ,contw 
+77cc 20407ebe call memcpy24 
+
+bn_invmod_2:
+77cd d8c0072e arg mem_tmp3 ,contr 
+77ce 204076f5 call bn_eq_zero 
+77cf 203a77f6 branch bn_invmod_0 ,blank 
+77d0 da20072e arg mem_tmp3 ,rega 
+77d1 da400746 arg mem_tmp0 ,regb 
+77d2 204077aa call bn_rshifteven 
+77d3 da200716 arg mem_tmp2 ,rega 
+77d4 da4006e6 arg mem_tmp1 ,regb 
+77d5 204077aa call bn_rshifteven 
+77d6 da20072e arg mem_tmp3 ,rega 
+77d7 da400716 arg mem_tmp2 ,regb 
+77d8 20407704 call bn_bigeq 
+77d9 202177e8 branch bn_invmod_1 ,positive 
+77da da200716 arg mem_tmp2 ,rega 
+77db da40072e arg mem_tmp3 ,regb 
+77dc 1a220a00 copy rega ,contw 
+77dd 2040771f call bn_sub 
+77de da200746 arg mem_tmp0 ,rega 
+77df da4006e6 arg mem_tmp1 ,regb 
+77e0 1a420a00 copy regb ,contw 
+77e1 20407711 call bn_add 
+77e2 ea208000 ifetch 1 ,rega 
+77e3 9a60a600 iadd regc ,regc 
+77e4 ea408000 ifetch 1 ,regb 
+77e5 9a60fe00 iadd regc ,pdata 
+77e6 e2408000 istore 1 ,regb 
+77e7 202077cd branch bn_invmod_2 
+
+bn_invmod_1:
+77e8 da20072e arg mem_tmp3 ,rega 
+77e9 da400716 arg mem_tmp2 ,regb 
+77ea 1a220a00 copy rega ,contw 
+77eb 2040771f call bn_sub 
+77ec da2006e6 arg mem_tmp1 ,rega 
+77ed da400746 arg mem_tmp0 ,regb 
+77ee 1a420a00 copy regb ,contw 
+77ef 20407711 call bn_add 
+77f0 ea208000 ifetch 1 ,rega 
+77f1 9a60a600 iadd regc ,regc 
+77f2 ea408000 ifetch 1 ,regb 
+77f3 9a60fe00 iadd regc ,pdata 
+77f4 e2408000 istore 1 ,regb 
+77f5 202077cd branch bn_invmod_2 
+
+bn_invmod_0:
+77f6 d8a00746 arg mem_tmp0 ,contw 
+77f7 20407ec5 call bn_zero 
+77f8 680086fe fetch 1 ,mem_tmp5 
+77f9 60008746 store 1 ,mem_tmp0 
+77fa 6000874e store 1 ,mem_tmp0a 
+77fb da200746 arg mem_tmp0 ,rega 
+77fc da4006e6 arg mem_tmp1 ,regb 
+77fd 1a420a00 copy regb ,contw 
+77fe 20407755 call bn_addmod 
+77ff da200886 arg mem_p ,rega 
+7800 da4006e6 arg mem_tmp1 ,regb 
+7801 19620a00 copy timeup ,contw 
+7802 20207758 branch bn_submod 
+
+ecdbl:
+7803 da2006a6 arg mem_cz ,rega 
+7804 d8a0075e arg mem_t2 ,contw 
+7805 204077a8 call bn_sqrmod 
+7806 da20075e arg mem_t2 ,rega 
+7807 d8a00776 arg mem_t3 ,contw 
+7808 204077a8 call bn_sqrmod 
+7809 da20089e arg mem_a ,rega 
+780a da400776 arg mem_t3 ,regb 
+780b d8a00776 arg mem_t3 ,contw 
+780c 20407786 call bn_mulmod 
+780d da200676 arg mem_cx ,rega 
+780e d8a0075e arg mem_t2 ,contw 
+780f 204077a8 call bn_sqrmod 
+7810 d8c0075e arg mem_t2 ,contr 
+7811 d8a0072e arg mem_t1 ,contw 
+7812 20407ebe call memcpy24 
+7813 da20072e arg mem_t1 ,rega 
+7814 20407748 call bn_lshiftmod 
+7815 da20075e arg mem_t2 ,rega 
+7816 da40072e arg mem_t1 ,regb 
+7817 d8a0075e arg mem_t2 ,contw 
+7818 20407755 call bn_addmod 
+7819 da20075e arg mem_t2 ,rega 
+781a da400776 arg mem_t3 ,regb 
+781b d8a0075e arg mem_t2 ,contw 
+781c 20407755 call bn_addmod 
+781d d8c00676 arg mem_cx ,contr 
+781e d8a0072e arg mem_t1 ,contw 
+781f 20407ebe call memcpy24 
+7820 da20068e arg mem_cy ,rega 
+7821 d8a00776 arg mem_t3 ,contw 
+7822 204077a8 call bn_sqrmod 
+7823 da20072e arg mem_t1 ,rega 
+7824 20407748 call bn_lshiftmod 
+7825 da20072e arg mem_t1 ,rega 
+7826 20407748 call bn_lshiftmod 
+7827 da20072e arg mem_t1 ,rega 
+7828 da400776 arg mem_t3 ,regb 
+7829 d8a0072e arg mem_t1 ,contw 
+782a 20407786 call bn_mulmod 
+782b da200776 arg mem_t3 ,rega 
+782c d8a00746 arg mem_t0 ,contw 
+782d 204077a8 call bn_sqrmod 
+782e da200746 arg mem_t0 ,rega 
+782f 20407748 call bn_lshiftmod 
+7830 da200746 arg mem_t0 ,rega 
+7831 20407748 call bn_lshiftmod 
+7832 da200746 arg mem_t0 ,rega 
+7833 20407748 call bn_lshiftmod 
+7834 d8c0068e arg mem_cy ,contr 
+7835 d8a00776 arg mem_t3 ,contw 
+7836 20407ebe call memcpy24 
+7837 da200776 arg mem_t3 ,rega 
+7838 20407748 call bn_lshiftmod 
+7839 da200776 arg mem_t3 ,rega 
+783a da4006a6 arg mem_cz ,regb 
+783b d8a006a6 arg mem_cz ,contw 
+783c 20407786 call bn_mulmod 
+783d da20075e arg mem_t2 ,rega 
+783e d8a00776 arg mem_t3 ,contw 
+783f 204077a8 call bn_sqrmod 
+7840 da200776 arg mem_t3 ,rega 
+7841 da40072e arg mem_t1 ,regb 
+7842 d8a00776 arg mem_t3 ,contw 
+7843 20407758 call bn_submod 
+7844 da200776 arg mem_t3 ,rega 
+7845 da40072e arg mem_t1 ,regb 
+7846 d8a00676 arg mem_cx ,contw 
+7847 20407758 call bn_submod 
+7848 da20072e arg mem_t1 ,rega 
+7849 da400676 arg mem_cx ,regb 
+784a d8a00776 arg mem_t3 ,contw 
+784b 20407758 call bn_submod 
+784c da200776 arg mem_t3 ,rega 
+784d da40075e arg mem_t2 ,regb 
+784e d8a00776 arg mem_t3 ,contw 
+784f 20407786 call bn_mulmod 
+7850 da200776 arg mem_t3 ,rega 
+7851 da400746 arg mem_t0 ,regb 
+7852 d8a0068e arg mem_cy ,contw 
+7853 20207758 branch bn_submod 
+
+ecadd:
+7854 da200616 arg mem_az ,rega 
+7855 d8a0078e arg mem_t7 ,contw 
+7856 204077a8 call bn_sqrmod 
+7857 da200676 arg mem_cx ,rega 
+7858 da40078e arg mem_t7 ,regb 
+7859 d8a00746 arg mem_t0 ,contw 
+785a 20407786 call bn_mulmod 
+785b da200616 arg mem_az ,rega 
+785c da40078e arg mem_t7 ,regb 
+785d d8a0078e arg mem_t7 ,contw 
+785e 20407786 call bn_mulmod 
+785f da20068e arg mem_cy ,rega 
+7860 da40078e arg mem_t7 ,regb 
+7861 d8a0072e arg mem_t1 ,contw 
+7862 20407786 call bn_mulmod 
+7863 da2006a6 arg mem_cz ,rega 
+7864 d8a0078e arg mem_t7 ,contw 
+7865 204077a8 call bn_sqrmod 
+7866 da2005e6 arg mem_ax ,rega 
+7867 da40078e arg mem_t7 ,regb 
+7868 d8a0075e arg mem_t2 ,contw 
+7869 20407786 call bn_mulmod 
+786a da2006a6 arg mem_cz ,rega 
+786b da40078e arg mem_t7 ,regb 
+786c d8a0078e arg mem_t7 ,contw 
+786d 20407786 call bn_mulmod 
+786e da2005fe arg mem_ay ,rega 
+786f da40078e arg mem_t7 ,regb 
+7870 d8a00776 arg mem_t3 ,contw 
+7871 20407786 call bn_mulmod 
+7872 da200746 arg mem_t0 ,rega 
+7873 da40075e arg mem_t2 ,regb 
+7874 d8a0078e arg mem_t7 ,contw 
+7875 20407758 call bn_submod 
+7876 da200746 arg mem_t0 ,rega 
+7877 da40075e arg mem_t2 ,regb 
+7878 d8a00746 arg mem_t0 ,contw 
+7879 20407755 call bn_addmod 
+787a da20072e arg mem_t1 ,rega 
+787b da400776 arg mem_t3 ,regb 
+787c d8a0075e arg mem_t2 ,contw 
+787d 20407758 call bn_submod 
+787e da20072e arg mem_t1 ,rega 
+787f da400776 arg mem_t3 ,regb 
+7880 d8a0072e arg mem_t1 ,contw 
+7881 20407755 call bn_addmod 
+7882 da20072e arg mem_t1 ,rega 
+7883 da40078e arg mem_t7 ,regb 
+7884 d8a0072e arg mem_t1 ,contw 
+7885 20407786 call bn_mulmod 
+7886 da2006a6 arg mem_cz ,rega 
+7887 da400616 arg mem_az ,regb 
+7888 d8a00776 arg mem_t3 ,contw 
+7889 20407786 call bn_mulmod 
+788a da200776 arg mem_t3 ,rega 
+788b da40078e arg mem_t7 ,regb 
+788c d8a006a6 arg mem_cz ,contw 
+788d 20407786 call bn_mulmod 
+788e da20078e arg mem_t7 ,rega 
+788f d8a0078e arg mem_t7 ,contw 
+7890 204077a8 call bn_sqrmod 
+7891 da20078e arg mem_t7 ,rega 
+7892 da400746 arg mem_t0 ,regb 
+7893 d8a00776 arg mem_t3 ,contw 
+7894 20407786 call bn_mulmod 
+7895 da20078e arg mem_t7 ,rega 
+7896 da40072e arg mem_t1 ,regb 
+7897 d8a0072e arg mem_t1 ,contw 
+7898 20407786 call bn_mulmod 
+7899 da20075e arg mem_t2 ,rega 
+789a d8a00676 arg mem_cx ,contw 
+789b 204077a8 call bn_sqrmod 
+789c da200676 arg mem_cx ,rega 
+789d da400776 arg mem_t3 ,regb 
+789e d8a00676 arg mem_cx ,contw 
+789f 20407758 call bn_submod 
+78a0 d8c00676 arg mem_cx ,contr 
+78a1 d8a0078e arg mem_t7 ,contw 
+78a2 20407ebe call memcpy24 
+78a3 da20078e arg mem_t7 ,rega 
+78a4 20407748 call bn_lshiftmod 
+78a5 da200776 arg mem_t3 ,rega 
+78a6 da40078e arg mem_t7 ,regb 
+78a7 d8a00776 arg mem_t3 ,contw 
+78a8 20407758 call bn_submod 
+78a9 da200776 arg mem_t3 ,rega 
+78aa da40075e arg mem_t2 ,regb 
+78ab d8a0075e arg mem_t2 ,contw 
+78ac 20407786 call bn_mulmod 
+78ad da20075e arg mem_t2 ,rega 
+78ae da40072e arg mem_t1 ,regb 
+78af d8a0068e arg mem_cy ,contw 
+78b0 20407758 call bn_submod 
+78b1 da20068e arg mem_cy ,rega 
+78b2 da400886 arg mem_p ,regb 
+78b3 d8a0068e arg mem_cy ,contw 
+78b4 18002600 force 0 ,regc 
+78b5 6800868e fetch 1 ,mem_cy 
+78b6 2feffe00 isolate1 0 ,pdata 
+78b7 2040f711 call bn_add ,true 
+78b8 1a626000 copy regc ,alarm 
+78b9 da20068e arg mem_cy ,rega 
+78ba 2040772d call bn_rshift6 
+78bb 680086a5 fetch 1 ,mem_cy5 
+78bc 2e0ffe00 isolate1 0 ,alarm 
+78bd 7920fe07 setflag true ,7 ,pdata 
+78be 600086a5 store 1 ,mem_cy5 
+78bf 20600000 rtn 
+
+eckp_0:
+78c0 680085e3 fetch 1 ,mem_ec_loopc 
+78c1 1fe0ffff increase -1 ,pdata 
+78c2 24610000 nrtn positive 
+78c3 600085e3 store 1 ,mem_ec_loopc 
+78c4 680085e2 fetch 1 ,mem_ec_infinite 
+78c5 205a7803 call ecdbl ,blank 
+78c6 680085e3 fetch 1 ,mem_ec_loopc 
+78c7 d8c006be arg mem_k ,contr 
+78c8 204076ec call bn_testbit 
+78c9 2020f8c0 branch eckp_0 ,true 
+78ca 680085e2 fetch 1 ,mem_ec_infinite 
+78cb 243a78ce nbranch eckp_1 ,blank 
+78cc 20407854 call ecadd 
+78cd 202078c0 branch eckp_0 
+
+eckp_1:
+78ce 7005e200 jam 0 ,mem_ec_infinite 
+78cf d8c005e6 arg mem_ax ,contr 
+78d0 d8a00676 arg mem_cx ,contw 
+78d1 204076f2 call ec_copy 
+78d2 202078c0 branch eckp_0 
+
+ecunmapz:
+78d3 da2006a6 arg mem_cz ,rega 
+78d4 d8a00776 arg mem_t3 ,contw 
+78d5 204077be call bn_invmod 
+78d6 da200776 arg mem_t3 ,rega 
+78d7 d8a0072e arg mem_t1 ,contw 
+78d8 204077a8 call bn_sqrmod 
+78d9 da200676 arg mem_cx ,rega 
+78da da40072e arg mem_t1 ,regb 
+78db d8a0062e arg mem_bx ,contw 
+78dc 20407786 call bn_mulmod 
+78dd da200776 arg mem_t3 ,rega 
+78de da40072e arg mem_t1 ,regb 
+78df d8a0075e arg mem_t2 ,contw 
+78e0 20407786 call bn_mulmod 
+78e1 da20068e arg mem_cy ,rega 
+78e2 da40075e arg mem_t2 ,regb 
+78e3 d8a00646 arg mem_by ,contw 
+78e4 20207786 branch bn_mulmod 
+
+sha_endian_swap2:
+78e5 e8c20000 ifetch 4 ,contr 
+78e6 18002204 force 4 ,rega 
+78e7 18a08a03 increase 3 ,contw 
+
+sha_endian_loop:
+78e8 e0a08000 istore 1 ,contw 
+78e9 1fecfe00 rshift8 pdata ,pdata 
+78ea 18a08bfe increase -2 ,contw 
+78eb 1a20a3ff increase -1 ,rega 
+78ec 2422f8e8 nbranch sha_endian_loop ,zero 
+78ed 18a08a05 increase 5 ,contw 
+78ee c20078e5 loop sha_endian_swap2 
+78ef 20600000 rtn 
+
+sha_getw:
+78f0 18ebfe00 lshift2 queue ,pdata 
+78f1 99608c00 iadd timeup ,contr 
+78f2 e8c20000 ifetch 4 ,contr 
+78f3 20600000 rtn 
+
+sha_r:
+78f4 18006010 force 16 ,alarm 
+78f5 d96005e6 arg memdat ,timeup 
+
+sha_r_loop:
+78f6 1e008ff9 add alarm ,-7 ,queue 
+78f7 204078f0 call sha_getw 
+78f8 98000400 iforce temp 
+78f9 1e008ff0 add alarm ,-16 ,queue 
+78fa 204078f0 call sha_getw 
+78fb 98408400 iadd temp ,temp 
+78fc 1e008ffe add alarm ,-2 ,queue 
+78fd 204078f0 call sha_getw 
+78fe 1fee7e01 shasx pdata ,1 ,pdata 
+78ff 98408400 iadd temp ,temp 
+7900 1e008ff1 add alarm ,-15 ,queue 
+7901 204078f0 call sha_getw 
+7902 1fee7e00 shasx pdata ,0 ,pdata 
+7903 98408400 iadd temp ,temp 
+7904 1e0bfe00 lshift2 alarm ,pdata 
+7905 99608a00 iadd timeup ,contw 
+7906 e0aa0000 istoret 4 ,contw 
+7907 1e00e001 increase 1 ,alarm 
+7908 2e01fe40 compare 64 ,alarm ,0xff 
+7909 2420f8f6 nbranch sha_r_loop ,true 
+790a 20600000 rtn 
+
+sha_init:
+790b d8c008fe arg memh0 ,contr 
+790c 18007007 force 7 ,regext_index 
+
+sha_init_0:
+790d e8c20000 ifetch 4 ,contr 
+790e 98005e00 iforce regext 
+790f 1f00f1ff increase -1 ,regext_index 
+7910 2021790d branch sha_init_0 ,positive 
+7911 20600000 rtn 
+
+sha:
+7912 4776403d bpatchx patch3d_4 ,mem_patch3d 
+7913 204078f4 call sha_r 
+7914 d8a006e6 arg memahbak ,contw 
+7915 18007000 force 0 ,regext_index 
+
+sha_0:
+7916 1de27e00 deposit regext 
+7917 e0a20000 istore 4 ,contw 
+7918 1f00f001 increase 1 ,regext_index 
+7919 2f01fe08 compare 8 ,regext_index ,0xff 
+791a 2420f916 nbranch sha_0 ,true 
+791b 204074b9 call enable_authrom 
+791c d9608700 arg memk ,timeup 
+791d de0005e6 arg memdat ,alarm 
+791e 18007240 force 64 ,loopcnt 
+
+sha_loop:
+791f ee0a0000 ifetcht 4 ,alarm 
+7920 e9620000 ifetch 4 ,timeup 
+7921 19609604 increase 4 ,timeup 
+7922 1e00e004 increase 4 ,alarm 
+7923 9840fe00 iadd temp ,pdata 
+7924 18007007 force 7 ,regext_index 
+7925 9de08400 iadd regext ,temp 
+7926 18007004 force 4 ,regext_index 
+7927 1dee7e03 shasx regext ,3 ,pdata 
+7928 98408400 iadd temp ,temp 
+7929 18007005 force 5 ,regext_index 
+792a 1de27e00 deposit regext 
+792b 18007006 force 6 ,regext_index 
+792c 9de2fe00 ixor regext ,pdata 
+792d 18007004 force 4 ,regext_index 
+792e 9de17e00 iand regext ,pdata 
+792f 18007006 force 6 ,regext_index 
+7930 9de2fe00 ixor regext ,pdata 
+7931 98408400 iadd temp ,temp 
+7932 18007007 force 7 ,regext_index 
+7933 18425e00 copy temp ,regext 
+7934 18007003 force 3 ,regext_index 
+7935 1de27e00 deposit regext 
+7936 9840de00 iadd temp ,regext 
+7937 18007000 force 0 ,regext_index 
+7938 1de27e00 deposit regext 
+7939 18007001 force 1 ,regext_index 
+793a 9de10400 iand regext ,temp 
+793b 9de1fe00 ior regext ,pdata 
+793c 18007002 force 2 ,regext_index 
+793d 9de17e00 iand regext ,pdata 
+793e 98418400 ior temp ,temp 
+793f 18007000 force 0 ,regext_index 
+7940 1dee7e02 shasx regext ,2 ,pdata 
+7941 9840fe00 iadd temp ,pdata 
+7942 18007007 force 7 ,regext_index 
+7943 9de0de00 iadd regext ,regext 
+7944 980efc00 regexrot 
+7945 c200791f loop sha_loop 
+7946 d8c006e6 arg memahbak ,contr 
+7947 18007000 force 0 ,regext_index 
+
+sha_1:
+7948 e8c20000 ifetch 4 ,contr 
+7949 9de0de00 iadd regext ,regext 
+794a 1f00f001 increase 1 ,regext_index 
+794b 2f01fe08 compare 8 ,regext_index ,0xff 
+794c 2420f948 nbranch sha_1 ,true 
+794d 202074bd branch disable_authrom 
+
+sha_result:
+794e d8a00a3e arg memresult ,contw 
+794f 18007007 force 7 ,regext_index 
+
+sha_regext_save:
+7950 1de27e00 deposit regext 
+7951 e0a20000 istore 4 ,contw 
+7952 1f00f1ff increase -1 ,regext_index 
+7953 20217950 branch sha_regext_save ,positive 
+7954 20600000 rtn 
+
+pad_xor:
+7955 d8a005e6 arg memdat ,contw 
+7956 18c08dfc increase -4 ,contr 
+7957 1f262210 sub loopcnt ,16 ,rega 
+
+pad_xor_0:
+7958 e8c20000 ifetch 4 ,contr 
+7959 9842fe00 ixor temp ,pdata 
+795a e0a20000 istore 4 ,contw 
+795b 18c08df8 increase -8 ,contr 
+795c c2007958 loop pad_xor_0 
+795d 1a227200 copy rega ,loopcnt 
+795e 18427e00 deposit temp 
+
+pad_xor_1:
+795f e0a20000 istore 4 ,contw 
+7960 c200795f loop pad_xor_1 
+7961 20600000 rtn 
+
+g_noninit_number_confirm:
+7962 20407967 call g_noninit0 
+7963 2040794e call sha_result 
+7964 2020798d branch g_common0 
+
+g_noninit:
+7965 20407967 call g_noninit0 
+7966 2020798d branch g_common0 
+
+g_noninit0:
+7967 d8c009de arg mem_sp_pubkey_remote_x_end ,contr 
+7968 d8a005e6 arg memdat ,contw 
+7969 18007206 force 6 ,loopcnt 
+796a 20407a71 call memcpy_dword_swap 
+796b d8c04642 arg mem_sp_pubkey_local_x_end ,contr 
+796c 18007206 force 6 ,loopcnt 
+796d 20407a71 call memcpy_dword_swap 
+796e d8c00a3e arg mem_sp_random_remote_end ,contr 
+796f 20407a70 call memcpy_dword_swap4 
+7970 2040790b call sha_init 
+7971 20407912 call sha 
+7972 d8c00a2e arg mem_sp_random_local_end ,contr 
+7973 d8a005e6 arg memdat ,contw 
+7974 20207984 branch g_common 
+
+g_init:
+7975 d8c04642 arg mem_sp_pubkey_local_x_end ,contr 
+7976 d8a005e6 arg memdat ,contw 
+7977 18007206 force 6 ,loopcnt 
+7978 20407a71 call memcpy_dword_swap 
+7979 d8c009de arg mem_sp_pubkey_remote_x_end ,contr 
+797a 18007206 force 6 ,loopcnt 
+797b 20407a71 call memcpy_dword_swap 
+797c d8c00a2e arg mem_sp_random_local_end ,contr 
+797d 20407a70 call memcpy_dword_swap4 
+797e 2040790b call sha_init 
+797f 20407912 call sha 
+7980 d8c00a3e arg mem_sp_random_remote_end ,contr 
+7981 d8a005e6 arg memdat ,contw 
+7982 20407984 call g_common 
+7983 2020798d branch g_common0 
+
+g_common:
+7984 20407a70 call memcpy_dword_swap4 
+7985 58800000 setarg 0x800000 
+7986 1fed7e00 lshift8 pdata ,pdata 
+7987 e0a20000 istore 4 ,contw 
+7988 18007205 force 5 ,loopcnt 
+7989 20407ec6 call memset0 
+798a 58000280 setarg 640 
+798b e0a20000 istore 4 ,contw 
+798c 20207912 branch sha 
+
+g_common0:
+798d 68020a3e fetch 4 ,memresult 
+798e da2003e8 arg 1000 ,rega 
+798f 9a26fc00 idiv rega 
+7990 20407f86 call wait_div_end 
+7991 18077e00 remainder pdata 
+7992 600209ba store 4 ,mem_gkey 
+7993 1807fe00 quotient pdata 
+7994 da2003e8 arg 1000 ,rega 
+7995 9a26fc00 idiv rega 
+7996 20407f86 call wait_div_end 
+7997 18077e00 remainder pdata 
+7998 da2003e8 arg 1000 ,rega 
+7999 9a2ffe00 imul32 rega ,pdata 
+799a 680a09ba fetcht 4 ,mem_gkey 
+799b 9840fe00 iadd temp ,pdata 
+799c 600209ba store 4 ,mem_gkey 
+799d 20600000 rtn 
+
+function_f1_no_key:
+799e 70466400 jam 0 ,mem_passkey_1bit 
+799f 202079a2 branch function_f1_common 
+
+function_f1:
+79a0 6800c662 fetch 1 ,mem_ssp_mode_flag 
+79a1 c081799e bne ssp_mode_passkey_entry_flag ,function_f1_no_key 
+
+function_f1_common:
+79a2 4776c03d bpatchx patch3d_5 ,mem_patch3d 
+79a3 58363636 setarg 0x363636 
+79a4 1fed0400 lshift8 pdata ,temp 
+79a5 18418436 or_into 0x36 ,temp 
+79a6 68010a7e fetch 2 ,mem_sp_prarm_stack 
+79a7 1fe20c00 copy pdata ,contr 
+79a8 18007204 force 4 ,loopcnt 
+79a9 20407955 call pad_xor 
+79aa 2040790b call sha_init 
+79ab 20407912 call sha 
+79ac 68010a80 fetch 2 ,mem_sp_prarm_stack + 2 
+79ad 1fe20c00 copy pdata ,contr 
+79ae d8a005e6 arg memdat ,contw 
+79af 18007206 force 6 ,loopcnt 
+79b0 20407a71 call memcpy_dword_swap 
+79b1 68010a82 fetch 2 ,mem_sp_prarm_stack + 4 
+79b2 1fe20c00 copy pdata ,contr 
+79b3 18007206 force 6 ,loopcnt 
+79b4 20407a71 call memcpy_dword_swap 
+79b5 58800000 setarg 0x800000 
+79b6 e0a18000 istore 3 ,contw 
+79b7 6800c664 fetch 1 ,mem_passkey_1bit 
+79b8 e0a08000 istore 1 ,contw 
+79b9 18007e00 force 0 ,pdata 
+79ba e0a40000 istore 8 ,contw 
+79bb 58000388 setarg 0x0388 
+79bc e0a20000 istore 4 ,contw 
+79bd 20407912 call sha 
+79be 2040794e call sha_result 
+79bf d8c00a3e arg memresult ,contr 
+79c0 d8a00706 arg memahsave ,contw 
+79c1 20407ebd call memcpy32 
+79c2 585c5c5c setarg 0x5c5c5c 
+79c3 1fed0400 lshift8 pdata ,temp 
+79c4 1841845c or_into 0x5c ,temp 
+79c5 68010a7e fetch 2 ,mem_sp_prarm_stack 
+79c6 1fe20c00 copy pdata ,contr 
+79c7 18007204 force 4 ,loopcnt 
+79c8 20407955 call pad_xor 
+79c9 2040790b call sha_init 
+79ca 20407912 call sha 
+79cb d8c00726 arg memahsave_end ,contr 
+79cc d8a005e6 arg memdat ,contw 
+79cd 18007208 force 8 ,loopcnt 
+79ce 20407a71 call memcpy_dword_swap 
+79cf 58800000 setarg 0x800000 
+79d0 1fed7e00 lshift8 pdata ,pdata 
+79d1 e0a20000 istore 4 ,contw 
+79d2 20407ec5 call bn_zero 
+79d3 58000300 setarg 0x0300 
+79d4 e0a20000 istore 4 ,contw 
+79d5 20407912 call sha 
+79d6 2020794e branch sha_result 
+
+function_f2:
+79d7 58363636 setarg 0x363636 
+79d8 1fed0400 lshift8 pdata ,temp 
+79d9 18418436 or_into 0x36 ,temp 
+79da d8c00a1e arg mem_sp_dhkey_end ,contr 
+79db 18007206 force 6 ,loopcnt 
+79dc 20407955 call pad_xor 
+79dd 2040790b call sha_init 
+79de 20407912 call sha 
+79df 68010a8a fetch 2 ,mem_sp_prarm_stack + 12 
+79e0 1fe20c00 copy pdata ,contr 
+79e1 d8a005e6 arg memdat ,contw 
+79e2 20407a70 call memcpy_dword_swap4 
+79e3 68010a8c fetch 2 ,mem_sp_prarm_stack + 14 
+79e4 1fe20c00 copy pdata ,contr 
+79e5 20407a70 call memcpy_dword_swap4 
+79e6 5862746c setarg 0x62746c 
+79e7 1fed7e00 lshift8 pdata ,pdata 
+79e8 1fe1fe6b or_into 0x6b ,pdata 
+79e9 e0a20000 istore 4 ,contw 
+79ea d8c00733 arg mem_addr_value_end ,contr 
+79eb 18007203 force 3 ,loopcnt 
+79ec 20407a71 call memcpy_dword_swap 
+79ed 58800000 setarg 0x800000 
+79ee 1fed7e00 lshift8 pdata ,pdata 
+79ef e0a20000 istore 4 ,contw 
+79f0 18007e00 force 0 ,pdata 
+79f1 e0a40000 istore 8 ,contw 
+79f2 58000380 setarg 0x0380 
+79f3 e0a20000 istore 4 ,contw 
+79f4 20407912 call sha 
+79f5 2040794e call sha_result 
+79f6 d8c00a3e arg memresult ,contr 
+79f7 d8a00706 arg memahsave ,contw 
+79f8 20407ebd call memcpy32 
+79f9 585c5c5c setarg 0x5c5c5c 
+79fa 1fed0400 lshift8 pdata ,temp 
+79fb 1841845c or_into 0x5c ,temp 
+79fc d8c00a1e arg mem_sp_dhkey_end ,contr 
+79fd 18007206 force 6 ,loopcnt 
+79fe 20407955 call pad_xor 
+79ff 2040790b call sha_init 
+7a00 20407912 call sha 
+7a01 d8c00726 arg memahsave_end ,contr 
+7a02 d8a005e6 arg memdat ,contw 
+7a03 18007208 force 8 ,loopcnt 
+7a04 20407a71 call memcpy_dword_swap 
+7a05 58800000 setarg 0x800000 
+7a06 1fed7e00 lshift8 pdata ,pdata 
+7a07 e0a20000 istore 4 ,contw 
+7a08 20407ec5 call bn_zero 
+7a09 58000300 setarg 0x0300 
+7a0a e0a20000 istore 4 ,contw 
+7a0b 20407912 call sha 
+7a0c 2020794e branch sha_result 
+
+function_f3a:
+7a0d 6800c662 fetch 1 ,mem_ssp_mode_flag 
+7a0e c0817a1e bne ssp_mode_passkey_entry_flag ,function_f3a_no_pin 
+
+function_f3a_common:
+7a0f 4777403d bpatchx patch3d_6 ,mem_patch3d 
+7a10 58363636 setarg 0x363636 
+7a11 1fed0400 lshift8 pdata ,temp 
+7a12 18418436 or_into 0x36 ,temp 
+7a13 d8c00a1e arg mem_sp_dhkey_end ,contr 
+7a14 18007206 force 6 ,loopcnt 
+7a15 20407955 call pad_xor 
+7a16 2040790b call sha_init 
+7a17 20407912 call sha 
+7a18 d8c00a3e arg mem_sp_random_remote_end ,contr 
+7a19 d8a005e6 arg memdat ,contw 
+7a1a 20407a70 call memcpy_dword_swap4 
+7a1b d8c00a2e arg mem_sp_random_local_end ,contr 
+7a1c 20407a70 call memcpy_dword_swap4 
+7a1d 20207a33 branch function_f3_common 
+
+function_f3a_no_pin:
+7a1e 58000000 setarg 0 
+7a1f 6002468a store 4 ,mem_pin 
+7a20 20207a0f branch function_f3a_common 
+
+function_f3b_no_pin:
+7a21 58000000 setarg 0 
+7a22 6002468a store 4 ,mem_pin 
+7a23 20207a26 branch function_f3b_common 
+
+function_f3b:
+7a24 6800c662 fetch 1 ,mem_ssp_mode_flag 
+7a25 c0817a21 bne ssp_mode_passkey_entry_flag ,function_f3b_no_pin 
+
+function_f3b_common:
+7a26 58363636 setarg 0x363636 
+7a27 1fed0400 lshift8 pdata ,temp 
+7a28 18418436 or_into 0x36 ,temp 
+7a29 d8c00a1e arg mem_sp_dhkey_end ,contr 
+7a2a 18007206 force 6 ,loopcnt 
+7a2b 20407955 call pad_xor 
+7a2c 2040790b call sha_init 
+7a2d 20407912 call sha 
+7a2e d8c00a2e arg mem_sp_random_local_end ,contr 
+7a2f d8a005e6 arg memdat ,contw 
+7a30 20407a70 call memcpy_dword_swap4 
+7a31 d8c00a3e arg mem_sp_random_remote_end ,contr 
+7a32 20407a70 call memcpy_dword_swap4 
+
+function_f3_common:
+7a33 58000000 setarg 0x0 
+7a34 e0a40000 istore 8 ,contw 
+7a35 e0a20000 istore 4 ,contw 
+7a36 6802468a fetch 4 ,mem_pin 
+7a37 e0a20000 istore 4 ,contw 
+7a38 18a20400 copy contw ,temp 
+7a39 70072680 jam 0x80 ,mem_addr_padding 
+7a3a 18420a00 copy temp ,contw 
+7a3b d8c00736 arg mem_addr_iocap_end ,contr 
+7a3c 20407a70 call memcpy_dword_swap4 
+7a3d 20407912 call sha 
+7a3e d8a005e6 arg memdat ,contw 
+7a3f 18007207 force 7 ,loopcnt 
+7a40 20407ec6 call memset0 
+7a41 e0a20000 istore 4 ,contw 
+7a42 580003f8 setarg 0x03F8 
+7a43 e0a20000 istore 4 ,contw 
+7a44 20407912 call sha 
+7a45 2040794e call sha_result 
+7a46 d8c00a3e arg memresult ,contr 
+7a47 d8a00706 arg memahsave ,contw 
+7a48 20407ebd call memcpy32 
+7a49 585c5c5c setarg 0x5c5c5c 
+7a4a 1fed0400 lshift8 pdata ,temp 
+7a4b 1841845c or_into 0x5c ,temp 
+7a4c d8c00a1e arg mem_sp_dhkey_end ,contr 
+7a4d 18007206 force 6 ,loopcnt 
+7a4e 20407955 call pad_xor 
+7a4f 2040790b call sha_init 
+7a50 20407912 call sha 
+7a51 d8c00726 arg memahsave_end ,contr 
+7a52 d8a005e6 arg memdat ,contw 
+7a53 18007208 force 8 ,loopcnt 
+7a54 20407a71 call memcpy_dword_swap 
+7a55 58800000 setarg 0x800000 
+7a56 1fed7e00 lshift8 pdata ,pdata 
+7a57 e0a20000 istore 4 ,contw 
+7a58 20407ec5 call bn_zero 
+7a59 58000300 setarg 0x0300 
+7a5a e0a20000 istore 4 ,contw 
+7a5b 20407912 call sha 
+7a5c 2020794e branch sha_result 
+
+eckp_calc_init:
+7a5d 7005e3c0 jam 192 ,mem_ec_loopc 
+
+eckp_calc_init_1:
+7a5e 680085e3 fetch 1 ,mem_ec_loopc 
+7a5f 207a0000 rtn blank 
+7a60 1fe0ffff increase -1 ,pdata 
+7a61 600085e3 store 1 ,mem_ec_loopc 
+7a62 d8c006be arg mem_k ,contr 
+7a63 204076ec call bn_testbit 
+7a64 2020fa5e branch eckp_calc_init_1 ,true 
+7a65 d8c005e6 arg mem_ax ,contr 
+7a66 d8a00676 arg mem_cx ,contw 
+7a67 202076f2 branch ec_copy 
+
+eckp_calc:
+7a68 20407803 call ecdbl 
+7a69 680085e3 fetch 1 ,mem_ec_loopc 
+7a6a 1fe0ffff increase -1 ,pdata 
+7a6b 600085e3 store 1 ,mem_ec_loopc 
+7a6c d8c006be arg mem_k ,contr 
+7a6d 204076ec call bn_testbit 
+7a6e 20608000 rtn true 
+7a6f 20207854 branch ecadd 
+
+memcpy_dword_swap4:
+7a70 18007204 force 4 ,loopcnt 
+
+memcpy_dword_swap:
+7a71 18c08dfc increase -4 ,contr 
+
+memcpy_dword_swap_loop:
+7a72 e8c20000 ifetch 4 ,contr 
+7a73 e0a20000 istore 4 ,contw 
+7a74 18c08df8 increase -8 ,contr 
+7a75 c2007a72 loop memcpy_dword_swap_loop 
+7a76 20600000 rtn 
+
+sp_initialize_256:
+7a77 4777c03d bpatchx patch3d_7 ,mem_patch3d 
+7a78 6800c4be fetch 1 ,mem_le_secure_connect_enable 
+7a79 203a5af0 branch le_secure_connection_disable ,blank 
+7a7a 20405aec call le_secure_connection_enable 
+7a7b 20407583 call sp_clear_flags 
+7a7c 20207a7d branch sp_pubkey_calc_256 
+
+sp_pubkey_calc_256:
+7a7d 6800c4c3 fetch 1 ,mem_le_sc_local_key_invalid 
+7a7e c1800000 rtnne sp_key_invalid 
+7a7f 6800c4c0 fetch 1 ,mem_le_sc_calc 
+7a80 c1800000 rtnne sp_calc_standby 
+7a81 d8a045b2 arg mem_le_private_key_256 ,contw 
+7a82 18000e0f force 15 ,queue 
+7a83 204076a2 call random_generator 
+7a84 180a7e00 random pdata 
+7a85 1fe37e00 rshift pdata ,pdata 
+7a86 e0a10000 istore 2 ,contw 
+7a87 d8a00766 arg mem_k_256 ,contw 
+7a88 d8c045b2 arg mem_le_private_key_256 ,contr 
+7a89 20407ebd call memcpy32 
+7a8a d8a00646 arg mem_ax_256 ,contw 
+7a8b d8c0095e arg mem_gx_256 ,contr 
+7a8c 20407eb3 call memcpy64 
+7a8d d8a00686 arg mem_az_256 ,contw 
+7a8e 20407ed0 call clear_mem_256 
+7a8f 70068601 jam 1 ,mem_az_256 
+7a90 20407ac7 call eckp_calc_init_256 
+7a91 7044c003 jam sp_calc_pubkey_256 ,mem_le_sc_calc 
+7a92 20600000 rtn 
+
+sp_pubkey_generated_256:
+7a93 d8a045d2 arg mem_le_pubkey_local_x_256 ,contw 
+7a94 d8c006a6 arg mem_bx_256 ,contr 
+7a95 20407eb3 call memcpy64 
+7a96 7044c303 jam sp_key_valid_256 ,mem_le_sc_local_key_invalid 
+7a97 7044c000 jam sp_calc_standby ,mem_le_sc_calc 
+7a98 20600000 rtn 
+
+sp_dhkey_calc_256:
+7a99 680089b9 fetch 1 ,mem_sp_dhkey_invalid 
+7a9a c1800000 rtnne sp_key_invalid 
+7a9b 6800c4c0 fetch 1 ,mem_le_sc_calc 
+7a9c c1800000 rtnne sp_calc_standby 
+7a9d d8a00766 arg mem_k_256 ,contw 
+7a9e d8c045b2 arg mem_le_private_key_256 ,contr 
+7a9f 20407ebd call memcpy32 
+7aa0 d8a00646 arg mem_ax_256 ,contw 
+7aa1 d8c009be arg mem_le_pubkey_remote_x_256 ,contr 
+7aa2 20407eb3 call memcpy64 
+7aa3 d8a00686 arg mem_az_256 ,contw 
+7aa4 20407ed0 call clear_mem_256 
+7aa5 70068601 jam 1 ,mem_az_256 
+7aa6 20407ac7 call eckp_calc_init_256 
+7aa7 7044c004 jam sp_calc_dhkey_256 ,mem_le_sc_calc 
+7aa8 20600000 rtn 
+
+sp_dhkey_generated_256:
+7aa9 d8a009fe arg mem_le_dhkey_256 ,contw 
+7aaa d8c006a6 arg mem_bx_256 ,contr 
+7aab 20407ebd call memcpy32 
+7aac 7009b903 jam sp_key_valid_256 ,mem_sp_dhkey_invalid 
+7aad 7044c000 jam sp_calc_standby ,mem_le_sc_calc 
+7aae 20600000 rtn 
+
+sp_calc_sequence_256:
+7aaf 6800c4be fetch 1 ,mem_le_secure_connect_enable 
+7ab0 207a0000 rtn blank 
+7ab1 6800c4c0 fetch 1 ,mem_le_sc_calc 
+7ab2 207a0000 rtn blank 
+7ab3 1fe0fe80 increase 0x80 ,pdata 
+7ab4 6000c4c0 store 1 ,mem_le_sc_calc 
+7ab5 c3838000 rtnbit1 7 
+7ab6 680105e3 fetch 2 ,mem_ec_loopc 
+7ab7 203a7ab9 branch sp_calc_sequence_done_256 ,blank 
+7ab8 20207abf branch eckp_calc_256 
+
+sp_calc_sequence_done_256:
+7ab9 4778403e bpatchx patch3e_0 ,mem_patch3e 
+7aba 20407ad4 call ecunmapz_256 
+7abb 6800c4c0 fetch 1 ,mem_le_sc_calc 
+7abc c001fa93 beq sp_calc_pubkey_256 ,sp_pubkey_generated_256 
+7abd c0027aa9 beq sp_calc_dhkey_256 ,sp_dhkey_generated_256 
+7abe 20600000 rtn 
+
+eckp_calc_256:
+7abf 20407ae6 call ecdbl_256 
+7ac0 680105e3 fetch 2 ,mem_ec_loopc 
+7ac1 1fe0ffff increase -1 ,pdata 
+7ac2 600105e3 store 2 ,mem_ec_loopc 
+7ac3 d8c00766 arg mem_k_256 ,contr 
+7ac4 204076ec call bn_testbit 
+7ac5 20608000 rtn true 
+7ac6 20207b37 branch ecadd_256 
+
+eckp_calc_init_256:
+7ac7 4778c03e bpatchx patch3e_1 ,mem_patch3e 
+7ac8 58000100 setarg 256 ,pdata 
+7ac9 600105e3 store 2 ,mem_ec_loopc 
+
+eckp_calc_init_256_1:
+7aca 680105e3 fetch 2 ,mem_ec_loopc 
+7acb 207a0000 rtn blank 
+7acc 1fe0ffff increase -1 ,pdata 
+7acd 600105e3 store 2 ,mem_ec_loopc 
+7ace d8c00766 arg mem_k_256 ,contr 
+7acf 204076ec call bn_testbit 
+7ad0 2020faca branch eckp_calc_init_256_1 ,true 
+7ad1 d8c00646 arg mem_ax_256 ,contr 
+7ad2 d8a00706 arg mem_cx_256 ,contw 
+7ad3 20207eb2 branch memcpy96 
+
+ecunmapz_256:
+7ad4 da200746 arg mem_cz_256 ,rega 
+7ad5 d8a00846 arg mem_t3_256 ,contw 
+7ad6 20407ba3 call bn_invmod_256 
+7ad7 da200846 arg mem_t3_256 ,rega 
+7ad8 d8a007e6 arg mem_t1_256 ,contw 
+7ad9 20407c79 call bn_sqrmod_256 
+7ada da200706 arg mem_cx_256 ,rega 
+7adb da4007e6 arg mem_t1_256 ,regb 
+7adc d8a006a6 arg mem_bx_256 ,contw 
+7add 20407be1 call bn_mulmod_256 
+7ade da200846 arg mem_t3_256 ,rega 
+7adf da4007e6 arg mem_t1_256 ,regb 
+7ae0 d8a00826 arg mem_t2_256 ,contw 
+7ae1 20407be1 call bn_mulmod_256 
+7ae2 da200726 arg mem_cy_256 ,rega 
+7ae3 da400826 arg mem_t2_256 ,regb 
+7ae4 d8a006c6 arg mem_by_256 ,contw 
+7ae5 20207be1 branch bn_mulmod_256 
+
+ecdbl_256:
+7ae6 da200746 arg mem_cz_256 ,rega 
+7ae7 d8a00826 arg mem_t2_256 ,contw 
+7ae8 20407c79 call bn_sqrmod_256 
+7ae9 da200826 arg mem_t2_256 ,rega 
+7aea d8a00846 arg mem_t3_256 ,contw 
+7aeb 20407c79 call bn_sqrmod_256 
+7aec da20093e arg mem_a_256 ,rega 
+7aed da400846 arg mem_t3_256 ,regb 
+7aee d8a00846 arg mem_t3_256 ,contw 
+7aef 20407be1 call bn_mulmod_256 
+7af0 da200706 arg mem_cx_256 ,rega 
+7af1 d8a00826 arg mem_t2_256 ,contw 
+7af2 20407c79 call bn_sqrmod_256 
+7af3 d8c00826 arg mem_t2_256 ,contr 
+7af4 d8a007e6 arg mem_t1_256 ,contw 
+7af5 20407ebd call memcpy32 
+7af6 da2007e6 arg mem_t1_256 ,rega 
+7af7 20407c80 call bn_lshiftmod_256 
+7af8 da200826 arg mem_t2_256 ,rega 
+7af9 da4007e6 arg mem_t1_256 ,regb 
+7afa d8a00826 arg mem_t2_256 ,contw 
+7afb 20407c7d call bn_addmod_256 
+7afc da200826 arg mem_t2_256 ,rega 
+7afd da400846 arg mem_t3_256 ,regb 
+7afe d8a00826 arg mem_t2_256 ,contw 
+7aff 20407c7d call bn_addmod_256 
+7b00 d8c00706 arg mem_cx_256 ,contr 
+7b01 d8a007e6 arg mem_t1_256 ,contw 
+7b02 20407ebd call memcpy32 
+7b03 da200726 arg mem_cy_256 ,rega 
+7b04 d8a00846 arg mem_t3_256 ,contw 
+7b05 20407c79 call bn_sqrmod_256 
+7b06 da2007e6 arg mem_t1_256 ,rega 
+7b07 20407c80 call bn_lshiftmod_256 
+7b08 da2007e6 arg mem_t1_256 ,rega 
+7b09 20407c80 call bn_lshiftmod_256 
+7b0a da2007e6 arg mem_t1_256 ,rega 
+7b0b da400846 arg mem_t3_256 ,regb 
+7b0c d8a007e6 arg mem_t1_256 ,contw 
+7b0d 20407be1 call bn_mulmod_256 
+7b0e da200846 arg mem_t3_256 ,rega 
+7b0f d8a00806 arg mem_t0_256 ,contw 
+7b10 20407c79 call bn_sqrmod_256 
+7b11 da200806 arg mem_t0_256 ,rega 
+7b12 20407c80 call bn_lshiftmod_256 
+7b13 da200806 arg mem_t0_256 ,rega 
+7b14 20407c80 call bn_lshiftmod_256 
+7b15 da200806 arg mem_t0_256 ,rega 
+7b16 20407c80 call bn_lshiftmod_256 
+7b17 d8c00726 arg mem_cy_256 ,contr 
+7b18 d8a00846 arg mem_t3_256 ,contw 
+7b19 20407ebd call memcpy32 
+7b1a da200846 arg mem_t3_256 ,rega 
+7b1b 20407c80 call bn_lshiftmod_256 
+7b1c da200846 arg mem_t3_256 ,rega 
+7b1d da400746 arg mem_cz_256 ,regb 
+7b1e d8a00746 arg mem_cz_256 ,contw 
+7b1f 20407be1 call bn_mulmod_256 
+7b20 da200826 arg mem_t2_256 ,rega 
+7b21 d8a00846 arg mem_t3_256 ,contw 
+7b22 20407c79 call bn_sqrmod_256 
+7b23 da200846 arg mem_t3_256 ,rega 
+7b24 da4007e6 arg mem_t1_256 ,regb 
+7b25 d8a00846 arg mem_t3_256 ,contw 
+7b26 20407c96 call bn_submod_256 
+7b27 da200846 arg mem_t3_256 ,rega 
+7b28 da4007e6 arg mem_t1_256 ,regb 
+7b29 d8a00706 arg mem_cx_256 ,contw 
+7b2a 20407c96 call bn_submod_256 
+7b2b da2007e6 arg mem_t1_256 ,rega 
+7b2c da400706 arg mem_cx_256 ,regb 
+7b2d d8a00846 arg mem_t3_256 ,contw 
+7b2e 20407c96 call bn_submod_256 
+7b2f da200846 arg mem_t3_256 ,rega 
+7b30 da400826 arg mem_t2_256 ,regb 
+7b31 d8a00846 arg mem_t3_256 ,contw 
+7b32 20407be1 call bn_mulmod_256 
+7b33 da200846 arg mem_t3_256 ,rega 
+7b34 da400806 arg mem_t0_256 ,regb 
+7b35 d8a00726 arg mem_cy_256 ,contw 
+7b36 20207c96 branch bn_submod_256 
+
+ecadd_256:
+7b37 da200686 arg mem_az_256 ,rega 
+7b38 d8a00866 arg mem_t7_256 ,contw 
+7b39 20407c79 call bn_sqrmod_256 
+7b3a da200706 arg mem_cx_256 ,rega 
+7b3b da400866 arg mem_t7_256 ,regb 
+7b3c d8a00806 arg mem_t0_256 ,contw 
+7b3d 20407be1 call bn_mulmod_256 
+7b3e da200686 arg mem_az_256 ,rega 
+7b3f da400866 arg mem_t7_256 ,regb 
+7b40 d8a00866 arg mem_t7_256 ,contw 
+7b41 20407be1 call bn_mulmod_256 
+7b42 da200726 arg mem_cy_256 ,rega 
+7b43 da400866 arg mem_t7_256 ,regb 
+7b44 d8a007e6 arg mem_t1_256 ,contw 
+7b45 20407be1 call bn_mulmod_256 
+7b46 da200746 arg mem_cz_256 ,rega 
+7b47 d8a00866 arg mem_t7_256 ,contw 
+7b48 20407c79 call bn_sqrmod_256 
+7b49 da200646 arg mem_ax_256 ,rega 
+7b4a da400866 arg mem_t7_256 ,regb 
+7b4b d8a00826 arg mem_t2_256 ,contw 
+7b4c 20407be1 call bn_mulmod_256 
+7b4d da200746 arg mem_cz_256 ,rega 
+7b4e da400866 arg mem_t7_256 ,regb 
+7b4f d8a00866 arg mem_t7_256 ,contw 
+7b50 20407be1 call bn_mulmod_256 
+7b51 da200666 arg mem_ay_256 ,rega 
+7b52 da400866 arg mem_t7_256 ,regb 
+7b53 d8a00846 arg mem_t3_256 ,contw 
+7b54 20407be1 call bn_mulmod_256 
+7b55 da400806 arg mem_t0_256 ,regb 
+7b56 da200826 arg mem_t2_256 ,rega 
+7b57 d8a00866 arg mem_t7_256 ,contw 
+7b58 20407c96 call bn_submod_256 
+7b59 da200806 arg mem_t0_256 ,rega 
+7b5a da400826 arg mem_t2_256 ,regb 
+7b5b d8a00806 arg mem_t0_256 ,contw 
+7b5c 20407c7d call bn_addmod_256 
+7b5d da4007e6 arg mem_t1_256 ,regb 
+7b5e da200846 arg mem_t3_256 ,rega 
+7b5f d8a00826 arg mem_t2_256 ,contw 
+7b60 20407c96 call bn_submod_256 
+7b61 da2007e6 arg mem_t1_256 ,rega 
+7b62 da400846 arg mem_t3_256 ,regb 
+7b63 d8a007e6 arg mem_t1_256 ,contw 
+7b64 20407c7d call bn_addmod_256 
+7b65 da2007e6 arg mem_t1_256 ,rega 
+7b66 da400866 arg mem_t7_256 ,regb 
+7b67 d8a007e6 arg mem_t1_256 ,contw 
+7b68 20407be1 call bn_mulmod_256 
+7b69 da200746 arg mem_cz_256 ,rega 
+7b6a da400686 arg mem_az_256 ,regb 
+7b6b d8a00846 arg mem_t3_256 ,contw 
+7b6c 20407be1 call bn_mulmod_256 
+7b6d da200846 arg mem_t3_256 ,rega 
+7b6e da400866 arg mem_t7_256 ,regb 
+7b6f d8a00746 arg mem_cz_256 ,contw 
+7b70 20407be1 call bn_mulmod_256 
+7b71 da200866 arg mem_t7_256 ,rega 
+7b72 d8a00866 arg mem_t7_256 ,contw 
+7b73 20407c79 call bn_sqrmod_256 
+7b74 da200866 arg mem_t7_256 ,rega 
+7b75 da400806 arg mem_t0_256 ,regb 
+7b76 d8a00846 arg mem_t3_256 ,contw 
+7b77 20407be1 call bn_mulmod_256 
+7b78 da200866 arg mem_t7_256 ,rega 
+7b79 da4007e6 arg mem_t1_256 ,regb 
+7b7a d8a007e6 arg mem_t1_256 ,contw 
+7b7b 20407be1 call bn_mulmod_256 
+7b7c da200826 arg mem_t2_256 ,rega 
+7b7d d8a00706 arg mem_cx_256 ,contw 
+7b7e 20407c79 call bn_sqrmod_256 
+7b7f da200706 arg mem_cx_256 ,rega 
+7b80 da400846 arg mem_t3_256 ,regb 
+7b81 d8a00706 arg mem_cx_256 ,contw 
+7b82 20407c96 call bn_submod_256 
+7b83 d8c00706 arg mem_cx_256 ,contr 
+7b84 d8a00866 arg mem_t7_256 ,contw 
+7b85 20407ebd call memcpy32 
+7b86 da200866 arg mem_t7_256 ,rega 
+7b87 20407c80 call bn_lshiftmod_256 
+7b88 da200846 arg mem_t3_256 ,rega 
+7b89 da400866 arg mem_t7_256 ,regb 
+7b8a d8a00846 arg mem_t3_256 ,contw 
+7b8b 20407c96 call bn_submod_256 
+7b8c da200846 arg mem_t3_256 ,rega 
+7b8d da400826 arg mem_t2_256 ,regb 
+7b8e d8a00826 arg mem_t2_256 ,contw 
+7b8f 20407be1 call bn_mulmod_256 
+7b90 da200826 arg mem_t2_256 ,rega 
+7b91 da4007e6 arg mem_t1_256 ,regb 
+7b92 d8a00726 arg mem_cy_256 ,contw 
+7b93 20407c96 call bn_submod_256 
+7b94 da200726 arg mem_cy_256 ,rega 
+7b95 da40091e arg mem_p_256 ,regb 
+7b96 d8a00726 arg mem_cy_256 ,contw 
+7b97 18002600 force 0 ,regc 
+7b98 68008726 fetch 1 ,mem_cy_256 
+7b99 2feffe00 isolate1 0 ,pdata 
+7b9a 2040fc7b call bn_add_256 ,true 
+7b9b 1a626000 copy regc ,alarm 
+7b9c da200726 arg mem_cy_256 ,rega 
+7b9d 20407cab call bn_rshift_256 
+7b9e 68008745 fetch 1 ,mem_cy5_256 
+7b9f 2e0ffe00 isolate1 0 ,alarm 
+7ba0 7920fe07 setflag true ,7 ,pdata 
+7ba1 60008745 store 1 ,mem_cy5_256 
+7ba2 20600000 rtn 
+
+bn_invmod_256:
+7ba3 18a21600 copy contw ,timeup 
+7ba4 d8a00806 arg mem_tmp0_256 ,contw 
+7ba5 20407ed0 call clear_mem_256 
+7ba6 18007e00 force 0 ,pdata 
+7ba7 60020826 store 4 ,mem_t2_256 
+7ba8 70080601 jam 1 ,mem_tmp0_256 
+7ba9 d8a00786 arg mem_tmp1_256 ,contw 
+7baa 20407ed2 call clear_mem_512 
+7bab d8c0091e arg mem_p_256 ,contr 
+7bac d8a007c6 arg mem_tmp2_256 ,contw 
+7bad 20407ebd call memcpy32 
+7bae 1a220c00 copy rega ,contr 
+7baf d8a007e6 arg mem_tmp3_256 ,contw 
+7bb0 20407ebd call memcpy32 
+
+bn_invmod_256_2:
+7bb1 d8c007e6 arg mem_tmp3_256 ,contr 
+7bb2 20407cb5 call bn_eq_zero_256 
+7bb3 203a7bda branch bn_invmod_256_0 ,blank 
+7bb4 da2007e6 arg mem_tmp3_256 ,rega 
+7bb5 da400806 arg mem_tmp0_256 ,regb 
+7bb6 20407cb8 call bn_rshifteven_256 
+7bb7 da2007c6 arg mem_tmp2_256 ,rega 
+7bb8 da400786 arg mem_tmp1_256 ,regb 
+7bb9 20407cb8 call bn_rshifteven_256 
+7bba da2007e6 arg mem_tmp3_256 ,rega 
+7bbb da4007c6 arg mem_tmp2_256 ,regb 
+7bbc 20407cb1 call bn_bigeq_256 
+7bbd 20217bcc branch bn_invmod_256_1 ,positive 
+7bbe da2007c6 arg mem_tmp2_256 ,rega 
+7bbf da4007e6 arg mem_tmp3_256 ,regb 
+7bc0 1a220a00 copy rega ,contw 
+7bc1 20407ca9 call bn_sub_256 
+7bc2 da200806 arg mem_tmp0_256 ,rega 
+7bc3 da400786 arg mem_tmp1_256 ,regb 
+7bc4 1a420a00 copy regb ,contw 
+7bc5 20407c7b call bn_add_256 
+7bc6 ea208000 ifetch 1 ,rega 
+7bc7 9a60a600 iadd regc ,regc 
+7bc8 ea408000 ifetch 1 ,regb 
+7bc9 9a60fe00 iadd regc ,pdata 
+7bca e2408000 istore 1 ,regb 
+7bcb 20207bb1 branch bn_invmod_256_2 
+
+bn_invmod_256_1:
+7bcc da2007e6 arg mem_tmp3_256 ,rega 
+7bcd da4007c6 arg mem_tmp2_256 ,regb 
+7bce 1a220a00 copy rega ,contw 
+7bcf 20407ca9 call bn_sub_256 
+7bd0 da200786 arg mem_tmp1_256 ,rega 
+7bd1 da400806 arg mem_tmp0_256 ,regb 
+7bd2 1a420a00 copy regb ,contw 
+7bd3 20407c7b call bn_add_256 
+7bd4 ea208000 ifetch 1 ,rega 
+7bd5 9a60a600 iadd regc ,regc 
+7bd6 ea408000 ifetch 1 ,regb 
+7bd7 9a60fe00 iadd regc ,pdata 
+7bd8 e2408000 istore 1 ,regb 
+7bd9 20207bb1 branch bn_invmod_256_2 
+
+bn_invmod_256_0:
+7bda da200786 arg mem_tmp1_256 ,rega 
+7bdb 19620a00 copy timeup ,contw 
+7bdc 20407c0a call bn_p256mod 
+7bdd da20091e arg mem_p_256 ,rega 
+7bde 19622400 copy timeup ,regb 
+7bdf 19620a00 copy timeup ,contw 
+7be0 20207c96 branch bn_submod_256 
+
+bn_mulmod_256:
+7be1 18a21600 copy contw ,timeup 
+7be2 18007000 force 0 ,regext_index 
+7be3 d8a00786 arg mem_tmp1_256 ,contw 
+7be4 20407ed2 call clear_mem_512 
+7be5 d8a00ad2 arg mem_regext ,contw 
+7be6 20407ed2 call clear_mem_512 
+7be7 1a220c00 copy rega ,contr 
+7be8 700ad200 jam 0 ,mem_regext 
+7be9 58000000 setarg 0 
+7bea 20407c73 call bn_load_mem 
+7beb 1a420c00 copy regb ,contr 
+7bec 20407c77 call bn_load_256 
+7bed 18000e00 force 0 ,queue 
+7bee d8a00786 arg mem_tmp1_256 ,contw 
+
+bn_mulmod_256_1:
+7bef d8400ad2 arg mem_regext ,temp 
+7bf0 18e22400 copy queue ,regb 
+7bf1 1a4bfe00 lshift2 regb ,pdata 
+7bf2 9840a400 iadd temp ,regb 
+7bf3 18000400 force 0 ,temp 
+7bf4 18002600 force 0 ,regc 
+
+bn_mulmod_256_0:
+7bf5 e8a20000 ifetch 4 ,contw 
+7bf6 98002200 iforce rega 
+7bf7 ea420000 ifetch 4 ,regb 
+7bf8 1a627000 copy regc ,regext_index 
+7bf9 9deffe00 imul32 regext ,pdata 
+7bfa 9a20fe00 iadd rega ,pdata 
+7bfb 9840fe00 iadd temp ,pdata 
+7bfc e0a20000 istore 4 ,contw 
+7bfd 1fef0400 rshift32 pdata ,temp 
+7bfe 1a60a601 increase 1 ,regc 
+7bff 2a61fe08 compare 8 ,regc ,0xff 
+7c00 2420fbf5 nbranch bn_mulmod_256_0 ,true 
+7c01 18427e00 deposit temp 
+7c02 e0a20000 istore 4 ,contw 
+7c03 18a08be0 increase -32 ,contw 
+7c04 18e08e01 increase 1 ,queue 
+7c05 28e1fe08 compare 8 ,queue ,0xff 
+7c06 2420fbef nbranch bn_mulmod_256_1 ,true 
+7c07 da200786 arg mem_tmp1_256 ,rega 
+7c08 19620a00 copy timeup ,contw 
+7c09 20207c0a branch bn_p256mod 
+
+bn_p256mod:
+7c0a 4779403e bpatchx patch3e_2 ,mem_patch3e 
+7c0b 18a21600 copy contw ,timeup 
+7c0c 1a226000 copy rega ,alarm 
+7c0d da4007c6 arg mem_tmp2_256 ,regb 
+7c0e 1a420a00 copy regb ,contw 
+7c0f 20407ecd call memset0_4 
+7c10 e0a40000 istore 8 ,contw 
+7c11 1a208c2c add rega ,44 ,contr 
+7c12 20407eb9 call memcpy8 
+7c13 20407eb5 call memcpy12 
+7c14 1a422200 copy regb ,rega 
+7c15 20407c80 call bn_lshiftmod_256 
+7c16 da4007c6 arg mem_tmp2_256 ,regb 
+7c17 1e022200 copy alarm ,rega 
+7c18 19620a00 copy timeup ,contw 
+7c19 20407c7d call bn_addmod_256 
+7c1a da4007c6 arg mem_tmp2_256 ,regb 
+7c1b 1a420a00 copy regb ,contw 
+7c1c 20407ecd call memset0_4 
+7c1d e0a40000 istore 8 ,contw 
+7c1e 1e008c30 add alarm ,48 ,contr 
+7c1f 20407ebf call memcpy16 
+7c20 20407ecd call memset0_4 
+7c21 1a422200 copy regb ,rega 
+7c22 20407c80 call bn_lshiftmod_256 
+7c23 da4007c6 arg mem_tmp2_256 ,regb 
+7c24 19622200 copy timeup ,rega 
+7c25 1a220a00 copy rega ,contw 
+7c26 20407c7d call bn_addmod_256 
+7c27 da4007c6 arg mem_tmp2_256 ,regb 
+7c28 1a420a00 copy regb ,contw 
+7c29 1e008c20 add alarm ,32 ,contr 
+7c2a 20407eb5 call memcpy12 
+7c2b 20407ecd call memset0_4 
+7c2c e0a40000 istore 8 ,contw 
+7c2d 1e008c38 add alarm ,56 ,contr 
+7c2e 20407eb9 call memcpy8 
+7c2f 19622200 copy timeup ,rega 
+7c30 1a220a00 copy rega ,contw 
+7c31 20407c7d call bn_addmod_256 
+7c32 da4007c6 arg mem_tmp2_256 ,regb 
+7c33 1a420a00 copy regb ,contw 
+7c34 1e008c24 add alarm ,36 ,contr 
+7c35 20407eb5 call memcpy12 
+7c36 1e008c34 add alarm ,52 ,contr 
+7c37 20407eb5 call memcpy12 
+7c38 1e008c34 add alarm ,52 ,contr 
+7c39 20407eb6 call memcpy4 
+7c3a 1e008c20 add alarm ,32 ,contr 
+7c3b 20407eb6 call memcpy4 
+7c3c 19622200 copy timeup ,rega 
+7c3d 1a220a00 copy rega ,contw 
+7c3e 20407c7d call bn_addmod_256 
+7c3f da4007c6 arg mem_tmp2_256 ,regb 
+7c40 1a420a00 copy regb ,contw 
+7c41 1e008c2c add alarm ,44 ,contr 
+7c42 20407eb5 call memcpy12 
+7c43 20407ecd call memset0_4 
+7c44 e0a40000 istore 8 ,contw 
+7c45 1e008c20 add alarm ,32 ,contr 
+7c46 20407eb6 call memcpy4 
+7c47 1e008c28 add alarm ,40 ,contr 
+7c48 20407eb6 call memcpy4 
+7c49 19622200 copy timeup ,rega 
+7c4a 1a220a00 copy rega ,contw 
+7c4b 20407c96 call bn_submod_256 
+7c4c da4007c6 arg mem_tmp2_256 ,regb 
+7c4d 1a420a00 copy regb ,contw 
+7c4e 1e008c30 add alarm ,48 ,contr 
+7c4f 20407eb9 call memcpy8 
+7c50 20407eb9 call memcpy8 
+7c51 18007e00 force 0 ,pdata 
+7c52 e0a40000 istore 8 ,contw 
+7c53 1e008c24 add alarm ,36 ,contr 
+7c54 20407eb6 call memcpy4 
+7c55 1e008c2c add alarm ,44 ,contr 
+7c56 20407eb6 call memcpy4 
+7c57 19622200 copy timeup ,rega 
+7c58 1a220a00 copy rega ,contw 
+7c59 20407c96 call bn_submod_256 
+7c5a da4007c6 arg mem_tmp2_256 ,regb 
+7c5b 1a420a00 copy regb ,contw 
+7c5c 1e008c34 add alarm ,52 ,contr 
+7c5d 20407eb5 call memcpy12 
+7c5e 1e008c20 add alarm ,32 ,contr 
+7c5f 20407eb5 call memcpy12 
+7c60 20407ecd call memset0_4 
+7c61 1e008c30 add alarm ,48 ,contr 
+7c62 20407eb6 call memcpy4 
+7c63 19622200 copy timeup ,rega 
+7c64 1a220a00 copy rega ,contw 
+7c65 20407c96 call bn_submod_256 
+7c66 da4007c6 arg mem_tmp2_256 ,regb 
+7c67 1a420a00 copy regb ,contw 
+7c68 1e008c38 add alarm ,56 ,contr 
+7c69 20407eb9 call memcpy8 
+7c6a 20407ecd call memset0_4 
+7c6b 1e008c24 add alarm ,36 ,contr 
+7c6c 20407eb5 call memcpy12 
+7c6d 20407ecd call memset0_4 
+7c6e 1e008c34 add alarm ,52 ,contr 
+7c6f 20407eb6 call memcpy4 
+7c70 19622200 copy timeup ,rega 
+7c71 1a220a00 copy rega ,contw 
+7c72 20207c96 branch bn_submod_256 
+
+bn_load_mem:
+7c73 18007220 force 32 ,loopcnt 
+7c74 d8a00ad2 arg mem_regext ,contw 
+7c75 98a08a00 iadd contw ,contw 
+7c76 20207f01 branch memcpy 
+
+bn_load_256:
+7c77 18007208 force 8 ,loopcnt 
+7c78 20207781 branch bn_load_0 
+
+bn_sqrmod_256:
+7c79 1a222400 copy rega ,regb 
+7c7a 20207be1 branch bn_mulmod_256 
+
+bn_add_256:
+7c7b 18007208 force 8 ,loopcnt 
+7c7c 20207712 branch bn_add + 1 
+
+bn_addmod_256:
+7c7d 20407c7b call bn_add_256 
+7c7e 18a22200 copy contw ,rega 
+7c7f 20207c81 branch bn_lshiftmod_ismod_256 
+
+bn_lshiftmod_256:
+7c80 20407cae call bn_lshift_256 
+
+bn_lshiftmod_ismod_256:
+7c81 2a6ffe00 isolate1 0 ,regc 
+7c82 2020fc8a branch bn_lshiftmod_p_256 ,true 
+7c83 da40091e arg mem_p_256 ,regb 
+7c84 1a222600 copy rega ,regc 
+7c85 1a20a3e0 increase -32 ,rega 
+7c86 20407cb1 call bn_bigeq_256 
+7c87 24610000 nrtn positive 
+7c88 1a622200 copy regc ,rega 
+7c89 20207c92 branch sub_p2_256 
+
+bn_lshiftmod_p_256:
+7c8a 20407c92 call sub_p2_256 
+7c8b 1a222600 copy rega ,regc 
+7c8c 1a20a3e0 increase -32 ,rega 
+7c8d da40091e arg mem_p_256 ,regb 
+7c8e 20407cb1 call bn_bigeq_256 
+7c8f 24610000 nrtn positive 
+7c90 1a622200 copy regc ,rega 
+7c91 20207c92 branch sub_p2_256 
+
+sub_p2_256:
+7c92 1a20a3e0 increase -32 ,rega 
+7c93 da40091e arg mem_p_256 ,regb 
+7c94 1a220a00 copy rega ,contw 
+7c95 20207ca9 branch bn_sub_256 
+
+bn_submod_256:
+7c96 20407ca9 call bn_sub_256 
+7c97 2020fca0 branch bn_submod_256_np ,true 
+7c98 18a0a3e0 add contw ,-32 ,rega 
+7c99 da40091e arg mem_p_256 ,regb 
+7c9a 20407cb1 call bn_bigeq_256 
+7c9b 24610000 nrtn positive 
+7c9c da40091e arg mem_p_256 ,regb 
+7c9d 18a0a3e0 add contw ,-32 ,rega 
+7c9e 1a220a00 copy rega ,contw 
+7c9f 20207ca9 branch bn_sub_256 
+
+bn_submod_256_np:
+7ca0 18a0a3e0 add contw ,-32 ,rega 
+7ca1 da40091e arg mem_p_256 ,regb 
+7ca2 1a220a00 copy rega ,contw 
+7ca3 20407c7b call bn_add_256 
+7ca4 20608000 rtn true 
+7ca5 18a0a3e0 add contw ,-32 ,rega 
+7ca6 da40091e arg mem_p_256 ,regb 
+7ca7 1a220a00 copy rega ,contw 
+7ca8 20207c7b branch bn_add_256 
+
+bn_sub_256:
+7ca9 18007208 force 8 ,loopcnt 
+7caa 20207720 branch bn_sub + 1 
+
+bn_rshift_256:
+7cab 18007208 force 8 ,loopcnt 
+7cac 1a20a21c increase 28 ,rega 
+7cad 2020772f branch bn_rshift 
+
+bn_lshift_256:
+7cae 18007208 force 8 ,loopcnt 
+7caf 18002600 force 0 ,regc 
+7cb0 2020773d branch bn_lshift_0 
+
+bn_bigeq_256:
+7cb1 18007208 force 8 ,loopcnt 
+7cb2 1a20a21c increase 28 ,rega 
+7cb3 1a40a41c increase 28 ,regb 
+7cb4 20207707 branch bn_bigeq_0 
+
+bn_eq_zero_256:
+7cb5 e8c40000 ifetch 8 ,contr 
+7cb6 247a0000 nrtn blank 
+7cb7 202076f5 branch bn_eq_zero 
+
+bn_rshifteven_256:
+7cb8 1a226000 copy rega ,alarm 
+
+bn_rshifteven_256_1:
+7cb9 1e022200 copy alarm ,rega 
+7cba ea208000 ifetch 1 ,rega 
+7cbb 2feffe00 isolate1 0 ,pdata 
+7cbc 20608000 rtn true 
+7cbd 20407cab call bn_rshift_256 
+7cbe ea408000 ifetch 1 ,regb 
+7cbf 2fec0000 isolate0 0 ,pdata 
+7cc0 2020fcc8 branch bn_rshifteven_256_0 ,true 
+7cc1 da20091e arg mem_p_256 ,rega 
+7cc2 1a420a00 copy regb ,contw 
+7cc3 20407c7b call bn_add_256 
+7cc4 ea408000 ifetch 1 ,regb 
+7cc5 9a60fe00 iadd regc ,pdata 
+7cc6 e2408000 istore 1 ,regb 
+7cc7 1a40a5e0 increase -32 ,regb 
+
+bn_rshifteven_256_0:
+7cc8 1a40a220 add regb ,32 ,rega 
+7cc9 18007209 force 9 ,loopcnt 
+7cca 2040772f call bn_rshift 
+7ccb 20207cb9 branch bn_rshifteven_256_1 
+
+ui_init:
+7ccc 20402c65 call lpm_disable_exen_output 
+7ccd 20758000 rtn wake 
+7cce 20407cd3 call ui_button_init 
+7ccf 20407d75 call ui_timer_init 
+7cd0 20207d08 branch ui_led_init_global 
+
+ui_dispatch:
+7cd1 20407d29 call ui_led_dispatch 
+7cd2 20207d64 branch ui_timer_check 
+
+ui_button_init:
+7cd3 6800c686 fetch 1 ,mem_ui_button_gpio 
+7cd4 c17f8000 rtneq ui_button_gpio_disable 
+7cd5 98000400 iforce temp 
+7cd6 2040680e call gpio_config_output 
+7cd7 6808c686 fetcht 1 ,mem_ui_button_gpio 
+7cd8 20406825 call gpio_out_inactive 
+7cd9 20000064 nop 100 
+7cda 6808c686 fetcht 1 ,mem_ui_button_gpio 
+7cdb 204067fb call gpio_config_input 
+7cdc 20207cdd branch ui_button_polling 
+
+ui_button_polling:
+7cdd 4779c03e bpatchx patch3e_3 ,mem_patch3e 
+7cde 6800c686 fetch 1 ,mem_ui_button_gpio 
+7cdf c17f8000 rtneq ui_button_gpio_disable 
+7ce0 1fe20400 copy pdata ,temp 
+7ce1 2040681d call gpio_get_bit 
+7ce2 2420fcef nbranch ui_button_up ,true 
+
+ui_button_down:
+7ce3 20407cf9 call ui_button_check_long_press 
+7ce4 68014682 fetch 2 ,mem_ui_state_map 
+7ce5 79207e0c set1 ui_state_btn_down 
+7ce6 60014682 store 2 ,mem_ui_state_map 
+7ce7 6800c679 fetch 1 ,mem_ui_button_last_state 
+7ce8 c1000000 rtneq ui_button_state_down 
+7ce9 70467900 jam ui_button_state_down ,mem_ui_button_last_state 
+7cea 6800c685 fetch 1 ,mem_ui_button_timeout 
+7ceb 6000c678 store 1 ,mem_ui_button_timer 
+7cec 20407d00 call lpm_button_get_wake_lock 
+7ced 700a992c jam bt_evt_button_down ,mem_fifo_temp 
+7cee 20207d86 branch ui_ipc_send_event 
+
+ui_button_up:
+7cef 68014682 fetch 2 ,mem_ui_state_map 
+7cf0 793ffe0c set0 ui_state_btn_down 
+7cf1 60014682 store 2 ,mem_ui_state_map 
+7cf2 6800c679 fetch 1 ,mem_ui_button_last_state 
+7cf3 c1008000 rtneq ui_button_state_up 
+7cf4 70467901 jam ui_button_state_up ,mem_ui_button_last_state 
+7cf5 70467800 jam 0 ,mem_ui_button_timer 
+7cf6 20407d02 call lpm_button_clean_wake_lock 
+7cf7 700a992d jam bt_evt_button_up ,mem_fifo_temp 
+7cf8 20207d86 branch ui_ipc_send_event 
+
+ui_button_check_long_press:
+7cf9 6800c678 fetch 1 ,mem_ui_button_timer 
+7cfa 207a0000 rtn blank 
+7cfb 1fe0ffff increase -1 ,pdata 
+7cfc 6000c678 store 1 ,mem_ui_button_timer 
+7cfd 247a0000 nrtn blank 
+7cfe 700a9910 jam bt_evt_button_long_pressed ,mem_fifo_temp 
+7cff 20207d86 branch ui_ipc_send_event 
+
+lpm_button_get_wake_lock:
+7d00 d8e00007 arg wake_lock_button ,queue 
+7d01 20202c32 branch lpm_get_wake_lock 
+
+lpm_button_clean_wake_lock:
+7d02 d8e00007 arg wake_lock_button ,queue 
+7d03 20202c36 branch lpm_put_wake_lock 
+
+calc_curr_struct_prt:
+7d04 6801421b fetch 2 ,mem_ui_led_struct_ptr 
+7d05 1a2fa40b mul32 rega ,led_offset_length ,regb 
+7d06 9a40a400 iadd regb ,regb 
+7d07 20600000 rtn 
+
+ui_led_init_global:
+7d08 6800c21a fetch 1 ,mem_ui_led_struct_num 
+7d09 207a0000 rtn blank 
+7d0a 1fe27200 copy pdata ,loopcnt 
+7d0b 6801421b fetch 2 ,mem_ui_led_struct_ptr 
+7d0c 1fe22400 copy pdata ,regb 
+
+ui_led_init_loop:
+7d0d 1a40a602 add regb ,led_offset_led_gpio ,regc 
+7d0e ea688000 ifetcht 1 ,regc 
+7d0f 2040680e call gpio_config_output 
+7d10 20407d32 call ui_led_off_static 
+7d11 1a40a40b increase led_offset_length ,regb 
+7d12 c2007d0d loop ui_led_init_loop 
+7d13 20600000 rtn 
+
+ui_led_on_global:
+7d14 20407d04 call calc_curr_struct_prt 
+7d15 58000002 setarg ui_led_state_lighting 
+7d16 e2408000 istore 1 ,regb 
+7d17 20407d5e call ui_led_stop_timer 
+7d18 20207d35 branch ui_led_on_static 
+
+ui_led_blink_stop_global:
+
+ui_led_off_global:
+7d19 20407d04 call calc_curr_struct_prt 
+7d1a 58000003 setarg ui_led_state_darking 
+7d1b e2408000 istore 1 ,regb 
+7d1c 20407d5e call ui_led_stop_timer 
+7d1d 20207d32 branch ui_led_off_static 
+
+ui_led_blink_start_global:
+7d1e 20407d04 call calc_curr_struct_prt 
+7d1f 58000001 setarg ui_led_state_blink_start 
+7d20 e2408000 istore 1 ,regb 
+7d21 580000ff setarg led_infinite_flash_num 
+7d22 e0a08000 istore 1 ,contw 
+7d23 20207d32 branch ui_led_off_static 
+
+ui_led_set_style_global:
+7d24 20407d04 call calc_curr_struct_prt 
+7d25 df20000b arg led_offset_length ,loopcnt 
+7d26 1a620c00 copy regc ,contr 
+7d27 1a420a00 copy regb ,contw 
+7d28 20207ef4 branch memcpy_fast 
+
+ui_led_dispatch:
+7d29 6800c21a fetch 1 ,mem_ui_led_struct_num 
+7d2a 207a0000 rtn blank 
+7d2b da200000 arg 0 ,rega 
+
+ui_led_blink_polling:
+7d2c 20407d38 call ui_led_change_style_by_type 
+7d2d 1a20a201 increase 1 ,rega 
+7d2e 6800c21a fetch 1 ,mem_ui_led_struct_num 
+7d2f 9a267c00 isub rega ,null 
+7d30 20628000 rtn zero 
+7d31 20207d2c branch ui_led_blink_polling 
+
+ui_led_off_static:
+7d32 1a40a602 add regb ,led_offset_led_gpio ,regc 
+7d33 ea688000 ifetcht 1 ,regc 
+7d34 20206825 branch gpio_out_inactive 
+
+ui_led_on_static:
+7d35 1a40a602 add regb ,led_offset_led_gpio ,regc 
+7d36 ea688000 ifetcht 1 ,regc 
+7d37 20206829 branch gpio_out_active 
+
+ui_led_change_style_by_type:
+7d38 1a208e0b add rega ,ui_led_blink ,queue 
+7d39 20407f16 call timer_check 
+7d3a 247a0000 nrtn blank 
+7d3b 20407d04 call calc_curr_struct_prt 
+7d3c ea408000 ifetch 1 ,regb 
+7d3d c0017d35 beq ui_led_state_lighting ,ui_led_on_static 
+7d3e c001fd32 beq ui_led_state_darking ,ui_led_off_static 
+7d3f c0007d32 beq ui_led_state_blink_stop ,ui_led_off_static 
+7d40 c002fd4c beq ui_led_state_blink_darking ,ui_led_blink_state_darking 
+
+ui_led_blink_state_lighting:
+7d41 20407d35 call ui_led_on_static 
+7d42 1a40a607 add regb ,led_offset_cb_ledon ,regc 
+7d43 20407e7c call push_stack 
+7d44 ea610000 ifetch 2 ,regc 
+7d45 20407f9c call callback_func 
+7d46 20407e8c call pop_stack 
+7d47 58000005 setarg ui_led_state_blink_darking 
+7d48 e2408000 istore 1 ,regb 
+7d49 1a40a603 add regb ,led_offset_on_time ,regc 
+7d4a ea610000 ifetch 2 ,regc 
+7d4b 20207d5c branch ui_led_blink_timer_start 
+
+ui_led_blink_state_darking:
+7d4c 20407d32 call ui_led_off_static 
+7d4d 1a40a609 add regb ,led_offset_cb_ledoff ,regc 
+7d4e 20407e7c call push_stack 
+7d4f ea610000 ifetch 2 ,regc 
+7d50 20407f9c call callback_func 
+7d51 20407e8c call pop_stack 
+7d52 1a40a601 add regb ,led_offset_blink_count ,regc 
+7d53 ea608000 ifetch 1 ,regc 
+7d54 c07ffd58 beq led_infinite_flash_num ,ui_led_blink_infinite 
+7d55 1fe0ffff increase -1 ,pdata 
+7d56 e2608000 istore 1 ,regc 
+7d57 203a7d19 branch ui_led_blink_stop_global ,blank 
+
+ui_led_blink_infinite:
+7d58 58000004 setarg ui_led_state_blink_lighting 
+7d59 e2408000 istore 1 ,regb 
+7d5a 1a40a605 add regb ,led_offset_off_time ,regc 
+7d5b ea610000 ifetch 2 ,regc 
+
+ui_led_blink_timer_start:
+7d5c 1a208e0b add rega ,ui_led_blink ,queue 
+7d5d 20207f08 branch timer_init 
+
+ui_led_stop_timer:
+7d5e 58000000 setarg 0 
+7d5f 20207d5c branch ui_led_blink_timer_start 
+
+ui_timer_timeout:
+7d60 58001000 setarg 0x1000 
+7d61 1ff07e00 lshift16 pdata ,pdata 
+7d62 9a40a400 iadd regb ,regb 
+7d63 20600000 rtn 
+
+ui_timer_check:
+7d64 477a403e bpatchx patch3e_4 ,mem_patch3e 
+7d65 da200000 arg 0 ,rega 
+7d66 680a467a fetcht 4 ,mem_ui_timer_last_btclk 
+7d67 1c422400 copy clkn_bt ,regb 
+7d68 1a427e00 copy regb ,pdata 
+7d69 98467c00 isub temp ,null 
+7d6a 24417d60 ncall ui_timer_timeout ,positive 
+
+ui_timer_check_loop:
+7d6b 1a427e00 copy regb ,pdata 
+7d6c 184084a0 increase 160 ,temp 
+7d6d 184084a0 increase 160 ,temp 
+7d6e 98467c00 isub temp ,null 
+7d6f 24217d78 nbranch ui_timer_check_end ,positive 
+7d70 1a20a201 increase 1 ,rega 
+7d71 1a217e0f and rega ,0x0f ,pdata 
+7d72 243a7d6b nbranch ui_timer_check_loop ,blank 
+7d73 da200000 arg 0 ,rega 
+7d74 20407d7f call ui_timer_check_send_evt 
+
+ui_timer_init:
+7d75 1c427e00 copy clkn_bt ,pdata 
+7d76 6002467a store 4 ,mem_ui_timer_last_btclk 
+7d77 20600000 rtn 
+
+ui_timer_check_end:
+7d78 477ac03e bpatchx patch3e_5 ,mem_patch3e 
+7d79 1a227e00 copy rega ,pdata 
+7d7a 207a0000 rtn blank 
+7d7b 18408560 increase -160 ,temp 
+7d7c 18408560 increase -160 ,temp 
+7d7d 793f841c set0 28 ,temp 
+7d7e 600a467a storet 4 ,mem_ui_timer_last_btclk 
+
+ui_timer_check_send_evt:
+7d7f 2020335f branch app_evt_timer 
+
+ui_ipc_get_lock:
+7d80 70466601 jam 1 ,mem_ipc_lock_bt 
+
+ui_ipc_get_lock_wait:
+7d81 6800c667 fetch 1 ,mem_ipc_lock_c51 
+7d82 243a7d81 nbranch ui_ipc_get_lock_wait ,blank 
+7d83 20600000 rtn 
+
+ui_ipc_put_lock:
+7d84 70466600 jam 0 ,mem_ipc_lock_bt 
+7d85 20600000 rtn 
+
+ui_ipc_send_event:
+7d86 477b403e bpatchx patch3e_6 ,mem_patch3e 
+7d87 20407d80 call ui_ipc_get_lock 
+7d88 1a227e00 copy rega ,pdata 
+7d89 60020a91 store 4 ,mem_ipc_rega_temp 
+7d8a da204668 arg mem_ipc_fifo_bt2c51 ,rega 
+7d8b 20407fb8 call fifo_in 
+7d8c 68020a91 fetch 4 ,mem_ipc_rega_temp 
+7d8d 1fe22200 copy pdata ,rega 
+7d8e 20207d84 branch ui_ipc_put_lock 
+
+ui_ipc_send_cmd:
+7d8f 477bc03e bpatchx patch3e_7 ,mem_patch3e 
+7d90 20407d80 call ui_ipc_get_lock 
+7d91 1a227e00 copy rega ,pdata 
+7d92 60020a91 store 4 ,mem_ipc_rega_temp 
+7d93 da204670 arg mem_ipc_fifo_c512bt ,rega 
+7d94 20407fb8 call fifo_in 
+7d95 68020a91 fetch 4 ,mem_ipc_rega_temp 
+7d96 1fe22200 copy pdata ,rega 
+7d97 20207d84 branch ui_ipc_put_lock 
+
+ui_ipc_clean_all_fifo:
+7d98 58000000 setarg 0 
+7d99 60044670 store util_fifo_len ,mem_ipc_fifo_c512bt 
+7d9a 60044668 store util_fifo_len ,mem_ipc_fifo_bt2c51 
+7d9b 20600000 rtn 
+
+check_51cmd:
+7d9c 477c403f bpatchx patch3f_0 ,mem_patch3f 
+7d9d 6800c1ce fetch 1 ,mem_hci_cmd 
+7d9e 247a0000 nrtn blank 
+7d9f da204670 arg mem_ipc_fifo_c512bt ,rega 
+7da0 20407fd0 call fifo_is_empty 
+7da1 207a0000 rtn blank 
+7da2 700a9000 jam ipc_continue_process ,mem_ipc_skip_continue_proc 
+7da3 20407da7 call check_51cmd_once 
+7da4 68008a90 fetch 1 ,mem_ipc_skip_continue_proc 
+7da5 203a7d9c branch check_51cmd ,blank 
+7da6 20600000 rtn 
+
+check_51cmd_once:
+7da7 20407d80 call ui_ipc_get_lock 
+7da8 da204670 arg mem_ipc_fifo_c512bt ,rega 
+7da9 20407fc4 call fifo_out 
+7daa 1fe20400 copy pdata ,temp 
+7dab 20407d84 call ui_ipc_put_lock 
+7dac 477cc03f bpatchx patch3f_1 ,mem_patch3f 
+7dad 18427e00 copy temp ,pdata 
+7dae 207a0000 rtn blank 
+7daf c000fddd beq bt_cmd_start_discovery ,check_51cmd_start_discovery 
+7db0 c0017de2 beq bt_cmd_stop_discovery ,check_51cmd_stop_discovery 
+7db1 c001fde8 beq bt_cmd_reconnect ,check_51cmd_reconnect 
+7db2 c003fded beq bt_cmd_enter_sniff_subrating ,check_51cmd_enter_sniff_subrating 
+7db3 c0047dee beq bt_cmd_exit_sniff_subrating ,check_51cmd_exit_sniff_subrating 
+7db4 c004fdef beq bt_cmd_sniff_test ,check_51cmd_sniff_test 
+7db5 c005fdf2 beq bt_cmd_start_inquiry ,check_51cmd_inq 
+7db6 c0067df3 beq bt_cmd_stop_inquiry ,check_51cmd_stop_inq 
+7db7 c006fdf4 beq bt_cmd_start_adv ,check_51cmd_adv 
+7db8 c0077dfa beq bt_cmd_stop_adv ,check_51cmd_stop_adv 
+7db9 c007fdff beq bt_cmd_start_direct_adv ,check_51cmd_direct_adv 
+7dba c0087e05 beq bt_cmd_stop_direct_adv ,check_51cmd_stop_direct_adv 
+7dbb c009fe0f beq bt_cmd_led_off ,check_51cmd_led_off 
+7dbc c00a7e11 beq bt_cmd_led_on ,check_51cmd_led_on 
+7dbd c00afe13 beq bt_cmd_led_blink ,check_51cmd_led_start_blink 
+7dbe c00b7e15 beq bt_cmd_le_start_conn ,check_51cmd_le_start_con 
+7dbf c00bfe18 beq bt_cmd_le_start_scan ,check_51cmd_start_scan 
+7dc0 c00c7e1a beq bt_cmd_le_stop_scan ,check_51cmd_stop_scan 
+7dc1 c00cfe1d beq bt_cmd_enter_hibernate ,check_51cmd_hibernate 
+7dc2 c00dfe25 beq bt_cmd_le_smp_security_request ,check_51cmd_le_smp_sec_req 
+7dc3 c00f7e2f beq bt_cmd_bb_reconn_cancel ,check_51cmd_bb_reconn_cancel 
+7dc4 60008a99 store 1 ,mem_fifo_temp 
+7dc5 477d403f bpatchx patch3f_2 ,mem_patch3f 
+7dc6 204062bc call lmo_fifo_check 
+7dc7 243a7ddb nbranch check_51cmd_restore ,blank 
+
+check_51cmd_once_continue:
+7dc8 68008a99 fetch 1 ,mem_fifo_temp 
+7dc9 c584fdd6 bmark0 mark_context ,check_51cmd_check_idle 
+7dca c0027dea beq bt_cmd_disconnect ,check_51cmd_disconnect 
+7dcb c002cd17 beq bt_cmd_enter_sniff ,cmd_in_sniff 
+7dcc c0034d26 beq bt_cmd_exit_sniff ,cmd_exit_sniff 
+7dcd c0057df0 beq bt_cmd_set_pin_code ,check_51cmd_pincode 
+7dce c008fe0a beq bt_cmd_le_disconnect ,check_51cmd_le_disconnect 
+7dcf c0097e0e beq bt_cmd_le_update_conn ,check_51cmd_ble_update_connect_param 
+7dd0 c00efe26 beq bt_cmd_role_switch ,check_51cmd_role_switch 
+7dd1 c00fe7cc beq bt_cmd_store_reconn_info_le ,eeprom_store_le_reconn_info 
+7dd2 c01067d0 beq bt_cmd_store_reconn_info_bt ,eeprom_store_bd_reconn_info 
+7dd3 c010fe31 beq bt_cmd_dhkey_not_accept ,check_51cmd_dhkey_not_accept 
+7dd4 c012e70b beq bt_cmd_store_reconn_info ,check_51cmd_store_reconn_info 
+7dd5 20600000 rtn 
+
+check_51cmd_check_idle:
+7dd6 60008a99 store 1 ,mem_fifo_temp 
+7dd7 20402252 call context_check_idle 
+7dd8 2022fddb branch check_51cmd_restore ,zero 
+7dd9 2040225a call context_search_plap 
+7dda 24628000 nrtn zero 
+
+check_51cmd_restore:
+7ddb 700a9001 jam ipc_skip_continue_process ,mem_ipc_skip_continue_proc 
+7ddc 20207d8f branch ui_ipc_send_cmd 
+
+check_51cmd_start_discovery:
+7ddd 68014682 fetch 2 ,mem_ui_state_map 
+7dde 79207e06 set1 ui_state_bt_discovery 
+7ddf 60014682 store 2 ,mem_ui_state_map 
+7de0 70409303 jam 3 ,mem_scan_mode 
+7de1 20600000 rtn 
+
+check_51cmd_stop_discovery:
+7de2 70468000 jam 0 ,mem_hid_handshake_timer_count 
+7de3 70409300 jam 0 ,mem_scan_mode 
+7de4 68014682 fetch 2 ,mem_ui_state_map 
+7de5 793ffe06 set0 ui_state_bt_discovery 
+7de6 60014682 store 2 ,mem_ui_state_map 
+7de7 20600000 rtn 
+
+check_51cmd_reconnect:
+7de8 7041ce05 jam hci_cmd_create_conn ,mem_hci_cmd 
+7de9 20600000 rtn 
+
+check_51cmd_disconnect:
+7dea 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+7deb 7004ca13 jam other_end_terminated ,mem_disconn_reason_send 
+7dec 20600000 rtn 
+
+check_51cmd_enter_sniff_subrating:
+7ded 20600000 rtn 
+
+check_51cmd_exit_sniff_subrating:
+7dee 20600000 rtn 
+
+check_51cmd_sniff_test:
+7def 20600000 rtn 
+
+check_51cmd_pincode:
+7df0 7004d402 jam pincode_state_pincode_ready ,mem_pincode_state 
+7df1 20204d0a branch cmd_pair 
+
+check_51cmd_inq:
+7df2 20600000 rtn 
+
+check_51cmd_stop_inq:
+7df3 20600000 rtn 
+
+check_51cmd_adv:
+7df4 70436e01 jam on ,mem_le_adv_enable 
+7df5 70448400 jam adv_ind ,mem_le_adv_type 
+7df6 68014682 fetch 2 ,mem_ui_state_map 
+7df7 79207e0b set1 ui_state_ble_adv ,pdata 
+7df8 60014682 store 2 ,mem_ui_state_map 
+7df9 20600000 rtn 
+
+check_51cmd_stop_adv:
+7dfa 68014682 fetch 2 ,mem_ui_state_map 
+7dfb 793ffe0b set0 ui_state_ble_adv ,pdata 
+7dfc 60014682 store 2 ,mem_ui_state_map 
+7dfd 70436e00 jam off ,mem_le_adv_enable 
+7dfe 20600000 rtn 
+
+check_51cmd_direct_adv:
+7dff 70436e01 jam on ,mem_le_adv_enable 
+7e00 70448401 jam adv_direct_ind ,mem_le_adv_type 
+7e01 68014682 fetch 2 ,mem_ui_state_map 
+7e02 79207e0b set1 ui_state_ble_adv ,pdata 
+7e03 60014682 store 2 ,mem_ui_state_map 
+7e04 20600000 rtn 
+
+check_51cmd_stop_direct_adv:
+7e05 68014682 fetch 2 ,mem_ui_state_map 
+7e06 793ffe0b set0 ui_state_ble_adv ,pdata 
+7e07 60014682 store 2 ,mem_ui_state_map 
+7e08 70436e00 jam off ,mem_le_adv_enable 
+7e09 20600000 rtn 
+
+check_51cmd_le_disconnect:
+7e0a 58000014 setarg 20 
+7e0b 6001046d store 2 ,mem_le_superto 
+7e0c 600144ba store 2 ,mem_le_init_superto 
+7e0d 20205c92 branch le_send_terminate_ind_user_terminated 
+
+check_51cmd_ble_update_connect_param:
+7e0e 20205abf branch le_l2cap_tx_update_req 
+
+check_51cmd_led_off:
+7e0f da200000 arg 0 ,rega 
+7e10 20207d19 branch ui_led_off_global 
+
+check_51cmd_led_on:
+7e11 da200000 arg 0 ,rega 
+7e12 20207d14 branch ui_led_on_global 
+
+check_51cmd_led_start_blink:
+7e13 da200000 arg 0 ,rega 
+7e14 20207d1e branch ui_led_blink_start_global 
+
+check_51cmd_le_start_con:
+7e15 70436901 jam on ,mem_le_scan_enable 
+7e16 7041ce1b jam hci_cmd_le_create_conn ,mem_hci_cmd 
+7e17 20600000 rtn 
+
+check_51cmd_start_scan:
+7e18 70436901 jam on ,mem_le_scan_enable 
+7e19 20600000 rtn 
+
+check_51cmd_stop_scan:
+7e1a 70436900 jam off ,mem_le_scan_enable 
+7e1b 7041ce00 jam 0 ,mem_hci_cmd 
+7e1c 20600000 rtn 
+
+check_51cmd_hibernate:
+7e1d 680141eb fetch 2 ,mem_cb_before_hibernate 
+7e1e 20407f9c call callback_func 
+7e1f 6800c686 fetch 1 ,mem_ui_button_gpio 
+7e20 c07ffe23 beq ui_button_gpio_disable ,check_51cmd_hibernate_btn_disabled 
+7e21 1fe20400 copy pdata ,temp 
+7e22 204067fb call gpio_config_input 
+
+check_51cmd_hibernate_btn_disabled:
+7e23 20407d98 call ui_ipc_clean_all_fifo 
+7e24 20202b1f branch lpm_hibernate 
+
+check_51cmd_le_smp_sec_req:
+7e25 20205b02 branch le_send_smp_security_request 
+
+check_51cmd_role_switch:
+7e26 70007c34 jam lmp_slot_offset ,mem_lmo_opcode2 
+7e27 79200003 set1 mark_switch_initiated ,mark 
+7e28 24748000 nrtn master 
+7e29 70455b00 jam switch_flag_init ,mem_switch_flag 
+7e2a 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 
+7e2b 6800816d fetch 1 ,mem_connection_options 
+7e2c 793ffe02 set0 connection_switch ,pdata 
+7e2d 6000816d store 1 ,mem_connection_options 
+7e2e 20600000 rtn 
+
+check_51cmd_bb_reconn_cancel:
+7e2f 18000e03 force page_length_timer ,queue 
+7e30 20207f07 branch timer_stop 
+
+check_51cmd_dhkey_not_accept:
+7e31 204062f8 call tid_set_reply 
+7e32 70007d41 jam lmp_dhkey_check ,mem_lmi_opcode2 
+7e33 20205f9d branch parse_lmp_dhkey_check_reject 
+
+ui_check_paring_button:
+7e34 6800c682 fetch 1 ,mem_ui_state_map 
+7e35 c4060000 rtnbit0 ui_state_btn_down 
+7e36 c4038000 rtnbit0 ui_state_bt_reconnect 
+7e37 20207e2f branch check_51cmd_bb_reconn_cancel 
+
+queue_init:
+7e38 68014218 fetch 2 ,mem_queue_ptr 
+7e39 1fe08a02 add pdata ,queue_offset_curr_num ,contw 
+7e3a 58000000 setarg 0 
+7e3b e0a18000 istore 3 ,contw 
+7e3c 20600000 rtn 
+
+queue_push:
+7e3d 20407fe9 call disable_user 
+7e3e 20407e69 call queue_full 
+7e3f 207a0000 rtn blank 
+7e40 68014218 fetch 2 ,mem_queue_ptr 
+7e41 1fe0a402 add pdata ,queue_offset_curr_num ,regb 
+7e42 ea488000 ifetcht 1 ,regb 
+7e43 18408401 increase 1 ,temp 
+7e44 e2488000 istoret 1 ,regb 
+7e45 efe88000 ifetcht 1 ,pdata 
+7e46 18427200 copy temp ,loopcnt 
+7e47 1fe0a404 add pdata ,queue_offset_write_ptr ,regb 
+7e48 ea408000 ifetch 1 ,regb 
+7e49 984ffe00 imul32 temp ,pdata 
+7e4a 98c08a00 iadd contr ,contw 
+7e4b 1a220c00 copy rega ,contr 
+
+calc_queue_next_ptr:
+7e4c 20407f01 call memcpy 
+7e4d 20407e6d call queue_get_size 
+7e4e 1fe0ffff pincrease -1 
+7e4f ea488000 ifetcht 1 ,regb 
+7e50 18408401 increase 1 ,temp 
+7e51 98410400 iand temp ,temp 
+7e52 e2488000 istoret 1 ,regb 
+7e53 20207fe7 branch enable_user 
+
+queue_pop:
+7e54 20407fe9 call disable_user 
+7e55 20407e65 call queue_empty 
+7e56 207a0000 rtn blank 
+7e57 68014218 fetch 2 ,mem_queue_ptr 
+7e58 1fe0a402 add pdata ,queue_offset_curr_num ,regb 
+7e59 ea488000 ifetcht 1 ,regb 
+7e5a 184085ff increase -1 ,temp 
+7e5b e2488000 istoret 1 ,regb 
+7e5c efe88000 ifetcht 1 ,pdata 
+7e5d 18427200 copy temp ,loopcnt 
+7e5e 1fe0a403 add pdata ,queue_offset_read_ptr ,regb 
+7e5f ea408000 ifetch 1 ,regb 
+7e60 984ffe00 imul32 temp ,pdata 
+7e61 98c08c00 iadd contr ,contr 
+7e62 18c08c01 increase 1 ,contr 
+7e63 1a220a00 copy rega ,contw 
+7e64 20207e4c branch calc_queue_next_ptr 
+
+queue_empty:
+7e65 68014218 fetch 2 ,mem_queue_ptr 
+7e66 1fe08c02 add pdata ,queue_offset_curr_num ,contr 
+7e67 e8c08000 ifetch 1 ,contr 
+7e68 20600000 rtn 
+
+queue_full:
+7e69 20407e6d call queue_get_size 
+7e6a e8c88000 ifetcht 1 ,contr 
+7e6b 98467e00 isub temp ,pdata 
+7e6c 20600000 rtn 
+
+queue_get_size:
+7e6d 68014218 fetch 2 ,mem_queue_ptr 
+7e6e 1fe08c01 add pdata ,queue_offset_length ,contr 
+7e6f e8c08000 ifetch 1 ,contr 
+7e70 20600000 rtn 
+
+right_shift_n:
+7e71 1f267c00 sub loopcnt ,0 ,null 
+7e72 20628000 rtn zero 
+
+right_shift_n_loop:
+7e73 1fe37e00 rshift pdata ,pdata 
+7e74 c2007e73 loop right_shift_n_loop 
+7e75 20600000 rtn 
+
+left_shift_n:
+7e76 18007e01 force 1 ,pdata 
+7e77 1f267c00 sub loopcnt ,0 ,null 
+7e78 20628000 rtn zero 
+
+left_shift_n_loop:
+7e79 1fe3fe00 lshift pdata ,pdata 
+7e7a c2007e79 loop left_shift_n_loop 
+7e7b 20600000 rtn 
+
+push_stack:
+7e7c 18a27e00 deposit contw 
+7e7d 60010abb store 2 ,mem_contw 
+7e7e 600c0aa2 storet 8 ,mem_temp 
+7e7f 19627e00 deposit timeup 
+7e80 60020aaa store 4 ,mem_timeup 
+7e81 20407e85 call push_stack_rega_b_c 
+7e82 18c27e00 deposit contr 
+7e83 60010ab9 store 2 ,mem_contr 
+7e84 20600000 rtn 
+
+push_stack_rega_b_c:
+7e85 1a227e00 deposit rega 
+7e86 60020aae store 4 ,mem_rega 
+7e87 1a427e00 deposit regb 
+7e88 60020ab2 store 4 ,mem_regb 
+7e89 1a627e00 deposit regc 
+7e8a 60018ab6 store 3 ,mem_regc 
+7e8b 20600000 rtn 
+
+pop_stack:
+7e8c 680c0aa2 fetcht 8 ,mem_temp 
+7e8d 68020aaa fetch 4 ,mem_timeup 
+7e8e 98001600 iforce timeup 
+7e8f 20407e95 call pop_stack_rega_b_c 
+7e90 68010abb fetch 2 ,mem_contw 
+7e91 98000a00 iforce contw 
+7e92 68010ab9 fetch 2 ,mem_contr 
+7e93 98000c00 iforce contr 
+7e94 20600000 rtn 
+
+pop_stack_rega_b_c:
+7e95 68020aae fetch 4 ,mem_rega 
+7e96 98002200 iforce rega 
+7e97 68020ab2 fetch 4 ,mem_regb 
+7e98 98002400 iforce regb 
+7e99 68018ab6 fetch 3 ,mem_regc 
+7e9a 98002600 iforce regc 
+7e9b 20600000 rtn 
+
+get_contw:
+7e9c 68010abb fetch 2 ,mem_contw 
+7e9d 1fe20a00 copy pdata ,contw 
+7e9e 20600000 rtn 
+
+get_contr:
+7e9f 68010ab9 fetch 2 ,mem_contr 
+7ea0 1fe20c00 copy pdata ,contr 
+7ea1 20600000 rtn 
+
+store_contw:
+7ea2 18a27e00 copy contw ,pdata 
+7ea3 60010abb store 2 ,mem_contw 
+7ea4 20600000 rtn 
+
+store_contr:
+7ea5 18c27e00 copy contr ,pdata 
+7ea6 60010ab9 store 2 ,mem_contr 
+7ea7 20600000 rtn 
+
+save_cont_pointers:
+7ea8 18a27e00 copy contw ,pdata 
+7ea9 60010a97 store 2 ,mem_hold_contw 
+7eaa 18c27e00 copy contr ,pdata 
+7eab 60010a95 store 2 ,mem_hold_contr 
+7eac 20600000 rtn 
+
+load_cont_pointers:
+7ead 68010a97 fetch 2 ,mem_hold_contw 
+7eae 1fe20a00 copy pdata ,contw 
+7eaf 68010a95 fetch 2 ,mem_hold_contr 
+7eb0 1fe20c00 copy pdata ,contr 
+7eb1 20600000 rtn 
+
+memcpy96:
+7eb2 20407ebd call memcpy32 
+
+memcpy64:
+7eb3 20407ebd call memcpy32 
+7eb4 20207ebd branch memcpy32 
+
+memcpy12:
+7eb5 20407eb9 call memcpy8 
+
+memcpy4:
+7eb6 e8c20000 ifetch 4 ,contr 
+7eb7 e0a20000 istore 4 ,contw 
+7eb8 20600000 rtn 
+
+memcpy8:
+7eb9 e8c40000 ifetch 8 ,contr 
+7eba e0a40000 istore 8 ,contw 
+7ebb 20600000 rtn 
+
+memcpy48:
+7ebc 20407ebf call memcpy16 
+
+memcpy32:
+7ebd 20407eb9 call memcpy8 
+
+memcpy24:
+7ebe 20407eb9 call memcpy8 
+
+memcpy16:
+7ebf 20407eb9 call memcpy8 
+7ec0 20207eb9 branch memcpy8 
+
+delay_10ms:
+7ec1 df20000a arg 10 ,loopcnt 
+
+delay_ms_wait:
+7ec2 20002ee0 nop 12000 
+7ec3 c2007ec2 loop delay_ms_wait 
+7ec4 20600000 rtn 
+
+bn_zero:
+7ec5 18007203 force 3 ,loopcnt 
+
+memset0:
+7ec6 18007e00 force 0 ,pdata 
+
+memset8:
+7ec7 e0a40000 istore 8 ,contw 
+7ec8 c2007ec7 loop memset8 
+7ec9 20600000 rtn 
+
+memset0_8:
+7eca 18007e00 force 0 ,pdata 
+7ecb e0a40000 istore 8 ,contw 
+7ecc 20600000 rtn 
+
+memset0_4:
+7ecd 18007e00 force 0 ,pdata 
+7ece e0a20000 istore 4 ,contw 
+7ecf 20600000 rtn 
+
+clear_mem_256:
+7ed0 18007204 force 4 ,loopcnt 
+7ed1 20207ec6 branch memset0 
+
+clear_mem_512:
+7ed2 18007208 force 8 ,loopcnt 
+7ed3 20207ec6 branch memset0 
+
+clear_mem:
+7ed4 1f227e00 deposit loopcnt 
+7ed5 207a0000 rtn blank 
+7ed6 58000000 setarg 0 
+
+clear_mem_loop:
+7ed7 e0a08000 istore 1 ,contw 
+7ed8 c2007ed7 loop clear_mem_loop 
+7ed9 20600000 rtn 
+
+clear_temp_block:
+7eda df200020 arg 32 ,loopcnt 
+7edb d8a00ac2 arg mem_temp_block0 ,contw 
+7edc 20207ed4 branch clear_mem 
+
+xor_loop:
+7edd ea620000 ifetch 4 ,regc 
+7ede ea2a0000 ifetcht 4 ,rega 
+7edf 9842fe00 ixor temp ,pdata 
+7ee0 e0a20000 istore 4 ,contw 
+7ee1 1a20a204 increase 4 ,rega 
+7ee2 1a60a604 increase 4 ,regc 
+7ee3 c2007edd loop xor_loop 
+7ee4 20600000 rtn 
+
+inverse_data:
+7ee5 477dc03f bpatchx patch3f_3 ,mem_patch3f 
+7ee6 1f227e00 copy loopcnt ,pdata 
+7ee7 1fe67c01 sub pdata ,1 ,null 
+7ee8 20610000 rtn positive 
+7ee9 9a20a400 iadd rega ,regb 
+7eea 1a40a5ff increase -1 ,regb 
+7eeb 1f237200 rshift loopcnt ,loopcnt 
+
+inverse_loop:
+7eec ea288000 ifetcht 1 ,rega 
+7eed ea408000 ifetch 1 ,regb 
+7eee e2208000 istore 1 ,rega 
+7eef e2488000 istoret 1 ,regb 
+7ef0 1a40a5ff increase -1 ,regb 
+7ef1 1a20a201 increase 1 ,rega 
+7ef2 c2007eec loop inverse_loop 
+7ef3 20600000 rtn 
+
+memcpy_fast:
+7ef4 1f227e00 deposit loopcnt 
+7ef5 207a0000 rtn blank 
+
+memcpy_fast_loop:
+7ef6 1f20f3f8 increase -8 ,loopcnt 
+7ef7 20417eb9 call memcpy8 ,positive 
+7ef8 20628000 rtn zero 
+7ef9 20217ef6 branch memcpy_fast_loop ,positive 
+7efa 1f20f208 increase 8 ,loopcnt 
+
+memcpy_fast_loop_four:
+7efb 1f20f3fc increase -4 ,loopcnt 
+7efc 20417eb6 call memcpy4 ,positive 
+7efd 20628000 rtn zero 
+7efe 20217efb branch memcpy_fast_loop_four ,positive 
+7eff 1f20f204 increase 4 ,loopcnt 
+7f00 20207f01 branch memcpy 
+
+memcpy:
+7f01 1f227e00 deposit loopcnt 
+7f02 207a0000 rtn blank 
+
+memcpy_loop:
+7f03 e8c08000 ifetch 1 ,contr 
+7f04 e0a08000 istore 1 ,contw 
+7f05 c2007f03 loop memcpy_loop 
+7f06 20600000 rtn 
+
+timer_stop:
+7f07 58000000 setarg 0 
+
+timer_init:
+7f08 1c430400 rshift clkn_bt ,temp 
+7f09 600a4094 storet 4 ,mem_last_clkn 
+7f0a d8a0419d arg mem_timers ,contw 
+7f0b 98000400 iforce temp 
+7f0c 18e3fe00 lshift queue ,pdata 
+7f0d 98a08a00 iadd contw ,contw 
+7f0e e0a90000 istoret 2 ,contw 
+7f0f 477e403f bpatchx patch3f_4 ,mem_patch3f 
+7f10 20600000 rtn 
+
+timer_check_timeout:
+7f11 d9600800 arg 0x800 ,timeup 
+7f12 19701600 lshift16 timeup ,timeup 
+7f13 9960fe00 iadd timeup ,pdata 
+7f14 20600000 rtn 
+
+timer_reinit:
+7f15 d8e00000 arg 0 ,queue 
+
+timer_check:
+7f16 477ec03f bpatchx patch3f_5 ,mem_patch3f 
+7f17 680a4094 fetcht 4 ,mem_last_clkn 
+7f18 1c437e00 rshift clkn_bt ,pdata 
+7f19 60024094 store 4 ,mem_last_clkn 
+7f1a 98467c00 isub temp ,null 
+7f1b 24417f11 ncall timer_check_timeout ,positive 
+7f1c 98461600 isub temp ,timeup 
+7f1d 19620400 copy timeup ,temp 
+7f1e d8c0419d arg mem_timers ,contr 
+7f1f 18c20a00 copy contr ,contw 
+7f20 df200010 arg 16 ,loopcnt 
+
+timer_loop:
+7f21 e8c10000 ifetch 2 ,contr 
+7f22 98467e00 isub temp ,pdata 
+7f23 20217f25 branch timer_counting ,positive 
+7f24 18007e00 force 0 ,pdata 
+
+timer_counting:
+7f25 e0a10000 istore 2 ,contw 
+7f26 c2007f21 loop timer_loop 
+7f27 d8c0419d arg mem_timers ,contr 
+7f28 18e3fe00 lshift queue ,pdata 
+7f29 98c08c00 iadd contr ,contr 
+7f2a e8c10000 ifetch 2 ,contr 
+7f2b 20600000 rtn 
+
+clk_add:
+7f2c 98408400 iadd temp ,temp 
+7f2d 18427200 copy temp ,loopcnt 
+7f2e 58000ea6 setarg 3750 
+7f2f 9f267e00 isub loopcnt ,pdata 
+7f30 20610000 rtn positive 
+7f31 1fe67e00 sub pdata ,0 ,pdata 
+7f32 18510400 rshift16 temp ,temp 
+7f33 18408401 increase 1 ,temp 
+7f34 18500400 lshift16 temp ,temp 
+7f35 98418400 ior temp ,temp 
+7f36 20600000 rtn 
+
+clk_diff_rt:
+7f37 20407f39 call clk_diff 
+7f38 20207f43 branch clk2rt 
+
+clk_diff:
+7f39 78547c00 disable user 
+7f3a 98467e00 isub temp ,pdata 
+7f3b 20217f3e branch clk_diff_pos ,positive 
+7f3c 78347c00 enable user 
+7f3d 1fe67e00 sub pdata ,0 ,pdata 
+
+clk_diff_pos:
+7f3e c4078000 rtnbit0 15 
+7f3f d85f0ea6 arg -61786 ,temp 
+7f40 9840fe00 iadd temp ,pdata 
+7f41 793ffe40 set0 64 ,pdata 
+7f42 20600000 rtn 
+
+clk2rt:
+7f43 98000c00 iforce contr 
+7f44 1ff17e00 rshift16 pdata ,pdata 
+7f45 d8400ea6 arg 3750 ,temp 
+7f46 984ffe00 imul32 temp ,pdata 
+7f47 98c0fe00 iadd contr ,pdata 
+7f48 20600000 rtn 
+
+clk2lpo:
+7f49 1fed7e00 lshift8 pdata ,pdata 
+7f4a 1ff27e00 lshift4 pdata ,pdata 
+7f4b 6809c16f fetcht 3 ,mem_clks_per_lpo 
+7f4c 9846fc00 idiv temp 
+7f4d 20407f86 call wait_div_end 
+7f4e 18078400 quotient temp 
+7f4f 20600000 rtn 
+
+clk2bt:
+7f50 d8400ea6 arg 3750 ,temp 
+7f51 9846fc00 idiv temp 
+7f52 20407f86 call wait_div_end 
+7f53 1807fe00 quotient pdata 
+7f54 1ff07e00 lshift16 pdata ,pdata 
+7f55 18070400 remainder temp 
+7f56 98418400 ior temp ,temp 
+7f57 20600000 rtn 
+
+string2dec_from_uart:
+7f58 d8400000 arg 0 ,temp 
+
+string2dec_from_uart_done:
+7f59 18422600 copy temp ,regc 
+7f5a e8608000 ifetch 1 ,contru 
+7f5b 20407f64 call uchar2dialog 
+7f5c 1a620400 copy regc ,temp 
+7f5d 20407f95 call swap 
+7f5e da40000a arg 10 ,regb 
+7f5f 9a4ffe00 imul32 regb ,pdata 
+7f60 9840fe00 iadd temp ,pdata 
+7f61 1fe20400 copy pdata ,temp 
+7f62 c2007f59 loop string2dec_from_uart_done 
+7f63 20600000 rtn 
+
+uchar2dialog:
+7f64 d840003a arg 0x3a ,temp 
+7f65 98467c00 isub temp ,null 
+7f66 24217f6d nbranch uchar2dialog_number ,positive 
+7f67 d8400061 arg 0x61 ,temp 
+7f68 98467c00 isub temp ,null 
+7f69 20217f70 branch uchar2dialog_a2f ,positive 
+7f6a d8400037 arg 0x37 ,temp 
+7f6b 98467e00 isub temp ,pdata 
+7f6c 20600000 rtn 
+
+uchar2dialog_number:
+7f6d d8400030 arg 0x30 ,temp 
+7f6e 98467e00 isub temp ,pdata 
+7f6f 20600000 rtn 
+
+uchar2dialog_a2f:
+7f70 d8400057 arg 0x57 ,temp 
+7f71 98467e00 isub temp ,pdata 
+7f72 20600000 rtn 
+
+pn9:
+7f73 18426000 copy temp ,alarm 
+7f74 580001ff setarg 0x1ff 
+7f75 18002400 force 0 ,regb 
+
+pn9_loop:
+7f76 1fe92200 rshift3 pdata ,rega 
+7f77 1a232200 rshift rega ,rega 
+7f78 9a22a200 ixor rega ,rega 
+7f79 2a2ffe00 isolate1 0 ,rega 
+7f7a 7920fe09 setflag true ,9 ,pdata 
+7f7b 18430400 rshift temp ,temp 
+7f7c 2feffe00 isolate1 0 ,pdata 
+7f7d 79208407 setflag true ,7 ,temp 
+7f7e 1fe37e00 rshift pdata ,pdata 
+7f7f 1a40a401 increase 1 ,regb 
+7f80 2a400e00 compare 0 ,regb ,0x7 
+7f81 2420ff76 nbranch pn9_loop ,true 
+7f82 e0a88000 istoret 1 ,contw 
+7f83 c2007f76 loop pn9_loop 
+7f84 1e020400 copy alarm ,temp 
+7f85 20600000 rtn 
+
+wait_div_end:
+7f86 207a8000 rtn modone 
+7f87 20207f86 branch wait_div_end 
+
+compare_loop:
+
+string_compare:
+7f88 ea208000 ifetch 1 ,rega 
+7f89 ea488000 ifetcht 1 ,regb 
+7f8a 98467c00 isub temp ,null 
+7f8b 24628000 nrtn zero 
+7f8c 1a20a201 increase 1 ,rega 
+7f8d 1a40a401 increase 1 ,regb 
+7f8e c2007f88 loop string_compare 
+7f8f 18007c00 force 0 ,null 
+7f90 20600000 rtn 
+
+ceiling:
+7f91 98467c00 isub temp ,null 
+7f92 24610000 nrtn positive 
+7f93 18427e00 deposit temp 
+7f94 20600000 rtn 
+
+swap:
+7f95 9840fe00 iadd temp ,pdata 
+7f96 98460400 isub temp ,temp 
+7f97 98467e00 isub temp ,pdata 
+7f98 20600000 rtn 
+
+clean_mem:
+7f99 df200200 arg 0x200 ,loopcnt 
+7f9a d8a04000 arg 0x4000 ,contw 
+7f9b 20207ec6 branch memset0 
+
+callback_func:
+7f9c 207a0000 rtn blank 
+7f9d 1fe27a00 copy pdata ,pc 
+
+wait_uarttx:
+7f9e 6811010e hfetch 2 ,core_uart_txitems 
+7f9f 243a7f9e nbranch wait_uarttx ,blank 
+7fa0 20600000 rtn 
+
+ice_break:
+7fa1 70820301 jam 0x1 ,core_ice_ctrl 
+7fa2 20600000 rtn 
+
+ice_setbp:
+7fa3 60110205 hstore 2 ,core_ice_break0 
+7fa4 68108203 hfetch 1 ,core_ice_ctrl 
+7fa5 79207e04 set1 4 ,pdata 
+7fa6 60108203 hstore 1 ,core_ice_ctrl 
+7fa7 20600000 rtn 
+
+ice_setbp2:
+7fa8 60110207 hstore 2 ,core_ice_break1 
+7fa9 68108203 hfetch 1 ,core_ice_ctrl 
+7faa 79207e06 set1 6 ,pdata 
+7fab 60108203 hstore 1 ,core_ice_ctrl 
+7fac 20600000 rtn 
+
+ice_set_write_bp:
+7fad 60110205 hstore 2 ,core_ice_break0 
+7fae 70820330 jam 0x30 ,core_ice_ctrl 
+7faf 20600000 rtn 
+
+test_enable_white:
+7fb0 68108043 hfetch 1 ,core_config 
+7fb1 793ffe04 set0 whiteoff_bit ,pdata 
+7fb2 60108043 hstore 1 ,core_config 
+7fb3 20600000 rtn 
+
+check_uart_tx_buff:
+7fb4 6811010e hfetch 2 ,core_uart_txitems 
+7fb5 d8400200 arg uart_air_control_threshold ,temp 
+
+pdata_sub_temp:
+7fb6 98467c00 isub temp ,null 
+7fb7 20600000 rtn 
+
+fifo_in:
+7fb8 477f403f bpatchx patch3f_6 ,mem_patch3f 
+7fb9 ea2c0000 ifetcht util_fifo_len ,rega 
+7fba 18417eff and temp ,0xff ,pdata 
+7fbb 243a7fbe nbranch fifo_in_push ,blank 
+7fbc 184cfe00 rshift8 temp ,pdata 
+7fbd e2240000 istore util_fifo_len ,rega 
+
+fifo_in_push:
+7fbe 1a20a207 increase util_fifo_len + util_fifo_offset ,rega 
+7fbf ea208000 ifetch 1 ,rega 
+7fc0 243a2a8c nbranch assert ,blank 
+7fc1 68008a99 fetch 1 ,mem_fifo_temp 
+7fc2 e2208000 istore 1 ,rega 
+7fc3 20600000 rtn 
+
+fifo_out:
+7fc4 477fc03f bpatchx patch3f_7 ,mem_patch3f 
+7fc5 df200008 arg util_fifo_len ,loopcnt 
+7fc6 ea240000 ifetch util_fifo_len ,rega 
+7fc7 207a0000 rtn blank 
+
+fifo_out_loop:
+7fc8 ea208000 ifetch 1 ,rega 
+7fc9 243a7fcd nbranch fifo_out_end ,blank 
+7fca 1a20a201 increase 1 ,rega 
+7fcb c2007fc8 loop fifo_out_loop 
+7fcc 20202a8c branch assert 
+
+fifo_out_end:
+7fcd d8400000 arg 0 ,temp 
+7fce e2288000 istoret 1 ,rega 
+7fcf 20600000 rtn 
+
+fifo_is_empty:
+7fd0 ea240000 ifetch util_fifo_len ,rega 
+7fd1 20600000 rtn 
+
+fifo_is_full:
+7fd2 ea208000 ifetch 1 ,rega 
+7fd3 20600000 rtn 
+
+fifo_is_near_full:
+7fd4 ea210000 ifetch 2 ,rega 
+7fd5 20600000 rtn 
+
+fifo_content_count:
+7fd6 d8400000 arg 0 ,temp 
+
+fifo_content_count_loop:
+7fd7 68008006 fetch 1 ,contr 
+7fd8 c2007fd7 loop fifo_content_count_loop ,blank 
+7fd9 18408401 increase 1 ,temp 
+7fda c2007fd7 loop fifo_content_count_loop 
+7fdb 18427e00 copy temp ,pdata 
+7fdc 20600000 rtn 
+
+not_greater_than:
+7fdd 98467c00 isub temp ,null 
+7fde 24610000 nrtn positive 
+7fdf 18427e00 copy temp ,pdata 
+7fe0 20600000 rtn 
+
+disable_positive:
+7fe1 18007dff force -1 ,null 
+7fe2 20600000 rtn 
+
+enable_positive:
+
+disable_zero:
+7fe3 18007c01 force 1 ,null 
+7fe4 20600000 rtn 
+
+enable_zero:
+7fe5 18007c00 force 0 ,null 
+7fe6 20600000 rtn 
+
+enable_user:
+7fe7 78347c00 enable user 
+7fe8 20600000 rtn 
+
+disable_user:
+7fe9 78547c00 disable user 
+7fea 20600000 rtn 
+
+enable_user2:
+7feb 78367c00 enable user2 
+7fec 20600000 rtn 
+
+disable_user2:
+7fed 78567c00 disable user2 
+7fee 20600000 rtn 
+
+disable_blank:
+7fef 58000001 setarg 1 
+7ff0 20600000 rtn 
+
+enable_blank:
+7ff1 58000000 setarg 0 
+7ff2 20600000 rtn 
+
+reverse_byte:
+7ff3 1f227e00 copy loopcnt ,pdata 
+7ff4 207a0000 rtn blank 
+7ff5 18c27e00 copy contr ,pdata 
+7ff6 9f20fe00 iadd loopcnt ,pdata 
+7ff7 1fe0ffff increase -1 ,pdata 
+7ff8 1fe20c00 copy pdata ,contr 
+
+reverse_loop:
+7ff9 e8c08000 ifetch 1 ,contr 
+7ffa 18c08dfe increase -2 ,contr 
+7ffb e0a08000 istore 1 ,contw 
+7ffc c2007ff9 loop reverse_loop 
+7ffd 20600000 rtn 
+rtn 
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/ramcode.rom
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/ramcode.rom	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/ramcode.rom	(working copy)
@@ -0,0 +1,1199 @@
+c2840013
+c0000028
+c000802b
+c0010033
+c0428476
+c0448447
+c0450478
+c050803c
+c0588041
+c059004b
+c06202cf
+c0648330
+c0650334
+c07183c5
+c07303d1
+c07503da
+c07583df
+c07603f0
+20202a8e
+c01f8016
+c04603f4
+20202a8e
+70890f36
+70890b5f
+783b7c00
+70891407
+6800c1e0
+207a0000
+70890ab8
+20600000
+1fe22200
+6808cc70
+58004c77
+98408a00
+1a227e00
+e0a08000
+18408401
+18410407
+6008cc70
+20600000
+6810813b
+6000cb26
+20202002
+d8a009ae
+df20000c
+20407ed4
+20406a03
+20405cf6
+2455ac65
+20407ccd
+2020200c
+2055b2e3
+2040756a
+2055ab41
+204076dc
+6800c65a
+203a2012
+6800c5b1
+203a0036
+20202012
+58000a06
+6001c510
+58001d87
+60014513
+20202aa2
+c6130000
+6800c79c
+203a7fef
+6800c7c4
+c000ffef
+68014248
+243a7fef
+6800c806
+243a7fef
+20207ff1
+c6930000
+6800ccf5
+c000805c
+204000e5
+24340071
+204000cc
+20400107
+6800cbc5
+c1ff8000
+2040041a
+20400077
+24740000
+204002c0
+5800ec54
+20407f49
+600a415b
+20202b2a
+2040028c
+24740000
+20400068
+2020004e
+704cf500
+704cf600
+704bf000
+6800cbdb
+6000cbda
+20600000
+6800cbdc
+20200064
+6800cbf0
+1fe0fe01
+6000cbf0
+c0020066
+c0028062
+20600000
+704cf501
+704cf600
+20600000
+6800cbe1
+205a0080
+20400077
+24740000
+6801cbe4
+20200059
+78347c00
+20402afa
+6801c16f
+203a7fe9
+6800c091
+203a7fe9
+6800ccf5
+c000ffe9
+202002c3
+704be101
+704cea00
+20400094
+6000cb51
+58000000
+6003cb52
+68024bec
+60024b59
+704bb50c
+6800cbb6
+79207e03
+6000cbb6
+204000e8
+20200051
+204068a8
+680240a0
+60024bec
+20600000
+704ceb01
+704ced00
+6800cbb6
+1fe17e07
+6000cbb6
+20600000
+6800cbb6
+79207e04
+6000cbb6
+6000cb71
+20600000
+6800cbb6
+793ffe04
+6000cbb6
+20600000
+20400410
+6800ccec
+c00080a6
+c00100aa
+20600000
+704ced02
+704ce900
+704ceb00
+20200094
+704cea00
+202000a7
+68014bbb
+1fe0fe01
+60014bbb
+c283014a
+6800ccea
+c00080b5
+704cea01
+6800ccea
+c0808094
+6800cce8
+1fe0fe01
+6000cce8
+c00200bc
+20400204
+704bfa02
+20200107
+20400410
+704ce800
+20200094
+704ced02
+704ceb01
+704cea00
+20200094
+6800ccec
+c00180c0
+6800cbb6
+2fec0004
+20208092
+6800ccec
+c00080bf
+c00100c0
+20600000
+6800cbc5
+c1ff8000
+204000d1
+245600d9
+20600000
+78567c00
+6800cceb
+c1808000
+6800cced
+c1800000
+704cec01
+704bfa04
+20207feb
+6800cced
+203a00e0
+1fe0ffff
+6000cced
+704cec02
+704bfa04
+20200204
+704cec03
+6800ccea
+243a00b3
+704bfa02
+20200204
+6800cbc5
+c0ff815e
+204000eb
+204001f2
+704bba01
+20600000
+68014ce6
+20407f9c
+203400f1
+6803cb52
+207a0000
+20207fe7
+704be100
+1a20fe01
+6000cbb5
+20400094
+6000cb51
+e8a88000
+ea408000
+9841fe00
+e0a08000
+1a40a401
+ea420000
+e0a20000
+1a40a404
+d8a04b57
+df200002
+ea408000
+e8a88000
+9840fe00
+e0a08000
+1a40a401
+c2000100
+20600000
+704bbe00
+d9600d00
+34730200
+20400123
+6800cbf1
+c1008000
+242c0132
+24378132
+2040011e
+2040014e
+2040040c
+6800cbb4
+1fe0fe01
+6000cbb4
+6800cbc5
+c0ff8121
+204000c3
+58000000
+60014bbb
+6000cbbd
+6000cce9
+704bba00
+20600000
+df200004
+d8a04b51
+20207ec6
+20400409
+20200178
+7857fc00
+2040026b
+6800cbf1
+c0008130
+18002a00
+68024bdd
+98001200
+68088017
+2040291f
+20402924
+20400227
+20578263
+20600000
+20400263
+20200112
+6800cbbd
+1fe0fe01
+6000cbbd
+6800cbc5
+c0ff8146
+6808cbbe
+18408401
+6008cbbe
+6800cbfa
+98467e00
+243a0108
+6800ccec
+c00180ac
+6800cce9
+1fe0fe01
+6000cce9
+c00100a1
+20400098
+704bfa01
+20200107
+6800cbbd
+c1ff8000
+704bbd00
+2020014c
+58000000
+60014bbb
+700a993a
+20207d86
+204001d7
+6800cbb3
+207a0000
+98007200
+d8c04b31
+d8a04b93
+20207f01
+79200026
+20400159
+704bc501
+20600000
+7041de20
+704bb400
+704bbf4e
+68024bc1
+202001e4
+6800cbba
+c000ffe7
+6800cbc5
+c0008165
+c0010168
+c001816b
+20202a8c
+704bc511
+70119eaa
+2020016d
+704bc512
+70119e55
+2020016d
+704bc513
+70119e22
+6800cbb6
+1fe17e07
+6000919f
+68024bec
+600211a0
+7011a400
+da20119e
+d8400007
+204001d2
+204000e8
+20207fe7
+6800cbc5
+c17f8000
+c008817e
+c0090180
+c0098182
+20600000
+704bc502
+20200118
+704bc503
+20200118
+704bc5ff
+700a9939
+20407d86
+68024b95
+204001e4
+20200118
+793f8026
+204001c8
+6800cbc5
+c1ff8000
+2040019d
+58000000
+60014be2
+20402afa
+200007d0
+6800cbe2
+c07f814c
+20400123
+242c01a6
+243781a6
+79200026
+58000000
+60014be2
+700a993c
+20407d86
+2040011e
+2020006e
+70119eff
+6800cbb6
+6000919f
+68024bec
+600211a0
+d8400006
+da20119e
+204001d2
+202001f2
+68014be2
+1fe0fe01
+60014be2
+20400204
+2020018f
+793f8026
+204001c6
+2040019d
+704be200
+20402afa
+200007d0
+6800cbe2
+c07f814c
+20400123
+242c01bc
+243781bc
+2040014e
+68024bdd
+680a4bc1
+98467c00
+20228155
+20200196
+6800cbe2
+1fe0fe01
+6000cbe2
+6800ccf3
+1fe0fe01
+1fe17e01
+6000ccf3
+c00001ca
+c00081cc
+20600000
+7041de20
+2040032b
+204001e5
+20200204
+204001c6
+202001af
+20400159
+202001af
+793f8026
+204053ce
+d8e00003
+202043d2
+6008cbb5
+18427200
+d8a04b51
+1a220c00
+20207f01
+6800cb30
+1fe97e00
+6000cbb3
+1fe0fe01
+d8c04b30
+98c08c00
+e8c18000
+6001cbf2
+6800cb30
+1fe37e00
+1fe17e03
+6000cbf8
+20600000
+60024bdd
+da200000
+df200004
+d8c04bdd
+e8c08000
+9a20a200
+c20001e8
+1a227e00
+60014c66
+6800cc66
+6808cc67
+9840fe00
+6000cc68
+20600000
+6800cbb5
+1fe0fe02
+6000cbb7
+6800cbb6
+6000cb71
+6800cbb5
+1fe9fe00
+6808cbb4
+18410403
+18438400
+9841fe00
+6808cbf1
+9840fe00
+e0a08000
+6800cbb5
+98007200
+d8c04b51
+20207f01
+6808cbc0
+20400208
+6008cbc0
+20600000
+2040020c
+18408401
+18410403
+20600000
+6800cbdd
+1fe17e03
+1fefa204
+58004bc6
+9a20fe00
+98408c00
+e8c08000
+6000cbbf
+20600000
+7844fc00
+7843fc00
+58555555
+98001e00
+6800cbbf
+1fed8400
+79200401
+18431c00
+20600000
+204053c4
+68024bdd
+98001200
+20402918
+6808cbbf
+2040291f
+58000500
+20402a8f
+20402924
+20400215
+7857fc00
+7826fc00
+7830fc00
+78507c00
+78287c00
+68014bb8
+98003600
+37c18400
+242c0267
+7846fc00
+7825fc00
+7823fc00
+7824fc00
+20400260
+6000cc69
+6808cc68
+98467c00
+24228263
+20400260
+6000cb2f
+6800cbfb
+1fe67c02
+20228243
+6800cb2f
+6808cbb6
+a8400e00
+24208263
+20400260
+e0a08000
+1fe97e00
+1fe1721f
+2022824b
+20400260
+e0a08000
+c2000248
+18a22200
+20400260
+6000ccf0
+1a220a00
+09800018
+78287c00
+db600664
+1fef7e00
+1ff17e00
+e0a18000
+7845fc00
+20230263
+7837fc00
+68008017
+1fe0a200
+20402981
+7846fc00
+20402918
+6800ccf0
+2040001e
+20600000
+09800008
+19897e00
+20600000
+784dfc00
+7845fc00
+2040264d
+20600000
+20200263
+20402918
+6808cbbf
+20202933
+204053c4
+68024bdd
+98001200
+20400215
+20400268
+79202a00
+782efc00
+78307c00
+7850fc00
+19317e00
+1fecfe00
+1ff1fe00
+08008628
+784efc00
+782dfc00
+7823fc00
+7824fc00
+6800cc68
+08008608
+6800cbb7
+98007200
+d8c04b71
+e8c08000
+08008608
+c2000281
+78247c00
+08008618
+78447c00
+37d38200
+20000064
+784efc00
+784dfc00
+20600000
+20407fe9
+680a4bd6
+1c427e00
+98467c00
+24412d18
+1fe22400
+68024bd6
+6808cbda
+98408400
+1a427e00
+98467c00
+24610000
+793ffe1c
+60024bd6
+20207fe7
+204029bb
+207a0000
+6808cc6f
+da200d9e
+204002a2
+6008cc6f
+20600000
+1a227e00
+98408a00
+68008018
+e0a08000
+18408401
+18410407
+20600000
+d8400000
+df200008
+1a220c00
+e8c08000
+98408400
+c20002ac
+18497e00
+1fe20400
+c6930000
+1fe6fc0a
+20407f86
+1807fe00
+1ff27e00
+18070400
+98418400
+20600000
+20600000
+c6130000
+204002c3
+6800c040
+c30002c0
+680080a0
+247a0000
+58000000
+600400a1
+20600000
+204002cc
+204002c0
+20403ebf
+68120070
+681a0078
+98418400
+18440400
+601a007c
+20600000
+6800cafe
+207a0000
+202003c6
+20403416
+203582d7
+6800c1de
+6000cc6c
+20400409
+6800c685
+6000c6da
+204043ca
+204002dc
+202074b9
+6800cc6c
+6000c1de
+20600000
+2455831b
+204002fa
+20758000
+20400350
+6800cb26
+c28102e4
+20404083
+c00282e8
+20200338
+204002d9
+6800c210
+20600000
+680246d3
+c4088000
+c3818000
+c6130000
+20404482
+d8e00003
+204043ce
+58000000
+600146ae
+6000c6b4
+60014be2
+204042ca
+20200155
+680246d3
+c30a3d66
+6800c77a
+c07fbd66
+20203d80
+70421276
+20203d36
+204002fa
+204040c0
+6800c6e0
+c002c0d5
+204040d9
+c018030a
+c018830c
+204040d1
+200003e8
+20200300
+704afe01
+2040640f
+204002fc
+20206411
+20400311
+202040e0
+20400311
+6800c6de
+c03840e8
+7046e001
+20600000
+58008006
+20406413
+20002ee0
+202002f5
+58000006
+20406414
+1fe1fe08
+1fed7e00
+1fe0fe06
+20206413
+2040008e
+68108a00
+793ffe04
+60108a00
+20403e1e
+58001802
+600140bd
+58000000
+60014154
+20403e54
+2040659c
+680246d3
+2feffe19
+2440e5c2
+2040443f
+2040032d
+20400376
+202065df
+204033c4
+2022c316
+20203dcb
+d8400002
+da200aaa
+da400062
+202065d1
+d8400002
+da200a9a
+da400062
+202033c8
+202001ab
+680246d3
+c30f0340
+68008abd
+2fec0003
+24208340
+204002fc
+20400315
+6800c71f
+6000c71e
+680246d3
+c4088000
+20400347
+203401ab
+20200188
+df200002
+d8c04bdd
+20407fe7
+5800ffff
+e8c90000
+98467c00
+2442ffe9
+c200034b
+20600000
+58000367
+600141f5
+58000355
+60014ce6
+20600000
+2020035a
+20404401
+6801469f
+207a0000
+2020006e
+2040047c
+20200357
+6801469f
+207a0000
+70480601
+70480702
+20600000
+20405814
+70479c01
+20200311
+20407e34
+20403d6a
+20203ee0
+1a627e00
+c01c836c
+c01d037a
+c01e0385
+2020417d
+70478b01
+d8e00003
+204043d2
+58000000
+60014707
+7046a700
+2040405d
+2040006e
+20400376
+202065d1
+da204bdd
+da40005b
+d8400004
+20600000
+704cf500
+204002d9
+204001ce
+2020659a
+7041bd00
+20404316
+df200003
+d8c04722
+20400349
+203403c2
+202002e5
+20203f8d
+78347c00
+68120138
+79347e1a
+6012004c
+20402c21
+20400390
+204074bd
+20404482
+20403e9f
+202002c5
+6800cafe
+207a0000
+704afe00
+20200315
+20400399
+204003b9
+2040039e
+20404234
+2020423a
+da604807
+da40039c
+2020336d
+70480600
+20600000
+6800c6f5
+c2824394
+20404083
+c00383aa
+6800c685
+6000c6da
+6800c6db
+c1008000
+7046db01
+d8e00009
+204043d2
+202043ca
+70479e28
+204003ad
+202043b0
+da6046da
+da4003b0
+2020336d
+68014682
+2feffe0b
+2040c2d4
+68014682
+2feffe07
+2040c392
+d8e00009
+204043ce
+202043b8
+6800c79d
+207a0000
+6800c79e
+203a03c0
+1fe0ffff
+6000c79e
+20600000
+70479d00
+2020340a
+70479d01
+70479e28
+20600000
+2040424a
+6800c6e0
+c00303c9
+20203d81
+6800c77a
+205a03cf
+6800c77a
+c000bd8a
+c001bd8e
+20203d8c
+70477a01
+20600000
+78547c00
+58000000
+6003469b
+20403fb5
+20404079
+2040407e
+20404099
+24740000
+20203fa0
+70479d00
+70479e00
+280ffe26
+204081ce
+2020426d
+204002d9
+70479c00
+68014682
+c28583e5
+680246d3
+c30c03e5
+20403418
+68014687
+600146ac
+70016d06
+58000000
+600146b0
+600146ae
+d8e00007
+204043ce
+204043ca
+202042c4
+58000000
+600146ac
+20400311
+202042cb
+68108077
+1fe17efd
+60108077
+68188073
+18418402
+60188073
+204063ee
+184104fd
+2000000d
+204063f2
+60188073
+20600000
+204062bc
+243a7ddb
+68008a99
+c584fdd6
+c0090406
+20207dca
+20405890
+247a0000
+20205abf
+704cf101
+704cee00
+20600000
+6800ccee
+1fe0fe01
+6000ccee
+20600000
+6800ccee
+1fe67c02
+24410418
+6800ccee
+c1000000
+1fe0ffff
+6000ccee
+20600000
+704cee03
+20600000
+20600000
+68014682
+c3858000
+c3838000
+c3830000
+da204c77
+204002a9
+6008ccef
+58000082
+c5130425
+58000080
+98467c00
+2421043d
+6800ccee
+1fe67c02
+2421042d
+6800ccee
+c000043e
+20600000
+6800ccee
+c1900000
+704cee00
+6808ccef
+58000077
+c5130434
+58000075
+98467c00
+24610000
+6800ccf1
+c0000445
+1fe0ffff
+6000ccf1
+c0000445
+7041de00
+20600000
+704cee00
+6800ccf1
+c0010443
+1fe0fe01
+6000ccf1
+c000843b
+7041de02
+20600000
+7041de04
+20600000
+60088017
+1840a200
+20402981
+58000500
+20402a8f
+70890601
+7089003c
+708901e0
+2000000a
+70890201
+7089023d
+2000000a
+708903b7
+2000000a
+7089027d
+6800c1de
+c001045f
+c0020464
+c0100473
+20400469
+708955d0
+708956e0
+7089586c
+2020294b
+2040046e
+708955d0
+708956e0
+7089583c
+20202953
+20400469
+708955d0
+708956c0
+7089586c
+2020295b
+70894c5b
+70894d96
+70894e2c
+70894f46
+20600000
+70894cfb
+70894def
+70894eec
+70894f5e
+20600000
+708956c5
+708955d0
+20600000
+18002a08
+202028fa
+708968e6
+20402978
+70804205
+20600000
+6800cb2e
+1fe0fe01
+6000cb2e
+1fe67c32
+20210488
+1fe67c64
+20210493
+1fe67c96
+2021049b
+1fe67cc8
+202104a3
+20600000
+58000005
+60014b28
+58000000
+60014b2a
+6000cb2c
+6000cb27
+6000cb2d
+78347c00
+da200007
+da404b27
+20600000
+58000005
+60014b2a
+58000000
+60014b28
+6000cb2c
+6000cb27
+6000cb2d
+2020048f
+5800fffb
+60014b28
+58000000
+60014b2a
+6000cb2c
+6000cb27
+6000cb2d
+2020048f
+6800cb2e
+c06404ad
+5800fffb
+60014b2a
+58000000
+60014b28
+6000cb2c
+6000cb27
+6000cb2d
+2020048f
+704b2e00
+202004a5
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/romcode.rom
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/romcode.rom	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/romcode.rom	(working copy)
@@ -0,0 +1,24576 @@
+20402abc
+44804000
+20800000
+2040640d
+2040296c
+204065a3
+20402a96
+20404d6a
+4480c000
+20406a03
+20405cf6
+20407ccc
+204032d8
+2455e89c
+44814000
+2055b2e3
+2040756a
+2055ab41
+4481c000
+204076dc
+20407aaf
+2040756d
+2040535c
+44824000
+20402038
+204032ed
+2040208f
+204022f8
+2040236a
+20402021
+20402b6a
+20402c72
+20202012
+20402026
+c6848000
+793f8009
+20402223
+202053ce
+4482c000
+2040225e
+2422a02f
+2040220a
+1a208c01
+e8c08000
+c2805360
+c280a166
+202023cf
+2040222b
+1f227c00
+20628000
+2040220a
+68008030
+c281a0d3
+68008031
+c280a166
+202023cf
+6800c1ce
+207a0000
+c000a048
+c001204d
+c001a050
+c002a055
+c00da045
+20402257
+20628000
+2040225a
+20628000
+7041ce00
+20600000
+70049b1b
+7041ce00
+20600000
+7920001c
+793f801e
+70008fff
+70008d1f
+20202043
+793f801c
+18003600
+20202043
+2040225a
+20628000
+18000401
+70016e05
+2020205c
+44834000
+680341d0
+203a2043
+70468101
+70005503
+2020205b
+18000425
+4483c000
+680080f1
+203a2062
+1fe9fe00
+1ff27e00
+1fe0ffff
+6000c0a6
+600080f0
+70008e1f
+793f800c
+2040223b
+2422a083
+20402a6f
+60008077
+6008807c
+680341d0
+60030040
+44844001
+20407f15
+18007e00
+2841fe01
+7d20fe05
+79207e03
+60008030
+700a9903
+20407d86
+18007e00
+7920fe04
+6000804c
+58000000
+79207e01
+60008031
+7834fc00
+20402223
+7854fc00
+18000e03
+680140b9
+20407f08
+20202043
+4484c001
+680341d0
+60030040
+2841fe01
+2020a089
+20202043
+d8a00101
+df200008
+20407ec6
+700a9904
+20407d86
+20202043
+c68e0000
+18000e01
+20407f16
+7d3a001c
+243a2095
+20600000
+44854001
+680940bb
+18000e04
+2040271c
+20740000
+204028a4
+18004800
+20618000
+793f800b
+793f8000
+1c40c201
+280ffe1e
+7920c802
+2c200400
+2420a0be
+4485c001
+68008012
+1fe0fe01
+60008012
+204028d8
+204028d2
+204028f2
+20402a51
+20402a56
+20402a64
+2040264d
+204020b1
+2020209c
+44864001
+6800808d
+1fe0ffff
+6000808d
+20610000
+70008d1f
+6800808f
+1fe0ffff
+6000808f
+20610000
+7940001e
+70008fff
+20600000
+4486c001
+204028d8
+204028cc
+204028f2
+20402a5b
+204029eb
+20402a0d
+202c20c8
+204020b1
+2020209f
+44874001
+204029bb
+20402a6b
+2040251e
+793f8001
+c6858000
+4487c001
+68008013
+1fe0fe01
+60008013
+20600000
+44884002
+7834fc00
+78387c00
+680140b5
+203a20db
+18000e08
+20407f16
+247a0000
+4488c002
+680940b7
+18000e28
+2040271c
+20342114
+18000e03
+20407f16
+243a20f0
+6800804c
+c28220e6
+202020e9
+d8a00101
+df200008
+20407ec6
+44894002
+70003000
+20405cf7
+70468100
+700a9913
+20407d86
+20202114
+4489c002
+18001600
+34730200
+680080f2
+1fe0ffff
+9c42fe00
+2fe00600
+2420a0f0
+18827e00
+60008181
+18004c00
+18004800
+448a4002
+2021a114
+204028dc
+d9600600
+34730200
+448ac002
+680200f2
+98004200
+1fe0fe01
+600200f2
+280ffe0c
+7920c802
+2c200400
+2420a128
+6800800c
+1fe0fe01
+6000800c
+204028d2
+20402a51
+20402a56
+20402a64
+2040264d
+2040211a
+202020fc
+448b4002
+7854fc00
+680140b5
+207a0000
+18000e08
+20207f08
+448bc002
+6800808e
+1fe0ffff
+6000808e
+20610000
+70008e1f
+680080f0
+1fe0ffff
+600080f0
+20610000
+7940000c
+6800c0a6
+600080f0
+20600000
+448c4003
+204028cc
+20402a5b
+204029eb
+20402a0d
+202c2130
+2040211a
+20202101
+2040264d
+6800800d
+1fe0fe01
+6000800d
+18003600
+680200f2
+448cc003
+20402a4f
+204028dc
+1cc0cc01
+1c2143fd
+1c8149fc
+204028d2
+20402a51
+20402a56
+20402a64
+1c427e00
+60020161
+18000800
+18000202
+20402a6b
+20402766
+448d4003
+20402a4d
+1c21c202
+1c8149fc
+204028cc
+20402a5b
+204029eb
+20402a0d
+204c264d
+202c2155
+68008010
+203a20fc
+1fe0ffff
+60008010
+20202136
+448dc003
+6800800e
+1fe0fe01
+6000800e
+20402435
+204022f2
+202c215f
+20402455
+243a215a
+202020fc
+448e4003
+68008030
+793ffe03
+60008030
+20402440
+7854fc00
+20600000
+448ec003
+7834fc00
+78387c00
+204021e1
+20740000
+20402c69
+20402a4f
+1c40c201
+204028e2
+18004803
+20406cc2
+20402489
+204028d2
+20402a51
+20402a56
+20402a64
+20402762
+448f4003
+20405d08
+204022e4
+2436a180
+20402a88
+20402728
+6800800f
+1fe0fe01
+6000800f
+448fc003
+20406caa
+2040218b
+24748000
+204026f3
+243a2188
+7854fc00
+20600000
+20402489
+204022da
+20202177
+2036a18e
+20402a7f
+2021219c
+204021a7
+2434219c
+6800804c
+c4020000
+c3818000
+6800804b
+c3818000
+204021ae
+247a0000
+6800816e
+1fe0ffff
+6000816e
+247a0000
+20206006
+44904004
+2040245d
+7854fc00
+6800804c
+c28221a2
+20600000
+6800804c
+c3818000
+d8a00101
+df200008
+20207ec6
+4490c004
+78347c00
+6800804b
+c4018000
+204021ae
+247a0000
+20207fe9
+68008072
+1fe0ffff
+60008072
+20600000
+44914004
+68008030
+c283a1bb
+680089b5
+203a21bb
+7009b500
+700a9918
+20407d86
+202021bb
+4491c004
+20402254
+68008030
+79207e07
+60008030
+7041bd01
+68008055
+c08b21c3
+20600000
+7009b501
+68008030
+793ffe07
+60008030
+20600000
+44924004
+78547c00
+68010032
+d840ffff
+98467c00
+24628000
+68020034
+203821d3
+9d067e00
+202021d4
+9c467e00
+1fe67c04
+24610000
+18007e00
+60010032
+20207fe7
+1fe20400
+4492c004
+600a0034
+70455b01
+5800ffff
+60010032
+70007301
+20600000
+44934004
+204021c9
+24740000
+78547c00
+70001120
+793f800b
+20402a4f
+204022e6
+c505a1f4
+20402455
+243a21e7
+4493c004
+78547c00
+1c427e00
+600240ca
+78387c00
+7834fc00
+700a992a
+20207d86
+44944005
+20402a4d
+d8200010
+204022dc
+78587c00
+7854fc00
+20402818
+20402435
+4494c005
+2040247c
+2036a202
+20402455
+243a21fc
+202021ec
+68008031
+793ffe01
+60008031
+20402a88
+20402841
+78347c00
+700a992b
+20207d86
+44954005
+79200009
+1a227e00
+6001001e
+18007250
+d8a0043f
+1a208c01
+e8c08000
+1a220c00
+c2807f01
+d8a00030
+20407f01
+78577c00
+68008077
+98000800
+70008a01
+2034a21c
+70008a01
+68008030
+c4008000
+68008073
+6000808a
+68008074
+6000808b
+20600000
+4495c005
+6801001e
+98000a00
+18007250
+d8c0043f
+203b7f01
+d8c00030
+20207f01
+df200001
+68088015
+18408401
+2841fe01
+2420a231
+d8400000
+60088015
+184ffe50
+da204040
+9a20a200
+ea208000
+c280a239
+c3800000
+c3818000
+c200222d
+20600000
+44964005
+da60226a
+20402261
+24628000
+1a227e00
+6001001e
+18007c00
+20600000
+20402725
+2020a24b
+6801001e
+1fe08a17
+68008047
+e0a08000
+da6022aa
+20202261
+68008047
+2feffe03
+2020a250
+18007c01
+20600000
+18007c00
+20600000
+da6022a7
+20202261
+6809001e
+da6022cf
+20202261
+6808c1cf
+da602275
+20202261
+4496c005
+680b41d0
+da60226e
+20202261
+da60227b
+20202261
+da6022c6
+44974005
+da204040
+df200001
+ea208000
+1a627a00
+1a20a250
+c2002264
+18007c01
+20600000
+c2802266
+c281a266
+18007c00
+20600000
+c281a270
+c3002266
+1a208c10
+e8c30000
+98467c00
+20628000
+20202266
+c3002266
+1a208c16
+e8c08000
+98467c00
+20628000
+20202266
+c300a266
+204022b3
+20402297
+98467e00
+1fe0fe01
+20212291
+18c22400
+60048aa2
+6800c4c0
+243a2289
+68048aa2
+1a420c00
+1fe0fe05
+2020228c
+68048aa2
+1a420c00
+1fe0fe14
+24212266
+18424200
+204022bf
+18007c00
+20600000
+98002400
+1a208c02
+e8c10000
+203a228d
+204022bf
+2020227c
+1ff11600
+196c9600
+2022a2a1
+29601e0f
+24608000
+18511600
+196c9600
+24628000
+7920041c
+20600000
+18511600
+196c9600
+29601e0f
+24608000
+79207e1c
+20600000
+c3002266
+18007c00
+20600000
+c3002266
+1a208c01
+e8c08000
+c2802266
+1a208c17
+e8c08000
+c301a266
+18007c00
+20600000
+1a208c01
+e8c88000
+1c427e00
+284ffe01
+1a208c04
+e8ca0000
+20608000
+1a208c08
+e8c30000
+20402854
+1d027e00
+20600000
+1a208c02
+1a208a04
+e8c10000
+98409600
+19627e00
+e0a20000
+20205449
+c300a266
+204022b3
+9b60fe00
+9b60fe00
+98e0fe00
+98467c00
+24212266
+18007c00
+20600000
+c3002266
+18427e00
+9a267c00
+203f2266
+1a208c01
+e8c08000
+c2802266
+ea208000
+793ffe07
+e2208000
+20202266
+4497c005
+20402a4f
+1c40c201
+204028e2
+18004803
+204028d2
+20402a51
+20402a56
+20402a64
+20202762
+44984006
+20402a4d
+1c40c201
+204028e2
+18004803
+204028cc
+2040242a
+204029f1
+20402a5b
+204029eb
+20402a0d
+246c0000
+204029bb
+2020251c
+4498c006
+68008181
+98000800
+18000201
+204022da
+202022e4
+6800c093
+c4000000
+18000e04
+20407f16
+247a0000
+680940ad
+18000e04
+2040271c
+20740000
+20402308
+18000e04
+680140af
+242c7f08
+180a7e00
+9ea17e00
+20207f08
+44994006
+70018100
+78587c00
+78577c00
+204028a4
+1c4143fc
+18004801
+204028d8
+204028cc
+7940001d
+68008006
+1fe0fe01
+60008006
+204028f2
+204029eb
+20402a14
+246c0000
+4499c006
+18003600
+204028f9
+68008007
+1fe0fe01
+60008007
+204028d8
+20402a4d
+1c21c202
+18004801
+204028d2
+204028f2
+20402a51
+20402a5f
+1c427e00
+60020161
+20402a64
+18000202
+18000800
+20402a6b
+20402766
+20402332
+1c2143fd
+1cc0cc01
+20600000
+449a4006
+6800c0d1
+207a0000
+d8a0018e
+6800c515
+1fe27200
+1fe0fe01
+e0a08000
+18a20400
+1fe0fe01
+600141dc
+18420a00
+58000009
+e0a08000
+d8c04516
+20407f01
+da60458d
+df200004
+20402354
+da604577
+df200001
+20402354
+1800020a
+7041db02
+5800018e
+6001016f
+20402a4d
+204028d2
+20402a51
+20402a5f
+20402a64
+20402a6b
+20402766
+20600000
+18a20400
+1a620c00
+e8c08000
+207a0000
+1fe3fe00
+c2002358
+1fe22200
+1fe0fe02
+1fe20e00
+680141dc
+98e0fe00
+600141dc
+18420a00
+1a227e00
+1fe0fe01
+e0a08000
+1a620c00
+e8c08000
+e8c08000
+e0a08000
+1a227200
+20207f01
+6800c093
+c4008000
+18000e05
+20407f16
+247a0000
+680940b1
+18000e28
+2040271c
+20740000
+18000800
+70001008
+793f800b
+2040237a
+18000e05
+680140b3
+20207f08
+449ac006
+78587c00
+204028a4
+68008008
+1fe0fe01
+60008008
+18004c00
+204028e2
+1c40c201
+18004802
+449b4006
+204028cc
+204029eb
+20402a14
+246c0000
+204028f9
+68008009
+1fe0fe01
+60008009
+18003600
+20402a4d
+1c21c202
+18004801
+204028d2
+20402a51
+20402a5f
+20402a64
+2040264d
+18000800
+d9600600
+35330200
+1d01d003
+1c2143fd
+449bc006
+1cc0cc01
+204028cc
+204029eb
+20402a07
+242c23a4
+20402a6b
+2040251e
+c505a3ab
+449c4007
+68008010
+207a0000
+1fe0ffff
+60008010
+20402a4f
+2020239b
+449cc007
+793fd001
+79205000
+6800800a
+1fe0fe01
+6000800a
+20402a4d
+1c21c202
+204028d2
+20402a51
+20402a5f
+20402a64
+2040264d
+2d000603
+2020a3bc
+37cb8200
+202023b8
+68020165
+1fe1fe03
+1fe25000
+449d4007
+68030178
+60030040
+20402435
+2040247c
+2036a3c8
+20402455
+243a23c3
+20600000
+449dc007
+20402440
+2040223b
+24628000
+70003100
+20402841
+20202223
+449e4007
+20402850
+204023f3
+20740000
+449ec007
+20402c69
+20406caa
+20402514
+2436a3e2
+20402a88
+20406cc2
+20402489
+20402757
+20402728
+20405d08
+6800800b
+1fe0fe01
+6000800b
+20402841
+449f4007
+20402bb1
+20402a7f
+202123eb
+204021a7
+243423eb
+204026f3
+243a23d3
+20600000
+449fc007
+70015100
+70017f00
+2040245d
+793f8011
+20407fb0
+68008030
+20600000
+44a04008
+204021c9
+24740000
+18820400
+20402a6f
+60008181
+18420800
+70001120
+44a0c008
+20402a4f
+18000202
+2040274f
+1c427e00
+60020161
+20402762
+20402a4d
+7837fc00
+204024f6
+202c240d
+204028f9
+20402455
+243a23fb
+c6820000
+70007c34
+79200003
+20600000
+78387c00
+20402435
+204028a4
+44a14008
+204022f2
+202c2419
+20402455
+243a2410
+78587c00
+1d027e00
+600240ca
+20600000
+7834fc00
+c582241f
+793f8004
+70007c03
+70007d33
+204062f8
+18827e00
+60008077
+18007e00
+60030038
+68008031
+79207e01
+60008031
+20402a88
+7854fc00
+78347c00
+20600000
+44a1c008
+7856fc00
+793f8005
+793f800a
+793f8010
+793f800f
+68008047
+793ffe05
+79207e04
+60008047
+20600000
+44a24008
+70001120
+70004750
+680140bf
+6001003e
+1c427e00
+600240ca
+20780000
+1d027e00
+600240ca
+20600000
+44a2c008
+20405d04
+20402459
+60008046
+58000000
+6001025d
+58001c80
+60010051
+68008030
+79207e00
+60008030
+70004b00
+70004c00
+7000a000
+20202a88
+44a34008
+18007e00
+600441be
+e0a40000
+204021c5
+20202254
+68008011
+1fe0ffff
+60008011
+20600000
+6800c0cf
+1fe0fe01
+6000c0cf
+20600000
+44a3c008
+6800c1ce
+c001a462
+68008048
+c080a466
+20404d06
+2422a466
+204021a4
+7041ce00
+44a44009
+204033af
+204026e9
+700a9902
+20407d86
+20405cf7
+20404d6b
+2040757d
+68008030
+793ffe00
+60008030
+70468100
+6800804c
+2fe18000
+2020a476
+793f8001
+68008047
+c301a478
+6800804b
+c4030000
+793f8002
+20600000
+44a4c009
+68008174
+207a0000
+1fe20800
+20402514
+24768000
+18000200
+20402757
+18827e00
+60008077
+18007e00
+60008174
+20600000
+44a54009
+68008030
+c3012496
+18000207
+c583a495
+20402725
+2420a496
+20372496
+204024c1
+58000002
+600140c8
+20600000
+24770000
+44a5c009
+20402243
+2422a4a7
+68008047
+c301a4b0
+c502a4b4
+6800817f
+c28324ba
+680140c8
+1fe0ffff
+600140c8
+203a24a5
+6800c0c5
+98000200
+20600000
+44a64009
+20402687
+20402725
+2020a4b0
+2040600a
+203424be
+6800804b
+c28324c0
+c502a4b4
+6800817f
+c28324ba
+18000201
+20748000
+18000200
+20600000
+44a6c009
+68008019
+98000200
+c1808000
+18000200
+20600000
+68008158
+1fe1020f
+79200005
+20600000
+18000213
+202024c1
+204024ca
+44a74009
+68088047
+79200403
+60088047
+18227e00
+6000c0c5
+5800ffff
+600140c8
+20600000
+44a7c009
+6800804c
+2feffe05
+680141dc
+2020a4e0
+18000203
+1fe67c11
+20610000
+18000204
+1fe67c1b
+20610000
+1800020a
+1fe67c79
+20610000
+1800020b
+1fe67cb7
+20610000
+1800020e
+1fe67ce0
+20610000
+1800020f
+20600000
+18000203
+1fe67c11
+20610000
+18000204
+1fe67c36
+20610000
+1800020a
+d840016f
+98467c00
+24610000
+1800020e
+d84002a7
+98467c00
+24610000
+1800020f
+20600000
+68008030
+c300a4f5
+68010032
+203a24f5
+243724f7
+20402a4f
+1d00c201
+78287c00
+6801003e
+1fe37e00
+d8400500
+9840fe00
+20402a24
+204028ea
+18004803
+204028cc
+2040242a
+204029f1
+44a8400a
+6801003e
+1fe37e00
+20402a24
+204029eb
+7826fc00
+6801003e
+d84003bb
+9840b600
+37c18400
+1b420400
+600b009a
+7846fc00
+246c0000
+dd2003bb
+1c225000
+2035ab05
+20600000
+44a8c00a
+204024f0
+242c28f9
+204029bb
+c588a51c
+680100f6
+1fe0fe01
+600100f6
+1c230400
+18419c40
+44a9400a
+7823fc00
+78257c00
+7825fc00
+09800003
+198cfe00
+6000815d
+09800004
+08008007
+19827e00
+60008019
+09800003
+198cfe00
+6000815e
+68008019
+1fe67c03
+20212533
+c003a533
+6800804c
+2feffe05
+7920aa01
+44a9c00a
+09800008
+7845fc00
+78457c00
+20232631
+c588a53c
+680100f8
+1fe0fe01
+600100f8
+44aa400a
+6800815d
+2fe00e00
+7920800a
+2020a54c
+a8800e00
+2020a54b
+c583a64d
+680880b0
+a8400e00
+2420a64d
+68008047
+793ffe05
+79207e04
+60008047
+7836fc00
+44aac00a
+68008019
+1fe20200
+c505255b
+6808815e
+68008047
+793ffe00
+284ffe00
+7920fe00
+284ffe01
+7920fe01
+60008047
+284c0001
+2020a55b
+20402687
+44ab400a
+d8400000
+20402a1c
+18217e0f
+c000a587
+c000264d
+c0012659
+6808815e
+68008047
+a8400800
+2420a569
+c5852568
+c303a569
+7920000f
+44abc00a
+18227e00
+c001a589
+c002258d
+c003a578
+c004258c
+d8400004
+20402a1c
+c0052588
+c005a58b
+d8400008
+20402a1c
+c0072588
+c007a58b
+20600000
+44ac400b
+7826fc00
+7824fc00
+78277c00
+d8a000d1
+1800721e
+09800008
+19897e00
+e0a08000
+c200257e
+c583a64d
+09800010
+7d230008
+2023263d
+20202620
+2020264d
+79200010
+78267c00
+2020258e
+79200010
+79202a02
+7826fc00
+44acc00b
+c500a64d
+2aac0001
+2020a59a
+7843fc00
+7826fc00
+78467c00
+1c409602
+34530400
+242c263d
+79200010
+7823fc00
+44ad400b
+78277c00
+7824fc00
+09800003
+198cfe00
+60008180
+09800005
+c50825a5
+19897200
+1f297200
+202025a8
+09800005
+19837200
+09800003
+44adc00b
+1f227e00
+6001015f
+203a25e8
+9ea67c00
+2021263d
+44ae400b
+793f8000
+68008180
+1fe17e03
+d8a00551
+c001a5ba
+c508a5e4
+68008180
+1fe17e03
+c00125bf
+c000a5d3
+2020263d
+6801015f
+1fe67c70
+2421263d
+c507a620
+202025e4
+44aec00b
+c507a620
+6801015f
+d84002e0
+98467c00
+2021263d
+68008263
+c30025c9
+c300a5ce
+2020264d
+70026101
+6801025d
+c080264d
+d8a01000
+202025e4
+70026102
+6801025f
+c080264d
+d8a01400
+202025e4
+44af400b
+c507a620
+6801015f
+d84002e0
+98467c00
+2021263d
+68008261
+c000a5dd
+c00125e1
+2020264d
+d8a01000
+6801025d
+98a08a00
+202025e4
+d8a01400
+6801025f
+98a08a00
+09800008
+19897e00
+e0a08000
+c20025e4
+44afc00b
+09800010
+20232637
+6800c363
+c000a64d
+c508a60d
+c507a64a
+68008180
+2fe00603
+2020a60d
+6801015f
+203a260d
+44b0400c
+68008261
+c000a5f9
+c0012603
+20202a8c
+6801025d
+6809015f
+9840fe00
+6001025d
+c0002a8c
+68091000
+18408404
+98467c00
+2042a747
+2020260d
+6801025f
+6809015f
+9840fe00
+6001025f
+c0002a8c
+68091400
+18408404
+98467c00
+2042a74b
+2020260d
+44b0c00c
+6808804c
+68008180
+2fe00603
+79208406
+7d208407
+6008804c
+2420a616
+79200001
+c588a620
+284ffe06
+2020a620
+680100fa
+1fe0fe01
+600100fa
+79200005
+793f8407
+793f8001
+6008804c
+44b1400c
+6808815e
+68008047
+79207e05
+284ffe02
+7920fe02
+280ffe0a
+7920fe07
+60008047
+6801015f
+243a264d
+6800804c
+793ffe07
+6000804c
+68008180
+2fe00e01
+2020264d
+44b1c00c
+7856fc00
+6801001a
+1fe0fe01
+6001001a
+2020264d
+6801001c
+1fe0fe01
+6001001c
+2040263e
+c588a63d
+79200005
+2020264d
+44b2400c
+68008180
+2fe00603
+2420a646
+6808804c
+793f8406
+6008804c
+20600000
+6808804c
+793f8407
+6008804c
+20204c0b
+68008047
+79207e05
+60008047
+44b2c00c
+784efc00
+784e7c00
+7846fc00
+78467c00
+7844fc00
+78477c00
+7843fc00
+2030a8f9
+37d38200
+20000064
+202028f9
+44b3400c
+7824fc00
+78267c00
+09800048
+2feffe3a
+79208000
+1c020400
+57e04000
+57e03c00
+782afc00
+380bffff
+380cffff
+20000020
+29a80000
+1d827e00
+60018178
+1da27e00
+6000817b
+18424000
+2020a66e
+2020263d
+44b3c00c
+09800048
+57e03e00
+57e00800
+57e05c00
+57e02400
+18007e00
+09800010
+2023263d
+5ffffffc
+9a417e00
+60020165
+1ba27e00
+60018175
+1b827e00
+60008173
+18827e00
+60008174
+1dc27e00
+6001017c
+1c227e00
+08008220
+28201e02
+7920800b
+2020264d
+44b4400d
+68008047
+c4018000
+793ffe03
+79407e06
+60008047
+6800c0c5
+c009a69c
+c1038000
+6800804b
+c4030000
+793ffe06
+79207e07
+6000804b
+793f8002
+68014246
+247a0000
+6800804b
+793ffe07
+6000804b
+2020525d
+44b4c00d
+680084b7
+1fe37e00
+c008a6b8
+c00926c0
+c00c26e9
+c03fa6a8
+c1818000
+680084b8
+c015a6b0
+c008a6ab
+20600000
+680084b8
+79207e07
+20600000
+20748000
+68008030
+c3820000
+70007c31
+20600000
+20748000
+68008031
+2feffe04
+2020a6b5
+20600000
+793ffe04
+60008031
+20600000
+44b5400d
+6800804c
+79207e02
+6000804c
+70801101
+68008030
+2feffe04
+20600000
+44b5c00d
+6800804c
+793ffe02
+6000804c
+70801100
+20600000
+44b6400d
+1c427e00
+6002420c
+1c40a203
+2034a6cc
+1d00a203
+68090032
+1a227e00
+793ffe1b
+9846fc00
+68010075
+20407f86
+18072600
+9a667e00
+202126d6
+9840fe00
+9a20fe00
+60020034
+70455b00
+68008030
+79207e01
+60008030
+68008073
+6000808a
+58000000
+6001c169
+6001c16c
+6000c159
+700a990b
+20407d86
+680140c1
+6001003e
+24748000
+18808fff
+20600000
+44b6c00d
+68008030
+c4008000
+793ffe01
+60008030
+680140bf
+6001003e
+7855fc00
+700a990c
+20207d86
+44b7400d
+78377c00
+68008030
+c280a700
+c6088000
+68008047
+c3818000
+68008048
+247a0000
+6800804b
+c3830000
+18007e00
+20600000
+c301270f
+6800808a
+c0012706
+68008047
+c281a718
+c5842718
+2434a718
+68008048
+243a2718
+680080ef
+1fe0ffff
+600080ef
+243a26fe
+7000ef10
+20202718
+6800808a
+c080a718
+6800808b
+203a2718
+1fe0ffff
+6000808b
+68008047
+c3818000
+24768000
+6800808a
+1fe0ffff
+6000808a
+20600000
+44b7c00d
+78487c00
+18423600
+20402260
+78547c00
+24628000
+18003600
+78347c00
+20600000
+6800c158
+a881fe00
+20600000
+44b8400e
+793f8001
+70026a00
+68008263
+207a0000
+2feffe00
+d8c01000
+2040cd79
+44b8c00e
+6800826a
+c000a73b
+70026a00
+68008263
+c4008000
+d8c01400
+20404d79
+6800826a
+c000a741
+20600000
+68008263
+793ffe00
+60008263
+58000000
+6001025d
+20600000
+68008263
+793ffe01
+60008263
+58000000
+6001025f
+20600000
+68008263
+79207e00
+60008263
+20600000
+68008263
+79207e01
+60008263
+20600000
+44b9400e
+1d00c201
+204028ea
+18004803
+204028d2
+20402a51
+20402a5f
+20202a64
+44b9c00e
+20402a4d
+1d027e00
+680a40ca
+98467e00
+c1808000
+28203e00
+2420a761
+68008019
+207a0000
+2040274f
+28203e10
+2020a64d
+1c230400
+18419c40
+44ba400e
+7823fc00
+78257c00
+782dfc00
+793f8010
+18827e00
+08008603
+18227e00
+08008604
+68008047
+08008004
+08008603
+78247c00
+08008608
+784dfc00
+78447c00
+78457c00
+793faa02
+d8400000
+20402a1c
+44bac00e
+18217e1f
+c009a7b4
+c000264d
+c000a64d
+c0012797
+c001a7c5
+c00227cb
+c003a78c
+c00427ca
+d8400004
+20402a1c
+c00527c7
+c005a7cd
+d8400008
+20402a1c
+c007a7cd
+202027c7
+44bb400e
+782efc00
+7824fc00
+78277c00
+1800721e
+d8c000b3
+e8c08000
+08008608
+c2002792
+c503a7f7
+2020264d
+44bbc00e
+68008181
+1fe20800
+68008090
+1fe23800
+6801c0aa
+1fe23a00
+680140a4
+1fe25c00
+7824fc00
+782e7c00
+1c022200
+204028e2
+782afc00
+20000020
+1c221600
+68020161
+1fe24200
+53c07e00
+79207e3a
+08008648
+53e07e00
+08008648
+19624200
+1a224000
+78247c00
+08008610
+78447c00
+2020264d
+44bc400f
+78277c00
+7824fc00
+782e7c00
+680084b6
+1fe105f8
+d8c004b6
+18408408
+1840a7b8
+242127c2
+e8c48000
+08008648
+1a620400
+202027bc
+e8c48000
+08418600
+202027f7
+782e7c00
+202027d0
+782e7c00
+79200010
+202027d0
+79202a02
+782efc00
+202027d0
+79202a02
+782efc00
+79200010
+44bcc00f
+6800804c
+c302a7e5
+18267c03
+202127e5
+78477c00
+784e7c00
+782efc00
+7843fc00
+79202a01
+2aaffe02
+2020a7df
+580abeee
+08008614
+202027e3
+585faeba
+08008618
+58000012
+08008606
+7823fc00
+79200010
+78277c00
+7824fc00
+c502a800
+6800c1db
+08008603
+680141dc
+98007200
+c50827ef
+08008605
+202027f0
+0800860d
+1f227e00
+203a27f7
+6801016f
+98000c00
+e8c08000
+08008608
+c20027f4
+78247c00
+08008610
+78447c00
+204024c1
+6800804c
+c302a64d
+18007e00
+08008606
+2020264d
+44bd400f
+c5082808
+68008180
+08008603
+6800815f
+98002600
+08008605
+2020280d
+68008180
+08008603
+6801015f
+98002600
+0800860d
+d8c00551
+1a627c00
+2022a814
+e8c08000
+08008608
+1a60a7ff
+2020280e
+680100fc
+1fe0fe01
+600100fc
+202027f7
+68020165
+1fe0a207
+68010171
+243a281e
+1a20a3fd
+20202826
+1feffe0c
+68190040
+18408401
+98467e00
+24212825
+1a20a3ff
+20202821
+1fe67e00
+37d18200
+2c400600
+2420a826
+98005200
+1a225000
+98005200
+20600000
+44bdc00f
+37d10200
+1b427e00
+98000c00
+1ff17e00
+9c467200
+1f217203
+2422a837
+18007e00
+2020283b
+d8400ea6
+18007e00
+9840fe00
+c2002839
+98c0fe00
+1fe6fc0c
+20407f86
+1807fe00
+60010171
+20600000
+44be400f
+1b427e00
+1b220400
+98467c00
+7d217e2c
+98460400
+58000ea6
+284c000f
+2020a84c
+5fff0ea6
+98408400
+600b0447
+207b0000
+600b0038
+20600000
+78587c00
+68030447
+203b2854
+68030038
+9b20e000
+1e00e00a
+58000ea6
+9e067e00
+2fec000f
+2020a85e
+5800f15a
+9e00e000
+1e023400
+20600000
+18007c00
+2020285c
+44bec00f
+20402918
+1c227e00
+1fe17f80
+2c800e03
+2420a869
+1fe97e00
+9ae0fe00
+2020286a
+1ae27e00
+1fe6fc4f
+782afc00
+20407f86
+18072200
+1a2085d8
+20212872
+1a238400
+20202874
+18438400
+18408401
+44bf400f
+68008031
+c301a885
+680240d2
+9c267c00
+20212885
+204028a4
+6800c0d9
+207a0000
+68008031
+79207e02
+60008031
+6802c0e7
+6002c0da
+e8c28000
+6002c0df
+204028a9
+68008031
+c4010000
+2c2ffe01
+2020a8a1
+18492200
+18410e07
+580040da
+9a20a200
+ea208000
+afec0000
+2020a892
+18427e00
+2020289e
+6800c0e4
+98002400
+1c227e00
+1fe17f80
+1fe97e00
+9ae0fe00
+9a46fc00
+580040f2
+20407f86
+18072200
+9a208c00
+e8c08000
+6000c0e5
+98000400
+20600000
+6800c0e5
+98000400
+20600000
+68008031
+793ffe02
+793ffe03
+60008031
+20600000
+44bfc00f
+d8a040f2
+1800720a
+20407ec6
+d8a040f2
+18002600
+18000e02
+6802c0da
+98000400
+28e1fe02
+2020a8b5
+18430400
+284c0000
+2020a8b9
+1a627e00
+e0a08000
+184b0400
+1a60a602
+2a61fc28
+2420a8c2
+6802c0df
+98000400
+28e1fe02
+2020a8c2
+18430400
+1a667c4e
+202128b5
+18002601
+18e08fff
+2422a8b0
+da2040f2
+18a27e00
+9a267e00
+6000c0e4
+20600000
+44c04010
+20402860
+6800817f
+c302a8d1
+680884cc
+2020291f
+44c0c010
+20402860
+6800817f
+c30228d7
+680884cb
+20202933
+18005a00
+6801c0a7
+98005800
+20600000
+44c14010
+6800c1d3
+1fe25a00
+6801c1d0
+1fe25800
+20600000
+44c1c010
+680140a4
+1fe25c00
+6800c0a3
+1fe25a00
+6801c0a0
+1fe25800
+20600000
+44c24010
+68010044
+1fe25c00
+68008043
+1fe25a00
+68018040
+1fe25800
+20600000
+c51028f5
+c68e8000
+c68f8000
+1d815900
+782afc00
+20000020
+20600000
+44c2c010
+2030a90a
+708955d4
+20000004
+708955d2
+20000004
+708955d1
+20000004
+6800c1de
+c0002908
+c000a915
+c0012908
+c001a915
+c0022915
+c0102915
+708955d0
+708956e0
+18002a00
+7850fc00
+78507c00
+782f7c00
+70890200
+70890100
+70890000
+70890300
+70890470
+70890600
+20600000
+708955d0
+708956c0
+2020290a
+44c34010
+70890200
+70890100
+70890018
+708903a7
+7089047f
+20600000
+44c3c010
+60088017
+1840a204
+70896d07
+20202981
+44c44011
+708901cf
+2000000a
+708900ff
+708903af
+708904ff
+2000000a
+708902a0
+20600000
+6800c1e0
+203a2931
+1840a202
+20600000
+1840a200
+20600000
+44c4c011
+60088017
+2040292d
+20402981
+58000500
+20402a8f
+70890601
+7089003c
+708901e0
+70896d12
+2000000a
+70890201
+7089023d
+2000000a
+708903b7
+2000000a
+7089027f
+6800c1de
+c000294b
+c000a94f
+c0012953
+c001a957
+c002295b
+c010295f
+708956f0
+20402965
+708955d8
+20600000
+708956df
+20402965
+708955df
+20600000
+708956ff
+20402965
+708955df
+20600000
+708956ce
+20402965
+708955d8
+20600000
+708956cb
+20402965
+708955d8
+20600000
+708955d0
+708956c0
+7089574c
+7089586c
+70895950
+20600000
+20000004
+708955d1
+20000004
+708955d2
+20000004
+708955d4
+20600000
+70804206
+680140c3
+c307296d
+98000c00
+d8408900
+e8c08000
+c07fa977
+98418a00
+e8c08000
+e0a08000
+20202971
+44c54011
+20402be5
+204029c9
+580007d0
+9c40fe00
+60020169
+79202a03
+18002a00
+2455a998
+202029ab
+44c5c011
+58000960
+9a208400
+6800c0bd
+70895f04
+984ffe00
+6808c0be
+9846fc00
+20407f86
+1807a200
+18077e00
+1ff07e00
+1ff27e00
+9846fc00
+20407f86
+1807fe00
+1fed7e00
+1fe3fe00
+9a21fe00
+60120960
+70895f44
+70895fc4
+20600000
+44c64011
+70890602
+5803d090
+20402a8f
+7089007f
+20000082
+70895230
+708901d0
+70895270
+708952f0
+18007232
+68108980
+c282a9a6
+c20029a3
+6000c0ce
+70890100
+70890000
+70890600
+20600000
+44c6c011
+6800c0ce
+79207e05
+60108952
+68188950
+18410407
+1fe9fe00
+9841fe00
+60108950
+68108951
+793ffe00
+60108951
+68108952
+793ffe05
+60108952
+20600000
+44c74011
+68110981
+1ff1fe00
+1fe97e00
+1fe67e00
+1fe17eff
+1fe6fc0a
+20407f86
+1807fe00
+1ff27e00
+18070400
+9841fe00
+60008018
+20600000
+70804206
+6810896b
+793ffe04
+793ffe05
+6010896b
+70890500
+70890400
+70890470
+708905ff
+6810896b
+79207e04
+79207e05
+6010896b
+204029e9
+68108968
+79207e07
+60108968
+793ffe07
+60108968
+79207e07
+60108968
+70804205
+20000001
+70804204
+6810896b
+1fe17ecf
+6010896b
+1fe1fe30
+6010896b
+20600000
+58000f0f
+20202c18
+5800080f
+20202c18
+44c7c011
+20402924
+78507c00
+7830fc00
+782b7c00
+20600000
+44c84012
+6800804c
+2feffe02
+7920fe00
+60108011
+d8c00062
+e8c48000
+98006400
+e8c38000
+98006600
+68008054
+1fe0e9ff
+782d7c00
+20600000
+1b427e00
+6003009a
+7846fc00
+242c28f9
+dd2003bb
+1d00d001
+1d0151fc
+20600000
+7826fc00
+37cb8400
+202c29ff
+2d000402
+2420aa08
+202029ff
+44c8c012
+d9600600
+7826fc00
+34730400
+7846fc00
+242c28f9
+20600000
+44c94012
+7826fc00
+37c18400
+7846fc00
+242c28f9
+dd2003bb
+1d0151fc
+20600000
+44c9c012
+98002200
+1c227e00
+98409600
+19627e00
+600240ca
+1a227e00
+20600000
+1fe20400
+44ca4012
+18427e00
+20407f50
+1c307e00
+79207e2c
+20407f39
+793ffe2c
+20402a77
+20407f39
+20740000
+20407f43
+98003600
+37c18200
+20600000
+44cac012
+20382a38
+35330200
+1d020400
+20202a3b
+20372a3a
+34730200
+1c420400
+20342a47
+28400601
+2420aa33
+44cb4012
+68008030
+c4000000
+680240ca
+98467e00
+24610000
+1fe67cff
+20212a33
+20600000
+28400603
+2420aa33
+20202a3e
+44cbc012
+d9600600
+20202a33
+78547c00
+20202a4a
+78347c00
+20202a4a
+44cc4013
+204029f1
+7850fc00
+78307c00
+20600000
+44ccc013
+d9600e43
+34730200
+782b7c00
+20600000
+44cd4013
+d9600d00
+34730200
+20600000
+44cdc013
+d9600e43
+35330200
+782b7c00
+20600000
+44ce4013
+51207e00
+782efc00
+79202a00
+08008648
+784efc00
+20600000
+1ca20400
+18418460
+18421c00
+20600000
+44cec013
+6800c090
+1fe0fe01
+c083aa74
+18007e01
+6000c090
+98000800
+20600000
+1b220400
+20748000
+1b420400
+20600000
+1c427e00
+20748000
+1d027e00
+20600000
+44cf4013
+680a004d
+20402a7b
+98461600
+19627e00
+68090051
+18438400
+98467e00
+20600000
+44cfc013
+20402a7b
+6002004d
+20600000
+44d04014
+20202a8c
+20202a8e
+207a0000
+1fe37e00
+1fe0fffd
+1fe0ffff
+2422aa92
+18007e00
+20600000
+df200010
+d8a00000
+20407ec6
+d8a0043f
+df20000a
+20407ec6
+7009b200
+700a9900
+70048c00
+70017f00
+7004d100
+44d0c014
+70016d00
+70015100
+70015c00
+589e8b33
+6001c0a7
+58000153
+60010083
+7000851e
+70008601
+70008807
+5812e904
+60018080
+70009060
+7040d005
+70001402
+6800c65a
+245a74c1
+6800c4be
+245a7518
+44d14014
+20758000
+58000000
+600141dc
+1c437e00
+60024094
+20600000
+5800ee21
+60110050
+6812011c
+60020abe
+6810813e
+60008abd
+c301e45b
+7835fc00
+c303aacc
+7855fc00
+1ce27e00
+243a2acc
+6810813b
+c2812acc
+d85fffff
+20202b3c
+6811813c
+6011804c
+e8c08000
+1fe1feef
+e0a08000
+20402c23
+6810804f
+79207e04
+6010804f
+20402c23
+2055aadf
+6810804e
+793ffe03
+6010804e
+20402c23
+2435e45b
+c6958000
+70800608
+20600000
+6800c198
+60108086
+6801c18d
+60118080
+68024181
+60120074
+6802417d
+60120070
+68044185
+60140078
+68044190
+98000000
+68140140
+600400a1
+204064ca
+20600000
+18027e00
+60044190
+68140070
+6004417d
+e8c40000
+e0a40000
+68118080
+6001c18d
+68108086
+6000c198
+20202c29
+68108063
+243a2b00
+6801c16f
+247a0000
+708063c0
+70800680
+6810812d
+c4008000
+68118149
+6001c16f
+20600000
+44d1c014
+1b427e00
+20407f37
+680a415f
+18467cff
+20610000
+1fed7e00
+1ff27e00
+9846fc00
+20407f86
+1807fe00
+d84000c8
+20407f91
+60008099
+24342b15
+1fe67e00
+6809c16f
+9840fe00
+6001c16f
+58000000
+6002415f
+20600000
+6800c177
+79207e02
+6000c177
+20202b23
+d85fffff
+6800c176
+793ffe07
+6000c176
+44d24014
+20402c29
+6800c157
+6000c17c
+6800c17a
+79207e07
+6000c17a
+44d2c014
+204029e7
+6802415f
+9840fe00
+6002415f
+20402aef
+6802c178
+6012004c
+1fef2200
+37d98200
+1b227e00
+60034163
+70800502
+37d98200
+37d98200
+1a227e00
+6010804f
+70800502
+37d98200
+37d98200
+601a004c
+70800510
+37df8200
+44d34014
+58000000
+1ce27c00
+2022ab4c
+6810813c
+6818813d
+98467c00
+20212b4a
+18427e00
+9ce67e00
+1fe0fe01
+1fe0fe08
+37d98200
+9e20fe00
+680a415b
+9840fe00
+6809c16f
+984ffe00
+1fecfe00
+1ff1fe00
+1fe0fe6e
+d8400ea6
+9846fc00
+20407f86
+1807fe00
+1ff07e00
+18070400
+9841fe00
+680b4163
+20407f2c
+18423200
+68034048
+20402854
+1b427e00
+60030a9a
+1ce27e00
+e0a08000
+6810811d
+1fe1fef0
+e0a08000
+20600000
+44d3c014
+20402afa
+6801c16f
+207a0000
+6800c091
+207a0000
+6800c65a
+203a2b74
+6800c5b1
+207a0000
+6800c4c0
+247a0000
+20402c3a
+247a0000
+6800c040
+2fe00e03
+2420ab9d
+68014042
+207a0000
+20758000
+44d44015
+680880a0
+68014042
+984ffe00
+18518400
+184b0400
+98467e00
+680a4044
+9840fe00
+6808c156
+98467e00
+1ff06000
+44d4c015
+6801404e
+1fe37e00
+20407f50
+1e027e00
+20407f39
+1b420400
+20407f37
+20740000
+20407f49
+44d54015
+6800c178
+98467c00
+20212b18
+600a415b
+20403328
+204052fb
+680a415b
+20202b2a
+44d5c015
+6800c040
+c3800000
+c3818000
+6800c65a
+203a2ba5
+6800c5b1
+207a0000
+44d64015
+6800c36e
+243a2baa
+6800c093
+207a0000
+68014154
+207a0000
+6808c156
+98467e00
+d8401d4c
+984ffe00
+20202b93
+44d6c015
+7855fc00
+68008030
+c4008000
+2436abd0
+20402bcb
+680140c1
+6001003e
+68008047
+c281abde
+c586abde
+20405274
+243a2bde
+6800c55c
+c280abde
+7000a000
+c586abde
+6800c174
+203a2be2
+1fe0ffff
+6000c174
+20600000
+d8e00001
+202060cd
+d8e00001
+202060d1
+70415900
+6801c169
+1fe0fe01
+6001c169
+20600000
+44d74015
+680940c1
+18430400
+6801003e
+9840fe00
+6001003e
+7000a000
+6801c16c
+1fe0fe01
+6001c16c
+6800c159
+1fe0fe01
+6000c159
+20600000
+7000a000
+6800c173
+6000c174
+20600000
+6808c172
+600880a0
+20600000
+44d7c015
+6800c178
+247a0000
+70804206
+58000f0c
+20402c18
+58030d40
+20402a8f
+37d98200
+1e226000
+204029e7
+70804204
+2000000a
+37d98200
+1e227e00
+9e067e00
+1fe0fe30
+d84000ff
+20407f91
+6000c178
+20007530
+20007530
+20007530
+20600000
+6800c178
+247a0000
+708044ff
+70804206
+204029e7
+580003e8
+9e20e000
+07e00000
+1e227e00
+20002ee0
+20002ee0
+20002ee0
+20002ee0
+20002ee0
+20002ee0
+20002ee0
+20002ee0
+20002ee0
+9e067e00
+1fe0fe30
+d84000ff
+20407f91
+6000c178
+20007530
+20007530
+20007530
+20600000
+d8a00fff
+98a10a00
+6800c175
+1fe17ef0
+1fed7e00
+98a1fe00
+6011004c
+e8c10000
+e0a10000
+58000001
+20202c24
+58000002
+37d98200
+60108005
+37d98200
+37d98200
+20600000
+44d84016
+680200a1
+6012004c
+58000004
+20402c24
+680200a5
+6012004c
+58000008
+20202c24
+68014152
+f9207e00
+60014152
+20600000
+68014152
+f93ffe00
+60014152
+20600000
+44d8c016
+20403326
+68014152
+1fe22200
+6800804c
+2feffe06
+7920a20b
+68008078
+6808807c
+9840fe00
+68088048
+9840fe00
+7d3a220a
+6800c4ff
+7d3a2201
+6801025d
+6809025f
+9840fe00
+7d3a220d
+68044668
+7d3a220f
+68044670
+7d3a220e
+6800c1ce
+7d3a2208
+6800c092
+2fe1fe0a
+2040ac5b
+5ffffff8
+9a212200
+1a227e00
+60014152
+20600000
+68110112
+7d3a2206
+6811010e
+7d3a2205
+20600000
+68120138
+793ffe1b
+6012004c
+20402c21
+20202a8c
+6812013c
+793ffe14
+6012004c
+20202c23
+68014150
+c2802a8c
+20600000
+68014150
+c280aa8c
+20600000
+68014150
+c2812a8c
+20600000
+44d94016
+20402c7a
+1a60a4cd
+ea408000
+c1000000
+c000ad06
+c0012c7f
+20600000
+68094241
+18422600
+20600000
+20402f3d
+2020307d
+20403084
+2040305a
+2040305e
+202030a2
+20403231
+5800004e
+2040322f
+204032ba
+1a60a292
+ea220000
+2020322c
+20402c7a
+1a60a491
+ea488000
+20402c90
+1a608a91
+20202e56
+20402c94
+18408401
+18410403
+20600000
+1a60a4ae
+ea408000
+1fe17e03
+1fefa204
+1a60fe97
+9a20fe00
+98408c00
+e8c08000
+2020322f
+2040326c
+2040666a
+580007e2
+da200aa2
+d8400004
+204066b3
+2040666d
+68020aa2
+20403227
+247a0000
+680240a0
+20203227
+20403241
+58000000
+2040323f
+2040323a
+1fe17e07
+2020323c
+2040323a
+79207e04
+2040323c
+20203235
+2040325d
+c000acb7
+c0012cbc
+20600000
+2040323e
+1a608ad1
+204032d6
+20403242
+20202cac
+2040325a
+20202cb8
+1a60a28c
+ea208000
+1fe0fe01
+1a608a8c
+e0a08000
+c0102dd2
+20403258
+c000acca
+58000001
+2040325b
+20403258
+c080acac
+1a60a2d3
+ea208000
+1fe0fe01
+20402cd5
+c0022cd2
+20402c8a
+20402d04
+20202d8f
+20402cd4
+20202cac
+58000000
+1a608ad3
+202032b4
+2040323e
+2040325a
+20403241
+20202cac
+2040325d
+c001acd8
+2040323a
+2fec0004
+2020aca9
+2040325d
+c000acd7
+c0012cd8
+20600000
+20403253
+c1ff8000
+20402ce9
+24562cf4
+20600000
+78567c00
+1a60a2ce
+ea208000
+c1808000
+1a60a2d0
+ea208000
+c1800000
+58000001
+20402cfd
+20403237
+20207feb
+1a60a2d0
+ea208000
+203a2cff
+1fe0ffff
+2040323f
+58000002
+20402cfd
+20402c8a
+20203237
+1a608ad2
+202032b4
+58000003
+20402cfd
+20403258
+243a2cc8
+20402c8a
+58000002
+20203238
+c6930000
+79200027
+44d9c016
+1a60a28e
+ea208000
+c000ad0f
+2040306a
+24342d16
+20402d1b
+1a608a8e
+204032d6
+20402d2c
+24342d7d
+20402ce4
+20402d8f
+20402e7a
+793f8027
+20600000
+20628000
+79207e1c
+20600000
+1a60a2c2
+ea208000
+1fe0fe01
+1a608ac2
+e0a08000
+c0022d23
+c002ad27
+20600000
+1a60a2ad
+ea208000
+1a608aab
+202032b4
+1a608ac2
+204032d6
+1a60a2ac
+ea208000
+20202d25
+20403253
+c0ffaeb1
+44da4016
+20402d3a
+24342d36
+20402d53
+20402e71
+58000001
+1a608a8b
+202032b4
+1a60a28b
+ea208000
+c000ffe7
+20600000
+1a6084d8
+e8410000
+20407f9c
+24740000
+1a227e00
+60008aae
+1a608ab2
+204032d6
+20402cac
+6000919e
+68008aae
+1fe22200
+1a208401
+d8a0119f
+1a227200
+1a420c00
+20407f01
+da20119e
+c6938000
+1a608a86
+e0a88000
+18427200
+1a608a22
+1a220c00
+20207f01
+1a60a286
+ea208000
+1fe0fe02
+1a608a88
+e0a08000
+2040323a
+20403235
+1a60a286
+ea208000
+1fe9fe00
+1a60a285
+ea288000
+18410403
+18438400
+9841fe00
+1a60a2c3
+ea288000
+9840fe00
+e0a08000
+1a60a286
+ea208000
+98007200
+1a608c22
+20207f01
+2040324f
+2040325a
+20402e6d
+20402cac
+6000919e
+20402d77
+2040323a
+79207e03
+2040323c
+20402d53
+20402d33
+20202d14
+6000919f
+20403224
+600211a0
+d8400006
+da20119e
+20202d4c
+1a60a2b2
+ea208000
+203a2d6b
+1a60a2da
+ea210000
+20207f9c
+20402c7a
+20402afa
+6801c16f
+207a0000
+1a6084dc
+e8410000
+20407f9c
+1a6084b6
+e8440000
+20407f49
+600a415b
+20202b2a
+20402c7a
+1a608a8f
+204032d6
+20402da4
+242c2dae
+2437adae
+20402dd6
+20402e75
+20402c7a
+1a60a285
+ea208000
+1fe0fe01
+20403232
+20403253
+c0ffaed0
+20402cdb
+58000000
+1a608a8c
+e0a10000
+58000000
+20202d34
+7857fc00
+20402df7
+20402c7a
+1a60a2c3
+ea208000
+c000adac
+20402e11
+20202e45
+20402e45
+20202d97
+44dac016
+1a60a28d
+ea208000
+1fe0fe01
+1a608a8d
+e0a08000
+20403253
+c0ffadcc
+1a60a28f
+ea288000
+18408401
+1a608a8f
+e0a88000
+1a60a2cc
+ea208000
+98467e00
+243a2d92
+44db4016
+2040325d
+c001acbe
+1a60a2d1
+ea208000
+1fe0fe01
+1a608ad1
+e0a08000
+c0012cb3
+20402caf
+58000001
+20403238
+20202d8f
+1a60a28d
+ea208000
+c1ff8000
+1a608a8d
+204032d6
+20202dd4
+1a608a8c
+204032d6
+700a993a
+20207d86
+20402dde
+1a60a284
+ea208000
+207a0000
+98007200
+1a608c02
+1a608a64
+20207f01
+2040325f
+1fe97e00
+1a608a84
+e0a08000
+1fe0fe01
+1a608c01
+98c08c00
+e8c18000
+1a608ac4
+e0a18000
+2040325f
+1fe37e00
+1fe17e03
+1a608aca
+e0a08000
+20600000
+7844fc00
+7843fc00
+58555555
+98001e00
+20600000
+20402918
+1a60a290
+ea288000
+20202933
+20402dee
+20402df3
+79202a00
+782efc00
+78307c00
+7850fc00
+204053c4
+2040322a
+98001200
+08008620
+7824fc00
+1a60a288
+ea208000
+98007200
+1a608c42
+e8c08000
+08008608
+c2002e06
+78247c00
+08008618
+78447c00
+37d38200
+44dbc016
+20000064
+784efc00
+20600000
+7857fc00
+18002a00
+1a60a290
+ea288000
+2040291f
+20402924
+20402dee
+7826fc00
+7830fc00
+78507c00
+204053c4
+2040322a
+98001200
+78287c00
+1a60a289
+ea210000
+98003600
+37c18400
+242c2e4d
+7824fc00
+09800008
+19897e00
+1a608a00
+e0a08000
+1a60a2cd
+ea208000
+c0012e33
+44dc4017
+1a60a200
+ea208000
+1a60a287
+ea288000
+a8400e00
+2420ae45
+09800008
+19897e00
+e0a08000
+1fe97e00
+1fe1721f
+2022ae3d
+09800008
+19897e00
+e0a08000
+c2002e39
+09800018
+1fef7e00
+1ff17e00
+e0a18000
+20232e45
+7837fc00
+7846fc00
+20600000
+784efc00
+7846fc00
+7844fc00
+7843fc00
+2030a8f9
+37d38200
+20000064
+202028f9
+20402e4f
+20202e45
+204029bb
+207a0000
+1a60a2ea
+ea288000
+da200d9e
+20402e58
+1a608aea
+e0a88000
+20600000
+da4000ff
+20202e5a
+1a227e00
+98408a00
+68008018
+e0a08000
+18408401
+1a427e00
+98410400
+20600000
+d8400000
+1a220c00
+e8c08000
+98408400
+c2002e64
+184c8400
+20600000
+20402c7a
+20402e9f
+58000001
+20403272
+58000000
+20402e73
+e0a08000
+20600000
+20403270
+1fe0fe01
+1a608afc
+202032b4
+1a60a2fd
+ea208000
+1fe0fe01
+1a608afd
+202032b4
+44dcc017
+20403270
+1fe67c7c
+20610000
+1a60a2fd
+ea288000
+98460400
+20402e6d
+58000102
+9a60a200
+ea208000
+98467c00
+24212e8d
+58000103
+9a60a200
+ea208000
+98467c00
+20212e99
+20600000
+1a60a2fe
+ea208000
+c0012e93
+1fe0fe01
+20403272
+c000ae9f
+5800000a
+204032b0
+58000000
+204032b2
+1a60a2ff
+20202ea5
+1a60a2fe
+ea208000
+c0002ea7
+1fe0ffff
+20403272
+c0002ea7
+58000005
+204032b0
+58000000
+204032b2
+58000100
+9a60a200
+ea208000
+2020326a
+58000002
+204032b0
+58000000
+204032b2
+58000101
+20202ea4
+79200026
+20402c83
+58000001
+20203256
+1a60a28b
+ea208000
+c000ffe7
+20403253
+c000aeb9
+c0012ebd
+c001aec1
+20202a8c
+58000011
+20403256
+70119eaa
+20202ec4
+58000012
+20403256
+70119e55
+20202ec4
+58000013
+20403256
+70119e22
+2040323a
+1fe17e07
+6000919f
+20403224
+600211a0
+7011a400
+da20119e
+d8400007
+20402d4c
+20402d53
+20402d33
+20207fe7
+20403253
+c17f8000
+c008aed6
+c0092ed9
+c009aedc
+20600000
+58000002
+20403256
+20202d9f
+58000003
+20403256
+20202d9f
+580000ff
+20403256
+700a9939
+20407d86
+1a60a266
+ea220000
+2040322c
+20202d9f
+793f8026
+20402f08
+20402f22
+20403263
+200007d0
+20403261
+c07fadd4
+20402da4
+242c2efa
+2437aefa
+20402dd6
+20402c7a
+1a60a292
+ea2a0000
+204030be
+2022aead
+20402c7a
+1a60a266
+ea220000
+c0002ee7
+2040322c
+20202f1c
+20403261
+1fe0fe01
+20403264
+20402f04
+1fe0fe01
+1fe17e01
+20402f06
+c0002f0c
+c000af0e
+20600000
+5800018b
+202032d0
+da20018b
+202032b3
+20403267
+20403224
+2040322c
+20202c8a
+20402f08
+20202ee8
+20402c83
+20202ee8
+793f8026
+20402c8a
+20403253
+c1ff8000
+20402f22
+20403263
+200007d0
+20403261
+c07fadd4
+20402da4
+242c2f27
+2437af27
+79200026
+20403263
+580000ff
+20403256
+700a993c
+20207d86
+79200027
+70119eff
+2040323a
+20402d77
+20202d53
+20403261
+1fe0fe01
+20403264
+20402c8a
+20202f16
+20403267
+580000ff
+20403256
+20202f10
+44dd4017
+20402c7a
+580031b0
+1a608ade
+e0a10000
+20402f3d
+204048ea
+204032b6
+44ddc017
+c0003055
+c000af45
+c007af41
+20202a8c
+2040326c
+df200080
+d8a00d9e
+20207ec6
+20402f4c
+20402f4f
+204048d3
+20202f42
+44de4017
+20402f4c
+20402f4f
+20402fbd
+204048d3
+20403019
+20202f47
+20403291
+20403296
+20203299
+2040328f
+c1800000
+20402f55
+20402f65
+2040316b
+20202f96
+20403294
+c3800000
+79207e00
+20403297
+20403267
+20403299
+700d3800
+2040324f
+20402f61
+1a608a00
+df200042
+20207ed4
+20403231
+2040327d
+2040322c
+20202c8a
+44dec017
+2040324c
+c000af8d
+20403245
+c000ac8a
+58000136
+9a60a200
+ea2a0000
+1c427e00
+98467c00
+24412d18
+1fe22400
+58000136
+9a60a200
+ea220000
+1fe20400
+5800013a
+9a60a200
+18427e00
+ea288000
+98408400
+1a427e00
+98467c00
+24610000
+793ffe1c
+58000136
+9a608a00
+e0a20000
+20402c8a
+20403278
+1fe0fe01
+2040327b
+c1810000
+2040327a
+2020324f
+1c427e00
+da200136
+204032bf
+e0a20000
+2020327a
+da200d9e
+20402f94
+1a608aeb
+e0a88000
+18467c50
+24610000
+20202c8a
+df200100
+20202e62
+20402f99
+20402fa5
+20202fb1
+58000180
+204032d0
+207a0000
+d8e0000b
+20407f16
+247a0000
+204032a7
+58000001
+60008d54
+58000000
+e0a38000
+202031b8
+5800017e
+204032d0
+207a0000
+d8e0000e
+20407f16
+247a0000
+204032aa
+d8a00d64
+df200002
+20407ec6
+700d6400
+202031ed
+5800017f
+204032d0
+207a0000
+d8e0000c
+20407f16
+247a0000
+204032ad
+d8a00d74
+df200002
+20407ec6
+700d7403
+20203207
+2040328f
+c1808000
+20402fc1
+20202fcb
+20403294
+c3808000
+79207e01
+20403297
+2040329c
+20402c83
+58000000
+da200106
+204032bf
+202032c5
+2040316e
+2437af5e
+1a608c00
+58000109
+9a608a00
+df200008
+20407f01
+5800010b
+204032d0
+c0552fd9
+c02aafed
+c0113001
+c07fb212
+20202f5e
+204032bd
+c000afdd
+c0012fe8
+20600000
+58000001
+20402ff7
+58000001
+20403289
+58000080
+da200130
+204032b3
+2040327d
+da200131
+204032bf
+2020322d
+58000001
+20402fff
+58000002
+20403289
+20202fe1
+204032bd
+c000aff1
+c0012ff9
+20600000
+20402fdf
+58000106
+204032d0
+c000aff6
+20600000
+58000002
+da200106
+202032b3
+20402fea
+58000107
+204032d0
+c000affe
+20600000
+58000002
+da200107
+202032b3
+204032bd
+c000b005
+c0013011
+20600000
+58000106
+204032d0
+c0013009
+20600000
+2040328b
+1fe1fe01
+2040328d
+58000000
+58000106
+9a608a00
+e0a10000
+20202f5e
+58000107
+204032d0
+c0803015
+20600000
+2040328b
+1fe1fe02
+2040328d
+2020300c
+68008d50
+207a0000
+700d5000
+68010d4e
+d84002ba
+98467c00
+24628000
+68008cb6
+c1dd0000
+68008cb7
+44df4017
+c050303b
+c050b02c
+c0533041
+c053b043
+c054b049
+c058304d
+700d4200
+20600000
+68008cb8
+c000b031
+c0423034
+c053b039
+2020302a
+2040328b
+60008cf7
+2020303f
+20403291
+20403296
+2040328b
+60008cf7
+2020303f
+700cf7a1
+2020303f
+68008cb8
+c040b03e
+2020302a
+20403090
+700d4201
+20600000
+700cf715
+2020303f
+2040328f
+c0003047
+c000b039
+20600000
+700cf7a0
+2020303f
+700cf700
+700cf800
+700cf901
+2020303f
+2040329c
+68008cb8
+1fe0fe02
+1fe27200
+d8c00cb6
+5800013c
+9a608a00
+20207f01
+44dfc017
+2040307d
+20402c7f
+204048d3
+20203057
+2040328f
+c1800000
+20402f51
+20203098
+2040328f
+c1808000
+20402fc1
+20402fcb
+2040328b
+207a0000
+20403286
+20402f4c
+20403093
+58000000
+1a608aa7
+2020322d
+20407fe9
+1a60a2a7
+ea2a0000
+1c427e00
+98467c00
+24412d18
+1fe22400
+1a60a2a7
+ea220000
+1a60a2ab
+ea288000
+98408400
+1a427e00
+98467c00
+24610000
+793ffe1c
+1a608aa7
+e0a20000
+20207fe7
+58000001
+20403287
+20403283
+580000ff
+1a608aab
+e0a08000
+20203067
+5800015c
+204032d0
+207a0000
+2040306a
+24740000
+20403281
+1fe0fe01
+1fe17e01
+20403284
+c0002f4c
+c000b090
+20600000
+58000001
+20403292
+20203296
+58000001
+204032a5
+58000280
+d8e00008
+20207f08
+204032a2
+207a0000
+d8e00008
+20407f16
+247a0000
+204032a4
+58000007
+20403292
+20403296
+20202f5e
+44e04018
+2040328f
+c1838000
+204030cb
+204030e0
+2040316e
+2437af5e
+204030bc
+2042b172
+20402f4c
+20403294
+79207e00
+20403297
+20402f5e
+20403093
+204030bc
+2022b0c1
+58000164
+204032d3
+204030be
+2022b0c5
+58000160
+204032d3
+204030be
+2022b0c8
+20600000
+5800012b
+204032d3
+2040322a
+98467c00
+20600000
+58000182
+204032d0
+1a608a91
+202032b4
+58000185
+204032d0
+202030c3
+58000188
+204032d0
+202030c3
+20403294
+c3838000
+79207e07
+20403297
+20403283
+2040329c
+58000000
+1a608af5
+e0a18000
+da200183
+204032bf
+e0a38000
+204030bc
+24628000
+1a60a291
+ea208000
+da200182
+204032b3
+1a60a290
+ea208000
+2020314a
+44e0c018
+20403281
+1fe0fe01
+1fe17e03
+20403284
+c000310e
+c000b132
+c00130ea
+c001b132
+20600000
+20402fdf
+58000160
+2040327e
+203a30e0
+2040322c
+58000189
+204032d0
+205a3108
+58000187
+204032d0
+2040322f
+1a60a2f7
+ea288000
+da200f9e
+20402e58
+1a608af7
+e0a88000
+20402f94
+1a608afa
+e0a88000
+18467c50
+24610000
+58000188
+20403275
+20402c90
+da200188
+204032c8
+e0a88000
+da200187
+202032b3
+58000001
+da200189
+204032b3
+d8400000
+20402c94
+20203106
+20402fea
+58000164
+2040327e
+203a30e0
+2040322c
+58000186
+204032d0
+205a312c
+58000184
+204032d0
+2040322f
+1a60a2f6
+ea288000
+da20109e
+20402e58
+1a608af6
+e0a88000
+20402f94
+1a608af9
+e0a88000
+18467c50
+24610000
+58000185
+20403275
+20402c90
+da200185
+204032c8
+e0a88000
+da200184
+202032b3
+58000001
+da200186
+204032b3
+d8400000
+20402c94
+2020312a
+20402fdf
+2040327d
+2040322c
+58000183
+204032d0
+205a314c
+2040314f
+1a60a2f5
+ea288000
+da200e9e
+20402e58
+1a608af5
+e0a88000
+20402f94
+1a608af8
+e0a88000
+18467c50
+24610000
+58000182
+20403275
+20402c90
+da200182
+204032c8
+e0a88000
+da200181
+202032b3
+58000001
+da200183
+204032b3
+58000181
+204032d0
+2020322f
+1a60a200
+ea208000
+2040323c
+20402dde
+2040325f
+2feffe00
+2020b15c
+2040315d
+20402d53
+20402df7
+20202e45
+44e14018
+1a608a86
+204032d6
+5800013b
+204032d0
+207a0000
+58000006
+1a608a86
+e0a08000
+df200006
+5800012f
+9a608c00
+1a608a22
+20207f01
+2040316e
+2437af5e
+20203172
+20402f5e
+20402e11
+24778000
+20203152
+44e1c018
+20403188
+24342f5e
+1a60a284
+ea208000
+203a2f5e
+1fe0fe02
+98007200
+1a608c00
+58000109
+9a608a00
+20407f01
+20403286
+204032b6
+205a3093
+5800010b
+204032d0
+c000b19e
+c00131c6
+c001b1f2
+c07fb212
+20202f5e
+20402c7a
+20407fe9
+1a60a2ca
+ea208000
+1a60a2cb
+ea288000
+98467c00
+2442ffe7
+1a60a2ca
+ea208000
+1a608acb
+e0a08000
+1a60a2c4
+ea218000
+1a60a2c7
+ea298000
+98467c00
+2442ffe7
+1a60a2c4
+ea218000
+1a608ac7
+202032c5
+20402f88
+2040324c
+60008aa2
+20403274
+68008aa2
+284ffe03
+7920fe00
+1a608ab2
+e0a08000
+c000b216
+20403245
+20403274
+284ffe04
+7920fe00
+20403249
+1a60a2de
+ea210000
+20207f9c
+58000001
+60008d54
+2040329e
+e0a38000
+2040329e
+245a31bd
+2040329e
+205a31c2
+700d5220
+68008d38
+79207e02
+60008d38
+20600000
+58000001
+204032a8
+58000140
+d8e0000b
+20207f08
+204032a7
+58000000
+d8e0000b
+20207f08
+20403274
+284ffe03
+2020b21b
+d8a00d64
+204031e0
+68040d64
+245a31e4
+68040d64
+205a31e9
+20402c7a
+68040d64
+da200168
+204032bf
+e0a40000
+58000170
+9a60a200
+ea2c0000
+98467c00
+2442b1ed
+58000168
+9a60a200
+ea240000
+da200170
+204032bf
+e0a40000
+20202f5e
+5800010b
+9a608c00
+df200009
+20207ff3
+58000001
+204032ab
+58000140
+d8e0000e
+20207f08
+204032aa
+58000000
+d8e0000e
+20207f08
+700d5110
+68008d38
+79207e01
+60008d38
+20600000
+d8a00d74
+204031e0
+68010d75
+245a3209
+68010d75
+205a320e
+20402c7a
+68018d74
+da200178
+204032c4
+5800017b
+9a60a200
+ea298000
+98467c00
+2442b207
+58000178
+9a60a200
+ea218000
+da20017b
+204032c4
+20202f5e
+700d5221
+202031b9
+58000001
+204032ae
+58000140
+d8e0000c
+20207f08
+204032ad
+58000000
+d8e0000c
+20207f08
+204032bd
+c000b216
+c001321b
+20600000
+5800010d
+2040327e
+da200160
+204032bf
+2020322d
+5800010d
+2040327e
+da200164
+204032bf
+2020322d
+20402c7a
+1a608acd
+e0a08000
+20600000
+20402c7a
+1a60a2be
+2020327f
+20402c7a
+1a608abe
+2020322d
+1a60a2ae
+2020327f
+1a608aae
+e0a20000
+20600000
+1a608a90
+202032b4
+58000000
+20402c7a
+1a608a85
+202032b4
+1a608a42
+202032b4
+58000004
+1a608acc
+202032b4
+1a60a287
+202032d1
+1a608a87
+202032b4
+58000002
+1a608ad0
+202032b4
+58000001
+20402c7a
+1a608ace
+202032b4
+20402c7a
+1a60a2b4
+202032d1
+58000001
+20402c7a
+1a608ab4
+202032b4
+20402c7a
+1a60a2b2
+202032d1
+58000001
+20402c7a
+1a608ab2
+202032b4
+20402c7a
+1a60a296
+202032d1
+1a608a96
+202032b4
+1a60a2cf
+202032d1
+58000000
+1a608acf
+202032b4
+1a60a2d2
+202032d1
+1a60a201
+202032d1
+1a60a2b5
+202032d1
+58000000
+20402c7a
+1a608ab5
+202032b4
+20402c7a
+1a60a2fb
+ea208000
+6000c1de
+20600000
+20402c7a
+6800c1de
+1a608afb
+202032b4
+1a60a2fc
+202032d1
+1a608afe
+202032b4
+58000109
+9a60a200
+ea288000
+20600000
+58000135
+202032d0
+58000000
+da200135
+202032b3
+5800012b
+204032cd
+ea220000
+20600000
+5800015f
+202032d0
+58000000
+da20015f
+202032b3
+58000000
+da20015c
+202032b3
+da20012f
+202032b3
+58000108
+202032d0
+da200108
+202032b3
+58000105
+202032d0
+58000000
+da200105
+202032b3
+58000104
+202032d0
+58000000
+da200104
+202032b3
+58000000
+da20013b
+202032b3
+58000001
+2020329a
+5800010c
+204032cd
+ea238000
+20600000
+5800015e
+202032d0
+58000000
+da20015e
+202032b3
+58000000
+da200180
+202032b3
+58000000
+da20017e
+202032b3
+58000000
+da20017f
+202032b3
+da200102
+202032b3
+da200103
+204032c7
+e0a08000
+20600000
+5800015d
+202032d0
+da20015d
+202032b3
+5800018a
+204032d0
+2020326a
+5800010c
+202032d0
+1fe20400
+1a227e00
+9a608a00
+18427e00
+20600000
+204032bf
+e0a18000
+20600000
+20402c7a
+1fe22400
+1a227e00
+9a608a00
+1a427e00
+20600000
+20402c7a
+9a60a200
+20600000
+204032cd
+ea208000
+20600000
+204032cd
+ea2a0000
+20600000
+58000000
+202032b4
+44e24018
+6800c092
+203a32d8
+c0022f30
+c007b436
+c004c5de
+c005392a
+c00735bf
+c00844a4
+c2833d00
+20600000
+44e2c018
+70015100
+70017f00
+70018000
+58000000
+600289ae
+6800c092
+203a32e3
+c0053962
+20600000
+20407cd1
+20407d9c
+204032f6
+680141f3
+20207f9c
+680141f1
+20207f9c
+680141ef
+20207f9c
+44e34018
+da204668
+20407fc4
+207a0000
+1fe22600
+204032ff
+20203324
+da600000
+20600000
+c000b311
+c0083357
+c002b335
+c009333c
+c0033353
+c0023394
+c0013399
+c009b394
+c00a334b
+c00ab34f
+c001b32e
+c005b340
+c0063347
+c00b335b
+c00c332a
+c015331a
+c015b318
+20600000
+68014682
+79207e00
+60014682
+6801420a
+793ffe00
+6001420a
+20600000
+70022900
+20600000
+68008229
+1fe0fe01
+60008229
+1fe67c01
+202133df
+70022900
+6801420a
+79207e09
+6001420a
+202033e9
+680141f5
+20207f9c
+680141e9
+20207f9c
+680141ed
+20207f9c
+6801420a
+79207e01
+6001420a
+20203412
+68014682
+79207e07
+60014682
+6801420a
+79207e02
+6001420a
+20600000
+68014682
+79207e01
+60014682
+6801420a
+79207e04
+6001420a
+20600000
+68014682
+79207e03
+60014682
+20600000
+68014682
+79207e05
+60014682
+6801420a
+79207e03
+6001420a
+20600000
+68014682
+793ffe05
+60014682
+20600000
+68014682
+79207e09
+60014682
+20600000
+68014682
+793ffe09
+60014682
+20203418
+68014682
+79207e02
+60014682
+20600000
+6801420a
+79207e00
+6001420a
+20600000
+6801420a
+79207e08
+6001420a
+202033e9
+44e3c018
+6000822a
+6800822a
+207a0000
+1fe0ffff
+6000822a
+20407cdd
+204033d6
+20403387
+2040338d
+2040651b
+680141fd
+20407f9c
+20203361
+ea608000
+207a0000
+1fe0ffff
+e2608000
+247a0000
+1a427e00
+20207f9c
+ea610000
+207a0000
+1fe0ffff
+e2610000
+247a0000
+1a427e00
+20207f9c
+6809423f
+1840a601
+da40337f
+2020336d
+2040342d
+c000b382
+2020340a
+58000002
+e2608000
+1840a408
+ea410000
+20207f9c
+da604205
+da40338a
+2020336d
+20402252
+2022b40e
+20600000
+da60467e
+da403390
+20203374
+204033f0
+20403408
+680141f7
+20207f9c
+204033ac
+68014682
+793ffe07
+60014682
+20600000
+70420500
+68014682
+c283b39e
+2fec0001
+2040b2fd
+44e44019
+68014682
+793ffe00
+793ffe01
+793ffe02
+793ffe03
+793ffe07
+60014682
+20203418
+204033a9
+2020340a
+58000000
+60014208
+20600000
+58000000
+6001420a
+20600000
+6801420a
+60014208
+58000000
+6001420a
+20600000
+6801420a
+79207e07
+60014208
+58000000
+6001420a
+20600000
+6800c682
+2feffe05
+20600000
+5800aa55
+60010aaa
+44e4c019
+d8400002
+da200aaa
+da4000c3
+20206606
+44e54019
+d8400002
+da200a9a
+da4000c3
+204065df
+68010a9a
+d840aa55
+98467c00
+20600000
+6800c55a
+6000c205
+20600000
+d8e00009
+20202c32
+d8e00009
+20202c36
+70420605
+202033d0
+da604206
+da4033d2
+2020336d
+70436301
+20600000
+70436300
+20600000
+700a990a
+20207d8f
+700a991d
+20207d8f
+44e5c019
+6800c207
+6000816d
+70022801
+700a9903
+20207d8f
+700a991e
+20207d8f
+700a9904
+20207d8f
+68014687
+6001467e
+20403404
+700a9901
+20207d8f
+58000000
+6001467e
+700a9902
+20207d8f
+700a990f
+20207d8f
+700a9910
+20207d8f
+700a990e
+20207d8f
+700a990d
+20207d8f
+700a9917
+20207d8f
+700a9918
+20207d8f
+700a9916
+20207d8f
+700a9911
+20207d8f
+700a9915
+20207d8f
+700a9914
+20207d8f
+700a9913
+20207d8f
+700a9919
+20207d8f
+700a9906
+20207d8f
+700a9905
+20207d8f
+700a991f
+20207d8f
+700a9920
+20207d8f
+700a9925
+20207d8f
+7920000d
+20600000
+793f800d
+20600000
+2040342d
+c0013424
+58000001
+e2608000
+1840a203
+1840a406
+ea288000
+1a60a601
+e2688000
+20203385
+58000000
+e2608000
+68014682
+c304b429
+20403402
+6809423f
+1840a202
+1840a404
+20203420
+6809423f
+1840a600
+ea608000
+20600000
+2040342d
+c0803434
+2020340a
+1840a40a
+20203385
+20758000
+70808100
+58003463
+600141eb
+5800696c
+600141ed
+580034f5
+600141f3
+580034f4
+600141ef
+5800347e
+600141f5
+580034b2
+600141fd
+58003465
+600141fb
+58003470
+600141e9
+58003501
+600141f9
+44e64019
+2040359b
+20406948
+204035ad
+20407d08
+20407cd3
+5800350b
+60014766
+580034fc
+6001475d
+580034f8
+6001475f
+5800346c
+60014761
+580035a2
+600146a9
+580035a4
+600146ab
+580035a9
+600146b4
+580035a6
+600146b6
+68014682
+c3860000
+2020340a
+20403586
+2020340a
+20405892
+247a0000
+da200b06
+20407e54
+24740000
+d8c00b06
+20204746
+68014797
+60014791
+70475301
+2020358f
+6800c79d
+c000b479
+68014682
+c304b479
+6800c79e
+c000b3d0
+6800c700
+243a33d0
+202033d2
+6800c79b
+6808c79c
+9841fe00
+c000b3d0
+202033d2
+1a627e00
+c016b431
+c008341a
+c00a34df
+c00ab4e8
+c0203485
+20600000
+68014509
+c000b48c
+680143d8
+203a34a2
+70478a02
+70478f3c
+20600000
+6801449a
+203a34a0
+70478a01
+680947b4
+68014496
+9840fe00
+60014496
+1fe22200
+68014498
+9840fe00
+60014498
+9a20fe00
+1fe30400
+680147c0
+9846fc00
+20407f86
+1807fe00
+6001449a
+70479001
+20600000
+70478a03
+20600000
+70417200
+70479000
+680143d6
+680947be
+98467c00
+79212200
+680147c0
+680943d6
+98467e00
+79212201
+2a200603
+20608000
+680447be
+60044496
+70479001
+20600000
+2040337b
+204034b9
+204034be
+204034d5
+204034ca
+204034c4
+202034d9
+da604799
+da4034bc
+2020336d
+70479a00
+20600000
+da604793
+da4034c1
+20203374
+da6046bf
+da40469e
+20203591
+da60478f
+da4034c7
+2020336d
+6801449a
+6000c172
+20600000
+da604790
+da4034cd
+2020336d
+6800843f
+2fe0c000
+2420b4d3
+70478a01
+20403416
+20205abf
+70479001
+20600000
+da604791
+da4034d8
+20203374
+2020341a
+da60478d
+da4034dc
+20203374
+680147a7
+6001478d
+202035af
+680147a7
+6001478d
+58000000
+60014793
+60014791
+2040355c
+20403586
+70417200
+202033f8
+58000000
+6002478d
+6001c78a
+60014509
+7047a001
+68014797
+60014791
+20407e38
+6800c759
+c1000000
+2040358f
+2020356e
+20203508
+6800c759
+c1810000
+20203508
+da6046cd
+20403582
+da6046c6
+20203584
+70436e00
+da6046db
+20403582
+da6046d4
+202034fb
+68008477
+c0093504
+20600000
+68010478
+c006b536
+c005b571
+20600000
+6800c753
+207a0000
+20206978
+1a227e00
+203a3510
+18e27e00
+c0003513
+20600000
+18e27e00
+c000351b
+20600000
+70479d01
+da6046f7
+20403582
+da6046f0
+20403584
+68014682
+c304b532
+20203521
+70479d00
+2020351d
+6800c79a
+c1808000
+70479905
+20600000
+6800c79a
+1fe0fe01
+6000c79a
+c000b527
+c001352b
+20600000
+2040355c
+70477101
+da60476c
+20203544
+70479a00
+70477102
+da60476c
+20403544
+6800c79e
+c000b551
+20600000
+68014797
+60014791
+2040355c
+2020358f
+44e6c019
+204036fc
+ea208000
+c001b53c
+c003b540
+20600000
+6800c79e
+c0003551
+c000b55c
+20600000
+ea408000
+c000b564
+c0003569
+20600000
+44e74019
+6800c78b
+2feffe00
+24608000
+1a608c06
+e8c10000
+1ff0fe00
+1fe0f205
+1a608c03
+204036f0
+e0c08000
+1a622200
+20207e3d
+6800c759
+207a0000
+70479e01
+da6046e9
+20403582
+da6046e2
+20403584
+70478004
+70478301
+da60477b
+20203544
+6800c79e
+207a0000
+70479e00
+20403586
+70478004
+70478300
+da60477b
+20203544
+70479f01
+70478007
+70478301
+da60477b
+20203544
+70479f00
+70478007
+70478300
+da60477b
+20203544
+6800c79f
+207a0000
+20203551
+ea210000
+6001478b
+2feffe00
+24608000
+6800c7a0
+207a0000
+7047a000
+680447b6
+60044496
+70479002
+204035af
+204035b9
+70478007
+6800c79f
+6000c783
+da60477b
+20203544
+da200001
+20203585
+da200000
+2020358c
+da200000
+20407d19
+da200001
+20407d19
+6800c7a1
+202069d7
+20407d04
+df200007
+20207d26
+da6046b8
+da40469a
+20403596
+20403584
+68014795
+60014793
+202033fa
+ea410000
+60014154
+e8c10000
+60014482
+20600000
+da200000
+204069a6
+680347a1
+60030a9a
+204069ae
+6800c7a1
+202069d7
+70479b01
+20600000
+70479b00
+20600000
+70479c00
+6800c7a1
+202069d7
+70479c01
+680347a1
+60030a9a
+202069ae
+70422d00
+202068a8
+204068eb
+20406908
+600147b0
+da2047aa
+20406930
+6000c7a9
+c00035be
+1fe67c64
+242135bc
+6000c783
+70478005
+da60477b
+20203544
+70478364
+202035b9
+2020341a
+20758000
+68108081
+1fe17ef0
+60108081
+58003631
+600141eb
+58003633
+600141ed
+5800340a
+600141f7
+58003635
+600141f3
+5800364b
+600141f5
+580033d0
+600141e9
+580036f6
+600141f9
+5800367a
+600141fd
+20402c7a
+58003722
+1a608ade
+e0a10000
+580035ed
+6001475b
+580035ef
+6001475f
+44e7c019
+20403628
+20407e38
+70417202
+7049f600
+6800c7cb
+6000c69a
+c00035ee
+6800c7cc
+6000c686
+70436e00
+2040360f
+20407cd3
+20407cdd
+7047f301
+68014682
+c3860000
+2020340a
+2020360f
+7047f302
+70436e01
+2040360f
+da200000
+20407d1e
+58000020
+204046f0
+d8a043b7
+6800c4a0
+1fe104f0
+18518400
+20403609
+e0a88000
+1fe1040f
+20403609
+e0a88000
+204057a6
+6808c3af
+18427200
+d8a04372
+d8c043b0
+20407f01
+6808c3af
+18427200
+d8a04392
+d8c043b0
+20207f01
+18467c09
+2021360d
+18408437
+20600000
+18408430
+20600000
+6800c7c0
+c0ffb621
+6800c7be
+c0ffb624
+6800c7c9
+c0ffb626
+6800c72c
+1fe27200
+5800472d
+1fe22200
+1a220c00
+e8c08000
+18c22200
+c07fb61f
+1fe20400
+2040680e
+c2003619
+20600000
+680447c0
+6004472f
+20203611
+6000c72d
+20203613
+6000c72e
+20203615
+da200000
+204069a6
+204037e4
+20402c7d
+2020362d
+7047cf64
+6800c7c9
+6000c744
+202068a8
+20406835
+2020696c
+2020696c
+20206978
+20403642
+204037ee
+20403639
+20203634
+68014682
+c3848000
+6800c9f6
+c000b63e
+20600000
+6800c7ea
+c1008000
+7047ea01
+20203654
+68014682
+c4048000
+20405892
+247a0000
+da204718
+20407e54
+24740000
+d8c04718
+20204746
+1a627e00
+c016b431
+c008341a
+c00a3651
+c00ab660
+20600000
+58000000
+20403220
+20203656
+680147eb
+600147ed
+7047ce14
+70409100
+204033f8
+20403416
+6800c7bd
+c000b65e
+da200000
+20207d14
+da200000
+20207d19
+58000002
+20403220
+58000000
+6002c79c
+58000004
+204069d7
+58000005
+204069d7
+58000014
+204069d7
+58000015
+204069d7
+58000016
+204069d7
+58000007
+204069d7
+20407e38
+70475e0a
+7047600a
+7047620a
+70417202
+da200000
+20407d1e
+58000020
+204046f0
+202033fa
+2040373b
+2040373e
+20403741
+2040337b
+204036c8
+204036a1
+2040368a
+20403683
+2020368f
+da60479a
+da403686
+2020336d
+20403847
+24608000
+70479b01
+20600000
+da6047ed
+da40368d
+20203374
+7047ea02
+20203662
+da6047f1
+da403692
+2020336d
+6800c7f2
+203a369e
+7047f102
+7047f200
+58000a02
+60014752
+6800c7b9
+c001b69b
+20203762
+58000a02
+60014754
+20203762
+58000000
+60024752
+20203762
+6800c7c8
+207a0000
+68014682
+c304b6c6
+da6047ce
+da4036a8
+2020336d
+6800c7cd
+6000c7ce
+6800c7d1
+247a0000
+204068eb
+20406908
+600147e8
+da2047e2
+20406930
+6808c7cf
+98467c00
+202136b6
+6000c7cf
+1fe20400
+6008c7d0
+6800c7ca
+98467c00
+204136c1
+6008c7db
+df200006
+d8c047d6
+204036f0
+6000c7dc
+da2047d3
+20207e3d
+6800c7d2
+247a0000
+7047d201
+da200001
+20207d1e
+da200001
+20207d19
+da6047a4
+da4036cb
+2020336d
+7047a405
+7047a600
+6800c7a5
+c000b6ee
+c00036ec
+d8c0479c
+18c22200
+df200008
+1a220c00
+e8c08000
+18c22200
+c00036e3
+c000b6e6
+c00136e9
+6800c7a6
+1fe0fe01
+6000c7a6
+c20036d3
+20600000
+6800c7a6
+da4047c0
+9a40a400
+ea488000
+20600000
+204036de
+20406825
+202036d9
+204036de
+20406829
+202036d9
+6800c7a5
+c000b6e3
+202036e6
+7047a501
+202036d0
+7047a500
+202036d0
+da200000
+e8c08000
+9a20a200
+c20036f1
+1a217eff
+20600000
+68008477
+c00936f9
+20600000
+68010478
+c00a3710
+20600000
+44e8401a
+ea228000
+60028b12
+68010b12
+d8406b5a
+98467c00
+24628000
+68010b15
+1ff0fe00
+60010b15
+1fe27200
+1a20a205
+1a220c00
+d8a00b17
+20407f01
+e8c08000
+60008b21
+da200b14
+da400b17
+20600000
+58000000
+6002c752
+6002c757
+204036fc
+1a420c00
+d8a04752
+df20000a
+20407f01
+44e8c01a
+ea208000
+c001374a
+c001b75c
+c0023762
+c002b762
+c00337b1
+c003b849
+c004384c
+20600000
+68014682
+c3848000
+680147eb
+600147ed
+7049f601
+5800010c
+204032cd
+20403710
+68008b14
+c002372e
+c002b72e
+20600000
+6800c752
+245a3735
+6800c754
+245a3737
+6800c756
+245a3739
+20600000
+7049f305
+20600000
+7049f405
+20600000
+7049f505
+20600000
+da6049f3
+da403744
+2020336d
+da6049f4
+da403746
+2020336d
+da6049f5
+da403748
+2020336d
+70475200
+20203762
+70475400
+20203762
+70475600
+20203762
+2040374c
+2020374f
+6800c752
+6000c75f
+20203773
+6800c75e
+20403754
+6800c753
+6000c75d
+20203770
+c0013758
+c001b75a
+6000c75e
+20600000
+70475e05
+20600000
+70475e0a
+20600000
+6800c752
+20403754
+6800c75e
+2040379e
+204037a1
+202069c4
+6800c7f0
+247a0000
+68034752
+6003475d
+6800c75e
+6808c760
+98417e00
+6808c762
+98417e00
+205a3779
+44e9401a
+20403770
+20403773
+20203776
+da404763
+d8c0475d
+2020377b
+da40476b
+d8c0475f
+2020377b
+da404773
+d8c04761
+2020377b
+7047d100
+20600000
+e8c08000
+c0003787
+c000b780
+c0013782
+20600000
+70477b00
+20203783
+70477b01
+e8c08000
+6000c77d
+ea440000
+2020378c
+ea408000
+204069d7
+1a40a401
+ea408000
+202069d7
+6004477e
+7047d101
+6800c77b
+c000379a
+6800c77f
+6000c780
+6800c77e
+204069d7
+6800c77d
+2040379e
+6000c785
+68034780
+60030a9a
+202069ae
+6800c77e
+6000c780
+6800c77f
+20203793
+1feffe05
+1fe0fe32
+20600000
+d8402ee0
+984ffe00
+1fe6fc64
+20407f86
+18078400
+18422200
+58002ee0
+98462400
+20600000
+68108082
+79207e02
+60108082
+5800009e
+60110068
+6011006a
+20600000
+6800c7f0
+247a0000
+68014752
+60014787
+6800c7ea
+c080b7b9
+680144a0
+60014787
+44e9c01a
+204037aa
+204037dc
+5800bb80
+20402a8f
+204037e0
+58001c20
+20402a8f
+df200010
+204037dc
+68014787
+c28037c9
+58001c20
+20402a8f
+204037e0
+202037cc
+58003840
+20402a8f
+204037e0
+58001c20
+20402a8f
+68014787
+1fe37e00
+60014787
+c20037c2
+7047f102
+7047f201
+58000a01
+60014752
+6800c7b9
+c001b7d9
+20203762
+58000a01
+60014754
+20203762
+68108085
+1fe1fe40
+60108085
+20600000
+68108085
+1fe17ebf
+60108085
+20600000
+6800c7bb
+c1000000
+20402c65
+6808c7bc
+6008c786
+204067fb
+20403847
+24608000
+70479a01
+20600000
+6800c7bb
+c1000000
+6800c79b
+247a0000
+68014682
+c284b7f6
+6800c7ea
+c1808000
+44ea401a
+20403847
+24608000
+58008ca0
+20402a8f
+20403847
+24608000
+2040383f
+20403842
+24610000
+20403847
+2020b7fe
+da200000
+df200010
+2040383f
+20403842
+24610000
+20403847
+2420b805
+58002a30
+20402a8f
+20403847
+2020b812
+58000000
+1a232200
+9a21a200
+c2003805
+2020381b
+58008000
+1a232200
+9a21a200
+2040383f
+20403842
+24610000
+20403847
+2020b816
+c2003805
+44eac01a
+1a227e00
+60014789
+60014797
+6800c7ea
+c000b827
+df200007
+d8c04792
+204036f0
+6000c799
+da20478f
+20207e3d
+6800c7ef
+1fe0fe01
+6000c7ef
+1fe6fc02
+20407f86
+18078400
+18077e00
+243a3838
+6800c7bf
+98467c00
+2042b83d
+dfe0479c
+184085ff
+9840a200
+dfe00000
+e2208000
+20600000
+dfe0479c
+9840a200
+dfe00002
+e2208000
+20600000
+7047f001
+20600000
+1c427e00
+6002478b
+20600000
+1c427e00
+680a478b
+98467e00
+1fe67cc8
+20600000
+6808c786
+2020681d
+68044752
+6004479c
+20600000
+6800c7b9
+6000c7af
+6800c7ba
+6000c7b0
+6800c7bb
+6000c7b1
+df20000d
+d8c047aa
+204036f0
+6000c7b7
+da2047a7
+20207e3d
+204065c2
+7046f67a
+2040386d
+20403867
+58003860
+600141fd
+da200000
+202069a6
+680146a1
+207a0000
+1fe0ffff
+600146a1
+c1800000
+7046a000
+20600000
+44eb401a
+6800c6a4
+1fe67c28
+20610000
+7046a400
+20600000
+da2046a4
+da400000
+d8400051
+202065df
+78547c00
+6800c6a3
+1fe27200
+da2046a5
+1a622400
+44ebc01a
+2040387c
+2022ffe7
+1a20a204
+c2003876
+20600000
+44ec401b
+ea218000
+ea498000
+98467c00
+20600000
+44ecc01b
+ea218000
+ea498000
+98467c00
+24628000
+e8c08000
+1fe67c00
+20628000
+1a208c03
+e8c88000
+98467c00
+20600000
+44ed401b
+78547c00
+6800c6a3
+1fe27200
+da2046a5
+1a622400
+20403881
+2022ffe7
+1a20a204
+c2003893
+20600000
+68008004
+1fe0fe01
+60008004
+da6002e5
+ea610000
+d84055aa
+98467c00
+24628000
+18c22600
+ea698000
+58ffffff
+98467c00
+2022b8a8
+2040388d
+203438a8
+20600000
+44edc01b
+1a60a604
+ea608000
+6808c6f6
+98467c00
+20628000
+6000c6f6
+68008003
+1fe0fe01
+60008003
+1a60a601
+ea608000
+6000c6f5
+1fe27200
+207a0000
+e8c08000
+c00038c2
+c000b8cf
+c00138d4
+c001b8d9
+c00238de
+c002b8e3
+c00338e8
+c07fb8ea
+c20038b7
+20600000
+18c22600
+6800c69a
+60008a9a
+d8400000
+60088a9b
+58002710
+60018a9c
+ea608000
+60008a9f
+204069ae
+1a610c01
+c20038b7
+20600000
+1a620c00
+6800c69b
+60008a9a
+d8400001
+202038c6
+1a620c00
+6800c69c
+60008a9a
+d8400002
+202038c6
+1a620c00
+6800c69d
+60008a9a
+d8400003
+202038c6
+1a620c00
+6800c69e
+60008a9a
+d8400004
+202038c6
+1a620c00
+6800c69f
+60008a9a
+d8400005
+202038c6
+e8c08000
+20600000
+18c22600
+6800c6a0
+c080b8ee
+204038f0
+1a610c04
+20600000
+44ee401b
+20403871
+203438fe
+6800c6a4
+1fe20400
+1fe0fe01
+6000c6a4
+20403867
+184b8400
+580046a5
+98408a00
+ea620000
+e0a20000
+20203903
+1a608c03
+e8c08000
+207a0000
+ea620000
+e2220000
+da2046a4
+da400000
+d8400051
+20206606
+6808c69a
+20406825
+20600000
+6808c69a
+20406829
+6808c69a
+20406825
+2040391d
+6800c6a7
+247a0000
+20402c29
+68120138
+793ffe0f
+6012004c
+20402c21
+d85fffff
+20202b2a
+6800c6a7
+203a56f9
+1fe0ffff
+6000c6a7
+202056f9
+1feffe14
+d8c046a8
+98c08c00
+e8c08000
+207a0000
+1fe22200
+1a227200
+d8a04372
+20407f01
+1a227e00
+1fe0fe02
+6000c36f
+20600000
+20758000
+204057a3
+204068a8
+58003982
+600141f3
+5800396e
+600141f1
+58003986
+600141f5
+5800396d
+600141ef
+58003969
+600141e9
+58003ab7
+600141fb
+58003c32
+6001456f
+58003cc2
+600141f9
+58003cd7
+600141fd
+2040397f
+44eec01b
+20403945
+20403964
+20402c6f
+20203c48
+680246aa
+60120054
+680246ae
+6012005a
+68108081
+1fe1fe04
+1fe17efc
+60108081
+70806200
+680146aa
+60110058
+680146ae
+6011005e
+60110060
+68120078
+79207e07
+60120078
+68110050
+793ffe0f
+60110050
+204066ce
+70804300
+70806281
+6800c6bf
+2feffe00
+68188062
+79208404
+60188062
+20600000
+2040397f
+20203945
+6808c69e
+2040680e
+204039e6
+6808c69c
+202067fb
+6808c69c
+2040681d
+2420b3d2
+202033d0
+20600000
+20403970
+20203ce9
+6800c682
+c302397f
+44ef401b
+58003eff
+680a46c5
+98408400
+1c427e00
+98467c00
+24610000
+68014682
+c282b97f
+6800c6bf
+c3830000
+20403cec
+2040340e
+1c427e00
+600246c5
+20600000
+20403ce9
+2040526e
+247a0000
+202039eb
+1a627e00
+c000b9d4
+c00139a3
+c00239d7
+c002b9c4
+c00439aa
+c004b9b1
+c00539c9
+c005b9b6
+c00639c2
+c009b9d7
+c00a39cf
+c00ab9c6
+c010b9ca
+c011b9cb
+c01239ce
+c0183c8a
+c018bc8c
+c0193c9a
+c019bc98
+c01a3c84
+c01abc73
+c01b3c82
+c01bbc8e
+c01c3c90
+c01dbca1
+c01ebc6a
+c020b9d9
+20600000
+2040397f
+6800c665
+245a3c8e
+204039d7
+68014682
+c4020000
+202039b1
+68014682
+79207e04
+60014682
+6800c6a7
+6000c172
+204039e6
+20203c1d
+68014682
+c4020000
+793ffe04
+60014682
+20203c21
+2040397f
+68014042
+1fe37e00
+680941e3
+98467c00
+2422b9bd
+20203416
+6800c6bf
+c3828000
+68110112
+245a3cf0
+2020340c
+20403cee
+20203418
+2040397f
+202039dd
+20405816
+204039d7
+20203c23
+202033dd
+20203cee
+6800c6bf
+c302b40e
+20203cf2
+20203cf2
+204058ba
+204039dd
+6800c6a8
+6000c172
+20203c1f
+70466100
+20403cee
+20203cf2
+20403a52
+202039db
+20405cc9
+20205b02
+6808c69e
+20206829
+204039df
+202039e6
+6800c6a1
+2feffe00
+2040b3f0
+6800c6a1
+2feffe01
+2040b3f8
+20600000
+6808c69e
+20206825
+6800c56b
+c1000000
+20206c28
+6810810c
+c281b9e8
+204066cb
+e8608000
+c080ba01
+68110112
+1fe67c02
+20610000
+e8608000
+60008b03
+e8688000
+18622200
+60088b04
+18408403
+68110112
+98460400
+24610000
+700b0501
+20403a17
+68008b05
+c1000000
+20203a12
+20407ec1
+20403c79
+20203a04
+44efc01b
+68110112
+207a0000
+204066cb
+e8608000
+1fe67c01
+2442ba16
+2422ba04
+e8608000
+c1028000
+c1148000
+186087ff
+20403a16
+20203a04
+204066cb
+18608602
+e8608000
+98608600
+202066c8
+44f0401c
+68008b03
+c0003a3f
+c000ba44
+c0013a49
+c001ba5f
+c0023a6b
+c002ba75
+c004ba9a
+c005bad7
+c0063ad8
+c006baec
+c0073af4
+c007bafa
+c0083b06
+c008bb0e
+c0093b12
+c0133b16
+c0143b1d
+c014bb2d
+c0153b36
+c015bb69
+c0163b6f
+c0183b76
+c018bb7c
+c0193b90
+c019bb98
+c01a3bbb
+c01abbc4
+c01b3bcd
+c01bbbd7
+c01c3bda
+c0203be2
+c0213bec
+c0243bf1
+c024bbfc
+c028bc02
+c030bc06
+c07fbc15
+20203c17
+68008b04
+c0833c17
+e8630000
+600340a0
+20203c1a
+68008b04
+c0833c17
+e8630000
+600344a0
+20203c1a
+68008b04
+c080bc17
+1a220600
+20403c1a
+e8688000
+6008c6a9
+68014682
+c3848000
+c3800000
+6800c6a1
+2feffe00
+2420ba58
+6808c6a9
+18417e03
+6000c093
+6800c6a1
+2feffe01
+24608000
+6808c6a9
+284ffe02
+2020b3fa
+202033f8
+68008b04
+1fe67c43
+24213c17
+6000c515
+df200008
+20407ec6
+68008b04
+1fe27200
+1a220600
+d8a04516
+204066ea
+20203c1a
+68008b04
+1fe67c1d
+24213c17
+6000c3af
+1fe27200
+1a220600
+d8a043b0
+204066ea
+204057a3
+20203c1a
+6800c682
+c3023c17
+204033ba
+2020ba86
+700b0500
+2040397f
+6800c568
+207a0000
+68014573
+c0803a84
+68008b04
+60014573
+1a220600
+18627e00
+60014571
+20403a88
+20206c4d
+700b0500
+20203cd1
+20403a8e
+68014573
+6809469f
+98467e00
+60014573
+20600000
+68014573
+d840006e
+20407fdd
+6809456c
+20407fdd
+6809455e
+20407fdd
+6001469f
+20600000
+700b0501
+700b0305
+20203c1a
+68014682
+c304bc17
+20403ad4
+20343c17
+700b0500
+6800c6bf
+c2823ab4
+6800c6c0
+247a0000
+700b0501
+e8610000
+600146c1
+18627e00
+600146c3
+68008b04
+1fe0fffe
+24213c17
+2022bc17
+6000c6c0
+700b0500
+20405814
+20403ab7
+20403ab7
+20403ab7
+6800c6bf
+c4020000
+700b0501
+20403cf6
+20203c1a
+6800c6c0
+207a0000
+20405892
+247a0000
+20403acf
+44f0c01c
+1840fffd
+6808c6c0
+20407fdd
+1fe22200
+18427e00
+9a267e00
+6000c6c0
+680946c1
+20405a64
+680146c3
+1fe20600
+1a227200
+204066ea
+18627e00
+600146c3
+6800c6c0
+247a0000
+20203cf4
+d8400017
+6800c6bf
+c3808000
+680944a8
+20600000
+6800c6bf
+c2815a42
+20207fe9
+20203c4c
+1a220600
+e8608000
+c0003adf
+c000bae2
+c0013ae8
+c001baea
+20203c17
+2040612b
+70465a00
+20203c1a
+58040003
+6001c65b
+6000c662
+20406124
+70465a01
+20203c1a
+58040002
+20203ae3
+58040001
+20203ae3
+68008b04
+1fe67c10
+24213c17
+6000c689
+1fe27200
+d8a0468a
+204066fd
+20203c1a
+1a220600
+e8608000
+68188062
+7d3a0404
+60188062
+20203c1a
+68008b04
+1fe27200
+1a220600
+20407f58
+596e3600
+9846fc00
+20407f86
+1807fe00
+60014243
+20403c1a
+20407f9e
+202066ce
+da200002
+da40469a
+d8400000
+20203c25
+60010ac2
+da400ac2
+d8400000
+20203c25
+68014682
+c3003c17
+20403c1a
+202033e9
+68014682
+c304bc17
+20403c1a
+20203402
+68008b04
+1fe27200
+1a220600
+68014215
+1fe20a00
+204066ea
+20203c1a
+6800c682
+c3003c17
+e8608000
+6808c661
+793a0400
+79200407
+6008c661
+20403c1a
+6800c661
+c2833b2b
+20600000
+70466100
+700a9921
+20207d8f
+c2805f95
+20203b28
+6800c682
+c4020000
+6800c56b
+c1000000
+e8608000
+6808c569
+98408400
+6008c569
+20600000
+df200040
+d8a0436f
+20407ed4
+58000000
+60008ab2
+1a220600
+18627e00
+60010ab6
+20403b64
+68008ab2
+68088aa2
+18408401
+9840fe00
+60008ab2
+1fe67c1f
+24213b50
+6808c36f
+58004370
+9840fe00
+60010abb
+68088aa2
+18408401
+6800c36f
+9840fe00
+6000c36f
+20203b59
+6808c38f
+58004390
+9840fe00
+60010abb
+68088aa2
+18408401
+6800c38f
+9840fe00
+6000c38f
+68010abb
+1fe20a00
+68010ab6
+1fe20600
+18427200
+204066ea
+68008b04
+68088ab2
+98467c00
+2422bb3c
+20203c1a
+e8608000
+60008aa2
+e8608000
+60008aae
+20600000
+d8400000
+da200002
+680146b4
+60010ac2
+da400ac2
+20203c25
+68008b04
+c080bc17
+e8608000
+6000c6b2
+58000000
+600146b4
+20203c1a
+e8620000
+6002468a
+70468904
+70466300
+20403c1a
+20205f31
+68008b04
+c081bc17
+e8608000
+c0003b82
+c000bb8a
+20203c17
+e8688000
+e8608000
+c0013b88
+7d3a0407
+204067fb
+20203c1a
+20406806
+20203c1a
+e8688000
+20406812
+e8608000
+2feffe00
+2040682c
+20203c1a
+68008b04
+c080bc17
+e8688000
+2040681d
+58000000
+7d20fe00
+da200001
+20203b0a
+1a220600
+e8608000
+1fe20400
+c040bba3
+c0413ba8
+c041bbae
+6000c4c6
+c0003bb3
+c000bbb6
+c0013bb8
+20203c17
+6800c4be
+203a3c17
+6008c4c6
+7044560d
+20203bb4
+6800c4be
+203a3c17
+6008c4c6
+7044560d
+70445401
+20203c1a
+6800c4be
+203a3c17
+6008c4c6
+7044560d
+20203bb9
+70445600
+70445403
+20203c1a
+70445605
+20203bb4
+70445605
+70445400
+20203c1a
+68008b04
+1fe67c1f
+24213c17
+6000c36f
+1fe27200
+1a220600
+d8a04370
+204066ea
+20203c1a
+68008b04
+1fe67c1f
+24213c17
+6000c38f
+1fe27200
+1a220600
+d8a04390
+204066ea
+20203c1a
+68014682
+c304bc17
+68008b04
+c0843c17
+1a220600
+e8640000
+60044496
+700a9912
+20407d8f
+20203c1a
+e8610000
+60014482
+20203c1a
+6800c4c6
+203a3c17
+6800c4c4
+c0803c17
+6800c4c5
+c0803c17
+20407e25
+20203c1a
+68008b04
+c082bc17
+e8608000
+6000c6a2
+e8620000
+600246a3
+6808c6a2
+2040680e
+20403cbc
+20203c1a
+68008b04
+c080bc17
+e8608000
+6000c1de
+20203c1a
+e8608000
+c000bbfa
+6800c4c1
+c001bbf8
+c0033bf8
+c003bbf8
+20203c17
+7044c201
+20203c1a
+20405b53
+20203c1a
+68008b04
+c080bc17
+20403c1a
+e8608000
+203a60cb
+202060c9
+20403c1a
+20407f9e
+70801001
+20202a8e
+68008b04
+c0003c17
+e8608000
+203a3c13
+68008b04
+c082bc17
+e8620000
+d84f4240
+98467c00
+20213c17
+600244c7
+2040580c
+20203c1a
+2040580e
+20203c1a
+70409100
+20203c1a
+d8400001
+da200000
+20203c25
+d8400000
+da200000
+20203c25
+700b0300
+20203c49
+700b0302
+20203c49
+700b0303
+20203c49
+700b0305
+20203c49
+68008b03
+1fe22600
+700b0306
+58000002
+9a20fe00
+20403ca7
+1a627e00
+e1408000
+e1488000
+1a227200
+1a420c00
+204066e4
+202066c5
+2040397f
+700b0307
+680084ff
+207a0000
+20403ca7
+680084ff
+1fe27200
+68010501
+1fe20c00
+204066d1
+202066c5
+700b0308
+6800c6b6
+1fe27200
+1fe0fe02
+20403ca7
+680146b9
+e1410000
+680146b7
+1fe20c00
+204066d1
+202066c5
+700b0309
+58000000
+20403ca7
+202066c5
+700b030a
+58000001
+20403ca7
+20403c5d
+68014682
+d8e00002
+afefffff
+79208403
+d8e00009
+afefffff
+79208405
+6800c682
+d8e00004
+afefffff
+79208404
+e1488000
+202066c5
+d8400000
+6800c093
+d8e00000
+afefffff
+79208400
+d8e00001
+afefffff
+79208401
+6800c36e
+d8e00000
+afefffff
+79208402
+20600000
+700b030d
+6800c217
+1feffe22
+1fe27200
+20403ca7
+68014215
+1fe20c00
+204066d1
+202066c5
+700b030e
+58000004
+20403ca7
+680209ba
+e1420000
+202066c5
+700b030f
+68110112
+d84000ff
+20407fdd
+1fe27200
+20403ca7
+204066cb
+20406703
+202066c5
+700b0310
+20203c49
+700b0311
+58000004
+20403ca7
+680244c7
+e1420000
+202066c5
+da200180
+20203c91
+da200080
+20203c91
+da200101
+20203c91
+da200001
+70466100
+700b0314
+58000002
+20403ca7
+1a227e00
+e1410000
+202066c5
+da600000
+20203c9b
+da600001
+700b0315
+58000001
+20403ca7
+1a627e00
+e1408000
+202066c5
+700b031d
+58000004
+20403ca7
+680209ba
+e1420000
+202066c5
+700b0202
+60008b04
+600c0aa2
+44f1401c
+20403cb1
+680c0aa2
+204066c2
+68018b02
+e1418000
+20600000
+20403cba
+20608000
+20403cb8
+680246a3
+1feb7e00
+207a0000
+20203cbe
+6808c6a2
+20206829
+6808c6a2
+2020681b
+6808c6a2
+20206825
+1fe0ffff
+20000026
+243a3cbe
+20600000
+20403ad4
+20740000
+1a227e00
+600146b7
+1a427e00
+6000c6b6
+68010478
+680946bb
+98467c00
+2022bccf
+680946bd
+98467c00
+24628000
+600146b9
+20203c3d
+6800c6bf
+c3828000
+20403cf0
+2020340c
+70417202
+20600000
+20203cd8
+6800c6b2
+207a0000
+6800c6b3
+207a0000
+1fe0ffff
+6000c6b3
+247a0000
+7046b30a
+204068eb
+20406908
+1fe6fc64
+20407f86
+1807fe00
+18070400
+6000c6b4
+6008c6b5
+20600000
+20407fb4
+202133d9
+202033db
+d8e00006
+20203cfc
+d8e00006
+20203cf8
+d8e00005
+20203cfc
+d8e00005
+20203cf8
+d8e00004
+20203cfc
+d8e00004
+20203cf8
+6800c6bf
+f93ffe00
+6000c6bf
+20600000
+6800c6bf
+f9207e00
+6000c6bf
+20600000
+20403d39
+2040640f
+204040c6
+20403d66
+20406411
+20758000
+20403d16
+20403d19
+680246d3
+c3880000
+20403d4e
+c6130000
+68014682
+c28642b0
+202042a2
+680246d3
+c40d8000
+df200014
+58030d40
+20402a8f
+c2007ec1
+20600000
+680246d3
+c4080000
+202048ea
+5800416d
+600141ef
+58003f77
+600141f1
+58003ebb
+600141ed
+5800417c
+600141f5
+58003de3
+600141f3
+58003eb3
+600141eb
+58003d5b
+600141f9
+20402c7a
+58004401
+1a608ad8
+e0a10000
+58004406
+1a608ada
+e0a10000
+58003ebf
+1a608adc
+e0a10000
+580041f9
+600141fd
+58003d36
+60014201
+20600000
+680246d3
+c30964d7
+202064da
+20758000
+20402c9d
+20403e6e
+20403e1e
+20403e54
+20405810
+20405839
+2040582c
+20405818
+680246d3
+c28a3d46
+c289c414
+20600000
+2040659c
+680246d3
+2feffe19
+2440e5c2
+2040443f
+20403dc9
+204041aa
+202065df
+680246d3
+c30f3d53
+68008abd
+2fec0003
+24608000
+6800c71f
+6000c71e
+6800c6f5
+c3830000
+680246d3
+c4088000
+c28eaee4
+20202f2c
+68008478
+1fe67e1a
+24628000
+700a9912
+20407d8f
+d8e00000
+202041b9
+6800c6b6
+c1008000
+7046b601
+20600000
+6800c6e1
+1fe17e0f
+6000c77a
+20203d80
+6808c6e7
+2040681d
+2420bd62
+6800c6b6
+c1000000
+7046b600
+6800c77a
+1fe0fe01
+1fe17e03
+6000c77a
+20403d7e
+680246d3
+c28a443b
+c289bd79
+20600000
+d840001e
+2040680e
+d840001f
+2040680e
+20204435
+44f1c01c
+2040424a
+6800c6e0
+c002bdaa
+c0023d96
+6800c77a
+c0003d8a
+c000bd88
+c0013d8c
+c001bd8e
+6800c780
+20203dbe
+6800c77f
+20203dbe
+6800c781
+20203dbe
+6800c782
+20203dbe
+6800c6e0
+c1030000
+6800c6b5
+1fe0fe01
+6000c6b5
+20600000
+6800c77a
+c0003d9d
+c000bd9b
+c0013d9f
+c001bda1
+6800c784
+20203da2
+6800c783
+20203da2
+6800c785
+20203da2
+6800c786
+6000c6b5
+1fed7e00
+1fe22200
+1fe0fe0d
+20406413
+1a227e00
+1fe0fe0e
+20206413
+6800c77a
+c0003db1
+c000bdaf
+c0013db3
+c001bdb5
+6800c788
+20203db6
+6800c787
+20203db6
+6800c789
+20203db6
+6800c78a
+6000c6b5
+204040c0
+6800c6b5
+1fe0fe80
+1fed7e00
+1fe0fe05
+1fe22200
+2020415a
+6000c6b5
+20403d90
+6800c6b5
+58000006
+20406414
+1fe104f8
+6800c6b5
+9840fe00
+1fed7e00
+1fe0fe06
+20206413
+204033c4
+2022c316
+2040441c
+204042e4
+202033bd
+68014707
+207a0000
+680246d3
+c4088000
+c3818000
+c6130000
+20404083
+c1838000
+20404482
+d8e00003
+204043ce
+58000000
+600146ae
+6000c6b4
+20403263
+68014682
+c283c392
+c284b402
+c28033e9
+204042ca
+20202ead
+20403dce
+20407e34
+20403d6a
+20403de9
+20403ee0
+20203df7
+680246d3
+c4080000
+204048d3
+202048fd
+68108a04
+c303bdf1
+c283bdf4
+20600000
+6800c6ff
+c4038000
+2020659a
+6800c6ff
+c3838000
+20204381
+20403ded
+68108a04
+6000c6ff
+c4038000
+20403e07
+680246f9
+6808c6fd
+98408400
+1c427e00
+98467c00
+24610000
+600246f9
+20403f97
+24740000
+700d3804
+20203e0f
+680a46f9
+1c427e00
+98467c00
+24413e0c
+20600000
+58000000
+600246f9
+20600000
+68008d38
+c4010000
+20203e12
+68108a04
+c4038000
+700d5220
+58000001
+60008d54
+6803c69a
+e0a38000
+20600000
+68110050
+793ffe0b
+60110050
+20600000
+58008c00
+60014575
+58008e7a
+600144bc
+58002402
+600140bd
+58002580
+6001c0aa
+70417303
+70415608
+7046d901
+58000200
+60014154
+7044a617
+7044a817
+58000a77
+60014212
+38000306
+38044440
+38090000
+380c4408
+6004c577
+38001224
+38044000
+38080000
+e0a28000
+3803ffff
+3806fe23
+380999d9
+380c020d
+60044098
+5800012c
+60014707
+204057a3
+680246d3
+c40f8000
+20403e44
+20203e4c
+6808c6f7
+204067fb
+6808c6f7
+2040681d
+7046f603
+20608000
+7046f602
+20600000
+6808c6f8
+204067fb
+6808c6f8
+2040681d
+70422d00
+20608000
+70422d02
+20600000
+6800c22d
+c0003e59
+c000be62
+c0013e6b
+20203e59
+68094221
+68014227
+98467e00
+1feffe14
+1fe6fc64
+20407f86
+1807fe00
+600146d0
+20600000
+6809421f
+68014225
+98467e00
+1feffee6
+1fe6fd90
+20407f86
+1807fe00
+600146d0
+20600000
+68014223
+600146d0
+20600000
+6808c23a
+2040680e
+204048fb
+6808c6e2
+204067fb
+6808c6e3
+204067fb
+6808c6e4
+204067fb
+6808c6f3
+204067fb
+6808c6dc
+2040680e
+6808c6e8
+204067fb
+6808c6e9
+204067fb
+6808c6ea
+204067fb
+6808c6eb
+204067fb
+6808c6e5
+204067fb
+6808c6e6
+204067fb
+6808c6ef
+2040680e
+6808c6f0
+2040680e
+6808c6f1
+2040680e
+6808c6f2
+2040680e
+6808c6f4
+2040680e
+6808c6ed
+204067fb
+6808c6ec
+204067fb
+6808c6e7
+202067fb
+6808c6e8
+204067dd
+6808c6e9
+204067dd
+6808c6ea
+204067dd
+6808c6eb
+202067dd
+6808c6e8
+20403ea7
+6808c6e9
+20403ea7
+6808c6ea
+20403ea7
+6808c6eb
+20203ea7
+18467cff
+20628000
+18410e7f
+6812011c
+afefffff
+68120078
+f920fe00
+60120078
+6812007c
+fd20fe00
+6012007c
+20600000
+78347c00
+68120138
+79347e1a
+6012004c
+20402c21
+20404482
+20403e9f
+20203ebf
+20403ebf
+680080a0
+247a0000
+202067ed
+20403ee0
+d8400019
+680246d3
+2feffe12
+2040bede
+2040680e
+204063ee
+6808c6e2
+204067dd
+6808c6e3
+204067dd
+6808c6e4
+204067dd
+6808c6e5
+204067dd
+6808c6e6
+204067dd
+6808c6e7
+204067dd
+6808c6ed
+204067dd
+6808c6e8
+204067dd
+6808c6e9
+204067dd
+6808c6ea
+204067dd
+6808c6eb
+204067dd
+6808c6f3
+202067e1
+d840001e
+20600000
+44f2401c
+20403eee
+20403f36
+6800c6b8
+6808c6b7
+6000c6b7
+98467c00
+2422b3d4
+6800c6be
+6808c6bd
+6000c6bd
+98467c00
+2422b3d4
+20600000
+6800c6ea
+c17f8000
+da200000
+6808c6ea
+2040681d
+7920a200
+6808c6eb
+2040681d
+7920a201
+1a227e00
+6000c6b8
+c000befe
+c0013f02
+6800c6b9
+c283bf0e
+20600000
+6800c6b7
+c0003f06
+c001bf08
+20600000
+6800c6b7
+c0003f0a
+c001bf0c
+20600000
+7046b982
+20600000
+7046b981
+20600000
+7046b980
+20600000
+7046b983
+20600000
+6800c6b9
+793ffe07
+6000c6b9
+c0003f16
+c000bf19
+c0013f1c
+c001bf1f
+20600000
+6800c6b8
+c001bf22
+20600000
+6800c6b8
+c0003f22
+20600000
+6800c6b8
+c001bf2c
+20600000
+6800c6b8
+c0003f2c
+20600000
+6800c6bc
+1fe0fe01
+6000c6bc
+1fe67c01
+20610000
+7046bc00
+6800c6ba
+1fe0fe01
+6000c6ba
+20600000
+6800c6bb
+1fe0fe01
+6000c6bb
+1fe67c01
+20610000
+7046bb00
+6800c6ba
+1fe0ffff
+6000c6ba
+20600000
+6800c6e8
+c17f8000
+da200000
+6808c6e8
+2040681d
+7920a200
+6808c6e9
+2040681d
+7920a201
+1a227e00
+6000c6be
+c000bf46
+c0013f4a
+6800c6bf
+c283bf56
+20600000
+6800c6bd
+c0003f4e
+c001bf50
+20600000
+6800c6bd
+c0003f52
+c001bf54
+20600000
+7046bf82
+20600000
+7046bf81
+20600000
+7046bf80
+20600000
+7046bf83
+20600000
+6800c6bf
+793ffe07
+6000c6bf
+c0003f5e
+c000bf61
+c0013f64
+c001bf67
+20600000
+6800c6be
+c001bf6a
+20600000
+6800c6be
+c0003f6a
+20600000
+6800c6be
+c001bf6f
+20600000
+6800c6be
+c0003f6f
+20600000
+7046c200
+6800c6c0
+1fe0fe01
+6000c6c0
+20600000
+7046c100
+6800c6c0
+1fe0ffff
+6000c6c0
+20600000
+58000002
+6000c680
+20600000
+6800c1e2
+207a0000
+20405271
+247a0000
+680246d3
+c281bf8a
+c2803f8a
+c282bf8a
+20403f97
+24740000
+da200009
+20404d63
+6801424e
+e0a10000
+580002a1
+e0a10000
+6803c69a
+e0a38000
+20600000
+58000000
+6003c69a
+20203f81
+680146aa
+600146b0
+20600000
+44f2c01c
+da200007
+6809446f
+20405a64
+6803c69a
+e0a38000
+20600000
+44f3401c
+78547c00
+58000000
+6003469b
+20403fb5
+20404079
+2040407e
+20404099
+24740000
+20403f8d
+d8e00008
+202043ce
+6801469b
+1fe67e00
+6001469b
+20207fe7
+6801469d
+1fe67e00
+6001469d
+20207fe7
+6801469d
+1fe67e00
+6001469d
+6801469b
+1fe67e00
+6001469b
+20404002
+20207fe7
+20404002
+20207fe7
+6800c239
+c1800000
+6800c6e0
+c0003fe2
+c000bfe2
+c0013fe2
+c001bfe2
+c0023fc4
+c002c010
+c0033fe2
+20203fe2
+6800c6a7
+205a405d
+7046a701
+20600000
+20403fc0
+6808c6f3
+2040681d
+24608000
+58000000
+20406414
+c09840d1
+58000002
+20406414
+c4038000
+2040405d
+20403fde
+6000c6a1
+1ff1fe00
+20404169
+6000c69c
+6800c6a1
+1fe17e0f
+20404169
+6000c69e
+6800c6f6
+c0003fa3
+c000bfab
+c0013fa7
+c001bfb3
+20600000
+58000012
+20206414
+c018bfea
+202040d1
+20403fc0
+78547c00
+6808c6f3
+2040681d
+24608000
+58000000
+20406414
+c0983fe0
+58000002
+20406414
+c4038000
+2040405d
+6800c69b
+20404165
+6001469b
+6800c69d
+20404165
+6001469d
+6800c6f6
+c0003ffa
+c000bffc
+c0013ffe
+c001c000
+20600000
+20403fa3
+202040b3
+20403fab
+202040b3
+20403fa7
+202040b3
+20403fb3
+202040b3
+6801469d
+6809469b
+6001469b
+6009469d
+20600000
+2040640f
+20000064
+1a427e00
+20406414
+1fe22400
+20406411
+20000064
+1a427e00
+20600000
+78547c00
+6808c6f3
+2040681d
+24608000
+da400002
+20404007
+c4038000
+da400000
+20404007
+6000c6dd
+c09f4145
+6800c6a7
+205a4039
+7046a701
+20404039
+6800c6a1
+1ff1fe00
+20404169
+6000c69c
+6800c6a1
+1fe17e0f
+20404169
+6000c69e
+6800c6f6
+c0004031
+c000c035
+c0014033
+c001c037
+20600000
+6800c6a4
+c0004051
+c000c045
+20600000
+20403fa3
+2020402d
+20403fa7
+2020402d
+20403fab
+2020402d
+20403fb3
+2020402d
+2040640f
+2040405d
+dfe00005
+20406414
+6000c6a1
+dfe00007
+20406414
+6000c6a2
+dfe00008
+20406414
+6000c6a3
+20206411
+6800c6a2
+c1800000
+6800c6a3
+1fe67c2d
+20610000
+7046a400
+5800ba41
+20406405
+58000032
+20406405
+5800b541
+20206405
+6800c6a2
+c1800000
+6800c6a3
+1fe67c2d
+24610000
+7046a401
+5800ba41
+20406405
+58008032
+20406405
+5800b541
+20206405
+dfe00003
+20406414
+6001469b
+dfe00004
+20406414
+6001469d
+20600000
+d840001b
+204067fb
+d840001b
+2040681d
+20608000
+68108109
+79207e04
+60108109
+20600000
+6808c6c0
+68108109
+9840fe00
+207a0000
+6000c69f
+7046c000
+20207fe7
+6808c6c0
+68108109
+9840fe00
+6000c6c0
+20600000
+6800c6c0
+207a0000
+6000c69f
+7046c000
+20207fe7
+6800c6ba
+207a0000
+6000c6a0
+7046ba00
+20207fe7
+da200000
+6808c6e2
+2040681d
+7920a200
+6808c6e3
+2040681d
+7920a201
+6808c6e4
+2040681d
+7920a202
+20404090
+1a227e00
+20600000
+6800c6e5
+c17f8000
+6808c6e5
+2040681d
+7920a203
+6808c6e6
+2040681d
+7920a204
+20600000
+20404083
+204040a8
+204040a3
+1a227e00
+6808c69a
+6000c69a
+9842fe00
+1fe67c00
+20628000
+20207fe7
+c6930000
+1a227e00
+207a0000
+6000c69a
+20207fe7
+68014682
+c284c0ad
+68014682
+c28040b0
+20600000
+1a227e00
+243a5820
+20205822
+1a227e00
+243a2bc7
+20202bc9
+44f3c01c
+d840001a
+680246d3
+2feffe12
+2040c0be
+2040681d
+20608000
+5800000a
+20406414
+200003e8
+202040b3
+d840001f
+20600000
+680246d3
+c28940c4
+d840001a
+202067fe
+d840001f
+202067fe
+20403d36
+20758000
+204040c0
+6800c6e0
+c002c0d5
+204040d9
+c01840e0
+c018c0ea
+204040d1
+200003e8
+202040cb
+44f4401d
+680246d3
+c28963e0
+202063d1
+204040d9
+c01f414b
+20404145
+202040d5
+58000001
+20406414
+6000c6de
+58000000
+20406414
+6000c6dd
+20600000
+6800c6de
+c068c139
+c06940f8
+c00140ee
+c02a40e6
+20600000
+7046e002
+20600000
+7046e006
+20600000
+6800c6de
+c03840e8
+7046e001
+20600000
+7046e004
+204040f6
+58003426
+20406413
+58000419
+20406413
+58000009
+20206413
+58005a09
+20206413
+7046e003
+204040f6
+58000f0d
+20406413
+5800e31d
+20406413
+5800d27d
+20406413
+20404102
+2020411a
+5800351b
+20406413
+5800b428
+20406413
+58004629
+20406413
+5800962a
+20406413
+58008c2b
+20406413
+58006e2c
+20406413
+5800642d
+20406413
+58005f38
+20406413
+58000f39
+20406413
+5800323a
+20406413
+5800473b
+20406413
+58001042
+20206413
+58002e54
+20406413
+5800f255
+20406413
+5800f461
+20406413
+58007063
+20406413
+58005275
+20406413
+58004176
+20406413
+5800ed77
+20406413
+58002378
+20406413
+58004679
+20406413
+5800e57a
+20406413
+5800487c
+20406413
+5800777e
+20406413
+5800017f
+20406413
+5800000b
+20406413
+5800007f
+20406413
+202040f4
+7046e000
+204040f6
+5800100d
+20406413
+5800ed1d
+20406413
+5800807d
+20406413
+20404102
+58000943
+20406413
+2020411a
+6808c6dc
+20406829
+20407ec1
+6808c6dc
+20406825
+20207ec1
+7046e005
+5800ba41
+20406405
+58000d11
+20406405
+5800041b
+20406405
+5800041c
+20406405
+58000f1d
+20406405
+58000032
+20406405
+5800b541
+20206405
+5800ba41
+20406405
+20000fa0
+5800ff7f
+20406405
+1a227e00
+20406405
+5800007f
+20406405
+5800b541
+20206405
+c4038000
+d840ff00
+9841fe00
+20600000
+c4018000
+d84000f0
+9841fe00
+20600000
+20405892
+247a0000
+6800c6c5
+1fe17e03
+c1818000
+680246d3
+c281c179
+c2804179
+c282c179
+20403f97
+24740000
+20203f90
+58000000
+6003c69a
+20203f90
+1a627e00
+c00a41c3
+c000c2ca
+c00ac1d9
+c00141d9
+c002c1d6
+c008426c
+c009429b
+c00341d5
+c00241cc
+c009c1cc
+c00541ca
+c01733cd
+c018c1b4
+c01941b6
+c01f4191
+c013c38e
+c01cc19c
+c01d4192
+c01e419a
+20600000
+20203410
+70478b01
+6800c71e
+243a4492
+6800c720
+6808c703
+98467c00
+2022b40a
+20600000
+70478b01
+20600000
+70478b01
+d8e00003
+204043d2
+58000000
+60014707
+7046a700
+6800c6e0
+1fe67c05
+2042c039
+2442c05d
+68008004
+c289c1af
+204041aa
+202065d1
+20402c7a
+1a60a2ae
+da40005b
+d8400004
+20600000
+20402c7a
+1a60a4ae
+ea408000
+6000c77b
+20204435
+d8e00002
+202041b9
+7046c602
+d8e00001
+202041b9
+6800c6c5
+f9207e00
+6000c6c5
+20600000
+6800c6c5
+f93ffe00
+6000c6c5
+20600000
+7046c500
+20600000
+6801420a
+793ffe00
+6001420a
+58000000
+600146ae
+20403f8d
+202042ca
+204063cb
+202033dd
+6800c71e
+243a4492
+68014682
+c28642b0
+680246d3
+c28041d7
+c282c2b0
+c281aead
+202033a7
+20203f74
+20600000
+204043c0
+2020659a
+44f4c01d
+204041e7
+680246d3
+c28041d7
+c281aead
+6800c71e
+243a4492
+68014208
+c283c1f5
+c28033a9
+c280c1ef
+c28141f2
+c281c1f2
+202042b0
+58000000
+600446b7
+e0a20000
+7046b400
+7046a700
+7041e200
+70442900
+20600000
+c282c1f2
+c281c1f2
+202042b0
+68014682
+c28642b0
+202033a7
+204041c1
+68014208
+c28033a9
+202033a7
+204043d6
+20404243
+20404246
+20404250
+2040445d
+20404443
+20404333
+204043a5
+204043eb
+20404209
+20404231
+20404234
+20404237
+2040423a
+2040423d
+20204240
+6800c711
+207a0000
+1fe0ffff
+6000c711
+247a0000
+2020420f
+6800c712
+c1000000
+c002c216
+20404225
+70471205
+70471105
+20600000
+2040422c
+70471204
+70471105
+20600000
+58008006
+20406413
+200003e8
+70471100
+70471200
+202040e0
+5800a006
+20406413
+5800a005
+20206413
+70471100
+6800c6e0
+c0024220
+58000106
+20406413
+5800a105
+20206413
+70471100
+58000906
+20206413
+70471105
+70471201
+20600000
+da604680
+da40429b
+2020336d
+da6046ac
+da404264
+20203374
+da6046ae
+da404266
+20203374
+da6046b0
+da40426a
+20203374
+da6046c4
+da404478
+2020336d
+da6046c6
+da40425e
+2020336d
+da604704
+da404249
+2020336d
+da604707
+da404249
+20203374
+20600000
+680246d3
+c40b8000
+7046df0a
+6800c6f4
+6000c715
+20600000
+da6046df
+da404253
+2020336d
+6800c6f4
+6000c715
+58000190
+60014716
+60014718
+da200000
+6808c77a
+18408401
+6008c714
+70471301
+20600000
+6800c6c5
+c3810000
+700a9912
+20407d8f
+d8e00000
+202041b9
+204042ca
+2020340a
+204033f6
+6800c71e
+243a4492
+2020340a
+c5137e1d
+20204386
+44f5401d
+7046b400
+20404386
+204041c1
+202042b0
+680341d0
+203a33eb
+2040427e
+70016d17
+6800c65a
+243a33e1
+70016d04
+202033e1
+680146a8
+600146ae
+2040427e
+20403418
+20207df4
+580000c8
+60014716
+60014718
+20204285
+580003e8
+60014716
+60014718
+6800c720
+c000c28a
+c001428c
+c001c28e
+20600000
+6800c6f0
+2020428f
+6800c6f1
+2020428f
+6800c6f2
+60008aa2
+20404482
+68008aa2
+6000c715
+da200000
+70471301
+20207d1e
+da200000
+20207d19
+da200000
+20207d14
+202041c1
+7041e201
+20403416
+20403412
+58000000
+6001467e
+6000c680
+2020340e
+2040435f
+6800c720
+6808c703
+98467c00
+2022c2ab
+6800c210
+c019c271
+c01a4279
+202042b0
+20403d57
+c6130000
+6800c71e
+243a4492
+20600000
+44f5c01d
+68014682
+c285c2b7
+680246d3
+c30c42b7
+180a7e00
+6000c4a1
+20403418
+68014687
+600146ac
+70016d06
+58000000
+600146b0
+600146ae
+d8e00007
+204043ce
+204043ca
+6800c092
+2feffe01
+2040fdf4
+6800c092
+2feffe00
+2040fddd
+680246d3
+c28e422e
+20204282
+44f6401d
+6800c092
+2feffe01
+2040c2d4
+6800c092
+2feffe00
+2040c2d7
+680246d3
+c28e421a
+20204482
+58000000
+600146ae
+20207dfa
+58000000
+600146ac
+20207de2
+680246d3
+c4038000
+d8e00007
+204043d2
+204042e8
+204042fb
+680246d3
+c289c435
+c28a42e4
+20600000
+d8400058
+da204720
+da400000
+202065d1
+68008185
+c01a42ec
+c019c2ef
+20600000
+6000c6c7
+6803044f
+202042f1
+6000c6c7
+68030040
+600346c8
+6803c6c7
+d8c04721
+df200003
+e8cb8000
+98467c00
+2022c310
+18c08c16
+c20042f5
+20600000
+da204721
+6800c720
+1fe0ffff
+1feffe1d
+9a20a200
+68008185
+e2208000
+c01a4305
+c019c30c
+20600000
+6803044f
+e0a30000
+d8c04419
+20407ebf
+680344a0
+e0a30000
+20600000
+68030040
+e0a30000
+d8c041be
+20207ebf
+18c08dfa
+18c20a00
+680b46c8
+18408403
+e0ab0000
+20600000
+d8400058
+da204720
+da400000
+204065df
+da204721
+6800c720
+6808c703
+98467c00
+20628000
+1fe0ffff
+1feffe1d
+9a20a200
+ea208000
+6000c210
+c019c327
+c01a432c
+20600000
+e8c30000
+600341d0
+d8a041be
+20407ebf
+202067d7
+e8c30000
+600341d0
+d8a04419
+20407ebf
+e8c30000
+600344a0
+20600000
+6800c6f5
+c282c349
+c2834359
+20204337
+20404083
+c003433e
+7046d81e
+6800c6d9
+c1008000
+7046d901
+20600000
+20404343
+6800c6d9
+c1000000
+7046d900
+202043c0
+6800c6d8
+207a0000
+1fe0ffff
+6000c6d8
+247a0000
+20204370
+6800c6ed
+c17f8000
+6808c6ed
+2040681d
+2020c354
+6800c6d9
+c1008000
+7046d901
+680246d3
+c3830000
+20204370
+6800c6d9
+c1000000
+7046d900
+d8e00006
+202043d2
+68008004
+c4030000
+6800c720
+c000c369
+c001436c
+20600000
+68008004
+c4030000
+6808c6ed
+2040681d
+2020c366
+70472001
+20600000
+6800c703
+6000c720
+20600000
+6808c6ed
+2420c370
+20600000
+6808c6ed
+2040681d
+2020c354
+20600000
+6808c720
+18408401
+6800c6d2
+98467c00
+244143cc
+6008c720
+7041bd00
+2040437a
+204043c0
+2020437e
+d8400001
+da204720
+da400000
+20206606
+20404381
+204043c2
+202041d7
+68014682
+c283c392
+c284b402
+c28033e9
+202042ca
+44f6c01d
+58000000
+600146b0
+68014682
+c284b402
+68014682
+c28033e9
+20600000
+58000001
+60030040
+70018533
+202042df
+204043c4
+20207e2f
+6800c6ec
+c17f8000
+6808c6ec
+2040681d
+2020c39f
+6800c685
+6000c6da
+6800c6db
+c1008000
+7046db01
+202043ca
+204043b5
+6800c6db
+c1000000
+7046db00
+20407e2f
+202043c8
+6800c6f5
+c2824394
+20404083
+c003c3af
+6800c685
+6000c6da
+6800c6db
+c1008000
+7046db01
+202043ca
+204043b5
+6800c6db
+c1000000
+7046db00
+20407e2f
+202043c8
+da6046da
+da4043b8
+2020336d
+d8e00006
+204043ce
+20403357
+2020426c
+d8e00001
+202043ce
+d8e00001
+202043d2
+d8e00000
+202043ce
+d8e00000
+202043d2
+d8e00002
+202043ce
+d8e00002
+202043d2
+d8e00005
+202043ce
+d8e00005
+202043d2
+d8400001
+20600000
+680246d3
+f9207e00
+600246d3
+20600000
+680246d3
+f93ffe00
+600246d3
+20600000
+680246d3
+c40d0000
+6800c6ce
+1fe0fe01
+6000c6ce
+1fe67c0a
+20610000
+7046ce00
+204068eb
+20406908
+6001470f
+da204709
+20406930
+6800c231
+c280c4a0
+c30043e9
+202043e7
+d8e00004
+202043ce
+d8e00004
+202043d2
+680246d3
+c4020000
+6800c6ef
+6000c715
+6800c6cf
+1fe0fe01
+6000c6cf
+1fe67c14
+244143f9
+c00143fb
+c00243fe
+c00343fb
+c00443fe
+20600000
+7046cf01
+202043fe
+da200000
+70471302
+20207d14
+da200000
+70471302
+20207d19
+20403f97
+24740000
+da200007
+da40469a
+20600000
+6800c78b
+207a0000
+6808c6e7
+2040681d
+2040c410
+6800c704
+247a0000
+20404083
+247a0000
+20202d83
+6800c6e7
+c17f8000
+7047040a
+20600000
+20404423
+68014778
+d840aa55
+98467c00
+2022c42b
+60094778
+2040441c
+20204435
+680344a0
+60034738
+1fe0ff00
+60034755
+1fe0ff00
+60034772
+20600000
+58004778
+d8404720
+98460400
+6801c700
+9840fe00
+d8400002
+da204778
+20206562
+5800477f
+d8404720
+98460400
+6801c700
+da204720
+20406562
+2040431a
+6802477b
+20402c7a
+2020322c
+5800477f
+d8404720
+98460400
+da204720
+6801c700
+20206514
+d8400001
+da20477a
+da40005a
+202065d1
+d8400001
+da20477a
+da40005a
+202065df
+c6130000
+680246d3
+c40b0000
+6800c705
+1fe0fe01
+1fe17e07
+6000c705
+c1838000
+68014682
+c280444f
+c284c44f
+20600000
+44f7401d
+6800c706
+247a0000
+680246d3
+c4040000
+6800c6a5
+204063fb
+6000c6a6
+1fe67c10
+2021445b
+70470600
+20600000
+7047061e
+20600000
+da604706
+da404460
+2020336d
+6800c6a5
+20406414
+1fe67c10
+24610000
+680246d3
+c4040000
+d8e00008
+204043d2
+70417200
+7046c41e
+20404482
+680246d3
+c28ac471
+6800c720
+c000c489
+c0014476
+20600000
+6800c720
+c000c489
+c001448c
+c001c48f
+20600000
+6800c6f0
+2020428f
+70417220
+20204482
+6800c6f0
+c17f8000
+6000c715
+20204296
+6800c6f1
+c17f8000
+6000c715
+20204296
+20404296
+2040447a
+2040447e
+6800c6f2
+c17f8000
+6000c715
+20204296
+6800c6f0
+6000c715
+20204298
+6800c6f1
+6000c715
+20204298
+6800c6f2
+6000c715
+20204298
+44f7c01d
+6800c71e
+1fe0ffff
+6000c71e
+6808c720
+18408401
+6800c6d2
+98467c00
+244143cc
+6008c720
+7041bd00
+2040437a
+204042fb
+202042a2
+20404482
+58000000
+600400a1
+20202b1f
+20758000
+68108081
+1fe17ef0
+60108081
+20406948
+580044e6
+600141eb
+580044e9
+600141ed
+580044ef
+600141f3
+580044f2
+600141f5
+580033d0
+600141e9
+20402c7a
+580045c2
+1a608ad8
+e0a10000
+580044ea
+1a608ada
+e0a10000
+580044e9
+1a608adc
+e0a10000
+5800450e
+600141fd
+580044da
+6001475b
+580044d6
+6001475f
+58004560
+6001470f
+44f8401e
+204044e2
+20407e38
+70417202
+6800c72b
+6000c69a
+c00044d5
+6800c72c
+6000c686
+204044db
+20407cd3
+20407cdd
+70475701
+68014682
+c3860000
+2020340a
+70475702
+204044db
+da200000
+20407d1e
+20202ee4
+202044db
+44f8c01e
+6800c729
+c0ffc4e0
+6808c706
+2020680e
+6000c706
+202044de
+20402c9d
+68014753
+60014755
+20204515
+20406835
+204044e9
+2020340a
+2020696c
+6800c765
+207a0000
+20202d83
+20600000
+20206978
+20404544
+20404503
+202044ee
+1a627e00
+c016b431
+c008341a
+c01cc4fb
+c01e44ff
+c01d44f9
+20600000
+70476501
+20600000
+70476501
+70476301
+70476401
+20600000
+70476501
+70476301
+70476401
+20600000
+6800c763
+c1000000
+6800c762
+c1008000
+70476201
+da200000
+20207d19
+da200000
+20407d19
+204044db
+2020340a
+2040337b
+20204510
+6800c72d
+207a0000
+da604755
+da40450a
+20203374
+2040451a
+6009471a
+2040451f
+6009471c
+20600000
+6801471a
+6001471e
+20404540
+20404525
+6000c724
+6801471c
+6001471e
+20404542
+20404525
+6000c725
+20600000
+68014720
+1fe22200
+6801471e
+2040452e
+6800c719
+243a4537
+24610000
+6809471e
+20600000
+98467e00
+20214534
+1fe67e00
+70471801
+9a267c00
+20600000
+70471800
+9a267c00
+20600000
+2421453e
+6800c718
+243a453c
+58000001
+20600000
+58000002
+20600000
+58000000
+20600000
+70422e33
+202068eb
+70422e34
+202068eb
+6800c72a
+c1808000
+44f9401e
+70471901
+2040451a
+68014724
+68094722
+98467c00
+20628000
+60014722
+20404550
+20204554
+6800c724
+203a455a
+1fe0ffff
+20204557
+6800c725
+203a455d
+1fe0fe01
+1fe20e00
+da200001
+20204560
+d8e00000
+da200000
+20204560
+d8e00002
+da200000
+20204560
+1a227e00
+6000c761
+6800c763
+c0002ee4
+68014753
+60014755
+6800c761
+203a4580
+44f9c01e
+da200000
+20407d14
+18e27e00
+c00245a3
+c002c5a5
+c00345a7
+2040458b
+c0004574
+c001457a
+c001c574
+20600000
+18e27e00
+c000458f
+c000c591
+c0014593
+c001c595
+20600000
+18e27e00
+c0004597
+c000c59a
+c001459d
+c001c5a0
+20600000
+44fa401e
+da200000
+20407d19
+18e27e00
+c00245bc
+c002c5bc
+2040458b
+c00045a9
+c00145af
+c001c5a9
+20600000
+6800c728
+6808c727
+9841fe00
+20600000
+70473401
+202045be
+70473402
+202045be
+70473601
+202045be
+70473602
+202045be
+70473401
+70473601
+202045be
+70473402
+70473602
+202045be
+70473402
+70473601
+202045be
+70473401
+70473602
+202045be
+70473801
+202045be
+70473802
+202045be
+70474101
+202045c0
+18e27e00
+c00045b5
+c000c5b5
+c00145b7
+c001c5b7
+20600000
+18e27e00
+c00045b9
+c000c5b9
+c00145b9
+c001c5b9
+20600000
+70473400
+202045be
+70473600
+202045be
+70473400
+70473600
+202045be
+70473800
+202045be
+da20472e
+20207e3d
+da20473b
+20207e3d
+6800c764
+c000c5cc
+da204744
+20407e54
+243445d1
+d8c04744
+e8c08000
+1fe22200
+da404745
+20600000
+70476400
+78347c00
+da200001
+da404766
+20600000
+6800c747
+c00245d5
+c002c5d5
+20600000
+6800c74a
+243a45dc
+6800c74c
+243a45dc
+6800c74e
+243a45dc
+20600000
+78347c00
+202045c7
+20758000
+68108081
+1fe17efc
+60108081
+580046b4
+600141eb
+580046b3
+600141ed
+5800340a
+600141f7
+580046b1
+600141f3
+58004612
+600141f5
+5800460c
+600141e9
+5800476a
+600141f9
+58004686
+600141fd
+58004729
+600146e7
+58004806
+600146e2
+58004807
+600146e4
+204057a3
+204047da
+20404788
+2040476d
+20406948
+2040477a
+20407e38
+20407d08
+20404793
+204047c7
+44fac01e
+2040464f
+6800c6dd
+c0004609
+6800c6de
+6000c686
+2020480e
+704686ff
+7046df01
+202046d9
+6800c6df
+c00133d0
+2040527e
+6800c256
+243a33d0
+202033d2
+1a627e00
+c000c626
+c0014629
+c0024631
+c002c633
+c0034635
+c003c638
+c009463c
+c009c644
+c013c645
+c0174648
+c01ec649
+c00a4658
+c00ac65c
+c01fc65f
+c0204665
+c008466b
+c016466c
+c016c677
+20600000
+7046ad00
+7046ac00
+20600000
+2040462b
+20204631
+7041e200
+70468000
+70420500
+7046ac00
+7046ad00
+20207e38
+204033a9
+202046c2
+204046b6
+20203408
+58000002
+6000c680
+20600000
+7046ac00
+58000001
+6000c6ad
+20600000
+6800c1e2
+c1008000
+7041e201
+20403416
+20403414
+204046b6
+20403408
+2020340e
+20204631
+58000005
+6000c6ac
+20600000
+202033cd
+da400000
+6800c217
+1fef8422
+68014215
+1fe22200
+20206606
+da400000
+6800c69a
+c4008000
+6800c217
+207a0000
+1fef8422
+68014215
+1fe22200
+202065df
+204046b6
+58000000
+600146b7
+20203408
+20407e38
+7046b000
+202046d9
+20407e38
+7046b001
+680446c1
+60044496
+20403416
+20205abf
+68014509
+c1000000
+680446c9
+207a0000
+60044496
+20205abf
+2020481f
+6800c6dd
+c1000000
+6800c6df
+c1808000
+20404672
+20203406
+7048df01
+df20000b
+d8a048e0
+d8c048c9
+20207f01
+6800c6dd
+c1000000
+6800c6df
+c000c67c
+2020481b
+6800c8df
+c1808000
+7048df00
+68014682
+c2803408
+c284b408
+df20000b
+d8c048e0
+d8a048c9
+20207f01
+2040468c
+20404693
+2040469e
+204046a6
+204046a9
+202046ac
+da6046db
+da40468f
+20203374
+7046df02
+20403408
+204046f4
+2020480b
+da6048ec
+da404696
+2020336d
+68014682
+c284c80b
+c280480b
+6800c8c9
+c000c80b
+c002480b
+c002c80b
+2020340a
+da6046ac
+da4046a1
+2020336d
+6800827f
+79207e00
+79207e07
+6000827f
+20600000
+da604680
+da40463c
+2020336d
+da6046ad
+da4033e9
+2020336d
+6800c6df
+c1808000
+da6046b7
+da4046c2
+20203374
+2040473a
+20206978
+2020696c
+20406835
+202046b3
+6800c69a
+c280c6be
+c28046ba
+20600000
+680146d7
+600146d9
+600146db
+202033f8
+680146d3
+600146d9
+600146db
+202033f0
+6800c6df
+c1808000
+6800c69a
+c280c6c8
+c28046cc
+20600000
+680146d1
+600146d9
+600146db
+202033eb
+68014682
+c3848000
+680146d5
+600146d9
+600146db
+680146b3
+204046f0
+20403404
+680246bd
+600248cc
+68014682
+c3858000
+202033fa
+6800c6df
+c1808000
+6800c69a
+c280c6df
+c28046e4
+20600000
+204046f8
+203a46c2
+20403406
+204033f0
+202033e1
+680146b7
+680946b5
+600946b7
+247a0000
+680146b1
+204046f0
+20403404
+680246b9
+600248cc
+68014682
+c3858000
+202033fa
+60014154
+1fe0fffc
+60014482
+20600000
+68014682
+c284b402
+c28033e9
+202046b6
+6800c217
+1fe27200
+68014215
+1fe22200
+ea210000
+c0004701
+1a20a222
+c20046fc
+20207ff1
+e8c30000
+600341d0
+18c08c0a
+d8a041be
+20407ebf
+204067d7
+20207fef
+20407fe9
+68014682
+c280470d
+c284c710
+20600000
+6800c253
+c19f8000
+20207fe7
+6800c6b0
+207a0000
+20207fe7
+20407fe9
+68014682
+c3800000
+c3848000
+20207fe7
+6800c69a
+c280c71c
+c280471f
+20600000
+6800c093
+c1818000
+202046d9
+202046d9
+78567c00
+680146d9
+600146db
+20404713
+20344718
+20404708
+24740000
+78367c00
+20600000
+20404720
+24760000
+1a227e00
+203a4730
+20403406
+da6046f1
+20204732
+20403408
+da604719
+dfe00005
+98effe00
+9a60a600
+ea608000
+207a0000
+20404762
+1a60a601
+20204735
+68014682
+c284c73e
+c280474e
+20600000
+20405892
+247a0000
+20404765
+24740000
+1fe0ffff
+1feffe05
+d8404741
+98408c00
+e8c08000
+1fe22200
+e8c90000
+20407ea5
+20405a64
+1a227200
+20407e9f
+20207f01
+20405271
+247a0000
+20404765
+24740000
+1fe0ffff
+1feffe05
+d84047a0
+98408c00
+e8c28000
+6002c79b
+6800c79b
+1fe22200
+20404d63
+6801424e
+e0a10000
+580000a1
+e0a08000
+6802479c
+e0a48000
+20600000
+60008a9a
+da200a9a
+20207e3d
+da200a9a
+20407e54
+24740000
+68008a9a
+20600000
+68010478
+c00c465f
+20600000
+58000002
+6000c8eb
+58200008
+600246c1
+592c0005
+e0a20000
+7044a617
+5800001b
+600144fa
+20405810
+2040582c
+20405839
+20205818
+df200028
+d8a04741
+d8c0949f
+20407ef4
+df200028
+d8a047a0
+d8c094c7
+20207ef4
+df20017e
+d8c0913a
+20207ef4
+df2001e7
+d8c092b8
+20207ef4
+204047ae
+24740000
+6800c69f
+20404790
+6800c6a0
+20404790
+6800c6a1
+20204790
+207a0000
+1fe18480
+202067f9
+204047ae
+24740000
+20404797
+202047b4
+da200000
+6800c69f
+204047a9
+7d3a2200
+6800c6a0
+204047a9
+7d3a2201
+6800c6a1
+204047a9
+7d3a2202
+1a227e00
+6000c6a9
+6800c69e
+9a2ffe00
+6809469c
+9840fe00
+600146aa
+20600000
+207a0000
+1fe18480
+2040681d
+2420fff1
+20207fef
+20407fe9
+6800c6a8
+247a0000
+6800c69b
+207a0000
+20207fe7
+2040666a
+680146aa
+da200ac2
+6808c69e
+204066b3
+2040666d
+68008ac2
+1fe27200
+6000c3af
+20407ef4
+68008ac2
+1fe27200
+6000c515
+20407ef4
+e8c08000
+6000c6e6
+e8c08000
+6000c6dd
+20600000
+6800c69a
+c4008000
+d8400003
+680146a4
+1fe22400
+da2046a6
+204065df
+680946a6
+58001b3a
+98467c00
+24628000
+6800c6a8
+207a0000
+1fe20400
+680146a4
+1fe0a403
+da200ac2
+204065df
+202047e8
+680146a2
+207a0000
+2040666a
+d8400001
+da2046a8
+204066b3
+6800c6a8
+207a0000
+680146a2
+1fe0fe01
+da200ac2
+6808c6a8
+204066b3
+2040666d
+204047ba
+e8c10000
+207a0000
+1fe20a00
+e8c88000
+18427200
+20407f01
+202047e9
+6800c69a
+c4008000
+680146ae
+1fe22400
+d8400004
+da200ac2
+204065df
+68008ac2
+c080c7f9
+58000001
+60008ac2
+18007203
+2040630d
+680146ae
+1fe22400
+d8400004
+da200ac2
+20406606
+68018ac3
+6001c0a0
+6001c4a0
+20600000
+202046d9
+da200000
+da6048d4
+20407d24
+204046f4
+6800c8eb
+6000c8ec
+20600000
+58000000
+20404816
+70467901
+20407cd3
+20407cdd
+68014682
+c3860000
+2020340a
+6809423f
+e0408000
+e8a08000
+6000c685
+20600000
+6801423f
+efe08000
+c1800000
+2020340a
+6809423f
+e8408000
+c000c82a
+58000001
+6809423f
+e0408000
+18408c02
+e8c08000
+e0a08000
+e8c10000
+20207f9c
+58000002
+20404816
+18408c05
+e8c10000
+203a340a
+20207f9c
+60030101
+68008101
+6000810c
+e8c08000
+6000810b
+e8c08000
+6000810a
+e8c08000
+60008109
+e8c08000
+60008108
+e8c08000
+60008107
+68030107
+20600000
+204068a2
+6800c223
+6000c4a0
+6800c225
+e0a08000
+6800c227
+e0a08000
+6801c4a0
+6001c0a0
+20600000
+68014203
+9a40fe00
+1ff0fe00
+600101f7
+18422400
+2040489b
+580000a0
+2040488d
+680081f7
+2040488d
+c5144856
+680081f8
+2040488d
+204048a1
+2040489b
+580000a1
+2040488d
+2040487f
+e2208000
+1a20a201
+1a40a5ff
+2422c85a
+202048a1
+1a50fe00
+600101f7
+18422400
+2040489b
+580000a0
+2040488d
+680081f7
+2040488d
+c514486b
+680081f8
+2040488d
+ea208000
+2040488d
+1a20a201
+1a40a5ff
+2422c86b
+202048a1
+df20000a
+204048be
+204048a6
+204048d2
+204048c7
+203a48a9
+c2004875
+202048a9
+204048a9
+204048af
+204048d2
+204048a6
+204048d2
+202048a9
+df200008
+da600000
+204048be
+204048a6
+204048d2
+1a63a600
+204048c7
+9a60a600
+204048d2
+204048a9
+c2004882
+20404879
+1a627e00
+20600000
+df200008
+1fe22600
+204048a9
+2a6ffe07
+2040c8ac
+2440c8af
+1a63a600
+204048d2
+204048a6
+204048d2
+204048a9
+204048d2
+c2004890
+20204871
+204048ac
+204048a6
+204048d2
+204048af
+204048d2
+202048a9
+204048af
+204048a6
+204048d2
+204048ac
+202048d2
+78347c00
+6800cffe
+202048b2
+78547c00
+6800cffe
+202048b2
+78347c00
+6800cfff
+202048b2
+78547c00
+6800cfff
+202048b2
+1fe10e07
+1fe97e00
+d8408070
+98408400
+e8408000
+f9207e00
+e0408000
+18408404
+e8408000
+f9347e00
+e0408000
+20600000
+6800cfff
+1fe10e07
+1fe97e00
+d8408070
+98408400
+e8408000
+f93ffe00
+e0408000
+20600000
+20000004
+6800cfff
+1fe10e07
+1fe97e00
+d840811c
+98408400
+58000000
+e8488000
+a84fffff
+7920fe00
+20600000
+20600000
+44fb401e
+68108a26
+2feffe07
+2040c8ea
+2040492e
+68108a26
+60008b22
+68108a27
+60008b23
+60108a27
+1fe47e00
+68088d37
+98417e00
+60008d37
+708a26e0
+68008b23
+2fe00201
+2040c941
+68008b22
+2fe00201
+2040c94a
+20404b61
+20204903
+44fbc01e
+20404919
+708a0000
+20002710
+708a10c0
+68110050
+793ffe0a
+60110050
+708a003c
+708a26ff
+708a27ff
+708a0400
+700c6b02
+58000d9d
+d8a00c6e
+98a67200
+20207ed4
+68088c6c
+202067fb
+68008d45
+207a0000
+68088c6c
+2040681d
+2020c8ea
+20600000
+d8e00000
+20407f16
+247a0000
+68008d46
+247a0000
+68008d45
+245a4bb7
+20600000
+d8a00b68
+38011212
+38048000
+38080000
+380d0000
+e0a48000
+38022412
+38048604
+38081000
+380c0008
+e0a48000
+38000001
+e0a08000
+20600000
+700c6b02
+58000000
+60008b67
+60010c65
+1fe0fe01
+60010c67
+1fe0fe01
+60010c69
+58008ffa
+60010b7c
+5800903a
+60010b7e
+d8a00b80
+d8c090fe
+20407eb3
+68008c6d
+245a492b
+2020490b
+60008ba2
+60008bbb
+20600000
+68108a26
+c2834931
+20600000
+20404936
+20407f15
+58000280
+d8e00000
+20207f08
+68008d36
+c081493b
+700d4600
+700d4700
+20600000
+68008d53
+207a0000
+700d5300
+700d3602
+700d4501
+20600000
+708a2701
+20204b37
+68008b22
+c2824955
+20600000
+68108a18
+e0a08000
+c2004946
+20600000
+44fc401f
+708a2611
+68108a20
+60008b24
+1fe27200
+203a4943
+d8a00c6e
+20404946
+68008b24
+1fe67c07
+20610000
+68008c6e
+1fe17e80
+c040495a
+c0004962
+20202a8c
+68008c6e
+1ff1fe00
+1fe37e00
+1fe17e03
+c000496a
+c000c970
+c0014975
+20202a8c
+68008c6e
+1ff1fe00
+1fe37e00
+1fe17e03
+c0004976
+c000c97e
+c0014983
+20202a8c
+68008c6f
+c004498a
+c00349a0
+c00549ea
+c00049fc
+20204984
+68008c6f
+c0014a2f
+c000ca33
+c001ca45
+20204984
+20204984
+68008c6f
+c000ca4f
+c001ca79
+c002caa3
+c004cabc
+c005cad7
+c003c984
+20204984
+68008c6f
+c0054ae8
+c004caf9
+c005cb11
+20204984
+20204984
+68108a11
+79207e00
+60108a11
+20204988
+708a1240
+20600000
+68008c6e
+c0c04984
+68008c72
+c0804984
+68008c73
+c0804984
+68008c74
+c080c984
+68008c75
+c0804984
+68008c70
+c0804984
+68008c71
+c0804984
+68008c6b
+c002499c
+c001c99e
+20204984
+da400001
+20204a14
+da400001
+20204a12
+44fcc01f
+793f8023
+68008c71
+c000c9b6
+c00149cf
+c001c9d2
+c010c9a9
+c01149e0
+20204984
+700d4b00
+68008c72
+c00049ae
+c000c9b2
+20204984
+da200b93
+ea208000
+98002400
+20204b21
+da200bac
+ea208000
+98002400
+20204b21
+68008d48
+245a49c7
+58000b68
+68088b68
+60010d3f
+60088d41
+68008c74
+98467c00
+242149c5
+68008d41
+98002400
+68010d3f
+1fe0fe01
+98002200
+20204b21
+68008c74
+202049c0
+68108a04
+245a49cb
+700d4800
+20600000
+68108a04
+79207e07
+60108a04
+20600000
+58000b80
+68088b80
+202049ba
+68008c70
+1fe67c03
+24214984
+68008c70
+da200be4
+c0004b1e
+79200023
+da200be9
+c000cb1e
+da200c07
+c0014b1e
+da200c47
+c001cb1e
+20600000
+68010c72
+c000c9e5
+68010b7c
+1fe22200
+20204b1e
+700d4501
+700d3601
+68010b7e
+1fe22200
+20204b1e
+68008c6b
+c0824984
+68008c6e
+c0c0c984
+68008c70
+c0804984
+68008c71
+c0804984
+68008c74
+c080c984
+68008c75
+c0804984
+68008c72
+c0804984
+68008c73
+c0804984
+da400001
+20204a12
+68008c6b
+c0014984
+68008c70
+c0804984
+68008c71
+c0804984
+68008c74
+c0814984
+68008c75
+c0804984
+68008c73
+c0804984
+68008c6e
+c0404a0d
+c040ca18
+c0414a1c
+20204984
+68008c72
+c0804984
+da400002
+68008d39
+c000ca16
+da200c65
+20204b21
+da200c67
+20204b21
+da200c69
+20204b21
+68008c6b
+c0824984
+da400002
+20204a12
+68008c6b
+c0824984
+68008c72
+c040ca29
+c0414a2b
+c041ca2d
+1fe17e7f
+c0004a25
+20204984
+68008d3b
+da400002
+c000ca14
+20204a12
+68008d3c
+20204a26
+68008d3d
+20204a26
+68008d3e
+20204a26
+700d4c01
+da200d4d
+da400001
+20204b21
+68010c70
+d84001ba
+98467c00
+2422c984
+793f8023
+68008d42
+243a4a42
+700cf600
+68008c74
+98002400
+da200cf6
+20404b21
+d8a00cf6
+df200008
+20207ec6
+700d4200
+700cf601
+20204a3b
+68008c74
+c080c984
+700d4b01
+da400001
+68008d49
+c0004a4d
+c000ca4e
+20204a12
+20204a14
+20204a12
+68008c6b
+c0824984
+68008c74
+c0804984
+68008c75
+c0804984
+68008c71
+c0804984
+68008c73
+c0804984
+68008c6e
+c0004a5e
+c000ca66
+c0014a67
+20204984
+68008c70
+c080c984
+68108a00
+793ffe07
+60108a00
+700d3900
+700d3a01
+20204988
+20204984
+68008c70
+c0804984
+68008c72
+c040ca72
+c0414a75
+c041ca77
+1fe17e7f
+c0004a70
+20204984
+700d3b00
+20204988
+700d3c00
+700d5301
+20204988
+700d3d00
+20204a73
+700d3e00
+20204a73
+68008c74
+c0804984
+68008c75
+c0804984
+68008c6e
+c0004a82
+c000ca8f
+c0014a90
+20204984
+68008c70
+c080c984
+68108a00
+79207e07
+60108a00
+700d3901
+700d3603
+700d4300
+20404988
+20407f15
+58001388
+d8e0000f
+20207f08
+20204984
+68008c70
+c0804984
+68008c71
+c0804984
+68008c72
+c040ca9d
+c0414a9f
+c041caa1
+1fe17e7f
+c0004a9b
+20204984
+700d3b01
+20204988
+700d3c01
+20204988
+700d3d01
+20204988
+700d3e01
+20204988
+68008c6e
+c0804984
+68008c72
+c0804984
+68008c73
+c0804984
+68008c74
+c0804984
+68008c75
+c0804984
+68008c71
+c0804984
+68008c70
+1fe17e80
+c0804984
+68008c70
+c0804aba
+700c6b02
+68008c70
+60108a04
+20404988
+700d4801
+20600000
+700c6b03
+20204ab5
+68008c6b
+c0014984
+68008c6e
+c0804984
+68008c72
+c0804984
+68008c73
+c0804984
+68008c74
+c0804984
+68008c75
+c0804984
+68008c71
+c0804984
+68008c70
+1fe67c01
+24214984
+68008c6b
+c001cad1
+c0024ad1
+20204984
+68008c70
+c0004ad5
+700c6b04
+20204988
+700c6b03
+20204988
+68008c6b
+c0824984
+68008c6e
+c080c984
+68008c70
+c0804984
+68008c71
+c0804984
+68008c74
+c0804984
+68008c75
+c0804984
+68008c72
+c0804984
+68008c73
+c0804984
+20204988
+700d4c01
+68008c71
+60008d4d
+68008c72
+1fe67c01
+2042caf5
+68008d36
+c0824988
+700d3602
+20404988
+20007530
+20007530
+20600000
+700d4501
+700d3a00
+700d3604
+20600000
+700d5001
+20404b03
+68010c70
+60010d4e
+68008c74
+98007200
+d8c00c76
+d8a00cb6
+20407f01
+20204988
+68010c70
+d8400200
+98467c00
+24628000
+68010c72
+d8400000
+98467c00
+24628000
+68010c74
+d8400001
+98467c00
+24628000
+700d4301
+20600000
+68008c74
+c0804984
+68008c70
+c0004b17
+c000cb1a
+20204984
+700d4a00
+700d4901
+20204988
+700d4401
+700d4a01
+700d4900
+20204988
+ea208000
+98002400
+1a20a201
+44fd401f
+c591cb2c
+1a40fe01
+1fe3fe00
+60108a18
+708a1803
+68008c74
+1fe0fffe
+1fe37e00
+60008c74
+c0004b35
+68010c74
+9a467c00
+20214b30
+1fe22400
+1a227e00
+60010b65
+1a427e00
+60008b67
+20204b37
+d8e00000
+20204b57
+44fdc01f
+68008b67
+207a0000
+1fe27200
+1fe67c40
+20214b3e
+df200040
+68008b67
+9f267e00
+60008b67
+68010b65
+1fe20c00
+e8c08000
+60108a18
+c591cb47
+708a1800
+c2004b43
+18c27e00
+60010b65
+d8e00000
+20404b57
+68008b67
+247a0000
+68008d36
+c1808000
+700d3602
+20600000
+da208a19
+d8e00001
+e8c08000
+e2208000
+c2004b54
+58000000
+f9207e00
+60108a10
+68088d37
+9841fe00
+60008d37
+20600000
+d8e00002
+da208a1a
+20204b54
+44fe401f
+68008d38
+207a0000
+68008d37
+243a4bac
+68008d45
+203a4b86
+68008d36
+c001cbbf
+c0814b86
+68008d3a
+243a4b86
+20404b6f
+20204b7a
+68008d38
+c4008000
+68008d37
+c3808000
+68008d38
+793ffe01
+60008d38
+68008d51
+207a0000
+c0084ba8
+20202a8c
+68008d38
+c4010000
+68008d37
+c3810000
+68008d38
+793ffe02
+60008d38
+68008d52
+207a0000
+c0104b89
+c010cba4
+20202a8c
+d8a00d54
+df200006
+20207ec6
+68008d4c
+68088d4b
+98417e00
+203a4ba0
+68088d4a
+9840fe00
+c000cb91
+20204ba0
+700d5200
+68008d55
+c0014ba1
+c001cba1
+68008d55
+60008d54
+68008d56
+e0a08000
+68008d58
+e0a08000
+68008d5a
+e0a08000
+df200004
+d8c00d54
+20204b5e
+700d5200
+df200008
+d8c00d54
+20204b5e
+700d5200
+df200003
+d8c00d74
+20204b5e
+700d5100
+df200008
+d8c00d64
+20204b52
+68008d36
+c001cbb0
+c0014bb2
+20600000
+700d3700
+20600000
+68108a00
+79207e07
+60108a00
+700d4701
+20600000
+68008d36
+c1018000
+c0014bbb
+20600000
+68008d47
+207a0000
+700d4601
+20204bc2
+d8e0000f
+20407f16
+247a0000
+68108a00
+c4038000
+708a00fc
+20007530
+708a003c
+20600000
+44fec01f
+6800c1ce
+247a0000
+20404bce
+24544be6
+20600000
+44ff401f
+18622200
+d8400004
+e8608000
+c000cbd8
+18408401
+c0014bd8
+18627e00
+60110058
+20600000
+68110112
+98467c00
+24214bd8
+78547c00
+1a220600
+20404bee
+98408400
+68110112
+98467c00
+24214bdf
+1a220600
+e8608000
+c000cc3f
+20202a8c
+44ffc01f
+68110058
+98000600
+20404bee
+98608600
+18627e00
+60110058
+20600000
+e8608000
+18608602
+c0014bf3
+e8608000
+20600000
+e8610000
+20600000
+6811005e
+194095fb
+99409400
+20600000
+d8400004
+20204bfc
+d8400002
+47004020
+1f20f201
+6811005e
+1fe21400
+1f227e00
+e1488000
+1fe0ffff
+99409400
+19427e00
+60010258
+18427e00
+c1010000
+68010258
+6011005e
+20204c0b
+58000000
+60010258
+20600000
+20758000
+58004d28
+600141f3
+580001a0
+60014243
+58001800
+60110054
+58001bff
+60110056
+58001c00
+6011005a
+20404c28
+70806200
+58001c00
+6011005e
+60110060
+58001800
+60110058
+60010244
+68110050
+793ffe0f
+60110050
+204066ce
+70804301
+70806281
+20600000
+58001fff
+6011005c
+68108081
+1fe1fe07
+60108081
+20600000
+4700c020
+6810810c
+98002400
+c301cc37
+68110112
+98002600
+d840044f
+98467c00
+24628000
+68110058
+98000600
+20204bc8
+6818810c
+284ffe06
+2020cc3a
+60108015
+20600000
+47014020
+6800c1ce
+203a4c44
+78347c00
+20600000
+e8610000
+98006000
+98000e00
+e8608000
+98000400
+1e0b7e00
+1fecfe00
+c01fcc4d
+20600000
+4701c020
+18e27e00
+c0004cdc
+c000cc66
+c0014c6b
+c001cc7a
+c0024cb3
+c002ccdc
+c0034cc6
+c003cc5c
+c0084cc9
+c008ccd1
+c0094ca5
+c009cc85
+20204cdc
+20404cdc
+20407f9e
+2040688c
+204033d2
+204033d9
+2020688f
+70424500
+204033d0
+20404c13
+202033db
+20404cf2
+68110000
+e1410000
+18007206
+20204cdd
+e8610000
+60014243
+60110052
+20600000
+e8608000
+1fe20400
+60108024
+e8608000
+98408400
+79207e07
+60108023
+e8608000
+98408400
+1fe27200
+20600000
+c515ccc4
+20404c6f
+e8608000
+60108025
+98408400
+c2004c7c
+184104ff
+e8608000
+98467c00
+2422ccc4
+20204cdc
+c595ccc4
+20404c6f
+60040a9a
+20407422
+df200010
+d8a00ac2
+20404ca0
+600c0aa2
+d8a00ad2
+20407497
+da200ad2
+da400ac2
+d8a00ae2
+20407352
+df200010
+d8c00ae2
+20404c9c
+680c0aa2
+68040a9a
+1fe0fff0
+60040a9a
+243a4c88
+20204c80
+e8c08000
+60108025
+c2004c9c
+20600000
+e8608000
+e0a08000
+98408400
+c2004ca0
+20600000
+c595ccc4
+d8400000
+df200010
+d8a00ac2
+20404ca0
+68108085
+1fe17efd
+60108085
+d8c00ac2
+df200010
+20407478
+20407428
+20407491
+20204c80
+df200020
+d8a04000
+d8400000
+e8608000
+e0a08000
+98408400
+c2004cb6
+184104ff
+e8608000
+98467c00
+2422ccc4
+70802300
+20404cdc
+20404be6
+204064a3
+20407f9e
+20202001
+70802300
+20202000
+e8630000
+600340a0
+20204cdc
+e8608000
+6000825a
+1fe27200
+e8610000
+6001025b
+1fe20a00
+204066fd
+20204cdc
+e8608000
+6000825a
+1fe27200
+e8610000
+6001025b
+d8a01000
+204066fd
+6808825a
+da201000
+6801025b
+20206608
+18007204
+20404cf4
+18007e01
+e1408000
+1e027e00
+e1418000
+18000e0e
+47024020
+20404cf6
+18e27e00
+e1408000
+1f227e00
+e1408000
+18000e05
+1f20f202
+20204bf9
+18000eff
+20404cf4
+58000001
+e1408000
+18007201
+20204ce3
+1800140c
+20204cf7
+18001408
+20204cf7
+18001406
+20204bf5
+7827fc00
+7824fc00
+e9408000
+08008008
+c2004cfa
+78247c00
+08008010
+78447c00
+7844fc00
+7847fc00
+1ff0fe00
+20600000
+7041ce00
+20600000
+680341d0
+680b0040
+98467c00
+20600000
+6800804b
+c2814d0f
+204062ef
+70007c08
+20204d04
+793ffe02
+6000804b
+20406001
+58000000
+7934fe01
+6000807f
+20204d04
+20600000
+70007c17
+d8a004d9
+58000000
+2d0ffe1b
+7920fe01
+e0a08000
+58000000
+e0a10000
+680141e3
+e0a10000
+6800c1e5
+e0a10000
+6800c1e7
+e0a10000
+20204d04
+70007c18
+20204d04
+20406899
+20608000
+d8400007
+2040681d
+2420cd2f
+70424501
+20600000
+6800c245
+c1808000
+20404c62
+20204cec
+4702c020
+68010264
+1fe20c00
+e8c08000
+1fe1040f
+1ff1fe00
+c004cd53
+c003cd53
+c0054d5f
+c002cd4b
+c000cd3f
+20600000
+18427e00
+c002cd43
+c001cd4a
+20600000
+700a9927
+20407d86
+6800c092
+c4030000
+18427e00
+c002c38e
+20600000
+20600000
+20404d5f
+da200001
+20404d63
+6801424c
+e0a10000
+58000000
+e0a08000
+20600000
+da200001
+20404d63
+6801424c
+e0a10000
+58000000
+e0a08000
+700a8e01
+6800c252
+79207e06
+6000c252
+700a9912
+20207d86
+e8c08000
+c000cd62
+20600000
+20600000
+20405240
+1a220400
+60088a8e
+1fe20a00
+1a227e00
+e0a10000
+20600000
+2035cd6f
+58004365
+d8a04246
+98a67200
+20407ed4
+47034020
+58000551
+d8a00511
+98a67200
+20407ed4
+580002c9
+d8a0025d
+98a67200
+20407ed4
+20205318
+4703c020
+18c20400
+18420c00
+e8c10000
+60010266
+e8c10000
+60010268
+18c27e00
+60010264
+6800c681
+c0004d85
+202050ef
+68010266
+203a4dfc
+47044021
+68008268
+c000cd9d
+c0284de0
+c028cdf5
+c0294df3
+c029cdf3
+20204dfc
+4704c021
+2040527e
+6800c256
+c0004d9b
+c000cd9b
+c0014d9b
+c001cd9b
+c040cd9b
+c0604d9b
+c0404d9b
+c0204d9b
+20600000
+58000000
+20600000
+20404d8f
+247a0000
+204052b8
+20404e01
+6809026f
+203a4dfb
+204052c1
+6801026f
+e0a10000
+18007e01
+e0a10000
+20204dfc
+6800c364
+207a0000
+1fe22200
+47054021
+680202d5
+d8400100
+98408400
+1c427e00
+98467c00
+24610000
+70436400
+1a227e00
+c0284db7
+20202a8c
+d9000000
+204052b8
+20404e7a
+204052c3
+20407ea8
+20404ead
+204052c1
+5800000c
+e0a10000
+18007e01
+e0a10000
+20204dfc
+4705c021
+68010275
+1fe0fe04
+1ff1fe00
+1fe97e00
+1fe08401
+d8c04260
+e8c18000
+207a0000
+60018ac2
+68008ac2
+1fe22200
+20404dd3
+1a427e00
+6000c260
+20600000
+d8e00000
+da400000
+18e67c07
+24610000
+aa2fffff
+2020cdda
+20204dde
+18427e00
+203a4dde
+f9202400
+184085ff
+18e08e01
+20204dd5
+20405274
+247a0000
+20404d8f
+247a0000
+204052c5
+20406e11
+20404dc3
+20204dec
+20405274
+247a0000
+204052c5
+20406e11
+204052ce
+68010275
+203a4dfb
+e0a10000
+68014248
+e0a10000
+20204dfc
+20404d33
+20204dfc
+47064021
+70028400
+20406a8a
+68008284
+c1008000
+20204dfc
+20405264
+58000000
+60010266
+60010268
+70026a01
+20600000
+4706c021
+204052c3
+18002400
+68010266
+1fe22600
+68010264
+98000c00
+20404e10
+1a627e00
+1a60a7fc
+1fe0fffc
+243a4e08
+1a427e00
+6001026f
+20600000
+47074021
+e8c08000
+c000ce49
+c0014e51
+c001ced5
+c0024f05
+c002cfa2
+c0034fcb
+c003d01b
+c0045050
+c004d060
+c0054e1f
+c005d061
+20405062
+20600000
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+5800000b
+e0a08000
+18e27e00
+e0a08000
+e8c10000
+c0014e2d
+c001ce33
+20600000
+58020008
+e0a30000
+58000280
+e0a20000
+18007e0c
+20204e38
+5803000c
+e0a30000
+58000006
+e0a40000
+18007e10
+9a40a400
+20204e1e
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+e8c10000
+60010aa2
+1a627e00
+9a262600
+204052c3
+5800000b
+e0a08000
+18e27e00
+e0a08000
+68010aa2
+20204e2a
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+98c08c00
+1a627e00
+9a262600
+20204e1e
+20407ea8
+20407ead
+d9000000
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+e8c10000
+1fe20400
+e8c10000
+1fe21600
+4707c021
+18427e00
+c000ce64
+c001ce86
+c008ce92
+c009ce9d
+20405062
+20204ed4
+20407ea8
+d8400050
+68014248
+243a4ece
+19627e00
+60014248
+1c427e00
+600202d5
+20404e6e
+20204ea9
+600902d3
+19627e00
+600102c9
+1a227e00
+600102cb
+1a427e00
+600102cd
+1a627e00
+600102cf
+18e27e00
+600102d1
+20600000
+680902d3
+680102c9
+1fe21600
+680102cb
+1fe22200
+680102cd
+1fe22400
+680102cf
+1fe22600
+680102d1
+1fe20e00
+20600000
+20407ea8
+58000051
+d8400051
+6801424a
+243a4ece
+19627e00
+6001424a
+6800c251
+79207e00
+79207e01
+6000c251
+20204eb1
+20407ea8
+d8400052
+6801424c
+243a4ece
+19627e00
+6001424c
+6800c252
+79207e00
+79207e01
+6000c252
+20204eb1
+20407ea8
+1b427e00
+d8400053
+6801424e
+243a4ece
+19627e00
+6001424e
+6800c253
+79207e00
+79207e01
+6000c253
+20204eb1
+58000001
+6001027d
+70436450
+20204eb3
+6800c250
+79207e00
+79207e01
+6000c250
+58000000
+6001027d
+47084022
+20407ead
+58000003
+e0a08000
+18e27e00
+e0a08000
+58000008
+e0a10000
+18427e00
+e0a10000
+19627e00
+e0a10000
+6801027d
+c000cec9
+290c0000
+2020cec4
+58000004
+e0a10000
+18007e00
+e0a10000
+5800000c
+20204ed0
+e0a10000
+18007e02
+e0a10000
+5800000c
+20204ed0
+79201000
+20204eb1
+9a40a400
+1a627e00
+9a262600
+20204ed4
+20204e1e
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c10000
+1fe21600
+e8c10000
+1fe20400
+4708c022
+58000050
+98467c00
+2022ceed
+58000051
+98467c00
+2022cef3
+58000052
+98467c00
+2022ceff
+58000053
+98467c00
+2022cef9
+20600000
+19627e00
+60014248
+6800c250
+79207e01
+6000c250
+20204e1e
+19627e00
+6001424a
+6800c251
+79207e01
+6000c251
+20600000
+19627e00
+6001424c
+6800c253
+79207e01
+6000c253
+20600000
+19627e00
+6001424e
+6800c252
+79207e01
+6000c252
+20600000
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c10000
+1fe20400
+18422200
+47094022
+58000050
+98467c00
+2022cf1c
+58000051
+98467c00
+2022cf3a
+58000052
+98467c00
+2022cf26
+58000053
+98467c00
+2022cf30
+20205062
+18a21600
+6800c250
+79207e04
+79207e03
+6000c250
+19620a00
+d9600050
+68014248
+1fe20400
+20204f43
+18a21600
+6800c252
+79207e04
+79207e03
+6000c252
+19620a00
+d9600052
+6801424c
+1fe20400
+20204f43
+18a21600
+6800c253
+79207e04
+79207e03
+6000c253
+19620a00
+d9600053
+6801424e
+1fe20400
+20204f43
+18a21600
+6800c251
+79207e04
+79207e03
+6000c251
+19620a00
+d9600051
+6801424a
+1fe20400
+4709c022
+58000005
+e0a08000
+18e27e00
+e0a08000
+58000006
+e0a10000
+18427e00
+e0a10000
+18007e00
+e0a10000
+18007e00
+e0a10000
+18007e0a
+9a40a400
+60090282
+18e27e00
+60008281
+18007e50
+a961fe00
+2020cf59
+1fe0fe01
+20600000
+78547c00
+c3810000
+c4000000
+c4008000
+79207e02
+18c20a00
+18a08bff
+e0a08000
+78347c00
+20600000
+6800c250
+20404f5a
+24344f6b
+70028050
+68014248
+60010282
+20204f7f
+6800c251
+20404f5a
+24344f72
+70028051
+6801424a
+60010282
+20204f7f
+6800c252
+20404f5a
+24344f79
+70028052
+6801424c
+60010282
+20204f7f
+6800c253
+20404f5a
+24740000
+70028053
+6801424e
+60010282
+470a4022
+2040523a
+204052b8
+18002400
+204052c3
+18007e04
+e0a08000
+6800c255
+e0a08000
+58000008
+e0a10000
+68010282
+e0a10000
+58000000
+e0a10000
+18007e01
+e0a08000
+18007e02
+e0a08000
+68008280
+c028cf97
+58000030
+e0a10000
+20204f99
+580003e3
+e0a10000
+d840000c
+6009026f
+204052c1
+6801026f
+e0a10000
+18007e01
+e0a10000
+70028000
+20204e1e
+18c08c01
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c10000
+1fe22200
+470ac022
+58000050
+9a267c00
+2022cfba
+58000051
+9a267c00
+2022cfbe
+58000052
+9a267c00
+2022cfc2
+58000053
+9a267c00
+2022cfc6
+18c08c02
+e8c10000
+98007c00
+20204e1e
+6800c250
+79207e05
+6000c250
+20204e1e
+6800c251
+79207e05
+6000c251
+20204e1e
+6800c252
+79207e05
+6000c252
+20204e1e
+6800c253
+79207e05
+6000c253
+700a9906
+20207d86
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c10000
+1fe22200
+e8c10000
+1fe21600
+1a220400
+20407ea8
+470b4022
+58000050
+98467c00
+2022cff2
+58000051
+98467c00
+2022d002
+58000052
+98467c00
+2022cfe6
+58000053
+98467c00
+2022cfec
+20405062
+20205017
+19620400
+6801424c
+98467c00
+2022cff8
+20405062
+20205017
+19620400
+6801424e
+98467c00
+2022cffa
+20405062
+20205017
+19620400
+68014248
+98467c00
+2022cffe
+20405062
+20205017
+20405079
+2020500a
+2040507f
+6801424c
+203a500a
+2020500a
+20405074
+68008288
+243a500a
+2020500a
+19620400
+6801424a
+98467c00
+2022d008
+20405062
+20205017
+2040506f
+2020500a
+20407ead
+58000007
+e0a08000
+18e27e00
+e0a08000
+58000004
+e0a10000
+1a227e00
+e0a10000
+19627e00
+e0a10000
+18007e08
+20205019
+20407ead
+20205019
+9a40a400
+20204e1e
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c10000
+1fe21600
+e8c10000
+1fe20400
+20407ea8
+470bc022
+58000050
+98467c00
+2022d035
+58000051
+98467c00
+2022d03b
+58000052
+98467c00
+2022d041
+58000053
+98467c00
+2022d047
+20405062
+2020504f
+18422200
+19620400
+68014248
+98467c00
+2042d074
+2020504d
+18422200
+19620400
+6801424a
+98467c00
+2042d06f
+2020504d
+18422200
+19620400
+6801424c
+98467c00
+2042d079
+2020504d
+18422200
+19620400
+6801424e
+98467c00
+2042d07f
+2020504d
+20407ead
+20204e1e
+20204e1e
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+98c08c00
+58000009
+e0a08000
+18e27e00
+e0a08000
+18007e00
+e0a10000
+18007e04
+9a40a400
+1a627e00
+9a262600
+20204e1e
+20204e1e
+20204e1e
+18002400
+204052c3
+58000001
+e0a08000
+18e27e00
+e0a08000
+58000002
+e0a10000
+58000000
+e0a10000
+1a40a406
+da600004
+20204e1e
+58000000
+6001027b
+6001424a
+70425100
+20600000
+58000000
+60010275
+60014248
+70425000
+20600000
+58000000
+6001424c
+70425200
+6800c253
+c0005085
+20600000
+58000000
+6001424e
+70425300
+6800c252
+c0005085
+20600000
+700a9907
+20207d86
+6800827f
+793ffe00
+6000827f
+6801424e
+207a0000
+204052b8
+6801424e
+1fe22200
+18002453
+2020509a
+6800827f
+793ffe07
+6000827f
+6801424c
+207a0000
+204052b8
+6801424c
+1fe22200
+18002452
+2040523a
+204052c3
+18007e06
+e0a08000
+6800c255
+e0a08000
+58000004
+e0a10000
+1a227e00
+e0a10000
+1a427e00
+e0a10000
+18000408
+202050de
+470c4023
+2040523a
+204052c3
+58000002
+e0a08000
+6800c255
+e0a08000
+58000004
+e0a10000
+18427e00
+e0a10000
+19627e00
+e0a10000
+d8400008
+202050de
+470cc023
+2040523a
+204052c3
+58000004
+e0a08000
+6800c255
+e0a08000
+58000008
+e0a10000
+18427e00
+e0a10000
+58000000
+e0a10000
+58000001
+e0a08000
+58000002
+e0a08000
+580003e3
+e0a10000
+d840000c
+202050de
+470d4023
+2040523a
+204052c3
+58000006
+e0a08000
+6800c255
+1fe0fe01
+18a22200
+6000c255
+1a220a00
+e0a08000
+58000004
+e0a10000
+18427e00
+e0a10000
+19627e00
+e0a10000
+d8400008
+6009026f
+18427e00
+203a5264
+204052c1
+6801026f
+e0a10000
+18007e01
+e0a10000
+20600000
+68010275
+203a2a8c
+204052ce
+68010275
+e0a10000
+68014248
+e0a10000
+20600000
+68010266
+203a4dfc
+470dc023
+68008268
+c000d0f9
+c0284de8
+c028cdf5
+c0294df3
+c029cdf3
+20204dfc
+470e4023
+204052b8
+18002400
+204052c3
+1fe20a00
+68010266
+1fe22600
+68010264
+98000c00
+20405108
+1a60a7fc
+2422d102
+1a420400
+204050de
+20204dfc
+e8c08000
+c0015113
+c000d116
+c001d120
+c002d15c
+c002518e
+c003d213
+c00351e1
+c0045050
+c0054e3a
+2020522e
+20407ea8
+20407ead
+20204e51
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c08000
+1a20a3ff
+2422d11c
+20600000
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+e8c10000
+1fe21600
+e8c10000
+1fe20400
+e8c10000
+1fe67c00
+2022d132
+c001512e
+c002512e
+20205130
+700a9916
+20407d86
+e8c10000
+20205159
+20407ea8
+470ec023
+58000050
+98467c00
+2022d141
+58000051
+98467c00
+2022d147
+58000053
+98467c00
+2022d153
+58000052
+98467c00
+2022d14d
+20205159
+19627e00
+60014248
+6800c250
+79207e01
+6000c250
+20205158
+19627e00
+6001424a
+6800c251
+79207e01
+6000c251
+20205158
+19627e00
+6001424c
+6800c252
+79207e01
+6000c252
+20205158
+19627e00
+6001424e
+6800c253
+79207e01
+6000c253
+20407ead
+1a627e00
+9a262600
+20600000
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c10000
+1fe21600
+e8c10000
+e8c10000
+243a5188
+20407ea8
+19620400
+470f4023
+58000050
+98467c00
+2022d176
+58000051
+98467c00
+2022d17a
+58000052
+98467c00
+2022d17e
+58000053
+98467c00
+2022d182
+6800c250
+79207e05
+6000c250
+20600000
+6800c251
+79207e05
+6000c251
+20600000
+6800c252
+79207e05
+6000c252
+20600000
+6800c253
+79207e05
+6000c253
+700a9906
+20207d86
+20407ead
+1a20a3fa
+2022d18d
+18c08c01
+1a20a3ff
+20205189
+20600000
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c10000
+18c08c02
+1fe20400
+58000005
+e0a08000
+18e27e00
+e0a08000
+1a20a202
+1a227e00
+e0a10000
+20407ea8
+470fc023
+58000050
+98467c00
+2022d1ad
+58000051
+98467c00
+2022d1be
+58000052
+98467c00
+2022d1c4
+58000053
+98467c00
+2022d1ca
+202051cf
+6800c250
+79207e04
+79207e03
+6000c250
+c28151bb
+6808827f
+79200406
+6008827f
+18e27e00
+1fe0fe01
+60008281
+6800c250
+79207e02
+6000c250
+68014248
+60010282
+202051cf
+6800c251
+79207e04
+79207e03
+6000c251
+6801424a
+202051cf
+6800c252
+79207e04
+79207e03
+6000c252
+6801424c
+202051cf
+6800c253
+79207e04
+79207e03
+6000c253
+6801424e
+1fe21600
+20407ead
+19627e00
+e0a10000
+18007e00
+e0a10000
+18007e00
+e0a10000
+18007e0a
+9a40a400
+1a20a3fa
+2022d1e0
+e8c08000
+e0a08000
+1a40a401
+1a20a3ff
+202051da
+20600000
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c10000
+1fe22200
+e8c10000
+1fe21600
+20407ea8
+47104024
+58000050
+1a220400
+98467c00
+2022d1fa
+58000052
+1a220400
+98467c00
+2022d1ff
+58000053
+1a220400
+98467c00
+2022d201
+20205203
+58000000
+60010275
+60014248
+6000c250
+20205205
+20405079
+20205205
+2040507f
+20205205
+58000000
+6001027b
+20407ead
+58000007
+e0a08000
+18e27e00
+e0a08000
+58000004
+e0a10000
+1a227e00
+e0a10000
+19627e00
+e0a10000
+18007e08
+9a40a400
+20600000
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+e8c10000
+1fe21600
+e8c10000
+1fe20400
+20407ea8
+4710c024
+6800c255
+a8e1fe00
+2420d22a
+58000050
+98467c00
+2022d227
+58000051
+98467c00
+2022d22a
+2020522a
+70424800
+70425000
+2020522a
+20407ead
+1a627e00
+9a262600
+20600000
+58000001
+e0a08000
+e8c08000
+e0a08000
+58000002
+e0a10000
+58000000
+e0a10000
+58000006
+9a40a400
+18002604
+20600000
+6800c255
+1fe0fe01
+c080523e
+1fe0fe01
+6000c255
+20600000
+47114024
+da400000
+2040526e
+243a2a8c
+2040527e
+da401800
+d8e00000
+6808c256
+a84fffff
+2020d24f
+204052a0
+19667c00
+2021524f
+20405288
+20205255
+1a40a480
+18e08e01
+58000008
+98e67c00
+20215247
+da400000
+1a427e00
+203a2a8c
+20600000
+4711c024
+20405277
+18c08c01
+e8c10000
+20600000
+47124024
+20405277
+18c20a00
+18c20400
+58000000
+e0a18000
+20600000
+4712c024
+20405274
+203a2a8c
+6801c25d
+6001c260
+6801c25a
+6001c25d
+6801c257
+6001c25a
+20600000
+47134024
+6801c257
+20600000
+4713c024
+6801c25a
+20600000
+47144025
+6801c260
+20600000
+20405274
+203a2a8c
+d8c04257
+e8c18000
+203a527a
+18c08dfd
+20600000
+4714c025
+df200004
+d8c04257
+d8400000
+e8c18000
+1fe17eff
+98418400
+c2005282
+6008c256
+20600000
+47154025
+2040526e
+243a2a8c
+20405274
+203a5295
+6801c25a
+6001c257
+e8c18000
+e0a18000
+e8c18000
+e0a18000
+58000000
+e0a18000
+d8400000
+19627e00
+98e0fe00
+f9200400
+18e08e01
+98e67c00
+2422d298
+1a4d7e00
+9841fe00
+6001c260
+20600000
+4715c025
+2040527e
+18e22600
+d8400000
+d9600000
+18e27e00
+c00452b0
+6800c256
+afefffff
+2020d2b0
+18408480
+18e08e01
+1a227e00
+98467c00
+2022d2b0
+202152a5
+18427e00
+9a267c00
+242152b6
+18e27e00
+1a620400
+98461600
+1a620e00
+20600000
+47164025
+da20007f
+20405240
+6001026b
+1fe0fe04
+6001026d
+58000000
+6001026f
+20600000
+6801026b
+202052e2
+6801026d
+202052e2
+4716c025
+da2000fa
+20405240
+60010271
+1fe0fe04
+60010273
+58000000
+60010275
+20600000
+68010271
+202052e2
+68010273
+202052e2
+47174025
+20407e7c
+70028401
+2040526e
+247a0000
+da20007f
+20405240
+60010277
+1fe0fe04
+60010279
+58000000
+6001027b
+70028400
+20207e8c
+68010277
+202052e2
+203a2a8c
+1fe20a00
+20600000
+4717c025
+da400000
+da204257
+1a20a3fe
+1a20a202
+58004263
+9a267c00
+2022d2f5
+ea208000
+1a20a201
+203a52e9
+ea290000
+e8410000
+9a40a400
+1a40a404
+202052e9
+1a427e00
+20600000
+d8e0000c
+20202c32
+d8e0000c
+20202c36
+47184026
+2040527e
+6800c256
+207a0000
+204052e5
+d8400100
+98467c00
+202152f7
+204052f9
+d8a04263
+da204257
+58004263
+9a267c00
+20628000
+ea208000
+1a20a201
+243a530f
+e0a10000
+1a20a202
+20205306
+ea210000
+1a20a202
+1fe20c00
+e8c10000
+e0a10000
+1fe27200
+1f20f202
+20407f01
+20205306
+4718c026
+2040527e
+6800c256
+207a0000
+da204258
+1a20a3fd
+d8c04263
+1a20a203
+58004264
+9a267c00
+20628000
+e8c10000
+203a531f
+1fe0fe04
+1fe27200
+18c22400
+ea210000
+1fe20a00
+1a420c00
+18c08dfe
+20407f01
+2020531f
+47194026
+7855fc00
+70045501
+70043f03
+70045601
+5fffffff
+60010459
+18007e00
+60008457
+60008462
+6001c169
+6001c16c
+6002c403
+79207e27
+6002c408
+7043dc01
+7043dd00
+202056ed
+4719c026
+7834fc00
+70044003
+70047801
+70445a01
+5800ffff
+6001445c
+18007e00
+6002c408
+79207e27
+6002c403
+2020532e
+471a4026
+7854fc00
+58000017
+600144a8
+70044001
+70436e00
+7000a000
+7044c400
+7044c500
+6801046d
+600144ba
+68010441
+1feffe05
+1ff1fe00
+6001046d
+2020532e
+204053c4
+204055e8
+204056f0
+202053ce
+471ac026
+204053c4
+204032f4
+68008440
+c001d366
+2020537a
+471b4026
+7834fc00
+204056e4
+20215377
+20402c6c
+20405413
+2040561e
+7856fc00
+204054bf
+24768000
+471bc026
+68008005
+1fe0fe01
+60008005
+204055aa
+7854fc00
+20600000
+204053a9
+7854fc00
+20600000
+471c4027
+70450f00
+20407aaf
+20405c18
+78577c00
+204056e4
+202153a9
+20402c6c
+20405413
+20405489
+242c539b
+204053b7
+2036d388
+20205395
+471cc027
+6800c50f
+1fe0fe01
+6000c50f
+c0065395
+204055aa
+2040561e
+204054c7
+2040567e
+680141fb
+20407f9c
+204053a0
+203453a4
+471d4027
+20405be4
+20405bdb
+20407d9c
+68008462
+c281d3a9
+471dc027
+204057f4
+2040559d
+20405575
+20202841
+78547c00
+c5157fe7
+c514ffe7
+20600000
+471e4027
+78377c00
+204054c1
+2036d388
+20205395
+471ec027
+204053af
+204033b4
+20407a77
+700a9915
+20207d86
+58000000
+6004c4ff
+70045500
+70044000
+70043f00
+7044c500
+7044c400
+20600000
+471f4027
+68008005
+1fe0fe01
+60008005
+6800843f
+c3818000
+79207e03
+6000843f
+680144ba
+6001046d
+58000000
+600244e5
+20600000
+471fc027
+70890f36
+70890b5f
+783b7c00
+70891407
+20402c6c
+6800c1e0
+207a0000
+70890ab8
+20600000
+47204028
+70890f2e
+70890bff
+785b7c00
+70891403
+db600000
+20600000
+7844fc00
+7843fc00
+68018467
+98001e00
+68008016
+1fed8400
+79200401
+18431c00
+20600000
+204053e6
+2040291f
+58000500
+20402a8f
+20202924
+2036a939
+204053e6
+20202933
+4720c028
+20402918
+6800848c
+243a53f9
+68008016
+1fe67c24
+202153f3
+18000400
+c1128000
+18000418
+c1130000
+1800044e
+20600000
+1fe67c0a
+202153f6
+1fe0fe01
+1fe3fe00
+1fe08402
+20600000
+68008016
+1fe38400
+20600000
+d84001f4
+207a0000
+d84000fa
+c1008000
+d8400096
+c1010000
+d8400064
+c1018000
+d840004b
+c1020000
+d8400032
+c1028000
+d8400028
+c1030000
+d8400014
+20600000
+588e89be
+1fed7e00
+1fe1fed6
+98001200
+58555555
+60018467
+20600000
+47214028
+78287c00
+68020463
+98001200
+20405466
+58000200
+2034d41c
+6801044d
+1fe37e00
+d8400500
+9840fe00
+20402a24
+1b427e00
+60030491
+20600000
+4721c028
+68008016
+c012d428
+c013542e
+c013d434
+20205434
+6808c48d
+284ffe01
+2020d43f
+284ffe02
+2020d444
+2020543a
+6808c48d
+284ffe02
+2020d444
+284ffe00
+2020d43a
+2020543f
+6808c48d
+284ffe00
+2020d43a
+284ffe01
+2020d43f
+20205444
+70001625
+68008ac2
+79207e00
+60008ac2
+20600000
+70001626
+68008ac2
+79207e01
+60008ac2
+20600000
+70001627
+68008ac2
+79207e02
+60008ac2
+20600000
+47224028
+1a208c01
+e8c08000
+c4000000
+1a208a1a
+e8a10000
+1fe0fe01
+e0a10000
+1a208c19
+e8c08000
+1a208a18
+e8a88000
+9840fe00
+1fe67c24
+20215459
+1fe0ffdb
+e0a08000
+20600000
+4722c028
+6802846f
+18000400
+18007225
+c3005461
+18408401
+1fe37e00
+c200545f
+1840ffff
+60008461
+20600000
+47234028
+68008457
+98000e00
+680a846f
+a84fffff
+2020d47c
+4723c028
+68008461
+98e67e00
+20215472
+1fe60fff
+2020546c
+18e27200
+18000e00
+a84fffff
+2020d477
+1f20f201
+1f227e00
+203a547c
+18e08e01
+1f20f3ff
+20205474
+18e27e00
+60008016
+20600000
+2034d482
+37c18200
+20600000
+d9600ea0
+34730200
+20600000
+78487c00
+6801436c
+1fe21600
+2020548e
+47244029
+78287c00
+6801044d
+680a44e5
+98409600
+204053de
+4724c029
+204053d5
+7856fc00
+7826fc00
+7830fc00
+78507c00
+19623600
+37c18400
+2037549a
+1b420400
+600b009a
+242c264d
+203754a1
+dd2001e0
+1c225000
+6800843f
+c301d4a1
+2055ab05
+47254029
+204029bb
+7823fc00
+7824fc00
+09800008
+19897e00
+600082d9
+09800008
+19897e00
+e0a08000
+1fe1723f
+2022d4b1
+09800008
+19897e00
+e0a08000
+c20054ad
+4725c029
+09800018
+78287c00
+db600664
+1fef7e00
+1ff17e00
+e0a18000
+2023264d
+7836fc00
+68008017
+1fe0a200
+20402981
+7846fc00
+20202918
+47264029
+204054c9
+68088017
+2040291f
+20402924
+78287c00
+d960157c
+2020548f
+204054c9
+2020264d
+4726c029
+204053d5
+204053e3
+202054cd
+79202a00
+782efc00
+78307c00
+7850fc00
+2040547f
+19317e00
+1fecfe00
+1ff1fe00
+08008628
+7823fc00
+7824fc00
+47274029
+6800c3dc
+08008608
+e8c08000
+1fe1723f
+08008608
+2022d4e2
+e8c08000
+08008608
+c20054df
+78247c00
+08008618
+78447c00
+37d38200
+20000064
+784efc00
+20600000
+4727c029
+6800c484
+c000d4f9
+6800c485
+1ff27e00
+1febfe00
+6000c3dc
+6808c36f
+1840fe06
+6000c3dd
+680344a0
+600343de
+18427200
+d8c04370
+20407ef4
+20205504
+6800c486
+1ff27e00
+1febfe00
+1fe0fe01
+6000c3dc
+5800000c
+6000c3dd
+680344a0
+600343de
+680341d0
+e0a30000
+4728402a
+68008000
+1fe0fe01
+60008000
+db600708
+7856fc00
+202054bf
+4728c02a
+6800c49e
+c1808000
+68008000
+1fe0fe01
+60008000
+d8400c03
+6800c49f
+7d3a0406
+1a227e00
+7d3a0407
+600943dc
+680344a0
+e0a30000
+6803044f
+e0a30000
+202054bf
+4729402a
+d8400004
+6800c485
+7d3a0406
+6008c3dc
+6808c38f
+1840fe06
+6000c3dd
+680344a0
+600343de
+d8c04390
+18427200
+20407ef4
+204054c7
+20205706
+4729c02a
+18007fff
+38080001
+6002846f
+2040545b
+18007204
+d8a00463
+2040630d
+6801449c
+6001046d
+180a7e00
+1fe17e0f
+1fe67c04
+20215535
+60008458
+600086e6
+472a402a
+68094367
+60090441
+18422600
+1c40fe07
+9a66fc00
+20407f86
+18072200
+9a267e00
+9a60fe00
+68094365
+9840fe00
+60020443
+9c462200
+1a20a3fa
+da402205
+6800c495
+7d3a2406
+6800c48e
+7d3a2407
+1a427e00
+600143dc
+680344a0
+e0a30000
+6803044f
+e0a30000
+68020463
+e0a20000
+180a7e00
+e0a10000
+180a7e00
+e0a08000
+18007e02
+e0a08000
+1a2b7e00
+e0a10000
+1a6b7e00
+e0a10000
+472ac02a
+58000000
+e0a10000
+6801449c
+e0a10000
+6802846f
+e0a28000
+68008458
+d84000a0
+9841fe00
+e0a08000
+204054c7
+580043dc
+1fe08c12
+e8c18000
+60018467
+20600000
+472b402a
+7854fc00
+2020540c
+6800843f
+c4028000
+68010459
+6809045f
+98467e00
+24610000
+60010a9a
+472bc02a
+6800843f
+793ffe05
+793ffe03
+6000843f
+68020443
+68090441
+60090aa2
+98462200
+472c402b
+6800c3d3
+6000846a
+e8c90000
+e8c10000
+1febfe00
+60010441
+184b8400
+9840fe00
+e8ca0000
+600a046b
+9a20fe00
+1fe22800
+68010441
+68090aa2
+98467e00
+68090a9a
+984ffe00
+9a80fe00
+60020443
+20405713
+6801046d
+600144ba
+20600000
+472cc02b
+6800843f
+c4030000
+68010459
+6809045f
+98467e00
+24610000
+6800843f
+793ffe06
+6000843f
+6802c3ce
+6002846f
+2020545b
+472d402b
+204056ed
+204055c0
+680082d9
+2feffe04
+7920802a
+1fe37e00
+9842fe00
+2feffe02
+7920800f
+c6078000
+680082da
+203a55bc
+6800843f
+c30255bc
+2040748d
+204073fb
+247a0000
+68088456
+79400402
+60088456
+20600000
+472dc02b
+68088456
+284c0005
+20608000
+680082d9
+1fe3fe00
+9842fe00
+c4018000
+793f8405
+79400403
+60088456
+28400603
+24608000
+6800c3de
+c002d5d2
+6800c4c5
+c00155d6
+20600000
+6800843f
+79207e04
+6000843f
+20600000
+472e402b
+7044c500
+dfe00000
+6002440d
+6002c403
+79207e27
+6002c408
+6800843f
+793ffe04
+6000843f
+20600000
+472ec02b
+20405422
+20405485
+68008001
+1fe0fe01
+60008001
+20600000
+472f402b
+6800c369
+c1808000
+d8e00002
+20407f16
+247a0000
+6801436a
+6809436c
+98467e00
+d8e00002
+20407f08
+7854fc00
+20405572
+204055e1
+24768000
+472fc02b
+680302db
+6003044f
+68008002
+1fe0fe01
+60008002
+20405608
+20748000
+2040550b
+24768000
+4730402c
+68008004
+1fe0fe01
+60008004
+680482e1
+60048101
+20600000
+4730c02c
+6800849b
+c18d8000
+6803044f
+680b448f
+98467c00
+24628000
+2040223b
+24628000
+2040552b
+20405340
+4731402c
+7041ce00
+70047600
+70436900
+70049b00
+20202223
+da200001
+680082d9
+c3830000
+da200000
+20600000
+4731c02c
+68008456
+c3828000
+20405642
+20405873
+203a5664
+e8c08000
+e8c88000
+18422200
+9a267e00
+d840001b
+20407fdd
+1fe20400
+e8c08000
+1fe20200
+1a227e00
+98c08c00
+d8a043de
+18427200
+20407f01
+20405654
+20405666
+20405873
+e8c08000
+1fe22200
+18c22600
+e8c88000
+18422400
+9a467e00
+d840001b
+20407fdd
+9a40fe00
+e2608000
+9a267c00
+24628000
+20205896
+20405649
+c6148000
+6800c4e9
+c3015652
+20405876
+203a5652
+20205650
+20405873
+203a5652
+e8c08000
+e8c88000
+98467e00
+1fe67c1b
+20215652
+79200029
+20600000
+793f8029
+20600000
+1a227e00
+207a0000
+d8200001
+20600000
+4732402c
+18408401
+2040576a
+18c08dfe
+e8c10000
+d8402902
+98467c00
+24628000
+18c08c01
+18c22200
+e8c08000
+20600000
+18000400
+18000201
+4732c02c
+6008c3dd
+68088456
+79200405
+18417efc
+9821fe00
+60008456
+1fe17e1f
+280ffe29
+7920fe04
+6000c3dc
+6800c3dc
+28200601
+2420d676
+6800c3dd
+207a0000
+6800843f
+c4020000
+2040748d
+202073e3
+d8e00000
+20202c32
+d8e00000
+20202c36
+4733402c
+c6078000
+20405890
+247a0000
+680082d9
+1fe17e03
+6000c50c
+e8c08000
+1fe17e1f
+6000c50b
+207a0000
+18c27e00
+6001450d
+6800c50c
+c001dc64
+2040569a
+2434567a
+2040567c
+6801450d
+1fe20c00
+e8c10000
+600144fc
+4733c02c
+e8c10000
+c00258ab
+c0035af4
+c002dab6
+20600000
+6800c50c
+c00156a9
+c000d6c1
+20600000
+20407fe7
+d8400004
+9fe67c00
+20628000
+d8400005
+9fe67c00
+20628000
+d8400006
+9fe67c00
+20628000
+20207fe9
+6801450d
+1fe20c00
+e8c10000
+600144fc
+e8c10000
+2040569e
+24740000
+6808c50b
+6008c4fe
+680144fc
+1fe0fe04
+98467c00
+2022ffe7
+6800c50b
+1fe27200
+d8a00311
+6801450d
+1fe20c00
+20407f01
+20207fe9
+20407fe7
+6800c4fe
+247a0000
+20207fe9
+204056bd
+24740000
+6800c4fe
+d8a00311
+98a0a200
+6808c50b
+9840fe00
+6000c4fe
+6800c50b
+1fe27200
+1a220a00
+6801450d
+1fe20c00
+20407ef4
+58000311
+6001450d
+680144fc
+1fe0fe04
+6808c4fe
+98467c00
+2022ffe7
+20207fe9
+20407ea5
+d8a0445e
+680144fc
+1fe0fffb
+e0a08000
+1fe27200
+20407e9f
+20207ef4
+20407ea5
+d8a04471
+202056d9
+680141f9
+20207f9c
+680a045b
+20402a7b
+98461600
+19627e00
+6809046d
+18520400
+18438400
+98467e00
+20600000
+20402a7b
+6002045b
+20600000
+70001624
+700ac200
+4734402d
+6800c36e
+207a0000
+d8e00000
+20407f16
+247a0000
+4734c02d
+7854fc00
+78287c00
+20405572
+20405422
+204054e9
+2436d706
+68008003
+1fe0fe01
+60008003
+680082d9
+1fe17e0f
+c001d51c
+c002d728
+4735402d
+180a7e00
+d84001ff
+98417e00
+1fe0fefa
+20403cbe
+68008ac2
+6808c48d
+98467c00
+2422d6f2
+d8e00000
+68014482
+20207f08
+4735c02d
+68008476
+204053fc
+68010441
+984ffe00
+d8400177
+984ffe00
+d84186a0
+9846fc00
+6800846a
+d8404e20
+984ffe00
+9840fe00
+600244e5
+4736402d
+680140c1
+20407f86
+18078400
+9840fe00
+6001044d
+20600000
+4736c02d
+680302e1
+680b44a0
+98467c00
+24628000
+20405619
+1a227e00
+6000c48e
+680382ee
+60038101
+e8c40000
+e0a40000
+680302db
+6003044f
+18c08c06
+e8c40000
+60040463
+e8c90000
+4737402d
+184b8400
+e8c10000
+1febfe00
+60010441
+60020443
+98467e00
+1fe0d1fe
+e8c48000
+6004846b
+4737c02d
+e8c08000
+1ff18400
+18430400
+60088476
+1fe17e1f
+60008458
+20405713
+2040545b
+2040534c
+2040223b
+24628000
+4738402e
+20402841
+20405ad3
+700a9914
+20407d86
+20202223
+4738c02e
+6801445a
+98002400
+6801445c
+98002600
+680144bc
+98000c00
+78347c00
+20600000
+e8c10000
+207a0000
+9a467c00
+24610000
+9a667c00
+20628000
+20215768
+18007c01
+20600000
+18007e00
+20600000
+2040576d
+2022d779
+20600000
+4739402e
+680144bc
+98000c00
+e8c10000
+207a0000
+98467c00
+20628000
+e8c08000
+98c08c00
+e8c08000
+98c08c00
+20205770
+e8c08000
+98c08c00
+20600000
+4739c02e
+680144bc
+98000c00
+e8c10000
+207a0000
+e8c08000
+98c08c00
+18c08dfe
+e8c10000
+98467c00
+20628000
+e8c08000
+98c08c00
+2020577f
+6801049c
+2020578e
+473a402e
+680144bc
+98000c00
+18422200
+e8c10000
+203a5799
+9a267c00
+2022d79a
+e8c08000
+98c08c00
+e8c08000
+98c08c00
+20205790
+20207fef
+e8c08000
+600084a2
+1fe27200
+d8a004a3
+20407ef4
+e8c08000
+600084b3
+20407ea5
+20207ff1
+473ac02e
+204057a6
+202057b8
+d8402a00
+2040577c
+207a0000
+e8c08000
+18c20a00
+6808c3af
+18427200
+98467c00
+242157b5
+98460400
+d8c043b0
+20407f01
+18427200
+2442d7f0
+20600000
+1fe27200
+d8c043b0
+20207ef4
+da60438f
+da204370
+204057c5
+58000000
+79347e00
+60008a9a
+da6043af
+da204390
+204057c5
+20740000
+68008a9a
+203a2a8c
+20600000
+473b402e
+20407fe7
+20407eda
+da400000
+d8a00ac3
+204057df
+6800c3af
+1fe08401
+9a40a200
+1a20a202
+1a267c1f
+242157dd
+e0a88000
+d8400009
+e0a88000
+98007200
+20407ef4
+1a222400
+1a427e00
+60008ac2
+d8c00ac2
+5fffffe0
+9a608a00
+20207ebd
+20407fe9
+202057d7
+ea208000
+207a0000
+1fe0fe01
+e8c88000
+18467c09
+2022d7ee
+9a40a400
+1a220c00
+98007200
+20407ef4
+18c22200
+1a227e00
+9a667c00
+20610000
+202057df
+9a20a200
+202057ea
+58000020
+e0a08000
+c20057f0
+20600000
+473bc02e
+7855fc00
+203757f8
+2436d806
+20402bcb
+680140c1
+6001044d
+2436abde
+c507abde
+6800c50b
+243a2bde
+6800c3dd
+243a2bde
+6800c4e9
+c282abde
+6800843f
+c282abde
+20202bc0
+680940c1
+18430400
+6801044d
+9840fe00
+6001044d
+20202bd6
+d8e00000
+20205824
+d8e00000
+20205828
+d8e00001
+20205824
+d8e00001
+20205828
+d8e00002
+20205824
+d8e00002
+20205828
+d8e00003
+20205824
+d8e00003
+20205828
+d8e00004
+20205824
+d8e00004
+20205828
+d8e00005
+20205824
+d8e00005
+20205828
+6800c4e9
+f9207e00
+6000c4e9
+20600000
+6800c4e9
+f93ffe00
+6000c4e9
+20600000
+58112233
+6001c4ea
+58445566
+e0a18000
+58778899
+e0a18000
+58001122
+e0a18000
+58334455
+e0a18000
+58000066
+e0a08000
+20600000
+59000302
+60024453
+58010010
+6001c457
+7044c601
+20600000
+da200000
+d8200001
+20205850
+d8200003
+20405850
+1a427e00
+e0a08000
+20600000
+18000202
+1a20a204
+20405850
+1a20a3fc
+1a227e00
+e0a10000
+1a427e00
+e0a10000
+20600000
+1a267cf0
+24212a8c
+6800c4ff
+d8400001
+df200004
+98417c00
+2022d85a
+18438400
+c2005855
+20202a8c
+9842fe00
+6000c4ff
+1f267e04
+1ff27e00
+1ff27e00
+d8401800
+98408400
+df200000
+d8c04500
+e8c10000
+203a5869
+1f227e00
+1f20f201
+c0825863
+20202a8c
+18c08dfe
+e0c90000
+18420a00
+1a227e00
+e0a08000
+58000000
+e0a08000
+18227e00
+e0a08000
+20600000
+68014500
+1fe20c00
+20600000
+68014502
+1fe20c00
+20600000
+2040587c
+1fe20c00
+20600000
+68014506
+247a0000
+68014504
+247a0000
+68014502
+247a0000
+68014500
+20600000
+20405873
+18c08c03
+20600000
+20405873
+18c08c07
+20600000
+20405879
+18c08c07
+20600000
+20405879
+18c08c03
+20600000
+68014506
+20600000
+68014504
+20600000
+68014500
+20600000
+68014500
+d8401800
+98467e00
+1ff1fe00
+1ff18e00
+6800c4ff
+f93ffe00
+6000c4ff
+df200000
+1f23fe00
+d8404502
+98408400
+e8410000
+184085fe
+e0410000
+1f227e00
+1f20f201
+c081d89f
+58000000
+e0410000
+20600000
+e8c18000
+60018477
+c00158c1
+c001d8c9
+c00258cc
+c00358f2
+c004593f
+c00559bc
+c00659e4
+c00859fa
+c0095a2f
+c00b5a48
+c00c5a5b
+c0295a60
+20600000
+18002203
+20405a82
+58000002
+e0a08000
+680144a6
+e0a10000
+20600000
+204058c9
+18002203
+20405a82
+58000003
+e0a08000
+680144a6
+e0a10000
+20600000
+1fecfe00
+600144a8
+20600000
+20405ab1
+20407fe7
+202058cf
+d9600003
+20405756
+2040575f
+203a58f0
+242158ed
+18c08dfe
+20407ea5
+20407e9c
+243458e1
+20407e85
+20407fe9
+18002214
+20405a82
+20407e95
+58000005
+e0a08000
+58000001
+e0a08000
+20407e9f
+e8c10000
+e0a10000
+e8c08000
+1fe27200
+20407f01
+20407ea2
+196097ff
+2022d8f0
+e8c08000
+98c08c00
+202058d1
+e8c08000
+98c08c00
+202058ea
+20345a76
+20205aa5
+20405ab1
+e8c10000
+60014472
+20407ea5
+d8a0445e
+680144fc
+1fe0fff9
+204056db
+20205905
+78547c00
+6809445a
+6801445c
+98467c00
+24215902
+18427e00
+c1800000
+78347c00
+70047a01
+20205a77
+204058fb
+20740000
+68094472
+58002800
+98467c00
+2022d90c
+20205a76
+7004b400
+6809445a
+60090aa2
+2040578c
+243a5a76
+68090aa2
+2040578c
+243a5925
+18c22200
+680084b3
+1fe27200
+6808c45e
+98467c00
+2422d921
+da40445f
+20407f88
+2022d928
+680104a3
+68094472
+98467c00
+2022d930
+68010aa2
+1fe0fe01
+60010aa2
+20205911
+680084b4
+c000d930
+20205a76
+680104a3
+68094472
+98467c00
+2422d921
+7004b401
+68090aa2
+6009049e
+20205921
+680084b4
+c0005921
+7004b402
+68090aa2
+184085ff
+600904a0
+da200005
+20405a82
+58000007
+e0a08000
+6801049e
+e0a10000
+680104a0
+e0a10000
+20600000
+20405ab1
+204056df
+20205942
+6809445a
+60090aa2
+20405756
+2040576d
+18c08dfe
+18c27e00
+6001049c
+68094472
+58002a00
+98467c00
+2022d9a8
+58002803
+98467c00
+2422d990
+d9600002
+20405a88
+2421596d
+68090aa2
+2040578a
+c000d96d
+20405a94
+2422d96b
+2434596f
+78547c00
+da200014
+20405a82
+58000009
+e0a08000
+18a26000
+18a08a01
+2040597d
+20405a84
+2040578a
+20405984
+680084a2
+1fe0fe05
+e6008000
+680084a2
+c008596d
+196097ff
+2022d96d
+20405a84
+20205951
+20345a76
+20205aa5
+20405a97
+20405a84
+2040578a
+680084a2
+c008596d
+20407e9c
+68010aa2
+1fe0ffff
+e0a10000
+20405aa1
+20405984
+196097ff
+2022d96d
+2020596b
+68010aa2
+e0a10000
+680084b3
+1fe27200
+20407e9f
+20407ef4
+20207ea2
+20407e9c
+68010aa2
+e0a10000
+20407ea2
+680084a2
+1fe27200
+20407e9c
+20407e9f
+9f260c00
+18c08dff
+20407ef4
+20207ea2
+6809445a
+60090aa2
+20405a88
+24215a76
+2040578a
+c000da76
+20405a94
+2422d9a6
+da200014
+20405a82
+58000009
+e0a08000
+680084b3
+1fe27200
+1fe0fe02
+e0a08000
+68010aa2
+e0a10000
+20407e9f
+20407ef4
+20407ea2
+20205aa5
+20405a84
+20205992
+d8402a00
+2040577c
+207a0000
+18c08dfb
+e8c10000
+60010aa2
+da200014
+20405a82
+58000009
+e0a08000
+6800c3af
+1fe27200
+1fe0fe02
+e0a08000
+68010aa2
+e0a10000
+d8c043b0
+20407ef4
+20407ea2
+20205aa5
+68090478
+6800c4e9
+c281d9dd
+2040576a
+203a5a76
+18c08dfe
+e8c10000
+d8402a00
+98467c00
+2022d9d3
+e8c08000
+1fe67c16
+202159ca
+18007e16
+1fe22600
+20407ea5
+1a60a201
+20405a82
+5800000b
+e0a08000
+1a627200
+20407e9f
+20207f01
+20407ea5
+6800c3af
+1fe0a201
+20405a82
+5800000b
+e0a08000
+6800c3af
+1fe27200
+d8c043b0
+20207f01
+680144fa
+98467c00
+2422d9bf
+20405a42
+243459bf
+70047a05
+20205a77
+e8c10000
+6001445e
+da200014
+20405a82
+5800000d
+e0a08000
+6801445e
+98002200
+68090478
+2040576a
+203a5a76
+e8c08000
+9a267200
+24215a76
+1f267c16
+202159f5
+18007216
+1a227e00
+98c08c00
+20407ef4
+20407ea2
+20205aa5
+20405ab1
+204056d7
+202059fd
+d9600002
+6809445a
+60090aa2
+20405756
+2040576d
+18c08dfe
+18c27e00
+6001049c
+20405a88
+24215a25
+68090aa2
+2040578a
+c000da28
+20405a8c
+2422da23
+19627e00
+c0005a28
+24345a19
+78547c00
+da200014
+20405a82
+58000011
+e0a08000
+680084b3
+1fe0fe04
+e0a08000
+20407ea2
+20205a1f
+680084b3
+c0085a28
+68010aa2
+1fe0ffff
+600104a0
+20405a9c
+68010aa2
+6001049e
+20405a97
+196097ff
+20405a84
+20205a05
+68010aa2
+600104a0
+20205a2c
+68010aa2
+1fe0ffff
+600104a0
+20205a2c
+20345a76
+20405a9c
+20205aa5
+18c22200
+680144fc
+1fe0a5fd
+204056e2
+6800c4e9
+c3025a3d
+68090478
+680144fa
+98467c00
+2422da3d
+20405a42
+24345a3d
+70047a05
+20205a77
+18002201
+20405a82
+58000013
+e0a08000
+20600000
+20407fe9
+6800c4c6
+c1000000
+6800c040
+c3820000
+20207fe7
+18c0a202
+680144fc
+1fe0a5fb
+204056e2
+20205a4d
+680144fc
+1fe22200
+20405a82
+58000017
+e0a08000
+68010478
+e0a10000
+680144fc
+1fe0f3fb
+6801450d
+1fe08c07
+e8c10000
+e0a10000
+20207ef4
+18002201
+20405a82
+58000019
+e0a08000
+20600000
+18c22200
+680144fc
+1fe0a5fd
+202056e2
+18422600
+1a20a203
+20405a82
+1a20a3fd
+5800001b
+e0a08000
+1a620400
+e0a90000
+20600000
+18422600
+1a20a203
+20405a82
+1a20a3fd
+5800001d
+e0a08000
+1a620400
+e0a90000
+20600000
+70047a0a
+18002205
+20405a82
+58000001
+e0a08000
+68008477
+e0a08000
+68010478
+e0a10000
+6800847a
+e0a08000
+20600000
+18002404
+20205847
+68090aa2
+18408401
+60090aa2
+20600000
+68090aa2
+6801445c
+98467c00
+20600000
+6808c45e
+da20445f
+680084a2
+1fe27200
+98467c00
+24628000
+da4004a3
+20207f88
+6808c471
+da204472
+20205a8e
+680084b3
+60008101
+1fe27200
+20407e9f
+20207ef4
+20407e9c
+6801049e
+e0a10000
+680104a0
+e0a10000
+68008101
+1fe27200
+20407ef4
+20207ea2
+20407e9c
+2040588a
+18a27e00
+98c62200
+2040588d
+1a227e00
+e0c10000
+1a20a204
+20405879
+1a227e00
+e0c08000
+20600000
+1fecfe00
+6001445a
+e8c10000
+6001445c
+20600000
+e8c08000
+e8c88000
+e8c90000
+c009dabb
+20600000
+e8c10000
+60014509
+700a9940
+20207d86
+da20000c
+da600012
+20405ac7
+58000008
+e0a10000
+68044496
+e0a40000
+20600000
+20405acf
+da400005
+20405847
+1a627e00
+e0a08000
+6800c508
+e0a08000
+20600000
+6800c508
+1fe0fe01
+6000c508
+c1800000
+70450801
+20600000
+6800c4c6
+c0005ae4
+c000dae7
+c0015ae9
+c040dadd
+c0415adf
+c041dae2
+20600000
+7044560d
+20205ae5
+7044560d
+70445401
+20600000
+7044560d
+20205aea
+70445600
+70445403
+20600000
+70445605
+20205ae5
+70445605
+70445400
+20600000
+6800c456
+79207e03
+6000c456
+20600000
+6800c456
+793ffe03
+6000c456
+20600000
+e8c08000
+c000db09
+c001db30
+c0025b4d
+c002db5a
+c0035b80
+c003dbc4
+c0045baf
+c004dbc0
+c0055bc4
+c005dbc4
+c0065bc5
+c006dbca
+20600000
+18002202
+20405c62
+5800000b
+e0a08000
+6800c456
+e0a08000
+20600000
+6000c44c
+e8c30000
+e0a30000
+6800c4c6
+c0005b5f
+20405b2b
+20405b26
+7044c403
+6800c44d
+c0005b18
+c000db18
+c001db18
+6800c4c6
+c0015b1b
+c1418000
+dfe00000
+600244c7
+20600000
+6800c4e9
+c2805b24
+da2044c7
+1a220a00
+df200003
+2040630d
+680144c9
+1fe17e07
+600144c9
+700a9934
+20207d86
+6800c44f
+c3818000
+6800c4c6
+c4038000
+20203402
+18002207
+20405c62
+6803c453
+e0a38000
+20600000
+18c22200
+6800c4c6
+c041db37
+1a220c00
+d8a0442a
+20407ebf
+20205b3d
+1a220c00
+d8a0442a
+20407ebf
+7044bf02
+7044c108
+20600000
+6800c4c6
+c283db45
+2040739c
+18002211
+20405c62
+58000003
+e0a08000
+20207497
+d8a0443a
+2040630c
+204071c5
+18002211
+20405c62
+58000003
+e0a08000
+20207201
+18c22200
+6800c4c6
+c283db61
+1a220c00
+20407394
+2022db75
+70047b04
+18002202
+20405c62
+58000005
+e0a08000
+6800847b
+e0a08000
+18000e0a
+20407f07
+7044c400
+700a9930
+20207d86
+70047b05
+20205b54
+d8a0042f
+1a220c00
+20407ebf
+6800c4c6
+c041db6c
+2040714f
+20405b7a
+6800c4c6
+c1c10000
+700a993b
+20207d86
+204071ba
+d8a00af2
+20407201
+da200af2
+da40442a
+df200010
+20407f88
+2422db53
+20205b7a
+20407390
+700a9931
+20407d86
+70442901
+7044c405
+18002211
+20405c62
+58000004
+e0a08000
+d8c0443a
+20207ebf
+d8a0041f
+20207ebf
+18002211
+20405c62
+58000006
+e0a08000
+6800c4e9
+c280db8a
+d8c04419
+20207ebf
+d8c044ea
+20207ebf
+d8a044cb
+1800720a
+2040630d
+1800220b
+20405c62
+58000007
+e0a08000
+680144cb
+e0a10000
+680444cd
+e0a40000
+20600000
+18002211
+20405c62
+58000008
+e0a08000
+58000000
+e0a40000
+e0a40000
+20600000
+18002208
+20405c62
+58000009
+e0a08000
+6800c495
+e0a08000
+680344a0
+e0a30000
+20600000
+70047b08
+20205b54
+6800c458
+6808c458
+98417e00
+20600000
+d8a044d5
+20407ebf
+20405bab
+2fec0001
+2020dba9
+6800c092
+c1850000
+20405bb9
+24740000
+20203410
+20407fe9
+6800c48e
+c1000000
+68008454
+2fe180c0
+20608000
+20207fe7
+20405bab
+2fec0001
+2020dba9
+20600000
+20600000
+d8a009be
+20407eb3
+7044bf02
+7044c101
+20600000
+d8a00a6e
+20407ebf
+7044c106
+7044bf02
+20600000
+18002241
+20405c62
+5800000c
+e0a08000
+d8c045d2
+20207eb3
+20407166
+18002211
+20405c62
+5800000d
+e0a08000
+20207201
+6800c4c4
+c17f8000
+d8400003
+98467c00
+24610000
+d8e0000a
+20407f16
+247a0000
+20205ba9
+473c402f
+6800c4c4
+c0005bef
+c000dbf5
+c0015bef
+c001dbf7
+c002dbfb
+c003dc07
+c0045c09
+c004dc10
+20600000
+6800c4c5
+c1820000
+7044c5ff
+7044c4ff
+700a993f
+20207d86
+7044c402
+20205b02
+7044c404
+58017700
+d8e0000a
+20207f08
+6800c4c5
+c0025bfe
+20600000
+7044c407
+700a9929
+20407d86
+20405b82
+6800c092
+c1850000
+20405bb9
+20740000
+20203410
+7044c408
+20205b8c
+6800c452
+6808c459
+98417e00
+2fec0001
+2020dc12
+7044c409
+20205b98
+20405ba0
+20205c12
+18000e0a
+20407f07
+7044c5ff
+7044c4ff
+700a993e
+20207d86
+473cc02f
+6800c4c6
+c4038000
+6800c4bf
+c1810000
+7044bf00
+6800c4c1
+c000dc58
+c0015c5f
+c001dc52
+c0035c39
+c003dc30
+c0045c26
+20600000
+6800c663
+1fe20e00
+1fe0fe01
+6000c663
+680244c7
+afefffff
+58000080
+7920fe00
+6000c664
+20205c55
+6800c4c2
+7044c200
+c000dc35
+7044bf02
+20600000
+700a9931
+20407d86
+7044c405
+20205bd5
+680089b9
+c001dc3d
+7044bf02
+20600000
+2040718d
+6800c4c6
+c041dc41
+20405b18
+2040717a
+da200af2
+da400a6e
+df200010
+20407f88
+2022dc49
+70047b0b
+20205b54
+20407595
+2422dc47
+70442901
+6800c4c6
+c040dc35
+c041dc35
+7044bf02
+7044c107
+20600000
+6800c4c6
+c041dc56
+70466400
+20205b3d
+70466300
+20205b1b
+7044bf02
+6800c4c3
+c001dc5c
+20600000
+7044c102
+7009b900
+20207a99
+7044bf02
+7044c103
+20205bcf
+18002406
+20205847
+680082db
+c0005c7b
+c000dc83
+c0015c8e
+c001dcaa
+c0025ce1
+c002dce6
+c0035cea
+c003dcf5
+c0045c99
+c004dcf5
+c0055cef
+c005dcf5
+c0065c9f
+c006dcf5
+c0095ca6
+c009dcf5
+da200002
+da400007
+20405842
+680082db
+e0a08000
+20600000
+e8c48000
+6004c3d3
+e8c10000
+6001045f
+6800843f
+79207e05
+6000843f
+20600000
+e8c28000
+6002c3ce
+e8c10000
+6001045f
+68090459
+98467c00
+24215c8e
+6800843f
+79207e06
+6000843f
+20600000
+58000014
+6001046d
+600144ba
+20600000
+da600013
+da200002
+da400002
+20405842
+1a627e00
+e0a08000
+20600000
+da200009
+da400009
+20405842
+58000001
+e0a40000
+20600000
+20748000
+da200006
+da40000c
+20405842
+6802c510
+e0a28000
+20600000
+da400013
+20205ca8
+da200001
+20205842
+e8c40000
+600444cd
+e8c10000
+600144cb
+e8c40000
+600444aa
+e8c20000
+60024411
+20405ccf
+473d402f
+6800c4c4
+c002dcbc
+6800c4e9
+c280dcbf
+6800c217
+245a67be
+6800c429
+c0005cc4
+7044c501
+20405cdd
+202073a2
+70442901
+d8c044ea
+d8a04419
+20407ebf
+20205cbc
+473dc02f
+7044c500
+7044c400
+700a9941
+20207d86
+da200002
+da40000d
+20405842
+58000006
+e0a08000
+20600000
+d8a044b2
+18007208
+2040630d
+d8a04415
+18007204
+2040630d
+da20000d
+da400004
+20405842
+680444b2
+e0a40000
+68024415
+e0a20000
+20600000
+da400005
+20205ca8
+da400006
+20205ca8
+e8c40000
+600444b2
+e8c20000
+60024415
+202073a2
+6800843f
+79207e04
+6000843f
+20600000
+20748000
+700a9932
+20407d86
+7044c504
+20205cdf
+7044c502
+20405cf3
+700a9933
+20207d86
+da40000b
+20205ca8
+20600000
+20758000
+473e402f
+58000000
+60008048
+60008055
+60008078
+6000807c
+6000c158
+600084d7
+6000816d
+600089b5
+70455b00
+70022900
+7004d800
+7009b500
+7009b400
+7004d100
+20600000
+473ec02f
+2054e2ff
+2454e303
+204062bc
+247a0000
+6800804c
+c4030000
+793ffe06
+793f8001
+6000804c
+68008551
+6808804c
+2feffe00
+79208401
+6008804c
+18410402
+6008807f
+6808804c
+1fe37e00
+6000807d
+473f402f
+6800807d
+c03fdd66
+c001ddb1
+c0025dc2
+c01e5d59
+c002dd55
+c007dfa8
+c0085e24
+c011de42
+c01cdfc1
+c01c5fbc
+c018de27
+c01bdeb0
+c013deac
+c019dea9
+c012deae
+c0135e3e
+c003de36
+c016de2d
+c0175e2e
+c000dea5
+c0015e90
+c0145fb3
+c004de86
+c005de5f
+c0045e43
+c0065e6a
+c00fde3a
+c0105e3c
+c010deca
+c0115eca
+c01adecb
+c01b5ecc
+c0125eca
+c01a5ecd
+c00bded6
+c008def2
+c0095ef6
+c009def8
+c006df0a
+c0075f0a
+c017deaa
+c0185f0a
+c0055f0a
+c00c5f0b
+c0195f0a
+c01edf10
+c01f5f51
+c01fdf4b
+c0205f78
+c020df8a
+c0035fa7
+c01d5d57
+70007e19
+70007c04
+20600000
+70007c06
+20600000
+70007c3b
+20600000
+68020552
+1fe3fe00
+600240d2
+68008556
+6000c0d9
+68028557
+6002c0e7
+6802855c
+e0a28000
+68008031
+79207e03
+60008031
+20600000
+473fc02f
+68008552
+79207e07
+6000807d
+c040dd88
+c0415d8d
+c04adeb1
+c04b5eca
+c045debf
+c041dda5
+c0425da7
+c0485d7a
+c04bdd9e
+c04c5da3
+c04cdd7d
+c04d5d80
+c1420000
+70007c82
+70007e19
+20600000
+70007c82
+70007e2e
+20600000
+20405d82
+70007c9a
+20600000
+20405d82
+20205d86
+d8a0465e
+68018553
+e0a18000
+20600000
+2020f6d8
+20600000
+68008554
+79207e07
+600084c9
+c045dd92
+20600000
+68008554
+79207e07
+600084c9
+c045dd96
+20600000
+6800c15a
+6808804c
+7d3a0405
+6008804c
+68008030
+c4028000
+793ffe05
+60008030
+680084d7
+247a0000
+70007c31
+20600000
+2434dda1
+70007c12
+202062eb
+70007c97
+20600000
+204062eb
+20205ffe
+70007c84
+20600000
+68088555
+18410401
+600884d0
+6800c1ce
+c0a8ddad
+7041ce00
+68008055
+c18a8000
+70005504
+2020631b
+47404030
+68008552
+600084c9
+c019ddd8
+c0045de7
+c007ddee
+c0085df4
+c008ddf5
+c0095dfd
+c00c5e13
+c00bde16
+c009ddcf
+c01edf1e
+c01f5f6a
+c0205f20
+c020df3d
+20600000
+4740c030
+68008552
+600084c9
+c000de0a
+c019dde2
+c005ddfe
+c0045e01
+c009ddd2
+c0205e0b
+c020de0e
+c00c5e11
+c00bde22
+20600000
+700a9920
+20407d86
+202021dc
+700a9919
+20407d86
+70455b02
+58000050
+d8e00006
+20207f08
+680084d1
+79207e00
+600084d1
+700a9901
+20407d86
+70007c8b
+68008055
+c082dd07
+70005506
+20600000
+7004ca0b
+70007c07
+70005500
+2020dd07
+20600000
+6800c1bd
+247a0000
+2040244f
+20405ffc
+20748000
+79200021
+20600000
+24748000
+70007c10
+6800804c
+c4010000
+70007c12
+20600000
+20205ffe
+20406059
+68008030
+c3820000
+70007c31
+68008055
+c1850000
+7000550b
+20600000
+20600000
+70007c07
+7004ca13
+20600000
+68008553
+c0035e07
+c18c0000
+7004ca18
+70007c07
+20600000
+7004ca06
+70007c07
+20600000
+20600000
+7009ae00
+70007c07
+20205d07
+7009ae00
+70007c07
+20205d07
+700a9924
+20207d86
+700a9923
+20407d86
+202026e9
+700a9922
+20407d86
+58000000
+60010075
+680141e3
+1fe3fe00
+60010032
+6800c1e5
+60008073
+6800c1e7
+60008074
+202026c6
+700a9921
+20207d86
+68088552
+60088054
+20205e38
+680084d1
+79207e02
+600084d1
+c3818000
+70007c31
+20205d07
+20600000
+6800c0d0
+68088552
+98467c00
+20215e38
+70007c04
+70007e1f
+70007d2e
+20600000
+20406157
+20205e38
+70007c03
+20600000
+70007c21
+20600000
+70007c22
+20600000
+68008055
+c1098000
+70005502
+20600000
+20600000
+20405ff9
+7004d401
+700a990a
+20407d86
+204062f3
+2420e001
+2434de4e
+70007c04
+70007d08
+70007e23
+20600000
+6800804b
+79207e02
+6000804b
+20600000
+6808804c
+7d3a0401
+6008804c
+20600000
+6800807f
+1fe37e00
+1fe17e01
+20600000
+6800c217
+207a0000
+680089b5
+205a67b2
+20600000
+20405e5a
+20405e56
+600084d5
+20405ff9
+70007c0c
+6800c1bd
+247a0000
+68008030
+c3830000
+70007e06
+20205d53
+da200040
+20407288
+68020552
+680a0592
+98467c00
+2022de73
+70007c07
+7004ca05
+20600000
+20405e77
+6800c65a
+203a5f3e
+20600000
+20407386
+204021b2
+6800804b
+2feffe01
+793ffe01
+6000804b
+68008055
+c00cde81
+c00c5e81
+20600000
+680089b5
+c1800000
+6800804c
+c3810000
+202063b1
+da200552
+da400582
+d8a00562
+20407352
+da200040
+20406311
+70007c0b
+68008030
+c3035ffc
+20600000
+6801015f
+1fe0f3fd
+68088552
+58000101
+98408a00
+d8c00554
+20407f01
+68088053
+68008553
+98467e00
+1fe67c0e
+20215ea0
+1840fe0e
+60008053
+70007c01
+20600000
+6800804c
+79207e03
+6000804c
+c2826006
+20600000
+68008552
+6000807d
+70007c02
+20600000
+20205e38
+70007c30
+20600000
+70007c28
+20600000
+70007c26
+20600000
+20600000
+68010032
+98000400
+68008553
+60008095
+984f8400
+68010554
+1fe3fe00
+60010096
+68020556
+1fe3fe00
+60020091
+18427e00
+60010098
+20600000
+6808c15a
+68008553
+9842fc00
+2422dd77
+2feffe00
+6800804c
+7920fe05
+6000804c
+70007c81
+70007d8b
+20600000
+20600000
+20205e38
+20205e38
+68010552
+60010171
+20600000
+68010555
+6808c172
+984ffe00
+d8400640
+98467c00
+20600000
+68010557
+203a5ef0
+20405ed0
+20215ef0
+6800c092
+1fe67c0a
+2042bcd5
+68008030
+c280def0
+68010553
+1fe3fe00
+60010075
+68010555
+1fe3fe00
+60010032
+68010557
+60008073
+98000400
+68010559
+60008074
+98467c00
+24215eed
+60008073
+70007c03
+70007d17
+20600000
+70007e24
+20205d53
+20405e38
+20405ff9
+2040728b
+202026b8
+20405e38
+202026c0
+68020552
+1fe3fe00
+2034df04
+6808c1bd
+243a5f01
+70007c04
+70007d13
+70007e24
+20600000
+70007c34
+70005500
+202021d9
+204021d9
+79200022
+6800816d
+793ffe02
+6000816d
+20205e38
+20600000
+70007c03
+70007d18
+700a992e
+20407d86
+202026e9
+68008552
+c080df1c
+68008553
+c080df1c
+68008554
+c0985f1c
+204062fc
+2020df19
+7009ae01
+70007c03
+70007d3d
+20205d07
+70007e24
+20205d53
+70007c3e
+20600000
+6800c662
+c000df27
+c0015f2b
+204062fc
+20608000
+7009ae08
+20600000
+20407962
+700a9935
+20407d86
+20205f23
+204062fc
+20608000
+6800c663
+c009df3b
+1fe0fe01
+6000c663
+7009b001
+7009ae04
+6800c663
+1fe20e00
+6803468a
+afefffff
+58000080
+7920fe00
+6000c664
+20600000
+7009ae08
+20600000
+20405f43
+6800c665
+207a0000
+70466500
+700a9938
+20207d86
+204062fc
+2440f965
+2040f975
+204062fc
+20608000
+7009ae0c
+7009b001
+20600000
+d8a00a6e
+d8c00552
+20407ebf
+6800c662
+c1010000
+202076d8
+680089af
+c003df55
+680089ae
+c080df68
+680089b7
+1fe60a20
+24215f68
+d8a009c6
+98a08a00
+68040552
+e0a40000
+6804055a
+e0a40000
+680089b7
+1fe0fe10
+600089b7
+c0985e38
+204062fc
+2020de38
+7009b801
+7009ae02
+7009b001
+20205e38
+70007e24
+20205d53
+680089b6
+c0185f6e
+70007c3e
+20205d07
+204062fc
+2020df77
+6800c662
+c0015f75
+7009b001
+7009ae04
+20205d07
+700a9936
+20207d86
+20205d07
+680089af
+c003df7c
+680089ae
+c0835f88
+d8a00a2e
+68040552
+e0a40000
+6804055a
+e0a40000
+204062fc
+2020df86
+7009ae07
+7009b001
+20205e38
+7009af04
+202076d8
+70007e24
+20205d53
+680089af
+c005df8e
+680089ae
+c0845f9d
+d8a00a5e
+d8c00552
+20407ebf
+204062fc
+2020df9a
+6800c662
+c000df9f
+70466100
+7009ae09
+7009b001
+70007d41
+20205d07
+7009af09
+7009b101
+20205d07
+70007e24
+20205d53
+6800c661
+c283dfa4
+79207e06
+6000c661
+20600000
+c2805f95
+70466100
+20205f9d
+20205d07
+6800816d
+793ffe01
+6000816d
+20405e38
+24748000
+68008552
+6808804b
+793a0404
+7d3a0405
+6008804b
+20600000
+680c0552
+68008055
+c1818000
+6800816d
+c3025fba
+70005514
+20600000
+70005504
+20600000
+6800817f
+6000815b
+70007c03
+70007d38
+20600000
+70007c03
+70007d39
+18007209
+d8c00552
+d8a00152
+e8c08000
+1fe2fe55
+e0a08000
+c2005fc6
+68008152
+68088151
+793f8407
+793f8404
+c07fdfda
+c0005ff3
+c002dfe7
+c003dfe6
+c0035fe7
+c0045fe6
+c000dfdf
+c0015fdf
+c001dfdf
+c004dfdf
+c0025fdf
+20600000
+68008151
+79207e03
+79207e02
+60008151
+20600000
+79200404
+70018005
+68010159
+98007200
+6001015f
+d8a00551
+20407f73
+79200407
+79200402
+18007e00
+6000800b
+600100fa
+600100fc
+600100f8
+600100f6
+68008153
+2fe1fe00
+79208406
+60088151
+20600000
+793f8011
+70015100
+6800817f
+793ffe06
+6000817f
+20600000
+d8c00552
+d8a00562
+20207ebf
+70007c09
+20600000
+24748000
+70007c11
+20600000
+da2040a0
+20407255
+70007c03
+70007d08
+20600000
+7000720a
+70007c07
+7004ca16
+20600000
+47414030
+78547c00
+204062c1
+68008048
+207a0000
+c283e03f
+c000e16f
+c00160e4
+c001e04a
+c0026060
+c013e1db
+c0146108
+c01860f4
+c012e1d6
+c0136103
+c018e1c3
+c01be16a
+c019e15c
+c0046259
+c004e24f
+c005e264
+c006626d
+c007e162
+c0086292
+c008e288
+c003e152
+c015617e
+c005617f
+c00fe1bc
+c00360f9
+c010e15f
+c016e1b2
+c01761b7
+c011615f
+c01a6180
+c009e195
+c00be1a4
+c009628f
+c017e1aa
+c00c61af
+c01ee1ff
+c01f620b
+c01fe21d
+c0206227
+c020e23c
+c011e24b
+c01de246
+c002e24c
+c014e24d
+c01c624e
+c01ce175
+20202a8c
+20600000
+c040e06d
+c0426099
+c0416076
+c041e10d
+c045e118
+c04be14e
+c04ce0d5
+c04d60a4
+c04ae0da
+c04b60db
+20202a8c
+18007e02
+20406298
+68008049
+e0a08000
+204062a7
+4741c030
+68008049
+c0046080
+c007e084
+c008608f
+c00be05f
+c019e092
+c020e098
+c008e059
+20600000
+68008055
+207a0000
+7000551b
+5800000c
+d8e00007
+20207f08
+202026c6
+18007e03
+20406298
+68008049
+c005e068
+e0a08000
+6800804a
+e0a08000
+202062a7
+e0a08000
+6800804a
+e0a08000
+d84004d5
+202062e2
+18000e04
+204062a0
+5800007f
+e0a08000
+68008049
+793ffe07
+e0a08000
+68008049
+202062a7
+18000e05
+204062a0
+5800007f
+e0a08000
+68008049
+793ffe07
+e0a08000
+6800804a
+e0a08000
+202062a7
+2040244f
+204062f3
+20608000
+20205ffc
+6800804b
+c282e08b
+c4020000
+70007c12
+793ffe04
+204062eb
+2020608d
+70007c10
+793ffe05
+6000804b
+20600000
+204062fc
+2020dffe
+20600000
+70007c8b
+680084d1
+79207e00
+600084d1
+700a9901
+20207d86
+20600000
+18000e0c
+204062a0
+58000001
+e0a08000
+680104ce
+e0a10000
+58000000
+e0a18000
+58000000
+e0a20000
+202062b0
+18000e05
+204062a0
+6801c65b
+e0a18000
+204062b0
+70466501
+6800c65b
+c000e0b5
+c00160af
+c001e0bb
+20600000
+6800c65e
+c00060c7
+c000e0c7
+c00160c7
+c001e0c1
+20600000
+6800c65e
+c00060c1
+c000e0c5
+c00160c7
+c001e0c1
+20600000
+6800c65e
+c00060c1
+c000e0c1
+c00160c1
+c001e0c1
+20600000
+70466203
+6800c55c
+c28033e9
+20600000
+70466201
+20600000
+70466202
+20600000
+d8e00000
+202060cd
+d8e00000
+202060d1
+6800c55c
+f9207e00
+6000c55c
+20600000
+6800c55c
+f93ffe00
+6000c55c
+20600000
+18000e05
+204062a0
+6801c65b
+e0a18000
+202062b2
+20600000
+18000e09
+204062a0
+68008095
+e0a08000
+68010096
+e0a10000
+68020091
+e0a20000
+202062b0
+18007e11
+20406298
+68008049
+1fe20400
+c00060ec
+c00760ec
+c00e60ec
+20600000
+e0a08000
+6800c515
+e0a08000
+df20000e
+58004516
+98408c00
+20407f01
+202062b0
+18007e03
+20406298
+58000114
+e0a10000
+202062b0
+18007e03
+20406298
+68020165
+9c467e00
+2034e0ff
+1fe67e00
+1feb7e00
+793ffe0f
+e0a10000
+202062b0
+18007e06
+20406298
+6802c510
+e0a28000
+202062b0
+18007e09
+20406298
+68044098
+e0a40000
+202062b0
+18000e0c
+204062a0
+58000001
+e0a08000
+680104ce
+e0a10000
+58000000
+e0a18000
+58000000
+e0a20000
+202062b2
+18000e03
+204062a0
+6800c15a
+e0a08000
+78547c00
+204062b2
+24740000
+24748000
+6800c0d8
+c4000000
+20406132
+2020613c
+47424030
+6800c09e
+79207e03
+6000c09e
+58000101
+600104ce
+20600000
+4742c030
+6800c09e
+793ffe03
+6000c09e
+58000000
+600104ce
+20600000
+7040d803
+58000000
+60024142
+d8a040da
+20406140
+d8a040e7
+20406140
+d8a04146
+20406140
+20206147
+d8a040e7
+20406140
+20406147
+2020614a
+58ffffff
+e0a18000
+e0a18000
+e0a18000
+5800007f
+e0a08000
+20600000
+58000000
+600140d6
+20600000
+6800c0d8
+79207e02
+6000c0d8
+20600000
+18000e02
+204062a0
+2434e2b0
+202062b2
+18007e02
+20406298
+680084ca
+e0a08000
+204062b2
+6800804b
+79207e03
+6000804b
+70007232
+20600000
+18007e01
+20406298
+202062b2
+18007e01
+20406298
+202062b0
+18007e02
+20406298
+6800804c
+2fec0002
+7920fe00
+1fe17e01
+e0a08000
+202062b2
+18007e03
+20406298
+68010051
+e0a10000
+202062b2
+700072fa
+18007e02
+20406298
+68008053
+e0a08000
+202062b2
+18007e0a
+20406298
+d8c00152
+18007209
+e8c08000
+1fe2fe55
+e0a08000
+c2006179
+202062b2
+202062b2
+202062b2
+20748000
+2040282d
+18007e09
+20406298
+68010171
+e0a10000
+6801c0a0
+e0a18000
+6800c0a3
+e0a08000
+680140a4
+e0a10000
+c581e191
+793f8003
+204062b2
+70007c13
+20600000
+204062b0
+70007c03
+70007d13
+20600000
+d8400200
+2034e199
+1d027e00
+2020619a
+1c427e00
+1c227e00
+9840fe00
+1fe17ffc
+60020034
+18007e05
+20406298
+68020034
+1fe37e00
+e0a20000
+202062b2
+18007e0a
+20406298
+d8c004d9
+e8c48000
+e0a48000
+202062b2
+18007e03
+20406298
+58000114
+e0a10000
+202062b2
+18007e01
+20406298
+202062b2
+18007e02
+20406298
+6800c0d0
+e0a08000
+202062b2
+18007e02
+20406298
+58000005
+e0a08000
+202062b2
+18007e02
+20406298
+58000000
+e0a08000
+202062b2
+70007c2e
+20600000
+6800c092
+1fe67c0a
+2042e1c1
+68008030
+79207e04
+60008030
+1c427e00
+600204e9
+680084d1
+c281e1d4
+79207e03
+600084d1
+700a9905
+20407d86
+18007e01
+20406298
+202062b2
+70004800
+20600000
+18007e06
+20406298
+6802c510
+e0a28000
+202062b2
+18007e09
+20406298
+68044098
+e0a40000
+202062b2
+7009b101
+6800c5b1
+c1808000
+7009af13
+20600000
+204062ef
+70007c99
+7009af03
+20600000
+204062ef
+70007c3d
+7009af07
+20600000
+da200a4e
+da400a6e
+df200010
+20407f88
+2022e1f7
+7009af00
+204076da
+70007e24
+70007d40
+20205d53
+7009af0a
+204076d8
+70007d40
+20205e38
+70007c40
+20600000
+70007c3d
+20600000
+7009b600
+18007e04
+20406298
+18007e01
+e0a08000
+18007e01
+e0a08000
+18007e30
+e0a08000
+204062fc
+2020e2b2
+202062b0
+18007e11
+20406298
+680089b6
+d8c0462a
+98c08c00
+e8c40000
+e0a40000
+e8c40000
+e0a40000
+680089b6
+1fe0fe10
+600089b6
+204062fc
+2020e2b2
+202062b0
+7009ae06
+70007c3f
+20600000
+18007e11
+20406298
+d8c00a4e
+e8c40000
+e0a40000
+e8c40000
+e0a40000
+202062b0
+70007c40
+20600000
+204062fc
+2040f612
+18007e11
+20406298
+d8c00a1e
+e8c40000
+e0a40000
+e8c40000
+e0a40000
+204062fc
+2420e2b0
+2020e2b2
+7009af0f
+204062ef
+70007c0b
+20406307
+2020f64e
+20207658
+204062eb
+70007c41
+20600000
+18007e11
+20406298
+d8c00a4e
+e8c40000
+e0a40000
+e8c40000
+e0a40000
+204062fc
+2420e2b0
+2020e2b2
+18007e03
+20406298
+5800fffe
+e0a10000
+202062b0
+202062b2
+202062b2
+202062b2
+202062b2
+2040630b
+da2040a0
+20406311
+18007e11
+20406298
+da200582
+da400562
+20407352
+2434e2a7
+202062ad
+2040630b
+da200040
+20407255
+18007e11
+20406298
+d8c00562
+20407ebf
+68008055
+c00ce2b2
+c00c62b2
+202062ad
+680089b5
+203a626a
+204062fc
+2040e2ef
+2440e2eb
+2020626b
+204062ef
+2040630b
+2020625c
+da2040a0
+20407288
+18007e05
+20406298
+68020592
+e0a20000
+d84004d5
+204062e2
+20407386
+204062fc
+2020e27c
+7004d801
+680089b5
+207a0000
+70007c0b
+6800c1bd
+207a0000
+204062fc
+2420e284
+680084d7
+207a0000
+70007c0f
+20600000
+c6908000
+793f8021
+70007c0f
+20600000
+2040630b
+2040728b
+18007e11
+20406298
+d8c00562
+20407ebf
+202062ad
+18007e01
+20406298
+202062ad
+18007e02
+20406298
+18007e10
+e0a08000
+60008054
+202062ad
+1fe9fe00
+1fe1fe07
+600084b6
+df200011
+d8a004b8
+20407ed4
+d8a004b8
+20600000
+1fe1227f
+7000487f
+18e27e00
+20406298
+1a227e00
+e0a08000
+20600000
+68008048
+1fe3fe00
+6808804c
+284ffe01
+7920fe00
+202062b7
+6808804c
+18410401
+202062b3
+18000400
+202062b3
+18000401
+68008048
+1fe3fe00
+7934fe00
+9842fe00
+600084b7
+70004800
+204062c7
+78347c00
+20600000
+6800807c
+207a0000
+204062c1
+6800807c
+20600000
+47434030
+68008048
+203a62c7
+68008078
+247a0000
+202062d1
+68008078
+203a62d7
+68018078
+60018048
+6808807b
+6800804c
+793ffe01
+9841fe00
+6000804c
+70007800
+6800807c
+207a0000
+6802007c
+60020078
+70007c00
+20600000
+6800807c
+207a0000
+6801807c
+60018048
+6808807f
+6800804c
+793ffe01
+9841fe00
+6000804c
+70007c00
+20600000
+4743c030
+6800804c
+1fe22600
+e8408000
+20405e52
+204062a7
+1a627e00
+6000804c
+20600000
+6808804c
+793f8400
+6008804c
+20600000
+6808804c
+79200400
+6008804c
+20600000
+7d34fe01
+6808804c
+9842fe00
+2feffe01
+20600000
+6800804c
+7934fe01
+6000804c
+20600000
+680089b4
+2fe0fe01
+20600000
+680089b4
+79207e07
+600089b4
+20600000
+680089b4
+793ffe07
+600089b4
+20600000
+680089b4
+2feffe07
+600089b4
+20600000
+d8a00562
+18007210
+180a7e00
+e0a08000
+c200630d
+20600000
+20407259
+da2041be
+da400592
+ea240000
+68088030
+7d3a0406
+60088030
+1a220a00
+20407352
+202021c4
+47444031
+204062bc
+247a0000
+68008055
+207a0000
+c002636f
+c002e374
+c0016366
+c001e37c
+c0076369
+c0036398
+c003e3b0
+c004e3b1
+c00563ba
+c005e3be
+c0066386
+c006e389
+c007e38f
+c0096359
+c009e37c
+c008635c
+c00a6356
+c00ae37c
+c00b6350
+c00c6355
+c00be349
+c00ce34f
+c00d633a
+c00de344
+70005500
+20600000
+680084d1
+c4010000
+c4018000
+70005500
+20406340
+20206cef
+6800816d
+c4008000
+7000550a
+20600000
+d8e00007
+20407f16
+247a0000
+7000551a
+20600000
+6800816d
+793ffe00
+6000816d
+70005519
+70007c0b
+20600000
+20600000
+680084d4
+c1810000
+204063c0
+70005518
+20600000
+20600000
+70005515
+70007c83
+20600000
+70005513
+70007c25
+20600000
+6800c55b
+c1000000
+c000e364
+d8e00006
+20407f16
+247a0000
+70455b00
+2020637d
+20748000
+20206398
+70005503
+70007c27
+20600000
+70007c13
+79200003
+70005505
+580001ff
+600104d2
+20600000
+70005505
+7004d2ff
+793f8022
+70007c33
+20205d04
+c6110000
+680104d2
+1fe67e01
+2022e37a
+600104d2
+20600000
+7000550e
+20600000
+20600000
+680084d1
+c4018000
+c4010000
+6800816d
+793ffe02
+6000816d
+70007c13
+70005510
+20600000
+7000550d
+70007c31
+20600000
+680084d1
+c4010000
+70005500
+20600000
+70005506
+20600000
+680084d2
+1fe0ffff
+203a6394
+600084d2
+20600000
+70007c07
+7004ca16
+70005500
+20600000
+6800816d
+c281637d
+c280639d
+7000551a
+20600000
+6800c1bd
+203a63a9
+680084d1
+c4018000
+c4010000
+680204e9
+d8400064
+98408400
+1c427e00
+98467c00
+24610000
+20206349
+70005516
+70468904
+58003030
+6001468a
+e0a10000
+7004d402
+20206350
+20600000
+6800816d
+c280e3b5
+7000551a
+20600000
+6800816d
+793ffe01
+6000816d
+70007c0f
+20600000
+680084d8
+207a0000
+70005500
+202063b5
+7000550c
+20600000
+6800804b
+c28163c5
+204062ef
+70007c08
+20204d04
+6800804b
+793ffe02
+6000804b
+20406001
+204062f8
+20204d04
+58000004
+6000c689
+58003030
+e0a10000
+e0a10000
+20600000
+47464031
+68108073
+d8400006
+9841fe00
+60108073
+68108077
+9841fe00
+60108077
+204063ee
+68108077
+793ffe01
+793ffe02
+60108077
+2000001e
+202063f2
+68108073
+d84000c0
+9841fe00
+60108073
+68108077
+9841fe00
+60108077
+204063ee
+68108077
+793ffe06
+793ffe07
+60108077
+2000001e
+202063f6
+68108081
+1fe17efc
+60108081
+20600000
+68108081
+1fe1fe01
+60108081
+20600000
+68108081
+1fe1fe03
+793ffe04
+60108081
+20600000
+1fe22400
+2040640f
+20000064
+1a427e00
+20406414
+1fe22400
+20406411
+20000064
+1a427e00
+20600000
+1fe22400
+2040640f
+20000064
+1a427e00
+20406413
+20406411
+20000064
+20600000
+6808c214
+2020680e
+6808c214
+20206829
+6808c214
+20206825
+202064ec
+202064f3
+24346419
+68108085
+1fe1fe02
+60108085
+18427c00
+2022e41c
+1a627a00
+2fcc0000
+202064b9
+18000404
+da2001fe
+68108085
+1fe17efd
+60108085
+20406419
+da2055aa
+680101fe
+e8c90000
+9a267c00
+20600000
+d8400002
+da200204
+20406419
+68010204
+600101f7
+20546430
+20600000
+d8400010
+da200206
+68108085
+1fe17efd
+60108085
+20406419
+d8c00206
+df200010
+20407478
+20407428
+20407491
+20207422
+7856fc00
+2040641e
+24628000
+7836fc00
+70802380
+70802200
+70802400
+da208025
+20406415
+70802300
+d8400006
+2040641f
+24628000
+e8c10000
+98002200
+20406419
+20206446
+20407f99
+58001000
+600101f7
+da6065e5
+df200002
+2040641e
+24628000
+680101f7
+1ff0fe00
+9840fe00
+1ff0fe00
+600101f7
+c2006452
+20206446
+20407f99
+78547c00
+2040666a
+58000000
+da2001f3
+d8400002
+204066b3
+680101f3
+c303e46e
+70805025
+580007f0
+da200206
+d8400010
+204066b3
+70800608
+7920002b
+d8c00206
+20407484
+78347c00
+7041da00
+204064b0
+680101f3
+1ff0fe00
+d84007ff
+98417e00
+2022e47b
+2040666f
+da6066b8
+20546430
+2040643c
+680081f2
+c300646f
+2040666d
+7041da00
+204064b0
+204065c2
+680081f3
+c283648e
+204064aa
+2436e486
+680081f2
+c300647d
+2020649b
+204065bf
+680081f3
+c283648e
+204064aa
+2436e48e
+680081f2
+c300647d
+2020649b
+7041da00
+204064b0
+680081f3
+c282e49b
+58000000
+600181f6
+20406502
+da606578
+20406429
+2040643c
+2436e49b
+680081f2
+c300648f
+c515e49d
+204064a3
+680081f3
+c30264a3
+70805021
+20404c0e
+20404c2e
+202064a1
+58000000
+60040206
+6004020e
+18007004
+20407492
+70805021
+20600000
+58000000
+600101f7
+da6065e5
+204065a3
+20406429
+2020643c
+6800c1da
+1fe0fe01
+1fe67c03
+242164b6
+6000c1da
+20600000
+204064a3
+20407fa1
+20600000
+680081f2
+1fe3fe00
+7920fe00
+2a2c000f
+20608000
+600081f2
+20600000
+68108085
+c4008000
+202064c6
+6810812c
+afefffff
+20608000
+68108108
+c300e4c3
+20407422
+202064c3
+68014199
+207a0000
+70802380
+70802200
+70802400
+6809419b
+184bf200
+98000c00
+e8c08000
+60108025
+c20064d2
+70802300
+20600000
+4746c031
+204064dd
+202063f2
+204064dd
+204063ee
+202063f6
+6800c212
+60108086
+6800c213
+60108087
+580001f5
+6011008a
+580001fa
+6011008c
+202063ee
+68108086
+79207e07
+60108086
+793ffe07
+60108086
+20600000
+79207e07
+600101f5
+47474031
+70808802
+70808e00
+70800602
+202064fc
+18000401
+600081f5
+4747c031
+70808801
+6019008e
+70800602
+204064fc
+680081fa
+20600000
+680140d6
+1fe0fe01
+600140d6
+6810812c
+c301e4fc
+20600000
+70808640
+70808700
+68108081
+793ffe00
+79207e01
+60108081
+58000000
+600201f5
+20600000
+58000000
+6011008e
+58000001
+60110088
+580001f5
+6011008a
+7001f506
+70800602
+202064fc
+78547c00
+1fe22400
+6800c239
+c1800000
+78347c00
+1a427e00
+20206522
+6800c239
+c000e522
+c0016528
+c001e530
+c0026537
+c002e53d
+20600000
+6001c232
+1a227e00
+60014235
+60094237
+70423902
+20206502
+20406502
+70423903
+2040650b
+da2001f5
+6801c232
+70808804
+d8400020
+20206556
+20406502
+2040650b
+58000005
+204064f3
+c3800000
+70423904
+20600000
+20406502
+70423905
+2040650b
+2040654a
+20406552
+20206545
+20406502
+2040650b
+58000005
+204064f3
+c3800000
+70423900
+68014201
+20207f9c
+68020aa2
+68094235
+184085fc
+e0420000
+20600000
+68094235
+18422200
+184085fc
+e8420000
+60020aa2
+68094237
+6801c232
+20600000
+18408404
+60190088
+d8400002
+1a20a3fc
+e2288000
+1ff10400
+e0a88000
+1fec8400
+e0a88000
+e0a08000
+1a227e00
+6011008a
+58000000
+6011008e
+70800602
+202064fc
+6019008e
+1ff10400
+600881f6
+1fec8400
+600881f7
+600081f8
+58000004
+60110088
+7001f503
+580001f5
+6011008a
+1a227e00
+6011008c
+68108086
+2a2c000f
+7920fe06
+60108086
+70800602
+6810812c
+c283e574
+d8e00003
+202064fc
+6019008e
+58000004
+60110088
+7001f503
+580001f5
+6011008a
+1a227e00
+6011008c
+68108086
+2a2c000f
+7920fe06
+60108086
+70800602
+6810812c
+c283e585
+d8e00003
+204064c0
+204064fc
+2feffe02
+204064b9
+680081f6
+1ff02400
+680081f7
+1fed7e00
+9a41a400
+680081f8
+9a41fe00
+9840fe00
+600081f8
+1fecfe00
+600081f7
+1fecfe00
+600081f6
+20600000
+70801001
+20600000
+7080910c
+7080920d
+7080930d
+7080940d
+7080950d
+7080960c
+202065a9
+70809105
+70809207
+70809307
+70809407
+70809507
+70809605
+6810807b
+1fe1fec0
+6010807b
+68108081
+1fe1fe10
+60108081
+20600000
+6810812c
+c302e5b0
+20600000
+60110098
+1a227e00
+6011009a
+1a427e00
+6011009c
+18427e00
+6011009e
+d8400001
+7d3a0401
+60108090
+70800604
+202065b0
+79200028
+70421108
+20600000
+793f8028
+70421120
+20600000
+6800c203
+9a40fe00
+600081f7
+202065cc
+680101f7
+1ff0fe00
+600081f7
+58000003
+60110098
+7001f6a0
+7001f8a1
+202065eb
+60090aa2
+204065d6
+68090aa2
+20406606
+202065dd
+6800c23a
+c17f8000
+c30365db
+580249f0
+20402a8f
+6808c23a
+20206829
+6808c23a
+20206825
+47484032
+c51465c5
+68014203
+9a40fe00
+1ff0fe00
+600101f7
+4748c032
+c51465c9
+58000004
+60110098
+7001f6a0
+7001f9a1
+580001f6
+6011009a
+6019009e
+1a227e00
+6011009c
+58000002
+2a2c000f
+7920fe00
+60108090
+70800604
+d8e00005
+204064c0
+204065b0
+2feffe04
+204064b9
+c5146601
+680101f7
+1ff0fe00
+9840fe00
+1ff0fe00
+600101f7
+20600000
+680081f7
+9840fe00
+1ff0fe00
+600101f7
+20600000
+68014203
+9a40fe00
+60010a9a
+47494032
+60090aa2
+1a227e00
+60010ab9
+2040661d
+68090ab2
+68010ab9
+1fe22200
+68010a9a
+2040663d
+68010ab2
+68090ab9
+98408400
+60090ab9
+68090a9a
+98408400
+60090a9a
+68010aa2
+243a660d
+20600000
+4749c032
+6800c211
+1fe0ffff
+68090a9a
+9841fe00
+1fe0fe01
+60018ab6
+68010aa2
+9840fe00
+68098ab6
+98467e00
+2421662f
+60010aa2
+68018ab6
+68090a9a
+98467e00
+60010ab2
+20600000
+68010aa2
+60010ab2
+58000000
+60010aa2
+20600000
+18408402
+60190098
+1a20a3fe
+ea298000
+18422400
+d84000a0
+e2288000
+e0a08000
+2020664a
+1fe22400
+474a4032
+c5146634
+1a427e00
+18408403
+60190098
+1a20a3fd
+ea298000
+18422400
+d84000a0
+e2288000
+1ff0fe00
+e0a10000
+1a227e00
+6011009a
+58000000
+6011009e
+70809001
+70800604
+204065b0
+1a427e00
+e2218000
+474ac032
+7001f900
+58000001
+60110098
+7001f6a0
+580001f6
+6011009a
+58000000
+6011009e
+6011009c
+58000003
+60108090
+70800604
+204065b0
+6810812c
+c4030000
+200005dc
+680081f9
+1fe0fe01
+600081f9
+1fe67c28
+24610000
+20206655
+70897370
+20000bb8
+20600000
+70897330
+20600000
+1fe9fe00
+60110045
+70804b00
+20600000
+2040666f
+204066a0
+ea288000
+1a20a201
+18000e00
+a84c0000
+2020e697
+68108046
+79207e06
+79207e07
+60108046
+70804702
+70804782
+793ffe07
+60108046
+7080478a
+2000000b
+708047ca
+20000021
+7080474a
+2000002c
+708047ca
+20000016
+7080478a
+20000021
+70804782
+20000001
+70804792
+2000000a
+708047b2
+68108007
+70804792
+20000001
+70804782
+afec0000
+2020e678
+68110045
+1fe0fe01
+60110045
+18e08e01
+28e01e08
+2420e678
+c2006675
+70804783
+20600000
+70804782
+2000000c
+70804780
+70804782
+20000096
+20600000
+204066a0
+708047a2
+1a227e00
+60110048
+7920040b
+2fec000f
+7920840f
+6019004a
+70800601
+20600000
+6810812c
+c300e6b0
+20600000
+2040666f
+204066a6
+204066b0
+70804783
+20600000
+68110124
+60110045
+204066a6
+d8e00001
+204064c0
+204066b0
+2feffe00
+204064b9
+70804783
+20600000
+6811005e
+98001400
+20600000
+19427e00
+6011005e
+20600000
+18627e00
+60110058
+20600000
+68110058
+1fe20600
+20600000
+68014243
+60110052
+20600000
+1f227e00
+207a0000
+1f20f3f8
+204166de
+20628000
+202166d3
+1f20f208
+1f20f3fc
+204166e1
+20628000
+202166d8
+1f20f204
+202066e4
+e8c40000
+e1440000
+20600000
+e8c20000
+e1420000
+20600000
+1f227e00
+207a0000
+e8c08000
+e1408000
+c20066e6
+20600000
+1f227e00
+207a0000
+1f20f3f8
+204166f7
+20628000
+202166ec
+1f20f208
+1f20f3fc
+204166fa
+20628000
+202166f1
+1f20f204
+202066fd
+e8640000
+e0a40000
+20600000
+e8620000
+e0a20000
+20600000
+1f227e00
+207a0000
+e8608000
+e0a08000
+c20066ff
+20600000
+1f227e00
+207a0000
+e8608000
+e1408000
+c2006705
+20600000
+700a993d
+20207d86
+474b4032
+6800c217
+207a0000
+204067a3
+2042e7a9
+2040673e
+6800c217
+1fe22600
+68094215
+6009018c
+1a627e00
+203a6709
+1a60a7ff
+18422200
+ea208000
+68088184
+98467c00
+2042e725
+20216721
+ea208000
+1fe0fe01
+e2208000
+6809018c
+18408422
+6009018c
+20206715
+58000000
+e2208000
+68008185
+e0a08000
+c099e733
+da4041be
+e8c30000
+e0a40000
+58000000
+e0a40000
+1a420c00
+20407ebf
+18007c01
+20600000
+c01b6737
+c01be73b
+da404419
+2020672b
+d8c044d5
+20407ebf
+d8c04419
+20206730
+d8c044cd
+20407ebf
+20206739
+20407fe9
+6800c217
+207a0000
+68014682
+c2806754
+474bc032
+6800c48e
+c000674d
+68008454
+2fe180c0
+2020e74d
+2fe18040
+2020e752
+2fe18000
+2020e750
+70018535
+6803044f
+20206757
+70018537
+20206757
+70018536
+20206757
+474c4033
+70018533
+68030040
+60030186
+68014215
+efe88000
+1fe0fe01
+6001018c
+60088184
+6800c217
+1fe22600
+6801018c
+1fe22200
+2040676f
+20740000
+6809018c
+18408422
+6009018c
+184085ff
+e8408000
+60008184
+1a60a7ff
+2422e75f
+6800c217
+1fe0ffff
+60008184
+20600000
+68008185
+c099e776
+da400185
+df200007
+20407f88
+2022ffe7
+20600000
+c01b6779
+c01be794
+20206771
+ea288000
+98467c00
+24628000
+d8a00ac2
+df200010
+20407ed4
+68018452
+60018ac2
+2040678b
+68010adf
+1ff0fe00
+1fed0400
+e8c08000
+9840fe00
+6809844f
+98467c00
+2022ffe7
+20600000
+d8c00ac2
+20407486
+ea208000
+20407487
+18006c38
+18006c00
+2040741d
+d8a00ad2
+20207497
+ea288000
+98467c00
+24628000
+18c22200
+18c0a608
+da4044cd
+df200008
+20407f88
+2022ffe7
+1a622200
+da4044d5
+df200008
+20407f88
+2022ffe7
+20600000
+68014215
+efe88000
+1fe0fe22
+efe08000
+98467c00
+20600000
+6800c217
+1fe27200
+68094215
+58000000
+e0408000
+18408422
+1fe0fe01
+c20067ad
+20600000
+474cc033
+2040673e
+68008030
+79347e06
+60008030
+243467bc
+1a208c0a
+d8a041be
+20407ebf
+202067d7
+7041bd00
+20600000
+6804c4cb
+203a67ca
+2040673e
+243467ca
+6801018c
+1fe08c01
+d8a044d5
+20407ebf
+d8a04419
+20407ebf
+70442901
+20600000
+70442900
+20600000
+6803044f
+60030186
+70018534
+202067d3
+68030040
+60030186
+70018533
+6800c092
+c005670b
+c28342da
+20600000
+680441be
+680c41c6
+9841fe00
+207a0000
+7041bd01
+20600000
+474d4033
+79200407
+2040681d
+7d208407
+474dc033
+18467cff
+20628000
+284c0007
+18410e1f
+680200a1
+f920fe00
+600200a1
+680200a5
+fd20fe00
+600200a5
+20600000
+474e4033
+18467cff
+20628000
+284c0007
+18410e1f
+680200a1
+f93ffe00
+600200a1
+680200a5
+f93ffe00
+600200a5
+20600000
+204067ed
+202067fe
+18467cff
+20628000
+2455e7e1
+d8a0807c
+20406830
+79400407
+d8a08078
+20406830
+793f8407
+d8a08070
+20206830
+d8a0807c
+20406830
+793f8407
+d8a08078
+20406830
+793f8407
+d8a08070
+20206830
+18467cff
+20628000
+79400407
+2040682f
+79200407
+d8a08070
+20206830
+18410e07
+18497e00
+1fe17e03
+98a08a00
+e8a08000
+20600000
+d8a08074
+2020681e
+d8a0811c
+20406815
+284ffe07
+2020e823
+afec0000
+20600000
+afefffff
+20600000
+18467cff
+20628000
+2fcffe07
+2020682c
+18467cff
+20628000
+2fcc0007
+58000000
+7d20fe07
+98428400
+d8a08074
+20406815
+284ffe07
+f920fe00
+e0a08000
+20600000
+da3fffff
+68108081
+2fe00602
+2040e878
+2fe00601
+2040e87a
+2fe00603
+2040e87a
+2feffe02
+2040e874
+2feffe03
+2040e876
+2feffe04
+2040e87c
+2feffe06
+7d20a204
+2feffe07
+7d20a205
+68108082
+2feffe00
+7d20a21b
+2feffe01
+7d20a21c
+2feffe02
+7d20a203
+2feffe03
+7d20a208
+2feffe04
+7d20a214
+2feffe05
+7d20a215
+2feffe06
+7d20a216
+2feffe07
+7d20a217
+68108080
+2feffe00
+7d20a205
+2feffe01
+7d20a206
+2feffe02
+7d20a207
+2feffe03
+7d20a212
+2feffe04
+7d20a213
+2feffe05
+7d20a214
+2feffe06
+7d20a215
+2feffe07
+7d20a216
+68108062
+2feffe04
+2040e87e
+474ec033
+68120078
+681a007c
+9841fe00
+1fe47e00
+9a217e00
+60120070
+20600000
+d8e00006
+20206884
+d8e00009
+20206882
+d8e00017
+20206882
+d8e00019
+20206884
+d8e0001e
+20206884
+d8e00002
+20206884
+df200001
+20206885
+df200004
+20206885
+df200002
+f93fa200
+18e08e01
+c2006885
+20600000
+20406895
+d8400006
+2020680e
+20406889
+d8400006
+20206825
+20406895
+68108078
+79207e07
+60108078
+d8400007
+202067fb
+68108081
+1fe17efb
+60108081
+20600000
+68108081
+2feffe02
+20600000
+2040666a
+580007e0
+da204150
+d8400002
+204066b3
+2020666d
+2040666a
+580007e2
+da20421d
+d840000e
+204066b3
+2020666d
+474f4033
+204068a2
+6800c22d
+c00068af
+c000e8c3
+c00168d7
+20600000
+68094229
+5800aa55
+98467c00
+2022e8b8
+58004dfa
+60014227
+58004894
+60014221
+202068c0
+68014227
+243a68bc
+58004dfa
+60014227
+68014221
+243a68c0
+58004894
+60014221
+58000064
+6001422b
+20600000
+68094229
+5800aa55
+98467c00
+2022e8cc
+58005932
+60014225
+58004323
+6001421f
+202068d4
+68014225
+243a68d0
+58005932
+60014225
+6801421f
+243a68d4
+58004323
+6001421f
+58000190
+6001422b
+20600000
+68094229
+5800aa55
+98467c00
+2022e8e0
+58006946
+60014223
+58005377
+6001421d
+202068e8
+68014223
+243a68e4
+58006946
+60014223
+6801421d
+243a68e8
+58005377
+6001421d
+58000032
+6001422b
+20600000
+6800c22d
+c00068f0
+c000e8f2
+c00168f4
+20600000
+708971bf
+202068f8
+708971af
+202068f8
+7089718f
+6800c22e
+60108973
+202068f8
+474fc033
+68108053
+79207e07
+60108053
+68108973
+1fe1fe30
+60108973
+7089067c
+708972aa
+20001388
+68190150
+68108053
+793ffe07
+60108053
+6009422f
+20600000
+47504034
+6800c22d
+c000690e
+c000e912
+c0016916
+20600000
+68014227
+68094221
+da6000c8
+2020691a
+68014225
+6809421f
+da600064
+2020691a
+68014223
+6809421d
+da600032
+2020691a
+98462200
+6801422f
+98467e00
+24216927
+6809422b
+984fa400
+1a627e00
+9a2ffe00
+9a40fe00
+9a26fc00
+20407f86
+1807fe00
+20600000
+18427e00
+6809422f
+98467e00
+6809422b
+984fa400
+1a627e00
+9a2ffe00
+9a467e00
+20206923
+ea240000
+60040a9a
+68010a9a
+68090a9c
+98462200
+68010aa0
+98462400
+68090a9e
+98467c00
+24416940
+1a4ffe64
+9a26fc00
+20407f86
+1807fe00
+205a6944
+20600000
+6800c231
+79207e00
+6000c231
+20600000
+6808c231
+79200401
+6008c231
+20600000
+6801423d
+efe08000
+207a0000
+1fe27200
+6801423d
+1fe0fe03
+1fe22200
+ea288000
+204067fb
+1a20a201
+c200694f
+20600000
+6801423d
+1fe0fe03
+1fe22200
+18002400
+700b1200
+ea288000
+2040681d
+4750c034
+68010b12
+1a420e00
+f920fe00
+60010b12
+1a20a201
+1a40a401
+6801423d
+efe08000
+9a42fc00
+2422e959
+68010b12
+68090b14
+9842fc00
+20628000
+78347c00
+20600000
+6801423d
+efe08000
+207a0000
+1fe27200
+6801423d
+1fe0fe03
+1fe22200
+ea288000
+204067dd
+1a20a201
+c2006973
+20600000
+d8e00009
+20407f16
+247a0000
+58000020
+d8e00009
+20407f08
+78547c00
+2040696c
+47514034
+6801423d
+efe08000
+207a0000
+20406954
+24347d02
+20407d00
+78547c00
+68010b12
+60010b19
+700b1b00
+18000e00
+68010b14
+1fe30400
+60090b14
+1fe17e01
+68090b19
+18412201
+18430400
+60090b19
+9a22fc00
+2442e9a1
+6801423d
+efe08000
+68088b1b
+18408401
+60088b1b
+18420e00
+98e2fc00
+2422e98c
+68010b12
+60010b14
+20600000
+4751c034
+6801423d
+1fe0fe01
+efe10000
+20207f9c
+68108042
+9a21fe00
+60108042
+68110050
+793ffe0d
+60110050
+20000064
+20600000
+68098a9c
+58b71b00
+9846fc00
+20407f86
+18078400
+68008a9f
+984ffe00
+1fe6fc64
+20407f86
+1807a200
+18427e00
+9a262400
+68008a9b
+204069be
+68008a9a
+202069d5
+c00069c4
+c000e9c6
+c00169c8
+c001e9ca
+c00269cc
+c002e9ce
+d8a080a0
+202069d0
+d8a080a4
+202069d0
+d8a080a8
+202069d0
+d8a08064
+202069d0
+d8a08068
+202069d0
+d8a0806c
+202069d0
+1a227e00
+e0a10000
+1a427e00
+e0a10000
+20600000
+78347c00
+202069d8
+78547c00
+c00269e3
+c002e9e5
+c00de9e7
+c00e69e9
+c001e9eb
+c00469ed
+c00a69ef
+c00ae9f1
+c00b69f3
+c00be9f5
+20600000
+d8e00006
+202069ff
+d8e00007
+202069ff
+d8e00008
+202069ff
+d8e00009
+202069ff
+d8e0000a
+202069ff
+d8e0000b
+202069ff
+d8e0000c
+20206a01
+d8e0000d
+20206a01
+d8e0000e
+20206a01
+d8e0000f
+20206a01
+68110081
+f9347e00
+60110081
+1a220e00
+68108085
+f9347e00
+60108085
+20600000
+18e0a3fc
+202069f7
+18e0a3f6
+202069f7
+20758000
+70456700
+7004ed03
+7004ee03
+7004f211
+7004f313
+58000000
+600184ef
+6000c254
+70468100
+47524034
+58000000
+6000c254
+6000c564
+6000c55d
+6800c56b
+c000ea16
+70456950
+20600000
+70456900
+20600000
+18418402
+20600000
+18427e00
+1fedfe00
+6000c562
+18007e3f
+1fedfe00
+6000c561
+18007e01
+1fedfe00
+6000c560
+20406a50
+18427e00
+20600000
+1fedfe00
+6000c562
+18007e73
+1fedfe00
+6000c561
+18007e01
+1fedfe00
+6000c560
+20206a50
+6800c563
+203a6a33
+58000070
+20600000
+580000aa
+20600000
+1fedfe00
+6000c562
+18007eef
+20406a44
+680904f7
+18420a00
+e0a08000
+18a20400
+600904f7
+18007eff
+20406a44
+680904f7
+18420a00
+e0a08000
+20600000
+1fedfe00
+6000c561
+68014561
+1fed7e00
+600184f4
+da200107
+da40000f
+20406a5d
+1fe2fed7
+1fe47e00
+1fedfe00
+20600000
+6801c560
+600184f4
+da200107
+da40000f
+20406a5d
+1fed7e00
+da400007
+20406a5d
+1fe2fe2b
+1fe47e00
+1fedfe00
+1fe20400
+20600000
+da600000
+1a427200
+20407e71
+1fe20400
+18427e00
+1a63a600
+c3046a66
+9a228400
+1a60a601
+18438400
+680184f4
+1a40a5ff
+2a41feff
+2020ea70
+1a427200
+20407e71
+2feffe00
+79208400
+20206a61
+18437e00
+20600000
+6808c55d
+184b8400
+79200400
+6800c563
+245a6a18
+6008850d
+20600000
+18438400
+6800c563
+793a0400
+20600000
+680884fc
+7004fed7
+20406bb6
+6800c251
+79207e06
+79207e07
+6000c251
+70456300
+20206b97
+6800c251
+79207e07
+6000c251
+20206b97
+4752c034
+6800c681
+c0006a8e
+20206b4c
+68010264
+1fe20c00
+20406ab8
+680084fc
+c0006a94
+20206b18
+47534034
+680084fd
+c01fea7d
+c039ea86
+c077ea9b
+c029eb44
+20600000
+68010501
+1fe20c00
+20406ac3
+68008503
+c020eaa5
+c0206aad
+c038eae6
+c0386af2
+c024eafd
+20206b97
+20406aaf
+20206aa7
+6800c254
+79207e00
+79207e01
+6000c254
+20406be0
+20206b97
+20406aaf
+20206b97
+20406acb
+20206ad7
+20406acb
+e8c08000
+1fe97e00
+6000c56a
+e8c08000
+60008508
+20600000
+e8c08000
+600084fb
+1fe97e00
+600084fc
+e8c08000
+600084fd
+20406ace
+600904ff
+18c27e00
+60010501
+20600000
+e8c08000
+1fe37e00
+60008503
+20406ace
+60090504
+18c27e00
+60010506
+20600000
+68010506
+1fe20c00
+20600000
+e8c08000
+1fe20400
+18430400
+c3800000
+e8c08000
+1fe9fe00
+1ff27e00
+98408400
+20600000
+e8c08000
+6000c55d
+e8c08000
+60008509
+e8c08000
+6000850a
+e8c08000
+6000850b
+e8c10000
+6001455e
+e8c08000
+6000850c
+e8c08000
+6000c568
+20600000
+20406ab1
+20206ae8
+6800c254
+79207e05
+79207e06
+6000c254
+6808c55d
+184b8400
+18418403
+20406c11
+70456703
+20206b97
+700a9908
+20407d86
+20406ab1
+6800c56a
+1fe67c01
+2022eaf9
+20202a8c
+6800c254
+79207e07
+6000c254
+20206b97
+20406acb
+e8c08000
+60008ac2
+204052d2
+204052e0
+5800000e
+e0a10000
+6801424a
+e0a10000
+6800c563
+1fe3fe00
+79207e00
+e0a08000
+4753c034
+580015ef
+e0a10000
+58001191
+e0a10000
+68008ac2
+e0a08000
+58000007
+e0a28000
+58000001
+e0a10000
+20406a2f
+e0a08000
+20600000
+20206b19
+47544035
+680084fd
+c039eb21
+c01feb25
+c077eb3f
+c07feb37
+c029eb46
+20600000
+6800c254
+79207e03
+6000c254
+20206b97
+6800c254
+79207e03
+79207e02
+6000c254
+680084fb
+20406a26
+600084fe
+20406bb6
+680084fb
+1feb7e00
+6000c55d
+1febfe00
+793ffe01
+79207e00
+d8404565
+600904f7
+20406a35
+20206b97
+68010501
+1fe20c00
+1fe0fe01
+60010501
+e8c08000
+6808c568
+9840fe00
+6000c568
+20406c42
+20406a72
+20406c28
+20406c4b
+20206b97
+700a9909
+20407d86
+20406a0d
+680084fb
+20406a26
+600084fe
+20406bb6
+20206b97
+68010264
+1fe20c00
+20406ab8
+680084fc
+c0006b52
+20206b86
+4754c035
+680084fd
+c01fea7d
+c039ea86
+c077eb58
+20206b97
+68010501
+1fe20c00
+20406ac3
+68008503
+c020eb61
+c0206b61
+c038eb6c
+c0386b7c
+20206b97
+20406aaf
+6800c55d
+1fe37e00
+6808c564
+98467c00
+2022eb68
+20202a8c
+6800c254
+79207e01
+6000c254
+20206b97
+20406ab1
+6800c56a
+6808c564
+98467c00
+2022eb73
+20202a8c
+20206b97
+6800c254
+79207e05
+79207e06
+6000c254
+6808c55d
+184b8400
+18418403
+20406c11
+20206b97
+20406ab1
+6800c56a
+6808c564
+98467c00
+2022eb82
+20202a8c
+6800c254
+79207e07
+6000c254
+20206b97
+680084fc
+6808c564
+98467c00
+2022eb8c
+20202a8c
+20206b97
+680084fd
+c039eb91
+c077eb3f
+c07feb37
+c029eb96
+6800c254
+79207e03
+6000c254
+20206b97
+20206b95
+20206b46
+20600000
+6800c567
+207a0000
+c001eb9c
+20202a8c
+70456700
+204052d2
+d8400001
+6808c55d
+184b8400
+18418403
+da2000aa
+20406bfc
+204052e0
+18a20c00
+e8c10000
+203a2a8c
+20600000
+204052e0
+58000004
+e0a10000
+6801424a
+e0a10000
+680084fb
+e0a08000
+47554035
+5800013f
+e0a10000
+680084fe
+e0a08000
+20600000
+204052d2
+204052e0
+58000004
+e0a10000
+6801424a
+e0a10000
+680084fb
+e0a08000
+4755c035
+58000173
+e0a10000
+680084fe
+e0a08000
+20600000
+204052e0
+5800000e
+e0a10000
+6801424a
+e0a10000
+6800c563
+1fe3fe00
+79207e00
+e0a08000
+47564035
+580015ef
+e0a10000
+58001183
+e0a10000
+18427e00
+e0a08000
+580000f0
+e0a18000
+5800007f
+e0a10000
+58000000
+e0a08000
+58000001
+e0a08000
+20406a2f
+e0a08000
+70456910
+20600000
+204052d2
+204052e0
+5800000e
+e0a10000
+6801424a
+e0a10000
+6800c563
+1fe3fe00
+79207e00
+e0a08000
+4756c035
+580015ef
+e0a10000
+58001181
+e0a10000
+6800c55d
+e0a08000
+580000e0
+e0a18000
+6801456c
+e0a10000
+58000000
+e0a08000
+6800c56e
+e0a08000
+20406a2f
+e0a08000
+20600000
+204052e0
+58000008
+e0a10000
+6801424a
+e0a10000
+6800c563
+1fe3fe00
+79207e00
+e0a08000
+47574035
+580009ef
+e0a10000
+580005e3
+e0a10000
+18427e00
+e0a08000
+5800008d
+e0a08000
+20406a2f
+e0a08000
+20600000
+204052d2
+204052e0
+58000008
+e0a10000
+6801424a
+e0a10000
+18421600
+6800c563
+1fe3fe00
+79207e00
+e0a08000
+4757c035
+580009ef
+e0a10000
+580005e1
+e0a10000
+19627e00
+e0a08000
+5800008d
+e0a08000
+20406a2f
+e0a08000
+20600000
+47584036
+6800c569
+207a0000
+68110112
+247a0000
+1a227e00
+60008a9b
+60088a9a
+2040526e
+247a0000
+204052d2
+204052e0
+58000005
+e0a10000
+6801424a
+e0a10000
+6800850d
+e0a08000
+580001ff
+e0a10000
+6800c569
+e0a08000
+6800c566
+e0a08000
+70456900
+20600000
+4758c036
+6800c56b
+c1008000
+680104ff
+207a0000
+6800c569
+1fe0fe01
+6000c569
+20600000
+6801456f
+20207f9c
+47594036
+6800c568
+207a0000
+1fe0ffff
+6000c568
+6801455e
+6809469f
+98467c00
+20216c57
+6001469f
+6800c569
+203a6c5f
+70051001
+6800c566
+6000850f
+580000ff
+6000850e
+20206c64
+70051000
+6800c565
+6000850f
+580000ef
+6000850e
+4759c036
+6801469f
+1fe67c7f
+20216c6b
+68008510
+1fe0fe01
+60008510
+20406a72
+6801469f
+1fe0fe08
+68088510
+9840a200
+20405240
+60010277
+1fe0fe04
+60010279
+1fe20a00
+6800850d
+e0a08000
+6800850e
+e0a08000
+20406c95
+20406ca6
+475a4036
+68014571
+1fe20600
+6801469f
+1fe27200
+204066ea
+18a20400
+18627e00
+60014571
+18420a00
+6800850f
+e0a08000
+68010277
+1fe20a00
+6801469f
+68088510
+9840fe00
+1fe0fe04
+e0a10000
+6801424a
+e0a10000
+70456900
+68014573
+c0003a97
+700b0500
+20600000
+475ac036
+6801469f
+1fe67c7f
+24216c9d
+1fe3fe00
+79207e00
+e0a08000
+20600000
+6801469f
+1fe97e00
+1ff18400
+1fe17e7f
+1fe3fe00
+793ffe00
+e0a08000
+e0a88000
+20600000
+6800c569
+207a0000
+e0a08000
+20600000
+475b4036
+20407d9c
+204032f6
+2040631b
+475bc036
+204076dc
+204076b5
+204076c6
+2040526e
+247a0000
+20404da9
+2040526e
+247a0000
+475c4037
+20406cf5
+20404f64
+20406b98
+20406cbe
+475cc037
+202032f2
+6800827f
+c2805087
+c283d091
+20600000
+475d4037
+20405274
+207a0000
+6800804b
+c3830000
+20405258
+6001016f
+1fe20c00
+e8c10000
+1fe0fe04
+600141dc
+7041db06
+475dc037
+68014246
+203a6cdd
+6800804b
+c4038000
+793ffe07
+6000804b
+7041db05
+68094246
+6801016f
+9840fe00
+6001016f
+680141dc
+98467e00
+600141dc
+475e4037
+680141dc
+203a2a8c
+d8400104
+98467e00
+24216ce9
+475ec037
+600941dc
+68014246
+9840fe00
+60014246
+20206ceb
+58000000
+60014246
+6800804b
+79207e06
+6000804b
+20600000
+6800c684
+c2806cf3
+70028701
+20600000
+7002870f
+20600000
+6800c681
+243a6cfb
+68008286
+207a0000
+70028600
+20600000
+475f4037
+68008287
+207a0000
+c000ed1b
+c0016d74
+c001ed21
+c0026d78
+c01ded2b
+c01e6d7b
+c006ed30
+c0076d80
+c007ed33
+c0086d86
+c008ed39
+c0096d8a
+c009ed3f
+c00a6d8e
+c00aed45
+c00b6d92
+c00bed4b
+c00c6d97
+c00ced51
+c00d6d9b
+c00ded57
+c00e6d9f
+c00eed5d
+c00f6da4
+c00fed63
+c0106da8
+c010ed6e
+c0116dac
+20600000
+20406db7
+70028702
+6800c250
+79207e00
+6000c250
+20600000
+70028704
+6800c250
+c3810000
+70028703
+20406dbe
+70028704
+6800c250
+79207e02
+6000c250
+20600000
+20405274
+247a0000
+20406dcd
+7002873c
+20600000
+20406dc3
+7002870e
+20600000
+20406ddd
+70028710
+6800c252
+79207e00
+6000c252
+20600000
+20406de4
+70028712
+6800c252
+79207e02
+6000c252
+20600000
+20406de9
+70028714
+6800c253
+79207e00
+6000c253
+20600000
+20406df0
+70028716
+6800c253
+79207e02
+6000c253
+20600000
+20406dd1
+70028718
+6800c251
+79207e00
+6000c251
+20600000
+20406dd8
+7002871a
+6800c251
+79207e02
+6000c251
+20600000
+20406df5
+7002871c
+6800c251
+79207e06
+6000c251
+20600000
+20406dfc
+6800c254
+79207e00
+6000c254
+7002871e
+20600000
+20406e02
+6800c254
+79207e02
+6000c254
+70028720
+6800c564
+1fe9fe00
+1fe1fe03
+d8404565
+600904f7
+20206a35
+20406e0c
+6800c254
+79207e04
+6000c254
+70028722
+20600000
+6800c250
+c4008000
+70028703
+20206cfb
+6800c250
+c19f8000
+7002873b
+68008285
+c18b8000
+70028500
+7002870d
+20206cfb
+6800c250
+247a0000
+6800c684
+c2806daf
+c2836db1
+20206db5
+6800c252
+c4008000
+70028711
+20206cfb
+6800c252
+c19f8000
+70028713
+20206cfb
+6800c253
+c4008000
+70028715
+20206cfb
+6800c253
+c19f8000
+6800c684
+c2836db1
+20206db5
+6800c251
+c4008000
+70028719
+20206cfb
+6800c251
+c19f8000
+7002871b
+20206cfb
+6800c251
+c1ff8000
+6800c684
+c2836db3
+20206db5
+6800c254
+c4008000
+7002871f
+20206cfb
+6800c254
+c4018000
+70028721
+20206cfb
+6800c254
+c1ff8000
+20206db5
+7002870f
+20206cfb
+70028717
+20206cfb
+7002871d
+20206cfb
+70028700
+20600000
+475fc037
+204052b8
+58000001
+1fe20400
+58000050
+1fe21600
+202050a8
+47604038
+204052b8
+68014248
+1fe20400
+202050b7
+4760c038
+204052b8
+68014248
+1fe20400
+d9600050
+204050cc
+6800c250
+793ffe05
+6000c250
+20600000
+47614038
+204052c5
+20407138
+202050e7
+4761c038
+204052b8
+58000003
+1fe20400
+58000051
+1fe21600
+202050a8
+47624038
+204052b8
+6801424a
+1fe20400
+202050b7
+4762c038
+204052b8
+58000011
+1fe20400
+58000052
+1fe21600
+202050a8
+47634038
+204052b8
+6801424c
+1fe20400
+202050b7
+4763c038
+204052b8
+58000013
+1fe20400
+58000053
+1fe21600
+202050a8
+47644039
+204052b8
+6801424e
+1fe20400
+202050b7
+4764c039
+204052d2
+7004fb03
+7004fe1c
+20406ba9
+70456301
+20600000
+47654039
+204052d2
+6808c564
+20406a79
+6008c55d
+20206bc4
+4765c039
+204052d2
+6808c55d
+20406a73
+20406a1a
+600084fe
+6808c55d
+20406a73
+600884fb
+20206ba9
+47664039
+204052d2
+6808c55d
+20406a73
+20206bfc
+4766c039
+68010264
+98000c00
+e8c08000
+1fe22400
+6000851b
+e8c10000
+6001051c
+e8c08000
+1fed1600
+e8c08000
+99609600
+47674039
+18c20400
+df200004
+d8a0052a
+20407ec6
+18420c00
+1a427e00
+c000efba
+c0016e2c
+c001efba
+c0026e54
+c002efba
+c0036f02
+c003efba
+20206fc1
+4767c039
+20406fd0
+2841fe01
+2020f040
+2841feff
+2020efc4
+e8c10000
+60010522
+196097fe
+196097ff
+2422efbe
+d9600511
+e9610000
+207a0000
+20407082
+204052d0
+18007e03
+e0a08000
+6801051c
+e0a10000
+18ebfe00
+1fe0fe05
+1fe0a605
+1ff0fe00
+e0a10000
+18e27e00
+1ff0fe00
+e0a10000
+e0a10000
+d8c0052a
+18e27200
+2022ee4f
+e8c20000
+e0a20000
+c2006e4c
+18007e00
+e0a08000
+1a627e00
+60010275
+20600000
+4768403a
+e8c20000
+60020524
+196097fc
+20406f2e
+60010520
+196097fe
+20407028
+2022efc4
+2a21fe05
+2020ee62
+d8a0052a
+18000e00
+20206e71
+e8c08000
+c0856fc4
+e8c10000
+243a6e6f
+e8c08000
+c0ffee6d
+e8c08000
+c0ffee6b
+20206eb8
+18c08dfb
+20206e5f
+18c08dfc
+20206e5f
+18c08dfd
+20206e5f
+e8c08000
+c004ee86
+c0056e74
+e8c10000
+e0a10000
+18e08e01
+1ff0a400
+e8c10000
+1ff0fe00
+1a40a401
+9a467c00
+24216e83
+1fe22600
+1a50fe00
+e0a10000
+18e08e01
+1a627e00
+20206e7a
+196097fb
+1a20a3fb
+20206e8b
+e8c10000
+e0a10000
+18e08e01
+196097fd
+1a20a3fd
+24216fc4
+2422ee71
+196097ff
+2422efc4
+204052d0
+18a08a0a
+da20052a
+18e27e00
+203a6ea5
+ea210000
+203a6ea5
+98002400
+68020524
+98000400
+204070e7
+18c27e00
+203a6ea2
+18c08dfd
+e8c18000
+e0a18000
+2040705b
+98007200
+20407f01
+1a20a202
+18e08fff
+20206e92
+da200005
+20406f84
+68010275
+c005f043
+20206f9a
+e8c08000
+c0006eae
+c000eeb0
+c0016eb3
+196097ff
+20206eb6
+e8c08000
+196097fe
+20206eb6
+e8c10000
+1ff0fe00
+196097fd
+60010519
+20600000
+196097fb
+20406eaa
+2422efbe
+680a0524
+204070b1
+2422efbb
+18c22200
+204052d0
+1a220c00
+18a08a03
+18c21600
+20407062
+1fe22200
+68010519
+1fe22400
+1a227e00
+9a462400
+68010520
+9a467c00
+24216ee7
+78547c00
+68010519
+203a6eda
+99608c00
+1a40a403
+1a427200
+1f227e00
+1fe0fe03
+1ff0fe00
+e0a10000
+1f227e00
+1ff0fe00
+e0a10000
+20206ef5
+1a20f206
+20346ede
+1f30fe00
+20206ee1
+1f227e00
+1fe0fe02
+1ff0fe00
+e0a10000
+1f20f3fd
+1f30fe00
+e0a10000
+19620c00
+20206ef5
+78347c00
+68010520
+1fe22200
+1a227200
+68010519
+203a6eda
+99608c00
+1a227e00
+1fe0fe05
+1ff0fe00
+e0a10000
+1a227e00
+1ff0fe00
+e0a10000
+20407f01
+24346efe
+18007e02
+e0a08000
+18c27e00
+99667e00
+1ff0fe00
+e0a10000
+20206f00
+18007e00
+e0a08000
+da200005
+20206fb0
+4768c03a
+20406fd0
+2841feff
+2020efc4
+20406f2e
+60010520
+196097fe
+20407028
+d8a0052a
+18000e00
+e8c08000
+c0056f36
+e8c10000
+e0a10000
+18e08e01
+196097fd
+1a20a3fd
+24216fc4
+2422ef0c
+196097ff
+2422efc4
+204052d0
+18a08a0d
+68010511
+98002600
+da20052a
+ea210000
+203a6f29
+98002400
+204070c6
+203a6f27
+18c08dfd
+e8c18000
+e0a18000
+2040705b
+98007200
+20407f01
+1a20a202
+20206f1c
+20406f83
+68010275
+c0077046
+20406f9a
+20206f9a
+e8c10000
+1ff0fe00
+1fe0fffd
+d84000c8
+98467c00
+24610000
+580000c8
+20600000
+18c08c04
+196097fb
+1a20a3fb
+2422efc4
+20406eaa
+2422efbe
+d9600511
+20407082
+18e27e00
+203a7046
+6000854e
+1a427e00
+6001054c
+d8e00000
+da200000
+204052d0
+18a08a0a
+20406f6c
+24342a8c
+18c21600
+1fe22600
+9a20a200
+68010519
+1fe22400
+203a6f75
+1a227e00
+9a462400
+2022ef67
+24216f67
+68010520
+9a467c00
+2022ef5e
+24216f5e
+1a427200
+20406f61
+6800854e
+18e08e01
+98e67c00
+2022ef83
+20206fa0
+1fe27200
+20406f61
+20206fa0
+18a08bfd
+1f220400
+1a627e00
+9a467e00
+99608c00
+20207f01
+6800854e
+18e08e01
+98e67c00
+20628000
+20206f47
+20407fe9
+d8c0052a
+18ebfe00
+98c08c00
+e8ca0000
+204070b1
+24628000
+2040705b
+20207fe7
+68010520
+9a267c00
+24216f8f
+1a227200
+1f220400
+19620c00
+20407f01
+6801054c
+9a267c00
+2022ef81
+20406fa0
+20206f94
+20406f83
+20206f94
+da200007
+18007e00
+e0a08000
+20406fb0
+68090275
+184085fb
+1850fe00
+e0a10000
+184085fd
+1850fe00
+e0a10000
+20600000
+1fe27200
+1f220400
+19620c00
+20407f01
+20406fa0
+58000036
+e0a08000
+6801054c
+1ff0fe00
+e0a10000
+20600000
+58000036
+e0a08000
+184085fd
+1850fe00
+e0a10000
+20600000
+da200007
+58000002
+e0a08000
+68010519
+98408400
+1850fe00
+e0a10000
+20406fb0
+68090275
+184085fb
+1850fe00
+e0a10000
+184085fb
+1850fe00
+e0a10000
+20600000
+68010273
+98a67e00
+1fe67e00
+60010275
+204052d0
+1a227e00
+e0a08000
+6801051c
+e0a10000
+20600000
+20600000
+58000200
+6001054a
+20206fc6
+58000400
+6001054a
+20206fc6
+58000600
+6001054a
+20206fc6
+58000300
+6001054a
+204052d0
+e0a08000
+6801051c
+e0a10000
+58000200
+e0a10000
+6801054a
+e0a10000
+70027507
+20600000
+da400000
+18000400
+d8a00511
+20407028
+2022f026
+1a40a401
+e8c08000
+1a20a3ff
+196097ff
+2fe1f018
+2420f026
+2fe00e04
+2420eff3
+18000401
+e8c08000
+1a20a3ff
+196097ff
+c0806fe7
+e8c08000
+1a20a3ff
+196097ff
+c0006ff8
+20206fea
+18c08c01
+1a20a3ff
+196097ff
+18c08c02
+1a20a3fe
+196097fe
+2841fe00
+2020f020
+18c08c0c
+1a20a3f4
+196097f4
+20207020
+2fe00e02
+2420eff6
+20206fde
+2fe00e01
+2420f026
+1a20a3fe
+196097fe
+e8c10000
+1a467c04
+2022effe
+e0a10000
+2841fe00
+2020f020
+18c20400
+e8c08000
+c0807019
+e8c08000
+c0807019
+e8c08000
+c0887019
+e8c08000
+c0807019
+e8c08000
+c0c07019
+e8c08000
+c0807019
+e8c08000
+c0807019
+e8c08000
+c0c07019
+e8c08000
+c0aff019
+e8c08000
+c0cdf019
+e8c08000
+c09a7019
+e8c08000
+c07df01e
+18420c00
+18c08c0c
+18000e00
+18000400
+2020701e
+196097f4
+1a20a3f4
+18000400
+2a21fe00
+2420efd5
+18007e00
+e0a10000
+20600000
+d84000ff
+20600000
+476a403a
+e8c08000
+196097ff
+2fe1f030
+2420f03e
+2fe00e07
+2020f037
+2fe00e06
+2020f039
+2fe00e05
+2420f03e
+e8c08000
+1fe22200
+196097ff
+2020703c
+18c08c02
+196097fe
+e8c10000
+1ff0a200
+196097fe
+18007e01
+20600000
+18007e00
+20600000
+58000003
+6000851b
+20207048
+58000005
+6000851b
+20207048
+58000007
+6000851b
+204052d0
+6800851b
+1fe22400
+e0a08000
+6801051c
+e0a10000
+58000500
+e0a10000
+2a41fe05
+2020f057
+2a41fe07
+2020f057
+58000000
+e0a28000
+20207059
+58350200
+e0a28000
+7002750a
+20600000
+20407ea2
+20407ea5
+20407062
+20407e9c
+20407e9f
+18427e00
+20600000
+e8c08000
+1fe17207
+1fe97e00
+c080706c
+18007e01
+18000401
+20600000
+20407e76
+1fe08401
+20600000
+1f227e00
+1fe67c04
+20217069
+c002f073
+c0037076
+c003f07a
+20600000
+e8c08000
+1fe08402
+20600000
+e8c10000
+1ff0fe00
+1fe08403
+20600000
+e8c10000
+1ff0fe00
+e8c90000
+18508400
+18500400
+9840fe00
+1fe08405
+20600000
+476ac03a
+18000e00
+da400000
+d8a0052a
+e9610000
+207a0000
+2040708d
+18e27e00
+c1038000
+19609602
+20207086
+98002600
+68014575
+98000c00
+18e27e00
+c1038000
+78547c00
+e8c08000
+207a0000
+98007200
+e8c10000
+9a667c00
+2422f09a
+78347c00
+c2007096
+e8ca0000
+18c22200
+243470ad
+d8c0052a
+df200007
+e8c20000
+203a70a6
+98467c00
+2022f0ad
+c20070a0
+20600000
+e0aa0000
+18e08e01
+1a220c00
+2040705b
+9a40a400
+98c08c00
+20207090
+1a220c00
+20407062
+98c08c00
+20207090
+476b403a
+68014575
+98000c00
+e8c08000
+203a7fe3
+1fe3fe00
+98c08c00
+e8c20000
+98467c00
+20628000
+18a27e00
+60010abb
+600c0aa2
+20407062
+98c08c00
+18c27e00
+68090abb
+18420a00
+680c0aa2
+1fe20c00
+202070b4
+476bc03a
+68014575
+98000c00
+e8c08000
+203a70e4
+98007200
+e8c10000
+9a667c00
+2022f0d4
+c20070cc
+18c08c04
+20407062
+98c08c00
+202070c9
+1f20f3ff
+1f23fe00
+98c08c00
+18c08c04
+20407062
+98c09600
+18c08c01
+e8c10000
+9a467c00
+2022ffef
+2040705b
+98c08c00
+19627e00
+98c67c00
+2022f0e4
+202070da
+18000c00
+18007e00
+20600000
+476c403b
+68014575
+98000c00
+e8c08000
+203a7100
+1fe3fe00
+98c08c00
+e8c20000
+98467c00
+2022f0f4
+20407062
+98c08c00
+202070ea
+20407062
+98c09600
+18c08c01
+e8c10000
+9a467c00
+20628000
+2040705b
+98c08c00
+19627e00
+98c67c00
+2022f100
+202070f6
+18000c00
+20600000
+da400400
+204070f4
+da400300
+2040710d
+24740000
+1a267c03
+20217fe9
+e8c08000
+c0847fe9
+e8c08000
+20600000
+476cc03b
+20407062
+1fe22200
+e8c08000
+1fe17207
+1fe97e00
+1fe67c03
+2022f129
+1f227e00
+c002f120
+c0037123
+c003f126
+18c08dff
+20407062
+98c08c00
+1a227e00
+98462200
+2022ffe9
+20207110
+1a20a3fe
+18c08c01
+20207110
+1a20a3fd
+18c08c02
+20207110
+1a20a3fb
+18c08c04
+20207110
+1a20a3ff
+1f227e00
+c000f132
+c0017130
+c002712f
+20207fe9
+1a20a3f4
+e8c10000
+1a20a3fe
+e8c10000
+9a467c00
+2022ffe7
+1a20a3fe
+2022ffe9
+20207110
+204052d0
+1fe20a00
+58000006
+e0a08000
+5800006e
+e0a10000
+58000f00
+e0a10000
+581a0535
+e0a18000
+58000111
+1ff07e00
+e0a20000
+58002600
+e0a10000
+58000335
+e0a10000
+58000009
+e0a10000
+58000004
+e0a10000
+70027514
+20600000
+476d403b
+7005e550
+d8a005e6
+d8c0443a
+20407ebf
+d8c045d2
+20407ebd
+d8c009be
+20407ebd
+2040720a
+d8c0042f
+20407205
+204071d0
+d8a00af2
+20407201
+580f4240
+1fe22200
+68020af2
+9a26fc00
+20407f86
+18077e00
+600209ba
+20600000
+7005e541
+d8a005e6
+204071b5
+204071b0
+6801c454
+e0a18000
+20407176
+d8c0042f
+20407ebf
+d8c0443a
+20407ebf
+2040720a
+d8c00b12
+d8a00ac2
+20407ebf
+202071d0
+680244c7
+e0a20000
+20407ecd
+20207eca
+476dc03b
+7005e541
+d8a005e6
+204071b0
+204071b5
+6801c44d
+e0a18000
+20407176
+d8c0443a
+20407ebf
+d8c0042f
+20407ebf
+2040720a
+d8c00b12
+d8a00ac2
+20407ebf
+204071d0
+d8a00af2
+20207201
+7005e520
+d8c009fe
+d8a005e6
+20407ebd
+2040720a
+d8c0099e
+20407205
+204071d0
+d8a00ac2
+20407497
+d8400001
+2040719f
+d8a04419
+20407201
+d8400000
+2040719f
+d8a00b12
+20207497
+476e403b
+7005e535
+58000100
+600105e6
+204071b0
+204071b5
+d8c0443a
+20407ebf
+d8c0042f
+20407ebf
+58006c65
+e0a10000
+58006274
+e0a10000
+e0a88000
+2040720a
+202071d0
+680344a0
+e0a30000
+6800c495
+e0a08000
+20600000
+6803044f
+e0a30000
+6800c48e
+e0a08000
+20600000
+7005e541
+6800c664
+600085e6
+d8c045d2
+20407ebd
+d8c009be
+20407ebd
+2040720a
+d8c0042f
+20407205
+202071d0
+7005e541
+6800c664
+600085e6
+d8c009be
+20407ebd
+d8c045d2
+20407ebd
+2040720a
+d8c0443a
+20407205
+202071d0
+476ec03b
+2040721f
+680085e5
+1fe20400
+1fe0fe0f
+1ff1fe00
+1fe22400
+203a71e2
+18417e0f
+243a71e5
+da600ad2
+dfe005e6
+1fe0fff0
+9840a200
+d8a00b02
+df200004
+20407edd
+202071f0
+da400001
+da200000
+202071e6
+1841220f
+dfe005e6
+9840fe00
+9a260c00
+d8a00af2
+20407245
+da600ae2
+da200af2
+d8a00b02
+df200004
+20407edd
+20407491
+20407428
+d8c005e6
+1a40a5ff
+1a427e00
+203a71f9
+20407486
+20407422
+202071f3
+d8a00af2
+20407497
+d8c00b02
+20407486
+20407428
+d8c00af2
+20407486
+20207422
+18a22200
+20407497
+df200010
+20207ee5
+d8a00ac2
+20407ebf
+df200010
+da200ac2
+20207ee5
+680085e5
+1fe27200
+da2005e6
+20207ee5
+ea208000
+1fe3fe00
+2a6ffe00
+7920fe00
+2feffe08
+7920a600
+e2208000
+1a20a3ff
+c200720e
+20600000
+da200ad2
+1a20a20f
+18007210
+18002600
+2020720e
+da200ae2
+20207219
+d8c00ac2
+20407484
+18007008
+20407492
+20407491
+2040741f
+d8a00ad2
+20407497
+476f403b
+68008ad2
+2feffe07
+2420f230
+20407218
+da600ad2
+d8a00ad2
+2040723a
+20207231
+20407218
+d8c00ad2
+d8a00ae2
+20407ebf
+68008ae2
+2feffe07
+2420f21d
+2040721d
+da600ae2
+d8a00ae2
+df200003
+d8400000
+20407241
+1a60a604
+c200723b
+d8408700
+18500400
+ea620000
+9842fe00
+e0a20000
+20600000
+476fc03b
+df200010
+dfe00000
+9a267c00
+2022f250
+20217253
+e8c88000
+e0a88000
+1fe0fe01
+c2007248
+20600000
+d8400080
+e0a88000
+2020724d
+d8400000
+20207251
+20407268
+d8c00592
+d8a00582
+20207ebf
+78547c00
+2040735f
+d8c00562
+d8a005a2
+1800720f
+20407f01
+e8c08000
+1fe2fe06
+e0a08000
+580005b2
+600105d6
+580005a2
+600105d4
+79200012
+202072a8
+6808c689
+18002410
+1840a606
+1a667c10
+2021726e
+18002610
+d8a005a2
+d8c0468a
+18427200
+78547c00
+e8c08000
+e0a08000
+1a40a5ff
+2022f27c
+c2007272
+2034726f
+78347c00
+18007206
+1a220c00
+20207272
+d8c00562
+d8a005b2
+20407ebf
+680085c1
+9a62fe00
+600085c1
+580005b2
+600105d6
+580005a2
+600105d4
+79200012
+202072a8
+78547c00
+2040735f
+20207292
+da200056
+78347c00
+2040735f
+20407292
+d8c00592
+d8a00062
+20207ebf
+58000562
+600105d6
+580041be
+600105d4
+793f8012
+204072a8
+da200592
+da400562
+d8a005a2
+20407352
+da2005a2
+da4005b2
+1a420a00
+78347c00
+20407350
+2040736a
+580005b2
+600105d6
+580005a2
+600105d4
+79200012
+202072a8
+7005d800
+680105d4
+98000c00
+d8a005c2
+20407ebf
+680105d6
+98000c00
+d8a00592
+20407ebf
+204072cf
+78547c00
+c58972b9
+680085d8
+c08272b9
+680105d6
+98002400
+20407301
+20407300
+20407313
+680085d8
+1fe0fe01
+600085d8
+204072cf
+78347c00
+20407300
+20407322
+20407331
+20407322
+20407331
+20407322
+20407331
+20407322
+680085d8
+1fe0fe01
+600085d8
+c08872b1
+204072cf
+78547c00
+20207300
+680085d8
+d8c005c2
+203a72f6
+98002400
+18007211
+18c20a00
+e8c08000
+1fe98400
+1feb7e00
+1fe97e00
+9841fe00
+e0a08000
+c20072d5
+580005c2
+9a408c00
+18007210
+d8a00572
+e8c08000
+e0a08000
+28c1ffd3
+2420f2e5
+18c08def
+c20072e0
+18002200
+1a40a7ff
+1a6ba600
+1a6ba600
+204074b9
+58008400
+9a60a600
+d8a00572
+18007210
+ea688000
+e8a08000
+9840fe00
+e0a08000
+1a60a601
+c20072ef
+202074bd
+18007210
+18000400
+e8c08000
+98428400
+c20072f8
+18427e00
+e0c08000
+d8c005c2
+d8a00572
+20207ebf
+da400572
+18007210
+da200592
+1a220a00
+ea288000
+ea408000
+9842e000
+1f212603
+2434730a
+1a62a603
+1a662601
+2021730d
+9840e000
+1e027e00
+e0a08000
+1a20a201
+1a40a401
+c2007304
+20600000
+204074b9
+18007210
+da200592
+ea208000
+d8c08500
+1f212603
+1a667c01
+2021731c
+d8c08600
+98c08c00
+e8c08000
+e2208000
+1a20a201
+c2007316
+202074bd
+18007208
+d8c00592
+18c20a00
+e8c08000
+98002200
+e8c08000
+98002400
+1a23fe00
+9a40fe00
+e0a08000
+1a227e00
+9a40fe00
+e0a08000
+c2007325
+20600000
+588ae42c
+98000400
+18007207
+20407340
+580d751b
+98000400
+18007205
+20407340
+680085a1
+98002200
+68008595
+600085a1
+1a227e00
+60008595
+20600000
+1841240f
+18417e0f
+d8a00592
+98a08a00
+e8a08000
+98002600
+1a227e00
+e0a08000
+1a622200
+18518400
+c2007341
+58000592
+9a408a00
+1a227e00
+e0a08000
+20600000
+78347c00
+20207353
+78547c00
+18007210
+ea288000
+ea408000
+20347359
+9842fe00
+2020735a
+9840fe00
+e0a08000
+1a20a201
+1a40a401
+c2007354
+20600000
+d8a005b2
+ea230000
+e0a30000
+20347365
+ea230000
+20207366
+e8c30000
+e0a30000
+ea220000
+e0a20000
+20600000
+d8c041be
+d8a005a2
+d8400000
+588395a7
+2040738b
+58b3c1df
+2040738b
+5800e5e9
+2040738c
+18422800
+78547c00
+20407379
+1a820400
+78347c00
+20207379
+18007208
+e8c08000
+2f200201
+20347380
+2020f381
+9840fe00
+20207382
+2020f37e
+9842fe00
+e0a08000
+184c8400
+c200737a
+20600000
+68030596
+60030056
+e8c30000
+e0a30000
+20600000
+184d0400
+18500400
+98418400
+20600000
+2020738f
+4770403c
+2040742b
+d8a04419
+20207497
+d8a0443a
+2034f397
+d8a0042f
+18c22200
+20407ebf
+20407440
+d8c0442a
+202074b0
+da20042f
+2034f39f
+da20443a
+1a220a00
+2040630c
+20207440
+d8c044aa
+20407486
+d8c04419
+20407487
+18006c38
+18006c00
+2040741d
+d8a0047c
+20207497
+18007e49
+202073ae
+18007e01
+18007000
+184d5e00
+9de1de00
+1f00f001
+184cde00
+1df15e00
+68014411
+1ff07e00
+9de1de00
+1f00f001
+e8c20000
+98005e00
+1f00f001
+e8c10000
+1a30de00
+1df05e00
+9de1de00
+1f00f001
+20600000
+1a608c01
+e8c08000
+98002200
+204073ab
+2040741f
+18007000
+ea608000
+1fe17e03
+1ff05e00
+79205e08
+2040748f
+20407422
+1a227200
+1a608c02
+2040746e
+20407478
+20407422
+1f227e00
+203a73d5
+202073d0
+1800700c
+1de27e00
+60020417
+20600000
+1a20a201
+204073ad
+1a620c00
+20407482
+20407425
+2040749e
+1a60a610
+1a40a5f0
+202173d9
+20600000
+4770c03c
+da6043dc
+680ac403
+204073c1
+18007008
+98005e00
+18002200
+204073ad
+20407425
+da6043de
+6800c3dd
+1fe0a5ff
+9a608a00
+1800700c
+1de27e00
+e0a20000
+204073d9
+6800c3dd
+1fe0fe04
+6000c3dd
+680ac403
+18408401
+600ac403
+20600000
+4771403c
+680082da
+1fe67c14
+202173ff
+da6002db
+1fe0a5ff
+1fe0fffc
+600082da
+9a608c00
+e8c20000
+18007008
+98005e00
+18002200
+680ac408
+204073ad
+20407425
+1800700c
+1de27e00
+6002041b
+204073d9
+da6002d9
+204073c1
+680a041b
+98467e00
+247a0000
+6802440d
+98467e00
+207a0000
+600a440d
+6802c408
+1fe0fe01
+6002c408
+18007e00
+20600000
+243bf41d
+20600000
+18006c30
+18006c00
+2020741d
+18006c32
+18006c02
+2020741d
+18006c34
+18006c04
+2020741d
+18006c01
+18006c00
+20600000
+18007000
+6802042f
+98005e00
+1f00f001
+e8c20000
+98005e00
+1f00f001
+6802443a
+98005e00
+1f00f001
+e8c20000
+98005e00
+1f00f001
+20407492
+1f00f1fc
+680244c7
+1fe25e00
+1f00f004
+18006c38
+18006c08
+2020741d
+4771c03c
+680344a0
+680b044f
+2034f446
+6803044f
+680b44a0
+18007008
+18425e00
+1f00f001
+184f5e00
+1ff07e00
+9de1de00
+1f00f001
+1fef5e00
+1f00f001
+18005e00
+18007e00
+6800c48e
+6808c485
+2434f456
+6800c495
+6808c48e
+6000c44a
+6008c44b
+18007000
+da40444a
+18007204
+ea220000
+ea4a0000
+9842de00
+1f00f001
+1a20a204
+1a40a404
+c200745b
+20407492
+1f00f1fc
+680244c7
+1fe25e00
+1f00f004
+18006c38
+18006c0c
+2040741d
+20407491
+18006c3a
+18006c08
+2020741d
+2f200600
+20608000
+18c27e00
+9f208a00
+18007e00
+e0a08000
+1f20f201
+2f200600
+20608000
+20207473
+18007000
+1f227e00
+203a747d
+e8c20000
+1f20f3fc
+98005e00
+1f00f001
+2f001e04
+20608000
+20207479
+18007008
+20207487
+18007004
+20207487
+18007000
+18007204
+e8c20000
+98005e00
+1f00f001
+c2007488
+20600000
+d8c0047c
+20207484
+18007204
+20207494
+18007000
+18007204
+18005e00
+1f00f001
+c2007493
+20600000
+1800700c
+18007204
+1de27e00
+e0a20000
+1f00f001
+c2007499
+20600000
+1800700c
+1a620a00
+1a40f201
+1f267c0f
+202174a4
+18007210
+1de27e00
+1f267c03
+202174ac
+e0a20000
+1f20f3fc
+20628000
+1f00f001
+202074a4
+e0a08000
+1fecfe00
+c20074ac
+20600000
+1800700c
+18007204
+e8c20000
+9de67c00
+24628000
+1f00f001
+c20074b2
+18007c00
+20600000
+68108050
+793ffe00
+60108050
+20600000
+68108050
+79207e00
+60108050
+20600000
+d8a00886
+3803ffff
+3807ffff
+380bffff
+380ffbff
+e0a48000
+3803ffff
+3807ffff
+380bffff
+380fffff
+e0a48000
+3803ffff
+3807ffff
+380bcfff
+380fffff
+e0a48000
+3803ffff
+3807ffff
+380bffef
+380fffff
+e0a48000
+3803ffff
+3807ffff
+380bffff
+380fffff
+e0a48000
+3803ffff
+38066c7f
+3808146b
+380f7bb3
+e0a48000
+3801feb8
+38050c12
+380ab722
+380e9fa6
+e0a48000
+3800e70f
+38056720
+3808519e
+380d9084
+e0a48000
+38031012
+380760bf
+380bf0af
+380c03d3
+e0a48000
+3803a188
+38043ad0
+380bcbf2
+380e43d9
+e0a48000
+3802b030
+38076a03
+38091188
+380de520
+e0a48000
+3803a11e
+3804fe5d
+3808dd57
+380dac93
+e0a48000
+380011ed
+380618c4
+38088da7
+380e57ff
+e0a48000
+3803192b
+38074641
+3809be0c
+380f66ad
+e0a48000
+38001f83
+38055a23
+380bf9b0
+380c3949
+e0a48000
+38013a51
+380553fd
+380b372a
+380cf1bb
+e0a48000
+3803ae85
+3805eed9
+38089e66
+380c01a8
+e0a40000
+20600000
+d8a0091e
+3803ffff
+3807ffff
+380bffff
+380fffff
+e0a48000
+3803ffff
+3804003f
+38080000
+380c0000
+e0a48000
+38000000
+38040000
+38081000
+380c0000
+e0a48000
+3803ff00
+3807ffff
+380bffcf
+380fffff
+e0a48000
+3803ffff
+3807ffff
+380bffff
+380c03ff
+e0a48000
+38000000
+38040000
+38080000
+380c0000
+e0a48000
+38010000
+38040000
+380bf000
+380fffff
+e0a48000
+380296ff
+38062630
+380b945d
+380fd284
+e0a48000
+380333a0
+38044b7a
+380837d8
+380fc9dc
+e0a48000
+3803a440
+3805b958
+380b8bce
+380d091f
+e0a48000
+3802e12c
+3805f47c
+380b56b1
+380efd47
+e0a48000
+38006837
+3806ed90
+3809ecec
+380dacc5
+e0a48000
+38023357
+38058af3
+3808f9e1
+380d29f0
+e0a48000
+3802e7eb
+3807e6e3
+380be1a7
+380d0b8b
+e0a48000
+38024fe3
+380420ef
+3809b5a6
+380cdc2f
+e0a48000
+38013860
+3806bd69
+3808391a
+380db222
+e0a48000
+20600000
+6800c65a
+243a757d
+20207a77
+4772403c
+6800c65a
+207a0000
+6800c5b1
+c1808000
+6800c4be
+207a0000
+6800c4c3
+c1018000
+68014682
+c280757b
+6800c4c0
+c0007a77
+20600000
+7044c000
+20600000
+4772c03c
+6800c65a
+203a612b
+20406124
+20407583
+2020766d
+58000000
+600409ae
+600209b6
+6003c65e
+20600000
+7009b001
+2020758d
+6800c5b1
+c000f68a
+20202a8c
+6800c5b1
+c000f590
+2020766d
+2040768a
+680089af
+247a0000
+7009ae03
+20600000
+204075b0
+da2009de
+d8a00866
+20407c79
+da2009be
+d8a00826
+20407c79
+da200826
+da4009be
+d8a00826
+20407be1
+da20093e
+da4009be
+d8a00846
+20407be1
+da200846
+da400826
+d8a00826
+20407c7d
+da200806
+da400826
+d8a00806
+20407c7d
+df200020
+da200866
+da400806
+20207f88
+da20097e
+d8a00806
+20407c79
+da20095e
+d8a00826
+20407c79
+da200826
+da40095e
+d8a00826
+20407be1
+da20093e
+da40095e
+d8a00846
+20407be1
+da200846
+da400826
+d8a00826
+20407c7d
+da200806
+da400826
+d8a00806
+20207c96
+204075e1
+da2009e6
+d8a00866
+204077a8
+da2009c6
+d8a00826
+204077a8
+da200826
+da4009c6
+d8a00826
+20407786
+da20089e
+da4009c6
+d8a00846
+20407786
+da200846
+da400826
+d8a00826
+20407755
+da200806
+da400826
+d8a00806
+20407755
+df200018
+da200866
+da400806
+20207f88
+da2008e6
+d8a00806
+204077a8
+da2008ce
+d8a00826
+204077a8
+da200826
+da4008ce
+d8a00826
+20407786
+da20089e
+da4008ce
+d8a00846
+20407786
+da200846
+da400826
+d8a00826
+20407755
+da200806
+da400826
+d8a00806
+20207758
+680089b2
+c0807615
+20407612
+d8a00a7e
+58000a2e
+e0a10000
+58004642
+e0a10000
+580009de
+e0a10000
+20207609
+d8a00a7e
+58000a3e
+e0a10000
+580009de
+e0a10000
+58004642
+e0a10000
+204079a0
+680089af
+c002760f
+7009b001
+7009ae05
+20600000
+7009af14
+2040758a
+202076d8
+d8a00a1e
+18000e08
+202076a2
+7009b001
+20600000
+4773403c
+d8a00727
+680340a0
+e0a30000
+68030040
+e0a30000
+6801c65e
+e0a18000
+20407a0d
+da200a4e
+da400a5e
+18000e04
+204076a7
+2420f631
+20407628
+70007d41
+202062f8
+680089af
+c004f62e
+7009ae0a
+7009b001
+70007c03
+20600000
+70007c03
+7009af15
+202076d8
+680089af
+c004f637
+7009ae00
+70007c04
+70007e05
+20600000
+70007c04
+7009af00
+20600000
+680089b3
+c000f63e
+7009af0a
+202076d8
+d8a00727
+68030040
+e0a30000
+680340a0
+e0a30000
+6801c65b
+e0a18000
+20407a24
+680089af
+c005764b
+7009ae0b
+7009b001
+20600000
+7009af0b
+7009b101
+20600000
+d8a00a7e
+68030040
+e0a30000
+680340a0
+e0a30000
+58000a2e
+e0a10000
+58000a3e
+e0a10000
+20207662
+7009ae0f
+d8a00a7e
+680340a0
+e0a30000
+68030040
+e0a30000
+58000a3e
+e0a10000
+58000a2e
+e0a10000
+d8a00727
+68030a7e
+e0a30000
+68030a84
+e0a30000
+204079d7
+7041bd01
+d8a041be
+d8c00a4e
+20407ebf
+202021c4
+4773c03c
+6800c5b1
+c1800000
+680089b2
+c1800000
+d8a04612
+18000e0b
+204076a2
+180a7e00
+1fe37e00
+e0a10000
+d8a006be
+d8c04612
+20407ebe
+d8a005e6
+d8c008ce
+20407ebc
+d8a00616
+20407ec5
+70061601
+20407a5d
+7009b201
+20600000
+d8a0462a
+d8c0062e
+20407ebc
+7045b101
+7009b200
+20600000
+4774403d
+680089b9
+c1800000
+680089b2
+c1800000
+d8a006be
+d8c04612
+20407ebe
+d8a005e6
+d8c009c6
+20407ebc
+d8a00616
+20407ec5
+70061601
+20407a5d
+7009b202
+20600000
+7009b301
+d8a00a06
+d8c0062e
+20407ebe
+7009b901
+7009b200
+20600000
+18e08fff
+24610000
+180a7e00
+e0a10000
+202076a2
+18e08fff
+242176b3
+ea220000
+1fe20400
+ea420000
+9842fe00
+2422f6b1
+1a20a204
+1a40a404
+202076a7
+7840fc00
+20600000
+7820fc00
+20600000
+4774c03d
+680089b0
+207a0000
+204062bc
+247a0000
+7009b000
+680089ae
+c001e1fd
+c002e21a
+c003e225
+c005e23a
+c0017588
+c00275f7
+c004f617
+c005763a
+c0067658
+20600000
+4775403d
+680089b1
+207a0000
+204062bc
+247a0000
+7009b100
+680089af
+c00961e0
+c009e1e5
+c001e1e9
+c0027602
+c00a61ed
+c003e1fb
+c005763a
+c005e239
+c004f617
+c00ae233
+20600000
+7009b101
+20600000
+7009b100
+20600000
+4775c03d
+6800c65a
+207a0000
+680089b2
+207a0000
+1fe0fe80
+600089b2
+c3838000
+680085e3
+203a76e7
+20207a68
+204078d3
+680089b2
+c000f684
+c001769b
+20600000
+1fe10e07
+1fe97e00
+98c08c00
+e8c08000
+afec0000
+20600000
+20407ebe
+20407ebe
+20207ebe
+e8c40000
+247a0000
+e8c40000
+247a0000
+e8c40000
+20600000
+ea220000
+98000400
+ea420000
+98467c00
+24628000
+1a20a204
+1a40a404
+c20076fb
+20600000
+18007206
+1a20a214
+1a40a414
+ea420000
+98000400
+ea220000
+98467e00
+24610000
+247a0000
+1a20a3fc
+1a40a5fc
+c2007707
+20600000
+18007206
+18002600
+ea220000
+98000400
+ea420000
+9840fe00
+9a60fe00
+e0a20000
+2feffe20
+7920a600
+1a20a204
+1a40a404
+c2007713
+20600000
+18007206
+18002600
+ea420000
+98000400
+ea220000
+98467e00
+9a667e00
+e0a20000
+2feffe20
+7920a600
+1a20a204
+1a40a404
+c2007721
+20600000
+18007206
+1a20a214
+18002600
+ea220000
+2feffe00
+7920a601
+1fe37e00
+2a6ffe00
+7920fe1f
+e2220000
+1a20a3fc
+1a632600
+c2007730
+20600000
+18007206
+18002600
+ea220000
+2feffe1f
+7920a601
+1fe3fe00
+2a6ffe00
+7920fe00
+e2220000
+1a20a204
+1a632600
+c200773d
+20600000
+2040773b
+2a6ffe00
+2020f751
+da400886
+1a222600
+1a20a3e8
+20407704
+24610000
+1a622200
+1a20a3e8
+da400886
+1a220a00
+2020771f
+20407711
+18a22200
+20207749
+2040771f
+2a6c0000
+20608000
+da400886
+18a0a3e8
+1a220a00
+20207711
+18a21600
+1a226000
+da400716
+1a420a00
+1a208c18
+e8c40000
+e0a40000
+e0a40000
+18007e00
+e0a40000
+19620a00
+20407755
+da400716
+1a420a00
+18007e00
+e0a40000
+1e008c20
+e8c40000
+e0a40000
+e0a40000
+19622200
+1a220a00
+20407755
+da400716
+1a420a00
+1e008c28
+e8c40000
+e0a40000
+e0a40000
+e0a40000
+19622200
+1a220a00
+20207755
+18007206
+e8c20000
+98005e00
+1f00f001
+c2007781
+20600000
+18a21600
+d8a006e6
+20407ec5
+d8a006e6
+1a220c00
+18007000
+20407780
+1a420c00
+20407780
+18002400
+18000400
+18002606
+e8a20000
+98002200
+1a427000
+1de27e00
+1a627000
+9deffe00
+9a20fe00
+9840fe00
+e0a20000
+1fef0400
+1a60a601
+2a61fe0c
+2420f792
+18427e00
+e0a20000
+18a08be8
+1a40a401
+2a41fe06
+2420f790
+da2006e6
+19620a00
+2020775f
+1a222400
+20207786
+1a226000
+1e022200
+ea208000
+2feffe00
+20608000
+2040772d
+ea408000
+2fec0000
+2020f7ba
+da200886
+1a420a00
+20407711
+ea408000
+9a60fe00
+e2408000
+1a40a5e8
+1a40a218
+18007207
+2040772f
+202077ab
+18a21600
+d8a00746
+20407ec5
+18007e00
+600206fe
+6002075e
+70074601
+d8a006e6
+20407ec5
+d8c00886
+d8a00716
+20407ebe
+1a220c00
+d8a0072e
+20407ebe
+d8c0072e
+204076f5
+203a77f6
+da20072e
+da400746
+204077aa
+da200716
+da4006e6
+204077aa
+da20072e
+da400716
+20407704
+202177e8
+da200716
+da40072e
+1a220a00
+2040771f
+da200746
+da4006e6
+1a420a00
+20407711
+ea208000
+9a60a600
+ea408000
+9a60fe00
+e2408000
+202077cd
+da20072e
+da400716
+1a220a00
+2040771f
+da2006e6
+da400746
+1a420a00
+20407711
+ea208000
+9a60a600
+ea408000
+9a60fe00
+e2408000
+202077cd
+d8a00746
+20407ec5
+680086fe
+60008746
+6000874e
+da200746
+da4006e6
+1a420a00
+20407755
+da200886
+da4006e6
+19620a00
+20207758
+da2006a6
+d8a0075e
+204077a8
+da20075e
+d8a00776
+204077a8
+da20089e
+da400776
+d8a00776
+20407786
+da200676
+d8a0075e
+204077a8
+d8c0075e
+d8a0072e
+20407ebe
+da20072e
+20407748
+da20075e
+da40072e
+d8a0075e
+20407755
+da20075e
+da400776
+d8a0075e
+20407755
+d8c00676
+d8a0072e
+20407ebe
+da20068e
+d8a00776
+204077a8
+da20072e
+20407748
+da20072e
+20407748
+da20072e
+da400776
+d8a0072e
+20407786
+da200776
+d8a00746
+204077a8
+da200746
+20407748
+da200746
+20407748
+da200746
+20407748
+d8c0068e
+d8a00776
+20407ebe
+da200776
+20407748
+da200776
+da4006a6
+d8a006a6
+20407786
+da20075e
+d8a00776
+204077a8
+da200776
+da40072e
+d8a00776
+20407758
+da200776
+da40072e
+d8a00676
+20407758
+da20072e
+da400676
+d8a00776
+20407758
+da200776
+da40075e
+d8a00776
+20407786
+da200776
+da400746
+d8a0068e
+20207758
+da200616
+d8a0078e
+204077a8
+da200676
+da40078e
+d8a00746
+20407786
+da200616
+da40078e
+d8a0078e
+20407786
+da20068e
+da40078e
+d8a0072e
+20407786
+da2006a6
+d8a0078e
+204077a8
+da2005e6
+da40078e
+d8a0075e
+20407786
+da2006a6
+da40078e
+d8a0078e
+20407786
+da2005fe
+da40078e
+d8a00776
+20407786
+da200746
+da40075e
+d8a0078e
+20407758
+da200746
+da40075e
+d8a00746
+20407755
+da20072e
+da400776
+d8a0075e
+20407758
+da20072e
+da400776
+d8a0072e
+20407755
+da20072e
+da40078e
+d8a0072e
+20407786
+da2006a6
+da400616
+d8a00776
+20407786
+da200776
+da40078e
+d8a006a6
+20407786
+da20078e
+d8a0078e
+204077a8
+da20078e
+da400746
+d8a00776
+20407786
+da20078e
+da40072e
+d8a0072e
+20407786
+da20075e
+d8a00676
+204077a8
+da200676
+da400776
+d8a00676
+20407758
+d8c00676
+d8a0078e
+20407ebe
+da20078e
+20407748
+da200776
+da40078e
+d8a00776
+20407758
+da200776
+da40075e
+d8a0075e
+20407786
+da20075e
+da40072e
+d8a0068e
+20407758
+da20068e
+da400886
+d8a0068e
+18002600
+6800868e
+2feffe00
+2040f711
+1a626000
+da20068e
+2040772d
+680086a5
+2e0ffe00
+7920fe07
+600086a5
+20600000
+680085e3
+1fe0ffff
+24610000
+600085e3
+680085e2
+205a7803
+680085e3
+d8c006be
+204076ec
+2020f8c0
+680085e2
+243a78ce
+20407854
+202078c0
+7005e200
+d8c005e6
+d8a00676
+204076f2
+202078c0
+da2006a6
+d8a00776
+204077be
+da200776
+d8a0072e
+204077a8
+da200676
+da40072e
+d8a0062e
+20407786
+da200776
+da40072e
+d8a0075e
+20407786
+da20068e
+da40075e
+d8a00646
+20207786
+e8c20000
+18002204
+18a08a03
+e0a08000
+1fecfe00
+18a08bfe
+1a20a3ff
+2422f8e8
+18a08a05
+c20078e5
+20600000
+18ebfe00
+99608c00
+e8c20000
+20600000
+18006010
+d96005e6
+1e008ff9
+204078f0
+98000400
+1e008ff0
+204078f0
+98408400
+1e008ffe
+204078f0
+1fee7e01
+98408400
+1e008ff1
+204078f0
+1fee7e00
+98408400
+1e0bfe00
+99608a00
+e0aa0000
+1e00e001
+2e01fe40
+2420f8f6
+20600000
+d8c008fe
+18007007
+e8c20000
+98005e00
+1f00f1ff
+2021790d
+20600000
+4776403d
+204078f4
+d8a006e6
+18007000
+1de27e00
+e0a20000
+1f00f001
+2f01fe08
+2420f916
+204074b9
+d9608700
+de0005e6
+18007240
+ee0a0000
+e9620000
+19609604
+1e00e004
+9840fe00
+18007007
+9de08400
+18007004
+1dee7e03
+98408400
+18007005
+1de27e00
+18007006
+9de2fe00
+18007004
+9de17e00
+18007006
+9de2fe00
+98408400
+18007007
+18425e00
+18007003
+1de27e00
+9840de00
+18007000
+1de27e00
+18007001
+9de10400
+9de1fe00
+18007002
+9de17e00
+98418400
+18007000
+1dee7e02
+9840fe00
+18007007
+9de0de00
+980efc00
+c200791f
+d8c006e6
+18007000
+e8c20000
+9de0de00
+1f00f001
+2f01fe08
+2420f948
+202074bd
+d8a00a3e
+18007007
+1de27e00
+e0a20000
+1f00f1ff
+20217950
+20600000
+d8a005e6
+18c08dfc
+1f262210
+e8c20000
+9842fe00
+e0a20000
+18c08df8
+c2007958
+1a227200
+18427e00
+e0a20000
+c200795f
+20600000
+20407967
+2040794e
+2020798d
+20407967
+2020798d
+d8c009de
+d8a005e6
+18007206
+20407a71
+d8c04642
+18007206
+20407a71
+d8c00a3e
+20407a70
+2040790b
+20407912
+d8c00a2e
+d8a005e6
+20207984
+d8c04642
+d8a005e6
+18007206
+20407a71
+d8c009de
+18007206
+20407a71
+d8c00a2e
+20407a70
+2040790b
+20407912
+d8c00a3e
+d8a005e6
+20407984
+2020798d
+20407a70
+58800000
+1fed7e00
+e0a20000
+18007205
+20407ec6
+58000280
+e0a20000
+20207912
+68020a3e
+da2003e8
+9a26fc00
+20407f86
+18077e00
+600209ba
+1807fe00
+da2003e8
+9a26fc00
+20407f86
+18077e00
+da2003e8
+9a2ffe00
+680a09ba
+9840fe00
+600209ba
+20600000
+70466400
+202079a2
+6800c662
+c081799e
+4776c03d
+58363636
+1fed0400
+18418436
+68010a7e
+1fe20c00
+18007204
+20407955
+2040790b
+20407912
+68010a80
+1fe20c00
+d8a005e6
+18007206
+20407a71
+68010a82
+1fe20c00
+18007206
+20407a71
+58800000
+e0a18000
+6800c664
+e0a08000
+18007e00
+e0a40000
+58000388
+e0a20000
+20407912
+2040794e
+d8c00a3e
+d8a00706
+20407ebd
+585c5c5c
+1fed0400
+1841845c
+68010a7e
+1fe20c00
+18007204
+20407955
+2040790b
+20407912
+d8c00726
+d8a005e6
+18007208
+20407a71
+58800000
+1fed7e00
+e0a20000
+20407ec5
+58000300
+e0a20000
+20407912
+2020794e
+58363636
+1fed0400
+18418436
+d8c00a1e
+18007206
+20407955
+2040790b
+20407912
+68010a8a
+1fe20c00
+d8a005e6
+20407a70
+68010a8c
+1fe20c00
+20407a70
+5862746c
+1fed7e00
+1fe1fe6b
+e0a20000
+d8c00733
+18007203
+20407a71
+58800000
+1fed7e00
+e0a20000
+18007e00
+e0a40000
+58000380
+e0a20000
+20407912
+2040794e
+d8c00a3e
+d8a00706
+20407ebd
+585c5c5c
+1fed0400
+1841845c
+d8c00a1e
+18007206
+20407955
+2040790b
+20407912
+d8c00726
+d8a005e6
+18007208
+20407a71
+58800000
+1fed7e00
+e0a20000
+20407ec5
+58000300
+e0a20000
+20407912
+2020794e
+6800c662
+c0817a1e
+4777403d
+58363636
+1fed0400
+18418436
+d8c00a1e
+18007206
+20407955
+2040790b
+20407912
+d8c00a3e
+d8a005e6
+20407a70
+d8c00a2e
+20407a70
+20207a33
+58000000
+6002468a
+20207a0f
+58000000
+6002468a
+20207a26
+6800c662
+c0817a21
+58363636
+1fed0400
+18418436
+d8c00a1e
+18007206
+20407955
+2040790b
+20407912
+d8c00a2e
+d8a005e6
+20407a70
+d8c00a3e
+20407a70
+58000000
+e0a40000
+e0a20000
+6802468a
+e0a20000
+18a20400
+70072680
+18420a00
+d8c00736
+20407a70
+20407912
+d8a005e6
+18007207
+20407ec6
+e0a20000
+580003f8
+e0a20000
+20407912
+2040794e
+d8c00a3e
+d8a00706
+20407ebd
+585c5c5c
+1fed0400
+1841845c
+d8c00a1e
+18007206
+20407955
+2040790b
+20407912
+d8c00726
+d8a005e6
+18007208
+20407a71
+58800000
+1fed7e00
+e0a20000
+20407ec5
+58000300
+e0a20000
+20407912
+2020794e
+7005e3c0
+680085e3
+207a0000
+1fe0ffff
+600085e3
+d8c006be
+204076ec
+2020fa5e
+d8c005e6
+d8a00676
+202076f2
+20407803
+680085e3
+1fe0ffff
+600085e3
+d8c006be
+204076ec
+20608000
+20207854
+18007204
+18c08dfc
+e8c20000
+e0a20000
+18c08df8
+c2007a72
+20600000
+4777c03d
+6800c4be
+203a5af0
+20405aec
+20407583
+20207a7d
+6800c4c3
+c1800000
+6800c4c0
+c1800000
+d8a045b2
+18000e0f
+204076a2
+180a7e00
+1fe37e00
+e0a10000
+d8a00766
+d8c045b2
+20407ebd
+d8a00646
+d8c0095e
+20407eb3
+d8a00686
+20407ed0
+70068601
+20407ac7
+7044c003
+20600000
+d8a045d2
+d8c006a6
+20407eb3
+7044c303
+7044c000
+20600000
+680089b9
+c1800000
+6800c4c0
+c1800000
+d8a00766
+d8c045b2
+20407ebd
+d8a00646
+d8c009be
+20407eb3
+d8a00686
+20407ed0
+70068601
+20407ac7
+7044c004
+20600000
+d8a009fe
+d8c006a6
+20407ebd
+7009b903
+7044c000
+20600000
+6800c4be
+207a0000
+6800c4c0
+207a0000
+1fe0fe80
+6000c4c0
+c3838000
+680105e3
+203a7ab9
+20207abf
+4778403e
+20407ad4
+6800c4c0
+c001fa93
+c0027aa9
+20600000
+20407ae6
+680105e3
+1fe0ffff
+600105e3
+d8c00766
+204076ec
+20608000
+20207b37
+4778c03e
+58000100
+600105e3
+680105e3
+207a0000
+1fe0ffff
+600105e3
+d8c00766
+204076ec
+2020faca
+d8c00646
+d8a00706
+20207eb2
+da200746
+d8a00846
+20407ba3
+da200846
+d8a007e6
+20407c79
+da200706
+da4007e6
+d8a006a6
+20407be1
+da200846
+da4007e6
+d8a00826
+20407be1
+da200726
+da400826
+d8a006c6
+20207be1
+da200746
+d8a00826
+20407c79
+da200826
+d8a00846
+20407c79
+da20093e
+da400846
+d8a00846
+20407be1
+da200706
+d8a00826
+20407c79
+d8c00826
+d8a007e6
+20407ebd
+da2007e6
+20407c80
+da200826
+da4007e6
+d8a00826
+20407c7d
+da200826
+da400846
+d8a00826
+20407c7d
+d8c00706
+d8a007e6
+20407ebd
+da200726
+d8a00846
+20407c79
+da2007e6
+20407c80
+da2007e6
+20407c80
+da2007e6
+da400846
+d8a007e6
+20407be1
+da200846
+d8a00806
+20407c79
+da200806
+20407c80
+da200806
+20407c80
+da200806
+20407c80
+d8c00726
+d8a00846
+20407ebd
+da200846
+20407c80
+da200846
+da400746
+d8a00746
+20407be1
+da200826
+d8a00846
+20407c79
+da200846
+da4007e6
+d8a00846
+20407c96
+da200846
+da4007e6
+d8a00706
+20407c96
+da2007e6
+da400706
+d8a00846
+20407c96
+da200846
+da400826
+d8a00846
+20407be1
+da200846
+da400806
+d8a00726
+20207c96
+da200686
+d8a00866
+20407c79
+da200706
+da400866
+d8a00806
+20407be1
+da200686
+da400866
+d8a00866
+20407be1
+da200726
+da400866
+d8a007e6
+20407be1
+da200746
+d8a00866
+20407c79
+da200646
+da400866
+d8a00826
+20407be1
+da200746
+da400866
+d8a00866
+20407be1
+da200666
+da400866
+d8a00846
+20407be1
+da400806
+da200826
+d8a00866
+20407c96
+da200806
+da400826
+d8a00806
+20407c7d
+da4007e6
+da200846
+d8a00826
+20407c96
+da2007e6
+da400846
+d8a007e6
+20407c7d
+da2007e6
+da400866
+d8a007e6
+20407be1
+da200746
+da400686
+d8a00846
+20407be1
+da200846
+da400866
+d8a00746
+20407be1
+da200866
+d8a00866
+20407c79
+da200866
+da400806
+d8a00846
+20407be1
+da200866
+da4007e6
+d8a007e6
+20407be1
+da200826
+d8a00706
+20407c79
+da200706
+da400846
+d8a00706
+20407c96
+d8c00706
+d8a00866
+20407ebd
+da200866
+20407c80
+da200846
+da400866
+d8a00846
+20407c96
+da200846
+da400826
+d8a00826
+20407be1
+da200826
+da4007e6
+d8a00726
+20407c96
+da200726
+da40091e
+d8a00726
+18002600
+68008726
+2feffe00
+2040fc7b
+1a626000
+da200726
+20407cab
+68008745
+2e0ffe00
+7920fe07
+60008745
+20600000
+18a21600
+d8a00806
+20407ed0
+18007e00
+60020826
+70080601
+d8a00786
+20407ed2
+d8c0091e
+d8a007c6
+20407ebd
+1a220c00
+d8a007e6
+20407ebd
+d8c007e6
+20407cb5
+203a7bda
+da2007e6
+da400806
+20407cb8
+da2007c6
+da400786
+20407cb8
+da2007e6
+da4007c6
+20407cb1
+20217bcc
+da2007c6
+da4007e6
+1a220a00
+20407ca9
+da200806
+da400786
+1a420a00
+20407c7b
+ea208000
+9a60a600
+ea408000
+9a60fe00
+e2408000
+20207bb1
+da2007e6
+da4007c6
+1a220a00
+20407ca9
+da200786
+da400806
+1a420a00
+20407c7b
+ea208000
+9a60a600
+ea408000
+9a60fe00
+e2408000
+20207bb1
+da200786
+19620a00
+20407c0a
+da20091e
+19622400
+19620a00
+20207c96
+18a21600
+18007000
+d8a00786
+20407ed2
+d8a00ad2
+20407ed2
+1a220c00
+700ad200
+58000000
+20407c73
+1a420c00
+20407c77
+18000e00
+d8a00786
+d8400ad2
+18e22400
+1a4bfe00
+9840a400
+18000400
+18002600
+e8a20000
+98002200
+ea420000
+1a627000
+9deffe00
+9a20fe00
+9840fe00
+e0a20000
+1fef0400
+1a60a601
+2a61fe08
+2420fbf5
+18427e00
+e0a20000
+18a08be0
+18e08e01
+28e1fe08
+2420fbef
+da200786
+19620a00
+20207c0a
+4779403e
+18a21600
+1a226000
+da4007c6
+1a420a00
+20407ecd
+e0a40000
+1a208c2c
+20407eb9
+20407eb5
+1a422200
+20407c80
+da4007c6
+1e022200
+19620a00
+20407c7d
+da4007c6
+1a420a00
+20407ecd
+e0a40000
+1e008c30
+20407ebf
+20407ecd
+1a422200
+20407c80
+da4007c6
+19622200
+1a220a00
+20407c7d
+da4007c6
+1a420a00
+1e008c20
+20407eb5
+20407ecd
+e0a40000
+1e008c38
+20407eb9
+19622200
+1a220a00
+20407c7d
+da4007c6
+1a420a00
+1e008c24
+20407eb5
+1e008c34
+20407eb5
+1e008c34
+20407eb6
+1e008c20
+20407eb6
+19622200
+1a220a00
+20407c7d
+da4007c6
+1a420a00
+1e008c2c
+20407eb5
+20407ecd
+e0a40000
+1e008c20
+20407eb6
+1e008c28
+20407eb6
+19622200
+1a220a00
+20407c96
+da4007c6
+1a420a00
+1e008c30
+20407eb9
+20407eb9
+18007e00
+e0a40000
+1e008c24
+20407eb6
+1e008c2c
+20407eb6
+19622200
+1a220a00
+20407c96
+da4007c6
+1a420a00
+1e008c34
+20407eb5
+1e008c20
+20407eb5
+20407ecd
+1e008c30
+20407eb6
+19622200
+1a220a00
+20407c96
+da4007c6
+1a420a00
+1e008c38
+20407eb9
+20407ecd
+1e008c24
+20407eb5
+20407ecd
+1e008c34
+20407eb6
+19622200
+1a220a00
+20207c96
+18007220
+d8a00ad2
+98a08a00
+20207f01
+18007208
+20207781
+1a222400
+20207be1
+18007208
+20207712
+20407c7b
+18a22200
+20207c81
+20407cae
+2a6ffe00
+2020fc8a
+da40091e
+1a222600
+1a20a3e0
+20407cb1
+24610000
+1a622200
+20207c92
+20407c92
+1a222600
+1a20a3e0
+da40091e
+20407cb1
+24610000
+1a622200
+20207c92
+1a20a3e0
+da40091e
+1a220a00
+20207ca9
+20407ca9
+2020fca0
+18a0a3e0
+da40091e
+20407cb1
+24610000
+da40091e
+18a0a3e0
+1a220a00
+20207ca9
+18a0a3e0
+da40091e
+1a220a00
+20407c7b
+20608000
+18a0a3e0
+da40091e
+1a220a00
+20207c7b
+18007208
+20207720
+18007208
+1a20a21c
+2020772f
+18007208
+18002600
+2020773d
+18007208
+1a20a21c
+1a40a41c
+20207707
+e8c40000
+247a0000
+202076f5
+1a226000
+1e022200
+ea208000
+2feffe00
+20608000
+20407cab
+ea408000
+2fec0000
+2020fcc8
+da20091e
+1a420a00
+20407c7b
+ea408000
+9a60fe00
+e2408000
+1a40a5e0
+1a40a220
+18007209
+2040772f
+20207cb9
+20402c65
+20758000
+20407cd3
+20407d75
+20207d08
+20407d29
+20207d64
+6800c686
+c17f8000
+98000400
+2040680e
+6808c686
+20406825
+20000064
+6808c686
+204067fb
+20207cdd
+4779c03e
+6800c686
+c17f8000
+1fe20400
+2040681d
+2420fcef
+20407cf9
+68014682
+79207e0c
+60014682
+6800c679
+c1000000
+70467900
+6800c685
+6000c678
+20407d00
+700a992c
+20207d86
+68014682
+793ffe0c
+60014682
+6800c679
+c1008000
+70467901
+70467800
+20407d02
+700a992d
+20207d86
+6800c678
+207a0000
+1fe0ffff
+6000c678
+247a0000
+700a9910
+20207d86
+d8e00007
+20202c32
+d8e00007
+20202c36
+6801421b
+1a2fa40b
+9a40a400
+20600000
+6800c21a
+207a0000
+1fe27200
+6801421b
+1fe22400
+1a40a602
+ea688000
+2040680e
+20407d32
+1a40a40b
+c2007d0d
+20600000
+20407d04
+58000002
+e2408000
+20407d5e
+20207d35
+20407d04
+58000003
+e2408000
+20407d5e
+20207d32
+20407d04
+58000001
+e2408000
+580000ff
+e0a08000
+20207d32
+20407d04
+df20000b
+1a620c00
+1a420a00
+20207ef4
+6800c21a
+207a0000
+da200000
+20407d38
+1a20a201
+6800c21a
+9a267c00
+20628000
+20207d2c
+1a40a602
+ea688000
+20206825
+1a40a602
+ea688000
+20206829
+1a208e0b
+20407f16
+247a0000
+20407d04
+ea408000
+c0017d35
+c001fd32
+c0007d32
+c002fd4c
+20407d35
+1a40a607
+20407e7c
+ea610000
+20407f9c
+20407e8c
+58000005
+e2408000
+1a40a603
+ea610000
+20207d5c
+20407d32
+1a40a609
+20407e7c
+ea610000
+20407f9c
+20407e8c
+1a40a601
+ea608000
+c07ffd58
+1fe0ffff
+e2608000
+203a7d19
+58000004
+e2408000
+1a40a605
+ea610000
+1a208e0b
+20207f08
+58000000
+20207d5c
+58001000
+1ff07e00
+9a40a400
+20600000
+477a403e
+da200000
+680a467a
+1c422400
+1a427e00
+98467c00
+24417d60
+1a427e00
+184084a0
+184084a0
+98467c00
+24217d78
+1a20a201
+1a217e0f
+243a7d6b
+da200000
+20407d7f
+1c427e00
+6002467a
+20600000
+477ac03e
+1a227e00
+207a0000
+18408560
+18408560
+793f841c
+600a467a
+2020335f
+70466601
+6800c667
+243a7d81
+20600000
+70466600
+20600000
+477b403e
+20407d80
+1a227e00
+60020a91
+da204668
+20407fb8
+68020a91
+1fe22200
+20207d84
+477bc03e
+20407d80
+1a227e00
+60020a91
+da204670
+20407fb8
+68020a91
+1fe22200
+20207d84
+58000000
+60044670
+60044668
+20600000
+477c403f
+6800c1ce
+247a0000
+da204670
+20407fd0
+207a0000
+700a9000
+20407da7
+68008a90
+203a7d9c
+20600000
+20407d80
+da204670
+20407fc4
+1fe20400
+20407d84
+477cc03f
+18427e00
+207a0000
+c000fddd
+c0017de2
+c001fde8
+c003fded
+c0047dee
+c004fdef
+c005fdf2
+c0067df3
+c006fdf4
+c0077dfa
+c007fdff
+c0087e05
+c009fe0f
+c00a7e11
+c00afe13
+c00b7e15
+c00bfe18
+c00c7e1a
+c00cfe1d
+c00dfe25
+c00f7e2f
+60008a99
+477d403f
+204062bc
+243a7ddb
+68008a99
+c584fdd6
+c0027dea
+c002cd17
+c0034d26
+c0057df0
+c008fe0a
+c0097e0e
+c00efe26
+c00fe7cc
+c01067d0
+c010fe31
+c012e70b
+20600000
+60008a99
+20402252
+2022fddb
+2040225a
+24628000
+700a9001
+20207d8f
+68014682
+79207e06
+60014682
+70409303
+20600000
+70468000
+70409300
+68014682
+793ffe06
+60014682
+20600000
+7041ce05
+20600000
+70007c07
+7004ca13
+20600000
+20600000
+20600000
+20600000
+7004d402
+20204d0a
+20600000
+20600000
+70436e01
+70448400
+68014682
+79207e0b
+60014682
+20600000
+68014682
+793ffe0b
+60014682
+70436e00
+20600000
+70436e01
+70448401
+68014682
+79207e0b
+60014682
+20600000
+68014682
+793ffe0b
+60014682
+70436e00
+20600000
+58000014
+6001046d
+600144ba
+20205c92
+20205abf
+da200000
+20207d19
+da200000
+20207d14
+da200000
+20207d1e
+70436901
+7041ce1b
+20600000
+70436901
+20600000
+70436900
+7041ce00
+20600000
+680141eb
+20407f9c
+6800c686
+c07ffe23
+1fe20400
+204067fb
+20407d98
+20202b1f
+20205b02
+70007c34
+79200003
+24748000
+70455b00
+70007c13
+6800816d
+793ffe02
+6000816d
+20600000
+18000e03
+20207f07
+204062f8
+70007d41
+20205f9d
+6800c682
+c4060000
+c4038000
+20207e2f
+68014218
+1fe08a02
+58000000
+e0a18000
+20600000
+20407fe9
+20407e69
+207a0000
+68014218
+1fe0a402
+ea488000
+18408401
+e2488000
+efe88000
+18427200
+1fe0a404
+ea408000
+984ffe00
+98c08a00
+1a220c00
+20407f01
+20407e6d
+1fe0ffff
+ea488000
+18408401
+98410400
+e2488000
+20207fe7
+20407fe9
+20407e65
+207a0000
+68014218
+1fe0a402
+ea488000
+184085ff
+e2488000
+efe88000
+18427200
+1fe0a403
+ea408000
+984ffe00
+98c08c00
+18c08c01
+1a220a00
+20207e4c
+68014218
+1fe08c02
+e8c08000
+20600000
+20407e6d
+e8c88000
+98467e00
+20600000
+68014218
+1fe08c01
+e8c08000
+20600000
+1f267c00
+20628000
+1fe37e00
+c2007e73
+20600000
+18007e01
+1f267c00
+20628000
+1fe3fe00
+c2007e79
+20600000
+18a27e00
+60010abb
+600c0aa2
+19627e00
+60020aaa
+20407e85
+18c27e00
+60010ab9
+20600000
+1a227e00
+60020aae
+1a427e00
+60020ab2
+1a627e00
+60018ab6
+20600000
+680c0aa2
+68020aaa
+98001600
+20407e95
+68010abb
+98000a00
+68010ab9
+98000c00
+20600000
+68020aae
+98002200
+68020ab2
+98002400
+68018ab6
+98002600
+20600000
+68010abb
+1fe20a00
+20600000
+68010ab9
+1fe20c00
+20600000
+18a27e00
+60010abb
+20600000
+18c27e00
+60010ab9
+20600000
+18a27e00
+60010a97
+18c27e00
+60010a95
+20600000
+68010a97
+1fe20a00
+68010a95
+1fe20c00
+20600000
+20407ebd
+20407ebd
+20207ebd
+20407eb9
+e8c20000
+e0a20000
+20600000
+e8c40000
+e0a40000
+20600000
+20407ebf
+20407eb9
+20407eb9
+20407eb9
+20207eb9
+df20000a
+20002ee0
+c2007ec2
+20600000
+18007203
+18007e00
+e0a40000
+c2007ec7
+20600000
+18007e00
+e0a40000
+20600000
+18007e00
+e0a20000
+20600000
+18007204
+20207ec6
+18007208
+20207ec6
+1f227e00
+207a0000
+58000000
+e0a08000
+c2007ed7
+20600000
+df200020
+d8a00ac2
+20207ed4
+ea620000
+ea2a0000
+9842fe00
+e0a20000
+1a20a204
+1a60a604
+c2007edd
+20600000
+477dc03f
+1f227e00
+1fe67c01
+20610000
+9a20a400
+1a40a5ff
+1f237200
+ea288000
+ea408000
+e2208000
+e2488000
+1a40a5ff
+1a20a201
+c2007eec
+20600000
+1f227e00
+207a0000
+1f20f3f8
+20417eb9
+20628000
+20217ef6
+1f20f208
+1f20f3fc
+20417eb6
+20628000
+20217efb
+1f20f204
+20207f01
+1f227e00
+207a0000
+e8c08000
+e0a08000
+c2007f03
+20600000
+58000000
+1c430400
+600a4094
+d8a0419d
+98000400
+18e3fe00
+98a08a00
+e0a90000
+477e403f
+20600000
+d9600800
+19701600
+9960fe00
+20600000
+d8e00000
+477ec03f
+680a4094
+1c437e00
+60024094
+98467c00
+24417f11
+98461600
+19620400
+d8c0419d
+18c20a00
+df200010
+e8c10000
+98467e00
+20217f25
+18007e00
+e0a10000
+c2007f21
+d8c0419d
+18e3fe00
+98c08c00
+e8c10000
+20600000
+98408400
+18427200
+58000ea6
+9f267e00
+20610000
+1fe67e00
+18510400
+18408401
+18500400
+98418400
+20600000
+20407f39
+20207f43
+78547c00
+98467e00
+20217f3e
+78347c00
+1fe67e00
+c4078000
+d85f0ea6
+9840fe00
+793ffe40
+20600000
+98000c00
+1ff17e00
+d8400ea6
+984ffe00
+98c0fe00
+20600000
+1fed7e00
+1ff27e00
+6809c16f
+9846fc00
+20407f86
+18078400
+20600000
+d8400ea6
+9846fc00
+20407f86
+1807fe00
+1ff07e00
+18070400
+98418400
+20600000
+d8400000
+18422600
+e8608000
+20407f64
+1a620400
+20407f95
+da40000a
+9a4ffe00
+9840fe00
+1fe20400
+c2007f59
+20600000
+d840003a
+98467c00
+24217f6d
+d8400061
+98467c00
+20217f70
+d8400037
+98467e00
+20600000
+d8400030
+98467e00
+20600000
+d8400057
+98467e00
+20600000
+18426000
+580001ff
+18002400
+1fe92200
+1a232200
+9a22a200
+2a2ffe00
+7920fe09
+18430400
+2feffe00
+79208407
+1fe37e00
+1a40a401
+2a400e00
+2420ff76
+e0a88000
+c2007f76
+1e020400
+20600000
+207a8000
+20207f86
+ea208000
+ea488000
+98467c00
+24628000
+1a20a201
+1a40a401
+c2007f88
+18007c00
+20600000
+98467c00
+24610000
+18427e00
+20600000
+9840fe00
+98460400
+98467e00
+20600000
+df200200
+d8a04000
+20207ec6
+207a0000
+1fe27a00
+6811010e
+243a7f9e
+20600000
+70820301
+20600000
+60110205
+68108203
+79207e04
+60108203
+20600000
+60110207
+68108203
+79207e06
+60108203
+20600000
+60110205
+70820330
+20600000
+68108043
+793ffe04
+60108043
+20600000
+6811010e
+d8400200
+98467c00
+20600000
+477f403f
+ea2c0000
+18417eff
+243a7fbe
+184cfe00
+e2240000
+1a20a207
+ea208000
+243a2a8c
+68008a99
+e2208000
+20600000
+477fc03f
+df200008
+ea240000
+207a0000
+ea208000
+243a7fcd
+1a20a201
+c2007fc8
+20202a8c
+d8400000
+e2288000
+20600000
+ea240000
+20600000
+ea208000
+20600000
+ea210000
+20600000
+d8400000
+68008006
+c2007fd7
+18408401
+c2007fd7
+18427e00
+20600000
+98467c00
+24610000
+18427e00
+20600000
+18007dff
+20600000
+18007c01
+20600000
+18007c00
+20600000
+78347c00
+20600000
+78547c00
+20600000
+78367c00
+20600000
+78567c00
+20600000
+58000001
+20600000
+58000000
+20600000
+1f227e00
+207a0000
+18c27e00
+9f20fe00
+1fe0ffff
+1fe20c00
+e8c08000
+18c08dfe
+e0a08000
+c2007ff9
+20600000
+00000000
+0000a447
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/sched.rom
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/sched.rom	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/output/sched.rom	(working copy)
@@ -0,0 +1,965 @@
+
+00a1:00 00 00 00 00 00 00 00
+
+
+0c6c:ff
+
+
+
+
+
+
+
+
+
+
+
+
+119e:00 00 00 00 00 00 00 00 00 00
+4000:07
+4010:20
+06
+00 00 
+02
+00 
+06
+00 
+10
+06
+00 00 
+48
+1c
+4027:80
+4031:10
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+4091:01
+40
+40a0:20 51 17 01 20 20
+40ad:12 00
+00 02
+12 00
+00 02
+00 00 
+20 00
+00 40
+20 00
+00 00 
+80 04
+00 08
+
+8f 47
+
+
+
+
+40d1:01
+
+4172:20
+00 00 
+8f 1b ce	
+00 0a 0b ef 07
+41e3:
+0e 00 
+01 00 
+02
+
+
+4203:90 1f
+00 00 
+06
+4211:80
+00 00 
+ff
+421a:01
+
+
+13 47
+423a:14
+4241:00 84
+
+
+436f:1f
+
+
+02 01 05
+
+
+03 03 12 18
+
+
+03 19 c2 03
+
+438f:1f
+
+
+'\09BT5.0 Mouse
+
+
+
+43af:
+'BT5.0 Mouse
+
+
+446f:19 00
+448d:07 
+
+4496:
+07 00 
+07 00 
+20 00 
+2c 01 
+
+
+44a0:8e b1 3a 0e 8e ed
+
+44e5:50
+
+44fa:22 00
+
+
+4515:
+'BT3.0 Mouse
+455a:0a
+465a:01
+
+
+
+
+03 00 04
+4662:03
+4684:01
+1e
+
+ff
+08 07
+46a5:07
+00 00 
+50 00
+70 17 
+
+
+46d2:02 
+00 00 
+
+
+
+
+
+
+
+
+
+12
+
+
+
+
+
+
+
+
+41
+
+46db:01
+ff
+00 00 00 
+00
+02 
+06 
+08 
+04 
+ff
+ff 
+ff 
+1b 
+1c 
+ff 
+ff 
+ff 
+ff 
+ff 
+ff 
+05 
+ff 
+ff 
+03 
+ff 
+00 
+00 
+ff 
+ff 
+
+4703:02 
+
+
+
+
+
+
+4720:
+01
+ff
+ff ff ff ff ff ff
+
+
+
+
+
+
+
+
+
+477f:
+00
+01
+02
+03
+
+
+
+
+
+
+
+
+
+
+
+
+478e:03
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+4b ba
+55 d0
+56 e0
+57 88
+58 6c
+59 10
+ff
+47c5:20
+
+
+
+25 00 02 03 28 01 12 
+26 00 02 4d 2a 07 00 00 00 00 00 00 00 
+27 00 02 02 29 02 00 00
+28 00 02 08 29 02 11 01
+29 00 02 03 28 01 0e 
+2a 00 02 4d 2a 07 00 00 00 00 00 00 00
+2b 00 02 08 29 02 11 02
+
+  
+
+4b10:
+
+06 ff 06 00 03 00 80
+
+'\09BT5.0 Mouse
+
+4bb6:01        
+00 
+c0 12     
+4bc1:20 15 10 05
+ff
+00 13 2c 42
+06 15 36 48
+0f 1a 3a 4c
+11 23 31 4d
+4bda:19		
+19		
+1c	
+4be4:00 48 60
+
+4bfa:04
+01
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/24g.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/24g.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/24g.prog	(working copy)
@@ -0,0 +1,2647 @@
+ifdef COMPILE_24G
+
+g24_dispatch:
+	bpatch patch16_2,mem_patch16
+	call g24_head_ptr2regc
+	add regc,offset_24g_mode,regb
+	ifetch 1,regb
+	//fetch 1,mem_24g_mode
+	rtneq disable_24g
+	beq tx_24g,g24_transmit_process
+	beq rx_24g,g24_receive_process
+	rtn
+
+g24_head_ptr2regc:
+	fetcht 2,mem_24g_head_ptr
+	copy temp,regc
+	rtn
+
+g24_receive_process_init:
+	call g24_receive_init
+	branch g24_mode_switch_init
+
+g24_receive_process:
+	call g24_mode_switch
+	call g24_dongle_work_mode_auto
+	call g24_dongle_bind_mode_auto
+	branch g24_dongle_search_mode_auto
+	
+
+g24_pair_init:
+	//jam 0,mem_24g_pid
+	//jam G24_PAIR_CH,mem_24g_ch
+	call g24_set0_mem_pid
+	setarg G24_PAIR_CH
+	call g24_store_mem_ch
+	call g24_store_mem_pair_txpower
+	//fetch 4,mem_24g_paring_addr
+	//store 4,mem_24g_addr
+	add regc,offset_24g_paring_addr,rega
+	ifetch 4,rega
+	branch g24_store_mem_addr
+		
+g24_ch:
+	call g24_head_ptr2regc
+	add regc,offset_24g_current_ch_number,regb
+	ifetcht 1,regb
+	//fetcht 1,mem_24g_current_ch_number
+	call g24_ch_temp_incre_size4 //map size =4
+	add regc,offset_24g_current_ch_number,contw
+	//storet 1,mem_24g_current_ch_number
+	branch g24_contw_istoret_1byte
+
+g24_ch_temp_incre_size4:
+	call g24_ch_calc
+	increase 1,temp
+	and_into 3,temp
+	rtn
+
+g24_ch_calc:
+	add regc,offset_24g_addr,regb
+	ifetch 1,regb
+	//fetch 1,mem_24g_addr
+	and_into 0x03,pdata
+	mul32 pdata,4,rega			//24addr low bit0 bit1 ,00-map1,01-map2,10-map3,11-map4
+	add regc,offset_24g_ch_map1,pdata
+	//setarg mem_24g_ch_map1
+	iadd rega,pdata
+	iadd temp,contr
+	ifetch 1,contr
+	//store 1,mem_24g_ch
+	branch g24_store_mem_ch
+
+g24_set_device_addr:
+	call g24_store_mem_tx_power_temp
+	call otp_enable_chgpump
+	setarg 0x7e2
+	arg mem_temp,rega
+	arg 4,temp
+	call otpd_read_data
+	call otp_disable_chgpump
+	fetch 4,mem_temp	//adc data from otp
+	call g24_store_mem_device_addr
+	//store 4,mem_24g_device_addr	
+	nrtn blank
+	fetch 4,mem_lap
+	//store 4,mem_24g_device_addr
+	branch g24_store_mem_device_addr
+
+g24_transmit_rf_sta_init:
+	call g24_set1_mem_rf_last_sta
+	//jam 1,mem_24g_rf_last_sta
+	setarg 0
+	call g24_store_mem_sync_cnt
+	//jam 0,mem_24g_sync_cnt
+g24_transmit_rf_ctrl_clear:	
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	and_into bits_data,pdata
+	//store 1,mem_24g_data_type
+	branch g24_store_mem_data_type
+	
+g24_hop_ch_enable:
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	set1 bit_hop,pdata
+	call g24_store_mem_data_type
+	//store 1,mem_24g_data_type
+	//store 1,mem_24g_txpayload
+	branch g24_store_mem_txpayload
+	
+g24_transmit_hop_pac_fail:
+	call g24_fetch_mem_rf_work_stage
+	//fetch 1,mem_24g_rf_work_stage
+	beq 1,g24_transmit_hop_pac_fail_wo_hop
+	beq 2,g24_transmit_hop_pac_fail_hop_stage2
+	rtn
+	
+g24_transmit_hop_pac_fail_wo_hop:
+	call g24_set2_mem_sync_cnt
+	//jam 2,mem_24g_sync_cnt
+g24_transmit_hop_pac_fail_stage1:
+	add regc,offset_24g_hop_pac_retry,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_hop_pac_retry
+	call g24_store_mem_rf_last_sta
+	//jam 0,mem_24g_rf_last_sta
+	branch g24_transmit_rf_ctrl_clear
+
+g24_transmit_hop_pac_fail_hop_stage2:
+	call g24_set0_mem_rf_hop_ch
+	//jam 0,mem_24g_rf_hop_ch
+	branch g24_transmit_hop_pac_fail_stage1
+
+g24_transmit_pac_fail_hop_stage3:
+	add regc,offset_24g_txfail_cnt,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_txfail_cnt
+	increase 1,pdata
+	add regc,offset_24g_txfail_cnt,contw
+	istore 1,contw
+	//store 1,mem_24g_txfail_cnt
+	beq 0x20,g24_tx_attempt_fail
+	call g24_fetch_mem_rf_hop_ch
+	//fetch 1,mem_24g_rf_hop_ch
+	beq 1,g24_rf_hop_fastly
+	setarg 1
+	call g24_store_mem_rf_hop_ch
+	//jam 1,mem_24g_rf_hop_ch
+g24_rf_hop_attemp_again:
+	call g24_fetch_mem_rf_hop_ch
+	//fetch 1,mem_24g_rf_hop_ch
+	bne 1,g24_transmit_rf_ctrl_clear
+g24_rf_hop_fastly:
+	add regc,offset_24g_hop_fastly_cnt,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_hop_fastly_cnt
+	increase 1,pdata
+	call g24_store_mem_hop_fastly_cnt
+	//store 1,mem_24g_hop_fastly_cnt
+	beq 4,g24_rf_hop_fastly_exit
+	call g24_ch
+	call g24_set2_mem_max_retry
+	//jam 2,mem_24g_max_retry
+	branch g24_transmit_packet
+
+g24_rf_hop_fastly_exit:
+	call g24_set0_mem_hop_fastly_cnt
+	//jam 0,mem_24g_hop_fastly_cnt
+	branch g24_transmit_rf_ctrl_clear
+
+g24_set0_mem_hop_fastly_cnt:
+	setarg 0
+g24_store_mem_hop_fastly_cnt:
+	add regc,offset_24g_hop_fastly_cnt,contw
+	branch g24_contw_istore_1byte
+
+g24_transmit_hop_pac_succ_wo_hop:
+	call g24_set2_mem_sync_cnt
+	//jam 2,mem_24g_sync_cnt
+g24_transmit_hop_pac_succ:
+	call g24_set0_mem_rf_hop_ch
+	//jam 0,mem_24g_rf_hop_ch
+	call g24_set1_mem_rf_last_sta
+	//jam 1,mem_24g_rf_last_sta
+	branch g24_transmit_rf_ctrl_clear
+
+g24_transmit_succ_rf_config:
+	call g24_fetch_mem_rf_work_stage
+	//fetch 1,mem_24g_rf_work_stage
+	beq 3,g24_transmit_hop_pac_succ
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	isolate0 bit_hop,pdata
+	branch g24_transmit_rf_sta_init,true
+	call g24_fetch_mem_rf_work_stage
+	//fetch 1,mem_24g_rf_work_stage
+	beq 1,g24_transmit_hop_pac_succ_wo_hop
+	beq 2,g24_transmit_hop_pac_succ
+	rtn
+
+g24_rf_sta_check:
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call g24_rf_laststa_synccnt_check
+	ncall g24_rf_sync_cnt_check,user2
+	rtn
+
+g24_rf_laststa_synccnt_check:
+	disable user2
+	add regc,offset_24g_rf_last_sta,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rf_last_sta
+	rtnne 1
+	add regc,offset_24g_sync_cnt,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_sync_cnt
+	rtnne 0
+	setarg 1
+	call g24_store_mem_rf_work_stage
+	//jam 1,mem_24g_rf_work_stage
+	call g24_set4_mem_max_retry
+	//jam 4,mem_24g_max_retry
+	branch enable_user2
+
+g24_rf_sync_cnt_check:
+	add regc,offset_24g_sync_cnt,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_sync_cnt
+	branch g24_rf_hop_attemp,blank
+	increase -1,pdata
+	call g24_store_mem_sync_cnt
+	//store 1,mem_24g_sync_cnt
+	setarg 2
+	call g24_store_mem_rf_work_stage
+	//jam 2,mem_24g_rf_work_stage
+	call g24_ch
+	//jam 4,mem_24g_max_retry
+	branch g24_set4_mem_max_retry
+
+g24_store_mem_rf_work_stage:
+	add regc,offset_24g_rf_work_stage,contw
+	branch g24_contw_istore_1byte
+
+
+g24_rf_hop_attemp:
+	setarg 3
+	call g24_store_mem_rf_work_stage
+	//jam 3,mem_24g_rf_work_stage
+	call g24_fetch_mem_rf_hop_ch
+	//fetch 1,mem_24g_rf_hop_ch
+	nbranch g24_rf_hop_attemp_again,blank
+	call g24_ch
+	//jam 2,mem_24g_max_retry
+g24_set2_mem_max_retry:	
+	setarg 2
+	branch g24_store_mem_max_retry
+
+g24_transmit_process:
+	rtnmark0 mark_24g
+	set1 mark_24g_conext,mark
+	bpatch patch16_3,mem_patch16
+	add regc,offset_24g_tx_without_int,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_tx_without_int
+	beq 1,g24_transmit_without_int
+	call g24_timer_check
+	nbranch g24_transmit_exit,user
+	call g24_interval_calibrate
+g24_transmit_without_int:
+	add regc,offset_24g_tx_without_int,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_tx_without_int
+	call g24_txdata_prep
+	nbranch g24_enter_lpm,user
+	call g24_rf_sta_check
+g24_transmit_start:
+	call g24_transmit_packet
+	call g24_power_ctrl
+g24_transmit_exit:
+	set0 mark_24g_conext,mark
+	rtn
+
+g24_timer_timeout:
+	rtn zero
+	set1 28,pdata
+	rtn
+
+g24_interval_calibrate:
+	add regc,offset_24g_pac_index,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_pac_index
+	increase 1,pdata
+	add regc,offset_24g_pac_index,contw
+	istore 1,contw
+	//store 1,mem_24g_pac_index
+	beq 4,g24_interval_max
+	beq 5,g24_interval_min
+	rtn
+g24_interval_max:
+	add regc,offset_24g_interval_max,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_interval_max
+g24_interval_update:	
+	//store 1,mem_24g_interval
+	add regc,offset_24g_interval,contw
+	branch g24_contw_istore_1byte
+
+g24_interval_min:
+	add regc,offset_24g_pac_index,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_pac_index
+	add regc,offset_24g_interval_min,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_interval_min
+	branch g24_interval_update
+
+g24_txdata_prep:
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,g24_pairing_sm
+	bpatch patch16_4,mem_patch16
+	call g24_package_data
+	nbranch g24_txdata_last_pac,user
+	call g24_transmit_prep
+	call g24_power_ctrl_pac_incrs
+g24_txdata_enable_tx:
+	//jam ENSURE_ON_24G,mem_24g_ensure
+	setarg ENSURE_ON_24G
+g24_store_mem_ensure:	
+	add regc,offset_24g_ensure,contw
+	branch g24_contw_istore_1byte
+
+g24_txdata_last_pac:
+	add regc,offset_24g_ensure,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_ensure
+	beq ENSURE_ON_24G,enable_user
+	rtn
+
+g24_package_data:
+	//rega:length,regb:contr
+	add regc,offset_24g_cb_data,temp
+	ifetch 2,temp
+	//fetch 2,mem_24g_cb_data
+	call callback_func
+	nrtn user
+	copy rega,pdata
+	store 1,mem_rega
+	add regc,offset_24g_abort_pac,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_abort_pac
+	call g24_transmit_rf_ctrl_clear
+	store 1,mem_24g_common_temp
+	fetch 1,mem_rega
+	copy pdata,rega
+	add rega,1,temp
+	arg mem_24g_common_temp+1,contw
+	copy rega,loopcnt
+	copy regb,contr
+	call memcpy
+	arg mem_24g_common_temp,rega
+g24_put_data_in_buff:
+	rtnmark0 mark_24g_conext
+	add regc,offset_24g_datalen,contw
+	istoret 1,contw
+	//storet 1,mem_24g_datalen
+	copy temp,loopcnt
+	add regc,offset_24g_txbuf,contw
+	//arg mem_24g_txbuf,contw
+	copy rega,contr
+	branch memcpy
+
+g24_transmit_prep:
+// total length
+	add regc,offset_24g_datalen,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_datalen
+	increase 2,pdata
+	add regc,offset_24g_txlen,contw
+	istore 1,contw
+	//store 1,mem_24g_txlen
+// data type
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	call g24_store_mem_txpayload
+	//store 1,mem_24g_txpayload
+//prepare 5bit payload length, 2bit PID, 1bit NO_ACK
+	add regc,offset_24g_datalen,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_datalen
+	lshift3 pdata,pdata
+	add regc,offset_24g_pid,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_pid
+	and temp,0x03,temp
+	lshift temp,temp
+	ior temp,pdata
+	add regc,offset_24g_no_ack,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_no_ack
+	iadd temp,pdata
+	istore 1,contw
+//prepare payload data
+	add regc,offset_24g_datalen,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_datalen
+	iforce loopcnt
+	add regc,offset_24g_txbuf,contr
+	//arg mem_24g_txbuf,contr
+	branch memcpy
+
+g24_send_abort_packet:
+	call g24_set1_mem_abort_pac
+	//jam 1,mem_24g_abort_pac
+	call g24_set0_mem_rf_hop_ch
+	//jam 0,mem_24g_rf_hop_ch
+	call g24_power_ctrl_reinit
+	call g24_transmit_rf_ctrl_clear
+	store 1,mem_24g_common_temp
+	call g24_put_data_in_buff_pre
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	set1 bit_abort,pdata
+	call g24_store_mem_data_type
+	//store 1,mem_24g_data_type
+	call g24_transmit_prep
+	call g24_txdata_enable_tx
+	branch g24_transmit_start
+
+g24_put_data_in_buff_pre:
+	store 1,mem_24g_common_temp+1
+	call g24_fetch_mem_device_addr
+	//fetch 4,mem_24g_device_addr
+	store 4,mem_24g_common_temp+2
+	arg 6,temp
+	arg mem_24g_common_temp,rega
+	branch g24_put_data_in_buff
+
+g24_enter_lpm:
+	add regc,offset_24g_abort_pac,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_abort_pac
+	branch g24_send_abort_packet,blank
+g24_enter_lpm_prepare:
+ 	// some thing need to do and do not enter 24g long sleep
+	add regc,offset_24g_cb_lpm_prepare,rega
+	ifetch 2,rega
+	//fetch 2,mem_24g_cb_lpm_prepare
+	branch callback_func
+
+g24_lpm_long_sleep:
+	call g24_head_ptr2regc
+	//fetch 8,mem_24g_enter_hibernate
+	call lpo_calibration
+	fetch 3,mem_clks_per_lpo
+	rtn blank
+	add regc,offset_24g_cb_lpm_before,temp
+	ifetch 2,temp
+	//fetch 2,mem_24g_cb_lpm_before
+	call callback_func
+	add regc,offset_24g_enter_hibernate,temp
+	ifetch 8,temp
+	call clk2lpo
+	storet 4,mem_sleep_counter
+  	branch lpm_sleep
+
+g24_transmit_packet:
+	call g24_head_ptr2regc
+	add regc,offset_24g_retry,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_retry
+g24_transmit_loop:
+	call g24_transmit_receive_ack
+	nbranch g24_retransmit,sync
+	nbranch g24_retransmit,user3
+	call g24_ackpayload_parse
+	call g24_power_ctrl_ack_incrs
+g24_transmit_next_packet:
+	call g24_head_ptr2regc
+	add regc,offset_24g_pid,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_pid
+	increase 1,pdata
+	call g24_store_mem_pid
+	//store 1,mem_24g_pid
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,g24_paring_mode
+	call g24_transmit_succ_rf_config
+g24_transmit_abandon:
+	setarg 0
+	add regc,offset_24g_txfail_cnt,contw
+	istore 2,contw	//include mem_24g_get_ack_fail
+	//store 1,mem_24g_txfail_cnt
+	//store 1,mem_24g_get_ack_fail
+	//jam ENSURE_OFF_24G,mem_24g_ensure
+	setarg ENSURE_OFF_24G
+	branch g24_store_mem_ensure
+
+	
+g24_transmit_receive_ack:
+	disable user3
+	call g24_transmit
+	call g24_head_ptr2regc
+	add regc,offset_24g_no_ack,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_no_ack
+	beq no_ack_24g,g24_transmit_no_ack	//tx no ack
+	call g24_receive_packet
+	branch g24_end_of_packet
+g24_transmit_no_ack:
+	call g24_end_of_packet
+	branch g24_transmit_next_packet
+
+
+g24_retransmit:
+	bpatch patch16_5,mem_patch16
+	add regc,offset_24g_get_ack_fail,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_get_ack_fail
+	increase 1,pdata
+	add regc,offset_24g_get_ack_fail,contw
+	istore 1,contw
+	//store 1,mem_24g_get_ack_fail
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,g24_tx_paring_retry
+	add regc,offset_24g_retry,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_retry
+	increase 1,temp
+	add regc,offset_24g_retry,contw
+	istoret 1,contw
+	//storet 1,mem_24g_retry
+	add regc,offset_24g_max_retry,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_max_retry
+	isub temp,pdata
+	nbranch g24_transmit_loop,blank
+	bpatch patch16_6,mem_patch16
+	call g24_fetch_mem_rf_work_stage
+	//fetch 1,mem_24g_rf_work_stage
+	beq 3,g24_transmit_pac_fail_hop_stage3
+	add regc,offset_24g_hop_pac_retry,rega
+	ifetch 1,rega	
+	//fetch 1,mem_24g_hop_pac_retry
+	increase 1,pdata
+	add regc,offset_24g_hop_pac_retry,contw
+	istore 1,contw
+	//store 1,mem_24g_hop_pac_retry
+	beq 2,g24_transmit_hop_pac_fail
+	call g24_hop_ch_enable
+	setarg 1
+	call g24_store_mem_max_retry
+	//jam 1,mem_24g_max_retry
+	branch g24_transmit_packet
+
+g24_tx_paring_retry:
+	add regc,offset_24g_get_ack_fail,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_get_ack_fail
+	rtnne 0xff
+	add regc,offset_24g_get_ack_fail,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_get_ack_fail
+	branch g24_stop_24g_mode
+
+g24_tx_attempt_fail:
+	add regc,offset_24g_txfail_cnt,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_txfail_cnt
+g24_stop_24g_mode:
+	jam BT_EVT_24G_ATTEMPT_FAIL,mem_fifo_temp
+	branch ui_ipc_send_event
+
+g24_ackpayload_parse:
+	call g24_read_len_pid_crc
+	add regc,offset_24g_rxdata_length,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rxdata_length	//ack payload length 
+	rtn blank
+	iforce loopcnt
+	add regc,offset_24g_rxbuf_add2,contr
+	//arg mem_24g_rxbuf+2,contr
+	add regc,offset_24g_rxpayload,contw	
+	//arg mem_24g_rxpayload,contw	//ack payload buffer 
+	branch memcpy
+
+
+g24_read_len_pid_crc:
+//read control
+	call g24_fetch_mem_rxbuf_add1
+	//fetch 1,mem_24g_rxbuf+1
+	rshift3 pdata,pdata
+	add regc,offset_24g_rxdata_length,contw
+	istore 1,contw
+	//store 1,mem_24g_rxdata_length
+//get crc
+	increase 1,pdata
+	add regc,offset_24g_rxbuf_add1,contr
+	//arg mem_24g_rxbuf+1,contr
+	iadd contr,contr
+	ifetch 3,contr
+	add regc,offset_24g_sta_crc,contw
+	istore 3,contw
+	//store 3,mem_24g_sta_crc
+//read pid
+	call g24_fetch_mem_rxbuf_add1
+	//fetch 1,mem_24g_rxbuf+1
+	rshift pdata,pdata
+	and pdata,0x03,pdata
+	add regc,offset_24g_sta_pid,contw
+	istore 1,contw
+	//store 1,mem_24g_sta_pid
+	rtn
+
+g24_prep:
+	disable enable_crc
+	disable enable_white
+	setarg 0x555555
+	iforce crc24_init
+	rtn
+
+g24_set_freq_tx:
+	call set_sync_on
+	add regc,offset_24g_ch,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_ch
+	branch set_freq_tx
+
+g24_transmit:
+	call g24_prep
+	call g24_set_freq_tx
+	set1 TXGFSK,radio_ctrl
+	enable encode_fec0
+	enable is_tx
+	disable is_rx
+	call le_enable
+	call g24_fetch_mem_addr
+	//fetch 4,mem_24g_addr
+	iforce access
+	inject mod,32
+	enable enable_crc
+	add regc,offset_24g_txlen,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_txlen
+	iforce loopcnt
+	add regc,offset_24g_txpayload,contr
+	//arg mem_24g_txpayload,contr
+g24tr_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop g24tr_loop
+	enable enable_parity
+	inject mod,24	//crc
+	disable enable_parity
+	until null,tx_clear
+	bpatch patch16_7,mem_patch16
+	nop 100
+	disable encode_fec0
+	rtn
+
+g24_receive_packet:
+	disable user3
+	force 0,radio_ctrl
+	add regc,offset_24g_ch,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_ch
+	call set_freq_rx
+	call rf_rx_enable
+g24_receive_rxon:
+	call g24_prep
+	enable decode_fec0
+	enable is_rx
+	disable is_tx
+	call le_enable
+	call g24_fetch_mem_addr
+	//fetch 4,mem_24g_addr
+	iforce access
+	enable swfine
+	add regc,offset_24g_rx_window,rega
+	ifetch 2,rega
+	//fetch 2,mem_24g_rx_window
+	iforce stop_watch
+	correlate null,timeout
+	nbranch g24_sync_timeout,sync
+	enable enable_crc
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	add regc,offset_24g_rxbuf,contw
+	istore 1,contw	
+	//store 1,mem_24g_rxbuf	//device id
+	add regc,offset_24g_mode,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_mode
+	beq rx_24g,g24_receive_skip
+	bpatch patch17_0,mem_patch17
+	add regc,offset_24g_rxbuf,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rxbuf
+	add regc,offset_24g_data_type,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_data_type
+	icompare bits_data,temp
+	nbranch g24_end_of_packet,true
+g24_receive_skip:
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	rshift3 pdata,pdata
+	and pdata,0x1f,loopcnt	//max payload: 32bytes
+	branch g24rx_nopayload,zero
+g24rx_loop:
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	loop g24rx_loop
+g24rx_nopayload:
+	parse demod,bucket,24
+	rshift32 pdata,pdata
+	rshift16 pdata,pdata
+	istore 3,contw
+	branch g24_end_of_packet,crc_failed
+	enable user3
+	disable decode_fec0
+	rtn
+//	branch rssi_signal
+
+g24_end_of_packet:
+	disable encode_fec0
+	disable decode_fec0
+	disable enable_crc
+	disable enable_white
+	branch shutdown_radio,is_rx
+	until null,tx_clear
+	nop 100          /* flush out the last bit */
+	branch shutdown_radio
+
+g24_sync_timeout:
+	call rssi_noise
+	branch g24_end_of_packet
+
+rssi_noise:
+	call save_rssi
+	rtn blank
+	add regc,offset_rssi_noise_index,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_rssi_noise_index
+	arg mem_rssi_noise_buffer,rega
+	//arg mem_rssi_noise_buf,rega
+	call rssi_noise_store
+	add regc,offset_rssi_noise_index,contw
+	//storet 1,mem_rssi_noise_index
+g24_contw_istoret_1byte:	
+	istoret 1,contw
+	rtn
+
+rssi_noise_store:
+	arg RSSI_BUF_LEN_NOISE,regb
+	branch rssi_store
+	
+/*	
+rssi_signal:
+	call save_rssi
+	rtn blank
+	add regc,offset_rssi_signal_index,rega
+	ifetcht 1,rega	
+	//fetcht 1,mem_rssi_signal_index
+	add regc,offset_rssi_signal_buf,rega
+	//arg mem_rssi_signal_buf,rega
+	arg RSSI_BUF_LEN_SIGNAL,regb
+	call rssi_store
+	add regc,offset_rssi_signal_index,contw
+	istoret 1,contw	
+	//storet 1,mem_rssi_signal_index
+	rtn
+*/	
+rssi_store:	
+	copy rega,pdata
+	iadd temp,contw
+	fetch 1,mem_rssi
+	istore 1,contw
+	increase 1,temp
+	copy regb,pdata
+	iand_into temp
+	rtn
+	
+rssi_average:
+	arg 0,temp
+	copy rega,contr
+rssi_average_loop:	
+	ifetch 1,contr
+	iadd temp,temp
+	loop rssi_average_loop
+	rshift8 temp,temp
+	rtn
+
+g24_power_ctrl_init:
+	call g24_head_ptr2regc
+	call g24_power_ctrl_incrs_level1
+	setarg 1
+	call g24_store_mem_power_ctrl_level
+	//jam 1,mem_power_ctrl_level
+g24_power_ctrl_reinit:
+	setarg 0
+	call g24_store_mem_power_ctrl_pac
+	//jam 0,mem_power_ctrl_packet_cnt
+	istore 1,contw
+	//jam 0,mem_power_ctrl_ack_cnt
+	rtn
+
+g24_power_ctrl_pac_incrs:
+	call g24_fetch_mem_power_ctrl_pac
+	//fetch 1,mem_power_ctrl_packet_cnt
+	increase 1,pdata
+g24_store_mem_power_ctrl_pac:	
+	//store 1,mem_power_ctrl_packet_cnt
+	add regc,offset_power_ctrl_packet_cnt,contw
+	branch g24_contw_istore_1byte
+
+g24_power_ctrl_ack_incrs:
+	//fetch 1,mem_power_ctrl_ack_cnt
+	//store 1,mem_power_ctrl_ack_cnt
+	add regc,offset_power_ctrl_ack_cnt,rega
+	ifetch 1,rega
+	increase 1,pdata
+	add regc,offset_power_ctrl_ack_cnt,contw
+	branch g24_contw_istore_1byte
+
+g24_power_ctrl:
+	bpatch patch17_1,mem_patch17
+	call g24_fetch_mem_power_ctrl_pac
+	//fetch 1,mem_power_ctrl_packet_cnt
+	sub pdata,POWER_CTRL_MAX_PACKET_CNT,null
+	rtn positive
+	add regc,offset_power_ctrl_ack_cnt,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_power_ctrl_ack_cnt
+	isub temp,temp	//loss packet cnt
+	call g24_power_ctrl_reinit
+	setarg offset_power_ctrl_threshold_up
+	iadd regc,rega
+	ifetch 1,rega
+	//fetch 1,mem_power_ctrl_threshold_up
+	isub temp,null
+	nbranch g24_power_ctrl_incrs,positive
+	setarg offset_power_ctrl_threshold_down
+	iadd regc,rega
+	ifetch 1,rega	
+	//fetch 1,mem_power_ctrl_threshold_down
+	isub temp,null
+	branch g24_power_ctrl_decrs,positive
+	rtn
+
+g24_power_ctrl_incrs:	
+	add regc,offset_power_ctrl_level,rega
+	ifetch 1,rega
+	//fetch 1,mem_power_ctrl_level
+	beq 2,g24_power_ctrl_incrs_level2
+	increase 1,pdata
+	call g24_store_mem_power_ctrl_level
+	//store 1,mem_power_ctrl_level
+	beq 1,g24_power_ctrl_incrs_level1
+g24_power_ctrl_incrs_level2:
+	setarg POWER_CTRL_LOSSPAC_THRESH_UP2
+	call g24_store_mem_power_ctrl_threshold_up
+	//jam POWER_CTRL_LOSSPAC_THRESH_UP2,mem_power_ctrl_threshold_up
+	setarg POWER_CTRL_LOSSPAC_THRESH_DOWN2
+	call g24_store_mem_power_ctrl_threshold_down
+	//jam POWER_CTRL_LOSSPAC_THRESH_DOWN2,mem_power_ctrl_threshold_down
+//	jam POWER_CTRL_RSSI_THRESH_DOWN2,mem_rssi_ctrl_threshold_down
+	add regc,offset_power_ctrl_txpwr_level2,rega
+	//fetch 1,mem_power_ctrl_txpwr_level2
+	branch g24_ifetch_rega_store_mem_txpower
+
+g24_power_ctrl_decrs:
+	add regc,offset_power_ctrl_level,rega
+	ifetch 1,rega
+	//fetch 1,mem_power_ctrl_level
+	beq 0,g24_power_ctrl_decrs_level0
+	increase -1,pdata
+	call g24_store_mem_power_ctrl_level
+	//store 1,mem_power_ctrl_level
+	beq 0,g24_power_ctrl_decrs_level0
+g24_power_ctrl_decrs_level1:
+//	call rssi_check_distance
+//	nrtn user
+g24_power_ctrl_incrs_level1:
+	setarg POWER_CTRL_LOSSPAC_THRESH_UP1
+	call g24_store_mem_power_ctrl_threshold_up
+	//jam POWER_CTRL_LOSSPAC_THRESH_UP1,mem_power_ctrl_threshold_up
+	setarg POWER_CTRL_LOSSPAC_THRESH_DOWN1
+	call g24_store_mem_power_ctrl_threshold_down
+	//jam POWER_CTRL_LOSSPAC_THRESH_DOWN1,mem_power_ctrl_threshold_down
+//	jam POWER_CTRL_RSSI_THRESH_DOWN1,mem_rssi_ctrl_threshold_down
+	setarg offset_power_ctrl_txpwr_level1
+g24_iadd_offset_mem_txpower:	
+	iadd regc,rega
+g24_ifetch_rega_store_mem_txpower:	
+	ifetch 1,rega
+	//fetch 1,mem_power_ctrl_txpwr_level1
+	branch g24_store_mem_txpower
+	
+g24_power_ctrl_decrs_level0:
+//	call rssi_check_distance
+//	nrtn user
+	setarg POWER_CTRL_LOSSPAC_THRESH_UP0
+	call g24_store_mem_power_ctrl_threshold_up
+	//jam POWER_CTRL_LOSSPAC_THRESH_UP0,mem_power_ctrl_threshold_up
+	setarg POWER_CTRL_LOSSPAC_THRESH_DOWN0
+	call g24_store_mem_power_ctrl_threshold_down
+	//jam POWER_CTRL_LOSSPAC_THRESH_DOWN0,mem_power_ctrl_threshold_down
+//	jam POWER_CTRL_RSSI_THRESH_DOWN0,mem_rssi_ctrl_threshold_down
+	setarg offset_power_ctrl_txpwr_level0
+	//fetch 1,mem_power_ctrl_txpwr_level0
+	branch g24_iadd_offset_mem_txpower
+
+/*
+rssi_check_distance:
+	disable user
+	arg mem_rssi_signal_buf,rega
+	arg RSSI_BUF_LEN_SIGNAL+1,loopcnt
+	call rssi_average
+	storet 1,mem_rssi_signal_avg
+	fetch 1,mem_rssi_ctrl_threshold_down
+	isub temp,null
+	branch enable_user,positive
+	rtn
+*/
+g24_start_pairing_sm1:
+	set1 mark_24g,mark
+	call g24_pair_init
+g24_set_pairing_sm_1:
+	//jam STATE_24G_PAIRING_1,mem_24g_pairing_sm
+	setarg STATE_24G_PAIRING_1
+	branch g24_store_mem_pairing_sm
+
+g24_pairing_sm:
+	add regc,offset_24g_ensure,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_ensure
+	beq ENSURE_ON_24G,enable_user
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	beq STATE_24G_PAIRING_1,g24_pairing_sm_1
+	beq STATE_24G_PAIRING_2,g24_pairing_sm_2
+	beq STATE_24G_PAIRING_3,g24_pairing_sm_3
+	branch assert
+
+g24_pairing_sm_1:
+	setarg STATE_24G_PAIRING_1_WAITING_ACK
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_1_WAITING_ACK,mem_24g_pairing_sm
+	jam 0xaa,mem_24g_common_temp
+	branch g24_pairing_sm_common
+g24_pairing_sm_2:
+	setarg STATE_24G_PAIRING_2_WAITING_ACK
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_2_WAITING_ACK,mem_24g_pairing_sm
+	jam 0x55,mem_24g_common_temp
+	branch g24_pairing_sm_common
+g24_pairing_sm_3:
+	setarg STATE_24G_PAIRING_3_WAITING_ACK
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_3_WAITING_ACK,mem_24g_pairing_sm
+	jam 0x22,mem_24g_common_temp
+g24_pairing_sm_common:
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	and_into bits_data,pdata
+	store 1,mem_24g_common_temp+1
+	call g24_fetch_mem_device_addr
+	//fetch 4,mem_24g_device_addr
+	store 4,mem_24g_common_temp+2
+g24_put_pairing_data_in_buff:
+	jam 0,mem_24g_common_temp+6
+	arg mem_24g_common_temp,rega
+	arg 7,temp
+	call g24_put_data_in_buff	
+	call g24_transmit_prep
+	call g24_txdata_enable_tx
+	branch enable_user
+
+g24_paring_mode:
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	rtneq STATE_24G_PAIRING_SUCCESS
+	beq STATE_24G_PAIRING_1_WAITING_ACK,g24_pairing_sm_1_waiting_ack
+	beq STATE_24G_PAIRING_2_WAITING_ACK,g24_pairing_sm_2_waiting_ack
+	beq STATE_24G_PAIRING_3_WAITING_ACK,g24_pairing_sm_3_waiting_ack
+	rtn
+
+g24_pairing_sm_1_waiting_ack:
+	setarg STATE_24G_PAIRING_2
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_2,mem_24g_pairing_sm
+	branch g24_transmit_abandon
+g24_pairing_sm_2_waiting_ack:
+	setarg STATE_24G_PAIRING_3
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_3,mem_24g_pairing_sm
+	branch g24_transmit_abandon
+g24_pairing_sm_3_waiting_ack:
+	setarg STATE_24G_PAIRING_SUCCESS
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_SUCCESS,mem_24g_pairing_sm
+	jam BT_EVT_24G_PAIRING_COMPLETE,mem_fifo_temp
+	call ui_ipc_send_event
+	add regc,offset_24g_rxpayload_add2,rega
+	ifetch 4,rega
+	//fetch 4,mem_24g_rxpayload+2
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	branch g24_transmit_abandon
+
+g24_auto_pair_start:
+	set0 mark_24g,mark
+	call g24_auto_pair_set_device_info
+	call g24_tx_attemp_data_prep
+g24_auto_pair_restart:	
+	call g24_set0_mem_check_dongle_times
+g24_auto_pair_start_loop:
+	nop 2000
+	call g24_fetch_mem_check_dongle_times
+	beq 0xff,g24_stop_24g_mode
+	call g24_transmit_receive_ack
+	nbranch g24_auto_pair_retry,sync
+	nbranch g24_auto_pair_retry,user3
+	call g24_ackpayload_parse
+	call g24_head_ptr2regc
+	add regc,offset_24g_paring_addr,rega
+	ifetcht 4,rega
+	call g24_fetch_mem_addr_isub_temp
+	branch g24_start_pairing_sm1,zero
+	call g24_head_ptr2regc
+	add regc,offset_24g_rxpayload_add2,rega
+	ifetch 4,rega
+	beq 0,g24_auto_pair_restart
+	call g24_store_mem_addr
+	branch g24_tx_attemp_dongle_succ
+
+g24_auto_pair_retry:
+	call g24_fetch_mem_check_dongle_times
+	increase 1,pdata
+	call g24_store_mem_check_dongle_times
+
+	call g24_fetch_mem_auto_paring_switch
+	increase 1,pdata
+	and_into 1,pdata
+	call g24_store_mem_auto_paring_switch
+	beq 0,g24_auto_pair_device_attemp
+	beq 1,g24_auto_pair_pair_attemp
+	rtn
+
+g24_fetch_mem_auto_paring_switch:
+	setarg offset_24g_auto_pair_switch
+	branch g24_set_rega_ifetch_1byte
+g24_store_mem_auto_paring_switch:
+	arg offset_24g_auto_pair_switch,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_auto_pair_set_device_info:
+	call g24_store_mem_tx_power
+	call g24_fetch_mem_device_addr
+	call g24_store_mem_addr
+	branch g24_ch
+
+g24_auto_pair_device_attemp:
+	call g24_auto_pair_set_device_info
+	branch g24_auto_pair_start_loop
+
+g24_auto_pair_pair_attemp:
+	call g24_pair_init
+	branch g24_auto_pair_start_loop
+
+
+g24_start_24g_mode:
+	set0 mark_24g,mark
+	call g24_ch
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call g24_tx_attemp_data_prep
+	call g24_set0_mem_check_dongle_times
+	//jam 0,mem_24g_check_dongle_times
+g24_tx_attemp_dongle_loop:
+	nop 2000
+	call g24_fetch_mem_check_dongle_times
+	//fetch 1,mem_24g_check_dongle_times
+	beq 0xff,g24_stop_24g_mode
+	call g24_transmit_receive_ack
+	nbranch g24_attemp_txdata_retry,sync
+	nbranch g24_attemp_txdata_retry,user3
+g24_tx_attemp_dongle_succ:	
+	set1 mark_24g,mark
+	call g24_set0_mem_check_dongle_times
+	setarg STATE_24G_PAIRING_SUCCESS
+	call g24_store_mem_pairing_sm
+	//jam 0,mem_24g_check_dongle_times
+	jam BT_EVT_24G_ATTEMPT_SUCCESS,mem_fifo_temp
+	branch ui_ipc_send_event
+
+g24_tx_attemp_data_prep:
+	set1 mark_24g_conext,mark
+	jam 0xff,mem_24g_common_temp
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	call g24_put_data_in_buff_pre
+	branch g24_transmit_prep
+	
+g24_attemp_txdata_retry:
+	call g24_fetch_mem_check_dongle_times
+	//fetch 1,mem_24g_check_dongle_times
+	increase 1,pdata
+	call g24_store_mem_check_dongle_times
+	//store 1,mem_24g_check_dongle_times
+	call g24_ch
+	branch g24_tx_attemp_dongle_loop
+
+g24_check_51cmd_start_24g:
+	call g24_store_mem_tx_power
+	//fetch 1,mem_tx_power_temp
+	//store 1,mem_tx_power
+	setarg STATE_24G_PAIRING_SUCCESS
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_SUCCESS,mem_24g_pairing_sm
+	branch g24_start_24g_mode
+/*	
+g24_check_51cmd_stop_24g:
+	call g24_store_mem_tx_power
+	set0 mark_24g,mark
+	branch le_disable
+*/
+
+
+dongle_init:
+	bpatch patch17_2,mem_patch17
+	call g24_head_ptr2regc
+	setarg dongle_rxdata_type1
+	add regc,offset_24g_cb_rxdata_type1,contw
+	istore 2,contw
+	//store 2,mem_24g_cb_rxdata_type1
+	call g24_receive_init
+	call usb_init
+	call g24_fetch_mem_pair_mode
+	//fetch 1,mem_24g_pair_mode
+	bpatch patch17_3,mem_patch17
+	beq 0x00,dongle_auto_bind
+	beq 0x01,dongle_pc_bind
+	beq 0x0f,dongle_all_powerful
+	branch assert
+
+g24_receive_init:
+	call g24_store_mem_tx_power_temp
+	arg 0x80,loopcnt
+	arg mem_rssi_noise_buffer,contw
+	branch memset0
+
+dongle_all_powerful:
+	call dongle_check_mode
+dongle_all_powerful_loop:
+	call g24_dongle_work_mode
+	call usb_isr
+	branch dongle_all_powerful_loop
+
+dongle_pc_bind:
+	bpatch patch17_4,mem_patch17
+	call dongle_check_mode
+dongle_pc_bind_loop:	
+	call g24_dongle_work_mode
+	call g24_dongle_bind_mode
+	call usb_isr
+	call dongle_usb_dispatch
+	branch dongle_pc_bind_loop
+
+dongle_check_mode:
+	//jam DONGLE_WORK,mem_dongle_work_mode
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	//jam 0,mem_24g_ackpayload_enable
+	call g24_set_work_mem_dongle_work_mode
+	call g24_set0_mem_dongle_mode_init
+	branch g24_set0_mem_ackpayload_enable
+	
+g24_dongle_work_mode:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_WORK
+g24_dongle_work_mode_start:
+	call g24_dongle_work_init
+	call g24_ch_process
+	call g24_receive_packet_start
+	branch g24_blank_data_process
+
+g24_dongle_work_init:
+	call g24_fetch_mem_dongle_mode_init
+	//fetch 1,mem_dongle_mode_init
+	rtnbit1 DONGLE_WORK
+	set1 DONGLE_WORK,pdata
+	call g24_store_mem_dongle_mode_init
+	//store 1,mem_dongle_mode_init
+	call g24_store_mem_tx_power
+	//fetch 1,mem_tx_power_temp
+	//store 1,mem_tx_power
+	call g24_set0_mem_ackpayload_enable
+	//jam 0,mem_24g_ackpayload_enable
+	jam 0,mem_usb_tx_enable
+	call g24_set1_mem_abort_pac
+	//jam 1,mem_24g_abort_pac
+	call g24_dongle_init
+g24_rx_interrupt_clear:
+	add regc,offset_24g_rxbuf,contw
+	//arg mem_24g_rxbuf,contw
+	arg 66,loopcnt
+	branch clear_mem
+
+g24_dongle_init:
+	call g24_set0_mem_pid
+	//jam 0,mem_24g_pid
+	call g24_fetch_mem_rx_addr
+	//fetch 4,mem_24g_rx_addr
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	branch g24_ch
+
+g24_ch_process:
+	bpatch patch17_5,mem_patch17
+	call g24_fetch_mem_abort_pac
+	//fetch 1,mem_24g_abort_pac
+	beq 1,g24_noise_rssi
+	call g24_fetch_mem_hop_pac
+	//fetch 1,mem_24g_hop_pac
+	beq 1,g24_ch	
+	setarg offset_24g_hop_btclk
+	iadd regc,rega
+	ifetcht 4,rega
+	//fetcht 4,mem_24g_hop_btclk
+	copy clkn_bt,pdata
+	isub temp,null
+	ncall g24_timer_timeout,positive
+	copy pdata,regb
+	setarg offset_24g_hop_btclk
+	iadd regc,rega
+	ifetch 4,rega
+	copy pdata,temp
+	//fetch 4,mem_24g_hop_btclk
+	setarg offset_24g_hop_interval
+	iadd regc,rega
+	copy temp,pdata
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_hop_interval
+	iadd temp,temp
+	copy regb,pdata
+	isub temp,null
+	nrtn positive
+	set0 28,pdata
+	setarg offset_24g_hop_btclk
+	iadd regc,contw
+	istore 4,contw
+	//store 4,mem_24g_hop_btclk
+g24_ch_update:
+	call g24_ch
+	call g24_fetch_mem_rf_laststa
+	//fetch 1,mem_24g_rf_laststa
+	increase 1,pdata
+	call g24_store_mem_rf_laststa
+	//store 1,mem_24g_rf_laststa
+	rtnne 2
+	call g24_set0_mem_rf_laststa
+	//jam 0,mem_24g_rf_laststa
+	//jam 1,mem_24g_abort_pac
+	//rtn
+	branch g24_set1_mem_abort_pac
+	
+g24_ch_timer_reinit:
+	copy clkn_bt,pdata
+	arg offset_24g_hop_btclk,rega
+	call g24_set_contw_with_temp
+	istore 4,contw
+	//store 4,mem_24g_hop_btclk
+	//jam 0,mem_24g_rf_laststa
+	//rtn
+	branch g24_set0_mem_rf_laststa
+
+g24_noise_rssi:
+	arg mem_rssi_noise_buffer,rega
+	call g24_noise_rssi_average
+	add regc,offset_rssi_noise_avg,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_avg
+	sub temp,RSSI_THRESH_NOISE,null
+	nrtn positive	
+	branch g24_ch
+
+g24_noise_rssi_average:
+	arg RSSI_BUF_LEN_NOISE+1,loopcnt
+	branch rssi_average
+
+g24_blank_data_process:
+	call g24_ms_blank_data
+	call g24_kb_blank_data
+	branch g24_kb_mul_blank_data
+
+g24_ms_blank_data:
+	setarg offset_24g_ms_blank_data_enable
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ms_blank_data_enable
+	rtn blank
+	arg TIMER_MS_BLANK,queue
+	call timer_check
+	nrtn blank
+	call g24_set0_mem_ms_blank_data_enable
+	//jam 0,mem_24g_ms_blank_data_enable
+g24_ms_blank_data_2usb:
+	setarg MS_REPORT_ID
+	store 1,mem_usb_mouse_data
+	setarg 0
+	istore 7,contw
+	branch g24_data_type1_usbtx_enable
+
+g24_kb_blank_data:
+	setarg offset_24g_kb_blank_data_enable
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_kb_blank_data_enable
+	rtn blank
+	arg TIMER_KB_BLANK,queue
+	call timer_check
+	nrtn blank
+	call g24_set0_mem_kb_blank_data_enable
+	//jam 0,mem_24g_kb_blank_data_enable
+g24_kb_blank_data_2usb:	
+	arg mem_usb_kb_data,contw
+	arg 2,loopcnt
+	call memset0
+	jam KB_NORMAL_REPORT_ID,mem_usb_kb_data
+	branch g24_kb_data_into_ep1_fifo
+
+g24_kb_mul_blank_data:
+	setarg offset_24g_kb_mul_blank_data_enable
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_kb_mul_blank_data_enable
+	rtn blank
+	arg TIMER_KB_MUL_BLANK,queue
+	call timer_check
+	nrtn blank
+	call g24_set0_mem_kb_mul_blank_data_enable
+	//jam 0,mem_24g_kb_mul_blank_data_enable
+g24_kb_mul_blank_data_2usb:
+	arg mem_usb_kb_multikey,contw
+	arg 2,loopcnt
+	call memset0
+	jam KB_MULTIKEY_REPORT_ID,mem_usb_kb_multikey
+	branch g24_kb_mul_data_into_ep2_fifo
+
+g24_dongle_bind_mode:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_BIND
+	call g24_dongle_bind_init
+	branch g24_dongle_bind_data_process
+
+g24_dongle_bind_init:
+	call g24_fetch_mem_dongle_mode_init
+	//fetch 1,mem_dongle_mode_init
+	rtnbit1 DONGLE_BIND
+	set1 DONGLE_BIND,pdata
+	call g24_store_mem_dongle_mode_init
+	//store 1,mem_dongle_mode_init
+	call g24_set1_mem_ackpayload_enable
+	//jam 1,mem_24g_ackpayload_enable
+	call g24_pair_init
+	setarg 0
+	arg offset_dongle_ms_bind_step,rega
+	call g24_set_contw_with_temp
+	//store 3,mem_dongle_ms_bind_step
+	branch g24_contw_istore_3byte
+
+g24_dongle_bind_data_process:
+	call g24_receive_transmit_ack
+	nbranch g24_rx_interrupt_clear,user3	
+	add regc,offset_24g_rxbuf,contr
+	setarg offset_24g_rxdata_temp
+	iadd regc,contw
+	arg 8,loopcnt
+	call memcpy
+	setarg offset_24g_rxdata_temp_add2
+	call g24_set_rega_ifetch_1byte
+	beq DATATYPE_BIND,g24_dongle_bind_first_step	//bind step 1
+	beq DATATYPE_CONFIG,g24_dongle_bind_second_step
+	beq DATATYPE_OK,g24_dongle_bind_third_step
+	beq 0xff,g24_data_attemp
+	branch g24_rx_interrupt_clear
+
+g24_dongle_bind_first_step:
+	call g24_fetch_mem_rxdata_temp_add3_1byte
+	beq BIND_MOUSE,g24_dongle_bind_first_step_mouse
+	beq BIND_KEYBOARD,g24_dongle_bind_first_step_keyboard
+	rtn
+g24_dongle_bind_first_step_mouse:
+	setarg 1
+	call g24_store_mem_ms_bind_step
+	//jam 1,mem_dongle_ms_bind_step
+g24_dongle_bind_ms_payload_cfg:
+	setarg DATATYPE_MOUSE
+	call g24_store_mem_bind_payload
+	//jam DATATYPE_MOUSE,mem_24g_bind_payload
+g24_dongle_bind_payload_cfg:	
+	setarg 0x80
+	arg offset_24g_bind_payload_add1,rega
+	call g24_set_contw_with_regb_store_1byte
+	//jam 0x80,mem_24g_bind_payload+1
+	call g24_fetch_mem_rx_addr
+	//fetch 4,mem_24g_rx_addr
+	arg offset_24g_bind_payload_add2,rega
+	call g24_set_contw_with_temp
+	//store 4,mem_24g_bind_payload+2
+	branch g24_contw_istore_4byte
+
+g24_dongle_bind_first_step_keyboard:
+	setarg 1
+	call g24_store_mem_kb_bind_step
+	//jam 1,mem_dongle_kb_bind_step
+g24_dongle_bind_kb_payload_cfg:
+	setarg DATATYPE_KEYBOARD
+	call g24_store_mem_bind_payload
+	//jam DATATYPE_KEYBOARD,mem_24g_bind_payload
+	branch g24_dongle_bind_payload_cfg
+		
+g24_dongle_bind_second_step:
+	call g24_fetch_mem_rxdata_temp_add3_1byte
+	beq BIND_MOUSE,g24_dongle_bind_second_step_mouse
+	beq BIND_KEYBOARD,g24_dongle_bind_second_step_keyboard
+	rtn
+g24_dongle_bind_second_step_mouse:
+	call g24_dongle_bind_ms_payload_cfg
+	setarg offset_dongle_ms_bind_step
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_dongle_ms_bind_step
+	beq 1,g24_dongle_ms_bind_step_set2
+	rtn
+g24_dongle_ms_bind_step_set2:
+	setarg 2
+	//jam 2,mem_dongle_ms_bind_step
+g24_store_mem_ms_bind_step:
+	arg offset_dongle_ms_bind_step,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_dongle_bind_second_step_keyboard:
+	call g24_dongle_bind_kb_payload_cfg
+	setarg offset_dongle_kb_bind_step
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_dongle_kb_bind_step
+	beq 1,g24_dongle_kb_bind_step_set2
+	rtn
+g24_dongle_kb_bind_step_set2:
+	setarg 2
+	//jam 2,mem_dongle_kb_bind_step
+g24_store_mem_kb_bind_step:
+	arg offset_dongle_kb_bind_step,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_dongle_bind_third_step:
+	call g24_fetch_mem_rxdata_temp_add3_1byte
+	beq BIND_MOUSE,g24_dongle_bind_third_step_mouse
+	beq BIND_KEYBOARD,g24_dongle_bind_third_step_keyboard
+	rtn
+g24_dongle_bind_third_step_mouse:
+	setarg offset_dongle_ms_bind_step
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_dongle_ms_bind_step
+	beq 2,g24_dongle_ms_bind_step_success
+	rtn
+g24_dongle_ms_bind_step_success:
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	or_into 0x01,pdata
+	call g24_store_mem_bind_device_status
+	//store 1,mem_dongle_bind_device_status
+g24_dongle_bind_exit:	
+	setarg 0
+	setarg offset_dongle_ms_bind_step
+	iadd regc,contw
+	istore 2,contw
+	branch g24_rx_interrupt_clear
+
+g24_dongle_bind_third_step_keyboard:
+	setarg offset_dongle_kb_bind_step
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_dongle_kb_bind_step
+	bne 0,g24_dongle_kb_bind_step_success
+	rtn
+g24_dongle_kb_bind_step_success:
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	or_into 0x02,pdata
+	call g24_store_mem_bind_device_status
+	//store 1,mem_dongle_bind_device_status
+	branch g24_dongle_bind_exit
+
+	
+dongle_usb_dispatch:
+	fetch 1,mem_usb0_get_set_report
+	rtn blank
+	jam 0,mem_usb0_get_set_report
+	fetch 2,mem_usb_setup_bValue_temp
+	arg PC_SET_REPORT,temp
+	isub temp,null
+	nrtn zero
+	//get usb host command
+	fetch 1,mem_usb0_set_report_data
+	rtnne PC_REPORT_ID
+	fetch 1,mem_usb0_set_report_data+1
+	bpatch patch17_6,mem_patch17
+	beq COMMAND_MODE,dongle_dispose_cmd_mode
+	beq COMMAND_BIND,dongle_dispose_cmd_bind
+	beq COMMAND_CURRENT_PROJECT,dongle_dispose_cmd_current_project
+	beq COMMAND_CURRENT_MODE,dongle_dispose_cmd_current_mode
+	beq COMMAND_CURRENT_FW_VERSION,dongle_dispose_cmd_current_fw_version
+	beq COMMAND_USER_DEFINED,dongle_dispose_cmd_user_defined
+usb0_data_ready_report_set0:
+	jam 0,mem_usb0_data_ready_report
+	rtn
+dongle_dispose_cmd_bind:
+	fetch 1,mem_usb0_set_report_data+2
+	beq COM_BIND_GET,dongle_dispose_cmd_get_bind
+	beq COM_BIND_EXIT,dongle_dispose_cmd_exit_bind
+	beq COM_READ_MODE,dongle_dispose_cmd_read_mode
+	branch usb0_data_ready_report_set0
+dongle_dispose_cmd_get_bind:
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	store 1,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+dongle_dispose_cmd_exit_bind:
+	call g24_set_work_mem_dongle_work_mode
+	//jam DONGLE_WORK,mem_dongle_work_mode
+	call g24_set0_mem_dongle_mode_init
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	store 1,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_read_mode:
+dongle_dispose_in_bind_mode:
+	jam COMMAND_BIND,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_mode:
+	fetch 1,mem_usb0_set_report_data+2
+	beq COM_MODE_BIND,dongle_enter_bind_mode
+//	beq COM_MODE_TEST,dongle_enter_test_mode
+	branch usb0_data_ready_report_set0
+dongle_enter_bind_mode:
+	//jam DONGLE_BIND,mem_dongle_work_mode
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	call g24_bind_mode_enable
+usb0_data_ready_report_set1:
+	jam 1,mem_usb0_data_ready_report
+	rtn
+//dongle_enter_test_mode:
+//	jam DONGLE_TEST,mem_dongle_work_mode
+//	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_current_project:
+	jam PRODUCT_ID,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_current_mode:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	beq DONGLE_WORK,dongle_dispose_in_work_mode
+	beq DONGLE_BIND,dongle_dispose_in_bind_mode
+//	beq DONGLE_TEST,dongle_dispose_in_test_mode
+	rtn
+dongle_dispose_in_work_mode:
+	jam COMMAND_MODE,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+//dongle_dispose_in_test_mode:
+//	jam COMMAND_TEST,mem_usb0_get_report_data+1
+//	branch usb0_data_ready_report_set1
+	
+dongle_dispose_cmd_current_fw_version:
+	jam FW_VERSION0,mem_usb0_get_report_data+1
+	jam FW_VERSION1,mem_usb0_get_report_data+2
+	jam FW_VERSION2,mem_usb0_get_report_data+3
+	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_user_defined:
+	//report_id|cmd|data_len|data
+	call g24_set1_mem_ackpayload_enable
+	fetch 1,mem_usb0_set_report_data+2	//data_len:max 30bytes
+	increase 2,pdata
+	copy pdata,loopcnt
+	arg mem_usb0_set_report_data,contr
+	setarg offset_24g_ackpayload
+	iadd regc,contw
+	branch memcpy
+
+
+dongle_auto_bind:
+	bpatch patch17_7,mem_patch17
+	call g24_mode_switch_init
+dongle_auto_bind_loop:
+	call g24_receive_process
+	call usb_isr
+	branch dongle_auto_bind_loop
+
+g24_dongle_work_mode_auto:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_WORK
+	call g24_dongle_work_mode_start
+	branch g24_rx_nodata_process
+
+g24_dongle_bind_mode_auto:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_BIND
+	call g24_dongle_bind_init
+	call g24_dongle_bind_data_process
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	rtn blank
+	call g24_set0_mem_mode_switch
+	//jam 0,mem_24g_mode_switch
+	call dongle_check_mode
+	call g24_enable_nodata_timer
+g24_timer_init:
+	setarg 0
+	add regc,offset_24g_tx_btclk,contw
+	//store 4,mem_24g_tx_btclk
+	branch g24_contw_istore_4byte
+
+g24_timer_check:
+	call disable_user
+	add regc,offset_24g_tx_btclk,rega
+	ifetcht 4,rega	
+	//fetcht 4,mem_24g_tx_btclk
+	copy clkn_bt,pdata
+	isub temp,null
+	ncall g24_timer_timeout,positive
+	copy pdata,regb
+	add regc,offset_24g_tx_btclk,rega
+	ifetch 4,rega
+	//fetch 4,mem_24g_tx_btclk
+	add regc,offset_24g_interval,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_interval
+	iadd temp,temp
+	copy regb,pdata
+	isub temp,null
+	nrtn positive
+	set0 28,pdata
+	add regc,offset_24g_tx_btclk,contw
+	istore 4,contw
+	//store 4,mem_24g_tx_btclk
+	branch enable_user
+
+g24_mode_switch_init:
+	setarg 1
+	call g24_store_mem_mode_switch
+	//jam 1,mem_24g_mode_switch
+	call g24_set0_mem_time_slice
+	//jam 0,mem_24g_time_slice
+	setarg 0xff
+	add regc,offset_24g_interval,contw
+	istore 1,contw
+	//jam 0xff,mem_24g_interval
+	branch g24_timer_init
+
+g24_mode_switch:
+	setarg offset_24g_mode_switch
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_mode_switch
+	rtn blank
+	call g24_timer_check
+	nrtn user
+	call g24_fetch_mem_time_slice
+	//fetch 1,mem_24g_time_slice
+	increase 1,pdata
+	and_into 1,pdata
+	call g24_store_mem_time_slice
+	//store 1,mem_24g_time_slice
+	beq 0,dongle_check_mode
+	beq 1,g24_bind_mode_enable
+	rtn
+
+g24_bind_mode_enable:
+	//jam DONGLE_BIND,mem_dongle_work_mode
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	//rtn
+	setarg DONGLE_BIND
+	call g24_store_mem_dongle_work_mode
+	branch g24_set0_mem_dongle_mode_init
+
+g24_enable_nodata_timer:
+	setarg 1
+	call g24_store_mem_nodata_timer_enable
+	//jam 1,mem_24g_nodata_timer_enable
+g24_enable_nodata_timer_init:
+	setarg TIMER_NODATA_DELAY
+	arg TIMER_NODATA,queue
+	branch timer_init
+
+g24_rx_nodata_process:
+	call g24_fetch_mem_nodata_timer_enable
+	//fetch 1,mem_24g_nodata_timer_enable
+	rtn blank
+	arg TIMER_NODATA,queue
+	call timer_check
+	nrtn blank
+	call g24_set0_mem_nodata_timer_enable
+	//jam 0,mem_24g_nodata_timer_enable
+	//no data for more than 100ms,then go to search
+	setarg DONGLE_SEARCH
+	call g24_store_mem_dongle_work_mode	
+	//jam DONGLE_SEARCH,mem_dongle_work_mode
+	call g24_set0_mem_dongle_mode_init
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	branch g24_rx_interrupt_clear
+
+g24_dongle_search_mode_auto:
+	bpatch patch18_0,mem_patch18
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_SEARCH
+	call g24_dongle_search_mode_init
+	call g24_rx_auto_addr_ch_search
+	call g24_receive_transmit_ack
+	nbranch g24_rx_interrupt_clear,user3
+	//dongle addr,then parse rxdata
+	call g24_dongle_search_addr_check
+	call g24_receive_packet_parse,zero
+	//receive data,then go to paired
+	//jam DONGLE_WORK,mem_dongle_work_mode
+	//jam 0,mem_24g_ackpayload_enable
+	call dongle_check_mode
+	call g24_fetch_mem_dongle_mode_init
+	//fetch 1,mem_dongle_mode_init
+	set1 DONGLE_WORK,pdata
+	call g24_store_mem_dongle_mode_init
+	//store 1,mem_dongle_mode_init
+	call g24_rx_interrupt_clear
+	call g24_enable_nodata_timer
+	call g24_dongle_search_addr_check
+	branch g24_dg_ch_num_reinit,zero
+	setarg offset_24g_kb_addr
+	call g24_set_rega_ifetcht_4byte
+	//fetcht 4,mem_24g_kb_addr
+	call g24_fetch_mem_addr_isub_temp
+	branch g24_kb_ch_num_reinit,zero		
+	setarg offset_24g_mouse_addr
+	call g24_set_rega_ifetcht_4byte
+	//fetcht 4,mem_24g_mouse_addr
+	call g24_fetch_mem_addr_isub_temp
+	branch g24_ms_ch_num_reinit,zero
+	rtn
+
+g24_dongle_search_addr_check:
+	setarg offset_24g_rx_addr
+	call g24_set_rega_ifetcht_4byte
+	//fetcht 4,mem_24g_rx_addr
+g24_fetch_mem_addr_isub_temp:
+	call g24_fetch_mem_addr
+	//fetch 4,mem_24g_addr
+	isub temp,null
+	rtn
+
+g24_dg_ch_num_reinit:
+	setarg offset_24g_dg_ch_number
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_dg_ch_number
+g24_current_ch_num_reinit:
+	//store 1,mem_24g_current_ch_number
+	add regc,offset_24g_current_ch_number,contw
+	branch g24_contw_istore_1byte
+
+g24_kb_ch_num_reinit:
+	setarg offset_24g_kb_ch_number
+	call g24_set_rega_ifetch_1byte	
+	//fetch 1,mem_24g_kb_ch_number
+	branch g24_current_ch_num_reinit
+g24_ms_ch_num_reinit:
+	setarg offset_24g_ms_ch_number
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ms_ch_number
+	branch g24_current_ch_num_reinit
+
+g24_dongle_search_mode_init:
+	call g24_fetch_mem_dongle_mode_init
+	//fetch 1,mem_dongle_mode_init
+	rtnbit1 DONGLE_SEARCH
+	set1 DONGLE_SEARCH,pdata
+	call g24_store_mem_dongle_mode_init
+	//store 1,mem_dongle_mode_init
+	call g24_set0_mem_time_slice
+	//jam 0,mem_24g_time_slice
+	call g24_set1_mem_ackpayload_enable
+	//jam 1,mem_24g_ackpayload_enable
+	setarg 0
+	add regc,offset_rssi_noise_dg_index,contw
+	istore 3,contw
+	//store 3,mem_rssi_noise_dg_index
+	arg offset_24g_dg_config_ch_once,rega
+	call g24_set_contw_with_temp
+	istore 7,contw
+	//store 7,mem_24g_dg_config_ch_once
+
+	call g24_dongle_search_addr_check
+	nrtn zero
+	add regc,offset_24g_current_ch_number,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_current_ch_number
+	arg offset_24g_dg_ch_number,rega
+	call g24_set_contw_with_regb_store_1byte
+	//store 1,mem_24g_dg_ch_number
+	add regc,offset_24g_ch,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_ch
+	//store 1,mem_24g_dg_last_ch
+	branch g24_store_mem_dg_last_ch
+
+g24_rx_auto_addr_ch_search:
+	bpatch patch18_1,mem_patch18
+	call g24_fetch_mem_time_slice
+	//fetch 1,mem_24g_time_slice
+	increase 1,pdata
+	and_into 3,pdata
+	call g24_store_mem_time_slice
+	//store 1,mem_24g_time_slice
+	//pairing address and channel come first
+	beq 0,g24_rx_auto_bind_config_kb
+	beq 1,g24_rx_auto_bind_config_dongle
+	beq 2,g24_rx_auto_bind_config_mouse
+	beq 3,g24_rx_auto_bind_config_dongle
+	rtn
+
+g24_rx_auto_bind_config_mouse:
+	call g24_dongle_bind_ms_payload_cfg
+	setarg offset_24g_mouse_addr
+	call g24_set_rega_ifetch_4byte
+	//fetch 4,mem_24g_mouse_addr
+	branch g24_rx_auto_addr_ch_search,blank
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	setarg offset_24g_ms_config_ch_once
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ms_config_ch_once
+	call g24_ms_config_ch_once,blank
+	setarg offset_24g_ms_last_ch
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ms_last_ch
+	call g24_store_mem_ch
+	//store 1,mem_24g_ch
+	add regc,offset_rssi_noise_ms_index,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_rssi_noise_ms_index
+	arg mem_rssi_noise_ms_buffer,rega
+	call rssi_noise_store
+	add regc,offset_rssi_noise_ms_index,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_ms_index
+	call g24_noise_rssi_average
+	add regc,offset_rssi_noise_ms_avg,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_ms_avg
+	sub temp,RSSI_THRESH_NOISE,null
+	nrtn positive
+	setarg offset_24g_ms_ch_number	
+	call g24_set_rega_ifetcht_1byte
+	//fetcht 1,mem_24g_ms_ch_number
+	call g24_ch_temp_incre_size4 //map size =4
+	arg offset_24g_ms_ch_number,rega
+	call g24_set_contw_with_regb2
+	istoret 1,contw
+	//storet 1,mem_24g_ms_ch_number
+g24_store_mem_ms_last_ch:
+	//store 1,mem_24g_ms_last_ch
+	arg offset_24g_ms_last_ch,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_ms_config_ch_once:
+	setarg 1
+	arg offset_24g_ms_config_ch_once,rega
+	call g24_set_contw_with_regb_store_1byte
+	//jam 1,mem_24g_ms_config_ch_once
+	arg 0,temp
+	call g24_ch_calc
+	//store 1,mem_24g_ms_last_ch
+	//rtn
+	branch g24_store_mem_ms_last_ch
+	
+g24_rx_auto_bind_config_kb:
+	call g24_dongle_bind_kb_payload_cfg
+	setarg offset_24g_kb_addr
+	call g24_set_rega_ifetch_4byte
+	//fetch 4,mem_24g_kb_addr
+	branch g24_rx_auto_addr_ch_search,blank
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	setarg offset_24g_kb_config_ch_once
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_kb_config_ch_once
+	call g24_kb_config_ch_once,blank
+	setarg offset_24g_kb_last_ch
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_kb_last_ch
+	call g24_store_mem_ch
+	//store 1,mem_24g_ch
+	add regc,offset_rssi_noise_kb_index,rega
+	ifetcht 1,rega	
+	//fetcht 1,mem_rssi_noise_kb_index
+	arg mem_rssi_noise_kb_buffer,rega
+	call rssi_noise_store
+	add regc,offset_rssi_noise_kb_index,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_kb_index
+	call g24_noise_rssi_average
+	add regc,offset_rssi_noise_kb_avg,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_kb_avg
+	sub temp,RSSI_THRESH_NOISE,null
+	nrtn positive
+	setarg offset_24g_kb_ch_number	
+	call g24_set_rega_ifetcht_1byte	
+	//fetcht 1,mem_24g_kb_ch_number
+	call g24_ch_temp_incre_size4 //map size =4
+	arg offset_24g_kb_ch_number,rega
+	call g24_set_contw_with_regb2	
+	istoret 1,contw
+	//storet 1,mem_24g_kb_ch_number
+g24_store_mem_kb_last_ch:
+	//store 1,mem_24g_kb_last_ch
+	arg offset_24g_kb_last_ch,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_kb_config_ch_once:
+	setarg 1
+	arg offset_24g_kb_config_ch_once,rega
+	call g24_set_contw_with_regb_store_1byte
+	//jam 1,mem_24g_kb_config_ch_once
+	arg 0,temp
+	call g24_ch_calc
+	//store 1,mem_24g_kb_last_ch
+	//rtn
+	branch g24_store_mem_kb_last_ch
+
+g24_rx_auto_bind_config_dongle:
+	call g24_dongle_bind_ms_payload_cfg
+	call g24_fetch_mem_rx_addr
+	//fetch 4,mem_24g_rx_addr
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	setarg offset_24g_dg_config_ch_once
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_dg_config_ch_once
+	call g24_dg_config_ch_once,blank
+	call g24_dg_store_config_ch
+	add regc,offset_rssi_noise_dg_index,rega
+	ifetcht 1,rega	
+	//fetcht 1,mem_rssi_noise_dg_index
+	arg mem_rssi_noise_dg_buffer,rega
+	call rssi_noise_store
+	add regc,offset_rssi_noise_dg_index,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_dg_index
+	call g24_noise_rssi_average
+	add regc,offset_rssi_noise_dg_avg,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_dg_avg
+	sub temp,RSSI_THRESH_NOISE,null
+	nrtn positive
+	setarg offset_24g_dg_ch_number	
+	call g24_set_rega_ifetcht_1byte	
+	//fetcht 1,mem_24g_dg_ch_number
+	call g24_ch_temp_incre_size4 //map size =4
+	arg offset_24g_dg_ch_number,rega
+	call g24_set_contw_with_regb2
+	istoret 1,contw
+	//storet 1,mem_24g_dg_ch_number
+g24_store_mem_dg_last_ch:
+	//store 1,mem_24g_dg_last_ch
+	//rtn
+	arg offset_24g_dg_last_ch,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+
+g24_dg_config_ch_once:
+	//jam 1,mem_24g_dg_config_ch_once
+	//fetch 1,mem_24g_dg_last_ch
+	//store 1,mem_24g_ch
+	//rtn
+	setarg 1
+	arg offset_24g_dg_config_ch_once,rega
+	call g24_set_contw_with_regb_store_1byte
+g24_dg_store_config_ch:
+	setarg offset_24g_dg_last_ch
+	call g24_set_rega_ifetch_1byte
+	branch g24_store_mem_ch
+
+
+g24_transmit_ack:
+//data type
+	add regc,offset_24g_rxbuf,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rxbuf
+	call g24_store_mem_data_type
+	//store 1,mem_24g_data_type
+//read len pid crc
+	call g24_read_len_pid_crc
+//read ack
+	call g24_fetch_mem_rxbuf_add1
+	//fetch 1,mem_24g_rxbuf+1
+	isolate1 bit_ack_24g,pdata
+	branch g24tx_no_ack,true
+g24tx_with_ack:
+	call g24_ackpayload_prep
+	call g24_transmit_prep
+	call g24_transmit
+g24tx_no_ack:
+	branch g24_end_of_packet
+
+g24_ackpayload_prep:
+	bpatch patch18_2,mem_patch18
+	add regc,offset_24g_datalen,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_datalen
+	setarg offset_24g_ackpayload_enable
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ackpayload_enable
+	rtn blank
+	setarg 0x06
+	add regc,offset_24g_datalen,contw
+	istore 1,contw
+	//jam 0x06,mem_24g_datalen
+	arg 0x06,loopcnt
+	setarg offset_24g_bind_payload
+	iadd regc,contr
+	//arg mem_24g_bind_payload,contr
+	add regc,offset_24g_txbuf,contw
+	//arg mem_24g_txbuf,contw
+	branch memcpy
+
+
+g24_receive_packet_start:
+	call g24_receive_transmit_ack
+	nbranch g24_rx_interrupt_clear,user3
+	branch g24_receive_packet_parse
+
+g24_receive_transmit_ack:
+	call g24_rx_interrupt_clear
+	call g24_receive_packet
+	nrtn user3
+	branch g24_transmit_ack
+
+g24_receive_packet_parse:
+	bpatch patch18_3,mem_patch18
+	call g24_receive_packet_parse_pid_crc
+	nbranch g24_rx_interrupt_clear,user
+	add regc,offset_24g_rxdata_length,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rxdata_length
+	branch g24_rx_interrupt_clear,blank
+	increase 2,pdata
+	iforce loopcnt
+	add regc,offset_24g_rxbuf,contr
+	//arg mem_24g_rxbuf,contr
+	setarg offset_24g_rxdata_temp
+	iadd regc,contw
+	//arg mem_24g_rxdata_temp,contw
+	call memcpy
+	call g24_set0_mem_mode_switch
+	//jam 0,mem_24g_mode_switch
+	call g24_fetch_mem_pair_mode
+	//fetch 1,mem_24g_pair_mode
+	call g24_enable_nodata_timer,blank
+	setarg offset_24g_rxdata_temp_add2
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_rxdata_temp+2
+	beq 0x01,g24_data_type1
+	beq 0x02,g24_data_type2
+	beq 0x03,g24_data_type3
+	beq 0xff,g24_data_attemp
+	branch g24_rx_interrupt_clear
+
+g24_receive_packet_parse_pid_crc:
+	call g24_head_ptr2regc
+	call disable_user
+	add regc,offset_24g_sta_pid,rega
+	ifetch 1,rega		
+	//fetch 1,mem_24g_sta_pid
+	add regc,offset_24g_last_pid,rega
+	ifetcht 1,rega		
+	//fetcht 1,mem_24g_last_pid
+	isub temp,null
+	ncall enable_user,zero
+	add regc,offset_24g_sta_pid,rega
+	ifetch 1,rega	
+	//fetch 1,mem_24g_sta_pid
+	add regc,offset_24g_last_pid,contw
+	istore 1,contw	
+	//store 1,mem_24g_last_pid
+	add regc,offset_24g_sta_crc,rega
+	ifetch 3,rega	
+	//fetch 3,mem_24g_sta_crc
+	add regc,offset_24g_last_crc,rega
+	ifetcht 3,rega	
+	//fetcht 3,mem_24g_last_crc
+	isub temp,null
+	ncall enable_user,zero
+	add regc,offset_24g_sta_crc,rega
+	ifetch 3,rega
+	//fetch 3,mem_24g_sta_crc
+	add regc,offset_24g_last_crc,contw
+	//store 3,mem_24g_last_crc
+	branch g24_contw_istore_3byte
+
+g24_data_type1:
+	call g24_ch_timer_reinit
+	call g24_fetch_mem_abort_pac
+	store 1,mem_temp
+	//fetch 1,mem_24g_abort_pac
+	call g24_fetcht_mem_rxdata_temp
+	fetch 1,mem_temp
+	//fetcht 1,mem_24g_rxdata_temp
+	isolate1 bit_abort,temp
+	setflag true,0,pdata
+	add regc,offset_24g_abort_pac,contw
+	istore 1,contw
+	//store 1,mem_24g_abort_pac
+	beq 1,g24_data_attemp_mouse
+	call g24_fetch_mem_hop_pac
+	//fetch 1,mem_24g_hop_pac
+	call g24_fetcht_mem_rxdata_temp
+	//fetcht 1,mem_24g_rxdata_temp
+	isolate1 bit_hop,temp
+	setflag true,0,pdata
+	call g24_store_mem_hop_pac
+	//store 1,mem_24g_hop_pac
+	add regc,offset_24g_cb_rxdata_type1,rega
+	ifetch 2,rega
+	//fetch 2,mem_24g_cb_rxdata_type1
+	branch callback_func
+
+dongle_rxdata_type1:
+	setarg MS_REPORT_ID
+	store 1,mem_usb_mouse_data	//report id
+	call g24_fetch_mem_rxdata_temp_add3_7byte
+	//fetch 7,mem_24g_rxdata_temp+3	//key
+	istore 7,contw
+	call g24_fetch_mem_rxdata_temp_add3_7byte
+	//fetch 7,mem_24g_rxdata_temp+3	//key
+	ncall g24_ms_enable_blank_data_forcibly,blank//get kb data
+	call g24_fetch_mem_rxdata_temp_add3_7byte
+	//fetch 7,mem_24g_rxdata_temp+3	//key
+	call g24_ms_disable_blank_data_forcibly,blank
+g24_data_type1_usbtx_enable:
+	jam USB_EP2_MS,mem_usb_ep2_data
+g24_data_type1_usbtx_enable_ep2:	
+	fetch 1,mem_usb_tx_enable
+	set1 2,pdata
+	store 1,mem_usb_tx_enable
+	rtn
+	
+g24_ms_enable_blank_data_forcibly:
+	setarg 1
+	call g24_store_mem_ms_blank_data_enable	
+	//jam 1,mem_24g_ms_blank_data_enable
+g24_ms_enable_blank_data_timer:
+	setarg TIMER_MS_BLANK_DELAY
+	arg TIMER_MS_BLANK,queue
+	branch timer_init
+g24_ms_disable_blank_data_forcibly:
+	call g24_set0_mem_ms_blank_data_enable
+	//jam 0,mem_24g_ms_blank_data_enable
+g24_ms_disable_blank_data_timer:	
+	setarg 0
+	arg TIMER_MS_BLANK,queue
+	branch timer_init
+	
+g24_data_type2:
+	call g24_fetcht_mem_rxdata_temp
+	//fetcht 1,mem_24g_rxdata_temp
+	isolate1 bit_abort,temp
+	branch g24_data_attemp_kbd,true
+	arg mem_usb_kb_data,contw
+	call g24_data_type2_reverse_data
+	fetch 8,mem_usb_kb_data
+	ncall g24_kb_enable_blank_data_forcibly,blank//get kb data
+	fetch 8,mem_usb_kb_data
+	call g24_kb_disable_blank_data_forcibly,blank
+	call g24_head_ptr2regc
+	fetch 8,mem_usb_kb_data
+	arg offset_24g_kb_data_sta_data,rega
+	call g24_set_contw_with_temp
+	istore 8,contw
+	//store 8,mem_24g_kb_data_sta_data
+	setarg offset_24g_kb_data_last_data
+	iadd regc,rega
+	ifetcht 8,rega
+	//fetcht 8,mem_24g_kb_data_last_data
+	isub temp,null
+	ncall g24_kb_data_dispose,zero
+	setarg offset_24g_kb_data_sta_data
+	iadd regc,rega
+	ifetch 8,rega
+	//fetch 8,mem_24g_kb_data_sta_data
+	arg offset_24g_kb_data_last_data,rega
+	call g24_set_contw_with_temp
+	istore 8,contw
+	//store 8,mem_24g_kb_data_last_data
+	branch g24_rx_interrupt_clear
+
+g24_data_type2_reverse_data:
+	setarg offset_24g_rxdata_temp_add2
+	iadd regc,contr
+	//arg mem_24g_rxdata_temp+2,contr
+	arg 9,loopcnt
+	branch reverse_byte
+
+g24_kb_enable_blank_data_forcibly:
+	setarg 1
+	call g24_store_mem_kb_blank_data_enable
+	//jam 1,mem_24g_kb_blank_data_enable
+g24_kb_enable_blank_data_timer:	
+	setarg TIMER_KB_BLANK_DELAY
+	arg TIMER_KB_BLANK,queue
+	branch timer_init
+
+g24_kb_disable_blank_data_forcibly:
+	call g24_set0_mem_kb_blank_data_enable
+	//jam 0,mem_24g_kb_blank_data_enable
+g24_kb_disable_blank_data_timer:	
+	setarg 0
+	arg TIMER_KB_BLANK,queue
+	branch timer_init
+
+g24_kb_data_dispose:
+g24_kb_data_into_ep1_fifo:
+	jam USB_EP1_KB,mem_usb_ep1_data
+	fetch 1,mem_usb_tx_enable
+	set1 1,pdata
+	store 1,mem_usb_tx_enable
+	rtn
+
+g24_data_type3:
+	arg mem_usb_kb_multikey,contw
+	call g24_data_type2_reverse_data
+	fetch 2,mem_usb_kb_multikey+1
+	ncall g24_kb_mul_enable_blank_data_forcibly,blank//get multikey data
+	fetch 2,mem_usb_kb_multikey+1
+	call g24_kb_mul_disable_blank_data_forcibly,blank
+	call g24_head_ptr2regc
+	fetch 3,mem_usb_kb_multikey
+	arg offset_24g_kb_multikey_sta_data,rega
+	call g24_set_contw_with_temp_store_3byte
+	//store 3,mem_24g_kb_multikey_sta_data
+	setarg offset_24g_kb_multikey_last_data
+	iadd regc,rega
+	ifetcht 3,rega
+	//fetcht 3,mem_24g_kb_multikey_last_data
+	isub temp,null
+	ncall g24_kb_mul_data_into_ep2_fifo,zero
+	setarg offset_24g_kb_multikey_sta_data
+	iadd regc,rega
+	ifetch 3,rega
+	//fetch 3,mem_24g_kb_multikey_sta_data
+	arg offset_24g_kb_multikey_last_data,rega
+	call g24_set_contw_with_temp_store_3byte
+	//store 3,mem_24g_kb_multikey_last_data
+	branch g24_rx_interrupt_clear
+
+g24_kb_mul_data_into_ep2_fifo:
+	jam USB_EP2_MULTIKEY,mem_usb_ep2_data
+	branch g24_data_type1_usbtx_enable_ep2
+
+g24_kb_mul_enable_blank_data_forcibly:
+	setarg 1
+	call g24_store_mem_kb_mul_blank_data_enable
+	//jam 1,mem_24g_kb_mul_blank_data_enable
+g24_kb_mul_enable_blank_data_timer:	
+	setarg TIMER_KB_MUL_BLANK_DELAY
+	arg TIMER_KB_MUL_BLANK,queue
+	branch timer_init
+
+g24_kb_mul_disable_blank_data_forcibly:
+	call g24_set0_mem_kb_mul_blank_data_enable
+	//jam 0,mem_24g_kb_mul_blank_data_enable
+g24_kb_mul_disable_blank_data_timer:	
+	setarg 0
+	arg TIMER_KB_MUL_BLANK,queue
+	branch timer_init
+	
+g24_data_attemp:
+	call g24_fetch_mem_rxdata_temp_add3_1byte
+	//fetch 1,mem_24g_rxdata_temp+3
+	beq DATATYPE_MOUSE,g24_data_attemp_mouse
+	beq DATATYPE_KEYBOARD,g24_data_attemp_kbd
+	rtn
+g24_data_attemp_mouse:
+	setarg offset_24g_rxdata_temp_add4
+	call g24_set_rega_ifetch_4byte
+	arg offset_24g_mouse_addr,rega
+	call g24_set_contw_with_temp
+	//fetch 4,mem_24g_rxdata_temp+4
+	//store 4,mem_24g_mouse_addr
+	branch g24_contw_istore_4byte
+
+g24_data_attemp_kbd:
+	setarg offset_24g_rxdata_temp_add4
+	call g24_set_rega_ifetch_4byte
+	arg offset_24g_kb_addr,rega
+	call g24_set_contw_with_temp
+	//fetch 4,mem_24g_rxdata_temp+4
+	//store 4,mem_24g_kb_addr
+	branch g24_contw_istore_4byte
+
+g24_store_mem_24g_mode:
+	call g24_head_ptr2regc
+	add regc,offset_24g_mode,contw
+	istore 1,contw
+	rtn
+
+g24_fetch_mem_device_addr:
+	call g24_head_ptr2regc
+	add regc,offset_24g_device_addr,rega
+	branch g24_rega_ifetch_4byte
+g24_store_mem_device_addr:
+	call g24_head_ptr2regc
+	add regc,offset_24g_device_addr,contw
+	branch g24_contw_istore_4byte
+
+g24_fetch_mem_addr:
+	add regc,offset_24g_addr,rega
+	branch g24_rega_ifetch_4byte
+g24_store_mem_addr:
+	add regc,offset_24g_addr,contw
+g24_contw_istore_4byte:	
+	istore 4,contw
+	rtn
+
+g24_store_mem_ch:
+	add regc,offset_24g_ch,contw
+	branch g24_contw_istore_1byte
+
+g24_set0_mem_pid:
+	setarg 0
+g24_store_mem_pid:
+	call g24_head_ptr2regc
+	add regc,offset_24g_pid,contw
+	branch g24_contw_istore_1byte
+
+g24_store_mem_txpayload:
+	add regc,offset_24g_txpayload,contw
+	branch g24_contw_istore_1byte
+
+g24_set4_mem_max_retry:
+	setarg 4
+g24_store_mem_max_retry:
+	add regc,offset_24g_max_retry,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_data_type:
+	add regc,offset_24g_data_type,rega
+	branch g24_rega_ifetch_1byte
+g24_store_mem_data_type:
+	add regc,offset_24g_data_type,contw
+	branch g24_contw_istore_1byte
+
+g24_set2_mem_sync_cnt:
+	setarg 2
+g24_store_mem_sync_cnt:
+	add regc,offset_24g_sync_cnt,contw
+	branch g24_contw_istore_1byte
+
+g24_set1_mem_rf_last_sta:
+	setarg 1
+g24_store_mem_rf_last_sta:
+	call g24_head_ptr2regc
+	add regc,offset_24g_rf_last_sta,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_hop_pac:
+	call g24_head_ptr2regc
+	add regc,offset_24g_hop_pac,rega
+	branch g24_rega_ifetch_1byte
+g24_set1_mem_hop_pac:
+	setarg 1
+g24_store_mem_hop_pac:
+	call g24_head_ptr2regc
+	add regc,offset_24g_hop_pac,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_abort_pac:
+	call g24_head_ptr2regc
+	add regc,offset_24g_abort_pac,rega
+	branch g24_rega_ifetch_1byte
+g24_set1_mem_abort_pac:
+	setarg 1
+g24_store_mem_abort_pac:
+	call g24_head_ptr2regc
+	add regc,offset_24g_abort_pac,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_pairing_sm:
+	call g24_head_ptr2regc
+	add regc,offset_24g_pairing_sm,rega
+	branch g24_rega_ifetch_1byte
+g24_store_mem_pairing_sm:
+	add regc,offset_24g_pairing_sm,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_rf_hop_ch:
+	add regc,offset_24g_rf_hop_ch,rega
+	branch g24_rega_ifetch_1byte
+g24_set0_mem_rf_hop_ch:
+	setarg 0
+g24_store_mem_rf_hop_ch:
+	add regc,offset_24g_rf_hop_ch,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_rf_work_stage:
+	add regc,offset_24g_rf_work_stage,rega
+	branch g24_rega_ifetch_1byte
+	
+g24_fetch_mem_rxbuf_add1:
+	add regc,offset_24g_rxbuf_add1,rega
+	branch g24_rega_ifetch_1byte
+
+g24_fetch_mem_check_dongle_times:
+	add regc,offset_24g_check_dongle_times,rega
+	branch g24_rega_ifetch_1byte
+g24_set0_mem_check_dongle_times:
+	setarg 0
+g24_store_mem_check_dongle_times:
+	call g24_head_ptr2regc
+	add regc,offset_24g_check_dongle_times,contw
+	branch g24_contw_istore_1byte
+
+g24_store_mem_tx_power:
+	call g24_head_ptr2regc
+	add regc,offset_tx_power_temp,rega
+	ifetch 1,rega
+g24_store_mem_txpower:
+	store 1,mem_tx_power
+	rtn
+
+g24_store_mem_tx_power_temp:
+	call g24_head_ptr2regc
+	fetch 1,mem_tx_power
+	//store 1,mem_tx_power_temp
+	add regc,offset_tx_power_temp,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_power_ctrl_pac:	
+	add regc,offset_power_ctrl_packet_cnt,rega
+	branch g24_rega_ifetch_1byte
+
+g24_store_mem_power_ctrl_level:
+	add regc,offset_power_ctrl_level,contw
+	branch g24_contw_istore_1byte
+
+g24_fetcht_mem_rxdata_temp:
+	setarg offset_24g_rxdata_temp
+g24_set_rega_ifetcht_1byte:	
+	iadd regc,rega
+	ifetcht 1,rega
+	rtn
+
+g24_fetch_mem_rf_laststa:
+	setarg offset_24g_rf_laststa
+	branch g24_set_rega_ifetch_1byte
+g24_set0_mem_rf_laststa:
+	setarg 0
+g24_store_mem_rf_laststa:
+	arg offset_24g_rf_laststa,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_fetch_mem_rx_addr:
+	setarg offset_24g_rx_addr
+g24_set_rega_ifetch_4byte:	
+	call g24_set_rega
+g24_rega_ifetch_4byte:
+	ifetch 4,rega
+	rtn
+
+g24_fetch_mem_time_slice:
+	setarg offset_24g_time_slice
+	branch g24_set_rega_ifetch_1byte
+g24_set0_mem_time_slice:
+	setarg 0
+g24_store_mem_time_slice:
+	arg offset_24g_time_slice,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_set0_mem_mode_switch:
+	setarg 0
+g24_store_mem_mode_switch:
+	arg offset_24g_mode_switch,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_store_mem_bind_payload:
+	arg offset_24g_bind_payload,rega
+	branch g24_set_contw_with_regb_store_1byte	
+	
+g24_fetch_mem_bind_device_status:
+	setarg offset_dongle_bind_device_status
+	branch g24_set_rega_ifetch_1byte
+g24_store_mem_bind_device_status:
+	arg offset_dongle_bind_device_status,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_fetch_mem_dongle_work_mode:
+	setarg offset_dongle_work_mode
+	branch g24_set_rega_ifetch_1byte
+g24_set_work_mem_dongle_work_mode:
+	setarg DONGLE_WORK
+g24_store_mem_dongle_work_mode:
+	arg offset_dongle_work_mode,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_fetch_mem_dongle_mode_init:
+	setarg offset_dongle_mode_init
+	branch g24_set_rega_ifetch_1byte
+g24_set0_mem_dongle_mode_init:
+	setarg CLEAR_INIT
+g24_store_mem_dongle_mode_init:
+	arg offset_dongle_mode_init,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_set0_mem_ackpayload_enable:
+	setarg 0
+g24_store_mem_ackpayload_enable:
+	arg offset_24g_ackpayload_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+g24_set1_mem_ackpayload_enable:
+	setarg 1
+	branch g24_store_mem_ackpayload_enable
+
+g24_fetch_mem_rxdata_temp_add3_7byte:
+	setarg offset_24g_rxdata_temp_add3
+	call g24_set_rega
+	ifetch 7,rega
+	rtn
+
+g24_fetch_mem_nodata_timer_enable:
+	setarg offset_24g_nodata_timer_enable
+	branch g24_set_rega_ifetch_1byte
+g24_set0_mem_nodata_timer_enable:
+	setarg 0
+g24_store_mem_nodata_timer_enable:
+	arg offset_24g_nodata_timer_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_set0_mem_ms_blank_data_enable:
+	setarg 0
+g24_store_mem_ms_blank_data_enable:
+	arg offset_24g_ms_blank_data_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_set0_mem_kb_blank_data_enable:
+	setarg 0
+g24_store_mem_kb_blank_data_enable:
+	arg offset_24g_kb_blank_data_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_set0_mem_kb_mul_blank_data_enable:
+	setarg 0
+g24_store_mem_kb_mul_blank_data_enable:
+	arg offset_24g_kb_mul_blank_data_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_store_mem_power_ctrl_threshold_up:
+	arg offset_power_ctrl_threshold_up,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_store_mem_power_ctrl_threshold_down:
+	arg offset_power_ctrl_threshold_down,rega
+g24_set_contw_with_regb_store_1byte:
+	call g24_set_contw_with_regb
+g24_contw_istore_1byte:
+	istore 1,contw
+	rtn
+
+g24_fetch_mem_pair_mode:
+	setarg offset_24g_pair_mode
+	branch g24_set_rega_ifetch_1byte
+
+g24_store_mem_pair_mode:
+	arg offset_24g_pair_mode,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_store_mem_pair_txpower:
+	setarg offset_24g_pair_txpower
+	call g24_set_rega_ifetch_1byte
+	branch g24_store_mem_txpower
+
+g24_fetch_mem_rxdata_temp_add3_1byte:
+	setarg offset_24g_rxdata_temp_add3
+	branch g24_set_rega_ifetch_1byte
+
+g24_set_contw_with_temp:
+	copy pdata,temp
+	copy rega,pdata
+	iadd regc,contw
+	copy temp,pdata
+	rtn
+	
+g24_set_contw_with_temp_store_3byte:
+	call g24_set_contw_with_temp
+g24_contw_istore_3byte:	
+	istore 3,contw
+	rtn
+
+g24_set_contw_with_regb:
+	call g24_head_ptr2regc
+g24_set_contw_with_regb2:
+	copy pdata,regb
+	copy rega,pdata
+	iadd regc,contw
+	copy regb,pdata
+	rtn
+
+g24_set_rega:
+	call g24_head_ptr2regc
+	iadd regc,rega
+	rtn
+
+g24_set_rega_ifetch_1byte:
+	call g24_set_rega
+g24_rega_ifetch_1byte:
+	ifetch 1,rega
+	rtn
+
+g24_set_rega_ifetcht_4byte:
+	call g24_set_rega
+	ifetcht 4,rega
+	rtn
+
+g24_mem_set0:
+	setarg 0
+	branch g24_contw_istore_1byte
+
+endif
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app.prog	(working copy)
@@ -0,0 +1,576 @@
+app_init:
+	bpatch patch18_4,mem_patch18
+	fetch 1,mem_device_option
+	branch app_init,blank				/* wait ram to be initialized */
+//	beq dvc_op_ukey,le_ukey_init
+	beq dvc_op_dongle,dongle_init
+	beq dvc_op_AntiLost,antilost_init
+	beq dvc_op_shutter,shutter_init
+	beq dvc_op_module,module_init
+	beq dvc_op_car,car_init
+	beq dvc_op_remote_car,remote_car_init
+	bbit1 dvc_op_mouse,mouse_init
+	rtn
+	
+app_lpm_init:
+	bpatch patch18_5,mem_patch18
+	jam 0,mem_tester_emulate
+	jam 0,mem_debug_config
+	jam 0, mem_lch_code
+	setarg 0
+	store 5,mem_sp_state_start
+	fetch 1,mem_device_option
+	branch app_lpm_init,blank				/* wait ram to be initialized */
+	beq dvc_op_module,module_lpm_init
+app_lpm_init0:
+	rtn
+
+	
+app_process_idle:
+	call ui_dispatch
+	call check_51cmd
+	call app_process_bb_event
+	fetch 2,mem_cb_idle_process
+	branch callback_func
+	
+app_process_bt:
+	fetch 2,mem_cb_bt_process
+	branch callback_func
+	
+app_process_ble:
+	fetch 2,mem_cb_le_process
+	branch callback_func
+
+app_process_bb_event:
+	bpatch patch18_6,mem_patch18
+	//return if c51 need to process bb event
+	arg mem_ipc_fifo_bt2c51,rega
+	call fifo_out
+	rtn blank
+	//reaching here mains c51 cannot get bb event.
+	copy pdata,regc
+	call app_event_normal_process
+	branch app_process_bb_event_priority
+	
+app_discard_event:
+	arg 0,regc
+	rtn
+
+//************************************************//
+//*APP BB EVENT NORMAL PROCESS**//
+//************************************************//
+app_event_normal_process:
+	beq BT_EVT_BB_CONNECTED,app_evt_bt_conn
+	beq BT_EVT_BUTTON_LONG_PRESSED,app_evt_button_long_pressed
+	beq BT_EVT_SETUP_COMPLETE,app_evt_setup_complete
+	beq BT_EVT_HID_HANDSHAKE,app_evt_hid_handshake
+	beq BT_EVT_HID_CONNECTED,app_bb_event_hid_connected
+	beq BT_EVT_RECONN_FAILED,app_bb_event_reconn_failed
+	beq BT_EVT_BB_DISCONNECTED,app_bb_event_bb_disconn
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,app_bb_event_reconn_failed	
+	beq BT_EVT_LE_CONNECTED,app_le_event_bb_connected
+	beq BT_EVT_LE_DISCONNECTED,app_le_event_bb_disconn
+	beq BT_EVT_RECONN_STARTED,app_event_reconn_start
+	beq BT_EVT_ENTER_SNIFF,app_event_enter_sniff
+	beq BT_EVT_EXIT_SNIFF,app_event_exit_sniff
+	
+	beq BT_EVT_ML2CAP_CONN_REFUSED,app_event_ml2cap_conn_refused
+	beq BT_EVT_LINKKEY_GENERATE,app_event_linkkey_generate
+	beq BT_EVT_SWITCH_FAIL_MASTER,app_event_switch_fail_master
+	beq BT_EVT_SWITCH_SUCCESS_MASTER,app_event_switch_success
+	rtn
+
+
+app_evt_bt_conn:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_CONNECTED,pdata
+	store 2,mem_ui_state_map
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set0 APP_DISC_BY_BUTTON ,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+app_event_switch_success:
+	jam 0,mem_switch_fail_master_count
+	rtn	
+
+app_event_switch_fail_master:
+	fetch 1,mem_switch_fail_master_count
+	increase 1,pdata
+	store 1,mem_switch_fail_master_count
+	sub pdata,1,null
+	branch app_bt_role_switch,positive
+	jam 0,mem_switch_fail_master_count
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_SWITCH_FAIL,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	branch app_bt_disconnect
+	
+app_process_bb_event_priority:
+	fetch 2,mem_cb_bb_event_process
+	branch callback_func
+
+app_check_wake_lock:
+	fetch 2,mem_cb_check_wakelock
+	branch callback_func
+	
+app_will_enter_lpm:
+	fetch 2,mem_cb_before_lpm
+	branch callback_func
+
+app_event_linkkey_generate:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_AFTER_PAIRING ,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	branch app_bt_store_reconn_info
+	
+app_event_reconn_start:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_RECONNECT,pdata
+	store 2,mem_ui_state_map
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_AFTER_RECONN,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+app_evt_setup_complete:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_SETUP_COMPLETE,pdata
+	store 2,mem_ui_state_map
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_AFTER_SETUP_DONE,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+app_evt_hid_handshake:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_HID_HANDSHAKE,pdata
+	store 2,mem_ui_state_map
+	rtn
+	
+app_event_enter_sniff:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_SNIFF,pdata
+	store 2,mem_ui_state_map
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_AFTER_SNIFF,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+	
+app_event_exit_sniff:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BT_SNIFF,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+app_le_event_bb_connected:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BLE_CONNECTED,pdata
+	store 2,mem_ui_state_map
+	rtn
+	
+app_le_event_bb_disconn:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BLE_CONNECTED,pdata
+	store 2,mem_ui_state_map
+	branch app_lpm_mult_disable
+	
+app_bb_event_hid_connected:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_HID_CONN,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+app_evt_button_long_pressed:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_BY_BUTTON,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+	
+app_event_ml2cap_conn_refused:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_L2CAP_REFUSED,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	branch  app_bt_disconnect
+
+
+app_evt_timer:
+	bpatch patch18_7,mem_patch18
+	store 1,mem_app_evt_timer_count
+app_evt_100ms_loop:
+	fetch 1,mem_app_evt_timer_count
+	rtn blank
+	increase -1,pdata
+	store 1,mem_app_evt_timer_count
+	call ui_button_polling
+	call app_lpm_wake_auto_lock_timer
+	call app_unsniff_delay_timer
+	call app_discovery_timer
+	call flash_write_spi_sm_timer
+	fetch 2,mem_cb_event_timer
+	call callback_func
+	branch app_evt_100ms_loop
+
+
+//regc:timer addr
+//regb:timer up call back fuction
+timer_single_step:
+	ifetch 1,regc
+	rtn blank
+	pincrease -1
+	istore 1,regc
+	nrtn blank
+	copy regb,pdata
+	branch callback_func
+
+//regc:timer addr
+//regb:timer up call back fuction
+timer_single_step_2B:
+	ifetch 2,regc
+	rtn blank
+	pincrease -1
+	istore 2,regc
+	nrtn blank
+	copy regb,pdata
+	branch callback_func
+	
+app_power_timer:
+	fetcht 2,mem_power_param_ptr
+	add temp,power_timer_offset,regc
+	arg app_power_timer_timeout,regb
+	branch timer_single_step
+	
+app_power_timer_timeout:
+	call app_got_power_state_common
+	beq POWER_STARTING,app_enter_power_stanby_state
+app_enter_power_off_state:
+	branch app_enter_hibernate
+app_enter_power_stanby_state:
+	setarg POWER_STANDBY
+	istore 1,regc
+	add temp,power_standby_cb_offset,regb
+app_power_cb_common:
+	ifetch 2,regb
+	branch callback_func
+
+app_unsniff_delay_timer:
+	arg mem_unsniff2sniff_timer_count,regc
+	arg app_unsniff_delay_timeout,regb
+	branch timer_single_step
+	
+app_unsniff_delay_timeout:
+	call context_check_idle
+	branch app_bt_enter_sniff,zero
+	rtn
+
+
+app_discovery_timer:
+	arg mem_discovery_timeout_timer_count,regc
+	arg app_discovery_timeout,regb
+	branch timer_single_step_2B
+	
+app_discovery_timeout:
+	call app_bt_stop_discovery
+	call app_led_off
+	fetch 2,mem_cb_discovry_timeout
+	branch callback_func
+
+	
+app_bb_event_reconn_failed:
+	call app_disconn_reason_flag_clear
+app_clear_reconnect_flag:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BT_RECONNECT,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+app_bb_event_bb_disconn:
+	jam 0,mem_unsniff2sniff_timer_count
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_RECONNECT,app_bb_event_bb_reconn_disconn
+	isolate0 UI_STATE_BT_SETUP_COMPLETE,pdata
+ 	call app_discard_event,true
+app_bb_event_bb_reconn_disconn:
+	bpatch patch19_0,mem_patch19
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BT_CONNECTED,pdata
+	set0 UI_STATE_BT_SETUP_COMPLETE,pdata
+	set0 UI_STATE_BT_HID_CONN,pdata
+	set0 UI_STATE_BT_HID_HANDSHAKE,pdata
+	set0 UI_STATE_BT_RECONNECT,pdata
+	store 2,mem_ui_state_map
+	branch app_lpm_mult_disable
+	
+app_bb_hibernate:
+	call app_disconn_reason_clear
+	branch app_enter_hibernate
+
+	
+app_disconn_reason_clear:
+	setarg 0
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	rtn
+app_disconn_reason_flag_clear:
+	setarg 0
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+app_disconn_reason_collect_bt:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	setarg 0
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+	
+app_disconn_reason_collect_ble:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_BLE,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	setarg 0
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+	
+//************************************************//
+//********APP SHARED FUNCSIONS*******//
+//************************************************//
+
+
+app_check_sniff:
+	fetch 1,mem_ui_state_map
+	isolate1 UI_STATE_BT_SNIFF,pdata
+	rtn
+
+//*****************************************//
+//*****************API********************//
+//*****************************************//
+//app_clearflag_store:
+//	setarg 0
+//	branch app_flag_store
+app_initflag_store:
+	setarg EEPROM_INIT_FLAG
+app_flag_store:
+	store 2,mem_timeup
+	bpatch patch19_1,mem_patch19
+	arg 2,temp
+	arg mem_timeup,rega
+	arg eeprom_module_init_flag,regb
+	branch iicd_write_eep_data
+
+//initflag is in eeprom to sure is eeprom nead to init
+app_initflag_check:
+	bpatch patch19_2,mem_patch19
+	arg 2,temp
+	arg mem_pdatatemp,rega
+	arg eeprom_module_init_flag,regb
+	call iicd_read_eep_data
+	fetch 2,mem_pdatatemp
+	arg EEPROM_INIT_FLAG,temp
+	isub  temp,null
+	rtn
+
+
+app_start_auto_sniff:
+	fetch 1,mem_unsniff2sniff_timer
+	store 1,mem_unsniff2sniff_timer_count
+	rtn	
+	
+app_get_lpm_wake_lock:
+	arg wake_lock_app,queue
+	branch lpm_get_wake_lock
+
+app_put_lpm_wake_lock:
+	arg wake_lock_app,queue
+	branch lpm_put_wake_lock
+	
+app_lpm_wake_auto_lock:
+	jam  LPM_WAKE_UP_DELAY_TIMER,mem_wake_up_delay_timer
+	branch app_get_lpm_wake_lock
+	
+app_lpm_wake_auto_lock_timer:
+	arg mem_wake_up_delay_timer,regc
+	arg app_put_lpm_wake_lock,regb
+	branch timer_single_step
+
+app_l2cap_flow_control_enable:
+	jam L2CAP_FLOW_CTRL_ENABLE,mem_l2cap_flow_ctrl_flag
+	rtn
+
+app_l2cap_flow_control_disable:
+	jam L2CAP_FLOW_CTRL_DISABLE,mem_l2cap_flow_ctrl_flag
+	rtn
+	
+app_bt_set_pincode:
+	jam BT_CMD_SET_PIN_CODE,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_bt_role_switch:
+	jam BT_CMD_ROLE_SWITCH,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_bt_start_reconnect:
+	bpatch patch19_3,mem_patch19
+	fetch 1,mem_app_connection_options
+	store 1,mem_connection_options
+	jam APP_FLAG_RECONNECT,mem_reconnect_flag
+	jam BT_CMD_RECONNECT,mem_fifo_temp
+	branch ui_ipc_send_cmd	
+	
+app_bt_reconnect_cancel:
+	jam BT_CMD_BB_RECONN_CANCEL,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_bt_disconnect:
+	jam BT_CMD_DISCONNECT,mem_fifo_temp
+	branch ui_ipc_send_cmd	
+
+app_bt_start_discovery_short:
+	fetch 2,mem_discovery_timeout
+	store 2,mem_discovery_timeout_timer_count
+app_bt_start_discovery_led_blink:
+	call app_led_start_blink
+app_bt_start_discovery:
+	jam BT_CMD_START_DISCOVERY,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_bt_stop_discovery:
+	setarg 0
+	store 2,mem_discovery_timeout_timer_count
+	jam BT_CMD_STOP_DISCOVERY,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_start_direct_adv:
+	jam BT_CMD_START_DIRECT_ADV,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_ble_stop_direct_adv:
+	jam BT_CMD_STOP_DIRECT_ADV,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_stop_adv:
+	jam BT_CMD_STOP_ADV,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_start_adv:	
+	jam BT_CMD_START_ADV,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_start_scan:
+	jam BT_CMD_LE_START_SCAN,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_stop_scan:
+	jam BT_CMD_LE_STOP_SCAN,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_start_conn:
+	jam BT_CMD_LE_START_CONN,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_disconnect:
+	jam BT_CMD_LE_DISCONNECT,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_led_start_blink:	
+	jam BT_CMD_LED_BLINK,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_led_on:
+	jam BT_CMD_LED_ON,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_led_stop_blink:
+app_led_off:
+	jam BT_CMD_LED_OFF,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_enter_hibernate:
+	jam BT_CMD_ENTER_HIBERNATE,mem_fifo_temp 
+	branch ui_ipc_send_cmd
+	
+app_bt_sniff_exit:
+	jam BT_CMD_EXIT_SNIFF,mem_fifo_temp
+	branch  ui_ipc_send_cmd
+	
+app_bt_enter_sniff:
+	jam BT_CMD_ENTER_SNIFF,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_ble_store_reconn_info:
+	jam BT_CMD_STORE_RECONN_INFO_LE,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_bt_store_reconn_info:
+	jam BT_CMD_STORE_RECONN_INFO_BT,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_store_reconn_info:
+	jam BT_CMD_STORE_RECONN_INFO,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_lpm_mult_enable:
+	set1 mark_lpm_mult_enable,mark
+	rtn
+
+app_lpm_mult_disable:
+	set0 mark_lpm_mult_enable,mark
+	rtn
+
+
+/*
+
+mem_power_param struct
+{
+	usigned char     mem_power_state
+	usigned char     mem_power_timer
+	usigned char	 mem_power_off_timeout
+	usigned char	 mem_power_starting_timeout
+	usigned long	 mem_power_off_cb
+	usigned long	 mem_power_starting_cb
+	usigned long	 mem_power_standby_cb
+	usigned long 	 mem_ui_butten_up_cb
+}
+    	functions:power state switching by mem_app_power_timer timeout or by button_long_pressed event
+    	(power off -> power starting->power standby->power off) and power timer initialization 
+ input parameters:mem_power_param_ptr should be point to the variable(mem_power_param) address where the input parameters stored in with its format
+output parameters:switched power state will be stored in variable mem_power_state*/
+app_button_long_pressed:
+	call app_got_power_state_common
+	beq POWER_STANDBY,app_power_shutting_down
+app_power_starting:
+	setarg POWER_STARTING
+	istore 1,regc
+	add temp,power_starting_timeout_offset,rega
+	add temp,power_starting_cb_offset,regb
+app_power_common:
+	ifetcht 1,rega
+	increase 1,regc
+	istoret 1,regc
+	branch app_power_cb_common
+	
+app_power_shutting_down:
+	setarg POWER_OFF
+	istore 1,regc
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,app_power_off_end
+	call app_ble_disconnect
+app_power_off_end:
+	fetcht 2,mem_power_param_ptr
+	add temp,power_off_timeout_offset,rega
+	add temp,power_off_cb_offset,regb
+	branch app_power_common
+	
+app_got_power_state_common:
+	fetcht 2,mem_power_param_ptr
+	add temp,power_state_offset,regc
+	ifetch 1,regc
+	rtn
+
+app_event_button_up:
+	call app_got_power_state_common
+	bne POWER_OFF,app_power_release
+	branch app_enter_hibernate
+app_power_release:
+	add temp,ui_butten_up_cb_offset,regb
+	branch app_power_cb_common
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_antiLost.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_antiLost.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_antiLost.prog	(working copy)
@@ -0,0 +1,565 @@
+ifdef COMPILE_AntiLost
+antilost_init:
+	rtn wake	
+	jam 0x00,core_gpio_sel1//1: GPIO[26:25] is two wire SPI, 2: GPIO[26:23] is SPI, 3: GPIO[26:23] is PCM
+	setarg antilost_le_before_hibernate
+	store 2,mem_cb_before_hibernate
+	setarg keyscan_process_lpm_before
+	store 2,mem_cb_before_lpm
+	setarg antilost_idle_process	//
+	store 2,mem_cb_idle_process
+	setarg antilost_le_conn_process	//
+	store 2,mem_cb_le_process
+	setarg antilost_bb_event_process 
+	store 2,mem_cb_bb_event_process
+	setarg antilost_le_bb_event_timer
+	store 2,mem_cb_event_timer
+	setarg antilost_le_notification
+	store 2,mem_cb_ble_transmit
+	setarg antilost_lpm_lock_process
+	store 2,mem_cb_check_wakelock
+	setarg antilost_le_receive_data_process
+	store 2,mem_cb_att_write
+	bpatch patch19_4,mem_patch19
+	call antilost_buzzer_pwm_init
+	call keyscan_key_init
+	call antilost_adc_init
+	call ui_led_init_global
+	call ui_button_init
+	setarg antilost_key_up_down
+	store 2,mem_cb_antl_key
+	setarg antilost_power_off_cb
+	store 2,mem_antl_power_off_cb
+	setarg antilost_power_starting_cb
+	store 2,mem_antl_power_starting_cb
+	setarg antilost_power_standby_cb
+	store 2,mem_antl_power_standby_cb
+	setarg antilost_led_on_cb
+	store 2,mem_antl_led_cb_on
+	setarg antilost_led_off_cb
+	store 2,mem_antl_led_cb_off
+	setarg antilost_buzzer_on
+	store 2,mem_antl_buzzer_cb_on
+	setarg antilost_buzzer_off
+	store 2,mem_antl_buzzer_cb_off
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+	branch app_enter_hibernate
+
+antilost_le_before_hibernate:
+	call antilost_led_buzzer_stop_blink
+	branch  app_enter_hibernate
+
+antilost_le_notification:
+	call le_fifo_check_nearly_full
+	nrtn blank
+	arg mem_temp_block5,rega
+	call queue_pop
+	nrtn user
+	arg mem_temp_block5,contr
+	branch le_send_notify_from_list
+
+antilost_power_standby_cb:
+	fetch 2,mem_antl_le_sleep_timeout
+	store 2,mem_antl_le_sleep_timer
+	jam 1,mem_antl_key_scan_enable
+	branch antilost_fast_adv_start
+	
+antilost_lpm_lock_process:
+	fetch 1,mem_antl_key_state
+	beq 1,antilost_lpm_ctrl_for_led_buzzer
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,antilost_lpm_ctrl_for_led_buzzer
+	fetch 1,mem_antl_lost_mode
+	beq 1,app_get_lpm_wake_lock
+	fetch 1, mem_antl_queue_curr_num
+	nbranch app_get_lpm_wake_lock,blank 
+	branch app_put_lpm_wake_lock
+	
+antilost_lpm_ctrl_for_led_buzzer:
+	fetch 1,mem_antl_led_state
+	fetcht 1,mem_antl_buzzer_state
+	ior temp,pdata
+	beq 1,app_get_lpm_wake_lock
+	branch app_put_lpm_wake_lock
+
+antilost_bb_event_process:
+	copy regc,pdata
+	beq BT_EVT_BUTTON_UP,app_event_button_up
+	beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed
+	beq BT_EVT_LE_CONNECTED,antilost_le_process_conn
+	beq BT_EVT_LE_DISCONNECTED,antilost_le_process_discon
+	beq BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,antilost_le_conn_param_update_rsp_recieved
+	rtn
+antilost_le_conn_param_update_rsp_recieved:
+	fetch 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	beq BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_REJECTED,antilost_le_conn_param_rejected
+antilost_le_conn_param_accepted:
+	fetch 2,mem_le_new_connslavelatency
+	branch antilost_master_nonsupport_latency,blank
+antilost_le_conn_param_updata_procedure_sucsess:
+	jam CONN_PARAM_UPDATA_PROCEDURE_COMPLETE,mem_antl_conn_updata_procedure_state
+	jam 60,mem_antl_conn_update_timer
+	rtn
+
+antilost_le_conn_param_rejected:
+	fetch 2,mem_le_latency
+	branch antilost_conn_param_updata_procedure_faild,blank
+antilost_conn_param_retransimiting:
+	jam CONN_PARAM_UPDATA_PROCEDURE_STARTING,mem_antl_conn_updata_procedure_state
+	fetcht 2,mem_interval_increment
+	fetch 2,mem_le_interval_min
+	iadd temp,pdata
+	store 2,mem_le_interval_min
+	copy pdata,rega
+	fetch 2,mem_le_interval_max
+	iadd temp,pdata
+	store 2,mem_le_interval_max
+	iadd rega,pdata
+	rshift pdata,temp
+	fetch 2,mem_antl_le_unnormal_interval_max
+	idiv temp
+	call wait_div_end
+	quotient pdata
+	store 2,mem_le_latency
+	jam 1,mem_antl_send_updata_le_param_timer
+	rtn
+antilost_conn_param_updata_procedure_faild:
+	jam CONN_PARAM_UPDATA_PROCEDURE_FAILD,mem_antl_conn_updata_procedure_state
+	rtn
+
+antilost_master_nonsupport_latency:
+	jam 0,mem_lpm_mult
+	jam 0,mem_antl_send_updata_le_param_timer
+	fetch 2,mem_le_new_conninterval	//interval from master
+	fetcht 2,mem_antl_le_unnormal_interval_min
+	isub temp,null
+	setflag positive,0,rega 
+	fetch 2,mem_antl_le_unnormal_interval_max //local intervalmax
+	fetcht 2,mem_le_new_conninterval//interval form master
+	isub temp,pdata
+	setflag positive,1,rega
+	compare	0x03,rega,0x03
+	rtn true //return if the new conn_interval in range through conn_interval_min to conn_interval_max already
+	fetch 8,mem_antl_le_unnormal_interval_min
+	store 8,mem_le_interval_min
+	jam 1,mem_antl_send_updata_le_param_timer
+	rtn                               
+
+
+antilost_le_bb_event_timer:
+	//call ui_button_check_long_press
+	call app_power_timer
+	call antilost_double_click_timer
+	call antilost_le_fast_adv_timer
+	call antilost_le_sleep_timer
+	call antilost_app_updata_le_param_timer
+	call antilost_conn_update_timer
+	branch antilost_adc_check_timer
+
+
+antilost_double_click_timer:
+	arg mem_double_click_timer,regc
+	arg antilost_double_click_timeout,regb
+	branch timer_single_step
+antilost_double_click_timeout:
+	jam 0,mem_butten_click_cnt
+	rtn
+antilost_le_fast_adv_timer:
+	arg mem_antl_fast_adv_timer,regc
+	arg antilost_le_fast_adv_timeout,regb
+	branch timer_single_step_2B
+antilost_le_fast_adv_timeout:
+	arg mem_antl_slow_adv_led_style,regc
+	arg mem_antl_slow_adv_lpm_interval,regb
+	branch antilost_adv_start_common
+	
+
+antilost_conn_update_timer:
+	arg mem_antl_conn_update_timer,regc
+	arg antilost_conn_update_timer_time_out,regb
+	branch timer_single_step
+	
+antilost_conn_update_timer_time_out:
+	fetch 2,mem_le_latency
+	store 1,mem_lpm_mult
+	rtn
+antilost_app_updata_le_param_timer:
+	arg mem_antl_send_updata_le_param_timer,regc
+	arg antilost_app_updata_le_param_timeout,regb
+	branch timer_single_step
+antilost_app_updata_le_param_timeout:
+	fetch 1,mem_le_state
+	compare 0,pdata,0x60
+	nbranch antilost_wait_for_updata_param_instant_expire,true
+	jam CONN_PARAM_UPDATA_PROCEDURE_STARTING,mem_antl_conn_updata_procedure_state
+	call  app_lpm_mult_enable
+	branch le_l2cap_tx_update_req	
+antilost_wait_for_updata_param_instant_expire:
+	jam 1,mem_antl_send_updata_le_param_timer
+	rtn
+	
+antilost_le_sleep_timer:
+	arg mem_antl_le_sleep_timer,regc
+	arg antilost_le_sleep_timer_timeout,regb
+	branch timer_single_step_2B
+
+
+antilost_le_sleep_timer_timeout:
+	branch app_button_long_pressed
+
+antilost_adc_check_timer:
+	//fetch 1,mem_antl_power_timer
+	//rtneq SHUTTER_POWER_OFF
+	arg mem_adc_timer,regc
+	arg antilost_adc_check_timer_timeout,regb
+	branch timer_single_step_2B
+antilost_adc_check_timer_timeout:
+	fetch 2,mem_adc_timeout
+	store 2,mem_adc_timer
+	branch antilost_battery_process
+
+
+antilost_le_process_conn:
+	fetch 2,mem_adc_timeout
+	store 2,mem_adc_timer
+	setarg 0
+	store 2,mem_antl_fast_adv_timer
+	store 2,mem_antl_le_sleep_timer
+	call antilost_alert_off
+	call antilost_led_buzzer_stop_blink
+	jam 0,mem_lpm_mult
+	branch app_ble_stop_adv
+	                                                      
+
+antilost_le_process_discon:
+	//setarg 0
+	//store 1,mem_hci_curr_len
+	setarg 0
+	store 4,mem_adc_timer
+	store 3,mem_antl_conn_updata_procedure_state
+	store 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	
+	jam 1,mem_alarm_config_notfy_cnt
+	fetch 2,mem_antl_le_sleep_timeout
+	store 2,mem_antl_le_sleep_timer
+	call queue_init
+	fetch 1,mem_antl_power_state
+	rtneq POWER_OFF
+	call antilost_fast_adv_start
+	branch antilost_on_off_alarm_after_disconn
+
+
+antilost_le_conn_process:
+//bpatch
+	branch antilost_key_process
+
+antilost_idle_process:
+
+	fetch 1,mem_antl_power_state
+	rtnne POWER_STANDBY
+	branch antilost_key_process
+
+
+//////////////////////////////////////////////////////////////////////////////////////////
+/////SOFT WTICH////////
+antilost_power_starting_cb:
+	arg mem_antl_power_starting_buzzer_style,regc
+	call antilost_buzzer_configuration
+	arg mem_antl_power_starting_led_style,regc
+antilost_power_common:
+	branch antilost_led_configuration
+
+antilost_power_off_cb:
+	jam OFF,mem_le_adv_enable
+	arg mem_antl_power_off_buzzer_style,regc
+	call antilost_buzzer_configuration
+	arg mem_antl_power_off_led_style,regc
+	branch antilost_power_common
+	
+antilost_le_receive_data_process:
+	fetch 1,mem_le_att_opcode
+	beq ATTOP_WRITE_REQUEST,antilost_le_parse_att_write_request
+	rtn
+antilost_le_parse_att_write_request:
+	fetch 2,mem_le_att_handle
+//	beq  ATT_WRITE_REQUEST_HANDLE,antilost_key_data_send
+	beq NEW_SPEC_WRITE_HANDLE,antilost_cmd_parse_for_application
+	beq NEW_SPEC_NOTIFICATION_ENABLE_HANDLE,antilost_notify_alarm_config_first_time
+	rtn
+/////////////////////////////////////////////////////////
+
+
+/////////key scan
+antilost_key_process:
+	fetch 1,mem_antl_key_scan_enable
+	rtn blank
+	branch keyscan_key_process
+
+	//queue = key index
+	//rega =1 press, =0 release
+antilost_key_up_down:
+	copy rega,pdata
+	branch antilost_key_is_up,blank
+antilost_key_is_down:
+	copy queue,pdata
+	beq 0,antilost_key0_down
+	rtn
+antilost_key_is_up:
+	copy queue,pdata
+	beq 0,antilost_key0_up
+	rtn
+
+antilost_key0_down:
+	jam 1,mem_antl_key_state
+	arg mem_antl_key_buzzer_style,regc
+	call antilost_buzzer_configuration
+	arg mem_antl_key_led_style,regc
+	call antilost_led_configuration
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,antilost_butten_down_while_disconn
+	branch antilost_butten_down_after_conn
+	
+antilost_key0_up:
+	jam 0,mem_antl_key_state
+	branch antilost_double_click_timer_init
+
+//////////////process for double-click
+
+antilost_double_click_timer_init:
+	fetch 1,mem_butten_click_cnt
+	rtnne 1
+	jam 5,mem_double_click_timer
+	rtn
+
+antilost_butten_down_after_conn:
+	fetch 1,mem_butten_click_cnt
+	pincrease 1
+	store 1,mem_butten_click_cnt
+	beq 1,antilost_click_once
+	beq 2,antilost_click_twice
+	rtn
+antilost_click_once:
+	call antilost_alert_off
+	jam OPCODE1_BUTTEN_CLICK_ONCE,mem_antl_key0_press+5//5 represent opcode offset
+	arg mem_antl_key0_press,regc
+	branch antilost_prepare_data_and_send
+antilost_click_twice:
+	jam 0,mem_butten_click_cnt
+	jam OPCODE2_BUTTEN_DOUBLE_CLICK,mem_antl_key0_press+5
+	arg mem_antl_key0_press,regc
+	call antilost_prepare_data_and_send
+	fetch 1,mem_antl_lost_mode
+	beq 1,antilost_alert_on
+	rtn   //rtn should be retaind
+	
+antilost_butten_down_while_disconn:
+	fetch 2,mem_antl_le_sleep_timeout
+	store 2,mem_antl_le_sleep_timer
+	call antilost_alert_off
+	branch antilost_fast_adv_start
+	
+///////////////////////NEW App Spcecific///////
+antilost_cmd_parse_for_application:
+	bpatch patch19_5,mem_patch19
+	call le_app_receive_data
+	ifetch 1,rega
+	beq OPCODE3_ANTL_START_ALRAM,antilost_on_of_alram
+	beq OPCODE7_ANTL_CONFIG_ALRAM,antilost_configuration_for_alram
+	rtn
+
+antilost_on_of_alram:
+	fetch 1,mem_antl_lost_mode
+	beq ANTI_LE_ALARM_OFF,antilost_alert_on
+	beq ANTI_LE_ALARM_ON,antilost_alert_off
+	rtn
+
+antilost_configuration_for_alram:
+	ifetch 1,regb
+	beq 1,antilost_set_start_alarm_after_disconn
+	beq 0,antilost_set_no_alarm_after_disconn
+	rtn
+/////////////////check////////////////////////
+
+/*input: 1)package data addr in regc
+output:no
+function:calculate check_out value and send data*/
+//mem_temp_block5
+antilost_prepare_data_and_send:
+	bpatch patch19_6,mem_patch19
+	fetch 1,mem_client_characteristic_configuration_descriptor
+	isolate1 NOTIFICATION_ENABLE_BIT,pdata
+	nrtn true
+	add regc,6,contr
+	ifetch 2,contr
+	byteswap pdata,pdata
+	add pdata,5,loopcnt
+	add regc,3,contr
+	call calc_check_sum_start
+	istore 1,contr
+	copy regc,rega
+	branch queue_push
+
+/////////////////NEW APP SPECIFIC check end////////////////////
+
+
+/////////alarm//////////////////////////////
+antilost_alert_on:
+	fetch 1,mem_antl_power_state
+	rtn blank
+	jam 1,mem_antl_lost_mode
+	arg mem_antl_alert_buzzer_stlye,regc
+	call antilost_buzzer_configuration
+	arg mem_antl_alert_led_stlye,regc
+	call antilost_led_configuration
+	jam OPCODE4_CURRENT_ALARM_STATE,mem_antl_key0_release+5//5 represent opcode offset
+	jam 1,mem_antl_key0_release+8 //8 represent data offset,digit 1 represent alarm is on at present
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+antilost_alert_off:
+	fetch 1,mem_antl_lost_mode
+	rtn blank
+	jam 0,mem_antl_lost_mode
+	call antilost_led_buzzer_stop_blink
+	jam OPCODE4_CURRENT_ALARM_STATE,mem_antl_key0_release+5//5 represent opcode offset
+	jam 0,mem_antl_key0_release+8 //8 represent data offset,digit 0 represent alarm is off at present
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+
+antilost_set_start_alarm_after_disconn:
+	jam 1,mem_alarm_config
+	jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5
+	jam 1,mem_antl_key0_release+8
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+antilost_set_no_alarm_after_disconn:
+	jam 0,mem_alarm_config
+	jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5
+	jam 0,mem_antl_key0_release+8
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+antilost_on_off_alarm_after_disconn:
+	fetch 1,mem_alarm_config
+	rtn blank
+	branch antilost_alert_on
+	
+antilost_notify_alarm_config_first_time:
+	ifetch 2,rega
+	store 2,mem_client_characteristic_configuration_descriptor
+	isolate1 NOTIFICATION_ENABLE_BIT,pdata
+	nrtn true
+	fetch 1,mem_alarm_config_notfy_cnt
+	rtn blank
+	jam 0,mem_alarm_config_notfy_cnt
+	fetch 8,mem_antl_le_interval_min
+	store 8,mem_le_interval_min
+	jam 2,mem_antl_send_updata_le_param_timer
+	call antilost_battery_process
+	call antilost_battery_calculate_end //send twice to combat the failure of reception first time
+	jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5
+	fetch 1,mem_alarm_config
+	store 1,mem_antl_key0_release+8
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+
+//////////////alarm end//////////////////////////
+//sytle address in regc
+antilost_buzzer_configuration:
+	arg 1,rega
+	branch antilost_configuration_common
+antilost_led_configuration:
+	arg 0,rega
+antilost_configuration_common:
+	branch antilost_led_buzzer_style_configuration
+	
+antilost_led_buzzer_stop_blink:
+	arg 0,rega
+	call ui_led_blink_stop_global
+	arg 1,rega
+	call ui_led_blink_stop_global
+	fetch 1,mem_buzzer_pwm_conf
+	branch pwm_disable
+	
+antilost_led_buzzer_style_configuration:
+	call calc_curr_struct_prt
+	arg 7,loopcnt
+	branch ui_led_set_style_global+2
+
+
+
+antilost_fast_adv_start:
+	arg mem_antl_fast_adv_led_style,regc
+	arg mem_antl_lpm_interval,regb
+antilost_adv_start_common:
+	call antilost_adv_interval_lpm_interval_set
+	call antilost_led_configuration
+	fetch 2,mem_antl_fast_adv_timeout
+	store 2,mem_antl_fast_adv_timer
+	branch app_ble_start_adv
+	
+antilost_adv_interval_lpm_interval_set:
+	ifetch 2,regb
+	store 2,mem_lpm_interval
+	ifetch 2,contr
+	store 2,mem_le_adv_interval
+	rtn
+///////////////beep////////////
+antilost_buzzer_pwm_init:
+	arg 0,rega //sys clk 12mhz
+	call pwm_init
+	fetch 6,mem_buzzer_pwm_conf
+	store 6,mem_pdatatemp
+	call pwm_out_set
+	fetch 1,mem_buzzer_pwm_conf
+	branch pwm_disable
+	
+antilost_led_on_cb:
+	jam 1,mem_antl_led_state
+	rtn	
+antilost_led_off_cb:
+	jam 0,mem_antl_led_state
+	rtn
+
+
+
+antilost_buzzer_off:
+	jam 0,mem_antl_buzzer_state
+	fetch 1,mem_buzzer_pwm_conf
+	branch pwm_disable
+	
+antilost_buzzer_on:
+	jam 1,mem_antl_buzzer_state
+	fetch 6,mem_buzzer_pwm_conf
+	store 6,mem_pdatatemp
+	branch pwm_out_set
+
+////////////////beep end///////////////////////////
+/////////////adc start////////////////////////
+antilost_adc_init:
+	jam 0,mem_adc_config_flag
+	branch adc_init_data
+
+antilost_battery_process:
+	call adc_set_mode
+	call vdd_calculate_by_mode
+	store 2,mem_battery_current_voltage
+	arg mem_battery_calculate_set,rega
+	call adc_bat_percent_lowpower_out
+	store 1,mem_voltage_remain_percent //for debug
+	beq 0,antilost_low_battery
+	sub pdata,0x64,null
+	nbranch antilost_full_battery,positive
+	store 1,mem_antl_key0_release+8
+antilost_battery_calculate_end:
+	jam OPCODE5_BATTER_INFORMATION,mem_antl_key0_release+5
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+antilost_full_battery:
+	jam 100,mem_antl_key0_release+8
+	branch antilost_battery_calculate_end
+
+antilost_low_battery:
+	branch app_button_long_pressed
+endif
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_car.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_car.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_car.prog	(working copy)
@@ -0,0 +1,888 @@
+ifdef COMPILE_CAR
+
+car_init:
+	rtn wake	
+	hfetch 1,core_gpio_sel1
+	and_into 0xf0,pdata
+	hstore 1,core_gpio_sel1
+	setarg car_le_before_hibernate
+	store 2,mem_cb_before_hibernate
+	
+	setarg car_le_process_lpm_before
+	store 2,mem_cb_before_lpm	
+	
+	setarg app_enter_hibernate
+	store 2,mem_cb_discovry_timeout
+	
+	setarg car_scale_process_idle	
+	store 2,mem_cb_idle_process	
+	
+	setarg car_scale_process_bb_event 
+	store 2,mem_cb_bb_event_process	
+	
+	setarg app_get_lpm_wake_lock
+	store 2,mem_cb_check_wakelock
+	
+	setarg car_le_receive_data
+	store 2,mem_cb_att_write
+	
+	setarg car_le_bb_event_timer
+	store 2,mem_cb_event_timer
+	
+	call g24_head_ptr2regc
+	setarg car_24g_receive_data
+	add regc,offset_24g_cb_rxdata_type1,contw
+	istore 2,contw
+
+	setarg car_power_off_signal
+	store 2,mem_remote_car_power_off_cb
+	
+	setarg car_soft_switch_power_on_signal
+	store 2,mem_remote_car_power_standby_cb
+	
+	bpatch patch19_7,mem_patch19
+	call car_init_environment
+	call queue_init
+	jam 2,mem_lpm_mult
+	jam POWER_ON,mem_car_24g_received_pac
+	fetch 1,mem_car_config_soft_switch_enable
+	store 1,mem_car_hard_soft_switch
+	beq HARD_SWITCH, car_hard_switch_power_on_signal
+	fetch 1,mem_car_config_soft_switch_gpio
+	store 1,mem_ui_button_gpio
+	jam OFF,mem_le_adv_enable
+car_soft_switch_power_on_init:
+	call car_ui_led_init
+	call ui_button_init
+	call ui_button_polling
+	jam POWER_STARTING,mem_car_power_state
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+ 	branch app_enter_hibernate
+
+car_power_off_signal:	
+	branch car_ui_led_init
+	
+car_hard_switch_power_on_signal:
+	jam POWER_STANDBY,mem_car_power_state
+car_soft_switch_power_on_signal:
+	jam ON,mem_le_adv_enable
+	call car_ui_led_init
+	arg 0,rega
+	call ui_led_blink_start_global
+	
+	setarg FAST_ADV_INTERVAL_VALUE_CAR
+	call shutter_ble_adv_interval_set
+car_le_modified_name_adv:
+	arg mem_le_name+7,contw
+	fetch 1,mem_le_lap
+car_name_loop:
+	and pdata,0xF0,temp
+	rshift4 temp,temp
+	call car_hex_to_ascii
+	istoret 1, contw
+	and pdata,0x0F,temp
+	call car_hex_to_ascii
+	istoret 1, contw
+	call le_modified_name_att_list
+	fetcht 1,mem_le_name_len
+	copy temp,loopcnt
+	arg mem_le_adv_data+2,contw
+	arg mem_le_name,contr
+	call memcpy
+car_le_modified_name_scan:
+	fetcht 1,mem_le_name_len
+	copy temp,loopcnt
+	arg mem_le_scan_data+2,contw
+	arg mem_le_name,contr
+	branch memcpy
+car_hex_to_ascii:
+	sub temp,9,null
+	branch car_hex_num,positive
+	add temp,55,temp
+	rtn
+car_hex_num:	
+	add temp,48,temp
+	rtn
+
+car_ui_led_init:
+	fetch 1,mem_car_config_blood_led1_gpio
+	bne INVALID_PIN_NUM,car_blood_led_gpio_set
+car_ui_led_init_1:
+	fetch 1,mem_car_config_pairing_led_gpio
+	bne INVALID_PIN_NUM,car_pairing_led_gpio_set
+car_ui_led_init_2:
+	fetch 1,mem_car_config_low_voltage_led_gpio
+	bne INVALID_PIN_NUM,car_low_voltage_led_gpio_set
+car_ui_led_init_3:
+	fetch 1, mem_car_led_num
+	copy pdata,loopcnt
+	setarg mem_car_led_map
+	copy pdata,rega
+car_in_lp1:
+	copy rega,contr
+	ifetch 1,contr
+	copy contr,rega
+	beq INVALID_PIN_NUM,car_in_lp1_end
+	copy pdata,temp
+	call gpio_config_output
+car_in_lp1_end:
+	loop car_in_lp1
+car_ui_led_init_end:
+	rtn
+car_blood_led_gpio_set:
+	fetch 8,mem_car_config_blood_led1_gpio
+	store 8,mem_car_led_map+2
+	branch car_ui_led_init_1
+car_pairing_led_gpio_set:
+	store 1,mem_car_led_map
+	branch car_ui_led_init_2
+car_low_voltage_led_gpio_set:
+	store 1,mem_car_led_map+1
+	branch car_ui_led_init_3
+
+
+car_init_environment:
+	arg 0,rega
+	call pwm_init
+	call car_ir_rx_init
+	call g24_receive_process_init
+	branch car_init_adc_hvin
+
+car_init_adc_hvin:
+	jam 100,mem_car_notify_vdd_value_last
+	fetch 1,mem_car_config_low_voltage_led_gpio
+	store 1,mem_car_style2_struct_led_gpio
+	branch adc_init_data
+	
+car_le_before_hibernate:
+	call gpio_set_before_lpm_common
+	branch keyscan_process_lpm_before
+
+car_le_process_lpm_before:
+	branch keyscan_process_lpm_before
+
+car_key_scan_process:
+//	fetch 1,mem_enable_key_scan
+//	rtn blank
+	branch keyscan_key_process
+
+car_scale_process_idle:
+	call car_le_send_packet
+	call car_ir_receive_process
+	call car_g24_status_process
+	branch car_key_scan_process
+
+car_g24_status_process:
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	fetch 1,mem_car_24g_received_pac
+	beq WORK_PAIRED,car_g24_connected_event
+	rtn
+car_g24_connected_event:
+	fetch 1,mem_car_24g_status
+	rtneq WORK_PAIRED
+	jam WORK_PAIRED,mem_car_24g_status
+	branch car_g24_connected
+
+car_le_send_packet:
+	fetch 2,mem_ui_state_map
+	rtnbit0 UI_STATE_BLE_CONNECTED
+	call le_fifo_check_nearly_full
+	nrtn blank
+	arg mem_car_pop_queue_buff,rega
+	call queue_pop
+	nrtn user
+	arg mem_car_pop_queue_buff,contr
+	branch le_send_notify_from_list
+ 
+car_scale_process_bb_event:
+	copy regc,pdata
+	beq BT_EVT_BUTTON_UP,app_event_button_up
+	beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed
+	beq BT_EVT_LE_CONNECTED,car_scale_event_le_conn
+	beq BT_EVT_LE_DISCONNECTED,car_scale_event_le_discon
+	rtn
+
+car_scale_event_le_conn:
+	setarg disable_24g
+	call g24_store_mem_24g_mode
+	branch car_scale_process_conn
+car_g24_connected:
+	fetch 2,mem_car_24g_no_data_timeout_count
+	store 2,mem_car_24g_no_data_timeout_timer
+car_scale_process_conn:
+	jam 0x14,mem_car_notify_vdd_timer
+	jam 0,mem_lpm_mode
+	call app_ble_stop_adv
+	call app_lpm_mult_enable
+	fetch 1,mem_car_config_pairing_led_conn_status
+	beq 0x01,car_pairing_led_conn_status_setting
+car_scale_process_conn_next:
+	arg 0,rega
+	branch ui_led_on_global
+car_pairing_led_conn_status_setting:
+	arg 0,rega
+	branch ui_led_blink_stop_global
+
+car_scale_event_le_discon:
+	setarg rx_24g
+	call g24_store_mem_24g_mode
+car_g24_disconnect:
+	setarg 0
+	store 5,mem_car_led_control
+	setarg 4
+	call pwm_disable
+	setarg 5
+	call pwm_disable
+	setarg 20
+	call pwm_disable
+	setarg 21
+	call pwm_disable
+	setarg 22
+	call pwm_disable
+	setarg 7
+	call pwm_disable
+	call queue_init
+	jam 10,mem_motor1_speed
+	jam 10,mem_motor2_speed
+	jam 10,mem_motor3_speed
+//	jam 1,mem_lpm_mode
+	jam 2,mem_lpm_mult
+	arg 0,rega
+	call ui_led_blink_start_global
+
+	setarg FAST_ADV_INTERVAL_VALUE_CAR
+	call shutter_ble_adv_interval_set
+	branch app_ble_start_adv
+
+car_le_bb_event_timer:
+//	call car_ui_power_timeout_timer
+	call car_moto1_blank_data_timer
+	call car_moto2_blank_data_timer
+	call car_moto3_blank_data_timer
+	call app_power_timer
+	call car_led_control_timer
+	call car_notify_vdd_timer
+	call car_24g_no_data_timeout_timer
+	call car_ir_breakdown_timer
+	branch car_attack_shake_timer
+
+car_ir_breakdown_timer:
+	arg mem_car_ir_breakdown_check_timer,regc
+	arg car_ir_breakdown_timeout,regb
+	branch timer_single_step
+car_ir_breakdown_timeout:
+	call car_ir_gpio_get_status
+	nrtn true
+	jam 1,mem_car_ir_breakdown_flag
+	rtn
+	
+car_24g_no_data_timeout_timer:
+	arg mem_car_24g_no_data_timeout_timer,regc
+	arg car_24g_no_data_timer_timeout,regb
+	branch timer_single_step_2B
+car_24g_no_data_timer_timeout:
+	jam WORK_SEARCH,mem_car_24g_status
+	branch car_g24_disconnect
+
+car_attack_shake_timer:
+	arg mem_car_attack_shake_timer,regc
+	arg car_attack_shake,regb
+	branch timer_single_step
+car_attack_shake:
+	fetch 1, mem_car_attack_shake_flag
+	branch car_attack_shake_stop,blank
+	jam 2,mem_car_attack_shake_timer
+	jam 0, mem_car_attack_shake_flag
+	setarg 0x0a02
+	store 2,mem_le_receive_payload
+	fetch 1,mem_car_config_device_select
+	beq DEVICE_BATTLE_TANK,car_attack_shake_front_battle_tank
+car_attack_shake_front_battle_car:
+	branch car_motor_control
+car_attack_shake_front_battle_tank:
+	setarg 0x0a02
+	store 2,mem_le_receive_payload+2
+	branch car_motor_control
+car_attack_shake_stop:
+	setarg 0
+	store 4,mem_le_receive_payload
+	branch car_motor_control
+
+car_notify_vdd_timer:
+	fetch 1,mem_car_config_bat_notify_enable
+	rtn blank
+ 	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,car_low_bat_led_off
+	arg mem_car_notify_vdd_timer,regc
+	arg car_notify_vdd,regb
+	branch timer_single_step
+car_notify_vdd:
+	fetch 1,mem_car_notify_vdd_count
+	store 1,mem_car_notify_vdd_timer
+ 	fetch 1,mem_car_working_flag
+ 	nrtn blank
+car_read_hvin:
+	call adc_set_mode
+	call vdd_calculate_by_mode
+	store 2,mem_vdd_now_vol
+	arg mem_vdd_calculate_set,rega
+	call adc_bat_percent_lowpower_out
+	fetcht 1,mem_car_notify_vdd_value_last
+	isub temp,null
+	branch car_notify_vdd_next2,positive
+	store 1,mem_car_notify_vdd_value_last
+	copy pdata,temp
+car_notify_vdd_next2:
+	storet 1,mem_car_notify_vdd_percent
+	fetch 1,mem_car_config_low_voltage_percent
+	isub temp,null
+	call car_enter_low_bat,positive
+	storet 1,mem_notify_bat_payload 
+	arg 6,loopcnt
+	arg mem_notify_bat_head,contr
+	call calc_check_sum_start
+	store 1,mem_notify_bat_check_sum
+	arg mem_notify_bat_packet,rega
+	branch queue_push
+car_enter_low_bat:
+	fetch 1,mem_low_bat_flag
+	nrtn blank
+	jam 1,mem_low_bat_flag
+	arg 1,rega
+	branch ui_led_blink_start_global
+car_low_bat_led_off:
+	arg 1,rega
+	branch ui_led_blink_stop_global
+
+car_led_control_timer:
+	arg mem_car_led_control_timer,regc
+	arg car_led_control,regb
+	branch timer_single_step
+car_led_control:
+	jam 5,mem_car_led_control_timer
+	jam 0,mem_car_led_no
+	fetch 1,mem_car_led_blink_status
+	beq LED_ON,car_led_control_blink_off
+	beq LED_OFF,car_led_control_blink_on
+car_led_control_set:
+	arg mem_car_led_control,contr
+	copy contr,rega
+	arg 8,loopcnt
+car_led_control_timer_next:
+	copy rega,contr
+	ifetch 1,contr
+	copy contr,rega
+	beq LED_OFF,car_led_control_off
+	beq LED_ON,car_led_control_on
+	beq LED_BLINK,car_led_control_blink
+car_led_control_timer_next_2:
+	fetch 1,mem_car_led_no
+	increase 1,pdata
+	store 1,mem_car_led_no
+	loop car_led_control_timer_next
+	rtn
+car_led_switch:
+	fetch 1,mem_car_led_no
+	arg mem_car_config_blood_led_gpio,regb
+	iadd regb,regb
+	ifetcht 1,regb
+	rtn
+car_led_control_off:
+	call car_led_switch
+	call gpio_out_inactive
+	branch car_led_control_timer_next_2
+car_led_control_on:
+	call car_led_switch
+	call gpio_out_active
+	branch car_led_control_timer_next_2
+car_led_control_blink:
+	fetch 1,mem_car_led_blink_status
+	beq LED_ON,car_led_control_off
+	branch car_led_control_on
+car_led_control_blink_on:
+	jam LED_ON,mem_car_led_blink_status
+	branch car_led_control_set
+car_led_control_blink_off:
+	jam LED_OFF,mem_car_led_blink_status
+	branch car_led_control_set
+	
+////////////////////////check sum////////////////////////
+//loopcnt = sum number,contr = ptr
+calc_check_sum_start:
+	arg 0,rega
+calc_check_sum_loop:
+	ifetch 1,contr
+	iadd rega,rega
+	loop calc_check_sum_loop
+calc_check_sum_and:
+	and rega,0xff,pdata
+	rtn
+
+car_le_receive_data:	
+	fetch 1,mem_le_att_opcode
+	beq ATTOP_WRITE_REQUEST,car_le_parse_att_write_request
+	rtn
+car_le_parse_att_write_request:
+	fetch 2,mem_le_att_handle
+	beq ATT_CAR_CONTROL_HANDLE,car_control_le_receive
+	rtn
+
+/*
+*	typedef struct
+*	{
+*		2byte	packet_head				(mem_app_receive_temp)
+*		1byte	packet_cmd				(mem_app_receive_temp+2)
+*		2byte	packet_payload_length	(mem_app_receive_temp+3)
+*		10byte	packet_payload			(mem_app_receive_temp+5)
+*		1byte	packet_check_sum		(mem_app_receive_temp+15)
+*	}
+*/
+le_app_receive_data:
+	bpatch patch1a_0,mem_patch1a
+	ifetch 5,rega
+	store 5,mem_app_receive_temp
+	fetch 2,mem_app_receive_temp
+	arg LE_RECEIVE_PACKET_HEAD,temp
+	isub temp,null
+	nrtn zero
+	fetch 2,mem_app_receive_temp+3
+	byteswap pdata,pdata
+	store 2,mem_app_receive_temp+3
+	copy pdata,loopcnt
+	increase 5,rega
+	copy rega,contr
+	arg mem_app_receive_temp+5,contw
+	call memcpy
+	ifetch 1,contr
+	store 1,mem_app_receive_temp+15
+	arg mem_app_receive_temp+2,rega
+	arg mem_app_receive_temp+5,regb
+	rtn
+
+car_control_le_receive:
+	setarg 0
+	store 5,mem_le_receive_payload
+	store 5,mem_le_receive_payload+5
+	call le_app_receive_data
+	copy regb,contr
+	arg mem_le_receive_payload,contw
+	arg 10,loopcnt
+	call memcpy
+car_receive_cmd_select:
+	bpatch patch1a_1,mem_patch1a
+	ifetch 1,rega
+	beq CAR_CMD_OLD_CAR_CONTROL,car_drive_old
+	beq CAR_CMD_OLD_SPEED_CONTROL,car_speed_set_old
+	beq CAR_CMD_L_R_MOTOR_CONTROL,car_motor_control
+	beq CAR_CMD_F_B_MOTOR_CONTROL,car_motor_control
+	beq CAR_CMD_IR_CONTROL,car_ir_data_rx_from_app
+	beq CAR_CMD_LED_CONTROL,car_led_control_receive
+	beq CAR_CMD_DEVICE_INFO,car_info_request
+	rtn
+
+car_24g_receive_data:
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	
+	fetch 2,mem_car_24g_no_data_timeout_count
+	store 2,mem_car_24g_no_data_timeout_timer
+	
+	jam WORK_PAIRED,mem_car_24g_received_pac
+	
+	setarg offset_24g_rxdata_temp_add3
+	call g24_set_rega
+	call car_control_le_receive
+
+	fetch 1,mem_app_receive_temp+2	//cmd
+	beq CAR_CMD_L_R_MOTOR_CONTROL,car_24g_receive_data_next
+	beq CAR_CMD_F_B_MOTOR_CONTROL,car_24g_receive_data_next
+	rtn
+car_24g_receive_data_next:
+	fetch 1,mem_le_receive_payload	//moto1
+	ncall car_moto1_enable_blank_data_timer,blank
+	fetch 1,mem_le_receive_payload+2	//moto2
+	ncall car_moto2_enable_blank_data_timer,blank
+	fetch 1,mem_le_receive_payload+4	//moto3
+	ncall car_moto3_enable_blank_data_timer,blank
+	rtn
+
+car_moto1_enable_blank_data_timer:
+	jam 5,mem_car_moto1_blank_timer
+	rtn
+car_moto2_enable_blank_data_timer:
+	jam 5,mem_car_moto2_blank_timer
+	rtn
+car_moto3_enable_blank_data_timer:
+	jam 5,mem_car_moto3_blank_timer
+	rtn
+
+car_moto1_blank_data_timer:
+	arg mem_car_moto1_blank_timer,regc
+	arg car_moto1_blank_data,regb
+	branch timer_single_step
+car_moto2_blank_data_timer:	
+	arg mem_car_moto2_blank_timer,regc
+	arg car_moto2_blank_data,regb
+	branch timer_single_step
+car_moto3_blank_data_timer:		
+	arg mem_car_moto3_blank_timer,regc
+	arg car_moto3_blank_data,regb
+	branch timer_single_step
+
+car_moto1_blank_data:
+	jam 0,mem_le_receive_payload
+	branch car_motor_control
+car_moto2_blank_data:
+	jam 0,mem_le_receive_payload+2
+	branch car_motor_control
+car_moto3_blank_data:
+	jam 0,mem_le_receive_payload+4
+	branch car_motor_control
+	
+	
+///////////////////////Motor//////////////////////////////////////////
+
+car_drive_old:	
+	call car_left_right_control_old
+	branch car_front_back_control_old
+car_left_right_control_old:
+	fetch 1,mem_le_receive_payload
+	store 1,mem_motor2_status
+	branch car_motor2_control
+car_front_back_control_old:
+	fetch 1,mem_motor1_speed
+	call car_reset_old_speed
+	fetch 1,mem_le_receive_payload+1
+	store 1,mem_motor1_status
+	branch car_motor1_control
+car_reset_old_speed:
+	beq SPEED_LEVEL_2,car_reset_old_speed2
+	beq SPEED_LEVEL_3,car_reset_old_speed3
+	store 1,mem_motor1_speed
+	rtn
+car_reset_old_speed2:
+	jam SPEED_LEVEL_5,mem_motor1_speed
+	rtn
+car_reset_old_speed3:
+	jam SPEED_LEVEL_10,mem_motor1_speed
+	rtn
+car_speed_set_old:
+	fetch 1,mem_le_receive_payload
+	call car_reset_old_speed
+	fetch 1,mem_motor1_speed
+	call car_motor_speed_duty_setting
+	call car_motor_speed_duty_transform
+	branch pwm_pwm0_duty_set
+
+car_motor_control:
+	fetch 1,mem_car_24g_go_die_flag
+	nrtn blank
+	fetch 6,mem_le_receive_payload
+	store 6,mem_motor1_status
+	fetch 1,mem_motor1_speed
+	fetcht 1,mem_motor2_speed
+	iand temp,pdata
+	fetcht 1,mem_motor3_speed
+	iand temp,pdata
+	call car_motor_working_flag,blank
+	bpatch patch1a_2,mem_patch1a
+	call car_motor1_control
+	call car_motor2_control
+	branch car_motor3_control
+car_motor1_control:
+	arg mem_motor1_pwm_set,regb
+	arg mem_motor1_status,contr
+	branch car_motor_status_select
+car_motor2_control:
+	arg mem_motor2_pwm_set,regb
+	arg mem_motor2_status,contr
+	branch car_motor_status_select
+car_motor3_control:
+	arg mem_motor3_pwm_set,regb
+	arg mem_motor3_status,contr
+	branch car_motor_status_select
+car_motor_working_flag:
+	jam 0,mem_car_working_flag
+	rtn
+
+car_motor_status_select:
+	ifetch 1,contr
+	beq MOTOR_STOP,car_motor_stop
+	beq GO_FRONT,car_motor_positive
+	beq GO_BACK,car_motor_negative
+	rtn
+car_motor_positive:
+	jam 0,mem_motor_select_p_n
+	branch car_motor_negative+1
+car_motor_negative:
+	jam 1,mem_motor_select_p_n
+	ifetch 1,contr
+	store 1,mem_car_motor_speed
+	ifetch 8,regb
+	branch car_motor_work
+
+car_motor_stop:
+	ifetch 1,regb
+	call pwm_disable
+	increase 1,regb
+	ifetch 1,regb
+	branch pwm_disable
+car_motor_work:
+	store 8,mem_motor_pwm_pin1_set
+	jam 1,mem_car_working_flag
+	fetch 1,mem_motor_select_p_n
+	beq 0,car_motor_select_positive
+car_motor_select_negative:
+	fetch 1,mem_motor_pwm_pin2_set
+	store 1,mem_motor_pwm_pin_set
+	fetch 1,mem_motor_pwm_pin1_set
+car_motor_work_next:
+	call pwm_disable
+	fetch 1,mem_car_motor_speed
+	call car_motor_speed_duty_setting
+	store 1,mem_motor_pwm_dute_set
+	fetch 6,mem_motor_pwm_pin_set
+	store 6,mem_pdatatemp
+	branch pwm_out_set
+car_motor_select_positive:
+	fetch 1,mem_motor_pwm_pin1_set
+	store 1,mem_motor_pwm_pin_set
+	fetch 1,mem_motor_pwm_pin2_set
+	branch car_motor_work_next
+
+car_motor_speed_duty_setting:
+	mul32 pdata,5,pdata
+	add pdata,50,pdata
+	rtn
+car_motor_speed_duty_transform:
+	arg 12000,temp
+	imul32 temp,pdata
+	div pdata,100
+	call wait_div_end
+	quotient temp
+	copy temp,rega
+	setarg 12000
+	isub temp,regb
+	rtn
+
+/////////////////////IR PROCESS/////////////////////
+car_ir_init:
+	hfetch 1,core_gpio_sel2		// select GPIO3 as pwm4
+	set1 2,pdata
+	hstore 1,core_gpio_sel2
+	setarg 158
+	hstore 2,core_pwm_pcnt4
+	hstore 2,core_pwm_ncnt4
+	rtn
+
+car_ir_data_rx_from_app:
+	fetch 1,mem_car_24g_go_die_flag
+	nrtn blank
+	fetch 2,mem_le_receive_payload
+	store 2,mem_ir_data
+	fetch 1,mem_car_24g_status
+	bne WORK_PAIRED,car_ir_data_tx
+	fetch 2,mem_le_lap
+	store 2,mem_ir_data
+car_ir_data_tx:
+	bpatch patch1a_3,mem_patch1a
+	call car_ir_init
+	call car_ir_enable
+	setarg 48000
+	call sleep
+	call car_ir_disable
+	setarg 7200
+	call sleep
+	arg 16,loopcnt
+car_ir_send_loop:
+	call car_ir_enable
+	fetch 2,mem_ir_data
+	bbit1 0,car_ir_is_bit1
+	setarg 7200
+	call sleep
+	call car_ir_disable
+	branch car_ir_wait_finish
+	
+car_ir_is_bit1:
+	setarg 14400
+	call sleep
+	call car_ir_disable
+car_ir_wait_finish:
+	setarg 7200
+	call sleep
+	fetch 2,mem_ir_data
+	rshift pdata,pdata	
+	store 2,mem_ir_data
+	loop car_ir_send_loop
+
+	jam 2,mem_car_attack_shake_timer
+	jam 1, mem_car_attack_shake_flag
+	setarg 0x0a01
+	store 2,mem_le_receive_payload
+	fetch 1,mem_car_config_device_select
+	beq DEVICE_BATTLE_TANK,car_attack_shake_back_battle_tank
+car_attack_shake_back_battle_car:
+	branch car_motor_control
+car_attack_shake_back_battle_tank:
+	setarg 0x0a01
+	store 2,mem_le_receive_payload+2
+	branch car_motor_control
+	
+car_ir_enable:
+	hfetch 1,core_gpio_key2			// PWM4_enable
+	or_into 0x40,pdata
+	hstore 1,core_gpio_key2	
+	rtn
+car_ir_disable:
+	hfetch 1,core_gpio_key2			// PWM4_disable
+	and_into 0xbf,pdata
+	hstore 1,core_gpio_key2
+	rtn
+	
+car_ir_rx_init:
+	fetch 1,mem_car_config_ir_enable
+	rtneq 0x00
+	call lpm_disable_exen_output
+	fetcht 1,mem_car_config_ir_rx_gpio
+	storet 1,mem_ir_rx_gpio
+	call gpio_config_input
+	call car_ir_gpio_get_status
+	nrtn true
+	jam 1,mem_car_ir_breakdown_check_timer
+	rtn
+
+car_ir_receive_process:
+	fetch 1,mem_car_config_ir_enable
+	rtneq FLAG_IR_DISABLE	
+	fetch 1,mem_car_ir_breakdown_flag
+	nrtn blank
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,car_ir_receive_process_next
+	fetch 1,mem_car_24g_status
+	rtnne WORK_PAIRED
+car_ir_receive_process_next:
+	bpatch patch1a_4,mem_patch1a
+	call car_ir_gpio_get_status
+	nrtn true
+	setarg 36000
+	call sleep
+	call car_ir_gpio_get_status
+	nrtn true
+	call car_ir_clk_get
+car_ir_packet_head_wait_end:
+	call car_ir_clk_check
+	nrtn positive
+	call car_ir_gpio_get_status
+	branch car_ir_packet_head_wait_end,true
+	arg 0,rega
+	arg 16,loopcnt
+	call car_ir_clk_get
+car_ir_receive_process_loop:
+	call car_ir_clk_check
+	nrtn positive
+	call car_ir_gpio_get_status
+	nbranch car_ir_receive_process_loop,true
+	setarg 10800
+	call sleep
+	call car_ir_gpio_get_status
+	branch car_ir_get_bit1,true
+car_ir_get_bit0:
+	setarg 0
+ 	rshift rega,rega
+	ior rega,rega
+	loop car_ir_receive_process_loop
+	branch car_ir_receive_process_end
+car_ir_get_bit1:
+	setarg 0x8000
+	rshift rega,rega
+	ior rega,rega
+	call car_ir_clk_get
+car_ir_get_bit1_wait_low_end:
+	call car_ir_clk_check
+	nrtn positive
+	call car_ir_gpio_get_status
+	branch car_ir_get_bit1_wait_low_end,true
+	loop car_ir_receive_process_loop
+car_ir_receive_process_end:
+	bpatch patch1a_5,mem_patch1a
+	copy rega,pdata
+	store 2,mem_ir_rx_buf
+	store 2,mem_ir_notify_data+8
+	fetch 1,mem_car_24g_status
+	beq WORK_PAIRED,car_ir_24g_receive_attack
+car_ir_data_notify:
+	arg 0x07,loopcnt
+	arg mem_ir_notify_data_head,contr
+	call calc_check_sum_start
+	store 1,mem_ir_notify_data_check_sum
+	arg mem_ir_notify_data,rega
+	branch queue_push
+
+car_ir_24g_receive_attack:
+	fetch 1,mem_car_24g_ir_receive_attack_count
+	increase 1,pdata
+	store 1,mem_car_24g_ir_receive_attack_count
+	div pdata,2
+	call wait_div_end
+	quotient temp
+	remainder pdata
+	nbranch car_ir_24g_receive_attack_blink,blank
+car_ir_24g_receive_attack_off:
+	fetch 1,mem_car_config_led_num
+	isub temp,null
+	call car_ir_24g_go_die,zero
+	arg mem_car_led_control,pdata
+	increase -1,temp
+	iadd temp,rega
+	arg 0,pdata
+	istore 1,rega
+	rtn
+car_ir_24g_receive_attack_blink:
+	arg mem_car_led_control,pdata
+	iadd temp,rega
+	arg 2,pdata
+	istore 1,rega
+	rtn
+car_ir_24g_go_die:
+	jam 1,mem_car_24g_go_die_flag
+	rtn
+car_ir_clk_get:
+	copy clkn_bt,pdata
+	store 4,mem_ir_receive_clkn
+	rtn
+car_ir_clk_check:
+	copy clkn_bt,pdata
+	fetcht 4,mem_ir_receive_clkn
+	isub temp,pdata
+	sub pdata,200,null
+	rtn
+
+car_ir_gpio_get_status:
+	fetcht 1,mem_ir_rx_gpio
+	branch gpio_get_bit
+
+car_led_control_receive:
+	fetch 8,mem_le_receive_payload
+	store 8,mem_car_led_control
+	rtn
+
+car_info_request:
+	fetch 1,mem_car_config_device_select
+	store 1,mem_car_info_request_payload
+	fetch 1,mem_car_config_motor_layout
+	store 1,mem_car_info_request_payload+1
+	fetch 1,mem_car_config_ir_enable
+	store 1,mem_car_info_request_payload+2
+	arg 13,loopcnt
+	arg mem_car_info_request_head,contr
+	call calc_check_sum_start
+	store 1,mem_car_info_request_checksum
+	arg mem_car_info_request,rega
+	branch queue_push
+    
+endif
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_light.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_light.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_light.prog	(working copy)
@@ -0,0 +1,227 @@
+
+light_init:
+	call clear_eeprom_size_2k
+	jam 0x7a,mem_curr_packet_num
+	call light_load_controler_list
+	call light_init_crr_cmd_count
+	setarg light_pairing_timer
+	store 2,mem_cb_event_timer
+	arg 0,rega
+	branch pwm_init
+
+light_pairing_timer:
+	fetch 2,mem_light_pairing_timer
+	rtn blank
+	increase -1,pdata
+	store 2,mem_light_pairing_timer
+	rtnne 0
+	jam 0,mem_light_pairing_enable
+	rtn
+
+light_init_crr_cmd_count:
+	bpatch patch1a_6,mem_patch1a
+	fetch 1,mem_light_next_record
+	sub pdata,40,null
+	rtn positive
+	jam 0,mem_light_next_record
+	rtn
+
+light_load_controler_list:
+	arg mem_light_next_record,rega
+	arg 0,regb
+	arg 81,temp
+	branch iicd_read_eep_data
+
+//output user:group record find
+light_find_controler_pairing:
+	disable user
+	fetch 1,mem_light_cnum
+	copy pdata,loopcnt
+	
+	arg mem_light_clist,rega
+	copy regc,regb
+light_find_controler_pairing_loop:
+	bpatch patch1a_7,mem_patch1a
+	call light_compare_addr_record
+	branch enable_user,zero
+light_find_single_pairing_diff:
+	increase 4,rega
+	loop light_find_controler_pairing_loop
+	rtn
+
+//rega: regb:
+light_compare_addr_record:
+	bpatch patch1b_0,mem_patch1b
+	ifetch 3,rega
+	ifetcht 3,regb
+	isub temp,null
+	rtn
+//rega: regb:
+light_compare_single_record:
+	bpatch patch1b_1,mem_patch1b
+	ifetch 3,rega
+	ifetcht 3,regb
+	isub temp,null
+	nrtn zero
+	ifetch 1,contr
+	sub pdata,0,null //0 zero
+	rtn zero
+	add rega,3,contr
+	ifetcht 1,contr
+	isub temp,null
+	rtn
+
+//output:find single controler
+light_find_controler_cmd:
+	bpatch patch1b_2,mem_patch1b
+	disable user
+	fetch 1,mem_light_cnum
+	copy pdata,loopcnt
+	
+	arg mem_light_clist,rega
+	copy regc,regb
+light_find_controler_cmd_loop:
+	call light_compare_single_record
+	branch enable_user,zero
+	increase 4,rega
+	loop light_find_controler_cmd_loop
+	rtn
+
+//regc
+light_recv_adv:
+	fetch 1,mem_le_scanrsp_rcv
+	increase 1,pdata
+	store 1,mem_le_scanrsp_rcv
+	arg mem_le_rxbuf+12,regc
+
+light_anylize_command:
+	ifetch 2,regc
+	arg 0x55aa,temp
+	isub temp,null
+	nrtn zero
+	copy contr,regc
+	ifetcht 3,regc
+	setarg 0xffffff
+	isub temp,null
+	branch light_parse_cmd,zero
+	call light_find_controler_cmd
+	branch light_parse_cmd,user
+	rtn
+
+light_parse_cmd:
+	bpatch patch1b_3,mem_patch1b
+	increase 4,regc
+	ifetch 1,regc
+	fetcht 1,mem_curr_packet_num
+	isub temp,null
+	rtn zero
+	store 1,mem_curr_packet_num
+	fetch 1,mem_le_req_rcv
+	increase 1,pdata
+	store 1,mem_le_req_rcv
+	
+	increase 1,regc
+	ifetch 1,regc
+	store 1,mem_light_crr_cmd_count
+	copy pdata,loopcnt
+	rtn blank
+light_parse_cmd_loop:
+	ifetch 1,contr
+	beq LIGHT_CMD_PWM0,light_parse_cmd_pwm0
+	beq LIGHT_CMD_PWM1,light_parse_cmd_pwm1
+	beq LIGHT_CMD_PWM2,light_parse_cmd_pwm2
+	beq LIGHT_CMD_PWM3,light_parse_cmd_pwm3
+	beq LIGHT_CMD_PWM4,light_parse_cmd_pwm4
+	beq LIGHT_CMD_PWM5,light_parse_cmd_pwm5
+	beq LIGHT_CMD_AUTO_MODE,light_parse_auto_mode
+	beq LIGHT_CMD_PAIRING,light_parse_pairing
+	loop light_parse_cmd_loop
+	rtn
+
+light_parse_cmd_pwm0:
+	copy contr,regc
+	fetch 1,mem_light_pwm0
+	store 1,mem_pdatatemp
+	arg 0,temp
+light_parse_cmd_pwm_common:
+	storet 1,mem_pdatatemp+1
+	setarg 10000
+	store 3,mem_pdatatemp+2
+	ifetch 1,regc
+	store 1,mem_pdatatemp+5
+	call  pwm_out_set
+	and regc,1,contr
+	loop light_parse_cmd_loop
+	rtn
+light_parse_cmd_pwm1:
+	copy regc,contr
+	fetch 1,mem_light_pwm1
+	store 1,mem_pdatatemp
+	arg 1,temp
+	branch light_parse_cmd_pwm_common
+light_parse_cmd_pwm2:
+	copy regc,contr
+	fetch 1,mem_light_pwm2
+	store 1,mem_pdatatemp
+	arg 2,temp
+	branch light_parse_cmd_pwm_common
+light_parse_cmd_pwm3:
+	copy regc,contr
+	fetch 1,mem_light_pwm3
+	store 1,mem_pdatatemp
+	arg 3,temp
+	branch light_parse_cmd_pwm_common
+light_parse_cmd_pwm4:
+	copy regc,contr
+	fetch 1,mem_light_pwm4
+	store 1,mem_pdatatemp
+	arg 4,temp
+	branch light_parse_cmd_pwm_common
+light_parse_cmd_pwm5:
+	copy regc,contr
+	fetch 1,mem_light_pwm5
+	store 1,mem_pdatatemp
+	arg 5,temp
+	branch light_parse_cmd_pwm_common
+
+light_parse_auto_mode:
+	ifetch 1,contr
+	rtn
+
+light_parse_pairing:
+	copy contr,regc
+	fetch 1,mem_light_pairing_enable
+	bne 1,light_parse_pairing_abandon
+	call update_controler_list
+light_parse_pairing_abandon:
+	and regc,4,contr
+	rtn
+update_controler_list:
+	bpatch patch1b_4,mem_patch1b
+	call light_find_controler_pairing
+	branch update_conrtoler_list_found,user
+	fetch 1,mem_light_next_record
+	copy pdata,temp
+	increase 1,pdata
+	store 1,mem_light_next_record
+	call light_init_crr_cmd_count
+	lshift2 temp,temp
+	setarg mem_light_clist
+	iadd temp,contw
+	ifetch 4,regc
+	istore 4,contw
+	branch update_conrtoler_store_list
+update_conrtoler_list_found:
+	add regc,3,contr
+	ifetch 1,contr
+	rtn blank
+	ifetch 4,regc
+	istore 4,rega
+update_conrtoler_store_list:
+	arg mem_light_next_record,rega
+	arg 0,regb
+	arg 81,temp
+	branch iicd_write_eep_data
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_lightC.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_lightC.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_lightC.prog	(working copy)
@@ -0,0 +1,55 @@
+lightc_init:
+	//key scan init
+
+	//gpio init
+	fetcht 1,mem_lightc_led_gpio
+	call gpio_out_inactive
+	rtn
+
+
+lightc_dispatch:
+	//key scan 
+	
+	fetcht 1,mem_lightc_led_gpio
+	call gpio_out_active
+
+
+	fetcht 1,mem_lightc_led_gpio
+	call gpio_out_inactive
+
+	//
+	call lightc_start_adv
+
+	fetch 1,mem_adv_time
+	nrtn blank
+	//sleep 
+	call lpm_write_gpio_wakeup
+	hfetch 4,core_lpm_ctrl
+	set0 15,pdata						/* lowest lpo */
+	hstore 4,core_lpm_reg
+	call lpm_write_ctrl
+	arg param_hibernate_clks,temp
+	branch lpm_sleep
+
+lightc_adv:
+	fetch 1,mem_adv_time
+	branch le_adv_loop_tx,blank
+	increase -1,pdata
+	store 1,mem_adv_time
+	branch le_adv_loop_tx
+
+lightc_start_adv:
+	mul32 pdata,20,pdata
+	arg mem_cmd0_string,contr
+	iadd contr,contr
+	ifetch 1,contr
+	rtn blank
+	copy pdata,rega
+	copy rega,loopcnt
+	arg mem_le_adv_data+2,contw
+	call memcpy
+	copy rega,pdata
+	increase 2,pdata
+	store 1,mem_le_adv_data_len
+	rtn
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_module.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_module.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_module.prog	(working copy)
@@ -0,0 +1,1506 @@
+
+ifdef COMPILE_MODULE
+
+
+
+
+module_init:
+	
+	rtn wake
+	call le_modified_name
+	call adc_init_data
+	setarg module_process_idle
+	store 2,mem_cb_idle_process
+	setarg module_bt_conn_process
+	store 2,mem_cb_bt_process
+	setarg module_process_bb_event
+	store 2,mem_cb_bb_event_process
+	setarg module_le_conn_process
+	store 2,mem_cb_le_process
+	setarg module_lpm_lock
+	store 2,mem_cb_check_wakelock
+	setarg module_hci_cmd_transmit_le_notify
+	store 2,mem_cb_ble_transmit
+	setarg module_hci_event_receive_spp_data
+	store 2,mem_cb_receive_spp_data
+	setarg module_le_receive_data
+	store 2,mem_cb_att_write
+	setarg module_bb_event_timer
+	store 2,mem_cb_event_timer
+
+	call module_spp_clear_last_transmite_clock
+	bpatch patch1b_5,mem_patch1b
+	call module_lpm_uart_init
+	call module_gpio_init
+	call check_module_disabled
+	branch module_hci_event_enter_standby_mode
+
+
+module_lpm_uart_init:
+	fetch 4,mem_module_uart_rx_buffer
+	hstore 4,core_uart_rsaddr
+
+	fetch 4,mem_module_uart_tx_buffer
+	hstore 4,core_uart_tsaddr
+
+	hfetch 1,core_gpio_sel1
+	or_into 0x04,pdata
+	and_into 0xfc,pdata
+	hstore 1,core_gpio_sel1
+	jam 0x00,core_uart_ctrl
+
+	fetch 2,mem_module_uart_rx_buffer
+	hstore 2,core_uart_rrptr
+	fetch 2,mem_module_uart_tx_buffer
+	hstore 2,core_uart_twptr
+	hstore 2,core_uart_trptrp
+
+	hfetch 4,core_gpio_pu0
+	set1 7,pdata
+	hstore 4,core_gpio_pu0
+	
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_UART,pdata
+	hstore 2,core_clkoff
+	call uart_set_baud_by_mem
+	jam uartclk_crystal,core_uart_clksel
+	jam uart_ctrl_h4,core_uart_ctrl
+
+	fetch 1,mem_module_flag
+	isolate1 MODULE_FLAG_UART_FLOW_CONTROL,pdata
+	hfetcht 1,core_uart_ctrl
+	setflag true,4,temp
+	hstoret 1,core_uart_ctrl
+	rtn
+	
+
+
+module_lpm_init:
+	call module_spp_clear_last_transmite_clock
+	branch module_lpm_uart_init
+//	branch module_gpio_init
+	
+module_gpio_init:
+	//module state pin
+//	call ui_led_init	
+//	call app_led_start_blink
+	//module conn state pin
+	fetcht 1,mem_module_connect_state_gpio
+	call gpio_config_output
+	call module_set_conn_pin_low
+	
+	fetcht 1,mem_module_wake_up_gpio
+	branch gpio_config_input
+
+module_lpm_lock:
+	fetcht 1,mem_module_wake_up_gpio
+	call gpio_get_bit
+	nbranch app_put_lpm_wake_lock,true
+	branch app_get_lpm_wake_lock
+
+	
+module_le_conn_process:
+	rtn
+
+module_bt_conn_process:
+	call module_spp_enter_sniff
+	branch module_control_air_flow
+
+module_spp_enter_sniff:
+	fetch 1,mem_ui_state_map
+	bbit0 UI_STATE_BT_SPP_CONN,module_spp_clear_last_transmite_clock
+	bpatch patch1b_6,mem_patch1b
+	setarg 0x3eff
+	fetcht 4,mem_last_transmite_clock
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_SNIFF,module_spp_clear_last_transmite_clock
+	fetch 1,mem_module_flag
+	rtnbit1 MOUDLE_TASK_SNIFF
+	call module_set_sniff_task_flag
+	call app_bt_enter_sniff
+module_spp_clear_last_transmite_clock:
+	copy clkn_bt,pdata
+	store 4,mem_last_transmite_clock
+	rtn
+	
+
+module_process_idle:
+	call module_control_air_flow
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	branch module_process
+
+	
+module_process_bb_event:
+	copy regc,pdata
+	beq BT_EVT_BB_CONNECTED,module_process_bb_conn
+	beq BT_EVT_BB_DISCONNECTED,module_process_bb_event_disconned
+	beq BT_EVT_RECONN_FAILED,module_process_reconn_fail
+	beq BT_EVT_SETUP_COMPLETE,module_process_setup_complete
+	beq BT_EVT_SPP_CONNECTED,module_process_spp_connected
+	beq BT_EVT_SPP_DISCONNECTED,module_process_spp_disconnected
+	beq BT_EVT_PINCODE_REQ,module_process_evt_pincode_req
+	beq BT_EVT_ENTER_SNIFF,module_process_enter_sniff
+	beq BT_EVT_EXIT_SNIFF,module_process_exit_sniff
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,module_process_page_time_out
+	beq BT_EVT_LE_CONNECTED,module_process_le_conn
+	beq BT_EVT_LE_DISCONNECTED,module_process_bb_even_le_disconn
+	beq BT_EVT_SNIFF_NOT_ACCEPT,module_process_sniff_not_accept
+	beq BT_EVT_UNSNIFF_ACCEPT,module_process_unsniff_accept
+	beq BT_EVT_UNSNIFF_NOT_ACCEPT,module_process_unsniff_not_accept
+	beq BT_EVT_LE_PAIRING_FAIL,module_hci_event_le_pairing_fail
+	beq BT_EVT_LE_PAIRING_SUCCESS,module_hci_event_le_pairing_success
+	beq BT_EVT_LE_START_ENC,module_hci_event_start_enc
+	beq BT_EVT_LE_PAUSE_ENC,module_hci_event_pause_enc
+	beq BT_EVT_LE_TK_GENERATE,module_hci_event_le_tk
+	beq BT_EVT_BT_GKEY_GENERATE,module_hci_event_gkey_generate
+	beq BT_EVT_BT_GET_PASSKEY,module_hci_event_passkey_entry_mode
+	beq BT_EVT_BT_PAIRING_FAIL,module_hci_event_bt_pairing_fail	
+	beq BT_EVT_BT_PAIRING_SUCCESS,module_hci_event_bt_pairing_success
+ifdef SECURE_CONNECTION	
+	beq BT_EVT_LE_GKEY_GENERATE,module_hci_event_le_gkey
+endif
+	beq BT_EVT_STORE_NVRAM,module_hci_event_store_device
+	beq BT_EVT_LE_LTK_LOST,module_process_ble_ltk_lost
+	rtn
+
+	
+module_process_bb_event_disconned:
+	call module_spp_clear_last_transmite_clock
+	fetch 1,mem_flag_pairing_state
+	ncall module_hci_event_bt_pairing_fail,blank
+	call module_disconn_start
+	fetch 2,mem_ui_state_map
+	rtnbit0 UI_STATE_BT_SPP_CONN
+	branch  module_spp_disconnected
+
+module_process_spp_connected:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_SPP_CONN,pdata
+	store 2,mem_ui_state_map
+	fetch 1,mem_module_spp_lpm_mult
+	store 1,mem_lpm_mult
+	call module_set_conn_pin_low
+	branch module_hci_event_spp_connect
+
+module_process_spp_disconnected:
+//	branch module_spp_disconnected
+module_spp_disconnected:
+	fetch 2,mem_ui_state_map
+	rtnbit0 UI_STATE_BT_SPP_CONN
+	set0 UI_STATE_BT_SPP_CONN ,pdata
+	store 2,mem_ui_state_map
+	branch module_hci_event_spp_disconnect
+
+
+module_process_enter_sniff:
+
+module_sniff_param_check:
+	call module_spp_clear_last_transmite_clock
+	//fetch 1,mem_context
+	//rtnbit0 state_insniff
+	fetch 2,mem_context+coffset_tsniff
+	rshift pdata,pdata
+	fetcht 2,mem_sniff_param_interval
+	isub temp,null
+	nbranch module_sniff_param_check_unsniff,zero
+	branch app_lpm_mult_enable
+module_sniff_param_check_unsniff:
+	fetch 1,mem_module_flag
+	rtnbit1 MOUDLE_TASK_UNSNIFF
+	hfetch 2,core_uart_rxitems    //*
+	ncall module_set_unsniff_task_flag,blank    //*加这两句话
+	branch app_bt_sniff_exit
+
+module_process_exit_sniff:
+	call module_clear_sniff_task_flag
+	branch app_lpm_mult_disable
+ 	
+module_process_setup_complete:
+	call module_spp_clear_last_transmite_clock
+	branch module_conn_start
+	
+module_process_bb_even_le_disconn:
+	call le_clr_config_more_data
+	call module_disconn_start
+	branch module_hci_event_le_disconnect
+
+module_process_evt_pincode_req:
+	branch  app_bt_set_pincode
+	
+
+module_process_sniff_not_accept:
+	branch module_clear_sniff_task_flag
+
+
+module_process_unsniff_accept:
+	fetch 1,mem_module_flag
+	bbit0 MOUDLE_TASK_UNSNIFF,app_bt_enter_sniff
+	branch module_clear_unsniff_task_flag
+
+	
+module_process_unsniff_not_accept:
+	branch module_clear_unsniff_task_flag
+
+	
+module_process_le_conn:
+	call le_send_att_exchange_mtu_requset
+	call module_conn_start
+	fetch 1,mem_module_le_lpm_mult
+	store 1,mem_lpm_mult
+	branch module_hci_event_le_connect
+
+
+module_process_bb_conn:
+	jam 0,mem_flag_mode_ssp_pin
+	call module_clear_sniff_task_flag
+	branch module_clear_unsniff_task_flag
+
+module_process_page_time_out:
+module_process_reconn_fail:
+module_disconn_start:
+	call module_start_adv_discovery_by_command
+	branch module_set_conn_pin_high
+
+
+module_process_ble_ltk_lost:
+	call le_send_reject_ind
+	branch le_send_smp_security_request
+
+
+module_set_conn_pin_high:
+	fetcht 1,mem_module_connect_state_gpio
+	branch gpio_out_active
+
+module_conn_start:
+	call module_stop_adv_discovery
+	branch module_set_conn_pin_low
+	
+module_stop_adv_discovery:
+	fetch 1,mem_module_state
+	isolate1 MOUDLE_STATE_BT_BIT,pdata
+	call app_bt_stop_discovery,true
+	fetch 1,mem_module_state
+	isolate1 MOUDLE_STATE_BLE_BIT,pdata
+	call app_ble_stop_adv,true
+	rtn
+module_set_conn_pin_low:
+	fetcht 1,mem_module_connect_state_gpio
+	branch gpio_out_inactive
+
+module_process_with_credit:
+	fetch 1,mem_credit_flag
+	rtneq CREDIT_DISABLE
+	branch rfcomm_send_uih_without_payload
+
+module_process:
+	hfetch 1,core_uart_status
+	bbit1 uart_status_rx_fifo_empty,module_process_with_credit  //rx no data
+	call uartd_prepare_rx
+	ifetch 1,contru
+	bne 0x01,module_hci_in_excp
+	hfetch 2,core_uart_rxitems
+	sub pdata,2,null
+	rtn positive
+	ifetch 1,contru
+	store 1,mem_module_uart_opcode
+	ifetcht 1,contru
+	copy contru,rega
+	storet 1,mem_module_uart_len
+	add temp,3,temp
+	hfetch 2,core_uart_rxitems
+	isub temp,temp
+	nrtn positive
+	jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	call module_hci_cmd_control
+	fetch 1,mem_module_temp_nl_discard_packet
+	rtneq HCI_NOT_DISCARD_PACKET
+	branch module_hci_dicard_packet //discard this packet
+
+module_hci_in_excp:
+	call delay_10ms
+	call module_hci_event_invalid_packet
+	branch module_hci_release_except
+
+
+module_hci_release_except:
+	bpatch patch1b_7,mem_patch1b
+	hfetch 2,core_uart_rxitems
+	rtn blank
+	call uartd_prepare_rx
+	ifetch 1,contru
+	sub pdata,0x01,null
+	ncall module_hci_dicard_bytes,zero
+	nbranch module_hci_release_except,zero
+	ifetch 1,contru
+	rtneq HCI_CMD_SPP_DATA_REQ
+	rtneq HCI_CMD_SET_CREDIT_GIVEN
+	increase -1,contru
+	call module_hci_dicard_bytes
+	branch module_hci_release_except
+
+module_hci_dicard_packet:
+	call uartd_prepare_rx
+	increase 2,contru
+	ifetch 1,contru
+	iadd contru,contru
+module_hci_dicard_bytes:
+	branch uartd_rxdone
+	
+/*********************HCI CONTROL*********************/
+module_hci_cmd_control:
+	bpatch patch1c_0,mem_patch1c
+	fetch 1,mem_module_uart_opcode
+	beq HCI_CMD_SET_BT_ADDR_REQ,module_hci_cmd_set_bt_addr
+	beq HCI_CMD_SET_LE_ADDR_REQ,module_hci_cmd_set_le_addr
+	beq HCI_CMD_SET_VISIBILITY_REQ,module_hci_cmd_set_visibility	
+	beq HCI_CMD_SET_BT_NAME_REQ,module_hci_cmd_set_bt_name
+	beq HCI_CMD_SET_LE_NAME_REQ,module_hci_cmd_set_le_name
+	beq HCI_CMD_SPP_DATA_REQ,module_hci_cmd_receive_spp_data
+	beq HCI_CMD_LE_DATA_REQ,module_hci_cmd_receive_le_data
+	beq HCI_CMD_STATUS_IRQ,module_hci_cmd_inquire_status
+	beq HCI_CMD_SET_PAIRING_REQ,module_hci_cmd_set_pairing_mode
+	beq HCI_CMD_SET_PINCODE_REQ,module_hci_cmd_set_pincode	
+	beq HCI_CMD_SET_UARTCONTROL_REQ,module_hci_cmd_set_uart_control_mode
+	beq HCI_CMD_SET_UART_BAUD_REQ,module_hci_cmd_set_uart_baud
+	beq HCI_CMD_VERSION_REQ,module_hci_cmd_version_request
+	beq HCI_CMD_BT_DISCONNECT,module_hci_cmd_bt_disconnect
+	beq HCI_CMD_BLE_DISCONNECT,module_hci_cmd_ble_disconnect
+	beq HCI_CMD_SET_NVRAM_REQ,module_hci_cmd_set_nvram
+	beq HCI_CMD_CONFIRM_GKEY,module_hci_cmd_confirm_gkey
+	beq HCI_CMD_SET_CREDIT_GIVEN,module_hci_cmd_set_credit_given
+	beq HCI_CMD_AUTO_ADV_SCAN,module_hci_cmd_auto_adv
+	beq HCI_CMD_POWER_REQ,module_hci_cmd_power_request
+	beq HCI_CMD_POWER_SET,module_hci_cmd_power_set
+	beq HCI_CMD_PASSKEY_ENTRY,module_hci_cmd_passkey_entry
+	beq HCI_CMD_SET_GPIO,module_hci_cmd_set_gpio
+	beq HCI_CMD_READ_GPIO,module_hci_cmd_read_gpio
+	beq HCI_CMD_LE_SET_PAIRING,module_hci_cmd_le_set_pairing_mode
+	beq HCI_CMD_LE_SET_ADV_DATA,module_hci_cmd_le_set_adv_data
+	beq HCI_CMD_LE_SET_SCAN_DATA,module_hci_cmd_le_set_scan_data
+	beq HCI_CMD_LE_SEND_CONN_UPDATE_REQ,module_hci_cmd_le_send_conn_update_req
+	beq HCI_CMD_LE_SET_ADV_PARM,module_hci_cmd_set_le_adv_parameter
+	beq HCI_CMD_LE_START_PAIRING,module_hci_cmd_le_start_pairing
+	beq HCI_CMD_SET_WAKE_GPIO,module_hci_cmd_set_wake_gpio
+	beq HCI_CMD_SET_TX_POWER,module_hci_cmd_set_tx_power
+	beq HCI_CMD_LE_CONFIRM_GKEY,module_hci_cmd_le_confirm_gkey
+	beq HCI_CMD_REJECT_JUSTWORK,module_hci_cmd_set_reject_justwork_flag
+	beq HCI_CMD_RESET_CHIP_REQ,module_hci_cmd_reset_chip
+	beq HCI_CMD_LE_SET_FIXED_PASSKEY,module_hci_cmd_le_set_fixed_passkey
+	beq HCI_TEST_CMD_CLOSE_LPM,module_hci_test_cmde_close_lpm
+	branch  module_hci_event_receive_invalid_cmd
+
+/*********************HCI COMMAND*********************/
+
+//command opcode 0x00
+module_hci_cmd_set_bt_addr:
+	fetch 1,mem_module_uart_len
+	bne 6,module_hci_event_receive_invalid_cmd
+	ifetch 6,contru
+	store 6,mem_lap
+	branch module_hci_event_receive_valid_cmd
+
+//command opcode 0x01
+module_hci_cmd_set_le_addr:
+	fetch 1,mem_module_uart_len
+	bne 6,module_hci_event_receive_invalid_cmd
+	ifetch 6,contru
+	store 6,mem_le_lap
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x02
+module_hci_cmd_set_visibility:
+	fetch 1,mem_module_uart_len
+	bne 1,module_hci_event_receive_invalid_cmd
+	copy rega,contru
+	call module_hci_event_receive_valid_cmd
+	ifetcht 1,contru
+	storet 1,mem_module_bluetooth_stauts_by_command
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	rtnbit1 UI_STATE_BT_CONNECTED
+module_start_adv_discovery_by_command:
+	fetch 1,mem_module_state
+	isolate1 MOUDLE_STATE_BT_BIT,pdata
+	nbranch moudle_start_adv_by_command,true
+	fetcht 1,mem_module_bluetooth_stauts_by_command
+	and temp,0x03,pdata
+	store 1,mem_scan_mode
+moudle_start_adv_by_command:
+	fetch 1,mem_module_state
+	isolate1 MOUDLE_STATE_BLE_BIT,pdata
+	nrtn true
+	fetcht 1,mem_module_bluetooth_stauts_by_command
+	isolate1 2,temp
+	branch app_ble_start_adv,true
+	branch app_ble_stop_adv
+
+
+//command opcode 0x03
+module_hci_cmd_set_bt_name:
+	fetch 1,mem_module_uart_len
+	sub pdata,67,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_local_name_length
+	arg 8,loopcnt
+	call memset0
+	fetch 1,mem_module_uart_len
+	copy pdata,loopcnt
+	copy rega,contru
+	arg mem_local_name,contw
+	call uart_copy_rx_bytes_fast
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x04
+module_hci_cmd_set_le_name:
+	fetch 1,mem_module_uart_len
+	sub pdata,29,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_le_name_len
+	copy pdata,loopcnt
+	copy rega,contru
+	arg mem_le_name,contw
+	call uart_copy_rx_bytes_fast
+	call le_modified_name
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x05
+module_hci_cmd_receive_spp_data:
+	fetch 1,mem_ui_state_map
+	bbit0 UI_STATE_BT_SPP_CONN,module_hci_event_receive_invalid_cmd
+	call app_check_sniff
+	branch module_hci_cmd_spp_exit_sniff,true
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+//	call p_nl_clear_last_transmite_clock
+	call module_spp_clear_last_transmite_clock
+	fetch 1,mem_remote_credits
+	rtn blank
+	fetch 2,mem_nl_rx_len_all
+	bne 0,module_hci_cmd_pass_init_ng_rx_len_all
+	fetch 1,mem_module_uart_len
+	store 2,mem_nl_rx_len_all
+
+	copy rega,contru
+//	ifetch 2,contru
+//	store 2,mem_nl_rx_handle
+	copy contru,pdata
+	store 2,mem_nl_rx_data_src
+module_hci_cmd_pass_init_ng_rx_len_all:
+	call module_hci_cmd_get_current_packet_len_and_remain_len
+	branch spp_tx_rfcomm_packet
+	
+module_hci_cmd_spp_exit_sniff:
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	branch module_exit_sniff
+
+module_hci_cmd_get_current_packet_len_and_remain_len:
+	call module_hci_cmd_get_current_patcket_len
+	fetch 2,mem_nl_rx_len_all
+	fetcht 2,mem_current_packet_length
+	isub temp,pdata
+	store 2,mem_nl_rx_len_all
+	rtn
+
+module_hci_cmd_get_current_patcket_len:
+	fetch 2,mem_nl_rx_len_all
+	arg DM_REFCOM_BUFF_LEN,temp
+	call not_greater_than
+	fetcht 2,mem_rfcomm_max_frame_size
+	call not_greater_than
+	fetcht 2,mem_pn_max_frame_size
+	call not_greater_than
+	store 2,mem_current_packet_length
+	rtn
+
+module_hci_command_tx_spp_tx_complete:
+	jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	jam HCI_CMD_SPP_DATA_REQ,mem_module_uart_opcode
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x09
+module_hci_cmd_receive_le_data:
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd
+	call module_check_ble_encrypt_state
+	branch module_hci_event_receive_invalid_cmd,user
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet 
+	fetch 1,mem_module_flag
+	bbit1 MODULE_FLAG_BLE_DATA_FINISH,module_hci_cmd_receive_le_data_finish
+	fetch 1,mem_module_hci_notify_len
+	nrtn blank
+	jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet 
+	ifetch 2,contru		//handle
+	store 2,mem_module_hci_notify_handle
+	copy contru,pdata
+	store 2,mem_module_hci_nofiy_addr
+	fetch 1,mem_module_uart_len
+	pincrease -2
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	branch module_hci_event_receive_invalid_cmd,zero
+	store 1,mem_module_hci_notify_len
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	call le_set_config_more_data
+	call module_hci_cmd_transmit_le_notify
+	call module_hci_cmd_transmit_le_notify
+	call module_hci_cmd_transmit_le_notify
+	fetch 1,mem_module_flag
+	rtnbit0 MODULE_FLAG_BLE_DATA_FINISH
+module_hci_cmd_receive_le_data_finish:
+	jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet 
+	call module_clear_le_tx_data_flag
+	branch module_hci_event_receive_valid_cmd
+
+module_hci_cmd_transmit_le_notify:
+	fetch 1,mem_module_hci_notify_len
+	rtn blank
+	call le_fifo_check_nearly_full
+	nrtn blank				//no fifo
+	call module_get_le_remote_mtu
+	bpatch patch1c_1,mem_patch1c
+	add temp,-3,pdata		//sub handle and opcode
+	fetcht 1,mem_module_hci_notify_len
+	call not_greater_than
+	copy pdata,rega
+	copy temp,pdata
+	isub rega,pdata
+	store 1,mem_module_hci_notify_len
+	fetcht 2,mem_module_hci_notify_handle
+	call le_att_malloc_tx_notify
+	fetch 2,mem_module_hci_nofiy_addr
+	copy pdata,contru
+	copy rega,loopcnt
+	call uart_copy_rx_bytes_fast
+	copy contru,pdata
+	store 2,mem_module_hci_nofiy_addr
+	fetch 1,mem_module_hci_notify_len
+	nrtn blank
+	branch module_set_le_tx_data_flag
+
+
+//output: temp is master mtu
+module_get_le_remote_mtu:
+	arg 0x17,temp
+	fetch 1,mem_module_flag
+	rtnbit1 MODULE_FLAG_BLE_SEND_MTU23
+	fetcht 2,mem_le_remote_mtu
+	rtn
+
+module_check_ble_encrypt_state:
+	fetch 1,mem_module_flag
+	bbit1 MODULE_FLAG_BLE_DATA_ENCRYPT,le_check_encrypt_state
+	branch disable_user
+	
+
+//command opcode 0x0b
+module_hci_cmd_inquire_status:
+	branch module_hci_event_status_res
+
+
+//command opcode 0x0c
+module_hci_cmd_set_pairing_mode:
+	copy rega,contru
+	ifetch 1,contru
+	beq PAIRING_PINCODE,module_hci_pairing_pincode_mode
+	beq PAIRING_JUSTWORK,module_hci_pairing_just_work_mode
+	beq PAIRING_PASSKEY,module_hci_pairing_passkey
+	beq PAIRING_CONFIRM,module_hci_pairing_numeric_comparison
+	branch module_hci_event_receive_invalid_cmd
+module_hci_pairing_pincode_mode:
+	call ssp_disable
+	jam 0,mem_ssp_enable
+	branch module_hci_event_receive_valid_cmd
+module_hci_pairing_just_work_mode:
+	setarg SSP_MODE_JUST_WORK_IO_CAP_DATA
+module_hci_sspairing_mode:	
+	store 3,mem_sp_iocap_local
+	store 1,mem_ssp_mode_flag
+	call ssp_enable
+	jam 1,mem_ssp_enable
+	branch module_hci_event_receive_valid_cmd
+module_hci_pairing_passkey:
+	setarg SSP_MODE_PASSKEY_IO_CAP_DATA
+	branch module_hci_sspairing_mode
+
+module_hci_pairing_numeric_comparison:
+	setarg SSP_MODE_SSP_PIN_IO_CAP_DATA
+	branch module_hci_sspairing_mode
+
+//command opcode 0x0d
+module_hci_cmd_set_pincode:
+	fetch 1,mem_module_uart_len
+	sub pdata,16,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_pin_length
+	copy pdata,loopcnt
+	arg mem_pin,contw
+	call uart_copy_rx_bytes
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x0e
+module_hci_cmd_set_uart_control_mode:
+	copy rega,contru
+	ifetch 1,contru
+	hfetcht 1,core_uart_ctrl
+	nsetflag blank,4,temp
+	hstoret 1,core_uart_ctrl
+ 	branch module_hci_event_receive_valid_cmd
+
+ 	
+//command opcode 0x0f
+module_hci_cmd_set_uart_baud:
+	fetch 1,mem_module_uart_len
+	copy pdata,loopcnt
+	copy rega,contru
+	call string2dec_from_uart
+	setarg uart_clk_24
+	idiv temp
+	call wait_div_end
+	quotient pdata
+module_hci_cmd_set_uart_baud_ok:
+	store uart_baud_len,mem_baud
+	call module_hci_event_receive_valid_cmd
+	call wait_uarttx
+	branch uart_set_baud_by_mem
+
+
+//command opcode 0x10
+module_hci_cmd_version_request:
+	arg 2,rega
+	arg mem_soft_version_num,regb
+	arg 0,temp
+	branch module_hci_event_set_cmd
+module_hci_event_set_cmd_send_response:
+	store 2,mem_event_cmd_response_content
+	arg mem_event_cmd_response_content,regb
+	arg 0,temp
+	branch module_hci_event_set_cmd
+
+
+//command opcode 0x11
+module_hci_cmd_bt_disconnect:
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BT_CONNECTED,module_hci_event_receive_invalid_cmd
+module_hci_cmd_bt_disconnect_doing:
+	call module_hci_event_receive_valid_cmd
+	branch app_bt_disconnect
+
+	
+//command opcode 0x12
+module_hci_cmd_ble_disconnect:
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd
+module_hci_cmd_ble_disconnect_doing:
+	call module_hci_event_receive_valid_cmd
+	branch app_ble_disconnect
+
+
+
+
+//command opcode 0x26
+module_hci_cmd_set_nvram:
+	fetch 1,mem_module_uart_len
+	copy pdata,loopcnt
+	copy rega,contru
+	fetch 2,mem_nv_data_ptr
+	icopy contw
+	call uart_copy_rx_bytes_fast
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x28
+module_hci_cmd_confirm_gkey:
+	fetch 1,mem_ui_state_map
+	bbit0 UI_STATE_BT_CONNECTED,module_hci_event_receive_invalid_cmd	
+	ifetch 1,contru
+	fetcht 1,mem_flag_mode_ssp_pin
+	setflag blank,FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,temp
+	set1 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT ,temp
+	storet 1,mem_flag_mode_ssp_pin
+
+	call module_hci_event_receive_valid_cmd
+
+	fetch 1,mem_flag_mode_ssp_pin
+	bbit1 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT,module_hci_cmd_spp_number_comparison_result_is1
+	rtn
+
+dhkey_not_accept:
+	jam 0,mem_flag_mode_ssp_pin
+	jam BT_CMD_DHKEY_NOT_ACCEPT,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+
+module_hci_cmd_spp_number_comparison_result_is1:
+	bbit1 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,number_comparison_successed
+	branch dhkey_not_accept	
+
+
+//command opcode 0x29
+module_hci_cmd_set_credit_given:
+	fetch 1,mem_ui_state_map
+	rtnbit0 UI_STATE_BT_SPP_CONN
+	fetch 1,mem_credit_flag
+	rtneq CREDIT_DISABLE
+	ifetch 1,contru
+	fetcht 1,mem_credit_given
+	iadd temp,temp
+	storet 1,mem_credit_given
+	rtn
+
+	
+//command opcode 0x2a
+module_hci_cmd_auto_adv:
+	arg 0x40,loopcnt
+	arg mem_le_adv_data_len,contw
+	call clear_mem
+	setarg 0
+	store 1,mem_regb
+	copy rega,contru
+module_hci_cmd_auto_adv_loop:
+	copy contru,pdata
+	store 2,mem_regc
+	call module_hci_cmd_auto_adv_adv_analys
+
+	fetch 1,mem_regb
+	fetcht 1,mem_temp
+	increase 1,temp
+	iadd temp,pdata
+	store 1,mem_regb
+
+	sub pdata,31,null
+	nbranch module_hci_cmd_auto_adv_store_scan,positive
+module_hci_cmd_auto_adv_store_adv:
+	fetcht 1,mem_le_adv_data_len
+	setarg mem_le_adv_data
+	iadd temp,pdata
+	store 2,mem_contw
+	fetcht 1,mem_temp
+	increase 1,temp
+	fetch 1,mem_le_adv_data_len
+	iadd temp,pdata
+	store 1,mem_le_adv_data_len
+	branch module_hci_cmd_auto_adv_store_common
+module_hci_cmd_auto_adv_store_scan:
+	fetcht 1,mem_le_scan_data_len
+	setarg mem_le_scan_data
+	iadd temp,pdata
+	store 2,mem_contw
+	fetcht 1,mem_temp
+	increase 1,temp
+	fetch 1,mem_le_scan_data_len
+	iadd temp,pdata
+	store 1,mem_le_scan_data_len
+module_hci_cmd_auto_adv_store_common:
+	fetch 2,mem_contw
+	copy pdata,contw
+	fetch 2,mem_regc
+	copy pdata,contru
+
+	copy temp,loopcnt
+	call uart_copy_rx_bytes_fast
+
+	fetch 1,mem_module_uart_len
+	fetcht 1,mem_regb
+	isub temp,null
+	nbranch  module_hci_cmd_auto_adv_loop,zero
+	branch module_hci_event_receive_valid_cmd
+
+//block of adv len in mem_temp
+module_hci_cmd_auto_adv_adv_analys:
+	ifetch 1,contru
+	store 1,mem_temp
+	ifetch 1,contru
+	store 1,mem_rega
+	rtn
+
+
+//command opcode 0x2b
+module_hci_cmd_power_request:
+	arg 0,temp
+	arg 2,rega
+	fetch 2,mem_module_vdd_quotient
+	store 2,mem_event_cmd_response_content
+	arg mem_event_cmd_response_content,regb
+	branch module_hci_event_set_cmd
+
+
+//command opcode 0x2c
+module_hci_cmd_power_set:
+	fetch 1,mem_module_uart_len
+	bne 1,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	store 1,mem_module_read_vdd_flag
+	setarg 0x00
+	store 2,mem_module_vdd_quotient
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x30
+module_hci_cmd_passkey_entry:
+	ifetch 4,contru
+	store 4,mem_pin
+	jam 4,mem_pin_length
+	jam 0,mem_authentication_passkey_times
+	call module_hci_event_receive_valid_cmd
+	branch authentication_passkey
+
+
+//command opcode 0x31
+module_hci_cmd_set_gpio:
+	fetch 1,mem_module_uart_len
+	bne 3,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	beq HCI_CMD_CONFIG_GPIO_INPUT,module_set_gpio_input
+	beq HCI_CMD_CONFIG_GPIO_OUTPUT,module_set_gpio_output
+	branch module_hci_event_receive_invalid_cmd
+
+module_set_gpio_input:
+	ifetcht 1,contru
+	ifetch 1,contru
+	beq GPIO_INPUT_HIGH_IMPEDANCE,module_set_gpio_high_impedance
+	nsetflag blank,7,temp
+	call gpio_config_input
+	branch module_hci_event_receive_valid_cmd
+
+module_set_gpio_high_impedance:
+	call gpio_set_high_impedance
+	branch module_hci_event_receive_valid_cmd
+	
+module_set_gpio_output:
+	ifetcht 1,contru
+	call gpio_config_output0
+	ifetch 1,contru	
+	isolate1 0,pdata
+	call gpio_out_flag
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x32
+module_hci_cmd_read_gpio:
+	fetch 1,mem_module_uart_len
+	bne 1,module_hci_event_receive_invalid_cmd
+	ifetcht 1,contru
+	call gpio_get_bit
+	setarg 0x0
+	nsetflag true,0,pdata
+	arg 1,rega
+	branch module_hci_event_set_cmd_send_response
+
+
+//command opcode 0x33
+module_hci_cmd_le_set_pairing_mode:
+	copy rega,contru
+	ifetch 1,contru
+	copy pdata,temp
+ifdef SECURE_CONNECTION
+	beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,module_le_set_pairing_mode_secure_justwork
+	beq LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC,module_le_set_pairing_mode_secure_numeric
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,module_le_set_pairing_mode_secure_passkey
+endif
+	store 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_NONE, module_le_set_no_pairing
+	beq LE_PAIRING_MODE_LAGACY_JUSTWORK,module_le_set_pairing_mode_lagacy_just_work
+	beq LE_PAIRING_MODE_LAGACY_PASSKEY,module_le_set_pairing_mode_lagacy_passkey
+	branch module_hci_event_receive_invalid_cmd
+		
+ifdef SECURE_CONNECTION	
+module_le_set_pairing_mode_secure_justwork:
+	fetch 1,mem_le_secure_connect_enable
+	branch module_hci_event_receive_invalid_cmd,blank
+	storet 1,mem_le_pairing_mode
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	branch module_le_set_noinputnooutput
+module_le_set_pairing_mode_secure_numeric:
+	fetch 1,mem_le_secure_connect_enable
+	branch module_hci_event_receive_invalid_cmd,blank
+	storet 1,mem_le_pairing_mode
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	jam FLAG_IOCAP_DISPLAYYESNO,mem_le_pres_iocap
+	branch module_hci_event_receive_valid_cmd	
+module_le_set_pairing_mode_secure_passkey:	
+	fetch 1,mem_le_secure_connect_enable
+	branch module_hci_event_receive_invalid_cmd,blank
+	storet 1,mem_le_pairing_mode
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	branch module_le_set_displayonly
+endif
+module_le_set_no_pairing:
+	jam FLAG_LE_NO_BONDING_NO_MITM,mem_le_pres_auth
+module_le_set_noinputnooutput:	
+	jam FLAG_IOCAP_NOINPUTNOOUTPUT,mem_le_pres_iocap
+	branch module_hci_event_receive_valid_cmd	
+module_le_set_pairing_mode_lagacy_just_work:
+	jam FLAG_LE_BONDING_MITM,mem_le_pres_auth
+	branch module_le_set_noinputnooutput
+module_le_set_pairing_mode_lagacy_passkey:
+	jam FLAG_LE_BONDING_MITM,mem_le_pres_auth
+module_le_set_displayonly:	
+	jam FLAG_IOCAP_DISPLAYONLY,mem_le_pres_iocap
+	branch module_hci_event_receive_valid_cmd	
+
+	
+//command opcode 0x34
+module_hci_cmd_le_set_adv_data:
+	fetch 1,mem_module_uart_len
+	sub pdata,31,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_le_adv_data_len
+	copy pdata,loopcnt
+	copy rega,contru
+	arg mem_le_adv_data,contw
+	call uart_copy_rx_bytes_fast
+	branch module_hci_event_receive_valid_cmd
+	
+
+//command opcode 0x35
+module_hci_cmd_le_set_scan_data:
+	fetch 1,mem_module_uart_len
+	sub pdata,31,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_le_scan_data_len
+	copy pdata,loopcnt
+	copy rega,contru
+	arg mem_le_scan_data,contw
+	call uart_copy_rx_bytes_fast	
+	branch module_hci_event_receive_valid_cmd	
+
+	
+//command opcode 0x36
+module_hci_cmd_le_send_conn_update_req:
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd
+	fetch 1,mem_module_uart_len
+	bne 0x08,module_hci_event_receive_invalid_cmd
+	copy rega,contru
+	ifetch 8,contru
+	store 8,mem_le_interval_min
+	jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp
+	call  ui_ipc_send_cmd
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x37
+module_hci_cmd_set_le_adv_parameter:
+	ifetch 2,contru
+	store 2,mem_le_adv_interval
+	branch module_hci_event_receive_valid_cmd
+	
+	
+//command opcode 0x38
+module_hci_cmd_le_start_pairing:
+	fetch 1,mem_le_pairing_mode
+	branch module_hci_event_receive_invalid_cmd,blank
+	fetch 1,mem_le_pairing_state
+	bne FLAG_LE_PAIRING_NULL,module_hci_event_receive_invalid_cmd
+	fetch 1,mem_le_enc_state
+	bne FLAG_LE_ENC_NULL,module_hci_event_receive_invalid_cmd
+	call check_51cmd_le_smp_sec_req
+	branch module_hci_event_receive_valid_cmd	
+
+
+//command opcode 0x40
+module_hci_cmd_set_wake_gpio:
+	fetch 1,mem_module_uart_len
+	bne 5,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	store 1,mem_module_mcu_wake_pin
+	ifetch 4,contru
+	store 4, mem_module_mcu_wake_delay_us
+	fetcht 1,mem_module_mcu_wake_pin
+	call gpio_config_output
+	call module_set_mcu_wake_pin_low
+	branch module_hci_event_receive_valid_cmd
+	
+
+//command opcode 0x42
+module_hci_cmd_set_tx_power:
+	fetch 1,mem_module_uart_len
+	bne 0x01,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	store 1,mem_tx_power
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x48
+module_hci_cmd_le_confirm_gkey:
+	ifetch 1,contru
+	beq 0x01,module_hci_cmd_le_confirm_gkey_fail
+	fetch 1,mem_le_secure_connect_state
+	beq LE_SC_STAT_SEND_PUBLIC_KEY,module_hci_cmd_le_confirm_gkey_ok
+	beq LE_SC_STAT_RECEIVE_DHKEY,module_hci_cmd_le_confirm_gkey_ok
+	beq LE_SC_STAT_WAIT_CONFIRM_GKEY,module_hci_cmd_le_confirm_gkey_ok
+	branch module_hci_event_receive_invalid_cmd		
+module_hci_cmd_le_confirm_gkey_ok:
+	jam FLAG_LE_SC_CONFRIM_GKEY_OK,mem_le_sc_confirm_gkey_flag
+	branch module_hci_event_receive_valid_cmd	
+	
+module_hci_cmd_le_confirm_gkey_fail:
+	call le_send_pairing_confirm_value_failed
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x49
+module_hci_cmd_set_reject_justwork_flag:
+	fetch 1,mem_module_uart_len
+	bne 0x01,module_hci_event_receive_invalid_cmd
+	call module_hci_event_receive_valid_cmd
+	ifetch 1,contru
+	branch classic_bt_clr_reject_justwork_flag,blank
+	branch classic_bt_set_reject_justwork_flag
+
+
+//command opcode 0x51
+module_hci_cmd_reset_chip:
+	call module_hci_event_receive_valid_cmd
+	call wait_uarttx
+	jam 0x01,core_reset // rest YC1021
+	branch loop
+
+
+//command opcode 0x61
+module_hci_cmd_le_set_fixed_passkey:
+	fetch 1,mem_module_uart_len
+	beq 0,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	branch module_hci_cmd_le_set_random_passkey,blank
+	fetch 1,mem_module_uart_len
+	bne 5,module_hci_event_receive_invalid_cmd
+	ifetch 4,contru
+	arg 1000000,temp
+	isub temp,null
+	branch module_hci_event_receive_invalid_cmd,positive
+	store 4,mem_le_tk
+	call le_set_config_fixed_tk
+	branch module_hci_event_receive_valid_cmd
+
+module_hci_cmd_le_set_random_passkey:
+	call le_clr_config_fixed_tk
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0xff
+module_hci_test_cmde_close_lpm:
+	jam 0,mem_lpm_mode
+	branch module_hci_event_receive_valid_cmd
+	
+
+/*********************HCI EVENT*********************/
+
+module_hci_event_receive_invalid_cmd:
+	arg 1,temp
+	arg 0,rega
+	branch module_hci_event_set_cmd
+
+
+module_hci_event_receive_valid_cmd:
+	arg 0,temp
+	arg 0,rega
+	branch module_hci_event_set_cmd
+
+
+//event opcode 0x00
+module_hci_event_spp_connect:
+	jam  HCI_EVENT_SPP_CONN_REP,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x02
+module_hci_event_le_connect:
+	jam  HCI_EVENT_LE_CONN_REP,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x03
+module_hci_event_spp_disconnect:
+	jam  HCI_EVENT_SPP_DIS_REP,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x05
+module_hci_event_le_disconnect:
+	jam  HCI_EVENT_LE_DIS_REP,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x06
+//input:
+//	temp: success 0; fail 1
+//	rega:Response Content length
+//	regb:Response Content address
+module_hci_event_set_cmd:
+	fetch 1,mem_module_uart_opcode
+	copy pdata,regc
+	jam  HCI_EVENT_CMD_RES,mem_module_uart_opcode
+	setarg 2
+	iadd rega,pdata
+	call module_hci_prepare_tx
+	copy regc,pdata
+	istore 1,contwu
+	istoret 1,contwu
+	copy rega,loopcnt
+	copy regb,contr
+	call uart_copy_tx_bytes
+	branch uartd_send
+
+
+//event opcode 0x07
+module_hci_event_receive_spp_data:
+//	call p_nl_clear_last_transmite_clock
+	call module_spp_clear_last_transmite_clock
+	jam HCI_EVENT_SPP_DATA_REP,mem_module_uart_opcode
+	fetch 1,mem_current_length
+	rtn blank
+	call module_hci_prepare_tx
+	fetch 1,mem_current_length
+	copy pdata,loopcnt
+	fetch 2,mem_rfcomm_uih_payload_ptr
+	copy pdata,contr
+	call uart_copy_tx_bytes_fast
+	branch uartd_send
+
+
+//event opcode 0x08
+module_hci_event_receive_le_data:
+	jam HCI_EVENT_LE_DATA_REP,mem_module_uart_opcode
+	fetch 1,mem_module_le_rx_data_len
+	icopy loopcnt
+	increase 2,pdata
+	call module_hci_prepare_tx
+	fetch 2,mem_module_le_rx_data_handle // Attribute handle
+	istore 2,contwu
+	fetch 2,mem_module_le_rx_data_address
+	icopy contr
+	call uart_copy_tx_bytes_fast
+	branch uartd_send
+
+
+//event opcode 0x09
+module_hci_event_enter_standby_mode:
+	jam HCI_EVENT_STANDBY_REP,mem_module_uart_opcode
+module_hci_event_enter_standby_mode_len0:
+	setarg 0
+	call module_hci_prepare_tx
+	branch uartd_send
+
+
+//event opcode 0x0a
+module_hci_event_status_res:
+	jam HCI_EVENT_STATUS_RES,mem_module_uart_opcode
+	setarg 1
+	call module_hci_prepare_tx
+	
+	call module_hci_read_bt_status
+	
+	fetch 2,mem_ui_state_map	
+	arg UI_STATE_BT_HID_CONN,queue
+	qisolate1 pdata
+	setflag true,3,temp
+
+	arg UI_STATE_BLE_CONNECTED,queue
+	qisolate1 pdata
+	setflag true,5,temp	
+	
+	fetch 1,mem_ui_state_map
+	arg UI_STATE_BT_SPP_CONN,queue
+	qisolate1 pdata
+	setflag true,4,temp	
+	
+	istoret 1,contwu
+	branch uartd_send
+
+//	temp: bit0 3.0 inquiry;bit1 3.0 scan;bit2 ble adv;
+
+module_hci_read_bt_status:
+	arg 0,temp
+	fetch 1,mem_scan_mode
+	arg inq_scan_mode,queue
+	qisolate1 pdata
+	setflag true,0,temp
+	arg page_scan_mode,queue
+	qisolate1 pdata
+	setflag true,1,temp	
+
+	fetch 1,mem_le_adv_enable
+	arg 0,queue
+	qisolate1 pdata
+	setflag true,2,temp	
+	rtn
+
+
+//event opcode 0x0d
+module_hci_event_store_device:
+	jam HCI_EVENT_NVRAM_REP,mem_module_uart_opcode
+	fetch 1,mem_nv_data_number
+	mul32 pdata,34,pdata
+	icopy loopcnt
+	call module_hci_prepare_tx
+	fetch 2,mem_nv_data_ptr
+	icopy contr
+	call uart_copy_tx_bytes_fast
+	branch uartd_send
+
+
+//event opcode 0x0e
+module_hci_event_gkey_generate:
+	jam HCI_EVENT_GKEY,mem_module_uart_opcode
+	setarg 4
+	call module_hci_prepare_tx
+	fetch 4,mem_gkey
+	istore 4,contwu
+	branch uartd_send
+
+
+//event opcode 0x0f
+module_hci_event_invalid_packet:
+	jam HCI_EVENT_INVALID_PACKET,mem_module_uart_opcode
+	hfetch 2,core_uart_rxitems
+	arg 0xff,temp
+	call not_greater_than
+	copy pdata,loopcnt
+	call module_hci_prepare_tx
+	call uartd_prepare_rx
+	call uart_copy_rx2tx
+	branch uartd_send
+
+
+//event opcode 0x10
+module_hci_event_passkey_entry_mode:
+	jam  HCI_EVENT_GET_PASSKEY,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x11
+module_hci_event_le_tk:
+	jam HCI_EVENT_LE_TK,mem_module_uart_opcode
+	setarg 4
+	call module_hci_prepare_tx
+	fetch 4,mem_le_tk
+	istore 4,contwu
+	branch uartd_send
+
+
+//event opcode 0x14
+module_hci_event_le_pairing_fail:
+	arg FLAG_BLE_PAIRING_FAIL,rega
+	branch module_hci_event_pairing_completed
+
+module_hci_event_le_pairing_success:
+	arg FLAG_BLE_PAIRING_SUCCESS,rega
+	branch module_hci_event_pairing_completed
+
+module_hci_event_bt_pairing_fail:
+	arg FLAG_BT_PAIRING_FAIL,rega
+	branch module_hci_event_pairing_completed
+
+module_hci_event_bt_pairing_success:
+	arg FLAG_BT_PAIRING_SUCCESS,rega
+
+module_hci_event_pairing_completed:
+	jam 0,mem_flag_mode_ssp_pin
+	jam HCI_EVENT_LE_PAIRING_STATE,mem_module_uart_opcode
+	setarg 2
+	call module_hci_prepare_tx
+	copy rega,pdata
+	istore 2,contwu
+	branch uartd_send
+
+
+//event opcode 0x15
+module_hci_event_pause_enc:
+	arg FLAG_EVENT_PAUSE_ENC,regc
+	branch module_hci_event_enc
+
+module_hci_event_start_enc:
+	arg FLAG_EVENT_START_ENC,regc
+
+module_hci_event_enc:
+	jam HCI_EVENT_LE_ENCRYPTION_STATE,mem_module_uart_opcode
+	setarg 1
+	call module_hci_prepare_tx
+	copy regc,pdata
+	istore 1,contwu
+	branch uartd_send
+
+
+//event opcode 0x1d
+module_hci_event_le_gkey:
+	jam HCI_EVENT_LE_GKEY,mem_module_uart_opcode
+	setarg 4
+	call module_hci_prepare_tx
+	fetch 4,mem_gkey
+	istore 4,contwu
+	branch uartd_send
+
+
+//****************************************************************//
+	//module_hci_prepare_tx
+	//function:write hci packet header
+	//input: pdata-----packet length  (1byte)
+	//input: mem_uart_opcode------opcode (1byte)
+	//output:contwu --- pointer to packet payload
+	//use reg: contwu,pdata
+//****************************************************************//	
+module_hci_prepare_tx:
+	jam 0x02,mem_module_uart_cmd
+	store 1,mem_module_uart_len
+	storet 8,mem_temp
+	bpatch patch1c_2,mem_patch1c
+	call module_set_mcu_wake_pin_high_delay
+	fetcht 8,mem_temp
+	call uartd_prepare_tx
+	fetch 3,mem_module_uart_cmd
+	istore 3,contwu
+	rtn
+
+
+module_set_mcu_wake_pin_high_delay:
+	call module_check_mcu_wake_pin_high
+	rtn true
+module_set_mcu_wake_pin_h_delay:
+	call module_set_mcu_wake_pin_high
+	fetch 4,mem_module_mcu_wake_delay_us
+	rshift2 pdata,pdata
+	rtn blank
+	branch delay
+
+module_set_mcu_wake_pin_high:
+	//call ice_break
+	fetcht 1,mem_module_mcu_wake_pin
+	branch gpio_out_active
+
+module_check_mcu_wake_pin_high:
+	fetcht 1,mem_module_mcu_wake_pin
+	branch gpio_check_active
+
+module_set_mcu_wake_pin_low:
+	fetcht 1,mem_module_mcu_wake_pin
+	branch gpio_out_inactive
+
+
+delay:
+	increase -1,pdata
+	nop 38
+	nbranch delay,blank
+	rtn
+
+/*********************hci command end*********************/
+
+/*********************hci ble receive data start*********************/
+
+//rega is le rx data address
+//regb is le rx data length
+//mem_le_att_handle is write handle
+module_le_receive_data:
+	call module_check_ble_encrypt_state
+	rtn user
+	copy rega,pdata
+	store 2,mem_module_le_rx_data_address
+	copy regb,pdata
+	store 1,mem_module_le_rx_data_len
+	fetch 2,mem_le_att_handle
+	fetcht 2,mem_module_data_write_handle
+	isub temp,null
+	branch module_le_receive_data_ok,zero
+	fetcht 2,mem_module_data_write_handle2
+	isub temp,null
+	nrtn zero
+module_le_receive_data_ok:	
+	store 2,mem_module_le_rx_data_handle
+	branch module_hci_event_receive_le_data
+
+
+/*********************hci ble receive data end*********************/
+
+module_exit_sniff:
+	fetch 1,mem_module_flag
+	rtnbit1 MOUDLE_TASK_UNSNIFF
+	call module_set_unsniff_task_flag	
+	branch app_bt_sniff_exit
+
+
+module_set_lpm_mult_2:
+	jam 2,mem_lpm_mult
+	rtn
+
+
+
+module_bb_event_timer:
+	branch module_read_vdd_timer
+
+module_read_vdd_timer:
+	fetch 1,mem_module_read_vdd_flag
+	rtn blank
+	fetch 1,mem_module_read_vdd_count
+	rtn blank
+	increase -1,pdata
+	store 1,mem_module_read_vdd_count
+	nrtn blank
+	jam FLAG_MODULE_READ_VDD_COUNT,mem_module_read_vdd_count
+	call adc_set_mode
+	call vdd_calculate_by_mode
+	div pdata,0x64
+	call wait_div_end
+	quotient pdata
+	remainder temp
+	store 1,mem_module_vdd_quotient
+	storet 1,mem_module_vdd_remainder
+	rtn	
+	
+
+module_control_air_flow:
+	call check_uart_tx_buff
+	branch app_l2cap_flow_control_enable,positive
+	branch app_l2cap_flow_control_disable
+
+
+/**************module state *******************/
+module_set_sniff_task_flag:
+	arg MOUDLE_TASK_SNIFF,queue
+	branch module_set_state
+
+module_clear_sniff_task_flag:
+	arg MOUDLE_TASK_SNIFF,queue
+	branch module_clr_state
+
+module_set_unsniff_task_flag:
+	arg MOUDLE_TASK_UNSNIFF,queue
+	branch module_set_state
+
+module_clear_unsniff_task_flag:
+	arg MOUDLE_TASK_UNSNIFF,queue
+	branch module_clr_state
+
+module_set_le_tx_data_flag:
+	arg MODULE_FLAG_BLE_DATA_FINISH,queue
+	branch module_set_state
+	
+module_clear_le_tx_data_flag:
+	arg MODULE_FLAG_BLE_DATA_FINISH,queue
+	branch module_clr_state
+
+module_clr_state:
+	fetch 1,mem_module_flag
+	qset0 pdata
+	store 1,mem_module_flag
+	rtn
+
+module_set_state:
+	fetch 1,mem_module_flag
+	qset1 pdata
+	store 1,mem_module_flag
+	rtn
+	
+/**************module state end*******************/
+
+
+else
+
+endif
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_mouse.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_mouse.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_mouse.prog	(working copy)
@@ -0,0 +1,2658 @@
+
+
+//define FPGA_DEBUG
+
+
+ifdef COMPILE_MOUSE
+mouse_init:
+	call mouse_setting_config
+	call spi_ncs_enable
+	call mouse_init_sunt
+	call mouse_dpi_config
+	call spi_ncs_disable
+	rtn wake
+	call mouse_cheak_enable_usb
+	call mouse_cb_fuction
+//	fetch 1,mem_wakup_from_power_flag
+//	isolate0 gpio_latch,pdata
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit1 MOUSE_ENABLE_USB
+	call mouse_wakeup_from_power//,true	// enter 
+ifdef FPGA_DEBUG
+	arg MOUSE_FPGA_DEBUG_GPIO,temp
+	call gpio_config_output
+	arg MOUSE_FPGA_RF_WORK_DEBUG_GPIO,temp
+	call gpio_config_output
+	arg MOUSE_FPGA_DEBUG_GPIO,temp
+	call gpio_out_active
+endif
+	rtnmark1 mark_24g
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery
+	branch mouse_check_reconn_target
+
+
+mouse_delay_4s:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_INIT_DELAY
+	arg 20,loopcnt
+mouse_delay_20ms:
+	setarg 200000
+	call sleep
+	loop delay_10ms
+	rtn
+
+	
+mouse_cheak_enable_usb:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_USB
+	branch usb_init
+	
+
+mouse_cb_fuction:
+	setarg mouse_le
+	store 2,mem_cb_le_process
+	setarg mouse_send_process
+	store 2,mem_cb_bt_process
+	setarg mouse_process_lpm_before
+	store 2,mem_cb_before_lpm
+	setarg mouse_priority_bb_event
+	store 2,mem_cb_bb_event_process
+	setarg mouse_idle
+	store 2,mem_cb_idle_process
+	setarg mouse_before_hibernate
+	store 2,mem_cb_before_hibernate
+	setarg le_mouse_bb_event_connect_complete
+	store 2,mem_cb_att_write
+
+	call g24_head_ptr2regc
+	setarg mouse_g24_package_data
+	add regc,offset_24g_cb_data,contw
+	istore 2,contw
+	setarg mouse_g24_enter_lpm
+	add regc,offset_24g_cb_lpm_prepare,contw
+	istore 2,contw
+	setarg mouse_lpm_before_common
+	add regc,offset_24g_cb_lpm_before,contw
+	istore 2,contw
+	
+	setarg mouse_bb_event_timer
+	store 2,mem_cb_event_timer
+	setarg mouse_spi_write_flash_cb
+	store 2,mem_cb_spi_flash_write_complate
+	rtn
+mouse_spi_write_flash_cb:
+mouse_spi_init:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_SPI2,spid_init
+	branch spid_init2
+
+mouse_setting_config:
+	rtn wake
+	call g24_set_device_addr
+	call mouse_gpio_init
+	call mouse_param_init
+	call mouse_adc_init
+	call le_set_config_fixed_ltk
+	call le_set_justwork
+	call le_set_fixed_ltk
+	call le_set_config_read_authentication
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_EEPROM,mouse_init_iic
+	bbit1 MOUSE_ENABLE_FLASH,mouse_load_flash_info_cheak
+	rtn
+
+mouse_init_iic:
+	call iic_init_390k
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	isolate1 MOUSE_ENABLE_2K_EEPROM,pdata
+	ncall clear_eeprom_size_2k,true
+	call mouse_load_eeprom_dpi
+	call mouse_init_environment
+	call mouse_set_24g_addr_eeprom
+	branch iicd_read_eep_data
+
+mouse_wakeup_from_power:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_WAKEUP_FROM_POWER,mouse_wakeup_no_from_power
+	fetch 1,mem_wakup_from_power_flag
+	isolate0 gpio_latch,pdata
+	nrtn true
+mouse_wakeup_no_from_power:
+	fetch 1,mem_reconn_times_init
+	store 1,mem_reconn_times
+	fetch 1,mem_config_function_enable
+	rtnbit1 ENABLE_SELECT_DEVICE_BY_SWITCH
+mouse_start_24g_mode:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_24G
+	bbit1 MOUSE_ENABLE_AUTO_24G_PARING,g24_auto_pair_start
+	branch g24_check_51cmd_start_24g
+le_mouse_bb_event_connect_complete:
+	fetch 1,mem_le_att_handle
+	sub pdata,26,pdata
+	nrtn zero
+	jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp
+	call ui_ipc_send_cmd
+mouse_le_write_enable:	
+	arg WRITE_REQ_ENABLE_FLAG,queue
+	branch mouse_le_enable_connect_flag
+
+mouse_dpi_up:
+	fetch 1,mem_mouse_dpi_button_state
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_mouse_dpi_button_state
+	rtn
+mouse_dpi_config:
+	fetch 1,mem_config_sensor_motion
+	and pdata,0x0f,pdata
+	store 1,mem_mouse_dpi
+	branch mouse_seting_dpi+2
+
+
+mouse_dpi_cheak:
+	fetcht 1,mem_dpi_button_gpio
+	call gpio_get_bit
+	nbranch mouse_dpi_up,true
+mouse_dpi_down:
+	fetch 1,mem_mouse_dpi_button_state
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_mouse_dpi_button_state
+	fetch 1,mem_mouse_dpi
+	increase 1,pdata
+	and pdata,0x03,pdata
+	store 1,mem_mouse_dpi
+	call mouse_seting_dpi
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_EEPROM,mouse_store_eerpom_dpi
+	bbit1 MOUSE_ENABLE_FLASH,mouse_before_store_flash_cpi
+	rtn
+mouse_before_store_flash_cpi:
+	arg MOUSE_SPI2_CLK_GPIO,temp
+	call gpio_config_output				//hold high
+	arg MOUSE_SPI2_SDIO_GPIO,temp
+	call gpio_config_output 			//hold high 
+	branch mouse_store_flash_device_info
+
+mouse_seting_dpi:
+	bpatch patch1c_3,mem_patch1c
+	call mosue_dpi_led_blink_init
+	fetch 1,mem_config_sensor_type
+	beq P3610,mouse_seting_3610_dpi
+	beq P3212,mouse_seting_3212_dpi
+	fetch 1,mem_mouse_dpi
+	beq MOUSE_DPI_LEVEL1,mouse_set_cpi1
+	beq MOUSE_DPI_LEVEL2,mouse_set_cpi2
+	beq MOUSE_DPI_LEVEL3,mouse_set_cpi3
+	beq MOUSE_DPI_LEVEL4,mouse_set_cpi4
+mouse_set_cpi2:
+	fetch 1,mem_320x_dpi_2
+	branch mouse_p3205_dpi
+mouse_set_cpi1:
+	fetch 1,mem_320x_dpi_1
+	branch mouse_p3205_dpi
+mouse_set_cpi3:
+	fetch 1,mem_320x_dpi_3
+	branch mouse_p3205_dpi
+mouse_set_cpi4:
+	fetch 1,mem_320x_dpi_4
+	branch mouse_p3205_dpi
+moue_seting_cpi_count:
+	fetch 1,mem_config_sensor_type
+	rtneq P3065_XY
+	fetch 1 ,mem_mouse_cpi_count
+	increase 1,pdata
+	store 1,mem_mouse_cpi_count
+	rtn
+
+mouse_seting_3212_dpi:
+	fetch 1,mem_mouse_dpi
+	beq MOUSE_DPI_LEVEL1,mouse_set_p3212_cpi1
+	beq MOUSE_DPI_LEVEL2,mouse_set_p3212_cpi2
+	beq MOUSE_DPI_LEVEL3,mouse_set_p3212_cpi3
+	beq MOUSE_DPI_LEVEL4,mouse_set_p3212_cpi4
+mouse_set_p3212_cpi2:
+	fetch 1,mem_3212_dpi_2
+	branch mouse_p3212_dpi
+mouse_set_p3212_cpi1:
+	fetch 1,mem_3212_dpi_1
+	branch mouse_p3212_dpi
+mouse_set_p3212_cpi3:
+	fetch 1,mem_3212_dpi_3
+	branch mouse_p3212_dpi
+mouse_set_p3212_cpi4:
+	fetch 1,mem_3212_dpi_4
+mouse_p3212_dpi:
+	store 1,mem_mouse_cpi_count
+	lshift8 pdata,pdata
+	copy pdata,rega
+	add pdata,MOUSE_P3212_DPI_XADDRESS,pdata
+  	call twspi_write
+ 	copy rega,pdata
+  	add pdata,MOUSE_P3212_DPI_YADDRESS,pdata
+	branch twspi_write
+	
+mouse_seting_3610_dpi:
+	fetch 1,mem_mouse_dpi
+	beq MOUSE_DPI_LEVEL1,mouse_set_p3610_cpi1
+	beq MOUSE_DPI_LEVEL2,mouse_set_p3610_cpi2
+	beq MOUSE_DPI_LEVEL3,mouse_set_p3610_cpi3
+	beq MOUSE_DPI_LEVEL4,mouse_set_p3610_cpi4
+mouse_set_p3610_cpi2:
+	fetch 1,mem_3610_dpi_2
+	branch mouse_p3610_dpi
+mouse_set_p3610_cpi1:
+	fetch 1,mem_3610_dpi_1
+	branch mouse_p3610_dpi
+mouse_set_p3610_cpi3:
+	fetch 1,mem_3610_dpi_3
+	branch mouse_p3610_dpi
+mouse_set_p3610_cpi4:
+	fetch 1,mem_3610_dpi_4
+mouse_p3610_dpi:
+	store 1,mem_mouse_cpi_count
+	call mouse_spi_sdio_gpio_pollup
+	fetch 1,mem_mouse_cpi_count
+mouse_reset_p3610_dpi:
+	add pdata,0x80,pdata
+	lshift8 pdata,pdata
+	add pdata,MOUSE_P3610_DPI_ADDRESS,pdata
+	copy pdata,rega
+	branch mouse_set_sensor_reg
+	
+mouse_p3205_dpi:
+	store 1,mem_mouse_cpi_count
+	call moue_seting_cpi_count
+	fetch 1,mem_mouse_cpi_count
+	setarg MOUSE_DPI_ADDRESS
+	call twspi_read
+	and pdata,0xf8,temp
+	fetch 1,mem_mouse_cpi_count
+	iadd temp,pdata
+	lshift8 pdata,pdata
+	add pdata,MOUSE_DPI_ADDRESS,pdata
+	branch twspi_write
+	
+
+mouse_init_environment:
+	call app_initflag_check
+	branch mouse_eeprom_load_recon_info,zero
+	call mouse_ble_init_address
+	call mouse_store_eeprom_device_info
+	branch app_initflag_store
+
+
+mouse_24g_pairing_button:
+	fetch 2,mem_24g_pairing_timer_count
+	rtn blank
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_24G
+	rtnbit1 MOSUE_24G_PAIRING_FLAG
+	rtnmark1 mark_24g
+	call mouse_check_key_gpio
+	rtnne MOUSE_LMR_BUTTON
+	call mouse_devce_led_off
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	call mouse_enable_function_flag
+	setarg 0
+	store 2,mem_mouse_direct_timer
+	store 1,mem_mouse_send_blank_timer
+	call g24_set0_mem_check_dongle_times
+	
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_RECONNECT,mouse_cancel_reconnect
+	bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect
+	bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect
+	call mouse_stop_discovery
+	branch g24_start_pairing_sm1
+	
+ifdef FPGA_DEBUG
+mouse_fpga_rf_working_normal:
+	fetch 1,mem_le_req_rcv
+	and pdata,0xfe,pdata
+	call mouse_fpga_working_fail,blank
+	fetch 1,mem_le_req_rcv
+	and pdata,0xfe,pdata
+	ncall mouse_fpga_working_normal,blank
+//	fetch 1,mem_inquiryscan_rcvcnt
+//	and pdata,0xfe,pdata
+//	call mouse_fpga_working_fail,blank
+//	fetch 1,mem_inquiryscan_rcvcnt
+//	and pdata,0xfe,pdata
+//	ncall mouse_fpga_working_normal,blank
+	rtn
+
+mouse_fpga_working_fail:
+	arg MOUSE_FPGA_RF_WORK_DEBUG_GPIO,temp
+	branch gpio_out_inactive
+
+mouse_fpga_working_normal:
+	arg MOUSE_FPGA_RF_WORK_DEBUG_GPIO,temp
+	branch gpio_out_active
+
+
+
+endif
+
+mouse_idle:
+ifdef FPGA_DEBUG
+	call mouse_fpga_rf_working_normal
+endif
+	call mouse_24g_pairing_button
+	call ui_check_paring_button
+	call mouse_dpi_cheak
+	call mouse_usb_isr
+	call mouse_wheel_check
+	branch mouse_usb_mode
+mouse_usb_isr:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_USB
+	call usb_isr	
+	branch usb_offline_state
+
+mouse_cheak_usb:
+	hfetch 1,core_usb_addr
+	bbit0 7,mouse_usb_no_exsit
+	bbit1 7,mouse_usb_exsit
+	rtn
+mouse_usb_no_exsit:
+	fetch 1,mem_usb_addr
+	rtnbit0 7
+	branch soft_reset_chip
+mouse_usb_exsit:
+	fetch 1,mem_usb_addr
+	rtnbit1 7
+	branch mouse_stop_bluetooth_mode
+	
+mouse_usb_mode:
+	call mouse_cheak_usb
+	hfetch 1,core_usb_addr
+	store 1,mem_usb_addr
+	rtnbit0 7
+	call mouse_clkn_check 
+	fetch 4,mem_btclk_sensor
+	fetcht 1,mem_wire_usb_interval
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	store 4,mem_btclk_sensor
+	call mouse_motion
+	nrtn user
+	jam 4,mem_usb_tx_enable
+	branch mouse_wired_to_usb
+
+mouse_clkn_check:
+	fetcht 4,mem_btclk_sensor
+	copy clkn_bt,pdata
+	isub temp,null
+	ncall mouse_clkn_timeout,positive
+	rtn
+mouse_clkn_timeout:
+	setarg 0
+	store 4,mem_btclk_sensor
+	rtn
+
+
+	
+mouse_wired_to_usb:
+	fetch 1,mem_usb_tx_enable
+	rtnbit0 2
+	branch mouse_data_push
+mouse_data_push:
+	hfetch 1,core_usb_addr
+	rtnbit0 7
+	jam USB_EP2_MS,mem_usb_ep2_data
+	setarg MS_REPORT_ID
+	store 1,mem_usb_mouse_data	
+	fetch 7,mem_mouse_key
+	istore 7,contw
+	rtn
+
+
+mouse_enable_clock_qdecoder:
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_QDECODER,pdata
+	hstore 2,core_clkoff
+	rtn
+
+mouse_param_init:
+	setarg 0x8c00				//bt sdp start address
+	store 2,mem_ui_uuid_table
+	setarg 0x8e7a				//ble attlist start address
+	store 2,mem_ui_le_uuid_table
+	setarg 0x2402
+	store 2,mem_fcomp_mul
+	setarg 0x2580
+	store 3,mem_class
+	jam 3,mem_lpm_mult_timeout
+	jam 8,mem_lpm_overhead
+	jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue
+	setarg 0x0200
+	store 2,mem_lpm_interval
+	jam 0x17,mem_le_local_mtu
+	jam 0x17,mem_le_remote_mtu
+//===========init spi param==============================
+	setarg 0x0a77
+	store 2,mem_spi_init_clk
+//===========default bt reconnect address===================	
+//	jam 1,mem_device_flag
+//	setarg 0x332211
+//	store 3,mem_device1_addr
+//	store 3,mem_device2_addr
+//	store 3,mem_device3_addr
+//	setarg 0x665544
+//	store 3,mem_device1_addr+3
+//	store 3,mem_device2_addr+3
+//	store 3,mem_device3_addr+3
+//	setarg 0x34
+//	store 1,mem_device1_type
+//	store 1,mem_device2_type
+//	store 1,mem_device3_type
+//===========all 16bit uuid==================================
+	setsect 0,0x306
+	setsect 1,0x4440
+	setsect 2,0x10000
+	setsect 3,0x4408
+	store 9,mem_all_uuid_16bits
+	setsect 0,0x1224
+	setsect 1,0x4000
+	setsect 2,0x0
+	istore 5,contw
+//===========features=====================================
+	setsect 0,0x3ffff
+	setsect 1,0x2fe23
+	setsect 2,0x199d9
+	setsect 3,0x20d
+	store 8,mem_features
+//======================================================	
+	setarg 0x012c  				//24g ban pairing timer init
+	store 2,mem_24g_pairing_timer_count
+	call le_modified_name
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag 
+	rtnbit0 MOUSE_ENABLE_GPIO_CONTROL_ADC_SENSOR
+	call mouse_sensor_set_angle
+	branch mouse_select_adc
+
+mouse_sensor_set_angle:
+	fetcht 1,mem_select_sensor_angle_gpio
+	call gpio_config_input
+	fetcht 1,mem_select_sensor_angle_gpio
+	call gpio_get_bit
+	jam MOUSE_3CLK_ANGLE,mem_config_sensor_angle
+	rtn true
+	jam MOUSE_12CLK_ANGLE,mem_config_sensor_angle
+	rtn
+
+mouse_select_adc:
+	fetcht 1,mem_select_adc_gpio
+	call gpio_config_input
+	fetcht 1,mem_select_adc_gpio
+	call gpio_get_bit
+	jam ADC_CONFIG_VINLPM,mem_adc_config_flag
+	rtn true
+	jam ADC_CONFIG_GPIO,mem_adc_config_flag
+	rtn
+	
+	
+mouse_adc_init:
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_VINLPM,mouse_adc_init_data_vinlpm
+	beq ADC_CONFIG_HVIN,mouse_adc_init_data_hvin
+	beq ADC_CONFIG_GPIO,mouse_adc_init_data_io
+	branch mouse_adc_init_data_vinlpm
+	
+mouse_adc_init_data_vinlpm:
+	fetcht 2,mem_2v_adc_vinlpm_data
+	fetch 2,mem_3v_adc_vinlpm_data
+	isub temp,pdata
+	mul32 pdata,20,pdata 
+	div pdata,100
+	call wait_div_end
+	quotient pdata
+	store 2,mem_adc_reference_voltage //vinlpm :2v2 low alter
+	rtn
+mouse_adc_init_data_hvin:
+	fetcht 2,mem_1v_adc_hvin_data
+	fetch 2,mem_5v_adc_hvin_data
+	isub temp,pdata
+	mul32 pdata,230,pdata 
+	div pdata,400
+	call wait_div_end
+	quotient pdata
+	store 2,mem_adc_reference_voltage //hvin :3v3 low alter
+	rtn
+mouse_adc_init_data_io:
+	fetch 2,mem_1v_adc_io_data
+	store 2,mem_adc_reference_voltage  //vio :1v low alter
+	rtn
+mouse_gpio_init:
+	fetcht 1,mem_eeprom_wp_gpio
+	call gpio_config_output
+	call usb_offline_check_init
+	fetcht 1,mem_lbutton_gpio
+	call gpio_config_input
+	fetcht 1,mem_rbutton_gpio
+	call gpio_config_input
+	fetcht 1,mem_mbutton_gpio
+	call gpio_config_input
+	fetcht 1,mem_sensor_data_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_sensor_reset_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_whee_a_data_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_whee_b_data_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_whee_ta_data_gpio
+	call gpio_config_input
+	fetcht 1,mem_whee_tb_data_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_bk_button_gpio
+	call gpio_config_input
+	fetcht 1,mem_fw_button_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_config_low_voltage_alarm_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_config_device1_led_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_config_device2_led_gpio
+	call gpio_config_output
+	
+	fetcht 1,mem_config_device3_led_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_dpi_led_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_config_input
+	
+	fetcht 1,mem_config_bt_button_gpio
+	call gpio_config_input	
+
+	fetcht 1,mem_dpi_button_gpio
+	branch gpio_config_input
+
+mouse_wheel_gpio_set_wake:
+	fetcht 1,mem_whee_a_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_b_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_ta_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_tb_data_gpio
+	branch gpio_set_wake_by_current_state
+	
+mouse_before_hibernate_wheel_gpio_set:
+	fetcht 1,mem_whee_a_data_gpio
+	call mouse_gpio_set_pupd_by_input
+	fetcht 1,mem_whee_b_data_gpio
+	call mouse_gpio_set_pupd_by_input
+	fetcht 1,mem_whee_ta_data_gpio
+	call mouse_gpio_set_pupd_by_input
+	fetcht 1,mem_whee_tb_data_gpio
+	branch mouse_gpio_set_pupd_by_input
+
+mouse_gpio_set_pupd_by_input:
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	and temp,0x7f,queue
+	hfetch 4,core_gpio_in
+	qisolate1 pdata
+	hfetch 4,core_gpio_pu0
+	qsetflag true,pdata
+	hstore 4,core_gpio_pu0
+	hfetch 4,core_gpio_pd0
+	nqsetflag true,pdata
+	hstore 4,core_gpio_pd0
+	rtn
+	
+mouse_before_hibernate:
+	enable user
+	hfetch 4,0x8138
+	setflag user,26,pdata
+	hstore 4,core_lpm_reg
+	call lpm_write_ctrl
+	call mouse_devce_led_off
+	call mouse_before_hibernate_wheel_gpio_set
+//	call gpio_set_before_lpm_common
+	branch mouse_lpm_before_common
+
+
+	
+mouse_process_lpm_before:
+	call mouse_lpm_before_common
+	fetch 1,mem_lpm_current_mult
+	nrtn blank					// 7.5ms, no gpio wakeup
+	branch gpio_clr_wake
+
+mouse_lpm_before_common:
+	call mouse_wheel_check
+	arg MOUSE_SPI1_CLK_GPIO,temp					// set sclk high
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	isolate1 MOUSE_ENABLE_SPI2,pdata
+	call mouse_spi_clk_gpio,true
+	call gpio_config_output
+	call twspi_disable
+
+
+
+	fetcht 1,mem_lbutton_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_rbutton_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_mbutton_gpio
+	call gpio_set_wake_by_current_state
+
+	fetcht 1,mem_bk_button_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_fw_button_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_dpi_button_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_a_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_b_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_ta_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_tb_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_sensor_data_gpio
+	branch gpio_set_wake
+	
+
+	
+mouse_spi_clk_gpio:
+	arg MOUSE_SPI2_CLK_GPIO,temp
+	rtn
+
+mouse_wheel_check:
+	bpatch patch1c_4,mem_patch1c
+	call mouse_t_wheel_scan
+	call mouse_wheel_scan
+	fetch 1,mem_wheel_tb_new_pinlevel
+	fetcht 1,mem_wheel_tb_old_pinlevel
+	store 1,mem_wheel_tb_old_pinlevel
+	isub temp,null
+	nbranch app_lpm_wake_auto_lock,zero
+	fetch 1,mem_mwheel_b_new_pinlevel
+	fetcht 1,mem_mwheel_b_old_pinlevel
+	store 1,mem_mwheel_b_old_pinlevel
+	isub temp,null
+	nbranch app_lpm_wake_auto_lock,zero
+	rtn
+mouse_t_wheel_scan:
+	fetch 1,mem_whee_ta_data_gpio
+	rtneq GPIO_DISABLE
+	arg 0,rega
+	fetcht 1,mem_whee_ta_data_gpio
+	call gpio_get_bit
+	setflag true,0,rega
+	fetcht 1,mem_whee_tb_data_gpio
+	call gpio_get_bit
+	setflag true,1,rega
+	copy rega,pdata
+	store 1,mem_wheel_tb_new_pinlevel
+	beq 0x01,mouse_t_wheel_scan_judge1
+	beq 0x02,mouse_t_wheel_scan_judge2
+	fetch 1,mem_wheel_tog
+	bbit1 7,mouse_t_wheel_scan_judge3
+	rtn
+
+mouse_t_wheel_scan_judge1:
+	fetch 1,mem_wheel_tb_old_pinlevel
+	beq 0,mouse_t_wheel_scan_judge11
+	beq 3,mouse_t_wheel_scan_judge12
+	rtn
+mouse_t_wheel_scan_judge2:
+	fetch 1,mem_wheel_tb_old_pinlevel
+	beq 0,mouse_t_wheel_scan_judge21
+	beq 3,mouse_t_wheel_scan_judge22
+	rtn
+mouse_t_wheel_scan_judge11:
+	jam 0x82,mem_wheel_tog
+	rtn
+mouse_t_wheel_scan_judge12:
+	jam 0x81,mem_wheel_tog
+	rtn
+mouse_t_wheel_scan_judge21:
+	jam 0x80,mem_wheel_tog
+	rtn
+mouse_t_wheel_scan_judge22:
+	jam 0x83,mem_wheel_tog
+	rtn
+mouse_t_wheel_scan_judge3:
+	fetch 1,mem_wheel_tog
+	set0 7,pdata
+	store 1,mem_wheel_tog
+	beq 0,mouse_t_wheel_scan_judge30
+	beq 1,mouse_t_wheel_scan_judge31
+	beq 2,mouse_t_wheel_scan_judge32
+	beq 3,mouse_t_wheel_scan_judge33
+	rtn
+mouse_t_wheel_scan_judge30:
+	fetch 1,mem_wheel_tb_new_pinlevel
+	beq 3,mouse_wheel_t_forward
+	rtn
+mouse_t_wheel_scan_judge31:
+	fetch 1,mem_wheel_tb_new_pinlevel
+	beq 0,mouse_wheel_t_forward
+	rtn
+mouse_t_wheel_scan_judge32:
+	fetch 1,mem_wheel_tb_new_pinlevel
+	beq 3,mouse_wheel_t_back
+	rtn
+mouse_t_wheel_scan_judge33:
+	fetch 1,mem_wheel_tb_new_pinlevel
+	beq 0,mouse_wheel_t_back
+	rtn
+mouse_wheel_t_forward:
+	fetch 1,mem_mouse_tz_data_count1
+	increase 1,pdata
+	store 1,mem_mouse_tz_data_count1
+	sub pdata,1,null
+	rtn positive
+	jam 0,mem_mouse_tz_data_count1
+	fetch 1,mem_mouse_tz_data
+	increase 1,pdata
+	store 1,mem_mouse_tz_data
+	rtn
+mouse_wheel_t_back:
+	fetch 1,mem_mouse_tz_data_count
+	increase 1,pdata
+	store 1,mem_mouse_tz_data_count
+	sub pdata,1,null
+	rtn positive
+	jam 0,mem_mouse_tz_data_count
+	fetch 1,mem_mouse_tz_data
+	increase -1,pdata
+	store 1,mem_mouse_tz_data
+	rtn
+
+
+mouse_wheel_scan:
+	fetch 1,mem_whee_a_data_gpio
+	rtneq GPIO_DISABLE
+	arg 0,rega
+	fetcht 1,mem_whee_a_data_gpio
+	call gpio_get_bit
+	setflag true,0,rega
+	fetcht 1,mem_whee_b_data_gpio
+	call gpio_get_bit
+	setflag true,1,rega
+	copy rega,pdata
+	store 1,mem_mwheel_b_new_pinlevel
+	beq 0x01,mouse_wheel_scan_judge1
+	beq 0x02,mouse_wheel_scan_judge2
+	fetch 1,mem_mwheel_tog
+	bbit1 7,mouse_wheel_scan_judge3
+	rtn
+
+mouse_wheel_scan_judge1:
+	fetch 1,mem_mwheel_b_old_pinlevel
+	beq 0,mouse_wheel_scan_judge11
+	beq 3,mouse_wheel_scan_judge12
+	rtn
+mouse_wheel_scan_judge2:
+	fetch 1,mem_mwheel_b_old_pinlevel
+	beq 0,mouse_wheel_scan_judge21
+	beq 3,mouse_wheel_scan_judge22
+	rtn
+mouse_wheel_scan_judge11:
+	jam 0x82,mem_mwheel_tog
+	rtn
+mouse_wheel_scan_judge12:
+	jam 0x81,mem_mwheel_tog
+	rtn
+mouse_wheel_scan_judge21:
+	jam 0x80,mem_mwheel_tog
+	rtn
+mouse_wheel_scan_judge22:
+	jam 0x83,mem_mwheel_tog
+	rtn
+mouse_wheel_scan_judge3:
+	fetch 1,mem_mwheel_tog
+	set0 7,pdata
+	store 1,mem_mwheel_tog
+	beq 0,mouse_wheel_scan_judge30
+	beq 1,mouse_wheel_scan_judge31
+	beq 2,mouse_wheel_scan_judge32
+	beq 3,mouse_wheel_scan_judge33
+	rtn
+mouse_wheel_scan_judge30:
+	fetch 1,mem_mwheel_b_new_pinlevel
+	beq 3,mouse_wheel_forward
+	rtn
+mouse_wheel_scan_judge31:
+	fetch 1,mem_mwheel_b_new_pinlevel
+	beq 0,mouse_wheel_forward
+	rtn
+mouse_wheel_scan_judge32:
+	fetch 1,mem_mwheel_b_new_pinlevel
+	beq 3,mouse_wheel_back
+	rtn
+mouse_wheel_scan_judge33:
+	fetch 1,mem_mwheel_b_new_pinlevel
+	beq 0,mouse_wheel_back
+	rtn
+mouse_wheel_forward:
+	jam 0,mem_mouse_z_data_count1
+	fetch 1,mem_mouse_z_data
+	increase 1,pdata
+	store 1,mem_mouse_z_data
+	rtn
+mouse_wheel_back:
+	jam 0,mem_mouse_z_data_count
+	fetch 1,mem_mouse_z_data
+	increase -1,pdata
+	store 1,mem_mouse_z_data
+	rtn
+	
+	
+mouse_hid_connected:
+	setarg HID_HANDSHAKE_TIMEOUT
+	store 1,mem_hid_handshake_timer_count
+	rtn
+	
+mouse_send_process:
+	fetch 1,mem_app_handshake_flag
+	rtn blank
+	call l2cap_malloc_is_fifo_nearly_full
+	nrtn blank
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOSUE_24G_PAIRING_FLAG,mouse_send_empty_data
+	bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_send_empty_data
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_send_empty_data
+	call mouse_motion
+	nrtn user
+mouse_send_data:
+	arg 9,rega
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_int_remote_cid
+	istore 2,contw
+	setarg 0x02a1
+	istore 2,contw
+	fetch 7,mem_mouse_key
+	istore 7,contw
+	rtn
+
+	
+mouse_send_empty_data:
+	setarg 0
+	store 7,mem_mouse_key
+	branch mouse_send_data
+
+
+mouse_no_data_timer_init:
+	fetch 2,mem_mouse_no_data_timeout
+	store 2,mem_mouse_no_data_timer
+	rtn
+
+	
+mouse_fill_data_le:
+	bpatch patch1c_5,mem_patch1c
+	arg 7,rega //len
+	fetcht 2,mem_le_notify_handle
+	call le_att_malloc_tx_notify
+	fetch 7,mem_mouse_key
+	istore 7,contw
+	rtn
+
+mouse_motion:
+	bpatch patch1c_6,mem_patch1c
+	disable user
+	setarg 0
+	store 6,mem_mouse_x
+	call mouse_cheak_sensor_data
+	call mouse_zwheel
+	call mouse_t_zwheel
+	call mouse_key
+	nrtn user
+	call mouse_no_data_timer_init
+	arg MOUSE_STATUE_UP_FLAG,queue
+	branch mouse_enable_function_flag
+	
+motion_6clk_direction_dispose:
+	fetch 2,mem_mouse_x
+	sub pdata,0,pdata
+	store 2,mem_mouse_x
+	branch enable_user
+motion_12clk_direction_dispose:
+	fetch 2,mem_mouse_y
+	sub pdata,0,pdata
+	store 2,mem_mouse_y
+	branch enable_user
+motion_9clk_direction_dispose:
+	fetch 2,mem_mouse_y
+	sub pdata,0,pdata
+	store 2,mem_mouse_y
+	fetch 2,mem_mouse_x
+	sub pdata,0,pdata
+	store 2,mem_mouse_x
+	call mouse_sensor_data_swap_places
+	branch enable_user
+motion_3clk_direction_dispose:
+	call mouse_sensor_data_swap_places
+	branch enable_user
+mouse_cheak_sensor_data:
+	fetch 1,mem_spi_write_flash_sm
+	rtnne FLASH_SM_NO_BUYS
+	fetch 1,mem_config_sensor_type
+	beq P3205,mouse_p32xx_sensor_motion
+	beq P3065,mouse_p32xx_sensor_motion
+	beq KA8,mouse_p32xx_sensor_motion
+	beq P3204,mouse_p32xx_sensor_motion
+	beq P3212,mouse_p3212_sensor_motion
+	beq P3610,mouse_p3610_sensor_motion
+	beq P3065_xy,mouse_p32xx_sensor_motion
+	branch mouse_p32xx_sensor_motion
+	
+mouse_clear_sensor_data:
+	fetch 1,mem_mouse_move_flag
+	call mouse_read_sensor_common,blank
+	jam 1,mem_mouse_move_flag
+	rtn
+
+
+mouse_p3212_sensor_motion:
+	call mouse_clear_sensor_data
+	fetcht 1,mem_sensor_data_gpio
+	call gpio_get_bit
+	nrtn true
+	setarg PAN_REG_PID_L
+	call twspi_read
+	bne P32XX_ID1,mouse_twspi_reset
+	setarg PAN_REG_MOTION_STAUS
+	call twspi_read
+	rtnbit0 7
+	call mouse_read_sensor_common
+	call mouse_read_3212sensor_xy_high
+	store 1,mem_mouse_xy_h
+	rshift4 pdata,pdata
+	call extsign_bit3
+	store 1,mem_mouse_x+1
+	fetch 1,mem_mouse_xy_h
+	and pdata,0x0f,pdata
+	call extsign_bit3
+	store 1,mem_mouse_y+1
+	fetch 1,mem_config_sensor_angle
+	beq MOUSE_6CLK_ANGLE,motion_6clk_direction_dispose
+	beq MOUSE_9CLK_ANGLE,motion_9clk_direction_dispose
+	beq MOUSE_12CLK_ANGLE,motion_12clk_direction_dispose
+	beq MOUSE_3CLK_ANGLE,motion_3clk_direction_dispose
+	rtn
+
+mouse_read_3212sensor_xy_high:
+	setarg 0x12
+	branch twspi_read
+	
+mouse_p3065_judge:
+	beq P3065_ID1,mouse_p32xx_sensor_motion_1
+	branch mouse_twspi_reset
+	
+mouse_p32xx_sensor_motion:
+	call mouse_clear_sensor_data
+	disable user
+	fetcht 1,mem_sensor_data_gpio
+	call gpio_get_bit
+	nrtn true
+	setarg PAN_REG_PID_L
+	call twspi_read
+	bne P32XX_ID1,mouse_p3065_judge   
+mouse_p32xx_sensor_motion_1:
+	setarg PAN_REG_MOTION_STAUS
+	call twspi_read
+	rtnbit0 7
+	call mouse_read_sensor_common
+	fetch 1,mem_mouse_x
+	call extsign
+	store 2,mem_mouse_x
+	fetch 1,mem_mouse_y
+	call extsign
+	store 2,mem_mouse_y
+	fetch 1,mem_config_sensor_angle
+	beq MOUSE_6CLK_ANGLE,motion32xx_6clk_direction_selection
+	beq MOUSE_9CLK_ANGLE,motion32xx_9clk_direction_selection
+	beq MOUSE_12CLK_ANGLE,motion32xx_12clk_direction_selection
+	beq MOUSE_3CLK_ANGLE,motion32xx_3clk_direction_selection
+	rtn
+	
+motion32xx_6clk_direction_selection:
+	call motion_6clk_direction_dispose
+	branch mouse_sensor_sdio_low
+motion32xx_9clk_direction_selection:
+	call motion_9clk_direction_dispose
+	branch mouse_sensor_sdio_low
+motion32xx_12clk_direction_selection:
+	call motion_12clk_direction_dispose
+	branch mouse_sensor_sdio_low
+motion32xx_3clk_direction_selection:
+	call motion_3clk_direction_dispose
+	branch mouse_sensor_sdio_low
+	
+mouse_sensor_data_swap_places:
+	fetch 2, mem_mouse_y
+	fetcht 2,mem_mouse_x
+	store 2,mem_mouse_x
+	storet 2,mem_mouse_y
+	rtn
+//input regb  output:pdata
+mouse_p3610sensor_read:
+	call spi_ncs_enable
+	nop 100
+	copy regb,pdata
+	call twspi_read
+	copy pdata,regb
+	call spi_ncs_disable
+	nop 100
+	copy regb,pdata
+	rtn	
+mouse_p3610_sensor_motion:
+	disable user
+	fetcht 1,mem_sensor_data_gpio
+	call gpio_get_bit
+	nrtn true
+	arg PAN_REG_MOTION_STAUS,regb
+	call mouse_p3610sensor_read
+	rtnbit0 7
+	arg PAN_REG_PID_L,regb
+	call mouse_p3610sensor_read
+	store 1,mem_sensor_id1
+	bne P3610_ID1,mouse_init_3610sensor_reset
+	fetch 1,mem_mouse_move_flag
+	call mouse_read_sensor3610_data,blank
+	jam 1,mem_mouse_move_flag
+	call mouse_read_sensor3610_data
+	fetch 1,mem_mouse_xy_h
+	rshift4 pdata,pdata
+	call extsign_bit3
+	store 1,mem_mouse_x+1
+	fetch 1,mem_mouse_xy_h
+	and pdata,0x0f,pdata
+	call extsign_bit3
+	store 1,mem_mouse_y+1
+	fetch 1,mem_config_sensor_angle
+	beq 0,motion3610_6clk_direction_selection
+	beq 1,motion3610_9clk_direction_selection
+	beq 2,motion3610_12clk_direction_selection
+	beq 3,motion3610_3clk_direction_selection
+	rtn
+
+mouse_3610_smart_select:
+	fetch 1,mem_sensor_smart_flag
+	beq P3610_SMART_ENABLE,mouse_3610_smart_disable
+	beq P3610_SMART_DISABLE,mouse_3610_smart_enable
+	rtn
+
+
+motion3610_6clk_direction_selection:
+	call motion_6clk_direction_dispose
+	branch mouse_3610_smart_select
+	
+motion3610_12clk_direction_selection:
+	call motion_12clk_direction_dispose
+	branch mouse_3610_smart_select
+	
+motion3610_9clk_direction_selection:
+	call motion_9clk_direction_dispose
+	branch mouse_3610_smart_select
+	
+motion3610_3clk_direction_selection:
+	call motion_3clk_direction_dispose
+	branch mouse_3610_smart_select
+	
+mouse_read_sensor3610_data:
+	call spi_ncs_enable
+	call mouse_read_sensor_common
+	arg 5,pdata
+	call twspi_read
+	store 1,mem_mouse_xy_h
+	arg 7,pdata
+	call twspi_read
+	store 1,mem_sensor_shutter_hi
+	arg 8,pdata
+	call twspi_read
+	store 1,mem_sensor_shutter_lo
+	branch spi_ncs_disable
+
+
+mouse_3610_smart_enable:
+	fetch 1,mem_sensor_shutter_hi
+	rtnne 0
+	fetch 1,mem_sensor_shutter_lo
+	sub pdata,45,null
+	rtn positive
+	jam P3610_SMART_ENABLE,mem_sensor_smart_flag
+	setarg 0xba41
+	call sensor_write
+	setarg 0x0032
+	call sensor_write
+	setarg 0xb541
+	branch sensor_write
+mouse_3610_smart_disable:
+	fetch 1,mem_sensor_shutter_hi
+	rtnne 0
+	fetch 1,mem_sensor_shutter_lo
+	sub pdata,45,null
+	nrtn positive
+	jam P3610_SMART_DISABLE,mem_sensor_smart_flag
+	setarg 0xba41
+	call sensor_write
+	setarg 0x8032
+	call sensor_write
+	setarg 0xb541
+	branch sensor_write
+
+
+
+mouse_read_sensor_common:
+	arg PAN_REG_DELTA_X,pdata
+	call twspi_read
+	store 2,mem_mouse_x
+	arg PAN_REG_DELTA_Y,pdata
+	call twspi_read
+	store 2,mem_mouse_y
+	rtn
+
+mouse_set_qdecoder_x:
+	arg MOUSE_DEFAULT_XA_GPIO,temp
+	call gpio_config_input
+	arg MOUSE_DEFAULT_XA_GPIO,temp
+	call gpio_get_bit
+	rtn true
+	hfetch 1,core_qdec_cntx
+	set1 4,pdata
+	hstore 1,core_qdec_cntx
+	rtn
+
+mouse_hardware_zwheel:
+	fetcht 1,mem_mouse_z_data
+	hfetch 1,core_qdec_cntx
+	iadd temp,pdata
+	rtn blank
+	store 1,mem_mouse_z
+	jam 0,mem_mouse_z_data
+	branch enable_user
+mouse_hardware_zwheel_beforelpm:
+	fetcht 1,mem_mouse_z_data
+	hfetch 1,core_qdec_cntx
+	iadd temp,pdata
+	store 1,mem_mouse_z_data
+	rtn
+mouse_zwheel:
+	fetch 1,mem_mouse_z_data
+	rtn blank	
+	store 1,mem_mouse_z
+	jam 0,mem_mouse_z_data
+	branch enable_user
+	
+mouse_t_zwheel:
+	fetch 1,mem_mouse_tz_data
+	rtn blank	
+	store 1,mem_mouse_tz
+	jam 0,mem_mouse_tz_data
+	branch enable_user
+	
+mouse_check_key_gpio:
+	arg 0,rega
+	fetcht 1,mem_lbutton_gpio
+	call gpio_get_bit
+	setflag true,0,rega
+	fetcht 1,mem_rbutton_gpio
+	call gpio_get_bit
+	setflag true,1,rega
+	fetcht 1,mem_mbutton_gpio
+	call gpio_get_bit
+	setflag true,2,rega
+	call mouse_check_s_key_gpio
+	copy rega,pdata
+	rtn
+mouse_check_s_key_gpio:
+	fetch 1,mem_bk_button_gpio
+	rtneq GPIO_DISABLE
+	fetcht 1,mem_bk_button_gpio
+	call gpio_get_bit
+	setflag true,3,rega
+	fetcht 1,mem_fw_button_gpio
+	call gpio_get_bit
+	setflag true,4,rega
+	rtn
+
+mouse_key:
+	call mouse_check_key_gpio
+	call mouse_set_mult
+	call mouse_24g_key
+	copy rega,pdata
+	fetcht 1,mem_mouse_key
+	store 1,mem_mouse_key	
+	ixor temp,pdata
+	sub pdata,0,null
+	rtn zero
+	branch enable_user
+
+mouse_24g_key:
+	rtnmark0 mark_24g
+	copy rega,pdata
+	rtn blank
+	store 1,mem_mouse_key
+	branch enable_user
+
+//short mult: no key 
+mouse_set_mult:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,mouse_set_ble_mult
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,mouse_set_bt_mult
+	rtn
+mouse_set_ble_mult:
+	copy rega,pdata
+	nbranch le_set_config_short_mult,blank
+	branch le_clr_config_short_mult
+mouse_set_bt_mult:
+	copy rega,pdata
+	nbranch classic_bt_set_mult_short_flag,blank
+	branch classic_bt_clr_mult_short_flag
+	
+	/* sdio high will cost extra 9mA */
+mouse_sensor_sdio_low:
+	bpatch patch1c_7,mem_patch1c
+	arg MOUSE_SPI1_SDIO_GPIO,temp
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	isolate1 MOUSE_ENABLE_SPI2,pdata
+	call mouse_sensor_sdio_low2,true
+	call gpio_get_bit
+	rtn true
+	setarg 0x0a
+	call twspi_read
+	nop 1000
+	branch mouse_sensor_sdio_low
+mouse_sensor_sdio_low2:
+	arg MOUSE_SPI2_SDIO_GPIO,temp
+	rtn
+
+mouse_spi_sdio_gpio_pollup:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_SPI2,mouse_spi2_sdio_gpio_pollup
+mouse_spi1_sdio_gpio_pollup:
+	arg MOUSE_SPI1_SDIO_GPIO,temp
+	branch gpio_config_input_without_wake
+mouse_spi2_sdio_gpio_pollup:
+	arg MOUSE_SPI2_SDIO_GPIO,temp
+	branch gpio_config_input_without_wake
+
+	
+mouse_init_sunt:
+	call mouse_spi_init
+	rtn wake
+	call mouse_spi_sdio_gpio_pollup
+	fetch 1,mem_config_sensor_type
+	beq P3610,mouse_init_3610sensor
+mouse_init_sensor:
+	call mouse_read_sensor_id
+	beq P32XX_ID1,mouse_init_p32xx_id2_judge
+	beq P3065_ID1,mouse_p3065_init_param
+	call mouse_twspi_reset
+	nop 1000
+	branch mouse_init_sensor
+mouse_twspi_reset:
+	bpatch patch1d_0,mem_patch1d
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_SPI2,twspi_reset2
+	branch twspi_reset
+
+mouse_init_3610sensor:
+	call mouse_read_sensor_id
+	beq P3610_ID1,mouse_init_p3610
+	call mouse_init_3610sensor_reset
+	branch mouse_init_3610sensor
+	
+mouse_read_sensor_id:
+	setarg PAN_REG_PID_H
+	call twspi_read
+	store 1,mem_sensor_id2
+	setarg PAN_REG_PID_L
+	call twspi_read
+	store 1,mem_sensor_id1
+	rtn
+mouse_init_p32xx_id2_judge:
+	fetch 1,mem_sensor_id2
+	beq P3205_TJ3T_ID2,mouse_3205_3t_init_param
+	beq P3204_TJ3L_ID2,mouse_3204_3l_init_param
+	beq P3212_ID2,mouse_3212_init_param
+	beq PKA8_ID2,mouse_ka8_init_param
+	rtn
+mouse_ka8_init_param:
+	jam KA8,mem_config_sensor_type
+	rtn
+mouse_p3065xy_init_param:
+	jam P3065_XY,mem_config_sensor_type
+	rtn
+mouse_p3065_init_param:
+	fetch 1,mem_sensor_id2
+	beq P3065_XY_ID2,mouse_p3065xy_init_param
+	jam P3065,mem_config_sensor_type
+	rtn
+mouse_3212_init_param:
+	jam P3212,mem_config_sensor_type
+	call mouse_sensor_disable_wp
+	setarg 0x3426
+	call twspi_write
+	setarg 0x0419
+	call twspi_write
+mouse_sensor_enable_wp:
+	setarg 0x0009
+	branch twspi_write
+mouse_sensor_disable_wp:
+	setarg 0x5a09
+	branch twspi_write
+
+mouse_3204_3l_init_param:
+	jam P3204,mem_config_sensor_type
+	call mouse_sensor_disable_wp
+	setarg 0x0f0d//
+	call twspi_write
+	setarg 0xe31d//
+	call twspi_write
+	setarg 0xd27d
+	call twspi_write
+	call mouse_32xx_init_param
+	branch mouse_32xx_init_param_1
+	
+mouse_32xx_init_param:
+	setarg 0x351b
+	call twspi_write
+	setarg 0xb428
+	call twspi_write
+	setarg 0x4629
+	call twspi_write
+	setarg 0x962a
+	call twspi_write
+	setarg 0x8c2b
+	call twspi_write
+	setarg 0x6e2c
+	call twspi_write
+	setarg 0x642d
+	call twspi_write
+	setarg 0x5f38
+	call twspi_write
+	setarg 0x0f39
+	call twspi_write
+	setarg 0x323a
+	call twspi_write
+	setarg 0x473b
+	call twspi_write
+	setarg 0x1042
+	branch twspi_write
+mouse_32xx_init_param_1:	
+	setarg 0x2e54
+	call twspi_write
+	setarg 0xf255
+	call twspi_write
+	setarg 0xf461
+	call twspi_write
+	setarg 0x7063
+	call twspi_write
+	setarg 0x5275
+	call twspi_write
+	setarg 0x4176
+	call twspi_write
+	setarg 0xed77
+	call twspi_write
+	setarg 0x2378
+	call twspi_write
+	setarg 0x4679
+	call twspi_write
+	setarg 0xe57a
+	call twspi_write
+	setarg 0x487c
+	call twspi_write
+	setarg 0x777e
+	call twspi_write
+	setarg 0x017f
+	call twspi_write
+	setarg 0x000b
+	call twspi_write
+	setarg 0x007f
+	call twspi_write
+	branch mouse_sensor_enable_wp
+	
+
+mouse_3205_3t_init_param:
+	jam P3205,mem_config_sensor_type
+	call mouse_sensor_disable_wp
+	setarg 0x100d//
+	call twspi_write
+	setarg 0xed1d//
+	call twspi_write
+	setarg 0x807d
+	call twspi_write
+	call mouse_32xx_init_param
+	setarg 0x0943
+	call twspi_write
+	branch mouse_32xx_init_param_1
+	
+	
+mouse_init_3610sensor_reset:
+	fetcht 1,mem_sensor_reset_gpio
+	call gpio_out_active
+	call delay_10ms
+	fetcht 1,mem_sensor_reset_gpio
+	call gpio_out_inactive
+	branch delay_10ms
+
+mouse_init_p3610:
+	jam P3610,mem_config_sensor_type
+	setarg 0xba41
+	call sensor_write
+	setarg 0x0d11
+	call sensor_write
+	setarg 0x041b
+	call sensor_write
+	setarg 0x041c
+	call sensor_write
+	setarg 0x0f1d
+	call sensor_write
+	setarg 0x0032
+	call sensor_write
+	setarg 0xb541
+	branch sensor_write
+	
+	
+//input-rega
+mouse_set_sensor_reg:
+	setarg 0xba41
+	call sensor_write
+	nop 4000
+	setarg 0xff7f
+	call sensor_write
+	copy rega,pdata
+	call sensor_write
+	setarg 0x007f
+	call sensor_write
+	setarg 0xb541
+	branch sensor_write
+
+extsign:
+	rtnbit0 7
+	arg 0xff00,temp
+	ior temp,pdata
+	rtn
+
+extsign_bit3:
+	rtnbit0 3
+	arg 0xf0,temp
+	ior temp,pdata
+	rtn
+
+
+mouse_le:
+	call le_fifo_check_nearly_full
+	nrtn blank
+	fetch 1,mem_le_connect_status_flag
+	and pdata,0x03,pdata
+	rtnne 0x03
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOSUE_24G_PAIRING_FLAG,mouse_le_send_empty_packet
+	bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_le_send_empty_packet
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_le_send_empty_packet
+	call mouse_motion
+	nrtn user
+	branch mouse_fill_data_le
+
+mouse_le_send_empty_packet:
+	setarg 0
+	store 7,mem_mouse_key
+	branch mouse_fill_data_le
+
+mouse_priority_bb_event:	
+	copy regc,pdata
+	beq BT_EVT_LE_CONNECTED,mouse_le_bb_event_connected
+	beq BT_EVT_BB_CONNECTED,mouse_stop_discovery
+	beq BT_EVT_LE_DISCONNECTED,mouse_bb_disconnected
+	beq BT_EVT_BB_DISCONNECTED,mouse_bb_disconnected
+	beq BT_EVT_SETUP_COMPLETE,mouse_bt_event_setup_complete
+	beq BT_EVT_BUTTON_LONG_PRESSED,mouse_bb_event_discovery_btn
+	beq BT_EVT_HID_HANDSHAKE,mouse_bt_hid_handshake
+	beq BT_EVT_HID_CONNECTED,mouse_bt_hid_connected
+	beq BT_EVT_RECONN_FAILED,mouse_bb_event_reconn_failed
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,mouse_bb_event_reconn_timeout
+	beq BT_EVT_PINCODE_REQ,mouse_bb_event_pincode
+	beq BT_EVT_REMOTE_UNSNIFF,app_start_auto_sniff
+	beq BT_EVT_LE_PAIRING_SUCCESS,mouse_le_pairing_success
+	beq BT_EVT_LE_START_ENC,mouse_le_ll_start_encryt
+	beq BT_EVT_LE_PAIRING_COMPLETE,mouse_le_pairing_complete
+	beq BT_EVT_VIRTUAL_CABLE_UNPLUG,mouse_irtual_cable_unplug
+	beq BT_EVT_24G_PAIRING_COMPLETE,mouse_24g_pairing_complete
+	beq BT_EVT_24G_ATTEMPT_FAIL,mouse_24g_attempt_fail
+	beq BT_EVT_24G_ATTEMPT_SUCCESS,mouse_24g_attempt_success
+	rtn
+
+
+mouse_le_pairing_complete:
+	branch app_ble_store_reconn_info
+
+mouse_24g_attempt_fail:
+	jam 1,mem_mouse_24g_enter_lpm_enable
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	fetch 1,mem_device_flag
+	fetcht 1,mem_24g_device_number
+	isub temp,null
+	branch app_enter_hibernate,zero
+	rtn
+mouse_24g_attempt_success:
+	jam 1,mem_mouse_24g_enter_lpm_enable
+	rtn
+mouse_24g_pairing_complete:
+	jam 1,mem_mouse_24g_enter_lpm_enable
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	call mouse_disable_function_flag
+	setarg 0
+	store 2,mem_24g_pairing_timer_count
+	jam 0,mem_mouse_move_flag
+	
+	fetch 1,mem_config_sensor_type
+	sub pdata,P3610,null
+	call mouse_read_sensor3610_data,zero
+	ncall mouse_read_sensor_common,zero
+
+	fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_FLASH,mouse_store_flash_24g_address
+	call mouse_set_24g_addr_eeprom	//store rx dongle addr to eeprom
+	branch iicd_write_protect_eep_data
+
+mouse_set_24g_addr_eeprom:
+	call g24_head_ptr2regc
+	add regc,offset_24g_addr,rega
+	arg MOUSE_G24_ADDR_EEPROM_OFFECT,regb
+	arg 4,temp
+	rtn
+
+mouse_store_flash_24g_address:
+	call g24_head_ptr2regc
+	add regc,offset_24g_addr,regb
+	ifetch 1,regb
+	store 1,mem_mouse_24g_addr
+	branch mouse_store_flash_device_info
+	
+
+mouse_le_pairing_success:
+	arg LL_PAIRING_SUCCESS_FLAG,queue
+	branch mouse_le_enable_connect_flag
+mouse_le_ll_start_encryt:
+	jam 2,mem_le_start_encrypt_timer
+	arg LL_START_ENC_FLAG,queue
+	branch mouse_le_enable_connect_flag
+
+	
+mouse_le_enable_connect_flag:
+	fetch 1,mem_le_connect_status_flag
+	qset1 pdata
+	store 1,mem_le_connect_status_flag
+	rtn
+
+mouse_le_disable_connect_flag:
+	fetch 1,mem_le_connect_status_flag
+	qset0 pdata
+	store 1,mem_le_connect_status_flag
+	rtn
+mouse_le_clean_connect_flag:
+	jam 0,mem_le_connect_status_flag
+	rtn
+
+mouse_le_bb_event_connected:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set0 APP_DISC_BY_BUTTON ,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	setarg 0
+	store 2,mem_mouse_direct_timer
+	call mouse_no_data_timer_init
+	branch mouse_stop_discovery
+
+mouse_bb_event_pincode:
+	call pincode_reinit
+	branch app_bt_set_pincode
+mouse_bb_event_reconn_timeout:
+ifdef FPGA_DEBUG
+	arg MOUSE_FPGA_DEBUG_GPIO,temp
+	call gpio_config_output
+	arg MOUSE_FPGA_DEBUG_GPIO,temp
+	call gpio_out_inactive
+endif
+mouse_bb_event_reconn_failed:
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_soft_reset
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_start_discovery
+	bbit1 MOSUE_24G_PAIRING_FLAG,g24_start_pairing_sm1
+	branch app_bb_hibernate
+
+	
+mouse_bt_hid_connected:
+	branch mouse_hid_connected
+
+mouse_bt_event_setup_complete:
+	rtn
+
+mouse_soft_reset:
+	call mouse_select_device_enable
+	branch soft_reset_chip
+
+mouse_bb_disconnected:
+	bpatch patch1d_1,mem_patch1d
+	call mouse_bb_discon_clear_stack
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_soft_reset
+	bbit1 MOSUE_24G_PAIRING_FLAG,g24_start_pairing_sm1
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	bbit1 APP_DISC_BLE,mouse4_0_event_bb_disconn
+	bbit1 APP_DISC_BY_BUTTON,app_disconn_reason_clear
+	bbit1 APP_DISC_AFTER_PAIRING,mouse_event_light_state_pairing
+	bbit1 APP_DISC_AFTER_RECONN,mouse_event_light_state_hibernate
+	bbit1 APP_DISC_AFTER_SNIFF,mouse_event_light_state_hibernate
+	branch mouse_start_discovery
+mouse_bb_discon_clear_stack:
+	setarg 0
+	store 8,mem_wheel_tb_old_pinlevel
+	istore 4,contw             //clean wheel statue
+	jam 0,mem_mouse_send_blank_timer
+	jam 0,mem_mouse_move_flag
+	jam APP_HANDSHAKE_NULL,mem_app_handshake_flag
+	jam 0,mem_ltk_exists
+	rtn
+
+mouse_event_light_state_pairing:
+	bbit1 APP_DISC_AFTER_HANDSHAKE,mouse_event_light_state_hibernate
+	bbit1 APP_DISC_AFTER_SNIFF,mouse_event_light_state_hibernate
+	branch mouse_start_discovery
+mouse_event_light_state_hibernate:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery
+	branch app_bb_hibernate
+
+mouse4_0_event_bb_disconn:
+	call mouse_le_clean_connect_flag
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	bbit1 APP_DISC_BY_BUTTON,app_disconn_reason_clear
+	branch app_bb_hibernate
+
+mouse_bb_event_timer:
+	call mouse_adc_read
+	call mouse_24g_delay_timer
+	call mouse_ban_24g_pairing_timer
+	call mouse_dpi_led_blink_delay_timer
+	call mouse_statue_up_timer
+	//poll
+	call mouse_statue_cheak_timer
+	call mouse_select_device
+	call mouse_bt_discovery_cheak
+	call mouse_low_voltage_led_timer
+	call mouse_sensor_led_contrl_timer
+	call mouse_check_hid_handshake_timer
+	call mouse_check_discovery_timeout_timer
+	call mouse_check_direct_timeout_timer
+	call mouse_check_no_data_timeout_timer
+	call mouse_check_mouse_state_timer
+	branch mouse_le_enable_att_list_timer
+
+
+
+mouse_sensor_led_contrl_timer:
+	fetch 1,mem_mouse_sensor_timer_count
+	rtn blank
+	increase -1,pdata
+	store 1,mem_mouse_sensor_timer_count
+	nrtn blank
+	branch mouse_sensor_led_contrl
+mouse_sensor_led_contrl:
+	fetch 1,mem_sensor_led_style
+	rtneq UI_LED_STATE_BLINK_STOP
+	beq UI_LED_STATE_BLINK_DARKING,mouse_sensor_led_blink_state_darking
+mouse_sensor_led_blink_state_lighting:
+	call mouse_sensor_led_on
+	jam UI_LED_STATE_BLINK_DARKING,mem_sensor_led_style
+	jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count
+	rtn
+mouse_sensor_led_blink_state_darking:
+	call mouse_sensor_led_off
+	jam UI_LED_STATE_BLINK_LIGHTING,mem_sensor_led_style
+	jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count
+	rtn
+	
+mouse_sensor_led_blink_stop:
+mouse_sensor_reset:
+	setarg 0x8006
+	call twspi_write
+    nop 1000
+	jam 0x00,mem_mouse_sensor_timer_count
+	jam UI_LED_STATE_BLINK_STOP,mem_sensor_led_style
+	branch mouse_init_p32xx_id2_judge
+	
+mouse_p3212sensor_led_on:
+	setarg 0xa006
+	call twspi_write
+	setarg 0xa005
+	branch twspi_write
+mouse_sensor_led_on_global:
+	jam 0,mem_mouse_sensor_timer_count
+mouse_sensor_led_on:
+	fetch 1,mem_config_sensor_type
+	beq P3212,mouse_p3212sensor_led_on
+	setarg 0x0106
+	call twspi_write
+	setarg 0xa105
+	branch twspi_write
+	
+mouse_sensor_led_off_global:
+	jam 0,mem_mouse_sensor_timer_count	
+mouse_sensor_led_off:
+	setarg 0x0906
+	branch twspi_write
+mouse_sensor_start_blink:
+	jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count
+	jam UI_LED_STATE_BLINK_START,mem_sensor_led_style
+	rtn
+	
+mouse_check_hid_handshake_timer:
+	arg mem_hid_handshake_timer_count,regc
+	arg mouse_bt_hid_handshake,regb
+	branch timer_single_step
+
+mouse_check_discovery_timeout_timer:	
+	arg mem_mouse_discovery_timer,regc
+	arg mouse_check_discovery_timeout,regb
+	branch timer_single_step_2B
+
+mouse_check_direct_timeout_timer:	
+	arg mem_mouse_direct_timer,regc
+	arg mouse_check_direct_timeout,regb
+	branch timer_single_step_2B
+	
+mouse_check_no_data_timeout_timer:	
+	arg mem_mouse_no_data_timer,regc
+	arg mouse_check_no_data_timeout,regb
+	branch timer_single_step_2B
+	
+mouse_check_mouse_state_timer:
+	arg mem_mouse_statue_led_timer,regc
+	arg mouse_statue_led_off,regb
+	branch timer_single_step
+
+
+
+mouse_le_enable_att_list_timer:
+	arg mem_le_start_encrypt_timer,regc
+	arg mouse_le_enable_att_list,regb
+	branch timer_single_step
+
+mouse_24g_delay_timer:
+	arg mem_24g_enter_lpm_timer,regc
+	arg mouse_24g_delay,regb
+	branch timer_single_step
+
+mouse_ban_24g_pairing_timer:
+	arg mem_24g_pairing_timer_count,regc
+	arg mouse_ban_24g_pairing,regb
+	branch timer_single_step_2B
+mouse_ban_24g_pairing:
+mouse_24g_delay:
+	rtn
+
+
+mosue_dpi_led_blink_init:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_DPI_LED_BLINK
+	jam 10,mem_mouse_dpi_led_delay_count  //delay 1s led blink
+	fetch 1,mem_dpi_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	rtn
+
+
+mouse_dpi_led_blink_delay_timer:
+	arg mem_mouse_dpi_led_delay_count,regc
+	arg mouse_dpi_led_setting,regb
+	branch timer_single_step	
+mouse_dpi_led_setting:
+	fetch 1,mem_dpi_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	setarg LED_DPI_BLINK
+	store 2,mem_mouse_on_time
+	store 2,mem_mouse_off_time
+	arg 0,rega
+	fetcht 1,mem_mouse_dpi
+	increase 1,temp
+	storet 1,mem_mouse_blink_count
+	jam UI_LED_STATE_BLINK_START,mem_mouse_led_type
+	rtn
+	
+mouse_le_enable_att_list:	
+	fetch 1,mem_le_connect_status_flag
+	rtnbit1 LL_PAIRING_SUCCESS_FLAG
+	jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp
+	call ui_ipc_send_cmd
+	arg WRITE_REQ_ENABLE_FLAG,queue
+	branch mouse_le_enable_connect_flag
+
+
+mouse_check_discovery_timeout:
+	call mouse_stop_discovery
+	branch app_enter_hibernate
+
+mouse_check_direct_timeout:
+	call app_ble_stop_direct_adv
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	branch app_enter_hibernate
+
+mouse_check_no_data_timeout:
+	bmark1 mark_24g,check_51cmd_hibernate
+	branch mouse_disconnect
+
+	
+
+mouse_bb_event_discovery_btn:
+	bpatch patch1d_2,mem_patch1d
+	jam 0,mem_mouse_send_blank_timer
+	call mouse_disconnect
+	call mouse_le_clean_connect_flag
+	branch mouse_start_discovery
+
+
+
+mouse3_0_check_reconn_target:
+	fetch 6,mem_hci_plap
+	branch app_bt_start_discovery_short,blank
+	call mouse_reconn_setting_led_gpio
+	jam 0x17,mem_connection_options  //ssp
+	fetch 1,mem_ssp_enable
+	nbranch app_bt_start_reconnect,blank
+	jam 0x04,mem_connection_options  //no ssp
+	branch app_bt_start_reconnect
+	
+mouse4_0_check_reconn_target:
+	fetch 2,mem_mouse_direct_timeout
+	store 2,mem_mouse_direct_timer
+	call mouse_reconn_setting_led_gpio
+	call app_lpm_mult_disable
+	branch check_51cmd_adv
+
+mouse_reconn_setting_led_gpio:
+	setarg LED_RECONNECT_BLINK
+	store 2,mem_mouse_on_time
+	store 2,mem_mouse_off_time
+	branch mouse_setting_led_gpio_comman
+	
+mouse_discover_setting_led_gpio:
+	setarg LED_DISCOVERY_BLINK
+	store 2,mem_mouse_on_time
+	store 2,mem_mouse_off_time	
+mouse_setting_led_gpio_comman:
+	fetch 1,mem_device_flag
+	beq MODE_BT_DEVICE1,mouse_device_led1
+	beq MODE_BT_DEVICE2,mouse_device_led2
+	beq MODE_BT_DEVICE3,mouse_device_led3
+	rtn
+mouse_device_led1:
+	fetch 1,mem_config_device1_led_gpio
+	branch mouse_led_blink
+mouse_device_led2:
+	fetch 1,mem_config_device2_led_gpio
+	branch mouse_led_blink
+mouse_device_led3:
+	fetch 1,mem_config_device3_led_gpio
+mouse_led_blink:
+	store 1,mem_temp
+	call mouse_devce_led_off
+	fetch 1,mem_temp
+	store 1,mem_mouse_struct_led_gpio
+	arg 0,rega
+	jam UI_LED_STATE_BLINK_START,mem_mouse_led_type
+	branch ui_led_blink_start_global
+
+mouse_led_off:
+	arg 0,rega
+	branch ui_led_off_global
+mouse_led_on:
+	arg 0,rega
+	branch ui_led_on_global
+
+mouse4_0_bb_event_discovery_btn:
+	branch mouse_le_clean_connect_flag
+	
+mouse_bt_hid_handshake:
+	jam APP_HANDSHAKE_DONE,mem_app_handshake_flag
+	call app_lpm_mult_enable
+	call app_bt_store_reconn_info
+	setarg 0
+	store 2,mem_discovery_timeout_timer_count
+	store 1,mem_hid_handshake_timer_count
+	branch app_bt_enter_sniff
+
+mouse_check_reconn_target:
+	call mouse_cheak_select_device_by_switch
+	fetch 1,mem_device_flag
+	fetcht 1,mem_24g_device_number
+	isub temp,null
+	branch mouse_connect_24g_mode,zero
+	fetch 1,mem_xrecord_mode
+	beq REC_3_MODE,mouse3_0_check_reconn_target
+	beq REC_4_MODE,mouse4_0_check_reconn_target
+	branch mouse_start_discovery
+mouse_connect_24g_mode:
+	call mouse_start_24g_mode
+	rtnmark1 mark_24g
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	rtn
+	
+mouse_start_discovery:
+	bpatch patch1d_3,mem_patch1d
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_ADV,mouse_start_discovery_norandom
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_BLE_RANDOM_ADDRE,mouse_start_discovery_norandom
+	random pdata					//random ble addr
+	store 1,mem_le_lap+1
+mouse_start_discovery_norandom:
+	call app_lpm_mult_disable
+	fetch 2,mem_discovery_timeout
+	store 2,mem_mouse_discovery_timer
+	jam 6,mem_connection_options
+	setarg 0
+	store 2,mem_mouse_no_data_timer
+	store 2,mem_mouse_direct_timer
+	arg MOUSE_STORE_EEPROM_FLAG,queue
+	call mouse_enable_function_flag
+	call mouse_bt_discovery_button_down_disable
+	fetch 1,mem_device_option
+	isolate1 MODE_4_MOUSE,pdata
+	call check_51cmd_adv,true
+	fetch 1,mem_device_option
+	isolate1 MODE_3_MOUSE,pdata
+	call check_51cmd_start_discovery,true
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_DISCOVERY_SENSOR_LED,mouse_sensor_start_blink
+	branch mouse_discover_setting_led_gpio
+
+mouse_stop_discovery:
+	bpatch patch1d_4,mem_patch1d
+	fetch 1,mem_device_option
+	isolate1 MODE_4_MOUSE,pdata
+	call mouse_stop_le_adv,true
+	fetch 1,mem_device_option
+	isolate1 MODE_3_MOUSE,pdata
+	call mouse_stop_bt3_discovery,true
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_DISCOVERY_SENSOR_LED,mouse_sensor_led_blink_stop
+	branch mouse_devce_led_off
+mouse_stop_le_adv:
+	setarg 0
+	store 2,mem_mouse_direct_timer
+	branch check_51cmd_stop_adv
+mouse_stop_bt3_discovery:
+	setarg 0
+	store 2,mem_mouse_discovery_timer
+	branch check_51cmd_stop_discovery
+
+	
+
+
+
+mouse_store_remote_bdaddr:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_STORE_EEPROM_FLAG
+	arg MOUSE_STORE_EEPROM_FLAG,queue
+	call mouse_disable_function_flag
+	call mouse_check_device_addr
+mouse_unplug_clean_bdaddr:
+	call mouse_before_store_reconn_info
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_FLASH,mouse_store_flash_device_info
+	bbit1 MOUSE_ENABLE_EEPROM,mouse_store_eeprom_device_info	
+	rtn
+mouse_store_eeprom_device_info:
+	arg 88,temp
+	arg mem_device_flag,rega
+	arg MOUSE_INFO_EEPROM_OFFECT,regb
+	branch iicd_write_protect_eep_data
+
+mouse_check_device_addr:
+	fetch 1,mem_record_bt_mode
+	beq REC_4_MODE,mouse_check_le_device_addr
+	beq REC_3_MODE,mouse_check_bt_device_addr
+	rtn
+mouse_check_le_device_addr:
+	store 1,mem_device_addr_temp
+	fetch 6,mem_le_plap
+	branch mouse_check_bt_device_addr_common
+mouse_check_bt_device_addr:
+	store 1,mem_device_addr_temp
+	fetch 6,mem_plap
+mouse_check_bt_device_addr_common:
+	store 6,mem_device_addr_temp+1
+	fetch 7,mem_device_addr_temp
+	arg mem_device1_type,contr
+	arg 3,loopcnt
+mouse_check_device_addr_end:
+	ifetcht 7,contr
+	isub temp,null
+	branch mouse_clean_addr,zero
+	increase 22,contr
+	loop mouse_check_device_addr_end
+	rtn
+mouse_before_store_reconn_info:
+	arg mem_device1_type,rega
+	fetch 1,mem_device_flag
+	increase -1,pdata
+	mul32 pdata,29,pdata
+	iadd rega,rega
+	fetch 1,mem_record_bt_mode
+	istore 1,rega
+	beq REC_4_MODE,mouse_store_le_device
+	beq REC_3_MODE,mouse_store_bt_device
+	rtn
+	
+mouse_store_le_device:
+	fetch 6,mem_le_plap
+	istore 6,contw
+	arg mem_le_ltk,contr
+	call memcpy16
+	fetch 6,mem_le_lap
+	istore 6,contw
+	rtn
+mouse_store_bt_device:
+	fetch 6,mem_plap
+	istore 6,contw
+	arg mem_link_key,contr
+	branch memcpy16
+
+mouse_clean_addr:
+	increase -6,contr
+	copy contr,contw
+	fetcht 6,mem_device_addr_temp+1
+	increase 3,temp
+	istoret 6,contw
+	rtn
+
+
+
+mouse_eeprom_load_recon_info:
+	arg 88,temp
+	arg mem_device_flag,rega
+	arg MOUSE_INFO_EEPROM_OFFECT,regb
+	call iicd_read_eep_data
+mouse_select_reconn_device:
+	arg mem_device1_type,rega
+	fetch 1,mem_device_flag
+	fetcht 1,mem_24g_device_number
+	isub temp,null
+	rtn zero
+	increase -1,pdata
+	mul32 pdata,29,pdata
+	iadd rega,rega
+	ifetch 1,rega
+	store 1,mem_xrecord_mode
+	beq REC_3_MODE,mouse_load_bt_device
+	beq REC_4_MODE,mouse_load_le_device
+	rtn
+
+mouse_load_bt_device:
+	ifetch 6,contr
+mouse_load_bt_device_end:
+	store 6,mem_hci_plap
+	arg mem_link_key,contw
+	call memcpy16
+	branch check_link_key_load
+
+mouse_load_le_device:
+	ifetch 6,contr
+mouse_load_le_device_end:
+	store 6,mem_hci_plap
+	arg mem_le_ltk,contw
+	call memcpy16
+	ifetch 6,contr
+	store 6,mem_le_lap
+	rtn
+
+
+mouse_select_device:
+	fetch 1,mem_config_function_enable
+	bbit1 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON,mouse_select_device_by_button
+	bbit1 ENABLE_SELECT_DEVICE_BY_SWITCH,mouse_select_device_by_switch
+	branch mouse_select_device_by_combination_key
+
+mouse_select_device_by_combination_key:
+	call mouse_check_key_gpio
+	beq MOUSE_RM_BUTTON,mouse_select_device_commbination_key_down
+mouse_select_device_commbination_key_up:
+	jam 30,mem_combination_select_device_count	//combination key timer init 
+	fetch 1,mem_select_device_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue	
+	rtn
+	
+mouse_select_device_commbination_key_down:
+	call mouse_combination_select_device_timer
+	fetch 1,mem_select_device_button_statue
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_select_device_button_statue
+	branch mouse_select_device_enable
+
+mouse_combination_select_device_timer:
+	fetch 1,mem_combination_select_device_count
+	rtn blank
+	pincrease -1
+	store 1,mem_combination_select_device_count
+	nrtn blank
+	branch mouse_ready_reconnection_by_button
+	
+mouse_select_device_by_button:
+	fetch 1,mem_config_select_device_button_gpio
+	rtneq GPIO_DISABLE
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_get_bit
+	branch mouse_select_device_button_down,true
+mouse_select_device_button_up:
+	fetch 1,mem_select_device_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue	
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit1 MOUSE_LONG_BT_BUTTON_FLAG
+	branch mouse_ready_reconnection_by_button
+
+mouse_select_device_button_down:
+	fetch 1,mem_select_device_button_statue
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_select_device_button_statue
+	arg MOUSE_LONG_BT_BUTTON_FLAG,queue
+	branch mouse_disable_function_flag
+
+
+
+mouse_select_device_by_switch:
+	fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 ENABLE_SELECT_DEVICE_BY_SWITCH
+	fetch 1,mem_device_flag
+	beq MODE_BT_DEVICE1,mouse_select1_device
+	beq MODE_24G_DEVICE,mouse_select2_device
+	rtn
+mouse_cheak_select_device_by_switch:
+	fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 ENABLE_SELECT_DEVICE_BY_SWITCH
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_get_bit
+	branch mouse_cheak_select_24gdevice,true
+mouse_select_btdevice:
+	jam MODE_BT_DEVICE1,mem_device_flag
+	rtn
+mouse_cheak_select_24gdevice:
+	fetch 1,mem_24g_device_number
+	store 1,mem_device_flag
+	rtn
+mouse_select1_device:
+	fetcht 1,mem_config_select_device_button_gpio
+	nbranch mouse_ready_reconnection_by_button,true
+	rtn
+mouse_select2_device:
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_get_bit
+	branch mouse_select_device_button_down,true
+	rtn
+
+
+	
+
+mouse_ready_reconnection_by_button:
+	fetcht 1,mem_device_flag
+	increase 1,temp
+	fetch 1,mem_device_number
+	isub temp,null
+	ncall mouse_select_device_count_clean,positive
+	storet 1,mem_device_flag
+	jam 0,mem_link_key_exists
+	call mouse_store_device_number2eeprom
+	call mouse_select_device_enable
+//	call p_select_reconn_device
+	branch mouse_set_reconnection
+
+mouse_store_device_number2eeprom:
+	arg 1,temp
+	arg mem_device_flag,rega
+	arg 0,regb
+	branch iicd_write_eep_data
+
+mouse_set_reconnection:
+	call mouse_stop_bluetooth_mode
+	call mouse_select_device_disable
+	branch mouse_soft_reset
+mouse_stop_bluetooth_mode:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_RECONNECT,mouse_cancel_reconnect
+	bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect
+	bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect
+	branch mouse_stop_discovery
+
+mouse_disconnect:
+	bpatch patch1d_5,mem_patch1d
+	setarg 0
+	store 2,mem_mouse_no_data_timer
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect
+	rtn
+
+mouse_irtual_cable_unplug:
+	setarg 0x01
+	store 6,mem_plap
+	jam REC_3_MODE,mem_record_bt_mode
+	branch mouse_unplug_clean_bdaddr
+
+	
+mouse_cancel_reconnect:
+	call mouse_bt_cannel_reconn_enable
+	branch check_51cmd_bb_reconn_cancel
+
+mouse_bt_discovery_by_button:
+	fetch 1,mem_config_bt_button_gpio
+	rtneq GPIO_DISABLE
+	fetcht 1,mem_config_bt_button_gpio
+	call gpio_get_bit
+	branch mouse_bt_discovery_button_down,true
+mouse_bt_discovery_button_up:
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_combination_ui_button_count	//combination key timer init 	
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_bt_discovey_button_statue	
+	branch mouse_bt_discovery_button_down_disable
+mouse_bt_discovery_button_down:
+	call mouse_bt_discovry_timer
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_bt_discovey_button_statue
+	call check_51cmd_bb_reconn_cancel
+	branch mouse_bt_discovery_button_down_enable
+
+	
+mouse_bt_discovery_cheak:
+	fetch 1,mem_config_function_enable
+	bbit1 ENABLE_BT_BUTTON,mouse_bt_discovery_by_button
+mouse_bt_discovery_commbination_key:
+	call mouse_check_key_gpio
+	beq MOUSE_LMR_BUTTON,mouse_bt_discovery_commbination_key_down
+mouse_bt_discovery_commbination_key_up:
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_combination_ui_button_count	//combination key timer init 
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_bt_discovey_button_statue	
+	branch mouse_bt_discovery_button_down_disable
+	
+	
+mouse_bt_discovery_commbination_key_down:
+	call mouse_bt_discovry_timer
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_bt_discovey_button_statue
+	call check_51cmd_bb_reconn_cancel
+	branch mouse_bt_discovery_button_down_enable
+
+mouse_bt_discovry_timer:
+	arg mem_combination_ui_button_count,regc
+	arg mouse_long_button_bt_discovry,regb
+	branch timer_single_step
+	
+mouse_long_button_bt_discovry:
+	arg MOUSE_LONG_BT_BUTTON_FLAG,queue
+	call mouse_enable_function_flag
+	call app_evt_button_long_pressed
+	branch mouse_bb_event_discovery_btn
+
+
+mouse_cpi_enable:
+	arg MOUSE_CPI_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_cpi_disable:
+	arg MOUSE_CPI_FLAG,queue
+	branch mouse_disable_function_flag
+mouse_select_device_enable:
+	arg MOUSE_SELECT_DEVICE_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_select_device_disable:
+	arg MOUSE_SELECT_DEVICE_FLAG,queue
+	branch mouse_disable_function_flag
+mouse_bt_cannel_reconn_enable:
+	arg MOUSE_BT_CANNEL_RECONN_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_bt_cannel_reconn_disable:
+	arg MOUSE_BT_CANNEL_RECONN_FLAG,queue
+	branch mouse_disable_function_flag
+mouse_bt_discovery_button_down_enable:
+	arg MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_bt_discovery_button_down_disable:
+	arg MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,queue
+	branch mouse_disable_function_flag
+
+
+
+mouse_select_device_count_clean:
+	arg 1,temp
+	rtn
+
+mouse_enable_function_flag:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	qset1 pdata
+	store MOUSE_FLAG_LEN,mem_mouse_flag
+	rtn
+
+mouse_disable_function_flag:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	qset0 pdata
+	store MOUSE_FLAG_LEN,mem_mouse_flag
+	rtn
+	
+mouse_adc_read:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_ADC
+	fetch 1,mem_adc_read_timer
+	increase 1,pdata
+	store 1,mem_adc_read_timer
+	sub pdata,10,null              //1s read adc
+	rtn positive
+	jam 0,mem_adc_read_timer
+	call adc_set_mode
+	call vdd_calculate_by_mode
+	store 2,mem_mouse_vdd_now_vol
+	arg mem_mouse_vdd_calculate_set,rega
+	call adc_bat_percent_lowpower_out
+	fetch 1,mem_adc_power_flag
+	bbit1 1,mouse_power_down
+	bbit0 0,mouse_adc_no_low_voltage
+	branch mouse_adc_low_voltage
+mouse_adc_low_voltage:
+	arg MOUSE_LOW_VOLTAGE_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_adc_no_low_voltage:
+	arg MOUSE_LOW_VOLTAGE_FLAG,queue
+	branch mouse_disable_function_flag
+
+mouse_low_voltage_led_timer:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_LOW_VOLTAGE_FLAG
+	fetch 1,mem_config_low_voltage_alarm_gpio
+	store 1,mem_mouse_struct_led_gpio
+	fetch 1,mem_adc_low_volatage_led_timer_count
+	pincrease 1
+	store 1,mem_adc_low_volatage_led_timer_count
+	sub pdata,20,null
+	ncall mouse_adc_low_volatage_led_timer_count_clean,positive
+	beq 2,mouse_low_voltage_led_on
+	beq 4,mouse_low_voltage_led_off
+	beq 6,mouse_low_voltage_led_on
+	beq 8,mouse_low_voltage_led_off
+	rtn
+mouse_adc_low_volatage_led_timer_count_clean:
+	jam 1,mem_adc_low_volatage_led_timer_count
+	branch mouse_low_voltage_led_off
+mouse_low_voltage_led_on:
+	arg 0,rega
+	jam UI_LED_STATE_LIGHTING,mem_mouse_led_type
+	branch ui_led_on_global
+mouse_low_voltage_led_off:
+	arg 0,rega
+	jam UI_LED_STATE_LIGHTING,mem_mouse_led_type
+	branch ui_led_off_global
+
+mouse_g24_package_data:
+	call mouse_motion
+	nrtn user
+	arg 7,rega	//length
+	arg mem_mouse_key,regb //tx buff
+	rtn
+	
+mouse_g24_enter_lpm:
+	fetch 1,mem_mouse_24g_enter_lpm_enable
+	rtn blank
+	//do not enter lpm when condition is unallowed
+	fetcht 1,mem_dpi_button_gpio
+	call gpio_get_bit
+	call mouse_24g_dpi_delay_init,true
+	fetch 1,mem_24g_enter_lpm_timer
+	nrtn blank
+	call mouse_check_key_gpio
+	nrtn blank
+	branch g24_lpm_long_sleep
+
+mouse_24g_dpi_delay_init:
+	fetch 1,mem_dpi_button_gpio
+	rtneq UI_BUTTON_GPIO_DISABLE
+	jam 10,mem_24g_enter_lpm_timer
+	rtn
+
+	
+mouse_load_flash_info_cheak:
+	call mouse_load_flash_flag
+	fetch 2,mem_store_flag
+	arg EEPROM_INIT_FLAG,temp
+	isub temp,null
+	branch mouse_load_flash_device_info,zero
+	storet 2,mem_store_flag
+	call mouse_ble_init_address
+	branch mouse_store_flash_device_info
+mouse_ble_init_address:
+	fetch 6,mem_le_lap
+	store 6,mem_device1_locall_addr
+	add pdata,0x0100,pdata
+	store 6,mem_device2_locall_addr
+	add pdata,0x0100,pdata
+	store 6,mem_device3_locall_addr
+	rtn
+	
+	
+mouse_load_flash_flag:
+	setarg mem_store_flag
+	arg mem_mouse_information_start,temp
+	isub temp,temp
+	fetch 3,mem_flash_base
+	iadd temp,pdata
+	arg 2,temp
+	arg mem_store_flag,rega
+	branch spid_read_flash
+
+	
+mouse_load_flash_device_info:
+	setarg mem_mouse_information_end
+	arg mem_mouse_information_start,temp
+	isub temp,temp
+	fetch 3,mem_flash_base
+	arg mem_mouse_information_start,rega
+	call spid_read_flash
+	call mouse_select_reconn_device
+	fetch 4,mem_mouse_24g_addr
+	call g24_head_ptr2regc
+	branch g24_store_mem_addr
+
+mouse_store_flash_device_info:	
+	setarg mem_mouse_information_end
+	arg mem_mouse_information_start,temp
+	isub temp,temp
+	arg mem_mouse_information_start,rega
+	fetch 3,mem_flash_base
+	branch flash_write
+
+mouse_store_eerpom_dpi:
+	arg 1,temp
+	arg mem_mouse_dpi,rega
+	arg MOUSE_DPI_EEPROM_OFFECT,regb
+	branch iicd_write_protect_eep_data
+
+mouse_load_eeprom_dpi:
+	arg 1,temp
+	arg mem_mouse_dpi,rega
+	arg MOUSE_DPI_EEPROM_OFFECT,regb
+	branch iicd_read_eep_data
+
+mouse_statue_cheak_timer:
+	rtnmark1 mark_24g
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_STATUE_UP
+	fetch 1,mem_mouse_1step_up_count
+	pincrease 1
+	and pdata,0x07,pdata
+	store 1,mem_mouse_1step_up_count
+	rtnne 0x07         //800ms read sensor
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,mouse_check_statue_up
+	bbit1 UI_STATE_BLE_CONNECTED,mouse_check_statue_up
+	rtn
+
+
+
+//mosue 
+mouse_check_statue_up:
+	bpatch patch1d_6,mem_patch1d
+	fetch 1,mem_mouse_2step_up_count
+	nrtn blank
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_STATUE_UP_FLAG
+	fetch 1,mem_sensor_squal_reg
+	call sensor_read
+	store 1,mem_sensor_iqc
+	sub pdata,0x10,null
+	branch mouse_statue_up_timer_init,positive
+	jam 0,mem_mouse_2step_up_count
+	rtn
+
+mouse_statue_up_timer_init:
+	jam 30,mem_mouse_2step_up_count
+	rtn
+mouse_statue_up_timer:
+	arg mem_mouse_2step_up_count,regc
+	arg mouse_statue_up,regb
+	branch timer_single_step
+
+mouse_statue_up:
+	fetch 1,mem_sensor_squal_reg
+	call twspi_read
+	sub pdata,0x10,null
+	nrtn positive
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_STATUE_UP_FLAG
+	arg MOUSE_STATUE_UP_FLAG,queue
+	call mouse_disable_function_flag
+	jam 0,mem_lpm_mult
+	jam 30,mem_mouse_statue_led_timer         // led on3s
+	call mouse_devce_led_off
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_STATUE_UP_THREE_LED,mouse_three_device_statue_up
+mouse_two_device_statue_up:
+	fetch 1,mem_device_flag
+	beq MODE_BT_DEVICE1,mouse_device1_led_on  		//device_1
+	beq MODE_BT_DEVICE2,mouse_device_blink_led_init		//device_2
+	rtn
+mouse_three_device_statue_up:
+	fetch 1,mem_device_flag
+	beq MODE_BT_DEVICE1,mouse_device1_led_on  		//device_1
+	beq MODE_BT_DEVICE2,mouse_device2_led_on		//device_2
+	beq MODE_BT_DEVICE3,mouse_device3_led_on		//device_3
+	rtn
+	
+mouse_device_blink_led_init:
+	fetch 1,mem_config_device1_led_gpio
+	branch mouse_led_blink
+
+
+
+mouse_statue_led_off:
+	jam 0x20,mem_lpm_mult
+	branch mouse_devce_led_off
+
+
+
+mouse_devce1_led_off:
+	fetch 1,mem_config_device1_led_gpio
+	rtneq GPIO_DISABLE
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_off
+
+mouse_devce2_led_off:
+	fetch 1,mem_config_device2_led_gpio
+	rtneq GPIO_DISABLE
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_off
+	
+mouse_devce_led_off:
+	call mouse_led_off
+	call mouse_devce1_led_off
+	call mouse_devce2_led_off
+mouse_devce3_led_off:
+	fetch 1,mem_config_device3_led_gpio
+	rtneq GPIO_DISABLE
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_off
+
+mouse_device1_led_on:
+	fetch 1,mem_config_device1_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_on
+mouse_device2_led_on:
+	fetch 1,mem_config_device2_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_on
+mouse_device3_led_on:
+	fetch 1,mem_config_device3_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_on
+
+
+
+mouse_polling_device:
+	bpatch patch1d_7,mem_patch1d
+	fetch 1,mem_reconn_times
+	increase -1,pdata
+	store 1,mem_reconn_times
+	fetcht 1,mem_device_flag
+	increase 1,temp
+	fetch 1,mem_device_number
+	isub temp,null
+	ncall mouse_select_device_count_clean,positive
+	storet 1,mem_device_flag
+	jam 0,mem_link_key_exists
+	call mouse_store_device_number2eeprom
+	call mouse_before_store_reconn_info
+	branch mouse_check_reconn_target
+	
+mouse_power_down:
+	call mouse_devce_led_off
+	setarg 0
+	store 8,mem_gpio_wakeup_low
+	branch lpm_hibernate
+
+
+
+
+
+
+endif
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_remote_car.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_remote_car.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_remote_car.prog	(working copy)
@@ -0,0 +1,480 @@
+ifdef COMPILE_REMOTE_CAR
+
+remote_car_init:
+	rtn wake	
+	hfetch 1,core_gpio_sel1
+	and_into 0xf0,pdata
+	hstore 1,core_gpio_sel1
+	call keyscan_key_init
+	setarg remote_car_le_before_hibernate
+	store 2,mem_cb_before_hibernate
+	
+	setarg remote_car_process_lpm_before
+	store 2,mem_cb_before_lpm	
+	
+	setarg remote_car_scale_process_idle	
+	store 2,mem_cb_idle_process	
+	
+	setarg remote_car_scale_process_bb_event 
+	store 2,mem_cb_bb_event_process	
+	
+	setarg app_get_lpm_wake_lock
+	store 2,mem_cb_check_wakelock	
+
+	call g24_head_ptr2regc
+	setarg remote_car_g24_package_data
+	add regc,offset_24g_cb_data,contw
+	istore 2,contw
+	
+	setarg remote_car_g24_enter_lpm
+	add regc,offset_24g_cb_lpm_prepare,contw
+	istore 2,contw
+	
+	setarg remote_car_process_lpm_before
+	add regc,offset_24g_cb_lpm_before,contw
+	istore 2,contw
+
+	setarg remote_car_event_timer
+	store 2,mem_cb_event_timer
+	
+	setarg remote_car_power_off_signal
+	store 2,mem_remote_car_power_off_cb
+	
+	setarg remote_car_soft_switch_power_on_signal
+	store 2,mem_remote_car_power_standby_cb
+	
+	setarg remote_car_send_key_data
+	store 2,mem_cb_remote_car_keyscan
+	
+	bpatch patch1e_0,mem_patch1e
+	call remote_car_init_environment
+	call queue_init
+	jam 2,mem_lpm_mult
+	fetch 1,mem_remote_car_config_soft_switch_enable
+	store 1,mem_remote_car_hard_soft_switch
+	beq HARD_SWITCH, remote_car_hard_switch_power_on_signal
+	fetch 1,mem_remote_car_config_soft_switch_gpio
+	store 1,mem_ui_button_gpio
+remote_car_soft_switch_power_on_init:
+	call remote_car_ui_led_init
+	call ui_button_init
+	call ui_button_polling
+	jam POWER_STARTING,mem_remote_car_power_state
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+	branch app_enter_hibernate
+
+
+
+remote_car_hard_switch_power_on_signal:
+	jam POWER_STANDBY,mem_remote_car_power_state
+remote_car_soft_switch_power_on_signal:
+	call remote_car_ui_led_init
+//	fetch 1,mem_remote_car_led_map
+	arg 0,rega
+	call ui_led_blink_start_global
+remote_car_connect_24g_mode:
+	branch g24_auto_pair_start
+
+remote_car_power_off_signal:	
+	branch remote_car_ui_led_init
+	
+remote_car_ui_led_init:
+	bpatch patch1e_1,mem_patch1e
+	fetch 1,mem_remote_car_config_connect_led_gpio
+	bne INVALID_PIN_NUM,remote_car_pairing_led_gpio_set
+remote_car_ui_led_init_1:
+	fetcht 1, mem_remote_car_led_map
+	branch gpio_config_output
+remote_car_pairing_led_gpio_set:
+	store 1,mem_remote_car_led_map
+	branch remote_car_ui_led_init_1
+
+
+remote_car_init_environment:
+	call g24_set_device_addr
+	fetch 2,mem_remote_car_no_data_timeout
+	store 2,mem_remote_car_no_data_timer
+	branch remote_car_get_adc_default_data
+
+remote_car_le_before_hibernate:
+//	call keyscan_scan_key
+//	fetch 2, mem_key_value_temp
+//	branch remote_car_in_enter_hibernate,blank
+//	branch app_enter_hibernate
+remote_car_in_enter_hibernate:	
+	call gpio_set_before_lpm_common
+	call remote_car_process_lpm_before
+	branch app_enter_hibernate
+
+remote_car_process_lpm_before:
+	branch keyscan_process_lpm_before
+
+remote_car_g24_enter_lpm:
+	fetch 1,mem_remote_car_24g_enter_lpm_enable
+	rtn blank
+	//do not enter lpm when condition is unallowed
+	branch g24_lpm_long_sleep
+
+remote_car_process_auto_pair_exit:
+	rtn
+
+remote_car_key_scan_process:
+	branch keyscan_key_process
+
+remote_car_scale_process_idle:
+	call remote_car_rocker_process
+	call remote_car_24g_status_process
+	branch remote_car_key_scan_process
+
+remote_car_scale_process_bb_event:
+	copy regc,pdata
+	beq BT_EVT_BUTTON_UP,app_event_button_up
+	beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed
+	beq BT_EVT_24G_PAIRING_COMPLETE,remote_car_24g_pairing_complete
+	beq BT_EVT_24G_ATTEMPT_SUCCESS,remote_car_24g_attempt_success
+	beq BT_EVT_24G_ATTEMPT_FAIL,remote_car_24g_attempt_fail
+	rtn
+
+remote_car_24g_attempt_fail:
+	jam 1,mem_remote_car_24g_enter_lpm_enable
+	rtn
+
+remote_car_24g_pairing_complete:
+	jam 1,mem_remote_car_24g_enter_lpm_enable
+	jam WORK_PAIRED,mem_remote_car_24g_auto_work_step
+	jam WORK_PAIRED,mem_remote_car_24g_pair_success_flag
+	rtn
+
+remote_car_24g_attempt_success:
+	jam 1,mem_remote_car_24g_enter_lpm_enable
+	jam WORK_PAIRED,mem_remote_car_24g_auto_work_step
+	jam WORK_PAIRED,mem_remote_car_24g_pair_success_flag
+	rtn
+
+remote_car_24g_status_process:
+	fetch 1,mem_remote_car_24g_auto_work_step
+	rtneq POWER_ON
+	fetch 1,mem_remote_car_24g_status
+	rtneq WORK_PAIRED
+	jam WORK_PAIRED,mem_remote_car_24g_status
+remote_car_scale_process_paired:
+	arg 0,rega
+	branch ui_led_off_global
+remote_car_scale_process_shutdown:
+	arg 0,rega
+	call ui_led_off_global
+	call remote_car_ui_led_init
+	branch app_enter_hibernate
+	
+remote_car_event_timer:
+	call app_power_timer
+	branch remote_car_no_data_timer
+
+remote_car_no_data_timer:
+	fetch 1,mem_remote_car_config_timeout_shutdown_enable
+	rtn blank
+	arg mem_remote_car_no_data_timer,regc
+	arg remote_car_scale_process_shutdown,regb
+	branch timer_single_step_2B
+	
+////////////////////////////////////rocker/////////////////////////////
+remote_car_get_adc_default_data:
+	call remote_car_rocker_get_x
+	storet 2,mem_current_vdd_value_default_mid_x
+	call remote_car_rocker_get_y
+	storet 2,mem_current_vdd_value_default_mid_y
+	rtn
+remote_car_rocker_data_get:
+remote_car_rocker_get_x:
+	fetch 2,mem_current_vdd_value_default_mid_x
+	store 2,mem_current_vdd_value_default_mid_temp
+	call remote_car_get_adc_from_gpio6
+	call remote_car_rocker_get_value
+	store 1,mem_rocker_status
+remote_car_rocker_get_y:
+	fetch 2,mem_current_vdd_value_default_mid_y
+	store 2,mem_current_vdd_value_default_mid_temp
+	call remote_car_get_adc_from_gpio7
+	call remote_car_rocker_get_value
+	store 1,mem_rocker_status+1
+	rtn
+remote_car_rocker_get_value:
+	fetch 2,mem_current_vdd_default_range
+	copy pdata,rega
+	fetch 2,mem_current_vdd_value_default_mid_temp
+	call remote_car_rocker_mid_value_adjust
+	fetch 1,mem_rocker_work_status
+	nbranch remote_car_rocker_translate_key,blank
+	nrtn positive
+	fetcht 2,mem_current_vdd_value_default_mid_temp
+	rtn	
+remote_car_rocker_mid_value_adjust:
+	isub temp,pdata
+	branch remote_car_rocker_mid_adjust_positive,positive
+	sub pdata,0,pdata		//negative adjust
+	jam 1,mem_rocker_negative_flag
+	isub rega,null
+	rtn
+remote_car_rocker_mid_adjust_positive:
+	jam 0,mem_rocker_negative_flag
+	isub rega,null
+	rtn
+remote_car_rocker_translate_key:
+	nbranch remote_car_rocker_middle_key,positive
+	fetch 1,mem_rocker_negative_flag
+	nbranch remote_car_rocker_negative_key,blank
+remote_car_rocker_positive_key:	
+	setarg ROCKER_POSITIVE_KEY
+	rtn
+remote_car_rocker_negative_key:
+	setarg ROCKER_NEGATIVE_KEY
+	rtn
+remote_car_rocker_middle_key:
+	setarg ROCKER_MIDDLE_KEY
+	rtn
+remote_car_get_adc_from_gpio6:
+	jam 0x33,mem_adc_channel
+	branch adc_set_mode
+remote_car_get_adc_from_gpio7:
+	jam 0x34,mem_adc_channel
+	branch adc_set_mode
+
+
+remote_car_rocker_process:
+	fetch 1,mem_remote_car_config_check_way
+	rtnne CAR_REMOTE_CHECK_ROCKER	
+remote_car_read_rocker_check_start:
+	bpatch patch1e_2,mem_patch1e
+	jam 1,mem_rocker_work_status
+	call remote_car_rocker_data_get
+	fetch 2,mem_rocker_status
+	fetcht 2,mem_rocker_last_status
+	isub temp,null
+	rtn zero
+	store 2,mem_rocker_last_status
+	call remote_car_rocker_x_to_key
+	branch remote_car_rocker_y_to_key
+	
+remote_car_rocker_x_to_key:
+	fetch 1,mem_rocker_x_status
+	branch rocker_to_queue_set_0,blank
+	increase -1,pdata
+	branch remote_car_rocker_to_key
+remote_car_rocker_y_to_key:
+	fetch 1,mem_rocker_y_status
+	branch rocker_to_queue_set_2,blank
+	increase 1,pdata
+remote_car_rocker_to_key:
+	copy pdata,queue
+	arg 1,rega
+	branch remote_car_send_key_data
+	
+rocker_to_queue_set_0:
+	arg 0,queue
+	arg 0,rega
+	branch remote_car_send_key_data
+rocker_to_queue_set_2:
+	arg 2,queue
+	arg 0,rega
+	branch remote_car_send_key_data
+	
+remote_car_send_key_data:
+	copy rega,pdata
+	store 1,mem_remote_key_status
+	fetch 1,mem_remote_car_24g_auto_work_step
+	beq POWER_ON,g24_auto_pair_start
+	fetch 2,mem_remote_car_no_data_timeout
+	store 2,mem_remote_car_no_data_timer
+	fetch 1,mem_remote_key_status
+	branch remote_car_key_is_release,blank
+remote_car_key_is_press:
+	bpatch patch1e_3,mem_patch1e
+	arg 0,rega
+	call ui_led_on_global
+remote_car_attack_key_press:
+	copy queue,pdata
+	beq 4,remote_car_send_attack_key4_press
+	beq 5,remote_car_send_attack_key5_press
+	beq 6,remote_car_send_fire_key6_press
+//	fetch 1,mem_remote_car_config_check_way
+//	rtneq CAR_REMOTE_CHECK_ROCKER
+remote_car_motor_key_press:
+	call remote_car_device_layout_select
+	beq CONTROL_F_B_TEN,remote_car_single_motor_key_is_press
+	beq CONTROL_L_R_TEN,remote_car_double_motor_key_press
+	beq CONTROL_L_R_LR,remote_car_single_motor_key_is_press
+	rtn
+	
+remote_car_single_motor_key_is_press:
+	copy queue,pdata
+	beq 0,remote_car_send_motor1_key0_press
+	beq 1,remote_car_send_motor1_key1_press
+	beq 2,remote_car_send_motor2_key2_press
+	beq 3,remote_car_send_motor2_key3_press
+	rtn
+	
+remote_car_double_motor_key_press:
+	copy queue,pdata
+	beq 0,remote_car_send_double_motor_key0_press
+	beq 1,remote_car_send_double_motor_key1_press
+	beq 2,remote_car_send_double_motor_key2_press
+	beq 3,remote_car_send_double_motor_key3_press
+	rtn
+
+remote_car_key_is_release:
+	bpatch patch1e_4,mem_patch1e
+	arg 0,rega
+	call ui_led_off_global
+remote_car_attack_key_release:
+	copy queue,pdata
+	beq 4,remote_car_send_attack_key4_rel
+	beq 5,remote_car_send_attack_key5_rel
+//	fetch 1,mem_remote_car_config_check_way
+//	rtneq CAR_REMOTE_CHECK_ROCKER
+remote_car_motor_key_release:
+	call remote_car_device_layout_select
+	beq CONTROL_F_B_TEN,remote_car_single_motor_key_rel
+	beq CONTROL_L_R_TEN,remote_car_double_motor_key_rel
+	beq CONTROL_L_R_LR,remote_car_single_motor_key_rel
+	rtn
+
+remote_car_device_layout_select:
+	fetch 1,mem_remote_car_config_layout
+	fetcht 1,mem_remote_car_config_key_map
+	ior temp,pdata
+	rtn
+
+//cross key,control front-back motor layout
+remote_car_send_motor1_key0_press:	//front
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload
+	branch remote_car_send_key
+remote_car_send_motor1_key1_press:	//back
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload
+	branch remote_car_send_key
+remote_car_send_motor2_key2_press:	//left
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+remote_car_send_motor2_key3_press:	//right
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+
+//cross key,control left-right motor layout
+remote_car_send_double_motor_key0_press:	//front
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+remote_car_send_double_motor_key1_press:	//back
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+remote_car_send_double_motor_key2_press:	//left
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+remote_car_send_double_motor_key3_press:	//right
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+	
+//attack motor control
+remote_car_send_attack_key4_press:	//attack left
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor3_payload
+	branch remote_car_send_key
+remote_car_send_attack_key5_press:	//attack right
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor3_payload
+	branch remote_car_send_key
+
+remote_car_send_fire_key6_press:
+	jam 0x01,mem_remote_car_24g_fire_send_payload
+	branch remote_car_send_attack
+
+remote_car_single_motor_key_rel:
+	copy queue,pdata
+	beq 0,remote_car_send_motor1_key0_rel
+	beq 1,remote_car_send_motor1_key1_rel
+	beq 2,remote_car_send_motor2_key2_rel
+	beq 3,remote_car_send_motor2_key3_rel
+	rtn
+
+remote_car_double_motor_key_rel:
+	copy queue,pdata
+	beq 0,remote_car_send_double_motor_key0_rel
+	beq 1,remote_car_send_double_motor_key1_rel
+	beq 2,remote_car_send_double_motor_key2_rel
+	beq 3,remote_car_send_double_motor_key3_rel
+	rtn
+
+remote_car_send_motor1_key0_rel:
+remote_car_send_motor1_key1_rel:
+	jam MOTOR_STOP,mem_remote_car_24g_motor1_payload
+	branch remote_car_send_key
+remote_car_send_motor2_key2_rel:
+remote_car_send_motor2_key3_rel:
+	jam MOTOR_STOP,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+	
+remote_car_send_double_motor_key0_rel:
+remote_car_send_double_motor_key1_rel:
+remote_car_send_double_motor_key2_rel:
+remote_car_send_double_motor_key3_rel:
+	jam MOTOR_STOP,mem_remote_car_24g_motor1_payload
+	jam MOTOR_STOP,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+	
+remote_car_send_attack_key4_rel:
+remote_car_send_attack_key5_rel:
+	jam MOTOR_STOP,mem_remote_car_24g_motor3_payload
+	branch remote_car_send_key
+
+remote_car_send_key:
+	arg mem_remote_car_24g_motor_packet,rega
+	branch queue_push
+remote_car_send_attack:
+	arg mem_remote_car_24g_fire_packet,rega
+	branch queue_push
+
+remote_car_g24_package_data:
+	fetch 1,mem_remote_car_24g_pair_success_flag
+	beq WORK_PAIRED,remote_car_g24_send_empty
+	arg mem_remote_car_24g_tx_temp,rega
+	call queue_pop
+	nbranch remote_car_moto_data,user
+remote_car_g24_package_data_continue:
+	arg mem_remote_car_24g_tx_temp,contr
+	ifetch 1,contr
+	copy pdata,rega
+	arg mem_remote_car_24g_tx_temp+1,regb
+	//rega: length
+	//regb: tx buffer
+	rtn
+	
+remote_car_g24_send_empty:
+	jam 0,mem_remote_car_24g_pair_success_flag
+	enable user
+	arg 1,rega
+	arg mem_remote_car_empty_packet,regb
+	rtn
+	
+remote_car_moto_data:
+	fetch 1,mem_remote_car_24g_tx_temp+3	//cmd
+	beq CAR_CMD_L_R_MOTOR_CONTROL,remote_car_moto_data_next
+	beq CAR_CMD_F_B_MOTOR_CONTROL,remote_car_moto_data_next
+	rtn
+remote_car_moto_data_next:
+	fetch 1,mem_remote_car_24g_tx_temp+6	//data moto1
+	nbranch remote_car_moto_data_enable_user,blank
+	fetch 1,mem_remote_car_24g_tx_temp+8	//data moto2
+	nbranch remote_car_moto_data_enable_user,blank
+	fetch 1,mem_remote_car_24g_tx_temp+10	//data moto3
+	nbranch remote_car_moto_data_enable_user,blank
+	rtn
+remote_car_moto_data_enable_user:
+	enable user
+	branch remote_car_g24_package_data_continue
+
+endif
+
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_shutter.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_shutter.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_shutter.prog	(working copy)
@@ -0,0 +1,1170 @@
+
+ifdef COMPILE_SHUTTER
+
+shutter_init:
+	rtn wake	
+	hfetch 1,core_gpio_sel1
+	and_into 0xfc,pdata
+	hstore 1,core_gpio_sel1
+	setarg shutter_le_before_hibernate
+	store 2,mem_cb_before_hibernate
+
+	setarg shutter_process_lpm_before
+	store 2,mem_cb_before_lpm
+	
+	setarg app_enter_hibernate
+	store 2,mem_cb_discovry_timeout
+	
+	setarg shutter_process_idle
+	store 2,mem_cb_idle_process
+		
+	setarg shutter_process_bb_event 
+	store 2,mem_cb_bb_event_process
+
+	setarg shutter_le_scale_lpm_lock
+	store 2,mem_cb_check_wakelock
+	
+	setarg ble_shutter_receive_data
+	store 2,mem_cb_att_write
+
+	setarg shutter_le_bb_event_timer
+	store 2,mem_cb_event_timer
+
+	setarg shutter_key_change
+	store 2,mem_cb_shutter_keycan
+
+	setarg shutter_soft_swtich_power_on
+	store 2,mem_shutter_soft_switch_poweron_callback_function
+	setarg shutter_soft_swtich_power_off
+	store 2,mem_shutter_soft_switch_poweroff_callback_function
+
+	call le_modified_name
+	call shutter_load_bluetooth_config_by_user_config
+	call shutter_init_bluetooth_config
+	call shutter_init_param	
+	call keyscan_key_init
+	call shutter_load_buffer_config_form_DataRom
+	call queue_init
+	call ui_led_init_global
+	call shutter_load_bluetooth_config
+	call shutter_load_bluetooth_config_by_eeprom
+	
+	bpatch patch1e_5,mem_patch1e
+	call classic_shutter_load_reconn_info
+	fetch 1, mem_shutter_hard_soft_switch_case
+	beq HARD_SWITCH, shutter_hart_swtich_power_on
+	fetch 1,mem_shutter_soft_switch_button_gpio
+	store 1,mem_ui_button_gpio
+	branch ui_soft_swtich_init
+
+/**************hard swtich function**************/
+shutter_hart_swtich_power_on:
+	jam UI_BUTTON_GPIO_DISABLE,mem_ui_button_gpio
+	jam SS_STATE_POWER_ON,mem_shutter_soft_switch_power_state
+	branch shutter_start_reconnect
+/****************************/
+
+/**************lpm lock callback function**************/
+shutter_le_scale_lpm_lock:
+	fetch 1,mem_shutter_soft_switch_power_state
+	beq SS_STATE_POWER_OFF,app_get_lpm_wake_lock
+	call l2cap_malloc_get_full_map
+	fetch 1,mem_used_map
+	nbranch app_get_lpm_wake_lock,blank
+	branch app_put_lpm_wake_lock
+/****************************/
+
+/**************c512bt event callback function*************/
+shutter_process_bb_event:
+	copy regc,pdata
+/**************classic shutter event*****************/
+	beq BT_EVT_BB_CONNECTED,classic_shutter_process_baseband_connect
+	beq BT_EVT_BB_DISCONNECTED,classic_shutter_process_baseband_disconnect
+	beq BT_EVT_RECONN_FAILED,classic_shutter_process_reconnect_failed
+	beq BT_EVT_SETUP_COMPLETE,classic_shutter_process_setup_complete
+	beq BT_EVT_HID_CONNECTED,classic_shutter_process_hid_connect
+	beq BT_EVT_HID_DISCONNECTED,classic_shutter_process_hid_disconnect
+	beq BT_EVT_HID_HANDSHAKE,classic_shutter_process_hid_handshake
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,classic_shutter_process_reconnect_page_timeout
+	beq BT_EVT_VIRTUAL_CABLE_UNPLUG,classic_shutter_process_virtual_cable_unplug
+	beq BT_EVT_REMOTE_UNSNIFF,classic_shutter_process_remote_unsniff
+	beq BT_EVT_STORE_NVRAM,classic_shutter_process_store_reconnect_information
+/**************ble shutter event*****************/
+	beq BT_EVT_LE_CONNECTED,ble_shutter_process_baseband_connect
+	beq BT_EVT_LE_DISCONNECTED,ble_shutter_process_baseband_disconnect
+	beq BT_EVT_LE_RECONNECT_COMPLETE,ble_shutter_process_reconnect_complete
+	beq BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,ble_shutter_process_parse_connect_parameter_update_response
+/***************soft swtich event****************/
+	beq BT_EVT_BUTTON_LONG_PRESSED,shutter_process_soft_swtich_button_long_press
+	beq BT_EVT_BUTTON_DOWN,shutter_process_soft_swtich_button_down
+	beq BT_EVT_BUTTON_UP,shutter_process_soft_swtich_button_up
+	rtn
+/****************************/
+
+
+/******************classic shutter event**********************/
+classic_shutter_process_baseband_connect:
+	jam 0,mem_classic_shutter_hid_disconn_count
+	jam 0,mem_classic_shutter_cable_unplug_conut	
+	rtn
+
+
+classic_shutter_process_baseband_disconnect:
+	call classic_shutter_disconnect_clear_flag
+	branch classic_shutter_process_reconnect_failed
+
+classic_shutter_disconnect_clear_flag:
+	jam APP_HANDSHAKE_NULL,mem_app_handshake_flag
+	jam 0,mem_hid_handshake_timer_count
+	jam 0,mem_unsniff2sniff_timer_count
+	jam 0,mem_classic_shutter_cable_unplug_conut
+	jam 0,mem_classic_shutter_hid_disconn_count
+	branch queue_init
+
+
+classic_shutter_process_reconnect_failed:
+	call app_disconn_reason_clear
+	branch shutter_start_bluetooth_discovery
+
+
+classic_shutter_process_setup_complete:
+	call shutter_stop_bluetooth_discovery
+	branch app_led_stop_blink
+
+
+classic_shutter_process_hid_connect:
+	setarg HID_HANDSHAKE_TIMEOUT
+	store 1,mem_hid_handshake_timer_count
+	rtn	
+
+
+classic_shutter_process_hid_disconnect:
+	jam 0,mem_classic_shutter_cable_unplug_conut	
+	setarg FLAG_SHUTTER_HID_DISCONN_TIMEOUT
+	store 1,mem_classic_shutter_hid_disconn_count
+	rtn
+
+
+classic_shutter_process_hid_handshake:
+	fetch 1,mem_app_handshake_flag
+	rtneq APP_HANDSHAKE_DONE
+	jam APP_HANDSHAKE_DONE,mem_app_handshake_flag
+	call app_lpm_mult_enable
+	call app_store_reconn_info
+	call shutter_stop_bluetooth_discovery
+	call app_led_off
+	branch app_bt_enter_sniff
+
+
+classic_shutter_process_reconnect_page_timeout:
+	branch classic_shutter_process_reconnect_failed
+
+
+classic_shutter_process_virtual_cable_unplug:
+	setarg FLAG_SHUTTER_CABLE_UNPLUG_TIMEOUT
+	store 1,mem_classic_shutter_cable_unplug_conut
+	rtn
+
+
+classic_shutter_process_remote_unsniff:
+	branch app_start_auto_sniff
+
+
+/***************classic shutter store reconn info***********************/
+classic_shutter_process_store_reconnect_information:
+	arg NVRAM_EEPROM_OFFSET,regb
+	fetch 1,mem_nv_data_number
+	mul32 pdata,34,temp
+	fetch 2,mem_nv_data_ptr
+	copy pdata,rega
+	branch iicd_write_eep_data
+
+classic_shutter_load_reconn_info:
+	arg NVRAM_EEPROM_OFFSET,regb
+	fetch 1,mem_shutter_bluetooth_type
+	rtnbit0 CLASSIC_SHUTTER
+	fetch 1,mem_nv_data_number
+	rtn blank
+	mul32 pdata,34,temp
+	fetch 2,mem_nv_data_ptr
+	copy pdata,rega
+	branch iicd_read_eep_data
+/**************************************/
+
+/******************ble shutter event**********************/
+ble_shutter_process_baseband_connect:
+	call shutter_stop_bluetooth_discovery
+	setarg 0
+	store 2,mem_ble_shutter_reconn_timer
+	branch app_led_off
+
+
+ble_shutter_process_baseband_disconnect:
+	call queue_init
+	jam 0,mem_ble_shutter_enable_notify
+	branch shutter_start_reconnect
+
+
+ble_shutter_process_reconnect_complete:
+	call queue_init
+	jam 1,mem_ble_shutter_enable_notify
+	fetch 8,mem_ble_shutter_interval_min
+	store 8,mem_le_interval_min
+	call app_lpm_mult_enable
+	branch le_l2cap_tx_update_req
+
+
+ble_shutter_process_parse_connect_parameter_update_response:
+	fetch 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	rtneq BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_ACCEPTED
+	fetch 8,mem_ble_shutter_interval_min_new
+	rtn blank
+	store 8,mem_le_interval_min
+	branch le_l2cap_tx_update_req
+/**************************************/
+
+/******************soft swtich event**********************/
+shutter_process_soft_swtich_button_long_press:
+	branch ui_soft_switch_botton_long_press
+
+shutter_process_soft_swtich_button_down:
+	fetch 1,mem_shutter_hard_soft_switch_case
+	rtneq HARD_SWITCH
+	fetch 1,mem_shutter_soft_switch_power_state
+	rtnne SS_STATE_POWER_ON
+	call shutter_store_currenct_led_state
+	branch app_led_on
+	
+shutter_store_currenct_led_state:
+	jam 1,mem_shutter_soft_swtich_botton_down
+	arg 11,loopcnt
+	arg mem_shutter_soft_swtich_led_struct_temp,contw
+	arg mem_shutter_led_struct_app_led,contr
+	branch memcpy
+	
+shutter_process_soft_swtich_button_up:
+	fetch 1,mem_shutter_hard_soft_switch_case
+	rtneq HARD_SWITCH
+	fetch 1,mem_shutter_soft_switch_power_state
+	beq SS_STATE_POWER_ON,shutter_load_currenct_led_state
+	branch ui_soft_switch_botton_up
+
+shutter_load_currenct_led_state:
+	fetch 1,mem_shutter_soft_swtich_botton_down
+	rtnne 1
+	jam 0,mem_shutter_soft_swtich_botton_down
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,app_led_off
+	bbit1 UI_STATE_BLE_CONNECTED,app_led_off
+	arg 11,loopcnt
+	arg mem_shutter_soft_swtich_led_struct_temp,contr
+	arg mem_shutter_led_struct_app_led,contw
+	branch memcpy
+	
+/**************************************/
+
+
+shutter_le_bb_event_timer:
+/**************shutter check sleep timer**********************/
+	call shutter_check_sleep_timer
+/************************************/
+/**************soft reset power off timer**********************/
+	call shutter_check_power_off_timer
+/************************************/
+/**************classic shutter timer**********************/
+	call classic_shutter_check_unplug_timer
+	call classic_shutter_hid_handshake_timer
+	call classic_shutter_hid_disconn_timer
+/************************************/
+/**************ble shutter timer**********************/
+	branch ble_shutter_reconn_timer
+/************************************/
+
+/**************shutter check sleep timer**********************/
+shutter_check_sleep_timer:
+	arg mem_shutter_sleep_timer,regc
+	arg shutter_sleep_timeout,regb
+	branch timer_single_step_2B
+shutter_sleep_timeout:
+	jam SS_STATE_POWER_OFF,mem_shutter_soft_switch_power_state
+	call app_led_off
+	call shutter_disconnect_current_connection
+	branch shutter_wait_power_off
+
+/**************soft reset power off timer**********************/
+shutter_check_power_off_timer:
+	arg mem_shutter_power_off_timer,regc
+	arg shutter_check_power_off_timeout,regb
+	branch timer_single_step
+
+shutter_check_power_off_timeout:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,shutter_wait_power_off
+	bbit1 UI_STATE_BT_CONNECTED,shutter_wait_power_off
+	fetch 1,mem_shutter_led_struct_app_led_type
+	beq UI_LED_STATE_BLINK_START,shutter_wait_power_off
+	beq UI_LED_STATE_BLINK_LIGHTING,shutter_wait_power_off
+	beq UI_LED_STATE_BLINK_DARKING,shutter_wait_power_off
+	branch app_enter_hibernate
+/************************************/
+
+/**************classic shutter timer**********************/
+classic_shutter_check_unplug_timer:
+	arg mem_classic_shutter_cable_unplug_conut,regc
+	arg classic_shutter_unplug_timeout,regb
+	branch timer_single_step
+	
+classic_shutter_unplug_timeout:
+	fetch 1,mem_CONTROL_tasks
+	set1  L2CAP_DISCONNECT_INTERRUPT, pdata
+	set1  L2CAP_DISCONNECT_CONTROL, pdata
+	store 1,mem_CONTROL_tasks	
+	rtn
+
+classic_shutter_hid_handshake_timer:
+	arg mem_hid_handshake_timer_count,regc
+	arg classic_shutter_process_hid_handshake,regb
+	branch timer_single_step
+
+classic_shutter_hid_disconn_timer:
+	arg mem_classic_shutter_hid_disconn_count,regc
+	arg app_bt_disconnect,regb
+	branch timer_single_step
+
+/************************************/
+
+/**************ble shutter timer**********************/
+ble_shutter_reconn_timer:
+	fetch 1,mem_shutter_soft_switch_power_state
+	rtnne SS_STATE_POWER_ON
+	arg mem_ble_shutter_reconn_timer,regc
+	arg shutter_start_bluetooth_discovery,regb
+	branch timer_single_step_2B
+/************************************/
+
+shutter_process_idle:
+	call shutter_send_data_to_master
+	branch keyscan_key_process
+
+
+shutter_process_lpm_before:
+	branch keyscan_process_lpm_before
+
+shutter_le_before_hibernate:
+	call gpio_set_before_lpm_common
+	branch shutter_process_lpm_before
+
+//////////////////////////////////////////////////////////////////////////////////////////
+
+
+/****************shutter bluetooth control**********************/
+shutter_stop_bluetooth_discovery:
+	fetch 1,mem_shutter_bluetooth_type
+	bbit1 CLASSIC_SHUTTER,classic_shutter_stop_bluetooth_discovery
+	bbit1 BLE_SHUTTER,ble_shutter_stop_bluetooth_discovery
+	rtn
+
+ble_shutter_stop_bluetooth_discovery:
+	fetch 2,mem_ble_shutter_connect_timeout
+	store 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+	branch app_ble_stop_adv
+	
+classic_shutter_stop_bluetooth_discovery:
+	fetch 2,mem_classic_shutter_connect_timeout
+	store 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+	branch app_bt_stop_discovery
+
+shutter_start_bluetooth_discovery:
+	fetch 1,mem_shutter_soft_switch_power_state
+	rtnne SS_STATE_POWER_ON
+	fetch 1,mem_shutter_bluetooth_type
+	bbit1 CLASSIC_SHUTTER,classic_shutter_start_discovery
+	bbit1 BLE_SHUTTER,ble_shutter_start_discovery
+	rtn
+	
+classic_shutter_start_discovery:
+	fetch 2,mem_classic_shutter_discovery_timeout,
+	store 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+	branch app_bt_start_discovery_short
+
+ble_shutter_start_discovery:
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	fetch 2,mem_ble_shutter_discovery_timeout
+	store 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+	fetch 2,mem_ble_shutter_discovery_adv_interval
+	call shutter_ble_adv_interval_set
+	call app_led_start_blink
+	fetch 4,mem_ble_shutter_discovery_blink_on_time
+	store 4,mem_shutter_led_struct_app_led_on_time
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_ADV
+	branch app_ble_start_adv
+
+
+shutter_start_reconnect:
+	fetch 1,mem_shutter_soft_switch_power_state
+	rtnne SS_STATE_POWER_ON
+	fetch 1,mem_shutter_bluetooth_type
+	bbit1 CLASSIC_SHUTTER,classic_shutter_start_reconnect
+	bbit1 BLE_SHUTTER,ble_shutter_start_reconnect
+	rtn
+
+classic_shutter_start_reconnect:
+	call app_check_reconn_target
+	branch shutter_start_bluetooth_discovery,blank
+	call app_led_on	
+	call app_bt_stop_discovery
+	branch app_bt_start_reconnect	
+
+ble_shutter_start_reconnect:
+	fetch 2,mem_ble_shutter_reconn_timer
+	fetcht 2,mem_ble_shutter_reconn_timeout
+	storet 2,mem_ble_shutter_reconn_timer
+	nrtn blank
+	fetch 2,mem_ble_shutter_reconn_dav_interval
+	call shutter_ble_adv_interval_set
+	call app_led_start_blink
+	fetch 4,mem_ble_shutter_reconn_blink_on_time
+	store 4,mem_shutter_led_struct_app_led_on_time
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_ADV
+	branch app_ble_start_adv
+
+//pdata:adv interval value
+shutter_ble_adv_interval_set:
+	store 2,mem_lpm_interval
+	increase -4,pdata
+	store 2,mem_le_adv_interval
+	rtn
+
+
+shutter_disconnect_current_connection:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect
+	bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect
+	branch shutter_stop_bluetooth_discovery
+/**************************************/
+
+/******************classic shutter load reconnect*********************/
+app_check_reconn_target:
+	fetch 1,mem_nv_data_number
+	copy pdata,loopcnt
+	fetch 2,mem_nv_data_ptr
+	copy pdata,rega
+app_check_reconn_target_loop:
+	ifetch 2,rega
+	beq 0,found_reconn_device
+	increase NV_DATA_LEN,rega
+	loop app_check_reconn_target_loop
+	branch enable_blank
+
+found_reconn_device:
+	ifetch 6,contr
+	store 6,mem_hci_plap
+	increase 10,contr
+	arg mem_link_key,contw
+	call  memcpy16
+	call check_link_key_load
+	branch disable_blank
+	
+/**************************************/
+
+/////////////////////////////////////////////////////////////////////////
+//output:if user is enable,mean,can send data
+shutter_check_data_enable:
+	call disable_user
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,shutter_check_bt_data_enable
+	bbit1 UI_STATE_BLE_CONNECTED,shutter_check_ble_data_enable
+	rtn
+
+shutter_check_bt_data_enable:
+	fetch 1,mem_hid_interrupt_state
+	rtnne 0x3f	
+	branch enable_user
+
+shutter_check_ble_data_enable:
+	fetch 1,mem_ble_shutter_enable_notify
+	rtn blank
+	branch enable_user
+/////////////////////////////////////////////////////////////////////////
+
+/////////////////////////////////////////////////////////////////////////
+//output:if user is enable,mean,bluetooth disconnect
+shutter_check_bluetooth_conn:
+	call disable_user
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BT_CONNECTED
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	branch enable_user
+/////////////////////////////////////////////////////////////////////////
+
+/////////////////////////////////////////////////////////////////////////
+shutter_change_bluetooth_status_bt_disconn:
+	fetch 1,mem_shutter_bluetooth_type
+	bbit1 CLASSIC_SHUTTER,classic_shutter_change_bluetooth_status_bt_disconn
+	bbit1 BLE_SHUTTER,ble_shutter_change_bluetooth_status_bt_disconn
+	rtn
+	
+classic_shutter_change_bluetooth_status_bt_disconn:
+	fetch 1,mem_scan_mode
+	rtnne 0x03
+	branch shutter_start_reconnect
+	
+ble_shutter_change_bluetooth_status_bt_disconn:
+	branch shutter_start_reconnect
+
+/////////////////////////////////////////////////////////////////////////
+shutter_check_send_data:
+	disable user2
+	fetch 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+
+	call shutter_check_bluetooth_conn
+	branch shutter_change_bluetooth_status_bt_disconn,user
+	
+	call shutter_check_data_enable
+	nrtn user
+	enable user2
+	rtn
+
+//queue = key index
+//rega =1 press, =0 release
+shutter_key_change:
+	call shutter_check_send_data
+	nrtn user2
+	deposit rega
+	branch shutter_key_release,blank
+shutter_key_press:
+	call app_led_on
+	arg mem_key0_press,regc
+	branch push_queue_press_or_release
+
+shutter_key_release:
+	call app_led_off
+	arg mem_key0_release,regc
+
+push_queue_press_or_release:
+	arg MAX_QUEUE_NUM,pdata
+	imul32 queue,pdata
+	iadd regc,regc
+	
+//input:regc the address that want push to queue buffer
+push_buffer_in_queue:
+	ifetch 1,regc
+	rtn blank
+	call queue_push_one_byte
+	increase 1,regc
+	branch push_buffer_in_queue
+
+
+shutter_send_data_to_master:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,pop_queue_to_ble_data
+	bbit1 UI_STATE_BT_CONNECTED,pop_queue_to_classic_data
+	rtn
+
+pop_queue_to_ble_data:
+	call le_fifo_check_nearly_full
+	nrtn blank
+	call queue_pop_one_byte
+	nrtn user
+	pincrease -1
+	mul32 pdata,SHUTTER_BLE_DATA_BUFFER,pdata
+	arg mem_ble_data_buffer1,temp
+	iadd temp,contr
+le_send_notify_from_list:
+	ifetch 1,contr	//length 
+	copy pdata,rega
+	ifetcht 2,contr	//handle
+	call store_contr
+	call le_att_malloc_tx_notify
+	copy rega,loopcnt
+	call get_contr
+	branch memcpy
+
+
+pop_queue_to_classic_data:
+	call l2cap_malloc_is_fifo_nearly_full
+	nrtn blank
+	call queue_pop_one_byte
+	nrtn user
+	pincrease -1
+	mul32 pdata,SHUTTER_CLASSIC_DATA_BUFFER,pdata
+	arg mem_classic_data_buffer1,temp
+	iadd temp,contr
+	ifetch 5,contr
+	store 5,mem_classic_data_buffer
+classic_send_hid_data:
+	fetch 1,mem_classic_data_buffer
+	copy pdata,rega
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_int_remote_cid
+	istore 2,contw
+	setarg 0xa1
+	istore 1,contw
+	fetch 4,mem_classic_data_buffer + 1
+	istore 9,contw
+	rtn
+
+///////////queue function////////////
+//input:pdata is data that want push
+queue_push_one_byte:
+	store 1,mem_pdatatemp
+	arg mem_pdatatemp,rega
+	branch queue_push
+
+queue_pop_one_byte:
+	arg mem_pdatatemp,rega
+	call queue_pop
+	nrtn user
+	fetch 1,mem_pdatatemp
+	rtn
+
+///////////queue function ending////////////
+ble_shutter_receive_data:
+	fetch 2,mem_le_att_handle
+	beq GATT_KEYBOARD_WRITE_HANDLE,ble_shutter_process_reconnect_complete
+	rtn
+
+shutter_init_param:
+	setarg 0x02
+	store 1,mem_shutter_power_off_timeout
+/////////////ble connect interval//////////////
+	setarg 0x00200008
+	store 4,mem_ble_shutter_interval_min		//set min interval is 10ms,set max interval is 40ms
+	setarg 0x012c0005
+	istore 4,contw
+///////////////////////////////////////
+//////////////////MTU/////////////
+	jam 0x17,mem_le_local_mtu
+///////////////////////////////////////
+////////////////justwork/////////
+	setarg 0x1b
+ 	store 2,mem_le_pairing_handle
+ 	call le_set_config_fixed_ltk
+	call le_set_fixed_ltk
+	call le_set_justwork
+	branch le_set_config_read_authentication
+///////////////////////////////////////
+
+shutter_load_buffer_config_form_DataRom:
+///////load data Rom/////////
+	arg BLE_KEY_VALUE_LIST_SIZE,loopcnt
+	arg mem_ble_data_buffer1,contw
+	arg BLE_SHUTTER_KEY_VALUE_LIST,contr
+	call memcpy_fast
+	arg BT_KEY_VALUE_LIST_SIZE,loopcnt
+	arg mem_classic_data_buffer1,contw
+	arg CLASSIC_SHUTTER_KEY_VALUE_LIST,contr
+	branch memcpy_fast	
+
+
+shutter_load_ble_gatt_form_DataRom:
+	arg BLE_GATT_LIST_SIZE,loopcnt
+	arg BLE_SHUTTER_GATT_LIST,contr
+	branch memcpy_fast
+
+
+shutter_load_bt_sdp_form_DataRom:
+	arg BT_SDP_LIST_SIZE,loopcnt
+	arg CLASSIC_SHUTTER_SDP_LIST,contr
+	branch memcpy_fast
+	
+
+///////////////////////////////gpio config////////////////////////////////////
+shutter_init_bluetooth_config:
+	call shutter_check_load_config_flag
+	nrtn user
+	fetch 1,mem_shutter_config_select_gpio1
+	call shutter_init_bluetooth_config_gpio_input
+	fetch 1,mem_shutter_config_select_gpio2
+	call shutter_init_bluetooth_config_gpio_input
+	fetch 1,mem_shutter_config_select_gpio3
+	branch shutter_init_bluetooth_config_gpio_input
+	
+shutter_init_bluetooth_config_gpio_input:
+	rtn blank
+	or pdata,0x80,temp
+	branch gpio_config_input_nowake
+	
+
+shutter_load_bluetooth_config:
+	call shutter_check_load_config_flag
+	nrtn user
+	call shutter_load_bluetooth_config_label
+	branch shutter_load_bluetooth_config_by_otp
+
+shutter_load_bluetooth_config_label:
+	arg 0,rega
+	fetch 1,mem_shutter_config_select_gpio1
+	call shutter_load_bluetooth_config_read_gpio_input
+	nsetflag blank,0,rega
+	fetch 1,mem_shutter_config_select_gpio2
+	call shutter_load_bluetooth_config_read_gpio_input
+	nsetflag blank,1,rega
+	fetch 1,mem_shutter_config_select_gpio3
+	call shutter_load_bluetooth_config_read_gpio_input
+	nsetflag blank,2,rega
+	copy rega,pdata
+	store 1,mem_shutter_config_label
+	fetch 1,mem_shutter_config_size
+	imul32 rega,pdata
+	fetcht 2,mem_shutter_config_otp_base_address		//base address
+	iadd temp,pdata
+	store 2,mem_shutter_config_otp_addr
+	rtn
+
+shutter_load_bluetooth_config_read_gpio_input:
+	rtn blank
+	or pdata,0x80,temp
+	call gpio_get_bit
+	nbranch enable_blank,true
+	branch disable_blank
+	
+
+shutter_check_load_config_flag:
+	call disable_user
+	fetch 1,mem_shutter_config_user_size
+	nrtn blank
+	fetch 1,mem_shutter_config_enable
+	rtn blank
+	branch enable_user
+
+
+shutter_load_bluetooth_config_by_otp:
+	call otp_enable_chgpump
+	fetch 2,mem_shutter_config_otp_addr
+	arg mem_shutter_config_data_temp,rega
+	fetcht 1,mem_shutter_config_size
+	call otpd_read_data
+	call otp_disable_chgpump
+shutter_load_bluetooth_config_store_name:
+	fetch 1,mem_shutter_config_data_temp
+	copy pdata,loopcnt
+	store 1,mem_le_name_len
+	call memcpy_fast
+	fetch 1,mem_shutter_config_data_temp
+	copy pdata,loopcnt
+	store 1,mem_local_name_length
+	call memcpy_fast
+	ifetch 1,contr
+	store 1,mem_shutter_key_num
+	ifetch 1,contr
+	store 1,mem_shutter_hard_soft_switch_case
+	rtn
+
+
+shutter_load_bluetooth_config_by_eeprom:
+	fetch 1,mem_shutter_bluetooth_type
+	rtnbit0 CLASSIC_SHUTTER
+	arg 3,temp
+	fetch 2,mem_shutter_config_eeprom_offset_addr
+	copy pdata,regb
+	arg mem_shutter_config_eeprom_start_flag,rega
+	call iicd_read_eep_data
+	fetcht 2,mem_shutter_config_eeprom_start_flag
+	setarg SHUTTER_EEPROM_CONFIG_CRC
+	isub temp,null
+	nrtn zero
+	fetch 1,mem_shutter_config_user_size
+	rtn blank
+	copy pdata,temp
+	fetch 2,mem_shutter_config_eeprom_offset_addr
+	add pdata,3,regb
+	arg mem_shutter_config_data_temp,rega
+	call iicd_read_eep_data
+	branch shutter_store_config
+
+shutter_load_bluetooth_config_by_user_config:
+	fetch 2,mem_shutter_config_user_otp_address
+	rtn blank
+	call otp_enable_chgpump
+	arg 1,temp
+	arg mem_shutter_config_user_size,rega
+	call otpd_read_data
+	
+	fetch 1,mem_shutter_config_user_size
+	rtn blank
+	
+	fetch 2,mem_shutter_config_user_otp_address
+	pincrease 1
+	arg mem_shutter_config_data_temp,rega
+	fetcht 1,mem_shutter_config_user_size
+	call otpd_read_data
+	call otp_disable_chgpump
+shutter_store_config:
+	call shutter_load_bluetooth_config_store_name
+shutter_load_bluetooth_config_custom:
+	ifetch 2,contr
+	rtn blank
+	copy pdata,contw
+	ifetcht 1,contr
+	copy temp,loopcnt
+	call memcpy
+	branch shutter_load_bluetooth_config_custom
+///////////////////////////////////////////////////////////////////
+
+//////////////////////////random mac address//////////////////////////////
+shutter_random_mac_addr:
+	fetch 1,mem_shutter_bluetooth_type
+	rtnbit0 CLASSIC_SHUTTER
+	fetch 2,mem_classic_shutter_random_mac_offset_addr
+	copy pdata,regb
+	arg 4,temp
+	arg mem_shutter_random_mac_data_temp,rega
+	call iicd_read_eep_data
+	fetch 1,mem_shutter_random_mac_data_temp
+	bne 1,shutter_write_random_mac_addr_to_eeprom
+shutter_write_random_mac_addr_to_eeprom:
+	setarg 1
+	store 1,mem_shutter_random_mac_data_temp
+	force 3,loopcnt
+	call generate_random_loop
+	fetch 2,mem_classic_shutter_random_mac_offset_addr
+	copy pdata,regb
+	arg 4,temp
+	arg mem_shutter_random_mac_data_temp,rega
+	call iicd_write_eep_data
+shutter_write_random_mac_addr:
+	fetch 3,mem_shutter_random_mac_data_temp + 1
+	store 3,mem_lap
+	store 3,mem_le_lap
+	rtn
+	
+/////////////////////////////////////////////////////////////////
+shutter_soft_swtich_power_on:
+	branch shutter_start_reconnect
+
+
+shutter_soft_swtich_power_off:
+	arg 0,rega
+	arg mem_shutter_power_off_led_style,regc
+	call ui_led_set_style_global
+	call shutter_disconnect_current_connection
+shutter_wait_power_off:
+	fetch 1,mem_shutter_power_off_timeout
+	store 1,mem_shutter_power_off_timer
+	rtn
+	
+
+/*************soft swtich ui config*********************/
+ui_soft_swtich_init:
+	setarg SS_STATE_POWER_UP
+	call ui_soft_swtich_init_power_on_time
+	jam UI_BUTTON_STATE_UP,mem_ui_button_last_state
+	call ui_button_init
+	call ui_button_polling
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+	branch app_enter_hibernate
+
+ui_soft_swtich_init_power_on_time:
+	fetcht 2,mem_power_param_ptr
+	istore 1,temp		//init power state 
+	ifetch 1,contw		//power on time
+	store 1,mem_ui_button_timeout
+	rtn
+
+
+ui_soft_switch_botton_up:
+	fetch 2,mem_power_param_ptr
+	ifetch 1,pdata
+	rtnne SS_STATE_POWER_UP
+	branch app_enter_hibernate
+
+
+ui_soft_switch_botton_long_press:
+	fetcht 2,mem_power_param_ptr
+	ifetch 1,temp
+	beq SS_STATE_POWER_ON,ui_soft_switch_power_off
+ui_soft_switch_power_on:
+	setarg SS_STATE_POWER_ON
+	fetcht 2,mem_power_param_ptr
+	istore 1,temp		//init power state 
+	add temp,SS_POWER_OFF_TIME,contr
+	ifetch 1,contr
+	istore 1,mem_ui_button_timeout
+	ifetch 2,contr
+	branch callback_func
+
+ui_soft_switch_power_off:
+	setarg SS_STATE_POWER_OFF
+	call ui_soft_swtich_init_power_on_time
+	add temp,SS_POWER_OFF_CB,contr
+	ifetch 2,contr
+	branch app_enter_hibernate,blank		//no call back function , just enter hibernate
+	branch callback_func
+	
+/*************soft swtich ui config ending*********************/
+
+
+/*************unkown function*********************/
+shutter_byteswap:
+	store 6,mem_tmp_buffer
+	fetch 1,mem_tmp_buffer
+	store 1,mem_tmp_buffer+11
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+10
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+9
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+8
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+7
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+6
+	fetch 6,mem_tmp_buffer+6
+	rtn
+
+shutter_random_addr_by_otp:
+	call load_adc_init
+	fetch 1,mem_1v_adc_io_data
+	store 1,mem_le_lap
+	fetch 1,mem_5v_adc_hvin_data
+	istore 1,contw
+	fetch 1,mem_3v_adc_vinlpm_data
+	istore 1,contw
+	fetch 3,mem_le_lap
+	store 3,mem_lap
+	rtn
+
+
+
+//iic read function
+//function name:sim_iic_read_eep_data
+//input:
+//temp:the length that simulation iic want to read eeprom data
+//rega:the memmory point that simulation iic read data store
+//regb:the eeprom address offset
+//mark_eeprom_size:select 02 or other
+//output:nc
+sim_iic_read_eep_data:
+	fetch 2,mem_eeprom_base
+	iadd regb,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+	copy temp,regb
+	
+	call sim_iic_start
+	setarg 0xa0
+	call sim_iic_send_byte
+	fetch 1,mem_addr_mi
+	call sim_iic_send_byte
+	bmark1 mark_eeprom_size,sim_iic_read_eep_data_2k
+	fetch 1,mem_addr_mi + 1
+	call sim_iic_send_byte
+sim_iic_read_eep_data_2k:
+	call sim_iic_stop
+
+	call sim_iic_start
+	setarg 0xa1
+	call sim_iic_send_byte
+
+sim_iic_read_eep_data_loop:
+	call sim_iic_read_byte
+	istore 1,rega
+	increase 1,rega
+	increase -1,regb
+	nbranch sim_iic_read_eep_data_loop,zero
+	branch sim_iic_stop
+
+
+//iic write data function
+//function name:sim_iic_write_eep_data
+//input:
+//temp:the length that simulation iic want to write eeprom data
+//rega:the memmory point that simulation iic write data read
+//regb:the eeprom address
+//mark_eeprom_size:select 02 or other
+//output:nc
+sim_iic_write_eep_data:
+	byteswap regb,pdata
+	store 2,mem_addr_mi
+	copy temp,regb
+
+	call sim_iic_start
+	setarg 0xa0
+	call sim_iic_send_byte
+
+	fetch 1,mem_addr_mi
+	call sim_iic_send_byte
+	bmark1 mark_eeprom_size,sim_iic_write_eep_data_loop
+	fetch 1,mem_addr_mi + 1
+	call sim_iic_send_byte
+sim_iic_write_eep_data_loop:
+	ifetch 1,rega
+	call sim_iic_send_byte
+	increase 1,rega
+	increase -1,regb
+	nbranch sim_iic_write_eep_data_loop,zero
+	branch sim_iic_stop
+//	bmark1 mark_eeprom_size
+
+//use reg:pdata,contr,contw,loopcnt
+sim_iic_wait_ack:
+	arg 10,loopcnt
+	call sim_iic_release_sda
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+sim_iic_wait_ack_loop:
+	call sim_iic_read_sda_level
+	branch sim_iic_scl_output_low,blank	//scl = 0
+	loop sim_iic_wait_ack_loop
+	branch sim_iic_scl_output_low		//scl = 0	
+
+
+//use reg:pdata,contr,contw,rega,queue
+sim_iic_ack_slave:
+	call sim_iic_scl_output_low		//scl = 0	
+	call sim_iic_sda_output_low		//sda = 0
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	branch sim_iic_scl_output_low	//scl = 0	
+
+
+//output:pdata receive byte data
+//use reg:pdata,contr,contw,loopcnt,regc,rega
+sim_iic_read_byte:
+	arg 8,loopcnt
+	arg 0,regc
+	call sim_iic_release_sda
+sim_iic_read_byte_loop:
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	lshift regc,regc	
+	call sim_iic_read_sda_level
+	iadd regc,regc
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_scl_output_low		//scl = 0	
+	loop sim_iic_read_byte_loop
+	call sim_iic_ack_slave
+	copy regc,pdata
+	rtn
+
+//input:pdata send byte data
+//use reg:pdata,contr,contw,loopcnt,regc,rega
+sim_iic_send_byte:
+	arg 8,loopcnt
+	copy pdata,regc
+	call sim_iic_scl_output_low		//scl = 0	
+sim_iic_send_byte_loop:
+	isolate1 7,regc
+	call sim_iic_sda_output_high,true	//sda = 1
+	ncall sim_iic_sda_output_low,true	//sda = 0
+	lshift regc,regc
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_scl_output_low		//scl = 0	
+	call sim_iic_delay				//delay 2.5us
+	loop sim_iic_send_byte_loop
+	branch sim_iic_wait_ack
+
+
+//use reg:pdata,contr,contw,rega
+sim_iic_start:
+	call sim_iic_sda_output_high	//sda = 1
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_sda_output_low		//sda = 0
+	call sim_iic_delay				//delay 2.5us
+	branch sim_iic_scl_output_low		//scl = 0
+
+
+//use reg:pdata,contr,contw,rega
+sim_iic_stop:
+	call sim_iic_sda_output_low		//sda = 0
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_sda_output_high	//sda = 1
+	branch sim_iic_delay				//delay 2.5us
+
+
+//scl = 1
+sim_iic_scl_output_high:
+	enable user
+	fetch 1,SIM_IIC_SCL_GPIO_NUM
+	branch sim_iic_config_gpio
+
+//scl = 0
+sim_iic_scl_output_low:
+	disable user
+	fetch 1,SIM_IIC_SCL_GPIO_NUM
+	branch sim_iic_config_gpio
+
+//sda = 1
+sim_iic_sda_output_high:
+	enable user
+	fetch 1,SIM_IIC_SDA_GPIO_NUM
+	branch sim_iic_config_gpio
+
+//sda = 0
+sim_iic_sda_output_low:
+	disable user
+	fetch 1,SIM_IIC_SDA_GPIO_NUM
+	branch sim_iic_config_gpio
+
+//input:pdata the gpio number
+//input:user flag, if enable user,config gpio output high level; if disable user, config gpio output low level
+//use reg:pdata,contr,contw,queue,rega
+sim_iic_config_gpio:
+	and pdata,0x07,queue
+	rshift3 pdata,pdata
+	arg core_gpio_oe0,temp
+	iadd temp,temp
+	ifetch 1,temp
+	qset1 pdata
+	istore 1,temp
+	increase 4,temp
+	ifetch 1,temp
+	qsetflag user,pdata
+	istore 1,temp
+	rtn
+
+
+sim_iic_release_sda:
+	fetch 1,SIM_IIC_SDA_GPIO_NUM
+	and pdata,0x07,queue
+	rshift3 pdata,pdata
+	arg core_gpio_oe0,temp
+	iadd temp,temp
+	ifetch 1,temp
+	qset0 pdata
+	istore 1,temp
+	rtn	
+
+//get sda level
+//output:if sda high level ,pdata is 1;if sda low level ,pdata is 0
+//use reg:pdata,contr,contw,queue,rega,temp
+sim_iic_read_sda_level:
+	nop 4
+	fetch 1,SIM_IIC_SDA_GPIO_NUM
+	and pdata,0x07,queue
+	rshift3 pdata,pdata
+	arg core_gpio_in,temp
+	iadd temp,temp
+	setarg 0
+	ifetcht 1,temp
+	qisolate1 temp
+	setflag true,0,pdata
+	rtn	
+
+//delay 2.5us
+sim_iic_delay:
+//	nop 1
+	rtn
+
+/**********************************/
+
+
+else
+        branch assert
+	
+endif
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_usb.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_usb.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/app_usb.prog	(working copy)
@@ -0,0 +1,997 @@
+
+usb_isr:
+	bpatch patch1e_6,mem_patch1e
+	hfetch 1,core_usb_status
+	isolate1 7,pdata
+	call usb_init,true
+	call usb_nak_state_judge
+	hfetch 1,core_usb_status
+	store 1,mem_usb_status
+	hfetch 1,core_usb_fifo_empty
+	store 1,mem_usb_fifo_empty
+	hstore 1,core_usb_fifo_empty
+	pinvert
+	fetcht 1,mem_usb_tx_wait
+	iand temp,pdata
+	store 1,mem_usb_tx_wait
+	jam 0xe0,core_usb_status
+	fetch 1,mem_usb_fifo_empty
+	compare 0x1,pdata,0x1
+	call usb0_fifo_empty,true
+	fetch 1,mem_usb_status	
+	compare 0x1,pdata,0x1  
+	call usb_status1,true
+	call usb_tx
+	branch usb_nak_state
+
+usb_init:
+	bpatch patch1e_7,mem_patch1e
+	call usb_init_param
+	jam 0x00,core_usb_config
+ifndef SIM
+	nop 10000
+endif
+	jam 0xc0,core_usb_trig
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_USB,pdata
+	hstore 2,core_clkoff
+	jam 0x3c,core_usb_config
+	jam 0xff,core_usb_status
+	jam 0xff,core_usb_fifo_empty
+	jam 0,core_usb_addr
+	jam DEV_DEFAULT,mem_usb0_state
+	setarg mem_usb_clear_mem_end
+	arg mem_usb_clear_mem_start,contw
+	isub contw,loopcnt
+	branch clear_mem
+
+usb_offline_check_init:
+	fetcht 1,mem_usb_offline_check_gpio
+	branch gpio_config_input
+usb_offline_state:
+	fetch 1,mem_usb_device_enumeration_endflag
+	rtn blank
+	fetcht 1,mem_usb_offline_check_gpio
+	call gpio_get_bit
+	branch usb_init,true
+	rtn
+
+
+usb_nak_state:
+	arg TIMER_NAK,queue
+	call timer_check
+	nrtn blank
+	fetch 1 ,mem_usb_wakestate_onetime_flag
+	nrtn blank
+	fetch 1,mem_usb_device_enumeration_endflag
+	ncall usb_mac_wakeup_judge,blank
+	rtn
+
+usb_mem_devicedesc_init:
+	arg mem_devicedesc,contw
+	setsect 0,0x11212
+	setsect 1,0x8000
+	setsect 2,0x0
+	setsect 3,0x10000
+	istore 9,contw
+	setsect 0,0x22412
+	setsect 1,0x8604
+	setsect 2,0x1000
+	setsect 3,0x8
+	istore 9,contw
+	setsect 0,0x1
+	istore 1,contw
+	rtn
+	
+usb_init_param:
+	jam 2,mem_usb0_state
+	setarg 0x0
+	store 1,mem_remain
+	store 2,mem_usb_zero_packet
+	pincrease 1
+	store 2,mem_usb_ones_packet
+	pincrease 1
+	store 2,mem_usb_two_packet
+	setarg HID_KBDATA_ADDR
+	store 2,mem_hidreportdesc_kb
+	setarg HID_MSDATA_ADDR
+	store 2,mem_hidreportdesc_m
+	arg mem_confdesc,contw
+	arg HID_CONFDATA_ADDR,contr
+	call memcpy64
+	fetch 1,mem_usb_tx_interval
+	ncall usb_tx_interval_config,blank
+	branch usb_mem_devicedesc_init
+	
+usb_tx_interval_config:
+	store 1,mem_confdesc+34
+	store 1,mem_confdesc+59
+	rtn
+usb_nak_state_judge:
+	hfetch 1,core_usb_status
+	bbit1 USB_STATUS_NAK,usb_nak_state_timer_init
+	rtn
+	
+usb_nak_state_timer_init:
+	call usb0_attached_state_judge
+	call timer_reinit
+	setarg TIMER_NAK_DELAY
+	arg TIMER_NAK,queue
+	branch timer_init
+	
+usb0_attached_state_judge:
+	fetch 1,mem_usb_state
+	bne USB_CONNECTED,usb_clear_halt_dispose
+	jam 0,mem_usb_wakestate_onetime_flag
+	jam 0,mem_usb_mac_wakeup_trig
+	rtn
+usb_clear_halt_dispose:
+	fetch 1,mem_usb_clear_halt
+	rtn blank
+	jam 0,mem_usb_clear_halt
+	jam USB_CONNECTED,mem_usb_state
+	jam 1,mem_usb_device_enumeration_endflag
+	rtn
+    	
+usb0_fifo_empty:
+	jam 0x1,core_usb_fifo_empty
+	branch usb0_tx
+
+usb_rx_no_data:
+	fetch 1,mem_usb_status
+	bbit1 USB_STATUS_SETUP,usb_class_type
+	rtn
+
+usb_rx_read:
+	hfetch 1,core_usb_ep
+	istore 1,contw
+	loop usb_rx_read
+	rtn
+
+usb_status1:
+	bpatch patch1f_0,mem_patch1f
+	jam 0x11,core_usb_status
+	hfetch 1,core_usb_ep_len
+	store 1,mem_usb_read_len
+	copy pdata,loopcnt
+	branch usb_rx_no_data,blank
+	arg mem_usb_setup,contw
+	call usb_rx_read
+	fetch 1,mem_usb_read_len
+	sub pdata,7,null
+	rtn positive
+usb_class_type:
+	fetch 1,mem_usb_setup_bmRequestType
+	and_into 0x80,pdata
+	beq IN_DEVICE,usb_in_device
+	beq OUT_DEVICE,usb_out_device
+	branch assert
+
+usb_in_device:
+	fetch 1,mem_usb_setup_bmRequestType
+	rshift4 pdata,pdata
+	rshift pdata,pdata
+	and_into 0x03,pdata
+	beq STANDARD_REQ,usb_in_standard_req
+	beq CLASS_REQ,usb_in_class_req
+	beq MANUFACTURER_REQ,usb_in_manufacturer_req
+	branch assert
+
+usb_out_device:
+	fetch 1,mem_usb_setup_bmRequestType
+	rshift4 pdata,pdata
+	rshift pdata,pdata
+	and_into 0x03,pdata
+	beq STANDARD_REQ,usb_out_standard_req
+	beq CLASS_REQ,usb_out_class_req	
+	beq MANUFACTURER_REQ,usb_out_manufacturer_req
+	branch assert
+
+usb_in_standard_req:
+	fetch 1,mem_usb_setup_bRequest
+	beq GET_CONFIGURATION,usb0_request_get_configuration
+	beq GET_DESCRIPTOR,usb0_request_get_descriptor
+	beq GET_INTERFACE,usb0_request_get_interface
+	beq GET_STATUS,usb0_request_get_status
+	branch usb0_force_stall
+
+usb_in_class_req:
+	fetch 1,mem_usb_setup_bRequest
+	beq GET_IDLE,usb_get_idle
+	beq GET_REPORT,usb_get_report
+	beq GET_PROTOCOL,usb_get_protocol_req
+	branch usb0_force_stall
+
+usb_in_manufacturer_req:
+	branch usb0_force_stall
+
+usb_out_standard_req:
+	fetch 1,mem_usb_setup_bRequest
+	beq CLEAR_FEATURE,usb0_request_clear_feature
+	beq SET_FEATURE,usb0_request_set_feature
+	beq SET_ADDRESS,usb0_request_set_address
+	beq SET_CONFIGURATION,usb0_request_set_configuration
+	beq SET_INTERFACE,usb0_request_set_interface
+	beq SET_DESCRIPTOR,usb0_force_stall
+	branch usb0_force_stall
+
+usb_out_class_req:
+	fetch 1,mem_usb_setup_bRequest
+	beq SET_IDLE,usb_set_idle
+	beq SET_REPORT,usb_set_report
+	beq SET_PROTOCOL,usb_set_protocol_req
+	branch usb0_force_stall
+
+usb_out_manufacturer_req:
+	branch usb0_force_stall
+
+usb0_force_stall:
+	hfetch 1,core_usb_stall
+	set1 0,pdata
+	hstore 1,core_usb_stall
+	branch usb0_reply_zerolen
+	
+usb0_reply_zerolen:
+	jam 0x40,core_usb_clear
+	rtn
+
+usb0_request_get_configuration:
+	fetch 1,mem_usb_setup_bmRequestType
+	bne IN_DEVICE,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 1,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb0_state
+	beq DEV_CONFIGURED,usb0_request_get_cfg_dev_cfg
+	beq DEV_ADDRESS,usb0_request_get_cfg_dev_addr
+	branch usb0_force_stall
+//Return current config : 1
+usb0_request_get_cfg_dev_cfg:
+	arg 1,regb
+	branch usb_send_ones_packet
+//Config do not work, return default config : 0
+usb0_request_get_cfg_dev_addr:
+	arg 1,regb
+	branch usb_send_zero_packet
+
+usb0_request_get_descriptor:
+	bpatch patch1f_1,mem_patch1f
+	set0 mark_isstr,mark
+	fetch 1,mem_usb_setup_bValueH
+	beq DSC_DEVICE,dsc_device_info
+	beq DSC_CONFIG,dsc_config_info	
+	beq DSC_STRING,dsc_string_info
+	beq DSC_HID,dsc_hid_info
+	beq DSC_HID_REPORT,dsc_hid_report_info
+	branch usb0_force_stall
+
+dsc_hid_info:
+	jam 0,mem_usb_get_protocol_flag
+	fetch 1,mem_usb_setup_wIndex
+	beq 0,dsc_hid_info_interface0
+	beq 1,dsc_hid_info_interface1
+	branch usb0_force_stall
+//class_descriptor hid_descriptor--keyboard 
+dsc_hid_info_interface0:	
+	arg mem_confdesc+19,rega
+	ifetch 1,rega
+	iforce regb
+	branch usb0_respond
+//class_descriptor hid_descriptor--mouse 
+dsc_hid_info_interface1:	
+	arg mem_confdesc+44,rega
+	ifetch 1,rega
+	iforce regb
+	branch usb0_respond
+
+dsc_device_info:
+//input : pdata : data poniter 
+//input : temp: data len
+//sets the data pointer and len to correct descriptor
+	fetch 1,mem_usb_set_high_addr_flag
+	ncall usb_set_high_addr,blank
+	setarg mem_devicedesc
+	fetcht 1,mem_devicedesc
+dsc_info_set_data_len:
+	store 2,mem_dsc_info_data_pointer
+	storet 1,mem_dsc_info_len
+	fetch 1,mem_usb_setup_bLength
+	isub temp,null
+	nbranch dsc_info_set_current_data_len,positive
+dsc_info_set_initial_data_len:
+	fetch 1,mem_dsc_info_len
+dsc_info_set_data_size_completed:	
+	iforce regb
+	fetch 2,mem_dsc_info_data_pointer
+	add pdata,1,pdata
+	iforce rega
+	branch usb0_respond
+dsc_info_set_current_data_len:
+	fetch 1,mem_usb_setup_bLength
+	branch dsc_info_set_data_size_completed
+
+usb_set_high_addr:
+	hfetch 1,core_usb_addr
+	ncall usb0_set_addr,blank
+	jam 0,mem_usb_set_high_addr_flag
+	rtn
+usb0_set_addr:
+	hfetch 1,core_usb_addr
+   	set1 7,pdata
+	hstore 1,core_usb_addr
+	rtn
+
+dsc_config_info:
+	setarg mem_confdesc
+	fetcht 1,mem_confdesc
+	branch dsc_info_set_data_len
+
+dsc_string_info:
+	fetch 1,mem_usb_setup_bValue
+	sub pdata,3,null
+	nbranch usb0_force_stall,positive
+	fetch 1,mem_usb_setup_bValue
+	arg mem_string0,rega
+	beq 0,usb0_respond_length	
+	set1 mark_isstr,mark
+	arg mem_string1,rega
+	beq 1,usb0_respond_length
+	arg mem_string2,rega
+	beq 2,usb0_respond_length
+	arg mem_string3,rega
+	beq 3,usb0_respond_length
+	rtn
+
+dsc_hid_report_info:
+	fetch 2,mem_usb_setup_wIndex
+	beq 1,dsc_hid_report_info0
+	fetch 2,mem_hidreportdesc_kb
+	copy pdata,rega
+//	arg mem_hidreportdesc_kb,rega
+	branch usb0_respond_length
+dsc_hid_report_info0:
+	jam 1,mem_usb_device_enumeration_endflag
+	jam USB_GOT_REPORT_REQ,mem_usb_state
+	fetch 2,mem_hidreportdesc_m
+	copy pdata,rega
+//	arg mem_hidreportdesc_m,rega
+	branch usb0_respond_length
+
+
+usb0_request_get_interface:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall		
+	fetch 1,mem_usb_setup_bmRequestType
+	bne IN_INTERFACE,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 1,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	arg 1,regb
+	branch usb_send_zero_packet
+
+
+usb0_request_get_status:
+	fetch 1,mem_usb0_state
+	beq DEV_DEFAULT,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 2,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bmRequestType
+	beq IN_DEVICE,usb0_get_status_in_device
+	beq IN_INTERFACE,usb0_get_status_in_interface
+	beq IN_ENDPOINT,usb0_get_status_in_endpoint
+	branch usb0_force_stall
+
+usb0_get_status_in_device:
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	arg 2,regb
+	fetch 1,mem_usb_remote_wakeup
+	beq 0x01,usb_send_two_packet
+//regb:length
+usb_send_zero_packet:
+	arg mem_usb_zero_packet,rega
+	branch usb0_respond
+usb_send_ones_packet:
+	arg mem_usb_ones_packet,rega
+	branch usb0_respond
+usb_send_two_packet:
+	arg mem_usb_two_packet,rega
+	branch usb0_respond
+
+usb0_get_status_in_interface:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall
+	arg 2,regb
+	branch usb_send_zero_packet
+
+usb0_get_status_in_endpoint:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	beq IN_EP1,usb0_get_status_in_ep_in_ep1
+	beq IN_EP2,usb0_get_status_in_ep_in_ep2
+	beq IN_EP3,usb0_get_status_in_ep_in_ep3
+	and_into 0x7f,pdata
+	beq 0x00,usb0_get_status_in_ep_in_ep0
+	branch usb0_force_stall
+	
+usb0_get_status_in_ep_in_ep0:
+	fetch 1,mem_usb_ep0_stall_status
+usb0_get_status_in_ep_in_ack:
+	arg 2,regb
+	beq 1,usb_send_ones_packet
+	branch usb_send_zero_packet
+usb0_get_status_in_ep_in_ep1:
+	fetch 1,mem_usb_ep1_stall_status
+	branch usb0_get_status_in_ep_in_ack
+usb0_get_status_in_ep_in_ep2:
+	fetch 1,mem_usb_ep2_stall_status
+	branch usb0_get_status_in_ep_in_ack
+usb0_get_status_in_ep_in_ep3:
+	fetch 1,mem_usb_ep3_stall_status
+	branch usb0_get_status_in_ep_in_ack
+
+usb_get_idle:
+	jam 1,mem_usb_idle_flag
+	arg mem_usb_idle_rate,rega
+	arg 1,regb
+	branch usb0_respond
+
+usb_get_report:
+	fetch 2,mem_usb_setup_bValue
+	arg PC_GET_REPORT,temp
+	isub temp,null
+	nbranch usb0_force_stall,zero
+	set0 mark_isstr,mark
+usb_get_report_dispose:	
+	fetch 1,mem_usb0_data_ready_report
+	nbranch usb_get_report_data_success,blank
+	jam PC_GET_NONDATA,mem_usb0_get_report_data
+usb_get_report_send_data:
+	fetch 1,mem_usb_setup_bLength
+	iforce regb
+	arg mem_usb0_get_report_data,rega
+	call usb0_respond
+usb_get_report_data_release:	
+	arg mem_usb0_get_report_data,contw
+	arg 8,loopcnt
+	branch memset0
+usb_get_report_data_success:
+	jam 0,mem_usb0_data_ready_report
+	jam PC_GET_DATA,mem_usb0_get_report_data
+	branch usb_get_report_send_data
+
+usb_get_protocol_req:
+	fetch 1,mem_usb_setup_bLength
+	bne 1,usb0_force_stall
+	jam 1,mem_usb_get_protocol_flag
+	arg 1,regb //length
+	fetch 1,mem_usb_set_protocol_value
+	beq 0,usb_get_report_protocol
+	beq 1,usb_get_boot_protocol
+	branch usb_send_zero_packet
+usb_get_report_protocol:
+	branch usb_send_ones_packet
+usb_get_boot_protocol:
+	branch usb_send_zero_packet
+
+
+
+//in device
+usb0_request_clear_feature:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bmRequestType
+	beq OUT_DEVICE,usb0_request_clear_feature_out_device
+	beq OUT_INTERFACE,usb0_request_clear_feature_out_interface
+	beq OUT_ENDPOINT,usb0_request_clear_feature_out_endpoint
+	branch usb0_force_stall
+
+usb0_request_clear_feature_out_device:
+	fetch 1,mem_usb_setup_bValue
+	bne DEVICE_REMOTE_WAKEUP,usb0_force_stall
+	hfetch 1,core_usb_config
+	set0 7,pdata
+	hstore 1,core_usb_config
+	jam 0,mem_usb_remote_wakeup
+	jam 1,mem_usb_clear_remote_wakeup
+	branch usb0_reply_zerolen
+
+usb0_request_clear_feature_out_interface:
+	branch usb0_force_stall
+
+usb0_request_clear_feature_out_endpoint:
+	fetch 1,mem_usb_setup_bValue
+	bne ENDPOINT_HALT,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	beq IN_EP1,usb0_force_stall_ep1_in_off
+	beq IN_EP2,usb0_force_stall_ep2_in_off
+	beq IN_EP3,usb0_force_stall_ep3_in_off
+	and_into 0x7f,pdata
+	beq 0x00,usb0_force_stall_ep0_in_off
+	branch usb0_force_stall
+
+usb0_force_stall_ep0_in_off:
+	jam 0,mem_usb_ep0_stall_status
+	branch usb0_reply_zerolen
+usb0_force_stall_ep1_in_off:
+	jam 0,mem_usb_ep1_stall_status
+usb0_force_stall_ep1_in_off_reply:	
+	jam 1,mem_usb_clear_halt
+	branch usb0_reply_zerolen
+usb0_force_stall_ep2_in_off:
+	jam 0,mem_usb_ep2_stall_status
+	branch usb0_force_stall_ep1_in_off_reply
+usb0_force_stall_ep3_in_off:
+	jam 0,mem_usb_ep3_stall_status
+	branch usb0_force_stall_ep1_in_off_reply
+
+
+usb0_request_set_feature:
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bmRequestType
+	beq OUT_DEVICE,usb0_request_set_feature_out_device
+	beq OUT_INTERFACE,usb0_request_set_feature_out_interface
+	beq OUT_ENDPOINT,usb0_request_set_feature_out_endpoint
+	branch usb0_force_stall
+
+usb0_request_set_feature_out_device:
+	fetch 1,mem_usb_setup_bValue
+	bne DEVICE_REMOTE_WAKEUP,usb0_force_stall
+	hfetch 1,core_usb_config
+	set1 7,pdata
+	hstore 1,core_usb_config
+	jam 1,mem_usb_remote_wakeup
+	jam USB_SLEEP,mem_usb_state
+	jam 0,mem_usb_tx_win_enable
+	call usb0_reply_zerolen
+usb_wakeup_timer_reinit:
+	call timer_reinit
+	setarg TIMER_WAKEUP_DELAY
+	arg TIMER_WAKEUP,queue
+	branch timer_init
+	
+usb0_request_set_feature_out_interface:
+	branch usb0_force_stall
+
+usb0_request_set_feature_out_endpoint:
+	fetch 1,mem_usb_setup_bValue
+	bne ENDPOINT_HALT,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	beq IN_EP1,usb0_force_stall_ep1_in_on
+	beq IN_EP2,usb0_force_stall_ep2_in_on
+	beq IN_EP3,usb0_force_stall_ep3_in_on
+	and_into 0x7f,pdata
+	beq 0x00,usb0_force_stall_ep0_in_on
+	branch usb0_force_stall
+
+usb0_force_stall_ep0_in_on:
+	jam 1,mem_usb_ep0_stall_status
+	branch usb0_reply_zerolen
+usb0_force_stall_ep1_in_on:
+	jam 1,mem_usb_ep1_stall_status
+	branch usb0_reply_zerolen
+usb0_force_stall_ep2_in_on:
+	jam 1,mem_usb_ep2_stall_status
+	branch usb0_reply_zerolen
+usb0_force_stall_ep3_in_on:
+	jam 1,mem_usb_ep3_stall_status
+	branch usb0_reply_zerolen
+
+
+usb0_request_set_address:
+	fetch 1,mem_usb_setup_bmRequestType
+	bne OUT_DEVICE,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	and_into 0x80,pdata
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb_usb0_state_set_dev_addr
+usb_usb0_state_set_dev_default:	
+	jam DEV_DEFAULT,mem_usb0_state
+usb0_request_set_wait_address:
+	fetch 1,mem_usb_setup_bValue
+	hstore 1,core_usb_addr
+	call usb0_reply_zerolen
+	jam 1,mem_usb_set_high_addr_flag
+	rtn
+usb_usb0_state_set_dev_addr:
+	jam DEV_ADDRESS,mem_usb0_state
+	branch usb0_request_set_wait_address
+
+
+usb0_request_set_configuration:
+	fetch 1,mem_usb0_state
+	beq DEV_DEFAULT,usb0_force_stall
+	fetch 1,mem_usb_setup_bmRequestType
+	bne OUT_DEVICE,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	sub pdata,USB_MAX_NUM_CFG,null
+	nbranch usb0_force_stall,positive
+	fetch 1,mem_usb0_state
+	beq DEV_ADDRESS,usb0_request_set_cfg_addr_state
+	beq DEV_CONFIGURED,usb0_request_set_cfg_cfg_state
+	branch usb0_force_stall
+ // This software only supports config = 0,1
+usb0_request_set_cfg_addr_state:
+usb0_request_set_cfg_cfg_state:
+	fetch 1,mem_usb_setup_bValue	//1:Configured state   0:Address state
+	beq 0,usb0_request_set_cfg_stay_addr_state
+	jam DEV_CONFIGURED,mem_usb0_state
+	branch usb0_reply_zerolen
+usb0_request_set_cfg_stay_addr_state:
+	jam DEV_ADDRESS,mem_usb0_state
+	branch usb0_reply_zerolen
+
+
+usb0_request_set_interface:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall		
+	fetch 1,mem_usb_setup_bmRequestType
+	bne OUT_INTERFACE,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	branch usb0_reply_zerolen
+
+
+usb_set_idle:
+	jam 1,mem_usb_idle_flag
+	fetch 1,mem_usb_setup_bValueH
+	store 1,mem_usb_idle_rate
+	fetch 1,mem_usb_setup_wIndex
+	sub pdata,1,null
+	call usb_clear_remote_wakeup_set0,zero
+	fetch 1,mem_usb_state
+	bne USB_RESUME,usb0_reply_zerolen
+	jam USB_CONNECTED,mem_usb_state
+	call usb0_reply_zerolen
+	nop 30000
+	nop 30000
+	rtn
+usb_clear_remote_wakeup_set0:
+	jam 1,mem_usb_device_enumeration_endflag
+	jam 0,mem_usb_clear_remote_wakeup
+	jam USB_RESUME,mem_usb_state
+	rtn
+
+
+usb_set_report:
+	jam 1,mem_usb0_get_set_report
+	call usb_set_report_resume_judge
+	fetch 2,mem_usb_setup_bValue
+	store 2,mem_usb_setup_bValue_temp
+	fetch 1,mem_usb_setup_bLength	//max 0x40
+	iforce loopcnt
+	arg mem_usb0_setup,contr
+	arg mem_usb0_set_report_data,contw
+	call memcpy
+	branch usb0_reply_zerolen
+	
+usb_set_report_resume_judge:
+	fetch 2,mem_usb_setup_bValue
+	arg PC_SET_REPORT_bValue,temp
+	isub temp,null
+	nrtn zero
+	fetch 2,mem_usb_setup_wIndex
+	arg PC_SET_REPORT_wIndex,temp
+	isub temp,null
+	nrtn zero
+	fetch 2,mem_usb_setup_bLength
+	arg PC_SET_REPORT_bLength,temp
+	isub temp,null
+	nrtn zero
+	jam 1,mem_usb_tx_win_enable
+	rtn
+
+
+usb_set_protocol_req:
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	beq BOOT_PROTOCOL,usb_set_boot_protocol
+	beq REPORT_PROTOCOL,usb_set_report_protocol
+	branch usb0_force_stall
+usb_set_boot_protocol:
+	jam 0,mem_usb_set_protocol_status
+	jam 1,mem_usb_set_protocol_value
+	branch usb0_reply_zerolen
+usb_set_report_protocol:
+	jam 1,mem_usb_tx_mac_enable
+	jam 1,mem_usb_set_protocol_status
+	jam 0,mem_usb_set_protocol_value
+	branch usb0_reply_zerolen
+
+
+usb0_respond_length:
+	ifetch 1,rega
+	iforce regb
+	increase 1,rega
+//rega=*buff,reb=size	
+usb0_respond:
+	bpatch patch1f_2,mem_patch1f
+	bmark0 mark_isstr,usb0_respond0
+	add regb,1,pdata
+	lshift pdata,pdata
+	hstore 1,core_usb_dfifo0 
+	jam 3,core_usb_dfifo0
+	fetch 1,mem_usb_setup_bLength
+	increase -2,pdata
+	rshift pdata,pdata
+	store 1,mem_usb_setup_bLength
+	beq 0,usb_no_respond_data
+usb0_respond0:
+	fetch 2,mem_usb_setup_bLength
+	isub regb,null
+	branch usb0_respond1,positive
+	copy pdata,regb	
+usb0_respond1:
+	deposit rega
+	store 2,mem_bufptr
+	deposit regb
+	store 1,mem_remain
+	branch usb0_tx
+
+usb_no_respond_data:
+	arg 0,queue
+	branch usb_trig
+
+//mem_bufptr=*buff,mem_remain=size,loopcnt=i,rega=len
+usb0_tx:
+	bpatch patch1f_3,mem_patch1f
+	fetch 1,mem_remain
+	rtn blank
+	copy pdata,loopcnt
+	sub pdata,EP0_PACKET_SIZE,null
+	branch usb0_tx_info,positive
+	arg EP0_PACKET_SIZE,loopcnt	
+usb0_tx_info:
+	fetch 1,mem_remain
+	isub loopcnt,pdata
+	store 1,mem_remain//mem_remain -= len
+	fetch 2,mem_bufptr
+	copy pdata,contr	
+usb0_tx0:
+	ifetch 1,contr
+	hstore 1,core_usb_dfifo0
+	bmark0 mark_isstr,usb0_tx1
+	jam 0,core_usb_dfifo0
+usb0_tx1:
+	loop usb0_tx0
+	copy contr,pdata
+	store 2,mem_bufptr//mem_bufptr += len
+	arg 0,queue
+	call usb_trig
+	fetch 1,mem_remain
+	nrtn blank
+	fetch 1,mem_usb_state
+	rtnne USB_GOT_REPORT_REQ
+	jam USB_CONNECTED,mem_usb_state
+	rtn
+
+
+usb_tx_ep1:
+	arg core_usb_dfifo1,rega
+	arg 1,queue
+usb_tx_loop:
+	ifetch 1,contr
+	istore 1,rega
+	loop usb_tx_loop
+usb_trig:
+	setarg 0
+	qset1 pdata
+	hstore 1,core_usb_trig
+	fetcht 1,mem_usb_tx_wait
+	ior temp,pdata
+	store 1,mem_usb_tx_wait
+	rtn
+
+usb_tx_ep2:
+	arg 2,queue
+	arg core_usb_dfifo2,rega
+	branch usb_tx_loop
+
+usb_tx:
+	bpatch patch1f_4,mem_patch1f
+	fetch 1,mem_usb_tx_enable
+	rtn blank
+	fetch 1,mem_usb_tx_wait
+	nbranch usb_inwake_state_tx_dispose,blank
+	fetch 1,mem_usb_device_enumeration_endflag
+	branch usb_tx_fifo_release,blank
+	fetch 1,mem_usb_state
+	beq USB_SLEEP,usb_windows_wakeup
+	bne USB_CONNECTED,usb_tx_fifo_release
+	fetch 1,mem_usb_clear_remote_wakeup
+	nbranch usb_tx_fifo_release,blank
+	call usb_tx_data_ep1
+	branch usb_tx_data_ep2
+
+usb_tx_data_ep1:
+	fetch 1,mem_usb_tx_enable
+	rtnbit0 1
+	fetch 1,mem_usb_tx_wait
+	rtnbit1 1
+	fetch 1,mem_usb_tx_enable
+	set0 1,pdata
+	store 1,mem_usb_tx_enable
+	fetch 1,mem_usb_ep1_data
+	rtn blank
+	beq USB_EP1_KB,usb_tx_kb_normal_data
+	branch assert
+
+usb_tx_data_ep2:
+	fetch 1,mem_usb_tx_enable
+	rtnbit0 2
+	fetch 1,mem_usb_tx_wait
+	rtnbit1 2
+	fetch 1,mem_usb_tx_enable
+	set0 2,pdata
+	store 1,mem_usb_tx_enable
+	fetch 1,mem_usb_ep2_data
+	rtn blank
+	beq USB_EP2_MS,usb_tx_ms_data
+	beq USB_EP2_MULTIKEY,usb_tx_kb_multikey_data
+	branch assert
+
+usb_tx_fifo_release:
+	//clear mem_usb_mouse_data/mem_usb_kb_data/mem_usb_kb_multikey
+	arg mem_usb_mouse_data,contw
+	arg 6,loopcnt
+	branch memset0
+	
+usb_tx_ms_data:
+	fetch 1,mem_usb_idle_flag
+	fetcht 1,mem_usb_get_protocol_flag
+	iand temp,pdata
+	branch usb_tx_ms_data_normal_mode,blank
+	fetcht 1,mem_usb_set_protocol_status
+	iadd temp,pdata
+	beq MAC_BOOT_MODE,usb_tx_ms_data_mac_boot_mode
+	branch usb_tx_ms_data_normal_mode
+
+usb_tx_ms_data_mac_boot_mode:
+	jam 0,mem_usb_ep2_data
+usb_tx_ms_data_mac_boot_regroup:
+	fetch 1,mem_usb_mouse_data+1	//key
+	beq R_KEY,usb_tx_mac_boot_ms_regroup_r_or_lrkey
+	beq LR_KEY,usb_tx_mac_boot_ms_regroup_r_or_lrkey
+	fetch 1,mem_usb_mouse_data+1	//key
+	store 1,mem_usb_mouse_data
+	fetch 1,mem_usb_mouse_data+2	//x low
+	istore 1,contw
+	fetch 1,mem_usb_mouse_data+4	//y low
+	istore 1,contw
+	fetch 1,mem_usb_mouse_data+6	//wheel
+	istore 1,contw
+	arg 4,loopcnt
+	arg mem_usb_mouse_data,contr
+	branch usb_tx_ep2
+	
+usb_tx_ms_data_normal_mode:
+	jam 0,mem_usb_ep2_data
+usb_tx_mac_boot_ms_regroup_r_or_lrkey:	
+	arg 8,loopcnt		
+	arg mem_usb_mouse_data,contr
+	branch usb_tx_ep2
+
+usb_tx_kb_multikey_data:
+	jam 0,mem_usb_ep2_data
+	arg 3,loopcnt
+	arg mem_usb_kb_multikey,contr
+	branch usb_tx_ep2
+
+usb_tx_kb_normal_data:
+	jam 0,mem_usb_ep1_data
+	arg 8,loopcnt
+	arg mem_usb_kb_data,contr
+	branch usb_tx_ep1
+
+usb_inwake_state_tx_dispose:
+	fetch 1,mem_usb_state
+	beq USB_SLEEP,usb_clear_tx_wait
+	beq USB_CONNECTED, usb_mac_wakeup_trig
+	rtn
+usb_clear_tx_wait:
+	jam 0,mem_usb_tx_wait
+	rtn	
+usb_mac_wakeup_trig:
+	hfetch 1,core_usb_config
+	set1 7,pdata
+	hstore 1,core_usb_config
+	jam 1,mem_usb_mac_wakeup_trig
+	rtn
+
+usb_mac_wakeup_judge:
+	fetch 1,mem_usb_state
+	rtneq USB_SLEEP
+	beq USB_CONNECTED,usb_mac_wakeup
+	rtn
+usb_mac_wakeup:
+	fetch 1,mem_usb_mac_wakeup_trig
+	rtn blank
+	jam 1,mem_usb_wakestate_onetime_flag
+	branch usb_wakeup
+
+usb_windows_wakeup:
+	arg TIMER_WAKEUP,queue
+	call timer_check
+	nrtn blank
+usb_wakeup:
+	hfetch 1,core_usb_config
+	rtnbit0 7	//endpoint wakeup enable
+	jam 0xfc,core_usb_config
+	nop 30000
+	jam 0x3c,core_usb_config
+	rtn
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/bt.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/bt.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/bt.prog	(working copy)
@@ -0,0 +1,4176 @@
+define REVD
+//define FPGA
+define ROMCODE
+define PATCH
+define ADC
+//define RAM_VERSION
+//define CLK24M
+//define DEBUG_MALLOC
+//define DEBUG_H4LOG_ENABLE
+//define DEBUG_LIGHT_STATE
+//define E2_LOG
+//define LMP_DBG
+//define ACL_DEBUG
+//define DCDC
+define NVRAM
+define RELEASE
+define SECURE_CONNECTION
+define DEBUG_RF_INIT
+//define SPI_SIMULATE
+//define ROM_RESPIN_OPTIONAL
+
+define SIMPLE_PAIRING
+define COMPILE_RFCOMM
+define COMPILE_SHUTTER
+define COMPILE_AntiLost
+//define COMPILE_IR
+define COMPILE_KEYBOARD
+define COMPILE_MOUSE
+define COMPILE_MODULE
+//define COMPILE_AT
+//define COMPILE_PRCP
+//define COMPILE_USB
+//define COMPILE_DONGLE
+define COMPILE_LE
+define COMPILE_24G
+define COMPILE_CAR
+define COMPILE_REMOTE_CAR
+
+
+INCLUDE "bt_format"
+
+org 0x0000		// start from patch ram address start
+ifdef SIM
+include sim.prog
+else
+include patch.prog
+endif
+
+/******************************************/
+/***********   ROM Start   ***************/
+/******************************************/
+
+org 0x2000		// start from rom address start
+start:
+	call lpmstate
+
+soft_reset:
+	bpatch patch00_0,mem_patch00
+	clear_stack
+	call spi_ncs_gpio_init  // 0xff disable spi ncs gpio init
+	call initialize_radio
+	call iicd_init_12m
+	call init_param
+	call l2cap_init
+	bpatch patch00_1,mem_patch00
+	call rfcomm_init
+	call init_lmp
+	call ui_init
+	call app_init
+	ncall load_chip_option,wake
+	bpatch patch00_2,mem_patch00
+	call app_lpm_init,wake
+ifdef SIMPLE_PAIRING
+	call publickey_init
+else
+	call ssp_disable
+ifdef SECURE_CONNECTION
+	call publickey_init
+
+endif
+endif
+soft_reset_2:
+	call lpm_recover_clk,wake
+main_loop:	
+	bpatch patch00_3,mem_patch00
+ifdef SIMPLE_PAIRING
+	call sp_calc_sequence
+endif
+ifdef SECURE_CONNECTION
+	call sp_calc_sequence_256
+endif
+ifdef SIMPLE_PAIRING
+ifdef SECURE_CONNECTION
+	call sp_calc_sequence_256_check
+endif
+endif
+	call le_dispatch
+	bpatch patch00_4,mem_patch00
+	call idle_dispatch
+	call app_process_idle
+	call inquiry_dispatch
+	call inquiry_scan_dispatch
+	call page_scan_dispatch
+	call connection_dispatch
+	call lpm_dispatch
+	call g24_dispatch
+	branch main_loop
+
+connection_dispatch:
+	call connection_incontext
+	rtnmark0 mark_context
+	set0 mark_context,mark
+	call context_save
+	branch le_disable
+	
+connection_incontext:
+	bpatch patch00_5,mem_patch00
+	call context_search_insniff
+	nbranch connection_nosniff,zero
+	call context_load
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	bbit1 mode_le,le_conn_dispatch
+	bbit1 mode_master, master_dispatch
+	branch slave_dispatch
+connection_nosniff:
+	call context_get_next
+	copy loopcnt,null
+	rtn zero
+	call context_load
+	fetch 1,mem_state
+	bbit1 state_inpage,master_page
+	fetch 1,mem_mode
+	bbit1 mode_master, master_dispatch
+	branch slave_dispatch
+
+
+
+/**************************************/
+/**************idle dispatch*********/
+/**************************************/
+	
+idle_dispatch:
+	fetch 1,mem_hci_cmd
+	rtn blank
+	beq hci_cmd_inquiry,idle_inquiry
+	beq hci_cmd_inquiry_cancel,idle_inquiry_cancel
+	beq hci_cmd_remote_name_req,idle_remote_name_req
+	beq hci_cmd_create_conn,idle_create_conn
+	beq hci_cmd_le_create_conn,idle_le_create_conn
+	call context_search_conn_handle
+	rtn zero
+	call context_search_plap
+	rtn zero
+idle_exit:
+	jam 0,mem_hci_cmd
+	rtn
+
+idle_le_create_conn:
+	jam hci_cmd_le_create_conn,mem_cmd_le_create_conn
+	jam 0,mem_hci_cmd
+	rtn
+	
+idle_inquiry:
+	set1 mark_inquiry_on,mark
+	set0 mark_inquiry_trainb,mark
+	jam param_ninquiry,mem_ninqy_index
+	jam 31,mem_nfreq_index_inq
+	branch idle_exit
+
+idle_inquiry_cancel:
+	set0 mark_inquiry_on,mark
+	force 0,stop_watch
+	branch idle_exit
+
+idle_remote_name_req:
+	call context_search_plap
+	rtn zero
+	force LMP_NAME_REQ,temp
+	jam 5,mem_nameres_cnt
+	branch idle_start_page
+
+idle_create_conn:
+	bpatch patch00_6,mem_patch00
+idle_create_conn_device:
+	fetch 6,mem_hci_plap
+	branch idle_exit,blank
+	jam RECONNECT_HID,memui_reconnect_mode
+	//jam HS_INIT_CALL,mem_hs_mode //init as master
+	jam CONN_SM_WAIT_FEATURES_RES,mem_conn_sm
+	branch idle_create_conn_cont
+	
+idle_create_conn_cont:
+	force LMP_VERSION_REQ,temp
+idle_start_page:
+	bpatch patch00_7,mem_patch00
+	fetch 1,mem_page_mode
+	branch idle_page_mode_r0,blank
+	lshift3 pdata,pdata
+	lshift4 pdata,pdata
+	increase -1,pdata
+idle_page_mode_r0:
+	store 1,mem_npage
+	store 1,mem_npage_index
+	jam 31,mem_nfreq_index_page
+	set0 mark_page_trainb,mark
+	call context_new
+	nbranch idle_page_fail,zero
+	call get_free_amaddr
+	store 1,mem_amaddr
+	storet 1,mem_lmo_opcode2
+	fetch 6,mem_hci_plap
+	store 6,mem_plap
+	bpatch patch01_0,mem_patch01
+	call timer_reinit
+	force 0,pdata
+	compare LMP_NAME_REQ,temp,0xff
+	nsetflag true,state_init_seq,pdata
+	set1 state_inpage,pdata
+	store 1,mem_state
+	jam BT_EVT_RECONN_STARTED,mem_fifo_temp
+	call ui_ipc_send_event
+	force 0,pdata
+	setflag true,smap_name_req,pdata
+	store 1,mem_state_map
+	setarg 0
+	set1 mode_master,pdata
+	store 1,mem_mode
+	enable master
+	call context_save
+	disable master
+	force page_length_timer,queue
+	fetch 2,mem_page_to
+	call timer_init
+	branch idle_exit
+idle_page_fail:
+	bpatch patch01_1,mem_patch01
+	fetch 6,mem_hci_plap
+	store 6,mem_plap
+	compare LMP_NAME_REQ,temp,0xff
+	branch idle_name_fail,true
+	branch idle_exit
+idle_name_fail:
+	arg mem_tmp_buffer,contw
+	arg 8,loopcnt
+	call memset0
+	jam BT_EVT_RECONN_FAILED,mem_fifo_temp
+	call ui_ipc_send_event
+	branch idle_exit
+	
+
+/******************************************/
+/**************  Inquiry  *****************/
+/******************************************/
+
+inquiry_dispatch:
+	rtnmark0 mark_inquiry_on
+	force inquiry_length_timer,queue
+	call timer_check
+	nsetflag blank,mark_inquiry_on,mark
+	nbranch inquiry_start,blank
+	rtn
+	
+
+
+inquiry_start:
+	bpatch patch01_2,mem_patch01
+	fetcht 2,mem_inq_window
+	force 4,queue
+	call sniff_check_window
+	rtn user
+	call afh_clear
+	force 0,freq_mode
+inquiry_restart:
+	rtn timeout
+	set0 mark_fhs_already_good,mark
+	set0 mark_fhs_eir,mark
+inquiry_rx_restart:
+	add clkn_bt,1,bt_clk
+	isolate1 mark_inquiry_trainb,mark
+	setflag true,2,freq_mode
+	compare 0x00,bt_clk,0x02      /* see if this is even slot */
+	nbranch inquiry_receive,true
+
+inquiry_transmit:
+	bpatch patch01_3,mem_patch01
+	fetch 1,mem_inquiry_transmit
+	increase 1,pdata
+	store 1,mem_inquiry_transmit
+	call fetch_giac
+	call tx_radio_freq
+	call fetch_diac
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_native
+	call send_access_word
+	call end_of_packet
+	call inquiry_check_train
+	branch inquiry_restart
+
+inquiry_check_train:
+	bpatch patch01_4,mem_patch01
+	fetch 1,mem_nfreq_index_inq
+	increase -1,pdata
+	store 1,mem_nfreq_index_inq
+	rtn positive  /* if it's time to incremnt N */
+	jam 31,mem_nfreq_index_inq
+	fetch 1,mem_ninqy_index
+	increase -1,pdata
+	store 1,mem_ninqy_index
+	rtn positive      /* if it's time to change train */
+	setflip mark_inquiry_trainb,mark
+	jam param_ninquiry,mem_ninqy_index
+	rtn
+
+inquiry_receive:
+	bpatch patch01_5,mem_patch01
+	call fetch_giac
+	call rx_radio_freq
+	call fetch_diac
+	call start_rx_native
+	call start_receiver	/* get ready for that id packet */
+	call wait_access_clkn_rt
+	branch inquiry_sync,sync   /* try look for id packet again if not found */
+	call inquiry_check_train
+	branch inquiry_rx_restart
+inquiry_sync:
+	bpatch patch01_6,mem_patch01
+	call save_rssi
+	call scan_mode_whiten
+	call receive_packet_whitened
+	set0 mark_rxbuf_inuse,mark
+	rtnmark0 mark_fhs_already_good
+inquiry_receive_rtn:
+	bpatch patch01_7,mem_patch01
+inquiry_receive_eir_rtn:
+	fetch 1,mem_inquiry_rcv
+	increase 1,pdata
+	store 1,mem_inquiry_rcv
+	rtn
+		
+/******************************************/
+/**************  Master Dispatch  *************/
+/******************************************/
+
+
+
+master_page:
+	bpatch patch02_0,mem_patch02
+	enable master
+	enable clknt
+	fetch 2,mem_page_interval
+	branch master_page_no_interval,blank
+	force page_interval_timer,queue
+	call timer_check               
+	nrtn blank
+master_page_no_interval:
+	bpatch patch02_1,mem_patch02
+	fetcht 2,mem_page_window
+	force 40,queue
+	call sniff_check_window
+	branch page_exit,user
+	force page_length_timer,queue
+	call timer_check
+	nbranch page_start,blank
+	fetch 1,mem_state_map
+	bbit1 smap_name_req,master_npage_timeout
+	branch master_page_timeout
+master_npage_timeout:
+	arg mem_tmp_buffer,contw
+	arg 8,loopcnt
+	call memset0
+master_page_timeout:
+	bpatch patch02_2,mem_patch02
+	jam 0,mem_state
+	call init_lmp_work
+	jam 0,memui_reconnect_mode
+	jam BT_EVT_RECONN_PAGE_TIMEOUT,mem_fifo_temp
+	call ui_ipc_send_event	
+	branch page_exit
+
+page_start:
+	bpatch patch02_3,mem_patch02
+	force 0,timeup
+	until clkn_rt,meet
+	fetch 1,mem_page_clk
+	increase -1,pdata
+	ixor clkn_bt,pdata
+	compare 0,pdata,3
+	nbranch page_start,true
+	deposit am_addr
+	store 1,mem_fhs_am_addr
+	force 0,N_tx_slot
+	force 0,freq_mode
+
+page_restart:
+	bpatch patch02_4,mem_patch02
+	branch page_exit,timeout
+	call fetch_page_bt_adr
+	arg param_rf_setup, timeup
+	until clkn_rt,meet         /* wait for the start_receiver time against native real clk  */
+page_rx_restart:
+	bpatch patch02_5,mem_patch02
+	fetch 4,mem_page_clk    /* deposit clk_estimate */
+	iforce bt_clk
+	increase 1,pdata
+	store 4,mem_page_clk
+	isolate1 mark_page_trainb,mark
+	setflag true,2,freq_mode
+	compare 0x00,bt_clk,0x02      /* see if this is even slot */
+	nbranch page_receive,true
+	fetch 1, mem_page_transmit
+	increase 1,pdata
+	store 1, mem_page_transmit
+	call tx_radio_freq
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_native
+	call send_access_word
+	call end_of_packet
+	call page_check_train
+	branch page_restart	
+page_exit:
+	bpatch patch02_6,mem_patch02
+	disable master
+	fetch 2,mem_page_interval      
+	rtn blank
+	force page_interval_timer,queue
+	branch timer_init              
+
+page_check_train:
+	bpatch patch02_7,mem_patch02
+	fetch 1,mem_nfreq_index_page
+	increase -1,pdata
+	store 1,mem_nfreq_index_page
+	rtn positive
+	jam 31,mem_nfreq_index_page
+	fetch 1,mem_npage_index
+	increase -1,pdata                 /* increment N */
+	store 1,mem_npage_index
+	rtn positive      			/* if it's time to change train */
+	setflip mark_page_trainb,mark             /* change train */
+	fetch 1,mem_npage
+	store 1,mem_npage_index
+	rtn
+	
+page_receive:
+	bpatch patch03_0,mem_patch03
+	call rx_radio_freq
+	call start_rx_native
+	call start_receiver	/* get ready for that id packet */
+	call wait_access_clkn_rt	/* try id look for id packet again */
+	branch page_sync,sync         /* restart if didn't receive anything */
+	call page_check_train
+	branch page_rx_restart
+page_sync:
+	call end_of_packet
+	fetch 1, mem_page_rcv
+	increase 1,pdata
+	store 1, mem_page_rcv
+	force 0,stop_watch
+	fetch 4,mem_page_clk
+page_send_fhs:
+	bpatch patch03_1,mem_patch03
+	call rf_setup_time_master_slot
+	call fetch_page_bt_adr
+	increase 1,N_tx_slot
+page_send_fhs_continue:
+	and_into 0x1fd,bt_clk
+	and_into 0x1fc,freq_mode               /* master response = x00, even_train settin must remain the same */
+	call tx_radio_freq
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_native
+	call send_access_word
+	deposit clkn_bt
+	store 4,mem_clkn_bt
+	force 0,am_addr
+	force type_fhs,type
+	call scan_mode_whiten
+	call transmit_packet_whitened
+page_wait_fhs_reply:
+	bpatch patch03_2,mem_patch03
+	call rf_setup_time_slave_slot
+	or_into 0x02,bt_clk
+	and_into 0x1fc,freq_mode               /* master response sequence = x00, even train setting must be preserved */
+	call rx_radio_freq
+	call start_rx_native
+	call start_receiver	/* get ready for that id packet */
+	call wait_access_clkn_rt	/* look for that reply */
+	call end_of_packet,sync              /* id reply is enough */
+	branch page_wait_fhs_reply_ok,sync           /* no reply then send fhs again */
+	fetch 1,mem_fhs_wait_counter
+	branch page_restart,blank
+	increase -1,pdata
+	store 1,mem_fhs_wait_counter
+	branch page_send_fhs
+	
+page_wait_fhs_reply_ok:
+	bpatch patch03_3,mem_patch03
+	fetch 1, mem_page_rcv_fhs
+	increase 1,pdata
+	store 1, mem_page_rcv_fhs
+	call prepare_newconn
+master_newconn_loop:
+	call master_newconn_once
+	branch newconn_poll_responded,sync
+	call new_conn_timeout
+	nbranch master_newconn_loop,blank
+	branch page_restart
+
+newconn_poll_responded:
+	bpatch patch03_4,mem_patch03
+	fetch 1,mem_state
+	set0 state_inpage,pdata
+	store 1,mem_state
+	call newconn_init
+	disable master
+	rtn
+	
+
+master_dispatch:
+	bpatch patch03_5,mem_patch03
+	enable master
+	enable clknt
+	call role_switch_master
+	rtn user
+	call check_bt_disabled
+	call rf_setup_time_master_slot
+	add clkn_bt,1,bt_clk
+	call fetch_self_bt_adr
+	force 0x03,freq_mode
+	call scheduler_tx_l2cap_pkt
+	call prepare_tx
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_native
+	call send_access_word
+	call transmit_packet
+master_loop:
+	bpatch patch03_6,mem_patch03
+	call parse_lmp
+	call master_conn_recv_packet
+	nbranch master_notmatch,match
+	call supervision_flush
+	call parse_l2cap
+	fetch 1,mem_master_rcvcnt
+	increase 1,pdata
+	store 1,mem_master_rcvcnt
+master_notmatch:
+	bpatch patch03_7,mem_patch03
+	call scheduler_process
+	call check_master_disconnect
+	nrtn master					/* disconnected */
+	call check_attempt
+	nbranch master_attempt,blank
+master_exit:
+	disable master
+	rtn
+
+master_attempt:
+	call prepare_tx
+	call master_conn_send_packet
+	branch master_loop
+
+
+check_master_disconnect:
+	branch check_master_match,match
+	call supervision_update
+	branch master_disconnect,positive
+check_master_match:
+	call check_disconnect_timeout
+	nbranch master_disconnect,user
+	fetch 1,mem_state_map
+	rtnbit0 smap_name_req
+	rtnbit1 smap_name_res
+	fetch 1,mem_op
+	rtnbit1 op_disconn
+	call conn_timer_expired
+	nrtn blank
+	fetch 1,mem_nameres_cnt
+	increase -1,pdata
+	store 1,mem_nameres_cnt
+	nrtn blank
+	branch lmp_disconnect
+
+master_disconnect:
+	bpatch patch04_0,mem_patch04
+	call quit_connection
+	disable master
+	fetch 1,mem_state_map
+	bbit1 smap_name_req,master_name_disconnect
+	rtn
+	
+master_name_disconnect:
+	fetch 1,mem_state_map
+	rtnbit1 smap_name_res
+master_name_error:
+	arg mem_tmp_buffer,contw
+	arg 8,loopcnt
+	branch memset0
+	
+check_disconnect_timeout:
+	bpatch patch04_1,mem_patch04
+	enable user
+	fetch 1,mem_op
+	rtnbit0 op_disconn
+	call conn_timer_expired
+	nrtn blank
+	branch disable_user
+
+conn_timer_expired:
+	fetch 1,mem_conn_timer
+	increase -1,pdata
+	store 1,mem_conn_timer
+	rtn
+
+linkkey_ready:
+	bpatch patch04_2,mem_patch04
+	fetch 1,mem_state
+	bbit1 state_linkkey,linkkey_set
+	fetch 1,mem_pairing_auth
+	branch linkkey_set,blank
+	jam DEFALT_PAIRING_AUTH,mem_pairing_auth
+	jam BT_EVT_LINKKEY_GENERATE,mem_fifo_temp
+	call ui_ipc_send_event
+	branch linkkey_set
+linkkey_set:
+	bpatch patch04_3,mem_patch04
+	call context_traverse_linkkey
+	fetch 1,mem_state
+	set1 state_linkkey,pdata
+	store 1,mem_state
+	jam 1,mem_link_key_exists
+	fetch 1,mem_conn_sm
+	bne CONN_SM_PAIRING,linkkey_set_continue
+linkkey_set_continue:
+	rtn
+
+generate_linkkey_continue:
+	jam PAIRING_AUTH,mem_pairing_auth
+clear_linkstate:
+	fetch 1,mem_state
+	set0 state_linkkey,pdata
+	store 1,mem_state
+	rtn
+	
+
+	/* rtn user if switch */
+role_switch_check:
+	bpatch patch04_4,mem_patch04
+	disable user
+	fetch 2,mem_tsniff
+	arg 0xffff,temp
+	isub temp,null
+	nrtn zero
+	fetch 4,mem_sniff_anchor
+	branch role_switch_clkn,clknt
+	isub clke_bt,pdata
+	branch role_switch_clke
+role_switch_clkn:
+	isub clkn_bt,pdata
+role_switch_clke:
+	sub pdata,4,null
+	nrtn positive
+	force 0,pdata
+	store 2,mem_tsniff
+	branch enable_user
+
+
+	/* pdata: switch instant, set tsniff=0 for special sniff */	
+role_switch_prepare:
+	copy pdata,temp
+	bpatch patch04_5,mem_patch04
+	storet 4,mem_sniff_anchor
+role_switch_prepare0:
+	jam SWITCH_FLAG_ACCEPT,mem_switch_flag
+	setarg 0xffff
+	store 2,mem_tsniff
+	jam 1,mem_sniff_attempt
+	rtn
+
+
+role_switch_master:
+	bpatch patch04_6,mem_patch04
+	call role_switch_check
+	nrtn user
+	disable user
+	jam param_newconnto,mem_newconnto_counter
+	set0 mark_fhs_already_good,mark
+roles_waitfhs_loop:
+	call rf_setup_time_master_slot
+	call master_recv_packet
+	bmark1 mark_fhs_already_good,roles_replyto_fhs
+	call new_conn_timeout
+	nbranch roles_waitfhs_loop,blank
+role_switch_fail_master:
+	bpatch patch04_7,mem_patch04
+	disable user
+	deposit clkn_bt
+	store 4,mem_next_btclk
+	enable clknt
+	enable master
+	jam BT_EVT_SWITCH_FAIL_MASTER,mem_fifo_temp
+	branch ui_ipc_send_event
+	
+roles_replyto_fhs:
+	bpatch patch05_0,mem_patch05
+	call rf_setup_time_slave_slot
+	arg type_id,type
+	call master_send_packet
+	disable clknt
+	disable master
+	call apply_switch_clke
+	call prepare_newconn
+roles_newconns_loop:
+	bpatch patch05_1,mem_patch05
+	call slave_newconn_once
+	branch roles_newconns_responded,match
+	call new_conn_timeout
+	nbranch roles_newconns_loop,blank
+	branch role_switch_fail_master
+roles_newconns_responded:
+	fetch 1,mem_mode
+	set0 mode_master,pdata
+	store 1,mem_mode
+	call supervision_flush
+	call calc_clke_offset
+	enable user
+	jam BT_EVT_SWITCH_SUCCESS_MASTER,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+
+
+context_load:
+	bpatch patch05_2,mem_patch05
+	set1 mark_context,mark
+	deposit rega
+	store 2,mem_context_ptr
+	force context_size,loopcnt
+	arg mem_le_state,contw
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	copy rega,contr
+	bbit1 mode_le,memcpy
+	arg mem_state,contw
+	call memcpy
+	disable attempt
+	fetch 1,mem_amaddr
+	iforce am_addr
+	jam 1,mem_current_sniff_attempt
+	branch context_load_master,master
+	jam 1,mem_current_sniff_attempt
+context_load_master:
+	fetch 1,mem_state
+	rtnbit0 state_insniff
+	fetch 1,mem_sniff_attempt
+	store 1,mem_current_sniff_attempt
+	fetch 1,mem_sniff_timeout
+	store 1,mem_current_sniff_timeout
+	rtn
+	
+context_save:
+	bpatch patch05_3,mem_patch05
+	fetch 2,mem_context_ptr
+	iforce contw
+	force context_size,loopcnt
+	arg mem_le_state,contr
+	branch memcpy,le
+	arg mem_state,contr
+	branch memcpy
+
+	
+
+context_get_next:
+	arg context_num,loopcnt
+	fetcht 1,mem_current_context
+context_get_next_loop:
+	increase 1,temp
+	compare context_num,temp,0xff
+	nbranch context_get_next_cont,true
+	arg 0,temp
+context_get_next_cont:
+	storet 1,mem_current_context
+	mul32 temp,context_size,pdata
+	arg mem_context,rega
+	iadd rega,rega
+	ifetch 1,rega
+	bbit1 state_insniff,context_get_next_sniff
+	rtnbit1 state_inconn
+	rtnbit1 state_inpage
+context_get_next_sniff:
+	loop context_get_next_loop
+	rtn
+	
+context_new:
+	bpatch patch05_4,mem_patch05
+	arg context_search_empty,regc
+	call context_search
+	nrtn zero					// all occupied
+	deposit rega
+	store 2,mem_context_ptr
+	force 0,null
+	rtn
+	
+	//return zero if anyone's wack is 1.
+	//return nzero if all wack is 0
+context_check_all_wack:
+	call check_esco_amaddr
+	branch context_check_esco_wack,true
+	fetch 2,mem_context_ptr
+	add pdata,coffset_arq,contw
+	fetch 1,mem_arq
+	istore 1,contw
+	arg context_check_a_wack,regc
+	branch context_search
+
+context_check_esco_wack:
+	fetch 1,mem_arq
+	isolate1 wack,pdata
+	branch context_esco_wack,true
+	force 1,null
+	rtn
+context_esco_wack:
+	force 0,null
+	rtn
+	
+	//rtn nzero if idle(no conn)
+context_check_idle:
+	arg context_check_inconn,regc
+	branch context_search
+	
+context_traverse_linkkey:
+	fetcht 2,mem_context_ptr
+	arg context_traverse_clearkey,regc
+	branch context_search
+	
+	
+	/* return zero if conn handle is found */
+context_search_conn_handle:
+	fetcht 1,mem_hci_conn_handle
+context_search_conn_handle2:
+	arg context_search_handle,regc
+	branch context_search
+	/* return zero if plap is found */
+context_search_plap:
+	bpatch patch05_5,mem_patch05
+	fetcht 6,mem_hci_plap
+context_search_plap2:
+	arg context_search_lap,regc
+	branch context_search
+	/* return zero if sniff anchor is meet and rega pointers to context */
+context_search_insniff:
+	arg context_search_sniff,regc
+	branch context_search
+	/* return zero if sniff window is in content with current transaction */
+context_search_sniff_window:
+	arg context_search_window,regc
+context_search:
+	bpatch patch05_6,mem_patch05
+	arg mem_context,rega
+	arg context_num,loopcnt
+context_search_loop:
+	ifetch 1,rega
+	copy regc,pc
+context_search_next:
+	increase context_size,rega
+	loop context_search_loop
+	force 1,null
+	rtn
+
+context_search_empty:
+	bbit1 state_inconn,context_search_next
+	bbit1 state_inpage,context_search_next
+	force 0,null
+	rtn
+	
+context_search_lap:
+	bbit1 state_inpage,context_search_lap_cont
+	bbit0 state_inconn,context_search_next
+context_search_lap_cont:
+	add rega,coffset_plap,contr
+	ifetch 6,contr
+	isub temp,null
+	rtn zero
+	branch context_search_next
+
+context_search_handle:
+	bbit0 state_inconn,context_search_next
+	add rega,coffset_conn_handle,contr
+	ifetch 1,contr
+	isub temp,null
+	rtn zero
+	branch context_search_next
+
+context_search_sniff:
+	bbit0 state_insniff,context_search_next
+context_search_sniff_loop:
+	call context_get_anchor
+	call sign_pdata_temp
+	isub temp,pdata
+	increase 1,pdata
+	branch context_search_sniff_miss,positive
+	copy contr,regb
+	store 9,mem_temp
+	fetch 1,mem_le_sc_calc
+	nbranch context_search_sniff_sc,blank
+	fetch 9,mem_temp
+	copy regb,contr
+	increase 5,pdata  
+	branch context_search_meet1
+context_search_sniff_sc:
+	fetch 9,mem_temp
+	copy regb,contr	
+	increase 20,pdata  
+context_search_meet1:
+	nbranch context_search_next,positive
+context_search_meet:
+	copy temp,bt_clk
+	call context_next_anchor
+	force 0,null
+	rtn
+	
+	
+context_search_sniff_miss:
+	iforce regb
+	add rega,coffset_tsniff,contr
+	ifetch 2,contr
+	branch context_search_meet,blank
+	call context_next_anchor
+	branch context_search_sniff_loop
+
+sign_pdata_temp:
+	rshift16 pdata,timeup    
+	rshift8 timeup,timeup    
+	branch sign_pdata_temp_p0,zero    
+	compare 0xf,timeup,0xf    
+	nrtn true    
+	rshift16 temp,timeup    
+	rshift8 timeup,timeup    
+	nrtn zero    
+	set1 28,temp    
+	rtn
+sign_pdata_temp_p0:    
+	rshift16 temp,timeup    
+	rshift8 timeup,timeup    
+	compare 0xf,timeup,0xf    
+	nrtn true    
+	set1 28,pdata    
+	rtn
+
+context_check_inconn:
+	bbit0 state_inconn,context_search_next
+	force 0,null 				// found
+	rtn
+	
+context_check_a_wack:
+	bbit0 state_inconn,context_search_next
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	bbit1 mode_le,context_search_next
+	add rega,coffset_arq,contr
+	ifetch 1,contr
+	bbit0 wack,context_search_next
+	force 0,null 				// found
+	rtn
+
+context_get_anchor:
+	add rega,coffset_mode,contr
+	ifetcht 1,contr
+	deposit clkn_bt
+	isolate1 mode_master,temp
+	add rega,coffset_sniff_anchor,contr
+	ifetcht 4,contr
+	rtn true
+	add rega,coffset_clk_offset,contr
+	ifetch 6,contr
+	call calc_clke2
+	deposit clke_bt
+	rtn
+
+context_next_anchor:
+	add rega,coffset_tsniff,contr
+	add rega,coffset_sniff_anchor,contw
+	ifetch 2,contr
+	iadd temp,timeup			/* wrap to 28 bits */
+	deposit timeup
+	istore 4,contw
+	branch le_context_nexthop
+	
+
+context_search_window:
+	bbit0 state_insniff,context_search_next
+	call context_get_anchor
+	iadd stop_watch,pdata
+	iadd stop_watch,pdata
+	iadd queue,pdata
+	isub temp,null
+	nbranch context_search_next,positive
+	force 0,null
+	rtn
+
+context_traverse_clearkey:
+	bbit0 state_inconn,context_search_next
+	deposit temp
+	isub rega,null
+	branch context_search_next,null
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	bbit1 mode_le,context_search_next
+	ifetch 1,rega
+	set0 state_linkkey,pdata
+	istore 1,rega
+	branch context_search_next
+
+	
+master_conn_send_packet:
+	bpatch patch05_7,mem_patch05
+	call rf_setup_time_master_slot
+master_send_packet:
+	add clkn_bt,1,bt_clk          /* master start to use native clock */
+	call fetch_self_bt_adr
+	force 0x03,freq_mode          /* we are in connection!! */
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_native
+	call send_access_word
+	branch transmit_packet
+
+master_conn_recv_packet:
+	bpatch patch06_0,mem_patch06
+	call rf_setup_time_slave_slot
+master_recv_packet:
+	add clkn_bt,1,bt_clk          /* master start to use native clock */
+	call fetch_self_bt_adr
+	force 0x03,freq_mode          /* we are in connection!! */
+	call rx_radio_freq
+	call init_rx_packet_flags
+	call prep_crypt
+	call start_rx_native	/* start listening at start_rx time */
+	call start_receiver
+master_rx_conn_finish_packet:
+	call wait_access_clkn_rt	/* master use native clock */
+	nrtn sync
+	call save_rssi
+	branch receive_packet
+	
+	
+
+master_newconn_once:
+	bpatch patch06_1,mem_patch06
+	fetch 1,mem_fhs_am_addr
+	iforce am_addr			//review
+	force type_poll,type
+	call master_conn_send_packet
+	branch master_conn_recv_packet
+
+
+
+
+
+
+/******************************************/
+/************* Inquiry Scan ***************/
+/******************************************/
+
+inquiry_scan_dispatch:
+	fetch 1,mem_scan_mode
+	rtnbit0 inq_scan_mode
+	force iscan_interval_timer,queue
+	call timer_check
+	nrtn blank
+	fetcht 2,mem_iscan_window
+	force 4,queue
+	call sniff_check_window
+	rtn user
+	call inquiry_scan_start
+	force iscan_interval_timer,queue
+	fetch 2,mem_iscan_interval
+	nbranch timer_init,sync
+	random pdata				/* inquiry scan backoff */
+	iand mask3ff,pdata
+	branch timer_init
+	
+
+inquiry_scan_start:
+	bpatch patch06_2,mem_patch06
+	jam 0,mem_fhs_am_addr
+	disable clknt
+	disable attempt
+	call afh_clear
+	and clkn_bt,0x1fc,bt_clk      /* freeze the clock, set bit[1] 0, this is version 1.1 */
+	force 0x01,freq_mode     /* slave in inquiry scan, kind of same as inquriy_response, this is version 1.1 */
+	call fetch_giac
+	call rx_radio_freq
+	setflip mark_inquiry_state,mark
+	fetch 1,mem_inquiryscan_waitcnt
+	increase 1,pdata
+	store 1,mem_inquiryscan_waitcnt
+	call fetch_diac
+	call start_receiver	/* get ready for that id packet */
+	call wait_access_forever	/* until there is timeout, or matched (true) */
+	nrtn sync
+	bpatch patch06_3,mem_patch06
+	force 0,stop_watch
+	call shutdown_radio	/* must have heard */
+	fetch 1,mem_inquiryscan_rcvcnt
+	increase 1,pdata
+	store 1,mem_inquiryscan_rcvcnt
+	call fetch_giac
+	call rf_setup_time_slave_slot
+	or_into 0x002,bt_clk               /* put clk(1) to 1 */
+	force 0x01,freq_mode               /* slave in inquriy and page, response only */
+	call tx_radio_freq
+	call fetch_diac
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_external
+	deposit clkn_bt
+	store 4,mem_clkn_bt
+	call send_access_word
+	force type_fhs,type
+	force 0,am_addr                       /* put 0 into am_addr field for fhs */
+	call scan_mode_whiten
+	call transmit_packet_whitened
+	call send_eir
+	and_into 0x1fd,bt_clk                 /* put clk(1) back to 0 */
+	increase 1,N_tx_slot
+	rtn
+
+send_eir:
+	bpatch patch06_4,mem_patch06
+	fetch 1,mem_eir_enable
+	rtn blank
+	arg mem_eir,contw
+	fetch 1,mem_local_name_length
+	copy pdata,loopcnt
+	increase 1,pdata
+	istore 1,contw	
+	copy contw,temp
+	increase 1,pdata
+	store 2,mem_tx_len	
+	copy temp,contw
+	setarg 0x09  //type:name
+	istore 1,contw		
+	arg  mem_local_name,contr
+	call memcpy       //name
+
+	arg mem_all_uuid_128bits,regc
+	arg 4,loopcnt
+	call get_all_uuid
+	arg mem_all_uuid_16bits,regc
+	arg 1,loopcnt
+	call get_all_uuid
+
+	force type_dm3,type		/* DM3 */
+	jam 2,mem_tx_lch
+	setarg mem_eir
+	store 2,mem_txptr
+	call rf_setup_time_slave_slot
+	call tx_radio_freq
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_external
+	call send_access_word
+	call scan_mode_whiten
+	call transmit_packet_whitened
+	rtn
+
+
+get_all_uuid:
+	copy contw,temp
+	copy regc,contr
+	ifetch 1,contr
+	rtn blank
+lshift_loop:
+	lshift pdata,pdata
+	loop lshift_loop
+	copy pdata,rega
+	increase 2,pdata
+	copy pdata,queue
+	fetch 2,mem_tx_len
+	iadd queue,pdata
+	store 2,mem_tx_len
+	copy temp,contw
+	copy rega,pdata
+	increase 1,pdata
+	istore 1,contw
+	copy regc,contr
+	ifetch 1,contr
+	ifetch 1,contr	//fetch type
+	istore 1,contw
+	copy rega,loopcnt
+	branch memcpy  //copy uuid
+	
+/******************************************/
+/******** Slave dispatch ***********/
+/******************************************/
+
+page_scan_dispatch:	
+	fetch 1,mem_scan_mode
+	rtnbit0 page_scan_mode
+	force pscan_interval_timer,queue
+	call timer_check
+	nrtn blank
+	fetcht 2,mem_pscan_window
+	force 40,queue
+	call sniff_check_window
+	rtn user
+	force 0,am_addr
+	jam param_pagerespto,mem_fhs_wait_counter
+	set0 mark_fhs_already_good,mark
+	call page_scan_start
+	force pscan_interval_timer,queue
+	fetch 2,mem_pscan_interval
+	branch timer_init
+	
+
+page_scan_start:
+	bpatch patch06_5,mem_patch06
+	disable clknt
+	call afh_clear
+	fetch 1,mem_pagescan_waitcnt
+	increase 1,pdata
+	store 1,mem_pagescan_waitcnt
+	force 0,N_tx_slot
+	call fetch_self_bt_adr
+	add clkn_bt,1,bt_clk      /* freeze the clock on native clock until scan window is up */
+	force 0x02, freq_mode     /* slave in inquiry and page, not response */
+	bpatch patch06_6,mem_patch06
+	call rx_radio_freq
+	call start_receiver	/* wait for that id packet from master */
+	call wait_access_forever
+	nrtn sync                          /* pscan window timeout occured, back to dispatch */
+	call shutdown_radio	/* got the id packet */
+	fetch 1,mem_pagescan_rcvcnt
+	increase 1,pdata
+	store 1,mem_pagescan_rcvcnt
+	force 0,stop_watch
+	call rf_setup_time_slave_slot
+	or_into 0x002,bt_clk               /* put clk(1) to 1 */
+	force 0x01,freq_mode               /* slave in inquriy and page, response only */
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_external
+	call send_access_word
+	call end_of_packet
+	force 0,am_addr
+	arg param_rf_setup, timeup
+	until clke_rt,meet
+	or_into 0x03,clke_bt
+	and_into 0x1fd,bt_clk
+page_scan_wait_fhs_restart:
+	bpatch patch06_7,mem_patch06
+	increase 1,N_tx_slot
+	call rx_radio_freq
+	call start_receiver
+	call wait_access_mhalfbnd
+	nbranch page_scan_wait_fhs_again,sync	/* go back if didn't find access code */
+	call scan_mode_whiten
+	call receive_packet_whitened
+	bmark1 mark_fhs_already_good,page_scan_reply_to_fhs
+page_scan_wait_fhs_again:
+	bpatch patch07_0,mem_patch07
+	fetch 1,mem_fhs_wait_counter
+	rtn blank
+	increase -1,pdata
+	store 1,mem_fhs_wait_counter
+	call rf_setup_time_master_slot	/* set up expiration time */
+	branch page_scan_wait_fhs_restart
+
+
+page_scan_reply_to_fhs:
+	bpatch patch07_1,mem_patch07
+	set0 1,clke_bt
+	set1 0,clke_bt
+	fetch 1,mem_pagescan_rcvfhscnt
+	increase 1,pdata
+	store 1,mem_pagescan_rcvfhscnt
+	call rf_setup_time_slave_slot
+	or_into 0x02,bt_clk
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_external
+	call send_access_word
+	call end_of_packet
+slave_apply_clke_bt:
+	compare 0x03,clke_bt,0x03
+	branch slave_apply_clke_bt_now,true
+	until null,mhalfbnd
+	branch slave_apply_clke_bt
+slave_apply_clke_bt_now:
+	fetch 4,mem_clke_bt
+	or_into 0x03,pdata
+	icopy clke_bt
+
+start_slave_connection:
+	bpatch patch07_2,mem_patch07
+	fetch 6,extm_lap
+	store 6,mem_plap
+	call prepare_newconn
+slave_newconn_loop:
+	call slave_newconn_once
+	branch sconn_successful,match     /* we were talked to */
+	call new_conn_timeout
+	nbranch slave_newconn_loop,blank
+	rtn
+
+	
+sconn_successful:
+	bpatch patch07_3,mem_patch07
+	call newconn_init
+	call context_new
+	nrtn zero
+	jam 0,mem_mode
+	call calc_clke_offset
+	branch context_save
+
+
+
+
+slave_dispatch:
+	bpatch patch07_4,mem_patch07
+	call calc_clke
+	call role_switch_slave
+	rtn user
+slave_loop:
+	bpatch patch07_5,mem_patch07
+	call check_bt_disabled
+	call scheduler_process
+	call slave_conn_recv_packet	/* go listen for a packet */
+	nbranch slave_notmatch,match
+	call supervision_flush
+	call scheduler_tx_l2cap_pkt
+	call prepare_tx
+	call slave_conn_send_packet
+	call parse_l2cap
+	call parse_lmp
+	fetch 1,mem_slave_rcvcnt
+	increase 1,pdata
+	store 1,mem_slave_rcvcnt
+	call calc_clke_offset
+slave_notmatch:
+	bpatch patch07_6,mem_patch07
+	call lpm_set_mult
+	call supervision_update
+	branch slave_disconnect,positive
+	call check_disconnect_timeout
+	nbranch slave_disconnect,user
+	call check_attempt
+	nbranch slave_loop,blank
+	rtn
+
+slave_disconnect:
+	bpatch patch07_7,mem_patch07
+	jam 0,mem_tester_emulate
+	jam 0,mem_debug_config
+	call quit_connection
+	set0 mark_testmode,mark
+	call test_enable_white
+	fetch 1,mem_state
+	rtn
+
+
+role_switch_slave:
+	bpatch patch08_0,mem_patch08
+	call role_switch_check
+	nrtn user
+	copy am_addr,temp
+	call get_free_amaddr
+	store 1,mem_fhs_am_addr
+	copy temp,am_addr
+	jam param_newconnto,mem_newconnto_counter
+roles_sendfhs_loop:
+	bpatch patch08_1,mem_patch08
+	call rf_setup_time_master_slot
+	force type_fhs,type
+	call slave_send_access
+	deposit clkn_bt
+	store 4,mem_clkn_bt
+	call transmit_packet
+	call rf_setup_time_slave_slot
+	enable user3
+	call slave_receive_access
+	branch roles_got_fhs_reply,sync
+	call shutdown_radio
+	call new_conn_timeout
+	nbranch roles_sendfhs_loop,blank
+	rtnmark0 mark_accept_switch
+	jam LMP_SLOT_OFFSET,mem_lmo_opcode2
+	set1 mark_switch_initiated,mark
+	rtn
+roles_got_fhs_reply:
+	enable clknt
+	call prepare_newconn
+	call afh_clear
+roles_newconn_loop:
+	bpatch patch08_2,mem_patch08
+	call master_newconn_once
+	branch roles_newconn_responded,sync
+	call new_conn_timeout
+	nbranch roles_newconn_loop,blank
+	disable clknt
+	deposit clke_bt
+	store 4,mem_next_btclk
+	rtn
+roles_newconn_responded:
+	enable master
+	bmark0 mark_accept_switch,roles_newconn_nolmp
+	set0 mark_accept_switch,mark
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_HOST_CONNECTION_REQ,mem_lmi_opcode2
+	call tid_set_reply
+roles_newconn_nolmp:
+	deposit am_addr
+	store 1,mem_amaddr
+	force 0,pdata
+	store 6,mem_clk_offset
+	fetch 1,mem_mode
+	set1 mode_master,pdata
+	store 1,mem_mode
+	call supervision_flush
+	disable master
+	enable user
+	rtn
+
+	
+
+init_rx_packet_flags:
+	bpatch patch08_3,mem_patch08
+	disable match
+	set0 mark_loopback,mark
+	set0 mark_am_addr_broadcast,mark          /* initialize slave flags */
+	set0 mark_longpacket,mark
+	set0 mark_old_packet,mark
+	fetch 1,mem_arq    /* mem_arq + am_addr */
+	set0 arqnx,pdata
+	set1 flowx,pdata
+	store 1,mem_arq
+	rtn
+
+prepare_newconn:
+	bpatch patch08_4,mem_patch08
+	jam param_newconnto,mem_newconnto_counter
+	jam param_newconn_arq,mem_arq
+	fetch 2,mem_rx_window_init
+	store 2,mem_rx_window
+	deposit clkn_bt
+	store 4,mem_next_btclk
+	rtn clknt
+	deposit clke_bt
+	store 4,mem_next_btclk
+	rtn
+
+newconn_init:
+	bpatch patch08_5,mem_patch08
+	call init_lmp_reinit
+	call new_conn_handle
+	store 1,mem_conn_handle
+	setarg 0
+	store 2,mem_l2cap_rxbuff1_len
+	setarg param_supervision_to
+	store 2,mem_supervision_to
+	fetch 1,mem_state
+	set1 state_inconn,pdata
+	store 1,mem_state
+	jam 0,mem_op
+	jam 0,mem_state_map
+	jam 0,mem_lpm_current_mult
+	branch supervision_flush
+	
+
+clear_linkkey:
+	bpatch patch08_6,mem_patch08
+	force 0,pdata
+	store 8,mem_link_key
+	istore 8,contw
+	call clear_linkstate
+	branch context_traverse_linkkey
+	
+new_conn_timeout:
+	fetch 1,mem_newconnto_counter
+	increase -1,pdata
+	store 1,mem_newconnto_counter
+	rtn
+
+new_conn_handle:
+	fetch 1,mem_handle_num
+	increase 1,pdata
+	store 1,mem_handle_num
+	rtn
+
+
+quit_connection:
+	bpatch patch08_7,mem_patch08
+	fetch 1,mem_hci_cmd
+	beq hci_cmd_remote_name_req,quit_connection_name
+	fetch 1,mem_lmp_to_send
+	bne LMP_NAME_REQ,quit_connection_cont
+quit_connection_name:
+	call cmd_check_plap
+	nbranch quit_connection_cont,zero
+	call master_name_error
+	jam 0,mem_hci_cmd
+quit_connection_cont:
+	bpatch patch09_0,mem_patch09
+	call app_disconn_reason_collect_bt
+	call sniff_exit
+	jam BT_EVT_BB_DISCONNECTED,mem_fifo_temp
+	call ui_ipc_send_event
+	call init_lmp_work
+	call l2cap_init_work
+ifdef SIMPLE_PAIRING
+	call sp_initialize
+endif
+	fetch 1,mem_state
+	set0 state_inconn
+	store 1,mem_state
+	jam 0,memui_reconnect_mode
+
+	fetch 1,mem_state_map
+	compare 0x0,pdata,0xc0
+	branch quit_connection_not_clear_mark,true
+	set0 mark_rxbuf_inuse,mark
+quit_connection_not_clear_mark:
+	fetch 1,mem_arq
+	bbit0 wack,quit_connection_not_clear_tx
+quit_connection_not_clear_tx:
+	fetch 1,mem_op
+	rtnbit0 op_txl2cap
+	set0 mark_tx_l2cap,mark
+	rtn
+
+slave_newconn_once:
+	bpatch patch09_1,mem_patch09
+	fetch 1,extm_newconn_am_addr
+	rtn blank     
+	icopy am_addr
+	call slave_conn_recv_packet
+	nrtn match
+	force type_null,type
+	call slave_conn_send_packet
+	deposit am_addr
+	store 1,mem_amaddr                 /* now the new am_addr is official */
+	force 0,pdata
+	store 1,extm_newconn_am_addr
+	rtn
+
+
+/******************************************/
+/********  Time consuming task  ***********/
+/******************************************/
+prepare_tx:
+	bpatch patch09_2,mem_patch09
+	fetch 1,mem_state
+	bbit0 state_insco,prepare_tx_not_sco
+	force type_hv3,type
+	bmark0 mark_esco,prepare_tx_not_esco
+	call check_esco_amaddr
+	nbranch prepare_tx_not_sco,true
+	branch prepare_tx_not_sco,attempt	
+	call set_wait_ack					/* send esco only at the first attempt */
+	setarg 2		/* esco only has 1 retry */
+	store 2,mem_retransmission_cnt
+	rtn
+prepare_tx_not_esco:
+	nrtn attempt						/* send sco only at the first attempt */
+prepare_tx_not_sco:
+	bpatch patch09_3,mem_patch09
+	call context_check_all_wack			 //abandon mark_retransmit, use context_check_all_wack instead.
+	nbranch prepare_tx_no_retransmit,zero
+	fetch 1,mem_arq
+	bbit0 wack,prepare_tx_pollnull		/* other wack, tx buffer in use, but not me */
+prepare_tx_retransmit:
+	bmark1 mark_loopback,prepare_tx_loopback
+	fetch 1,mem_debug_config
+	bbit1 debug_tx_pattern,prepare_tx_txpat
+	fetch 2,mem_retransmission_cnt
+	increase -1,pdata
+	store 2,mem_retransmission_cnt
+	branch prepare_tx_nomore_retransmit,blank
+	fetch 1,mem_last_type
+	iforce type
+	rtn
+
+prepare_tx_nomore_retransmit:
+	bpatch patch09_4,mem_patch09
+	call clear_got_tx
+prepare_tx_no_retransmit:
+	call check_esco_amaddr
+	branch prepare_tx_pollnull,true
+	call send_lmp
+	branch prepare_tx_sendlmp,user
+	fetch 1,mem_op
+	bbit1 op_txl2cap,prepare_tx_sendl2cap
+	bmark1 mark_loopback,prepare_tx_loopback
+	fetch 1,mem_debug_config
+	bbit1 debug_tx_pattern,prepare_tx_txpat
+prepare_tx_pollnull:
+	force type_poll,type				/* POLL for master */
+	rtn master
+	force type_null,type				/* default is NULL */
+	rtn
+prepare_tx_loopback:
+	bpatch patch09_5,mem_patch09
+	fetch 1,mem_rx_type
+	iforce type
+	rtnne 1
+	force type_null,type
+	rtn
+prepare_tx_txpat:
+	fetch 1,test_mode_packet_type
+	and pdata,0xf,type
+	set1 mark_loopback,mark
+	rtn
+prepare_tx_sendlmp:
+	force type_lmp,type
+	branch set_wait_ack
+prepare_tx_sendl2cap:
+	call tx_l2cap_type
+
+set_wait_ack:
+	bpatch patch09_6,mem_patch09
+	fetcht 1,mem_arq
+	set1 wack,temp
+	storet 1,mem_arq
+	deposit type
+	store 1,mem_last_type
+	setarg 0xffff
+	store 2,mem_retransmission_cnt
+	rtn
+
+tx_l2cap_type:
+	bpatch patch09_7,mem_patch09
+	fetch 1,mem_state_map
+	isolate1 smap_edr,pdata
+	fetch 2,mem_tx_len
+	branch tx_l2cap_type_edr,true
+	force type_dm1,type		/* DM1 */
+	sub pdata,17,null			
+	rtn positive
+	force type_dh1,type		/* DH1 */
+	sub pdata,27,null				
+	rtn positive
+	force type_dm3,type		/* DM3 */
+	sub pdata,121,null
+	rtn positive
+	force type_dh3,type		/* DH3 */
+	sub pdata,183,null
+	rtn positive	
+	force type_dm5,type		/* DM5 */
+	sub pdata,224,null
+	rtn positive
+	force type_dh5,type		/* DH5 */
+	rtn
+tx_l2cap_type_edr:
+	force type_dm1,type
+	sub pdata,17,null
+	rtn positive
+	force type_dh1,type		/*2-DH1*/
+	sub pdata,54,null
+	rtn positive
+	force type_dm3,type		/*2-DH3*/
+	arg 367,temp
+	isub temp,null
+	nrtn positive
+	force type_dm5,type		/*2-DH5*/
+	arg 679,temp
+	isub temp,null
+	nrtn positive
+	force type_dh5,type		/*3-DH5*/
+	rtn
+
+
+/******************************************/
+/***********  Receive Packet  *************/
+/******************************************/
+
+
+
+slave_receive_master_slot:
+	fetch 1,mem_state
+	bbit0 state_insniff,slave_receive_notsniff
+	fetch 2,mem_tsniff
+	branch slave_receive_notsniff,blank		/* role switch */
+	nbranch slave_receive_sniff,attempt
+slave_receive_notsniff:
+	call rf_setup_time_master_slot
+slave_receive_access:
+	add clke_bt,1,bt_clk
+slave_receive_sniff:
+	enable swfine
+	fetch 2,mem_rx_window
+	rshift pdata,pdata
+	arg param_pll_setup,temp
+	iadd temp,pdata
+	call ahead_window
+	call fetch_extm_bt_adr
+	force 0x03,freq_mode          /* connection hop */
+	call rx_radio_freq
+	call init_rx_packet_flags
+	call prep_crypt
+	bpatch patch0a_0,mem_patch0a
+	fetch 2,mem_rx_window
+	rshift pdata,pdata
+	call ahead_window
+	call start_receiver
+	enable decode_fec0
+	fetch 2,mem_rx_window
+	arg param_clke_cal,temp
+	iadd temp,stop_watch
+	correlate null,timeout
+	copy clke,temp
+	storet 6,mem_sync_clke
+	disable decode_fec0
+	nrtn sync
+	arg param_clke_cal,clke_rt
+	copy bt_clk,clke_bt
+	branch lpm_adjust_clk,wake
+	rtn
+	
+
+slave_conn_recv_packet:
+	bpatch patch0a_1,mem_patch0a
+	call slave_receive_master_slot
+	nbranch shutdown_radio,sync
+	call save_rssi
+	bmark0 mark_testmode,receive_packet
+	fetch 2,mem_tst_pktcnt_sync
+	increase 1,pdata
+	store 2,mem_tst_pktcnt_sync
+receive_packet:
+	rshift bt_clk,temp
+	or temp,0x40,white_init
+receive_packet_whitened:
+	bpatch patch0a_2,mem_patch0a
+	enable enable_white
+	enable enable_hec
+	enable decode_fec1
+	parse demod,bucket,3  /* get am_addr */
+	rshift8 pwindow,pdata
+	store 1,mem_temp_am_addr
+	parse demod,bucket,4  /* get type */
+	inject bucket,7       /* align up to pwindow */
+	copy pwindow,pdata
+	store 1,mem_rx_type
+	parse demod,bucket,3  /* get arq */
+	rshift8 pwindow,pdata
+	store 1,mem_temp_arq
+	fetch 1,mem_rx_type
+	sub pdata,3,null
+	branch receive_packet_noedr,positive
+	beq 7,receive_packet_noedr		/* esco packet */
+	fetch 1,mem_state_map
+	isolate1 smap_edr,pdata
+	setflag true,PSK,radio_ctrl
+receive_packet_noedr:
+	bpatch patch0a_3,mem_patch0a
+	parse demod,bucket,8   /* cycle thru hec */
+	disable decode_fec1
+	disable enable_hec   /* at this moment, 1 seqn + 8 hec is in shift */
+	branch error_header,crc_failed  /* if hec error, nothing is valid */
+	bmark0 mark_testmode,receive_packet_amchk
+	fetch 2,mem_tst_pktcnt_hec
+	increase 1,pdata
+	store 2,mem_tst_pktcnt_hec
+receive_packet_amchk:	
+	bpatch patch0a_4,mem_patch0a
+	fetch 1,mem_temp_am_addr
+	compare 0,pdata,0x07           /* check for broadcast */
+	setflag true,mark_am_addr_broadcast,mark   /* received a broadcast message, can fire ar_addr if during unpark_req */
+	branch am_addr_ok,true
+	icompare 0x07,am_addr
+	branch am_addr_match,true
+	bmark0 mark_esco,end_of_packet
+	fetcht 1,mem_saved_amaddr
+	icompare 0x7,temp
+	nbranch end_of_packet,true
+	fetch 1,mem_arq    /* mem_arq + am_addr */
+	set0 arqnx,pdata
+	set1 flowx,pdata
+	store 1,mem_arq
+am_addr_match:
+	enable match
+am_addr_ok:
+	bpatch patch0a_5,mem_patch0a
+	fetch 1,mem_rx_type
+	icopy type
+	bmark1 mark_am_addr_broadcast,arqn_bypass        /* arqn doesn't make sense */
+	fetcht 1,mem_temp_arq
+	fetch 1,mem_arq
+	set0 flow,pdata
+	isolate1 flow,temp
+	setflag true,flow,pdata
+	isolate1 arqn,temp
+	setflag true,arqn,pdata
+	store 1,mem_arq
+	isolate0 arqn,temp
+	branch arqn_bypass,true
+	call clear_got_tx
+arqn_bypass:
+	bpatch patch0a_6,mem_patch0a
+	arg 0,temp
+	call reserve_slot
+	and type,0xf,pdata
+	beq type_poll,process_poll
+	beq type_null,end_of_packet	/* null */
+	beq type_fhs,process_fhs
+	fetcht 1,mem_temp_arq
+	fetch 1,mem_arq
+	icompare 0x04,temp    /* bit 2 is seqn */
+	nbranch rx_type_dispatch,true   /* different then it's new */
+	bmark0 mark_am_addr_broadcast,failed_seqn         /* seqn failed, and not broadcast */
+	bbit0 bcast1,rx_type_dispatch           /* first broadcast never fail seqn */
+failed_seqn:
+	set1 mark_old_packet,mark
+rx_type_dispatch:
+	bpatch patch0a_7,mem_patch0a
+	deposit type
+	beq type_dm1, process_dm1
+	beq type_dh1, process_dh1
+	beq type_hv3, process_hev
+	beq type_3dh1, process_3dh1
+	arg 4,temp
+	call reserve_slot
+	beq type_dm3, process_dm3
+	beq type_dh3, process_dh3
+	arg 8,temp
+	call reserve_slot
+	beq type_dm5, process_dm5
+	beq type_dh5, process_dh5
+	rtn
+
+
+process_hev:
+	bpatch patch0b_0,mem_patch0b
+	enable decode_fec0
+	enable enable_crc
+	enable encrypt
+	arg mem_sco_ibuf,contw
+	force 30,loopcnt
+process_hev_loop:	
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	loop process_hev_loop
+	bmark0 mark_esco,end_of_packet
+	parse demod,bucket,16  /* cycle through the crc */
+	nsetflag crc_failed,mark_esco_rxok,mark
+	branch error_payload,crc_failed
+	branch ack_payload
+
+
+process_poll:
+	branch end_of_packet
+
+process_dm3:
+process_dm5:
+	set1 mark_longpacket,mark
+process_dm1:
+	enable decode_fec2
+	branch process_dmh
+	
+process_dh3:
+process_dh5:
+	set1 mark_longpacket,mark
+process_3dh1:
+	set1 PSK3M,radio_ctrl
+process_dh1:
+	enable decode_fec0
+process_dmh:
+	bpatch patch0b_1,mem_patch0b
+	bmark1 mark_rxbuf_inuse,end_of_packet			/* buffer in use, nack */
+	isolate0 PSK,radio_ctrl
+	branch process_dmh_noedr,true
+	disable enable_white
+	enable decode_fec0
+	disable decode_fec2
+	add clkn_bt,2,timeup
+	correlate clkn_bt,meet
+	nbranch error_payload,sync
+	set1 mark_longpacket,mark
+	enable enable_white
+process_dmh_noedr:
+	bpatch patch0b_2,mem_patch0b
+	enable encrypt
+	enable enable_crc
+	parse demod,bucket,3  /* parse in lch+l2cap flow */
+	rshift8 pwindow,pdata
+	store 1,mem_lch_code		/* for loopback */
+	parse demod,bucket,5  /* parse in 5 bit packetlength */
+	bmark1 mark_longpacket,process_dmh_long
+	rshift3 pwindow,loopcnt
+	rshift3 loopcnt,loopcnt
+	branch process_dmh_common
+process_dmh_long:
+	parse demod,bucket,5		/* multi slot packet length of dh3 dh5 dm3 dm5 */
+	rshift pwindow,loopcnt
+	parse demod,bucket,3  /* undefined+bit 9 of length */
+process_dmh_common:	
+	bpatch patch0b_3,mem_patch0b
+	deposit loopcnt
+	store 2,mem_len
+	branch process_dmh_data_end,blank
+	isub mask3ff,null
+	branch error_payload,positive	/* packet too large, discard */
+	bpatch patch0b_4,mem_patch0b
+	set0 mark_fhs_eir,mark
+	fetch 1,mem_lch_code
+	and_into 0x03,pdata
+	arg mem_rxbuf,contw //lmp_data or test packet
+	beq LLID_LMP,process_lmp
+	bmark1 mark_testmode,process_dmh_data
+	//non-HCI mode
+	fetch 1,mem_lch_code
+	and_into 0x03,pdata
+	beq LLID_L2CAP_START,process_dmh_data_l2cap_start_pkt
+	beq LLID_L2CAP_CONT,process_dmh_data_l2cap_continue_pkt
+	branch error_payload
+
+process_lmp:
+	fetch 2,mem_len
+	sub pdata,0x70,null		//lmp buffer size
+	nbranch error_payload,positive
+	bmark1 mark_old_packet,ack_payload
+	branch process_dmh_data
+
+	
+process_dmh_data_l2cap_start_pkt:
+	bpatch patch0b_5,mem_patch0b
+	bmark1 mark_old_packet,ack_payload
+	fetch 2,mem_len
+	arg 0x2e0,temp //l2cap buffer size
+	isub temp,null
+	branch error_payload,positive
+	fetch 1,mem_l2cap_rxbuff_inuse
+	bbit0 L2CAP_INUSE_BUFF1,process_dmh_data_into_buff1
+	bbit0 L2CAP_INUSE_BUFF2,process_dmh_data_into_buff2
+	branch end_of_packet
+process_dmh_data_into_buff1:
+	jam 1,mem_l2cap_rxbuff_new //new data in buff 1
+	fetch 2,mem_l2cap_rxbuff1_len
+	bne 0,end_of_packet			//baseband head error
+	arg mem_l2cap_rxbuff1,contw
+	branch process_dmh_data
+process_dmh_data_into_buff2:
+	jam 2,mem_l2cap_rxbuff_new //new data in buff 2
+	fetch 2,mem_l2cap_rxbuff2_len
+	bne 0,end_of_packet
+	arg mem_l2cap_rxbuff2,contw
+	branch process_dmh_data
+	
+process_dmh_data_l2cap_continue_pkt:
+	bpatch patch0b_6,mem_patch0b
+	bmark1 mark_old_packet,ack_payload
+	fetch 2,mem_len
+	arg 0x2e0,temp //l2cap buffer size
+	isub temp,null
+	branch error_payload,positive
+	fetch 1,mem_l2cap_rxbuff_new
+	beq 1,process_dmh_data_l2cap_continue_pkt1
+	beq 2,process_dmh_data_l2cap_continue_pkt2
+	branch end_of_packet
+process_dmh_data_l2cap_continue_pkt1:
+	arg mem_l2cap_rxbuff1,contw
+	fetch 2,mem_l2cap_rxbuff1_len
+	iadd contw,contw
+	branch process_dmh_data
+process_dmh_data_l2cap_continue_pkt2:
+	arg mem_l2cap_rxbuff2,contw
+	fetch 2,mem_l2cap_rxbuff2_len
+	iadd contw,contw
+process_dmh_data:	
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	loop process_dmh_data
+process_dmh_data_end:	
+	bpatch patch0b_7,mem_patch0b
+	parse demod,bucket,16  /* cycle through the crc */
+	branch error_payload_crc,crc_failed
+	fetch 1,mem_l2cap_flow_ctrl_flag
+	beq L2CAP_FLOW_CTRL_ENABLE,end_of_packet
+	bmark1 mark_testmode,process_dmh_cont
+	bmark1 mark_old_packet,redundant_payload
+	fetch 1,mem_lch_code
+	compare 3,pdata,3
+	branch process_dmh_cont,true
+	fetch 2,mem_len
+	branch process_dmh_cont,blank
+	bpatch patch0c_0,mem_patch0c
+	fetch 1,mem_l2cap_rxbuff_new
+	beq 1,process_l2cap_pass_crc_buff1
+	beq 2,process_l2cap_pass_crc_buff2
+	branch assert
+process_l2cap_pass_crc_buff1:
+	fetch 2,mem_l2cap_rxbuff1_len
+	fetcht 2,mem_len
+	iadd temp,pdata
+	store 2,mem_l2cap_rxbuff1_len
+	beq 0,assert
+	fetcht 2,mem_l2cap_rxbuff1// l2cap payload length
+	increase 4,temp
+	isub temp,null
+	call l2cap_buff1_inuse,zero //l2cap pkts not ended
+	branch process_dmh_cont
+process_l2cap_pass_crc_buff2:
+	fetch 2,mem_l2cap_rxbuff2_len
+	fetcht 2,mem_len
+	iadd temp,pdata
+	store 2,mem_l2cap_rxbuff2_len
+	beq 0,assert
+	fetcht 2,mem_l2cap_rxbuff2// l2cap payload length 
+	add temp,4,temp
+	isub temp,null
+	call l2cap_buff2_inuse,zero //l2cap pkts not ended
+	branch process_dmh_cont
+process_dmh_cont:
+	bpatch patch0c_1,mem_patch0c
+	fetcht 1,mem_state_map
+	fetch 1,mem_lch_code
+	compare 3,pdata,0x03
+	setflag true,smap_rxlmp,temp
+	nsetflag true,smap_rxl2cap,temp
+	storet 1,mem_state_map
+	nbranch process_dmh_cont_rxbuf_not_use,true
+	set1 mark_rxbuf_inuse,mark
+process_dmh_cont_rxbuf_not_use:
+	bmark0 mark_testmode,ack_payload
+	isolate1 smap_rxlmp,temp
+	branch ack_payload,true
+	fetch 2,mem_tst_pktcnt_crc
+	increase 1,pdata
+	store 2,mem_tst_pktcnt_crc
+	set1 mark_loopback,mark
+	set0 smap_rxl2cap,temp
+	set0 mark_rxbuf_inuse,mark
+	storet 1,mem_state_map
+ack_payload:
+	bpatch patch0c_2,mem_patch0c
+	fetcht 1,mem_temp_arq
+	fetch 1,mem_arq
+	set1 arqnx,pdata
+	isolate1 seqn,temp            /* if accept, seqn always copies from the header */
+	setflag true,seqn,pdata
+	isolate1 mark_am_addr_broadcast,mark
+	setflag true,bcast1,pdata
+	store 1,mem_arq
+	fetch 2,mem_len
+	nbranch end_of_packet,blank
+	fetch 1,mem_state_map
+	set0 smap_rxl2cap,pdata//better to do this in l2cap_flow_ctrl_stop
+	store 1,mem_state_map
+	fetch 1,mem_lch_code
+	compare 0x01,pdata,0x07
+	//call l2cap_flow_ctrl_stop,true
+	branch end_of_packet
+	
+error_header:
+	bpatch patch0c_3,mem_patch0c
+	disable match
+	fetch 2,mem_rx_hec_err
+	increase 1,pdata
+	store 2,mem_rx_hec_err
+	branch end_of_packet
+error_payload_crc:
+	fetch 2,mem_rx_crc_err
+	increase 1,pdata
+	store 2,mem_rx_crc_err
+	call discard_pkt
+	bmark0 mark_testmode,error_payload
+	set1 mark_loopback,mark
+error_payload:
+	branch end_of_packet
+	
+discard_pkt:
+	bpatch patch0c_4,mem_patch0c
+	fetch 1,mem_lch_code
+	compare 3,pdata,0x03
+	nbranch discard_pkt_l2cap,true
+discard_pkt_lmp:	
+	fetcht 1,mem_state_map
+	set0 smap_rxlmp,temp
+	storet 1,mem_state_map
+	rtn
+discard_pkt_l2cap:
+//	isolate1 mark_testmode,mark
+//	setflag true,mark_loopback,mark
+	fetcht 1,mem_state_map
+	set0 smap_rxl2cap,temp
+	storet 1,mem_state_map
+	branch  h4_send_acl_trigger_clear
+
+redundant_payload:
+	fetch 1,mem_arq
+	set1 arqnx,pdata
+	store 1,mem_arq
+end_of_packet:
+	bpatch patch0c_5,mem_patch0c
+	disable encode_fec0
+	disable encode_fec2
+	disable decode_fec0
+	disable decode_fec2
+	disable enable_crc
+	disable encrypt
+	disable enable_white
+	branch shutdown_radio,is_rx
+	until null,tx_clear
+	nop 100          /* flush out the last bit */
+	branch shutdown_radio
+	
+process_fhs:
+	bpatch patch0c_6,mem_patch0c
+	enable enable_crc
+	enable decode_fec2
+	parse demod,bucket,72
+	isolate1 58,pdata
+	setflag true,mark_fhs_eir,mark
+	copy bt_adr,temp             /* save current address to aside */
+	ialigned bt_adr            /* send it to access gen */
+	ialigned fhs0			/* get fhs_misc */
+	pulse recalc                /* calc the lap just received from the other guy */
+	setsect 2,0xfffff             /* preset ms of shift reg as big mask */
+	setsect 3,0x0ffff             /* preset ms of shift reg as big mask */
+	nop 32                       /* 30 cycles after recalc */
+	iverify fhs_parity             /* check fhs_parity against ls 34 bits at shift reg, with msb 36 bits as mask */
+	deposit lap
+	store 3,extm_lap
+	deposit uap
+	store 1,extm_uap
+	copy temp,bt_adr             /* put the address back */
+	branch fhs_parity_ok,true     /* fhs parity failed */
+	branch error_payload
+fhs_parity_ok:
+	bpatch patch0c_7,mem_patch0c
+	parse demod,bucket,72
+	ialigned fhs1                   /* give host the information on class and fhs_misc */
+	ialigned am_addr                /* store the am_addr the master assigned us */
+	ialigned nap
+	ialigned regb                   /* store external clock in regb according to clock format */
+	force 0,pdata
+	parse demod,bucket,16  /* cycle through the crc */
+	branch error_payload,crc_failed
+	setarg 0x0ffffffc
+	iand regb,pdata
+	store 4,mem_clke_bt
+	deposit fhs_class
+	store 3,extm_class
+	deposit fhs_misc
+	store 1,extm_fhs_misc
+	deposit am_addr
+	store 1,extm_newconn_am_addr
+	deposit nap
+	store 2,extm_nap
+	deposit bt_clk
+	inject rxf,32
+	compare type_fhs,type,0x0f         /* see if this was fhs packet */
+	setflag true,mark_fhs_already_good,mark
+	branch end_of_packet
+
+clear_got_tx:
+	bpatch patch0d_0,mem_patch0d
+	fetch 1,mem_arq
+	rtnbit0 wack
+	set0 wack,pdata
+	setflip seqnx,pdata
+	store 1,mem_arq
+	fetch 1,mem_last_type
+	beq type_lmp,clear_got_txlmp
+	rtneq type_hv3
+	fetch 1,mem_op
+	rtnbit0 op_txl2cap,pdata
+	set0 op_txl2cap,pdata
+	set1 op_pkt_comp,pdata
+	store 1,mem_op
+	set0 mark_tx_l2cap,mark
+	fetch 2,mem_l2cap_tx_multi_offset
+	nrtn blank
+	fetch 1,mem_op
+	set0 op_pkt_comp,pdata
+	store 1,mem_op
+	branch l2cap_malloc_free
+
+clear_got_txlmp:
+	bpatch patch0d_1,mem_patch0d
+	fetch 1,mem_lmo_header_opcode
+	rshift pdata,pdata
+	beq LMP_START_ENCRYPTION_REQ,start_encryption
+	beq LMP_STOP_ENCRYPTION_REQ,stop_encryption
+	beq LMP_UNSNIFF_REQ, sniff_exit
+	beq LMP_ESCAPE,clear_lmp_escape
+	rtnne LMP_ACCEPTED
+	fetch 1,mem_lmo_payload
+	beq LMP_SCO_LINK_REQ,sco_link_req_by_slave
+	beq LMP_START_ENCRYPTION_REQ,clear_send_setup_complete
+	rtn
+
+clear_lmp_escape:
+	fetch 1,mem_lmo_payload
+	set1 7,pdata
+	rtn
+clear_send_setup_complete:
+	rtn master
+	fetch 1,mem_state
+	rtnbit1 state_conn_comp
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	rtn
+	
+// nokia BH-105  CALLING when reconnection
+sco_link_req_by_slave:
+	rtn master
+	fetch 1,mem_mode
+	isolate1 send_sco_when_slave,pdata
+	branch clean_mem_mode,true
+	//jam LMP_REMOVE_SCO_LINK_REQ,mem_lmo_opcode2
+	rtn
+clean_mem_mode:
+	set0 send_sco_when_slave,pdata
+	store 1,mem_mode
+	rtn
+	
+start_encryption:
+	bpatch patch0d_2,mem_patch0d
+	fetch 1,mem_state_map
+	set1 smap_encryption,pdata
+	store 1,mem_state_map
+	jam 1,core_encrypt
+	fetch 1,mem_state
+	isolate1 state_conn_comp,pdata
+	rtn
+
+stop_encryption:
+	bpatch patch0d_3,mem_patch0d
+	fetch 1,mem_state_map
+	set0 smap_encryption,pdata
+	store 1,mem_state_map
+	jam 0,core_encrypt
+	rtn
+
+
+sniff_init:
+	bpatch patch0d_4,mem_patch0d
+	copy clkn_bt,pdata
+	store 4,mem_lpm_delay_after_sniff
+	add clkn_bt,3,rega
+	branch sniff_init_master,master
+	add clke_bt,3,rega
+sniff_init_master:
+	fetcht 2,mem_tsniff
+	deposit rega
+	set0 27,pdata
+	idiv temp
+	fetch 2,mem_dsniff
+	call wait_div_end
+	remainder regc
+	isub regc,pdata
+	branch sniff_init_nowrap,positive
+	iadd temp,pdata
+sniff_init_nowrap:
+	iadd rega,pdata
+	store 4,mem_sniff_anchor
+	jam SWITCH_FLAG_INIT,mem_switch_flag
+	fetch 1,mem_state
+	set1 state_insniff,pdata
+	store 1,mem_state
+	fetch 1,mem_sniff_attempt
+	store 1,mem_current_sniff_attempt
+	setarg 0
+	store 3,mem_sniff_rcv
+	store 3,mem_sniff_lost
+	store 1,mem_sniff_unint_lost
+	jam BT_EVT_ENTER_SNIFF,mem_fifo_temp
+	call ui_ipc_send_event
+	fetch 2,mem_rx_window_sniff
+	store 2,mem_rx_window
+	nrtn master
+	add am_addr,-1,queue
+	rtn
+
+sniff_exit:
+	bpatch patch0d_5,mem_patch0d
+	fetch 1,mem_state
+	rtnbit0 state_insniff
+	set0 state_insniff,pdata
+	store 1,mem_state
+	fetch 2,mem_rx_window_init
+	store 2,mem_rx_window
+	disable wake
+	jam BT_EVT_EXIT_SNIFF,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+check_attempt:
+	bpatch patch0d_6,mem_patch0d
+	enable attempt
+	fetch 1,mem_state
+	bbit1 state_insniff,check_attempt_sniff
+	rtnmark1 mark_testmode						/* pdata won't be blank now, try attempt */
+	fetch 1,mem_arq
+	rtnbit1 wack
+	fetch 1,mem_lmp_to_send
+	nrtn blank
+	fetch 1,mem_op
+	rtnbit1 op_txl2cap
+check_attempt_nomore:
+	force 0,pdata
+	rtn
+
+check_attempt_sniff:
+	bbit0 state_insco,check_attempt_not_sco
+	fetch 1,mem_current_sniff_attempt
+	beq 2,check_attempt_sniff_restore_sco
+	fetch 1,mem_arq
+	bbit1 wack,check_attempt_notimeout
+	bmark0 mark_esco_rxok,check_attempt_notimeout
+check_attempt_sniff_restore_sco:
+	nbranch check_attempt_notimeout,master
+	fetch 1,mem_lmp_to_send
+	nbranch check_attempt_notimeout,blank
+check_attempt_sco_master:
+	fetch 1,mem_sco_poll
+	increase -1,pdata
+	store 1,mem_sco_poll
+	nbranch check_attempt_nomore,blank
+	jam param_sco_poll,mem_sco_poll
+	branch check_attempt_notimeout
+
+
+
+
+
+	
+check_attempt_not_sco:
+	fetch 1,mem_current_sniff_attempt
+	bne 1,check_attempt_notimeout
+	fetch 1,mem_current_sniff_timeout
+	branch check_attempt_notimeout,blank
+	increase -1,pdata
+	store 1,mem_current_sniff_timeout
+	fetch 1,mem_arq
+	rtnbit1 wack						// waiting for next ack
+	nrtn match						// waiting for next poll
+check_attempt_notimeout:
+	fetch 1,mem_current_sniff_attempt
+	increase -1,pdata
+	store 1,mem_current_sniff_attempt
+	rtn
+
+
+
+
+
+
+
+
+
+	/* enable user if sniff window vialation, queue is extra overhead */
+sniff_check_window:
+	bpatch patch0d_7,mem_patch0d
+	disable swfine
+	copy temp,stop_watch
+	call context_search_sniff_window
+	disable user
+	nrtn zero
+	force 0,stop_watch
+	enable user
+	rtn
+
+	//return true if it is esco context
+check_esco_amaddr:
+	fetch 1,mem_esco_addr
+	icompare 0xff,am_addr
+	rtn
+	
+
+parse_l2cap:	
+	bpatch patch0e_0,mem_patch0e
+	set0 mark_rxbuf_inuse,mark 
+parse_l2cap_cont:
+	jam L2CAP_RX_CLEAR,mem_l2cap_rx_done
+	fetch 1,mem_l2cap_rxbuff_inuse
+	rtn blank
+	isolate1 L2CAP_INUSE_BUFF1,pdata
+	arg mem_l2cap_rxbuff1,contr
+	call process_rx_l2cap_pkt,true
+	bpatch patch0e_1,mem_patch0e
+	fetch 1,mem_l2cap_rx_done
+	beq L2CAP_RX_DONE,parse_l2cap_release_buff1
+	
+	jam L2CAP_RX_CLEAR,mem_l2cap_rx_done
+	fetch 1,mem_l2cap_rxbuff_inuse
+	rtnbit0 L2CAP_INUSE_BUFF2
+	arg mem_l2cap_rxbuff2,contr	
+	call process_rx_l2cap_pkt
+	fetch 1,mem_l2cap_rx_done
+	beq L2CAP_RX_DONE,parse_l2cap_release_buff2
+	rtn
+		
+parse_l2cap_release_buff1:
+	fetch 1,mem_l2cap_rxbuff_inuse
+	set0 L2CAP_INUSE_BUFF1,pdata
+	store 1,mem_l2cap_rxbuff_inuse
+	setarg 0
+	store 2,mem_l2cap_rxbuff1_len
+	rtn
+parse_l2cap_release_buff2:
+	fetch 1,mem_l2cap_rxbuff_inuse
+	set0 L2CAP_INUSE_BUFF2,pdata
+	store 1,mem_l2cap_rxbuff_inuse
+	setarg 0
+	store 2,mem_l2cap_rxbuff2_len
+	rtn
+
+l2cap_buff1_inuse:
+	fetch 1,mem_l2cap_rxbuff_inuse
+	set1 L2CAP_INUSE_BUFF1,pdata
+	store 1,mem_l2cap_rxbuff_inuse
+	rtn
+
+l2cap_buff2_inuse:
+	fetch 1,mem_l2cap_rxbuff_inuse
+	set1 L2CAP_INUSE_BUFF2,pdata
+	store 1,mem_l2cap_rxbuff_inuse
+	rtn
+
+/******************************************/
+/**********  Transmit Packet  *************/
+/******************************************/
+
+slave_send_access:
+	bpatch patch0e_2,mem_patch0e
+	add clke_bt,1,bt_clk          /* slave start to use native clock */
+	call fetch_extm_bt_adr
+	force 0x03,freq_mode          /* connection frequency */
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_external
+	branch send_access_word
+	
+
+slave_conn_send_packet:
+	bpatch patch0e_3,mem_patch0e
+	call rf_setup_time_slave_slot
+	deposit clke_bt
+	fetcht 4,mem_next_btclk
+	isub temp,pdata
+	rtnne 1					/* missed slave slot */
+	compare type_null,type,0x1f
+	nbranch slave_conn_send_access,true
+	fetch 1,mem_rx_type
+	rtn blank					/* null packet, do nothing */
+slave_conn_send_access:
+	call slave_send_access
+transmit_packet:
+	compare type_id,type,0x1f        /* is this id only ? */
+	branch end_of_packet,true
+	rshift bt_clk,temp
+	or temp,0x40,white_init
+transmit_packet_whitened:
+	bpatch patch0e_4,mem_patch0e
+	enable enable_white
+	enable enable_hec
+	enable encode_fec1
+	set0 mark_longpacket,mark
+	deposit am_addr
+	inject mod,3             /* am_addr, temp is disabled */
+	deposit type
+	inject mod,4
+	fetch 1,mem_arq   /* aka mem_arq */
+	inject bucket,4  /* align up to flowx, arqnx, seqnx */
+	inject mod,3
+	enable enable_parity
+	inject mod,8   /* transmit parity */
+	disable encode_fec1
+	disable enable_parity
+	disable enable_hec
+	set0 PSK3M,radio_ctrl
+	arg 0,temp
+	call reserve_slot
+	bpatch patch0e_5,mem_patch0e
+	and type,0x1f,pdata
+	beq type_lmp, transmit_lmp
+	beq type_null, end_of_packet
+	beq type_poll, end_of_packet
+	beq type_fhs, transmit_fhs  /* master mode fhs need got_tx and ack */
+	beq type_dm1, transmit_dm1
+	beq type_dh1, transmit_dh1
+	beq type_hv3, transmit_hev
+	beq type_3dh1, transmit_3dh1
+	arg 4,temp
+	call reserve_slot
+	beq type_dm3, transmit_dm3
+	beq type_dh3, transmit_dh3
+	arg 8,temp
+	call reserve_slot
+	beq type_dh5, transmit_dh5
+	branch transmit_dm5	/* must be 14, dm5 */
+
+
+transmit_hev:
+	bpatch patch0e_6,mem_patch0e
+	enable encode_fec0
+	enable enable_crc
+	enable encrypt
+	force 30,loopcnt
+	arg mem_sco_obuf,contr
+transmit_ev_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop transmit_ev_loop
+	bmark1 mark_esco,transmit_end
+	branch end_of_packet
+	
+transmit_fhs:
+	bpatch patch0e_7,mem_patch0e
+	fetch 1,mem_fhs_am_addr            /* this is the am_addr to assign to slave */
+	icopy am_addr
+	fetch 1,mem_fhs_misc
+	icopy fhs_misc    /* [7:6]SR [5:4]SP [3:1]PS [0]undef  */
+	fetch 3,mem_class   /* store away class */
+	icopy fhs_class
+	fetch 2,mem_nap
+	icopy nap
+	enable enable_crc
+	enable encode_fec2
+	copy bt_adr,rega
+	call fetch_self_bt_adr
+	pulse recalc
+	nop 32                    /* 30 cycles after recalc for sync word generation */
+	copy bt_clk,timeup
+	fetch 4,mem_clkn_bt
+	icopy bt_clk
+	preload fhs0
+	set1 58,pdata		/* eir */
+	inject mod,72
+	preload fhs1
+	inject mod,72
+	copy timeup,bt_clk
+	copy rega,bt_adr
+	enable enable_parity
+	inject mod,16   /* generate CRC */
+	disable enable_parity
+	branch end_of_packet
+
+transmit_lmp:    /* expect the payload ready as in bb spec */
+	bpatch patch0f_0,mem_patch0f
+	enable encrypt
+	enable enable_crc
+	enable encode_fec2
+	fetch 1,mem_lmo_header_length   /* this is the payload header */
+	and pdata,0x1f8,temp       /* temp is number of bits, check payload header format */
+	arg mem_lmo_header_length,contr
+	increase 8,temp   /* temp is in bits */
+transmit_lmp_loop:
+	add temp,-72,regc   /* regc is remainder */
+	nbranch transmit_lmp_finish,positive
+	ifetch 9,contr
+	inject mod,72
+	copy regc,temp
+	branch transmit_lmp_loop
+transmit_lmp_finish:
+	ifetch 9,contr
+	iinject mod,temp
+	branch transmit_end
+
+transmit_dm1:
+	enable encode_fec2
+	branch transmit_dmh
+transmit_dm3:
+transmit_dm5:
+	enable encode_fec2
+	set1 mark_longpacket,mark
+	branch transmit_dmh
+
+transmit_3dh1:
+	set1 PSK3M,radio_ctrl
+transmit_dh1:
+	enable encode_fec0
+	branch transmit_dmh
+	
+transmit_dh3:
+transmit_dh5:
+	set1 PSK3M,radio_ctrl
+	enable encode_fec0
+	set1 mark_longpacket,mark
+
+transmit_dmh:
+	bpatch patch0f_1,mem_patch0f
+	fetch 1,mem_state_map
+	bbit0 smap_edr,transmit_noedr
+	sub type,3,null
+	branch transmit_noedr,positive
+	disable encrypt
+	disable encode_fec2
+	enable encode_fec0
+	disable enable_white
+	set1 PSK,radio_ctrl
+	isolate1 PSK3M,radio_ctrl
+	branch transmit_edr3m,true
+	setarg 0xabeee
+	inject mod,20
+	branch transmit_edr_sync_end
+transmit_edr3m:
+	setarg 0x5faeba
+	inject mod,24
+	setarg 0x12
+	inject mod,6
+transmit_edr_sync_end:	
+	enable enable_white
+	set1 mark_longpacket,mark
+transmit_noedr:
+	enable encrypt
+	enable enable_crc
+	bmark1 mark_loopback,transmit_loopback
+	fetch 1,mem_tx_lch
+	inject mod,3
+	fetch 2,mem_tx_len
+	iforce loopcnt
+	bmark1 mark_longpacket,transmit_long
+	inject mod,5
+	branch transmit_stuff
+transmit_long:	
+	inject mod,13
+transmit_stuff:
+	deposit loopcnt
+	branch transmit_end,blank
+	fetch 2,mem_txptr
+	iforce contr
+transmit_stuff_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop transmit_stuff_loop
+//	branch transmit_end
+
+transmit_end:
+	enable enable_parity
+	inject mod,16
+	disable enable_parity
+	call set_wait_ack
+	fetch 1,mem_state_map
+	bbit0 smap_edr,end_of_packet
+	force 0,pdata
+	inject mod,6				/* edr trailer */
+	branch end_of_packet
+
+
+transmit_loopback:
+	bpatch patch0f_2,mem_patch0f
+	bmark1 mark_longpacket,transmit_loopback_long
+transmit_loopback_short:
+	fetch 1,mem_lch_code
+	inject mod,3						/* LLID and FLOW */
+	fetch 1,mem_len	/* take packet length */
+	iforce regc
+	inject mod,5
+	branch transmit_loopback_cont
+transmit_loopback_long:
+	fetch 1,mem_lch_code
+	inject mod,3						/* LLID and FLOW */
+	fetch 2,mem_len	/* take packet length */
+	iforce regc
+	inject mod,13
+transmit_loopback_cont:
+	arg mem_rxbuf,contr
+transmit_loopback_loop:	
+	copy regc,null
+	branch transmit_loopback_end,zero
+	ifetch 1,contr
+	inject mod,8
+	increase -1,regc
+	branch transmit_loopback_loop
+transmit_loopback_end:
+	fetch 2,mem_tst_pktcnt_dmh
+	increase 1,pdata
+	store 2,mem_tst_pktcnt_dmh
+	branch transmit_end
+	
+
+apply_switch_clke:
+	fetch 4,mem_clke_bt
+	add pdata,7,rega
+	fetch 2,mem_slot_offset
+	nbranch apply_switch_nozero,blank
+	increase -3,rega
+	branch apply_switch_wait_loop
+apply_switch_nozero:
+	mul32 pdata,12,pdata
+	hfetcht 2,core_halfslot
+	increase 1,temp
+apply_switch_loop:
+	isub temp,pdata
+	nbranch apply_switch_bt,positive
+	increase -1,rega
+	branch apply_switch_loop
+apply_switch_bt:
+	sub pdata,0,pdata
+apply_switch_wait_loop:
+	until null,oneslot
+	compare 0,clkn_bt,3
+	nbranch apply_switch_wait_loop,true
+	iforce clke_rt
+	copy rega,clke_bt
+	iforce clke_rt
+	rtn
+	
+
+calc_slot_offset:
+	bpatch patch0f_3,mem_patch0f
+	until null,halfslot
+	deposit clke
+	iforce contr
+	rshift16,pdata,pdata
+	isub clkn_bt,loopcnt
+	and_into 3,loopcnt			/* bt portion */
+	nbranch calc_bt_portion,zero
+	force 0,pdata
+	branch calc_skip_bt
+calc_bt_portion:
+	arg 3750,temp
+	force 0,pdata
+calc_slot_offset_loop:
+	iadd temp,pdata
+	loop calc_slot_offset_loop
+calc_skip_bt:
+	iadd contr,pdata			/* add rt portion */
+	div pdata,12
+	call wait_div_end
+	quotient pdata
+	store 2,mem_slot_offset
+	rtn
+
+calc_clke_offset:
+	bpatch patch0f_4,mem_patch0f
+	deposit clke
+	copy clkn,temp
+	isub temp,null
+	nsetflag positive,44,pdata
+	isub temp,temp
+	setarg 3750
+	isolate0 15,temp
+	branch calc_clke_pos,true
+	setarg -61786
+	iadd temp,temp
+calc_clke_pos:
+	storet 6,mem_le_clk_offset
+	rtn le
+	storet 6,mem_clk_offset
+	rtn
+
+calc_clke:
+	disable clknt
+	fetch 6,mem_le_clk_offset
+	branch calc_clke2,le
+	fetch 6,mem_clk_offset
+calc_clke2:
+	iadd clkn,alarm
+	increase 10,alarm
+	setarg 3750
+	isub alarm,pdata
+	isolate0 15,pdata
+	branch calc_clke_pos_adj,true
+	setarg 0xf15a
+	iadd alarm,alarm
+calc_clke_pos2:
+	copy alarm,clke
+	rtn
+calc_clke_pos_adj:		/* add 2 clock */
+	force 0,null
+	branch calc_clke_pos2
+	
+/******************************************/
+/********* RF related functions ***********/
+/******************************************/
+
+
+calc_radio_freq:
+	bpatch patch0f_5,mem_patch0f
+	call set_sync_on
+	copy bt_clk,pdata
+	and_into 0x180,pdata
+	compare 3,freq_mode,0x07
+	nbranch freq_not_connection,true    /* don't do the hack if not in connection */
+	rshift3 pdata,pdata
+	iadd freq_index,pdata
+	branch do_hop_mod_now
+freq_not_connection:	
+	copy freq_index,pdata
+do_hop_mod_now:
+	div pdata,79
+	pulse recalc         /* now is good time to recalc id */
+	call wait_div_end
+	remainder rega
+	add rega,-40,temp
+	branch odd_half,positive
+	lshift rega,temp
+	branch freq_result
+odd_half:
+	lshift temp,temp
+	increase 1,temp
+freq_result:	
+	bpatch patch0f_6,mem_patch0f
+	fetch 1,mem_mode
+	bbit0 afh_change,afh_process_con
+afh_process_0:	
+	fetch 4, mem_afh_instant   
+	isub bt_clk, null
+	branch afh_process_con,positive
+	call afh_clear
+	fetch 1,mem_afh_new_mod
+	rtn blank
+	fetch 1,mem_mode
+	set1 afh_enable,pdata
+	store 1,mem_mode
+	fetch 5,mem_afh_map_new
+	store 5,mem_afh_map_lo
+	ifetch 5,contr
+	store 5,mem_afh_map_hi
+	call afh_process_freq_map
+afh_process_con:
+	fetch 1,mem_mode
+	rtnbit0 afh_enable
+	isolate1 1,bt_clk
+	branch afh_same_channel,true	/* at odd slot, use the same as last even */
+	rshift3 temp,rega
+	and temp,7,queue
+	setarg mem_afh_map_lo  
+	iadd rega, rega
+	ifetch 1, rega
+	qisolate0 pdata
+	branch afh_process_1,true		/* not in map, do afh */
+	deposit temp
+	branch afh_process_end
+afh_process_1:
+	fetch 1, mem_afh_used
+	iforce regb                     
+	deposit bt_clk
+	and_into 0x180, pdata
+	rshift3 pdata,pdata
+	iadd freq_index,pdata
+	idiv regb
+	setarg mem_afh_map     
+	call wait_div_end
+	remainder rega
+	iadd rega,contr
+	ifetch 1,contr
+afh_process_end:	
+	store 1,mem_afh_index
+	iforce temp  
+  	rtn
+
+afh_same_channel:
+	fetch 1, mem_afh_index           /* last afh index  */
+	iforce temp
+	rtn
+
+afh_clear:
+	fetch 1,mem_mode
+	set0 afh_enable,pdata
+	set0 afh_change,pdata
+	store 1,mem_mode
+	rtn
+/*
+fixed_frequency:
+	fetcht 1,mem_fixed_freq
+	rtn
+*/
+afh_process_freq_map:
+	bpatch patch0f_7,mem_patch0f
+	arg mem_afh_map,contw
+	force 10,loopcnt
+	call memset0
+	arg mem_afh_map,contw
+	force 0,regC
+	force 2,queue
+process_freq_3:	
+	fetch 5,mem_afh_map_lo
+	iforce temp
+	compare 2,queue,0xff
+	branch process_freq_1,true
+	rshift temp,temp
+process_freq_1:	
+	isolate0 0,temp
+	branch process_freq_0,true
+	deposit regC
+	istore 1,contw
+process_freq_0:
+	rshift2 temp,temp
+	increase 2,regC
+	compare 40,regC,0xfe
+	nbranch process_freq_2,true
+	fetch 5,mem_afh_map_hi
+	iforce temp
+	compare 2,queue,0xff
+	branch process_freq_2,true
+	rshift temp,temp
+process_freq_2:	
+	sub regC,78,null
+	branch process_freq_1,positive
+	force 1,regC
+	increase -1,queue
+	nbranch process_freq_3,zero
+	arg mem_afh_map,rega
+	deposit contw
+	isub rega,pdata
+	store 1,mem_afh_used
+	rtn
+
+rx_radio_freq:
+	bpatch patch10_0,mem_patch10
+	call calc_radio_freq
+	fetch 1,mem_debug_config
+	bbit0 debug_rx_fixed_freq,rx_radio_freq_now
+	fetcht 1,mem_rx_fixed_freq
+rx_radio_freq_now:
+	branch set_freq_rx
+	
+
+tx_radio_freq:
+	bpatch patch10_1,mem_patch10
+	call calc_radio_freq
+	fetch 1,mem_debug_config
+	bbit0 debug_tx_fixed_freq,tx_radio_freq_now
+	fetcht 1,mem_tx_fixed_freq
+tx_radio_freq_now:
+	branch set_freq_tx
+	
+
+fetch_giac:
+	force 0,uap
+	fetch 3,mem_glap
+	iforce lap
+	rtn
+
+fetch_page_bt_adr:
+	bpatch patch10_2,mem_patch10
+	fetch 1,mem_hci_puap
+	icopy uap
+	fetch 3,mem_hci_plap
+	icopy lap
+	rtn
+
+fetch_self_bt_adr:
+	bpatch patch10_3,mem_patch10
+	fetch 2,mem_nap
+	icopy nap
+	fetch 1,mem_uap
+	icopy uap
+	fetch 3,mem_lap
+	icopy lap                 /* copy self_adr,bt_adr */      /* use own address */
+	rtn
+
+fetch_extm_bt_adr:
+	bpatch patch10_4,mem_patch10
+	fetch 2,mem_pnap
+	icopy nap
+	fetch 1,mem_puap
+	icopy uap
+	fetch 3,mem_plap
+	icopy lap         
+	rtn
+
+
+fetch_diac:
+	bmark1 mark_all_diac,fetch_diac_do
+	rtnmark0 mark_inquiry_state
+	rtnmark0 mark_periodical_diac
+fetch_diac_do:
+	and_into -256,lap
+	pulse recalc
+	nop 32
+	rtn
+
+
+shutdown_radio:
+	bpatch patch10_5,mem_patch10
+	branch shutdown_radio0,is_rx
+	jam 0xd4, rf_tx_pa_ib
+	nop 4
+	jam 0xd2, rf_tx_pa_ib
+	nop 4
+	jam 0xd1, rf_tx_pa_ib
+	nop 4	
+	fetch 1,mem_tx_power
+	beq TX_POWER_0DB,shutdown_radio_0db
+	beq TX_POWER_3DB,shutdown_radio_3db
+	beq TX_POWER_5DB,shutdown_radio_5db
+	beq TX_POWER_f3DB,shutdown_radio_f3db
+	beq TX_POWER_f5DB,shutdown_radio_f5db
+	beq TX_POWER_PAIR,shutdown_radio_pair
+shutdown_radio_5db:	
+shutdown_radio_0db:
+	jam 0xd0, rf_tx_pa_ib
+	jam 0xe0, rf_tx_pa_gc
+shutdown_radio0:
+	force 0,radio_ctrl
+	disable is_rx
+	disable is_tx
+	pulse packet_end
+	jam 0x0,rfen_mdm
+	jam 0x0,rfen_tx
+	jam 0x0,rfen_rx
+	jam 0,rfen_sn
+	jam 0x70,rfen_msc
+	jam 0x0,rfen_adc
+	rtn
+	
+shutdown_radio_pair:
+shutdown_radio_f5db:
+shutdown_radio_f3db:
+shutdown_radio_3db:
+	jam 0xd0,rf_tx_pa_ib
+	jam 0xc0,rf_tx_pa_gc
+	branch shutdown_radio0
+
+set_sync_on:
+	bpatch patch10_6,mem_patch10
+	jam 0x0,rfen_mdm					/* if called from tx or rx */
+	jam 0x0,rfen_tx
+	jam 0x18,rfen_rx
+	jam 0xa7,rfen_sn
+	jam 0x7f,rfen_msc
+	rtn
+
+set_freq_rx:
+	bpatch patch10_7,mem_patch10
+		/* IF is +2MHz */
+	storet 1,mem_last_freq
+	add temp,rx_freq_offset,rega			/* index to frequency */
+	jam 0x07,rf_balun_ctrim                                         /*Max added, for best sensitivity*/
+	branch rf_write_freq
+rf_rx_enable:
+	bpatch patch11_0,mem_patch11
+	jam 0xcf,rfen_tx
+	nop 10					/* wait adc clk48 ready */
+	jam 0xff,rfen_rx
+	jam 0xaf,rfen_sn
+	jam 0xff,rfen_msc
+	nop 10
+	jam 0xa0,rfen_mdm
+	rtn
+	
+set_freq_tx_offset:
+	fetch 1,mem_250k_freq_enable	//default: 0
+	branch set_freq_tx_2M_offset,blank
+set_freq_tx_0M_offset:
+	add temp,2,rega			//250k
+	rtn
+set_freq_tx_2M_offset:
+	add temp,0,rega			// bt 2M Medium Frequency
+	rtn
+
+set_freq_tx:
+	bpatch patch11_1,mem_patch11
+	storet 1,mem_last_freq
+	call set_freq_tx_offset
+	call rf_write_freq
+	setarg param_pll_setup
+	call sleep
+txon:	
+	jam 0x1,rfen_adc
+	jam 0x3c,rfen_rx
+	jam 0xe0,rfen_tx
+	jam 0x12,rf_balun_ctrim
+	nop 10
+	jam 0x01,rfen_mdm
+	jam 0x3d,rfen_mdm
+	nop 10
+	jam 0xb7,rfen_sn
+	nop 10
+	jam 0x7f, rfen_mdm
+txon_power_select:	
+	fetch 1,mem_tx_power
+	beq TX_POWER_0DB,set_tx_power_0db
+	beq TX_POWER_3DB,set_tx_power_3db	
+	beq TX_POWER_5DB,set_tx_power_5db
+	beq TX_POWER_f3DB,set_tx_power_f3db	
+	beq TX_POWER_f5DB,set_tx_power_f5db
+	beq TX_POWER_PAIR,set_tx_power_pair
+set_tx_power_0db:	
+	jam 0xf0,rf_tx_pa_gc
+	call txon_common
+	jam 0xd8,rf_tx_pa_ib
+	rtn
+
+set_tx_power_3db:
+	jam 0xdf,rf_tx_pa_gc
+	call txon_common
+	jam 0xdf,rf_tx_pa_ib
+	rtn
+
+set_tx_power_5db:
+	jam 0xff,rf_tx_pa_gc
+	call txon_common
+	jam 0xdf,rf_tx_pa_ib
+	rtn
+set_tx_power_f3db:
+	jam 0xce,rf_tx_pa_gc
+	call txon_common
+	jam 0xd8,rf_tx_pa_ib
+	rtn
+
+set_tx_power_f5db:
+	jam 0xcb,rf_tx_pa_gc
+	call txon_common
+	jam 0xd8,rf_tx_pa_ib
+	rtn
+
+set_tx_power_pair:
+	jam 0xd0,rf_tx_pa_ib
+	jam 0xc0,rf_tx_pa_gc
+	jam 0x4c,0x8957
+	jam 0x6c,0x8958
+	jam 0x50,0x8959
+	rtn
+
+txon_common:
+	nop 4
+	jam 0xd1,rf_tx_pa_ib
+	nop 4
+	jam 0xd2,rf_tx_pa_ib
+	nop 4
+	jam 0xd4,rf_tx_pa_ib
+	rtn
+
+
+initialize_radio:
+	jam clksel_rc,core_clksel
+initialize_radio_wait:
+	fetch 2,mem_rf_init_ptr
+	bbit0 14,initialize_radio_wait
+	iforce contr
+	arg 0x8900,temp
+initialize_radio_loop:
+	ifetch 1,contr
+	beq 0xff,initialize_radio_cont
+	ior temp,contw
+	ifetch 1,contr
+	istore 1,contw
+	branch initialize_radio_loop
+initialize_radio_cont:
+	bpatch patch11_2,mem_patch11
+	call lpm_cal_xtal_startup
+	call switchto_dpllclk
+//	ncall check_dpll,wake
+	setarg param_dpll_start_delay
+	iadd clkn_bt,pdata
+	store 4,mem_dpll_clkn
+	set1 RESET,radio_ctrl
+	force 0,radio_ctrl
+	ncall do_rccal,wake
+	branch set_rccal
+
+	/* rega is frequency, 00=2400Mhz */
+rf_write_freq:
+	bpatch patch11_3,mem_patch11
+	setarg 2400
+	iadd rega,temp
+	fetch 1,mem_fcomp_mul
+	jam 0x04,rf_pll_rstn
+	imul32 temp,pdata
+	fetcht 1,mem_fcomp_div
+	idiv temp
+	call wait_div_end
+	quotient rega			/* rega is FLOOR(FVCO/fcomp) */
+	remainder pdata		
+	lshift16 pdata,pdata
+	lshift4 pdata,pdata		/* pdata is frac * 2^20 */
+	idiv temp
+	call wait_div_end
+	quotient pdata		/* pdata is frac *2^20/fcomp */
+	lshift8 pdata,pdata
+	lshift pdata,pdata
+	ior rega,pdata
+	hstore 4,rf_pll_intg
+	jam 0x44,rf_pll_rstn
+	jam 0xc4,rf_pll_rstn
+	rtn
+
+	
+do_rccal:
+	bpatch patch11_4,mem_patch11
+	jam 0x02,rfen_adc
+	setarg 250000
+	call sleep					/* wait clkpll&xtal stable */
+	jam 0x7f,rfen_rx
+	nop 130
+	jam 0x30,rf_rccal_ctrl
+	jam 0xd0,rfen_tx
+	jam 0x70,rf_rccal_ctrl
+	jam 0xf0,rf_rccal_ctrl
+	force 50,loopcnt
+do_rccal_loop:
+	hfetch 1,rf_rccal_result
+	bbit1 5,do_rccal_end
+	loop do_rccal_loop
+do_rccal_end:
+	store 1,mem_rf_rccal
+	jam 0,rfen_tx
+	jam 0,rfen_rx
+	jam 0x00,rfen_adc
+	rtn
+
+set_rccal:
+	bpatch patch11_5,mem_patch11
+	fetch 1,mem_rf_rccal
+	set1 5,pdata
+	hstore 1,rf_rccal_ctrl
+	hfetcht 1,rf_bpf_ctrim
+	and_into 7,temp
+	lshift3 pdata,pdata
+	ior temp,pdata
+	hstore 1,rf_bpf_ctrim
+	hfetch 1,rf_bpf_ib
+	set0 bpf_rccal,pdata
+	hstore 1,rf_bpf_ib
+	hfetch 1,rf_adc_rccal
+	set0 adc_rccal,pdata
+	hstore 1,rf_adc_rccal
+	rtn
+
+save_rssi:
+	bpatch patch11_6,mem_patch11
+	hfetch 2,rf_afc_d2a
+	rshift4 pdata,pdata
+	rshift3 pdata,pdata
+	sub pdata,0,pdata
+bcd:
+	and_into 0xff,pdata
+	div pdata,10
+	call wait_div_end
+	quotient pdata
+	lshift4 pdata,pdata
+	remainder temp
+	ior temp,pdata
+	store 1,mem_rssi			/* bcd value */
+	rtn
+
+	
+switchto_dpllclk:
+	jam clksel_rc,core_clksel
+	hfetch 1,rf_clkpll_frac+2
+	set0 4,pdata
+	set0 5,pdata
+	hstore 1,rf_clkpll_frac+2
+	jam 0x00,rfen_ck
+	jam 0x00,rfen_msc
+	jam 0x70,rfen_msc
+	jam 0xff,rfen_ck
+	hfetch 1,rf_clkpll_frac+2
+	set1 4,pdata
+	set1 5,pdata
+	hstore 1,rf_clkpll_frac+2
+	call init_lpm_ctrl
+	hfetch 1,rf_clkpll_int
+	set1 7,pdata
+	hstore 1,rf_clkpll_int
+	set0 7,pdata
+	hstore 1,rf_clkpll_int
+	set1 7,pdata
+	hstore 1,rf_clkpll_int
+	jam clksel_dpll,core_clksel
+	nop 1
+	jam clksel_xtal,core_clksel
+	hfetch 1,rf_clkpll_frac+2
+	and_into 0xcf,pdata
+	hstore 1,rf_clkpll_frac+2
+	or_into 0x30,pdata
+	hstore 1,rf_clkpll_frac+2
+	rtn
+
+	
+xtal_fast_wake:
+	setarg 0xf0f
+	branch lpm_write_config
+
+init_lpm_ctrl:
+	setarg 0x80f
+	branch lpm_write_config
+
+
+
+start_receiver:
+	bpatch patch11_7,mem_patch11
+	call rf_rx_enable
+	disable is_tx
+	enable is_rx
+	pulse init_encrypt
+	rtn
+
+prep_crypt:
+	bpatch patch12_0,mem_patch12
+	fetch 1,mem_state_map
+	isolate1 smap_encryption,pdata
+	setflag true,0,pdata
+	hstore 1,core_encrypt
+	arg mem_kc,contr
+	ifetch 9,contr
+	iforce kc_ls
+	ifetch 7,contr
+	iforce kc_ms
+	fetch 1,mem_key_size
+	add pdata,-1,g1l
+	pulse kc_p_activate               /* immediately start calculating primary Key */
+	rtn
+	
+wait_access_end:
+	deposit clke
+	store 6,mem_sync_clke
+	disable decode_fec0
+	nbranch shutdown_radio,sync
+	arg param_clke_cal,clke_rt
+	increase 1,clke_bt
+	and_into 0x1fc,clke_bt
+	rtn
+
+
+
+wait_access_mhalfbnd:
+	enable decode_fec0
+wait_access_mhalfbnd_correlate:
+	correlate null,mhalfbnd    /* keep correlating until sync is found, or clke half */
+	branch wait_access_end,sync
+	compare 0x02,clke_bt,0x02
+	nbranch wait_access_mhalfbnd_correlate,true
+	branch wait_access_end
+
+wait_access_clkn_rt:
+	bpatch patch12_1,mem_patch12
+	arg param_conn_access,timeup	/* found sync must occur within this time */
+	enable decode_fec0
+	correlate clkn_rt,meet    /* keep correlating until sync is found, or until clkn_rt timeup */
+	disable decode_fec0
+	nbranch shutdown_radio,sync
+	rtn
+
+wait_access_forever:
+	bpatch patch12_2,mem_patch12
+	enable decode_fec0
+	correlate null,timeout    /* keep correlating until sync is found, or timeout */
+	disable decode_fec0
+	nbranch shutdown_radio,sync
+	arg param_clke_cal,clke_rt
+	and_into 0x1fc,clke_bt
+	rtn
+
+	/* reserve slots for mult-slot packet */
+reserve_slot:
+	bpatch patch12_3,mem_patch12
+	iforce rega
+	deposit bt_clk
+	iadd temp,timeup
+	copy timeup,pdata
+	store 4,mem_next_btclk
+	deposit rega
+	rtn
+
+	/* pdata = clks ahead of bt_clk */
+ahead_window:
+	copy pdata,temp
+	bpatch patch12_4,mem_patch12
+	copy temp,pdata
+	call clk2bt
+	lshift16 bt_clk,pdata
+	set1 44,pdata
+	call clk_diff
+	set0 44,pdata
+	call get_clk
+	call clk_diff
+	rtn user
+	call clk2rt
+	iforce stop_watch
+	until null,timeout
+	rtn
+
+
+setup_clk:
+	bpatch patch12_5,mem_patch12
+	branch setup_clkn,clknt
+	until clke_rt,meet
+skip_setup_clke:
+	copy clke_bt,temp
+	branch setup_clknbt
+setup_clkn:
+	branch skip_setup_clkn,attempt
+	until clkn_rt,meet
+skip_setup_clkn:
+	copy clkn_bt,temp
+setup_clknbt:
+	branch setup_clk11,user
+	compare 1,temp,3
+	nbranch setup_clk,true
+setup_complete:
+	bpatch patch12_6,mem_patch12
+	fetch 1,mem_state
+	rtnbit0 state_inconn
+	fetch 4,mem_next_btclk
+	isub temp,pdata
+	nrtn positive
+	sub pdata,0xff,null
+	branch setup_clk,positive
+	rtn
+setup_clk11:
+	compare 3,temp,3
+	nbranch setup_clk,true
+	branch setup_complete
+
+rf_setup_time:
+	bpatch patch12_7,mem_patch12
+	arg param_rf_setup,timeup
+	branch setup_clk
+	
+rf_setup_time_slave_slot:
+	disable user
+	branch rf_setup_time
+
+rf_setup_time_master_slot:
+	enable user
+	branch rf_setup_time
+	
+start_transmitter:
+	bpatch patch13_0,mem_patch13
+	call prep_crypt
+	disable is_rx
+	enable is_tx
+	rtn
+
+
+
+start_tx_native:
+	bpatch patch13_1,mem_patch13
+	arg param_tx_setup,timeup
+	until clkn_rt,meet         /* wait until start_tx time */
+	pulse init_encrypt
+	rtn
+
+start_rx_native:
+	bpatch patch13_2,mem_patch13
+	arg param_rx_setup,timeup
+	until clkn_rt,meet
+	rtn
+
+
+start_tx_external:
+	bpatch patch13_3,mem_patch13
+	arg param_tx_setup,timeup
+	until clke_rt,meet         /* wait until start_tx time */
+	pulse init_encrypt
+	rtn
+
+send_access_word:
+	bpatch patch13_4,mem_patch13
+	preload access          /* load in access word ready to be sent */
+	enable encode_fec0
+	set1 TXGFSK,radio_ctrl
+	inject mod,72
+	disable encode_fec0
+	rtn
+
+
+scan_mode_whiten:
+	copy xin,temp
+	or_into 0x60,temp                /* extend xin with 5->1, 6->1 */
+	copy temp,white_init
+	rtn
+
+
+
+	/* return blank if free amaddr is found */
+get_free_amaddr:
+	bpatch patch13_5,mem_patch13
+	fetch 1,mem_current_amaddr
+	increase 1,pdata
+	bne param_esco_addr,get_free_amaddr_cont
+	force 1,pdata
+get_free_amaddr_cont:
+	store 1,mem_current_amaddr
+	iforce am_addr
+	rtn
+
+get_clk:
+	copy clkn,temp
+	rtn master
+	copy clke,temp
+	rtn
+
+get_clkbt:
+	deposit clkn_bt
+	rtn master
+	deposit clke_bt
+	rtn
+
+
+supervision_update:
+	bpatch patch13_6,mem_patch13
+	fetcht 4,mem_supervision_timer
+	call get_clkbt
+	isub temp,timeup					/* and to 28 bits */
+	deposit timeup
+	fetcht 2,mem_supervision_to
+	lshift temp,temp
+	isub temp,pdata
+	rtn
+	
+supervision_flush:
+	bpatch patch13_7,mem_patch13
+	call get_clkbt
+	store 4,mem_supervision_timer
+	rtn
+
+assert:
+	bpatch patch14_0,mem_patch14
+	branch assert
+	
+loop:
+	branch loop
+
+sleep:	
+	rtn blank
+	/* sleep pdata clocks, only even clocks are accurate */
+	rshift pdata,pdata
+	increase -3,pdata
+sleep_loop:	
+	increase -1,pdata
+	nbranch sleep_loop,zero
+	force 0,pdata
+	rtn
+
+
+
+init_param:
+	/* clear specified sched ram */
+	arg 0x10,loopcnt
+	arg 0,contw
+	call memset0
+	arg mem_le_state,contw
+	arg 10,loopcnt
+	call memset0
+	jam 0,mem_sp_calc
+	jam 0,mem_fifo_temp
+	jam 0,mem_le_testtype
+	jam 0,mem_debug_config
+	jam 0,mem_lmp_conn_state
+	bpatch patch14_1,mem_patch14
+	jam 0,mem_connection_options
+	jam 0,mem_tester_emulate
+	jam 0,mem_tester_cnt
+	setarg param_glap
+	store 3,mem_glap
+	setarg param_acl_pktlen
+	store 2,mem_acl_pktlen
+	jam param_sco_pktlen,mem_sco_pktlen
+	jam param_acl_pktcnt,mem_acl_pktcnt
+	jam param_sco_pktcnt,mem_sco_pktcnt
+	setarg param_hci_version
+	store 3,mem_hci_version
+//	setarg param_lmp_version
+//	store 3,mem_lmp_version
+//	setarg param_lmp_subversion
+//	store 2,mem_lmp_subversion
+	jam 0x60,mem_fhs_misc		/* R1 for 1.28s ps interval,P2 */
+	jam param_max_slot,mem_max_slot
+	jam 0x02,mem_fw_ver		/* set firmware version */
+ifdef SIMPLE_PAIRING
+	fetch 1,mem_ssp_enable
+	ncall init_memp,blank
+endif
+ifdef SECURE_CONNECTION
+	fetch 1,mem_le_secure_connect_enable
+	ncall init_memp_256,blank
+endif
+	bpatch patch14_2,mem_patch14
+	rtn wake
+	setarg 0
+	store 2,mem_tx_len
+	rshift clkn_bt,pdata
+	store 4,mem_last_clkn
+	rtn
+
+
+
+
+/*****************************************LPO************************************************/
+
+lpmstate:
+	setarg 0xee21
+	hstore 2,core_clkoff			// disable unused peripherals
+	hfetch 4,core_gpio_in
+	store 4,mem_saved_gpio_in
+	hfetch 1,core_lpm_ldocnt
+	store 1,mem_wakup_from_power_flag
+	bbit0 gpio_latch,loadcode		// power up boot
+	enable wake
+	bbit0 cold_wake,lpmwake		
+	disable wake
+	deposit auxcnt
+	nbranch lpmwake,blank		// sleep interrupted, wakeup
+	hfetch 1,core_lpm_ctrl + 3
+	bbit1 reload_code,lpmwake
+	arg param_hibernate_clks,temp
+	branch lpm_enter_sleep
+lpmwake:
+	hfetch 3,core_lpm_xtalcnt
+	hstore 3,core_lpm_reg
+	ifetch 1,contr
+	or_into isogate_mask,pdata		// open all isolation gate&power switch
+	istore 1,contw
+	call lpm_write_ctrl2
+	hfetch 1,core_lpm_isogate
+	set1 enable_retmem,pdata
+	hstore 1,core_lpm_isogate
+	call lpm_write_ctrl2
+	call lpm_load_context,wake
+	hfetch 1,core_lpm_reg+2
+	set0 gpio_latch,pdata			// enable gpio fuction
+	hstore 1,core_lpm_reg+2
+	call lpm_write_ctrl2
+	nbranch loadcode,wake		// wakeup from hibernate
+	rtnmark0 mark_otp_encrypt
+	jam lock_otp,core_misc_ctrl	// disable further read/write of key
+	rtn 
+
+lpm_load_context:
+	fetch 1,mem_saved_spidctrl
+	hstore 1,core_spid_ctrl
+	fetch 3,mem_saved_gsel
+	hstore 3,core_gpio_sel
+	fetch 4,mem_saved_gpio+4
+	hstore 4,core_gpio_out0
+	fetch 4,mem_saved_gpio
+	hstore 4,core_gpio_oe0
+	fetch 8,mem_saved_gpio+8
+	hstore 8,core_gpio_pu0	
+	fetch 8,mem_saved_mark
+	iforce mark
+	hfetch 8,core_gpio_wakeup_low
+	store 8,mem_gpio_wakeup_low
+	call load_ucode
+	rtn
+
+lpm_save_context:
+	deposit mark
+	store 8,mem_saved_mark
+	hfetch 8,core_gpio_oe0
+	store 8,mem_saved_gpio
+	ifetch 8,contr
+	istore 8,contw
+	hfetch 3,core_gpio_sel
+	store 3,mem_saved_gsel
+	hfetch 1,core_spid_ctrl
+	store 1,mem_saved_spidctrl
+	branch lpm_write_gpio_wakeup
+
+lpo_calibration:
+	hfetch 1,core_bist_ctrl
+	nbranch lpo_cal_inited,blank
+	fetch 3,mem_clks_per_lpo
+	nrtn blank
+	jam 0xc0,core_bist_ctrl
+	jam ccnt_start,core_misc_ctrl
+lpo_cal_inited:
+	hfetch 1,core_perf_status
+	rtnbit0 1
+	hfetch 3,core_clk_counter
+	store 3,mem_clks_per_lpo
+	rtn
+
+
+	/* temp is synced clke */
+lpm_adjust_clk:
+	bpatch patch14_3,mem_patch14
+	deposit clke
+	call clk_diff_rt
+	fetcht 4,mem_sleep_counter_all
+	sub temp,0xff,null
+	rtn positive				// interval too small
+	lshift8 pdata,pdata
+	lshift4 pdata,pdata
+	idiv temp
+	call wait_div_end
+	quotient pdata
+	arg param_lpm_adjmax,temp
+	call ceiling
+	store 1,mem_lpm_adjust
+	nbranch lpm_adjust_positive,user
+	sub pdata,0,pdata
+lpm_adjust_positive:
+	fetcht 3,mem_clks_per_lpo
+	iadd temp,pdata
+	store 3,mem_clks_per_lpo
+lpm_clear_counter:
+	setarg 0
+	store 4,mem_sleep_counter_all
+	rtn
+
+
+	/* temp is lpo counter for doze */
+lpm_doze:
+	fetch 1,mem_lpm_config+2
+	set1 reload_code,pdata
+	store 1,mem_lpm_config+2
+	branch lpm_hibernate_normal
+	
+
+	/* no retention memory at all */
+lpm_hibernate:
+	arg param_hibernate_clks,temp
+	fetch 1,mem_lpm_config+1
+	set0 7,pdata					/* lowest lpo */
+	store 1,mem_lpm_config+1
+lpm_hibernate_normal:
+	bpatch patch14_4,mem_patch14
+	call lpm_write_gpio_wakeup
+	fetch 1,mem_lpm_hibernate_switch
+	store 1,mem_lpm_xtalcnt + 4
+	fetch 1,mem_lpm_xtalcnt + 2
+	set1 cold_wake,pdata
+	store 1,mem_lpm_xtalcnt + 2
+
+	/* temp is lpo clocks to sleep */
+lpm_sleep:
+	bpatch patch14_5,mem_patch14
+	call xtal_fast_wake
+	fetch 4,mem_sleep_counter_all
+	iadd temp,pdata
+	store 4,mem_sleep_counter_all
+	call lpm_save_context
+	fetch 5,mem_lpm_xtalcnt
+	hstore 4,core_lpm_reg
+	rshift32 pdata,rega
+	until null,lpo_edge
+	deposit clkn
+	store 6,mem_sleep_clkn
+	jam lpmreg_sel_ctrl2,core_lpm_wr
+	until null,lpo_edge
+	until null,lpo_edge
+	deposit rega
+	hstore 1,core_lpm_isogate
+	jam lpmreg_sel_ctrl2,core_lpm_wr
+lpm_enter_sleep:
+	until null,lpo_edge
+	until null,lpo_edge
+	hstoret 4,core_lpm_reg
+	jam lpmreg_sel_counter,core_lpm_wr
+	until null,never
+
+
+
+
+lpm_recover_clk:
+	bpatch patch14_6,mem_patch14
+	setarg 0
+	copy auxcnt,null
+	branch lpm_recover_timeout,zero
+	hfetch 1,core_lpm_xtalcnt
+	hfetcht 1,core_lpm_buckcnt
+	isub temp,null
+	branch lpm_recover_xtal,positive
+	deposit temp
+lpm_recover_xtal:
+	isub auxcnt,pdata
+	increase 1,pdata
+lpm_recover_timeout:
+	increase 8,pdata
+	until null,lpo_edge
+	iadd lpo_time,pdata
+	fetcht 4,mem_sleep_counter
+	iadd temp,pdata
+	fetcht 3,mem_clks_per_lpo
+	imul32 temp,pdata
+	rshift8 pdata,pdata
+	rshift4 pdata,pdata
+	increase param_lpm_fix,pdata
+	arg 3750,temp
+	idiv temp
+	call wait_div_end
+	quotient pdata
+	lshift16 pdata,pdata
+	remainder temp
+	ior temp,pdata
+	fetcht 6,mem_sleep_clkn
+	call clk_add
+	copy temp,clkn
+	fetch 6,mem_context + coffset_clk_offset
+	call calc_clke2
+	deposit clke
+	store 6,mem_pdatatemp
+	deposit auxcnt
+	istore 1,contw
+	hfetch 1,core_gpio_in1
+	or_into 0xf0,pdata
+	istore 1,contw
+	rtn
+	
+lpm_dispatch:
+	bpatch patch14_7,mem_patch14
+	call lpo_calibration
+	fetch 3,mem_clks_per_lpo
+	rtn blank
+	fetch 1,mem_lpm_mode
+	rtn blank
+	fetch 1,mem_ssp_enable
+	branch lpm_dispatch_next,blank
+	fetch 1,mem_sp_local_key_invalid	// simple pairing is not ready
+	rtn blank
+lpm_dispatch_next:
+	fetch 1,mem_le_sc_calc
+	nrtn blank	
+	call lpm_check_wake_lock
+	nrtn blank
+	fetch 1,mem_context
+	compare 3,pdata,0x7							/* sco won't sleep */
+	nbranch lpm_dispatch_unconn,true
+	fetch 2,mem_context + coffset_tsniff
+	rtn blank										/* role switch */
+	rtn wake
+	bpatch patch15_0,mem_patch15
+lpm_dispatch_next2:
+	fetcht 1,mem_lpm_current_mult
+	fetch 2,mem_context + coffset_tsniff
+	imul32 temp,pdata
+	rshift4 temp,temp
+	rshift2 temp,temp
+	isub temp,pdata
+	fetcht 4,mem_context + coffset_sniff_anchor
+	iadd temp,pdata
+	fetcht 1,mem_lpm_overhead
+	isub temp,pdata
+	lshift16 pdata,alarm
+	bpatch patch15_1,mem_patch15
+	fetch 2,mem_context + coffset_rx_window
+	rshift pdata,pdata
+	call clk2bt
+	deposit alarm
+	call clk_diff
+	copy clke,temp
+	call clk_diff_rt
+	rtn user
+lpm_dispatch_sleep:
+	call clk2lpo
+lpm_dispatch_lpo:
+	bpatch patch15_2,mem_patch15
+	fetch 1,mem_lpm_xtalcnt
+	isub temp,null
+	branch lpm_clear_counter,positive
+	storet 4,mem_sleep_counter
+	call app_will_enter_lpm
+	call l2cap_lpm_save_txbuf
+	fetcht 4,mem_sleep_counter
+	branch lpm_sleep
+	
+lpm_dispatch_unconn:
+	bpatch patch15_3,mem_patch15
+	fetch 1,mem_context
+	rtnbit1 state_inconn					// wont sleep in connection
+	rtnbit1 state_inpage					// wont sleep when paging
+	fetch 1,mem_ssp_enable
+	branch lpm_unconn_nossp,blank
+	fetch 1,mem_sp_local_key_invalid	// simple pairing is not ready
+	rtn blank
+lpm_unconn_nossp:
+	bpatch patch15_4,mem_patch15
+	fetch 1,mem_le_adv_enable
+	nbranch lpm_unconn_cont,blank
+	fetch 1,mem_scan_mode
+	rtn blank
+lpm_unconn_cont:
+	fetch 2,mem_lpm_interval
+	rtn blank
+lpm_sleep_btclk:
+	fetcht 1,mem_lpm_overhead
+	isub temp,pdata
+	arg 7500,temp				/* 1.25ms */
+	imul32 temp,pdata
+	branch lpm_dispatch_sleep
+
+lpm_set_mult:
+	bpatch patch15_5,mem_patch15
+	disable wake
+	fetch 1,mem_state
+	rtnbit0 state_insniff
+	nbranch lpm_not_match,match
+	call lpm_match
+	fetch 2,mem_rx_window_sniff
+	store 2,mem_rx_window
+	fetch 1,mem_arq
+	bbit1 wack,lpm_mult_short
+	bmark0 mark_lpm_mult_enable,lpm_mult_short
+	call l2cap_malloc_is_fifo_empty
+	nbranch lpm_mult_short,blank
+	fetch 1,mem_classic_bt_flag
+	bbit1 SHORT_MULT_FLAG,lpm_mult_short
+lpm_mult_wait_timeout:
+	jam 0,mem_lpm_current_mult
+	bmark0 mark_lpm_mult_enable,lpm_mult_short
+	fetch 1,mem_lpm_mult_cnt
+	branch lpm_mult_long,blank
+	increase -1,pdata
+	store 1,mem_lpm_mult_cnt
+	rtn
+
+
+classic_bt_set_mult_short_flag:
+	arg SHORT_MULT_FLAG,queue
+	branch classic_bluetooth_set_flag
+	
+classic_bt_clr_mult_short_flag:
+	arg SHORT_MULT_FLAG,queue
+	branch classic_bluetooth_clr_flag
+
+
+
+lpm_match:
+	jam 0,mem_sniff_unint_lost
+	fetch 3,mem_sniff_rcv
+	increase 1,pdata
+	store 3,mem_sniff_rcv
+	rtn
+
+lpm_not_match:
+	bpatch patch15_6,mem_patch15
+	fetcht 2,mem_rx_window_sniff
+	rshift temp,temp
+	fetch 2,mem_rx_window
+	iadd temp,pdata
+	store 2,mem_rx_window
+lpm_lost:
+	jam 0,mem_lpm_current_mult
+	fetch 3,mem_sniff_lost
+	increase 1,pdata
+	store 3,mem_sniff_lost
+	fetch 1,mem_sniff_unint_lost
+	increase 1,pdata
+	store 1,mem_sniff_unint_lost
+	rtn
+
+lpm_mult_short:
+	jam 0,mem_lpm_current_mult
+	fetch 1,mem_lpm_mult_timeout
+	store 1,mem_lpm_mult_cnt
+	rtn
+
+lpm_mult_long:
+	fetcht 1,mem_lpm_mult
+	storet 1,mem_lpm_current_mult
+	rtn
+
+lpm_cal_xtal_startup:
+	bpatch patch15_7,mem_patch15
+	fetch 1,mem_lpm_xtalcnt
+	nrtn blank
+	jam clksel_rc,core_clksel
+	setarg 0xf0c
+	call lpm_write_config
+	setarg 200000
+	call sleep
+	until null,lpo_edge
+	copy lpo_time,alarm
+	call xtal_fast_wake
+	jam clksel_xtal,core_clksel
+	nop 10
+	until null,lpo_edge
+	deposit lpo_time
+	isub alarm,pdata
+	increase 0x30,pdata
+	arg 0xff,temp
+	call ceiling
+	store 1,mem_lpm_xtalcnt
+	nop 30000
+	nop 30000
+	nop 30000	
+	rtn
+
+lpm_cal_xtal_startup_by_snooze:
+	fetch 1,mem_lpm_xtalcnt
+	nrtn blank
+	jam 0xff,core_xtal_stable_time
+	jam clksel_rc,core_clksel
+	call xtal_fast_wake
+	setarg 1000
+	iadd lpo_time,alarm
+	snooze
+	deposit lpo_time
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	isub alarm,pdata
+	add pdata,0x30,pdata
+	arg 0xff,temp
+	call ceiling
+	store 1,mem_lpm_xtalcnt
+	nop 30000
+	nop 30000
+	nop 30000	//delay 90000 nop
+	rtn
+
+
+
+	/* pdata is lpm_reg[11:0] */
+lpm_write_config:
+	arg 0xfff,contw
+	iand contw,contw
+	fetch 1,mem_lpm_config
+	and_into 0xf0,pdata
+	lshift8 pdata,pdata
+	ior contw,pdata
+	hstore 2,core_lpm_reg
+	ifetch 2,contr
+	istore 2,contw
+
+lpm_write_ctrl:
+	setarg lpmreg_sel_ctrl
+	branch lpm_write
+
+lpm_write_ctrl2:
+	setarg lpmreg_sel_ctrl2
+lpm_write:
+	until null,lpo_edge
+	hstore 1,core_lpm_wr
+	until null,lpo_edge
+	until null,lpo_edge
+	rtn
+
+
+lpm_write_gpio_wakeup:
+	bpatch patch16_0,mem_patch16
+	fetch 4,mem_gpio_wakeup_low
+	hstore 4,core_lpm_reg
+	setarg lpmreg_sel_gpiolow
+	call lpm_write
+	fetch 4,mem_gpio_wakeup_high
+	hstore 4,core_lpm_reg
+	setarg lpmreg_sel_gpiohigh
+	branch lpm_write
+
+lpm_get_wake_lock:
+	fetch 2,mem_lpm_wake_lock
+	qset1 pdata
+	store 2,mem_lpm_wake_lock
+	rtn
+
+lpm_put_wake_lock:
+	fetch 2,mem_lpm_wake_lock
+	qset0 pdata
+	store 2,mem_lpm_wake_lock
+	rtn
+
+
+
+lpm_check_wake_lock:
+	bpatch patch16_1,mem_patch16
+	call app_check_wake_lock
+	fetch 2,mem_lpm_wake_lock
+	copy pdata,rega
+	fetch 1,mem_state_map
+	isolate1 smap_rxlmp,pdata
+	setflag true,wake_lock_lmp_rx,rega
+	fetch 1,mem_lmo_opcode1
+	fetcht 1,mem_lmo_opcode2
+	iadd temp,pdata
+	fetcht 1,mem_lmp_to_send
+	iadd temp,pdata
+	nsetflag blank,wake_lock_lmp_tx,rega
+	fetch 1,mem_le_tx_buff_used
+	nsetflag blank,wake_lock_ble_tx,rega
+	fetch 2,mem_l2cap_rxbuff1_len
+	fetcht 2,mem_l2cap_rxbuff2_len
+	iadd temp,pdata
+	nsetflag blank,wake_lock_l2cap_rx,rega
+	fetch UTIL_FIFO_LEN,mem_ipc_fifo_bt2c51
+	nsetflag blank,wake_lock_ipc_bt2c51,rega
+	fetch UTIL_FIFO_LEN,mem_ipc_fifo_c512bt
+	nsetflag blank,wake_lock_ipc_c512bt,rega
+	fetch 1,mem_hci_cmd
+	nsetflag blank,wake_lock_cmd,rega
+	fetch 1,mem_device_option
+	compare dvc_op_module,pdata,0xff
+	call lpm_uart_wake_lock,true
+	setarg -8
+	iand rega,rega
+	copy rega,pdata
+	store 2,mem_lpm_wake_lock
+	rtn
+
+lpm_uart_wake_lock:
+	hfetch 2,core_uart_rxitems
+	nsetflag blank,wake_lock_uart_rx ,rega
+	hfetch 2,core_uart_txitems
+	nsetflag blank,wake_lock_uart_tx ,rega
+	rtn
+
+lpm_shut_down:
+	hfetch 4,core_lpm_ctrl
+	set0 27,pdata
+	hstore 4,core_lpm_reg
+	call lpm_write_ctrl
+	branch assert
+	
+lpm_disable_exen_output:
+	hfetch 4,core_lpm_xtalcnt
+	set0 20,pdata
+	hstore 4,core_lpm_reg
+	branch lpm_write_ctrl2
+
+check_bt_disabled:
+	fetch 2,mem_chip_functions
+	bbit1 bt_disabled,assert
+	rtn
+check_ble_disabled:
+	fetch 2,mem_chip_functions
+	bbit1 ble_disabled,assert
+	rtn
+check_module_disabled:
+	fetch 2,mem_chip_functions
+	bbit1 module_disable,assert
+	rtn
+
+
+
+
+
+
+
+//p_check_attempt_sniff:
+//	bbit0 state_insco,p_check_attempt_not_sco
+//	fetch 1,mem_current_sniff_attempt
+//	beq 2,p_check_attempt_sniff_restore_sco
+//	fetch 1,mem_arq
+//	bbit1 wack,p_check_attempt_notimeout
+//	bmark0 mark_esco_rxok,p_check_attempt_notimeout
+//p_check_attempt_sniff_restore_sco:
+//	nbranch p_check_attempt_notimeout,master
+//	fetch 1,mem_lmp_to_send
+//	nbranch p_check_attempt_notimeout,blank
+//p_check_attempt_sco_master:
+//	fetch 1,mem_sco_poll
+//	increase -1,pdata
+//	store 1,mem_sco_poll
+//	nbranch check_attempt_nomore,blank
+//	jam param_sco_poll,mem_sco_poll
+//	branch check_attempt_notimeout
+//p_check_attempt_not_sco:
+//	compare type_null,type,0x1f
+//	branch check_timeout,true
+//	compare type_poll,type,0x1f
+//	branch check_timeout,true
+//	branch check_anchor_end
+//p_check_attempt_notimeout:
+//check_atttemp_decrease:
+//	fetch 1,mem_current_sniff_attempt
+//	increase -1,pdata
+//	store 1,mem_current_sniff_attempt
+//	rtn
+//check_timeout:
+//	fetch 1,mem_sniff_timeout_temp
+//	increase 1,pdata
+//	store 1,mem_sniff_timeout_temp
+//check_anchor_end:
+//	fetch 1,mem_current_sniff_attempt
+//	branch check_anchor_end_attempt0,blank
+//	call check_atttemp_decrease
+//	nrtn blank
+//check_anchor_end_attempt0:  
+//	fetch 1,mem_sniff_timeout_temp
+//	fetcht 1,mem_current_sniff_timeout
+//	isub temp,null
+//	branch p_blank,positive
+//	arg 1,pdata
+//	rtn
+//p_blank:
+//	arg 0,pdata
+//	rtn
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/hci_h4.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/hci_h4.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/hci_h4.prog	(working copy)
@@ -0,0 +1,138 @@
+
+ifdef DEBUG_H4LOG_ENABLE
+hci_log:
+	copy regc,pdata
+	rtneq 0x11
+	fetch 1,mem_hci_log
+	increase 1,pdata
+	sub pdata,hci_log_cnt,null
+	branch hci_log_calc_ptr,positive
+	setarg 0
+hci_log_calc_ptr:
+	store 1,mem_hci_log
+	arg hci_log_size,temp
+	imul32 temp,pdata
+	arg mem_hci_log+hci_log_size,contw
+	iadd contw,contw
+hci_log_write_content:
+	fetch 1,mem_hci_log
+	istore 1,contw//counter
+	copy regb,pdata
+	istore 1,contw
+	fetch 2,mem_le_event_count
+	istore 1,contw
+	copy clke_bt,pdata
+	istore 3,contw
+	fetch 1,mem_last_freq
+	istore 1,contw
+	fetch 1,mem_le_rxbuf
+	istore 1,contw
+	rtn
+else
+
+endif
+
+hci_rx_h4:
+	bpatch patch1f_5,mem_patch1f
+	fetch 1,mem_hci_cmd
+	nrtn blank
+hci_rx_h4_1:
+	call hci_h4_parse_packet
+	ncall h4_rx_discard_packet,user
+	rtn
+	
+hci_h4_parse_packet:
+	bpatch patch1f_6,mem_patch1f
+	copy contru,rega
+	arg 4,temp
+	ifetch 1,contru //type
+	beq HCI_H4_TYPE_CMD,hci_h4_parse_packet_wait_len
+	increase 1,temp //acl packet has 2 bytes for length
+	beq HCI_H4_TYPE_ACL,hci_h4_parse_packet_wait_len
+	copy contru,pdata
+	hstore 2,core_uart_rrptr
+	rtn
+hci_h4_parse_packet_wait_len:
+	hfetch 2,core_uart_rxitems
+	isub temp,null
+	nbranch hci_h4_parse_packet_wait_len,positive // while(rxitems >= 4 or 5);
+	//Make sure length has been recieved.
+	disable user
+	copy rega,contru
+	call h4_get_rx_payload_len
+	iadd temp,temp
+hci_h4_parse_packet_wait:
+	hfetch 2,core_uart_rxitems
+	isub temp,null
+	nbranch hci_h4_parse_packet_wait,positive//wait for rcv a complete packet
+	copy rega,contru
+	ifetch 1,contru //HCI packet type
+	beq  HCI_H4_TYPE_CMD,process_hci_cmd
+	branch assert
+	
+h4_rx_discard_packet:
+	bpatch patch1f_7,mem_patch1f
+	hfetch 2,core_uart_rrptr
+	iforce contru
+	call h4_get_rx_payload_len
+	iadd contru,contru
+	deposit contru
+	hstore 2,core_uart_rrptr
+	rtn
+
+
+//contru = pointer to packet start
+//return len via pdata
+h4_get_rx_payload_len:
+	ifetch 1,contru
+	increase 2,contru
+	beq HCI_H4_TYPE_ACL,h4_get_rx_payload_len_acl
+	ifetch 1,contru
+	rtn
+h4_get_rx_payload_len_acl:
+	ifetch 2,contru
+	rtn
+
+h4_get_tx_ptr:
+	hfetch 2,core_uart_twptr
+	increase -5,contwu
+	iadd contwu,contwu
+	rtn
+
+h4_send_packet_event:
+	arg HCI_H4_TYPE_EVENT,temp //type
+	branch h4_send_packet
+h4_send_packet_acl: //upgoing ACL
+	arg HCI_H4_TYPE_ACL,temp //type
+h4_send_packet:
+	bpatchx patch20_0,mem_patch20
+	increase 1,loopcnt
+	hfetch 2,core_uart_twptr
+	copy pdata,contwu
+	copy loopcnt,pdata //length
+	istoret 1,contwu //packet type in temp
+	increase -1,pdata
+	iadd contwu,contwu
+	copy contwu,pdata
+	store 2,mem_hci_acl_tx_trigger_wptr
+	copy temp,pdata
+ifdef ACL_DEBUG
+	beq HCI_H4_TYPE_EVENT,h4_send_packet0
+	hfetch 1,core_uart_txitems
+	ncall ice_break,blank
+	
+h4_send_packet0:	
+	copy temp,pdata
+endif
+	rtneq HCI_H4_TYPE_ACL //not send acl packet immediately
+	fetch 2,mem_hci_acl_tx_trigger_wptr
+	hstore 2,core_uart_twptr
+	branch h4_send_acl_trigger_clear
+	
+	
+h4_send_acl_trigger_clear:
+	setarg 0
+	store 2,mem_hci_acl_tx_trigger_wptr
+	rtn
+
+	
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/hci_main.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/hci_main.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/hci_main.prog	(working copy)
@@ -0,0 +1,400 @@
+/*********************************/
+/**********   HCI  *****************/
+/*********************************/
+
+hci_init:
+	rtn wake
+	setarg hci_idle_dispatch
+	store 2,mem_cb_idle_process
+
+	setarg uart_baud_115200
+	store uart_baud_len,mem_baud
+hci_lpm_init:
+	setarg mem_h5rx_buf
+	hstore 2,core_uart_rsaddr
+	setarg mem_h5rx_buf_end
+	hstore 2,core_uart_readdr
+	setarg mem_h5tx_buf
+	hstore 2,core_uart_tsaddr
+	call hci_sel_init
+hci_reinit:
+	jam 0x0,core_uart_ctrl
+ 	setarg mem_h5tx_buf
+	hstore 2,core_uart_twptr
+	hstore 2,core_uart_trptrp
+	setarg mem_h5rx_buf
+	hstore 2,core_uart_rrptr
+	store 2,mem_h5rx_rptr
+hci_init_common:
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_UART,pdata
+	hstore 2,core_clkoff
+	call uart_set_baud_by_mem
+	jam uartclk_dpll,core_uart_clksel
+	jam uart_ctrl_h4,core_uart_ctrl
+	rtn
+
+hci_sel_init:
+	setarg mem_h5tx_buf_end
+	hstore 2,core_uart_teaddr
+	hfetch 1,core_gpio_sel1
+	or_into 0x07,pdata
+	hstore 1,core_gpio_sel1
+	rtn
+	
+	
+hci_rx_packet:
+	bpatchx patch20_1,mem_patch20
+	hfetch 1,core_uart_status
+	iforce regb
+	bbit0 uart_status_rx_fifo_empty,hci_rx_packet_cont
+	hfetch 2,core_uart_rxitems
+	iforce regc
+	arg 0x44f,temp
+	isub temp,null
+	nrtn zero
+hci_rx_packet_cont:
+	hfetch 2,core_uart_rrptr
+	iforce contru
+	branch hci_rx_h4
+	
+uart_send_byte:
+	hfetcht 1,core_uart_status
+	isolate1 6,temp
+	branch uart_send_byte,true
+	hstore 1,core_uart_txd
+	rtn
+	
+process_hci_cmd:
+	bpatchx patch20_2,mem_patch20
+	fetch 1,mem_hci_cmd
+	branch process_hci_cmd_cont,blank
+	enable user					/* last command still there */
+	rtn
+process_hci_cmd_cont:
+	ifetch 2,contru
+	iforce alarm				/* alarm is used for sending */
+	iforce queue				/* queue is OCF */
+	ifetch 1,contru		/* skip hci length */
+	iforce temp			/* temp has the length */
+	rshift2 alarm,pdata
+	rshift8 pdata,pdata
+	beq HCI_OGF_VENDOR_SPECIFIC,phci_grp_vendor_specific
+	rtn
+
+
+phci_grp_vendor_specific:
+	bpatchx patch20_3,mem_patch20
+	deposit queue
+	beq HCI_VENDOR_CMD_RESET,hci_normal_reply
+	beq HCI_VENDOR_CMD_CHIPID,phci_grp_vendor_chipid
+	beq HCI_VENDOR_CMD_BAUD,phci_grp_vendor_baud
+	beq HCI_VENDOR_CMD_PATCH,phci_grp_vendor_patch
+	beq HCI_VENDOR_CMD_PATCH_DONE,phci_grp_vendor_done
+	beq HCI_VENDOR_CMD_ECHO,hci_normal_reply
+	beq HCI_VENDOR_CMD_BDADDR,phci_grp_vendor_bdaddr
+	beq HCI_VENDOR_CMD_ENTER_LPM,phci_grp_vendor_enter_lpm
+	
+	beq HCI_VENDOR_CMD_MEM,phci_grp_vendor_mem
+	beq HCI_VENDOR_CMD_EEP,phci_grp_vendor_eep
+	beq HCI_VENDOR_CMD_PATCH_SEC_INIT,phci_grp_vendor_patch_sec_init
+	beq HCI_VENDOR_CMD_PATCH_SEC,phci_grp_vendor_patch_sec
+	branch hci_normal_reply
+
+phci_grp_vendor_enter_lpm:
+	call hci_normal_reply
+	call wait_uarttx
+	call gpio_pu_uart_tx
+hci_enter_lpm:
+	call app_put_lpm_wake_lock
+	call app_l2cap_flow_control_enable
+	branch gpio_rx_config_input_with_pu
+
+hci_exit_lpm:
+	jam HCI_RX_READY,mem_hci_lt_rx_state
+	call app_get_lpm_wake_lock
+	call hci_lpm_init
+	branch app_l2cap_flow_control_disable
+	
+phci_grp_vendor_chipid:
+	call hci_get_cmd_complete_ptr
+	hfetch 2,core_chipid
+	istore 2,contwu
+	force 6,loopcnt
+	branch hci_command_complete
+	
+phci_grp_vendor_baud:
+	ifetch 2,contru
+	store 2,mem_baud
+	hstore 2,core_uart_baud
+	rtn
+
+
+phci_grp_vendor_patch_common:
+	//jam 0x80,core_ucode_ctrl
+	ifetch 1,contru
+	copy pdata,temp //check sum via temp
+	hstore 1,core_ucode_low
+	ifetch 1,contru
+	iadd temp,temp
+	set1 7,pdata
+	hstore 1,core_ucode_ctrl
+	ifetch 1,contru
+	iadd temp,temp
+	copy pdata,loopcnt
+	rtn
+	
+phci_grp_vendor_patch:
+	bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad
+	call phci_grp_vendor_patch_common
+phci_grp_vendor_patch_loop:
+	ifetch 1,contru
+	hstore 1,core_ucode_data
+	iadd temp,temp
+	loop phci_grp_vendor_patch_loop
+phci_grp_vendor_patch_check_sum:	
+	and temp,0xff,temp
+	ifetch 1,contru
+	isub temp,null
+	nbranch phci_grp_vendor_patch_bad,zero
+	branch hci_normal_reply
+
+	
+phci_grp_vendor_patch_sec:
+	bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad
+	call phci_grp_vendor_patch_common
+	store 8,mem_pdatatemp
+phci_grp_vendor_patch_sec_loop:
+	call do_aes_cbc	
+	arg 16,loopcnt
+	arg mem_temp_block0,contw
+	call load_uart_sum_loop
+	storet 8,mem_temp
+	arg mem_temp_block2,contw
+	call store_aes_result
+	arg mem_temp_block2,rega
+	arg mem_temp_block0,regb
+	arg mem_temp_block3,contw
+	call xor16	
+	arg 16,loopcnt
+	arg mem_temp_block3,contr
+	call load_ucode_only_loop
+	fetcht 8,mem_temp
+	fetch 8,mem_pdatatemp
+	increase -16,pdata
+	store 8,mem_pdatatemp
+	nbranch phci_grp_vendor_patch_sec_loop,blank
+	branch phci_grp_vendor_patch_check_sum	
+	
+load_ucode_only_loop:
+	ifetch 1,contr
+	hstore 1,core_ucode_data
+	loop load_ucode_only_loop
+	rtn
+
+load_uart_sum_loop:
+	ifetch 1,contru
+	istore 1,contw
+	iadd temp,temp
+	loop load_uart_sum_loop
+	rtn
+
+phci_grp_vendor_patch_sec_init:
+	bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad
+	arg 0,temp
+	arg 16,loopcnt
+	arg mem_temp_block0,contw
+	call load_uart_sum_loop
+	hfetch 1,core_gpio_key2
+	and_into 0xfd,pdata   // disable aes for iv
+	hstore 1,core_gpio_key2
+	arg mem_temp_block0,contr
+	arg 16,loopcnt
+	call aes_load_data
+	call aes_init
+	call aes_clear_data
+	branch phci_grp_vendor_patch_check_sum
+
+
+phci_grp_vendor_done:
+	arg 0x20,loopcnt    //patch switch length
+	arg mem_patch00,contw
+	arg 0,temp //checksum
+phci_grp_vendor_done_loop:
+	ifetch 1,contru
+	istore 1,contw
+	iadd temp,temp
+	loop phci_grp_vendor_done_loop
+	and temp,0xff,temp
+	ifetch 1,contru
+	isub temp,null
+	nbranch phci_grp_vendor_patch_bad,zero
+	jam 0,core_ucode_ctrl
+	call hci_normal_reply
+	call h4_rx_discard_packet
+	call clear_key_buf
+	call wait_uarttx
+	branch soft_reset
+
+phci_grp_vendor_patch_bad:
+	jam 0,core_ucode_ctrl
+	branch start
+	
+phci_grp_vendor_bdaddr:
+	ifetch 6,contru
+	store 6,mem_lap
+	branch hci_normal_reply
+
+
+phci_grp_vendor_mem:
+	ifetch 1,contru
+	store 1,mem_hci_curr_len
+	copy pdata,loopcnt
+	ifetch 2,contru
+	store 2,mem_hci_curr_target
+	copy pdata,contw
+	call uart_copy_rx_bytes
+	branch hci_normal_reply
+
+
+phci_grp_vendor_eep:
+	ifetch 1,contru
+	store 1,mem_hci_curr_len
+	copy pdata,loopcnt
+	ifetch 2,contru
+	store 2,mem_hci_curr_target
+	arg mem_l2cap_rxbuff1,contw
+	call uart_copy_rx_bytes
+	fetcht 1,mem_hci_curr_len
+	arg mem_l2cap_rxbuff1,rega
+	fetch 2,mem_hci_curr_target
+	branch iicd_write_ota_data
+	
+	
+
+	
+hci_normal_reply:
+	force 4,loopcnt
+hci_command_complete:	/* loopcnt is hci length */
+	call hci_get_payload_ptr
+	force 0x1,pdata
+	istore 1,contwu
+	deposit alarm
+	istore 3,contwu
+	force HCI_EVENT_COMMAND_COMPLETE,queue
+hci_send_event:		/* queue:event code, loopcnt: length */
+	bpatchx patch20_4,mem_patch20
+	call hci_get_packet_ptr
+	deposit queue
+	istore 1,contwu
+	deposit loopcnt
+	istore 1,contwu
+hci_send_event_raw:
+	force 5,queue
+	increase 2,loopcnt
+hci_send_packet:
+	branch h4_send_packet_event
+
+hci_send_commu_ready_event:
+	force HCI_EVENT_VENDOR_SPECIFIC,queue
+	call hci_get_payload_ptr
+	setarg HCI_VENDOR_EVENT_COMMU_READY
+	istore 1,contwu
+	force 1,loopcnt
+	branch hci_send_event
+
+hci_get_cmd_complete_ptr:
+	force 12,contwu
+	branch hci_get_tx_ptr
+
+hci_get_payload_ptr:
+	force 8,contwu
+	branch hci_get_tx_ptr
+
+hci_get_packet_ptr:
+	force 6,contwu
+hci_get_tx_ptr:
+	branch h4_get_tx_ptr
+
+	
+
+calc_tx_crc16:
+	pulse crc16
+	enable enable_crc
+crcloop:
+	ifetch 1,contwu
+	inject bucket,8
+	loop crcloop
+	enable enable_parity
+	inject bucket,16
+	disable enable_parity
+	disable enable_crc
+	disable crc16
+	byteswap pdata,pdata
+	rtn
+
+
+
+cmd_exit:
+	jam 0,mem_hci_cmd
+	rtn
+cmd_check_plap:
+	fetch 6,mem_hci_plap
+	fetcht 6,mem_plap
+	isub temp,null
+	rtn
+
+	
+	
+//enable ssp master sm
+cmd_pair:
+	fetch 1,mem_op
+	bbit1 op_inrand_req,cmd_pair_passive
+	call tid_initiate
+	jam LMP_IN_RAND,mem_lmo_opcode2
+	branch cmd_exit
+cmd_pair_passive:
+	set0 op_inrand_req,pdata
+	store 1,mem_op
+	call lmp_accept_inrand
+	setarg 0
+	setflag master,smap_lmptid,pdata		
+	store 1,mem_lmo_tid2
+	branch cmd_exit
+	rtn
+cmd_in_sniff:
+	jam LMP_SNIFF_REQ,mem_lmo_opcode2
+	arg mem_sniff_payload,contw
+	setarg 0
+	isolate1 27,clke_bt
+	setflag true,1,pdata		/* use init 2 if bit27 of clke is 1 */
+	istore 1,contw	
+	setarg 0	/* dsniff */
+	istore 2,contw
+	fetch 2,mem_sniff_param_interval	/* tsniff */
+	istore 2,contw
+	fetch 1,mem_sniff_param_attempt	/* attempt */
+	istore 2,contw
+	fetch 1,mem_sniff_param_timeout	/* timeout */
+	istore 2,contw
+	branch cmd_exit
+	
+cmd_exit_sniff:
+	jam LMP_UNSNIFF_REQ,mem_lmo_opcode2
+	branch cmd_exit
+
+hci_idle_dispatch:
+	call gpio_check_uart_state
+	rtn true
+	arg UART_WAKEUP_RX,temp
+	call gpio_get_bit
+	nbranch uart_wake_up,true
+	jam HCI_RX_WAKE,mem_hci_lt_rx_state
+	rtn
+uart_wake_up:
+	fetch 1,mem_hci_lt_rx_state
+	rtnne HCI_RX_WAKE
+	call hci_exit_lpm
+	branch hci_send_commu_ready_event
+	
+	
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/hid.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/hid.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/hid.prog	(working copy)
@@ -0,0 +1,84 @@
+/**
+* the following API is to send the HID data
+* 
+*/
+
+/**
+* the following API is to process the hid  rx data
+* 
+*/
+//handle the hid data
+
+hid_rx_process:
+	bpatchx patch20_5,mem_patch20
+	fetch 2,mem_l2cap_payload_ptr
+	copy pdata,contr
+	ifetch 1,contr
+	and pdata,0x0f,temp
+	rshift4 pdata,pdata //hidtype
+	beq hid_type_set_idle,hid_rx_process_handshake
+	beq hid_type_set_protocol,hid_rx_process_handshake
+	beq hid_type_data,hid_rx_process_data
+	beq HID_TYPE_SET_REPORT,hid_rx_process_set_report
+	beq HID_TYPE_CONTROL,hid_rx_process_hid_control
+	rtn
+
+hid_rx_process_hid_control:
+	copy temp,pdata
+	beq HID_CONTROL_P_VIRTUALCABLEUNPLUG,hid_rx_process_virtual_cable_unplug
+	beq HID_CONTROL_P_SUSPEND,hid_rx_process_suspend
+	rtn
+	
+hid_rx_process_virtual_cable_unplug:
+	jam BT_EVT_VIRTUAL_CABLE_UNPLUG,mem_fifo_temp
+	call ui_ipc_send_event
+	fetch 1,mem_device_option
+	rtnbit0 dvc_op_mouse
+	copy temp,pdata
+	beq HID_CONTROL_P_VIRTUALCABLEUNPLUG,mouse_irtual_cable_unplug
+	rtn
+hid_rx_process_suspend:
+	rtn
+
+hid_rx_process_set_report:
+	call hid_rx_process_data
+	arg 0x01,rega
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_ctrl_remote_cid
+	istore 2,contw
+	setarg 0x00
+	istore 1,contw
+	rtn
+
+hid_rx_process_handshake:
+	arg 1,regA//payload length
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_ctrl_remote_cid
+	istore 2,contw
+	setarg 0
+	istore 1,contw
+	jam 1,mem_ui_data_txbuff_length
+	fetch 1,mem_hid_control_state
+	set1 l2cap_channel_hid_handshake_done
+	store 1,mem_hid_control_state
+	jam BT_EVT_HID_HANDSHAKE,mem_fifo_temp
+	branch ui_ipc_send_event
+
+hid_rx_process_data:
+	ifetch 1,contr
+	beq HID_REPORT_ID_KB,hid_rx_process_data_hid_kb
+	rtn
+
+hid_rx_process_data_hid_kb:
+	rtn
+
+	
+hid_malloc_tx_buff:
+	call l2cap_malloc
+	copy rega,temp
+	storet 1,mem_ui_data_txbuff_length
+	copy pdata,contw
+	copy rega,pdata
+	istore 2,contw //hid payload length
+	rtn
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/kscan_peipherals.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/kscan_peipherals.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/kscan_peipherals.prog	(working copy)
@@ -0,0 +1,152 @@
+
+
+
+ifdef COMPILE_KEYSCAN
+/****************************************key scan***************************************/
+/******the key_scan use explain******
+
+* First:call kscan_init
+* Second:call kscan_main
+* Finally: the key scanning reault is mem_kscan_value.
+
+******
+***************************************************************************************
+*/
+kscan_init:  
+	fetch 2,mem_kscan_ptr
+	copy pdata,regc
+	call kscan_row_num_select
+	branch kscan_col_num_select
+
+kscan_col_init:
+	setarg 0
+	add regc,KEYSCAN_OFFECT_SHIFT_COUNT,rega
+	istore 1,rega
+	add regc,KEYSCAN_OFFECT_COL_NUM,rega
+	ifetch 1,rega
+	branch kscan_value_init,blank
+	copy pdata,loopcnt
+	add regc,KEYSCAN_OFFECT_COL_CONF_PIN,regb
+kscan_col_loop: 
+	ifetcht 1, regb
+	call gpio_config_output
+	ifetcht 1, regb
+	call gpio_out_active
+	call kscan_value_init             
+	ifetcht 1,regb
+	call gpio_config_input
+	increase 1,regb
+	loop kscan_col_loop
+	rtn  
+kscan_row_num_select:          
+	add regc,KEYSCAN_OFFECT_ROW_NUM,contw
+	ifetch 1,contw 
+	rtn blank
+	copy pdata,loopcnt
+	add regc,KEYSCAN_OFFECT_ROW_CONF_PIN,rega
+	branch kscan_ioselect_input   
+kscan_col_num_select:           
+	add regc,KEYSCAN_OFFECT_COL_NUM,contw
+	ifetch 1,contw 
+	rtn blank
+	copy pdata,loopcnt
+	add regc,KEYSCAN_OFFECT_COL_CONF_PIN,rega
+	branch kscan_ioselect_input
+kscan_ioselect_input: 
+	ifetcht 1,rega
+	call gpio_config_input 
+	increase 1,rega
+	loop kscan_ioselect_input
+	rtn
+kscan_value_init:
+	setarg 0
+	add regc,KEYSCAN_OFFECT_ROW_COUNT,rega
+	istore 1,rega
+	add regc,KEYSCAN_OFFECT_ROW_CONF_PIN,rega
+kscan_save_vaule:
+	ifetcht 1,rega       
+	call gpio_get_bit   
+	add regc,KEYSCAN_OFFECT_VALUE_TEMP,temp
+	ifetch 2,temp
+ 	add regc,KEYSCAN_OFFECT_SHIFT_COUNT,contr
+	ifetcht 1,contr
+	copy temp,queue
+	qsetflag true,pdata
+
+	add regc,KEYSCAN_OFFECT_VALUE_TEMP,temp
+ 	istore 2,temp
+	increase 1,rega
+    
+	add regc,KEYSCAN_OFFECT_SHIFT_COUNT,contw
+	ifetch 1,contw 
+	increase 1,pdata
+	istore 1,contw
+    
+	add regc,KEYSCAN_OFFECT_ROW_COUNT,contw
+	ifetcht 1,contw 
+	increase 1,temp
+	istoret 1,contw
+	add regc,KEYSCAN_OFFECT_ROW_NUM,contw
+	ifetch 1,contw 
+	ixor temp,null  
+	nbranch kscan_save_vaule,zero
+	rtn       
+	
+	
+kscan_lpm_berfore:
+	fetch 2,mem_kscan_ptr
+	copy pdata,regc
+ 	add regc,KEYSCAN_OFFECT_ROW_NUM,contw
+ 	ifetch 1,contw 
+	copy pdata,loopcnt
+	add regc,KEYSCAN_OFFECT_COL_CONF_PIN,rega
+kscan_select_wake:    
+	ifetcht 1,rega
+	call gpio_set_wake   
+	increase 1,rega
+	loop kscan_select_wake
+	rtn
+
+kscan_clkn_bt_timer_check:
+	ifetcht 4,rega
+	copy clkn_bt,pdata
+	isub temp,null
+	rtn positive
+	setarg 0
+	istore 4,rega
+	rtn
+
+kscan_process:
+	fetch 2,mem_kscan_ptr
+	copy pdata,regc
+	add regc,KEYSCAN_OFFECT_BTCLK,rega
+	call kscan_clkn_bt_timer_check
+	ifetch 4,rega
+	add regc,KEYSCAN_OFFECT_BTCLK_INTERVAL,regb
+	ifetcht 1,regb
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	istore 4,rega
+	call kscan_col_init  
+	add regc,KEYSCAN_OFFECT_VALUE_TEMP,rega
+	ifetch 2,rega
+	add regc,KEYSCAN_OFFECT_LASVALUE,rega
+	ifetcht 2,rega
+	istore 2,rega
+	iand temp,pdata
+	add regc,KEYSCAN_OFFECT_VALUE,rega    
+	istore 2,rega 
+	rtn  
+
+endif
+	
+	
+
+
+
+	
+    
+	
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/l2cap.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/l2cap.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/l2cap.prog	(working copy)
@@ -0,0 +1,1929 @@
+/************************************/
+/*initialize L2CAP related variables*/
+/************************************/
+l2cap_init:
+	branch l2cap_init_wake,wake
+l2cap_init_work:
+	setarg mem_l2cap_xmem_end
+	arg mem_l2cap_xmem_start,contw
+	isub contw,loopcnt
+	call clear_mem
+l2cap_init_wake:	
+	bpatchx patch20_6,mem_patch20
+	setarg mem_sdp_mem_end
+	arg mem_sdp_mem_start,contw
+	isub contw,loopcnt
+	call clear_mem
+	setarg mem_l2cap_mem_end
+	arg mem_l2cap_mem_start,contw
+	isub contw,loopcnt
+	call clear_mem
+	branch l2cap_lpm_load_txbuf
+	
+process_rx_l2cap_pkt:
+	bpatchx patch20_7,mem_patch20
+	copy contr,temp
+	//call l2cap_malloc_is_fifo_full
+	//nrtn blank
+	copy temp,contr
+	ifetch 2,contr
+	store 2,mem_l2cap_rx_pkt_length
+	ifetch 2,contr
+	store 2,mem_l2cap_rx_cid
+	deposit contr
+	store 2,mem_l2cap_payload_ptr
+	fetch 1,memui_reconnect_mode
+	beq NO_RECONNECTION,l2cap_rx_multiplexing
+	branch ml2cap_rx_multiplexing
+
+l2cap_rx_multiplexing:
+	fetch 2, mem_l2cap_rx_pkt_length
+	branch l2cap_rx_reset_state,blank
+	bpatchx patch21_0,mem_patch21
+	fetch 1,mem_l2cap_rx_cid
+	beq L2CAP_signal_channel,l2cap_call_proc_signal
+l2cap_rx_multiplexing0:
+	beq L2CAP_SDP_channel,l2cap_call_proc_sdp
+	beq L2CAP_RFCOMM_channel,l2cap_call_proc_rfcomm
+	beq L2CAP_HID_Control_channel,l2cap_call_proc_hid
+	beq L2CAP_HID_Interrupt_channel,l2cap_call_proc_hid
+	branch l2cap_rx_reset_state
+
+l2cap_check_map:
+//	call l2cap_malloc_is_fifo_full
+//	nrtn blank
+	bpatchx patch21_1,mem_patch21
+	call l2cap_malloc_get_full_map
+	fetch 1,mem_used_map
+	beq 0,set_pdata_0
+	beq 1,set_pdata_0
+	beq 2,set_pdata_0
+	beq 3,set_pdata_0
+	beq 0x81,set_pdata_0
+	beq 0xc0,set_pdata_0
+	beq 0x80,set_pdata_0
+	beq 0x40,set_pdata_0
+	rtn
+
+set_pdata_0:
+	setarg 0
+	rtn
+
+
+l2cap_call_proc_signal:
+	call l2cap_check_map
+	nrtn blank
+l2cap_call_proc_signal0:
+	call l2cap_malloc_signal_channel
+	call l2cap_process_signal_pkt
+	fetcht 2,mem_l2cap_signal_tx_length
+	branch l2cap_call_proc_no_reply,blank
+	call l2cap_get_signal_tx_buff
+	fetch 2,mem_l2cap_signal_tx_length
+	istore 2,contw
+	force L2CAP_signal_channel,pdata
+	istore 2,contw
+	branch l2cap_rx_reset_state
+	
+l2cap_call_proc_sigal_pending:
+	fetch 1,mem_l2cap_pending_item
+	rtn blank
+	copy pdata,rega
+	bpatchx patch21_2,mem_patch21
+	fetch 4,mem_l2cap_sdpres_delay_time
+	arg 0x100,temp
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	jam 0,mem_l2cap_pending_item
+	copy rega,pdata
+	beq L2CAP_SDP_channel,l2cap_sdp_conn_succ
+	branch assert
+l2cap_sdp_conn_succ:
+	arg 0,debug
+	call l2cap_malloc_signal_channel
+	call restore_l2cap_req_param
+	call l2cap_get_signal_tx_payload
+	call save_cont_pointers
+	call send_connection_sdp_res
+	call l2cap_get_signal_tx_buff
+	//fetch 2,mem_l2cap_signal_tx_length
+	setarg 0x000c
+	istore 2,contw
+	force L2CAP_signal_channel,pdata
+	istore 2,contw
+	branch l2cap_rx_reset_state
+
+
+
+l2cap_reset_sdp_map:
+	bpatchx patch21_3,mem_patch21
+	fetch 2,mem_sdp_tx_pkt_length
+	increase 4,pdata
+	rshift4 pdata,pdata
+	rshift3 pdata,pdata
+	add pdata,1,temp ///temp: how many128
+	arg mem_tx_fifo3,contr
+	ifetch 3,contr
+	rtn blank
+	store 3,mem_tx_fifo_map_temp
+	fetch 1,mem_tx_fifo_map_temp
+	copy pdata,rega
+	call check_l2cap_map
+	copy regb,pdata
+	store 1,mem_tx_fifo3
+	rtn
+
+check_l2cap_map:
+	arg 0,queue
+	arg 0,regb
+
+check_l2cap_map_loop:
+	sub queue,7,null
+	nrtn positive
+	qisolate1 rega
+	branch check_l2cap_map_used,true
+	branch check_l2cap_map_used2
+
+check_l2cap_map_used:
+	copy temp,pdata
+	branch check_l2cap_map_used2,blank
+	qset1 regb
+	increase -1,temp
+
+check_l2cap_map_used2:
+	increase 1,queue
+	branch check_l2cap_map_loop
+
+l2cap_call_proc_sdp:
+	call l2cap_malloc_is_fifo_empty
+	nrtn blank// not process this packet until fifo empty
+	call l2cap_check_map
+	nrtn blank
+	call l2cap_malloc_sdp_channel
+	call sdp_process
+	call l2cap_reset_sdp_map
+	branch l2cap_call_proc_sdp_common
+
+	
+ml2cap_call_proc_sdp:
+	call l2cap_malloc_is_fifo_empty
+	nrtn blank// not process this packet until fifo empty
+	call l2cap_malloc_sdp_channel
+	call sdp_process
+l2cap_call_proc_sdp_common:
+	call l2cap_get_sdp_tx_buff
+	fetch 2,mem_sdp_tx_pkt_length
+	branch l2cap_call_proc_no_reply,blank
+	istore 2,contw
+	fetch 2,mem_sdp_remote_cid
+	istore 2,contw
+	branch l2cap_rx_reset_state
+
+l2cap_call_proc_hid:
+	call hid_rx_process
+	branch l2cap_rx_reset_state
+
+l2cap_call_proc_rfcomm:
+	bpatchx patch21_4,mem_patch21
+	jam RFCOMM_MALLOC_SUCCEED,mem_rfcomm_malloc_fail_flag
+	call rfcomm_rx_process
+	fetch 1,mem_rfcomm_malloc_fail_flag
+	rtneq RFCOMM_MALLOC_FAIL
+	branch l2cap_rx_reset_state
+l2cap_call_proc_no_reply:
+	call l2cap_malloc_discard
+	//fall through
+l2cap_rx_reset_state:
+	setarg 0
+	store 2,mem_l2cap_rx_pkt_length
+	store 2,mem_l2cap_rx_cid
+	jam L2CAP_RX_DONE,mem_l2cap_rx_done
+	rtn
+/* To process one L2CAP signalling pkt consisting of 1 or more signalling commands.	*/
+l2cap_process_signal_pkt:
+	bpatchx patch21_5,mem_patch21
+	call l2cap_get_signal_tx_payload
+	force 0,regB
+	fetch 2,mem_l2cap_rx_pkt_length
+	copy pdata,regC
+	fetch 2,mem_l2cap_payload_ptr
+	iforce contr
+l2cap_process_signal_pkt_loop:
+	call l2cap_process_one_signal
+	deposit regC
+	increase -4,regC
+	increase -4,pdata
+	nbranch l2cap_process_signal_pkt_loop,blank
+	copy regB,pdata
+	store 2,mem_l2cap_signal_tx_length
+	rtn
+
+l2cap_process_one_signal:
+	bpatchx patch21_6,mem_patch21
+	ifetch 1,contr
+	beq signal_cmd_reject,l2cap_proc_signal_cmd_reject
+	beq signal_connect_req,l2cap_proc_signal_connect_req
+	beq signal_connect_rsp,l2cap_proc_signal_connect_rsp
+	beq signal_config_req,l2cap_proc_signal_config_req
+	beq signal_config_rsp,l2cap_proc_signal_config_rsp
+	beq signal_disconnect_req,l2cap_proc_signal_disconnect_req
+	beq signal_disconnect_rsp,l2cap_proc_signal_disconnect_rsp
+	beq signal_echo_req,l2cap_proc_signal_echo_req
+	beq signal_echo_rsp,l2cap_proc_signal_echo_rsp
+	beq signal_info_req,l2cap_proc_signal_info_req
+	beq signal_info_rsp,l2cap_proc_signal_info_rsp
+	call l2cap_reject_command
+l2cap_process_one_signal_rtn:
+	rtn
+
+l2cap_proc_signal_info_req:
+	ifetch 1,contr //IDs
+	copy pdata,queue
+	ifetch 2,contr //length
+	copy pdata,rega
+	copy regc,pdata
+	isub rega,regc
+	setarg signal_info_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1, contw
+	ifetch 2,contr 
+l2cap_proc_signal_info_req_reply:
+	beq L2CAP_SIG_EXT_FEATRUE,l2cap_proc_signal_info_req_ext
+	beq L2CAP_SIG_FIX_FEATRUE,l2cap_proc_signal_info_req_fix
+	rtn
+l2cap_proc_signal_info_req_ext:
+	setarg 0x020008
+	istore 6, contw
+	setarg 0x0280
+	istore 4, contw
+	force 12,pdata
+	branch l2cap_proc_signal_info_req_common
+l2cap_proc_signal_info_req_fix:
+	setarg 0x3000c
+	istore 6, contw
+	setarg 0x0006
+	istore 8, contw
+	force 16,pdata
+l2cap_proc_signal_info_req_common:
+	iadd regb,regb
+	branch l2cap_process_one_signal_rtn
+	
+ml2cap_proc_signal_info_req:
+	ifetch 1,contr //IDs
+	copy pdata,queue
+	ifetch 2,contr //length
+	copy pdata,rega
+	ifetch 2,contr
+	store 2,mem_temp
+	copy regc,pdata
+	isub rega,regc 
+	call l2cap_get_signal_tx_payload
+	setarg signal_info_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw 
+	fetch 2,mem_temp
+	branch l2cap_proc_signal_info_req_reply
+
+
+/*  Respond to the command reject signal sent from the remote BD.   */
+l2cap_proc_signal_cmd_reject:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	iadd contr,contr
+	copy regC,pdata
+	isub regA,regC
+l2cap_proc_signal_cmd_reject_rtn:
+	branch l2cap_process_one_signal_rtn
+/* Respond to an L2CAP connection request from remote BD. (generate a connection_rsp)	*/
+l2cap_proc_signal_connect_req:
+	call save_cont_pointers
+	//fetch 6,mem_inquiry_bd_addr
+  	//store 6,mem_master_paged_bd_addr
+  	call load_cont_pointers
+	arg 0,debug
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	ifetch 2,contr
+	copy pdata,temp //PSM
+	ifetch 2,contr
+	copy pdata,timeup
+	bpatchx patch21_7,mem_patch21
+	copy temp,pdata
+	beq PSM_SDP,l2cap_proc_signal_connect_req_sdp
+	beq PSM_RFCOMM,l2cap_proc_signal_connect_req_rfcomm
+	beq PSM_HID_control,l2cap_proc_signal_connect_req_hid_ctrl
+	beq PSM_HID_interrupt,l2cap_proc_signal_connect_req_hid_int
+	call l2cap_reject_command
+	branch l2cap_proc_signal_connect_req_rtn
+
+l2cap_proc_signal_connect_req_sdp:
+	call save_cont_pointers
+	arg L2CAP_SDP_channel,temp
+	fetch 2,mem_sdp_remote_cid
+	nbranch already_connected,blank
+	copy timeup,pdata
+	store 2,mem_sdp_remote_cid
+	copy clkn_bt,pdata
+	store 4,mem_l2cap_sdpres_delay_time
+	call store_l2cap_req_param
+	branch  send_connection_pending
+
+store_l2cap_req_param:
+	storet 2,mem_psm
+	deposit timeup
+	store 2,mem_scid
+	deposit rega
+	store 2,mem_cmd_length
+	deposit regb
+	store 2,mem_tt2
+	deposit regc
+	store 2,mem_tt3
+	deposit queue
+	store 2,mem_id
+	rtn
+
+restore_l2cap_req_param:
+	fetcht 2,mem_psm
+	fetch 2,mem_scid
+	copy pdata,timeup
+	fetch 2,mem_cmd_length
+	copy pdata,rega
+	fetch 2,mem_tt2
+	copy pdata,regb
+	fetch 2,mem_tt3
+	copy pdata,regc
+	fetch 2,mem_id
+	copy pdata,queue
+	rtn
+
+l2cap_proc_signal_connect_req_rfcomm:
+	call save_cont_pointers
+	setarg L2CAP_RFCOMM_channel
+	arg L2CAP_RFCOMM_channel,temp
+	fetch 2,mem_RFCOMM_remote_CID
+	nbranch already_connected,blank
+	copy timeup,pdata
+	store 2,mem_RFCOMM_remote_CID
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_rfcomm_state
+	branch send_connection_res
+l2cap_proc_signal_connect_req_hid_ctrl:
+	call save_cont_pointers
+	arg L2CAP_HID_Control_channel,temp
+	fetch 2,mem_hid_ctrl_remote_cid
+	nbranch already_connected,blank
+	copy timeup,pdata
+	store 2,mem_hid_ctrl_remote_cid
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_hid_control_state
+	branch send_connection_res
+l2cap_proc_signal_connect_req_hid_int:
+	call save_cont_pointers
+	deposit clke
+	arg L2CAP_HID_Interrupt_channel,temp
+	fetch 2,mem_hid_int_remote_cid
+	nbranch already_connected,blank
+	copy timeup,pdata
+	store 2,mem_hid_int_remote_cid
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_hid_interrupt_state
+	branch send_connection_res
+
+send_connection_pending:
+	setarg L2CAP_connect_pending
+	store 2,memL2CAP_T1
+	jam L2CAP_SDP_channel,mem_l2cap_pending_item
+	branch send_connection_res0
+send_connection_sdp_res:
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_sdp_state
+send_connection_res:
+	setarg L2CAP_connect_successful
+	store 2,memL2CAP_T1
+send_connection_res0:
+	bpatchx patch22_0,mem_patch22
+	call load_cont_pointers
+	setarg signal_connect_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 0x0008
+	istore 2,contw
+	copy temp,pdata
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	fetch 2,memL2CAP_T1
+	beq L2CAP_connect_pending,connect_pending
+	isolate0 0,debug
+	branch connect_suc,true
+	setarg L2CAP_connect_refused_no_resources
+connect_suc:
+	istore 2,contw
+	force 0x0000,pdata
+	istore 2,contw
+	setarg 12
+	branch connect_req_update_byte_counts
+connect_pending:
+	istore 2,contw
+	force 0x0002,pdata
+	istore 2,contw
+	setarg 12
+	branch connect_req_update_byte_counts
+	
+already_connected:
+	set1 0,debug
+	branch send_connection_res
+connect_req_update_byte_counts:
+	iadd regB,regB
+	copy regC,pdata
+	isub regA,regC
+	branch l2cap_proc_signal_connect_req_rtn
+l2cap_proc_signal_connect_req_rtn:
+	branch l2cap_process_one_signal_rtn
+
+l2cap_proc_signal_connect_rsp:
+	ifetch 1,contr //identifier
+	copy pdata,queue
+	ifetch 2,contr //length
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr //remote cid
+	copy pdata,timeup
+	ifetch 2,contr //local cid
+	copy pdata,temp
+	bpatchx patch22_1,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch l2cap_proc_signal_connect_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch l2cap_proc_signal_connect_rsp_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch l2cap_proc_signal_connect_rsp_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch l2cap_proc_signal_connect_rsp_hid_int,zero
+	rtn
+
+l2cap_proc_signal_connect_rsp_sdp:
+	copy timeup,pdata
+	store 2,mem_sdp_remote_cid
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_sdp_state
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_connect_rsp_rfcomm:
+	copy timeup,pdata
+	store 2,mem_rfcomm_remote_CID
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_rfcomm_state
+	rtn
+l2cap_proc_signal_connect_rsp_hid_int:
+	copy timeup,pdata
+	store 2,mem_hid_ctrl_remote_cid
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_hid_interrupt_state
+	rtn
+l2cap_proc_signal_connect_rsp_hid_ctrl:
+	copy timeup,pdata
+	store 2,mem_hid_int_remote_cid
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_hid_control_state
+	rtn
+
+l2cap_proc_signal_config_req:
+	ifetch 1,contr//identifier
+	copy pdata,queue
+	ifetch 2,contr//length
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr//dest cid
+	copy pdata,temp
+	copy temp,regA
+	bpatchx patch22_2,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch l2cap_proc_signal_config_req_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch l2cap_proc_signal_config_req_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch l2cap_proc_signal_config_req_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch l2cap_proc_signal_config_req_hid_int,zero
+	branch l2cap_reject_command
+	//branch L2CAP_proc_signal_config_req_rtn
+l2cap_proc_signal_config_req_sdp:
+	copy contw, timeup
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	//set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_sdp_state
+	copy timeup,contw
+	arg L2CAP_SDP_channel,timeup
+	fetch 2,mem_sdp_remote_cid
+	copy pdata,temp
+	branch l2cap_send_config_rsp
+l2cap_proc_signal_config_req_hid_ctrl:
+	copy contw, timeup
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	//set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_hid_control_state
+	copy timeup,contw
+	arg L2CAP_HID_Control_channel,timeup
+	fetch 2,mem_hid_ctrl_remote_cid
+	copy pdata,temp
+	branch l2cap_send_config_rsp
+l2cap_proc_signal_config_req_hid_int:
+	copy contw, timeup
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	//set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_hid_interrupt_state
+	copy timeup,contw
+	arg L2CAP_HID_Interrupt_channel,timeup
+	fetch 2,mem_hid_int_remote_cid
+	copy pdata,temp
+	branch l2cap_send_config_rsp
+l2cap_proc_signal_config_req_rfcomm:
+	copy contw, timeup
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	//set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_rfcomm_state
+//	jam UPPERSM_RP_SDP_CONN,mem_upper_sm_remote_page
+	copy timeup,contw
+	arg L2CAP_RFCOMM_channel,timeup
+	fetch 2,mem_RFCOMM_remote_CID
+	copy pdata,temp
+l2cap_send_config_rsp:
+	bpatchx patch22_3,mem_patch22
+	setarg  signal_config_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 0x0006
+	istore 2,contw
+	copy temp,pdata
+	istore 2,contw
+	force 0x00,pdata
+	istore 2,contw
+	force L2CAP_config_success,pdata
+	istore 2,contw
+	force 10,pdata
+	iadd regB,regB
+	//copy temp,pdata
+	storet 2,mem_config_req_dest_CID
+	copy queue,pdata
+	store 1,mem_config_identifier
+	force L2CAP_SDP_channel,pdata
+	icompare 0xff,timeup
+	branch l2cap_send_config_rsp_is_sdp,true
+	increase 1,pdata
+l2cap_send_config_rsp_is_sdp:
+	//store 1,mem_send_config_req
+	rtn
+l2cap_check_channel_state:
+	disable user
+	rtnbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	copy contr,contw
+	increase -1,contw
+	istore 1,contw
+	enable user
+	rtn
+l2cap_send_config_req:
+l2cap_send_config_req_sdp:
+	fetch 1,mem_sdp_state
+	call l2cap_check_channel_state
+	nbranch l2cap_send_config_req_rfcomm,user
+	jam L2CAP_SDP_channel,mem_send_config_req
+	fetch 2,mem_sdp_remote_cid
+	store 2,mem_config_req_dest_CID
+	branch l2cap_generate_config_req
+l2cap_send_config_req_rfcomm:
+	fetch 1,mem_rfcomm_state
+	call l2cap_check_channel_state
+	nbranch l2cap_send_config_req_hid_ctrl,user
+	jam L2CAP_RFCOMM_channel,mem_send_config_req
+	fetch 2,mem_RFCOMM_remote_CID
+	store 2,mem_config_req_dest_CID
+	branch l2cap_generate_config_req
+l2cap_send_config_req_hid_ctrl:
+	fetch 1,mem_hid_control_state
+	call l2cap_check_channel_state
+	nbranch l2cap_send_config_req_hid_int,user
+	jam L2CAP_HID_Control_channel,mem_send_config_req
+	fetch 2,mem_hid_ctrl_remote_cid
+	store 2,mem_config_req_dest_CID
+	branch l2cap_generate_config_req
+l2cap_send_config_req_hid_int:
+	fetch 1,mem_hid_interrupt_state
+	call l2cap_check_channel_state
+	nrtn user//End of sending config req
+	jam L2CAP_HID_Interrupt_channel,mem_send_config_req
+	fetch 2,mem_hid_int_remote_cid
+	store 2,mem_config_req_dest_CID
+	//branch L2CAP_generate_config_req
+
+l2cap_generate_config_req:
+	bpatchx patch22_4,mem_patch22
+	call l2cap_get_req_id
+	call l2cap_malloc_signal_channel
+	force 0,regB
+	call l2cap_get_signal_tx_payload
+	force signal_config_req,pdata
+	istore 1,contw
+	fetch 1,mem_ML2CAP_comm_id
+	istore 1,contw
+	setarg 0x0008
+	istore 2,contw
+	fetch 2,mem_config_req_dest_CID
+	istore 2,contw
+	setarg 0x0000
+	istore 2,contw
+	force 1,pdata
+	istore 1,contw
+	force 2,pdata
+	istore 1,contw
+	fetch 1,mem_send_config_req
+	beq L2CAP_RFCOMM_channel,l2cap_generate_config_req_rfcomm
+	setarg L2CAP_config_MTU_SDP
+	istore 2,contw
+	branch l2cap_generate_config_req_done
+l2cap_generate_config_req_rfcomm:
+	setarg L2CAP_config_MTU_RFCOMM
+	istore 2,contw
+l2cap_generate_config_req_done:
+	arg 0x0c,temp
+	storet 2,mem_l2cap_signal_tx_length
+	call l2cap_get_signal_tx_buff
+	fetch 2,mem_l2cap_signal_tx_length
+	istore 2,contw
+	force L2CAP_signal_channel,pdata
+	istore 2,contw
+	jam 0,mem_send_config_req
+l2cap_proc_signal_config_req_rtn:
+	branch l2cap_process_one_signal_rtn
+
+l2cap_proc_signal_config_rsp:
+	increase 1,contr
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr //source cid
+	copy pdata,regA
+	bpatchx patch22_5,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub rega,null
+	branch l2cap_proc_signal_config_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub rega,null
+	branch l2cap_proc_signal_config_rsp_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub rega,null
+	branch l2cap_proc_signal_config_rsp_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub rega,null
+	branch l2cap_proc_signal_config_rsp_hid_int,zero
+	increase 2,contr
+	ifetch 2,contr
+	iforce null
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_config_rsp_sdp:
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata
+	store 1,mem_sdp_state
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_config_rsp_rfcomm:
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata
+	store 1,mem_rfcomm_state
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_config_rsp_hid_ctrl:
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata
+	store 1,mem_hid_control_state
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_config_rsp_hid_int:
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata
+	store 1,mem_hid_interrupt_state
+	jam BT_EVT_HID_CONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event
+	
+
+
+l2cap_proc_signal_disconnect_req:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr
+	copy pdata,regA
+	ifetch 2,contr
+	copy pdata,timeup
+	copy regA,temp
+	call save_cont_pointers
+	bpatchx patch22_6,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_req_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_req_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_req_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_req_hid_int,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+l2cap_proc_signal_disconnect_req_hid_ctrl:
+	copy timeup,temp
+	fetch 2,mem_hid_ctrl_remote_cid
+	isub temp,null
+	branch l2cap_disconnect_hid_control_now,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+l2cap_proc_signal_disconnect_req_hid_int:
+	copy timeup,temp
+	fetch 2,mem_hid_int_remote_cid
+	isub temp,null
+	branch l2cap_disconnect_hid_interrupt_now,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+
+l2cap_proc_signal_disconnect_req_sdp:
+	copy timeup,temp
+	fetch 2,mem_sdp_remote_cid
+	isub temp,null
+	branch l2cap_disconnect_sdp_now,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+l2cap_disconnect_hid_control_now:
+	call l2cap_reset_hid_ctrl_state
+	branch l2cap_send_disconnect_rsp_pkt
+l2cap_disconnect_hid_interrupt_now:
+	call l2cap_reset_hid_int_state
+	fetch 2, mem_hid_ctrl_remote_cid
+	branch l2cap_send_disconnect_rsp_pkt, blank
+	//set the flag,hid channel close
+	//should we set here?
+	//call HID_mem_lock
+	//fetch 1, mem_hid_cb1
+	//set1 HID_CB_APP_HID_DISCONNECTED,pdata
+	//store 1, mem_hid_cb1
+	//call HID_mem_unlock
+	branch l2cap_send_disconnect_rsp_pkt
+
+l2cap_disconnect_sdp_now:
+	call l2cap_reset_sdp_channel_state
+	fetch 1,mem_upper_sm_ss
+	nbranch l2cap_send_disconnect_rsp_pkt,blank
+	//jam LMP_ENCRYPTION_MODE_REQ,mem_lmo_opcode2
+	//jam UPPERSM_RP_SDP_CONN,mem_upper_sm_remote_page
+	branch l2cap_send_disconnect_rsp_pkt
+l2cap_proc_signal_disconnect_req_rfcomm:
+	copy timeup,temp
+	fetch 2, mem_RFCOMM_remote_CID
+	isub temp,null
+	branch l2cap_disconnect_rfcomm_now,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+l2cap_disconnect_rfcomm_now:
+	call l2cap_reset_rfcomm_channel_state
+	branch l2cap_send_disconnect_rsp_pkt
+l2cap_send_disconnect_rsp_pkt:
+	call load_cont_pointers
+	setarg signal_disconnect_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy regA,pdata
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	force 8,pdata
+	branch l2cap_proc_signal_disconnect_req_rtn
+l2cap_proc_signal_disconnect_req_err_rtn:
+	call load_cont_pointers
+	branch l2cap_proc_signal_disconnect_req_rtn
+l2cap_proc_signal_disconnect_req_rtn:
+	iadd regB,regB
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_disconnect_rsp:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr
+	copy pdata,timeup
+	ifetch 2,contr
+	copy pdata,temp
+	call save_cont_pointers
+	bpatchx patch22_7,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_rsp_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_rsp_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_rsp_hid_int,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_rsp_err_rtn
+l2cap_proc_signal_disconnect_rsp_sdp:
+	copy temp,regA
+	copy timeup,temp
+	fetch 2,mem_sdp_remote_cid
+	isub temp,null
+	call l2cap_reset_sdp_channel_state,zero
+	branch l2cap_proc_signal_disconnect_rsp_rtn
+l2cap_proc_signal_disconnect_rsp_rfcomm:
+	copy temp,regA
+	copy timeup,temp
+	fetch 2,mem_rfcomm_remote_CID
+	isub temp,null
+	call l2cap_reset_rfcomm_channel_state,zero
+	branch l2cap_proc_signal_disconnect_rsp_rtn
+l2cap_proc_signal_disconnect_rsp_hid_ctrl:
+	copy temp,regA
+	copy timeup,temp
+	fetch 2,mem_hid_ctrl_remote_cid
+	isub temp,null
+	call  l2cap_reset_hid_ctrl_state,zero
+	branch l2cap_proc_signal_disconnect_rsp_rtn
+l2cap_proc_signal_disconnect_rsp_hid_int:
+	copy temp,regA
+	copy timeup,temp
+	fetch 2,mem_hid_int_remote_cid
+	isub temp,null
+	call l2cap_reset_hid_int_state,zero
+	branch l2cap_proc_signal_disconnect_rsp_rtn
+l2cap_proc_signal_disconnect_rsp_rtn:
+	call load_cont_pointers
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_disconnect_rsp_err_rtn:
+	branch l2cap_process_one_signal_rtn
+
+/* received an echo request from remote BD.  Will echo the 1st 1 byte back,		*/
+l2cap_proc_signal_echo_req:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	iadd contr,contr
+	setarg 9
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	force 0x0000,pdata
+	istore 2,contw
+	force 4,pdata
+	iadd regB,regB
+	copy regC,pdata
+	isub regA,regC
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_echo_rsp:
+	branch l2cap_process_one_signal_rtn
+
+l2cap_proc_signal_info_rsp:
+	branch l2cap_process_one_signal_rtn
+l2cap_reject_command:
+	force 0,regB
+	call l2cap_get_signal_tx_payload
+	setarg signal_cmd_reject
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 2
+	istore 2,contw
+	setarg cmd_not_understood
+	istore 2,contw
+	increase 6,regB
+	arg 4,regC
+	branch l2cap_process_one_signal_rtn
+
+
+
+l2cap_reset_rfcomm_channel_state:
+	setarg 0
+	store 2,mem_RFCOMM_Tx_pkt_length
+	store 2,mem_RFCOMM_remote_CID
+	jam 0,mem_rfcomm_state
+	rtn
+l2cap_reset_sdp_channel_state:
+	setarg 0
+	store 2,mem_sdp_tx_pkt_length
+	store 2,mem_sdp_remote_cid
+	jam 0,mem_sdp_state
+	rtn
+l2cap_reset_hid_ctrl_state:
+	setarg 0
+	store 2,mem_hid_ctrl_remote_cid
+	jam 0,mem_hid_control_state
+	fetch 1,mem_hid_interrupt_state
+	beq 0,l2cap_reset_hid_disconnected
+	rtn
+
+l2cap_reset_hid_int_state:
+	setarg 0
+	store 2,mem_hid_int_remote_cid
+	jam 0,mem_hid_interrupt_state
+	fetch 1,mem_hid_control_state
+	beq 0,l2cap_reset_hid_disconnected
+	rtn
+	
+l2cap_reset_hid_disconnected:
+	jam BT_EVT_HID_DISCONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event	
+
+l2cap_disconnect_interrupt_req:
+	fetch 1,mem_CONTROL_tasks
+	set0  L2CAP_DISCONNECT_INTERRUPT, pdata
+	store 1,mem_CONTROL_tasks
+	fetch 2, mem_hid_int_remote_cid
+	rtn blank
+	call l2cap_malloc_signal_channel
+	fetch 2, mem_hid_int_remote_cid
+	copy pdata,regA
+	force L2CAP_HID_Interrupt_channel,regB
+	branch l2cap_generate_disconnect_req
+l2cap_disconnect_control_req:
+	fetch 1,mem_CONTROL_tasks
+	set0  L2CAP_DISCONNECT_CONTROL, pdata
+	store 1,mem_CONTROL_tasks
+	fetch 2, mem_hid_ctrl_remote_cid
+	rtn blank
+	call l2cap_malloc_signal_channel
+	fetch 2, mem_hid_ctrl_remote_cid
+	copy pdata,regA
+	force L2CAP_HID_Control_channel,regB
+l2cap_generate_disconnect_req:
+	call l2cap_get_req_id
+	call l2cap_get_signal_tx_payload
+	force signal_disconnect_req,pdata
+	istore 1,contw
+	fetch  1,mem_ML2CAP_comm_id
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy regA,pdata
+	istore 2,contw
+	copy regB,pdata
+	istore 2,contw
+	force 0x08,temp //signal tx length in temp
+	branch ml2cap_send_signal
+
+ml2cap_send_signal_connect_req:
+	bpatchx patch23_0,mem_patch23
+	call l2cap_get_req_id
+	call l2cap_get_signal_tx_payload
+	setarg signal_connect_req
+	istore 1,contw
+	fetch 1,mem_ML2CAP_comm_id
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy temp,pdata	 //PSM
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	arg 8,temp
+	branch ml2cap_send_signal
+ml2cap_send_signal_config_req:
+	bpatchx patch23_1,mem_patch23
+	call l2cap_get_req_id
+	call l2cap_get_signal_tx_payload
+	setarg signal_config_req
+	istore 1,contw
+	fetch 1,mem_ML2CAP_comm_id
+	istore 1,contw
+	setarg 0x0008
+	istore 2,contw
+	/****modigy for nokia*****/
+	copy temp,pdata
+	/*setarg 0x0040*/
+	istore 2,contw
+	setarg 0x0000
+	istore 2,contw
+	setarg 0x01
+	istore 1,contw
+	setarg 0x02
+	istore 1,contw
+	setarg L2CAP_config_MTU_RFCOMM
+	istore 2,contw
+	arg 0xc,temp
+	branch ml2cap_send_signal
+ml2cap_send_signal_disconn_req:
+	bpatchx patch23_2,mem_patch23
+	call l2cap_get_req_id
+	call l2cap_get_signal_tx_payload
+	setarg signal_disconnect_req
+	istore 1,contw
+	fetch 1,mem_ML2CAP_comm_id
+	increase 1,pdata
+	copy contw,regA
+	store 1,mem_ML2CAP_comm_id
+	copy regA,contw
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy temp,pdata
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	arg 0x8,temp
+	//branch ml2cap_send_signal
+	//Fall through
+ml2cap_send_signal:
+	storet 2,mem_l2cap_signal_tx_length
+	copy temp,pdata
+	branch l2cap_malloc_discard,blank
+	call l2cap_get_signal_tx_buff
+	fetch 2,mem_l2cap_signal_tx_length
+	istore 2,contw //make sure that length is still in temp!
+	force L2CAP_signal_channel,pdata
+	istore 2,contw
+	rtn
+
+msdp_send_req_done:
+	fetch 2,mem_sdp_tx_pkt_length
+	branch assert,blank
+	call l2cap_get_sdp_tx_buff
+	fetch 2,mem_sdp_tx_pkt_length
+	istore 2,contw
+	fetch 2,mem_sdp_remote_cid
+	istore 2,contw
+	rtn
+ml2cap_rx_multiplexing:
+	fetch 2, mem_l2cap_rx_pkt_length
+	branch l2cap_rx_reset_state,blank
+	bpatchx patch23_3,mem_patch23
+	fetch 1,mem_l2cap_rx_cid
+	beq L2CAP_signal_channel,ml2cap_call_proc_signal
+	beq L2CAP_SDP_channel,ml2cap_call_proc_sdp
+	beq L2CAP_RFCOMM_channel,l2cap_call_proc_rfcomm
+	beq L2CAP_HID_Control_channel,l2cap_call_proc_hid
+	beq L2CAP_HID_Interrupt_channel,l2cap_call_proc_hid
+	branch l2cap_rx_reset_state
+
+ml2cap_call_proc_signal:
+	bpatchx patch23_4,mem_patch23
+	call l2cap_malloc_signal_channel
+	force 0,regB
+	call l2cap_get_signal_tx_payload
+	copy pdata,contw
+	fetch 2,mem_l2cap_rx_pkt_length
+	copy pdata,regC
+	fetch 2,mem_l2cap_payload_ptr
+	iforce contr
+ml2cap_proc_one_comm_loop:
+	call ml2cap_proc_one_comm
+	increase -4,regC
+	nbranch ml2cap_proc_one_comm_loop,zero
+	copy regB,temp
+	call ml2cap_send_signal
+	branch l2cap_rx_reset_state
+	
+ml2cap_proc_one_comm:
+	ifetch 1,contr
+	beq signal_connect_req,ml2cap_proc_signal_connect_req
+	beq signal_cmd_reject,ml2cap_proc_signal_cmd_reject
+	beq signal_connect_rsp,ml2cap_proc_signal_connect_rsp
+	beq signal_config_rsp,ml2cap_proc_signal_config_rsp
+	beq signal_config_req,ml2cap_proc_signal_config_req
+	beq signal_disconnect_rsp,ml2cap_proc_signal_disconn_rsp
+	beq signal_disconnect_req,ml2cap_proc_signal_disconn_req
+	beq signal_echo_req,l2cap_proc_signal_echo_req
+	beq signal_info_req,ml2cap_proc_signal_info_req
+	branch ml2cap_proc_send_reject
+
+ml2cap_proc_signal_connect_req:
+	call save_cont_pointers
+	//jam NO_RECONNECTION,memui_reconnect_mode
+	call load_cont_pointers
+	branch l2cap_proc_signal_connect_req
+ml2cap_proc_signal_cmd_reject:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+mvptr:
+	ifetch 1,contr
+	increase -1,regA
+	nbranch mvptr,zero
+	rtn
+ml2cap_proc_signal_connect_rsp:
+	ifetch 1,contr //id
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA	//length
+	ifetch 2,contr
+	copy pdata,timeup	//destination	cid
+	ifetch 2,contr
+	copy pdata,temp	//source	cid
+	ifetch 2,contr 		// result
+	sub pdata,0,null
+	branch ml2cap_proc_signal_connect_rsp_sucessful,zero
+	beq L2CAP_connect_refused_PSM_unsupported,ml2cap_proc_signal_connect_refused_result
+	beq L2CAP_connect_refused_no_resources,ml2cap_proc_signal_connect_refused_result
+	branch ml2cap_proc_signal_connect_rsp_mnosucc
+ml2cap_proc_signal_connect_refused_result:
+	jam BT_EVT_ML2CAP_CONN_REFUSED,mem_fifo_temp
+	call ui_ipc_send_event
+ml2cap_proc_signal_connect_rsp_mnosucc:
+	ifetch 2,contr //reason
+	branch mnosucc
+ml2cap_proc_signal_connect_rsp_sucessful:
+	call save_cont_pointers
+	//fetch 1,mem_ML2CAP_comm_id
+	//icompare 0xff,queue
+	//nbranch mnosucc1,true
+	bpatchx patch23_5,mem_patch23
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch ml2cap_proc_signal_connect_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch ml2cap_proc_signal_connect_rsp_rfcomm,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch ml2cap_proc_signal_connect_rsp_hid_int,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch ml2cap_proc_signal_connect_rsp_hid_ctrl,zero
+	branch mnosucc
+ml2cap_proc_signal_connect_rsp_sdp:
+	copy timeup,pdata
+	store 2,mem_sdp_remote_cid
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES
+	store 1,mem_sdp_state
+	branch mnosucc1
+ml2cap_proc_signal_connect_rsp_rfcomm:
+	copy timeup,pdata
+	store 2,mem_RFCOMM_remote_CID
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES
+	store 1,mem_rfcomm_state
+	branch mnosucc1
+ml2cap_proc_signal_connect_rsp_hid_ctrl:
+	copy timeup,pdata
+	store 2,mem_hid_ctrl_remote_cid
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES
+	store 1,mem_hid_control_state
+	branch mnosucc1
+ml2cap_proc_signal_connect_rsp_hid_int:
+	copy timeup,pdata
+	store 2,mem_hid_int_remote_cid
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES
+	store 1,mem_hid_interrupt_state
+	//branch mnosucc1
+
+mnosucc1:
+	call load_cont_pointers
+mnosucc:
+	copy regC,pdata
+	isub regA,regC
+	rtn
+
+ml2cap_proc_signal_config_rsp:
+	ifetch 1,contr		//	Ident
+	copy pdata,queue
+	ifetch 2,contr		//	SigLen
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr		//	DestnCID
+	copy pdata,timeup
+	ifetch 2,contr
+	ifetch 2,contr		//	Get the result value, check success
+	nbranch mcrsdone1,blank
+	call save_cont_pointers
+	//fetch 1,mem_ML2CAP_comm_id
+	//icompare 0xff,queue
+	//nbranch mcfrsdone,true
+	copy timeup,temp
+	bpatchx patch23_6,mem_patch23
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_rsp_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_rsp_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_rsp_hid_int,zero
+ml2cap_proc_signal_config_rsp_sdp:
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+	store 1,mem_sdp_state
+	rtn
+ml2cap_proc_signal_config_rsp_rfcomm:
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+	store 1,mem_rfcomm_state
+	rtn
+ml2cap_proc_signal_config_rsp_hid_ctrl:
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+	store 1,mem_hid_control_state
+	rtn
+ml2cap_proc_signal_config_rsp_hid_int:
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+	store 1,mem_hid_interrupt_state
+	jam BT_EVT_HID_CONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+mcfrsdone:
+	call load_cont_pointers
+mcrsdone1:
+	increase -6,regA
+mloop2:
+	branch mcrsdone,zero
+	increase 1,contr
+	increase -1,regA
+	branch mloop2
+mcrsdone:
+	rtn
+ml2cap_proc_signal_config_req:
+	ifetch 1,contr		//	Ident
+	copy pdata,queue
+	ifetch 2,contr		//	SigLen
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr		//	DestnCID
+	increase 2,contr
+	copy pdata,temp
+	setarg  signal_config_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	increase 2,regA
+	copy regA,pdata
+	istore 2,contw
+	call save_cont_pointers
+	bpatchx patch23_7,mem_patch23
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_req_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_req_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_req_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_req_hid_int,zero
+	branch mcfgrq_done
+ml2cap_proc_signal_config_req_sdp:
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	store 1,mem_sdp_state
+	bbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,ml2cap_proc_signal_config_req_sdp_nsndreq
+	fetcht 1,mem_CONTROL_tasks
+	set1 L2CAP_init_Config_Req,temp
+	storet 1,mem_CONTROL_tasks
+	copy queue,pdata
+	increase 1,pdata
+	store 1,mem_config_identifier
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_sdp_state
+ml2cap_proc_signal_config_req_sdp_nsndreq:
+	fetch 2,mem_sdp_remote_cid
+	store 2,mem_config_req_dest_CID
+	branch mcfgrq_done
+ml2cap_proc_signal_config_req_rfcomm:
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	store 1,mem_rfcomm_state
+	fetch 2,mem_RFCOMM_remote_CID
+	branch mcfgrq_done
+ml2cap_proc_signal_config_req_hid_ctrl:
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	store 1,mem_hid_control_state
+	fetch 2,mem_hid_ctrl_remote_cid
+	branch mcfgrq_done
+ml2cap_proc_signal_config_req_hid_int:
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	store 1,mem_hid_interrupt_state
+	fetch 2,mem_hid_int_remote_cid
+	//branch mcfgrq_done
+
+mcfgrq_done:
+	copy pdata,timeup
+	call load_cont_pointers
+/*******for Nokia**************/
+	copy timeup,pdata
+	/*setarg 0x0040*/
+	istore 2,contw
+	force 0x0000,pdata
+	istore 2,contw
+	force 0x0000,pdata
+	istore 2,contw
+	force 10,pdata
+	iadd regB,regB
+	increase -6,regA
+mloop1:
+	branch mcrqdone,zero
+	ifetch 1,contr
+	istore 1,contw
+	increase 1,regB
+	increase -1,regA
+	branch mloop1
+mcrqdone:
+	rtn
+ml2cap_proc_signal_disconn_req:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+
+	ifetch 2,contr
+	copy pdata,regA
+	ifetch 2,contr
+	copy pdata,timeup
+	call save_cont_pointers
+	bpatchx patch24_0,mem_patch24
+	setarg L2CAP_SDP_channel
+	copy regA,temp
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_sdp,zero
+	setarg L2CAP_HID_Control_channel
+	copy regA,temp
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	copy regA,temp
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_hid_int,zero
+	branch mclsrfc
+ml2cap_proc_signal_disconn_sdp:
+	setarg 0x0000
+	store 2,mem_sdp_tx_pkt_length
+	store 2,mem_sdp_remote_cid
+	store 1,mem_sdp_state
+	branch mclssdp
+ml2cap_proc_signal_disconn_hid_ctrl:
+	call l2cap_reset_hid_ctrl_state
+	branch mclssdp
+ml2cap_proc_signal_disconn_hid_int:
+	call l2cap_reset_hid_int_state
+	//call HID_mem_lock
+	//fetch 1, mem_hid_cb1
+	//set1 HID_CB_APP_HID_DISCONNECTED,pdata
+	//store 1, mem_hid_cb1
+	//call HID_mem_unlock
+	branch mclssdp
+mclsrfc:
+	setarg 0x0000
+	store 2,mem_RFCOMM_Tx_pkt_length
+mclssdp:
+	call load_cont_pointers
+	setarg signal_disconnect_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy regA,pdata
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	force 8,pdata
+	iadd regB,regB
+	rtn
+
+ml2cap_proc_signal_disconn_rsp:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	ifetch 2,contr
+	copy pdata,timeup
+	ifetch 2,contr
+	copy pdata,temp
+	call save_cont_pointers
+	bpatchx patch24_1,mem_patch24
+	fetch 1,mem_ML2CAP_comm_id
+	icompare 0xff,queue
+	nbranch mdisdone,true
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_rsp_rfcomm,zero
+	branch mdisdone
+ml2cap_proc_signal_disconn_rsp_sdp:
+	jam 0,mem_sdp_remote_cid
+	jam 0,mem_sdp_state
+	branch mdisdone
+ml2cap_proc_signal_disconn_rsp_rfcomm:
+	//
+	//
+mdisdone:
+	call load_cont_pointers
+	copy regC,pdata
+	isub regA,regC
+	rtn
+
+ml2cap_proc_send_reject:
+	setarg signal_cmd_reject
+	istore 1,contw
+	ifetch 1,contr
+	istore 1,contw
+	setarg 0x0002
+	istore 2,contw
+	setarg 0x0000
+	istore 2,contw
+	setarg 0x0006
+	iadd regB,regB
+	force 4,regC
+	rtn
+	
+//l2cap command id, 0 is not allowed
+l2cap_get_req_id:
+	fetch 1,mem_ML2CAP_comm_id
+	increase 1,pdata
+	bne 0,l2cap_get_req_id_ok
+	increase 1,pdata
+l2cap_get_req_id_ok:
+	store 1,mem_ML2CAP_comm_id
+	rtn
+
+
+/*********************************************************/
+//char* malloc(short len)
+//input: regA -> len
+//rtn: regB -> pbuff;return from pdata
+//val: queue -> i
+//val: timeup -> buff_cnt
+/*********************************************************/
+l2cap_malloc:
+	bpatchx patch24_2,mem_patch24
+	arg 0,regb
+	call l2cap_malloc_is_fifo_full
+	nbranch assert,blank//assert when fifo full
+	call l2cap_malloc_get_full_map
+ifdef DEBUG_MALLOC
+	call l2cap_malloc_log_get_ptr
+	copy regA,pdata
+	istore 2,contw
+	sub pdata,1024,null
+	branch assert,positive
+	branch assert,blank
+endif
+	arg mem_tx_buff0,regB//pbuff = buff0;
+	arg 0,queue // i = 0;
+l2cap_malloc_loop:
+	fetcht 1,mem_used_map
+	qisolate1 temp
+	branch l2cap_malloc_next,true//if(1 == (used_map & (1 << i)))goto next;
+	call l2cap_malloc_enough
+	sub timeup,0,null// (0 - timeup)
+	branch l2cap_malloc_next,positive//if(buff_cnt <= 0)goto next;
+	call l2cap_malloc_into_fifo
+	branch l2cap_malloc_rtn//return (pbuff);
+l2cap_malloc_next:
+	increase 128,regB//pbuff += BUFF_SIZE;//point to next buff
+	increase 1,queue
+	setarg 8//BUFF_MAX_COUNT
+	isub queue,null //BUFF_MAX_COUNT - i
+	branch l2cap_malloc_loop,positive//while(i < buff_max_count)
+	arg 0,regB//return NULL
+l2cap_malloc_rtn:
+ifdef DEBUG_MALLOC
+	call l2cap_malloc_log_get_ptr
+	copy regB,pdata
+	istore 2,contw
+endif
+	copy regB,pdata
+	branch assert,blank
+	rtn//return pointer via pdata
+	
+/*********************************************************/
+//void* l2cap_malloc_fifo_out(void)
+//output:len -> temp
+//output:ptr ->pdata
+//only get ptr,not free
+/*********************************************************/
+l2cap_malloc_fifo_out:
+	bpatchx patch24_3,mem_patch24
+	call l2cap_malloc_fifo_get_first_ptr
+	increase 1,contr
+	ifetch 2,contr //ptr ->pdata
+	rtn 
+
+/*********************************************************/
+//void free_first_buff_in_fifo(void)
+//only free the first one
+/*********************************************************/
+l2cap_malloc_free:
+	bpatchx patch24_4,mem_patch24
+	call l2cap_malloc_fifo_get_first_ptr
+	copy contr,contw
+	copy contr,temp
+	setarg 0
+	istore 3,contw
+ifdef DEBUG_MALLOC
+	call l2cap_malloc_log_get_ptr
+	setarg 0xaa
+	istore 1,contw
+	istoret 1,contw
+endif
+	rtn
+/*********************************************************/
+//void l2cap_malloc_discard(void)
+//discard the latest malloc
+/*********************************************************/
+l2cap_malloc_discard:
+	bpatchx patch24_5,mem_patch24
+	call l2cap_malloc_is_fifo_empty
+	branch assert,blank
+	fetch 3,mem_tx_fifo2
+	store 3,mem_tx_fifo3
+	fetch 3,mem_tx_fifo1
+	store 3,mem_tx_fifo2
+	fetch 3,mem_tx_fifo0
+	store 3,mem_tx_fifo1
+	rtn
+/*********************************************************/
+//bool fifo_is_full(void)
+//blank == 1: not full
+//blank == 0: full
+/*********************************************************/
+l2cap_malloc_is_fifo_full:
+	bpatchx patch24_6,mem_patch24
+	fetch 3,mem_tx_fifo0
+	rtn
+/*********************************************************/
+//bool fifo_nearly_full(void)
+//blank == 1: nearly full
+//blank == 0: not nearly full
+/*********************************************************/
+l2cap_malloc_is_fifo_nearly_full:
+	bpatchx patch24_7,mem_patch24
+	fetch 3,mem_tx_fifo1
+	rtn
+/*********************************************************/
+//bool fifo_is_empty(void)
+//blank == 1: empty
+//blank == 0: not empty
+/*********************************************************/
+l2cap_malloc_is_fifo_empty:
+	bpatchx patch25_0,mem_patch25
+	fetch 3,mem_tx_fifo3
+	rtn
+/*********************************************************/
+//char* l2cap_malloc_fifo_get_first_ptr(void)
+//output:contr  -->ptr
+/*********************************************************/	
+l2cap_malloc_fifo_get_first_ptr:
+	call l2cap_malloc_is_fifo_empty
+	branch assert,blank // fifo is empty
+	arg mem_tx_fifo0,contr
+ifdef DEBUG_MALLOC
+	arg 5,loopcnt
+l2cap_malloc_free_loop:
+	increase -1,loopcnt
+	copy loopcnt,pdata
+	branch assert,blank
+else
+l2cap_malloc_free_loop:
+endif
+	ifetch 3,contr
+	branch l2cap_malloc_free_loop,blank
+	increase -3,contr
+	rtn
+
+/*********************************************************/
+//char* l2cap_malloc_get_full_map(void)
+//output:mem_used_map  -->full_map
+//add all maps into one
+/*********************************************************/	
+l2cap_malloc_get_full_map:
+	bpatchx patch25_1,mem_patch25
+	arg 4,loopcnt
+	arg mem_tx_fifo0_map,contr
+	arg 0,temp
+l2cap_malloc_get_full_map_loop:	
+	ifetch 3,contr
+	and pdata,0xff,pdata
+	ior temp,temp
+	loop l2cap_malloc_get_full_map_loop
+	storet 1,mem_used_map
+	rtn
+/*********************************************************/
+//void buff_into_fifo(char buff_index, char buff_cnt, short len)
+//input: regA -> len
+//input: regC -> buff_index
+//input: timeup -> buff_cnt
+//val:temp ->   (fifo->map)
+/*********************************************************/
+l2cap_malloc_into_fifo:
+	bpatchx patch25_2,mem_patch25
+	call l2cap_malloc_is_fifo_full
+	nbranch assert,blank //fifo full
+	call l2cap_malloc_is_fifo_empty
+	branch l2cap_malloc_into_fifo_no_push,blank//fifo empty, no need to push
+	fetch 3,mem_tx_fifo1
+	store 3,mem_tx_fifo0
+	ifetch 3,contr//mem_tx_fifo2
+	istore 3,contw//mem_tx_fifo1
+	ifetch 3,contr//mem_tx_fifo3
+	istore 3,contw//mem_tx_fifo2
+	setarg 0
+	istore 3,contw//mem_tx_fifo3
+l2cap_malloc_into_fifo_no_push:
+	arg 0,temp
+	copy timeup,pdata
+	iadd queue,pdata
+l2cap_malloc_into_fifo_loop:
+	qset1 temp//fifo->map |= 1 << i;
+	increase 1,queue
+	isub queue,null
+	nbranch l2cap_malloc_into_fifo_loop,zero
+	//map in temp
+	lshift8 regB,pdata
+	ior temp,pdata
+	store 3,mem_tx_fifo3
+	rtn
+
+/*********************************************************/
+//char is_size_enough(char buff_index, short len)
+//input: regA -> len
+//input: queue -> buff_index
+//rtn: timeup -> buff_cnt
+//val: max_size_fom_buff_index -> temp
+//val: i -> loopcnt
+/*********************************************************/
+l2cap_malloc_enough:
+	bpatchx patch25_3,mem_patch25
+	call l2cap_malloc_get_full_map
+	copy queue,regC//restore buff_index to regC
+	arg 0,temp
+	arg 0,timeup//default return val
+	//increase 1,queue
+l2cap_malloc_enough_loop:
+	copy queue,pdata
+	beq 8,l2cap_malloc_enough_end
+	fetch 1,mem_used_map
+	qisolate1 pdata
+	branch l2cap_malloc_enough_end,true
+	increase 128,temp
+	increase 1,queue
+	copy regA,pdata
+	isub temp,null
+	branch l2cap_malloc_enough_end,zero//(max_size_fom_buff_index ==  len)
+	branch l2cap_malloc_enough_loop,positive//(max_size_fom_buff_index <  len)
+l2cap_malloc_enough_end:
+	copy temp,pdata
+	isub regA,null
+	nbranch l2cap_malloc_enough_rtn,positive// max_size_fom_buff_index - len > 0
+	copy queue,pdata//i
+	copy regC,temp//buff_index
+	isub temp,timeup//return (i - buff_index)
+l2cap_malloc_enough_rtn:
+	copy regC,queue//restore buff_index to queue
+	rtn
+	
+ifdef DEBUG_MALLOC
+l2cap_malloc_log_get_ptr:
+	fetch 2,mem_tx_malloc_log
+	increase 2,pdata
+	store 2,mem_tx_malloc_log
+	sub pdata,62,null
+	nbranch l2cap_malloc_log_clean,positive
+	increase -2,pdata
+	iadd contw,contw
+	rtn
+l2cap_malloc_log_clean:
+	jam 0x00,mem_tx_malloc_log
+	branch l2cap_malloc_log_get_ptr	
+endif
+
+l2cap_malloc_signal_channel:
+	bpatchx patch25_4,mem_patch25
+	arg L2CAP_SIGNAL_MALLOC_SIZE,regA
+	call l2cap_malloc
+	store 2,mem_l2cap_signal_tx_buff_ptr
+	increase 4,pdata
+	store 2,mem_l2cap_signal_tx_payload_ptr
+	setarg 0
+	store 2,mem_l2cap_signal_tx_length
+	rtn
+
+l2cap_get_signal_tx_buff:
+	fetch 2,mem_l2cap_signal_tx_buff_ptr
+	branch l2cap_util_pdata_to_contw
+
+l2cap_get_signal_tx_payload:
+	fetch 2,mem_l2cap_signal_tx_payload_ptr
+	branch l2cap_util_pdata_to_contw
+
+
+l2cap_malloc_sdp_channel:
+	bpatchx patch25_5,mem_patch25
+	arg SDP_MALLOC_SIZE,regA
+	call l2cap_malloc
+	store 2,mem_sdp_tx_buff_ptr
+	increase 4,pdata
+	store 2,mem_sdp_tx_payload_ptr
+	setarg 0
+	store 2,mem_sdp_tx_pkt_length
+	rtn
+
+l2cap_get_sdp_tx_buff:
+	fetch 2,mem_sdp_tx_buff_ptr
+	branch l2cap_util_pdata_to_contw
+
+l2cap_get_sdp_tx_payload:
+	fetch 2,mem_sdp_tx_payload_ptr
+	branch l2cap_util_pdata_to_contw
+
+
+l2cap_malloc_rfcomm_channel:
+	bpatchx patch25_6,mem_patch25
+	call push_stack
+	jam RFCOMM_MALLOC_FAIL,mem_rfcomm_malloc_fail_flag
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	arg RFCOMM_MALLOC_SIZE,regA
+	call l2cap_malloc
+	store 2,mem_rfcomm_tx_buff_ptr
+	increase 4,pdata
+	store 2,mem_rfcomm_tx_payload_ptr
+	setarg 0
+	store 2,mem_rfcomm_tx_pkt_length
+	jam RFCOMM_MALLOC_SUCCEED,mem_rfcomm_malloc_fail_flag
+	branch pop_stack
+
+l2cap_get_rfcomm_tx_buff:
+	fetch 2,mem_rfcomm_tx_buff_ptr
+	branch l2cap_util_pdata_to_contw
+	
+l2cap_util_pdata_to_contw:
+	branch assert,blank
+	copy pdata,contw
+	rtn
+	
+
+l2cap_lpm_save_calc_len:
+	bpatchx patch25_7,mem_patch25
+	arg 0,regb
+	arg mem_tx_fifo0_map,rega
+	increase -2,rega
+l2cap_lpm_save_calc_len_loop:
+	increase 2,rega
+	setarg mem_tx_fifo_end
+	isub rega,null
+	branch l2cap_lpm_save_calc_len_end,zero //end of 2lcap tx fifo
+	ifetch 1,rega
+	increase 1,rega
+	branch l2cap_lpm_save_calc_len_loop,blank
+	ifetcht 2,rega
+	ifetch 2,temp
+	iadd regb,regb
+	increase 4,regb //l2cap header len
+	branch l2cap_lpm_save_calc_len_loop
+l2cap_lpm_save_calc_len_end:
+	copy regb,pdata
+	rtn
+
+
+l2cap_lpm_get_wake_lock:
+	arg wake_lock_l2cap_tx,queue
+	branch lpm_get_wake_lock
+
+l2cap_lpm_put_wake_lock:
+	arg wake_lock_l2cap_tx,queue
+	branch lpm_put_wake_lock
+	
+l2cap_lpm_save_txbuf:
+	bpatchx patch26_0,mem_patch26
+	call l2cap_malloc_get_full_map
+	fetch 1,mem_used_map
+	rtn blank
+	call l2cap_lpm_save_calc_len
+	arg l2cap_lpm_txbuf_len,temp
+	isub temp,null
+	branch l2cap_lpm_get_wake_lock,positive //no enougth space to save l2cap tx data
+	call l2cap_lpm_put_wake_lock
+	arg mem_l2cap_lpm_txbuf,contw
+	arg mem_tx_fifo0,rega
+l2cap_lpm_save_txbuf_loop:
+	setarg mem_tx_fifo_end
+	isub rega,null
+	rtn zero //end of 2lcap tx fifo
+	ifetch 1,rega  //mem_tx_fifoX_map
+	increase 1,rega
+	nbranch l2cap_lpm_save_txbuf_nempty,blank
+	istore 2,contw // length = 0
+	increase 2,rega
+	branch l2cap_lpm_save_txbuf_loop
+l2cap_lpm_save_txbuf_nempty:
+	ifetch 2,rega //ptr
+	increase 2,rega
+	copy pdata,contr
+	ifetch 2,contr  //l2cap len
+	istore 2,contw
+	copy pdata,loopcnt
+	increase 2,loopcnt //add CID len
+	call memcpy
+	branch l2cap_lpm_save_txbuf_loop
+	
+l2cap_lpm_load_txbuf:
+	bpatchx patch26_1,mem_patch26
+	call l2cap_malloc_get_full_map
+	fetch 1,mem_used_map
+	rtn blank
+	arg mem_tx_fifo0_ptr,rega
+	increase -3,rega //mem_tx_fifo0_ptr -3
+	arg mem_l2cap_lpm_txbuf,contr
+l2cap_lpm_load_txbuf_loop:
+	increase 3,rega //mem_tx_fifoX_ptr
+	setarg mem_tx_fifo_end+1
+	isub rega,null
+	rtn zero //end of 2lcap tx fifo
+	ifetch 2,contr
+	branch l2cap_lpm_load_txbuf_loop,blank
+	increase 4,pdata //l2cap header len
+	copy pdata,loopcnt
+	copy contr,regb
+	ifetch 2,rega //ptr
+	copy pdata,contw
+	copy regb,contr
+	increase -2,contr
+	call memcpy
+	branch l2cap_lpm_load_txbuf_loop
+	
+
+
+	
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/le.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/le.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/le.prog	(working copy)
@@ -0,0 +1,1839 @@
+ifdef COMPILE_LE
+//******************************************//
+//*************LE INIT ****************//
+//******************************************//
+
+
+le_init_conn:
+	bpatchx patch26_2,mem_patch26
+	disable wake
+	jam 1,mem_le_conn_handle
+	jam 3,mem_le_state
+	jam 1,mem_le_arq
+	setarg -1
+	store 2,mem_le_event_count
+	force 0,pdata
+	store 1,mem_le_ch
+	store 1,mem_le_op
+	store 3,mem_sniff_rcv
+	store 3,mem_sniff_lost
+	store 5,mem_le_pcnt_tx
+	set1 39,pdata
+	store 5,mem_le_pcnt_rx
+	jam 1,mem_le_txheader
+	jam 0,mem_le_txlen
+	branch le_supervision_flush
+
+le_init_master:
+	bpatchx patch26_3,mem_patch26
+	enable master
+	jam lemode_master,mem_le_mode
+	jam 1,mem_le_att_handle
+	jam 1,mem_le_search_handle_start
+	setarg 0xffff
+	store 2,mem_le_search_handle_end
+	force 0,pdata
+	store 5,mem_le_pcnt_rx
+	set1 39,pdata
+	store 5,mem_le_pcnt_tx	
+	branch le_init_conn
+
+
+le_init_slave:
+	bpatchx patch26_4,mem_patch26
+	disable master
+ 	setarg 0x17
+ 	store 2,mem_le_remote_mtu
+	jam lemode_slave,mem_le_mode
+	jam 0,mem_le_adv_enable
+	jam 0,mem_lpm_current_mult
+	jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state
+	jam FLAG_LE_ENC_NULL,mem_le_enc_state
+	fetch 2,mem_le_superto
+	store 2,mem_le_init_superto
+	fetch 2,mem_le_tsniff
+	mul32 pdata,5,pdata
+	rshift4 pdata,pdata
+	store 2,mem_le_superto			// vol.6 part B 4.5.2 only 6*conninterval before establish
+	branch le_init_conn
+	
+
+//******************************************//
+//*************LE main process*********//
+//******************************************//
+le_dispatch:
+	call le_enable
+	call le_scan
+	call le_adv
+	branch le_disable
+
+le_conn_dispatch:
+	bpatchx patch26_5,mem_patch26
+	call le_enable
+	call app_process_ble
+	fetch 1,mem_le_mode
+	beq lemode_master,le_master_dispatch
+	branch le_slave_dispatch
+	
+//******************************************//
+//***********LE master process*********//
+//******************************************//
+	
+le_master_dispatch:
+	bpatchx patch26_6,mem_patch26
+	enable master
+	call le_supervision_update
+	branch le_master_disconn,positive
+	call check_ble_disabled
+	call le_setup
+	call le_prepare_tx
+	disable match
+	call le_transmit_receive_sifs
+	nrtn match
+	bpatchx patch26_7,mem_patch26
+	fetch 1,mem_le_conn_rcv
+	increase 1,pdata
+	store 1,mem_le_conn_rcv
+	call le_acknowledge
+	disable master
+	rtn
+	
+le_master_disconn:
+	call le_disconnect
+	disable master
+	rtn
+	
+//******************************************//
+//***********LE slave process***********//
+//******************************************//
+le_slave_dispatch:
+	bpatchx patch27_0,mem_patch27
+	jam 0,mem_le_md_count
+ifdef SECURE_CONNECTION
+	call sp_calc_sequence_256
+	call le_secure_connect_sm
+endif
+	disable attempt
+	call le_supervision_update
+	branch le_slave_disconn,positive
+	call check_ble_disabled
+	call le_setup
+	call le_receive_slave
+	nbranch le_slave_unsync,sync	// vol.6 part B 4.5.1 respond even crc error
+	call le_got_first_packet
+	branch le_slave_match,match
+	branch le_slave_cont
+	
+
+le_slave_match:
+	bpatchx patch27_1,mem_patch27
+	fetch 1,mem_le_md_count
+	pincrease 1
+	store 1,mem_le_md_count
+	beq LE_MD_MAX_COUNT,le_slave_cont
+	call le_acknowledge
+	call le_prepare_tx
+	call le_transmit_norx
+	call le_parse
+	fetch 2,mem_cb_ble_transmit
+	call callback_func
+	call le_check_md
+	branch le_slave_more_data,user
+le_slave_cont:
+	bpatchx patch27_2,mem_patch27
+	call le_pairing_sm
+ 	call le_check_paring_time
+	call check_51cmd
+	fetch 1,mem_le_op
+	bbit1 op_disconn,le_slave_disconn
+le_slave_unsync:
+	bpatchx patch27_3,mem_patch27
+	call le_lpm_set_mult
+	call le_update_channel_map
+	call le_update_param
+	branch calc_clke_offset
+
+
+le_check_md:
+	disable user
+	bmark1 mark_ble_rx_md,enable_user
+	bmark1 mark_ble_tx_md,enable_user
+	rtn
+
+
+le_slave_more_data:
+	bpatchx patch27_4,mem_patch27
+	enable attempt
+	call le_transmit_receive_sifs_notx
+	branch le_slave_match,match
+	branch le_slave_cont
+
+le_slave_disconn:
+
+	//fall through
+le_disconnect:
+	bpatchx patch27_5,mem_patch27
+	call le_clear_connection_info
+	call app_disconn_reason_collect_ble
+ifdef SECURE_CONNECTION
+	call sp_initialize_256
+endif
+	jam BT_EVT_LE_DISCONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event
+
+le_clear_connection_info:
+	setarg 0
+	store 9,mem_le_tx_buff_used
+	jam 0,mem_le_conn_handle
+	jam lemode_idle,mem_le_mode
+	jam 0,mem_le_state
+	jam FLAG_LE_ENC_NULL,mem_le_enc_state
+	jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state
+	rtn
+	
+le_got_first_packet:
+	bpatchx patch27_6,mem_patch27
+	fetch 1,mem_le_conn_rcv
+	increase 1,pdata
+	store 1,mem_le_conn_rcv
+	fetch 1,mem_le_state
+	rtnbit1 lestate_got_first_packet
+	set1 lestate_got_first_packet
+	store 1,mem_le_state
+	fetch 2,mem_le_init_superto
+	store 2,mem_le_superto
+	setarg 0
+	store 4,mem_le_transmit_window
+	rtn
+
+
+le_enable:
+	bpatchx patch27_7,mem_patch27
+	jam 0x36,rf_adc_goff        /*For BLE, tune AGC_gain_offset, Max added*/
+	jam 0x5f,rf_agc_nsat        //for BLE
+	enable le
+	jam 7,rfen_ulp			/* enable ulp */
+	call check_ble_disabled
+	fetch 1,mem_250k_freq_enable	//default: 0
+	rtn blank
+	jam 0xb8,rf_iq_gain
+	rtn
+	
+le_disable:
+	bpatchx patch28_0,mem_patch28
+	jam 0x2e,rf_adc_goff        /*For BR/EDR, tune AGC_gain_offset, Max added*/
+	jam 0xff,rf_agc_nsat         //for EDR&BR
+	disable le
+	jam 3,rfen_ulp
+	arg 0,stop_watch
+	rtn
+	
+le_prep:
+	disable enable_crc
+	disable enable_white
+	fetch 3,mem_le_crcinit
+	iforce crc24_init
+	fetch 1,mem_le_ch_mapped
+	reverse pdata,temp
+	set1 1,temp
+	rshift temp,white_init
+	rtn
+	
+
+lerx_setfreq:
+	call le_setfreq
+	call set_freq_rx
+	setarg param_pll_setup
+	call sleep
+	branch rf_rx_enable
+
+letx_setfreq:
+	branch txon,match
+letx_setfreq0:
+	call le_setfreq
+	branch set_freq_tx
+le_setfreq:
+	bpatchx patch28_1,mem_patch28
+	call set_sync_on
+	fetch 1, mem_le_testtype
+	nbranch le_ctf_test,blank
+	fetch 1,mem_le_ch_mapped
+	sub pdata,36,null
+	branch le_ctf_normal,positive
+	force 0,temp
+	rtneq 37
+	force 24,temp
+	rtneq 38
+	force 78,temp
+	rtn
+	
+le_ctf_normal:
+	sub pdata,10,null
+	branch le_ctf_low,positive
+	increase 1,pdata
+	
+le_ctf_low:	
+	lshift pdata,pdata
+	add pdata,2,temp
+	rtn
+	
+le_ctf_test:
+	fetch 1,mem_le_ch_mapped
+	lshift pdata,temp
+	rtn
+
+le_sca_map:
+	arg 500,temp
+	rtn blank
+	arg 250,temp
+	rtneq 1
+	arg 150,temp
+	rtneq 2
+	arg 100,temp
+	rtneq 3
+	arg 75,temp
+	rtneq 4
+	arg 50,temp
+	rtneq 5
+	arg 40,temp
+	rtneq 6
+	arg 20,temp
+	rtn
+
+
+	
+le_adv_access:
+	setarg 0x8e89be
+	lshift8 pdata,pdata
+	or_into 0xd6,pdata
+	iforce access
+	setarg 0x555555
+	store 3,mem_le_crcinit
+	rtn
+
+le_setup:
+	bpatchx patch28_2,mem_patch28
+	enable swfine
+	fetch 4,mem_le_access
+	iforce access
+	call le_map_channel
+	setarg 0x200
+	branch le_setup_master,master
+	fetch 2,mem_le_receive_window
+	rshift pdata,pdata
+le_setup_master:
+	arg param_pll_setup,temp
+	iadd temp,pdata
+	call ahead_window
+	deposit clke
+	store 6,mem_le_rxon_ts
+	rtn
+
+le_next_adv_channel:
+	bpatchx patch28_3,mem_patch28
+	fetch 1,mem_le_ch_mapped
+	beq 37,le_next_adv_channel_curr_channel_37
+	beq 38,le_next_adv_channel_curr_channel_38
+	beq 39,le_next_adv_channel_curr_channel_39
+	branch le_next_adv_channel_curr_channel_39
+
+le_next_adv_channel_curr_channel_37:
+	fetcht 1,mem_le_adv_channel_map
+	isolate1 BIT_ADV_CHANNEL_MAP_38,temp		//check 38 channel enable
+	branch set_le_next_adv_channel_38,true
+	isolate1 BIT_ADV_CHANNEL_MAP_39,temp		//check 39 channel enable
+	branch set_le_next_adv_channel_39,true
+	branch set_le_next_adv_channel_37
+
+
+le_next_adv_channel_curr_channel_38:
+	fetcht 1,mem_le_adv_channel_map
+	isolate1 BIT_ADV_CHANNEL_MAP_39,temp		//check 39 channel enable
+	branch set_le_next_adv_channel_39,true
+	isolate1 BIT_ADV_CHANNEL_MAP_37,temp		//check 37 channel enable
+	branch set_le_next_adv_channel_37,true
+	branch set_le_next_adv_channel_38
+
+
+le_next_adv_channel_curr_channel_39:
+	fetcht 1,mem_le_adv_channel_map
+	isolate1 BIT_ADV_CHANNEL_MAP_37,temp		//check 37 channel enable
+	branch set_le_next_adv_channel_37,true
+	isolate1 BIT_ADV_CHANNEL_MAP_38,temp		//check 38 channel enable
+	branch set_le_next_adv_channel_38,true
+	branch set_le_next_adv_channel_39
+
+
+
+set_le_next_adv_channel_37:
+	jam 37,mem_le_ch_mapped
+	fetch 1,mem_le_adv_channel_map_temp
+	set1 BIT_ADV_CHANNEL_MAP_37,pdata
+	store 1,mem_le_adv_channel_map_temp
+	rtn
+
+set_le_next_adv_channel_38:
+	jam 38,mem_le_ch_mapped
+	fetch 1,mem_le_adv_channel_map_temp
+	set1 BIT_ADV_CHANNEL_MAP_38,pdata
+	store 1,mem_le_adv_channel_map_temp
+	rtn
+
+set_le_next_adv_channel_39:
+	jam 39,mem_le_ch_mapped
+	fetch 1,mem_le_adv_channel_map_temp
+	set1 BIT_ADV_CHANNEL_MAP_39,pdata
+	store 1,mem_le_adv_channel_map_temp
+	rtn
+
+
+
+le_context_nexthop:
+	bpatchx patch28_4,mem_patch28
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	rtnbit0 mode_le
+	add rega,coffset_le_event_cnt,contw
+	ifetch 2,contw
+	increase 1,pdata
+	istore 2,contw
+	add rega,coffset_le_hop,contr
+	ifetch 1,contr
+	add rega,coffset_le_ch,contw
+	ifetcht 1,contw
+	iadd temp,pdata
+	sub pdata,36,null
+	branch le_nexthop_nowrap,positive
+	increase -37,pdata
+le_nexthop_nowrap:
+	istore 1,contw
+	rtn
+
+
+le_calc_channel_map:
+	bpatchx patch28_5,mem_patch28
+	fetch 5,mem_le_channel_map
+	force 0,temp
+	force 37,loopcnt
+le_count_channels_loop:
+	bbit0 0,le_count_channels_notused
+	increase 1,temp
+le_count_channels_notused:
+	rshift pdata,pdata
+	loop le_count_channels_loop
+	add temp,-1,pdata
+	store 1,mem_le_channels
+	rtn
+
+le_map_channel:
+	bpatchx patch28_6,mem_patch28
+	fetch 1,mem_le_ch
+	iforce queue
+	fetcht 5,mem_le_channel_map
+	qisolate1 temp
+	branch le_map_channel_end,true
+le_map_channel_next:
+	bpatchx patch28_7,mem_patch28
+	fetch 1,mem_le_channels
+	isub queue,pdata
+	branch le_map_channel_cont,positive
+	sub pdata,-1,queue
+	branch le_map_channel_next
+le_map_channel_cont:
+	copy queue,loopcnt
+	force 0,queue
+le_map_channel_loop:
+	qisolate1 temp
+	branch le_map_channel_skip,true
+	increase 1,loopcnt
+le_map_channel_skip:
+	deposit loopcnt
+	branch le_map_channel_end,blank
+	increase 1,queue
+	increase -1,loopcnt
+	branch le_map_channel_loop
+le_map_channel_end:
+	deposit queue
+	store 1,mem_le_ch_mapped
+	rtn
+
+
+le_wait_tx:
+	branch le_wait_master,master
+	until null,timeout
+	rtn
+	
+le_wait_master:
+	arg 0xea0,timeup
+	until clkn_rt,meet
+	rtn
+
+le_receive_adv:
+	disable swfine
+	fetch 2,mem_le_scan_window
+	copy pdata,timeup
+	branch le_receive_packet
+
+
+le_receive_slave:
+	bpatchx patch29_0,mem_patch29
+	enable swfine
+	fetch 2,mem_le_receive_window
+	fetcht 4,mem_le_transmit_window
+	iadd temp,timeup
+le_receive_packet:
+	call lerx_setfreq
+le_receive_rxon:
+	bpatchx patch29_1,mem_patch29
+	call le_prep
+	disable match
+	enable decode_fec0
+	enable is_rx
+	disable is_tx
+	copy timeup,stop_watch
+	correlate null,timeout
+	branch le_receive_on_attempt,attempt
+	copy clke,temp
+	storet 6,mem_sync_clke
+le_receive_on_attempt:
+	nbranch end_of_packet,sync
+	branch le_receive_skip,attempt
+	arg param_clke_cal_le,clke_rt
+	copy bt_clk,clke_bt
+	fetch 1,mem_le_state
+	bbit0 lestate_got_first_packet,le_receive_skip
+	call lpm_adjust_clk,wake
+le_receive_skip:
+	bpatchx patch29_2,mem_patch29
+	call save_rssi
+	enable enable_white
+	enable enable_crc
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	store 1,mem_le_rxbuf
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	and pdata,0x3f,loopcnt
+	branch lerx_nopayload,zero
+	
+lerx_loop:
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	loop lerx_loop
+	
+lerx_nopayload:
+	bpatchx patch29_3,mem_patch29
+	parse demod,bucket,24	
+	enable swfine
+	arg param_sifs,stop_watch		// start SIFS timer after last bit of crc
+	rshift32 pdata,pdata
+	rshift16 pdata,pdata
+	istore 3,contw
+	branch end_of_packet,crc_failed
+	enable match
+	fetch 1,mem_last_freq
+	add pdata,0,rega				// ble 2M Medium Frequency
+	call rf_write_freq				/* set frequency to tx mode freq */
+	disable decode_fec0
+	branch set_sync_on
+
+le_transmit_receive_sifs:
+	bpatchx patch29_4,mem_patch29
+	call le_transmit
+le_transmit_receive_sifs_notx:
+	fetcht 1,mem_last_freq
+	call set_freq_rx
+	call rf_rx_enable
+	enable swfine
+	arg 5500,timeup 
+	branch le_receive_rxon
+
+le_transmit_norx:
+	call le_transmit
+	branch end_of_packet
+	
+le_transmit:
+	bpatchx patch29_5,mem_patch29
+	call le_prep
+	call letx_setfreq
+	branch le_transmit0
+	
+le_transmit0:
+	set1 TXGFSK,radio_ctrl
+	enable encode_fec0
+	enable is_tx
+	disable is_rx
+	call le_wait_tx
+	rshift16 access,pdata
+	rshift8 pdata,pdata
+	rshift4 pdata,pdata
+	inject mod,40
+	enable enable_white
+	enable enable_crc
+	bpatchx patch29_6,mem_patch29
+	fetch 1,mem_le_txheader
+	inject mod,8
+	ifetch 1,contr
+	and pdata,0x3f,loopcnt
+	inject mod,8
+	branch letr_nopayload,zero
+letr_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop letr_loop
+	
+letr_nopayload:
+	enable enable_parity
+	inject mod,24
+	disable enable_parity
+	until null,tx_clear
+	nop 100          /* flush out the last bit */
+	disable encode_fec0
+	rtn
+	
+le_send_adv_ind:
+	bpatchx patch29_7,mem_patch29
+	fetch 1,mem_le_adv_type
+	beq ADV_DIRECT_IND,le_send_adv_direct_ind
+	fetch 1,mem_le_adv_own_addr_type
+	lshift4 pdata,pdata
+	lshift2 pdata,pdata
+	store 1,mem_le_txheader
+	fetcht 1,mem_le_adv_data_len
+	add temp,6,pdata
+	store 1,mem_le_txlen
+	fetch 6,mem_le_lap
+	store 6,mem_le_txpayload
+	copy temp,loopcnt
+	arg mem_le_adv_data,contr
+	call memcpy_fast
+	branch le_send_adv_transmit
+le_send_adv_direct_ind:
+	fetch 1,mem_le_adv_direct_addr_type
+	lshift4 pdata,pdata
+	lshift2 pdata,pdata
+	increase 1,pdata
+	store 1,mem_le_txheader
+	setarg 12
+	store 1,mem_le_txlen
+	fetch 6,mem_le_lap
+	store 6,mem_le_txpayload
+	fetch 6,mem_hci_plap
+	istore 6,contw
+le_send_adv_transmit:
+	bpatchx patch2a_0,mem_patch2a
+	fetch 1,mem_le_adv_transmit
+	increase 1,pdata
+	store 1,mem_le_adv_transmit
+	arg 1800,stop_watch
+	disable match
+	branch le_transmit_receive_sifs
+	
+le_send_scan_request:
+	bpatchx patch2a_1,mem_patch2a
+	fetch 1,mem_le_scan_type
+	rtnne LE_SCAN_TYPE_ACTIVE
+	fetch 1,mem_le_adv_transmit
+	increase 1,pdata
+	store 1,mem_le_adv_transmit
+	arg 0x0c03,temp// length + SCAN_REQ PDU
+	fetch 1,mem_le_scan_own_addr_type
+	nsetflag blank,LE_SENDER_ADDR_BIT,temp
+	copy regA,pdata
+	nsetflag blank,LE_RECEIVER_ADDR_BIT,temp	
+	storet 2,mem_le_txheader
+	fetch 6,mem_le_lap
+	istore 6,contw
+	fetch 6,mem_le_plap
+	istore 6,contw
+	branch le_transmit_receive_sifs
+
+
+le_send_scan_response:
+	bpatchx patch2a_2,mem_patch2a
+	arg SCAN_RSP,temp
+	fetch 1,mem_le_adv_own_addr_type
+	nsetflag blank,LE_SENDER_ADDR_BIT,temp
+	storet 1,mem_le_txheader
+	fetcht 1,mem_le_scan_data_len
+	add temp,6,pdata
+	store 1,mem_le_txlen
+	fetch 6,mem_le_lap
+	store 6,mem_le_txpayload
+	arg mem_le_scan_data,contr
+	copy temp,loopcnt
+	call memcpy_fast
+	call le_transmit_norx
+	branch le_adv_not_match
+
+le_connect_request:
+	bpatchx patch2a_3,mem_patch2a
+	force -1,pdata
+	setsect 2,1
+	store 5,mem_le_channel_map
+	call le_calc_channel_map	
+	force 4,loopcnt
+	arg mem_le_access,contw
+	call generate_random_loop	
+	fetch 2,mem_le_timeout
+	store 2,mem_le_superto
+le_con_req_hop_retry:
+	random pdata
+	and_into 0xf,pdata
+	sub pdata,4,null
+	branch le_con_req_hop_retry,positive
+	store 1,mem_le_hop
+	store 1,mem_tmp1
+	bpatchx patch2a_4,mem_patch2a
+	fetcht 2,mem_le_conn_interval
+	storet 2,mem_le_tsniff	
+	copy temp,regc			// tsniff in regc
+	add clkn_bt,7,pdata			// leave space for offset
+	idiv regc
+	call wait_div_end
+	remainder rega
+	isub rega,pdata
+	iadd regc,pdata
+	fetcht 2,mem_le_dsniff
+	iadd temp,pdata
+	store 4,mem_le_anchor
+	isub clkn_bt,rega
+	increase -6,rega			// window offset
+	arg 0x2205,regb			// length & CONN_REQ PDU
+	fetch 1,mem_le_conn_own_addr_type
+	nsetflag blank,LE_SENDER_ADDR_BIT,regb
+	fetch 1,mem_le_conn_peer_addr_type
+	nsetflag blank,LE_RECEIVER_ADDR_BIT,regb
+	copy regb,pdata
+	store 2,mem_le_txheader
+	fetch 6,mem_le_lap
+	istore 6,contw//own addr
+	fetch 6,mem_le_plap
+	istore 6,contw// peer addr
+	fetch 4,mem_le_access
+	istore 4,contw
+	random pdata
+	istore 2,contw				/* crc init */
+	random pdata
+	istore 1,contw
+	force 2,pdata				/* window size */	
+	istore 1,contw
+	rshift2 rega,pdata
+	istore 2,contw				/* window offset */
+	rshift2 regc,pdata			
+	istore 2,contw				/* conn Interval */
+	bpatchx patch2a_5,mem_patch2a
+	setarg 0					/* slave latency */
+	istore 2,contw
+	fetch 2,mem_le_timeout
+	istore 2,contw
+	fetch 5,mem_le_channel_map
+	istore 5,contw				/* channel map */
+	fetch 1,mem_le_hop
+	arg param_le_sca,temp
+	ior temp,pdata
+	istore 1,contw
+	call le_transmit_norx
+	setarg mem_le_txheader
+	add pdata,18,contr
+	ifetch 3,contr
+	store 3,mem_le_crcinit
+	rtn
+		
+le_init_adv:
+	bpatchx patch2a_6,mem_patch2a
+	disable master
+	branch le_adv_access
+	
+
+
+le_update_param:
+	fetch 1,mem_le_state
+	rtnbit0 lestate_update_param
+	fetch 2,mem_le_event_count
+	fetcht 2,mem_le_instant
+	isub temp,pdata
+	nrtn positive
+	store 2,mem_pdatatemp
+	bpatchx patch2a_7,mem_patch2a
+	fetch 1,mem_le_state
+	set0 lestate_update_param,pdata
+	set0 lestate_got_first_packet,pdata
+	store 1,mem_le_state
+	fetch 4,mem_le_anchor
+	fetcht 2,mem_le_tsniff
+	storet 2,mem_temp
+	isub temp,rega
+	bpatchx patch2b_0,mem_patch2b
+	fetch 1,mem_le_new_param
+	store 1,mem_le_window_size
+	ifetcht 2,contr
+	ifetch 2,contr
+	lshift2 pdata,pdata
+	store 2,mem_le_tsniff
+	lshift2 temp,temp
+	iadd temp,pdata
+	ifetcht 4,contr
+	storet 4,mem_le_slave_latency	// and superTO
+	iadd rega,pdata
+	copy pdata,regab
+	fetch 2,mem_le_tsniff
+	fetcht 2,mem_temp	//last sniff
+	isub temp,pdata		//last sniff - new sniff
+	fetcht 2,mem_pdatatemp
+	imul32 temp,pdata
+	iadd regab,pdata
+	store 4,mem_le_anchor
+	call le_receive_window_size
+	fetch 2,mem_le_superto
+	store 2,mem_le_init_superto
+	rtn
+
+
+le_update_channel_map:
+	bpatchx patch2b_1,mem_patch2b
+	fetch 1,mem_le_state
+	rtnbit0 lestate_update_map
+	fetch 2,mem_le_event_count
+	fetcht 2,mem_le_instant
+	isub temp,pdata
+	nrtn positive
+	fetch 1,mem_le_state
+	set0 lestate_update_map,pdata
+	store 1,mem_le_state
+ 	fetch 5,mem_le_new_map
+	store 5,mem_le_channel_map
+	branch le_calc_channel_map	
+	
+	
+le_acknowledge:
+	bpatchx patch2b_2,mem_patch2b
+	call le_supervision_flush
+	call le_check_wak
+	fetch 1,mem_le_rxbuf
+	isolate1 md,pdata
+	setflag true,mark_ble_rx_md,mark
+	rshift pdata,pdata
+	ixor temp,pdata
+	isolate1 nesn,pdata
+	setflag true,mark_old_packet,mark	/* retransmit */
+	rtnmark1 mark_old_packet
+	fetch 1,mem_le_rxbuf+1			
+	branch le_ack_unenc,blank		/* empty packet, no decryption */
+	fetch 1,mem_le_state
+	bbit0 lestate_encryption,le_ack_unenc
+	call load_sk
+	call le_decrypt
+	nrtn blank
+le_ack_unenc:
+	fetcht 1,mem_le_arq
+	setflip nesn,temp
+	storet 1,mem_le_arq
+	rtn
+
+	
+le_check_wak:
+	bpatchx patch2b_3,mem_patch2b
+	fetcht 1,mem_le_arq
+	isolate0 wak,temp
+	rtn true
+	fetch 1,mem_le_rxbuf
+	lshift pdata,pdata
+	ixor temp,pdata
+	rtnbit0 sn			/* received NESN is same as SN, NAK */
+	set0 wak,temp
+	setflip sn,temp
+	storet 1,mem_le_arq
+	compare 3,temp,3
+	nrtn true
+	fetch 1,mem_le_txpayload
+	beq LL_START_ENC_REQ,le_set_enc
+	fetch 1,mem_le_enc_state
+	beq FLAG_LE_ENC_PAUSE,le_clear_enc
+	rtn
+	
+
+le_set_enc:
+	fetch 1,mem_le_state
+	set1 lestate_encryption,pdata
+	store 1,mem_le_state
+	rtn	
+	
+le_clear_enc:
+	bpatchx patch2b_4,mem_patch2b
+	jam FLAG_LE_ENC_NULL,mem_le_enc_state
+	arg 0,pdata
+	store 4,mem_le_last_mic
+	store 5,mem_le_pcnt_tx
+	set1 39,pdata
+	store 5,mem_le_pcnt_rx
+	fetch 1,mem_le_state
+	set0 lestate_encryption,pdata
+	store 1,mem_le_state
+	rtn
+
+
+le_wait_adv:
+	bpatchx patch2b_5,mem_patch2b
+	call le_next_adv_channel
+	call le_receive_adv
+	fetch 1,mem_le_adv_waitcnt
+	increase 1,pdata
+	store 1,mem_le_adv_waitcnt
+	rtn
+
+
+le_scan:
+	bpatchx patch2b_6,mem_patch2b
+	fetch 1,mem_le_scan_enable
+	rtnne LE_SCAN_ENABLE
+	arg le_scan_interval_timer,queue
+	call timer_check
+	nrtn blank
+	fetch 2,mem_le_scan_interval
+	fetcht 2,mem_le_scan_window
+	isub temp,pdata
+	arg le_scan_interval_timer,queue
+	call timer_init
+	disable master
+	call le_init_adv
+	call le_wait_adv
+	nrtn match
+	bpatchx patch2b_7,mem_patch2b
+	fetch 6,mem_le_rxbuf+2
+	store 6,mem_le_plap
+//	call le_scan_dongle
+
+	fetch 1,mem_le_adv_rcv
+	increase 1,pdata
+	store 1,mem_le_adv_rcv
+	call le_create_conn
+	rtn master
+	call le_send_scan_request
+	nrtn match
+	bpatchx patch2c_0,mem_patch2c
+	fetch 1,mem_le_scanrsp_rcv
+	increase 1,pdata
+	store 1,mem_le_scanrsp_rcv
+	fetch 9,mem_le_rxbuf+8
+	store 9,mem_tmp_buffer
+	rtn
+	
+le_create_conn:
+	bpatchx patch2c_1,mem_patch2c
+	fetch 1,mem_cmd_le_create_conn
+	rtnne hci_cmd_le_create_conn
+	fetch 6,mem_le_plap
+	fetcht 6,mem_le_conn_peer_addr
+	isub temp,null
+	nrtn zero
+	call context_new
+	nrtn zero
+	call le_connect_request
+	call le_init_master
+	bpatchx patch2c_2,mem_patch2c
+	jam 0,mem_hci_cmd
+	jam 0,mem_le_peer_sca
+	jam 0,mem_le_scan_enable
+	jam 0,mem_cmd_le_create_conn
+	branch context_save
+	
+le_scan_check_sender_addr_type:
+	arg 1,rega// sender_addr_type
+	fetch 1,mem_le_rxbuf
+	rtnbit1 LE_SENDER_ADDR_BIT
+	arg 0,rega
+	rtn
+
+
+
+le_prepare_tx:
+	bpatchx patch2c_3,mem_patch2c
+	fetch 1,mem_le_arq
+	rtnbit1 wak
+	call le_check_tx_md
+	call le_fifo_get_first_tx_ptr	//no packet to send
+	branch le_send_empty,blank
+	ifetch 1,contr
+	ifetcht 1,contr
+	copy temp,rega
+	isub rega,pdata
+	arg LE_MAX_PAKET_LEN,temp
+	call not_greater_than
+	copy pdata,temp
+	ifetch 1,contr
+	copy pdata,type
+	copy rega,pdata
+	iadd contr,contr
+	arg mem_le_txpayload,contw
+	copy temp,loopcnt
+	call memcpy
+	call le_update_tx_type
+	call le_send_packet
+	
+	call le_fifo_get_first_tx_ptr
+	ifetch 1,contr
+	copy pdata,rega
+	copy contr,regc
+	ifetcht 1,contr
+	copy temp,regb
+	isub regb,pdata
+	arg LE_MAX_PAKET_LEN,temp
+	call not_greater_than
+	iadd regb,pdata
+	istore 1,regc
+	isub rega,null
+	nrtn zero
+	branch le_fifo_release_first_node
+
+	
+le_check_tx_md:
+	call le_check_continue
+	rtnmark1 mark_ble_tx_md
+	fetch 1,mem_le_configuration
+	bbit0 BIT_BLE_TRANSMIT_PACKET_BY_MD,le_clear_md
+	call le_fifo_get_second_tx_ptr	//no packet to send
+	branch le_clear_md,blank
+	branch le_set_md
+
+	
+le_check_continue:
+	call le_fifo_get_first_tx_ptr	//no packet to send
+	branch le_clear_md,blank
+	ifetch 1,contr				//pdata:length
+	ifetcht 1,contr				//temp:offest
+	isub temp,pdata			//pdata:length - offset
+	sub pdata,LE_MAX_PAKET_LEN,null	
+	branch le_clear_md,positive				//27 > length -offset
+le_set_md:
+	set1 mark_ble_tx_md,mark
+	rtn
+
+le_clear_md:
+	set0 mark_ble_tx_md,mark
+	rtn
+
+le_update_tx_type:
+	copy rega,pdata
+	rtn blank
+	arg LLID_CONTINUE,type
+	rtn
+
+
+le_att_check_notification_enable: // temp ->handle,output-> pdata,output :contr->rega
+	bpatchx patch2c_4,mem_patch2c
+	increase 1,temp
+	call le_att_get_handle_ptr
+	increase -2,contr
+	ifetch 2,contr
+	arg CLIENT_CHARACTERTIC_CONFIGURATION,temp
+	isub temp,null
+	nrtn zero
+	increase 1,contr
+	copy contr,rega
+	ifetch 1,contr
+	rtn
+	
+
+le_send_empty:
+	force 0,temp
+	force 1,type
+	
+le_send_packet:
+	bpatchx patch2c_5,mem_patch2c
+	storet 1,mem_le_txlen
+	fetcht 1,mem_le_arq
+	set1 wak,temp
+	and temp,0xfc,pdata
+	ior type,pdata
+	store 1,mem_le_arq
+	and_into 0x1f,pdata
+	isolate1 mark_ble_tx_md,mark
+	setflag true,md,pdata
+	store 1,mem_le_txheader
+
+	fetch 1,mem_le_txheader
+	compare 1,type,3
+	nbranch le_send_no_txlen,true
+	fetch 1,mem_le_txlen
+	rtn blank
+le_send_no_txlen:	
+	fetch 1,mem_le_state
+	rtnbit0 lestate_encryption
+	call load_sk
+	branch le_encrypt
+
+
+get_lpm_wake_ble_rx_lock:
+	arg wake_lock_ble_rx,queue
+	branch lpm_get_wake_lock
+
+put_lpm_wake_ble_rx_lock:
+	arg wake_lock_ble_rx,queue
+	branch lpm_put_wake_lock
+
+
+le_parse:
+	bpatchx patch2c_6,mem_patch2c
+	rtnmark1 mark_old_packet
+	call le_fifo_check_full
+	nrtn blank
+	fetch 1,mem_le_rxbuf
+	and pdata,0x3,pdata
+	store 1,mem_le_packet_llid
+	ifetch 1,contr
+	and pdata,0x1f,pdata
+	store 1,mem_le_packet_size
+	rtn blank							//empty rtn
+	copy contr,pdata
+	store 2,mem_le_payload_ptr
+	fetch 1,mem_le_packet_llid
+	beq LLID_LE_LL,le_parse_ll
+le_parse_l2cap:
+	call le_check_l2cap_complete
+	nbranch get_lpm_wake_ble_rx_lock,user
+	call put_lpm_wake_ble_rx_lock
+	fetch 2,mem_le_payload_ptr
+	copy pdata,contr
+	ifetch 2,contr	//l2cap len
+	store 2,mem_le_l2cap_size
+	bpatchx patch2c_7,mem_patch2c
+	ifetch 2,contr
+	beq LE_L2CAP_CID_ATT,le_parse_att
+	beq LE_L2CAP_CID_SMP,le_parse_smp
+	beq LE_L2CAP_CID_SIGNAL,le_parse_signaling
+	rtn
+
+
+le_check_l2cap_complete:
+	fetch 1,mem_le_packet_llid
+	beq LLID_START,le_check_l2cap_llid_start
+	beq LLID_CONTINUE,le_check_l2cap_llid_continue
+	rtn
+
+//input: pdata is CID number
+//output: 	if CID is legal ,enable user
+//		if ICD is illegal,disable user 
+le_check_l2cap_CID_legal:
+	call enable_user
+	arg LE_L2CAP_CID_ATT,temp
+	isub pdata,null
+	rtn zero
+	arg LE_L2CAP_CID_SIGNAL,temp
+	isub pdata,null
+	rtn zero
+	arg LE_L2CAP_CID_SMP,temp
+	isub pdata,null
+	rtn zero
+	branch disable_user
+
+	
+le_check_l2cap_llid_start:
+	fetch 2,mem_le_payload_ptr
+	copy pdata,contr
+	ifetch 2,contr
+	store 2,mem_le_l2cap_size
+	ifetch 2,contr			//CID
+	call le_check_l2cap_CID_legal
+	nrtn user
+	fetcht 1,mem_le_packet_size
+	storet 1,mem_le_packet_len_recved
+	fetch 2,mem_le_l2cap_size
+	increase 4,pdata
+	isub temp,null
+	branch enable_user,zero
+	fetch 1,mem_le_packet_size
+	copy pdata,loopcnt
+	arg mem_le_l2capbuf,contw
+	fetch 2,mem_le_payload_ptr
+	copy pdata,contr
+	call memcpy
+	branch disable_user
+
+//no input
+//output: 	if CID is legal ,enable user
+//		if ICD is illegal,disable user 
+le_check_l2cap_continue_legal:
+	call enable_user
+	fetch 1,mem_le_packet_len_recved
+	nrtn blank
+	branch disable_user
+
+le_check_l2cap_llid_continue:
+	call le_check_l2cap_continue_legal
+	nrtn user
+	fetch 1,mem_le_packet_len_recved
+	arg mem_le_l2capbuf,contw
+	iadd contw,rega
+	fetcht 1,mem_le_packet_size
+	iadd temp,pdata
+	store 1,mem_le_packet_len_recved
+	fetch 1,mem_le_packet_size
+	copy pdata,loopcnt
+	copy rega,contw
+	fetch 2,mem_le_payload_ptr
+	copy pdata,contr
+	call memcpy_fast
+	setarg mem_le_l2capbuf
+	store 2,mem_le_payload_ptr		//update ptr->mem_le_l2capbuff
+	fetch 2,mem_le_l2cap_size
+	increase 4,pdata
+	fetcht 1,mem_le_packet_len_recved
+	isub temp,null
+	branch enable_user,zero
+	branch disable_user
+
+
+
+
+	
+le_get_search_att_type:
+	call store_contr
+	arg mem_le_search_att_type_length,contw
+le_get_search_common:	
+	fetch 2,mem_le_l2cap_size
+	increase -5,pdata
+le_get_search_common2:		
+	istore 1,contw
+	copy pdata,loopcnt
+	call get_contr
+	branch memcpy_fast	
+	
+le_get_search_att_uuid:
+	call store_contr
+	arg mem_le_search_uuid_length,contw
+	branch le_get_search_common
+
+
+	/* rega pointers to data, regb is length */
+le_writeatt_cb:
+	fetch 2,mem_cb_att_write
+	branch callback_func
+	
+le_supervision_update:
+	fetcht 4,mem_le_supervision_timer
+	call get_clkbt
+	isub temp,timeup					/* and to 28 bits */
+	deposit timeup
+	fetcht 2,mem_le_superto
+	lshift4 temp,temp
+	lshift temp,temp
+	isub temp,pdata
+	rtn
+	
+le_supervision_flush:
+	call get_clkbt
+	store 4,mem_le_supervision_timer
+	rtn
+
+
+le_adv:
+	jam 36,mem_le_ch_mapped
+	jam 0,mem_le_adv_channel_map_temp
+le_adv_loop:
+	bpatchx patch2d_0,mem_patch2d
+	fetch 1,mem_le_adv_enable
+	rtn blank
+	arg le_adv_interval_timer,queue
+	call timer_check
+	nrtn blank
+	bpatchx patch2d_1,mem_patch2d
+le_adv_loop_tx:
+	disable master
+	enable swfine
+	call le_init_adv
+	call le_next_adv_channel
+	call le_send_adv_ind
+	nbranch le_adv_not_match,match
+	fetch 1,mem_le_req_rcv
+	increase 1,pdata
+	store 1,mem_le_req_rcv
+	fetch 1,mem_le_rxbuf
+	and pdata,0x0f,pdata
+	beq SCAN_REQ,le_send_scan_response
+	beq CONNECT_REQ,le_parse_connect_req
+le_adv_not_match:
+	bpatchx patch2d_2,mem_patch2d
+	random pdata 
+	arg 0x1ff,temp
+	iand temp,pdata
+	add pdata,250,pdata
+	call delay
+	fetch 1,mem_le_adv_channel_map_temp
+	fetcht 1,mem_le_adv_channel_map
+	isub temp,null
+	nbranch le_adv_loop,zero
+	arg le_adv_interval_timer,queue
+	fetch 2,mem_le_adv_interval
+	branch timer_init
+	
+
+le_receive_window_size:
+	bpatchx patch2d_3,mem_patch2d
+	fetch 1,mem_le_peer_sca
+	call le_sca_map
+	fetch 2,mem_le_tsniff
+	imul32 temp,pdata
+	arg 375,temp
+	imul32 temp,pdata
+	arg 100000,temp
+	idiv temp
+	fetch 1,mem_le_window_size
+	arg 20000,temp
+	imul32 temp,pdata
+	iadd temp,pdata
+	store 4,mem_le_transmit_window
+	bpatchx patch2d_4,mem_patch2d
+	fetch 2,mem_rx_window_sniff
+	call wait_div_end
+	quotient temp
+	iadd temp,pdata
+	store 2,mem_le_receive_window
+	rtn
+
+le_parse_connect_req:
+	bpatchx patch2d_5,mem_patch2d
+	fetch 6,mem_le_rxbuf+8
+	fetcht 6,mem_le_lap
+	isub temp,null
+	nrtn zero
+	call le_scan_check_sender_addr_type
+	copy rega,pdata
+	store 1,mem_le_conn_peer_addr_type
+	fetch 7,mem_le_rxbuf+21
+	store 7,mem_tmp_buffer
+	ifetch 8,contr
+	istore 8,contw
+	fetch 6,mem_le_rxbuf+2
+	store 6,mem_le_plap
+	increase 6,contr
+	ifetch 8,contr
+	store 8,mem_le_access 	// and crcinit & window size
+	ifetcht 2,contr				// transmit offset
+	bpatchx patch2d_6,mem_patch2d
+	lshift2 temp,temp			
+	ifetch 2,contr				// connInterval
+	lshift2 pdata,pdata
+	store 2,mem_le_tsniff
+	store 4,mem_le_anchor
+	isub temp,pdata
+	add pdata,-2,clke_bt
+	ifetch 9,contr
+	store 9,mem_le_slave_latency// and super to & channel map
+	bpatchx patch2d_7,mem_patch2d
+	ifetch 1,contr
+	rshift4 pdata,temp
+	rshift temp,temp
+	storet 1,mem_le_peer_sca
+	and_into 0x1f,pdata
+	store 1,mem_le_hop
+	call le_receive_window_size
+	call le_calc_channel_map
+	call le_init_slave
+	call context_new
+	nrtn zero
+	bpatchx patch2e_0,mem_patch2e
+	call calc_clke_offset
+	call le_l2cap_reset_signaling_identifier
+	jam BT_EVT_LE_CONNECTED,mem_fifo_temp
+	call ui_ipc_send_event
+	branch context_save
+	
+
+le_init_attlist_search:
+	bpatchx patch2e_1,mem_patch2e
+	fetch 2,mem_le_search_handle_start
+	iforce regb
+	fetch 2,mem_le_search_handle_end
+	iforce regc
+	fetch 2,mem_ui_le_uuid_table
+	iforce contr
+	enable user
+	rtn
+
+	/* return handle in pdata, blank:end of list, positive:in range */
+le_att_handle_inrange:
+	ifetch 2,contr
+	rtn blank
+	isub regb,null			/* less than start ? */
+	nrtn positive
+	isub regc,null			/* greater than end ? */
+	rtn zero
+	branch le_att_handle_blank,positive
+	force 1,null
+	rtn
+le_att_handle_blank:
+	force 0,pdata
+	rtn
+
+
+	/* handle in temp, return pointer in contr to length, blank not found */
+le_att_get_handle_ptr:
+	call le_att_get_handle_ptr2
+	branch le_att_get_handle_ptr_found,zero
+	rtn
+	
+le_att_get_handle_ptr2:
+	bpatchx patch2e_2,mem_patch2e
+	fetch 2,mem_ui_le_uuid_table
+	iforce contr
+le_att_get_handle_loop1:
+	ifetch 2,contr
+	rtn blank
+	isub temp,null
+	rtn zero
+	ifetch 1,contr
+	iadd contr,contr	
+	ifetch 1,contr			// length  
+	iadd contr,contr
+	branch le_att_get_handle_loop1
+le_att_get_handle_ptr_found:
+	ifetch 1,contr
+	iadd contr,contr	
+	rtn	
+
+
+
+le_att_get_short_uuid_ptr:
+	bpatchx patch2e_3,mem_patch2e
+	fetch 2,mem_ui_le_uuid_table
+	iforce contr
+le_att_get_short_uuid_loop:
+	ifetch 2,contr
+	rtn blank
+	ifetch 1,contr
+	iadd contr,contr
+	increase -2,contr
+	ifetch 2,contr
+	isub temp,null
+	rtn zero
+	ifetch 1,contr			 
+	iadd contr,contr
+	branch le_att_get_short_uuid_loop	
+
+
+
+le_att_get_handle_info_from_ptr:
+	fetch 2, mem_le_cur_attlist_start_ptr
+	branch le_att_get_handle_info_fast
+
+le_att_get_handle_info:
+	bpatchx patch2e_4,mem_patch2e
+	fetch 2,mem_ui_le_uuid_table
+le_att_get_handle_info_fast:
+	iforce contr
+	copy temp,rega
+le_att_get_handle_loop:
+	ifetch 2,contr
+	branch le_att_unfind_handle,blank
+	isub rega,null
+	branch le_att_finded_handle, zero
+	ifetch 1,contr			// length  
+	iadd contr,contr	
+	ifetch 1,contr			//length 
+	iadd contr,contr
+	branch le_att_get_handle_loop
+le_att_unfind_handle:
+	branch disable_blank
+
+le_att_finded_handle:
+	ifetch 1,contr
+	store 1,mem_le_cur_uuid_length
+	copy pdata,loopcnt
+	arg mem_le_cur_uuid,contw
+	call memcpy_fast
+	ifetch 1,contr
+	store 1,mem_le_curr_att_len
+	call store_contr
+	branch enable_blank
+
+	
+le_modified_name:
+	bpatchx patch2e_5,mem_patch2e
+	call le_modified_name_att_list
+	branch le_modified_name_adv
+
+le_modified_name_att_list:
+	arg UUID_CHRCTR_DEVICE_NAME,temp
+	call le_att_get_short_uuid_ptr
+	rtn blank
+	ifetch 1,contr						// attribute length
+	copy contr,contw
+	fetcht 1,mem_le_name_len
+	copy temp,loopcnt
+	isub temp,null
+	nbranch le_name_length_longer_than_att,positive
+	isub temp,temp
+	arg mem_le_name,contr
+	call memcpy
+	copy temp,loopcnt
+	ncall memcpy_empty,zero
+	rtn
+le_name_length_longer_than_att:
+	copy pdata,loopcnt
+	arg mem_le_name,contr
+	branch memcpy_fast
+
+
+le_modified_name_adv:
+	arg mem_le_adv_data_len+32,regc
+	arg mem_le_adv_data,rega
+	call le_modified_name_adv_and_scan
+	setarg 0
+	setflag user,0,pdata
+	store 1,mem_pdatatemp
+	arg mem_le_scan_data_len+32,regc
+	arg mem_le_scan_data,rega
+	call le_modified_name_adv_and_scan
+	rtn user
+	fetch 1,mem_pdatatemp
+	branch assert,blank
+	rtn
+
+
+le_modified_name_adv_and_scan:
+	bpatchx patch2e_6,mem_patch2e
+	call enable_user
+	call clear_temp_block
+	arg 0,regb	//current length
+	arg mem_le_data_temp,contw
+	call le_modified_name_adv_loop
+	fetch 1,mem_le_name_len
+	add pdata,1,temp
+	iadd regb,rega	
+	increase 2,rega
+	sub rega,0x1f,null
+	nbranch le_modified_name_adv_and_scan_name_overflow,positive
+	istoret 1,contw		//store ble name length
+	arg GAP_ADTYPE_LOCAL_NAME_COMPLETE,temp
+	istoret 1,contw		//store ble name type
+	iforce loopcnt
+	call memcpy_fast
+	copy rega,regb
+le_modified_name_adv_and_scan_store_data:
+	deposit regb
+	store 1,mem_le_data_len_temp
+	arg mem_le_data_len_temp,contr
+	setarg -32
+	iadd regc,contw
+	branch memcpy32
+
+le_modified_name_adv_and_scan_name_overflow:
+	call disable_user
+	branch le_modified_name_adv_and_scan_store_data
+	
+le_modified_name_adv_loop:
+	ifetch 1,rega		//pdata:length
+	rtn blank			//length is zero,ending find
+	pincrease 1		//length += 1
+	ifetcht 1,contr		//pdata:type
+	sub temp,GAP_ADTYPE_LOCAL_NAME_COMPLETE,null
+	branch le_modified_name_adv_found_name,zero
+	iadd regb,regb	
+	copy rega,contr
+	iforce loopcnt
+	call memcpy_fast
+	copy contr,rega
+le_modified_name_adv_loop2:
+	deposit rega
+	isub regc,null
+	rtn positive
+	branch le_modified_name_adv_loop
+
+le_modified_name_adv_found_name:
+	iadd rega,rega
+	branch le_modified_name_adv_loop2
+
+
+memcpy_empty:
+	setarg SPACE
+	istore 1,contw
+	loop memcpy_empty
+	rtn
+
+	
+le_lpm_set_mult:
+	bpatchx patch2e_7,mem_patch2e
+	disable wake
+	branch le_lpm_set_mult_attempt,attempt
+	nbranch le_lpm_lost,match
+le_lpm_set_mult_attempt:
+	call lpm_match
+	fetch 2,mem_rx_window_sniff
+	store 2,mem_le_receive_window
+
+	nbranch lpm_mult_short,match
+	bmark1 mark_old_packet,lpm_mult_short
+
+	fetch 1,mem_le_packet_size
+	nbranch lpm_mult_short,blank		// rx not empty, short interval
+	fetch 1,mem_le_txlen
+	nbranch lpm_mult_short,blank		// tx not empty, short interval
+	
+	fetch 1,mem_le_configuration
+	bbit1 BIT_BLE_SHORT_MULT,lpm_mult_short	//check flag,if flag is 1,always short mult
+	
+	fetch 1,mem_le_state
+	bbit1 lestate_update_param,lpm_mult_short
+	branch lpm_mult_wait_timeout
+	
+le_lpm_lost:
+	fetcht 2,mem_rx_window_sniff
+	rshift temp,temp
+	fetch 2,mem_le_receive_window
+	iadd temp,pdata
+	store 2,mem_le_receive_window
+	branch lpm_lost
+
+///////////////////////////////BLE CONFIG//////////////////////////////////////////
+le_set_config_fixed_tk:
+	arg BIT_BLE_PASSKEY_FIXED_KEY,queue
+	branch le_set_config
+
+le_clr_config_fixed_tk:
+	arg BIT_BLE_PASSKEY_FIXED_KEY,queue
+	branch le_clr_config
+
+le_set_config_fixed_ltk:
+	arg BIT_BLE_PAIRING_FIXED_LTK,queue
+	branch le_set_config
+
+le_clr_config_fixed_ltk:
+	arg BIT_BLE_PAIRING_FIXED_LTK,queue
+	branch le_clr_config
+
+le_set_config_more_data:
+	arg BIT_BLE_TRANSMIT_PACKET_BY_MD,queue
+	branch le_set_config
+
+le_clr_config_more_data:
+	arg BIT_BLE_TRANSMIT_PACKET_BY_MD,queue
+	branch le_clr_config
+
+le_set_config_read_authentication:
+	arg BIT_BLE_READ_AUTH,queue
+	branch le_set_config
+
+le_clr_config_read_authentication:
+	arg BIT_BLE_READ_AUTH,queue
+	branch le_clr_config
+
+le_set_config_write_authentication:
+	arg BIT_BLE_WRITE_AUTH,queue
+	branch le_set_config
+
+le_clr_config_write_authentication:
+	arg BIT_BLE_WRITE_AUTH,queue
+	branch le_clr_config
+
+le_set_config_short_mult:
+	arg BIT_BLE_SHORT_MULT,queue
+	branch le_set_config
+
+le_clr_config_short_mult:
+	arg BIT_BLE_SHORT_MULT,queue
+	branch le_clr_config
+
+
+le_set_config:
+	fetch 1,mem_le_configuration
+	qset1 pdata
+	store 1,mem_le_configuration
+	rtn
+
+le_clr_config:
+	fetch 1,mem_le_configuration
+	qset0 pdata
+	store 1,mem_le_configuration
+	rtn
+
+le_set_fixed_ltk:
+	setarg 0x112233
+	store 3,mem_le_fixed_ltk
+	setarg 0x445566
+	istore 3,contw
+	setarg 0x778899
+	istore 3,contw
+	setarg 0x001122
+	istore 3,contw
+	setarg 0x334455
+	istore 3,contw
+	setarg 0x66
+	istore 1,contw
+	rtn
+
+
+le_set_justwork:
+	setarg 0x01000302
+	store 4,mem_le_pres
+	setarg 0x010010
+	store 3,mem_le_pres_max_keysize
+	jam 1,mem_le_pairing_mode
+	rtn
+
+/////////////////////////////////////////////////////////////////////////
+
+le_fifo_malloc_tx_empty:
+	arg 0,rega
+	arg LLID_EMPTY,type
+	branch le_fifo_malloc_tx
+
+
+//rega:len regb:ll opcode
+le_fifo_malloc_tx_ll:
+	arg LLID_LE_LL,type
+	call le_fifo_malloc_tx
+	copy regb,pdata
+	istore 1,contw
+	rtn
+	
+
+//rega:len regb:cid
+le_fifo_malloc_tx_l2cap:
+	force LLID_L2CAP_START,type
+	increase 4,rega
+	call le_fifo_malloc_tx
+	increase -4,rega
+	copy rega,pdata
+	istore 2,contw
+	copy regb,pdata
+	istore 2,contw
+	rtn
+
+
+//rega:len type:llid
+le_fifo_malloc_tx:
+	sub rega,240,null			//check max len
+	nbranch assert,positive
+	fetch 1,mem_le_tx_buff_used
+	arg 1,temp
+	arg LE_TX_BUFF_COUNT,loopcnt
+le_fifo_malloc_tx_loop:
+	iand temp,null
+	branch le_fifo_malloc_tx_got_empty,zero
+	lshift temp,temp
+	loop le_fifo_malloc_tx_loop
+	branch assert				//no empty buff
+le_fifo_malloc_tx_got_empty:
+	ixor temp,pdata
+	store 1,mem_le_tx_buff_used
+	sub loopcnt,LE_TX_BUFF_COUNT,pdata
+	lshift4 pdata,pdata
+	lshift4 pdata,pdata
+	arg mem_le_tx_buffer0,temp
+	iadd temp,temp
+le_fifo_tx_find_empty_ptr:
+	arg 0,loopcnt
+	arg mem_le_tx_ptr0,contr
+le_fifo_tx_find_empty_ptr_loop:
+	ifetch 2,contr
+	branch le_fifo_tx_found_empty_ptr,blank
+	copy loopcnt,pdata
+	increase 1,loopcnt
+	bne LE_TX_BUFF_COUNT,le_fifo_tx_find_empty_ptr_loop
+	branch assert
+
+	
+le_fifo_tx_found_empty_ptr:
+	increase -2,contr
+	istoret 2,contr
+	copy temp,contw
+	copy rega,pdata
+	istore 1,contw				//lengh
+	setarg 0
+	istore 1,contw				//offset
+	copy type,pdata
+	istore 1,contw				//LLID
+	rtn
+
+
+
+le_fifo_get_first_tx_ptr:
+	fetch 2,mem_le_tx_ptr0
+	copy pdata,contr
+	rtn
+
+le_fifo_get_second_tx_ptr:
+	fetch 2,mem_le_tx_ptr1
+	copy pdata,contr
+	rtn
+
+le_fifo_get_last_tx_ptr:
+	call le_fifo_get_last_tx_ptr0
+	copy pdata,contr
+	rtn
+le_fifo_get_last_tx_ptr0:
+	fetch 2,mem_le_tx_ptr3
+	nrtn blank
+	fetch 2,mem_le_tx_ptr2
+	nrtn blank
+	fetch 2,mem_le_tx_ptr1
+	nrtn blank
+	fetch 2,mem_le_tx_ptr0
+	rtn
+
+le_fifo_get_first_l2cap_ptr:
+	call le_fifo_get_first_tx_ptr
+	increase 3,contr
+	rtn
+
+le_fifo_get_first_att_ptr:
+	call le_fifo_get_first_tx_ptr
+	increase 7,contr
+	rtn
+
+le_fifo_get_last_att_ptr:
+	call le_fifo_get_last_tx_ptr
+	increase 7,contr
+	rtn
+
+le_fifo_get_last_l2cap_ptr:
+	call le_fifo_get_last_tx_ptr
+	increase 3,contr
+	rtn
+
+	
+
+le_fifo_check_full:
+	fetch 2,mem_le_tx_ptr3
+	rtn
+
+
+le_fifo_check_nearly_full:
+	fetch 2,mem_le_tx_ptr2
+	rtn
+
+	
+le_fifo_check_empty:
+	fetch 2,mem_le_tx_ptr0
+	rtn
+
+
+le_fifo_release_first_node:
+	fetch 2,mem_le_tx_ptr0
+	arg mem_le_tx_buffer0,temp
+	isub temp,pdata
+	rshift4 pdata,pdata
+	rshift4 pdata,queue
+	fetch 1,mem_le_tx_buff_used
+	qset0 pdata
+	store 1,mem_le_tx_buff_used
+	arg 0,loopcnt
+le_fifo_release_first_node_loop:
+	lshift loopcnt,pdata
+	arg mem_le_tx_ptr1,temp
+	iadd temp,temp
+	ifetch 2,temp
+	increase -2,temp
+	istore 2,temp
+	copy loopcnt,pdata
+	increase 1,loopcnt
+	bne LE_TX_BUFF_UPDATE_LOOPCNT,le_fifo_release_first_node_loop
+	setarg 0
+	istore 2,temp
+	rtn
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/le_l2cap_att.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/le_l2cap_att.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/le_l2cap_att.prog	(working copy)
@@ -0,0 +1,713 @@
+
+
+le_parse_att:
+	ifetch 3,contr
+	store 3,mem_le_att_opcode
+	beq ATTOP_EXCHANGE_MTU_REQUEST,le_parse_att_exchange_mtu_request
+	beq ATTOP_EXCHANGE_MTU_RESPONSE,le_parse_att_exchange_mtu_response
+	beq ATTOP_FIND_INFORMATION_REQUEST,le_parse_att_find_information_request
+	beq ATTOP_FIND_BY_TYPE_VALUE_REQUEST,le_parse_att_find_by_type_value_request
+	beq ATTOP_READ_BY_TYPE_REQUEST,le_parse_att_read_by_type_request
+	beq ATTOP_READ_REQUEST,le_parse_att_read_request
+	beq ATTOP_READ_BLOB_REQUEST,le_parse_att_read_blob_request
+	beq ATTOP_READ_BY_GROUP_TYPE_REQUEST,le_parse_att_read_by_group_type_request
+	beq ATTOP_WRITE_REQUEST,le_parse_att_write_request
+	beq ATTOP_PREPARE_WRITE_REQUEST,le_parse_att_prepare_write_request
+	beq ATTOP_EXECUTE_WRITE_REQUEST,le_parse_att_execute_write_request
+	beq ATTOP_WRITE_COMMAND,le_parse_att_write_command
+	rtn
+
+
+le_send_att_exchange_mtu_requset:
+	force 3,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_EXCHANGE_MTU_REQUEST
+	istore 1,contw
+	fetch 2,mem_le_local_mtu
+	istore 2,contw
+	rtn
+
+
+le_parse_att_exchange_mtu_request:
+	call le_parse_att_exchange_mtu_response
+le_send_att_exchange_mtu_response:
+	force 3,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_EXCHANGE_MTU_RESPONSE
+	istore 1,contw
+	fetch 2,mem_le_local_mtu
+	istore 2,contw
+	rtn
+
+le_parse_att_exchange_mtu_response:
+	rshift8 pdata,pdata
+	store 2,mem_le_remote_mtu
+	rtn
+
+le_parse_att_find_information_request:
+	call le_get_search_handle_start_end_common
+	call enable_user
+	branch le_send_att_find_information_response
+	
+le_send_att_find_information_response:
+	arg 3,timeup
+	call le_init_attlist_search
+le_send_att_find_information_res_loop:
+	call le_att_handle_inrange
+	branch le_send_att_find_information_res_end,blank
+	nbranch le_send_att_find_information_res_next,positive
+	increase -2,contr
+	call store_contr
+	call get_contw
+	nbranch le_send_att_find_information_res_store_info,user
+	call push_stack_rega_b_c
+	call disable_user
+	force 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	call pop_stack_rega_b_c
+	setarg ATTOP_FIND_INFORMATION_RESPONSE
+	istore 1,contw
+	setarg UUID_SIZE_16BIT
+	istore 1,contw
+le_send_att_find_information_res_store_info:
+	call get_contr
+	ifetch 2,contr
+	istore 2,contw
+	ifetch 1,contr
+	copy pdata,loopcnt
+	call memcpy
+	call store_contw
+	increase -1,timeup
+	branch le_send_att_find_information_res_end,zero
+le_send_att_find_information_res_cont:
+	ifetch 1,contr
+	iadd contr,contr
+	branch le_send_att_find_information_res_loop
+le_send_att_find_information_res_next:
+	ifetch 1,contr
+	iadd contr,contr
+	branch le_send_att_find_information_res_cont
+le_send_att_find_information_res_end:
+	branch le_send_att_error_response_notfound,user
+	branch le_send_auto_len_by_mem
+
+
+le_parse_att_find_by_type_value_request:
+	call le_get_search_handle_start_end_common
+	ifetch 2,contr
+	store 2,mem_le_search_uuid
+	call store_contr
+	arg mem_le_search_att_type_length,contw
+	fetch 2,mem_le_l2cap_size
+	increase -7,pdata
+	call le_get_search_common2
+	branch le_send_att_find_by_type_value_response
+
+
+le_start_end_handle_check_1:
+	disable user
+	fetcht 2,mem_le_search_handle_start
+	fetch 2,mem_le_search_handle_end
+	isub temp,null
+	nbranch le_start_end_handle_check_1_fail,positive
+	deposit temp
+	rtnne 0
+le_start_end_handle_check_1_fail:
+	enable user
+	jam ATT_ERR_INVALID_HANDLE,mem_le_err_code
+	branch le_send_att_error_response
+
+
+le_send_att_find_by_type_value_response:
+	call le_start_end_handle_check_1
+	rtn user
+	fetcht 2,mem_le_search_uuid
+	setarg UUID_GATT_PRIMARY_SERVICE
+	isub temp,null
+	branch le_send_att_find_by_type_value_res_primary,zero
+	branch le_send_att_error_response_notfound
+	
+
+le_send_att_find_by_type_value_res_primary:
+	jam LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND,mem_le_search_res
+	fetcht 2,mem_le_search_handle_start
+	storet 2,mem_temp
+	call le_att_get_handle_info
+	nbranch le_send_att_error_response_notfound,blank
+le_send_att_find_primary_search_loop:
+	fetcht 2,mem_temp
+	call le_att_get_handle_info
+	nbranch le_send_att_error_response_notfound2,blank	
+	copy contr,rega
+	fetch 1,mem_le_curr_att_len
+	copy pdata,loopcnt
+	fetcht 1,mem_le_search_att_type_length
+	isub temp,null
+	nbranch le_send_att_find_primary_search_loop1,zero
+	arg mem_le_search_att_type,regb
+	call string_compare
+
+	branch le_send_att_find_primary_search_end_start_handle_found,zero
+
+	fetch 2,mem_le_cur_uuid
+	fetcht 2,mem_le_search_uuid
+	isub temp,null
+	branch le_send_att_find_primary_search_end_ending_handle_found,zero
+le_send_att_find_primary_search_loop1:
+	fetch 2,mem_temp
+	increase 1,pdata
+	store 2,mem_temp
+	branch le_send_att_find_primary_search_loop
+
+le_send_att_error_response_notfound2:
+	fetch 1,mem_le_search_res
+	beq LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE,le_send_att_find_primary_search_end_ending_handle_found
+	branch le_send_att_error_response_notfound
+
+	
+le_send_att_find_primary_search_end_start_handle_found:
+	fetch 2,mem_le_cur_uuid
+	fetcht 2,mem_le_search_uuid
+	isub temp,null
+	nbranch  le_send_att_find_primary_search_loop1,zero
+	jam LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE,mem_le_search_res
+//	copy rega,temp
+	fetcht 2,mem_temp
+	storet 2,mem_le_cur_handle_start
+	branch le_send_att_find_primary_search_loop1
+
+le_send_att_find_primary_search_end_ending_handle_found:
+	fetch 1,mem_le_search_res
+	beq LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND,le_send_att_find_primary_search_loop1
+	jam LE_FIND_BY_TYPE_VAL_RES_FOUND_ENDING_HANDLE,mem_le_search_res
+	fetcht 2,mem_temp
+	increase -1,temp
+	storet 2,mem_le_cur_handle_end
+	
+le_send_att_find_primary_search_end:
+	arg 5,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_FIND_BY_TYPE_VALUE_RESPONSE
+	istore 1,contw
+	fetch 2,mem_le_cur_handle_start
+	istore 2,contw
+	fetch 2,mem_le_cur_handle_end
+	istore 2,contw
+	rtn
+
+
+
+le_parse_att_read_by_type_request:
+	call le_get_search_handle_start_end_common
+	call le_get_search_att_uuid
+	branch le_send_att_read_by_type_response
+	
+le_send_att_read_by_type_response:
+	fetcht 2,mem_le_search_handle_start
+	storet 2,mem_temp
+	call le_init_attlist_search
+	call le_att_get_handle_ptr2
+	increase -2,contr
+	copy contr,pdata
+	store 2,mem_le_cur_attlist_start_ptr
+
+	fetcht 2,mem_le_search_uuid
+	setarg UUID_CHRCTR_DEVICE_NAME
+	isub temp,null
+	branch le_send_att_read_by_type_res_device_name,zero
+	setarg UUID_GATT_CHARACTERISTIC
+	isub temp,null
+	nbranch le_send_att_read_by_type_res_not_characteristic,zero
+	arg 2,timeup
+le_send_att_read_by_type_response_loop:
+	call le_att_check_handle_end
+	nbranch le_send_att_read_by_type_response_end,positive
+	fetcht 2,mem_temp
+	call le_att_get_handle_info_from_ptr
+	beq 1,le_send_att_read_by_type_response_end
+	call le_att_same_uuid
+	nbranch le_send_att_read_by_type_response_next_handle,zero
+	nbranch le_send_att_read_by_type_res_found_next,user
+	disable user
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BY_TYPE_RESPONSE
+	istore 1,contw
+	copy contw,alarm
+	increase 1,contw
+	
+	call le_send_att_read_by_type_write_properties
+	call le_att_next_handle
+	call le_att_get_handle_info_from_ptr
+	call le_send_att_read_by_type_write_uuid
+	fetch 1,mem_le_cur_uuid_length
+	increase 5,pdata
+	istore 1,alarm
+	fetch 1,mem_le_cur_uuid_length
+	beq 16,le_send_att_read_by_type_response_end
+	increase -1,timeup
+	branch le_send_att_read_by_type_response_end,zero
+le_send_att_read_by_type_response_next_handle:
+	call le_att_next_handle
+	branch le_send_att_read_by_type_response_loop
+le_send_att_read_by_type_response_end:
+	branch le_send_att_error_response_notfound,user
+	branch le_send_auto_len_by_mem
+
+le_send_att_read_by_type_res_found_next:
+	call le_store_att_record
+	call le_att_next_handle
+	call le_att_get_handle_info_from_ptr
+	fetch 1,mem_le_cur_uuid_length
+	beq 16,le_send_att_read_by_type_response_end
+	
+	call get_contw
+	fetch 2,mem_temp
+	increase -1,pdata
+	istore 2,contw
+	call le_write_att_record_common
+	call le_send_att_read_by_type_write_uuid
+	increase -1,timeup
+	branch le_send_att_read_by_type_response_end,zero
+	branch le_send_att_read_by_type_response_next_handle
+
+	
+le_send_att_read_by_type_write_properties:
+	fetch 2,mem_temp
+	istore 2,contw
+	
+	fetch 1,mem_le_curr_att_len
+	copy pdata,loopcnt
+	call get_contr
+	call memcpy_fast
+	branch store_contw
+le_send_att_read_by_type_write_uuid:
+	call get_contw
+	fetch 2,mem_temp
+	istore 2,contw
+	call store_contw
+	fetch 1,mem_le_cur_uuid_length
+	copy pdata,loopcnt
+	call get_contw	
+	call get_contr
+	isub loopcnt,contr
+	increase -1,contr
+	call memcpy_fast
+	branch store_contw
+
+
+
+le_send_att_read_by_type_res_not_characteristic:
+	fetcht 2,mem_le_search_handle_start
+	storet 2,mem_temp
+le_send_att_read_by_type_res_not_char_loop:
+	call le_att_check_handle_end
+	nbranch le_send_att_error_response_notfound,positive
+	call le_att_get_handle_info_from_ptr
+	beq 1,le_send_att_error_response_notfound
+	call le_att_same_uuid
+	nbranch le_send_att_read_by_type_res_not_char_next,zero
+
+le_send_att_read_by_type_res_not_char_common:
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BY_TYPE_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_curr_att_len
+	copy pdata,loopcnt
+	increase 2,pdata
+	istore 1,contw
+	fetch 2,mem_temp
+	istore 2,contw
+	call get_contr
+	call memcpy_fast
+	call store_contw
+	branch le_send_auto_len_by_mem
+	
+le_send_att_read_by_type_res_not_char_next:
+ 	call le_att_next_handle
+	branch le_send_att_read_by_type_res_not_char_loop
+
+
+le_send_att_read_by_type_res_device_name:
+	arg UUID_CHRCTR_DEVICE_NAME,temp
+	call le_att_get_short_uuid_ptr
+	rtn blank
+	increase -5,contr // point to handle
+	ifetch 2,contr		
+	store 2,mem_temp
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BY_TYPE_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_name_len
+	copy pdata,loopcnt
+	increase 2,pdata
+	istore 1,contw
+	fetch 2,mem_temp
+	istore 2,contw
+	arg mem_le_name,contr
+	call memcpy_fast
+	call store_contw
+	branch le_send_auto_len_by_mem
+
+
+
+le_parse_att_read_request:
+	fetcht 2,mem_le_att_handle
+	fetch 1,mem_le_configuration
+	bbit1 BIT_BLE_READ_AUTH,le_send_att_read_response_check_auth
+
+le_send_att_read_response:
+	call le_att_get_handle_ptr
+	branch le_send_att_error_response_notfound,blank
+	increase -2,contr
+	ifetch 2,contr
+	arg UUID_CHRCTR_DEVICE_NAME,temp
+	isub temp,null
+	branch le_send_device_name,zero
+	ifetch 1,contr
+	sub pdata,22,null
+	branch le_send_att_read_response_less,positive
+	force 22,pdata
+le_send_att_read_response_less:
+	copy pdata,regc
+	call store_contr
+	add regc,1,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_RESPONSE
+	istore 1,contw
+	copy regc,loopcnt
+	call get_contr
+	branch memcpy
+
+le_send_device_name:
+	call store_contr
+	fetch 1,mem_le_name_len
+	add pdata,1,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_name_len
+	copy pdata,loopcnt
+	arg mem_le_name,contr
+	branch memcpy
+	
+	
+le_send_att_read_response_check_auth:
+	fetch 2,mem_le_pairing_handle
+	isub temp,null
+	nbranch le_send_att_read_response,zero
+//le_send_att_read_response_error_insufficient_auth:
+	call le_check_encrypt_state
+	nbranch le_send_att_read_response,user
+	jam ATT_ERR_INSUFFICIENT_AUTHENTICATION,mem_le_err_code
+	branch le_send_att_error_response
+
+
+le_parse_att_read_blob_request:
+	ifetch 2,contr
+	store 2,mem_le_att_offset
+le_send_att_read_blob_response:
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BLOB_RESPONSE
+	istore 1,contw
+	fetch 2,mem_le_att_offset
+	iforce rega
+	fetcht 2,mem_le_att_handle
+	call le_att_get_handle_ptr 
+	branch le_send_att_error_response_notfound,blank
+	ifetch 1,contr
+	isub rega,loopcnt
+	nbranch le_send_att_error_response_notfound,positive
+	sub loopcnt,22,null
+	branch le_send_att_read_blob_response_less,positive
+	force 22,loopcnt
+le_send_att_read_blob_response_less:
+	deposit rega
+	iadd contr,contr
+	call memcpy_fast
+	call store_contw
+	branch le_send_auto_len_by_mem
+
+
+le_parse_att_read_by_group_type_request:
+	call le_get_search_handle_start_end_common
+ 	call le_get_search_att_type
+	branch le_send_att_read_by_group_type_response
+	
+//mem_le_search_att_type
+//mem_le_search_handle_start
+//mem_le_search_handle_end
+le_send_att_read_by_group_type_response:
+	arg 2,timeup
+	fetcht 2,mem_le_search_handle_start
+//	arg 23,pdata
+//	isub temp,null
+//	call ice_break,zero
+	storet 2,mem_temp
+	call le_init_attlist_search
+	call le_att_get_handle_ptr2
+	increase -2,contr
+	copy contr,pdata
+	store 2,mem_le_cur_attlist_start_ptr
+le_send_att_read_by_group_type_response_loop:
+	call le_att_check_handle_end
+	nbranch le_send_att_read_by_group_type_end0,positive
+	fetcht 2,mem_temp
+	call le_att_get_handle_info_from_ptr
+	beq 1,le_send_att_read_by_group_type_end1
+
+	call le_att_same_type
+	nbranch le_send_att_read_by_group_type_next_handle,zero
+	copy timeup,pdata
+	beq 0,le_send_att_read_by_group_type_end1
+	nbranch le_send_att_read_by_group_type_store_write_record,user		//un first
+	disable user
+	//first att uuid
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BY_GROUP_TYPE_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_curr_att_len
+	increase 4,pdata
+	istore 1,contw
+	call store_contw
+	branch le_send_att_read_by_group_type_store_record
+le_send_att_read_by_group_type_store_write_record:
+	fetch 1,mem_le_curr_att_len
+	beq 16,le_send_att_read_by_group_type_end1
+	fetch 2,mem_temp
+	increase -1,pdata
+	store 2,mem_le_cur_handle_end
+	call le_write_att_record
+le_send_att_read_by_group_type_store_record:
+	fetch 2,mem_temp
+	store 2,mem_le_cur_handle_start
+	call le_store_att_record
+	increase -1,timeup
+//	branch le_send_att_read_by_group_type_last_find,zero		
+le_send_att_read_by_group_type_next_handle:
+	call le_att_next_handle
+	branch le_send_att_read_by_group_type_response_loop
+
+le_send_att_read_by_group_type_end0:	//> att handle end
+	fetch 2,mem_temp
+	store 2,mem_le_cur_handle_end
+	branch le_send_att_read_by_group_type_end_common
+le_send_att_read_by_group_type_end1:	//>att max list handle or diff len 
+	fetch 2,mem_temp
+	increase -1,pdata
+	store 2,mem_le_cur_handle_end
+	branch le_send_att_read_by_group_type_end_common
+le_send_att_read_by_group_type_end_common:
+	branch le_send_att_error_response_notfound,user
+	call le_write_att_record
+	branch le_send_auto_len_by_mem
+
+
+
+
+le_parse_att_write_request:
+	copy contr,rega
+	fetch 2,mem_le_l2cap_size
+	add pdata,-3,regb
+	call le_writeatt_cb
+le_send_att_write_response_check_auth:
+	fetch 1,mem_le_configuration
+	bbit0 BIT_BLE_WRITE_AUTH,le_send_att_write_response
+	
+	fetcht 2,mem_le_att_handle
+	fetch 2,mem_le_pairing_handle
+	isub temp,null
+	nbranch le_send_att_write_response,zero
+	call le_check_encrypt_state
+	nbranch le_send_att_write_response,user
+	jam ATT_ERR_INSUFFICIENT_AUTHENTICATION,mem_le_err_code
+	branch le_send_att_error_response
+
+le_send_att_write_response:
+	force 1,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_WRITE_RESPONSE
+	istore 1,contw
+	rtn
+
+le_check_encrypt_state:
+	call disable_user
+	fetch 1,mem_le_pairing_mode
+	rtneq LE_PAIRING_MODE_NONE
+	fetch 1,mem_context
+	rtnbit1 lestate_encryption
+	branch enable_user
+
+
+le_parse_att_prepare_write_request:
+	add contr,2,rega
+	fetch 2,mem_le_l2cap_size
+	add pdata,-5,regb
+	call le_writeatt_cb
+	branch le_send_att_prepare_write_response
+
+
+le_send_att_prepare_write_response:
+	fetch 2,mem_le_l2cap_size
+	copy pdata,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_PREPARE_WRITE_RESPONSE
+	istore 1,contw
+	fetch 2,mem_le_att_handle
+	istore 2,contw
+	fetch 2,mem_le_l2cap_size
+	add pdata,-5,loopcnt	
+	fetch 2,mem_le_payload_ptr
+	add pdata,7,contr
+	ifetch 2,contr		//offset
+	istore 2,contw
+	branch memcpy_fast
+
+
+
+le_parse_att_execute_write_request:
+
+le_send_att_execute_write_response:
+	force 1,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_EXECUTE_WRITE_RESPONSE
+	istore 1,contw
+	rtn
+
+
+
+le_parse_att_write_command:
+	copy contr,rega
+	fetch 2,mem_le_l2cap_size
+	add pdata,-3,regb
+	branch le_writeatt_cb
+
+
+
+//rga:len temp:handle;rgea,regb,regc already used
+le_att_malloc_tx_notify:
+	copy temp,regc
+	increase 3,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	increase -3,rega
+	setarg ATTOP_HANDLE_VALUE_NOTIFICATION
+	istore 1,contw
+	copy regc,temp
+	istoret 2,contw
+	rtn
+
+//rga:len temp:handle;rgea,regb,regc already used
+le_att_malloc_tx_indication:
+	copy temp,regc
+	increase 3,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	increase -3,rega
+	setarg ATTOP_HANDLE_VALUE_INDICATION
+	istore 1,contw
+	copy regc,temp
+	istoret 2,contw
+	rtn
+
+
+///////////////////////////ATT common function////////////////////////////////////
+
+le_send_att_error_response_notfound:	
+	jam ATT_ERR_ATTRIBUTE_NOT_FOUND,mem_le_err_code
+le_send_att_error_response:	
+	force 5,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_ERROR_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_att_opcode
+	istore 1,contw
+	fetch 2,mem_le_att_handle
+	istore 2,contw
+	fetch 1,mem_le_err_code
+	istore 1,contw
+	rtn
+
+
+le_fifo_malloc_tx_l2cap_gatt:
+	force LE_L2CAP_CID_ATT,regb
+	branch le_fifo_malloc_tx_l2cap
+
+
+le_att_next_handle:
+	fetcht 2,mem_temp
+	increase 1,temp
+	storet 2,mem_temp
+	rtn
+
+le_att_check_handle_end:
+	fetcht 2,mem_temp
+	fetch 2,mem_le_search_handle_end
+	isub temp,null
+	rtn
+
+
+le_att_same_type:
+	fetcht 1,mem_le_search_att_type_length
+	arg mem_le_search_att_type,rega
+le_att_check_same_common:
+	fetch 1,mem_le_cur_uuid_length
+	copy pdata,loopcnt
+	isub temp,null
+	nrtn zero
+	arg mem_le_cur_uuid ,regb
+	branch string_compare
+
+le_att_same_uuid:
+	fetcht 1,mem_le_search_uuid_length
+	arg mem_le_search_uuid,rega
+	branch le_att_check_same_common
+
+
+le_store_att_record:
+	fetch 1,mem_le_curr_att_len
+	store 1, mem_tmp_buffer
+	copy pdata,loopcnt
+	call get_contr
+	branch memcpy_fast
+
+
+le_write_att_record:
+	call get_contw
+	fetch 2,mem_le_cur_handle_start
+	istore 2,contw
+	fetch 2,mem_le_cur_handle_end
+	istore 2,contw
+le_write_att_record_common:
+	fetch 1,mem_tmp_buffer
+	copy pdata,loopcnt
+	call memcpy_fast
+	branch store_contw
+
+
+
+le_send_auto_len_by_mem:
+	call get_contw
+	call le_fifo_get_last_att_ptr
+	copy contw,pdata
+	isub contr,rega
+	call le_fifo_get_last_l2cap_ptr
+	copy rega,pdata
+	istore 2,contr
+	increase 4,rega
+	call le_fifo_get_last_tx_ptr
+	copy rega,pdata
+	istore 1,contr
+	rtn
+
+
+le_get_search_handle_start_end_common:
+	rshift8 pdata,pdata
+	store 2,mem_le_search_handle_start
+	ifetch 2,contr
+	store 2,mem_le_search_handle_end
+	rtn
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/le_l2cap_signalling.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/le_l2cap_signalling.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/le_l2cap_signalling.prog	(working copy)
@@ -0,0 +1,54 @@
+
+
+le_parse_signaling:
+	ifetch 1,contr
+	ifetcht 1,contr //id
+	ifetcht 2,contr //length
+	beq L2CAP_CONNECTION_PARAMETER_UPDATE_RESPONSE,le_l2cap_parse_conn_parameter_update_rsp
+	rtn
+le_l2cap_parse_conn_parameter_update_rsp:
+	ifetch 2,contr	//result
+	store 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	jam BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+//mem_le_interval_min:the ptr that connection parameter,
+//include 	ConnIntervalMin,ConnIntervalMax,
+//		ConnSlaveLatency,ConnSupervisionTimeout
+le_l2cap_tx_update_req:
+	arg 0x0c,rega
+	arg L2CAP_CONNECTION_PARAMETER_UPDATE_REQUEST,regc
+	call le_fifo_malloc_tx_l2cap_signaling
+	setarg 0x08
+	istore 2,contw
+	fetch 8,mem_le_interval_min
+	istore 8,contw
+	rtn
+
+
+//rega:len regc:signaling opcode
+le_fifo_malloc_tx_l2cap_signaling:
+	call le_l2cap_update_signaling_identifier
+	arg LE_L2CAP_CID_SIGNAL,regb
+	call le_fifo_malloc_tx_l2cap
+	copy regc,pdata
+	istore 1,contw
+	fetch 1,mem_le_signaling_identifier
+	istore 1,contw
+	rtn
+
+
+le_l2cap_update_signaling_identifier:
+	fetch 1,mem_le_signaling_identifier
+	//beq 0xff,le_l2cap_signaling_identifier_set_1
+	pincrease 1
+	store 1,mem_le_signaling_identifier
+	rtnne 0
+	
+le_l2cap_reset_signaling_identifier:
+	jam 1,mem_le_signaling_identifier
+	rtn
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/le_l2cap_smp.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/le_l2cap_smp.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/le_l2cap_smp.prog	(working copy)
@@ -0,0 +1,594 @@
+
+le_pairing_mode_init:
+	fetch  1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_NONE, le_set_no_pairing
+	beq LE_PAIRING_MODE_LAGACY_JUSTWORK,le_set_pairing_mode_lagacy_just_work
+	beq LE_PAIRING_MODE_LAGACY_PASSKEY,le_set_pairing_mode_lagacy_passkey
+ifdef SECURE_CONNECTION
+	beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,le_set_pairing_mode_secure_justwork
+	beq LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC,le_set_pairing_mode_secure_numeric
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_set_pairing_mode_secure_passkey
+endif
+	rtn
+
+ifdef SECURE_CONNECTION	
+le_set_pairing_mode_secure_justwork:
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	branch le_set_noinputnooutput
+le_set_pairing_mode_secure_numeric:
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	jam FLAG_IOCAP_DISPLAYYESNO,mem_le_pres_iocap
+	rtn
+le_set_pairing_mode_secure_passkey:	
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	branch le_set_displayonly
+endif
+le_set_no_pairing:
+	jam FLAG_LE_NO_BONDING_NO_MITM,mem_le_pres_auth
+le_set_noinputnooutput:	
+	jam FLAG_IOCAP_NOINPUTNOOUTPUT,mem_le_pres_iocap
+	rtn
+le_set_pairing_mode_lagacy_just_work:
+	jam FLAG_LE_BONDING_MITM,mem_le_pres_auth
+	branch le_set_noinputnooutput
+le_set_pairing_mode_lagacy_passkey:
+	jam FLAG_LE_BONDING_MITM,mem_le_pres_auth
+le_set_displayonly:	
+	jam FLAG_IOCAP_DISPLAYONLY,mem_le_pres_iocap
+	rtn
+
+	
+le_secure_connection_enable:
+	fetch 1,mem_le_pres_auth
+	set1 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT,pdata
+	store 1,mem_le_pres_auth
+	rtn
+le_secure_connection_disable:
+	fetch 1,mem_le_pres_auth
+	set0 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT,pdata
+	store 1,mem_le_pres_auth
+	rtn
+
+le_parse_smp:
+	ifetch 1,contr
+	beq SMP_PAIRING_REQUEST,le_parse_smp_pairing_request
+//	beq SMP_PAIRING_RESPONSE,le_parse_smp_pairing_response
+	beq SMP_PAIRING_CONFIRM,le_parse_smp_pairing_confirm
+	beq SMP_PAIRING_RANDOM,le_parse_smp_pairing_random
+	beq SMP_PAIRING_FAILED,le_parse_smp_pairing_failed
+	beq SMP_ENCRYPTION_INFORMATION,le_parse_smp_encryption_information
+	beq SMP_MASTER_IDENTIFICATION,le_parse_smp_master_identification
+	beq SMP_IDENTITY_INFORMATION,le_parse_smp_identity_information
+	beq SMP_IDENTITY_ADDRESS_INFORMATION,le_parse_smp_identity_address_information
+	beq SMP_SIGNING_INFORMATION,le_parse_smp_signing_information
+	beq SMP_SECURITY_REQUEST,le_parse_smp_security_request
+ifdef SECURE_CONNECTION
+	beq SMP_PAIRING_PUBLIC_KEY,le_parse_smp_public_key
+	beq SMP_PAIRING_DHKEY_CHECK,le_parse_smp_dhkey_check
+endif
+	rtn
+
+
+
+le_send_smp_security_request:
+	force 2,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_SECURITY_REQUEST
+	istore 1,contw
+	fetch 1,mem_le_pres_auth
+	istore 1,contw
+	rtn
+		
+le_parse_smp_pairing_request:
+	store 1,mem_le_preq
+	ifetch 6,contr
+	istore 6,contw
+	fetch 1,mem_le_pairing_mode
+	beq  LE_PAIRING_MODE_NONE,le_smp_pairing_fail_reason_not_support_pairing
+	call le_send_smp_pairing_response
+	call le_check_master_support_secure_connect
+	jam FLAG_LE_PAIRING_RCV_PAIRING_REQ,mem_le_pairing_state
+	fetch 1,mem_le_preq_iocap
+	beq  FLAG_IOCAP_DISPlAYONLY,le_set_tk_0
+	beq  FLAG_IOCAP_DISPLAYYESNO,le_set_tk_0
+	beq  FLAG_IOCAP_NOINPUTNOOUTPUT,le_set_tk_0
+	fetch 1,mem_le_pairing_mode	
+	beq LE_PAIRING_MODE_LAGACY_PASSKEY,le_parse_smp_pairing_req_passkey
+	rtneq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY
+le_set_tk_0:
+	arg 0,pdata
+	store 4,mem_le_tk
+	rtn
+
+le_parse_smp_pairing_req_passkey:
+	fetch 1,mem_le_configuration
+	bbit1 BIT_BLE_PASSKEY_FIXED_KEY,le_parse_smp_pairing_req_fixed_passkey
+le_genernate_tk:
+	arg mem_le_tk,rega
+	copy rega,contw
+	arg 3,loopcnt
+	call generate_random_loop
+	fetch 2,mem_le_tk + 2
+	and_into 0x7,pdata
+	store 2,mem_le_tk + 2
+le_parse_smp_pairing_req_fixed_passkey:
+	jam BT_EVT_LE_TK_GENERATE,mem_fifo_temp
+	branch ui_ipc_send_event
+
+le_check_master_support_secure_connect:
+	fetch 1,mem_le_preq_auth
+	rtnbit1  LE_AUTH_SECURE_CONNECTION_PAIRING_BIT
+	fetch 1,mem_le_pairing_mode
+	rtnbit0 LE_PAIRING_MODE_SECURE_CONNECT_BIT
+	branch app_ble_disconnect	
+
+le_send_smp_pairing_response:
+	force 7,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	fetch 7,mem_le_pres
+	istore 7,contw
+	rtn
+		
+
+le_parse_smp_pairing_confirm:
+ifdef SECURE_CONNECTION
+	copy contr,rega
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_parse_smp_pairing_confirm_secure_passkey
+	copy rega,contr
+endif
+	arg mem_le_rconfirm,contw
+	call memcpy16
+	branch le_send_smp_pairing_confirm
+ifdef SECURE_CONNECTION
+le_parse_smp_pairing_confirm_secure_passkey:
+	copy rega,contr
+	arg mem_le_rconfirm,contw
+	call memcpy16
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	jam LE_SC_STAT_PASSKEY_WAIT_CONFIRM,mem_le_secure_connect_state	
+	rtn
+endif	
+
+
+le_send_smp_pairing_confirm:
+ifdef SECURE_CONNECTION
+	fetch 1,mem_le_pairing_mode
+	bbit1 LE_PAIRING_MODE_SECURE_CONNECT_BIT,le_send_smp_pairing_confirm_sc
+endif
+	call generate_confirm
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_CONFIRM
+	istore 1,contw
+	branch  store_aes_result
+
+	
+ifdef SECURE_CONNECTION
+le_send_smp_pairing_confirm_sc:
+	arg mem_le_srand,contw	
+	call generate_random
+	call function_f4_cb
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_CONFIRM
+	istore 1,contw
+	branch  load_inverse_result
+
+endif
+
+	
+le_parse_smp_pairing_random:	
+ifdef SECURE_CONNECTION
+	copy contr,rega
+	fetch 1,mem_le_pairing_mode
+	bbit1 LE_PAIRING_MODE_SECURE_CONNECT_BIT,le_parse_smp_pairing_random_sc
+	copy rega,contr
+endif
+	call authenticate_rconfirm
+	branch le_parse_smp_pairing_random_success,zero
+le_send_pairing_confirm_value_failed:
+	jam PAIRING_FAILED_CONFIRM_VALUE_FAILED,mem_le_ll_pairing_fail_reason
+le_send_pairing_failed:
+	force 2,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_FAILED
+	istore 1,contw
+	fetch 1,mem_le_ll_pairing_fail_reason
+	istore 1,contw	
+le_parse_smp_pairing_failed:
+	force smp_pairing_timer,queue
+	call timer_stop
+	jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state
+	jam BT_EVT_LE_PAIRING_FAIL,mem_fifo_temp
+	branch ui_ipc_send_event
+
+le_smp_pairing_fail_reason_not_support_pairing:
+	jam PAIRING_FAILED_PAIRING_NOT_SUPPORTED,mem_le_ll_pairing_fail_reason
+	branch le_send_pairing_failed
+	
+	
+ifdef SECURE_CONNECTION	
+le_parse_smp_pairing_random_sc:
+	arg mem_le_mrand,contw
+	copy rega,contr
+	call memcpy16	
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_parse_smp_pairing_random_sc_passkey
+	call function_g2
+//	jam LE_SC_STAT_RECEIVE_RANDOM,mem_le_secure_connect_state
+//	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	call le_send_smp_pairing_random
+	fetch 1,mem_le_pairing_mode
+	rtnne LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC
+	jam BT_EVT_LE_GKEY_GENERATE,mem_fifo_temp
+	branch ui_ipc_send_event	
+	
+le_parse_smp_pairing_random_sc_passkey:
+	call function_f4_ca
+	arg mem_AES_CMAC_temp,contw
+	call load_inverse_result	
+	arg mem_AES_CMAC_temp,rega
+	arg mem_le_rconfirm ,regb
+	arg 16,loopcnt
+	call string_compare
+	nbranch le_send_pairing_confirm_value_failed,zero
+	branch le_send_smp_pairing_random
+endif
+	
+le_parse_smp_pairing_random_success:
+	call generate_stk
+	jam BT_EVT_LE_PAIRING_SUCCESS,mem_fifo_temp
+	call ui_ipc_send_event
+	jam 1,mem_ltk_exists
+	jam FLAG_LE_PAIRING_AFTER_AUTH,mem_le_pairing_state
+	
+le_send_smp_pairing_random:
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_RANDOM
+	istore 1,contw
+	arg mem_le_srand,contr
+	branch memcpy16
+	
+le_parse_smp_encryption_information:
+	arg mem_le_peer_ltk,contw
+	branch memcpy16
+
+le_send_smp_encryption_information:
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_ENCRYPTION_INFORMATION
+	istore 1,contw
+	fetch 1,mem_le_configuration
+	bbit1 BIT_BLE_PAIRING_FIXED_LTK,le_send_fixed_ltk
+	arg mem_le_ltk,contr
+	branch memcpy16
+
+le_send_fixed_ltk:
+	arg mem_le_fixed_ltk,contr
+	branch memcpy16
+
+
+le_send_smp_master_identification:
+	arg mem_le_ediv,contw
+	force 10,loopcnt
+	call generate_random_loop
+	force 11,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_MASTER_IDENTIFICATION
+	istore 1,contw
+	fetch 2,mem_le_ediv
+	istore 2,contw
+	fetch 8,mem_le_rand
+	istore 8,contw
+	rtn
+
+le_send_smp_identity_information:
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_IDENTITY_INFORMATION
+	istore 1,contw
+	setarg 0
+	istore 8,contw
+	istore 8,contw
+	rtn
+	
+
+le_send_smp_identity_address_information:
+	force 8,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_IDENTITY_ADDRESS_INFORMATION
+	istore 1,contw
+	fetch 1,mem_le_conn_own_addr_type
+	istore 1,contw
+	fetch 6,mem_le_lap	
+	istore 6,contw
+	rtn	
+
+
+le_send_pairing_fail_unspecified_reason:
+	jam PAIRING_FAILED_UNSPECIFIED_REASON,mem_le_ll_pairing_fail_reason
+	branch le_send_pairing_failed
+
+le_check_init_key_distribution:
+	fetch 1,mem_le_pres_init_key_distribution
+	fetcht 1,mem_le_pres_init_key_distribution
+	iand temp,pdata
+	rtn	
+
+le_parse_smp_identity_information:
+	arg mem_le_irk,contw
+	call memcpy16
+	call le_check_init_key_distribution
+	isolate0 LE_INITATOR_IRK_BIT,pdata
+	branch le_send_pairing_fail_unspecified_reason,true
+	fetch 1,mem_device_option
+	rtnne dvc_op_module
+	call le_check_master_addr_type
+	nrtn user
+	branch app_ble_store_reconn_info
+
+//output:user is enable ,random addr type
+le_check_master_addr_type:
+	call disable_user
+	fetch 1,mem_le_conn_peer_addr_type
+	rtneq MASTER_PUBLIC_ADDR
+	fetch 1,mem_le_plap+5
+	compare 0xc0,pdata,0xc0
+	rtn true
+	branch enable_user
+
+le_parse_smp_identity_address_information:
+	call le_check_init_key_distribution
+	isolate0 LE_INITATOR_IRK_BIT,pdata
+	branch le_send_pairing_fail_unspecified_reason,true
+	rtn
+
+le_parse_smp_master_identification:
+le_parse_smp_signing_information:	
+le_parse_smp_security_request:
+	rtn
+	
+ifdef SECURE_CONNECTION
+le_parse_smp_public_key:
+	arg mem_le_pubkey_remote_x_256,contw	
+	call memcpy64
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	jam LE_SC_STAT_RECEIVE_PUBLIC_KEY,mem_le_secure_connect_state
+	rtn
+
+le_parse_smp_dhkey_check:
+	arg mem_sp_confirm_remote,contw
+	call memcpy16	
+	jam LE_SC_STAT_RECEIVE_DHKEY,mem_le_secure_connect_state
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	rtn	
+
+le_send_smp_pairing_public_key:
+	force 65,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_PUBLIC_KEY
+	istore 1,contw	
+	arg mem_le_pubkey_local_x_256,contr
+	branch memcpy64
+	
+le_send_smp_pairing_dhkey_check:
+	call function_f6_eb	
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_DHKEY_CHECK
+	istore 1,contw
+	branch load_inverse_result
+	
+endif
+
+le_check_paring_time:
+	fetch 1,mem_le_pairing_state
+	rtneq FLAG_LE_PAIRING_END
+	arg FLAG_LE_PAIRING_RCV_PAIRING_REQ,temp
+	isub temp,null
+	nrtn positive
+	arg smp_pairing_timer,queue
+	call timer_check
+	nrtn blank
+	branch le_send_pairing_fail_unspecified_reason
+
+le_pairing_sm:
+	bpatchx patch2f_0,mem_patch2f
+	fetch 1,mem_le_pairing_state
+	beq FLAG_LE_PAIRING_NULL,le_pairing_sm_null
+	beq FLAG_LE_PAIRING_START,le_pairing_sm_start
+	beq FLAG_LE_PAIRING_SEND_RECURITY_REQ,le_pairing_sm_send_sec_req
+	beq FLAG_LE_PAIRING_RCV_PAIRING_REQ,le_pairing_sm_rcv_pairing_req
+	beq FLAG_LE_PAIRING_AFTER_AUTH,le_pairing_sm_after_auth
+	beq FLAG_LE_PARING_SEND_ENC_INFORMATION,le_pairng_sm_send_enc_information
+	beq FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION,le_pairng_sm_send_master_indentification
+	beq FLAG_LE_PARING_SEND_INDENTITY_INFORMATION,le_pairng_sm_send_indentity_information
+	rtn
+
+le_pairing_sm_null:
+le_pairing_sm_send_sec_req:
+	fetch 1,mem_le_enc_state
+	rtnne FLAG_LE_SEND_START_ENC_RSP
+	jam FLAG_LE_ENC_END,mem_le_enc_state
+	jam FLAG_LE_PAIRING_END,mem_le_pairing_state
+	jam BT_EVT_LE_RECONNECT_COMPLETE ,mem_fifo_temp
+	branch ui_ipc_send_event	
+	
+	
+le_pairing_sm_start:
+	jam FLAG_LE_PAIRING_SEND_RECURITY_REQ,mem_le_pairing_state
+	branch le_send_smp_security_request
+
+le_pairing_sm_rcv_pairing_req:
+	jam FLAG_LE_PAIRING_AUTH,mem_le_pairing_state
+	setarg TIMER_SMP_PAIRING_TIMEOUT
+	arg smp_pairing_timer,queue
+	branch timer_init
+	
+le_pairing_sm_after_auth:
+	fetch 1,mem_le_enc_state
+	beq FLAG_LE_SEND_START_ENC_RSP,le_pairing_sm_after_auth_start_enc
+	rtn
+	
+le_pairing_sm_after_auth_start_enc:
+	jam FLAG_LE_PARING_SEND_ENC_INFORMATION,mem_le_pairing_state
+	jam BT_EVT_LE_ENC_INFO,mem_fifo_temp
+	call ui_ipc_send_event
+	call le_send_smp_encryption_information
+	fetch 1,mem_device_option
+	rtnne dvc_op_module
+	call le_check_master_addr_type
+	rtn user
+	branch app_ble_store_reconn_info
+
+
+le_pairng_sm_send_enc_information:	
+	jam FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION,mem_le_pairing_state
+	branch le_send_smp_master_identification
+
+le_pairng_sm_send_master_indentification:	
+	fetch 1,mem_le_preq_resp_key_distribution
+	fetcht 1,mem_le_pres_resp_key_distribution
+	iand temp,pdata
+	isolate0 LE_INITATOR_IRK_BIT,pdata
+	branch le_parse_start_enc_rsp_after_auth_end,true
+	jam FLAG_LE_PARING_SEND_INDENTITY_INFORMATION,mem_le_pairing_state
+	branch le_send_smp_identity_information
+
+le_pairng_sm_send_indentity_information:		
+	call le_send_smp_identity_address_information
+	branch le_parse_start_enc_rsp_after_auth_end
+
+
+le_parse_start_enc_rsp_after_auth_end:
+	force smp_pairing_timer,queue
+	call timer_stop
+	jam FLAG_LE_ENC_END,mem_le_enc_state
+	jam FLAG_LE_PAIRING_END,mem_le_pairing_state
+	jam BT_EVT_LE_PAIRING_COMPLETE ,mem_fifo_temp
+	branch ui_ipc_send_event	
+	
+
+ifdef SECURE_CONNECTION
+
+le_secure_connect_sm:
+	bpatchx patch2f_1,mem_patch2f
+	fetch 1,mem_le_pairing_mode
+	rtnbit0 LE_PAIRING_MODE_SECURE_CONNECT_BIT
+	fetch 1,mem_le_secure_connect_flag
+	rtnne LE_SP_FLAG_COMMIT_256
+	jam SP_FLAG_STANDBY,mem_le_secure_connect_flag
+	fetch    1,mem_le_secure_connect_state
+	beq  LE_SC_STAT_RECEIVE_PUBLIC_KEY,le_sc_sm_receive_public_key
+	beq LE_SC_STAT_WAIT_SEND_PUBLIC_KEY,le_sc_sm_wait_send_public_key
+	beq LE_SC_STAT_SEND_PUBLIC_KEY,le_sc_sm_send_public_key
+	beq LE_SC_STAT_RECEIVE_DHKEY,le_sc_sm_receive_dhkey
+	beq LE_SC_STAT_WAIT_CONFIRM_GKEY,le_sc_sm_wait_confirm_gkey
+	beq  LE_SC_STAT_PASSKEY_WAIT_CONFIRM,le_sc_sm_passkey_wait_confirm
+	rtn	
+
+
+le_sc_sm_passkey_wait_confirm:
+	fetch 1,mem_authentication_passkey_times
+	copy pdata,queue
+	increase 1,pdata
+	store 1,mem_authentication_passkey_times
+	fetch 4,mem_le_tk
+	qisolate1 pdata
+	setarg 0x80
+	setflag true,0,pdata
+	store 1,mem_passkey_1bit
+	branch le_sc_sm_ready_send_pairing_confirm
+	
+le_sc_sm_wait_confirm_gkey:
+	fetch 1,mem_le_sc_confirm_gkey_flag
+	jam FLAG_LE_SC_CONFRIM_NULL,mem_le_sc_confirm_gkey_flag
+	beq FLAG_LE_SC_CONFRIM_GKEY_OK,le_sc_confirm_gkey_ok
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	rtn
+	
+le_sc_confirm_gkey_ok:
+	jam BT_EVT_LE_PAIRING_SUCCESS,mem_fifo_temp
+	call ui_ipc_send_event	
+	jam FLAG_LE_PAIRING_AFTER_AUTH,mem_le_pairing_state
+	branch le_send_smp_pairing_dhkey_check
+
+le_sc_sm_receive_dhkey:
+	fetch 1,mem_sp_dhkey_invalid
+	beq SP_KEY_VALID_256,le_dhkey_ready
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	rtn
+
+le_dhkey_ready:
+	call function_f5
+//	arg mem_le_r,contw
+//	force 2,loopcnt
+//	call memset0
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY ,le_dhkey_ready_common
+	call le_set_tk_0 
+le_dhkey_ready_common:
+	call function_f6_ea
+	arg mem_AES_CMAC_temp,rega
+	arg mem_sp_confirm_remote ,regb
+	arg 16,loopcnt
+	call string_compare
+	branch le_dhkey_check_ok,zero
+le_dhkey_check_fail:	
+	jam PAIRING_FAILED_DHKEY_CHECK_FAILED,mem_le_ll_pairing_fail_reason
+	branch le_send_pairing_failed
+
+	
+le_dhkey_check_ok:
+	call sp_calc_check_publickey_256
+	nbranch le_dhkey_check_fail,zero
+	jam 1,mem_ltk_exists
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,le_sc_confirm_gkey_ok
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY ,le_sc_confirm_gkey_ok	
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	jam LE_SC_STAT_WAIT_CONFIRM_GKEY,mem_le_secure_connect_state	
+	rtn	
+
+le_sc_sm_send_public_key:
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_sc_sm_send_public_key_passkey
+	jam 0,mem_passkey_1bit
+le_sc_sm_ready_send_pairing_confirm:
+	branch le_send_smp_pairing_confirm
+
+le_sc_sm_send_public_key_passkey:
+//	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+//	jam LE_SC_STAT_PASSKEY_WAIT_CONFIRM,mem_le_secure_connect_state	
+//	branch p_ng_event_le_get_passkey
+	jam 0,mem_authentication_passkey_times
+	branch le_parse_smp_pairing_req_passkey
+
+	
+le_sc_sm_receive_public_key:
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	fetch 1,mem_le_sc_local_key_invalid
+	beq SP_KEY_VALID_256,le_public_key_ready
+//	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	rtn
+	
+le_public_key_ready:
+	jam LE_SC_STAT_WAIT_SEND_PUBLIC_KEY,mem_le_secure_connect_state	
+	jam SP_KEY_INVALID,mem_sp_dhkey_invalid
+	branch sp_dhkey_calc_256	
+
+le_sc_sm_wait_send_public_key:
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	jam LE_SC_STAT_SEND_PUBLIC_KEY,mem_le_secure_connect_state
+	branch le_send_smp_pairing_public_key
+
+endif
+
+
+le_fifo_malloc_tx_l2cap_smp:
+	force LE_L2CAP_CID_SMP,regb
+	branch le_fifo_malloc_tx_l2cap
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/le_ll.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/le_ll.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/le_ll.prog	(working copy)
@@ -0,0 +1,212 @@
+
+le_parse_ll:
+	fetch 1,mem_le_rxbuf+2
+	beq LL_CONNECTION_UPDATE_REQ,le_parse_connection_update_req
+	beq LL_CHANNEL_MAP_REQ,le_parse_channel_map_req
+	beq LL_TERMINATE_IND,le_parse_terminate_ind
+	beq LL_ENC_REQ,le_parse_enc_req
+	beq LL_ENC_RSP,le_parse_enc_rsp
+	beq LL_START_ENC_REQ,le_parse_start_enc_req
+	beq LL_START_ENC_RSP,le_parse_start_enc_rsp
+	beq LL_UNKNOWN_RSP,le_parse_unknown_rsp
+	beq LL_FEATURE_REQ,le_parse_feature_req
+	beq LL_FEATURE_RSP,le_parse_feature_rsp
+	beq LL_PAUSE_ENC_REQ,le_parse_pause_enc_req
+	beq LL_PAUSE_ENC_RSP,le_parse_pause_enc_rsp
+	beq LL_VERSION_IND,le_parse_version_ind
+	beq LL_REJECT_IND,le_parse_reject_ind
+	beq LL_PING_REQ,le_parse_ping_req
+	beq LL_PING_RSP,le_parse_ping_rsp
+	arg 2,rega
+	arg LL_UNKNOWN_RSP,regb
+	call le_fifo_malloc_tx_ll
+	fetch 1,mem_le_rxbuf+2
+	istore 1,contw
+	rtn	
+
+
+le_parse_connection_update_req:
+	ifetch 9,contr
+	store 9,mem_le_new_param
+	ifetch 2,contr
+	store 2,mem_le_instant
+	fetch 1,mem_le_state
+	set1 lestate_update_param,pdata
+	store 1,mem_le_state
+	rtn
+
+le_parse_channel_map_req:
+	ifetch 5,contr
+	store 5,mem_le_new_map
+	ifetch 2,contr
+	store 2,mem_le_instant
+	fetcht 2,mem_le_event_count
+	isub temp,null
+	nbranch le_parse_terminate_ind,positive
+	fetch 1,mem_le_state
+	set1 lestate_update_map,pdata
+	store 1,mem_le_state
+	rtn
+
+
+le_parse_terminate_ind:
+	setarg 20 // 200ms
+	store 2,mem_le_superto
+	store 2,mem_le_init_superto
+	rtn
+
+le_send_terminate_ind_user_terminated:
+	arg ERROR_REMOTE_USER_TERMINATED_CONNECTION,regc
+
+//regc:The ErrorCode field shall be set to inform the remote device why the connection is about to be terminated.
+le_send_terminate_ind:
+	arg 2,rega
+	arg LL_TERMINATE_IND,regb
+	call le_fifo_malloc_tx_ll
+	copy regc,pdata
+	istore 1,contw
+	rtn
+
+le_parse_feature_req:
+
+le_send_feature_rsp:
+	arg 9,rega
+	arg LL_FEATURE_RSP,regb
+	call le_fifo_malloc_tx_ll
+	setarg param_le_features
+	istore 8,contw
+	rtn
+
+
+le_parse_version_ind:
+	rtn master
+le_send_version_ind:
+	arg 6,rega
+	arg LL_VERSION_IND,regb
+	call le_fifo_malloc_tx_ll
+	fetch 5,mem_lmp_version
+	istore 5,contw
+	rtn
+
+
+le_parse_ping_req:
+	arg LL_PING_RSP,regb
+	branch le_send_ll_one_lenth
+
+//regb:ll opcode
+le_send_ll_one_lenth:
+	arg 1,rega
+	branch le_fifo_malloc_tx_ll
+
+	
+le_parse_enc_req:
+	ifetch 8,contr
+	store 8,mem_le_rand
+	ifetch 2,contr
+	store 2,mem_le_ediv
+	ifetch 8,contr
+	store 8,mem_le_skdm
+	ifetch 4,contr
+	store 4,mem_le_ivm
+	call le_send_enc_rsp
+	bpatchx patch2f_2,mem_patch2f
+	fetch 1,mem_le_pairing_state
+	beq FLAG_LE_PAIRING_AFTER_AUTH,le_parse_enc_req_after_auth
+	fetch 1,mem_le_configuration
+	bbit1  BIT_BLE_PAIRING_FIXED_LTK,le_parse_enc_req_fixed_ltk
+	fetch 1,mem_nv_data_number
+	ncall load_device_list_mode_4,blank
+	fetch 1,mem_ltk_exists
+	beq 0,le_ltk_lost
+le_parse_enc_req_after_auth:
+	jam FLAG_LE_RCV_ENC_START,mem_le_enc_state
+	call  le_send_start_enc_req
+	branch generate_sk
+
+le_parse_enc_req_fixed_ltk:
+	jam 1,mem_ltk_exists
+	arg mem_le_fixed_ltk,contr
+	arg mem_le_ltk,contw
+	call memcpy16
+	branch le_parse_enc_req_after_auth
+
+
+le_ltk_lost:
+	bpatchx patch2f_3,mem_patch2f
+	jam FLAG_LE_ENC_NULL,mem_le_enc_state
+	jam FLAG_LE_ENC_NULL,mem_le_pairing_state
+	jam BT_EVT_LE_LTK_LOST,mem_fifo_temp
+	branch ui_ipc_send_event
+
+le_send_reject_ind:
+	arg 2,rega
+	arg LL_REJECT_IND,regb
+	call le_fifo_malloc_tx_ll
+	setarg LE_ERR_PIN_OR_KEY_MISSING
+	istore 1,contw
+	rtn		
+	
+le_send_enc_rsp:
+	arg mem_le_skds,contw
+	force 8,loopcnt
+	call generate_random_loop
+	arg mem_le_ivs,contw
+	force 4,loopcnt
+	call generate_random_loop
+	arg 13,rega
+	arg LL_ENC_RSP,regb
+	call le_fifo_malloc_tx_ll
+	fetch 8,mem_le_skds
+	istore 8,contw
+	fetch 4,mem_le_ivs
+	istore 4,contw
+	rtn
+
+le_send_start_enc_req:
+	arg LL_START_ENC_REQ,regb
+	branch le_send_ll_one_lenth
+
+le_send_start_enc_rsp:
+	arg LL_START_ENC_RSP,regb
+	branch le_send_ll_one_lenth
+	
+	
+le_parse_enc_rsp:
+	ifetch 8,contr
+	store 8,mem_le_skds
+	ifetch 4,contr
+	store 4,mem_le_ivs
+	branch generate_sk
+	
+le_parse_start_enc_req:
+	fetch 1,mem_le_state
+	set1 lestate_encryption,pdata
+	store 1,mem_le_state
+	rtn
+	
+le_parse_start_enc_rsp:
+	rtn master
+	jam BT_EVT_LE_START_ENC,mem_fifo_temp
+	call ui_ipc_send_event	
+	jam FLAG_LE_SEND_START_ENC_RSP,mem_le_enc_state
+	branch le_send_start_enc_rsp
+	
+le_parse_pause_enc_req:
+	jam FLAG_LE_ENC_PAUSE,mem_le_enc_state
+	call le_send_pause_enc_rsp	
+	jam BT_EVT_LE_PAUSE_ENC,mem_fifo_temp
+	branch ui_ipc_send_event	
+
+le_send_pause_enc_rsp:
+	arg LL_PAUSE_ENC_RSP,regb
+	branch le_send_ll_one_lenth	
+			
+
+le_parse_feature_rsp:
+le_parse_unknown_rsp:
+le_parse_pause_enc_rsp:
+le_parse_reject_ind:
+le_parse_ping_rsp:
+	rtn
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/lmp.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/lmp.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/lmp.prog	(working copy)
@@ -0,0 +1,2521 @@
+	
+/******************************************/
+/*************   LMP Parse   **************/
+/******************************************/
+init_lmp:
+	rtn wake
+init_lmp_work:
+	bpatchx patch2f_4,mem_patch2f
+	setarg 0
+	store 1,mem_lmp_to_send
+	store 1,mem_conn_sm
+	store 1,mem_lmo_opcode1
+	store 1,mem_lmo_opcode2
+	store 1,mem_esco_addr
+	store 1,mem_auth_enable
+	store 1,mem_connection_options
+	store 1,mem_pairing_auth
+	jam SWITCH_FLAG_INIT,mem_switch_flag
+	jam 0,mem_switch_fail_master_count
+	jam NULL_ENCRYP,mem_wait_encryption
+init_lmp_reinit:	
+	jam 0,mem_pairing_auth
+	jam 0,mem_sp_localsm
+	jam 0,mem_lmp_conn_state
+	//fall through
+parse_rx_done:
+	rtn
+
+parse_lmp:
+	bpatchx patch2f_5,mem_patch2f
+	call setlocalsm_master,master	//use this flag in hci
+	ncall setlocalsm_slave,master
+	call lmo_fifo_check
+	nrtn blank
+	fetch 1,mem_state_map
+	rtnbit0 smap_rxlmp
+	set0 smap_rxlmp,pdata
+	set0 mark_rxbuf_inuse,mark
+	store 1,mem_state_map
+	fetch 1,mem_rxbuf
+	fetcht 1,mem_state_map
+	isolate1 smap_lmptidinit,pdata
+	setflag true,smap_lmptid,temp
+	storet 1,mem_state_map
+	and_into 0x2,temp //smap_lmptid only
+	storet 1,mem_lmo_tid2
+	fetcht 1,mem_state_map
+	rshift pdata,pdata			/* align lmp_opcode */
+  	store 1,mem_lmi_opcode2
+	bpatchx patch2f_6,mem_patch2f
+  	fetch 1,mem_lmi_opcode2
+  	beq LMP_ESCAPE,parse_lmp_escape//multi
+  	beq LMP_ACCEPTED,parse_lmp_accepted//multi
+	beq LMP_NOT_ACCEPTED,parse_lmp_not_accepted//multi
+  	beq LMP_SET_AFH, parse_lmp_set_afh
+  	beq LMP_CLKOFFSET_REQ, parse_lmp_clkoffset_req
+ 	beq LMP_ENCRYPTION_MODE_REQ, parse_lmp_encryption_mode_req
+ 	beq LMP_ENCRYPTION_KEY_SIZE_REQ,parse_lmp_crypt_key
+	beq LMP_AUTO_RATE,parse_lmp_auto_rate
+	beq LMP_TEST_CONTROL,parse_lmp_test_control//multi
+	beq LMP_TEST_ACTIVATE,parse_lmp_test_activate
+	beq LMP_SETUP_COMPLETE,parse_lmp_setup_complete
+	beq LMP_SUPERVISION_TIMEOUT,parse_lmp_supervision_timeout
+	beq LMP_FEATURES_REQ,parse_lmp_features_req
+	beq LMP_HOST_CONNECTION_REQ,parse_lmp_conn_req
+	beq LMP_VERSION_REQ,parse_lmp_version_req
+	beq LMP_VERSION_RES,parse_lmp_version_res
+	beq LMP_DETACH,parse_lmp_detach
+	beq LMP_MAX_SLOT,parse_lmp_max_slot
+	beq LMP_MAX_SLOT_REQ,parse_lmp_max_slot_req
+	beq LMP_NAME_REQ,parse_lmp_name_req
+	beq LMP_NAME_RES,parse_lmp_name_res
+	beq LMP_FEATURES_RES,parse_lmp_features_res
+	beq LMP_COMB_KEY,parse_lmp_comb_key
+	beq LMP_AU_RAND, parse_lmp_au_rand
+	beq LMP_IN_RAND,parse_lmp_in_rand
+	beq LMP_SRES,parse_lmp_sres
+	beq LMP_INCR_POWER_REQ,parse_lmp_incr_power
+	beq LMP_DECR_POWER_REQ,parse_lmp_decr_power
+	beq LMP_MAX_POWER, parse_lmp_max_power
+	beq LMP_MIN_POWER, parse_lmp_min_power
+	beq LMP_PAGE_MODE_REQ, parse_lmp_page_mode_req
+	beq LMP_PAGE_SCAN_MODE_REQ, parse_lmp_page_scan_mode_req
+	beq LMP_PREFERRED_RATE, parse_lmp_preferred_rate
+	beq LMP_SLOT_OFFSET, parse_lmp_slot_offset
+	beq LMP_SNIFF_REQ, parse_lmp_sniff_req
+	beq LMP_START_ENCRYPTION_REQ, parse_lmp_start_encryption_req
+	beq LMP_STOP_ENCRYPTION_REQ, parse_lmp_stop_encryption_req
+	beq LMP_SWITCH_REQ, parse_lmp_switch_req
+	beq LMP_TEMP_RAND, parse_lmp_temp_rand
+	beq LMP_TEMP_KEY, parse_lmp_temp_key
+	beq LMP_TIMING_ACCURACY_REQ, parse_lmp_timing_accuracy_req
+	beq LMP_TIMING_ACCURACY_RES, parse_lmp_timing_accuracy_res
+	beq LMP_UNIT_KEY, parse_lmp_unit_key
+	beq LMP_UNSNIFF_REQ, parse_lmp_unsniff_req
+	beq LMP_USE_SEMI_PERMANENT_KEY, parse_lmp_use_semi_permanend_key
+	beq  LMP_ENCAPSULATED_HEADER,parse_lmp_encapsulated_header
+	beq  LMP_ENCAPSULATED_PAYLOAD,parse_lmp_encapsulated_payload
+	beq	LMP_SIMPLE_PAIRING_CONFIRM,parse_simple_pairing_confirm
+	beq  LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_simple_pairing_number
+	beq  LMP_DHKEY_CHECK,parse_dhkey_check
+	beq LMP_CLKOFFSET_RES, parse_lmp_clkoffset_res
+	beq LMP_ENC_KEY_SIZE_MASK_REQ,parse_enc_key_size_mask_req
+/* lmp is not recognized, check to see if we respond to all messages */ 
+/* rejecting the unrecognized message with PDU not recognized */
+reject_unknown_packet:
+	jam UNKNOWN_LMP_PDU,mem_lmo_reason2
+reject_lmp_packet:
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	rtn
+
+parse_lmp_clkoffset_req:
+	jam LMP_CLKOFFSET_RES,mem_lmo_opcode2
+	rtn	
+
+parse_enc_key_size_mask_req:
+	jam LMP_ENC_KEY_SIZE_MASK_RES,mem_lmo_opcode2
+	rtn
+	
+parse_lmp_set_afh:
+	fetch 4,mem_rxbuf+1
+	lshift pdata,pdata
+	store 4,mem_afh_instant
+	fetch 1,mem_rxbuf+5
+	store 1,mem_afh_new_mod
+	fetch 5,mem_rxbuf+6
+	store 5,mem_afh_map_new
+	fetch 5,mem_rxbuf+11
+	istore 5,contw
+	fetch 1,mem_mode
+	set1 afh_change,pdata
+	store 1,mem_mode
+	rtn
+parse_lmp_escape:
+	bpatchx patch2f_7,mem_patch2f
+	fetch 1,mem_rxbuf+1
+	set1 7,pdata
+	store 1,mem_lmi_opcode2
+	beq LMP_EXT_ACCEPTED,parse_lmpext_accepted
+	beq LMP_NOT_ACCEPTED_EXT,parse_lmpext_not_accepted
+	beq LMP_SNIFF_SUBRATING_REQ, parse_lmp_sniff_subrating_req
+	beq LMP_SNIFF_SUBRATING_RES, parse_lmp_sniff_subrating_res
+	beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_packet_type_table_req
+	beq LMP_EXT_FEATURES_REQ,parse_lmpext_features_req
+	beq LMP_EXT_FEATURES_RES,parse_lmpext_features_res
+	beq LMP_EXT_CHN_CLASSIFICATION_REQ,parse_lmpext_chn_classification_req
+	beq LMP_PAUSE_ENCRYPTION_REQ,parse_lmpext_pause_encrypt
+	beq LMP_RESUME_ENCRYPTION_REQ,parse_lmpext_resume_encrypt
+	beq LMP_IO_CAP_REQ,parse_lmpext_iocap_req
+	beq LMP_IO_CAP_RES,parse_lmpext_iocap_res
+	rtneq LMP_EXT_FEATURES_RES
+
+
+reject_unknown_ext_packet:
+	jam LMP_NOT_ACCEPTED_EXT,mem_lmo_opcode2
+	jam UNKNOWN_LMP_PDU,mem_lmo_reason2
+	
+	rtn
+parse_lmpext_chn_classification_req:
+	jam LMP_NOT_ACCEPTED_EXT,mem_lmo_opcode2
+	jam NOT_SUPPORT_CHN_CLASSIFICATION,mem_lmo_reason2
+	rtn
+	
+parse_lmpext_iocap_req:
+	call iocap_lmpext_load
+	jam LMP_IO_CAP_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmpext_iocap_res:
+	call iocap_lmpext_load
+	branch iocap_lmpext_common
+	
+iocap_lmpext_load:
+	arg      mem_sp_iocap_remote,contw
+	fetch 3, mem_rxbuf+2
+	istore    3,contw
+	rtn
+	
+iocap_lmpext_common:
+ifdef SIMPLE_PAIRING
+	branch master_set_mem_master_sp_flag,true//is un very ok to use master flag,but we have to add many codes if wo don't
+endif
+	rtn
+parse_lmpext_accepted:
+	fetch 1,mem_rxbuf+3
+	set1 7,pdata
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_accepted_ptt
+	rtn
+
+	
+parse_lmpext_not_accepted:
+	fetch 1,mem_rxbuf+3
+	set1 7,pdata
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_not_accepted_ptt
+	rtn
+
+parse_lmpext_accepted_ptt:
+	fetch 1,mem_ptt
+	fetcht 1,mem_state_map
+	nsetflag blank,smap_edr,temp
+	storet 1,mem_state_map
+parse_lmpext_not_accepted_ptt:
+	fetch 1,mem_state
+	rtnbit0 state_init_seq
+	set0 state_init_seq,pdata
+	store 1,mem_state
+	fetch 1,mem_auth_enable
+	nrtn blank
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	rtn
+
+parse_lmpext_pause_encrypt:
+	nbranch parse_lmpext_pause_encrypt_slave, master
+	jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2
+	branch tid_reply
+
+parse_lmpext_pause_encrypt_slave:	
+	jam LMP_PAUSE_ENCRYPTION_REQ, mem_lmo_opcode2
+	rtn
+
+parse_lmpext_resume_encrypt:
+//trans file to pc may cause pause/resume encrypt
+//if ms is conn_sm_wait_end the controllor won't send ack after recieved start_encypt_accept
+	call tid_reply
+	branch lmp_start_encryption
+
+parse_lmpext_features_req:
+	jam LMP_EXT_FEATURES_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmpext_features_res:
+	fetcht 1,mem_rxbuf+4
+	and temp,0x1,temp
+	storet 1,mem_remote_sppcap
+	fetch 1,mem_hci_cmd
+	bne hci_cmd_wait_remote_ext_feature,parse_lmpext_features_res_not_hci
+	jam 0,mem_hci_cmd
+parse_lmpext_features_res_not_hci:
+	fetch 1,mem_conn_sm
+	rtnne CONN_SM_WAIT_FEATURES_EXT
+	jam CONN_SM_SEND_CONN_REQ,mem_conn_sm
+	branch process_conn_sm
+
+parse_lmp_accepted:
+	bpatchx patch30_0,mem_patch30
+	fetch 1,mem_rxbuf+1
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_HOST_CONNECTION_REQ,parse_lmp_accepted_hostconn//ok
+	beq LMP_IN_RAND,parse_lmp_accepted_inrand//ok
+	beq LMP_ENCRYPTION_MODE_REQ,parse_lmp_accepted_enc_mode//ok
+	beq LMP_ENCRYPTION_KEY_SIZE_REQ,parse_lmp_accepted_enc_keysize//ok
+	beq LMP_START_ENCRYPTION_REQ,parse_lmp_accepted_start_enc//ok
+	beq LMP_STOP_ENCRYPTION_REQ,parse_lmp_accepted_stop_enc//ok
+	beq LMP_UNSNIFF_REQ,parse_lmp_accepted_unsniff_req//ok
+	beq LMP_SNIFF_REQ,parse_lmp_accepted_sniff_req//ok
+	beq LMP_SWITCH_REQ,parse_lmp_accepted_switch
+	// simple pairing 
+	beq LMP_ENCAPSULATED_HEADER,parse_lmp_accepted_encapsulated_header//ok
+	beq LMP_ENCAPSULATED_PAYLOAD,parse_lmp_accepted_encapsulated_payload//ok
+	beq LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_accepted_simple_pairing_number//ok
+	beq LMP_DHKEY_CHECK,parse_lmp_accepted_dhkey_check//ok
+	rtn
+	
+parse_lmp_not_accepted:
+	bpatchx patch30_1,mem_patch30
+	fetch 1,mem_rxbuf+1
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_NAME_REQ,parse_lmp_not_accepted_name_req//ok
+	beq LMP_HOST_CONNECTION_REQ,parse_lmp_not_accepted_hostconn//ok
+	beq LMP_AU_RAND,parse_lmp_not_accepted_aurand//ok
+	beq LMP_IN_RAND,parse_lmp_not_accepted_inrand//ok
+	beq LMP_SWITCH_REQ,parse_lmp_not_accepted_switch//ok
+	/* simple pairing support */
+	beq  LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_not_accepted_simple_pairing_number//ok
+	beq  LMP_DHKEY_CHECK,parse_lmp_not_accepted_dhkey_check//ok
+	beq LMP_UNSNIFF_REQ,parse_lmp_not_accepted_unsniff_req
+	beq LMP_SNIFF_REQ,parse_lmp_not_acdcept_sniff_req
+	rtn
+
+parse_lmp_accepted_switch:
+	jam BT_EVT_SWITCH_ACCEPT,mem_fifo_temp
+	call ui_ipc_send_event
+	branch role_switch_prepare0
+parse_lmp_not_accepted_switch:
+	jam BT_EVT_SWITCH_NOT_ACCEPT,mem_fifo_temp
+	call ui_ipc_send_event
+	jam SWITCH_FLAG_NOT_ACCEPT,mem_switch_flag
+	setarg TIMER_SWITCH_WAITE
+	arg switch_wait_timer,queue
+	branch timer_init
+
+
+parse_lmp_accepted_hostconn:
+	//fetch 1,mem_state
+	//rtnbit0 state_init_seq
+	fetch 1,mem_lmp_conn_state
+	set1 RECEIVED_CONN_REQ,pdata
+	store 1,mem_lmp_conn_state
+	jam BT_EVT_BB_CONNECTED,mem_fifo_temp
+	call ui_ipc_send_event
+	jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmo_opcode2
+	//nbranch parse_lmp_accepted_hostconn_ctn,master
+parse_lmp_accepted_hostconn_ctn:
+	/* checking to see if we requested host connection */
+	fetch 1,mem_conn_sm
+	bne CONN_SM_WAIT_CONN_ACCEPT, parse_rx_done
+	//branch parse_lmp_accepted_hostconn_master,master
+	/* continuing on with host connection state machine */
+	jam CONN_SM_AUTH_PAIR,mem_conn_sm
+	rtn
+	//branch host_create_conn_auth_pair
+
+	/* we need to move fast and send au_rand...jumping to next part of state machine for conn */
+//parse_lmp_accepted_hostconn_master:
+	//jam CONN_SM_AUTH_PAIR ,mem_conn_sm
+//	rtn
+
+parse_lmp_not_accepted_hostconn:
+	jam ACL_CONNECTION_ALREADY_EXISTS,mem_disconn_reason_send
+	jam LMP_DETACH,mem_lmo_opcode2
+	/* clearing connection state machine */
+	jam CONN_SM_STANDBY,mem_conn_sm
+	/* sending error message to host */
+	branch parse_rx_done,true
+	rtn
+
+parse_lmp_accepted_inrand:
+	fetch 1,mem_link_key_exists
+	nrtn blank
+	call clear_linkkey
+	call  lmp_generate_key
+	rtn master
+	set1 mark_slave_in_rand_accepted,mark
+	rtn
+
+parse_lmp_accepted_enc_mode:
+	nrtn master
+	jam LMP_ENCRYPTION_KEY_SIZE_REQ,mem_lmo_opcode2
+	fetch 1,mem_state_map
+	rtnbit0 smap_encryption
+	jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2
+	rtn
+
+parse_lmp_accepted_enc_keysize:
+	branch lmp_start_encryption
+	
+parse_lmp_accepted_start_enc:
+	call send_create_conn_start_l2cap_timer_sm
+	fetch 1,mem_state
+	rtnbit1 state_conn_comp
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	fetch 1,mem_conn_sm
+	rtnne CONN_SM_ENCRYPT_WAIT
+	jam CONN_SM_ENCRYPT_WAIT_CLEAR,mem_conn_sm
+	rtn
+	
+parse_lmp_accepted_stop_enc:
+	/* again this won't work with multipoint. keep track of anyone else encrypting */
+	//jam HOST_STOP_ENCRYPTION,message_queue_B0
+	//jam 1,message_queue_B1
+	//jam HOST_RETURN_SUCCESS,message_queue_B2
+	//fetch 1,mem_lmp_state2
+	//set1 MESSAGE_QUEUE,pdata
+	//store 1,mem_lmp_state2
+	rtn
+
+parse_lmp_not_accepted_aurand:	
+parse_lmp_not_accepted_aurand_send_detach:	
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam OTHER_END_TERMINATED,mem_disconn_reason_send
+	rtn
+/*in pair remote cancel the pair*/
+parse_lmp_not_accepted_inrand:
+	fetch 1,mem_rxbuf+2
+	beq KEY_MISSING,parse_lmp_inrand_key_missing
+	rtnne PAIRING_NOT_ALLOWED
+	jam PAIRING_NOT_ALLOWED,mem_disconn_reason_send
+	jam LMP_DETACH,mem_lmo_opcode2
+	rtn	
+parse_lmp_inrand_key_missing:
+	jam KEY_MISSING,mem_disconn_reason_send
+	jam LMP_DETACH,mem_lmo_opcode2
+	rtn
+	
+parse_lmp_not_accepted_name_req:
+	rtn
+	
+parse_lmp_not_accepted_simple_pairing_number:
+	jam      SP_STAT_NULL,mem_sp_state
+	jam LMP_DETACH,mem_lmo_opcode2
+	branch   parse_rx_done
+	
+parse_lmp_not_accepted_dhkey_check:
+ifdef LMP_DBG
+	call ice_break
+endif
+	jam      SP_STAT_NULL,mem_sp_state
+	jam LMP_DETACH,mem_lmo_opcode2
+	branch   parse_rx_done
+parse_lmp_not_accepted_unsniff_req:
+	jam BT_EVT_UNSNIFF_NOT_ACCEPT,mem_fifo_temp
+	branch ui_ipc_send_event
+	
+parse_lmp_accepted_unsniff_req:
+	jam BT_EVT_UNSNIFF_ACCEPT,mem_fifo_temp
+	call ui_ipc_send_event
+	branch sniff_exit
+	
+parse_lmp_accepted_sniff_req:
+	jam BT_EVT_SNIFF_ACCEPT,mem_fifo_temp
+	call ui_ipc_send_event
+	setarg 0
+	store 2,mem_dsniff
+	fetch 2,mem_sniff_param_interval
+	lshift pdata,pdata
+	store 2,mem_tsniff
+	fetch 1,mem_sniff_param_attempt
+	store 1,mem_sniff_attempt
+	fetch 1,mem_sniff_param_timeout
+	store 1,mem_sniff_timeout
+	branch sniff_init
+	
+parse_lmp_not_acdcept_sniff_req:
+	jam BT_EVT_SNIFF_NOT_ACCEPT,mem_fifo_temp
+	branch ui_ipc_send_event
+	
+parse_lmp_crypt_key:
+	fetcht 1,mem_rxbuf+1
+	storet 1,mem_key_size
+	branch accept_lmp_msg
+	
+parse_lmp_setup_complete:
+	fetch 1,mem_lmp_conn_state
+	set1 RECEIVED_SETUP_COMPLETE,pdata
+	store 1,mem_lmp_conn_state
+	rtnbit1 SENT_SETUP_COMPLETE
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	branch parse_rx_done
+	
+parse_lmp_max_slot:
+	//jam LMP_MAX_SLOT,mem_lmi_opcode2
+	//branch accept_lmp_msg
+	rtn
+	
+parse_lmp_max_slot_req:
+	fetch 1,mem_max_slot
+	fetcht 1,mem_rxbuf+1
+	isub temp,null
+	//jam LMP_MAX_SLOT_REQ,mem_lmi_opcode2
+	branch accept_lmp_msg,positive
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	jam UNSPECIFIED_ERROR,mem_lmo_reason2
+	jam LMP_MAX_SLOT_REQ,mem_lmi_opcode2
+	rtn
+	
+parse_lmp_detach:
+	call prepare_disconnect
+	branch accept_lmp_msg
+	
+accept_lmp_msg:
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	rtn
+
+parse_lmp_incr_power:
+	jam LMP_MAX_POWER,mem_lmo_opcode2
+	rtn
+
+parse_lmp_decr_power:
+	jam LMP_MIN_POWER,mem_lmo_opcode2
+	rtn
+	
+parse_lmp_version_res:
+	fetch 1,mem_conn_sm
+	rtneq CONN_SM_WAIT_VERSION
+	/* continuing on with host connection state machine */
+	jam CONN_SM_SEND_FEATURES ,mem_conn_sm
+	/* we need to move fast and send au_rand...jumping to next part of state machine for conn */
+	rtn
+
+
+parse_lmp_auto_rate:
+	rtn	
+
+parse_lmp_in_rand:
+	call lmp_copy_rand
+	jam pincode_state_wait_pincode,mem_pincode_state
+	jam BT_EVT_PINCODE_REQ,mem_fifo_temp
+	call ui_ipc_send_event
+
+	call tid_check
+	nbranch lmp_accept_inrand,true
+	//fetch 1,mem_auth_enable
+	nbranch parse_lmp_inrand_res,master // ignore this because of not ssp temporary
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	jam LMP_IN_RAND,mem_lmi_opcode2
+	jam TRANSACTION_COLLISION,mem_lmo_reason2
+	rtn
+parse_lmp_inrand_res:
+	fetch 1,mem_op
+	set1 op_inrand_req,pdata
+	store 1,mem_op
+	rtn
+
+//store current tid
+pop_tid_follow:
+	fetcht 1,mem_state_map
+	nsetflag blank,smap_lmptid,temp
+	storet 1,mem_state_map
+	rtn
+	
+//restore current tid
+push_tid_follow:
+	fetch 1,mem_lmo_tid2
+	rshift pdata,pdata
+	and_into 1,pdata
+	rtn
+
+parse_lmp_au_rand_moudle:
+	fetch 1,mem_nv_data_number
+	rtn blank
+	fetch 1,mem_pairing_auth
+	call load_device_list,blank
+	rtn	
+
+parse_lmp_au_rand:
+	call parse_lmp_au_rand_moudle
+	call push_tid_follow
+	store 1,mem_sres_tid
+	call lmp_copy_rand
+	jam LMP_SRES,mem_lmo_opcode2
+	fetch 1,mem_link_key_exists
+	nrtn blank
+	fetch 1,mem_state
+	rtnbit1 state_combkey		/* we have comb key, but not verified */
+	jam KEY_MISSING,mem_lmo_reason2
+	branch reject_lmp_packet
+
+parse_lmp_sres:	
+	arg mem_plap,rega
+	call function_e1
+	fetch 4,mem_rxbuf+1
+	fetcht 4,mem_input_store
+	isub temp,null
+	branch authentication_ok,zero
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam AUTHENTICATION_FAILURE_ERROR,mem_disconn_reason_send	
+	rtn
+authentication_ok:
+	call authentication_ok_common
+	fetch 1,mem_ssp_enable
+	branch  pairing_success,blank
+	rtn
+
+	
+authentication_ok_common:
+	call copy_aco
+	call linkkey_ready///save link key
+	fetch 1,mem_op
+	isolate1 op_auth_req,pdata
+	set0 op_auth_req,pdata
+	store 1,mem_op
+	fetch 1,mem_conn_sm
+	beq CONN_SM_AUTH_WAIT,authentication_ok_conn_sm
+	beq CONN_SM_PAIRING_WAIT,authentication_ok_conn_sm
+	rtn
+authentication_ok_conn_sm:
+	fetch 1,mem_pairing_auth
+	rtnne DEFALT_PAIRING_AUTH
+	fetch 1,mem_state_map
+	rtnbit1 smap_encryption
+	branch host_create_conn_encrypt
+
+parse_lmp_comb_key:
+	arg mem_rxbuf+1,rega
+	arg mem_kinit,regb
+	arg mem_random_number,contw
+	call xor16
+	arg mem_plap,rega
+	call generate_linkkey
+	jam LMP_AU_RAND,mem_lmo_opcode2
+	fetch 1,mem_state
+	bbit0 state_combkey,lmp_generate_key
+	rtn
+	
+parse_lmp_name_res:
+	fetch 2,mem_len
+	add pdata,-3,loopcnt	//for remote name length error
+	fetcht 1,mem_rxbuf+1
+	setarg mem_tmp_buffer
+	iadd temp,contw
+	arg mem_rxbuf+3,contr
+	call memcpy
+	fetcht 1,mem_name_offset
+	fetch 1,mem_rxbuf+2
+	isub temp,pdata
+	sub pdata,14,null
+	branch parse_lmp_name_res_end,positive
+	add temp,14,pdata
+	store 1,mem_name_offset
+	jam LMP_NAME_REQ,mem_lmo_opcode2
+	rtn
+parse_lmp_name_res_end:
+	fetch 1,mem_state_map
+	set1 smap_name_res,pdata
+	store 1,mem_state_map
+	bbit1 smap_name_req,lmp_disconnect
+	rtn
+parse_lmp_name_req:
+	fetch 1,mem_rxbuf+1
+	store 1,mem_lmi_opcode2 //offset 
+	jam LMP_NAME_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmp_conn_req:
+	branch accept_lmp_msg
+
+parse_lmp_timing_accuracy_req:
+	jam LMP_TIMING_ACCURACY_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmp_features_req:
+	jam LMP_FEATURES_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmp_version_req:
+	jam LMP_VERSION_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmp_supervision_timeout:
+//	fetch 2,mem_rxbuf+1
+//	store 2,mem_supervision_to
+	rtn
+	
+
+
+parse_lmp_sniff_subrating_req:
+	fetch 2,mem_tsniff
+	iforce temp
+	fetch 1,mem_rxbuf+2
+	store 1,mem_subsniff_rate
+	imul32 temp,temp
+	fetch 2,mem_rxbuf+3
+	lshift pdata,pdata
+	store 2,mem_subsniff_tcmax
+	fetch 4,mem_rxbuf+5
+	lshift pdata,pdata
+ 	store 4,mem_subsniff_instant
+	//product pdata
+	deposit temp
+	store 2,mem_subsniff_tsniff
+	rtn
+parse_lmpext_packet_type_table_req:
+	fetcht 1,mem_ptt
+	fetch 1,mem_rxbuf+2
+	ixor temp,null
+	nbranch reject_unknown_ext_packet,zero
+	isolate1 0,pdata
+	fetch 1,mem_state_map
+	setflag true,smap_edr,pdata
+	store 1,mem_state_map
+	jam LMP_EXT_ACCEPTED,mem_lmo_opcode2
+	jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmi_opcode2
+	rtn
+
+	
+parse_lmp_sniff_subrating_res:
+parse_lmp_preferred_rate:
+parse_lmp_max_power:
+parse_lmp_min_power:
+	rtn
+parse_lmp_page_mode_req:
+	//jam LMP_PAGE_MODE_REQ,mem_lmi_opcode2
+	branch accept_lmp_msg
+parse_lmp_page_scan_mode_req:
+	//this can influence connection. need accepted
+	//jam LMP_PAGE_SCAN_MODE_REQ,mem_lmi_opcode2
+	branch accept_lmp_msg
+
+
+	
+parse_lmp_slot_offset:
+	fetch 2,mem_rxbuf+1
+	store 2,mem_slot_offset
+	rtn
+
+parse_lmp_sniff_req_check_sniff_para:
+	fetch 2,mem_rxbuf+4 /* tsniff */
+	fetcht 1,mem_lpm_mult
+	imul32 temp,pdata
+	arg 0x640,temp
+	isub temp,null
+//	branch lmp_reject_sniff,positive
+	rtn
+	
+parse_lmp_sniff_req:
+	fetch 2,mem_rxbuf+6
+	branch lmp_reject_sniff,blank
+	call parse_lmp_sniff_req_check_sniff_para
+	branch lmp_reject_sniff,positive
+	fetch 1,mem_device_option
+	sub pdata,dvc_op_module,null
+	call module_set_lpm_mult_2,zero
+	fetch 1,mem_state
+	bbit1 state_insniff,lmp_reject_sniff
+	fetch 2,mem_rxbuf+2 /* dsniff */
+	lshift pdata,pdata
+	store 2,mem_dsniff	
+	fetch 2,mem_rxbuf+4 /* tsniff */
+	lshift pdata,pdata
+	store 2,mem_tsniff
+	fetch 2,mem_rxbuf+6 /* sniff attempt */
+	store 1,mem_sniff_attempt
+	iforce temp
+	fetch 2,mem_rxbuf+8 /* sniff timeout */
+	store 1,mem_sniff_timeout
+	isub temp,null
+	nbranch set_big_value_to_attempt,positive
+	store 1,mem_sniff_attempt
+set_big_value_to_attempt:	
+	//call sniff_init
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_SNIFF_REQ,mem_lmi_opcode2
+	rtn
+
+lmp_reject_sniff:
+	jam PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch reject_lmp_packet
+
+parse_lmp_start_encryption_req:
+	call accept_lmp_msg
+	call lmp_copy_rand
+	call function_e3
+	branch start_encryption
+	
+parse_lmp_stop_encryption_req:
+	call accept_lmp_msg
+	branch stop_encryption
+	
+
+parse_lmp_switch_req:
+	fetch 4,mem_rxbuf+1
+	lshift pdata,pdata
+	//branch parse_lmp_switch_req_not_accept
+	branch parse_lmp_switch_accept,master
+	fetcht 1,mem_link_key_exists
+	nbranch parse_lmp_switch_req_clear_mark,blank
+parse_lmp_switch_req_not_accept:
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	jam LMP_SWITCH_REQ,mem_lmi_opcode2
+	jam PDU_NOT_ALLOWED,mem_lmo_reason2
+	rtn
+parse_lmp_switch_req_clear_mark:
+	jam LMP_SLOT_OFFSET,mem_lmo_opcode2
+	jam 0,mem_conn_sm
+	branch role_switch_prepare
+
+parse_lmp_switch_accept:
+	call role_switch_prepare
+	set1 mark_reconn_recieve_switch,mark
+	fetch 1,mem_connection_options
+	set0 CONNECTION_SWITCH,pdata
+	store 1,mem_connection_options
+	branch accept_lmp_msg
+
+	
+
+parse_lmp_temp_rand:
+parse_lmp_temp_key:
+parse_lmp_timing_accuracy_res:	
+parse_lmp_unit_key:	
+parse_lmp_use_semi_permanend_key:
+	rtn
+
+	
+parse_lmp_unsniff_req:
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_UNSNIFF_REQ,mem_lmi_opcode2
+	jam BT_EVT_REMOTE_UNSNIFF,mem_fifo_temp
+	call ui_ipc_send_event
+	branch sniff_exit
+	
+parse_lmp_encapsulated_header:
+	fetch 1,mem_rxbuf+1
+	bne ENCAPSULATED_MAJOR_TYPE_P192,parse_lmp_encapsulated_header_reject
+	fetch 1,mem_rxbuf+2
+	bne ENCAPSULATED_MINOR_TYPE_P192,parse_lmp_encapsulated_header_reject
+	fetch 1,mem_rxbuf+3
+	bne ENCAPSULATED_LEN_P192,parse_lmp_encapsulated_header_reject
+	call check_localsm
+	branch parse_lmp_encapsulated_header_master,true
+	jam SP_STAT_KEY_RECV,mem_sp_state
+parse_lmp_encapsulated_header_master:
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_ENCAPSULATED_HEADER,mem_lmi_opcode2
+	branch parse_rx_done
+	
+parse_lmp_encapsulated_header_reject:
+	jam      PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch   reject_lmp_packet
+	
+parse_lmp_accepted_encapsulated_header:
+	//jam LMP_ENCAPSULATED_PAYLOAD,mem_lmi_opcode2
+	//branch   accept_lmp_msg  	
+	jam LMP_ENCAPSULATED_PAYLOAD,mem_lmo_opcode2
+      //   branch   accept_lmp_msg  	
+         rtn
+parse_lmp_accepted_simple_pairing_number:
+	fetch 1,mem_ssp_mode_flag
+	beq SSP_MODE_SSP_PIN_FLAG,parse_lmp_accepted_simple_pairing_number_ssp_pin
+	beq SSP_MODE_PASSKEY_ENTRY_FLAG,parse_lmp_accepted_simple_pairing_number_passkey
+parse_lmp_accepted_simple_pairing_number_common:
+	call check_localsm
+	rtn true
+	jam SP_STAT_CONFIRM_RECV,mem_sp_state
+	rtn
+
+parse_lmp_accepted_simple_pairing_number_ssp_pin:
+	call g_noninit_number_confirm
+	jam BT_EVT_BT_GKEY_GENERATE,mem_fifo_temp
+	call ui_ipc_send_event
+	branch parse_lmp_accepted_simple_pairing_number_common
+
+
+parse_lmp_accepted_simple_pairing_number_passkey:
+	call check_localsm
+	rtn true
+	fetch 1,mem_authentication_passkey_times
+	beq 19,authentication_passkey_end
+	increase 1,pdata
+	store 1,mem_authentication_passkey_times
+//	branch p_authentication_passkey
+
+authentication_passkey:
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	jam      SP_STAT_COMMIT_CALC,mem_sp_state 
+	fetch 1,mem_authentication_passkey_times
+	copy pdata,queue
+	fetch 6,mem_pin
+	qisolate1 pdata
+	setarg 0x80
+	setflag true,0,pdata
+	store 1,mem_passkey_1bit
+	rtn
+
+authentication_passkey_end:	
+	jam SP_STAT_CONFIRM_RECV,mem_sp_state
+	rtn
+
+parse_lmp_accepted_dhkey_check:
+	call parse_lmp_accepted_dhkey_check_common
+pairing_success:
+	fetch 1,mem_flag_pairing_state
+	rtn blank
+	jam FLAG_PAIRING_STATE_NOT_PAIRING,mem_flag_pairing_state
+	jam BT_EVT_BT_PAIRING_SUCCESS,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+parse_lmp_accepted_dhkey_check_common:
+	//here must be change***  shyd
+	call check_localsm
+ifdef SIMPLE_PAIRING
+	ncall g_noninit,true	//when be master  call g_init
+	call g_init,true
+endif
+	call check_localsm
+	rtn true
+	jam SP_STAT_LINK_KEY_CALC,mem_sp_state
+	jam SP_FLAG_COMMIT,mem_sp_flag
+	rtn
+
+parse_simple_pairing_confirm:
+	arg mem_sp_confirm_remote,contw
+	arg mem_rxbuf+1,contr
+	call memcpy16
+	fetch 1,mem_ssp_mode_flag
+	rtneq  SSP_MODE_PASSKEY_ENTRY_FLAG
+ifdef SIMPLE_PAIRING
+	branch master_set_mem_master_sp_flag
+endif
+	
+parse_lmp_encapsulated_payload:
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_RANDOM_SEND,parse_encapsulated_payload_master
+	fetch    1,mem_sp_state
+	bne SP_STAT_KEY_RECV,parse_lmp_encapsulated_payload_reject
+parse_encapsulated_payload_master:
+	fetch    1,mem_sp_remote_key_recv_count
+	sub      pdata,0x20,contw
+	nbranch  parse_lmp_encapsulated_payload_reject,positive
+	arg      mem_sp_pubkey_remote,contw
+	iadd     contw,contw
+	fetch 8,mem_rxbuf+1
+	istore   8,contw
+	fetch 8,mem_rxbuf+9
+	istore   8,contw
+	fetch    1,mem_sp_remote_key_recv_count
+	increase 16,pdata
+	store    1,mem_sp_remote_key_recv_count
+	bne ENCAPSULATED_LEN_P192,accept_lmp_msg
+parse_lmp_encapsulated_payload_completed:
+	call check_localsm
+	branch accept_lmp_msg,true
+	jam      SP_KEY_VALID,mem_sp_remote_key_invalid
+	jam      SP_STAT_KEY_GENERATE,mem_sp_state
+	jam      SP_FLAG_COMMIT,mem_sp_flag  
+	branch   accept_lmp_msg
+parse_lmp_encapsulated_payload_reject:
+	jam      PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch   reject_lmp_packet	
+parse_lmp_accepted_encapsulated_payload: 
+	fetch 1,mem_sp_local_key_send_count
+	beq	ENCAPSULATED_LEN_P192,parse_lmp_encapsulated_payload_all_accepted
+	jam LMP_ENCAPSULATED_PAYLOAD,mem_lmo_opcode2
+	branch   parse_rx_done 
+	
+parse_lmp_encapsulated_payload_all_accepted:   
+	call check_localsm
+	branch parse_lmp_encapsulated_payload_all_accepted_master,true
+	fetch 1,mem_ssp_mode_flag
+	beq SSP_MODE_PASSKEY_ENTRY_FLAG,parse_lmp_encapsulated_payload_all_accepted_get_passkey
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	jam      SP_STAT_COMMIT_CALC,mem_sp_state 
+	branch   parse_rx_done
+
+parse_lmp_encapsulated_payload_all_accepted_get_passkey:
+	jam BT_EVT_BT_GET_PASSKEY,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+parse_lmp_encapsulated_payload_all_accepted_master:
+	//call sp_master_generate_local_key
+	branch   parse_rx_done   
+
+parse_lmp_simple_pairing_number:
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_RANDOM_SEND,parse_lmp_simple_pairing_number_master
+	fetch    1,mem_sp_state
+	bne SP_STAT_RANDOM_RECV,parse_lmp_simple_pairing_number_reject
+parse_lmp_simple_pairing_number_master:
+	arg      mem_sp_random_remote,contw
+	fetch 8,mem_rxbuf+1
+	istore   8,contw
+	fetch 8,mem_rxbuf+9
+	istore   8,contw
+	call check_localsm
+	branch parse_lmp_simple_pairing_number_master0,true
+	jam      SP_STAT_RANDOM_SEND,mem_sp_state
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	branch accept_lmp_msg  
+parse_lmp_simple_pairing_number_master0:
+	jam SP_STAT_COMMIT_CALC,mem_master_sp_state
+ifdef SIMPLE_PAIRING
+	branch master_set_mem_master_sp_flag
+endif
+	//jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2
+	//branch accept_lmp_msg  
+parse_lmp_simple_pairing_number_reject:
+	jam      PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch reject_lmp_packet
+	
+parse_dhkey_check:
+	fetch    1,mem_master_sp_state
+	beq SP_STAT_CONFIRM_SEND,parse_dhkey_check_master
+	fetch    1,mem_sp_state
+	bne SP_STAT_CONFIRM_RECV,parse_lmp_dhkey_check_reject
+parse_dhkey_check_master:
+	arg      mem_sp_check_result,contw
+	arg mem_rxbuf+1,contr
+	call memcpy16
+	call check_localsm
+	branch parse_dhkey_check_master0,true
+	fetch 1,mem_ssp_mode_flag
+	beq SSP_MODE_SSP_PIN_FLAG,number_comparison_mode
+number_comparison_successed:
+	jam 0,mem_flag_mode_ssp_pin
+	jam SP_STAT_CONFIRM_CHECK,mem_sp_state
+	jam SP_FLAG_COMMIT,mem_sp_flag
+	jam LMP_DHKey_Check,mem_lmi_opcode2
+	branch   parse_rx_done
+	
+parse_dhkey_check_master0:
+	jam      SP_STAT_CONFIRM_CHECK,mem_master_sp_state
+	jam      SP_FLAG_COMMIT,mem_master_sp_flag
+	branch   parse_rx_done
+parse_lmp_dhkey_check_reject:
+	jam      PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch reject_lmp_packet
+
+number_comparison_mode:
+	fetch 1,mem_flag_mode_ssp_pin
+	bbit1 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT ,comparison_result
+	set1 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT,pdata
+	store 1,mem_flag_mode_ssp_pin
+	rtn
+	
+comparison_result:
+	bbit1 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,number_comparison_successed
+	jam 0,mem_flag_mode_ssp_pin
+	branch parse_lmp_dhkey_check_reject
+
+	
+parse_lmp_clkoffset_res:
+	branch parse_rx_done
+		
+parse_lmp_encryption_mode_req:
+	fetch 1,mem_connection_options
+	set0 CONNECTION_ENCRYPT
+	store 1,mem_connection_options
+	call accept_lmp_msg
+	nrtn master					/* do sth only if we're master */
+	fetch 1,mem_rxbuf+1
+	fetcht 1,mem_op
+	setflag blank,op_stop_enc,temp
+	nsetflag blank,op_start_enc,temp
+	storet 1,mem_op
+	rtn 
+	
+parse_lmp_features_res:
+	fetcht 8,mem_rxbuf+1		/*fix bcp(baoshijie) err*/
+parse_lmp_features_res_not_hci:	
+	fetch 1,mem_conn_sm
+	rtnne CONN_SM_WAIT_FEATURES_RES
+
+	fetch 1,mem_connection_options
+	bbit0 CONNECTION_FEATURE_EXT,parse_lmp_send_conn
+
+	jam CONN_SM_SEND_FEATURES_EXT,mem_conn_sm
+	rtn
+parse_lmp_send_conn:
+	jam CONN_SM_SEND_CONN_REQ,mem_conn_sm
+	rtn
+parse_lmp_test_activate:
+	fetch 1,mem_debug_config
+	store 1,mem_test_mode_old_debug_config
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_TEST_ACTIVATE,mem_lmi_opcode2
+	rtn
+parse_lmp_test_control:
+	/* the 9 test control parameters are XORed with 0x55 */
+	/* doing the XOR here and storing in mem_temp_payload */
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_TEST_CONTROL,mem_lmi_opcode2
+	force 9,loopcnt
+	arg mem_rxbuf+1,contr
+	arg mem_temp_payload,contw
+parse_lmp_test_xor:
+	ifetch 1,contr
+	xor_into 0x55,pdata
+	istore 1,contw
+	loop parse_lmp_test_xor
+	fetch 1,test_mode_scenario
+	fetcht 1,mem_tester_emulate
+	set0 tester_no_whitening,temp
+	set0 tester_pattern_test,temp
+	beq EXIT_TEST_MODE,	 parse_lmp_test_control_exit
+	beq PAUSE_TEST_MODE,	 parse_lmp_test_control_pause
+	beq CLOSED_LOOP_BACK_ACL,	 parse_lmp_test_control_loopback
+	beq ACL_WITHOUT_WHITENING,	 parse_lmp_test_control_loopback_nowhite
+	beq CLOSED_LOOP_BACK_SCO,	 parse_lmp_test_control_loopback
+	beq SCO_WITHOUT_WHITENING,	 parse_lmp_test_control_loopback_nowhite
+	beq ZERO_PATTERN,	 parse_lmp_test_control_pattern
+	beq ONE_PATTERN,	 parse_lmp_test_control_pattern
+	beq ALT_PATTERN,	 parse_lmp_test_control_pattern
+	beq ALT2_PATTERN,	 parse_lmp_test_control_pattern
+	beq PSEUDORANDOM,	 parse_lmp_test_control_pattern
+	rtn
+parse_lmp_test_control_exit:
+	/* restoring old parameters */
+	fetch 1,mem_tester_emulate
+	set1 tester_exit,pdata
+	set1 tester_change,pdata
+	store 1,mem_tester_emulate
+	rtn
+parse_lmp_test_control_pattern:
+	set1 tester_pattern_test,temp
+	jam 5,mem_lch_code
+	fetch 2,test_mode_data_length
+	iforce loopcnt
+	store 2,mem_len
+	arg mem_rxbuf,contw
+	call pn9
+parse_lmp_test_control_loopback_nowhite:
+	set1 tester_no_whitening,temp
+parse_lmp_test_control_loopback:
+	set1 tester_change,temp
+	force 0,pdata
+	store 1,mem_slave_rcvcnt
+	store 2,mem_tst_pktcnt_crc
+	store 2,mem_tst_pktcnt_dmh
+	store 2,mem_tst_pktcnt_hec
+	store 2,mem_tst_pktcnt_sync
+	fetch 1,test_mode_hopping_mode
+	compare FIXED_FREQ,pdata,0xff
+	setflag true,tester_fixed_freq,temp
+	storet 1,mem_tester_emulate
+	rtn
+
+parse_lmp_test_control_pause:
+	set0 mark_testmode,mark
+	jam 0,mem_tester_emulate
+	fetch 1,mem_debug_config
+	set0 debug_tx_pattern,pdata
+	store 1,mem_debug_config
+	rtn
+
+
+	
+	
+
+lmp_copy_rand:	
+	arg mem_rxbuf+1,contr
+	arg mem_random_number,contw
+	branch memcpy16
+
+lmp_generate_key:
+	jam LMP_COMB_KEY,mem_lmo_opcode2
+	rtn
+
+lmp_start_encryption:
+	nrtn master
+	jam LMP_START_ENCRYPTION_REQ,mem_lmo_opcode2
+	rtn
+	
+lmp_accept_inrand:
+	arg mem_lap,rega
+	call generate_kinit
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_IN_RAND,mem_lmi_opcode2
+	rtn
+
+lmp_disconnect:
+	jam 10,mem_conn_timer
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam LOCAL_HOST,mem_disconn_reason_send	
+	rtn
+
+/*********************************/
+/*********lmp send*************/
+/********************************/
+	/* enable user if a lmp packet is to send */
+send_lmp:
+	bpatchx patch30_2,mem_patch30
+	disable user
+	call lmo_fifo_process
+	fetch 1,mem_lmp_to_send
+	rtn blank
+/* lmp message to be processed. this will either be because host??? */
+/* wants to send a lmp message or because one resulted from the LMP */
+/* processing section */
+/********* outgoing lmp lookup table *************/
+	bbit1 7,send_lmp_escape
+send_lmp0:
+	beq LMP_NAME_REQ,	 send_lmp_name_req
+	beq LMP_NAME_RES,	 send_lmp_name_res
+	beq LMP_ACCEPTED,	 send_lmp_accepted
+	beq LMP_NOT_ACCEPTED,	 send_lmp_not_accepted
+	beq LMP_FEATURES_REQ,	 send_lmp_features_req
+	beq LMP_FEATURES_RES,	 send_lmp_features_res
+	beq LMP_TIMING_ACCURACY_RES,	 send_lmp_timing_accuracy_res
+	beq LMP_VERSION_REQ,	 send_lmp_version_req
+	beq LMP_VERSION_RES,	 send_lmp_version_res
+	beq LMP_SETUP_COMPLETE,	 send_lmp_setup_complete
+	beq LMP_SUPERVISION_TIMEOUT,	 send_lmp_superto
+	beq LMP_HOST_CONNECTION_REQ,send_lmp_no_payload
+	beq LMP_IN_RAND,send_lmp_inrand
+	beq LMP_COMB_KEY,send_lmp_comb_key
+	beq LMP_AU_RAND,send_lmp_aurand
+	beq LMP_SRES,send_lmp_sres
+	beq LMP_ENCRYPTION_MODE_REQ,send_lmp_encryption_mode_req
+	beq LMP_ENCRYPTION_KEY_SIZE_REQ,send_lmp_encryption_key_size_req
+	beq LMP_START_ENCRYPTION_REQ,send_lmp_start_encryption
+	beq LMP_DETACH,send_lmp_detach
+	beq LMP_QUALITY_OF_SERVICE_REQ, send_lmp_quality_of_service_req
+	beq LMP_UNIT_KEY,send_lmp_unit_key
+	//Optional (O)
+	beq LMP_INCR_POWER_REQ,send_lmp_inc_power	
+	beq LMP_CLKOFFSET_RES, send_lmp_clkoffset_res	
+	beq LMP_MAX_POWER,send_lmp_nopayload_reply
+	beq LMP_MAX_SLOT, send_lmp_max_slot
+	beq LMP_MAX_SLOT_REQ, send_lmp_max_slot_req
+	beq LMP_MIN_POWER,send_lmp_nopayload_reply
+	beq LMP_SLOT_OFFSET, send_lmp_slot_offset
+	beq LMP_SWITCH_REQ, send_lmp_switch_req
+	beq LMP_SNIFF_REQ, send_lmp_sniff_req
+	beq LMP_STOP_ENCRYPTION_REQ, send_lmp_stop_encryption_req	
+	beq LMP_TIMING_ACCURACY_REQ, send_lmp_timing_accuracy_req
+	beq LMP_UNSNIFF_REQ, send_lmp_unsniff_req
+	beq LMP_ENCAPSULATED_HEADER,send_lmp_encapsulated_header
+	beq LMP_ENCAPSULATED_PAYLOAD,send_lmp_encapsulated_payload
+	beq LMP_SIMPLE_PAIRING_CONFIRM,send_lmp_simple_pairing_comfirm
+	beq LMP_SIMPLE_PAIRING_NUMBER,send_lmp_simple_pairing_number
+	beq LMP_DHKEY_CHECK,send_lmp_dhkey_check
+	beq LMP_AUTO_RATE,send_lmp_auto_rate
+	beq LMP_ENC_KEY_SIZE_MASK_RES,send_lmp_enc_key_size_mask_res
+	//master only must(M)
+	beq LMP_CLKOFFSET_REQ, send_lmp_clkoffset_req
+	beq LMP_QUALITY_OF_SERVICE, send_lmp_quality_of_service
+	beq LMP_TEST_ACTIVATE, send_lmp_test_activate
+	beq LMP_TEST_CONTROL, send_lmp_test_control
+send_lmp_error:
+	branch assert
+	rtn
+send_lmp_escape:
+	beq LMP_EXT_ACCEPTED,send_lmpext_accepted
+	beq LMP_EXT_FEATURES_RES,send_lmpext_features_res
+	beq LMP_NOT_ACCEPTED_EXT,send_lmpext_not_accepted
+	beq LMP_EXT_FEATURES_REQ,send_lmpext_features_req
+	beq LMP_PACKET_TYPE_TABLE_REQ,send_lmpext_packet_type_table_req
+	beq LMP_PAUSE_ENCRYPTION_REQ,send_lmpext_pause_encryption_req
+	beq LMP_IO_CAP_REQ,send_lmp_io_cap_req
+         beq LMP_IO_CAP_RES,send_lmpext_io_cap_res
+         beq LMP_SNIFF_SUBRATING_REQ,send_lmpext_sniff_subrating_req
+         beq LMP_SNIFF_SUBRATING_RES,send_lmpext_sniff_subrating_res
+	branch assert
+
+
+/******** LMP follow messages **********/
+/****** TID follow received packet  *******/
+
+send_lmp_accepted:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_lmi_opcode
+	istore 1,contw
+	call send_lmp_follow
+	bpatchx patch30_3,mem_patch30
+	fetch 1,mem_lmi_opcode
+	beq LMP_IN_RAND,send_lmp_accepted_inrand
+	beq LMP_ENCRYPTION_MODE_REQ,send_lmp_accepted_enc_mode
+	beq LMP_ENCRYPTION_KEY_SIZE_REQ,send_lmp_accepted_enc_key
+	beq LMP_SNIFF_REQ,send_lmp_accept_sniff_req
+	beq LMP_HOST_CONNECTION_REQ,send_lmp_accepted_connection
+	beq LMP_DHKEY_CHECK,send_lmp_accept_dhkey_check
+	beq LMP_START_ENCRYPTION_REQ,send_create_conn_start_l2cap_timer_sm  
+	rtn	
+	
+send_create_conn_start_l2cap_timer_sm:
+	fetch 1,mem_conn_sm
+	rtn blank
+	jam CONN_SM_WAIT_DONE,mem_conn_sm
+	setarg TIMER_ENPT_WAITE
+	arg enpt_delay_timer,queue
+	branch timer_init
+	
+send_lmp_accept_sniff_req:
+	branch sniff_init
+send_lmp_not_accepted:
+	force 3,pdata
+	call msg_send_lmp
+	fetch 1,mem_lmi_opcode
+	beq LMP_AU_RAND,send_not_accept_aurand
+	istore 1,contw
+	fetch 1,mem_lmo_reason
+	istore 1,contw
+	branch send_lmp_follow
+
+send_not_accept_aurand:
+	istore 1,contw
+	fetch 1,mem_lmo_reason
+	istore 1,contw
+	arg mem_sres_tid,temp
+	branch special_tid_store
+
+send_lmpext_accepted:	
+	force 4,queue
+	call send_lmpext
+	setarg LMP_ESCAPE
+	istore 1,contw
+	fetch 1,mem_lmi_opcode
+	set0 7,pdata
+	istore 1,contw
+	fetch 1,mem_lmi_opcode
+	branch send_lmp_follow
+
+send_lmpext_not_accepted:
+	force 5,queue
+	call send_lmpext
+	setarg LMP_ESCAPE
+	istore 1,contw
+	fetch 1,mem_lmi_opcode
+	set0 7,pdata
+	istore 1,contw
+	fetch 1,mem_lmo_reason
+	istore 1,contw
+	branch send_lmp_follow
+	
+
+send_lmp_accepted_inrand:
+	call clear_linkkey
+	call tid_check	
+	rtn true
+	branch lmp_generate_key
+
+send_lmp_accepted_enc_mode:
+	fetch 1,mem_op
+	bbit1 op_start_enc,send_lmp_accepted_enc_start
+	rtnbit0 op_stop_enc
+	jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2
+	set0 op_stop_enc,pdata
+	call tid_reply
+	branch send_lmp_accepted_enc_exit
+send_lmp_accepted_enc_start:
+	jam LMP_ENCRYPTION_KEY_SIZE_REQ,mem_lmo_opcode2
+	set0 op_start_enc,pdata
+send_lmp_accepted_enc_exit:
+	store 1,mem_op
+	rtn
+
+send_lmp_accepted_enc_key:
+	call check_localsm
+	branch lmp_start_encryption,true
+	rtn
+
+send_lmp_accepted_connection:
+	jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmo_opcode2
+	//jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	fetch 1,mem_lmp_conn_state
+	set1 RECEIVED_CONN_REQ,pdata
+	store 1,mem_lmp_conn_state
+	jam BT_EVT_BB_CONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+send_lmp_accept_dhkey_check:
+	rtn
+/******** LMP reply messages **********/
+/****** TID always set to remote  *******/
+
+send_lmpext_features_res:
+	force 12,queue
+	call send_lmpext
+	setarg 0x01
+	istore 1,contw
+	fetch 2,mem_lmpext_ssp_enable
+	istore 2,contw
+	setarg 0
+	istore 3,contw
+	setarg 0x00
+	istore 4,contw
+	branch send_lmp_reply
+send_lmpext_io_cap_res:     
+	force 5,queue
+         call send_lmpext
+       	fetch 3,mem_sp_iocap_local
+         istore 3,contw
+	call send_lmp_reply
+	jam FLAG_PAIRING_STATE_PAIRING,mem_flag_pairing_state
+	fetch 1,mem_sp_iocap_local
+	beq DISPLAY_YESNO,responder_iocap_display_yesno
+	beq KEYBOARD_ONLY,responder_iocap_keyboard_only
+	beq NO_INPUT_NO_OUTPUT,responder_iocap_no_input_no_output
+	rtn
+
+responder_iocap_keyboard_only:
+	fetch 1,mem_sp_iocap_remote
+	beq DISPLAY_ONLY,responder_iocap_keyboard_only_initiator_iocap_display_only
+	beq DISPLAY_YESNO,responder_iocap_keyboard_only_initiator_iocap_display_yesno
+	beq KEYBOARD_ONLY,responder_iocap_keyboard_only_initiator_iocap_keyboard_only
+	beq NO_INPUT_NO_OUTPUT,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output
+	rtn
+
+
+responder_iocap_display_yesno:
+	fetch 1,mem_sp_iocap_remote
+	beq DISPLAY_ONLY,responder_iocap_display_yesno_initiator_iocap_display_only
+	beq DISPLAY_YESNO,responder_iocap_display_yesno_initiator_iocap_display_yesno
+	beq KEYBOARD_ONLY,responder_iocap_display_yesno_initiator_iocap_keyboard_only
+	beq NO_INPUT_NO_OUTPUT,responder_iocap_display_yesno_initiator_iocap_no_input_no_output
+	rtn
+
+	
+responder_iocap_no_input_no_output:
+	fetch 1,mem_sp_iocap_remote
+	beq DISPLAY_ONLY,responder_iocap_no_input_no_output_initiator_iocap_display_only
+	beq DISPLAY_YESNO,responder_iocap_no_input_no_output_initiator_iocap_display_yesno
+	beq KEYBOARD_ONLY,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only
+	beq NO_INPUT_NO_OUTPUT,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output
+	rtn
+
+responder_iocap_keyboard_only_initiator_iocap_no_input_no_output:
+responder_iocap_display_yesno_initiator_iocap_no_input_no_output:
+responder_iocap_display_yesno_initiator_iocap_display_only:
+responder_iocap_no_input_no_output_initiator_iocap_display_only:
+responder_iocap_no_input_no_output_initiator_iocap_display_yesno:
+responder_iocap_no_input_no_output_initiator_iocap_keyboard_only:
+responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output:
+set_ssp_mode_justwork: 
+	jam SSP_MODE_JUST_WORK_FLAG,mem_ssp_mode_flag
+	fetch 1,mem_classic_bt_flag
+	bbit1 FLAG_SSP_REJECT_JUSTWORK,app_bt_disconnect
+	rtn
+
+responder_iocap_display_yesno_initiator_iocap_display_yesno:
+set_ssp_mode_numeric_comparison: 
+	jam SSP_MODE_SSP_PIN_FLAG,mem_ssp_mode_flag
+	rtn
+
+responder_iocap_keyboard_only_initiator_iocap_display_yesno:
+responder_iocap_keyboard_only_initiator_iocap_keyboard_only:	
+responder_iocap_keyboard_only_initiator_iocap_display_only:	
+responder_iocap_display_yesno_initiator_iocap_keyboard_only:
+set_ssp_mode_passkey: 
+	jam SSP_MODE_PASSKEY_ENTRY_FLAG,mem_ssp_mode_flag
+	rtn
+
+
+classic_bt_set_reject_justwork_flag:
+	arg FLAG_SSP_REJECT_JUSTWORK,queue
+	branch classic_bluetooth_set_flag
+
+classic_bt_clr_reject_justwork_flag:
+	arg FLAG_SSP_REJECT_JUSTWORK,queue
+	branch classic_bluetooth_clr_flag
+
+classic_bluetooth_set_flag:
+	fetch 1,mem_classic_bt_flag
+	qset1 pdata
+	store 1,mem_classic_bt_flag
+	rtn
+
+classic_bluetooth_clr_flag:
+	fetch 1,mem_classic_bt_flag
+	qset0 pdata
+	store 1,mem_classic_bt_flag
+	rtn
+
+         
+send_lmp_io_cap_req:
+	force 5,queue
+	call send_lmpext
+	fetch 3,mem_sp_iocap_local
+	istore 3,contw
+	branch send_lmp_request
+	
+
+send_lmpext_sniff_subrating_req: 
+
+	rtn
+send_lmpext_sniff_subrating_res: 
+         force 9,queue
+         call send_lmpext
+         fetch 1,mem_subsniff_rate
+         istore 1,contw
+         fetch 2,mem_subsniff_tcmax
+         istore 2,contw
+         fetch 4,mem_subsniff_instant
+         istore 4,contw
+	branch send_lmp_reply
+
+send_lmp_name_res:
+	force 17,pdata
+	call msg_send_lmp
+	fetch 1,mem_lmi_opcode  /* loading name offset */
+	copy pdata,temp
+	beq 0x00,send_lmp_name_res_offset_ok
+	beq 0x0e,send_lmp_name_res_offset_ok
+	beq 0x1c,send_lmp_name_res_offset_ok
+	rtn
+send_lmp_name_res_offset_ok:
+	istore 1,contw	/* writing name offset */
+	fetch 1,mem_local_name_length
+	istore 1,contw	/* writing name length */
+	arg 14,loopcnt
+	setarg mem_local_name
+	iadd temp,contr	/* setting read location */
+	call memcpy
+	branch send_lmp_reply
+
+
+send_lmp_timing_accuracy_res:
+	force 3,pdata
+	call msg_send_lmp
+	setarg 0x0114
+	istore 2,contw
+	branch send_lmp_reply
+
+send_lmp_clkoffset_res:
+	// dopod s505 must wait for this res
+	force 3,pdata
+	call msg_send_lmp
+	fetch 4,mem_clke_bt
+	isub clkn_bt,pdata
+	branch send_lmp_clkoffset_res_master,master
+	sub pdata,0,pdata		/* our role is slave */
+send_lmp_clkoffset_res_master:	
+	// bit 16-2 of clkslave-clkmaster
+	rshift2 pdata,pdata
+	set0 15,pdata
+	istore 2,contw
+	branch send_lmp_reply
+
+send_lmp_version_res:
+	force 6,pdata
+	call msg_send_lmp
+	fetch 5,mem_lmp_version
+	istore 5,contw
+	branch send_lmp_reply
+
+send_lmp_features_res:
+	force 9,pdata
+	call msg_send_lmp
+	fetch 8,mem_features
+	istore 8,contw
+	branch send_lmp_reply  
+
+
+/******** LMP request messages **********/
+/****** TID always set to local initiated *******/
+	
+
+send_lmpext_features_req:
+	force 12,queue
+	call send_lmpext
+	setarg 0x01
+	istore 1,contw
+	fetch 2,mem_lmpext_ssp_enable
+	istore 2,contw
+	setarg 0
+	istore 3,contw
+	setarg 0x00
+	istore 4,contw
+	branch send_lmp_request
+
+send_lmpext_packet_type_table_req:
+	force 3,queue
+	call send_lmpext
+	fetch 1,mem_ptt
+	istore 1,contw
+	disable user
+	call send_lmp_request
+	nrtn user
+	nrtn master
+	fetch 1,mem_afh_cfg
+	rtnbit0 AFH_CFG_ON
+	call afh_init
+	branch afh_open_all_channels
+	
+//default:featrue is enable,extfeature is disable
+ssp_enable:
+	bpatchx patch30_4,mem_patch30
+	fetch 1,mem_features+6
+	set1 param_featrue_ssp,pdata
+	store 1,mem_features+6
+	setarg param_lmpext_ssp_enable
+	store 2,mem_lmpext_ssp_enable
+	rtn
+
+ssp_disable:
+	bpatchx patch30_5,mem_patch30
+	fetch 1,mem_features+6
+	set0 param_featrue_ssp,pdata
+	store 1,mem_features+6
+	setarg 0
+	store 2,mem_lmpext_ssp_enable
+	rtn
+	
+afh_init:
+	jam 0x3,mem_afh_cfg
+	setarg 0
+	store 4,mem_afh_timer
+	arg mem_afh_map_lo,contw
+	call afh_reset_map
+	arg mem_afh_map_new,contw
+	call afh_reset_map
+	arg mem_afh_classify_channel_map,contw
+	call afh_reset_map
+	branch afh_clear_error_counter
+afh_open_all_channels:
+	arg mem_afh_map_new,contw
+	call afh_reset_map
+	call afh_clear_error_counter
+	branch afh_set_send_flag
+
+
+afh_reset_map:
+	setarg 0xffffff
+	istore 3,contw
+	istore 3,contw
+	istore 3,contw
+	setarg 0x7f
+	istore 1,contw
+	rtn
+afh_clear_error_counter:
+	setarg 0
+	store 2,mem_afh_error_total
+	rtn
+afh_set_send_flag:
+	fetch 1,mem_afh_cfg
+	set1 send_lmp_set_afh,pdata
+	store 1,mem_afh_cfg
+	rtn
+
+
+send_lmpext_pause_encryption_req:
+	force 2,queue
+	call send_lmpext
+	nbranch send_lmp_reply,master
+	// assume slave will not send pause req firstly???
+	branch send_lmp_request
+
+
+	
+send_lmp_detach:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_disconn_reason_send
+	istore 1,contw
+	call send_lmp_request
+prepare_disconnect:
+	fetch 1,mem_op
+	set1 op_disconn,pdata
+	store 1,mem_op
+	jam 50,mem_conn_timer
+	rtn
+	
+
+send_lmp_no_payload:
+	force 1,pdata
+	call msg_send_lmp
+	branch send_lmp_request
+send_lmp_nopayload_reply:
+	force 1,pdata
+	call msg_send_lmp
+	branch send_lmp_reply
+	
+	
+send_lmp_encryption_mode_req:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_state_map
+	isolate0 smap_encryption,pdata
+	setflag true,0,pdata
+	and_into 1,pdata
+	istore 1,contw
+	branch send_lmp_request
+
+
+send_lmp_superto:
+	force 3,pdata
+	call msg_send_lmp
+	fetch 2,mem_supervision_to
+	istore 2,contw
+	branch send_lmp_request
+
+send_lmp_name_req:
+	jam 250,mem_conn_timer
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_name_offset
+	istore 1,contw
+	branch send_lmp_request
+
+send_lmp_test_control:
+	force 10,pdata
+	call msg_send_lmp
+	arg mem_temp_payload,contr
+	force 9,loopcnt
+send_lmp_test_control_loop:	
+	ifetch 1,contr
+	xor_into 0x55,pdata
+	istore 1,contw
+	loop send_lmp_test_control_loop
+	branch send_lmp_request  
+
+send_lmp_quality_of_service_req:
+	branch send_lmp_request
+send_lmp_unit_key:
+	branch send_lmp_request
+
+send_lmp_slot_offset:
+	rtn master
+	call calc_slot_offset
+	force 9,pdata
+	call msg_send_lmp
+	fetch 2,mem_slot_offset
+	istore 2,contw
+	fetch 3,mem_lap
+	istore 3,contw
+	fetch 1,mem_uap
+	istore 1,contw
+	fetch 2,mem_nap
+	istore 2,contw
+	bmark0 mark_switch_initiated,send_lmp_slot_offset_reply
+	set0 mark_switch_initiated,mark
+	call send_lmp_request
+	jam LMP_SWITCH_REQ,mem_lmo_opcode2
+	rtn
+send_lmp_slot_offset_reply:
+	call send_lmp_reply
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_SWITCH_REQ,mem_lmi_opcode2
+	rtn
+	
+send_lmp_switch_req:
+	arg 0x200,temp
+	branch switch_on_native,master
+	deposit clke_bt
+	branch switch_slack
+switch_on_native:
+	deposit clkn_bt
+switch_slack:
+	deposit bt_clk
+	iadd temp,pdata
+	and_into 0x1fc,pdata
+	store 4,mem_sniff_anchor
+	force 5,pdata
+	call msg_send_lmp
+	fetch 4,mem_sniff_anchor		/* reused as switch instant */
+	rshift pdata,pdata
+	istore 4,contw
+	branch send_lmp_request
+	
+send_lmp_sniff_req:
+	force 10,pdata
+	call msg_send_lmp
+	arg mem_sniff_payload,contr
+	ifetch 9,contr
+	istore 9,contw
+	branch send_lmp_request
+
+	
+send_lmp_timing_accuracy_req:
+/* default to TID_NORM_SEND */
+	force 3,pdata
+	call msg_send_lmp
+	setarg 0x0114
+	istore 2,contw
+	branch send_lmp_request
+	
+send_lmp_unsniff_req:
+//--------------------need to completa
+	force 1,pdata
+	call msg_send_lmp
+	//fetch 1,mem_unsniff_pending
+	//nbranch send_msg_done,blank
+	//jam 1,mem_unsniff_pending
+	//fetch 2,mem_sniff_attempt
+	//fetch 2,mem_nsniff_attempt
+	//lshift3 pdata,pdata
+	//lshift pdata,pdata
+	//store 1,mem_unsniff_cnt
+	branch send_lmp_request
+
+	
+send_lmp_max_slot:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_max_slot
+	istore 1,contw
+	branch send_lmp_request
+	
+	
+send_lmp_max_slot_req:
+	force 2,pdata
+	call msg_send_lmp
+	setarg 0x05		/*5 slot*/
+	istore 1,contw
+	branch send_lmp_request
+
+
+send_lmp_inc_power:
+	force 2,pdata
+	call msg_send_lmp
+	setarg 0x00		/*5 slot*/
+	istore 1,contw
+	branch send_lmp_request
+
+
+send_lmp_setup_complete_by_module:
+	jam LMP_MAX_SLOT_REQ,mem_lmo_opcode2
+	rtn
+send_lmp_setup_complete:
+	fetch 1,mem_device_option
+	sub pdata,dvc_op_module,null
+	call send_lmp_setup_complete_by_module,zero
+	fetch 1,mem_state
+	set1 state_conn_comp,pdata
+	store 1,mem_state
+	copy clkn_bt,pdata
+	store 4,mem_aurand_send_delay_time
+	fetch 1,mem_lmp_conn_state
+	bbit1 SENT_SETUP_COMPLETE,send_lmp_setup_complete_has_sent
+	set1 SENT_SETUP_COMPLETE,pdata
+	store 1,mem_lmp_conn_state
+	jam BT_EVT_SETUP_COMPLETE,mem_fifo_temp
+	call ui_ipc_send_event
+	force 1,pdata
+	call msg_send_lmp
+	branch send_lmp_request
+send_lmp_setup_complete_has_sent:
+	jam 0,mem_lmp_to_send
+	rtn
+	
+send_lmp_version_req:
+	force 6,pdata
+	call msg_send_lmp
+	fetch 5,mem_lmp_version
+	istore 5,contw
+	branch send_lmp_request
+
+send_lmp_features_req:
+	force 9,pdata
+	call msg_send_lmp
+	fetch 8,mem_features
+	istore 8,contw
+	branch send_lmp_request  
+
+sp_master_send_io_cap_get:
+	jam SP_FLAG_COMMIT,mem_master_sp_flag
+	fetch 1,mem_sp_local_key_invalid
+	rtnne SP_KEY_VALID
+	jam SP_MASTER_STAT_START_DONE,mem_master_sp_state
+	rtn
+
+sp_master_send_io_cap_send:
+	call tid_initiate
+	jam LMP_IO_CAP_REQ,mem_lmo_opcode2
+	jam SP_STAT_KEY_SEND,mem_master_sp_state
+	rtn
+	
+	
+sp_master_send_LMP_ENCAPSULATED_HEADER:
+	call tid_initiate
+	jam      LMP_ENCAPSULATED_HEADER,mem_lmo_opcode2
+	jam SP_STAT_RANDOM_SEND,mem_master_sp_state
+	rtn
+	
+sp_master_commitment_compare:
+	arg mem_sp_calc_result_high,rega
+	arg mem_sp_confirm_remote,regb
+	arg 16,loopcnt
+	call string_compare
+	branch sp_master_commitment_compare_success,zero
+	jam SP_STAT_NULL,mem_master_sp_state
+ifdef SIMPLE_PAIRING
+	call master_clear_mem_master_sp_flag
+endif
+	jam   PDU_NOT_ALLOWED,mem_lmo_reason2
+	jam 	LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2 
+ifdef LMP_DBG
+	call ice_break
+endif
+	branch reject_lmp_packet
+sp_master_commitment_compare_success:
+	jam 	SP_STAT_CONFIRM_CALC,mem_master_sp_state
+ifdef SIMPLE_PAIRING
+	call master_set_mem_master_sp_flag
+endif
+	jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2
+	branch accept_lmp_msg  
+	
+
+	
+sp_master_send_lmp_simple_pairing_number:
+	jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmo_opcode2
+	rtn
+	
+
+
+sp_send_lmp_encapsulated_header:
+	// calculate the private & public key here
+	//jam      LMP_ENCAPSULATED_HEADER,mem_lmp_to_send
+	jam      LMP_ENCAPSULATED_HEADER,mem_lmo_opcode2
+	//jam      TID_PAIRING,mem_lmp_tid
+	rtn
+	//fetch 1,mem_tid_table
+	//set1 TID_PAIRING,pdata
+	//store 1,mem_tid_table
+     
+    
+send_lmp_encapsulated_header: 
+	jam 0,mem_sp_local_key_send_count
+	force 4,pdata
+	call msg_send_lmp
+	force ENCAPSULATED_MAJOR_TYPE_P192,pdata
+	istore 1,contw
+	force ENCAPSULATED_MINOR_TYPE_P192,pdata
+	istore 1,contw  
+	force ENCAPSULATED_LEN_P192,pdata
+	istore 1,contw 
+	call check_localsm
+	branch send_lmp_request,true
+	branch send_lmp_reply
+
+send_lmp_encapsulated_payload:
+	//jam      TID_PAIRING,mem_lmp_tid
+	 force 17,pdata
+	call msg_send_lmp
+	fetch 1,mem_sp_local_key_send_count
+	arg mem_sp_pubkey_local,contr
+	iadd contr,contr    
+	ifetch   8,contr
+	istore   8,contw
+	ifetch   8,contr
+	istore   8,contw
+	fetch    1,mem_sp_local_key_send_count
+	increase 16,pdata
+	store    1,mem_sp_local_key_send_count
+	call check_localsm
+	branch send_lmp_request,true
+	branch send_lmp_reply
+	//branch send_lmp_request
+	
+sp_send_lmp_simple_pairing_comfirm:
+        jam      SP_STAT_RANDOM_RECV,mem_sp_state
+        jam      LMP_SIMPLE_PAIRING_CONFIRM,mem_lmo_opcode2
+        rtn
+send_lmp_simple_pairing_comfirm:
+        //jam      SP_STAT_RANDOM_RECV,mem_sp_state
+        //jam      TID_PAIRING,mem_lmp_tid
+        force    17,pdata
+        call msg_send_lmp   
+        arg      mem_sp_calc_result_high,contr
+        ifetch   8,contr
+        istore   8,contw
+        ifetch   8,contr
+        istore   8,contw 
+        branch send_lmp_reply
+
+sp_send_lmp_simple_pairing_number:
+	jam      LMP_SIMPLE_PAIRING_NUMBER,mem_lmo_opcode2
+	rtn
+
+send_lmp_simple_pairing_number:
+	//jam      TID_PAIRING,mem_lmp_tid
+	call check_localsm
+ifdef SIMPLE_PAIRING
+	call sp_local_random_key_generator,true
+endif
+	force    17,pdata
+	call msg_send_lmp
+	arg      mem_sp_random_local,contr
+	ifetch   8,contr
+	istore   8,contw
+	ifetch   8,contr
+	istore   8,contw
+	call check_localsm
+	nbranch send_lmp_reply,true
+	branch send_lmp_request,true
+
+master_sp_sm_end:
+	//jam DEFAULT_STATEMACHINE,mem_sp_localsm
+	jam SP_STAT_DONE,mem_master_sp_state
+sp_aurand_send:
+	call tid_initiate
+	jam LMP_AU_RAND,mem_lmo_opcode2
+	call check_localsm_master
+ifdef SIMPLE_PAIRING
+	branch sp_master_key_prarm_push,true
+	branch sp_link_key_prarm_push
+endif
+master_sp_send_lmp_dhkey_check:
+	call tid_reply
+sp_send_lmp_dhkey_check: 
+	jam      LMP_DHKEY_CHECK,mem_lmo_opcode2
+	rtn
+send_lmp_dhkey_check: 
+	//jam      TID_PAIRING,mem_lmp_tid
+	force    17,pdata
+	call     msg_send_lmp
+	arg      mem_sp_calc_result_high,contr
+	ifetch   8,contr
+	istore   8,contw
+	ifetch   8,contr
+	istore   8,contw 
+	call check_localsm
+	nbranch send_lmp_reply,true
+	branch send_lmp_request,true
+
+send_lmp_enc_key_size_mask_res:
+	force 3,pdata
+	call msg_send_lmp   
+	setarg 0xfffe //enc key size mask
+	istore 2,contw
+	branch send_lmp_reply
+
+send_lmp_auto_rate:
+	branch send_lmp_request
+send_lmp_clkoffset_req:
+	branch send_lmp_request
+send_lmp_quality_of_service:
+	branch send_lmp_request
+send_lmp_test_activate:
+	branch send_lmp_request
+
+/******** LMP request/reply messages **********/
+/****** TID transaction specific *******/
+
+send_lmp_comb_key:
+	call generate_random_number
+	arg mem_lap,rega
+	call generate_linkkey
+	force 17,pdata
+	call msg_send_lmp
+	arg mem_kinit,rega
+	arg mem_random_number,regb
+	call xor16
+	nbranch send_lmp_follow,master
+	branch send_lmp_tid
+
+send_lmp_inrand:
+	call generate_random_number
+	arg mem_plap,rega
+	call generate_kinit
+send_lmp_rand:	/* used by in_rand,au_rand,start_encrypt */
+	force 17,pdata
+	call msg_send_lmp
+	arg mem_random_number,contr
+	call memcpy16
+	fetch 1,mem_conn_sm 
+	beq CONN_SM_AUTH_WAIT,send_lmp_request
+	beq CONN_SM_PAIRING_WAIT,send_lmp_request
+	branch send_lmp_tid
+
+send_lmp_aurand:
+	fetch 1,mem_pairing_auth
+	branch send_lmp_aurand_notpairing,blank
+	call check_localsm
+	call tid_initiate,true
+	ncall tid_reply,true
+	branch send_lmp_aurand_common
+send_lmp_aurand_notpairing:
+	call tid_initiate
+send_lmp_aurand_common:
+	call generate_random_number
+	branch send_lmp_rand
+
+send_lmp_sres:
+	arg mem_lap,rega
+	call function_e1
+	force 5,pdata
+	call msg_send_lmp
+	fetch 4,mem_input_store
+	istore 4,contw
+	arg mem_sres_tid,temp
+	call special_tid_store
+	call copy_aco
+	call check_localsm
+	branch send_lmp_sres_master,true
+	jam DONE_ENCRYP,mem_wait_encryption
+	fetch 1,mem_pairing_auth
+	rtn blank
+	jam LMP_AU_RAND,mem_lmo_opcode2
+send_lmp_sres_master:
+	fetch 1,mem_link_key_exists
+	rtn blank
+send_lmp_sres_startenc:
+	call check_localsm
+	nbranch send_lmp_sres_startenc_slave,true
+	fetch 1,mem_auth_enable
+	rtn blank
+	jam LMP_ENCRYPTION_MODE_REQ, mem_lmo_opcode2
+	rtn
+send_lmp_sres_startenc_slave:
+	rtnmark0 mark_slave_in_rand_accepted
+	set0 mark_slave_in_rand_accepted,mark
+	jam LMP_ENCRYPTION_MODE_REQ, mem_lmo_opcode2
+	rtn
+	
+
+	
+send_lmp_start_encryption:
+	call generate_random_number
+	call function_e3
+	force 17,pdata
+	call msg_send_lmp
+	arg mem_random_number,contr
+	call memcpy16
+	branch send_lmp_tid
+
+send_lmp_stop_encryption_req:
+	force 1,pdata
+	call msg_send_lmp
+	branch send_lmp_tid
+
+send_lmp_encryption_key_size_req:
+	force 2,pdata
+	call msg_send_lmp
+	force 16,pdata
+	istore 1,contw
+	store 1,mem_key_size
+	branch send_lmp_tid
+
+msg_send_lmp:
+/* FLOW is set high and LMP is indicated */
+	lshift3 pdata,pdata
+	or_into 0x07,pdata
+	store 1,mem_lmo_header_length
+	arg 17,loopcnt
+	arg mem_lmo_payload,contw
+	call clear_mem
+	arg mem_lmo_payload,contw
+	rtn
+
+send_lmpext:
+	and pdata,0x7f,rega
+	jam LMP_ESCAPE,mem_lmp_to_send
+	deposit queue
+	call msg_send_lmp
+	deposit rega
+	istore 1,contw
+	rtn
+
+send_lmp_follow:
+	fetch 1,mem_lmp_to_send
+	lshift pdata,pdata
+	fetcht 1,mem_state_map
+	isolate1 smap_lmptid,temp
+	setflag true,0,pdata
+	branch send_lmp_exit
+
+
+send_lmp_tid:
+	fetcht 1,mem_state_map
+	and_into 1,temp
+	branch send_lmp_end
+
+send_lmp_reply:
+	force 0,temp
+	branch send_lmp_end
+	
+send_lmp_request:
+	force 1,temp
+send_lmp_end:
+	fetch 1,mem_lmp_to_send
+	lshift pdata,pdata
+	setflag master,0,pdata
+	ixor temp,pdata
+send_lmp_exit:
+	store 1,mem_lmo_header_opcode
+	jam 0,mem_lmp_to_send
+	call lmo_fifo_process_lmo0empty
+	enable user
+	rtn
+
+//blank : not full 
+lmo_fifo_check:
+	fetch 1,mem_lmo_opcode2
+	rtn blank
+	call lmo_fifo_process
+	fetch 1,mem_lmo_opcode2
+	rtn
+
+lmo_fifo_process:
+	bpatchx patch30_6,mem_patch30
+	fetch 1,mem_lmp_to_send
+	branch lmo_fifo_process_lmo0empty,blank
+	fetch 1,mem_lmo_opcode1
+	nrtn blank
+	branch lmo_fifo_process_lmo2to1
+lmo_fifo_process_lmo0empty:
+	fetch 1,mem_lmo_opcode1
+	branch lmo_fifo_process_lmo1_empty,blank
+	fetch 3,mem_lmo_opcode1
+	store 3,mem_lmp_to_send//1=>0
+	fetcht 1,mem_lmo_tid1
+	fetch 1,mem_state_map
+	set0 smap_lmptid,pdata
+	ior temp,pdata
+	store 1,mem_state_map
+	jam 0,mem_lmo_opcode1
+lmo_fifo_process_lmo2to1:
+	fetch 1,mem_lmo_opcode2
+	rtn blank
+	fetch 4,mem_lmo_opcode2
+	store 4,mem_lmo_opcode1//2=>1
+	jam 0,mem_lmo_opcode2
+	rtn
+lmo_fifo_process_lmo1_empty:
+	fetch 1,mem_lmo_opcode2
+	rtn blank
+	fetch 3,mem_lmo_opcode2
+	store 3,mem_lmp_to_send//2=>0	
+	fetcht 1,mem_lmo_tid2
+	fetch 1,mem_state_map
+	set0 smap_lmptid,pdata
+	ior temp,pdata
+	store 1,mem_state_map
+	jam 0,mem_lmo_opcode2
+	rtn
+	
+//input:temp
+special_tid_store:
+	bpatchx patch30_7,mem_patch30
+	fetch 1,mem_state_map
+	copy pdata,regc
+	ifetch 1,temp
+	call pop_tid_follow
+	call send_lmp_follow
+	copy regc,pdata
+	store 1,mem_state_map
+	rtn
+	
+tid_reply:
+	fetcht 1,mem_state_map
+	set0 smap_lmptidinit,temp
+	storet 1,mem_state_map
+	rtn
+	
+tid_initiate:
+	fetcht 1,mem_state_map
+	set1 smap_lmptidinit,temp
+	storet 1,mem_state_map
+	rtn
+	
+	/* true if transaction from remote */
+tid_check:
+	nsetflag master,smap_lmptid,pdata //it is ok
+	fetcht 1,mem_state_map
+	ixor temp,pdata
+	isolate1 smap_lmptid,pdata
+	rtn	
+
+	/* set to remote */
+tid_set_reply:
+	fetch 1,mem_state_map
+	setflag master,smap_lmptid,pdata //it is ok
+	store 1,mem_state_map
+	rtn
+
+	/*rtn true when we lead lmp*/
+check_localsm:
+	fetch 1,mem_sp_localsm
+	compare 	LOCAL_STATEMACHINE,pdata,0x7f
+	rtn
+setlocalsm_master:
+	fetch 1,mem_sp_localsm
+	set1 7,pdata
+	store 1,mem_sp_localsm
+	rtn
+setlocalsm_slave:
+	fetch 1,mem_sp_localsm
+	set0 7,pdata
+	store 1,mem_sp_localsm
+	rtn
+check_localsm_master:
+	fetch 1,mem_sp_localsm
+	isolate1 7,pdata
+	store 1,mem_sp_localsm
+	rtn
+	
+generate_random_number:
+	/* generating a 16 byte random number,storing in ape_random_number */
+	arg mem_random_number,contw
+generate_random:
+	force 16,loopcnt
+generate_random_another:
+generate_random_loop:
+	random pdata
+	istore 1,contw
+	loop generate_random_another
+	rtn
+
+generate_linkkey:
+	call function_e21
+	arg mem_link_key,rega
+	arg mem_input_store,regb
+	ifetch 8,rega					/* check if already got comb key */
+	fetcht 1,mem_state
+	nsetflag blank,state_combkey,temp
+	storet 1,mem_state
+	copy rega,contw
+	call  xor16
+	branch generate_linkkey_continue
+
+/*********************************/
+/*********lmp send*************/
+/********************************/
+
+process_conn_sm:
+	//nrtn master
+	bpatchx patch31_0,mem_patch31
+
+	call lmo_fifo_check
+	nrtn blank
+process_conn_sm_continue:
+	fetch 1,mem_conn_sm
+	rtn blank
+	/* state machine begins in standby */
+	//beq CONN_SM_STANDBY, host_create_conn_begin
+	//beq CONN_SM_WAIT_PAGE, host_create_conn_wait_page
+	beq CONN_SM_SEND_CONN_REQ, host_create_conn_send_conn_req
+	beq CONN_SM_WAIT_CONN_ACCEPT, host_create_conn_wait_accept
+	beq CONN_SM_SEND_FEATURES, host_create_conn_send_features
+	beq CONN_SM_WAIT_FEATURES_RES, host_create_conn_waiting
+	beq CONN_SM_SEND_SWITCH,host_create_conn_send_switch
+	beq CONN_SM_AUTH_PAIR, host_create_conn_auth_pair
+	beq CONN_SM_AUTH_PAIR_WAIT, host_create_conn_auth_pair_wait
+	beq CONN_SM_ENCRYPT, host_create_conn_encrypt
+	beq CONN_SM_ENCRYPT_WAIT, host_create_conn_encrypt_wait
+	beq CONN_SM_ENCRYPT_WAIT_CLEAR, host_create_conn_encrypt_wait_clear
+	beq CONN_SM_SEND_SETUP_COMPLETE, host_create_conn_send_setup_complete
+	beq CONN_SM_WAIT_SETUP_COMPLETE, host_create_conn_wait_setup_complete
+	beq CONN_SM_DETACH_DELAY,host_create_conn_master_detach
+	beq CONN_SM_SEND_VERSION, host_create_conn_send_version
+	beq CONN_SM_WAIT_VERSION, host_create_conn_waiting
+	beq CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION, host_creat_conn_wait_switch
+	beq CONN_SM_SEND_FEATURES_EXT,host_creat_conn_send_feat_ext
+	beq CONN_SM_WAIT_FEATURES_EXT,host_create_conn_waiting
+	beq CONN_SM_PAIRING,host_create_conn_pairing
+	beq CONN_SM_PAIRING_WAIT,host_create_conn_pairing_wait
+	beq CONN_SM_AUTH,host_create_conn_auth
+	beq CONN_SM_AUTH_WAIT,host_create_conn_auth_wait
+	beq CONN_SM_DONE,host_create_conn_done
+	beq CONN_SM_WAIT_DONE,host_create_conn_done_wait
+	jam CONN_SM_STANDBY,mem_conn_sm
+	/* sending error message to host */
+	rtn
+host_create_conn_done:
+	fetch 1,mem_lmp_conn_state		
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	rtnbit0 SENT_SETUP_COMPLETE
+	jam CONN_SM_STANDBY,mem_conn_sm
+	call host_conn_judge_encrypt
+	branch scheduler_start_upper_sm
+	
+host_conn_judge_encrypt:
+	fetch 1,mem_connection_options
+	rtnbit0 CONNECTION_ENCRYPT
+	jam CONN_SM_ENCRYPT_WAIT,mem_conn_sm
+	rtn
+
+host_create_conn_done_wait:
+	arg enpt_delay_timer,queue
+	call timer_check
+	nrtn blank
+	jam CONN_SM_DONE,mem_conn_sm
+	rtn
+	
+host_create_conn_auth:
+	fetch 1,mem_connection_options
+	set0 CONNECTION_AUTH,pdata
+	store 1,mem_connection_options
+	jam CONN_SM_AUTH_WAIT,mem_conn_sm
+	jam LMP_AU_RAND,mem_lmo_opcode2
+	rtn 
+host_create_conn_auth_wait:
+	rtn
+host_create_conn_pairing:
+	fetch 1,mem_pincode_state
+	rtnne pincode_state_pincode_ready //wait for pincode
+	call host_auth
+	jam CONN_SM_PAIRING_WAIT,mem_conn_sm
+	rtn
+
+host_create_conn_pairing_wait:
+	rtn
+host_creat_conn_send_feat_ext:
+	jam CONN_SM_WAIT_FEATURES_EXT,mem_conn_sm
+	jam LMP_EXT_FEATURES_REQ,mem_lmo_opcode2
+	rtn
+host_create_conn_send_version:
+	jam CONN_SM_WAIT_VERSION,mem_conn_sm
+	jam LMP_VERSION_REQ,mem_lmo_opcode2
+	rtn 
+	
+host_creat_conn_wait_switch:
+	fetch 1,mem_switch_flag
+	rtneq SWITCH_FLAG_INIT
+	beq SWITCH_FLAG_ACCEPT,host_create_conn_switch_accept
+	arg switch_wait_timer,queue
+	call timer_check
+	nrtn blank
+	jam SWITCH_FLAG_INIT,mem_switch_flag
+	branch host_create_conn_switch
+host_create_conn_switch_accept:
+	rtn master
+	branch host_create_conn_auth_pair
+
+host_create_conn_send_features:
+	jam CONN_SM_WAIT_FEATURES_RES,mem_conn_sm
+	jam LMP_FEATURES_REQ,mem_lmo_opcode2
+	rtn 
+host_create_conn_send_switch:
+	jam LMP_SWITCH_REQ,mem_lmo_opcode2
+	set1 mark_switch_initiated,mark
+	jam CONN_SM_WAIT_CONN_ACCEPT,mem_conn_sm
+	setarg 0x1ff
+	store 2, mem_soft_timer
+	rtn
+host_create_conn_send_conn_req:
+	jam CONN_SM_WAIT_CONN_ACCEPT,mem_conn_sm
+	jam 0xff,mem_soft_timer
+	set0 mark_reconn_recieve_switch,mark
+	jam LMP_HOST_CONNECTION_REQ,mem_lmo_opcode2
+	branch init_lmp_reinit
+host_create_conn_wait_accept:
+	rtnmark1 mark_reconn_recieve_switch
+	fetch 2,mem_soft_timer
+	sub pdata,1,pdata
+	branch host_create_conn_resend,zero
+	store 2, mem_soft_timer
+	rtn
+host_create_conn_resend:
+	jam CONN_SM_SEND_SWITCH,mem_conn_sm
+	rtn
+host_create_conn_waiting:
+	/* we will exit waiting for connection request accepted, features res, or other commands to finish */
+	rtn 
+
+host_create_conn_switch:
+	fetch 1,mem_lmp_conn_state
+	rtnbit0 SENT_SETUP_COMPLETE
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	fetch 1,mem_connection_options
+	set0 CONNECTION_SWITCH,pdata
+	store 1,mem_connection_options
+	jam LMP_SWITCH_REQ,mem_lmo_opcode2
+	jam CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION,mem_conn_sm
+	rtn 
+
+host_create_conn_send_setup_complete:
+	jam CONN_SM_WAIT_SETUP_COMPLETE,mem_conn_sm	
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	rtn 
+
+host_create_conn_wait_setup_complete:
+	fetch 1,mem_lmp_conn_state
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	jam CONN_SM_STANDBY,mem_conn_sm	
+
+	rtn
+host_create_conn_wait_setup_complete_rtn:	
+	jam CONN_SM_AUTH_PAIR ,mem_conn_sm
+	rtn
+
+host_create_conn_master_detach:
+	fetch 1, mem_soft_timer
+	increase -1,pdata
+	branch host_create_conn_send_detach,blank//detach
+	store 1, mem_soft_timer
+	rtn 
+host_create_conn_send_detach:
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam LOCAL_HOST,mem_disconn_reason_send
+	jam 0,mem_conn_sm
+	rtn
+host_create_conn_auth_pair:
+	/* checking whether or not to do m/s switch */
+	fetch 1,mem_connection_options
+	bbit1 CONNECTION_SWITCH,host_create_conn_switch
+	bbit1 CONNECTION_AUTH,host_create_conn_auth_pair_true
+host_create_conn_sm_done:
+	jam CONN_SM_DONE,mem_conn_sm
+	rtn
+host_create_conn_auth_pair_true:
+	fetch 1,mem_link_key_exists
+	branch host_create_conn_auth_pair_nokey,blank
+	fetch 1,mem_lmp_conn_state
+	rtnbit0 SENT_SETUP_COMPLETE
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	fetch 4,mem_aurand_send_delay_time
+	arg 100,temp
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	branch host_create_conn_auth
+
+
+
+host_create_conn_auth_pair_nokey:
+	jam CONN_SM_PAIRING,mem_conn_sm
+	jam 4,mem_pin_length
+	setarg 0x3030
+	store 2,mem_pin
+	istore 2,contw
+	jam pincode_state_pincode_ready,mem_pincode_state
+	branch host_create_conn_pairing
+
+host_create_conn_auth_pair_wait:
+	rtn
+host_create_conn_encrypt:
+	fetch 1,mem_connection_options
+	bbit1 CONNECTION_ENCRYPT,host_create_conn_encrypt_start
+	jam CONN_SM_DONE,mem_conn_sm
+	rtn 
+
+host_create_conn_encrypt_start:
+	fetch 1,mem_connection_options
+	set0 CONNECTION_ENCRYPT,pdata
+	store 1,mem_connection_options
+	jam LMP_ENCRYPTION_MODE_REQ,mem_lmo_opcode2  
+	rtn
+
+host_create_conn_encrypt_wait:
+	fetch 1, mem_wait_encryption
+	rtn blank
+	jam CONN_SM_STANDBY,mem_conn_sm
+	branch host_create_conn_encrypt_start 
+
+host_create_conn_encrypt_wait_clear:
+	jam CONN_SM_SEND_SETUP_COMPLETE,mem_conn_sm
+	rtn 
+
+host_auth:
+	fetch 1,mem_op
+	bbit1 op_inrand_req,remote_auth
+	call tid_initiate
+	jam LMP_IN_RAND,mem_lmo_opcode2
+	branch cmd_exit
+remote_auth:
+	fetch 1,mem_op
+	set0 op_inrand_req,pdata
+	store 1,mem_op
+	call lmp_accept_inrand
+	call tid_set_reply
+	branch cmd_exit
+
+pincode_reinit:
+	setarg 4
+	store 1,mem_pin_length
+	setarg 0x3030
+	istore 2,contw
+	istore 2,contw
+	rtn
+	
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/patch.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/patch.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/patch.prog	(working copy)
@@ -0,0 +1,3453 @@
+//define DONGLE
+define MOUSE
+define G24
+//define BLE
+//define CLASSIC_BT
+//define MOUSE_SMOOTHER
+//define ADC_ENABLE
+//define P24G_LOG
+//define RF_DEBUG
+//define HIGH_REPORT
+define MS_ALL_POWER
+define MS_MATRIX
+define XTAL_16M
+
+//define DEBUGLOG
+//define DEBUGLOG_CALLBACK
+//define DEBUGLOG_EVENT
+//define DEBUGLOG_CMD
+//define DEBUGLOG_MISC
+//define DEBUGLOG_STATUS
+//define DEBUGLOG_PARSE_LMP
+//define DEBUGLOG_SEND_LMP
+//define DEBUGLOG_CONN_SM
+//define DEBUGLOG_UPPER_SM
+
+ifdef PATCH
+	bbit1 8,pf_patch_ext
+	beq patch00_0,p_soft_reset
+	beq patch00_1,p_soft_reset_1
+	beq patch00_2,p_soft_reset_2
+	beq patch10_5,p_shutdown_radio
+	beq patch11_1,p_set_freq_tx
+ifdef XTAL_16M	
+	beq patch11_2,p_initialize_radio_cont
+endif
+ifdef CLASSIC_BT
+	beq patch03_3,p_page_wait_fhs_reply_ok
+	beq patch04_6,p_role_switch_master
+	beq patch09_2,p_prepare_tx
+ 	beq patch0b_1,p_process_dmh
+	beq patch0a_1,p_slave_conn_recv_packet
+	beq patch14_7,p_lpm_dispatch
+	beq patch15_5,p_lpm_set_mult
+	beq patch19_3,app_bt_start_reconnect+3
+	beq patch1d_1,p_mouse_bb_disconnected
+endif	
+	beq patch14_1,p_init_param
+	beq patch16_1,p_lpm_check_wake_lock
+	beq patch16_2,p_g24_dispatch
+	beq patch18_4,p_device_init
+	beq patch19_1,p_app_flag_store
+	beq patch19_2,p_app_initflag_check
+	beq patch1c_3,p_mouse_seting_dpi
+	beq patch1c_6,p_mouse_motion
+	beq patch1d_2,p_mouse_bb_event_discovery_btn
+	beq patch1d_3,p_mouse_start_discovery
+	beq patch1d_4,p_mouse_stop_discovery
+	branch loop
+pf_patch_ext:
+ifdef MS_ALL_POWER
+	beq patch27_7,p_le_enable
+endif
+ifdef BLE
+	beq patch27_1,p_le_slave_match
+	beq patch28_3,p_le_next_adv_channel
+	beq patch29_2,p_le_receive_skip
+	beq patch2a_7,p_le_update_param
+	beq patch2b_1,p_le_update_channel_map
+	beq patch2c_3,p_le_prepare_tx
+	beq patch2c_6,p_le_parse
+	beq patch2c_7,p_le_parse_l2cap
+	beq patch2d_2,p_le_adv_not_match
+	beq patch2e_7,p_le_lpm_setmult
+	beq patch3f_2,p_check_51cmd_once_continue
+endif	
+ifdef CLASSIC_BT
+	beq patch20_5,p_hid_rx_process
+	beq patch30_0,p_parse_lmp_accepted
+	beq patch30_2,p_send_lmp
+	beq patch31_0,p_process_conn_sm
+endif
+	beq patch31_4,p_twspi_reset
+ifdef DEBUGLOG
+	beq patch2f_6,p_parse_lmp_opcode
+	beq patch37_6,p_process_upper_sm_reconn
+	beq patch3e_6,p_ui_ipc_send_event
+	beq patch3e_7,p_ui_ipc_send_cmd
+endif
+	branch loop
+
+ifdef MS_ALL_POWER
+p_le_enable:
+	jam 0x36,rf_adc_goff        /*For BLE, tune AGC_gain_offset, Max added*/
+	jam 0x5f,rf_agc_nsat        //for BLE
+	enable le
+	jam 7,rfen_ulp			/* enable ulp */
+//	call check_ble_disabled
+	fetch 1,mem_250k_freq_enable	//default: 0
+	rtn blank
+	jam 0xb8,rf_iq_gain
+	rtn
+endif
+	
+
+ifdef MOUSE
+p_rssi_signal:
+	copy pdata,rega
+	fetcht 1,mem_rssi_signal_index
+	setarg mem_rssi_signal_buf
+	iadd temp,contw
+	copy rega,pdata
+	istore 1,contw
+	increase 1,temp
+	and_into RSSI_BUF_LEN_SIGNAL,temp
+	storet 1,mem_rssi_signal_index
+	rtn
+
+p_soft_reset:
+	hfetch 1,0x813b
+	store 1,mem_power_on_flag
+	branch soft_reset+1
+
+p_soft_reset_1:
+	arg mem_sp_state,contw
+	arg 12,loopcnt
+	call clear_mem
+ifdef BLE
+	call p_mouse_le_txbuff_load
+endif	
+	call rfcomm_init
+	call init_lmp
+	ncall lpm_disable_exen_output,wake
+	call ui_init+1
+	branch soft_reset+11
+
+p_soft_reset_2:
+	call app_lpm_init,wake
+ifdef SIMPLE_PAIRING
+	call publickey_init
+else
+	call ssp_disable
+ifdef SECURE_CONNECTION
+	call publickey_init
+
+endif
+endif
+	call lpm_recover_clk,wake
+p_sp_cal_loop:
+	call sp_calc_sequence
+	fetch 1,mem_ssp_enable
+	branch main_loop,blank
+	fetch 1,mem_sp_local_key_invalid // simple pairing is not ready
+	branch p_sp_cal_loop,blank
+	branch main_loop
+
+p_init_param:
+	setarg param_le_version
+	store 3,mem_lmp_version
+	setarg param_le_subversion
+	store 2,mem_lmp_version+3
+	branch init_param+12
+
+p_lpm_check_wake_lock:
+	rtnmark1 mark_24g
+	fetch 1,mem_mouse_clear_sensor_data_flag
+	branch disable_blank,blank
+	fetch 1,mem_mouse_le_conn_param_reject
+	beq LE_LPM_DISABLE,disable_blank
+	fetch 2,mem_sdp_remote_cid
+	nbranch disable_blank,blank
+	fetch 1,mem_mouse_wheel_trigger
+	nbranch disable_blank,blank
+	branch enable_blank
+
+
+ifdef G24
+p_g24_dispatch:
+	rtnmark0 mark_24g
+	fetch 1,mem_24g_transmit_by_interrupt
+	beq G24_TX_TIMER_INT_ENABLE,p_g24_transmit_by_interrupt
+p_g24_transmit_process:
+	call p_g24_txdata_prep
+	nbranch p_g24_nodata_transmit,user
+	call p_g24_rf_sta_check
+p_g24_transmit_start:
+	call p_g24_transmit_packet
+	fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call power_ctrl_start
+p_g24_short_sleep:	
+	call p_g24_lpm_wait
+	nrtn user
+	call p_clear_wake
+ifdef HIGH_REPORT
+	setarg G24_4MS_INTERVAL_PARAM
+else
+	setarg 60500
+endif
+p_g24_enter_sleep:	
+	call clk2lpo
+	storet 4,mem_sleep_counter
+  	branch lpm_sleep
+  	
+p_g24_transmit_by_interrupt:
+	call p_g24_timer_check
+	nrtn user
+	call p_g24_interval_calibrate
+ifndef MS_ALL_POWER
+	fetch 1,mem_24g_transmit_by_interrupt_exit_count
+	increase 1,pdata
+	store 1,mem_24g_transmit_by_interrupt_exit_count
+	sub pdata,25,null	//200ms
+	call p_g24_transmit_by_interrupt_exit,zero
+endif	
+	branch p_g24_transmit_process
+p_g24_transmit_by_interrupt_exit:
+	jam G24_TX_TIMER_INT_DISABLE,mem_24g_transmit_by_interrupt
+	jam 0,mem_24g_transmit_by_interrupt_exit_count
+p_g24_interval_min:
+	jam 0,mem_24g_pac_index
+	fetch 1,mem_24g_interval_min
+p_g24_current_interval_store:
+	store 1,mem_24g_interval
+	rtn
+p_g24_interval_max:
+	fetch 1,mem_24g_interval_max
+	branch p_g24_current_interval_store
+p_g24_interval_calibrate:
+	fetch 1,mem_24g_pac_index
+	increase 1,pdata
+	store 1,mem_24g_pac_index
+	beq 4,p_g24_interval_max
+	beq 5,p_g24_interval_min
+	rtn
+p_g24_transmit_by_interrupt_enable:
+	jam G24_TX_TIMER_INT_ENABLE,mem_24g_transmit_by_interrupt
+	jam 0,mem_24g_transmit_by_interrupt_exit_count
+	rtn
+
+p_g24_nodata_transmit:
+	fetch 1,mem_24g_abort_pac
+	call p_g24_send_abort_packet,blank
+p_g24_long_sleep:
+	call p_g24_lpm_wait
+	nrtn user
+	fetch 3,mem_24g_enter_hibernate
+  	branch p_g24_enter_sleep
+	
+p_g24_lpm_wait:
+	enable user
+	call lpo_calibration
+	fetch 3,mem_clks_per_lpo
+	branch disable_user,blank
+	fetch 1,mem_lpm_mode
+	branch disable_user,blank
+	fetch 1,mem_24g_transmit_by_interrupt
+	beq G24_TX_TIMER_INT_ENABLE,disable_user
+	branch p_mouse_setgpio_lpm
+
+p_g24_send_abort_packet:
+	jam 1,mem_24g_abort_pac
+	jam 0,mem_24g_rf_hop_ch
+	call p_g24_transmit_rf_ctrl_clear
+	store 1,mem_24g_txbuf
+	setarg 0
+	store 7,mem_24g_txbuf+1
+	fetch 4,mem_24g_device_addr
+	store 4,mem_24g_txbuf+8
+	jam 12,mem_24g_datalen
+	fetch 1,mem_24g_data_type
+	set1 bit_abort,pdata
+	store 1,mem_24g_data_type
+	call p_g24_txdata_enable_tx
+	branch p_g24_transmit_start
+
+p_g24_set_device_addr:
+	call adc_init_data
+	fetch 4,mem_lap
+	store 4,mem_24g_device_addr
+	rtn
+
+p_g24_transmit_rf_sta_init:
+	jam 1,mem_24g_rf_last_sta
+	jam 0,mem_24g_sync_cnt
+p_g24_transmit_rf_ctrl_clear:	
+	fetch 1,mem_24g_data_type
+	and_into bits_data,pdata
+	store 1,mem_24g_data_type
+	rtn
+	
+p_g24_hop_ch_enable:
+	fetch 1,mem_24g_data_type
+	set1 bit_hop,pdata
+	store 1,mem_24g_data_type
+	//update txpayload
+	store 1,mem_24g_txpayload
+	rtn
+p_g24_hop_ch_disable:
+	fetch 1,mem_24g_data_type
+	set0 bit_hop,pdata
+	store 1,mem_24g_data_type
+	rtn	
+
+p_g24_transmit_hop_pac_fail:
+	call power_ctrl_pac_succ_decrs
+	fetch 1,mem_24g_rf_work_stage
+	beq 1,p_g24_transmit_hop_pac_fail_wo_hop
+	beq 2,p_g24_transmit_hop_pac_fail_hop_stage2
+	rtn
+p_g24_transmit_hop_pac_fail_wo_hop:
+	jam 2,mem_24g_sync_cnt
+p_g24_transmit_hop_pac_fail_stage1:	
+	jam 0,mem_24g_hop_pac_retry
+	jam 0,mem_24g_rf_last_sta
+	branch p_g24_transmit_rf_ctrl_clear
+
+p_g24_transmit_hop_pac_fail_hop_stage2:
+	jam 0,mem_24g_rf_hop_ch
+	branch p_g24_transmit_hop_pac_fail_stage1
+
+	
+p_g24_transmit_pac_fail_hop_stage3:
+	fetch 2,mem_24g_txfail_cnt
+	increase 1,pdata
+	store 2,mem_24g_txfail_cnt
+ifdef MS_ALL_POWER
+	bbit1 6,p_g24_tx_attempt_fail	//1024ms * 8
+else	
+	bbit1 10,p_g24_tx_attempt_fail	//1024ms * 8
+endif
+	fetch 1,mem_24g_rf_hop_ch
+	beq 1,p_g24_rf_hop_fastly
+	jam 1,mem_24g_rf_hop_ch
+p_g24_rf_hop_attemp_again:
+	fetch 1,mem_24g_rf_hop_ch
+	bne 1,p_g24_transmit_rf_ctrl_clear
+p_g24_rf_hop_fastly:
+	fetch 1,mem_24g_hop_fastly_cnt
+	increase 1,pdata
+	store 1,mem_24g_hop_fastly_cnt
+	beq 4,p_g24_rf_hop_fastly_exit
+	call p_g24_ch
+	jam 2,mem_24g_max_retry
+	branch p_g24_transmit_packet
+
+p_g24_rf_hop_fastly_exit:
+	call power_ctrl_pac_succ_decrs
+	jam 0,mem_24g_hop_fastly_cnt
+	branch p_g24_transmit_rf_ctrl_clear
+
+p_g24_transmit_hop_pac_succ_wo_hop:
+	jam 2,mem_24g_sync_cnt
+p_g24_transmit_hop_pac_succ:
+	jam 1,mem_24g_rf_last_sta
+	jam 0,mem_24g_rf_hop_ch
+	branch p_g24_transmit_rf_ctrl_clear
+
+p_g24_transmit_succ_rf_config:
+	fetch 1,mem_24g_rf_work_stage
+	beq 3,p_g24_transmit_hop_pac_succ
+	fetch 1,mem_24g_data_type
+	isolate0 bit_hop,pdata
+	branch p_g24_transmit_rf_sta_init,true
+	fetch 1,mem_24g_rf_work_stage
+	beq 1,p_g24_transmit_hop_pac_succ_wo_hop
+	beq 2,p_g24_transmit_hop_pac_succ
+	rtn
+
+p_g24_rf_sta_check:
+	fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call p_g24_rf_laststa_synccnt_check
+	ncall p_g24_rf_sync_cnt_check,user2
+	rtn
+
+p_g24_rf_laststa_synccnt_check:
+	disable user2
+	fetch 1,mem_24g_rf_last_sta
+	rtnne 1
+	fetch 1,mem_24g_sync_cnt
+	rtnne 0
+	jam 1,mem_24g_rf_work_stage
+	jam 4,mem_24g_max_retry
+	branch enable_user2
+
+p_g24_rf_sync_cnt_check:
+	fetch 1,mem_24g_sync_cnt
+	branch p_g24_rf_hop_attemp,blank
+	increase -1,pdata
+	store 1,mem_24g_sync_cnt
+	jam 2,mem_24g_rf_work_stage
+	jam 4,mem_24g_max_retry
+	branch p_g24_ch
+
+p_g24_rf_hop_attemp:
+	jam 3,mem_24g_rf_work_stage
+	fetch 1,mem_24g_rf_hop_ch
+	nbranch p_g24_rf_hop_attemp_again,blank
+	jam 2,mem_24g_max_retry
+	branch p_g24_ch
+
+p_g24_txdata_prep:
+	fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,p_g24_pairing_sm	
+p_g24_txdata_prep_packeage_data:
+	call p_g24_package_data
+p_g24_txdata_enable_tx:	
+	call p_g24_transmit_prep
+	jam ENSURE_ON_24G,mem_24g_ensure
+	rtn
+
+p_g24_package_data:
+	fetch 2,mem_cb_24g_data
+	call callback_func
+	branch p_g24_accumulate_mouse_data,user
+	fetch 7,mem_24g_txbuf+1	//mouse data
+	rtn blank
+	branch enable_user	// retransmit
+p_g24_accumulate_mouse_data:
+	jam 0,mem_24g_abort_pac
+	add rega,1,pdata
+	store 1,mem_24g_datalen
+	call p_g24_transmit_rf_ctrl_clear
+	store 1,mem_24g_txbuf
+	ifetcht 1,contw
+	ifetch 1,regb
+	ior temp,pdata
+	istore 1,contw	//key
+	increase 1,regb
+	ifetch 4,regb
+	istore 4,contw	//x,y
+	increase 4,regb
+	arg mem_24g_txbuf+6,contw
+	arg 2,loopcnt
+p_g24_accumulation_loop:
+	ifetch 1,regb
+	ifetcht 1,contw	//wheel,twheel
+	iadd temp,pdata
+	istore 1,contw
+	increase 1,regb
+	loop p_g24_accumulation_loop
+	rtn
+
+p_g24_transmit_packet:
+	jam 0,mem_24g_retry
+p_g24_transmit_loop:
+	arg param_rx_setup,timeup
+	until clkn_rt,meet
+	call p_g24_transmit_receive_ack
+	fetch 1,mem_24g_no_ack	//tx noack
+	rtneq no_ack_24g
+	nbranch p_g24_retransmit,sync
+	nbranch p_g24_retransmit,user3
+	call p_g24_txbuf_clear
+	call p_g24_ackpayload_parse
+	call power_ctrl_pac_succ_incrs
+p_g24_transmit_next_packet:
+	fetch 1,mem_24g_pid
+	increase 1,pdata
+	store 1,mem_24g_pid
+	fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,p_g24_paring_mode_start
+	call p_g24_transmit_succ_rf_config
+p_g24_transmit_abandon:
+	setarg 0
+	store 2,mem_24g_txfail_cnt
+	store 1,mem_24g_get_ack_fail
+	store 1,mem_24g_hop_pac_retry
+	jam ENSURE_OFF_24G,mem_24g_ensure
+	rtn
+
+p_g24_txbuf_clear:
+	arg 4,loopcnt
+	arg mem_24g_txbuf,contw
+	branch memset0
+
+p_g24_paring_mode_start:
+	call power_ctrl_pac_succ_cnt_init
+	branch p_g24_paring_mode
+
+p_g24_transmit_receive_ack:
+	disable user3
+	call p_g24_transmit
+	
+ifdef RF_DEBUG
+	call test_gpio_low
+endif
+
+	fetch 1,mem_24g_no_ack
+	beq no_ack_24g,p_g24_transmit_no_ack	//tx no ack
+	force 0,radio_ctrl
+	fetch 4,mem_24g_addr
+	iforce access
+	fetcht 1,mem_last_freq
+	call set_freq_rx
+	call rf_rx_enable
+	call p_g24_receive_rxon
+	call p_g24_end_of_packet,user3
+	rtn
+p_g24_transmit_no_ack:
+	call p_g24_end_of_packet
+	branch p_g24_transmit_next_packet
+
+p_g24_retransmit:
+	fetch 1,mem_24g_get_ack_fail
+	increase 1,pdata
+	store 1,mem_24g_get_ack_fail
+	fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,p_g24_tx_paring_retry
+	fetcht 1,mem_24g_retry
+	increase 1,temp
+	storet 1,mem_24g_retry
+	fetch 1,mem_24g_max_retry
+	isub temp,pdata
+	nbranch p_g24_transmit_loop,blank
+	fetch 1,mem_24g_rf_work_stage
+	beq 3,p_g24_transmit_pac_fail_hop_stage3
+	fetch 1,mem_24g_hop_pac_retry
+	increase 1,pdata
+	store 1,mem_24g_hop_pac_retry
+	beq 2,p_g24_transmit_hop_pac_fail
+	call p_g24_hop_ch_enable
+	jam 1,mem_24g_max_retry
+	branch p_g24_transmit_packet
+
+p_g24_tx_paring_retry:
+	fetch 1,mem_24g_get_ack_fail
+	rtnne 0xff
+	jam 0,mem_24g_get_ack_fail
+	branch p_g24_stop_g24_mode
+
+p_g24_tx_attempt_fail:
+	setarg 0
+	store 2,mem_24g_txfail_cnt
+p_g24_stop_g24_mode:
+	jam BT_EVT_24G_ATTEMPT_FAIL,mem_fifo_temp
+	branch ui_ipc_send_event
+
+p_g24_ackpayload_parse:
+	call p_g24_read_len_pid_crc
+	fetch 1,mem_24g_rxdata_length	//ack payload length 
+	rtn blank
+	iforce loopcnt
+	arg mem_24g_rxbuf+2,contr
+	arg mem_24g_rxpayload,contw	//ack payload buffer 
+	branch memcpy
+
+p_g24_start_pairing_sm1:
+	set1 mark_24g,mark
+	call p_g24_pair_init
+p_g24_set_pairing_sm_1:
+	jam STATE_24G_PAIRING_1,mem_24g_pairing_sm
+	rtn
+
+p_g24_pair_init:
+	jam TX_POWER_PAIR,mem_tx_power
+	jam 0,mem_24g_pid
+	jam G24_PAIR_CH,mem_24g_ch
+	fetch 4,mem_24g_paring_addr
+	branch p_g24_update_addr_and_synccrc8
+
+p_g24_pairing_sm:
+	fetch 1,mem_24g_ensure
+	beq ENSURE_ON_24G,enable_user
+	fetch 1,mem_24g_pairing_sm
+	beq STATE_24G_PAIRING_1,p_g24_pairing_sm_1
+	beq STATE_24G_PAIRING_2,p_g24_pairing_sm_2
+	beq STATE_24G_PAIRING_3,p_g24_pairing_sm_3
+	branch assert
+
+p_g24_pairing_sm_1:
+	jam STATE_24G_PAIRING_1_WAITING_ACK,mem_24g_pairing_sm
+	jam 0xaa,mem_24g_common_temp
+	branch p_g24_pairing_sm_common
+p_g24_pairing_sm_2:
+	jam STATE_24G_PAIRING_2_WAITING_ACK,mem_24g_pairing_sm
+	jam 0x55,mem_24g_common_temp
+	branch p_g24_pairing_sm_common
+p_g24_pairing_sm_3:
+	jam STATE_24G_PAIRING_3_WAITING_ACK,mem_24g_pairing_sm
+	jam 0x22,mem_24g_common_temp
+p_g24_pairing_sm_common:
+	fetch 1,mem_24g_data_type
+	and_into bits_data,pdata
+	store 1,mem_24g_common_temp+1
+	fetch 4,mem_24g_device_addr
+	store 4,mem_24g_common_temp+2
+p_g24_put_pairing_data_in_buff:
+	jam 0,mem_24g_common_temp+6
+	arg mem_24g_common_temp,rega
+	arg 7,temp
+	call p_g24_put_data_in_buff
+	call p_g24_txdata_enable_tx
+	branch enable_user
+
+p_g24_paring_mode:
+	fetch 1,mem_24g_pairing_sm
+	rtneq STATE_24G_PAIRING_SUCCESS
+	beq STATE_24G_PAIRING_1_WAITING_ACK,p_g24_pairing_sm_1_waiting_ack
+	beq STATE_24G_PAIRING_2_WAITING_ACK,p_g24_pairing_sm_2_waiting_ack
+	beq STATE_24G_PAIRING_3_WAITING_ACK,p_g24_pairing_sm_3_waiting_ack
+	rtn
+
+
+p_g24_pairing_sm_1_waiting_ack:
+	jam STATE_24G_PAIRING_2,mem_24g_pairing_sm
+	branch p_g24_transmit_abandon
+p_g24_pairing_sm_2_waiting_ack:
+	jam STATE_24G_PAIRING_3,mem_24g_pairing_sm
+	branch p_g24_transmit_abandon
+p_g24_pairing_sm_3_waiting_ack:
+	jam STATE_24G_PAIRING_SUCCESS,mem_24g_pairing_sm
+	jam BT_EVT_24G_PAIRING_COMPLETE,mem_fifo_temp
+	call ui_ipc_send_event	
+	fetch 4,mem_24g_rxpayload+2
+	call p_g24_update_addr_and_synccrc8
+	branch p_g24_transmit_abandon
+
+p_g24_start_24g_mode:
+	set0 mark_24g,mark
+	call p_g24_ch_syncword_crc8_init
+	fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call p_g24_tx_attemp_data_prep
+p_g24_tx_attemp_dongle:
+	setarg 0
+	store 2,mem_24g_check_dongle_times
+p_g24_tx_attemp_dongle_loop:
+	call lpo_calibration
+	nop 2000
+	fetch 1,mem_24g_check_dongle_times
+	beq 0xff,p_g24_stop_g24_mode
+	call p_g24_transmit_receive_ack
+	nbranch p_g24_attemp_txdata_retry,sync
+	nbranch p_g24_attemp_txdata_retry,user3
+p_g24_tx_attemp_dongle_succ:
+	set1 mark_24g,mark
+	setarg 0
+	store 2,mem_24g_check_dongle_times
+	jam BT_EVT_24G_ATTEMPT_SUCCESS,mem_fifo_temp
+	call ui_ipc_send_event
+	call p_g24_txbuf_clear
+	branch p_g24_transmit_by_interrupt_enable
+
+p_g24_tx_attemp_data_prep:
+	jam 0xff,mem_24g_common_temp
+	fetch 1,mem_24g_data_type
+	store 1,mem_24g_common_temp+1
+	fetch 4,mem_24g_device_addr
+	store 4,mem_24g_common_temp+2
+	arg 6,temp
+	arg mem_24g_common_temp,rega
+	call p_g24_put_data_in_buff
+	branch p_g24_transmit_prep
+	
+p_g24_attemp_txdata_retry:
+	fetch 2,mem_24g_check_dongle_times
+	increase 1,pdata
+	store 2,mem_24g_check_dongle_times
+	call p_g24_ch
+	branch p_g24_tx_attemp_dongle_loop
+
+p_g24_auto_pair_start:
+	set0 mark_24g,mark
+	call p_g24_auto_pair_all_powerful
+	call p_g24_tx_attemp_data_prep
+p_g24_auto_pair_restart:
+	jam 0,mem_24g_check_dongle_times
+p_g24_auto_pair_start_loop:
+	call lpo_calibration
+	nop 2000
+	fetch 1,mem_24g_check_dongle_times
+	beq 0xff,p_g24_stop_g24_mode
+	call p_g24_transmit_receive_ack
+	nbranch p_g24_auto_pair_retry,sync
+	nbranch p_g24_auto_pair_retry,user3
+	call p_g24_ackpayload_parse
+ifndef MS_ALL_POWER	
+	call p_mouse_tx_power_init
+endif
+	fetch 4,mem_24g_addr
+	fetcht 4,mem_24g_paring_addr
+	isub temp,null
+	branch p_g24_start_pairing_sm1,zero
+	branch p_g24_tx_attemp_dongle_succ
+
+p_g24_auto_pair_retry:
+	fetch 1,mem_24g_check_dongle_times
+	increase 1,pdata
+	store 1,mem_24g_check_dongle_times
+	fetch 1,mem_24g_auto_paring_switch
+	increase 1,pdata
+	and_into 1,pdata
+	store 1,mem_24g_auto_paring_switch
+	beq 0,p_g24_auto_pair_device_attemp
+	beq 1,p_g24_auto_pair_pair_attemp
+	rtn
+	
+p_g24_auto_pair_all_powerful:
+	jam TX_POWER_PAIR,mem_tx_power
+ifdef MS_ALL_POWER
+	call p_mouse_read_24g_addr
+else	
+	setarg 0x0f0f
+	store 2,mem_24g_addr
+	istore 2,contw
+endif
+p_g24_ch_syncword_crc8_init:	
+	call p_g24_syncword_crc8
+	branch p_g24_ch
+
+p_g24_auto_pair_device_attemp:
+	call p_g24_auto_pair_all_powerful
+	branch p_g24_auto_pair_start_loop
+
+p_g24_auto_pair_pair_attemp:
+	call p_g24_pair_init
+	branch p_g24_auto_pair_start_loop
+
+p_g24_check_51cmd_stop_24g:
+	set0 mark_24g,mark
+	call le_disable
+p_mouse_disable_g24_pairing_flag:
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	branch mouse_disable_function_flag
+
+p_g24_put_data_in_buff:
+	storet 1,mem_24g_datalen
+	copy temp,loopcnt
+	arg mem_24g_txbuf,contw
+	copy rega,contr
+	branch memcpy
+
+p_g24_read_len_pid_crc:
+//read control
+	fetch 1,mem_24g_rxbuf+1
+	rshift3 pdata,pdata
+	store 1,mem_24g_rxdata_length
+//get crc
+	increase 1,pdata
+	arg mem_24g_rxbuf+1,contr
+	iadd contr,contr
+	ifetch 3,contr
+	store 3,mem_24g_sta_crc
+//read pid
+	fetch 1,mem_24g_rxbuf+1
+	rshift pdata,pdata
+	and pdata,0x03,pdata
+	store 1,mem_24g_sta_pid
+	rtn
+
+p_g24_update_addr_and_synccrc8:	
+	store 4,mem_24g_addr
+//output: 1BYTE crc8
+p_g24_syncword_crc8:
+	arg 0,rega
+	arg 4,loopcnt
+	arg mem_24g_addr,contr
+p_g24_syncword_crc8_loop:
+	ifetch 1,contr
+	iadd rega,rega
+	loop p_g24_syncword_crc8_loop
+	copy rega,pdata
+	store 2,mem_24g_syncword
+	fetch 1,mem_24g_syncword
+	fetcht 1,mem_24g_syncword+1
+	iadd temp,pdata
+	store 1,mem_24g_syncword_crc8
+	rtn
+
+p_g24_transmit_prep:
+ifdef P24G_LOG
+	fetch 1,mem_24g_paccnt
+	increase 1,pdata
+	store 1,mem_24g_paccnt
+endif
+
+// total length
+	fetch 1,mem_24g_datalen
+	increase 2,pdata
+	store 1,mem_24g_txlen
+// data type
+	fetch 1,mem_24g_data_type
+	store 1,mem_24g_txpayload
+//prepare 5bit payload length, 2bit PID, 1bit NO_ACK
+	fetch 1,mem_24g_datalen
+	lshift3 pdata,pdata
+	fetcht 1,mem_24g_pid
+	and temp,0x03,temp
+	lshift temp,temp
+	ior temp,pdata
+	fetcht 1,mem_24g_no_ack
+	iadd temp,pdata
+	istore 1,contw
+//prepare payload data
+	fetch 1,mem_24g_datalen
+	iforce loopcnt
+	arg mem_24g_txbuf,contr
+	branch memcpy
+
+p_g24_ch:
+	fetcht 1,mem_24g_current_ch_number
+	call p_g24_ch_map_size
+	storet 1,mem_24g_current_ch_number
+	rtn
+
+p_g24_ch_map_size:
+	call p_g24_ch_calc
+	increase 1,temp
+	and_into 3,temp //map size =4
+	rtn
+	
+p_g24_ch_calc:
+	fetch 1,mem_24g_addr	
+	and_into 0x03,pdata
+	mul32 pdata,4,rega			//24addr low bit0 bit1 ,00-map1,01-map2,10-map3,11-map4
+	setarg mem_24g_ch_map1
+	iadd rega,pdata
+	iadd temp,contr
+	ifetch 1,contr
+	store 1,mem_24g_ch
+	rtn
+
+p_g24_prep:
+	disable enable_crc
+	disable enable_white
+	setarg 0x555555
+	iforce crc24_init
+	fetch 1,mem_24g_ch
+	reverse pdata,temp
+	set1 1,temp
+	rshift temp,white_init
+	rtn
+
+p_g24_receive_packet:
+	call le_enable
+	fetch 4,mem_24g_addr
+	iforce access
+	call set_sync_on
+	fetcht 1,mem_24g_ch
+	call set_freq_rx
+	setarg param_pll_setup
+	call sleep
+	call rf_rx_enable
+p_g24_receive_rxon:
+
+ifdef RF_DEBUG
+	call test_h_l_h
+endif
+
+	call p_g24_prep
+	disable user3
+	enable decode_fec0
+	enable is_rx
+	disable is_tx
+	enable swfine
+	fetch 2,mem_24g_rx_window
+	iforce stop_watch
+	correlate null,timeout
+	nbranch p_g24_sync_timeout,sync
+
+ifdef RF_DEBUG
+	call test_gpio_low
+	call test_gpio_high
+endif
+
+	disable decode_fec0
+	enable decode_fec1
+	enable enable_white
+	enable enable_crc
+	call p_g24_receive_byte
+	store 1,mem_24g_get_syncword_crc8
+	fetcht 1,mem_24g_syncword_crc8
+	isub temp,null
+	nbranch p_g24_end_of_packet,zero
+	call p_g24_receive_byte
+	store 1,mem_24g_rxbuf	//device id
+	fetch 1,mem_24g_mode
+	sub pdata,rx_24g,null
+	branch p_g24_receive_skip,zero
+	fetch 1,mem_24g_rxbuf
+	fetcht 1,mem_24g_data_type
+	icompare bits_data,temp
+	nbranch p_g24_end_of_packet,true
+p_g24_receive_skip:
+	call p_g24_receive_byte
+	istore 1,contw
+	rshift3 pdata,pdata
+	and pdata,0x1f,loopcnt	//max payload: 32bytes
+	branch p_g24rx_nopayload,zero
+p_g24rx_loop:
+	call p_g24_receive_byte
+	istore 1,contw
+	loop p_g24rx_loop
+p_g24rx_nopayload:
+ifdef MOUSE
+	//receive rssi hex
+	copy contw,rega
+	call p_g24_receive_byte
+	store 1,mem_rssi_hex_received
+	copy rega,contw
+endif
+	parse demod,bucket,24
+	enable swfine
+	arg param_sifs,stop_watch	
+	rshift32 pdata,pdata
+	rshift16 pdata,pdata
+	istore 3,contw
+	disable decode_fec1
+ifdef DONGLE
+	call save_rssi
+endif	
+	branch p_g24_end_of_packet,crc_failed
+
+ifdef RF_DEBUG
+	call test_gpio_low
+	call test_gpio_high
+endif
+
+	enable user3
+	fetch 1,mem_last_freq
+	add pdata,0,rega
+	call rf_write_freq
+	disable decode_fec0
+	call set_sync_on
+ifdef DONGLE
+	rtn
+endif
+ifdef MOUSE
+	fetch 1,mem_rssi_hex_received
+	call p_rssi_signal
+endif
+	rtn
+
+p_g24_receive_byte:
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	rtn
+	
+p_g24_end_of_packet:
+	disable encode_fec1
+	disable decode_fec1
+	call end_of_packet
+ifdef RF_DEBUG
+	call test_gpio_low
+endif
+	rtn
+
+p_g24_sync_timeout:
+ifdef DONGLE
+	call p_rssi_noise
+endif
+	branch p_g24_end_of_packet
+
+p_g24_set_freq_tx:
+	call set_sync_on
+	fetcht 1,mem_24g_ch
+	branch set_freq_tx
+
+p_g24_transmit:
+	call le_enable
+	fetch 4,mem_24g_addr
+	iforce access
+	call p_g24_prep
+	call p_g24_set_freq_tx
+	set1 TXGFSK,radio_ctrl
+	enable encode_fec0
+	enable is_tx
+	disable is_rx
+
+ifdef RF_DEBUG
+	call test_gpio_high
+endif
+	
+	rshift16 access,pdata
+	rshift8 pdata,pdata
+	rshift4 pdata,pdata
+	inject mod,40
+	disable encode_fec0
+	enable encode_fec1
+	enable enable_white
+	enable enable_crc
+	fetch 1,mem_24g_syncword_crc8
+	inject mod,8
+	fetch 1,mem_24g_txlen
+	iforce loopcnt
+	arg mem_24g_txpayload,contr
+p_g24tr_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop p_g24tr_loop
+ifdef DONGLE
+	fetch 1,mem_rssi_hex
+	inject mod,8
+endif
+
+ifdef P24G_LOG	
+	fetch 1,mem_tx_power
+	inject mod,8
+	fetch 1,mem_rssi_avg_received
+	inject mod,8
+	fetch 1,mem_24g_paccnt
+	inject mod,8
+endif
+
+	enable enable_parity
+	inject mod,24	//crc
+	disable enable_parity
+	until null,tx_clear
+	nop 100
+	disable encode_fec0
+	disable encode_fec1
+	rtn
+
+p_g24_timer_check:
+	call disable_user
+	fetcht 4,mem_24g_tx_btclk
+	copy clkn_bt,pdata
+	isub temp,null
+	ncall g24_timer_timeout,positive
+	copy pdata,regb
+	fetch 4,mem_24g_tx_btclk
+	fetcht 1,mem_24g_interval
+	iadd temp,temp
+	copy regb,pdata
+	isub temp,null
+	nrtn positive
+	set0 28,pdata
+	store 4,mem_24g_tx_btclk
+	branch enable_user
+
+p_rssi_noise:
+	call save_rssi
+	rtn blank
+	fetcht 1,mem_rssi_noise_index
+	arg mem_rssi_noise_buffer,rega
+	call p_rssi_store
+	storet 1,mem_rssi_noise_index
+	rtn
+	
+p_rssi_store:
+	copy rega,pdata
+	iadd temp,contw
+	fetch 1,mem_rssi
+	istore 1,contw
+	increase 1,temp
+ifdef DONGLE
+	and_into RSSI_BUF_LEN_NOISE,temp
+endif
+ifdef MOUSE
+	and_into RSSI_BUF_LEN_SIGNAL,temp
+endif
+	rtn
+p_rssi_average:
+	arg 0,temp
+ifdef DONGLE
+	arg RSSI_BUF_LEN_NOISE+1,loopcnt
+endif
+ifdef MOUSE
+	arg RSSI_BUF_LEN_SIGNAL+1,loopcnt
+endif
+	copy rega,contr
+ifdef DONGLE
+	branch rssi_average_loop
+endif
+ifdef MOUSE
+p_rssi_average_loop:
+	ifetch 1,contr
+	iadd temp,temp
+	loop p_rssi_average_loop
+	rshift3 temp,pdata
+	copy pdata,temp
+	rtnmark0 mark_24g
+	//2BCD
+	div pdata,10
+	call wait_div_end
+	quotient pdata
+	lshift4 pdata,pdata
+	remainder temp
+	ior temp,temp
+	rtn
+endif
+	rtn
+
+endif
+
+p_mouse_before_lpm:
+	rtnmark1 mark_24g
+ifdef BLE	
+	call p_mouse_le_txbuff_save
+endif	
+	call p_mouse_setgpio_lpm
+	fetch 1,mem_context
+	bbit0 state_inconn,p_clear_wake
+	fetch 1,mem_lpm_current_mult
+	nrtn blank
+p_clear_wake:
+	setarg 0
+	store 8,mem_gpio_wakeup_low
+	rtn
+
+p_mouse_setgpio_lpm:
+	call p_mouse_set_sdio_high
+	call p_clear_wake
+p_mouse_setgpio_lpm_before:
+	call mouse_lpm_before_common
+	hfetch 4,core_gpio_oe0
+	hfetcht 4,core_gpio_pu0
+	ior temp,temp
+	invert temp,temp
+	hstoret 4,core_gpio_pd0
+	rtn
+
+p_mouse_set_sdio_high:
+	fetch 1,mem_mouse_init_sensor_reset_flag
+	rtn blank
+	branch p_mouse_seting_dpi_diff// make sdio high to make 100uA less	
+
+p_device_init:
+ifdef DEBUGLOG
+	call debuglog_init
+ifdef DEBUGLOG_STATUS
+	setarg DEBUGLOG_DTYPE_STATUS
+	store 2,mem_debuglog_datatype
+	setarg STATUS_LPM_WAKE
+	store 2,mem_debuglog_dataval
+	call debuglog_push	
+endif
+endif
+	call app_lpm_mult_enable
+	branch p_device_init_common,wake
+ifdef DEBUGLOG
+ifdef DEBUGLOG_STATUS
+	setarg DEBUGLOG_DTYPE_STATUS
+	store 2,mem_debuglog_datatype
+	setarg STATUS_CODE_WAKE
+	store 2,mem_debuglog_dataval
+	call debuglog_push
+endif
+endif
+ifdef BLE
+	call p_mouse_data_init
+endif
+	fetch 1,mem_tx_power
+	store 1,mem_tx_power_temp
+	call power_ctrl_pac_succ_cnt_init
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_combination_ui_button_count	//combination key timer init
+	call mouse_bt_discovery_button_down_disable
+p_device_init_common:
+	call p_mouse_init
+	branch enable_authrom
+
+p_mouse_tx_power_init:
+	fetch 1,mem_tx_power_temp
+	store 1,mem_tx_power
+	rtn
+
+p_mouse_init:
+	ncall p_mouse_setting_config,wake
+	call p_mouse_spi_init
+	rtn wake
+ifdef RF_DEBUG
+	call test_gpio_init
+endif
+ifdef MOUSE_SMOOTHER	
+	call p_drawing_optima_init
+endif
+	call p_mouse_cb_fuction
+ifdef G24
+	fetch 1,mem_power_on_flag
+	bbit1 2,p_mouse_skip_24g_pair
+	call mouse_check_key_gpio
+	beq MOUSE_LM_BUTTON,p_mouse_24g_pairing_button
+p_mouse_skip_24g_pair:	
+endif	
+	branch p_mouse_wakeup_from_power
+
+p_mouse_check_reconn_target:
+	call p_mouse_tx_power_init
+	fetch 1,mem_xrecord_mode
+ifdef CLASSIC_BT
+	beq REC_3_MODE,p_mouse3_0_check_reconn_target
+endif
+ifdef BLE	
+	beq REC_4_MODE,p_mouse4_0_check_reconn_target
+endif
+	rtn
+
+ifdef CLASSIC_BT
+p_mouse3_0_check_reconn_target:
+	fetch 6,mem_hci_plap
+	branch app_bt_start_discovery_short,blank
+	branch mouse3_0_check_reconn_target+3
+endif	
+
+ifdef BLE
+p_mouse4_0_check_reconn_target:
+	jam 1,mem_mouse_le_reconnect_flag
+	fetch 2,mem_mouse_direct_timeout
+	store 2,mem_mouse_direct_timer
+	call app_lpm_mult_disable
+	call p_le_check_adv_flag
+	setarg ADV_FLAG_BREDR_NOT_SUPPORTED
+	istore 1,contr
+
+	arg mem_le_scan_data,contr
+	call p_le_adv_data_update
+	
+	branch check_51cmd_adv
+
+p_le_check_adv_flag:
+	arg mem_le_adv_data,rega
+p_le_check_adv_flag_loop:
+	ifetch 1,rega	//length
+	rtn blank
+	iadd contr,rega
+	ifetch 1,contr	//type
+	rtneq 0x01
+	branch p_le_check_adv_flag_loop
+endif
+
+ifdef G24
+p_mouse_24g_pairing_button:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_24G
+	rtnbit1 MOSUE_24G_PAIRING_FLAG
+	rtnmark1 mark_24g
+	call mouse_devce_led_off
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	call mouse_enable_function_flag
+	setarg 0
+	store 2,mem_mouse_direct_timer
+	store 1,mem_mouse_send_blank_timer
+	store 2,mem_24g_check_dongle_times
+	call mouse_stop_discovery
+	branch p_g24_start_pairing_sm1
+endif
+
+p_mouse_dpi_config:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_EEPROM,mouse_dpi_config
+	fetch 1,mem_mouse_dpi
+	beq 0xff,mouse_dpi_config
+	branch mouse_seting_dpi+2
+
+p_mouse_spi_init:
+	jam 0x76,mem_spi_init_clk
+	branch mouse_spi_init
+	
+p_mouse_init_sunt:
+	call p_mouse_spi_init
+	call mouse_spi_sdio_gpio_pollup
+	fetch 1,mem_config_sensor_type
+	beq P3610,mouse_init_3610sensor
+p_mouse_init_sensor:
+	call mouse_read_sensor_id
+	beq P32XX_ID1,p_mouse_init_p32xx_id2_judge
+	beq P3065_ID1,p_mouse_p3065_init_param
+	call mouse_twspi_reset
+	nop 1000
+	branch p_mouse_init_sensor
+
+p_mouse_init_sensor_reset:
+	jam 1,mem_mouse_init_sensor_reset_flag
+	call spi_ncs_enable
+	call p_mouse_init_sunt
+	branch spi_ncs_disable
+
+p_mouse_init_p32xx_id2_judge:
+	call p_mouse_sensor_poweron
+	branch mouse_init_p32xx_id2_judge
+
+
+p_mouse_p3065_init_param:
+	call p_mouse_sensor_poweron
+	fetch 1,mem_sensor_id2
+	beq P3065_XY_ID2,mouse_p3065xy_init_param
+	jam P3065,mem_config_sensor_type
+	rtn
+
+p_mouse_sensor_poweron:
+	setarg 0x8006	// reset to factory settings
+	call twspi_write
+	nop 12000
+	branch p_mouse_dpi_config
+p_mouse_sensor_powerdown:
+	setarg 0x06
+	call twspi_read
+	or pdata,0x08,pdata
+	lshift8 pdata,pdata
+	add pdata,0x06,pdata
+	branch twspi_write	//make sdio high
+
+p_mouse_setting_config:
+ifdef G24
+	call p_g24_set_device_addr
+endif
+	//disable usb function
+	hfetch 1,core_usb_config
+	set0 4,pdata
+	hstore 1,core_usb_config
+ifndef MS_MATRIX
+	call mouse_gpio_init
+endif
+	call mouse_param_init
+
+ifdef XTAL_16M
+	setarg 0x1802	//16M XTAL
+	store 2,mem_fcomp_mul
+endif	
+	
+ifdef CLASSIC_BT	
+	call p_mouse_bt_sdp_update
+endif	
+	setarg 0
+	store 2,mem_lpm_interval
+	call mouse_adc_init
+ifdef BLE	
+	call le_set_config_fixed_ltk
+	call le_set_justwork
+	call le_set_fixed_ltk
+	call le_set_config_read_authentication
+endif	
+p_mouse_init_iic:
+	call iic_init_390k
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	isolate1 MOUSE_ENABLE_2K_EEPROM,pdata
+	ncall clear_eeprom_size_2k,true
+	call mouse_load_eeprom_dpi
+	call p_mouse_init_environment
+p_mouse_read_24g_addr:	
+	call p_mouse_set_24g_addr_eeprom
+	branch iicd_read_eep_data
+
+ifdef CLASSIC_BT
+p_mouse_bt_sdp_update:
+	call enable_authrom
+	arg 0x8c00,contr
+	arg mem_mouse_uuid_list,contw
+	arg 369,loopcnt
+	call memcpy
+	//Attribute: HID SSR Host Max Latency
+	setarg 0x0f0209
+	istore 3,contw
+	setarg 0x120009
+	istore 3,contw
+	//Attribute: HID SSR Host Min Timeout
+	setarg 0x100209
+	istore 3,contw
+	setarg 0x000009
+	istore 3,contw
+	arg 0x8d71,contr
+	arg 265,loopcnt
+	call memcpy
+	
+	jam 0,mem_mouse_uuid_list+23	//Service Record Handle: 0x 00 01 00 00
+	jam 0x6d,mem_mouse_uuid_list+15	//total length
+	setarg 0x401f
+	store 2,mem_mouse_uuid_list+357	//timeout
+	setarg 0x6d04
+	store 2,mem_mouse_uuid_list+462	//VID
+	setarg 0x16b0
+	store 2,mem_mouse_uuid_list+468	//PID
+
+	setarg mem_mouse_uuid_list				//bt sdp start address
+	store 2,mem_ui_uuid_table
+	rtn
+endif	
+
+p_mouse_init_environment:
+	call app_initflag_check
+	branch mouse_eeprom_load_recon_info,zero
+ifdef BLE
+	call p_le_addr_random_config
+endif
+	branch mouse_init_environment+2
+
+p_app_flag_store:
+	arg 2,temp
+	arg mem_timeup,rega
+	arg MOUSE_EEPROM_MODULE_INIT_FLAG,regb
+	branch iicd_write_protect_eep_data
+
+p_app_initflag_check:
+	arg 2,temp
+	arg mem_pdatatemp,rega
+	arg MOUSE_EEPROM_MODULE_INIT_FLAG,regb
+	branch app_initflag_check+4
+
+p_mouse_wakeup_from_power:
+ifdef MS_ALL_POWER
+	branch p_g24_auto_pair_start
+endif
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_WAKEUP_FROM_POWER,p_mouse_wakeup_no_from_power
+	fetch 1,mem_wakup_from_power_flag
+	isolate0 gpio_latch,pdata
+	nbranch p_mouse_wakeup_no_from_power,true
+	call p_mouse_init_sunt
+	call p_mouse_sensor_powerdown
+p_mouse_wakeup_no_from_power:
+	fetch 1,mem_reconn_times_init
+	store 1,mem_reconn_times
+//	fetch 1,mem_config_function_enable	//standard do not need it
+//	rtnbit1 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON
+//	rtnbit1 ENABLE_SELECT_DEVICE_BY_SWITCH
+p_mouse_start_24g_mode:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_24G
+	call p_g24_factory_check
+	branch p_g24_auto_pair_start,user
+	branch p_g24_start_24g_mode
+
+p_g24_factory_check:
+	arg 2,loopcnt
+	arg mem_24g_addr,contr
+p_pdata_0xff_check:
+	call enable_user
+	setarg 0xffff
+p_pdata_0xff_check_loop:
+	ifetcht 2,contr
+	isub temp,null
+	ncall disable_user,zero
+	loop p_pdata_0xff_check_loop
+	rtn
+
+p_mouse_cb_fuction:
+	setarg p_mouse_priority_bb_event
+	store 2,mem_cb_bb_event_process
+ifdef G24
+	setarg p_mouse_g24_package_data
+	store 2,mem_cb_24g_data
+endif
+
+ifndef MS_ALL_POWER
+ifdef BLE
+	setarg p_mouse_le
+	store 2,mem_cb_le_process
+	setarg p_le_mouse_bb_event_connect_complete
+	store 2,mem_cb_att_write
+endif
+ifdef CLASSIC_BT
+	setarg p_mouse_bt
+	store 2,mem_cb_bt_process
+endif	
+	setarg p_mouse_before_lpm
+	store 2,mem_cb_before_lpm
+	setarg p_mouse_idle
+	store 2,mem_cb_idle_process
+	setarg p_mouse_before_hibernate
+	store 2,mem_cb_before_hibernate
+	setarg p_mouse_bb_event_timer
+	store 2,mem_cb_event_timer
+endif	
+	rtn
+
+ifdef G24
+p_mouse_g24_package_data:
+ifdef MS_ALL_POWER
+ifdef MS_MATRIX
+	branch p_mouse_g24_package_data_allpower
+else
+	branch p_mouse_g24_package_data_normal
+endif
+endif
+
+p_mouse_g24_package_data_normal:
+	call mouse_g24_package_data
+	fetch 2,mem_mouse_z
+	rtn blank
+	branch p_g24_transmit_by_interrupt_enable
+
+ifdef MS_MATRIX
+p_mouse_g24_package_data_allpower:
+	call p_g24_matrix_data
+	branch p_mouse_g24_package_data_normal+1
+endif
+	
+endif	
+	
+ifdef BLE
+p_mouse_le_txbuff_save:
+	arg mem_le_tx_buffer0,contr
+	arg mem_le_tx_buffer0_omemalloc,contw
+	call p_mouse_le_txbuff_copy
+	arg mem_le_tx_buffer1,contr
+	call p_mouse_le_txbuff_copy
+	arg mem_le_tx_buffer2,contr
+	call p_mouse_le_txbuff_copy
+	arg mem_le_tx_buffer3,contr
+p_mouse_le_txbuff_copy:	
+	arg 27,loopcnt
+	branch memcpy
+
+p_mouse_le_txbuff_load:
+	arg mem_le_tx_buffer0_omemalloc,contr
+	arg mem_le_tx_buffer0,contw
+	call p_mouse_le_txbuff_copy
+	arg mem_le_tx_buffer1,contw
+	call p_mouse_le_txbuff_copy
+	arg mem_le_tx_buffer2,contw
+	call p_mouse_le_txbuff_copy
+	arg mem_le_tx_buffer3,contw
+	branch p_mouse_le_txbuff_copy
+
+p_mouse_le:
+	call le_fifo_check_nearly_full
+	nrtn blank
+	fetch 1,mem_le_connect_status_flag
+	and pdata,0x03,pdata
+	rtnne 0x03
+	fetch 1,mem_mouse_clear_sensor_data_flag
+	call p_mouse_clear_sensor_data,blank
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_le_send_empty_packet
+	call mouse_motion
+ifdef HIGH_REPORT
+	nbranch p_bt_125hz_clear,user
+	call p_bt_125hz
+	nrtn user7
+else
+	nrtn user
+endif
+	call p_mouse_wheel_trigger
+	branch p_mouse_data_push
+
+ifdef HIGH_REPORT
+p_bt_125hz:
+	enable user7
+	fetch 1,mem_bt_125hz_cnt
+	beq 15,p_bt_125hz_clear
+	increase 1,pdata
+	store 1,mem_bt_125hz_cnt
+	rtn
+p_bt_125hz_clear:
+	jam 0,mem_bt_125hz_cnt
+	disable user7
+	rtn	
+endif
+
+p_mouse_data_init:
+	jam 7,mem_mouse_data_queue	//data length
+	jam 4,mem_mouse_data_queue+1	//fifo depth
+	setarg mem_mouse_data_queue
+	store 2,mem_queue_ptr
+	branch queue_init
+
+p_mouse_data_push:
+	arg mem_mouse_key,rega
+	call queue_push
+	call p_mouse_queue_increase,user
+	
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	setarg MISC_LOST_MOUSEDATA
+	store 2,mem_debuglog_dataval
+	nbranch debuglog_push,user
+
+	setarg MISC_PUSH_MOUSEDATA
+	store 2,mem_debuglog_dataval
+	call debuglog_push
+endif
+endif
+	rtn
+p_mouse_queue_increase:
+	fetch 1,mem_mouse_data_queue_num
+	increase 1,pdata
+	store 1, mem_mouse_data_queue_num
+	rtn
+	
+p_mouse_data_pull:
+	arg mem_mouse_key,rega
+	call queue_pop
+	branch p_mouse_fill_data_le,user
+	rtn
+
+p_mouse_fill_data_le:
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	setarg MISC_PULL_MOUSEDATA
+	store 2,mem_debuglog_dataval
+	call debuglog_push
+
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_mouse_x
+	store 1,mem_debuglog_dataval
+	fetch 1,mem_mouse_y
+	store 1,mem_debuglog_dataval+1
+	call debuglog_push	
+endif
+endif
+	call le_clear_md
+	fetch 1,mem_mouse_data_queue_num
+	sub pdata,1,null
+	ncall le_set_md,positive
+	fetch 1,mem_mouse_data_queue_num
+	rtn blank
+	increase -1,pdata
+	store 1, mem_mouse_data_queue_num
+	branch mouse_fill_data_le
+	
+endif
+
+p_mouse_wheel_trigger:
+	fetch 2,mem_mouse_z
+	rtn blank
+	jam 1,mem_mouse_wheel_trigger
+	jam 2,mem_mouse_wheel_trigger_timer
+	rtn
+
+ifdef CLASSIC_BT
+p_mouse_bt:
+	rtn attempt
+	fetch 1,mem_app_handshake_flag
+	rtn blank
+	call l2cap_malloc_is_fifo_nearly_full
+	nrtn blank
+	fetch 1,mem_mouse_clear_sensor_data_flag
+	call p_mouse_clear_sensor_data,blank
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_send_empty_data
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_LONG_DOWN_FLAG,mouse_send_empty_data
+	call mouse_motion
+ifdef HIGH_REPORT
+	nbranch p_bt_125hz_clear,user
+	call p_bt_125hz
+	nrtn user7
+else
+	nrtn user
+endif
+	call p_mouse_wheel_trigger
+	fetch 1,mem_mouse_bt_boot_mode
+	beq 1,p_mouse_send_data_boot_mode	//boot
+	fetch 1,mem_mouse_bt_send_first_package_flag
+	rtn blank
+	branch mouse_send_data	//report
+
+p_mouse_send_data_boot_mode:
+	fetch 1,mem_mouse_key
+	store 1,mem_mouse_bt_boot_data
+	fetch 1,mem_mouse_x
+	istore 1,contw
+	fetch 1,mem_mouse_y
+	istore 1,contw
+	fetch 2,mem_mouse_z
+	istore 2,contw
+
+	arg 7,rega
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_int_remote_cid
+	istore 2,contw
+	setarg 0x02a1
+	istore 2,contw
+	fetch 5,mem_mouse_bt_boot_data
+	istore 5,contw
+	rtn
+endif
+	
+p_mouse_clear_sensor_data:
+	call le_set_config_more_data
+	jam 1,mem_mouse_clear_sensor_data_flag
+	branch p_mouse_sensor_poweron
+
+p_mouse_idle:
+	call ui_check_paring_button
+	call mouse_dpi_cheak
+	branch mouse_wheel_check
+
+p_mouse_priority_bb_event:
+	copy regc,pdata
+ifdef BLE	
+	beq BT_EVT_LE_CONNECTED,p_mouse_le_bb_event_connected
+	beq BT_EVT_LE_DISCONNECTED,p_mouse_le_bb_disconnected
+	beq BT_EVT_LE_ENC_INFO,p_mouse_le_enc_info
+	beq BT_EVT_LE_START_ENC,p_mouse_le_ll_start_encryt
+	beq BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,p_mouse_le_conn_param_update_rsp_recieved
+endif
+ifdef CLASSIC_BT
+	beq BT_EVT_RECONN_FAILED,p_mouse_bb_event_reconn_failed
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,p_mouse_bb_event_reconn_timeout
+	beq BT_EVT_VIRTUAL_CABLE_UNPLUG,p_mouse_irtual_cable_unplug
+	beq BT_EVT_SWITCH_NOT_ACCEPT,app_bt_role_switch	
+	beq BT_EVT_SNIFF_NOT_ACCEPT,p_mouse_sniff_not_accept
+	beq BT_EVT_BB_CONNECTED,p_mouse_bb_event_connected
+	beq BT_EVT_BB_DISCONNECTED,p_mouse_bb_event_disconnected
+	beq BT_EVT_SWITCH_SUCCESS_MASTER,p_mouse_enter_sniff_check
+endif
+ifdef G24
+	beq BT_EVT_24G_PAIRING_COMPLETE,p_mouse_24g_pairing_complete
+	beq BT_EVT_24G_ATTEMPT_FAIL,p_mouse_24g_attempt_fail
+	beq BT_EVT_24G_ATTEMPT_SUCCESS,p_mouse_24g_attempt_success
+endif
+	branch mouse_priority_bb_event+1
+
+ifdef BLE
+p_mouse_le_bb_event_connected:
+	fetch 1,mem_mouse_le_reconnect_flag
+	nbranch p_mouse_le_bb_event_connected_next,blank
+	jam 0x14,mem_mouse_send_secutiry_request_timer
+p_mouse_le_bb_event_connected_next:
+	call p_mouse_init_sensor_reset
+	call p_mouse_data_init
+	branch mouse_le_bb_event_connected
+
+p_mouse_le_bb_disconnected:
+	jam 0,mem_le_send_security_request_flag
+	call p_mouse_sensor_powerdown_check
+ifdef HIGH_REPORT
+	setarg LE_INTERVAL_7_5MS
+else 
+	setarg LE_INTERVAL_8_75MS
+endif
+	store 2,mem_le_interval_min
+	store 2,mem_le_interval_min+2
+	jam LE_LPM_ENABLE,mem_mouse_le_conn_param_reject
+	jam 0,mem_mouse_clear_sensor_data_flag
+	call p_mouse_data_init
+	call le_clr_config_more_data
+	branch mouse_bb_disconnected
+
+p_mouse_le_enc_info:
+p_app_updata_le_param:
+	jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+p_mouse_le_ll_start_encryt:
+	fetch 1,mem_mouse_le_reconnect_flag
+	beq 1,p_mouse_le_ll_reconn_start_encryt
+	branch p_mouse_le_ll_enable_start_enc_flag
+
+p_mouse_le_ll_reconn_start_encryt:
+	call p_app_updata_le_param
+	jam 20,mem_le_start_encrypt_timer
+p_mouse_le_ll_enable_start_enc_flag:
+	arg LL_START_ENC_FLAG,queue
+	branch mouse_le_enable_connect_flag
+
+p_mouse_le_conn_param_update_rsp_recieved:
+	fetch 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	rtneq BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_ACCEPTED
+	fetch 1,mem_le_tsniff
+	rshift2 pdata,pdata
+	sub pdata,LE_INTERVAL_15MS,null
+	rtn positive
+	setarg LE_INTERVAL_11_25MS
+	store 2,mem_le_interval_min
+	store 2,mem_le_interval_min+2
+	call p_app_updata_le_param
+p_mouse_le_conn_param_lpm_disable:
+	jam LE_LPM_DISABLE,mem_mouse_le_conn_param_reject
+	rtn
+endif
+
+
+ifdef CLASSIC_BT
+p_mouse_bb_event_reconn_timeout:
+p_mouse_bb_event_reconn_failed:
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+	rtnbit1 UI_STATE_BT_DISCOVERY
+	rtnbit1 UI_STATE_BLE_ADV
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG
+	branch app_bb_hibernate
+
+p_mouse_irtual_cable_unplug:
+	call mouse_irtual_cable_unplug
+	branch app_bb_hibernate
+
+p_mouse_sniff_not_accept:
+	fetch 1,mem_mouse_enter_sniff_count
+	rtneq 2
+	increase 1,pdata
+	store 1,mem_mouse_enter_sniff_count
+	jam CLASSIC_INTERVAL_11_25MS,mem_sniff_param_interval	//89Hz
+	branch app_bt_enter_sniff
+
+p_mouse_bb_event_connected:
+	jam 0,mem_mouse_send_switch_req_timer
+	call p_mouse_init_sensor_reset
+	branch mouse_stop_discovery
+
+p_mouse_bb_event_disconnected:
+	jam 0,mem_bt_rcvd_switch_req_accept
+	jam 0,mem_bt_send_lmp_setup_complete
+	jam 0,mem_mouse_bt_send_first_package_flag
+	call p_mouse_sensor_powerdown_check
+	branch mouse_bb_disconnected
+
+p_mouse_enter_sniff_check:
+	fetch 1,mem_mouse_enter_sniff_count
+	rtnne 2
+	jam 0,mem_mouse_enter_sniff_count
+ifdef HIGH_REPORT
+	jam CLASSIC_INTERVAL_7_5MS,mem_sniff_param_interval	//89Hz
+else
+	jam 0x0e,mem_sniff_param_interval	//89Hz
+endif
+	branch app_bt_enter_sniff
+	
+endif
+
+ifdef G24
+p_mouse_24g_pairing_complete:
+ifndef MS_MATRIX
+	call p_mouse_init_sensor_reset
+endif
+	jam 1,mem_mouse_24g_enter_lpm_enable
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	call mouse_disable_function_flag
+	setarg 0
+	store 2,mem_24g_pairing_timer_count
+	jam 0,mem_mouse_move_flag
+	
+	call mouse_read_sensor_common
+
+ifdef MS_MATRIX
+	call p_g24_transmit_by_interrupt_enable
+endif
+ifndef MS_ALL_POWER
+	call p_mouse_tx_power_init
+endif
+	call p_mouse_set_24g_addr_eeprom	//store rx dongle addr to eeprom
+	branch iicd_write_protect_eep_data
+
+p_mouse_set_24g_addr_eeprom:
+	arg mem_24g_addr,rega
+	arg MOUSE_G24_ADDR_EEPROM_OFFECT,regb
+	arg 4,temp
+	rtn
+
+p_mouse_24g_attempt_fail:
+ifndef MS_MATRIX
+	call p_mouse_sensor_powerdown_check
+endif
+	jam G24_TX_TIMER_INT_DISABLE,mem_24g_transmit_by_interrupt
+	call p_mouse_tx_power_init
+	call p_g24_check_51cmd_stop_24g
+ifdef MS_ALL_POWER
+	branch soft_reset_chip
+endif	
+	jam 0,mem_link_key_exists
+	call mouse_eeprom_load_recon_info
+	arg 3,loopcnt
+	arg mem_device1_addr,contr
+	call p_pdata_0xff_check
+	branch p_mouse_null_enter_hibernate_count,user
+	branch p_mouse_check_reconn_target
+
+p_mouse_24g_attempt_success:
+ifndef MS_MATRIX
+	call p_mouse_init_sensor_reset
+endif
+	branch mouse_no_data_timer_init	
+endif
+
+
+p_mouse_before_hibernate:
+	enable user
+	hfetch 4,0x8138
+	setflag user,26,pdata
+	hstore 4,core_lpm_reg
+	call lpm_write_ctrl
+	call p_mouse_sensor_powerdown_check
+	call disable_authrom
+	call mouse_devce_led_off
+	call mouse_before_hibernate_wheel_gpio_set
+	branch p_mouse_setgpio_lpm_before
+	
+p_mouse_sensor_powerdown_check:
+	fetch 1,mem_mouse_init_sensor_reset_flag
+	rtn blank
+	jam 0,mem_mouse_init_sensor_reset_flag
+	branch p_mouse_sensor_powerdown
+
+
+p_mouse_bb_event_timer:
+ifdef ADC_ENABLE	
+	call p_mouse_adc_read
+	call mouse_low_voltage_led_timer
+endif
+	call p_mouse_wheel_trigger_timer
+	call p_mouse_null_enter_hibernate_check
+	call p_mouse_bt_discovery_check
+	call mouse_check_discovery_timeout_timer
+ifdef BLE	
+	call mouse_check_direct_timeout_timer
+	call p_mouse_le_enable_att_list_timer
+	call p_le_send_smp_security_request_timer
+endif
+ifdef CLASSIC_BT
+	call p_mouse_send_switch_req_timer
+	call mouse_check_hid_handshake_timer
+	call p_mouse_bt_check_sniff_req_timeout_timer
+endif
+	branch mouse_check_no_data_timeout_timer
+
+ifdef CLASSIC_BT
+p_mouse_send_switch_req_timer:
+	arg mem_mouse_send_switch_req_timer,regc
+	arg host_create_conn_resend,regb
+	branch timer_single_step
+
+p_mouse_bt_check_sniff_req_timeout_timer:
+	arg mem_mouse_bt_send_first_package_timer,regc
+	arg p_mouse_bt_send_first_package,regb
+	branch timer_single_step
+p_mouse_bt_send_first_package:
+	jam 1,mem_mouse_bt_send_first_package_flag
+	rtn
+endif
+
+
+ifdef BLE
+p_mouse_le_enable_att_list_timer:
+	arg mem_le_start_encrypt_timer,regc
+	arg mouse_le_write_enable,regb
+	branch timer_single_step
+
+p_le_send_smp_security_request_timer:
+	arg mem_mouse_send_secutiry_request_timer,regc
+	arg p_le_pairing_sm_start_check,regb
+	branch timer_single_step
+
+p_le_pairing_sm_start_check:
+	fetch 1,mem_le_send_security_request_flag
+	nrtn blank
+	branch le_pairing_sm_start
+
+endif
+
+p_mouse_wheel_trigger_timer:
+	arg mem_mouse_wheel_trigger_timer,regc
+	arg p_mouse_wheel_trigger_disable,regb
+	branch timer_single_step
+p_mouse_wheel_trigger_disable:
+	jam 0,mem_mouse_wheel_trigger
+	rtn
+
+p_mouse_bt_discovery_check:
+	fetch 1,mem_config_function_enable
+	bbit1 ENABLE_BT_BUTTON,mouse_bt_discovery_by_button
+p_mouse_bt_discovery_commbination_key:
+	call mouse_check_key_gpio
+	beq MOUSE_LMR_BUTTON,p_mouse_bt_discovery_commbination_key_down
+p_mouse_bt_discovery_commbination_key_up:
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_combination_ui_button_count	//combination key timer init 
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_bt_discovey_button_statue
+	arg MOUSE_BT_DISCOVERY_BUTTON_LONG_DOWN_FLAG,queue
+	call mouse_disable_function_flag
+	branch mouse_bt_discovery_button_down_disable
+p_mouse_bt_discovery_commbination_key_down:
+	jam 40,mem_mouse_null_enter_hibernate_timer
+	call p_mouse_bt_discovery_timer
+	branch mouse_bt_discovery_commbination_key_down+1
+
+p_mouse_bt_discovery_timer:
+	arg mem_combination_ui_button_count,regc
+	arg p_mouse_long_button_bt_discovery,regb
+	branch timer_single_step
+	
+p_mouse_long_button_bt_discovery:
+	fetch 2,mem_ui_state_map
+	isolate1 UI_STATE_BLE_ADV,pdata
+	call mouse_stop_le_adv,true		//reconnect adv
+	fetch 2,mem_ui_state_map
+	isolate1 UI_STATE_BT_RECONNECT,pdata
+	call mouse_cancel_reconnect,true
+	arg MOUSE_BT_DISCOVERY_BUTTON_LONG_DOWN_FLAG,queue
+	call mouse_enable_function_flag
+	branch mouse_long_button_bt_discovry
+
+p_mouse_null_enter_hibernate_check:
+	fetch 1,mem_mouse_null_enter_hibernate_flag
+	rtn blank
+	fetch 1,mem_mouse_null_enter_hibernate_timer
+	branch p_mouse_null_enter_hibernate,blank
+	increase -1,pdata
+	store 1,mem_mouse_null_enter_hibernate_timer
+	rtn
+p_mouse_null_enter_hibernate:
+	jam 0,mem_mouse_null_enter_hibernate_flag
+	branch app_enter_hibernate
+p_mouse_null_enter_hibernate_count:	//ble never connected
+	jam 1,mem_mouse_null_enter_hibernate_flag
+	jam 40,mem_mouse_null_enter_hibernate_timer	//lmr 3s
+	rtn	
+
+	
+ifdef ADC_ENABLE
+p_mouse_adc_read:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_ADC
+	fetch 1,mem_adc_read_timer
+	increase 1,pdata
+	store 1,mem_adc_read_timer
+	sub pdata,10,null              //1s read adc
+	rtn positive
+	jam 0,mem_adc_read_timer
+	call p_adc_set_mode
+	call vdd_calculate_by_mode
+	store 2,mem_mouse_vdd_now_vol
+	arg mem_mouse_vdd_calculate_set,rega
+	call p_adc_bat_percent_lowpower_out
+	fetch 1,mem_adc_power_flag
+	bbit1 1,app_enter_hibernate
+	bbit0 0,p_mouse_adc_no_low_voltage
+	jam 1,mem_mouse_adc_last_low_voltage_flag
+	branch mouse_adc_low_voltage
+p_mouse_adc_no_low_voltage:
+	call mouse_adc_no_low_voltage
+	fetch 1,mem_mouse_adc_last_low_voltage_flag
+	rtn blank
+	jam 0,mem_mouse_adc_last_low_voltage_flag
+	fetch 1,mem_config_low_voltage_alarm_gpio
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_off
+	
+p_adc_set_mode:
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_GPIO,p_adc_check_gpio
+	branch adc_set_mode+1
+p_adc_check_gpio:
+	hfetch 1,core_gpio_pu0	//gpio5 pull up disable
+	set0 5,pdata
+	hstore 1,core_gpio_pu0
+	call adc_check_gpio
+	hfetch 1,core_gpio_pu0	//gpio5 pull up enable
+	set1 5,pdata
+	hstore 1,core_gpio_pu0
+	rtn
+
+p_adc_bat_percent_lowpower_out:
+	ifetch 8,rega
+	store 8,mem_pdatatemp
+	fetcht 2,mem_pdatatemp+2	//shutdown voltage 0.9v
+	fetch 2,mem_pdatatemp+6		//now voltage
+	isub temp,null
+	nbranch adc_set_no_power_flag,positive
+	fetcht 2,mem_pdatatemp+4	//low voltage 1.0v
+	isub temp,null
+	nbranch adc_set_low_power_flag,positive
+p_adc_clear_low_power_flag:
+	fetch 1,mem_adc_power_flag
+	set0 0,pdata
+	store 1,mem_adc_power_flag
+	rtn	
+endif
+
+p_mouse_seting_dpi:
+	call mosue_dpi_led_blink_init
+p_mouse_seting_dpi_diff:
+	fetch 1,mem_config_sensor_type
+	beq P3065_XY,p_mouse_seting_3065XY_dpi
+	branch mouse_seting_dpi+3
+	
+p_mouse_seting_3065XY_dpi:
+	fetch 1,mem_mouse_dpi
+	call p_mouse_3065xy_dpi_recount,blank
+	fetch 1,mem_mouse_dpi
+	beq MOUSE_DPI_LEVEL2,mouse_set_cpi1
+	//beq MOUSE_DPI_LEVEL3,mouse_set_cpi3
+	beq MOUSE_DPI_LEVEL4,mouse_set_cpi4
+	branch mouse_set_cpi3
+p_mouse_3065xy_dpi_recount:
+	jam 1,mem_mouse_dpi
+	rtn
+
+p_mouse_motion:
+	disable user
+	setarg 0
+	store 6,mem_mouse_x
+	call mouse_cheak_sensor_data
+	call mouse_zwheel
+	call mouse_t_zwheel
+	call mouse_key
+ifdef MOUSE_SMOOTHER	
+	nbranch p_drawing_optima_init,user
+	call p_drawing_optima
+else
+	nrtn user
+endif
+	branch mouse_motion+9
+
+p_mouse_bb_event_discovery_btn:
+	jam 0,mem_mouse_null_enter_hibernate_flag
+	jam 0,mem_mouse_null_enter_hibernate_timer
+ifdef G24	
+	isolate1 mark_24g,mark
+	call p_g24_check_51cmd_stop_24g,true
+endif
+	branch mouse_bb_event_discovery_btn+1
+
+ifdef BLE
+p_le_addr_random_config:
+	call load_adc_init
+	fetch 2,mem_0_5_adc_io_data	//adc data from otp
+	branch p_le_otp_adc_empty,blank
+	store 2,mem_random_addr_increase_count
+p_le_addr_random_store:
+	branch p_mouse_store_eerpom_random_addr_increase_count
+p_le_otp_adc_empty:
+	setarg 0x1122
+	store 2,mem_random_addr_increase_count
+	branch p_le_addr_random_store
+
+p_mouse_store_eerpom_random_addr_increase_count:
+	arg 2,temp
+	arg mem_random_addr_increase_count,rega
+	arg MOUSE_RANDOM_ADDR_COUNT_EEPROM_OFFSET,regb
+	branch iicd_write_protect_eep_data
+p_mouse_load_eeprom_random_addr_increase_count:
+	arg 2,temp
+	arg mem_random_addr_increase_count,rega
+	arg MOUSE_RANDOM_ADDR_COUNT_EEPROM_OFFSET,regb
+	branch iicd_read_eep_data
+
+endif
+
+p_mouse_start_discovery:
+	call p_mouse_tx_power_init
+	jam 0,mem_mouse_clear_sensor_data_flag
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_ADV,p_mouse_start_discovery_norandom
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_BLE_RANDOM_ADDRE,p_mouse_start_discovery_norandom
+ifdef BLE
+	call p_mouse_load_eeprom_random_addr_increase_count
+	fetcht 2,mem_random_addr_increase_count
+	increase 1,temp
+	storet 2,mem_random_addr_increase_count
+	storet 2,mem_le_lap+1
+	call p_mouse_store_eerpom_random_addr_increase_count
+	random pdata
+	store 1,mem_le_lap
+endif
+p_mouse_start_discovery_norandom:
+	call app_lpm_mult_disable
+	fetch 2,mem_discovery_timeout
+	store 2,mem_mouse_discovery_timer
+	jam 6,mem_connection_options
+	setarg 0
+	store 2,mem_mouse_no_data_timer
+	store 2,mem_mouse_direct_timer
+	arg MOUSE_STORE_EEPROM_FLAG,queue
+	call mouse_enable_function_flag
+	call mouse_bt_discovery_button_down_disable
+ifdef BLE	
+	fetch 1,mem_device_option
+	isolate1 MODE_4_MOUSE,pdata
+	call p_check_51cmd_adv,true
+endif	
+	branch mouse_start_discovery_norandom+13
+
+ifdef BLE
+p_check_51cmd_adv:
+	jam 0,mem_mouse_le_reconnect_flag
+	call p_le_check_adv_flag
+	setarg ADV_FLAG_BREDR_NOT_SUPPORTED |ADV_FLAG_LIMITED_DISCOVERABLE
+	istore 1,contr
+
+	arg mem_le_adv_swift_pair,contr
+	call p_le_adv_data_update
+	
+	branch check_51cmd_adv
+
+p_le_adv_data_update:
+	arg mem_le_adv_data+11,contw
+	arg 19,loopcnt
+	call memcpy
+	branch le_modified_name_adv
+endif	
+
+p_mouse_stop_discovery:
+	setarg 0
+	store 2,mem_mouse_discovery_timer
+	call p_mouse_sensor_poweron		//clear sensor data,confirm the motion pin high
+	branch mouse_stop_discovery+1
+
+ifdef BLE
+p_le_slave_match:
+	fetch 1,mem_le_md_count
+	pincrease 1
+	store 1,mem_le_md_count
+	beq LE_MD_MAX_COUNT,le_slave_cont
+	call le_acknowledge
+	call le_prepare_tx
+	call power_ctrl_start
+	branch le_slave_match+7
+
+p_le_next_adv_channel:
+	fetch 1,mem_le_ch_mapped
+	increase 1,pdata
+	store 1,mem_le_ch_mapped
+	rtnne 40
+	jam 37,mem_le_ch_mapped
+	rtn
+
+p_le_receive_skip:
+	call save_rssi
+	call p_rssi_signal
+	branch le_receive_skip+2
+
+p_le_update_param:
+	call p_mouse_le_conn_param_check
+	branch le_update_param+8
+p_mouse_le_lpm_mult_reinit:
+	fetch 1,mem_lpm_mult_init
+	store 1,mem_lpm_mult
+p_mouse_le_conn_param_lpm_enable:
+	jam LE_LPM_ENABLE,mem_mouse_le_conn_param_reject
+	rtn
+
+p_mouse_le_conn_param_check:
+	fetch 1,mem_le_new_conninterval
+	sub pdata,LE_INTERVAL_15MS,null
+	nbranch p_mouse_le_conn_param_lpm_disable,positive
+	fetch 1,mem_le_new_connslavelatency
+	fetcht 1,mem_lpm_mult_init
+	isub temp,null
+	branch p_mouse_le_lpm_mult_reinit,positive
+	fetch 1,mem_le_new_connslavelatency
+	store 1,mem_lpm_mult
+	branch p_mouse_le_conn_param_lpm_enable
+
+p_le_update_channel_map:
+	fetch 1,mem_le_state
+	rtnbit0 lestate_update_map
+	call p_le_channel_map_overflow_check
+	nrtn user
+	branch le_update_channel_map+3
+p_le_channel_map_overflow_check:
+	enable user
+	fetch 1,mem_le_event_count+1
+	rshift4 pdata,pdata
+	rtnne 0x0f
+	fetch 1,mem_le_instant+1
+	rshift4 pdata,pdata
+	rtnne 0x00
+	branch disable_user
+
+p_le_prepare_tx:
+	fetch 1,mem_le_arq
+	bbit1 wak,p_le_prepare_tx_wak
+	call power_ctrl_pac_succ_incrs	
+	fetch 1,mem_empty_count
+	nbranch p_le_send_empyt,blank
+	fetch 1,mem_le_state 
+	bbit0 lestate_encryption,p_le_tx_4
+	fetch 1,mem_le_rxbuf+1  
+	branch p_le_tx_4,blank  
+	branch le_send_empty      // send empty data when got non empty packet
+p_le_send_empyt:
+	fetch 1,mem_empty_count
+	increase -1,pdata
+	store 1,mem_empty_count
+	branch le_send_empty
+p_le_tx_4:	
+	fetch 1,mem_le_pairing_state
+	bne FLAG_LE_PAIRING_AFTER_AUTH,p_in_le_tx_4
+	jam 3,mem_empty_count
+p_in_le_tx_4:
+	call le_fifo_check_nearly_full
+	call p_mouse_data_pull,blank
+	branch le_prepare_tx+4
+
+p_le_prepare_tx_wak:
+	call p_le_check_tx_retransmit_setmd
+	branch p_le_power_ctrl_pac_succ_decrs
+
+p_le_check_tx_retransmit_setmd:
+	fetch 1,mem_le_connect_status_flag
+	and pdata,0x03,pdata
+	rtnne 0x03
+	fetch 1,mem_mouse_data_queue_num
+	rtn blank
+	fetch 1,mem_le_txlen
+	rtn blank
+	fetch 1,mem_le_txheader
+	set1 md,pdata
+	store 1,mem_le_txheader
+	call le_set_md
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	setarg MISC_LE_RETRANSMIT_MD
+	store 2,mem_debuglog_dataval
+	call debuglog_push	
+endif
+endif
+	rtn
+
+	
+	
+p_le_power_ctrl_pac_succ_decrs:
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	setarg MISC_LE_RETRANSMIT
+	store 2,mem_debuglog_dataval
+	call debuglog_push	
+endif
+endif
+	branch power_ctrl_pac_succ_decrs
+
+p_mouse_le_reconn_write_enable_timer_reinit:
+	fetch 1,mem_mouse_le_reconnect_flag
+	rtn blank
+	fetch 1,mem_le_connect_status_flag
+	and pdata,0x03,pdata
+	rtneq 0x03
+	jam 10,mem_le_start_encrypt_timer
+	rtn
+
+p_le_parse:
+	rtnmark1 mark_old_packet
+	call le_fifo_check_full
+	nrtn blank
+	fetch 1,mem_le_rxbuf
+	and pdata,0x3,pdata
+	store 1,mem_le_packet_llid
+	ifetch 1,contr
+	and pdata,0x1f,pdata
+	store 1,mem_le_packet_size
+	rtn blank							//empty rtn
+	copy contr,pdata
+	store 2,mem_le_payload_ptr
+	fetch 1,mem_le_packet_llid
+	beq LLID_LE_LL,p_le_parse_ll
+	branch le_parse_l2cap
+p_le_parse_ll:
+	fetch 1,mem_le_rxbuf+2
+	beq LL_CHANNEL_MAP_REQ,p_le_parse_channel_map_req
+	branch le_parse_ll+1
+p_le_parse_channel_map_req:
+	ifetch 5,contr
+	store 5,mem_le_new_map
+	ifetch 2,contr
+	store 2,mem_le_instant
+	branch le_parse_channel_map_req+7	
+	
+p_le_parse_l2cap:
+	ifetch 2,contr
+	beq LE_L2CAP_CID_ATT,p_le_parse_att
+	beq LE_L2CAP_CID_SMP,p_le_parse_smp
+	branch le_parse_l2cap+11
+p_le_parse_att:
+	call store_contr
+	call p_mouse_le_reconn_write_enable_timer_reinit
+	call get_contr
+	ifetch 3,contr
+	store 3,mem_le_att_opcode
+	beq ATTOP_READ_BY_GROUP_TYPE_REQUEST,p_le_parse_att_read_by_group_type_request
+	rshift8 pdata,temp
+	sub temp,0x24,null
+	branch le_parse_att+2,positive
+	arg mem_mouse_le_uuid_sup,temp
+	storet 2,mem_ui_le_uuid_table
+	call le_parse_att+2
+	setarg 0x8e7a
+	store 2,mem_ui_le_uuid_table
+	rtn
+
+p_le_parse_att_read_by_group_type_request:
+	call le_parse_att_read_by_group_type_request
+	call le_fifo_get_last_tx_ptr
+	increase 7,contr
+	ifetch 1,contr
+	rtnne ATTOP_READ_BY_GROUP_TYPE_RESPONSE
+	increase 5,contr
+	ifetch 2,contr
+	arg UUID_SERVICE_HIDS,temp
+	isub temp,null
+	nrtn zero
+	increase -4,contr
+	setarg 0x2b
+	istore 2,contr
+	rtn
+
+p_le_parse_smp:
+	ifetch 1,contr
+	beq SMP_PAIRING_REQUEST,p_le_parse_smp_pairing_request
+	beq SMP_PAIRING_FAILED,p_le_parse_smp_pairing_failed
+	branch le_parse_smp+2
+	
+p_le_parse_smp_pairing_request:
+	jam 1,mem_le_send_security_request_flag
+	branch le_parse_smp_pairing_request
+
+p_le_parse_smp_pairing_failed:
+	call le_parse_smp_pairing_failed
+	fetch 1,mem_le_state	//disable update conn param
+	set0 lestate_update_param,pdata
+	store 1,mem_le_state
+	branch le_parse_terminate_ind
+
+p_le_adv_not_match:
+	fetch 1,mem_le_ch_mapped
+	bne 39,le_adv_loop
+	call p_le_adv_random_delay
+	arg le_adv_interval_timer,queue
+	fetch 2,mem_le_adv_interval
+	branch timer_init
+p_le_adv_random_delay:
+	random pdata
+	arg 0x1ff,temp
+	iand temp,pdata
+	add pdata,250,pdata
+	branch delay
+
+p_le_lpm_setmult:
+	disable wake
+	branch p_le_lpm_set_mult_attempt,attempt
+	nbranch le_lpm_lost,match
+p_le_lpm_set_mult_attempt:
+	call lpm_match
+	fetch 2,mem_rx_window_sniff
+	store 2,mem_le_receive_window
+	fetch 1,mem_le_connect_status_flag
+	compare 3,pdata,3
+	nbranch lpm_mult_short,true
+	branch le_lpm_set_mult_attempt+3
+
+p_le_mouse_bb_event_connect_complete:
+	fetch 1,mem_mouse_le_reconnect_flag
+	nrtn blank
+	fetch 1,mem_le_att_handle
+	sub pdata,26,pdata
+	nrtn zero
+	branch mouse_le_write_enable
+endif
+
+p_twspi_reset:
+	hfetch 1,core_gpio_out3
+	and_into 0xfd,pdata
+	hstore 1,core_gpio_out3
+	hfetcht 1,core_gpio_oe3
+	or_into 0x2,temp
+	hstoret 1,core_gpio_oe3
+	call twspi_disable
+	and_into 0xfd,temp
+	nop 13
+	call twspi_enable
+	hstoret 1,core_gpio_oe3
+	rtn
+
+p_check_51cmd_once_continue:
+	call lmo_fifo_check
+	nbranch check_51cmd_restore,blank  //process this cmd next time while lmo fifo is full
+	fetch 1,mem_fifo_temp
+	bmark0 mark_context,check_51cmd_check_idle
+	beq BT_CMD_LE_UPDATE_CONN,p_check_51cmd_ble_update_connect_param
+	branch check_51cmd_once_continue+2
+
+p_check_51cmd_ble_update_connect_param:
+	call le_fifo_check_full
+	nrtn blank
+	branch le_l2cap_tx_update_req
+
+ifdef CLASSIC_BT
+p_page_wait_fhs_reply_ok:
+ 	fetch 1, mem_page_rcv_fhs
+	increase 1,pdata
+	store 1, mem_page_rcv_fhs
+	call prepare_newconn
+p_master_newconn_loop:
+ 	set1 mark_first_packet,mark
+	call master_newconn_once
+	branch p_newconn_poll_responded,sync
+	set0 mark_first_packet,mark
+	call new_conn_timeout
+	nbranch p_master_newconn_loop,blank
+	branch page_restart	
+
+p_newconn_poll_responded:
+	set0 mark_first_packet,mark
+	branch newconn_poll_responded
+
+p_role_switch_master:
+	call role_switch_check
+	nrtn user
+p_wait_role_switch_anchor:
+	disable user
+	jam param_newconnto,mem_newconnto_counter
+	set0 mark_fhs_already_good,mark
+	set0 mark_role_switch_receive_fhs,mark
+p_roles_waitfhs_loop:
+	call rf_setup_time_master_slot
+	call master_recv_packet
+	bmark1 mark_fhs_already_good,p_roles_replyto_fhs
+	call new_conn_timeout
+	nbranch p_roles_waitfhs_loop,blank
+	bmark1 mark_role_switch_receive_fhs,p_roles_replyto_fhs1
+	branch role_switch_fail_master
+	
+p_roles_replyto_fhs:
+	call rf_setup_time_slave_slot
+	arg type_id,type
+	call master_send_packet
+	set1 mark_role_switch_receive_fhs,mark
+	set0 mark_fhs_already_good,mark
+	force 1,am_addr	/* process_fhs will update am_addr, so slave will not receive fhs succeffully sometimes */
+	jam 2,mem_newconnto_counter
+	branch p_roles_waitfhs_loop
+
+p_roles_replyto_fhs1:
+	fetch 4,mem_clke_bt		//wait for 2 fhs,need 2.5ms
+	pincrease 8
+	store 4,mem_clke_bt
+	branch roles_replyto_fhs+4
+
+p_process_dmh:
+	bmark1 mark_first_packet,end_of_packet
+	branch process_dmh+1
+
+p_prepare_tx:
+	fetch 1,mem_state
+	isolate1 state_inconn,pdata
+	call p_bt_power_ctrl,true
+	branch prepare_tx+1
+p_bt_power_ctrl:
+	fetch 1,mem_arq
+	isolate1 wack,pdata
+	call power_ctrl_pac_succ_decrs,true
+	ncall power_ctrl_pac_succ_incrs,true
+	branch power_ctrl_start
+
+p_slave_conn_recv_packet:
+	call slave_receive_master_slot
+	nbranch shutdown_radio,sync
+	call save_rssi
+	call p_rssi_signal
+	branch slave_conn_recv_packet+4
+
+p_lpm_dispatch:
+	rtnmark1 mark_24g
+	call lpo_calibration
+	fetch 3,mem_clks_per_lpo
+	rtn blank
+	fetch 1,mem_lpm_mode
+	rtn blank
+	fetch 1,mem_ssp_enable
+	branch p_lpm_dispatch_next,blank
+	fetch 1,mem_sp_local_key_invalid	// simple pairing is not ready
+	rtn blank
+p_lpm_dispatch_next:
+	fetch 1,mem_le_sc_calc
+	nrtn blank
+	call lpm_check_wake_lock
+	nrtn blank
+	fetch 1,mem_context
+	compare 3,pdata,0x7							//sco won't sleep 
+	nbranch lpm_dispatch_unconn,true
+	fetch 2,mem_context + coffset_tsniff	//role switch 
+	arg 0xffff,temp
+	isub temp,null
+	rtn zero
+	branch lpm_dispatch_next+9
+
+p_lpm_set_mult:
+	disable wake
+	fetch 1,mem_state
+	rtnbit0 state_insniff
+	nbranch lpm_not_match,match
+	call lpm_match
+	fetch 2,mem_rx_window_sniff
+	store 2,mem_rx_window
+	fetch 1,mem_arq
+	bbit1 wack,lpm_mult_short
+	bmark0 mark_lpm_mult_enable,lpm_mult_short
+	call l2cap_malloc_is_fifo_empty
+	nbranch lpm_mult_short,blank
+	call p_lpm_set_attemp_timeout,blank	//fixed bt3.0 connected high current
+	branch lpm_set_mult+13	
+p_lpm_set_attemp_timeout:
+	jam 1,mem_current_sniff_attempt
+	jam 0,mem_current_sniff_timeout
+	rtn	
+
+p_mouse_bb_disconnected:
+	jam 0,mem_mouse_enter_sniff_count
+ifdef HIGH_REPORT
+	jam CLASSIC_INTERVAL_7_5MS,mem_sniff_param_interval	//115Hz
+else
+	jam 0x0e,mem_sniff_param_interval	//115Hz
+endif
+	call mouse_bb_discon_clear_stack
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	bbit1 APP_DISC_BLE,mouse4_0_event_bb_disconn
+	bbit1 APP_DISC_BY_BUTTON,app_disconn_reason_clear
+	bbit1 APP_DISC_AFTER_PAIRING,p_mouse_event_light_state_pairing
+	bbit1 APP_DISC_AFTER_RECONN,p_mouse_event_light_state_hibernate
+	bbit1 APP_DISC_AFTER_SNIFF,p_mouse_event_light_state_hibernate
+	branch mouse_start_discovery
+	
+p_mouse_event_light_state_pairing:
+	bbit1 APP_DISC_AFTER_HANDSHAKE,p_mouse_event_light_state_hibernate
+	bbit1 APP_DISC_AFTER_SNIFF,p_mouse_event_light_state_hibernate
+	branch mouse_start_discovery
+p_mouse_event_light_state_hibernate:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery
+	call app_disconn_reason_clear
+	call mouse_check_key_gpio
+	beq MOUSE_LMR_BUTTON,p_mouse_null_enter_hibernate_count
+	branch app_bb_hibernate
+
+p_hid_rx_process:
+	fetch 2,mem_l2cap_payload_ptr
+	copy pdata,contr
+	ifetch 1,contr
+	store 1,mem_l2cap_rcv
+	and pdata,0x0f,temp
+	rshift4 pdata,pdata //hidtype
+	beq hid_type_set_protocol,p_hid_rx_set_protocol
+	branch hid_rx_process+6
+p_hid_rx_set_protocol:
+	call hid_rx_process_handshake
+	jam 0,mem_mouse_bt_boot_mode
+	fetch 1,mem_l2cap_rcv
+	isolate1 0,pdata
+	rtn true
+	jam 1,mem_mouse_bt_boot_mode	//boot mode
+	rtn
+
+p_parse_lmp_accepted:
+	fetch 1,mem_rxbuf+1
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_SWITCH_REQ,p_parse_lmp_accepted_switch
+	branch parse_lmp_accepted+3
+p_parse_lmp_accepted_switch:
+	call parse_lmp_accepted_switch
+	jam 1,mem_bt_rcvd_switch_req_accept
+	fetch 1,mem_bt_send_lmp_setup_complete
+	rtn blank
+	jam 2,mem_bt_send_lmp_setup_complete
+	rtn
+
+
+p_send_lmp:
+	disable user
+	call lmo_fifo_process
+
+ifdef DEBUGLOG
+ifdef DEBUGLOG_SEND_LMP
+	setarg DEBUGLOG_DTYPE_SEND_LMP
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_lmi_opcode
+	store 1,mem_debuglog_dataval+1
+	fetch 1,mem_lmp_to_send
+	store 1,mem_debuglog_dataval
+	fetch 1,mem_lmp_to_send
+	store 2,mem_debuglog_dataval
+	ncall debuglog_push,blank
+endif
+endif
+	
+	fetch 1,mem_lmp_to_send
+	rtn blank
+	bbit1 7,p_send_lmp_escape
+	beq LMP_ACCEPTED,p_send_lmp_accepted
+	beq LMP_SETUP_COMPLETE,p_send_lmp_setup_complete
+	beq LMP_SNIFF_REQ, p_send_lmp_sniff_req
+	branch send_lmp0
+p_send_lmp_escape:
+	beq LMP_EXT_FEATURES_RES,p_send_lmpext_features_res
+	beq LMP_EXT_FEATURES_REQ,p_send_lmpext_features_req	
+	branch send_lmp_escape
+p_send_lmpext_features_res:
+	call p_check_ssp_enable
+	fetch 1,mem_lmp_to_send
+	branch send_lmpext_features_res
+p_send_lmpext_features_req:
+	call p_check_ssp_enable
+	fetch 1,mem_lmp_to_send
+	branch send_lmpext_features_req
+p_check_ssp_enable:
+	fetch 1,mem_ssp_enable 
+	branch ssp_disable,blank
+	branch ssp_enable
+
+p_send_lmp_setup_complete:
+	jam 1,mem_bt_send_lmp_setup_complete
+	branch send_lmp_setup_complete
+
+p_send_lmp_sniff_req:
+	jam 4,mem_mouse_bt_send_first_package_timer
+	branch send_lmp_sniff_req
+	
+
+p_send_lmp_accepted:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_lmi_opcode
+	istore 1,contw
+	store 1,mem_lmi_opcode_temp
+	call send_lmp_follow
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_lmi_opcode_temp
+	store 1,mem_debuglog_dataval
+	call debuglog_push	
+endif
+endif
+	fetch 1,mem_lmi_opcode_temp
+	beq LMP_MAX_SLOT_REQ,p_send_lmp_accepted_max_slot_req	//sumsung a5100 patch
+	branch send_lmp_accepted+7
+
+
+p_send_lmp_accepted_max_slot_req:
+	fetch 1,mem_bt_rcvd_switch_req_accept
+	rtn blank
+	jam 0,mem_bt_rcvd_switch_req_accept
+	fetch 1,mem_bt_send_lmp_setup_complete
+	rtnne 2
+	jam 1,mem_bt_send_max_slot_req_accept_after_switch
+	copy clkn_bt,pdata
+	store 4,mem_aurand_send_delay_time
+	rtn
+
+p_process_conn_sm:
+	call lmo_fifo_check
+	nrtn blank
+p_process_conn_sm_continue:
+	fetch 1,mem_conn_sm
+	rtn blank
+ifdef DEBUGLOG
+ifdef DEBUGLOG_CONN_SM
+	call pdata_push
+	setarg DEBUGLOG_DTYPE_CONN_SM
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_conn_sm
+	store 2,mem_debuglog_dataval
+	call pdata_pull
+	call debuglog_push	
+endif
+endif
+	beq CONN_SM_SEND_CONN_REQ, p_host_create_conn_send_conn_req
+	beq CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION,p_host_creat_conn_wait_switch
+	branch process_conn_sm_continue+2
+
+
+p_host_creat_conn_wait_switch:
+	fetch 1,mem_switch_flag
+	rtneq SWITCH_FLAG_INIT
+	beq SWITCH_FLAG_ACCEPT,p_host_create_conn_switch_accept
+	branch host_creat_conn_wait_switch+3
+p_host_create_conn_switch_accept:
+	rtn master
+p_host_create_conn_auth_pair:
+	/* checking whether or not to do m/s switch */
+	fetch 1,mem_connection_options
+	bbit1 CONNECTION_AUTH,p_host_create_conn_auth_pair_true
+	branch host_create_conn_auth_pair+1
+p_host_create_conn_auth_pair_true:
+	fetch 1,mem_bt_send_lmp_setup_complete
+	beq 1,host_create_conn_auth_pair_true
+	//sumsung a5100 patch
+	fetch 1,mem_link_key_exists
+	branch host_create_conn_auth_pair_nokey,blank
+	fetch 1,mem_lmp_conn_state
+	rtnbit0 SENT_SETUP_COMPLETE
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	fetch 1,mem_bt_send_max_slot_req_accept_after_switch
+	rtn blank
+	jam 0,mem_bt_send_max_slot_req_accept_after_switch	
+	fetch 4,mem_aurand_send_delay_time
+	arg 20,temp
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nbranch p_bt_send_max_slot_req_accept_after_switch_wait,positive
+	branch host_create_conn_auth
+
+p_bt_send_max_slot_req_accept_after_switch_wait:
+	jam 1,mem_bt_send_max_slot_req_accept_after_switch
+	rtn
+
+p_host_create_conn_send_conn_req:
+	jam 20,mem_mouse_send_switch_req_timer
+	branch host_create_conn_send_conn_req
+
+	
+ifdef DEBUGLOG
+p_parse_lmp_opcode:
+ifdef DEBUGLOG
+ifdef DEBUGLOG_PARSE_LMP
+	setarg DEBUGLOG_DTYPE_PARSE_LMP
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_rxbuf+1
+	store 1,mem_debuglog_dataval+1 
+	fetch 1,mem_lmi_opcode2
+	store 1,mem_debuglog_dataval
+	fetch 1,mem_lmi_opcode2
+	store 2,mem_debuglog_dataval
+	call debuglog_push 
+endif
+endif
+	branch parse_lmp+21
+
+p_process_upper_sm_reconn:
+	fetch 1,mem_upper_sm_reconn
+	rtn blank
+ifdef DEBUGLOG
+ifdef DEBUGLOG_UPPER_SM
+	call pdata_push
+	setarg DEBUGLOG_DTYPE_UPPER_SM
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_upper_sm_reconn
+	store 2,mem_debuglog_dataval
+	call pdata_pull
+	call debuglog_push	
+endif
+endif
+	branch process_upper_sm_reconn+3
+
+endif	
+
+endif
+	
+ifdef DEBUGLOG
+p_ui_ipc_send_event:
+ifdef DEBUGLOG
+ifdef DEBUGLOG_EVENT
+	call pdata_push
+	setarg DEBUGLOG_DTYPE_EVENT
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_fifo_temp
+	store 2,mem_debuglog_dataval
+	call pdata_pull
+	call debuglog_push	
+endif
+endif
+	branch ui_ipc_send_event+1
+
+p_ui_ipc_send_cmd:
+ifdef DEBUGLOG
+ifdef DEBUGLOG_CMD
+	call pdata_push
+	setarg DEBUGLOG_DTYPE_CMD
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_fifo_temp
+	store 2,mem_debuglog_dataval
+	call pdata_pull
+	call debuglog_push
+endif
+endif
+	branch ui_ipc_send_cmd+1
+endif
+
+power_ctrl_pac_succ_cnt_init:
+	jam 1,mem_power_ctrl_level
+	jam 0,mem_power_ctrl_pac_succ_cnt
+	rtn
+power_ctrl_pac_succ_incrs:
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	increase 1,pdata
+	store 1,mem_power_ctrl_pac_succ_cnt
+	rtn
+power_ctrl_pac_succ_decrs:
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	sub pdata,2,null
+	ncall power_ctrl_pac_succ_cnt_reinit,positive
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	rtneq 0
+	increase -1,pdata
+	store 1,mem_power_ctrl_pac_succ_cnt
+	rtn
+power_ctrl_pac_succ_cnt_reinit:
+	jam 3,mem_power_ctrl_pac_succ_cnt
+	rtn
+
+power_ctrl_start:
+ifdef MS_ALL_POWER
+	rtn
+endif
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_ADV
+	rtnbit1 UI_STATE_BT_RECONNECT
+	rtnbit1 UI_STATE_BT_DISCOVERY
+	
+	arg mem_rssi_signal_buf,rega
+	call p_rssi_average
+	storet 1,mem_rssi_avg_received
+
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	store 1,mem_debuglog_dataval
+	fetch 1,mem_rssi_avg_received
+	store 1,mem_debuglog_dataval+1
+	call debuglog_push	
+endif
+endif
+	setarg RSSI_DIS_MAX_24G
+	bmark1 mark_24g,power_ctrl_start_next
+	setarg RSSI_DIS_MAX_BLE
+power_ctrl_start_next:	
+	isub temp,null
+	nbranch power_ctrl_txpower_incrs_force,positive
+
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	sub pdata,2,null
+	nbranch power_ctrl_txpower_decrs_check,positive
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	beq 0,power_ctrl_txpower_incrs
+	rtn
+
+power_ctrl_txpower_decrs_check:
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	rtnne 32
+	jam 0,mem_power_ctrl_pac_succ_cnt
+power_ctrl_txpower_decrs:
+	fetcht 1,mem_rssi_avg_received
+	setarg RSSI_DIS_MIN_24G
+	bmark1 mark_24g,power_ctrl_txpower_decrs_next
+	setarg RSSI_DIS_MIN_BLE	
+power_ctrl_txpower_decrs_next:	
+	isub temp,null
+	nrtn positive
+	fetch 1,mem_power_ctrl_level
+	beq 0,power_ctrl_decrs_level0
+	increase -1,pdata
+	store 1,mem_power_ctrl_level
+	beq 0,power_ctrl_decrs_level0
+power_ctrl_decrs_level1:
+power_ctrl_incrs_level1:	//0dBm
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	setarg MISC_TXPOWER_1
+	store 2,mem_debuglog_dataval
+	call debuglog_push
+endif
+endif
+	jam TX_POWER_0DB,mem_tx_power
+	rtn
+
+power_ctrl_txpower_incrs_force:
+	jam 0,mem_power_ctrl_pac_succ_cnt
+power_ctrl_txpower_incrs:
+	fetch 1,mem_power_ctrl_level
+	beq 2,power_ctrl_incrs_level2
+	increase 1,pdata
+	store 1,mem_power_ctrl_level
+	beq 1,power_ctrl_incrs_level1
+power_ctrl_incrs_level2:	//+6dBm
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	setarg MISC_TXPOWER_2
+	store 2,mem_debuglog_dataval
+	call debuglog_push
+endif
+endif
+
+	jam TX_POWER_5DB,mem_tx_power
+	rtn
+	
+power_ctrl_decrs_level0: //-5dBm
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	setarg MISC_TXPOWER_0
+	store 2,mem_debuglog_dataval
+	call debuglog_push
+endif
+endif
+	jam TX_POWER_f5DB,mem_tx_power
+	rtn
+
+endif
+
+p_set_freq_tx:
+	storet 1,mem_last_freq
+	add temp,0,rega			/* index to frequency */
+	call rf_write_freq
+	setarg param_pll_setup	//128us
+	call sleep
+p_rf_tx_enable:
+	jam 0x1,rfen_adc
+	jam 0x3c,rfen_rx
+	jam 0xe0,rfen_tx
+	nop 10 /* wait LDOs to turn ON*/
+	jam 0x01, rfen_mdm
+	jam 0x3d, rfen_mdm
+	nop 10 /* wait tx blocks to turn ON*/
+	jam 0xb7,rfen_sn
+	nop 10 /* wait tx lo buffer to turn ON*/
+	jam 0x7d, rfen_mdm
+	fetch 1,mem_tx_power
+//	beq TX_POWER_0DB,p_set_tx_power_0db
+//	beq TX_POWER_3DB,p_set_tx_power_3db	
+	beq TX_POWER_5DB,p_set_tx_power_5db
+//	beq TX_POWER_f3DB,p_set_tx_power_f3db	
+	beq TX_POWER_f5DB,p_set_tx_power_f5db
+	beq TX_POWER_PAIR,p_set_tx_power_pair
+//	branch p_set_tx_power_0db
+p_set_tx_power_0db:
+	call p_rx_low_sens
+//	jam 0xba,0x894b
+	jam 0xd0,0x8955
+	jam 0xe0,0x8956
+//	jam 0x88,0x8957
+	jam 0x6c,0x8958
+//	jam 0x10,0x8959
+	branch set_tx_power_0db	
+
+//p_set_tx_power_3db:
+//	call p_rx_high_sens
+//	jam 0xba,0x894b
+//	jam 0xd0,0x8955
+//	jam 0xe0,0x8956
+//	jam 0x88,0x8957
+//	jam 0x3c,0x8958
+//	jam 0x10,0x8959
+//	branch set_tx_power_3db
+	
+p_set_tx_power_5db:
+	call p_rx_high_sens
+//	jam 0xba,0x894b
+	jam 0xd0,0x8955
+	jam 0xe0,0x8956
+//	jam 0x88,0x8957
+	jam 0x3c,0x8958
+//	jam 0x10,0x8959
+	branch set_tx_power_5db
+
+//p_set_tx_power_f3db:
+//	call p_rx_low_sens
+//	jam 0xba,0x894b
+//	jam 0xd0,0x8955
+//	jam 0xc0,0x8956
+//	jam 0x88,0x8957
+//	jam 0x6c,0x8958
+//	jam 0x10,0x8959
+//	branch set_tx_power_f3db
+	
+p_set_tx_power_f5db:
+	call p_rx_low_sens
+//	jam 0xba,0x894b
+	jam 0xd0,0x8955
+	jam 0xc0,0x8956
+//	jam 0x88,0x8957
+	jam 0x6c,0x8958
+//	jam 0x10,0x8959
+	branch set_tx_power_f5db
+
+p_rx_low_sens:
+	jam 0x5b,0x894c
+	jam 0x96,0x894d
+	jam 0x2c,0x894e 
+	jam 0x46,0x894f
+	rtn
+
+p_rx_high_sens:
+	jam 0xfb,0x894c 
+	jam 0xef,0x894d
+	jam 0xec,0x894e 
+	jam 0x5e,0x894f
+	rtn
+		
+p_set_tx_power_pair:	//50-100cm distance
+//	jam 0xba,0x894b
+ifdef MS_ALL_POWER	
+ 	jam 0xc5,0x8956
+else
+ 	jam 0xc2,0x8956
+endif
+	jam 0xd0,0x8955
+	rtn	
+
+p_shutdown_radio:
+	force 8,radio_ctrl
+	branch shutdown_radio+1
+
+ifdef XTAL_16M
+p_initialize_radio_cont:
+	jam 0xe6,0x8968				//XTAL_SELECT_24M:	0xe4
+	call initialize_radio_cont+1
+	jam clksel_dpll,core_clksel	//XTAL_SELECT_24M:	clksel_rc
+	rtn
+endif
+
+ifdef DEBUGLOG 
+pdata_push:
+	store 8,mem_debuglog_pdata
+	rtn
+
+pdata_pull:
+	fetch 8,mem_debuglog_pdata
+	rtn
+	
+debuglog_init:
+	call pdata_push
+	call debuglog_uart_init
+	call debuglog_mem_init
+	branch pdata_pull
+ 
+debuglog_uart_init:
+	/*step1:SET IO TX:GPIO6	RX:GPIO7*/
+	hfetch 1,core_gpio_sel1
+	set1 2,pdata
+	hstore 1,core_gpio_sel1 //Open UARTGPIO MUX
+	hfetch 4,core_gpio_pu0	 //RX pull up
+	set1 7,pdata
+	hstore 4,core_gpio_pu0
+	
+	/*step2:sel UARTclk bit0	=0:crystal	 =1:48M*/
+	hfetch 1,core_uart_clksel
+	set1 0,pdata
+	hstore 1,core_uart_clksel
+
+	/*step3:Enable uart clk
+	core_clkoff(0x8050)bit15 = 0,Enable uart clk*/
+	hfetch 2,core_clkoff
+	set0 0x0f,pdata
+	hstore 2,core_clkoff
+
+	/*step3:Set Ring Buffer*/
+	setarg mem_module_rx_buf		//RX buf Start Addr
+	hstore 2,core_uart_rsaddr
+
+	setarg mem_module_rx_buf_end	//RX buf End Addr
+	hstore 2,core_uart_readdr
+
+	setarg mem_module_tx_buf		//TX BUF Start Addr
+	hstore 2,core_uart_tsaddr
+
+	setarg mem_module_tx_buf_end	//TX buf End Addr
+	hstore 2,core_uart_teaddr
+	
+	setarg mem_module_rx_buf		//RX buf RPTR
+	hstore 2,core_uart_rrptr
+
+	setarg mem_module_tx_buf		//TX buf WPTR
+	hstore 2,core_uart_twptr
+
+	hstore 2,core_uart_trptrp		//TX buf RPTR
+
+	/*step4:SET baud*/
+	//hstore 2,mem_baud
+	setarg 0x34
+	hstore 2,core_uart_baud
+
+	/*step5:SET DataLen,parity bit,flow control and enable UART
+	RW	0	Enable UART
+	RW	1	1: odd parity; 0: even parity
+	RW	2	UART Data length 1: 9 bits; 0: 8 bits
+	RW	3	1: HCI uart SLIP protocol
+	RW	4	1: enable RTS/CTS flow control
+	RW	5	1: enable 7816 smart card protocol
+	RW	6	1: enable half duplex single line UART
+	RW	7	1: Use baud settings 0:auto detect baud rate*/
+	jam 0x00,core_uart_ctrl
+	jam 0x81,core_uart_ctrl
+	rtn 
+
+debuglog_mem_init:
+	jam DEBUGLOG_HEAD,mem_debuglog_temp
+	jam DEBUGLOG_TYPE,mem_debuglog_type
+	jam DEBUGLOG_LEN ,mem_debuglog_datalen
+	jam DEBUGLOG_TAIL,mem_debuglog_tail
+	rtn	
+
+debuglog_push:
+	call pdata_push
+	hfetch 1,core_uart_status
+	rtnbit1 uart_status_tx_fifo_full
+	call uartd_prepare_tx
+	fetch 8,mem_debuglog_temp
+	istore 8,contwu
+	call uartd_send
+	branch pdata_pull 
+endif
+
+ifdef RF_DEBUG
+test_gpio_init:
+	arg TEST_GPIO,temp
+	call gpio_config_output
+test_gpio_low:
+	arg TEST_GPIO,temp
+	call gpio_out_active
+	nop 10
+	rtn
+test_gpio_high:
+	arg TEST_GPIO,temp
+	call gpio_out_inactive
+	nop 10
+	rtn
+
+test_h_l:
+	call test_gpio_high
+	branch test_gpio_low
+test_h_l_h:
+	call test_gpio_high
+	call test_gpio_low	
+	branch test_gpio_high
+endif
+
+ifdef MOUSE_SMOOTHER
+//notice: need to call p_mouse_drawing_optima_init when waked from mult
+p_drawing_optima_init:
+	arg 5,loopcnt
+	arg mem_mouse_asm_flag,contw
+	branch clear_mem
+
+p_drawing_optima:
+	fetch 4,mem_mouse_x
+	rtn blank
+	call p_data_abs_check
+	setarg 0x06	//asm_flag enable condition
+	call p_data_greater_than_check
+	setarg 0x03	//asm_flag disable condition
+	call p_data_less_than_check
+	fetch 1,mem_mouse_asm_flag
+	beq 1,p_drawing_optima_modify
+	branch p_drawing_optima_init
+
+p_drawing_optima_modify:
+	fetch 2,mem_mouse_x_pre
+	store 2,mem_data_pre
+	fetch 2,mem_mouse_x
+	store 2,mem_data_current
+	call p_drawing_optima_data
+	fetch 2,mem_data_pre
+	store 2,mem_mouse_x_pre
+	fetch 2,mem_data_current
+	store 2,mem_mouse_x
+
+	fetch 2,mem_mouse_y_pre
+	store 2,mem_data_pre
+	fetch 2,mem_mouse_y
+	store 2,mem_data_current
+	call p_drawing_optima_data
+	fetch 2,mem_data_pre
+	store 2,mem_mouse_y_pre
+	fetch 2,mem_data_current
+	store 2,mem_mouse_y
+	rtn
+
+/**********
+input:data_pre,data_current
+output:data_pre,data_current after optima
+***********/
+p_drawing_optima_data:
+	fetch 2,mem_data_pre
+	fetcht 2,mem_data_current
+	iadd temp,pdata
+	store 3,mem_data_sum
+	isolate1 16,pdata
+	branch p_data_sum_overflow,true
+	fetch 1,mem_data_sum+1
+	beq 0xff,p_data_sum_n
+	fetch 1,mem_data_sum
+p_data_store_pre:
+	rshift pdata,pdata
+	store 2,mem_data_pre
+	store 2,mem_data_current
+	rtn
+p_data_sum_overflow:
+	fetch 1,mem_data_sum+1	//sum positive
+	beq 0,p_data_sum_overflow_p
+	fetch 3,mem_data_sum	//鍏ㄨ礋鐩稿姞
+	branch p_data_store_pre
+p_data_sum_overflow_p:
+	jam 0,mem_data_sum+2
+	fetch 1,mem_data_sum
+	branch p_data_store_pre
+
+p_data_sum_n:
+	fetch 1,mem_data_sum	//sum negetive
+	call p_pdata_get_half
+	store 1,mem_data_pre
+	store 1,mem_data_current
+	branch p_data_zero,blank
+	setarg 0xff
+p_data_set_direction:	
+	store 1,mem_data_pre+1
+	store 1,mem_data_current+1
+	rtn
+p_data_zero:
+	setarg 0
+	branch p_data_set_direction
+
+p_pdata_get_half:
+	sub pdata,0,pdata
+	store 1,mem_rega
+	fetch 1,mem_rega
+	rshift pdata,pdata
+	store 1,mem_rega
+	fetch 1,mem_rega
+	sub pdata,0,pdata
+	rtn
+
+//rega mouse_x, regb mouse_y, pdata refer
+p_data_greater_than_check:
+	isub rega,null
+	nbranch p_enable_asm,positive
+	isub regb,null
+	nbranch p_enable_asm,positive
+p_disable_asm:
+	jam 0,mem_mouse_asm_flag
+	rtn
+p_data_less_than_check:
+	isub rega,null
+	nrtn positive
+	isub regb,null
+	nrtn positive
+	branch p_disable_asm
+p_enable_asm:
+	jam 1,mem_mouse_asm_flag
+	rtn
+
+p_data_abs_check:
+	fetch 2,mem_mouse_x
+	store 2,mem_data_current
+	call p_data_abs
+	copy pdata,rega
+	fetch 2,mem_mouse_y
+	store 2,mem_data_current
+	call p_data_abs
+	copy pdata,regb
+	rtn
+
+/***********
+input: data_current
+output:pdata,abs
+************/
+p_data_abs:
+	fetch 1,mem_data_current+1
+	beq 0xff,p_data_reversal
+	fetch 1,mem_data_current
+p_data_abs_store:
+	and_into 0xff,pdata
+	//output:pdata
+	rtn
+p_data_reversal:
+	fetch 2,mem_data_current
+	sub pdata,0,pdata
+	branch p_data_abs_store
+
+endif
+
+ifdef MS_MATRIX
+//1 mem_m_key
+//2 mem_m_x
+//2 mem_m_y
+//1 mem_m_z
+//1 mem_m_tz
+//1 mem_24g_matrix_cnt
+p_g24_matrix_data:
+	fetch 1,mem_24g_matrix_cnt
+	increase 1,pdata
+	store 1,mem_24g_matrix_cnt
+	sub pdata,50,null
+	branch p_ms_x_right,positive
+	sub pdata,100,null
+	branch p_ms_y_up,positive
+	sub pdata,150,null
+	branch p_ms_x_left,positive
+	sub pdata,200,null
+	branch p_ms_y_down,positive
+	rtn
+p_ms_x_right:
+	setarg 0x05
+	store 2,mem_m_x
+	setarg 0
+	store 2,mem_m_y
+	store 1,mem_m_z
+	store 1,mem_m_key
+	store 1,mem_m_tz
+p_data:	
+	enable user
+	arg 7,rega
+	arg mem_m_key,regb
+	rtn
+p_ms_y_up:
+	setarg 0x05
+	store 2,mem_m_y
+	setarg 0
+	store 2,mem_m_x
+	store 1,mem_m_z
+	store 1,mem_m_key
+	store 1,mem_m_tz
+	branch p_data
+p_ms_x_left:
+	setarg 0xfffb
+	store 2,mem_m_x
+	setarg 0
+	store 2,mem_m_y
+	store 1,mem_m_z
+	store 1,mem_m_key
+	store 1,mem_m_tz
+	branch p_data
+p_ms_y_down:
+	fetch 1,mem_24g_matrix_cnt
+	beq 200,p_mem_usb_data_square_cnt_set0
+	setarg 0xfffb
+	store 2,mem_m_y
+	setarg 0
+	store 2,mem_m_x
+	store 1,mem_m_z
+	store 1,mem_m_key
+	store 1,mem_m_tz
+	branch p_data
+p_mem_usb_data_square_cnt_set0:
+	jam 0,mem_24g_matrix_cnt
+	branch p_ms_y_down+2
+endif
+ifdef MEMLOG
+p_hci_log:
+	fetch 1,0x4d00
+	increase 1,pdata
+	sub pdata,50,null
+	branch p_hci_log_calc_ptr,positive
+	setarg 0
+p_hci_log_calc_ptr:
+	store 1,0x4d00
+	arg 8,temp
+	imul32 temp,pdata
+	arg 0x4d08,contw
+	iadd contw,contw
+p_hci_log_write_content:
+	fetch 1,0x4d00
+	istore 1,contw//counter
+	fetch 4,mem_le_supervision_timer
+	istore 4,contw
+	fetch 2,mem_le_superto
+	istore 2,contw	
+	rtn
+endif	
+
+endif
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/peripherals.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/peripherals.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/peripherals.prog	(working copy)
@@ -0,0 +1,2440 @@
+
+/* ===================== two wire SPI gpio ======================= */
+
+twspi_reset:
+	bpatchx patch31_4,mem_patch31
+	hfetch 1,core_gpio_oe3
+	arg 0x06,temp
+	ior temp,pdata
+	hstore 1,core_gpio_oe3
+	hfetch 1,core_gpio_out3
+	ior temp,pdata
+	hstore 1,core_gpio_out3
+	call twspi_disable
+	hfetch 1,core_gpio_out3
+	set0 1,pdata
+	set0 2,pdata
+	hstore 1,core_gpio_out3	
+	nop 30  
+	branch twspi_enable
+
+twspi_reset2:
+	hfetch 1,core_gpio_oe3
+	arg 0xc0,temp
+	ior temp,pdata
+	hstore 1,core_gpio_oe3
+	hfetch 1,core_gpio_out3
+	ior temp,pdata
+	hstore 1,core_gpio_out3
+	call twspi_disable
+	hfetch 1,core_gpio_out3
+	set0 6,pdata
+	set0 7,pdata
+	hstore 1,core_gpio_out3	
+	nop 30  
+	branch twspi_enable2
+
+twspi_disable:
+	hfetch 1,core_gpio_sel1
+	and pdata,0xfc,pdata
+	hstore 1,core_gpio_sel1  //disable spi
+	rtn
+twspi_enable:
+	hfetch 1,core_gpio_sel1
+	or pdata,0x01,pdata
+	hstore 1,core_gpio_sel1  //enable spi
+	rtn
+twspi_enable2:
+	hfetch 1,core_gpio_sel1
+	or pdata,0x03,pdata
+	set0 4,pdata
+	hstore 1,core_gpio_sel1  //enable spi2
+	rtn
+
+// input read reg number: pdata 
+//output reg data: pdata
+sensor_read:
+	copy pdata,regb
+	call spi_ncs_enable
+	nop 100
+	copy regb,pdata
+	call twspi_read
+	copy pdata,regb
+	call spi_ncs_disable
+	nop 100
+	copy regb,pdata
+	rtn
+// input write reg number: pdata 
+sensor_write:
+	copy pdata,regb
+	call spi_ncs_enable
+	nop 100
+	copy regb,pdata
+	call twspi_write
+	call spi_ncs_disable
+	nop 100
+	rtn
+//spi gpio init .
+//0xff :disable spi ncs gpio init
+spi_ncs_gpio_init:
+	fetcht 1,mem_spi_ncs_gpio
+	branch gpio_config_output
+
+//nsc gpio ouput low
+spi_ncs_enable:
+	fetcht 1,mem_spi_ncs_gpio
+	branch gpio_out_active
+
+//ncs gpio output high
+spi_ncs_disable:
+	fetcht 1,mem_spi_ncs_gpio
+	branch gpio_out_inactive
+
+
+twspi_write:
+	branch spid_write_reg
+	
+twspi_read:
+	branch spid_read_reg
+
+
+
+/* ===================== code loading ======================= */
+
+
+read_function_aes:
+	nbranch read_function,user
+	hfetch 1,core_gpio_key2
+	or_into 0x2,pdata   	// enable aes 
+	hstore 1,core_gpio_key2
+read_function:
+	copy temp,null
+	branch read_fuction_zero,zero
+	copy regc,pc
+read_fuction_zero:
+	isolate0 0,null
+	branch set_ucode_status
+	
+/* return temp = block length */
+get_block_header:
+	force 4,temp
+get_block_header0:
+	arg mem_ucode_buf,rega
+	hfetch 1,core_gpio_key2
+	and_into 0xfd,pdata   	// disable aes for header
+	hstore 1,core_gpio_key2
+	call read_function
+	arg 0x55aa,rega
+	fetch 2,mem_ucode_buf
+	ifetcht 2,contr
+	isub rega,null
+	rtn	
+
+read_first_block:
+	arg 2,temp
+	arg mem_ucode_ptr,rega
+	call read_function
+	fetch 2,mem_ucode_ptr
+	store 2,mem_addr_mi
+	call get_iv,user
+	rtn
+	
+get_iv:
+	arg 16,temp
+	arg mem_ucode_keybuf,rega
+	hfetch 1,core_gpio_key2
+	and_into 0xfd,pdata   // disable aes for iv
+	hstore 1,core_gpio_key2
+	call read_function
+	arg mem_ucode_keybuf,contr
+	arg 16,loopcnt
+	call aes_load_data
+	call aes_init
+	call aes_clear_data
+	branch do_aes_cbc					/* generate first IV */
+
+load_storage:
+	disable match
+	call get_block_header
+	nrtn zero
+	enable match
+	jam 0x80, core_ucode_ctrl
+	jam 0,core_ucode_hi
+	jam 0,core_ucode_low
+	arg core_ucode_data,rega
+	call read_function_aes
+	jam 0x0, core_ucode_ctrl
+load_storage_loop:
+	arg 6,temp
+	call get_block_header0
+	nrtn zero
+	ifetch 2,contr
+	iforce rega
+	call read_function
+	branch load_storage_loop
+
+	
+	/* only load memory data from eeprom */
+reload_eeprom:
+	call clean_mem
+	setarg 0x1000
+	store 2,mem_addr_mi
+	arg iicd_read_eep,regc
+	arg 2,loopcnt
+reload_eeprom_loop:
+	call get_block_header
+	nrtn zero
+	fetch 2,mem_addr_mi
+	byteswap pdata,pdata
+	iadd temp,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+	loop reload_eeprom_loop
+	branch load_storage_loop
+	
+loadcode:
+	call clean_mem
+	disable user
+	call otp_enable_chgpump
+	setarg otp_ucode_flag
+	arg mem_otp_ucode_flag,rega
+	arg 2,temp
+	call otpd_read_data
+	fetch 2,mem_otp_ucode_flag
+	bbit0 otp_uflag_aes, loadcode_otp
+	jam 0x25,core_clkoff			// disable debug uart
+	setarg otp_ucode_aeskey
+	arg mem_ucode_keybuf,rega
+	arg 16,temp
+	call otpd_read_data
+	jam lock_otp,core_misc_ctrl	// disable further read/write of key
+	set1 mark_otp_encrypt,mark	
+	arg mem_ucode_keybuf,contr
+	call load_key
+	enable user					// set user for aes
+loadcode_otp:
+	jam 0,mem_loadcode_times
+loadcode_otp_2:
+	call loadcode_check_times
+	fetch 2,mem_otp_ucode_flag
+	byteswap pdata,pdata
+	arg 0x7ff,temp
+	iand temp,pdata
+	branch loadcode_iic, zero
+	call otp_set_addr
+	arg otpd_read_code,regc
+	call get_iv,user
+	call load_storage
+	fetch 1,mem_ucode_status
+	bbit0 0,loadcode_otp_2			// crc error, try again
+	
+loadcode_iic:
+	call otp_disable_chgpump
+	jam 0,mem_loadcode_times
+loadcode_iic_2:	
+	call loadcode_check_times
+	call clear_eeprom_size_2k
+	fetch 1,mem_otp_ucode_flag
+	bbit1 otp_uflag_skip_eep,loadcode_spi
+	call loadcode_iic_by_eeprom
+	nbranch loadcode_iic_eeprom_2k,match
+	fetch 1,mem_ucode_status
+	bbit0 0,loadcode_iic_2			// crc error, try again
+	branch loadcode_hci
+loadcode_iic_eeprom_2k:
+	call set_eeprom_size_2k
+	fetch 1,mem_otp_ucode_flag
+	bbit1 otp_uflag_skip_eep,loadcode_spi
+	call loadcode_iic_by_eeprom
+	nbranch loadcode_spi,match
+	fetch 1,mem_ucode_status
+	bbit0 0,loadcode_iic_2			// crc error, try again
+	branch loadcode_hci
+	
+loadcode_spi:
+	jam 0,mem_loadcode_times
+loadcode_spi_2:
+	call loadcode_check_times
+	fetch 1,mem_otp_ucode_flag
+	bbit1 otp_uflag_skip_flash, loadcode_hci
+	setarg 0x0
+	store 3,mem_addr_hi
+	call spid_init_flash
+	arg spid_load_flash,regc
+	call read_first_block
+	call load_storage
+	nbranch loadcode_hci,match
+	fetch 1,mem_ucode_status
+	bbit0 0,loadcode_spi_2			// crc error, try again
+
+loadcode_hci:
+	bmark1 mark_otp_encrypt,loadcode_hci_enc
+	call clear_key_buf
+loadcode_hci_enc:
+	fetch 1,mem_otp_ucode_flag
+	bbit0 otp_uflag_hci,clear_key_buf
+	jam 0x21,core_clkoff			// enable debug uart
+	call hci_init
+loadcode_hci_loop:
+	call hci_rx_packet
+	branch loadcode_hci_loop
+
+clear_key_buf:
+	setarg 0
+	store 8,mem_ucode_keybuf
+	store 8,mem_ucode_keybuf+8
+	force regidx_key,regext_index
+	call aes_clear
+	jam 0x21,core_clkoff		// enable debug uart
+	rtn
+	
+
+loadcode_iic_by_eeprom:
+	setarg 0x0
+	store 2,mem_addr_mi
+	arg iicd_read_eep,regc
+	call iicd_init_12m
+	call read_first_block
+	branch load_storage
+
+
+loadcode_check_times:
+	fetch 1,mem_loadcode_times
+	increase 1,pdata
+	sub pdata,3,null
+	nbranch loadcode_error,positive
+	store 1,mem_loadcode_times
+	rtn
+
+loadcode_error:
+	call clear_key_buf
+	call ice_break
+	rtn
+
+
+/* true flag is set into status */
+set_ucode_status:
+	fetch 1,mem_ucode_status
+	lshift pdata,pdata
+	setflag true,0,pdata
+	isolate0 15,rega
+	rtn true
+	store 1,mem_ucode_status
+	rtn
+
+	/* queue is bit position of hw done status */
+decrypt_code:
+	hfetch 1,core_gpio_key2
+	rtnbit0 1
+	branch decrypt_code_skip	/* skip to key generation at first for speed */
+decrypt_code_loop:
+	hfetch 1,core_dma_status
+	qisolate1 pdata
+	rtn true
+decrypt_code_skip:
+	hfetch 1,core_misc_status
+	bbit0 1,decrypt_code_loop
+	call do_aes_cbc
+	branch decrypt_code_loop
+
+
+
+load_ucode:
+	fetch 2,mem_patch_ptr
+	rtn blank
+	jam 0x80, core_ucode_ctrl
+	jam 0,core_ucode_hi
+	jam 0,core_ucode_low
+	fetcht 2,mem_patch_len
+	lshift2 temp,loopcnt
+	iforce contr
+load_ucode_loop:
+	ifetch 1,contr
+	hstore 1,core_ucode_data
+	loop load_ucode_loop
+	jam 0x0, core_ucode_ctrl
+	rtn
+
+
+/* ===================== SPI dma ======================= */
+
+spid_init:
+	bpatchx patch31_5,mem_patch31
+	call spid_init_common
+	branch twspi_enable
+
+spid_init2:
+	call spid_init_common
+	call twspi_disable
+	branch twspi_enable2
+	
+spid_init_common:
+	fetch 1,mem_spi_init_clk
+	hstore 1,core_spid_ctrl	// A7530 should at least 34, or write fail
+	fetch 1,mem_spi_init_delay_time
+	hstore 1,core_spid_delay	// 4us delay
+	setarg mem_spid_tbuf
+	hstore 2,core_spid_txaddr
+	setarg mem_spid_rbuf
+	hstore 2,core_spid_rxaddr
+	branch twspi_disable
+	
+spid_reset:
+	hfetch 1,core_spid_ctrl
+	set1 7,pdata
+	hstore 1,core_spid_ctrl
+	set0 7,pdata
+	hstore 1,core_spid_ctrl
+	rtn
+
+
+/* pdata 6:0 is reg address, 15:8 is data to write */
+spid_write_reg:
+	set1 7,pdata
+	store 2,mem_spid_tbuf
+	bpatchx patch31_6,mem_patch31
+	jam 2,core_spid_txlen
+	jam 0,core_spid_rxlen
+	jam spid_start,core_misc_ctrl
+	branch wait_spid_done
+
+/* pdata 6:0 is reg address */
+spid_read_reg:
+	force 1,temp
+/* pdata 6:0 is burst reg address, temp is bytes to read */
+spid_read_regs:
+//	nop 100
+	store 1,mem_spid_tbuf
+	bpatchx patch31_7,mem_patch31
+	jam 1,core_spid_txlen
+	hstoret 2,core_spid_rxlen
+	jam spid_start,core_misc_ctrl
+	call wait_spid_done
+	fetch 1,mem_spid_rbuf
+	rtn
+
+wait_spid_done:
+	fetch 2,mem_afh_error_total
+	increase 1,pdata
+	store 2,mem_afh_error_total
+	hfetch 1,core_dma_status
+	bbit0 spid_done,wait_spid_done
+	rtn
+
+spid_init_flash:
+	jam 0x40,core_spid_ctrl
+	jam 0x0,core_spid_delay
+	hfetch 1,core_gpio_sel1
+	set0 0,pdata
+	set1 1,pdata
+	hstore 1,core_gpio_sel1
+	setarg 0
+	store 4,mem_spid_tbuf
+	rtn
+
+
+spid_unlock_flash:
+	setarg 0
+	hstore 2,core_spid_rxlen
+	setarg 1
+	hstore 2,core_spid_txlen
+	setarg mem_spid_tbuf
+	hstore 2,core_spid_txaddr
+	jam 6,mem_spid_tbuf
+	jam spid_start,core_misc_ctrl
+	branch wait_spid_done
+
+
+/**
+ ******************************************************************************
+ ** \brief  write flash
+ **
+ ** \param [in]  rega: 2byte write ptr    
+ **			pdata:3byte flash address  
+ ** 			temp:2byte write data length
+ **
+ ** \retval user  0: flash buys 1:write flash setting complate
+ **
+ ******************************************************************************/
+
+flash_write:
+	disable user
+	copy pdata,regb
+	fetch 1,mem_spi_write_flash_sm
+	rtnne FLASH_SM_NO_BUYS
+	enable user
+	copy regb,pdata
+	branch flash_write_start
+
+
+flash_write_spi_sm_timer:
+	fetch 1,mem_spi_write_flash_sm 	
+	beq FLASH_SM_START,flash_write_start
+	beq FLASH_SM_ERASE_SECTOR,flash_erase_sector
+	beq FLASH_SM_WAIT_ERASE_SECTOR,flash_wait_erase_sector
+	beq FLASH_SM_WRITE_DATA,flash_write_data
+	beq FLASH_SM_WAIT_WRITE_DATA,flash_wait_write_data
+	rtn
+
+flash_write_start:
+	store 3,mem_spi_write_addr
+	copy rega,pdata
+	store 2,mem_spi_write_ptr
+	storet 2,mem_spi_write_len
+	jam FLASH_SM_ERASE_SECTOR,mem_spi_write_flash_sm
+	branch spid_init_flash
+flash_erase_sector:
+	call spid_init_flash
+	jam FLASH_SM_WAIT_ERASE_SECTOR,mem_spi_write_flash_sm
+	call spid_unlock_flash
+	arg mem_spid_tbuf,rega
+	fetch 3,mem_spi_write_addr
+	jam 4,core_spid_txlen
+	arg FLASH_COMMAND_SECTOR_ERASE,temp
+	branch spid_write_flash_common
+	
+flash_wait_erase_sector:
+	call spid_init_flash
+	call spid_unlock_flash
+	setarg FLASH_READ_SATUS
+	call spid_read_reg
+	rtnbit1 FLASH_STATUS_WIP
+	jam FLASH_SM_WRITE_DATA,mem_spi_write_flash_sm
+	rtn
+flash_write_data:
+	call spid_init_flash
+	jam FLASH_SM_WAIT_WRITE_DATA,mem_spi_write_flash_sm
+	call spid_unlock_flash
+	call flash_data_preserve
+	call spid_write_flash
+	branch flash_data_recover
+flash_wait_write_data:
+	call spid_init_flash
+	call spid_unlock_flash
+	setarg FLASH_READ_SATUS
+	call spid_read_reg
+	rtnbit1 FLASH_STATUS_WIP
+	jam FLASH_SM_NO_BUYS,mem_spi_write_flash_sm
+	fetch 2,mem_cb_spi_flash_write_complate
+	branch callback_func
+flash_data_recover:
+	fetch 4,mem_temp
+	fetcht 2,mem_spi_write_ptr
+	increase -4,temp
+	istore 4,temp
+	rtn
+flash_data_preserve:
+	fetcht 2,mem_spi_write_ptr
+	copy temp,rega
+	increase -4,temp
+	ifetch 4,temp
+	store 4,mem_temp
+	fetcht 2,mem_spi_write_len
+	fetch 3,mem_spi_write_addr
+	rtn
+
+
+/* pdata is flash address, rega pointers to txdata(4 ahead bytes should be left), temp is length */
+spid_write_flash:
+	increase 4,temp
+	hstoret 2,core_spid_txlen
+	arg FLASH_COMMAND_WRITE_DATA,temp
+	increase -4,rega
+spid_write_flash_common:
+
+	istoret 1,rega
+	rshift16 pdata,temp
+	istoret 1,contw
+	rshift8 pdata,temp
+	istoret 1,contw
+	istore 1,contw
+	deposit rega
+	hstore 2,core_spid_txaddr
+	setarg 0
+	hstore 2,core_spid_rxlen
+	jam spid_start,core_misc_ctrl
+	branch wait_spid_done
+
+
+/* temp is length, rega pointers to buf   */
+spid_read_flash:
+	hstoret 2,core_spid_rxlen
+	rshift16 pdata,temp
+	storet 1,mem_addr_hi
+	rshift8 pdata,temp
+	storet 1,mem_addr_mi
+	store 1,mem_addr_lo
+	setarg 4
+	hstore 2,core_spid_txlen
+	jam FLASH_COMMAND_READ_DATA,mem_spid_tbuf
+	setarg mem_spid_tbuf
+	hstore 2,core_spid_txaddr
+	deposit rega
+	hstore 2,core_spid_rxaddr
+	hfetch 1,core_spid_ctrl
+	isolate0 15,rega
+	setflag true,6,pdata
+	hstore 1,core_spid_ctrl
+	jam spid_start,core_misc_ctrl
+spi_read_flash_wait:
+	hfetch 1,core_dma_status
+	bbit1 7,spi_read_flash_wait			// waiting for spid write
+	arg spid_done,queue
+	branch wait_spid_done
+
+
+/* temp is length, rega pointers to buf  */
+spid_load_flash:
+	hstoret 2,core_spid_rxlen
+	setarg 4
+	hstore 2,core_spid_txlen
+	jam 3,mem_spid_tbuf
+	setarg mem_spid_tbuf
+	hstore 2,core_spid_txaddr
+	deposit rega
+	hstore 2,core_spid_rxaddr
+	hfetch 1,core_spid_ctrl
+	isolate0 15,rega
+	setflag true,6,pdata
+	hstore 1,core_spid_ctrl
+	jam spid_start,core_misc_ctrl
+spi_load_flash_wait:
+	hfetch 1,core_dma_status
+	bbit1 7,spi_load_flash_wait			// waiting for spid write
+	arg spid_done,queue
+	call decrypt_code
+	call wait_spid_done
+	isolate1 spid_crcok,pdata
+	call set_ucode_status
+	fetch 1,mem_addr_hi
+	lshift16 pdata,regb
+	fetch 1,mem_addr_mi
+	lshift8 pdata,pdata
+	ior regb,regb
+	fetch 1,mem_addr_lo
+	ior regb,pdata
+	iadd temp,pdata
+	store 1,mem_addr_lo
+	rshift8 pdata,pdata
+	store 1,mem_addr_mi
+	rshift8 pdata,pdata
+	store 1,mem_addr_hi
+	rtn
+
+/*****************************************************************************
+*soft reset chip
+*****************************************************************************/
+soft_reset_chip:
+	jam 1,core_reset
+	rtn
+
+
+
+/* ===================== I2C dma ======================= */
+
+iic_init_390k:	//390khz
+	jam 12,core_iicd_scl_low
+	jam 13,core_iicd_scl_high
+	jam 13,core_iicd_start_setup
+	jam 13,core_iicd_start_hold
+	jam 13,core_iicd_stop_setup
+	jam 12,core_iicd_data_setup
+  	branch iicd_init_gpio	
+
+
+iicd_init_12m:
+	jam 5,core_iicd_scl_low
+ 	jam 7,core_iicd_scl_high
+	jam 7,core_iicd_start_setup
+	jam 7,core_iicd_start_hold
+	jam 7,core_iicd_stop_setup
+	jam 5,core_iicd_data_setup
+iicd_init_gpio:	
+	hfetch 1,core_gpio_pu3
+	or_into 0xc0,pdata
+	hstore 1,core_gpio_pu3
+	hfetch 1,core_gpio_sel1
+	or_into 0x10,pdata
+	hstore 1,core_gpio_sel1
+	rtn
+
+
+
+wait_iicd_done:
+	hfetch 1,core_dma_status
+	bbit0 iicd_done,wait_iicd_done
+	rtn
+
+/*
+pdata is tx length
+rega is points to tx buffer
+regb is points to rx buffer
+temp is rx length
+*/
+iicd_read_data:
+	hstore 2,core_iicd_txlen
+	deposit rega
+	hstore 2,core_iicd_txaddr	
+	deposit regb
+	hstore 2,core_iicd_rxaddr
+	deposit temp	
+	hstore 2,core_iicd_rxlen
+	arg 1,temp
+	nsetflag blank,1,temp
+	hstore 1,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	branch wait_iicd_done
+
+
+set_eeprom_size_2k:
+	set1 mark_eeprom_size,mark
+	jam 0x08,mem_eeprom_block_size
+	rtn
+
+clear_eeprom_size_2k:
+	set0 mark_eeprom_size,mark
+	jam 0x20,mem_eeprom_block_size
+	rtn
+
+
+iicd_read_eep_data_size_2k:
+ 	fetch 1,mem_eeprom_base
+	iadd regb,pdata
+	store 1,mem_addr_mi
+	branch iicd_read_eep_size_2k
+
+iicd_read_eep_size_2k_lcadcode:
+	fetch 2,mem_addr_mi
+	byteswap pdata,pdata
+	store 1,mem_addr_mi
+	
+//length:temp 
+//mem ptr:rega
+//eeprom addr:pdata
+iicd_read_eep_size_2k:
+ 	setarg 3
+	hstore 2,core_iicd_txlen
+	jam 0xa0,mem_iicd_tbuf
+	jam 0xa1,mem_iicd_tbuf+2
+	branch iicd_read_eep_common
+
+
+//length:temp 
+//mem ptr:rega
+//eeprom addr:regb
+iicd_write_protect_eep_data:
+	storet 2,mem_temp
+	call iicd_eeprom_write_enable
+	fetcht 2,mem_temp
+	call iicd_write_eep_data
+	branch iicd_eeprom_write_disable
+	
+iicd_eeprom_write_enable:
+	fetch 1,mem_eeprom_wp_gpio
+	rtneq GPIO_DISABLE
+	bbit0 6,iicd_wp_gpio_output_low
+	setarg 150000
+	call sleep
+iicd_wp_gpio_output_low:
+	fetcht 1,mem_eeprom_wp_gpio
+	branch gpio_out_active
+	
+iicd_eeprom_write_disable:
+	fetcht 1,mem_eeprom_wp_gpio
+	branch gpio_out_inactive
+	
+//length:temp 
+//mem ptr:rega
+//eeprom addr offset:regb
+iicd_read_eep_data:
+	bpatchx patch32_0,mem_patch32
+	bmark1 mark_eeprom_size,iicd_read_eep_data_size_2k
+	fetch 2,mem_eeprom_base
+	iadd regb,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+
+/* rega pointers to buf, temp is length  */
+iicd_read_eep:
+	bpatchx patch32_1,mem_patch32
+	bmark1 mark_eeprom_size,iicd_read_eep_size_2k_lcadcode
+	setarg 4
+	hstore 2,core_iicd_txlen
+	jam 0xa0,mem_iicd_tbuf
+	jam 0xa1,mem_iicd_tbuf+3
+iicd_read_eep_common:	
+	setarg mem_iicd_tbuf
+	hstore 2,core_iicd_txaddr
+	hstoret 2,core_iicd_rxlen
+	deposit rega
+	hstore 2,core_iicd_rxaddr
+	setarg 2
+	isolate0 15,rega
+	setflag true,0,pdata
+	hstore 1,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	arg iicd_done,queue
+	call decrypt_code
+	call wait_iicd_done
+	isolate1 iicd_crcok,pdata
+	call set_ucode_status
+	bmark1 mark_eeprom_size,iicd_read_eep_load_code_size_2k
+	fetch 2,mem_addr_mi
+	byteswap pdata,pdata
+	iadd temp,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+	rtn
+
+iicd_read_eep_load_code_size_2k:
+	fetch 1,mem_addr_mi
+	iadd temp,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+	rtn
+	
+
+//length:temp 
+//mem ptr:rega
+//eeprom addr offset:regb
+iicd_write_eep_data:
+	fetch 2,mem_eeprom_base
+	iadd regb,pdata
+
+//cuur ptr:pdata length:temp buf:rega
+iicd_write_ota_data:
+	store 2,mem_pdatatemp //curr ptr
+	bpatchx patch32_2,mem_patch32
+	storet 2,mem_temp	//len
+	copy rega,pdata
+	store 2,mem_contr
+iicd_write_eep_loop:
+	call iicd_eep_transparency
+
+	fetcht 2,mem_regb
+	fetch 2,mem_contr
+	copy pdata,rega
+	fetch 2,mem_pdatatemp
+	
+	call iicd_write_eep
+	
+	fetch 2,mem_regb
+	fetcht 2,mem_contr
+	iadd temp,temp
+	storet 2,mem_contr
+	fetcht 2,mem_pdatatemp
+	iadd temp,temp
+	storet 2,mem_pdatatemp
+	fetch 2,mem_temp
+	nbranch iicd_write_eep_loop,blank
+	rtn
+	
+//in:
+//1.size 2.len 3.src 4.des
+//mem_regc page's area
+//mem_pdatatemp curr ptr
+//mem_temp all len      
+//mem_regb curr len
+iicd_eep_transparency:
+	bpatchx patch32_3,mem_patch32
+	fetch 1,mem_eeprom_block_size
+	increase -1,pdata
+	fetcht 2,mem_pdatatemp
+	ior temp,pdata
+	increase 1,pdata
+	store 3,mem_regc
+
+	fetch 2,mem_temp
+	iadd temp,pdata
+
+	fetcht 3,mem_regc
+	isub temp,pdata
+	nbranch iicd_eep_deal_short_packet,positive
+	store 2,mem_temp
+	fetch 3,mem_regc
+	fetcht 2,mem_pdatatemp
+	isub temp,pdata
+	store 2,mem_regb
+	rtn
+iicd_eep_deal_short_packet:
+	fetch 2,mem_temp
+	store 2,mem_regb
+	setarg 0
+	store 2,mem_temp
+	rtn
+
+iicd_write_eep_size_2k:
+	increase 2,temp
+	hstoret 2,core_iicd_txlen
+	increase -2,rega
+	ifetcht 3,rega
+	copy temp,regb
+	arg 0xa0,temp
+	istoret 1,rega
+//	byteswap pdata,pdata
+	istore 1,contw
+	branch iicd_write_eep_common
+
+	/* pdata is eeprom address, rega pointers to txdata(3 ahead bytes should be left), temp is length */
+iicd_write_eep:
+	copy pdata,regb
+	bpatchx patch32_4,mem_patch32
+	bmark1 mark_eeprom_size,iicd_write_eep_size_2k
+	copy regb,pdata
+	increase 3,temp
+	hstoret 2,core_iicd_txlen
+	increase -3,rega
+	ifetcht 3,rega
+	copy temp,regb
+	arg 0xa0,temp
+	istoret 1,rega
+	byteswap pdata,pdata
+	istore 2,contw
+iicd_write_eep_common:	
+	deposit rega
+	hstore 2,core_iicd_txaddr
+	setarg 0
+	hstore 2,core_iicd_rxlen
+	jam 1,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	call wait_iicd_done
+	copy regb,pdata
+	istore 3,rega
+	
+iic_check_eeprom_standby:
+	bpatchx patch32_5,mem_patch32
+	jam 0,mem_iicd_tbuf+3
+iic_check_eeprom_standby_wait:
+	setarg 1
+	hstore 2,core_iicd_txlen
+	jam 0xa0,mem_iicd_tbuf
+	setarg mem_iicd_tbuf
+	hstore 2,core_iicd_txaddr
+	setarg 0
+	hstore 2,core_iicd_rxlen
+	hstore 2,core_iicd_rxaddr
+	setarg 3
+	hstore 1,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	call wait_iicd_done
+	hfetch 1,core_dma_status
+	rtnbit0 iicd_ack
+	nop 1500
+	fetch 1,mem_iicd_tbuf+3
+	increase 1,pdata
+	store 1,mem_iicd_tbuf+3
+	sub pdata,40,null
+	nrtn positive//polling timeout 6ms
+	branch iic_check_eeprom_standby_wait
+
+/* ===================== OTP ======================= */
+
+otp_enable_chgpump:
+	jam 0x70,rfen_chgpump
+	nop param_chgpump_delay
+	rtn
+
+otp_disable_chgpump:
+	jam 0x30,rfen_chgpump
+	rtn
+	
+otp_set_addr:
+	lshift3 pdata,pdata
+	hstore 2,core_otp_addr
+	jam 0,core_otpd_ctrl
+	rtn	
+
+/* pdata = otp address, rega pointers data, loopcnt is count */
+otp_write:
+	call otp_set_addr
+	call otp_ce
+otp_program:
+	ifetcht 1,rega
+	increase 1,rega
+	force 0,queue
+otp_program_bit:
+	qisolate0 temp
+	branch otp_skip_0,true
+	hfetch 1,core_otp_din
+	set1 6,pdata				/* din */
+	set1 7,pdata				/* dle */
+	hstore 1,core_otp_din
+	jam 0x02,core_otp_ctrl	/* web */
+	jam 0x82,core_otp_ctrl
+	set0 7,pdata				/* dle */
+	hstore 1,core_otp_din
+	jam 0x8a,core_otp_ctrl	/* pgmen */
+	nop 11
+	jam 0xca,core_otp_ctrl	/* vppen */
+	nop 33
+	jam 0x4a,core_otp_ctrl	/* web 2nd */
+	nop 44
+	jam 0xca,core_otp_ctrl	/* release web */
+	nop 22
+	jam 0x8a,core_otp_ctrl	/* release vppen */
+	nop 33
+	jam 0x82,core_otp_ctrl	/* release pgmen */
+	nop 1
+	jam 0x92,core_otp_ctrl	/* pgmvfy */
+	nop 10
+	jam 0xb2,core_otp_ctrl	/* readen */
+	hfetch 1,core_otp_rdata
+	jam 0x92,core_otp_ctrl	/* release readen */
+	nop 1
+	jam 0x82,core_otp_ctrl	/* release pgmvfy */
+	qisolate0 pdata
+	branch otp_program_bit,true	/* program error */
+otp_skip_0:
+	hfetch 2,core_otp_addr
+	increase 1,pdata
+	hstore 2,core_otp_addr
+	increase 1,queue
+	compare 8,queue,0xf
+	nbranch otp_program_bit,true
+	loop otp_program
+	jam 0x83,core_otp_ctrl
+	rtn
+
+otp_ce:
+	jam 0x82,core_otp_ctrl	/* ceb */
+	nop 12
+	jam 0x80,core_otp_ctrl	/* rstn */
+	jam 0x82,core_otp_ctrl	/* release rstn */
+	nop 150					/* waiting for vdd25 stable */
+	rtn
+
+	/* rega points to data, temp is count */
+otpd_read_init:
+	call otp_ce
+	jam 0xa2,core_otp_ctrl	/* readen */
+	deposit rega
+	hstore 2,core_otpd_addr
+	set1 11,temp
+	isolate0 15,pdata
+	setflag true,15,temp
+	hstoret 2,core_otpd_len
+	jam otpd_start,core_misc_ctrl
+	rtn
+
+otpd_wait_end:
+	hfetch 1,core_dma_status
+	bbit0 otpd_done,otpd_wait_end
+	rtn
+	
+	/* pdata=otp address, rega points to data, temp is count */
+otpd_read_data:
+	call otp_set_addr
+	call otpd_read_init
+	call otpd_wait_end
+	jam 0x83,core_otp_ctrl	/* release ceb */
+	rtn
+
+
+
+/* rega pointers to buf, temp is length */
+otpd_read_code:	
+	hfetch 2,core_current_otp_addr
+	hstore 2,core_otp_addr
+	call otpd_read_init
+	arg otpd_done,queue
+	call decrypt_code
+	call otpd_wait_end
+	isolate1 otpd_crcok,pdata	
+	call set_ucode_status
+	jam 0x83,core_otp_ctrl	/* release ceb */
+	rtn
+
+/* ===================== uart dma ======================= */
+uartd_prepare_tx:
+	hfetch 2,core_uart_twptr
+	iforce contwu
+	rtn
+
+uartd_send:
+	deposit contwu
+	hstore 2,core_uart_twptr
+	rtn
+
+uartd_rxdone:
+	deposit contru
+	hstore 2,core_uart_rrptr
+	rtn
+
+uartd_prepare_rx:
+	hfetch 2,core_uart_rrptr
+	copy pdata,contru
+	rtn
+
+uart_set_baud_by_mem:
+	fetch uart_baud_len,mem_baud
+	hstore uart_baud_len,core_uart_baud
+	rtn
+
+uart_copy_tx_bytes_fast:
+	deposit loopcnt
+	rtn blank
+uart_copy_tx_bytes_fast_loop:
+	increase -8,loopcnt
+	call uart_tx_8_bytes,positive
+	rtn zero
+	branch uart_copy_tx_bytes_fast_loop,positive
+	increase 8,loopcnt
+uart_copy_tx_bytes_fast_loop_four:
+	increase -4,loopcnt
+	call uart_tx_4_bytes,positive
+	rtn zero
+	branch uart_copy_tx_bytes_fast_loop_four,positive
+	increase 4,loopcnt
+	branch uart_copy_tx_bytes
+
+uart_tx_8_bytes:
+	ifetch 8,contr
+	istore 8,contwu
+	rtn
+
+uart_tx_4_bytes:
+	ifetch 4,contr
+	istore 4,contwu
+	rtn
+
+uart_copy_tx_bytes:
+	deposit loopcnt
+	rtn blank
+uart_copy_tx_bytes_loop:
+	ifetch 1,contr
+	istore 1,contwu
+	loop uart_copy_tx_bytes_loop
+	rtn
+
+uart_copy_rx_bytes_fast:
+	deposit loopcnt
+	rtn blank
+uart_copy_rx_bytes_fast_loop:
+	increase -8,loopcnt
+	call uart_rx_8_bytes,positive
+	rtn zero
+	branch uart_copy_rx_bytes_fast_loop,positive
+	increase 8,loopcnt
+uart_copy_rx_bytes_fast_loop_four:
+	increase -4,loopcnt
+	call uart_rx_4_bytes,positive
+	rtn zero
+	branch uart_copy_rx_bytes_fast_loop_four,positive
+	increase 4,loopcnt
+	branch uart_copy_rx_bytes
+
+uart_rx_8_bytes:
+	ifetch 8,contru
+	istore 8,contw
+	rtn
+
+uart_rx_4_bytes:
+	ifetch 4,contru
+	istore 4,contw
+	rtn
+
+
+uart_copy_rx_bytes:
+	deposit loopcnt
+	rtn blank
+uart_copy_rx_bytes_loop:
+	ifetch 1,contru
+	istore 1,contw
+	loop uart_copy_rx_bytes_loop
+	rtn
+
+
+uart_copy_rx2tx:
+	deposit loopcnt
+	rtn blank
+uart_copy_rx2tx_loop:
+	ifetch 1,contru
+	istore 1,contwu
+	loop uart_copy_rx2tx_loop
+	rtn
+
+
+/* ===================== eeprom data ======================= */
+
+app_store_nvram_event:
+	jam BT_EVT_STORE_NVRAM,mem_fifo_temp
+	branch ui_ipc_send_event
+
+check_51cmd_store_reconn_info:
+check_51cmd_update_device_record:
+	bpatchx patch32_6,mem_patch32
+	fetch 1,mem_nv_data_number
+	rtn blank		// not nv data
+	call check_nvram
+	call init_device_list,zero
+	call nvram_find_addr_from_bd_list
+write_device_record:
+	fetch 1,mem_nv_data_number
+	icopy regc
+	fetcht 2,mem_nv_data_ptr
+	storet 2,mem_list_item_ptr
+write_device_loop_find:
+	copy regc,pdata
+	branch app_store_nvram_event,blank  //EEPROM
+	increase -1,regc
+	copy temp,rega
+	ifetch 1,rega
+	fetcht 1,mem_select_list_item
+	isub temp,null
+	call set_index_finded_device,zero
+	branch write_device_loop_find0,positive
+	ifetch 1,rega
+	increase 1,pdata
+	istore 1,rega
+write_device_loop_find0:
+	fetcht 2,mem_list_item_ptr
+	increase NV_DATA_LEN,temp
+	storet 2,mem_list_item_ptr
+	branch write_device_loop_find
+
+set_index_finded_device:
+	setarg 0
+	istore 1,rega
+	fetch 1,mem_temp_reconn_record
+	istore 1,contw	
+	bne REC_3_MODE,set_index_finded_device_ble_mode
+	arg mem_link_key,regb
+set_index_find_device_MASTER_ADDR:
+	ifetch 6,contr
+	istore 8,contw
+	setarg 0
+	istore 8,contw
+	copy regb,contr
+store_rec_data_common:
+	call memcpy16
+	force 1,null
+	rtn
+
+set_index_finded_device_ble_mode:
+	beq REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,set_index_finded_device_IRK
+	beq REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,set_index_finded_device_EDIV
+	arg mem_le_ltk,regb
+	branch set_index_find_device_MASTER_ADDR
+
+set_index_finded_device_IRK:
+	arg mem_le_irk,contr
+	call memcpy16
+store_ble_rec_data_common:
+	arg mem_le_ltk,contr
+	branch store_rec_data_common
+
+set_index_finded_device_EDIV:
+	arg mem_le_rand,contr
+	call memcpy16
+	branch store_ble_rec_data_common
+
+
+nvram_find_addr_from_bd_list:
+	call disable_user
+	fetch 1,mem_nv_data_number
+	rtn blank		// not nv data
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,find_addr_from_bd_list_SPP_mode
+find_addr_from_bd_list_ble_mode:
+	bpatchx patch32_7,mem_patch32
+	fetch 1,mem_le_conn_peer_addr_type
+	beq MASTER_PUBLIC_ADDR,find_addr_from_bd_list_static_addr
+	fetch 1,mem_le_plap+5
+	compare 0xc0,pdata,0xc0
+	branch find_addr_from_bd_list_static_addr,true
+	compare 0x40,pdata,0xc0
+	branch find_addr_from_bd_list_random_addr,true
+	compare 0x00,pdata,0xc0
+	branch find_addr_from_bd_list_random_non_resolvable_private_address,true
+find_addr_from_bd_list_static_addr:
+	jam REC_4_MODE_STATIC_ADDRESS,mem_temp_reconn_record
+	fetch 6,mem_le_plap
+	branch find_addr_from_bd_list_common
+	
+find_addr_from_bd_list_random_non_resolvable_private_address:	
+	jam REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,mem_temp_reconn_record
+	branch find_addr_from_bd_list_common
+
+//input :pdata EDIV and rands
+find_addr_from_bd_list_random_addr:
+	jam REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,mem_temp_reconn_record
+	branch find_addr_from_bd_list_common
+	
+//input :pdata EDIV and rands
+find_addr_from_bd_list_SPP_mode:
+	bpatchx patch33_0,mem_patch33
+	jam REC_3_MODE,mem_temp_reconn_record
+	fetch 6,mem_plap
+find_addr_from_bd_list_common:
+	store 6,mem_temp_reconn_record+1
+	fetch 2,mem_nv_data_ptr
+	ifetcht 1,pdata
+	pincrease 1
+	store 2,mem_list_item_ptr
+	storet 1,mem_select_list_item
+	fetch 1,mem_nv_data_number
+	icopy regc
+nvram_find_addr_from_list:
+	fetch 2,mem_list_item_ptr
+	copy pdata,rega
+	call nvram_find_addr_from_list_compare
+	rtn user
+	fetcht 2,mem_list_item_ptr
+	increase NV_DATA_LEN,temp
+	storet 2,mem_list_item_ptr
+	increase -1,temp
+	ifetch 1,temp
+	store 1,mem_select_list_item
+	increase -1,regc
+	nbranch nvram_find_addr_from_list,zero
+	fetch 1,mem_nv_data_number
+	pincrease DECREASED_ONE
+	store 1,mem_select_list_item
+	rtn
+nvram_find_addr_from_list_compare:
+	fetch 1,mem_temp_reconn_record
+	bne REC_3_MODE,find_addr_from_list_compare_ble_mode
+find_master_addr_from_list_compare:
+	arg mem_temp_reconn_record,regb
+	arg 7,loopcnt
+	call string_compare
+	branch enable_user,zero
+	rtn
+
+find_addr_from_list_compare_ble_mode:
+	beq REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,find_irk_form_list_compare
+	beq REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,find_ediv_form_list_compare
+	branch find_master_addr_from_list_compare
+
+find_irk_form_list_compare:
+	ifetcht 1,rega
+	isub temp,null
+	nrtn zero
+	arg mem_le_prand,contw
+	arg 16,loopcnt
+	call clear_mem
+	fetch 3,mem_le_plap+3
+	store 3,mem_le_prand
+	call genernate_master_MacAddress
+	fetch 2,mem_le_aes_128+13
+	byteswap pdata,pdata
+	lshift8 pdata,temp
+	ifetch 1,contr
+	iadd temp,pdata
+	fetcht 3,mem_le_plap
+	isub temp,null
+	branch enable_user,zero
+	rtn
+
+
+genernate_master_MacAddress:
+	arg mem_le_prand ,contr
+	call load_data128
+//	arg mem_le_irk,contr
+	ifetch 1,rega
+	call load_regext
+	force 0x38,aes_ctrl
+	force 0x0,aes_ctrl
+	call wait_aes
+	arg mem_le_aes_128,contw
+	branch store_aes_result
+
+find_ediv_form_list_compare:
+	ifetcht 1,rega
+	isub temp,null
+	nrtn zero
+	copy contr,rega
+	add contr,8,regc
+	arg mem_le_rand,regb
+	arg 8,loopcnt
+	call string_compare
+	branch enable_user,zero
+	copy regc,rega
+	arg mem_le_irk,regb
+	arg 8,loopcnt
+	call string_compare
+	branch enable_user,zero
+	rtn
+
+check_nvram:
+	fetch 2,mem_nv_data_ptr
+	ifetcht 1,pdata
+	pincrease NV_DATA_LEN
+	ifetch 1,pdata
+	isub temp,null
+	rtn
+
+init_device_list:
+	fetch 1,mem_nv_data_number
+	icopy loopcnt
+	fetcht 2,mem_nv_data_ptr
+	setarg 0
+init_device_list_loop:
+	istore 1,temp
+	increase NV_DATA_LEN,temp
+	pincrease 1
+	loop init_device_list_loop
+	rtn
+
+load_device_list:
+	bpatchx patch33_1,mem_patch33
+	call nvram_find_addr_from_bd_list
+	fetch 1,mem_state
+	setflag user,state_combkey,pdata	/* we have link key */
+	store 1,mem_state
+	nbranch clear_key_exists,user
+	add rega,10,contr
+//	copy rega,contr
+	arg mem_link_key,contw
+	call  memcpy16
+	branch check_link_key_load
+clear_key_exists:
+	jam 0,mem_link_key_exists
+	rtn
+
+load_device_list_mode_4:
+	fetch 9,mem_le_ediv
+	branch clear_ltk_exists,blank
+	call nvram_find_addr_from_bd_list
+	nbranch clear_ltk_exists,user
+	fetch 2,mem_list_item_ptr
+	add pdata,1,contr
+	arg mem_le_irk,contw
+	call  memcpy16
+	arg mem_le_ltk,contw
+	call  memcpy16
+	jam 1,mem_ltk_exists
+	rtn
+
+clear_ltk_exists:
+	jam 0,mem_ltk_exists
+	rtn
+
+
+eeprom_store_le_reconn_info:
+	fetch 6,mem_le_plap
+	store 6,mem_temp_lap
+	jam REC_4_MODE,mem_record_bt_mode
+	branch eeprom_store_reconn_info
+eeprom_store_bd_reconn_info:
+	fetch 6,mem_plap
+	store 6,mem_temp_lap
+	jam REC_3_MODE,mem_record_bt_mode
+eeprom_store_reconn_info:
+	fetch 1,mem_device_option
+	beq dvc_op_module,check_51cmd_update_device_record
+	bbit1 dvc_op_mouse,mouse_store_remote_bdaddr
+	rtn
+	
+
+check_link_key_load:
+	fetch 8,mem_link_key
+	fetcht 8,mem_link_key+8
+	ior temp,pdata
+	rtn blank
+	jam 1,mem_link_key_exists
+	rtn
+	
+
+/* =============== GPIO CONTROL ================= */
+
+
+	//temp [4:0]=GPIO number, 0-31, 
+gpio_set_wake_by_current_state:
+	bpatchx patch33_2,mem_patch33
+	set1 7,temp
+	call gpio_get_bit
+	nsetflag true,7,temp
+	//branch gpio_set_wake
+	//fall through
+	
+	//temp [4:0]=GPIO number, 0-31, [7]=0, low active
+gpio_set_wake:
+	bpatchx patch33_3,mem_patch33
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	isolate0 7,temp
+	and temp,0x1f,queue
+	fetch 4,mem_gpio_wakeup_low
+	qsetflag true,pdata
+	store 4,mem_gpio_wakeup_low
+	fetch 4,mem_gpio_wakeup_high
+	nqsetflag true,pdata
+	store 4,mem_gpio_wakeup_high
+	rtn
+	
+	//temp [4:0]=GPIO number, 0-31, [7]=0, low active
+gpio_clr_wake:
+	bpatchx patch33_4,mem_patch33
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	isolate0 7,temp
+	and temp,0x1f,queue
+	fetch 4,mem_gpio_wakeup_low
+	qset0 pdata
+	store 4,mem_gpio_wakeup_low
+	fetch 4,mem_gpio_wakeup_high
+	qset0 pdata
+	store 4,mem_gpio_wakeup_high
+	rtn
+
+
+gpio_config_input_nowake:
+	call gpio_clr_wake
+	branch gpio_config_input_without_wake
+
+	//temp [4:0]=GPIO number, 0-31, [7]=0, low active
+gpio_config_input:
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	ncall gpio_set_wake,wake
+
+gpio_config_input_without_wake:
+	arg core_gpio_pd0,contw
+	call gpio_set_bit
+	setflip gpio_active_bit,temp
+	arg core_gpio_pu0,contw
+	call gpio_set_bit
+	set0 gpio_active_bit,temp
+	arg core_gpio_oe0,contw
+	branch gpio_set_bit
+
+
+gpio_set_high_impedance:
+	arg core_gpio_pd0,contw
+	call gpio_set_bit
+	set0 gpio_active_bit,temp
+	arg core_gpio_pu0,contw
+	call gpio_set_bit
+	set0 gpio_active_bit,temp
+	arg core_gpio_oe0,contw
+	branch gpio_set_bit
+
+
+	//temp [4:0]=GPIO number, 0-31, [7]=0, low active. set gpio to inactive state
+gpio_config_output:	
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	setflip gpio_active_bit,temp
+	call gpio_out
+gpio_config_output0:
+	set1 gpio_active_bit,temp
+	arg core_gpio_oe0,contw
+	branch gpio_set_bit
+	
+gpio_common:
+	and temp,0x07,queue
+	rshift3 temp,pdata
+	and_into 3,pdata
+	iadd contw,contw
+	ifetch 1,contw
+	rtn
+
+gpio_check_active:
+	arg core_gpio_out0,contw
+	branch get_bit_common
+
+	
+	/* temp is gpio number, return true if gpio active */
+gpio_get_bit:
+	arg core_gpio_in,contw
+get_bit_common:
+	call gpio_common
+	isolate1 gpio_active_bit,temp
+	branch gpio_get_bit_reverse,true
+	qisolate0 pdata
+	rtn
+gpio_get_bit_reverse:
+	qisolate1 pdata
+	rtn
+
+gpio_out_inactive:
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	isolate1 7,null
+	branch gpio_out_flag
+
+gpio_out_active:
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	isolate0 7,null
+
+	/* temp is gpio number,  [7]=1,set out equa true flag if gpio active */
+gpio_out_flag:
+	setarg 0
+	nsetflag true,gpio_active_bit,pdata
+	ixor temp,temp
+	
+	/* temp is gpio number,0-31, [7]=out bit value */
+gpio_out:
+	arg core_gpio_out0,contw
+
+	//temp [4:0]=GPIO number, 0-31, [7]=bit value; contw is gpio reg base
+gpio_set_bit:
+	call gpio_common
+	isolate1 gpio_active_bit,temp
+	qsetflag true,pdata
+	istore 1,contw
+	rtn
+
+gpio_set_before_lpm_common:
+	arg -1,rega
+	hfetch 1,core_gpio_sel1
+	compare 0x02,pdata,0x03
+	call neglact4_from_23_pin,true	//spi
+
+	compare 0x01,pdata,0x03
+	call neglact2_form_25_pin,true	//two spi gpio25 26
+
+	compare 0x03,pdata,0x03
+	call neglact2_form_25_pin,true	//two spi gpio30 31
+	 	 
+	isolate1 2,pdata
+	call neglect2_from_6_pin,true	//uart
+	 
+	isolate1 3,pdata
+	call neglect4_from_9_pin,true	//spi
+
+	isolate1 4,pdata
+	call neglact2_form_30_pin,true	//IIC GPIO30 31
+
+	isolate1 6,pdata
+	nsetflag true,04,rega			//pwm0 gpio4
+
+	isolate1 7,pdata
+	nsetflag true,05,rega			//pwm1 gpio5
+
+	hfetch 1,core_gpio_sel2
+	isolate1 0,pdata
+	nsetflag true,27,rega			//pwm2 gpio27
+	isolate1 1,pdata
+	nsetflag true,28,rega			//pwm3 gpio28
+	isolate1 2,pdata
+	nsetflag true,03,rega			//pwm4 gpio03
+	isolate1 3,pdata
+	nsetflag true,08,rega			//pwm5 gpio08
+	isolate1 4,pdata
+	nsetflag true,20,rega			//pwm0 gpio20
+	isolate1 5,pdata
+	nsetflag true,21,rega			//pwm1 gpio21
+	isolate1 6,pdata
+	nsetflag true,22,rega			//pwm2 gpio22
+	isolate1 7,pdata
+	nsetflag true,23,rega			//pwm3 gpio23
+		
+	hfetch 1,core_gpio_sel
+	isolate1 0,pdata
+	nsetflag true,05,rega			//ADC GPIO05
+	isolate1 1,pdata
+	nsetflag true,06,rega			//ADC GPIO06
+	isolate1 2,pdata
+	nsetflag true,07,rega			//ADC GPIO07
+	isolate1 3,pdata
+	nsetflag true,18,rega			//ADC GPIO18
+	isolate1 4,pdata
+	nsetflag true,19,rega			//ADC GPIO19
+	isolate1 5,pdata
+	nsetflag true,20,rega			//ADC GPIO20
+	isolate1 6,pdata
+	nsetflag true,21,rega			//ADC GPIO21
+	isolate1 7,pdata
+	nsetflag true,22,rega			//ADC GPIO22
+	
+	hfetch 1,core_uart_ctrl
+	isolate1 4,pdata
+	call neglact2_form_2_pin,true
+	bpatchx patch33_5,mem_patch33
+
+	hfetch 4,core_gpio_pu0
+	hfetcht 4,core_gpio_pd0
+	ior temp,pdata
+	invert pdata,pdata
+	iand rega,pdata
+	//set0 4,pdata //revc
+	hstore 4,core_gpio_oe0
+	rtn
+	
+	
+neglect2_from_6_pin: //uart
+	 arg 6,queue
+	 branch neglect_2_pin
+neglect4_from_9_pin:
+	 arg 9,queue
+	 branch neglact_4_pin
+neglact4_from_23_pin:
+	 arg 23,queue
+	 branch neglact_4_pin
+neglact2_form_25_pin:
+	 arg 25,queue
+	 branch neglect_2_pin
+neglact2_form_30_pin:
+	 arg 30,queue
+	 branch neglect_2_pin
+neglact2_form_2_pin:
+	 arg 2,queue
+	 branch neglect_2_pin
+neglact_1_pin:
+	arg 1,loopcnt
+	branch neglect_pin_loop
+neglact_4_pin:
+	 arg 4,loopcnt
+	 branch neglect_pin_loop
+neglect_2_pin:
+	 arg 2,loopcnt
+neglect_pin_loop:
+	 qset0 rega
+	 increase 1,queue
+	 loop neglect_pin_loop
+	 rtn
+
+
+
+
+
+
+/* ===================== sniff GPIO CONTROL ======================= */
+gpio_cfg_uart_tx_output:
+	call gpio_uart2gpio
+	arg UART_WAKEUP_TX,temp
+	branch gpio_config_output
+
+gpio_pu_uart_tx:
+	call gpio_cfg_uart_tx_output
+	arg UART_WAKEUP_TX,temp
+	branch gpio_out_inactive
+
+
+
+gpio_rx_config_input_with_pu:
+	call gpio_uart2gpio
+	hfetch 1, core_gpio_pu0
+	set1 UART_WAKEUP_RX,pdata
+	hstore 1,core_gpio_pu0
+	arg UART_WAKEUP_RX,temp
+	branch gpio_config_input
+	
+gpio_uart2gpio:
+	hfetch 1,core_gpio_sel1
+	and_into 0xfb,pdata
+	hstore 1,core_gpio_sel1
+	rtn
+
+gpio_check_uart_state:
+	hfetch 1,core_gpio_sel1
+	isolate1 2,pdata
+	rtn
+
+load_chip_option:
+	call otp_enable_chgpump
+	setarg OTP_CHIP_FUNCTIONS
+	arg mem_chip_functions,rega
+	arg 0x02,temp
+	call otpd_read_data
+	branch otp_disable_chgpump
+
+
+load_adc_init:
+	call otp_enable_chgpump
+	setarg otp_adc_io_0_5V_addr
+	arg mem_0_5_adc_io_data,rega
+	arg 14,temp
+	call otpd_read_data
+	branch otp_disable_chgpump
+
+
+//mem_adc_config_flag 0:vinlpm 1:Hvin 2: GPIO
+adc_init_data:
+	bpatchx patch33_6,mem_patch33
+
+	call load_adc_init
+	
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_VINLPM,adc_init_data_vinlpm
+	beq ADC_CONFIG_HVIN,adc_init_data_hvin
+	beq ADC_CONFIG_GPIO,adc_init_data_io
+	rtn	
+
+adc_init_data_vinlpm:
+	fetcht 2,mem_otp_adc_flag
+	setarg OTP_ADC_FLAG
+	isub temp,null
+	branch adc_check_data_vinlpm,zero
+	setarg 0x4dfa
+	store 2,mem_3v_adc_vinlpm_data	
+	setarg 0x4894
+	store 2,mem_2v_adc_vinlpm_data
+	branch set_vdd_reference_voltage_1v
+
+adc_check_data_vinlpm:
+	fetch 2,mem_3v_adc_vinlpm_data
+	nbranch adc_check_2v_vinlpm,blank
+	setarg 0x4dfa
+	store 2,mem_3v_adc_vinlpm_data
+adc_check_2v_vinlpm:	
+	fetch 2,mem_2v_adc_vinlpm_data
+	nbranch set_vdd_reference_voltage_1v,blank
+	setarg 0x4894
+	store 2,mem_2v_adc_vinlpm_data
+set_vdd_reference_voltage_1v:
+	setarg 100
+	store 2,mem_reference_voltage //set reference voltage = 1V
+	rtn		
+
+adc_init_data_hvin:
+	fetcht 2,mem_otp_adc_flag
+	setarg OTP_ADC_FLAG
+	isub temp,null
+	branch adc_check_data_hvin,zero
+	setarg 0x5932
+	store 2,mem_5v_adc_hvin_data	
+	setarg 0x4323
+	store 2,mem_1v_adc_hvin_data
+	branch set_vdd_reference_voltage_4v
+
+adc_check_data_hvin:
+	fetch 2,mem_5v_adc_hvin_data
+	nbranch adc_check_1v_hvin,blank
+	setarg 0x5932
+	store 2,mem_5v_adc_hvin_data
+adc_check_1v_hvin:	
+	fetch 2,mem_1v_adc_hvin_data
+	nbranch set_vdd_reference_voltage_4v,blank
+	setarg 0x4323
+	store 2,mem_1v_adc_hvin_data
+set_vdd_reference_voltage_4v:
+	setarg 400
+	store 2,mem_reference_voltage //set reference voltage = 4V
+	rtn 	
+
+adc_init_data_io:
+	fetcht 2,mem_otp_adc_flag
+	setarg OTP_ADC_FLAG
+	isub temp,null
+	branch adc_check_data_io,zero
+	setarg 0x6946
+	store 2,mem_1v_adc_io_data	
+	setarg 0x5377
+	store 2,mem_0_5_adc_io_data
+	branch set_vdd_reference_voltage_0_5v
+
+adc_check_data_io:
+	fetch 2,mem_1v_adc_io_data
+	nbranch adc_check_0_5v_io,blank
+	setarg 0x6946
+	store 2,mem_1v_adc_io_data
+adc_check_0_5v_io:
+	fetch 2,mem_0_5_adc_io_data
+	nbranch set_vdd_reference_voltage_0_5v,blank
+	setarg 0x5377
+	store 2,mem_0_5_adc_io_data
+set_vdd_reference_voltage_0_5v:
+	setarg 50
+	store 2,mem_reference_voltage //set reference voltage = 0.5V
+	rtn	
+
+
+adc_set_mode:
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_VINLPM,adc_check_vinlpm
+	beq ADC_CONFIG_HVIN,adc_check_hvin
+	beq ADC_CONFIG_GPIO,adc_check_gpio
+	rtn
+adc_check_vinlpm:
+	jam 0xbf,rf_adc_mode	//read VINLPM voltage directly	
+	branch read_adc
+adc_check_hvin:
+	jam 0xaf,rf_adc_mode	//read HVIN voltage directly
+	branch read_adc
+adc_check_gpio:
+	jam 0x8f,rf_adc_mode
+	fetch 1,mem_adc_channel
+	hstore 1,rf_adc_ch
+	branch read_adc
+read_adc:
+	bpatchx patch33_7,mem_patch33
+	hfetch 1,core_uart_baud + 1
+	set1 7,pdata
+	hstore 1,core_uart_baud + 1 
+	hfetch 1,rf_adc_ch
+	or_into 0x30,pdata
+	hstore 1,rf_adc_ch
+	jam 0x7c,rfen_adc
+	jam 0xaa,rf_adc_gc
+	nop 5000
+	hfetcht 2,core_adc_sum
+	hfetch 1,core_uart_baud + 1
+	set0 7,pdata
+	hstore 1,core_uart_baud + 1
+	storet 2,mem_adc_current_value
+	rtn
+
+vdd_calculate_by_mode:
+	bpatchx patch34_0,mem_patch34
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_VINLPM,vdd_calculate_vinlpm
+	beq ADC_CONFIG_HVIN,vdd_calculate_hvin
+	beq ADC_CONFIG_GPIO,vdd_calculate_io
+	rtn
+
+vdd_calculate_vinlpm:
+	fetch 2,mem_3v_adc_vinlpm_data
+	fetcht 2,mem_2v_adc_vinlpm_data
+	arg 200,regc
+	branch vdd_calculate
+
+vdd_calculate_hvin:
+	fetch 2,mem_5v_adc_hvin_data
+	fetcht 2,mem_1v_adc_hvin_data
+	arg 100,regc
+	branch vdd_calculate
+
+vdd_calculate_io:
+	fetch 2,mem_1v_adc_io_data
+	fetcht 2,mem_0_5_adc_io_data
+	arg 50,regc
+	branch vdd_calculate
+	
+vdd_calculate:
+	isub temp,rega
+	fetch 2,mem_adc_current_value
+	isub temp,pdata
+	nbranch vdd_calculate1,positive
+	fetcht 2,mem_reference_voltage
+	imul32 temp,regb
+	copy regc,pdata
+	imul32 rega,pdata
+	iadd regb,pdata
+vdd_calculate2:
+	idiv rega
+	call wait_div_end
+	quotient pdata	
+	rtn
+
+vdd_calculate1:
+	copy temp,pdata
+	fetcht 2,mem_adc_current_value
+	isub temp,pdata
+	fetcht 2,mem_reference_voltage
+	imul32 temp,regb
+	copy regc,pdata
+	imul32 rega,pdata
+	isub regb,pdata
+	branch vdd_calculate2
+
+/*	typedef struct
+*	{
+*		uint16 full_vol
+*		uint16 empty_vol
+*		uint16 low_vol
+*		uint16 now_vol
+*	}bat_calculate;
+*/
+//out:	pdata->bat percent
+adc_bat_percent_lowpower_out:
+	ifetch 8,rega
+	store 8,mem_pdatatemp
+	fetch 2,mem_pdatatemp
+	fetcht 2,mem_pdatatemp+2
+	isub temp,rega
+	fetch 2,mem_pdatatemp+6
+	isub temp,regb
+	fetcht 2,mem_pdatatemp+4
+	isub temp,null
+	ncall adc_set_low_power_flag,positive
+	mul32 regb,100,pdata
+	idiv rega
+	call wait_div_end
+	quotient pdata
+	call adc_set_no_power_flag,blank
+	rtn
+adc_set_low_power_flag:
+	fetch 1,mem_adc_power_flag
+	set1 0,pdata
+	store 1,mem_adc_power_flag
+	rtn
+adc_set_no_power_flag:
+	fetcht 1,mem_adc_power_flag
+	set1 1,temp
+	storet 1,mem_adc_power_flag
+	rtn
+
+ifdef SPI_SIMULATE
+/******************************simulate spi slave start**********************************/
+
+/*
+// Define SPI struct, gpio config
+mem_spi_simulate_struct:
+02	#cs
+03	#sclk
+04	#mosi
+05	#miso
+08	#motion
+*/
+
+/*
+Brief: spi_simulate_init_slave
+Input: None
+Output: None
+Return: None
+Brief: cs_gpio,sclk_gpio,mosi_gpio : input
+	miso_gpio : output
+*/
+spi_simulate_init_slave:
+	call spi_simulate_variable_release_slave
+	branch spi_simulate_gpio_config_slave
+
+spi_simulate_variable_release_slave:
+	arg mem_spi_simulate_read_byte_slave,contw
+	arg 53,loopcnt
+	call buffer_release
+	arg mem_spi_simulate_write_byte_slave,contw
+	arg 54,loopcnt
+	branch buffer_release
+
+buffer_release:
+	setarg 0
+buffer_release_loop:
+	istore 1,contw
+	loop buffer_release_loop
+	rtn
+	
+spi_simulate_gpio_config_slave:
+	fetcht 1,mem_spi_simulate_cs_gpio
+	call gpio_config_input
+	fetcht 1,mem_spi_simulate_sclk_gpio
+	call gpio_config_input
+	fetcht 1,mem_spi_simulate_mosi_gpio
+	call gpio_config_input
+	fetcht 1,mem_spi_simulate_miso_gpio
+	call gpio_config_output
+	fetcht 1,mem_spi_simulate_motion_gpio
+	call gpio_config_output
+	branch spi_simulate_motion_disable
+
+spi_simulate_motion_enable:
+	fetcht 1,mem_spi_simulate_motion_gpio
+	branch gpio_out_inactive
+spi_simulate_motion_disable:
+	fetcht 1,mem_spi_simulate_motion_gpio
+	branch gpio_out_active
+	
+/*
+Brief: spi_simulate_read_byte_slave
+Input: rega: read length
+Output: mem_spi_simulate_read_byte_slave: read buffer
+Return: None
+Brief: when the cs_gpio is low level,slave reads data from master at the rising edge of the sclk gpio
+*/
+spi_simulate_read_byte_slave:
+	copy rega,pdata
+	store 1,mem_spi_simulate_read_length_slave
+	fetcht 1,mem_spi_simulate_cs_gpio
+	call gpio_get_bit
+	nrtn true
+spi_simulate_read_byte_slave1:	
+	jam 0,mem_spi_simulate_read_byte_slave_temp
+	arg 8,loopcnt
+spi_simulate_read_byte_slave_loop:
+	fetcht 1,mem_spi_simulate_cs_gpio
+	call gpio_get_bit
+	nbranch spi_simulate_read_byte_slave_end,true
+	
+	fetcht 1, mem_spi_simulate_sclk_gpio
+	call gpio_get_bit
+	branch spi_simulate_read_byte_slave_loop,true	
+	fetch 1,mem_spi_simulate_read_byte_slave_temp
+	lshift pdata,pdata
+	store 1,mem_spi_simulate_read_byte_slave_temp
+	fetcht 1, mem_spi_simulate_mosi_gpio
+	call gpio_get_bit
+	ncall spi_simulate_read_byte_or_one,true
+spi_simulate_read_byte_slave_loop1:	
+	fetcht 1,mem_spi_simulate_cs_gpio
+	call gpio_get_bit
+	nbranch spi_simulate_read_byte_slave_end,true
+
+	fetcht 1, mem_spi_simulate_sclk_gpio
+	call gpio_get_bit
+	nbranch spi_simulate_read_byte_slave_loop1,true
+	loop spi_simulate_read_byte_slave_loop
+	
+	fetcht 1,mem_spi_simulate_read_length_slave_temp
+	setarg mem_spi_simulate_read_byte_slave
+	iadd temp,contw
+	copy contw,regb
+	increase 1,temp
+	storet 1,mem_spi_simulate_read_length_slave_temp
+	fetch 1,mem_spi_simulate_read_byte_slave_temp
+	copy regb,contw
+	istore 1,contw
+
+	fetch 1,mem_spi_simulate_read_length_slave
+	increase -1,pdata
+	store 1,mem_spi_simulate_read_length_slave
+	nbranch spi_simulate_read_byte_slave1,blank
+	
+spi_simulate_read_byte_slave_loop2:	
+	fetcht 1, mem_spi_simulate_cs_gpio
+	call gpio_get_bit
+	nbranch spi_simulate_read_byte_slave_loop2,true
+spi_simulate_read_byte_slave_end:	
+	jam 0,mem_spi_simulate_read_length_slave
+	jam 0,mem_spi_simulate_read_length_slave_temp
+	jam 0,mem_spi_simulate_read_byte_slave_temp
+	rtn
+
+spi_simulate_read_byte_or_one:
+	fetch 1,mem_spi_simulate_read_byte_slave_temp
+	or_into 1,pdata
+	store 1,mem_spi_simulate_read_byte_slave_temp
+	rtn
+
+
+/*
+Brief: spi_simulate_write_byte_slave
+Input: rega: write length;  write buffer:mem_spi_simulate_write_byte_slave;
+Output: None
+Return: None
+Brief: when the cs_gpio is low level,slave writes data to master at the falling edge of the sclk gpio
+*/
+spi_simulate_write_byte_slave:
+	copy rega,pdata
+	store 1,mem_spi_simulate_write_length_slave
+	jam 0,mem_spi_simulate_write_length_slave_temp
+	jam 0,mem_spi_simulate_write_byte_slave_temp
+	fetcht 1,mem_spi_simulate_cs_gpio
+	call gpio_get_bit
+	nrtn true
+spi_simulate_write_byte_slave1:
+	fetcht 1,mem_spi_simulate_write_length_slave_temp
+	setarg mem_spi_simulate_write_byte_slave
+	iadd temp,contr
+	copy contr,regb
+	increase 1,temp
+	storet 1,mem_spi_simulate_write_length_slave_temp
+	copy regb,contr
+	ifetch 1,contr
+	store 1,mem_spi_simulate_write_byte_slave_temp
+	
+	arg 8,loopcnt
+spi_simulate_write_byte_slave_loop:
+	fetcht 1,mem_spi_simulate_cs_gpio
+	call gpio_get_bit
+	nbranch spi_simulate_write_byte_slave_end,true
+	fetcht 1, mem_spi_simulate_sclk_gpio
+	call gpio_get_bit
+	branch spi_simulate_write_byte_slave_loop,true
+spi_simulate_write_byte_slave_loop1:
+	fetch 1,mem_spi_simulate_write_byte_slave_temp
+	store 1,mem_spi_simulate_write_byte_slave_temp_temp
+	and_into 0x80,pdata
+	beq 0x80,spi_simulate_set_miso_gpio_high
+	call spi_simulate_set_miso_gpio_low
+spi_simulate_write_byte_slave_loop2:
+	fetcht 1,mem_spi_simulate_cs_gpio
+	call gpio_get_bit
+	nbranch spi_simulate_write_byte_slave_end,true
+	fetcht 1, mem_spi_simulate_sclk_gpio
+	call gpio_get_bit
+	nbranch spi_simulate_write_byte_slave_loop2,true	
+	fetch 1,mem_spi_simulate_write_byte_slave_temp_temp
+	lshift pdata,pdata
+	store 1,mem_spi_simulate_write_byte_slave_temp
+	loop spi_simulate_write_byte_slave_loop
+
+	fetch 1,mem_spi_simulate_write_length_slave
+	increase -1,pdata
+	store 1,mem_spi_simulate_write_length_slave
+	nbranch spi_simulate_write_byte_slave1,blank
+	
+spi_simulate_write_byte_slave_loop3:
+	fetcht 1,mem_spi_simulate_cs_gpio
+	call gpio_get_bit
+	branch spi_simulate_write_byte_slave_loop3,true
+spi_simulate_write_byte_slave_end:	
+	jam 0,mem_spi_simulate_write_length_slave_temp
+	jam 0,mem_spi_simulate_write_byte_slave_temp
+	jam 0,mem_spi_simulate_write_byte_slave_temp_temp
+	rtn
+	
+spi_simulate_set_miso_gpio_high:
+	fetcht 1,mem_spi_simulate_miso_gpio
+	call gpio_out_inactive
+	branch spi_simulate_write_byte_slave_loop2
+spi_simulate_set_miso_gpio_low:
+	fetcht 1,mem_spi_simulate_miso_gpio
+	branch gpio_out_active	
+
+/******************************simulate spi slave end**********************************/
+
+endif  //SPI_SIMULATE
+
+
+/****************************************key scan***************************************/
+keyscan_key_init:
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_key_init_next:
+	rtn blank
+	copy pdata,loopcnt
+//	copy contr,rega
+	fetch 2,mem_keyscan_ptr
+	increase 3,pdata	//mem_key_conf0_pin
+	copy pdata,rega
+keyscan_key_init_lp1:
+	ifetcht 1, rega
+	call gpio_config_input
+	increase KEY_CONF_STRUCT_LEN,rega
+	loop keyscan_key_init_lp1
+keyscan_key_init_end:
+	rtn
+	
+keyscan_scan_key:
+	fetch 2,mem_keyscan_ptr
+	increase 3,pdata	//mem_key_conf0_pin
+	copy pdata,rega
+//	arg mem_key_conf0_pin,rega
+	force 0,regb
+	jam 0,mem_key_value_temp
+keyscan_scan_key_lp1:
+	ifetcht 1, rega
+	call gpio_get_bit
+	bpatchx patch34_1,mem_patch34
+	fetch 2, mem_key_value_temp
+	copy regb,queue
+	qsetflag true,pdata
+	store 2, mem_key_value_temp
+	increase KEY_CONF_STRUCT_LEN,rega
+	increase 1,regb
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_scan_key_lp1_next:
+	ixor regb,null
+	nbranch keyscan_scan_key_lp1,zero
+	fetch 2,mem_key_value_temp
+	fetcht 2,mem_key_value
+	ixor temp,null
+	rtn zero
+	enable user
+	rtn
+
+keyscan_process_lpm_before:
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_process_lpm_before_next:
+	rtn blank
+	copy pdata,loopcnt
+	fetch 2,mem_keyscan_ptr 
+	increase 3,pdata	//mem_key_conf0_pin
+	copy pdata,rega
+keyscan_process_lpm_before_lp1:
+	ifetcht 1, rega
+	call gpio_set_wake_by_current_state
+	increase KEY_CONF_STRUCT_LEN,rega
+	loop keyscan_process_lpm_before_lp1
+keyscan_process_lpm_before_end:
+	rtn
+
+keyscan_key_process:
+	arg key_scan_timer,queue
+	call timer_check
+	nrtn blank
+	setarg 0x20
+	arg key_scan_timer,queue
+	call timer_init
+	disable user
+	call keyscan_process_lpm_before
+	bpatchx patch34_2,mem_patch34
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_key_process_next:
+	rtn blank
+	call keyscan_scan_key
+	nbranch lpm_button_clean_wake_lock,user
+	call lpm_button_get_wake_lock
+	disable user
+	fetch 2, mem_key_value_temp
+	store 2,mem_key_value_temp4
+	jam 0,mem_key_value_temp6
+	force 0,queue
+keyscan_key_lp1:
+	fetch 2, mem_key_value
+	rshift pdata,temp
+	storet 2,mem_key_value
+	and pdata,0x01,pdata
+	fetcht 2, mem_key_value_temp4
+	and temp,0x01,rega
+	rshift temp,temp
+	storet 2,mem_key_value_temp4
+	ixor rega,null
+	ncall keyscan_send_key_data,zero
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_key_lp1_next:
+	fetcht 1, mem_key_value_temp6
+	increase 1,temp
+	storet 1, mem_key_value_temp6
+	copy temp,queue
+	ixor queue,null
+	nbranch keyscan_key_lp1,zero
+	fetch 2,mem_key_value_temp
+	store 2, mem_key_value
+	rtn
+keyscan_send_key_data:
+	bpatchx patch34_3,mem_patch34
+	fetch 2,mem_keyscan_ptr
+	increase 1,pdata
+	ifetch 2,pdata
+	branch callback_func
+
+
+/*************************************pwm*************************************/
+
+//rega:clk select(0:system clk; 1:system clk undivied; 2:lpo)
+/*rega:clk select
+			0x00:select system clock 12M;
+			0x40:select undivied system clock 24M/48M;
+			0x80:select lpo clock:33K
+*/
+pwm_init:
+	hfetch 1,core_clksel
+	ior rega,pdata
+	hstore 1,core_clksel
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_PWM,pdata
+	hstore 2,core_clkoff
+	nop 100
+	rtn
+
+/*	typedef struct
+*	{
+*		uint8 gpio_num
+*		uint8 pwm_channel
+*		uint24 frequency
+*		uint8 duty_cycle   //0-100
+*	}PWM_Style;
+	addr: mem_pdatatemp
+*/
+pwm_out_set:
+	fetcht 3,mem_pdatatemp+2
+	setarg PWM_12MHZ
+	idiv temp
+	call wait_div_end
+	quotient temp
+	fetch 1,mem_pdatatemp+5
+	imul32 temp,pdata
+	div pdata,100
+	call wait_div_end
+	quotient rega
+	copy temp,pdata
+	isub rega,regb	
+	fetch 1,mem_pdatatemp+1
+	call pwm_duty_cycle_set
+	fetch 1,mem_pdatatemp
+	branch pwm_enable
+
+//rega:pcnt ;regb:ncnt ;pdata:pwm channel select
+pwm_duty_cycle_set:
+	beq 0,pwm_pwm0_duty_set
+	beq 1,pwm_pwm1_duty_set
+	beq 2,pwm_pwm2_duty_set
+	beq 3,pwm_pwm3_duty_set
+	beq 4,pwm_pwm4_duty_set
+	beq 5,pwm_pwm5_duty_set
+pwm_pwm0_duty_set:
+	arg core_pwm_pcnt0,contw
+	branch pwm_set_pncnt
+pwm_pwm1_duty_set:
+	arg core_pwm_pcnt1,contw
+	branch pwm_set_pncnt
+pwm_pwm2_duty_set:
+	arg core_pwm_pcnt2,contw
+	branch pwm_set_pncnt
+pwm_pwm3_duty_set:
+	arg core_pwm_pcnt3,contw
+	branch pwm_set_pncnt
+pwm_pwm4_duty_set:
+	arg core_pwm_pcnt4,contw
+	branch pwm_set_pncnt
+pwm_pwm5_duty_set:
+	arg core_pwm_pcnt5,contw
+	branch pwm_set_pncnt
+pwm_set_pncnt:
+	copy rega,pdata
+	istore 2,contw
+	copy regb,pdata
+	istore 2,contw
+	rtn
+
+
+//pdata:gpio select
+pwm_enable:
+	enable user
+	branch pwm_gpio_set
+pwm_disable:
+	disable user
+pwm_gpio_set:
+	beq 4,pwm_gpio4_set
+	beq 5,pwm_gpio5_set
+	beq 27,pwm_gpio27_set
+	beq 28,pwm_gpio28_set
+	beq 3,pwm_gpio3_set
+	beq 8,pwm_gpio8_set
+	beq 20,pwm_gpio20_set
+	beq 21,pwm_gpio21_set
+	beq 22,pwm_gpio22_set
+	beq 23,pwm_gpio23_set
+	rtn
+
+
+pwm_gpio4_set:	//pwm 0
+	arg 6,queue
+	branch pwm_one_set_select
+pwm_gpio5_set:	//pwm 1
+  	arg 7,queue
+	branch pwm_one_set_select
+pwm_gpio27_set:	//pwm 2
+  	arg 8,queue
+	branch pwm_one_set_select
+pwm_gpio28_set:	//pwm 3
+	arg 9,queue
+	branch pwm_one_set_select
+pwm_gpio3_set:	//pwm 4
+ 	arg 10,queue
+	branch pwm_one_set_select
+pwm_gpio8_set:	//pwm 5
+  	arg 11,queue
+	branch pwm_one_set_select
+pwm_gpio20_set:	//pwm 0
+  	arg 12,queue
+	branch pwm_tw0_set_select
+pwm_gpio21_set:	//pwm 1
+  	arg 13,queue
+	branch pwm_tw0_set_select
+pwm_gpio22_set:	//pwm 2
+   	arg 14,queue
+	branch pwm_tw0_set_select
+pwm_gpio23_set:	//pwm 3
+    	arg 15,queue
+	branch pwm_tw0_set_select
+
+pwm_set_select:
+	hfetch 2,core_gpio_sel1
+	qsetflag user,pdata
+	hstore 2,core_gpio_sel1
+	copy rega,queue
+	hfetch 1,core_gpio_key2
+   	qsetflag user,pdata
+   	hstore 1,core_gpio_key2
+	rtn
+
+pwm_one_set_select:
+	add queue,-4,rega
+	branch pwm_set_select
+
+pwm_tw0_set_select:
+	add queue,-10,rega
+	branch pwm_set_select
+
+
+	
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/rfcomm.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/rfcomm.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/rfcomm.prog	(working copy)
@@ -0,0 +1,960 @@
+
+ifdef COMPILE_RFCOMM
+rfcomm_init:
+	rtn wake
+	jam 0,mem_rfcomm_send_more_pkt
+	jam BITS9600,memRemoteRPNBitRate        
+	jam DATABITS8,memRemotePRNDataBits      
+	jam 0x11,memRemotePRNXon
+	jam 0x13,memRemotePRNXoff
+	setarg 0
+	store 3,memRemotePRNStopBit
+	store 1,mem_spp_state                  
+	jam 0,memui_reconnect_mode
+	//branch rfcomm_init_spp
+rfcomm_init_spp:
+	bpatchx patch34_4,mem_patch34
+	setarg 0
+	store 1,mem_spp_state
+	store 1,mem_remote_spp_channel
+	store 1,mem_pn_dlci
+	fetch 1,mem_credit_flag
+	beq CREDIT_ENABLE,rfcomm_init_spp_with_credit
+	jam 0x50,mem_credit_given
+	rtn
+
+rfcomm_init_spp_with_credit:
+	jam 0x00,mem_credit_given
+	rtn
+
+set_CR_bit:
+	or_into 0x02,temp
+	rtn
+
+
+/*below added by koufan*/
+
+/*rfcomm_send */
+
+
+
+	/*rfcomm_calculate_FCS_sabm*/
+	/*input: address in temp*/
+	/*output: FCS in pdata  */
+rfcomm_calculate_FCS_sabm:
+	copy temp,pdata
+	reverse pdata,pdata //address
+	store 1,memFCStemp3
+	force INI_TX_SABM,pdata
+	reverse pdata,pdata
+	store 1,memFCStemp2
+	force 0x01,pdata                        
+	reverse pdata,pdata
+	store 1,memFCStemp1
+	call caculate_fcs
+	copy temp,pdata                        
+	rtn
+rfcomm_calculate_FCS_ua:
+	reverse pdata,pdata //address
+	store 1,memFCStemp3
+	force   RSP_TX_UA, pdata
+	reverse pdata, pdata
+	store   1, memFCStemp2
+	force   0x01, pdata
+	reverse pdata, pdata
+	store   1, memFCStemp1
+	branch caculate_fcs
+	/* FCS return from temp                */
+rfcomm_calculate_FCS_dlci0:
+	fetch 1,mem_rfcomm_initiator
+	branch rfcomm_calculate_FCS_dlci0_res,blank
+	setarg 0x70 //FCS of initiator
+	rtn
+rfcomm_calculate_FCS_dlci0_res:
+	setarg 0xaa//FCS of responder
+	rtn
+	
+rfcomm_save_FCS_uih:
+	reverse pdata, pdata //address 
+	store 1,memFCStemp3                     /* contw distroided                    */
+	force RSP_RX_UIH,pdata 
+	call caculate_UIHdata_fcs
+	fetcht 2,mem_contw_temp
+	copy temp,contw
+	istore 1,contw                      /* save FCS for later use              */
+	copy contw,temp
+	storet 2,mem_contw_temp
+	force RSP_RX_UIH_WDATA,pdata             /* P/F =1 + RSP_RX_UIH                 */
+	call caculate_UIHdata_fcs
+	fetcht 2,mem_contw_temp
+	copy temp,contw
+	istore 1,contw             /* save FCS for later use              */
+	rtn	
+/**********************************************************************/
+/* This subroutine caculates the FCS for UIH data                     */
+/* Input:                                                             */
+/*        the address byte at memFCStemp3(bit reversed), control byte */
+/*        at pdata (not bit reversed)                                 */
+/* Output:                                                            */
+/*        pdata: the FCS                                              */
+/**********************************************************************/  
+caculate_UIHdata_fcs:
+	reverse pdata,pdata
+	store   1,memFCStemp2
+	fetch   2, memFCStemp2                     
+	lshift8 pdata,pdata
+	store 3,mem_mod2div_temp
+	arg     0x107,regA
+	arg 0xf,regB
+	call mod2div
+	xor_into     0xd7, pdata
+	invert  pdata,pdata
+	reverse pdata,pdata
+	rtn
+	
+/**********************************************************************/
+/* This subroutine caculates the FCS                                  */
+/* Input:                                                             */
+/*        the address byte at memFCStemp3, control byte at memFCStemp2*/  
+/*        lenght at memFCStemp1 (all above data are bit reversed)     */
+/* Output:                                                            */
+/*        temp: the FCS                                               */
+/**********************************************************************/     
+caculate_fcs:
+	fetch 3, memFCStemp1                    /* load 3 bytes start at memFCStemp1   */
+	store 3,mem_mod2div_temp
+	arg 0x107,regA
+	arg 0xf,regB  //24bit(memFCStemp1+..+memFCStemp3) - 9bit(regA) = 15bit
+	call mod2div
+	lshift8 pdata,pdata 
+	arg 0x7, regB  //16bit(lshift8 pdata,pdata ) - 9bit(regA) = 7bit
+	call mod2div
+	xor_into     0x2b, pdata		//0x3d
+	invert  pdata, pdata                        
+	reverse pdata, pdata                      /* FCS at pdata                        */
+	copy    pdata, temp
+	rtn
+
+mod2div:
+	arg 0,regC
+	copy regB,loopcnt
+	call right_shift_n // right shift pdata (regB)bit
+	icopy temp
+mod2div_loop:
+	//jam 1,0x1fff
+//mod2div_loop1:
+	//fetch 1,0x1fff
+	//nbranch mod2div_loop1,blank
+	copy temp,pdata
+	lshift regC,regC//quotient
+	bbit0 8, mod2div_not_enough_reduction//the high bit of 0x107
+	ixor regA,temp// temp----remainer
+	increase 1,regC// quotient
+mod2div_not_enough_reduction: //Minuend smaller than Subtrahend
+	lshift temp,temp
+	fetch 3,mem_mod2div_temp
+	increase -1,regB
+	compare 0xff,regB,0xff
+	branch mod2div_end,true
+	copy regB,loopcnt
+	call right_shift_n // right shift pdata (regB)bit
+	isolate1 0,pdata
+	setflag true,0,temp //move a new bit from Dividend(queue) into Minuend(pdata)
+	branch mod2div_loop
+mod2div_end:
+	//output:remainer in pdata
+	rshift  temp,pdata
+	rtn
+
+get_rfcomm_snd_adss:
+	fetcht 1,mem_pn_dlci
+dlci_to_address_cmd:
+	//input DLCI from temp
+	lshift2 temp,temp
+	set1 RFCOMM_ADDRESS_EXT_LEN,temp
+	fetch 1,mem_rfcomm_initiator
+	ncall set_CR_bit,blank
+	storet 1,mem_rfcomm_send_adss
+	rtn
+
+channel_to_dlci:
+	//input channel from temp
+	lshift temp,temp
+	fetch 1,mem_rfcomm_initiator
+	setflag blank,0,temp //direction in dlci
+	//output dlci to temp
+	rtn
+rfcomm_rx_process_DLCI0_sabm:
+	fetcht 1,mem_current_channel //address
+	jam 0xd7,mem_current_fcs //FCS
+	call rfcomm_send_ua
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_RFCOMM_ONLY_SABM,pdata
+	set1 L2CAP_CHANNEL_RFCOMM_ONLY_UA,pdata
+	store 1,mem_rfcomm_state
+	jam 0,mem_rfcomm_initiator
+	branch rfcomm_rx_process_end
+rfcomm_rx_process_DLCI0_ua:
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_RFCOMM_ONLY_UA,pdata
+	store 1,mem_rfcomm_state
+	branch rfcomm_rx_process_end
+
+	
+rfcomm_rx_process:
+	bpatchx patch34_5,mem_patch34
+	fetch 1,memui_reconnect_mode
+	beq NO_RECONNECTION,rfcomm_rx_process_remote_page
+	branch rfcomm_rx_process_reconn
+
+rfcomm_rx_process_remote_page:
+	fetch 2,mem_l2cap_payload_ptr
+	copy pdata,contr
+	call get_rfcomm_head_struct
+	fetch 1,mem_current_channel
+	beq 0,parse_dlci0_rp
+	branch parse_uih_rp
+parse_dlci0_rp:
+	bpatchx patch34_6,mem_patch34
+	fetch 1,mem_current_frame_type
+	beq RFCOMM_FRAME_TYPE_SABM,rfcomm_rx_process_DLCI0_sabm
+	beq RFCOMM_FRAME_TYPE_UA,rfcomm_rx_process_DLCI0_ua
+	beq RFCOMM_FRAME_TYPE_UIH,parse_DLCI0_rp_uih
+	beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_rp_spp_disconn_send_event
+	rtn
+
+
+parse_DLCI0_rp_uih:
+	fetch 2,mem_rfcomm_uih_payload_ptr
+	copy pdata,contr
+	call get_rfcomm_uih_head_struct
+	fetch 1,mem_uih_cmd_type
+	beq UIH_PARAM_NEG_CMD,parse_DLCI0_rp_uih_pn_cmd
+	beq UIH_PARAM_NEG_RES,parse_DLCI0_rp_uih_pn_res
+	beq UIH_MODEM_STATUS_CMD,parse_DLCI0_rp_uih_ms_cmd
+	beq UIH_MODEM_STATUS_RES,parse_DLCI0_rp_uih_ms_res
+	beq UIH_PARAM_CMD_REMOVE_PORT,parse_DLCI0_rp_uih_cmd_port	
+	branch rfcomm_rx_process_end
+	
+parse_DLCI0_rp_uih_pn_cmd:
+	call parse_DLCI0_rp_uih_pn_res_common
+
+	branch parse_DLCI0_rp_uih_pn_cmd_spp
+
+parse_DLCI0_rp_uih_pn_cmd_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_PN_CMD,pdata
+	set1 RFCOMM_CHANNEL_STATE_PN_RES,pdata
+	store 1,mem_spp_state
+	call rfcomm_send_param_neg_res
+	branch rfcomm_rx_process_end
+	
+parse_DLCI0_rp_uih_pn_res:
+	call parse_DLCI0_rp_uih_pn_res_common
+	branch rfcomm_rx_process_end
+
+parse_DLCI0_rp_uih_pn_res_common:
+	call get_param_payload_ptr
+	branch  get_rfcomm_prarmer_negotiation
+
+get_rfcomm_param_modem_status:
+	call get_param_payload_ptr
+	ifetch 1,contr
+	rshift3 pdata,pdata
+	store 1,mem_ms_channel
+	ifetch 1,contr
+	store 1,mem_ms_param
+	rtn
+
+
+get_rfcomm_head_struct:
+	ifetch 1,contr
+	store 1,mem_current_adss
+	rshift3 pdata,pdata
+	store 1,mem_current_channel
+	ifetch 1,contr
+	store 1,mem_current_frame_type
+get_rfcomm_current_length:
+	call get_rfcomm_length_common
+	storet 2,mem_current_length
+	copy contr,pdata
+	store 2,mem_rfcomm_uih_payload_ptr
+	rtn
+
+get_rfcomm_uih_head_struct:
+	ifetch 1,contr
+	rshift pdata,pdata
+	store 1,mem_uih_cmd_type
+	call get_rfcomm_length_common
+	storet 2,mem_uih_length
+	copy contr,pdata
+	store 2,mem_param_payload_ptr
+	rtn
+
+
+get_param_payload_ptr:
+	fetch 2,mem_param_payload_ptr
+	copy pdata,contr
+	rtn
+
+get_rfcomm_length_common:
+	ifetch 1,contr
+	copy pdata,temp
+	rshift temp,temp
+	rtnbit1 0
+	ifetch 1,contr
+	lshift3 pdata,pdata
+	lshift4 pdata,pdata
+	iadd temp,temp
+	rtn
+
+get_rfcomm_prarmer_negotiation:
+	ifetch 1,contr
+	store 1,mem_pn_dlci
+	ifetch 1,contr
+	store 1,mem_pn_credit_flow_type_info
+	ifetch 1,contr
+	store 1,mem_pn_priority
+	ifetch 1,contr
+	store 1,mem_pn_acknowledg_timer
+	ifetch 2,contr
+	store 2,mem_pn_max_frame_size
+	ifetch 1,contr
+	store 1,mem_pn_max_retrans
+	ifetch 1,contr
+	store 1,mem_remote_credits
+	rtn
+
+
+parse_DLCI0_rp_uih_ms_cmd:
+	call get_rfcomm_param_modem_status
+
+	branch parse_DLCI0_rp_uih_ms_cmd_spp
+
+parse_DLCI0_rp_uih_ms_cmd_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_RCV_MS_CMD,pdata
+	set1 RFCOMM_CHANNEL_STATE_SND_MS_RES,pdata
+	store 1,mem_spp_state
+	fetcht 1,mem_pn_dlci
+	lshift2 temp,temp
+	or_into 3,temp
+	call rfcomm_send_modem_status_res
+	jam MORE_PKT_MSC_CMD_SPP,mem_rfcomm_send_more_pkt
+	branch rfcomm_rx_process_end
+	
+parse_DLCI0_rp_uih_ms_res:
+	jam BT_EVT_SPP_CONNECTED,mem_fifo_temp
+	call ui_ipc_send_event
+	call get_rfcomm_param_modem_status
+	fetch 1,mem_ms_channel
+	sub pdata,1,null
+	branch parse_DLCI0_rp_uih_MS_RES_spp,zero
+	branch assert
+parse_DLCI0_rp_uih_ms_res_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_RCV_MS_RES,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+
+parse_DLCI0_rp_uih_cmd_port:
+	call get_param_payload_ptr
+	ifetch 1,contr
+	store 1,mem_rpn_dlci
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x000e
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_rfcomm_initiator
+	//setarg 5
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch34_7,mem_patch34
+	setarg 0x15ef
+	istore 2,contw
+	setarg 0x1191
+	istore 2,contw
+	//fetch 1,mem_pn_dlci
+	//setarg 0x0b
+	fetch 1,mem_rpn_dlci
+	istore 1,contw //DLCI
+	setarg 0x000007
+	istore 5,contw
+//	setarg 0 //max frame size
+//	istore 2,contw 
+	setarg 0x01 //max retrans
+	istore 2,contw
+//	setarg 0x00
+//	istore 1,contw // init credits
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	rtn
+
+
+
+parse_uih_rp:
+	branch parse_uih_rp_spp
+
+parse_uih_rp_spp:
+	bpatchx patch35_0,mem_patch35
+	fetch 1,mem_current_frame_type
+	beq RFCOMM_FRAME_TYPE_UA,parse_uih_rp_spp_ua
+	beq RFCOMM_FRAME_TYPE_SABM,parse_uih_rp_spp_sabm
+	beq RFCOMM_FRAME_TYPE_UIH,parse_uih_spp_uih
+	beq RFCOMM_FRAME_TYPE_UIH_CREDITS,parse_uih_spp_uih_credits
+	beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_rp_spp_disconn
+	rtn
+parse_uih_rp_spp_ua:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_UA,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+parse_uih_rp_spp_sabm:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_UA,pdata
+	set1 RFCOMM_CHANNEL_STATE_SABM,pdata
+	store 1,mem_spp_state
+	fetch 1,mem_current_adss
+	call rfcomm_calculate_FCS_ua
+	store 1,mem_current_fcs
+	call rfcomm_send_ua
+	fetch 1,mem_current_adss
+	rshift2 pdata,pdata
+	store 1,mem_pn_dlci
+	lshift2 pdata,pdata
+	set0 RFCOMM_ADDRESS_CR,pdata
+	set1 RFCOMM_ADDRESS_EXT_LEN,pdata 
+	arg mem_HIUfcs_spp,temp // mem_HIUfcs_HF_WCredits in regB++
+	storet 2,mem_contw_temp
+	call rfcomm_save_FCS_uih
+	branch rfcomm_rx_process_end
+	
+parse_uih_spp_uih_credits:
+	fetch 2,mem_rfcomm_uih_payload_ptr
+	copy pdata,contr
+	increase 1,pdata
+	store 2,mem_rfcomm_uih_payload_ptr
+	ifetch 1,contr //remote credits
+	fetcht 1,mem_remote_credits
+	iadd temp,pdata
+	store 1,mem_remote_credits
+parse_uih_spp_uih:
+	call rfcomm_increase_credit_given
+parse_uih_spp_uih_cont:
+	call get_rfcomm_snd_adss
+	call rfcomm_send_uih_without_payload
+	call spp_process_rx_data
+	branch rfcomm_rx_process_end
+
+parse_uih_rp_spp_disconn_send_event:
+	jam BT_EVT_SPP_DISCONNECTED,mem_fifo_temp
+	call ui_ipc_send_event	
+parse_uih_rp_spp_disconn:
+	call rfcomm_init_spp
+	fetch 1,mem_current_adss
+	call rfcomm_calculate_FCS_ua
+	store 1,mem_current_fcs
+	call rfcomm_send_ua
+	branch rfcomm_rx_process_end
+	
+///////////////////////////////////////////
+///////////////////////////////////////////
+///////////////////////////////////////////
+rfcomm_rx_process_reconn:
+	fetch 2,mem_l2cap_payload_ptr
+	copy pdata,contr
+	call get_rfcomm_head_struct
+	fetch 1,mem_current_channel
+	beq 0,parse_DLCI0_reconn
+	branch parse_uih_reconn
+		
+parse_DLCI0_reconn:
+	bpatchx patch35_1,mem_patch35
+	fetch 1,mem_current_frame_type
+	beq RFCOMM_FRAME_TYPE_SABM,rfcomm_rx_process_DLCI0_sabm
+	beq RFCOMM_FRAME_TYPE_UA,rfcomm_rx_process_DLCI0_ua
+	beq RFCOMM_FRAME_TYPE_UIH,parse_DLCI0_reconn_uih
+	branch rfcomm_rx_process_end
+parse_DLCI0_reconn_uih:
+	fetch 2,mem_rfcomm_uih_payload_ptr
+	copy pdata,contr
+	call get_rfcomm_uih_head_struct
+	fetch 1,mem_uih_cmd_type
+	beq UIH_PARAM_NEG_CMD,parse_DLCI0_reconn_uih_pn_cmd
+	beq UIH_PARAM_NEG_RES,parse_DLCI0_reconn_uih_pn_cmd
+	beq UIH_MODEM_STATUS_CMD,parse_DLCI0_reconn_uih_ms_cmd
+	beq UIH_MODEM_STATUS_RES,parse_DLCI0_reconn_uih_ms_res
+	branch rfcomm_rx_process_end
+
+parse_DLCI0_reconn_uih_pn_cmd:
+	call parse_DLCI0_rp_uih_pn_res_common
+	fetch 1,mem_pn_dlci
+	rshift pdata,pdata
+	fetcht 1,mem_remote_spp_channel
+	isub temp,null
+	branch parse_DLCI0_reconn_uih_pn_cmd_spp,zero
+	branch assert
+parse_DLCI0_reconn_uih_pn_cmd_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_PN_RES,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+
+parse_DLCI0_reconn_uih_ms_cmd:
+	call get_rfcomm_param_modem_status
+	fetch 1,mem_ms_channel
+	fetcht 1,mem_remote_spp_channel
+	isub temp,null
+	branch parse_DLCI0_reconn_uih_ms_cmd_spp,zero
+	branch assert
+	branch rfcomm_rx_process_end
+parse_DLCI0_reconn_uih_ms_cmd_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_RCV_MS_CMD,pdata
+	set1 RFCOMM_CHANNEL_STATE_SND_MS_RES,pdata
+	store 1,mem_spp_state
+	fetcht 1,mem_pn_dlci
+	lshift2 temp,temp
+	or_into 3,temp
+	call rfcomm_send_modem_status_res
+	branch rfcomm_rx_process_end
+	
+parse_DLCI0_reconn_uih_ms_res:
+	call get_rfcomm_param_modem_status
+	fetch 1,mem_ms_channel
+	fetcht 1,mem_remote_spp_channel
+	isub temp,null
+	branch parse_DLCI0_reconn_uih_ms_res_spp,zero
+	branch assert
+parse_DLCI0_reconn_uih_ms_res_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_RCV_MS_RES,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+
+parse_uih_reconn:
+	fetch 1,mem_current_channel
+	fetcht 1,mem_remote_spp_channel
+	isub temp,null
+	branch parse_uih_reconn_spp,zero
+	branch assert
+	branch rfcomm_rx_process_end
+
+parse_uih_reconn_spp:
+	fetch 1,mem_current_frame_type
+	beq RFCOMM_FRAME_TYPE_UA,parse_uih_reconn_spp_ua
+	beq RFCOMM_FRAME_TYPE_UIH,parse_uih_spp_uih
+	beq RFCOMM_FRAME_TYPE_UIH_CREDITS,parse_uih_spp_uih_credits
+	beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_reconn_spp_disconn
+parse_uih_reconn_spp_ua:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_UA,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+parse_uih_reconn_spp_sabm:
+	branch parse_uih_reconn_spp_sabm//loop
+parse_uih_reconn_spp_disconn:
+	branch parse_uih_rp_spp_disconn
+rfcomm_rx_process_end:
+	rtn
+	
+rfcomm_send_more_pkt:
+	fetch 1,mem_rfcomm_send_more_pkt
+	rtn blank
+	beq MORE_PKT_MSC_CMD_SPP,rfcomm_send_more_pkt_msc_cmd_spp
+	branch assert
+	
+rfcomm_send_more_pkt_msc_cmd_spp:
+	jam 0,mem_rfcomm_send_more_pkt
+	call l2cap_malloc_rfcomm_channel
+	arg SPP_SLAVE_CHANNEL,temp
+	fetcht 1,mem_pn_dlci
+	lshift2 temp,temp
+rfcomm_send_more_pkt_msc_cmd_spp0:
+	or_into 0x03,temp
+	arg 0xaa,regA
+	call rfcomm_send_modem_status_cmd
+	call l2cap_get_rfcomm_tx_buff
+	copy contw,contr
+	ifetch 2, contr
+	branch assert,blank
+	rtn
+
+rfcomm_send_sabm:
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x0004
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_current_adss
+	istore 1,contw //address
+	bpatchx patch35_2,mem_patch35
+	setarg 0x013f
+	istore 2,contw
+	fetch 1,mem_current_fcs
+	istore 1,contw
+	rtn
+rfcomm_send_ua:
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x0004
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_current_adss
+	istore 1,contw //address
+	bpatchx patch35_3,mem_patch35
+	setarg 0x0173
+	istore 2,contw
+	fetch 1,mem_current_fcs
+	istore 1,contw
+	rtn
+rfcomm_send_param_neg_cmd:
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x000e
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_rfcomm_initiator
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch35_4,mem_patch35
+	setarg 0x15ef
+	istore 2,contw
+	setarg 0x1183
+	istore 2,contw
+	copy temp,pdata //DLCI in temp
+	istore 1,contw
+	setarg 0x0000f0
+	istore 3,contw
+	setarg RFCOMM_MAX_FRAME_SIZE
+	istore 2,contw
+	setarg 0
+	istore 1,contw
+	setarg 0x01		//change here later
+	istore 1,contw
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	jam 0x10,mem_credit_given
+	rtn
+rfcomm_send_param_neg_res:
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x000e
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_rfcomm_initiator
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch35_5,mem_patch35
+	setarg 0x15ef
+	istore 2,contw
+	setarg 0x1181
+	istore 2,contw
+	fetch 1,mem_pn_dlci
+	istore 1,contw //DLCI
+	setarg 0x0000e0
+	istore 3,contw
+	fetch 2,mem_rfcomm_max_frame_size
+	istore 2,contw 
+	setarg 0x00 //max retrans
+	istore 1,contw
+	fetch 1,mem_rfcomm_credit_init_data
+	istore 1,contw // init credits
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	rtn
+rfcomm_send_modem_status_cmd:
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x0008
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_rfcomm_initiator
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch35_6,mem_patch35
+	setarg 0x09ef
+	istore 2,contw
+	setarg 0x05e3
+	istore 2,contw
+	copy temp,pdata //DLCI adress
+	istore 1,contw
+	setarg 0x8d
+	istore 1,contw
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	rtn
+
+rfcomm_send_modem_status_res:
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x0008
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	copy temp,timeup
+	fetch 1,mem_rfcomm_initiator
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch35_7,mem_patch35
+	setarg 0x09ef
+	istore 2,contw
+	setarg 0x05e1
+	istore 2,contw
+	copy timeup,pdata //DLCI address in temp
+	istore 1,contw
+	setarg 0x8d
+	istore 1,contw
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	rtn
+
+rfcomm_send_uih_without_payload:
+	bpatchx patch36_0,mem_patch36
+	fetch 1,mem_credit_given
+	rtn blank
+	hfetch 2,core_uart_rxitems
+	nrtn blank
+	copy rega,pdata
+	store 1,mem_pdatatemp+1
+	storet 1,mem_pdatatemp
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x05
+	istore 2,contw
+	fetch 2,mem_RFCOMM_remote_CID
+	istore 2,contw
+	fetch 1,mem_rfcomm_send_adss
+	istore 1,contw
+	setarg 0x01ff
+	istore 2,contw
+	fetch 1,mem_credit_given
+	istore 1,contw
+	fetch 1,mem_HIUfcs_SPP_WCredits
+	istore 1,contw
+	jam 0,mem_credit_given
+	rtn
+	
+rfcomm_increase_credit_given:
+	bpatchx patch36_1,mem_patch36
+	fetch 1,mem_credit_flag
+	rtneq CREDIT_ENABLE
+	fetch 2,mem_current_length
+	rtn blank
+	fetch 1,mem_credit_given
+	increase 1,pdata
+	store 1,mem_credit_given
+	rtn
+
+spp_process_rx_data:
+	fetch 2,mem_cb_receive_spp_data
+	branch callback_func
+
+spp_tx_rfcomm_packet:
+	bpatchx patch36_2,mem_patch36
+	//credit
+	fetch 1,mem_remote_credits
+	rtn blank
+	increase -1,pdata
+	store 1,mem_remote_credits
+	fetch 2,mem_pn_max_frame_size
+	fetcht 2,mem_current_packet_length
+	isub temp,null
+	branch ssp_tx_rfcomm_from_uart,positive
+	store 2,mem_current_packet_length
+ssp_tx_rfcomm_from_uart:
+	fetch 1,mem_credit_given
+	branch ssp_tx_rfcomm_from_uart_without_credit,blank
+	jam 1,mem_rfcomm_send_offset
+	fetch 1,mem_HIUfcs_SPP_WCredits
+	store 1,mem_rfcomm_send_fcs
+	setarg RSP_RX_UIH_WDATA
+	store 1,mem_rfcomm_send_frame_type
+	branch ssp_tx_rfcomm_from_uart_common
+ssp_tx_rfcomm_from_uart_without_credit:
+	jam 0,mem_rfcomm_send_offset
+	fetch 1,mem_HIUfcs_SPP
+	store 1,mem_rfcomm_send_fcs
+	setarg RSP_TX_UIH
+	store 1,mem_rfcomm_send_frame_type
+ssp_tx_rfcomm_from_uart_common:
+	bpatchx patch36_3,mem_patch36
+	fetch 2,mem_current_packet_length
+	sub pdata,127,null
+	branch ssp_tx_rfcomm_from_uart_common0,positive
+	fetch 1,mem_rfcomm_send_offset
+	increase 1,pdata
+	store 1,mem_rfcomm_send_offset
+ssp_tx_rfcomm_from_uart_common0:
+	call get_rfcomm_snd_adss
+	fetch 2,mem_current_packet_length
+	increase 8,pdata	//fcs + rfcommhead + l2caphead == 8
+	fetcht 1,mem_rfcomm_send_offset
+	iadd temp,rega
+	//rfcomm payload
+	call l2cap_malloc
+	store 2,mem_rfcomm_tx_buff_ptr
+	increase 4,pdata
+	store 2,mem_rfcomm_tx_payload_ptr
+	copy pdata,contw
+	fetch 1,mem_rfcomm_send_adss
+	istore 1,contw
+	fetch 1,mem_rfcomm_send_frame_type
+	istore 1,contw
+	call ssp_tx_write_length
+	call ssp_tx_write_given_credit
+	bpatchx patch36_4,mem_patch36
+	fetch 2,mem_nl_rx_data_src		//src
+	copy pdata,contru
+	fetch 2,mem_current_packet_length
+	copy pdata,loopcnt
+	call uart_copy_rx_bytes_fast
+	copy contw,temp
+	copy contru,pdata
+	store 2,mem_nl_rx_data_src
+	copy temp,contw	
+	fetch 1,mem_rfcomm_send_fcs
+	istore 1,contw
+	fetch 2,mem_rfcomm_tx_buff_ptr
+	copy pdata,contw
+	fetch 2,mem_current_packet_length
+	fetcht 1,mem_rfcomm_send_offset
+	iadd temp,pdata
+	increase 4,pdata
+	istore 2,contw
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw
+	jam 0,mem_credit_given	//whatever mem_credit_given is set to 0
+	fetch 2,mem_nl_rx_len_all
+	beq 0,module_hci_command_tx_spp_tx_complete
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	rtn
+
+ssp_tx_write_length:
+	bpatchx patch36_5,mem_patch36
+	fetch 2,mem_current_packet_length
+	sub pdata,0x7f,null
+	nbranch ssp_tx_write_long_packet,positive
+	lshift pdata,pdata
+	set1 0,pdata
+	istore 1,contw
+	rtn
+ssp_tx_write_long_packet:
+	fetch 2,mem_current_packet_length
+	rshift3 pdata,pdata
+	rshift4 pdata,temp
+	and_into 0x7f,pdata
+	lshift pdata,pdata
+	set0 0,pdata
+	istore 1,contw
+	istoret 1,contw
+	rtn
+ssp_tx_write_given_credit:
+	fetch 1,mem_credit_given
+	rtn blank
+	istore 1,contw
+	rtn
+
+	
+
+
+else
+
+rfcomm_init:
+	rtn
+rfcomm_init_spp:
+set_CR_bit:
+rfcomm_calculate_FCS_sabm:
+rfcomm_calculate_FCS_ua:
+rfcomm_calculate_FCS_dlci0:
+rfcomm_calculate_FCS_dlci0_res:
+rfcomm_save_FCS_uih:
+caculate_UIHdata_fcs:
+caculate_fcs:
+mod2div:
+mod2div_loop:
+mod2div_not_enough_reduction:
+mod2div_end:
+get_rfcomm_snd_adss:
+dlci_to_address_cmd:
+dlci_to_address_res:
+channel_to_dlci:
+rfcomm_rx_process_DLCI0_sabm:
+rfcomm_rx_process_DLCI0_ua:
+rfcomm_rx_process:
+rfcomm_rx_process_remote_page:
+parse_dlci0_rp:
+parse_DLCI0_rp_uih:
+parse_DLCI0_rp_uih_pn_cmd:
+parse_DLCI0_rp_uih_pn_cmd_spp:
+parse_DLCI0_rp_uih_pn_res:
+parse_DLCI0_rp_uih_pn_res_common:
+get_rfcomm_param_modem_status:
+get_rfcomm_head_struct:
+get_rfcomm_current_length:
+get_rfcomm_uih_head_struct:
+get_param_payload_ptr:
+get_rfcomm_param_length_common:
+get_rfcomm_length_common:
+get_rfcomm_prarmer_negotiation:
+parse_DLCI0_rp_uih_ms_cmd:
+parse_DLCI0_rp_uih_ms_cmd_spp:
+parse_DLCI0_rp_uih_ms_res:
+parse_DLCI0_rp_uih_ms_res_spp:
+parse_uih_rp:
+parse_uih_rp_spp:
+parse_uih_rp_spp_ua:
+parse_uih_rp_spp_sabm:
+parse_uih_spp_uih_credits:
+parse_uih_spp_uih:
+parse_uih_spp_uih_cont:
+parse_uih_rp_spp_disconn:
+rfcomm_rx_process_reconn:
+	branch assert 
+parse_DLCI0_reconn:
+parse_DLCI0_reconn_uih:
+parse_DLCI0_reconn_uih_pn_cmd:
+parse_DLCI0_reconn_uih_pn_cmd_spp:
+parse_DLCI0_reconn_uih_ms_cmd:
+parse_DLCI0_reconn_uih_ms_cmd_spp:
+parse_DLCI0_reconn_uih_ms_res:
+parse_DLCI0_reconn_uih_ms_res_noext:
+parse_DLCI0_reconn_uih_ms_res_spp:
+parse_uih_reconn:
+parse_uih_reconn_spp:
+parse_uih_reconn_spp_ua:
+parse_uih_reconn_spp_sabm:
+parse_uih_reconn_spp_disconn:
+rfcomm_rx_process_end:
+rfcomm_send_more_pkt:
+rfcomm_send_more_pkt_msc_cmd_spp:
+rfcomm_send_sabm:
+rfcomm_send_ua:
+rfcomm_send_param_neg_cmd:
+rfcomm_send_param_neg_res:
+rfcomm_send_modem_status_cmd:
+rfcomm_send_modem_status_res:
+rfcomm_send_uih_without_payload:
+rfcomm_increase_credit_given:
+spp_process_rx_data:
+spp_tx_rfcomm_packet:
+ssp_tx_rfcomm_from_uart:
+ssp_tx_rfcomm_from_uart_without_credit:
+ssp_tx_rfcomm_from_uart_common:
+ssp_tx_rfcomm_from_uart_common0:
+ssp_tx_write_length:
+ssp_tx_write_long_packet:
+ssp_tx_write_given_credit:
+	branch assert
+endif
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/scheduler.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/scheduler.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/scheduler.prog	(working copy)
@@ -0,0 +1,461 @@
+scheduler_process:
+	bpatchx patch36_6,mem_patch36
+	call check_51cmd
+	call app_process_bb_event
+	call process_conn_sm
+/* check the connection state sequence byte */
+	bpatchx patch36_7,mem_patch36
+ifdef SIMPLE_PAIRING
+	call sp_calc_sequence
+	call simple_pairing_sequence
+	call master_simple_paring_sequence
+endif
+//return if it is hci mode. 'cause the following is host part.
+//notify BB to tx a l2cap packet
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	//for conn to MTK 
+	call l2cap_call_proc_sigal_pending
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	bpatchx patch37_0,mem_patch37
+//to generat a new l2cap packet
+	call process_upper_sm
+	call l2cap_send_config_req
+ifdef COMPILE_RFCOMM
+	call rfcomm_send_more_pkt//use this function to send msc_cmd after msc_rep sent
+endif
+scheduler_process0:
+	call scheduler_tx_disconnect_hid //may not used
+	bpatchx patch37_1,mem_patch37
+//	call l2cap_malloc_is_fifo_full
+//	nrtn blank
+	branch app_process_bt
+	
+scheduler_tx_disconnect_hid:
+	fetch 1,mem_CONTROL_tasks		
+	bbit1 L2CAP_DISCONNECT_INTERRUPT,L2CAP_disconnect_interrupt_req
+	bbit1 L2CAP_DISCONNECT_CONTROL,L2CAP_disconnect_control_req
+	rtn
+	
+scheduler_tx_l2cap_pkt:
+	bpatchx patch37_2,mem_patch37
+	call l2cap_malloc_is_fifo_empty
+	rtn blank //empty
+	fetch 1,mem_op
+	rtnbit1 op_txl2cap
+	call l2cap_malloc_fifo_out
+	store 2,mem_txptr
+	copy pdata,contr
+	ifetch 2,contr
+	increase 4,pdata
+	store 2,mem_tx_len
+	jam 6,mem_tx_lch//start pkt
+	bpatchx patch37_3,mem_patch37
+	fetch 2,mem_l2cap_tx_multi_offset
+	branch scheduler_tx_l2cap_start_pkt,blank
+	fetch 1,mem_op
+	rtnbit0 op_pkt_comp
+	set0 op_pkt_comp,pdata
+	store 1,mem_op
+	jam 5,mem_tx_lch//continue pkt
+	fetcht 2,mem_l2cap_tx_multi_offset
+	fetch 2,mem_txptr
+	iadd temp,pdata
+	store 2,mem_txptr
+	fetch 2,mem_tx_len
+	isub temp,pdata
+	store 2,mem_tx_len
+scheduler_tx_l2cap_start_pkt:
+	bpatchx patch37_4,mem_patch37
+	fetch 2,mem_tx_len
+	branch assert,blank
+	arg l2cap_max_pkt_len,temp //max len of dh3 pkt
+	isub temp,pdata
+	nbranch scheduler_Tx_l2cap_last_pkt,positive
+	bpatchx patch37_5,mem_patch37
+	storet 2,mem_tx_len //l2cap_max_pkt_len
+	fetch 2,mem_l2cap_tx_multi_offset
+	iadd temp,pdata
+	store 2,mem_l2cap_tx_multi_offset
+	branch scheduler_Tx_l2cap_pkt_end
+scheduler_Tx_l2cap_last_pkt:
+	setarg 0
+	store 2,mem_l2cap_tx_multi_offset
+scheduler_Tx_l2cap_pkt_end:
+	fetch 1,mem_op
+	set1 op_txl2cap,pdata
+	store 1,mem_op
+	rtn
+
+scheduler_start_upper_sm:
+	fetch 1,mem_UI_profile_supported
+	bbit1 support_HID,scheduler_start_upper_sm_hid
+	jam UPPERSM_RECONN_SDP_CONN,mem_upper_sm_reconn
+	rtn
+scheduler_start_upper_sm_hid:
+	jam UPPERSM_RECONN_HID_CTRL_CONN,mem_upper_sm_reconn
+	rtn
+	
+process_upper_sm:
+	fetch 1,memui_reconnect_mode
+	nbranch process_upper_sm_reconn,blank
+process_upper_sm_remote_page:
+	fetch 1,mem_upper_sm_remote_page
+	//beq UPPERSM_RP_IDLE,process_upper_sm_rp_idle
+	rtn blank
+	//nothing to do when remote page to create a connection.
+	jam 0,mem_upper_sm_remote_page
+process_upper_sm_rp_wait:
+	rtn
+
+
+process_upper_sm_reconn:
+	bpatchx patch37_6,mem_patch37
+	fetch 1,mem_upper_sm_reconn
+	rtn blank
+	beq UPPERSM_RECONN_SDP_CONN,process_upper_sm_reconn_sdp_conn
+	beq UPPERSM_RECONN_SDP_CONN_WAIT,process_upper_sm_reconn_sdp_conn_wait
+	beq UPPERSM_RECONN_SDP_CFG,process_upper_sm_reconn_sdp_cfg
+	beq UPPERSM_RECONN_SDP_CFG_WAIT,process_upper_sm_reconn_sdp_cfg_wait
+	beq UPPERSM_RECONN_SS_SPP,process_upper_sm_reconn_ss_spp
+	beq UPPERSM_RECONN_SS_SPP_WAIT,process_upper_sm_reconn_ss_spp_wait
+	beq UPPERSM_RECONN_SDP_DISCONN,process_upper_sm_reconn_sdp_disconn
+	beq UPPERSM_RECONN_SDP_DISCONN_WAIT,process_upper_sm_reconn_sdp_disconn_wait
+	beq UPPERSM_RECONN_HID_CTRL_CONN,process_upper_sm_reconn_hid_ctrl_conn
+	beq UPPERSM_RECONN_HID_CTRL_CONN_WAIT,process_upper_sm_reconn_hid_ctrl_conn_wait
+	beq UPPERSM_RECONN_HID_CTRL_CFG,process_upper_sm_reconn_hid_ctrl_cfg
+	beq UPPERSM_RECONN_HID_CTRL_CFG_WAIT,process_upper_sm_reconn_hid_ctrl_cfg_wait
+	beq UPPERSM_RECONN_HID_INT_CONN,process_upper_sm_reconn_hid_int_conn
+	beq UPPERSM_RECONN_HID_INT_CONN_WAIT,process_upper_sm_reconn_hid_int_conn_wait
+	beq UPPERSM_RECONN_HID_INT_CFG,process_upper_sm_reconn_hid_int_cfg
+	beq UPPERSM_RECONN_HID_INT_CFG_WAIT,process_upper_sm_reconn_hid_int_cfg_wait
+	beq UPPERSM_RECONN_RFCOMM_CONN,process_upper_sm_reconn_rfcomm_conn
+	beq UPPERSM_RECONN_RFCOMM_CONN_WAIT,process_upper_sm_reconn_rfcomm_conn_wait
+	beq UPPERSM_RECONN_RFCOMM_CFG,process_upper_sm_reconn_rfcomm_cfg
+	beq UPPERSM_RECONN_RFCOMM_CFG_WAIT,process_upper_sm_reconn_rfcomm_cfg_wait
+	beq UPPERSM_RECONN_RFCOMM_SABM,process_upper_sm_reconn_rfcomm_sabm
+	beq UPPERSM_RECONN_RFCOMM_SABM_WAIT,process_upper_sm_reconn_rfcomm_sabm_wait
+	beq UPPERSM_RECONN_SPP_CMD_PN,process_upper_sm_reconn_spp_cmd_pn
+	beq UPPERSM_RECONN_SPP_CMD_PN_WAIT,process_upper_sm_reconn_spp_cmd_pn_wait
+	beq UPPERSM_RECONN_SPP_SABM,process_upper_sm_reconn_spp_sabm
+	beq UPPERSM_RECONN_SPP_SABM_WAIT,process_upper_sm_reconn_spp_sabm_wait
+	beq UPPERSM_RECONN_SPP_CMD_MS,process_upper_sm_reconn_spp_cmd_ms
+	beq UPPERSM_RECONN_SPP_CMD_MS_WAIT,process_upper_sm_reconn_spp_cmd_ms_wait
+process_upper_sm_reconn_wait:
+	rtn
+process_upper_sm_reconn_sdp_conn:
+	call upper_sm_send_sdp_conn //return n-user if sending failed
+	jam UPPERSM_RECONN_SDP_CONN_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	store 1,mem_sdp_state
+	rtn
+process_upper_sm_reconn_sdp_cfg:
+	jam UPPERSM_RECONN_SDP_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_sdp_state
+	rtnbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ
+	jam UPPERSM_RECONN_SDP_CFG,mem_upper_sm_reconn
+	call upper_sm_send_sdp_cfg //return n-user if sending failed
+	jam UPPERSM_RECONN_SDP_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_sdp_state
+	rtn
+process_upper_sm_reconn_ss_spp:
+	call l2cap_malloc_is_fifo_empty
+	nrtn blank
+	call upper_sm_send_ss_spp
+	jam UPPERSM_RECONN_SS_SPP_WAIT,mem_upper_sm_reconn
+	rtn
+process_upper_sm_reconn_sdp_disconn:
+	call upper_sm_send_sdp_disconn
+	jam UPPERSM_RECONN_SDP_DISCONN_WAIT,mem_upper_sm_reconn
+	rtn
+process_upper_sm_reconn_hid_ctrl_conn:
+	call upper_sm_send_hid_ctrl_conn
+	jam UPPERSM_RECONN_HID_CTRL_CONN_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	store 1,mem_hid_control_state
+	rtn
+process_upper_sm_reconn_hid_ctrl_cfg:    
+	call upper_sm_send_hid_ctrl_cfg
+	jam UPPERSM_RECONN_HID_CTRL_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_hid_control_state
+	rtn
+process_upper_sm_reconn_hid_int_conn:
+	call upper_sm_send_hid_int_conn
+	jam UPPERSM_RECONN_HID_INT_CONN_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	store 1,mem_hid_interrupt_state
+	rtn
+process_upper_sm_reconn_hid_int_cfg:    
+	call upper_sm_send_hid_int_cfg
+	jam UPPERSM_RECONN_HID_INT_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_hid_interrupt_state
+	rtn
+process_upper_sm_reconn_rfcomm_conn:
+	call upper_sm_send_rfcomm_conn
+	jam UPPERSM_RECONN_RFCOMM_CONN_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	store 1,mem_rfcomm_state
+	rtn
+process_upper_sm_reconn_rfcomm_cfg: 
+	call upper_sm_send_rfcomm_cfg
+	jam UPPERSM_RECONN_RFCOMM_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_rfcomm_state
+	rtn
+process_upper_sm_reconn_rfcomm_sabm:
+	call upper_sm_send_rfcomm_sabm
+	jam UPPERSM_RECONN_RFCOMM_SABM_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_RFCOMM_ONLY_SABM,pdata
+	store 1,mem_rfcomm_state
+	rtn
+process_upper_sm_reconn_spp_cmd_pn: 
+	call upper_sm_send_spp_cmd_pn
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_PN_CMD
+	store 1,mem_spp_state
+	jam UPPERSM_RECONN_SPP_CMD_PN_WAIT,mem_upper_sm_reconn
+	rtn
+process_upper_sm_reconn_spp_sabm:   
+	call upper_sm_send_spp_sabm
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_SABM
+	store 1,mem_spp_state
+	jam UPPERSM_RECONN_SPP_SABM_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_remote_spp_channel //address in pdata
+	lshift3 pdata,pdata
+	or_into 3,pdata
+	arg mem_HIUfcs_SPP,temp // mem_HIUfcs_spp_WCredits in regB++
+	storet 2,mem_contw_temp
+	branch rfcomm_save_FCS_uih
+process_upper_sm_reconn_spp_cmd_ms: 
+	call upper_sm_send_spp_cmd_ms
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_SND_MS_CMD
+	store 1,mem_spp_state
+	jam UPPERSM_RECONN_SPP_CMD_MS_WAIT,mem_upper_sm_reconn
+	rtn
+
+process_upper_sm_reconn_sdp_conn_wait:
+	fetch 1,mem_sdp_state
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES
+	jam UPPERSM_RECONN_SDP_CFG,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_sdp_cfg_wait:
+	fetch 1,mem_sdp_state
+	rtnne L2CAP_CHANNEL_SETUP_COMPLETE
+	jam UPPERSM_RECONN_SS_SPP ,mem_upper_sm_reconn
+process_upper_sm_reconn_ss_spp_wait:
+	fetch 1,mem_message_to_uppersm
+	rtnne RECIEVE_SS_REASULT_HF
+	jam 0,mem_message_to_uppersm
+	jam UPPERSM_RECONN_SDP_DISCONN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_sdp_disconn_wait:
+	fetch 1,mem_sdp_state
+	nrtn blank
+	fetch 1,mem_UI_profile_supported
+	bbit1 support_HID,process_upper_sm_reconn_setup_hid
+	bbit1 support_SPP,process_upper_sm_reconn_setup_rfcomm
+	branch process_upper_sm_reconn_termination
+process_upper_sm_reconn_hid_ctrl_conn_wait:
+	fetch 1,mem_hid_control_state
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES
+	jam UPPERSM_RECONN_HID_CTRL_CFG,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_hid_ctrl_cfg_wait:
+	fetch 1,mem_hid_control_state
+	rtnne L2CAP_CHANNEL_SETUP_COMPLETE
+	jam UPPERSM_RECONN_HID_INT_CONN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_hid_int_conn_wait:  
+	fetch 1,mem_hid_interrupt_state
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES
+	jam UPPERSM_RECONN_HID_INT_CFG,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_hid_int_cfg_wait:  
+	fetch 1,mem_hid_interrupt_state
+	rtnne L2CAP_CHANNEL_SETUP_COMPLETE
+	fetch 1,mem_UI_profile_supported
+	bbit1 support_SPP,process_upper_sm_reconn_setup_rfcomm
+	branch process_upper_sm_reconn_termination
+process_upper_sm_reconn_rfcomm_conn_wait: 
+	fetch 1,mem_rfcomm_state
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES
+	jam UPPERSM_RECONN_RFCOMM_CFG,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_rfcomm_cfg_wait:
+	fetch 1,mem_rfcomm_state
+	rtnne L2CAP_CHANNEL_SETUP_COMPLETE
+	jam UPPERSM_RECONN_RFCOMM_SABM,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_rfcomm_sabm_wait:  
+	fetch 1,mem_rfcomm_state
+	rtnne L2CAP_CHANNEL_RFCOMM_DLCI0_OPENED
+	fetch 1,mem_UI_profile_supported
+	bbit1 support_SPP,process_upper_sm_reconn_setup_spp
+	branch process_upper_sm_reconn_termination
+process_upper_sm_reconn_spp_cmd_pn_wait:
+	fetch 1,mem_spp_state
+	rtnbit0 RFCOMM_CHANNEL_STATE_PN_RES
+	jam UPPERSM_RECONN_SPP_SABM,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_spp_sabm_wait:
+	fetch 1,mem_spp_state
+	rtnbit0 RFCOMM_CHANNEL_STATE_UA
+	jam UPPERSM_RECONN_SPP_CMD_MS ,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_spp_cmd_ms_wait: 
+	fetch 1,mem_spp_state
+	rtnne RFCOMM_CHANNEL_SETUP_COMPLETE
+	branch process_upper_sm_reconn_termination
+
+process_upper_sm_reconn_setup_hid:
+	jam UPPERSM_RECONN_HID_CTRL_CONN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+
+process_upper_sm_reconn_setup_rfcomm:
+	jam UPPERSM_RECONN_RFCOMM_CONN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_setup_spp:
+	jam UPPERSM_RECONN_SPP_CMD_PN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+
+
+
+process_upper_sm_reconn_termination:
+	jam 0,mem_upper_sm_reconn
+	rtn
+upper_sm_send_sdp_conn:
+	bpatchx patch37_7,mem_patch37
+	call l2cap_malloc_signal_channel
+	setarg PSM_SDP
+	copy pdata,temp
+	setarg L2CAP_SDP_channel
+	copy pdata,timeup
+	branch ML2CAP_send_signal_connect_req
+	
+upper_sm_send_sdp_cfg:
+	bpatchx patch38_0,mem_patch38
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_SDP_remote_CID
+	copy pdata,temp
+	branch ML2CAP_send_signal_config_req
+	
+upper_sm_send_sdp_disconn:
+	bpatchx patch38_1,mem_patch38
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_SDP_remote_CID
+	copy pdata,temp
+	arg L2CAP_SDP_channel,timeup
+	call ML2CAP_send_signal_disconn_req
+	fetch 1,mem_sdp_state
+	set0 L2CAP_CHANNEL_STATE_RCV_CFG_RES ,pdata
+	store 1,mem_sdp_state
+	rtn
+//service search
+upper_sm_send_ss_spp:
+	bpatchx patch38_2,mem_patch38
+	call l2cap_malloc_sdp_channel
+	call sdp_send_spp_request
+	branch MSDP_send_req_done
+
+upper_sm_send_rfcomm_conn:
+	bpatchx patch38_3,mem_patch38
+	call l2cap_malloc_signal_channel
+	setarg PSM_RFCOMM
+	copy pdata,temp
+	setarg L2CAP_RFCOMM_channel
+	copy pdata,timeup
+	branch ML2CAP_send_signal_connect_req
+
+upper_sm_send_rfcomm_cfg:
+	bpatchx patch38_4,mem_patch38
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_rfcomm_remote_cid
+	copy pdata,temp
+	branch ML2CAP_send_signal_config_req
+
+upper_sm_send_hid_ctrl_conn:
+	bpatchx patch38_5,mem_patch38
+	call l2cap_malloc_signal_channel
+	setarg PSM_HID_control
+	copy pdata,temp
+	setarg L2CAP_HID_Control_channel
+	copy pdata,timeup
+	branch ML2CAP_send_signal_connect_req
+
+upper_sm_send_hid_ctrl_cfg:
+	bpatchx patch38_6,mem_patch38
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_hid_ctrl_remote_cid
+	copy pdata,temp
+	branch ML2CAP_send_signal_config_req
+
+upper_sm_send_hid_int_conn:
+	bpatchx patch38_7,mem_patch38
+	call l2cap_malloc_signal_channel
+	setarg PSM_HID_interrupt
+	copy pdata,temp
+	setarg L2CAP_HID_interrupt_channel
+	copy pdata,timeup
+	branch ML2CAP_send_signal_connect_req
+	
+upper_sm_send_hid_int_cfg:
+	bpatchx patch39_0,mem_patch39
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_hid_int_remote_cid
+	copy pdata,temp
+	branch ML2CAP_send_signal_config_req
+
+upper_sm_send_rfcomm_sabm:
+	bpatchx patch39_1,mem_patch39
+	call l2cap_malloc_rfcomm_channel
+	//force 3,temp //address
+	jam 3,mem_current_adss
+	jam 0x1c,mem_current_fcs
+	call rfcomm_send_sabm
+	jam 1,mem_rfcomm_initiator
+	rtn
+
+upper_sm_send_spp_cmd_pn:
+	bpatchx patch39_2,mem_patch39
+	call l2cap_malloc_rfcomm_channel
+	fetcht 1,mem_remote_spp_channel
+	call channel_to_dlci
+	storet 1,mem_pn_dlci
+	branch rfcomm_send_param_neg_cmd
+
+upper_sm_send_spp_sabm:
+	bpatchx patch39_3,mem_patch39
+	call l2cap_malloc_rfcomm_channel
+	fetcht 1,mem_pn_dlci
+	call dlci_to_address_cmd
+	call rfcomm_calculate_FCS_sabm //sabm fcs use once only,not need to save
+	store 1,mem_current_fcs
+	fetcht 1,mem_pn_dlci
+	call dlci_to_address_cmd
+	storet 1,mem_current_adss
+	branch rfcomm_send_sabm
+
+upper_sm_send_spp_cmd_ms:
+	bpatchx patch39_4,mem_patch39
+	call l2cap_malloc_rfcomm_channel
+	fetcht 1,mem_pn_dlci
+	call dlci_to_address_cmd //address in temp
+	branch rfcomm_send_modem_status_cmd
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/sdp.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/sdp.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/sdp.prog	(working copy)
@@ -0,0 +1,1206 @@
+/**********************************************************************/
+/* Subroutine: sdp_process                                         */
+/* Process Service Discovery Request                                  */
+/* Called from L2CAP, check PDUID, branch to different req processings*/
+/*                                                                    */  
+/* Input:       mem_L2CAP_Rx_payload                                  */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length	      */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process:
+	bpatchx patch39_5,mem_patch39
+	fetch 2,mem_l2cap_payload_ptr
+	iforce contr
+//	ifetchr regb,1,contr				/* PDUID */
+//	storer regb,1,mem_sdp_pduid
+	ifetch 1,contr
+	copy pdata,regb
+	store 1,mem_sdp_pduid
+	ifetch 2,contr
+	store 2,mem_sdp_transactionid			/* save transaction id */
+	ifetch 1,contr				/* higher byte of parameter length */
+	lshift8 pdata,timeup				
+	ifetch 1,contr				/* lower byte of parameter length */
+	iadd timeup,timeup				/* parameter length stored in "timeup" */
+	bpatchx patch39_6,mem_patch39
+	copy contr,temp
+	arg 4,loopcnt
+	arg mem_sdp_handle_list,contw
+	call memset0
+	copy temp,contr 
+	deposit regb						/* PDUID  */
+	beq SDP_ERROR_RES,sdp_process_error_res
+	beq SDP_SEARCH_REQ,sdp_process_ss_req
+	beq SDP_SEARCH_RES,sdp_process_ss_res
+	beq SDP_ATTRIBUTE_REQ,sdp_process_sa_req
+	beq SDP_ATTRIBUTE_RES,sdp_process_sa_res
+	beq SDP_SEARCHATTRIB_REQ,sdp_process_ssa_req
+	beq SDP_SEARCHATTRIB_RES,sdp_process_ssa_res
+	branch sdp_insufficient_resource
+
+/**********************************************************************/
+/* ss_req			                              */
+/* Processing Service Search Request                                  */
+/* Call: ask_serviceclassid, empty_response                     */
+/*                                                                    */  
+/* Input:       mem_L2CAP_Rx_payload pointer in contr                 */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length	      */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process_ss_req:
+	bpatchx patch39_7,mem_patch39
+	call ask_serviceclassid
+	compare 1,temp,0xff
+	branch ss_empty_rsp,true
+	compare 0xff,temp,0xff
+	branch sdp_invalid_request_syntax,true
+
+	ifetch 2,contr				/* max aservice record count */
+	store 2,mem_sdp_record_maxcnt
+	increase -2,timeup
+
+	increase -1,timeup				/* continuation state 1 byte (0) */
+	nbranch sdp_invalid_pdu_size,zero		/* invalid pdu size */
+	arg mem_sdp_uuid_search_ptr,timeup
+	ifetch 2,timeup
+	rtn blank
+	call search_all_uuid
+	call l2cap_get_sdp_tx_payload			/* put the pointer to Tx buffer  */
+	force 3,pdata						/* PDUID 3, Service Search Response */
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid			/* write transaction id */
+	istore 2,contw
+	lshift2 queue,pdata
+	add pdata,5,pdata
+	add pdata,5,regc
+	byteswap pdata,pdata
+	istore 2,contw							/* write parLength */
+	deposit queue
+	byteswap pdata,pdata
+	istore 2,contw							/* write TotSrvRecCount */
+	istore 2,contw							/* write CurSrvRecCount */
+	arg mem_sdp_handle_list,contr
+	copy queue,loopcnt
+	branch ss_req_blank,zero
+ss_req_loop:	
+	ifetch 4,contr
+	istore 4,contw
+	loop ss_req_loop
+ss_req_blank:	
+	force 0,pdata
+	istore 1,contw							/* continuation state */
+	deposit regc
+	store 2,mem_sdp_tx_pkt_length
+//	branch assert,blank
+	rtn
+
+/**********************************************************************/
+/* sa_req			                              */
+/* Processing Service Attribute Request                               */
+/* Call: ask_attributeid, empty_response (if 3 stored attr.     */
+/* not asked) or answer_attributelist                              */  
+/* Input:       mem_L2CAP_Rx_payload pointer in contr                 */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length	      */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process_sa_req:
+	bpatchx patch3a_0,mem_patch3a
+	ifetch 4,contr				/* service record handle */
+	store 4,mem_sdp_record_handle	 
+	increase -4,timeup
+	call sdp_store_maxbyte
+	store 2,mem_sdp_attribute_maxbyte
+	increase -2,timeup
+	call dataelementtype6		/* result: data size stored in rega */
+	branch sdp_invalid_request_syntax,zero
+	compare 5,rega,0xff  // length
+	//branch sa_req_all,true
+	branch sa_judge_wholerange,true
+sa_isnot_wholerange:
+	arg mem_sdp_attrib_list,contw
+	force 0,queue
+	branch sa_req_loop
+sa_judge_wholerange:
+	ifetch 1,contr
+	bne SDP_ATTRIBUTE_RANGE,sdp_invalid_request_syntax
+	ifetch 2,contr
+	nbranch sa_judge_wholerange_false1,blank
+	ifetch 1,contr
+	bne 0xff,sa_judge_wholerange_false2
+	ifetch 1,contr
+	bne 0xff,sa_judge_wholerange_false3		//also exist potential bug because mem_sdp_attrib_list length is only 7f
+	branch sa_req_all
+sa_judge_wholerange_false3:
+	increase -5,contr
+	branch sa_isnot_wholerange
+sa_judge_wholerange_false2:
+	increase -4,contr
+	branch sa_isnot_wholerange
+sa_judge_wholerange_false1:
+	increase -3,contr
+	branch sa_isnot_wholerange
+sa_req_loop:	
+	ifetch 1,contr
+	beq SDP_ATTRIBUTE_ID, sa_req_one_id
+	beq SDP_ATTRIBUTE_RANGE, sa_req_range
+sa_req_range:
+	ifetch 2, contr
+	istore 2, contw
+	increase 1,queue
+	byteswap pdata,regb
+	ifetch 2, contr
+	byteswap pdata,pdata
+sa_req_range_id_increase:	
+	increase 1, regb
+	isub regb, null
+	nbranch sa_req_range_id_finish,positive
+	copy pdata, regc
+	byteswap regb,pdata
+	istore 2, contw
+	increase 1,queue
+	copy regc, pdata
+	branch sa_req_range_id_increase
+sa_req_range_id_finish:
+	increase -5,timeup
+	increase -5,rega
+	branch sa_req_check_next_id
+sa_req_one_id:
+	ifetch 2,contr
+	istore 2,contw //save the attribute id in mem_sdp_attrib_list
+	increase 1,queue
+	increase -3,timeup
+	increase -3,rega
+sa_req_check_next_id:	
+	nbranch sdp_invalid_request_syntax,positive
+	nbranch sa_req_loop,zero //another attribute 
+	increase -1,timeup
+	nbranch sdp_invalid_request_syntax,zero
+	
+	call l2cap_get_sdp_tx_payload
+	increase 10,contw
+	arg mem_sdp_attrib_list,rega
+sa_req_handle_attributelist_next:
+	copy queue,pdata
+	branch sa_req_handle_attributelist_end,blank
+	ifetch 2,rega
+	branch sa_req_handle_attributelist_end,blank
+	iforce regb /* regb is the attribute ID */
+	fetch 4,mem_sdp_record_handle	
+	iforce temp
+	call search_handle_attrib
+	copy contr,pdata
+	branch sa_req_handle_attributelist_notfound,blank
+	increase -3,contr
+	ifetch 3,contr
+	istore 3,contw
+	call sdp_data_len
+	iforce loopcnt	
+	call memcpy
+sa_req_handle_attributelist_notfound:
+	increase 2,rega
+	increase -1, queue
+	branch sa_req_handle_attributelist_next
+
+sa_req_handle_attributelist_end:	
+	arg SDP_ATTRIBUTE_RES,rega
+	call ssa_req_range_lastfreg_common
+	fetch 2,mem_sdp_tx_pkt_length	
+	beq 11,sa_empty_rsp
+	branch  ssa_req_range_attrbutes_length_no_continue
+
+
+sdp_store_continue_common:
+	ifetch 1, contr
+	beq 0, sdp_store_continue_0byte
+	beq 1,sdp_store_continue_1byte
+	beq 2, sdp_store_continue_2byte
+sdp_store_continue_0byte:	
+	increase -1,timeup				/* continuation state byte (0) */
+	branch sdp_store_continue_end
+sdp_store_continue_1byte:
+	ifetch 1, contr
+	increase -2,timeup				/* continuation state byte (1) */
+	branch sdp_store_continue_end
+sdp_store_continue_2byte:
+	ifetch 2, contr
+	byteswap pdata,pdata
+	increase -3,timeup				/* continuation state byte (2) */
+sdp_store_continue_end:
+	store 2, mem_sdp_continue_byte	
+	rtn
+	
+sa_req_all:	
+	increase -5,timeup
+	call sdp_store_continue_common
+	nbranch sdp_invalid_pdu_size,zero
+	fetcht 4,mem_sdp_record_handle		
+	call search_handle
+	nbranch sdp_invalid_service_record_handle,zero
+	copy contr,rega
+	call l2cap_get_sdp_tx_payload
+	copy rega,contr
+	increase 3,contw//arg mem_SDP_Tx_payload+3,contw
+	copy contr,timeup //sdp start pointer
+	call sdp_get_data
+	copy pdata, rega //sdp total length
+//	fetchr regb,2,mem_sdp_continue_byte
+	fetch 2,mem_sdp_continue_byte
+	copy pdata,regb
+	copy rega,pdata
+	isub regb,regb //total_length - continue_byte in regb
+	fetch 2, mem_sdp_attribute_maxbyte
+	isub regb, null
+	nbranch sa_req_all_fragment_sdp, positive
+	// the last fragment
+	disable user
+	fetch 2, mem_sdp_continue_byte
+	branch sa_req_all_fisrt_fragment,blank
+	iadd timeup, contr //set the read pointer
+	increase 3,regb //include the total length field, 3 bytes
+	copy regb, loopcnt
+	copy loopcnt, pdata
+	increase 3, pdata
+	byteswap pdata,pdata
+	istore 2, contw
+	copy loopcnt, pdata
+	byteswap pdata,pdata
+	istore 2, contw
+	branch sa_req_all_answer_attributelist_full_loop
+sa_req_all_fisrt_fragment:
+	add rega,6,loopcnt
+	branch sa_req_all_parlength_continue_byte, user
+	byteswap loopcnt,pdata
+	branch sa_req_all_parlength_continue_byte_end
+sa_req_all_parlength_continue_byte:
+	copy loopcnt, pdata
+	increase 2, pdata
+	byteswap pdata,pdata
+sa_req_all_parlength_continue_byte_end:
+	istore 2,contw				/* ParLength */
+	increase -3,loopcnt
+	byteswap loopcnt,pdata			
+	istore 2,contw				/* AttrListByteCount */
+	copy timeup,contr
+	branch sa_req_all_answer_attributelist_full_loop
+sa_req_all_fragment_sdp:
+	enable user
+//	fetchr rega,2,mem_sdp_attribute_maxbyte
+	fetch 2,mem_sdp_attribute_maxbyte
+	copy pdata,rega
+	copy rega,loopcnt
+	fetch 2, mem_sdp_continue_byte
+	branch sa_req_all_fisrt_fragment,blank
+	iadd timeup, contr
+	copy rega,pdata
+	increase 5,pdata
+	byteswap pdata,pdata	
+	istore 2, contw
+	copy rega,pdata
+	byteswap pdata,pdata
+	istore 2, contw
+sa_req_all_answer_attributelist_full_loop:
+	call memcpy
+	nbranch sa_req_all_last_frag_continue, user
+	force 2,pdata
+	istore 1,contw
+	copy contr, pdata
+	isub timeup, pdata
+	byteswap pdata,pdata
+	istore 2, contw   // continuation length
+	branch sa_req_all_frag_end
+sa_req_all_last_frag_continue:
+	force 0,pdata
+	istore 1,contw
+sa_req_all_frag_end:	
+	arg SDP_ATTRIBUTE_RES,rega
+	branch ssa_req_range_common	
+	
+/**********************************************************************/
+/* ssa_req                          		      */
+/* Processing Service Search Attribute Request                        */
+/* Call: ask_serviceclassid, ask_attributeid, empty_response */
+/*       or answer_attributelist                                   */  
+/* Input:       contr                                                 */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length             */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process_ssa_req:
+	bpatchx patch3a_1,mem_patch3a
+	call ask_serviceclassid
+	compare 0xff,temp,0xff
+	branch sdp_invalid_request_syntax,true
+	call sdp_store_maxbyte
+	store 2,mem_sdp_attribute_maxbyte
+	increase -2,timeup
+	call dataelementtype6
+	arg mem_sdp_attrib_list,contw
+	force 0,queue
+ssa_req_loop:	
+	ifetch 1,contr 
+	beq SDP_ATTRIBUTE_RANGE,ssa_req_range
+	ifetch 2,contr 
+	istore 2,contw //save the attribute id in mem_sdp_attrib_list
+	increase 1,queue
+	increase -3,timeup
+	increase -3,rega
+	nbranch sdp_invalid_request_syntax,positive
+	nbranch ssa_req_loop,zero
+	increase -1,timeup
+	nbranch sdp_invalid_request_syntax,zero
+	call l2cap_get_sdp_tx_payload
+	increase 13,contw//arg mem_SDP_Tx_payload+13,contw
+	fetch 2,mem_sdp_uuid_search_ptr
+	iforce regc
+	arg mem_sdp_attrib_list,rega
+ssa_req_attributelist_next:	
+	ifetch 2,rega
+	branch ssa_req_attributelist_end,blank
+	iforce regb						/* regb is the attribute ID */
+	call search_attrib
+	branch ssa_req_attributelist_notfound,blank
+	increase -3,contr
+	ifetch 3,contr
+	istore 3,contw
+	call sdp_data_len
+	iforce loopcnt	
+  	call memcpy
+ssa_req_attributelist_notfound:
+	increase 2,rega
+	branch ssa_req_attributelist_next
+
+ssa_req_attributelist_end:
+	call ssa_req_range_lastfreg
+	fetch 2,mem_sdp_tx_pkt_length	
+	beq 14,ssa_empty_rsp
+	call ssa_req_range_attrbutes_length_no_continue
+	branch ssa_req_range_attrbutes_length_no_continue
+
+
+sdp_store_maxbyte:	
+	ifetch 2,contr				 
+	byteswap pdata,pdata
+	increase -3,pdata	
+	arg 200,temp
+	isub temp,null
+	nrtn positive
+	setarg 200
+	rtn
+	
+
+ssa_req_range:
+	increase 4,contr
+	increase -5,timeup
+	increase -5,rega
+	nbranch sdp_invalid_request_syntax,zero
+	call 	sdp_store_continue_common
+	nbranch sdp_invalid_pdu_size,zero
+	arg mem_sdp_uuid_search_ptr,timeup
+	call search_all_uuid  
+	deposit queue
+	branch ssa_empty_rsp,blank
+	store 1,mem_handle_humber
+//	storer regb,2,mem_sdp_all_length
+	copy regb,pdata
+	store 2,mem_sdp_all_length
+	arg 0,queue
+	arg 0,rega
+	call l2cap_get_sdp_tx_payload
+	increase 10,contw 
+ssa_req_range_find_handle:
+	call ssa_req_range_get_length	
+	nbranch assert,user
+	copy contr,timeup
+	copy pdata,regc
+	iadd rega,rega
+//	copy pdata,rega 
+//	fetch 2,mem_sdp_all_length
+	fetch 2,mem_sdp_continue_byte
+	copy pdata,regb
+	branch ssa_req_range_first_freg,blank
+ssa_req_range_later_freg_with_continue:
+	copy rega,pdata
+	isub regb,regb //total_length - continue_byte in rega
+	branch ssa_req_range_next_handle,zero
+	nbranch ssa_req_range_next_handle,positive
+	fetch 2, mem_sdp_attribute_maxbyte
+	isub regb, null
+	branch ssa_req_range_maxbyte_with_continue,zero
+	nbranch ssa_req_range_maxbyte_with_continue, positive  
+	
+ // data length < =maxbyte 
+ssa_req_range_send_not_maxbyte:
+ 	copy regb,loopcnt
+	call ssa_req_range_maxbyte_with_continue_cpy
+ 	fetch 1,mem_handle_humber
+	increase 1,queue
+	isub queue,null
+	branch ssa_req_range_lastfreg,zero
+	branch ssa_req_range_freg_with_continue
+	
+ssa_req_range_maxbyte_with_continue:
+ 	copy pdata,loopcnt
+ 	call ssa_req_range_maxbyte_with_continue_cpy
+ 	branch ssa_req_range_freg_with_continue
+ 	
+ssa_req_range_maxbyte_with_continue_cpy:
+	increase -3,contw   
+	copy loopcnt,temp
+ 	copy regc,pdata
+	isub regb,pdata
+	iadd timeup,contr
+ 	branch memcpy
+
+ssa_req_range_next_handle:
+	fetch 1,mem_handle_humber
+	increase 1,queue
+	isub queue,null
+	rtn zero //
+	branch ssa_req_range_find_handle
+
+ssa_req_range_get_length:	
+	call disable_user
+	arg mem_sdp_handle_list,contr
+	lshift2 queue,pdata
+	iadd contr,contr
+	ifetcht 4, contr
+	call search_handle
+	nrtn zero
+	call sdp_data_len
+	branch enable_user
+
+ssa_req_range_first_freg:
+	fetch 2, mem_sdp_attribute_maxbyte
+	isub rega, null
+	nbranch ssa_req_range_firstfreg_maxbyte_with_continue,positive
+	copy rega,loopcnt
+	copy loopcnt,temp
+	copy timeup,contr
+	call memcpy
+	fetch 2,mem_sdp_all_length
+	isub rega,null
+	branch ssa_req_range_freg_no_continue,zero
+ssa_req_range_firstfreg_not_maxbyte_with_continue:
+	call ssa_req_range_freg_with_continue
+	branch ssa_req_range_attrbutes_length
+	
+ssa_req_range_freg_no_continue:
+	call ssa_req_range_lastfreg
+	branch ssa_req_range_attrbutes_length
+	
+ssa_req_range_lastfreg:
+	arg SDP_SEARCHATTRIB_RES,rega  //PUD ID
+ssa_req_range_lastfreg_common:
+	force 0,pdata
+	istore 1,contw
+	call ssa_req_range_common
+	fetcht 2,mem_sdp_tx_pkt_length
+	increase -5,temp
+	byteswap temp,pdata
+	istore 2, contw
+	increase -3,temp
+	byteswap temp,pdata
+	istore 2, contw  //attribute length
+	rtn
+
+ssa_req_range_firstfreg_maxbyte_with_continue:
+	copy pdata,loopcnt
+	copy loopcnt,temp
+	copy timeup,contr
+	call memcpy
+	call ssa_req_range_freg_with_continue
+ssa_req_range_attrbutes_length:	
+	setarg 0x36
+	istore 1,contw
+	fetch 2,mem_sdp_all_length
+	byteswap pdata,pdata
+	istore 2, contw 
+	rtn	
+
+ssa_req_range_attrbutes_length_no_continue:	
+	setarg 0x36
+	istore 1,contw
+	increase -3,temp
+	byteswap temp,pdata
+	istore 2, contw 
+	rtn	
+
+ssa_req_range_freg_with_continue:
+	arg SDP_SEARCHATTRIB_RES,rega  //PUD ID
+	setarg 2
+	istore 1,contw	
+	fetch 2,mem_sdp_continue_byte
+	iadd temp,temp
+	byteswap temp,pdata
+	istore 2,contw
+	call ssa_req_range_common
+	fetcht 2,mem_sdp_tx_pkt_length
+	increase -5,temp
+	byteswap temp,pdata
+	istore 2, contw
+	increase -5,temp
+	byteswap temp,pdata
+	istore 2, contw 
+	rtn	
+
+ssa_req_range_common:
+	fetch 2,mem_sdp_tx_payload_ptr
+	isub contw,pdata
+	sub pdata,0,pdata
+	store 2,mem_sdp_tx_pkt_length
+	call l2cap_get_sdp_tx_payload 
+	copy rega,pdata  //PUD ID
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid
+	istore 2,contw
+	rtn
+
+
+
+
+/**********************************************************************/
+/* ssa_res			                      */
+/* Processing Service Search Attribute Response                       */
+/* Call: dataelementtype6, attribute_reading                    */
+/* Input:       contr                                                 */
+/* Output:      mem_sdp_record_handle,mem_sdp_search_failed           */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process_ssa_res:
+sdp_process_ss_res:
+sdp_process_sa_res:
+sdp_process_error_res:
+	rtn
+/*
+sdp_process_ss_res:
+	bpatchx patch3a_2,mem_patch3a
+	ifetch 2,contr
+	ifetch 2,contr
+	byteswap pdata,pdata
+	bne 1,assert
+	ifetch 4,contr
+	store 4,mem_sdp_record_handle
+	fetchr regc,2,mem_sdp_l2capch_ptr
+	add regc,offset_lc_state,regc
+	ifetch 1,regc
+	set1 L2CAP_CHANNEL_STATE_RECV_SEARCH_RES,pdata
+	istore 1,regc
+	rtn
+	
+sdp_process_sa_res:
+	bpatchx patch3a_3,mem_patch3a
+	fetchr regc,2,mem_sdp_l2capch_ptr
+	add regc,offset_lc_state,regc
+	ifetch 1,regc
+	set1 L2CAP_CHANNEL_STATE_RECV_ATTRIB_RES,pdata
+	istore 1,regc
+	copy temp,contr
+	ifetch 2,contr
+	call search_rfcomm_cn
+	store 1,mem_profile_channel	
+	rtn
+*/
+
+				    
+
+sdp_invalid_service_record_handle:		
+	setarg 0x0200
+	store 2,mem_sdp_error_code
+	branch sdp_error_response
+sdp_invalid_pdu_size:				
+	setarg 0x0400
+	store 2,mem_sdp_error_code
+	branch sdp_error_response
+sdp_insufficient_resource:			
+	setarg 0x0600
+	store 2,mem_sdp_error_code
+	branch sdp_error_response
+sdp_invalid_request_syntax:			
+	setarg 0x0300
+	store 2,mem_sdp_error_code
+sdp_error_response:	
+	call l2cap_get_sdp_tx_payload
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid			
+	istore 2,contw
+	setarg 0x0200					
+	istore 2,contw
+	fetch 2,mem_sdp_error_code			
+	istore 2,contw
+	jam  7,mem_sdp_tx_pkt_length
+	rtn
+
+
+//store uuid in mem_sdp_uuid_search_ptr,
+//return temp 0xff if wrong 
+ask_serviceclassid:  
+	arg 0,regb
+	force 0,temp					/* use "temp" to mark syntax error or to mark 128 bit uuid */
+	arg mem_sdp_uuid_search_ptr,contw
+	call dataelementtype6
+	branch asksrv_error,zero
+classidloop:
+	increase 1,regb
+	ifetch 1,contr
+	increase -1,rega
+	increase -1,timeup
+	compare 0x18,pdata,0xf8			/* 5 MSB: b00011: uuid */
+	nbranch asksrv_error,true
+	compare 0x04,pdata,0x07			/* 3 LSB: b100 128 bits uuid */
+	nbranch cmp032,true
+	force 1,temp					/* mark it as 128 bit uuid */
+skip2bytes:
+	ifetch 1,contr
+	increase -1,rega	
+	increase -1,timeup
+	bne 0x00, frstbwrong
+	ifetch 1,contr
+	increase -1,rega	
+	increase -1,timeup
+	beq 0x00, cmpuuid
+	branch scndbwrong
+frstbwrong:  
+	increase 1,contr
+	increase -1,rega	
+	increase -1,timeup
+scndbwrong:  
+	increase 2,contr				/* skip 2 bytes, first 2 bytes already wrong */
+	increase -2,rega	
+	increase -2,timeup
+	compare 0x00,temp,0xff                        /* 128 bits or 32 bits ? */
+	branch loopornot,true
+	increase 12,contr				/* skip 12 bytes, first 2 bytes already wrong */
+	increase -12,rega	
+	increase -12,timeup
+	branch loopornot
+cmp032:
+	compare 0x02,pdata,0x07			/* 3 LSB: b010 32 bits uuid */
+	nbranch cmp016,true
+	branch skip2bytes			
+cmp016:
+	compare 0x01,pdata,0x07			/* 3 LSB: b001 16 bit uuid */
+	nbranch asksrv_error,true
+cmpuuid:
+	increase -2,rega
+	increase -2,timeup
+	ifetch 2,contr				/* higher order byte */
+	sub regb,4,null
+	branch uuidsize,zero //max store uuids =3 
+	istore 2,contw
+uuidsize:
+	compare 0x00,temp,0xff			/* is this 128 bits uuid */
+	branch loopornot,true
+	copy contr,temp
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x10, wrong12b
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x80, wrong12b
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x80, wrong12b
+	ifetch 1,contr
+	bne 0x5f, wrong12b
+	ifetch 1,contr
+	bne 0x9b, wrong12b
+	ifetch 1,contr
+	bne 0x34, wrong12b
+	ifetch 1,contr
+	beq 0xfb, chck12dn
+wrong12b:
+	copy temp,contr  
+wrong12b1:
+	increase 12,contr				/* skip 12 bytes */
+	force 0x00,queue
+	force 0x00,temp
+	branch chck12dn
+
+chck12dn:
+	increase -12,timeup
+	increase -12,rega
+loopornot:
+	force 0x00,temp
+	compare 0x00,rega,0xff
+	nbranch classidloop,true
+	force 0,pdata
+	istore 2,contw			/* end list with null */
+	rtn
+asksrv_error:
+	arg 0xff,temp
+	rtn
+
+/**********************************************************************/
+/* Subroutine: dataelementtype6                                    */
+/* Parse Data Element Sequence, obtain the data size                  */
+/* Input:  SDP Rx Buf Pointer in contr, parameter count in timeup     */
+/* Output: data length in rega, data pointer in contr             */
+/*         and  parameter count in timeup, return with zero flag set: */
+/*         syntax error                                               */
+/**********************************************************************/     
+dataelementtype6:
+	bpatchx patch3a_4,mem_patch3a
+	ifetch 1,contr
+	increase -1,timeup
+	compare 0x30,pdata,0xf8			/* 5 MSB: b00110: type 6 */
+	nbranch dsize_error,true
+	compare 0x07,pdata,0x07			/* 3 LSB: b111: 32 bits */
+	branch dsize32,true
+	compare 0x06,pdata,0x07			/* 3 LSB: b110: 16 bits */
+	branch dsize16,true
+	compare 0x05,pdata,0x07			/* 3 LSB: b101: 8 bits */
+	nbranch dsize_error,true
+//	ifetchr rega,1,contr				/* data length in reg A */
+	ifetch 1,contr
+	copy pdata,rega
+	increase -1,timeup
+	branch dsize
+dsize32:
+	increase 2,contr				 
+	increase -2,timeup
+dsize16:
+	ifetch 2,contr
+	byteswap pdata,rega
+	increase -2,timeup
+dsize:
+	force 0x01,pdata
+	rtn
+dsize_error:
+	force 0x00,pdata
+	rtn
+
+/**********************************************************************/
+/* Subroutine: sa_empty_rsp                                      */
+/* Send empty response                                                */
+/*                                                                    */
+/* Input:       mem_sdp_pduid, mem_sdp_transactionid                  */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length             */
+/*                                                                    */
+/**********************************************************************/     
+ss_empty_rsp:
+	setarg SDP_SEARCH_RES
+	store 1, mem_sdp_pduid
+	branch empty_response
+sa_empty_rsp:
+	setarg SDP_ATTRIBUTE_RES
+	store 1, mem_sdp_pduid
+	branch empty_response
+ssa_empty_rsp:
+	setarg SDP_SEARCHATTRIB_RES
+	store 1, mem_sdp_pduid
+empty_response:
+	call l2cap_get_sdp_tx_payload			/* empty attribute list */
+//	fetchr regb,1,mem_sdp_pduid				/* PDUID */
+//	istorer regb,1,contw
+	fetch 1,mem_sdp_pduid
+	copy pdata,regb
+	istore 1,contw 
+	fetch 2,mem_sdp_transactionid			/* copy back transaction id */
+	istore 2,contw
+	setarg 0x0500
+	istore 2, contw
+	compare SDP_ATTRIBUTE_RES,regb,0xff			 
+	branch fullsearch,true
+	compare SDP_SEARCHATTRIB_RES,regb,0xff			 
+	branch fullsearch,true
+	setarg 0x000000
+	istore 5,contw
+	branch outempty
+
+fullsearch:					/* pduid must be 5 or 7 */
+	setarg 0x350200
+	istore 5,contw
+outempty:
+	jam 10,mem_sdp_tx_pkt_length
+	rtn
+
+//return length in pdata(whole element ,include header and data ), contr not change
+sdp_data_len:
+	call store_contw
+	call store_contr
+	call sdp_get_data
+	call get_contw
+	call get_contr
+	copy temp,pdata
+	rtn
+
+//return data length in pdata, contr is data pionter,return length in temp(whole element ,include header and data )
+sdp_get_data:
+	ifetch 1,contr
+	and pdata,0x7,loopcnt
+	rshift3 pdata,pdata
+	bne 0,sdp_get_data_type_not0
+sdp_get_data_type0:	
+	force 1,pdata
+	force 1,temp
+	rtn
+	
+sdp_get_data_type_not0_sizeindex01234:
+	call left_shift_n
+	add pdata,1,temp  //add header length
+	rtn
+sdp_get_data_type_not0:
+	deposit loopcnt
+	sub pdata,4,null
+	branch sdp_get_data_type_not0_sizeindex01234,positive
+	beq 5,sdp_get_data_type_not0_sizeindex5
+	beq 6,sdp_get_data_type_not0_sizeindex6
+	beq 7,sdp_get_data_type_not0_sizeindex7
+	rtn
+	
+sdp_get_data_type_not0_sizeindex5:
+	ifetch 1,contr
+	add pdata,2,temp  //add header length
+	rtn
+sdp_get_data_type_not0_sizeindex6:
+	ifetch 2,contr
+	byteswap pdata,pdata
+	add pdata,3,temp  //add header length
+	rtn
+sdp_get_data_type_not0_sizeindex7:
+	ifetch 2,contr	
+	byteswap pdata,pdata
+	ifetcht 2,contr	
+	byteswap temp,temp
+	lshift16 temp,temp
+	iadd temp,pdata
+	add pdata,5,temp  //add header length
+	rtn
+
+/* find with uuids
+input uuids pionter in timeup
+return handles in mem_sdp_handle_list; handles number in queue if found 
+return regb all length*/
+search_all_uuid:
+	bpatchx patch3a_5,mem_patch3a
+	force 0,queue
+	arg 0,regb
+	arg mem_sdp_handle_list,contw
+search_all_uuid_llop:
+	ifetch 2,timeup
+ 	rtn blank
+	call search_uuid
+	copy queue,pdata
+	rtneq SDP_MAX_HANDLE_NUMBER 
+	increase 2,timeup
+ 	branch search_all_uuid_llop
+	
+search_uuid:
+//	arg 0,regb
+	iforce regc
+//	force 0,queue
+	fetch 2, mem_ui_uuid_table
+	iforce contr
+search_uuid_next:
+	copy queue,pdata
+	rtneq SDP_MAX_HANDLE_NUMBER   
+	disable user
+	ifetch 1,contr
+	rtn blank
+	iforce loopcnt
+search_uuid_loop:	
+	ifetch 2,contr
+	isub regc,null
+	nbranch search_uuid_not_found,zero
+	enable user					// uuid match
+search_uuid_not_found:
+	loop search_uuid_loop
+	ifetcht 4,contr					// get handle 
+	copy contr,rega
+	nbranch search_uuid_nomatch,user
+	arg mem_sdp_handle_list,contr
+	arg SDP_MAX_HANDLE_NUMBER,loopcnt 
+search_uuid_check_same_handle:
+	ifetch 4,contr
+	branch search_uuid_store_handle,blank
+	isub temp,null
+	branch search_uuid_nomatch,zero
+	loop search_uuid_check_same_handle
+	rtn 
+search_uuid_store_handle:
+	istoret 4,contw
+	increase 1,queue
+	copy rega,contr
+	call sdp_data_len
+	iadd regb,regb
+	iadd contr,contr		 
+	branch search_uuid_next
+search_uuid_nomatch:	
+	copy rega,contr
+	call sdp_get_data
+	iadd contr,contr			// next paragraph 
+	branch search_uuid_next
+
+/* temp is handle,
+return zero  if found
+return data pointer in contr 
+*/
+search_handle:
+	bpatchx patch3a_6,mem_patch3a
+	fetch 2,mem_ui_uuid_table
+	iforce contr
+search_handle_loop:	
+	ifetch 1,contr
+	branch disable_zero,blank
+	lshift pdata,pdata
+	iadd contr,contr
+	ifetch 4,contr
+	isub temp,null
+	rtn zero
+	deposit contw
+	store 2,mem_contw
+	storet 8,mem_temp
+	call sdp_get_data
+	iadd contr,contr
+	copy contr,pdata
+	fetcht 2,mem_contw
+	copy temp,contw
+	fetcht 8,mem_temp
+	copy pdata,contr
+	branch search_handle_loop
+
+/**
+* input regb and regc.regb is the attribute ID and regc is UUID.
+* set contr if find attribute or 0 if not
+*/
+search_attrib:
+	bpatchx patch3a_7,mem_patch3a
+	fetch 2,mem_ui_uuid_table
+	iforce contr
+search_attrib_next:
+	ifetch 1,contr
+	branch search_attrib_end, blank
+	iforce loopcnt
+search_attrib_loop:	
+	ifetch 2,contr
+	isub regc,null						/* regc is UUID, compare it */
+	branch search_attrib_found_uuid,zero
+	loop search_attrib_loop
+	increase 4,contr
+	call sdp_get_data
+	iadd contr,contr			/* next paragraph */
+	branch search_attrib_next	
+search_attrib_found_uuid:
+	increase -1,loopcnt
+	lshift loopcnt,pdata
+	iadd contr,contr
+	increase 4,contr
+	call sdp_get_data
+	iadd contr,timeup					/* attribute list end */
+search_attrib_loop_attribs:	
+	increase 1,contr
+	ifetch 2,contr
+	isub regb,null
+	//force 0x1,pdata,zero
+//	setflag zero, 0,pdata
+//	copy timeup, timeup
+	branch disable_blank,zero			/* attribute found */
+	call sdp_data_len
+	iadd contr,contr
+	deposit timeup
+	isub contr,null
+	branch search_attrib_end, zero /*attribute end, not found the attribute, return contr = 0*/
+	branch search_attrib_loop_attribs	
+search_attrib_end:
+	force 0,contr
+	force 0,pdata
+	rtn
+	
+
+//search the attribute according the record handle
+//record handle in temp, attribute in regb
+//set the contr to zero if not found
+search_handle_attrib:	
+	bpatchx patch3b_0,mem_patch3b
+	fetch 2,mem_ui_uuid_table
+	iforce contr
+search_handle_attrib_next:
+	ifetch 1,contr
+	branch search_handle_attrib_end, blank
+	lshift pdata,pdata
+	iadd contr, contr
+	ifetch 4,contr
+	isub temp,null						/* regc is UUID, compare it */
+	branch search_handl_attrib_found_handle,zero
+	call sdp_get_data
+	iadd contr,contr			/* next paragraph */
+	branch search_handle_attrib_next	
+search_handl_attrib_found_handle:
+	call sdp_get_data
+	iadd contr,timeup					/* attribute list end */
+search_handle_attrib_loop_attribs:	
+	increase 1,contr
+	ifetch 2,contr
+	isub regb,null
+	rtn zero							/* attribute found */
+	call sdp_data_len
+	iadd contr,contr
+	deposit timeup
+	isub contr,null
+	branch search_handle_attrib_end, zero /*attribute end, not found the attribute, return contr = 0*/
+	branch search_handle_attrib_loop_attribs
+search_handle_attrib_end:
+	force 0,contr
+	rtn	
+
+
+//enable user if find rfcomm channel number, pdata is channel number
+search_rfcomm_cn:
+	arg 0x0400,regb  // attribute protocol edscriptor list
+	call search_handl_attrib_found_handle
+	arg 0x0300,regb  // uuid rfcomm
+	call search_uuid_in_data
+	nrtn user
+	sub rega,3,null
+	branch disable_user,positive
+	ifetch 1,contr
+	bne 0x08,disable_user
+	ifetch 1,contr
+	rtn
+	
+ //input timeup is lenth
+ //input contr is data ptr
+ //return contr is end of uuid; enable user if found uuid
+search_uuid_in_data:
+	bpatchx patch3b_1,mem_patch3b
+	call sdp_get_data
+	copy pdata,rega
+search_uuid_in_data_loop:	
+	ifetch 1,contr
+	and pdata,0x7,loopcnt
+	rshift3 pdata,pdata
+	sub pdata,3,null
+	branch search_uuid_in_data_found_uuid,zero
+	copy loopcnt,pdata
+	beq 5,search_uuid_in_data_found_element_index5
+	beq 6,search_uuid_in_data_found_element_index6
+	beq 7,search_uuid_in_data_found_element_index7
+	increase -1,contr
+	call sdp_get_data
+	iadd contr,contr
+	copy rega,pdata
+	isub temp,rega
+	branch disable_user,zero
+	branch search_uuid_in_data_loop
+	
+search_uuid_in_data_found_element_index5:
+	increase -2,rega
+	increase 1,contr
+	branch search_uuid_in_data_loop
+search_uuid_in_data_found_element_index6:
+	increase -3,rega
+	increase 2,contr
+	branch search_uuid_in_data_loop
+search_uuid_in_data_found_element_index7:
+	increase -5,rega
+	increase 4,contr
+	branch search_uuid_in_data_loop		
+	
+search_uuid_in_data_found_uuid:
+	increase -1,rega
+	copy loopcnt,pdata
+	beq 1,search_uuid_in_data_type_uuid_16
+	beq 2,search_uuid_in_data_type_uuid_32
+	beq 4,search_uuid_in_data_type_uuid_128
+	branch disable_user 
+search_uuid_in_data_type_uuid_128:
+	increase -12,rega
+search_uuid_in_data_type_uuid_32:
+	ifetch 2,contr
+	increase -2,rega
+search_uuid_in_data_type_uuid_16:
+	ifetch 2,contr
+	isub regb,null
+	branch enable_user,zero
+	increase -2,rega
+	branch disable_user,zero
+	branch search_uuid_in_data_loop
+
+/*
+//rega:l2cap len ,mem_search_uuid:uuid to search
+sdp_send_search_req:
+	call l2cap_malloc_sdp_req
+	setarg SDP_SEARCH_REQ
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid_local
+	byteswap pdata,pdata
+	istore 2,contw
+	increase -5,rega
+	byteswap rega,rega
+	//istorer rega,2,contw
+	copy rega,pdata
+	istore 2,contw
+	setarg 0x0335
+	istore 2,contw
+	setarg 0x19
+	istore 1,contw
+	fetch 2,mem_search_uuid
+	istore 2,contw
+	setarg 0x0008
+	istore 2,contw
+	setarg 0
+	istore 1,contw
+	rtn
+
+//rega:l2cap len
+sdp_send_attribute_req:
+	call l2cap_malloc_sdp_req
+	setarg SDP_ATTRIBUTE_REQ
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid_local
+	byteswap pdata,pdata
+	istore 2,contw
+	increase -5,rega
+	byteswap rega,rega
+//	istorer rega,2,contw
+	copy rega,pdata
+	istore 2,contw
+	fetch 4,mem_sdp_record_handle
+	istore 4,contw
+	setarg 0x2c01
+	istore 2,contw
+	setarg 0x0535
+	istore 2,contw
+	setarg 0x0a
+	istore 1,contw
+	setarg 0
+	istore 2,contw
+	setarg -1
+	istore 2,contw
+	setarg 0
+	istore 1,contw
+	rtn
+*/	
+	
+
+sdp_send_spp_request:
+	call l2cap_get_sdp_tx_payload
+	copy pdata,contw
+	setarg 6//Search Attr Req
+	istore 1,contw
+	setarg sdp_tid_spp					
+	istore 2,contw
+	setarg 0x0f00 //length15
+	istore 2,contw
+	setarg 0x1a0535
+	istore 3,contw
+	setarg 0x0111
+	lshift16 pdata,pdata //UUID
+	istore 4,contw
+	setarg 0x2600 //max return len
+	istore 2,contw
+	setarg 0x0335
+	istore 2,contw
+	setarg 0x0009
+	istore 2,contw
+	setarg 0x0004
+	istore 2,contw
+	jam 0x14,mem_sdp_tx_pkt_length
+	rtn
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/security.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/security.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/security.prog	(working copy)
@@ -0,0 +1,1642 @@
+
+ifdef SECURE_CONNECTION
+	
+function_g2:
+	bpatchx patch3b_2,mem_patch3b
+	jam 80,mem_AES_CMAC_data_length
+	arg memdat,contw
+	arg mem_le_srand,contr
+	call memcpy16
+	arg mem_le_pubkey_local_x_256,contr
+	call memcpy32
+	arg mem_le_pubkey_remote_x_256,contr
+	call memcpy32
+	call inverse_memdat	
+	arg mem_le_mrand,contr
+	call store_inverse_k	
+	call function_AES_CMAC	
+
+	arg mem_AES_CMAC_temp,contw
+	call load_inverse_result
+	setarg 1000000
+	copy pdata,rega
+	fetch 4,mem_AES_CMAC_temp
+	idiv rega
+	call wait_div_end
+	remainder pdata
+	store 4,mem_gkey
+//call ice_break
+	rtn
+
+function_f6_eb:
+	jam 65,mem_AES_CMAC_data_length
+	arg memdat,contw
+	call store_addr_common_a
+	call store_addr_common_b
+	fetch 3,mem_le_pres+1
+	istore 3,contw
+//	arg mem_le_r,contr
+//	call memcpy16	
+	call get_r
+	
+	arg mem_le_mrand,contr
+	call memcpy16
+	arg mem_le_srand,contr
+	call memcpy16
+	call inverse_memdat
+	arg mem_le_mackey ,contr
+	arg mem_AES_CMAC_k,contw
+	call memcpy16
+//	call p_store_inverse_k	
+	branch function_AES_CMAC
+//	arg mem_AES_CMAC_temp,contw
+//	branch p_load_inverse_result
+
+get_r:
+	fetch 4,mem_le_tk
+	istore 4,contw
+	call memset0_4
+	branch memset0_8
+
+function_f6_ea:
+	bpatchx patch3b_3,mem_patch3b
+	jam 65,mem_AES_CMAC_data_length
+	arg memdat,contw
+	call store_addr_common_b
+	call store_addr_common_a
+	fetch 3,mem_le_preq+1
+	istore 3,contw
+//	arg mem_le_r,contr
+//	call memcpy16	
+	call get_r
+	arg mem_le_srand,contr
+	call memcpy16
+	arg mem_le_mrand,contr
+	call memcpy16
+	call inverse_memdat
+	arg mem_le_mackey ,contr
+	arg mem_AES_CMAC_k,contw
+	call memcpy16
+//	call p_store_inverse_k	
+	call function_AES_CMAC
+	arg mem_AES_CMAC_temp,contw
+	branch load_inverse_result
+
+function_f5:
+	jam 32,mem_AES_CMAC_data_length
+	arg mem_le_dhkey_256 ,contr
+	arg memdat,contw
+	call memcpy32
+	call inverse_memdat
+	arg mem_le_slat,contr
+	call store_inverse_k	
+	call function_AES_CMAC
+	arg mem_AES_CMAC_k,contw
+	call store_aes_result
+	arg 1,temp
+	call function_f5_common
+	arg mem_le_ltk,contw
+	call load_inverse_result
+	arg 0,temp
+	call function_f5_common
+	arg mem_le_mackey,contw
+//	branch p_load_inverse_result
+	branch store_aes_result
+
+
+function_f5_common:
+	bpatchx patch3b_4,mem_patch3b
+	jam 53,mem_AES_CMAC_data_length
+	setarg 0x100
+	store 2,memdat
+	call store_addr_common_b
+	call store_addr_common_a
+	arg mem_le_srand,contr
+	call memcpy16
+	arg mem_le_mrand,contr
+	call memcpy16
+//	fetch 4,mem_le_keyid 0x62746c65
+	setarg 0x6c65
+	istore 2,contw
+	setarg 0x6274
+	istore 2,contw
+	istoret 1,contw   //counter
+	call inverse_memdat	
+	branch function_AES_CMAC
+
+store_addr_common_b:
+	fetch 6,mem_le_lap
+	istore 6,contw
+	fetch 1,mem_le_conn_own_addr_type
+	istore 1,contw
+	rtn
+
+store_addr_common_a:
+	fetch 6,mem_le_plap
+	istore 6,contw
+//	setarg 0x2dcfc1
+//	istore 3,contw
+//	setarg 0xa71370
+//	istore 3,contw
+	fetch 1,mem_le_conn_peer_addr_type
+	istore 1,contw
+	rtn
+
+function_f4_ca:
+	jam 65,mem_AES_CMAC_data_length
+	fetch 1,mem_passkey_1bit
+	store 1,memdat
+	arg mem_le_pubkey_local_x_256,contr
+	call memcpy32
+	arg mem_le_pubkey_remote_x_256,contr
+	call memcpy32
+	call inverse_memdat
+	arg mem_le_mrand,contr
+	call store_inverse_k	
+	branch function_AES_CMAC
+	
+
+function_f4_cb:
+	jam 65,mem_AES_CMAC_data_length
+	fetch 1,mem_passkey_1bit
+	store 1,memdat
+	arg mem_le_pubkey_remote_x_256,contr
+	call memcpy32
+	arg mem_le_pubkey_local_x_256,contr
+	call memcpy32
+	call inverse_memdat
+	arg mem_le_srand,contr
+	call store_inverse_k	
+	branch function_AES_CMAC
+
+function_AES_CMAC:
+	bpatchx patch3b_5,mem_patch3b
+	call function_AES_CMAC_Generate_Subkey
+//call ice_break
+//	jam 65,mem_AES_CMAC_data_length
+//call ice_break
+	fetch 1,mem_AES_CMAC_data_length
+	copy pdata,temp
+function_ceil16:
+	increase 15,pdata
+	rshift4 pdata,pdata
+	copy pdata,regb
+	branch function_AES_CMAC_set_flag_0_balnk,blank
+	and temp,0x0f,pdata
+	nbranch function_AES_CMAC_set_flag_0,blank
+//	flag =1;
+	arg mem_AES_CMAC_k1,regc
+	arg memdat,pdata
+	increase -16,pdata
+//	iadd temp,pdata
+//	isub rega,rega
+	iadd temp,rega	
+	arg mem_AES_CMAC_M_last,contw
+	arg 4,loopcnt	
+	call xor_loop
+//call ice_break
+//	arg mem_f4_k1,contr
+//	call load_key
+	branch function_AES_CMAC_aes
+
+function_AES_CMAC_set_flag_0_balnk:
+	arg 1,regb
+	arg 0,rega
+//	arg mem_f4_test_data,pdata
+	branch function_AES_CMAC_set_flag_0_common
+//call ice_break
+
+function_AES_CMAC_set_flag_0:
+//	flag = 0;
+	and temp,0x0f,rega
+function_AES_CMAC_set_flag_0_common:
+	arg memdat,pdata
+	iadd temp,pdata
+	isub rega,contr
+//call ice_break
+	arg mem_AES_CMAC_temp,contw
+	call function_AES_CMAC_padding
+//call ice_break
+	arg mem_AES_CMAC_k2,regc
+	arg mem_AES_CMAC_temp,rega
+	arg mem_AES_CMAC_M_last,contw
+	arg 4,loopcnt	
+	call xor_loop	
+//call ice_break
+
+//	arg mem_f4_k2,contr
+//	call load_key
+
+//	branch p_function_f4_aes
+function_AES_CMAC_aes:
+//	arg mem_f4_k,contr
+//	call load_key
+//	arg mem_AES_CMAC_xor,contr
+//	call load_data128
+	call aes_clear_data
+	call aes_init	
+//	arg mem_f4_k,contr
+//	call load_key
+	arg memdat,contr
+function_AES_CMAC_aes_loop:
+//generate_mic_loop:
+	increase -1,regb
+	deposit regb
+	branch function_AES_CMAC_aes_loop_end,blank
+	call load_data128
+	call do_aes_cbc
+	branch function_AES_CMAC_aes_loop
+//generate_mic_end:
+function_AES_CMAC_aes_loop_end:	
+	arg mem_AES_CMAC_temp,contw
+	call store_aes_result
+	arg mem_AES_CMAC_M_last,contr
+	call load_data128
+	call aes_init	
+	arg mem_AES_CMAC_temp,contr
+	call load_data128	
+	branch do_aes_cbc
+
+
+
+load_inverse_result:
+//	arg mem_AES_CMAC_temp,contw
+	copy contw,rega
+	call store_aes_result
+//	arg mem_AES_CMAC_temp,rega
+	arg 16,loopcnt
+	branch inverse_data
+	
+store_inverse_k:
+	arg mem_AES_CMAC_k,contw
+	call memcpy16
+inverse_k:	
+	arg 16,loopcnt
+	arg mem_AES_CMAC_k,rega	
+	branch inverse_data
+	
+inverse_memdat:
+	fetch 1,mem_AES_CMAC_data_length
+	copy pdata,loopcnt
+	arg memdat,rega
+	branch inverse_data
+
+bn_lshift_0_inverse:
+	ifetch 1,regA
+	lshift pdata,pdata
+	isolate1 0,regC
+	setflag true,0,pdata	
+	isolate1 8,pdata
+	setflag true,0,regC	
+	istore 1,rega
+         increase -1,rega
+	loop bn_lshift_0_inverse
+	rtn	
+
+function_AES_CMAC_k1_inverse:
+	arg mem_AES_CMAC_k1,regA
+function_AES_CMAC_inverse_common:
+	increase 15,rega
+	force 16,loopcnt
+	force 0,regC
+	branch  bn_lshift_0_inverse	
+
+function_AES_CMAC_k2_inverse:
+	arg mem_AES_CMAC_k2,regA
+	branch function_AES_CMAC_inverse_common
+	
+
+function_AES_CMAC_Generate_Subkey:
+	arg mem_AES_CMAC_k,contr
+	call load_key
+//	arg mem_AES_CMAC_xor,contr
+//	call aes_load_xor
+	force regidx_xor,regext_index
+	call aes_clear
+	call aes_clear_data
+	call do_aes_ocb
+	
+//	force 0x38,aes_ctrl
+//	force 0x0,aes_ctrl
+//	call wait_aes
+	arg mem_AES_CMAC_k1,contw
+	call store_aes_result
+function_AES_CMAC_k1:
+	bpatchx patch3b_6,mem_patch3b
+	fetch 1,mem_AES_CMAC_k1
+	isolate1 7,pdata
+	nbranch function_AES_CMAC_k1_0,true	
+	call function_AES_CMAC_k1_inverse
+	
+//p_function_f4_k1_xor:
+	arg mem_AES_CMAC_k1,regc
+//	arg mem_AES_CMAC_rb,rega
+	arg mem_AES_CMAC_k1,contw
+//	arg 3,loopcnt
+//	call xor_loop
+	call function_AES_CMAC_xor_rb
+	branch function_AES_CMAC_k2
+function_AES_CMAC_k1_0:	
+	call function_AES_CMAC_k1_inverse
+function_AES_CMAC_k2:
+//call ice_break
+	arg mem_AES_CMAC_k1,contr
+	arg mem_AES_CMAC_k2,contw
+	call memcpy16
+	fetch 1,mem_AES_CMAC_k2
+	isolate1 7,pdata
+	nbranch function_AES_CMAC_k2_inverse,true		
+	call function_AES_CMAC_k2_inverse
+//p_function_f4_k2_xor:
+	arg mem_AES_CMAC_k2,regc
+//	arg mem_AES_CMAC_rb,rega
+	arg mem_AES_CMAC_k2,contw
+//	arg 3,loopcnt
+//	branch xor_loop	
+
+
+//rb:00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 87 
+function_AES_CMAC_xor_rb:
+	arg 3,loopcnt
+function_AES_CMAC_xor_rb_loop:	
+	arg 0,temp
+	call function_AES_CMAC_xor_loop_common	
+	increase 4,regc
+	loop  function_AES_CMAC_xor_rb_loop
+	arg 0x8700,temp
+	lshift16 temp,temp
+function_AES_CMAC_xor_loop_common:	
+	ifetch   4,regc
+	ixor  temp,pdata
+	istore   4,contw	
+	rtn
+		
+
+
+
+//input rega :length <16	contr,contw
+function_AES_CMAC_padding:
+	bpatchx patch3b_7,mem_patch3b
+	arg 16,loopcnt
+	arg 0,pdata
+function_AES_CMAC_padding_loop:
+	isub rega,null
+	branch function_AES_CMAC_padding_beq_length,zero
+	branch function_AES_CMAC_padding_big_length,positive
+	ifetcht 1,contr
+	istoret 1,contw
+function_AES_CMAC_padding_loop2:	
+	increase 1,pdata
+	loop function_AES_CMAC_padding_loop
+	rtn
+function_AES_CMAC_padding_beq_length:	
+	arg 0x80,temp
+function_AES_CMAC_padding_common:
+	istoret 1,contw
+	branch  function_AES_CMAC_padding_loop2
+
+function_AES_CMAC_padding_big_length:
+	arg 0,temp
+	branch function_AES_CMAC_padding_common
+
+endif
+	
+generate_kinit:
+	call function_e22
+	arg mem_input_store,contr
+	arg mem_kinit,contw		/* Kinit is ready */
+	branch memcpy16
+
+
+function_e21:	/* rega pointers to bdaddr */
+	disable user
+	call function_expand
+	arg mem_random_number,contr
+	arg mem_x,contw
+	force 15,loopcnt
+	call memcpy			
+	ifetch 1,contr
+	xor_into 6,pdata
+	istore 1,contw
+	setarg mem_y
+	store 2,memp_ar_input
+	setarg mem_x
+	store 2,memp_ar_key
+	set1 mark_ar2,mark
+	branch function_ar
+
+
+	
+function_e22:		/* rega pointers to bdaddr */
+	fetcht 1,mem_pin_length
+	force 16,regb			/* total 16 bytes */
+	add temp,6,regc		/* regc is l' */
+	sub regc,16,null		
+	branch function_e22_pin_init,positive 
+	force 16,regc
+function_e22_pin_init:			/* generate x from pin and bdaddr */
+	arg mem_x,contw
+function_e22_genx_pin:
+	arg mem_pin,contr
+	copy temp,loopcnt
+	disable user
+function_e22_genx_loop:
+	ifetch 1,contr
+	istore 1,contw
+	increase -1,regb
+	branch function_e22_genx_end,zero
+	loop function_e22_genx_loop
+	branch function_e22_genx_pin,user
+	enable user
+	force 6,loopcnt
+	copy rega,contr
+	branch function_e22_genx_loop
+function_e22_genx_end:
+	arg mem_random_number,contr
+	arg mem_y,contw
+	call memcpy16
+	fetch 1,mem_y15
+	ixor regc,pdata
+	store 1,mem_y15	/* inpy[15] = rand_num[15]^l'; */
+	setarg mem_y
+	store 2,memp_ar_input
+	setarg mem_x
+	store 2,memp_ar_key
+	set1 mark_ar2,mark
+	branch function_ar
+
+
+
+
+function_e1:	/* rega pointers to bdaddr */
+	disable user
+	call function_expand
+	branch function_hash
+
+function_e3:
+	arg mem_aco,rega
+	enable user
+	call function_expand
+	call function_hash
+	arg mem_input_store,contr
+	arg mem_kc,contw
+	branch memcpy16
+
+	/* costs 41769 clocks */
+function_hash:
+	setarg mem_random_number
+	store 2,memp_ar_input
+	setarg mem_link_key
+	store 2,memp_ar_key
+	set0 mark_ar2,mark
+	call function_ar
+	arg mem_input_store,rega
+	arg mem_random_number,regb
+	arg mem_x,contw
+	call xor16
+	arg mem_x,rega
+	arg mem_y,regb
+	copy regb,contw
+	enable user
+	call add16
+	call key_offset
+	setarg mem_y
+	store 2,memp_ar_input
+	setarg mem_x
+	store 2,memp_ar_key
+	set1 mark_ar2,mark
+	branch function_ar
+	
+
+	/* totally costs 20700 clocks */
+function_ar:
+	jam 0,mem_ar_hround
+	fetch 2,memp_ar_key
+	iforce contr
+	arg mem_key_store,contw
+	call memcpy16
+	fetch 2,memp_ar_input
+	iforce contr
+	arg mem_input_store,contw
+	call memcpy16
+	
+function_ar_loop:
+	call key_scheduling
+	disable user
+	bmark0 mark_ar2,function_ar_original
+	fetch 1,mem_ar_hround
+	bne 4,function_ar_original
+	fetch 2,memp_ar_input
+	iforce regb
+	call xor_mod32_ar2
+function_ar_original:
+	call xor_mod32
+	call el_boxes
+	fetch 1,mem_ar_hround
+	increase 1,pdata
+	store 1,mem_ar_hround
+
+	call key_scheduling
+	enable user
+	call xor_mod32
+	call pht
+	call permute
+	call pht
+	call permute
+	call pht
+	call permute
+	call pht
+	fetch 1,mem_ar_hround
+	increase 1,pdata
+	store 1,mem_ar_hround
+	bne 16,function_ar_loop
+	call key_scheduling
+	disable user
+	branch xor_mod32
+	
+/* input round number and temp key in mem_key_store, and output the next temp key in mem_key_store */
+/* round key is generated and store in mem_round_key */
+key_scheduling:
+	fetch 1,mem_ar_hround
+	arg mem_key_store,contr
+	branch key_sched_zero,blank
+	iforce regb      			/* regb is half round */
+	force 17,loopcnt
+	copy contr,contw
+key_rotateloop:
+	ifetch 1,contr
+	lshift3 pdata,temp
+	rshift2 pdata,pdata
+	rshift3 pdata,pdata
+	ior temp,pdata
+	istore 1,contw
+	loop key_rotateloop
+	setarg mem_key_store
+	iadd regb,contr
+	force 16,loopcnt    
+	arg mem_round_key,contw
+key_select_octet_loop:
+	ifetch 1,contr
+	istore 1,contw
+	compare mem_key_store_end,contr,0xff
+	nbranch key_select_octet_nwrap,true
+	increase -17,contr
+key_select_octet_nwrap:
+	loop key_select_octet_loop
+	force 0,rega         /* rega is index of octet within row */
+	add regb,-1,regc    /* this is the row index, half_round#1 is 0 */
+	lshift2 regc,regc
+	lshift2 regc,regc
+	call enable_authrom
+	setarg mem_b_box
+	iadd regc,regc       /* regc hold the starting address of the row */
+	arg mem_round_key,contw
+	force 16,loopcnt
+bias_round_key_loop:
+	ifetcht 1,regc
+	ifetch 1,contw
+	iadd temp,pdata
+	istore 1,contw
+	increase 1,regc
+	loop bias_round_key_loop
+	branch disable_authrom
+
+key_sched_zero:    /* round 0, key1 */
+	force 16,loopcnt
+	force 0,temp
+create_byte_16_loop:
+	ifetch 1,contr
+	ixor temp,temp
+	loop create_byte_16_loop
+	deposit temp
+	istore 1,contr    	/* store the byte #16 */
+	arg mem_key_store,contr
+	arg mem_round_key,contw
+	branch memcpy16
+
+xor_mod32:     /* xor on 0,3, add on 1,2. if user is set, invert. x in rega and y in regb, out in contw */
+	arg mem_round_key,regb
+xor_mod32_ar2:
+	force 16,loopcnt
+	arg mem_input_store,rega
+	copy rega,contw
+xor_mod32_loop:	
+	ifetcht 1,rega
+	ifetch 1,regb
+	ixor temp,alarm
+	and loopcnt,3,regc
+	nbranch xor_mod32_invert,user
+	xor_into 3,regc
+xor_mod32_invert:
+	sub regc,1,regc
+	branch xor_even,positive
+	iadd temp,alarm
+xor_even:
+	deposit alarm
+	istore 1,contw
+	increase 1,rega
+	increase 1,regb
+	loop xor_mod32_loop
+	rtn
+
+el_boxes:
+	call enable_authrom
+	force 16,loopcnt
+	arg mem_input_store,rega
+el_box_loop:	
+	ifetch 1,rega
+	arg mem_e_box,contr
+	and loopcnt,3,regc
+	sub regc,1,null
+	branch e_boxes,positive
+	arg mem_l_box,contr
+e_boxes:
+	iadd contr,contr
+	ifetch 1,contr
+	istore 1,rega
+	increase 1,rega
+	loop el_box_loop
+	branch disable_authrom
+
+pht:				
+	force 8,loopcnt
+	arg mem_input_store,contr
+	copy contr,contw
+pht_loop:
+	ifetch 1,contr
+	iforce rega
+	ifetch 1,contr
+	iforce regb
+	lshift rega,pdata
+	iadd regb,pdata
+	istore 1,contw
+	deposit rega
+	iadd regb,pdata
+	istore 1,contw
+	loop pht_loop
+	rtn
+
+/* 8 11 12 15 2 1 6 5 10 9 14 13 0 7 4 3 */
+permute:			
+	setarg 0x8ae42c
+	iforce temp
+	force 7,loopcnt
+	call permute_exchange
+	setarg 0xd751b
+	iforce temp
+	force 5,loopcnt
+	call permute_exchange
+	fetch 1,mem_input_store+15
+	iforce rega
+	fetch 1,mem_input_store+3
+	store 1,mem_input_store+15
+	deposit rega
+	store 1,mem_input_store+3
+	rtn
+
+permute_exchange:
+	and temp,0xf,regb
+permute_loop:
+	and temp,0xf,pdata
+	arg mem_input_store,contw
+	iadd contw,contw
+	ifetch 1,contw
+	iforce regc
+	deposit rega
+	istore 1,contw
+	copy regc,rega
+	rshift4 temp,temp
+	loop permute_loop	
+	setarg mem_input_store
+	iadd regb,contw
+	deposit rega
+	istore 1,contw
+	rtn
+
+add16:
+	enable user
+	branch xor_add16
+
+xor16:
+	disable user
+xor_add16:	/* if user is set, do add, else do xor */
+	force 16,loopcnt	/* rega and regb pointers to src, contw is result */
+xoradd_loop:
+	ifetcht 1,rega
+	ifetch 1,regb
+	branch xoradd_add,user
+	ixor temp,pdata
+	branch xoradd_store
+xoradd_add:	
+	iadd temp,pdata
+xoradd_store:	
+	istore 1,contw
+	increase 1,rega
+	increase 1,regb
+	loop xoradd_loop
+	rtn
+
+	
+function_expand:		/* rega pointers to bdaddr, or aco and user is set */
+	arg mem_y,contw
+	ifetch 6,rega
+	istore 6,contw
+	branch expand_12,user
+	ifetch 6,rega
+	branch expand_cont
+expand_12:
+	ifetch 6,contr
+expand_cont:
+	istore 6,contw
+	ifetch 4,rega
+	istore 4,contw
+	rtn
+
+key_offset:
+	arg mem_link_key,contr
+	arg mem_x,contw
+	arg 0,temp
+	setarg 0x8395a7
+	call concatenate_temp24
+	setarg 0xb3c1df
+	call concatenate_temp24
+	setarg 0xe5e9
+	call concatenate_temp16
+	copy temp,regab
+	disable user
+	call key_addxor
+	copy regab,temp
+	enable user
+	branch key_addxor
+
+key_addxor:
+	force 8,loopcnt
+key_addxor_loop:	
+	ifetch 1,contr
+	compare 1,loopcnt,1
+	branch key_high,user
+	branch key_xor,true
+key_add:	
+	iadd temp,pdata
+	branch key_store
+key_high:
+	branch key_add,true
+key_xor:
+	ixor temp,pdata
+key_store:
+	istore 1,contw
+	rshift8 temp,temp
+	loop key_addxor_loop
+	rtn
+
+copy_aco:
+	fetch 6,mem_input_store+4
+	store 6,mem_aco
+	ifetch 6,contr
+	istore 6,contw
+	rtn
+	
+concatenate_temp24:
+	lshift8 temp,temp
+concatenate_temp16:
+	lshift16 temp,temp
+	ior temp,temp
+	rtn
+
+ifdef TESTING
+test_security:
+	fetch 1,0xff
+	branch test_security,blank
+
+	/* inrand */
+	setarg 0x1BC683
+	store 3,0x0
+	setarg 0x122980
+	istore 3,contw
+	setarg 0xD0DB17
+	istore 3,contw
+	setarg 0x2B1D78
+	istore 3,contw
+	setarg 0x2743A6
+	istore 3,contw
+	setarg 0xD8
+	istore 1,contw
+
+	/* comb A */
+	setarg 0xA6D0C9
+	store 3,0x10
+	setarg 0xA9E86C
+	istore 3,contw
+	setarg 0x9E89D5
+	istore 3,contw
+	setarg 0xC61838
+	istore 3,contw
+	setarg 0x6F0318
+	istore 3,contw
+	setarg 0x9F
+	istore 1,contw
+
+	/* comb B */
+	setarg 0x7F6833
+	store 3,0x20
+	setarg 0xE62E1B
+	istore 3,contw
+	setarg 0x9F67FC
+	istore 3,contw
+	setarg 0x8D3712
+	istore 3,contw
+	setarg 0x0B846C
+	istore 3,contw
+	setarg 0x4A
+	istore 1,contw
+
+	/* auth rand A */
+	setarg 0xFBB686
+	store 3,0x30
+	setarg 0x19FE7F
+	istore 3,contw
+	setarg 0x16A439
+	istore 3,contw
+	setarg 0xF4F6A4
+	istore 3,contw
+	setarg 0x10D61D
+	istore 3,contw
+	setarg 0xDE
+	istore 1,contw
+
+	/* auth rand B */
+	setarg 0x735B0C
+	store 3,0x40
+	setarg 0xA7F06B
+	istore 3,contw
+	setarg 0x04625E
+	istore 3,contw
+	setarg 0x3463B0
+	istore 3,contw
+	setarg 0xB8F17A
+	istore 3,contw
+	setarg 0x7C
+	istore 1,contw
+
+	/* address A */
+	setarg 0xf91330
+	store 3,0xb0
+	setarg 0x664c7d
+	istore 3,contw
+
+	/* address B */
+	setarg 0xdc7100
+	store 3,0xb8
+	setarg 0x2ea003
+	istore 3,contw
+
+	/* sres A */
+	setarg 0x2EEE19
+	store 3,0x50
+	setarg 0x7E
+	istore 1,contw
+
+	/* sres B */
+	setarg 0x4231A4
+	store 3,0x58
+	setarg 0xD1
+	istore 1,contw
+
+	/* linkA */
+	setarg 0xa6a026
+	store 3,0x60
+	setarg 0x2569d2
+	istore 3,contw
+	setarg 0xab4a9d
+	istore 3,contw
+	setarg 0x5e87c0
+	istore 3,contw
+	setarg 0x792aa9
+	istore 3,contw
+	setarg 0x4b
+	istore 1,contw
+
+	/* linkB */
+	setarg 0xa1f07d
+	store 3,0x70
+	setarg 0xec97a6
+	istore 3,contw
+	setarg 0xae31eb
+	istore 3,contw
+	setarg 0x6fe3c4
+	istore 3,contw
+	setarg 0xa1ae1a
+	istore 3,contw
+	setarg 0x3a
+	istore 1,contw
+
+	/* linkkey */
+	setarg 0x07505b
+	store 3,0x80
+	setarg 0xc9fe74
+	istore 3,contw
+	setarg 0x057b76
+	istore 3,contw
+	setarg 0x316404
+	istore 3,contw
+	setarg 0xd884b3
+	istore 3,contw
+	setarg 0x71
+	istore 1,contw
+
+	/* K */
+	setarg 0x0c333f
+	store 3,0x90
+	setarg 0x41de70
+	istore 3,contw
+	setarg 0x9b05a2
+	istore 3,contw
+	setarg 0xb954a2
+	istore 3,contw
+	setarg 0xb37516
+	istore 3,contw
+	setarg 0x36
+	istore 1,contw
+
+	/* kinit */
+	setarg 0x5ff91a
+	store 3,0xa0
+	setarg 0x39b5a4
+	istore 3,contw
+	setarg 0x258f2d
+	istore 3,contw
+	setarg 0x5d4a85
+	istore 3,contw
+	setarg 0x656ad3
+	istore 3,contw
+	setarg 0xab
+	istore 1,contw
+
+	arg 0,contr
+	arg mem_random_number,contw
+	call memcpy16
+	setarg 0x3131
+	store 2,mem_pin
+	istore 2,contw
+	jam 4,mem_pin_length
+	arg 0xb8,rega
+	call function_e22
+	arg mem_input_store,contr
+	arg mem_kinit,contw
+	call memcpy16
+	arg 0x10,rega
+	arg mem_kinit,regb
+	arg mem_random_number,contw
+	call xor16
+	arg 0xb0,rega
+	call function_e21
+	arg 0x60,regb
+	call compare16
+error_lka:
+	nbranch error_lka,zero
+	arg mem_input_store,contr
+	arg mem_link_key,contw	
+	call memcpy16
+	arg 0x20,rega
+	arg mem_kinit,regb
+	arg mem_random_number,contw
+	call xor16
+	arg 0xb8,rega
+	call function_e21
+	arg 0x70,regb
+	call compare16
+error_lkb:
+	nbranch error_lkb,zero
+	arg mem_input_store,rega
+	arg mem_link_key,regb
+	arg mem_link_key,contw
+	call xor16
+	arg 0x30,contr
+	arg mem_random_number,contw
+	call memcpy16
+	arg 0xb8,rega
+	call function_e1
+	arg 0x50,regb
+	force 4,loopcnt
+	call compare_key
+error_sresa:
+	nbranch error_sresa,zero
+	arg 0x40,contr
+	arg mem_random_number,contw
+	call memcpy16
+	arg 0xb0,rega
+	call function_e1
+	arg 0x58,regb
+	force 4,loopcnt
+	call compare_key
+error_sresb:
+	nbranch error_sresb,zero
+	branch loop1
+	
+	arg 0,contr
+	arg mem_random_number,contw
+	call memcpy16
+	force 12,loopcnt
+	call memcpy
+	arg 0x1c,contr
+	arg mem_link_key,contw
+	call memcpy16
+	arg 0x10,rega
+	call function_e3
+	branch loop1
+
+compare16:
+	force 16,loopcnt
+compare_key:
+	arg mem_input_store,rega
+	branch compare_loop
+
+compare_loop:
+	ifetch 1,rega
+	ifetcht 1,regb
+	isub temp,null
+	nrtn zero
+	increase 1,rega
+	increase 1,regb
+	loop compare_loop
+	force 0,pdata
+	rtn
+
+endif
+
+
+loop1:	
+	branch loop1
+
+/* ==================== LE security ================= */
+
+generate_stk:
+	bpatchx patch3c_0,mem_patch3c
+	call function_s1
+	arg mem_le_ltk,contw
+	branch store_aes_result
+
+	/* contr = rand pointer */
+authenticate_rconfirm:
+	arg mem_le_srand,contw
+	branch authenticate_mconfirm,master
+	arg mem_le_mrand,contw
+authenticate_mconfirm:
+	copy contr,rega
+	call memcpy16
+	call function_c1
+	arg mem_le_rconfirm,contr
+	branch compare_res
+
+generate_confirm:
+	arg mem_le_mrand,rega
+	branch generate_mrand,master
+	arg mem_le_srand,rega
+generate_mrand:
+	copy rega,contw
+	call generate_random
+	branch function_c1
+
+generate_sk:
+	arg mem_le_skdm,contr
+	call load_data128
+	arg mem_le_ltk,contr
+	call load_regext
+	force 0x38,aes_ctrl
+	force 0x0,aes_ctrl
+	call wait_aes
+	arg mem_le_sk,contw
+	branch store_aes_result
+
+	/* temp=packet counter, rega = length or block counter*/
+first_block_counter:
+	force 0x49,pdata
+	branch first_block
+first_block_data:
+	force 1,pdata
+first_block:
+	force regidx_data,regext_index			/* B0 */
+	lshift8 temp,regext
+	ior regext,regext
+	increase 1,regext_index
+	rshift8 temp,regext
+	rshift16 regext,regext
+	fetch 2,mem_le_ivm
+	lshift16,pdata,pdata
+	ior regext,regext				/* octet3&octet4 of counter and low 16 bit of IV */
+	increase 1,regext_index
+	ifetch 4,contr					/* IV2-IV5 */
+	iforce regext
+	increase 1,regext_index
+	ifetch 2,contr					/* IV6-IV7 */
+	byteswap rega,regext
+	lshift16 regext,regext
+	ior regext,regext
+	increase 1,regext_index
+	rtn
+
+
+	/* temp=packet counter, regc pointers to data */	
+generate_mic:
+	add regc,1,contr
+	ifetch 1,contr
+	iforce rega
+	call first_block_counter
+	call do_aes_ocb
+
+	force regidx_data,regext_index			/* B1 */
+	ifetch 1,regc
+	and_into 0x3,pdata
+	lshift16 pdata,regext
+	set1 8,regext
+	call clear_hidata
+	call do_aes_cbc
+
+	copy rega,loopcnt
+	add regc,2,contr
+	call padding_data
+generate_mic_loop:
+	call aes_load_data
+	call do_aes_cbc
+	deposit loopcnt
+	branch generate_mic_end,blank
+	branch generate_mic_loop
+generate_mic_end:
+	force regidx_result,regext_index
+	deposit regext
+	store 4,mem_le_mic
+	rtn
+
+aes_crypt_data:
+	increase 1,rega
+	call first_block_data
+	copy regc,contr
+	call aes_load_xor
+	call do_aes_ctr
+	call store_enc_data
+	increase 16,regc
+	increase -16,regb
+	branch aes_crypt_data,positive
+	rtn
+	
+le_encrypt:
+	bpatchx patch3c_1,mem_patch3c
+	arg mem_le_txheader,regc
+	fetcht 5,mem_le_pcnt_tx
+	call generate_mic
+	force regidx_xor,regext_index
+	iforce regext
+	force 0,rega					/* rega is block counter */
+	call first_block_data
+	call do_aes_ctr
+	arg mem_le_txpayload,regc
+	fetch 1,mem_le_txlen
+	add pdata,-1,regb
+	iadd regc,contw
+	force regidx_result,regext_index
+	deposit regext
+	istore 4,contw	
+	call aes_crypt_data
+	fetch 1,mem_le_txlen
+	increase 4,pdata
+	store 1,mem_le_txlen
+	fetcht 5,mem_le_pcnt_tx
+	increase 1,temp
+	storet 5,mem_le_pcnt_tx
+	rtn
+
+le_decrypt:
+	bpatchx patch3c_2,mem_patch3c
+	fetch 1,mem_le_rxbuf+1
+	sub pdata,20,null
+	branch le_dec_cont,positive
+le_dec_cont:
+	arg mem_le_rxbuf+2,regc
+	add pdata,-1,regb
+	increase -4,pdata				/* mic will be discarded */
+	store 1,mem_le_rxbuf+1
+	iadd regc,contr
+	ifetch 4,contr
+	force regidx_xor,regext_index
+	iforce regext
+	force 0,rega					/* rega is block counter */
+	fetcht 5,mem_le_pcnt_rx
+	call first_block_data
+	call do_aes_ctr
+	force regidx_result,regext_index
+	deposit regext
+	store 4,mem_le_peer_mic
+	call aes_crypt_data
+	arg mem_le_rxbuf,regc
+	call generate_mic
+	fetcht 4,mem_le_peer_mic
+	isub temp,pdata				/* MIC ok? */
+	nrtn blank
+	fetch 4,mem_le_last_mic			/* reduntdant packet? */
+	isub temp,pdata
+	rtn blank
+	storet 4,mem_le_last_mic
+	fetch 5,mem_le_pcnt_rx
+	increase 1,pdata
+	store 5,mem_le_pcnt_rx
+	force 0,pdata
+	rtn
+
+wait_aes:
+	nbranch wait_aes,aes_ready
+	rtn
+
+do_aes_ocb:
+	force 0x30,aes_ctrl
+	force 0x0,aes_ctrl
+	branch wait_aes
+
+do_aes_cbc:
+	force 0x32,aes_ctrl
+	force 0x2,aes_ctrl
+	branch wait_aes
+
+do_aes_ctr:
+	force 0x34,aes_ctrl
+	force 0x4,aes_ctrl
+	branch wait_aes
+
+	
+aes_init:
+	force 1,aes_ctrl
+	force 0,aes_ctrl
+	rtn
+function_s1:
+	force regidx_data,regext_index
+	fetch 4,mem_le_mrand
+	iforce regext
+	increase 1,regext_index
+	ifetch 4,contr
+	iforce regext
+	increase 1,regext_index
+	fetch 4,mem_le_srand
+	iforce regext
+	increase 1,regext_index
+	ifetch 4,contr
+	iforce regext
+	increase 1,regext_index
+	call aes_clear
+	increase -4,regext_index
+	fetch 4,mem_le_tk
+	copy pdata,regext
+	increase 4,regext_index
+	force 0x38,aes_ctrl
+	force 0x8,aes_ctrl
+	branch wait_aes
+
+	/* rega pointers to random number */
+function_c1:
+	bpatchx patch3c_3,mem_patch3c
+	fetch 6,mem_le_lap
+	fetcht 6,mem_le_plap
+	branch function_c1_master,master
+	fetch 6,mem_le_plap
+	fetcht 6,mem_le_lap
+function_c1_master:
+	force regidx_xor,regext_index
+	copy temp,regext
+	increase 1,regext_index
+	rshift32 temp,regext
+	lshift16 pdata,pdata
+	ior regext,regext
+	increase 1,regext_index
+	rshift32 pdata,regext
+	increase 1,regext_index
+	force 0,regext					/* p2 = ia || ra */
+	force 0,pdata
+	fetch 1,mem_le_conn_peer_addr_type
+	fetcht 1,mem_le_adv_own_addr_type
+	nbranch function_c1_irat,master
+	//conn as master
+	fetch 1,mem_le_conn_own_addr_type
+	fetcht 1,mem_le_conn_peer_addr_type
+function_c1_irat:
+	store 1,mem_le_iat
+	storet 1,mem_le_rat
+	force regidx_data,regext_index
+	arg mem_le_iat,regb
+	force 4,loopcnt
+function_c1_loop1:
+	ifetch 4,rega		
+	ifetcht 4,regb
+	ixor temp,regext
+	increase 1,regext_index
+	increase 4,rega
+	increase 4,regb
+	loop function_c1_loop1		/* p1 ^ r */
+	call aes_clear				/* k = 0 */
+	increase -4,regext_index
+	fetch 4,mem_le_tk
+	copy pdata,regext
+	increase 4,regext_index
+	force 0x38,aes_ctrl
+	force 0xc,aes_ctrl
+	call wait_aes
+
+	call aes_clear_data
+	force 0x3a,aes_ctrl
+	force 0x8,aes_ctrl
+	branch wait_aes
+
+padding_data:
+	compare 0,loopcnt,3
+	rtn true
+	deposit contr
+	iadd loopcnt,contw
+	force 0,pdata
+padding_loop:
+	istore 1,contw
+	increase 1,loopcnt
+	compare 0,loopcnt,3
+	rtn true
+	branch padding_loop
+
+aes_load_data:
+	force regidx_data,regext_index
+load_data_loop:
+	deposit loopcnt
+	branch load_data_padding,blank
+	ifetch 4,contr
+	increase -4,loopcnt
+load_data_padding:
+	iforce regext
+	increase 1,regext_index
+	compare regidx_key,regext_index,0xf
+	rtn true
+	branch load_data_loop
+
+aes_load_xor:
+	force regidx_xor,regext_index
+	branch load_regext
+load_key:
+	force regidx_key,regext_index
+	branch load_regext
+load_data128:
+	force regidx_data,regext_index
+load_regext:
+	force 4,loopcnt
+load_regext_loop:
+	ifetch 4,contr
+	iforce regext
+	increase 1,regext_index
+	loop load_regext_loop
+	rtn
+
+load_sk:
+	arg mem_le_sk,contr
+	branch load_key
+
+clear_hidata:
+	force 4,loopcnt
+	branch clear_data_rest
+
+aes_clear_data:
+	force regidx_data,regext_index
+aes_clear:
+	force 4,loopcnt
+clear_loop:
+	force 0,regext
+clear_data_rest:
+	increase 1,regext_index
+	loop clear_loop
+	rtn
+
+store_aes_result:
+	force regidx_result,regext_index
+	force 4,loopcnt
+send_aes_result_loop:
+	deposit regext
+	istore 4,contw
+	increase 1,regext_index
+	loop send_aes_result_loop
+	rtn
+
+store_enc_data:
+	force regidx_result,regext_index
+	copy regc,contw
+	add regb,1,loopcnt
+	sub loopcnt,15,null
+	branch store_enc_loop,positive
+	force 16,loopcnt
+store_enc_loop:
+	deposit regext
+	sub loopcnt,3,null
+	branch store_enc_byte,positive
+	istore 4,contw
+	increase -4,loopcnt
+	rtn zero
+	increase 1,regext_index
+	branch store_enc_loop
+store_enc_byte:
+	istore 1,contw
+	rshift8 pdata,pdata
+	loop store_enc_byte
+	rtn
+	
+	/* contr pointers to value to be compared */
+compare_res:
+	force regidx_result,regext_index
+	force 4,loopcnt
+compare_res_loop:
+	ifetch 4,contr
+	isub regext,null
+	nrtn zero
+	increase 1,regext_index
+	loop compare_res_loop
+	force 0,null
+	rtn
+
+enable_authrom:
+	hfetch 1,core_clkoff
+	set0 CLOCK_OFF_AUTH_ROM,pdata
+	hstore 1,core_clkoff
+	rtn
+
+disable_authrom:
+	hfetch 1,core_clkoff
+	set1 CLOCK_OFF_AUTH_ROM,pdata
+	hstore 1,core_clkoff
+	rtn
+
+init_memp:
+	arg mem_p,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3ffff
+	setsect 3,0x3fbff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3ffff
+	setsect 3,0x3ffff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3cfff
+	setsect 3,0x3ffff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3ffef
+	setsect 3,0x3ffff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3ffff
+	setsect 3,0x3ffff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x26c7f
+	setsect 2,0x146b
+	setsect 3,0x37bb3
+	istore 9,contw
+	setsect 0,0x1feb8
+	setsect 1,0x10c12
+	setsect 2,0x2b722
+	setsect 3,0x29fa6
+	istore 9,contw
+	setsect 0,0xe70f
+	setsect 1,0x16720
+	setsect 2,0x519e
+	setsect 3,0x19084
+	istore 9,contw
+	setsect 0,0x31012
+	setsect 1,0x360bf
+	setsect 2,0x3f0af
+	setsect 3,0x3d3
+	istore 9,contw
+	setsect 0,0x3a188
+	setsect 1,0x3ad0
+	setsect 2,0x3cbf2
+	setsect 3,0x243d9
+	istore 9,contw
+	setsect 0,0x2b030
+	setsect 1,0x36a03
+	setsect 2,0x11188
+	setsect 3,0x1e520
+	istore 9,contw
+	setsect 0,0x3a11e
+	setsect 1,0xfe5d
+	setsect 2,0xdd57
+	setsect 3,0x1ac93
+	istore 9,contw
+	setsect 0,0x11ed
+	setsect 1,0x218c4
+	setsect 2,0x8da7
+	setsect 3,0x257ff
+	istore 9,contw
+	setsect 0,0x3192b
+	setsect 1,0x34641
+	setsect 2,0x1be0c
+	setsect 3,0x366ad
+	istore 9,contw
+	setsect 0,0x1f83
+	setsect 1,0x15a23
+	setsect 2,0x3f9b0
+	setsect 3,0x3949
+	istore 9,contw
+	setsect 0,0x13a51
+	setsect 1,0x153fd
+	setsect 2,0x3372a
+	setsect 3,0xf1bb
+	istore 9,contw
+	setsect 0,0x3ae85
+	setsect 1,0x1eed9
+	setsect 2,0x9e66
+	setsect 3,0x1a8
+	istore 8,contw
+	rtn
+	
+ifdef SECURE_CONNECTION
+
+
+init_memp_256:
+ 	arg mem_p_256,contw
+        setsect 0,0x3ffff
+        setsect 1,0x3ffff
+        setsect 2,0x3ffff
+        setsect 3,0x3ffff
+        istore 9,contw
+        setsect 0,0x3ffff
+        setsect 1,0x3f
+        setsect 2,0x0
+        setsect 3,0x0
+        istore 9,contw
+        setsect 0,0x0
+        setsect 1,0x0
+        setsect 2,0x1000
+        setsect 3,0x0
+        istore 9,contw
+        setsect 0,0x3ff00
+        setsect 1,0x3ffff
+        setsect 2,0x3ffcf
+        setsect 3,0x3ffff
+        istore 9,contw
+        setsect 0,0x3ffff
+        setsect 1,0x3ffff
+        setsect 2,0x3ffff
+        setsect 3,0x3ff
+        istore 9,contw
+        setsect 0,0x0
+        setsect 1,0x0
+        setsect 2,0x0
+        setsect 3,0x0
+        istore 9,contw
+        setsect 0,0x10000
+        setsect 1,0x0
+        setsect 2,0x3f000
+        setsect 3,0x3ffff
+        istore 9,contw
+        setsect 0,0x296ff
+        setsect 1,0x22630
+        setsect 2,0x3945d
+        setsect 3,0x3d284
+        istore 9,contw
+        setsect 0,0x333a0
+        setsect 1,0x4b7a
+        setsect 2,0x37d8
+        setsect 3,0x3c9dc
+        istore 9,contw
+        setsect 0,0x3a440
+        setsect 1,0x1b958
+        setsect 2,0x38bce
+        setsect 3,0x1091f
+        istore 9,contw
+        setsect 0,0x2e12c
+        setsect 1,0x1f47c
+        setsect 2,0x356b1
+        setsect 3,0x2fd47
+        istore 9,contw
+        setsect 0,0x6837
+        setsect 1,0x2ed90
+        setsect 2,0x1ecec
+        setsect 3,0x1acc5
+        istore 9,contw
+        setsect 0,0x23357
+        setsect 1,0x18af3
+        setsect 2,0xf9e1
+        setsect 3,0x129f0
+        istore 9,contw
+        setsect 0,0x2e7eb
+        setsect 1,0x3e6e3
+        setsect 2,0x3e1a7
+        setsect 3,0x10b8b
+        istore 9,contw
+        setsect 0,0x24fe3
+        setsect 1,0x20ef
+        setsect 2,0x1b5a6
+        setsect 3,0xdc2f
+        istore 9,contw
+        setsect 0,0x13860
+        setsect 1,0x2bd69
+        setsect 2,0x391a
+        setsect 3,0x1b222
+        istore 9,contw
+        rtn
+endif
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/sim.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/sim.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/sim.prog	(working copy)
@@ -0,0 +1,518 @@
+simstart:
+	force 8,radio_ctrl
+	force 0,radio_ctrl
+	jam 0xe0,0x8907			// set if_phase=7 for simulation environment
+	jam 0xe0,0x890a
+	jam 0x25,0x8912
+	jam 0xff,rfen_ck
+	jam 5,core_clksel
+//	call init_24m
+//	branch sim_usb
+//	branch sim_iic
+//	branch sim_clk
+//	call sim_uart
+//	branch sim_lpm
+//	branch sim_c1
+//	branch loop
+//	call sim_spi
+//	call sim_eep
+//	branch test_tx
+//	branch sim_le
+//	branch sim_250k
+	branch sim_main
+
+
+
+
+sim_lpm:
+	hfetch 1,0xffd
+	beq 1,sim_assert
+	branch sim_lpm_do
+	setarg 0
+	set1 31,pdata
+	store 8,mem_gpio_wakeup_low
+	branch lpm_hibernate
+sim_lpm_sleep:
+	jam 1,mem_context
+	branch sim_lpm_wait,wake
+	jam 0x70,core_bist_ctrl
+	jam ccnt_start,core_misc_ctrl
+sim_lpm_wait:
+	call lpo_calibration
+	fetch 3,mem_clks_per_lpo
+	branch sim_lpm_wait,blank
+	call lpm_recover_clk,wake
+	jam 0x1b,mem_lpm_ldocnt
+	arg sim_assert,loopcnt
+	hfetch 1,core_gpio_wakeup_low+2
+	bbit0 2,sim_lpm_loop
+	until null,lpo_edge
+	jam 0x20,core_misc_ctrl
+	until null,lpo_edge
+sim_lpm_loop:
+	hfetch 1,core_misc_status
+	bbit1 6,sim_lpm_loop
+	hfetch 1,core_gpio_in+3
+	compare 0x20,pdata,0x20
+	setarg 0
+	setflag true,29,pdata
+	setflag true,30,pdata
+	store 4,mem_gpio_wakeup_low
+	setarg 0
+	nsetflag true,29,pdata
+	nsetflag true,30,pdata
+	store 4,mem_gpio_wakeup_high
+sim_lpm_do:
+	arg 30,temp
+	branch lpm_sleep
+
+sim_assert:
+	branch sim_assert
+
+
+sim_main:
+	call init_param
+	jam 0,core_clkoff
+	hfetch 1,0x17fd
+	beq 1,sim_slave
+
+	arg 3,temp
+	call set_freq_tx
+	nop 500
+	enable encode_fec0
+	disable is_rx
+	enable is_tx
+	set1 TXGFSK,radio_ctrl
+	call sim_access
+	preload access
+	inject mod,72
+	setarg 0x123456
+	inject mod,72
+	set1 PSK,radio_ctrl
+	setarg 0xabeee
+	inject mod,20
+	setarg 0x22aa33
+	inject mod,72
+	branch s_loop
+
+
+	jam dvc_op_hci,mem_device_option
+	fetch 6,mem_lap
+	store 6,mem_hci_plap
+	setarg 0xbdbdbd
+	store 3,mem_lap
+	istore 3,contw
+	jam hci_cmd_create_conn,mem_hci_cmd
+	force 0xf,pdata
+	add pdata,-2,clkn_bt
+	store 4,mem_page_clk
+	rshift clkn_bt,pdata
+	store 4,mem_last_clkn
+	jam 0,mem_scan_mode
+sim_loop:
+	call idle_dispatch
+	fetch 1,mem_context
+	bbit0 state_inconn,sim_skip
+	set1 mark_tx_l2cap,mark
+	fetch 1,mem_context + coffset_op		
+	set1 op_txl2cap,pdata
+	store 1,mem_context + coffset_op
+	jam 0,mem_context + coffset_lmp_to_send
+	jam 0,mem_lmo_opcode2
+	setarg 700
+	store 2,mem_tx_len
+	setarg mem_tmp_buffer
+	store 2,mem_txptr
+	jam 6,mem_tx_lch
+	jam 1,mem_hci_conn_handle
+sim_skip:
+	call connection_dispatch
+	branch sim_loop		
+
+sim_slave:
+
+	arg 3,temp
+	call set_freq_rx
+	call rf_rx_enable
+	call sim_access
+	enable is_rx
+	enable decode_fec0
+	correlate null,never
+	set1 PSK,radio_ctrl
+	correlate null,never
+	parse demod,bucket,72
+	branch s_loop
+
+
+	jam 2,mem_scan_mode
+	call page_scan_dispatch
+	branch sim_slave
+
+sim_access:
+	setarg 0x1234567
+	iforce lap
+	pulse recalc
+	nop 32
+	rtn
+
+sim_iic:
+	call iicd_init_12m
+	setarg 3
+	hstore 2,core_iicd_txlen
+	setarg 0x1f051e
+	store 3,mem_iicd_addr
+	setarg mem_iicd_addr
+	hstore 2,core_iicd_txaddr
+	setarg 1
+	hstore 2,core_iicd_rxlen
+	jam 3,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	call wait_iicd_done
+	nop 300
+	setarg 0xd321d2
+	store 3,mem_iicd_addr
+	jam iicd_start,core_misc_ctrl
+	call wait_iicd_done
+s_loop:
+	branch s_loop
+
+sim_usb:
+	call usb_init
+sim_usb_loop:
+	call usb_isr
+	branch sim_usb_loop
+
+init_24m:
+	jam 0x4b,core_halfslot
+	jam 0x1d,core_halfslot + 1
+	jam 1,core_clksel
+	rtn
+
+
+p_transmit_sw:
+	reverse uap,regc				// hec init
+	enable encode_fec0
+	set0 mark_longpacket,mark
+	copy am_addr,temp
+	arg 3,loopcnt
+	call p_head
+	copy type,temp
+	arg 4,loopcnt
+	call p_head
+	fetch 1,mem_arq
+	lshift4 pdata,temp
+	arg 3,loopcnt
+	call p_head
+	copy regc,temp
+	arg 8,loopcnt
+	call p_head
+	reverse uap,regc
+	lshift8 regc,regc				// crc init
+	and type,0x1f,pdata
+	beq type_fhs, p_transmit_fhs
+
+
+
+p_transmit_fhs:
+	call fetch_self_bt_adr
+	pulse recalc
+	enable user
+	call p_fec2_init
+	fetch 1,mem_fhs_am_addr            /* this is the am_addr to assign to slave */
+	icopy am_addr
+	fetch 1,mem_fhs_misc
+	icopy fhs_misc    /* [7:6]SR [5:4]SP [3:1]PS [0]undef  */
+	fetch 3,mem_class   /* store away class */
+	icopy fhs_class
+	copy bt_adr,rega
+	nop 12                    /* 30 cycles after recalc for sync word generation */
+	copy bt_clk,timeup
+	fetch 4,mem_clkn_bt
+	icopy bt_clk
+	preload fhs0
+	iforce temp
+	arg 32,loopcnt
+	call p_fec2
+	preload fhs0
+	set1 58,pdata		/* eir */
+	rshift32 pdata,temp
+	arg 40,loopcnt
+	call p_fec2
+	preload fhs1
+	iforce temp
+	arg 32,loopcnt
+	call p_fec2
+	preload fhs1
+	rshift32 pdata,temp
+	arg 40,loopcnt
+	call p_fec2
+	copy timeup,bt_clk
+	copy rega,bt_adr
+	copy regc,temp
+	arg 16,loopcnt
+	disable user
+	call p_fec2
+	branch end_of_packet
+	
+// hec or crc is in regc
+p_hec:
+	deposit temp
+	ixor regc,pdata
+	rshift regc,regc
+	rtnbit0 0
+	xor_into 0xe5,regc
+	rtn
+
+// hec or crc is in regc
+p_crc:
+	deposit temp
+	ixor regc,pdata
+	rshift regc,regc
+	rtnbit0 0
+	setarg 0x8408
+	ixor regc,regc
+	rtn
+
+
+// white is in debug
+p_white:
+	isolate1 6,debug
+	lshift debug,debug
+	nrtn true
+	xor_into 0x11,debug
+	xor_into 1,temp
+	rtn
+
+// data in temp, length in loopcnt
+p_head:
+	call p_hec
+	call p_white
+	isolate0 0,temp
+	setarg 0
+	branch p_fec1_0,true
+	setarg 7
+p_fec1_0:
+	inject mod,3
+	rshift temp,temp
+	loop p_head
+	rtn
+
+p_fec0:
+	call p_white
+	deposit temp
+	inject mod,1
+	loop p_fec0
+	rtn
+
+p_fec2:
+	call p_crc,user
+	call p_white
+	deposit temp
+	ixor alarm,pdata
+	rshift alarm,alarm
+	bbit0 0,p_fec2_zero
+	xor_into 0x15,alarm
+p_fec2_zero:
+	deposit temp
+	inject mod,1
+	rshift temp,temp
+	increase -1,queue
+	nbranch p_fec2_nf,zero
+	deposit alarm
+	inject mod,5
+	call p_fec2_init
+p_fec2_nf:
+	loop p_fec2	
+	rtn
+
+p_fec2_init:
+	arg 10,queue
+	arg 0,alarm
+	rtn
+
+
+ifdef NULL
+sim_250k:
+	call init_250k
+	hfetch 1,1
+	bbit1 7,sim_250k_rx
+	call tx_radio_freq
+	call start_transmitter	/* get ready for that id packet */
+	nop 600
+	enable encode_fec0
+	set1 TXGFSK,radio_ctrl
+	force 0,pdata
+	inject mod,9
+	setarg 0xaa
+	inject mod,8
+	preload access
+	inject mod,32
+	setarg 0x1da861
+	inject mod,24
+	setarg 0x94445b
+	inject mod,24
+	setarg 0x1275f
+	inject mod,24
+	branch loop
+sim_250k_rx:
+	call rx_radio_freq
+	call start_receiver	/* wait for that id packet from master */
+	enable decode_fec0
+	correlate null,never
+	parse demod,bucket,72
+	branch loop
+
+	
+
+
+
+sim_uart:
+	setarg mem_le_test_uart_rxbuf
+	hstore 2,core_uart_tsaddr
+	hstore 2,core_uart_twptr
+	hstore 2,core_uart_trptrp
+	increase 0x80,pdata
+	hstore 2,core_uart_teaddr
+	hstore 2,core_uart_rsaddr
+	hstore 2,core_uart_rrptr
+	increase 0x80,pdata
+	hstore 2,core_uart_readdr
+	increase 1,pdata
+	jam 0x84,core_gpio_sel1
+	jam 0x80,core_gpio_pu2
+	jam 0xe5,core_uart_ctrl
+	setarg 0x30
+	hstore 2,core_uart_baud
+	hfetch 1,1
+	bbit1 7,sim_uart_wait
+	setarg 0x1357d9a
+	store 4,mem_le_test_uart_rxbuf
+	setarg 0x55aa69
+	istore 3,contw
+	setarg 0xfedcb3
+	istore 3,contw
+	deposit contw
+	hstore 2,core_uart_twptr
+sim_uart_wait:
+	nop 20000
+	rtn
+
+sim_spi:
+	call spid_init_flash
+	call spid_unlock_flash
+	call spid_init
+	setarg 0x35
+	call spid_read_reg
+	nop 200
+	force 4,temp
+	setarg 0x42
+	branch spid_read_regs
+
+sim_eep:
+	call iicd_init_12m
+	setarg 3
+	hstore 2,core_iicd_txlen
+	setarg 0x1f051e
+	store 3,mem_iicd_addr
+	setarg mem_iicd_addr
+	hstore 2,core_iicd_txaddr
+	setarg 1
+	hstore 2,core_iicd_rxlen
+	jam 3,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	call wait_iicd_done
+	nop 200
+	setarg 0x18f7a3b
+	store 4,mem_iicd_addr
+	arg mem_iicd_addr,rega
+	arg 4,temp
+	setarg 0x1235
+	call iicd_write_eep
+	nop 300
+	arg mem_ucode_keybuf,rega
+	arg 1,temp
+	setarg 0x3512
+	store 2,mem_addr_mi
+	call iicd_read_eep
+	arg 1,temp
+	setarg 0x3512
+	store 2,mem_addr_mi
+	call iicd_read_eep
+	nop 200
+	setarg 0xa1
+	arg 3,temp
+	arg mem_ucode_keybuf,rega
+	branch iicd_read_data
+
+sim_otp:
+	setarg 0x123456
+	store 3,0x800
+	setarg 0x10
+	arg 0x800,rega
+	arg 0x10,loopcnt
+	branch otp_write
+
+sim_clk:
+	add lpo_time,12,alarm
+	snooze
+clock_loop:
+	nop 100
+	jam 1,core_config
+	setflag user,0,pdata
+	random pdata
+	and_into 0x1f,pdata
+	hstore 1,core_clksel
+	nop 70
+	jam 2,core_kick
+	nop 200
+	branch clock_loop
+	jam 2,core_clksel
+	setarg 1500
+	call sleep
+	jam 0x42,core_clksel
+	add lpo_time,200,alarm
+	snooze
+	branch 0x4000
+
+sim_c1:
+	setarg 0xb4b5b6
+	store 3,mem_le_lap
+	setarg 0xb1b2b3
+	istore 3,contw
+	setarg 0xa4a5a6
+	store 3,mem_le_plap
+	setarg 0xa1a2a3
+	istore 3,contw
+	setarg 0x101
+	store 4,mem_le_preq
+	setarg 0x70710
+	istore 3,contw
+	setarg 0x302
+	store 4,mem_le_pres
+	setarg 0x50008
+	istore 3,contw
+
+	arg regidx_key,regext_index
+	arg 4,loopcnt
+sim_clear_key_loop:
+	arg 0,regext
+	increase 1,regext_index
+	loop sim_clear_key_loop
+
+	setarg 0x702EE0
+	store 3,mem_le_rconfirm
+	setarg 0x274EC6
+	istore 3,contw
+	setarg 0x0E6388
+	istore 3,contw
+	setarg 0x56AD6F
+	istore 3,contw
+	setarg 0x83D521
+	istore 3,contw
+	setarg 0x57	
+	istore 1,contw
+	arg mem_le_rconfirm,rega
+	call aes_init
+	call function_c1
+	branch loop
+endif
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/simple_pairing.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/simple_pairing.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/simple_pairing.prog	(working copy)
@@ -0,0 +1,2362 @@
+
+publickey_init:
+	fetch 1,mem_ssp_enable
+	nbranch sp_initialize,blank
+	branch sp_initialize_256
+
+sp_calc_sequence_256_check:
+	bpatchx patch3c_4,mem_patch3c
+	fetch 1,mem_ssp_enable
+	rtn blank
+	fetch 1,mem_sp_local_key_invalid
+	rtnne SP_KEY_VALID
+	fetch 1,mem_le_secure_connect_enable
+	rtn blank
+	fetch 1,mem_le_sc_local_key_invalid
+	rtneq SP_KEY_VALID_256
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,stop_publickey_calc_256
+	fetch 1,mem_le_sc_calc
+	beq SP_CALC_STANDBY,sp_initialize_256
+	rtn
+stop_publickey_calc_256:
+	jam SP_CALC_STANDBY,mem_le_sc_calc	
+	rtn
+	
+ifdef SIMPLE_PAIRING
+
+sp_initialize:
+	bpatchx patch3c_5,mem_patch3c
+	fetch 1,mem_ssp_enable 
+	branch ssp_disable, blank
+	call ssp_enable
+	call sp_clear_flags
+	branch sp_pubkey_calc 
+	
+sp_clear_flags:
+	setarg 0
+	store 8,mem_sp_state_start
+	store 4,mem_sp_flag_start
+	store 7,mem_sp_iocap_remote
+	rtn
+
+sp_generate_local_key:
+	jam SP_FLAG_COMMIT,mem_sp_flag  
+	branch sp_generate_local_key0
+sp_master_generate_local_key:
+	fetch 1,mem_sp_local_key_invalid
+	beq SP_KEY_VALID,sp_dhkey_calc
+	branch assert
+sp_generate_local_key0:
+	fetch 1,mem_sp_local_key_invalid
+	beq SP_KEY_VALID,sp_start_send_pubkey
+	branch sp_pubkey_calc
+    
+sp_start_send_pubkey:
+	call sp_dhkey_calc
+	fetch 1,mem_master_sp_state
+	nrtn blank
+	jam SP_STAT_KEY_SEND,mem_sp_state
+	rtn
+
+
+sp_calc_check_publickey_256:
+	call sp_calc_b256
+	arg mem_le_pubkey_remote_y_256,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod_256   
+	arg mem_le_pubkey_remote_x_256,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod_256   
+  	arg mem_t2_256,regA
+	arg mem_le_pubkey_remote_x_256,regB
+	arg mem_t2_256,contw
+	call bn_mulmod_256	
+  	arg mem_a_256,regA
+	arg mem_le_pubkey_remote_x_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256	
+  	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod_256	 
+  	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	call bn_addmod_256	 
+	arg 32,loopcnt
+  	arg mem_t7_256,regA
+	arg mem_t0_256,regB
+	branch  string_compare
+	
+sp_calc_b256:
+	arg mem_gy_256,regA
+	arg mem_t0_256,contw
+	call bn_sqrmod_256   
+	arg mem_gx_256,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod_256    
+  	arg mem_t2_256,regA
+	arg mem_gx_256,regB
+	arg mem_t2_256,contw
+	call bn_mulmod_256	
+  	arg mem_a_256,regA
+	arg mem_gx_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256	 
+  	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod_256	 
+  	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	branch  bn_submod_256	
+	
+sp_calc_check_publickey:
+	call sp_calc_b
+	arg mem_sp_pubkey_remote_y,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod 
+	arg mem_sp_pubkey_remote_x,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod
+  	arg mem_t2_256,regA
+	arg mem_sp_pubkey_remote_x,regB
+	arg mem_t2_256,contw
+	call bn_mulmod	
+  	arg mem_a,regA
+	arg mem_sp_pubkey_remote_x,regB
+	arg mem_t3_256,contw
+	call bn_mulmod	
+  	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod	 
+  	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	call bn_addmod	 
+ 	arg 24,loopcnt
+ 	arg mem_t7_256,regA
+	arg mem_t0_256,regB
+	branch  string_compare
+	
+sp_calc_b:
+	arg mem_gy,regA
+	arg mem_t0_256,contw
+	call bn_sqrmod   
+	arg mem_gx,regA
+	arg mem_t2_256,contw
+  	call bn_sqrmod
+  	arg mem_t2_256,regA
+	arg mem_gx,regB
+	arg mem_t2_256,contw
+	call bn_mulmod	
+	arg mem_a,regA
+	arg mem_gx,regB
+	arg mem_t3_256,contw
+	call bn_mulmod	 
+  	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod	 
+  	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	branch  bn_submod	
+
+   
+sp_calculate_commitment:
+	fetch 1,mem_sp_calc
+	bne SP_CALC_STANDBY,sp_calculate_commitment_wait_dhkey_calc
+	call sp_local_random_key_generator
+	arg mem_sp_prarm_stack,contw
+	setarg mem_sp_random_local_end
+	istore 2,contw
+	setarg mem_sp_pubkey_local_x_end
+	istore 2,contw
+	setarg mem_sp_pubkey_remote_x_end
+	istore 2,contw
+	branch sp_calculate_commitment0
+master_sp_calculate_commitment:
+	arg mem_sp_prarm_stack,contw
+	setarg mem_sp_random_remote_end
+	istore 2,contw
+	setarg mem_sp_pubkey_remote_x_end
+	istore 2,contw
+	setarg mem_sp_pubkey_local_x_end
+	istore 2,contw
+sp_calculate_commitment0:
+	call function_f1
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_COMMIT_CALC,master_sp_calculate_commitment0
+	jam SP_FLAG_COMMIT,mem_sp_flag
+	jam SP_STAT_COMMIT_SEND,mem_sp_state
+	rtn
+master_sp_calculate_commitment0:
+	jam SP_STAT_COMMITMENT_COMPARE,mem_master_sp_state
+	call sp_master_generate_local_key
+	branch master_set_mem_master_sp_flag 
+
+sp_local_random_key_generator:
+	arg mem_sp_random_local,contw
+	force 8,queue
+	branch random_generator
+  
+sp_calculate_commitment_wait_dhkey_calc:
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	rtn
+    
+sp_confirm_check:
+    /* calculate Ea here */
+	bpatchx patch3c_6,mem_patch3c
+	arg      mem_addr_value,contw
+	fetch    6,mem_lap
+	istore   6,contw
+	fetch    6,mem_plap
+	istore   6,contw
+	fetch    3,mem_sp_iocap_remote
+	istore   3,contw 
+
+	call     function_f3a
+
+	arg      mem_sp_calc_result_high,regA
+	arg      mem_sp_check_result,regB    
+	force    4,queue 
+	call     compare4
+	nbranch  sp_confirm_check_failed,true  
+
+	call sp_confirm_check_success
+	jam LMP_DHKey_Check,mem_lmi_opcode2
+	branch tid_set_reply
+    
+sp_confirm_check_success:
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_CONFIRM_CHECK,sp_confirm_check_success_master
+	jam SP_STAT_CONFIRM_CALC,mem_sp_state
+	jam SP_FLAG_COMMIT,mem_sp_flag  
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	rtn
+sp_confirm_check_success_master:
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam SP_STATE_END,mem_master_sp_state
+	branch master_set_mem_master_sp_flag
+	//accept opcode?
+	
+sp_confirm_check_failed:
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_CONFIRM_CHECK,sp_confirm_check_failed_master
+	jam SP_STAT_NULL,mem_sp_state
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	//accept opcode?
+	jam      AUTHENTICATION_FAILURE_ERROR,mem_lmo_reason2 
+	rtn
+sp_confirm_check_failed_master:
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	jam SP_STAT_NULL,mem_master_sp_state
+	rtn
+    
+sp_confirm_calc:
+	fetch 1,mem_sp_dh_ready
+	beq SP_FLAG_COMMIT, sp_confirm_calc_ready
+	jam 	SP_STAT_CONFIRM_CALC,mem_master_sp_state
+	branch master_set_mem_master_sp_flag
+sp_confirm_calc_ready:
+	arg      mem_addr_value,contw
+	fetch    6,mem_plap
+	istore   6,contw
+	fetch    6,mem_lap
+	istore   6,contw
+	fetch    3,mem_sp_iocap_local
+	istore   3,contw 
+
+	call     function_f3b
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_CONFIRM_CALC,sp_confirm_calc_master
+	jam      SP_STAT_CONFIRM_SEND,mem_sp_state
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	rtn
+sp_confirm_calc_master:
+	jam      SP_STAT_CONFIRM_SEND,mem_master_sp_state
+	jam      SP_FLAG_COMMIT,mem_master_sp_flag
+	rtn   
+
+sp_master_key_prarm_push:
+	arg mem_sp_prarm_stack,contw
+	fetch    6,mem_plap
+	istore   6,contw
+	fetch    6,mem_lap
+	istore   6,contw
+	setarg mem_sp_random_local_end
+	istore 2,contw
+	setarg mem_sp_random_remote_end
+	istore 2,contw
+	branch sp_link_key_calc
+sp_link_key_prarm_push:
+	jam      SP_STAT_DONE,mem_sp_state    
+	arg mem_sp_prarm_stack,contw
+	fetch    6,mem_lap
+	istore   6,contw
+	fetch    6,mem_plap
+	istore   6,contw
+	setarg mem_sp_random_remote_end
+	istore 2,contw
+	setarg mem_sp_random_local_end
+	istore 2,contw
+sp_link_key_calc:
+    /*calculate Link key here */
+	arg      mem_addr_value,contw
+	fetch    6,mem_sp_prarm_stack
+	istore   6,contw
+	fetch    6,mem_sp_prarm_stack+6
+	istore   6,contw
+	
+	call     function_f2    
+
+	/*handle linkkey  */
+	jam 1,mem_link_key_exists
+	arg mem_link_key,contw
+	arg mem_sp_calc_result_high,contr
+	call memcpy16
+	branch  generate_linkkey_continue
+
+    
+sp_pubkey_calc:
+	bpatchx patch3c_7,mem_patch3c
+	fetch    1,mem_sp_local_key_invalid
+	rtnne SP_KEY_INVALID
+	fetch    1,mem_sp_calc
+	rtnne  SP_CALC_STANDBY
+	arg      mem_sp_private_key,contw 
+	force    11,queue
+	call     random_generator
+	random   pdata
+	rshift   pdata,pdata
+	istore   2,contw 
+/* we don't need fixed private key,generate random key instead */ 
+	arg      mem_k,contw
+	arg      mem_sp_private_key,contr	
+	call     memcpy24 //mem_sp_private_key=>mem_k 24BYTES
+
+	arg      mem_ax,contw
+	arg      mem_gx,contr
+	call     memcpy48 //mem_gx=>mem_ax 48bytes
+
+	arg      mem_az,contw
+	call     bn_zero
+	jam      1,mem_az //0=>mem_az 24bytes
+
+	call     eckp_calc_init
+	jam SP_CALC_PUBKEY,mem_sp_calc
+	rtn    
+	
+sp_pubkey_generated:
+	arg      mem_sp_pubkey_local,contw
+	arg      mem_bx,contr
+	call     memcpy48   
+	jam      SP_KEY_VALID,mem_sp_local_key_invalid
+	jam      SP_CALC_STANDBY,mem_sp_calc
+	rtn
+
+sp_dhkey_calc:
+	bpatchx patch3d_0,mem_patch3d
+	fetch    1,mem_sp_dhkey_invalid
+	rtnne  SP_KEY_INVALID
+	fetch    1,mem_sp_calc
+	rtnne  SP_CALC_STANDBY
+
+	arg      mem_k,contw
+	arg      mem_sp_private_key,contr	
+	call     memcpy24
+
+	arg      mem_ax,contw
+	arg      mem_sp_pubkey_remote,contr
+	call     memcpy48
+
+	arg      mem_az,contw
+	call     bn_zero
+	jam      1,mem_az
+
+	call     eckp_calc_init
+	jam      SP_CALC_DHKEY,mem_sp_calc
+	rtn 	
+	
+sp_dhkey_generated:
+	jam SP_FLAG_COMMIT,mem_sp_dh_ready
+	arg mem_sp_dhkey,contw
+	arg mem_bx,contr
+	call memcpy24
+	jam SP_KEY_VALID,mem_sp_dhkey_invalid
+	jam SP_CALC_STANDBY,mem_sp_calc
+	rtn
+
+random_generator:
+	increase -1,queue
+	nrtn     positive
+	random   pdata
+	istore   2,contw  
+	branch   random_generator
+compare4:
+	increase -1,queue
+	nbranch  compare4_success,positive
+	ifetch   4,regA
+	copy     pdata,temp
+	ifetch   4,regB
+	iflip    temp,pdata
+	nbranch  compare4_failed,zero
+	increase 4,regA
+	increase 4,regB
+	branch   compare4
+compare4_failed:
+	disable  true
+	rtn
+compare4_success:
+	enable   true
+	rtn
+
+/*************************************************/
+/** Message state machine routines ***************/
+/*************************************************/
+// simple pairing support 
+
+simple_pairing_sequence:
+	bpatchx patch3d_1,mem_patch3d
+         fetch 1,mem_sp_flag
+         rtn blank
+	call lmo_fifo_check
+	nrtn blank
+	jam      SP_FLAG_STANDBY,mem_sp_flag
+	fetch    1,mem_sp_state
+	beq  SP_STAT_KEY_SEND,sp_send_LMP_ENCAPSULATED_HEADER
+	beq  SP_STAT_COMMIT_SEND,sp_send_LMP_SIMPLE_PAIRING_COMFIRM
+	beq  SP_STAT_RANDOM_SEND,sp_send_LMP_SIMPLE_PAIRING_NUMBER
+	beq  SP_STAT_CONFIRM_SEND,sp_send_LMP_DHKEY_CHECK
+	beq  SP_STAT_KEY_GENERATE,sp_generate_local_key
+	beq  SP_STAT_COMMIT_CALC,sp_calculate_commitment
+	beq  SP_STAT_CONFIRM_CHECK,sp_confirm_check
+	beq  SP_STAT_CONFIRM_CALC,sp_confirm_calc
+	beq  SP_STAT_LINK_KEY_CALC,sp_link_key_prarm_push
+	//beq  SP_STAT_FEATURE_EXT_SEND,send_LMP_FEATURES_REQ_EXT
+	rtn  
+
+master_simple_paring_sequence:
+	bpatchx patch3d_2,mem_patch3d
+	fetch 1,mem_master_sp_flag
+	rtn blank
+	call lmo_fifo_check
+	nrtn blank
+	jam SP_FLAG_STANDBY,mem_master_sp_flag
+	fetch 1,mem_master_sp_state
+	beq SP_MASTER_STAT_START_SKIP,sp_master_send_io_cap_get
+	beq SP_MASTER_STAT_START_DONE,sp_master_send_io_cap_send
+	beq SP_STAT_KEY_SEND,sp_master_send_LMP_ENCAPSULATED_HEADER
+	beq SP_STAT_COMMIT_CALC,master_sp_calculate_commitment
+	beq SP_STAT_COMMITMENT_COMPARE,sp_master_commitment_compare
+	beq SP_STAT_RANDOM_SEND,sp_master_send_LMP_SIMPLE_PAIRING_NUMBER
+	beq SP_STAT_CONFIRM_CALC,sp_confirm_calc
+	beq SP_STAT_CONFIRM_SEND,master_sp_send_lmp_dhkey_check
+	beq SP_STAT_CONFIRM_CHECK,sp_confirm_check
+	beq SP_STATE_END,master_sp_sm_end
+	rtn
+
+master_set_mem_master_sp_flag:
+	jam SP_FLAG_COMMIT,mem_master_sp_flag
+	rtn
+	
+master_clear_mem_master_sp_flag:
+	jam SP_FLAG_STANDBY,mem_master_sp_flag
+	rtn
+sp_calc_sequence:
+	bpatchx patch3d_3,mem_patch3d
+	fetch 1,mem_ssp_enable
+	rtn blank
+	fetch 1,mem_sp_calc
+	rtn blank
+	increase 0x80,pdata
+	store    1,mem_sp_calc
+	rtnbit1 7
+	fetch    1,mem_ec_loopc
+	branch   sp_calc_sequence_done,blank
+	branch   eckp_calc
+
+sp_calc_sequence_done:    
+	call ecunmapz
+	fetch 1,mem_sp_calc
+	beq  SP_CALC_PUBKEY,sp_pubkey_generated
+	beq  SP_CALC_DHKEY,sp_dhkey_generated
+	rtn
+
+
+bn_testbit:
+	and pdata,7,queue
+	rshift3 pdata,pdata
+	iadd contr,contr
+	ifetch 1,contr
+	qisolate0 pdata
+	rtn
+
+
+ec_copy:
+	call memcpy24
+	call memcpy24
+	branch memcpy24
+	
+	
+bn_eq_zero:
+	ifetch 8,contr
+	nrtn blank
+	ifetch 8,contr
+	nrtn blank
+	ifetch 8,contr
+	rtn
+	
+	
+	/* return zero if eq */
+
+bn_eq_0:	
+	ifetch 4,regA
+	iforce temp
+	ifetch 4,regB
+	isub temp,null
+	nrtn zero
+	increase 4,regA
+	increase 4,regB
+	loop bn_eq_0
+	rtn
+
+	/* return positive if A >= B */
+bn_bigeq:
+	force 6,loopcnt
+	increase 20,regA
+	increase 20,regB
+bn_bigeq_0:	
+	ifetch 4,regB
+	iforce temp
+	ifetch 4,regA
+	isub temp,pdata
+	nrtn positive
+	nrtn blank
+	increase -4,regA
+	increase -4,regB
+	loop bn_bigeq_0
+	rtn
+
+bn_add:
+	force 6,loopcnt
+	force 0,regC
+bn_add_0:	
+	ifetch 4,regA
+	iforce temp
+	ifetch 4,regB
+	iadd temp,pdata
+	iadd regC,pdata
+	istore 4,contw
+	isolate1 32,pdata
+	setflag true,0,regC
+	increase 4,regA
+	increase 4,regB
+	loop bn_add_0
+	rtn
+
+bn_sub:
+	force 6,loopcnt
+	force 0,regC
+bn_sub_0:	
+	ifetch 4,regB
+	iforce temp
+	ifetch 4,regA
+	isub temp,pdata
+	isub regC,pdata
+	istore 4,contw
+	isolate1 32,pdata
+	setflag true,0,regC
+	increase 4,regA
+	increase 4,regB
+	loop bn_sub_0
+	rtn
+
+bn_rshift6:
+	force 6,loopcnt
+	increase 20,regA
+bn_rshift:
+	force 0,regC
+bn_rshift_0:	
+	ifetch 4,regA
+	isolate1 0,pdata
+	setflag true,1,regC
+	rshift pdata,pdata
+	isolate1 0,regC
+	setflag true,31,pdata
+	istore 4,regA
+	increase -4,regA
+	rshift regC,regC
+	loop bn_rshift_0
+	rtn
+
+bn_lshift:
+	force 6,loopcnt
+	force 0,regC
+bn_lshift_0:	
+	ifetch 4,regA
+	isolate1 31,pdata
+	setflag true,1,regC
+	lshift pdata,pdata
+	isolate1 0,regC
+	setflag true,0,pdata
+	istore 4,regA
+	increase 4,regA
+	rshift regC,regC
+	loop bn_lshift_0
+	rtn
+	
+bn_lshiftmod:
+	call bn_lshift
+bn_lshiftmod_ismod:	
+	isolate1 0,regC
+	branch bn_lshiftmod_0,true
+	arg mem_p,regB
+	copy regA,regC
+	increase -24,regA
+	call bn_bigeq
+	nrtn positive
+	copy regC,regA
+bn_lshiftmod_0:
+	increase -24,regA
+	arg mem_p,regB
+	copy regA,contw
+	branch bn_sub
+	
+
+bn_addmod:
+	call bn_add
+	copy contw,regA
+	branch bn_lshiftmod_ismod
+	
+bn_submod:
+	call bn_sub
+	isolate0 0,regC
+	rtn true
+	arg mem_p,regB
+	add contw,-24,regA
+	copy regA,contw
+	branch bn_add
+	
+
+bn_p192mod:
+	copy contw,timeup				/* save result ptr */
+	copy regA,alarm				/* temp save regA */
+	arg mem_tmp2,regB
+	copy regB,contw
+	add regA,24,contr
+	ifetch 8,contr
+	istore 8,contw
+	istore 8,contw
+	force 0,pdata
+	istore 8,contw
+	copy timeup,contw
+	call bn_addmod
+	arg mem_tmp2,regB
+	copy regB,contw
+	force 0,pdata
+	istore 8,contw
+	add alarm,32,contr
+	ifetch 8,contr
+	istore 8,contw
+	istore 8,contw
+	copy timeup,regA
+	copy regA,contw
+	call bn_addmod
+	arg mem_tmp2,regB
+	copy regB,contw
+	add alarm,40,contr
+	ifetch 8,contr
+	istore 8,contw
+	istore 8,contw
+	istore 8,contw
+	copy timeup,regA
+	copy regA,contw
+	branch bn_addmod
+		
+
+bn_load:
+	force 6,loopcnt
+bn_load_0:	
+	ifetch 4,contr
+	iforce regext
+	increase 1,regext_index
+	loop bn_load_0
+	rtn
+
+
+	/* cost 1562 clks */	
+bn_mulmod:
+	copy contw,timeup					/* save result ptr */
+	arg mem_tmp1,contw
+	call bn_zero
+	arg mem_tmp1,contw
+	copy regA,contr
+	force 0,regext_index
+	call bn_load
+	copy regB,contr
+	call bn_load
+	force 0,regB
+bn_mulmod_1:	
+	force 0,temp
+	force 6,regC
+bn_mulmod_0:
+	ifetch 4,contw					/* d[i+j] */
+	iforce regA
+	copy regB,regext_index
+	deposit regext
+	copy regC,regext_index
+	imul32 regext,pdata
+	iadd regA,pdata					/* uv = a[i]*b[j] + d[i+j] */
+	iadd temp,pdata					/* uv += u */
+	istore 4,contw					/* ->d[i+j] */
+	rshift32 pdata,temp				/* temp = u = uv >> 32 */
+	increase 1,regC
+	compare 12,regC,0xff
+	nbranch bn_mulmod_0,true
+	deposit temp
+	istore 4,contw					/* d[i + 12] = u */
+	increase -24,contw
+	increase 1,regB
+	compare 6,regB,0xff
+	nbranch bn_mulmod_1,true
+	arg mem_tmp1,regA
+	copy timeup,contw
+	branch bn_p192mod
+
+	
+bn_sqrmod:
+	copy regA,regB
+	branch bn_mulmod
+
+bn_rshifteven:
+	copy regA,alarm
+bn_rshifteven_1:
+	copy alarm,regA
+	ifetch 1,regA
+	isolate1 0,pdata
+	rtn true
+	call bn_rshift6
+	ifetch 1,regB
+	isolate0 0,pdata
+	branch bn_rshifteven_0,true
+	arg mem_p,regA
+	copy regB,contw
+	call bn_add
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB						/* [6] */
+	increase -24,regB
+bn_rshifteven_0:
+	add regB,24,regA
+	force 7,loopcnt
+	call bn_rshift
+	branch bn_rshifteven_1
+
+	/* cost 141910 clks */
+bn_invmod:
+	copy contw,timeup					/* save result ptr */
+	arg mem_tmp0,contw				/* x */
+	call bn_zero
+	force 0,pdata
+	store 4,mem_tmp5
+	store 4,mem_t2
+	jam 1,mem_tmp0
+	arg mem_tmp1,contw				/* y */
+	call bn_zero
+	arg mem_p,contr
+	arg mem_tmp2,contw				/* a */
+	call memcpy24
+	copy regA,contr
+	arg mem_tmp3,contw				/* b */
+	call memcpy24
+bn_invmod_2:	
+	arg mem_tmp3,contr
+	call bn_eq_zero
+	branch bn_invmod_0,blank
+	arg mem_tmp3,regA
+	arg mem_tmp0,regB
+	call bn_rshifteven
+
+	arg mem_tmp2,regA
+	arg mem_tmp1,regB
+	call bn_rshifteven
+	arg mem_tmp3,regA
+	arg mem_tmp2,regB
+	call bn_bigeq
+	branch bn_invmod_1,positive
+	arg mem_tmp2,regA
+	arg mem_tmp3,regB
+	copy regA,contw
+	call bn_sub
+	arg mem_tmp0,regA
+	arg mem_tmp1,regB
+	copy regB,contw
+	call bn_add
+	ifetch 1,regA
+	iadd regC,regC
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB
+	branch bn_invmod_2
+bn_invmod_1:
+	arg mem_tmp3,regA
+	arg mem_tmp2,regB
+	copy regA,contw
+	call bn_sub
+	arg mem_tmp1,regA
+	arg mem_tmp0,regB
+	copy regB,contw
+	call bn_add
+	ifetch 1,regA
+	iadd regC,regC
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB
+	branch bn_invmod_2
+bn_invmod_0:
+	arg mem_tmp0,contw
+	call bn_zero
+	fetch 1,mem_tmp5
+	store 1,mem_tmp0
+	store 1,mem_tmp0a
+	arg mem_tmp0,regA
+	arg mem_tmp1,regB
+	copy regB,contw
+	call bn_addmod
+	arg mem_p,regA
+	arg mem_tmp1,regB
+	copy timeup,contw
+	branch bn_submod
+	
+
+
+	/* cost 64742 clks */
+ecdbl:
+	arg mem_cz,regA
+	arg mem_t2,contw
+	call bn_sqrmod
+	arg mem_t2,regA
+	arg mem_t3,contw
+	call bn_sqrmod
+	arg mem_a,regA
+	arg mem_t3,regB
+	arg mem_t3,contw
+	call bn_mulmod		/* t3=a*z4	*/
+	arg mem_cx,regA
+	arg mem_t2,contw
+	call bn_sqrmod
+	arg mem_t2,contr
+	arg mem_t1,contw
+	call memcpy24
+	arg mem_t1,regA
+	call bn_lshiftmod
+	arg mem_t2,regA
+	arg mem_t1,regB
+	arg mem_t2,contw
+	call bn_addmod
+	arg mem_t2,regA
+	arg mem_t3,regB
+	arg mem_t2,contw
+	call bn_addmod		/* t2=3*x2 + z*z4		D  */
+	arg mem_cx,contr
+	arg mem_t1,contw
+	call memcpy24
+	arg mem_cy,regA
+	arg mem_t3,contw
+	call bn_sqrmod
+	arg mem_t1,regA
+	call bn_lshiftmod
+	arg mem_t1,regA
+	call bn_lshiftmod
+	arg mem_t1,regA		
+	arg mem_t3,regB
+	arg mem_t1,contw
+	call bn_mulmod		/* t1=4x*y2	B	*/
+	arg mem_t3,regA
+	arg mem_t0,contw
+	call bn_sqrmod
+	arg mem_t0,regA
+	call bn_lshiftmod
+	arg mem_t0,regA
+	call bn_lshiftmod		
+	arg mem_t0,regA		
+	call bn_lshiftmod		/* t0=8*y4		C */
+	arg mem_cy,contr
+	arg mem_t3,contw
+	call memcpy24
+	arg mem_t3,regA
+	call bn_lshiftmod
+	arg mem_t3,regA
+	arg mem_cz,regB
+	arg mem_cz,contw
+	call bn_mulmod		
+	arg mem_t2,regA
+	arg mem_t3,contw
+	call bn_sqrmod
+	arg mem_t3,regA
+	arg mem_t1,regB
+	arg mem_t3,contw
+	call bn_submod
+	arg mem_t3,regA
+	arg mem_t1,regB
+	arg mem_cx,contw
+	call bn_submod
+	arg mem_t1,regA
+	arg mem_cx,regB
+	arg mem_t3,contw
+	call bn_submod
+	arg mem_t3,regA
+	arg mem_t2,regB
+	arg mem_t3,contw
+	call bn_mulmod		
+	arg mem_t3,regA
+	arg mem_t0,regB
+	arg mem_cy,contw
+	branch bn_submod
+	
+
+	/* cost 104904	clks */
+ecadd:
+	arg mem_az,regA
+	arg mem_t7,contw
+	call bn_sqrmod
+	arg mem_cx,regA
+	arg mem_t7,regB
+	arg mem_t0,contw
+	call bn_mulmod		/* n1=t0=xa*zb2  */
+	arg mem_az,regA
+	arg mem_t7,regB
+	arg mem_t7,contw
+	call bn_mulmod	
+	arg mem_cy,regA
+	arg mem_t7,regB
+	arg mem_t1,contw
+	call bn_mulmod		/* n2=t1=ya*zb3 */
+	arg mem_cz,regA
+	arg mem_t7,contw
+	call bn_sqrmod
+	arg mem_ax,regA
+	arg mem_t7,regB
+	arg mem_t2,contw
+	call bn_mulmod		/* n3=t2=xb*za2 */
+	arg mem_cz,regA
+	arg mem_t7,regB
+	arg mem_t7,contw
+	call bn_mulmod	
+	arg mem_ay,regA
+	arg mem_t7,regB
+	arg mem_t3,contw
+	call bn_mulmod		/* n4=t3=yb*za3 */
+	arg mem_t0,regA
+	arg mem_t2,regB
+	arg mem_t7,contw
+	call bn_submod		/* n5=t7=n1-n3=t0-t2 */
+	arg mem_t0,regA
+	arg mem_t2,regB
+	arg mem_t0,contw
+	call bn_addmod		/* n7=t0=n1+n3=t0+t2 */
+	arg mem_t1,regA
+	arg mem_t3,regB
+	arg mem_t2,contw
+	call bn_submod		/* n6=t2=n2-n4=t1-t3 */
+	arg mem_t1,regA
+	arg mem_t3,regB
+	arg mem_t1,contw
+	call bn_addmod		/* n8=t1=n2+n4=t1+t3 */
+	arg mem_t1,regA
+	arg mem_t7,regB
+	arg mem_t1,contw
+	call bn_mulmod		/* t1=n8*n5 */
+	arg mem_cz,regA
+	arg mem_az,regB
+	arg mem_t3,contw
+	call bn_mulmod	
+	arg mem_t3,regA
+	arg mem_t7,regB
+	arg mem_cz,contw
+	call bn_mulmod		/* z=za*zb*n5 */
+	arg mem_t7,regA
+	arg mem_t7,contw
+	call bn_sqrmod		/* t7=n5^2 */
+	arg mem_t7,regA
+	arg mem_t0,regB
+	arg mem_t3,contw
+	call bn_mulmod		/* t3=n5^2*n7 */
+	arg mem_t7,regA
+	arg mem_t1,regB
+	arg mem_t1,contw
+	call bn_mulmod		/* t1=n8*n5^3 */
+	arg mem_t2,regA
+	arg mem_cx,contw
+	call bn_sqrmod		
+	arg mem_cx,regA
+	arg mem_t3,regB
+	arg mem_cx,contw
+	call bn_submod		/* x=n6^2-n5^2*n7 */
+	arg mem_cx,contr
+	arg mem_t7,contw
+	call memcpy24
+	arg mem_t7,regA
+	call bn_lshiftmod		/* t7=2*x */
+	arg mem_t3,regA
+	arg mem_t7,regB
+	arg mem_t3,contw
+	call bn_submod		/* t3=n9 */
+	arg mem_t3,regA
+	arg mem_t2,regB
+	arg mem_t2,contw
+	call bn_mulmod		/* t2=n9*n6 */
+	arg mem_t2,regA
+	arg mem_t1,regB
+	arg mem_cy,contw
+	call bn_submod	
+	arg mem_cy,regA
+	arg mem_p,regB
+	arg mem_cy,contw
+	force 0,regC
+	fetch 1,mem_cy
+	isolate1 0,pdata
+	call bn_add,true
+	copy regC,alarm
+	arg mem_cy,regA
+	call bn_rshift6
+	fetch 1,mem_cy5
+	isolate1 0,alarm
+	setflag true,7,pdata
+	store 1,mem_cy5
+	rtn
+
+	/* cost 22276983 clks */
+
+eckp_0:	
+	fetch 1,mem_ec_loopc
+	increase -1,pdata
+	nrtn positive
+	store 1,mem_ec_loopc
+	fetch 1,mem_ec_infinite
+	call ecdbl,blank
+	fetch 1,mem_ec_loopc
+	arg mem_k,contr
+	call bn_testbit
+	branch eckp_0,true
+	fetch 1,mem_ec_infinite
+	nbranch eckp_1,blank
+	call ecadd
+	branch eckp_0
+eckp_1:
+	jam 0,mem_ec_infinite
+	arg mem_ax,contr
+	arg mem_cx,contw
+	call ec_copy
+	branch eckp_0
+
+	/* cost 162522 clks */
+ecunmapz:
+	arg mem_cz,regA
+	arg mem_t3,contw
+	call bn_invmod			/* t3 = 1/z */
+	arg mem_t3,regA
+	arg mem_t1,contw		
+	call bn_sqrmod			/* t1 = 1/z2 */
+	arg mem_cx,regA
+	arg mem_t1,regB
+	arg mem_bx,contw
+	call bn_mulmod
+	arg mem_t3,regA
+	arg mem_t1,regB
+	arg mem_t2,contw			
+	call bn_mulmod			/* t2 = 1/z3 */
+	arg mem_cy,regA
+	arg mem_t2,regB
+	arg mem_by,contw
+	branch bn_mulmod		
+	
+	
+
+sha_endian_swap2:	
+	ifetch 4,contr
+	force 4,regA
+	increase 3,contw
+sha_endian_loop:	
+	istore 1,contw
+	rshift8 pdata,pdata
+	increase -2,contw
+	increase -1,regA
+	nbranch sha_endian_loop,zero
+	increase 5,contw
+	loop sha_endian_swap2
+	rtn	
+
+
+sha_getw:
+	lshift2 queue,pdata
+	iadd timeup,contr
+	ifetch 4,contr
+	rtn
+	
+sha_r:
+	force 16,alarm
+	arg memdat,timeup
+sha_r_loop:	
+	add alarm,-7,queue
+	call sha_getw
+	iforce temp						/* W[t - 7] */
+	add alarm,-16,queue
+	call sha_getw
+	iadd temp,temp					/* W[t-7] + W[t-16] */
+	add alarm,-2,queue
+	call sha_getw
+	shasx pdata,1,pdata
+	iadd temp,temp					/* S1(W[t -  2]) + W[t-7] + W[t-16] */
+	add alarm,-15,queue
+	call sha_getw
+	shasx pdata,0,pdata
+	iadd temp,temp					/* S0(W[t - 15]) + S1(W[t -  2]) + W[t-7] + W[t-16] */
+	lshift2 alarm,pdata
+	iadd timeup,contw
+	istoret 4,contw
+	increase 1,alarm
+	compare 64,alarm,0xff
+	nbranch sha_r_loop,true
+	rtn
+	
+
+sha_init:
+	arg memh0,contr
+	force 7,regext_index
+sha_init_0:	
+	ifetch 4,contr
+	iforce regext
+	increase -1,regext_index
+	branch sha_init_0,positive
+	rtn
+
+sha:
+	bpatchx patch3d_4,mem_patch3d
+	call sha_r		/* preprocessing data into R() */
+	arg memahbak,contw
+	force 0,regext_index
+sha_0:	
+	deposit regext
+	istore 4,contw
+	increase 1,regext_index
+	compare 8,regext_index,0xff
+	nbranch sha_0,true
+	call enable_authrom
+	arg memk,timeup
+	arg memdat,alarm
+	force 64,loopcnt
+sha_loop:	
+	ifetcht 4,alarm
+	ifetch 4,timeup
+	increase 4,timeup
+	increase 4,alarm
+	iadd temp,pdata			/* x+K */
+	force 7,regext_index
+	iadd regext,temp			/* x+K+h */
+	force 4,regext_index
+	shasx regext,3,pdata
+	iadd temp,temp			/* temp = s3(e)+x+K+h */
+	force 5,regext_index
+	deposit regext
+	force 6,regext_index
+	ixor regext,pdata
+	force 4,regext_index
+	iand regext,pdata			/* (e & (f ^ g)) */
+	force 6,regext_index
+	ixor regext,pdata			/* F1(e, f, g) = g ^ (e & (f ^ g)) */
+	iadd temp,temp			/* temp1 = h + S3(e) + F1(e,f,g) + K + x */
+	force 7,regext_index
+	copy temp,regext			/* save to H */
+	force 3,regext_index
+	deposit regext
+	iadd temp,regext			/* save to D */
+	force 0,regext_index
+	deposit regext
+	force 1,regext_index
+	iand regext,temp			/* a & b */
+	ior regext,pdata			/* a | b */			
+	force 2,regext_index
+	iand regext,pdata			/* (c & (a | b)) */
+	ior temp,temp				/* F0:(a & b) | (c & (a | b)) */
+	force 0,regext_index
+	shasx regext,2,pdata
+	iadd temp,pdata			/* temp2 = S2(a) + F0(a,b,c) */
+	force 7,regext_index
+	iadd regext,regext			/* h = temp1 + temp2 */
+	regexrot					/* rotate move h,a-g => a-h */
+	loop sha_loop
+	arg memahbak,contr
+	force 0,regext_index
+sha_1:	
+	ifetch 4,contr
+	iadd regext,regext
+	increase 1,regext_index
+	compare 8,regext_index,0xff
+	nbranch sha_1,true
+	branch disable_authrom
+
+	
+sha_result:
+	arg   memresult,contw
+	force 7,regext_index
+sha_regext_save:
+	deposit regext
+	istore  4,contw 
+	increase -1,regext_index
+	branch   sha_regext_save,positive
+	rtn	
+
+pad_xor:
+//	arg memx_end,contr
+	arg      memdat,contw
+	increase -4,contr
+	sub      loopcnt,16,regA
+pad_xor_0:	    
+	ifetch   4,contr
+	ixor     temp,pdata
+	istore   4,contw	
+	increase -8,contr	
+	loop  pad_xor_0
+	copy     regA,loopcnt
+	deposit  temp
+pad_xor_1:	
+	istore 4,contw
+	loop pad_xor_1
+	rtn
+
+g_noninit_number_confirm:
+	call g_noninit0
+	call sha_result
+	branch g_common0
+
+g_noninit:
+	call g_noninit0
+	branch g_common0
+	
+g_noninit0:
+ 	arg      mem_sp_pubkey_remote_x_end,contr
+	arg      memdat,contw
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	arg      mem_sp_pubkey_local_x_end,contr
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	arg      mem_sp_random_remote_end,contr
+	call     memcpy_dword_swap4
+	call     sha_init
+	call     sha	
+ 	arg      mem_sp_random_local_end,contr
+	arg      memdat,contw
+	branch g_common
+	
+g_init:
+ 	arg      mem_sp_pubkey_local_x_end,contr
+	arg      memdat,contw
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	arg      mem_sp_pubkey_remote_x_end,contr
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	arg      mem_sp_random_local_end,contr
+	call     memcpy_dword_swap4
+	call     sha_init
+	call     sha	
+ 	arg      mem_sp_random_remote_end,contr
+	arg      memdat,contw
+	call g_common
+	branch g_common0
+	
+g_common:	
+	call     memcpy_dword_swap4
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	force    5,loopcnt
+	call memset0
+	setarg 640
+	istore 4,contw
+	branch sha
+g_common0:
+	fetch 4,memresult
+//	store 4,mem_gkey
+	arg 1000,rega
+	idiv rega
+	call wait_div_end
+	remainder pdata
+	store 4,mem_gkey
+	quotient pdata
+	arg 1000,rega
+	idiv rega
+	call wait_div_end
+	remainder pdata
+	arg 1000,rega
+	imul32 rega,pdata
+	fetcht 4,mem_gkey
+	iadd temp,pdata
+	store 4,mem_gkey
+	rtn
+
+function_f1_no_key:
+	jam 0,mem_passkey_1bit
+	branch function_f1_common
+	
+function_f1:
+	fetch 1,mem_ssp_mode_flag
+	bne  SSP_MODE_PASSKEY_ENTRY_FLAG,function_f1_no_key
+function_f1_common:
+	bpatchx patch3d_5,mem_patch3d
+	setarg   0x363636
+	lshift8  pdata,temp
+	or_into       0x36,temp
+	fetch 2,mem_sp_prarm_stack
+	copy pdata,contr
+	force    4,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	fetch 2,mem_sp_prarm_stack+2
+	copy pdata,contr
+	arg      memdat,contw
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	fetch 2,mem_sp_prarm_stack+4
+	copy pdata,contr
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	setarg   0x800000
+	istore   3,contw
+	
+	fetch 1,mem_passkey_1bit
+	
+	istore   1,contw
+	force    0,pdata
+	istore   8,contw
+	setarg   0x0388
+	istore   4,contw
+	call     sha
+	call     sha_result
+	arg      memresult,contr
+	arg      memahsave,contw 
+	call     memcpy32
+    
+	setarg   0x5c5c5c
+	lshift8  pdata,temp
+	or_into       0x5c,temp
+	fetch 2,mem_sp_prarm_stack
+	copy pdata,contr
+	force    4,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	arg      memahsave_end,contr
+	arg      memdat,contw
+	force    8,loopcnt
+	call     memcpy_dword_swap
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	call		bn_zero
+	setarg   0x0300
+	istore   4,contw
+	call     sha
+	branch     sha_result
+	
+	
+function_f2:
+	setarg   0x363636
+	lshift8  pdata,temp
+	or_into       0x36,temp
+	arg      mem_sp_dhkey_end,contr
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	fetch 2,mem_sp_prarm_stack+12
+	copy pdata,contr
+	arg      memdat,contw
+	call     memcpy_dword_swap4
+	fetch 2,mem_sp_prarm_stack+14
+	copy pdata,contr
+	call     memcpy_dword_swap4
+
+	setarg   0x62746c
+	lshift8  pdata,pdata
+	or_into       0x6b,pdata       
+	istore   4,contw
+	arg      mem_addr_value_end,contr
+	force    3,loopcnt
+	call     memcpy_dword_swap
+	
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	force    0,pdata
+	istore   8,contw
+	setarg   0x0380
+	istore   4,contw
+	call     sha
+
+	call     sha_result
+	arg      memresult,contr
+	arg      memahsave,contw 
+	call     memcpy32
+    
+	setarg   0x5c5c5c
+	lshift8  pdata,temp
+	or_into       0x5c,temp
+	arg      mem_sp_dhkey_end,contr 
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	arg      memahsave_end,contr
+	arg      memdat,contw
+	force    8,loopcnt
+	call     memcpy_dword_swap
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	call bn_zero
+	setarg   0x0300
+	istore   4,contw
+	call     sha
+	branch     sha_result
+	
+
+function_f3a:
+	fetch 1,mem_ssp_mode_flag
+	bne  SSP_MODE_PASSKEY_ENTRY_FLAG,function_f3a_no_pin
+function_f3a_common:
+	bpatchx patch3d_6,mem_patch3d
+	setarg   0x363636
+	lshift8  pdata,temp
+	or_into       0x36,temp
+	arg      mem_sp_dhkey_end,contr
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	arg      mem_sp_random_remote_end,contr
+	arg      memdat,contw
+	call     memcpy_dword_swap4
+	arg      mem_sp_random_local_end,contr
+	call     memcpy_dword_swap4
+	branch function_f3_common
+
+function_f3a_no_pin:
+	setarg 0
+	store 4,mem_pin
+	branch function_f3a_common
+
+function_f3b_no_pin:
+	setarg 0
+	store 4,mem_pin
+	branch function_f3b_common
+
+
+function_f3b:
+	fetch 1,mem_ssp_mode_flag
+	bne  SSP_MODE_PASSKEY_ENTRY_FLAG,function_f3b_no_pin
+function_f3b_common:
+	setarg   0x363636
+	lshift8  pdata,temp
+	or_into       0x36,temp
+	arg      mem_sp_dhkey_end,contr
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+
+	arg      mem_sp_random_local_end,contr
+	arg      memdat,contw
+	call     memcpy_dword_swap4
+	arg      mem_sp_random_remote_end,contr
+	call     memcpy_dword_swap4
+function_f3_common:    
+	setarg   0x0    
+	istore   8,contw
+	istore   4,contw
+	fetch 4,mem_pin
+	istore   4,contw
+	
+	copy     contw,temp
+	jam      0x80,mem_addr_padding
+	copy     temp,contw
+	arg      mem_addr_iocap_end,contr
+	call     memcpy_dword_swap4
+
+	call     sha
+    
+	arg      memdat,contw
+	force 7,loopcnt
+	call memset0
+	istore   4,contw
+	setarg   0x03F8
+	istore   4,contw
+	call     sha
+	call     sha_result
+	
+	arg      memresult,contr
+	arg      memahsave,contw 
+	call     memcpy32
+    
+	setarg   0x5c5c5c
+	lshift8  pdata,temp
+	or_into       0x5c,temp
+	arg      mem_sp_dhkey_end,contr 
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	arg      memahsave_end,contr
+	arg      memdat,contw
+	force    8,loopcnt
+	call     memcpy_dword_swap
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	call bn_zero
+	setarg   0x0300
+	istore   4,contw
+	call     sha	
+	branch     sha_result
+		
+/*
+eckp:
+	jam 192,mem_ec_loopc
+	jam 1,mem_ec_infinite
+*/
+eckp_calc_init:
+	jam      192,mem_ec_loopc
+eckp_calc_init_1:    
+	fetch    1,mem_ec_loopc
+	rtn      blank
+	increase -1,pdata
+	store    1,mem_ec_loopc 	
+	arg      mem_k,contr
+	call     bn_testbit
+	branch eckp_calc_init_1,true
+	arg      mem_ax,contr
+	arg      mem_cx,contw
+	branch     ec_copy	
+	
+eckp_calc:
+	call     ecdbl  
+	fetch    1,mem_ec_loopc
+	increase -1,pdata
+	store    1,mem_ec_loopc
+	arg      mem_k,contr
+	call     bn_testbit
+	rtn	true
+	branch     ecadd                
+	             
+memcpy_dword_swap4:
+	force 4,loopcnt
+memcpy_dword_swap:
+	increase -4,contr
+memcpy_dword_swap_loop:
+	ifetch   4,contr
+	istore   4,contw
+	increase -8,contr
+	loop   memcpy_dword_swap_loop 
+    	rtn
+
+else
+sp_initialize:
+	rtn
+
+endif
+	
+
+ifdef SECURE_CONNECTION
+
+sp_initialize_256:	
+	bpatchx patch3d_7,mem_patch3d
+	fetch 1,mem_le_secure_connect_enable
+	branch  le_secure_connection_disable,blank
+	call le_secure_connection_enable
+	call sp_clear_flags
+//	jam SP_KEY_INVALID_256,mem_le_sc_local_key_invalid
+	branch sp_pubkey_calc_256
+    	
+
+
+
+sp_pubkey_calc_256:
+	fetch    1,mem_le_sc_local_key_invalid
+	rtnne SP_KEY_INVALID
+	fetch    1,mem_le_sc_calc
+	rtnne  SP_CALC_STANDBY
+	
+	arg      mem_le_private_key_256,contw 
+	force    15,queue
+	call     random_generator
+	random   pdata
+	rshift   pdata,pdata
+	istore   2,contw 
+
+	arg      mem_k_256,contw
+	arg      mem_le_private_key_256,contr	
+	call     memcpy32 //mem_sp_private_key=>mem_k 
+
+	arg      mem_ax_256,contw
+	arg      mem_gx_256,contr
+	call     memcpy64 //mem_gx=>mem_ax 
+	
+	arg      mem_az_256,contw
+	call      clear_mem_256
+	jam      1,mem_az_256 //0=>mem_az 
+
+	call     eckp_calc_init_256
+	jam SP_CALC_PUBKEY_256,mem_le_sc_calc
+	rtn    
+
+sp_pubkey_generated_256:
+	arg      mem_le_pubkey_local_x_256,contw
+	arg      mem_bx_256,contr
+	call     memcpy64   
+	jam      SP_KEY_VALID_256,mem_le_sc_local_key_invalid
+	jam      SP_CALC_STANDBY,mem_le_sc_calc
+	rtn
+	
+
+
+sp_dhkey_calc_256:
+	fetch    1,mem_sp_dhkey_invalid
+	rtnne  SP_KEY_INVALID
+	fetch    1,mem_le_sc_calc
+	rtnne  SP_CALC_STANDBY
+
+	arg      mem_k_256,contw
+	arg      mem_le_private_key_256,contr	
+	call     memcpy32
+
+	arg      mem_ax_256,contw
+	arg      mem_le_pubkey_remote_x_256,contr
+	call     memcpy64
+
+	arg      mem_az_256,contw
+	call     clear_mem_256
+	jam      1,mem_az_256 //0=>mem_az 
+
+	call     eckp_calc_init_256
+	jam     SP_CALC_DHKEY_256,mem_le_sc_calc
+	rtn 
+
+
+sp_dhkey_generated_256:
+//	jam SP_FLAG_COMMIT,mem_sp_dh_ready
+	arg mem_le_dhkey_256,contw
+	arg mem_bx_256,contr
+	call memcpy32
+	jam SP_KEY_VALID_256,mem_sp_dhkey_invalid
+	jam SP_CALC_STANDBY,mem_le_sc_calc
+	rtn
+
+
+
+sp_calc_sequence_256:
+	fetch 1,mem_le_secure_connect_enable
+	rtn blank
+	fetch 1,mem_le_sc_calc
+	rtn blank
+	increase 0x80,pdata
+	store    1,mem_le_sc_calc
+	rtnbit1 7
+	fetch    2,mem_ec_loopc
+	branch   sp_calc_sequence_done_256,blank
+	branch   eckp_calc_256
+
+sp_calc_sequence_done_256:    
+	bpatchx patch3e_0,mem_patch3e
+	call ecunmapz_256
+	fetch 1,mem_le_sc_calc
+	beq  SP_CALC_PUBKEY_256,sp_pubkey_generated_256
+	beq  SP_CALC_DHKEY_256,sp_dhkey_generated_256
+	rtn
+
+
+eckp_calc_256:
+	call     ecdbl_256  
+	fetch    2,mem_ec_loopc
+	increase -1,pdata
+	store    2,mem_ec_loopc
+	arg      mem_k_256,contr
+	call     bn_testbit
+	rtn	true
+	branch     ecadd_256   
+
+eckp_calc_init_256:
+	bpatchx patch3e_1,mem_patch3e
+	setarg 256,pdata
+	store 2,mem_ec_loopc
+eckp_calc_init_256_1:    
+	fetch    2,mem_ec_loopc
+	rtn      blank
+	increase -1,pdata
+	store    2,mem_ec_loopc
+	arg      mem_k_256,contr
+	call     bn_testbit
+	branch eckp_calc_init_256_1,true
+	arg      mem_ax_256,contr
+	arg      mem_cx_256,contw
+	branch     memcpy96	
+
+
+ecunmapz_256:
+	arg mem_cz_256,regA
+	arg mem_t3_256,contw
+	call bn_invmod_256			/* t3 = 1/z */
+	arg mem_t3_256,regA
+	arg mem_t1_256,contw		
+	call bn_sqrmod_256			/* t1 = 1/z2 */
+	arg mem_cx_256,regA
+	arg mem_t1_256,regB
+	arg mem_bx_256,contw
+	call bn_mulmod_256
+	arg mem_t3_256,regA
+	arg mem_t1_256,regB
+	arg mem_t2_256,contw			
+	call bn_mulmod_256			/* t2 = 1/z3 */
+	arg mem_cy_256,regA
+	arg mem_t2_256,regB
+	arg mem_by_256,contw
+	branch bn_mulmod_256	
+	
+ecdbl_256:
+	arg mem_cz_256,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod_256
+	arg mem_t2_256,regA
+	arg mem_t3_256,contw
+	call bn_sqrmod_256
+//call ice_break
+	arg mem_a_256,regA
+	arg mem_t3_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256		/* t3=a*z4	*/
+	arg mem_cx_256,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod_256
+//call ice_break
+	arg mem_t2_256,contr
+	arg mem_t1_256,contw
+	call memcpy32
+	arg mem_t1_256,regA
+	call bn_lshiftmod_256
+	arg mem_t2_256,regA
+	arg mem_t1_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod_256
+//call ice_break
+	arg mem_t2_256,regA
+	arg mem_t3_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod_256		/* t2=3*x2 + z*z4		D  */
+//call ice_break
+	arg mem_cx_256,contr
+	arg mem_t1_256,contw
+	call memcpy32
+	arg mem_cy_256,regA
+	arg mem_t3_256,contw
+	call bn_sqrmod_256
+	arg mem_t1_256,regA
+	call bn_lshiftmod_256
+	arg mem_t1_256,regA
+	call bn_lshiftmod_256
+	arg mem_t1_256,regA		
+	arg mem_t3_256,regB
+	arg mem_t1_256,contw
+	call bn_mulmod_256		//S = 4X1Y1^2/* t1=4x*y2	B	*/
+	arg mem_t3_256,regA
+	arg mem_t0_256,contw
+	call bn_sqrmod_256
+	arg mem_t0_256,regA
+	call bn_lshiftmod_256
+	arg mem_t0_256,regA
+	call bn_lshiftmod_256		
+	arg mem_t0_256,regA		
+	call bn_lshiftmod_256	//T = 8Y1^4	/* t0=8*y4		C */
+	arg mem_cy_256,contr
+	arg mem_t3_256,contw
+	call memcpy32
+	arg mem_t3_256,regA
+	call bn_lshiftmod_256
+	arg mem_t3_256,regA
+	arg mem_cz_256,regB
+	arg mem_cz_256,contw
+	call bn_mulmod_256		//z = 2Y1Z1
+
+
+	arg mem_t2_256,regA
+	arg mem_t3_256,contw
+	call bn_sqrmod_256   // M ^2
+//call ice_break
+	arg mem_t3_256,regA
+	arg mem_t1_256,regB
+	arg mem_t3_256,contw
+	call bn_submod_256  // t2^2 - 4*cx *cy^2 
+	arg mem_t3_256,regA
+	arg mem_t1_256,regB
+	arg mem_cx_256,contw
+	call bn_submod_256   //X2
+	arg mem_t1_256,regA
+	arg mem_cx_256,regB
+	arg mem_t3_256,contw
+	call bn_submod_256   //S-X2
+	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256	//M(S-X2)	
+	arg mem_t3_256,regA
+	arg mem_t0_256,regB
+	arg mem_cy_256,contw
+	branch bn_submod_256  //M(S-X2)-T Y2	
+
+ecadd_256:
+
+	arg mem_az_256,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod_256
+	arg mem_cx_256,regA
+	arg mem_t7_256,regB
+	arg mem_t0_256,contw
+	call bn_mulmod_256		/* n1=t0=xa*zb2 U1 = X1Z0^2*/
+
+
+	arg mem_az_256,regA
+	arg mem_t7_256,regB
+	arg mem_t7_256,contw
+	call bn_mulmod_256	
+	arg mem_cy_256,regA
+	arg mem_t7_256,regB
+	arg mem_t1_256,contw
+	call bn_mulmod_256		/* n2=t1=ya*zb3   S1 = Y1Z0^3*/
+
+
+	arg mem_cz_256,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod_256
+	arg mem_ax_256,regA
+	arg mem_t7_256,regB
+	arg mem_t2_256,contw
+	call bn_mulmod_256		/* n3=t2=xb*za2  U0 = X0Z1^2*/
+
+	arg mem_cz_256,regA
+	arg mem_t7_256,regB
+	arg mem_t7_256,contw
+	call bn_mulmod_256	
+	arg mem_ay_256,regA
+	arg mem_t7_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256		/* n4=t3=yb*za3 S0 = Y0Z1^3*/
+
+
+//	arg mem_t0_256,regA
+//	arg mem_t2_256,regB
+	arg mem_t0_256,regb
+	arg mem_t2_256,rega
+	arg mem_t7_256,contw
+	call bn_submod_256		/* n5=t7=n1-n3=t0-t2   W=U1-U0*/
+	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	call bn_addmod_256		/* n7=t0=n1+n3=t0+t2    T=U1+U0 */
+//	arg mem_t1_256,regA
+//	arg mem_t3_256,regB
+	arg mem_t1_256,regb
+	arg mem_t3_256,rega
+	arg mem_t2_256,contw
+	call bn_submod_256		/* n6=t2=n2-n4=t1-t3  S1-S0 */
+	arg mem_t1_256,regA
+	arg mem_t3_256,regB
+	arg mem_t1_256,contw
+	call bn_addmod_256		/* n8=t1=n2+n4=t1+t3 M=S1+S0*/
+	arg mem_t1_256,regA
+	arg mem_t7_256,regB
+	arg mem_t1_256,contw
+	call bn_mulmod_256		/* t1=n8*n5     MW */
+	arg mem_cz_256,regA
+	arg mem_az_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256	      //Z0Z1
+	arg mem_t3_256,regA
+	arg mem_t7_256,regB
+	arg mem_cz_256,contw
+	call bn_mulmod_256		/* z=za*zb*n5   Z0Z1W */
+
+	arg mem_t7_256,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod_256		/* t7=n5^2 */
+	arg mem_t7_256,regA
+	arg mem_t0_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256		/* t3=n5^2*n7 */
+	arg mem_t7_256,regA
+	arg mem_t1_256,regB
+	arg mem_t1_256,contw
+	call bn_mulmod_256		/* t1=n8*n5^3 */
+	arg mem_t2_256,regA
+	arg mem_cx_256,contw
+	call bn_sqrmod_256		
+	arg mem_cx_256,regA
+	arg mem_t3_256,regB
+	arg mem_cx_256,contw
+	call bn_submod_256		/* x=n6^2-n5^2*n7 */
+	arg mem_cx_256,contr
+	arg mem_t7_256,contw
+	call memcpy32
+	arg mem_t7_256,regA
+	call bn_lshiftmod_256		/* t7=2*x */
+	arg mem_t3_256,regA
+	arg mem_t7_256,regB
+	arg mem_t3_256,contw
+	call bn_submod_256		/* t3=n9 */
+	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_mulmod_256		/* t2=n9*n6 */
+	arg mem_t2_256,regA
+	arg mem_t1_256,regB
+	arg mem_cy_256,contw
+	call bn_submod_256	
+	arg mem_cy_256,regA
+	arg mem_p_256,regB
+	arg mem_cy_256,contw
+	force 0,regC
+	fetch 1,mem_cy_256
+	isolate1 0,pdata
+	call bn_add_256,true
+	copy regC,alarm
+	arg mem_cy_256,regA
+	call bn_rshift_256
+	fetch 1,mem_cy5_256
+	isolate1 0,alarm
+	setflag true,7,pdata
+	store 1,mem_cy5_256
+	rtn	
+
+bn_invmod_256:
+	copy contw,timeup					 
+	arg mem_tmp0_256,contw			 
+	call clear_mem_256
+	force 0,pdata
+//	store 4,mem_tmp52
+	store 4,mem_t2_256
+	jam 1,mem_tmp0_256      //y1
+	arg mem_tmp1_256,contw	//y2			 
+	call clear_mem_512      
+	arg mem_p_256,contr
+	arg mem_tmp2_256,contw		//j		 
+	call memcpy32
+	copy regA,contr
+	arg mem_tmp3_256,contw		//i		 
+	call memcpy32
+	
+//	arg mem_tmp22,regA
+//	arg mem_tmp32,regB
+//	call p_bn_bigeq_256
+//	branch assert,positive
+bn_invmod_256_2:	
+	arg mem_tmp3_256,contr
+	call bn_eq_zero_256
+	branch bn_invmod_256_0,blank
+//call ice_break    	
+//fetch 1,0x4ffe
+//increase 1,pdata
+//store 1,0x4ffe
+	arg mem_tmp3_256,regA
+	arg mem_tmp0_256,regB
+	call bn_rshifteven_256
+	arg mem_tmp2_256,regA
+	arg mem_tmp1_256,regB
+	call bn_rshifteven_256
+	
+	arg mem_tmp3_256,regA
+	arg mem_tmp2_256,regB
+	call bn_bigeq_256
+	branch bn_invmod_256_1,positive
+	arg mem_tmp2_256,regA
+	arg mem_tmp3_256,regB
+	copy regA,contw
+	call bn_sub_256
+	arg mem_tmp0_256,regA
+	arg mem_tmp1_256,regB
+	copy regB,contw
+	call bn_add_256
+	ifetch 1,regA
+	iadd regC,regC
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB
+	branch bn_invmod_256_2
+bn_invmod_256_1:
+	arg mem_tmp3_256,regA
+	arg mem_tmp2_256,regB
+	copy regA,contw
+	call bn_sub_256
+	arg mem_tmp1_256,regA
+	arg mem_tmp0_256,regB
+	copy regB,contw
+	call bn_add_256
+	ifetch 1,regA
+	iadd regC,regC
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB
+	branch bn_invmod_256_2
+bn_invmod_256_0:
+//call ice_break
+	arg mem_tmp1_256,regA
+	copy timeup,contw
+	call  bn_p256mod
+//call ice_break
+	arg mem_p_256,regA
+	copy timeup,regB
+	copy timeup,contw
+	branch bn_submod_256
+
+
+bn_mulmod_256:
+	copy contw,timeup					/* save result ptr */
+	
+	force 0,regext_index
+	
+	arg mem_tmp1_256,contw
+	call clear_mem_512
+	arg mem_regext,contw
+	call clear_mem_512
+//	jam 0,mem_regext_index
+
+//	arg mem_tmp12,contw
+	copy regA,contr
+//	force 0,regext_index
+	jam 0,mem_regext
+	setarg 0
+	call bn_load_mem
+	copy regB,contr
+	call bn_load_256
+//	force 0,regB
+//	jam 0,mem_regb
+	force 0,queue
+	arg mem_tmp1_256,contw	
+bn_mulmod_256_1:	
+//	copy regb,pdata
+//	store 1,
+	arg mem_regext,temp
+	copy queue,regb
+	lshift2 regb,pdata
+//	lshift4 pdata,pdata
+	iadd temp,regb	
+	force 0,temp
+	force 0,regC
+bn_mulmod_256_0:
+//	copy contw,pdata
+//	store 2,mem_contw
+//call ice_break
+//	copy pdata,contw
+	ifetch 4,contw					/* d[i+j] */
+	iforce regA
+//	copy regB,regext_index
+//	deposit regext
+	ifetch 4,regb
+	copy regC,regext_index
+	imul32 regext,pdata
+	iadd regA,pdata					/* uv = a[i]*b[j] + d[i+j] */
+	iadd temp,pdata					/* uv += u */
+	istore 4,contw					/* ->d[i+j] */
+	rshift32 pdata,temp				/* temp = u = uv >> 32 */
+	increase 1,regC
+	compare 8,regC,0xff
+	nbranch bn_mulmod_256_0,true
+//call ice_break
+	deposit temp
+	istore 4,contw					/* d[i + 12] = u */
+	increase -32,contw
+//	fetch 1,mem_regb
+//	copy pdata,regb
+	increase 1,queue
+	compare 8,queue,0xff
+	nbranch bn_mulmod_256_1,true
+	arg mem_tmp1_256,regA
+	copy timeup,contw
+	branch bn_p256mod
+
+bn_p256mod:
+	bpatchx patch3e_2,mem_patch3e
+	copy contw,timeup				/* save result ptr */
+	copy regA,alarm				/* temp save regA */
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	call memset0_4	
+	istore 8,contw
+	add regA,44,contr
+	call memcpy8
+	call memcpy12
+	copy regb,rega
+	call  bn_lshiftmod_256 //2S1
+	arg mem_tmp2_256,regB
+	copy alarm,rega   
+	copy timeup,contw
+	call bn_addmod_256 //T+2S1
+//call ice_break	
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	call memset0_4	
+	istore 8,contw
+	add alarm,48,contr
+	call memcpy16
+	call memset0_4	
+	copy regb,rega
+	call  bn_lshiftmod_256 //2S2
+//call ice_break	
+//	arg 0,regB
+
+	arg mem_tmp2_256,regB
+	copy timeup,rega   
+	copy regA,contw	
+	call bn_addmod_256  //+2S2
+//call ice_break	
+//	arg 0,regB
+		
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,32,contr
+	call memcpy12
+	call memset0_4	
+	istore 8,contw
+	add alarm,56,contr
+	call memcpy8
+	copy timeup,regA
+	copy regA,contw
+	call bn_addmod_256 //+S3
+//call ice_break	
+//	arg 0,regB
+
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,36,contr
+	call memcpy12
+	add alarm,52,contr	
+	call memcpy12
+	add alarm,52,contr
+	call memcpy4
+	add alarm,32,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	call bn_addmod_256 //+S4	
+//call ice_break	
+//	arg 1,regB
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,44,contr
+	call memcpy12
+	call memset0_4	
+	istore 8,contw
+	add alarm,32,contr
+	call memcpy4
+	add alarm,40,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	call bn_submod_256 //-D1	
+//call ice_break	
+//	arg 2,regB
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,48,contr
+	call memcpy8
+	call memcpy8
+	force 0,pdata
+	istore 8,contw
+	add alarm,36,contr
+	call memcpy4
+	add alarm,44,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	call bn_submod_256 //-D2	
+//call ice_break	
+//	arg 3,regB
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,52,contr
+	call memcpy12
+	add alarm,32,contr
+	call memcpy12
+	call memset0_4	
+	add alarm,48,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	call bn_submod_256 //-D3
+//call ice_break	
+//	arg 4,regB
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,56,contr
+	call memcpy8
+	call memset0_4	
+	add alarm,36,contr
+	call memcpy12
+	call memset0_4	
+	add alarm,52,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	branch  bn_submod_256 //-D4	
+
+
+bn_load_mem:
+	force 32,loopcnt
+	arg mem_regext,contw
+	iadd contw,contw
+	branch memcpy
+
+bn_load_256:
+	force 8,loopcnt
+	branch bn_load_0
+
+bn_sqrmod_256:
+	copy regA,regB
+	branch bn_mulmod_256
+
+bn_add_256:
+	force 8,loopcnt
+ 	branch bn_add+1
+
+bn_addmod_256:
+	call bn_add_256
+	copy contw,regA
+	branch bn_lshiftmod_ismod_256
+
+bn_lshiftmod_256:
+	call bn_lshift_256
+bn_lshiftmod_ismod_256:	
+	isolate1 0,regC
+	branch bn_lshiftmod_p_256,true
+	arg mem_p_256,regB
+	copy regA,regC
+	increase -32,regA
+	call bn_bigeq_256
+	nrtn positive
+	copy regC,regA
+	branch sub_p2_256
+	
+bn_lshiftmod_p_256:
+	call sub_p2_256
+//	nrtn true
+	copy regA,regC
+	increase -32,regA
+	arg mem_p_256,regB
+	call bn_bigeq_256
+	nrtn positive
+	copy regC,regA
+	branch sub_p2_256
+		
+	
+sub_p2_256:
+	increase -32,regA
+	arg mem_p_256,regB
+	copy regA,contw
+	branch bn_sub_256
+	
+
+
+	
+bn_submod_256:
+	call bn_sub_256
+//	isolate1 0,regC
+	branch  bn_submod_256_np,true
+//	copy regA,regC
+//	increase -32,regA
+	add contw,-32,regA
+	arg mem_p_256,regB
+	call bn_bigeq_256
+	nrtn positive
+	arg mem_p_256,regB
+	add contw,-32,regA
+//	copy regC,regA
+	copy rega,contw
+	branch  bn_sub_256
+bn_submod_256_np:	
+	add contw,-32,regA
+	arg mem_p_256,regB
+	copy regA,contw
+	call bn_add_256
+//	isolate1 0,regC
+	rtn true
+	add contw,-32,regA
+	arg mem_p_256,regB
+	copy regA,contw
+	branch bn_add_256	
+
+
+ 
+bn_sub_256:
+	force 8,loopcnt
+	branch bn_sub+1
+
+bn_rshift_256:
+	force 8,loopcnt
+	increase 28,regA
+	branch bn_rshift
+
+bn_lshift_256:
+	force 8,loopcnt
+	force 0,regC
+	branch bn_lshift_0
+
+bn_bigeq_256:
+	force 8,loopcnt
+	increase 28,regA
+	increase 28,regB
+	branch bn_bigeq_0
+
+
+bn_eq_zero_256:
+	ifetch 8,contr
+	nrtn blank
+	branch bn_eq_zero
+
+
+
+	
+bn_rshifteven_256:
+	copy regA,alarm
+bn_rshifteven_256_1:
+	copy alarm,regA
+	ifetch 1,regA
+	isolate1 0,pdata
+	rtn true
+	call bn_rshift_256
+	ifetch 1,regB
+	isolate0 0,pdata
+	branch bn_rshifteven_256_0,true
+	arg mem_p_256,regA
+	copy regB,contw
+	call bn_add_256
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB						 
+	increase -32,regB
+bn_rshifteven_256_0:
+	add regB,32,regA
+	force 9,loopcnt
+	call bn_rshift
+	branch bn_rshifteven_256_1		
+
+else
+sp_initialize_256:
+	rtn
+
+endif
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/ui.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/ui.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/ui.prog	(working copy)
@@ -0,0 +1,701 @@
+ui_init:
+	call lpm_disable_exen_output
+	rtn wake
+	call ui_button_init
+	call ui_timer_init
+	branch ui_led_init_global
+
+ui_dispatch:
+	call ui_led_dispatch
+	
+	branch ui_timer_check
+	
+ui_button_init:
+	fetch 1,mem_ui_button_gpio
+	rtneq UI_BUTTON_GPIO_DISABLE
+	iforce temp
+	call gpio_config_output
+	fetcht 1,mem_ui_button_gpio
+	call gpio_out_inactive
+	nop 100
+	fetcht 1,mem_ui_button_gpio
+	call gpio_config_input
+	branch ui_button_polling
+
+
+	
+ui_button_polling:
+	bpatchx patch3e_3,mem_patch3e
+	fetch 1,mem_ui_button_gpio
+	rtneq UI_BUTTON_GPIO_DISABLE
+	copy pdata,temp
+	call gpio_get_bit
+	nbranch ui_button_up,true
+	//fall through
+ui_button_down:
+	call ui_button_check_long_press
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BTN_DOWN
+	store 2,mem_ui_state_map
+	fetch 1,mem_ui_button_last_state
+	rtneq UI_BUTTON_STATE_DOWN
+	jam UI_BUTTON_STATE_DOWN,mem_ui_button_last_state
+	//Down Edge
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_ui_button_timer //start long press timer
+	call lpm_button_get_wake_lock
+	jam BT_EVT_BUTTON_DOWN,mem_fifo_temp
+	branch ui_ipc_send_event
+ui_button_up:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BTN_DOWN
+	store 2,mem_ui_state_map
+	fetch 1,mem_ui_button_last_state
+	rtneq UI_BUTTON_STATE_UP
+	jam UI_BUTTON_STATE_UP,mem_ui_button_last_state
+	//Up Edge
+	jam 0,mem_ui_button_timer//stop long press timer
+	call lpm_button_clean_wake_lock
+	jam BT_EVT_BUTTON_UP,mem_fifo_temp
+	branch ui_ipc_send_event
+
+ui_button_check_long_press:
+	fetch 1,mem_ui_button_timer
+	rtn blank
+	increase -1,pdata
+	store 1,mem_ui_button_timer
+	nrtn blank
+	//Long Press
+	jam BT_EVT_BUTTON_LONG_PRESSED,mem_fifo_temp
+	branch ui_ipc_send_event
+
+lpm_button_get_wake_lock:
+	arg wake_lock_button,queue
+	branch lpm_get_wake_lock
+	
+lpm_button_clean_wake_lock:
+	arg wake_lock_button,queue
+	branch lpm_put_wake_lock
+
+
+
+/***********************ui led function****************************/
+/******************
+led function
+
+ui_led_init_global
+ui_led_on_global
+
+ui_led_off_global
+//input:rega :struct number
+ui_led_blink_start_global
+
+//input:rega :struct number
+//contr: the point that want to set led style address
+ui_led_set_style_global
+
+******************/
+//input:rega :struct number
+//output:regb :current strutct starting pointer
+calc_curr_struct_prt:
+	fetch 2,mem_ui_led_struct_ptr
+	mul32 rega,LED_OFFSET_LENGTH,regb
+	iadd regb,regb
+	rtn
+
+
+ui_led_init_global:
+	fetch 1,mem_ui_led_struct_num
+	rtn blank
+	copy pdata,loopcnt
+	fetch 2,mem_ui_led_struct_ptr
+	copy pdata,regb
+ui_led_init_loop:
+	add regb,LED_OFFSET_LED_GPIO,regc
+	ifetcht 1,regc
+	call gpio_config_output
+	call ui_led_off_static
+	increase LED_OFFSET_LENGTH,regb
+	loop ui_led_init_loop
+	rtn
+
+	
+//input:rega :struct number
+ui_led_on_global:
+	call calc_curr_struct_prt
+	setarg UI_LED_STATE_LIGHTING
+	istore 1,regb
+	call ui_led_stop_timer
+	branch ui_led_on_static
+
+	
+//input:rega :struct number
+ui_led_blink_stop_global:
+ui_led_off_global:
+	call calc_curr_struct_prt
+	setarg UI_LED_STATE_DARKING
+	istore 1,regb
+	call ui_led_stop_timer
+	branch ui_led_off_static
+
+
+//input:rega :struct number
+ui_led_blink_start_global:
+	call calc_curr_struct_prt
+	setarg UI_LED_STATE_BLINK_START
+	istore 1,regb
+	setarg LED_INFINITE_FLASH_NUM
+	istore 1,contw
+	branch ui_led_off_static
+
+
+//input:rega :struct number
+//REGC: the point that want to set led style address
+ui_led_set_style_global:
+	call calc_curr_struct_prt
+	arg LED_OFFSET_LENGTH,loopcnt
+	copy regc,contr
+	copy regb,contw
+	branch memcpy_fast
+
+
+
+ui_led_dispatch:
+	fetch 1,mem_ui_led_struct_num
+	rtn blank
+	arg 0,rega
+ui_led_blink_polling:
+	call ui_led_change_style_by_type
+	increase 1,rega
+	fetch 1,mem_ui_led_struct_num
+	isub rega,null
+	rtn zero
+	branch ui_led_blink_polling
+
+
+ui_led_off_static:
+	add regb,LED_OFFSET_LED_GPIO,regc
+	ifetcht 1,regc
+	branch gpio_out_inactive
+
+
+ui_led_on_static:
+	add regb,LED_OFFSET_LED_GPIO,regc
+	ifetcht 1,regc
+	branch gpio_out_active
+
+
+//input:rega :struct number
+ui_led_change_style_by_type:
+	add rega,ui_led_blink,queue
+	call timer_check
+	nrtn blank			//timer out
+	
+	call calc_curr_struct_prt
+
+	ifetch 1,regb			//led type
+
+	beq UI_LED_STATE_LIGHTING,ui_led_on_static
+	beq UI_LED_STATE_DARKING,ui_led_off_static
+	beq UI_LED_STATE_BLINK_STOP,ui_led_off_static
+	beq UI_LED_STATE_BLINK_DARKING,ui_led_blink_state_darking
+ui_led_blink_state_lighting:
+	call ui_led_on_static
+	add regb,LED_OFFSET_CB_LEDON,regc
+	call push_stack
+	ifetch 2,regc
+	call callback_func
+	call pop_stack
+	setarg UI_LED_STATE_BLINK_DARKING
+	istore 1,regb
+	add regb,LED_OFFSET_ON_TIME,regc
+	ifetch 2,regc
+	branch ui_led_blink_timer_start
+	
+
+ui_led_blink_state_darking:
+	call ui_led_off_static
+	add regb,LED_OFFSET_CB_LEDOFF,regc
+	call push_stack
+	ifetch 2,regc
+	call callback_func
+	call pop_stack
+	
+	add regb,LED_OFFSET_BLINK_COUNT,regc
+	ifetch 1,regc
+	beq LED_INFINITE_FLASH_NUM,ui_led_blink_infinite
+	increase -1,pdata
+	istore 1,regc
+	branch ui_led_blink_stop_global,blank		//End of flicker
+ui_led_blink_infinite:
+	setarg UI_LED_STATE_BLINK_LIGHTING
+	istore 1,regb
+	add regb,LED_OFFSET_OFF_TIME,regc
+	ifetch 2,regc
+ui_led_blink_timer_start:
+	add rega,ui_led_blink,queue
+	branch timer_init
+
+ui_led_stop_timer:
+	setarg 0
+	branch ui_led_blink_timer_start
+
+/***********************ui led function ending****************************/
+
+
+
+ui_timer_timeout:
+	setarg 0x1000
+	lshift16 pdata,pdata
+	iadd regb,regb
+	rtn
+	
+ui_timer_check:
+	bpatchx patch3e_4,mem_patch3e
+	arg 0,rega
+	fetcht 4,mem_ui_timer_last_btclk
+	copy clkn_bt,regb
+	copy regb,pdata
+	isub temp,null
+	ncall ui_timer_timeout,positive
+	//call ice_break
+ui_timer_check_loop:
+	copy regb,pdata
+	increase 160,temp    //320btclk = 100ms
+	increase 160,temp
+	isub temp,null
+	nbranch ui_timer_check_end,positive
+	increase 1,rega   //increase 1 every 100ms count
+	and rega,0x0f,pdata
+	nbranch ui_timer_check_loop,blank
+	arg 0,rega  //reset timer if it's longer than 1.5s between 2 checks
+	call ui_timer_check_send_evt
+ui_timer_init:
+	copy clkn_bt,pdata
+	store 4,mem_ui_timer_last_btclk
+	rtn
+ui_timer_check_end:
+	bpatchx patch3e_5,mem_patch3e
+	copy rega,pdata
+	rtn blank
+	increase -160,temp    //320btclk = 100ms
+	increase -160,temp
+	set0 28,temp
+	storet 4,mem_ui_timer_last_btclk
+ui_timer_check_send_evt:
+	branch app_evt_timer
+
+	
+
+//**********************************************************//
+//************UI Inter-Processor Communication*******//
+//**********************************************************//
+ui_ipc_get_lock:
+	jam 1,mem_ipc_lock_bt
+ui_ipc_get_lock_wait:
+	fetch 1,mem_ipc_lock_c51
+	nbranch ui_ipc_get_lock_wait,blank
+	rtn
+	
+ui_ipc_put_lock:
+	jam 0,mem_ipc_lock_bt
+	rtn
+	
+
+	
+ui_ipc_send_event:
+	bpatchx patch3e_6,mem_patch3e
+	call ui_ipc_get_lock
+	copy rega,pdata
+	store 4,mem_ipc_rega_temp
+	arg mem_ipc_fifo_bt2c51,rega
+	call fifo_in
+	fetch 4,mem_ipc_rega_temp
+	copy pdata,rega
+	branch ui_ipc_put_lock
+
+ui_ipc_send_cmd:
+	bpatchx patch3e_7,mem_patch3e
+	call ui_ipc_get_lock
+	copy rega,pdata
+	store 4,mem_ipc_rega_temp	
+	arg mem_ipc_fifo_c512bt,rega
+	call fifo_in
+	fetch 4,mem_ipc_rega_temp
+	copy pdata,rega	
+	branch ui_ipc_put_lock
+
+ui_ipc_clean_all_fifo:
+	setarg 0
+	store UTIL_FIFO_LEN,mem_ipc_fifo_c512bt
+	store UTIL_FIFO_LEN,mem_ipc_fifo_bt2c51
+	rtn
+	
+check_51cmd:
+	bpatchx patch3f_0,mem_patch3f
+	fetch 1,mem_hci_cmd
+	nrtn blank
+	arg mem_ipc_fifo_c512bt,rega
+	call fifo_is_empty
+	rtn blank
+	jam IPC_CONTINUE_PROCESS,mem_ipc_skip_continue_proc
+	call check_51cmd_once
+	fetch 1,mem_ipc_skip_continue_proc
+	branch check_51cmd,blank
+	rtn
+
+check_51cmd_once:
+	call ui_ipc_get_lock
+	arg mem_ipc_fifo_c512bt,rega
+	call fifo_out
+	copy pdata,temp
+	call ui_ipc_put_lock
+	bpatchx patch3f_1,mem_patch3f
+	copy temp,pdata
+	rtn blank
+ 	beq BT_CMD_START_DISCOVERY,check_51cmd_start_discovery
+  	beq BT_CMD_STOP_DISCOVERY,check_51cmd_stop_discovery
+  	beq BT_CMD_RECONNECT,check_51cmd_reconnect
+  	beq BT_CMD_ENTER_SNIFF_SUBRATING,check_51cmd_enter_sniff_subrating
+  	beq BT_CMD_EXIT_SNIFF_SUBRATING,check_51cmd_exit_sniff_subrating
+  	beq BT_CMD_SNIFF_TEST,check_51cmd_sniff_test
+	beq BT_CMD_START_INQUIRY,check_51cmd_inq
+	beq BT_CMD_STOP_INQUIRY,check_51cmd_stop_inq
+	beq BT_CMD_START_ADV,check_51cmd_adv
+	beq BT_CMD_STOP_ADV,check_51cmd_stop_adv
+	beq BT_CMD_START_DIRECT_ADV,check_51cmd_direct_adv
+	beq BT_CMD_STOP_DIRECT_ADV,check_51cmd_stop_direct_adv
+	beq BT_CMD_LED_OFF,check_51cmd_led_off
+	beq BT_CMD_LED_ON,check_51cmd_led_on
+	beq BT_CMD_LED_BLINK,check_51cmd_led_start_blink
+	beq BT_CMD_LE_START_CONN,check_51cmd_le_start_con
+	beq BT_CMD_LE_START_SCAN,check_51cmd_start_scan
+	beq BT_CMD_LE_STOP_SCAN,check_51cmd_stop_scan
+	beq BT_CMD_ENTER_HIBERNATE,check_51cmd_hibernate
+	beq BT_CMD_LE_SMP_SECURITY_REQUEST,check_51cmd_le_smp_sec_req
+	beq BT_CMD_BB_RECONN_CANCEL,check_51cmd_bb_reconn_cancel
+	//context related, process in context
+	store 1,mem_fifo_temp
+	bpatchx patch3f_2,mem_patch3f
+	call lmo_fifo_check
+	nbranch check_51cmd_restore,blank  //process this cmd next time while lmo fifo is full
+check_51cmd_once_continue:
+	fetch 1,mem_fifo_temp
+	bmark0 mark_context,check_51cmd_check_idle
+	beq BT_CMD_DISCONNECT,check_51cmd_disconnect
+  	beq BT_CMD_ENTER_SNIFF,cmd_in_sniff
+  	beq BT_CMD_EXIT_SNIFF,cmd_exit_sniff
+  	beq BT_CMD_SET_PIN_CODE,check_51cmd_pincode
+	beq BT_CMD_LE_DISCONNECT,check_51cmd_le_disconnect
+	beq BT_CMD_LE_UPDATE_CONN,check_51cmd_ble_update_connect_param
+	beq BT_CMD_ROLE_SWITCH,check_51cmd_role_switch
+	beq BT_CMD_STORE_RECONN_INFO_LE,eeprom_store_le_reconn_info
+	beq BT_CMD_STORE_RECONN_INFO_BT,eeprom_store_bd_reconn_info
+	beq BT_CMD_DHKEY_NOT_ACCEPT,check_51cmd_dhkey_not_accept
+	beq BT_CMD_STORE_RECONN_INFO,check_51cmd_store_reconn_info
+	rtn
+
+check_51cmd_check_idle:
+	store 1,mem_fifo_temp
+  	call context_check_idle
+	branch check_51cmd_restore,zero
+	call context_search_plap
+	nrtn zero
+check_51cmd_restore:
+	jam IPC_SKIP_CONTINUE_PROCESS,mem_ipc_skip_continue_proc
+	branch ui_ipc_send_cmd
+  
+ /******************** 51COMMAND*********************/
+
+//command opcode 0x01	
+check_51cmd_start_discovery:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_DISCOVERY
+	store 2,mem_ui_state_map
+	jam 3,mem_scan_mode
+	rtn
+
+
+//command opcode 0x02	
+check_51cmd_stop_discovery:
+	jam 0,mem_hid_handshake_timer_count
+	jam 0,mem_scan_mode
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BT_DISCOVERY
+	store 2,mem_ui_state_map
+	rtn	
+
+
+//command opcode 0x03	
+check_51cmd_reconnect:	
+	jam hci_cmd_create_conn,mem_hci_cmd
+	rtn	
+
+
+//command opcode 0x04
+check_51cmd_disconnect:
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam OTHER_END_TERMINATED,mem_disconn_reason_send
+	rtn
+
+	
+//command opcode 0x07
+check_51cmd_enter_sniff_subrating:
+	rtn
+
+
+//command opcode 0x08
+check_51cmd_exit_sniff_subrating:
+	rtn	
+
+
+//command opcode 0x09
+check_51cmd_sniff_test:
+	rtn	
+
+
+//command opcode 0x10
+check_51cmd_pincode:
+	jam pincode_state_pincode_ready,mem_pincode_state
+	branch cmd_pair
+
+
+//command opcode 0x11
+check_51cmd_inq:
+	rtn
+
+
+//command opcode 0x12
+check_51cmd_stop_inq:
+	rtn
+
+
+//command opcode 0x13
+check_51cmd_adv:
+	jam ON,mem_le_adv_enable
+	jam ADV_IND,mem_le_adv_type
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BLE_ADV,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+
+//command opcode 0x14
+check_51cmd_stop_adv:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BLE_ADV,pdata
+	store 2,mem_ui_state_map
+	jam OFF,mem_le_adv_enable
+	rtn
+
+
+//command opcode 0x15
+check_51cmd_direct_adv:
+	jam ON,mem_le_adv_enable
+	jam ADV_DIRECT_IND,mem_le_adv_type
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BLE_ADV,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+
+//command opcode 0x16
+check_51cmd_stop_direct_adv:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BLE_ADV,pdata
+	store 2,mem_ui_state_map
+	jam OFF,mem_le_adv_enable
+	rtn
+
+
+//command opcode 0x17
+check_51cmd_le_disconnect:
+	setarg 20 // 100ms
+	store 2,mem_le_superto
+	store 2,mem_le_init_superto
+	branch le_send_terminate_ind_user_terminated
+
+
+//command opcode 0x18
+check_51cmd_ble_update_connect_param:
+	branch le_l2cap_tx_update_req
+
+
+//command opcode 19
+check_51cmd_led_off:
+	arg 0,rega
+	branch ui_led_off_global
+
+
+//command opcode 20
+check_51cmd_led_on:
+	arg 0,rega
+	branch ui_led_on_global
+
+
+//command opcode 21
+check_51cmd_led_start_blink:
+	arg 0,rega
+	branch ui_led_blink_start_global
+
+
+//command opcode 0x22
+check_51cmd_le_start_con:
+	jam ON,mem_le_scan_enable
+	jam hci_cmd_le_create_conn,mem_hci_cmd
+//	fetch 6,mem_app_peer_addr
+//	store 6,mem_le_conn_peer_addr
+	rtn
+
+
+//command opcode 0x23
+check_51cmd_start_scan:
+	jam ON,mem_le_scan_enable
+	rtn
+
+
+//command opcode 0x24
+check_51cmd_stop_scan:
+	jam OFF,mem_le_scan_enable
+	jam 0,mem_hci_cmd
+	rtn
+
+
+//command opcode 0x25
+check_51cmd_hibernate:
+	fetch 2,mem_cb_before_hibernate
+	call callback_func
+	fetch 1,mem_ui_button_gpio
+	beq UI_BUTTON_GPIO_DISABLE,check_51cmd_hibernate_btn_disabled
+	copy pdata,temp
+	call gpio_config_input
+check_51cmd_hibernate_btn_disabled:
+	call ui_ipc_clean_all_fifo
+	branch lpm_hibernate	
+
+
+//command opcode 0x27
+check_51cmd_le_smp_sec_req:
+	branch le_send_smp_security_request
+
+
+//command opcode 0x29
+check_51cmd_role_switch:
+  	jam LMP_SLOT_OFFSET,mem_lmo_opcode2
+	set1 mark_switch_initiated,mark
+	nrtn master
+	jam SWITCH_FLAG_INIT,mem_switch_flag
+	jam LMP_SWITCH_REQ ,mem_lmo_opcode2
+	fetch 1,mem_connection_options
+	set0 CONNECTION_SWITCH,pdata
+	store 1,mem_connection_options
+	rtn
+
+
+//command opcode 0x30
+check_51cmd_bb_reconn_cancel:
+	force page_length_timer,queue
+	branch timer_stop
+
+
+//command opcode 0x33
+check_51cmd_dhkey_not_accept:
+	call tid_set_reply
+	jam LMP_DHKey_Check,mem_lmi_opcode2
+	branch parse_lmp_dhkey_check_reject	
+
+
+ui_check_paring_button:
+	fetch 1,mem_ui_state_map
+	rtnbit0 UI_STATE_BTN_DOWN
+	rtnbit0 UI_STATE_BT_RECONNECT
+	branch check_51cmd_bb_reconn_cancel
+
+
+
+///////////queue function////////////
+queue_init:
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_CURR_NUM,contw
+	setarg 0
+	istore 3,contw
+	rtn
+	
+//input:rega:the address of the data to which you want to input queue
+//output:if user is disable,mean queue no have space
+queue_push:
+	call disable_user
+	call queue_full
+	rtn blank
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_CURR_NUM,regb
+	ifetcht 1,regb
+	increase 1,temp
+	istoret 1,regb	//number add 
+	
+	ifetcht 1,pdata	//temp:each length
+	copy temp,loopcnt
+	add pdata,QUEUE_OFFSET_WRITE_PTR,regb
+	ifetch 1,regb
+	imul32 temp,pdata	//offset
+	iadd contr,contw
+	copy rega,contr
+calc_queue_next_ptr:
+	call memcpy
+	call queue_get_size
+	pincrease -1
+	ifetcht 1,regb
+	increase 1,temp
+	iand temp,temp
+	istoret 1,regb
+	branch enable_user
+
+
+//input:rega:the address of the data to which you want to output queue
+//output:if user is disable,mean queue no have data
+queue_pop:
+	call disable_user
+	call queue_empty
+	rtn blank
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_CURR_NUM,regb
+	ifetcht 1,regb
+	increase -1,temp
+	istoret 1,regb
+	ifetcht 1,pdata		//each size
+	copy temp,loopcnt
+	add pdata,QUEUE_OFFSET_READ_PTR,regb
+	ifetch 1,regb
+	imul32 temp,pdata	//offset
+	iadd contr,contr
+	increase 1,contr
+	copy rega,contw
+	branch calc_queue_next_ptr
+
+
+//output:if blank is 1,mean queue is empty
+queue_empty:
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_CURR_NUM,contr
+	ifetch 1,contr
+	rtn
+
+//output:if blank is 1,mean queue is full
+queue_full:
+	call queue_get_size
+	ifetcht 1,contr
+	isub temp,pdata
+	rtn
+
+//output:pdata is queue size
+queue_get_size:
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_LENGTH,contr
+	ifetch 1,contr
+	rtn
+
+///////////queue function end////////////
+
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/utility.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/utility.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/program/utility.prog	(working copy)
@@ -0,0 +1,614 @@
+
+right_shift_n: //rshiftN pdata,pdata
+	sub loopcnt,0,null
+	rtn zero
+right_shift_n_loop: 
+	rshift pdata,pdata
+	loop right_shift_n_loop
+	rtn
+
+/* lshift. 0:1 byte; 1:2byte; 2:4byte; 3:8byte; 4:16byte*/
+left_shift_n:
+	force 1,pdata
+	sub loopcnt,0,null
+	rtn zero
+left_shift_n_loop:
+	lshift pdata,pdata
+	loop left_shift_n_loop
+	rtn
+push_stack:
+	deposit contw
+	store 2, mem_contw
+	storet 8,mem_temp
+	deposit timeup
+	store 4,mem_timeup
+	call push_stack_rega_b_c
+	deposit contr
+	store 2, mem_contr
+	rtn
+
+push_stack_rega_b_c:
+	deposit rega
+	store 4, mem_rega
+	deposit regb
+	store 4, mem_regb
+	deposit regc
+	store 3, mem_regc
+	rtn
+
+pop_stack:
+	fetcht 8,mem_temp
+	fetch 4,mem_timeup
+	iforce timeup
+	call pop_stack_rega_b_c
+	fetch 2, mem_contw
+	iforce contw
+	fetch 2, mem_contr
+	iforce contr
+	rtn
+
+pop_stack_rega_b_c:
+	fetch 4, mem_rega
+	iforce rega
+	fetch 4, mem_regb
+	iforce regb
+	fetch 3,mem_regc
+	iforce regc
+	rtn
+
+get_contw:
+	fetch 2,mem_contw
+	copy pdata,contw
+	rtn
+get_contr:
+	fetch 2,mem_contr
+	copy pdata,contr
+	rtn
+store_contw:
+	copy contw,pdata
+	store 2,mem_contw
+	rtn
+store_contr:
+	copy contr,pdata
+	store 2,mem_contr
+	rtn	
+	
+
+//
+save_cont_pointers:
+	copy contw,pdata
+	store 2,mem_hold_contw
+	copy contr,pdata
+	store 2,mem_hold_contr
+	rtn
+load_cont_pointers:
+	fetch 2,mem_hold_contw
+	copy pdata,contw
+	fetch 2,mem_hold_contr
+	copy pdata,contr
+	rtn
+
+memcpy96:
+	call memcpy32
+memcpy64:
+	call memcpy32
+	branch memcpy32
+memcpy12:
+	call memcpy8
+memcpy4:
+	ifetch 4,contr
+	istore 4,contw
+	rtn	
+memcpy8:
+	ifetch 8,contr
+	istore 8,contw
+	rtn	
+
+memcpy48:
+	call memcpy16
+memcpy32:
+	call memcpy8
+memcpy24:
+	call memcpy8
+memcpy16:
+	call memcpy8
+	branch memcpy8
+
+
+
+delay_10ms:
+	arg 10,loopcnt
+delay_ms_wait:
+	nop 12000
+	loop delay_ms_wait
+	rtn
+
+bn_zero:
+	force 3,loopcnt
+memset0:
+	force 0,pdata
+memset8:
+	istore   8,contw
+	loop   memset8
+	rtn
+
+memset0_8:
+	force 0,pdata
+	istore 8,contw
+	rtn
+memset0_4:
+	force 0,pdata
+	istore 4,contw
+	rtn	
+	
+clear_mem_256:
+	force 4,loopcnt
+	branch memset0 
+clear_mem_512:
+	force 8,loopcnt
+	branch memset0 
+
+clear_mem:
+	deposit loopcnt
+	rtn blank
+	setarg 0
+clear_mem_loop:
+	istore 1,contw
+	loop clear_mem_loop
+	rtn
+	
+
+clear_temp_block:
+	arg 32,loopcnt
+	arg mem_temp_block0,contw
+	branch clear_mem
+	
+xor_loop:
+	ifetch   4,regc
+	ifetcht 4,rega
+	ixor     temp,pdata
+	istore   4,contw	
+	increase 4,rega
+	increase 4,regc
+	loop  xor_loop
+	rtn
+	
+// 11 22 -> 22 11; 11 22 33 -> 33 22 11 
+// rega:data addr ;loopnct:length
+inverse_data:
+	bpatchx patch3f_3,mem_patch3f
+	copy loopcnt,pdata
+	sub pdata,1,null
+	rtn positive
+	iadd rega,regb	
+	increase -1,regb
+	rshift loopcnt,loopcnt
+inverse_loop:
+	ifetcht 1,rega
+	ifetch 1,regb
+	istore 1,rega
+	istoret 1,regb
+	increase -1,regb
+	increase 1,rega
+	loop inverse_loop
+	rtn
+
+
+memcpy_fast:
+	deposit loopcnt
+	rtn blank
+memcpy_fast_loop:
+	increase -8,loopcnt
+	call memcpy8,positive
+	rtn zero
+	branch memcpy_fast_loop,positive
+	increase 8,loopcnt
+memcpy_fast_loop_four:
+	increase -4,loopcnt
+	call memcpy4,positive
+	rtn zero
+	branch memcpy_fast_loop_four,positive
+	increase 4,loopcnt
+	branch memcpy
+ 
+memcpy:
+	deposit loopcnt
+	rtn blank
+memcpy_loop:
+	ifetch 1,contr
+	istore 1,contw
+	loop memcpy_loop
+	rtn
+
+timer_stop:
+	setarg 0
+timer_init:
+	rshift clkn_bt,temp
+	storet 4,mem_last_clkn
+	arg mem_timers,contw
+	iforce temp
+	lshift queue,pdata
+	iadd contw,contw
+	istoret 2,contw
+	bpatchx patch3f_4,mem_patch3f
+	rtn
+
+timer_check_timeout:
+	arg 0x800,timeup
+	lshift16 timeup,timeup
+	iadd timeup,pdata
+	rtn
+
+
+timer_reinit:
+	arg 0,queue
+timer_check:
+	bpatchx patch3f_5,mem_patch3f
+	fetcht 4,mem_last_clkn
+	rshift clkn_bt,pdata
+	store 4,mem_last_clkn	
+	isub temp,null
+	ncall timer_check_timeout,positive	
+	isub temp,timeup
+	copy timeup,temp
+	arg mem_timers,contr
+	copy contr,contw
+	arg 16,loopcnt
+timer_loop:
+	ifetch 2,contr
+	isub temp,pdata
+	branch timer_counting,positive
+	force 0,pdata
+timer_counting:
+	istore 2,contw
+	loop timer_loop	
+	arg mem_timers,contr
+	lshift queue,pdata
+	iadd contr,contr
+	ifetch 2,contr
+	rtn
+
+
+
+	/* pdata 28+16 bit add temp 26+16 bit, result in temp */
+clk_add:
+	iadd temp,temp
+	copy temp, loopcnt
+	setarg 3750
+	isub loopcnt,pdata
+	rtn positive
+	sub pdata,0,pdata
+	rshift16 temp,temp
+	increase 1,temp
+	lshift16 temp,temp
+	ior temp,temp
+	rtn
+
+clk_diff_rt:
+	call clk_diff
+	branch clk2rt
+
+/* pdata -temp -> pdata, all are 28+16 bits, set user if negative */
+clk_diff:
+	disable user
+	isub temp,pdata
+	branch clk_diff_pos,positive
+	enable user
+	sub pdata,0,pdata
+clk_diff_pos:
+	rtnbit0 15
+	arg -61786,temp
+	iadd temp,pdata
+	set0 64,pdata
+	rtn
+
+clk2rt:
+	iforce contr
+	rshift16 pdata,pdata
+	arg 3750,temp
+	imul32 temp,pdata
+	iadd contr,pdata
+	rtn
+
+	/* pdata = clks in, temp = lpo out */
+clk2lpo:
+	lshift8 pdata,pdata
+	lshift4 pdata,pdata
+	fetcht 3,mem_clks_per_lpo
+	idiv temp
+	call wait_div_end
+	quotient temp
+	rtn
+
+	/* rt clk -> bt+rt clk */
+clk2bt:
+	arg 3750,temp
+	idiv temp
+	call wait_div_end
+	quotient pdata
+	lshift16 pdata,pdata
+	remainder temp
+	ior temp,temp
+	rtn
+
+
+
+//input:contru 
+//output:temp
+//used register: temp regc
+string2dec_from_uart:
+	arg 0,temp
+string2dec_from_uart_done:
+         copy temp,regc
+	ifetch 1,contru
+	call uchar2dialog	
+	copy regc,temp
+	call swap
+	arg 10,regb
+	imul32 regb,pdata
+	iadd temp,pdata
+	copy pdata,temp
+	loop string2dec_from_uart_done
+	rtn
+	
+
+
+uchar2dialog:
+	arg 0x3a,temp
+	isub temp,null
+	nbranch uchar2dialog_number,positive
+	arg 0x61,temp
+	isub temp,null
+	branch uchar2dialog_a2f,positive
+	arg 0x37,temp
+	isub temp,pdata
+	rtn
+uchar2dialog_number:
+	arg 0x30,temp
+	isub temp,pdata
+	rtn
+uchar2dialog_a2f:
+	arg 0x57,temp
+	isub temp,pdata
+	rtn
+
+pn9:
+	copy temp,alarm
+	setarg 0x1ff
+	force 0,regb
+pn9_loop:	
+	rshift3 pdata,rega
+	rshift rega,rega
+	ixor rega,rega
+	isolate1 0,rega
+	setflag true,9,pdata
+	rshift temp,temp
+	isolate1 0,pdata
+	setflag true,7,temp
+	rshift pdata,pdata
+	increase 1,regb
+	compare 0,regb,0x7
+	nbranch pn9_loop,true
+	istoret 1,contw
+	loop pn9_loop
+	copy alarm,temp
+	rtn
+
+
+wait_div_end:	
+	rtn modone
+	branch wait_div_end
+
+
+
+//input:
+//	count:loopcnt str1:rega str2:regb
+//output:
+//	same:set falg true ,diff set falg false
+// using:
+//	reg:temp null flag:zero
+compare_loop:
+string_compare:
+	ifetch 1,rega
+	ifetcht 1,regb
+	isub temp,null
+	nrtn zero
+	increase 1,rega
+	increase 1,regb
+	loop string_compare
+	force 0,null
+	rtn
+
+	/* pdata = temp if pdata > temp */
+ceiling:
+	isub temp,null
+	nrtn positive
+	deposit temp
+	rtn
+	
+swap:
+	iadd temp,pdata
+	isub temp,temp
+	isub temp,pdata
+	rtn
+
+clean_mem:
+	arg 0x200,loopcnt
+	arg 0x4000,contw
+	branch memset0				// clear xram at boot
+
+	//cb function ptr in pdata
+callback_func:
+	rtn blank
+	copy pdata,pc	//rtn through cb functon.
+	//branch assert
+
+wait_uarttx:
+	hfetch 2,core_uart_txitems
+	nbranch wait_uarttx,blank
+	rtn
+
+ice_break:
+	jam 0x1,core_ice_ctrl
+	rtn
+
+ice_setbp:
+	hstore 2,core_ice_break0
+	hfetch 1,core_ice_ctrl
+	set1 4,pdata
+	hstore 1,core_ice_ctrl
+	rtn
+ice_setbp2:
+	hstore 2,core_ice_break1
+	hfetch 1,core_ice_ctrl
+	set1 6,pdata
+	hstore 1,core_ice_ctrl
+	rtn
+	
+ice_set_write_bp:
+	hstore 2,core_ice_break0
+	jam 0x30,core_ice_ctrl
+	rtn
+	
+
+
+test_enable_white:
+	hfetch 1,core_config
+	set0 whiteoff_bit,pdata
+	hstore 1,core_config			/* whitening on */
+	rtn
+
+check_uart_tx_buff:
+	hfetch 2,core_uart_txitems
+	arg UART_AIR_CONTROL_THRESHOLD,temp
+pdata_sub_temp:
+	isub temp,null
+	rtn
+
+	//fuction fifo_in
+	//rega pointer to fifo memory , *(rega+len) is the end of fifo
+	//mem_fifo_temp data into fifo
+	//assert if fifo was full
+fifo_in:
+	bpatchx patch3f_6,mem_patch3f
+	ifetcht UTIL_FIFO_LEN,rega
+	and temp,0xff,pdata
+	nbranch fifo_in_push,blank
+	rshift8 temp,pdata
+	istore UTIL_FIFO_LEN,rega
+fifo_in_push:
+	increase UTIL_FIFO_LEN+UTIL_FIFO_OFFSET,rega
+	ifetch 1,rega
+	nbranch assert,blank //fifo full
+	fetch 1,mem_fifo_temp
+	istore 1,rega
+	rtn
+	
+	//fuction fifo_out
+	//rega pointer to fifo memory
+	//pdata  data from fifo, blank mains fifo empty
+fifo_out:
+	bpatchx patch3f_7,mem_patch3f
+	arg UTIL_FIFO_LEN,loopcnt
+	ifetch UTIL_FIFO_LEN,rega
+	rtn blank
+fifo_out_loop:
+	ifetch 1,rega
+	nbranch fifo_out_end,blank
+	increase 1,rega
+	loop fifo_out_loop
+	branch assert
+fifo_out_end:
+	arg 0,temp
+	istoret 1,rega
+	rtn
+
+	//fuction fifo_is_empty
+	//rega pointer to fifo memory
+	//blank--- fifo is empty
+fifo_is_empty:
+	ifetch UTIL_FIFO_LEN,rega
+	rtn
+
+	//fuction fifo_is_full
+	//rega pointer to fifo memory
+	//blank--- fifo is NOT full
+fifo_is_full:
+	ifetch 1,rega
+	rtn
+	//rega pointer to fifo memory
+	//blank--- fifo is NOT near full
+fifo_is_near_full:
+	ifetch 2,rega
+	rtn
+
+	//rega pointer to fifo memory
+	//count output via pdata
+fifo_content_count:
+	arg 0,temp
+fifo_content_count_loop:
+	fetch 1,contr
+	loop fifo_content_count_loop,blank
+	increase 1,temp
+	loop fifo_content_count_loop
+	copy temp,pdata
+	rtn
+	
+not_greater_than:
+	isub temp,null
+	nrtn positive
+	copy temp,pdata
+	rtn
+
+
+disable_positive:
+	force -1,null
+	rtn
+enable_positive:
+disable_zero:
+	force 1,null
+	rtn
+enable_zero:
+	force 0,null
+	rtn
+
+enable_user:
+	enable user
+	rtn
+	
+disable_user:
+	disable user
+	rtn
+	
+enable_user2:
+	enable user2
+	rtn
+	
+disable_user2:
+	disable user2
+	rtn
+
+disable_blank:
+	setarg 1
+	rtn
+
+enable_blank:
+	setarg 0
+	rtn
+
+
+reverse_byte:
+	copy loopcnt,pdata
+	rtn blank
+	copy contr,pdata
+	iadd loopcnt,pdata
+	increase -1,pdata
+	copy pdata,contr	
+reverse_loop:
+	ifetch 1,contr
+	increase -2,contr
+	istore 1,contw
+	loop reverse_loop
+	rtn
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/109x.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/109x.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/109x.dat	(working copy)
@@ -0,0 +1,37 @@
+
+mem_lpm_config:8f 1b ce	#4khz
+mem_lpm_xtalcnt:00 0a 0b ef 07
+mem_lpm_hibernate_switch:00
+mem_gpio_wakeup_low:00 00 00 00 00 00 00 00
+#mem_fcomp_mul:02
+#mem_fcomp_div:24
+mem_iscan_window:12 00
+mem_iscan_interval:00 02
+mem_pscan_window:12 00
+mem_pscan_interval:00 02
+mem_inq_window:20 00
+mem_page_window:20 00
+mem_page_to:00 40
+mem_rx_window_init:80 04
+mem_rx_window_sniff:00 08
+
+mem_seqi:00
+
+#write to null
+mem_24g_head_ptr:00 84
+
+
+mem_tx_power:00#0dbm
+mem_rf_init_data_new:
+# tx power
+4b ba
+55 d0
+56 e0
+57 88
+58 6c
+59 10
+ff
+mem_rf_init_ptr:mem_rf_init_data_new
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/AntiLost.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/AntiLost.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/AntiLost.dat	(working copy)
@@ -0,0 +1,174 @@
+mem_antl_queue_width:0a 08
+mem_queue_ptr:mem_antl_queue_width
+mem_antl_lpm_interval:14 00
+mem_antl_adv_interval:10 00
+mem_antl_slow_adv_lpm_interval:a0 00
+mem_antl_slow_adv_adv_interval:3b 06
+
+
+#mem_le_notify_handle:0a 00
+mem_device_option:0f
+mem_le_adv_channel_map:07 
+#mem_ssp_enable:01
+
+mem_ui_button_gpio:08
+mem_ui_button_timeout:1e
+mem_ui_button_last_state:01
+
+mem_antl_fast_adv_timeout:64 00
+mem_antl_le_sleep_timeout:b0 04
+
+mem_power_param_ptr:mem_antl_power_param
+mem_antl_power_off_timeout:0f 0c
+mem_ui_led_struct_num:02
+mem_ui_led_struct_ptr:mem_antl_led_style
+mem_antl_led_gpio:1b
+mem_antl_buzzer_gpio:83
+
+
+mem_antl_fast_adv_led_style:01 ff 1b 32 00 f0 00
+mem_antl_slow_adv_led_style:01 ff 1b 32 00 4e 0c
+mem_antl_power_starting_led_style:01 03 1b 96 00 96 00
+mem_antl_power_starting_buzzer_style:01 03 83 96 00 96 00
+mem_antl_power_off_led_style:01 01 1b 80 0c 00 00
+mem_antl_power_off_buzzer_style:01 01 83 80 0c 00 00
+mem_antl_alert_led_stlye:01 ff 1b 32 00 0e 06
+mem_antl_alert_buzzer_stlye:01 ff 83 32 00 0e 06
+mem_antl_key_led_style:01 01             1b 32 00 32 00
+mem_antl_key_buzzer_style:01 01              83 32 00 32 00
+
+
+
+#mem_le_pres:02 03 00 01 10 02 01
+mem_le_pres_auth:01
+mem_le_pres:02 03 00 05 10 02 03
+mem_le_transmit_window:50
+mem_rx_window_sniff_inc:00 40
+mem_le_local_mtu:17
+
+
+mem_le_lap:0a 89 73 70 b4 c1
+mem_le_name_len:
+#with 5 spaces
+'TrackerPA     
+
+mem_le_adv_data_len:1e
+mem_le_adv_data:
+#appearance
+03 19 c1 03
+#flags
+02 01 05
+#tx power level
+02 0a 00
+#complete uuid
+03 03 f0 ff
+#complete local name
+#with 5 spaces
+'\09TrackerPA     
+mem_le_scan_data_len:10
+mem_le_scan_data:
+#with 5 spaces
+'\09TrackerPA     
+
+#mem_adv_lap_ptr:mem_le_adv_data+2
+
+
+mem_keyscan_ptr:mem_antl_key_num
+mem_lpm_mode:01
+mem_lpm_overhead:06
+mem_lpm_mult_timeout:02
+
+mem_interval_increment:04 00
+mem_antl_le_interval_min:
+18 00 #min interval
+20 00 #max interval
+10 00 #latency
+58 02 #timeout
+mem_antl_le_unnormal_interval_min:
+10 01 #min interval
+90 01 #max interval
+00 00 #latency
+58 02 #timeout
+
+mem_antl_led_num:01
+mem_antl_led_gpio_map:
+1b
+ff
+ff
+ff
+
+
+mem_antl_key_num:01
+mem_antl_key_conf0:
+#0
+08
+#1
+ff
+#2
+ff
+#3
+ff
+mem_antl_key0_press:
+06
+0a 00
+5a 6b #header
+00    #opcode(from 01 to fe) #6th byte
+00 00 #data length
+00    #sum
+#key0release for doubleclick
+mem_antl_key0_release:
+07 #0th byte
+0a 00
+5a 6b #header
+00    #opcode(from 01 to fe)for doubleclick #5th byte
+00 01 #data length 0x0001 (not 0x0100,byteswaped after loading)
+00   #8th byte
+00	 #sum
+mem_adc_config_flag:00
+mem_adc_timeout:b0 04
+mem_battery_calculate_set:
+2c 01
+fa 00
+00 00
+00 00
+
+#mem_empty_count:03
+mem_alarm_config:01
+mem_alarm_config_notfy_cnt:01
+
+#beep
+mem_buzzer_pwm_conf:
+03	#pwm gpio
+04	#pwm channel
+a0	#three  byte frequency
+0f
+00
+32 #duty cycle (by percent %)
+
+mem_ui_le_uuid_table:mem_AntiLost_le_att_list
+#attribute list: handle 2bytes  uuid 2bytes  length 1bytes  attribute Nbytes
+mem_AntiLost_le_att_list:
+#Primary service GAP ------
+01 00  02 00 28 02 00 18
+#Device name
+02 00 02 03 28 01 0a
+03 00 02 00 2a 04 31 32 33 34
+#Appearance
+04 00 02 03 28 01 02
+05 00 02 01 2a 02 c8 00 #3c2=hid mouse
+#Peripheral Preferred Connection Parameters
+06 00 02 03 28 01 02
+07 00 02 04 2a 08 08 00 20 00 10 00 58 02 # interval 6ms, latency 100, timeout 600
+#Primary service yichip transmit ------
+08 00 02 00 28 02 f0 ff
+
+09 00 02 03 28 01 12
+0a 00 02 f1 ff 08 00 00 00 00 00 00 00 00
+0b 00 02 02 29 02 00 00
+
+0c 00 02 03 28 01 08
+0d 00 02 f2 ff 08 00 00 00 00 00 00 00 00
+#End of Attribute list
+00 00
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/DM_module.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/DM_module.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/DM_module.dat	(working copy)
@@ -0,0 +1,435 @@
+
+mem_device_option:0a
+mem_ui_profile_supported:40
+mem_app_connection_options:13
+
+mem_features:
+ff
+ff
+8f
+f8      #fe--EDR  F8--BR
+9b      #AFHclose 83
+9d
+59
+83
+
+##############ADC CONFIG##############
+mem_module_read_vdd_count:01
+mem_module_read_vdd_flag:01
+#####################################
+
+##############NVRAM CONFIG##############
+mem_nv_data_ptr:mem_module_nv_data
+mem_nv_data_number:05
+#####################################
+
+##############SPP CONFIG##############
+mem_credit_flag:00
+mem_rfcomm_max_frame_size:7f 00
+mem_rfcomm_credit_init_data:07
+#####################################
+
+##############SSP CONFIG##############
+mem_sp_iocap_local:03 00 04
+mem_ssp_enable:01
+mem_pin_length:04  30 30 30 30 30
+#####################################
+
+##############UART CONFIG##############
+mem_baud:D0 00
+mem_module_uart_rx_buffer:00 1c
+mem_module_uart_rx_buffer_end:ff 1f
+mem_module_uart_tx_buffer:00 4c
+mem_module_uart_tx_buffer_end:ef 4f
+#####################################
+
+
+
+##############BLUETOOTH CONFIG##############
+###commom###
+mem_soft_version_num:00 01
+mem_module_state:03
+mem_module_bluetooth_stauts_by_command:07
+mem_class:24 04 04
+
+mem_module_flag:00
+#bit0 MODULE_FLAG_UART_FLOW_CONTROL
+#bit1 MODULE_FLAG_BLE_SEND_MTU23
+#bit2 MODULE_FLAG_BLE_DATA_ENCRYPT
+
+mem_ui_button_gpio:ff
+mem_lpm_mode:01
+mem_lpm_interval:00 01
+mem_lpm_overhead:08
+mem_lpm_mult_timeout:02
+
+mem_module_wake_up_gpio:1b
+
+###3.0###
+mem_scan_mode:00
+mem_module_spp_lpm_mult:28
+mem_lap:77 1a 21 31 10 3a
+mem_local_name_length:
+'YichipFPGA
+
+###3.0 sinff param###
+mem_sniff_param_interval:20 00
+mem_sniff_param_attempt:01
+mem_sniff_param_timeout:00
+
+
+###ble###
+mem_le_pairing_handle:2a 00
+mem_le_configuration:08
+
+mem_le_secure_connect_enable:00
+mem_le_adv_channel_map:07
+mem_le_pairing_mode:01
+
+mem_module_data_write_handle:2d 00
+mem_module_data_write_handle2:2f 00
+
+
+mem_le_adv_enable:00
+mem_le_adv_interval:f0 00
+mem_module_le_lpm_mult:05
+mem_le_lap:2a 31 00 33 02 3a
+mem_le_name_len:
+'Yichip 1021s Mou
+
+mem_le_adv_data_len:03
+mem_le_adv_data:
+02 01 0e
+
+mem_le_scan_data_len:0e
+
+mem_le_scan_data:# 1 byte length + 1 byte type + N bytes data
+'\09Yichip 1021s Mou
+
+mem_le_pres:02 03 00 05 10 02 03
+
+mem_le_interval_min:
+08 00 #min interval
+10 00 #max interval
+00 00 #latency
+2c 01 #timeout
+
+
+mem_le_local_mtu:b5
+mem_le_remote_mtu:17
+
+
+#####################################
+
+
+mem_eir_enable:01
+mem_all_uuid_16bits: 
+05
+03#Type: Complete list of 16-bit UUIDs
+0012 0001 0100 0111 0300 
+
+mem_all_uuid_128bits:
+00
+
+
+mem_ui_uuid_table:mem_module_uuid_list
+
+mem_module_uuid_list:
+03
+12
+00
+01
+00
+00
+01
+00
+01
+00
+01
+36
+00
+52
+09
+00
+00
+0a
+00
+01
+00
+01
+09
+00
+01
+35
+03
+19
+12
+00
+09
+00
+04
+35
+0d
+35
+06
+19
+01
+00
+09
+00
+01
+35
+03
+19
+00
+01
+09
+00
+09
+35
+08
+35
+06
+19
+12
+00
+09
+01
+00
+09
+02
+00
+09
+01
+03
+09
+02
+01
+09
+05
+ac
+09
+02
+02
+09
+02
+39
+09
+02
+03
+09
+06
+44
+09
+02
+04
+28
+01
+09
+02
+05
+09
+00
+02
+03
+11
+01
+00
+03
+01
+00
+00
+01
+00
+03
+36
+00
+46
+09
+00
+00
+0a
+00
+01
+00
+03
+09
+00
+01
+35
+03
+19
+11
+01
+09
+00
+02
+0a
+00
+00
+00
+00
+09
+00
+04
+35
+0c
+35
+03
+19
+01
+00
+35
+05
+19
+00
+03
+08
+01
+09
+00
+06
+35
+09
+09
+65
+6e
+09
+00
+6a
+09
+01
+00
+09
+01
+00
+25
+0a
+53
+50
+50
+20
+73
+6c
+61
+76
+65
+00
+00
+00
+01
+00
+
+
+mem_ui_le_uuid_table:mem_module_le_att_list
+
+#attribute list: handle 2bytes, uuid 2bytes, length 1bytes, attribute Nbytes
+mem_module_le_att_list:
+#Primary service GAP ------
+01 00 02 00 28 02 00 18
+
+
+#Appearance
+02 00 02 03 28 01 02
+03 00 02 01 2a 02 c8 00 #3c2=hid mouse
+
+#Device name
+04 00 02 03 28 01 0a
+05 00 02 00 2a 14 41 73 74 20 4c 45 20 4d 6f 75 73 65 20 20 20 20 20 20 20 20
+
+
+#Peripheral Preferred Connection Parameters
+06 00 02 03 28 01 02
+07 00 02 04 2a 08 06 00 06 00 64 00 2c 01 # interval 6ms, latency 100, timeout 300
+
+
+#privcy flag
+08 00 02 03 28 01 02
+09 00 02 02 2a 01 01
+
+#reconnecting addr 
+0a 00 02 03 28 01 08
+0b 00 02 03 2a 06 00 00 00 00 00 00
+
+#Primary service GATT ------
+0c 00 02 00 28 02 01 18
+
+#Service changed
+0d 00 02 03 28 01 20
+0e 00 02 05 2a 00
+#Client Characteristic Configuration
+0f 00 02 02 29 02 00 00
+
+#Primary service TX power ------
+10 00 02 00 28 02 04 18
+#Characteristic Tx power level
+11 00 02 03 28 01 16
+12 00 02 07 2a 01 00
+13 00 02 02 29 02 00 00
+
+#Primary service Battery ------
+14 00 02 00 28 02 0f 18
+#Characteristic Battery level
+15 00 02 03 28 01 12
+16 00 02 19 2a 01 38
+
+#Primary service device infomation
+17 00 02 00 28 02 0a 18
+#Characteristic system id
+18 00 02 03 28 01 02
+19 00 02 23 2a 03 00 00 00
+
+#Characteristic manufactor name
+1a 00 02 03 28 01 02
+1b 00 02 29 2a 08 46 6c 61 67 74 72 69 70
+
+#Characteristic module number
+1c 00 02 03 28 01 02
+1d 00 02 24 2a 06 79 69 63 68 69 70
+
+#Characteristic serial number
+1e 00 02 03 28 01 02
+1f 00 02 25 2a 04 63 6f 6d 33
+
+#Characteristic firmware version
+20 00 02 03 28 01 02
+21 00 02 26 2a 03 31 2e 30
+
+#Characteristic software version
+22 00 02 03 28 01 02
+23 00 02 28 2a 03 31 2e 30
+
+#Characteristic hardware version
+24 00 02 03 28 01 02
+25 00 02 2a 2a 03 31 2e 30
+
+#Characteristic regulatory version
+26 00 02 03 28 01 02
+27 00 02 25 2a 04 63 6f 6d 33
+
+#Primary service yichip transmit ------
+28 00 02 00 28 10 55 e4 05 d2 af 9f a9 8f e5 4a 7d fe 43 53 53 49
+#Characteristic tx--notify read
+29 00 02 03 28 01 12
+2a 00 10 16 96 24 47 C6 23 61 BA D9 4B 4D 1E 43 53 53 49 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+#Client Characteristic Configuration
+2b 00 02 02 29 02 00 00
+
+#Characteristic rx--write
+2c 00 02 03 28 01 08
+2d 00 10 b3 9b 72 34 be ec d4 a8 f4 43 41 88 43 53 53 49 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+
+#Characteristic rx-- write without Response
+2e 00 02 03 28 01 04
+2f 00 10 fe 69 ca 9a 56 19 f6 ab 02 4d aa 6d 43 53 53 49 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+
+#Characteristic rx tx --read write notify
+30 00 02 03 28 01 1a
+31 0010 18 03 A6 28 5E D8 EC 91 1C 48 A3 AC 43 53 53 49 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+#Client Characteristic Configuration
+32 00 02 02 29 02 00 00
+
+#End of Attribute list
+00 00
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/car.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/car.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/car.dat	(working copy)
@@ -0,0 +1,176 @@
+mem_device_option:0e
+mem_le_adv_channel_map:07 
+mem_le_adv_enable:00
+
+
+mem_spi_ncs_gpio:ff
+
+mem_le_pres_auth:01
+mem_le_local_mtu:17
+mem_le_adv_interval:60 01 
+
+
+
+mem_le_lap:56 78 01 98 07 2b
+mem_le_name_len:
+'YC-CAR-aa
+
+mem_le_adv_data_len:1f
+mem_le_adv_data:
+17 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 02 01 05 03 02 ff f0
+
+mem_le_scan_data_len:1f
+mem_le_scan_data:
+1e 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
+
+
+mem_car_le_att_list:
+
+#Primary service: GATT
+01 00 02 00 28 02 01 18
+#Characteristic: Service changed
+02 00 02 03 28 01 20
+03 00 02 05 2a 01 00
+#Client Characteristic Configuration
+04 00 02 02 29 02 00 00
+
+#Primary Service: GAP
+05 00 02 00 28 02 00 18 
+#Characteristic: Device Name
+06 00 02 03 28 01 02
+07 00 02 00 2a 11 55 43 48 4f 4e 20 30 31 20 20 20 20 20 20 20 20 20
+#Characteristic: Appearance
+08 00 02 03 28 01 02 
+09 00 02 01 2a 02 c8 00 
+#Characteristic: Peripheral Preferred Connection Parameters
+0a 00 02 03 28 01 02
+0b 00 02 04 2a 08 06 00 06 00 64 00 2c 01 # interval 6ms, latency 100, timeout 300
+
+#Primary Service: Device Information
+0c 00 02 00 28 02 0a 18 
+#Characteristic: pnp id
+0d 00 02 03 28 01 02
+0e 00 02 50 2a 07 02 8a 24 66 82 01 00
+
+#Primary Service:Car
+0f 00 02 00 28 02 f0 ff
+#Characteristic: Notify/Read UUID
+10 00 02 03 28 01 12
+11 00 02 f1 ff 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+12 00 02 02 29 02 00 00
+#Characteristic: Write UUID
+13 00 02 03 28 01 08
+14 00 02 f2 ff 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+
+#End of Attribute list
+00 00
+
+
+
+mem_ui_le_uuid_table:mem_car_le_att_list
+
+mem_lpm_mode:00
+mem_lpm_overhead:06
+mem_lpm_mult_timeout:02
+mem_car_hard_soft_switch:00
+
+mem_power_param_ptr:mem_car_soft_power
+mem_car_power_off_timeout:0c 0c
+
+mem_ui_button_gpio:ff
+mem_ui_button_timeout:14
+mem_ui_button_last_state:01
+
+
+mem_ui_led_struct_ptr:mem_car_style1_led_type
+mem_ui_led_struct_num:02
+
+#style:01
+mem_car_style1_blink_count:ff
+mem_car_style1_struct_led_gpio:02
+mem_car_style1_on_time:96 02
+mem_car_style1_off_time:3a 07
+
+#style:02
+mem_car_style2_blink_count:ff
+mem_car_style2_struct_led_gpio:ff
+mem_car_style2_on_time:40 01
+mem_car_style2_off_time:40 01
+
+
+mem_car_led_num:0a
+mem_car_led_map:
+02
+ff
+ff
+ff
+ff
+ff
+ff
+ff
+ff
+ff
+
+mem_car_queue_each_size:14 06
+
+mem_queue_ptr:mem_car_queue_each_size
+
+mem_car_config_pairing_led_conn_status:00
+mem_car_config_soft_switch_enable:00
+mem_car_config_pairing_led_gpio:ff
+mem_car_config_low_voltage_led_gpio:07
+mem_car_config_soft_switch_gpio:ff
+mem_car_config_low_voltage_percent:14
+mem_car_config_bat_notify_enable:01
+mem_car_config_device_select:03
+mem_car_config_ir_enable:01
+mem_car_config_motor_layout:03
+mem_car_config_ir_rx_gpio:06
+mem_car_config_led_num:08
+mem_car_config_blood_led_gpio:08 09 0a 0b 0c 0d 0e 0f
+
+
+mem_motor1_speed:0a
+mem_motor2_speed:0a
+mem_motor3_speed:0a
+mem_motor1_pwm_set:04 14 00 00 e8 03 00 00
+mem_motor2_pwm_set:05 15 00 01 e8 03 00 00
+mem_motor3_pwm_set:16 1b 00 02 e8 03 00 00
+
+mem_car_notify_vdd_count:14
+mem_notify_bat_packet:07 11 00 5a 6b 01 00 01 00 00
+
+mem_vdd_calculate_set:e0 01 90 01 9a 01 00 00	#full_vol;	empty_vol;	low_vol;	now_vol
+
+mem_ir_notify_data:08 11 00 5a 6b 06 00 02 00 00 00
+
+mem_adc_config_flag:01
+
+mem_car_info_request:0e 11 00 5a 6b 08 00 08 00 00 00 00 00 00 00 00 00
+
+mem_car_led_control_timer:05
+
+mem_car_24g_no_data_timeout_count:b8 0b
+
+#mem_car_led_control:01 01 01 01 01 01 01 01
+
+
+mem_tx_power:02
+mem_250k_freq_enable:00
+mem_24g_head_ptr:mem_24g_car_head_ptr
+mem_24g_car_head_ptr+394:4#offset_24g_pair_txpower
+mem_24g_car_head_ptr+146:20 15 10 05#offset_24g_paring_addr
+mem_24g_car_head_ptr+151:00 13 2c 42#offset_24g_ch_map1
+mem_24g_car_head_ptr+155:06 15 36 48#offset_24g_ch_map2
+mem_24g_car_head_ptr+159:0f 1a 3a 4c#offset_24g_ch_map3
+mem_24g_car_head_ptr+163:11 23 31 4d#offset_24g_ch_map4
+mem_24g_car_head_ptr+195:00#offset_24g_no_ack
+mem_24g_car_head_ptr+205:02#offset_24g_mode
+mem_24g_car_head_ptr+137:30 75#offset_24g_rx_window
+mem_24g_car_head_ptr+349:00#offset_24g_pair_mode auto pair
+mem_24g_car_head_ptr+314:38#offset_24g_hop_interval
+mem_24g_car_head_ptr+315:00#offset_24g_ackpayload_enable
+mem_24g_car_head_ptr+299:16 16 17 02#offset_24g_rx_addr
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/fpga.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/fpga.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/fpga.dat	(working copy)
@@ -0,0 +1,36 @@
+
+
+
+4010:c0
+4011:0f
+4022:80
+4023:02
+
+mem_fcomp_mul:02
+mem_fcomp_div:24
+mem_iscan_window:12 00
+mem_iscan_interval:00 10
+mem_pscan_window:12 00
+mem_pscan_interval:00 08
+
+mem_inq_window:20 00
+mem_page_window:20 00
+mem_page_to:00 20
+mem_rx_window_init:80 04
+mem_rx_window_sniff:00 08
+
+
+mem_lpm_xtalcnt:00 0a 1b ef 07
+
+mem_lmp_version:08 0e 05 03 00
+
+mem_eeprom_base:30 ff
+mem_eeprom_block_size:80
+
+mem_context_number:01
+
+mem_rf_init_data:
+ff
+mem_rf_init_ptr:mem_rf_init_data
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/gatt.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/gatt.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/gatt.dat	(working copy)
@@ -0,0 +1,86 @@
+
+#attribute list: handle 2bytes, uuid 2bytes, length 1bytes, attribute Nbytes
+mem_le_att_list:
+
+#Primary service GAP ------
+01 00 00 28 02 00 18
+
+#Device name
+02 00 03 28 01 0a
+03 00 00 2a 0c 41 73 74 20 4c 45 20 4d 6f 75 73 65
+
+#Appearance
+04 00 03 28 01 02
+05 00 01 2a 02 c2 03 #3c2=hid mouse
+
+#Peripheral Preferred Connection Parameters
+06 00 03 28 01 02
+07 00 04 2a 08 06 00 06 00 64 00 2c 01 # interval 6ms, latency 100, timeout 300
+
+#Primary service GATT ------
+08 00 00 28 02 01 18
+
+#Service changed
+09 00 03 28 01 20
+0a 00 05 2a 00
+
+#Client Characteristic Configuration
+0b 00 02 29 02 00 00
+
+#Primary service TX power ------
+0c 00 00 28 02 04 18
+#Characteristic Tx power level
+0d 00 03 28 01 06
+0e 00 07 2a 01 00
+
+
+#Primary service Battery ------
+0f 00 00 28 02 0f 18
+#Characteristic Battery level
+10 00 03 28 01 12
+11 00 19 2a 01 38
+
+#Primary service yichip transmit ------
+12 00 00 28 02 f0 18
+#Characteristic tx--notify
+13 00 03 28 01 12
+14 00 f1 2a 14	# for Android device, ATT MTU is just 23 bytes, so payload is 20 bytes max
+'Test read initial va
+#Client Characteristic Configuration
+15 00 02 29 02 00 00
+#Characteristic rx--write
+16 00 03 28 01 0c
+17 00 f0 2a 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+
+#End of Attribute list
+00 00
+
+mem_le_adv_enable:01
+mem_le_adv_data_len:03
+
+mem_le_adv_data:02 01 05
+#flags NOTE: should be included here, or Android will not do connectgatt()
+
+
+mem_le_scan_data_len:17
+
+mem_le_scan_data:	# 1 byte length + 1 byte type + N bytes data
+
+#complete local name
+0e 09 
+#'Ast LE2Serial
+'YiChip BLE2IR
+
+#16bit uuid
+03 03 00 f0
+
+#Apperance
+03 19 40 02
+
+
+mem_le_adv_interval:00 08 
+mem_le_adv_direct_addr_type:01
+mem_le_adv_channel_map:07 
+
+mem_lap:77 11 00 33 00 00
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/hci.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/hci.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/hci.dat	(working copy)
@@ -0,0 +1,8 @@
+#device parameters
+mem_lap:88 11 00 33 00 00
+mem_local_name_length:09
+mem_local_name:'Bluetooth
+mem_device_option:01
+mem_ssp_enable:01
+mem_lpm_mode:01
+mem_3v_adc_data:00 00
\ No newline at end of file
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/hci_boot.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/hci_boot.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/hci_boot.dat	(working copy)
@@ -0,0 +1,11 @@
+
+mem_patch00:01
+mem_lpm_config:8f 10 ca
+mem_le_att_list+485:
+68 e4
+69 00
+6a 00
+6b 30
+ff
+mem_rf_init_ptr:mem_le_att_list+485
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/le_prcp.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/le_prcp.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/le_prcp.dat	(working copy)
@@ -0,0 +1,80 @@
+#attribute list: handle 2bytes, uuid 2bytes, length 1bytes, attribute Nbytes
+mem_le_att_list:
+
+#Primary service GAP ------
+01 00 00 28 02 00 18
+
+#Device name
+02 00 03 28 01 0a
+03 00 00 2a 0c 41 73 74 20 4c 45 20 4d 6f 75 73 65
+
+#Appearance
+04 00 03 28 01 02
+05 00 01 2a 02 c2 03 #3c2=hid mouse
+
+#Peripheral Preferred Connection Parameters
+06 00 03 28 01 02
+07 00 04 2a 08 06 00 06 00 64 00 2c 01 # interval 6ms, latency 100, timeout 300
+
+#Primary service GATT ------
+08 00 00 28 02 01 18
+
+#Service changed
+09 00 03 28 01 20
+0a 00 05 2a 00
+
+#Client Characteristic Configuration
+0b 00 02 29 02 00 00
+
+#Primary service TX power ------
+0c 00 00 28 02 04 18
+#Characteristic Tx power level
+0d 00 03 28 01 06
+0e 00 07 2a 01 00
+
+
+#Primary service Battery ------
+0f 00 00 28 02 0f 18
+#Characteristic Battery level
+10 00 03 28 01 12
+11 00 19 2a 01 38
+
+#Primary service yichip PRCP ------
+12 00 00 28 02 f1 18
+#Characteristic device tx
+13 00 03 28 01 12
+14 00 f3 2a 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+#Client Characteristic Configuration
+15 00 02 29 02 00 00
+#Characteristic device rx
+16 00 03 28 01 0e
+17 00 f2 2a 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+#End of Attribute list
+00 00
+
+mem_le_adv_data_len:1b
+mem_le_adv_data:0c 09
+'Yichip Temp
+ 03 19 40 02 02 01 05 02 0a 00 03 03 f1 18
+mem_le_scan_data_len:00
+#mem_le_adv_param:00 08 00 08 00 01 00 00 00 00 00 00 00 07 00
+mem_le_adv_enable:01
+
+
+mem_le_adv_interval:20 00 
+mem_le_adv_type:00 
+mem_le_adv_own_addr_type:01 
+mem_le_adv_direct_addr_type:01
+mem_le_adv_direct_addr:00 00 00 00 00 00 
+mem_le_adv_channel_map:07 
+
+mem_le_notify_handle:14
+
+mem_lpm_mode:00
+#mem_lpm_ctrl:0f 0f 10 06
+mem_lpm_xtalcnt:0c 10 ca 1f
+mem_device_option:0d
+mem_fcomp_div:24
+mem_fcomp_mul:02
+mem_le_lap:45 67 78 89 90 56
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/le_transmit_uuid.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/le_transmit_uuid.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/le_transmit_uuid.dat	(working copy)
@@ -0,0 +1,62 @@
+mem_device_option: 01
+
+#attribute list: handle 2bytes, uuid 2bytes, length 1bytes, attribute Nbytes
+mem_le_att_list:
+
+#Primary service GAP ------
+01 00 00 28 02 00 18
+
+#Device name
+02 00 03 28 01 0a
+03 00 00 2a 0c 41 73 74 20 4c 45 20 4d 6f 75 73 65
+
+#Appearance
+04 00 03 28 01 02
+05 00 01 2a 02 c2 03 #3c2=hid mouse
+
+#Peripheral Preferred Connection Parameters
+06 00 03 28 01 02
+07 00 04 2a 08 06 00 06 00 64 00 2c 01 # interval 6ms, latency 100, timeout 300
+
+#Primary service GATT ------
+08 00 00 28 02 01 18
+
+#Service changed
+09 00 03 28 01 20
+0a 00 05 2a 00
+
+#Client Characteristic Configuration
+0b 00 02 29 02 00 00
+
+#Primary service TX power ------
+0c 00 00 28 02 04 18
+#Characteristic Tx power level
+0d 00 03 28 01 06
+0e 00 07 2a 01 00
+
+
+#Primary service Battery ------
+0f 00 00 28 02 0f 18
+#Characteristic Battery level
+10 00 03 28 01 12
+11 00 19 2a 01 38
+
+#Primary service yichip transmit ------
+12 00 00 28 02 f0 18
+#Characteristic tx--notify
+13 00 03 28 01 12
+14 00 f1 2a 17 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+#Client Characteristic Configuration
+15 00 02 29 02 00 00
+#Characteristic rx--write
+16 00 03 28 01 0c
+17 00 f0 2a 17 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+
+#End of Attribute list
+00 00
+
+mem_le_adv_data_len:1b
+mem_le_adv_data:0c 09 52 74 72 69 76 72 5f 52 36 32 31 03 19 40 02 02 01 05 02 0a 00 03 03 00 f0
+mem_le_scan_data_len:00
+mem_le_adv_param:00 08 00 08 00 01 00 00 00 00 00 00 00 07 00
+mem_le_adv_enable:01
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/light.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/light.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/light.dat	(working copy)
@@ -0,0 +1,18 @@
+mem_patch3a:02
+mem_patch1f:20
+
+mem_light_pwm0:04
+mem_light_pwm1:05
+mem_light_pwm2:1b
+mem_light_pwm3:1c
+mem_light_pwm4:03
+mem_light_pwm5:08
+mem_ui_button_gpio:ff
+
+mem_light_cnum:14
+mem_light_pairing_timer:00 02
+mem_light_pairing_enable:01
+mem_le_scan_enable:01
+mem_le_scan_interval:50 00
+mem_le_scan_window:40 00
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/mouse.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/mouse.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/mouse.dat	(working copy)
@@ -0,0 +1,929 @@
+#G24 allpowerful
+mem_patch00:07
+mem_patch10:20
+mem_patch11:06
+mem_patch14:02
+mem_patch16:06
+mem_patch18:10
+mem_patch19:06
+mem_patch1c:48
+mem_patch1d:1c
+mem_patch27:80
+mem_patch31:10
+
+#mem_patch00:02
+#mem_patch03:08
+#mem_patch04:40
+#mem_patch09:04
+#mem_patch0a:02
+#mem_patch0b:02
+#mem_patch10:20
+#mem_patch11:02
+#mem_patch14:82
+#mem_patch15:20
+#mem_patch16:06
+#mem_patch18:10
+#mem_patch19:0e
+#mem_patch1c:48
+#mem_patch1d:1e
+#mem_patch20:20
+#mem_patch27:02
+#mem_patch28:08
+#mem_patch29:04
+#mem_patch2a:80
+#mem_patch2b:02
+#mem_patch2c:c8
+#mem_patch2d:04
+#mem_patch2e:80
+#mem_patch30:05
+#mem_patch31:11
+#mem_patch3f:04
+
+
+#debug
+#mem_patch2f:40
+#mem_patch37:40
+#mem_patch3e:c0
+
+
+mem_device_option:40
+mem_lpm_mode:01
+mem_lpm_mult:20
+mem_lpm_mult_init:20
+#mem_lpm_interval:00 00
+
+mem_mouse_function_enable:
+#bit0 MOUSE_ENABLE_USB
+#bit1 MOUSE_ENABLE_24G
+#bit2 MOUSE_ENABLE_SPI2
+#bit3 MOUSE_ENABLE_FLASH
+#bit4 MOUSE_ENABLE_EEPROM
+#bit5 MOUSE_ENABLE_STATUE_UP_THREE_LED
+#bit6 MOUSE_ENABLE_STATUE_UP
+#bit7 MOUSE_ENABLE_DPI_LED_BLINK
+12
+#bit0 MOUSE_ENABLE_BLE_RANDOM_ADDRE
+#bit1 MOUSE_ENABLE_2K_EEPROM
+#bit2 MOUSE_ENABLE_ADC
+#bit3 MOUSE_ENABLE_INIT_DELAY
+#bit4 MOUSE_ENABLE_DISCOVERY_SENSOR_LED
+#bit5 MOUSE_ENABLE_AUTO_24G_PARING
+#bit6 MOUSE_ENABLE_WAKEUP_FROM_POWER
+#bit7 MOUSE_ENABLE_GPIO_CONTROL_ADC_SENSOR
+41
+
+mem_app_connection_options:06
+mem_lap:20 51 17 01 20 20
+mem_local_name_length:
+'BT3.0 Mouse
+mem_sniff_param_interval:
+0e 00 ##mem_sniff_param_interval:0e 00 report 115hz,0c 00 report 125hz
+01 00 ##mem_sniff_param_attempt:01 00
+02##mem_sniff_param_timeout:00 00
+
+
+mem_unsniff2sniff_timer:0a
+mem_ssp_mode_flag:03
+mem_ssp_enable:01
+##mem_all_uuid_16bits:
+##06
+##03#Type: Complete list of 16-bit UUIDs
+##0011 0100 1002 1124  1200  0001
+mem_all_uuid_128bits:00
+mem_ptt:00
+
+
+mem_sp_iocap_local:03 00 04
+mem_ui_profile_supported:01
+mem_eir_enable:01
+
+mem_le_adv_data_len:1f
+mem_le_adv_data:
+#flag 
+02 01 05
+
+#uuid
+03 03 12 18
+
+#appearance
+03 19 c2 03
+
+mem_le_adv_swift_pair:
+#microsoft swift pair
+06 ff 06 00 03 00 80
+#name
+'\09BT5.0 Mouse
+
+mem_le_scan_data_len:1f
+mem_le_scan_data:
+#name
+'\09BT5.0 Mouse
+
+
+#max 20bytes, att list data rom limits
+mem_le_name_len:
+'BT5.0 Mouse
+
+
+mem_le_interval_min:
+07 00 #min interval	if need 125hz,set 0x0006;else 115hz set 0x0007
+07 00 #max interval 	if nedd 125hz,set 0x0006;else 115hz set 0x0007
+20 00 #latency
+2c 01 #timeout
+
+
+mem_le_adv_interval:00 00
+mem_le_adv_type:00 
+mem_le_adv_own_addr_type:00
+mem_le_adv_channel_map:07 
+
+mem_le_lap:8e b1 3a 0e 8e ed
+
+mem_le_transmit_window:50
+
+mem_le_notify_handle:19 00
+mem_le_pairing_handle:22 00
+
+
+mem_discovery_timeout:08 07#3min
+mem_mouse_direct_timeout:50 00#8s
+mem_mouse_no_data_timeout:70 17 #10min
+
+
+mem_spi_ncs_gpio:ff
+mem_ui_button_gpio:ff
+mem_ui_button_timeout:1e
+
+mem_device_number:02 #max device number
+mem_24g_device_number:02 #devie 2 :24g mode
+#mem_adc_config_flag:02 #0 vinlpm 1 hvin 2 gpio
+#mem_adc_channel:32 #gpio5
+#mem_mouse_vdd_full_vol:96 00#1.5v
+#5a 00#mem_mouse_vdd_empty_vol:5a 00#0.9v
+#64 00#mem_mouse_vdd_low_vol:64 00  #1v
+
+mem_config_sensor_type:00
+02 #mem_config_sensor_motion:02
+06 #mem_lbutton_gpio:04
+08 #mem_rbutton_gpio:1b
+04 #mem_mbutton_gpio:17
+ff#mem_bk_button_gpio:ff
+ff #mem_fw_button_gpio:ff
+ff #mem_dpi_button_gpio:06
+1b #mem_whee_a_data_gpio:02
+1c #mem_whee_b_data_gpio:03
+ff #mem_whee_ta_data_gpio:ff
+ff #mem_whee_tb_data_gpio:ff
+ff #mem_config_bt_button_gpio:ff
+ff #mem_config_select_device_button_gpio:ff
+ff #mem_config_paraing_led_gpio:ff
+ff #mem_config_low_voltage_alarm_gpio:08
+05 #mem_config_device1_led_gpio:08
+ff #mem_config_device2_led_gpio:ff
+ff #mem_config_device3_led_gpio:ff
+03 #mem_sensor_data_gpio:18
+ff #mem_dpi_led_gpio:08
+00 #mem_config_function_enable:04
+00 #mem_config_sensor_angle:00
+ff #mem_select_sensor_angle_gpio:ff
+ff #mem_select_adc_gpio:ff
+
+mem_eeprom_wp_gpio:14
+mem_sensor_reset_gpio:ff
+mem_sensor_squal_reg:07# 07:3205         	06:3610
+mem_usb_offline_check_gpio:ff
+#mem_wire_usb_interval:19 #128
+
+#mem_config_function_enable:
+#bit0 ENABLE_BT_DISCOVERY_BY_GPIO_LED
+#bit1 ENABLE_MODE_LED
+#bit2 ENABLE_LOW_VOLTAGE_LED
+#bit3 ENABLE_DEVICE_LED
+#bit4 ENABLE_BT_BUTTON
+#bit5 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON
+#bit6 ENABLE_SELECT_DEVICE_BY_SWITCH
+#00
+
+mem_mouse_dpi_seting:
+00##mem_320x_dpi_1
+01##mem_320x_dpi_2
+02##mem_320x_dpi_3
+03##mem_320x_dpi_4
+
+#15##mem_3212_dpi_1
+#1a##mem_3212_dpi_2
+#22##mem_3212_dpi_3
+#2a##mem_3212_dpi_4
+
+#04##mem_3610_dpi_1
+#05##mem_3610_dpi_2
+#07##mem_3610_dpi_3
+#08##mem_3610_dpi_4
+
+
+mem_ui_led_struct_ptr:mem_mouse_led_type
+mem_ui_led_struct_num:01
+
+
+mem_mouse_le_uuid_sup:
+25 00 02 03 28 01 12 
+26 00 02 4d 2a 07 00 00 00 00 00 00 00 
+27 00 02 02 29 02 00 00
+28 00 02 08 29 02 11 01
+29 00 02 03 28 01 0e 
+2a 00 02 4d 2a 07 00 00 00 00 00 00 00
+2b 00 02 08 29 02 11 02
+
+  
+#24g init
+mem_24g_mode:01#tx
+mem_24g_data_type:01        #mouse 1,kb 2
+mem_24g_max_retry:04#max tx retry
+mem_24g_no_ack:00#with ack
+mem_24g_rx_window:c0 12     #400us
+mem_24g_interval:19		#0x19 24g report 125hz;0x0c,24g report 250hz
+mem_24g_interval_min:19		#0x19 24g report 125hz;0x0c,24g report 250hz
+mem_24g_interval_max:1c	#0x1c 24g report 125hz;0x10,24g report 250hz
+mem_24g_ch_map1:00 13 2c 42
+mem_24g_ch_map2:06 15 36 48
+mem_24g_ch_map3:0f 1a 3a 4c
+mem_24g_ch_map4:11 23 31 4d
+mem_24g_pairing_sm:ff
+mem_24g_paring_addr:20 15 10 05
+mem_24g_common_temp:00 00 00 00 00 00 00 00 00 00
+mem_24g_enter_hibernate:00 48 60
+
+mem_device_flag:
+01
+ff
+ff ff ff ff ff ff
+#mem_device2_type:
+#34
+#11 22 33 44 55 66
+#mem_device3_type:
+#34
+#11 22 33 44 55 66
+
+
+#mem_flash_base:00 70 00
+mem_eeprom_base:90 1f
+mem_eeprom_block_size:80
+mem_reconn_times_init:00
+mem_bt_discovey_button_statue:01#default: button up
+mem_empty_count:03
+
+
+#yichip sdp
+#04 0011 0100 1002 1124
+#00 01 00 00
+#36 01 6d
+#09
+#00
+#00
+#0a
+#00
+#01
+#00
+#00
+#09
+#00
+#01
+#35
+#03
+#19
+#11
+#24
+#09
+#00
+#04
+#35
+#0d
+#35
+#06
+#19
+#01
+#00
+#09
+#00
+#11
+#35
+#03
+#19
+#00
+#11
+#09
+#00
+#05
+#35
+#03
+#19
+#10
+#02
+#09
+#00
+#06
+#35
+#09
+#09
+#65
+#6e
+#09
+#00
+#6a
+#09
+#01
+#00
+#09
+#00
+#09
+#35
+#08
+#35
+#06
+#19
+#11
+#24
+#09
+#01
+#00
+#09
+#00
+#0d
+#35
+#0f
+#35
+#0d
+#35
+#06
+#19
+#01
+#00
+#09
+#00
+#13
+#35
+#03
+#19
+#00
+#11
+#09
+#01
+#00
+#25
+#16
+#59
+#69
+#43
+#68
+#69
+#70
+#20
+#42
+#6c
+#75
+#65
+#74
+#6f
+#6f
+#74
+#68
+#20
+#4d
+#6f
+#75
+#73
+#65
+#09
+#01
+#01
+#25
+#05
+#4d
+#6f
+#75
+#73
+#65
+#09
+#01
+#02
+#25
+#06
+#59
+#69
+#43
+#68
+#69
+#70
+#09
+#02
+#00
+#09
+#01
+#00
+#09
+#02
+#01
+#09
+#01
+#11
+#09
+#02
+#02
+#08
+#80
+#09
+#02
+#03
+#08
+#21
+#09
+#02
+#04
+#28
+#01
+#09
+#02
+#05
+#28
+#01
+#09
+#02
+#06
+#35
+#81
+#35
+#7f
+#08
+#22
+#25
+#7b
+#05
+#01
+#09
+#02
+#a1
+#01
+#85
+#02
+#09
+#01
+#a1
+#00
+#05
+#09
+#19
+#01
+#29
+#08
+#15
+#00
+#25
+#01
+#75
+#01
+#95
+#08
+#81
+#02
+#05
+#01
+#09
+#30
+#09
+#31
+#16
+#01
+#f8
+#26
+#ff
+#07
+#75
+#10
+#95
+#02
+#81
+#06
+#09
+#38
+#15
+#81
+#25
+#7f
+#75
+#08
+#95
+#01
+#81
+#06
+#05
+#0c
+#0a
+#38
+#02
+#75
+#08
+#95
+#01
+#81
+#06
+#c0
+#c0
+#05
+#0c
+#09
+#01
+#a1
+#01
+#85
+#03
+#75
+#10
+#95
+#02
+#15
+#01
+#26
+#8c
+#02
+#19
+#01
+#2a
+#8c
+#02
+#81
+#60
+#c0
+#06
+#00
+#ff
+#09
+#01
+#a1
+#01
+#85
+#10
+#75
+#08
+#95
+#06
+#15
+#00
+#26
+#ff
+#00
+#09
+#01
+#81
+#00
+#09
+#01
+#91
+#00
+#c0
+#09
+#02
+#07
+#35
+#08
+#35
+#06
+#09
+#04
+#09
+#09
+#01
+#00
+#09
+#02
+#08
+#28
+#00
+#09
+#02
+#09
+#28
+#01
+#09
+#02
+#0a
+#28
+#01
+#09
+#02
+#0b
+#09
+#01
+#00
+#09
+#02
+#0c
+#09
+#1f
+#40
+#09
+#02
+#0d
+#28
+#00
+#09
+#02
+#0e
+#28
+#01
+#09
+#02
+#0f
+#09
+#00
+#12
+#09
+#02
+#10
+#09
+#00
+#00
+#
+#04 1002 1200 0100 0001
+#00 01 00 01
+#36 00 5a
+#09
+#00
+#00
+#0a
+#00
+#01
+#00
+#01
+#09
+#00
+#01
+#35
+#03
+#19
+#12
+#00
+#09
+#00
+#04
+#35
+#0d
+#35
+#06
+#19
+#01
+#00
+#09
+#00
+#01
+#35
+#03
+#19
+#00
+#01
+#09
+#00
+#05
+#35
+#03
+#19
+#10
+#02
+#09
+#00
+#09
+#35
+#08
+#35
+#06
+#19
+#12
+#00
+#09
+#01
+#00
+#09
+#02
+#00
+#09
+#01
+#03
+#09
+#02
+#01
+#09
+#04
+#6d
+#09
+#02
+#02
+#09
+#b0
+#16
+#09
+#02
+#03
+#09
+#01
+#29
+#09
+#02
+#04
+#28
+#01
+#09
+#02
+#05
+#09
+#00
+#02
+#00
+#00
+#
+#01 0001
+#00 01 00 01
+#36 00 5a
+#09
+#00
+#00
+#0a
+#00
+#01
+#00
+#01
+#09
+#00
+#01
+#35
+#03
+#19
+#12
+#00
+#09
+#00
+#04
+#35
+#0d
+#35
+#06
+#19
+#01
+#00
+#09
+#00
+#01
+#35
+#03
+#19
+#00
+#01
+#09
+#00
+#05
+#35
+#03
+#19
+#10
+#02
+#09
+#00
+#09
+#35
+#08
+#35
+#06
+#19
+#12
+#00
+#09
+#01
+#00
+#09
+#02
+#00
+#09
+#01
+#00
+#09
+#02
+#01
+#09
+#05
+#ac
+#09
+#02
+#02
+#09
+#02
+#39
+#09
+#02
+#03
+#09
+#00
+#44
+#09
+#02
+#04
+#28
+#01
+#09
+#02
+#05
+#09
+#00
+#02
+#
+#03 1101 0003 0100
+#00 01 00 02
+#36 00 2f
+#09
+#00
+#00
+#0a
+#00
+#01
+#00
+#02
+#09
+#00
+#01
+#35
+#03
+#19
+#11
+#01
+#09
+#00
+#04
+#35
+#0c
+#35
+#03
+#19
+#01
+#00
+#35
+#05
+#19
+#00
+#03
+#08
+#01
+#09
+#01
+#00
+#25
+#09
+#53
+#50
+#50
+#20
+#73
+
+
+
+#logi sdp
+#04 1000 0100 0001 1002
+#00 00 00 00
+#36 00 92 
+#09 00 00 0a 00 00 00 00 09 00 01 35 03 19 10 00 09 00 04 35 0d 35 06 
+#19 01 00 09 00 01 35 03 19 00 01 09 00 05 35 03 19 10 02 09 00 06 35 
+#09 09 65 6e 09 00 6a 09 01 00 09 00 09 35 08 35 06 19 01 00 09 01 00 
+#09 01 00 25 2c 4c 6f 67 69 74 65 63 68 20 42 6c 75 65 74 6f 6f 74 68 20 
+#57 69 72 65 6c 65 73 73 20 4d 6f 75 73 65 20 53 44 50 20 53 65 72 76 65 
+#72 09 01 01 25 0f 42 6c 75 65 74 6f 6f 74 68 20 4d 6f 75 73 65 09 02 00 35 03 09 01 00
+
+#04 1124 0100 0011 1002
+#00 01 00 00
+#36 01 ee 
+#09 00 00 0a 00 01 00 00 09 00 01 35 03 19 11 24 09 00 04 35 
+#0d 35 06 19 01 00 09 00 11 35 03 19 00 11 09 00 05 35 03 19 10 02 
+#09 00 06 35 09 09 65 6e 09 00 6a 09 01 00 09 00 09 35 08 35 06 19 11 24 
+#09 01 01 09 00 0d 35 0f 35 0d 35 06 19 01 00 09 00 13 35 03 19 00 11 09 01 
+#00 25 21 4c 6f 67 69 74 65 63 68 20 42 6c 75 65 74 6f 6f 74 68 20 57 69 72 65 6c 
+#65 73 73 20 4d 6f 75 73 65 09 01 01 25 0f 42 6c 75 65 74 6f 6f 74 68 20 4d 6f 75 
+#73 65 09 01 02 25 08 4c 6f 67 69 74 65 63 68 09 02 01 09 01 11 09 02 02 08 80 09 02 
+#03 08 21 09 02 04 28 01 09 02 05 28 01 09 02 06 35 fc 35 fa 08 22 25 f6 05 01 09 02 a1 01 
+#85 02 09 01 a1 00 05 09 19 01 29 08 15 00 25 01 75 01 95 08 81 02 05 01 09 30 09 31 16 01 
+#f8 26 ff 07 75 0c 95 02 81 06 09 38 15 81 25 7f 75 08 95 01 81 06 05 0c 0a 38 02 75 08 95 01 81 
+#06 c0 c0 05 0c 09 01 a1 01 85 03 05 06 09 20 15 00 26 64 00 75 08 95 01 81 02 c0 06 00 ff 09 01 
+#a1 01 85 10 75 08 95 06 15 00 26 ff 00 09 01 81 00 09 01 91 00 c0 06 00 ff 09 02 a1 01 85 11 75 
+#08 95 13 15 00 26 ff 00 09 02 81 00 09 02 91 00 c0 05 01 09 06 a1 01 85 04 75 01 95 08 05 07 
+#19 e0 29 e7 15 00 25 01 81 02 95 01 75 08 81 03 95 05 75 01 05 08 19 01 29 05 91 02 95 01 
+#75 03 91 03 95 06 75 08 15 00 26 ff 00 05 07 19 00 29 ff 81 00 c0 05 0c 09 01 a1 01 85 05 
+#15 00 25 01 75 01 95 02 0a 25 02 0a 24 02 81 02 95 01 75 06 81 03 c0 09 02 07 35 08 35 
+#06 09 04 09 09 01 00 09 02 09 28 01 09 02 0a 28 01 09 02 0c 09 1f 40 09 02 0d 28 00 09 
+#02 0e 28 01 09 02 0f 09 00 12 09 02 10 09 00 00
+
+#04 1200 0100 0001 1002
+#00 01 00 01
+#36 00 ad 
+#09 00 00 0a 00 01 00 01 09 00 01 35 03 19 12 00 09 00 04 35 0d 35 06 19 01 
+#00 09 00 01 35 03 19 00 01 09 00 05 35 03 19 10 02 09 00 06 35 09 09 65 
+#6e 09 00 6a 09 01 00 09 00 09 35 08 35 06 19 12 00 09 01 00 09 01 00 
+#25 2c 4c 6f 67 69 74 65 63 68 20 42 6c 75 65 74 6f 6f 74 68 20 57 69 72 
+#65 6c 65 73 73 20 4d 6f 75 73 65 20 50 6e 50 20 53 65 72 76 65 72 09 01 
+#01 25 0f 42 6c 75 65 74 6f 6f 74 68 20 4d 6f 75 73 65 09 02 00 09 01 03 09 
+#02 01 09 04 6d 09 02 02 09 b0 16 09 02 03 09 12 03 09 02 04 28 01 09 02 05 09 00 02 00
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/remote_car.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/remote_car.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/remote_car.dat	(working copy)
@@ -0,0 +1,106 @@
+mem_device_option:10
+
+
+mem_spi_ncs_gpio:ff
+mem_ui_button_gpio:ff
+mem_ui_button_timeout:14
+mem_ui_button_last_state:01
+
+mem_remote_car_queue_each_size:0f 06
+
+mem_queue_ptr:mem_remote_car_queue_each_size
+
+mem_lpm_mode:00
+mem_lpm_overhead:06
+mem_lpm_mult_timeout:02
+mem_remote_car_hard_soft_switch:00
+
+mem_ui_led_struct_ptr:mem_remote_style_led_type
+mem_ui_led_struct_num:01
+
+mem_remote_style_blink_count:ff
+mem_remote_style_struct_led_gpio:1b
+mem_remote_style_on_time:96 02
+mem_remote_style_off_time:3a 07
+
+mem_remote_car_led_num:01
+mem_remote_car_led_map:
+1b
+ff
+ff
+ff
+ff
+ff
+ff
+ff
+ 
+mem_power_param_ptr:mem_remote_car_soft_power
+mem_remote_car_power_off_timeout:0c 0c
+
+mem_keyscan_ptr:mem_remote_car_keyscan
+mem_remote_car_key_num:07
+mem_remote_car_key_conf0:
+#0
+03
+#1
+04
+#2
+05
+#3
+06
+#4
+02
+#5
+07
+#6
+17
+
+
+mem_remote_car_config_soft_switch_enable:00
+mem_remote_car_config_connect_led_gpio:ff
+mem_remote_car_config_soft_switch_gpio:19
+mem_remote_car_config_key_map:00				#00:TEN shape	01:L+R shape
+mem_remote_car_config_layout:00					#00:F_B_MOTOR	02:L_R_MOTOR
+mem_remote_car_config_check_way:00				#00:key  01:rocker
+mem_remote_car_config_timeout_shutdown_enable:00	#00:don't shutdown        	;01:timeout to shutdown
+
+mem_current_vdd_value_default_mid_x:55 4e
+mem_current_vdd_value_default_mid_y:55 4e
+mem_current_vdd_default_range:00 07
+
+mem_adc_config_flag:02
+
+mem_remote_car_24g_motor_packet:       0c        5a 6b 04 00 06 00 0a 00 0a 00 0a 00  
+mem_remote_car_24g_fire_packet:08 5a 6b 06 00 02 00 00 00
+
+mem_remote_car_no_data_timeout:b8 0b
+
+mem_lap:01 02 03 04 05 06
+
+mem_tx_power:01#0dbm
+mem_250k_freq_enable:00
+mem_24g_common_temp:00 00 00 00 00 00 00 00 00 00
+mem_24g_head_ptr:mem_24g_RC_head_ptr
+mem_24g_RC_head_ptr+394:4#offset_24g_pair_txpower
+mem_24g_RC_head_ptr+146:20 15 10 05#offset_24g_paring_addr
+mem_24g_RC_head_ptr+151:00 13 2c 42#offset_24g_ch_map1
+mem_24g_RC_head_ptr+155:06 15 36 48#offset_24g_ch_map2
+mem_24g_RC_head_ptr+159:0f 1a 3a 4c#offset_24g_ch_map3
+mem_24g_RC_head_ptr+163:11 23 31 4d#offset_24g_ch_map4
+mem_24g_RC_head_ptr+195:00#offset_24g_no_ack
+mem_24g_RC_head_ptr+205:01#offset_24g_mode
+mem_24g_RC_head_ptr+135:01#offset_24g_data_type 1ms 2kb
+mem_24g_RC_head_ptr+137:c0 12#offset_24g_rx_window
+mem_24g_RC_head_ptr+204:04#offset_24g_max_retry
+mem_24g_RC_head_ptr+171:19#offset_24g_interval
+mem_24g_RC_head_ptr+172:19#offset_24g_interval_min
+mem_24g_RC_head_ptr+173:1c#offset_24g_interval_max
+mem_24g_RC_head_ptr+150:ff#offset_24g_pairing_sm
+mem_24g_RC_head_ptr+182:00 48 60 00 00 00 00 00#offset_24g_enter_hibernate
+mem_24g_RC_head_ptr+257:10#offset_power_ctrl_txpwr_level0-5dbm
+mem_24g_RC_head_ptr+256:01#offset_power_ctrl_txpwr_level1 0dbm
+mem_24g_RC_head_ptr+255:02#offset_power_ctrl_txpwr_level2 3dbm
+
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/rtrivr_uuid.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/rtrivr_uuid.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/rtrivr_uuid.dat	(working copy)
@@ -0,0 +1,75 @@
+#attribute list: handle 2bytes, uuid 2bytes, length 1bytes, attribute Nbytes
+mem_le_att_list:
+
+#Primary service GAP ------
+01 00 00 28 02 00 18
+
+#Device name
+02 00 03 28 01 0a
+03 00 00 2a 0c 41 73 74 20 4c 45 20 4d 6f 75 73 65
+
+#Appearance
+04 00 03 28 01 02
+05 00 01 2a 02 c2 03 #3c2=hid mouse
+
+#Peripheral Preferred Connection Parameters
+06 00 03 28 01 02
+07 00 04 2a 08 06 00 06 00 64 00 2c 01 # interval 6ms, latency 100, timeout 300
+
+#Primary service GATT ------
+08 00 00 28 02 01 18
+
+#Service changed
+09 00 03 28 01 20
+0a 00 05 2a 00
+
+#Client Characteristic Configuration
+0b 00 02 29 02 00 00
+
+#Primary service TX power ------
+0c 00 00 28 02 04 18
+#Characteristic Tx power level
+0d 00 03 28 01 06
+0e 00 07 2a 01 00
+
+#Primary service Immediate alert ------
+0f 00 00 28 02 02 18
+#Characteristic Alert level
+10 00 03 28 01 04
+11 00 06 2a 01 00
+
+#Primary service UUID:f003 ------
+12 00 00 28 02 03 f0
+#Characteristic UUID:f803
+13 00 03 28 01 04
+14 00 03 f8 01 00
+
+
+#Primary service Link loss alert ------
+15 00 00 28 02 03 f0
+#Characteristic Alert level
+16 00 03 28 01 0a
+17 00 06 2a 01 00
+
+#Primary service UUID:f002 ------
+18 00 00 28 02 02 f0
+#Characteristic UUID:f802
+19 00 03 28 01 12
+1a 00 02 f8 01 28
+1b 00 02 29 02 00 00
+
+#Primary service Battery ------
+1c 00 00 28 02 0f 18
+#Characteristic Battery level
+1d 00 03 28 01 12
+1e 00 19 2a 01 38
+
+
+#End of Attribute list
+00 00
+
+mem_le_adv_data_len:1b
+mem_le_adv_data:0c 09 52 74 72 69 76 72 5f 52 36 32 31 03 19 40 02 02 01 05 02 0a 00 03 03 00 f0
+mem_le_scan_data_len:00
+mem_le_adv_param:00 08 00 08 00 01 00 00 00 00 00 00 00 07 00
+mem_le_adv_enable:01
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/shutter.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/shutter.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/shutter.dat	(working copy)
@@ -0,0 +1,229 @@
+
+
+mem_shutter_bluetooth_type:
+01
+
+
+mem_le_lap:72 31 20 98 07 2a
+mem_le_name_len:
+'Shutter 1021s
+
+mem_lap:21 00 24 00 20 00
+mem_local_name_length:#0b
+#mem_local_name:
+'ZRP Shutter
+
+mem_classic_shutter_random_mac_offset_addr:
+30 00
+
+mem_shutter_config_eeprom_offset_addr:
+00 00
+
+mem_shutter_config_enable:
+00
+
+mem_shutter_config_otp_base_address:
+fb 05
+
+mem_shutter_config_size:20
+
+mem_shutter_config_user_otp_address:
+00 00
+#da 05
+
+mem_key0_press:
+01 00
+mem_key0_release:
+06 00
+
+mem_key1_press:
+01 00
+mem_key1_release:
+06 00
+
+mem_key2_press:
+07 00
+mem_key2_release:
+08 00
+
+mem_ui_button_gpio:ff
+mem_shutter_hard_soft_switch_case:00
+mem_shutter_soft_switch_button_gpio:
+08
+mem_power_param_ptr:
+mem_shutter_soft_switch_power_state
+mem_shutter_soft_switch_power_state:
+00 #mem_shutter_soft_switch_power_state
+14 #mem_shutter_soft_switch_poweron_time
+20 #mem_shutter_soft_switch_poweroff_time
+
+
+mem_lpm_mode:01
+mem_lpm_interval:00 01
+mem_lpm_overhead:08
+mem_lpm_mult:05
+mem_lpm_mult_timeout:02
+
+mem_shutter_config_select_gpio1:09 0a 0b
+
+mem_sniff_param_interval:30 00
+01
+00
+mem_unsniff2sniff_timer:0a
+
+mem_ble_shutter_reconn_blink_on_time:
+96 00
+96 00
+
+mem_ble_shutter_discovery_blink_on_time:
+96 02
+96 02
+
+
+mem_ble_shutter_interval_min_new:
+10 00
+20 00
+02 00
+2c 01
+
+mem_ui_led_struct_num:01
+mem_ui_led_struct_ptr:mem_shutter_led_struct_app_led
+
+mem_shutter_led_struct_app_led:
+00		#type:stop blink
+00		#blink count:no blink
+1b		#led gpio number:GPIO01
+a0 01	#led blink light time
+a0 01	#led blink dark time
+00 00	#call back function when light time
+00 00	#call back function when dark time
+
+#mem_shutter_power_off_led_style
+01		#type:start blink
+07		#blink count:no blink
+1b		#led gpio number:GPIO01
+a0 03	#led blink light time
+a0 03	#led blink dark time
+00 00	#call back function when light time
+00 00	#call back function when dark time
+
+
+mem_ble_shutter_reconn_dav_interval:10 00	#100ms
+mem_ble_shutter_discovery_adv_interval:40 01
+mem_le_adv_interval:40 01 
+mem_ble_shutter_reconn_timeout:50 00		#8s
+
+mem_device_option:09
+mem_le_adv_channel_map:07 
+mem_le_adv_enable:00
+
+mem_classic_shutter_discovery_timeout:
+00 FF	#mem_classic_shutter_discovery_timeout
+00 FF	#mem_classic_shutter_connect_timeout
+00 FF	#mem_ble_shutter_discovery_timeout
+00 FF	#mem_ble_shutter_connect_timeout
+	
+
+
+mem_queue_ptr: mem_queue_each_size
+
+mem_queue_each_size:
+01
+20
+
+
+mem_le_adv_data_len:1f
+mem_le_adv_data:
+02 01 05
+03 02 12 18
+03 19 c1 03
+mem_le_scan_data_len:1f
+mem_le_scan_data:
+0d 09 56 30 2d 53 68 75 74 74 65 72 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+
+
+
+mem_keyscan_ptr:mem_shutter_keyscan
+mem_shutter_key_num:02
+mem_shutter_key_conf0:
+#0
+18
+#1
+05
+#2
+0d
+
+##############NVRAM CONFIG##############
+
+mem_app_connection_options:17
+
+mem_nv_data_ptr:mem_shutter_nv_data
+mem_nv_data_number:05
+
+mem_class: 4025
+
+mem_sp_iocap_local:03 00 04
+mem_ssp_mode_flag:03
+mem_ssp_enable:01
+mem_ui_profile_supported:01
+
+
+mem_ptt:00
+mem_features:
+ff
+ff
+8f
+f8	#openACL3M fe
+9b	#AFHclose 83
+9d
+59
+83
+
+
+#####################################
+
+
+##########BT shutter ################
+
+
+
+
+
+
+
+
+################classic kb val list#######################
+
+################classic kb val list end#######################
+
+################ble kb val list#######################
+
+
+################ble kb val list end#######################
+
+
+##############BLE ATT LIST####################
+
+mem_ui_le_uuid_table:3a 91 #0x913A BLE_SHUTTER_GATT_LIST
+
+
+##############BLE ATT LIST END####################
+
+
+##############BT SDP LIST####################
+
+mem_eir_enable:01
+
+mem_all_uuid_16bits: 
+06
+03#Type: Complete list of 16-bit UUIDs
+1100  0001 0210 2411 0012 0100
+
+mem_all_uuid_128bits:
+00
+
+mem_ui_uuid_table:b8 92 #0x92B8 CLASSIC_SHUTTER_SDP_LIST
+
+##############BT SDP LIST END####################
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/sim.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/sim.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/sim.dat	(working copy)
@@ -0,0 +1,16 @@
+mem_page_window:20 00
+mem_page_to:00 20
+mem_pscan_window:00 02
+mem_iscan_window:00 02
+mem_pscan_interval:00 08
+mem_lap:01 02 03
+mem_lpm_xtalcnt:03 0a 1b af 07
+#mem_lpm_hibernate_switch:08
+mem_fcomp_mul:02
+mem_fcomp_div:24
+
+
+mem_patch00:01
+
+4580:ff
+mem_rf_init_ptr:80 45		
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/spp.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/spp.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/spp.dat	(working copy)
@@ -0,0 +1,206 @@
+#device option
+mem_device_option:04
+
+#spp uuid
+mem_uuid_list:
+04
+10
+02
+12
+00
+01
+00
+00
+01
+00
+01
+00
+01
+36
+00
+5a
+09
+00
+00
+0a
+00
+01
+00
+01
+09
+00
+01
+35
+03
+19
+12
+00
+09
+00
+04
+35
+0d
+35
+06
+19
+01
+00
+09
+00
+01
+35
+03
+19
+00
+01
+09
+00
+05
+35
+03
+19
+10
+02
+09
+00
+09
+35
+08
+35
+06
+19
+12
+00
+09
+01
+00
+09
+02
+00
+09
+01
+03
+09
+02
+01
+09
+05
+ac
+09
+02
+02
+09
+02
+39
+09
+02
+03
+09
+06
+44
+09
+02
+04
+28
+01
+09
+02
+05
+09
+00
+02
+03
+11
+01
+00
+03
+01
+00
+00
+01
+00
+03
+36
+00
+4e
+09
+00
+00
+0a
+00
+01
+00
+03
+09
+00
+01
+35
+03
+19
+11
+01
+09
+00
+02
+0a
+00
+00
+00
+00
+09
+00
+04
+35
+0c
+35
+03
+19
+01
+00
+35
+05
+19
+00
+03
+08
+01
+09
+00
+05
+35
+03
+19
+10
+02
+09
+00
+06
+35
+09
+09
+65
+6e
+09
+00
+6a
+09
+01
+00
+09
+01
+00
+25
+0a
+53
+50
+50
+20
+73
+6c
+61
+76
+65
+00
+00
+00
+01
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/ssp.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/ssp.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/ssp.dat	(working copy)
@@ -0,0 +1,261 @@
+#memk, for reva-c only
+4b00:
+98    
+2f    
+8a    
+42    
+91    
+44    
+37    
+71    
+CF    
+FB   
+C0   
+B5    
+A5    
+DB   
+B5    
+E9    
+5B    
+C2    
+56   
+39    
+F1    
+11    
+F1    
+59    
+A4    
+82    
+3F    
+92    
+D5    
+5E    
+1C    
+AB    
+98    
+AA    
+07    
+D8    
+01   
+5B    
+83   
+12    
+BE    
+85   
+31    
+24    
+C3    
+7D    
+0C    
+55    
+74   
+5D    
+BE    
+72    
+FE    
+B1    
+DE    
+80    
+A7    
+06    
+DC    
+9B    
+74    
+F1    
+9B    
+C1    
+C1    
+69    
+9B    
+E4    
+86    
+47    
+BE    
+EF    
+C6    
+9D    
+C1    
+0F    
+CC    
+A1    
+0C    
+24    
+6F    
+2C    
+E9    
+2D    
+AA    
+84    
+74    
+4A    
+DC    
+A9    
+B0    
+5C    
+DA    
+88    
+F9    
+76    
+52    
+51    
+3E    
+98    
+6D    
+C6    
+31    
+A8    
+C8    
+27   
+03    
+B0    
+C7    
+7F    
+59    
+BF    
+F3    
+0B    
+E0    
+C6    
+47    
+91    
+A7    
+D5    
+51   
+63    
+CA    
+06    
+67    
+29    
+29    
+14    
+85    
+0A    
+B7    
+27    
+38    
+21    
+1B    
+2E    
+FC    
+6D   
+2C    
+4D    
+13    
+0D    
+38    
+53    
+54    
+73    
+0A    
+65    
+BB   
+0A   
+6A    
+76    
+2E   
+C9   
+C2   
+81    
+85   
+2C   
+72    
+92    
+A1    
+E8    
+BF    
+A2    
+4B    
+66    
+1A    
+A8    
+70    
+8B    
+4B    
+C2    
+A3    
+51    
+6C    
+C7    
+19    
+E8    
+92    
+D1    
+24    
+06   
+99   
+D6   
+85   
+35   
+0E    
+F4  
+70    
+A0    
+6A    
+10    
+16    
+C1    
+A4    
+19    
+08   
+6C    
+37    
+1E    
+4C    
+77    
+48    
+27    
+B5    
+BC    
+B0    
+34    
+B3    
+0C    
+1C    
+39    
+4A    
+AA    
+D8   
+4E    
+4F    
+CA   
+9C   
+5B    
+F3   
+6F    
+2E   
+68    
+EE    
+82   
+8F   
+74    
+6F   
+63    
+A5    
+78    
+14    
+78    
+C8    
+84   
+08    
+02   
+C7    
+8C   
+FA   
+FF    
+BE    
+90   
+EB    
+6C    
+50   
+A4   
+F7    
+A3    
+F9    
+BE    
+F2    
+78    
+71    
+C6    
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/test.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/test.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/test.dat	(working copy)
@@ -0,0 +1,40 @@
+mem_patch06:0c
+mem_patch0e:80
+mem_patch10:20
+
+mem_iscan_window:20 00
+mem_iscan_interval:00 03
+mem_pscan_window:12 00
+mem_pscan_interval:00 08
+
+
+
+mem_lap:77 11 00 33 00 00
+mem_le_lap:88 11 00 33 00 00
+mem_device_option:07
+mem_local_name_length:
+'REVB
+
+mem_seqi:7f
+
+mem_lpm_mult:20
+mem_lpm_mult_timeout:03
+mem_lpm_overhead:05
+mem_scan_mode:03
+mem_le_adv_enable:00
+mem_le_scan_enable:00
+
+mem_class:cc 25 00
+mem_features:
+ff
+ff
+8f
+f8	#fe--EDR  F8--BR
+9b	#AFHclose 83
+9d
+59
+83
+
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/usb.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/usb.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/sched/usb.dat	(working copy)
@@ -0,0 +1,51 @@
+mem_patch10:20 
+mem_patch11:40
+mem_patch18:10
+mem_patch1f:01
+
+
+#usb initial
+mem_devicedesc+9: 12 24#VID
+mem_devicedesc+11: 12 18#PID
+mem_string0:04 04 03 09 04
+mem_string1:
+'YICHIP
+
+#string length less than 32
+mem_string2:
+'Wireless Mouse
+mem_string3:
+'b120300001
+
+mem_usb_tx_interval:00
+#usb initial end
+
+
+#24g rx init
+mem_tx_power:02
+mem_24g_mode:02#rx
+mem_24g_pair_mode:00
+mem_24g_no_ack:00#no ack
+mem_24g_rx_window:30 75#rx
+mem_24g_hop_interval:2a
+mem_24g_ackpayload_enable:00#ack payload enable
+mem_24g_ch_map1:00 13 2c 42
+mem_24g_ch_map2:06 15 36 48
+mem_24g_ch_map3:0f 1a 3a 4c
+mem_24g_ch_map4:11 23 31 4d
+mem_24g_paring_addr:20 15 10 05
+mem_24g_rx_addr:36 20 04 07
+#24g rx init end
+
+mem_rf_init_data_new:
+# tx power
+4b ba
+55 d0
+56 e0
+57 88
+58 3c
+59 10
+ff
+mem_rf_init_ptr:mem_rf_init_data_new
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/DeleteNote.pl
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/DeleteNote.pl	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/DeleteNote.pl	(working copy)
@@ -0,0 +1,27 @@
+
+#print "输入注释的标志:";
+
+#chomp ($text = <STDIN>);
+
+#print $text;
+
+###########################
+#该脚本的功能为删除，#为注释的注释代码。
+
+$Sched_path=$ARGV[0];
+
+open(Sched,$Sched_path)||die("Cannot open files\n");
+@sched=<Sched>;
+close(Sched);
+
+foreach $sched(@sched)
+{
+	$sched_begin = $sched;
+	@Sched = split(/[#]+/, $sched);
+	chomp @Sched[0];
+	$sched = @Sched[0]."\n";
+}
+
+open(Sched,">$Sched_path")||die("Cannot open files\n");
+print Sched @sched;
+close(Sched);
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/crc16.exe
===================================================================
Cannot display: file marked as a binary type.
svn:mime-type = application/octet-stream

Property changes on: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/crc16.exe
___________________________________________________________________
Added: svn:mime-type
## -0,0 +1 ##
+application/octet-stream
\ No newline at end of property
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/crc16.pl
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/crc16.pl	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/crc16.pl	(working copy)
@@ -0,0 +1,27 @@
+$debug = 0;
+$crc = 0xffff;
+$i = 0;
+$offset = 0xffff;
+$source_file = $ARGV[0];
+$offset = $ARGV[1];
+
+open(EEP,"$source_file") or die $!;
+
+while (<EEP>) {    
+	$c = hex();
+
+  if($i >= $offset){
+  	if($debug){printf "%02x\t", $c;}
+  	$crc  = ($crc >> 8) | ($crc << 8);
+		$crc ^= $c & 0xff;
+		$crc ^= ($crc & 0xff) >> 4;
+		$crc ^= $crc << 12;
+		$crc ^= ($crc & 0xff) << 5;
+		$crc &= 0xffff;
+  }
+  $i ++;
+  if($debug){printf "%02x\t", $crc;}
+  printf "%02x\n", $c;
+}
+
+printf "%02x\n%02x\n", (($crc >> 8) & 0xff),($crc & 0xff);
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/eeprom2fulleeprom.exe
===================================================================
Cannot display: file marked as a binary type.
svn:mime-type = application/octet-stream

Property changes on: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/eeprom2fulleeprom.exe
___________________________________________________________________
Added: svn:mime-type
## -0,0 +1 ##
+application/octet-stream
\ No newline at end of property
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/eeprom2fulleeprom.pl
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/eeprom2fulleeprom.pl	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/eeprom2fulleeprom.pl	(working copy)
@@ -0,0 +1,18 @@
+
+
+
+$source_file = $ARGV[0];
+$eeprom_size = $ARGV[1];
+
+open(EEP,"$source_file") or die("cannot open files");
+for ($i = 1 ;$i<=$eeprom_size*128-2;$i++)
+{
+
+    while (<EEP>) { 
+        $c = hex();
+        printf "%02x\n", $c;
+        $i++;
+    }
+
+	printf "FF\n";
+}
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/get_link_key.bat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/get_link_key.bat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/get_link_key.bat	(working copy)
@@ -0,0 +1,19 @@
+@echo off
+e pu
+if exist "link_key.txt" (
+echo ERROR:it had link_key.txt 
+echo ERROR:please delete link_key.txt
+goto end) else (goto get_link_key)
+
+:get_link_key
+e 41bel10>link_key.txt
+
+perl get_link_key.pl
+del link_key.txt
+
+goto end
+
+
+:end
+
+pause
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/get_link_key.pl
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/get_link_key.pl	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/get_link_key.pl	(working copy)
@@ -0,0 +1,31 @@
+open(LINK_KEY,"link_key.txt") || die ("cannot open link_key.txt");
+
+@link_key = <LINK_KEY>;
+
+close(LINK_KEY);
+
+print @link_key;
+@Temporary_variables = split (/41b0 :/,@link_key[1]);
+
+@link_key_low = split (/[ \n\t]/,@Temporary_variables[1]);
+
+@Temporary_variables = split (/41c0 :/,@link_key[2]);
+
+@link_key_high = split (/[ \n\t]/,@Temporary_variables[1]);
+
+@link_key = (@link_key_low,@link_key_high);
+
+#print "#########################\n";
+#print "#########################\n";
+#print "#########################\n";
+print "link key :\n";
+
+print "merlinII :";
+for($i=0;$i<=@link_key-1;$i++) {
+    print $link_key [$i];
+}
+print "\nfrontline:";
+for ($i=@link_key;$i>=0;$i--){
+	print $link_key[$i];
+	}
+print "\n";
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/memalloc.pl
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/memalloc.pl	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/memalloc.pl	(working copy)
@@ -0,0 +1,74 @@
+#!/usr/bin/perl
+$path="output/bt_format.meta";
+open file, $path;
+@f = <file>;
+close file;
+open file, ">$path";
+$path =~ s/\/.*//;
+open file1, ">output/memmap.format";
+$xaddr = 0x4000;
+$addr = 0;
+if($#ARGV == 1) {
+	$addr = hex($ARGV[0]);
+	$xaddr = hex($ARGV[1]);
+}
+for($i = 0;$i < @f;$i++) { $cmalloc[$i] = (); }
+for($i = 0;$i < @f;$i++) { 
+	$_ = $f[$i];
+	$start = 1 if(/^\s*memalloc\s*\(\s*$/);
+	$start = 2 if(/^\s*xmemalloc\s*\(\s*$/);
+	$start = 3 if(/^\s*omemalloc\s*\(\s*$/);
+	$start = 10 + $1 if(/^\s*cmemalloc\s+([0-9])\s*\(\s*$/);
+	if($start) {
+		if(/^\s*([0-9]+)\s+([a-zA-Z0-9_]+)\s*(.*)$/) {
+			if($start == 1) {
+				$str = sprintf "0x%04x %s%s\n", $addr, $2, $3;
+				$addr += $1;
+				$bstr .= $str;
+				$sstr .= $str;
+			} elsif($start == 2) {
+				$str = sprintf "0x%04x %s%s\n", $xaddr, $2, $3;
+				$xaddr += $1;
+				$xstr .= $str;
+			} else {
+				push @ostr, $_;
+			}
+		}
+		if(/^\s*\)\s*$/) {
+			if(@ostr > 0) {
+				if($start == 3) {
+					push @omalloc,[@ostr];
+				} elsif($start > 9) {
+					$j = $start - 10;
+					push @{$cmalloc[$j]},@ostr;
+				} 
+			}
+			$start = 0;
+			@ostr = ();
+		}
+	} else {
+		$sstr .= $_;
+	}
+}
+for($i = 0;$i <= $#cmalloc;$i++) {
+	push @omalloc,$cmalloc[$i];
+#	for($j = 0;$j <= $#{$cmalloc[$i]};$j++) {		print $cmalloc[$i][$j];	}
+}
+
+$xend = $xaddr;
+for($i = 0;$i <= $#omalloc;$i++) {
+	for($j = 0, $oaddr = $xaddr;$j <= $#{$omalloc[$i]};$j++) {
+		if($omalloc[$i][$j] =~ /^\s*([0-9]+)\s+([a-zA-Z0-9_]+)\s*(.*)$/) {
+			$str = sprintf "0x%04x %s%s\n", $oaddr, $2, $3;
+			$oaddr += $1;
+			$xstr .= $str;
+		}
+	}
+}
+$xend = $oaddr if($oaddr > $xend);
+print file $xstr, $sstr;
+print file1 $bstr, $xstr;
+close file;
+close file1;
+printf "\nLast allocated address is %04x\n", $addr;
+printf "\nLast allocated xmem address is %04x\n", $xend;
\ No newline at end of file
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/mergepatch.pl
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/mergepatch.pl	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/mergepatch.pl	(working copy)
@@ -0,0 +1,44 @@
+#!/usr/bin/perl
+$defs = "";
+$fmt = 0;
+
+
+sub parseif {
+	my($fname) = @_;
+	open file, $fname;
+	@f = <file>;
+	close file;
+	open file, ">$fname";
+	@valid = (1);
+	for($i = 0;$i < @f;$i++) { 
+		$_ = $f[$i];
+		$defs .= $1 . " " if(/^define\s+(\w+)\s*/);
+		if(/^ifdef\s+(\w+)\s*/) {
+			push @valid, ($defs =~ /(^|\s)$1(\s|$)/ ? 1 : 0) & $valid[$#valid];
+		} elsif(/^ifndef\s+(\w+)\s*/) {
+			push @valid, ($defs =~ /(^|\s)$1(\s|$)/ ? 0 : 1) & $valid[$#valid];
+		} elsif(/^else/) {
+			printf "%s\nelse without if at line %d\n", $f[$i - 3], $i if($#valid == 0);
+			$valid[$#valid] = (1 - $valid[$#valid]) & $valid[$#valid - 1];
+		} elsif(/^endif/) {
+			printf "%s\nendif without if at line %d\n", $_, $i if($#valid == 0);
+			pop @valid;
+		} elsif($valid[$#valid]) {
+			if(/^include\s+(.+)\s*/) {
+				open file2, "program/$1";
+				@f2 = <file2>;
+				close file2;
+				splice(@f, $i + 1, 0, @f2);
+			} else {
+				print file $_;
+			}
+		}
+	}
+	close file;
+}
+
+parseif("output/bt_program23.meta");
+$fmt = 1;
+parseif("output/bt_format.meta");
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/sortsched.pl
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/sortsched.pl	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/sortsched.pl	(working copy)
@@ -0,0 +1,163 @@
+
+
+$Sched_path=$ARGV[0];
+$Sched_test_path=$ARGV[1];
+
+open(Sched,"$Sched_path")||die("Cannot open files1\n");
+@sched=<Sched>;
+@sched[-1] = "";
+close(Sched);
+#open(Sched_test,">ResultsFile.rom")||die("Cannot open files2\n");
+#print Sched_test ("");
+#close (Sched_test);
+#open(Sched_test,">ResultsFile.rom")||die("Cannot open file3s\n");
+open(Sched_test1,">$Sched_test_path")||die("Cannot open files4\n");
+#@Sched_test=<Sched_test>;
+@Data[0]="";
+$Data_num=0;
+@Address_num;
+@OriginalRecord;
+foreach $sched (@sched)
+{
+	if($sched=~/[0-9a-fA-F][0-9a-fA-F][0-9a-fA-F][0-9a-fA-F]:/)
+	{
+		#$lap_flag = 0;
+		#$le_lap_flag = 0;
+		#if($sched=~/40a0:/)
+		#{
+		#	$lap_data = $sched;
+		#	$lap_flag = 1;
+		#}
+		#elsif($sched =~ /44a0:/)
+		#{
+		#	$le_lap_data = $sched;
+		#	$le_lap_flag = 1;
+		#}
+		#else
+		#{
+			$Data_num++;
+			@OriginalRecord[$Data_num]=$sched;
+			@snap_variable=split(/[#\n]/,$sched);
+			@Data[$Data_num]=@snap_variable[0]."\n";
+		#}
+	}
+	else
+	{
+		#if($lap_flag == 1)
+		#{
+		#	$lap_data .= $sched;
+		#}
+		#elsif($le_lap_flag == 1)
+		#{
+		#	$le_lap_data .= $sched;
+		#}
+		#else
+		#{
+			@OriginalRecord[$Data_num].=$sched;
+			@snap_variable=split(/[#\n]/,$sched);
+			@Data[$Data_num].=@snap_variable[0]."\n";
+		#}
+	}
+}
+@sort_Data = sort(@Data);
+@OriginalRecord=sort(@OriginalRecord);
+$PreviousADDR=0;
+$CurrentADDR=0;
+$PreviousData="";
+$CurrentData="";
+$I=0;
+$len_sort_Data=@sort_Data;
+$NextADDR="";
+for($i=0;$i<$len_sort_Data;$i++)
+{
+	$sort_Data=@sort_Data[$i];
+	@snap_variable=split(/:/,$sort_Data);
+	$WData=@snap_variable[1];
+	
+	if($WData =~ /[1-9a-fA-F]/ && hex(@snap_variable[0]) >= 16384){
+	$WADDR=@snap_variable[0];
+	@sort_Data[$i]=@OriginalRecord[$i];
+	@LLL[$i]=0;
+	if($NextADDR eq $WADDR){
+		@snap_variable=split(/[0-9a-fA-F][0-9a-fA-F][0-9a-fA-F][0-9a-fA-F]:/,@OriginalRecord[$i]);
+		@sort_Data[$i]=@snap_variable[1];
+		@LLL[$i]=1;
+	}
+	if(@LLL[$i]==0 && hex($PreviousADDR)+6>hex($WADDR)){
+		$LEN=hex($WADDR) - hex($NextADDR);
+		#print $LEN;
+		for($j=0;$j<$LEN;$j++)
+		{
+			@sort_Data[$i-1].="00 "
+		}
+		@sort_Data[$i-1].="\n";
+		@snap_variable=split(/[0-9a-fA-F][0-9a-fA-F][0-9a-fA-F][0-9a-fA-F]:/,@OriginalRecord[$i]);
+		@sort_Data[$i]=@snap_variable[1];
+		@LLL[$i]=1;
+	}
+	if($PreviousADDR eq $WADDR){
+		@sort_Data[$i-1]="";
+		if(@LLL[$i-1]==1){
+			@snap_variable=split(/[0-9a-fA-F][0-9a-fA-F][0-9a-fA-F][0-9a-fA-F]:/,@OriginalRecord[$i]);
+			@sort_Data[$i]=@snap_variable[1];
+			@LLL[$i]=1;
+		}
+	}
+	else{
+		@DataNum=split(/[0-9a-fA-F][0-9a-fA-F]/,$WData);
+		$DataNum=@DataNum;
+		$PreviousADDR=$WADDR;
+		#@sort_Data[$i].="      ".$DataNum."\n";
+		$NextADDR = &hex_add($WADDR,$DataNum);
+	}
+	}
+	else{
+		if(hex(@snap_variable[0]) >= 16384)
+		{
+			@sort_Data[$i]="";
+		}
+	}
+	#@sort_Data[$i].="      ".$NextADDR."\n";
+	#$sort_Data =~ s/\n//;
+	#$sort_Data.="\n";
+}
+#print Sched_test @OriginalRecord;
+#print Sched_test1 $lap_data;
+#print Sched_test1 $le_lap_data;
+print Sched_test1 @sort_Data;
+#print  $lap_data;
+#print  $le_lap_data;
+#for($i=0;$i<$len_sort_Data;$i++)
+#foreach $sort_Data (@sort_Data)
+#{	
+	#$sort_Data=@sort_Data[$i];
+	#print Sched_test $PreviousData;
+	#@snap_variable=split(/:/,$sort_Data);
+	#$CurrentADDR=@snap_variable[0];
+	#$CurrentData=$sort_Data;
+	#print ($CurrentADDR);
+	#if($CurrentADDR-$PreviousADDR==1)
+	#{
+	#	$CurrentVal=@snap_variable[1];
+	#	@snap_variable=split(/\n/,$PreviousData);
+		
+	#	$PreviousData.=" ".$CurrentVal;
+	#	$CurrentData=$PreviousData;
+	#	@sort_Data[$i]="";
+	#	@sort_Data[$i-1]=$CurrentData;
+		#print ($CurrentData."\n");
+	#}
+	#$PreviousADDR=$CurrentADDR;
+	#$PreviousData=$CurrentData;
+	#print Sched_test $CurrentData;
+#}
+#print Sched_test @sort_Data;
+#close(Sched_test);
+close(Sched_test1);
+
+sub hex_add{
+	my($ADDR,$Len)=@_;
+	$data=hex($ADDR);
+	$data=$data+$Len-1;
+	return(sprintf("%04x",$data));
+}
\ No newline at end of file
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/transform_name2addr.pl
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/transform_name2addr.pl	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/16M_Standard/util/transform_name2addr.pl	(working copy)
@@ -0,0 +1,107 @@
+###########################
+#该脚本的功能为：将文件中的寄存器名字改成寄存器地址
+#两者之间的映射关系为$Memmap_path文件中的映射表
+
+$Sched_path=$ARGV[0];
+$Sched_test_path=$ARGV[1];
+$Memmap_path=$ARGV[2];
+open(Sched,$Sched_path)||die("Cannot open files\n");
+@sched=<Sched>;
+close(Sched);
+open(Sched_test,">$Sched_test_path");
+print Sched_test ("");
+close(Sched_test);
+open(Sched_test,">$Sched_test_path");
+open(Memmap,$Memmap_path)||die("Cannot open files\n");
+@memmap=<Memmap>;
+close(Memmap);
+$type_add=0;
+$type_exchange=0;
+foreach $sched(@sched)
+{
+	$sched_begin = $sched;
+	@Sched = split(/[#]+/, $sched);
+	$sched = @Sched[0];
+	@Sched[0] = "";
+	if($sched =~ /mem[\w]+/)
+	{
+		@memmap_name = split(/[\W]+/, $sched);
+		foreach $memmap_name(@memmap_name)
+		{
+			if($memmap_name =~ /mem[\w]+/)
+			{
+				$Memmap_name=$memmap_name;
+				$type_add = 0;
+				$type_exchange = 0;
+				if($sched =~ /$Memmap_name[+]/)
+				{
+					$type_add = 1;#修改的类型第一种，加
+					@ADD_Num=split(/[^0-9\+xa-fA-F]/,$sched);
+					foreach $ADD_Num(@ADD_Num)
+					{
+						if($ADD_Num =~ /\+/)
+						{
+							if($ADD_Num =~ /0x/)
+							{
+								@add_num = split(/\+0x/,$ADD_Num);
+								$add_num1 =@add_num[1];
+								$add_num_begin = "0x".$add_num1;
+								$add_num = hex($add_num1);
+							}
+							else
+							{
+								@add_num = split(/\+/,$ADD_Num);
+								$add_num1 =@add_num[1];
+								$add_num_begin = $add_num1;
+								$add_num = int($add_num1);
+							}
+						}#$add_num是匹配出的需要加的数值，字符串形式
+					}
+				}
+				if($sched =~ /[:] *\t*$Memmap_name/)
+				{
+					$type_exchange = 1;#修改的类型第二种，高低位交换
+				}
+				foreach $memmap(@memmap)
+				{
+					if($memmap =~ /$Memmap_name/ && $memmap !~ /$Memmap_name[\w]+/)
+					{
+						@Memmap=split(/[ \t\n]/,$memmap);
+						$memmap_address=@Memmap[0];
+						$memmap_address =~ s/0x//;
+						if($type_add==1)
+						{
+							$memmap_address_D = hex($memmap_address);
+							$memmap_address_D = $memmap_address_D+$add_num;
+							$memmap_address_H = sprintf("%x", $memmap_address_D);
+							$memmap_address = $memmap_address_H;
+							$memmap_address_add_finish = $memmap_address;
+							$sched_begin =~ s/$Memmap_name\+$add_num_begin/$memmap_address/;
+						}
+						if($type_exchange==1)
+						{
+							$memmap_address_High = substr($memmap_address,0,2);
+							$memmap_address_Low = substr($memmap_address,2,2);
+							$memmap_address = $memmap_address_Low." ".$memmap_address_High;
+							if($type_add==0)
+							{
+								$sched_begin =~ s/$Memmap_name/$memmap_address/;
+							}
+							else
+							{
+								$sched_begin =~ s/$memmap_address_add_finish/$memmap_address/;
+							}
+						}
+					}
+				}
+				$sched_begin =~ s/$Memmap_name/$memmap_address/;
+			}
+		}
+		printf Sched_test ("%s",$sched_begin);
+	}
+	else
+	{
+		printf Sched_test ("%s",$sched_begin);
+	}	
+}
+close(Sched_test);
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/c
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/c	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/c	(working copy)
@@ -0,0 +1,99 @@
+#!/bin/bash
+
+gensched () {
+if [ -f output/sched.rom ];then rm output/sched.rom; fi
+while [ 1 ];do
+	if [ -n "$1" ];then cat sched/$1.dat >> output/sched.rom; else return; fi
+	shift
+done
+}
+
+#enckey="-k 00000000000000000000000000000000"
+
+cd ${0%/*}
+for f in program/*.prog 
+  do if [[ ! $f =~ "bt.prog" && ! $f =~ "patch.prog" && ! $f =~ "sim.prog" ]] ; then progs="$progs $f"; fi; done
+cat program/bt.prog $progs  > output/bt_program23.meta
+
+case $1 in
+s)
+#	gensched sim usb
+	gensched sim
+#	enckey="-k key -i iv"
+	sed '1,4 c define REVD\ndefine ROMCODE\ndefine SIM' -i output/bt_program23.meta;;
+p)
+	echo 'mem_patch00:0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000' > output/sched.rom
+	echo 'mem_lap:00 00 00 00 00 00' >> output/sched.rom
+	sed '3 d' -i output/bt_program23.meta;;
+f)
+	gensched test usb fpga
+	enckey="-k key"
+	sed '2 c define FPGA' -i output/bt_program23.meta;;
+t)
+	echo test;gensched test 109x;;
+d)
+        gensched 109x usb
+	sed '2 c define DONGLE' -i output/bt_program23.meta;;
+m)
+        gensched 109x mouse
+	sed '2 c define MOUSE' -i output/bt_program23.meta;;
+esac
+
+
+for f in format/*.format; do if [[ ! $f =~ "bt.format" && ! $f =~ "command.format" ]] ; then fmts="$fmts $f"; fi; done
+cat format/bt.format $fmts format/command.format > output/bt_format.meta
+perl $UTIL/mergepatch.pl 
+perl $UTIL/memalloc.pl
+cd output
+osiuasm bt_program23 -O-W
+sed 's/\(.*\)\r/\1/' -i bt_program23.meta 
+
+
+defs=( FPGA SIM ROMCODE BLE REVA REVB )
+for i in $(seq 0 $((${#defs[@]} - 1))) ; do
+	grep  "^define ${defs[$i]}$" bt_program23.meta -q
+	tsts[$i]=$?
+done
+
+#for i in $(seq 0 $((${#defs[@]} - 1))) ; do echo test ${tsts[$i]};done
+
+geneep -n $enckey
+
+if [[ $2 == "o" ]];then exit;fi
+
+if [ ${tsts[1]} -eq 0 ] ; then
+	sed '8193,24576d' < romcode.rom > romcode0.rom
+	sed '1,8192d' < romcode.rom > romcode1.rom
+	cp romcode0.rom romcode1.rom ../../sim
+	cp romcode.rom ramcode.rom ../../sim
+	if [ -f eeprom.dat ] ; then cp eeprom.dat ../../sim/ ; fi
+	if [ -f otp.rom ] ; then sed '7 c 1' < otp.rom > ../../sim/otp.rom ; fi
+else
+	if [ ${tsts[0]} -eq 0 ] ; then
+		if [ ${tsts[2]} -eq 0 ] ; then
+			sed '8193,24576d' < romcode.rom > romcode0.rom
+			sed '1,8192d' < romcode.rom > romcode1.rom
+			perl $UTIL/rom2mif.pl < romcode.rom > romcode.mif; mv romcode.mif  ../../fpga/
+			echo fpga
+			if [ -f otp.rom ] ; then perl $UTIL/rom2mif.pl < otp.rom > otp.mif; mv otp.mif ../../fpga/ ; fi
+			if [[ $2 == o ]] ; then exit; fi
+			e ku; e hu ramcode.rom 0
+			e su sched.rom;exit 
+		fi
+#		if [[ $1 == "f" ]] ; then 	../../fpga/p u;sleep 1; e su sched.rom;exit; fi
+	fi
+	if [ ! -s ramcode.rom ] ; then exit; fi
+	if [[ $2 =~ e ]];then 
+		e pu;cd ..;e ep;e ku
+	elif [[ $2 =~ [f] ]];then 
+		e ku;e hu romcode.rom 2000;e hu ramcode.rom 0; e su sched.rom;e ku
+	else
+		if [ -f sched.rom ]; then
+			e ku; e hu ramcode.rom 0;e su sched.rom;e pu;e cu
+		else
+			e ku;e hu
+		fi
+	fi
+fi
+
+cd ..
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/d.bat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/d.bat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/d.bat	(working copy)
@@ -0,0 +1,6 @@
+call do.bat eep
+e pu
+e 8081 10
+e 8075 0000
+e ep
+e ku
\ No newline at end of file
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/do.bat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/do.bat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/do.bat	(working copy)
@@ -0,0 +1,162 @@
+@set FPGA_PATH=fpgajic\fpga
+@set ROM_PATH=.
+@set MV_PATCH=mv\src\yichip
+@set YC_PATCH_FILE=yc_patch_yc1021.h
+@set enc=1
+@set enckey=0000000000000000
+@rem set device_option=shutter
+@rem set device_option=antilost
+@rem set device_option=hci
+@rem set device_option=kb
+@set device_option=mouse
+@rem set device_option=le_kb
+@rem set device_option=dongle
+@rem set device_option=module
+@rem set device_option=prcp
+@rem set device_option=car
+@rem set device_option=remote_car
+@echo off
+
+setlocal enabledelayedexpansion
+for /f %%f in ('dir /b /o program\*.prog') do @if not %%f==bt.prog if not %%f==patch.prog if not %%f==sim.prog set progs=!progs! program\%%f
+type program\bt.prog %progs% > output\bt_program23.meta
+for /f %%f in ('dir /b /o format\*.format') do @if not %%f==bt.format if not %%f==command.format set fmts=!fmts! format\%%f
+type format\bt.format %fmts% format\command.format > output\bt_format.meta
+perl util/mergepatch.pl output/bt_program23.meta
+perl util/memalloc.pl output/bt_format.meta
+
+cd output
+osiuasm bt_program23 -O-W
+
+if "%device_option%" equ "hci" (
+  copy ..\sched\hci_boot.dat ..\output\sched.rom
+) else if "%device_option%" equ "kb" (
+copy ..\sched\ssp.dat + ..\sched\kb.dat +  ..\sched\fpga.dat ..\output\sched.rom
+) else if "%device_option%" equ "le_kb" (
+  copy ..\sched\le_kb.dat + ..\sched\fpga.dat ..\output\sched.rom
+) else if "%device_option%" equ "mouse" (
+  copy ..\sched\109x.dat + ..\sched\mouse.dat ..\output\sched.rom
+) else if "%device_option%" equ "module" (
+  copy ..\sched\DM_module.dat + ..\sched\109x.dat ..\output\sched.rom
+) else if "%device_option%" equ "shutter" (
+  copy ..\sched\shutter.dat + ..\sched\109x.dat ..\output\sched.rom
+) else if "%device_option%" equ "antilost" (
+  copy ..\sched\antilost.dat + ..\sched\109x.dat ..\output\sched.rom
+) else if "%device_option%" equ "dongle" (
+  copy  ..\sched\109x.dat + ..\sched\usb.dat ..\output\sched.rom
+) else if "%device_option%" equ "prcp" (
+  copy ..\sched\Le_prcp.dat + ..\sched\fpga.dat ..\output\sched.rom
+) else if "%device_option%" equ "test" (
+  copy ..\sched\test.dat + ..\sched\fpga.dat ..\output\sched.rom
+) else if "%device_option%" equ "car" (
+  copy ..\sched\car.dat + ..\sched\109x.dat ..\output\sched.rom
+) else if "%device_option%" equ "remote_car" (
+  copy ..\sched\remote_car.dat + ..\sched\109x.dat ..\output\sched.rom
+) else (
+
+cd ..
+echo **********************************
+echo Error: illegal device_option !
+echo **********************************
+goto end
+) 
+
+if "%1" equ "eep" (
+	goto genromrevc
+)else (
+  goto downloadram
+)
+
+:geneeprom
+@rem echo on
+@echo Start to generate EEPROM code
+copy ..\sched\mouse.dat ..\output\sched.rom
+
+..\util\geneep ramcode.rom fwram.rom sched.rom %enc% %enckey% a
+perl ..\util\a1bugfix.pl
+osiuasm bt_program23 -O-W
+..\util\geneep ramcode.rom fwram.rom sched.rom %enc% %enckey% a
+goto gen_eep_end
+
+
+
+
+:genromrevb
+echo off
+@echo Start to generate EEPROM code
+..\..\regedr\geneep ramcode.rom fwram.rom sched.rom %enc% %enckey% b
+goto gen_eep_end
+
+
+:genromrevc
+echo off
+
+perl ..\util\DeleteNote.pl ..\output\sched.rom
+perl ..\util\transform_name2addr.pl ..\output\sched.rom ..\output\sched.rom ..\output\memmap.format
+perl ..\util\sortsched.pl ..\output\sched.rom ..\output\sched.rom
+
+@echo Start to generate EEPROM code
+
+geneep -n ramcode.rom sched.rom 0 %enckey% c
+
+ rem geneep -n -k key.txt
+
+cd ..\output
+
+echo eeprom.dat Generated......
+
+if "%device_option%" equ "module" (
+perl eeprom2hciimage_1021s.pl
+echo bt_patch.bin Generated......
+perl bin2array.pl > bt_patch.h
+echo bt_patch.h Generated......
+)
+
+
+:gen_eep_end
+cd ..
+echo **********************************
+echo EEPROM Generated.
+echo The Device is %device_option%. 
+echo Use command "e ep" to download EEPROM.
+echo **********************************
+goto end
+
+
+
+
+:genrom
+@rem echo on
+perl ..\util\rom2mif.pl romcode
+del ..\..\%FPGA_PATH%\romcode.mif
+copy .\romcode.mif ..\..\%FPGA_PATH%\romcode.mif
+perl ..\util\gen_patch_h.pl >%YC_PATCH_FILE%
+copy .\%YC_PATCH_FILE% ..\..\%MV_PATCH%\%YC_PATCH_FILE%
+copy .\%YC_PATCH_FILE% D:\work\yichip\mv_proj\src\inc\%YC_PATCH_FILE%
+cd ..\..\%FPGA_PATH%
+quartus_cdb btspi -c btspi --update_mif
+quartus_asm --read_settings_files=off --write_settings_files=off btspi -c btspi
+quartus_pgm -c USB-Blaster[USB-0] -m jtag -o "p;.\output\btspi.sof" 
+@echo bitstream_compression=on >1
+@echo memory_map_file=on >> 1
+quartus_cpf -c -o 1 -s EP3C55 -d EPCS16 output\btspi.sof output\btspi.jic  
+@rem quartus_pgm -c USB-Blaster[USB-0] -m jtag -o "pi;.\output\btspi.jic"   
+@del 1
+goto end
+
+
+
+:downloadram
+echo on
+@echo Start to download ram code
+e ku
+e hu
+e su sched.rom
+@echo **********************************
+@echo RAM CODE has been downloaded.
+@echo The Device is %device_option%. 
+@echo **********************************
+cd ..
+
+
+:end
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/Hid.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/Hid.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/Hid.format	(working copy)
@@ -0,0 +1,21 @@
+
+(
+/*HID TYPE*/
+0x01 HID_TYPE_CONTROL
+0x04 HID_TYPE_GET_REPORT
+0x05 HID_TYPE_SET_REPORT
+0x07 HID_TYPE_SET_PROTOCOL
+0x09 HID_TYPE_SET_IDLE
+0x0a HID_TYPE_DATA
+/*HID REPORT ID*/
+0x01 HID_REPORT_ID_KB
+
+0x00 HID_CONTROL_P_NOOPERATION
+0x01 HID_CONTROL_P_HARDRESET
+0x02 HID_CONTROL_P_SOFTRESET
+0x03 HID_CONTROL_P_SUSPEND
+0x04 HID_CONTROL_P_EXITSUSPEND
+0x05 HID_CONTROL_P_VIRTUALCABLEUNPLUG
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app.format	(working copy)
@@ -0,0 +1,324 @@
+
+memalloc(
+
+/* load code */
+1 mem_ucode_status
+2 mem_otp_ucode_flag
+1 mem_spid_tbuf				/* spid buf: 03 addr[23:16] addr[15:8] addr[7:0] */
+0 mem_iicd_tbuf				/* iicd buf: iic_adr addr[15:8] addr[7:0] iic_adr */
+1 mem_addr_hi
+1 mem_addr_mi
+1 mem_addr_lo
+1 mem_iicd_addr
+4 mem_spid_rbuf
+2 mem_ucode_buf
+2 mem_ucode_len
+2 mem_sched_addr
+2 mem_ucode_ptr
+16 mem_ucode_keybuf
+18 mem_check_plap_temp
+
+
+1 mem_reconnect_flag
+1 mem_switch_fail_master_count
+1 mem_app_evt_timer_count
+
+)
+
+xmemalloc(
+1 mem_app_handshake_flag
+2 mem_sniff_param_interval
+2 mem_sniff_param_attempt
+2 mem_sniff_param_timeout
+
+/*App Callback Functons*/
+2 mem_cb_check_wakelock
+2 mem_cb_before_hibernate
+2 mem_cb_before_lpm
+2 mem_cb_le_process
+2 mem_cb_bt_process
+2 mem_cb_idle_process
+2 mem_cb_bb_event_process
+2 mem_cb_discovry_timeout
+2 mem_cb_att_write
+2 mem_cb_ble_transmit
+2 mem_cb_event_timer
+2 mem_cb_bt_set_mult
+2 mem_cb_spi_flash_write_complate
+
+
+
+
+2 mem_eeprom_base
+
+1 mem_unsniff2sniff_timer_count
+//lpm mode
+1 mem_wake_up_delay_timer
+
+1 mem_app_connection_options
+
+//
+2 mem_app_disconn_reason
+2 mem_app_disconn_reason_flag
+4 mem_lpm_delay_after_sniff
+1 mem_xrecord_mode
+
+1 mem_eeprom_block_size
+1 mem_spi_init_clk
+1 mem_spi_init_delay_time
+1 mem_spi_ncs_gpio
+
+2 mem_nv_data_ptr
+1 mem_nv_data_number
+
+2 mem_queue_ptr
+
+1 mem_ui_led_struct_num
+2 mem_ui_led_struct_ptr
+
+//adc
+2 mem_0_5_adc_io_data
+2 mem_1v_adc_hvin_data
+2 mem_2v_adc_vinlpm_data
+2 mem_1v_adc_io_data
+2 mem_5v_adc_hvin_data
+2 mem_3v_adc_vinlpm_data
+2 mem_otp_adc_flag
+2 mem_reference_voltage
+1 mem_adc_config_flag
+1 mem_adc_channel
+2 mem_adc_current_value
+1 mem_adc_power_flag	//bit0:low power falg ; bit1:no power flag
+
+3 mem_spi_write_addr
+2 mem_spi_write_ptr
+2 mem_spi_write_len
+1 mem_spi_write_flash_sm
+1 mem_eeprom_wp_gpio
+2 mem_kscan_ptr
+ifdef SPI_SIMULATE
+//spi gpio config
+0 mem_spi_simulate_struct
+1 mem_spi_simulate_cs_gpio
+1 mem_spi_simulate_sclk_gpio
+1 mem_spi_simulate_mosi_gpio
+1 mem_spi_simulate_miso_gpio
+1 mem_spi_simulate_motion_gpio
+//spi slave read byte
+50 mem_spi_simulate_read_byte_slave
+1 mem_spi_simulate_read_byte_slave_temp
+1 mem_spi_simulate_read_length_slave
+1 mem_spi_simulate_read_length_slave_temp
+//spi slave write byte
+50 mem_spi_simulate_write_byte_slave
+1 mem_spi_simulate_write_byte_slave_temp
+1 mem_spi_simulate_write_byte_slave_temp_temp
+1 mem_spi_simulate_write_length_slave
+1 mem_spi_simulate_write_length_slave_temp
+endif
+
+0 mem_key_num_ptr
+2 mem_keyscan_ptr
+
+2 mem_power_param_ptr
+2 mem_24g_head_ptr
+)
+//adc read
+(
+0 ADC_CONFIG_VINLPM
+1 ADC_CONFIG_HVIN
+2 ADC_CONFIG_GPIO
+)
+
+
+(
+0 QUEUE_OFFSET_EACH_SIZE
+1 QUEUE_OFFSET_LENGTH
+2 QUEUE_OFFSET_CURR_NUM
+3 QUEUE_OFFSET_READ_PTR
+4 QUEUE_OFFSET_WRITE_PTR
+5 QUEUE_OFFSET_ELE_INIT_ADDR
+)
+(
+//Flash Register
+0x05 FLASH_READ_SATUS
+
+// Flash Status Register
+0x00 FLASH_STATUS_WIP
+0X01 FLASH_STATUS_WEL
+0X02 FLASH_STATUS_BP0
+0X03 FLASH_STATUS_BP1
+
+//Flash Write Sm
+0X00 FLASH_SM_NO_BUYS
+0X01 FLASH_SM_START
+0X02 FLASH_SM_ERASE_SECTOR
+0X03 FLASH_SM_WAIT_ERASE_SECTOR
+0X04 FLASH_SM_WRITE_DATA
+0X05 FLASH_SM_WAIT_WRITE_DATA
+
+
+//Flash Command
+0x02 FLASH_COMMAND_WRITE_DATA
+0x03 FLASH_COMMAND_READ_DATA
+0x20 FLASH_COMMAND_SECTOR_ERASE
+)
+
+0x0000 otp_ucode_flag
+0x07f0 otp_ucode_aeskey
+
+/* adc data addr and flag */
+(
+0x07e0 OTP_CHIP_FUNCTIONS
+0x07e2 otp_adc_io_0_5V_addr
+0x07e4 otp_adc_hvin_1V_addr
+0x07e6 otp_adc_vinlpm_2V_addr
+0x07e8 otp_adc_io_1V_addr
+0x07ea otp_adc_hvin_5V_addr
+0x07ec otp_adc_vinlpm_3V_addr
+0x07ee otp_adc_flag_addr
+0xaa55 OTP_ADC_FLAG
+)
+
+/* data stored in eeprom */
+(
+0	eeprom_nv_ram
+
+195	eeprom_module_init_flag//2
+
+)
+
+/*mem_app_handshake_flag*/
+(
+0 APP_HANDSHAKE_NULL
+1 APP_HANDSHAKE_DONE
+
+)
+/*mem_device_option*/
+(
+1 dvc_op_hci
+4 dvc_op_dongle
+5 dvc_op_spp
+6 dvc_op_ukey
+7 dvc_op_ir
+
+9 dvc_op_shutter
+10 dvc_op_module
+11 dvc_op_ble_mouse
+12 dvc_op_ble_kb
+13 dvc_op_ble_prcp
+14 dvc_op_car
+15 dvc_op_AntiLost
+16 dvc_op_remote_car
+255 dvc_op_test
+//device option hight 4
+6 dvc_op_mouse
+7 dvc_op_keyboard
+//device option low 2
+(
+0 MODE_3_MOUSE
+1 MODE_4_MOUSE
+)
+)
+
+(
+3 twspi_sclk
+4 twspi_sdio
+)
+
+(
+4 pan_clk_bit
+5 pan_dat_bit
+6 pan_mov_bit
+)
+
+(
+7 otp_uflag_aes
+6 otp_uflag_skip_eep
+5 otp_uflag_skip_flash
+4 otp_uflag_hci
+)
+
+/* ir command */
+(
+1 ircmd_record
+2 ircmd_play
+3 ircmd_write_pulse
+4 ircmd_write_seq
+5 ircmd_write_next
+
+8 ircmd_test_play
+9 ircmd_test_rec
+
+10 ircmd_report_pulse
+11 ircmd_report_seq
+12 ircmd_report_raw
+
+20 ircmd_screen_on
+21 ircmd_screen_off
+)
+
+(
+7 gpio_active_bit
+)
+(
+2 HID_HANDSHAKE_TIMEOUT
+
+)
+
+(
+1 APP_FLAG_RECONNECT
+)
+(
+5 LPM_WAKE_UP_DELAY_TIMER
+)
+
+
+//mem_app_disconn_reason
+//mem_app_disconn_reason_flag
+//bit map
+(
+2 APP_DISC_RSN_SIZE
+)
+(
+0 APP_DISC_BY_BUTTON
+1 APP_DISC_AFTER_PAIRING
+2 APP_DISC_AFTER_RECONN
+3 APP_DISC_AFTER_SNIFF
+4 APP_DISC_AFTER_SETUP_DONE
+5 APP_DISC_AFTER_HANDSHAKE
+6 APP_DISC_BT
+7 APP_DISC_BLE
+8 APP_DISC_L2CAP_REFUSED
+9 APP_DISC_SWITCH_FAIL
+)
+//eeprom init flag
+(
+	0xaa55 EEPROM_INIT_FLAG
+)
+
+(
+1 KEY_CONF_STRUCT_LEN
+0 KEY_PIN_OFFSET
+)
+
+(
+12000000 PWM_12MHZ
+)
+(
+0 POWER_OFF
+1 POWER_STARTING
+2 POWER_STANDBY
+)
+//power parameter offset(8 byte)
+(
+0 power_state_offset
+1 power_timer_offset
+2 power_off_timeout_offset
+3 power_starting_timeout_offset
+4 power_off_cb_offset
+6 power_starting_cb_offset
+8 power_standby_cb_offset
+10 ui_butten_up_cb_offset
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_antiLost.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_antiLost.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_antiLost.format	(working copy)
@@ -0,0 +1,202 @@
+omemalloc(
+// memblock for cover the variables portion at shutter.format
+2 mem_antl_lpm_interval
+2 mem_antl_adv_interval
+2 mem_antl_slow_adv_lpm_interval
+2 mem_antl_slow_adv_adv_interval
+0 mem_antl_led_style
+1 mem_antl_led_type
+1 mem_antl_led_blink_count
+1 mem_antl_led_gpio
+2 mem_antl_led_on_time
+2 mem_antl_led_off_time
+2 mem_antl_led_cb_on
+2 mem_antl_led_cb_off
+
+0 mem_antl_buzzer_style
+1 mem_antl_buzzer_type
+1 mem_antl_buzzer_blink_count
+1 mem_antl_buzzer_gpio
+2 mem_antl_buzzer_on_time
+2 mem_antl_buzzer_off_time
+2 mem_antl_buzzer_cb_on
+2 mem_antl_buzzer_cb_off
+
+0 mem_antl_fast_adv_led_style
+1 mem_antl_fast_adv_led_type
+1 mem_antl_fast_adv_led_blink_count
+1 mem_antl_fast_adv_led_gpio
+2 mem_antl_fast_adv_led_on_time
+2 mem_antl_fast_adv_led_off_time
+
+0 mem_antl_slow_adv_led_style
+1 mem_antl_slow_adv_led_type
+1 mem_antl_slow_adv_led_blink_count
+1 mem_antl_slow_adv_led_gpio
+2 mem_antl_slow_adv_led_on_time
+2 mem_antl_slow_adv_led_off_time
+
+0 mem_antl_power_starting_led_style
+1 mem_antl_power_starting_led_type
+1 mem_antl_power_starting_led_blink_count
+1 mem_antl_power_starting_led_gpio
+2 mem_antl_power_starting_led_on_time
+2 mem_antl_power_starting_led_off_time
+
+7 mem_antl_power_starting_buzzer_style
+
+0 mem_antl_power_off_led_style
+1 mem_antl_power_off_led_type
+1 mem_antl_power_off_led_link_count
+1 mem_antl_power_off_led_gpio
+2 mem_antl_power_off_led_on_time
+2 mem_antl_power_off_led_off_time
+
+0 mem_antl_power_off_buzzer_style
+1 mem_antl_power_off_buzzer_type
+1 mem_antl_power_off_buzzer_link_count
+1 mem_antl_power_off_buzzer_gpio
+2 mem_antl_power_off_buzzer_on_time
+2 mem_antl_power_off_buzzer_off_time
+
+7 mem_antl_alert_led_stlye
+
+0 mem_antl_alert_buzzer_stlye
+1 mem_antl_alert_buzzer_type
+1 mem_antl_alert_buzzer_blink_count
+1 mem_antl_alert_buzzer_gpio
+2 mem_antl_alert_buzzer_on_time
+2 mem_antl_alert_buzzer_off_time
+
+0 mem_antl_key_led_style
+1 mem_antl_key_led_type
+1 mem_antl_key_led_blink_count
+1 mem_antl_key_led_gpio
+2 mem_antl_key_led_on_time
+2 mem_antl_key_led_off_time
+
+7 mem_antl_key_buzzer_style
+
+1 mem_antl_queue_width
+1 mem_antl_queue_depth
+1 mem_antl_queue_curr_num
+1 mem_antl_queue_read_ptr
+1 mem_antl_queue_write_ptr
+80 mem_antl_queue_buff
+
+1 mem_antl_key_scan_enable
+1 mem_antl_led_num
+4 mem_antl_led_gpio_map
+
+0 mem_antl_power_param
+1 mem_antl_power_state
+1 mem_antl_power_timer
+1 mem_antl_power_off_timeout
+1 mem_antl_power_starting_timeout
+2 mem_antl_power_off_cb
+2 mem_antl_power_starting_cb
+2 mem_antl_power_standby_cb
+2 mem_event_button_up_cb
+
+1 mem_antl_key_num
+2 mem_cb_antl_key
+4 mem_antl_key_conf0
+
+15 mem_antl_key0_press
+15 mem_antl_key0_release
+
+///////
+1 mem_antl_conn_updata_procedure_state
+2 mem_client_characteristic_configuration_descriptor
+///////
+
+
+//100ms timer
+2 mem_adc_timer
+1 mem_antl_conn_update_timer
+1 mem_antl_send_updata_le_param_timer
+////
+
+2 mem_antl_le_sleep_timer
+2 mem_antl_fast_adv_timer
+2 mem_antl_fast_adv_timeout
+2 mem_antl_le_sleep_timeout
+1 mem_double_click_timer
+1 mem_butten_click_cnt
+
+//1 mem_dvc_seq
+/////////anti lost alarm state/////
+1 mem_antl_led_state
+1 mem_antl_buzzer_state
+1 mem_antl_key_state
+1 mem_antl_lost_mode
+1 mem_alarm_config
+1 mem_alarm_config_notfy_cnt
+
+6 mem_buzzer_pwm_conf
+
+
+/////////anti lost battery adc read////////
+2 mem_adc_timeout
+1 mem_voltage_remain_percent
+
+0 mem_battery_calculate_set
+2 mem_battery_full_voltage
+2 mem_battery_empty_voltage
+2 mem_battery_low_voltage
+2 mem_battery_current_voltage
+
+
+2 mem_rx_window_sniff_inc
+2 mem_interval_increment
+
+2 mem_antl_le_interval_min
+2 mem_antl_le_interval_max
+2 mem_antl_le_latency
+2 mem_antl_le_timeout
+2 mem_antl_le_unnormal_interval_min
+2 mem_antl_le_unnormal_interval_max
+2 mem_antl_le_unnormal_latency
+2 mem_antl_le_unnormal_timeout
+
+400 mem_AntiLost_le_att_list
+)
+
+//app new specific
+(
+0 CONN_PARAM_UPDATA_PROCEDURE_NO_INIT
+1 CONN_PARAM_UPDATA_PROCEDURE_STARTING
+2 CONN_PARAM_UPDATA_PROCEDURE_COMPLETE
+3 CONN_PARAM_UPDATA_PROCEDURE_FAILD
+)
+(
+0 NEW_SPEC_HEADER_OFFSET
+2 NEW_SPEC_OPCODE_OFFSET
+3 NEW_SPEC_DLEGTH_OFFSET  //data length offset
+5 NEW_SPEC_DADDR_OFFSET   //data address offset
+)
+(
+1 OPCODE1_BUTTEN_CLICK_ONCE
+2 OPCODE2_BUTTEN_DOUBLE_CLICK
+3 OPCODE3_ANTL_START_ALRAM
+4 OPCODE4_CURRENT_ALARM_STATE
+5 OPCODE5_BATTER_INFORMATION
+7 OPCODE7_ANTL_CONFIG_ALRAM
+)
+(
+0x0a NEW_SPEC_NOTIFY_HANDLE
+0x0b NEW_SPEC_NOTIFICATION_ENABLE_HANDLE
+0x0d NEW_SPEC_WRITE_HANDLE
+)
+//app new specific end
+
+//mem_anti_lost_mode
+(
+0x01 ANTI_LE_ALARM_ON
+0x00 ANTI_LE_ALARM_OFF
+)
+(
+0 NOTIFICATION_ENABLE_BIT
+1 INDICATION_ENABLE_BIT
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_car.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_car.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_car.format	(working copy)
@@ -0,0 +1,287 @@
+
+
+omemalloc(
+1 mem_car_hard_soft_switch
+1 mem_car_queue_each_size
+1 mem_car__queue_length
+
+1 mem_car_queue_curr_num
+1 mem_car_queue_read_ptr
+1 mem_car_queue_write_ptr
+120 mem_car_queue_ele
+
+20 mem_car_pop_queue_buff
+
+1 mem_car_led_num
+10 mem_car_led_map
+
+1 mem_car_style1_led_type
+1 mem_car_style1_blink_count
+1 mem_car_style1_struct_led_gpio
+2 mem_car_style1_on_time
+2 mem_car_style1_off_time
+2 mem_car_style1_cb_ledon
+2 mem_car_style1_cb_ledoff
+
+1 mem_car_style2_led_type
+1 mem_car_style2_blink_count
+1 mem_car_style2_struct_led_gpio
+2 mem_car_style2_on_time
+2 mem_car_style2_off_time
+2 mem_car_style2_cb_ledon
+2 mem_car_style2_cb_ledoff
+
+//////motor
+0 mem_le_receive_data
+2 mem_le_receive_packet_head
+1 mem_le_receive_cmd
+2 mem_le_receive_length
+10 mem_le_receive_payload
+1 mem_le_receive_checksum
+1 mem_motor1_status
+1 mem_motor1_speed
+1 mem_motor2_status
+1 mem_motor2_speed
+1 mem_motor3_status
+1 mem_motor3_speed
+
+0 mem_motor1_pwm_set
+1 mem_motor1_pwm_pin1_set
+1 mem_motor1_pwm_pin2_set
+1 mem_motor1_pwm_pin_set
+1 mem_motor1_pwm_channel_set
+3 mem_motor1_pwm_freq_set
+1 mem_motor1_pwm_dute_set
+0 mem_motor2_pwm_set
+1 mem_motor2_pwm_pin1_set
+1 mem_motor2_pwm_pin2_set
+1 mem_motor2_pwm_pin_set
+1 mem_motor2_pwm_channel_set
+3 mem_motor2_pwm_freq_set
+1 mem_motor2_pwm_dute_set
+0 mem_motor3_pwm_set
+1 mem_motor3_pwm_pin1_set
+1 mem_motor3_pwm_pin2_set
+1 mem_motor3_pwm_pin_set
+1 mem_motor3_pwm_channel_set
+3 mem_motor3_pwm_freq_set
+1 mem_motor3_pwm_dute_set
+
+1 mem_motor_select_p_n
+1 mem_car_motor_status
+1 mem_car_motor_speed
+0 mem_motor_pwm_set
+1 mem_motor_pwm_pin1_set
+1 mem_motor_pwm_pin2_set
+1 mem_motor_pwm_pin_set
+1 mem_motor_pwm_channel_set
+3 mem_motor_pwm_freq_set
+1 mem_motor_pwm_dute_set
+
+1 mem_ir_rx_gpio
+2 mem_ir_data
+2 mem_ir_rx_buf
+4 mem_ir_receive_clkn
+
+3 mem_ir_notify_data
+5 mem_ir_notify_data_head
+2 mem_ir_notify_data_payload
+1 mem_ir_notify_data_check_sum
+1 mem_car_ir_breakdown_check_timer
+1 mem_car_ir_breakdown_flag
+
+0 mem_car_led_control
+1 mem_car_led1_status
+1 mem_car_led2_status
+1 mem_car_led3_status
+1 mem_car_led4_status
+1 mem_car_led5_status
+1 mem_car_led6_status
+1 mem_car_led7_status
+1 mem_car_led8_status
+1 mem_car_led_control_timer
+1 mem_car_led_blink_status
+1 mem_car_led_no
+
+3 mem_car_info_request
+5 mem_car_info_request_head
+8 mem_car_info_request_payload
+1 mem_car_info_request_checksum
+
+0 mem_car_config_param
+1 mem_car_config_setting_flag
+1 mem_car_config_device_select
+1 mem_car_config_motor_layout
+1 mem_car_config_ir_enable
+1 mem_car_config_ir_rx_gpio
+1 mem_car_config_pairing_led_conn_status
+1 mem_car_config_pairing_led_gpio
+1 mem_car_config_led_num
+0 mem_car_config_blood_led_gpio
+1 mem_car_config_blood_led1_gpio
+1 mem_car_config_blood_led2_gpio
+1 mem_car_config_blood_led3_gpio
+1 mem_car_config_blood_led4_gpio
+1 mem_car_config_blood_led5_gpio
+1 mem_car_config_blood_led6_gpio
+1 mem_car_config_blood_led7_gpio
+1 mem_car_config_blood_led8_gpio
+1 mem_car_config_bat_notify_enable
+1 mem_car_config_low_voltage_led_gpio
+1 mem_car_config_low_voltage_percent
+1 mem_car_config_soft_switch_enable
+1 mem_car_config_soft_switch_gpio
+
+1 mem_car_notify_vdd_count
+1 mem_car_notify_vdd_timer
+1 mem_car_notify_vdd_value_last
+1 mem_car_notify_vdd_percent
+1 mem_car_working_flag
+1 mem_low_bat_flag
+
+3 mem_notify_bat_packet
+5 mem_notify_bat_head
+1 mem_notify_bat_payload
+1 mem_notify_bat_check_sum
+
+1 mem_vdd_notify_flag
+2 mem_car_current_vdd_value_temp
+2 mem_car_last_vdd_value
+
+0 mem_vdd_calculate_set
+2 mem_vdd_full_vol
+2 mem_vdd_empty_vol
+2 mem_vdd_low_vol
+2 mem_vdd_now_vol
+
+
+1 mem_car_24g_status
+2 mem_car_24g_no_data_timeout_count
+2 mem_car_24g_no_data_timeout_timer
+
+1 mem_car_24g_ir_receive_attack_count
+1 mem_car_24g_go_die_flag
+1 mem_car_attack_shake_timer
+1 mem_car_attack_shake_flag
+
+0 mem_car_soft_power
+1 mem_car_power_state
+1 mem_car_power_timer
+1 mem_car_power_off_timeout
+1 mem_car_power_starting_timeout
+2 mem_car_power_off_cb
+2 mem_car_power_starting_cb
+2 mem_car_power_standby_cb
+2 mem_car_ui_button_up_cb
+
+
+500 mem_car_le_att_list
+
+1 mem_car_moto1_blank_timer
+1 mem_car_moto2_blank_timer
+1 mem_car_moto3_blank_timer
+1 mem_car_24g_received_pac
+400 mem_24g_car_head_ptr
+)
+
+(
+//20ms
+0x0020	FAST_ADV_INTERVAL_VALUE_CAR
+)
+
+(
+0x14 ATT_CAR_CONTROL_HANDLE
+0x14 ATT_SPEED_SET_HANDLE
+)
+
+
+(
+0 TURN_FRONT
+1 TURN_LEFT
+2 TURN_RIGHT
+0 MOTOR_STOP
+1 GO_FRONT
+2 GO_BACK
+0x6b5a LE_RECEIVE_PACKET_HEAD
+)
+
+(
+0 FLAG_IR_DISABLE
+1 FLAG_IR_ENABLE
+)
+
+(
+0 DEVICE_CAR
+1 DEVICE_TANK
+2 DEVICE_BATTLE_CAR
+3 DEVICE_BATTLE_TANK
+4 DEVICE_REMOTE
+)
+
+(
+0 F_B_MOTOR
+1 L_R_MOTOR
+2 F_B_BATTERY
+3 L_R_BATTERY
+)
+
+
+
+(
+1 SPEED_LEVEL_1
+2 SPEED_LEVEL_2
+3 SPEED_LEVEL_3
+4 SPEED_LEVEL_4
+5 SPEED_LEVEL_5
+6 SPEED_LEVEL_6
+7 SPEED_LEVEL_7
+8 SPEED_LEVEL_8
+9 SPEED_LEVEL_9
+10 SPEED_LEVEL_10
+)
+
+(
+0 PWM0_DUTY_SETTING
+1 PWM1_DUTY_SETTING
+2 PWM2_DUTY_SETTING
+)
+
+(
+1 CAR_CMD_BATTERY
+2 CAR_CMD_OLD_CAR_CONTROL
+3 CAR_CMD_OLD_SPEED_CONTROL
+4 CAR_CMD_L_R_MOTOR_CONTROL
+5 CAR_CMD_F_B_MOTOR_CONTROL
+6 CAR_CMD_IR_CONTROL
+7 CAR_CMD_LED_CONTROL
+8 CAR_CMD_DEVICE_INFO
+)
+
+(
+0 CAR_REMOTE_CHECK_BUTTON
+1 CAR_REMOTE_CHECK_ROCKER
+)
+
+(
+0x11 CAR_NOTIFY_HANDLE
+)
+
+(
+0 LED_OFF
+1 LED_ON
+2 LED_BLINK
+0xFF LED_INVALID
+)
+
+(
+0xFF INVALID_PIN_NUM
+)
+
+
+(
+0 POWER_ON
+1 WORK_PAIRED
+2 WORK_SEARCH
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_light.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_light.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_light.format	(working copy)
@@ -0,0 +1,34 @@
+omemalloc(
+1 mem_light_pwm0
+1 mem_light_pwm1
+1 mem_light_pwm2
+1 mem_light_pwm3
+1 mem_light_pwm4
+1 mem_light_pwm5
+
+1 mem_light_pairing_enable
+2 mem_light_pairing_timer
+1 mem_light_cnum
+1 mem_light_next_record
+80 mem_light_clist
+
+
+1 mem_light_crr_cmd_count
+1 mem_curr_packet_num
+)
+
+(
+0 LIGHT_GROUP0
+)
+
+(
+0 LIGHT_CMD_PWM0
+1 LIGHT_CMD_PWM1
+2 LIGHT_CMD_PWM2
+3 LIGHT_CMD_PWM3
+4 LIGHT_CMD_PWM4
+5 LIGHT_CMD_PWM5
+6 LIGHT_CMD_AUTO_MODE
+0xff LIGHT_CMD_PAIRING
+
+)
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_lightc.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_lightc.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_lightc.format	(working copy)
@@ -0,0 +1,30 @@
+omemalloc(
+1 mem_lightc_led_gpio
+6 mem_lightc_row
+6 mem_lightc_col
+
+1 mem_adv_time
+
+20 mem_cmd0_string
+20 mem_cmd1_string
+20 mem_cmd2_string
+20 mem_cmd3_string
+20 mem_cmd4_string
+20 mem_cmd5_string
+20 mem_cmd6_string
+20 mem_cmd7_string
+20 mem_cmd8_string
+20 mem_cmd9_string
+20 mem_cmd10_string
+20 mem_cmd11_string
+20 mem_cmd12_string
+20 mem_cmd13_string
+20 mem_cmd14_string
+20 mem_cmd15_string
+20 mem_cmd16_string
+20 mem_cmd17_string
+20 mem_cmd18_string
+20 mem_cmd19_string
+20 mem_cmd20_string
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_module.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_module.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_module.format	(working copy)
@@ -0,0 +1,221 @@
+
+omemalloc(	
+	2 mem_soft_version_num
+	1 mem_module_wake_up_gpio
+	1 mem_module_state_gpio
+	1 mem_module_connect_state_gpio
+
+	2 mem_current_packet_length
+	1 mem_module_state
+	
+	1 mem_module_mcu_wake_pin
+	4 mem_module_mcu_wake_delay_us
+
+	1 mem_module_spp_lpm_mult
+	1 mem_module_le_lpm_mult	
+	1 mem_module_bluetooth_stauts_by_command
+
+	//uart
+	2 mem_module_uart_rx_buffer
+	2 mem_module_uart_rx_buffer_end
+	2 mem_module_uart_tx_buffer
+	2 mem_module_uart_tx_buffer_end
+
+	//ADC
+	1 mem_module_read_vdd_flag
+	1 mem_module_read_vdd_count
+	1 mem_module_vdd_quotient
+	1 mem_module_vdd_remainder
+
+	//ble
+	1 mem_module_le_rx_data_len
+	2 mem_module_le_rx_data_address
+	2 mem_module_le_rx_data_handle
+	//ble write handle
+	2 mem_module_data_write_handle
+	2 mem_module_data_write_handle2
+	//flag
+	1 mem_module_flag
+
+	1 mem_module_hci_notify_len
+	2 mem_module_hci_notify_handle
+	2 mem_module_hci_nofiy_addr
+
+	4 mem_last_transmite_clock
+	
+	300 mem_module_uuid_list
+	0 mem_module_uuid_list_end
+	600 mem_module_le_att_list
+	0 mem_module_le_att_list_end
+	0 mem_module_nv_data
+	34 mem_module_nv_data0
+	34 mem_module_nv_data1
+	34 mem_module_nv_data2
+	34 mem_module_nv_data3
+	34 mem_module_nv_data4
+)
+
+
+(//mem_module_flag
+//bit0~bit3 config module function
+0 MODULE_FLAG_UART_FLOW_CONTROL
+1 MODULE_FLAG_BLE_SEND_MTU23
+2 MODULE_FLAG_BLE_DATA_ENCRYPT
+
+//bit4~bit7 module states change
+4 MODULE_FLAG_BLE_DATA_FINISH
+5 MOUDLE_TASK_UNSNIFF
+6 MOUDLE_TASK_SNIFF
+
+)
+
+(
+34 NV_DATA_LEN
+-1 DECREASED_ONE
+)
+
+
+
+(
+	10 FLAG_MODULE_READ_VDD_COUNT
+)
+
+(
+	110  DM_REFCOM_BUFF_LEN
+)
+(
+	0x200 UART_AIR_CONTROL_THRESHOLD
+)
+
+(
+0x01 HCI_DISCARD_PACKET
+0x00 HCI_NOT_DISCARD_PACKET
+)
+
+
+
+(//Command
+0x00 HCI_CMD_SET_BT_ADDR_REQ
+0x01 HCI_CMD_SET_LE_ADDR_REQ
+0x02 HCI_CMD_SET_VISIBILITY_REQ
+0x03 HCI_CMD_SET_BT_NAME_REQ
+0x04 HCI_CMD_SET_LE_NAME_REQ
+0x05 HCI_CMD_SPP_DATA_REQ
+0x09 HCI_CMD_LE_DATA_REQ
+0x0b HCI_CMD_STATUS_IRQ
+0x0c HCI_CMD_SET_PAIRING_REQ
+0x0d HCI_CMD_SET_PINCODE_REQ
+0x0e HCI_CMD_SET_UARTCONTROL_REQ
+0x0f HCI_CMD_SET_UART_BAUD_REQ
+0x10 HCI_CMD_VERSION_REQ
+0x11 HCI_CMD_BT_DISCONNECT
+0x12 HCI_CMD_BLE_DISCONNECT
+0x13 HCI_CMD_DELETE_DEVICE
+0x14 HCI_CMD_CREATE_CONNECT
+0x26 HCI_CMD_SET_NVRAM_REQ
+0x27 HCI_CMD_SLEEP
+0x28 HCI_CMD_CONFIRM_GKEY
+0x29 HCI_CMD_SET_CREDIT_GIVEN
+0x2a HCI_CMD_AUTO_ADV_SCAN
+0x2b HCI_CMD_POWER_REQ
+0x2c HCI_CMD_POWER_SET
+0x30 HCI_CMD_PASSKEY_ENTRY
+0x31 HCI_CMD_SET_GPIO
+0x32 HCI_CMD_READ_GPIO
+0x33 HCI_CMD_LE_SET_PAIRING
+0x34 HCI_CMD_LE_SET_ADV_DATA
+0x35 HCI_CMD_LE_SET_SCAN_DATA
+0x36 HCI_CMD_LE_SEND_CONN_UPDATE_REQ
+0x37 HCI_CMD_LE_SET_ADV_PARM
+0x38 HCI_CMD_LE_START_PAIRING
+0x40 HCI_CMD_SET_WAKE_GPIO
+0x42 HCI_CMD_SET_TX_POWER
+0x43 HCI_CMD_BOOT_VERSION_REQ
+0x48 HCI_CMD_LE_CONFIRM_GKEY
+0x49 HCI_CMD_REJECT_JUSTWORK
+0x51 HCI_CMD_RESET_CHIP_REQ
+
+0x61 HCI_CMD_LE_SET_FIXED_PASSKEY
+
+0xff HCI_TEST_CMD_CLOSE_LPM
+)
+
+(//event
+0x00 HCI_EVENT_SPP_CONN_REP
+0x01 HCI_EVENT_HID_CONN_REP
+0x02 HCI_EVENT_LE_CONN_REP
+0x03 HCI_EVENT_SPP_DIS_REP
+0x04 HCI_EVENT_HID_DIS_REP
+0x05 HCI_EVENT_LE_DIS_REP
+0x06 HCI_EVENT_CMD_RES
+0x07 HCI_EVENT_SPP_DATA_REP
+0x08 HCI_EVENT_LE_DATA_REP
+0x09 HCI_EVENT_STANDBY_REP
+0x0a HCI_EVENT_STATUS_RES
+0x0b HCI_EVENT_FINISH_PACK_NUM
+0X0C HCI_EVENT_SNIFF_MD_CHANGE
+0x0D HCI_EVENT_NVRAM_REP
+0x0e HCI_EVENT_GKEY
+0x0F HCI_EVENT_INVALID_PACKET
+0x10 HCI_EVENT_GET_PASSKEY
+0x11 HCI_EVENT_LE_TK
+0x12 HCI_EVENT_REMOTE_MTU
+0x14 HCI_EVENT_LE_PAIRING_STATE
+0X15 HCI_EVENT_LE_ENCRYPTION_STATE
+0x17 HCI_EVENT_LE_CONNECTION_UPDATE
+0x1d HCI_EVENT_LE_GKEY
+
+)
+
+
+(//command HCI_CMD_SET_GPIO
+//byte 0
+0x00 HCI_CMD_CONFIG_GPIO_INPUT
+0x01 HCI_CMD_CONFIG_GPIO_OUTPUT
+//byte 1 input state
+0x00 GPIO_INPUT_PULLUP
+0x01 GPIO_INPUT_PULLDOWN
+0x02 GPIO_INPUT_HIGH_IMPEDANCE
+)
+
+
+
+(
+0x7e0 OTP_ADDR_RF_PARAM_FIX
+//struct of RF_PARAM_FIX
+// uint8       //length = param_pair_count * 2 
+// uint16     //param-pair-1
+// uint16     //param-pair-2
+// uint16     //param-pair-3
+// uint16     //param-pair-4
+// uint16     //param-pair-5
+// uint16     //param-pair-6
+// uint16     //param-pair-7
+)
+
+(
+0	PAIRING_PINCODE
+1	PAIRING_JUSTWORK
+2	PAIRING_PASSKEY
+3	PAIRING_CONFIRM
+)
+
+
+(
+0x0001	FLAG_BT_PAIRING_SUCCESS
+0x0101	FLAG_BT_PAIRING_FAIL
+0x0080	FLAG_BLE_PAIRING_SUCCESS
+0x0180	FLAG_BLE_PAIRING_FAIL
+)
+
+
+(
+1	FLAG_EVENT_START_ENC
+0	FLAG_EVENT_PAUSE_ENC
+)
+
+(
+	0 MOUDLE_STATE_BT_BIT
+	1 MOUDLE_STATE_BLE_BIT
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_mouse.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_mouse.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_mouse.format	(working copy)
@@ -0,0 +1,435 @@
+
+memalloc(
+2 mem_init_cnt
+)
+//dpi eeprom addr
+
+
+cmemalloc 0(
+// Mouse Work Area
+1 mem_mouse_key
+2 mem_mouse_x
+2 mem_mouse_y
+1 mem_mouse_z
+1 mem_mouse_tz
+1 mem_mouse_xy_h
+1 mem_sensor_shutter_hi
+1 mem_sensor_shutter_lo
+1 mem_sensor_smart_flag
+1 mem_sensor_squal_reg
+1 mem_sensor_iqc
+1 mem_mouse_move_flag
+2 mem_mouse_direct_timeout
+2 mem_mouse_no_data_timeout
+2 mem_mouse_discovery_timer
+2 mem_mouse_direct_timer
+2 mem_mouse_no_data_timer
+2 mem_mouse_blank_data_timer
+1 mem_mouse_send_blank_timer
+
+1 mem_mouse_cpi_count
+1 mem_mouse_dpi_button_state
+
+
+//mouse T wheel
+1 mem_wheel_tb_old_pinlevel
+1 mem_wheel_tb_new_pinlevel
+1 mem_wheel_tog 
+1 mem_mouse_tz_data
+1 mem_mouse_tz_data_count
+1 mem_mouse_tz_data_count1
+
+
+1 mem_mwheel_b_old_pinlevel
+1 mem_mwheel_b_new_pinlevel
+1 mem_mwheel_tog 
+1 mem_mouse_z_data
+1 mem_mouse_z_data_count
+1 mem_mouse_z_data_count1
+
+1 mem_reconn_mode
+1 mem_mouse_statue_led_timer  
+1 mem_le_connect_status_flag
+1 mem_le_start_encrypt_timer
+
+7 mem_device_addr_temp
+
+1 mem_adc_read_timer
+1 mem_adc_low_volatage_led_timer_count
+2 mem_adc_reference_voltage
+1 mem_device_number
+2 mem_mouse_flag
+2 mem_mouse_function_enable
+1 mem_combination_select_device_timer_init
+1 mem_combination_select_device_count
+1 mem_select_device_button_statue
+
+1 mem_combination_ui_button_count
+1 mem_bt_discovey_button_statue
+1 mem_sensor_reset_gpio	
+
+1 mem_sensor_id1
+1 mem_sensor_id2
+//eeprom config param
+1 mem_mouse_dpi_led_delay_count
+1 mem_config_sensor_type
+1 mem_config_sensor_motion
+1 mem_lbutton_gpio
+1 mem_rbutton_gpio
+1 mem_mbutton_gpio
+1 mem_bk_button_gpio
+1 mem_fw_button_gpio
+1 mem_dpi_button_gpio
+1 mem_whee_a_data_gpio
+1 mem_whee_b_data_gpio
+1 mem_whee_ta_data_gpio
+1 mem_whee_tb_data_gpio
+1 mem_config_bt_button_gpio
+1 mem_config_select_device_button_gpio
+1 mem_config_paraing_led_gpio
+1 mem_config_low_voltage_alarm_gpio
+1 mem_config_device1_led_gpio
+1 mem_config_device2_led_gpio
+1 mem_config_device3_led_gpio	
+1 mem_sensor_data_gpio
+1 mem_dpi_led_gpio
+1 mem_config_function_enable
+1 mem_config_sensor_angle
+1 mem_select_sensor_angle_gpio
+1 mem_select_adc_gpio
+0 mem_config_end
+//max length 1f								
+4 mem_btclk_sensor
+1 mem_wire_usb_interval
+1 mem_mouse_mode_flag
+1 mem_usb_addr
+3 mem_flash_base
+1 mem_24g_device_number
+1 mem_24g_enter_lpm_timer
+1 mem_mouse_1step_up_count
+1 mem_mouse_2step_up_count
+2 mem_24g_pairing_timer_count
+
+//adc struct
+0 mem_mouse_vdd_calculate_set
+2 mem_mouse_vdd_full_vol
+2 mem_mouse_vdd_empty_vol
+2 mem_mouse_vdd_low_vol
+2 mem_mouse_vdd_now_vol
+// sensor led 
+1 mem_mouse_sensor_timer_count
+1 mem_sensor_led_style
+
+//led struct
+1 mem_mouse_led_type
+1 mem_mouse_blink_count
+1 mem_mouse_struct_led_gpio
+2 mem_mouse_on_time
+2 mem_mouse_off_time
+2 mem_mouse_cb_ledon
+2 mem_mouse_cb_ledoff
+
+//three devices param
+1 mem_reconn_times
+1 mem_reconn_times_init
+0 mem_mouse_information_start
+1 mem_device_flag
+1 mem_device1_type
+6 mem_device1_addr
+16 mem_device1_link_key
+6 mem_device1_locall_addr
+
+1 mem_device2_type
+6 mem_device2_addr
+16 mem_device2_link_key
+6 mem_device2_locall_addr
+
+1 mem_device3_type
+6 mem_device3_addr
+16 mem_device3_link_key
+6 mem_device3_locall_addr
+2 mem_store_flag
+1 mem_mouse_dpi
+4 mem_mouse_24g_addr
+0 mem_mouse_information_end
+
+0 mem_mouse_dpi_seting
+1 mem_320x_dpi_1
+1 mem_320x_dpi_2
+1 mem_320x_dpi_3
+1 mem_320x_dpi_4
+
+1 mem_3212_dpi_1
+1 mem_3212_dpi_2
+1 mem_3212_dpi_3
+1 mem_3212_dpi_4
+
+1 mem_3610_dpi_1
+1 mem_3610_dpi_2
+1 mem_3610_dpi_3
+1 mem_3610_dpi_4
+
+1 mem_mouse_24g_enter_lpm_enable
+
+//-------------- patch variable ------------------
+2 mem_le_rx_window_inc
+1 mem_empty_count
+13 mem_rf_init_data_new
+
+1 mem_mouse_clear_sensor_data_flag
+1 mem_mouse_null_enter_hibernate_flag
+1 mem_mouse_null_enter_hibernate_timer
+1 mem_mouse_le_reconnect_flag
+
+33 mem_mouse_data_queue
+1 mem_mouse_data_queue_num
+
+2 mem_random_addr_increase_count
+1 mem_mouse_le_conn_param_reject
+1 mem_lpm_mult_init
+64 mem_mouse_le_uuid_sup
+
+1 mem_mouse_wheel_trigger
+1 mem_mouse_wheel_trigger_timer
+
+1 mem_mouse_enter_sniff_count
+1 mem_mouse_send_switch_req_timer
+
+27 mem_le_tx_buffer0_omemalloc
+27 mem_le_tx_buffer1_omemalloc
+27 mem_le_tx_buffer2_omemalloc
+27 mem_le_tx_buffer3_omemalloc
+
+
+646 mem_mouse_uuid_list
+1 mem_lmi_opcode_temp
+
+1 mem_mouse_adc_last_low_voltage_flag
+1 mem_mouse_init_sensor_reset_flag
+
+1 mem_bt_rcvd_switch_req_accept
+1 mem_bt_send_max_slot_req_accept_after_switch
+1 mem_bt_send_lmp_setup_complete
+
+1 mem_l2cap_rcv
+1 mem_mouse_bt_boot_mode
+5 mem_mouse_bt_boot_data
+
+1 mem_mouse_bt_send_first_package_timer
+1 mem_mouse_bt_send_first_package_flag
+
+1 mem_mouse_asm_flag
+2 mem_mouse_x_pre
+2 mem_mouse_y_pre
+
+19 mem_le_adv_swift_pair
+
+1 mem_bt_125hz_cnt
+
+1 mem_mouse_send_secutiry_request_timer
+1 mem_le_send_security_request_flag
+
+1 mem_power_on_flag
+
+
+ifdef MS_MATRIX
+1 mem_m_key
+2 mem_m_x
+2 mem_m_y
+1 mem_m_z
+1 mem_m_tz
+1 mem_24g_matrix_cnt
+endif
+
+)
+
+(
+//SPI GPIO 
+0x19 MOUSE_SPI1_CLK_GPIO
+0x1A MOUSE_SPI1_SDIO_GPIO
+0X1E MOUSE_SPI2_CLK_GPIO
+0X1F MOUSE_SPI2_SDIO_GPIO
+//combination
+0x01 MOUSE_L_BUTTON
+0X02 MOUSE_R_BUTTON
+0X04 MOUSE_M_BUTTON
+0X05 MOUSE_LM_BUTTON
+0X06 MOUSE_RM_BUTTON
+0X07 MOUSE_LMR_BUTTON
+//mouse default gpio
+0x1B MOUSE_DEFAULT_XA_GPIO
+0x1C MOUSE_DEFAULT_XB_GPIO
+
+//ui led blink
+0X00C8  LED_RECONNECT_BLINK //200
+0X0190  LED_DPI_BLINK //400
+0X03E8  LED_DPI_BLINK_FIXED    //1000
+0X03E8  LED_DISCOVERY_BLINK    //1000
+0XFF    LED_LONG_BLINK
+0x05	LED_SENSOR_BLINK_CNT
+//bt mode device number
+0x01 MODE_BT_DEVICE1
+0x02 MODE_BT_DEVICE2
+0x03 MODE_BT_DEVICE3
+0x02 MODE_24G_DEVICE
+//mouse  flag
+0X00 WRITE_REQ_ENABLE_FLAG
+0X01 LL_START_ENC_FLAG
+0X02 LL_PAIRING_SUCCESS_FLAG
+
+
+//mouse_function_flag
+0X04 MOUSE_FLAG_LEN
+//1byte
+0X00 MOUSE_SELECT_DEVICE_FLAG
+0X01 MOUSE_CPI_FLAG
+0X02 MOUSE_BT_CANNEL_RECONN_FLAG
+0X03 MOSUE_24G_PAIRING_FLAG
+0X04 MOUSE_LOW_VOLTAGE_FLAG
+0X05 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG
+0X06 MOUSE_LONG_BT_BUTTON_FLAG
+0X07 MOUSE_STORE_EEPROM_FLAG
+0x08 MOUSE_STATUE_UP_FLAG
+0X09 MOUSE_BT_DISCOVERY_BUTTON_LONG_DOWN_FLAG
+
+
+//3byte
+0X10 MOUSE_ENABLE_USB
+0X11 MOUSE_ENABLE_24G
+0X12 MOUSE_ENABLE_SPI2
+0X13 MOUSE_ENABLE_FLASH
+0X14 MOUSE_ENABLE_EEPROM
+0X15 MOUSE_ENABLE_STATUE_UP_THREE_LED
+0X16 MOUSE_ENABLE_STATUE_UP
+0X17 MOUSE_ENABLE_DPI_LED_BLINK
+//4byte
+0X18 MOUSE_ENABLE_BLE_RANDOM_ADDRE
+0X19 MOUSE_ENABLE_2K_EEPROM
+0X1A MOUSE_ENABLE_ADC
+0X1B MOUSE_ENABLE_INIT_DELAY
+0X1C MOUSE_ENABLE_DISCOVERY_SENSOR_LED
+0X1D MOUSE_ENABLE_AUTO_24G_PARING
+0X1E MOUSE_ENABLE_WAKEUP_FROM_POWER
+0X1F MOUSE_ENABLE_GPIO_CONTROL_ADC_SENSOR
+
+
+
+//mouse dpi level
+0x00 MOUSE_DPI_LEVEL1
+0x01 MOUSE_DPI_LEVEL2
+0x02 MOUSE_DPI_LEVEL3
+0x03 MOUSE_DPI_LEVEL4
+
+
+//mouse sensor angle
+0x00 MOUSE_6CLK_ANGLE
+0X01 MOUSE_9CLK_ANGLE
+0X02 MOUSE_12CLK_ANGLE
+0X03 MOUSE_3CLK_ANGLE
+
+
+//mem_config_function_enable
+0 ENABLE_BT_DISCOVERY_BY_GPIO_LED
+1 ENABLE_MODE_LED
+2 ENABLE_LOW_VOLTAGE_LED
+3 ENABLE_DEVICE_LED
+4 ENABLE_BT_BUTTON
+5 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON
+6 ENABLE_SELECT_DEVICE_BY_SWITCH
+
+0xFF GPIO_DISABLE
+
+
+//DPI button state 
+0x00 DPI_BUTTON_STATE_DOWN
+0x01 DPI_BUTTON_STATE_UP
+
+
+//eeprom address offect
+0X00 MOUSE_INFO_EEPROM_OFFECT
+0X5A MOUSE_DPI_EEPROM_OFFECT	//1byte
+0X5B MOUSE_G24_ADDR_EEPROM_OFFECT	//4bytes
+0X5F MOUSE_RANDOM_ADDR_COUNT_EEPROM_OFFSET	//2bytes
+0X61 MOUSE_DEVICE_MODE_EEPROM_OFFSET	//1byte	
+0X62 MOUSE_EEPROM_MODULE_INIT_FLAG		//eeprom_module_init_flag 2bytes
+
+
+// Sensor id number
+0x30 P32XX_ID1
+0x31 P3065_ID1
+0x3E P3610_ID1
+0x02 P3212_ID2
+0xD1 P3205_TJ3T_ID2
+0XD2 P3204_TJ3L_ID2
+0x54 PKA8_ID2
+0x70 P3065_XY_ID2
+
+
+//Sensor type
+0X00 P3205
+0X01 P3065
+0X02 KA8
+0X03 P3204
+0X04 P3212
+0X05 P3610
+0X06 P3065_XY
+
+
+//p3610 smart enable flag
+0X00 P3610_SMART_ENABLE
+0X01 P3610_SMART_DISABLE
+
+
+//SENSOR REG
+0x00 PAN_REG_PID_L
+0x01 PAN_REG_PID_H
+0x02 PAN_REG_MOTION_STAUS
+0x03 PAN_REG_DELTA_X
+0x04 PAN_REG_DELTA_Y
+0x05 PAN_REG_OPRATION_MODE
+0x06 PAN_REG_CONFIG
+0x07 PAN_REG_IMAGE_QUALITY
+0x08 PAN_REG_OPRATION_STATE
+0x09 PAN_REG_WRITE_PROTECT
+0x0A PAN_REG_SLEEP_1
+0x0B PAN_REG_ENTER_TIME
+0x0C PAN_REG_SLEEP_2
+0x0D PAN_REG_IMAGE_THRESHOLD
+0x0E PAN_REG_IMAGE_RECGNITION
+
+
+0x06 MOUSE_DPI_ADDRESS
+0x05 MOUSE_P3610_DPI_ADDRESS
+0x0D MOUSE_P3212_DPI_XADDRESS
+0x0E MOUSE_P3212_DPI_YADDRESS
+
+
+0x06 MOUSE_FPGA_RF_WORK_DEBUG_GPIO
+0x02 MOUSE_FPGA_DEBUG_GPIO
+
+)
+
+(
+0x01 ADV_FLAG_LIMITED_DISCOVERABLE
+0x04 ADV_FLAG_BREDR_NOT_SUPPORTED
+)
+
+(
+5 TEST_GPIO
+)
+
+(
+1 LE_LPM_DISABLE
+0 LE_LPM_ENABLE
+
+12 LE_INTERVAL_15MS
+9 LE_INTERVAL_11_25MS//11.25ms
+7 LE_INTERVAL_8_75MS//8.75ms
+6 LE_INTERVAL_7_5MS//7.5ms
+
+12 CLASSIC_INTERVAL_7_5MS
+14 CLASSIC_INTERVAL_8_75MS
+18 CLASSIC_INTERVAL_11_25MS
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_remote_car.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_remote_car.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_remote_car.format	(working copy)
@@ -0,0 +1,150 @@
+
+omemalloc(
+1 mem_remote_car_hard_soft_switch
+
+1 mem_remote_car_queue_each_size
+1 mem_remote_car_queue_length
+
+1 mem_remote_car_queue_curr_num
+1 mem_remote_car_queue_read_ptr
+1 mem_remote_car_queue_write_ptr
+90 mem_remote_car_queue_ele
+
+1 mem_remote_style_led_type
+1 mem_remote_style_blink_count
+1 mem_remote_style_struct_led_gpio
+2 mem_remote_style_on_time
+2 mem_remote_style_off_time
+2 mem_remote_style_cb_ledon
+2 mem_remote_style_cb_ledoff
+
+
+1 mem_remote_car_led_num
+8 mem_remote_car_led_map
+
+0 mem_remote_car_keyscan
+1 mem_remote_car_key_num
+2 mem_cb_remote_car_keyscan
+
+0 mem_remote_car_key_conf0
+1 mem_remote_car_key_conf0_pin
+0 mem_remote_car_key_conf1
+1 mem_remote_car_key_conf1_pin
+0 mem_remote_car_key_conf2
+1 mem_remote_car_key_conf2_pin
+0 mem_remote_car_key_conf3
+1 mem_remote_car_key_conf3_pin
+0 mem_remote_car_key_conf4
+1 mem_remote_car_key_conf4_pin
+0 mem_remote_car_key_conf5
+1 mem_remote_car_key_conf5_pin
+0 mem_remote_car_key_conf6
+1 mem_remote_car_key_conf6_pin
+
+
+//rocker
+1 mem_rocker_negative_flag
+1 mem_rocker_work_status
+2 mem_current_vdd_value_default_mid_x
+2 mem_current_vdd_value_default_mid_y
+2 mem_current_vdd_value_default_mid_temp
+2 mem_current_vdd_default_range
+2 mem_rocker_last_status
+0 mem_rocker_status
+1 mem_rocker_x_status
+1 mem_rocker_y_status
+
+0 mem_remote_car_config_param
+1 mem_remote_car_config_setting_flag
+1 mem_remote_car_config_key_map
+1 mem_remote_car_config_layout
+1 mem_remote_car_config_connect_led_gpio
+1 mem_remote_car_config_check_way
+1 mem_remote_car_config_soft_switch_enable
+1 mem_remote_car_config_soft_switch_gpio
+1 mem_remote_car_config_timeout_shutdown_enable
+
+0 mem_remote_car_24g_motor_packet
+1 mem_remote_car_24g_motor_packet_lenght
+2 mem_remote_car_24g_motor_send_packet_head
+1 mem_remote_car_24g_motor_send_cmd
+2 mem_remote_car_24g_motor_send_length
+0 mem_remote_car_24g_motor_send_payload
+2 mem_remote_car_24g_motor1_payload
+2 mem_remote_car_24g_motor2_payload
+2 mem_remote_car_24g_motor3_payload
+1 mem_remote_car_24g_motor_send_checksum
+
+0 mem_remote_car_24g_fire_packet
+1 mem_remote_car_24g_fire_packet_lenght
+2 mem_remote_car_24g_fire_send_packet_head
+1 mem_remote_car_24g_fire_send_cmd
+2 mem_remote_car_24g_fire_send_length
+2 mem_remote_car_24g_fire_send_payload
+1 mem_remote_car_24g_fire_send_checksum
+
+15 mem_remote_car_24g_tx_temp
+
+2 mem_remote_car_no_data_timeout
+2 mem_remote_car_no_data_timer
+
+0 mem_remote_car_soft_power
+1 mem_remote_car_power_state
+1 mem_remote_car_power_timer
+1 mem_remote_car_power_off_timeout
+1 mem_remote_car_power_starting_timeout
+2 mem_remote_car_power_off_cb
+2 mem_remote_car_power_starting_cb
+2 mem_remote_car_power_standby_cb
+
+1 mem_remote_key_status
+1 mem_remote_car_24g_status
+
+1 mem_remote_car_24g_auto_work_step
+1 mem_remote_car_24g_pair_success_flag
+1 mem_remote_car_24g_enter_lpm_enable
+1 mem_remote_car_empty_packet
+400 mem_24g_RC_head_ptr
+)
+
+
+(
+// eeprom config
+0xb0 REMOTE_PARAM_EEPROM_CONFIG_ADDR
+
+)
+
+
+(
+0x00 CONTROL_F_B_MOTOR
+0x02 CONTROL_L_R_MOTOR
+)
+
+(
+0x00 KEY_MAP_TEN
+0x01 KEY_MAP_LR
+)
+
+(
+0x00 CONTROL_F_B_TEN
+0x02 CONTROL_L_R_TEN
+0x03 CONTROL_L_R_LR
+)
+
+(
+0 KEY_CHECK
+1 ROCKER_CHECK
+)
+
+(
+1 MOTOR_POSITIVE
+2 MOTOR_NEGATIVE
+)
+
+(
+0 ROCKER_MIDDLE_KEY
+1 ROCKER_POSITIVE_KEY
+2 ROCKER_NEGATIVE_KEY
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_shutter.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_shutter.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_shutter.format	(working copy)
@@ -0,0 +1,252 @@
+
+
+omemalloc(
+
+////////////////////////////////////
+//shutter common config
+1 mem_shutter_bluetooth_type
+////////////////////////////////////
+
+//shutter config name by GPIO
+1 mem_shutter_config_enable
+2 mem_shutter_config_otp_base_address
+1 mem_shutter_config_size
+1 mem_shutter_config_select_gpio1
+1 mem_shutter_config_select_gpio2
+1 mem_shutter_config_select_gpio3
+
+2 mem_shutter_config_user_otp_address
+2 mem_shutter_config_eeprom_offset_addr
+
+////////
+2 mem_shutter_config_eeprom_start_flag
+1 mem_shutter_config_user_size
+///////
+1 mem_shutter_config_label
+2 mem_shutter_config_otp_addr
+///////////////////////////////////
+
+////////////////////////////////////
+//classic shutter config
+1 mem_classic_shutter_cable_unplug_conut
+1 mem_classic_shutter_hid_disconn_count
+2 mem_classic_shutter_random_mac_offset_addr
+////////////////////////////////////
+
+////////////////////////////////////
+//ble shutter config
+1 mem_ble_shutter_enable_notify
+2 mem_ble_shutter_reconn_dav_interval
+2 mem_ble_shutter_discovery_adv_interval
+2 mem_ble_shutter_reconn_timeout
+2 mem_ble_shutter_reconn_timer
+2 mem_ble_shutter_reconn_blink_on_time
+2 mem_ble_shutter_reconn_blink_off_time
+2 mem_ble_shutter_discovery_blink_on_time
+2 mem_ble_shutter_discovery_blink_off_time
+
+2 mem_ble_shutter_interval_min
+2 mem_ble_shutter_interval_max
+2 mem_ble_shutter_latency
+2 mem_ble_shutter_timeout
+
+2 mem_ble_shutter_interval_min_new
+2 mem_ble_shutter_interval_max_new
+2 mem_ble_shutter_latency_new
+2 mem_ble_shutter_timeout_new
+
+//////////////////shutter sleep timeout//////////////////
+2 mem_classic_shutter_discovery_timeout
+2 mem_classic_shutter_connect_timeout
+2 mem_ble_shutter_discovery_timeout
+2 mem_ble_shutter_connect_timeout
+2 mem_shutter_sleep_timeout
+2 mem_shutter_sleep_timer
+
+/////////////////////////////////////////////////////////////////
+1 mem_shutter_hard_soft_switch_case
+1 mem_shutter_soft_switch_button_gpio
+1 mem_shutter_soft_switch_power_state
+1 mem_shutter_soft_switch_poweron_time
+1 mem_shutter_soft_switch_poweroff_time
+2 mem_shutter_soft_switch_poweron_callback_function
+2 mem_shutter_soft_switch_poweroff_callback_function
+
+
+0 mem_shutter_keyscan
+1 mem_shutter_key_num
+2 mem_cb_shutter_keycan
+1 mem_shutter_key_conf0
+1 mem_shutter_key_conf1
+1 mem_shutter_key_conf2
+1 mem_shutter_key_conf3
+1 mem_shutter_key_conf4
+1 mem_shutter_key_conf5
+1 mem_shutter_key_conf6
+1 mem_shutter_key_conf7
+
+
+5 mem_key0_press
+5 mem_key1_press
+5 mem_key2_press
+5 mem_key3_press
+5 mem_key4_press
+5 mem_key5_press
+5 mem_key6_press
+5 mem_key7_press
+
+5 mem_key0_release	
+5 mem_key1_release
+5 mem_key2_release
+5 mem_key3_release
+5 mem_key4_release
+5 mem_key5_release
+5 mem_key6_release
+5 mem_key7_release
+
+5 mem_ble_data_buffer1
+5 mem_ble_data_buffer2
+5 mem_ble_data_buffer3
+5 mem_ble_data_buffer4
+5 mem_ble_data_buffer5
+5 mem_ble_data_buffer6
+5 mem_ble_data_buffer7
+5 mem_ble_data_buffer8
+50 mem_ble_data_buffer9_58
+
+5 mem_classic_data_buffer
+
+5 mem_classic_data_buffer1
+5 mem_classic_data_buffer2
+5 mem_classic_data_buffer3
+5 mem_classic_data_buffer4
+5 mem_classic_data_buffer5
+5 mem_classic_data_buffer6
+5 mem_classic_data_buffer7
+5 mem_classic_data_buffer8
+50 mem_classic_data_buffer9_58
+
+1 mem_queue_each_size
+1 mem_queue_length
+1 mem_queue_curr_num
+1 mem_queue_read_ptr
+1 mem_queue_write_ptr
+32 mem_queue_ele
+
+
+170 mem_shutter_nv_data
+
+0 mem_shutter_led_struct_app_led
+1 mem_shutter_led_struct_app_led_type
+1 mem_shutter_led_struct_app_led_blink_count
+1 mem_shutter_led_struct_app_led_gpio
+2 mem_shutter_led_struct_app_led_on_time
+2 mem_shutter_led_struct_app_led_off_time
+2 mem_shutter_led_struct_app_led_on_callback
+2 mem_shutter_led_struct_app_led_off_callback
+
+0 mem_shutter_power_off_led_style
+1 mem_shutter_power_off_led_style_type
+1 mem_shutter_power_off_led_style_blink_count
+1 mem_shutter_power_off_led_style_gpio
+2 mem_shutter_power_off_led_style_on_time
+2 mem_shutter_power_off_led_style_off_time
+2 mem_shutter_power_off_led_style_on_callback
+2 mem_shutter_power_off_led_style_off_callback
+
+1 mem_shutter_soft_swtich_botton_down
+11 mem_shutter_soft_swtich_led_struct_temp
+1 mem_shutter_power_off_timeout
+1 mem_shutter_power_off_timer
+
+)
+
+
+
+
+(
+0 BLE_SHUTTER
+1 CLASSIC_SHUTTER
+)
+
+(
+0x0000 NVRAM_EEPROM_OFFSET
+)
+
+(
+0x1b3a SHUTTER_EEPROM_CONFIG_CRC
+)
+
+(
+5 MAX_QUEUE_NUM
+5 SHUTTER_BLE_DATA_BUFFER
+5 SHUTTER_CLASSIC_DATA_BUFFER
+)
+
+
+(
+0x13	GATT_CONSUMER_NOTIFY_HANDLE
+0x14	GATT_CONSUMER_WRITE_HANDLE
+0x17	GATT_KEYBOARD_NOTIFY_HANDLE
+0x18	GATT_KEYBOARD_WRITE_HANDLE
+)
+
+(
+//20ms
+0x0020	FAST_ADV_INTERVAL_VALUE
+//100ms
+0x00a0	SLOW_ADV_INTERVAL_VALUE
+)
+
+
+(
+0 ATT_BIT_NOTIFICATION
+1 ATT_BIT_INDICATION
+)
+///////////////////////////////////////////////////////////////////////////////////////
+
+(
+0 HARD_SWITCH
+1 SOFT_SWITCH
+)
+
+
+(
+1  FLAG_SHUTTER_HID_DISCONN_TIMEOUT
+5 FLAG_SHUTTER_CABLE_UNPLUG_TIMEOUT
+)
+
+(//Data Rom Buffer Addr
+382		BLE_GATT_LIST_SIZE
+487		BT_SDP_LIST_SIZE
+40		BLE_KEY_VALUE_LIST_SIZE
+40		BT_KEY_VALUE_LIST_SIZE
+0x913A	BLE_SHUTTER_GATT_LIST
+0x92B8	CLASSIC_SHUTTER_SDP_LIST
+0x949F	BLE_SHUTTER_KEY_VALUE_LIST
+0x94C7	CLASSIC_SHUTTER_KEY_VALUE_LIST
+)
+
+
+(//soft switch power state
+0		SS_STATE_POWER_UP
+1		SS_STATE_POWER_ON
+2		SS_STATE_POWER_OFF
+)
+
+(
+0		SS_POWER_STATE_OFFSET
+1		SS_POWER_ON_TIME
+2		SS_POWER_OFF_TIME
+3		SS_POWER_ON_CB
+5		SS_POWER_OFF_CB
+
+)
+
+(
+
+0x4FFE SIM_IIC_SCL_GPIO_NUM
+0x4FFF SIM_IIC_SDA_GPIO_NUM
+
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_usb.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_usb.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/app_usb.format	(working copy)
@@ -0,0 +1,203 @@
+
+omemalloc(
+
+)
+
+//class type
+(
+0x00 STANDARD_REQ
+0x01 CLASS_REQ
+0x02 MANUFACTURER_REQ
+)
+//Standard Request Codes
+(
+0x00 GET_STATUS                // Code for Get Status
+0x01 CLEAR_FEATURE             // Code for Clear Feature
+0x03 SET_FEATURE              // Code for Set Feature
+0x05 SET_ADDRESS              // Code for Set Address
+0x06 GET_DESCRIPTOR           // Code for Get Descriptor
+0x07 SET_DESCRIPTOR           // Code for Set Descriptor(not used)
+0x08 GET_CONFIGURATION        // Code for Get Configuration
+0x09 SET_CONFIGURATION        // Code for Set Configuration
+0x0A GET_INTERFACE            // Code for Get Interface
+0x0B SET_INTERFACE            // Code for Set Interface
+0x0C SYNCH_FRAME              // Code for Synch Frame(not used)
+)
+//Standard Descriptor Types
+(
+0x01 DSC_DEVICE               // Device Descriptor
+0x02 DSC_CONFIG               // Configuration Descriptor
+0x03 DSC_STRING               // String Descriptor
+0x04 DSC_INTERFACE            // Interface Descriptor
+0x05 DSC_ENDPOINT             // Endpoint Descriptor
+)
+//HID Descriptor Types
+(
+0x21 DSC_HID			      // HID Class Descriptor
+0x22 DSC_HID_REPORT			  // HID Report Descriptor
+)
+//Define bmRequestType bitmaps
+(
+0x80 IN_DEVICE                // Request made to device,
+                              // direction is IN
+0x00 OUT_DEVICE               // Request made to device,
+                              // direction is OUT
+0x81 IN_INTERFACE             // Request made to interface,
+                              // direction is IN
+0x01 OUT_INTERFACE            // Request made to interface,
+                              // direction is OUT
+0x82 IN_ENDPOINT              // Request made to endpoint,
+                              // direction is IN
+0x02 OUT_ENDPOINT             // Request made to endpoint,
+)
+//HID Request Codes
+(
+0x01 GET_REPORT 		       // Code for Get Report
+0x02 GET_IDLE				   // Code for Get Idle
+0x03 GET_PROTOCOL			   // Code for Get Protocol
+0x09 SET_REPORT				   // Code for Set Report
+0x0A SET_IDLE				   // Code for Set Idle
+0x0B SET_PROTOCOL			   // Code for Set Protocol
+0xF2 HID_REPORT_ID           
+64 EP0_PACKET_SIZE         
+6 EP1_PACKET_SIZE         
+16 HID_REPORT_SIZE         
+0x001B HID_REPORT_DESCRIPTOR_SIZE    
+)
+//math cordic
+(
+0 TYPE_SIN		
+1 TYPE_ATAN	
+2 TYPE_MULT	
+3 TYPE_DIV		
+4 TYPE_ASIN	
+5 TYPE_SQRT	
+6 TYPE_COS		
+7 TYPE_TAN		 
+)
+   
+(
+0 DFIFO0_IN_EMPTY
+1 DFIFO1_IN_EMPTY
+2 DFIFO2_IN_EMPTY
+3 DFIFO3_IN_EMPTY
+4 DFIFO0_OUT_EMPTY
+5 DFIFO1_OUT_EMPTY
+6 DFIFO2_OUT_EMPTY
+7 DFIFO3_OUT_EMPTY
+)
+
+(
+4 USB_STATUS_SETUP
+6 USB_STATUS_NAK
+)
+
+(
+1 USB_GOT_REPORT_REQ
+2 USB_CONNECTED
+3 USB_SLEEP
+4 USB_RESUME
+5 USB_SETIDLE_1
+)
+
+(
+0x10 USB_EP1_KB
+0x20 USB_EP2_MS
+0x21 USB_EP2_MULTIKEY
+0x01 MAC_BOOT_MODE
+0x02 R_KEY
+0x03 LR_KEY
+)
+
+(
+0x8ffa	HID_KBDATA_ADDR
+0x903a	HID_MSDATA_ADDR
+0x90fe	HID_CONFDATA_ADDR
+)
+
+
+(
+0x01ba PC_GET_REPORT
+0x02ba PC_SET_REPORT
+0x0200 PC_SET_REPORT_bValue
+0x0000 PC_SET_REPORT_wIndex
+0x0001 PC_SET_REPORT_bLength
+0xba PC_REPORT_ID
+
+0x01 PC_GET_DATA
+0x00 PC_GET_NONDATA
+)
+
+(
+//--------------------------------------------------
+// Define device states
+0x00 DEV_ATTACHED	// Device is in Attached State
+0x01 DEV_POWERED	// Device is in Powered State
+0x02 DEV_DEFAULT		// Device is in Default State
+0x03 DEV_ADDRESS	// Device is in Addressed State
+0x04 DEV_CONFIGURED	// Device is in Configured State
+0x05 DEV_SUSPENDED	// Device is in Suspended State
+)
+
+(
+// Define wIndex bitmaps
+0x81 IN_EP1                    // Index values used by Set and Clear
+0x01 OUT_EP1                   // commands for Endpoint_Halt
+0x82 IN_EP2              
+0x02 OUT_EP2             
+0x83 IN_EP3              
+0x03 OUT_EP3             
+)
+
+(
+0 EP0_STALL
+1 EP1_IN_STALL
+2 EP1_OUT_STALL
+3 EP2_IN_STALL
+4 EP2_OUT_STALL
+5 EP3_IN_STALL
+6 EP3_OUT_STALL
+)
+
+(
+// Define wValue bitmaps for Standard Feature Selectors
+0x00 ENDPOINT_HALT             // Endpoint_Halt feature selector
+0x01 DEVICE_REMOTE_WAKEUP      // Remote wakeup feature(not used)
+0x00 BOOT_PROTOCOL
+0x01 REPORT_PROTOCOL
+0x01 USB_MAX_NUM_CFG
+)
+
+
+(
+0x1A0 AT_baud_115200
+0x4e2 AT_baud_38400
+0x1388 AT_baud_9600
+)
+
+(
+0x4e00 mem_module_rx_buf//0x400
+0x4fff mem_module_rx_buf_end
+0x1c00 mem_module_tx_buf
+0x1fff mem_module_tx_buf_end
+)
+
+(
+0x01 BIND_ACKPAYLOAD
+0x02 USER_ACKPAYLOAD
+
+0xcf CMD_OTA
+0xc0 CMD_OTA_START
+0xc1 CMD_OTA_DATA
+0xc2 CMD_OTA_EXIT
+0x55 OTA_STA_SUCCESS
+0xaa OTA_STA_FAIL
+)
+
+(
+0 TIMER_NAK
+640 TIMER_NAK_DELAY
+15 TIMER_WAKEUP
+5000 TIMER_WAKEUP_DELAY
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/bt.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/bt.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/bt.format	(working copy)
@@ -0,0 +1,1027 @@
+
+	width = 32
+	const length = 12000
+
+	/* ========= memory ============== */
+memalloc(
+/* 00-0f most frequently used area  */
+1 mem_le_adv_transmit
+1 mem_le_adv_waitcnt
+1 mem_le_adv_rcv
+1 mem_le_req_rcv
+1 mem_le_scanrsp_rcv
+1 mem_le_conn_rcv
+
+1 mem_inquiryscan_waitcnt
+1 mem_inquiryscan_rcvcnt
+1 mem_pagescan_waitcnt
+1 mem_pagescan_rcvcnt
+1 mem_pagescan_rcvfhscnt
+1 mem_slave_rcvcnt
+1 mem_page_transmit
+1 mem_page_rcv
+1 mem_page_rcv_fhs
+1 mem_master_rcvcnt
+
+/* 10-1f debug area */
+1 mem_fhs_wait_counter
+1 mem_newconnto_counter
+1 mem_inquiry_transmit
+1 mem_inquiry_rcv
+1 mem_fw_ver
+1 mem_current_context
+1 mem_le_ch_mapped
+1 mem_last_freq
+1 mem_rssi
+1 mem_rx_type
+2 mem_rx_hec_err
+2 mem_rx_crc_err
+2 mem_context_ptr
+8 mem_display
+8 mem_bcd
+
+		/* context swappable area */
+1 mem_state
+1 mem_mode
+2 mem_tsniff
+4 mem_sniff_anchor
+6 mem_clk_offset
+2 mem_rx_window
+3 mem_plap
+1 mem_puap
+2 mem_pnap
+1 mem_conn_handle
+1 mem_arq
+1 mem_lmp_to_send
+1 mem_lmi_opcode
+1 mem_lmo_reason
+1 mem_op
+1 mem_state_map
+4 mem_supervision_timer
+2 mem_supervision_to
+1 mem_name_offset
+1 mem_key_size
+1 mem_conn_sm
+12 mem_aco
+16 mem_kc
+1 mem_conn_timer
+1 mem_sniff_attempt
+1 mem_sniff_timeout
+2 mem_dsniff
+1 mem_amaddr
+1 mem_lmo_opcode1
+1 mem_lmi_opcode1
+1 mem_lmo_reason1
+1 mem_lmo_tid1
+1 mem_lmo_opcode2
+1 mem_lmi_opcode2
+1 mem_lmo_reason2
+1 mem_lmo_tid2
+
+3 mem_hci_version
+2 mem_acl_pktlen
+1 mem_sco_pktlen
+2 mem_acl_pktcnt
+2 mem_sco_pktcnt
+
+1 mem_current_sniff_attempt
+1 mem_current_sniff_timeout
+1 mem_sniff_timeout_temp
+1 mem_nfreq_index_inq
+1 mem_nfreq_index_page
+1 mem_ninqy_index
+1 mem_fhs_misc
+
+
+
+/* lpo related */
+4 mem_subsniff_instant
+1 mem_subsniff_rate
+2 mem_subsniff_tcmax
+1 mem_subsniff_tsniff
+1 mem_lpm_adjust
+6 mem_sync_clke
+1 mem_lpm_current_mult
+4 mem_gpio_wakeup_low
+4 mem_gpio_wakeup_high
+	
+
+/* sco & esco */
+1 mem_air_mode
+1 mem_sco_asso_handle
+2 mem_sco_handle
+1 mem_esco_desco
+1 mem_esco_type
+1 mem_neogotiation_state
+1 mem_saved_amaddr
+1 mem_esco_arq
+1 mem_esco_saved_arq
+30 mem_sco_obuf
+30 mem_sco_ibuf
+1 mem_sco_poll
+
+
+
+//page
+1 mem_npage_index
+1 mem_page_mode
+4 mem_page_clk
+
+
+/* test related */
+2 mem_tst_pktcnt_sync
+2 mem_tst_pktcnt_hec
+2 mem_tst_pktcnt_crc
+2 mem_tst_pktcnt_dmh
+3 mem_tmp_buffer_head
+80 mem_tmp_buffer
+
+
+1 mem_tester_emulate
+0 mem_temp_payload
+1 test_mode_scenario
+1 test_mode_hopping_mode
+1 test_mode_tx_freq
+1 test_mode_rx_freq
+1 test_mode_power_mode
+1 test_mode_poll_period
+1 test_mode_packet_type
+2 test_mode_data_length
+1 mem_test_mode_old_debug_config
+1 mem_tester_cnt
+
+
+/*temp mem*/
+1 mem_temp_am_addr
+1 mem_temp_arq
+
+//
+2 mem_len
+4 mem_clkn_bt
+4 mem_clke_bt
+4 mem_dpll_clkn
+1 mem_connection_options
+
+1 mem_nameres_cnt
+2 mem_txptr
+2 mem_slot_offset
+
+//extm
+1 extm_fhs_misc
+1 extm_newconn_am_addr
+3 extm_class
+3 extm_lap
+1 extm_uap
+3 extm_nap
+
+
+//debug
+1 mem_debug_config
+1 mem_lch_code
+1 mem_fhs_am_addr
+2 mem_dpll_error
+1 mem_select_list_item
+0 mem_temp_reconn_record
+1 mem_record_bt_mode
+6 mem_temp_lap
+2 mem_list_item_ptr
+
+100 mem_eir
+)
+
+
+xmemalloc(
+/* patch enable 0x4000-0x403f  */
+
+1 mem_patch00
+1 mem_patch01
+1 mem_patch02
+1 mem_patch03
+1 mem_patch04
+1 mem_patch05
+1 mem_patch06
+1 mem_patch07
+1 mem_patch08
+1 mem_patch09
+1 mem_patch0a
+1 mem_patch0b
+1 mem_patch0c
+1 mem_patch0d
+1 mem_patch0e
+1 mem_patch0f
+1 mem_patch10
+1 mem_patch11
+1 mem_patch12
+1 mem_patch13
+1 mem_patch14
+1 mem_patch15
+1 mem_patch16
+1 mem_patch17
+1 mem_patch18
+1 mem_patch19
+1 mem_patch1a
+1 mem_patch1b
+1 mem_patch1c
+1 mem_patch1d
+1 mem_patch1e
+1 mem_patch1f
+1 mem_patch20
+1 mem_patch21
+1 mem_patch22
+1 mem_patch23
+1 mem_patch24
+1 mem_patch25
+1 mem_patch26
+1 mem_patch27
+1 mem_patch28
+1 mem_patch29
+1 mem_patch2a
+1 mem_patch2b
+1 mem_patch2c
+1 mem_patch2d
+1 mem_patch2e
+1 mem_patch2f
+1 mem_patch30
+1 mem_patch31
+1 mem_patch32
+1 mem_patch33
+1 mem_patch34
+1 mem_patch35
+1 mem_patch36
+1 mem_patch37
+1 mem_patch38
+1 mem_patch39
+1 mem_patch3a
+1 mem_patch3b
+1 mem_patch3c
+1 mem_patch3d
+1 mem_patch3e
+1 mem_patch3f
+
+	/* 3 device contexts  */
+80 mem_context
+1 mem_current_amaddr
+1 mem_lpm_mode
+1 mem_device_option
+1 mem_scan_mode
+4 mem_last_clkn
+
+	/* parameters */
+8 mem_features
+3 mem_lap
+1 mem_uap
+2 mem_nap
+1 mem_npage
+3 mem_glap
+3 mem_class
+2 mem_iscan_window
+2 mem_iscan_interval
+2 mem_pscan_window
+2 mem_pscan_interval
+2 mem_page_interval
+2 mem_page_window
+2 mem_page_to
+2 mem_inq_window
+1 mem_fcomp_mul
+1 mem_fcomp_div
+2 mem_rx_window_init
+2 mem_rx_window_sniff
+2 mem_rf_init_ptr
+
+	/* connection related */
+1 mem_last_type
+1 mem_last_type_esco
+1 mem_last_type_saved
+2 mem_retransmission_cnt
+4 mem_next_btclk
+
+1 mem_rf_rccal
+1 mem_handle_num
+1 mem_max_slot
+1 mem_eir_enable
+
+/* AFH related */
+4 mem_afh_instant
+2 mem_afh_error_total
+1 mem_afh_cfg
+1 mem_afh_new_mod
+5 mem_afh_map_lo
+5 mem_afh_map_hi
+1 mem_afh_used
+2 mem_afh_index
+11 mem_afh_map_new
+80 mem_afh_map
+4 mem_afh_timer
+10 mem_afh_classify_channel_map
+
+
+	/* lpm related */
+2 mem_chip_functions
+2 mem_lpm_wake_lock
+2 mem_lpm_interval
+1 mem_lpm_overhead
+1 mem_lpm_hibernate_switch
+1 mem_esco_addr
+1 mem_sniff_unint_lost
+1 mem_ptt
+4 mem_sleep_counter   //should be 0x41fc in REVC
+4 mem_sleep_counter_all
+6 mem_sleep_clkn
+3 mem_sniff_rcv
+3 mem_sniff_lost
+3 mem_clks_per_lpo
+
+1 mem_lpm_mult
+1 mem_lpm_mult_timeout
+1 mem_lpm_mult_cnt
+
+/* 8139-813b lpm_ctrl[31:12] */
+3 mem_lpm_config				
+
+1 mem_lpm_xtalcnt
+1 mem_lpm_buckcnt
+1 mem_lpm_ldocnt
+1 mem_lpm_isogate
+1 mem_lpm_isogate_final
+16 mem_saved_gpio	// should be 0x421e in REVC
+3 mem_saved_gsel
+8 mem_saved_mark
+1 mem_saved_spidctrl
+2 mem_patch_ptr
+2 mem_patch_len
+
+32 mem_timers
+
+/*LINK KEY*/
+1 mem_link_key_exists
+16 mem_link_key
+
+
+/* HCI */
+1 mem_hci_cmd
+1 mem_hci_conn_handle
+3 mem_hci_plap
+1 mem_hci_puap
+2 mem_hci_pnap
+
+/*Peripherals*/
+1 mem_uartd_rxitems_got_data
+1 mem_uartd_rxitems_threshold
+2 mem_uartd_rx_timeout
+
+1 mem_loadcode_times
+
+1 mem_tx_lch
+2 mem_tx_len
+
+1 mem_tx_power
+
+1 mem_context_number
+
+1 mem_250k_freq_enable
+
+ifdef DEBUG_RF_INIT
+1 mem_rf_init_data
+endif
+)
+
+(//bluetooth tx power
+0 TX_POWER_0DB
+1 TX_POWER_3DB
+2 TX_POWER_5DB
+3 TX_POWER_f3DB
+4 TX_POWER_f5DB
+
+0x20 TX_POWER_PAIR
+)
+
+
+ifdef RAM_VERSION
+0x4b17 rom_lpm_sleep
+0x4b1d rom_lpm_enter_sleep
+0x4b16 rom_lpm_write_ctrl
+0x6b1a rom_otpd_read_data
+0x6ada rom_otp_write
+else
+0x3b17 rom_lpm_sleep
+0x59e0 rom_save_ucode
+
+0x4219 rom_mem_lpm_xtalcnt
+0x423b rom_mem_patch_ptr
+0x423d rom_mem_patch_len
+
+0x5b1a rom_otpd_read_data
+0x5ada rom_otp_write
+endif
+	/* context */
+(
+0x01 coffset_mode
+0x02 coffset_tsniff
+0x04 coffset_sniff_anchor
+0x08 coffset_clk_offset
+0x0e coffset_rx_window
+0x10 coffset_plap
+0x16 coffset_conn_handle
+0x17 coffset_arq
+	/* 3.0 only */
+0x18 coffset_lmp_to_send
+0x1b coffset_op
+0x1c coffset_state_map
+	/* le only */
+0x18 coffset_le_ch
+0x19 coffset_le_hop
+0x1a coffset_le_event_cnt
+
+80 context_size
+1 context_num
+)
+
+(
+0 lpm_flag_wake
+1 lpm_flag_loadcode
+)
+
+/* ========= parameters ============== */
+(
+0x0050 param_newconn_arq
+0x0007 param_esco_addr
+0x0010 param_conn_handle
+0x01f0 param_conn_handle_comp
+0x0020 param_newconnto
+0x0008 param_pagerespto
+0x0a00 param_snooze_setup_orig
+0x5353 param_snooze_ahead_orig
+0x00ff param_ninquiry
+0x2000 param_page_to
+0x0005 param_max_slot
+0x0010 param_sco_poll
+
+/* 24Mhz clock setting */
+ifdef CLK24M
+0x1c86 param_tx_setup
+0x0c00 param_rf_setup
+0x0c00 param_conn_access 
+0x1a00 param_rx_setup
+0x0776 param_clke_cal
+0x0a00 param_pll_setup
+4000 param_dpll_start_delay
+else
+/* 12Mhz clock setting */
+0x0e43 param_tx_setup
+0x0600 param_rf_setup
+0x0600 param_conn_access 
+0x03bb param_clke_cal
+0x0500 param_pll_setup		// 120 is minimum
+0x0d00 param_rx_setup	// 114us before sync
+2000 param_dpll_start_delay
+endif
+
+110 param_lpm_fix
+10 param_lpo_extra
+200 param_lpm_adjmax
+
+ifdef SIM
+20 param_hibernate_clks
+3 param_chgpump_delay
+else
+-1 param_hibernate_clks
+3000 param_chgpump_delay
+endif
+
+3 param_featrue_ssp
+0x0101 param_lmpext_ssp_enable
+339 param_acl_pktlen
+30   param_sco_pktlen
+1     param_acl_pktcnt		/*buffer acl pkt cnt*/
+7     param_sco_pktcnt
+
+
+0x8fffff param_features0
+0x9d83fe param_features1  // not support afh
+0x8359     param_features2
+0x000033 param_unap
+0x001177 param_lap
+0x9e8b33 param_glap
+0x002540 param_class//0x180208 //0x002580//402500//240404
+0x12e904 param_hci_version
+0x000a04 param_lmp_version//0x0a04
+0x000a06 param_lmp_version0
+0x12e9 param_lmp_subversion
+0x0012 param_tisw
+0x0012 param_tpsw
+0x1000 param_tisi
+0x0800 param_tpsi
+0x0020 param_page_window
+0x0020 param_inq_window
+0x1c80 param_supervision_to
+39 param_fcomp_div
+2 param_fcomp_mul
+6     param_name_len
+0x535442 param_name
+0x344950 param_name1
+
+
+)
+
+/* ======= packet types  ========= */
+(
+0x0      type_null    
+0x1      type_poll   
+0x2      type_fhs    
+0x3      type_dm1    
+0x4      type_dh1    
+0x5      type_hv1    
+0x6      type_hv2    
+0x7      type_hv3    
+0x8      type_3dh1     
+0x9      type_aux1   
+0xa      type_dm3    
+0xb      type_dh3    
+0xe      type_dm5    
+0xf      type_dh5    
+0x10     type_id
+0x11     type_shutdown
+0x13     type_lmp
+)
+
+/* ========== flag[6] =============== */
+(
+0        always        /* always 1 */
+1        true          /* set/rstn by verify,compare,icompare (true) */
+2        positive      /* set/rstn by all alu operations (opcode = 0x03,0x13,0x0f,0x1f), if alu output >= 0 */
+3        timeout       /* read only, the timeout from timers */
+5        zero          /* set/rstn by all alu operations (opcode = 0x03,0x13,0x0f,0x1f), if alu output == 0 */
+6        crc_failed    /* level, cleared by hop_start */
+7        enable_white  /* outside mux decide whether to load bt_clk or response_X */
+8        enable_parity /* level */
+9        enable_crc    /* level */
+10       enable_hec    /* level */
+11       decode_fec1   /* level */
+12       decode_fec2   /* level */
+13       decode_fec0   /* level */
+14       encrypt       /* level */
+15       crc16       /* for caculate ccitt crc16 */
+16       swfine	/* =0 stop_watch count based on oneslot =1 on 1 clock */
+20       rqst_freq    /* pulse, to start calculating frequency */
+21       recalc        /* pulse, to recalculate the fhs_parity */
+22       init_encrypt  /* pulse, issued to initialize encrption */
+23       mhalfbnd    /* half slot boundary of clke_rt, or when clke_bt[0] toggles */
+24       sync          /* sync found as a result of correlation,set/rstn by correlate opcode */
+25       user10    /* user10 */
+26       kc_p_activate  /* pulse to recalc the kc_p */
+27       encode_fec1   /* level */
+28       encode_fec2   /* level */
+29       encode_fec0   /* level */
+30       packet_end    /* pulse */
+32       is_tx         /* level */
+33       is_rx         /* level */
+34       halfslot     /* pulse, read only, when clkn_bt[0] toggles */
+35       oneslot      /* pulse, read only, when clkn_bt[1] toggles */
+36       mslotbnd     /* pulse, read only, when clke_bt[1] toggles */
+37       expire       /* level, read only, when selected clock source exceed timeup value */
+38       meet         /* level, read only, when selected clock source meet timeup value */
+39       tx_clear     /* level, read only, indicate tx pipe is cleared */
+40       user         /* user0 */
+41       master        /* user1 */
+42       slave2         /* user2 */
+43       wake           /* user3 */
+44       user2        /* user4 */
+45       match         /* user5 */
+46       attempt        /* user6 */
+47       user3          /* user7 */
+48       clknt         /* user8 */
+49	   user7 	/* user9 */
+50       synchronize   /* synchronize lpo and regular version of the clock */
+51       lpo_edge  /* read only, 3 clocks after risling edge of lpo clock */
+52       blank         /* C0 only, means pdata == 0 */
+53       modone          /* set divide operation is done */
+54       le		/* bluetooth 4.0 LE enable */
+55       aes_ready	/* set when aes is ok */
+63       never         /* read only, always 0 */
+)
+
+default flag = always
+
+/* ========== reg[6] =============== */
+(
+0        mark   /* for keeping strobes, more permanent */
+1        type   /* save and verify during rx */     /* rw */
+2        temp   /* general purpose register, 64 bits */
+3        contru  /* contr uart */
+4        am_addr      /* verify during rx, read and send during tx */ /* ro */
+5        contw        /* last mem_addr during write */
+6        contr        /* last mem_addr during read */
+7        queue    /* the index of qset*,qisolate* commands, ie, if queue = 3, qset/qisolate operate on bit3 */
+8        debug    /* can be wired out for observation */
+9        access   /* the 72 bit access word */
+10       contwu   /* contw uart */
+11       timeup        /* when does certain counter expire */
+12       pwindow       /* bit 71-61 of pdata; because on rx, bits shifts in from 71 down */
+13       fhs_parity    /* re-gernated based on bt_adr( {nap,uap,lap} ) when recalc flag is pulsed */
+14       white_init    /* init value of the whitening */
+15       crc24_init        /* init crc24 lfsr, 24 bits */
+16       interrupts    /* set interrupts, 40 bits */
+17       rega          /* general purpose register, 32 bits */
+18       regb          /* general purpose register, 32 bits */
+19       regc          /* general purpose register, 17 bits */
+20       regab         /* concat of {rega,regb}, thus 64 bits */
+21       radio_ctrl   /* radio i/f direct i/o ctrl, check following "radio_ctrl" section */
+21       ctrl_reg     /* 2023 and after */
+22       jtag_addr    /* load jtag address field, lsb */
+23       freq_index   /* 7 bit read only */
+24       jtag_data    /* wdata to and rdata from jtag */
+25       clkn              /* {clkn_bt, clkn_rt} */
+26       clke              /* {clke_bt, clke_rt} */
+27       stop_watch
+28       fhs_misc   /* SR, SP, pscan mode */
+29       fhs_class  /* class field in fhs */
+30       fhs0   /* read only, bit 0-71 of fhs word */
+31       fhs1   /* read only, bit 72-142 of fhs word */
+32       bt_adr /* r/w, the bt_addr to access gen and freq hopping, contain only lap and uap */
+33       bt_clk /* r/w, the bt_clk for freq hopping */
+34       clkn_bt  /* read only, native bluetooth clock, free running 3.2KHz  or controlled by RTHALFSLOT register */
+35       clkn_rt  /* read only, native realtime clock, free running 12MHz, count from 0-3749, or controlled by RTHALFSLOT register */
+36       freq_mode
+/* wire even_train    = freq_mode[4];    // odd even train                            */
+/* wire conn_mode     = 3;    // connection                                           */
+/* wire iqpgscan_mode = 2;    // slave in inquiry and page (not response)             */
+/* wire iqpgresp_mode = 1;    // slave in inquriy and page (response only)            */
+/* wire inqypage_mode = 0;    // master in inquiry and page(response or not response) */
+37       xin   /* x parameter, read only */
+38       N_tx_slot /* the N factor in equations for Xi,Xp,Xprm,Xprs */
+39 	   auxcnt
+40       clke_bt  /* r/w,  external bluetooth clock , free running 3.2KHz or controlled by RTHALFSLOT register */
+41       clke_rt  /* r/w,  external realtime clock, , free running 12MHz, count from 0-3749, or controlled by RTHALFSLOT register */
+43       host_mode         /* generic stuff for kick starts */
+44       lap
+45       uap
+46       nap         
+47       regext		/* r/w extended 12x32bit registers,  indexed by regext_index */
+48       alarm             /* r/w, lpo wake up time, this is also how lpo and current clock keep sync */
+49       lpo_time          /* read only, this is the value to be copied back to clkn/clke after wakeup */
+50       kc_ls             /* secret key,                71: 0 */
+51       kc_ms             /* secret key,               127:72 */
+52       g1l               /* encryption length                */
+53		mask3ff		/* for mask 0x3ff operation */
+54       aes_ctrl		
+56       regext_index   /* index of regext */
+57	     loopcnt
+58      stack			/* current return address */
+59       stack_ptr		/* stack depth */
+61         pc /* direct goto */
+62       null              /* to nowhere */
+63       pdata /* the shift register */
+)
+default reg = pdata
+
+/* regext_index */
+(
+0 regidx_data
+4 regidx_key
+8 regidx_xor
+12 regidx_result
+)
+/* ========== radio_ctrl========= */
+(
+0 TXGFSK
+1 PSK
+2 PSK3M
+3 RESET
+)
+/* assign BPWR = radio_ctrl[0]; */
+/* assign PARAMP = radio_ctrl[1]; */
+/* assign XTALPU = radio_ctrl[2]; */
+/* assign SYNTHPU = radio_ctrl[3]; */
+/* assign TXPU = radio_ctrl[4]; */
+/* assign RXPU = radio_ctrl[5]; */
+/* assign SLCTRL = radio_ctrl[6]; */
+/* assign XTALSEL_MUX_SEL = radio_ctrl[7] */
+
+
+/* =========== destination[4] ============== */
+(
+0 bucket
+1 rxf
+2 back
+3 mod
+)
+default dest = bucket
+
+/* =========== source[4] ============= */
+(
+1 txf
+3 demod
+)
+default source = 0
+
+
+/* ============== mark ============= *//*0 - 47 */
+(
+
+0  mark_fhs_eir  
+1  mark_rxbuf_inuse
+2  mark_tx_l2cap
+3  mark_switch_initiated
+4  mark_accept_switch
+5  mark_loopback
+7  mark_esco
+8  mark_esco_rxok
+9  mark_context
+10 mark_am_addr_broadcast
+11 mark_fhs_already_good
+12 mark_page_trainb
+13 mark_lpm_mult_enable
+14 mark_usb_flag
+15 mark_old_packet
+16 mark_longpacket
+17 mark_testmode
+18 mark_ar2
+19 mark_h5tx_rp
+20 mark_h5tx_crc	
+21 mark_h5tx_retransmit
+22 mark_h5rx_pstart
+23 mark_h5_sync
+24 mark_h5_reinit
+28 mark_inquiry_on
+29 mark_inquiry_state
+30 mark_inquiry_trainb
+31 mark_periodical_diac
+32 mark_all_diac
+33 mark_slave_in_rand_accepted
+34 mark_reconn_recieve_switch
+35 mark_isstr
+36 mark_loadcode
+37 mark_ext_patch
+38 mark_24g
+39 mark_24g_conext
+40 mark_eeprom_size
+// REVAB:max 35, REVC:max 63
+41 mark_ble_tx_md
+42 mark_ble_rx_md
+43 mark_otp_encrypt
+44 mark_first_packet
+45 mark_role_switch_receive_fhs
+)
+
+(
+1 reload_type_otp
+2 reload_type_spi
+3 reload_type_iic
+)
+
+
+/* ============== soft timers ============== */
+(
+0 le_adv_interval_timer
+1 inquiry_length_timer
+2 le_scan_interval_timer
+3 page_length_timer
+4 iscan_interval_timer
+5 pscan_interval_timer
+6 switch_wait_timer
+7 enpt_delay_timer
+8 page_interval_timer
+9 key_scan_timer
+10 smp_pairing_timer
+11  ui_led_blink   //led timer 可扩展
+12  ui_led_blink1
+13 ui_led_blink2
+ 
+)
+
+(
+1 hci_cmd_inquiry
+2 hci_cmd_inquiry_cancel
+3 hci_cmd_remote_name_req
+4 hci_cmd_remote_feature_req
+5 hci_cmd_create_conn
+6 hci_cmd_disconn
+7 hci_cmd_accept_conn
+8 hci_cmd_reject_conn
+9 hci_cmd_pair
+10 hci_cmd_nopair
+11 hci_cmd_linkkey
+12 hci_cmd_nokey
+13 hci_cmd_auth
+14 hci_cmd_stopencrypt
+15 hci_cmd_startencrypt
+16 hci_cmd_setup_sco
+17 hci_cmd_disconn_sco
+18 hci_cmd_in_sniff
+19 hci_cmd_exit_sniff
+20 hci_cmd_remote_version_req
+21 hci_cmd_remote_ext_features_req
+22 hci_cmd_io_cap
+23 hci_cmd_role_discovery
+24 hci_cmd_role_switch
+25 hci_cmd_accept_with_switch
+26 hci_cmd_detach
+27 hci_cmd_le_create_conn
+28 hci_cmd_accept_sco_conn
+80 hci_cmd_wait_remote_feature
+81 hci_cmd_wait_remote_ext_feature
+82 hci_cmd_wait_remote_name
+)
+
+
+
+/* ============== debug ============= */
+(
+0 debug_neg_skew
+1 debug_bitbucket
+2 debug_dont_clear_got_tx
+3 debug_scatter_enabled
+4 debug_tx_fixed_freq
+5 debug_rx_fixed_freq
+6 debug_tx_pattern
+)
+
+/* ============== tester_emulator ============= */
+(
+0 tester_fixed_flow
+1 tester_fixed_flow_polarity
+2 tester_change
+3 tester_exit
+4 tester_pattern_test
+5 tester_whitening_change
+6 tester_fixed_freq
+7 tester_no_whitening
+)
+
+/* ============== mode ==========*/
+(
+0 mode_le
+1 mode_master
+2 afh_enable
+3 afh_change
+4 send_sco_when_slave
+5 first_seqnx
+)
+
+/* ============== state_map ==========*/
+(
+0 smap_lmptidinit
+1 smap_lmptid
+2 smap_encryption
+3 smap_name_res
+4 smap_name_req
+5 smap_edr
+6 smap_rxlmp
+7 smap_rxl2cap
+)
+(
+0 state_inconn
+1 state_insniff
+2 state_insco 
+3 state_inpage
+4 state_conn_comp
+5 state_init_seq
+6 state_combkey
+7 state_linkkey
+)
+(
+0 op_send_sres
+1 op_auth_req
+2 op_inrand_req
+3 op_disconn
+4 op_stop_enc
+5 op_start_enc
+6 op_txl2cap
+7 op_pkt_comp
+)
+
+
+/* ============== arq [3] ================ */
+(
+0 flow
+1 arqn
+2 seqn
+3 wack
+4 flowx              /* out */  /* not really in memory */
+5 arqnx              /* out */
+6 seqnx              /* out */
+7 bcast1             /* first broadcast received */
+)
+
+/* arq          {flow,arqn,seqn}, read/write */
+/* [0] flow r/w  acl full status of the other, store during rx, checked during tx */
+/* [1] arqn r/w  ack of the other during rx (ack tx fifo),                        */
+/* [2] seqn r/w  seqn of the other, check during rx                               */ 
+/* arqx         {flowx,arqnx,seqnx} */
+/* [0] flowx r/o flow back to the other, 1 alow send, 0 not to send, read only tx */
+/* [1] arqnx r/w ack to the other, set by rx, send back on tx                     */
+/* [2] seqnx r/w toggled by arqn, to be send during tx                            */ 
+
+(
+0 llid0
+1 llid1
+2 nesn
+3 sn
+4 md
+5 wak
+)
+
+/* AFH flags */
+(
+0 AFH_CFG_ON
+1 AFH_CFG_TIMER
+2 send_lmp_set_afh
+3 AFH_CFG_REPORT_MODE
+4 AFH_CFG_MASTER_SENT_REQ
+)
+
+/* LLID CODE */
+(	
+1 LLID_L2CAP_CONT
+2 LLID_L2CAP_START
+3 LLID_LMP
+)
+
+/* ============== master_state ==========*/
+(
+0  master_in_idle
+1  master_in_inquiry
+2  master_in_page
+10 master_in_becoming_slave
+15 master_in_conn
+)
+(
+0 newrev_feature_bettx
+1 newrev_feature_betplltx
+2 newrev_feature_skip_retransmit
+3 newrev_feature_init_radio_after_sleep
+4 newrev_feature_no_lpolog
+)
+/*************mem_pincode_state****************/
+(
+0 pincode_state_ilde
+1 pincode_state_wait_pincode
+2 pincode_state_pincode_ready
+)
+
+
+// lpm_write
+(
+1 lpmreg_sel_ctrl
+2 lpmreg_sel_ctrl2
+4 lpmreg_sel_gpiolow
+8 lpmreg_sel_gpiohigh
+16 lpmreg_sel_counter
+)
+
+//scan_mode
+(
+0 inq_scan_mode
+1 page_scan_mode
+2 page_inq_enable
+)
+//mem_neogotiation_state
+(
+ 0 default_neogotiation_state
+ 1 prarm_neogotiation
+)
+
+//mem_lpm_wake_lock
+(
+0 wake_lock_ble_rx
+1 wake_lock_ble_tx
+
+3 wake_lock_key_press
+4 wake_lock_ble_tx_patch
+5 wake_lock_uart_tx
+6 wake_lock_uart_rx
+7 wake_lock_button
+8 wake_lock_cmd
+9 wake_lock_app
+10 wake_lock_lmp_tx
+11 wake_lock_lmp_rx
+12 wake_lock_l2cap_tx
+13 wake_lock_l2cap_rx
+14 wake_lock_ipc_c512bt
+15 wake_lock_ipc_bt2c51
+
+)
+
+(
+0 bt_disabled
+1 ble_disabled
+2 module_disable
+
+)
+
+(
+0x33  REC_3_MODE
+0x34  REC_4_MODE
+0x35  REC_4_MODE_STATIC_ADDRESS
+0x36  REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS
+0x37  REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS
+)
+
+
+//sniff UART_TX UART_RX
+(
+6 UART_WAKEUP_TX
+7 UART_WAKEUP_RX
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/command.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/command.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/command.format	(working copy)
@@ -0,0 +1,1384 @@
+
+/* Parse Command:
+TX: take bits from tx fifo, jam it into shift and a destination (rf,bucket)
+RX: take bits from demod,  jam it into shift and a destination (acl,sco,bucket) */
+
+/* Inject Command:
+TX: 0 into shift, send tail of shift into a destination (rf,bucket)
+RX: 0 into shift, send tail of shift into a destination (acl,sco,bucket) */
+
+format
+  ! 15 romdat
+  % d0
+  % d1
+  % d2
+  % d3
+  [8] d0
+  [8] d1
+  [8] d2
+  [8] d3
+end
+
+format
+  ! 15 enable   /* set flag to 1 */
+  % flag
+  [5] opcode
+  [6] 1
+  [6] flag
+  [6] null
+  [9] 0
+end
+ /* High 5 bytes of channel map */
+format
+  ! 15 pulse   /* set flag to 1 */
+  % flag
+  [5] opcode
+  [6] 1
+  [6] flag
+  [6] null
+  [9] 0
+end
+
+format
+  ! 15 disable   /* set flag to 0 */
+  % flag
+  [5] opcode
+  [6] 2
+  [6] flag
+  [6] null
+  [9] 0
+end
+
+format
+  ! 15 set0  /* set selected bit of reg to 0 */
+  % immediate
+  % reg
+  [5] opcode
+  [6] 9
+  [6] never
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 15 set1  /* set selected bit of reg to 1 */
+  % immediate
+  % reg
+  [5] opcode
+  [6] 9          /* alu op demux */
+  [6] always
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 15 setflag  /* set selected bit of the reg to the polarity of the flag */
+  % flag
+  % immediate
+  % reg
+  [5] opcode
+  [6] 9
+  [6] flag
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 15 nsetflag  /* set the selected bit of the reg to the opposite polarity of the flag */
+  % flag
+  % immediate
+  % reg
+  [5] opcode
+  [6] 0x29
+  [6] flag
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 15 setflip    /* invert the selected bit of the reg */
+  % immediate
+  % reg
+  [5] opcode
+  [6] 10            /* this is alu op */
+  [6] always
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 0x1f qset1      /* demux the lowest 4 bit of queue and OR it with regr into regw */
+  % reg             /* in short, set the bit in reg indexed by queue to 1 */
+  [5] opcode
+  [6] 9
+  [6] always
+  [6] reg
+  [9] 0
+end
+  
+format
+  ! 0x1f qset0      /* demux the lowest 4 bit of queue and AND it with regr into regw */
+  % reg             /* in short, set the bit in reg indexed by queue to 0 */
+  [5] opcode
+  [6] 9
+  [6] never
+  [6] reg
+  [9] 0
+end
+
+format 
+  ! 0x1f qsetflag   /* set the bit in reg index by queue to same as flag */
+  % flag
+  % reg
+  [5] opcode
+  [6] 9
+  [6] flag
+  [6] reg
+  [9] 0
+end
+
+format 
+  ! 0x1f nqsetflag   /* set the bit in the reg index by queue to opposite of flag */
+  % flag
+  % reg
+  [5] opcode
+  [6] 0x29
+  [6] flag
+  [6] reg
+  [9] 0
+end
+
+format
+  ! 0x1f qsetflip      /* flip the bit in reg index by queue */
+  % reg
+  [5] opcode
+  [6] 10
+  [6] always
+  [6] reg
+  [9] 0
+end
+
+format
+  ! 1 parse       /* take bits out of source (sco_tx,tx_buffer,rx-elas) into pdata and dest (sco_rx,rx_fifo,tx-elas) */
+  % source
+  % dest
+  % immediate
+  [5] opcode
+  [4] source      /* voice, data, demod */
+  [2] 0
+  [6] 0    
+  [2] 0           /* parse or inject */ 
+  [4] dest        /* acl, sco, mod, bucket */
+  [9] immediate   /* number of bits to parse off */
+end
+
+format
+  ! 1 inject      /* shift data from pdata into destination (tx-elas,rx_fifo,sco_rx) */
+  % destination
+  % immediate
+  [5] opcode
+  [4] 0
+  [2] 0
+  [6] 1
+  [2] 0
+  [4] destination /* acl,sco,mod,bucket */
+  [9] immediate   /* number of bits to be injected */
+end
+
+format
+  ! 1 iinject
+  % destination
+  % regr
+  [5] opcode
+  [6] regr       /* contain the number of bits to inject */
+  [6] 3
+  [2] 0
+  [4] destination /* acl,sco,mod,bucket */
+  [9] 0 
+end
+
+format
+  ! 1 stuff  /* automatic parse, stuff_counter decrement on every bit until hits zero */
+  % source
+  % destination
+  [5] opcode
+  [4] source
+  [2] 0
+  [6] 2
+  [2] 0
+  [4] destination
+  [9] 0
+end
+
+format    /* force immediate value into registers */
+  ! 3 force
+  % immediate
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 0    /* alu operation force */
+  [6] regw  /* destination register */
+  [9] immediate
+end
+
+format    /* force whatever is on shift_reg to regsiters */
+  ! 0x13 iforce
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 0    /* alu operation force */
+  [6] regw  /* destination register */
+  [9] 0
+end
+
+format    /* force immediate value into registers */
+  ! 3 increase
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 1    /* alu operation add */
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 3 pincrease
+  % immediate
+  [5] opcode
+  [6] -1  /* pdata */
+  [6] 1   /* alu add */
+  [6] -1  /* back to pdata */
+  [9] immediate
+end
+
+format    /* force immediate value into registers */
+  ! 3 and_into
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 2    /* alu operation and into */
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 3 and
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 2    /* alu operation and into */
+  [6] regw
+  [9] immediate
+end
+  
+format
+  ! 0x13 iand    /* pdata & regr -> regw */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 2    /* alu operation and into */
+  [6] regw
+  [9] 0
+end
+  
+
+format    /* and whatever is in shiftreg with reg */
+  ! 0x13 iand_into
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 2    /* alu operation and into */
+  [6] reg
+  [9] 0
+end
+
+format
+  ! 3 or_into
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 3    /* alu operation or into */
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 3 or
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 3    /* alu operation or into */
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 0x13 ior
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 3    /* alu operation or into */
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 0x13 ior_into
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 3    /* alu operation or into */
+  [6] reg
+  [9] 0
+end
+
+format
+  ! 3 skip_to   /* jump to location stored in reg */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 4   /* alu operation copy */
+  [6] rom_addr
+  [9] 0
+end
+
+format
+  ! 3 copy
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 4   /* alu operation copy */
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 deposit   /* copy the register content thru alu to shift register, not prealigned like preload */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 4   /* alu operation copy */
+  [6] -1  /* pdata */
+  [9] 0
+end
+
+format
+  ! 3 icopy     /* copy the shift register lsb content directly to register, not aligned */
+  % regw
+  [5] opcode
+  [6] -1  /* pdata */
+  [6]  4  /* alu copy */
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 add
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 1
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 0x13 iadd       /* regr + pdata -> regw */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 1
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 sub          /* immediate - regr -> regw */
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 12
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 0x13 isub       /* pdata - regr -> regw */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 12
+  [6] regw
+  [9] 0
+end
+
+
+format
+  ! 3 flip
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 5
+  [6] reg
+  [9] immediate
+end
+  
+format
+  ! 0x13 iflip  /* use shift register as immediate to do xor */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 5
+  [6] regw
+  [9] 0
+end
+  
+format
+  ! 3 xor
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 5
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 3 xor_into
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 5
+  [6] reg
+  [9] immediate
+end
+  
+format
+  ! 0x13 ixor  /* pdata xor regr and store result in regw */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 5
+  [6] regw
+  [9] 0
+end
+  
+format
+  ! 3 invert
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 8
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 pinvert    /* invert pdata into itself */
+  [5] opcode
+  [6] -1
+  [6] 8
+  [6] -1
+  [9] 0
+end
+
+format
+  ! 3 div                 /* regr div immediate div */
+  % reg
+  % immediate
+  [5] opcode
+  [6] reg
+  [6] 13                   /* generate diven pulse to div */
+  [6] null
+  [9] immediate
+end
+
+format
+  ! 0x13 idiv           /* pdata div regr data ready at most after 41 nops */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 13                   /* generate diven pulse to div */
+  [6] null
+  [9] 0
+end
+
+format
+  ! 3 remainder            /* harvest div remainder */
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 14
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 quotient             /* harvest div quotient */
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 15
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 6
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift2
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 22
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift3
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 18
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift4
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 35
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift8
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 25
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift16
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 34
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift32
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 30
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 lshift
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 7
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 lshift2
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 23
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 lshift8
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 26
+  [6] regw
+  [9] 0
+end
+
+  
+format
+  ! 3 lshift3
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 19
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 lshift4
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 36
+  [6] regw
+  [9] 0
+end
+  
+
+format
+  ! 3 lshift16
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 32
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 random               /* random number into regw */
+  % reg
+  [5] opcode
+  [6] 0
+  [6] 20
+  [6] reg
+  [9] 0
+end
+
+format                     /* bit reverse within a byte */
+  ! 3 reverse
+  % reg
+  % regw
+  [5] opcode
+  [6] reg
+  [6] 27
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 priority    /* priority encode reg into regw, lsb is the top priority, ie, priority(8'b00010000) = 4 */
+  % reg
+  % regw
+  [5] opcode
+  [6] reg
+  [6] 21
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 7 setsect   /* set a section of pdata */
+  % section    /* 0 sets 17:0 of pdata with set_data, 1 sets 35:18, 2 sets 53:36, 3 sets 71:54 */
+  % set_data
+  [5] opcode
+  [7] 0
+  [2] section
+  [18] set_data
+end
+
+format
+  ! 10 preload   /* load stuff into pdata according to fhs format, check us.v */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 0
+  [6] -1
+  [9] 0
+end
+
+format  /* load register with pdata content, according to fhs format, check us.v */
+  ! 10 ialigned   /* all bits are in position */
+  % regw
+  [5] opcode
+  [6] -1
+  [6] 0
+  [6] regw
+  [9] 0
+end
+
+format  /* load register to another according to fhs format */
+  ! 10 aligned
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 0
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 4 branch
+  % addr
+  % flag
+  [5] opcode
+  [6] 1
+  [6] flag
+  [15] addr
+end
+
+format
+  ! 4 call
+  % addr
+  % flag
+  [5] opcode
+  [6] 2
+  [6] flag
+  [15] addr
+end
+
+format
+  ! 4 rtn
+  % flag
+  [5] opcode
+  [6] 3
+  [6] flag
+  [15] 0
+end
+
+format
+  ! 0x0c store          /* write to memory, data from pdata, address from immediate then mem_ptr */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 0
+  [1] 0
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0c hstore          /* write to memory, data from pdata, address from immediate then mem_ptr */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 1
+  [1] 0
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x1c istore        /* write to memory, data from pdata, address from regr then mem_ptr */
+  % num_bytes
+  % reg
+  [5] opcode
+  [6] reg            /* hold address */
+  [1] 0
+  [1] 0
+  [4] num_bytes
+  [15] 0
+end
+
+format
+  ! 0x0d fetch          /* read from memory, data into pdata, address from immediate then mem_ptr */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 0
+  [1] 0
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0d hfetch          /* read from memory, data into pdata, address from immediate then mem_ptr */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 1
+  [1] 0
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0d crc         /* read from memory, count from loopcnt, put crc result into pdata */
+  % addr
+  [5] opcode
+  [6] 0
+  [1] 0
+  [1] 0
+  [4] 0
+  [15] addr
+end
+
+format
+  ! 0x1d icrc         /* read from memory, address from reg, count from loopcnt, put crc result into pdata */
+  % reg
+  [5] opcode
+  [6] reg             /* hold address */
+  [1] 0
+  [1] 0
+  [4] 0
+  [15] 0
+end
+
+
+format
+  ! 0x1d ifetch         /* read from memory, data into pdata, address from regr then mem_ptr */
+  % num_bytes
+  % reg
+  [5] opcode
+  [6] reg             /* hold address */
+  [1] 0
+  [1] 0
+  [4] num_bytes
+  [15] 0
+end
+
+format
+  ! 0x0c storet          /* write to memory, data from temp, address from immediate won't increment */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 0
+  [1] 1
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0c hstoret          /* write to corereg, data from temp, address from immediate won't increment */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 1
+  [1] 1
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x1c istoret        /* write to memory, data from temp, address from regr won't increment */
+  % num_bytes
+  % reg
+  [5] opcode
+  [6] reg            /* hold address */
+  [1] 0
+  [1] 1
+  [4] num_bytes
+  [15] 0
+end
+
+format
+  ! 0x0d fetcht          /* read from memory, data into temp, address from immediate won't increment */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 0
+  [1] 1
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0d hfetcht          /* read from corereg, data into temp, address from immediate won't increment */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 1
+  [1] 1
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x1d ifetcht         /* read from memory, data into temp, address from regr won't increment */
+  % num_bytes
+  % reg
+  [5] opcode
+  [6] reg             /* hold address */
+  [1] 0
+  [1] 1
+  [4] num_bytes
+  [15] 0
+end
+
+format
+  ! 0x0e jam
+  % immediate
+  % addr
+  [5] opcode
+  [3] 0
+  [16] addr
+  [8] immediate
+end
+
+format			/* 0x242... */
+  ! 4 nbranch
+  % addr
+  % flag
+  [5] opcode
+  [1] 1
+  [5] 1
+  [6] flag
+  [15] addr
+end
+
+format
+  ! 4 ncall
+  % addr
+  % flag
+  [5] opcode
+  [1] 1
+  [5] 2
+  [6] flag
+  [15] addr
+end
+
+format
+  ! 4 nrtn
+  % flag
+  [5] opcode
+  [1] 1
+  [5] 3
+  [6] flag
+  [15] 0
+end
+
+format
+  ! 4 nop
+  % addr  /* no-op for addr+2 clocks */
+  [5] opcode
+  [6] 0     
+  [6] 0     /* always */ 
+  [15] addr
+end
+
+format
+  ! 4 clear_stack
+  [5] opcode
+  [6] 4
+  [6] 0    /* always */
+  [15] 0
+end
+
+format
+  ! 6 until
+  % reg
+  % flag
+  [5] opcode
+  [6] reg
+  [6] flag
+  [6] 1
+  [9] 0
+end
+  
+format
+  ! 6 correlate   /* quit if 1. flag is true 2, regr time up 3, found sync,(cond_true) */
+  % reg          /* expire counter to check against */
+  % flag
+  [5] opcode
+  [6] reg
+  [6] flag
+  [6] 2           /* correlate */
+  [9] 0           
+end
+
+format
+  ! 5 compare   /* sets cond flag,  if reg equals immediate */
+  % immediate
+  % reg
+  % mask
+  [5] opcode
+  [6] reg
+  [3] 0
+  [9] mask
+  [9] immediate
+end
+
+format
+  ! 0x15 icompare   /* sets cond flag,  if reg equals pdata */
+  % mask
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 0
+  [9] mask
+  [9] 0
+end
+
+format   /* sets cond. flag, if reg equals LS half of shift reg with MS half of reg being mask */
+  ! 5 iverify
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 2
+  [18] 0
+end
+
+format
+  ! 0x15 qisolate1
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 3
+  [18] -1
+end
+
+format
+  ! 0x15 qisolate0
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 3
+  [18] 0
+end
+
+	/* REVAB bug: cannot access bit above 35 */
+format
+  ! 5 isolate1
+  % addr
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 3
+  [9] -1
+  [9] addr
+end
+
+format
+  ! 5 isolate0
+  % addr
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 3
+  [9] 0
+  [9] addr
+end
+
+format
+  ! 11 setarg
+  % immediate
+  [5] opcode
+  [27] immediate
+end
+
+format
+  ! 0x1b arg
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [21] immediate
+end
+
+  
+format
+  ! 0 sleep
+  [5] opcode
+  [27] 0
+end
+
+format
+  ! 0 snooze
+  [5] opcode
+  [6] -1
+  [21] 0
+end
+
+format
+  ! 0 revision
+  % rev_num
+  [5] opcode
+  [27] rev_num
+end
+
+format
+  ! 0x18 loop   /* branch when loopcnt is NOT zero, and decrease loopcnt */
+  % addr
+  [5] opcode
+  [4] 4
+  [8] 0
+  [15] addr
+end
+
+format
+  ! 0x18 beq   /* branch when pdata is equal to immediate */
+  % imme
+  % addr
+  [5] opcode
+  [4] 0
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 bne   /* branch when pdata is NOT equal to immediate */
+  % imme
+  % addr
+  [5] opcode
+  [4] 1
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 rtneq   /* return when pdata is equal to immediate */
+  % imme
+  [5] opcode
+  [4] 2
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 0x18 rtnne   /* return when pdata is NOT equal to immediate */
+  % imme
+  [5] opcode
+  [4] 3
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 0x18 bbit1   /* branch when pdata's imme bit is 1 */
+  % imme
+  % addr
+  [5] opcode
+  [4] 5
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 bbit0   /* branch when pdata's imme bit is 0 */
+  % imme
+  % addr
+  [5] opcode
+  [4] 6
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 rtnbit1   /* return when pdata's imme bit is 0 */
+  % imme
+  [5] opcode
+  [4] 7
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 0x18 rtnbit0   /* return when pdata's imme bit is 0 */
+  % imme
+  [5] opcode
+  [4] 8
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 8	bpatch
+  % imme
+  % addr
+  [5] opcode
+  [4] 9
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 8	bpatchx
+  % imme
+  % addr
+  [5] opcode
+  [4] 14
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 bmark1   /* branch when mark's imme bit is 1 */
+  % imme
+  % addr
+  [5] opcode
+  [4] 10
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 bmark0   /* branch when mark's imme bit is 0 */
+  % imme
+  % addr
+  [5] opcode
+  [4] 11
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 rtnmark1   /* return when mark's imme bit is 0 */
+  % imme
+  [5] opcode
+  [4] 12
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 0x18 rtnmark0   /* return when mark's imme bit is 0 */
+  % imme
+  [5] opcode
+  [4] 13
+  [8] imme
+  [15] 0
+end
+
+
+format
+  ! 3 mult                  /* immediate mult regr */  /* the product will be ready 17 clks later */
+  % immediate                                   /* use "product" instruction to get the result */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 16                   /* generate diven pulse to div */
+  [6] null
+  [9] immediate
+end
+
+format
+  ! 0x13 imult           /* pdata mult regr */  /* the product will be ready after 15 nops */
+  % reg                                         /* use product opcode to get the result */
+  [5] opcode
+  [6] reg
+  [6] 16                   /* generate mult pulse to multiplier */
+  [6] null
+  [9] 0
+end
+
+format
+  ! 3 mul32                  /* immediate mult regr */ 
+  % regr
+  % immediate                                  
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 31           
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 0x13 imul32           /* pdata mult regr 32x32=64bit */  
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 31                   
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 product              /* harvest mult product */
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 17
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 byteswap
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 33
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 shasx          /* SHA256 Sx operation, immediate is Sx */
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 28
+  [6] regw
+  [9] immediate
+end
+
+
+format
+  ! 0x13 regexrot 	/* regext[0] <- regext[7], regext[1] <- regext[0], regext[2] <- regext[1] ... */
+  [5] opcode
+  [6] 0
+  [6] 29
+  [6] null
+  [9] 0
+end
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/g24.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/g24.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/g24.format	(working copy)
@@ -0,0 +1,461 @@
+
+cmemalloc 0 (
+34 mem_24g_rxbuf
+32 mem_24g_txbuf
+34 mem_24g_txpayload
+32 mem_24g_rxpayload
+1 mem_24g_rxdata_length
+1 mem_24g_pid
+1 mem_24g_datalen
+1 mem_24g_data_type
+1 mem_24g_txlen
+2 mem_24g_rx_window
+1 mem_24g_ensure
+2 mem_24g_txfail_cnt
+1 mem_24g_get_ack_fail
+1 mem_24g_retry
+1 mem_24g_ch
+1 mem_24g_current_ch_number
+4 mem_24g_paring_addr
+1 mem_24g_pairing_sm
+4 mem_24g_ch_map1
+4 mem_24g_ch_map2
+4 mem_24g_ch_map3
+4 mem_24g_ch_map4
+4 mem_24g_tx_btclk
+1 mem_24g_interval
+1 mem_24g_interval_min
+1 mem_24g_interval_max
+4 mem_24g_addr
+1 mem_24g_abort_pac
+2 mem_24g_check_dongle_times
+
+8 mem_24g_enter_hibernate
+4 mem_24g_device_addr
+1 mem_24g_pac_index
+1 mem_24g_no_ack
+3 mem_24g_sta_crc
+3 mem_24g_last_crc
+1 mem_24g_sta_pid
+1 mem_24g_last_pid
+1 mem_24g_max_retry
+1 mem_24g_mode
+
+34 mem_24g_rxdata_temp
+4 mem_24g_rx_addr
+1 mem_dongle_mode_init
+1 mem_dongle_work_mode
+1 mem_dongle_ms_bind_step
+1 mem_dongle_kb_bind_step
+1 mem_dongle_bind_device_status
+8 mem_24g_bind_payload
+1 mem_24g_abort_packet
+1 mem_24g_rf_laststa
+4 mem_24g_hop_btclk
+1 mem_24g_hop_interval
+1 mem_24g_mode_switch
+1 mem_24g_ackpayload_enable
+1 mem_24g_hop_packet
+1 mem_24g_pair_mode
+1 mem_24g_nodata_timer_enable
+1 mem_24g_time_slice
+8 mem_24g_kb_data_sta_data
+8 mem_24g_kb_data_last_data
+3 mem_24g_kb_multikey_sta_data
+3 mem_24g_kb_multikey_last_data
+1 mem_24g_kb_blank_data_enable
+1 mem_24g_kb_mul_blank_data_enable
+1 mem_24g_ms_blank_data_enable
+4 mem_24g_kb_addr
+4 mem_24g_ms_addr
+
+1 mem_24g_dg_last_ch
+1 mem_24g_dg_ch_number
+1 mem_24g_dg_config_ch_once
+1 mem_24g_kb_last_ch
+1 mem_24g_kb_ch_number
+1 mem_24g_kb_config_ch_once
+1 mem_24g_ms_last_ch
+1 mem_24g_ms_ch_number
+1 mem_24g_ms_config_ch_once
+
+2 mem_24g_syncword
+1 mem_24g_syncword_crc8
+1 mem_24g_get_syncword_crc8
+2 mem_24g_ota_sta_pid
+
+1 mem_tx_power_temp
+
+1 mem_rssi_hex
+1 mem_rssi_noise_avg
+1 mem_rssi_noise_index
+1 mem_rssi_signal_index
+1 mem_rssi_noise_dg_avg
+1 mem_rssi_noise_kb_avg
+1 mem_rssi_noise_ms_avg
+1 mem_rssi_noise_dg_index
+1 mem_rssi_noise_kb_index
+1 mem_rssi_noise_ms_index
+8 mem_rssi_signal_buf
+
+1 mem_queue_ele_num
+2 mem_queue_read
+2 mem_queue_write
+0 mem_queue_start
+32 mem_data_ele0
+32 mem_data_ele1
+32 mem_data_ele2
+0 mem_queue_end
+2 mem_queue_temp
+
+2 mem_cb_24g_data
+1 mem_24g_hop_fastly_cnt
+1 mem_24g_hop_pac_retry
+1 mem_24g_rf_hop_ch
+1 mem_24g_rf_last_sta
+1 mem_24g_rf_work_stage
+1 mem_24g_sync_cnt
+1 mem_power_ctrl_pac_succ_cnt
+1 mem_rssi_avg_received
+1 mem_rssi_hex_received
+1 mem_power_ctrl_level
+
+1 mem_seqi
+1 mem_24g_auto_paring_switch
+1 mem_24g_paccnt
+1 mem_24g_transmit_by_interrupt
+1 mem_24g_transmit_by_interrupt_exit_count
+)
+
+(
+//add
+0   offset_24g_rxbuf
+1   offset_24g_rxbuf_add1
+2   offset_24g_rxbuf_add2
+34  offset_24g_txbuf
+66  offset_24g_txpayload
+100 offset_24g_rxpayload
+102 offset_24g_rxpayload_add2
+132 offset_24g_rxdata_length
+133 offset_24g_pid
+134 offset_24g_datalen
+135 offset_24g_data_type
+136 offset_24g_txlen
+137 offset_24g_rx_window
+139 offset_24g_ensure
+140 offset_24g_txfail_cnt
+141 offset_24g_get_ack_fail
+142 offset_24g_tx_without_int
+143 offset_24g_retry
+144 offset_24g_ch
+145 offset_24g_current_ch_number
+146 offset_24g_paring_addr
+150 offset_24g_pairing_sm
+151 offset_24g_ch_map1
+155 offset_24g_ch_map2
+159 offset_24g_ch_map3
+163 offset_24g_ch_map4
+167 offset_24g_tx_btclk
+171 offset_24g_interval
+172 offset_24g_interval_min
+173 offset_24g_interval_max
+174 offset_24g_addr
+178 offset_24g_abort_pac
+179 offset_24g_sync_pac
+180 offset_24g_hop_pac
+181 offset_24g_check_dongle_times
+182 offset_24g_enter_hibernate
+190 offset_24g_device_addr
+194 offset_24g_pac_index
+195 offset_24g_no_ack
+196 offset_24g_sta_crc
+199 offset_24g_last_crc
+202 offset_24g_sta_pid
+203 offset_24g_last_pid
+204 offset_24g_max_retry
+205 offset_24g_mode
+206 offset_24g_rf_last_sta
+207 offset_24g_rf_hop_ch
+208 offset_24g_sync_cnt
+209 offset_24g_hop_pac_retry
+210 offset_24g_rf_work_stage
+211 offset_24g_hop_fastly_cnt
+212 offset_24g_short_sleep_timer
+216 offset_24g_cb_data
+218 offset_24g_cb_lpm_prepare
+220 offset_24g_cb_lpm_before
+222 offset_24g_cb_rxdata_type1
+224 offset_rssi_signal_index
+225 offset_rssi_signal_avg
+226 offset_rssi_signal_buf
+234 offset_rssi_noise_index
+235 offset_rssi_noise_avg
+236 offset_rssi_noise_buf
+244 offset_rssi_ctrl_threshold_down
+245 offset_rssi_noise_dg_index
+246 offset_rssi_noise_kb_index
+247 offset_rssi_noise_ms_index
+248 offset_rssi_noise_dg_avg
+249 offset_rssi_noise_kb_avg
+250 offset_rssi_noise_ms_avg
+251 offset_tx_power_temp
+252 offset_power_ctrl_packet_cnt
+253 offset_power_ctrl_ack_cnt
+254 offset_power_ctrl_level
+255 offset_power_ctrl_txpwr_level2
+//iadd
+256 offset_power_ctrl_txpwr_level1
+257 offset_power_ctrl_txpwr_level0
+258 offset_power_ctrl_threshold_up
+259 offset_power_ctrl_threshold_down
+260 offset_dongle_mode_init
+261 offset_dongle_work_mode
+262 offset_dongle_ms_bind_step
+263 offset_dongle_kb_bind_step
+264 offset_dongle_bind_device_status
+265 offset_24g_rxdata_temp
+267 offset_24g_rxdata_temp_add2
+268 offset_24g_rxdata_temp_add3
+269 offset_24g_rxdata_temp_add4
+299 offset_24g_rx_addr
+303 offset_24g_bind_payload
+304 offset_24g_bind_payload_add1
+305 offset_24g_bind_payload_add2
+309 offset_24g_rf_laststa
+310 offset_24g_hop_btclk
+314 offset_24g_hop_interval
+315 offset_24g_ackpayload_enable
+316 offset_24g_ackpayload
+348 offset_24g_mode_switch
+349 offset_24g_pair_mode
+350 offset_24g_nodata_timer_enable
+351 offset_24g_time_slice
+352 offset_24g_mouse_addr
+356 offset_24g_kb_addr
+360 offset_24g_kb_data_sta_data
+368 offset_24g_kb_data_last_data
+376 offset_24g_kb_multikey_sta_data
+379 offset_24g_kb_multikey_last_data
+382 offset_24g_kb_blank_data_enable
+383 offset_24g_kb_mul_blank_data_enable
+384 offset_24g_ms_blank_data_enable
+385 offset_24g_dg_last_ch
+386 offset_24g_dg_ch_number
+387 offset_24g_dg_config_ch_once
+388 offset_24g_kb_last_ch
+389 offset_24g_kb_ch_number
+390 offset_24g_kb_config_ch_once
+391 offset_24g_ms_last_ch
+392 offset_24g_ms_ch_number
+393 offset_24g_ms_config_ch_once
+394 offset_24g_pair_txpower
+395 offset_24g_auto_pair_switch
+)
+
+(
+3 QUEUE_ELE_COUNT
+32 QUEUE_ELE_LENGTH
+)
+
+(
+3 retry_24g
+1 NO_ACK_24G
+0 WITH_ACK_24G
+
+0 ENSURE_OFF_24G
+1 ENSURE_ON_24G
+
+0x10 ABORT_DATA
+0x40 RSSI_SENSITIVITY
+
+0x4e G24_PAIR_CH
+)
+
+(
+0 disable_24g
+1 tx_24g
+2 rx_24g
+
+0 bit_ack_24g
+)
+
+//mem_24g_interrupt
+(
+0 rx_dr
+1 rx_sync
+4 tx_ds
+5 tx_fail
+)
+
+//mem_24g_data_type
+(
+0x07 bits_data
+//0-2 data type
+3 bit_abort
+4 bit_hop
+5 bit_sync
+//6-7 channel offset
+)
+
+
+
+//mem_24g_pairing_sm
+(
+0 STATE_24G_PAIRING_NULL
+1 STATE_24G_PAIRING_1
+2 STATE_24G_PAIRING_2
+3 STATE_24G_PAIRING_3
+0X11 STATE_24G_PAIRING_1_WAITING_ACK
+0X12 STATE_24G_PAIRING_2_WAITING_ACK
+0X13 STATE_24G_PAIRING_3_WAITING_ACK
+0XFF STATE_24G_PAIRING_SUCCESS
+)
+
+(
+0 DONGLE_WORK	   		//connect mode normal
+1 DONGLE_BIND			//code pair mode
+2 DONGLE_TEST			//test mode
+3 DONGLE_CODE			//PC_application
+4 DONGLE_PCBA			//PCBA_TEST
+5 DONGLE_DEBUG
+6 DONGLE_MODE_MAX
+7 DONGLE_SEARCH
+0 CLEAR_INIT
+)
+
+(
+0x01 DATATYPE_MOUSE	//mouse
+0x02 DATATYPE_KEYBOARD	//keyboard
+0xAA DATATYPE_BIND		//bind step 1
+0x55 DATATYPE_CONFIG	//bind step 2
+0x22 DATATYPE_OK	//bind step 3
+
+0x01 BIND_MOUSE
+0x02 BIND_KEYBOARD
+)
+
+(
+112 G24_DONGLE_ADDR
+)
+
+(
+0xa0 COMMAND_MODE     //BYTE 0
+0X81 COM_MODE_BIND	//BYTE 1
+0X82 COM_MODE_TEST	//BYTE 1
+)
+(
+0xa1 COMMAND_BIND		//BYTE 0
+0X01 COM_BIND_GET		//1
+0X84 COM_BIND_EXIT		//1
+0XA7 COM_READ_MODE	//1
+)
+(
+0xa2 COMMAND_TEST	//BYTE 0
+0X81 COM_TEST_SC		//	进入单载波
+0x82 COM_TEST_CD		// fcc测试
+0x83 COM_TEST_DAT		// 数据测试
+0X84 COM_TEST_LOW_CH  //低频点
+0X85 COM_TEST_MID_CH	//中频点
+0X86 COM_TEST_HIG_CH	//高频点
+0X87 COM_TEST_SW_HIG	//自动切换频点为高 1mhz
+0X88 COIM_TEST_SW_LOW	//自动切换频点为低 1mhz
+0X89 COM_TEST_SW_STOP	//停止自动切换频点
+0X8A COM_TEST_POW_5		//设置输出功率5dbm
+0X8B COM_TEST_POW_0		//0dbm
+0X8C COM_TEST_POW_N5		//-5dbm
+0X8D COM_TEST_POW_N10		//-10dbm
+0X8E COM_TEST_EXIT			//退出测试模式
+)
+(
+0xa6 COMMAND_CURRENT_PROJECT
+0xa7 COMMAND_CURRENT_MODE
+0xa9 COMMAND_CURRENT_FW_VERSION
+)
+
+//user defined cmd
+(
+0xb0 COMMAND_USER_DEFINED
+)
+
+(
+0x15 PRODUCT_ID
+0 FW_VERSION0
+0 FW_VERSION1
+1 FW_VERSION2
+7 FW_VERSION3
+)
+
+
+(
+8 TIMER_NODATA
+640 TIMER_NODATA_DELAY	//200ms
+
+11 TIMER_MS_BLANK
+320 TIMER_MS_BLANK_DELAY
+
+12 TIMER_KB_MUL_BLANK
+320 TIMER_KB_MUL_BLANK_DELAY
+
+14 TIMER_KB_BLANK
+320 TIMER_KB_BLANK_DELAY
+)
+
+(
+0 KB_NORMAL_REPORT_ID
+1 MS_REPORT_ID
+3 KB_MULTIKEY_REPORT_ID
+)
+
+(
+7 RSSI_BUF_LEN_SIGNAL
+255 RSSI_BUF_LEN_NOISE
+0x50 RSSI_THRESH_NOISE
+
+0x77 RSSI_DIS_MIN_24G
+0x82 RSSI_DIS_MAX_24G
+
+0x75 RSSI_DIS_MIN_BLE
+0x80 RSSI_DIS_MAX_BLE
+)
+
+(
+//power control
+0x01 TXPWR_0DB
+0x02 TXPWR_3DB
+0x04 TXPWR_5DB
+0x10 TXPWR_f5DB
+
+124 POWER_CTRL_MAX_PACKET_CNT
+
+2 POWER_CTRL_LOSSPAC_THRESH_UP0
+0 POWER_CTRL_LOSSPAC_THRESH_DOWN0
+0x20 POWER_CTRL_RSSI_THRESH_DOWN0
+
+5 POWER_CTRL_LOSSPAC_THRESH_UP1
+0 POWER_CTRL_LOSSPAC_THRESH_DOWN1
+0x60 POWER_CTRL_RSSI_THRESH_DOWN1
+
+10 POWER_CTRL_LOSSPAC_THRESH_UP2
+0 POWER_CTRL_LOSSPAC_THRESH_DOWN2
+0x80 POWER_CTRL_RSSI_THRESH_DOWN2
+)
+
+//mem_send_data_24g_short_lpm
+(
+0 SHORT_LPM_STATE_POLLING 	
+1 SHORT_LPM_STATE_DATA
+2 SHORT_LPM_STATE_NODATA
+3 SHORT_LPM_STATE_BUTTON_WHEEL
+)
+
+(
+81000 G24_8125_INTERVAL_PARAM
+78000 G24_78125_INTERVAL_PARAM
+12210 G24_4MS_INTERVAL_PARAM
+)
+
+(
+1 G24_TX_TIMER_INT_ENABLE
+0 G24_TX_TIMER_INT_DISABLE
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/hci.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/hci.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/hci.format	(working copy)
@@ -0,0 +1,570 @@
+
+
+memalloc(
+1 mem_h5rx_ackcnt
+1 mem_check_err_acl_cont
+
+1 mem_rp_packets
+2 mem_packet_type
+
+2 mem_hci_sniff_conn_handle
+2 mem_hci_sniff_max_interval
+2 mem_hci_sniff_min_interval
+2 mem_hci_sniff_attempt
+2 mem_hci_sniff_timeout
+2 mem_voice_setting
+1 mem_retransmission_effort
+2 mem_sco_ptype
+3 mem_extm_uap_restore
+
+2 mem_h5rx_rptr
+1 mem_h5rx_ack
+1 mem_h5tx_ack
+2 mem_h5tx_rptr
+2 mem_h5tx_wptr
+2 mem_h5tx_free
+1 mem_h5rx_tmp
+1 mem_h5tx_seq
+
+2 mem_hci_acl_queue_wptr
+2 mem_hci_acl_queue_rptr
+2 mem_hci_acl_queue_end
+1 mem_hci_acl_queue_wcnt
+1 mem_hci_acl_cnt
+
+2 mem_hci_acl_tx_trigger_wptr //tx via uart
+
+
+1 mem_hci_curr_len
+2 mem_hci_curr_target 
+) 
+
+xmemalloc(
+
+2 mem_baud
+1 mem_hci_lt_rx_state
+)
+
+15 hci_flag_rp
+//mem_hci_options bit map
+(
+1 hci_option_h4
+2 hci_option_protocol2
+3 hci_option_protocol3
+4 hci_option_uart
+5 hci_option_usb
+6 hci_option_phy2
+7 hci_option_phy3
+)
+// UART baud rate @6MHz
+(
+0 uart_ctrl_bit_enable
+3 uart_ctrl_bit_slip_protocol
+
+)
+
+//bit map of core_uart_ctrl
+(
+
+)
+//bit map of core_uart_status
+(
+0 uart_status_tx_fifo_full
+1 uart_status_tx_fifo_empty
+2 uart_status_tx_busy
+3 uart_status_rx_fifo_empty
+
+)
+//HCI H4 LOG related
+(
+0x4850 mem_hci_log
+8 hci_log_size
+100 hci_log_cnt
+
+)
+//HCI H4 Packet TYPE
+(
+0x01 HCI_H4_TYPE_CMD
+0x02 HCI_H4_TYPE_ACL
+0x04 HCI_H4_TYPE_EVENT
+
+)
+// HCI command opcode group field values
+(
+0x01 HCI_OGF_LINK_CONTROL
+0x02 HCI_OGF_LINK_POLICY
+0x03 HCI_OGF_BASEBAND
+0x04 HCI_OGF_INFO
+0x05 HCI_OGF_STATUS
+0x06 HCI_OGF_TEST
+0x08 HCI_OGF_LOW_ENERGY
+0x3e HCI_OGF_LOGO_TESTING
+0x3f HCI_OGF_VENDOR_SPECIFIC
+)
+
+// HCI link control opcode command field values, OGF=1
+(
+0x01 HCI_INQUIRY 
+0x02 HCI_INQUIRY_CANCEL 
+0x03 HCI_PERIODIC_INQUIRY_MODE 
+0x04 HCI_EXIT_PERIODIC_INQUIRY_MODE 
+0x05 HCI_CREATE_CONNECTION 
+0x06 HCI_DISCONNECT 
+0x07 HCI_ADD_SCO_CONNECTION 
+0x08 HCI_CREATE_CONNECTION_CANCEL
+0x09 HCI_ACCEPT_CONNECTION 
+0x0A HCI_REJECT_CONNECTION 
+0x0B HCI_LINK_KEY_REQUEST_REPLY 
+0x0C HCI_LINK_KEY_REQUEST_NEGATIVE_REPLY 
+0x0D HCI_PIN_CODE_REQUEST_REPLY 
+0x0E HCI_PIN_CODE_REQUEST_NEGATIVE_REPLY 
+0x0F HCI_CHANGE_CONNECTION_PACKET_TYPE 
+0x11 HCI_AUTHENTICATION_REQUESTED 
+0x13 HCI_SET_CONNECTION_ENCRYPTION 
+0x15 HCI_CHANGE_CONNECTION_LINK_KEY 
+0x17 HCI_MASTER_LINK_KEY 
+0x19 HCI_REMOTE_NAME_REQUEST 
+0x1A HCI_REMOTE_NAME_REQUEST_CANCEL
+0x1B HCI_READ_REMOTE_SUPPORTED_FEATURES 
+0x1C HCI_READ_REMOTE_EXT_FEATURES 
+0x1D HCI_READ_REMOTE_VERSION_INFORMATION 
+0x1F HCI_READ_CLOCK_OFFSET 
+0x20 HCI_READ_LMP_HANDLE
+0x28 HCI_SETUP_SCO_CONNECTION
+0x29 HCI_ACCEPT_SCO_CONNECTION
+0x2A HCI_REJECT_SCO_CONNECTION
+0x2B HCI_IO_CAP_REQUEST_REPLY
+0x2C HCI_USER_CONFIRMATION_REQUEST_REPLY
+0x2D HCI_USER_CONFIRMATION_REQUEST_NEGATIVE_REPLY
+0x2E HCI_USER_PASSKEY_REQUEST_REPLY
+0x2F HCI_USER_PASSKEY_REQUEST_NEGATIVE_REPLY
+0x30 HCI_REMOTE_OOB_DATA_REQUEST_REPLY
+0x33 HCI_REMOTE_OOB_DATA_REQUEST_NEGATIVE_REPLY
+0x34 HCI_IO_CAPABILITY_REQUEST_NEGATIVE_REPLY
+0x35 HCI_CREATE_PHYSICAL_LINK
+0x36 HCI_ACCEPT_PHYSICAL_LINK
+0x37 HCI_DISCONNECT_PHYSICAL_LINK
+0x38 HCI_CREATE_LOGICAL_LINK
+0x39 HCI_ACCEPT_LOGICAL_LINK
+0x3A HCI_DISCONNECT_LOGICAL_LINK
+0x3B HCI_LOGICAL_LINK_CANCEL
+0x3C HCI_FLOW_SPEC_MODIFY
+0x3D HCI_ENHANCED_SETUP_SYNCHRONOUS_CONNECTION
+0x3E HCI_ENHANCED_ACCEPT_SYNCHRONOUS_CONNECTION_REQUEST
+0x3F HCI_TRUNCATED_PAGE
+0x40 HCI_TRUNCATED_PAGE_CANCEL
+0x41 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST
+0x42 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST_RECEIVE
+0x43 HCI_START_SYNCHRONIZATION_TRAIN
+0x44 HCI_RECEIVE_SYNCHRONIZATION_TRAIN
+0x45 HCI_REMOTE_OOB_EXTENDED_DATA_REQUEST_REPLY
+)
+
+
+// HCI link policy commands OCF value, OGF=2
+(
+0x01 HCI_HOLD_MODE 
+0x03 HCI_SNIFF_MODE 
+0x04 HCI_EXIT_SNIFF_MODE 
+0x05 HCI_PARK_MODE 
+0x06 HCI_EXIT_PARK_MODE 
+0x07 HCI_QOS_SETUP 
+0x09 HCI_ROLE_DISCOVERY 
+0x0B HCI_SWITCH_ROLE 
+0x0C HCI_READ_LINK_POLICY_SETTINGS 
+0x0D HCI_WRITE_LINK_POLICY_SETTINGS 
+0x0e HCI_READ_DEFAULT_LINK_POLICY_SETTINGS
+0x0f HCI_WRITE_DEFAULT_LINK_POLICY_SETTINGS
+0x10 HCI_FLOW_SPECIFICATION
+0x11 HCI_SNIFF_SUBRATING
+)
+
+// HCI host controller and baseband commands OCF values, OGF=3
+(
+0x01 HCI_SET_EVENT_MASK 
+0x03 HCI_RESET 
+0x05 HCI_SET_EVENT_FILTER 
+0x08 HCI_FLUSH 
+0x09 HCI_READ_PIN_TYPE 
+0x0A HCI_WRITE_PIN_TYPE 
+0x0B HCI_CREATE_NEW_UNIT_KEY 
+0x0D HCI_READ_STORED_LINK_KEY 
+0x11 HCI_WRITE_STORED_LINK_KEY 
+0x12 HCI_DELETE_STORED_LINK_KEY 
+0x13 HCI_WRITE_LOCAL_NAME 
+0x14 HCI_READ_LOCAL_NAME 
+0x15 HCI_READ_CONN_ACCEPT_TIMEOUT 
+0x16 HCI_WRITE_CONN_ACCEPT_TIMEOUT 
+0x17 HCI_READ_PAGE_TIMEOUT 
+0x18 HCI_WRITE_PAGE_TIMEOUT 
+0x19 HCI_READ_SCAN_ENABLE 
+0x1A HCI_WRITE_SCAN_ENABLE 
+0x1B HCI_READ_PAGE_SCAN_ACTIVITY 
+0x1C HCI_WRITE_PAGE_SCAN_ACTIVITY 
+0x1D HCI_READ_INQUIRY_SCAN_ACTIVITY 
+0x1E HCI_WRITE_INQUIRY_SCAN_ACTIVITY 
+0x1F HCI_READ_AUTHENTICATION_ENABLE 
+0x20 HCI_WRITE_AUTHENTICATION_ENABLE 
+0x21 HCI_READ_ENCRYPTION_MODE 
+0x22 HCI_WRITE_ENCRYPTION_MODE 
+0x23 HCI_READ_CLASS_OF_DEVICE 
+0x24 HCI_WRITE_CLASS_OF_DEVICE 
+0x25 HCI_READ_VOICE_SETTING 
+0x26 HCI_WRITE_VOICE_SETTING 
+0x27 HCI_READ_AUTOMATIC_FLUSH_TIMEOUT 
+0x28 HCI_WRITE_AUTOMATIC_FLUSH_TIMEOUT 
+0x29 HCI_READ_NUM_BROADCAST_RETRANSMISSIONS 
+0x2A HCI_WRITE_NUM_BROADCAST_RETRANSMISSIONS 
+0x2B HCI_READ_HOLD_MODE_ACTIVITY 
+0x2C HCI_WRITE_HOLD_MODE_ACTIVITY 
+0x2D HCI_READ_TRANSMIT_POWER_LEVEL 
+0x2E HCI_READ_SCO_FLOW_CONTROL_ENABLE 
+0x2F HCI_WRITE_SCO_FLOW_CONTROL_ENABLE 
+0x31 HCI_SET_CONTROLLER_TO_HOST_FLOW_CONTROL 
+0x33 HCI_HOST_BUFFER_SIZE 
+0x35 HCI_HOST_NUM_COMPLETED_PACKETS 
+0x36 HCI_READ_LINK_SUPERVISION_TIMEOUT 
+0x37 HCI_WRITE_LINK_SUPERVISION_TIMEOUT 
+0x38 HCI_READ_NUMBER_OF_SUPPORTED_IAC 
+0x39 HCI_READ_CURRENT_IAC_LAP 
+0x3A HCI_WRITE_CURRENT_IAC_LAP 
+0x3B HCI_READ_PAGE_SCAN_PERIOD_MODE 
+0x3C HCI_WRITE_PAGE_SCAN_PERIOD_MODE 
+0x3D HCI_READ_PAGE_SCAN_MODE 
+0x3E HCI_WRITE_PAGE_SCAN_MODE 
+0x3F HCI_SET_AFH_CHANNEL_CLASSIFICATION 
+
+
+0x42 HCI_READ_INQUIRY_SCAN_TYPE 
+0x43 HCI_WRITE_INQUIRY_SCAN_TYPE 
+0x44 HCI_READ_INQUIRY_MODE 
+0x45 HCI_WRITE_INQUIRY_MODE 
+0x46 HCI_READ_PAGE_SCAN_TYPE 
+0x47 HCI_WRITE_PAGE_SCAN_TYPE 
+
+0x48 HCI_READ_AFH_CHANNEL_ACCESSMENT_MODE 
+0x49 HCI_WRITE_AFH_CHANNEL_ACCESSMENT_MODE 
+0x51 HCI_READ_EXTENDED_INQUIRY_RESPONSE
+0x52 HCI_WRITE_EXTENDED_INQUIRY_RESPONSE
+0x53 HCI_REFRESH_ENCRYPTION_KEY
+0x55 HCI_READ_SIMPLE_PAIRING_MODE
+0x56 HCI_WRITE_SIMPLE_PAIRING_MODE
+0x57 HCI_READ_LOCAL_OOB_DATA
+0x58 HCI_READ_INQUIRY_RESPONSE_TRANSMIT_POWER_LEVEL
+0x59 HCI_WRITE_INQUIRY_TRANSMIT_POWER_LEVEL
+0x60 HCI_SEND_KEYPRESS_NOTIFICATION
+0x5A HCI_READ_DEFAULT_ERRONEOUS_DATA_REPORTING
+0x5B HCI_WRITE_DEFAULT_ERRONEOUS_DATA_REPORTING
+0x5F HCI_ENHANCED_FLUSH
+0x61 HCI_READ_LOGICAL_LINK_ACCEPT_TIMEOUT
+0x62 HCI_WRITE_LOGICAL_LINK_ACCEPT_TIMEOUT
+0x63 HCI_SET_EVENT_MASK_PAGE_2
+0x64 HCI_READ_LOCATION_DATA
+0x65 HCI_WRITE_LOCATION_DATA
+0x66 HCI_READ_FLOW_CONTROL_MODE
+0x67 HCI_WRITE_FLOW_CONTROL_MODE
+0x68 HCI_READ_ENHANCE_TRANSMIT_POWER_LEVEL
+0x69 HCI_READ_BEST_EFFORT_FLUSH_TIMEOUT
+0x6A HCI_WRITE_BEST_EFFORT_FLUSH_TIMEOUT
+0x6B HCI_SHORT_RANGE_MODE
+0x6C HCI_READ_LE_HOST_SUPPORT
+0x6D HCI_WRITE_LE_HOST_SUPPORT
+0x6E HCI_SET_MWS_CHANNEL_PARAMETERS
+0x6F HCI_SET_EXTERNAL_FRAME_CONFIGURATION
+0x70 HCI_SET_MWS_SIGNALING
+0x71 HCI_SET_MWS_TRANSPORT_LAYER
+0x72 HCI_SET_MWS_SCAN_FREQUENCY_TABLE
+0x73 HCI_SET_MWS_PATTERN_CONFIGURATION
+0x74 HCI_SET_RESERVED_LT_ADDR
+0x75 HCI_DELETE_RESERVED_LT_ADDR
+0x76 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST_DATA
+0x77 HCI_READ_SYNCHRONIZATION_TRAIN_PARAMETERS
+0x78 HCI_WRITE_SYNCHRONIZATION_TRAIN_PARAMETERS
+0x79 HCI_READ_SECURE_CONNECTIONS_HOST_SUPPORT
+0x7A HCI_WRITE_SECURE_CONNECTIONS_HOST_SUPPORT
+0x7B HCI_READ_AUTHENTICATED_PAYLOAD_TIMEOUT
+0x7C HCI_WRITE_AUTHENTICATED_PAYLOAD_TIMEOUT
+0x7D HCI_READ_LOCAL_OOB_EXTENDED_DATA
+0x7E HCI_READ_EXTENDED_PAGE_TIMEOUT
+0x7F HCI_WRITE_EXTENDED_PAGE_TIMEOUT
+0x80 HCI_READ_EXTENDED_INQUIRY_LENGTH
+0x81 HCI_WRITE_EXTENDED_INQUIRY_LENGTH
+)
+
+
+// HCI informational parameters OCF values, OGF=4
+(
+0x01 HCI_READ_LOCAL_VERSION_INFORMATION 
+0x02 HCI_READ_LOCAL_SUPPORTED_COMMANDS
+0x03 HCI_READ_LOCAL_SUPPORTED_FEATURES 
+0x04 HCI_READ_LOCAL_EXT_FEATURES 
+0x05 HCI_READ_BUFFER_SIZE 
+0x07 HCI_READ_COUNTRY_CODE 
+0x09 HCI_READ_BD_ADDR 
+0x0A HCI_REJECT_CONNECTION_REQUEST
+0x0B HCI_READ_LOCAL_SUPPORTED_CODECS
+)
+
+// HCI status parameters OCF values, OGF=5
+(
+0x01 HCI_READ_FAILED_CONTACT_COUNTER 
+0x02 HCI_RESET_FAILED_CONTACT_COUNTER 
+0x03 HCI_GET_LINK_QUALITY 
+0x05 HCI_READ_RSSI 
+0x06 HCI_READ_AFH_CHANNEL_MAP
+0x07 HCI_READ_BD_CLOCK
+0x08 HCI_READ_ENCRYPTION_KEY_SIZE
+0x09 HCI_READ_LOCAL_AMP_INFO
+0x0A HCI_READ_LOCAL_AMP_ASSOC
+0x0B HCI_WRITE_REMOTE_AMP_ASSOC
+0x0C HCI_GET_MWS_TRANSPORT_LAYER_CONFIGURATION
+0x0D HCI_SET_TRIGGERED_CLOCK_CAPTURE
+)
+
+// HCI testing command OCF values, OGF=6
+(
+0x01 HCI_READ_LOOPBACK_MODE 
+0x02 HCI_WRITE_LOOPBACK_MODE 
+0x03 HCI_ENABLE_DEVICE_UNDER_TEST_MODE 
+0x04 HCI_WRITE_SIMPLE_PAIRING_DEBUG_MODE
+0x07 HCI_ENABLE_AMP_RECEIVER_REPORTS
+0x08 HCI_AMP_TEST_END
+0x09 HCI_AMP_TEST
+0x0A HCI_WRITE_SECURE_CONNECTIONS_TEST_MODE
+)
+
+// HCI vendor specific command OCF values -OGF=3F
+(
+0x01 HCI_WRITE_BD_ADDR 
+0x02 HCI_READ_INQUIRY_RESPONSE_TIMEOUT 
+0x03 HCI_WRITE_INQUIRY_RESPONSE_TIMEOUT 
+0x04 HCI_READ_PAGE_SCAN_REPETITION_MODE 
+0x05 HCI_WRITE_PAGE_SCAN_REPETITION_MODE 
+0x06 HCI_READ_PAGE_RESPONSE_TIMEOUT 
+0x07 HCI_WRITE_PAGE_RESPONSE_TIMEOUT 
+0x08 HCI_READ_NEW_CONNECTION_TIMEOUT 
+0x09 HCI_WRITE_NEW_CONNECTION_TIMEOUT 
+0x0a HCI_INITIALIZE_BASEBAND 
+0x0b HCI_WRITE_LOCAL_SUPPORTED_FEATURES 
+0x0c HCI_WRITE_PARK_PARAMETERS 
+0x0d HCI_READ_PARK_PARAMETERS 
+0x0e HCI_WRITE_QUALITY_OF_SERVICE 
+0x0f HCI_NOT_USED 
+0x10 HCI_MODIFY_BEACON_PARAMETERS 
+0x11 HCI_UNPARK_USING_PM_ADDR 
+0x12 HCI_WRITE_HOPPING_CHANNELS 
+0x13 HCI_SLEEP_FOREVER_MODE 
+0x14 HCI_WRITE_AUTO_PAGE_SCAN_ENABLE 
+0x15 HCI_READ_AUTO_PAGE_SCAN_ENABLE 
+0x16 HCI_SET_ENCRYPTION_KEY_SIZE 
+0x17 HCI_INVALIDATE_FLASH_AND_REBOOT 
+0x18 HCI_UPDATE_UART_BAUD_RATE 
+0x19 HCI_WRITE_GPIO_1_4_AS_OUTPUT 
+0x1A HCI_WRITE_GPIO_2_LED 
+0x1B HCI_SET_TESTMODE_TYPE 
+0x1C HCI_WRITE_SCO_PCM_INT_PARAM 
+0x1D HCI_READ_SCO_PCM_INT_PARAM 
+0x1E HCI_WRITE_PCM_DATA_FORMAT_PARAM 
+0x1F HCI_READ_PCM_DATA_FORMAT_PARAM 
+0x20 HCI_WRITE_COMFORT_NOISE_PARAM 
+0x21 HCI_READ_COMFORT_NOISE_PARAM 
+0x22 HCI_WRITE_SCO_TS 
+0x23 HCI_READ_SCO_TS 
+0x24 HCI_WRITE_PCM_LOOPBACK_MODE 
+0x25 HCI_READ_PCM_LOOPBACK_MODE 
+0x26 HCI_SET_TRANSMIT_POWER 
+0x27 HCI_SET_SLEEPMODE_PARAM 
+0x28 HCI_READ_SLEEPMODE_PARAM 
+0x29 HCI_SLEEPMODE_CMD 
+0x2A HCI_DELAY_PERIPHERAL_SCO_STARTUP 
+0x2B HCI_WRITE_RECEIVE_ONLY 
+0x2C HCI_WRITE_RATE_CONTROL 
+0x2D HCI_TX_UNMOD_CARRIER 
+0x2E HCI_DOWNLOAD_MINIDRIVER 
+0x2F HCI_CRYSTAL_PPM 
+0x30 HCI_SET_POWER_AMP_BIAS 
+0x31 HCI_SET_HAM_BEHAVIOR 
+0x32 HCI_SET_AFH_BEHAVIOR 
+0x33 HCI_READ_USER_DEFINED_NVRAM 
+0x34 HCI_ENABLE_RADIO 
+0x35 HCI_READ_DIAGNOSTIC_INFO 
+0x36 HCI_GET_HID_DEVICE_LIST 
+0x37 HCI_ADD_HID_DEVICE 
+0x38 HCI_READ_APP_FW_CONFIG_VERSION 
+0x39 HCI_DELETE_HID_DEVICE 
+0x3B HCI_ENABLE_USB_HID_EMULATION 
+// 0x3A available
+// 0x3B available
+0x3C HCI_SEND_LMPDU 
+0x3D HCI_AUTO_PAIR_REQ 
+0x3E HCI_READ_VS_EXTENSION 
+0x3F HCI_WRITE_VS_EXTENSION 
+
+0x77 HCI_OPCODE_FC77
+0x79 HCI_OPCODE_FC79
+0xC4 HCI_DOWNLOAD_PATCH
+0xCC HCI_OPCODE_FCCC
+
+0x00 HCI_VENDOR_CMD_RESET
+0x01 HCI_VENDOR_CMD_CHIPID
+0x02 HCI_VENDOR_CMD_BAUD
+0x03 HCI_VENDOR_CMD_PATCH
+0x04 HCI_VENDOR_CMD_PATCH_DONE
+0x05 HCI_VENDOR_CMD_ECHO
+0x06 HCI_VENDOR_CMD_BDADDR
+
+0x07 HCI_VENDOR_CMD_ENTER_LPM
+0x08 HCI_VENDOR_CMD_COMMU_READY
+
+0x10 HCI_VENDOR_CMD_MEM
+0x11 HCI_VENDOR_CMD_EEP
+
+0X12 HCI_VENDOR_CMD_PATCH_SEC_INIT
+0X13 HCI_VENDOR_CMD_PATCH_SEC
+)
+
+//HCI LE controller command OCF values, OGF=8
+(
+0x01 HCI_LE_SET_EVENT_MASK
+0x02 HCI_LE_READ_BUFFER_SIZE
+0x03 HCI_LE_READ_LOCAL_SUPPORTED_FEATURES
+0x05 HCI_LE_SET_RANDOM_ADDRESS
+0x06 HCI_LE_SET_ADVERTISING_PARAMETERS
+0x07 HCI_LE_READ_ADVERTISING_CHANNEL_TX_POWER
+0x08 HCI_LE_SET_ADVERTISING_DATA
+0x09 HCI_LE_SET_SCAN_RESPONSE_DATA
+0x0A HCI_LE_SET_ADVERTISE_ENABLE
+0x0B HCI_LE_SET_SCAN_PARAMETERS
+0x0C HCI_LE_SET_SCAN_ENABLE
+0x0D HCI_LE_CREATE_CONNECTION
+0x0E HCI_LE_CREATE_CONNECTION_CANCEL
+0x0F HCI_LE_READ_WHITE_LIST_SIZE
+0x10 HCI_LE_CLEAR_WHITE_LIST
+0x11 HCI_LE_ADD_DEVICE_TO_WHITE_LIST
+0x12 HCI_LE_REMOVE_DEVICE_FROM_WHITE_LIST
+0x13 HCI_LE_CONNECTION_UPDATE
+0x14 HCI_LE_SET_HOST_CHANNEL_CLASSIFICATION
+0x15 HCI_LE_READ_CHANNEL_MAP
+0x16 HCI_LE_READ_REMOTE_USED_FEATURES
+0x17 HCI_LE_ENCRYPT
+0x18 HCI_LE_RAND
+0x19 HCI_LE_START_ENCRYPTION
+0x1A HCI_LE_LONG_TERM_KEY_REQUEST_REPLY
+0x1B HCI_LE_LONG_TERM_KEY_REQUEST_NEGATIVE_REPLY
+0x1C HCI_LE_READ_SUPPORTED_STATES
+0x1D HCI_LE_RECEIVER_TEST
+0x1E HCI_LE_TRANSMITTER_TEST
+0x1F HCI_LE_TEST_END
+0x20 HCI_LE_REMOTE_CONNECTION_PARAMETER_REQUEST_REPLY
+0x21 HCI_LE_REMOTE_CONNECTION_PARAMETER_REQUEST_NEGATIVE_REPLY
+)
+// HCI event code
+(
+0x01 HCI_EVENT_INQUIRY_COMPLETE
+0x02 HCI_EVENT_INQUIRY_RESULT
+0x03 HCI_EVENT_CONNECTION_COMPLETE
+0x04 HCI_EVENT_CONNECTION_REQUEST
+0x05 HCI_EVENT_DISCONNECTION_COMPLETE
+0x06 HCI_EVENT_AUTHENTICATION_COMPLETE
+0x07 HCI_EVENT_REMOTE_NAME_REQUEST_COMPLETE
+0x08 HCI_EVENT_ENCRYPTION_CHANGE_COMPLETE
+0x09 HCI_EVENT_CHANGE_CONNECTION_LINK_KEY_COMPLETE
+0x0A HCI_EVENT_MASTER_LINK_KEY_COMPLETE
+0x0B HCI_EVENT_READ_REMOTE_FEATURES_COMPLETE
+0x0C HCI_EVENT_READ_REMOTE_VERSION_INFORMATION_COMPLETE
+0x0D HCI_EVENT_QOS_SETUP_COMPLETE
+0x0E HCI_EVENT_COMMAND_COMPLETE
+0x0F HCI_EVENT_COMMAND_STATUS
+0x10 HCI_EVENT_HARDWARE_ERROR
+0x11 HCI_EVENT_FLUSH_OCCURRED
+0x12 HCI_EVENT_ROLE_CHANGE
+0x13 HCI_EVENT_NUM_COMPLETED_PACKETS
+0x14 HCI_EVENT_MODE_CHANGE
+0x15 HCI_EVENT_RETURN_LINK_KEYS
+0x16 HCI_EVENT_PIN_CODE_REQUEST
+0x17 HCI_EVENT_LINK_KEY_REQUEST
+0x18 HCI_EVENT_LINK_KEY_NOTIFICATION
+0x19 HCI_EVENT_LOOPBACK_COMMAND
+0x1A HCI_EVENT_DATA_BUFFER_OVERFLOW
+0x1B HCI_EVENT_MAX_SLOTS_CHANGE
+0x1C HCI_EVENT_READ_CLOCK_OFFSET_COMPLETE
+0x1D HCI_EVENT_CONNECTION_PACKET_TYPE_CHANGED
+0x1E HCI_EVENT_QOS_VIOLATION
+0x1F HCI_EVENT_PAGE_SCAN_MODE_CHANGE
+0x20 HCI_EVENT_PAGE_SCAN_REPETITION_MODE_CHANGE
+0x21 HCI_EVENT_FLOW_SPECIFICATION_COMPLETE
+0x22 HCI_EVENT_INQUIRY_RESULT_WITHRSSI
+0x23 HCI_EVENT_READ_REMOTE_EXT_FEATURES_COMPLETE
+0x2C HCI_EVENT_SCO_CONNECTION_COMPLETE
+0x2D HCI_EVENT_SCO_CONNECTION_CHANGED
+0x2E HCI_EVENT_SNIFF_SUBRATING
+0x2F HCI_EVENT_EXT_INQUIRY_RESULT
+0x30 HCI_EVENT_ENCRYPT_KEY_REFRESH_COMPLETE
+0x31 HCI_EVENT_IO_CAP_REQ
+0x32 HCI_EVENT_IO_CAP_RESPONSE
+0x33 HCI_EVENT_USER_CONFIRMATION_REQUEST
+0x34 HCI_EVENT_UESR_PASSKEY_REQUEST
+0x35 HCI_EVENT_REMOTE_OOB_DATA_REQUEST
+0x36 HCI_EVENT_SIMPLE_PAIRING_COMPLETE
+0x38 HCI_EVENT_LINK_SUPERVISION_TIMEOUT_CHANGED
+0x39 HCI_EVENT_ENHANCED_FLUSH_COMPLETE
+0x3B HCI_EVENT_USER_PASSKEY_NOTIFICATION
+0x3C HCI_EVENT_KEYPRESS_NOTIFICATION
+0x3D HCI_EVENT_REMOTE_HOST_SUPPORTED_FEATURES_NOTIFICATION 
+0x3E HCI_EVENT_LE_META_EVENT
+0x40 HCI_EVENT_PHYSICAL_LINK_COMPLETE
+0x41 HCI_EVENT_CHANNEL_SELECTED
+0x42 HCI_EVENT_DISCONNECTION_PHYSICAL_LINK_COMPLETE
+0x43 HCI_EVENT_PHYSICAL_LINK_LOSS_EARLY_WARNING
+0x44 HCI_EVENT_PHYSICAL_LINK_RECOVERY
+0x45 HCI_EVENT_LOGICAL_LINK_COMPLETE
+0x46 HCI_EVENT_DISCONNECTION_LOGICAL_LINK_COMPLETE
+0x47 HCI_EVENT_FLOW_SPEC_MODIFY_COMPLETE
+0x48 HCI_EVENT_NUMBER_OF_COMPLETED_DATA_BLOCKS
+0x49 HCI_EVENT_AMP_START_TEST
+0x4A HCI_EVENT_AMP_TEST_END
+0x4B HCI_EVENT_AMP_RECEIVER_REPORT
+0x4C HCI_EVENT_SHORT_RANGE_MODE_CHANGE_COMPLETE
+0x4D HCI_EVENT_AMP_STATUS_CHANGE
+0x4E HCI_EVENT_TRIGGERED_CLOCK_CAPTURE
+0x4F HCI_EVENT_SYNCHRONIZATION_TRAIN_COMPLETE
+0x50 HCI_EVENT_SYNCHRONIZATION_TRAIN_RECEIVED
+0x51 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_RECEIVE
+0x52 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_TIMEOUT
+0x53 HCI_EVENT_TRUNCATED_PAGE_COMPLETE
+0x54 HCI_EVENT_SLAVE_PAGE_RESPONSE_TIMEOUT
+0x55 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_CHANNEL_MAP_CHANGE
+0x56 HCI_EVENT_INQUIRY_RESPONSE_NOTIFICATION
+0x57 HCI_EVENT_AUTHENTICATED_PAYLOAD_TIMEOUT_EXPIRED
+
+0xFE HCI_EVENT_LOGO_TESTING
+0xFF HCI_EVENT_VENDOR_SPECIFIC
+)
+(
+0x01 HCI_VENDOR_EVENT_COMMU_READY
+)
+//HCI LE SUBEVENT CODE
+(
+0x01 HCI_LE_SUBEVENT_CONN_COMPLETE
+0x02 HCI_LE_SUBEVENT_ADV_REPORT
+0x03 HCI_LE_SUBEVENT_CONN_UPDATE_COMPLETE
+0x04 HCI_LE_SUBEVENT_REMOTE_FEATURE_COMPLETE
+0x05 HCI_LE_SUBEVENT_LTK_REQUEST
+0x06 HCI_LE_SUBEVENT_REMOTE_CONN_PARAM_REQ
+)
+
+(
+0x00 HCI_LPM_OFF
+0x01 HCI_LPM_ON
+)
+
+
+(
+33 HOST_WAKE_TIME
+)
+
+(
+1 HCI_RX_WAKE
+0 HCI_RX_READY
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/kscan_peipherals.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/kscan_peipherals.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/kscan_peipherals.format	(working copy)
@@ -0,0 +1,35 @@
+
+
+
+
+
+
+//0 mem_kscan_head_ptr
+//1 mem_col_num
+//1 mem_row_num
+//4 mem_col_conf_pin
+//4 mem_row_conf_pin
+//1 mem_row_count
+//1 mem_count_shift
+//2 mem_kscan_value_temp
+//2 mem_kscan_lastvalue
+//2 mem_kscan_value
+//4 mem_btclk_kscan
+//1 mem_btclk_kscan_interval
+
+
+0x00 KEYSCAN_OFFECT_COL_NUM
+0x01 KEYSCAN_OFFECT_ROW_NUM
+0x02 KEYSCAN_OFFECT_COL_CONF_PIN
+0x06 KEYSCAN_OFFECT_ROW_CONF_PIN
+
+0x0a KEYSCAN_OFFECT_ROW_COUNT
+0x0b KEYSCAN_OFFECT_SHIFT_COUNT
+
+0X0C KEYSCAN_OFFECT_VALUE_TEMP
+0X0E KEYSCAN_OFFECT_LASVALUE
+0X10 KEYSCAN_OFFECT_VALUE
+0x12 KEYSCAN_OFFECT_BTCLK
+0x16 KEYSCAN_OFFECT_BTCLK_INTERVAL
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/l2cap.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/l2cap.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/l2cap.format	(working copy)
@@ -0,0 +1,442 @@
+
+memalloc(
+0 mem_l2cap_mem_start
+// L2CAP RX 
+2 mem_l2cap_rxbuff1_len
+2 mem_l2cap_rxbuff2_len
+2 mem_l2cap_rxbuff_new
+1 mem_l2cap_rxbuff_inuse
+2 mem_l2cap_payload_ptr
+2 mem_l2cap_rx_pkt_length
+2 mem_l2cap_rx_cid
+1 mem_l2cap_rx_done
+
+
+
+// L2CAP TX Signal channel
+2 mem_l2cap_signal_tx_buff_ptr
+2 mem_l2cap_signal_tx_payload_ptr
+2 mem_l2cap_signal_tx_length
+// L2CAP TX SDP channel
+2 mem_sdp_tx_buff_ptr
+2 mem_sdp_tx_payload_ptr
+2 mem_sdp_tx_pkt_length
+// L2CAP TX RFCOMM channel
+2 mem_rfcomm_tx_buff_ptr
+2 mem_rfcomm_tx_payload_ptr
+2 mem_rfcomm_tx_pkt_length
+
+
+
+//L2CAP Util
+
+2 memL2CAP_T1
+
+1 mem_CONTROL_tasks
+1 mem_send_config_req
+
+
+1 mem_config_identifier
+2 mem_config_req_dest_CID
+1 mem_rfcomm_malloc_fail_flag
+
+//L2CAP STATE MACHINE
+1 mem_message_to_uppersm
+1 mem_upper_sm_remote_page
+1 mem_upper_sm_reconn
+1 mem_upper_sm_ss
+
+
+64 mem_tx_malloc_log
+0 mem_l2cap_mem_end
+
+
+2 mem_scid
+2 mem_cmd_length
+2 mem_tt2
+2 mem_tt3
+2 mem_id
+2 mem_psm
+
+
+4 mem_l2cap_sdpres_delay_time
+)
+
+xmemalloc(
+0 mem_l2cap_xmem_start
+//*******************L2CAP TX MULTI-PACKET*********************//
+2 mem_l2cap_tx_multi_offset //0 means single packet
+
+//*******************CHANNEL ID*********************//
+2 mem_sdp_remote_cid
+2 mem_rfcomm_remote_cid
+2 mem_hid_ctrl_remote_cid
+2 mem_hid_int_remote_cid
+//*******************CHANNEL STATE*********************//
+1 mem_sdp_state
+1 mem_rfcomm_state
+1 mem_hid_control_state
+1 mem_hid_interrupt_state
+1 mem_spp_state
+1 mem_ML2CAP_comm_id
+
+//*******************L2CAP malloc********************//
+1 mem_used_map
+0 mem_tx_fifo0
+1 mem_tx_fifo0_map
+2 mem_tx_fifo0_ptr
+0 mem_tx_fifo1
+1 mem_tx_fifo1_map
+2 mem_tx_fifo1_ptr
+0 mem_tx_fifo2
+1 mem_tx_fifo2_map
+2 mem_tx_fifo2_ptr
+0 mem_tx_fifo3
+1 mem_tx_fifo3_map
+2 mem_tx_fifo3_ptr
+0 mem_tx_fifo_end
+256 mem_l2cap_lpm_txbuf
+//*******************MISC*********************//
+1 mem_l2cap_flow_ctrl_flag
+1 mem_l2cap_pending_item
+0 mem_l2cap_xmem_end
+
+)
+
+
+//mem_l2cap_lpm_txbuf
+(
+256 l2cap_lpm_txbuf_len
+)
+
+(
+4 L2CAP_TX_FIFO_SIZE
+8 L2CAP_TX_BUFF_CNT
+
+)
+(
+0x0002 L2CAP_SIG_EXT_FEATRUE
+0x0003 L2CAP_SIG_FIX_FEATRUE
+)
+
+
+(
+0 HS_IDLE
+1 AG_INIT_CALL
+2 HS_INIT_CALL
+)
+(
+0 M_ACL_LINK_ABSENT
+1 M_ACL_LINK_EXIST
+)
+
+(
+0 L2CAP_INUSE_BUFF1
+1 L2CAP_INUSE_BUFF2
+)
+/* upper layer interface w/ lower layer */
+(
+1 MAX_NUM_LINKS_ALLOWED
+1 MAX_NUM_SCO_ALLOWED
+1 ACL_LINK_PRESENT
+0 ACL_LINK_ABSENT
+)
+(
+1 L2CAP_RX_DONE 
+0 L2CAP_RX_CLEAR
+)
+/* Scheduler */
+(
+0 L2CAP_DISCONNECT_INTERRUPT
+1 RFCOMM_wants_service
+2 L2CAP_sig_Tx_buff_full
+3 RFCOMM_Tx_buff_full
+4 SDP_Tx_buff_full
+5 got_complete_L2CAP_pkt	
+6 L2CAP_init_Config_Req
+7 L2CAP_DISCONNECT_CONTROL
+)
+
+/* mem_CONTROL_tasks2 */
+(
+0 UI_NEED_SERVICE
+)
+/* L2CAP logic channel identifiers (2 bytes) p.261 */
+(
+0x0001 L2CAP_signal_channel
+0x0050 L2CAP_SDP_channel
+0x0051 L2CAP_RFCOMM_channel
+0x0052 L2CAP_HID_Control_channel   
+0x0053 L2CAP_HID_Interrupt_channel
+0x0077 L2CAP_AVDTP_signal_channel		//------avdtp
+0x0078 L2CAP_AVDTP_media_channel
+0x0079 L2CAP_AVDTP_report_channel
+0x0080 L2CAP_AVDTP_recovery_channel
+0x00dd L2CAP_AVCTP_Control_channel
+)
+/* L2CAP signalling command codes (1 byte) p.284 */
+(
+0x00 reserved
+0x01 signal_cmd_reject
+0x02 signal_connect_req
+0x03 signal_connect_rsp
+0x04 signal_config_req
+0x05 signal_config_rsp
+0x06 signal_disconnect_req
+0x07 signal_disconnect_rsp
+0x08 signal_echo_req
+0x09 signal_echo_rsp
+0x0a signal_info_req
+0x0b signal_info_rsp
+)
+/* L2CAP signal_command_reject reason code (2 bytes), p.285 */
+(
+0x0000 cmd_not_understood
+0x0001 signalling_MTU_exceeded
+0x0002 invalid_CID_in_req
+)
+/* L2CAP PSM values used in signal_connect_req (2 bytes), p.286 */
+(
+0x0001 PSM_SDP
+0x0003 PSM_RFCOMM
+0x0005 PSM_TCS
+0x0011 PSM_HID_control
+0x0013 PSM_HID_interrupt
+0x0017 PSM_AVCTP
+0x0019 PSM_AVDTP
+)
+/* L2CAP connection response result code (2 bytes), p.288 */
+(
+0x0000 L2CAP_connect_successful
+0x0001 L2CAP_connect_pending
+0x0002 L2CAP_connect_refused_PSM_unsupported
+0x0003 L2CAP_connect_refused_security_block
+0x0004 L2CAP_connect_refused_no_resources
+)
+/* L2CAP connection status values (2 bytes), p.288 */
+(
+0x0000 L2CAP_no_info_available
+0x0001 L2CAP_authentication_pending
+0x0002 L2CAP_authorization_pending
+)
+/* L2CAP configuration response result code (2 bytes), p.292 */
+(
+0x0000 L2CAP_config_success
+0x0001 L2CAP_config_failure_bad_parameters
+0x0002 L2CAP_config_failure_no_reason
+0x0003 L2CAP_config_failure_unknown_options
+)
+/* L2CAP constant definitions */
+(
+128 L2CAP_Rx_buff_size
+48  L2CAP_signal_Tx_buff_size
+128 SDP_Tx_buff_size
+128 RFCOMM_Tx_buff_size
+1 AM_ADDRESS
+3 DM1TYPE
+4 DH1TYPE
+11 DH3TYPE
+8 DVTYPE
+0 channel_state_closed
+1 channel_state_config
+2 channel_state_open
+0x0030 L2CAP_config_MTU_SDP
+0xffff L2CAP_config_ftimeout_SDP
+0x03e3 L2CAP_config_MTU_RFCOMM
+0xffff L2CAP_config_ftimeout_RFCOMM
+260 l2cap_max_pkt_len
+)
+
+(
+0 FAILURE
+1 SUCCESS
+2 IN_PROGRESS
+)
+(
+0x00	IDLE
+0x01	WAIT_4_BB_PAGE
+0x02	WAIT_4_LMP_CONN
+0x03	WAIT_4_SCO_CONN
+0x04	WAIT_4_SCO_KILLED
+)
+
+/*mem_master_mss*/
+(
+0 STOP_ENC
+1 SEND_SWITCH_REQ
+)
+(
+0 HF_HS_READY
+1 HF_AG_READY
+)
+/* mem_hf_state */
+(
+0 HF_STATE_WAITING_RFCOMM_CONN
+1 HF_STATE_HF_SEND_FEATURE
+2 HF_STATE_WAITING_AG_FEATURE_OK
+3 HF_STATE_HF_SEND_INDICATORS
+4 HF_STATE_WAITING_AG_INDICATORS_OK
+5 HF_STATE_HF_SEND_CURR_STATUS
+6 HF_STATE_WAITING_AG_STATUS_OK
+7 HF_STATE_HF_SEND_UPDATE_STATUS
+8 HF_STATE_WAITING_AG_UPDATE_STATUS_OK
+9 HF_STATE_CONNECTED
+0x0a HF_STATE_HF_SEND_RECEIVE_INFO
+0x0b HF_STATE_WAITING_AG_INFO
+0x0c HF_STATE_HF_SEND_AT_CLIP
+0x0d HF_STATE_WAITING_AT_CLIP
+0x0e HF_STATE_HF_SEND_AT_CCWA
+0x0f HF_STATE_WAITING_AT_CCWA
+)
+/*mem_hf_call_state*/
+(
+0 HF_CALL_STATE_INACTIVE
+1 HF_CALL_STATE_SETUP
+2 HF_CALL_STATE_ACTIVE 
+)
+/* mem_pairing_state bit definition */
+(
+0 PAIR_INQUIRY_START
+1 PAIR_INQUIRY_TIME_OUT
+2 PAIR_INQUIRY_FAILED
+3 PAIR_INQUIRY_SUCCESS
+4 PAIR_READY_CONN
+5 PAIR_WAIT_CANCEL_RESPONSE
+6 PAIR_CONN_SUCCESS
+7 PAIR_WAIT_DETACH
+)  
+
+/* mem_pairing_mode bit definition */
+(
+0 FORCE_AUTHENTICATION
+)
+/* mem_hid_protecol_type */
+(
+0 PROTECOL_BOOT /*default*/
+1 PROTECOL_REPORT
+)
+
+/* mem_upper_sm_reconn */
+(
+1 UPPERSM_SEND_SDP_CONN_REQ
+2 UPPERSM_SEND_SDP_CFG_REQ
+3 UPPERSM_SEND_SDP_HF_SS
+4 UPPERSM_SEND_SDP_DISC_REQ
+5 UPPERSM_SEND_RFCOMM_CONN_REQ
+6 UPPERSM_SEND_RFCOMM_CFG_REQ
+7 UPPERSM_SEND_SABM_CMD
+8 UPPERSM_SEND_DISC
+9 UPPERSM_SEND_WAIT
+10 UPPERSM_SEND_HID_CONTROL_CONN_REQ
+11 UPPERSM_SEND_HID_CONTROL_CFG_REQ
+12 UPPERSM_SEND_HID_INTERRUPT_CONN_REQ
+13 UPPERSM_SEND_HID_INTERRUPT_CFG_REQ
+14 UPPERSM_SEND_SDP_HS_SS
+15 UPPERSM_SEND_SDP_PBAP_SS
+16 UPPERSM_SEND_SDP_AVTARG_SS
+)
+/* mem_upper_sm_remote_page */
+(
+1 UPPERSM_RP_SEND_SDP_CONN_REQ
+2 UPPERSM_RP_SEND_SDP_CFG_REQ
+3 UPPERSM_RP_SEND_SDP_HF_SS
+4 UPPERSM_RP_SEND_SDP_HS_SS
+5 UPPERSM_RP_SEND_SDP_PBAP_SS
+6 UPPERSM_RP_SEND_SDP_AVTARG_SS
+7 UPPERSM_RP_SEND_SDP_DISC_REQ
+8 UPPERSM_RP_SEND_AVCTP_CONN_REQ
+9 UPPERSM_RP_SEND_AVCTP_CFG_REQ
+)
+
+/* mem_ML2CAP_flag */
+(
+0 MSCHEDULER_HID_CONTROL_CONN_DONE
+1 MSCHEDULER_HID_INTERRUPT_CONN_DONE
+2 MSCHEDULER_HID_CONTROL_CFG_REQ_DONE
+3 MSCHEDULER_HID_CONTROL_CFG_RSP_DONE
+4 MSCHEDULER_HID_INTERRUPT_CFG_REQ_DONE
+5 MSCHEDULER_HID_INTERRUPT_CFG_RSP_DONE
+6 MSCHEDULER_HID_CONTROL_DISC_DONE
+7 MSCHEDULER_HID_INTERRUPT_DISC_DONE
+)
+/*    ui event    --add by lj*/
+(
+0x00 UI_DATA_EVNET_NONE
+0x01 UI_DATA_EVNET_HID
+0x02 UI_DATA_EVNET_AVDTP_S
+0x03 UI_DATA_EVNET_AVDTP_M
+0x04 UI_DATA_EVNET_AVCTP
+0x05 UI_DATA_EVNET_HS
+0x06 UI_DATA_EVNET_HF
+0x07 UI_DATA_EVNET_SPP
+0x08 UI_DATA_EVNET_OBEX
+)
+/*    ui ack --add by lj*/
+(
+0x00 UI_DATA_TX_NONE
+0x01 UI_DATA_TX_HID
+0x02 UI_DATA_TX_AVDTP_S
+0x03 UI_DATA_TX_AVDTP_M
+0x04 UI_DATA_TX_AVCTP
+0x05 UI_DATA_TX_HS
+0x06 UI_DATA_TX_HF
+0x07 UI_DATA_TX_SPP
+0x08 UI_DATA_TX_OBEX
+0x10 ACL_TX_L2CAP_SIGNAL
+0x11 ACL_TX_SDP
+0x12 ACL_TX_RFCOMM
+
+)
+
+(
+0 L2CAP_SDP_interface_conn
+1 L2CAP_SDP_interface_cfg
+)
+
+(                                   
+0 L2CAP_CHANNEL_STATE_CONN_REQ      
+1 L2CAP_CHANNEL_STATE_CONN_RES      
+2 L2CAP_CHANNEL_STATE_SND_CFG_REQ   
+3 L2CAP_CHANNEL_STATE_SND_CFG_RES   
+4 L2CAP_CHANNEL_STATE_RCV_CFG_REQ   
+5 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+6 L2CAP_CHANNEL_RFCOMM_ONLY_SABM
+7 L2CAP_CHANNEL_RFCOMM_ONLY_UA
+6 L2CAP_CHANNEL_AVDTP_SIGNAL_INIT //set avdtp init complete
+6 L2CAP_CHANNEL_HID_HANDSHAKE_DONE
+0x3f L2CAP_CHANNEL_SETUP_COMPLETE
+0x7f L2CAP_CHANNEL_AVDTP_SIGNAL_COMPLETE
+0xff L2CAP_CHANNEL_RFCOMM_DLCI0_OPENED
+)                                     
+
+/*  AVDTP---lj*/
+(
+0 L2CAP_AVDTP_SIGNAL_CONNECT
+1 L2CAP_AVDTP_SIGNAL_CONFIG
+2 L2CAP_AVDTP_MEDIA_CONNECT
+3 L2CAP_AVDTP_MEDIA_CONFIG
+4 L2CAP_AVDTP_REPORT_CONNECT
+5 L2CAP_AVDTP_REPORT_CONFIG
+6 L2CAP_AVDTP_RECOVERY_CONNECT
+7 L2CAP_AVDTP_RECOVERY_CONFIG
+)
+/*  AVCTP---lj*/
+(
+0 L2CAP_AVCTP_SIGNAL_CONNECT
+1 L2CAP_AVCTP_SIGNAL_CONFIG
+)
+
+127 L2CAP_SIGNAL_MALLOC_SIZE
+
+//1 mem_rfcomm_malloc_fail_flag
+(
+0 RFCOMM_MALLOC_SUCCEED
+1 RFCOMM_MALLOC_FAIL
+)
+
+//mem_l2cap_flow_ctrl_flag
+(
+0 L2CAP_FLOW_CTRL_DISABLE
+1 L2CAP_FLOW_CTRL_ENABLE
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/le.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/le.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/le.format	(working copy)
@@ -0,0 +1,723 @@
+
+memalloc(
+56 mem_le_rxbuf
+262 mem_le_l2capbuf
+
+
+/* security temp */
+4 mem_le_mic
+4 mem_le_peer_mic
+//8 mem_le_skdm
+//8 mem_le_skds
+16 mem_le_peer_ltk
+16 mem_le_mrand
+
+
+/* ========= le context =========== */
+1 mem_le_state
+1 mem_le_mode
+2 mem_le_tsniff
+4 mem_le_anchor
+6 mem_le_clk_offset
+2 mem_le_receive_window
+6 mem_le_plap
+1 mem_le_conn_handle
+1 mem_le_arq
+1 mem_le_ch
+1 mem_le_hop
+2 mem_le_event_count
+4 mem_le_supervision_timer
+2 mem_le_instant
+1 mem_le_channels
+1 mem_le_op
+
+	/* these 3 should NOT be seperated */
+4 mem_le_access
+3 mem_le_crcinit
+1 mem_le_window_size
+
+	/* these 3 should NOT be seperated */
+2 mem_le_slave_latency
+2 mem_le_superto
+5 mem_le_channel_map
+
+2 mem_le_no_using
+1 mem_le_peer_sca
+
+/* should be together */
+1 mem_le_att_opcode
+2 mem_le_att_handle
+
+1 mem_le_err_code
+1 mem_le_ll_pairing_fail_reason
+
+16 mem_le_sk
+
+/* test */
+1 mem_le_testtype
+2 mem_le_test_sync
+2 mem_le_test_pcnt
+
+6 mem_le_rxon_ts
+
+1 mem_le_rx_ll_opcode
+
+2 mem_le_notify_attr_start
+1 mem_le_notify_len
+
+1 mem_cmd_le_create_conn
+
+2 mem_le_cur_attlist_start_ptr
+2 mem_le_cur_handle_start
+2 mem_le_cur_handle_end
+1 mem_le_cur_uuid_length
+16 mem_le_cur_uuid
+
+1 mem_le_curr_att_len
+1 mem_le_search_res
+
+1 mem_le_continue_type
+
+)
+
+
+xmemalloc(
+2 mem_le_dsniff
+
+// parameters
+2 mem_le_conn_interval
+1 mem_le_scan_enable
+2 mem_le_scan_interval
+2 mem_le_scan_window
+
+1 mem_le_adv_enable
+1 mem_le_adv_data_len
+31 mem_le_adv_data
+1 mem_le_scan_data_len
+31 mem_le_scan_data
+
+//modified name
+1 mem_le_name_len
+30 mem_le_name
+
+
+5 mem_le_new_map
+0 mem_le_new_param
+1 mem_le_new_transmitwindowsize
+2 mem_le_new_transmitwindowoffset
+2 mem_le_new_conninterval
+2 mem_le_new_connslavelatency
+2 mem_le_new_connsupervisiontimeout
+
+1 mem_le_txheader
+1 mem_le_txlen
+2 mem_le_txpayload
+2 mem_le_txcid
+1 mem_le_l2cap
+1 mem_le_l2cap_response
+31 mem_le_txbdy
+
+/* smp related */
+5 mem_le_pcnt_tx
+5 mem_le_pcnt_rx
+4 mem_le_last_mic
+4 mem_le_ivm
+4 mem_le_ivs
+16 mem_le_ltk
+1 mem_ltk_exists
+16 mem_le_rconfirm
+16 mem_le_srand
+1 mem_le_iat
+1 mem_le_rat
+1 mem_le_preq
+1 mem_le_preq_iocap
+1 mem_le_preq_oob
+1 mem_le_preq_auth
+1 mem_le_preq_max_keysize
+1 mem_le_preq_init_key_distribution
+1 mem_le_preq_resp_key_distribution
+1 mem_le_pres
+1 mem_le_pres_iocap
+1 mem_le_pres_oob
+1 mem_le_pres_auth
+1 mem_le_pres_max_keysize
+1 mem_le_pres_init_key_distribution
+1 mem_le_pres_resp_key_distribution
+
+/* att related */
+2 mem_le_search_handle_start
+2 mem_le_search_handle_end
+0 mem_le_att_offset
+1 mem_le_search_att_type_length
+16 mem_le_search_att_type
+2 mem_le_notify_handle
+1 mem_le_search_uuid_length
+16 mem_le_search_uuid
+
+
+//START of LE adv parameter structure
+0 mem_le_adv_param
+2 mem_le_adv_interval
+1 mem_le_adv_type
+1 mem_le_adv_own_addr_type
+1 mem_le_adv_direct_addr_type
+6 mem_le_adv_direct_addr
+1 mem_le_adv_channel_map
+//END of LE adv parameter structure
+
+//START of LE conn parameter structure
+0 mem_le_conn_param
+1 mem_le_conn_peer_addr_type
+6 mem_le_conn_peer_addr
+1 mem_le_conn_own_addr_type
+2 mem_le_interval_min
+2 mem_le_interval_max
+2 mem_le_latency
+2 mem_le_timeout
+//START of LE conn parameter structure
+
+//START of LE scan parameter structure
+0 mem_le_scan_params
+1 mem_le_scan_type
+1 mem_le_scan_own_addr_type
+//END of LE scan parameter structure
+
+3 mem_le_lap
+1 mem_le_uap
+2 mem_le_nap
+
+
+2 mem_le_local_mtu
+2 mem_le_remote_mtu
+
+8 mem_le_skdm
+8 mem_le_skds
+
+2 mem_le_init_superto
+2 mem_ui_le_uuid_table
+
+1 mem_le_secure_connect_enable
+1 mem_le_secure_connect_flag
+1 mem_le_sc_calc
+1 mem_le_secure_connect_state
+1 mem_le_sc_confirm_gkey_flag
+1 mem_le_sc_local_key_invalid
+
+
+1 mem_le_pairing_state
+1 mem_le_enc_state
+1 mem_le_pairing_mode
+4 mem_le_tk
+2 mem_le_ediv
+8 mem_le_rand
+16 mem_le_irk
+
+//LE attribute list
+4 mem_le_transmit_window
+
+//ble General configuration 
+1 mem_le_configuration
+16 mem_le_fixed_ltk
+2 mem_le_pairing_handle
+
+//for continue
+2 mem_le_l2cap_size
+1 mem_le_packet_len_recved
+
+//for fifo
+1 mem_le_tx_buff_used
+2 mem_le_tx_ptr0
+2 mem_le_tx_ptr1
+2 mem_le_tx_ptr2
+2 mem_le_tx_ptr3
+
+//ble gatt signaling
+1 mem_le_signaling_identifier
+2 mem_le_l2cap_signaling_conn_param_update_rsp_result
+
+1 mem_le_packet_size
+1 mem_le_packet_llid
+2 mem_le_payload_ptr
+
+1 mem_le_md_count
+
+)
+
+
+(
+0x000001 param_le_features
+0x000a06 param_le_version
+0x1d87 param_le_subversion
+1636 param_sifs
+0x1e0 param_clke_cal_le
+0xa0 param_le_sca
+)
+
+(
+0 DEFAULT_STATES
+1 IPHONE_LOST_LTK
+2 MODULE_LOST_LTK
+3 LTK_NOT_LOST
+)
+
+
+(
+27 LE_MAX_PAKET_LEN
+)
+
+/* advertising channel PDU type */
+(
+0 ADV_IND
+1 ADV_DIRECT_IND
+2 ADV_NONCONN_IND
+3 SCAN_REQ
+4 SCAN_RSP
+5 CONNECT_REQ
+6 ADV_SCAN_IND
+)
+
+(
+0x01	GAP_ADTYPE_FLAGS
+0x02	GAP_ADTYPE_16BIT_MORE
+0x03	GAP_ADTYPE_16BIT_COMPLETE
+0x04	GAP_ADTYPE_32BIT_MORE
+0x05	GAP_ADTYPE_32BIT_COMPLETE
+0x06	GAP_ADTYPE_128BIT_MORE
+0x07	GAP_ADTYPE_128BIT_COMPLETE
+0x08	GAP_ADTYPE_LOCAL_NAME_SHORT
+0x09	GAP_ADTYPE_LOCAL_NAME_COMPLETE
+0x0a	GAP_ADTYPE_POWER_LEVEL
+0xff	GAP_ADTYPE_MANUFACTURER_SPECIFIC
+)
+
+
+	/* LE control packet type */
+	(
+	0x00 LL_CONNECTION_UPDATE_REQ
+	0x01 LL_CHANNEL_MAP_REQ
+	0x02 LL_TERMINATE_IND
+	0x03 LL_ENC_REQ
+	0x04 LL_ENC_RSP
+	0x05 LL_START_ENC_REQ
+	0x06 LL_START_ENC_RSP
+	0x07 LL_UNKNOWN_RSP
+	0x08 LL_FEATURE_REQ
+	0x09 LL_FEATURE_RSP
+	0x0A LL_PAUSE_ENC_REQ
+	0x0B LL_PAUSE_ENC_RSP
+	0x0C LL_VERSION_IND
+	0x0D LL_REJECT_IND
+	0x0E LL_SLAVE_FEATURE_REQ
+	0x0F LL_CONNECTION_PARAM_REQ
+	0x10 LL_CONNECTION_PARAM_RSP
+	0x11 LL_REJECT_IND_EXT
+	0x12 LL_PING_REQ
+	0x13 LL_PING_RSP
+	)
+
+	/* Security Manager Protocol Code */
+	(
+	0x01 SMP_PAIRING_REQUEST
+	0x02 SMP_PAIRING_RESPONSE
+	0x03 SMP_PAIRING_CONFIRM
+	0x04 SMP_PAIRING_RANDOM
+	0x05 SMP_PAIRING_FAILED
+	0x06 SMP_ENCRYPTION_INFORMATION
+	0x07 SMP_MASTER_IDENTIFICATION
+	0x08 SMP_IDENTITY_INFORMATION
+	0x09 SMP_IDENTITY_ADDRESS_INFORMATION
+	0x0A SMP_SIGNING_INFORMATION
+	0x0B SMP_SECURITY_REQUEST
+	0x0c SMP_PAIRING_PUBLIC_KEY
+	0x0d SMP_PAIRING_DHKEY_CHECK
+	)
+
+	/* L2CAP Signaling OPCODE */
+	(
+	0x12 L2CAP_CONNECTION_PARAMETER_UPDATE_REQUEST
+	0x13 L2CAP_CONNECTION_PARAMETER_UPDATE_RESPONSE
+	)
+
+	/* ATT OPCODE */
+	(
+	0x01 ATTOP_ERROR_RESPONSE
+	0x02 ATTOP_EXCHANGE_MTU_REQUEST
+	0x03 ATTOP_EXCHANGE_MTU_RESPONSE
+	0x04 ATTOP_FIND_INFORMATION_REQUEST
+	0x05 ATTOP_FIND_INFORMATION_RESPONSE
+	0x06 ATTOP_FIND_BY_TYPE_VALUE_REQUEST
+	0x07 ATTOP_FIND_BY_TYPE_VALUE_RESPONSE
+	0x08 ATTOP_READ_BY_TYPE_REQUEST
+	0x09 ATTOP_READ_BY_TYPE_RESPONSE
+	0x0A ATTOP_READ_REQUEST
+	0x0B ATTOP_READ_RESPONSE
+	0x0C ATTOP_READ_BLOB_REQUEST
+	0x0D ATTOP_READ_BLOB_RESPONSE
+	0x0E ATTOP_READ_MULTIPLE_REQUEST
+	0x0F ATTOP_READ_MULTIPLE_RESPONSE
+	0x10 ATTOP_READ_BY_GROUP_TYPE_REQUEST
+	0x11 ATTOP_READ_BY_GROUP_TYPE_RESPONSE
+	0x12 ATTOP_WRITE_REQUEST
+	0x13 ATTOP_WRITE_RESPONSE
+	0x16 ATTOP_PREPARE_WRITE_REQUEST
+	0x17 ATTOP_PREPARE_WRITE_RESPONSE
+	0x18 ATTOP_EXECUTE_WRITE_REQUEST
+	0x19 ATTOP_EXECUTE_WRITE_RESPONSE
+	0x1B ATTOP_HANDLE_VALUE_NOTIFICATION
+	0x1D ATTOP_HANDLE_VALUE_INDICATION
+	0x1E ATTOP_HANDLE_VALUE_CONFIRMATION
+	0x52 ATTOP_WRITE_COMMAND
+	0xD2 ATTOP_SIGNED_WRITE_COMMAND
+	0x1f ATTOP_CONTINUE
+	0x9e EMPTY_LE_DATA_PRE
+	0x9f EMPTY_LE_DATA
+	)
+
+	/* ATT error code */
+	(
+	0x01 ATT_ERR_INVALID_HANDLE
+	0x02 ATT_ERR_READ_NOT_PERMITTED
+	0x03 ATT_ERR_WRITE_NOT_PERMITTED
+	0x04 ATT_ERR_INVALID_PDU
+	0x05 ATT_ERR_INSUFFICIENT_AUTHENTICATION
+	0x06 ATT_ERR_REQUEST_NOT_SUPPORTED
+	0x07 ATT_ERR_INVALID_OFFSET
+	0x08 ATT_ERR_INSUFFICIENT_AUTHORIZATION
+	0x09 ATT_ERR_PREPARE_QUEUE_FULL
+	0x0A ATT_ERR_ATTRIBUTE_NOT_FOUND
+	0x0B ATT_ERR_ATTRIBUTE_NOT_LONG
+	0x0C ATT_ERR_INSUFFICIENT_ENCRYPTION_KEY_SIZE
+	0x0D ATT_ERR_INVALID_ATTRIBUTE_VALUE_LENGTH
+	0x0E ATT_ERR_UNLIKELY_ERROR
+	0x0F ATT_ERR_INSUFFICIENT_ENCRYPTION
+	0x10 ATT_ERR_UNSUPPORTED_GROUP_TYPE
+	0x11 ATT_ERR_INSUFFICIENT_RESOURCES
+	)
+	/*	SERVICE UUID	*/
+	(
+	0x1800 UUID_SERVICE_GENERIC_ACC
+	0x1801 UUID_SERVICE_GENERIC_ATT
+	0x180a UUID_SERVICE_DEVICE_INFO
+	0x180f UUID_SERVICE_BATTERY
+	0x1812 UUID_SERVICE_HIDS
+	0x2800 UUID_GATT_PRIMARY_SERVICE
+	0x2801 UUID_GATT_SECONDARY_SERVICE
+	0X2802 UUID_GATT_INCLUDE
+	0X2803 UUID_GATT_CHARACTERISTIC
+	0X2A00 UUID_CHRCTR_DEVICE_NAME
+	0X2A19 UUID_CHRCTR_BATTERY_LEVEL
+	0X2A22 UUID_CHRCTR_KEYBOARD_INPUT
+	0X2A23 UUID_CHRCTR_SYSTEM_ID 
+	0X2A25 UUID_CHRCTR_SERIAL_NUMBER
+	0X2A26 UUID_CHRCTR_FIRMWARE
+	0X2A32 UUID_CHRCTR_KEYBOARD_OUTPUT
+	0X2A33 UUID_CHRCTR_MOUSE_INPUT
+	0X2A4A UUID_CHRCTR_HID_INFO
+	0X2A4B UUID_CHRCTR_REPORT_MAP
+	0X2A4C UUID_CHRCTR_HID_CTRL_POINT
+	0X2A4D UUID_CHRCTR_REPORT
+	0X2A4E UUID_CHRCTR_PROTOCOL_MODE
+	)
+
+	(// pairing failed reason
+	0x00 PAIRING_FAILED_RESERVED
+	0X01 PAIRING_FAILED_PASSKEY_ENTRY_FAILED
+	0X02 PAIRING_FAILED_OOB_NOT_AVAILABLE
+	0X03 PAIRING_FAILED_AUTHENTICATION_REQUIRE
+	0X04 PAIRING_FAILED_CONFIRM_VALUE_FAILED
+	0X05 PAIRING_FAILED_PAIRING_NOT_SUPPORTED
+	0X06 PAIRING_FAILED_ENCRYPTION_KEY_SIZE
+	0X07 PAIRING_FAILED_COMMAND_NOT_SUPPORTED
+	0X08 PAIRING_FAILED_UNSPECIFIED_REASON
+	0X09 PAIRING_FAILED_REPEATED_ATTEMPTS
+	0X0A PAIRING_FAILED_INVALID_PARAMETERS
+	0X0B PAIRING_FAILED_DHKEY_CHECK_FAILED
+	0X0C PAIRING_FAILED_NUMERIC_COMPARISON_FAILED
+	0X0D PAIRING_FAILED_BR_EDR_PAIRING_IN_PROGRESS
+	0X0E PAIRING_FAILED_KEY_DERIVATION_GENERATION_NOT_ALLOWED
+	)
+
+
+	//BLE ErrorCodes
+	(    
+	0x01 ERROR_UNKNOWN_HCI_COMMAND
+	0x02 ERROR_NO_CONNECTION
+	0x03 ERROR_HARDWARE_FAILURE
+	0x04 ERROR_PAGE_TIMEOUT
+	0x05 ERROR_AUTHENTICATION_FAILURE
+	0x06 ERROR_KEY_MISSING
+	0x07 ERROR_MEMORY_FULL
+	0x08 ERROR_CONNECTION_TIMEOUT
+	0x09 ERROR_MAX_CONNECTIONS
+	0x0A ERROR_MAX_SCO_CONNECTIONS
+	0x0B ERROR_MAX_ACL_CONNECTIONS
+	0x0C ERROR_COMMAND_DISALLOWED
+	0x0D ERROR_HOST_REJECT_LIMITED_RESOURCES
+	0x0E ERROR_HOST_REJECT_SECURITY_REASONS
+	0x0F ERROR_HOST_REJECT_REMOTE_IS_ONLY_PERSONAL
+	0x10 ERROR_HOST_TIMEOUT
+	0x11 ERROR_UNSUPPORTED_FEATURE_OR_PARAMETER_VALUE
+	0x12 ERROR_INVALID_HCI_COMMAND_PARAMETERS
+	0x13 ERROR_REMOTE_USER_TERMINATED_CONNECTION
+	0x14 ERROR_REMOTE_LOW_RESOURCES
+	0x15 ERROR_REMOTE_POWERING_OFF
+	0x16 ERROR_CONNECTION_TERMINATED_BY_LOCAL_HOST
+	0x17 ERROR_REPEATED_ATTEMPTS
+	0x18 ERROR_PAIRING_NOT_ALLOWED
+	0x19 ERROR_UNKNOWN_LMP_PDU
+	0x1A ERROR_UNSUPPORTED_REMOTE_FEATURE
+	0x1B ERROR_SCO_OFFSET_REJECTED
+	0x1C ERROR_SCO_INTERVAL_REJECTED
+	0x1D ERROR_SCO_AIR_MODE_REJECTED
+	0x1E ERROR_INVALID_LMP_PARAMETER
+	0x1F ERROR_UNSPECIFIED_ERROR
+	0x20 ERROR_UNSUPPORTED_LMP_PARAMETER_VALUE
+	0x21 ERROR_ROLE_CHANGE_NOT_ALLOWD
+	0x22 ERROR_LMP_RESPONSE_TIMEOUT
+	0x23 ERROR_ERROR_TRANSACTION_COLLISION
+	0x24 ERROR_LMP_PDU_NOT_ALLOWED
+	0x25 ERROR_ENCRYPTION_MODE_NOT_ACCEPTABLE
+	0x26 ERROR_UNIT_KEY_USED
+	0x27 ERROR_QOS_NOT_SUPPORTED
+	0x28 ERROR_INSTANT_PASSED
+	0x29 ERROR_PAIRING_W_UNIT_KEY_NOT_SUPPORTED
+	0x2a ERROR_DIFFERENT_TRANSACTION_COLLISION
+	0x2c ERROR_QOS_UNACCEPTABLE_PARAMETER
+	0x2d ERROR_QOS_REJECTED
+	0x2e ERROR_CHANNEL_CLASSIFICATION_NOT_SUPPORTED
+	0x2f ERROR_INSUFFICIENT_SECURITY
+	0x30 ERROR_PARAMETER_OUT_OF_MANDATORY_PANGE
+	0x32 ERROR_ROLE_SWITCH_PENDING
+	0x34 ERROR_RESERVED_SLOT_VIOLATION
+	0x35 ERROR_ROLE_SWITCH_FAILED
+	0x36 ERROR_EXTENDED_INQUIRY_RESPONSE_TOO_LARGE
+	0x37 ERROR_SIMPLE_PAIRING_NOT_SUPPORTED_BY_HOST
+	0x38 ERROR_HOST_BUSY_PAIRING
+	)
+
+
+	//modified_name
+	(
+	0x14 MAX_NAME_LEN
+	0x16 ADV_DATA_NAME_LEN
+	0X20 SPACE
+	
+	)
+	/* GATT Specifications*/
+	(
+	0X2900 CHARACTERTIC_EXTENDED_PROPERTIES
+	0X2901 CHARACTERTIC_USER_DESCRIPTION
+	0X2902 CLIENT_CHARACTERTIC_CONFIGURATION
+	0X2903 SERVER_CHARACTERTIC_CONFIGURATION
+	0X2904 CHARACTERTIC_PRESENTATION_FORMAT
+	0X2905 CHARACTERTIC_AGGREGATE
+	0X2906 VALID_RANGE
+	0X2907 EXTERNAL_REPORT_REFERENCE
+	0X2908 REPORT_REFERENCE
+	0X290B ENVIR_SENSING_CONFIGURATION
+	0X290C ENVIR_SENSING_MEASUREMENT
+	0X290D ENVIR_SENSING_TRIGGER_SETTING
+	)
+	/* LE L2CAP CID */
+	(
+	0x0004 LE_L2CAP_CID_ATT
+	0x0005 LE_L2CAP_CID_SIGNAL
+	0x0006 LE_L2CAP_CID_SMP
+	)
+
+	//LE address type
+	(
+	0 LE_ADDR_TYPE_PUBLIC
+	1 LE_ADDR_TYPE_RANDOM
+	)
+	//LE address type bitmap
+	(
+	7 LE_RECEIVER_ADDR_BIT
+	6 LE_SENDER_ADDR_BIT
+	)
+	//LE SCAN TYPE
+	(
+	0x00 LE_SCAN_TYPE_PASSIVE //no SCAN_REQ shall be sent
+	0x01 LE_SCAN_TYPE_ACTIVE
+	)
+
+	//LE SCAN ENABLE
+	(
+	0x00 LE_SCAN_DISABLE
+	0x01 LE_SCAN_ENABLE
+	0x0101 LE_ACTIVE_SCAN_ENABLE
+	)
+
+	//LE FIND INFORMATION RESPONSE
+	//THE FORMAT OF THE INFORMATION DATA
+	(
+	0x01 UUID_SIZE_16BIT
+	0x02 UUID_SIZE_128BIT
+	)
+
+	(
+	0x0000 BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_ACCEPTED
+	0x0001 BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_REJECTED
+	)
+
+//	le_state_map 0-2 is reserved for state_inconn,state_insniff and state_sco
+(
+3 lestate_got_first_packet
+4 lestate_encryption
+5 lestate_update_param
+6 lestate_update_map
+)
+
+// 	le mode
+(
+0 lemode_idle
+1 lemode_slave
+3 lemode_master
+)
+
+
+(
+0x01 LLID_CONTINUE
+0x02 LLID_START
+0x03 LLID_LE_LL
+0x01 LLID_EMPTY
+)
+
+(
+4 LE_TX_BUFF_COUNT
+3 LE_TX_BUFF_UPDATE_LOOPCNT //LE_TX_BUFF_COUNT-1
+
+12 LE_MD_MAX_COUNT
+)
+
+
+(
+0 LE_INITATOR_LTK_BIT
+1 LE_INITATOR_IRK_BIT
+2 LE_INITATOR_CSRK_BIT
+)
+
+(
+0x00 LE_PAIRING_MODE_NONE
+0x01 LE_PAIRING_MODE_LAGACY_JUSTWORK
+0x02 LE_PAIRING_MODE_LAGACY_PASSKEY
+0x81 LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK
+0x82 LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC
+0x83 LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY
+
+7 LE_PAIRING_MODE_SECURE_CONNECT_BIT
+)
+
+
+(
+0 FLAG_IOCAP_DISPLAYONLY
+1 FLAG_IOCAP_DISPLAYYESNO
+2 FLAG_IOCAP_KEYBOARDONLY
+3 FLAG_IOCAP_NOINPUTNOOUTPUT
+4 FLAG_IOCAP_KEYBOARDDISPLAY
+
+0x00 FLAG_OOB_DATA_FLAG_NO
+)
+
+(
+0x00 FLAG_LE_NO_BONDING_NO_MITM
+0x01 FLAG_LE_BONDING_NO_MITM
+0x04 FLAG_LE_NO_BONDING_MITM
+0x05 FLAG_LE_BONDING_MITM
+0x09 FLAG_LE_BONDING_NO_MITM_SECURE
+0x0D FLAG_LE_BONDING_MITM_SECURE
+
+2 LE_AUTH_MITM_BIT
+3 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT
+)
+
+(
+0  LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND
+1  LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE
+2  LE_FIND_BY_TYPE_VAL_RES_FOUND_ENDING_HANDLE
+
+)
+
+(
+0 MASTER_PUBLIC_ADDR
+1 MASTER_RANDOM_ADDR
+)
+
+(
+0x06 LE_ERR_PIN_OR_KEY_MISSING
+)
+
+
+(
+96000 TIMER_SMP_PAIRING_TIMEOUT //30S
+)
+//mem_le_pairing_state
+(
+0 FLAG_LE_PAIRING_NULL
+1 FLAG_LE_PAIRING_START
+2 FLAG_LE_PAIRING_SEND_RECURITY_REQ
+3 FLAG_LE_PAIRING_RCV_PAIRING_REQ
+4 FLAG_LE_PAIRING_AUTH
+5 FLAG_LE_PAIRING_AFTER_AUTH
+6 FLAG_LE_PAIRING_SEND_START_ENC_RSP
+7 FLAG_LE_PARING_SEND_ENC_INFORMATION
+8 FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION 
+9 FLAG_LE_PARING_SEND_INDENTITY_INFORMATION
+0xff FLAG_LE_PAIRING_END
+)
+
+
+
+/*LE secure connect state */
+(
+0x00 LE_SC_STAT_NULL
+0x01 LE_SC_STAT_RECEIVE_PUBLIC_KEY
+0x02 LE_SC_STAT_WAIT_SEND_PUBLIC_KEY
+0x03 LE_SC_STAT_SEND_PUBLIC_KEY
+0x04 LE_SC_STAT_RECEIVE_RANDOM
+0x05 LE_SC_STAT_SEND_RANDOM
+0x06 LE_SC_STAT_RECEIVE_DHKEY
+0x07 LE_SC_STAT_WAIT_CONFIRM_GKEY
+0x08 LE_SC_STAT_PASSKEY_WAIT_CONFIRM
+)
+
+
+(
+0 FLAG_LE_SC_CONFRIM_NULL
+1 FLAG_LE_SC_CONFRIM_GKEY_OK
+)
+
+//mem_le_enc_state
+(
+0 FLAG_LE_ENC_NULL
+1 FLAG_LE_RCV_ENC_START
+2 FLAG_LE_ENC_PAUSE
+3 FLAG_LE_RCV_START_ENC_RSP
+4 FLAG_LE_SEND_START_ENC_RSP
+0xff FLAG_LE_ENC_END
+)
+
+(//mem_le_configuration
+//bit0:use fixed key , ble passkey pairing
+0 BIT_BLE_PASSKEY_FIXED_KEY
+//bit1:ble pairing use fixed long term key
+1 BIT_BLE_PAIRING_FIXED_LTK
+//bit2:ble transmit packet will set more data flag
+2 BIT_BLE_TRANSMIT_PACKET_BY_MD
+//bit3:master read handle, with requires an authenticated link
+3 BIT_BLE_READ_AUTH
+//bit4:master write handle, with requires an authenticated link
+4 BIT_BLE_WRITE_AUTH
+//bit5:cannot enter long sleep
+5 BIT_BLE_SHORT_MULT
+
+)
+
+(
+0 BIT_ADV_CHANNEL_MAP_37
+1 BIT_ADV_CHANNEL_MAP_38
+2 BIT_ADV_CHANNEL_MAP_39
+)
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/lmp.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/lmp.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/lmp.format	(working copy)
@@ -0,0 +1,224 @@
+
+memalloc(
+
+1 mem_lmo_header_length
+1 mem_lmo_header_opcode
+17 mem_lmo_payload
+1 mem_lmi_accepted_opcode
+1 mem_disconn_reason_send
+1 mem_tx_fixed_freq
+1 mem_rx_fixed_freq
+1 mem_ext_features_page
+2 mem_lmpext_ssp_enable
+1 mem_remote_sppcap
+
+1 mem_lmp_conn_state
+2 mem_soft_timer
+1 mem_pincode_state
+
+1 mem_sres_tid
+1 mem_accptsco_tid
+
+1 mem_auth_enable
+1 mem_wait_encryption
+
+16 mem_sniff_payload
+4 mem_aurand_send_delay_time
+)
+
+xmemalloc(
+3 mem_lmp_version
+2 mem_lmp_subversion
+1 mem_local_name_length
+3 mem_local_name
+64 mem_local_name2
+1 mem_local_name_end
+1 mem_unsniff2sniff_timer
+1 mem_switch_flag
+1 mem_classic_bt_flag
+)
+
+	(
+	//bit flag:mem_classic_bt_flag
+	0 FLAG_SSP_REJECT_JUSTWORK
+	1 SHORT_MULT_FLAG
+	)
+	
+	(
+	//bit map
+	0 pair_state_inrand
+	1 pair_state_inrand_acpt
+	2 pair_state_send_comb
+	3 pair_state_recv_comb
+	4 pair_state_send_aurand
+	5 pair_state_recv_sres
+	6 pair_state_recv_aurand
+	7 pair_state_send_sres	
+	)
+	/* LMP opcodes */
+	(
+	1 LMP_NAME_REQ 
+	2 LMP_NAME_RES 
+	3 LMP_ACCEPTED 
+	4 LMP_NOT_ACCEPTED 
+	5 LMP_CLKOFFSET_REQ 
+	6 LMP_CLKOFFSET_RES 
+	7 LMP_DETACH 
+	8 LMP_IN_RAND 
+	9 LMP_COMB_KEY 
+	10 LMP_UNIT_KEY 
+	11 LMP_AU_RAND 
+	12 LMP_SRES 
+	13 LMP_TEMP_RAND 
+	14 LMP_TEMP_KEY 
+	15 LMP_ENCRYPTION_MODE_REQ 
+	16 LMP_ENCRYPTION_KEY_SIZE_REQ 
+	17 LMP_START_ENCRYPTION_REQ 
+	18 LMP_STOP_ENCRYPTION_REQ 
+	19 LMP_SWITCH_REQ 
+	20 LMP_HOLD
+	21 LMP_HOLD_REQ
+	23 LMP_SNIFF_REQ 
+	24 LMP_UNSNIFF_REQ 
+	26 LMP_PARK_REQ 
+	27 LMP_SET_BROADCAST_SCAN_WINDOW 
+	28 LMP_MODIFY_BEACON 
+	29 LMP_UNPARK_BD_ADDR_REQ 
+	30 LMP_UNPARK_PM_ADDR_REQ 
+	31 LMP_INCR_POWER_REQ 
+	32 LMP_DECR_POWER_REQ 
+	33 LMP_MAX_POWER 
+	34 LMP_MIN_POWER 
+	35 LMP_AUTO_RATE 
+	36 LMP_PREFERRED_RATE 
+	37 LMP_VERSION_REQ 
+	38 LMP_VERSION_RES 
+	39 LMP_FEATURES_REQ 
+	40 LMP_FEATURES_RES 
+	41 LMP_QUALITY_OF_SERVICE 
+	42 LMP_QUALITY_OF_SERVICE_REQ 
+	43 LMP_SCO_LINK_REQ 
+	44 LMP_REMOVE_SCO_LINK_REQ 
+	45 LMP_MAX_SLOT 
+	46 LMP_MAX_SLOT_REQ 
+	47 LMP_TIMING_ACCURACY_REQ 
+	48 LMP_TIMING_ACCURACY_RES 
+	49 LMP_SETUP_COMPLETE 
+	50 LMP_USE_SEMI_PERMANENT_KEY 
+	51 LMP_HOST_CONNECTION_REQ 
+	52 LMP_SLOT_OFFSET 
+	53 LMP_PAGE_MODE_REQ 
+	54 LMP_PAGE_SCAN_MODE_REQ 
+	55 LMP_SUPERVISION_TIMEOUT 
+	56 LMP_TEST_ACTIVATE
+	57 LMP_TEST_CONTROL
+	58 LMP_ENC_KEY_SIZE_MASK_REQ
+	59 LMP_ENC_KEY_SIZE_MASK_RES
+	60 LMP_SET_AFH
+
+	/* simple pairing support */
+	61 LMP_ENCAPSULATED_HEADER
+	62 LMP_ENCAPSULATED_PAYLOAD
+	63 LMP_SIMPLE_PAIRING_CONFIRM
+	64 LMP_SIMPLE_PAIRING_NUMBER
+	65 LMP_DHKEY_CHECK
+	127 LMP_ESCAPE
+	127 LMP_ESCAPE_4   /* add 2bytes LMP header support  */   
+	)
+	/* LMP EXT opcodes, ORed with bit 7 to make difference to nonEXT */
+	(
+	129 LMP_EXT_ACCEPTED
+	130 LMP_NOT_ACCEPTED_EXT
+	131 LMP_EXT_FEATURES_REQ
+	132 LMP_EXT_FEATURES_RES
+	139 LMP_PACKET_TYPE_TABLE_REQ
+	140 LMP_EXT_ESCO_LINK_REQ
+	141 LMP_EXT_REMOVE_ESCO_REQ
+	144 LMP_EXT_CHN_CLASSIFICATION_REQ
+	145 LMP_EXT_CHN_CLASSIFICATION
+	149 LMP_SNIFF_SUBRATING_REQ
+	150 LMP_SNIFF_SUBRATING_RES
+	151 LMP_PAUSE_ENCRYPTION_REQ
+	152 LMP_RESUME_ENCRYPTION_REQ
+	153 LMP_IO_CAP_REQ
+	154 LMP_IO_CAP_RES
+	)
+	/* LMP reason codes */
+	(
+	0x05 AUTHENTICATION_FAILURE_ERROR
+	0x06 KEY_MISSING
+	0x0b ACL_CONNECTION_ALREADY_EXISTS
+	0x13 OTHER_END_TERMINATED
+	0x15 ABOUT_TO_POEWR_OFF
+	0x16 LOCAL_HOST
+	0x18 PAIRING_NOT_ALLOWED
+	0x19 UNKNOWN_LMP_PDU
+	0x1A UNSUPPORTED_LMP_FEATURE 
+	0x1F UNSPECIFIED_ERROR
+	0x20 UNSUPPORTED_PARAMETERS
+	0x21 SWITCH_NOT_ALLOWED
+	0x23 TRANSACTION_COLLISION
+	0x24 PDU_NOT_ALLOWED
+	0x25 ENCRYPTION_MODE_NOT_ACCEPTABLE
+	0x2e NOT_SUPPORT_CHN_CLASSIFICATION
+	0x37 NOT_SUPPORT_SSP
+	)
+
+	/* test mode scenarios */
+	(
+	0 PAUSE_TEST_MODE
+	1 ZERO_PATTERN
+	2 ONE_PATTERN
+	3 ALT_PATTERN
+	4 PSEUDORANDOM
+	5 CLOSED_LOOP_BACK_ACL
+	6 CLOSED_LOOP_BACK_SCO
+	7 ACL_WITHOUT_WHITENING
+	8 SCO_WITHOUT_WHITENING
+	9 ALT2_PATTERN
+	255 EXIT_TEST_MODE
+	)
+	/* test mode hoppig modes */
+	(
+	0 FIXED_FREQ
+	1 NORMAL_HOP
+	)
+
+	/* mem_lmp_tid indicates which type of LMP will be sent */
+	(
+	0 TID_NORM_REPLY
+	1 TID_NORM_SEND
+	2 TID_ONE
+	3 TID_ZERO
+	4 TID_PAIRING
+	5 TID_ENCRYPTION
+	6 TID_VARIABLE
+	7 TID_RX
+	)
+
+	/* ============== lmp status ==========*/
+	(
+	0 lmp_incoming
+	1 lmp_outgoing
+	2 lmp_reject_msg
+	3 lmp_clear_msg
+	4 upper_reject_msg
+	5 upper_clear_msg
+	)
+
+(
+0x2ee00 TIMER_ONE_MINUTE //96000*2
+80 TIMER_SWITCH_WAITE
+12 TIMER_ENPT_WAITE
+)
+
+(
+0 SWITCH_FLAG_INIT
+1 SWITCH_FLAG_ACCEPT
+2 SWITCH_FLAG_NOT_ACCEPT
+)
+(
+0 NULL_ENCRYP
+1 DONE_ENCRYP
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/memblocks.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/memblocks.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/memblocks.format	(working copy)
@@ -0,0 +1,64 @@
+//
+//
+//Large memory blocks defined in this file.
+//Blocks Shall be defined with absolute address.
+//Blocks' length Shall be specified in comment following Blocks' names.
+//Different blocks MAY be overlap.
+//Blocks defined in this file Shall NOT be overlap with variable in memmap.format.
+
+// USB C51 exchange area
+(
+0xff0 mem_mcmd
+0xff1 mem_mouse_data
+)
+
+//l2cap RX buffers
+(
+0x1000 mem_l2cap_rxbuff1		//0x400
+0x1400 mem_l2cap_rxbuff2		//0x400
+//end address:0x17ff
+)
+//l2cap TX buffers
+(
+0x1800 mem_tx_buff0		//128
+0x1880 mem_tx_buff1		//128
+0x1900 mem_tx_buff2		//128
+0x1980 mem_tx_buff3		//128
+0x1a00 mem_tx_buff4		//128
+0x1a80 mem_tx_buff5		//128
+0x1b00 mem_tx_buff6		//128
+0x1b80 mem_tx_buff7		//128
+//end address: 0x1bff
+)
+
+(
+0x1800 mem_le_tx_buffer0
+0x1900 mem_le_tx_buffer1
+0x1a00 mem_le_tx_buffer2
+0x1b00 mem_le_tx_buffer3
+//end addr:0x1dff
+)
+
+
+//uart buffer
+(
+0x1800 mem_h5rx_buf//0x400
+0x1bff mem_h5rx_buf_end
+0x1c00 mem_h5tx_buf
+0x1fff mem_h5tx_buf_end
+)
+
+
+(
+0x1800 mem_ir_record
+0x1c      mem_ir_record_max
+)
+
+ifndef REVD 
+(
+0x4b00 memk
+)
+
+
+endif
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/patch.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/patch.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/patch.format	(working copy)
@@ -0,0 +1,516 @@
+
+(
+	  0 patch00_0
+	  1 patch00_1
+	  2 patch00_2
+	  3 patch00_3
+	  4 patch00_4
+	  5 patch00_5
+	  6 patch00_6
+	  7 patch00_7
+	  8 patch01_0
+	  9 patch01_1
+	 10 patch01_2
+	 11 patch01_3
+	 12 patch01_4
+	 13 patch01_5
+	 14 patch01_6
+	 15 patch01_7
+	 16 patch02_0
+	 17 patch02_1
+	 18 patch02_2
+	 19 patch02_3
+	 20 patch02_4
+	 21 patch02_5
+	 22 patch02_6
+	 23 patch02_7
+	 24 patch03_0
+	 25 patch03_1
+	 26 patch03_2
+	 27 patch03_3
+	 28 patch03_4
+	 29 patch03_5
+	 30 patch03_6
+	 31 patch03_7
+	 32 patch04_0
+	 33 patch04_1
+	 34 patch04_2
+	 35 patch04_3
+	 36 patch04_4
+	 37 patch04_5
+	 38 patch04_6
+	 39 patch04_7
+	 40 patch05_0
+	 41 patch05_1
+	 42 patch05_2
+	 43 patch05_3
+	 44 patch05_4
+	 45 patch05_5
+	 46 patch05_6
+	 47 patch05_7
+	 48 patch06_0
+	 49 patch06_1
+	 50 patch06_2
+	 51 patch06_3
+	 52 patch06_4
+	 53 patch06_5
+	 54 patch06_6
+	 55 patch06_7
+	 56 patch07_0
+	 57 patch07_1
+	 58 patch07_2
+	 59 patch07_3
+	 60 patch07_4
+	 61 patch07_5
+	 62 patch07_6
+	 63 patch07_7
+	 64 patch08_0
+	 65 patch08_1
+	 66 patch08_2
+	 67 patch08_3
+	 68 patch08_4
+	 69 patch08_5
+	 70 patch08_6
+	 71 patch08_7
+	 72 patch09_0
+	 73 patch09_1
+	 74 patch09_2
+	 75 patch09_3
+	 76 patch09_4
+	 77 patch09_5
+	 78 patch09_6
+	 79 patch09_7
+	 80 patch0a_0
+	 81 patch0a_1
+	 82 patch0a_2
+	 83 patch0a_3
+	 84 patch0a_4
+	 85 patch0a_5
+	 86 patch0a_6
+	 87 patch0a_7
+	 88 patch0b_0
+	 89 patch0b_1
+	 90 patch0b_2
+	 91 patch0b_3
+	 92 patch0b_4
+	 93 patch0b_5
+	 94 patch0b_6
+	 95 patch0b_7
+	 96 patch0c_0
+	 97 patch0c_1
+	 98 patch0c_2
+	 99 patch0c_3
+	100 patch0c_4
+	101 patch0c_5
+	102 patch0c_6
+	103 patch0c_7
+	104 patch0d_0
+	105 patch0d_1
+	106 patch0d_2
+	107 patch0d_3
+	108 patch0d_4
+	109 patch0d_5
+	110 patch0d_6
+	111 patch0d_7
+	112 patch0e_0
+	113 patch0e_1
+	114 patch0e_2
+	115 patch0e_3
+	116 patch0e_4
+	117 patch0e_5
+	118 patch0e_6
+	119 patch0e_7
+	120 patch0f_0
+	121 patch0f_1
+	122 patch0f_2
+	123 patch0f_3
+	124 patch0f_4
+	125 patch0f_5
+	126 patch0f_6
+	127 patch0f_7
+	128 patch10_0
+	129 patch10_1
+	130 patch10_2
+	131 patch10_3
+	132 patch10_4
+	133 patch10_5
+	134 patch10_6
+	135 patch10_7
+	136 patch11_0
+	137 patch11_1
+	138 patch11_2
+	139 patch11_3
+	140 patch11_4
+	141 patch11_5
+	142 patch11_6
+	143 patch11_7
+	144 patch12_0
+	145 patch12_1
+	146 patch12_2
+	147 patch12_3
+	148 patch12_4
+	149 patch12_5
+	150 patch12_6
+	151 patch12_7
+	152 patch13_0
+	153 patch13_1
+	154 patch13_2
+	155 patch13_3
+	156 patch13_4
+	157 patch13_5
+	158 patch13_6
+	159 patch13_7
+	160 patch14_0
+	161 patch14_1
+	162 patch14_2
+	163 patch14_3
+	164 patch14_4
+	165 patch14_5
+	166 patch14_6
+	167 patch14_7
+	168 patch15_0
+	169 patch15_1
+	170 patch15_2
+	171 patch15_3
+	172 patch15_4
+	173 patch15_5
+	174 patch15_6
+	175 patch15_7
+	176 patch16_0
+	177 patch16_1
+	178 patch16_2
+	179 patch16_3
+	180 patch16_4
+	181 patch16_5
+	182 patch16_6
+	183 patch16_7
+	184 patch17_0
+	185 patch17_1
+	186 patch17_2
+	187 patch17_3
+	188 patch17_4
+	189 patch17_5
+	190 patch17_6
+	191 patch17_7
+	192 patch18_0
+	193 patch18_1
+	194 patch18_2
+	195 patch18_3
+	196 patch18_4
+	197 patch18_5
+	198 patch18_6
+	199 patch18_7
+	200 patch19_0
+	201 patch19_1
+	202 patch19_2
+	203 patch19_3
+	204 patch19_4
+	205 patch19_5
+	206 patch19_6
+	207 patch19_7
+	208 patch1a_0
+	209 patch1a_1
+	210 patch1a_2
+	211 patch1a_3
+	212 patch1a_4
+	213 patch1a_5
+	214 patch1a_6
+	215 patch1a_7
+	216 patch1b_0
+	217 patch1b_1
+	218 patch1b_2
+	219 patch1b_3
+	220 patch1b_4
+	221 patch1b_5
+	222 patch1b_6
+	223 patch1b_7
+	224 patch1c_0
+	225 patch1c_1
+	226 patch1c_2
+	227 patch1c_3
+	228 patch1c_4
+	229 patch1c_5
+	230 patch1c_6
+	231 patch1c_7
+	232 patch1d_0
+	233 patch1d_1
+	234 patch1d_2
+	235 patch1d_3
+	236 patch1d_4
+	237 patch1d_5
+	238 patch1d_6
+	239 patch1d_7
+	240 patch1e_0
+	241 patch1e_1
+	242 patch1e_2
+	243 patch1e_3
+	244 patch1e_4
+	245 patch1e_5
+	246 patch1e_6
+	247 patch1e_7
+	248 patch1f_0
+	249 patch1f_1
+	250 patch1f_2
+	251 patch1f_3
+	252 patch1f_4
+	253 patch1f_5
+	254 patch1f_6
+	255 patch1f_7
+	  0 patch20_0
+	  1 patch20_1
+	  2 patch20_2
+	  3 patch20_3
+	  4 patch20_4
+	  5 patch20_5
+	  6 patch20_6
+	  7 patch20_7
+	  8 patch21_0
+	  9 patch21_1
+	 10 patch21_2
+	 11 patch21_3
+	 12 patch21_4
+	 13 patch21_5
+	 14 patch21_6
+	 15 patch21_7
+	 16 patch22_0
+	 17 patch22_1
+	 18 patch22_2
+	 19 patch22_3
+	 20 patch22_4
+	 21 patch22_5
+	 22 patch22_6
+	 23 patch22_7
+	 24 patch23_0
+	 25 patch23_1
+	 26 patch23_2
+	 27 patch23_3
+	 28 patch23_4
+	 29 patch23_5
+	 30 patch23_6
+	 31 patch23_7
+	 32 patch24_0
+	 33 patch24_1
+	 34 patch24_2
+	 35 patch24_3
+	 36 patch24_4
+	 37 patch24_5
+	 38 patch24_6
+	 39 patch24_7
+	 40 patch25_0
+	 41 patch25_1
+	 42 patch25_2
+	 43 patch25_3
+	 44 patch25_4
+	 45 patch25_5
+	 46 patch25_6
+	 47 patch25_7
+	 48 patch26_0
+	 49 patch26_1
+	 50 patch26_2
+	 51 patch26_3
+	 52 patch26_4
+	 53 patch26_5
+	 54 patch26_6
+	 55 patch26_7
+	 56 patch27_0
+	 57 patch27_1
+	 58 patch27_2
+	 59 patch27_3
+	 60 patch27_4
+	 61 patch27_5
+	 62 patch27_6
+	 63 patch27_7
+	 64 patch28_0
+	 65 patch28_1
+	 66 patch28_2
+	 67 patch28_3
+	 68 patch28_4
+	 69 patch28_5
+	 70 patch28_6
+	 71 patch28_7
+	 72 patch29_0
+	 73 patch29_1
+	 74 patch29_2
+	 75 patch29_3
+	 76 patch29_4
+	 77 patch29_5
+	 78 patch29_6
+	 79 patch29_7
+	 80 patch2a_0
+	 81 patch2a_1
+	 82 patch2a_2
+	 83 patch2a_3
+	 84 patch2a_4
+	 85 patch2a_5
+	 86 patch2a_6
+	 87 patch2a_7
+	 88 patch2b_0
+	 89 patch2b_1
+	 90 patch2b_2
+	 91 patch2b_3
+	 92 patch2b_4
+	 93 patch2b_5
+	 94 patch2b_6
+	 95 patch2b_7
+	 96 patch2c_0
+	 97 patch2c_1
+	 98 patch2c_2
+	 99 patch2c_3
+	100 patch2c_4
+	101 patch2c_5
+	102 patch2c_6
+	103 patch2c_7
+	104 patch2d_0
+	105 patch2d_1
+	106 patch2d_2
+	107 patch2d_3
+	108 patch2d_4
+	109 patch2d_5
+	110 patch2d_6
+	111 patch2d_7
+	112 patch2e_0
+	113 patch2e_1
+	114 patch2e_2
+	115 patch2e_3
+	116 patch2e_4
+	117 patch2e_5
+	118 patch2e_6
+	119 patch2e_7
+	120 patch2f_0
+	121 patch2f_1
+	122 patch2f_2
+	123 patch2f_3
+	124 patch2f_4
+	125 patch2f_5
+	126 patch2f_6
+	127 patch2f_7
+	128 patch30_0
+	129 patch30_1
+	130 patch30_2
+	131 patch30_3
+	132 patch30_4
+	133 patch30_5
+	134 patch30_6
+	135 patch30_7
+	136 patch31_0
+	137 patch31_1
+	138 patch31_2
+	139 patch31_3
+	140 patch31_4
+	141 patch31_5
+	142 patch31_6
+	143 patch31_7
+	144 patch32_0
+	145 patch32_1
+	146 patch32_2
+	147 patch32_3
+	148 patch32_4
+	149 patch32_5
+	150 patch32_6
+	151 patch32_7
+	152 patch33_0
+	153 patch33_1
+	154 patch33_2
+	155 patch33_3
+	156 patch33_4
+	157 patch33_5
+	158 patch33_6
+	159 patch33_7
+	160 patch34_0
+	161 patch34_1
+	162 patch34_2
+	163 patch34_3
+	164 patch34_4
+	165 patch34_5
+	166 patch34_6
+	167 patch34_7
+	168 patch35_0
+	169 patch35_1
+	170 patch35_2
+	171 patch35_3
+	172 patch35_4
+	173 patch35_5
+	174 patch35_6
+	175 patch35_7
+	176 patch36_0
+	177 patch36_1
+	178 patch36_2
+	179 patch36_3
+	180 patch36_4
+	181 patch36_5
+	182 patch36_6
+	183 patch36_7
+	184 patch37_0
+	185 patch37_1
+	186 patch37_2
+	187 patch37_3
+	188 patch37_4
+	189 patch37_5
+	190 patch37_6
+	191 patch37_7
+	192 patch38_0
+	193 patch38_1
+	194 patch38_2
+	195 patch38_3
+	196 patch38_4
+	197 patch38_5
+	198 patch38_6
+	199 patch38_7
+	200 patch39_0
+	201 patch39_1
+	202 patch39_2
+	203 patch39_3
+	204 patch39_4
+	205 patch39_5
+	206 patch39_6
+	207 patch39_7
+	208 patch3a_0
+	209 patch3a_1
+	210 patch3a_2
+	211 patch3a_3
+	212 patch3a_4
+	213 patch3a_5
+	214 patch3a_6
+	215 patch3a_7
+	216 patch3b_0
+	217 patch3b_1
+	218 patch3b_2
+	219 patch3b_3
+	220 patch3b_4
+	221 patch3b_5
+	222 patch3b_6
+	223 patch3b_7
+	224 patch3c_0
+	225 patch3c_1
+	226 patch3c_2
+	227 patch3c_3
+	228 patch3c_4
+	229 patch3c_5
+	230 patch3c_6
+	231 patch3c_7
+	232 patch3d_0
+	233 patch3d_1
+	234 patch3d_2
+	235 patch3d_3
+	236 patch3d_4
+	237 patch3d_5
+	238 patch3d_6
+	239 patch3d_7
+	240 patch3e_0
+	241 patch3e_1
+	242 patch3e_2
+	243 patch3e_3
+	244 patch3e_4
+	245 patch3e_5
+	246 patch3e_6
+	247 patch3e_7
+	248 patch3f_0
+	249 patch3f_1
+	250 patch3f_2
+	251 patch3f_3
+	252 patch3f_4
+	253 patch3f_5
+	254 patch3f_6
+	255 patch3f_7
+
+)
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/regs.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/regs.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/regs.format	(working copy)
@@ -0,0 +1,302 @@
+(
+  0x8000 core_chipid
+  0x8003 core_kick
+  0x8005 core_lpm_wr
+  0x8006 core_misc_ctrl
+  0x8007 core_otp_rdata
+  0x8009 core_pcmoutfifo
+  0x8010 core_reset
+  0x8011 core_encrypt
+  0x8015 core_uart_txd
+  0x8022 core_ucode_hi
+  0x8023 core_ucode_ctrl
+  0x8024 core_ucode_low
+  0x8025 core_ucode_data
+  0x8040 core_halfslot
+  0x8042 core_clksel
+  0x8043 core_uart_clksel
+  0x8043 core_config 
+  0x8044 core_xtal_stable_time
+  0x8045 core_otp_addr
+  0x8046 core_otp_din
+  0x8047 core_otp_ctrl
+  0x8048 core_otpd_addr
+  0x804a core_otpd_len
+  0x804b core_otpd_ctrl
+  0x804c core_lpm_reg
+  0x804f core_lpm_isogate
+  0x8050 core_clkoff
+  0x8052 core_uart_baud
+  0x8054 core_uart_rsaddr
+  0x8056 core_uart_readdr
+  0x8058 core_uart_rrptr
+  0x805a core_uart_tsaddr
+  0x805c core_uart_teaddr
+  0x805e core_uart_twptr
+  0x8060 core_uart_trptrp
+  0x8062 core_uart_ctrl
+  0x8063 core_bist_ctrl
+  0x8064 core_pwm_pcnt3
+  0x8066 core_pwm_ncnt3 
+  0x8068 core_pwm_pcnt4
+  0x806a core_pwm_ncnt4
+  0x806c core_pwm_pcnt5
+  0x806e core_pwm_ncnt5
+  0x8070 core_gpio_oe0
+  0x8071 core_gpio_oe1
+  0x8072 core_gpio_oe2
+  0x8073 core_gpio_oe3
+  0x8074 core_gpio_out0
+  0x8075 core_gpio_out1
+  0x8076 core_gpio_out2
+  0x8077 core_gpio_out3
+  0x8078 core_gpio_pu0
+  0x8079 core_gpio_pu1
+  0x807a core_gpio_pu2
+  0x807b core_gpio_pu3
+  0x807c core_gpio_pd0
+  0x807d core_gpio_pd1
+  0x807e core_gpio_pd2
+  0x807f core_gpio_pd3
+  0x8080 core_gpio_sel
+  0x8081 core_gpio_sel1
+  0x8082 core_gpio_sel2
+  0x8083 core_gpio_key0
+  0x8084 core_gpio_key1
+  0x8085 core_gpio_key2
+  0x8086 core_spid_ctrl
+  0x8087 core_spid_delay
+  0x8088 core_spid_txlen
+  0x808a core_spid_txaddr
+  0x808c core_spid_rxaddr
+  0x808e core_spid_rxlen
+  0x8090 core_iicd_ctrl
+  0x8091 core_iicd_scl_low
+  0x8092 core_iicd_scl_high
+  0x8093 core_iicd_start_setup
+  0x8094 core_iicd_start_hold
+  0x8095 core_iicd_stop_setup
+  0x8096 core_iicd_data_setup
+  0x8097 core_iicd_data_hold
+  0x8098 core_iicd_txlen
+  0x809a core_iicd_txaddr
+  0x809c core_iicd_rxaddr
+  0x809e core_iicd_rxlen
+  0x80a0 core_pwm_pcnt0
+  0x80a2 core_pwm_ncnt0
+  0x80a4 core_pwm_pcnt1
+  0x80a6 core_pwm_ncnt1
+  0x80a8 core_pwm_pcnt2
+  0x80aa core_pwm_ncnt2
+  0x80b0 core_enc_ctrl
+  0x80b1 core_cvsd_ctrl
+  0x80b2 core_codec_ctrl
+  0x80b3 core_dec_ctrl
+
+
+
+
+  
+  0x8108 core_misc_status
+  0x8109 core_qdec_cntx
+  0x810a core_qdec_cnty
+  0x810b core_qdec_cntz
+  0x810c core_uart_status
+  0x810d core_uart_rbaud
+  0x810e core_uart_txitems
+  0x8110 core_uart_trptr
+  0x8112 core_uart_rxitems
+  0x8114 core_uart_rdptr
+  0x8116 core_uart_rwptr
+  0x8119 core_kscn_kstat
+  0x811a core_kscn_event
+  0x811b core_kscn_event_num
+  0x811c core_gpio_in
+  0x811d core_gpio_in1
+  0x8124 core_current_otp_addr
+  0x8126 core_otpd_remain
+  0x8128 core_spid_remain
+  0x812a core_iicd_remain
+  0x812c core_dma_status
+  0x812d core_perf_status
+  0x812e core_adc_in
+  0x8134 core_pcminfifo
+  0x8135 core_pcminfifo_remain
+  0x8136 core_pcmoutfifo_remain
+  0x8138 core_lpm_ctrl
+  0x813c core_lpm_xtalcnt
+  0x813d core_lpm_buckcnt
+  0x813e core_lpm_ldocnt
+  0x813f core_lpm_latch
+  0x8140 core_gpio_wakeup_low
+  0x8144 core_gpio_wakeup_high
+  0x8149 core_clk_counter
+  0x8150 core_adc_sum
+// dummy regs  
+
+  0x8203 core_ice_ctrl
+  0x8204 core_ice_status
+  0x8205 core_ice_break0
+  0x8207 core_ice_break1
+  
+  0x8280 core_docd_ctrl
+  0x8288 core_docd_paddr
+  0x828a core_docd_pdata
+
+  0x8300 iic_prer_low		
+  0x8301 iic_slave_addr	
+  0x8302 iic_ctr					
+  0x8303 iic_cr					
+  0x8304 iic_rxr					
+  0x8305 iic_txr					
+  0x8306 iic_sr					
+  0x8307 iic_fifo				
+
+  0x8400   mem_b_box          /* entire bank */
+  0x8500   mem_e_box          /* entire bank */
+  0x8600   mem_l_box          /* entire bank */
+
+ifdef REVD
+  0x8700 memk
+endif
+
+  0x8900 rfen_rx
+  0x8901 rfen_tx
+  0x8902 rfen_mdm
+  0x8903 rfen_sn
+  0x8904 rfen_msc
+  0x8905 rfen_ck
+  0x8906 rfen_adc
+  0x890a  rf_iq_gain
+  0x890b  rf_agc_nsat
+  0x890f  rf_adc_goff
+  0x8912 rf_agc_ctrl
+  0x8914 rfen_ulp
+  0x8973 rfen_chgpump
+  0x894b rf_rx_vctrl_reg1
+  0x894c rf_rx_vctrl_reg2
+  0x894d rf_rx_ib_lna
+  0x894e rf_rx_lna_ctrim
+
+  0x8950 rf_bpf_ctrim
+  0x8951 rf_bpf_ib
+  0x8952 rf_adc_rccal
+  0x8952 rf_rccal_ctrl
+  0x8953 rf_rccal_sel
+  0x8955 rf_tx_pa_ib
+  0x8956 rf_tx_pa_gc
+  0x895f rf_pll_rstn
+  0x8964 rf_sdm_en
+  0x8960 rf_pll_intg
+  0x8961 rf_pll_frac
+  0x8963 rf_pll_frachi
+  0x896c rf_afc_cap
+  0x8967 rf_clkpll_bias
+  0x896f rf_clkpll_en
+  0x8968 rf_clkpll_int
+  0x8969 rf_clkpll_frac
+  0x896d rf_balun_ctrim
+  0x8971 rf_adc_mode
+  0x8972 rf_adc_gc
+  0x8973 rf_adc_ch
+  0x8980 rf_rccal_result
+  0x8981 rf_afc_d2a
+  0x8982 rf_rssi
+
+
+0x8a00 core_usb_config		
+0x8a01 core_usb_int_mask	
+0x8a04 core_usb_addr
+0x8a10 core_usb_trig	
+0x8a11 core_usb_stall		
+0x8a12 core_usb_clear		
+0x8a18 core_usb_ep
+0x8a18 core_usb_dfifo0 
+0x8a19 core_usb_dfifo1  
+0x8a1a core_usb_dfifo2 
+0x8a20 core_usb_ep_len
+0x8a26 core_usb_status		
+0x8a27 core_usb_fifo_empty
+0x8a28 core_usb_fifo_full
+
+
+4 rx_freq_offset
+1 tx_freq_offset
+
+/* bit difinitions */
+  4 whiteoff_bit
+  6 clksel_rc
+  5 clksel_dpll
+  4 clksel_xtal
+  5 adc_rccal
+  0 bpf_rccal
+  1 demod_clkoff
+
+(
+  2 reload_code
+  3 gpio_latch
+  4 enable_retmem
+  7 cold_wake
+  0xef isogate_mask
+  0xe0 cs_mask
+)
+
+// misc ctrl
+(
+  0x01 otpd_start
+  0x02 spid_start
+  0x04 iicd_start
+  0x08 lock_otp
+  0x10 x_sethi
+  0x20 y_sethi
+  0x40 z_sethi
+  0x80 ccnt_start
+)
+// dma status bit
+(
+  0 otpd_crcok
+  1 otpd_done
+  2 spid_crcok
+  3 spid_done
+  4 iicd_crcok
+  5 iicd_done
+  6 iicd_ack
+)
+
+0x8b uart_ctrl_default //BCSP
+0x81 uart_ctrl_h4 //H4
+0x81 uart_ctrl_normal
+0x91 uart_ctrl_5line
+0x81 uart_ctrl_57600
+2 uart_baud_len
+0x00 uartclk_crystal
+0x01 uartclk_dpll
+0x1a0 uart_baud_115200
+0xbb uart_baud_256000
+0x340 uart_baud_57600
+0x34 uart_baud_921600
+0x9c4 uart_baud_9600
+0x2dc6c00 uart_clk
+0x16E3600 uart_clk_24
+
+//core_clkoff
+(
+	0 CLOCK_OFF_AUTH_ROM
+	1 CLOCK_OFF_UC_ROM
+	2 CLOCK_OFF_DEBUG_UART
+	3 CLOCK_OFF_SCHED_RAM
+	4 CLOCK_OFF_TRANCE_FIFO
+	5 CLOCK_OFF_CORDIC
+	6 CLOCK_OFF_OTPD
+	7 CLOCK_OFF_I2C
+	8 CLICK_OFF_8051
+	9 CLOCK_OFF_KEYSCAN
+	0x0a CLOCK_OFF_USB
+	0x0b CLOCK_OFF_QDECODER
+	0x0c CLOCK_OFF_SPI
+	0x0d CLOCK_OFF_PWM
+	0x0e CLOCK_OFF_CODEC
+	0x0f CLOCK_OFF_UART
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/rfcomm.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/rfcomm.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/rfcomm.format	(working copy)
@@ -0,0 +1,391 @@
+/*****************************************************************************/
+/* RCS HEADER -- DO NOT ERASE                                                */
+/* $Author: Administrator $                                                           */
+/* $Id: bt_rfcomm_format.upper,v 1.1 2009-09-28 04:06:17 Administrator Exp $ */
+/* Orisil Technology                                                      */
+/*****************************************************************************/
+
+/**********/
+/* memory */
+/**********/
+
+memalloc(
+1 memRemoteRPNBitRate
+1 memRemotePRNDataBits
+1 memRemotePRNStopBit
+1 memRemotePRNParity
+1 memRemotePRNFlowControl
+1 memRemotePRNXon
+1 memRemotePRNXoff
+
+
+3 mem_mod2div_temp
+2 mem_contw_temp
+2 mem_attrib_list
+
+//rfcomm head
+1 mem_current_adss
+1 mem_current_channel
+1 mem_current_frame_type
+1 mem_current_fcs
+2 mem_current_length
+2 mem_rfcomm_uih_payload_ptr
+
+//rfcomm uih
+1 mem_uih_cmd_type
+2 mem_uih_length
+2 mem_param_payload_ptr
+
+
+//rfcomm modem status
+1 mem_ms_param
+
+//rfcomm pn
+1 mem_pn_credit_flow_type_info
+1 mem_pn_priority
+1 mem_pn_acknowledg_timer
+1 mem_pn_max_retrans
+
+1 mem_rfcomm_send_adss
+1 mem_rfcomm_send_frame_type
+1 mem_rfcomm_send_fcs
+1 mem_rfcomm_send_offset
+
+)
+
+xmemalloc(
+1 mem_pn_dlci
+2 mem_pn_max_frame_size
+
+1 memFCStemp1
+1 memFCStemp2
+1 memFCStemp3
+
+1 mem_rfcomm_initiator
+
+1 mem_remote_spp_channel
+
+1 mem_HIUfcs_SPP
+1 mem_HIUfcs_SPP_WCredits
+
+1 mem_rfcomm_send_more_pkt
+
+1 mem_remote_credits
+1 mem_credit_given
+
+//rfcomm modem status
+1 mem_ms_channel
+
+1 mem_credit_flag
+
+2 mem_rfcomm_max_frame_size
+1 mem_rfcomm_credit_init_data
+
+2 mem_cb_receive_spp_data
+
+2 mem_nl_rx_data_src
+2 mem_nl_rx_len_all
+)
+
+
+(
+0 CREDIT_DISABLE
+1 CREDIT_ENABLE
+)
+
+
+/************************************************************************/
+  
+
+ 
+/************/
+/* constant */
+/************/
+
+/* RFCOMM state for Headset (memRFCOMM_State) */ 
+  (
+    0 RFCOMM_IDLE           /* before the responsor HS receive SABM            */
+    1 RFCOMM_W4_DLCI0_OPEN
+    2 RFCOMM_W4_DLCI0_CLOSE
+    3 RFCOMM_START_DLCI0    /* After respond SABM frame (DLCI=0)               */
+    4 RFCOMM_W4_DLCI_OPEN
+    5 RFCOMM_W4_DLCI_CLOSE
+    6 RFCOMM_DLCI_OPENED    
+   
+  )
+  
+/* RFCOMM timer constants   */
+  (
+    1000  RFCOMM_T1         /* Used by SABM and DISC frames,100*20ms = 20s     */     
+    1000  RFCOMM_T2         /* Used by commands send in UIH on DLCI0,          */
+    300   RFCOMM_T3_RINGON  /* 6s for ring fade time                           */
+  
+  )
+
+/* Command Type */
+  (
+    0x3F RSP_RX_SABM        /*responsor expect SABM from initiator             */
+    0x3F INI_TX_SABM
+	
+    0x73 RSP_TX_UA          /*responsor send out UA command                    */
+    0x73 UA_WFBIT_SET	    /* UA control field with F bit set                 */
+	
+    0xEF RSP_RX_UIH         /*responsor expect UIH from initiator              */
+
+    0xEF RSP_TX_UIH         /*responsor send UIH to initiator                  */
+     
+    0x1F RSP_TX_DM          /*responsor send DM to initiator                   */
+    0x1F DM_WFBIT_SET       /* DM control field with F bit set                 */
+    0x0F DM_WFBIT_CLEAR     /* DM control field with F bit clear               */
+
+    0x53 RSP_RX_DISC        /*responsor expect DISC from initiator             */
+    0x53 INI_TX_DISC	    /*initiator send DISC control type command         */
+     
+    0xFF RSP_RX_UIH_WDATA   /*UIH data with credit flow control info           */
+    
+    
+  )
+
+/* Multiplexor commands and responses frames */
+  (
+    0x83 PN_COMMAND           /* Bit 0 EA C/R Type = 000001         */
+    0x81 PN_RESPONSOR         /* Bit 0 EA C/R Type = 000001         */
+    
+    0xE3 MSC_COMMAND          /* Bit 0 EA C/R Type = 000111         */
+    0xE1 MSC_RESPONSOR
+ 
+    0x13 NSC_COMMAND          /* Bit 0 EA C/R Type = 001000         */
+    0x11 NSC_RESPONSOR        /* Bit 0 EA C/R Type = 001000         */
+
+    0x23 TEST_COMMAND         /* Bit 0 EA C/R Type = 000111         */
+    0x21 TEST_RESPONSOR 
+    
+    0x93 RPN_COMMAND          /* Bit 0 EA C/R Type = 001001         */
+    0x91 RPN_RESPONSOR 
+    
+    0x53 RLS_COMMAND          /* Bit 0 EA C/R Type = 001010         */
+    0x51 RLS_RESPONSOR 
+
+    0xA3 FCON_COMMAND         /* Bit 0 EA C/R Type = 000101         */
+    0xA1 FCON_RESPONSOR 
+    
+    0x63 FCOFF_COMMAND        /* Bit 0 EA C/R Type = 000110         */
+    0x61 FCOFF_RESPONSOR 
+    	
+    0x03 RLS_OVERRUN
+    0x05 RLS_PARITY_ERROR
+    0x09 RLS_FRAMING_ERROR
+  )
+
+/* memLocalCredit */
+  (
+    0x01 RFCOMM_CREDIT
+  )
+
+  (
+  	0x007f RFCOMM_MAX_FRAME_SIZE
+  )
+
+/* UIH received Data length */
+  (
+    0  LENGTH_ZERO
+    
+    6  LENGTH_OK
+    7  LENGTH_HOT
+    8  LENGTH_RING
+    9  LENGTH_ERROR
+    9  LENGTH_AGVOL_ONEBYTE
+    10 LENGTH_AGVOL_TWOBYTE
+    10 LENGTH_VOL_ONEBYTE
+    11 LENGTH_VOL_TWOBYTE
+    12 LENGTH_BRSF
+    13 LENGTH_PLUS_CIEV
+    15 LENGTH_INBANDRING
+    14 LENGTH_CIEV_CALL
+    17 LENGTH_CRING
+    20 LENGTH_BRSF_OK
+    24 LENGTH_CIND0
+    28 LENGTH_CIEV_TWO
+    32 LENGTH_CIND_OK
+    59 LENGTH_CIND_OK2
+    100 LENGTH_DISCARD
+  )
+  
+/************/
+/* flags    */
+/************/
+  
+/* memRFCOMM_L2CAP_Interface */
+  (
+    0 RFCOMM_TX_W4BUF_FLAG    /* Wait for Tx buffer empty flag */
+    1 RFCOMM_CLOSE_LINK_FLAG
+  )
+  
+
+    
+/* memRemoteMSC		*/
+  (
+    0 MSC_EA_BIT
+    1 MSC_FC_BIT
+    2 MSC_RTC_BIT
+    3 MSC_RTR_BIT
+    6 MSC_IC_BIT
+    7 MSC_DV_BIT
+  )
+
+/* memRemoteRLS         */
+  (
+    0x0C OVERRUN_ERROR
+    0x0A PARITY_ERROR
+    0x09 FRAMING_RERROR
+  )
+  
+/* memRemoteRPNBitRate  */
+  (
+    0x00 BITS2400
+    0x01 BITS4800
+    0x02 BITS7200
+    0x03 BITS9600
+    0x04 BITS19200
+    0x05 BITS38400
+    0x06 BITS57600
+    0x07 BITS115200
+    0x08 BITS230400
+  )
+  
+/* memRemotePRNDataBits	*/
+  (
+    0x00 DATABITS5
+    0x01 DATABITS6
+    0x02 DATABITS7
+    0x03 DATABITS8
+  )
+  
+/* memRemotePRNStopBit	*/
+  (
+    0    ONESTOP
+    1    ONEHALFSTOP
+  )
+  
+/* memRemotePRNParity   */
+  (
+    0    ODDPARITY
+    1    EVENPARITY
+    2    MARKPARITY
+    3    SPACEPARITY
+    
+    7    PARITY_ENABLE_BIT
+  )
+
+/* RPN bit mask(in)     */
+  (
+     0   BIT_RATE_MASK_BIT
+     1   DATA_BITS_MASK_BIT
+     2   STOP_BITS_MASK_BIT
+     3   PARITY_MASK_BIT
+     4   PARITY_TYPE_MASK_BIT
+     5   XON_CHAR_MASK_BIT
+     6   XOFF_CHAR_MASK_BIT
+  )
+  
+/* RPN bit mask(in) 2    */
+  (
+     0   XON_XOFF_INPUT_MASK_BIT
+     1   XON_XOFF_OUTPUT_MASK_BIT
+     2	 RTR_INPUT_MASK_BIT
+     3   RTR_OUTPUT_MASK_BIT
+     4   RTC_INPUT_MASK_BIT
+     5   RTC_OUTPUT_MASK_BIT
+
+  )
+
+/* memRFCOMM_Request	*/
+  (
+    0 SEND_MSC_CMD_REQ_FLAG
+    1 SEND_AT_CKPD_REQ_FLAG
+    2 SEND_RING_REQ_FLAG
+    3 SEND_SABM_CMD
+  )
+  
+/* memRFCOMM_Misc_Flag  */
+  (
+    0 MSC_CDM_ALREADY_SEND_FLAG
+    1 CREDIT_FLOW_USED_FLAG
+    2 DONT_EMBEDDED_CREDIT_FLAG 
+    3 MSC_EXCHANGE_DONE_FLAG
+    4 FLOW_CONTROL_FCOFF_BIT            /* set when receive FCoff, clear when FCon   */
+  )
+  
+/* memRemoteMSC		*/
+  (
+    1 FLOW_CONTROL_FC_BIT		/* received MSC FC bits                      */
+  
+  )
+/* Address filed        */
+  (
+    0 ADDR_EA_BIT
+    1 ADDR_CR_BIT
+    2 ADDR_D_BIT
+  )
+//should be same as descripted in SDP
+(
+    1 SPP_SLAVE_CHANNEL
+    7 OBEX_SERVER_CHANNEL
+    8 HF_SERVER_CHANNEL 
+    9 HS_SERVER_CHANNEL
+)
+/* memRFCOMM_Flag */
+(
+	0 USING_HF_PROFILE
+	1 USING_HS_PROFILE
+	2 USING_SPP_PROFILE
+)
+/*RFCOMM Frame Type*/
+(
+	0x3f RFCOMM_FRAME_TYPE_SABM
+	0x73 RFCOMM_FRAME_TYPE_UA
+	0xEF RFCOMM_FRAME_TYPE_UIH
+	0xFF RFCOMM_FRAME_TYPE_UIH_CREDITS
+	0x53 RFCOMM_FRAME_TYPE_DISCONN
+)
+/*RFCOMM UIH CMD TYPE*/
+(
+	0x41 UIH_PARAM_NEG_CMD
+	0x40 UIH_PARAM_NEG_RES
+	0x49 UIH_PARAM_CMD_REMOVE_PORT
+	0x71 UIH_MODEM_STATUS_CMD
+	0x70 UIH_MODEM_STATUS_RES
+)
+
+/*bits in rfcomm address*/
+(
+	0 RFCOMM_ADDRESS_EXT_LEN
+	1 RFCOMM_ADDRESS_CR
+	2 RFCOMM_ADDRESS_DERECTION
+
+
+)
+
+	(                                   
+	0 RFCOMM_CHANNEL_STATE_PN_CMD
+	1 RFCOMM_CHANNEL_STATE_PN_RES
+	2 RFCOMM_CHANNEL_STATE_SABM
+	3 RFCOMM_CHANNEL_STATE_UA
+	4 RFCOMM_CHANNEL_STATE_SND_MS_CMD
+	5 RFCOMM_CHANNEL_STATE_RCV_MS_CMD
+	6 RFCOMM_CHANNEL_STATE_SND_MS_RES
+	7 RFCOMM_CHANNEL_STATE_RCV_MS_RES
+	0xff RFCOMM_CHANNEL_SETUP_COMPLETE
+	) 
+
+	/*mem_rfcomm_send_more_pkt*/
+	(
+	1 MORE_PKT_MSC_CMD_HF
+	2 MORE_PKT_MSC_CMD_HS
+	3 MORE_PKT_MSC_CMD_SPP
+	4 MORE_PKT_MSC_CMD_OBEX
+	)
+
+	(
+	127 RFCOMM_MALLOC_SIZE
+	)
\ No newline at end of file
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/sdp.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/sdp.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/sdp.format	(working copy)
@@ -0,0 +1,70 @@
+
+memalloc(
+0 mem_sdp_mem_start
+8 mem_sdp_uuid_search_ptr
+2 mem_sdp_continue_byte
+1 mem_sdp_pduid
+2 mem_sdp_transactionid
+2 mem_sdp_transactionid_local
+2 mem_sdp_attribute_maxbyte
+2 mem_sdp_record_maxcnt
+4 mem_sdp_record_handle
+1 mem_sdp_LACAP_found
+1 mem_sdp_RFCOMM_found
+0 mem_sdp_handle_list
+32 mem_sdp_attrib_list
+2 mem_sdp_error_code
+2 mem_sdp_all_length
+1 mem_handle_humber
+2 mem_search_uuid
+0 mem_sdp_mem_end
+)
+xmemalloc(
+2 mem_ui_uuid_table
+22 mem_all_uuid_16bits
+34 mem_all_uuid_128bits
+2 mem_sdp_l2capch_ptr
+)
+(
+0 AGORHS_SERVICE
+1 GENAUDIO_SERVICE
+2 HANDSFREE_SERVICE
+)
+(
+0 ATTRIBUTEID_0000
+1 ATTRIBUTEID_0001
+2 ATTRIBUTEID_0004
+3 ATTRIBUTEID_0009
+4 ATTRIBUTEID_0100
+5 ATTRIBUTEID_0302
+6 ATTRIBUTEID_0006
+7 ATTRIBUTEID_0311
+)
+
+(
+0x01 SDP_ERROR_RES
+0x02 SDP_SEARCH_REQ
+0x03 SDP_SEARCH_RES
+0x04 SDP_ATTRIBUTE_REQ
+0x05 SDP_ATTRIBUTE_RES
+0x06 SDP_SEARCHATTRIB_REQ
+0x07 SDP_SEARCHATTRIB_RES
+)
+0x2600 sdp_max_amount
+250 SDP_MALLOC_SIZE
+0x6e sdp_tid_spp //any number
+
+(
+0x1f11 SDP_UUID_HS_AUDIO_GATEWAY
+)
+
+(
+0X09 SDP_ATTRIBUTE_ID
+0x0a SDP_ATTRIBUTE_RANGE
+)
+
+(//mem_sdp_handle_list
+7 SDP_MAX_HANDLE_NUMBER
+)
+
+ 
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/security.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/security.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/security.format	(working copy)
@@ -0,0 +1,141 @@
+
+memalloc(
+/* moved from bt.format for 3dh5 1021bytes packet buffer */
+17 mem_rxbuf
+
+16 mem_random_number
+16 mem_round_key
+16 mem_kinit
+
+16 mem_input_store
+16 mem_x
+15 mem_y
+1 mem_y15
+17 mem_key_store
+1 mem_key_store_end
+2 memp_ar_key
+2 memp_ar_input
+10 mem_ar_hround
+
+
+1 mem_ec_infinite
+2 mem_ec_loopc
+1 mem_aes_cmac_data_length
+
+0 memdat
+/* ecc calculation */
+
+24 mem_ax
+24  mem_ay
+24  mem_az
+24 mem_bx
+0 mem_ax_256 //32 bytes
+24 mem_by
+8 mem_bz
+16 mem_ay_256 // 32 bytes
+16 mem_cx
+8 mem_az_256 // 32 bytes
+23 mem_cy
+1 mem_cy5
+0 mem_bx_256 // 32 bytes
+24 mem_cz
+8  mem_k
+16 mem_by_256 // 31 bytes
+16 mem_align
+
+0 mem_bz_256  //32 bytes
+0 mem_tmp1
+24 memahbak
+8 mem_tmp5
+0 mem_cx_256  //32 bytes
+16 memahsave
+16  mem_tmp2
+0 mem_cy_256  // 32 bytes
+0  memahsave_end 
+1  mem_addr_padding 
+7   mem_addr_value         /* 12 bytes     */ 
+0 mem_tmp3
+5 mem_t1
+3  mem_addr_value_end   
+15 mem_addr_iocap_end
+1 mem_cy5_256 // 1 byte
+0 mem_cz_256 // 32 bytes
+0 mem_tmp0
+8 mem_t0
+16 mem_tmp0a
+8  mem_t2
+16 mem_k_256 //32 bytes
+16 mem_t3
+8  mem_tmp1_256 //32 bytes
+24 mem_t7
+
+
+32 mem_tmp5_256
+32  mem_tmp2_256
+0 mem_tmp3_256
+32 mem_t1_256
+0 mem_tmp0_256
+32 mem_t0_256
+32 mem_t2_256
+32 mem_t3_256
+32 mem_t7_256
+
+24 mem_p		
+24 mem_a
+24 mem_b
+24 mem_gx
+24 mem_gy
+32 memh0
+
+//p256
+//2 mem_ec_loopc_256
+//32 mem_ax_256
+//32 mem_ay_256
+//32 mem_az_256
+//32 mem_bx_256
+//32 mem_by_256
+//32 mem_bz_256
+//32 mem_cx_256
+//31 mem_cy_256
+//1 mem_cy5_256
+//32 mem_cz_256
+//32 mem_k_256
+
+
+//32 mem_tmp1_256
+//32 mem_tmp5_256
+//32  mem_tmp2_256
+
+//0 mem_tmp3_256
+//32 mem_t1_256
+//0 mem_tmp0_256
+//32 mem_t0_256
+//32 mem_t2_256
+//32 mem_t3_256
+//32 mem_t7_256
+
+32 mem_p_256		
+32 mem_a_256
+32 mem_gx_256
+32 mem_gy_256
+//4 mem_le_keyid
+16 mem_le_slat
+
+
+//64 mem_regext
+//1 mem_regext_index
+
+//16 mem_le_mackey
+
+
+//1 mem_AES_CMAC_flag
+//16 mem_AES_CMAC_temp
+//16 mem_AES_CMAC_M_last
+
+//4 mem_le_gkey
+
+//16 mem_le_r
+
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/simple_pairing.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/simple_pairing.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/simple_pairing.format	(working copy)
@@ -0,0 +1,188 @@
+/* simple pairing page */
+
+memalloc(
+
+//4 mem_hci_ssp_mode
+0 mem_sp_state_start
+1 mem_sp_state
+1 mem_master_sp_state
+1 mem_sp_flag
+1 mem_master_sp_flag
+1 mem_sp_calc
+1 mem_sp_dh_ready
+1 mem_sp_localsm
+1 mem_pairing_auth
+
+0 mem_sp_flag_start
+1 mem_sp_local_key_send_count
+1 mem_sp_remote_key_recv_count
+1 mem_sp_remote_key_invalid
+1 mem_sp_dhkey_invalid
+
+
+4 mem_gkey
+
+
+8 mem_le_pubkey_remote_x_256
+0 mem_sp_pubkey_remote
+24 mem_sp_pubkey_remote_x
+0 mem_sp_pubkey_remote_x_end
+8 mem_le_pubkey_remote_y_256
+24 mem_sp_pubkey_remote_y
+
+8 mem_le_dhkey_256
+24 mem_sp_dhkey
+0 mem_sp_dhkey_end
+
+16 mem_sp_random_local
+0 mem_sp_random_local_end
+16 mem_sp_random_remote
+0 mem_sp_random_remote_end
+0 memresult
+0 mem_sp_calc_result
+4 memh
+4 memg
+4 memf
+4 meme
+0 mem_sp_calc_result_high
+4 memd
+4 memc
+4 memb
+4 mema
+16 mem_sp_check_result
+16 mem_sp_confirm_remote
+16 mem_sp_prarm_stack
+)
+
+xmemalloc(
+1 mem_sp_local_key_invalid
+
+
+32 mem_le_private_key_256
+32 mem_le_pubkey_local_x_256
+32 mem_le_pubkey_local_y_256
+
+24 mem_sp_private_key
+0 mem_sp_pubkey_local
+24 mem_sp_pubkey_local_x
+0 mem_sp_pubkey_local_x_end
+24 mem_sp_pubkey_local_y
+
+1 mem_ssp_enable
+3 mem_sp_iocap_local
+3 mem_sp_iocap_remote
+
+1 mem_flag_mode_ssp_pin
+1 mem_ssp_mode_flag
+1 mem_authentication_passkey_times
+1 mem_passkey_1bit
+1 mem_flag_pairing_state
+
+)
+/* simple pairing status flag */
+(
+  0x00   SP_FLAG_STANDBY
+  0x01   SP_FLAG_COMMIT
+  0x02   LE_SP_FLAG_COMMIT_256
+
+)
+
+/* simple pairing calc flag */
+(
+  0x00   SP_CALC_STANDBY
+  0x01   SP_CALC_PUBKEY
+  0x02   SP_CALC_DHKEY
+  0x03   SP_CALC_PUBKEY_256
+  0x04   SP_CALC_DHKEY_256
+)
+
+/* simple pairing state */
+(
+  0x00   SP_STAT_NULL
+  0x01   SP_STAT_KEY_RECV
+  0x02   SP_STAT_KEY_GENERATE
+  0x03   SP_STAT_KEY_SEND
+  0x04   SP_STAT_COMMIT_CALC
+  0x05   SP_STAT_COMMIT_SEND
+  0x06   SP_STAT_RANDOM_RECV
+  0x07   SP_STAT_RANDOM_SEND
+  0x08   SP_STAT_CONFIRM_RECV
+  0x09   SP_STAT_CONFIRM_CHECK
+  0x0A   SP_STAT_CONFIRM_CALC
+  0x0B   SP_STAT_CONFIRM_SEND
+  0x0C   SP_STAT_LINK_KEY_CALC
+  0x0F   SP_STAT_DONE
+  0x10   SP_STAT_FEATURE_EXT_SEND
+  0x11   SP_STAT_GKEY_CALC
+  /*simple pairing master only*/
+  0x12   SP_MASTER_STAT_START_SKIP
+  0x13   SP_MASTER_STAT_START_DONE
+  0x14   SP_STAT_COMMITMENT_COMPARE
+  0x15   SP_STATE_END
+)
+
+
+/* simple paring invalid flag */
+(
+  0x00   SP_KEY_INVALID
+  0x01   SP_KEY_VALID
+  0x03   SP_KEY_VALID_256
+
+)
+
+/* encapsulated defination for P-192 key */
+(
+  0x01  ENCAPSULATED_MAJOR_TYPE_P192
+  0x01  ENCAPSULATED_MINOR_TYPE_P192
+  0x30  ENCAPSULATED_LEN_P192
+)
+
+/* bluetooth 2.1 support flag */
+(
+  0x00  SIMPLE_PAIRING_ENABLE
+  0x01  ENCRYPTION_PAUSE_ENABLE
+  0x02  EXTENDED_INQUIRY_RESPOSE_ENABLE
+  0x03  SNIFF_SUBRATING_ENABLE
+)
+
+/*mem_sp_localsm*/
+(
+  0x00 DEFAULT_STATEMACHINE
+  0x01 LOCAL_STATEMACHINE
+)
+
+(
+ 0x00 DEFALT_PAIRING_AUTH
+ 0x01 PAIRING_AUTH
+)
+
+(
+1 SSP_MODE_SSP_PIN_FLAG
+2 SSP_MODE_PASSKEY_ENTRY_FLAG
+3 SSP_MODE_JUST_WORK_FLAG
+)
+
+(//ssp mode
+0x040003 SSP_MODE_JUST_WORK_IO_CAP_DATA
+0X040001 SSP_MODE_SSP_PIN_IO_CAP_DATA
+0X040002 SSP_MODE_PASSKEY_IO_CAP_DATA
+)
+
+(
+0x00 DISPLAY_ONLY
+0x01 DISPLAY_YESNO
+0x02 KEYBOARD_ONLY
+0x03 NO_INPUT_NO_OUTPUT
+)
+
+(
+7 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT
+6 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT
+0 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT
+)
+(
+1 FLAG_PAIRING_STATE_PAIRING
+0 FLAG_PAIRING_STATE_NOT_PAIRING
+)
+
+  
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/ui.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/ui.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/ui.format	(working copy)
@@ -0,0 +1,448 @@
+/*****************************************************************************/
+/* RCS HEADER -- DO NOT ERASE                                                */
+/* $Author: Administrator $                                                           */
+/* $Id: bt_ui_format.upper,v 1.1 2009-09-28 04:06:17 Administrator Exp $     */
+/************************************************************************/
+
+
+	/* ========= memory ============== */
+memalloc(
+2 mem_UI_data_txbuff_length
+
+1 mem_ipc_skip_continue_proc
+0 mem_ui_timer_temp  //length 4
+4 mem_ipc_rega_temp
+) 
+
+xmemalloc(
+//UI Work area
+1 mem_ipc_lock_bt
+1 mem_ipc_lock_c51
+8 mem_ipc_fifo_bt2c51
+8 mem_ipc_fifo_c512bt
+
+1 mem_ui_button_timer
+1 mem_ui_button_last_state
+4 mem_ui_timer_last_btclk
+2 mem_discovery_timeout_timer_count
+1 mem_hid_handshake_timer_count
+1 memui_reconnect_mode
+2 mem_ui_state_map
+
+//UI Config area
+1 mem_ui_profile_supported
+1 mem_ui_button_timeout
+1 mem_ui_button_gpio
+2 mem_discovery_timeout
+1 mem_pin_length
+16 mem_pin
+
+)
+/************/
+/* constant */
+/************/
+
+//mem_ui_state_map
+(
+0 UI_STATE_BT_CONNECTED
+1 UI_STATE_BT_SETUP_COMPLETE
+2 UI_STATE_BT_HID_CONN
+3 UI_STATE_BT_HID_HANDSHAKE
+4 UI_STATE_BT_SPP_CONN
+5 UI_STATE_BT_SNIFF
+6 UI_STATE_BT_DISCOVERY
+7 UI_STATE_BT_RECONNECT
+8 UI_STATE_BT_SLAVE_ROLE
+9 UI_STATE_BLE_CONNECTED
+10 UI_STATE_BLE_WRITE_RCV
+11 UI_STATE_BLE_ADV
+12 UI_STATE_BTN_DOWN
+)
+
+(
+1 UI_STATE_SPP_NL_AUTO_DISCOVER
+
+)
+
+/* UI state for Headset (memui_HS_State) */ 
+   (
+    0 UI_HEADSET_DISCONNECT
+    1 UI_HEADSET_IDLE                   /* before the responsor HS receive SABM      */
+    2 UI_HEADSET_W4CONNECT
+    3 UI_HEADSET_RINGING
+    4 UI_HEADSET_CONNECTED
+    5 UI_HEADSET_PARING
+  )
+/* memui_BB_State */
+(
+  0 UI_BB_OFF
+  1 UI_BB_IDLE
+  2 UI_BB_DISCOVERY
+  3 UI_BB_CONNECTED_ACTIVE_NO_SCO
+  4 UI_BB_CONNECTED_ACTIVE_WITH_SCO
+  5 UI_BB_CONNECTED_ACTIVE_WAIT_SNIFF
+  6 UI_BB_CONNECTED_SNIFF
+  7 UI_BB_RECONNECT
+  8 UI_BB_CONNECTED_SNIFF_WITH_SCO
+)
+
+/************/
+/* flags    */
+/************/
+  
+/* memui_Misc_Flags */
+  (
+    5 NO_IDLE_TURN_OFF
+    7 ANSWER_RING_FLAG               /* 1 Answer,0 no*/
+  )
+
+/* mem_UI_SCH_Interface */
+  (
+    0  UI_HS_PAIRING 
+    2  UI_REQ_CLOSE_RFCOMM
+    3  UI_LINK_LOST
+    4  UI_REQ_OPEN_SCO
+    6  UI_REQ_CLOSE_SCO
+  )
+  
+/* memui_PassOverKey */
+  (
+    0  ANSWER_RING_BIT
+    0  AG_SEND_RING_BIT
+    1  VOL_UP_BIT
+    2  VOL_DOWN_BIT
+    3  INI_CALL_BIT
+    4  DAIL_LAST_CALL
+    5  END_CALL_BIT
+    6  NOKIA_VOICE_ACTIVE 
+    7  REJECT_CALL_BIT
+  )
+  
+/* memui_reconnect_mode */
+(
+  0 NO_RECONNECTION
+  1 RECONNECT_HID
+  2 RECONNECT_HF
+  3 RECONNECT_HS
+  4 RECONNECT_HID_HF
+  5 RECONNECT_HID_HS
+)
+/* memui_Commands */
+(
+0 BT_CMD_STANDBY
+1 BT_CMD_START_DISCOVERY
+2 BT_CMD_STOP_DISCOVERY
+3 BT_CMD_RECONNECT
+4 BT_CMD_DISCONNECT
+5 BT_CMD_ENTER_SNIFF
+6 BT_CMD_EXIT_SNIFF
+7 BT_CMD_ENTER_SNIFF_SUBRATING
+8 BT_CMD_EXIT_SNIFF_SUBRATING
+9 BT_CMD_SNIFF_TEST
+10 BT_CMD_SET_PIN_CODE
+11 BT_CMD_START_INQUIRY
+12 BT_CMD_STOP_INQUIRY
+13 BT_CMD_START_ADV
+14 BT_CMD_STOP_ADV
+15 BT_CMD_START_DIRECT_ADV
+16 BT_CMD_STOP_DIRECT_ADV
+17 BT_CMD_LE_DISCONNECT
+18 BT_CMD_LE_UPDATE_CONN
+19 BT_CMD_LED_OFF
+20 BT_CMD_LED_ON
+21 BT_CMD_LED_BLINK
+22 BT_CMD_LE_START_CONN
+23 BT_CMD_LE_START_SCAN
+24 BT_CMD_LE_STOP_SCAN
+25 BT_CMD_ENTER_HIBERNATE
+27 BT_CMD_LE_SMP_SECURITY_REQUEST
+29 BT_CMD_ROLE_SWITCH
+30 BT_CMD_BB_RECONN_CANCEL
+31 BT_CMD_STORE_RECONN_INFO_LE
+32 BT_CMD_STORE_RECONN_INFO_BT
+33 BT_CMD_DHKEY_NOT_ACCEPT
+34 BT_CMD_START_24G
+35 BT_CMD_STOP_24G
+36 BT_CMD_PAIR_24G
+37 BT_CMD_STORE_RECONN_INFO
+)
+
+(
+0x00 BT_EVT_NULL
+0x01 BT_EVT_BB_CONNECTED
+0x02 BT_EVT_BB_DISCONNECTED
+0x03 BT_EVT_RECONN_STARTED
+0x04 BT_EVT_RECONN_FAILED
+0x05 BT_EVT_SETUP_COMPLETE
+0x06 BT_EVT_HID_CONNECTED
+0x07 BT_EVT_HID_DISCONNECTED
+0x08 BT_EVT_SPP_CONNECTED
+0x09 BT_EVT_SPP_DISCONNECTED
+0x0A BT_EVT_PINCODE_REQ
+0x0B BT_EVT_ENTER_SNIFF
+0x0C BT_EVT_EXIT_SNIFF
+0x0D BT_EVT_ENTER_SNIFF_SUB
+0x0E BT_EVT_EXIT_SNIFF_SUB
+0x0F BT_EVT_DISCOVERY_STOPED
+0x10 BT_EVT_BUTTON_LONG_PRESSED
+0x12 BT_EVT_HID_HANDSHAKE
+0X13 BT_EVT_RECONN_PAGE_TIMEOUT
+0x14 BT_EVT_LE_CONNECTED
+0X15 BT_EVT_LE_DISCONNECTED
+0x16 BT_EVT_ML2CAP_CONN_REFUSED
+0x17 BT_EVT_BUTTON_ENTER_HIBERNATE
+0x18 BT_EVT_LINKKEY_GENERATE
+0x19 BT_EVT_SWITCH_NOT_ACCEPT
+0x20 BT_EVT_SWITCH_ACCEPT
+0x21 BT_EVT_SNIFF_NOT_ACCEPT
+0x22 BT_EVT_SNIFF_ACCEPT
+0x23 BT_EVT_UNSNIFF_ACCEPT
+0x24 BT_EVT_UNSNIFF_NOT_ACCEPT
+0x25 BT_EVT_BUTTON_ADJUST_DPI
+0x26 BT_EVT_SEND_UNSNIFF_ACCEPT
+0x27 BT_EVT_VIRTUAL_CABLE_UNPLUG
+0x28 BT_EVT_LE_WRITE_REQUEST
+0x29 BT_EVT_LE_ENC_INFO
+0x2a BT_EVT_SWITCH_FAIL_MASTER
+0x2b BT_EVT_SWITCH_SUCCESS_MASTER
+0x2c BT_EVT_BUTTON_DOWN
+0x2d BT_EVT_BUTTON_UP
+0x2e BT_EVT_REMOTE_UNSNIFF
+0x30 BT_EVT_LE_PAIRING_FAIL
+0x31 BT_EVT_LE_PAIRING_SUCCESS
+0x32 BT_EVT_LE_START_ENC
+0X33 BT_EVT_LE_PAUSE_ENC
+0X34 BT_EVT_LE_TK_GENERATE
+0x35 BT_EVT_BT_GKEY_GENERATE
+0x36 BT_EVT_BT_GET_PASSKEY
+0x37 BT_EVT_BT_PAIRING_FAIL
+0x38 BT_EVT_BT_PAIRING_SUCCESS
+0x39 BT_EVT_24G_PAIRING_COMPLETE
+0x3a BT_EVT_24G_ATTEMPT_FAIL
+0x3b BT_EVT_LE_GKEY_GENERATE
+0x3c BT_EVT_24G_ATTEMPT_SUCCESS
+0x3d BT_EVT_STORE_NVRAM
+0x3e BT_EVT_LE_PAIRING_COMPLETE
+0x3F BT_EVT_LE_RECONNECT_COMPLETE
+0x40 BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP
+0x41 BT_EVT_LE_LTK_LOST
+)
+//switch
+(
+0 OFF
+1 ON
+)
+/* memui_mem_lock */
+(
+    0 MEM_UNLOCK
+    1 MEM_LOCK
+)
+/* memui_flag0 */
+(
+    0 UI_USER_DATA_FLAG
+    1 UI_WII_WAITING_SLEEP
+    2 UI_KEYBOARD_SNIFF_SKIP
+)
+/* mem_master_type */
+(
+    0 MTYPE_HID_DEFAULT
+    1 MTYPE_HID_SSP
+    2 MTYPE_SPP
+)
+
+	(	
+	0x01 RECIEVE_SDP_CONN_RES
+	0x02 RECIEVE_SDP_CFG_REQ
+	0x03 RECIEVE_SDP_CFG_RES
+	0x04 RECIEVE_RFCOMM_CONN_RES
+	0x05 RECIEVE_RFCOMM_CFG_REQ
+	0x06 RECIEVE_RFCOMM_CFG_RES
+	0x07 RECIEVE_HID_CTRL_CONN_RES
+	0x08 RECIEVE_HID_CTRL_CFG_REQ
+	0x09 RECIEVE_HID_CTRL_CFG_RES
+	0x0A RECIEVE_HID_INT_CONN_RES
+	0x0B RECIEVE_HID_INT_CFG_REQ
+	0x0C RECIEVE_HID_INT_CFG_RES
+	0x0D RECIEVE_AVCTP_CONN_RES
+	0x0E RECIEVE_AVCTP_CFG_REQ
+	0x0F RECIEVE_AVCTP_CFG_RES
+	0x10 RECIEVE_AVDTP_SIGNAL_CONN_RES
+	0x11 RECIEVE_AVDTP_SIGNAL_CFG_REQ
+	0x12 RECIEVE_AVDTP_SIGNAL_CFG_RES
+	0x13 RECIEVE_AVDTP_MEDIA_CONN_RES
+	0x14 RECIEVE_AVDTP_MEDIA_CFG_REQ
+	0x15 RECIEVE_AVDTP_MEDIA_CFG_RES
+	0x16 RECIEVE_SS_REASULT_HS                  
+	0x17 RECIEVE_SS_REASULT_HF                  
+	0x18 RECIEVE_SS_REASULT_AVTARG		          
+	0x19 RECIEVE_SS_REASULT_OBEX		            
+	0x1A RECIEVE_DLCI0_UA
+	0x1B RECIEVE_HS_PARAM_NEG_RES
+	0x1C RECIEVE_HS_UA
+	0x1D RECIEVE_HS_MODEM_STATUS_RES
+	0x1E RECIEVE_HS_MODEm_STATUS_CMD
+	0x1F RECIEVE_HF_PARAM_NEG_RES   
+	0x20 RECIEVE_HF_UA              
+	0x21 RECIEVE_HF_MODEM_STATUS_RES
+	0x22 RECIEVE_HF_MODEm_STATUS_CMD 
+	0x23 RECIEVE_OBEX_PARAM_NEG_RES     
+	0x24 RECIEVE_OBEX_UA              
+	0x25 RECIEVE_OBEX_MODEM_STATUS_RES
+	0x26 RECIEVE_OBEX_MODEm_STATUS_CMD    
+	0x27 RECIEVE_SPP_PARAM_NEG_RES   
+	0x28 RECIEVE_SPP_UA              
+	0x29 RECIEVE_SPP_MODEM_STATUS_RES
+	0x2A RECIEVE_SPP_MODEm_STATUS_CMD
+	0x2b RECIEVE_SDP_DISCONN_RES
+	)
+
+
+
+	(
+	0 UPPERSM_RP_IDLE
+	1 UPPERSM_RP_SDP_CONN
+	2 UPPERSM_RP_SDP_CONN_WAIT
+	3 UPPERSM_RP_SDP_CFG
+	4 UPPERSM_RP_SDP_CFG_WAIT
+	5 UPPERSM_RP_SS_AVTARG
+	6 UPPERSM_RP_SS_AVTARG_WAIT
+	7 UPPERSM_RP_SS_OBEX
+	8 UPPERSM_RP_SS_OBEX_WAIT
+	9 UPPERSM_RP_SDP_DISCONN
+	10 UPPERSM_RP_SDP_DISCONN_WAIT
+	11 UPPERSM_RP_AVDTP_CONN_WAIT
+	12 UPPERSM_RP_AVCTP_CONN
+	13 UPPERSM_RP_AVCTP_CONN_WAIT
+	14 UPPERSM_RP_AVCTP_CFG
+	15 UPPERSM_RP_AVCTP_CFG_WAIT
+	16 UPPERSM_RP_OBEX_CMD_PN
+	17 UPPERSM_RP_OBEX_CMD_PN_WAIT
+	18 UPPERSM_RP_OBEX_SABM
+	19 UPPERSM_RP_OBEX_SABM_WAIT
+	20 UPPERSM_RP_OBEX_CMD_MS
+	21 UPPERSM_RP_OBEX_CMD_MS_WAIT
+	)
+	(		/*mem_upper_sm_reconn*/
+	0 UPPERSM_RECONN_IDLE		
+	1 UPPERSM_RECONN_SDP_CONN		
+	2 UPPERSM_RECONN_SDP_CONN_WAIT		
+	3 UPPERSM_RECONN_SDP_CFG		
+	4 UPPERSM_RECONN_SDP_CFG_WAIT		
+	5 UPPERSM_RECONN_SS_HS
+	6 UPPERSM_RECONN_SS_HS_WAIT
+	7 UPPERSM_RECONN_SS_HF
+	8 UPPERSM_RECONN_SS_HF_WAIT
+	9 UPPERSM_RECONN_SS_AVTARG		
+	10 UPPERSM_RECONN_SS_AVTARG_WAIT		    
+	11 UPPERSM_RECONN_SS_OBEX		            
+	12 UPPERSM_RECONN_SS_OBEX_WAIT		      
+	13 UPPERSM_RECONN_SDP_DISCONN		        
+	14 UPPERSM_RECONN_SDP_DISCONN_WAIT      
+	15 UPPERSM_RECONN_HID_CTRL_CONN		      
+	16 UPPERSM_RECONN_HID_CTRL_CONN_WAIT		
+	17 UPPERSM_RECONN_HID_CTRL_CFG		      
+	18 UPPERSM_RECONN_HID_CTRL_CFG_WAIT     
+	19 UPPERSM_RECONN_HID_INT_CONN		      
+	20 UPPERSM_RECONN_HID_INT_CONN_WAIT		  
+	21 UPPERSM_RECONN_HID_INT_CFG		        
+	22 UPPERSM_RECONN_HID_INT_CFG_WAIT      
+	23 UPPERSM_RECONN_RFCOMM_CONN		        
+	24 UPPERSM_RECONN_RFCOMM_CONN_WAIT		  
+	25 UPPERSM_RECONN_RFCOMM_CFG		        
+	26 UPPERSM_RECONN_RFCOMM_CFG_WAIT       
+	27 UPPERSM_RECONN_RFCOMM_SABM		        
+	28 UPPERSM_RECONN_RFCOMM_SABM_WAIT		  
+	29 UPPERSM_RECONN_SPP_CMD_PN		        
+	30 UPPERSM_RECONN_SPP_CMD_PN_WAIT		    
+	31 UPPERSM_RECONN_SPP_SABM		          
+	32 UPPERSM_RECONN_SPP_SABM_WAIT		      
+	33 UPPERSM_RECONN_SPP_CMD_MS		        
+	34 UPPERSM_RECONN_SPP_CMD_MS_WAIT       
+	35 UPPERSM_RECONN_HF_CMD_PN		          
+	36 UPPERSM_RECONN_HF_CMD_PN_WAIT		    
+	37 UPPERSM_RECONN_HF_SABM		            
+	38 UPPERSM_RECONN_HF_SABM_WAIT		      
+	39 UPPERSM_RECONN_HF_CMD_MS		          
+	40 UPPERSM_RECONN_HF_CMD_MS_WAIT        
+	41 UPPERSM_RECONN_AVDTPs_CONN		        
+	42 UPPERSM_RECONN_AVDTPs_CONN_WAIT		  
+	43 UPPERSM_RECONN_AVDTPs_CFG		        
+	44 UPPERSM_RECONN_AVDTPs_CFG_WAIT       
+	45 UPPERSM_RECONN_AVDTPm_CONN		        
+	46 UPPERSM_RECONN_AVDTPm_CONN_WAIT		  
+	47 UPPERSM_RECONN_AVDTPm_CFG		        
+	48 UPPERSM_RECONN_AVDTPm_CFG_WAIT       
+	49 UPPERSM_RECONN_AVCTP_CONN		        
+	50 UPPERSM_RECONN_AVCTP_CONN_WAIT		    
+	51 UPPERSM_RECONN_AVCTP_CFG		          
+	52 UPPERSM_RECONN_AVCTP_CFG_WAIT		    
+	53 UPPERSM_RECONN_OBEX_CMD_PN		        
+	54 UPPERSM_RECONN_OBEX_CMD_PN_WAIT		  
+	55 UPPERSM_RECONN_OBEX_SABM		          
+	56 UPPERSM_RECONN_OBEX_SABM_WAIT		    
+	57 UPPERSM_RECONN_OBEX_CMD_MS		        
+	58 UPPERSM_RECONN_OBEX_CMD_MS_WAIT     
+	59 UPPERSM_RECONN_SS_SPP
+	60 UPPERSM_RECONN_SS_SPP_WAIT
+	)
+	(/*mem_UI_profile_supported*/
+	0 support_HID
+	1 support_A2DP
+	2 support_AVRCP
+	3 support_HF
+	4 support_HS
+	5 support_PBAP
+	6 support_SPP
+	)
+	/*mem_upper_sm_ss*/
+	(
+	0 UPPERSM_SS_HS
+	1 UPPERSM_SS_HF
+	2 UPPERSM_SS_AVTARG
+	3 UPPERSM_SS_OBEX
+	)
+
+	(
+	160 UI_HUNDRED_MILLISECOND_TIME
+	0XFF UI_BUTTON_GPIO_DISABLE
+	)
+	(
+	0x01 UI_BB_INCONNECT
+	0x10 UI_BB_DISCONNECT
+	)
+(
+0x00 UI_BUTTON_STATE_DOWN
+0x01 UI_BUTTON_STATE_UP
+)
+
+//mem_ipc_skip_continue_proc
+(
+	0 IPC_CONTINUE_PROCESS
+	1 IPC_SKIP_CONTINUE_PROCESS
+)
+
+
+(//led style struct 
+0 		LED_OFFSET_LED_TYPE
+1 		LED_OFFSET_BLINK_COUNT
+2		LED_OFFSET_LED_GPIO
+3		LED_OFFSET_ON_TIME
+5		LED_OFFSET_OFF_TIME
+7 		LED_OFFSET_CB_LEDON
+9		LED_OFFSET_CB_LEDOFF
+11		LED_OFFSET_LENGTH
+)
+
+(//LED state
+0 UI_LED_STATE_BLINK_STOP
+1 UI_LED_STATE_BLINK_START
+2 UI_LED_STATE_LIGHTING
+3 UI_LED_STATE_DARKING
+4 UI_LED_STATE_BLINK_LIGHTING
+5 UI_LED_STATE_BLINK_DARKING
+
+0xFF LED_INFINITE_FLASH_NUM
+
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/utility.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/utility.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/utility.format	(working copy)
@@ -0,0 +1,257 @@
+/**
+*  @file:bt_utility_format.upper
+*  @author: lei.zhu
+*  utility header file. inlcude timer
+*  Copyright:  (C)Hanlynn Technology    
+*/
+
+memalloc(
+
+/*
+    temp parameter
+*/
+2 mem_hold_contr
+2 mem_hold_contw
+1 mem_fifo_temp
+
+8 mem_pdatatemp
+8 mem_temp //8 bytes
+4 mem_timeup // 4 bytes
+4 mem_rega //4 bytes
+4 mem_regb //4 bytes
+3 mem_regc //3 bytes
+2 mem_contr //2 bytes
+2 mem_contw //2 bytes
+
+1 mem_wakup_from_power_flag
+4 mem_saved_gpio_in
+
+0 mem_shutter_random_mac_data_temp
+0 mem_shutter_config_data_temp
+0 mem_le_adv_channel_map_temp
+0 mem_le_data_len_temp	//1byte
+0 mem_tx_fifo_map_temp
+0 mem_rpn_dlci		//1byte
+0 mem_event_cmd_response_content	//2byte
+0 mem_le_prand		//16byte
+0 mem_AES_CMAC_k	 //16 bytes
+0 mem_regext_index 	//1 bytes
+1 mem_temp_block0
+0 mem_le_data_temp	//15bytes
+15 mem_temp_block1
+0 mem_le_aes_128	//16byte
+0 mem_regext   //64 bytes
+0 mem_AES_CMAC_k1  //16 bytes
+16 mem_temp_block2
+0 mem_AES_CMAC_k2  //16 bytes
+16 mem_temp_block3
+0 mem_AES_CMAC_temp  // 16 bytes
+16 mem_temp_block4
+0 mem_AES_CMAC_M_last // 16 bytes
+1 mem_module_uart_cmd
+1 mem_module_uart_opcode
+1 mem_module_uart_len
+1 mem_module_temp_nl_discard_packet
+12 mem_temp_block5
+0 mem_le_mackey //16 bytes
+0 mem_app_receive_temp
+2 mem_key_value_temp
+2 mem_key_value
+1 mem_key_value_temp1
+1 mem_key_value_temp2
+1 mem_key_value_temp3
+1 mem_key_value_temp4
+1 mem_key_value_temp5
+1 mem_key_value_temp6
+6 mem_temp_block6
+
+1 mem_usb_status
+1 mem_usb_fifo_empty
+1 mem_usb_read_len
+64 mem_usb_rxbuf
+2 mem_bufptr
+1 mem_remain
+20 mem_devicedesc
+2 mem_hidreportdesc_kb
+2 mem_hidreportdesc_m
+100 mem_confdesc
+5 mem_string0
+30 mem_string1
+64 mem_string2
+30 mem_string3
+2 mem_usb_zero_packet
+2 mem_usb_ones_packet
+2 mem_usb_two_packet
+1 mem_usb0_state
+
+1 mem_usb_offline_check_gpio
+1 mem_usb_tx_interval
+
+0 mem_usb_clear_mem_start
+0 mem_usb_setup
+1 mem_usb_setup_bmRequestType
+1 mem_usb_setup_bRequest
+1 mem_usb_setup_bValue
+1 mem_usb_setup_bValueH
+2 mem_usb_setup_wIndex
+1 mem_usb_setup_bLength
+1 mem_usb_setup_bLengthH
+64 mem_usb0_setup
+64 mem_usb0_set_report_data
+64 mem_usb0_get_report_data
+1 mem_usb_state
+1 mem_usb_tx_wait
+1 mem_usb_tx_enable
+1 mem_usb_remote_wakeup
+1 mem_usb_clear_remote_wakeup
+1 mem_usb_ep0_stall_status
+1 mem_usb_ep1_stall_status
+1 mem_usb_ep2_stall_status
+1 mem_usb_ep3_stall_status
+2 mem_dsc_info_data_pointer
+1 mem_dsc_info_len
+1 mem_usb0_data_ready_report
+1 mem_usb_tx_win_enable
+1 mem_usb_tx_mac_enable
+1 mem_usb_device_enumeration_endflag
+1 mem_usb_wakestate_onetime_flag
+1 mem_usb_mac_wakeup_trig
+1 mem_usb_set_high_addr_flag
+1 mem_usb_set_protocol_value
+1 mem_usb_set_protocol_status
+1 mem_usb_get_protocol_flag
+1 mem_usb_idle_flag
+1 mem_usb_idle_rate
+2 mem_usb_setup_bValue_temp
+1 mem_usb0_get_set_report
+1 mem_usb_ep1_data
+1 mem_usb_ep2_data
+1 mem_usb_clear_halt
+16 mem_usb_mouse_data
+16 mem_usb_kb_data
+16 mem_usb_kb_multikey
+8 mem_usb_kb_data_sta_data
+8 mem_usb_kb_data_last_data
+3 mem_usb_kb_multikey_sta_data
+3 mem_usb_kb_multikey_last_data
+1 mem_usb_kb_blank_data_enable
+1 mem_usb_kb_mul_blank_data_enable
+1 mem_usb_test_cnt
+0 mem_usb_clear_mem_end
+1 mem_usb_test_kb
+
+256 mem_rssi_noise_buffer
+256 mem_rssi_noise_dg_buffer
+256 mem_rssi_noise_ms_buffer
+256 mem_rssi_noise_kb_buffer
+32 mem_24g_common_temp
+
+2 mem_data_pre
+2 mem_data_current
+3 mem_data_sum
+
+ifdef DEBUGLOG
+1   mem_debuglog_temp
+1   mem_debuglog_type
+1	mem_debuglog_datalen
+2	mem_debuglog_dataval
+2	mem_debuglog_datatype
+1	mem_debuglog_tail
+8	mem_debuglog_pdata
+endif
+
+)
+
+
+(
+/*mem_util_timer_flag0_7*/
+    0   UTIL_TIMER_0_USED
+    1   UTIL_TIMER_1_USED
+    2   UTIL_TIMER_2_USED
+    3   UTIL_TIMER_3_USED
+    4   UTIL_TIMER_4_USED
+    5   UTIL_TIMER_5_USED
+    6   UTIL_TIMER_6_USED
+    7   UTIL_TIMER_7_USED
+/*mem_util_timer_flag8_15*/
+    0   UTIL_TIMER_8_USED
+    1   UTIL_TIMER_9_USED
+    2   UTIL_TIMER_10_USED
+    3   UTIL_TIMER_11_USED
+    4   UTIL_TIMER_12_USED
+    5   UTIL_TIMER_13_USED
+    6   UTIL_TIMER_14_USED
+    7   UTIL_TIMER_15_USED
+)
+
+//util fifo param
+(
+
+8 UTIL_FIFO_LEN
+-1 UTIL_FIFO_OFFSET
+)
+
+
+(
+	0xAA DEBUGLOG_HEAD
+	0x00 DEBUGLOG_TYPE
+	0x04 DEBUGLOG_LEN
+	0xBB DEBUGLOG_TAIL
+)
+
+(
+	0x1000 DEBUGLOG_DTYPE_CALLBACK
+	0x1001 DEBUGLOG_DTYPE_EVENT
+	0x1002 DEBUGLOG_DTYPE_CMD
+	0x1003 DEBUGLOG_DTYPE_STATUS
+	0x1004 DEBUGLOG_DTYPE_MISC
+	0x1005 DEBUGLOG_DTYPE_CONN_SM
+	0x1006 DEBUGLOG_DTYPE_UPPER_SM
+	0x1007 DEBUGLOG_DTYPE_PARSE_LMP
+	0x1008 DEBUGLOG_DTYPE_SEND_LMP
+)
+
+//DEBUGLOG_DTYPE_CALLBACK
+(
+	0x0000 CALLBACK_24G_DATA
+	0x0001 CALLBACK_LE_PROCESS
+	0x0002 CALLBACK_BT_PROCESS
+	0x0003 CALLBACK_BEFORE_LPM
+	0x0004 CALLBACK_BB_EVENT_PROCESS
+	0x0005 CALLBACK_IDLE_PROCESS
+	0x0006 CALLBACK_BEFORE_HIBERNATE
+	0x0007 CALLBACK_ATT_WRITE
+	0x0008 CALLBACK_EVENT_TIMER
+)
+
+//DEBUGLOG_DTYPE_EVENT
+//(
+
+//)
+
+//DEBUGLOG_DTYPE_CMD
+//(
+
+//)
+
+//DEBUGLOG_DTYPE_STATUS
+(
+	0x0000 STATUS_CODE_WAKE
+	0x0001 STATUS_LPM_WAKE
+	0x0004 STATUS_24G_START 
+)
+//DEBUG_DTYPE_MISC
+(
+	0x0000 MISC_LE_RETRANSMIT
+	0x0001 MISC_LOST_MOUSEDATA
+	0x0002 MISC_TXPOWER_0
+	0x0003 MISC_TXPOWER_1
+	0x0004 MISC_TXPOWER_2
+	0x0006 MISC_PULL_MOUSEDATA
+	0x0007 MISC_PUSH_MOUSEDATA
+	0x0008 MISC_LE_RETRANSMIT_MD
+
+
+)
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/var.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/var.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/format/var.format	(working copy)
@@ -0,0 +1,442 @@
+/************************************************************************/
+/* RCS HEADER -- DO NOT ERASE                                           */
+/* $Author: Administrator $                                                     */
+/* $Id: bt_var.osi,v 1.1 2009-09-28 04:06:18 Administrator Exp $   */
+/* Orisil Technology                                                 */
+/************************************************************************/
+
+
+/* packet types */
+(
+  0x02 FHS_PACKET 
+  0x03 DM1_PACKET 
+  0x03 DM1_LMP_PACKET 
+  0x04 DH1_PACKET 
+  0x05 HV1_PACKET 
+  0x06 HV2_PACKET 
+  0x07 HV3_PACKET 
+  0x08 DV_PACKET 
+  0x09 AUX1_PACKET 
+  0x0a DM3_PACKET 
+  0x0b DH3_PACKET 
+  0x0e DM5_PACKET 
+  0x0f DH5_PACKET 
+)
+
+
+/* mem_lmp_respond */
+(
+  0 RESPOND_TO_ALL
+  1 PASS_EVERYTHING
+  2 PASS_ONLY_UNKNOWNS
+  3 RESPOND_TO_LMPS
+)
+/* SCO algorithm defines */
+(
+  0 ULAW
+  1 ALAW
+  2 CVSD
+)
+/* encryption modes */
+(
+  0 NO_ENCRYPTION
+  1 PT_PT_ENCRYPTION
+  2 PT_BROADCAST_ENCRYPTION
+)
+
+/* bits used in mem_lmp_state1 variable */
+(
+  0 LMP_STATE_DETACH
+  1 LMP_STATE_HOLD
+  2 LMP_STATE_SNIFF
+  3 LMP_STATE_PARK
+  4 LMP_STATE_WAIT_SCO_CREATE
+  5 LMP_STATE_WAIT_SCO_KILL
+  6 LMP_STATE_SCO3
+  7 LMP_STATE_WAIT_SCO_START
+)
+/* mem_lmp_state2 */
+(
+  0 LMP_WAIT_FOR_SNIFF_ACCEPT
+  1 LMP_WAIT_FOR_PARK_ACCEPT
+  2 LMP_SEND_UNPARK_ACCEPTED
+  3 LMP_SEND_ENCRYPTION_START
+  4 LMP_SEND_ENCRYPTION_STOP
+  5 MESSAGE_QUEUE
+  7 LMP_STATE_WAIT_BEACON
+)
+/* mem_lmp_state3 */
+(
+ 0 INQUIRY_STATE_CHECK
+ 1 HOST_DELAY_MESSAGE
+ 2 VARIABLE_DELAY
+ 3 TEST_MODE_START_LOOPBACK
+ 4 TEST_MODE_START_PATTERN
+ 5 PARSE_TEST_CONTROL_MESSAGE
+ 6 H_AUTH_SEND_COMB_KEY
+)
+/* mem_rx_status */
+(
+  0 FROM_MASTER
+)
+/* mem_ms_flag */
+(
+  0 MS_RECEIVE_SWITCH_REQ
+  1 MS_SEND_SETUP_COMPLATE
+)
+/* mem_conn_sm */
+(
+  0 CONN_SM_STANDBY
+  1 CONN_SM_WAIT_PAGE
+  2 CONN_SM_SEND_FEATURES
+  3 CONN_SM_WAIT_FEATURES_RES
+  4 CONN_SM_SEND_CONN_REQ
+  5 CONN_SM_WAIT_CONN_ACCEPT
+  6 CONN_SM_AUTH_PAIR
+  7 CONN_SM_AUTH_PAIR_WAIT
+  8 CONN_SM_WAIT_MUTAL_AUTH
+  9 CONN_SM_ENCRYPT
+  0xa CONN_SM_ENCRYPT_WAIT
+  0xb CONN_SM_ENCRYPT_WAIT_CLEAR
+  0xc CONN_SM_SEND_SETUP_COMPLETE
+  0xd CONN_SM_WAIT_SETUP_COMPLETE 
+  0xe CONN_SM_SEND_SWITCH
+  0xf CONN_SM_DETACH_DELAY
+  0x10 CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION
+  0x11 CONN_SM_DELAY_RESTART_CONNECTION
+  0x12 CONN_SM_SEND_VERSION
+  0X13 CONN_SM_WAIT_VERSION
+  0x14 CONN_SM_SEND_FEATURES_EXT
+  0x15 CONN_SM_WAIT_FEATURES_EXT
+  0x16 CONN_SM_PAIRING
+  0x17 CONN_SM_AUTH
+  0x18 CONN_SM_PAIRING_WAIT
+  0x19 CONN_SM_AUTH_WAIT
+  0x1a CONN_SM_DONE
+  0x1b CONN_SM_WAIT_DONE
+)
+
+/* btStateConn1 */
+(
+  0 CONN_STANDBY
+  1 CONN_MASTER_SEND_CONN_REQ
+  2 CONN_MASTER_WAIT_FOR_CONN_ACCEPTED
+  3 CONN_MASTER_AUTH
+  4 CONN_MASTER_WAIT_FOR_FEATURES
+  5 CONN_MASTER_WAIT_FOR_SETUP_COMPLETE
+  6 CONN_MASTER_WAIT_FOR_MAX_SLOT
+  7 CONN_SLAVE_CONN_REQUESTED
+  8 CONN_SLAVE_WAIT_FOR_SETUP_COMPLETE
+  9 CONN_SLAVE_AUTH
+  10 CONN_USING_HOST_OPCODE
+  11 CONN_SLAVE_AUTH_WAIT
+  12 CONN_SLAVE_ENCRYPT_WAIT
+)
+
+/* mem_lmp_conn_state */
+(
+  0 RECEIVED_CONN_REQ
+  1 SENT_CONN_REQ
+  2 RECEIVED_SETUP_COMPLETE
+  3 SENT_SETUP_COMPLETE
+  4 HOST_CONNECTION_MADE
+  6 INIT_COMPLETE
+  7 SNIFF_NEGOTIATE
+)
+/* btStateAuth1 */
+(
+  0 WAIT_FOR_KINIT
+  1 WAIT_FOR_LKA
+  2 WAIT_FOR_LKB
+  3 WAIT_FOR_SRES
+  4 EXAMINE_RECEIVED_SRES
+  5 SEND_AU_RAND
+  6 WAIT_FOR_KC
+  7 DELAYED_ENCRYPT_RESPONSE
+)
+/* btStateAuth2 */
+(
+  0 SENT_SRES
+  1 RECEIVED_IN_RAND
+  2 SENT_AU_RAND
+  3 AUTHENTICATION_FAILED
+  4 AUTHENTICATION_PASSED
+  5 STARTED_AUTH
+  6 SENT_COMB_KEY
+  7 SENT_IN_RAND
+)
+/* btStateAuth3 */
+(
+  0 RECEIVED_AU_RAND
+  1 RECEIVED_SRES
+  2 MUTUALLY_AUTHENTICATE
+)
+/* btStateHost */
+(
+  0 H_AUTH_STARTED
+  2 H_ENCRYPTION_MODE_REQ_PT
+  3 H_ENCRYPTION_KEY_SIZE
+  4 H_ENCRYPTION_START
+  5 H_ENCRYPTION_STOP
+  6 H_AUTH_SECOND_TRY
+)
+/* btStateEncrypt2 */
+(
+  0 RECEIVED_ENCRYPT_MODE_REQ_PT
+  1 RECEIVED_ENCRYPT_KEY_SIZE
+  2 RECEIVED_ENCRYPT_START
+  3 RECEIVED_ENCRYPT_STOP
+  4 STARTED_ENCRYPT_START
+)
+/* mem_ms_state */
+(
+  0x00 MS_STANDBY
+  0x11 M_MINIT_1
+  0x12 M_MINIT_2
+  0x20 M_SINIT_0
+  0x30 S_MINIT_0
+  0x31 S_MINIT_1
+  0x32 S_MINIT_2
+  0x41 S_SINIT_1
+  0x42 S_SINIT_2
+  0x43 S_SINIT_3
+)
+/* mem_test_mode */
+(
+  0 TEST_MODE_ALLOWED
+  1 TEST_MODE_ACTIVE
+)
+/* values for mem_tester_emulate */
+(
+  0x00 NO_TEST_MODE
+  0x00 CONTINUOUS_TRANSMIT
+  0x10 TRANSMIT_TEST
+  0x08 LOOPBACK
+)
+
+/* mem_tx_misc */
+(
+  1 SEND_TX_ADDR
+)
+/* BBHWREG_page_stat */
+(
+  5 PAGE_MODE_END
+)
+/* host_return_parameters_status codes */
+(
+  0x00 HOST_RETURN_SUCCESS
+  0x01 HOST_RETURN_SLAVE_CANT_ISSUE
+  0x02 HOST_RETURN_NO_CONNECTION
+  0x04 HOST_RETURN_PAGE_TIMEOUT
+  0x05 HOST_RETURN_INQUIRY_TIMEOUT
+  0x08 HOST_RETURN_CONNECTION_TIMEOUT
+  0x09 HOST_RETURN_MAX_NUM_CONNECTIONS
+  0x0a HOST_RETURN_MAX_NUM_SCO
+  0x0b HOST_RETURN_MAX_NUM_ACL
+  0x0c HOST_RETURN_SECURITY_REASONS
+  0x10 HOST_RETURN_HOST_TIMEOUT
+  0x11 HOST_RETURN_UNSUPPORTED_FEATURE_PARAMETER
+  0x13 HOST_RETURN_OTHER_END_USER
+  0x14 HOST_RETURN_OTHER_END_LOW_RESOURCE
+  0x15 HOST_RETURN_OTHER_END_POWER_OFF
+  0x16 HOST_RETURN_LOCAL_HOST
+  0x18 HOST_RETURN_PAIRING_NOT_ALLOWED
+  0x19 HOST_RETURN_UNKNOWN_PDU
+  0x1a HOST_RETURN_UNSUPPORTED_REMOTE_FEATURE
+  0x1d HOST_RETURN_SCO_AIR_MODE_REJECTED
+  0x20 HOST_RETURN_UNSUPPORTED_LMP_VALUE
+  0x21 HOST_RETURN_AUTHENTICATION_FAILURE
+  0x22 HOST_RETURN_CHANGED_EXISTING_SCO
+  0x23 HOST_RETURN_HOST_REJECTED
+  0x24 HOST_RETURN_UNSPECIFIED_ERROR
+  0x25 HOST_RESET
+  0x26 HOST_RETURN_BAD_HANDLE
+
+  0x00 HOST_RETURN_ACCEPT_COMMAND
+  0x01 HOST_RETURN_REJECT_COMMAND
+)
+/* host_present */
+(
+  0 HOST_IS_PRESENT
+  1 BCI_IS_PRESENT
+  2 DONT_INIT_RADIO
+)
+/* mem_master_state */
+(
+  0 MASTER_STATE_STANDBY
+  1 MASTER_INQUIRY
+)
+/* misc */
+(
+  92 SECOND_SWITCH_REQ
+  93 SLAVE_DELAY_DETACH
+  94 MASTER_DELAY_DETACH
+  95 UNSNIFF_DELAY_DETACH
+  0 WE_STARTED_AS_MASTER
+  1 WE_STARTED_AS_SLAVE
+)
+/* mem_host_commands */
+(
+  0x01 HOST_INQUIRY
+  0x02 HOST_INQUIRY_CANCEL
+  0x03 HOST_CREATE_CONNECTION
+  0x04 HOST_DISCONNECT_CONNECTION
+  0x05 HOST_ADD_SCO_REQUEST
+  0x06 HOST_REMOTE_NAME_REQUEST
+  0x07 HOST_WRITE_SUPPORTED_FEATURES
+  0x08 HOST_SET_TX_LEVEL
+  0x09 HOST_SET_RX_LEVEL
+  0x0a HOST_SNIFF_REQUEST
+  0x0b HOST_UNSNIFF_REQUEST
+  0x0c HOST_WRITE_LINK_SUPERVISION_TIMEOUT
+  0x0e HOST_WRITE_SCAN_ENABLE
+  0x0f HOST_READ_AUDIO_QUALITY
+  0x10 HOST_ENABLE_DEVICE_UNDER_TEST
+  0x14 HOST_BUTTON_CONFIGURE
+  0x15 HOST_SET_LOW_BATTERY_LEVEL
+  0x16 HOST_WRITE_LOCAL_NAME
+  0x17 HOST_WRITE_LOCAL_PIN
+  0x18 HOST_KILL_SCO_REQUEST
+  0x19 HOST_QOS_REQ
+
+  0x1a HOST_FEATURES_REQUEST
+  0x1b HOST_VERSION_REQUEST
+  0x1c HOST_TIMING_REQUEST
+  0x1d HOST_CLK_OFFSET_REQUEST
+  0x1e HOST_AUTHENTICATE
+  0x1f HOST_START_ENCRYPTION
+  0x20 HOST_STOP_ENCRYPTION
+  0x21 HOST_HOLD_REQUEST
+  0x22 HOST_HOLD_FORCE
+  0x23 HOST_PARK_REQUEST
+  0x24 HOST_MOD_BEACON
+  0x25 HOST_SET_BROADCAST_SCAN_WINDOW
+  0x26 HOST_UNPARK_PM_REQUEST
+  0x27 HOST_UNPARK_BD_REQUEST
+  0x28 HOST_SLAVE_REQUEST_UNPARK
+  0x29 HOST_DECREASE_POWER_REQUEST
+  0x2a HOST_INCREASE_POWER_REQUEST
+  0x2b HOST_SEND_PREFERRED_RATE
+  0x2c HOST_MAX_SLOT_REQ
+  0x2d HOST_MAX_SLOT_FORCE
+  0x2e HOST_PAGE_MODE_REQUEST
+  0x2f HOST_PAGE_SCAN_MODE_REQUEST
+  0x30 HOST_MASTER_SLAVE_SWITCH
+  0x31 HOST_SEND_AUTO_RATE
+  0x32 HOST_PAGE_CANCEL
+  0x33 HOST_CHANGE_LINK_KEY
+  0x34 HOST_RADIO_READ
+  0x35 HOST_RADIO_WRITE
+  0x36 HOST_REMOTE_SLAVE_INIT_UNPARK_REQUESTED
+
+  0x40 HOST_REMOTE_CONNECTION_REQUESTED
+  0x41 HOST_REMOTE_DETACH
+  0x42 HOST_REMOTE_SCO_CREATE_REQUESTED
+  0x43 HOST_REMOTE_SCO_KILL_REQUESTED
+  0x44 HOST_REMOTE_PARK_REQUESTED
+  0x45 HOST_REMOTE_UNPARK_REQUESTED
+  0x46 HOST_REMOTE_SNIFF_REQUESTED
+  0x47 HOST_REMOTE_UNSNIFF_REQUESTED
+  0x48 HOST_REMOTE_HOLD_REQUESTED
+  0x49 HOST_REMOTE_AUTHENTICATION
+  0x4a HOST_REMOTE_START_ENCRYPTION_REQUESTED
+  0x4b HOST_REMOTE_STOP_ENCRYPTION_REQUESTED
+  0x4c HOST_MODE_CHANGE_EVENT
+  0x4d HOST_REMOTE_TEST_ACTIVATE
+  0x4e HOST_REMOTE_TEST_CONTROL
+  0x4f HOST_REMOTE_TIMING_REQUEST
+)
+/* BCI interface (not used if not compiled in ) */
+(
+  0x01 BCI_INQUIRY
+  0x02 BCI_INQUIRY_CANCEL
+  0x03 BCI_CREATE_CONNECTION
+  0x04 BCI_DISCONNECT
+  0x05 BCI_ADD_SCO_CONNECTION
+  0x06 BCI_REMOTE_NAME_REQUEST
+  0x07 BCI_WRITE_SUPPORTED_FEATURES
+  0x08 BCI_SET_TX_POWER_LEVEL
+  0x09 BCI_SET_RX_POWER_LEVEL
+  0x0a BCI_SNIFF_MODE
+  0x0b BCI_EXIT_SNIFF_MODE
+  0x0c BCI_WRITE_LINK_SUPERVISION_TIMEOUT
+  0x0d BCI_WRITE_PAGE_TIMEOUT
+  0x0e BCI_WRITE_SCAN_ENABLE
+  0x0f BCI_GET_AUDIO_QUALITY
+  0x10 BCI_ENABLE_DEVICE_UNDER_TEST
+  0x11 BCI_SEND_DATA
+  0x12 BCI_REGISTER_SERVICE_RECORD
+  0x13 BCI_SERVICE_SEARCH_ATTRIB_REQ
+  0x14 BCI_BUTTON_CONFIGURE
+  0x15 BCI_SET_LOW_BATTERY_LEVEL
+  0x16 BCI_WRITE_LOCAL_NAME
+  0x17 BCI_WRITE_LOCAL_PIN
+  0x18 BCI_REMOVE_SCO_CONNECTION
+  0x19 BCI_QUALITY_OF_SERVICE
+  0x40 BCI_REMOTE_CONNECTION_REQUEST
+  0x41 BCI_REMOTE_DETACH
+  0x42 BCI_REMOTE_ADD_SCO_REQUEST
+  0x43 BCI_REMOTE_REMOVE_SCO_REQUEST
+  0x44 BCI_REMOTE_PARK_REQUEST
+  0x45 BCI_REMOTE_UNPARK_REQUEST
+  0x46 BCI_REMOTE_SNIFF_REQUEST
+  0x47 BCI_REMOTE_UNSNIFF_REQUEST
+  0x48 BCI_REMOTE_HOLD_REQUEST
+  0x49 BCI_REMOTE_AUTHENTICATION_PAIRING_REQUEST
+  0x4a BCI_REMOTE_START_ENCRYPTION_REQUEST
+  0x4b BCI_REMOTE_STOP_ENCRYPTION_REQUEST
+  0x4c BCI_MODE_CHANGE_EVENT
+)
+/* mode changes */
+(
+  0 MODE_CHANGE_ACTIVE
+  1 MODE_CHANGE_SNIFFING
+  2 MODE_CHANGE_PARKED
+  3 MODE_CHANGE_HOLDING
+  4 MODE_CHANGE_SCO_ADDED
+  5 MODE_CHANGE_SCO_REMOVED
+  6 MODE_CHANGE_ACL_CONNECTION
+  7 MODE_CHANGE_DISCONNECT
+  8 MODE_CHANGE_SCO_CHANGED
+  9 MODE_CHANGE_ENCRYPTING
+  10 MODE_CHANGE_NOT_ENCRYPTING
+  11 MODE_CHANGE_BUTTON_UP
+  12 MODE_CHANGE_BUTTON_DOWN
+  13 MODE_CHANGE_BATTERY_LOW
+  14 MODE_CHANGE_RESET
+  15 MODE_CHANGE_INQUIRY_CANCELED_RMTCMD
+  16 MODE_ACTIVE_MSSWITCH_PASSED
+  17 MODE_ACTIVE_MSSWITCH_FAILED
+)
+/* mem_battery - low nibble is level information, upper nibble is status info */
+(
+  6 BATTERY_CHECK_LEVEL
+  7 BATTERY_SENT_STATUS
+)
+/* mem_radio_version */
+(
+  0x02 RADIO_2001
+  0x12 RADIO_2002
+  0x32 RADIO_2002_DDM
+  0x42 RADIO_1008A1
+  0x52 RADIO_1018A0
+)
+/* mem_slave_initiated_conn */
+(
+  0 SLAVE_INIT_AUTHENTICATION
+  1 SLAVE_INIT_ENCRYPTION
+  2 SLAVE_INIT_MASTER_SLAVE_SWITCH
+)
+/* connection_options */
+(
+  0 CONNECTION_AUTH
+  1 CONNECTION_ENCRYPT
+  2 CONNECTION_SWITCH
+  3 CONNECTION_ACL
+  4 CONNECTION_FEATURE_EXT
+)
+/* mem_debug_config */
+(
+  7 AA_INSERTION
+)
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/bt_format.meta
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/bt_format.meta	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/bt_format.meta	(working copy)
@@ -0,0 +1,9191 @@
+0x4000 mem_patch00
+0x4001 mem_patch01
+0x4002 mem_patch02
+0x4003 mem_patch03
+0x4004 mem_patch04
+0x4005 mem_patch05
+0x4006 mem_patch06
+0x4007 mem_patch07
+0x4008 mem_patch08
+0x4009 mem_patch09
+0x400a mem_patch0a
+0x400b mem_patch0b
+0x400c mem_patch0c
+0x400d mem_patch0d
+0x400e mem_patch0e
+0x400f mem_patch0f
+0x4010 mem_patch10
+0x4011 mem_patch11
+0x4012 mem_patch12
+0x4013 mem_patch13
+0x4014 mem_patch14
+0x4015 mem_patch15
+0x4016 mem_patch16
+0x4017 mem_patch17
+0x4018 mem_patch18
+0x4019 mem_patch19
+0x401a mem_patch1a
+0x401b mem_patch1b
+0x401c mem_patch1c
+0x401d mem_patch1d
+0x401e mem_patch1e
+0x401f mem_patch1f
+0x4020 mem_patch20
+0x4021 mem_patch21
+0x4022 mem_patch22
+0x4023 mem_patch23
+0x4024 mem_patch24
+0x4025 mem_patch25
+0x4026 mem_patch26
+0x4027 mem_patch27
+0x4028 mem_patch28
+0x4029 mem_patch29
+0x402a mem_patch2a
+0x402b mem_patch2b
+0x402c mem_patch2c
+0x402d mem_patch2d
+0x402e mem_patch2e
+0x402f mem_patch2f
+0x4030 mem_patch30
+0x4031 mem_patch31
+0x4032 mem_patch32
+0x4033 mem_patch33
+0x4034 mem_patch34
+0x4035 mem_patch35
+0x4036 mem_patch36
+0x4037 mem_patch37
+0x4038 mem_patch38
+0x4039 mem_patch39
+0x403a mem_patch3a
+0x403b mem_patch3b
+0x403c mem_patch3c
+0x403d mem_patch3d
+0x403e mem_patch3e
+0x403f mem_patch3f
+0x4040 mem_context
+0x4090 mem_current_amaddr
+0x4091 mem_lpm_mode
+0x4092 mem_device_option
+0x4093 mem_scan_mode
+0x4094 mem_last_clkn
+0x4098 mem_features
+0x40a0 mem_lap
+0x40a3 mem_uap
+0x40a4 mem_nap
+0x40a6 mem_npage
+0x40a7 mem_glap
+0x40aa mem_class
+0x40ad mem_iscan_window
+0x40af mem_iscan_interval
+0x40b1 mem_pscan_window
+0x40b3 mem_pscan_interval
+0x40b5 mem_page_interval
+0x40b7 mem_page_window
+0x40b9 mem_page_to
+0x40bb mem_inq_window
+0x40bd mem_fcomp_mul
+0x40be mem_fcomp_div
+0x40bf mem_rx_window_init
+0x40c1 mem_rx_window_sniff
+0x40c3 mem_rf_init_ptr
+0x40c5 mem_last_type
+0x40c6 mem_last_type_esco
+0x40c7 mem_last_type_saved
+0x40c8 mem_retransmission_cnt
+0x40ca mem_next_btclk
+0x40ce mem_rf_rccal
+0x40cf mem_handle_num
+0x40d0 mem_max_slot
+0x40d1 mem_eir_enable
+0x40d2 mem_afh_instant
+0x40d6 mem_afh_error_total
+0x40d8 mem_afh_cfg
+0x40d9 mem_afh_new_mod
+0x40da mem_afh_map_lo
+0x40df mem_afh_map_hi
+0x40e4 mem_afh_used
+0x40e5 mem_afh_index
+0x40e7 mem_afh_map_new
+0x40f2 mem_afh_map
+0x4142 mem_afh_timer
+0x4146 mem_afh_classify_channel_map
+0x4150 mem_chip_functions
+0x4152 mem_lpm_wake_lock
+0x4154 mem_lpm_interval
+0x4156 mem_lpm_overhead
+0x4157 mem_lpm_hibernate_switch
+0x4158 mem_esco_addr
+0x4159 mem_sniff_unint_lost
+0x415a mem_ptt
+0x415b mem_sleep_counter//should be 0x41fc in REVC
+0x415f mem_sleep_counter_all
+0x4163 mem_sleep_clkn
+0x4169 mem_sniff_rcv
+0x416c mem_sniff_lost
+0x416f mem_clks_per_lpo
+0x4172 mem_lpm_mult
+0x4173 mem_lpm_mult_timeout
+0x4174 mem_lpm_mult_cnt
+0x4175 mem_lpm_config
+0x4178 mem_lpm_xtalcnt
+0x4179 mem_lpm_buckcnt
+0x417a mem_lpm_ldocnt
+0x417b mem_lpm_isogate
+0x417c mem_lpm_isogate_final
+0x417d mem_saved_gpio// should be 0x421e in REVC
+0x418d mem_saved_gsel
+0x4190 mem_saved_mark
+0x4198 mem_saved_spidctrl
+0x4199 mem_patch_ptr
+0x419b mem_patch_len
+0x419d mem_timers
+0x41bd mem_link_key_exists
+0x41be mem_link_key
+0x41ce mem_hci_cmd
+0x41cf mem_hci_conn_handle
+0x41d0 mem_hci_plap
+0x41d3 mem_hci_puap
+0x41d4 mem_hci_pnap
+0x41d6 mem_uartd_rxitems_got_data
+0x41d7 mem_uartd_rxitems_threshold
+0x41d8 mem_uartd_rx_timeout
+0x41da mem_loadcode_times
+0x41db mem_tx_lch
+0x41dc mem_tx_len
+0x41de mem_tx_power
+0x41df mem_context_number
+0x41e0 mem_250k_freq_enable
+0x41e1 mem_rf_init_data
+0x41e2 mem_app_handshake_flag
+0x41e3 mem_sniff_param_interval
+0x41e5 mem_sniff_param_attempt
+0x41e7 mem_sniff_param_timeout
+0x41e9 mem_cb_check_wakelock
+0x41eb mem_cb_before_hibernate
+0x41ed mem_cb_before_lpm
+0x41ef mem_cb_le_process
+0x41f1 mem_cb_bt_process
+0x41f3 mem_cb_idle_process
+0x41f5 mem_cb_bb_event_process
+0x41f7 mem_cb_discovry_timeout
+0x41f9 mem_cb_att_write
+0x41fb mem_cb_ble_transmit
+0x41fd mem_cb_event_timer
+0x41ff mem_cb_bt_set_mult
+0x4201 mem_cb_spi_flash_write_complate
+0x4203 mem_eeprom_base
+0x4205 mem_unsniff2sniff_timer_count
+0x4206 mem_wake_up_delay_timer
+0x4207 mem_app_connection_options
+0x4208 mem_app_disconn_reason
+0x420a mem_app_disconn_reason_flag
+0x420c mem_lpm_delay_after_sniff
+0x4210 mem_xrecord_mode
+0x4211 mem_eeprom_block_size
+0x4212 mem_spi_init_clk
+0x4213 mem_spi_init_delay_time
+0x4214 mem_spi_ncs_gpio
+0x4215 mem_nv_data_ptr
+0x4217 mem_nv_data_number
+0x4218 mem_queue_ptr
+0x421a mem_ui_led_struct_num
+0x421b mem_ui_led_struct_ptr
+0x421d mem_0_5_adc_io_data
+0x421f mem_1v_adc_hvin_data
+0x4221 mem_2v_adc_vinlpm_data
+0x4223 mem_1v_adc_io_data
+0x4225 mem_5v_adc_hvin_data
+0x4227 mem_3v_adc_vinlpm_data
+0x4229 mem_otp_adc_flag
+0x422b mem_reference_voltage
+0x422d mem_adc_config_flag
+0x422e mem_adc_channel
+0x422f mem_adc_current_value
+0x4231 mem_adc_power_flag//bit0:low power falg ; bit1:no power flag
+0x4232 mem_spi_write_addr
+0x4235 mem_spi_write_ptr
+0x4237 mem_spi_write_len
+0x4239 mem_spi_write_flash_sm
+0x423a mem_eeprom_wp_gpio
+0x423b mem_kscan_ptr
+0x423d mem_key_num_ptr
+0x423d mem_keyscan_ptr
+0x423f mem_power_param_ptr
+0x4241 mem_24g_head_ptr
+0x4243 mem_baud
+0x4245 mem_hci_lt_rx_state
+0x4246 mem_l2cap_xmem_start
+0x4246 mem_l2cap_tx_multi_offset//0 means single packet
+0x4248 mem_sdp_remote_cid
+0x424a mem_rfcomm_remote_cid
+0x424c mem_hid_ctrl_remote_cid
+0x424e mem_hid_int_remote_cid
+0x4250 mem_sdp_state
+0x4251 mem_rfcomm_state
+0x4252 mem_hid_control_state
+0x4253 mem_hid_interrupt_state
+0x4254 mem_spp_state
+0x4255 mem_ML2CAP_comm_id
+0x4256 mem_used_map
+0x4257 mem_tx_fifo0
+0x4257 mem_tx_fifo0_map
+0x4258 mem_tx_fifo0_ptr
+0x425a mem_tx_fifo1
+0x425a mem_tx_fifo1_map
+0x425b mem_tx_fifo1_ptr
+0x425d mem_tx_fifo2
+0x425d mem_tx_fifo2_map
+0x425e mem_tx_fifo2_ptr
+0x4260 mem_tx_fifo3
+0x4260 mem_tx_fifo3_map
+0x4261 mem_tx_fifo3_ptr
+0x4263 mem_tx_fifo_end
+0x4263 mem_l2cap_lpm_txbuf
+0x4363 mem_l2cap_flow_ctrl_flag
+0x4364 mem_l2cap_pending_item
+0x4365 mem_l2cap_xmem_end
+0x4365 mem_le_dsniff
+0x4367 mem_le_conn_interval
+0x4369 mem_le_scan_enable
+0x436a mem_le_scan_interval
+0x436c mem_le_scan_window
+0x436e mem_le_adv_enable
+0x436f mem_le_adv_data_len
+0x4370 mem_le_adv_data
+0x438f mem_le_scan_data_len
+0x4390 mem_le_scan_data
+0x43af mem_le_name_len
+0x43b0 mem_le_name
+0x43ce mem_le_new_map
+0x43d3 mem_le_new_param
+0x43d3 mem_le_new_transmitwindowsize
+0x43d4 mem_le_new_transmitwindowoffset
+0x43d6 mem_le_new_conninterval
+0x43d8 mem_le_new_connslavelatency
+0x43da mem_le_new_connsupervisiontimeout
+0x43dc mem_le_txheader
+0x43dd mem_le_txlen
+0x43de mem_le_txpayload
+0x43e0 mem_le_txcid
+0x43e2 mem_le_l2cap
+0x43e3 mem_le_l2cap_response
+0x43e4 mem_le_txbdy
+0x4403 mem_le_pcnt_tx
+0x4408 mem_le_pcnt_rx
+0x440d mem_le_last_mic
+0x4411 mem_le_ivm
+0x4415 mem_le_ivs
+0x4419 mem_le_ltk
+0x4429 mem_ltk_exists
+0x442a mem_le_rconfirm
+0x443a mem_le_srand
+0x444a mem_le_iat
+0x444b mem_le_rat
+0x444c mem_le_preq
+0x444d mem_le_preq_iocap
+0x444e mem_le_preq_oob
+0x444f mem_le_preq_auth
+0x4450 mem_le_preq_max_keysize
+0x4451 mem_le_preq_init_key_distribution
+0x4452 mem_le_preq_resp_key_distribution
+0x4453 mem_le_pres
+0x4454 mem_le_pres_iocap
+0x4455 mem_le_pres_oob
+0x4456 mem_le_pres_auth
+0x4457 mem_le_pres_max_keysize
+0x4458 mem_le_pres_init_key_distribution
+0x4459 mem_le_pres_resp_key_distribution
+0x445a mem_le_search_handle_start
+0x445c mem_le_search_handle_end
+0x445e mem_le_att_offset
+0x445e mem_le_search_att_type_length
+0x445f mem_le_search_att_type
+0x446f mem_le_notify_handle
+0x4471 mem_le_search_uuid_length
+0x4472 mem_le_search_uuid
+0x4482 mem_le_adv_param
+0x4482 mem_le_adv_interval
+0x4484 mem_le_adv_type
+0x4485 mem_le_adv_own_addr_type
+0x4486 mem_le_adv_direct_addr_type
+0x4487 mem_le_adv_direct_addr
+0x448d mem_le_adv_channel_map
+0x448e mem_le_conn_param
+0x448e mem_le_conn_peer_addr_type
+0x448f mem_le_conn_peer_addr
+0x4495 mem_le_conn_own_addr_type
+0x4496 mem_le_interval_min
+0x4498 mem_le_interval_max
+0x449a mem_le_latency
+0x449c mem_le_timeout
+0x449e mem_le_scan_params
+0x449e mem_le_scan_type
+0x449f mem_le_scan_own_addr_type
+0x44a0 mem_le_lap
+0x44a3 mem_le_uap
+0x44a4 mem_le_nap
+0x44a6 mem_le_local_mtu
+0x44a8 mem_le_remote_mtu
+0x44aa mem_le_skdm
+0x44b2 mem_le_skds
+0x44ba mem_le_init_superto
+0x44bc mem_ui_le_uuid_table
+0x44be mem_le_secure_connect_enable
+0x44bf mem_le_secure_connect_flag
+0x44c0 mem_le_sc_calc
+0x44c1 mem_le_secure_connect_state
+0x44c2 mem_le_sc_confirm_gkey_flag
+0x44c3 mem_le_sc_local_key_invalid
+0x44c4 mem_le_pairing_state
+0x44c5 mem_le_enc_state
+0x44c6 mem_le_pairing_mode
+0x44c7 mem_le_tk
+0x44cb mem_le_ediv
+0x44cd mem_le_rand
+0x44d5 mem_le_irk
+0x44e5 mem_le_transmit_window
+0x44e9 mem_le_configuration
+0x44ea mem_le_fixed_ltk
+0x44fa mem_le_pairing_handle
+0x44fc mem_le_l2cap_size
+0x44fe mem_le_packet_len_recved
+0x44ff mem_le_tx_buff_used
+0x4500 mem_le_tx_ptr0
+0x4502 mem_le_tx_ptr1
+0x4504 mem_le_tx_ptr2
+0x4506 mem_le_tx_ptr3
+0x4508 mem_le_signaling_identifier
+0x4509 mem_le_l2cap_signaling_conn_param_update_rsp_result
+0x450b mem_le_packet_size
+0x450c mem_le_packet_llid
+0x450d mem_le_payload_ptr
+0x450f mem_le_md_count
+0x4510 mem_lmp_version
+0x4513 mem_lmp_subversion
+0x4515 mem_local_name_length
+0x4516 mem_local_name
+0x4519 mem_local_name2
+0x4559 mem_local_name_end
+0x455a mem_unsniff2sniff_timer
+0x455b mem_switch_flag
+0x455c mem_classic_bt_flag
+0x455d mem_pn_dlci
+0x455e mem_pn_max_frame_size
+0x4560 memFCStemp1
+0x4561 memFCStemp2
+0x4562 memFCStemp3
+0x4563 mem_rfcomm_initiator
+0x4564 mem_remote_spp_channel
+0x4565 mem_HIUfcs_SPP
+0x4566 mem_HIUfcs_SPP_WCredits
+0x4567 mem_rfcomm_send_more_pkt
+0x4568 mem_remote_credits
+0x4569 mem_credit_given
+0x456a mem_ms_channel
+0x456b mem_credit_flag
+0x456c mem_rfcomm_max_frame_size
+0x456e mem_rfcomm_credit_init_data
+0x456f mem_cb_receive_spp_data
+0x4571 mem_nl_rx_data_src
+0x4573 mem_nl_rx_len_all
+0x4575 mem_ui_uuid_table
+0x4577 mem_all_uuid_16bits
+0x458d mem_all_uuid_128bits
+0x45af mem_sdp_l2capch_ptr
+0x45b1 mem_sp_local_key_invalid
+0x45b2 mem_le_private_key_256
+0x45d2 mem_le_pubkey_local_x_256
+0x45f2 mem_le_pubkey_local_y_256
+0x4612 mem_sp_private_key
+0x462a mem_sp_pubkey_local
+0x462a mem_sp_pubkey_local_x
+0x4642 mem_sp_pubkey_local_x_end
+0x4642 mem_sp_pubkey_local_y
+0x465a mem_ssp_enable
+0x465b mem_sp_iocap_local
+0x465e mem_sp_iocap_remote
+0x4661 mem_flag_mode_ssp_pin
+0x4662 mem_ssp_mode_flag
+0x4663 mem_authentication_passkey_times
+0x4664 mem_passkey_1bit
+0x4665 mem_flag_pairing_state
+0x4666 mem_ipc_lock_bt
+0x4667 mem_ipc_lock_c51
+0x4668 mem_ipc_fifo_bt2c51
+0x4670 mem_ipc_fifo_c512bt
+0x4678 mem_ui_button_timer
+0x4679 mem_ui_button_last_state
+0x467a mem_ui_timer_last_btclk
+0x467e mem_discovery_timeout_timer_count
+0x4680 mem_hid_handshake_timer_count
+0x4681 memui_reconnect_mode
+0x4682 mem_ui_state_map
+0x4684 mem_ui_profile_supported
+0x4685 mem_ui_button_timeout
+0x4686 mem_ui_button_gpio
+0x4687 mem_discovery_timeout
+0x4689 mem_pin_length
+0x468a mem_pin
+0x469a mem_antl_lpm_interval
+0x469c mem_antl_adv_interval
+0x469e mem_antl_slow_adv_lpm_interval
+0x46a0 mem_antl_slow_adv_adv_interval
+0x46a2 mem_antl_led_style
+0x46a2 mem_antl_led_type
+0x46a3 mem_antl_led_blink_count
+0x46a4 mem_antl_led_gpio
+0x46a5 mem_antl_led_on_time
+0x46a7 mem_antl_led_off_time
+0x46a9 mem_antl_led_cb_on
+0x46ab mem_antl_led_cb_off
+0x46ad mem_antl_buzzer_style
+0x46ad mem_antl_buzzer_type
+0x46ae mem_antl_buzzer_blink_count
+0x46af mem_antl_buzzer_gpio
+0x46b0 mem_antl_buzzer_on_time
+0x46b2 mem_antl_buzzer_off_time
+0x46b4 mem_antl_buzzer_cb_on
+0x46b6 mem_antl_buzzer_cb_off
+0x46b8 mem_antl_fast_adv_led_style
+0x46b8 mem_antl_fast_adv_led_type
+0x46b9 mem_antl_fast_adv_led_blink_count
+0x46ba mem_antl_fast_adv_led_gpio
+0x46bb mem_antl_fast_adv_led_on_time
+0x46bd mem_antl_fast_adv_led_off_time
+0x46bf mem_antl_slow_adv_led_style
+0x46bf mem_antl_slow_adv_led_type
+0x46c0 mem_antl_slow_adv_led_blink_count
+0x46c1 mem_antl_slow_adv_led_gpio
+0x46c2 mem_antl_slow_adv_led_on_time
+0x46c4 mem_antl_slow_adv_led_off_time
+0x46c6 mem_antl_power_starting_led_style
+0x46c6 mem_antl_power_starting_led_type
+0x46c7 mem_antl_power_starting_led_blink_count
+0x46c8 mem_antl_power_starting_led_gpio
+0x46c9 mem_antl_power_starting_led_on_time
+0x46cb mem_antl_power_starting_led_off_time
+0x46cd mem_antl_power_starting_buzzer_style
+0x46d4 mem_antl_power_off_led_style
+0x46d4 mem_antl_power_off_led_type
+0x46d5 mem_antl_power_off_led_link_count
+0x46d6 mem_antl_power_off_led_gpio
+0x46d7 mem_antl_power_off_led_on_time
+0x46d9 mem_antl_power_off_led_off_time
+0x46db mem_antl_power_off_buzzer_style
+0x46db mem_antl_power_off_buzzer_type
+0x46dc mem_antl_power_off_buzzer_link_count
+0x46dd mem_antl_power_off_buzzer_gpio
+0x46de mem_antl_power_off_buzzer_on_time
+0x46e0 mem_antl_power_off_buzzer_off_time
+0x46e2 mem_antl_alert_led_stlye
+0x46e9 mem_antl_alert_buzzer_stlye
+0x46e9 mem_antl_alert_buzzer_type
+0x46ea mem_antl_alert_buzzer_blink_count
+0x46eb mem_antl_alert_buzzer_gpio
+0x46ec mem_antl_alert_buzzer_on_time
+0x46ee mem_antl_alert_buzzer_off_time
+0x46f0 mem_antl_key_led_style
+0x46f0 mem_antl_key_led_type
+0x46f1 mem_antl_key_led_blink_count
+0x46f2 mem_antl_key_led_gpio
+0x46f3 mem_antl_key_led_on_time
+0x46f5 mem_antl_key_led_off_time
+0x46f7 mem_antl_key_buzzer_style
+0x46fe mem_antl_queue_width
+0x46ff mem_antl_queue_depth
+0x4700 mem_antl_queue_curr_num
+0x4701 mem_antl_queue_read_ptr
+0x4702 mem_antl_queue_write_ptr
+0x4703 mem_antl_queue_buff
+0x4753 mem_antl_key_scan_enable
+0x4754 mem_antl_led_num
+0x4755 mem_antl_led_gpio_map
+0x4759 mem_antl_power_param
+0x4759 mem_antl_power_state
+0x475a mem_antl_power_timer
+0x475b mem_antl_power_off_timeout
+0x475c mem_antl_power_starting_timeout
+0x475d mem_antl_power_off_cb
+0x475f mem_antl_power_starting_cb
+0x4761 mem_antl_power_standby_cb
+0x4763 mem_event_button_up_cb
+0x4765 mem_antl_key_num
+0x4766 mem_cb_antl_key
+0x4768 mem_antl_key_conf0
+0x476c mem_antl_key0_press
+0x477b mem_antl_key0_release
+0x478a mem_antl_conn_updata_procedure_state
+0x478b mem_client_characteristic_configuration_descriptor
+0x478d mem_adc_timer
+0x478f mem_antl_conn_update_timer
+0x4790 mem_antl_send_updata_le_param_timer
+0x4791 mem_antl_le_sleep_timer
+0x4793 mem_antl_fast_adv_timer
+0x4795 mem_antl_fast_adv_timeout
+0x4797 mem_antl_le_sleep_timeout
+0x4799 mem_double_click_timer
+0x479a mem_butten_click_cnt
+0x479b mem_antl_led_state
+0x479c mem_antl_buzzer_state
+0x479d mem_antl_key_state
+0x479e mem_antl_lost_mode
+0x479f mem_alarm_config
+0x47a0 mem_alarm_config_notfy_cnt
+0x47a1 mem_buzzer_pwm_conf
+0x47a7 mem_adc_timeout
+0x47a9 mem_voltage_remain_percent
+0x47aa mem_battery_calculate_set
+0x47aa mem_battery_full_voltage
+0x47ac mem_battery_empty_voltage
+0x47ae mem_battery_low_voltage
+0x47b0 mem_battery_current_voltage
+0x47b2 mem_rx_window_sniff_inc
+0x47b4 mem_interval_increment
+0x47b6 mem_antl_le_interval_min
+0x47b8 mem_antl_le_interval_max
+0x47ba mem_antl_le_latency
+0x47bc mem_antl_le_timeout
+0x47be mem_antl_le_unnormal_interval_min
+0x47c0 mem_antl_le_unnormal_interval_max
+0x47c2 mem_antl_le_unnormal_latency
+0x47c4 mem_antl_le_unnormal_timeout
+0x47c6 mem_AntiLost_le_att_list
+0x469a mem_car_hard_soft_switch
+0x469b mem_car_queue_each_size
+0x469c mem_car__queue_length
+0x469d mem_car_queue_curr_num
+0x469e mem_car_queue_read_ptr
+0x469f mem_car_queue_write_ptr
+0x46a0 mem_car_queue_ele
+0x4718 mem_car_pop_queue_buff
+0x472c mem_car_led_num
+0x472d mem_car_led_map
+0x4737 mem_car_style1_led_type
+0x4738 mem_car_style1_blink_count
+0x4739 mem_car_style1_struct_led_gpio
+0x473a mem_car_style1_on_time
+0x473c mem_car_style1_off_time
+0x473e mem_car_style1_cb_ledon
+0x4740 mem_car_style1_cb_ledoff
+0x4742 mem_car_style2_led_type
+0x4743 mem_car_style2_blink_count
+0x4744 mem_car_style2_struct_led_gpio
+0x4745 mem_car_style2_on_time
+0x4747 mem_car_style2_off_time
+0x4749 mem_car_style2_cb_ledon
+0x474b mem_car_style2_cb_ledoff
+0x474d mem_le_receive_data
+0x474d mem_le_receive_packet_head
+0x474f mem_le_receive_cmd
+0x4750 mem_le_receive_length
+0x4752 mem_le_receive_payload
+0x475c mem_le_receive_checksum
+0x475d mem_motor1_status
+0x475e mem_motor1_speed
+0x475f mem_motor2_status
+0x4760 mem_motor2_speed
+0x4761 mem_motor3_status
+0x4762 mem_motor3_speed
+0x4763 mem_motor1_pwm_set
+0x4763 mem_motor1_pwm_pin1_set
+0x4764 mem_motor1_pwm_pin2_set
+0x4765 mem_motor1_pwm_pin_set
+0x4766 mem_motor1_pwm_channel_set
+0x4767 mem_motor1_pwm_freq_set
+0x476a mem_motor1_pwm_dute_set
+0x476b mem_motor2_pwm_set
+0x476b mem_motor2_pwm_pin1_set
+0x476c mem_motor2_pwm_pin2_set
+0x476d mem_motor2_pwm_pin_set
+0x476e mem_motor2_pwm_channel_set
+0x476f mem_motor2_pwm_freq_set
+0x4772 mem_motor2_pwm_dute_set
+0x4773 mem_motor3_pwm_set
+0x4773 mem_motor3_pwm_pin1_set
+0x4774 mem_motor3_pwm_pin2_set
+0x4775 mem_motor3_pwm_pin_set
+0x4776 mem_motor3_pwm_channel_set
+0x4777 mem_motor3_pwm_freq_set
+0x477a mem_motor3_pwm_dute_set
+0x477b mem_motor_select_p_n
+0x477c mem_car_motor_status
+0x477d mem_car_motor_speed
+0x477e mem_motor_pwm_set
+0x477e mem_motor_pwm_pin1_set
+0x477f mem_motor_pwm_pin2_set
+0x4780 mem_motor_pwm_pin_set
+0x4781 mem_motor_pwm_channel_set
+0x4782 mem_motor_pwm_freq_set
+0x4785 mem_motor_pwm_dute_set
+0x4786 mem_ir_rx_gpio
+0x4787 mem_ir_data
+0x4789 mem_ir_rx_buf
+0x478b mem_ir_receive_clkn
+0x478f mem_ir_notify_data
+0x4792 mem_ir_notify_data_head
+0x4797 mem_ir_notify_data_payload
+0x4799 mem_ir_notify_data_check_sum
+0x479a mem_car_ir_breakdown_check_timer
+0x479b mem_car_ir_breakdown_flag
+0x479c mem_car_led_control
+0x479c mem_car_led1_status
+0x479d mem_car_led2_status
+0x479e mem_car_led3_status
+0x479f mem_car_led4_status
+0x47a0 mem_car_led5_status
+0x47a1 mem_car_led6_status
+0x47a2 mem_car_led7_status
+0x47a3 mem_car_led8_status
+0x47a4 mem_car_led_control_timer
+0x47a5 mem_car_led_blink_status
+0x47a6 mem_car_led_no
+0x47a7 mem_car_info_request
+0x47aa mem_car_info_request_head
+0x47af mem_car_info_request_payload
+0x47b7 mem_car_info_request_checksum
+0x47b8 mem_car_config_param
+0x47b8 mem_car_config_setting_flag
+0x47b9 mem_car_config_device_select
+0x47ba mem_car_config_motor_layout
+0x47bb mem_car_config_ir_enable
+0x47bc mem_car_config_ir_rx_gpio
+0x47bd mem_car_config_pairing_led_conn_status
+0x47be mem_car_config_pairing_led_gpio
+0x47bf mem_car_config_led_num
+0x47c0 mem_car_config_blood_led_gpio
+0x47c0 mem_car_config_blood_led1_gpio
+0x47c1 mem_car_config_blood_led2_gpio
+0x47c2 mem_car_config_blood_led3_gpio
+0x47c3 mem_car_config_blood_led4_gpio
+0x47c4 mem_car_config_blood_led5_gpio
+0x47c5 mem_car_config_blood_led6_gpio
+0x47c6 mem_car_config_blood_led7_gpio
+0x47c7 mem_car_config_blood_led8_gpio
+0x47c8 mem_car_config_bat_notify_enable
+0x47c9 mem_car_config_low_voltage_led_gpio
+0x47ca mem_car_config_low_voltage_percent
+0x47cb mem_car_config_soft_switch_enable
+0x47cc mem_car_config_soft_switch_gpio
+0x47cd mem_car_notify_vdd_count
+0x47ce mem_car_notify_vdd_timer
+0x47cf mem_car_notify_vdd_value_last
+0x47d0 mem_car_notify_vdd_percent
+0x47d1 mem_car_working_flag
+0x47d2 mem_low_bat_flag
+0x47d3 mem_notify_bat_packet
+0x47d6 mem_notify_bat_head
+0x47db mem_notify_bat_payload
+0x47dc mem_notify_bat_check_sum
+0x47dd mem_vdd_notify_flag
+0x47de mem_car_current_vdd_value_temp
+0x47e0 mem_car_last_vdd_value
+0x47e2 mem_vdd_calculate_set
+0x47e2 mem_vdd_full_vol
+0x47e4 mem_vdd_empty_vol
+0x47e6 mem_vdd_low_vol
+0x47e8 mem_vdd_now_vol
+0x47ea mem_car_24g_status
+0x47eb mem_car_24g_no_data_timeout_count
+0x47ed mem_car_24g_no_data_timeout_timer
+0x47ef mem_car_24g_ir_receive_attack_count
+0x47f0 mem_car_24g_go_die_flag
+0x47f1 mem_car_attack_shake_timer
+0x47f2 mem_car_attack_shake_flag
+0x47f3 mem_car_soft_power
+0x47f3 mem_car_power_state
+0x47f4 mem_car_power_timer
+0x47f5 mem_car_power_off_timeout
+0x47f6 mem_car_power_starting_timeout
+0x47f7 mem_car_power_off_cb
+0x47f9 mem_car_power_starting_cb
+0x47fb mem_car_power_standby_cb
+0x47fd mem_car_ui_button_up_cb
+0x47ff mem_car_le_att_list
+0x49f3 mem_car_moto1_blank_timer
+0x49f4 mem_car_moto2_blank_timer
+0x49f5 mem_car_moto3_blank_timer
+0x49f6 mem_car_24g_received_pac
+0x49f7 mem_24g_car_head_ptr
+0x469a mem_light_pwm0
+0x469b mem_light_pwm1
+0x469c mem_light_pwm2
+0x469d mem_light_pwm3
+0x469e mem_light_pwm4
+0x469f mem_light_pwm5
+0x46a0 mem_light_pairing_enable
+0x46a1 mem_light_pairing_timer
+0x46a3 mem_light_cnum
+0x46a4 mem_light_next_record
+0x46a5 mem_light_clist
+0x46f5 mem_light_crr_cmd_count
+0x46f6 mem_curr_packet_num
+0x469a mem_lightc_led_gpio
+0x469b mem_lightc_row
+0x46a1 mem_lightc_col
+0x46a7 mem_adv_time
+0x46a8 mem_cmd0_string
+0x46bc mem_cmd1_string
+0x46d0 mem_cmd2_string
+0x46e4 mem_cmd3_string
+0x46f8 mem_cmd4_string
+0x470c mem_cmd5_string
+0x4720 mem_cmd6_string
+0x4734 mem_cmd7_string
+0x4748 mem_cmd8_string
+0x475c mem_cmd9_string
+0x4770 mem_cmd10_string
+0x4784 mem_cmd11_string
+0x4798 mem_cmd12_string
+0x47ac mem_cmd13_string
+0x47c0 mem_cmd14_string
+0x47d4 mem_cmd15_string
+0x47e8 mem_cmd16_string
+0x47fc mem_cmd17_string
+0x4810 mem_cmd18_string
+0x4824 mem_cmd19_string
+0x4838 mem_cmd20_string
+0x469a mem_soft_version_num
+0x469c mem_module_wake_up_gpio
+0x469d mem_module_state_gpio
+0x469e mem_module_connect_state_gpio
+0x469f mem_current_packet_length
+0x46a1 mem_module_state
+0x46a2 mem_module_mcu_wake_pin
+0x46a3 mem_module_mcu_wake_delay_us
+0x46a7 mem_module_spp_lpm_mult
+0x46a8 mem_module_le_lpm_mult
+0x46a9 mem_module_bluetooth_stauts_by_command
+0x46aa mem_module_uart_rx_buffer
+0x46ac mem_module_uart_rx_buffer_end
+0x46ae mem_module_uart_tx_buffer
+0x46b0 mem_module_uart_tx_buffer_end
+0x46b2 mem_module_read_vdd_flag
+0x46b3 mem_module_read_vdd_count
+0x46b4 mem_module_vdd_quotient
+0x46b5 mem_module_vdd_remainder
+0x46b6 mem_module_le_rx_data_len
+0x46b7 mem_module_le_rx_data_address
+0x46b9 mem_module_le_rx_data_handle
+0x46bb mem_module_data_write_handle
+0x46bd mem_module_data_write_handle2
+0x46bf mem_module_flag
+0x46c0 mem_module_hci_notify_len
+0x46c1 mem_module_hci_notify_handle
+0x46c3 mem_module_hci_nofiy_addr
+0x46c5 mem_last_transmite_clock
+0x46c9 mem_module_uuid_list
+0x47f5 mem_module_uuid_list_end
+0x47f5 mem_module_le_att_list
+0x4a4d mem_module_le_att_list_end
+0x4a4d mem_module_nv_data
+0x4a4d mem_module_nv_data0
+0x4a6f mem_module_nv_data1
+0x4a91 mem_module_nv_data2
+0x4ab3 mem_module_nv_data3
+0x4ad5 mem_module_nv_data4
+0x469a mem_remote_car_hard_soft_switch
+0x469b mem_remote_car_queue_each_size
+0x469c mem_remote_car_queue_length
+0x469d mem_remote_car_queue_curr_num
+0x469e mem_remote_car_queue_read_ptr
+0x469f mem_remote_car_queue_write_ptr
+0x46a0 mem_remote_car_queue_ele
+0x46fa mem_remote_style_led_type
+0x46fb mem_remote_style_blink_count
+0x46fc mem_remote_style_struct_led_gpio
+0x46fd mem_remote_style_on_time
+0x46ff mem_remote_style_off_time
+0x4701 mem_remote_style_cb_ledon
+0x4703 mem_remote_style_cb_ledoff
+0x4705 mem_remote_car_led_num
+0x4706 mem_remote_car_led_map
+0x470e mem_remote_car_keyscan
+0x470e mem_remote_car_key_num
+0x470f mem_cb_remote_car_keyscan
+0x4711 mem_remote_car_key_conf0
+0x4711 mem_remote_car_key_conf0_pin
+0x4712 mem_remote_car_key_conf1
+0x4712 mem_remote_car_key_conf1_pin
+0x4713 mem_remote_car_key_conf2
+0x4713 mem_remote_car_key_conf2_pin
+0x4714 mem_remote_car_key_conf3
+0x4714 mem_remote_car_key_conf3_pin
+0x4715 mem_remote_car_key_conf4
+0x4715 mem_remote_car_key_conf4_pin
+0x4716 mem_remote_car_key_conf5
+0x4716 mem_remote_car_key_conf5_pin
+0x4717 mem_remote_car_key_conf6
+0x4717 mem_remote_car_key_conf6_pin
+0x4718 mem_rocker_negative_flag
+0x4719 mem_rocker_work_status
+0x471a mem_current_vdd_value_default_mid_x
+0x471c mem_current_vdd_value_default_mid_y
+0x471e mem_current_vdd_value_default_mid_temp
+0x4720 mem_current_vdd_default_range
+0x4722 mem_rocker_last_status
+0x4724 mem_rocker_status
+0x4724 mem_rocker_x_status
+0x4725 mem_rocker_y_status
+0x4726 mem_remote_car_config_param
+0x4726 mem_remote_car_config_setting_flag
+0x4727 mem_remote_car_config_key_map
+0x4728 mem_remote_car_config_layout
+0x4729 mem_remote_car_config_connect_led_gpio
+0x472a mem_remote_car_config_check_way
+0x472b mem_remote_car_config_soft_switch_enable
+0x472c mem_remote_car_config_soft_switch_gpio
+0x472d mem_remote_car_config_timeout_shutdown_enable
+0x472e mem_remote_car_24g_motor_packet
+0x472e mem_remote_car_24g_motor_packet_lenght
+0x472f mem_remote_car_24g_motor_send_packet_head
+0x4731 mem_remote_car_24g_motor_send_cmd
+0x4732 mem_remote_car_24g_motor_send_length
+0x4734 mem_remote_car_24g_motor_send_payload
+0x4734 mem_remote_car_24g_motor1_payload
+0x4736 mem_remote_car_24g_motor2_payload
+0x4738 mem_remote_car_24g_motor3_payload
+0x473a mem_remote_car_24g_motor_send_checksum
+0x473b mem_remote_car_24g_fire_packet
+0x473b mem_remote_car_24g_fire_packet_lenght
+0x473c mem_remote_car_24g_fire_send_packet_head
+0x473e mem_remote_car_24g_fire_send_cmd
+0x473f mem_remote_car_24g_fire_send_length
+0x4741 mem_remote_car_24g_fire_send_payload
+0x4743 mem_remote_car_24g_fire_send_checksum
+0x4744 mem_remote_car_24g_tx_temp
+0x4753 mem_remote_car_no_data_timeout
+0x4755 mem_remote_car_no_data_timer
+0x4757 mem_remote_car_soft_power
+0x4757 mem_remote_car_power_state
+0x4758 mem_remote_car_power_timer
+0x4759 mem_remote_car_power_off_timeout
+0x475a mem_remote_car_power_starting_timeout
+0x475b mem_remote_car_power_off_cb
+0x475d mem_remote_car_power_starting_cb
+0x475f mem_remote_car_power_standby_cb
+0x4761 mem_remote_key_status
+0x4762 mem_remote_car_24g_status
+0x4763 mem_remote_car_24g_auto_work_step
+0x4764 mem_remote_car_24g_pair_success_flag
+0x4765 mem_remote_car_24g_enter_lpm_enable
+0x4766 mem_remote_car_empty_packet
+0x4767 mem_24g_RC_head_ptr
+0x469a mem_shutter_bluetooth_type
+0x469b mem_shutter_config_enable
+0x469c mem_shutter_config_otp_base_address
+0x469e mem_shutter_config_size
+0x469f mem_shutter_config_select_gpio1
+0x46a0 mem_shutter_config_select_gpio2
+0x46a1 mem_shutter_config_select_gpio3
+0x46a2 mem_shutter_config_user_otp_address
+0x46a4 mem_shutter_config_eeprom_offset_addr
+0x46a6 mem_shutter_config_eeprom_start_flag
+0x46a8 mem_shutter_config_user_size
+0x46a9 mem_shutter_config_label
+0x46aa mem_shutter_config_otp_addr
+0x46ac mem_classic_shutter_cable_unplug_conut
+0x46ad mem_classic_shutter_hid_disconn_count
+0x46ae mem_classic_shutter_random_mac_offset_addr
+0x46b0 mem_ble_shutter_enable_notify
+0x46b1 mem_ble_shutter_reconn_dav_interval
+0x46b3 mem_ble_shutter_discovery_adv_interval
+0x46b5 mem_ble_shutter_reconn_timeout
+0x46b7 mem_ble_shutter_reconn_timer
+0x46b9 mem_ble_shutter_reconn_blink_on_time
+0x46bb mem_ble_shutter_reconn_blink_off_time
+0x46bd mem_ble_shutter_discovery_blink_on_time
+0x46bf mem_ble_shutter_discovery_blink_off_time
+0x46c1 mem_ble_shutter_interval_min
+0x46c3 mem_ble_shutter_interval_max
+0x46c5 mem_ble_shutter_latency
+0x46c7 mem_ble_shutter_timeout
+0x46c9 mem_ble_shutter_interval_min_new
+0x46cb mem_ble_shutter_interval_max_new
+0x46cd mem_ble_shutter_latency_new
+0x46cf mem_ble_shutter_timeout_new
+0x46d1 mem_classic_shutter_discovery_timeout
+0x46d3 mem_classic_shutter_connect_timeout
+0x46d5 mem_ble_shutter_discovery_timeout
+0x46d7 mem_ble_shutter_connect_timeout
+0x46d9 mem_shutter_sleep_timeout
+0x46db mem_shutter_sleep_timer
+0x46dd mem_shutter_hard_soft_switch_case
+0x46de mem_shutter_soft_switch_button_gpio
+0x46df mem_shutter_soft_switch_power_state
+0x46e0 mem_shutter_soft_switch_poweron_time
+0x46e1 mem_shutter_soft_switch_poweroff_time
+0x46e2 mem_shutter_soft_switch_poweron_callback_function
+0x46e4 mem_shutter_soft_switch_poweroff_callback_function
+0x46e6 mem_shutter_keyscan
+0x46e6 mem_shutter_key_num
+0x46e7 mem_cb_shutter_keycan
+0x46e9 mem_shutter_key_conf0
+0x46ea mem_shutter_key_conf1
+0x46eb mem_shutter_key_conf2
+0x46ec mem_shutter_key_conf3
+0x46ed mem_shutter_key_conf4
+0x46ee mem_shutter_key_conf5
+0x46ef mem_shutter_key_conf6
+0x46f0 mem_shutter_key_conf7
+0x46f1 mem_key0_press
+0x46f6 mem_key1_press
+0x46fb mem_key2_press
+0x4700 mem_key3_press
+0x4705 mem_key4_press
+0x470a mem_key5_press
+0x470f mem_key6_press
+0x4714 mem_key7_press
+0x4719 mem_key0_release
+0x471e mem_key1_release
+0x4723 mem_key2_release
+0x4728 mem_key3_release
+0x472d mem_key4_release
+0x4732 mem_key5_release
+0x4737 mem_key6_release
+0x473c mem_key7_release
+0x4741 mem_ble_data_buffer1
+0x4746 mem_ble_data_buffer2
+0x474b mem_ble_data_buffer3
+0x4750 mem_ble_data_buffer4
+0x4755 mem_ble_data_buffer5
+0x475a mem_ble_data_buffer6
+0x475f mem_ble_data_buffer7
+0x4764 mem_ble_data_buffer8
+0x4769 mem_ble_data_buffer9_58
+0x479b mem_classic_data_buffer
+0x47a0 mem_classic_data_buffer1
+0x47a5 mem_classic_data_buffer2
+0x47aa mem_classic_data_buffer3
+0x47af mem_classic_data_buffer4
+0x47b4 mem_classic_data_buffer5
+0x47b9 mem_classic_data_buffer6
+0x47be mem_classic_data_buffer7
+0x47c3 mem_classic_data_buffer8
+0x47c8 mem_classic_data_buffer9_58
+0x47fa mem_queue_each_size
+0x47fb mem_queue_length
+0x47fc mem_queue_curr_num
+0x47fd mem_queue_read_ptr
+0x47fe mem_queue_write_ptr
+0x47ff mem_queue_ele
+0x481f mem_shutter_nv_data
+0x48c9 mem_shutter_led_struct_app_led
+0x48c9 mem_shutter_led_struct_app_led_type
+0x48ca mem_shutter_led_struct_app_led_blink_count
+0x48cb mem_shutter_led_struct_app_led_gpio
+0x48cc mem_shutter_led_struct_app_led_on_time
+0x48ce mem_shutter_led_struct_app_led_off_time
+0x48d0 mem_shutter_led_struct_app_led_on_callback
+0x48d2 mem_shutter_led_struct_app_led_off_callback
+0x48d4 mem_shutter_power_off_led_style
+0x48d4 mem_shutter_power_off_led_style_type
+0x48d5 mem_shutter_power_off_led_style_blink_count
+0x48d6 mem_shutter_power_off_led_style_gpio
+0x48d7 mem_shutter_power_off_led_style_on_time
+0x48d9 mem_shutter_power_off_led_style_off_time
+0x48db mem_shutter_power_off_led_style_on_callback
+0x48dd mem_shutter_power_off_led_style_off_callback
+0x48df mem_shutter_soft_swtich_botton_down
+0x48e0 mem_shutter_soft_swtich_led_struct_temp
+0x48eb mem_shutter_power_off_timeout
+0x48ec mem_shutter_power_off_timer
+0x469a mem_mouse_key
+0x469b mem_mouse_x
+0x469d mem_mouse_y
+0x469f mem_mouse_z
+0x46a0 mem_mouse_tz
+0x46a1 mem_mouse_xy_h
+0x46a2 mem_sensor_shutter_hi
+0x46a3 mem_sensor_shutter_lo
+0x46a4 mem_sensor_smart_flag
+0x46a5 mem_sensor_squal_reg
+0x46a6 mem_sensor_iqc
+0x46a7 mem_mouse_move_flag
+0x46a8 mem_mouse_direct_timeout
+0x46aa mem_mouse_no_data_timeout
+0x46ac mem_mouse_discovery_timer
+0x46ae mem_mouse_direct_timer
+0x46b0 mem_mouse_no_data_timer
+0x46b2 mem_mouse_blank_data_timer
+0x46b4 mem_mouse_send_blank_timer
+0x46b5 mem_mouse_cpi_count
+0x46b6 mem_mouse_dpi_button_state
+0x46b7 mem_wheel_tb_old_pinlevel
+0x46b8 mem_wheel_tb_new_pinlevel
+0x46b9 mem_wheel_tog
+0x46ba mem_mouse_tz_data
+0x46bb mem_mouse_tz_data_count
+0x46bc mem_mouse_tz_data_count1
+0x46bd mem_mwheel_b_old_pinlevel
+0x46be mem_mwheel_b_new_pinlevel
+0x46bf mem_mwheel_tog
+0x46c0 mem_mouse_z_data
+0x46c1 mem_mouse_z_data_count
+0x46c2 mem_mouse_z_data_count1
+0x46c3 mem_reconn_mode
+0x46c4 mem_mouse_statue_led_timer
+0x46c5 mem_le_connect_status_flag
+0x46c6 mem_le_start_encrypt_timer
+0x46c7 mem_device_addr_temp
+0x46ce mem_adc_read_timer
+0x46cf mem_adc_low_volatage_led_timer_count
+0x46d0 mem_adc_reference_voltage
+0x46d2 mem_device_number
+0x46d3 mem_mouse_flag
+0x46d5 mem_mouse_function_enable
+0x46d7 mem_combination_select_device_timer_init
+0x46d8 mem_combination_select_device_count
+0x46d9 mem_select_device_button_statue
+0x46da mem_combination_ui_button_count
+0x46db mem_bt_discovey_button_statue
+0x46dc mem_sensor_reset_gpio
+0x46dd mem_sensor_id1
+0x46de mem_sensor_id2
+0x46df mem_mouse_dpi_led_delay_count
+0x46e0 mem_config_sensor_type
+0x46e1 mem_config_sensor_motion
+0x46e2 mem_lbutton_gpio
+0x46e3 mem_rbutton_gpio
+0x46e4 mem_mbutton_gpio
+0x46e5 mem_bk_button_gpio
+0x46e6 mem_fw_button_gpio
+0x46e7 mem_dpi_button_gpio
+0x46e8 mem_whee_a_data_gpio
+0x46e9 mem_whee_b_data_gpio
+0x46ea mem_whee_ta_data_gpio
+0x46eb mem_whee_tb_data_gpio
+0x46ec mem_config_bt_button_gpio
+0x46ed mem_config_select_device_button_gpio
+0x46ee mem_config_paraing_led_gpio
+0x46ef mem_config_low_voltage_alarm_gpio
+0x46f0 mem_config_device1_led_gpio
+0x46f1 mem_config_device2_led_gpio
+0x46f2 mem_config_device3_led_gpio
+0x46f3 mem_sensor_data_gpio
+0x46f4 mem_dpi_led_gpio
+0x46f5 mem_config_function_enable
+0x46f6 mem_config_sensor_angle
+0x46f7 mem_select_sensor_angle_gpio
+0x46f8 mem_select_adc_gpio
+0x46f9 mem_config_end
+0x46f9 mem_btclk_sensor
+0x46fd mem_wire_usb_interval
+0x46fe mem_mouse_mode_flag
+0x46ff mem_usb_addr
+0x4700 mem_flash_base
+0x4703 mem_24g_device_number
+0x4704 mem_24g_enter_lpm_timer
+0x4705 mem_mouse_1step_up_count
+0x4706 mem_mouse_2step_up_count
+0x4707 mem_24g_pairing_timer_count
+0x4709 mem_mouse_vdd_calculate_set
+0x4709 mem_mouse_vdd_full_vol
+0x470b mem_mouse_vdd_empty_vol
+0x470d mem_mouse_vdd_low_vol
+0x470f mem_mouse_vdd_now_vol
+0x4711 mem_mouse_sensor_timer_count
+0x4712 mem_sensor_led_style
+0x4713 mem_mouse_led_type
+0x4714 mem_mouse_blink_count
+0x4715 mem_mouse_struct_led_gpio
+0x4716 mem_mouse_on_time
+0x4718 mem_mouse_off_time
+0x471a mem_mouse_cb_ledon
+0x471c mem_mouse_cb_ledoff
+0x471e mem_reconn_times
+0x471f mem_reconn_times_init
+0x4720 mem_mouse_information_start
+0x4720 mem_device_flag
+0x4721 mem_device1_type
+0x4722 mem_device1_addr
+0x4728 mem_device1_link_key
+0x4738 mem_device1_locall_addr
+0x473e mem_device2_type
+0x473f mem_device2_addr
+0x4745 mem_device2_link_key
+0x4755 mem_device2_locall_addr
+0x475b mem_device3_type
+0x475c mem_device3_addr
+0x4762 mem_device3_link_key
+0x4772 mem_device3_locall_addr
+0x4778 mem_store_flag
+0x477a mem_mouse_dpi
+0x477b mem_mouse_24g_addr
+0x477f mem_mouse_information_end
+0x477f mem_mouse_dpi_seting
+0x477f mem_320x_dpi_1
+0x4780 mem_320x_dpi_2
+0x4781 mem_320x_dpi_3
+0x4782 mem_320x_dpi_4
+0x4783 mem_3212_dpi_1
+0x4784 mem_3212_dpi_2
+0x4785 mem_3212_dpi_3
+0x4786 mem_3212_dpi_4
+0x4787 mem_3610_dpi_1
+0x4788 mem_3610_dpi_2
+0x4789 mem_3610_dpi_3
+0x478a mem_3610_dpi_4
+0x478b mem_mouse_24g_enter_lpm_enable
+0x478c mem_le_rx_window_inc
+0x478e mem_empty_count
+0x478f mem_rf_init_data_new
+0x479c mem_mouse_clear_sensor_data_flag
+0x479d mem_mouse_null_enter_hibernate_flag
+0x479e mem_mouse_null_enter_hibernate_timer
+0x479f mem_mouse_le_reconnect_flag
+0x47a0 mem_mouse_data_queue
+0x47c1 mem_mouse_data_queue_num
+0x47c2 mem_random_addr_increase_count
+0x47c4 mem_mouse_le_conn_param_reject
+0x47c5 mem_lpm_mult_init
+0x47c6 mem_mouse_le_uuid_sup
+0x4806 mem_mouse_wheel_trigger
+0x4807 mem_mouse_wheel_trigger_timer
+0x4808 mem_mouse_enter_sniff_count
+0x4809 mem_mouse_send_switch_req_timer
+0x480a mem_le_tx_buffer0_omemalloc
+0x4825 mem_le_tx_buffer1_omemalloc
+0x4840 mem_le_tx_buffer2_omemalloc
+0x485b mem_le_tx_buffer3_omemalloc
+0x4876 mem_mouse_uuid_list
+0x4afc mem_lmi_opcode_temp
+0x4afd mem_mouse_adc_last_low_voltage_flag
+0x4afe mem_mouse_init_sensor_reset_flag
+0x4aff mem_bt_rcvd_switch_req_accept
+0x4b00 mem_bt_send_max_slot_req_accept_after_switch
+0x4b01 mem_bt_send_lmp_setup_complete
+0x4b02 mem_l2cap_rcv
+0x4b03 mem_mouse_bt_boot_mode
+0x4b04 mem_mouse_bt_boot_data
+0x4b09 mem_mouse_bt_send_first_package_timer
+0x4b0a mem_mouse_bt_send_first_package_flag
+0x4b0b mem_mouse_asm_flag
+0x4b0c mem_mouse_x_pre
+0x4b0e mem_mouse_y_pre
+0x4b10 mem_le_adv_swift_pair
+0x4b23 mem_bt_125hz_cnt
+0x4b24 mem_mouse_send_secutiry_request_timer
+0x4b25 mem_le_send_security_request_flag
+0x4b26 mem_power_on_flag
+0x4b27 mem_m_key
+0x4b28 mem_m_x
+0x4b2a mem_m_y
+0x4b2c mem_m_z
+0x4b2d mem_m_tz
+0x4b2e mem_24g_matrix_cnt
+0x4b2f mem_24g_rxbuf
+0x4b51 mem_24g_txbuf
+0x4b71 mem_24g_txpayload
+0x4b93 mem_24g_rxpayload
+0x4bb3 mem_24g_rxdata_length
+0x4bb4 mem_24g_pid
+0x4bb5 mem_24g_datalen
+0x4bb6 mem_24g_data_type
+0x4bb7 mem_24g_txlen
+0x4bb8 mem_24g_rx_window
+0x4bba mem_24g_ensure
+0x4bbb mem_24g_txfail_cnt
+0x4bbd mem_24g_get_ack_fail
+0x4bbe mem_24g_retry
+0x4bbf mem_24g_ch
+0x4bc0 mem_24g_current_ch_number
+0x4bc1 mem_24g_paring_addr
+0x4bc5 mem_24g_pairing_sm
+0x4bc6 mem_24g_ch_map1
+0x4bca mem_24g_ch_map2
+0x4bce mem_24g_ch_map3
+0x4bd2 mem_24g_ch_map4
+0x4bd6 mem_24g_tx_btclk
+0x4bda mem_24g_interval
+0x4bdb mem_24g_interval_min
+0x4bdc mem_24g_interval_max
+0x4bdd mem_24g_addr
+0x4be1 mem_24g_abort_pac
+0x4be2 mem_24g_check_dongle_times
+0x4be4 mem_24g_enter_hibernate
+0x4bec mem_24g_device_addr
+0x4bf0 mem_24g_pac_index
+0x4bf1 mem_24g_no_ack
+0x4bf2 mem_24g_sta_crc
+0x4bf5 mem_24g_last_crc
+0x4bf8 mem_24g_sta_pid
+0x4bf9 mem_24g_last_pid
+0x4bfa mem_24g_max_retry
+0x4bfb mem_24g_mode
+0x4bfc mem_24g_rxdata_temp
+0x4c1e mem_24g_rx_addr
+0x4c22 mem_dongle_mode_init
+0x4c23 mem_dongle_work_mode
+0x4c24 mem_dongle_ms_bind_step
+0x4c25 mem_dongle_kb_bind_step
+0x4c26 mem_dongle_bind_device_status
+0x4c27 mem_24g_bind_payload
+0x4c2f mem_24g_abort_packet
+0x4c30 mem_24g_rf_laststa
+0x4c31 mem_24g_hop_btclk
+0x4c35 mem_24g_hop_interval
+0x4c36 mem_24g_mode_switch
+0x4c37 mem_24g_ackpayload_enable
+0x4c38 mem_24g_hop_packet
+0x4c39 mem_24g_pair_mode
+0x4c3a mem_24g_nodata_timer_enable
+0x4c3b mem_24g_time_slice
+0x4c3c mem_24g_kb_data_sta_data
+0x4c44 mem_24g_kb_data_last_data
+0x4c4c mem_24g_kb_multikey_sta_data
+0x4c4f mem_24g_kb_multikey_last_data
+0x4c52 mem_24g_kb_blank_data_enable
+0x4c53 mem_24g_kb_mul_blank_data_enable
+0x4c54 mem_24g_ms_blank_data_enable
+0x4c55 mem_24g_kb_addr
+0x4c59 mem_24g_ms_addr
+0x4c5d mem_24g_dg_last_ch
+0x4c5e mem_24g_dg_ch_number
+0x4c5f mem_24g_dg_config_ch_once
+0x4c60 mem_24g_kb_last_ch
+0x4c61 mem_24g_kb_ch_number
+0x4c62 mem_24g_kb_config_ch_once
+0x4c63 mem_24g_ms_last_ch
+0x4c64 mem_24g_ms_ch_number
+0x4c65 mem_24g_ms_config_ch_once
+0x4c66 mem_24g_syncword
+0x4c68 mem_24g_syncword_crc8
+0x4c69 mem_24g_get_syncword_crc8
+0x4c6a mem_24g_ota_sta_pid
+0x4c6c mem_tx_power_temp
+0x4c6d mem_rssi_hex
+0x4c6e mem_rssi_noise_avg
+0x4c6f mem_rssi_noise_index
+0x4c70 mem_rssi_signal_index
+0x4c71 mem_rssi_noise_dg_avg
+0x4c72 mem_rssi_noise_kb_avg
+0x4c73 mem_rssi_noise_ms_avg
+0x4c74 mem_rssi_noise_dg_index
+0x4c75 mem_rssi_noise_kb_index
+0x4c76 mem_rssi_noise_ms_index
+0x4c77 mem_rssi_signal_buf
+0x4c7f mem_queue_ele_num
+0x4c80 mem_queue_read
+0x4c82 mem_queue_write
+0x4c84 mem_queue_start
+0x4c84 mem_data_ele0
+0x4ca4 mem_data_ele1
+0x4cc4 mem_data_ele2
+0x4ce4 mem_queue_end
+0x4ce4 mem_queue_temp
+0x4ce6 mem_cb_24g_data
+0x4ce8 mem_24g_hop_fastly_cnt
+0x4ce9 mem_24g_hop_pac_retry
+0x4cea mem_24g_rf_hop_ch
+0x4ceb mem_24g_rf_last_sta
+0x4cec mem_24g_rf_work_stage
+0x4ced mem_24g_sync_cnt
+0x4cee mem_power_ctrl_pac_succ_cnt
+0x4cef mem_rssi_avg_received
+0x4cf0 mem_rssi_hex_received
+0x4cf1 mem_power_ctrl_level
+0x4cf2 mem_seqi
+0x4cf3 mem_24g_auto_paring_switch
+0x4cf4 mem_24g_paccnt
+0x4cf5 mem_24g_transmit_by_interrupt
+0x4cf6 mem_24g_transmit_by_interrupt_exit_count
+
+	width = 32
+	const length = 12000
+
+	/* ========= memory ============== */
+0x0000 mem_le_adv_transmit
+0x0001 mem_le_adv_waitcnt
+0x0002 mem_le_adv_rcv
+0x0003 mem_le_req_rcv
+0x0004 mem_le_scanrsp_rcv
+0x0005 mem_le_conn_rcv
+0x0006 mem_inquiryscan_waitcnt
+0x0007 mem_inquiryscan_rcvcnt
+0x0008 mem_pagescan_waitcnt
+0x0009 mem_pagescan_rcvcnt
+0x000a mem_pagescan_rcvfhscnt
+0x000b mem_slave_rcvcnt
+0x000c mem_page_transmit
+0x000d mem_page_rcv
+0x000e mem_page_rcv_fhs
+0x000f mem_master_rcvcnt
+0x0010 mem_fhs_wait_counter
+0x0011 mem_newconnto_counter
+0x0012 mem_inquiry_transmit
+0x0013 mem_inquiry_rcv
+0x0014 mem_fw_ver
+0x0015 mem_current_context
+0x0016 mem_le_ch_mapped
+0x0017 mem_last_freq
+0x0018 mem_rssi
+0x0019 mem_rx_type
+0x001a mem_rx_hec_err
+0x001c mem_rx_crc_err
+0x001e mem_context_ptr
+0x0020 mem_display
+0x0028 mem_bcd
+0x0030 mem_state
+0x0031 mem_mode
+0x0032 mem_tsniff
+0x0034 mem_sniff_anchor
+0x0038 mem_clk_offset
+0x003e mem_rx_window
+0x0040 mem_plap
+0x0043 mem_puap
+0x0044 mem_pnap
+0x0046 mem_conn_handle
+0x0047 mem_arq
+0x0048 mem_lmp_to_send
+0x0049 mem_lmi_opcode
+0x004a mem_lmo_reason
+0x004b mem_op
+0x004c mem_state_map
+0x004d mem_supervision_timer
+0x0051 mem_supervision_to
+0x0053 mem_name_offset
+0x0054 mem_key_size
+0x0055 mem_conn_sm
+0x0056 mem_aco
+0x0062 mem_kc
+0x0072 mem_conn_timer
+0x0073 mem_sniff_attempt
+0x0074 mem_sniff_timeout
+0x0075 mem_dsniff
+0x0077 mem_amaddr
+0x0078 mem_lmo_opcode1
+0x0079 mem_lmi_opcode1
+0x007a mem_lmo_reason1
+0x007b mem_lmo_tid1
+0x007c mem_lmo_opcode2
+0x007d mem_lmi_opcode2
+0x007e mem_lmo_reason2
+0x007f mem_lmo_tid2
+0x0080 mem_hci_version
+0x0083 mem_acl_pktlen
+0x0085 mem_sco_pktlen
+0x0086 mem_acl_pktcnt
+0x0088 mem_sco_pktcnt
+0x008a mem_current_sniff_attempt
+0x008b mem_current_sniff_timeout
+0x008c mem_sniff_timeout_temp
+0x008d mem_nfreq_index_inq
+0x008e mem_nfreq_index_page
+0x008f mem_ninqy_index
+0x0090 mem_fhs_misc
+0x0091 mem_subsniff_instant
+0x0095 mem_subsniff_rate
+0x0096 mem_subsniff_tcmax
+0x0098 mem_subsniff_tsniff
+0x0099 mem_lpm_adjust
+0x009a mem_sync_clke
+0x00a0 mem_lpm_current_mult
+0x00a1 mem_gpio_wakeup_low
+0x00a5 mem_gpio_wakeup_high
+0x00a9 mem_air_mode
+0x00aa mem_sco_asso_handle
+0x00ab mem_sco_handle
+0x00ad mem_esco_desco
+0x00ae mem_esco_type
+0x00af mem_neogotiation_state
+0x00b0 mem_saved_amaddr
+0x00b1 mem_esco_arq
+0x00b2 mem_esco_saved_arq
+0x00b3 mem_sco_obuf
+0x00d1 mem_sco_ibuf
+0x00ef mem_sco_poll
+0x00f0 mem_npage_index
+0x00f1 mem_page_mode
+0x00f2 mem_page_clk
+0x00f6 mem_tst_pktcnt_sync
+0x00f8 mem_tst_pktcnt_hec
+0x00fa mem_tst_pktcnt_crc
+0x00fc mem_tst_pktcnt_dmh
+0x00fe mem_tmp_buffer_head
+0x0101 mem_tmp_buffer
+0x0151 mem_tester_emulate
+0x0152 mem_temp_payload
+0x0152 test_mode_scenario
+0x0153 test_mode_hopping_mode
+0x0154 test_mode_tx_freq
+0x0155 test_mode_rx_freq
+0x0156 test_mode_power_mode
+0x0157 test_mode_poll_period
+0x0158 test_mode_packet_type
+0x0159 test_mode_data_length
+0x015b mem_test_mode_old_debug_config
+0x015c mem_tester_cnt
+0x015d mem_temp_am_addr
+0x015e mem_temp_arq
+0x015f mem_len
+0x0161 mem_clkn_bt
+0x0165 mem_clke_bt
+0x0169 mem_dpll_clkn
+0x016d mem_connection_options
+0x016e mem_nameres_cnt
+0x016f mem_txptr
+0x0171 mem_slot_offset
+0x0173 extm_fhs_misc
+0x0174 extm_newconn_am_addr
+0x0175 extm_class
+0x0178 extm_lap
+0x017b extm_uap
+0x017c extm_nap
+0x017f mem_debug_config
+0x0180 mem_lch_code
+0x0181 mem_fhs_am_addr
+0x0182 mem_dpll_error
+0x0184 mem_select_list_item
+0x0185 mem_temp_reconn_record
+0x0185 mem_record_bt_mode
+0x0186 mem_temp_lap
+0x018c mem_list_item_ptr
+0x018e mem_eir
+
+
+
+(//bluetooth tx power
+0 TX_POWER_0DB
+1 TX_POWER_3DB
+2 TX_POWER_5DB
+3 TX_POWER_f3DB
+4 TX_POWER_f5DB
+
+0x20 TX_POWER_PAIR
+)
+
+
+0x3b17 rom_lpm_sleep
+0x59e0 rom_save_ucode
+
+0x4219 rom_mem_lpm_xtalcnt
+0x423b rom_mem_patch_ptr
+0x423d rom_mem_patch_len
+
+0x5b1a rom_otpd_read_data
+0x5ada rom_otp_write
+	/* context */
+(
+0x01 coffset_mode
+0x02 coffset_tsniff
+0x04 coffset_sniff_anchor
+0x08 coffset_clk_offset
+0x0e coffset_rx_window
+0x10 coffset_plap
+0x16 coffset_conn_handle
+0x17 coffset_arq
+	/* 3.0 only */
+0x18 coffset_lmp_to_send
+0x1b coffset_op
+0x1c coffset_state_map
+	/* le only */
+0x18 coffset_le_ch
+0x19 coffset_le_hop
+0x1a coffset_le_event_cnt
+
+80 context_size
+1 context_num
+)
+
+(
+0 lpm_flag_wake
+1 lpm_flag_loadcode
+)
+
+/* ========= parameters ============== */
+(
+0x0050 param_newconn_arq
+0x0007 param_esco_addr
+0x0010 param_conn_handle
+0x01f0 param_conn_handle_comp
+0x0020 param_newconnto
+0x0008 param_pagerespto
+0x0a00 param_snooze_setup_orig
+0x5353 param_snooze_ahead_orig
+0x00ff param_ninquiry
+0x2000 param_page_to
+0x0005 param_max_slot
+0x0010 param_sco_poll
+
+/* 24Mhz clock setting */
+/* 12Mhz clock setting */
+0x0e43 param_tx_setup
+0x0600 param_rf_setup
+0x0600 param_conn_access 
+0x03bb param_clke_cal
+0x0500 param_pll_setup		// 120 is minimum
+0x0d00 param_rx_setup	// 114us before sync
+2000 param_dpll_start_delay
+
+110 param_lpm_fix
+10 param_lpo_extra
+200 param_lpm_adjmax
+
+-1 param_hibernate_clks
+3000 param_chgpump_delay
+
+3 param_featrue_ssp
+0x0101 param_lmpext_ssp_enable
+339 param_acl_pktlen
+30   param_sco_pktlen
+1     param_acl_pktcnt		/*buffer acl pkt cnt*/
+7     param_sco_pktcnt
+
+
+0x8fffff param_features0
+0x9d83fe param_features1  // not support afh
+0x8359     param_features2
+0x000033 param_unap
+0x001177 param_lap
+0x9e8b33 param_glap
+0x002540 param_class//0x180208 //0x002580//402500//240404
+0x12e904 param_hci_version
+0x000a04 param_lmp_version//0x0a04
+0x000a06 param_lmp_version0
+0x12e9 param_lmp_subversion
+0x0012 param_tisw
+0x0012 param_tpsw
+0x1000 param_tisi
+0x0800 param_tpsi
+0x0020 param_page_window
+0x0020 param_inq_window
+0x1c80 param_supervision_to
+39 param_fcomp_div
+2 param_fcomp_mul
+6     param_name_len
+0x535442 param_name
+0x344950 param_name1
+
+
+)
+
+/* ======= packet types  ========= */
+(
+0x0      type_null    
+0x1      type_poll   
+0x2      type_fhs    
+0x3      type_dm1    
+0x4      type_dh1    
+0x5      type_hv1    
+0x6      type_hv2    
+0x7      type_hv3    
+0x8      type_3dh1     
+0x9      type_aux1   
+0xa      type_dm3    
+0xb      type_dh3    
+0xe      type_dm5    
+0xf      type_dh5    
+0x10     type_id
+0x11     type_shutdown
+0x13     type_lmp
+)
+
+/* ========== flag[6] =============== */
+(
+0        always        /* always 1 */
+1        true          /* set/rstn by verify,compare,icompare (true) */
+2        positive      /* set/rstn by all alu operations (opcode = 0x03,0x13,0x0f,0x1f), if alu output >= 0 */
+3        timeout       /* read only, the timeout from timers */
+5        zero          /* set/rstn by all alu operations (opcode = 0x03,0x13,0x0f,0x1f), if alu output == 0 */
+6        crc_failed    /* level, cleared by hop_start */
+7        enable_white  /* outside mux decide whether to load bt_clk or response_X */
+8        enable_parity /* level */
+9        enable_crc    /* level */
+10       enable_hec    /* level */
+11       decode_fec1   /* level */
+12       decode_fec2   /* level */
+13       decode_fec0   /* level */
+14       encrypt       /* level */
+15       crc16       /* for caculate ccitt crc16 */
+16       swfine	/* =0 stop_watch count based on oneslot =1 on 1 clock */
+20       rqst_freq    /* pulse, to start calculating frequency */
+21       recalc        /* pulse, to recalculate the fhs_parity */
+22       init_encrypt  /* pulse, issued to initialize encrption */
+23       mhalfbnd    /* half slot boundary of clke_rt, or when clke_bt[0] toggles */
+24       sync          /* sync found as a result of correlation,set/rstn by correlate opcode */
+25       user10    /* user10 */
+26       kc_p_activate  /* pulse to recalc the kc_p */
+27       encode_fec1   /* level */
+28       encode_fec2   /* level */
+29       encode_fec0   /* level */
+30       packet_end    /* pulse */
+32       is_tx         /* level */
+33       is_rx         /* level */
+34       halfslot     /* pulse, read only, when clkn_bt[0] toggles */
+35       oneslot      /* pulse, read only, when clkn_bt[1] toggles */
+36       mslotbnd     /* pulse, read only, when clke_bt[1] toggles */
+37       expire       /* level, read only, when selected clock source exceed timeup value */
+38       meet         /* level, read only, when selected clock source meet timeup value */
+39       tx_clear     /* level, read only, indicate tx pipe is cleared */
+40       user         /* user0 */
+41       master        /* user1 */
+42       slave2         /* user2 */
+43       wake           /* user3 */
+44       user2        /* user4 */
+45       match         /* user5 */
+46       attempt        /* user6 */
+47       user3          /* user7 */
+48       clknt         /* user8 */
+49	   user7 	/* user9 */
+50       synchronize   /* synchronize lpo and regular version of the clock */
+51       lpo_edge  /* read only, 3 clocks after risling edge of lpo clock */
+52       blank         /* C0 only, means pdata == 0 */
+53       modone          /* set divide operation is done */
+54       le		/* bluetooth 4.0 LE enable */
+55       aes_ready	/* set when aes is ok */
+63       never         /* read only, always 0 */
+)
+
+default flag = always
+
+/* ========== reg[6] =============== */
+(
+0        mark   /* for keeping strobes, more permanent */
+1        type   /* save and verify during rx */     /* rw */
+2        temp   /* general purpose register, 64 bits */
+3        contru  /* contr uart */
+4        am_addr      /* verify during rx, read and send during tx */ /* ro */
+5        contw        /* last mem_addr during write */
+6        contr        /* last mem_addr during read */
+7        queue    /* the index of qset*,qisolate* commands, ie, if queue = 3, qset/qisolate operate on bit3 */
+8        debug    /* can be wired out for observation */
+9        access   /* the 72 bit access word */
+10       contwu   /* contw uart */
+11       timeup        /* when does certain counter expire */
+12       pwindow       /* bit 71-61 of pdata; because on rx, bits shifts in from 71 down */
+13       fhs_parity    /* re-gernated based on bt_adr( {nap,uap,lap} ) when recalc flag is pulsed */
+14       white_init    /* init value of the whitening */
+15       crc24_init        /* init crc24 lfsr, 24 bits */
+16       interrupts    /* set interrupts, 40 bits */
+17       rega          /* general purpose register, 32 bits */
+18       regb          /* general purpose register, 32 bits */
+19       regc          /* general purpose register, 17 bits */
+20       regab         /* concat of {rega,regb}, thus 64 bits */
+21       radio_ctrl   /* radio i/f direct i/o ctrl, check following "radio_ctrl" section */
+21       ctrl_reg     /* 2023 and after */
+22       jtag_addr    /* load jtag address field, lsb */
+23       freq_index   /* 7 bit read only */
+24       jtag_data    /* wdata to and rdata from jtag */
+25       clkn              /* {clkn_bt, clkn_rt} */
+26       clke              /* {clke_bt, clke_rt} */
+27       stop_watch
+28       fhs_misc   /* SR, SP, pscan mode */
+29       fhs_class  /* class field in fhs */
+30       fhs0   /* read only, bit 0-71 of fhs word */
+31       fhs1   /* read only, bit 72-142 of fhs word */
+32       bt_adr /* r/w, the bt_addr to access gen and freq hopping, contain only lap and uap */
+33       bt_clk /* r/w, the bt_clk for freq hopping */
+34       clkn_bt  /* read only, native bluetooth clock, free running 3.2KHz  or controlled by RTHALFSLOT register */
+35       clkn_rt  /* read only, native realtime clock, free running 12MHz, count from 0-3749, or controlled by RTHALFSLOT register */
+36       freq_mode
+/* wire even_train    = freq_mode[4];    // odd even train                            */
+/* wire conn_mode     = 3;    // connection                                           */
+/* wire iqpgscan_mode = 2;    // slave in inquiry and page (not response)             */
+/* wire iqpgresp_mode = 1;    // slave in inquriy and page (response only)            */
+/* wire inqypage_mode = 0;    // master in inquiry and page(response or not response) */
+37       xin   /* x parameter, read only */
+38       N_tx_slot /* the N factor in equations for Xi,Xp,Xprm,Xprs */
+39 	   auxcnt
+40       clke_bt  /* r/w,  external bluetooth clock , free running 3.2KHz or controlled by RTHALFSLOT register */
+41       clke_rt  /* r/w,  external realtime clock, , free running 12MHz, count from 0-3749, or controlled by RTHALFSLOT register */
+43       host_mode         /* generic stuff for kick starts */
+44       lap
+45       uap
+46       nap         
+47       regext		/* r/w extended 12x32bit registers,  indexed by regext_index */
+48       alarm             /* r/w, lpo wake up time, this is also how lpo and current clock keep sync */
+49       lpo_time          /* read only, this is the value to be copied back to clkn/clke after wakeup */
+50       kc_ls             /* secret key,                71: 0 */
+51       kc_ms             /* secret key,               127:72 */
+52       g1l               /* encryption length                */
+53		mask3ff		/* for mask 0x3ff operation */
+54       aes_ctrl		
+56       regext_index   /* index of regext */
+57	     loopcnt
+58      stack			/* current return address */
+59       stack_ptr		/* stack depth */
+61         pc /* direct goto */
+62       null              /* to nowhere */
+63       pdata /* the shift register */
+)
+default reg = pdata
+
+/* regext_index */
+(
+0 regidx_data
+4 regidx_key
+8 regidx_xor
+12 regidx_result
+)
+/* ========== radio_ctrl========= */
+(
+0 TXGFSK
+1 PSK
+2 PSK3M
+3 RESET
+)
+/* assign BPWR = radio_ctrl[0]; */
+/* assign PARAMP = radio_ctrl[1]; */
+/* assign XTALPU = radio_ctrl[2]; */
+/* assign SYNTHPU = radio_ctrl[3]; */
+/* assign TXPU = radio_ctrl[4]; */
+/* assign RXPU = radio_ctrl[5]; */
+/* assign SLCTRL = radio_ctrl[6]; */
+/* assign XTALSEL_MUX_SEL = radio_ctrl[7] */
+
+
+/* =========== destination[4] ============== */
+(
+0 bucket
+1 rxf
+2 back
+3 mod
+)
+default dest = bucket
+
+/* =========== source[4] ============= */
+(
+1 txf
+3 demod
+)
+default source = 0
+
+
+/* ============== mark ============= *//*0 - 47 */
+(
+
+0  mark_fhs_eir  
+1  mark_rxbuf_inuse
+2  mark_tx_l2cap
+3  mark_switch_initiated
+4  mark_accept_switch
+5  mark_loopback
+7  mark_esco
+8  mark_esco_rxok
+9  mark_context
+10 mark_am_addr_broadcast
+11 mark_fhs_already_good
+12 mark_page_trainb
+13 mark_lpm_mult_enable
+14 mark_usb_flag
+15 mark_old_packet
+16 mark_longpacket
+17 mark_testmode
+18 mark_ar2
+19 mark_h5tx_rp
+20 mark_h5tx_crc	
+21 mark_h5tx_retransmit
+22 mark_h5rx_pstart
+23 mark_h5_sync
+24 mark_h5_reinit
+28 mark_inquiry_on
+29 mark_inquiry_state
+30 mark_inquiry_trainb
+31 mark_periodical_diac
+32 mark_all_diac
+33 mark_slave_in_rand_accepted
+34 mark_reconn_recieve_switch
+35 mark_isstr
+36 mark_loadcode
+37 mark_ext_patch
+38 mark_24g
+39 mark_24g_conext
+40 mark_eeprom_size
+// REVAB:max 35, REVC:max 63
+41 mark_ble_tx_md
+42 mark_ble_rx_md
+43 mark_otp_encrypt
+44 mark_first_packet
+45 mark_role_switch_receive_fhs
+)
+
+(
+1 reload_type_otp
+2 reload_type_spi
+3 reload_type_iic
+)
+
+
+/* ============== soft timers ============== */
+(
+0 le_adv_interval_timer
+1 inquiry_length_timer
+2 le_scan_interval_timer
+3 page_length_timer
+4 iscan_interval_timer
+5 pscan_interval_timer
+6 switch_wait_timer
+7 enpt_delay_timer
+8 page_interval_timer
+9 key_scan_timer
+10 smp_pairing_timer
+11  ui_led_blink   //led timer 可扩展
+12  ui_led_blink1
+13 ui_led_blink2
+ 
+)
+
+(
+1 hci_cmd_inquiry
+2 hci_cmd_inquiry_cancel
+3 hci_cmd_remote_name_req
+4 hci_cmd_remote_feature_req
+5 hci_cmd_create_conn
+6 hci_cmd_disconn
+7 hci_cmd_accept_conn
+8 hci_cmd_reject_conn
+9 hci_cmd_pair
+10 hci_cmd_nopair
+11 hci_cmd_linkkey
+12 hci_cmd_nokey
+13 hci_cmd_auth
+14 hci_cmd_stopencrypt
+15 hci_cmd_startencrypt
+16 hci_cmd_setup_sco
+17 hci_cmd_disconn_sco
+18 hci_cmd_in_sniff
+19 hci_cmd_exit_sniff
+20 hci_cmd_remote_version_req
+21 hci_cmd_remote_ext_features_req
+22 hci_cmd_io_cap
+23 hci_cmd_role_discovery
+24 hci_cmd_role_switch
+25 hci_cmd_accept_with_switch
+26 hci_cmd_detach
+27 hci_cmd_le_create_conn
+28 hci_cmd_accept_sco_conn
+80 hci_cmd_wait_remote_feature
+81 hci_cmd_wait_remote_ext_feature
+82 hci_cmd_wait_remote_name
+)
+
+
+
+/* ============== debug ============= */
+(
+0 debug_neg_skew
+1 debug_bitbucket
+2 debug_dont_clear_got_tx
+3 debug_scatter_enabled
+4 debug_tx_fixed_freq
+5 debug_rx_fixed_freq
+6 debug_tx_pattern
+)
+
+/* ============== tester_emulator ============= */
+(
+0 tester_fixed_flow
+1 tester_fixed_flow_polarity
+2 tester_change
+3 tester_exit
+4 tester_pattern_test
+5 tester_whitening_change
+6 tester_fixed_freq
+7 tester_no_whitening
+)
+
+/* ============== mode ==========*/
+(
+0 mode_le
+1 mode_master
+2 afh_enable
+3 afh_change
+4 send_sco_when_slave
+5 first_seqnx
+)
+
+/* ============== state_map ==========*/
+(
+0 smap_lmptidinit
+1 smap_lmptid
+2 smap_encryption
+3 smap_name_res
+4 smap_name_req
+5 smap_edr
+6 smap_rxlmp
+7 smap_rxl2cap
+)
+(
+0 state_inconn
+1 state_insniff
+2 state_insco 
+3 state_inpage
+4 state_conn_comp
+5 state_init_seq
+6 state_combkey
+7 state_linkkey
+)
+(
+0 op_send_sres
+1 op_auth_req
+2 op_inrand_req
+3 op_disconn
+4 op_stop_enc
+5 op_start_enc
+6 op_txl2cap
+7 op_pkt_comp
+)
+
+
+/* ============== arq [3] ================ */
+(
+0 flow
+1 arqn
+2 seqn
+3 wack
+4 flowx              /* out */  /* not really in memory */
+5 arqnx              /* out */
+6 seqnx              /* out */
+7 bcast1             /* first broadcast received */
+)
+
+/* arq          {flow,arqn,seqn}, read/write */
+/* [0] flow r/w  acl full status of the other, store during rx, checked during tx */
+/* [1] arqn r/w  ack of the other during rx (ack tx fifo),                        */
+/* [2] seqn r/w  seqn of the other, check during rx                               */ 
+/* arqx         {flowx,arqnx,seqnx} */
+/* [0] flowx r/o flow back to the other, 1 alow send, 0 not to send, read only tx */
+/* [1] arqnx r/w ack to the other, set by rx, send back on tx                     */
+/* [2] seqnx r/w toggled by arqn, to be send during tx                            */ 
+
+(
+0 llid0
+1 llid1
+2 nesn
+3 sn
+4 md
+5 wak
+)
+
+/* AFH flags */
+(
+0 AFH_CFG_ON
+1 AFH_CFG_TIMER
+2 send_lmp_set_afh
+3 AFH_CFG_REPORT_MODE
+4 AFH_CFG_MASTER_SENT_REQ
+)
+
+/* LLID CODE */
+(	
+1 LLID_L2CAP_CONT
+2 LLID_L2CAP_START
+3 LLID_LMP
+)
+
+/* ============== master_state ==========*/
+(
+0  master_in_idle
+1  master_in_inquiry
+2  master_in_page
+10 master_in_becoming_slave
+15 master_in_conn
+)
+(
+0 newrev_feature_bettx
+1 newrev_feature_betplltx
+2 newrev_feature_skip_retransmit
+3 newrev_feature_init_radio_after_sleep
+4 newrev_feature_no_lpolog
+)
+/*************mem_pincode_state****************/
+(
+0 pincode_state_ilde
+1 pincode_state_wait_pincode
+2 pincode_state_pincode_ready
+)
+
+
+// lpm_write
+(
+1 lpmreg_sel_ctrl
+2 lpmreg_sel_ctrl2
+4 lpmreg_sel_gpiolow
+8 lpmreg_sel_gpiohigh
+16 lpmreg_sel_counter
+)
+
+//scan_mode
+(
+0 inq_scan_mode
+1 page_scan_mode
+2 page_inq_enable
+)
+//mem_neogotiation_state
+(
+ 0 default_neogotiation_state
+ 1 prarm_neogotiation
+)
+
+//mem_lpm_wake_lock
+(
+0 wake_lock_ble_rx
+1 wake_lock_ble_tx
+
+3 wake_lock_key_press
+4 wake_lock_ble_tx_patch
+5 wake_lock_uart_tx
+6 wake_lock_uart_rx
+7 wake_lock_button
+8 wake_lock_cmd
+9 wake_lock_app
+10 wake_lock_lmp_tx
+11 wake_lock_lmp_rx
+12 wake_lock_l2cap_tx
+13 wake_lock_l2cap_rx
+14 wake_lock_ipc_c512bt
+15 wake_lock_ipc_bt2c51
+
+)
+
+(
+0 bt_disabled
+1 ble_disabled
+2 module_disable
+
+)
+
+(
+0x33  REC_3_MODE
+0x34  REC_4_MODE
+0x35  REC_4_MODE_STATIC_ADDRESS
+0x36  REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS
+0x37  REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS
+)
+
+
+//sniff UART_TX UART_RX
+(
+6 UART_WAKEUP_TX
+7 UART_WAKEUP_RX
+)
+
+
+
+0x01f2 mem_ucode_status
+0x01f3 mem_otp_ucode_flag
+0x01f5 mem_spid_tbuf/* spid buf: 03 addr[23:16] addr[15:8] addr[7:0] */
+0x01f6 mem_iicd_tbuf/* iicd buf: iic_adr addr[15:8] addr[7:0] iic_adr */
+0x01f6 mem_addr_hi
+0x01f7 mem_addr_mi
+0x01f8 mem_addr_lo
+0x01f9 mem_iicd_addr
+0x01fa mem_spid_rbuf
+0x01fe mem_ucode_buf
+0x0200 mem_ucode_len
+0x0202 mem_sched_addr
+0x0204 mem_ucode_ptr
+0x0206 mem_ucode_keybuf
+0x0216 mem_check_plap_temp
+0x0228 mem_reconnect_flag
+0x0229 mem_switch_fail_master_count
+0x022a mem_app_evt_timer_count
+
+//adc read
+(
+0 ADC_CONFIG_VINLPM
+1 ADC_CONFIG_HVIN
+2 ADC_CONFIG_GPIO
+)
+
+
+(
+0 QUEUE_OFFSET_EACH_SIZE
+1 QUEUE_OFFSET_LENGTH
+2 QUEUE_OFFSET_CURR_NUM
+3 QUEUE_OFFSET_READ_PTR
+4 QUEUE_OFFSET_WRITE_PTR
+5 QUEUE_OFFSET_ELE_INIT_ADDR
+)
+(
+//Flash Register
+0x05 FLASH_READ_SATUS
+
+// Flash Status Register
+0x00 FLASH_STATUS_WIP
+0X01 FLASH_STATUS_WEL
+0X02 FLASH_STATUS_BP0
+0X03 FLASH_STATUS_BP1
+
+//Flash Write Sm
+0X00 FLASH_SM_NO_BUYS
+0X01 FLASH_SM_START
+0X02 FLASH_SM_ERASE_SECTOR
+0X03 FLASH_SM_WAIT_ERASE_SECTOR
+0X04 FLASH_SM_WRITE_DATA
+0X05 FLASH_SM_WAIT_WRITE_DATA
+
+
+//Flash Command
+0x02 FLASH_COMMAND_WRITE_DATA
+0x03 FLASH_COMMAND_READ_DATA
+0x20 FLASH_COMMAND_SECTOR_ERASE
+)
+
+0x0000 otp_ucode_flag
+0x07f0 otp_ucode_aeskey
+
+/* adc data addr and flag */
+(
+0x07e0 OTP_CHIP_FUNCTIONS
+0x07e2 otp_adc_io_0_5V_addr
+0x07e4 otp_adc_hvin_1V_addr
+0x07e6 otp_adc_vinlpm_2V_addr
+0x07e8 otp_adc_io_1V_addr
+0x07ea otp_adc_hvin_5V_addr
+0x07ec otp_adc_vinlpm_3V_addr
+0x07ee otp_adc_flag_addr
+0xaa55 OTP_ADC_FLAG
+)
+
+/* data stored in eeprom */
+(
+0	eeprom_nv_ram
+
+195	eeprom_module_init_flag//2
+
+)
+
+/*mem_app_handshake_flag*/
+(
+0 APP_HANDSHAKE_NULL
+1 APP_HANDSHAKE_DONE
+
+)
+/*mem_device_option*/
+(
+1 dvc_op_hci
+4 dvc_op_dongle
+5 dvc_op_spp
+6 dvc_op_ukey
+7 dvc_op_ir
+
+9 dvc_op_shutter
+10 dvc_op_module
+11 dvc_op_ble_mouse
+12 dvc_op_ble_kb
+13 dvc_op_ble_prcp
+14 dvc_op_car
+15 dvc_op_AntiLost
+16 dvc_op_remote_car
+255 dvc_op_test
+//device option hight 4
+6 dvc_op_mouse
+7 dvc_op_keyboard
+//device option low 2
+(
+0 MODE_3_MOUSE
+1 MODE_4_MOUSE
+)
+)
+
+(
+3 twspi_sclk
+4 twspi_sdio
+)
+
+(
+4 pan_clk_bit
+5 pan_dat_bit
+6 pan_mov_bit
+)
+
+(
+7 otp_uflag_aes
+6 otp_uflag_skip_eep
+5 otp_uflag_skip_flash
+4 otp_uflag_hci
+)
+
+/* ir command */
+(
+1 ircmd_record
+2 ircmd_play
+3 ircmd_write_pulse
+4 ircmd_write_seq
+5 ircmd_write_next
+
+8 ircmd_test_play
+9 ircmd_test_rec
+
+10 ircmd_report_pulse
+11 ircmd_report_seq
+12 ircmd_report_raw
+
+20 ircmd_screen_on
+21 ircmd_screen_off
+)
+
+(
+7 gpio_active_bit
+)
+(
+2 HID_HANDSHAKE_TIMEOUT
+
+)
+
+(
+1 APP_FLAG_RECONNECT
+)
+(
+5 LPM_WAKE_UP_DELAY_TIMER
+)
+
+
+//mem_app_disconn_reason
+//mem_app_disconn_reason_flag
+//bit map
+(
+2 APP_DISC_RSN_SIZE
+)
+(
+0 APP_DISC_BY_BUTTON
+1 APP_DISC_AFTER_PAIRING
+2 APP_DISC_AFTER_RECONN
+3 APP_DISC_AFTER_SNIFF
+4 APP_DISC_AFTER_SETUP_DONE
+5 APP_DISC_AFTER_HANDSHAKE
+6 APP_DISC_BT
+7 APP_DISC_BLE
+8 APP_DISC_L2CAP_REFUSED
+9 APP_DISC_SWITCH_FAIL
+)
+//eeprom init flag
+(
+	0xaa55 EEPROM_INIT_FLAG
+)
+
+(
+1 KEY_CONF_STRUCT_LEN
+0 KEY_PIN_OFFSET
+)
+
+(
+12000000 PWM_12MHZ
+)
+(
+0 POWER_OFF
+1 POWER_STARTING
+2 POWER_STANDBY
+)
+//power parameter offset(8 byte)
+(
+0 power_state_offset
+1 power_timer_offset
+2 power_off_timeout_offset
+3 power_starting_timeout_offset
+4 power_off_cb_offset
+6 power_starting_cb_offset
+8 power_standby_cb_offset
+10 ui_butten_up_cb_offset
+)
+
+
+//app new specific
+(
+0 CONN_PARAM_UPDATA_PROCEDURE_NO_INIT
+1 CONN_PARAM_UPDATA_PROCEDURE_STARTING
+2 CONN_PARAM_UPDATA_PROCEDURE_COMPLETE
+3 CONN_PARAM_UPDATA_PROCEDURE_FAILD
+)
+(
+0 NEW_SPEC_HEADER_OFFSET
+2 NEW_SPEC_OPCODE_OFFSET
+3 NEW_SPEC_DLEGTH_OFFSET  //data length offset
+5 NEW_SPEC_DADDR_OFFSET   //data address offset
+)
+(
+1 OPCODE1_BUTTEN_CLICK_ONCE
+2 OPCODE2_BUTTEN_DOUBLE_CLICK
+3 OPCODE3_ANTL_START_ALRAM
+4 OPCODE4_CURRENT_ALARM_STATE
+5 OPCODE5_BATTER_INFORMATION
+7 OPCODE7_ANTL_CONFIG_ALRAM
+)
+(
+0x0a NEW_SPEC_NOTIFY_HANDLE
+0x0b NEW_SPEC_NOTIFICATION_ENABLE_HANDLE
+0x0d NEW_SPEC_WRITE_HANDLE
+)
+//app new specific end
+
+//mem_anti_lost_mode
+(
+0x01 ANTI_LE_ALARM_ON
+0x00 ANTI_LE_ALARM_OFF
+)
+(
+0 NOTIFICATION_ENABLE_BIT
+1 INDICATION_ENABLE_BIT
+)
+
+
+
+
+(
+//20ms
+0x0020	FAST_ADV_INTERVAL_VALUE_CAR
+)
+
+(
+0x14 ATT_CAR_CONTROL_HANDLE
+0x14 ATT_SPEED_SET_HANDLE
+)
+
+
+(
+0 TURN_FRONT
+1 TURN_LEFT
+2 TURN_RIGHT
+0 MOTOR_STOP
+1 GO_FRONT
+2 GO_BACK
+0x6b5a LE_RECEIVE_PACKET_HEAD
+)
+
+(
+0 FLAG_IR_DISABLE
+1 FLAG_IR_ENABLE
+)
+
+(
+0 DEVICE_CAR
+1 DEVICE_TANK
+2 DEVICE_BATTLE_CAR
+3 DEVICE_BATTLE_TANK
+4 DEVICE_REMOTE
+)
+
+(
+0 F_B_MOTOR
+1 L_R_MOTOR
+2 F_B_BATTERY
+3 L_R_BATTERY
+)
+
+
+
+(
+1 SPEED_LEVEL_1
+2 SPEED_LEVEL_2
+3 SPEED_LEVEL_3
+4 SPEED_LEVEL_4
+5 SPEED_LEVEL_5
+6 SPEED_LEVEL_6
+7 SPEED_LEVEL_7
+8 SPEED_LEVEL_8
+9 SPEED_LEVEL_9
+10 SPEED_LEVEL_10
+)
+
+(
+0 PWM0_DUTY_SETTING
+1 PWM1_DUTY_SETTING
+2 PWM2_DUTY_SETTING
+)
+
+(
+1 CAR_CMD_BATTERY
+2 CAR_CMD_OLD_CAR_CONTROL
+3 CAR_CMD_OLD_SPEED_CONTROL
+4 CAR_CMD_L_R_MOTOR_CONTROL
+5 CAR_CMD_F_B_MOTOR_CONTROL
+6 CAR_CMD_IR_CONTROL
+7 CAR_CMD_LED_CONTROL
+8 CAR_CMD_DEVICE_INFO
+)
+
+(
+0 CAR_REMOTE_CHECK_BUTTON
+1 CAR_REMOTE_CHECK_ROCKER
+)
+
+(
+0x11 CAR_NOTIFY_HANDLE
+)
+
+(
+0 LED_OFF
+1 LED_ON
+2 LED_BLINK
+0xFF LED_INVALID
+)
+
+(
+0xFF INVALID_PIN_NUM
+)
+
+
+(
+0 POWER_ON
+1 WORK_PAIRED
+2 WORK_SEARCH
+)
+
+
+
+(
+0 LIGHT_GROUP0
+)
+
+(
+0 LIGHT_CMD_PWM0
+1 LIGHT_CMD_PWM1
+2 LIGHT_CMD_PWM2
+3 LIGHT_CMD_PWM3
+4 LIGHT_CMD_PWM4
+5 LIGHT_CMD_PWM5
+6 LIGHT_CMD_AUTO_MODE
+0xff LIGHT_CMD_PAIRING
+
+)
+
+
+
+
+(//mem_module_flag
+//bit0~bit3 config module function
+0 MODULE_FLAG_UART_FLOW_CONTROL
+1 MODULE_FLAG_BLE_SEND_MTU23
+2 MODULE_FLAG_BLE_DATA_ENCRYPT
+
+//bit4~bit7 module states change
+4 MODULE_FLAG_BLE_DATA_FINISH
+5 MOUDLE_TASK_UNSNIFF
+6 MOUDLE_TASK_SNIFF
+
+)
+
+(
+34 NV_DATA_LEN
+-1 DECREASED_ONE
+)
+
+
+
+(
+	10 FLAG_MODULE_READ_VDD_COUNT
+)
+
+(
+	110  DM_REFCOM_BUFF_LEN
+)
+(
+	0x200 UART_AIR_CONTROL_THRESHOLD
+)
+
+(
+0x01 HCI_DISCARD_PACKET
+0x00 HCI_NOT_DISCARD_PACKET
+)
+
+
+
+(//Command
+0x00 HCI_CMD_SET_BT_ADDR_REQ
+0x01 HCI_CMD_SET_LE_ADDR_REQ
+0x02 HCI_CMD_SET_VISIBILITY_REQ
+0x03 HCI_CMD_SET_BT_NAME_REQ
+0x04 HCI_CMD_SET_LE_NAME_REQ
+0x05 HCI_CMD_SPP_DATA_REQ
+0x09 HCI_CMD_LE_DATA_REQ
+0x0b HCI_CMD_STATUS_IRQ
+0x0c HCI_CMD_SET_PAIRING_REQ
+0x0d HCI_CMD_SET_PINCODE_REQ
+0x0e HCI_CMD_SET_UARTCONTROL_REQ
+0x0f HCI_CMD_SET_UART_BAUD_REQ
+0x10 HCI_CMD_VERSION_REQ
+0x11 HCI_CMD_BT_DISCONNECT
+0x12 HCI_CMD_BLE_DISCONNECT
+0x13 HCI_CMD_DELETE_DEVICE
+0x14 HCI_CMD_CREATE_CONNECT
+0x26 HCI_CMD_SET_NVRAM_REQ
+0x27 HCI_CMD_SLEEP
+0x28 HCI_CMD_CONFIRM_GKEY
+0x29 HCI_CMD_SET_CREDIT_GIVEN
+0x2a HCI_CMD_AUTO_ADV_SCAN
+0x2b HCI_CMD_POWER_REQ
+0x2c HCI_CMD_POWER_SET
+0x30 HCI_CMD_PASSKEY_ENTRY
+0x31 HCI_CMD_SET_GPIO
+0x32 HCI_CMD_READ_GPIO
+0x33 HCI_CMD_LE_SET_PAIRING
+0x34 HCI_CMD_LE_SET_ADV_DATA
+0x35 HCI_CMD_LE_SET_SCAN_DATA
+0x36 HCI_CMD_LE_SEND_CONN_UPDATE_REQ
+0x37 HCI_CMD_LE_SET_ADV_PARM
+0x38 HCI_CMD_LE_START_PAIRING
+0x40 HCI_CMD_SET_WAKE_GPIO
+0x42 HCI_CMD_SET_TX_POWER
+0x43 HCI_CMD_BOOT_VERSION_REQ
+0x48 HCI_CMD_LE_CONFIRM_GKEY
+0x49 HCI_CMD_REJECT_JUSTWORK
+0x51 HCI_CMD_RESET_CHIP_REQ
+
+0x61 HCI_CMD_LE_SET_FIXED_PASSKEY
+
+0xff HCI_TEST_CMD_CLOSE_LPM
+)
+
+(//event
+0x00 HCI_EVENT_SPP_CONN_REP
+0x01 HCI_EVENT_HID_CONN_REP
+0x02 HCI_EVENT_LE_CONN_REP
+0x03 HCI_EVENT_SPP_DIS_REP
+0x04 HCI_EVENT_HID_DIS_REP
+0x05 HCI_EVENT_LE_DIS_REP
+0x06 HCI_EVENT_CMD_RES
+0x07 HCI_EVENT_SPP_DATA_REP
+0x08 HCI_EVENT_LE_DATA_REP
+0x09 HCI_EVENT_STANDBY_REP
+0x0a HCI_EVENT_STATUS_RES
+0x0b HCI_EVENT_FINISH_PACK_NUM
+0X0C HCI_EVENT_SNIFF_MD_CHANGE
+0x0D HCI_EVENT_NVRAM_REP
+0x0e HCI_EVENT_GKEY
+0x0F HCI_EVENT_INVALID_PACKET
+0x10 HCI_EVENT_GET_PASSKEY
+0x11 HCI_EVENT_LE_TK
+0x12 HCI_EVENT_REMOTE_MTU
+0x14 HCI_EVENT_LE_PAIRING_STATE
+0X15 HCI_EVENT_LE_ENCRYPTION_STATE
+0x17 HCI_EVENT_LE_CONNECTION_UPDATE
+0x1d HCI_EVENT_LE_GKEY
+
+)
+
+
+(//command HCI_CMD_SET_GPIO
+//byte 0
+0x00 HCI_CMD_CONFIG_GPIO_INPUT
+0x01 HCI_CMD_CONFIG_GPIO_OUTPUT
+//byte 1 input state
+0x00 GPIO_INPUT_PULLUP
+0x01 GPIO_INPUT_PULLDOWN
+0x02 GPIO_INPUT_HIGH_IMPEDANCE
+)
+
+
+
+(
+0x7e0 OTP_ADDR_RF_PARAM_FIX
+//struct of RF_PARAM_FIX
+// uint8       //length = param_pair_count * 2 
+// uint16     //param-pair-1
+// uint16     //param-pair-2
+// uint16     //param-pair-3
+// uint16     //param-pair-4
+// uint16     //param-pair-5
+// uint16     //param-pair-6
+// uint16     //param-pair-7
+)
+
+(
+0	PAIRING_PINCODE
+1	PAIRING_JUSTWORK
+2	PAIRING_PASSKEY
+3	PAIRING_CONFIRM
+)
+
+
+(
+0x0001	FLAG_BT_PAIRING_SUCCESS
+0x0101	FLAG_BT_PAIRING_FAIL
+0x0080	FLAG_BLE_PAIRING_SUCCESS
+0x0180	FLAG_BLE_PAIRING_FAIL
+)
+
+
+(
+1	FLAG_EVENT_START_ENC
+0	FLAG_EVENT_PAUSE_ENC
+)
+
+(
+	0 MOUDLE_STATE_BT_BIT
+	1 MOUDLE_STATE_BLE_BIT
+)
+
+
+0x022b mem_init_cnt
+//dpi eeprom addr
+
+
+
+(
+//SPI GPIO 
+0x19 MOUSE_SPI1_CLK_GPIO
+0x1A MOUSE_SPI1_SDIO_GPIO
+0X1E MOUSE_SPI2_CLK_GPIO
+0X1F MOUSE_SPI2_SDIO_GPIO
+//combination
+0x01 MOUSE_L_BUTTON
+0X02 MOUSE_R_BUTTON
+0X04 MOUSE_M_BUTTON
+0X05 MOUSE_LM_BUTTON
+0X06 MOUSE_RM_BUTTON
+0X07 MOUSE_LMR_BUTTON
+//mouse default gpio
+0x1B MOUSE_DEFAULT_XA_GPIO
+0x1C MOUSE_DEFAULT_XB_GPIO
+
+//ui led blink
+0X00C8  LED_RECONNECT_BLINK //200
+0X0190  LED_DPI_BLINK //400
+0X03E8  LED_DPI_BLINK_FIXED    //1000
+0X03E8  LED_DISCOVERY_BLINK    //1000
+0XFF    LED_LONG_BLINK
+0x05	LED_SENSOR_BLINK_CNT
+//bt mode device number
+0x01 MODE_BT_DEVICE1
+0x02 MODE_BT_DEVICE2
+0x03 MODE_BT_DEVICE3
+0x02 MODE_24G_DEVICE
+//mouse  flag
+0X00 WRITE_REQ_ENABLE_FLAG
+0X01 LL_START_ENC_FLAG
+0X02 LL_PAIRING_SUCCESS_FLAG
+
+
+//mouse_function_flag
+0X04 MOUSE_FLAG_LEN
+//1byte
+0X00 MOUSE_SELECT_DEVICE_FLAG
+0X01 MOUSE_CPI_FLAG
+0X02 MOUSE_BT_CANNEL_RECONN_FLAG
+0X03 MOSUE_24G_PAIRING_FLAG
+0X04 MOUSE_LOW_VOLTAGE_FLAG
+0X05 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG
+0X06 MOUSE_LONG_BT_BUTTON_FLAG
+0X07 MOUSE_STORE_EEPROM_FLAG
+0x08 MOUSE_STATUE_UP_FLAG
+0X09 MOUSE_BT_DISCOVERY_BUTTON_LONG_DOWN_FLAG
+
+
+//3byte
+0X10 MOUSE_ENABLE_USB
+0X11 MOUSE_ENABLE_24G
+0X12 MOUSE_ENABLE_SPI2
+0X13 MOUSE_ENABLE_FLASH
+0X14 MOUSE_ENABLE_EEPROM
+0X15 MOUSE_ENABLE_STATUE_UP_THREE_LED
+0X16 MOUSE_ENABLE_STATUE_UP
+0X17 MOUSE_ENABLE_DPI_LED_BLINK
+//4byte
+0X18 MOUSE_ENABLE_BLE_RANDOM_ADDRE
+0X19 MOUSE_ENABLE_2K_EEPROM
+0X1A MOUSE_ENABLE_ADC
+0X1B MOUSE_ENABLE_INIT_DELAY
+0X1C MOUSE_ENABLE_DISCOVERY_SENSOR_LED
+0X1D MOUSE_ENABLE_AUTO_24G_PARING
+0X1E MOUSE_ENABLE_WAKEUP_FROM_POWER
+0X1F MOUSE_ENABLE_GPIO_CONTROL_ADC_SENSOR
+
+
+
+//mouse dpi level
+0x00 MOUSE_DPI_LEVEL1
+0x01 MOUSE_DPI_LEVEL2
+0x02 MOUSE_DPI_LEVEL3
+0x03 MOUSE_DPI_LEVEL4
+
+
+//mouse sensor angle
+0x00 MOUSE_6CLK_ANGLE
+0X01 MOUSE_9CLK_ANGLE
+0X02 MOUSE_12CLK_ANGLE
+0X03 MOUSE_3CLK_ANGLE
+
+
+//mem_config_function_enable
+0 ENABLE_BT_DISCOVERY_BY_GPIO_LED
+1 ENABLE_MODE_LED
+2 ENABLE_LOW_VOLTAGE_LED
+3 ENABLE_DEVICE_LED
+4 ENABLE_BT_BUTTON
+5 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON
+6 ENABLE_SELECT_DEVICE_BY_SWITCH
+
+0xFF GPIO_DISABLE
+
+
+//DPI button state 
+0x00 DPI_BUTTON_STATE_DOWN
+0x01 DPI_BUTTON_STATE_UP
+
+
+//eeprom address offect
+0X00 MOUSE_INFO_EEPROM_OFFECT
+0X5A MOUSE_DPI_EEPROM_OFFECT	//1byte
+0X5B MOUSE_G24_ADDR_EEPROM_OFFECT	//4bytes
+0X5F MOUSE_RANDOM_ADDR_COUNT_EEPROM_OFFSET	//2bytes
+0X61 MOUSE_DEVICE_MODE_EEPROM_OFFSET	//1byte	
+0X62 MOUSE_EEPROM_MODULE_INIT_FLAG		//eeprom_module_init_flag 2bytes
+
+
+// Sensor id number
+0x30 P32XX_ID1
+0x31 P3065_ID1
+0x3E P3610_ID1
+0x02 P3212_ID2
+0xD1 P3205_TJ3T_ID2
+0XD2 P3204_TJ3L_ID2
+0x54 PKA8_ID2
+0x70 P3065_XY_ID2
+
+
+//Sensor type
+0X00 P3205
+0X01 P3065
+0X02 KA8
+0X03 P3204
+0X04 P3212
+0X05 P3610
+0X06 P3065_XY
+
+
+//p3610 smart enable flag
+0X00 P3610_SMART_ENABLE
+0X01 P3610_SMART_DISABLE
+
+
+//SENSOR REG
+0x00 PAN_REG_PID_L
+0x01 PAN_REG_PID_H
+0x02 PAN_REG_MOTION_STAUS
+0x03 PAN_REG_DELTA_X
+0x04 PAN_REG_DELTA_Y
+0x05 PAN_REG_OPRATION_MODE
+0x06 PAN_REG_CONFIG
+0x07 PAN_REG_IMAGE_QUALITY
+0x08 PAN_REG_OPRATION_STATE
+0x09 PAN_REG_WRITE_PROTECT
+0x0A PAN_REG_SLEEP_1
+0x0B PAN_REG_ENTER_TIME
+0x0C PAN_REG_SLEEP_2
+0x0D PAN_REG_IMAGE_THRESHOLD
+0x0E PAN_REG_IMAGE_RECGNITION
+
+
+0x06 MOUSE_DPI_ADDRESS
+0x05 MOUSE_P3610_DPI_ADDRESS
+0x0D MOUSE_P3212_DPI_XADDRESS
+0x0E MOUSE_P3212_DPI_YADDRESS
+
+
+0x06 MOUSE_FPGA_RF_WORK_DEBUG_GPIO
+0x02 MOUSE_FPGA_DEBUG_GPIO
+
+)
+
+(
+0x01 ADV_FLAG_LIMITED_DISCOVERABLE
+0x04 ADV_FLAG_BREDR_NOT_SUPPORTED
+)
+
+(
+5 TEST_GPIO
+)
+
+(
+1 LE_LPM_DISABLE
+0 LE_LPM_ENABLE
+
+12 LE_INTERVAL_15MS
+9 LE_INTERVAL_11_25MS//11.25ms
+7 LE_INTERVAL_8_75MS//8.75ms
+6 LE_INTERVAL_7_5MS//7.5ms
+
+12 CLASSIC_INTERVAL_7_5MS
+14 CLASSIC_INTERVAL_8_75MS
+18 CLASSIC_INTERVAL_11_25MS
+)
+
+
+
+
+
+(
+// eeprom config
+0xb0 REMOTE_PARAM_EEPROM_CONFIG_ADDR
+
+)
+
+
+(
+0x00 CONTROL_F_B_MOTOR
+0x02 CONTROL_L_R_MOTOR
+)
+
+(
+0x00 KEY_MAP_TEN
+0x01 KEY_MAP_LR
+)
+
+(
+0x00 CONTROL_F_B_TEN
+0x02 CONTROL_L_R_TEN
+0x03 CONTROL_L_R_LR
+)
+
+(
+0 KEY_CHECK
+1 ROCKER_CHECK
+)
+
+(
+1 MOTOR_POSITIVE
+2 MOTOR_NEGATIVE
+)
+
+(
+0 ROCKER_MIDDLE_KEY
+1 ROCKER_POSITIVE_KEY
+2 ROCKER_NEGATIVE_KEY
+)
+
+
+
+
+
+
+
+
+(
+0 BLE_SHUTTER
+1 CLASSIC_SHUTTER
+)
+
+(
+0x0000 NVRAM_EEPROM_OFFSET
+)
+
+(
+0x1b3a SHUTTER_EEPROM_CONFIG_CRC
+)
+
+(
+5 MAX_QUEUE_NUM
+5 SHUTTER_BLE_DATA_BUFFER
+5 SHUTTER_CLASSIC_DATA_BUFFER
+)
+
+
+(
+0x13	GATT_CONSUMER_NOTIFY_HANDLE
+0x14	GATT_CONSUMER_WRITE_HANDLE
+0x17	GATT_KEYBOARD_NOTIFY_HANDLE
+0x18	GATT_KEYBOARD_WRITE_HANDLE
+)
+
+(
+//20ms
+0x0020	FAST_ADV_INTERVAL_VALUE
+//100ms
+0x00a0	SLOW_ADV_INTERVAL_VALUE
+)
+
+
+(
+0 ATT_BIT_NOTIFICATION
+1 ATT_BIT_INDICATION
+)
+///////////////////////////////////////////////////////////////////////////////////////
+
+(
+0 HARD_SWITCH
+1 SOFT_SWITCH
+)
+
+
+(
+1  FLAG_SHUTTER_HID_DISCONN_TIMEOUT
+5 FLAG_SHUTTER_CABLE_UNPLUG_TIMEOUT
+)
+
+(//Data Rom Buffer Addr
+382		BLE_GATT_LIST_SIZE
+487		BT_SDP_LIST_SIZE
+40		BLE_KEY_VALUE_LIST_SIZE
+40		BT_KEY_VALUE_LIST_SIZE
+0x913A	BLE_SHUTTER_GATT_LIST
+0x92B8	CLASSIC_SHUTTER_SDP_LIST
+0x949F	BLE_SHUTTER_KEY_VALUE_LIST
+0x94C7	CLASSIC_SHUTTER_KEY_VALUE_LIST
+)
+
+
+(//soft switch power state
+0		SS_STATE_POWER_UP
+1		SS_STATE_POWER_ON
+2		SS_STATE_POWER_OFF
+)
+
+(
+0		SS_POWER_STATE_OFFSET
+1		SS_POWER_ON_TIME
+2		SS_POWER_OFF_TIME
+3		SS_POWER_ON_CB
+5		SS_POWER_OFF_CB
+
+)
+
+(
+
+0x4FFE SIM_IIC_SCL_GPIO_NUM
+0x4FFF SIM_IIC_SDA_GPIO_NUM
+
+)
+
+
+
+//class type
+(
+0x00 STANDARD_REQ
+0x01 CLASS_REQ
+0x02 MANUFACTURER_REQ
+)
+//Standard Request Codes
+(
+0x00 GET_STATUS                // Code for Get Status
+0x01 CLEAR_FEATURE             // Code for Clear Feature
+0x03 SET_FEATURE              // Code for Set Feature
+0x05 SET_ADDRESS              // Code for Set Address
+0x06 GET_DESCRIPTOR           // Code for Get Descriptor
+0x07 SET_DESCRIPTOR           // Code for Set Descriptor(not used)
+0x08 GET_CONFIGURATION        // Code for Get Configuration
+0x09 SET_CONFIGURATION        // Code for Set Configuration
+0x0A GET_INTERFACE            // Code for Get Interface
+0x0B SET_INTERFACE            // Code for Set Interface
+0x0C SYNCH_FRAME              // Code for Synch Frame(not used)
+)
+//Standard Descriptor Types
+(
+0x01 DSC_DEVICE               // Device Descriptor
+0x02 DSC_CONFIG               // Configuration Descriptor
+0x03 DSC_STRING               // String Descriptor
+0x04 DSC_INTERFACE            // Interface Descriptor
+0x05 DSC_ENDPOINT             // Endpoint Descriptor
+)
+//HID Descriptor Types
+(
+0x21 DSC_HID			      // HID Class Descriptor
+0x22 DSC_HID_REPORT			  // HID Report Descriptor
+)
+//Define bmRequestType bitmaps
+(
+0x80 IN_DEVICE                // Request made to device,
+                              // direction is IN
+0x00 OUT_DEVICE               // Request made to device,
+                              // direction is OUT
+0x81 IN_INTERFACE             // Request made to interface,
+                              // direction is IN
+0x01 OUT_INTERFACE            // Request made to interface,
+                              // direction is OUT
+0x82 IN_ENDPOINT              // Request made to endpoint,
+                              // direction is IN
+0x02 OUT_ENDPOINT             // Request made to endpoint,
+)
+//HID Request Codes
+(
+0x01 GET_REPORT 		       // Code for Get Report
+0x02 GET_IDLE				   // Code for Get Idle
+0x03 GET_PROTOCOL			   // Code for Get Protocol
+0x09 SET_REPORT				   // Code for Set Report
+0x0A SET_IDLE				   // Code for Set Idle
+0x0B SET_PROTOCOL			   // Code for Set Protocol
+0xF2 HID_REPORT_ID           
+64 EP0_PACKET_SIZE         
+6 EP1_PACKET_SIZE         
+16 HID_REPORT_SIZE         
+0x001B HID_REPORT_DESCRIPTOR_SIZE    
+)
+//math cordic
+(
+0 TYPE_SIN		
+1 TYPE_ATAN	
+2 TYPE_MULT	
+3 TYPE_DIV		
+4 TYPE_ASIN	
+5 TYPE_SQRT	
+6 TYPE_COS		
+7 TYPE_TAN		 
+)
+   
+(
+0 DFIFO0_IN_EMPTY
+1 DFIFO1_IN_EMPTY
+2 DFIFO2_IN_EMPTY
+3 DFIFO3_IN_EMPTY
+4 DFIFO0_OUT_EMPTY
+5 DFIFO1_OUT_EMPTY
+6 DFIFO2_OUT_EMPTY
+7 DFIFO3_OUT_EMPTY
+)
+
+(
+4 USB_STATUS_SETUP
+6 USB_STATUS_NAK
+)
+
+(
+1 USB_GOT_REPORT_REQ
+2 USB_CONNECTED
+3 USB_SLEEP
+4 USB_RESUME
+5 USB_SETIDLE_1
+)
+
+(
+0x10 USB_EP1_KB
+0x20 USB_EP2_MS
+0x21 USB_EP2_MULTIKEY
+0x01 MAC_BOOT_MODE
+0x02 R_KEY
+0x03 LR_KEY
+)
+
+(
+0x8ffa	HID_KBDATA_ADDR
+0x903a	HID_MSDATA_ADDR
+0x90fe	HID_CONFDATA_ADDR
+)
+
+
+(
+0x01ba PC_GET_REPORT
+0x02ba PC_SET_REPORT
+0x0200 PC_SET_REPORT_bValue
+0x0000 PC_SET_REPORT_wIndex
+0x0001 PC_SET_REPORT_bLength
+0xba PC_REPORT_ID
+
+0x01 PC_GET_DATA
+0x00 PC_GET_NONDATA
+)
+
+(
+//--------------------------------------------------
+// Define device states
+0x00 DEV_ATTACHED	// Device is in Attached State
+0x01 DEV_POWERED	// Device is in Powered State
+0x02 DEV_DEFAULT		// Device is in Default State
+0x03 DEV_ADDRESS	// Device is in Addressed State
+0x04 DEV_CONFIGURED	// Device is in Configured State
+0x05 DEV_SUSPENDED	// Device is in Suspended State
+)
+
+(
+// Define wIndex bitmaps
+0x81 IN_EP1                    // Index values used by Set and Clear
+0x01 OUT_EP1                   // commands for Endpoint_Halt
+0x82 IN_EP2              
+0x02 OUT_EP2             
+0x83 IN_EP3              
+0x03 OUT_EP3             
+)
+
+(
+0 EP0_STALL
+1 EP1_IN_STALL
+2 EP1_OUT_STALL
+3 EP2_IN_STALL
+4 EP2_OUT_STALL
+5 EP3_IN_STALL
+6 EP3_OUT_STALL
+)
+
+(
+// Define wValue bitmaps for Standard Feature Selectors
+0x00 ENDPOINT_HALT             // Endpoint_Halt feature selector
+0x01 DEVICE_REMOTE_WAKEUP      // Remote wakeup feature(not used)
+0x00 BOOT_PROTOCOL
+0x01 REPORT_PROTOCOL
+0x01 USB_MAX_NUM_CFG
+)
+
+
+(
+0x1A0 AT_baud_115200
+0x4e2 AT_baud_38400
+0x1388 AT_baud_9600
+)
+
+(
+0x4e00 mem_module_rx_buf//0x400
+0x4fff mem_module_rx_buf_end
+0x1c00 mem_module_tx_buf
+0x1fff mem_module_tx_buf_end
+)
+
+(
+0x01 BIND_ACKPAYLOAD
+0x02 USER_ACKPAYLOAD
+
+0xcf CMD_OTA
+0xc0 CMD_OTA_START
+0xc1 CMD_OTA_DATA
+0xc2 CMD_OTA_EXIT
+0x55 OTA_STA_SUCCESS
+0xaa OTA_STA_FAIL
+)
+
+(
+0 TIMER_NAK
+640 TIMER_NAK_DELAY
+15 TIMER_WAKEUP
+5000 TIMER_WAKEUP_DELAY
+)
+
+
+
+(
+//add
+0   offset_24g_rxbuf
+1   offset_24g_rxbuf_add1
+2   offset_24g_rxbuf_add2
+34  offset_24g_txbuf
+66  offset_24g_txpayload
+100 offset_24g_rxpayload
+102 offset_24g_rxpayload_add2
+132 offset_24g_rxdata_length
+133 offset_24g_pid
+134 offset_24g_datalen
+135 offset_24g_data_type
+136 offset_24g_txlen
+137 offset_24g_rx_window
+139 offset_24g_ensure
+140 offset_24g_txfail_cnt
+141 offset_24g_get_ack_fail
+142 offset_24g_tx_without_int
+143 offset_24g_retry
+144 offset_24g_ch
+145 offset_24g_current_ch_number
+146 offset_24g_paring_addr
+150 offset_24g_pairing_sm
+151 offset_24g_ch_map1
+155 offset_24g_ch_map2
+159 offset_24g_ch_map3
+163 offset_24g_ch_map4
+167 offset_24g_tx_btclk
+171 offset_24g_interval
+172 offset_24g_interval_min
+173 offset_24g_interval_max
+174 offset_24g_addr
+178 offset_24g_abort_pac
+179 offset_24g_sync_pac
+180 offset_24g_hop_pac
+181 offset_24g_check_dongle_times
+182 offset_24g_enter_hibernate
+190 offset_24g_device_addr
+194 offset_24g_pac_index
+195 offset_24g_no_ack
+196 offset_24g_sta_crc
+199 offset_24g_last_crc
+202 offset_24g_sta_pid
+203 offset_24g_last_pid
+204 offset_24g_max_retry
+205 offset_24g_mode
+206 offset_24g_rf_last_sta
+207 offset_24g_rf_hop_ch
+208 offset_24g_sync_cnt
+209 offset_24g_hop_pac_retry
+210 offset_24g_rf_work_stage
+211 offset_24g_hop_fastly_cnt
+212 offset_24g_short_sleep_timer
+216 offset_24g_cb_data
+218 offset_24g_cb_lpm_prepare
+220 offset_24g_cb_lpm_before
+222 offset_24g_cb_rxdata_type1
+224 offset_rssi_signal_index
+225 offset_rssi_signal_avg
+226 offset_rssi_signal_buf
+234 offset_rssi_noise_index
+235 offset_rssi_noise_avg
+236 offset_rssi_noise_buf
+244 offset_rssi_ctrl_threshold_down
+245 offset_rssi_noise_dg_index
+246 offset_rssi_noise_kb_index
+247 offset_rssi_noise_ms_index
+248 offset_rssi_noise_dg_avg
+249 offset_rssi_noise_kb_avg
+250 offset_rssi_noise_ms_avg
+251 offset_tx_power_temp
+252 offset_power_ctrl_packet_cnt
+253 offset_power_ctrl_ack_cnt
+254 offset_power_ctrl_level
+255 offset_power_ctrl_txpwr_level2
+//iadd
+256 offset_power_ctrl_txpwr_level1
+257 offset_power_ctrl_txpwr_level0
+258 offset_power_ctrl_threshold_up
+259 offset_power_ctrl_threshold_down
+260 offset_dongle_mode_init
+261 offset_dongle_work_mode
+262 offset_dongle_ms_bind_step
+263 offset_dongle_kb_bind_step
+264 offset_dongle_bind_device_status
+265 offset_24g_rxdata_temp
+267 offset_24g_rxdata_temp_add2
+268 offset_24g_rxdata_temp_add3
+269 offset_24g_rxdata_temp_add4
+299 offset_24g_rx_addr
+303 offset_24g_bind_payload
+304 offset_24g_bind_payload_add1
+305 offset_24g_bind_payload_add2
+309 offset_24g_rf_laststa
+310 offset_24g_hop_btclk
+314 offset_24g_hop_interval
+315 offset_24g_ackpayload_enable
+316 offset_24g_ackpayload
+348 offset_24g_mode_switch
+349 offset_24g_pair_mode
+350 offset_24g_nodata_timer_enable
+351 offset_24g_time_slice
+352 offset_24g_mouse_addr
+356 offset_24g_kb_addr
+360 offset_24g_kb_data_sta_data
+368 offset_24g_kb_data_last_data
+376 offset_24g_kb_multikey_sta_data
+379 offset_24g_kb_multikey_last_data
+382 offset_24g_kb_blank_data_enable
+383 offset_24g_kb_mul_blank_data_enable
+384 offset_24g_ms_blank_data_enable
+385 offset_24g_dg_last_ch
+386 offset_24g_dg_ch_number
+387 offset_24g_dg_config_ch_once
+388 offset_24g_kb_last_ch
+389 offset_24g_kb_ch_number
+390 offset_24g_kb_config_ch_once
+391 offset_24g_ms_last_ch
+392 offset_24g_ms_ch_number
+393 offset_24g_ms_config_ch_once
+394 offset_24g_pair_txpower
+395 offset_24g_auto_pair_switch
+)
+
+(
+3 QUEUE_ELE_COUNT
+32 QUEUE_ELE_LENGTH
+)
+
+(
+3 retry_24g
+1 NO_ACK_24G
+0 WITH_ACK_24G
+
+0 ENSURE_OFF_24G
+1 ENSURE_ON_24G
+
+0x10 ABORT_DATA
+0x40 RSSI_SENSITIVITY
+
+0x4e G24_PAIR_CH
+)
+
+(
+0 disable_24g
+1 tx_24g
+2 rx_24g
+
+0 bit_ack_24g
+)
+
+//mem_24g_interrupt
+(
+0 rx_dr
+1 rx_sync
+4 tx_ds
+5 tx_fail
+)
+
+//mem_24g_data_type
+(
+0x07 bits_data
+//0-2 data type
+3 bit_abort
+4 bit_hop
+5 bit_sync
+//6-7 channel offset
+)
+
+
+
+//mem_24g_pairing_sm
+(
+0 STATE_24G_PAIRING_NULL
+1 STATE_24G_PAIRING_1
+2 STATE_24G_PAIRING_2
+3 STATE_24G_PAIRING_3
+0X11 STATE_24G_PAIRING_1_WAITING_ACK
+0X12 STATE_24G_PAIRING_2_WAITING_ACK
+0X13 STATE_24G_PAIRING_3_WAITING_ACK
+0XFF STATE_24G_PAIRING_SUCCESS
+)
+
+(
+0 DONGLE_WORK	   		//connect mode normal
+1 DONGLE_BIND			//code pair mode
+2 DONGLE_TEST			//test mode
+3 DONGLE_CODE			//PC_application
+4 DONGLE_PCBA			//PCBA_TEST
+5 DONGLE_DEBUG
+6 DONGLE_MODE_MAX
+7 DONGLE_SEARCH
+0 CLEAR_INIT
+)
+
+(
+0x01 DATATYPE_MOUSE	//mouse
+0x02 DATATYPE_KEYBOARD	//keyboard
+0xAA DATATYPE_BIND		//bind step 1
+0x55 DATATYPE_CONFIG	//bind step 2
+0x22 DATATYPE_OK	//bind step 3
+
+0x01 BIND_MOUSE
+0x02 BIND_KEYBOARD
+)
+
+(
+112 G24_DONGLE_ADDR
+)
+
+(
+0xa0 COMMAND_MODE     //BYTE 0
+0X81 COM_MODE_BIND	//BYTE 1
+0X82 COM_MODE_TEST	//BYTE 1
+)
+(
+0xa1 COMMAND_BIND		//BYTE 0
+0X01 COM_BIND_GET		//1
+0X84 COM_BIND_EXIT		//1
+0XA7 COM_READ_MODE	//1
+)
+(
+0xa2 COMMAND_TEST	//BYTE 0
+0X81 COM_TEST_SC		//	进入单载波
+0x82 COM_TEST_CD		// fcc测试
+0x83 COM_TEST_DAT		// 数据测试
+0X84 COM_TEST_LOW_CH  //低频点
+0X85 COM_TEST_MID_CH	//中频点
+0X86 COM_TEST_HIG_CH	//高频点
+0X87 COM_TEST_SW_HIG	//自动切换频点为高 1mhz
+0X88 COIM_TEST_SW_LOW	//自动切换频点为低 1mhz
+0X89 COM_TEST_SW_STOP	//停止自动切换频点
+0X8A COM_TEST_POW_5		//设置输出功率5dbm
+0X8B COM_TEST_POW_0		//0dbm
+0X8C COM_TEST_POW_N5		//-5dbm
+0X8D COM_TEST_POW_N10		//-10dbm
+0X8E COM_TEST_EXIT			//退出测试模式
+)
+(
+0xa6 COMMAND_CURRENT_PROJECT
+0xa7 COMMAND_CURRENT_MODE
+0xa9 COMMAND_CURRENT_FW_VERSION
+)
+
+//user defined cmd
+(
+0xb0 COMMAND_USER_DEFINED
+)
+
+(
+0x15 PRODUCT_ID
+0 FW_VERSION0
+0 FW_VERSION1
+1 FW_VERSION2
+7 FW_VERSION3
+)
+
+
+(
+8 TIMER_NODATA
+640 TIMER_NODATA_DELAY	//200ms
+
+11 TIMER_MS_BLANK
+320 TIMER_MS_BLANK_DELAY
+
+12 TIMER_KB_MUL_BLANK
+320 TIMER_KB_MUL_BLANK_DELAY
+
+14 TIMER_KB_BLANK
+320 TIMER_KB_BLANK_DELAY
+)
+
+(
+0 KB_NORMAL_REPORT_ID
+1 MS_REPORT_ID
+3 KB_MULTIKEY_REPORT_ID
+)
+
+(
+7 RSSI_BUF_LEN_SIGNAL
+255 RSSI_BUF_LEN_NOISE
+0x50 RSSI_THRESH_NOISE
+
+0x77 RSSI_DIS_MIN_24G
+0x82 RSSI_DIS_MAX_24G
+
+0x75 RSSI_DIS_MIN_BLE
+0x80 RSSI_DIS_MAX_BLE
+)
+
+(
+//power control
+0x01 TXPWR_0DB
+0x02 TXPWR_3DB
+0x04 TXPWR_5DB
+0x10 TXPWR_f5DB
+
+124 POWER_CTRL_MAX_PACKET_CNT
+
+2 POWER_CTRL_LOSSPAC_THRESH_UP0
+0 POWER_CTRL_LOSSPAC_THRESH_DOWN0
+0x20 POWER_CTRL_RSSI_THRESH_DOWN0
+
+5 POWER_CTRL_LOSSPAC_THRESH_UP1
+0 POWER_CTRL_LOSSPAC_THRESH_DOWN1
+0x60 POWER_CTRL_RSSI_THRESH_DOWN1
+
+10 POWER_CTRL_LOSSPAC_THRESH_UP2
+0 POWER_CTRL_LOSSPAC_THRESH_DOWN2
+0x80 POWER_CTRL_RSSI_THRESH_DOWN2
+)
+
+//mem_send_data_24g_short_lpm
+(
+0 SHORT_LPM_STATE_POLLING 	
+1 SHORT_LPM_STATE_DATA
+2 SHORT_LPM_STATE_NODATA
+3 SHORT_LPM_STATE_BUTTON_WHEEL
+)
+
+(
+81000 G24_8125_INTERVAL_PARAM
+78000 G24_78125_INTERVAL_PARAM
+12210 G24_4MS_INTERVAL_PARAM
+)
+
+(
+1 G24_TX_TIMER_INT_ENABLE
+0 G24_TX_TIMER_INT_DISABLE
+)
+
+
+
+0x022d mem_h5rx_ackcnt
+0x022e mem_check_err_acl_cont
+0x022f mem_rp_packets
+0x0230 mem_packet_type
+0x0232 mem_hci_sniff_conn_handle
+0x0234 mem_hci_sniff_max_interval
+0x0236 mem_hci_sniff_min_interval
+0x0238 mem_hci_sniff_attempt
+0x023a mem_hci_sniff_timeout
+0x023c mem_voice_setting
+0x023e mem_retransmission_effort
+0x023f mem_sco_ptype
+0x0241 mem_extm_uap_restore
+0x0244 mem_h5rx_rptr
+0x0246 mem_h5rx_ack
+0x0247 mem_h5tx_ack
+0x0248 mem_h5tx_rptr
+0x024a mem_h5tx_wptr
+0x024c mem_h5tx_free
+0x024e mem_h5rx_tmp
+0x024f mem_h5tx_seq
+0x0250 mem_hci_acl_queue_wptr
+0x0252 mem_hci_acl_queue_rptr
+0x0254 mem_hci_acl_queue_end
+0x0256 mem_hci_acl_queue_wcnt
+0x0257 mem_hci_acl_cnt
+0x0258 mem_hci_acl_tx_trigger_wptr//tx via uart
+0x025a mem_hci_curr_len
+0x025b mem_hci_curr_target
+
+
+15 hci_flag_rp
+//mem_hci_options bit map
+(
+1 hci_option_h4
+2 hci_option_protocol2
+3 hci_option_protocol3
+4 hci_option_uart
+5 hci_option_usb
+6 hci_option_phy2
+7 hci_option_phy3
+)
+// UART baud rate @6MHz
+(
+0 uart_ctrl_bit_enable
+3 uart_ctrl_bit_slip_protocol
+
+)
+
+//bit map of core_uart_ctrl
+(
+
+)
+//bit map of core_uart_status
+(
+0 uart_status_tx_fifo_full
+1 uart_status_tx_fifo_empty
+2 uart_status_tx_busy
+3 uart_status_rx_fifo_empty
+
+)
+//HCI H4 LOG related
+(
+0x4850 mem_hci_log
+8 hci_log_size
+100 hci_log_cnt
+
+)
+//HCI H4 Packet TYPE
+(
+0x01 HCI_H4_TYPE_CMD
+0x02 HCI_H4_TYPE_ACL
+0x04 HCI_H4_TYPE_EVENT
+
+)
+// HCI command opcode group field values
+(
+0x01 HCI_OGF_LINK_CONTROL
+0x02 HCI_OGF_LINK_POLICY
+0x03 HCI_OGF_BASEBAND
+0x04 HCI_OGF_INFO
+0x05 HCI_OGF_STATUS
+0x06 HCI_OGF_TEST
+0x08 HCI_OGF_LOW_ENERGY
+0x3e HCI_OGF_LOGO_TESTING
+0x3f HCI_OGF_VENDOR_SPECIFIC
+)
+
+// HCI link control opcode command field values, OGF=1
+(
+0x01 HCI_INQUIRY 
+0x02 HCI_INQUIRY_CANCEL 
+0x03 HCI_PERIODIC_INQUIRY_MODE 
+0x04 HCI_EXIT_PERIODIC_INQUIRY_MODE 
+0x05 HCI_CREATE_CONNECTION 
+0x06 HCI_DISCONNECT 
+0x07 HCI_ADD_SCO_CONNECTION 
+0x08 HCI_CREATE_CONNECTION_CANCEL
+0x09 HCI_ACCEPT_CONNECTION 
+0x0A HCI_REJECT_CONNECTION 
+0x0B HCI_LINK_KEY_REQUEST_REPLY 
+0x0C HCI_LINK_KEY_REQUEST_NEGATIVE_REPLY 
+0x0D HCI_PIN_CODE_REQUEST_REPLY 
+0x0E HCI_PIN_CODE_REQUEST_NEGATIVE_REPLY 
+0x0F HCI_CHANGE_CONNECTION_PACKET_TYPE 
+0x11 HCI_AUTHENTICATION_REQUESTED 
+0x13 HCI_SET_CONNECTION_ENCRYPTION 
+0x15 HCI_CHANGE_CONNECTION_LINK_KEY 
+0x17 HCI_MASTER_LINK_KEY 
+0x19 HCI_REMOTE_NAME_REQUEST 
+0x1A HCI_REMOTE_NAME_REQUEST_CANCEL
+0x1B HCI_READ_REMOTE_SUPPORTED_FEATURES 
+0x1C HCI_READ_REMOTE_EXT_FEATURES 
+0x1D HCI_READ_REMOTE_VERSION_INFORMATION 
+0x1F HCI_READ_CLOCK_OFFSET 
+0x20 HCI_READ_LMP_HANDLE
+0x28 HCI_SETUP_SCO_CONNECTION
+0x29 HCI_ACCEPT_SCO_CONNECTION
+0x2A HCI_REJECT_SCO_CONNECTION
+0x2B HCI_IO_CAP_REQUEST_REPLY
+0x2C HCI_USER_CONFIRMATION_REQUEST_REPLY
+0x2D HCI_USER_CONFIRMATION_REQUEST_NEGATIVE_REPLY
+0x2E HCI_USER_PASSKEY_REQUEST_REPLY
+0x2F HCI_USER_PASSKEY_REQUEST_NEGATIVE_REPLY
+0x30 HCI_REMOTE_OOB_DATA_REQUEST_REPLY
+0x33 HCI_REMOTE_OOB_DATA_REQUEST_NEGATIVE_REPLY
+0x34 HCI_IO_CAPABILITY_REQUEST_NEGATIVE_REPLY
+0x35 HCI_CREATE_PHYSICAL_LINK
+0x36 HCI_ACCEPT_PHYSICAL_LINK
+0x37 HCI_DISCONNECT_PHYSICAL_LINK
+0x38 HCI_CREATE_LOGICAL_LINK
+0x39 HCI_ACCEPT_LOGICAL_LINK
+0x3A HCI_DISCONNECT_LOGICAL_LINK
+0x3B HCI_LOGICAL_LINK_CANCEL
+0x3C HCI_FLOW_SPEC_MODIFY
+0x3D HCI_ENHANCED_SETUP_SYNCHRONOUS_CONNECTION
+0x3E HCI_ENHANCED_ACCEPT_SYNCHRONOUS_CONNECTION_REQUEST
+0x3F HCI_TRUNCATED_PAGE
+0x40 HCI_TRUNCATED_PAGE_CANCEL
+0x41 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST
+0x42 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST_RECEIVE
+0x43 HCI_START_SYNCHRONIZATION_TRAIN
+0x44 HCI_RECEIVE_SYNCHRONIZATION_TRAIN
+0x45 HCI_REMOTE_OOB_EXTENDED_DATA_REQUEST_REPLY
+)
+
+
+// HCI link policy commands OCF value, OGF=2
+(
+0x01 HCI_HOLD_MODE 
+0x03 HCI_SNIFF_MODE 
+0x04 HCI_EXIT_SNIFF_MODE 
+0x05 HCI_PARK_MODE 
+0x06 HCI_EXIT_PARK_MODE 
+0x07 HCI_QOS_SETUP 
+0x09 HCI_ROLE_DISCOVERY 
+0x0B HCI_SWITCH_ROLE 
+0x0C HCI_READ_LINK_POLICY_SETTINGS 
+0x0D HCI_WRITE_LINK_POLICY_SETTINGS 
+0x0e HCI_READ_DEFAULT_LINK_POLICY_SETTINGS
+0x0f HCI_WRITE_DEFAULT_LINK_POLICY_SETTINGS
+0x10 HCI_FLOW_SPECIFICATION
+0x11 HCI_SNIFF_SUBRATING
+)
+
+// HCI host controller and baseband commands OCF values, OGF=3
+(
+0x01 HCI_SET_EVENT_MASK 
+0x03 HCI_RESET 
+0x05 HCI_SET_EVENT_FILTER 
+0x08 HCI_FLUSH 
+0x09 HCI_READ_PIN_TYPE 
+0x0A HCI_WRITE_PIN_TYPE 
+0x0B HCI_CREATE_NEW_UNIT_KEY 
+0x0D HCI_READ_STORED_LINK_KEY 
+0x11 HCI_WRITE_STORED_LINK_KEY 
+0x12 HCI_DELETE_STORED_LINK_KEY 
+0x13 HCI_WRITE_LOCAL_NAME 
+0x14 HCI_READ_LOCAL_NAME 
+0x15 HCI_READ_CONN_ACCEPT_TIMEOUT 
+0x16 HCI_WRITE_CONN_ACCEPT_TIMEOUT 
+0x17 HCI_READ_PAGE_TIMEOUT 
+0x18 HCI_WRITE_PAGE_TIMEOUT 
+0x19 HCI_READ_SCAN_ENABLE 
+0x1A HCI_WRITE_SCAN_ENABLE 
+0x1B HCI_READ_PAGE_SCAN_ACTIVITY 
+0x1C HCI_WRITE_PAGE_SCAN_ACTIVITY 
+0x1D HCI_READ_INQUIRY_SCAN_ACTIVITY 
+0x1E HCI_WRITE_INQUIRY_SCAN_ACTIVITY 
+0x1F HCI_READ_AUTHENTICATION_ENABLE 
+0x20 HCI_WRITE_AUTHENTICATION_ENABLE 
+0x21 HCI_READ_ENCRYPTION_MODE 
+0x22 HCI_WRITE_ENCRYPTION_MODE 
+0x23 HCI_READ_CLASS_OF_DEVICE 
+0x24 HCI_WRITE_CLASS_OF_DEVICE 
+0x25 HCI_READ_VOICE_SETTING 
+0x26 HCI_WRITE_VOICE_SETTING 
+0x27 HCI_READ_AUTOMATIC_FLUSH_TIMEOUT 
+0x28 HCI_WRITE_AUTOMATIC_FLUSH_TIMEOUT 
+0x29 HCI_READ_NUM_BROADCAST_RETRANSMISSIONS 
+0x2A HCI_WRITE_NUM_BROADCAST_RETRANSMISSIONS 
+0x2B HCI_READ_HOLD_MODE_ACTIVITY 
+0x2C HCI_WRITE_HOLD_MODE_ACTIVITY 
+0x2D HCI_READ_TRANSMIT_POWER_LEVEL 
+0x2E HCI_READ_SCO_FLOW_CONTROL_ENABLE 
+0x2F HCI_WRITE_SCO_FLOW_CONTROL_ENABLE 
+0x31 HCI_SET_CONTROLLER_TO_HOST_FLOW_CONTROL 
+0x33 HCI_HOST_BUFFER_SIZE 
+0x35 HCI_HOST_NUM_COMPLETED_PACKETS 
+0x36 HCI_READ_LINK_SUPERVISION_TIMEOUT 
+0x37 HCI_WRITE_LINK_SUPERVISION_TIMEOUT 
+0x38 HCI_READ_NUMBER_OF_SUPPORTED_IAC 
+0x39 HCI_READ_CURRENT_IAC_LAP 
+0x3A HCI_WRITE_CURRENT_IAC_LAP 
+0x3B HCI_READ_PAGE_SCAN_PERIOD_MODE 
+0x3C HCI_WRITE_PAGE_SCAN_PERIOD_MODE 
+0x3D HCI_READ_PAGE_SCAN_MODE 
+0x3E HCI_WRITE_PAGE_SCAN_MODE 
+0x3F HCI_SET_AFH_CHANNEL_CLASSIFICATION 
+
+
+0x42 HCI_READ_INQUIRY_SCAN_TYPE 
+0x43 HCI_WRITE_INQUIRY_SCAN_TYPE 
+0x44 HCI_READ_INQUIRY_MODE 
+0x45 HCI_WRITE_INQUIRY_MODE 
+0x46 HCI_READ_PAGE_SCAN_TYPE 
+0x47 HCI_WRITE_PAGE_SCAN_TYPE 
+
+0x48 HCI_READ_AFH_CHANNEL_ACCESSMENT_MODE 
+0x49 HCI_WRITE_AFH_CHANNEL_ACCESSMENT_MODE 
+0x51 HCI_READ_EXTENDED_INQUIRY_RESPONSE
+0x52 HCI_WRITE_EXTENDED_INQUIRY_RESPONSE
+0x53 HCI_REFRESH_ENCRYPTION_KEY
+0x55 HCI_READ_SIMPLE_PAIRING_MODE
+0x56 HCI_WRITE_SIMPLE_PAIRING_MODE
+0x57 HCI_READ_LOCAL_OOB_DATA
+0x58 HCI_READ_INQUIRY_RESPONSE_TRANSMIT_POWER_LEVEL
+0x59 HCI_WRITE_INQUIRY_TRANSMIT_POWER_LEVEL
+0x60 HCI_SEND_KEYPRESS_NOTIFICATION
+0x5A HCI_READ_DEFAULT_ERRONEOUS_DATA_REPORTING
+0x5B HCI_WRITE_DEFAULT_ERRONEOUS_DATA_REPORTING
+0x5F HCI_ENHANCED_FLUSH
+0x61 HCI_READ_LOGICAL_LINK_ACCEPT_TIMEOUT
+0x62 HCI_WRITE_LOGICAL_LINK_ACCEPT_TIMEOUT
+0x63 HCI_SET_EVENT_MASK_PAGE_2
+0x64 HCI_READ_LOCATION_DATA
+0x65 HCI_WRITE_LOCATION_DATA
+0x66 HCI_READ_FLOW_CONTROL_MODE
+0x67 HCI_WRITE_FLOW_CONTROL_MODE
+0x68 HCI_READ_ENHANCE_TRANSMIT_POWER_LEVEL
+0x69 HCI_READ_BEST_EFFORT_FLUSH_TIMEOUT
+0x6A HCI_WRITE_BEST_EFFORT_FLUSH_TIMEOUT
+0x6B HCI_SHORT_RANGE_MODE
+0x6C HCI_READ_LE_HOST_SUPPORT
+0x6D HCI_WRITE_LE_HOST_SUPPORT
+0x6E HCI_SET_MWS_CHANNEL_PARAMETERS
+0x6F HCI_SET_EXTERNAL_FRAME_CONFIGURATION
+0x70 HCI_SET_MWS_SIGNALING
+0x71 HCI_SET_MWS_TRANSPORT_LAYER
+0x72 HCI_SET_MWS_SCAN_FREQUENCY_TABLE
+0x73 HCI_SET_MWS_PATTERN_CONFIGURATION
+0x74 HCI_SET_RESERVED_LT_ADDR
+0x75 HCI_DELETE_RESERVED_LT_ADDR
+0x76 HCI_SET_CONNECTIONLESS_SLAVE_BROADCAST_DATA
+0x77 HCI_READ_SYNCHRONIZATION_TRAIN_PARAMETERS
+0x78 HCI_WRITE_SYNCHRONIZATION_TRAIN_PARAMETERS
+0x79 HCI_READ_SECURE_CONNECTIONS_HOST_SUPPORT
+0x7A HCI_WRITE_SECURE_CONNECTIONS_HOST_SUPPORT
+0x7B HCI_READ_AUTHENTICATED_PAYLOAD_TIMEOUT
+0x7C HCI_WRITE_AUTHENTICATED_PAYLOAD_TIMEOUT
+0x7D HCI_READ_LOCAL_OOB_EXTENDED_DATA
+0x7E HCI_READ_EXTENDED_PAGE_TIMEOUT
+0x7F HCI_WRITE_EXTENDED_PAGE_TIMEOUT
+0x80 HCI_READ_EXTENDED_INQUIRY_LENGTH
+0x81 HCI_WRITE_EXTENDED_INQUIRY_LENGTH
+)
+
+
+// HCI informational parameters OCF values, OGF=4
+(
+0x01 HCI_READ_LOCAL_VERSION_INFORMATION 
+0x02 HCI_READ_LOCAL_SUPPORTED_COMMANDS
+0x03 HCI_READ_LOCAL_SUPPORTED_FEATURES 
+0x04 HCI_READ_LOCAL_EXT_FEATURES 
+0x05 HCI_READ_BUFFER_SIZE 
+0x07 HCI_READ_COUNTRY_CODE 
+0x09 HCI_READ_BD_ADDR 
+0x0A HCI_REJECT_CONNECTION_REQUEST
+0x0B HCI_READ_LOCAL_SUPPORTED_CODECS
+)
+
+// HCI status parameters OCF values, OGF=5
+(
+0x01 HCI_READ_FAILED_CONTACT_COUNTER 
+0x02 HCI_RESET_FAILED_CONTACT_COUNTER 
+0x03 HCI_GET_LINK_QUALITY 
+0x05 HCI_READ_RSSI 
+0x06 HCI_READ_AFH_CHANNEL_MAP
+0x07 HCI_READ_BD_CLOCK
+0x08 HCI_READ_ENCRYPTION_KEY_SIZE
+0x09 HCI_READ_LOCAL_AMP_INFO
+0x0A HCI_READ_LOCAL_AMP_ASSOC
+0x0B HCI_WRITE_REMOTE_AMP_ASSOC
+0x0C HCI_GET_MWS_TRANSPORT_LAYER_CONFIGURATION
+0x0D HCI_SET_TRIGGERED_CLOCK_CAPTURE
+)
+
+// HCI testing command OCF values, OGF=6
+(
+0x01 HCI_READ_LOOPBACK_MODE 
+0x02 HCI_WRITE_LOOPBACK_MODE 
+0x03 HCI_ENABLE_DEVICE_UNDER_TEST_MODE 
+0x04 HCI_WRITE_SIMPLE_PAIRING_DEBUG_MODE
+0x07 HCI_ENABLE_AMP_RECEIVER_REPORTS
+0x08 HCI_AMP_TEST_END
+0x09 HCI_AMP_TEST
+0x0A HCI_WRITE_SECURE_CONNECTIONS_TEST_MODE
+)
+
+// HCI vendor specific command OCF values -OGF=3F
+(
+0x01 HCI_WRITE_BD_ADDR 
+0x02 HCI_READ_INQUIRY_RESPONSE_TIMEOUT 
+0x03 HCI_WRITE_INQUIRY_RESPONSE_TIMEOUT 
+0x04 HCI_READ_PAGE_SCAN_REPETITION_MODE 
+0x05 HCI_WRITE_PAGE_SCAN_REPETITION_MODE 
+0x06 HCI_READ_PAGE_RESPONSE_TIMEOUT 
+0x07 HCI_WRITE_PAGE_RESPONSE_TIMEOUT 
+0x08 HCI_READ_NEW_CONNECTION_TIMEOUT 
+0x09 HCI_WRITE_NEW_CONNECTION_TIMEOUT 
+0x0a HCI_INITIALIZE_BASEBAND 
+0x0b HCI_WRITE_LOCAL_SUPPORTED_FEATURES 
+0x0c HCI_WRITE_PARK_PARAMETERS 
+0x0d HCI_READ_PARK_PARAMETERS 
+0x0e HCI_WRITE_QUALITY_OF_SERVICE 
+0x0f HCI_NOT_USED 
+0x10 HCI_MODIFY_BEACON_PARAMETERS 
+0x11 HCI_UNPARK_USING_PM_ADDR 
+0x12 HCI_WRITE_HOPPING_CHANNELS 
+0x13 HCI_SLEEP_FOREVER_MODE 
+0x14 HCI_WRITE_AUTO_PAGE_SCAN_ENABLE 
+0x15 HCI_READ_AUTO_PAGE_SCAN_ENABLE 
+0x16 HCI_SET_ENCRYPTION_KEY_SIZE 
+0x17 HCI_INVALIDATE_FLASH_AND_REBOOT 
+0x18 HCI_UPDATE_UART_BAUD_RATE 
+0x19 HCI_WRITE_GPIO_1_4_AS_OUTPUT 
+0x1A HCI_WRITE_GPIO_2_LED 
+0x1B HCI_SET_TESTMODE_TYPE 
+0x1C HCI_WRITE_SCO_PCM_INT_PARAM 
+0x1D HCI_READ_SCO_PCM_INT_PARAM 
+0x1E HCI_WRITE_PCM_DATA_FORMAT_PARAM 
+0x1F HCI_READ_PCM_DATA_FORMAT_PARAM 
+0x20 HCI_WRITE_COMFORT_NOISE_PARAM 
+0x21 HCI_READ_COMFORT_NOISE_PARAM 
+0x22 HCI_WRITE_SCO_TS 
+0x23 HCI_READ_SCO_TS 
+0x24 HCI_WRITE_PCM_LOOPBACK_MODE 
+0x25 HCI_READ_PCM_LOOPBACK_MODE 
+0x26 HCI_SET_TRANSMIT_POWER 
+0x27 HCI_SET_SLEEPMODE_PARAM 
+0x28 HCI_READ_SLEEPMODE_PARAM 
+0x29 HCI_SLEEPMODE_CMD 
+0x2A HCI_DELAY_PERIPHERAL_SCO_STARTUP 
+0x2B HCI_WRITE_RECEIVE_ONLY 
+0x2C HCI_WRITE_RATE_CONTROL 
+0x2D HCI_TX_UNMOD_CARRIER 
+0x2E HCI_DOWNLOAD_MINIDRIVER 
+0x2F HCI_CRYSTAL_PPM 
+0x30 HCI_SET_POWER_AMP_BIAS 
+0x31 HCI_SET_HAM_BEHAVIOR 
+0x32 HCI_SET_AFH_BEHAVIOR 
+0x33 HCI_READ_USER_DEFINED_NVRAM 
+0x34 HCI_ENABLE_RADIO 
+0x35 HCI_READ_DIAGNOSTIC_INFO 
+0x36 HCI_GET_HID_DEVICE_LIST 
+0x37 HCI_ADD_HID_DEVICE 
+0x38 HCI_READ_APP_FW_CONFIG_VERSION 
+0x39 HCI_DELETE_HID_DEVICE 
+0x3B HCI_ENABLE_USB_HID_EMULATION 
+// 0x3A available
+// 0x3B available
+0x3C HCI_SEND_LMPDU 
+0x3D HCI_AUTO_PAIR_REQ 
+0x3E HCI_READ_VS_EXTENSION 
+0x3F HCI_WRITE_VS_EXTENSION 
+
+0x77 HCI_OPCODE_FC77
+0x79 HCI_OPCODE_FC79
+0xC4 HCI_DOWNLOAD_PATCH
+0xCC HCI_OPCODE_FCCC
+
+0x00 HCI_VENDOR_CMD_RESET
+0x01 HCI_VENDOR_CMD_CHIPID
+0x02 HCI_VENDOR_CMD_BAUD
+0x03 HCI_VENDOR_CMD_PATCH
+0x04 HCI_VENDOR_CMD_PATCH_DONE
+0x05 HCI_VENDOR_CMD_ECHO
+0x06 HCI_VENDOR_CMD_BDADDR
+
+0x07 HCI_VENDOR_CMD_ENTER_LPM
+0x08 HCI_VENDOR_CMD_COMMU_READY
+
+0x10 HCI_VENDOR_CMD_MEM
+0x11 HCI_VENDOR_CMD_EEP
+
+0X12 HCI_VENDOR_CMD_PATCH_SEC_INIT
+0X13 HCI_VENDOR_CMD_PATCH_SEC
+)
+
+//HCI LE controller command OCF values, OGF=8
+(
+0x01 HCI_LE_SET_EVENT_MASK
+0x02 HCI_LE_READ_BUFFER_SIZE
+0x03 HCI_LE_READ_LOCAL_SUPPORTED_FEATURES
+0x05 HCI_LE_SET_RANDOM_ADDRESS
+0x06 HCI_LE_SET_ADVERTISING_PARAMETERS
+0x07 HCI_LE_READ_ADVERTISING_CHANNEL_TX_POWER
+0x08 HCI_LE_SET_ADVERTISING_DATA
+0x09 HCI_LE_SET_SCAN_RESPONSE_DATA
+0x0A HCI_LE_SET_ADVERTISE_ENABLE
+0x0B HCI_LE_SET_SCAN_PARAMETERS
+0x0C HCI_LE_SET_SCAN_ENABLE
+0x0D HCI_LE_CREATE_CONNECTION
+0x0E HCI_LE_CREATE_CONNECTION_CANCEL
+0x0F HCI_LE_READ_WHITE_LIST_SIZE
+0x10 HCI_LE_CLEAR_WHITE_LIST
+0x11 HCI_LE_ADD_DEVICE_TO_WHITE_LIST
+0x12 HCI_LE_REMOVE_DEVICE_FROM_WHITE_LIST
+0x13 HCI_LE_CONNECTION_UPDATE
+0x14 HCI_LE_SET_HOST_CHANNEL_CLASSIFICATION
+0x15 HCI_LE_READ_CHANNEL_MAP
+0x16 HCI_LE_READ_REMOTE_USED_FEATURES
+0x17 HCI_LE_ENCRYPT
+0x18 HCI_LE_RAND
+0x19 HCI_LE_START_ENCRYPTION
+0x1A HCI_LE_LONG_TERM_KEY_REQUEST_REPLY
+0x1B HCI_LE_LONG_TERM_KEY_REQUEST_NEGATIVE_REPLY
+0x1C HCI_LE_READ_SUPPORTED_STATES
+0x1D HCI_LE_RECEIVER_TEST
+0x1E HCI_LE_TRANSMITTER_TEST
+0x1F HCI_LE_TEST_END
+0x20 HCI_LE_REMOTE_CONNECTION_PARAMETER_REQUEST_REPLY
+0x21 HCI_LE_REMOTE_CONNECTION_PARAMETER_REQUEST_NEGATIVE_REPLY
+)
+// HCI event code
+(
+0x01 HCI_EVENT_INQUIRY_COMPLETE
+0x02 HCI_EVENT_INQUIRY_RESULT
+0x03 HCI_EVENT_CONNECTION_COMPLETE
+0x04 HCI_EVENT_CONNECTION_REQUEST
+0x05 HCI_EVENT_DISCONNECTION_COMPLETE
+0x06 HCI_EVENT_AUTHENTICATION_COMPLETE
+0x07 HCI_EVENT_REMOTE_NAME_REQUEST_COMPLETE
+0x08 HCI_EVENT_ENCRYPTION_CHANGE_COMPLETE
+0x09 HCI_EVENT_CHANGE_CONNECTION_LINK_KEY_COMPLETE
+0x0A HCI_EVENT_MASTER_LINK_KEY_COMPLETE
+0x0B HCI_EVENT_READ_REMOTE_FEATURES_COMPLETE
+0x0C HCI_EVENT_READ_REMOTE_VERSION_INFORMATION_COMPLETE
+0x0D HCI_EVENT_QOS_SETUP_COMPLETE
+0x0E HCI_EVENT_COMMAND_COMPLETE
+0x0F HCI_EVENT_COMMAND_STATUS
+0x10 HCI_EVENT_HARDWARE_ERROR
+0x11 HCI_EVENT_FLUSH_OCCURRED
+0x12 HCI_EVENT_ROLE_CHANGE
+0x13 HCI_EVENT_NUM_COMPLETED_PACKETS
+0x14 HCI_EVENT_MODE_CHANGE
+0x15 HCI_EVENT_RETURN_LINK_KEYS
+0x16 HCI_EVENT_PIN_CODE_REQUEST
+0x17 HCI_EVENT_LINK_KEY_REQUEST
+0x18 HCI_EVENT_LINK_KEY_NOTIFICATION
+0x19 HCI_EVENT_LOOPBACK_COMMAND
+0x1A HCI_EVENT_DATA_BUFFER_OVERFLOW
+0x1B HCI_EVENT_MAX_SLOTS_CHANGE
+0x1C HCI_EVENT_READ_CLOCK_OFFSET_COMPLETE
+0x1D HCI_EVENT_CONNECTION_PACKET_TYPE_CHANGED
+0x1E HCI_EVENT_QOS_VIOLATION
+0x1F HCI_EVENT_PAGE_SCAN_MODE_CHANGE
+0x20 HCI_EVENT_PAGE_SCAN_REPETITION_MODE_CHANGE
+0x21 HCI_EVENT_FLOW_SPECIFICATION_COMPLETE
+0x22 HCI_EVENT_INQUIRY_RESULT_WITHRSSI
+0x23 HCI_EVENT_READ_REMOTE_EXT_FEATURES_COMPLETE
+0x2C HCI_EVENT_SCO_CONNECTION_COMPLETE
+0x2D HCI_EVENT_SCO_CONNECTION_CHANGED
+0x2E HCI_EVENT_SNIFF_SUBRATING
+0x2F HCI_EVENT_EXT_INQUIRY_RESULT
+0x30 HCI_EVENT_ENCRYPT_KEY_REFRESH_COMPLETE
+0x31 HCI_EVENT_IO_CAP_REQ
+0x32 HCI_EVENT_IO_CAP_RESPONSE
+0x33 HCI_EVENT_USER_CONFIRMATION_REQUEST
+0x34 HCI_EVENT_UESR_PASSKEY_REQUEST
+0x35 HCI_EVENT_REMOTE_OOB_DATA_REQUEST
+0x36 HCI_EVENT_SIMPLE_PAIRING_COMPLETE
+0x38 HCI_EVENT_LINK_SUPERVISION_TIMEOUT_CHANGED
+0x39 HCI_EVENT_ENHANCED_FLUSH_COMPLETE
+0x3B HCI_EVENT_USER_PASSKEY_NOTIFICATION
+0x3C HCI_EVENT_KEYPRESS_NOTIFICATION
+0x3D HCI_EVENT_REMOTE_HOST_SUPPORTED_FEATURES_NOTIFICATION 
+0x3E HCI_EVENT_LE_META_EVENT
+0x40 HCI_EVENT_PHYSICAL_LINK_COMPLETE
+0x41 HCI_EVENT_CHANNEL_SELECTED
+0x42 HCI_EVENT_DISCONNECTION_PHYSICAL_LINK_COMPLETE
+0x43 HCI_EVENT_PHYSICAL_LINK_LOSS_EARLY_WARNING
+0x44 HCI_EVENT_PHYSICAL_LINK_RECOVERY
+0x45 HCI_EVENT_LOGICAL_LINK_COMPLETE
+0x46 HCI_EVENT_DISCONNECTION_LOGICAL_LINK_COMPLETE
+0x47 HCI_EVENT_FLOW_SPEC_MODIFY_COMPLETE
+0x48 HCI_EVENT_NUMBER_OF_COMPLETED_DATA_BLOCKS
+0x49 HCI_EVENT_AMP_START_TEST
+0x4A HCI_EVENT_AMP_TEST_END
+0x4B HCI_EVENT_AMP_RECEIVER_REPORT
+0x4C HCI_EVENT_SHORT_RANGE_MODE_CHANGE_COMPLETE
+0x4D HCI_EVENT_AMP_STATUS_CHANGE
+0x4E HCI_EVENT_TRIGGERED_CLOCK_CAPTURE
+0x4F HCI_EVENT_SYNCHRONIZATION_TRAIN_COMPLETE
+0x50 HCI_EVENT_SYNCHRONIZATION_TRAIN_RECEIVED
+0x51 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_RECEIVE
+0x52 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_TIMEOUT
+0x53 HCI_EVENT_TRUNCATED_PAGE_COMPLETE
+0x54 HCI_EVENT_SLAVE_PAGE_RESPONSE_TIMEOUT
+0x55 HCI_EVENT_CONNECTIONLESS_SLAVE_BROADCAST_CHANNEL_MAP_CHANGE
+0x56 HCI_EVENT_INQUIRY_RESPONSE_NOTIFICATION
+0x57 HCI_EVENT_AUTHENTICATED_PAYLOAD_TIMEOUT_EXPIRED
+
+0xFE HCI_EVENT_LOGO_TESTING
+0xFF HCI_EVENT_VENDOR_SPECIFIC
+)
+(
+0x01 HCI_VENDOR_EVENT_COMMU_READY
+)
+//HCI LE SUBEVENT CODE
+(
+0x01 HCI_LE_SUBEVENT_CONN_COMPLETE
+0x02 HCI_LE_SUBEVENT_ADV_REPORT
+0x03 HCI_LE_SUBEVENT_CONN_UPDATE_COMPLETE
+0x04 HCI_LE_SUBEVENT_REMOTE_FEATURE_COMPLETE
+0x05 HCI_LE_SUBEVENT_LTK_REQUEST
+0x06 HCI_LE_SUBEVENT_REMOTE_CONN_PARAM_REQ
+)
+
+(
+0x00 HCI_LPM_OFF
+0x01 HCI_LPM_ON
+)
+
+
+(
+33 HOST_WAKE_TIME
+)
+
+(
+1 HCI_RX_WAKE
+0 HCI_RX_READY
+)
+
+
+(
+/*HID TYPE*/
+0x01 HID_TYPE_CONTROL
+0x04 HID_TYPE_GET_REPORT
+0x05 HID_TYPE_SET_REPORT
+0x07 HID_TYPE_SET_PROTOCOL
+0x09 HID_TYPE_SET_IDLE
+0x0a HID_TYPE_DATA
+/*HID REPORT ID*/
+0x01 HID_REPORT_ID_KB
+
+0x00 HID_CONTROL_P_NOOPERATION
+0x01 HID_CONTROL_P_HARDRESET
+0x02 HID_CONTROL_P_SOFTRESET
+0x03 HID_CONTROL_P_SUSPEND
+0x04 HID_CONTROL_P_EXITSUSPEND
+0x05 HID_CONTROL_P_VIRTUALCABLEUNPLUG
+)
+
+
+
+
+
+
+
+
+//0 mem_kscan_head_ptr
+//1 mem_col_num
+//1 mem_row_num
+//4 mem_col_conf_pin
+//4 mem_row_conf_pin
+//1 mem_row_count
+//1 mem_count_shift
+//2 mem_kscan_value_temp
+//2 mem_kscan_lastvalue
+//2 mem_kscan_value
+//4 mem_btclk_kscan
+//1 mem_btclk_kscan_interval
+
+
+0x00 KEYSCAN_OFFECT_COL_NUM
+0x01 KEYSCAN_OFFECT_ROW_NUM
+0x02 KEYSCAN_OFFECT_COL_CONF_PIN
+0x06 KEYSCAN_OFFECT_ROW_CONF_PIN
+
+0x0a KEYSCAN_OFFECT_ROW_COUNT
+0x0b KEYSCAN_OFFECT_SHIFT_COUNT
+
+0X0C KEYSCAN_OFFECT_VALUE_TEMP
+0X0E KEYSCAN_OFFECT_LASVALUE
+0X10 KEYSCAN_OFFECT_VALUE
+0x12 KEYSCAN_OFFECT_BTCLK
+0x16 KEYSCAN_OFFECT_BTCLK_INTERVAL
+
+
+
+0x025d mem_l2cap_mem_start
+0x025d mem_l2cap_rxbuff1_len
+0x025f mem_l2cap_rxbuff2_len
+0x0261 mem_l2cap_rxbuff_new
+0x0263 mem_l2cap_rxbuff_inuse
+0x0264 mem_l2cap_payload_ptr
+0x0266 mem_l2cap_rx_pkt_length
+0x0268 mem_l2cap_rx_cid
+0x026a mem_l2cap_rx_done
+0x026b mem_l2cap_signal_tx_buff_ptr
+0x026d mem_l2cap_signal_tx_payload_ptr
+0x026f mem_l2cap_signal_tx_length
+0x0271 mem_sdp_tx_buff_ptr
+0x0273 mem_sdp_tx_payload_ptr
+0x0275 mem_sdp_tx_pkt_length
+0x0277 mem_rfcomm_tx_buff_ptr
+0x0279 mem_rfcomm_tx_payload_ptr
+0x027b mem_rfcomm_tx_pkt_length
+0x027d memL2CAP_T1
+0x027f mem_CONTROL_tasks
+0x0280 mem_send_config_req
+0x0281 mem_config_identifier
+0x0282 mem_config_req_dest_CID
+0x0284 mem_rfcomm_malloc_fail_flag
+0x0285 mem_message_to_uppersm
+0x0286 mem_upper_sm_remote_page
+0x0287 mem_upper_sm_reconn
+0x0288 mem_upper_sm_ss
+0x0289 mem_tx_malloc_log
+0x02c9 mem_l2cap_mem_end
+0x02c9 mem_scid
+0x02cb mem_cmd_length
+0x02cd mem_tt2
+0x02cf mem_tt3
+0x02d1 mem_id
+0x02d3 mem_psm
+0x02d5 mem_l2cap_sdpres_delay_time
+
+
+
+//mem_l2cap_lpm_txbuf
+(
+256 l2cap_lpm_txbuf_len
+)
+
+(
+4 L2CAP_TX_FIFO_SIZE
+8 L2CAP_TX_BUFF_CNT
+
+)
+(
+0x0002 L2CAP_SIG_EXT_FEATRUE
+0x0003 L2CAP_SIG_FIX_FEATRUE
+)
+
+
+(
+0 HS_IDLE
+1 AG_INIT_CALL
+2 HS_INIT_CALL
+)
+(
+0 M_ACL_LINK_ABSENT
+1 M_ACL_LINK_EXIST
+)
+
+(
+0 L2CAP_INUSE_BUFF1
+1 L2CAP_INUSE_BUFF2
+)
+/* upper layer interface w/ lower layer */
+(
+1 MAX_NUM_LINKS_ALLOWED
+1 MAX_NUM_SCO_ALLOWED
+1 ACL_LINK_PRESENT
+0 ACL_LINK_ABSENT
+)
+(
+1 L2CAP_RX_DONE 
+0 L2CAP_RX_CLEAR
+)
+/* Scheduler */
+(
+0 L2CAP_DISCONNECT_INTERRUPT
+1 RFCOMM_wants_service
+2 L2CAP_sig_Tx_buff_full
+3 RFCOMM_Tx_buff_full
+4 SDP_Tx_buff_full
+5 got_complete_L2CAP_pkt	
+6 L2CAP_init_Config_Req
+7 L2CAP_DISCONNECT_CONTROL
+)
+
+/* mem_CONTROL_tasks2 */
+(
+0 UI_NEED_SERVICE
+)
+/* L2CAP logic channel identifiers (2 bytes) p.261 */
+(
+0x0001 L2CAP_signal_channel
+0x0050 L2CAP_SDP_channel
+0x0051 L2CAP_RFCOMM_channel
+0x0052 L2CAP_HID_Control_channel   
+0x0053 L2CAP_HID_Interrupt_channel
+0x0077 L2CAP_AVDTP_signal_channel		//------avdtp
+0x0078 L2CAP_AVDTP_media_channel
+0x0079 L2CAP_AVDTP_report_channel
+0x0080 L2CAP_AVDTP_recovery_channel
+0x00dd L2CAP_AVCTP_Control_channel
+)
+/* L2CAP signalling command codes (1 byte) p.284 */
+(
+0x00 reserved
+0x01 signal_cmd_reject
+0x02 signal_connect_req
+0x03 signal_connect_rsp
+0x04 signal_config_req
+0x05 signal_config_rsp
+0x06 signal_disconnect_req
+0x07 signal_disconnect_rsp
+0x08 signal_echo_req
+0x09 signal_echo_rsp
+0x0a signal_info_req
+0x0b signal_info_rsp
+)
+/* L2CAP signal_command_reject reason code (2 bytes), p.285 */
+(
+0x0000 cmd_not_understood
+0x0001 signalling_MTU_exceeded
+0x0002 invalid_CID_in_req
+)
+/* L2CAP PSM values used in signal_connect_req (2 bytes), p.286 */
+(
+0x0001 PSM_SDP
+0x0003 PSM_RFCOMM
+0x0005 PSM_TCS
+0x0011 PSM_HID_control
+0x0013 PSM_HID_interrupt
+0x0017 PSM_AVCTP
+0x0019 PSM_AVDTP
+)
+/* L2CAP connection response result code (2 bytes), p.288 */
+(
+0x0000 L2CAP_connect_successful
+0x0001 L2CAP_connect_pending
+0x0002 L2CAP_connect_refused_PSM_unsupported
+0x0003 L2CAP_connect_refused_security_block
+0x0004 L2CAP_connect_refused_no_resources
+)
+/* L2CAP connection status values (2 bytes), p.288 */
+(
+0x0000 L2CAP_no_info_available
+0x0001 L2CAP_authentication_pending
+0x0002 L2CAP_authorization_pending
+)
+/* L2CAP configuration response result code (2 bytes), p.292 */
+(
+0x0000 L2CAP_config_success
+0x0001 L2CAP_config_failure_bad_parameters
+0x0002 L2CAP_config_failure_no_reason
+0x0003 L2CAP_config_failure_unknown_options
+)
+/* L2CAP constant definitions */
+(
+128 L2CAP_Rx_buff_size
+48  L2CAP_signal_Tx_buff_size
+128 SDP_Tx_buff_size
+128 RFCOMM_Tx_buff_size
+1 AM_ADDRESS
+3 DM1TYPE
+4 DH1TYPE
+11 DH3TYPE
+8 DVTYPE
+0 channel_state_closed
+1 channel_state_config
+2 channel_state_open
+0x0030 L2CAP_config_MTU_SDP
+0xffff L2CAP_config_ftimeout_SDP
+0x03e3 L2CAP_config_MTU_RFCOMM
+0xffff L2CAP_config_ftimeout_RFCOMM
+260 l2cap_max_pkt_len
+)
+
+(
+0 FAILURE
+1 SUCCESS
+2 IN_PROGRESS
+)
+(
+0x00	IDLE
+0x01	WAIT_4_BB_PAGE
+0x02	WAIT_4_LMP_CONN
+0x03	WAIT_4_SCO_CONN
+0x04	WAIT_4_SCO_KILLED
+)
+
+/*mem_master_mss*/
+(
+0 STOP_ENC
+1 SEND_SWITCH_REQ
+)
+(
+0 HF_HS_READY
+1 HF_AG_READY
+)
+/* mem_hf_state */
+(
+0 HF_STATE_WAITING_RFCOMM_CONN
+1 HF_STATE_HF_SEND_FEATURE
+2 HF_STATE_WAITING_AG_FEATURE_OK
+3 HF_STATE_HF_SEND_INDICATORS
+4 HF_STATE_WAITING_AG_INDICATORS_OK
+5 HF_STATE_HF_SEND_CURR_STATUS
+6 HF_STATE_WAITING_AG_STATUS_OK
+7 HF_STATE_HF_SEND_UPDATE_STATUS
+8 HF_STATE_WAITING_AG_UPDATE_STATUS_OK
+9 HF_STATE_CONNECTED
+0x0a HF_STATE_HF_SEND_RECEIVE_INFO
+0x0b HF_STATE_WAITING_AG_INFO
+0x0c HF_STATE_HF_SEND_AT_CLIP
+0x0d HF_STATE_WAITING_AT_CLIP
+0x0e HF_STATE_HF_SEND_AT_CCWA
+0x0f HF_STATE_WAITING_AT_CCWA
+)
+/*mem_hf_call_state*/
+(
+0 HF_CALL_STATE_INACTIVE
+1 HF_CALL_STATE_SETUP
+2 HF_CALL_STATE_ACTIVE 
+)
+/* mem_pairing_state bit definition */
+(
+0 PAIR_INQUIRY_START
+1 PAIR_INQUIRY_TIME_OUT
+2 PAIR_INQUIRY_FAILED
+3 PAIR_INQUIRY_SUCCESS
+4 PAIR_READY_CONN
+5 PAIR_WAIT_CANCEL_RESPONSE
+6 PAIR_CONN_SUCCESS
+7 PAIR_WAIT_DETACH
+)  
+
+/* mem_pairing_mode bit definition */
+(
+0 FORCE_AUTHENTICATION
+)
+/* mem_hid_protecol_type */
+(
+0 PROTECOL_BOOT /*default*/
+1 PROTECOL_REPORT
+)
+
+/* mem_upper_sm_reconn */
+(
+1 UPPERSM_SEND_SDP_CONN_REQ
+2 UPPERSM_SEND_SDP_CFG_REQ
+3 UPPERSM_SEND_SDP_HF_SS
+4 UPPERSM_SEND_SDP_DISC_REQ
+5 UPPERSM_SEND_RFCOMM_CONN_REQ
+6 UPPERSM_SEND_RFCOMM_CFG_REQ
+7 UPPERSM_SEND_SABM_CMD
+8 UPPERSM_SEND_DISC
+9 UPPERSM_SEND_WAIT
+10 UPPERSM_SEND_HID_CONTROL_CONN_REQ
+11 UPPERSM_SEND_HID_CONTROL_CFG_REQ
+12 UPPERSM_SEND_HID_INTERRUPT_CONN_REQ
+13 UPPERSM_SEND_HID_INTERRUPT_CFG_REQ
+14 UPPERSM_SEND_SDP_HS_SS
+15 UPPERSM_SEND_SDP_PBAP_SS
+16 UPPERSM_SEND_SDP_AVTARG_SS
+)
+/* mem_upper_sm_remote_page */
+(
+1 UPPERSM_RP_SEND_SDP_CONN_REQ
+2 UPPERSM_RP_SEND_SDP_CFG_REQ
+3 UPPERSM_RP_SEND_SDP_HF_SS
+4 UPPERSM_RP_SEND_SDP_HS_SS
+5 UPPERSM_RP_SEND_SDP_PBAP_SS
+6 UPPERSM_RP_SEND_SDP_AVTARG_SS
+7 UPPERSM_RP_SEND_SDP_DISC_REQ
+8 UPPERSM_RP_SEND_AVCTP_CONN_REQ
+9 UPPERSM_RP_SEND_AVCTP_CFG_REQ
+)
+
+/* mem_ML2CAP_flag */
+(
+0 MSCHEDULER_HID_CONTROL_CONN_DONE
+1 MSCHEDULER_HID_INTERRUPT_CONN_DONE
+2 MSCHEDULER_HID_CONTROL_CFG_REQ_DONE
+3 MSCHEDULER_HID_CONTROL_CFG_RSP_DONE
+4 MSCHEDULER_HID_INTERRUPT_CFG_REQ_DONE
+5 MSCHEDULER_HID_INTERRUPT_CFG_RSP_DONE
+6 MSCHEDULER_HID_CONTROL_DISC_DONE
+7 MSCHEDULER_HID_INTERRUPT_DISC_DONE
+)
+/*    ui event    --add by lj*/
+(
+0x00 UI_DATA_EVNET_NONE
+0x01 UI_DATA_EVNET_HID
+0x02 UI_DATA_EVNET_AVDTP_S
+0x03 UI_DATA_EVNET_AVDTP_M
+0x04 UI_DATA_EVNET_AVCTP
+0x05 UI_DATA_EVNET_HS
+0x06 UI_DATA_EVNET_HF
+0x07 UI_DATA_EVNET_SPP
+0x08 UI_DATA_EVNET_OBEX
+)
+/*    ui ack --add by lj*/
+(
+0x00 UI_DATA_TX_NONE
+0x01 UI_DATA_TX_HID
+0x02 UI_DATA_TX_AVDTP_S
+0x03 UI_DATA_TX_AVDTP_M
+0x04 UI_DATA_TX_AVCTP
+0x05 UI_DATA_TX_HS
+0x06 UI_DATA_TX_HF
+0x07 UI_DATA_TX_SPP
+0x08 UI_DATA_TX_OBEX
+0x10 ACL_TX_L2CAP_SIGNAL
+0x11 ACL_TX_SDP
+0x12 ACL_TX_RFCOMM
+
+)
+
+(
+0 L2CAP_SDP_interface_conn
+1 L2CAP_SDP_interface_cfg
+)
+
+(                                   
+0 L2CAP_CHANNEL_STATE_CONN_REQ      
+1 L2CAP_CHANNEL_STATE_CONN_RES      
+2 L2CAP_CHANNEL_STATE_SND_CFG_REQ   
+3 L2CAP_CHANNEL_STATE_SND_CFG_RES   
+4 L2CAP_CHANNEL_STATE_RCV_CFG_REQ   
+5 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+6 L2CAP_CHANNEL_RFCOMM_ONLY_SABM
+7 L2CAP_CHANNEL_RFCOMM_ONLY_UA
+6 L2CAP_CHANNEL_AVDTP_SIGNAL_INIT //set avdtp init complete
+6 L2CAP_CHANNEL_HID_HANDSHAKE_DONE
+0x3f L2CAP_CHANNEL_SETUP_COMPLETE
+0x7f L2CAP_CHANNEL_AVDTP_SIGNAL_COMPLETE
+0xff L2CAP_CHANNEL_RFCOMM_DLCI0_OPENED
+)                                     
+
+/*  AVDTP---lj*/
+(
+0 L2CAP_AVDTP_SIGNAL_CONNECT
+1 L2CAP_AVDTP_SIGNAL_CONFIG
+2 L2CAP_AVDTP_MEDIA_CONNECT
+3 L2CAP_AVDTP_MEDIA_CONFIG
+4 L2CAP_AVDTP_REPORT_CONNECT
+5 L2CAP_AVDTP_REPORT_CONFIG
+6 L2CAP_AVDTP_RECOVERY_CONNECT
+7 L2CAP_AVDTP_RECOVERY_CONFIG
+)
+/*  AVCTP---lj*/
+(
+0 L2CAP_AVCTP_SIGNAL_CONNECT
+1 L2CAP_AVCTP_SIGNAL_CONFIG
+)
+
+127 L2CAP_SIGNAL_MALLOC_SIZE
+
+//1 mem_rfcomm_malloc_fail_flag
+(
+0 RFCOMM_MALLOC_SUCCEED
+1 RFCOMM_MALLOC_FAIL
+)
+
+//mem_l2cap_flow_ctrl_flag
+(
+0 L2CAP_FLOW_CTRL_DISABLE
+1 L2CAP_FLOW_CTRL_ENABLE
+)
+
+
+0x02d9 mem_le_rxbuf
+0x0311 mem_le_l2capbuf
+0x0417 mem_le_mic
+0x041b mem_le_peer_mic
+0x041f mem_le_peer_ltk
+0x042f mem_le_mrand
+0x043f mem_le_state
+0x0440 mem_le_mode
+0x0441 mem_le_tsniff
+0x0443 mem_le_anchor
+0x0447 mem_le_clk_offset
+0x044d mem_le_receive_window
+0x044f mem_le_plap
+0x0455 mem_le_conn_handle
+0x0456 mem_le_arq
+0x0457 mem_le_ch
+0x0458 mem_le_hop
+0x0459 mem_le_event_count
+0x045b mem_le_supervision_timer
+0x045f mem_le_instant
+0x0461 mem_le_channels
+0x0462 mem_le_op
+0x0463 mem_le_access
+0x0467 mem_le_crcinit
+0x046a mem_le_window_size
+0x046b mem_le_slave_latency
+0x046d mem_le_superto
+0x046f mem_le_channel_map
+0x0474 mem_le_no_using
+0x0476 mem_le_peer_sca
+0x0477 mem_le_att_opcode
+0x0478 mem_le_att_handle
+0x047a mem_le_err_code
+0x047b mem_le_ll_pairing_fail_reason
+0x047c mem_le_sk
+0x048c mem_le_testtype
+0x048d mem_le_test_sync
+0x048f mem_le_test_pcnt
+0x0491 mem_le_rxon_ts
+0x0497 mem_le_rx_ll_opcode
+0x0498 mem_le_notify_attr_start
+0x049a mem_le_notify_len
+0x049b mem_cmd_le_create_conn
+0x049c mem_le_cur_attlist_start_ptr
+0x049e mem_le_cur_handle_start
+0x04a0 mem_le_cur_handle_end
+0x04a2 mem_le_cur_uuid_length
+0x04a3 mem_le_cur_uuid
+0x04b3 mem_le_curr_att_len
+0x04b4 mem_le_search_res
+0x04b5 mem_le_continue_type
+
+
+
+
+(
+0x000001 param_le_features
+0x000a06 param_le_version
+0x1d87 param_le_subversion
+1636 param_sifs
+0x1e0 param_clke_cal_le
+0xa0 param_le_sca
+)
+
+(
+0 DEFAULT_STATES
+1 IPHONE_LOST_LTK
+2 MODULE_LOST_LTK
+3 LTK_NOT_LOST
+)
+
+
+(
+27 LE_MAX_PAKET_LEN
+)
+
+/* advertising channel PDU type */
+(
+0 ADV_IND
+1 ADV_DIRECT_IND
+2 ADV_NONCONN_IND
+3 SCAN_REQ
+4 SCAN_RSP
+5 CONNECT_REQ
+6 ADV_SCAN_IND
+)
+
+(
+0x01	GAP_ADTYPE_FLAGS
+0x02	GAP_ADTYPE_16BIT_MORE
+0x03	GAP_ADTYPE_16BIT_COMPLETE
+0x04	GAP_ADTYPE_32BIT_MORE
+0x05	GAP_ADTYPE_32BIT_COMPLETE
+0x06	GAP_ADTYPE_128BIT_MORE
+0x07	GAP_ADTYPE_128BIT_COMPLETE
+0x08	GAP_ADTYPE_LOCAL_NAME_SHORT
+0x09	GAP_ADTYPE_LOCAL_NAME_COMPLETE
+0x0a	GAP_ADTYPE_POWER_LEVEL
+0xff	GAP_ADTYPE_MANUFACTURER_SPECIFIC
+)
+
+
+	/* LE control packet type */
+	(
+	0x00 LL_CONNECTION_UPDATE_REQ
+	0x01 LL_CHANNEL_MAP_REQ
+	0x02 LL_TERMINATE_IND
+	0x03 LL_ENC_REQ
+	0x04 LL_ENC_RSP
+	0x05 LL_START_ENC_REQ
+	0x06 LL_START_ENC_RSP
+	0x07 LL_UNKNOWN_RSP
+	0x08 LL_FEATURE_REQ
+	0x09 LL_FEATURE_RSP
+	0x0A LL_PAUSE_ENC_REQ
+	0x0B LL_PAUSE_ENC_RSP
+	0x0C LL_VERSION_IND
+	0x0D LL_REJECT_IND
+	0x0E LL_SLAVE_FEATURE_REQ
+	0x0F LL_CONNECTION_PARAM_REQ
+	0x10 LL_CONNECTION_PARAM_RSP
+	0x11 LL_REJECT_IND_EXT
+	0x12 LL_PING_REQ
+	0x13 LL_PING_RSP
+	)
+
+	/* Security Manager Protocol Code */
+	(
+	0x01 SMP_PAIRING_REQUEST
+	0x02 SMP_PAIRING_RESPONSE
+	0x03 SMP_PAIRING_CONFIRM
+	0x04 SMP_PAIRING_RANDOM
+	0x05 SMP_PAIRING_FAILED
+	0x06 SMP_ENCRYPTION_INFORMATION
+	0x07 SMP_MASTER_IDENTIFICATION
+	0x08 SMP_IDENTITY_INFORMATION
+	0x09 SMP_IDENTITY_ADDRESS_INFORMATION
+	0x0A SMP_SIGNING_INFORMATION
+	0x0B SMP_SECURITY_REQUEST
+	0x0c SMP_PAIRING_PUBLIC_KEY
+	0x0d SMP_PAIRING_DHKEY_CHECK
+	)
+
+	/* L2CAP Signaling OPCODE */
+	(
+	0x12 L2CAP_CONNECTION_PARAMETER_UPDATE_REQUEST
+	0x13 L2CAP_CONNECTION_PARAMETER_UPDATE_RESPONSE
+	)
+
+	/* ATT OPCODE */
+	(
+	0x01 ATTOP_ERROR_RESPONSE
+	0x02 ATTOP_EXCHANGE_MTU_REQUEST
+	0x03 ATTOP_EXCHANGE_MTU_RESPONSE
+	0x04 ATTOP_FIND_INFORMATION_REQUEST
+	0x05 ATTOP_FIND_INFORMATION_RESPONSE
+	0x06 ATTOP_FIND_BY_TYPE_VALUE_REQUEST
+	0x07 ATTOP_FIND_BY_TYPE_VALUE_RESPONSE
+	0x08 ATTOP_READ_BY_TYPE_REQUEST
+	0x09 ATTOP_READ_BY_TYPE_RESPONSE
+	0x0A ATTOP_READ_REQUEST
+	0x0B ATTOP_READ_RESPONSE
+	0x0C ATTOP_READ_BLOB_REQUEST
+	0x0D ATTOP_READ_BLOB_RESPONSE
+	0x0E ATTOP_READ_MULTIPLE_REQUEST
+	0x0F ATTOP_READ_MULTIPLE_RESPONSE
+	0x10 ATTOP_READ_BY_GROUP_TYPE_REQUEST
+	0x11 ATTOP_READ_BY_GROUP_TYPE_RESPONSE
+	0x12 ATTOP_WRITE_REQUEST
+	0x13 ATTOP_WRITE_RESPONSE
+	0x16 ATTOP_PREPARE_WRITE_REQUEST
+	0x17 ATTOP_PREPARE_WRITE_RESPONSE
+	0x18 ATTOP_EXECUTE_WRITE_REQUEST
+	0x19 ATTOP_EXECUTE_WRITE_RESPONSE
+	0x1B ATTOP_HANDLE_VALUE_NOTIFICATION
+	0x1D ATTOP_HANDLE_VALUE_INDICATION
+	0x1E ATTOP_HANDLE_VALUE_CONFIRMATION
+	0x52 ATTOP_WRITE_COMMAND
+	0xD2 ATTOP_SIGNED_WRITE_COMMAND
+	0x1f ATTOP_CONTINUE
+	0x9e EMPTY_LE_DATA_PRE
+	0x9f EMPTY_LE_DATA
+	)
+
+	/* ATT error code */
+	(
+	0x01 ATT_ERR_INVALID_HANDLE
+	0x02 ATT_ERR_READ_NOT_PERMITTED
+	0x03 ATT_ERR_WRITE_NOT_PERMITTED
+	0x04 ATT_ERR_INVALID_PDU
+	0x05 ATT_ERR_INSUFFICIENT_AUTHENTICATION
+	0x06 ATT_ERR_REQUEST_NOT_SUPPORTED
+	0x07 ATT_ERR_INVALID_OFFSET
+	0x08 ATT_ERR_INSUFFICIENT_AUTHORIZATION
+	0x09 ATT_ERR_PREPARE_QUEUE_FULL
+	0x0A ATT_ERR_ATTRIBUTE_NOT_FOUND
+	0x0B ATT_ERR_ATTRIBUTE_NOT_LONG
+	0x0C ATT_ERR_INSUFFICIENT_ENCRYPTION_KEY_SIZE
+	0x0D ATT_ERR_INVALID_ATTRIBUTE_VALUE_LENGTH
+	0x0E ATT_ERR_UNLIKELY_ERROR
+	0x0F ATT_ERR_INSUFFICIENT_ENCRYPTION
+	0x10 ATT_ERR_UNSUPPORTED_GROUP_TYPE
+	0x11 ATT_ERR_INSUFFICIENT_RESOURCES
+	)
+	/*	SERVICE UUID	*/
+	(
+	0x1800 UUID_SERVICE_GENERIC_ACC
+	0x1801 UUID_SERVICE_GENERIC_ATT
+	0x180a UUID_SERVICE_DEVICE_INFO
+	0x180f UUID_SERVICE_BATTERY
+	0x1812 UUID_SERVICE_HIDS
+	0x2800 UUID_GATT_PRIMARY_SERVICE
+	0x2801 UUID_GATT_SECONDARY_SERVICE
+	0X2802 UUID_GATT_INCLUDE
+	0X2803 UUID_GATT_CHARACTERISTIC
+	0X2A00 UUID_CHRCTR_DEVICE_NAME
+	0X2A19 UUID_CHRCTR_BATTERY_LEVEL
+	0X2A22 UUID_CHRCTR_KEYBOARD_INPUT
+	0X2A23 UUID_CHRCTR_SYSTEM_ID 
+	0X2A25 UUID_CHRCTR_SERIAL_NUMBER
+	0X2A26 UUID_CHRCTR_FIRMWARE
+	0X2A32 UUID_CHRCTR_KEYBOARD_OUTPUT
+	0X2A33 UUID_CHRCTR_MOUSE_INPUT
+	0X2A4A UUID_CHRCTR_HID_INFO
+	0X2A4B UUID_CHRCTR_REPORT_MAP
+	0X2A4C UUID_CHRCTR_HID_CTRL_POINT
+	0X2A4D UUID_CHRCTR_REPORT
+	0X2A4E UUID_CHRCTR_PROTOCOL_MODE
+	)
+
+	(// pairing failed reason
+	0x00 PAIRING_FAILED_RESERVED
+	0X01 PAIRING_FAILED_PASSKEY_ENTRY_FAILED
+	0X02 PAIRING_FAILED_OOB_NOT_AVAILABLE
+	0X03 PAIRING_FAILED_AUTHENTICATION_REQUIRE
+	0X04 PAIRING_FAILED_CONFIRM_VALUE_FAILED
+	0X05 PAIRING_FAILED_PAIRING_NOT_SUPPORTED
+	0X06 PAIRING_FAILED_ENCRYPTION_KEY_SIZE
+	0X07 PAIRING_FAILED_COMMAND_NOT_SUPPORTED
+	0X08 PAIRING_FAILED_UNSPECIFIED_REASON
+	0X09 PAIRING_FAILED_REPEATED_ATTEMPTS
+	0X0A PAIRING_FAILED_INVALID_PARAMETERS
+	0X0B PAIRING_FAILED_DHKEY_CHECK_FAILED
+	0X0C PAIRING_FAILED_NUMERIC_COMPARISON_FAILED
+	0X0D PAIRING_FAILED_BR_EDR_PAIRING_IN_PROGRESS
+	0X0E PAIRING_FAILED_KEY_DERIVATION_GENERATION_NOT_ALLOWED
+	)
+
+
+	//BLE ErrorCodes
+	(    
+	0x01 ERROR_UNKNOWN_HCI_COMMAND
+	0x02 ERROR_NO_CONNECTION
+	0x03 ERROR_HARDWARE_FAILURE
+	0x04 ERROR_PAGE_TIMEOUT
+	0x05 ERROR_AUTHENTICATION_FAILURE
+	0x06 ERROR_KEY_MISSING
+	0x07 ERROR_MEMORY_FULL
+	0x08 ERROR_CONNECTION_TIMEOUT
+	0x09 ERROR_MAX_CONNECTIONS
+	0x0A ERROR_MAX_SCO_CONNECTIONS
+	0x0B ERROR_MAX_ACL_CONNECTIONS
+	0x0C ERROR_COMMAND_DISALLOWED
+	0x0D ERROR_HOST_REJECT_LIMITED_RESOURCES
+	0x0E ERROR_HOST_REJECT_SECURITY_REASONS
+	0x0F ERROR_HOST_REJECT_REMOTE_IS_ONLY_PERSONAL
+	0x10 ERROR_HOST_TIMEOUT
+	0x11 ERROR_UNSUPPORTED_FEATURE_OR_PARAMETER_VALUE
+	0x12 ERROR_INVALID_HCI_COMMAND_PARAMETERS
+	0x13 ERROR_REMOTE_USER_TERMINATED_CONNECTION
+	0x14 ERROR_REMOTE_LOW_RESOURCES
+	0x15 ERROR_REMOTE_POWERING_OFF
+	0x16 ERROR_CONNECTION_TERMINATED_BY_LOCAL_HOST
+	0x17 ERROR_REPEATED_ATTEMPTS
+	0x18 ERROR_PAIRING_NOT_ALLOWED
+	0x19 ERROR_UNKNOWN_LMP_PDU
+	0x1A ERROR_UNSUPPORTED_REMOTE_FEATURE
+	0x1B ERROR_SCO_OFFSET_REJECTED
+	0x1C ERROR_SCO_INTERVAL_REJECTED
+	0x1D ERROR_SCO_AIR_MODE_REJECTED
+	0x1E ERROR_INVALID_LMP_PARAMETER
+	0x1F ERROR_UNSPECIFIED_ERROR
+	0x20 ERROR_UNSUPPORTED_LMP_PARAMETER_VALUE
+	0x21 ERROR_ROLE_CHANGE_NOT_ALLOWD
+	0x22 ERROR_LMP_RESPONSE_TIMEOUT
+	0x23 ERROR_ERROR_TRANSACTION_COLLISION
+	0x24 ERROR_LMP_PDU_NOT_ALLOWED
+	0x25 ERROR_ENCRYPTION_MODE_NOT_ACCEPTABLE
+	0x26 ERROR_UNIT_KEY_USED
+	0x27 ERROR_QOS_NOT_SUPPORTED
+	0x28 ERROR_INSTANT_PASSED
+	0x29 ERROR_PAIRING_W_UNIT_KEY_NOT_SUPPORTED
+	0x2a ERROR_DIFFERENT_TRANSACTION_COLLISION
+	0x2c ERROR_QOS_UNACCEPTABLE_PARAMETER
+	0x2d ERROR_QOS_REJECTED
+	0x2e ERROR_CHANNEL_CLASSIFICATION_NOT_SUPPORTED
+	0x2f ERROR_INSUFFICIENT_SECURITY
+	0x30 ERROR_PARAMETER_OUT_OF_MANDATORY_PANGE
+	0x32 ERROR_ROLE_SWITCH_PENDING
+	0x34 ERROR_RESERVED_SLOT_VIOLATION
+	0x35 ERROR_ROLE_SWITCH_FAILED
+	0x36 ERROR_EXTENDED_INQUIRY_RESPONSE_TOO_LARGE
+	0x37 ERROR_SIMPLE_PAIRING_NOT_SUPPORTED_BY_HOST
+	0x38 ERROR_HOST_BUSY_PAIRING
+	)
+
+
+	//modified_name
+	(
+	0x14 MAX_NAME_LEN
+	0x16 ADV_DATA_NAME_LEN
+	0X20 SPACE
+	
+	)
+	/* GATT Specifications*/
+	(
+	0X2900 CHARACTERTIC_EXTENDED_PROPERTIES
+	0X2901 CHARACTERTIC_USER_DESCRIPTION
+	0X2902 CLIENT_CHARACTERTIC_CONFIGURATION
+	0X2903 SERVER_CHARACTERTIC_CONFIGURATION
+	0X2904 CHARACTERTIC_PRESENTATION_FORMAT
+	0X2905 CHARACTERTIC_AGGREGATE
+	0X2906 VALID_RANGE
+	0X2907 EXTERNAL_REPORT_REFERENCE
+	0X2908 REPORT_REFERENCE
+	0X290B ENVIR_SENSING_CONFIGURATION
+	0X290C ENVIR_SENSING_MEASUREMENT
+	0X290D ENVIR_SENSING_TRIGGER_SETTING
+	)
+	/* LE L2CAP CID */
+	(
+	0x0004 LE_L2CAP_CID_ATT
+	0x0005 LE_L2CAP_CID_SIGNAL
+	0x0006 LE_L2CAP_CID_SMP
+	)
+
+	//LE address type
+	(
+	0 LE_ADDR_TYPE_PUBLIC
+	1 LE_ADDR_TYPE_RANDOM
+	)
+	//LE address type bitmap
+	(
+	7 LE_RECEIVER_ADDR_BIT
+	6 LE_SENDER_ADDR_BIT
+	)
+	//LE SCAN TYPE
+	(
+	0x00 LE_SCAN_TYPE_PASSIVE //no SCAN_REQ shall be sent
+	0x01 LE_SCAN_TYPE_ACTIVE
+	)
+
+	//LE SCAN ENABLE
+	(
+	0x00 LE_SCAN_DISABLE
+	0x01 LE_SCAN_ENABLE
+	0x0101 LE_ACTIVE_SCAN_ENABLE
+	)
+
+	//LE FIND INFORMATION RESPONSE
+	//THE FORMAT OF THE INFORMATION DATA
+	(
+	0x01 UUID_SIZE_16BIT
+	0x02 UUID_SIZE_128BIT
+	)
+
+	(
+	0x0000 BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_ACCEPTED
+	0x0001 BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_REJECTED
+	)
+
+//	le_state_map 0-2 is reserved for state_inconn,state_insniff and state_sco
+(
+3 lestate_got_first_packet
+4 lestate_encryption
+5 lestate_update_param
+6 lestate_update_map
+)
+
+// 	le mode
+(
+0 lemode_idle
+1 lemode_slave
+3 lemode_master
+)
+
+
+(
+0x01 LLID_CONTINUE
+0x02 LLID_START
+0x03 LLID_LE_LL
+0x01 LLID_EMPTY
+)
+
+(
+4 LE_TX_BUFF_COUNT
+3 LE_TX_BUFF_UPDATE_LOOPCNT //LE_TX_BUFF_COUNT-1
+
+12 LE_MD_MAX_COUNT
+)
+
+
+(
+0 LE_INITATOR_LTK_BIT
+1 LE_INITATOR_IRK_BIT
+2 LE_INITATOR_CSRK_BIT
+)
+
+(
+0x00 LE_PAIRING_MODE_NONE
+0x01 LE_PAIRING_MODE_LAGACY_JUSTWORK
+0x02 LE_PAIRING_MODE_LAGACY_PASSKEY
+0x81 LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK
+0x82 LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC
+0x83 LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY
+
+7 LE_PAIRING_MODE_SECURE_CONNECT_BIT
+)
+
+
+(
+0 FLAG_IOCAP_DISPLAYONLY
+1 FLAG_IOCAP_DISPLAYYESNO
+2 FLAG_IOCAP_KEYBOARDONLY
+3 FLAG_IOCAP_NOINPUTNOOUTPUT
+4 FLAG_IOCAP_KEYBOARDDISPLAY
+
+0x00 FLAG_OOB_DATA_FLAG_NO
+)
+
+(
+0x00 FLAG_LE_NO_BONDING_NO_MITM
+0x01 FLAG_LE_BONDING_NO_MITM
+0x04 FLAG_LE_NO_BONDING_MITM
+0x05 FLAG_LE_BONDING_MITM
+0x09 FLAG_LE_BONDING_NO_MITM_SECURE
+0x0D FLAG_LE_BONDING_MITM_SECURE
+
+2 LE_AUTH_MITM_BIT
+3 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT
+)
+
+(
+0  LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND
+1  LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE
+2  LE_FIND_BY_TYPE_VAL_RES_FOUND_ENDING_HANDLE
+
+)
+
+(
+0 MASTER_PUBLIC_ADDR
+1 MASTER_RANDOM_ADDR
+)
+
+(
+0x06 LE_ERR_PIN_OR_KEY_MISSING
+)
+
+
+(
+96000 TIMER_SMP_PAIRING_TIMEOUT //30S
+)
+//mem_le_pairing_state
+(
+0 FLAG_LE_PAIRING_NULL
+1 FLAG_LE_PAIRING_START
+2 FLAG_LE_PAIRING_SEND_RECURITY_REQ
+3 FLAG_LE_PAIRING_RCV_PAIRING_REQ
+4 FLAG_LE_PAIRING_AUTH
+5 FLAG_LE_PAIRING_AFTER_AUTH
+6 FLAG_LE_PAIRING_SEND_START_ENC_RSP
+7 FLAG_LE_PARING_SEND_ENC_INFORMATION
+8 FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION 
+9 FLAG_LE_PARING_SEND_INDENTITY_INFORMATION
+0xff FLAG_LE_PAIRING_END
+)
+
+
+
+/*LE secure connect state */
+(
+0x00 LE_SC_STAT_NULL
+0x01 LE_SC_STAT_RECEIVE_PUBLIC_KEY
+0x02 LE_SC_STAT_WAIT_SEND_PUBLIC_KEY
+0x03 LE_SC_STAT_SEND_PUBLIC_KEY
+0x04 LE_SC_STAT_RECEIVE_RANDOM
+0x05 LE_SC_STAT_SEND_RANDOM
+0x06 LE_SC_STAT_RECEIVE_DHKEY
+0x07 LE_SC_STAT_WAIT_CONFIRM_GKEY
+0x08 LE_SC_STAT_PASSKEY_WAIT_CONFIRM
+)
+
+
+(
+0 FLAG_LE_SC_CONFRIM_NULL
+1 FLAG_LE_SC_CONFRIM_GKEY_OK
+)
+
+//mem_le_enc_state
+(
+0 FLAG_LE_ENC_NULL
+1 FLAG_LE_RCV_ENC_START
+2 FLAG_LE_ENC_PAUSE
+3 FLAG_LE_RCV_START_ENC_RSP
+4 FLAG_LE_SEND_START_ENC_RSP
+0xff FLAG_LE_ENC_END
+)
+
+(//mem_le_configuration
+//bit0:use fixed key , ble passkey pairing
+0 BIT_BLE_PASSKEY_FIXED_KEY
+//bit1:ble pairing use fixed long term key
+1 BIT_BLE_PAIRING_FIXED_LTK
+//bit2:ble transmit packet will set more data flag
+2 BIT_BLE_TRANSMIT_PACKET_BY_MD
+//bit3:master read handle, with requires an authenticated link
+3 BIT_BLE_READ_AUTH
+//bit4:master write handle, with requires an authenticated link
+4 BIT_BLE_WRITE_AUTH
+//bit5:cannot enter long sleep
+5 BIT_BLE_SHORT_MULT
+
+)
+
+(
+0 BIT_ADV_CHANNEL_MAP_37
+1 BIT_ADV_CHANNEL_MAP_38
+2 BIT_ADV_CHANNEL_MAP_39
+)
+
+
+
+
+0x04b6 mem_lmo_header_length
+0x04b7 mem_lmo_header_opcode
+0x04b8 mem_lmo_payload
+0x04c9 mem_lmi_accepted_opcode
+0x04ca mem_disconn_reason_send
+0x04cb mem_tx_fixed_freq
+0x04cc mem_rx_fixed_freq
+0x04cd mem_ext_features_page
+0x04ce mem_lmpext_ssp_enable
+0x04d0 mem_remote_sppcap
+0x04d1 mem_lmp_conn_state
+0x04d2 mem_soft_timer
+0x04d4 mem_pincode_state
+0x04d5 mem_sres_tid
+0x04d6 mem_accptsco_tid
+0x04d7 mem_auth_enable
+0x04d8 mem_wait_encryption
+0x04d9 mem_sniff_payload
+0x04e9 mem_aurand_send_delay_time
+
+
+	(
+	//bit flag:mem_classic_bt_flag
+	0 FLAG_SSP_REJECT_JUSTWORK
+	1 SHORT_MULT_FLAG
+	)
+	
+	(
+	//bit map
+	0 pair_state_inrand
+	1 pair_state_inrand_acpt
+	2 pair_state_send_comb
+	3 pair_state_recv_comb
+	4 pair_state_send_aurand
+	5 pair_state_recv_sres
+	6 pair_state_recv_aurand
+	7 pair_state_send_sres	
+	)
+	/* LMP opcodes */
+	(
+	1 LMP_NAME_REQ 
+	2 LMP_NAME_RES 
+	3 LMP_ACCEPTED 
+	4 LMP_NOT_ACCEPTED 
+	5 LMP_CLKOFFSET_REQ 
+	6 LMP_CLKOFFSET_RES 
+	7 LMP_DETACH 
+	8 LMP_IN_RAND 
+	9 LMP_COMB_KEY 
+	10 LMP_UNIT_KEY 
+	11 LMP_AU_RAND 
+	12 LMP_SRES 
+	13 LMP_TEMP_RAND 
+	14 LMP_TEMP_KEY 
+	15 LMP_ENCRYPTION_MODE_REQ 
+	16 LMP_ENCRYPTION_KEY_SIZE_REQ 
+	17 LMP_START_ENCRYPTION_REQ 
+	18 LMP_STOP_ENCRYPTION_REQ 
+	19 LMP_SWITCH_REQ 
+	20 LMP_HOLD
+	21 LMP_HOLD_REQ
+	23 LMP_SNIFF_REQ 
+	24 LMP_UNSNIFF_REQ 
+	26 LMP_PARK_REQ 
+	27 LMP_SET_BROADCAST_SCAN_WINDOW 
+	28 LMP_MODIFY_BEACON 
+	29 LMP_UNPARK_BD_ADDR_REQ 
+	30 LMP_UNPARK_PM_ADDR_REQ 
+	31 LMP_INCR_POWER_REQ 
+	32 LMP_DECR_POWER_REQ 
+	33 LMP_MAX_POWER 
+	34 LMP_MIN_POWER 
+	35 LMP_AUTO_RATE 
+	36 LMP_PREFERRED_RATE 
+	37 LMP_VERSION_REQ 
+	38 LMP_VERSION_RES 
+	39 LMP_FEATURES_REQ 
+	40 LMP_FEATURES_RES 
+	41 LMP_QUALITY_OF_SERVICE 
+	42 LMP_QUALITY_OF_SERVICE_REQ 
+	43 LMP_SCO_LINK_REQ 
+	44 LMP_REMOVE_SCO_LINK_REQ 
+	45 LMP_MAX_SLOT 
+	46 LMP_MAX_SLOT_REQ 
+	47 LMP_TIMING_ACCURACY_REQ 
+	48 LMP_TIMING_ACCURACY_RES 
+	49 LMP_SETUP_COMPLETE 
+	50 LMP_USE_SEMI_PERMANENT_KEY 
+	51 LMP_HOST_CONNECTION_REQ 
+	52 LMP_SLOT_OFFSET 
+	53 LMP_PAGE_MODE_REQ 
+	54 LMP_PAGE_SCAN_MODE_REQ 
+	55 LMP_SUPERVISION_TIMEOUT 
+	56 LMP_TEST_ACTIVATE
+	57 LMP_TEST_CONTROL
+	58 LMP_ENC_KEY_SIZE_MASK_REQ
+	59 LMP_ENC_KEY_SIZE_MASK_RES
+	60 LMP_SET_AFH
+
+	/* simple pairing support */
+	61 LMP_ENCAPSULATED_HEADER
+	62 LMP_ENCAPSULATED_PAYLOAD
+	63 LMP_SIMPLE_PAIRING_CONFIRM
+	64 LMP_SIMPLE_PAIRING_NUMBER
+	65 LMP_DHKEY_CHECK
+	127 LMP_ESCAPE
+	127 LMP_ESCAPE_4   /* add 2bytes LMP header support  */   
+	)
+	/* LMP EXT opcodes, ORed with bit 7 to make difference to nonEXT */
+	(
+	129 LMP_EXT_ACCEPTED
+	130 LMP_NOT_ACCEPTED_EXT
+	131 LMP_EXT_FEATURES_REQ
+	132 LMP_EXT_FEATURES_RES
+	139 LMP_PACKET_TYPE_TABLE_REQ
+	140 LMP_EXT_ESCO_LINK_REQ
+	141 LMP_EXT_REMOVE_ESCO_REQ
+	144 LMP_EXT_CHN_CLASSIFICATION_REQ
+	145 LMP_EXT_CHN_CLASSIFICATION
+	149 LMP_SNIFF_SUBRATING_REQ
+	150 LMP_SNIFF_SUBRATING_RES
+	151 LMP_PAUSE_ENCRYPTION_REQ
+	152 LMP_RESUME_ENCRYPTION_REQ
+	153 LMP_IO_CAP_REQ
+	154 LMP_IO_CAP_RES
+	)
+	/* LMP reason codes */
+	(
+	0x05 AUTHENTICATION_FAILURE_ERROR
+	0x06 KEY_MISSING
+	0x0b ACL_CONNECTION_ALREADY_EXISTS
+	0x13 OTHER_END_TERMINATED
+	0x15 ABOUT_TO_POEWR_OFF
+	0x16 LOCAL_HOST
+	0x18 PAIRING_NOT_ALLOWED
+	0x19 UNKNOWN_LMP_PDU
+	0x1A UNSUPPORTED_LMP_FEATURE 
+	0x1F UNSPECIFIED_ERROR
+	0x20 UNSUPPORTED_PARAMETERS
+	0x21 SWITCH_NOT_ALLOWED
+	0x23 TRANSACTION_COLLISION
+	0x24 PDU_NOT_ALLOWED
+	0x25 ENCRYPTION_MODE_NOT_ACCEPTABLE
+	0x2e NOT_SUPPORT_CHN_CLASSIFICATION
+	0x37 NOT_SUPPORT_SSP
+	)
+
+	/* test mode scenarios */
+	(
+	0 PAUSE_TEST_MODE
+	1 ZERO_PATTERN
+	2 ONE_PATTERN
+	3 ALT_PATTERN
+	4 PSEUDORANDOM
+	5 CLOSED_LOOP_BACK_ACL
+	6 CLOSED_LOOP_BACK_SCO
+	7 ACL_WITHOUT_WHITENING
+	8 SCO_WITHOUT_WHITENING
+	9 ALT2_PATTERN
+	255 EXIT_TEST_MODE
+	)
+	/* test mode hoppig modes */
+	(
+	0 FIXED_FREQ
+	1 NORMAL_HOP
+	)
+
+	/* mem_lmp_tid indicates which type of LMP will be sent */
+	(
+	0 TID_NORM_REPLY
+	1 TID_NORM_SEND
+	2 TID_ONE
+	3 TID_ZERO
+	4 TID_PAIRING
+	5 TID_ENCRYPTION
+	6 TID_VARIABLE
+	7 TID_RX
+	)
+
+	/* ============== lmp status ==========*/
+	(
+	0 lmp_incoming
+	1 lmp_outgoing
+	2 lmp_reject_msg
+	3 lmp_clear_msg
+	4 upper_reject_msg
+	5 upper_clear_msg
+	)
+
+(
+0x2ee00 TIMER_ONE_MINUTE //96000*2
+80 TIMER_SWITCH_WAITE
+12 TIMER_ENPT_WAITE
+)
+
+(
+0 SWITCH_FLAG_INIT
+1 SWITCH_FLAG_ACCEPT
+2 SWITCH_FLAG_NOT_ACCEPT
+)
+(
+0 NULL_ENCRYP
+1 DONE_ENCRYP
+)
+
+//
+//
+//Large memory blocks defined in this file.
+//Blocks Shall be defined with absolute address.
+//Blocks' length Shall be specified in comment following Blocks' names.
+//Different blocks MAY be overlap.
+//Blocks defined in this file Shall NOT be overlap with variable in memmap.format.
+
+// USB C51 exchange area
+(
+0xff0 mem_mcmd
+0xff1 mem_mouse_data
+)
+
+//l2cap RX buffers
+(
+0x1000 mem_l2cap_rxbuff1		//0x400
+0x1400 mem_l2cap_rxbuff2		//0x400
+//end address:0x17ff
+)
+//l2cap TX buffers
+(
+0x1800 mem_tx_buff0		//128
+0x1880 mem_tx_buff1		//128
+0x1900 mem_tx_buff2		//128
+0x1980 mem_tx_buff3		//128
+0x1a00 mem_tx_buff4		//128
+0x1a80 mem_tx_buff5		//128
+0x1b00 mem_tx_buff6		//128
+0x1b80 mem_tx_buff7		//128
+//end address: 0x1bff
+)
+
+(
+0x1800 mem_le_tx_buffer0
+0x1900 mem_le_tx_buffer1
+0x1a00 mem_le_tx_buffer2
+0x1b00 mem_le_tx_buffer3
+//end addr:0x1dff
+)
+
+
+//uart buffer
+(
+0x1800 mem_h5rx_buf//0x400
+0x1bff mem_h5rx_buf_end
+0x1c00 mem_h5tx_buf
+0x1fff mem_h5tx_buf_end
+)
+
+
+(
+0x1800 mem_ir_record
+0x1c      mem_ir_record_max
+)
+
+
+
+(
+	  0 patch00_0
+	  1 patch00_1
+	  2 patch00_2
+	  3 patch00_3
+	  4 patch00_4
+	  5 patch00_5
+	  6 patch00_6
+	  7 patch00_7
+	  8 patch01_0
+	  9 patch01_1
+	 10 patch01_2
+	 11 patch01_3
+	 12 patch01_4
+	 13 patch01_5
+	 14 patch01_6
+	 15 patch01_7
+	 16 patch02_0
+	 17 patch02_1
+	 18 patch02_2
+	 19 patch02_3
+	 20 patch02_4
+	 21 patch02_5
+	 22 patch02_6
+	 23 patch02_7
+	 24 patch03_0
+	 25 patch03_1
+	 26 patch03_2
+	 27 patch03_3
+	 28 patch03_4
+	 29 patch03_5
+	 30 patch03_6
+	 31 patch03_7
+	 32 patch04_0
+	 33 patch04_1
+	 34 patch04_2
+	 35 patch04_3
+	 36 patch04_4
+	 37 patch04_5
+	 38 patch04_6
+	 39 patch04_7
+	 40 patch05_0
+	 41 patch05_1
+	 42 patch05_2
+	 43 patch05_3
+	 44 patch05_4
+	 45 patch05_5
+	 46 patch05_6
+	 47 patch05_7
+	 48 patch06_0
+	 49 patch06_1
+	 50 patch06_2
+	 51 patch06_3
+	 52 patch06_4
+	 53 patch06_5
+	 54 patch06_6
+	 55 patch06_7
+	 56 patch07_0
+	 57 patch07_1
+	 58 patch07_2
+	 59 patch07_3
+	 60 patch07_4
+	 61 patch07_5
+	 62 patch07_6
+	 63 patch07_7
+	 64 patch08_0
+	 65 patch08_1
+	 66 patch08_2
+	 67 patch08_3
+	 68 patch08_4
+	 69 patch08_5
+	 70 patch08_6
+	 71 patch08_7
+	 72 patch09_0
+	 73 patch09_1
+	 74 patch09_2
+	 75 patch09_3
+	 76 patch09_4
+	 77 patch09_5
+	 78 patch09_6
+	 79 patch09_7
+	 80 patch0a_0
+	 81 patch0a_1
+	 82 patch0a_2
+	 83 patch0a_3
+	 84 patch0a_4
+	 85 patch0a_5
+	 86 patch0a_6
+	 87 patch0a_7
+	 88 patch0b_0
+	 89 patch0b_1
+	 90 patch0b_2
+	 91 patch0b_3
+	 92 patch0b_4
+	 93 patch0b_5
+	 94 patch0b_6
+	 95 patch0b_7
+	 96 patch0c_0
+	 97 patch0c_1
+	 98 patch0c_2
+	 99 patch0c_3
+	100 patch0c_4
+	101 patch0c_5
+	102 patch0c_6
+	103 patch0c_7
+	104 patch0d_0
+	105 patch0d_1
+	106 patch0d_2
+	107 patch0d_3
+	108 patch0d_4
+	109 patch0d_5
+	110 patch0d_6
+	111 patch0d_7
+	112 patch0e_0
+	113 patch0e_1
+	114 patch0e_2
+	115 patch0e_3
+	116 patch0e_4
+	117 patch0e_5
+	118 patch0e_6
+	119 patch0e_7
+	120 patch0f_0
+	121 patch0f_1
+	122 patch0f_2
+	123 patch0f_3
+	124 patch0f_4
+	125 patch0f_5
+	126 patch0f_6
+	127 patch0f_7
+	128 patch10_0
+	129 patch10_1
+	130 patch10_2
+	131 patch10_3
+	132 patch10_4
+	133 patch10_5
+	134 patch10_6
+	135 patch10_7
+	136 patch11_0
+	137 patch11_1
+	138 patch11_2
+	139 patch11_3
+	140 patch11_4
+	141 patch11_5
+	142 patch11_6
+	143 patch11_7
+	144 patch12_0
+	145 patch12_1
+	146 patch12_2
+	147 patch12_3
+	148 patch12_4
+	149 patch12_5
+	150 patch12_6
+	151 patch12_7
+	152 patch13_0
+	153 patch13_1
+	154 patch13_2
+	155 patch13_3
+	156 patch13_4
+	157 patch13_5
+	158 patch13_6
+	159 patch13_7
+	160 patch14_0
+	161 patch14_1
+	162 patch14_2
+	163 patch14_3
+	164 patch14_4
+	165 patch14_5
+	166 patch14_6
+	167 patch14_7
+	168 patch15_0
+	169 patch15_1
+	170 patch15_2
+	171 patch15_3
+	172 patch15_4
+	173 patch15_5
+	174 patch15_6
+	175 patch15_7
+	176 patch16_0
+	177 patch16_1
+	178 patch16_2
+	179 patch16_3
+	180 patch16_4
+	181 patch16_5
+	182 patch16_6
+	183 patch16_7
+	184 patch17_0
+	185 patch17_1
+	186 patch17_2
+	187 patch17_3
+	188 patch17_4
+	189 patch17_5
+	190 patch17_6
+	191 patch17_7
+	192 patch18_0
+	193 patch18_1
+	194 patch18_2
+	195 patch18_3
+	196 patch18_4
+	197 patch18_5
+	198 patch18_6
+	199 patch18_7
+	200 patch19_0
+	201 patch19_1
+	202 patch19_2
+	203 patch19_3
+	204 patch19_4
+	205 patch19_5
+	206 patch19_6
+	207 patch19_7
+	208 patch1a_0
+	209 patch1a_1
+	210 patch1a_2
+	211 patch1a_3
+	212 patch1a_4
+	213 patch1a_5
+	214 patch1a_6
+	215 patch1a_7
+	216 patch1b_0
+	217 patch1b_1
+	218 patch1b_2
+	219 patch1b_3
+	220 patch1b_4
+	221 patch1b_5
+	222 patch1b_6
+	223 patch1b_7
+	224 patch1c_0
+	225 patch1c_1
+	226 patch1c_2
+	227 patch1c_3
+	228 patch1c_4
+	229 patch1c_5
+	230 patch1c_6
+	231 patch1c_7
+	232 patch1d_0
+	233 patch1d_1
+	234 patch1d_2
+	235 patch1d_3
+	236 patch1d_4
+	237 patch1d_5
+	238 patch1d_6
+	239 patch1d_7
+	240 patch1e_0
+	241 patch1e_1
+	242 patch1e_2
+	243 patch1e_3
+	244 patch1e_4
+	245 patch1e_5
+	246 patch1e_6
+	247 patch1e_7
+	248 patch1f_0
+	249 patch1f_1
+	250 patch1f_2
+	251 patch1f_3
+	252 patch1f_4
+	253 patch1f_5
+	254 patch1f_6
+	255 patch1f_7
+	  0 patch20_0
+	  1 patch20_1
+	  2 patch20_2
+	  3 patch20_3
+	  4 patch20_4
+	  5 patch20_5
+	  6 patch20_6
+	  7 patch20_7
+	  8 patch21_0
+	  9 patch21_1
+	 10 patch21_2
+	 11 patch21_3
+	 12 patch21_4
+	 13 patch21_5
+	 14 patch21_6
+	 15 patch21_7
+	 16 patch22_0
+	 17 patch22_1
+	 18 patch22_2
+	 19 patch22_3
+	 20 patch22_4
+	 21 patch22_5
+	 22 patch22_6
+	 23 patch22_7
+	 24 patch23_0
+	 25 patch23_1
+	 26 patch23_2
+	 27 patch23_3
+	 28 patch23_4
+	 29 patch23_5
+	 30 patch23_6
+	 31 patch23_7
+	 32 patch24_0
+	 33 patch24_1
+	 34 patch24_2
+	 35 patch24_3
+	 36 patch24_4
+	 37 patch24_5
+	 38 patch24_6
+	 39 patch24_7
+	 40 patch25_0
+	 41 patch25_1
+	 42 patch25_2
+	 43 patch25_3
+	 44 patch25_4
+	 45 patch25_5
+	 46 patch25_6
+	 47 patch25_7
+	 48 patch26_0
+	 49 patch26_1
+	 50 patch26_2
+	 51 patch26_3
+	 52 patch26_4
+	 53 patch26_5
+	 54 patch26_6
+	 55 patch26_7
+	 56 patch27_0
+	 57 patch27_1
+	 58 patch27_2
+	 59 patch27_3
+	 60 patch27_4
+	 61 patch27_5
+	 62 patch27_6
+	 63 patch27_7
+	 64 patch28_0
+	 65 patch28_1
+	 66 patch28_2
+	 67 patch28_3
+	 68 patch28_4
+	 69 patch28_5
+	 70 patch28_6
+	 71 patch28_7
+	 72 patch29_0
+	 73 patch29_1
+	 74 patch29_2
+	 75 patch29_3
+	 76 patch29_4
+	 77 patch29_5
+	 78 patch29_6
+	 79 patch29_7
+	 80 patch2a_0
+	 81 patch2a_1
+	 82 patch2a_2
+	 83 patch2a_3
+	 84 patch2a_4
+	 85 patch2a_5
+	 86 patch2a_6
+	 87 patch2a_7
+	 88 patch2b_0
+	 89 patch2b_1
+	 90 patch2b_2
+	 91 patch2b_3
+	 92 patch2b_4
+	 93 patch2b_5
+	 94 patch2b_6
+	 95 patch2b_7
+	 96 patch2c_0
+	 97 patch2c_1
+	 98 patch2c_2
+	 99 patch2c_3
+	100 patch2c_4
+	101 patch2c_5
+	102 patch2c_6
+	103 patch2c_7
+	104 patch2d_0
+	105 patch2d_1
+	106 patch2d_2
+	107 patch2d_3
+	108 patch2d_4
+	109 patch2d_5
+	110 patch2d_6
+	111 patch2d_7
+	112 patch2e_0
+	113 patch2e_1
+	114 patch2e_2
+	115 patch2e_3
+	116 patch2e_4
+	117 patch2e_5
+	118 patch2e_6
+	119 patch2e_7
+	120 patch2f_0
+	121 patch2f_1
+	122 patch2f_2
+	123 patch2f_3
+	124 patch2f_4
+	125 patch2f_5
+	126 patch2f_6
+	127 patch2f_7
+	128 patch30_0
+	129 patch30_1
+	130 patch30_2
+	131 patch30_3
+	132 patch30_4
+	133 patch30_5
+	134 patch30_6
+	135 patch30_7
+	136 patch31_0
+	137 patch31_1
+	138 patch31_2
+	139 patch31_3
+	140 patch31_4
+	141 patch31_5
+	142 patch31_6
+	143 patch31_7
+	144 patch32_0
+	145 patch32_1
+	146 patch32_2
+	147 patch32_3
+	148 patch32_4
+	149 patch32_5
+	150 patch32_6
+	151 patch32_7
+	152 patch33_0
+	153 patch33_1
+	154 patch33_2
+	155 patch33_3
+	156 patch33_4
+	157 patch33_5
+	158 patch33_6
+	159 patch33_7
+	160 patch34_0
+	161 patch34_1
+	162 patch34_2
+	163 patch34_3
+	164 patch34_4
+	165 patch34_5
+	166 patch34_6
+	167 patch34_7
+	168 patch35_0
+	169 patch35_1
+	170 patch35_2
+	171 patch35_3
+	172 patch35_4
+	173 patch35_5
+	174 patch35_6
+	175 patch35_7
+	176 patch36_0
+	177 patch36_1
+	178 patch36_2
+	179 patch36_3
+	180 patch36_4
+	181 patch36_5
+	182 patch36_6
+	183 patch36_7
+	184 patch37_0
+	185 patch37_1
+	186 patch37_2
+	187 patch37_3
+	188 patch37_4
+	189 patch37_5
+	190 patch37_6
+	191 patch37_7
+	192 patch38_0
+	193 patch38_1
+	194 patch38_2
+	195 patch38_3
+	196 patch38_4
+	197 patch38_5
+	198 patch38_6
+	199 patch38_7
+	200 patch39_0
+	201 patch39_1
+	202 patch39_2
+	203 patch39_3
+	204 patch39_4
+	205 patch39_5
+	206 patch39_6
+	207 patch39_7
+	208 patch3a_0
+	209 patch3a_1
+	210 patch3a_2
+	211 patch3a_3
+	212 patch3a_4
+	213 patch3a_5
+	214 patch3a_6
+	215 patch3a_7
+	216 patch3b_0
+	217 patch3b_1
+	218 patch3b_2
+	219 patch3b_3
+	220 patch3b_4
+	221 patch3b_5
+	222 patch3b_6
+	223 patch3b_7
+	224 patch3c_0
+	225 patch3c_1
+	226 patch3c_2
+	227 patch3c_3
+	228 patch3c_4
+	229 patch3c_5
+	230 patch3c_6
+	231 patch3c_7
+	232 patch3d_0
+	233 patch3d_1
+	234 patch3d_2
+	235 patch3d_3
+	236 patch3d_4
+	237 patch3d_5
+	238 patch3d_6
+	239 patch3d_7
+	240 patch3e_0
+	241 patch3e_1
+	242 patch3e_2
+	243 patch3e_3
+	244 patch3e_4
+	245 patch3e_5
+	246 patch3e_6
+	247 patch3e_7
+	248 patch3f_0
+	249 patch3f_1
+	250 patch3f_2
+	251 patch3f_3
+	252 patch3f_4
+	253 patch3f_5
+	254 patch3f_6
+	255 patch3f_7
+
+)
+(
+  0x8000 core_chipid
+  0x8003 core_kick
+  0x8005 core_lpm_wr
+  0x8006 core_misc_ctrl
+  0x8007 core_otp_rdata
+  0x8009 core_pcmoutfifo
+  0x8010 core_reset
+  0x8011 core_encrypt
+  0x8015 core_uart_txd
+  0x8022 core_ucode_hi
+  0x8023 core_ucode_ctrl
+  0x8024 core_ucode_low
+  0x8025 core_ucode_data
+  0x8040 core_halfslot
+  0x8042 core_clksel
+  0x8043 core_uart_clksel
+  0x8043 core_config 
+  0x8044 core_xtal_stable_time
+  0x8045 core_otp_addr
+  0x8046 core_otp_din
+  0x8047 core_otp_ctrl
+  0x8048 core_otpd_addr
+  0x804a core_otpd_len
+  0x804b core_otpd_ctrl
+  0x804c core_lpm_reg
+  0x804f core_lpm_isogate
+  0x8050 core_clkoff
+  0x8052 core_uart_baud
+  0x8054 core_uart_rsaddr
+  0x8056 core_uart_readdr
+  0x8058 core_uart_rrptr
+  0x805a core_uart_tsaddr
+  0x805c core_uart_teaddr
+  0x805e core_uart_twptr
+  0x8060 core_uart_trptrp
+  0x8062 core_uart_ctrl
+  0x8063 core_bist_ctrl
+  0x8064 core_pwm_pcnt3
+  0x8066 core_pwm_ncnt3 
+  0x8068 core_pwm_pcnt4
+  0x806a core_pwm_ncnt4
+  0x806c core_pwm_pcnt5
+  0x806e core_pwm_ncnt5
+  0x8070 core_gpio_oe0
+  0x8071 core_gpio_oe1
+  0x8072 core_gpio_oe2
+  0x8073 core_gpio_oe3
+  0x8074 core_gpio_out0
+  0x8075 core_gpio_out1
+  0x8076 core_gpio_out2
+  0x8077 core_gpio_out3
+  0x8078 core_gpio_pu0
+  0x8079 core_gpio_pu1
+  0x807a core_gpio_pu2
+  0x807b core_gpio_pu3
+  0x807c core_gpio_pd0
+  0x807d core_gpio_pd1
+  0x807e core_gpio_pd2
+  0x807f core_gpio_pd3
+  0x8080 core_gpio_sel
+  0x8081 core_gpio_sel1
+  0x8082 core_gpio_sel2
+  0x8083 core_gpio_key0
+  0x8084 core_gpio_key1
+  0x8085 core_gpio_key2
+  0x8086 core_spid_ctrl
+  0x8087 core_spid_delay
+  0x8088 core_spid_txlen
+  0x808a core_spid_txaddr
+  0x808c core_spid_rxaddr
+  0x808e core_spid_rxlen
+  0x8090 core_iicd_ctrl
+  0x8091 core_iicd_scl_low
+  0x8092 core_iicd_scl_high
+  0x8093 core_iicd_start_setup
+  0x8094 core_iicd_start_hold
+  0x8095 core_iicd_stop_setup
+  0x8096 core_iicd_data_setup
+  0x8097 core_iicd_data_hold
+  0x8098 core_iicd_txlen
+  0x809a core_iicd_txaddr
+  0x809c core_iicd_rxaddr
+  0x809e core_iicd_rxlen
+  0x80a0 core_pwm_pcnt0
+  0x80a2 core_pwm_ncnt0
+  0x80a4 core_pwm_pcnt1
+  0x80a6 core_pwm_ncnt1
+  0x80a8 core_pwm_pcnt2
+  0x80aa core_pwm_ncnt2
+  0x80b0 core_enc_ctrl
+  0x80b1 core_cvsd_ctrl
+  0x80b2 core_codec_ctrl
+  0x80b3 core_dec_ctrl
+
+
+
+
+  
+  0x8108 core_misc_status
+  0x8109 core_qdec_cntx
+  0x810a core_qdec_cnty
+  0x810b core_qdec_cntz
+  0x810c core_uart_status
+  0x810d core_uart_rbaud
+  0x810e core_uart_txitems
+  0x8110 core_uart_trptr
+  0x8112 core_uart_rxitems
+  0x8114 core_uart_rdptr
+  0x8116 core_uart_rwptr
+  0x8119 core_kscn_kstat
+  0x811a core_kscn_event
+  0x811b core_kscn_event_num
+  0x811c core_gpio_in
+  0x811d core_gpio_in1
+  0x8124 core_current_otp_addr
+  0x8126 core_otpd_remain
+  0x8128 core_spid_remain
+  0x812a core_iicd_remain
+  0x812c core_dma_status
+  0x812d core_perf_status
+  0x812e core_adc_in
+  0x8134 core_pcminfifo
+  0x8135 core_pcminfifo_remain
+  0x8136 core_pcmoutfifo_remain
+  0x8138 core_lpm_ctrl
+  0x813c core_lpm_xtalcnt
+  0x813d core_lpm_buckcnt
+  0x813e core_lpm_ldocnt
+  0x813f core_lpm_latch
+  0x8140 core_gpio_wakeup_low
+  0x8144 core_gpio_wakeup_high
+  0x8149 core_clk_counter
+  0x8150 core_adc_sum
+// dummy regs  
+
+  0x8203 core_ice_ctrl
+  0x8204 core_ice_status
+  0x8205 core_ice_break0
+  0x8207 core_ice_break1
+  
+  0x8280 core_docd_ctrl
+  0x8288 core_docd_paddr
+  0x828a core_docd_pdata
+
+  0x8300 iic_prer_low		
+  0x8301 iic_slave_addr	
+  0x8302 iic_ctr					
+  0x8303 iic_cr					
+  0x8304 iic_rxr					
+  0x8305 iic_txr					
+  0x8306 iic_sr					
+  0x8307 iic_fifo				
+
+  0x8400   mem_b_box          /* entire bank */
+  0x8500   mem_e_box          /* entire bank */
+  0x8600   mem_l_box          /* entire bank */
+
+  0x8700 memk
+
+  0x8900 rfen_rx
+  0x8901 rfen_tx
+  0x8902 rfen_mdm
+  0x8903 rfen_sn
+  0x8904 rfen_msc
+  0x8905 rfen_ck
+  0x8906 rfen_adc
+  0x890a  rf_iq_gain
+  0x890b  rf_agc_nsat
+  0x890f  rf_adc_goff
+  0x8912 rf_agc_ctrl
+  0x8914 rfen_ulp
+  0x8973 rfen_chgpump
+  0x894b rf_rx_vctrl_reg1
+  0x894c rf_rx_vctrl_reg2
+  0x894d rf_rx_ib_lna
+  0x894e rf_rx_lna_ctrim
+
+  0x8950 rf_bpf_ctrim
+  0x8951 rf_bpf_ib
+  0x8952 rf_adc_rccal
+  0x8952 rf_rccal_ctrl
+  0x8953 rf_rccal_sel
+  0x8955 rf_tx_pa_ib
+  0x8956 rf_tx_pa_gc
+  0x895f rf_pll_rstn
+  0x8964 rf_sdm_en
+  0x8960 rf_pll_intg
+  0x8961 rf_pll_frac
+  0x8963 rf_pll_frachi
+  0x896c rf_afc_cap
+  0x8967 rf_clkpll_bias
+  0x896f rf_clkpll_en
+  0x8968 rf_clkpll_int
+  0x8969 rf_clkpll_frac
+  0x896d rf_balun_ctrim
+  0x8971 rf_adc_mode
+  0x8972 rf_adc_gc
+  0x8973 rf_adc_ch
+  0x8980 rf_rccal_result
+  0x8981 rf_afc_d2a
+  0x8982 rf_rssi
+
+
+0x8a00 core_usb_config		
+0x8a01 core_usb_int_mask	
+0x8a04 core_usb_addr
+0x8a10 core_usb_trig	
+0x8a11 core_usb_stall		
+0x8a12 core_usb_clear		
+0x8a18 core_usb_ep
+0x8a18 core_usb_dfifo0 
+0x8a19 core_usb_dfifo1  
+0x8a1a core_usb_dfifo2 
+0x8a20 core_usb_ep_len
+0x8a26 core_usb_status		
+0x8a27 core_usb_fifo_empty
+0x8a28 core_usb_fifo_full
+
+
+4 rx_freq_offset
+1 tx_freq_offset
+
+/* bit difinitions */
+  4 whiteoff_bit
+  6 clksel_rc
+  5 clksel_dpll
+  4 clksel_xtal
+  5 adc_rccal
+  0 bpf_rccal
+  1 demod_clkoff
+
+(
+  2 reload_code
+  3 gpio_latch
+  4 enable_retmem
+  7 cold_wake
+  0xef isogate_mask
+  0xe0 cs_mask
+)
+
+// misc ctrl
+(
+  0x01 otpd_start
+  0x02 spid_start
+  0x04 iicd_start
+  0x08 lock_otp
+  0x10 x_sethi
+  0x20 y_sethi
+  0x40 z_sethi
+  0x80 ccnt_start
+)
+// dma status bit
+(
+  0 otpd_crcok
+  1 otpd_done
+  2 spid_crcok
+  3 spid_done
+  4 iicd_crcok
+  5 iicd_done
+  6 iicd_ack
+)
+
+0x8b uart_ctrl_default //BCSP
+0x81 uart_ctrl_h4 //H4
+0x81 uart_ctrl_normal
+0x91 uart_ctrl_5line
+0x81 uart_ctrl_57600
+2 uart_baud_len
+0x00 uartclk_crystal
+0x01 uartclk_dpll
+0x1a0 uart_baud_115200
+0xbb uart_baud_256000
+0x340 uart_baud_57600
+0x34 uart_baud_921600
+0x9c4 uart_baud_9600
+0x2dc6c00 uart_clk
+0x16E3600 uart_clk_24
+
+//core_clkoff
+(
+	0 CLOCK_OFF_AUTH_ROM
+	1 CLOCK_OFF_UC_ROM
+	2 CLOCK_OFF_DEBUG_UART
+	3 CLOCK_OFF_SCHED_RAM
+	4 CLOCK_OFF_TRANCE_FIFO
+	5 CLOCK_OFF_CORDIC
+	6 CLOCK_OFF_OTPD
+	7 CLOCK_OFF_I2C
+	8 CLICK_OFF_8051
+	9 CLOCK_OFF_KEYSCAN
+	0x0a CLOCK_OFF_USB
+	0x0b CLOCK_OFF_QDECODER
+	0x0c CLOCK_OFF_SPI
+	0x0d CLOCK_OFF_PWM
+	0x0e CLOCK_OFF_CODEC
+	0x0f CLOCK_OFF_UART
+)
+
+
+/*****************************************************************************/
+/* RCS HEADER -- DO NOT ERASE                                                */
+/* $Author: Administrator $                                                           */
+/* $Id: bt_rfcomm_format.upper,v 1.1 2009-09-28 04:06:17 Administrator Exp $ */
+/* Orisil Technology                                                      */
+/*****************************************************************************/
+
+/**********/
+/* memory */
+/**********/
+
+0x04ed memRemoteRPNBitRate
+0x04ee memRemotePRNDataBits
+0x04ef memRemotePRNStopBit
+0x04f0 memRemotePRNParity
+0x04f1 memRemotePRNFlowControl
+0x04f2 memRemotePRNXon
+0x04f3 memRemotePRNXoff
+0x04f4 mem_mod2div_temp
+0x04f7 mem_contw_temp
+0x04f9 mem_attrib_list
+0x04fb mem_current_adss
+0x04fc mem_current_channel
+0x04fd mem_current_frame_type
+0x04fe mem_current_fcs
+0x04ff mem_current_length
+0x0501 mem_rfcomm_uih_payload_ptr
+0x0503 mem_uih_cmd_type
+0x0504 mem_uih_length
+0x0506 mem_param_payload_ptr
+0x0508 mem_ms_param
+0x0509 mem_pn_credit_flow_type_info
+0x050a mem_pn_priority
+0x050b mem_pn_acknowledg_timer
+0x050c mem_pn_max_retrans
+0x050d mem_rfcomm_send_adss
+0x050e mem_rfcomm_send_frame_type
+0x050f mem_rfcomm_send_fcs
+0x0510 mem_rfcomm_send_offset
+
+
+
+(
+0 CREDIT_DISABLE
+1 CREDIT_ENABLE
+)
+
+
+/************************************************************************/
+  
+
+ 
+/************/
+/* constant */
+/************/
+
+/* RFCOMM state for Headset (memRFCOMM_State) */ 
+  (
+    0 RFCOMM_IDLE           /* before the responsor HS receive SABM            */
+    1 RFCOMM_W4_DLCI0_OPEN
+    2 RFCOMM_W4_DLCI0_CLOSE
+    3 RFCOMM_START_DLCI0    /* After respond SABM frame (DLCI=0)               */
+    4 RFCOMM_W4_DLCI_OPEN
+    5 RFCOMM_W4_DLCI_CLOSE
+    6 RFCOMM_DLCI_OPENED    
+   
+  )
+  
+/* RFCOMM timer constants   */
+  (
+    1000  RFCOMM_T1         /* Used by SABM and DISC frames,100*20ms = 20s     */     
+    1000  RFCOMM_T2         /* Used by commands send in UIH on DLCI0,          */
+    300   RFCOMM_T3_RINGON  /* 6s for ring fade time                           */
+  
+  )
+
+/* Command Type */
+  (
+    0x3F RSP_RX_SABM        /*responsor expect SABM from initiator             */
+    0x3F INI_TX_SABM
+	
+    0x73 RSP_TX_UA          /*responsor send out UA command                    */
+    0x73 UA_WFBIT_SET	    /* UA control field with F bit set                 */
+	
+    0xEF RSP_RX_UIH         /*responsor expect UIH from initiator              */
+
+    0xEF RSP_TX_UIH         /*responsor send UIH to initiator                  */
+     
+    0x1F RSP_TX_DM          /*responsor send DM to initiator                   */
+    0x1F DM_WFBIT_SET       /* DM control field with F bit set                 */
+    0x0F DM_WFBIT_CLEAR     /* DM control field with F bit clear               */
+
+    0x53 RSP_RX_DISC        /*responsor expect DISC from initiator             */
+    0x53 INI_TX_DISC	    /*initiator send DISC control type command         */
+     
+    0xFF RSP_RX_UIH_WDATA   /*UIH data with credit flow control info           */
+    
+    
+  )
+
+/* Multiplexor commands and responses frames */
+  (
+    0x83 PN_COMMAND           /* Bit 0 EA C/R Type = 000001         */
+    0x81 PN_RESPONSOR         /* Bit 0 EA C/R Type = 000001         */
+    
+    0xE3 MSC_COMMAND          /* Bit 0 EA C/R Type = 000111         */
+    0xE1 MSC_RESPONSOR
+ 
+    0x13 NSC_COMMAND          /* Bit 0 EA C/R Type = 001000         */
+    0x11 NSC_RESPONSOR        /* Bit 0 EA C/R Type = 001000         */
+
+    0x23 TEST_COMMAND         /* Bit 0 EA C/R Type = 000111         */
+    0x21 TEST_RESPONSOR 
+    
+    0x93 RPN_COMMAND          /* Bit 0 EA C/R Type = 001001         */
+    0x91 RPN_RESPONSOR 
+    
+    0x53 RLS_COMMAND          /* Bit 0 EA C/R Type = 001010         */
+    0x51 RLS_RESPONSOR 
+
+    0xA3 FCON_COMMAND         /* Bit 0 EA C/R Type = 000101         */
+    0xA1 FCON_RESPONSOR 
+    
+    0x63 FCOFF_COMMAND        /* Bit 0 EA C/R Type = 000110         */
+    0x61 FCOFF_RESPONSOR 
+    	
+    0x03 RLS_OVERRUN
+    0x05 RLS_PARITY_ERROR
+    0x09 RLS_FRAMING_ERROR
+  )
+
+/* memLocalCredit */
+  (
+    0x01 RFCOMM_CREDIT
+  )
+
+  (
+  	0x007f RFCOMM_MAX_FRAME_SIZE
+  )
+
+/* UIH received Data length */
+  (
+    0  LENGTH_ZERO
+    
+    6  LENGTH_OK
+    7  LENGTH_HOT
+    8  LENGTH_RING
+    9  LENGTH_ERROR
+    9  LENGTH_AGVOL_ONEBYTE
+    10 LENGTH_AGVOL_TWOBYTE
+    10 LENGTH_VOL_ONEBYTE
+    11 LENGTH_VOL_TWOBYTE
+    12 LENGTH_BRSF
+    13 LENGTH_PLUS_CIEV
+    15 LENGTH_INBANDRING
+    14 LENGTH_CIEV_CALL
+    17 LENGTH_CRING
+    20 LENGTH_BRSF_OK
+    24 LENGTH_CIND0
+    28 LENGTH_CIEV_TWO
+    32 LENGTH_CIND_OK
+    59 LENGTH_CIND_OK2
+    100 LENGTH_DISCARD
+  )
+  
+/************/
+/* flags    */
+/************/
+  
+/* memRFCOMM_L2CAP_Interface */
+  (
+    0 RFCOMM_TX_W4BUF_FLAG    /* Wait for Tx buffer empty flag */
+    1 RFCOMM_CLOSE_LINK_FLAG
+  )
+  
+
+    
+/* memRemoteMSC		*/
+  (
+    0 MSC_EA_BIT
+    1 MSC_FC_BIT
+    2 MSC_RTC_BIT
+    3 MSC_RTR_BIT
+    6 MSC_IC_BIT
+    7 MSC_DV_BIT
+  )
+
+/* memRemoteRLS         */
+  (
+    0x0C OVERRUN_ERROR
+    0x0A PARITY_ERROR
+    0x09 FRAMING_RERROR
+  )
+  
+/* memRemoteRPNBitRate  */
+  (
+    0x00 BITS2400
+    0x01 BITS4800
+    0x02 BITS7200
+    0x03 BITS9600
+    0x04 BITS19200
+    0x05 BITS38400
+    0x06 BITS57600
+    0x07 BITS115200
+    0x08 BITS230400
+  )
+  
+/* memRemotePRNDataBits	*/
+  (
+    0x00 DATABITS5
+    0x01 DATABITS6
+    0x02 DATABITS7
+    0x03 DATABITS8
+  )
+  
+/* memRemotePRNStopBit	*/
+  (
+    0    ONESTOP
+    1    ONEHALFSTOP
+  )
+  
+/* memRemotePRNParity   */
+  (
+    0    ODDPARITY
+    1    EVENPARITY
+    2    MARKPARITY
+    3    SPACEPARITY
+    
+    7    PARITY_ENABLE_BIT
+  )
+
+/* RPN bit mask(in)     */
+  (
+     0   BIT_RATE_MASK_BIT
+     1   DATA_BITS_MASK_BIT
+     2   STOP_BITS_MASK_BIT
+     3   PARITY_MASK_BIT
+     4   PARITY_TYPE_MASK_BIT
+     5   XON_CHAR_MASK_BIT
+     6   XOFF_CHAR_MASK_BIT
+  )
+  
+/* RPN bit mask(in) 2    */
+  (
+     0   XON_XOFF_INPUT_MASK_BIT
+     1   XON_XOFF_OUTPUT_MASK_BIT
+     2	 RTR_INPUT_MASK_BIT
+     3   RTR_OUTPUT_MASK_BIT
+     4   RTC_INPUT_MASK_BIT
+     5   RTC_OUTPUT_MASK_BIT
+
+  )
+
+/* memRFCOMM_Request	*/
+  (
+    0 SEND_MSC_CMD_REQ_FLAG
+    1 SEND_AT_CKPD_REQ_FLAG
+    2 SEND_RING_REQ_FLAG
+    3 SEND_SABM_CMD
+  )
+  
+/* memRFCOMM_Misc_Flag  */
+  (
+    0 MSC_CDM_ALREADY_SEND_FLAG
+    1 CREDIT_FLOW_USED_FLAG
+    2 DONT_EMBEDDED_CREDIT_FLAG 
+    3 MSC_EXCHANGE_DONE_FLAG
+    4 FLOW_CONTROL_FCOFF_BIT            /* set when receive FCoff, clear when FCon   */
+  )
+  
+/* memRemoteMSC		*/
+  (
+    1 FLOW_CONTROL_FC_BIT		/* received MSC FC bits                      */
+  
+  )
+/* Address filed        */
+  (
+    0 ADDR_EA_BIT
+    1 ADDR_CR_BIT
+    2 ADDR_D_BIT
+  )
+//should be same as descripted in SDP
+(
+    1 SPP_SLAVE_CHANNEL
+    7 OBEX_SERVER_CHANNEL
+    8 HF_SERVER_CHANNEL 
+    9 HS_SERVER_CHANNEL
+)
+/* memRFCOMM_Flag */
+(
+	0 USING_HF_PROFILE
+	1 USING_HS_PROFILE
+	2 USING_SPP_PROFILE
+)
+/*RFCOMM Frame Type*/
+(
+	0x3f RFCOMM_FRAME_TYPE_SABM
+	0x73 RFCOMM_FRAME_TYPE_UA
+	0xEF RFCOMM_FRAME_TYPE_UIH
+	0xFF RFCOMM_FRAME_TYPE_UIH_CREDITS
+	0x53 RFCOMM_FRAME_TYPE_DISCONN
+)
+/*RFCOMM UIH CMD TYPE*/
+(
+	0x41 UIH_PARAM_NEG_CMD
+	0x40 UIH_PARAM_NEG_RES
+	0x49 UIH_PARAM_CMD_REMOVE_PORT
+	0x71 UIH_MODEM_STATUS_CMD
+	0x70 UIH_MODEM_STATUS_RES
+)
+
+/*bits in rfcomm address*/
+(
+	0 RFCOMM_ADDRESS_EXT_LEN
+	1 RFCOMM_ADDRESS_CR
+	2 RFCOMM_ADDRESS_DERECTION
+
+
+)
+
+	(                                   
+	0 RFCOMM_CHANNEL_STATE_PN_CMD
+	1 RFCOMM_CHANNEL_STATE_PN_RES
+	2 RFCOMM_CHANNEL_STATE_SABM
+	3 RFCOMM_CHANNEL_STATE_UA
+	4 RFCOMM_CHANNEL_STATE_SND_MS_CMD
+	5 RFCOMM_CHANNEL_STATE_RCV_MS_CMD
+	6 RFCOMM_CHANNEL_STATE_SND_MS_RES
+	7 RFCOMM_CHANNEL_STATE_RCV_MS_RES
+	0xff RFCOMM_CHANNEL_SETUP_COMPLETE
+	) 
+
+	/*mem_rfcomm_send_more_pkt*/
+	(
+	1 MORE_PKT_MSC_CMD_HF
+	2 MORE_PKT_MSC_CMD_HS
+	3 MORE_PKT_MSC_CMD_SPP
+	4 MORE_PKT_MSC_CMD_OBEX
+	)
+
+	(
+	127 RFCOMM_MALLOC_SIZE
+	)
+0x0511 mem_sdp_mem_start
+0x0511 mem_sdp_uuid_search_ptr
+0x0519 mem_sdp_continue_byte
+0x051b mem_sdp_pduid
+0x051c mem_sdp_transactionid
+0x051e mem_sdp_transactionid_local
+0x0520 mem_sdp_attribute_maxbyte
+0x0522 mem_sdp_record_maxcnt
+0x0524 mem_sdp_record_handle
+0x0528 mem_sdp_LACAP_found
+0x0529 mem_sdp_RFCOMM_found
+0x052a mem_sdp_handle_list
+0x052a mem_sdp_attrib_list
+0x054a mem_sdp_error_code
+0x054c mem_sdp_all_length
+0x054e mem_handle_humber
+0x054f mem_search_uuid
+0x0551 mem_sdp_mem_end
+(
+0 AGORHS_SERVICE
+1 GENAUDIO_SERVICE
+2 HANDSFREE_SERVICE
+)
+(
+0 ATTRIBUTEID_0000
+1 ATTRIBUTEID_0001
+2 ATTRIBUTEID_0004
+3 ATTRIBUTEID_0009
+4 ATTRIBUTEID_0100
+5 ATTRIBUTEID_0302
+6 ATTRIBUTEID_0006
+7 ATTRIBUTEID_0311
+)
+
+(
+0x01 SDP_ERROR_RES
+0x02 SDP_SEARCH_REQ
+0x03 SDP_SEARCH_RES
+0x04 SDP_ATTRIBUTE_REQ
+0x05 SDP_ATTRIBUTE_RES
+0x06 SDP_SEARCHATTRIB_REQ
+0x07 SDP_SEARCHATTRIB_RES
+)
+0x2600 sdp_max_amount
+250 SDP_MALLOC_SIZE
+0x6e sdp_tid_spp //any number
+
+(
+0x1f11 SDP_UUID_HS_AUDIO_GATEWAY
+)
+
+(
+0X09 SDP_ATTRIBUTE_ID
+0x0a SDP_ATTRIBUTE_RANGE
+)
+
+(//mem_sdp_handle_list
+7 SDP_MAX_HANDLE_NUMBER
+)
+
+ 
+
+0x0551 mem_rxbuf
+0x0562 mem_random_number
+0x0572 mem_round_key
+0x0582 mem_kinit
+0x0592 mem_input_store
+0x05a2 mem_x
+0x05b2 mem_y
+0x05c1 mem_y15
+0x05c2 mem_key_store
+0x05d3 mem_key_store_end
+0x05d4 memp_ar_key
+0x05d6 memp_ar_input
+0x05d8 mem_ar_hround
+0x05e2 mem_ec_infinite
+0x05e3 mem_ec_loopc
+0x05e5 mem_aes_cmac_data_length
+0x05e6 memdat
+0x05e6 mem_ax
+0x05fe mem_ay
+0x0616 mem_az
+0x062e mem_bx
+0x0646 mem_ax_256//32 bytes
+0x0646 mem_by
+0x065e mem_bz
+0x0666 mem_ay_256// 32 bytes
+0x0676 mem_cx
+0x0686 mem_az_256// 32 bytes
+0x068e mem_cy
+0x06a5 mem_cy5
+0x06a6 mem_bx_256// 32 bytes
+0x06a6 mem_cz
+0x06be mem_k
+0x06c6 mem_by_256// 31 bytes
+0x06d6 mem_align
+0x06e6 mem_bz_256//32 bytes
+0x06e6 mem_tmp1
+0x06e6 memahbak
+0x06fe mem_tmp5
+0x0706 mem_cx_256//32 bytes
+0x0706 memahsave
+0x0716 mem_tmp2
+0x0726 mem_cy_256// 32 bytes
+0x0726 memahsave_end
+0x0726 mem_addr_padding
+0x0727 mem_addr_value/* 12 bytes     */ 
+0x072e mem_tmp3
+0x072e mem_t1
+0x0733 mem_addr_value_end
+0x0736 mem_addr_iocap_end
+0x0745 mem_cy5_256// 1 byte
+0x0746 mem_cz_256// 32 bytes
+0x0746 mem_tmp0
+0x0746 mem_t0
+0x074e mem_tmp0a
+0x075e mem_t2
+0x0766 mem_k_256//32 bytes
+0x0776 mem_t3
+0x0786 mem_tmp1_256//32 bytes
+0x078e mem_t7
+0x07a6 mem_tmp5_256
+0x07c6 mem_tmp2_256
+0x07e6 mem_tmp3_256
+0x07e6 mem_t1_256
+0x0806 mem_tmp0_256
+0x0806 mem_t0_256
+0x0826 mem_t2_256
+0x0846 mem_t3_256
+0x0866 mem_t7_256
+0x0886 mem_p
+0x089e mem_a
+0x08b6 mem_b
+0x08ce mem_gx
+0x08e6 mem_gy
+0x08fe memh0
+0x091e mem_p_256
+0x093e mem_a_256
+0x095e mem_gx_256
+0x097e mem_gy_256
+0x099e mem_le_slat
+
+
+/* simple pairing page */
+
+0x09ae mem_sp_state_start
+0x09ae mem_sp_state
+0x09af mem_master_sp_state
+0x09b0 mem_sp_flag
+0x09b1 mem_master_sp_flag
+0x09b2 mem_sp_calc
+0x09b3 mem_sp_dh_ready
+0x09b4 mem_sp_localsm
+0x09b5 mem_pairing_auth
+0x09b6 mem_sp_flag_start
+0x09b6 mem_sp_local_key_send_count
+0x09b7 mem_sp_remote_key_recv_count
+0x09b8 mem_sp_remote_key_invalid
+0x09b9 mem_sp_dhkey_invalid
+0x09ba mem_gkey
+0x09be mem_le_pubkey_remote_x_256
+0x09c6 mem_sp_pubkey_remote
+0x09c6 mem_sp_pubkey_remote_x
+0x09de mem_sp_pubkey_remote_x_end
+0x09de mem_le_pubkey_remote_y_256
+0x09e6 mem_sp_pubkey_remote_y
+0x09fe mem_le_dhkey_256
+0x0a06 mem_sp_dhkey
+0x0a1e mem_sp_dhkey_end
+0x0a1e mem_sp_random_local
+0x0a2e mem_sp_random_local_end
+0x0a2e mem_sp_random_remote
+0x0a3e mem_sp_random_remote_end
+0x0a3e memresult
+0x0a3e mem_sp_calc_result
+0x0a3e memh
+0x0a42 memg
+0x0a46 memf
+0x0a4a meme
+0x0a4e mem_sp_calc_result_high
+0x0a4e memd
+0x0a52 memc
+0x0a56 memb
+0x0a5a mema
+0x0a5e mem_sp_check_result
+0x0a6e mem_sp_confirm_remote
+0x0a7e mem_sp_prarm_stack
+
+/* simple pairing status flag */
+(
+  0x00   SP_FLAG_STANDBY
+  0x01   SP_FLAG_COMMIT
+  0x02   LE_SP_FLAG_COMMIT_256
+
+)
+
+/* simple pairing calc flag */
+(
+  0x00   SP_CALC_STANDBY
+  0x01   SP_CALC_PUBKEY
+  0x02   SP_CALC_DHKEY
+  0x03   SP_CALC_PUBKEY_256
+  0x04   SP_CALC_DHKEY_256
+)
+
+/* simple pairing state */
+(
+  0x00   SP_STAT_NULL
+  0x01   SP_STAT_KEY_RECV
+  0x02   SP_STAT_KEY_GENERATE
+  0x03   SP_STAT_KEY_SEND
+  0x04   SP_STAT_COMMIT_CALC
+  0x05   SP_STAT_COMMIT_SEND
+  0x06   SP_STAT_RANDOM_RECV
+  0x07   SP_STAT_RANDOM_SEND
+  0x08   SP_STAT_CONFIRM_RECV
+  0x09   SP_STAT_CONFIRM_CHECK
+  0x0A   SP_STAT_CONFIRM_CALC
+  0x0B   SP_STAT_CONFIRM_SEND
+  0x0C   SP_STAT_LINK_KEY_CALC
+  0x0F   SP_STAT_DONE
+  0x10   SP_STAT_FEATURE_EXT_SEND
+  0x11   SP_STAT_GKEY_CALC
+  /*simple pairing master only*/
+  0x12   SP_MASTER_STAT_START_SKIP
+  0x13   SP_MASTER_STAT_START_DONE
+  0x14   SP_STAT_COMMITMENT_COMPARE
+  0x15   SP_STATE_END
+)
+
+
+/* simple paring invalid flag */
+(
+  0x00   SP_KEY_INVALID
+  0x01   SP_KEY_VALID
+  0x03   SP_KEY_VALID_256
+
+)
+
+/* encapsulated defination for P-192 key */
+(
+  0x01  ENCAPSULATED_MAJOR_TYPE_P192
+  0x01  ENCAPSULATED_MINOR_TYPE_P192
+  0x30  ENCAPSULATED_LEN_P192
+)
+
+/* bluetooth 2.1 support flag */
+(
+  0x00  SIMPLE_PAIRING_ENABLE
+  0x01  ENCRYPTION_PAUSE_ENABLE
+  0x02  EXTENDED_INQUIRY_RESPOSE_ENABLE
+  0x03  SNIFF_SUBRATING_ENABLE
+)
+
+/*mem_sp_localsm*/
+(
+  0x00 DEFAULT_STATEMACHINE
+  0x01 LOCAL_STATEMACHINE
+)
+
+(
+ 0x00 DEFALT_PAIRING_AUTH
+ 0x01 PAIRING_AUTH
+)
+
+(
+1 SSP_MODE_SSP_PIN_FLAG
+2 SSP_MODE_PASSKEY_ENTRY_FLAG
+3 SSP_MODE_JUST_WORK_FLAG
+)
+
+(//ssp mode
+0x040003 SSP_MODE_JUST_WORK_IO_CAP_DATA
+0X040001 SSP_MODE_SSP_PIN_IO_CAP_DATA
+0X040002 SSP_MODE_PASSKEY_IO_CAP_DATA
+)
+
+(
+0x00 DISPLAY_ONLY
+0x01 DISPLAY_YESNO
+0x02 KEYBOARD_ONLY
+0x03 NO_INPUT_NO_OUTPUT
+)
+
+(
+7 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT
+6 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT
+0 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT
+)
+(
+1 FLAG_PAIRING_STATE_PAIRING
+0 FLAG_PAIRING_STATE_NOT_PAIRING
+)
+
+  
+/*****************************************************************************/
+/* RCS HEADER -- DO NOT ERASE                                                */
+/* $Author: Administrator $                                                           */
+/* $Id: bt_ui_format.upper,v 1.1 2009-09-28 04:06:17 Administrator Exp $     */
+/************************************************************************/
+
+
+	/* ========= memory ============== */
+0x0a8e mem_UI_data_txbuff_length
+0x0a90 mem_ipc_skip_continue_proc
+0x0a91 mem_ui_timer_temp//length 4
+0x0a91 mem_ipc_rega_temp
+
+/************/
+/* constant */
+/************/
+
+//mem_ui_state_map
+(
+0 UI_STATE_BT_CONNECTED
+1 UI_STATE_BT_SETUP_COMPLETE
+2 UI_STATE_BT_HID_CONN
+3 UI_STATE_BT_HID_HANDSHAKE
+4 UI_STATE_BT_SPP_CONN
+5 UI_STATE_BT_SNIFF
+6 UI_STATE_BT_DISCOVERY
+7 UI_STATE_BT_RECONNECT
+8 UI_STATE_BT_SLAVE_ROLE
+9 UI_STATE_BLE_CONNECTED
+10 UI_STATE_BLE_WRITE_RCV
+11 UI_STATE_BLE_ADV
+12 UI_STATE_BTN_DOWN
+)
+
+(
+1 UI_STATE_SPP_NL_AUTO_DISCOVER
+
+)
+
+/* UI state for Headset (memui_HS_State) */ 
+   (
+    0 UI_HEADSET_DISCONNECT
+    1 UI_HEADSET_IDLE                   /* before the responsor HS receive SABM      */
+    2 UI_HEADSET_W4CONNECT
+    3 UI_HEADSET_RINGING
+    4 UI_HEADSET_CONNECTED
+    5 UI_HEADSET_PARING
+  )
+/* memui_BB_State */
+(
+  0 UI_BB_OFF
+  1 UI_BB_IDLE
+  2 UI_BB_DISCOVERY
+  3 UI_BB_CONNECTED_ACTIVE_NO_SCO
+  4 UI_BB_CONNECTED_ACTIVE_WITH_SCO
+  5 UI_BB_CONNECTED_ACTIVE_WAIT_SNIFF
+  6 UI_BB_CONNECTED_SNIFF
+  7 UI_BB_RECONNECT
+  8 UI_BB_CONNECTED_SNIFF_WITH_SCO
+)
+
+/************/
+/* flags    */
+/************/
+  
+/* memui_Misc_Flags */
+  (
+    5 NO_IDLE_TURN_OFF
+    7 ANSWER_RING_FLAG               /* 1 Answer,0 no*/
+  )
+
+/* mem_UI_SCH_Interface */
+  (
+    0  UI_HS_PAIRING 
+    2  UI_REQ_CLOSE_RFCOMM
+    3  UI_LINK_LOST
+    4  UI_REQ_OPEN_SCO
+    6  UI_REQ_CLOSE_SCO
+  )
+  
+/* memui_PassOverKey */
+  (
+    0  ANSWER_RING_BIT
+    0  AG_SEND_RING_BIT
+    1  VOL_UP_BIT
+    2  VOL_DOWN_BIT
+    3  INI_CALL_BIT
+    4  DAIL_LAST_CALL
+    5  END_CALL_BIT
+    6  NOKIA_VOICE_ACTIVE 
+    7  REJECT_CALL_BIT
+  )
+  
+/* memui_reconnect_mode */
+(
+  0 NO_RECONNECTION
+  1 RECONNECT_HID
+  2 RECONNECT_HF
+  3 RECONNECT_HS
+  4 RECONNECT_HID_HF
+  5 RECONNECT_HID_HS
+)
+/* memui_Commands */
+(
+0 BT_CMD_STANDBY
+1 BT_CMD_START_DISCOVERY
+2 BT_CMD_STOP_DISCOVERY
+3 BT_CMD_RECONNECT
+4 BT_CMD_DISCONNECT
+5 BT_CMD_ENTER_SNIFF
+6 BT_CMD_EXIT_SNIFF
+7 BT_CMD_ENTER_SNIFF_SUBRATING
+8 BT_CMD_EXIT_SNIFF_SUBRATING
+9 BT_CMD_SNIFF_TEST
+10 BT_CMD_SET_PIN_CODE
+11 BT_CMD_START_INQUIRY
+12 BT_CMD_STOP_INQUIRY
+13 BT_CMD_START_ADV
+14 BT_CMD_STOP_ADV
+15 BT_CMD_START_DIRECT_ADV
+16 BT_CMD_STOP_DIRECT_ADV
+17 BT_CMD_LE_DISCONNECT
+18 BT_CMD_LE_UPDATE_CONN
+19 BT_CMD_LED_OFF
+20 BT_CMD_LED_ON
+21 BT_CMD_LED_BLINK
+22 BT_CMD_LE_START_CONN
+23 BT_CMD_LE_START_SCAN
+24 BT_CMD_LE_STOP_SCAN
+25 BT_CMD_ENTER_HIBERNATE
+27 BT_CMD_LE_SMP_SECURITY_REQUEST
+29 BT_CMD_ROLE_SWITCH
+30 BT_CMD_BB_RECONN_CANCEL
+31 BT_CMD_STORE_RECONN_INFO_LE
+32 BT_CMD_STORE_RECONN_INFO_BT
+33 BT_CMD_DHKEY_NOT_ACCEPT
+34 BT_CMD_START_24G
+35 BT_CMD_STOP_24G
+36 BT_CMD_PAIR_24G
+37 BT_CMD_STORE_RECONN_INFO
+)
+
+(
+0x00 BT_EVT_NULL
+0x01 BT_EVT_BB_CONNECTED
+0x02 BT_EVT_BB_DISCONNECTED
+0x03 BT_EVT_RECONN_STARTED
+0x04 BT_EVT_RECONN_FAILED
+0x05 BT_EVT_SETUP_COMPLETE
+0x06 BT_EVT_HID_CONNECTED
+0x07 BT_EVT_HID_DISCONNECTED
+0x08 BT_EVT_SPP_CONNECTED
+0x09 BT_EVT_SPP_DISCONNECTED
+0x0A BT_EVT_PINCODE_REQ
+0x0B BT_EVT_ENTER_SNIFF
+0x0C BT_EVT_EXIT_SNIFF
+0x0D BT_EVT_ENTER_SNIFF_SUB
+0x0E BT_EVT_EXIT_SNIFF_SUB
+0x0F BT_EVT_DISCOVERY_STOPED
+0x10 BT_EVT_BUTTON_LONG_PRESSED
+0x12 BT_EVT_HID_HANDSHAKE
+0X13 BT_EVT_RECONN_PAGE_TIMEOUT
+0x14 BT_EVT_LE_CONNECTED
+0X15 BT_EVT_LE_DISCONNECTED
+0x16 BT_EVT_ML2CAP_CONN_REFUSED
+0x17 BT_EVT_BUTTON_ENTER_HIBERNATE
+0x18 BT_EVT_LINKKEY_GENERATE
+0x19 BT_EVT_SWITCH_NOT_ACCEPT
+0x20 BT_EVT_SWITCH_ACCEPT
+0x21 BT_EVT_SNIFF_NOT_ACCEPT
+0x22 BT_EVT_SNIFF_ACCEPT
+0x23 BT_EVT_UNSNIFF_ACCEPT
+0x24 BT_EVT_UNSNIFF_NOT_ACCEPT
+0x25 BT_EVT_BUTTON_ADJUST_DPI
+0x26 BT_EVT_SEND_UNSNIFF_ACCEPT
+0x27 BT_EVT_VIRTUAL_CABLE_UNPLUG
+0x28 BT_EVT_LE_WRITE_REQUEST
+0x29 BT_EVT_LE_ENC_INFO
+0x2a BT_EVT_SWITCH_FAIL_MASTER
+0x2b BT_EVT_SWITCH_SUCCESS_MASTER
+0x2c BT_EVT_BUTTON_DOWN
+0x2d BT_EVT_BUTTON_UP
+0x2e BT_EVT_REMOTE_UNSNIFF
+0x30 BT_EVT_LE_PAIRING_FAIL
+0x31 BT_EVT_LE_PAIRING_SUCCESS
+0x32 BT_EVT_LE_START_ENC
+0X33 BT_EVT_LE_PAUSE_ENC
+0X34 BT_EVT_LE_TK_GENERATE
+0x35 BT_EVT_BT_GKEY_GENERATE
+0x36 BT_EVT_BT_GET_PASSKEY
+0x37 BT_EVT_BT_PAIRING_FAIL
+0x38 BT_EVT_BT_PAIRING_SUCCESS
+0x39 BT_EVT_24G_PAIRING_COMPLETE
+0x3a BT_EVT_24G_ATTEMPT_FAIL
+0x3b BT_EVT_LE_GKEY_GENERATE
+0x3c BT_EVT_24G_ATTEMPT_SUCCESS
+0x3d BT_EVT_STORE_NVRAM
+0x3e BT_EVT_LE_PAIRING_COMPLETE
+0x3F BT_EVT_LE_RECONNECT_COMPLETE
+0x40 BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP
+0x41 BT_EVT_LE_LTK_LOST
+)
+//switch
+(
+0 OFF
+1 ON
+)
+/* memui_mem_lock */
+(
+    0 MEM_UNLOCK
+    1 MEM_LOCK
+)
+/* memui_flag0 */
+(
+    0 UI_USER_DATA_FLAG
+    1 UI_WII_WAITING_SLEEP
+    2 UI_KEYBOARD_SNIFF_SKIP
+)
+/* mem_master_type */
+(
+    0 MTYPE_HID_DEFAULT
+    1 MTYPE_HID_SSP
+    2 MTYPE_SPP
+)
+
+	(	
+	0x01 RECIEVE_SDP_CONN_RES
+	0x02 RECIEVE_SDP_CFG_REQ
+	0x03 RECIEVE_SDP_CFG_RES
+	0x04 RECIEVE_RFCOMM_CONN_RES
+	0x05 RECIEVE_RFCOMM_CFG_REQ
+	0x06 RECIEVE_RFCOMM_CFG_RES
+	0x07 RECIEVE_HID_CTRL_CONN_RES
+	0x08 RECIEVE_HID_CTRL_CFG_REQ
+	0x09 RECIEVE_HID_CTRL_CFG_RES
+	0x0A RECIEVE_HID_INT_CONN_RES
+	0x0B RECIEVE_HID_INT_CFG_REQ
+	0x0C RECIEVE_HID_INT_CFG_RES
+	0x0D RECIEVE_AVCTP_CONN_RES
+	0x0E RECIEVE_AVCTP_CFG_REQ
+	0x0F RECIEVE_AVCTP_CFG_RES
+	0x10 RECIEVE_AVDTP_SIGNAL_CONN_RES
+	0x11 RECIEVE_AVDTP_SIGNAL_CFG_REQ
+	0x12 RECIEVE_AVDTP_SIGNAL_CFG_RES
+	0x13 RECIEVE_AVDTP_MEDIA_CONN_RES
+	0x14 RECIEVE_AVDTP_MEDIA_CFG_REQ
+	0x15 RECIEVE_AVDTP_MEDIA_CFG_RES
+	0x16 RECIEVE_SS_REASULT_HS                  
+	0x17 RECIEVE_SS_REASULT_HF                  
+	0x18 RECIEVE_SS_REASULT_AVTARG		          
+	0x19 RECIEVE_SS_REASULT_OBEX		            
+	0x1A RECIEVE_DLCI0_UA
+	0x1B RECIEVE_HS_PARAM_NEG_RES
+	0x1C RECIEVE_HS_UA
+	0x1D RECIEVE_HS_MODEM_STATUS_RES
+	0x1E RECIEVE_HS_MODEm_STATUS_CMD
+	0x1F RECIEVE_HF_PARAM_NEG_RES   
+	0x20 RECIEVE_HF_UA              
+	0x21 RECIEVE_HF_MODEM_STATUS_RES
+	0x22 RECIEVE_HF_MODEm_STATUS_CMD 
+	0x23 RECIEVE_OBEX_PARAM_NEG_RES     
+	0x24 RECIEVE_OBEX_UA              
+	0x25 RECIEVE_OBEX_MODEM_STATUS_RES
+	0x26 RECIEVE_OBEX_MODEm_STATUS_CMD    
+	0x27 RECIEVE_SPP_PARAM_NEG_RES   
+	0x28 RECIEVE_SPP_UA              
+	0x29 RECIEVE_SPP_MODEM_STATUS_RES
+	0x2A RECIEVE_SPP_MODEm_STATUS_CMD
+	0x2b RECIEVE_SDP_DISCONN_RES
+	)
+
+
+
+	(
+	0 UPPERSM_RP_IDLE
+	1 UPPERSM_RP_SDP_CONN
+	2 UPPERSM_RP_SDP_CONN_WAIT
+	3 UPPERSM_RP_SDP_CFG
+	4 UPPERSM_RP_SDP_CFG_WAIT
+	5 UPPERSM_RP_SS_AVTARG
+	6 UPPERSM_RP_SS_AVTARG_WAIT
+	7 UPPERSM_RP_SS_OBEX
+	8 UPPERSM_RP_SS_OBEX_WAIT
+	9 UPPERSM_RP_SDP_DISCONN
+	10 UPPERSM_RP_SDP_DISCONN_WAIT
+	11 UPPERSM_RP_AVDTP_CONN_WAIT
+	12 UPPERSM_RP_AVCTP_CONN
+	13 UPPERSM_RP_AVCTP_CONN_WAIT
+	14 UPPERSM_RP_AVCTP_CFG
+	15 UPPERSM_RP_AVCTP_CFG_WAIT
+	16 UPPERSM_RP_OBEX_CMD_PN
+	17 UPPERSM_RP_OBEX_CMD_PN_WAIT
+	18 UPPERSM_RP_OBEX_SABM
+	19 UPPERSM_RP_OBEX_SABM_WAIT
+	20 UPPERSM_RP_OBEX_CMD_MS
+	21 UPPERSM_RP_OBEX_CMD_MS_WAIT
+	)
+	(		/*mem_upper_sm_reconn*/
+	0 UPPERSM_RECONN_IDLE		
+	1 UPPERSM_RECONN_SDP_CONN		
+	2 UPPERSM_RECONN_SDP_CONN_WAIT		
+	3 UPPERSM_RECONN_SDP_CFG		
+	4 UPPERSM_RECONN_SDP_CFG_WAIT		
+	5 UPPERSM_RECONN_SS_HS
+	6 UPPERSM_RECONN_SS_HS_WAIT
+	7 UPPERSM_RECONN_SS_HF
+	8 UPPERSM_RECONN_SS_HF_WAIT
+	9 UPPERSM_RECONN_SS_AVTARG		
+	10 UPPERSM_RECONN_SS_AVTARG_WAIT		    
+	11 UPPERSM_RECONN_SS_OBEX		            
+	12 UPPERSM_RECONN_SS_OBEX_WAIT		      
+	13 UPPERSM_RECONN_SDP_DISCONN		        
+	14 UPPERSM_RECONN_SDP_DISCONN_WAIT      
+	15 UPPERSM_RECONN_HID_CTRL_CONN		      
+	16 UPPERSM_RECONN_HID_CTRL_CONN_WAIT		
+	17 UPPERSM_RECONN_HID_CTRL_CFG		      
+	18 UPPERSM_RECONN_HID_CTRL_CFG_WAIT     
+	19 UPPERSM_RECONN_HID_INT_CONN		      
+	20 UPPERSM_RECONN_HID_INT_CONN_WAIT		  
+	21 UPPERSM_RECONN_HID_INT_CFG		        
+	22 UPPERSM_RECONN_HID_INT_CFG_WAIT      
+	23 UPPERSM_RECONN_RFCOMM_CONN		        
+	24 UPPERSM_RECONN_RFCOMM_CONN_WAIT		  
+	25 UPPERSM_RECONN_RFCOMM_CFG		        
+	26 UPPERSM_RECONN_RFCOMM_CFG_WAIT       
+	27 UPPERSM_RECONN_RFCOMM_SABM		        
+	28 UPPERSM_RECONN_RFCOMM_SABM_WAIT		  
+	29 UPPERSM_RECONN_SPP_CMD_PN		        
+	30 UPPERSM_RECONN_SPP_CMD_PN_WAIT		    
+	31 UPPERSM_RECONN_SPP_SABM		          
+	32 UPPERSM_RECONN_SPP_SABM_WAIT		      
+	33 UPPERSM_RECONN_SPP_CMD_MS		        
+	34 UPPERSM_RECONN_SPP_CMD_MS_WAIT       
+	35 UPPERSM_RECONN_HF_CMD_PN		          
+	36 UPPERSM_RECONN_HF_CMD_PN_WAIT		    
+	37 UPPERSM_RECONN_HF_SABM		            
+	38 UPPERSM_RECONN_HF_SABM_WAIT		      
+	39 UPPERSM_RECONN_HF_CMD_MS		          
+	40 UPPERSM_RECONN_HF_CMD_MS_WAIT        
+	41 UPPERSM_RECONN_AVDTPs_CONN		        
+	42 UPPERSM_RECONN_AVDTPs_CONN_WAIT		  
+	43 UPPERSM_RECONN_AVDTPs_CFG		        
+	44 UPPERSM_RECONN_AVDTPs_CFG_WAIT       
+	45 UPPERSM_RECONN_AVDTPm_CONN		        
+	46 UPPERSM_RECONN_AVDTPm_CONN_WAIT		  
+	47 UPPERSM_RECONN_AVDTPm_CFG		        
+	48 UPPERSM_RECONN_AVDTPm_CFG_WAIT       
+	49 UPPERSM_RECONN_AVCTP_CONN		        
+	50 UPPERSM_RECONN_AVCTP_CONN_WAIT		    
+	51 UPPERSM_RECONN_AVCTP_CFG		          
+	52 UPPERSM_RECONN_AVCTP_CFG_WAIT		    
+	53 UPPERSM_RECONN_OBEX_CMD_PN		        
+	54 UPPERSM_RECONN_OBEX_CMD_PN_WAIT		  
+	55 UPPERSM_RECONN_OBEX_SABM		          
+	56 UPPERSM_RECONN_OBEX_SABM_WAIT		    
+	57 UPPERSM_RECONN_OBEX_CMD_MS		        
+	58 UPPERSM_RECONN_OBEX_CMD_MS_WAIT     
+	59 UPPERSM_RECONN_SS_SPP
+	60 UPPERSM_RECONN_SS_SPP_WAIT
+	)
+	(/*mem_UI_profile_supported*/
+	0 support_HID
+	1 support_A2DP
+	2 support_AVRCP
+	3 support_HF
+	4 support_HS
+	5 support_PBAP
+	6 support_SPP
+	)
+	/*mem_upper_sm_ss*/
+	(
+	0 UPPERSM_SS_HS
+	1 UPPERSM_SS_HF
+	2 UPPERSM_SS_AVTARG
+	3 UPPERSM_SS_OBEX
+	)
+
+	(
+	160 UI_HUNDRED_MILLISECOND_TIME
+	0XFF UI_BUTTON_GPIO_DISABLE
+	)
+	(
+	0x01 UI_BB_INCONNECT
+	0x10 UI_BB_DISCONNECT
+	)
+(
+0x00 UI_BUTTON_STATE_DOWN
+0x01 UI_BUTTON_STATE_UP
+)
+
+//mem_ipc_skip_continue_proc
+(
+	0 IPC_CONTINUE_PROCESS
+	1 IPC_SKIP_CONTINUE_PROCESS
+)
+
+
+(//led style struct 
+0 		LED_OFFSET_LED_TYPE
+1 		LED_OFFSET_BLINK_COUNT
+2		LED_OFFSET_LED_GPIO
+3		LED_OFFSET_ON_TIME
+5		LED_OFFSET_OFF_TIME
+7 		LED_OFFSET_CB_LEDON
+9		LED_OFFSET_CB_LEDOFF
+11		LED_OFFSET_LENGTH
+)
+
+(//LED state
+0 UI_LED_STATE_BLINK_STOP
+1 UI_LED_STATE_BLINK_START
+2 UI_LED_STATE_LIGHTING
+3 UI_LED_STATE_DARKING
+4 UI_LED_STATE_BLINK_LIGHTING
+5 UI_LED_STATE_BLINK_DARKING
+
+0xFF LED_INFINITE_FLASH_NUM
+
+)
+
+
+/**
+*  @file:bt_utility_format.upper
+*  @author: lei.zhu
+*  utility header file. inlcude timer
+*  Copyright:  (C)Hanlynn Technology    
+*/
+
+0x0a95 mem_hold_contr
+0x0a97 mem_hold_contw
+0x0a99 mem_fifo_temp
+0x0a9a mem_pdatatemp
+0x0aa2 mem_temp//8 bytes
+0x0aaa mem_timeup// 4 bytes
+0x0aae mem_rega//4 bytes
+0x0ab2 mem_regb//4 bytes
+0x0ab6 mem_regc//3 bytes
+0x0ab9 mem_contr//2 bytes
+0x0abb mem_contw//2 bytes
+0x0abd mem_wakup_from_power_flag
+0x0abe mem_saved_gpio_in
+0x0ac2 mem_shutter_random_mac_data_temp
+0x0ac2 mem_shutter_config_data_temp
+0x0ac2 mem_le_adv_channel_map_temp
+0x0ac2 mem_le_data_len_temp//1byte
+0x0ac2 mem_tx_fifo_map_temp
+0x0ac2 mem_rpn_dlci//1byte
+0x0ac2 mem_event_cmd_response_content//2byte
+0x0ac2 mem_le_prand//16byte
+0x0ac2 mem_AES_CMAC_k//16 bytes
+0x0ac2 mem_regext_index//1 bytes
+0x0ac2 mem_temp_block0
+0x0ac3 mem_le_data_temp//15bytes
+0x0ac3 mem_temp_block1
+0x0ad2 mem_le_aes_128//16byte
+0x0ad2 mem_regext//64 bytes
+0x0ad2 mem_AES_CMAC_k1//16 bytes
+0x0ad2 mem_temp_block2
+0x0ae2 mem_AES_CMAC_k2//16 bytes
+0x0ae2 mem_temp_block3
+0x0af2 mem_AES_CMAC_temp// 16 bytes
+0x0af2 mem_temp_block4
+0x0b02 mem_AES_CMAC_M_last// 16 bytes
+0x0b02 mem_module_uart_cmd
+0x0b03 mem_module_uart_opcode
+0x0b04 mem_module_uart_len
+0x0b05 mem_module_temp_nl_discard_packet
+0x0b06 mem_temp_block5
+0x0b12 mem_le_mackey//16 bytes
+0x0b12 mem_app_receive_temp
+0x0b12 mem_key_value_temp
+0x0b14 mem_key_value
+0x0b16 mem_key_value_temp1
+0x0b17 mem_key_value_temp2
+0x0b18 mem_key_value_temp3
+0x0b19 mem_key_value_temp4
+0x0b1a mem_key_value_temp5
+0x0b1b mem_key_value_temp6
+0x0b1c mem_temp_block6
+0x0b22 mem_usb_status
+0x0b23 mem_usb_fifo_empty
+0x0b24 mem_usb_read_len
+0x0b25 mem_usb_rxbuf
+0x0b65 mem_bufptr
+0x0b67 mem_remain
+0x0b68 mem_devicedesc
+0x0b7c mem_hidreportdesc_kb
+0x0b7e mem_hidreportdesc_m
+0x0b80 mem_confdesc
+0x0be4 mem_string0
+0x0be9 mem_string1
+0x0c07 mem_string2
+0x0c47 mem_string3
+0x0c65 mem_usb_zero_packet
+0x0c67 mem_usb_ones_packet
+0x0c69 mem_usb_two_packet
+0x0c6b mem_usb0_state
+0x0c6c mem_usb_offline_check_gpio
+0x0c6d mem_usb_tx_interval
+0x0c6e mem_usb_clear_mem_start
+0x0c6e mem_usb_setup
+0x0c6e mem_usb_setup_bmRequestType
+0x0c6f mem_usb_setup_bRequest
+0x0c70 mem_usb_setup_bValue
+0x0c71 mem_usb_setup_bValueH
+0x0c72 mem_usb_setup_wIndex
+0x0c74 mem_usb_setup_bLength
+0x0c75 mem_usb_setup_bLengthH
+0x0c76 mem_usb0_setup
+0x0cb6 mem_usb0_set_report_data
+0x0cf6 mem_usb0_get_report_data
+0x0d36 mem_usb_state
+0x0d37 mem_usb_tx_wait
+0x0d38 mem_usb_tx_enable
+0x0d39 mem_usb_remote_wakeup
+0x0d3a mem_usb_clear_remote_wakeup
+0x0d3b mem_usb_ep0_stall_status
+0x0d3c mem_usb_ep1_stall_status
+0x0d3d mem_usb_ep2_stall_status
+0x0d3e mem_usb_ep3_stall_status
+0x0d3f mem_dsc_info_data_pointer
+0x0d41 mem_dsc_info_len
+0x0d42 mem_usb0_data_ready_report
+0x0d43 mem_usb_tx_win_enable
+0x0d44 mem_usb_tx_mac_enable
+0x0d45 mem_usb_device_enumeration_endflag
+0x0d46 mem_usb_wakestate_onetime_flag
+0x0d47 mem_usb_mac_wakeup_trig
+0x0d48 mem_usb_set_high_addr_flag
+0x0d49 mem_usb_set_protocol_value
+0x0d4a mem_usb_set_protocol_status
+0x0d4b mem_usb_get_protocol_flag
+0x0d4c mem_usb_idle_flag
+0x0d4d mem_usb_idle_rate
+0x0d4e mem_usb_setup_bValue_temp
+0x0d50 mem_usb0_get_set_report
+0x0d51 mem_usb_ep1_data
+0x0d52 mem_usb_ep2_data
+0x0d53 mem_usb_clear_halt
+0x0d54 mem_usb_mouse_data
+0x0d64 mem_usb_kb_data
+0x0d74 mem_usb_kb_multikey
+0x0d84 mem_usb_kb_data_sta_data
+0x0d8c mem_usb_kb_data_last_data
+0x0d94 mem_usb_kb_multikey_sta_data
+0x0d97 mem_usb_kb_multikey_last_data
+0x0d9a mem_usb_kb_blank_data_enable
+0x0d9b mem_usb_kb_mul_blank_data_enable
+0x0d9c mem_usb_test_cnt
+0x0d9d mem_usb_clear_mem_end
+0x0d9d mem_usb_test_kb
+0x0d9e mem_rssi_noise_buffer
+0x0e9e mem_rssi_noise_dg_buffer
+0x0f9e mem_rssi_noise_ms_buffer
+0x109e mem_rssi_noise_kb_buffer
+0x119e mem_24g_common_temp
+0x11be mem_data_pre
+0x11c0 mem_data_current
+0x11c2 mem_data_sum
+
+
+(
+/*mem_util_timer_flag0_7*/
+    0   UTIL_TIMER_0_USED
+    1   UTIL_TIMER_1_USED
+    2   UTIL_TIMER_2_USED
+    3   UTIL_TIMER_3_USED
+    4   UTIL_TIMER_4_USED
+    5   UTIL_TIMER_5_USED
+    6   UTIL_TIMER_6_USED
+    7   UTIL_TIMER_7_USED
+/*mem_util_timer_flag8_15*/
+    0   UTIL_TIMER_8_USED
+    1   UTIL_TIMER_9_USED
+    2   UTIL_TIMER_10_USED
+    3   UTIL_TIMER_11_USED
+    4   UTIL_TIMER_12_USED
+    5   UTIL_TIMER_13_USED
+    6   UTIL_TIMER_14_USED
+    7   UTIL_TIMER_15_USED
+)
+
+//util fifo param
+(
+
+8 UTIL_FIFO_LEN
+-1 UTIL_FIFO_OFFSET
+)
+
+
+(
+	0xAA DEBUGLOG_HEAD
+	0x00 DEBUGLOG_TYPE
+	0x04 DEBUGLOG_LEN
+	0xBB DEBUGLOG_TAIL
+)
+
+(
+	0x1000 DEBUGLOG_DTYPE_CALLBACK
+	0x1001 DEBUGLOG_DTYPE_EVENT
+	0x1002 DEBUGLOG_DTYPE_CMD
+	0x1003 DEBUGLOG_DTYPE_STATUS
+	0x1004 DEBUGLOG_DTYPE_MISC
+	0x1005 DEBUGLOG_DTYPE_CONN_SM
+	0x1006 DEBUGLOG_DTYPE_UPPER_SM
+	0x1007 DEBUGLOG_DTYPE_PARSE_LMP
+	0x1008 DEBUGLOG_DTYPE_SEND_LMP
+)
+
+//DEBUGLOG_DTYPE_CALLBACK
+(
+	0x0000 CALLBACK_24G_DATA
+	0x0001 CALLBACK_LE_PROCESS
+	0x0002 CALLBACK_BT_PROCESS
+	0x0003 CALLBACK_BEFORE_LPM
+	0x0004 CALLBACK_BB_EVENT_PROCESS
+	0x0005 CALLBACK_IDLE_PROCESS
+	0x0006 CALLBACK_BEFORE_HIBERNATE
+	0x0007 CALLBACK_ATT_WRITE
+	0x0008 CALLBACK_EVENT_TIMER
+)
+
+//DEBUGLOG_DTYPE_EVENT
+//(
+
+//)
+
+//DEBUGLOG_DTYPE_CMD
+//(
+
+//)
+
+//DEBUGLOG_DTYPE_STATUS
+(
+	0x0000 STATUS_CODE_WAKE
+	0x0001 STATUS_LPM_WAKE
+	0x0004 STATUS_24G_START 
+)
+//DEBUG_DTYPE_MISC
+(
+	0x0000 MISC_LE_RETRANSMIT
+	0x0001 MISC_LOST_MOUSEDATA
+	0x0002 MISC_TXPOWER_0
+	0x0003 MISC_TXPOWER_1
+	0x0004 MISC_TXPOWER_2
+	0x0006 MISC_PULL_MOUSEDATA
+	0x0007 MISC_PUSH_MOUSEDATA
+	0x0008 MISC_LE_RETRANSMIT_MD
+
+
+)
+
+
+/************************************************************************/
+/* RCS HEADER -- DO NOT ERASE                                           */
+/* $Author: Administrator $                                                     */
+/* $Id: bt_var.osi,v 1.1 2009-09-28 04:06:18 Administrator Exp $   */
+/* Orisil Technology                                                 */
+/************************************************************************/
+
+
+/* packet types */
+(
+  0x02 FHS_PACKET 
+  0x03 DM1_PACKET 
+  0x03 DM1_LMP_PACKET 
+  0x04 DH1_PACKET 
+  0x05 HV1_PACKET 
+  0x06 HV2_PACKET 
+  0x07 HV3_PACKET 
+  0x08 DV_PACKET 
+  0x09 AUX1_PACKET 
+  0x0a DM3_PACKET 
+  0x0b DH3_PACKET 
+  0x0e DM5_PACKET 
+  0x0f DH5_PACKET 
+)
+
+
+/* mem_lmp_respond */
+(
+  0 RESPOND_TO_ALL
+  1 PASS_EVERYTHING
+  2 PASS_ONLY_UNKNOWNS
+  3 RESPOND_TO_LMPS
+)
+/* SCO algorithm defines */
+(
+  0 ULAW
+  1 ALAW
+  2 CVSD
+)
+/* encryption modes */
+(
+  0 NO_ENCRYPTION
+  1 PT_PT_ENCRYPTION
+  2 PT_BROADCAST_ENCRYPTION
+)
+
+/* bits used in mem_lmp_state1 variable */
+(
+  0 LMP_STATE_DETACH
+  1 LMP_STATE_HOLD
+  2 LMP_STATE_SNIFF
+  3 LMP_STATE_PARK
+  4 LMP_STATE_WAIT_SCO_CREATE
+  5 LMP_STATE_WAIT_SCO_KILL
+  6 LMP_STATE_SCO3
+  7 LMP_STATE_WAIT_SCO_START
+)
+/* mem_lmp_state2 */
+(
+  0 LMP_WAIT_FOR_SNIFF_ACCEPT
+  1 LMP_WAIT_FOR_PARK_ACCEPT
+  2 LMP_SEND_UNPARK_ACCEPTED
+  3 LMP_SEND_ENCRYPTION_START
+  4 LMP_SEND_ENCRYPTION_STOP
+  5 MESSAGE_QUEUE
+  7 LMP_STATE_WAIT_BEACON
+)
+/* mem_lmp_state3 */
+(
+ 0 INQUIRY_STATE_CHECK
+ 1 HOST_DELAY_MESSAGE
+ 2 VARIABLE_DELAY
+ 3 TEST_MODE_START_LOOPBACK
+ 4 TEST_MODE_START_PATTERN
+ 5 PARSE_TEST_CONTROL_MESSAGE
+ 6 H_AUTH_SEND_COMB_KEY
+)
+/* mem_rx_status */
+(
+  0 FROM_MASTER
+)
+/* mem_ms_flag */
+(
+  0 MS_RECEIVE_SWITCH_REQ
+  1 MS_SEND_SETUP_COMPLATE
+)
+/* mem_conn_sm */
+(
+  0 CONN_SM_STANDBY
+  1 CONN_SM_WAIT_PAGE
+  2 CONN_SM_SEND_FEATURES
+  3 CONN_SM_WAIT_FEATURES_RES
+  4 CONN_SM_SEND_CONN_REQ
+  5 CONN_SM_WAIT_CONN_ACCEPT
+  6 CONN_SM_AUTH_PAIR
+  7 CONN_SM_AUTH_PAIR_WAIT
+  8 CONN_SM_WAIT_MUTAL_AUTH
+  9 CONN_SM_ENCRYPT
+  0xa CONN_SM_ENCRYPT_WAIT
+  0xb CONN_SM_ENCRYPT_WAIT_CLEAR
+  0xc CONN_SM_SEND_SETUP_COMPLETE
+  0xd CONN_SM_WAIT_SETUP_COMPLETE 
+  0xe CONN_SM_SEND_SWITCH
+  0xf CONN_SM_DETACH_DELAY
+  0x10 CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION
+  0x11 CONN_SM_DELAY_RESTART_CONNECTION
+  0x12 CONN_SM_SEND_VERSION
+  0X13 CONN_SM_WAIT_VERSION
+  0x14 CONN_SM_SEND_FEATURES_EXT
+  0x15 CONN_SM_WAIT_FEATURES_EXT
+  0x16 CONN_SM_PAIRING
+  0x17 CONN_SM_AUTH
+  0x18 CONN_SM_PAIRING_WAIT
+  0x19 CONN_SM_AUTH_WAIT
+  0x1a CONN_SM_DONE
+  0x1b CONN_SM_WAIT_DONE
+)
+
+/* btStateConn1 */
+(
+  0 CONN_STANDBY
+  1 CONN_MASTER_SEND_CONN_REQ
+  2 CONN_MASTER_WAIT_FOR_CONN_ACCEPTED
+  3 CONN_MASTER_AUTH
+  4 CONN_MASTER_WAIT_FOR_FEATURES
+  5 CONN_MASTER_WAIT_FOR_SETUP_COMPLETE
+  6 CONN_MASTER_WAIT_FOR_MAX_SLOT
+  7 CONN_SLAVE_CONN_REQUESTED
+  8 CONN_SLAVE_WAIT_FOR_SETUP_COMPLETE
+  9 CONN_SLAVE_AUTH
+  10 CONN_USING_HOST_OPCODE
+  11 CONN_SLAVE_AUTH_WAIT
+  12 CONN_SLAVE_ENCRYPT_WAIT
+)
+
+/* mem_lmp_conn_state */
+(
+  0 RECEIVED_CONN_REQ
+  1 SENT_CONN_REQ
+  2 RECEIVED_SETUP_COMPLETE
+  3 SENT_SETUP_COMPLETE
+  4 HOST_CONNECTION_MADE
+  6 INIT_COMPLETE
+  7 SNIFF_NEGOTIATE
+)
+/* btStateAuth1 */
+(
+  0 WAIT_FOR_KINIT
+  1 WAIT_FOR_LKA
+  2 WAIT_FOR_LKB
+  3 WAIT_FOR_SRES
+  4 EXAMINE_RECEIVED_SRES
+  5 SEND_AU_RAND
+  6 WAIT_FOR_KC
+  7 DELAYED_ENCRYPT_RESPONSE
+)
+/* btStateAuth2 */
+(
+  0 SENT_SRES
+  1 RECEIVED_IN_RAND
+  2 SENT_AU_RAND
+  3 AUTHENTICATION_FAILED
+  4 AUTHENTICATION_PASSED
+  5 STARTED_AUTH
+  6 SENT_COMB_KEY
+  7 SENT_IN_RAND
+)
+/* btStateAuth3 */
+(
+  0 RECEIVED_AU_RAND
+  1 RECEIVED_SRES
+  2 MUTUALLY_AUTHENTICATE
+)
+/* btStateHost */
+(
+  0 H_AUTH_STARTED
+  2 H_ENCRYPTION_MODE_REQ_PT
+  3 H_ENCRYPTION_KEY_SIZE
+  4 H_ENCRYPTION_START
+  5 H_ENCRYPTION_STOP
+  6 H_AUTH_SECOND_TRY
+)
+/* btStateEncrypt2 */
+(
+  0 RECEIVED_ENCRYPT_MODE_REQ_PT
+  1 RECEIVED_ENCRYPT_KEY_SIZE
+  2 RECEIVED_ENCRYPT_START
+  3 RECEIVED_ENCRYPT_STOP
+  4 STARTED_ENCRYPT_START
+)
+/* mem_ms_state */
+(
+  0x00 MS_STANDBY
+  0x11 M_MINIT_1
+  0x12 M_MINIT_2
+  0x20 M_SINIT_0
+  0x30 S_MINIT_0
+  0x31 S_MINIT_1
+  0x32 S_MINIT_2
+  0x41 S_SINIT_1
+  0x42 S_SINIT_2
+  0x43 S_SINIT_3
+)
+/* mem_test_mode */
+(
+  0 TEST_MODE_ALLOWED
+  1 TEST_MODE_ACTIVE
+)
+/* values for mem_tester_emulate */
+(
+  0x00 NO_TEST_MODE
+  0x00 CONTINUOUS_TRANSMIT
+  0x10 TRANSMIT_TEST
+  0x08 LOOPBACK
+)
+
+/* mem_tx_misc */
+(
+  1 SEND_TX_ADDR
+)
+/* BBHWREG_page_stat */
+(
+  5 PAGE_MODE_END
+)
+/* host_return_parameters_status codes */
+(
+  0x00 HOST_RETURN_SUCCESS
+  0x01 HOST_RETURN_SLAVE_CANT_ISSUE
+  0x02 HOST_RETURN_NO_CONNECTION
+  0x04 HOST_RETURN_PAGE_TIMEOUT
+  0x05 HOST_RETURN_INQUIRY_TIMEOUT
+  0x08 HOST_RETURN_CONNECTION_TIMEOUT
+  0x09 HOST_RETURN_MAX_NUM_CONNECTIONS
+  0x0a HOST_RETURN_MAX_NUM_SCO
+  0x0b HOST_RETURN_MAX_NUM_ACL
+  0x0c HOST_RETURN_SECURITY_REASONS
+  0x10 HOST_RETURN_HOST_TIMEOUT
+  0x11 HOST_RETURN_UNSUPPORTED_FEATURE_PARAMETER
+  0x13 HOST_RETURN_OTHER_END_USER
+  0x14 HOST_RETURN_OTHER_END_LOW_RESOURCE
+  0x15 HOST_RETURN_OTHER_END_POWER_OFF
+  0x16 HOST_RETURN_LOCAL_HOST
+  0x18 HOST_RETURN_PAIRING_NOT_ALLOWED
+  0x19 HOST_RETURN_UNKNOWN_PDU
+  0x1a HOST_RETURN_UNSUPPORTED_REMOTE_FEATURE
+  0x1d HOST_RETURN_SCO_AIR_MODE_REJECTED
+  0x20 HOST_RETURN_UNSUPPORTED_LMP_VALUE
+  0x21 HOST_RETURN_AUTHENTICATION_FAILURE
+  0x22 HOST_RETURN_CHANGED_EXISTING_SCO
+  0x23 HOST_RETURN_HOST_REJECTED
+  0x24 HOST_RETURN_UNSPECIFIED_ERROR
+  0x25 HOST_RESET
+  0x26 HOST_RETURN_BAD_HANDLE
+
+  0x00 HOST_RETURN_ACCEPT_COMMAND
+  0x01 HOST_RETURN_REJECT_COMMAND
+)
+/* host_present */
+(
+  0 HOST_IS_PRESENT
+  1 BCI_IS_PRESENT
+  2 DONT_INIT_RADIO
+)
+/* mem_master_state */
+(
+  0 MASTER_STATE_STANDBY
+  1 MASTER_INQUIRY
+)
+/* misc */
+(
+  92 SECOND_SWITCH_REQ
+  93 SLAVE_DELAY_DETACH
+  94 MASTER_DELAY_DETACH
+  95 UNSNIFF_DELAY_DETACH
+  0 WE_STARTED_AS_MASTER
+  1 WE_STARTED_AS_SLAVE
+)
+/* mem_host_commands */
+(
+  0x01 HOST_INQUIRY
+  0x02 HOST_INQUIRY_CANCEL
+  0x03 HOST_CREATE_CONNECTION
+  0x04 HOST_DISCONNECT_CONNECTION
+  0x05 HOST_ADD_SCO_REQUEST
+  0x06 HOST_REMOTE_NAME_REQUEST
+  0x07 HOST_WRITE_SUPPORTED_FEATURES
+  0x08 HOST_SET_TX_LEVEL
+  0x09 HOST_SET_RX_LEVEL
+  0x0a HOST_SNIFF_REQUEST
+  0x0b HOST_UNSNIFF_REQUEST
+  0x0c HOST_WRITE_LINK_SUPERVISION_TIMEOUT
+  0x0e HOST_WRITE_SCAN_ENABLE
+  0x0f HOST_READ_AUDIO_QUALITY
+  0x10 HOST_ENABLE_DEVICE_UNDER_TEST
+  0x14 HOST_BUTTON_CONFIGURE
+  0x15 HOST_SET_LOW_BATTERY_LEVEL
+  0x16 HOST_WRITE_LOCAL_NAME
+  0x17 HOST_WRITE_LOCAL_PIN
+  0x18 HOST_KILL_SCO_REQUEST
+  0x19 HOST_QOS_REQ
+
+  0x1a HOST_FEATURES_REQUEST
+  0x1b HOST_VERSION_REQUEST
+  0x1c HOST_TIMING_REQUEST
+  0x1d HOST_CLK_OFFSET_REQUEST
+  0x1e HOST_AUTHENTICATE
+  0x1f HOST_START_ENCRYPTION
+  0x20 HOST_STOP_ENCRYPTION
+  0x21 HOST_HOLD_REQUEST
+  0x22 HOST_HOLD_FORCE
+  0x23 HOST_PARK_REQUEST
+  0x24 HOST_MOD_BEACON
+  0x25 HOST_SET_BROADCAST_SCAN_WINDOW
+  0x26 HOST_UNPARK_PM_REQUEST
+  0x27 HOST_UNPARK_BD_REQUEST
+  0x28 HOST_SLAVE_REQUEST_UNPARK
+  0x29 HOST_DECREASE_POWER_REQUEST
+  0x2a HOST_INCREASE_POWER_REQUEST
+  0x2b HOST_SEND_PREFERRED_RATE
+  0x2c HOST_MAX_SLOT_REQ
+  0x2d HOST_MAX_SLOT_FORCE
+  0x2e HOST_PAGE_MODE_REQUEST
+  0x2f HOST_PAGE_SCAN_MODE_REQUEST
+  0x30 HOST_MASTER_SLAVE_SWITCH
+  0x31 HOST_SEND_AUTO_RATE
+  0x32 HOST_PAGE_CANCEL
+  0x33 HOST_CHANGE_LINK_KEY
+  0x34 HOST_RADIO_READ
+  0x35 HOST_RADIO_WRITE
+  0x36 HOST_REMOTE_SLAVE_INIT_UNPARK_REQUESTED
+
+  0x40 HOST_REMOTE_CONNECTION_REQUESTED
+  0x41 HOST_REMOTE_DETACH
+  0x42 HOST_REMOTE_SCO_CREATE_REQUESTED
+  0x43 HOST_REMOTE_SCO_KILL_REQUESTED
+  0x44 HOST_REMOTE_PARK_REQUESTED
+  0x45 HOST_REMOTE_UNPARK_REQUESTED
+  0x46 HOST_REMOTE_SNIFF_REQUESTED
+  0x47 HOST_REMOTE_UNSNIFF_REQUESTED
+  0x48 HOST_REMOTE_HOLD_REQUESTED
+  0x49 HOST_REMOTE_AUTHENTICATION
+  0x4a HOST_REMOTE_START_ENCRYPTION_REQUESTED
+  0x4b HOST_REMOTE_STOP_ENCRYPTION_REQUESTED
+  0x4c HOST_MODE_CHANGE_EVENT
+  0x4d HOST_REMOTE_TEST_ACTIVATE
+  0x4e HOST_REMOTE_TEST_CONTROL
+  0x4f HOST_REMOTE_TIMING_REQUEST
+)
+/* BCI interface (not used if not compiled in ) */
+(
+  0x01 BCI_INQUIRY
+  0x02 BCI_INQUIRY_CANCEL
+  0x03 BCI_CREATE_CONNECTION
+  0x04 BCI_DISCONNECT
+  0x05 BCI_ADD_SCO_CONNECTION
+  0x06 BCI_REMOTE_NAME_REQUEST
+  0x07 BCI_WRITE_SUPPORTED_FEATURES
+  0x08 BCI_SET_TX_POWER_LEVEL
+  0x09 BCI_SET_RX_POWER_LEVEL
+  0x0a BCI_SNIFF_MODE
+  0x0b BCI_EXIT_SNIFF_MODE
+  0x0c BCI_WRITE_LINK_SUPERVISION_TIMEOUT
+  0x0d BCI_WRITE_PAGE_TIMEOUT
+  0x0e BCI_WRITE_SCAN_ENABLE
+  0x0f BCI_GET_AUDIO_QUALITY
+  0x10 BCI_ENABLE_DEVICE_UNDER_TEST
+  0x11 BCI_SEND_DATA
+  0x12 BCI_REGISTER_SERVICE_RECORD
+  0x13 BCI_SERVICE_SEARCH_ATTRIB_REQ
+  0x14 BCI_BUTTON_CONFIGURE
+  0x15 BCI_SET_LOW_BATTERY_LEVEL
+  0x16 BCI_WRITE_LOCAL_NAME
+  0x17 BCI_WRITE_LOCAL_PIN
+  0x18 BCI_REMOVE_SCO_CONNECTION
+  0x19 BCI_QUALITY_OF_SERVICE
+  0x40 BCI_REMOTE_CONNECTION_REQUEST
+  0x41 BCI_REMOTE_DETACH
+  0x42 BCI_REMOTE_ADD_SCO_REQUEST
+  0x43 BCI_REMOTE_REMOVE_SCO_REQUEST
+  0x44 BCI_REMOTE_PARK_REQUEST
+  0x45 BCI_REMOTE_UNPARK_REQUEST
+  0x46 BCI_REMOTE_SNIFF_REQUEST
+  0x47 BCI_REMOTE_UNSNIFF_REQUEST
+  0x48 BCI_REMOTE_HOLD_REQUEST
+  0x49 BCI_REMOTE_AUTHENTICATION_PAIRING_REQUEST
+  0x4a BCI_REMOTE_START_ENCRYPTION_REQUEST
+  0x4b BCI_REMOTE_STOP_ENCRYPTION_REQUEST
+  0x4c BCI_MODE_CHANGE_EVENT
+)
+/* mode changes */
+(
+  0 MODE_CHANGE_ACTIVE
+  1 MODE_CHANGE_SNIFFING
+  2 MODE_CHANGE_PARKED
+  3 MODE_CHANGE_HOLDING
+  4 MODE_CHANGE_SCO_ADDED
+  5 MODE_CHANGE_SCO_REMOVED
+  6 MODE_CHANGE_ACL_CONNECTION
+  7 MODE_CHANGE_DISCONNECT
+  8 MODE_CHANGE_SCO_CHANGED
+  9 MODE_CHANGE_ENCRYPTING
+  10 MODE_CHANGE_NOT_ENCRYPTING
+  11 MODE_CHANGE_BUTTON_UP
+  12 MODE_CHANGE_BUTTON_DOWN
+  13 MODE_CHANGE_BATTERY_LOW
+  14 MODE_CHANGE_RESET
+  15 MODE_CHANGE_INQUIRY_CANCELED_RMTCMD
+  16 MODE_ACTIVE_MSSWITCH_PASSED
+  17 MODE_ACTIVE_MSSWITCH_FAILED
+)
+/* mem_battery - low nibble is level information, upper nibble is status info */
+(
+  6 BATTERY_CHECK_LEVEL
+  7 BATTERY_SENT_STATUS
+)
+/* mem_radio_version */
+(
+  0x02 RADIO_2001
+  0x12 RADIO_2002
+  0x32 RADIO_2002_DDM
+  0x42 RADIO_1008A1
+  0x52 RADIO_1018A0
+)
+/* mem_slave_initiated_conn */
+(
+  0 SLAVE_INIT_AUTHENTICATION
+  1 SLAVE_INIT_ENCRYPTION
+  2 SLAVE_INIT_MASTER_SLAVE_SWITCH
+)
+/* connection_options */
+(
+  0 CONNECTION_AUTH
+  1 CONNECTION_ENCRYPT
+  2 CONNECTION_SWITCH
+  3 CONNECTION_ACL
+  4 CONNECTION_FEATURE_EXT
+)
+/* mem_debug_config */
+(
+  7 AA_INSERTION
+)
+
+
+/* Parse Command:
+TX: take bits from tx fifo, jam it into shift and a destination (rf,bucket)
+RX: take bits from demod,  jam it into shift and a destination (acl,sco,bucket) */
+
+/* Inject Command:
+TX: 0 into shift, send tail of shift into a destination (rf,bucket)
+RX: 0 into shift, send tail of shift into a destination (acl,sco,bucket) */
+
+format
+  ! 15 romdat
+  % d0
+  % d1
+  % d2
+  % d3
+  [8] d0
+  [8] d1
+  [8] d2
+  [8] d3
+end
+
+format
+  ! 15 enable   /* set flag to 1 */
+  % flag
+  [5] opcode
+  [6] 1
+  [6] flag
+  [6] null
+  [9] 0
+end
+ /* High 5 bytes of channel map */
+format
+  ! 15 pulse   /* set flag to 1 */
+  % flag
+  [5] opcode
+  [6] 1
+  [6] flag
+  [6] null
+  [9] 0
+end
+
+format
+  ! 15 disable   /* set flag to 0 */
+  % flag
+  [5] opcode
+  [6] 2
+  [6] flag
+  [6] null
+  [9] 0
+end
+
+format
+  ! 15 set0  /* set selected bit of reg to 0 */
+  % immediate
+  % reg
+  [5] opcode
+  [6] 9
+  [6] never
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 15 set1  /* set selected bit of reg to 1 */
+  % immediate
+  % reg
+  [5] opcode
+  [6] 9          /* alu op demux */
+  [6] always
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 15 setflag  /* set selected bit of the reg to the polarity of the flag */
+  % flag
+  % immediate
+  % reg
+  [5] opcode
+  [6] 9
+  [6] flag
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 15 nsetflag  /* set the selected bit of the reg to the opposite polarity of the flag */
+  % flag
+  % immediate
+  % reg
+  [5] opcode
+  [6] 0x29
+  [6] flag
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 15 setflip    /* invert the selected bit of the reg */
+  % immediate
+  % reg
+  [5] opcode
+  [6] 10            /* this is alu op */
+  [6] always
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 0x1f qset1      /* demux the lowest 4 bit of queue and OR it with regr into regw */
+  % reg             /* in short, set the bit in reg indexed by queue to 1 */
+  [5] opcode
+  [6] 9
+  [6] always
+  [6] reg
+  [9] 0
+end
+  
+format
+  ! 0x1f qset0      /* demux the lowest 4 bit of queue and AND it with regr into regw */
+  % reg             /* in short, set the bit in reg indexed by queue to 0 */
+  [5] opcode
+  [6] 9
+  [6] never
+  [6] reg
+  [9] 0
+end
+
+format 
+  ! 0x1f qsetflag   /* set the bit in reg index by queue to same as flag */
+  % flag
+  % reg
+  [5] opcode
+  [6] 9
+  [6] flag
+  [6] reg
+  [9] 0
+end
+
+format 
+  ! 0x1f nqsetflag   /* set the bit in the reg index by queue to opposite of flag */
+  % flag
+  % reg
+  [5] opcode
+  [6] 0x29
+  [6] flag
+  [6] reg
+  [9] 0
+end
+
+format
+  ! 0x1f qsetflip      /* flip the bit in reg index by queue */
+  % reg
+  [5] opcode
+  [6] 10
+  [6] always
+  [6] reg
+  [9] 0
+end
+
+format
+  ! 1 parse       /* take bits out of source (sco_tx,tx_buffer,rx-elas) into pdata and dest (sco_rx,rx_fifo,tx-elas) */
+  % source
+  % dest
+  % immediate
+  [5] opcode
+  [4] source      /* voice, data, demod */
+  [2] 0
+  [6] 0    
+  [2] 0           /* parse or inject */ 
+  [4] dest        /* acl, sco, mod, bucket */
+  [9] immediate   /* number of bits to parse off */
+end
+
+format
+  ! 1 inject      /* shift data from pdata into destination (tx-elas,rx_fifo,sco_rx) */
+  % destination
+  % immediate
+  [5] opcode
+  [4] 0
+  [2] 0
+  [6] 1
+  [2] 0
+  [4] destination /* acl,sco,mod,bucket */
+  [9] immediate   /* number of bits to be injected */
+end
+
+format
+  ! 1 iinject
+  % destination
+  % regr
+  [5] opcode
+  [6] regr       /* contain the number of bits to inject */
+  [6] 3
+  [2] 0
+  [4] destination /* acl,sco,mod,bucket */
+  [9] 0 
+end
+
+format
+  ! 1 stuff  /* automatic parse, stuff_counter decrement on every bit until hits zero */
+  % source
+  % destination
+  [5] opcode
+  [4] source
+  [2] 0
+  [6] 2
+  [2] 0
+  [4] destination
+  [9] 0
+end
+
+format    /* force immediate value into registers */
+  ! 3 force
+  % immediate
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 0    /* alu operation force */
+  [6] regw  /* destination register */
+  [9] immediate
+end
+
+format    /* force whatever is on shift_reg to regsiters */
+  ! 0x13 iforce
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 0    /* alu operation force */
+  [6] regw  /* destination register */
+  [9] 0
+end
+
+format    /* force immediate value into registers */
+  ! 3 increase
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 1    /* alu operation add */
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 3 pincrease
+  % immediate
+  [5] opcode
+  [6] -1  /* pdata */
+  [6] 1   /* alu add */
+  [6] -1  /* back to pdata */
+  [9] immediate
+end
+
+format    /* force immediate value into registers */
+  ! 3 and_into
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 2    /* alu operation and into */
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 3 and
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 2    /* alu operation and into */
+  [6] regw
+  [9] immediate
+end
+  
+format
+  ! 0x13 iand    /* pdata & regr -> regw */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 2    /* alu operation and into */
+  [6] regw
+  [9] 0
+end
+  
+
+format    /* and whatever is in shiftreg with reg */
+  ! 0x13 iand_into
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 2    /* alu operation and into */
+  [6] reg
+  [9] 0
+end
+
+format
+  ! 3 or_into
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 3    /* alu operation or into */
+  [6] reg
+  [9] immediate
+end
+
+format
+  ! 3 or
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 3    /* alu operation or into */
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 0x13 ior
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 3    /* alu operation or into */
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 0x13 ior_into
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 3    /* alu operation or into */
+  [6] reg
+  [9] 0
+end
+
+format
+  ! 3 skip_to   /* jump to location stored in reg */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 4   /* alu operation copy */
+  [6] rom_addr
+  [9] 0
+end
+
+format
+  ! 3 copy
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 4   /* alu operation copy */
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 deposit   /* copy the register content thru alu to shift register, not prealigned like preload */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 4   /* alu operation copy */
+  [6] -1  /* pdata */
+  [9] 0
+end
+
+format
+  ! 3 icopy     /* copy the shift register lsb content directly to register, not aligned */
+  % regw
+  [5] opcode
+  [6] -1  /* pdata */
+  [6]  4  /* alu copy */
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 add
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 1
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 0x13 iadd       /* regr + pdata -> regw */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 1
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 sub          /* immediate - regr -> regw */
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 12
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 0x13 isub       /* pdata - regr -> regw */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 12
+  [6] regw
+  [9] 0
+end
+
+
+format
+  ! 3 flip
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 5
+  [6] reg
+  [9] immediate
+end
+  
+format
+  ! 0x13 iflip  /* use shift register as immediate to do xor */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 5
+  [6] regw
+  [9] 0
+end
+  
+format
+  ! 3 xor
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 5
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 3 xor_into
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 5
+  [6] reg
+  [9] immediate
+end
+  
+format
+  ! 0x13 ixor  /* pdata xor regr and store result in regw */
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 5
+  [6] regw
+  [9] 0
+end
+  
+format
+  ! 3 invert
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 8
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 pinvert    /* invert pdata into itself */
+  [5] opcode
+  [6] -1
+  [6] 8
+  [6] -1
+  [9] 0
+end
+
+format
+  ! 3 div                 /* regr div immediate div */
+  % reg
+  % immediate
+  [5] opcode
+  [6] reg
+  [6] 13                   /* generate diven pulse to div */
+  [6] null
+  [9] immediate
+end
+
+format
+  ! 0x13 idiv           /* pdata div regr data ready at most after 41 nops */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 13                   /* generate diven pulse to div */
+  [6] null
+  [9] 0
+end
+
+format
+  ! 3 remainder            /* harvest div remainder */
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 14
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 quotient             /* harvest div quotient */
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 15
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 6
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift2
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 22
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift3
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 18
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift4
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 35
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift8
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 25
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift16
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 34
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 rshift32
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 30
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 lshift
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 7
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 lshift2
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 23
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 lshift8
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 26
+  [6] regw
+  [9] 0
+end
+
+  
+format
+  ! 3 lshift3
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 19
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 lshift4
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 36
+  [6] regw
+  [9] 0
+end
+  
+
+format
+  ! 3 lshift16
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 32
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 random               /* random number into regw */
+  % reg
+  [5] opcode
+  [6] 0
+  [6] 20
+  [6] reg
+  [9] 0
+end
+
+format                     /* bit reverse within a byte */
+  ! 3 reverse
+  % reg
+  % regw
+  [5] opcode
+  [6] reg
+  [6] 27
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 priority    /* priority encode reg into regw, lsb is the top priority, ie, priority(8'b00010000) = 4 */
+  % reg
+  % regw
+  [5] opcode
+  [6] reg
+  [6] 21
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 7 setsect   /* set a section of pdata */
+  % section    /* 0 sets 17:0 of pdata with set_data, 1 sets 35:18, 2 sets 53:36, 3 sets 71:54 */
+  % set_data
+  [5] opcode
+  [7] 0
+  [2] section
+  [18] set_data
+end
+
+format
+  ! 10 preload   /* load stuff into pdata according to fhs format, check us.v */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 0
+  [6] -1
+  [9] 0
+end
+
+format  /* load register with pdata content, according to fhs format, check us.v */
+  ! 10 ialigned   /* all bits are in position */
+  % regw
+  [5] opcode
+  [6] -1
+  [6] 0
+  [6] regw
+  [9] 0
+end
+
+format  /* load register to another according to fhs format */
+  ! 10 aligned
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 0
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 4 branch
+  % addr
+  % flag
+  [5] opcode
+  [6] 1
+  [6] flag
+  [15] addr
+end
+
+format
+  ! 4 call
+  % addr
+  % flag
+  [5] opcode
+  [6] 2
+  [6] flag
+  [15] addr
+end
+
+format
+  ! 4 rtn
+  % flag
+  [5] opcode
+  [6] 3
+  [6] flag
+  [15] 0
+end
+
+format
+  ! 0x0c store          /* write to memory, data from pdata, address from immediate then mem_ptr */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 0
+  [1] 0
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0c hstore          /* write to memory, data from pdata, address from immediate then mem_ptr */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 1
+  [1] 0
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x1c istore        /* write to memory, data from pdata, address from regr then mem_ptr */
+  % num_bytes
+  % reg
+  [5] opcode
+  [6] reg            /* hold address */
+  [1] 0
+  [1] 0
+  [4] num_bytes
+  [15] 0
+end
+
+format
+  ! 0x0d fetch          /* read from memory, data into pdata, address from immediate then mem_ptr */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 0
+  [1] 0
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0d hfetch          /* read from memory, data into pdata, address from immediate then mem_ptr */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 1
+  [1] 0
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0d crc         /* read from memory, count from loopcnt, put crc result into pdata */
+  % addr
+  [5] opcode
+  [6] 0
+  [1] 0
+  [1] 0
+  [4] 0
+  [15] addr
+end
+
+format
+  ! 0x1d icrc         /* read from memory, address from reg, count from loopcnt, put crc result into pdata */
+  % reg
+  [5] opcode
+  [6] reg             /* hold address */
+  [1] 0
+  [1] 0
+  [4] 0
+  [15] 0
+end
+
+
+format
+  ! 0x1d ifetch         /* read from memory, data into pdata, address from regr then mem_ptr */
+  % num_bytes
+  % reg
+  [5] opcode
+  [6] reg             /* hold address */
+  [1] 0
+  [1] 0
+  [4] num_bytes
+  [15] 0
+end
+
+format
+  ! 0x0c storet          /* write to memory, data from temp, address from immediate won't increment */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 0
+  [1] 1
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0c hstoret          /* write to corereg, data from temp, address from immediate won't increment */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 1
+  [1] 1
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x1c istoret        /* write to memory, data from temp, address from regr won't increment */
+  % num_bytes
+  % reg
+  [5] opcode
+  [6] reg            /* hold address */
+  [1] 0
+  [1] 1
+  [4] num_bytes
+  [15] 0
+end
+
+format
+  ! 0x0d fetcht          /* read from memory, data into temp, address from immediate won't increment */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 0
+  [1] 1
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x0d hfetcht          /* read from corereg, data into temp, address from immediate won't increment */
+  % num_bytes
+  % addr
+  [5] opcode
+  [6] 0               /* memory */
+  [1] 1
+  [1] 1
+  [4] num_bytes
+  [15] addr
+end
+
+format
+  ! 0x1d ifetcht         /* read from memory, data into temp, address from regr won't increment */
+  % num_bytes
+  % reg
+  [5] opcode
+  [6] reg             /* hold address */
+  [1] 0
+  [1] 1
+  [4] num_bytes
+  [15] 0
+end
+
+format
+  ! 0x0e jam
+  % immediate
+  % addr
+  [5] opcode
+  [3] 0
+  [16] addr
+  [8] immediate
+end
+
+format			/* 0x242... */
+  ! 4 nbranch
+  % addr
+  % flag
+  [5] opcode
+  [1] 1
+  [5] 1
+  [6] flag
+  [15] addr
+end
+
+format
+  ! 4 ncall
+  % addr
+  % flag
+  [5] opcode
+  [1] 1
+  [5] 2
+  [6] flag
+  [15] addr
+end
+
+format
+  ! 4 nrtn
+  % flag
+  [5] opcode
+  [1] 1
+  [5] 3
+  [6] flag
+  [15] 0
+end
+
+format
+  ! 4 nop
+  % addr  /* no-op for addr+2 clocks */
+  [5] opcode
+  [6] 0     
+  [6] 0     /* always */ 
+  [15] addr
+end
+
+format
+  ! 4 clear_stack
+  [5] opcode
+  [6] 4
+  [6] 0    /* always */
+  [15] 0
+end
+
+format
+  ! 6 until
+  % reg
+  % flag
+  [5] opcode
+  [6] reg
+  [6] flag
+  [6] 1
+  [9] 0
+end
+  
+format
+  ! 6 correlate   /* quit if 1. flag is true 2, regr time up 3, found sync,(cond_true) */
+  % reg          /* expire counter to check against */
+  % flag
+  [5] opcode
+  [6] reg
+  [6] flag
+  [6] 2           /* correlate */
+  [9] 0           
+end
+
+format
+  ! 5 compare   /* sets cond flag,  if reg equals immediate */
+  % immediate
+  % reg
+  % mask
+  [5] opcode
+  [6] reg
+  [3] 0
+  [9] mask
+  [9] immediate
+end
+
+format
+  ! 0x15 icompare   /* sets cond flag,  if reg equals pdata */
+  % mask
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 0
+  [9] mask
+  [9] 0
+end
+
+format   /* sets cond. flag, if reg equals LS half of shift reg with MS half of reg being mask */
+  ! 5 iverify
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 2
+  [18] 0
+end
+
+format
+  ! 0x15 qisolate1
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 3
+  [18] -1
+end
+
+format
+  ! 0x15 qisolate0
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 3
+  [18] 0
+end
+
+	/* REVAB bug: cannot access bit above 35 */
+format
+  ! 5 isolate1
+  % addr
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 3
+  [9] -1
+  [9] addr
+end
+
+format
+  ! 5 isolate0
+  % addr
+  % reg
+  [5] opcode
+  [6] reg
+  [3] 3
+  [9] 0
+  [9] addr
+end
+
+format
+  ! 11 setarg
+  % immediate
+  [5] opcode
+  [27] immediate
+end
+
+format
+  ! 0x1b arg
+  % immediate
+  % reg
+  [5] opcode
+  [6] reg
+  [21] immediate
+end
+
+  
+format
+  ! 0 sleep
+  [5] opcode
+  [27] 0
+end
+
+format
+  ! 0 snooze
+  [5] opcode
+  [6] -1
+  [21] 0
+end
+
+format
+  ! 0 revision
+  % rev_num
+  [5] opcode
+  [27] rev_num
+end
+
+format
+  ! 0x18 loop   /* branch when loopcnt is NOT zero, and decrease loopcnt */
+  % addr
+  [5] opcode
+  [4] 4
+  [8] 0
+  [15] addr
+end
+
+format
+  ! 0x18 beq   /* branch when pdata is equal to immediate */
+  % imme
+  % addr
+  [5] opcode
+  [4] 0
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 bne   /* branch when pdata is NOT equal to immediate */
+  % imme
+  % addr
+  [5] opcode
+  [4] 1
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 rtneq   /* return when pdata is equal to immediate */
+  % imme
+  [5] opcode
+  [4] 2
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 0x18 rtnne   /* return when pdata is NOT equal to immediate */
+  % imme
+  [5] opcode
+  [4] 3
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 0x18 bbit1   /* branch when pdata's imme bit is 1 */
+  % imme
+  % addr
+  [5] opcode
+  [4] 5
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 bbit0   /* branch when pdata's imme bit is 0 */
+  % imme
+  % addr
+  [5] opcode
+  [4] 6
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 rtnbit1   /* return when pdata's imme bit is 0 */
+  % imme
+  [5] opcode
+  [4] 7
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 0x18 rtnbit0   /* return when pdata's imme bit is 0 */
+  % imme
+  [5] opcode
+  [4] 8
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 8	bpatch
+  % imme
+  % addr
+  [5] opcode
+  [4] 9
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 8	bpatchx
+  % imme
+  % addr
+  [5] opcode
+  [4] 14
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 bmark1   /* branch when mark's imme bit is 1 */
+  % imme
+  % addr
+  [5] opcode
+  [4] 10
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 bmark0   /* branch when mark's imme bit is 0 */
+  % imme
+  % addr
+  [5] opcode
+  [4] 11
+  [8] imme
+  [15] addr
+end
+
+format
+  ! 0x18 rtnmark1   /* return when mark's imme bit is 0 */
+  % imme
+  [5] opcode
+  [4] 12
+  [8] imme
+  [15] 0
+end
+
+format
+  ! 0x18 rtnmark0   /* return when mark's imme bit is 0 */
+  % imme
+  [5] opcode
+  [4] 13
+  [8] imme
+  [15] 0
+end
+
+
+format
+  ! 3 mult                  /* immediate mult regr */  /* the product will be ready 17 clks later */
+  % immediate                                   /* use "product" instruction to get the result */
+  % reg
+  [5] opcode
+  [6] reg
+  [6] 16                   /* generate diven pulse to div */
+  [6] null
+  [9] immediate
+end
+
+format
+  ! 0x13 imult           /* pdata mult regr */  /* the product will be ready after 15 nops */
+  % reg                                         /* use product opcode to get the result */
+  [5] opcode
+  [6] reg
+  [6] 16                   /* generate mult pulse to multiplier */
+  [6] null
+  [9] 0
+end
+
+format
+  ! 3 mul32                  /* immediate mult regr */ 
+  % regr
+  % immediate                                  
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 31           
+  [6] regw
+  [9] immediate
+end
+
+format
+  ! 0x13 imul32           /* pdata mult regr 32x32=64bit */  
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 31                   
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 product              /* harvest mult product */
+  % regw
+  [5] opcode
+  [6] 0
+  [6] 17
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 byteswap
+  % regr
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 33
+  [6] regw
+  [9] 0
+end
+
+format
+  ! 3 shasx          /* SHA256 Sx operation, immediate is Sx */
+  % regr
+  % immediate
+  % regw
+  [5] opcode
+  [6] regr
+  [6] 28
+  [6] regw
+  [9] immediate
+end
+
+
+format
+  ! 0x13 regexrot 	/* regext[0] <- regext[7], regext[1] <- regext[0], regext[2] <- regext[1] ... */
+  [5] opcode
+  [6] 0
+  [6] 29
+  [6] null
+  [9] 0
+end
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/bt_program23.icode
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/bt_program23.icode	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/bt_program23.icode	(working copy)
@@ -0,0 +1,25766 @@
+ 00000000  0x00000044 bbit1  0x00000008 , 0x00000012 
+ 00000001  0x00000045 beq  0x00000000 , 0x00000027 
+ 00000002  0x00000046 beq  0x00000001 , 0x0000002a 
+ 00000003  0x00000047 beq  0x00000002 , 0x00000032 
+ 00000004  0x00000048 beq  0x00000085 , 0x00000473 
+ 00000005  0x00000049 beq  0x00000089 , 0x00000444 
+ 00000006  0x0000004a beq  0x000000a1 , 0x0000003b 
+ 00000007  0x0000004b beq  0x000000b1 , 0x00000040 
+ 00000008  0x0000004c beq  0x000000b2 , 0x0000004a 
+ 00000009  0x0000004d beq  0x000000c4 , 0x000002ce 
+ 00000010  0x0000004e beq  0x000000c9 , 0x0000032d 
+ 00000011  0x0000004f beq  0x000000ca , 0x00000331 
+ 00000012  0x00000050 beq  0x000000e3 , 0x000003c2 
+ 00000013  0x00000051 beq  0x000000e6 , 0x000003ce 
+ 00000014  0x00000052 beq  0x000000ea , 0x000003d7 
+ 00000015  0x00000053 beq  0x000000eb , 0x000003dc 
+ 00000016  0x00000054 beq  0x000000ec , 0x000003ed 
+ 00000017  0x00000055 branch  0x00002a8e 
+ 00000018  0x00000057 beq  0x0000003f , 0x00000015 
+ 00000019  0x00000058 beq  0x0000008c , 0x000003f1 
+ 00000020  0x00000059 branch  0x00002a8e 
+ 00000021  0x0000005c jam  0x00000036 , 0x0000890f 
+ 00000022  0x0000005d jam  0x0000005f , 0x0000890b 
+ 00000023  0x0000005e enable  0x00000036 
+ 00000024  0x0000005f jam  0x00000007 , 0x00008914 
+ 00000025  0x00000061 fetch  0x00000001 , 0x000041e0 
+ 00000026  0x00000062 rtn  0x00000034 
+ 00000027  0x00000063 jam  0x000000b8 , 0x0000890a 
+ 00000028  0x00000064 rtn 
+ 00000029  0x00000068 copy  0x0000003f , 0x00000011 
+ 00000030  0x00000069 fetcht  0x00000001 , 0x00004c70 
+ 00000031  0x0000006a setarg  0x00004c77 
+ 00000032  0x0000006b iadd  0x00000002 , 0x00000005 
+ 00000033  0x0000006c copy  0x00000011 , 0x0000003f 
+ 00000034  0x0000006d istore  0x00000001 , 0x00000005 
+ 00000035  0x0000006e increase  0x00000001 , 0x00000002 
+ 00000036  0x0000006f and_into  0x00000007 , 0x00000002 
+ 00000037  0x00000070 storet  0x00000001 , 0x00004c70 
+ 00000038  0x00000071 rtn 
+ 00000039  0x00000074 hfetch  0x00000001 , 0x0000813b 
+ 00000040  0x00000075 store  0x00000001 , 0x00004b26 
+ 00000041  0x00000076 branch  0x00002002 
+ 00000042  0x00000079 arg  0x000009ae , 0x00000005 
+ 00000043  0x0000007a arg  0x0000000c , 0x00000039 
+ 00000044  0x0000007b call  0x00007ed4 
+ 00000045  0x0000007c call  0x00006a03 
+ 00000046  0x0000007d call  0x00005cf6 
+ 00000047  0x0000007e ncall  0x00002c65 , 0x0000002b 
+ 00000048  0x0000007f call  0x00007ccd 
+ 00000049  0x00000080 branch  0x0000200c 
+ 00000050  0x00000083 call  0x000032e3 , 0x0000002b 
+ 00000051  0x00000084 call  0x0000756a 
+ 00000052  0x00000085 call  0x00002b41 , 0x0000002b 
+ 00000053  0x00000087 call  0x000076dc 
+ 00000054  0x00000088 fetch  0x00000001 , 0x0000465a 
+ 00000055  0x00000089 branch  0x00002012 , 0x00000034 
+ 00000056  0x0000008a fetch  0x00000001 , 0x000045b1 
+ 00000057  0x0000008b branch  0x00000035 , 0x00000034 
+ 00000058  0x0000008c branch  0x00002012 
+ 00000059  0x0000008f setarg  0x00000a06 
+ 00000060  0x00000090 store  0x00000003 , 0x00004510 
+ 00000061  0x00000091 setarg  0x00001d87 
+ 00000062  0x00000092 store  0x00000002 , 0x00004513 
+ 00000063  0x00000093 branch  0x00002aa2 
+ 00000064  0x00000096 rtnmark1  0x00000026 
+ 00000065  0x00000097 fetch  0x00000001 , 0x0000479c 
+ 00000066  0x00000098 branch  0x00007fef , 0x00000034 
+ 00000067  0x00000099 fetch  0x00000001 , 0x000047c4 
+ 00000068  0x0000009a beq  0x00000001 , 0x00007fef 
+ 00000069  0x0000009b fetch  0x00000002 , 0x00004248 
+ 00000070  0x0000009c nbranch  0x00007fef , 0x00000034 
+ 00000071  0x0000009d fetch  0x00000001 , 0x00004806 
+ 00000072  0x0000009e nbranch  0x00007fef , 0x00000034 
+ 00000073  0x0000009f branch  0x00007ff1 
+ 00000074  0x000000a3 rtnmark0  0x00000026 
+ 00000075  0x000000a4 fetch  0x00000001 , 0x00004cf5 
+ 00000076  0x000000a5 beq  0x00000001 , 0x0000005b 
+ 00000077  0x000000a7 call  0x000000e4 
+ 00000078  0x000000a8 nbranch  0x00000070 , 0x00000028 
+ 00000079  0x000000a9 call  0x000000cb 
+ 00000080  0x000000ab call  0x00000106 
+ 00000081  0x000000ac fetch  0x00000001 , 0x00004bc5 
+ 00000082  0x000000ad rtnne  0x000000ff 
+ 00000083  0x000000ae call  0x00000417 
+ 00000084  0x000000b0 call  0x00000076 
+ 00000085  0x000000b1 nrtn  0x00000028 
+ 00000086  0x000000b2 call  0x000002bf 
+ 00000087  0x000000b3 setarg  0x0000ec54 
+ 00000088  0x000000b5 call  0x00007f49 
+ 00000089  0x000000b6 storet  0x00000004 , 0x0000415b 
+ 00000090  0x000000b7 branch  0x00002b2a 
+ 00000091  0x000000ba call  0x0000028b 
+ 00000092  0x000000bb nrtn  0x00000028 
+ 00000093  0x000000bc call  0x00000067 
+ 00000094  0x000000bd branch  0x0000004d 
+ 00000095  0x000000bf jam  0x00000000 , 0x00004cf5 
+ 00000096  0x000000c0 jam  0x00000000 , 0x00004cf6 
+ 00000097  0x000000c2 jam  0x00000000 , 0x00004bf0 
+ 00000098  0x000000c3 fetch  0x00000001 , 0x00004bdb 
+ 00000099  0x000000c5 store  0x00000001 , 0x00004bda 
+ 00000100  0x000000c6 rtn 
+ 00000101  0x000000c8 fetch  0x00000001 , 0x00004bdc 
+ 00000102  0x000000c9 branch  0x00000063 
+ 00000103  0x000000cb fetch  0x00000001 , 0x00004bf0 
+ 00000104  0x000000cc increase  0x00000001 , 0x0000003f 
+ 00000105  0x000000cd store  0x00000001 , 0x00004bf0 
+ 00000106  0x000000ce beq  0x00000004 , 0x00000065 
+ 00000107  0x000000cf beq  0x00000005 , 0x00000061 
+ 00000108  0x000000d0 rtn 
+ 00000109  0x000000d2 jam  0x00000001 , 0x00004cf5 
+ 00000110  0x000000d3 jam  0x00000000 , 0x00004cf6 
+ 00000111  0x000000d4 rtn 
+ 00000112  0x000000d7 fetch  0x00000001 , 0x00004be1 
+ 00000113  0x000000d8 call  0x0000007f , 0x00000034 
+ 00000114  0x000000da call  0x00000076 
+ 00000115  0x000000db nrtn  0x00000028 
+ 00000116  0x000000dc fetch  0x00000003 , 0x00004be4 
+ 00000117  0x000000dd branch  0x00000058 
+ 00000118  0x000000e0 enable  0x00000028 
+ 00000119  0x000000e1 call  0x00002afa 
+ 00000120  0x000000e2 fetch  0x00000003 , 0x0000416f 
+ 00000121  0x000000e3 branch  0x00007fe9 , 0x00000034 
+ 00000122  0x000000e4 fetch  0x00000001 , 0x00004091 
+ 00000123  0x000000e5 branch  0x00007fe9 , 0x00000034 
+ 00000124  0x000000e6 fetch  0x00000001 , 0x00004cf5 
+ 00000125  0x000000e7 beq  0x00000001 , 0x00007fe9 
+ 00000126  0x000000e8 branch  0x000002c2 
+ 00000127  0x000000eb jam  0x00000001 , 0x00004be1 
+ 00000128  0x000000ec jam  0x00000000 , 0x00004cea 
+ 00000129  0x000000ed call  0x00000093 
+ 00000130  0x000000ee store  0x00000001 , 0x00004b51 
+ 00000131  0x000000ef setarg  0x00000000 
+ 00000132  0x000000f0 store  0x00000007 , 0x00004b52 
+ 00000133  0x000000f1 fetch  0x00000004 , 0x00004bec 
+ 00000134  0x000000f2 store  0x00000004 , 0x00004b59 
+ 00000135  0x000000f3 jam  0x0000000c , 0x00004bb5 
+ 00000136  0x000000f4 fetch  0x00000001 , 0x00004bb6 
+ 00000137  0x000000f5 set1  0x00000003 , 0x0000003f 
+ 00000138  0x000000f6 store  0x00000001 , 0x00004bb6 
+ 00000139  0x000000f7 call  0x000000e7 
+ 00000140  0x000000f8 branch  0x00000050 
+ 00000141  0x000000fb call  0x000068a8 
+ 00000142  0x000000fc fetch  0x00000004 , 0x000040a0 
+ 00000143  0x000000fd store  0x00000004 , 0x00004bec 
+ 00000144  0x000000fe rtn 
+ 00000145  0x00000101 jam  0x00000001 , 0x00004ceb 
+ 00000146  0x00000102 jam  0x00000000 , 0x00004ced 
+ 00000147  0x00000104 fetch  0x00000001 , 0x00004bb6 
+ 00000148  0x00000105 and_into  0x00000007 , 0x0000003f 
+ 00000149  0x00000106 store  0x00000001 , 0x00004bb6 
+ 00000150  0x00000107 rtn 
+ 00000151  0x0000010a fetch  0x00000001 , 0x00004bb6 
+ 00000152  0x0000010b set1  0x00000004 , 0x0000003f 
+ 00000153  0x0000010c store  0x00000001 , 0x00004bb6 
+ 00000154  0x0000010e store  0x00000001 , 0x00004b71 
+ 00000155  0x0000010f rtn 
+ 00000156  0x00000111 fetch  0x00000001 , 0x00004bb6 
+ 00000157  0x00000112 set0  0x00000004 , 0x0000003f 
+ 00000158  0x00000113 store  0x00000001 , 0x00004bb6 
+ 00000159  0x00000114 rtn 
+ 00000160  0x00000117 call  0x0000040d 
+ 00000161  0x00000118 fetch  0x00000001 , 0x00004cec 
+ 00000162  0x00000119 beq  0x00000001 , 0x000000a5 
+ 00000163  0x0000011a beq  0x00000002 , 0x000000a9 
+ 00000164  0x0000011b rtn 
+ 00000165  0x0000011d jam  0x00000002 , 0x00004ced 
+ 00000166  0x0000011f jam  0x00000000 , 0x00004ce9 
+ 00000167  0x00000120 jam  0x00000000 , 0x00004ceb 
+ 00000168  0x00000121 branch  0x00000093 
+ 00000169  0x00000124 jam  0x00000000 , 0x00004cea 
+ 00000170  0x00000125 branch  0x000000a6 
+ 00000171  0x00000129 fetch  0x00000002 , 0x00004bbb 
+ 00000172  0x0000012a increase  0x00000001 , 0x0000003f 
+ 00000173  0x0000012b store  0x00000002 , 0x00004bbb 
+ 00000174  0x0000012c bbit1  0x00000006 , 0x00000149 
+ 00000175  0x0000012d fetch  0x00000001 , 0x00004cea 
+ 00000176  0x0000012e beq  0x00000001 , 0x000000b4 
+ 00000177  0x0000012f jam  0x00000001 , 0x00004cea 
+ 00000178  0x00000131 fetch  0x00000001 , 0x00004cea 
+ 00000179  0x00000132 bne  0x00000001 , 0x00000093 
+ 00000180  0x00000134 fetch  0x00000001 , 0x00004ce8 
+ 00000181  0x00000135 increase  0x00000001 , 0x0000003f 
+ 00000182  0x00000136 store  0x00000001 , 0x00004ce8 
+ 00000183  0x00000137 beq  0x00000004 , 0x000000bb 
+ 00000184  0x00000138 call  0x00000203 
+ 00000185  0x00000139 jam  0x00000002 , 0x00004bfa 
+ 00000186  0x0000013a branch  0x00000106 
+ 00000187  0x0000013d call  0x0000040d 
+ 00000188  0x0000013e jam  0x00000000 , 0x00004ce8 
+ 00000189  0x0000013f branch  0x00000093 
+ 00000190  0x00000142 jam  0x00000002 , 0x00004ced 
+ 00000191  0x00000144 jam  0x00000001 , 0x00004ceb 
+ 00000192  0x00000145 jam  0x00000000 , 0x00004cea 
+ 00000193  0x00000146 branch  0x00000093 
+ 00000194  0x00000149 fetch  0x00000001 , 0x00004cec 
+ 00000195  0x0000014a beq  0x00000003 , 0x000000bf 
+ 00000196  0x0000014b fetch  0x00000001 , 0x00004bb6 
+ 00000197  0x0000014c isolate0  0x00000004 , 0x0000003f 
+ 00000198  0x0000014d branch  0x00000091 , 0x00000001 
+ 00000199  0x0000014e fetch  0x00000001 , 0x00004cec 
+ 00000200  0x0000014f beq  0x00000001 , 0x000000be 
+ 00000201  0x00000150 beq  0x00000002 , 0x000000bf 
+ 00000202  0x00000151 rtn 
+ 00000203  0x00000154 fetch  0x00000001 , 0x00004bc5 
+ 00000204  0x00000155 rtnne  0x000000ff 
+ 00000205  0x00000156 call  0x000000d0 
+ 00000206  0x00000157 ncall  0x000000d8 , 0x0000002c 
+ 00000207  0x00000158 rtn 
+ 00000208  0x0000015b disable  0x0000002c 
+ 00000209  0x0000015c fetch  0x00000001 , 0x00004ceb 
+ 00000210  0x0000015d rtnne  0x00000001 
+ 00000211  0x0000015e fetch  0x00000001 , 0x00004ced 
+ 00000212  0x0000015f rtnne  0x00000000 
+ 00000213  0x00000160 jam  0x00000001 , 0x00004cec 
+ 00000214  0x00000161 jam  0x00000004 , 0x00004bfa 
+ 00000215  0x00000162 branch  0x00007feb 
+ 00000216  0x00000165 fetch  0x00000001 , 0x00004ced 
+ 00000217  0x00000166 branch  0x000000df , 0x00000034 
+ 00000218  0x00000167 increase  0xffffffff , 0x0000003f 
+ 00000219  0x00000168 store  0x00000001 , 0x00004ced 
+ 00000220  0x00000169 jam  0x00000002 , 0x00004cec 
+ 00000221  0x0000016a jam  0x00000004 , 0x00004bfa 
+ 00000222  0x0000016b branch  0x00000203 
+ 00000223  0x0000016e jam  0x00000003 , 0x00004cec 
+ 00000224  0x0000016f fetch  0x00000001 , 0x00004cea 
+ 00000225  0x00000170 nbranch  0x000000b2 , 0x00000034 
+ 00000226  0x00000171 jam  0x00000002 , 0x00004bfa 
+ 00000227  0x00000172 branch  0x00000203 
+ 00000228  0x00000175 fetch  0x00000001 , 0x00004bc5 
+ 00000229  0x00000176 bne  0x000000ff , 0x0000015d 
+ 00000230  0x00000178 call  0x000000ea 
+ 00000231  0x0000017a call  0x000001f1 
+ 00000232  0x0000017b jam  0x00000001 , 0x00004bba 
+ 00000233  0x0000017c rtn 
+ 00000234  0x0000017f fetch  0x00000002 , 0x00004ce6 
+ 00000235  0x00000180 call  0x00007f9c 
+ 00000236  0x00000181 branch  0x000000f0 , 0x00000028 
+ 00000237  0x00000182 fetch  0x00000007 , 0x00004b52 
+ 00000238  0x00000183 rtn  0x00000034 
+ 00000239  0x00000184 branch  0x00007fe7 
+ 00000240  0x00000186 jam  0x00000000 , 0x00004be1 
+ 00000241  0x00000187 add  0x00000011 , 0x00000001 , 0x0000003f 
+ 00000242  0x00000188 store  0x00000001 , 0x00004bb5 
+ 00000243  0x00000189 call  0x00000093 
+ 00000244  0x0000018a store  0x00000001 , 0x00004b51 
+ 00000245  0x0000018b ifetcht  0x00000001 , 0x00000005 
+ 00000246  0x0000018c ifetch  0x00000001 , 0x00000012 
+ 00000247  0x0000018d ior  0x00000002 , 0x0000003f 
+ 00000248  0x0000018e istore  0x00000001 , 0x00000005 
+ 00000249  0x0000018f increase  0x00000001 , 0x00000012 
+ 00000250  0x00000190 ifetch  0x00000004 , 0x00000012 
+ 00000251  0x00000191 istore  0x00000004 , 0x00000005 
+ 00000252  0x00000192 increase  0x00000004 , 0x00000012 
+ 00000253  0x00000193 arg  0x00004b57 , 0x00000005 
+ 00000254  0x00000194 arg  0x00000002 , 0x00000039 
+ 00000255  0x00000196 ifetch  0x00000001 , 0x00000012 
+ 00000256  0x00000197 ifetcht  0x00000001 , 0x00000005 
+ 00000257  0x00000198 iadd  0x00000002 , 0x0000003f 
+ 00000258  0x00000199 istore  0x00000001 , 0x00000005 
+ 00000259  0x0000019a increase  0x00000001 , 0x00000012 
+ 00000260  0x0000019b loop  0x000000ff 
+ 00000261  0x0000019c rtn 
+ 00000262  0x0000019f jam  0x00000000 , 0x00004bbe 
+ 00000263  0x000001a1 arg  0x00000d00 , 0x0000000b 
+ 00000264  0x000001a2 until  0x00000023 , 0x00000026 
+ 00000265  0x000001a3 call  0x00000122 
+ 00000266  0x000001a4 fetch  0x00000001 , 0x00004bf1 
+ 00000267  0x000001a5 rtneq  0x00000001 
+ 00000268  0x000001a6 nbranch  0x00000131 , 0x00000018 
+ 00000269  0x000001a7 nbranch  0x00000131 , 0x0000002f 
+ 00000270  0x000001a8 call  0x0000011d 
+ 00000271  0x000001a9 call  0x0000014d 
+ 00000272  0x000001aa call  0x00000409 
+ 00000273  0x000001ac fetch  0x00000001 , 0x00004bb4 
+ 00000274  0x000001ad increase  0x00000001 , 0x0000003f 
+ 00000275  0x000001ae store  0x00000001 , 0x00004bb4 
+ 00000276  0x000001af fetch  0x00000001 , 0x00004bc5 
+ 00000277  0x000001b0 bne  0x000000ff , 0x00000120 
+ 00000278  0x000001b1 call  0x000000c2 
+ 00000279  0x000001b3 setarg  0x00000000 
+ 00000280  0x000001b4 store  0x00000002 , 0x00004bbb 
+ 00000281  0x000001b5 store  0x00000001 , 0x00004bbd 
+ 00000282  0x000001b6 store  0x00000001 , 0x00004ce9 
+ 00000283  0x000001b7 jam  0x00000000 , 0x00004bba 
+ 00000284  0x000001b8 rtn 
+ 00000285  0x000001bb arg  0x00000004 , 0x00000039 
+ 00000286  0x000001bc arg  0x00004b51 , 0x00000005 
+ 00000287  0x000001bd branch  0x00007ec6 
+ 00000288  0x000001c0 call  0x00000406 
+ 00000289  0x000001c1 branch  0x00000177 
+ 00000290  0x000001c4 disable  0x0000002f 
+ 00000291  0x000001c5 call  0x0000026a 
+ 00000292  0x000001c8 fetch  0x00000001 , 0x00004bf1 
+ 00000293  0x000001c9 beq  0x00000001 , 0x0000012f 
+ 00000294  0x000001ca force  0x00000000 , 0x00000015 
+ 00000295  0x000001cb fetch  0x00000004 , 0x00004bdd 
+ 00000296  0x000001cc iforce  0x00000009 
+ 00000297  0x000001cd fetcht  0x00000001 , 0x00000017 
+ 00000298  0x000001ce call  0x0000291f 
+ 00000299  0x000001cf call  0x00002924 
+ 00000300  0x000001d0 call  0x00000226 
+ 00000301  0x000001d1 call  0x00000262 , 0x0000002f 
+ 00000302  0x000001d2 rtn 
+ 00000303  0x000001d4 call  0x00000262 
+ 00000304  0x000001d5 branch  0x00000111 
+ 00000305  0x000001d8 fetch  0x00000001 , 0x00004bbd 
+ 00000306  0x000001d9 increase  0x00000001 , 0x0000003f 
+ 00000307  0x000001da store  0x00000001 , 0x00004bbd 
+ 00000308  0x000001db fetch  0x00000001 , 0x00004bc5 
+ 00000309  0x000001dc bne  0x000000ff , 0x00000145 
+ 00000310  0x000001dd fetcht  0x00000001 , 0x00004bbe 
+ 00000311  0x000001de increase  0x00000001 , 0x00000002 
+ 00000312  0x000001df storet  0x00000001 , 0x00004bbe 
+ 00000313  0x000001e0 fetch  0x00000001 , 0x00004bfa 
+ 00000314  0x000001e1 isub  0x00000002 , 0x0000003f 
+ 00000315  0x000001e2 nbranch  0x00000107 , 0x00000034 
+ 00000316  0x000001e3 fetch  0x00000001 , 0x00004cec 
+ 00000317  0x000001e4 beq  0x00000003 , 0x000000ab 
+ 00000318  0x000001e5 fetch  0x00000001 , 0x00004ce9 
+ 00000319  0x000001e6 increase  0x00000001 , 0x0000003f 
+ 00000320  0x000001e7 store  0x00000001 , 0x00004ce9 
+ 00000321  0x000001e8 beq  0x00000002 , 0x000000a0 
+ 00000322  0x000001e9 call  0x00000097 
+ 00000323  0x000001ea jam  0x00000001 , 0x00004bfa 
+ 00000324  0x000001eb branch  0x00000106 
+ 00000325  0x000001ee fetch  0x00000001 , 0x00004bbd 
+ 00000326  0x000001ef rtnne  0x000000ff 
+ 00000327  0x000001f0 jam  0x00000000 , 0x00004bbd 
+ 00000328  0x000001f1 branch  0x0000014b 
+ 00000329  0x000001f4 setarg  0x00000000 
+ 00000330  0x000001f5 store  0x00000002 , 0x00004bbb 
+ 00000331  0x000001f7 jam  0x0000003a , 0x00000a99 
+ 00000332  0x000001f8 branch  0x00007d86 
+ 00000333  0x000001fb call  0x000001d6 
+ 00000334  0x000001fc fetch  0x00000001 , 0x00004bb3 
+ 00000335  0x000001fd rtn  0x00000034 
+ 00000336  0x000001fe iforce  0x00000039 
+ 00000337  0x000001ff arg  0x00004b31 , 0x00000006 
+ 00000338  0x00000200 arg  0x00004b93 , 0x00000005 
+ 00000339  0x00000201 branch  0x00007f01 
+ 00000340  0x00000204 set1  0x00000026 , 0x00000000 
+ 00000341  0x00000205 call  0x00000158 
+ 00000342  0x00000207 jam  0x00000001 , 0x00004bc5 
+ 00000343  0x00000208 rtn 
+ 00000344  0x0000020b jam  0x00000020 , 0x000041de 
+ 00000345  0x0000020c jam  0x00000000 , 0x00004bb4 
+ 00000346  0x0000020d jam  0x0000004e , 0x00004bbf 
+ 00000347  0x0000020e fetch  0x00000004 , 0x00004bc1 
+ 00000348  0x0000020f branch  0x000001e3 
+ 00000349  0x00000212 fetch  0x00000001 , 0x00004bba 
+ 00000350  0x00000213 beq  0x00000001 , 0x00007fe7 
+ 00000351  0x00000214 fetch  0x00000001 , 0x00004bc5 
+ 00000352  0x00000215 beq  0x00000001 , 0x00000164 
+ 00000353  0x00000216 beq  0x00000002 , 0x00000167 
+ 00000354  0x00000217 beq  0x00000003 , 0x0000016a 
+ 00000355  0x00000218 branch  0x00002a8c 
+ 00000356  0x0000021b jam  0x00000011 , 0x00004bc5 
+ 00000357  0x0000021c jam  0x000000aa , 0x0000119e 
+ 00000358  0x0000021d branch  0x0000016c 
+ 00000359  0x0000021f jam  0x00000012 , 0x00004bc5 
+ 00000360  0x00000220 jam  0x00000055 , 0x0000119e 
+ 00000361  0x00000221 branch  0x0000016c 
+ 00000362  0x00000223 jam  0x00000013 , 0x00004bc5 
+ 00000363  0x00000224 jam  0x00000022 , 0x0000119e 
+ 00000364  0x00000226 fetch  0x00000001 , 0x00004bb6 
+ 00000365  0x00000227 and_into  0x00000007 , 0x0000003f 
+ 00000366  0x00000228 store  0x00000001 , 0x0000119f 
+ 00000367  0x00000229 fetch  0x00000004 , 0x00004bec 
+ 00000368  0x0000022a store  0x00000004 , 0x000011a0 
+ 00000369  0x0000022c jam  0x00000000 , 0x000011a4 
+ 00000370  0x0000022d arg  0x0000119e , 0x00000011 
+ 00000371  0x0000022e arg  0x00000007 , 0x00000002 
+ 00000372  0x0000022f call  0x000001d1 
+ 00000373  0x00000230 call  0x000000e7 
+ 00000374  0x00000231 branch  0x00007fe7 
+ 00000375  0x00000234 fetch  0x00000001 , 0x00004bc5 
+ 00000376  0x00000235 rtneq  0x000000ff 
+ 00000377  0x00000236 beq  0x00000011 , 0x0000017d 
+ 00000378  0x00000237 beq  0x00000012 , 0x0000017f 
+ 00000379  0x00000238 beq  0x00000013 , 0x00000181 
+ 00000380  0x00000239 rtn 
+ 00000381  0x0000023d jam  0x00000002 , 0x00004bc5 
+ 00000382  0x0000023e branch  0x00000117 
+ 00000383  0x00000240 jam  0x00000003 , 0x00004bc5 
+ 00000384  0x00000241 branch  0x00000117 
+ 00000385  0x00000243 jam  0x000000ff , 0x00004bc5 
+ 00000386  0x00000244 jam  0x00000039 , 0x00000a99 
+ 00000387  0x00000245 call  0x00007d86 
+ 00000388  0x00000246 fetch  0x00000004 , 0x00004b95 
+ 00000389  0x00000247 call  0x000001e3 
+ 00000390  0x00000248 branch  0x00000117 
+ 00000391  0x0000024b set0  0x00000026 , 0x00000000 
+ 00000392  0x0000024c call  0x000001c7 
+ 00000393  0x0000024d fetch  0x00000001 , 0x00004bc5 
+ 00000394  0x0000024e rtnne  0x000000ff 
+ 00000395  0x0000024f call  0x0000019c 
+ 00000396  0x00000251 setarg  0x00000000 
+ 00000397  0x00000252 store  0x00000002 , 0x00004be2 
+ 00000398  0x00000254 call  0x00002afa 
+ 00000399  0x00000255 nop  0x000007d0 
+ 00000400  0x00000256 fetch  0x00000001 , 0x00004be2 
+ 00000401  0x00000257 beq  0x000000ff , 0x0000014b 
+ 00000402  0x00000258 call  0x00000122 
+ 00000403  0x00000259 nbranch  0x000001a5 , 0x00000018 
+ 00000404  0x0000025a nbranch  0x000001a5 , 0x0000002f 
+ 00000405  0x0000025c set1  0x00000026 , 0x00000000 
+ 00000406  0x0000025d setarg  0x00000000 
+ 00000407  0x0000025e store  0x00000002 , 0x00004be2 
+ 00000408  0x0000025f jam  0x0000003c , 0x00000a99 
+ 00000409  0x00000260 call  0x00007d86 
+ 00000410  0x00000261 call  0x0000011d 
+ 00000411  0x00000262 branch  0x0000006d 
+ 00000412  0x00000265 jam  0x000000ff , 0x0000119e 
+ 00000413  0x00000266 fetch  0x00000001 , 0x00004bb6 
+ 00000414  0x00000267 store  0x00000001 , 0x0000119f 
+ 00000415  0x00000268 fetch  0x00000004 , 0x00004bec 
+ 00000416  0x00000269 store  0x00000004 , 0x000011a0 
+ 00000417  0x0000026a arg  0x00000006 , 0x00000002 
+ 00000418  0x0000026b arg  0x0000119e , 0x00000011 
+ 00000419  0x0000026c call  0x000001d1 
+ 00000420  0x0000026d branch  0x000001f1 
+ 00000421  0x00000270 fetch  0x00000002 , 0x00004be2 
+ 00000422  0x00000271 increase  0x00000001 , 0x0000003f 
+ 00000423  0x00000272 store  0x00000002 , 0x00004be2 
+ 00000424  0x00000273 call  0x00000203 
+ 00000425  0x00000274 branch  0x0000018e 
+ 00000426  0x00000277 set0  0x00000026 , 0x00000000 
+ 00000427  0x00000278 call  0x000001c5 
+ 00000428  0x00000279 call  0x0000019c 
+ 00000429  0x0000027b jam  0x00000000 , 0x00004be2 
+ 00000430  0x0000027d call  0x00002afa 
+ 00000431  0x0000027e nop  0x000007d0 
+ 00000432  0x0000027f fetch  0x00000001 , 0x00004be2 
+ 00000433  0x00000280 beq  0x000000ff , 0x0000014b 
+ 00000434  0x00000281 call  0x00000122 
+ 00000435  0x00000282 nbranch  0x000001bb , 0x00000018 
+ 00000436  0x00000283 nbranch  0x000001bb , 0x0000002f 
+ 00000437  0x00000284 call  0x0000014d 
+ 00000438  0x00000285 fetch  0x00000004 , 0x00004bdd 
+ 00000439  0x00000286 fetcht  0x00000004 , 0x00004bc1 
+ 00000440  0x00000287 isub  0x00000002 , 0x0000003e 
+ 00000441  0x00000288 branch  0x00000154 , 0x00000005 
+ 00000442  0x00000289 branch  0x00000195 
+ 00000443  0x0000028c fetch  0x00000001 , 0x00004be2 
+ 00000444  0x0000028d increase  0x00000001 , 0x0000003f 
+ 00000445  0x0000028e store  0x00000001 , 0x00004be2 
+ 00000446  0x0000028f fetch  0x00000001 , 0x00004cf3 
+ 00000447  0x00000290 increase  0x00000001 , 0x0000003f 
+ 00000448  0x00000291 and_into  0x00000001 , 0x0000003f 
+ 00000449  0x00000292 store  0x00000001 , 0x00004cf3 
+ 00000450  0x00000293 beq  0x00000000 , 0x000001c9 
+ 00000451  0x00000294 beq  0x00000001 , 0x000001cb 
+ 00000452  0x00000295 rtn 
+ 00000453  0x00000298 jam  0x00000020 , 0x000041de 
+ 00000454  0x00000299 call  0x00000328 
+ 00000455  0x0000029b call  0x000001e4 
+ 00000456  0x0000029c branch  0x00000203 
+ 00000457  0x0000029f call  0x000001c5 
+ 00000458  0x000002a0 branch  0x000001ae 
+ 00000459  0x000002a3 call  0x00000158 
+ 00000460  0x000002a4 branch  0x000001ae 
+ 00000461  0x000002a7 set0  0x00000026 , 0x00000000 
+ 00000462  0x000002a8 call  0x000053ce 
+ 00000463  0x000002aa arg  0x00000003 , 0x00000007 
+ 00000464  0x000002ab branch  0x000043d2 
+ 00000465  0x000002ae storet  0x00000001 , 0x00004bb5 
+ 00000466  0x000002af copy  0x00000002 , 0x00000039 
+ 00000467  0x000002b0 arg  0x00004b51 , 0x00000005 
+ 00000468  0x000002b1 copy  0x00000011 , 0x00000006 
+ 00000469  0x000002b2 branch  0x00007f01 
+ 00000470  0x000002b6 fetch  0x00000001 , 0x00004b30 
+ 00000471  0x000002b7 rshift3  0x0000003f , 0x0000003f 
+ 00000472  0x000002b8 store  0x00000001 , 0x00004bb3 
+ 00000473  0x000002ba increase  0x00000001 , 0x0000003f 
+ 00000474  0x000002bb arg  0x00004b30 , 0x00000006 
+ 00000475  0x000002bc iadd  0x00000006 , 0x00000006 
+ 00000476  0x000002bd ifetch  0x00000003 , 0x00000006 
+ 00000477  0x000002be store  0x00000003 , 0x00004bf2 
+ 00000478  0x000002c0 fetch  0x00000001 , 0x00004b30 
+ 00000479  0x000002c1 rshift  0x0000003f , 0x0000003f 
+ 00000480  0x000002c2 and  0x0000003f , 0x00000003 , 0x0000003f 
+ 00000481  0x000002c3 store  0x00000001 , 0x00004bf8 
+ 00000482  0x000002c4 rtn 
+ 00000483  0x000002c7 store  0x00000004 , 0x00004bdd 
+ 00000484  0x000002ca arg  0x00000000 , 0x00000011 
+ 00000485  0x000002cb arg  0x00000004 , 0x00000039 
+ 00000486  0x000002cc arg  0x00004bdd , 0x00000006 
+ 00000487  0x000002ce ifetch  0x00000001 , 0x00000006 
+ 00000488  0x000002cf iadd  0x00000011 , 0x00000011 
+ 00000489  0x000002d0 loop  0x000001e7 
+ 00000490  0x000002d1 copy  0x00000011 , 0x0000003f 
+ 00000491  0x000002d2 store  0x00000002 , 0x00004c66 
+ 00000492  0x000002d3 fetch  0x00000001 , 0x00004c66 
+ 00000493  0x000002d4 fetcht  0x00000001 , 0x00004c67 
+ 00000494  0x000002d5 iadd  0x00000002 , 0x0000003f 
+ 00000495  0x000002d6 store  0x00000001 , 0x00004c68 
+ 00000496  0x000002d7 rtn 
+ 00000497  0x000002dc fetch  0x00000001 , 0x00004bb5 
+ 00000498  0x000002dd increase  0x00000002 , 0x0000003f 
+ 00000499  0x000002de store  0x00000001 , 0x00004bb7 
+ 00000500  0x000002e0 fetch  0x00000001 , 0x00004bb6 
+ 00000501  0x000002e1 store  0x00000001 , 0x00004b71 
+ 00000502  0x000002e3 fetch  0x00000001 , 0x00004bb5 
+ 00000503  0x000002e4 lshift3  0x0000003f , 0x0000003f 
+ 00000504  0x000002e5 fetcht  0x00000001 , 0x00004bb4 
+ 00000505  0x000002e6 and  0x00000002 , 0x00000003 , 0x00000002 
+ 00000506  0x000002e7 lshift  0x00000002 , 0x00000002 
+ 00000507  0x000002e8 ior  0x00000002 , 0x0000003f 
+ 00000508  0x000002e9 fetcht  0x00000001 , 0x00004bf1 
+ 00000509  0x000002ea iadd  0x00000002 , 0x0000003f 
+ 00000510  0x000002eb istore  0x00000001 , 0x00000005 
+ 00000511  0x000002ed fetch  0x00000001 , 0x00004bb5 
+ 00000512  0x000002ee iforce  0x00000039 
+ 00000513  0x000002ef arg  0x00004b51 , 0x00000006 
+ 00000514  0x000002f0 branch  0x00007f01 
+ 00000515  0x000002f3 fetcht  0x00000001 , 0x00004bc0 
+ 00000516  0x000002f4 call  0x00000207 
+ 00000517  0x000002f5 storet  0x00000001 , 0x00004bc0 
+ 00000518  0x000002f6 rtn 
+ 00000519  0x000002f9 call  0x0000020b 
+ 00000520  0x000002fa increase  0x00000001 , 0x00000002 
+ 00000521  0x000002fb and_into  0x00000003 , 0x00000002 
+ 00000522  0x000002fc rtn 
+ 00000523  0x000002ff fetch  0x00000001 , 0x00004bdd 
+ 00000524  0x00000300 and_into  0x00000003 , 0x0000003f 
+ 00000525  0x00000301 mul32  0x0000003f , 0x00000004 , 0x00000011 
+ 00000526  0x00000302 setarg  0x00004bc6 
+ 00000527  0x00000303 iadd  0x00000011 , 0x0000003f 
+ 00000528  0x00000304 iadd  0x00000002 , 0x00000006 
+ 00000529  0x00000305 ifetch  0x00000001 , 0x00000006 
+ 00000530  0x00000306 store  0x00000001 , 0x00004bbf 
+ 00000531  0x00000307 rtn 
+ 00000532  0x0000030a disable  0x00000009 
+ 00000533  0x0000030b disable  0x00000007 
+ 00000534  0x0000030c setarg  0x00555555 
+ 00000535  0x0000030d iforce  0x0000000f 
+ 00000536  0x0000030e fetch  0x00000001 , 0x00004bbf 
+ 00000537  0x0000030f reverse  0x0000003f , 0x00000002 
+ 00000538  0x00000310 set1  0x00000001 , 0x00000002 
+ 00000539  0x00000311 rshift  0x00000002 , 0x0000000e 
+ 00000540  0x00000312 rtn 
+ 00000541  0x00000315 call  0x000053c4 
+ 00000542  0x00000316 fetch  0x00000004 , 0x00004bdd 
+ 00000543  0x00000317 iforce  0x00000009 
+ 00000544  0x00000318 call  0x00002918 
+ 00000545  0x00000319 fetcht  0x00000001 , 0x00004bbf 
+ 00000546  0x0000031a call  0x0000291f 
+ 00000547  0x0000031b setarg  0x00000500 
+ 00000548  0x0000031c call  0x00002a8f 
+ 00000549  0x0000031d call  0x00002924 
+ 00000550  0x00000321 call  0x00000214 
+ 00000551  0x00000322 disable  0x0000002f 
+ 00000552  0x00000323 enable  0x0000000d 
+ 00000553  0x00000324 enable  0x00000021 
+ 00000554  0x00000325 disable  0x00000020 
+ 00000555  0x00000326 enable  0x00000010 
+ 00000556  0x00000327 fetch  0x00000002 , 0x00004bb8 
+ 00000557  0x00000328 iforce  0x0000001b 
+ 00000558  0x00000329 correlate  0x0000003e , 0x00000003 
+ 00000559  0x0000032a nbranch  0x00000266 , 0x00000018 
+ 00000560  0x0000032d disable  0x0000000d 
+ 00000561  0x0000032e enable  0x0000000b 
+ 00000562  0x0000032f enable  0x00000007 
+ 00000563  0x00000330 enable  0x00000009 
+ 00000564  0x00000331 call  0x0000025f 
+ 00000565  0x00000332 store  0x00000001 , 0x00004c69 
+ 00000566  0x00000333 fetcht  0x00000001 , 0x00004c68 
+ 00000567  0x00000334 isub  0x00000002 , 0x0000003e 
+ 00000568  0x00000335 nbranch  0x00000262 , 0x00000005 
+ 00000569  0x00000336 call  0x0000025f 
+ 00000570  0x00000337 store  0x00000001 , 0x00004b2f 
+ 00000571  0x00000338 fetch  0x00000001 , 0x00004bfb 
+ 00000572  0x00000339 sub  0x0000003f , 0x00000002 , 0x0000003e 
+ 00000573  0x0000033a branch  0x00000242 , 0x00000005 
+ 00000574  0x0000033b fetch  0x00000001 , 0x00004b2f 
+ 00000575  0x0000033c fetcht  0x00000001 , 0x00004bb6 
+ 00000576  0x0000033d icompare  0x00000007 , 0x00000002 
+ 00000577  0x0000033e nbranch  0x00000262 , 0x00000001 
+ 00000578  0x00000340 call  0x0000025f 
+ 00000579  0x00000341 istore  0x00000001 , 0x00000005 
+ 00000580  0x00000342 rshift3  0x0000003f , 0x0000003f 
+ 00000581  0x00000343 and  0x0000003f , 0x0000001f , 0x00000039 
+ 00000582  0x00000344 branch  0x0000024a , 0x00000005 
+ 00000583  0x00000346 call  0x0000025f 
+ 00000584  0x00000347 istore  0x00000001 , 0x00000005 
+ 00000585  0x00000348 loop  0x00000247 
+ 00000586  0x0000034b copy  0x00000005 , 0x00000011 
+ 00000587  0x0000034c call  0x0000025f 
+ 00000588  0x0000034d store  0x00000001 , 0x00004cf0 
+ 00000589  0x0000034e copy  0x00000011 , 0x00000005 
+ 00000590  0x0000034f parse  0x00000003 , 0x00000000 , 0x00000018 
+ 00000591  0x00000350 enable  0x00000010 
+ 00000592  0x00000351 arg  0x00000664 , 0x0000001b 
+ 00000593  0x00000352 rshift32  0x0000003f , 0x0000003f 
+ 00000594  0x00000353 rshift16  0x0000003f , 0x0000003f 
+ 00000595  0x00000354 istore  0x00000003 , 0x00000005 
+ 00000596  0x00000355 disable  0x0000000b 
+ 00000597  0x00000356 branch  0x00000262 , 0x00000006 
+ 00000598  0x00000359 enable  0x0000002f 
+ 00000599  0x0000035a fetch  0x00000001 , 0x00000017 
+ 00000600  0x0000035b add  0x0000003f , 0x00000000 , 0x00000011 
+ 00000601  0x0000035c call  0x00002981 
+ 00000602  0x0000035d disable  0x0000000d 
+ 00000603  0x0000035e call  0x00002918 
+ 00000604  0x0000035f fetch  0x00000001 , 0x00004cf0 
+ 00000605  0x00000360 call  0x0000001d 
+ 00000606  0x00000361 rtn 
+ 00000607  0x00000364 parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00000608  0x00000365 rshift3  0x0000000c , 0x0000003f 
+ 00000609  0x00000366 rtn 
+ 00000610  0x00000369 disable  0x0000001b 
+ 00000611  0x0000036a disable  0x0000000b 
+ 00000612  0x0000036b call  0x0000264d 
+ 00000613  0x0000036c rtn 
+ 00000614  0x0000036f branch  0x00000262 
+ 00000615  0x00000372 call  0x00002918 
+ 00000616  0x00000373 fetcht  0x00000001 , 0x00004bbf 
+ 00000617  0x00000374 branch  0x00002933 
+ 00000618  0x00000377 call  0x000053c4 
+ 00000619  0x00000378 fetch  0x00000004 , 0x00004bdd 
+ 00000620  0x00000379 iforce  0x00000009 
+ 00000621  0x0000037a call  0x00000214 
+ 00000622  0x0000037b call  0x00000267 
+ 00000623  0x0000037c set1  0x00000000 , 0x00000015 
+ 00000624  0x0000037d enable  0x0000001d 
+ 00000625  0x0000037e enable  0x00000020 
+ 00000626  0x0000037f disable  0x00000021 
+ 00000627  0x00000382 rshift16  0x00000009 , 0x0000003f 
+ 00000628  0x00000383 rshift8  0x0000003f , 0x0000003f 
+ 00000629  0x00000384 rshift4  0x0000003f , 0x0000003f 
+ 00000630  0x00000385 inject  0x00000003 , 0x00000028 
+ 00000631  0x00000386 disable  0x0000001d 
+ 00000632  0x00000387 enable  0x0000001b 
+ 00000633  0x00000388 enable  0x00000007 
+ 00000634  0x00000389 enable  0x00000009 
+ 00000635  0x0000038a fetch  0x00000001 , 0x00004c68 
+ 00000636  0x0000038b inject  0x00000003 , 0x00000008 
+ 00000637  0x0000038c fetch  0x00000001 , 0x00004bb7 
+ 00000638  0x0000038d iforce  0x00000039 
+ 00000639  0x0000038e arg  0x00004b71 , 0x00000006 
+ 00000640  0x00000390 ifetch  0x00000001 , 0x00000006 
+ 00000641  0x00000391 inject  0x00000003 , 0x00000008 
+ 00000642  0x00000392 loop  0x00000280 
+ 00000643  0x00000395 enable  0x00000008 
+ 00000644  0x00000396 inject  0x00000003 , 0x00000018 
+ 00000645  0x00000397 disable  0x00000008 
+ 00000646  0x00000398 until  0x0000003e , 0x00000027 
+ 00000647  0x00000399 nop  0x00000064 
+ 00000648  0x0000039a disable  0x0000001d 
+ 00000649  0x0000039b disable  0x0000001b 
+ 00000650  0x0000039c rtn 
+ 00000651  0x0000039f call  0x00007fe9 
+ 00000652  0x000003a0 fetcht  0x00000004 , 0x00004bd6 
+ 00000653  0x000003a1 copy  0x00000022 , 0x0000003f 
+ 00000654  0x000003a2 isub  0x00000002 , 0x0000003e 
+ 00000655  0x000003a3 ncall  0x00002d18 , 0x00000002 
+ 00000656  0x000003a4 copy  0x0000003f , 0x00000012 
+ 00000657  0x000003a5 fetch  0x00000004 , 0x00004bd6 
+ 00000658  0x000003a6 fetcht  0x00000001 , 0x00004bda 
+ 00000659  0x000003a7 iadd  0x00000002 , 0x00000002 
+ 00000660  0x000003a8 copy  0x00000012 , 0x0000003f 
+ 00000661  0x000003a9 isub  0x00000002 , 0x0000003e 
+ 00000662  0x000003aa nrtn  0x00000002 
+ 00000663  0x000003ab set0  0x0000001c , 0x0000003f 
+ 00000664  0x000003ac store  0x00000004 , 0x00004bd6 
+ 00000665  0x000003ad branch  0x00007fe7 
+ 00000666  0x000003b0 call  0x000029bb 
+ 00000667  0x000003b1 rtn  0x00000034 
+ 00000668  0x000003b2 fetcht  0x00000001 , 0x00004c6f 
+ 00000669  0x000003b3 arg  0x00000d9e , 0x00000011 
+ 00000670  0x000003b4 call  0x000002a1 
+ 00000671  0x000003b5 storet  0x00000001 , 0x00004c6f 
+ 00000672  0x000003b6 rtn 
+ 00000673  0x000003b9 copy  0x00000011 , 0x0000003f 
+ 00000674  0x000003ba iadd  0x00000002 , 0x00000005 
+ 00000675  0x000003bb fetch  0x00000001 , 0x00000018 
+ 00000676  0x000003bc istore  0x00000001 , 0x00000005 
+ 00000677  0x000003bd increase  0x00000001 , 0x00000002 
+ 00000678  0x000003be and_into  0x00000007 , 0x00000002 
+ 00000679  0x000003bf rtn 
+ 00000680  0x000003c1 arg  0x00000000 , 0x00000002 
+ 00000681  0x000003c2 arg  0x00000008 , 0x00000039 
+ 00000682  0x000003c3 copy  0x00000011 , 0x00000006 
+ 00000683  0x000003c5 ifetch  0x00000001 , 0x00000006 
+ 00000684  0x000003c6 iadd  0x00000002 , 0x00000002 
+ 00000685  0x000003c7 loop  0x000002ab 
+ 00000686  0x000003c8 rshift3  0x00000002 , 0x0000003f 
+ 00000687  0x000003c9 copy  0x0000003f , 0x00000002 
+ 00000688  0x000003ca rtnmark0  0x00000026 
+ 00000689  0x000003cc div  0x0000003f , 0x0000000a 
+ 00000690  0x000003cd call  0x00007f86 
+ 00000691  0x000003ce quotient  0x0000003f 
+ 00000692  0x000003cf lshift4  0x0000003f , 0x0000003f 
+ 00000693  0x000003d0 remainder  0x00000002 
+ 00000694  0x000003d1 ior  0x00000002 , 0x00000002 
+ 00000695  0x000003d2 rtn 
+ 00000696  0x000003d3 rtn 
+ 00000697  0x000003d7 rtnmark1  0x00000026 
+ 00000698  0x000003d8 call  0x000002c2 
+ 00000699  0x000003d9 fetch  0x00000001 , 0x00004040 
+ 00000700  0x000003da bbit0  0x00000000 , 0x000002bf 
+ 00000701  0x000003db fetch  0x00000001 , 0x000000a0 
+ 00000702  0x000003dc nrtn  0x00000034 
+ 00000703  0x000003de setarg  0x00000000 
+ 00000704  0x000003df store  0x00000008 , 0x000000a1 
+ 00000705  0x000003e0 rtn 
+ 00000706  0x000003e3 call  0x000002cb 
+ 00000707  0x000003e4 call  0x000002bf 
+ 00000708  0x000003e6 call  0x00003ebf 
+ 00000709  0x000003e7 hfetch  0x00000004 , 0x00008070 
+ 00000710  0x000003e8 hfetcht  0x00000004 , 0x00008078 
+ 00000711  0x000003e9 ior  0x00000002 , 0x00000002 
+ 00000712  0x000003ea invert  0x00000002 , 0x00000002 
+ 00000713  0x000003eb hstoret  0x00000004 , 0x0000807c 
+ 00000714  0x000003ec rtn 
+ 00000715  0x000003ef fetch  0x00000001 , 0x00004afe 
+ 00000716  0x000003f0 rtn  0x00000034 
+ 00000717  0x000003f1 branch  0x000003c3 
+ 00000718  0x000003f4 call  0x00003416 
+ 00000719  0x000003f5 branch  0x000002d6 , 0x0000002b 
+ 00000720  0x000003f6 fetch  0x00000001 , 0x000041de 
+ 00000721  0x000003f7 store  0x00000001 , 0x00004c6c 
+ 00000722  0x000003f8 call  0x00000406 
+ 00000723  0x000003f9 fetch  0x00000001 , 0x00004685 
+ 00000724  0x000003fa store  0x00000001 , 0x000046da 
+ 00000725  0x000003fb call  0x000043ca 
+ 00000726  0x000003fd call  0x000002db 
+ 00000727  0x000003fe branch  0x000074b9 
+ 00000728  0x00000401 fetch  0x00000001 , 0x00004c6c 
+ 00000729  0x00000402 store  0x00000001 , 0x000041de 
+ 00000730  0x00000403 rtn 
+ 00000731  0x00000406 ncall  0x0000031a , 0x0000002b 
+ 00000732  0x00000407 call  0x000002f9 
+ 00000733  0x00000408 rtn  0x0000002b 
+ 00000734  0x00000409 call  0x0000034d 
+ 00000735  0x0000040a fetch  0x00000001 , 0x00004b26 
+ 00000736  0x0000040b bbit1  0x00000002 , 0x000002e3 
+ 00000737  0x0000040c call  0x00004083 
+ 00000738  0x0000040d beq  0x00000005 , 0x000002e7 
+ 00000739  0x0000040f branch  0x00000335 
+ 00000740  0x00000412 call  0x000002d8 
+ 00000741  0x00000413 fetch  0x00000001 , 0x00004210 
+ 00000742  0x00000414 rtn 
+ 00000743  0x00000419 fetch  0x00000004 , 0x000046d3 
+ 00000744  0x0000041a rtnbit0  0x00000011 
+ 00000745  0x0000041b rtnbit1  0x00000003 
+ 00000746  0x0000041c rtnmark1  0x00000026 
+ 00000747  0x0000041d call  0x00004482 
+ 00000748  0x0000041e arg  0x00000003 , 0x00000007 
+ 00000749  0x0000041f call  0x000043ce 
+ 00000750  0x00000420 setarg  0x00000000 
+ 00000751  0x00000421 store  0x00000002 , 0x000046ae 
+ 00000752  0x00000422 store  0x00000001 , 0x000046b4 
+ 00000753  0x00000423 store  0x00000002 , 0x00004be2 
+ 00000754  0x00000424 call  0x000042ca 
+ 00000755  0x00000425 branch  0x00000154 
+ 00000756  0x00000428 fetch  0x00000004 , 0x000046d3 
+ 00000757  0x00000429 bbit0  0x00000014 , 0x00003d66 
+ 00000758  0x0000042a fetch  0x00000001 , 0x0000477a 
+ 00000759  0x0000042b beq  0x000000ff , 0x00003d66 
+ 00000760  0x0000042c branch  0x00003d80 
+ 00000761  0x0000042f jam  0x00000076 , 0x00004212 
+ 00000762  0x00000430 branch  0x00003d36 
+ 00000763  0x00000433 call  0x000002f9 
+ 00000764  0x00000434 call  0x000040c0 
+ 00000765  0x00000435 fetch  0x00000001 , 0x000046e0 
+ 00000766  0x00000436 beq  0x00000005 , 0x000040d5 
+ 00000767  0x00000438 call  0x000040d9 
+ 00000768  0x00000439 beq  0x00000030 , 0x00000309 
+ 00000769  0x0000043a beq  0x00000031 , 0x0000030b 
+ 00000770  0x0000043b call  0x000040d1 
+ 00000771  0x0000043c nop  0x000003e8 
+ 00000772  0x0000043d branch  0x000002ff 
+ 00000773  0x00000440 jam  0x00000001 , 0x00004afe 
+ 00000774  0x00000441 call  0x0000640f 
+ 00000775  0x00000442 call  0x000002fb 
+ 00000776  0x00000443 branch  0x00006411 
+ 00000777  0x00000446 call  0x00000310 
+ 00000778  0x00000447 branch  0x000040e0 
+ 00000779  0x0000044b call  0x00000310 
+ 00000780  0x0000044c fetch  0x00000001 , 0x000046de 
+ 00000781  0x0000044d beq  0x00000070 , 0x000040e8 
+ 00000782  0x0000044e jam  0x00000001 , 0x000046e0 
+ 00000783  0x0000044f rtn 
+ 00000784  0x00000452 setarg  0x00008006 
+ 00000785  0x00000453 call  0x00006413 
+ 00000786  0x00000454 nop  0x00002ee0 
+ 00000787  0x00000455 branch  0x000002f4 
+ 00000788  0x00000457 setarg  0x00000006 
+ 00000789  0x00000458 call  0x00006414 
+ 00000790  0x00000459 or  0x0000003f , 0x00000008 , 0x0000003f 
+ 00000791  0x0000045a lshift8  0x0000003f , 0x0000003f 
+ 00000792  0x0000045b add  0x0000003f , 0x00000006 , 0x0000003f 
+ 00000793  0x0000045c branch  0x00006413 
+ 00000794  0x0000045f call  0x0000008d 
+ 00000795  0x00000461 hfetch  0x00000001 , 0x00008a00 
+ 00000796  0x00000462 set0  0x00000004 , 0x0000003f 
+ 00000797  0x00000463 hstore  0x00000001 , 0x00008a00 
+ 00000798  0x00000464 call  0x00003e1e 
+ 00000799  0x00000467 setarg  0x00000000 
+ 00000800  0x00000468 store  0x00000002 , 0x00004154 
+ 00000801  0x00000469 call  0x00003e54 
+ 00000802  0x0000046b call  0x0000659c 
+ 00000803  0x0000046c fetch  0x00000004 , 0x000046d3 
+ 00000804  0x0000046d isolate1  0x00000019 , 0x0000003f 
+ 00000805  0x0000046e ncall  0x000065c2 , 0x00000001 
+ 00000806  0x0000046f call  0x0000443f 
+ 00000807  0x00000470 call  0x0000032a 
+ 00000808  0x00000472 call  0x00000373 
+ 00000809  0x00000473 branch  0x000065df 
+ 00000810  0x00000477 call  0x000033c4 
+ 00000811  0x00000478 branch  0x00004316 , 0x00000005 
+ 00000812  0x00000479 branch  0x00003dcb 
+ 00000813  0x0000047c arg  0x00000002 , 0x00000002 
+ 00000814  0x0000047d arg  0x00000aaa , 0x00000011 
+ 00000815  0x0000047e arg  0x00000062 , 0x00000012 
+ 00000816  0x0000047f branch  0x000065d1 
+ 00000817  0x00000482 arg  0x00000002 , 0x00000002 
+ 00000818  0x00000483 arg  0x00000a9a , 0x00000011 
+ 00000819  0x00000484 arg  0x00000062 , 0x00000012 
+ 00000820  0x00000485 branch  0x000033c8 
+ 00000821  0x00000488 branch  0x000001aa 
+ 00000822  0x00000489 fetch  0x00000004 , 0x000046d3 
+ 00000823  0x0000048a bbit0  0x0000001e , 0x0000033d 
+ 00000824  0x0000048b fetch  0x00000001 , 0x00000abd 
+ 00000825  0x0000048c isolate0  0x00000003 , 0x0000003f 
+ 00000826  0x0000048d nbranch  0x0000033d , 0x00000001 
+ 00000827  0x0000048e call  0x000002fb 
+ 00000828  0x0000048f call  0x00000314 
+ 00000829  0x00000491 fetch  0x00000001 , 0x0000471f 
+ 00000830  0x00000492 store  0x00000001 , 0x0000471e 
+ 00000831  0x00000497 fetch  0x00000004 , 0x000046d3 
+ 00000832  0x00000498 rtnbit0  0x00000011 
+ 00000833  0x00000499 call  0x00000344 
+ 00000834  0x0000049a branch  0x000001aa , 0x00000028 
+ 00000835  0x0000049b branch  0x00000187 
+ 00000836  0x0000049e arg  0x00000002 , 0x00000039 
+ 00000837  0x0000049f arg  0x00004bdd , 0x00000006 
+ 00000838  0x000004a1 call  0x00007fe7 
+ 00000839  0x000004a2 setarg  0x0000ffff 
+ 00000840  0x000004a4 ifetcht  0x00000002 , 0x00000006 
+ 00000841  0x000004a5 isub  0x00000002 , 0x0000003e 
+ 00000842  0x000004a6 ncall  0x00007fe9 , 0x00000005 
+ 00000843  0x000004a7 loop  0x00000348 
+ 00000844  0x000004a8 rtn 
+ 00000845  0x000004ab setarg  0x00000364 
+ 00000846  0x000004ac store  0x00000002 , 0x000041f5 
+ 00000847  0x000004ad setarg  0x00000352 
+ 00000848  0x000004ae store  0x00000002 , 0x00004ce6 
+ 00000849  0x000004b0 rtn 
+ 00000850  0x000004b3 branch  0x00000357 
+ 00000851  0x000004b6 call  0x00004401 
+ 00000852  0x000004b7 fetch  0x00000002 , 0x0000469f 
+ 00000853  0x000004b8 rtn  0x00000034 
+ 00000854  0x000004b9 branch  0x0000006d 
+ 00000855  0x000004bc call  0x00000475 
+ 00000856  0x000004bd branch  0x00000354 
+ 00000857  0x000004c2 fetch  0x00000002 , 0x0000469f 
+ 00000858  0x000004c3 rtn  0x00000034 
+ 00000859  0x000004c4 jam  0x00000001 , 0x00004806 
+ 00000860  0x000004c5 jam  0x00000002 , 0x00004807 
+ 00000861  0x000004c6 rtn 
+ 00000862  0x000004ca call  0x00005814 
+ 00000863  0x000004cb jam  0x00000001 , 0x0000479c 
+ 00000864  0x000004cc branch  0x00000310 
+ 00000865  0x000004cf call  0x00007e34 
+ 00000866  0x000004d0 call  0x00003d6a 
+ 00000867  0x000004d1 branch  0x00003ee0 
+ 00000868  0x000004d4 copy  0x00000013 , 0x0000003f 
+ 00000869  0x000004d5 beq  0x00000039 , 0x00000369 
+ 00000870  0x000004d6 beq  0x0000003a , 0x00000377 
+ 00000871  0x000004d7 beq  0x0000003c , 0x00000382 
+ 00000872  0x000004d8 branch  0x0000417d 
+ 00000873  0x000004de jam  0x00000001 , 0x0000478b 
+ 00000874  0x000004df arg  0x00000003 , 0x00000007 
+ 00000875  0x000004e0 call  0x000043d2 
+ 00000876  0x000004e1 setarg  0x00000000 
+ 00000877  0x000004e2 store  0x00000002 , 0x00004707 
+ 00000878  0x000004e3 jam  0x00000000 , 0x000046a7 
+ 00000879  0x000004e5 call  0x0000405d 
+ 00000880  0x000004e7 call  0x0000006d 
+ 00000881  0x000004e8 call  0x00000373 
+ 00000882  0x000004e9 branch  0x000065d1 
+ 00000883  0x000004ec arg  0x00004bdd , 0x00000011 
+ 00000884  0x000004ed arg  0x0000005b , 0x00000012 
+ 00000885  0x000004ee arg  0x00000004 , 0x00000002 
+ 00000886  0x000004ef rtn 
+ 00000887  0x000004f2 jam  0x00000000 , 0x00004cf5 
+ 00000888  0x000004f3 call  0x000002d8 
+ 00000889  0x000004f4 call  0x000001cd 
+ 00000890  0x000004f5 branch  0x0000659a 
+ 00000891  0x000004f6 jam  0x00000000 , 0x000041bd 
+ 00000892  0x000004f7 call  0x00004316 
+ 00000893  0x000004f8 arg  0x00000003 , 0x00000039 
+ 00000894  0x000004f9 arg  0x00004722 , 0x00000006 
+ 00000895  0x000004fa call  0x00000346 
+ 00000896  0x000004fb branch  0x000003bf , 0x00000028 
+ 00000897  0x000004fc branch  0x000002e4 
+ 00000898  0x000004ff branch  0x00003f8d 
+ 00000899  0x00000503 enable  0x00000028 
+ 00000900  0x00000504 hfetch  0x00000004 , 0x00008138 
+ 00000901  0x00000505 setflag  0x00000028 , 0x0000001a , 0x0000003f 
+ 00000902  0x00000506 hstore  0x00000004 , 0x0000804c 
+ 00000903  0x00000507 call  0x00002c21 
+ 00000904  0x00000508 call  0x0000038d 
+ 00000905  0x00000509 call  0x000074bd 
+ 00000906  0x0000050a call  0x00004482 
+ 00000907  0x0000050b call  0x00003e9f 
+ 00000908  0x0000050c branch  0x000002c4 
+ 00000909  0x0000050f fetch  0x00000001 , 0x00004afe 
+ 00000910  0x00000510 rtn  0x00000034 
+ 00000911  0x00000511 jam  0x00000000 , 0x00004afe 
+ 00000912  0x00000512 branch  0x00000314 
+ 00000913  0x00000516 call  0x00000396 
+ 00000914  0x00000517 call  0x000003b6 
+ 00000915  0x00000518 call  0x0000039b 
+ 00000916  0x00000519 call  0x00004234 
+ 00000917  0x0000051a branch  0x0000423a 
+ 00000918  0x00000520 arg  0x00004807 , 0x00000013 
+ 00000919  0x00000521 arg  0x00000399 , 0x00000012 
+ 00000920  0x00000522 branch  0x0000336d 
+ 00000921  0x00000524 jam  0x00000000 , 0x00004806 
+ 00000922  0x00000525 rtn 
+ 00000923  0x00000528 fetch  0x00000001 , 0x000046f5 
+ 00000924  0x00000529 bbit1  0x00000004 , 0x00004394 
+ 00000925  0x0000052b call  0x00004083 
+ 00000926  0x0000052c beq  0x00000007 , 0x000003a7 
+ 00000927  0x0000052e fetch  0x00000001 , 0x00004685 
+ 00000928  0x0000052f store  0x00000001 , 0x000046da 
+ 00000929  0x00000530 fetch  0x00000001 , 0x000046db 
+ 00000930  0x00000531 rtneq  0x00000001 
+ 00000931  0x00000532 jam  0x00000001 , 0x000046db 
+ 00000932  0x00000533 arg  0x00000009 , 0x00000007 
+ 00000933  0x00000534 call  0x000043d2 
+ 00000934  0x00000535 branch  0x000043ca 
+ 00000935  0x00000537 jam  0x00000028 , 0x0000479e 
+ 00000936  0x00000538 call  0x000003aa 
+ 00000937  0x00000539 branch  0x000043b0 
+ 00000938  0x0000053c arg  0x000046da , 0x00000013 
+ 00000939  0x0000053d arg  0x000003ad , 0x00000012 
+ 00000940  0x0000053e branch  0x0000336d 
+ 00000941  0x00000541 fetch  0x00000002 , 0x00004682 
+ 00000942  0x00000542 isolate1  0x0000000b , 0x0000003f 
+ 00000943  0x00000543 call  0x000042d4 , 0x00000001 
+ 00000944  0x00000544 fetch  0x00000002 , 0x00004682 
+ 00000945  0x00000545 isolate1  0x00000007 , 0x0000003f 
+ 00000946  0x00000546 call  0x00004392 , 0x00000001 
+ 00000947  0x00000547 arg  0x00000009 , 0x00000007 
+ 00000948  0x00000548 call  0x000043ce 
+ 00000949  0x00000549 branch  0x000043b8 
+ 00000950  0x0000054c fetch  0x00000001 , 0x0000479d 
+ 00000951  0x0000054d rtn  0x00000034 
+ 00000952  0x0000054e fetch  0x00000001 , 0x0000479e 
+ 00000953  0x0000054f branch  0x000003bd , 0x00000034 
+ 00000954  0x00000550 increase  0xffffffff , 0x0000003f 
+ 00000955  0x00000551 store  0x00000001 , 0x0000479e 
+ 00000956  0x00000552 rtn 
+ 00000957  0x00000554 jam  0x00000000 , 0x0000479d 
+ 00000958  0x00000555 branch  0x0000340a 
+ 00000959  0x00000557 jam  0x00000001 , 0x0000479d 
+ 00000960  0x00000558 jam  0x00000028 , 0x0000479e 
+ 00000961  0x00000559 rtn 
+ 00000962  0x0000055e call  0x0000424a 
+ 00000963  0x00000560 fetch  0x00000001 , 0x000046e0 
+ 00000964  0x00000561 beq  0x00000006 , 0x000003c6 
+ 00000965  0x00000562 branch  0x00003d81 
+ 00000966  0x00000565 fetch  0x00000001 , 0x0000477a 
+ 00000967  0x00000566 call  0x000003cc , 0x00000034 
+ 00000968  0x00000567 fetch  0x00000001 , 0x0000477a 
+ 00000969  0x00000568 beq  0x00000001 , 0x00003d8a 
+ 00000970  0x0000056a beq  0x00000003 , 0x00003d8e 
+ 00000971  0x0000056b branch  0x00003d8c 
+ 00000972  0x0000056d jam  0x00000001 , 0x0000477a 
+ 00000973  0x0000056e rtn 
+ 00000974  0x00000571 disable  0x00000028 
+ 00000975  0x00000572 setarg  0x00000000 
+ 00000976  0x00000573 store  0x00000006 , 0x0000469b 
+ 00000977  0x00000574 call  0x00003fb5 
+ 00000978  0x00000575 call  0x00004079 
+ 00000979  0x00000576 call  0x0000407e 
+ 00000980  0x00000577 call  0x00004099 
+ 00000981  0x00000578 nrtn  0x00000028 
+ 00000982  0x00000579 branch  0x00003fa0 
+ 00000983  0x0000057c jam  0x00000000 , 0x0000479d 
+ 00000984  0x0000057d jam  0x00000000 , 0x0000479e 
+ 00000985  0x0000057e isolate1  0x00000026 , 0x00000000 
+ 00000986  0x0000057f call  0x000001cd , 0x00000001 
+ 00000987  0x00000580 branch  0x0000426d 
+ 00000988  0x00000584 call  0x000002d8 
+ 00000989  0x00000585 jam  0x00000000 , 0x0000479c 
+ 00000990  0x00000586 fetch  0x00000002 , 0x00004682 
+ 00000991  0x00000587 bbit1  0x0000000b , 0x000003e2 
+ 00000992  0x00000588 fetch  0x00000004 , 0x000046d3 
+ 00000993  0x00000589 bbit0  0x00000018 , 0x000003e2 
+ 00000994  0x0000058b call  0x00003418 
+ 00000995  0x0000058c fetch  0x00000002 , 0x00004687 
+ 00000996  0x0000058d store  0x00000002 , 0x000046ac 
+ 00000997  0x0000058e jam  0x00000006 , 0x0000016d 
+ 00000998  0x0000058f setarg  0x00000000 
+ 00000999  0x00000590 store  0x00000002 , 0x000046b0 
+ 00001000  0x00000591 store  0x00000002 , 0x000046ae 
+ 00001001  0x00000592 arg  0x00000007 , 0x00000007 
+ 00001002  0x00000593 call  0x000043ce 
+ 00001003  0x00000594 call  0x000043ca 
+ 00001004  0x00000595 branch  0x000042c4 
+ 00001005  0x00000599 setarg  0x00000000 
+ 00001006  0x0000059a store  0x00000002 , 0x000046ac 
+ 00001007  0x0000059b call  0x00000310 
+ 00001008  0x0000059c branch  0x000042cb 
+ 00001009  0x000005a0 hfetch  0x00000001 , 0x00008077 
+ 00001010  0x000005a1 and_into  0x000000fd , 0x0000003f 
+ 00001011  0x000005a2 hstore  0x00000001 , 0x00008077 
+ 00001012  0x000005a3 hfetcht  0x00000001 , 0x00008073 
+ 00001013  0x000005a4 or_into  0x00000002 , 0x00000002 
+ 00001014  0x000005a5 hstoret  0x00000001 , 0x00008073 
+ 00001015  0x000005a6 call  0x000063ee 
+ 00001016  0x000005a7 and_into  0x000000fd , 0x00000002 
+ 00001017  0x000005a8 nop  0x0000000d 
+ 00001018  0x000005a9 call  0x000063f2 
+ 00001019  0x000005aa hstoret  0x00000001 , 0x00008073 
+ 00001020  0x000005ab rtn 
+ 00001021  0x000005ae call  0x000062bc 
+ 00001022  0x000005af nbranch  0x00007ddb , 0x00000034 
+ 00001023  0x000005b0 fetch  0x00000001 , 0x00000a99 
+ 00001024  0x000005b1 bmark0  0x00000009 , 0x00007dd6 
+ 00001025  0x000005b2 beq  0x00000012 , 0x00000403 
+ 00001026  0x000005b3 branch  0x00007dca 
+ 00001027  0x000005b6 call  0x00005890 
+ 00001028  0x000005b7 nrtn  0x00000034 
+ 00001029  0x000005b8 branch  0x00005abf 
+ 00001030  0x000005bd jam  0x00000001 , 0x00004cf1 
+ 00001031  0x000005be jam  0x00000000 , 0x00004cee 
+ 00001032  0x000005bf rtn 
+ 00001033  0x000005c1 fetch  0x00000001 , 0x00004cee 
+ 00001034  0x000005c2 increase  0x00000001 , 0x0000003f 
+ 00001035  0x000005c3 store  0x00000001 , 0x00004cee 
+ 00001036  0x000005c4 rtn 
+ 00001037  0x000005c6 fetch  0x00000001 , 0x00004cee 
+ 00001038  0x000005c7 sub  0x0000003f , 0x00000002 , 0x0000003e 
+ 00001039  0x000005c8 ncall  0x00000415 , 0x00000002 
+ 00001040  0x000005c9 fetch  0x00000001 , 0x00004cee 
+ 00001041  0x000005ca rtneq  0x00000000 
+ 00001042  0x000005cb increase  0xffffffff , 0x0000003f 
+ 00001043  0x000005cc store  0x00000001 , 0x00004cee 
+ 00001044  0x000005cd rtn 
+ 00001045  0x000005cf jam  0x00000003 , 0x00004cee 
+ 00001046  0x000005d0 rtn 
+ 00001047  0x000005d3 rtn 
+ 00001048  0x000005d4 fetch  0x00000002 , 0x00004682 
+ 00001049  0x000005d5 rtnbit1  0x0000000b 
+ 00001050  0x000005d6 rtnbit1  0x00000007 
+ 00001051  0x000005d7 rtnbit1  0x00000006 
+ 00001052  0x000005d9 arg  0x00004c77 , 0x00000011 
+ 00001053  0x000005da call  0x000002a8 
+ 00001054  0x000005db storet  0x00000001 , 0x00004cef 
+ 00001055  0x000005dd setarg  0x00000082 
+ 00001056  0x000005de bmark1  0x00000026 , 0x00000422 
+ 00001057  0x000005df setarg  0x00000080 
+ 00001058  0x000005e1 isub  0x00000002 , 0x0000003e 
+ 00001059  0x000005e2 nbranch  0x0000043a , 0x00000002 
+ 00001060  0x000005e4 fetch  0x00000001 , 0x00004cee 
+ 00001061  0x000005e5 sub  0x0000003f , 0x00000002 , 0x0000003e 
+ 00001062  0x000005e6 nbranch  0x0000042a , 0x00000002 
+ 00001063  0x000005e7 fetch  0x00000001 , 0x00004cee 
+ 00001064  0x000005e8 beq  0x00000000 , 0x0000043b 
+ 00001065  0x000005e9 rtn 
+ 00001066  0x000005ec fetch  0x00000001 , 0x00004cee 
+ 00001067  0x000005ed rtnne  0x00000020 
+ 00001068  0x000005ee jam  0x00000000 , 0x00004cee 
+ 00001069  0x000005f0 fetcht  0x00000001 , 0x00004cef 
+ 00001070  0x000005f1 setarg  0x00000077 
+ 00001071  0x000005f2 bmark1  0x00000026 , 0x00000431 
+ 00001072  0x000005f3 setarg  0x00000075 
+ 00001073  0x000005f5 isub  0x00000002 , 0x0000003e 
+ 00001074  0x000005f6 nrtn  0x00000002 
+ 00001075  0x000005f7 fetch  0x00000001 , 0x00004cf1 
+ 00001076  0x000005f8 beq  0x00000000 , 0x00000442 
+ 00001077  0x000005f9 increase  0xffffffff , 0x0000003f 
+ 00001078  0x000005fa store  0x00000001 , 0x00004cf1 
+ 00001079  0x000005fb beq  0x00000000 , 0x00000442 
+ 00001080  0x000005fe jam  0x00000000 , 0x000041de 
+ 00001081  0x000005ff rtn 
+ 00001082  0x00000602 jam  0x00000000 , 0x00004cee 
+ 00001083  0x00000604 fetch  0x00000001 , 0x00004cf1 
+ 00001084  0x00000605 beq  0x00000002 , 0x00000440 
+ 00001085  0x00000606 increase  0x00000001 , 0x0000003f 
+ 00001086  0x00000607 store  0x00000001 , 0x00004cf1 
+ 00001087  0x00000608 beq  0x00000001 , 0x00000438 
+ 00001088  0x0000060b jam  0x00000002 , 0x000041de 
+ 00001089  0x0000060c rtn 
+ 00001090  0x0000060f jam  0x00000004 , 0x000041de 
+ 00001091  0x00000610 rtn 
+ 00001092  0x00000614 storet  0x00000001 , 0x00000017 
+ 00001093  0x00000615 add  0x00000002 , 0x00000000 , 0x00000011 
+ 00001094  0x00000616 call  0x00002981 
+ 00001095  0x00000617 setarg  0x00000500 
+ 00001096  0x00000618 call  0x00002a8f 
+ 00001097  0x0000061a jam  0x00000001 , 0x00008906 
+ 00001098  0x0000061b jam  0x0000003c , 0x00008900 
+ 00001099  0x0000061c jam  0x000000e0 , 0x00008901 
+ 00001100  0x0000061d nop  0x0000000a 
+ 00001101  0x0000061e jam  0x00000001 , 0x00008902 
+ 00001102  0x0000061f jam  0x0000003d , 0x00008902 
+ 00001103  0x00000620 nop  0x0000000a 
+ 00001104  0x00000621 jam  0x000000b7 , 0x00008903 
+ 00001105  0x00000622 nop  0x0000000a 
+ 00001106  0x00000623 jam  0x0000007d , 0x00008902 
+ 00001107  0x00000624 fetch  0x00000001 , 0x000041de 
+ 00001108  0x00000627 beq  0x00000002 , 0x0000045c 
+ 00001109  0x00000629 beq  0x00000004 , 0x00000461 
+ 00001110  0x0000062a beq  0x00000020 , 0x00000470 
+ 00001111  0x0000062d call  0x00000466 
+ 00001112  0x0000062f jam  0x000000d0 , 0x00008955 
+ 00001113  0x00000630 jam  0x000000e0 , 0x00008956 
+ 00001114  0x00000632 jam  0x0000006c , 0x00008958 
+ 00001115  0x00000634 branch  0x0000294b 
+ 00001116  0x00000641 call  0x0000046b 
+ 00001117  0x00000643 jam  0x000000d0 , 0x00008955 
+ 00001118  0x00000644 jam  0x000000e0 , 0x00008956 
+ 00001119  0x00000646 jam  0x0000003c , 0x00008958 
+ 00001120  0x00000648 branch  0x00002953 
+ 00001121  0x00000655 call  0x00000466 
+ 00001122  0x00000657 jam  0x000000d0 , 0x00008955 
+ 00001123  0x00000658 jam  0x000000c0 , 0x00008956 
+ 00001124  0x0000065a jam  0x0000006c , 0x00008958 
+ 00001125  0x0000065c branch  0x0000295b 
+ 00001126  0x0000065f jam  0x0000005b , 0x0000894c 
+ 00001127  0x00000660 jam  0x00000096 , 0x0000894d 
+ 00001128  0x00000661 jam  0x0000002c , 0x0000894e 
+ 00001129  0x00000662 jam  0x00000046 , 0x0000894f 
+ 00001130  0x00000663 rtn 
+ 00001131  0x00000666 jam  0x000000fb , 0x0000894c 
+ 00001132  0x00000667 jam  0x000000ef , 0x0000894d 
+ 00001133  0x00000668 jam  0x000000ec , 0x0000894e 
+ 00001134  0x00000669 jam  0x0000005e , 0x0000894f 
+ 00001135  0x0000066a rtn 
+ 00001136  0x0000066e jam  0x000000c5 , 0x00008956 
+ 00001137  0x0000066f jam  0x000000d0 , 0x00008955 
+ 00001138  0x00000670 rtn 
+ 00001139  0x00000673 force  0x00000008 , 0x00000015 
+ 00001140  0x00000674 branch  0x000028fa 
+ 00001141  0x00000681 fetch  0x00000001 , 0x00004b2e 
+ 00001142  0x00000682 increase  0x00000001 , 0x0000003f 
+ 00001143  0x00000683 store  0x00000001 , 0x00004b2e 
+ 00001144  0x00000684 sub  0x0000003f , 0x00000032 , 0x0000003e 
+ 00001145  0x00000685 branch  0x00000481 , 0x00000002 
+ 00001146  0x00000686 sub  0x0000003f , 0x00000064 , 0x0000003e 
+ 00001147  0x00000687 branch  0x0000048c , 0x00000002 
+ 00001148  0x00000688 sub  0x0000003f , 0x00000096 , 0x0000003e 
+ 00001149  0x00000689 branch  0x00000494 , 0x00000002 
+ 00001150  0x0000068a sub  0x0000003f , 0x000000c8 , 0x0000003e 
+ 00001151  0x0000068b branch  0x0000049c , 0x00000002 
+ 00001152  0x0000068c rtn 
+ 00001153  0x0000068e setarg  0x00000005 
+ 00001154  0x0000068f store  0x00000002 , 0x00004b28 
+ 00001155  0x00000690 setarg  0x00000000 
+ 00001156  0x00000691 store  0x00000002 , 0x00004b2a 
+ 00001157  0x00000692 store  0x00000001 , 0x00004b2c 
+ 00001158  0x00000693 store  0x00000001 , 0x00004b27 
+ 00001159  0x00000694 store  0x00000001 , 0x00004b2d 
+ 00001160  0x00000696 enable  0x00000028 
+ 00001161  0x00000697 arg  0x00000007 , 0x00000011 
+ 00001162  0x00000698 arg  0x00004b27 , 0x00000012 
+ 00001163  0x00000699 rtn 
+ 00001164  0x0000069b setarg  0x00000005 
+ 00001165  0x0000069c store  0x00000002 , 0x00004b2a 
+ 00001166  0x0000069d setarg  0x00000000 
+ 00001167  0x0000069e store  0x00000002 , 0x00004b28 
+ 00001168  0x0000069f store  0x00000001 , 0x00004b2c 
+ 00001169  0x000006a0 store  0x00000001 , 0x00004b27 
+ 00001170  0x000006a1 store  0x00000001 , 0x00004b2d 
+ 00001171  0x000006a2 branch  0x00000488 
+ 00001172  0x000006a4 setarg  0x0000fffb 
+ 00001173  0x000006a5 store  0x00000002 , 0x00004b28 
+ 00001174  0x000006a6 setarg  0x00000000 
+ 00001175  0x000006a7 store  0x00000002 , 0x00004b2a 
+ 00001176  0x000006a8 store  0x00000001 , 0x00004b2c 
+ 00001177  0x000006a9 store  0x00000001 , 0x00004b27 
+ 00001178  0x000006aa store  0x00000001 , 0x00004b2d 
+ 00001179  0x000006ab branch  0x00000488 
+ 00001180  0x000006ad fetch  0x00000001 , 0x00004b2e 
+ 00001181  0x000006ae beq  0x000000c8 , 0x000004a6 
+ 00001182  0x000006af setarg  0x0000fffb 
+ 00001183  0x000006b0 store  0x00000002 , 0x00004b2a 
+ 00001184  0x000006b1 setarg  0x00000000 
+ 00001185  0x000006b2 store  0x00000002 , 0x00004b28 
+ 00001186  0x000006b3 store  0x00000001 , 0x00004b2c 
+ 00001187  0x000006b4 store  0x00000001 , 0x00004b27 
+ 00001188  0x000006b5 store  0x00000001 , 0x00004b2d 
+ 00001189  0x000006b6 branch  0x00000488 
+ 00001190  0x000006b8 jam  0x00000000 , 0x00004b2e 
+ 00001191  0x000006b9 branch  0x0000049e 
+ 00008192  0x000006c3 call  0x00002abc 
+ 00008193  0x000006c6 bpatch  0x00000000 , 0x00004000 
+ 00008194  0x000006c7 clear_stack 
+ 00008195  0x000006c8 call  0x0000640d 
+ 00008196  0x000006c9 call  0x0000296c 
+ 00008197  0x000006ca call  0x000065a3 
+ 00008198  0x000006cb call  0x00002a96 
+ 00008199  0x000006cc call  0x00004d6a 
+ 00008200  0x000006cd bpatch  0x00000001 , 0x00004000 
+ 00008201  0x000006ce call  0x00006a03 
+ 00008202  0x000006cf call  0x00005cf6 
+ 00008203  0x000006d0 call  0x00007ccc 
+ 00008204  0x000006d1 call  0x000032d8 
+ 00008205  0x000006d2 ncall  0x0000689c , 0x0000002b 
+ 00008206  0x000006d3 bpatch  0x00000002 , 0x00004000 
+ 00008207  0x000006d4 call  0x000032e3 , 0x0000002b 
+ 00008208  0x000006d5 call  0x0000756a 
+ 00008209  0x000006d7 call  0x00002b41 , 0x0000002b 
+ 00008210  0x000006d9 bpatch  0x00000003 , 0x00004000 
+ 00008211  0x000006da call  0x000076dc 
+ 00008212  0x000006db call  0x00007aaf 
+ 00008213  0x000006dc call  0x0000756d 
+ 00008214  0x000006dd call  0x0000535c 
+ 00008215  0x000006de bpatch  0x00000004 , 0x00004000 
+ 00008216  0x000006df call  0x00002038 
+ 00008217  0x000006e0 call  0x000032ed 
+ 00008218  0x000006e1 call  0x0000208f 
+ 00008219  0x000006e2 call  0x000022f8 
+ 00008220  0x000006e3 call  0x0000236a 
+ 00008221  0x000006e4 call  0x00002021 
+ 00008222  0x000006e5 call  0x00002b6a 
+ 00008223  0x000006e6 call  0x00002c72 
+ 00008224  0x000006e7 branch  0x00002012 
+ 00008225  0x000006ea call  0x00002026 
+ 00008226  0x000006eb rtnmark0  0x00000009 
+ 00008227  0x000006ec set0  0x00000009 , 0x00000000 
+ 00008228  0x000006ed call  0x00002223 
+ 00008229  0x000006ee branch  0x000053ce 
+ 00008230  0x000006f1 bpatch  0x00000005 , 0x00004000 
+ 00008231  0x000006f2 call  0x0000225e 
+ 00008232  0x000006f3 nbranch  0x0000202f , 0x00000005 
+ 00008233  0x000006f4 call  0x0000220a 
+ 00008234  0x000006f5 add  0x00000011 , 0x00000001 , 0x00000006 
+ 00008235  0x000006f6 ifetch  0x00000001 , 0x00000006 
+ 00008236  0x000006f7 bbit1  0x00000000 , 0x00005360 
+ 00008237  0x000006f8 bbit1  0x00000001 , 0x00002166 
+ 00008238  0x000006f9 branch  0x000023cf 
+ 00008239  0x000006fb call  0x0000222b 
+ 00008240  0x000006fc copy  0x00000039 , 0x0000003e 
+ 00008241  0x000006fd rtn  0x00000005 
+ 00008242  0x000006fe call  0x0000220a 
+ 00008243  0x000006ff fetch  0x00000001 , 0x00000030 
+ 00008244  0x00000700 bbit1  0x00000003 , 0x000020d3 
+ 00008245  0x00000701 fetch  0x00000001 , 0x00000031 
+ 00008246  0x00000702 bbit1  0x00000001 , 0x00002166 
+ 00008247  0x00000703 branch  0x000023cf 
+ 00008248  0x0000070c fetch  0x00000001 , 0x000041ce 
+ 00008249  0x0000070d rtn  0x00000034 
+ 00008250  0x0000070e beq  0x00000001 , 0x00002048 
+ 00008251  0x0000070f beq  0x00000002 , 0x0000204d 
+ 00008252  0x00000710 beq  0x00000003 , 0x00002050 
+ 00008253  0x00000711 beq  0x00000005 , 0x00002055 
+ 00008254  0x00000712 beq  0x0000001b , 0x00002045 
+ 00008255  0x00000713 call  0x00002257 
+ 00008256  0x00000714 rtn  0x00000005 
+ 00008257  0x00000715 call  0x0000225a 
+ 00008258  0x00000716 rtn  0x00000005 
+ 00008259  0x00000718 jam  0x00000000 , 0x000041ce 
+ 00008260  0x00000719 rtn 
+ 00008261  0x0000071c jam  0x0000001b , 0x0000049b 
+ 00008262  0x0000071d jam  0x00000000 , 0x000041ce 
+ 00008263  0x0000071e rtn 
+ 00008264  0x00000721 set1  0x0000001c , 0x00000000 
+ 00008265  0x00000722 set0  0x0000001e , 0x00000000 
+ 00008266  0x00000723 jam  0x000000ff , 0x0000008f 
+ 00008267  0x00000724 jam  0x0000001f , 0x0000008d 
+ 00008268  0x00000725 branch  0x00002043 
+ 00008269  0x00000728 set0  0x0000001c , 0x00000000 
+ 00008270  0x00000729 force  0x00000000 , 0x0000001b 
+ 00008271  0x0000072a branch  0x00002043 
+ 00008272  0x0000072d call  0x0000225a 
+ 00008273  0x0000072e rtn  0x00000005 
+ 00008274  0x0000072f force  0x00000001 , 0x00000002 
+ 00008275  0x00000730 jam  0x00000005 , 0x0000016e 
+ 00008276  0x00000731 branch  0x0000205c 
+ 00008277  0x00000734 bpatch  0x00000006 , 0x00004000 
+ 00008278  0x00000736 fetch  0x00000006 , 0x000041d0 
+ 00008279  0x00000737 branch  0x00002043 , 0x00000034 
+ 00008280  0x00000738 jam  0x00000001 , 0x00004681 
+ 00008281  0x0000073a jam  0x00000003 , 0x00000055 
+ 00008282  0x0000073b branch  0x0000205b 
+ 00008283  0x0000073e force  0x00000025 , 0x00000002 
+ 00008284  0x00000740 bpatch  0x00000007 , 0x00004000 
+ 00008285  0x00000741 fetch  0x00000001 , 0x000000f1 
+ 00008286  0x00000742 branch  0x00002062 , 0x00000034 
+ 00008287  0x00000743 lshift3  0x0000003f , 0x0000003f 
+ 00008288  0x00000744 lshift4  0x0000003f , 0x0000003f 
+ 00008289  0x00000745 increase  0xffffffff , 0x0000003f 
+ 00008290  0x00000747 store  0x00000001 , 0x000040a6 
+ 00008291  0x00000748 store  0x00000001 , 0x000000f0 
+ 00008292  0x00000749 jam  0x0000001f , 0x0000008e 
+ 00008293  0x0000074a set0  0x0000000c , 0x00000000 
+ 00008294  0x0000074b call  0x0000223b 
+ 00008295  0x0000074c nbranch  0x00002083 , 0x00000005 
+ 00008296  0x0000074d call  0x00002a6f 
+ 00008297  0x0000074e store  0x00000001 , 0x00000077 
+ 00008298  0x0000074f storet  0x00000001 , 0x0000007c 
+ 00008299  0x00000750 fetch  0x00000006 , 0x000041d0 
+ 00008300  0x00000751 store  0x00000006 , 0x00000040 
+ 00008301  0x00000752 bpatch  0x00000008 , 0x00004001 
+ 00008302  0x00000753 call  0x00007f15 
+ 00008303  0x00000754 force  0x00000000 , 0x0000003f 
+ 00008304  0x00000755 compare  0x00000001 , 0x00000002 , 0x000000ff 
+ 00008305  0x00000756 nsetflag  0x00000001 , 0x00000005 , 0x0000003f 
+ 00008306  0x00000757 set1  0x00000003 , 0x0000003f 
+ 00008307  0x00000758 store  0x00000001 , 0x00000030 
+ 00008308  0x00000759 jam  0x00000003 , 0x00000a99 
+ 00008309  0x0000075a call  0x00007d86 
+ 00008310  0x0000075b force  0x00000000 , 0x0000003f 
+ 00008311  0x0000075c setflag  0x00000001 , 0x00000004 , 0x0000003f 
+ 00008312  0x0000075d store  0x00000001 , 0x0000004c 
+ 00008313  0x0000075e setarg  0x00000000 
+ 00008314  0x0000075f set1  0x00000001 , 0x0000003f 
+ 00008315  0x00000760 store  0x00000001 , 0x00000031 
+ 00008316  0x00000761 enable  0x00000029 
+ 00008317  0x00000762 call  0x00002223 
+ 00008318  0x00000763 disable  0x00000029 
+ 00008319  0x00000764 force  0x00000003 , 0x00000007 
+ 00008320  0x00000765 fetch  0x00000002 , 0x000040b9 
+ 00008321  0x00000766 call  0x00007f08 
+ 00008322  0x00000767 branch  0x00002043 
+ 00008323  0x00000769 bpatch  0x00000009 , 0x00004001 
+ 00008324  0x0000076a fetch  0x00000006 , 0x000041d0 
+ 00008325  0x0000076b store  0x00000006 , 0x00000040 
+ 00008326  0x0000076c compare  0x00000001 , 0x00000002 , 0x000000ff 
+ 00008327  0x0000076d branch  0x00002089 , 0x00000001 
+ 00008328  0x0000076e branch  0x00002043 
+ 00008329  0x00000770 arg  0x00000101 , 0x00000005 
+ 00008330  0x00000771 arg  0x00000008 , 0x00000039 
+ 00008331  0x00000772 call  0x00007ec6 
+ 00008332  0x00000773 jam  0x00000004 , 0x00000a99 
+ 00008333  0x00000774 call  0x00007d86 
+ 00008334  0x00000775 branch  0x00002043 
+ 00008335  0x0000077d rtnmark0  0x0000001c 
+ 00008336  0x0000077e force  0x00000001 , 0x00000007 
+ 00008337  0x0000077f call  0x00007f16 
+ 00008338  0x00000780 nsetflag  0x00000034 , 0x0000001c , 0x00000000 
+ 00008339  0x00000781 nbranch  0x00002095 , 0x00000034 
+ 00008340  0x00000782 rtn 
+ 00008341  0x00000787 bpatch  0x0000000a , 0x00004001 
+ 00008342  0x00000788 fetcht  0x00000002 , 0x000040bb 
+ 00008343  0x00000789 force  0x00000004 , 0x00000007 
+ 00008344  0x0000078a call  0x0000271c 
+ 00008345  0x0000078b rtn  0x00000028 
+ 00008346  0x0000078c call  0x000028a4 
+ 00008347  0x0000078d force  0x00000000 , 0x00000024 
+ 00008348  0x0000078f rtn  0x00000003 
+ 00008349  0x00000790 set0  0x0000000b , 0x00000000 
+ 00008350  0x00000791 set0  0x00000000 , 0x00000000 
+ 00008351  0x00000793 add  0x00000022 , 0x00000001 , 0x00000021 
+ 00008352  0x00000794 isolate1  0x0000001e , 0x00000000 
+ 00008353  0x00000795 setflag  0x00000001 , 0x00000002 , 0x00000024 
+ 00008354  0x00000796 compare  0x00000000 , 0x00000021 , 0x00000002 
+ 00008355  0x00000797 nbranch  0x000020be , 0x00000001 
+ 00008356  0x0000079a bpatch  0x0000000b , 0x00004001 
+ 00008357  0x0000079b fetch  0x00000001 , 0x00000012 
+ 00008358  0x0000079c increase  0x00000001 , 0x0000003f 
+ 00008359  0x0000079d store  0x00000001 , 0x00000012 
+ 00008360  0x0000079e call  0x000028d8 
+ 00008361  0x0000079f call  0x000028d2 
+ 00008362  0x000007a0 call  0x000028f2 
+ 00008363  0x000007a1 call  0x00002a51 
+ 00008364  0x000007a2 call  0x00002a56 
+ 00008365  0x000007a3 call  0x00002a64 
+ 00008366  0x000007a4 call  0x0000264d 
+ 00008367  0x000007a5 call  0x000020b1 
+ 00008368  0x000007a6 branch  0x0000209c 
+ 00008369  0x000007a9 bpatch  0x0000000c , 0x00004001 
+ 00008370  0x000007aa fetch  0x00000001 , 0x0000008d 
+ 00008371  0x000007ab increase  0xffffffff , 0x0000003f 
+ 00008372  0x000007ac store  0x00000001 , 0x0000008d 
+ 00008373  0x000007ad rtn  0x00000002 
+ 00008374  0x000007ae jam  0x0000001f , 0x0000008d 
+ 00008375  0x000007af fetch  0x00000001 , 0x0000008f 
+ 00008376  0x000007b0 increase  0xffffffff , 0x0000003f 
+ 00008377  0x000007b1 store  0x00000001 , 0x0000008f 
+ 00008378  0x000007b2 rtn  0x00000002 
+ 00008379  0x000007b3 setflip  0x0000001e , 0x00000000 
+ 00008380  0x000007b4 jam  0x000000ff , 0x0000008f 
+ 00008381  0x000007b5 rtn 
+ 00008382  0x000007b8 bpatch  0x0000000d , 0x00004001 
+ 00008383  0x000007b9 call  0x000028d8 
+ 00008384  0x000007ba call  0x000028cc 
+ 00008385  0x000007bb call  0x000028f2 
+ 00008386  0x000007bc call  0x00002a5b 
+ 00008387  0x000007bd call  0x000029eb 
+ 00008388  0x000007be call  0x00002a0d 
+ 00008389  0x000007bf branch  0x000020c8 , 0x00000018 
+ 00008390  0x000007c0 call  0x000020b1 
+ 00008391  0x000007c1 branch  0x0000209f 
+ 00008392  0x000007c3 bpatch  0x0000000e , 0x00004001 
+ 00008393  0x000007c4 call  0x000029bb 
+ 00008394  0x000007c5 call  0x00002a6b 
+ 00008395  0x000007c6 call  0x0000251e 
+ 00008396  0x000007c7 set0  0x00000001 , 0x00000000 
+ 00008397  0x000007c8 rtnmark0  0x0000000b 
+ 00008398  0x000007ca bpatch  0x0000000f , 0x00004001 
+ 00008399  0x000007cc fetch  0x00000001 , 0x00000013 
+ 00008400  0x000007cd increase  0x00000001 , 0x0000003f 
+ 00008401  0x000007ce store  0x00000001 , 0x00000013 
+ 00008402  0x000007cf rtn 
+ 00008403  0x000007d8 bpatch  0x00000010 , 0x00004002 
+ 00008404  0x000007d9 enable  0x00000029 
+ 00008405  0x000007da enable  0x00000030 
+ 00008406  0x000007db fetch  0x00000002 , 0x000040b5 
+ 00008407  0x000007dc branch  0x000020db , 0x00000034 
+ 00008408  0x000007dd force  0x00000008 , 0x00000007 
+ 00008409  0x000007de call  0x00007f16 
+ 00008410  0x000007df nrtn  0x00000034 
+ 00008411  0x000007e1 bpatch  0x00000011 , 0x00004002 
+ 00008412  0x000007e2 fetcht  0x00000002 , 0x000040b7 
+ 00008413  0x000007e3 force  0x00000028 , 0x00000007 
+ 00008414  0x000007e4 call  0x0000271c 
+ 00008415  0x000007e5 branch  0x00002114 , 0x00000028 
+ 00008416  0x000007e6 force  0x00000003 , 0x00000007 
+ 00008417  0x000007e7 call  0x00007f16 
+ 00008418  0x000007e8 nbranch  0x000020f0 , 0x00000034 
+ 00008419  0x000007e9 fetch  0x00000001 , 0x0000004c 
+ 00008420  0x000007ea bbit1  0x00000004 , 0x000020e6 
+ 00008421  0x000007eb branch  0x000020e9 
+ 00008422  0x000007ed arg  0x00000101 , 0x00000005 
+ 00008423  0x000007ee arg  0x00000008 , 0x00000039 
+ 00008424  0x000007ef call  0x00007ec6 
+ 00008425  0x000007f1 bpatch  0x00000012 , 0x00004002 
+ 00008426  0x000007f2 jam  0x00000000 , 0x00000030 
+ 00008427  0x000007f3 call  0x00005cf7 
+ 00008428  0x000007f4 jam  0x00000000 , 0x00004681 
+ 00008429  0x000007f5 jam  0x00000013 , 0x00000a99 
+ 00008430  0x000007f6 call  0x00007d86 
+ 00008431  0x000007f7 branch  0x00002114 
+ 00008432  0x000007fa bpatch  0x00000013 , 0x00004002 
+ 00008433  0x000007fb force  0x00000000 , 0x0000000b 
+ 00008434  0x000007fc until  0x00000023 , 0x00000026 
+ 00008435  0x000007fd fetch  0x00000001 , 0x000000f2 
+ 00008436  0x000007fe increase  0xffffffff , 0x0000003f 
+ 00008437  0x000007ff ixor  0x00000022 , 0x0000003f 
+ 00008438  0x00000800 compare  0x00000000 , 0x0000003f , 0x00000003 
+ 00008439  0x00000801 nbranch  0x000020f0 , 0x00000001 
+ 00008440  0x00000802 deposit  0x00000004 
+ 00008441  0x00000803 store  0x00000001 , 0x00000181 
+ 00008442  0x00000804 force  0x00000000 , 0x00000026 
+ 00008443  0x00000805 force  0x00000000 , 0x00000024 
+ 00008444  0x00000808 bpatch  0x00000014 , 0x00004002 
+ 00008445  0x00000809 branch  0x00002114 , 0x00000003 
+ 00008446  0x0000080a call  0x000028dc 
+ 00008447  0x0000080b arg  0x00000600 , 0x0000000b 
+ 00008448  0x0000080c until  0x00000023 , 0x00000026 
+ 00008449  0x0000080e bpatch  0x00000015 , 0x00004002 
+ 00008450  0x0000080f fetch  0x00000004 , 0x000000f2 
+ 00008451  0x00000810 iforce  0x00000021 
+ 00008452  0x00000811 increase  0x00000001 , 0x0000003f 
+ 00008453  0x00000812 store  0x00000004 , 0x000000f2 
+ 00008454  0x00000813 isolate1  0x0000000c , 0x00000000 
+ 00008455  0x00000814 setflag  0x00000001 , 0x00000002 , 0x00000024 
+ 00008456  0x00000815 compare  0x00000000 , 0x00000021 , 0x00000002 
+ 00008457  0x00000816 nbranch  0x00002128 , 0x00000001 
+ 00008458  0x00000817 fetch  0x00000001 , 0x0000000c 
+ 00008459  0x00000818 increase  0x00000001 , 0x0000003f 
+ 00008460  0x00000819 store  0x00000001 , 0x0000000c 
+ 00008461  0x0000081a call  0x000028d2 
+ 00008462  0x0000081b call  0x00002a51 
+ 00008463  0x0000081c call  0x00002a56 
+ 00008464  0x0000081d call  0x00002a64 
+ 00008465  0x0000081e call  0x0000264d 
+ 00008466  0x0000081f call  0x0000211a 
+ 00008467  0x00000820 branch  0x000020fc 
+ 00008468  0x00000822 bpatch  0x00000016 , 0x00004002 
+ 00008469  0x00000823 disable  0x00000029 
+ 00008470  0x00000824 fetch  0x00000002 , 0x000040b5 
+ 00008471  0x00000825 rtn  0x00000034 
+ 00008472  0x00000826 force  0x00000008 , 0x00000007 
+ 00008473  0x00000827 branch  0x00007f08 
+ 00008474  0x0000082a bpatch  0x00000017 , 0x00004002 
+ 00008475  0x0000082b fetch  0x00000001 , 0x0000008e 
+ 00008476  0x0000082c increase  0xffffffff , 0x0000003f 
+ 00008477  0x0000082d store  0x00000001 , 0x0000008e 
+ 00008478  0x0000082e rtn  0x00000002 
+ 00008479  0x0000082f jam  0x0000001f , 0x0000008e 
+ 00008480  0x00000830 fetch  0x00000001 , 0x000000f0 
+ 00008481  0x00000831 increase  0xffffffff , 0x0000003f 
+ 00008482  0x00000832 store  0x00000001 , 0x000000f0 
+ 00008483  0x00000833 rtn  0x00000002 
+ 00008484  0x00000834 setflip  0x0000000c , 0x00000000 
+ 00008485  0x00000835 fetch  0x00000001 , 0x000040a6 
+ 00008486  0x00000836 store  0x00000001 , 0x000000f0 
+ 00008487  0x00000837 rtn 
+ 00008488  0x0000083a bpatch  0x00000018 , 0x00004003 
+ 00008489  0x0000083b call  0x000028cc 
+ 00008490  0x0000083c call  0x00002a5b 
+ 00008491  0x0000083d call  0x000029eb 
+ 00008492  0x0000083e call  0x00002a0d 
+ 00008493  0x0000083f branch  0x00002130 , 0x00000018 
+ 00008494  0x00000840 call  0x0000211a 
+ 00008495  0x00000841 branch  0x00002101 
+ 00008496  0x00000843 call  0x0000264d 
+ 00008497  0x00000844 fetch  0x00000001 , 0x0000000d 
+ 00008498  0x00000845 increase  0x00000001 , 0x0000003f 
+ 00008499  0x00000846 store  0x00000001 , 0x0000000d 
+ 00008500  0x00000847 force  0x00000000 , 0x0000001b 
+ 00008501  0x00000848 fetch  0x00000004 , 0x000000f2 
+ 00008502  0x0000084a bpatch  0x00000019 , 0x00004003 
+ 00008503  0x0000084b call  0x00002a4f 
+ 00008504  0x0000084c call  0x000028dc 
+ 00008505  0x0000084d increase  0x00000001 , 0x00000026 
+ 00008506  0x0000084f and_into  0x000001fd , 0x00000021 
+ 00008507  0x00000850 and_into  0x000001fc , 0x00000024 
+ 00008508  0x00000851 call  0x000028d2 
+ 00008509  0x00000852 call  0x00002a51 
+ 00008510  0x00000853 call  0x00002a56 
+ 00008511  0x00000854 call  0x00002a64 
+ 00008512  0x00000855 deposit  0x00000022 
+ 00008513  0x00000856 store  0x00000004 , 0x00000161 
+ 00008514  0x00000857 force  0x00000000 , 0x00000004 
+ 00008515  0x00000858 force  0x00000002 , 0x00000001 
+ 00008516  0x00000859 call  0x00002a6b 
+ 00008517  0x0000085a call  0x00002766 
+ 00008518  0x0000085c bpatch  0x0000001a , 0x00004003 
+ 00008519  0x0000085d call  0x00002a4d 
+ 00008520  0x0000085e or_into  0x00000002 , 0x00000021 
+ 00008521  0x0000085f and_into  0x000001fc , 0x00000024 
+ 00008522  0x00000860 call  0x000028cc 
+ 00008523  0x00000861 call  0x00002a5b 
+ 00008524  0x00000862 call  0x000029eb 
+ 00008525  0x00000863 call  0x00002a0d 
+ 00008526  0x00000864 call  0x0000264d , 0x00000018 
+ 00008527  0x00000865 branch  0x00002155 , 0x00000018 
+ 00008528  0x00000866 fetch  0x00000001 , 0x00000010 
+ 00008529  0x00000867 branch  0x000020fc , 0x00000034 
+ 00008530  0x00000868 increase  0xffffffff , 0x0000003f 
+ 00008531  0x00000869 store  0x00000001 , 0x00000010 
+ 00008532  0x0000086a branch  0x00002136 
+ 00008533  0x0000086d bpatch  0x0000001b , 0x00004003 
+ 00008534  0x0000086e fetch  0x00000001 , 0x0000000e 
+ 00008535  0x0000086f increase  0x00000001 , 0x0000003f 
+ 00008536  0x00000870 store  0x00000001 , 0x0000000e 
+ 00008537  0x00000871 call  0x00002435 
+ 00008538  0x00000873 call  0x000022f2 
+ 00008539  0x00000874 branch  0x0000215f , 0x00000018 
+ 00008540  0x00000875 call  0x00002455 
+ 00008541  0x00000876 nbranch  0x0000215a , 0x00000034 
+ 00008542  0x00000877 branch  0x000020fc 
+ 00008543  0x0000087a bpatch  0x0000001c , 0x00004003 
+ 00008544  0x0000087b fetch  0x00000001 , 0x00000030 
+ 00008545  0x0000087c set0  0x00000003 , 0x0000003f 
+ 00008546  0x0000087d store  0x00000001 , 0x00000030 
+ 00008547  0x0000087e call  0x00002440 
+ 00008548  0x0000087f disable  0x00000029 
+ 00008549  0x00000880 rtn 
+ 00008550  0x00000884 bpatch  0x0000001d , 0x00004003 
+ 00008551  0x00000885 enable  0x00000029 
+ 00008552  0x00000886 enable  0x00000030 
+ 00008553  0x00000887 call  0x000021e1 
+ 00008554  0x00000888 rtn  0x00000028 
+ 00008555  0x00000889 call  0x00002c69 
+ 00008556  0x0000088a call  0x00002a4f 
+ 00008557  0x0000088b add  0x00000022 , 0x00000001 , 0x00000021 
+ 00008558  0x0000088c call  0x000028e2 
+ 00008559  0x0000088d force  0x00000003 , 0x00000024 
+ 00008560  0x0000088e call  0x00006cc2 
+ 00008561  0x0000088f call  0x00002489 
+ 00008562  0x00000890 call  0x000028d2 
+ 00008563  0x00000891 call  0x00002a51 
+ 00008564  0x00000892 call  0x00002a56 
+ 00008565  0x00000893 call  0x00002a64 
+ 00008566  0x00000894 call  0x00002762 
+ 00008567  0x00000896 bpatch  0x0000001e , 0x00004003 
+ 00008568  0x00000897 call  0x00005d08 
+ 00008569  0x00000898 call  0x000022e4 
+ 00008570  0x00000899 nbranch  0x00002180 , 0x0000002d 
+ 00008571  0x0000089a call  0x00002a88 
+ 00008572  0x0000089b call  0x00002728 
+ 00008573  0x0000089c fetch  0x00000001 , 0x0000000f 
+ 00008574  0x0000089d increase  0x00000001 , 0x0000003f 
+ 00008575  0x0000089e store  0x00000001 , 0x0000000f 
+ 00008576  0x000008a0 bpatch  0x0000001f , 0x00004003 
+ 00008577  0x000008a1 call  0x00006caa 
+ 00008578  0x000008a2 call  0x0000218b 
+ 00008579  0x000008a3 nrtn  0x00000029 
+ 00008580  0x000008a4 call  0x000026f3 
+ 00008581  0x000008a5 nbranch  0x00002188 , 0x00000034 
+ 00008582  0x000008a7 disable  0x00000029 
+ 00008583  0x000008a8 rtn 
+ 00008584  0x000008ab call  0x00002489 
+ 00008585  0x000008ac call  0x000022da 
+ 00008586  0x000008ad branch  0x00002177 
+ 00008587  0x000008b1 branch  0x0000218e , 0x0000002d 
+ 00008588  0x000008b2 call  0x00002a7f 
+ 00008589  0x000008b3 branch  0x0000219c , 0x00000002 
+ 00008590  0x000008b5 call  0x000021a7 
+ 00008591  0x000008b6 nbranch  0x0000219c , 0x00000028 
+ 00008592  0x000008b7 fetch  0x00000001 , 0x0000004c 
+ 00008593  0x000008b8 rtnbit0  0x00000004 
+ 00008594  0x000008b9 rtnbit1  0x00000003 
+ 00008595  0x000008ba fetch  0x00000001 , 0x0000004b 
+ 00008596  0x000008bb rtnbit1  0x00000003 
+ 00008597  0x000008bc call  0x000021ae 
+ 00008598  0x000008bd nrtn  0x00000034 
+ 00008599  0x000008be fetch  0x00000001 , 0x0000016e 
+ 00008600  0x000008bf increase  0xffffffff , 0x0000003f 
+ 00008601  0x000008c0 store  0x00000001 , 0x0000016e 
+ 00008602  0x000008c1 nrtn  0x00000034 
+ 00008603  0x000008c2 branch  0x00006006 
+ 00008604  0x000008c5 bpatch  0x00000020 , 0x00004004 
+ 00008605  0x000008c6 call  0x0000245d 
+ 00008606  0x000008c7 disable  0x00000029 
+ 00008607  0x000008c8 fetch  0x00000001 , 0x0000004c 
+ 00008608  0x000008c9 bbit1  0x00000004 , 0x000021a2 
+ 00008609  0x000008ca rtn 
+ 00008610  0x000008cd fetch  0x00000001 , 0x0000004c 
+ 00008611  0x000008ce rtnbit1  0x00000003 
+ 00008612  0x000008d0 arg  0x00000101 , 0x00000005 
+ 00008613  0x000008d1 arg  0x00000008 , 0x00000039 
+ 00008614  0x000008d2 branch  0x00007ec6 
+ 00008615  0x000008d5 bpatch  0x00000021 , 0x00004004 
+ 00008616  0x000008d6 enable  0x00000028 
+ 00008617  0x000008d7 fetch  0x00000001 , 0x0000004b 
+ 00008618  0x000008d8 rtnbit0  0x00000003 
+ 00008619  0x000008d9 call  0x000021ae 
+ 00008620  0x000008da nrtn  0x00000034 
+ 00008621  0x000008db branch  0x00007fe9 
+ 00008622  0x000008de fetch  0x00000001 , 0x00000072 
+ 00008623  0x000008df increase  0xffffffff , 0x0000003f 
+ 00008624  0x000008e0 store  0x00000001 , 0x00000072 
+ 00008625  0x000008e1 rtn 
+ 00008626  0x000008e4 bpatch  0x00000022 , 0x00004004 
+ 00008627  0x000008e5 fetch  0x00000001 , 0x00000030 
+ 00008628  0x000008e6 bbit1  0x00000007 , 0x000021bb 
+ 00008629  0x000008e7 fetch  0x00000001 , 0x000009b5 
+ 00008630  0x000008e8 branch  0x000021bb , 0x00000034 
+ 00008631  0x000008e9 jam  0x00000000 , 0x000009b5 
+ 00008632  0x000008ea jam  0x00000018 , 0x00000a99 
+ 00008633  0x000008eb call  0x00007d86 
+ 00008634  0x000008ec branch  0x000021bb 
+ 00008635  0x000008ee bpatch  0x00000023 , 0x00004004 
+ 00008636  0x000008ef call  0x00002254 
+ 00008637  0x000008f0 fetch  0x00000001 , 0x00000030 
+ 00008638  0x000008f1 set1  0x00000007 , 0x0000003f 
+ 00008639  0x000008f2 store  0x00000001 , 0x00000030 
+ 00008640  0x000008f3 jam  0x00000001 , 0x000041bd 
+ 00008641  0x000008f4 fetch  0x00000001 , 0x00000055 
+ 00008642  0x000008f5 bne  0x00000016 , 0x000021c3 
+ 00008643  0x000008f7 rtn 
+ 00008644  0x000008fa jam  0x00000001 , 0x000009b5 
+ 00008645  0x000008fc fetch  0x00000001 , 0x00000030 
+ 00008646  0x000008fd set0  0x00000007 , 0x0000003f 
+ 00008647  0x000008fe store  0x00000001 , 0x00000030 
+ 00008648  0x000008ff rtn 
+ 00008649  0x00000904 bpatch  0x00000024 , 0x00004004 
+ 00008650  0x00000905 disable  0x00000028 
+ 00008651  0x00000906 fetch  0x00000002 , 0x00000032 
+ 00008652  0x00000907 arg  0x0000ffff , 0x00000002 
+ 00008653  0x00000908 isub  0x00000002 , 0x0000003e 
+ 00008654  0x00000909 nrtn  0x00000005 
+ 00008655  0x0000090a fetch  0x00000004 , 0x00000034 
+ 00008656  0x0000090b branch  0x000021d3 , 0x00000030 
+ 00008657  0x0000090c isub  0x00000028 , 0x0000003f 
+ 00008658  0x0000090d branch  0x000021d4 
+ 00008659  0x0000090f isub  0x00000022 , 0x0000003f 
+ 00008660  0x00000911 sub  0x0000003f , 0x00000004 , 0x0000003e 
+ 00008661  0x00000912 nrtn  0x00000002 
+ 00008662  0x00000913 force  0x00000000 , 0x0000003f 
+ 00008663  0x00000914 store  0x00000002 , 0x00000032 
+ 00008664  0x00000915 branch  0x00007fe7 
+ 00008665  0x0000091a copy  0x0000003f , 0x00000002 
+ 00008666  0x0000091b bpatch  0x00000025 , 0x00004004 
+ 00008667  0x0000091c storet  0x00000004 , 0x00000034 
+ 00008668  0x0000091e jam  0x00000001 , 0x0000455b 
+ 00008669  0x0000091f setarg  0x0000ffff 
+ 00008670  0x00000920 store  0x00000002 , 0x00000032 
+ 00008671  0x00000921 jam  0x00000001 , 0x00000073 
+ 00008672  0x00000922 rtn 
+ 00008673  0x00000926 bpatch  0x00000026 , 0x00004004 
+ 00008674  0x00000927 call  0x000021c9 
+ 00008675  0x00000928 nrtn  0x00000028 
+ 00008676  0x00000929 disable  0x00000028 
+ 00008677  0x0000092a jam  0x00000020 , 0x00000011 
+ 00008678  0x0000092b set0  0x0000000b , 0x00000000 
+ 00008679  0x0000092d call  0x00002a4f 
+ 00008680  0x0000092e call  0x000022e6 
+ 00008681  0x0000092f bmark1  0x0000000b , 0x000021f4 
+ 00008682  0x00000930 call  0x00002455 
+ 00008683  0x00000931 nbranch  0x000021e7 , 0x00000034 
+ 00008684  0x00000933 bpatch  0x00000027 , 0x00004004 
+ 00008685  0x00000934 disable  0x00000028 
+ 00008686  0x00000935 deposit  0x00000022 
+ 00008687  0x00000936 store  0x00000004 , 0x000040ca 
+ 00008688  0x00000937 enable  0x00000030 
+ 00008689  0x00000938 enable  0x00000029 
+ 00008690  0x00000939 jam  0x0000002a , 0x00000a99 
+ 00008691  0x0000093a branch  0x00007d86 
+ 00008692  0x0000093d bpatch  0x00000028 , 0x00004005 
+ 00008693  0x0000093e call  0x00002a4d 
+ 00008694  0x0000093f arg  0x00000010 , 0x00000001 
+ 00008695  0x00000940 call  0x000022dc 
+ 00008696  0x00000941 disable  0x00000030 
+ 00008697  0x00000942 disable  0x00000029 
+ 00008698  0x00000943 call  0x00002818 
+ 00008699  0x00000944 call  0x00002435 
+ 00008700  0x00000946 bpatch  0x00000029 , 0x00004005 
+ 00008701  0x00000947 call  0x0000247c 
+ 00008702  0x00000948 branch  0x00002202 , 0x0000002d 
+ 00008703  0x00000949 call  0x00002455 
+ 00008704  0x0000094a nbranch  0x000021fc , 0x00000034 
+ 00008705  0x0000094b branch  0x000021ec 
+ 00008706  0x0000094d fetch  0x00000001 , 0x00000031 
+ 00008707  0x0000094e set0  0x00000001 , 0x0000003f 
+ 00008708  0x0000094f store  0x00000001 , 0x00000031 
+ 00008709  0x00000950 call  0x00002a88 
+ 00008710  0x00000951 call  0x00002841 
+ 00008711  0x00000952 enable  0x00000028 
+ 00008712  0x00000953 jam  0x0000002b , 0x00000a99 
+ 00008713  0x00000954 branch  0x00007d86 
+ 00008714  0x0000095a bpatch  0x0000002a , 0x00004005 
+ 00008715  0x0000095b set1  0x00000009 , 0x00000000 
+ 00008716  0x0000095c deposit  0x00000011 
+ 00008717  0x0000095d store  0x00000002 , 0x0000001e 
+ 00008718  0x0000095e force  0x00000050 , 0x00000039 
+ 00008719  0x0000095f arg  0x0000043f , 0x00000005 
+ 00008720  0x00000960 add  0x00000011 , 0x00000001 , 0x00000006 
+ 00008721  0x00000961 ifetch  0x00000001 , 0x00000006 
+ 00008722  0x00000962 copy  0x00000011 , 0x00000006 
+ 00008723  0x00000963 bbit1  0x00000000 , 0x00007f01 
+ 00008724  0x00000964 arg  0x00000030 , 0x00000005 
+ 00008725  0x00000965 call  0x00007f01 
+ 00008726  0x00000966 disable  0x0000002e 
+ 00008727  0x00000967 fetch  0x00000001 , 0x00000077 
+ 00008728  0x00000968 iforce  0x00000004 
+ 00008729  0x00000969 jam  0x00000001 , 0x0000008a 
+ 00008730  0x0000096a branch  0x0000221c , 0x00000029 
+ 00008731  0x0000096b jam  0x00000001 , 0x0000008a 
+ 00008732  0x0000096d fetch  0x00000001 , 0x00000030 
+ 00008733  0x0000096e rtnbit0  0x00000001 
+ 00008734  0x0000096f fetch  0x00000001 , 0x00000073 
+ 00008735  0x00000970 store  0x00000001 , 0x0000008a 
+ 00008736  0x00000971 fetch  0x00000001 , 0x00000074 
+ 00008737  0x00000972 store  0x00000001 , 0x0000008b 
+ 00008738  0x00000973 rtn 
+ 00008739  0x00000976 bpatch  0x0000002b , 0x00004005 
+ 00008740  0x00000977 fetch  0x00000002 , 0x0000001e 
+ 00008741  0x00000978 iforce  0x00000005 
+ 00008742  0x00000979 force  0x00000050 , 0x00000039 
+ 00008743  0x0000097a arg  0x0000043f , 0x00000006 
+ 00008744  0x0000097b branch  0x00007f01 , 0x00000036 
+ 00008745  0x0000097c arg  0x00000030 , 0x00000006 
+ 00008746  0x0000097d branch  0x00007f01 
+ 00008747  0x00000982 arg  0x00000001 , 0x00000039 
+ 00008748  0x00000983 fetcht  0x00000001 , 0x00000015 
+ 00008749  0x00000985 increase  0x00000001 , 0x00000002 
+ 00008750  0x00000986 compare  0x00000001 , 0x00000002 , 0x000000ff 
+ 00008751  0x00000987 nbranch  0x00002231 , 0x00000001 
+ 00008752  0x00000988 arg  0x00000000 , 0x00000002 
+ 00008753  0x0000098a storet  0x00000001 , 0x00000015 
+ 00008754  0x0000098b mul32  0x00000002 , 0x00000050 , 0x0000003f 
+ 00008755  0x0000098c arg  0x00004040 , 0x00000011 
+ 00008756  0x0000098d iadd  0x00000011 , 0x00000011 
+ 00008757  0x0000098e ifetch  0x00000001 , 0x00000011 
+ 00008758  0x0000098f bbit1  0x00000001 , 0x00002239 
+ 00008759  0x00000990 rtnbit1  0x00000000 
+ 00008760  0x00000991 rtnbit1  0x00000003 
+ 00008761  0x00000993 loop  0x0000222d 
+ 00008762  0x00000994 rtn 
+ 00008763  0x00000997 bpatch  0x0000002c , 0x00004005 
+ 00008764  0x00000998 arg  0x0000226a , 0x00000013 
+ 00008765  0x00000999 call  0x00002261 
+ 00008766  0x0000099a nrtn  0x00000005 
+ 00008767  0x0000099b deposit  0x00000011 
+ 00008768  0x0000099c store  0x00000002 , 0x0000001e 
+ 00008769  0x0000099d force  0x00000000 , 0x0000003e 
+ 00008770  0x0000099e rtn 
+ 00008771  0x000009a3 call  0x00002725 
+ 00008772  0x000009a4 branch  0x0000224b , 0x00000001 
+ 00008773  0x000009a5 fetch  0x00000002 , 0x0000001e 
+ 00008774  0x000009a6 add  0x0000003f , 0x00000017 , 0x00000005 
+ 00008775  0x000009a7 fetch  0x00000001 , 0x00000047 
+ 00008776  0x000009a8 istore  0x00000001 , 0x00000005 
+ 00008777  0x000009a9 arg  0x000022aa , 0x00000013 
+ 00008778  0x000009aa branch  0x00002261 
+ 00008779  0x000009ad fetch  0x00000001 , 0x00000047 
+ 00008780  0x000009ae isolate1  0x00000003 , 0x0000003f 
+ 00008781  0x000009af branch  0x00002250 , 0x00000001 
+ 00008782  0x000009b0 force  0x00000001 , 0x0000003e 
+ 00008783  0x000009b1 rtn 
+ 00008784  0x000009b3 force  0x00000000 , 0x0000003e 
+ 00008785  0x000009b4 rtn 
+ 00008786  0x000009b8 arg  0x000022a7 , 0x00000013 
+ 00008787  0x000009b9 branch  0x00002261 
+ 00008788  0x000009bc fetcht  0x00000002 , 0x0000001e 
+ 00008789  0x000009bd arg  0x000022cf , 0x00000013 
+ 00008790  0x000009be branch  0x00002261 
+ 00008791  0x000009c3 fetcht  0x00000001 , 0x000041cf 
+ 00008792  0x000009c5 arg  0x00002275 , 0x00000013 
+ 00008793  0x000009c6 branch  0x00002261 
+ 00008794  0x000009c9 bpatch  0x0000002d , 0x00004005 
+ 00008795  0x000009ca fetcht  0x00000006 , 0x000041d0 
+ 00008796  0x000009cc arg  0x0000226e , 0x00000013 
+ 00008797  0x000009cd branch  0x00002261 
+ 00008798  0x000009d0 arg  0x0000227b , 0x00000013 
+ 00008799  0x000009d1 branch  0x00002261 
+ 00008800  0x000009d4 arg  0x000022c6 , 0x00000013 
+ 00008801  0x000009d6 bpatch  0x0000002e , 0x00004005 
+ 00008802  0x000009d7 arg  0x00004040 , 0x00000011 
+ 00008803  0x000009d8 arg  0x00000001 , 0x00000039 
+ 00008804  0x000009da ifetch  0x00000001 , 0x00000011 
+ 00008805  0x000009db copy  0x00000013 , 0x0000003d 
+ 00008806  0x000009dd increase  0x00000050 , 0x00000011 
+ 00008807  0x000009de loop  0x00002264 
+ 00008808  0x000009df force  0x00000001 , 0x0000003e 
+ 00008809  0x000009e0 rtn 
+ 00008810  0x000009e3 bbit1  0x00000000 , 0x00002266 
+ 00008811  0x000009e4 bbit1  0x00000003 , 0x00002266 
+ 00008812  0x000009e5 force  0x00000000 , 0x0000003e 
+ 00008813  0x000009e6 rtn 
+ 00008814  0x000009e9 bbit1  0x00000003 , 0x00002270 
+ 00008815  0x000009ea bbit0  0x00000000 , 0x00002266 
+ 00008816  0x000009ec add  0x00000011 , 0x00000010 , 0x00000006 
+ 00008817  0x000009ed ifetch  0x00000006 , 0x00000006 
+ 00008818  0x000009ee isub  0x00000002 , 0x0000003e 
+ 00008819  0x000009ef rtn  0x00000005 
+ 00008820  0x000009f0 branch  0x00002266 
+ 00008821  0x000009f3 bbit0  0x00000000 , 0x00002266 
+ 00008822  0x000009f4 add  0x00000011 , 0x00000016 , 0x00000006 
+ 00008823  0x000009f5 ifetch  0x00000001 , 0x00000006 
+ 00008824  0x000009f6 isub  0x00000002 , 0x0000003e 
+ 00008825  0x000009f7 rtn  0x00000005 
+ 00008826  0x000009f8 branch  0x00002266 
+ 00008827  0x000009fb bbit0  0x00000001 , 0x00002266 
+ 00008828  0x000009fd call  0x000022b3 
+ 00008829  0x000009fe call  0x00002297 
+ 00008830  0x000009ff isub  0x00000002 , 0x0000003f 
+ 00008831  0x00000a00 increase  0x00000001 , 0x0000003f 
+ 00008832  0x00000a01 branch  0x00002291 , 0x00000002 
+ 00008833  0x00000a02 copy  0x00000006 , 0x00000012 
+ 00008834  0x00000a03 store  0x00000009 , 0x00000aa2 
+ 00008835  0x00000a04 fetch  0x00000001 , 0x000044c0 
+ 00008836  0x00000a05 nbranch  0x00002289 , 0x00000034 
+ 00008837  0x00000a06 fetch  0x00000009 , 0x00000aa2 
+ 00008838  0x00000a07 copy  0x00000012 , 0x00000006 
+ 00008839  0x00000a08 increase  0x00000005 , 0x0000003f 
+ 00008840  0x00000a09 branch  0x0000228c 
+ 00008841  0x00000a0b fetch  0x00000009 , 0x00000aa2 
+ 00008842  0x00000a0c copy  0x00000012 , 0x00000006 
+ 00008843  0x00000a0d increase  0x00000014 , 0x0000003f 
+ 00008844  0x00000a0f nbranch  0x00002266 , 0x00000002 
+ 00008845  0x00000a11 copy  0x00000002 , 0x00000021 
+ 00008846  0x00000a12 call  0x000022bf 
+ 00008847  0x00000a13 force  0x00000000 , 0x0000003e 
+ 00008848  0x00000a14 rtn 
+ 00008849  0x00000a18 iforce  0x00000012 
+ 00008850  0x00000a19 add  0x00000011 , 0x00000002 , 0x00000006 
+ 00008851  0x00000a1a ifetch  0x00000002 , 0x00000006 
+ 00008852  0x00000a1b branch  0x0000228d , 0x00000034 
+ 00008853  0x00000a1c call  0x000022bf 
+ 00008854  0x00000a1d branch  0x0000227c 
+ 00008855  0x00000a20 rshift16  0x0000003f , 0x0000000b 
+ 00008856  0x00000a21 rshift8  0x0000000b , 0x0000000b 
+ 00008857  0x00000a22 branch  0x000022a1 , 0x00000005 
+ 00008858  0x00000a23 compare  0x0000000f , 0x0000000b , 0x0000000f 
+ 00008859  0x00000a24 nrtn  0x00000001 
+ 00008860  0x00000a25 rshift16  0x00000002 , 0x0000000b 
+ 00008861  0x00000a26 rshift8  0x0000000b , 0x0000000b 
+ 00008862  0x00000a27 nrtn  0x00000005 
+ 00008863  0x00000a28 set1  0x0000001c , 0x00000002 
+ 00008864  0x00000a29 rtn 
+ 00008865  0x00000a2b rshift16  0x00000002 , 0x0000000b 
+ 00008866  0x00000a2c rshift8  0x0000000b , 0x0000000b 
+ 00008867  0x00000a2d compare  0x0000000f , 0x0000000b , 0x0000000f 
+ 00008868  0x00000a2e nrtn  0x00000001 
+ 00008869  0x00000a2f set1  0x0000001c , 0x0000003f 
+ 00008870  0x00000a30 rtn 
+ 00008871  0x00000a33 bbit0  0x00000000 , 0x00002266 
+ 00008872  0x00000a34 force  0x00000000 , 0x0000003e 
+ 00008873  0x00000a35 rtn 
+ 00008874  0x00000a38 bbit0  0x00000000 , 0x00002266 
+ 00008875  0x00000a39 add  0x00000011 , 0x00000001 , 0x00000006 
+ 00008876  0x00000a3a ifetch  0x00000001 , 0x00000006 
+ 00008877  0x00000a3b bbit1  0x00000000 , 0x00002266 
+ 00008878  0x00000a3c add  0x00000011 , 0x00000017 , 0x00000006 
+ 00008879  0x00000a3d ifetch  0x00000001 , 0x00000006 
+ 00008880  0x00000a3e bbit0  0x00000003 , 0x00002266 
+ 00008881  0x00000a3f force  0x00000000 , 0x0000003e 
+ 00008882  0x00000a40 rtn 
+ 00008883  0x00000a43 add  0x00000011 , 0x00000001 , 0x00000006 
+ 00008884  0x00000a44 ifetcht  0x00000001 , 0x00000006 
+ 00008885  0x00000a45 deposit  0x00000022 
+ 00008886  0x00000a46 isolate1  0x00000001 , 0x00000002 
+ 00008887  0x00000a47 add  0x00000011 , 0x00000004 , 0x00000006 
+ 00008888  0x00000a48 ifetcht  0x00000004 , 0x00000006 
+ 00008889  0x00000a49 rtn  0x00000001 
+ 00008890  0x00000a4a add  0x00000011 , 0x00000008 , 0x00000006 
+ 00008891  0x00000a4b ifetch  0x00000006 , 0x00000006 
+ 00008892  0x00000a4c call  0x00002854 
+ 00008893  0x00000a4d deposit  0x00000028 
+ 00008894  0x00000a4e rtn 
+ 00008895  0x00000a51 add  0x00000011 , 0x00000002 , 0x00000006 
+ 00008896  0x00000a52 add  0x00000011 , 0x00000004 , 0x00000005 
+ 00008897  0x00000a53 ifetch  0x00000002 , 0x00000006 
+ 00008898  0x00000a54 iadd  0x00000002 , 0x0000000b 
+ 00008899  0x00000a55 deposit  0x0000000b 
+ 00008900  0x00000a56 istore  0x00000004 , 0x00000005 
+ 00008901  0x00000a57 branch  0x00005449 
+ 00008902  0x00000a5b bbit0  0x00000001 , 0x00002266 
+ 00008903  0x00000a5c call  0x000022b3 
+ 00008904  0x00000a5d iadd  0x0000001b , 0x0000003f 
+ 00008905  0x00000a5e iadd  0x0000001b , 0x0000003f 
+ 00008906  0x00000a5f iadd  0x00000007 , 0x0000003f 
+ 00008907  0x00000a60 isub  0x00000002 , 0x0000003e 
+ 00008908  0x00000a61 nbranch  0x00002266 , 0x00000002 
+ 00008909  0x00000a62 force  0x00000000 , 0x0000003e 
+ 00008910  0x00000a63 rtn 
+ 00008911  0x00000a66 bbit0  0x00000000 , 0x00002266 
+ 00008912  0x00000a67 deposit  0x00000002 
+ 00008913  0x00000a68 isub  0x00000011 , 0x0000003e 
+ 00008914  0x00000a69 branch  0x00002266 , 0x0000003e 
+ 00008915  0x00000a6a add  0x00000011 , 0x00000001 , 0x00000006 
+ 00008916  0x00000a6b ifetch  0x00000001 , 0x00000006 
+ 00008917  0x00000a6c bbit1  0x00000000 , 0x00002266 
+ 00008918  0x00000a6d ifetch  0x00000001 , 0x00000011 
+ 00008919  0x00000a6e set0  0x00000007 , 0x0000003f 
+ 00008920  0x00000a6f istore  0x00000001 , 0x00000011 
+ 00008921  0x00000a70 branch  0x00002266 
+ 00008922  0x00000a74 bpatch  0x0000002f , 0x00004005 
+ 00008923  0x00000a75 call  0x00002a4f 
+ 00008924  0x00000a77 add  0x00000022 , 0x00000001 , 0x00000021 
+ 00008925  0x00000a78 call  0x000028e2 
+ 00008926  0x00000a79 force  0x00000003 , 0x00000024 
+ 00008927  0x00000a7a call  0x000028d2 
+ 00008928  0x00000a7b call  0x00002a51 
+ 00008929  0x00000a7c call  0x00002a56 
+ 00008930  0x00000a7d call  0x00002a64 
+ 00008931  0x00000a7e branch  0x00002762 
+ 00008932  0x00000a81 bpatch  0x00000030 , 0x00004006 
+ 00008933  0x00000a82 call  0x00002a4d 
+ 00008934  0x00000a84 add  0x00000022 , 0x00000001 , 0x00000021 
+ 00008935  0x00000a85 call  0x000028e2 
+ 00008936  0x00000a86 force  0x00000003 , 0x00000024 
+ 00008937  0x00000a87 call  0x000028cc 
+ 00008938  0x00000a88 call  0x0000242a 
+ 00008939  0x00000a89 call  0x000029f1 
+ 00008940  0x00000a8a call  0x00002a5b 
+ 00008941  0x00000a8b call  0x000029eb 
+ 00008942  0x00000a8d call  0x00002a0d 
+ 00008943  0x00000a8e nrtn  0x00000018 
+ 00008944  0x00000a8f call  0x000029bb 
+ 00008945  0x00000a90 branch  0x0000251c 
+ 00008946  0x00000a95 bpatch  0x00000031 , 0x00004006 
+ 00008947  0x00000a96 fetch  0x00000001 , 0x00000181 
+ 00008948  0x00000a97 iforce  0x00000004 
+ 00008949  0x00000a98 force  0x00000001 , 0x00000001 
+ 00008950  0x00000a99 call  0x000022da 
+ 00008951  0x00000a9a branch  0x000022e4 
+ 00008952  0x00000aa6 fetch  0x00000001 , 0x00004093 
+ 00008953  0x00000aa7 rtnbit0  0x00000000 
+ 00008954  0x00000aa8 force  0x00000004 , 0x00000007 
+ 00008955  0x00000aa9 call  0x00007f16 
+ 00008956  0x00000aaa nrtn  0x00000034 
+ 00008957  0x00000aab fetcht  0x00000002 , 0x000040ad 
+ 00008958  0x00000aac force  0x00000004 , 0x00000007 
+ 00008959  0x00000aad call  0x0000271c 
+ 00008960  0x00000aae rtn  0x00000028 
+ 00008961  0x00000aaf call  0x00002308 
+ 00008962  0x00000ab0 force  0x00000004 , 0x00000007 
+ 00008963  0x00000ab1 fetch  0x00000002 , 0x000040af 
+ 00008964  0x00000ab2 nbranch  0x00007f08 , 0x00000018 
+ 00008965  0x00000ab3 random  0x0000003f 
+ 00008966  0x00000ab4 iand  0x00000035 , 0x0000003f 
+ 00008967  0x00000ab5 branch  0x00007f08 
+ 00008968  0x00000ab9 bpatch  0x00000032 , 0x00004006 
+ 00008969  0x00000aba jam  0x00000000 , 0x00000181 
+ 00008970  0x00000abb disable  0x00000030 
+ 00008971  0x00000abc disable  0x0000002e 
+ 00008972  0x00000abd call  0x000028a4 
+ 00008973  0x00000abe and  0x00000022 , 0x000001fc , 0x00000021 
+ 00008974  0x00000abf force  0x00000001 , 0x00000024 
+ 00008975  0x00000ac0 call  0x000028d8 
+ 00008976  0x00000ac1 call  0x000028cc 
+ 00008977  0x00000ac2 setflip  0x0000001d , 0x00000000 
+ 00008978  0x00000ac3 fetch  0x00000001 , 0x00000006 
+ 00008979  0x00000ac4 increase  0x00000001 , 0x0000003f 
+ 00008980  0x00000ac5 store  0x00000001 , 0x00000006 
+ 00008981  0x00000ac6 call  0x000028f2 
+ 00008982  0x00000ac7 call  0x000029eb 
+ 00008983  0x00000ac8 call  0x00002a14 
+ 00008984  0x00000ac9 nrtn  0x00000018 
+ 00008985  0x00000aca bpatch  0x00000033 , 0x00004006 
+ 00008986  0x00000acb force  0x00000000 , 0x0000001b 
+ 00008987  0x00000acc call  0x000028f9 
+ 00008988  0x00000acd fetch  0x00000001 , 0x00000007 
+ 00008989  0x00000ace increase  0x00000001 , 0x0000003f 
+ 00008990  0x00000acf store  0x00000001 , 0x00000007 
+ 00008991  0x00000ad0 call  0x000028d8 
+ 00008992  0x00000ad1 call  0x00002a4d 
+ 00008993  0x00000ad2 or_into  0x00000002 , 0x00000021 
+ 00008994  0x00000ad3 force  0x00000001 , 0x00000024 
+ 00008995  0x00000ad4 call  0x000028d2 
+ 00008996  0x00000ad5 call  0x000028f2 
+ 00008997  0x00000ad6 call  0x00002a51 
+ 00008998  0x00000ad7 call  0x00002a5f 
+ 00008999  0x00000ad8 deposit  0x00000022 
+ 00009000  0x00000ad9 store  0x00000004 , 0x00000161 
+ 00009001  0x00000ada call  0x00002a64 
+ 00009002  0x00000adb force  0x00000002 , 0x00000001 
+ 00009003  0x00000adc force  0x00000000 , 0x00000004 
+ 00009004  0x00000add call  0x00002a6b 
+ 00009005  0x00000ade call  0x00002766 
+ 00009006  0x00000adf call  0x00002332 
+ 00009007  0x00000ae0 and_into  0x000001fd , 0x00000021 
+ 00009008  0x00000ae1 increase  0x00000001 , 0x00000026 
+ 00009009  0x00000ae2 rtn 
+ 00009010  0x00000ae5 bpatch  0x00000034 , 0x00004006 
+ 00009011  0x00000ae6 fetch  0x00000001 , 0x000040d1 
+ 00009012  0x00000ae7 rtn  0x00000034 
+ 00009013  0x00000ae8 arg  0x0000018e , 0x00000005 
+ 00009014  0x00000ae9 fetch  0x00000001 , 0x00004515 
+ 00009015  0x00000aea copy  0x0000003f , 0x00000039 
+ 00009016  0x00000aeb increase  0x00000001 , 0x0000003f 
+ 00009017  0x00000aec istore  0x00000001 , 0x00000005 
+ 00009018  0x00000aed copy  0x00000005 , 0x00000002 
+ 00009019  0x00000aee increase  0x00000001 , 0x0000003f 
+ 00009020  0x00000aef store  0x00000002 , 0x000041dc 
+ 00009021  0x00000af0 copy  0x00000002 , 0x00000005 
+ 00009022  0x00000af1 setarg  0x00000009 
+ 00009023  0x00000af2 istore  0x00000001 , 0x00000005 
+ 00009024  0x00000af3 arg  0x00004516 , 0x00000006 
+ 00009025  0x00000af4 call  0x00007f01 
+ 00009026  0x00000af6 arg  0x0000458d , 0x00000013 
+ 00009027  0x00000af7 arg  0x00000004 , 0x00000039 
+ 00009028  0x00000af8 call  0x00002354 
+ 00009029  0x00000af9 arg  0x00004577 , 0x00000013 
+ 00009030  0x00000afa arg  0x00000001 , 0x00000039 
+ 00009031  0x00000afb call  0x00002354 
+ 00009032  0x00000afd force  0x0000000a , 0x00000001 
+ 00009033  0x00000afe jam  0x00000002 , 0x000041db 
+ 00009034  0x00000aff setarg  0x0000018e 
+ 00009035  0x00000b00 store  0x00000002 , 0x0000016f 
+ 00009036  0x00000b01 call  0x00002a4d 
+ 00009037  0x00000b02 call  0x000028d2 
+ 00009038  0x00000b03 call  0x00002a51 
+ 00009039  0x00000b04 call  0x00002a5f 
+ 00009040  0x00000b05 call  0x00002a64 
+ 00009041  0x00000b06 call  0x00002a6b 
+ 00009042  0x00000b07 call  0x00002766 
+ 00009043  0x00000b08 rtn 
+ 00009044  0x00000b0c copy  0x00000005 , 0x00000002 
+ 00009045  0x00000b0d copy  0x00000013 , 0x00000006 
+ 00009046  0x00000b0e ifetch  0x00000001 , 0x00000006 
+ 00009047  0x00000b0f rtn  0x00000034 
+ 00009048  0x00000b11 lshift  0x0000003f , 0x0000003f 
+ 00009049  0x00000b12 loop  0x00002358 
+ 00009050  0x00000b13 copy  0x0000003f , 0x00000011 
+ 00009051  0x00000b14 increase  0x00000002 , 0x0000003f 
+ 00009052  0x00000b15 copy  0x0000003f , 0x00000007 
+ 00009053  0x00000b16 fetch  0x00000002 , 0x000041dc 
+ 00009054  0x00000b17 iadd  0x00000007 , 0x0000003f 
+ 00009055  0x00000b18 store  0x00000002 , 0x000041dc 
+ 00009056  0x00000b19 copy  0x00000002 , 0x00000005 
+ 00009057  0x00000b1a copy  0x00000011 , 0x0000003f 
+ 00009058  0x00000b1b increase  0x00000001 , 0x0000003f 
+ 00009059  0x00000b1c istore  0x00000001 , 0x00000005 
+ 00009060  0x00000b1d copy  0x00000013 , 0x00000006 
+ 00009061  0x00000b1e ifetch  0x00000001 , 0x00000006 
+ 00009062  0x00000b1f ifetch  0x00000001 , 0x00000006 
+ 00009063  0x00000b20 istore  0x00000001 , 0x00000005 
+ 00009064  0x00000b21 copy  0x00000011 , 0x00000039 
+ 00009065  0x00000b22 branch  0x00007f01 
+ 00009066  0x00000b29 fetch  0x00000001 , 0x00004093 
+ 00009067  0x00000b2a rtnbit0  0x00000001 
+ 00009068  0x00000b2b force  0x00000005 , 0x00000007 
+ 00009069  0x00000b2c call  0x00007f16 
+ 00009070  0x00000b2d nrtn  0x00000034 
+ 00009071  0x00000b2e fetcht  0x00000002 , 0x000040b1 
+ 00009072  0x00000b2f force  0x00000028 , 0x00000007 
+ 00009073  0x00000b30 call  0x0000271c 
+ 00009074  0x00000b31 rtn  0x00000028 
+ 00009075  0x00000b32 force  0x00000000 , 0x00000004 
+ 00009076  0x00000b33 jam  0x00000008 , 0x00000010 
+ 00009077  0x00000b34 set0  0x0000000b , 0x00000000 
+ 00009078  0x00000b35 call  0x0000237a 
+ 00009079  0x00000b36 force  0x00000005 , 0x00000007 
+ 00009080  0x00000b37 fetch  0x00000002 , 0x000040b3 
+ 00009081  0x00000b38 branch  0x00007f08 
+ 00009082  0x00000b3c bpatch  0x00000035 , 0x00004006 
+ 00009083  0x00000b3d disable  0x00000030 
+ 00009084  0x00000b3e call  0x000028a4 
+ 00009085  0x00000b3f fetch  0x00000001 , 0x00000008 
+ 00009086  0x00000b40 increase  0x00000001 , 0x0000003f 
+ 00009087  0x00000b41 store  0x00000001 , 0x00000008 
+ 00009088  0x00000b42 force  0x00000000 , 0x00000026 
+ 00009089  0x00000b43 call  0x000028e2 
+ 00009090  0x00000b44 add  0x00000022 , 0x00000001 , 0x00000021 
+ 00009091  0x00000b45 force  0x00000002 , 0x00000024 
+ 00009092  0x00000b46 bpatch  0x00000036 , 0x00004006 
+ 00009093  0x00000b47 call  0x000028cc 
+ 00009094  0x00000b48 call  0x000029eb 
+ 00009095  0x00000b49 call  0x00002a14 
+ 00009096  0x00000b4a nrtn  0x00000018 
+ 00009097  0x00000b4b call  0x000028f9 
+ 00009098  0x00000b4c fetch  0x00000001 , 0x00000009 
+ 00009099  0x00000b4d increase  0x00000001 , 0x0000003f 
+ 00009100  0x00000b4e store  0x00000001 , 0x00000009 
+ 00009101  0x00000b4f force  0x00000000 , 0x0000001b 
+ 00009102  0x00000b50 call  0x00002a4d 
+ 00009103  0x00000b51 or_into  0x00000002 , 0x00000021 
+ 00009104  0x00000b52 force  0x00000001 , 0x00000024 
+ 00009105  0x00000b53 call  0x000028d2 
+ 00009106  0x00000b54 call  0x00002a51 
+ 00009107  0x00000b55 call  0x00002a5f 
+ 00009108  0x00000b56 call  0x00002a64 
+ 00009109  0x00000b57 call  0x0000264d 
+ 00009110  0x00000b58 force  0x00000000 , 0x00000004 
+ 00009111  0x00000b59 arg  0x00000600 , 0x0000000b 
+ 00009112  0x00000b5a until  0x00000029 , 0x00000026 
+ 00009113  0x00000b5b or_into  0x00000003 , 0x00000028 
+ 00009114  0x00000b5c and_into  0x000001fd , 0x00000021 
+ 00009115  0x00000b5e bpatch  0x00000037 , 0x00004006 
+ 00009116  0x00000b5f increase  0x00000001 , 0x00000026 
+ 00009117  0x00000b60 call  0x000028cc 
+ 00009118  0x00000b61 call  0x000029eb 
+ 00009119  0x00000b62 call  0x00002a07 
+ 00009120  0x00000b63 nbranch  0x000023a4 , 0x00000018 
+ 00009121  0x00000b64 call  0x00002a6b 
+ 00009122  0x00000b65 call  0x0000251e 
+ 00009123  0x00000b66 bmark1  0x0000000b , 0x000023ab 
+ 00009124  0x00000b68 bpatch  0x00000038 , 0x00004007 
+ 00009125  0x00000b69 fetch  0x00000001 , 0x00000010 
+ 00009126  0x00000b6a rtn  0x00000034 
+ 00009127  0x00000b6b increase  0xffffffff , 0x0000003f 
+ 00009128  0x00000b6c store  0x00000001 , 0x00000010 
+ 00009129  0x00000b6d call  0x00002a4f 
+ 00009130  0x00000b6e branch  0x0000239b 
+ 00009131  0x00000b72 bpatch  0x00000039 , 0x00004007 
+ 00009132  0x00000b73 set0  0x00000001 , 0x00000028 
+ 00009133  0x00000b74 set1  0x00000000 , 0x00000028 
+ 00009134  0x00000b75 fetch  0x00000001 , 0x0000000a 
+ 00009135  0x00000b76 increase  0x00000001 , 0x0000003f 
+ 00009136  0x00000b77 store  0x00000001 , 0x0000000a 
+ 00009137  0x00000b78 call  0x00002a4d 
+ 00009138  0x00000b79 or_into  0x00000002 , 0x00000021 
+ 00009139  0x00000b7a call  0x000028d2 
+ 00009140  0x00000b7b call  0x00002a51 
+ 00009141  0x00000b7c call  0x00002a5f 
+ 00009142  0x00000b7d call  0x00002a64 
+ 00009143  0x00000b7e call  0x0000264d 
+ 00009144  0x00000b80 compare  0x00000003 , 0x00000028 , 0x00000003 
+ 00009145  0x00000b81 branch  0x000023bc , 0x00000001 
+ 00009146  0x00000b82 until  0x0000003e , 0x00000017 
+ 00009147  0x00000b83 branch  0x000023b8 
+ 00009148  0x00000b85 fetch  0x00000004 , 0x00000165 
+ 00009149  0x00000b86 or_into  0x00000003 , 0x0000003f 
+ 00009150  0x00000b87 icopy  0x00000028 
+ 00009151  0x00000b8a bpatch  0x0000003a , 0x00004007 
+ 00009152  0x00000b8b fetch  0x00000006 , 0x00000178 
+ 00009153  0x00000b8c store  0x00000006 , 0x00000040 
+ 00009154  0x00000b8d call  0x00002435 
+ 00009155  0x00000b8f call  0x0000247c 
+ 00009156  0x00000b90 branch  0x000023c8 , 0x0000002d 
+ 00009157  0x00000b91 call  0x00002455 
+ 00009158  0x00000b92 nbranch  0x000023c3 , 0x00000034 
+ 00009159  0x00000b93 rtn 
+ 00009160  0x00000b97 bpatch  0x0000003b , 0x00004007 
+ 00009161  0x00000b98 call  0x00002440 
+ 00009162  0x00000b99 call  0x0000223b 
+ 00009163  0x00000b9a nrtn  0x00000005 
+ 00009164  0x00000b9b jam  0x00000000 , 0x00000031 
+ 00009165  0x00000b9c call  0x00002841 
+ 00009166  0x00000b9d branch  0x00002223 
+ 00009167  0x00000ba3 bpatch  0x0000003c , 0x00004007 
+ 00009168  0x00000ba4 call  0x00002850 
+ 00009169  0x00000ba5 call  0x000023f3 
+ 00009170  0x00000ba6 rtn  0x00000028 
+ 00009171  0x00000ba8 bpatch  0x0000003d , 0x00004007 
+ 00009172  0x00000ba9 call  0x00002c69 
+ 00009173  0x00000baa call  0x00006caa 
+ 00009174  0x00000bab call  0x00002514 
+ 00009175  0x00000bac nbranch  0x000023e2 , 0x0000002d 
+ 00009176  0x00000bad call  0x00002a88 
+ 00009177  0x00000bae call  0x00006cc2 
+ 00009178  0x00000baf call  0x00002489 
+ 00009179  0x00000bb0 call  0x00002757 
+ 00009180  0x00000bb1 call  0x00002728 
+ 00009181  0x00000bb2 call  0x00005d08 
+ 00009182  0x00000bb3 fetch  0x00000001 , 0x0000000b 
+ 00009183  0x00000bb4 increase  0x00000001 , 0x0000003f 
+ 00009184  0x00000bb5 store  0x00000001 , 0x0000000b 
+ 00009185  0x00000bb6 call  0x00002841 
+ 00009186  0x00000bb8 bpatch  0x0000003e , 0x00004007 
+ 00009187  0x00000bb9 call  0x00002bb1 
+ 00009188  0x00000bba call  0x00002a7f 
+ 00009189  0x00000bbb branch  0x000023eb , 0x00000002 
+ 00009190  0x00000bbc call  0x000021a7 
+ 00009191  0x00000bbd nbranch  0x000023eb , 0x00000028 
+ 00009192  0x00000bbe call  0x000026f3 
+ 00009193  0x00000bbf nbranch  0x000023d3 , 0x00000034 
+ 00009194  0x00000bc0 rtn 
+ 00009195  0x00000bc3 bpatch  0x0000003f , 0x00004007 
+ 00009196  0x00000bc4 jam  0x00000000 , 0x00000151 
+ 00009197  0x00000bc5 jam  0x00000000 , 0x0000017f 
+ 00009198  0x00000bc6 call  0x0000245d 
+ 00009199  0x00000bc7 set0  0x00000011 , 0x00000000 
+ 00009200  0x00000bc8 call  0x00007fb0 
+ 00009201  0x00000bc9 fetch  0x00000001 , 0x00000030 
+ 00009202  0x00000bca rtn 
+ 00009203  0x00000bce bpatch  0x00000040 , 0x00004008 
+ 00009204  0x00000bcf call  0x000021c9 
+ 00009205  0x00000bd0 nrtn  0x00000028 
+ 00009206  0x00000bd1 copy  0x00000004 , 0x00000002 
+ 00009207  0x00000bd2 call  0x00002a6f 
+ 00009208  0x00000bd3 store  0x00000001 , 0x00000181 
+ 00009209  0x00000bd4 copy  0x00000002 , 0x00000004 
+ 00009210  0x00000bd5 jam  0x00000020 , 0x00000011 
+ 00009211  0x00000bd7 bpatch  0x00000041 , 0x00004008 
+ 00009212  0x00000bd8 call  0x00002a4f 
+ 00009213  0x00000bd9 force  0x00000002 , 0x00000001 
+ 00009214  0x00000bda call  0x0000274f 
+ 00009215  0x00000bdb deposit  0x00000022 
+ 00009216  0x00000bdc store  0x00000004 , 0x00000161 
+ 00009217  0x00000bdd call  0x00002762 
+ 00009218  0x00000bde call  0x00002a4d 
+ 00009219  0x00000bdf enable  0x0000002f 
+ 00009220  0x00000be0 call  0x000024f6 
+ 00009221  0x00000be1 branch  0x0000240d , 0x00000018 
+ 00009222  0x00000be2 call  0x000028f9 
+ 00009223  0x00000be3 call  0x00002455 
+ 00009224  0x00000be4 nbranch  0x000023fb , 0x00000034 
+ 00009225  0x00000be5 rtnmark0  0x00000004 
+ 00009226  0x00000be6 jam  0x00000034 , 0x0000007c 
+ 00009227  0x00000be7 set1  0x00000003 , 0x00000000 
+ 00009228  0x00000be8 rtn 
+ 00009229  0x00000bea enable  0x00000030 
+ 00009230  0x00000beb call  0x00002435 
+ 00009231  0x00000bec call  0x000028a4 
+ 00009232  0x00000bee bpatch  0x00000042 , 0x00004008 
+ 00009233  0x00000bef call  0x000022f2 
+ 00009234  0x00000bf0 branch  0x00002419 , 0x00000018 
+ 00009235  0x00000bf1 call  0x00002455 
+ 00009236  0x00000bf2 nbranch  0x00002410 , 0x00000034 
+ 00009237  0x00000bf3 disable  0x00000030 
+ 00009238  0x00000bf4 deposit  0x00000028 
+ 00009239  0x00000bf5 store  0x00000004 , 0x000040ca 
+ 00009240  0x00000bf6 rtn 
+ 00009241  0x00000bf8 enable  0x00000029 
+ 00009242  0x00000bf9 bmark0  0x00000004 , 0x0000241f 
+ 00009243  0x00000bfa set0  0x00000004 , 0x00000000 
+ 00009244  0x00000bfb jam  0x00000003 , 0x0000007c 
+ 00009245  0x00000bfc jam  0x00000033 , 0x0000007d 
+ 00009246  0x00000bfd call  0x000062f8 
+ 00009247  0x00000bff deposit  0x00000004 
+ 00009248  0x00000c00 store  0x00000001 , 0x00000077 
+ 00009249  0x00000c01 force  0x00000000 , 0x0000003f 
+ 00009250  0x00000c02 store  0x00000006 , 0x00000038 
+ 00009251  0x00000c03 fetch  0x00000001 , 0x00000031 
+ 00009252  0x00000c04 set1  0x00000001 , 0x0000003f 
+ 00009253  0x00000c05 store  0x00000001 , 0x00000031 
+ 00009254  0x00000c06 call  0x00002a88 
+ 00009255  0x00000c07 disable  0x00000029 
+ 00009256  0x00000c08 enable  0x00000028 
+ 00009257  0x00000c09 rtn 
+ 00009258  0x00000c0e bpatch  0x00000043 , 0x00004008 
+ 00009259  0x00000c0f disable  0x0000002d 
+ 00009260  0x00000c10 set0  0x00000005 , 0x00000000 
+ 00009261  0x00000c11 set0  0x0000000a , 0x00000000 
+ 00009262  0x00000c12 set0  0x00000010 , 0x00000000 
+ 00009263  0x00000c13 set0  0x0000000f , 0x00000000 
+ 00009264  0x00000c14 fetch  0x00000001 , 0x00000047 
+ 00009265  0x00000c15 set0  0x00000005 , 0x0000003f 
+ 00009266  0x00000c16 set1  0x00000004 , 0x0000003f 
+ 00009267  0x00000c17 store  0x00000001 , 0x00000047 
+ 00009268  0x00000c18 rtn 
+ 00009269  0x00000c1b bpatch  0x00000044 , 0x00004008 
+ 00009270  0x00000c1c jam  0x00000020 , 0x00000011 
+ 00009271  0x00000c1d jam  0x00000050 , 0x00000047 
+ 00009272  0x00000c1e fetch  0x00000002 , 0x000040bf 
+ 00009273  0x00000c1f store  0x00000002 , 0x0000003e 
+ 00009274  0x00000c20 deposit  0x00000022 
+ 00009275  0x00000c21 store  0x00000004 , 0x000040ca 
+ 00009276  0x00000c22 rtn  0x00000030 
+ 00009277  0x00000c23 deposit  0x00000028 
+ 00009278  0x00000c24 store  0x00000004 , 0x000040ca 
+ 00009279  0x00000c25 rtn 
+ 00009280  0x00000c28 bpatch  0x00000045 , 0x00004008 
+ 00009281  0x00000c29 call  0x00005d04 
+ 00009282  0x00000c2a call  0x00002459 
+ 00009283  0x00000c2b store  0x00000001 , 0x00000046 
+ 00009284  0x00000c2c setarg  0x00000000 
+ 00009285  0x00000c2d store  0x00000002 , 0x0000025d 
+ 00009286  0x00000c2e setarg  0x00001c80 
+ 00009287  0x00000c2f store  0x00000002 , 0x00000051 
+ 00009288  0x00000c30 fetch  0x00000001 , 0x00000030 
+ 00009289  0x00000c31 set1  0x00000000 , 0x0000003f 
+ 00009290  0x00000c32 store  0x00000001 , 0x00000030 
+ 00009291  0x00000c33 jam  0x00000000 , 0x0000004b 
+ 00009292  0x00000c34 jam  0x00000000 , 0x0000004c 
+ 00009293  0x00000c35 jam  0x00000000 , 0x000000a0 
+ 00009294  0x00000c36 branch  0x00002a88 
+ 00009295  0x00000c3a bpatch  0x00000046 , 0x00004008 
+ 00009296  0x00000c3b force  0x00000000 , 0x0000003f 
+ 00009297  0x00000c3c store  0x00000008 , 0x000041be 
+ 00009298  0x00000c3d istore  0x00000008 , 0x00000005 
+ 00009299  0x00000c3e call  0x000021c5 
+ 00009300  0x00000c3f branch  0x00002254 
+ 00009301  0x00000c42 fetch  0x00000001 , 0x00000011 
+ 00009302  0x00000c43 increase  0xffffffff , 0x0000003f 
+ 00009303  0x00000c44 store  0x00000001 , 0x00000011 
+ 00009304  0x00000c45 rtn 
+ 00009305  0x00000c48 fetch  0x00000001 , 0x000040cf 
+ 00009306  0x00000c49 increase  0x00000001 , 0x0000003f 
+ 00009307  0x00000c4a store  0x00000001 , 0x000040cf 
+ 00009308  0x00000c4b rtn 
+ 00009309  0x00000c4f bpatch  0x00000047 , 0x00004008 
+ 00009310  0x00000c50 fetch  0x00000001 , 0x000041ce 
+ 00009311  0x00000c51 beq  0x00000003 , 0x00002462 
+ 00009312  0x00000c52 fetch  0x00000001 , 0x00000048 
+ 00009313  0x00000c53 bne  0x00000001 , 0x00002466 
+ 00009314  0x00000c55 call  0x00004d06 
+ 00009315  0x00000c56 nbranch  0x00002466 , 0x00000005 
+ 00009316  0x00000c57 call  0x000021a4 
+ 00009317  0x00000c58 jam  0x00000000 , 0x000041ce 
+ 00009318  0x00000c5a bpatch  0x00000048 , 0x00004009 
+ 00009319  0x00000c5b call  0x000033af 
+ 00009320  0x00000c5c call  0x000026e9 
+ 00009321  0x00000c5d jam  0x00000002 , 0x00000a99 
+ 00009322  0x00000c5e call  0x00007d86 
+ 00009323  0x00000c5f call  0x00005cf7 
+ 00009324  0x00000c60 call  0x00004d6b 
+ 00009325  0x00000c61 call  0x0000757d 
+ 00009326  0x00000c62 fetch  0x00000001 , 0x00000030 
+ 00009327  0x00000c63 set0  0x00000000 
+ 00009328  0x00000c64 store  0x00000001 , 0x00000030 
+ 00009329  0x00000c65 jam  0x00000000 , 0x00004681 
+ 00009330  0x00000c67 fetch  0x00000001 , 0x0000004c 
+ 00009331  0x00000c68 compare  0x00000000 , 0x0000003f , 0x000000c0 
+ 00009332  0x00000c69 branch  0x00002476 , 0x00000001 
+ 00009333  0x00000c6a set0  0x00000001 , 0x00000000 
+ 00009334  0x00000c6c fetch  0x00000001 , 0x00000047 
+ 00009335  0x00000c6d bbit0  0x00000003 , 0x00002478 
+ 00009336  0x00000c6f fetch  0x00000001 , 0x0000004b 
+ 00009337  0x00000c70 rtnbit0  0x00000006 
+ 00009338  0x00000c71 set0  0x00000002 , 0x00000000 
+ 00009339  0x00000c72 rtn 
+ 00009340  0x00000c75 bpatch  0x00000049 , 0x00004009 
+ 00009341  0x00000c76 fetch  0x00000001 , 0x00000174 
+ 00009342  0x00000c77 rtn  0x00000034 
+ 00009343  0x00000c78 icopy  0x00000004 
+ 00009344  0x00000c79 call  0x00002514 
+ 00009345  0x00000c7a nrtn  0x0000002d 
+ 00009346  0x00000c7b force  0x00000000 , 0x00000001 
+ 00009347  0x00000c7c call  0x00002757 
+ 00009348  0x00000c7d deposit  0x00000004 
+ 00009349  0x00000c7e store  0x00000001 , 0x00000077 
+ 00009350  0x00000c7f force  0x00000000 , 0x0000003f 
+ 00009351  0x00000c80 store  0x00000001 , 0x00000174 
+ 00009352  0x00000c81 rtn 
+ 00009353  0x00000c88 bpatch  0x0000004a , 0x00004009 
+ 00009354  0x00000c89 fetch  0x00000001 , 0x00000030 
+ 00009355  0x00000c8a bbit0  0x00000002 , 0x00002496 
+ 00009356  0x00000c8b force  0x00000007 , 0x00000001 
+ 00009357  0x00000c8c bmark0  0x00000007 , 0x00002495 
+ 00009358  0x00000c8d call  0x00002725 
+ 00009359  0x00000c8e nbranch  0x00002496 , 0x00000001 
+ 00009360  0x00000c8f branch  0x00002496 , 0x0000002e 
+ 00009361  0x00000c90 call  0x000024c1 
+ 00009362  0x00000c91 setarg  0x00000002 
+ 00009363  0x00000c92 store  0x00000002 , 0x000040c8 
+ 00009364  0x00000c93 rtn 
+ 00009365  0x00000c95 nrtn  0x0000002e 
+ 00009366  0x00000c97 bpatch  0x0000004b , 0x00004009 
+ 00009367  0x00000c98 call  0x00002243 
+ 00009368  0x00000c99 nbranch  0x000024a7 , 0x00000005 
+ 00009369  0x00000c9a fetch  0x00000001 , 0x00000047 
+ 00009370  0x00000c9b bbit0  0x00000003 , 0x000024b0 
+ 00009371  0x00000c9d bmark1  0x00000005 , 0x000024b4 
+ 00009372  0x00000c9e fetch  0x00000001 , 0x0000017f 
+ 00009373  0x00000c9f bbit1  0x00000006 , 0x000024ba 
+ 00009374  0x00000ca0 fetch  0x00000002 , 0x000040c8 
+ 00009375  0x00000ca1 increase  0xffffffff , 0x0000003f 
+ 00009376  0x00000ca2 store  0x00000002 , 0x000040c8 
+ 00009377  0x00000ca3 branch  0x000024a5 , 0x00000034 
+ 00009378  0x00000ca4 fetch  0x00000001 , 0x000040c5 
+ 00009379  0x00000ca5 iforce  0x00000001 
+ 00009380  0x00000ca6 rtn 
+ 00009381  0x00000ca9 bpatch  0x0000004c , 0x00004009 
+ 00009382  0x00000caa call  0x00002687 
+ 00009383  0x00000cac call  0x00002725 
+ 00009384  0x00000cad branch  0x000024b0 , 0x00000001 
+ 00009385  0x00000cae call  0x0000600a 
+ 00009386  0x00000caf branch  0x000024be , 0x00000028 
+ 00009387  0x00000cb0 fetch  0x00000001 , 0x0000004b 
+ 00009388  0x00000cb1 bbit1  0x00000006 , 0x000024c0 
+ 00009389  0x00000cb2 bmark1  0x00000005 , 0x000024b4 
+ 00009390  0x00000cb3 fetch  0x00000001 , 0x0000017f 
+ 00009391  0x00000cb4 bbit1  0x00000006 , 0x000024ba 
+ 00009392  0x00000cb6 force  0x00000001 , 0x00000001 
+ 00009393  0x00000cb7 rtn  0x00000029 
+ 00009394  0x00000cb8 force  0x00000000 , 0x00000001 
+ 00009395  0x00000cb9 rtn 
+ 00009396  0x00000cbb bpatch  0x0000004d , 0x00004009 
+ 00009397  0x00000cbc fetch  0x00000001 , 0x00000019 
+ 00009398  0x00000cbd iforce  0x00000001 
+ 00009399  0x00000cbe rtnne  0x00000001 
+ 00009400  0x00000cbf force  0x00000000 , 0x00000001 
+ 00009401  0x00000cc0 rtn 
+ 00009402  0x00000cc2 fetch  0x00000001 , 0x00000158 
+ 00009403  0x00000cc3 and  0x0000003f , 0x0000000f , 0x00000001 
+ 00009404  0x00000cc4 set1  0x00000005 , 0x00000000 
+ 00009405  0x00000cc5 rtn 
+ 00009406  0x00000cc7 force  0x00000013 , 0x00000001 
+ 00009407  0x00000cc8 branch  0x000024c1 
+ 00009408  0x00000cca call  0x000024ca 
+ 00009409  0x00000ccd bpatch  0x0000004e , 0x00004009 
+ 00009410  0x00000cce fetcht  0x00000001 , 0x00000047 
+ 00009411  0x00000ccf set1  0x00000003 , 0x00000002 
+ 00009412  0x00000cd0 storet  0x00000001 , 0x00000047 
+ 00009413  0x00000cd1 deposit  0x00000001 
+ 00009414  0x00000cd2 store  0x00000001 , 0x000040c5 
+ 00009415  0x00000cd3 setarg  0x0000ffff 
+ 00009416  0x00000cd4 store  0x00000002 , 0x000040c8 
+ 00009417  0x00000cd5 rtn 
+ 00009418  0x00000cd8 bpatch  0x0000004f , 0x00004009 
+ 00009419  0x00000cd9 fetch  0x00000001 , 0x0000004c 
+ 00009420  0x00000cda isolate1  0x00000005 , 0x0000003f 
+ 00009421  0x00000cdb fetch  0x00000002 , 0x000041dc 
+ 00009422  0x00000cdc branch  0x000024e0 , 0x00000001 
+ 00009423  0x00000cdd force  0x00000003 , 0x00000001 
+ 00009424  0x00000cde sub  0x0000003f , 0x00000011 , 0x0000003e 
+ 00009425  0x00000cdf rtn  0x00000002 
+ 00009426  0x00000ce0 force  0x00000004 , 0x00000001 
+ 00009427  0x00000ce1 sub  0x0000003f , 0x0000001b , 0x0000003e 
+ 00009428  0x00000ce2 rtn  0x00000002 
+ 00009429  0x00000ce3 force  0x0000000a , 0x00000001 
+ 00009430  0x00000ce4 sub  0x0000003f , 0x00000079 , 0x0000003e 
+ 00009431  0x00000ce5 rtn  0x00000002 
+ 00009432  0x00000ce6 force  0x0000000b , 0x00000001 
+ 00009433  0x00000ce7 sub  0x0000003f , 0x000000b7 , 0x0000003e 
+ 00009434  0x00000ce8 rtn  0x00000002 
+ 00009435  0x00000ce9 force  0x0000000e , 0x00000001 
+ 00009436  0x00000cea sub  0x0000003f , 0x000000e0 , 0x0000003e 
+ 00009437  0x00000ceb rtn  0x00000002 
+ 00009438  0x00000cec force  0x0000000f , 0x00000001 
+ 00009439  0x00000ced rtn 
+ 00009440  0x00000cef force  0x00000003 , 0x00000001 
+ 00009441  0x00000cf0 sub  0x0000003f , 0x00000011 , 0x0000003e 
+ 00009442  0x00000cf1 rtn  0x00000002 
+ 00009443  0x00000cf2 force  0x00000004 , 0x00000001 
+ 00009444  0x00000cf3 sub  0x0000003f , 0x00000036 , 0x0000003e 
+ 00009445  0x00000cf4 rtn  0x00000002 
+ 00009446  0x00000cf5 force  0x0000000a , 0x00000001 
+ 00009447  0x00000cf6 arg  0x0000016f , 0x00000002 
+ 00009448  0x00000cf7 isub  0x00000002 , 0x0000003e 
+ 00009449  0x00000cf8 nrtn  0x00000002 
+ 00009450  0x00000cf9 force  0x0000000e , 0x00000001 
+ 00009451  0x00000cfa arg  0x000002a7 , 0x00000002 
+ 00009452  0x00000cfb isub  0x00000002 , 0x0000003e 
+ 00009453  0x00000cfc nrtn  0x00000002 
+ 00009454  0x00000cfd force  0x0000000f , 0x00000001 
+ 00009455  0x00000cfe rtn 
+ 00009456  0x00000d08 fetch  0x00000001 , 0x00000030 
+ 00009457  0x00000d09 bbit0  0x00000001 , 0x000024f5 
+ 00009458  0x00000d0a fetch  0x00000002 , 0x00000032 
+ 00009459  0x00000d0b branch  0x000024f5 , 0x00000034 
+ 00009460  0x00000d0c nbranch  0x000024f7 , 0x0000002e 
+ 00009461  0x00000d0e call  0x00002a4f 
+ 00009462  0x00000d10 add  0x00000028 , 0x00000001 , 0x00000021 
+ 00009463  0x00000d12 enable  0x00000010 
+ 00009464  0x00000d13 fetch  0x00000002 , 0x0000003e 
+ 00009465  0x00000d14 rshift  0x0000003f , 0x0000003f 
+ 00009466  0x00000d15 arg  0x00000500 , 0x00000002 
+ 00009467  0x00000d16 iadd  0x00000002 , 0x0000003f 
+ 00009468  0x00000d17 call  0x00002a24 
+ 00009469  0x00000d18 call  0x000028ea 
+ 00009470  0x00000d19 force  0x00000003 , 0x00000024 
+ 00009471  0x00000d1a call  0x000028cc 
+ 00009472  0x00000d1b call  0x0000242a 
+ 00009473  0x00000d1c call  0x000029f1 
+ 00009474  0x00000d1d bpatch  0x00000050 , 0x0000400a 
+ 00009475  0x00000d1e fetch  0x00000002 , 0x0000003e 
+ 00009476  0x00000d1f rshift  0x0000003f , 0x0000003f 
+ 00009477  0x00000d20 call  0x00002a24 
+ 00009478  0x00000d21 call  0x000029eb 
+ 00009479  0x00000d22 enable  0x0000000d 
+ 00009480  0x00000d23 fetch  0x00000002 , 0x0000003e 
+ 00009481  0x00000d24 arg  0x000003bb , 0x00000002 
+ 00009482  0x00000d25 iadd  0x00000002 , 0x0000001b 
+ 00009483  0x00000d26 correlate  0x0000003e , 0x00000003 
+ 00009484  0x00000d27 copy  0x0000001a , 0x00000002 
+ 00009485  0x00000d28 storet  0x00000006 , 0x0000009a 
+ 00009486  0x00000d29 disable  0x0000000d 
+ 00009487  0x00000d2a nrtn  0x00000018 
+ 00009488  0x00000d2b arg  0x000003bb , 0x00000029 
+ 00009489  0x00000d2c copy  0x00000021 , 0x00000028 
+ 00009490  0x00000d2d branch  0x00002b05 , 0x0000002b 
+ 00009491  0x00000d2e rtn 
+ 00009492  0x00000d32 bpatch  0x00000051 , 0x0000400a 
+ 00009493  0x00000d33 call  0x000024f0 
+ 00009494  0x00000d34 nbranch  0x000028f9 , 0x00000018 
+ 00009495  0x00000d35 call  0x000029bb 
+ 00009496  0x00000d36 bmark0  0x00000011 , 0x0000251c 
+ 00009497  0x00000d37 fetch  0x00000002 , 0x000000f6 
+ 00009498  0x00000d38 increase  0x00000001 , 0x0000003f 
+ 00009499  0x00000d39 store  0x00000002 , 0x000000f6 
+ 00009500  0x00000d3b rshift  0x00000021 , 0x00000002 
+ 00009501  0x00000d3c or  0x00000002 , 0x00000040 , 0x0000000e 
+ 00009502  0x00000d3e bpatch  0x00000052 , 0x0000400a 
+ 00009503  0x00000d3f enable  0x00000007 
+ 00009504  0x00000d40 enable  0x0000000a 
+ 00009505  0x00000d41 enable  0x0000000b 
+ 00009506  0x00000d42 parse  0x00000003 , 0x00000000 , 0x00000003 
+ 00009507  0x00000d43 rshift8  0x0000000c , 0x0000003f 
+ 00009508  0x00000d44 store  0x00000001 , 0x0000015d 
+ 00009509  0x00000d45 parse  0x00000003 , 0x00000000 , 0x00000004 
+ 00009510  0x00000d46 inject  0x00000000 , 0x00000007 
+ 00009511  0x00000d47 copy  0x0000000c , 0x0000003f 
+ 00009512  0x00000d48 store  0x00000001 , 0x00000019 
+ 00009513  0x00000d49 parse  0x00000003 , 0x00000000 , 0x00000003 
+ 00009514  0x00000d4a rshift8  0x0000000c , 0x0000003f 
+ 00009515  0x00000d4b store  0x00000001 , 0x0000015e 
+ 00009516  0x00000d4c fetch  0x00000001 , 0x00000019 
+ 00009517  0x00000d4d sub  0x0000003f , 0x00000003 , 0x0000003e 
+ 00009518  0x00000d4e branch  0x00002533 , 0x00000002 
+ 00009519  0x00000d4f beq  0x00000007 , 0x00002533 
+ 00009520  0x00000d50 fetch  0x00000001 , 0x0000004c 
+ 00009521  0x00000d51 isolate1  0x00000005 , 0x0000003f 
+ 00009522  0x00000d52 setflag  0x00000001 , 0x00000001 , 0x00000015 
+ 00009523  0x00000d54 bpatch  0x00000053 , 0x0000400a 
+ 00009524  0x00000d55 parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00009525  0x00000d56 disable  0x0000000b 
+ 00009526  0x00000d57 disable  0x0000000a 
+ 00009527  0x00000d58 branch  0x00002631 , 0x00000006 
+ 00009528  0x00000d59 bmark0  0x00000011 , 0x0000253c 
+ 00009529  0x00000d5a fetch  0x00000002 , 0x000000f8 
+ 00009530  0x00000d5b increase  0x00000001 , 0x0000003f 
+ 00009531  0x00000d5c store  0x00000002 , 0x000000f8 
+ 00009532  0x00000d5e bpatch  0x00000054 , 0x0000400a 
+ 00009533  0x00000d5f fetch  0x00000001 , 0x0000015d 
+ 00009534  0x00000d60 compare  0x00000000 , 0x0000003f , 0x00000007 
+ 00009535  0x00000d61 setflag  0x00000001 , 0x0000000a , 0x00000000 
+ 00009536  0x00000d62 branch  0x0000254c , 0x00000001 
+ 00009537  0x00000d63 icompare  0x00000007 , 0x00000004 
+ 00009538  0x00000d64 branch  0x0000254b , 0x00000001 
+ 00009539  0x00000d65 bmark0  0x00000007 , 0x0000264d 
+ 00009540  0x00000d66 fetcht  0x00000001 , 0x000000b0 
+ 00009541  0x00000d67 icompare  0x00000007 , 0x00000002 
+ 00009542  0x00000d68 nbranch  0x0000264d , 0x00000001 
+ 00009543  0x00000d69 fetch  0x00000001 , 0x00000047 
+ 00009544  0x00000d6a set0  0x00000005 , 0x0000003f 
+ 00009545  0x00000d6b set1  0x00000004 , 0x0000003f 
+ 00009546  0x00000d6c store  0x00000001 , 0x00000047 
+ 00009547  0x00000d6e enable  0x0000002d 
+ 00009548  0x00000d70 bpatch  0x00000055 , 0x0000400a 
+ 00009549  0x00000d71 fetch  0x00000001 , 0x00000019 
+ 00009550  0x00000d72 icopy  0x00000001 
+ 00009551  0x00000d73 bmark1  0x0000000a , 0x0000255b 
+ 00009552  0x00000d74 fetcht  0x00000001 , 0x0000015e 
+ 00009553  0x00000d75 fetch  0x00000001 , 0x00000047 
+ 00009554  0x00000d76 set0  0x00000000 , 0x0000003f 
+ 00009555  0x00000d77 isolate1  0x00000000 , 0x00000002 
+ 00009556  0x00000d78 setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00009557  0x00000d79 isolate1  0x00000001 , 0x00000002 
+ 00009558  0x00000d7a setflag  0x00000001 , 0x00000001 , 0x0000003f 
+ 00009559  0x00000d7b store  0x00000001 , 0x00000047 
+ 00009560  0x00000d7c isolate0  0x00000001 , 0x00000002 
+ 00009561  0x00000d7d branch  0x0000255b , 0x00000001 
+ 00009562  0x00000d7e call  0x00002687 
+ 00009563  0x00000d80 bpatch  0x00000056 , 0x0000400a 
+ 00009564  0x00000d81 arg  0x00000000 , 0x00000002 
+ 00009565  0x00000d82 call  0x00002a1c 
+ 00009566  0x00000d83 and  0x00000001 , 0x0000000f , 0x0000003f 
+ 00009567  0x00000d84 beq  0x00000001 , 0x00002587 
+ 00009568  0x00000d85 beq  0x00000000 , 0x0000264d 
+ 00009569  0x00000d86 beq  0x00000002 , 0x00002659 
+ 00009570  0x00000d87 fetcht  0x00000001 , 0x0000015e 
+ 00009571  0x00000d88 fetch  0x00000001 , 0x00000047 
+ 00009572  0x00000d89 icompare  0x00000004 , 0x00000002 
+ 00009573  0x00000d8a nbranch  0x00002569 , 0x00000001 
+ 00009574  0x00000d8b bmark0  0x0000000a , 0x00002568 
+ 00009575  0x00000d8c bbit0  0x00000007 , 0x00002569 
+ 00009576  0x00000d8e set1  0x0000000f , 0x00000000 
+ 00009577  0x00000d90 bpatch  0x00000057 , 0x0000400a 
+ 00009578  0x00000d91 deposit  0x00000001 
+ 00009579  0x00000d92 beq  0x00000003 , 0x00002589 
+ 00009580  0x00000d93 beq  0x00000004 , 0x0000258d 
+ 00009581  0x00000d94 beq  0x00000007 , 0x00002578 
+ 00009582  0x00000d95 beq  0x00000008 , 0x0000258c 
+ 00009583  0x00000d96 arg  0x00000004 , 0x00000002 
+ 00009584  0x00000d97 call  0x00002a1c 
+ 00009585  0x00000d98 beq  0x0000000a , 0x00002588 
+ 00009586  0x00000d99 beq  0x0000000b , 0x0000258b 
+ 00009587  0x00000d9a arg  0x00000008 , 0x00000002 
+ 00009588  0x00000d9b call  0x00002a1c 
+ 00009589  0x00000d9c beq  0x0000000e , 0x00002588 
+ 00009590  0x00000d9d beq  0x0000000f , 0x0000258b 
+ 00009591  0x00000d9e rtn 
+ 00009592  0x00000da2 bpatch  0x00000058 , 0x0000400b 
+ 00009593  0x00000da3 enable  0x0000000d 
+ 00009594  0x00000da4 enable  0x00000009 
+ 00009595  0x00000da5 enable  0x0000000e 
+ 00009596  0x00000da6 arg  0x000000d1 , 0x00000005 
+ 00009597  0x00000da7 force  0x0000001e , 0x00000039 
+ 00009598  0x00000da9 parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00009599  0x00000daa rshift3  0x0000000c , 0x0000003f 
+ 00009600  0x00000dab istore  0x00000001 , 0x00000005 
+ 00009601  0x00000dac loop  0x0000257e 
+ 00009602  0x00000dad bmark0  0x00000007 , 0x0000264d 
+ 00009603  0x00000dae parse  0x00000003 , 0x00000000 , 0x00000010 
+ 00009604  0x00000daf nsetflag  0x00000006 , 0x00000008 , 0x00000000 
+ 00009605  0x00000db0 branch  0x0000263d , 0x00000006 
+ 00009606  0x00000db1 branch  0x00002620 
+ 00009607  0x00000db5 branch  0x0000264d 
+ 00009608  0x00000db9 set1  0x00000010 , 0x00000000 
+ 00009609  0x00000dbb enable  0x0000000c 
+ 00009610  0x00000dbc branch  0x0000258e 
+ 00009611  0x00000dc0 set1  0x00000010 , 0x00000000 
+ 00009612  0x00000dc2 set1  0x00000002 , 0x00000015 
+ 00009613  0x00000dc4 enable  0x0000000d 
+ 00009614  0x00000dc6 bpatch  0x00000059 , 0x0000400b 
+ 00009615  0x00000dc7 bmark1  0x00000001 , 0x0000264d 
+ 00009616  0x00000dc8 isolate0  0x00000001 , 0x00000015 
+ 00009617  0x00000dc9 branch  0x0000259a , 0x00000001 
+ 00009618  0x00000dca disable  0x00000007 
+ 00009619  0x00000dcb enable  0x0000000d 
+ 00009620  0x00000dcc disable  0x0000000c 
+ 00009621  0x00000dcd add  0x00000022 , 0x00000002 , 0x0000000b 
+ 00009622  0x00000dce correlate  0x00000022 , 0x00000026 
+ 00009623  0x00000dcf nbranch  0x0000263d , 0x00000018 
+ 00009624  0x00000dd0 set1  0x00000010 , 0x00000000 
+ 00009625  0x00000dd1 enable  0x00000007 
+ 00009626  0x00000dd3 bpatch  0x0000005a , 0x0000400b 
+ 00009627  0x00000dd4 enable  0x0000000e 
+ 00009628  0x00000dd5 enable  0x00000009 
+ 00009629  0x00000dd6 parse  0x00000003 , 0x00000000 , 0x00000003 
+ 00009630  0x00000dd7 rshift8  0x0000000c , 0x0000003f 
+ 00009631  0x00000dd8 store  0x00000001 , 0x00000180 
+ 00009632  0x00000dd9 parse  0x00000003 , 0x00000000 , 0x00000005 
+ 00009633  0x00000dda bmark1  0x00000010 , 0x000025a5 
+ 00009634  0x00000ddb rshift3  0x0000000c , 0x00000039 
+ 00009635  0x00000ddc rshift3  0x00000039 , 0x00000039 
+ 00009636  0x00000ddd branch  0x000025a8 
+ 00009637  0x00000ddf parse  0x00000003 , 0x00000000 , 0x00000005 
+ 00009638  0x00000de0 rshift  0x0000000c , 0x00000039 
+ 00009639  0x00000de1 parse  0x00000003 , 0x00000000 , 0x00000003 
+ 00009640  0x00000de3 bpatch  0x0000005b , 0x0000400b 
+ 00009641  0x00000de4 deposit  0x00000039 
+ 00009642  0x00000de5 store  0x00000002 , 0x0000015f 
+ 00009643  0x00000de6 branch  0x000025e8 , 0x00000034 
+ 00009644  0x00000de7 isub  0x00000035 , 0x0000003e 
+ 00009645  0x00000de8 branch  0x0000263d , 0x00000002 
+ 00009646  0x00000de9 bpatch  0x0000005c , 0x0000400b 
+ 00009647  0x00000dea set0  0x00000000 , 0x00000000 
+ 00009648  0x00000deb fetch  0x00000001 , 0x00000180 
+ 00009649  0x00000dec and_into  0x00000003 , 0x0000003f 
+ 00009650  0x00000ded arg  0x00000551 , 0x00000005 
+ 00009651  0x00000dee beq  0x00000003 , 0x000025ba 
+ 00009652  0x00000def bmark1  0x00000011 , 0x000025e4 
+ 00009653  0x00000df1 fetch  0x00000001 , 0x00000180 
+ 00009654  0x00000df2 and_into  0x00000003 , 0x0000003f 
+ 00009655  0x00000df3 beq  0x00000002 , 0x000025bf 
+ 00009656  0x00000df4 beq  0x00000001 , 0x000025d3 
+ 00009657  0x00000df5 branch  0x0000263d 
+ 00009658  0x00000df8 fetch  0x00000002 , 0x0000015f 
+ 00009659  0x00000df9 sub  0x0000003f , 0x00000070 , 0x0000003e 
+ 00009660  0x00000dfa nbranch  0x0000263d , 0x00000002 
+ 00009661  0x00000dfb bmark1  0x0000000f , 0x00002620 
+ 00009662  0x00000dfc branch  0x000025e4 
+ 00009663  0x00000e00 bpatch  0x0000005d , 0x0000400b 
+ 00009664  0x00000e01 bmark1  0x0000000f , 0x00002620 
+ 00009665  0x00000e02 fetch  0x00000002 , 0x0000015f 
+ 00009666  0x00000e03 arg  0x000002e0 , 0x00000002 
+ 00009667  0x00000e04 isub  0x00000002 , 0x0000003e 
+ 00009668  0x00000e05 branch  0x0000263d , 0x00000002 
+ 00009669  0x00000e06 fetch  0x00000001 , 0x00000263 
+ 00009670  0x00000e07 bbit0  0x00000000 , 0x000025c9 
+ 00009671  0x00000e08 bbit0  0x00000001 , 0x000025ce 
+ 00009672  0x00000e09 branch  0x0000264d 
+ 00009673  0x00000e0b jam  0x00000001 , 0x00000261 
+ 00009674  0x00000e0c fetch  0x00000002 , 0x0000025d 
+ 00009675  0x00000e0d bne  0x00000000 , 0x0000264d 
+ 00009676  0x00000e0e arg  0x00001000 , 0x00000005 
+ 00009677  0x00000e0f branch  0x000025e4 
+ 00009678  0x00000e11 jam  0x00000002 , 0x00000261 
+ 00009679  0x00000e12 fetch  0x00000002 , 0x0000025f 
+ 00009680  0x00000e13 bne  0x00000000 , 0x0000264d 
+ 00009681  0x00000e14 arg  0x00001400 , 0x00000005 
+ 00009682  0x00000e15 branch  0x000025e4 
+ 00009683  0x00000e18 bpatch  0x0000005e , 0x0000400b 
+ 00009684  0x00000e19 bmark1  0x0000000f , 0x00002620 
+ 00009685  0x00000e1a fetch  0x00000002 , 0x0000015f 
+ 00009686  0x00000e1b arg  0x000002e0 , 0x00000002 
+ 00009687  0x00000e1c isub  0x00000002 , 0x0000003e 
+ 00009688  0x00000e1d branch  0x0000263d , 0x00000002 
+ 00009689  0x00000e1e fetch  0x00000001 , 0x00000261 
+ 00009690  0x00000e1f beq  0x00000001 , 0x000025dd 
+ 00009691  0x00000e20 beq  0x00000002 , 0x000025e1 
+ 00009692  0x00000e21 branch  0x0000264d 
+ 00009693  0x00000e23 arg  0x00001000 , 0x00000005 
+ 00009694  0x00000e24 fetch  0x00000002 , 0x0000025d 
+ 00009695  0x00000e25 iadd  0x00000005 , 0x00000005 
+ 00009696  0x00000e26 branch  0x000025e4 
+ 00009697  0x00000e28 arg  0x00001400 , 0x00000005 
+ 00009698  0x00000e29 fetch  0x00000002 , 0x0000025f 
+ 00009699  0x00000e2a iadd  0x00000005 , 0x00000005 
+ 00009700  0x00000e2c parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00009701  0x00000e2d rshift3  0x0000000c , 0x0000003f 
+ 00009702  0x00000e2e istore  0x00000001 , 0x00000005 
+ 00009703  0x00000e2f loop  0x000025e4 
+ 00009704  0x00000e31 bpatch  0x0000005f , 0x0000400b 
+ 00009705  0x00000e32 parse  0x00000003 , 0x00000000 , 0x00000010 
+ 00009706  0x00000e33 branch  0x00002637 , 0x00000006 
+ 00009707  0x00000e34 fetch  0x00000001 , 0x00004363 
+ 00009708  0x00000e35 beq  0x00000001 , 0x0000264d 
+ 00009709  0x00000e36 bmark1  0x00000011 , 0x0000260d 
+ 00009710  0x00000e37 bmark1  0x0000000f , 0x0000264a 
+ 00009711  0x00000e38 fetch  0x00000001 , 0x00000180 
+ 00009712  0x00000e39 compare  0x00000003 , 0x0000003f , 0x00000003 
+ 00009713  0x00000e3a branch  0x0000260d , 0x00000001 
+ 00009714  0x00000e3b fetch  0x00000002 , 0x0000015f 
+ 00009715  0x00000e3c branch  0x0000260d , 0x00000034 
+ 00009716  0x00000e3d bpatch  0x00000060 , 0x0000400c 
+ 00009717  0x00000e3e fetch  0x00000001 , 0x00000261 
+ 00009718  0x00000e3f beq  0x00000001 , 0x000025f9 
+ 00009719  0x00000e40 beq  0x00000002 , 0x00002603 
+ 00009720  0x00000e41 branch  0x00002a8c 
+ 00009721  0x00000e43 fetch  0x00000002 , 0x0000025d 
+ 00009722  0x00000e44 fetcht  0x00000002 , 0x0000015f 
+ 00009723  0x00000e45 iadd  0x00000002 , 0x0000003f 
+ 00009724  0x00000e46 store  0x00000002 , 0x0000025d 
+ 00009725  0x00000e47 beq  0x00000000 , 0x00002a8c 
+ 00009726  0x00000e48 fetcht  0x00000002 , 0x00001000 
+ 00009727  0x00000e49 increase  0x00000004 , 0x00000002 
+ 00009728  0x00000e4a isub  0x00000002 , 0x0000003e 
+ 00009729  0x00000e4b call  0x00002747 , 0x00000005 
+ 00009730  0x00000e4c branch  0x0000260d 
+ 00009731  0x00000e4e fetch  0x00000002 , 0x0000025f 
+ 00009732  0x00000e4f fetcht  0x00000002 , 0x0000015f 
+ 00009733  0x00000e50 iadd  0x00000002 , 0x0000003f 
+ 00009734  0x00000e51 store  0x00000002 , 0x0000025f 
+ 00009735  0x00000e52 beq  0x00000000 , 0x00002a8c 
+ 00009736  0x00000e53 fetcht  0x00000002 , 0x00001400 
+ 00009737  0x00000e54 add  0x00000002 , 0x00000004 , 0x00000002 
+ 00009738  0x00000e55 isub  0x00000002 , 0x0000003e 
+ 00009739  0x00000e56 call  0x0000274b , 0x00000005 
+ 00009740  0x00000e57 branch  0x0000260d 
+ 00009741  0x00000e59 bpatch  0x00000061 , 0x0000400c 
+ 00009742  0x00000e5a fetcht  0x00000001 , 0x0000004c 
+ 00009743  0x00000e5b fetch  0x00000001 , 0x00000180 
+ 00009744  0x00000e5c compare  0x00000003 , 0x0000003f , 0x00000003 
+ 00009745  0x00000e5d setflag  0x00000001 , 0x00000006 , 0x00000002 
+ 00009746  0x00000e5e nsetflag  0x00000001 , 0x00000007 , 0x00000002 
+ 00009747  0x00000e5f storet  0x00000001 , 0x0000004c 
+ 00009748  0x00000e60 nbranch  0x00002616 , 0x00000001 
+ 00009749  0x00000e61 set1  0x00000001 , 0x00000000 
+ 00009750  0x00000e63 bmark0  0x00000011 , 0x00002620 
+ 00009751  0x00000e64 isolate1  0x00000006 , 0x00000002 
+ 00009752  0x00000e65 branch  0x00002620 , 0x00000001 
+ 00009753  0x00000e66 fetch  0x00000002 , 0x000000fa 
+ 00009754  0x00000e67 increase  0x00000001 , 0x0000003f 
+ 00009755  0x00000e68 store  0x00000002 , 0x000000fa 
+ 00009756  0x00000e69 set1  0x00000005 , 0x00000000 
+ 00009757  0x00000e6a set0  0x00000007 , 0x00000002 
+ 00009758  0x00000e6b set0  0x00000001 , 0x00000000 
+ 00009759  0x00000e6c storet  0x00000001 , 0x0000004c 
+ 00009760  0x00000e6e bpatch  0x00000062 , 0x0000400c 
+ 00009761  0x00000e6f fetcht  0x00000001 , 0x0000015e 
+ 00009762  0x00000e70 fetch  0x00000001 , 0x00000047 
+ 00009763  0x00000e71 set1  0x00000005 , 0x0000003f 
+ 00009764  0x00000e72 isolate1  0x00000002 , 0x00000002 
+ 00009765  0x00000e73 setflag  0x00000001 , 0x00000002 , 0x0000003f 
+ 00009766  0x00000e74 isolate1  0x0000000a , 0x00000000 
+ 00009767  0x00000e75 setflag  0x00000001 , 0x00000007 , 0x0000003f 
+ 00009768  0x00000e76 store  0x00000001 , 0x00000047 
+ 00009769  0x00000e77 fetch  0x00000002 , 0x0000015f 
+ 00009770  0x00000e78 nbranch  0x0000264d , 0x00000034 
+ 00009771  0x00000e79 fetch  0x00000001 , 0x0000004c 
+ 00009772  0x00000e7a set0  0x00000007 , 0x0000003f 
+ 00009773  0x00000e7b store  0x00000001 , 0x0000004c 
+ 00009774  0x00000e7c fetch  0x00000001 , 0x00000180 
+ 00009775  0x00000e7d compare  0x00000001 , 0x0000003f , 0x00000007 
+ 00009776  0x00000e7f branch  0x0000264d 
+ 00009777  0x00000e82 bpatch  0x00000063 , 0x0000400c 
+ 00009778  0x00000e83 disable  0x0000002d 
+ 00009779  0x00000e84 fetch  0x00000002 , 0x0000001a 
+ 00009780  0x00000e85 increase  0x00000001 , 0x0000003f 
+ 00009781  0x00000e86 store  0x00000002 , 0x0000001a 
+ 00009782  0x00000e87 branch  0x0000264d 
+ 00009783  0x00000e89 fetch  0x00000002 , 0x0000001c 
+ 00009784  0x00000e8a increase  0x00000001 , 0x0000003f 
+ 00009785  0x00000e8b store  0x00000002 , 0x0000001c 
+ 00009786  0x00000e8c call  0x0000263e 
+ 00009787  0x00000e8d bmark0  0x00000011 , 0x0000263d 
+ 00009788  0x00000e8e set1  0x00000005 , 0x00000000 
+ 00009789  0x00000e90 branch  0x0000264d 
+ 00009790  0x00000e93 bpatch  0x00000064 , 0x0000400c 
+ 00009791  0x00000e94 fetch  0x00000001 , 0x00000180 
+ 00009792  0x00000e95 compare  0x00000003 , 0x0000003f , 0x00000003 
+ 00009793  0x00000e96 nbranch  0x00002646 , 0x00000001 
+ 00009794  0x00000e98 fetcht  0x00000001 , 0x0000004c 
+ 00009795  0x00000e99 set0  0x00000006 , 0x00000002 
+ 00009796  0x00000e9a storet  0x00000001 , 0x0000004c 
+ 00009797  0x00000e9b rtn 
+ 00009798  0x00000e9f fetcht  0x00000001 , 0x0000004c 
+ 00009799  0x00000ea0 set0  0x00000007 , 0x00000002 
+ 00009800  0x00000ea1 storet  0x00000001 , 0x0000004c 
+ 00009801  0x00000ea2 branch  0x00004c0b 
+ 00009802  0x00000ea5 fetch  0x00000001 , 0x00000047 
+ 00009803  0x00000ea6 set1  0x00000005 , 0x0000003f 
+ 00009804  0x00000ea7 store  0x00000001 , 0x00000047 
+ 00009805  0x00000ea9 bpatch  0x00000065 , 0x0000400c 
+ 00009806  0x00000eaa disable  0x0000001d 
+ 00009807  0x00000eab disable  0x0000001c 
+ 00009808  0x00000eac disable  0x0000000d 
+ 00009809  0x00000ead disable  0x0000000c 
+ 00009810  0x00000eae disable  0x00000009 
+ 00009811  0x00000eaf disable  0x0000000e 
+ 00009812  0x00000eb0 disable  0x00000007 
+ 00009813  0x00000eb1 branch  0x000028f9 , 0x00000021 
+ 00009814  0x00000eb2 until  0x0000003e , 0x00000027 
+ 00009815  0x00000eb3 nop  0x00000064 
+ 00009816  0x00000eb4 branch  0x000028f9 
+ 00009817  0x00000eb7 bpatch  0x00000066 , 0x0000400c 
+ 00009818  0x00000eb8 enable  0x00000009 
+ 00009819  0x00000eb9 enable  0x0000000c 
+ 00009820  0x00000eba parse  0x00000003 , 0x00000000 , 0x00000048 
+ 00009821  0x00000ebb isolate1  0x0000003a , 0x0000003f 
+ 00009822  0x00000ebc setflag  0x00000001 , 0x00000000 , 0x00000000 
+ 00009823  0x00000ebd copy  0x00000020 , 0x00000002 
+ 00009824  0x00000ebe ialigned  0x00000020 
+ 00009825  0x00000ebf ialigned  0x0000001e 
+ 00009826  0x00000ec0 pulse  0x00000015 
+ 00009827  0x00000ec1 setsect  0x00000002 , 0x000fffff 
+ 00009828  0x00000ec2 setsect  0x00000003 , 0x0000ffff 
+ 00009829  0x00000ec3 nop  0x00000020 
+ 00009830  0x00000ec4 iverify  0x0000000d 
+ 00009831  0x00000ec5 deposit  0x0000002c 
+ 00009832  0x00000ec6 store  0x00000003 , 0x00000178 
+ 00009833  0x00000ec7 deposit  0x0000002d 
+ 00009834  0x00000ec8 store  0x00000001 , 0x0000017b 
+ 00009835  0x00000ec9 copy  0x00000002 , 0x00000020 
+ 00009836  0x00000eca branch  0x0000266e , 0x00000001 
+ 00009837  0x00000ecb branch  0x0000263d 
+ 00009838  0x00000ecd bpatch  0x00000067 , 0x0000400c 
+ 00009839  0x00000ece parse  0x00000003 , 0x00000000 , 0x00000048 
+ 00009840  0x00000ecf ialigned  0x0000001f 
+ 00009841  0x00000ed0 ialigned  0x00000004 
+ 00009842  0x00000ed1 ialigned  0x0000002e 
+ 00009843  0x00000ed2 ialigned  0x00000012 
+ 00009844  0x00000ed3 force  0x00000000 , 0x0000003f 
+ 00009845  0x00000ed4 parse  0x00000003 , 0x00000000 , 0x00000010 
+ 00009846  0x00000ed5 branch  0x0000263d , 0x00000006 
+ 00009847  0x00000ed6 setarg  0x0ffffffc 
+ 00009848  0x00000ed7 iand  0x00000012 , 0x0000003f 
+ 00009849  0x00000ed8 store  0x00000004 , 0x00000165 
+ 00009850  0x00000ed9 deposit  0x0000001d 
+ 00009851  0x00000eda store  0x00000003 , 0x00000175 
+ 00009852  0x00000edb deposit  0x0000001c 
+ 00009853  0x00000edc store  0x00000001 , 0x00000173 
+ 00009854  0x00000edd deposit  0x00000004 
+ 00009855  0x00000ede store  0x00000001 , 0x00000174 
+ 00009856  0x00000edf deposit  0x0000002e 
+ 00009857  0x00000ee0 store  0x00000002 , 0x0000017c 
+ 00009858  0x00000ee1 deposit  0x00000021 
+ 00009859  0x00000ee2 inject  0x00000001 , 0x00000020 
+ 00009860  0x00000ee3 compare  0x00000002 , 0x00000001 , 0x0000000f 
+ 00009861  0x00000ee4 setflag  0x00000001 , 0x0000000b , 0x00000000 
+ 00009862  0x00000ee5 branch  0x0000264d 
+ 00009863  0x00000ee8 bpatch  0x00000068 , 0x0000400d 
+ 00009864  0x00000ee9 fetch  0x00000001 , 0x00000047 
+ 00009865  0x00000eea rtnbit0  0x00000003 
+ 00009866  0x00000eeb set0  0x00000003 , 0x0000003f 
+ 00009867  0x00000eec setflip  0x00000006 , 0x0000003f 
+ 00009868  0x00000eed store  0x00000001 , 0x00000047 
+ 00009869  0x00000eee fetch  0x00000001 , 0x000040c5 
+ 00009870  0x00000eef beq  0x00000013 , 0x0000269c 
+ 00009871  0x00000ef0 rtneq  0x00000007 
+ 00009872  0x00000ef1 fetch  0x00000001 , 0x0000004b 
+ 00009873  0x00000ef2 rtnbit0  0x00000006 , 0x0000003f 
+ 00009874  0x00000ef3 set0  0x00000006 , 0x0000003f 
+ 00009875  0x00000ef4 set1  0x00000007 , 0x0000003f 
+ 00009876  0x00000ef5 store  0x00000001 , 0x0000004b 
+ 00009877  0x00000ef6 set0  0x00000002 , 0x00000000 
+ 00009878  0x00000ef7 fetch  0x00000002 , 0x00004246 
+ 00009879  0x00000ef8 nrtn  0x00000034 
+ 00009880  0x00000ef9 fetch  0x00000001 , 0x0000004b 
+ 00009881  0x00000efa set0  0x00000007 , 0x0000003f 
+ 00009882  0x00000efb store  0x00000001 , 0x0000004b 
+ 00009883  0x00000efc branch  0x0000525d 
+ 00009884  0x00000eff bpatch  0x00000069 , 0x0000400d 
+ 00009885  0x00000f00 fetch  0x00000001 , 0x000004b7 
+ 00009886  0x00000f01 rshift  0x0000003f , 0x0000003f 
+ 00009887  0x00000f02 beq  0x00000011 , 0x000026b8 
+ 00009888  0x00000f03 beq  0x00000012 , 0x000026c0 
+ 00009889  0x00000f04 beq  0x00000018 , 0x000026e9 
+ 00009890  0x00000f05 beq  0x0000007f , 0x000026a8 
+ 00009891  0x00000f06 rtnne  0x00000003 
+ 00009892  0x00000f07 fetch  0x00000001 , 0x000004b8 
+ 00009893  0x00000f08 beq  0x0000002b , 0x000026b0 
+ 00009894  0x00000f09 beq  0x00000011 , 0x000026ab 
+ 00009895  0x00000f0a rtn 
+ 00009896  0x00000f0d fetch  0x00000001 , 0x000004b8 
+ 00009897  0x00000f0e set1  0x00000007 , 0x0000003f 
+ 00009898  0x00000f0f rtn 
+ 00009899  0x00000f11 rtn  0x00000029 
+ 00009900  0x00000f12 fetch  0x00000001 , 0x00000030 
+ 00009901  0x00000f13 rtnbit1  0x00000004 
+ 00009902  0x00000f14 jam  0x00000031 , 0x0000007c 
+ 00009903  0x00000f15 rtn 
+ 00009904  0x00000f19 rtn  0x00000029 
+ 00009905  0x00000f1a fetch  0x00000001 , 0x00000031 
+ 00009906  0x00000f1b isolate1  0x00000004 , 0x0000003f 
+ 00009907  0x00000f1c branch  0x000026b5 , 0x00000001 
+ 00009908  0x00000f1e rtn 
+ 00009909  0x00000f20 set0  0x00000004 , 0x0000003f 
+ 00009910  0x00000f21 store  0x00000001 , 0x00000031 
+ 00009911  0x00000f22 rtn 
+ 00009912  0x00000f25 bpatch  0x0000006a , 0x0000400d 
+ 00009913  0x00000f26 fetch  0x00000001 , 0x0000004c 
+ 00009914  0x00000f27 set1  0x00000002 , 0x0000003f 
+ 00009915  0x00000f28 store  0x00000001 , 0x0000004c 
+ 00009916  0x00000f29 jam  0x00000001 , 0x00008011 
+ 00009917  0x00000f2a fetch  0x00000001 , 0x00000030 
+ 00009918  0x00000f2b isolate1  0x00000004 , 0x0000003f 
+ 00009919  0x00000f2c rtn 
+ 00009920  0x00000f2f bpatch  0x0000006b , 0x0000400d 
+ 00009921  0x00000f30 fetch  0x00000001 , 0x0000004c 
+ 00009922  0x00000f31 set0  0x00000002 , 0x0000003f 
+ 00009923  0x00000f32 store  0x00000001 , 0x0000004c 
+ 00009924  0x00000f33 jam  0x00000000 , 0x00008011 
+ 00009925  0x00000f34 rtn 
+ 00009926  0x00000f38 bpatch  0x0000006c , 0x0000400d 
+ 00009927  0x00000f39 copy  0x00000022 , 0x0000003f 
+ 00009928  0x00000f3a store  0x00000004 , 0x0000420c 
+ 00009929  0x00000f3b add  0x00000022 , 0x00000003 , 0x00000011 
+ 00009930  0x00000f3c branch  0x000026cc , 0x00000029 
+ 00009931  0x00000f3d add  0x00000028 , 0x00000003 , 0x00000011 
+ 00009932  0x00000f3f fetcht  0x00000002 , 0x00000032 
+ 00009933  0x00000f40 deposit  0x00000011 
+ 00009934  0x00000f41 set0  0x0000001b , 0x0000003f 
+ 00009935  0x00000f42 idiv  0x00000002 
+ 00009936  0x00000f43 fetch  0x00000002 , 0x00000075 
+ 00009937  0x00000f44 call  0x00007f86 
+ 00009938  0x00000f45 remainder  0x00000013 
+ 00009939  0x00000f46 isub  0x00000013 , 0x0000003f 
+ 00009940  0x00000f47 branch  0x000026d6 , 0x00000002 
+ 00009941  0x00000f48 iadd  0x00000002 , 0x0000003f 
+ 00009942  0x00000f4a iadd  0x00000011 , 0x0000003f 
+ 00009943  0x00000f4b store  0x00000004 , 0x00000034 
+ 00009944  0x00000f4c jam  0x00000000 , 0x0000455b 
+ 00009945  0x00000f4d fetch  0x00000001 , 0x00000030 
+ 00009946  0x00000f4e set1  0x00000001 , 0x0000003f 
+ 00009947  0x00000f4f store  0x00000001 , 0x00000030 
+ 00009948  0x00000f50 fetch  0x00000001 , 0x00000073 
+ 00009949  0x00000f51 store  0x00000001 , 0x0000008a 
+ 00009950  0x00000f52 setarg  0x00000000 
+ 00009951  0x00000f53 store  0x00000003 , 0x00004169 
+ 00009952  0x00000f54 store  0x00000003 , 0x0000416c 
+ 00009953  0x00000f55 store  0x00000001 , 0x00004159 
+ 00009954  0x00000f56 jam  0x0000000b , 0x00000a99 
+ 00009955  0x00000f57 call  0x00007d86 
+ 00009956  0x00000f58 fetch  0x00000002 , 0x000040c1 
+ 00009957  0x00000f59 store  0x00000002 , 0x0000003e 
+ 00009958  0x00000f5a nrtn  0x00000029 
+ 00009959  0x00000f5b add  0x00000004 , 0xffffffff , 0x00000007 
+ 00009960  0x00000f5c rtn 
+ 00009961  0x00000f5f bpatch  0x0000006d , 0x0000400d 
+ 00009962  0x00000f60 fetch  0x00000001 , 0x00000030 
+ 00009963  0x00000f61 rtnbit0  0x00000001 
+ 00009964  0x00000f62 set0  0x00000001 , 0x0000003f 
+ 00009965  0x00000f63 store  0x00000001 , 0x00000030 
+ 00009966  0x00000f64 fetch  0x00000002 , 0x000040bf 
+ 00009967  0x00000f65 store  0x00000002 , 0x0000003e 
+ 00009968  0x00000f66 disable  0x0000002b 
+ 00009969  0x00000f67 jam  0x0000000c , 0x00000a99 
+ 00009970  0x00000f68 branch  0x00007d86 
+ 00009971  0x00000f6c bpatch  0x0000006e , 0x0000400d 
+ 00009972  0x00000f6d enable  0x0000002e 
+ 00009973  0x00000f6e fetch  0x00000001 , 0x00000030 
+ 00009974  0x00000f6f bbit1  0x00000001 , 0x00002700 
+ 00009975  0x00000f70 rtnmark1  0x00000011 
+ 00009976  0x00000f71 fetch  0x00000001 , 0x00000047 
+ 00009977  0x00000f72 rtnbit1  0x00000003 
+ 00009978  0x00000f73 fetch  0x00000001 , 0x00000048 
+ 00009979  0x00000f74 nrtn  0x00000034 
+ 00009980  0x00000f75 fetch  0x00000001 , 0x0000004b 
+ 00009981  0x00000f76 rtnbit1  0x00000006 
+ 00009982  0x00000f78 force  0x00000000 , 0x0000003f 
+ 00009983  0x00000f79 rtn 
+ 00009984  0x00000f7c bbit0  0x00000002 , 0x0000270f 
+ 00009985  0x00000f7d fetch  0x00000001 , 0x0000008a 
+ 00009986  0x00000f7e beq  0x00000002 , 0x00002706 
+ 00009987  0x00000f7f fetch  0x00000001 , 0x00000047 
+ 00009988  0x00000f80 bbit1  0x00000003 , 0x00002718 
+ 00009989  0x00000f81 bmark0  0x00000008 , 0x00002718 
+ 00009990  0x00000f83 nbranch  0x00002718 , 0x00000029 
+ 00009991  0x00000f84 fetch  0x00000001 , 0x00000048 
+ 00009992  0x00000f85 nbranch  0x00002718 , 0x00000034 
+ 00009993  0x00000f87 fetch  0x00000001 , 0x000000ef 
+ 00009994  0x00000f88 increase  0xffffffff , 0x0000003f 
+ 00009995  0x00000f89 store  0x00000001 , 0x000000ef 
+ 00009996  0x00000f8a nbranch  0x000026fe , 0x00000034 
+ 00009997  0x00000f8b jam  0x00000010 , 0x000000ef 
+ 00009998  0x00000f8c branch  0x00002718 
+ 00009999  0x00000f94 fetch  0x00000001 , 0x0000008a 
+ 00010000  0x00000f95 bne  0x00000001 , 0x00002718 
+ 00010001  0x00000f96 fetch  0x00000001 , 0x0000008b 
+ 00010002  0x00000f97 branch  0x00002718 , 0x00000034 
+ 00010003  0x00000f98 increase  0xffffffff , 0x0000003f 
+ 00010004  0x00000f99 store  0x00000001 , 0x0000008b 
+ 00010005  0x00000f9a fetch  0x00000001 , 0x00000047 
+ 00010006  0x00000f9b rtnbit1  0x00000003 
+ 00010007  0x00000f9c nrtn  0x0000002d 
+ 00010008  0x00000f9e fetch  0x00000001 , 0x0000008a 
+ 00010009  0x00000f9f increase  0xffffffff , 0x0000003f 
+ 00010010  0x00000fa0 store  0x00000001 , 0x0000008a 
+ 00010011  0x00000fa1 rtn 
+ 00010012  0x00000fad bpatch  0x0000006f , 0x0000400d 
+ 00010013  0x00000fae disable  0x00000010 
+ 00010014  0x00000faf copy  0x00000002 , 0x0000001b 
+ 00010015  0x00000fb0 call  0x00002260 
+ 00010016  0x00000fb1 disable  0x00000028 
+ 00010017  0x00000fb2 nrtn  0x00000005 
+ 00010018  0x00000fb3 force  0x00000000 , 0x0000001b 
+ 00010019  0x00000fb4 enable  0x00000028 
+ 00010020  0x00000fb5 rtn 
+ 00010021  0x00000fb9 fetch  0x00000001 , 0x00004158 
+ 00010022  0x00000fba icompare  0x000000ff , 0x00000004 
+ 00010023  0x00000fbb rtn 
+ 00010024  0x00000fbf bpatch  0x00000070 , 0x0000400e 
+ 00010025  0x00000fc0 set0  0x00000001 , 0x00000000 
+ 00010026  0x00000fc2 jam  0x00000000 , 0x0000026a 
+ 00010027  0x00000fc3 fetch  0x00000001 , 0x00000263 
+ 00010028  0x00000fc4 rtn  0x00000034 
+ 00010029  0x00000fc5 isolate1  0x00000000 , 0x0000003f 
+ 00010030  0x00000fc6 arg  0x00001000 , 0x00000006 
+ 00010031  0x00000fc7 call  0x00004d79 , 0x00000001 
+ 00010032  0x00000fc8 bpatch  0x00000071 , 0x0000400e 
+ 00010033  0x00000fc9 fetch  0x00000001 , 0x0000026a 
+ 00010034  0x00000fca beq  0x00000001 , 0x0000273b 
+ 00010035  0x00000fcc jam  0x00000000 , 0x0000026a 
+ 00010036  0x00000fcd fetch  0x00000001 , 0x00000263 
+ 00010037  0x00000fce rtnbit0  0x00000001 
+ 00010038  0x00000fcf arg  0x00001400 , 0x00000006 
+ 00010039  0x00000fd0 call  0x00004d79 
+ 00010040  0x00000fd1 fetch  0x00000001 , 0x0000026a 
+ 00010041  0x00000fd2 beq  0x00000001 , 0x00002741 
+ 00010042  0x00000fd3 rtn 
+ 00010043  0x00000fd6 fetch  0x00000001 , 0x00000263 
+ 00010044  0x00000fd7 set0  0x00000000 , 0x0000003f 
+ 00010045  0x00000fd8 store  0x00000001 , 0x00000263 
+ 00010046  0x00000fd9 setarg  0x00000000 
+ 00010047  0x00000fda store  0x00000002 , 0x0000025d 
+ 00010048  0x00000fdb rtn 
+ 00010049  0x00000fdd fetch  0x00000001 , 0x00000263 
+ 00010050  0x00000fde set0  0x00000001 , 0x0000003f 
+ 00010051  0x00000fdf store  0x00000001 , 0x00000263 
+ 00010052  0x00000fe0 setarg  0x00000000 
+ 00010053  0x00000fe1 store  0x00000002 , 0x0000025f 
+ 00010054  0x00000fe2 rtn 
+ 00010055  0x00000fe5 fetch  0x00000001 , 0x00000263 
+ 00010056  0x00000fe6 set1  0x00000000 , 0x0000003f 
+ 00010057  0x00000fe7 store  0x00000001 , 0x00000263 
+ 00010058  0x00000fe8 rtn 
+ 00010059  0x00000feb fetch  0x00000001 , 0x00000263 
+ 00010060  0x00000fec set1  0x00000001 , 0x0000003f 
+ 00010061  0x00000fed store  0x00000001 , 0x00000263 
+ 00010062  0x00000fee rtn 
+ 00010063  0x00000ff5 bpatch  0x00000072 , 0x0000400e 
+ 00010064  0x00000ff6 add  0x00000028 , 0x00000001 , 0x00000021 
+ 00010065  0x00000ff7 call  0x000028ea 
+ 00010066  0x00000ff8 force  0x00000003 , 0x00000024 
+ 00010067  0x00000ff9 call  0x000028d2 
+ 00010068  0x00000ffa call  0x00002a51 
+ 00010069  0x00000ffb call  0x00002a5f 
+ 00010070  0x00000ffc branch  0x00002a64 
+ 00010071  0x00001000 bpatch  0x00000073 , 0x0000400e 
+ 00010072  0x00001001 call  0x00002a4d 
+ 00010073  0x00001002 deposit  0x00000028 
+ 00010074  0x00001003 fetcht  0x00000004 , 0x000040ca 
+ 00010075  0x00001004 isub  0x00000002 , 0x0000003f 
+ 00010076  0x00001005 rtnne  0x00000001 
+ 00010077  0x00001006 compare  0x00000000 , 0x00000001 , 0x0000001f 
+ 00010078  0x00001007 nbranch  0x00002761 , 0x00000001 
+ 00010079  0x00001008 fetch  0x00000001 , 0x00000019 
+ 00010080  0x00001009 rtn  0x00000034 
+ 00010081  0x0000100b call  0x0000274f 
+ 00010082  0x0000100d compare  0x00000010 , 0x00000001 , 0x0000001f 
+ 00010083  0x0000100e branch  0x0000264d , 0x00000001 
+ 00010084  0x0000100f rshift  0x00000021 , 0x00000002 
+ 00010085  0x00001010 or  0x00000002 , 0x00000040 , 0x0000000e 
+ 00010086  0x00001012 bpatch  0x00000074 , 0x0000400e 
+ 00010087  0x00001013 enable  0x00000007 
+ 00010088  0x00001014 enable  0x0000000a 
+ 00010089  0x00001015 enable  0x0000001b 
+ 00010090  0x00001016 set0  0x00000010 , 0x00000000 
+ 00010091  0x00001017 deposit  0x00000004 
+ 00010092  0x00001018 inject  0x00000003 , 0x00000003 
+ 00010093  0x00001019 deposit  0x00000001 
+ 00010094  0x0000101a inject  0x00000003 , 0x00000004 
+ 00010095  0x0000101b fetch  0x00000001 , 0x00000047 
+ 00010096  0x0000101c inject  0x00000000 , 0x00000004 
+ 00010097  0x0000101d inject  0x00000003 , 0x00000003 
+ 00010098  0x0000101e enable  0x00000008 
+ 00010099  0x0000101f inject  0x00000003 , 0x00000008 
+ 00010100  0x00001020 disable  0x0000001b 
+ 00010101  0x00001021 disable  0x00000008 
+ 00010102  0x00001022 disable  0x0000000a 
+ 00010103  0x00001023 set0  0x00000002 , 0x00000015 
+ 00010104  0x00001024 arg  0x00000000 , 0x00000002 
+ 00010105  0x00001025 call  0x00002a1c 
+ 00010106  0x00001026 bpatch  0x00000075 , 0x0000400e 
+ 00010107  0x00001027 and  0x00000001 , 0x0000001f , 0x0000003f 
+ 00010108  0x00001028 beq  0x00000013 , 0x000027b4 
+ 00010109  0x00001029 beq  0x00000000 , 0x0000264d 
+ 00010110  0x0000102a beq  0x00000001 , 0x0000264d 
+ 00010111  0x0000102b beq  0x00000002 , 0x00002797 
+ 00010112  0x0000102c beq  0x00000003 , 0x000027c5 
+ 00010113  0x0000102d beq  0x00000004 , 0x000027cb 
+ 00010114  0x0000102e beq  0x00000007 , 0x0000278c 
+ 00010115  0x0000102f beq  0x00000008 , 0x000027ca 
+ 00010116  0x00001030 arg  0x00000004 , 0x00000002 
+ 00010117  0x00001031 call  0x00002a1c 
+ 00010118  0x00001032 beq  0x0000000a , 0x000027c7 
+ 00010119  0x00001033 beq  0x0000000b , 0x000027cd 
+ 00010120  0x00001034 arg  0x00000008 , 0x00000002 
+ 00010121  0x00001035 call  0x00002a1c 
+ 00010122  0x00001036 beq  0x0000000f , 0x000027cd 
+ 00010123  0x00001037 branch  0x000027c7 
+ 00010124  0x0000103b bpatch  0x00000076 , 0x0000400e 
+ 00010125  0x0000103c enable  0x0000001d 
+ 00010126  0x0000103d enable  0x00000009 
+ 00010127  0x0000103e enable  0x0000000e 
+ 00010128  0x0000103f force  0x0000001e , 0x00000039 
+ 00010129  0x00001040 arg  0x000000b3 , 0x00000006 
+ 00010130  0x00001042 ifetch  0x00000001 , 0x00000006 
+ 00010131  0x00001043 inject  0x00000003 , 0x00000008 
+ 00010132  0x00001044 loop  0x00002792 
+ 00010133  0x00001045 bmark1  0x00000007 , 0x000027f7 
+ 00010134  0x00001046 branch  0x0000264d 
+ 00010135  0x00001049 bpatch  0x00000077 , 0x0000400e 
+ 00010136  0x0000104a fetch  0x00000001 , 0x00000181 
+ 00010137  0x0000104b icopy  0x00000004 
+ 00010138  0x0000104c fetch  0x00000001 , 0x00000090 
+ 00010139  0x0000104d icopy  0x0000001c 
+ 00010140  0x0000104e fetch  0x00000003 , 0x000040aa 
+ 00010141  0x0000104f icopy  0x0000001d 
+ 00010142  0x00001050 fetch  0x00000002 , 0x000040a4 
+ 00010143  0x00001051 icopy  0x0000002e 
+ 00010144  0x00001052 enable  0x00000009 
+ 00010145  0x00001053 enable  0x0000001c 
+ 00010146  0x00001054 copy  0x00000020 , 0x00000011 
+ 00010147  0x00001055 call  0x000028e2 
+ 00010148  0x00001056 pulse  0x00000015 
+ 00010149  0x00001057 nop  0x00000020 
+ 00010150  0x00001058 copy  0x00000021 , 0x0000000b 
+ 00010151  0x00001059 fetch  0x00000004 , 0x00000161 
+ 00010152  0x0000105a icopy  0x00000021 
+ 00010153  0x0000105b preload  0x0000001e 
+ 00010154  0x0000105c set1  0x0000003a , 0x0000003f 
+ 00010155  0x0000105d inject  0x00000003 , 0x00000048 
+ 00010156  0x0000105e preload  0x0000001f 
+ 00010157  0x0000105f inject  0x00000003 , 0x00000048 
+ 00010158  0x00001060 copy  0x0000000b , 0x00000021 
+ 00010159  0x00001061 copy  0x00000011 , 0x00000020 
+ 00010160  0x00001062 enable  0x00000008 
+ 00010161  0x00001063 inject  0x00000003 , 0x00000010 
+ 00010162  0x00001064 disable  0x00000008 
+ 00010163  0x00001065 branch  0x0000264d 
+ 00010164  0x00001068 bpatch  0x00000078 , 0x0000400f 
+ 00010165  0x00001069 enable  0x0000000e 
+ 00010166  0x0000106a enable  0x00000009 
+ 00010167  0x0000106b enable  0x0000001c 
+ 00010168  0x0000106c fetch  0x00000001 , 0x000004b6 
+ 00010169  0x0000106d and  0x0000003f , 0x000001f8 , 0x00000002 
+ 00010170  0x0000106e arg  0x000004b6 , 0x00000006 
+ 00010171  0x0000106f increase  0x00000008 , 0x00000002 
+ 00010172  0x00001071 add  0x00000002 , 0xffffffb8 , 0x00000013 
+ 00010173  0x00001072 nbranch  0x000027c2 , 0x00000002 
+ 00010174  0x00001073 ifetch  0x00000009 , 0x00000006 
+ 00010175  0x00001074 inject  0x00000003 , 0x00000048 
+ 00010176  0x00001075 copy  0x00000013 , 0x00000002 
+ 00010177  0x00001076 branch  0x000027bc 
+ 00010178  0x00001078 ifetch  0x00000009 , 0x00000006 
+ 00010179  0x00001079 iinject  0x00000003 , 0x00000002 
+ 00010180  0x0000107a branch  0x000027f7 
+ 00010181  0x0000107d enable  0x0000001c 
+ 00010182  0x0000107e branch  0x000027d0 
+ 00010183  0x00001081 enable  0x0000001c 
+ 00010184  0x00001082 set1  0x00000010 , 0x00000000 
+ 00010185  0x00001083 branch  0x000027d0 
+ 00010186  0x00001086 set1  0x00000002 , 0x00000015 
+ 00010187  0x00001088 enable  0x0000001d 
+ 00010188  0x00001089 branch  0x000027d0 
+ 00010189  0x0000108d set1  0x00000002 , 0x00000015 
+ 00010190  0x0000108e enable  0x0000001d 
+ 00010191  0x0000108f set1  0x00000010 , 0x00000000 
+ 00010192  0x00001092 bpatch  0x00000079 , 0x0000400f 
+ 00010193  0x00001093 fetch  0x00000001 , 0x0000004c 
+ 00010194  0x00001094 bbit0  0x00000005 , 0x000027e5 
+ 00010195  0x00001095 sub  0x00000001 , 0x00000003 , 0x0000003e 
+ 00010196  0x00001096 branch  0x000027e5 , 0x00000002 
+ 00010197  0x00001097 disable  0x0000000e 
+ 00010198  0x00001098 disable  0x0000001c 
+ 00010199  0x00001099 enable  0x0000001d 
+ 00010200  0x0000109a disable  0x00000007 
+ 00010201  0x0000109b set1  0x00000001 , 0x00000015 
+ 00010202  0x0000109c isolate1  0x00000002 , 0x00000015 
+ 00010203  0x0000109d branch  0x000027df , 0x00000001 
+ 00010204  0x0000109e setarg  0x000abeee 
+ 00010205  0x0000109f inject  0x00000003 , 0x00000014 
+ 00010206  0x000010a0 branch  0x000027e3 
+ 00010207  0x000010a2 setarg  0x005faeba 
+ 00010208  0x000010a3 inject  0x00000003 , 0x00000018 
+ 00010209  0x000010a4 setarg  0x00000012 
+ 00010210  0x000010a5 inject  0x00000003 , 0x00000006 
+ 00010211  0x000010a7 enable  0x00000007 
+ 00010212  0x000010a8 set1  0x00000010 , 0x00000000 
+ 00010213  0x000010aa enable  0x0000000e 
+ 00010214  0x000010ab enable  0x00000009 
+ 00010215  0x000010ac bmark1  0x00000005 , 0x00002800 
+ 00010216  0x000010ad fetch  0x00000001 , 0x000041db 
+ 00010217  0x000010ae inject  0x00000003 , 0x00000003 
+ 00010218  0x000010af fetch  0x00000002 , 0x000041dc 
+ 00010219  0x000010b0 iforce  0x00000039 
+ 00010220  0x000010b1 bmark1  0x00000010 , 0x000027ef 
+ 00010221  0x000010b2 inject  0x00000003 , 0x00000005 
+ 00010222  0x000010b3 branch  0x000027f0 
+ 00010223  0x000010b5 inject  0x00000003 , 0x0000000d 
+ 00010224  0x000010b7 deposit  0x00000039 
+ 00010225  0x000010b8 branch  0x000027f7 , 0x00000034 
+ 00010226  0x000010b9 fetch  0x00000002 , 0x0000016f 
+ 00010227  0x000010ba iforce  0x00000006 
+ 00010228  0x000010bc ifetch  0x00000001 , 0x00000006 
+ 00010229  0x000010bd inject  0x00000003 , 0x00000008 
+ 00010230  0x000010be loop  0x000027f4 
+ 00010231  0x000010c2 enable  0x00000008 
+ 00010232  0x000010c3 inject  0x00000003 , 0x00000010 
+ 00010233  0x000010c4 disable  0x00000008 
+ 00010234  0x000010c5 call  0x000024c1 
+ 00010235  0x000010c6 fetch  0x00000001 , 0x0000004c 
+ 00010236  0x000010c7 bbit0  0x00000005 , 0x0000264d 
+ 00010237  0x000010c8 force  0x00000000 , 0x0000003f 
+ 00010238  0x000010c9 inject  0x00000003 , 0x00000006 
+ 00010239  0x000010ca branch  0x0000264d 
+ 00010240  0x000010ce bpatch  0x0000007a , 0x0000400f 
+ 00010241  0x000010cf bmark1  0x00000010 , 0x00002808 
+ 00010242  0x000010d1 fetch  0x00000001 , 0x00000180 
+ 00010243  0x000010d2 inject  0x00000003 , 0x00000003 
+ 00010244  0x000010d3 fetch  0x00000001 , 0x0000015f 
+ 00010245  0x000010d4 iforce  0x00000013 
+ 00010246  0x000010d5 inject  0x00000003 , 0x00000005 
+ 00010247  0x000010d6 branch  0x0000280d 
+ 00010248  0x000010d8 fetch  0x00000001 , 0x00000180 
+ 00010249  0x000010d9 inject  0x00000003 , 0x00000003 
+ 00010250  0x000010da fetch  0x00000002 , 0x0000015f 
+ 00010251  0x000010db iforce  0x00000013 
+ 00010252  0x000010dc inject  0x00000003 , 0x0000000d 
+ 00010253  0x000010de arg  0x00000551 , 0x00000006 
+ 00010254  0x000010e0 copy  0x00000013 , 0x0000003e 
+ 00010255  0x000010e1 branch  0x00002814 , 0x00000005 
+ 00010256  0x000010e2 ifetch  0x00000001 , 0x00000006 
+ 00010257  0x000010e3 inject  0x00000003 , 0x00000008 
+ 00010258  0x000010e4 increase  0xffffffff , 0x00000013 
+ 00010259  0x000010e5 branch  0x0000280e 
+ 00010260  0x000010e7 fetch  0x00000002 , 0x000000fc 
+ 00010261  0x000010e8 increase  0x00000001 , 0x0000003f 
+ 00010262  0x000010e9 store  0x00000002 , 0x000000fc 
+ 00010263  0x000010ea branch  0x000027f7 
+ 00010264  0x000010ee fetch  0x00000004 , 0x00000165 
+ 00010265  0x000010ef add  0x0000003f , 0x00000007 , 0x00000011 
+ 00010266  0x000010f0 fetch  0x00000002 , 0x00000171 
+ 00010267  0x000010f1 nbranch  0x0000281e , 0x00000034 
+ 00010268  0x000010f2 increase  0xfffffffd , 0x00000011 
+ 00010269  0x000010f3 branch  0x00002826 
+ 00010270  0x000010f5 mul32  0x0000003f , 0x0000000c , 0x0000003f 
+ 00010271  0x000010f6 hfetcht  0x00000002 , 0x00008040 
+ 00010272  0x000010f7 increase  0x00000001 , 0x00000002 
+ 00010273  0x000010f9 isub  0x00000002 , 0x0000003f 
+ 00010274  0x000010fa nbranch  0x00002825 , 0x00000002 
+ 00010275  0x000010fb increase  0xffffffff , 0x00000011 
+ 00010276  0x000010fc branch  0x00002821 
+ 00010277  0x000010fe sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00010278  0x00001100 until  0x0000003e , 0x00000023 
+ 00010279  0x00001101 compare  0x00000000 , 0x00000022 , 0x00000003 
+ 00010280  0x00001102 nbranch  0x00002826 , 0x00000001 
+ 00010281  0x00001103 iforce  0x00000029 
+ 00010282  0x00001104 copy  0x00000011 , 0x00000028 
+ 00010283  0x00001105 iforce  0x00000029 
+ 00010284  0x00001106 rtn 
+ 00010285  0x0000110a bpatch  0x0000007b , 0x0000400f 
+ 00010286  0x0000110b until  0x0000003e , 0x00000022 
+ 00010287  0x0000110c deposit  0x0000001a 
+ 00010288  0x0000110d iforce  0x00000006 
+ 00010289  0x0000110e rshift16 , 0x0000003f , 0x0000003f 
+ 00010290  0x0000110f isub  0x00000022 , 0x00000039 
+ 00010291  0x00001110 and_into  0x00000003 , 0x00000039 
+ 00010292  0x00001111 nbranch  0x00002837 , 0x00000005 
+ 00010293  0x00001112 force  0x00000000 , 0x0000003f 
+ 00010294  0x00001113 branch  0x0000283b 
+ 00010295  0x00001115 arg  0x00000ea6 , 0x00000002 
+ 00010296  0x00001116 force  0x00000000 , 0x0000003f 
+ 00010297  0x00001118 iadd  0x00000002 , 0x0000003f 
+ 00010298  0x00001119 loop  0x00002839 
+ 00010299  0x0000111b iadd  0x00000006 , 0x0000003f 
+ 00010300  0x0000111c div  0x0000003f , 0x0000000c 
+ 00010301  0x0000111d call  0x00007f86 
+ 00010302  0x0000111e quotient  0x0000003f 
+ 00010303  0x0000111f store  0x00000002 , 0x00000171 
+ 00010304  0x00001120 rtn 
+ 00010305  0x00001123 bpatch  0x0000007c , 0x0000400f 
+ 00010306  0x00001124 deposit  0x0000001a 
+ 00010307  0x00001125 copy  0x00000019 , 0x00000002 
+ 00010308  0x00001126 isub  0x00000002 , 0x0000003e 
+ 00010309  0x00001127 nsetflag  0x00000002 , 0x0000002c , 0x0000003f 
+ 00010310  0x00001128 isub  0x00000002 , 0x00000002 
+ 00010311  0x00001129 setarg  0x00000ea6 
+ 00010312  0x0000112a isolate0  0x0000000f , 0x00000002 
+ 00010313  0x0000112b branch  0x0000284c , 0x00000001 
+ 00010314  0x0000112c setarg  0xffff0ea6 
+ 00010315  0x0000112d iadd  0x00000002 , 0x00000002 
+ 00010316  0x0000112f storet  0x00000006 , 0x00000447 
+ 00010317  0x00001130 rtn  0x00000036 
+ 00010318  0x00001131 storet  0x00000006 , 0x00000038 
+ 00010319  0x00001132 rtn 
+ 00010320  0x00001135 disable  0x00000030 
+ 00010321  0x00001136 fetch  0x00000006 , 0x00000447 
+ 00010322  0x00001137 branch  0x00002854 , 0x00000036 
+ 00010323  0x00001138 fetch  0x00000006 , 0x00000038 
+ 00010324  0x0000113a iadd  0x00000019 , 0x00000030 
+ 00010325  0x0000113b increase  0x0000000a , 0x00000030 
+ 00010326  0x0000113c setarg  0x00000ea6 
+ 00010327  0x0000113d isub  0x00000030 , 0x0000003f 
+ 00010328  0x0000113e isolate0  0x0000000f , 0x0000003f 
+ 00010329  0x0000113f branch  0x0000285e , 0x00000001 
+ 00010330  0x00001140 setarg  0x0000f15a 
+ 00010331  0x00001141 iadd  0x00000030 , 0x00000030 
+ 00010332  0x00001143 copy  0x00000030 , 0x0000001a 
+ 00010333  0x00001144 rtn 
+ 00010334  0x00001146 force  0x00000000 , 0x0000003e 
+ 00010335  0x00001147 branch  0x0000285c 
+ 00010336  0x0000114f bpatch  0x0000007d , 0x0000400f 
+ 00010337  0x00001150 call  0x00002918 
+ 00010338  0x00001151 copy  0x00000021 , 0x0000003f 
+ 00010339  0x00001152 and_into  0x00000180 , 0x0000003f 
+ 00010340  0x00001153 compare  0x00000003 , 0x00000024 , 0x00000007 
+ 00010341  0x00001154 nbranch  0x00002869 , 0x00000001 
+ 00010342  0x00001155 rshift3  0x0000003f , 0x0000003f 
+ 00010343  0x00001156 iadd  0x00000017 , 0x0000003f 
+ 00010344  0x00001157 branch  0x0000286a 
+ 00010345  0x00001159 copy  0x00000017 , 0x0000003f 
+ 00010346  0x0000115b div  0x0000003f , 0x0000004f 
+ 00010347  0x0000115c pulse  0x00000015 
+ 00010348  0x0000115d call  0x00007f86 
+ 00010349  0x0000115e remainder  0x00000011 
+ 00010350  0x0000115f add  0x00000011 , 0xffffffd8 , 0x00000002 
+ 00010351  0x00001160 branch  0x00002872 , 0x00000002 
+ 00010352  0x00001161 lshift  0x00000011 , 0x00000002 
+ 00010353  0x00001162 branch  0x00002874 
+ 00010354  0x00001164 lshift  0x00000002 , 0x00000002 
+ 00010355  0x00001165 increase  0x00000001 , 0x00000002 
+ 00010356  0x00001167 bpatch  0x0000007e , 0x0000400f 
+ 00010357  0x00001168 fetch  0x00000001 , 0x00000031 
+ 00010358  0x00001169 bbit0  0x00000003 , 0x00002885 
+ 00010359  0x0000116b fetch  0x00000004 , 0x000040d2 
+ 00010360  0x0000116c isub  0x00000021 , 0x0000003e 
+ 00010361  0x0000116d branch  0x00002885 , 0x00000002 
+ 00010362  0x0000116e call  0x000028a4 
+ 00010363  0x0000116f fetch  0x00000001 , 0x000040d9 
+ 00010364  0x00001170 rtn  0x00000034 
+ 00010365  0x00001171 fetch  0x00000001 , 0x00000031 
+ 00010366  0x00001172 set1  0x00000002 , 0x0000003f 
+ 00010367  0x00001173 store  0x00000001 , 0x00000031 
+ 00010368  0x00001174 fetch  0x00000005 , 0x000040e7 
+ 00010369  0x00001175 store  0x00000005 , 0x000040da 
+ 00010370  0x00001176 ifetch  0x00000005 , 0x00000006 
+ 00010371  0x00001177 store  0x00000005 , 0x000040df 
+ 00010372  0x00001178 call  0x000028a9 
+ 00010373  0x0000117a fetch  0x00000001 , 0x00000031 
+ 00010374  0x0000117b rtnbit0  0x00000002 
+ 00010375  0x0000117c isolate1  0x00000001 , 0x00000021 
+ 00010376  0x0000117d branch  0x000028a1 , 0x00000001 
+ 00010377  0x0000117e rshift3  0x00000002 , 0x00000011 
+ 00010378  0x0000117f and  0x00000002 , 0x00000007 , 0x00000007 
+ 00010379  0x00001180 setarg  0x000040da 
+ 00010380  0x00001181 iadd  0x00000011 , 0x00000011 
+ 00010381  0x00001182 ifetch  0x00000001 , 0x00000011 
+ 00010382  0x00001183 qisolate0  0x0000003f 
+ 00010383  0x00001184 branch  0x00002892 , 0x00000001 
+ 00010384  0x00001185 deposit  0x00000002 
+ 00010385  0x00001186 branch  0x0000289e 
+ 00010386  0x00001188 fetch  0x00000001 , 0x000040e4 
+ 00010387  0x00001189 iforce  0x00000012 
+ 00010388  0x0000118a deposit  0x00000021 
+ 00010389  0x0000118b and_into  0x00000180 , 0x0000003f 
+ 00010390  0x0000118c rshift3  0x0000003f , 0x0000003f 
+ 00010391  0x0000118d iadd  0x00000017 , 0x0000003f 
+ 00010392  0x0000118e idiv  0x00000012 
+ 00010393  0x0000118f setarg  0x000040f2 
+ 00010394  0x00001190 call  0x00007f86 
+ 00010395  0x00001191 remainder  0x00000011 
+ 00010396  0x00001192 iadd  0x00000011 , 0x00000006 
+ 00010397  0x00001193 ifetch  0x00000001 , 0x00000006 
+ 00010398  0x00001195 store  0x00000001 , 0x000040e5 
+ 00010399  0x00001196 iforce  0x00000002 
+ 00010400  0x00001197 rtn 
+ 00010401  0x0000119a fetch  0x00000001 , 0x000040e5 
+ 00010402  0x0000119b iforce  0x00000002 
+ 00010403  0x0000119c rtn 
+ 00010404  0x0000119f fetch  0x00000001 , 0x00000031 
+ 00010405  0x000011a0 set0  0x00000002 , 0x0000003f 
+ 00010406  0x000011a1 set0  0x00000003 , 0x0000003f 
+ 00010407  0x000011a2 store  0x00000001 , 0x00000031 
+ 00010408  0x000011a3 rtn 
+ 00010409  0x000011aa bpatch  0x0000007f , 0x0000400f 
+ 00010410  0x000011ab arg  0x000040f2 , 0x00000005 
+ 00010411  0x000011ac force  0x0000000a , 0x00000039 
+ 00010412  0x000011ad call  0x00007ec6 
+ 00010413  0x000011ae arg  0x000040f2 , 0x00000005 
+ 00010414  0x000011af force  0x00000000 , 0x00000013 
+ 00010415  0x000011b0 force  0x00000002 , 0x00000007 
+ 00010416  0x000011b2 fetch  0x00000005 , 0x000040da 
+ 00010417  0x000011b3 iforce  0x00000002 
+ 00010418  0x000011b4 compare  0x00000002 , 0x00000007 , 0x000000ff 
+ 00010419  0x000011b5 branch  0x000028b5 , 0x00000001 
+ 00010420  0x000011b6 rshift  0x00000002 , 0x00000002 
+ 00010421  0x000011b8 isolate0  0x00000000 , 0x00000002 
+ 00010422  0x000011b9 branch  0x000028b9 , 0x00000001 
+ 00010423  0x000011ba deposit  0x00000013 
+ 00010424  0x000011bb istore  0x00000001 , 0x00000005 
+ 00010425  0x000011bd rshift2  0x00000002 , 0x00000002 
+ 00010426  0x000011be increase  0x00000002 , 0x00000013 
+ 00010427  0x000011bf compare  0x00000028 , 0x00000013 , 0x000000fe 
+ 00010428  0x000011c0 nbranch  0x000028c2 , 0x00000001 
+ 00010429  0x000011c1 fetch  0x00000005 , 0x000040df 
+ 00010430  0x000011c2 iforce  0x00000002 
+ 00010431  0x000011c3 compare  0x00000002 , 0x00000007 , 0x000000ff 
+ 00010432  0x000011c4 branch  0x000028c2 , 0x00000001 
+ 00010433  0x000011c5 rshift  0x00000002 , 0x00000002 
+ 00010434  0x000011c7 sub  0x00000013 , 0x0000004e , 0x0000003e 
+ 00010435  0x000011c8 branch  0x000028b5 , 0x00000002 
+ 00010436  0x000011c9 force  0x00000001 , 0x00000013 
+ 00010437  0x000011ca increase  0xffffffff , 0x00000007 
+ 00010438  0x000011cb nbranch  0x000028b0 , 0x00000005 
+ 00010439  0x000011cc arg  0x000040f2 , 0x00000011 
+ 00010440  0x000011cd deposit  0x00000005 
+ 00010441  0x000011ce isub  0x00000011 , 0x0000003f 
+ 00010442  0x000011cf store  0x00000001 , 0x000040e4 
+ 00010443  0x000011d0 rtn 
+ 00010444  0x000011d3 bpatch  0x00000080 , 0x00004010 
+ 00010445  0x000011d4 call  0x00002860 
+ 00010446  0x000011d5 fetch  0x00000001 , 0x0000017f 
+ 00010447  0x000011d6 bbit0  0x00000005 , 0x000028d1 
+ 00010448  0x000011d7 fetcht  0x00000001 , 0x000004cc 
+ 00010449  0x000011d9 branch  0x0000291f 
+ 00010450  0x000011dd bpatch  0x00000081 , 0x00004010 
+ 00010451  0x000011de call  0x00002860 
+ 00010452  0x000011df fetch  0x00000001 , 0x0000017f 
+ 00010453  0x000011e0 bbit0  0x00000004 , 0x000028d7 
+ 00010454  0x000011e1 fetcht  0x00000001 , 0x000004cb 
+ 00010455  0x000011e3 branch  0x00002933 
+ 00010456  0x000011e7 force  0x00000000 , 0x0000002d 
+ 00010457  0x000011e8 fetch  0x00000003 , 0x000040a7 
+ 00010458  0x000011e9 iforce  0x0000002c 
+ 00010459  0x000011ea rtn 
+ 00010460  0x000011ed bpatch  0x00000082 , 0x00004010 
+ 00010461  0x000011ee fetch  0x00000001 , 0x000041d3 
+ 00010462  0x000011ef icopy  0x0000002d 
+ 00010463  0x000011f0 fetch  0x00000003 , 0x000041d0 
+ 00010464  0x000011f1 icopy  0x0000002c 
+ 00010465  0x000011f2 rtn 
+ 00010466  0x000011f5 bpatch  0x00000083 , 0x00004010 
+ 00010467  0x000011f6 fetch  0x00000002 , 0x000040a4 
+ 00010468  0x000011f7 icopy  0x0000002e 
+ 00010469  0x000011f8 fetch  0x00000001 , 0x000040a3 
+ 00010470  0x000011f9 icopy  0x0000002d 
+ 00010471  0x000011fa fetch  0x00000003 , 0x000040a0 
+ 00010472  0x000011fb icopy  0x0000002c 
+ 00010473  0x000011fc rtn 
+ 00010474  0x000011ff bpatch  0x00000084 , 0x00004010 
+ 00010475  0x00001200 fetch  0x00000002 , 0x00000044 
+ 00010476  0x00001201 icopy  0x0000002e 
+ 00010477  0x00001202 fetch  0x00000001 , 0x00000043 
+ 00010478  0x00001203 icopy  0x0000002d 
+ 00010479  0x00001204 fetch  0x00000003 , 0x00000040 
+ 00010480  0x00001205 icopy  0x0000002c 
+ 00010481  0x00001206 rtn 
+ 00010482  0x0000120a bmark1  0x00000020 , 0x000028f5 
+ 00010483  0x0000120b rtnmark0  0x0000001d 
+ 00010484  0x0000120c rtnmark0  0x0000001f 
+ 00010485  0x0000120e and_into  0xffffff00 , 0x0000002c 
+ 00010486  0x0000120f pulse  0x00000015 
+ 00010487  0x00001210 nop  0x00000020 
+ 00010488  0x00001211 rtn 
+ 00010489  0x00001215 bpatch  0x00000085 , 0x00004010 
+ 00010490  0x00001216 branch  0x0000290a , 0x00000021 
+ 00010491  0x00001217 jam  0x000000d4 , 0x00008955 
+ 00010492  0x00001218 nop  0x00000004 
+ 00010493  0x00001219 jam  0x000000d2 , 0x00008955 
+ 00010494  0x0000121a nop  0x00000004 
+ 00010495  0x0000121b jam  0x000000d1 , 0x00008955 
+ 00010496  0x0000121c nop  0x00000004 
+ 00010497  0x0000121d fetch  0x00000001 , 0x000041de 
+ 00010498  0x0000121e beq  0x00000000 , 0x00002908 
+ 00010499  0x0000121f beq  0x00000001 , 0x00002915 
+ 00010500  0x00001220 beq  0x00000002 , 0x00002908 
+ 00010501  0x00001221 beq  0x00000003 , 0x00002915 
+ 00010502  0x00001222 beq  0x00000004 , 0x00002915 
+ 00010503  0x00001223 beq  0x00000020 , 0x00002915 
+ 00010504  0x00001226 jam  0x000000d0 , 0x00008955 
+ 00010505  0x00001227 jam  0x000000e0 , 0x00008956 
+ 00010506  0x00001229 force  0x00000000 , 0x00000015 
+ 00010507  0x0000122a disable  0x00000021 
+ 00010508  0x0000122b disable  0x00000020 
+ 00010509  0x0000122c pulse  0x0000001e 
+ 00010510  0x0000122d jam  0x00000000 , 0x00008902 
+ 00010511  0x0000122e jam  0x00000000 , 0x00008901 
+ 00010512  0x0000122f jam  0x00000000 , 0x00008900 
+ 00010513  0x00001230 jam  0x00000000 , 0x00008903 
+ 00010514  0x00001231 jam  0x00000070 , 0x00008904 
+ 00010515  0x00001232 jam  0x00000000 , 0x00008906 
+ 00010516  0x00001233 rtn 
+ 00010517  0x00001239 jam  0x000000d0 , 0x00008955 
+ 00010518  0x0000123a jam  0x000000c0 , 0x00008956 
+ 00010519  0x0000123b branch  0x0000290a 
+ 00010520  0x0000123e bpatch  0x00000086 , 0x00004010 
+ 00010521  0x0000123f jam  0x00000000 , 0x00008902 
+ 00010522  0x00001240 jam  0x00000000 , 0x00008901 
+ 00010523  0x00001241 jam  0x00000018 , 0x00008900 
+ 00010524  0x00001242 jam  0x000000a7 , 0x00008903 
+ 00010525  0x00001243 jam  0x0000007f , 0x00008904 
+ 00010526  0x00001244 rtn 
+ 00010527  0x00001247 bpatch  0x00000087 , 0x00004010 
+ 00010528  0x00001249 storet  0x00000001 , 0x00000017 
+ 00010529  0x0000124a add  0x00000002 , 0x00000004 , 0x00000011 
+ 00010530  0x0000124b jam  0x00000007 , 0x0000896d 
+ 00010531  0x0000124c branch  0x00002981 
+ 00010532  0x0000124e bpatch  0x00000088 , 0x00004011 
+ 00010533  0x0000124f jam  0x000000cf , 0x00008901 
+ 00010534  0x00001250 nop  0x0000000a 
+ 00010535  0x00001251 jam  0x000000ff , 0x00008900 
+ 00010536  0x00001252 jam  0x000000af , 0x00008903 
+ 00010537  0x00001253 jam  0x000000ff , 0x00008904 
+ 00010538  0x00001254 nop  0x0000000a 
+ 00010539  0x00001255 jam  0x000000a0 , 0x00008902 
+ 00010540  0x00001256 rtn 
+ 00010541  0x00001259 fetch  0x00000001 , 0x000041e0 
+ 00010542  0x0000125a branch  0x00002931 , 0x00000034 
+ 00010543  0x0000125c add  0x00000002 , 0x00000002 , 0x00000011 
+ 00010544  0x0000125d rtn 
+ 00010545  0x0000125f add  0x00000002 , 0x00000000 , 0x00000011 
+ 00010546  0x00001260 rtn 
+ 00010547  0x00001263 bpatch  0x00000089 , 0x00004011 
+ 00010548  0x00001264 storet  0x00000001 , 0x00000017 
+ 00010549  0x00001265 call  0x0000292d 
+ 00010550  0x00001266 call  0x00002981 
+ 00010551  0x00001267 setarg  0x00000500 
+ 00010552  0x00001268 call  0x00002a8f 
+ 00010553  0x0000126a jam  0x00000001 , 0x00008906 
+ 00010554  0x0000126b jam  0x0000003c , 0x00008900 
+ 00010555  0x0000126c jam  0x000000e0 , 0x00008901 
+ 00010556  0x0000126d jam  0x00000012 , 0x0000896d 
+ 00010557  0x0000126e nop  0x0000000a 
+ 00010558  0x0000126f jam  0x00000001 , 0x00008902 
+ 00010559  0x00001270 jam  0x0000003d , 0x00008902 
+ 00010560  0x00001271 nop  0x0000000a 
+ 00010561  0x00001272 jam  0x000000b7 , 0x00008903 
+ 00010562  0x00001273 nop  0x0000000a 
+ 00010563  0x00001274 jam  0x0000007f , 0x00008902 
+ 00010564  0x00001276 fetch  0x00000001 , 0x000041de 
+ 00010565  0x00001277 beq  0x00000000 , 0x0000294b 
+ 00010566  0x00001278 beq  0x00000001 , 0x0000294f 
+ 00010567  0x00001279 beq  0x00000002 , 0x00002953 
+ 00010568  0x0000127a beq  0x00000003 , 0x00002957 
+ 00010569  0x0000127b beq  0x00000004 , 0x0000295b 
+ 00010570  0x0000127c beq  0x00000020 , 0x0000295f 
+ 00010571  0x0000127e jam  0x000000f0 , 0x00008956 
+ 00010572  0x0000127f call  0x00002965 
+ 00010573  0x00001280 jam  0x000000d8 , 0x00008955 
+ 00010574  0x00001281 rtn 
+ 00010575  0x00001284 jam  0x000000df , 0x00008956 
+ 00010576  0x00001285 call  0x00002965 
+ 00010577  0x00001286 jam  0x000000df , 0x00008955 
+ 00010578  0x00001287 rtn 
+ 00010579  0x0000128a jam  0x000000ff , 0x00008956 
+ 00010580  0x0000128b call  0x00002965 
+ 00010581  0x0000128c jam  0x000000df , 0x00008955 
+ 00010582  0x0000128d rtn 
+ 00010583  0x0000128f jam  0x000000ce , 0x00008956 
+ 00010584  0x00001290 call  0x00002965 
+ 00010585  0x00001291 jam  0x000000d8 , 0x00008955 
+ 00010586  0x00001292 rtn 
+ 00010587  0x00001295 jam  0x000000cb , 0x00008956 
+ 00010588  0x00001296 call  0x00002965 
+ 00010589  0x00001297 jam  0x000000d8 , 0x00008955 
+ 00010590  0x00001298 rtn 
+ 00010591  0x0000129b jam  0x000000d0 , 0x00008955 
+ 00010592  0x0000129c jam  0x000000c0 , 0x00008956 
+ 00010593  0x0000129d jam  0x0000004c , 0x00008957 
+ 00010594  0x0000129e jam  0x0000006c , 0x00008958 
+ 00010595  0x0000129f jam  0x00000050 , 0x00008959 
+ 00010596  0x000012a0 rtn 
+ 00010597  0x000012a3 nop  0x00000004 
+ 00010598  0x000012a4 jam  0x000000d1 , 0x00008955 
+ 00010599  0x000012a5 nop  0x00000004 
+ 00010600  0x000012a6 jam  0x000000d2 , 0x00008955 
+ 00010601  0x000012a7 nop  0x00000004 
+ 00010602  0x000012a8 jam  0x000000d4 , 0x00008955 
+ 00010603  0x000012a9 rtn 
+ 00010604  0x000012ad jam  0x00000006 , 0x00008042 
+ 00010605  0x000012af fetch  0x00000002 , 0x000040c3 
+ 00010606  0x000012b0 bbit0  0x0000000e , 0x0000296d 
+ 00010607  0x000012b1 iforce  0x00000006 
+ 00010608  0x000012b2 arg  0x00008900 , 0x00000002 
+ 00010609  0x000012b4 ifetch  0x00000001 , 0x00000006 
+ 00010610  0x000012b5 beq  0x000000ff , 0x00002977 
+ 00010611  0x000012b6 ior  0x00000002 , 0x00000005 
+ 00010612  0x000012b7 ifetch  0x00000001 , 0x00000006 
+ 00010613  0x000012b8 istore  0x00000001 , 0x00000005 
+ 00010614  0x000012b9 branch  0x00002971 
+ 00010615  0x000012bb bpatch  0x0000008a , 0x00004011 
+ 00010616  0x000012bc call  0x00002be5 
+ 00010617  0x000012bd call  0x000029c9 
+ 00010618  0x000012bf setarg  0x000007d0 
+ 00010619  0x000012c0 iadd  0x00000022 , 0x0000003f 
+ 00010620  0x000012c1 store  0x00000004 , 0x00000169 
+ 00010621  0x000012c2 set1  0x00000003 , 0x00000015 
+ 00010622  0x000012c3 force  0x00000000 , 0x00000015 
+ 00010623  0x000012c4 ncall  0x00002998 , 0x0000002b 
+ 00010624  0x000012c5 branch  0x000029ab 
+ 00010625  0x000012c9 bpatch  0x0000008b , 0x00004011 
+ 00010626  0x000012ca setarg  0x00000960 
+ 00010627  0x000012cb iadd  0x00000011 , 0x00000002 
+ 00010628  0x000012cc fetch  0x00000001 , 0x000040bd 
+ 00010629  0x000012cd jam  0x00000004 , 0x0000895f 
+ 00010630  0x000012ce imul32  0x00000002 , 0x0000003f 
+ 00010631  0x000012cf fetcht  0x00000001 , 0x000040be 
+ 00010632  0x000012d0 idiv  0x00000002 
+ 00010633  0x000012d1 call  0x00007f86 
+ 00010634  0x000012d2 quotient  0x00000011 
+ 00010635  0x000012d3 remainder  0x0000003f 
+ 00010636  0x000012d4 lshift16  0x0000003f , 0x0000003f 
+ 00010637  0x000012d5 lshift4  0x0000003f , 0x0000003f 
+ 00010638  0x000012d6 idiv  0x00000002 
+ 00010639  0x000012d7 call  0x00007f86 
+ 00010640  0x000012d8 quotient  0x0000003f 
+ 00010641  0x000012d9 lshift8  0x0000003f , 0x0000003f 
+ 00010642  0x000012da lshift  0x0000003f , 0x0000003f 
+ 00010643  0x000012db ior  0x00000011 , 0x0000003f 
+ 00010644  0x000012dc hstore  0x00000004 , 0x00008960 
+ 00010645  0x000012dd jam  0x00000044 , 0x0000895f 
+ 00010646  0x000012de jam  0x000000c4 , 0x0000895f 
+ 00010647  0x000012df rtn 
+ 00010648  0x000012e3 bpatch  0x0000008c , 0x00004011 
+ 00010649  0x000012e4 jam  0x00000002 , 0x00008906 
+ 00010650  0x000012e5 setarg  0x0003d090 
+ 00010651  0x000012e6 call  0x00002a8f 
+ 00010652  0x000012e7 jam  0x0000007f , 0x00008900 
+ 00010653  0x000012e8 nop  0x00000082 
+ 00010654  0x000012e9 jam  0x00000030 , 0x00008952 
+ 00010655  0x000012ea jam  0x000000d0 , 0x00008901 
+ 00010656  0x000012eb jam  0x00000070 , 0x00008952 
+ 00010657  0x000012ec jam  0x000000f0 , 0x00008952 
+ 00010658  0x000012ed force  0x00000032 , 0x00000039 
+ 00010659  0x000012ef hfetch  0x00000001 , 0x00008980 
+ 00010660  0x000012f0 bbit1  0x00000005 , 0x000029a6 
+ 00010661  0x000012f1 loop  0x000029a3 
+ 00010662  0x000012f3 store  0x00000001 , 0x000040ce 
+ 00010663  0x000012f4 jam  0x00000000 , 0x00008901 
+ 00010664  0x000012f5 jam  0x00000000 , 0x00008900 
+ 00010665  0x000012f6 jam  0x00000000 , 0x00008906 
+ 00010666  0x000012f7 rtn 
+ 00010667  0x000012fa bpatch  0x0000008d , 0x00004011 
+ 00010668  0x000012fb fetch  0x00000001 , 0x000040ce 
+ 00010669  0x000012fc set1  0x00000005 , 0x0000003f 
+ 00010670  0x000012fd hstore  0x00000001 , 0x00008952 
+ 00010671  0x000012fe hfetcht  0x00000001 , 0x00008950 
+ 00010672  0x000012ff and_into  0x00000007 , 0x00000002 
+ 00010673  0x00001300 lshift3  0x0000003f , 0x0000003f 
+ 00010674  0x00001301 ior  0x00000002 , 0x0000003f 
+ 00010675  0x00001302 hstore  0x00000001 , 0x00008950 
+ 00010676  0x00001303 hfetch  0x00000001 , 0x00008951 
+ 00010677  0x00001304 set0  0x00000000 , 0x0000003f 
+ 00010678  0x00001305 hstore  0x00000001 , 0x00008951 
+ 00010679  0x00001306 hfetch  0x00000001 , 0x00008952 
+ 00010680  0x00001307 set0  0x00000005 , 0x0000003f 
+ 00010681  0x00001308 hstore  0x00000001 , 0x00008952 
+ 00010682  0x00001309 rtn 
+ 00010683  0x0000130c bpatch  0x0000008e , 0x00004011 
+ 00010684  0x0000130d hfetch  0x00000002 , 0x00008981 
+ 00010685  0x0000130e rshift4  0x0000003f , 0x0000003f 
+ 00010686  0x0000130f rshift3  0x0000003f , 0x0000003f 
+ 00010687  0x00001310 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00010688  0x00001312 and_into  0x000000ff , 0x0000003f 
+ 00010689  0x00001313 div  0x0000003f , 0x0000000a 
+ 00010690  0x00001314 call  0x00007f86 
+ 00010691  0x00001315 quotient  0x0000003f 
+ 00010692  0x00001316 lshift4  0x0000003f , 0x0000003f 
+ 00010693  0x00001317 remainder  0x00000002 
+ 00010694  0x00001318 ior  0x00000002 , 0x0000003f 
+ 00010695  0x00001319 store  0x00000001 , 0x00000018 
+ 00010696  0x0000131a rtn 
+ 00010697  0x0000131e jam  0x00000006 , 0x00008042 
+ 00010698  0x0000131f hfetch  0x00000001 , 0x0000896b 
+ 00010699  0x00001320 set0  0x00000004 , 0x0000003f 
+ 00010700  0x00001321 set0  0x00000005 , 0x0000003f 
+ 00010701  0x00001322 hstore  0x00000001 , 0x0000896b 
+ 00010702  0x00001323 jam  0x00000000 , 0x00008905 
+ 00010703  0x00001324 jam  0x00000000 , 0x00008904 
+ 00010704  0x00001325 jam  0x00000070 , 0x00008904 
+ 00010705  0x00001326 jam  0x000000ff , 0x00008905 
+ 00010706  0x00001327 hfetch  0x00000001 , 0x0000896b 
+ 00010707  0x00001328 set1  0x00000004 , 0x0000003f 
+ 00010708  0x00001329 set1  0x00000005 , 0x0000003f 
+ 00010709  0x0000132a hstore  0x00000001 , 0x0000896b 
+ 00010710  0x0000132b call  0x000029e9 
+ 00010711  0x0000132c hfetch  0x00000001 , 0x00008968 
+ 00010712  0x0000132d set1  0x00000007 , 0x0000003f 
+ 00010713  0x0000132e hstore  0x00000001 , 0x00008968 
+ 00010714  0x0000132f set0  0x00000007 , 0x0000003f 
+ 00010715  0x00001330 hstore  0x00000001 , 0x00008968 
+ 00010716  0x00001331 set1  0x00000007 , 0x0000003f 
+ 00010717  0x00001332 hstore  0x00000001 , 0x00008968 
+ 00010718  0x00001333 jam  0x00000005 , 0x00008042 
+ 00010719  0x00001334 nop  0x00000001 
+ 00010720  0x00001335 jam  0x00000004 , 0x00008042 
+ 00010721  0x00001336 hfetch  0x00000001 , 0x0000896b 
+ 00010722  0x00001337 and_into  0x000000cf , 0x0000003f 
+ 00010723  0x00001338 hstore  0x00000001 , 0x0000896b 
+ 00010724  0x00001339 or_into  0x00000030 , 0x0000003f 
+ 00010725  0x0000133a hstore  0x00000001 , 0x0000896b 
+ 00010726  0x0000133b rtn 
+ 00010727  0x0000133f setarg  0x00000f0f 
+ 00010728  0x00001340 branch  0x00002c18 
+ 00010729  0x00001343 setarg  0x0000080f 
+ 00010730  0x00001344 branch  0x00002c18 
+ 00010731  0x00001349 bpatch  0x0000008f , 0x00004011 
+ 00010732  0x0000134a call  0x00002924 
+ 00010733  0x0000134b disable  0x00000020 
+ 00010734  0x0000134c enable  0x00000021 
+ 00010735  0x0000134d pulse  0x00000016 
+ 00010736  0x0000134e rtn 
+ 00010737  0x00001351 bpatch  0x00000090 , 0x00004012 
+ 00010738  0x00001352 fetch  0x00000001 , 0x0000004c 
+ 00010739  0x00001353 isolate1  0x00000002 , 0x0000003f 
+ 00010740  0x00001354 setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00010741  0x00001355 hstore  0x00000001 , 0x00008011 
+ 00010742  0x00001356 arg  0x00000062 , 0x00000006 
+ 00010743  0x00001357 ifetch  0x00000009 , 0x00000006 
+ 00010744  0x00001358 iforce  0x00000032 
+ 00010745  0x00001359 ifetch  0x00000007 , 0x00000006 
+ 00010746  0x0000135a iforce  0x00000033 
+ 00010747  0x0000135b fetch  0x00000001 , 0x00000054 
+ 00010748  0x0000135c add  0x0000003f , 0xffffffff , 0x00000034 
+ 00010749  0x0000135d pulse  0x0000001a 
+ 00010750  0x0000135e rtn 
+ 00010751  0x00001361 deposit  0x0000001a 
+ 00010752  0x00001362 store  0x00000006 , 0x0000009a 
+ 00010753  0x00001363 disable  0x0000000d 
+ 00010754  0x00001364 nbranch  0x000028f9 , 0x00000018 
+ 00010755  0x00001365 arg  0x000003bb , 0x00000029 
+ 00010756  0x00001366 increase  0x00000001 , 0x00000028 
+ 00010757  0x00001367 and_into  0x000001fc , 0x00000028 
+ 00010758  0x00001368 rtn 
+ 00010759  0x0000136d enable  0x0000000d 
+ 00010760  0x0000136f correlate  0x0000003e , 0x00000017 
+ 00010761  0x00001370 branch  0x000029ff , 0x00000018 
+ 00010762  0x00001371 compare  0x00000002 , 0x00000028 , 0x00000002 
+ 00010763  0x00001372 nbranch  0x00002a08 , 0x00000001 
+ 00010764  0x00001373 branch  0x000029ff 
+ 00010765  0x00001376 bpatch  0x00000091 , 0x00004012 
+ 00010766  0x00001377 arg  0x00000600 , 0x0000000b 
+ 00010767  0x00001378 enable  0x0000000d 
+ 00010768  0x00001379 correlate  0x00000023 , 0x00000026 
+ 00010769  0x0000137a disable  0x0000000d 
+ 00010770  0x0000137b nbranch  0x000028f9 , 0x00000018 
+ 00010771  0x0000137c rtn 
+ 00010772  0x0000137f bpatch  0x00000092 , 0x00004012 
+ 00010773  0x00001380 enable  0x0000000d 
+ 00010774  0x00001381 correlate  0x0000003e , 0x00000003 
+ 00010775  0x00001382 disable  0x0000000d 
+ 00010776  0x00001383 nbranch  0x000028f9 , 0x00000018 
+ 00010777  0x00001384 arg  0x000003bb , 0x00000029 
+ 00010778  0x00001385 and_into  0x000001fc , 0x00000028 
+ 00010779  0x00001386 rtn 
+ 00010780  0x0000138a bpatch  0x00000093 , 0x00004012 
+ 00010781  0x0000138b iforce  0x00000011 
+ 00010782  0x0000138c deposit  0x00000021 
+ 00010783  0x0000138d iadd  0x00000002 , 0x0000000b 
+ 00010784  0x0000138e copy  0x0000000b , 0x0000003f 
+ 00010785  0x0000138f store  0x00000004 , 0x000040ca 
+ 00010786  0x00001390 deposit  0x00000011 
+ 00010787  0x00001391 rtn 
+ 00010788  0x00001395 copy  0x0000003f , 0x00000002 
+ 00010789  0x00001396 bpatch  0x00000094 , 0x00004012 
+ 00010790  0x00001397 copy  0x00000002 , 0x0000003f 
+ 00010791  0x00001398 call  0x00007f50 
+ 00010792  0x00001399 lshift16  0x00000021 , 0x0000003f 
+ 00010793  0x0000139a set1  0x0000002c , 0x0000003f 
+ 00010794  0x0000139b call  0x00007f39 
+ 00010795  0x0000139c set0  0x0000002c , 0x0000003f 
+ 00010796  0x0000139d call  0x00002a77 
+ 00010797  0x0000139e call  0x00007f39 
+ 00010798  0x0000139f rtn  0x00000028 
+ 00010799  0x000013a0 call  0x00007f43 
+ 00010800  0x000013a1 iforce  0x0000001b 
+ 00010801  0x000013a2 until  0x0000003e , 0x00000003 
+ 00010802  0x000013a3 rtn 
+ 00010803  0x000013a7 bpatch  0x00000095 , 0x00004012 
+ 00010804  0x000013a8 branch  0x00002a38 , 0x00000030 
+ 00010805  0x000013a9 until  0x00000029 , 0x00000026 
+ 00010806  0x000013ab copy  0x00000028 , 0x00000002 
+ 00010807  0x000013ac branch  0x00002a3b 
+ 00010808  0x000013ae branch  0x00002a3a , 0x0000002e 
+ 00010809  0x000013af until  0x00000023 , 0x00000026 
+ 00010810  0x000013b1 copy  0x00000022 , 0x00000002 
+ 00010811  0x000013b3 branch  0x00002a47 , 0x00000028 
+ 00010812  0x000013b4 compare  0x00000001 , 0x00000002 , 0x00000003 
+ 00010813  0x000013b5 nbranch  0x00002a33 , 0x00000001 
+ 00010814  0x000013b7 bpatch  0x00000096 , 0x00004012 
+ 00010815  0x000013b8 fetch  0x00000001 , 0x00000030 
+ 00010816  0x000013b9 rtnbit0  0x00000000 
+ 00010817  0x000013ba fetch  0x00000004 , 0x000040ca 
+ 00010818  0x000013bb isub  0x00000002 , 0x0000003f 
+ 00010819  0x000013bc nrtn  0x00000002 
+ 00010820  0x000013bd sub  0x0000003f , 0x000000ff , 0x0000003e 
+ 00010821  0x000013be branch  0x00002a33 , 0x00000002 
+ 00010822  0x000013bf rtn 
+ 00010823  0x000013c1 compare  0x00000003 , 0x00000002 , 0x00000003 
+ 00010824  0x000013c2 nbranch  0x00002a33 , 0x00000001 
+ 00010825  0x000013c3 branch  0x00002a3e 
+ 00010826  0x000013c6 bpatch  0x00000097 , 0x00004012 
+ 00010827  0x000013c7 arg  0x00000600 , 0x0000000b 
+ 00010828  0x000013c8 branch  0x00002a33 
+ 00010829  0x000013cb disable  0x00000028 
+ 00010830  0x000013cc branch  0x00002a4a 
+ 00010831  0x000013cf enable  0x00000028 
+ 00010832  0x000013d0 branch  0x00002a4a 
+ 00010833  0x000013d3 bpatch  0x00000098 , 0x00004013 
+ 00010834  0x000013d4 call  0x000029f1 
+ 00010835  0x000013d5 disable  0x00000021 
+ 00010836  0x000013d6 enable  0x00000020 
+ 00010837  0x000013d7 rtn 
+ 00010838  0x000013dc bpatch  0x00000099 , 0x00004013 
+ 00010839  0x000013dd arg  0x00000e43 , 0x0000000b 
+ 00010840  0x000013de until  0x00000023 , 0x00000026 
+ 00010841  0x000013df pulse  0x00000016 
+ 00010842  0x000013e0 rtn 
+ 00010843  0x000013e3 bpatch  0x0000009a , 0x00004013 
+ 00010844  0x000013e4 arg  0x00000d00 , 0x0000000b 
+ 00010845  0x000013e5 until  0x00000023 , 0x00000026 
+ 00010846  0x000013e6 rtn 
+ 00010847  0x000013ea bpatch  0x0000009b , 0x00004013 
+ 00010848  0x000013eb arg  0x00000e43 , 0x0000000b 
+ 00010849  0x000013ec until  0x00000029 , 0x00000026 
+ 00010850  0x000013ed pulse  0x00000016 
+ 00010851  0x000013ee rtn 
+ 00010852  0x000013f1 bpatch  0x0000009c , 0x00004013 
+ 00010853  0x000013f2 preload  0x00000009 
+ 00010854  0x000013f3 enable  0x0000001d 
+ 00010855  0x000013f4 set1  0x00000000 , 0x00000015 
+ 00010856  0x000013f5 inject  0x00000003 , 0x00000048 
+ 00010857  0x000013f6 disable  0x0000001d 
+ 00010858  0x000013f7 rtn 
+ 00010859  0x000013fb copy  0x00000025 , 0x00000002 
+ 00010860  0x000013fc or_into  0x00000060 , 0x00000002 
+ 00010861  0x000013fd copy  0x00000002 , 0x0000000e 
+ 00010862  0x000013fe rtn 
+ 00010863  0x00001404 bpatch  0x0000009d , 0x00004013 
+ 00010864  0x00001405 fetch  0x00000001 , 0x00004090 
+ 00010865  0x00001406 increase  0x00000001 , 0x0000003f 
+ 00010866  0x00001407 bne  0x00000007 , 0x00002a74 
+ 00010867  0x00001408 force  0x00000001 , 0x0000003f 
+ 00010868  0x0000140a store  0x00000001 , 0x00004090 
+ 00010869  0x0000140b iforce  0x00000004 
+ 00010870  0x0000140c rtn 
+ 00010871  0x0000140f copy  0x00000019 , 0x00000002 
+ 00010872  0x00001410 rtn  0x00000029 
+ 00010873  0x00001411 copy  0x0000001a , 0x00000002 
+ 00010874  0x00001412 rtn 
+ 00010875  0x00001415 deposit  0x00000022 
+ 00010876  0x00001416 rtn  0x00000029 
+ 00010877  0x00001417 deposit  0x00000028 
+ 00010878  0x00001418 rtn 
+ 00010879  0x0000141c bpatch  0x0000009e , 0x00004013 
+ 00010880  0x0000141d fetcht  0x00000004 , 0x0000004d 
+ 00010881  0x0000141e call  0x00002a7b 
+ 00010882  0x0000141f isub  0x00000002 , 0x0000000b 
+ 00010883  0x00001420 deposit  0x0000000b 
+ 00010884  0x00001421 fetcht  0x00000002 , 0x00000051 
+ 00010885  0x00001422 lshift  0x00000002 , 0x00000002 
+ 00010886  0x00001423 isub  0x00000002 , 0x0000003f 
+ 00010887  0x00001424 rtn 
+ 00010888  0x00001427 bpatch  0x0000009f , 0x00004013 
+ 00010889  0x00001428 call  0x00002a7b 
+ 00010890  0x00001429 store  0x00000004 , 0x0000004d 
+ 00010891  0x0000142a rtn 
+ 00010892  0x0000142d bpatch  0x000000a0 , 0x00004014 
+ 00010893  0x0000142e branch  0x00002a8c 
+ 00010894  0x00001431 branch  0x00002a8e 
+ 00010895  0x00001434 rtn  0x00000034 
+ 00010896  0x00001436 rshift  0x0000003f , 0x0000003f 
+ 00010897  0x00001437 increase  0xfffffffd , 0x0000003f 
+ 00010898  0x00001439 increase  0xffffffff , 0x0000003f 
+ 00010899  0x0000143a nbranch  0x00002a92 , 0x00000005 
+ 00010900  0x0000143b force  0x00000000 , 0x0000003f 
+ 00010901  0x0000143c rtn 
+ 00010902  0x00001442 arg  0x00000010 , 0x00000039 
+ 00010903  0x00001443 arg  0x00000000 , 0x00000005 
+ 00010904  0x00001444 call  0x00007ec6 
+ 00010905  0x00001445 arg  0x0000043f , 0x00000005 
+ 00010906  0x00001446 arg  0x0000000a , 0x00000039 
+ 00010907  0x00001447 call  0x00007ec6 
+ 00010908  0x00001448 jam  0x00000000 , 0x000009b2 
+ 00010909  0x00001449 jam  0x00000000 , 0x00000a99 
+ 00010910  0x0000144a jam  0x00000000 , 0x0000048c 
+ 00010911  0x0000144b jam  0x00000000 , 0x0000017f 
+ 00010912  0x0000144c jam  0x00000000 , 0x000004d1 
+ 00010913  0x0000144d bpatch  0x000000a1 , 0x00004014 
+ 00010914  0x0000144e jam  0x00000000 , 0x0000016d 
+ 00010915  0x0000144f jam  0x00000000 , 0x00000151 
+ 00010916  0x00001450 jam  0x00000000 , 0x0000015c 
+ 00010917  0x00001451 setarg  0x009e8b33 
+ 00010918  0x00001452 store  0x00000003 , 0x000040a7 
+ 00010919  0x00001453 setarg  0x00000153 
+ 00010920  0x00001454 store  0x00000002 , 0x00000083 
+ 00010921  0x00001455 jam  0x0000001e , 0x00000085 
+ 00010922  0x00001456 jam  0x00000001 , 0x00000086 
+ 00010923  0x00001457 jam  0x00000007 , 0x00000088 
+ 00010924  0x00001458 setarg  0x0012e904 
+ 00010925  0x00001459 store  0x00000003 , 0x00000080 
+ 00010926  0x0000145e jam  0x00000060 , 0x00000090 
+ 00010927  0x0000145f jam  0x00000005 , 0x000040d0 
+ 00010928  0x00001460 jam  0x00000002 , 0x00000014 
+ 00010929  0x00001461 fetch  0x00000001 , 0x0000465a 
+ 00010930  0x00001462 ncall  0x000074c1 , 0x00000034 
+ 00010931  0x00001463 fetch  0x00000001 , 0x000044be 
+ 00010932  0x00001464 ncall  0x00007518 , 0x00000034 
+ 00010933  0x00001465 bpatch  0x000000a2 , 0x00004014 
+ 00010934  0x00001466 rtn  0x0000002b 
+ 00010935  0x00001467 setarg  0x00000000 
+ 00010936  0x00001468 store  0x00000002 , 0x000041dc 
+ 00010937  0x00001469 rshift  0x00000022 , 0x0000003f 
+ 00010938  0x0000146a store  0x00000004 , 0x00004094 
+ 00010939  0x0000146b rtn 
+ 00010940  0x00001473 setarg  0x0000ee21 
+ 00010941  0x00001474 hstore  0x00000002 , 0x00008050 
+ 00010942  0x00001475 hfetch  0x00000004 , 0x0000811c 
+ 00010943  0x00001476 store  0x00000004 , 0x00000abe 
+ 00010944  0x00001477 hfetch  0x00000001 , 0x0000813e 
+ 00010945  0x00001478 store  0x00000001 , 0x00000abd 
+ 00010946  0x00001479 bbit0  0x00000003 , 0x0000645b 
+ 00010947  0x0000147a enable  0x0000002b 
+ 00010948  0x0000147b bbit0  0x00000007 , 0x00002acc 
+ 00010949  0x0000147c disable  0x0000002b 
+ 00010950  0x0000147d deposit  0x00000027 
+ 00010951  0x0000147e nbranch  0x00002acc , 0x00000034 
+ 00010952  0x0000147f hfetch  0x00000001 , 0x0000813b 
+ 00010953  0x00001480 bbit1  0x00000002 , 0x00002acc 
+ 00010954  0x00001481 arg  0xffffffff , 0x00000002 
+ 00010955  0x00001482 branch  0x00002b3c 
+ 00010956  0x00001484 hfetch  0x00000003 , 0x0000813c 
+ 00010957  0x00001485 hstore  0x00000003 , 0x0000804c 
+ 00010958  0x00001486 ifetch  0x00000001 , 0x00000006 
+ 00010959  0x00001487 or_into  0x000000ef , 0x0000003f 
+ 00010960  0x00001488 istore  0x00000001 , 0x00000005 
+ 00010961  0x00001489 call  0x00002c23 
+ 00010962  0x0000148a hfetch  0x00000001 , 0x0000804f 
+ 00010963  0x0000148b set1  0x00000004 , 0x0000003f 
+ 00010964  0x0000148c hstore  0x00000001 , 0x0000804f 
+ 00010965  0x0000148d call  0x00002c23 
+ 00010966  0x0000148e call  0x00002adf , 0x0000002b 
+ 00010967  0x0000148f hfetch  0x00000001 , 0x0000804e 
+ 00010968  0x00001490 set0  0x00000003 , 0x0000003f 
+ 00010969  0x00001491 hstore  0x00000001 , 0x0000804e 
+ 00010970  0x00001492 call  0x00002c23 
+ 00010971  0x00001493 nbranch  0x0000645b , 0x0000002b 
+ 00010972  0x00001494 rtnmark0  0x0000002b 
+ 00010973  0x00001495 jam  0x00000008 , 0x00008006 
+ 00010974  0x00001496 rtn 
+ 00010975  0x00001499 fetch  0x00000001 , 0x00004198 
+ 00010976  0x0000149a hstore  0x00000001 , 0x00008086 
+ 00010977  0x0000149b fetch  0x00000003 , 0x0000418d 
+ 00010978  0x0000149c hstore  0x00000003 , 0x00008080 
+ 00010979  0x0000149d fetch  0x00000004 , 0x00004181 
+ 00010980  0x0000149e hstore  0x00000004 , 0x00008074 
+ 00010981  0x0000149f fetch  0x00000004 , 0x0000417d 
+ 00010982  0x000014a0 hstore  0x00000004 , 0x00008070 
+ 00010983  0x000014a1 fetch  0x00000008 , 0x00004185 
+ 00010984  0x000014a2 hstore  0x00000008 , 0x00008078 
+ 00010985  0x000014a3 fetch  0x00000008 , 0x00004190 
+ 00010986  0x000014a4 iforce  0x00000000 
+ 00010987  0x000014a5 hfetch  0x00000008 , 0x00008140 
+ 00010988  0x000014a6 store  0x00000008 , 0x000000a1 
+ 00010989  0x000014a7 call  0x000064ca 
+ 00010990  0x000014a8 rtn 
+ 00010991  0x000014ab deposit  0x00000000 
+ 00010992  0x000014ac store  0x00000008 , 0x00004190 
+ 00010993  0x000014ad hfetch  0x00000008 , 0x00008070 
+ 00010994  0x000014ae store  0x00000008 , 0x0000417d 
+ 00010995  0x000014af ifetch  0x00000008 , 0x00000006 
+ 00010996  0x000014b0 istore  0x00000008 , 0x00000005 
+ 00010997  0x000014b1 hfetch  0x00000003 , 0x00008080 
+ 00010998  0x000014b2 store  0x00000003 , 0x0000418d 
+ 00010999  0x000014b3 hfetch  0x00000001 , 0x00008086 
+ 00011000  0x000014b4 store  0x00000001 , 0x00004198 
+ 00011001  0x000014b5 branch  0x00002c29 
+ 00011002  0x000014b8 hfetch  0x00000001 , 0x00008063 
+ 00011003  0x000014b9 nbranch  0x00002b00 , 0x00000034 
+ 00011004  0x000014ba fetch  0x00000003 , 0x0000416f 
+ 00011005  0x000014bb nrtn  0x00000034 
+ 00011006  0x000014bc jam  0x000000c0 , 0x00008063 
+ 00011007  0x000014bd jam  0x00000080 , 0x00008006 
+ 00011008  0x000014bf hfetch  0x00000001 , 0x0000812d 
+ 00011009  0x000014c0 rtnbit0  0x00000001 
+ 00011010  0x000014c1 hfetch  0x00000003 , 0x00008149 
+ 00011011  0x000014c2 store  0x00000003 , 0x0000416f 
+ 00011012  0x000014c3 rtn 
+ 00011013  0x000014c8 bpatch  0x000000a3 , 0x00004014 
+ 00011014  0x000014c9 deposit  0x0000001a 
+ 00011015  0x000014ca call  0x00007f37 
+ 00011016  0x000014cb fetcht  0x00000004 , 0x0000415f 
+ 00011017  0x000014cc sub  0x00000002 , 0x000000ff , 0x0000003e 
+ 00011018  0x000014cd rtn  0x00000002 
+ 00011019  0x000014ce lshift8  0x0000003f , 0x0000003f 
+ 00011020  0x000014cf lshift4  0x0000003f , 0x0000003f 
+ 00011021  0x000014d0 idiv  0x00000002 
+ 00011022  0x000014d1 call  0x00007f86 
+ 00011023  0x000014d2 quotient  0x0000003f 
+ 00011024  0x000014d3 arg  0x000000c8 , 0x00000002 
+ 00011025  0x000014d4 call  0x00007f91 
+ 00011026  0x000014d5 store  0x00000001 , 0x00000099 
+ 00011027  0x000014d6 nbranch  0x00002b15 , 0x00000028 
+ 00011028  0x000014d7 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00011029  0x000014d9 fetcht  0x00000003 , 0x0000416f 
+ 00011030  0x000014da iadd  0x00000002 , 0x0000003f 
+ 00011031  0x000014db store  0x00000003 , 0x0000416f 
+ 00011032  0x000014dd setarg  0x00000000 
+ 00011033  0x000014de store  0x00000004 , 0x0000415f 
+ 00011034  0x000014df rtn 
+ 00011035  0x000014e4 fetch  0x00000001 , 0x00004177 
+ 00011036  0x000014e5 set1  0x00000002 , 0x0000003f 
+ 00011037  0x000014e6 store  0x00000001 , 0x00004177 
+ 00011038  0x000014e7 branch  0x00002b23 
+ 00011039  0x000014ec arg  0xffffffff , 0x00000002 
+ 00011040  0x000014ed fetch  0x00000001 , 0x00004176 
+ 00011041  0x000014ee set0  0x00000007 , 0x0000003f 
+ 00011042  0x000014ef store  0x00000001 , 0x00004176 
+ 00011043  0x000014f1 bpatch  0x000000a4 , 0x00004014 
+ 00011044  0x000014f2 call  0x00002c29 
+ 00011045  0x000014f3 fetch  0x00000001 , 0x00004157 
+ 00011046  0x000014f4 store  0x00000001 , 0x0000417c 
+ 00011047  0x000014f5 fetch  0x00000001 , 0x0000417a 
+ 00011048  0x000014f6 set1  0x00000007 , 0x0000003f 
+ 00011049  0x000014f7 store  0x00000001 , 0x0000417a 
+ 00011050  0x000014fb bpatch  0x000000a5 , 0x00004014 
+ 00011051  0x000014fc call  0x000029e7 
+ 00011052  0x000014fd fetch  0x00000004 , 0x0000415f 
+ 00011053  0x000014fe iadd  0x00000002 , 0x0000003f 
+ 00011054  0x000014ff store  0x00000004 , 0x0000415f 
+ 00011055  0x00001500 call  0x00002aef 
+ 00011056  0x00001501 fetch  0x00000005 , 0x00004178 
+ 00011057  0x00001502 hstore  0x00000004 , 0x0000804c 
+ 00011058  0x00001503 rshift32  0x0000003f , 0x00000011 
+ 00011059  0x00001504 until  0x0000003e , 0x00000033 
+ 00011060  0x00001505 deposit  0x00000019 
+ 00011061  0x00001506 store  0x00000006 , 0x00004163 
+ 00011062  0x00001507 jam  0x00000002 , 0x00008005 
+ 00011063  0x00001508 until  0x0000003e , 0x00000033 
+ 00011064  0x00001509 until  0x0000003e , 0x00000033 
+ 00011065  0x0000150a deposit  0x00000011 
+ 00011066  0x0000150b hstore  0x00000001 , 0x0000804f 
+ 00011067  0x0000150c jam  0x00000002 , 0x00008005 
+ 00011068  0x0000150e until  0x0000003e , 0x00000033 
+ 00011069  0x0000150f until  0x0000003e , 0x00000033 
+ 00011070  0x00001510 hstoret  0x00000004 , 0x0000804c 
+ 00011071  0x00001511 jam  0x00000010 , 0x00008005 
+ 00011072  0x00001512 until  0x0000003e , 0x0000003f 
+ 00011073  0x00001518 bpatch  0x000000a6 , 0x00004014 
+ 00011074  0x00001519 setarg  0x00000000 
+ 00011075  0x0000151a copy  0x00000027 , 0x0000003e 
+ 00011076  0x0000151b branch  0x00002b4c , 0x00000005 
+ 00011077  0x0000151c hfetch  0x00000001 , 0x0000813c 
+ 00011078  0x0000151d hfetcht  0x00000001 , 0x0000813d 
+ 00011079  0x0000151e isub  0x00000002 , 0x0000003e 
+ 00011080  0x0000151f branch  0x00002b4a , 0x00000002 
+ 00011081  0x00001520 deposit  0x00000002 
+ 00011082  0x00001522 isub  0x00000027 , 0x0000003f 
+ 00011083  0x00001523 increase  0x00000001 , 0x0000003f 
+ 00011084  0x00001525 increase  0x00000008 , 0x0000003f 
+ 00011085  0x00001526 until  0x0000003e , 0x00000033 
+ 00011086  0x00001527 iadd  0x00000031 , 0x0000003f 
+ 00011087  0x00001528 fetcht  0x00000004 , 0x0000415b 
+ 00011088  0x00001529 iadd  0x00000002 , 0x0000003f 
+ 00011089  0x0000152a fetcht  0x00000003 , 0x0000416f 
+ 00011090  0x0000152b imul32  0x00000002 , 0x0000003f 
+ 00011091  0x0000152c rshift8  0x0000003f , 0x0000003f 
+ 00011092  0x0000152d rshift4  0x0000003f , 0x0000003f 
+ 00011093  0x0000152e increase  0x0000006e , 0x0000003f 
+ 00011094  0x0000152f arg  0x00000ea6 , 0x00000002 
+ 00011095  0x00001530 idiv  0x00000002 
+ 00011096  0x00001531 call  0x00007f86 
+ 00011097  0x00001532 quotient  0x0000003f 
+ 00011098  0x00001533 lshift16  0x0000003f , 0x0000003f 
+ 00011099  0x00001534 remainder  0x00000002 
+ 00011100  0x00001535 ior  0x00000002 , 0x0000003f 
+ 00011101  0x00001536 fetcht  0x00000006 , 0x00004163 
+ 00011102  0x00001537 call  0x00007f2c 
+ 00011103  0x00001538 copy  0x00000002 , 0x00000019 
+ 00011104  0x00001539 fetch  0x00000006 , 0x00004048 
+ 00011105  0x0000153a call  0x00002854 
+ 00011106  0x0000153b deposit  0x0000001a 
+ 00011107  0x0000153c store  0x00000006 , 0x00000a9a 
+ 00011108  0x0000153d deposit  0x00000027 
+ 00011109  0x0000153e istore  0x00000001 , 0x00000005 
+ 00011110  0x0000153f hfetch  0x00000001 , 0x0000811d 
+ 00011111  0x00001540 or_into  0x000000f0 , 0x0000003f 
+ 00011112  0x00001541 istore  0x00000001 , 0x00000005 
+ 00011113  0x00001542 rtn 
+ 00011114  0x00001545 bpatch  0x000000a7 , 0x00004014 
+ 00011115  0x00001546 call  0x00002afa 
+ 00011116  0x00001547 fetch  0x00000003 , 0x0000416f 
+ 00011117  0x00001548 rtn  0x00000034 
+ 00011118  0x00001549 fetch  0x00000001 , 0x00004091 
+ 00011119  0x0000154a rtn  0x00000034 
+ 00011120  0x0000154b fetch  0x00000001 , 0x0000465a 
+ 00011121  0x0000154c branch  0x00002b74 , 0x00000034 
+ 00011122  0x0000154d fetch  0x00000001 , 0x000045b1 
+ 00011123  0x0000154e rtn  0x00000034 
+ 00011124  0x00001550 fetch  0x00000001 , 0x000044c0 
+ 00011125  0x00001551 nrtn  0x00000034 
+ 00011126  0x00001552 call  0x00002c3a 
+ 00011127  0x00001553 nrtn  0x00000034 
+ 00011128  0x00001554 fetch  0x00000001 , 0x00004040 
+ 00011129  0x00001555 compare  0x00000003 , 0x0000003f , 0x00000007 
+ 00011130  0x00001556 nbranch  0x00002b9d , 0x00000001 
+ 00011131  0x00001557 fetch  0x00000002 , 0x00004042 
+ 00011132  0x00001558 rtn  0x00000034 
+ 00011133  0x00001559 rtn  0x0000002b 
+ 00011134  0x0000155a bpatch  0x000000a8 , 0x00004015 
+ 00011135  0x0000155c fetcht  0x00000001 , 0x000000a0 
+ 00011136  0x0000155d fetch  0x00000002 , 0x00004042 
+ 00011137  0x0000155e imul32  0x00000002 , 0x0000003f 
+ 00011138  0x0000155f rshift4  0x00000002 , 0x00000002 
+ 00011139  0x00001560 rshift2  0x00000002 , 0x00000002 
+ 00011140  0x00001561 isub  0x00000002 , 0x0000003f 
+ 00011141  0x00001562 fetcht  0x00000004 , 0x00004044 
+ 00011142  0x00001563 iadd  0x00000002 , 0x0000003f 
+ 00011143  0x00001564 fetcht  0x00000001 , 0x00004156 
+ 00011144  0x00001565 isub  0x00000002 , 0x0000003f 
+ 00011145  0x00001566 lshift16  0x0000003f , 0x00000030 
+ 00011146  0x00001567 bpatch  0x000000a9 , 0x00004015 
+ 00011147  0x00001568 fetch  0x00000002 , 0x0000404e 
+ 00011148  0x00001569 rshift  0x0000003f , 0x0000003f 
+ 00011149  0x0000156a call  0x00007f50 
+ 00011150  0x0000156b deposit  0x00000030 
+ 00011151  0x0000156c call  0x00007f39 
+ 00011152  0x0000156d copy  0x0000001a , 0x00000002 
+ 00011153  0x0000156e call  0x00007f37 
+ 00011154  0x0000156f rtn  0x00000028 
+ 00011155  0x00001571 call  0x00007f49 
+ 00011156  0x00001573 bpatch  0x000000aa , 0x00004015 
+ 00011157  0x00001574 fetch  0x00000001 , 0x00004178 
+ 00011158  0x00001575 isub  0x00000002 , 0x0000003e 
+ 00011159  0x00001576 branch  0x00002b18 , 0x00000002 
+ 00011160  0x00001577 storet  0x00000004 , 0x0000415b 
+ 00011161  0x00001578 call  0x00003328 
+ 00011162  0x00001579 call  0x000052fb 
+ 00011163  0x0000157a fetcht  0x00000004 , 0x0000415b 
+ 00011164  0x0000157b branch  0x00002b2a 
+ 00011165  0x0000157e bpatch  0x000000ab , 0x00004015 
+ 00011166  0x0000157f fetch  0x00000001 , 0x00004040 
+ 00011167  0x00001580 rtnbit1  0x00000000 
+ 00011168  0x00001581 rtnbit1  0x00000003 
+ 00011169  0x00001582 fetch  0x00000001 , 0x0000465a 
+ 00011170  0x00001583 branch  0x00002ba5 , 0x00000034 
+ 00011171  0x00001584 fetch  0x00000001 , 0x000045b1 
+ 00011172  0x00001585 rtn  0x00000034 
+ 00011173  0x00001587 bpatch  0x000000ac , 0x00004015 
+ 00011174  0x00001588 fetch  0x00000001 , 0x0000436e 
+ 00011175  0x00001589 nbranch  0x00002baa , 0x00000034 
+ 00011176  0x0000158a fetch  0x00000001 , 0x00004093 
+ 00011177  0x0000158b rtn  0x00000034 
+ 00011178  0x0000158d fetch  0x00000002 , 0x00004154 
+ 00011179  0x0000158e rtn  0x00000034 
+ 00011180  0x00001590 fetcht  0x00000001 , 0x00004156 
+ 00011181  0x00001591 isub  0x00000002 , 0x0000003f 
+ 00011182  0x00001592 arg  0x00001d4c , 0x00000002 
+ 00011183  0x00001593 imul32  0x00000002 , 0x0000003f 
+ 00011184  0x00001594 branch  0x00002b93 
+ 00011185  0x00001597 bpatch  0x000000ad , 0x00004015 
+ 00011186  0x00001598 disable  0x0000002b 
+ 00011187  0x00001599 fetch  0x00000001 , 0x00000030 
+ 00011188  0x0000159a rtnbit0  0x00000001 
+ 00011189  0x0000159b nbranch  0x00002bd0 , 0x0000002d 
+ 00011190  0x0000159c call  0x00002bcb 
+ 00011191  0x0000159d fetch  0x00000002 , 0x000040c1 
+ 00011192  0x0000159e store  0x00000002 , 0x0000003e 
+ 00011193  0x0000159f fetch  0x00000001 , 0x00000047 
+ 00011194  0x000015a0 bbit1  0x00000003 , 0x00002bde 
+ 00011195  0x000015a1 bmark0  0x0000000d , 0x00002bde 
+ 00011196  0x000015a2 call  0x00005274 
+ 00011197  0x000015a3 nbranch  0x00002bde , 0x00000034 
+ 00011198  0x000015a4 fetch  0x00000001 , 0x0000455c 
+ 00011199  0x000015a5 bbit1  0x00000001 , 0x00002bde 
+ 00011200  0x000015a7 jam  0x00000000 , 0x000000a0 
+ 00011201  0x000015a8 bmark0  0x0000000d , 0x00002bde 
+ 00011202  0x000015a9 fetch  0x00000001 , 0x00004174 
+ 00011203  0x000015aa branch  0x00002be2 , 0x00000034 
+ 00011204  0x000015ab increase  0xffffffff , 0x0000003f 
+ 00011205  0x000015ac store  0x00000001 , 0x00004174 
+ 00011206  0x000015ad rtn 
+ 00011207  0x000015b1 arg  0x00000001 , 0x00000007 
+ 00011208  0x000015b2 branch  0x000060cd 
+ 00011209  0x000015b5 arg  0x00000001 , 0x00000007 
+ 00011210  0x000015b6 branch  0x000060d1 
+ 00011211  0x000015bb jam  0x00000000 , 0x00004159 
+ 00011212  0x000015bc fetch  0x00000003 , 0x00004169 
+ 00011213  0x000015bd increase  0x00000001 , 0x0000003f 
+ 00011214  0x000015be store  0x00000003 , 0x00004169 
+ 00011215  0x000015bf rtn 
+ 00011216  0x000015c2 bpatch  0x000000ae , 0x00004015 
+ 00011217  0x000015c3 fetcht  0x00000002 , 0x000040c1 
+ 00011218  0x000015c4 rshift  0x00000002 , 0x00000002 
+ 00011219  0x000015c5 fetch  0x00000002 , 0x0000003e 
+ 00011220  0x000015c6 iadd  0x00000002 , 0x0000003f 
+ 00011221  0x000015c7 store  0x00000002 , 0x0000003e 
+ 00011222  0x000015c9 jam  0x00000000 , 0x000000a0 
+ 00011223  0x000015ca fetch  0x00000003 , 0x0000416c 
+ 00011224  0x000015cb increase  0x00000001 , 0x0000003f 
+ 00011225  0x000015cc store  0x00000003 , 0x0000416c 
+ 00011226  0x000015cd fetch  0x00000001 , 0x00004159 
+ 00011227  0x000015ce increase  0x00000001 , 0x0000003f 
+ 00011228  0x000015cf store  0x00000001 , 0x00004159 
+ 00011229  0x000015d0 rtn 
+ 00011230  0x000015d3 jam  0x00000000 , 0x000000a0 
+ 00011231  0x000015d4 fetch  0x00000001 , 0x00004173 
+ 00011232  0x000015d5 store  0x00000001 , 0x00004174 
+ 00011233  0x000015d6 rtn 
+ 00011234  0x000015d9 fetcht  0x00000001 , 0x00004172 
+ 00011235  0x000015da storet  0x00000001 , 0x000000a0 
+ 00011236  0x000015db rtn 
+ 00011237  0x000015de bpatch  0x000000af , 0x00004015 
+ 00011238  0x000015df fetch  0x00000001 , 0x00004178 
+ 00011239  0x000015e0 nrtn  0x00000034 
+ 00011240  0x000015e1 jam  0x00000006 , 0x00008042 
+ 00011241  0x000015e2 setarg  0x00000f0c 
+ 00011242  0x000015e3 call  0x00002c18 
+ 00011243  0x000015e4 setarg  0x00030d40 
+ 00011244  0x000015e5 call  0x00002a8f 
+ 00011245  0x000015e6 until  0x0000003e , 0x00000033 
+ 00011246  0x000015e7 copy  0x00000031 , 0x00000030 
+ 00011247  0x000015e8 call  0x000029e7 
+ 00011248  0x000015e9 jam  0x00000004 , 0x00008042 
+ 00011249  0x000015ea nop  0x0000000a 
+ 00011250  0x000015eb until  0x0000003e , 0x00000033 
+ 00011251  0x000015ec deposit  0x00000031 
+ 00011252  0x000015ed isub  0x00000030 , 0x0000003f 
+ 00011253  0x000015ee increase  0x00000030 , 0x0000003f 
+ 00011254  0x000015ef arg  0x000000ff , 0x00000002 
+ 00011255  0x000015f0 call  0x00007f91 
+ 00011256  0x000015f1 store  0x00000001 , 0x00004178 
+ 00011257  0x000015f2 nop  0x00007530 
+ 00011258  0x000015f3 nop  0x00007530 
+ 00011259  0x000015f4 nop  0x00007530 
+ 00011260  0x000015f5 rtn 
+ 00011261  0x000015f8 fetch  0x00000001 , 0x00004178 
+ 00011262  0x000015f9 nrtn  0x00000034 
+ 00011263  0x000015fa jam  0x000000ff , 0x00008044 
+ 00011264  0x000015fb jam  0x00000006 , 0x00008042 
+ 00011265  0x000015fc call  0x000029e7 
+ 00011266  0x000015fd setarg  0x000003e8 
+ 00011267  0x000015fe iadd  0x00000031 , 0x00000030 
+ 00011268  0x000015ff snooze 
+ 00011269  0x00001600 deposit  0x00000031 
+ 00011270  0x00001601 nop  0x00002ee0 
+ 00011271  0x00001602 nop  0x00002ee0 
+ 00011272  0x00001603 nop  0x00002ee0 
+ 00011273  0x00001604 nop  0x00002ee0 
+ 00011274  0x00001605 nop  0x00002ee0 
+ 00011275  0x00001606 nop  0x00002ee0 
+ 00011276  0x00001607 nop  0x00002ee0 
+ 00011277  0x00001608 nop  0x00002ee0 
+ 00011278  0x00001609 nop  0x00002ee0 
+ 00011279  0x0000160a isub  0x00000030 , 0x0000003f 
+ 00011280  0x0000160b add  0x0000003f , 0x00000030 , 0x0000003f 
+ 00011281  0x0000160c arg  0x000000ff , 0x00000002 
+ 00011282  0x0000160d call  0x00007f91 
+ 00011283  0x0000160e store  0x00000001 , 0x00004178 
+ 00011284  0x0000160f nop  0x00007530 
+ 00011285  0x00001610 nop  0x00007530 
+ 00011286  0x00001611 nop  0x00007530 
+ 00011287  0x00001612 rtn 
+ 00011288  0x00001618 arg  0x00000fff , 0x00000005 
+ 00011289  0x00001619 iand  0x00000005 , 0x00000005 
+ 00011290  0x0000161a fetch  0x00000001 , 0x00004175 
+ 00011291  0x0000161b and_into  0x000000f0 , 0x0000003f 
+ 00011292  0x0000161c lshift8  0x0000003f , 0x0000003f 
+ 00011293  0x0000161d ior  0x00000005 , 0x0000003f 
+ 00011294  0x0000161e hstore  0x00000002 , 0x0000804c 
+ 00011295  0x0000161f ifetch  0x00000002 , 0x00000006 
+ 00011296  0x00001620 istore  0x00000002 , 0x00000005 
+ 00011297  0x00001623 setarg  0x00000001 
+ 00011298  0x00001624 branch  0x00002c24 
+ 00011299  0x00001627 setarg  0x00000002 
+ 00011300  0x00001629 until  0x0000003e , 0x00000033 
+ 00011301  0x0000162a hstore  0x00000001 , 0x00008005 
+ 00011302  0x0000162b until  0x0000003e , 0x00000033 
+ 00011303  0x0000162c until  0x0000003e , 0x00000033 
+ 00011304  0x0000162d rtn 
+ 00011305  0x00001631 bpatch  0x000000b0 , 0x00004016 
+ 00011306  0x00001632 fetch  0x00000004 , 0x000000a1 
+ 00011307  0x00001633 hstore  0x00000004 , 0x0000804c 
+ 00011308  0x00001634 setarg  0x00000004 
+ 00011309  0x00001635 call  0x00002c24 
+ 00011310  0x00001636 fetch  0x00000004 , 0x000000a5 
+ 00011311  0x00001637 hstore  0x00000004 , 0x0000804c 
+ 00011312  0x00001638 setarg  0x00000008 
+ 00011313  0x00001639 branch  0x00002c24 
+ 00011314  0x0000163c fetch  0x00000002 , 0x00004152 
+ 00011315  0x0000163d qset1  0x0000003f 
+ 00011316  0x0000163e store  0x00000002 , 0x00004152 
+ 00011317  0x0000163f rtn 
+ 00011318  0x00001642 fetch  0x00000002 , 0x00004152 
+ 00011319  0x00001643 qset0  0x0000003f 
+ 00011320  0x00001644 store  0x00000002 , 0x00004152 
+ 00011321  0x00001645 rtn 
+ 00011322  0x0000164a bpatch  0x000000b1 , 0x00004016 
+ 00011323  0x0000164b call  0x00003326 
+ 00011324  0x0000164c fetch  0x00000002 , 0x00004152 
+ 00011325  0x0000164d copy  0x0000003f , 0x00000011 
+ 00011326  0x0000164e fetch  0x00000001 , 0x0000004c 
+ 00011327  0x0000164f isolate1  0x00000006 , 0x0000003f 
+ 00011328  0x00001650 setflag  0x00000001 , 0x0000000b , 0x00000011 
+ 00011329  0x00001651 fetch  0x00000001 , 0x00000078 
+ 00011330  0x00001652 fetcht  0x00000001 , 0x0000007c 
+ 00011331  0x00001653 iadd  0x00000002 , 0x0000003f 
+ 00011332  0x00001654 fetcht  0x00000001 , 0x00000048 
+ 00011333  0x00001655 iadd  0x00000002 , 0x0000003f 
+ 00011334  0x00001656 nsetflag  0x00000034 , 0x0000000a , 0x00000011 
+ 00011335  0x00001657 fetch  0x00000001 , 0x000044ff 
+ 00011336  0x00001658 nsetflag  0x00000034 , 0x00000001 , 0x00000011 
+ 00011337  0x00001659 fetch  0x00000002 , 0x0000025d 
+ 00011338  0x0000165a fetcht  0x00000002 , 0x0000025f 
+ 00011339  0x0000165b iadd  0x00000002 , 0x0000003f 
+ 00011340  0x0000165c nsetflag  0x00000034 , 0x0000000d , 0x00000011 
+ 00011341  0x0000165d fetch  0x00000008 , 0x00004668 
+ 00011342  0x0000165e nsetflag  0x00000034 , 0x0000000f , 0x00000011 
+ 00011343  0x0000165f fetch  0x00000008 , 0x00004670 
+ 00011344  0x00001660 nsetflag  0x00000034 , 0x0000000e , 0x00000011 
+ 00011345  0x00001661 fetch  0x00000001 , 0x000041ce 
+ 00011346  0x00001662 nsetflag  0x00000034 , 0x00000008 , 0x00000011 
+ 00011347  0x00001663 fetch  0x00000001 , 0x00004092 
+ 00011348  0x00001664 compare  0x0000000a , 0x0000003f , 0x000000ff 
+ 00011349  0x00001665 call  0x00002c5b , 0x00000001 
+ 00011350  0x00001666 setarg  0xfffffff8 
+ 00011351  0x00001667 iand  0x00000011 , 0x00000011 
+ 00011352  0x00001668 copy  0x00000011 , 0x0000003f 
+ 00011353  0x00001669 store  0x00000002 , 0x00004152 
+ 00011354  0x0000166a rtn 
+ 00011355  0x0000166d hfetch  0x00000002 , 0x00008112 
+ 00011356  0x0000166e nsetflag  0x00000034 , 0x00000006 , 0x00000011 
+ 00011357  0x0000166f hfetch  0x00000002 , 0x0000810e 
+ 00011358  0x00001670 nsetflag  0x00000034 , 0x00000005 , 0x00000011 
+ 00011359  0x00001671 rtn 
+ 00011360  0x00001674 hfetch  0x00000004 , 0x00008138 
+ 00011361  0x00001675 set0  0x0000001b , 0x0000003f 
+ 00011362  0x00001676 hstore  0x00000004 , 0x0000804c 
+ 00011363  0x00001677 call  0x00002c21 
+ 00011364  0x00001678 branch  0x00002a8c 
+ 00011365  0x0000167b hfetch  0x00000004 , 0x0000813c 
+ 00011366  0x0000167c set0  0x00000014 , 0x0000003f 
+ 00011367  0x0000167d hstore  0x00000004 , 0x0000804c 
+ 00011368  0x0000167e branch  0x00002c23 
+ 00011369  0x00001681 fetch  0x00000002 , 0x00004150 
+ 00011370  0x00001682 bbit1  0x00000000 , 0x00002a8c 
+ 00011371  0x00001683 rtn 
+ 00011372  0x00001685 fetch  0x00000002 , 0x00004150 
+ 00011373  0x00001686 bbit1  0x00000001 , 0x00002a8c 
+ 00011374  0x00001687 rtn 
+ 00011375  0x00001689 fetch  0x00000002 , 0x00004150 
+ 00011376  0x0000168a bbit1  0x00000002 , 0x00002a8c 
+ 00011377  0x0000168b rtn 
+ 00011378  0x000016c9 bpatch  0x000000b2 , 0x00004016 
+ 00011379  0x000016ca call  0x00002c7a 
+ 00011380  0x000016cb add  0x00000013 , 0x000000cd , 0x00000012 
+ 00011381  0x000016cc ifetch  0x00000001 , 0x00000012 
+ 00011382  0x000016ce rtneq  0x00000000 
+ 00011383  0x000016cf beq  0x00000001 , 0x00002d06 
+ 00011384  0x000016d0 beq  0x00000002 , 0x00002c7f 
+ 00011385  0x000016d1 rtn 
+ 00011386  0x000016d4 fetcht  0x00000002 , 0x00004241 
+ 00011387  0x000016d5 copy  0x00000002 , 0x00000013 
+ 00011388  0x000016d6 rtn 
+ 00011389  0x000016d9 call  0x00002f3d 
+ 00011390  0x000016da branch  0x0000307d 
+ 00011391  0x000016dd call  0x00003084 
+ 00011392  0x000016de call  0x0000305a 
+ 00011393  0x000016df call  0x0000305e 
+ 00011394  0x000016e0 branch  0x000030a2 
+ 00011395  0x000016e6 call  0x00003231 
+ 00011396  0x000016e7 setarg  0x0000004e 
+ 00011397  0x000016e8 call  0x0000322f 
+ 00011398  0x000016e9 call  0x000032ba 
+ 00011399  0x000016ec add  0x00000013 , 0x00000092 , 0x00000011 
+ 00011400  0x000016ed ifetch  0x00000004 , 0x00000011 
+ 00011401  0x000016ee branch  0x0000322c 
+ 00011402  0x000016f1 call  0x00002c7a 
+ 00011403  0x000016f2 add  0x00000013 , 0x00000091 , 0x00000012 
+ 00011404  0x000016f3 ifetcht  0x00000001 , 0x00000012 
+ 00011405  0x000016f5 call  0x00002c90 
+ 00011406  0x000016f6 add  0x00000013 , 0x00000091 , 0x00000005 
+ 00011407  0x000016f8 branch  0x00002e56 
+ 00011408  0x000016fb call  0x00002c94 
+ 00011409  0x000016fc increase  0x00000001 , 0x00000002 
+ 00011410  0x000016fd and_into  0x00000003 , 0x00000002 
+ 00011411  0x000016fe rtn 
+ 00011412  0x00001701 add  0x00000013 , 0x000000ae , 0x00000012 
+ 00011413  0x00001702 ifetch  0x00000001 , 0x00000012 
+ 00011414  0x00001704 and_into  0x00000003 , 0x0000003f 
+ 00011415  0x00001705 mul32  0x0000003f , 0x00000004 , 0x00000011 
+ 00011416  0x00001706 add  0x00000013 , 0x00000097 , 0x0000003f 
+ 00011417  0x00001708 iadd  0x00000011 , 0x0000003f 
+ 00011418  0x00001709 iadd  0x00000002 , 0x00000006 
+ 00011419  0x0000170a ifetch  0x00000001 , 0x00000006 
+ 00011420  0x0000170c branch  0x0000322f 
+ 00011421  0x0000170f call  0x0000326c 
+ 00011422  0x00001710 call  0x0000666a 
+ 00011423  0x00001711 setarg  0x000007e2 
+ 00011424  0x00001712 arg  0x00000aa2 , 0x00000011 
+ 00011425  0x00001713 arg  0x00000004 , 0x00000002 
+ 00011426  0x00001714 call  0x000066b3 
+ 00011427  0x00001715 call  0x0000666d 
+ 00011428  0x00001716 fetch  0x00000004 , 0x00000aa2 
+ 00011429  0x00001717 call  0x00003227 
+ 00011430  0x00001719 nrtn  0x00000034 
+ 00011431  0x0000171a fetch  0x00000004 , 0x000040a0 
+ 00011432  0x0000171c branch  0x00003227 
+ 00011433  0x0000171f call  0x00003241 
+ 00011434  0x00001721 setarg  0x00000000 
+ 00011435  0x00001722 call  0x0000323f 
+ 00011436  0x00001725 call  0x0000323a 
+ 00011437  0x00001727 and_into  0x00000007 , 0x0000003f 
+ 00011438  0x00001729 branch  0x0000323c 
+ 00011439  0x0000172c call  0x0000323a 
+ 00011440  0x0000172e set1  0x00000004 , 0x0000003f 
+ 00011441  0x0000172f call  0x0000323c 
+ 00011442  0x00001732 branch  0x00003235 
+ 00011443  0x00001735 call  0x0000325d 
+ 00011444  0x00001737 beq  0x00000001 , 0x00002cb7 
+ 00011445  0x00001738 beq  0x00000002 , 0x00002cbc 
+ 00011446  0x00001739 rtn 
+ 00011447  0x0000173c call  0x0000323e 
+ 00011448  0x0000173f add  0x00000013 , 0x000000d1 , 0x00000005 
+ 00011449  0x00001740 call  0x000032d6 
+ 00011450  0x00001742 call  0x00003242 
+ 00011451  0x00001744 branch  0x00002cac 
+ 00011452  0x00001747 call  0x0000325a 
+ 00011453  0x00001749 branch  0x00002cb8 
+ 00011454  0x0000174c add  0x00000013 , 0x0000008c , 0x00000011 
+ 00011455  0x0000174d ifetch  0x00000001 , 0x00000011 
+ 00011456  0x0000174f increase  0x00000001 , 0x0000003f 
+ 00011457  0x00001750 add  0x00000013 , 0x0000008c , 0x00000005 
+ 00011458  0x00001751 istore  0x00000001 , 0x00000005 
+ 00011459  0x00001753 beq  0x00000020 , 0x00002dd2 
+ 00011460  0x00001754 call  0x00003258 
+ 00011461  0x00001756 beq  0x00000001 , 0x00002cca 
+ 00011462  0x00001757 setarg  0x00000001 
+ 00011463  0x00001758 call  0x0000325b 
+ 00011464  0x0000175b call  0x00003258 
+ 00011465  0x0000175d bne  0x00000001 , 0x00002cac 
+ 00011466  0x0000175f add  0x00000013 , 0x000000d3 , 0x00000011 
+ 00011467  0x00001760 ifetch  0x00000001 , 0x00000011 
+ 00011468  0x00001762 increase  0x00000001 , 0x0000003f 
+ 00011469  0x00001763 call  0x00002cd5 
+ 00011470  0x00001765 beq  0x00000004 , 0x00002cd2 
+ 00011471  0x00001766 call  0x00002c8a 
+ 00011472  0x00001767 call  0x00002d04 
+ 00011473  0x00001769 branch  0x00002d8f 
+ 00011474  0x0000176c call  0x00002cd4 
+ 00011475  0x0000176e branch  0x00002cac 
+ 00011476  0x00001771 setarg  0x00000000 
+ 00011477  0x00001773 add  0x00000013 , 0x000000d3 , 0x00000005 
+ 00011478  0x00001774 branch  0x000032b4 
+ 00011479  0x00001777 call  0x0000323e 
+ 00011480  0x0000177a call  0x0000325a 
+ 00011481  0x0000177c call  0x00003241 
+ 00011482  0x0000177e branch  0x00002cac 
+ 00011483  0x00001781 call  0x0000325d 
+ 00011484  0x00001783 beq  0x00000003 , 0x00002cd8 
+ 00011485  0x00001784 call  0x0000323a 
+ 00011486  0x00001786 isolate0  0x00000004 , 0x0000003f 
+ 00011487  0x00001787 branch  0x00002ca9 , 0x00000001 
+ 00011488  0x00001788 call  0x0000325d 
+ 00011489  0x0000178a beq  0x00000001 , 0x00002cd7 
+ 00011490  0x0000178b beq  0x00000002 , 0x00002cd8 
+ 00011491  0x0000178c rtn 
+ 00011492  0x0000178f call  0x00003253 
+ 00011493  0x00001791 rtnne  0x000000ff 
+ 00011494  0x00001792 call  0x00002ce9 
+ 00011495  0x00001793 ncall  0x00002cf4 , 0x0000002c 
+ 00011496  0x00001794 rtn 
+ 00011497  0x00001797 disable  0x0000002c 
+ 00011498  0x00001798 add  0x00000013 , 0x000000ce , 0x00000011 
+ 00011499  0x00001799 ifetch  0x00000001 , 0x00000011 
+ 00011500  0x0000179b rtnne  0x00000001 
+ 00011501  0x0000179c add  0x00000013 , 0x000000d0 , 0x00000011 
+ 00011502  0x0000179d ifetch  0x00000001 , 0x00000011 
+ 00011503  0x0000179f rtnne  0x00000000 
+ 00011504  0x000017a0 setarg  0x00000001 
+ 00011505  0x000017a1 call  0x00002cfd 
+ 00011506  0x000017a3 call  0x00003237 
+ 00011507  0x000017a5 branch  0x00007feb 
+ 00011508  0x000017a8 add  0x00000013 , 0x000000d0 , 0x00000011 
+ 00011509  0x000017a9 ifetch  0x00000001 , 0x00000011 
+ 00011510  0x000017ab branch  0x00002cff , 0x00000034 
+ 00011511  0x000017ac increase  0xffffffff , 0x0000003f 
+ 00011512  0x000017ad call  0x0000323f 
+ 00011513  0x000017af setarg  0x00000002 
+ 00011514  0x000017b0 call  0x00002cfd 
+ 00011515  0x000017b2 call  0x00002c8a 
+ 00011516  0x000017b4 branch  0x00003237 
+ 00011517  0x000017b7 add  0x00000013 , 0x000000d2 , 0x00000005 
+ 00011518  0x000017b8 branch  0x000032b4 
+ 00011519  0x000017bc setarg  0x00000003 
+ 00011520  0x000017bd call  0x00002cfd 
+ 00011521  0x000017bf call  0x00003258 
+ 00011522  0x000017c1 nbranch  0x00002cc8 , 0x00000034 
+ 00011523  0x000017c2 call  0x00002c8a 
+ 00011524  0x000017c5 setarg  0x00000002 
+ 00011525  0x000017c6 branch  0x00003238 
+ 00011526  0x000017c9 rtnmark0  0x00000026 
+ 00011527  0x000017ca set1  0x00000027 , 0x00000000 
+ 00011528  0x000017cb bpatch  0x000000b3 , 0x00004016 
+ 00011529  0x000017cc add  0x00000013 , 0x0000008e , 0x00000011 
+ 00011530  0x000017cd ifetch  0x00000001 , 0x00000011 
+ 00011531  0x000017cf beq  0x00000001 , 0x00002d0f 
+ 00011532  0x000017d0 call  0x0000306a 
+ 00011533  0x000017d1 nbranch  0x00002d16 , 0x00000028 
+ 00011534  0x000017d2 call  0x00002d1b 
+ 00011535  0x000017d4 add  0x00000013 , 0x0000008e , 0x00000005 
+ 00011536  0x000017d5 call  0x000032d6 
+ 00011537  0x000017d7 call  0x00002d2c 
+ 00011538  0x000017d8 nbranch  0x00002d7d , 0x00000028 
+ 00011539  0x000017d9 call  0x00002ce4 
+ 00011540  0x000017db call  0x00002d8f 
+ 00011541  0x000017dc call  0x00002e7a 
+ 00011542  0x000017de set0  0x00000027 , 0x00000000 
+ 00011543  0x000017df rtn 
+ 00011544  0x000017e2 rtn  0x00000005 
+ 00011545  0x000017e3 set1  0x0000001c , 0x0000003f 
+ 00011546  0x000017e4 rtn 
+ 00011547  0x000017e7 add  0x00000013 , 0x000000c2 , 0x00000011 
+ 00011548  0x000017e8 ifetch  0x00000001 , 0x00000011 
+ 00011549  0x000017ea increase  0x00000001 , 0x0000003f 
+ 00011550  0x000017eb add  0x00000013 , 0x000000c2 , 0x00000005 
+ 00011551  0x000017ec istore  0x00000001 , 0x00000005 
+ 00011552  0x000017ee beq  0x00000004 , 0x00002d23 
+ 00011553  0x000017ef beq  0x00000005 , 0x00002d27 
+ 00011554  0x000017f0 rtn 
+ 00011555  0x000017f2 add  0x00000013 , 0x000000ad , 0x00000011 
+ 00011556  0x000017f3 ifetch  0x00000001 , 0x00000011 
+ 00011557  0x000017f7 add  0x00000013 , 0x000000ab , 0x00000005 
+ 00011558  0x000017f8 branch  0x000032b4 
+ 00011559  0x000017fb add  0x00000013 , 0x000000c2 , 0x00000005 
+ 00011560  0x000017fc call  0x000032d6 
+ 00011561  0x000017fe add  0x00000013 , 0x000000ac , 0x00000011 
+ 00011562  0x000017ff ifetch  0x00000001 , 0x00000011 
+ 00011563  0x00001801 branch  0x00002d25 
+ 00011564  0x00001804 call  0x00003253 
+ 00011565  0x00001806 bne  0x000000ff , 0x00002eb1 
+ 00011566  0x00001807 bpatch  0x000000b4 , 0x00004016 
+ 00011567  0x00001808 call  0x00002d3a 
+ 00011568  0x00001809 nbranch  0x00002d36 , 0x00000028 
+ 00011569  0x0000180a call  0x00002d53 
+ 00011570  0x0000180b call  0x00002e71 
+ 00011571  0x0000180e setarg  0x00000001 
+ 00011572  0x00001810 add  0x00000013 , 0x0000008b , 0x00000005 
+ 00011573  0x00001811 branch  0x000032b4 
+ 00011574  0x00001814 add  0x00000013 , 0x0000008b , 0x00000011 
+ 00011575  0x00001815 ifetch  0x00000001 , 0x00000011 
+ 00011576  0x00001817 beq  0x00000001 , 0x00007fe7 
+ 00011577  0x00001818 rtn 
+ 00011578  0x0000181c add  0x00000013 , 0x000000d8 , 0x00000002 
+ 00011579  0x0000181d ifetch  0x00000002 , 0x00000002 
+ 00011580  0x0000181f call  0x00007f9c 
+ 00011581  0x00001820 nrtn  0x00000028 
+ 00011582  0x00001821 copy  0x00000011 , 0x0000003f 
+ 00011583  0x00001822 store  0x00000001 , 0x00000aae 
+ 00011584  0x00001823 add  0x00000013 , 0x000000b2 , 0x00000005 
+ 00011585  0x00001824 call  0x000032d6 
+ 00011586  0x00001826 call  0x00002cac 
+ 00011587  0x00001827 store  0x00000001 , 0x0000119e 
+ 00011588  0x00001828 fetch  0x00000001 , 0x00000aae 
+ 00011589  0x00001829 copy  0x0000003f , 0x00000011 
+ 00011590  0x0000182a add  0x00000011 , 0x00000001 , 0x00000002 
+ 00011591  0x0000182b arg  0x0000119f , 0x00000005 
+ 00011592  0x0000182c copy  0x00000011 , 0x00000039 
+ 00011593  0x0000182d copy  0x00000012 , 0x00000006 
+ 00011594  0x0000182e call  0x00007f01 
+ 00011595  0x0000182f arg  0x0000119e , 0x00000011 
+ 00011596  0x00001831 rtnmark0  0x00000027 
+ 00011597  0x00001832 add  0x00000013 , 0x00000086 , 0x00000005 
+ 00011598  0x00001833 istoret  0x00000001 , 0x00000005 
+ 00011599  0x00001835 copy  0x00000002 , 0x00000039 
+ 00011600  0x00001836 add  0x00000013 , 0x00000022 , 0x00000005 
+ 00011601  0x00001838 copy  0x00000011 , 0x00000006 
+ 00011602  0x00001839 branch  0x00007f01 
+ 00011603  0x0000183d add  0x00000013 , 0x00000086 , 0x00000011 
+ 00011604  0x0000183e ifetch  0x00000001 , 0x00000011 
+ 00011605  0x00001840 increase  0x00000002 , 0x0000003f 
+ 00011606  0x00001841 add  0x00000013 , 0x00000088 , 0x00000005 
+ 00011607  0x00001842 istore  0x00000001 , 0x00000005 
+ 00011608  0x00001845 call  0x0000323a 
+ 00011609  0x00001847 call  0x00003235 
+ 00011610  0x0000184a add  0x00000013 , 0x00000086 , 0x00000011 
+ 00011611  0x0000184b ifetch  0x00000001 , 0x00000011 
+ 00011612  0x0000184d lshift3  0x0000003f , 0x0000003f 
+ 00011613  0x0000184e add  0x00000013 , 0x00000085 , 0x00000011 
+ 00011614  0x0000184f ifetcht  0x00000001 , 0x00000011 
+ 00011615  0x00001851 and  0x00000002 , 0x00000003 , 0x00000002 
+ 00011616  0x00001852 lshift  0x00000002 , 0x00000002 
+ 00011617  0x00001853 ior  0x00000002 , 0x0000003f 
+ 00011618  0x00001854 add  0x00000013 , 0x000000c3 , 0x00000011 
+ 00011619  0x00001855 ifetcht  0x00000001 , 0x00000011 
+ 00011620  0x00001857 iadd  0x00000002 , 0x0000003f 
+ 00011621  0x00001858 istore  0x00000001 , 0x00000005 
+ 00011622  0x0000185a add  0x00000013 , 0x00000086 , 0x00000011 
+ 00011623  0x0000185b ifetch  0x00000001 , 0x00000011 
+ 00011624  0x0000185d iforce  0x00000039 
+ 00011625  0x0000185e add  0x00000013 , 0x00000022 , 0x00000006 
+ 00011626  0x00001860 branch  0x00007f01 
+ 00011627  0x00001863 call  0x0000324f 
+ 00011628  0x00001865 call  0x0000325a 
+ 00011629  0x00001867 call  0x00002e6d 
+ 00011630  0x00001868 call  0x00002cac 
+ 00011631  0x00001869 store  0x00000001 , 0x0000119e 
+ 00011632  0x0000186a call  0x00002d77 
+ 00011633  0x0000186b call  0x0000323a 
+ 00011634  0x0000186d set1  0x00000003 , 0x0000003f 
+ 00011635  0x0000186e call  0x0000323c 
+ 00011636  0x00001870 call  0x00002d53 
+ 00011637  0x00001871 call  0x00002d33 
+ 00011638  0x00001872 branch  0x00002d14 
+ 00011639  0x00001875 store  0x00000001 , 0x0000119f 
+ 00011640  0x00001876 call  0x00003224 
+ 00011641  0x00001878 store  0x00000004 , 0x000011a0 
+ 00011642  0x00001879 arg  0x00000006 , 0x00000002 
+ 00011643  0x0000187a arg  0x0000119e , 0x00000011 
+ 00011644  0x0000187b branch  0x00002d4c 
+ 00011645  0x0000187e add  0x00000013 , 0x000000b2 , 0x00000011 
+ 00011646  0x0000187f ifetch  0x00000001 , 0x00000011 
+ 00011647  0x00001881 branch  0x00002d6b , 0x00000034 
+ 00011648  0x00001884 add  0x00000013 , 0x000000da , 0x00000011 
+ 00011649  0x00001885 ifetch  0x00000002 , 0x00000011 
+ 00011650  0x00001887 branch  0x00007f9c 
+ 00011651  0x0000188a call  0x00002c7a 
+ 00011652  0x0000188c call  0x00002afa 
+ 00011653  0x0000188d fetch  0x00000003 , 0x0000416f 
+ 00011654  0x0000188e rtn  0x00000034 
+ 00011655  0x0000188f add  0x00000013 , 0x000000dc , 0x00000002 
+ 00011656  0x00001890 ifetch  0x00000002 , 0x00000002 
+ 00011657  0x00001892 call  0x00007f9c 
+ 00011658  0x00001893 add  0x00000013 , 0x000000b6 , 0x00000002 
+ 00011659  0x00001894 ifetch  0x00000008 , 0x00000002 
+ 00011660  0x00001895 call  0x00007f49 
+ 00011661  0x00001896 storet  0x00000004 , 0x0000415b 
+ 00011662  0x00001897 branch  0x00002b2a 
+ 00011663  0x0000189a call  0x00002c7a 
+ 00011664  0x0000189b add  0x00000013 , 0x0000008f , 0x00000005 
+ 00011665  0x0000189c call  0x000032d6 
+ 00011666  0x0000189f call  0x00002da4 
+ 00011667  0x000018a0 nbranch  0x00002dae , 0x00000018 
+ 00011668  0x000018a1 nbranch  0x00002dae , 0x0000002f 
+ 00011669  0x000018a2 call  0x00002dd6 
+ 00011670  0x000018a3 call  0x00002e75 
+ 00011671  0x000018a5 call  0x00002c7a 
+ 00011672  0x000018a6 add  0x00000013 , 0x00000085 , 0x00000011 
+ 00011673  0x000018a7 ifetch  0x00000001 , 0x00000011 
+ 00011674  0x000018a9 increase  0x00000001 , 0x0000003f 
+ 00011675  0x000018aa call  0x00003232 
+ 00011676  0x000018ac call  0x00003253 
+ 00011677  0x000018ae bne  0x000000ff , 0x00002ed0 
+ 00011678  0x000018af call  0x00002cdb 
+ 00011679  0x000018b1 setarg  0x00000000 
+ 00011680  0x000018b2 add  0x00000013 , 0x0000008c , 0x00000005 
+ 00011681  0x000018b3 istore  0x00000002 , 0x00000005 
+ 00011682  0x000018b7 setarg  0x00000000 
+ 00011683  0x000018b8 branch  0x00002d34 
+ 00011684  0x000018bc disable  0x0000002f 
+ 00011685  0x000018bd call  0x00002df7 
+ 00011686  0x000018be call  0x00002c7a 
+ 00011687  0x000018bf add  0x00000013 , 0x000000c3 , 0x00000011 
+ 00011688  0x000018c0 ifetch  0x00000001 , 0x00000011 
+ 00011689  0x000018c2 beq  0x00000001 , 0x00002dac 
+ 00011690  0x000018c3 call  0x00002e11 
+ 00011691  0x000018c4 branch  0x00002e45 
+ 00011692  0x000018c6 call  0x00002e45 
+ 00011693  0x000018c7 branch  0x00002d97 
+ 00011694  0x000018cb bpatch  0x000000b5 , 0x00004016 
+ 00011695  0x000018cc add  0x00000013 , 0x0000008d , 0x00000011 
+ 00011696  0x000018cd ifetch  0x00000001 , 0x00000011 
+ 00011697  0x000018cf increase  0x00000001 , 0x0000003f 
+ 00011698  0x000018d0 add  0x00000013 , 0x0000008d , 0x00000005 
+ 00011699  0x000018d1 istore  0x00000001 , 0x00000005 
+ 00011700  0x000018d3 call  0x00003253 
+ 00011701  0x000018d5 bne  0x000000ff , 0x00002dcc 
+ 00011702  0x000018d6 add  0x00000013 , 0x0000008f , 0x00000011 
+ 00011703  0x000018d7 ifetcht  0x00000001 , 0x00000011 
+ 00011704  0x000018d9 increase  0x00000001 , 0x00000002 
+ 00011705  0x000018da add  0x00000013 , 0x0000008f , 0x00000005 
+ 00011706  0x000018db istoret  0x00000001 , 0x00000005 
+ 00011707  0x000018dd add  0x00000013 , 0x000000cc , 0x00000011 
+ 00011708  0x000018de ifetch  0x00000001 , 0x00000011 
+ 00011709  0x000018e0 isub  0x00000002 , 0x0000003f 
+ 00011710  0x000018e1 nbranch  0x00002d92 , 0x00000034 
+ 00011711  0x000018e2 bpatch  0x000000b6 , 0x00004016 
+ 00011712  0x000018e3 call  0x0000325d 
+ 00011713  0x000018e5 beq  0x00000003 , 0x00002cbe 
+ 00011714  0x000018e6 add  0x00000013 , 0x000000d1 , 0x00000011 
+ 00011715  0x000018e7 ifetch  0x00000001 , 0x00000011 
+ 00011716  0x000018e9 increase  0x00000001 , 0x0000003f 
+ 00011717  0x000018ea add  0x00000013 , 0x000000d1 , 0x00000005 
+ 00011718  0x000018eb istore  0x00000001 , 0x00000005 
+ 00011719  0x000018ed beq  0x00000002 , 0x00002cb3 
+ 00011720  0x000018ee call  0x00002caf 
+ 00011721  0x000018ef setarg  0x00000001 
+ 00011722  0x000018f0 call  0x00003238 
+ 00011723  0x000018f2 branch  0x00002d8f 
+ 00011724  0x000018f5 add  0x00000013 , 0x0000008d , 0x00000011 
+ 00011725  0x000018f6 ifetch  0x00000001 , 0x00000011 
+ 00011726  0x000018f8 rtnne  0x000000ff 
+ 00011727  0x000018f9 add  0x00000013 , 0x0000008d , 0x00000005 
+ 00011728  0x000018fa call  0x000032d6 
+ 00011729  0x000018fc branch  0x00002dd4 
+ 00011730  0x000018ff add  0x00000013 , 0x0000008c , 0x00000005 
+ 00011731  0x00001900 call  0x000032d6 
+ 00011732  0x00001903 jam  0x0000003a , 0x00000a99 
+ 00011733  0x00001904 branch  0x00007d86 
+ 00011734  0x00001907 call  0x00002dde 
+ 00011735  0x00001908 add  0x00000013 , 0x00000084 , 0x00000011 
+ 00011736  0x00001909 ifetch  0x00000001 , 0x00000011 
+ 00011737  0x0000190b rtn  0x00000034 
+ 00011738  0x0000190c iforce  0x00000039 
+ 00011739  0x0000190d add  0x00000013 , 0x00000002 , 0x00000006 
+ 00011740  0x0000190f add  0x00000013 , 0x00000064 , 0x00000005 
+ 00011741  0x00001911 branch  0x00007f01 
+ 00011742  0x00001916 call  0x0000325f 
+ 00011743  0x00001918 rshift3  0x0000003f , 0x0000003f 
+ 00011744  0x00001919 add  0x00000013 , 0x00000084 , 0x00000005 
+ 00011745  0x0000191a istore  0x00000001 , 0x00000005 
+ 00011746  0x0000191d increase  0x00000001 , 0x0000003f 
+ 00011747  0x0000191e add  0x00000013 , 0x00000001 , 0x00000006 
+ 00011748  0x00001920 iadd  0x00000006 , 0x00000006 
+ 00011749  0x00001921 ifetch  0x00000003 , 0x00000006 
+ 00011750  0x00001922 add  0x00000013 , 0x000000c4 , 0x00000005 
+ 00011751  0x00001923 istore  0x00000003 , 0x00000005 
+ 00011752  0x00001926 call  0x0000325f 
+ 00011753  0x00001928 rshift  0x0000003f , 0x0000003f 
+ 00011754  0x00001929 and  0x0000003f , 0x00000003 , 0x0000003f 
+ 00011755  0x0000192a add  0x00000013 , 0x000000ca , 0x00000005 
+ 00011756  0x0000192b istore  0x00000001 , 0x00000005 
+ 00011757  0x0000192d rtn 
+ 00011758  0x00001930 disable  0x00000009 
+ 00011759  0x00001931 disable  0x00000007 
+ 00011760  0x00001932 setarg  0x00555555 
+ 00011761  0x00001933 iforce  0x0000000f 
+ 00011762  0x00001934 rtn 
+ 00011763  0x00001937 call  0x00002918 
+ 00011764  0x00001938 add  0x00000013 , 0x00000090 , 0x00000011 
+ 00011765  0x00001939 ifetcht  0x00000001 , 0x00000011 
+ 00011766  0x0000193b branch  0x00002933 
+ 00011767  0x0000193e call  0x00002dee 
+ 00011768  0x0000193f call  0x00002df3 
+ 00011769  0x00001940 set1  0x00000000 , 0x00000015 
+ 00011770  0x00001941 enable  0x0000001d 
+ 00011771  0x00001942 enable  0x00000020 
+ 00011772  0x00001943 disable  0x00000021 
+ 00011773  0x00001944 call  0x000053c4 
+ 00011774  0x00001945 call  0x0000322a 
+ 00011775  0x00001947 iforce  0x00000009 
+ 00011776  0x00001948 inject  0x00000003 , 0x00000020 
+ 00011777  0x00001949 enable  0x00000009 
+ 00011778  0x0000194a add  0x00000013 , 0x00000088 , 0x00000011 
+ 00011779  0x0000194b ifetch  0x00000001 , 0x00000011 
+ 00011780  0x0000194d iforce  0x00000039 
+ 00011781  0x0000194e add  0x00000013 , 0x00000042 , 0x00000006 
+ 00011782  0x00001951 ifetch  0x00000001 , 0x00000006 
+ 00011783  0x00001952 inject  0x00000003 , 0x00000008 
+ 00011784  0x00001953 loop  0x00002e06 
+ 00011785  0x00001954 enable  0x00000008 
+ 00011786  0x00001955 inject  0x00000003 , 0x00000018 
+ 00011787  0x00001956 disable  0x00000008 
+ 00011788  0x00001957 until  0x0000003e , 0x00000027 
+ 00011789  0x00001958 bpatch  0x000000b7 , 0x00004016 
+ 00011790  0x00001959 nop  0x00000064 
+ 00011791  0x0000195a disable  0x0000001d 
+ 00011792  0x0000195b rtn 
+ 00011793  0x0000195e disable  0x0000002f 
+ 00011794  0x0000195f force  0x00000000 , 0x00000015 
+ 00011795  0x00001960 add  0x00000013 , 0x00000090 , 0x00000011 
+ 00011796  0x00001961 ifetcht  0x00000001 , 0x00000011 
+ 00011797  0x00001963 call  0x0000291f 
+ 00011798  0x00001964 call  0x00002924 
+ 00011799  0x00001966 call  0x00002dee 
+ 00011800  0x00001967 enable  0x0000000d 
+ 00011801  0x00001968 enable  0x00000021 
+ 00011802  0x00001969 disable  0x00000020 
+ 00011803  0x0000196a call  0x000053c4 
+ 00011804  0x0000196b call  0x0000322a 
+ 00011805  0x0000196d iforce  0x00000009 
+ 00011806  0x0000196e enable  0x00000010 
+ 00011807  0x0000196f add  0x00000013 , 0x00000089 , 0x00000011 
+ 00011808  0x00001970 ifetch  0x00000002 , 0x00000011 
+ 00011809  0x00001972 iforce  0x0000001b 
+ 00011810  0x00001973 correlate  0x0000003e , 0x00000003 
+ 00011811  0x00001974 nbranch  0x00002e4d , 0x00000018 
+ 00011812  0x00001975 enable  0x00000009 
+ 00011813  0x00001976 parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00011814  0x00001977 rshift3  0x0000000c , 0x0000003f 
+ 00011815  0x00001978 add  0x00000013 , 0x00000000 , 0x00000005 
+ 00011816  0x00001979 istore  0x00000001 , 0x00000005 
+ 00011817  0x0000197b add  0x00000013 , 0x000000cd , 0x00000011 
+ 00011818  0x0000197c ifetch  0x00000001 , 0x00000011 
+ 00011819  0x0000197e beq  0x00000002 , 0x00002e33 
+ 00011820  0x0000197f bpatch  0x000000b8 , 0x00004017 
+ 00011821  0x00001980 add  0x00000013 , 0x00000000 , 0x00000011 
+ 00011822  0x00001981 ifetch  0x00000001 , 0x00000011 
+ 00011823  0x00001983 add  0x00000013 , 0x00000087 , 0x00000011 
+ 00011824  0x00001984 ifetcht  0x00000001 , 0x00000011 
+ 00011825  0x00001986 icompare  0x00000007 , 0x00000002 
+ 00011826  0x00001987 nbranch  0x00002e45 , 0x00000001 
+ 00011827  0x00001989 parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00011828  0x0000198a rshift3  0x0000000c , 0x0000003f 
+ 00011829  0x0000198b istore  0x00000001 , 0x00000005 
+ 00011830  0x0000198c rshift3  0x0000003f , 0x0000003f 
+ 00011831  0x0000198d and  0x0000003f , 0x0000001f , 0x00000039 
+ 00011832  0x0000198e branch  0x00002e3d , 0x00000005 
+ 00011833  0x00001990 parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00011834  0x00001991 rshift3  0x0000000c , 0x0000003f 
+ 00011835  0x00001992 istore  0x00000001 , 0x00000005 
+ 00011836  0x00001993 loop  0x00002e39 
+ 00011837  0x00001995 parse  0x00000003 , 0x00000000 , 0x00000018 
+ 00011838  0x00001996 rshift32  0x0000003f , 0x0000003f 
+ 00011839  0x00001997 rshift16  0x0000003f , 0x0000003f 
+ 00011840  0x00001998 istore  0x00000003 , 0x00000005 
+ 00011841  0x00001999 branch  0x00002e45 , 0x00000006 
+ 00011842  0x0000199a enable  0x0000002f 
+ 00011843  0x0000199b disable  0x0000000d 
+ 00011844  0x0000199c rtn 
+ 00011845  0x000019a0 disable  0x0000001d 
+ 00011846  0x000019a1 disable  0x0000000d 
+ 00011847  0x000019a2 disable  0x00000009 
+ 00011848  0x000019a3 disable  0x00000007 
+ 00011849  0x000019a4 branch  0x000028f9 , 0x00000021 
+ 00011850  0x000019a5 until  0x0000003e , 0x00000027 
+ 00011851  0x000019a6 nop  0x00000064 
+ 00011852  0x000019a7 branch  0x000028f9 
+ 00011853  0x000019aa call  0x00002e4f 
+ 00011854  0x000019ab branch  0x00002e45 
+ 00011855  0x000019ae call  0x000029bb 
+ 00011856  0x000019af rtn  0x00000034 
+ 00011857  0x000019b0 add  0x00000013 , 0x000000ea , 0x00000011 
+ 00011858  0x000019b1 ifetcht  0x00000001 , 0x00000011 
+ 00011859  0x000019b3 arg  0x00000d9e , 0x00000011 
+ 00011860  0x000019b5 call  0x00002e58 
+ 00011861  0x000019b6 add  0x00000013 , 0x000000ea , 0x00000005 
+ 00011862  0x000019b9 istoret  0x00000001 , 0x00000005 
+ 00011863  0x000019ba rtn 
+ 00011864  0x000019bd arg  0x000000ff , 0x00000012 
+ 00011865  0x000019be branch  0x00002e5a 
+ 00011866  0x000019d1 copy  0x00000011 , 0x0000003f 
+ 00011867  0x000019d2 iadd  0x00000002 , 0x00000005 
+ 00011868  0x000019d3 fetch  0x00000001 , 0x00000018 
+ 00011869  0x000019d4 istore  0x00000001 , 0x00000005 
+ 00011870  0x000019d5 increase  0x00000001 , 0x00000002 
+ 00011871  0x000019d6 copy  0x00000012 , 0x0000003f 
+ 00011872  0x000019d7 iand_into  0x00000002 
+ 00011873  0x000019d8 rtn 
+ 00011874  0x000019db arg  0x00000000 , 0x00000002 
+ 00011875  0x000019dc copy  0x00000011 , 0x00000006 
+ 00011876  0x000019de ifetch  0x00000001 , 0x00000006 
+ 00011877  0x000019df iadd  0x00000002 , 0x00000002 
+ 00011878  0x000019e0 loop  0x00002e64 
+ 00011879  0x000019e1 rshift8  0x00000002 , 0x00000002 
+ 00011880  0x000019e2 rtn 
+ 00011881  0x000019e5 call  0x00002c7a 
+ 00011882  0x000019e6 call  0x00002e9f 
+ 00011883  0x000019e7 setarg  0x00000001 
+ 00011884  0x000019e8 call  0x00003272 
+ 00011885  0x000019eb setarg  0x00000000 
+ 00011886  0x000019ec call  0x00002e73 
+ 00011887  0x000019ee istore  0x00000001 , 0x00000005 
+ 00011888  0x000019f0 rtn 
+ 00011889  0x000019f3 call  0x00003270 
+ 00011890  0x000019f5 increase  0x00000001 , 0x0000003f 
+ 00011891  0x000019f8 add  0x00000013 , 0x000000fc , 0x00000005 
+ 00011892  0x000019f9 branch  0x000032b4 
+ 00011893  0x000019fe add  0x00000013 , 0x000000fd , 0x00000011 
+ 00011894  0x000019ff ifetch  0x00000001 , 0x00000011 
+ 00011895  0x00001a00 increase  0x00000001 , 0x0000003f 
+ 00011896  0x00001a01 add  0x00000013 , 0x000000fd , 0x00000005 
+ 00011897  0x00001a02 branch  0x000032b4 
+ 00011898  0x00001a05 bpatch  0x000000b9 , 0x00004017 
+ 00011899  0x00001a06 call  0x00003270 
+ 00011900  0x00001a08 sub  0x0000003f , 0x0000007c , 0x0000003e 
+ 00011901  0x00001a09 rtn  0x00000002 
+ 00011902  0x00001a0a add  0x00000013 , 0x000000fd , 0x00000011 
+ 00011903  0x00001a0b ifetcht  0x00000001 , 0x00000011 
+ 00011904  0x00001a0d isub  0x00000002 , 0x00000002 
+ 00011905  0x00001a0e call  0x00002e6d 
+ 00011906  0x00001a0f setarg  0x00000102 
+ 00011907  0x00001a10 iadd  0x00000013 , 0x00000011 
+ 00011908  0x00001a11 ifetch  0x00000001 , 0x00000011 
+ 00011909  0x00001a13 isub  0x00000002 , 0x0000003e 
+ 00011910  0x00001a14 nbranch  0x00002e8d , 0x00000002 
+ 00011911  0x00001a15 setarg  0x00000103 
+ 00011912  0x00001a16 iadd  0x00000013 , 0x00000011 
+ 00011913  0x00001a17 ifetch  0x00000001 , 0x00000011 
+ 00011914  0x00001a19 isub  0x00000002 , 0x0000003e 
+ 00011915  0x00001a1a branch  0x00002e99 , 0x00000002 
+ 00011916  0x00001a1b rtn 
+ 00011917  0x00001a1e add  0x00000013 , 0x000000fe , 0x00000011 
+ 00011918  0x00001a1f ifetch  0x00000001 , 0x00000011 
+ 00011919  0x00001a21 beq  0x00000002 , 0x00002e93 
+ 00011920  0x00001a22 increase  0x00000001 , 0x0000003f 
+ 00011921  0x00001a23 call  0x00003272 
+ 00011922  0x00001a25 beq  0x00000001 , 0x00002e9f 
+ 00011923  0x00001a27 setarg  0x0000000a 
+ 00011924  0x00001a28 call  0x000032b0 
+ 00011925  0x00001a2a setarg  0x00000000 
+ 00011926  0x00001a2b call  0x000032b2 
+ 00011927  0x00001a2e add  0x00000013 , 0x000000ff , 0x00000011 
+ 00011928  0x00001a30 branch  0x00002ea5 
+ 00011929  0x00001a33 add  0x00000013 , 0x000000fe , 0x00000011 
+ 00011930  0x00001a34 ifetch  0x00000001 , 0x00000011 
+ 00011931  0x00001a36 beq  0x00000000 , 0x00002ea7 
+ 00011932  0x00001a37 increase  0xffffffff , 0x0000003f 
+ 00011933  0x00001a38 call  0x00003272 
+ 00011934  0x00001a3a beq  0x00000000 , 0x00002ea7 
+ 00011935  0x00001a3f setarg  0x00000005 
+ 00011936  0x00001a40 call  0x000032b0 
+ 00011937  0x00001a42 setarg  0x00000000 
+ 00011938  0x00001a43 call  0x000032b2 
+ 00011939  0x00001a46 setarg  0x00000100 
+ 00011940  0x00001a48 iadd  0x00000013 , 0x00000011 
+ 00011941  0x00001a4a ifetch  0x00000001 , 0x00000011 
+ 00011942  0x00001a4c branch  0x0000326a 
+ 00011943  0x00001a51 setarg  0x00000002 
+ 00011944  0x00001a52 call  0x000032b0 
+ 00011945  0x00001a54 setarg  0x00000000 
+ 00011946  0x00001a55 call  0x000032b2 
+ 00011947  0x00001a58 setarg  0x00000101 
+ 00011948  0x00001a5a branch  0x00002ea4 
+ 00011949  0x00001a69 set1  0x00000026 , 0x00000000 
+ 00011950  0x00001a6a call  0x00002c83 
+ 00011951  0x00001a6d setarg  0x00000001 
+ 00011952  0x00001a6e branch  0x00003256 
+ 00011953  0x00001a71 add  0x00000013 , 0x0000008b , 0x00000011 
+ 00011954  0x00001a72 ifetch  0x00000001 , 0x00000011 
+ 00011955  0x00001a74 beq  0x00000001 , 0x00007fe7 
+ 00011956  0x00001a75 call  0x00003253 
+ 00011957  0x00001a77 beq  0x00000001 , 0x00002eb9 
+ 00011958  0x00001a78 beq  0x00000002 , 0x00002ebd 
+ 00011959  0x00001a79 beq  0x00000003 , 0x00002ec1 
+ 00011960  0x00001a7a branch  0x00002a8c 
+ 00011961  0x00001a7d setarg  0x00000011 
+ 00011962  0x00001a7e call  0x00003256 
+ 00011963  0x00001a80 jam  0x000000aa , 0x0000119e 
+ 00011964  0x00001a81 branch  0x00002ec4 
+ 00011965  0x00001a83 setarg  0x00000012 
+ 00011966  0x00001a84 call  0x00003256 
+ 00011967  0x00001a86 jam  0x00000055 , 0x0000119e 
+ 00011968  0x00001a87 branch  0x00002ec4 
+ 00011969  0x00001a89 setarg  0x00000013 
+ 00011970  0x00001a8a call  0x00003256 
+ 00011971  0x00001a8c jam  0x00000022 , 0x0000119e 
+ 00011972  0x00001a8e call  0x0000323a 
+ 00011973  0x00001a90 and_into  0x00000007 , 0x0000003f 
+ 00011974  0x00001a91 store  0x00000001 , 0x0000119f 
+ 00011975  0x00001a92 call  0x00003224 
+ 00011976  0x00001a94 store  0x00000004 , 0x000011a0 
+ 00011977  0x00001a96 jam  0x00000000 , 0x000011a4 
+ 00011978  0x00001a97 arg  0x0000119e , 0x00000011 
+ 00011979  0x00001a98 arg  0x00000007 , 0x00000002 
+ 00011980  0x00001a99 call  0x00002d4c 
+ 00011981  0x00001a9a call  0x00002d53 
+ 00011982  0x00001a9b call  0x00002d33 
+ 00011983  0x00001a9c branch  0x00007fe7 
+ 00011984  0x00001a9f call  0x00003253 
+ 00011985  0x00001aa1 rtneq  0x000000ff 
+ 00011986  0x00001aa2 beq  0x00000011 , 0x00002ed6 
+ 00011987  0x00001aa3 beq  0x00000012 , 0x00002ed9 
+ 00011988  0x00001aa4 beq  0x00000013 , 0x00002edc 
+ 00011989  0x00001aa5 rtn 
+ 00011990  0x00001aa8 setarg  0x00000002 
+ 00011991  0x00001aa9 call  0x00003256 
+ 00011992  0x00001aab branch  0x00002d9f 
+ 00011993  0x00001aad setarg  0x00000003 
+ 00011994  0x00001aae call  0x00003256 
+ 00011995  0x00001ab0 branch  0x00002d9f 
+ 00011996  0x00001ab2 setarg  0x000000ff 
+ 00011997  0x00001ab3 call  0x00003256 
+ 00011998  0x00001ab5 jam  0x00000039 , 0x00000a99 
+ 00011999  0x00001ab6 call  0x00007d86 
+ 00012000  0x00001ab7 add  0x00000013 , 0x00000066 , 0x00000011 
+ 00012001  0x00001ab8 ifetch  0x00000004 , 0x00000011 
+ 00012002  0x00001aba call  0x0000322c 
+ 00012003  0x00001abc branch  0x00002d9f 
+ 00012004  0x00001abf set0  0x00000026 , 0x00000000 
+ 00012005  0x00001ac0 call  0x00002f08 
+ 00012006  0x00001ac1 call  0x00002f22 
+ 00012007  0x00001ac3 call  0x00003263 
+ 00012008  0x00001ac5 nop  0x000007d0 
+ 00012009  0x00001ac6 call  0x00003261 
+ 00012010  0x00001ac7 beq  0x000000ff , 0x00002dd4 
+ 00012011  0x00001ac8 call  0x00002da4 
+ 00012012  0x00001ac9 nbranch  0x00002efa , 0x00000018 
+ 00012013  0x00001aca nbranch  0x00002efa , 0x0000002f 
+ 00012014  0x00001acb call  0x00002dd6 
+ 00012015  0x00001acc call  0x00002c7a 
+ 00012016  0x00001acd add  0x00000013 , 0x00000092 , 0x00000011 
+ 00012017  0x00001ace ifetcht  0x00000004 , 0x00000011 
+ 00012018  0x00001acf call  0x000030be 
+ 00012019  0x00001ad0 branch  0x00002ead , 0x00000005 
+ 00012020  0x00001ad1 call  0x00002c7a 
+ 00012021  0x00001ad2 add  0x00000013 , 0x00000066 , 0x00000011 
+ 00012022  0x00001ad3 ifetch  0x00000004 , 0x00000011 
+ 00012023  0x00001ad4 beq  0x00000000 , 0x00002ee7 
+ 00012024  0x00001ad5 call  0x0000322c 
+ 00012025  0x00001ad6 branch  0x00002f1c 
+ 00012026  0x00001ad9 call  0x00003261 
+ 00012027  0x00001ada increase  0x00000001 , 0x0000003f 
+ 00012028  0x00001adb call  0x00003264 
+ 00012029  0x00001add call  0x00002f04 
+ 00012030  0x00001ade increase  0x00000001 , 0x0000003f 
+ 00012031  0x00001adf and_into  0x00000001 , 0x0000003f 
+ 00012032  0x00001ae0 call  0x00002f06 
+ 00012033  0x00001ae1 beq  0x00000000 , 0x00002f0c 
+ 00012034  0x00001ae2 beq  0x00000001 , 0x00002f0e 
+ 00012035  0x00001ae3 rtn 
+ 00012036  0x00001ae6 setarg  0x0000018b 
+ 00012037  0x00001ae7 branch  0x000032d0 
+ 00012038  0x00001ae9 arg  0x0000018b , 0x00000011 
+ 00012039  0x00001aea branch  0x000032b3 
+ 00012040  0x00001aed call  0x00003267 
+ 00012041  0x00001aee call  0x00003224 
+ 00012042  0x00001aef call  0x0000322c 
+ 00012043  0x00001af0 branch  0x00002c8a 
+ 00012044  0x00001af3 call  0x00002f08 
+ 00012045  0x00001af4 branch  0x00002ee8 
+ 00012046  0x00001af7 call  0x00002c83 
+ 00012047  0x00001af8 branch  0x00002ee8 
+ 00012048  0x00001afc set0  0x00000026 , 0x00000000 
+ 00012049  0x00001afd call  0x00002c8a 
+ 00012050  0x00001afe call  0x00003253 
+ 00012051  0x00001b00 rtnne  0x000000ff 
+ 00012052  0x00001b01 call  0x00002f22 
+ 00012053  0x00001b02 call  0x00003263 
+ 00012054  0x00001b05 nop  0x000007d0 
+ 00012055  0x00001b06 call  0x00003261 
+ 00012056  0x00001b08 beq  0x000000ff , 0x00002dd4 
+ 00012057  0x00001b09 call  0x00002da4 
+ 00012058  0x00001b0a nbranch  0x00002f27 , 0x00000018 
+ 00012059  0x00001b0b nbranch  0x00002f27 , 0x0000002f 
+ 00012060  0x00001b0d set1  0x00000026 , 0x00000000 
+ 00012061  0x00001b0e call  0x00003263 
+ 00012062  0x00001b0f setarg  0x000000ff 
+ 00012063  0x00001b10 call  0x00003256 
+ 00012064  0x00001b12 jam  0x0000003c , 0x00000a99 
+ 00012065  0x00001b13 branch  0x00007d86 
+ 00012066  0x00001b16 set1  0x00000027 , 0x00000000 
+ 00012067  0x00001b17 jam  0x000000ff , 0x0000119e 
+ 00012068  0x00001b18 call  0x0000323a 
+ 00012069  0x00001b1a call  0x00002d77 
+ 00012070  0x00001b1b branch  0x00002d53 
+ 00012071  0x00001b1e call  0x00003261 
+ 00012072  0x00001b20 increase  0x00000001 , 0x0000003f 
+ 00012073  0x00001b21 call  0x00003264 
+ 00012074  0x00001b23 call  0x00002c8a 
+ 00012075  0x00001b24 branch  0x00002f16 
+ 00012076  0x00001b27 call  0x00003267 
+ 00012077  0x00001b2a setarg  0x000000ff 
+ 00012078  0x00001b2b call  0x00003256 
+ 00012079  0x00001b2d branch  0x00002f10 
+ 00012080  0x00001b37 bpatch  0x000000ba , 0x00004017 
+ 00012081  0x00001b38 call  0x00002c7a 
+ 00012082  0x00001b39 setarg  0x000031b0 
+ 00012083  0x00001b3a add  0x00000013 , 0x000000de , 0x00000005 
+ 00012084  0x00001b3b istore  0x00000002 , 0x00000005 
+ 00012085  0x00001b3d call  0x00002f3d 
+ 00012086  0x00001b3e call  0x000048ea 
+ 00012087  0x00001b3f call  0x000032b6 
+ 00012088  0x00001b41 bpatch  0x000000bb , 0x00004017 
+ 00012089  0x00001b42 beq  0x00000000 , 0x00003055 
+ 00012090  0x00001b43 beq  0x00000001 , 0x00002f45 
+ 00012091  0x00001b44 beq  0x0000000f , 0x00002f41 
+ 00012092  0x00001b45 branch  0x00002a8c 
+ 00012093  0x00001b48 call  0x0000326c 
+ 00012094  0x00001b49 arg  0x00000080 , 0x00000039 
+ 00012095  0x00001b4a arg  0x00000d9e , 0x00000005 
+ 00012096  0x00001b4b branch  0x00007ec6 
+ 00012097  0x00001b4e call  0x00002f4c 
+ 00012098  0x00001b50 call  0x00002f4f 
+ 00012099  0x00001b51 call  0x000048d3 
+ 00012100  0x00001b52 branch  0x00002f42 
+ 00012101  0x00001b55 bpatch  0x000000bc , 0x00004017 
+ 00012102  0x00001b56 call  0x00002f4c 
+ 00012103  0x00001b58 call  0x00002f4f 
+ 00012104  0x00001b59 call  0x00002fbd 
+ 00012105  0x00001b5a call  0x000048d3 
+ 00012106  0x00001b5b call  0x00003019 
+ 00012107  0x00001b5c branch  0x00002f47 
+ 00012108  0x00001b62 call  0x00003291 
+ 00012109  0x00001b63 call  0x00003296 
+ 00012110  0x00001b64 branch  0x00003299 
+ 00012111  0x00001b67 call  0x0000328f 
+ 00012112  0x00001b69 rtnne  0x00000000 
+ 00012113  0x00001b6b call  0x00002f55 
+ 00012114  0x00001b6c call  0x00002f65 
+ 00012115  0x00001b6d call  0x0000316b 
+ 00012116  0x00001b6e branch  0x00002f96 
+ 00012117  0x00001b71 call  0x00003294 
+ 00012118  0x00001b73 rtnbit1  0x00000000 
+ 00012119  0x00001b74 set1  0x00000000 , 0x0000003f 
+ 00012120  0x00001b75 call  0x00003297 
+ 00012121  0x00001b77 call  0x00003267 
+ 00012122  0x00001b7a call  0x00003299 
+ 00012123  0x00001b7c jam  0x00000000 , 0x00000d38 
+ 00012124  0x00001b7d call  0x0000324f 
+ 00012125  0x00001b7f call  0x00002f61 
+ 00012126  0x00001b81 add  0x00000013 , 0x00000000 , 0x00000005 
+ 00012127  0x00001b83 arg  0x00000042 , 0x00000039 
+ 00012128  0x00001b84 branch  0x00007ed4 
+ 00012129  0x00001b87 call  0x00003231 
+ 00012130  0x00001b89 call  0x0000327d 
+ 00012131  0x00001b8b call  0x0000322c 
+ 00012132  0x00001b8d branch  0x00002c8a 
+ 00012133  0x00001b90 bpatch  0x000000bd , 0x00004017 
+ 00012134  0x00001b91 call  0x0000324c 
+ 00012135  0x00001b93 beq  0x00000001 , 0x00002f8d 
+ 00012136  0x00001b94 call  0x00003245 
+ 00012137  0x00001b96 beq  0x00000001 , 0x00002c8a 
+ 00012138  0x00001b97 setarg  0x00000136 
+ 00012139  0x00001b98 iadd  0x00000013 , 0x00000011 
+ 00012140  0x00001b99 ifetcht  0x00000004 , 0x00000011 
+ 00012141  0x00001b9b copy  0x00000022 , 0x0000003f 
+ 00012142  0x00001b9c isub  0x00000002 , 0x0000003e 
+ 00012143  0x00001b9d ncall  0x00002d18 , 0x00000002 
+ 00012144  0x00001b9e copy  0x0000003f , 0x00000012 
+ 00012145  0x00001b9f setarg  0x00000136 
+ 00012146  0x00001ba0 iadd  0x00000013 , 0x00000011 
+ 00012147  0x00001ba1 ifetch  0x00000004 , 0x00000011 
+ 00012148  0x00001ba2 copy  0x0000003f , 0x00000002 
+ 00012149  0x00001ba4 setarg  0x0000013a 
+ 00012150  0x00001ba5 iadd  0x00000013 , 0x00000011 
+ 00012151  0x00001ba6 copy  0x00000002 , 0x0000003f 
+ 00012152  0x00001ba7 ifetcht  0x00000001 , 0x00000011 
+ 00012153  0x00001ba9 iadd  0x00000002 , 0x00000002 
+ 00012154  0x00001baa copy  0x00000012 , 0x0000003f 
+ 00012155  0x00001bab isub  0x00000002 , 0x0000003e 
+ 00012156  0x00001bac nrtn  0x00000002 
+ 00012157  0x00001bad set0  0x0000001c , 0x0000003f 
+ 00012158  0x00001bae setarg  0x00000136 
+ 00012159  0x00001baf iadd  0x00000013 , 0x00000005 
+ 00012160  0x00001bb0 istore  0x00000004 , 0x00000005 
+ 00012161  0x00001bb3 call  0x00002c8a 
+ 00012162  0x00001bb4 call  0x00003278 
+ 00012163  0x00001bb6 increase  0x00000001 , 0x0000003f 
+ 00012164  0x00001bb7 call  0x0000327b 
+ 00012165  0x00001bb9 rtnne  0x00000002 
+ 00012166  0x00001bba call  0x0000327a 
+ 00012167  0x00001bbe branch  0x0000324f 
+ 00012168  0x00001bc1 copy  0x00000022 , 0x0000003f 
+ 00012169  0x00001bc2 arg  0x00000136 , 0x00000011 
+ 00012170  0x00001bc3 call  0x000032bf 
+ 00012171  0x00001bc4 istore  0x00000004 , 0x00000005 
+ 00012172  0x00001bc8 branch  0x0000327a 
+ 00012173  0x00001bcb arg  0x00000d9e , 0x00000011 
+ 00012174  0x00001bcc call  0x00002f94 
+ 00012175  0x00001bcd add  0x00000013 , 0x000000eb , 0x00000005 
+ 00012176  0x00001bce istoret  0x00000001 , 0x00000005 
+ 00012177  0x00001bd0 sub  0x00000002 , 0x00000050 , 0x0000003e 
+ 00012178  0x00001bd1 nrtn  0x00000002 
+ 00012179  0x00001bd2 branch  0x00002c8a 
+ 00012180  0x00001bd5 arg  0x00000100 , 0x00000039 
+ 00012181  0x00001bd6 branch  0x00002e62 
+ 00012182  0x00001bd9 call  0x00002f99 
+ 00012183  0x00001bda call  0x00002fa5 
+ 00012184  0x00001bdb branch  0x00002fb1 
+ 00012185  0x00001bde setarg  0x00000180 
+ 00012186  0x00001bdf call  0x000032d0 
+ 00012187  0x00001be1 rtn  0x00000034 
+ 00012188  0x00001be2 arg  0x0000000b , 0x00000007 
+ 00012189  0x00001be3 call  0x00007f16 
+ 00012190  0x00001be4 nrtn  0x00000034 
+ 00012191  0x00001be5 call  0x000032a7 
+ 00012192  0x00001be8 setarg  0x00000001 
+ 00012193  0x00001be9 store  0x00000001 , 0x00000d54 
+ 00012194  0x00001bea setarg  0x00000000 
+ 00012195  0x00001beb istore  0x00000007 , 0x00000005 
+ 00012196  0x00001bec branch  0x000031b8 
+ 00012197  0x00001bef setarg  0x0000017e 
+ 00012198  0x00001bf0 call  0x000032d0 
+ 00012199  0x00001bf2 rtn  0x00000034 
+ 00012200  0x00001bf3 arg  0x0000000e , 0x00000007 
+ 00012201  0x00001bf4 call  0x00007f16 
+ 00012202  0x00001bf5 nrtn  0x00000034 
+ 00012203  0x00001bf6 call  0x000032aa 
+ 00012204  0x00001bf9 arg  0x00000d64 , 0x00000005 
+ 00012205  0x00001bfa arg  0x00000002 , 0x00000039 
+ 00012206  0x00001bfb call  0x00007ec6 
+ 00012207  0x00001bfc jam  0x00000000 , 0x00000d64 
+ 00012208  0x00001bfd branch  0x000031ed 
+ 00012209  0x00001c00 setarg  0x0000017f 
+ 00012210  0x00001c01 call  0x000032d0 
+ 00012211  0x00001c03 rtn  0x00000034 
+ 00012212  0x00001c04 arg  0x0000000c , 0x00000007 
+ 00012213  0x00001c05 call  0x00007f16 
+ 00012214  0x00001c06 nrtn  0x00000034 
+ 00012215  0x00001c07 call  0x000032ad 
+ 00012216  0x00001c0a arg  0x00000d74 , 0x00000005 
+ 00012217  0x00001c0b arg  0x00000002 , 0x00000039 
+ 00012218  0x00001c0c call  0x00007ec6 
+ 00012219  0x00001c0d jam  0x00000003 , 0x00000d74 
+ 00012220  0x00001c0e branch  0x00003207 
+ 00012221  0x00001c11 call  0x0000328f 
+ 00012222  0x00001c13 rtnne  0x00000001 
+ 00012223  0x00001c14 call  0x00002fc1 
+ 00012224  0x00001c15 branch  0x00002fcb 
+ 00012225  0x00001c18 call  0x00003294 
+ 00012226  0x00001c1a rtnbit1  0x00000001 
+ 00012227  0x00001c1b set1  0x00000001 , 0x0000003f 
+ 00012228  0x00001c1c call  0x00003297 
+ 00012229  0x00001c1e call  0x0000329c 
+ 00012230  0x00001c20 call  0x00002c83 
+ 00012231  0x00001c21 setarg  0x00000000 
+ 00012232  0x00001c22 arg  0x00000106 , 0x00000011 
+ 00012233  0x00001c23 call  0x000032bf 
+ 00012234  0x00001c25 branch  0x000032c5 
+ 00012235  0x00001c28 call  0x0000316e 
+ 00012236  0x00001c29 nbranch  0x00002f5e , 0x0000002f 
+ 00012237  0x00001c2a add  0x00000013 , 0x00000000 , 0x00000006 
+ 00012238  0x00001c2b setarg  0x00000109 
+ 00012239  0x00001c2c iadd  0x00000013 , 0x00000005 
+ 00012240  0x00001c2d arg  0x00000008 , 0x00000039 
+ 00012241  0x00001c2e call  0x00007f01 
+ 00012242  0x00001c2f setarg  0x0000010b 
+ 00012243  0x00001c30 call  0x000032d0 
+ 00012244  0x00001c31 beq  0x000000aa , 0x00002fd9 
+ 00012245  0x00001c32 beq  0x00000055 , 0x00002fed 
+ 00012246  0x00001c33 beq  0x00000022 , 0x00003001 
+ 00012247  0x00001c34 beq  0x000000ff , 0x00003212 
+ 00012248  0x00001c35 branch  0x00002f5e 
+ 00012249  0x00001c38 call  0x000032bd 
+ 00012250  0x00001c39 beq  0x00000001 , 0x00002fdd 
+ 00012251  0x00001c3a beq  0x00000002 , 0x00002fe8 
+ 00012252  0x00001c3b rtn 
+ 00012253  0x00001c3d setarg  0x00000001 
+ 00012254  0x00001c3e call  0x00002ff7 
+ 00012255  0x00001c41 setarg  0x00000001 
+ 00012256  0x00001c42 call  0x00003289 
+ 00012257  0x00001c45 setarg  0x00000080 
+ 00012258  0x00001c46 arg  0x00000130 , 0x00000011 
+ 00012259  0x00001c47 call  0x000032b3 
+ 00012260  0x00001c49 call  0x0000327d 
+ 00012261  0x00001c4b arg  0x00000131 , 0x00000011 
+ 00012262  0x00001c4c call  0x000032bf 
+ 00012263  0x00001c4e branch  0x0000322d 
+ 00012264  0x00001c51 setarg  0x00000001 
+ 00012265  0x00001c52 call  0x00002fff 
+ 00012266  0x00001c55 setarg  0x00000002 
+ 00012267  0x00001c56 call  0x00003289 
+ 00012268  0x00001c58 branch  0x00002fe1 
+ 00012269  0x00001c5b call  0x000032bd 
+ 00012270  0x00001c5c beq  0x00000001 , 0x00002ff1 
+ 00012271  0x00001c5d beq  0x00000002 , 0x00002ff9 
+ 00012272  0x00001c5e rtn 
+ 00012273  0x00001c60 call  0x00002fdf 
+ 00012274  0x00001c61 setarg  0x00000106 
+ 00012275  0x00001c62 call  0x000032d0 
+ 00012276  0x00001c64 beq  0x00000001 , 0x00002ff6 
+ 00012277  0x00001c65 rtn 
+ 00012278  0x00001c67 setarg  0x00000002 
+ 00012279  0x00001c6a arg  0x00000106 , 0x00000011 
+ 00012280  0x00001c6b branch  0x000032b3 
+ 00012281  0x00001c6e call  0x00002fea 
+ 00012282  0x00001c6f setarg  0x00000107 
+ 00012283  0x00001c70 call  0x000032d0 
+ 00012284  0x00001c72 beq  0x00000001 , 0x00002ffe 
+ 00012285  0x00001c73 rtn 
+ 00012286  0x00001c75 setarg  0x00000002 
+ 00012287  0x00001c78 arg  0x00000107 , 0x00000011 
+ 00012288  0x00001c79 branch  0x000032b3 
+ 00012289  0x00001c7c call  0x000032bd 
+ 00012290  0x00001c7d beq  0x00000001 , 0x00003005 
+ 00012291  0x00001c7e beq  0x00000002 , 0x00003011 
+ 00012292  0x00001c7f rtn 
+ 00012293  0x00001c81 setarg  0x00000106 
+ 00012294  0x00001c82 call  0x000032d0 
+ 00012295  0x00001c84 beq  0x00000002 , 0x00003009 
+ 00012296  0x00001c85 rtn 
+ 00012297  0x00001c87 call  0x0000328b 
+ 00012298  0x00001c89 or_into  0x00000001 , 0x0000003f 
+ 00012299  0x00001c8a call  0x0000328d 
+ 00012300  0x00001c8d setarg  0x00000000 
+ 00012301  0x00001c8e setarg  0x00000106 
+ 00012302  0x00001c8f iadd  0x00000013 , 0x00000005 
+ 00012303  0x00001c90 istore  0x00000002 , 0x00000005 
+ 00012304  0x00001c91 branch  0x00002f5e 
+ 00012305  0x00001c94 setarg  0x00000107 
+ 00012306  0x00001c95 call  0x000032d0 
+ 00012307  0x00001c97 bne  0x00000000 , 0x00003015 
+ 00012308  0x00001c98 rtn 
+ 00012309  0x00001c9a call  0x0000328b 
+ 00012310  0x00001c9c or_into  0x00000002 , 0x0000003f 
+ 00012311  0x00001c9d call  0x0000328d 
+ 00012312  0x00001c9f branch  0x0000300c 
+ 00012313  0x00001ca3 fetch  0x00000001 , 0x00000d50 
+ 00012314  0x00001ca4 rtn  0x00000034 
+ 00012315  0x00001ca5 jam  0x00000000 , 0x00000d50 
+ 00012316  0x00001ca6 fetch  0x00000002 , 0x00000d4e 
+ 00012317  0x00001ca7 arg  0x000002ba , 0x00000002 
+ 00012318  0x00001ca8 isub  0x00000002 , 0x0000003e 
+ 00012319  0x00001ca9 nrtn  0x00000005 
+ 00012320  0x00001cab fetch  0x00000001 , 0x00000cb6 
+ 00012321  0x00001cac rtnne  0x000000ba 
+ 00012322  0x00001cad fetch  0x00000001 , 0x00000cb7 
+ 00012323  0x00001cae bpatch  0x000000be , 0x00004017 
+ 00012324  0x00001caf beq  0x000000a0 , 0x0000303b 
+ 00012325  0x00001cb0 beq  0x000000a1 , 0x0000302c 
+ 00012326  0x00001cb1 beq  0x000000a6 , 0x00003041 
+ 00012327  0x00001cb2 beq  0x000000a7 , 0x00003043 
+ 00012328  0x00001cb3 beq  0x000000a9 , 0x00003049 
+ 00012329  0x00001cb4 beq  0x000000b0 , 0x0000304d 
+ 00012330  0x00001cb6 jam  0x00000000 , 0x00000d42 
+ 00012331  0x00001cb7 rtn 
+ 00012332  0x00001cb9 fetch  0x00000001 , 0x00000cb8 
+ 00012333  0x00001cba beq  0x00000001 , 0x00003031 
+ 00012334  0x00001cbb beq  0x00000084 , 0x00003034 
+ 00012335  0x00001cbc beq  0x000000a7 , 0x00003039 
+ 00012336  0x00001cbd branch  0x0000302a 
+ 00012337  0x00001cbf call  0x0000328b 
+ 00012338  0x00001cc1 store  0x00000001 , 0x00000cf7 
+ 00012339  0x00001cc2 branch  0x0000303f 
+ 00012340  0x00001cc4 call  0x00003291 
+ 00012341  0x00001cc6 call  0x00003296 
+ 00012342  0x00001cc8 call  0x0000328b 
+ 00012343  0x00001cca store  0x00000001 , 0x00000cf7 
+ 00012344  0x00001ccb branch  0x0000303f 
+ 00012345  0x00001ccf jam  0x000000a1 , 0x00000cf7 
+ 00012346  0x00001cd0 branch  0x0000303f 
+ 00012347  0x00001cd3 fetch  0x00000001 , 0x00000cb8 
+ 00012348  0x00001cd4 beq  0x00000081 , 0x0000303e 
+ 00012349  0x00001cd6 branch  0x0000302a 
+ 00012350  0x00001cda call  0x00003090 
+ 00012351  0x00001cdc jam  0x00000001 , 0x00000d42 
+ 00012352  0x00001cdd rtn 
+ 00012353  0x00001ce3 jam  0x00000015 , 0x00000cf7 
+ 00012354  0x00001ce4 branch  0x0000303f 
+ 00012355  0x00001ce7 call  0x0000328f 
+ 00012356  0x00001ce9 beq  0x00000000 , 0x00003047 
+ 00012357  0x00001cea beq  0x00000001 , 0x00003039 
+ 00012358  0x00001cec rtn 
+ 00012359  0x00001cee jam  0x000000a0 , 0x00000cf7 
+ 00012360  0x00001cef branch  0x0000303f 
+ 00012361  0x00001cf5 jam  0x00000000 , 0x00000cf7 
+ 00012362  0x00001cf6 jam  0x00000000 , 0x00000cf8 
+ 00012363  0x00001cf7 jam  0x00000001 , 0x00000cf9 
+ 00012364  0x00001cf8 branch  0x0000303f 
+ 00012365  0x00001cfc call  0x0000329c 
+ 00012366  0x00001cfd fetch  0x00000001 , 0x00000cb8 
+ 00012367  0x00001cfe increase  0x00000002 , 0x0000003f 
+ 00012368  0x00001cff copy  0x0000003f , 0x00000039 
+ 00012369  0x00001d00 arg  0x00000cb6 , 0x00000006 
+ 00012370  0x00001d01 setarg  0x0000013c 
+ 00012371  0x00001d02 iadd  0x00000013 , 0x00000005 
+ 00012372  0x00001d03 branch  0x00007f01 
+ 00012373  0x00001d07 bpatch  0x000000bf , 0x00004017 
+ 00012374  0x00001d08 call  0x0000307d 
+ 00012375  0x00001d0a call  0x00002c7f 
+ 00012376  0x00001d0b call  0x000048d3 
+ 00012377  0x00001d0c branch  0x00003057 
+ 00012378  0x00001d0f call  0x0000328f 
+ 00012379  0x00001d11 rtnne  0x00000000 
+ 00012380  0x00001d12 call  0x00002f51 
+ 00012381  0x00001d13 branch  0x00003098 
+ 00012382  0x00001d16 call  0x0000328f 
+ 00012383  0x00001d18 rtnne  0x00000001 
+ 00012384  0x00001d19 call  0x00002fc1 
+ 00012385  0x00001d1a call  0x00002fcb 
+ 00012386  0x00001d1b call  0x0000328b 
+ 00012387  0x00001d1d rtn  0x00000034 
+ 00012388  0x00001d1e call  0x00003286 
+ 00012389  0x00001d20 call  0x00002f4c 
+ 00012390  0x00001d21 call  0x00003093 
+ 00012391  0x00001d23 setarg  0x00000000 
+ 00012392  0x00001d24 add  0x00000013 , 0x000000a7 , 0x00000005 
+ 00012393  0x00001d26 branch  0x0000322d 
+ 00012394  0x00001d29 call  0x00007fe9 
+ 00012395  0x00001d2a add  0x00000013 , 0x000000a7 , 0x00000011 
+ 00012396  0x00001d2b ifetcht  0x00000004 , 0x00000011 
+ 00012397  0x00001d2d copy  0x00000022 , 0x0000003f 
+ 00012398  0x00001d2e isub  0x00000002 , 0x0000003e 
+ 00012399  0x00001d2f ncall  0x00002d18 , 0x00000002 
+ 00012400  0x00001d30 copy  0x0000003f , 0x00000012 
+ 00012401  0x00001d31 add  0x00000013 , 0x000000a7 , 0x00000011 
+ 00012402  0x00001d32 ifetch  0x00000004 , 0x00000011 
+ 00012403  0x00001d34 add  0x00000013 , 0x000000ab , 0x00000011 
+ 00012404  0x00001d35 ifetcht  0x00000001 , 0x00000011 
+ 00012405  0x00001d37 iadd  0x00000002 , 0x00000002 
+ 00012406  0x00001d38 copy  0x00000012 , 0x0000003f 
+ 00012407  0x00001d39 isub  0x00000002 , 0x0000003e 
+ 00012408  0x00001d3a nrtn  0x00000002 
+ 00012409  0x00001d3b set0  0x0000001c , 0x0000003f 
+ 00012410  0x00001d3c add  0x00000013 , 0x000000a7 , 0x00000005 
+ 00012411  0x00001d3d istore  0x00000004 , 0x00000005 
+ 00012412  0x00001d3f branch  0x00007fe7 
+ 00012413  0x00001d42 setarg  0x00000001 
+ 00012414  0x00001d43 call  0x00003287 
+ 00012415  0x00001d45 call  0x00003283 
+ 00012416  0x00001d47 setarg  0x000000ff 
+ 00012417  0x00001d48 add  0x00000013 , 0x000000ab , 0x00000005 
+ 00012418  0x00001d49 istore  0x00000001 , 0x00000005 
+ 00012419  0x00001d4b branch  0x00003067 
+ 00012420  0x00001d4e setarg  0x0000015c 
+ 00012421  0x00001d4f call  0x000032d0 
+ 00012422  0x00001d51 rtn  0x00000034 
+ 00012423  0x00001d52 call  0x0000306a 
+ 00012424  0x00001d53 nrtn  0x00000028 
+ 00012425  0x00001d54 call  0x00003281 
+ 00012426  0x00001d56 increase  0x00000001 , 0x0000003f 
+ 00012427  0x00001d57 and_into  0x00000001 , 0x0000003f 
+ 00012428  0x00001d58 call  0x00003284 
+ 00012429  0x00001d5a beq  0x00000000 , 0x00002f4c 
+ 00012430  0x00001d5b beq  0x00000001 , 0x00003090 
+ 00012431  0x00001d5c rtn 
+ 00012432  0x00001d62 setarg  0x00000001 
+ 00012433  0x00001d63 call  0x00003292 
+ 00012434  0x00001d64 branch  0x00003296 
+ 00012435  0x00001d67 setarg  0x00000001 
+ 00012436  0x00001d68 call  0x000032a5 
+ 00012437  0x00001d6b setarg  0x00000280 
+ 00012438  0x00001d6c arg  0x00000008 , 0x00000007 
+ 00012439  0x00001d6d branch  0x00007f08 
+ 00012440  0x00001d70 call  0x000032a2 
+ 00012441  0x00001d72 rtn  0x00000034 
+ 00012442  0x00001d73 arg  0x00000008 , 0x00000007 
+ 00012443  0x00001d74 call  0x00007f16 
+ 00012444  0x00001d75 nrtn  0x00000034 
+ 00012445  0x00001d76 call  0x000032a4 
+ 00012446  0x00001d79 setarg  0x00000007 
+ 00012447  0x00001d7a call  0x00003292 
+ 00012448  0x00001d7c call  0x00003296 
+ 00012449  0x00001d7e branch  0x00002f5e 
+ 00012450  0x00001d81 bpatch  0x000000c0 , 0x00004018 
+ 00012451  0x00001d82 call  0x0000328f 
+ 00012452  0x00001d84 rtnne  0x00000007 
+ 00012453  0x00001d85 call  0x000030cb 
+ 00012454  0x00001d86 call  0x000030e0 
+ 00012455  0x00001d87 call  0x0000316e 
+ 00012456  0x00001d88 nbranch  0x00002f5e , 0x0000002f 
+ 00012457  0x00001d8a call  0x000030bc 
+ 00012458  0x00001d8b call  0x00003172 , 0x00000005 
+ 00012459  0x00001d8f call  0x00002f4c 
+ 00012460  0x00001d90 call  0x00003294 
+ 00012461  0x00001d92 set1  0x00000000 , 0x0000003f 
+ 00012462  0x00001d93 call  0x00003297 
+ 00012463  0x00001d95 call  0x00002f5e 
+ 00012464  0x00001d96 call  0x00003093 
+ 00012465  0x00001d97 call  0x000030bc 
+ 00012466  0x00001d98 branch  0x000030c1 , 0x00000005 
+ 00012467  0x00001d99 setarg  0x00000164 
+ 00012468  0x00001d9a call  0x000032d3 
+ 00012469  0x00001d9c call  0x000030be 
+ 00012470  0x00001d9d branch  0x000030c5 , 0x00000005 
+ 00012471  0x00001d9e setarg  0x00000160 
+ 00012472  0x00001d9f call  0x000032d3 
+ 00012473  0x00001da1 call  0x000030be 
+ 00012474  0x00001da2 branch  0x000030c8 , 0x00000005 
+ 00012475  0x00001da3 rtn 
+ 00012476  0x00001da6 setarg  0x0000012b 
+ 00012477  0x00001da7 call  0x000032d3 
+ 00012478  0x00001daa call  0x0000322a 
+ 00012479  0x00001dac isub  0x00000002 , 0x0000003e 
+ 00012480  0x00001dad rtn 
+ 00012481  0x00001db0 setarg  0x00000182 
+ 00012482  0x00001db1 call  0x000032d0 
+ 00012483  0x00001db5 add  0x00000013 , 0x00000091 , 0x00000005 
+ 00012484  0x00001db6 branch  0x000032b4 
+ 00012485  0x00001db9 setarg  0x00000185 
+ 00012486  0x00001dba call  0x000032d0 
+ 00012487  0x00001dbc branch  0x000030c3 
+ 00012488  0x00001dbe setarg  0x00000188 
+ 00012489  0x00001dbf call  0x000032d0 
+ 00012490  0x00001dc1 branch  0x000030c3 
+ 00012491  0x00001dc4 call  0x00003294 
+ 00012492  0x00001dc6 rtnbit1  0x00000007 
+ 00012493  0x00001dc7 set1  0x00000007 , 0x0000003f 
+ 00012494  0x00001dc8 call  0x00003297 
+ 00012495  0x00001dca call  0x00003283 
+ 00012496  0x00001dcc call  0x0000329c 
+ 00012497  0x00001dce setarg  0x00000000 
+ 00012498  0x00001dcf add  0x00000013 , 0x000000f5 , 0x00000005 
+ 00012499  0x00001dd0 istore  0x00000003 , 0x00000005 
+ 00012500  0x00001dd2 arg  0x00000183 , 0x00000011 
+ 00012501  0x00001dd3 call  0x000032bf 
+ 00012502  0x00001dd4 istore  0x00000007 , 0x00000005 
+ 00012503  0x00001dd7 call  0x000030bc 
+ 00012504  0x00001dd8 nrtn  0x00000005 
+ 00012505  0x00001dd9 add  0x00000013 , 0x00000091 , 0x00000011 
+ 00012506  0x00001dda ifetch  0x00000001 , 0x00000011 
+ 00012507  0x00001ddc arg  0x00000182 , 0x00000011 
+ 00012508  0x00001ddd call  0x000032b3 
+ 00012509  0x00001ddf add  0x00000013 , 0x00000090 , 0x00000011 
+ 00012510  0x00001de0 ifetch  0x00000001 , 0x00000011 
+ 00012511  0x00001de3 branch  0x0000314a 
+ 00012512  0x00001de6 bpatch  0x000000c1 , 0x00004018 
+ 00012513  0x00001de7 call  0x00003281 
+ 00012514  0x00001de9 increase  0x00000001 , 0x0000003f 
+ 00012515  0x00001dea and_into  0x00000003 , 0x0000003f 
+ 00012516  0x00001deb call  0x00003284 
+ 00012517  0x00001dee beq  0x00000000 , 0x0000310e 
+ 00012518  0x00001def beq  0x00000001 , 0x00003132 
+ 00012519  0x00001df0 beq  0x00000002 , 0x000030ea 
+ 00012520  0x00001df1 beq  0x00000003 , 0x00003132 
+ 00012521  0x00001df2 rtn 
+ 00012522  0x00001df5 call  0x00002fdf 
+ 00012523  0x00001df6 setarg  0x00000160 
+ 00012524  0x00001df7 call  0x0000327e 
+ 00012525  0x00001df9 branch  0x000030e0 , 0x00000034 
+ 00012526  0x00001dfa call  0x0000322c 
+ 00012527  0x00001dfc setarg  0x00000189 
+ 00012528  0x00001dfd call  0x000032d0 
+ 00012529  0x00001dff call  0x00003108 , 0x00000034 
+ 00012530  0x00001e00 setarg  0x00000187 
+ 00012531  0x00001e01 call  0x000032d0 
+ 00012532  0x00001e03 call  0x0000322f 
+ 00012533  0x00001e05 add  0x00000013 , 0x000000f7 , 0x00000011 
+ 00012534  0x00001e06 ifetcht  0x00000001 , 0x00000011 
+ 00012535  0x00001e08 arg  0x00000f9e , 0x00000011 
+ 00012536  0x00001e09 call  0x00002e58 
+ 00012537  0x00001e0a add  0x00000013 , 0x000000f7 , 0x00000005 
+ 00012538  0x00001e0b istoret  0x00000001 , 0x00000005 
+ 00012539  0x00001e0d call  0x00002f94 
+ 00012540  0x00001e0e add  0x00000013 , 0x000000fa , 0x00000005 
+ 00012541  0x00001e0f istoret  0x00000001 , 0x00000005 
+ 00012542  0x00001e11 sub  0x00000002 , 0x00000050 , 0x0000003e 
+ 00012543  0x00001e12 nrtn  0x00000002 
+ 00012544  0x00001e13 setarg  0x00000188 
+ 00012545  0x00001e14 call  0x00003275 
+ 00012546  0x00001e16 call  0x00002c90 
+ 00012547  0x00001e17 arg  0x00000188 , 0x00000011 
+ 00012548  0x00001e18 call  0x000032c8 
+ 00012549  0x00001e19 istoret  0x00000001 , 0x00000005 
+ 00012550  0x00001e1d arg  0x00000187 , 0x00000011 
+ 00012551  0x00001e1e branch  0x000032b3 
+ 00012552  0x00001e21 setarg  0x00000001 
+ 00012553  0x00001e22 arg  0x00000189 , 0x00000011 
+ 00012554  0x00001e23 call  0x000032b3 
+ 00012555  0x00001e25 arg  0x00000000 , 0x00000002 
+ 00012556  0x00001e26 call  0x00002c94 
+ 00012557  0x00001e29 branch  0x00003106 
+ 00012558  0x00001e2c call  0x00002fea 
+ 00012559  0x00001e2d setarg  0x00000164 
+ 00012560  0x00001e2e call  0x0000327e 
+ 00012561  0x00001e30 branch  0x000030e0 , 0x00000034 
+ 00012562  0x00001e31 call  0x0000322c 
+ 00012563  0x00001e33 setarg  0x00000186 
+ 00012564  0x00001e34 call  0x000032d0 
+ 00012565  0x00001e36 call  0x0000312c , 0x00000034 
+ 00012566  0x00001e37 setarg  0x00000184 
+ 00012567  0x00001e38 call  0x000032d0 
+ 00012568  0x00001e3a call  0x0000322f 
+ 00012569  0x00001e3c add  0x00000013 , 0x000000f6 , 0x00000011 
+ 00012570  0x00001e3d ifetcht  0x00000001 , 0x00000011 
+ 00012571  0x00001e3f arg  0x0000109e , 0x00000011 
+ 00012572  0x00001e40 call  0x00002e58 
+ 00012573  0x00001e41 add  0x00000013 , 0x000000f6 , 0x00000005 
+ 00012574  0x00001e42 istoret  0x00000001 , 0x00000005 
+ 00012575  0x00001e44 call  0x00002f94 
+ 00012576  0x00001e45 add  0x00000013 , 0x000000f9 , 0x00000005 
+ 00012577  0x00001e46 istoret  0x00000001 , 0x00000005 
+ 00012578  0x00001e48 sub  0x00000002 , 0x00000050 , 0x0000003e 
+ 00012579  0x00001e49 nrtn  0x00000002 
+ 00012580  0x00001e4a setarg  0x00000185 
+ 00012581  0x00001e4b call  0x00003275 
+ 00012582  0x00001e4d call  0x00002c90 
+ 00012583  0x00001e4e arg  0x00000185 , 0x00000011 
+ 00012584  0x00001e4f call  0x000032c8 
+ 00012585  0x00001e50 istoret  0x00000001 , 0x00000005 
+ 00012586  0x00001e54 arg  0x00000184 , 0x00000011 
+ 00012587  0x00001e55 branch  0x000032b3 
+ 00012588  0x00001e58 setarg  0x00000001 
+ 00012589  0x00001e59 arg  0x00000186 , 0x00000011 
+ 00012590  0x00001e5a call  0x000032b3 
+ 00012591  0x00001e5c arg  0x00000000 , 0x00000002 
+ 00012592  0x00001e5d call  0x00002c94 
+ 00012593  0x00001e60 branch  0x0000312a 
+ 00012594  0x00001e63 call  0x00002fdf 
+ 00012595  0x00001e64 call  0x0000327d 
+ 00012596  0x00001e66 call  0x0000322c 
+ 00012597  0x00001e68 setarg  0x00000183 
+ 00012598  0x00001e69 call  0x000032d0 
+ 00012599  0x00001e6b call  0x0000314c , 0x00000034 
+ 00012600  0x00001e6c call  0x0000314f 
+ 00012601  0x00001e6d add  0x00000013 , 0x000000f5 , 0x00000011 
+ 00012602  0x00001e6e ifetcht  0x00000001 , 0x00000011 
+ 00012603  0x00001e70 arg  0x00000e9e , 0x00000011 
+ 00012604  0x00001e71 call  0x00002e58 
+ 00012605  0x00001e72 add  0x00000013 , 0x000000f5 , 0x00000005 
+ 00012606  0x00001e73 istoret  0x00000001 , 0x00000005 
+ 00012607  0x00001e75 call  0x00002f94 
+ 00012608  0x00001e76 add  0x00000013 , 0x000000f8 , 0x00000005 
+ 00012609  0x00001e77 istoret  0x00000001 , 0x00000005 
+ 00012610  0x00001e79 sub  0x00000002 , 0x00000050 , 0x0000003e 
+ 00012611  0x00001e7a nrtn  0x00000002 
+ 00012612  0x00001e7b setarg  0x00000182 
+ 00012613  0x00001e7c call  0x00003275 
+ 00012614  0x00001e7e call  0x00002c90 
+ 00012615  0x00001e7f arg  0x00000182 , 0x00000011 
+ 00012616  0x00001e80 call  0x000032c8 
+ 00012617  0x00001e81 istoret  0x00000001 , 0x00000005 
+ 00012618  0x00001e86 arg  0x00000181 , 0x00000011 
+ 00012619  0x00001e87 branch  0x000032b3 
+ 00012620  0x00001e8f setarg  0x00000001 
+ 00012621  0x00001e90 arg  0x00000183 , 0x00000011 
+ 00012622  0x00001e91 call  0x000032b3 
+ 00012623  0x00001e93 setarg  0x00000181 
+ 00012624  0x00001e94 call  0x000032d0 
+ 00012625  0x00001e95 branch  0x0000322f 
+ 00012626  0x00001e9a add  0x00000013 , 0x00000000 , 0x00000011 
+ 00012627  0x00001e9b ifetch  0x00000001 , 0x00000011 
+ 00012628  0x00001e9d call  0x0000323c 
+ 00012629  0x00001ea0 call  0x00002dde 
+ 00012630  0x00001ea2 call  0x0000325f 
+ 00012631  0x00001ea4 isolate1  0x00000000 , 0x0000003f 
+ 00012632  0x00001ea5 branch  0x0000315c , 0x00000001 
+ 00012633  0x00001ea7 call  0x0000315d 
+ 00012634  0x00001ea8 call  0x00002d53 
+ 00012635  0x00001ea9 call  0x00002df7 
+ 00012636  0x00001eab branch  0x00002e45 
+ 00012637  0x00001eae bpatch  0x000000c2 , 0x00004018 
+ 00012638  0x00001eaf add  0x00000013 , 0x00000086 , 0x00000005 
+ 00012639  0x00001eb0 call  0x000032d6 
+ 00012640  0x00001eb2 setarg  0x0000013b 
+ 00012641  0x00001eb3 call  0x000032d0 
+ 00012642  0x00001eb5 rtn  0x00000034 
+ 00012643  0x00001eb6 setarg  0x00000006 
+ 00012644  0x00001eb7 add  0x00000013 , 0x00000086 , 0x00000005 
+ 00012645  0x00001eb8 istore  0x00000001 , 0x00000005 
+ 00012646  0x00001eba arg  0x00000006 , 0x00000039 
+ 00012647  0x00001ebb setarg  0x0000012f 
+ 00012648  0x00001ebc iadd  0x00000013 , 0x00000006 
+ 00012649  0x00001ebe add  0x00000013 , 0x00000022 , 0x00000005 
+ 00012650  0x00001ec0 branch  0x00007f01 
+ 00012651  0x00001ec4 call  0x0000316e 
+ 00012652  0x00001ec5 nbranch  0x00002f5e , 0x0000002f 
+ 00012653  0x00001ec6 branch  0x00003172 
+ 00012654  0x00001ec9 call  0x00002f5e 
+ 00012655  0x00001eca call  0x00002e11 
+ 00012656  0x00001ecb nrtn  0x0000002f 
+ 00012657  0x00001ecc branch  0x00003152 
+ 00012658  0x00001ecf bpatch  0x000000c3 , 0x00004018 
+ 00012659  0x00001ed0 call  0x00003188 
+ 00012660  0x00001ed1 nbranch  0x00002f5e , 0x00000028 
+ 00012661  0x00001ed2 add  0x00000013 , 0x00000084 , 0x00000011 
+ 00012662  0x00001ed3 ifetch  0x00000001 , 0x00000011 
+ 00012663  0x00001ed5 branch  0x00002f5e , 0x00000034 
+ 00012664  0x00001ed6 increase  0x00000002 , 0x0000003f 
+ 00012665  0x00001ed7 iforce  0x00000039 
+ 00012666  0x00001ed8 add  0x00000013 , 0x00000000 , 0x00000006 
+ 00012667  0x00001eda setarg  0x00000109 
+ 00012668  0x00001edb iadd  0x00000013 , 0x00000005 
+ 00012669  0x00001edd call  0x00007f01 
+ 00012670  0x00001ede call  0x00003286 
+ 00012671  0x00001ee0 call  0x000032b6 
+ 00012672  0x00001ee2 call  0x00003093 , 0x00000034 
+ 00012673  0x00001ee3 setarg  0x0000010b 
+ 00012674  0x00001ee4 call  0x000032d0 
+ 00012675  0x00001ee6 beq  0x00000001 , 0x0000319e 
+ 00012676  0x00001ee7 beq  0x00000002 , 0x000031c6 
+ 00012677  0x00001ee8 beq  0x00000003 , 0x000031f2 
+ 00012678  0x00001ee9 beq  0x000000ff , 0x00003212 
+ 00012679  0x00001eea branch  0x00002f5e 
+ 00012680  0x00001eed call  0x00002c7a 
+ 00012681  0x00001eee call  0x00007fe9 
+ 00012682  0x00001eef add  0x00000013 , 0x000000ca , 0x00000011 
+ 00012683  0x00001ef0 ifetch  0x00000001 , 0x00000011 
+ 00012684  0x00001ef2 add  0x00000013 , 0x000000cb , 0x00000011 
+ 00012685  0x00001ef3 ifetcht  0x00000001 , 0x00000011 
+ 00012686  0x00001ef5 isub  0x00000002 , 0x0000003e 
+ 00012687  0x00001ef6 ncall  0x00007fe7 , 0x00000005 
+ 00012688  0x00001ef7 add  0x00000013 , 0x000000ca , 0x00000011 
+ 00012689  0x00001ef8 ifetch  0x00000001 , 0x00000011 
+ 00012690  0x00001efa add  0x00000013 , 0x000000cb , 0x00000005 
+ 00012691  0x00001efb istore  0x00000001 , 0x00000005 
+ 00012692  0x00001efd add  0x00000013 , 0x000000c4 , 0x00000011 
+ 00012693  0x00001efe ifetch  0x00000003 , 0x00000011 
+ 00012694  0x00001f00 add  0x00000013 , 0x000000c7 , 0x00000011 
+ 00012695  0x00001f01 ifetcht  0x00000003 , 0x00000011 
+ 00012696  0x00001f03 isub  0x00000002 , 0x0000003e 
+ 00012697  0x00001f04 ncall  0x00007fe7 , 0x00000005 
+ 00012698  0x00001f05 add  0x00000013 , 0x000000c4 , 0x00000011 
+ 00012699  0x00001f06 ifetch  0x00000003 , 0x00000011 
+ 00012700  0x00001f08 add  0x00000013 , 0x000000c7 , 0x00000005 
+ 00012701  0x00001f0a branch  0x000032c5 
+ 00012702  0x00001f0d call  0x00002f88 
+ 00012703  0x00001f0e call  0x0000324c 
+ 00012704  0x00001f0f store  0x00000001 , 0x00000aa2 
+ 00012705  0x00001f11 call  0x00003274 
+ 00012706  0x00001f12 fetch  0x00000001 , 0x00000aa2 
+ 00012707  0x00001f14 isolate1  0x00000003 , 0x00000002 
+ 00012708  0x00001f15 setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00012709  0x00001f16 add  0x00000013 , 0x000000b2 , 0x00000005 
+ 00012710  0x00001f17 istore  0x00000001 , 0x00000005 
+ 00012711  0x00001f19 beq  0x00000001 , 0x00003216 
+ 00012712  0x00001f1a call  0x00003245 
+ 00012713  0x00001f1c call  0x00003274 
+ 00012714  0x00001f1e isolate1  0x00000004 , 0x00000002 
+ 00012715  0x00001f1f setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00012716  0x00001f20 call  0x00003249 
+ 00012717  0x00001f22 add  0x00000013 , 0x000000de , 0x00000011 
+ 00012718  0x00001f23 ifetch  0x00000002 , 0x00000011 
+ 00012719  0x00001f25 branch  0x00007f9c 
+ 00012720  0x00001f28 setarg  0x00000001 
+ 00012721  0x00001f29 store  0x00000001 , 0x00000d54 
+ 00012722  0x00001f2a call  0x0000329e 
+ 00012723  0x00001f2c istore  0x00000007 , 0x00000005 
+ 00012724  0x00001f2d call  0x0000329e 
+ 00012725  0x00001f2f ncall  0x000031bd , 0x00000034 
+ 00012726  0x00001f30 call  0x0000329e 
+ 00012727  0x00001f32 call  0x000031c2 , 0x00000034 
+ 00012728  0x00001f34 jam  0x00000020 , 0x00000d52 
+ 00012729  0x00001f36 fetch  0x00000001 , 0x00000d38 
+ 00012730  0x00001f37 set1  0x00000002 , 0x0000003f 
+ 00012731  0x00001f38 store  0x00000001 , 0x00000d38 
+ 00012732  0x00001f39 rtn 
+ 00012733  0x00001f3c setarg  0x00000001 
+ 00012734  0x00001f3d call  0x000032a8 
+ 00012735  0x00001f40 setarg  0x00000140 
+ 00012736  0x00001f41 arg  0x0000000b , 0x00000007 
+ 00012737  0x00001f42 branch  0x00007f08 
+ 00012738  0x00001f44 call  0x000032a7 
+ 00012739  0x00001f47 setarg  0x00000000 
+ 00012740  0x00001f48 arg  0x0000000b , 0x00000007 
+ 00012741  0x00001f49 branch  0x00007f08 
+ 00012742  0x00001f4c call  0x00003274 
+ 00012743  0x00001f4e isolate1  0x00000003 , 0x00000002 
+ 00012744  0x00001f4f branch  0x0000321b , 0x00000001 
+ 00012745  0x00001f50 arg  0x00000d64 , 0x00000005 
+ 00012746  0x00001f51 call  0x000031e0 
+ 00012747  0x00001f52 fetch  0x00000008 , 0x00000d64 
+ 00012748  0x00001f53 ncall  0x000031e4 , 0x00000034 
+ 00012749  0x00001f54 fetch  0x00000008 , 0x00000d64 
+ 00012750  0x00001f55 call  0x000031e9 , 0x00000034 
+ 00012751  0x00001f56 call  0x00002c7a 
+ 00012752  0x00001f57 fetch  0x00000008 , 0x00000d64 
+ 00012753  0x00001f58 arg  0x00000168 , 0x00000011 
+ 00012754  0x00001f59 call  0x000032bf 
+ 00012755  0x00001f5a istore  0x00000008 , 0x00000005 
+ 00012756  0x00001f5c setarg  0x00000170 
+ 00012757  0x00001f5d iadd  0x00000013 , 0x00000011 
+ 00012758  0x00001f5e ifetcht  0x00000008 , 0x00000011 
+ 00012759  0x00001f60 isub  0x00000002 , 0x0000003e 
+ 00012760  0x00001f61 ncall  0x000031ed , 0x00000005 
+ 00012761  0x00001f62 setarg  0x00000168 
+ 00012762  0x00001f63 iadd  0x00000013 , 0x00000011 
+ 00012763  0x00001f64 ifetch  0x00000008 , 0x00000011 
+ 00012764  0x00001f66 arg  0x00000170 , 0x00000011 
+ 00012765  0x00001f67 call  0x000032bf 
+ 00012766  0x00001f68 istore  0x00000008 , 0x00000005 
+ 00012767  0x00001f6a branch  0x00002f5e 
+ 00012768  0x00001f6d setarg  0x0000010b 
+ 00012769  0x00001f6e iadd  0x00000013 , 0x00000006 
+ 00012770  0x00001f70 arg  0x00000009 , 0x00000039 
+ 00012771  0x00001f71 branch  0x00007ff3 
+ 00012772  0x00001f74 setarg  0x00000001 
+ 00012773  0x00001f75 call  0x000032ab 
+ 00012774  0x00001f78 setarg  0x00000140 
+ 00012775  0x00001f79 arg  0x0000000e , 0x00000007 
+ 00012776  0x00001f7a branch  0x00007f08 
+ 00012777  0x00001f7d call  0x000032aa 
+ 00012778  0x00001f80 setarg  0x00000000 
+ 00012779  0x00001f81 arg  0x0000000e , 0x00000007 
+ 00012780  0x00001f82 branch  0x00007f08 
+ 00012781  0x00001f86 jam  0x00000010 , 0x00000d51 
+ 00012782  0x00001f87 fetch  0x00000001 , 0x00000d38 
+ 00012783  0x00001f88 set1  0x00000001 , 0x0000003f 
+ 00012784  0x00001f89 store  0x00000001 , 0x00000d38 
+ 00012785  0x00001f8a rtn 
+ 00012786  0x00001f8d arg  0x00000d74 , 0x00000005 
+ 00012787  0x00001f8e call  0x000031e0 
+ 00012788  0x00001f8f fetch  0x00000002 , 0x00000d75 
+ 00012789  0x00001f90 ncall  0x00003209 , 0x00000034 
+ 00012790  0x00001f91 fetch  0x00000002 , 0x00000d75 
+ 00012791  0x00001f92 call  0x0000320e , 0x00000034 
+ 00012792  0x00001f93 call  0x00002c7a 
+ 00012793  0x00001f94 fetch  0x00000003 , 0x00000d74 
+ 00012794  0x00001f95 arg  0x00000178 , 0x00000011 
+ 00012795  0x00001f96 call  0x000032c4 
+ 00012796  0x00001f98 setarg  0x0000017b 
+ 00012797  0x00001f99 iadd  0x00000013 , 0x00000011 
+ 00012798  0x00001f9a ifetcht  0x00000003 , 0x00000011 
+ 00012799  0x00001f9c isub  0x00000002 , 0x0000003e 
+ 00012800  0x00001f9d ncall  0x00003207 , 0x00000005 
+ 00012801  0x00001f9e setarg  0x00000178 
+ 00012802  0x00001f9f iadd  0x00000013 , 0x00000011 
+ 00012803  0x00001fa0 ifetch  0x00000003 , 0x00000011 
+ 00012804  0x00001fa2 arg  0x0000017b , 0x00000011 
+ 00012805  0x00001fa3 call  0x000032c4 
+ 00012806  0x00001fa5 branch  0x00002f5e 
+ 00012807  0x00001fa8 jam  0x00000021 , 0x00000d52 
+ 00012808  0x00001fa9 branch  0x000031b9 
+ 00012809  0x00001fac setarg  0x00000001 
+ 00012810  0x00001fad call  0x000032ae 
+ 00012811  0x00001fb0 setarg  0x00000140 
+ 00012812  0x00001fb1 arg  0x0000000c , 0x00000007 
+ 00012813  0x00001fb2 branch  0x00007f08 
+ 00012814  0x00001fb5 call  0x000032ad 
+ 00012815  0x00001fb8 setarg  0x00000000 
+ 00012816  0x00001fb9 arg  0x0000000c , 0x00000007 
+ 00012817  0x00001fba branch  0x00007f08 
+ 00012818  0x00001fbd call  0x000032bd 
+ 00012819  0x00001fbf beq  0x00000001 , 0x00003216 
+ 00012820  0x00001fc0 beq  0x00000002 , 0x0000321b 
+ 00012821  0x00001fc1 rtn 
+ 00012822  0x00001fc3 setarg  0x0000010d 
+ 00012823  0x00001fc4 call  0x0000327e 
+ 00012824  0x00001fc5 arg  0x00000160 , 0x00000011 
+ 00012825  0x00001fc6 call  0x000032bf 
+ 00012826  0x00001fc9 branch  0x0000322d 
+ 00012827  0x00001fcc setarg  0x0000010d 
+ 00012828  0x00001fcd call  0x0000327e 
+ 00012829  0x00001fce arg  0x00000164 , 0x00000011 
+ 00012830  0x00001fcf call  0x000032bf 
+ 00012831  0x00001fd2 branch  0x0000322d 
+ 00012832  0x00001fd5 call  0x00002c7a 
+ 00012833  0x00001fd6 add  0x00000013 , 0x000000cd , 0x00000005 
+ 00012834  0x00001fd7 istore  0x00000001 , 0x00000005 
+ 00012835  0x00001fd8 rtn 
+ 00012836  0x00001fdb call  0x00002c7a 
+ 00012837  0x00001fdc add  0x00000013 , 0x000000be , 0x00000011 
+ 00012838  0x00001fdd branch  0x0000327f 
+ 00012839  0x00001fdf call  0x00002c7a 
+ 00012840  0x00001fe0 add  0x00000013 , 0x000000be , 0x00000005 
+ 00012841  0x00001fe1 branch  0x0000322d 
+ 00012842  0x00001fe4 add  0x00000013 , 0x000000ae , 0x00000011 
+ 00012843  0x00001fe5 branch  0x0000327f 
+ 00012844  0x00001fe7 add  0x00000013 , 0x000000ae , 0x00000005 
+ 00012845  0x00001fe9 istore  0x00000004 , 0x00000005 
+ 00012846  0x00001fea rtn 
+ 00012847  0x00001fed add  0x00000013 , 0x00000090 , 0x00000005 
+ 00012848  0x00001fee branch  0x000032b4 
+ 00012849  0x00001ff1 setarg  0x00000000 
+ 00012850  0x00001ff3 call  0x00002c7a 
+ 00012851  0x00001ff4 add  0x00000013 , 0x00000085 , 0x00000005 
+ 00012852  0x00001ff5 branch  0x000032b4 
+ 00012853  0x00001ff8 add  0x00000013 , 0x00000042 , 0x00000005 
+ 00012854  0x00001ff9 branch  0x000032b4 
+ 00012855  0x00001ffc setarg  0x00000004 
+ 00012856  0x00001ffe add  0x00000013 , 0x000000cc , 0x00000005 
+ 00012857  0x00001fff branch  0x000032b4 
+ 00012858  0x00002002 add  0x00000013 , 0x00000087 , 0x00000011 
+ 00012859  0x00002003 branch  0x000032d1 
+ 00012860  0x00002005 add  0x00000013 , 0x00000087 , 0x00000005 
+ 00012861  0x00002006 branch  0x000032b4 
+ 00012862  0x00002009 setarg  0x00000002 
+ 00012863  0x0000200b add  0x00000013 , 0x000000d0 , 0x00000005 
+ 00012864  0x0000200c branch  0x000032b4 
+ 00012865  0x0000200f setarg  0x00000001 
+ 00012866  0x00002011 call  0x00002c7a 
+ 00012867  0x00002012 add  0x00000013 , 0x000000ce , 0x00000005 
+ 00012868  0x00002013 branch  0x000032b4 
+ 00012869  0x00002016 call  0x00002c7a 
+ 00012870  0x00002017 add  0x00000013 , 0x000000b4 , 0x00000011 
+ 00012871  0x00002018 branch  0x000032d1 
+ 00012872  0x0000201a setarg  0x00000001 
+ 00012873  0x0000201c call  0x00002c7a 
+ 00012874  0x0000201d add  0x00000013 , 0x000000b4 , 0x00000005 
+ 00012875  0x0000201e branch  0x000032b4 
+ 00012876  0x00002021 call  0x00002c7a 
+ 00012877  0x00002022 add  0x00000013 , 0x000000b2 , 0x00000011 
+ 00012878  0x00002023 branch  0x000032d1 
+ 00012879  0x00002025 setarg  0x00000001 
+ 00012880  0x00002027 call  0x00002c7a 
+ 00012881  0x00002028 add  0x00000013 , 0x000000b2 , 0x00000005 
+ 00012882  0x00002029 branch  0x000032b4 
+ 00012883  0x0000202c call  0x00002c7a 
+ 00012884  0x0000202d add  0x00000013 , 0x00000096 , 0x00000011 
+ 00012885  0x0000202e branch  0x000032d1 
+ 00012886  0x00002030 add  0x00000013 , 0x00000096 , 0x00000005 
+ 00012887  0x00002031 branch  0x000032b4 
+ 00012888  0x00002034 add  0x00000013 , 0x000000cf , 0x00000011 
+ 00012889  0x00002035 branch  0x000032d1 
+ 00012890  0x00002037 setarg  0x00000000 
+ 00012891  0x00002039 add  0x00000013 , 0x000000cf , 0x00000005 
+ 00012892  0x0000203a branch  0x000032b4 
+ 00012893  0x0000203d add  0x00000013 , 0x000000d2 , 0x00000011 
+ 00012894  0x0000203e branch  0x000032d1 
+ 00012895  0x00002041 add  0x00000013 , 0x00000001 , 0x00000011 
+ 00012896  0x00002042 branch  0x000032d1 
+ 00012897  0x00002045 add  0x00000013 , 0x000000b5 , 0x00000011 
+ 00012898  0x00002046 branch  0x000032d1 
+ 00012899  0x00002048 setarg  0x00000000 
+ 00012900  0x0000204a call  0x00002c7a 
+ 00012901  0x0000204b add  0x00000013 , 0x000000b5 , 0x00000005 
+ 00012902  0x0000204c branch  0x000032b4 
+ 00012903  0x0000204f call  0x00002c7a 
+ 00012904  0x00002050 add  0x00000013 , 0x000000fb , 0x00000011 
+ 00012905  0x00002051 ifetch  0x00000001 , 0x00000011 
+ 00012906  0x00002053 store  0x00000001 , 0x000041de 
+ 00012907  0x00002054 rtn 
+ 00012908  0x00002057 call  0x00002c7a 
+ 00012909  0x00002058 fetch  0x00000001 , 0x000041de 
+ 00012910  0x0000205a add  0x00000013 , 0x000000fb , 0x00000005 
+ 00012911  0x0000205b branch  0x000032b4 
+ 00012912  0x0000205e add  0x00000013 , 0x000000fc , 0x00000011 
+ 00012913  0x0000205f branch  0x000032d1 
+ 00012914  0x00002062 add  0x00000013 , 0x000000fe , 0x00000005 
+ 00012915  0x00002063 branch  0x000032b4 
+ 00012916  0x00002066 setarg  0x00000109 
+ 00012917  0x00002068 iadd  0x00000013 , 0x00000011 
+ 00012918  0x00002069 ifetcht  0x00000001 , 0x00000011 
+ 00012919  0x0000206a rtn 
+ 00012920  0x0000206d setarg  0x00000135 
+ 00012921  0x0000206e branch  0x000032d0 
+ 00012922  0x00002070 setarg  0x00000000 
+ 00012923  0x00002072 arg  0x00000135 , 0x00000011 
+ 00012924  0x00002073 branch  0x000032b3 
+ 00012925  0x00002076 setarg  0x0000012b 
+ 00012926  0x00002078 call  0x000032cd 
+ 00012927  0x0000207a ifetch  0x00000004 , 0x00000011 
+ 00012928  0x0000207b rtn 
+ 00012929  0x0000207e setarg  0x0000015f 
+ 00012930  0x0000207f branch  0x000032d0 
+ 00012931  0x00002081 setarg  0x00000000 
+ 00012932  0x00002083 arg  0x0000015f , 0x00000011 
+ 00012933  0x00002084 branch  0x000032b3 
+ 00012934  0x00002087 setarg  0x00000000 
+ 00012935  0x00002089 arg  0x0000015c , 0x00000011 
+ 00012936  0x0000208a branch  0x000032b3 
+ 00012937  0x0000208d arg  0x0000012f , 0x00000011 
+ 00012938  0x0000208e branch  0x000032b3 
+ 00012939  0x00002091 setarg  0x00000108 
+ 00012940  0x00002092 branch  0x000032d0 
+ 00012941  0x00002094 arg  0x00000108 , 0x00000011 
+ 00012942  0x00002095 branch  0x000032b3 
+ 00012943  0x00002098 setarg  0x00000105 
+ 00012944  0x00002099 branch  0x000032d0 
+ 00012945  0x0000209b setarg  0x00000000 
+ 00012946  0x0000209d arg  0x00000105 , 0x00000011 
+ 00012947  0x0000209e branch  0x000032b3 
+ 00012948  0x000020a1 setarg  0x00000104 
+ 00012949  0x000020a2 branch  0x000032d0 
+ 00012950  0x000020a4 setarg  0x00000000 
+ 00012951  0x000020a6 arg  0x00000104 , 0x00000011 
+ 00012952  0x000020a7 branch  0x000032b3 
+ 00012953  0x000020aa setarg  0x00000000 
+ 00012954  0x000020ac arg  0x0000013b , 0x00000011 
+ 00012955  0x000020ad branch  0x000032b3 
+ 00012956  0x000020af setarg  0x00000001 
+ 00012957  0x000020b0 branch  0x0000329a 
+ 00012958  0x000020b3 setarg  0x0000010c 
+ 00012959  0x000020b4 call  0x000032cd 
+ 00012960  0x000020b5 ifetch  0x00000007 , 0x00000011 
+ 00012961  0x000020b6 rtn 
+ 00012962  0x000020b9 setarg  0x0000015e 
+ 00012963  0x000020ba branch  0x000032d0 
+ 00012964  0x000020bc setarg  0x00000000 
+ 00012965  0x000020be arg  0x0000015e , 0x00000011 
+ 00012966  0x000020bf branch  0x000032b3 
+ 00012967  0x000020c2 setarg  0x00000000 
+ 00012968  0x000020c4 arg  0x00000180 , 0x00000011 
+ 00012969  0x000020c5 branch  0x000032b3 
+ 00012970  0x000020c8 setarg  0x00000000 
+ 00012971  0x000020ca arg  0x0000017e , 0x00000011 
+ 00012972  0x000020cb branch  0x000032b3 
+ 00012973  0x000020ce setarg  0x00000000 
+ 00012974  0x000020d0 arg  0x0000017f , 0x00000011 
+ 00012975  0x000020d1 branch  0x000032b3 
+ 00012976  0x000020d4 arg  0x00000102 , 0x00000011 
+ 00012977  0x000020d5 branch  0x000032b3 
+ 00012978  0x000020d8 arg  0x00000103 , 0x00000011 
+ 00012979  0x000020da call  0x000032c7 
+ 00012980  0x000020dc istore  0x00000001 , 0x00000005 
+ 00012981  0x000020dd rtn 
+ 00012982  0x000020e0 setarg  0x0000015d 
+ 00012983  0x000020e1 branch  0x000032d0 
+ 00012984  0x000020e4 arg  0x0000015d , 0x00000011 
+ 00012985  0x000020e5 branch  0x000032b3 
+ 00012986  0x000020e8 setarg  0x0000018a 
+ 00012987  0x000020e9 call  0x000032d0 
+ 00012988  0x000020ea branch  0x0000326a 
+ 00012989  0x000020ed setarg  0x0000010c 
+ 00012990  0x000020ee branch  0x000032d0 
+ 00012991  0x000020f1 copy  0x0000003f , 0x00000002 
+ 00012992  0x000020f2 copy  0x00000011 , 0x0000003f 
+ 00012993  0x000020f3 iadd  0x00000013 , 0x00000005 
+ 00012994  0x000020f4 copy  0x00000002 , 0x0000003f 
+ 00012995  0x000020f5 rtn 
+ 00012996  0x000020f8 call  0x000032bf 
+ 00012997  0x000020fa istore  0x00000003 , 0x00000005 
+ 00012998  0x000020fb rtn 
+ 00012999  0x000020fe call  0x00002c7a 
+ 00013000  0x00002100 copy  0x0000003f , 0x00000012 
+ 00013001  0x00002101 copy  0x00000011 , 0x0000003f 
+ 00013002  0x00002102 iadd  0x00000013 , 0x00000005 
+ 00013003  0x00002103 copy  0x00000012 , 0x0000003f 
+ 00013004  0x00002104 rtn 
+ 00013005  0x00002107 call  0x00002c7a 
+ 00013006  0x00002108 iadd  0x00000013 , 0x00000011 
+ 00013007  0x00002109 rtn 
+ 00013008  0x0000210c call  0x000032cd 
+ 00013009  0x0000210e ifetch  0x00000001 , 0x00000011 
+ 00013010  0x0000210f rtn 
+ 00013011  0x00002112 call  0x000032cd 
+ 00013012  0x00002113 ifetcht  0x00000004 , 0x00000011 
+ 00013013  0x00002114 rtn 
+ 00013014  0x00002117 setarg  0x00000000 
+ 00013015  0x00002118 branch  0x000032b4 
+ 00013016  0x0000211d bpatch  0x000000c4 , 0x00004018 
+ 00013017  0x0000211e fetch  0x00000001 , 0x00004092 
+ 00013018  0x0000211f branch  0x000032d8 , 0x00000034 
+ 00013019  0x00002121 beq  0x00000004 , 0x00002f30 
+ 00013020  0x00002122 beq  0x0000000f , 0x00003436 
+ 00013021  0x00002123 beq  0x00000009 , 0x000045de 
+ 00013022  0x00002124 beq  0x0000000a , 0x0000392a 
+ 00013023  0x00002125 beq  0x0000000e , 0x000035bf 
+ 00013024  0x00002126 beq  0x00000010 , 0x000044a4 
+ 00013025  0x00002127 bbit1  0x00000006 , 0x00003d00 
+ 00013026  0x00002128 rtn 
+ 00013027  0x0000212b bpatch  0x000000c5 , 0x00004018 
+ 00013028  0x0000212c jam  0x00000000 , 0x00000151 
+ 00013029  0x0000212d jam  0x00000000 , 0x0000017f 
+ 00013030  0x0000212e jam  0x00000000 , 0x00000180 
+ 00013031  0x0000212f setarg  0x00000000 
+ 00013032  0x00002130 store  0x00000005 , 0x000009ae 
+ 00013033  0x00002131 fetch  0x00000001 , 0x00004092 
+ 00013034  0x00002132 branch  0x000032e3 , 0x00000034 
+ 00013035  0x00002133 beq  0x0000000a , 0x00003962 
+ 00013036  0x00002135 rtn 
+ 00013037  0x00002139 call  0x00007cd1 
+ 00013038  0x0000213a call  0x00007d9c 
+ 00013039  0x0000213b call  0x000032f6 
+ 00013040  0x0000213c fetch  0x00000002 , 0x000041f3 
+ 00013041  0x0000213d branch  0x00007f9c 
+ 00013042  0x00002140 fetch  0x00000002 , 0x000041f1 
+ 00013043  0x00002141 branch  0x00007f9c 
+ 00013044  0x00002144 fetch  0x00000002 , 0x000041ef 
+ 00013045  0x00002145 branch  0x00007f9c 
+ 00013046  0x00002148 bpatch  0x000000c6 , 0x00004018 
+ 00013047  0x0000214a arg  0x00004668 , 0x00000011 
+ 00013048  0x0000214b call  0x00007fc4 
+ 00013049  0x0000214c rtn  0x00000034 
+ 00013050  0x0000214e copy  0x0000003f , 0x00000013 
+ 00013051  0x0000214f call  0x000032ff 
+ 00013052  0x00002150 branch  0x00003324 
+ 00013053  0x00002153 arg  0x00000000 , 0x00000013 
+ 00013054  0x00002154 rtn 
+ 00013055  0x0000215a beq  0x00000001 , 0x00003311 
+ 00013056  0x0000215b beq  0x00000010 , 0x00003357 
+ 00013057  0x0000215c beq  0x00000005 , 0x00003335 
+ 00013058  0x0000215d beq  0x00000012 , 0x0000333c 
+ 00013059  0x0000215e beq  0x00000006 , 0x00003353 
+ 00013060  0x0000215f beq  0x00000004 , 0x00003394 
+ 00013061  0x00002160 beq  0x00000002 , 0x00003399 
+ 00013062  0x00002161 beq  0x00000013 , 0x00003394 
+ 00013063  0x00002162 beq  0x00000014 , 0x0000334b 
+ 00013064  0x00002163 beq  0x00000015 , 0x0000334f 
+ 00013065  0x00002164 beq  0x00000003 , 0x0000332e 
+ 00013066  0x00002165 beq  0x0000000b , 0x00003340 
+ 00013067  0x00002166 beq  0x0000000c , 0x00003347 
+ 00013068  0x00002168 beq  0x00000016 , 0x0000335b 
+ 00013069  0x00002169 beq  0x00000018 , 0x0000332a 
+ 00013070  0x0000216a beq  0x0000002a , 0x0000331a 
+ 00013071  0x0000216b beq  0x0000002b , 0x00003318 
+ 00013072  0x0000216c rtn 
+ 00013073  0x00002170 fetch  0x00000002 , 0x00004682 
+ 00013074  0x00002171 set1  0x00000000 , 0x0000003f 
+ 00013075  0x00002172 store  0x00000002 , 0x00004682 
+ 00013076  0x00002173 fetch  0x00000002 , 0x0000420a 
+ 00013077  0x00002174 set0  0x00000000 , 0x0000003f 
+ 00013078  0x00002175 store  0x00000002 , 0x0000420a 
+ 00013079  0x00002176 rtn 
+ 00013080  0x00002179 jam  0x00000000 , 0x00000229 
+ 00013081  0x0000217a rtn 
+ 00013082  0x0000217d fetch  0x00000001 , 0x00000229 
+ 00013083  0x0000217e increase  0x00000001 , 0x0000003f 
+ 00013084  0x0000217f store  0x00000001 , 0x00000229 
+ 00013085  0x00002180 sub  0x0000003f , 0x00000001 , 0x0000003e 
+ 00013086  0x00002181 branch  0x000033df , 0x00000002 
+ 00013087  0x00002182 jam  0x00000000 , 0x00000229 
+ 00013088  0x00002183 fetch  0x00000002 , 0x0000420a 
+ 00013089  0x00002184 set1  0x00000009 , 0x0000003f 
+ 00013090  0x00002185 store  0x00000002 , 0x0000420a 
+ 00013091  0x00002186 branch  0x000033e9 
+ 00013092  0x00002189 fetch  0x00000002 , 0x000041f5 
+ 00013093  0x0000218a branch  0x00007f9c 
+ 00013094  0x0000218d fetch  0x00000002 , 0x000041e9 
+ 00013095  0x0000218e branch  0x00007f9c 
+ 00013096  0x00002191 fetch  0x00000002 , 0x000041ed 
+ 00013097  0x00002192 branch  0x00007f9c 
+ 00013098  0x00002195 fetch  0x00000002 , 0x0000420a 
+ 00013099  0x00002196 set1  0x00000001 , 0x0000003f 
+ 00013100  0x00002197 store  0x00000002 , 0x0000420a 
+ 00013101  0x00002198 branch  0x00003412 
+ 00013102  0x0000219b fetch  0x00000002 , 0x00004682 
+ 00013103  0x0000219c set1  0x00000007 , 0x0000003f 
+ 00013104  0x0000219d store  0x00000002 , 0x00004682 
+ 00013105  0x0000219e fetch  0x00000002 , 0x0000420a 
+ 00013106  0x0000219f set1  0x00000002 , 0x0000003f 
+ 00013107  0x000021a0 store  0x00000002 , 0x0000420a 
+ 00013108  0x000021a1 rtn 
+ 00013109  0x000021a4 fetch  0x00000002 , 0x00004682 
+ 00013110  0x000021a5 set1  0x00000001 , 0x0000003f 
+ 00013111  0x000021a6 store  0x00000002 , 0x00004682 
+ 00013112  0x000021a7 fetch  0x00000002 , 0x0000420a 
+ 00013113  0x000021a8 set1  0x00000004 , 0x0000003f 
+ 00013114  0x000021a9 store  0x00000002 , 0x0000420a 
+ 00013115  0x000021aa rtn 
+ 00013116  0x000021ad fetch  0x00000002 , 0x00004682 
+ 00013117  0x000021ae set1  0x00000003 , 0x0000003f 
+ 00013118  0x000021af store  0x00000002 , 0x00004682 
+ 00013119  0x000021b0 rtn 
+ 00013120  0x000021b3 fetch  0x00000002 , 0x00004682 
+ 00013121  0x000021b4 set1  0x00000005 , 0x0000003f 
+ 00013122  0x000021b5 store  0x00000002 , 0x00004682 
+ 00013123  0x000021b6 fetch  0x00000002 , 0x0000420a 
+ 00013124  0x000021b7 set1  0x00000003 , 0x0000003f 
+ 00013125  0x000021b8 store  0x00000002 , 0x0000420a 
+ 00013126  0x000021b9 rtn 
+ 00013127  0x000021bc fetch  0x00000002 , 0x00004682 
+ 00013128  0x000021bd set0  0x00000005 , 0x0000003f 
+ 00013129  0x000021be store  0x00000002 , 0x00004682 
+ 00013130  0x000021bf rtn 
+ 00013131  0x000021c2 fetch  0x00000002 , 0x00004682 
+ 00013132  0x000021c3 set1  0x00000009 , 0x0000003f 
+ 00013133  0x000021c4 store  0x00000002 , 0x00004682 
+ 00013134  0x000021c5 rtn 
+ 00013135  0x000021c8 fetch  0x00000002 , 0x00004682 
+ 00013136  0x000021c9 set0  0x00000009 , 0x0000003f 
+ 00013137  0x000021ca store  0x00000002 , 0x00004682 
+ 00013138  0x000021cb branch  0x00003418 
+ 00013139  0x000021ce fetch  0x00000002 , 0x00004682 
+ 00013140  0x000021cf set1  0x00000002 , 0x0000003f 
+ 00013141  0x000021d0 store  0x00000002 , 0x00004682 
+ 00013142  0x000021d1 rtn 
+ 00013143  0x000021d4 fetch  0x00000002 , 0x0000420a 
+ 00013144  0x000021d5 set1  0x00000000 , 0x0000003f 
+ 00013145  0x000021d6 store  0x00000002 , 0x0000420a 
+ 00013146  0x000021d7 rtn 
+ 00013147  0x000021da fetch  0x00000002 , 0x0000420a 
+ 00013148  0x000021db set1  0x00000008 , 0x0000003f 
+ 00013149  0x000021dc store  0x00000002 , 0x0000420a 
+ 00013150  0x000021dd branch  0x000033e9 
+ 00013151  0x000021e1 bpatch  0x000000c7 , 0x00004018 
+ 00013152  0x000021e2 store  0x00000001 , 0x0000022a 
+ 00013153  0x000021e4 fetch  0x00000001 , 0x0000022a 
+ 00013154  0x000021e5 rtn  0x00000034 
+ 00013155  0x000021e6 increase  0xffffffff , 0x0000003f 
+ 00013156  0x000021e7 store  0x00000001 , 0x0000022a 
+ 00013157  0x000021e8 call  0x00007cdd 
+ 00013158  0x000021e9 call  0x000033d6 
+ 00013159  0x000021ea call  0x00003387 
+ 00013160  0x000021eb call  0x0000338d 
+ 00013161  0x000021ec call  0x0000651b 
+ 00013162  0x000021ed fetch  0x00000002 , 0x000041fd 
+ 00013163  0x000021ee call  0x00007f9c 
+ 00013164  0x000021ef branch  0x00003361 
+ 00013165  0x000021f5 ifetch  0x00000001 , 0x00000013 
+ 00013166  0x000021f6 rtn  0x00000034 
+ 00013167  0x000021f7 pincrease  0xffffffff 
+ 00013168  0x000021f8 istore  0x00000001 , 0x00000013 
+ 00013169  0x000021f9 nrtn  0x00000034 
+ 00013170  0x000021fa copy  0x00000012 , 0x0000003f 
+ 00013171  0x000021fb branch  0x00007f9c 
+ 00013172  0x00002200 ifetch  0x00000002 , 0x00000013 
+ 00013173  0x00002201 rtn  0x00000034 
+ 00013174  0x00002202 pincrease  0xffffffff 
+ 00013175  0x00002203 istore  0x00000002 , 0x00000013 
+ 00013176  0x00002204 nrtn  0x00000034 
+ 00013177  0x00002205 copy  0x00000012 , 0x0000003f 
+ 00013178  0x00002206 branch  0x00007f9c 
+ 00013179  0x00002209 fetcht  0x00000002 , 0x0000423f 
+ 00013180  0x0000220a add  0x00000002 , 0x00000001 , 0x00000013 
+ 00013181  0x0000220b arg  0x0000337f , 0x00000012 
+ 00013182  0x0000220c branch  0x0000336d 
+ 00013183  0x0000220f call  0x0000342d 
+ 00013184  0x00002210 beq  0x00000001 , 0x00003382 
+ 00013185  0x00002212 branch  0x0000340a 
+ 00013186  0x00002214 setarg  0x00000002 
+ 00013187  0x00002215 istore  0x00000001 , 0x00000013 
+ 00013188  0x00002216 add  0x00000002 , 0x00000008 , 0x00000012 
+ 00013189  0x00002218 ifetch  0x00000002 , 0x00000012 
+ 00013190  0x00002219 branch  0x00007f9c 
+ 00013191  0x0000221c arg  0x00004205 , 0x00000013 
+ 00013192  0x0000221d arg  0x0000338a , 0x00000012 
+ 00013193  0x0000221e branch  0x0000336d 
+ 00013194  0x00002221 call  0x00002252 
+ 00013195  0x00002222 branch  0x0000340e , 0x00000005 
+ 00013196  0x00002223 rtn 
+ 00013197  0x00002227 arg  0x0000467e , 0x00000013 
+ 00013198  0x00002228 arg  0x00003390 , 0x00000012 
+ 00013199  0x00002229 branch  0x00003374 
+ 00013200  0x0000222c call  0x000033f0 
+ 00013201  0x0000222d call  0x00003408 
+ 00013202  0x0000222e fetch  0x00000002 , 0x000041f7 
+ 00013203  0x0000222f branch  0x00007f9c 
+ 00013204  0x00002233 call  0x000033ac 
+ 00013205  0x00002235 fetch  0x00000002 , 0x00004682 
+ 00013206  0x00002236 set0  0x00000007 , 0x0000003f 
+ 00013207  0x00002237 store  0x00000002 , 0x00004682 
+ 00013208  0x00002238 rtn 
+ 00013209  0x0000223b jam  0x00000000 , 0x00004205 
+ 00013210  0x0000223c fetch  0x00000002 , 0x00004682 
+ 00013211  0x0000223d bbit1  0x00000007 , 0x0000339e 
+ 00013212  0x0000223e isolate0  0x00000001 , 0x0000003f 
+ 00013213  0x0000223f call  0x000032fd , 0x00000001 
+ 00013214  0x00002241 bpatch  0x000000c8 , 0x00004019 
+ 00013215  0x00002242 fetch  0x00000002 , 0x00004682 
+ 00013216  0x00002243 set0  0x00000000 , 0x0000003f 
+ 00013217  0x00002244 set0  0x00000001 , 0x0000003f 
+ 00013218  0x00002245 set0  0x00000002 , 0x0000003f 
+ 00013219  0x00002246 set0  0x00000003 , 0x0000003f 
+ 00013220  0x00002247 set0  0x00000007 , 0x0000003f 
+ 00013221  0x00002248 store  0x00000002 , 0x00004682 
+ 00013222  0x00002249 branch  0x00003418 
+ 00013223  0x0000224c call  0x000033a9 
+ 00013224  0x0000224d branch  0x0000340a 
+ 00013225  0x00002251 setarg  0x00000000 
+ 00013226  0x00002252 store  0x00000002 , 0x00004208 
+ 00013227  0x00002253 rtn 
+ 00013228  0x00002255 setarg  0x00000000 
+ 00013229  0x00002256 store  0x00000002 , 0x0000420a 
+ 00013230  0x00002257 rtn 
+ 00013231  0x0000225a fetch  0x00000002 , 0x0000420a 
+ 00013232  0x0000225b store  0x00000002 , 0x00004208 
+ 00013233  0x0000225c setarg  0x00000000 
+ 00013234  0x0000225d store  0x00000002 , 0x0000420a 
+ 00013235  0x0000225e rtn 
+ 00013236  0x00002261 fetch  0x00000002 , 0x0000420a 
+ 00013237  0x00002262 set1  0x00000007 , 0x0000003f 
+ 00013238  0x00002263 store  0x00000002 , 0x00004208 
+ 00013239  0x00002264 setarg  0x00000000 
+ 00013240  0x00002265 store  0x00000002 , 0x0000420a 
+ 00013241  0x00002266 rtn 
+ 00013242  0x0000226f fetch  0x00000001 , 0x00004682 
+ 00013243  0x00002270 isolate1  0x00000005 , 0x0000003f 
+ 00013244  0x00002271 rtn 
+ 00013245  0x0000227a setarg  0x0000aa55 
+ 00013246  0x0000227c store  0x00000002 , 0x00000aaa 
+ 00013247  0x0000227d bpatch  0x000000c9 , 0x00004019 
+ 00013248  0x0000227e arg  0x00000002 , 0x00000002 
+ 00013249  0x0000227f arg  0x00000aaa , 0x00000011 
+ 00013250  0x00002280 arg  0x000000c3 , 0x00000012 
+ 00013251  0x00002281 branch  0x00006606 
+ 00013252  0x00002285 bpatch  0x000000ca , 0x00004019 
+ 00013253  0x00002286 arg  0x00000002 , 0x00000002 
+ 00013254  0x00002287 arg  0x00000a9a , 0x00000011 
+ 00013255  0x00002288 arg  0x000000c3 , 0x00000012 
+ 00013256  0x00002289 call  0x000065df 
+ 00013257  0x0000228a fetch  0x00000002 , 0x00000a9a 
+ 00013258  0x0000228b arg  0x0000aa55 , 0x00000002 
+ 00013259  0x0000228c isub  0x00000002 , 0x0000003e 
+ 00013260  0x0000228d rtn 
+ 00013261  0x00002291 fetch  0x00000001 , 0x0000455a 
+ 00013262  0x00002292 store  0x00000001 , 0x00004205 
+ 00013263  0x00002293 rtn 
+ 00013264  0x00002296 arg  0x00000009 , 0x00000007 
+ 00013265  0x00002297 branch  0x00002c32 
+ 00013266  0x0000229a arg  0x00000009 , 0x00000007 
+ 00013267  0x0000229b branch  0x00002c36 
+ 00013268  0x0000229e jam  0x00000005 , 0x00004206 
+ 00013269  0x0000229f branch  0x000033d0 
+ 00013270  0x000022a2 arg  0x00004206 , 0x00000013 
+ 00013271  0x000022a3 arg  0x000033d2 , 0x00000012 
+ 00013272  0x000022a4 branch  0x0000336d 
+ 00013273  0x000022a7 jam  0x00000001 , 0x00004363 
+ 00013274  0x000022a8 rtn 
+ 00013275  0x000022ab jam  0x00000000 , 0x00004363 
+ 00013276  0x000022ac rtn 
+ 00013277  0x000022af jam  0x0000000a , 0x00000a99 
+ 00013278  0x000022b0 branch  0x00007d8f 
+ 00013279  0x000022b3 jam  0x0000001d , 0x00000a99 
+ 00013280  0x000022b4 branch  0x00007d8f 
+ 00013281  0x000022b7 bpatch  0x000000cb , 0x00004019 
+ 00013282  0x000022b8 fetch  0x00000001 , 0x00004207 
+ 00013283  0x000022b9 store  0x00000001 , 0x0000016d 
+ 00013284  0x000022ba jam  0x00000001 , 0x00000228 
+ 00013285  0x000022bb jam  0x00000003 , 0x00000a99 
+ 00013286  0x000022bc branch  0x00007d8f 
+ 00013287  0x000022bf jam  0x0000001e , 0x00000a99 
+ 00013288  0x000022c0 branch  0x00007d8f 
+ 00013289  0x000022c3 jam  0x00000004 , 0x00000a99 
+ 00013290  0x000022c4 branch  0x00007d8f 
+ 00013291  0x000022c7 fetch  0x00000002 , 0x00004687 
+ 00013292  0x000022c8 store  0x00000002 , 0x0000467e 
+ 00013293  0x000022ca call  0x00003404 
+ 00013294  0x000022cc jam  0x00000001 , 0x00000a99 
+ 00013295  0x000022cd branch  0x00007d8f 
+ 00013296  0x000022d0 setarg  0x00000000 
+ 00013297  0x000022d1 store  0x00000002 , 0x0000467e 
+ 00013298  0x000022d2 jam  0x00000002 , 0x00000a99 
+ 00013299  0x000022d3 branch  0x00007d8f 
+ 00013300  0x000022d6 jam  0x0000000f , 0x00000a99 
+ 00013301  0x000022d7 branch  0x00007d8f 
+ 00013302  0x000022da jam  0x00000010 , 0x00000a99 
+ 00013303  0x000022db branch  0x00007d8f 
+ 00013304  0x000022de jam  0x0000000e , 0x00000a99 
+ 00013305  0x000022df branch  0x00007d8f 
+ 00013306  0x000022e2 jam  0x0000000d , 0x00000a99 
+ 00013307  0x000022e3 branch  0x00007d8f 
+ 00013308  0x000022e6 jam  0x00000017 , 0x00000a99 
+ 00013309  0x000022e7 branch  0x00007d8f 
+ 00013310  0x000022ea jam  0x00000018 , 0x00000a99 
+ 00013311  0x000022eb branch  0x00007d8f 
+ 00013312  0x000022ee jam  0x00000016 , 0x00000a99 
+ 00013313  0x000022ef branch  0x00007d8f 
+ 00013314  0x000022f2 jam  0x00000011 , 0x00000a99 
+ 00013315  0x000022f3 branch  0x00007d8f 
+ 00013316  0x000022f6 jam  0x00000015 , 0x00000a99 
+ 00013317  0x000022f7 branch  0x00007d8f 
+ 00013318  0x000022fa jam  0x00000014 , 0x00000a99 
+ 00013319  0x000022fb branch  0x00007d8f 
+ 00013320  0x000022ff jam  0x00000013 , 0x00000a99 
+ 00013321  0x00002300 branch  0x00007d8f 
+ 00013322  0x00002303 jam  0x00000019 , 0x00000a99 
+ 00013323  0x00002304 branch  0x00007d8f 
+ 00013324  0x00002307 jam  0x00000006 , 0x00000a99 
+ 00013325  0x00002308 branch  0x00007d8f 
+ 00013326  0x0000230b jam  0x00000005 , 0x00000a99 
+ 00013327  0x0000230c branch  0x00007d8f 
+ 00013328  0x0000230f jam  0x0000001f , 0x00000a99 
+ 00013329  0x00002310 branch  0x00007d8f 
+ 00013330  0x00002313 jam  0x00000020 , 0x00000a99 
+ 00013331  0x00002314 branch  0x00007d8f 
+ 00013332  0x00002317 jam  0x00000025 , 0x00000a99 
+ 00013333  0x00002318 branch  0x00007d8f 
+ 00013334  0x0000231b set1  0x0000000d , 0x00000000 
+ 00013335  0x0000231c rtn 
+ 00013336  0x0000231f set0  0x0000000d , 0x00000000 
+ 00013337  0x00002320 rtn 
+ 00013338  0x00002335 call  0x0000342d 
+ 00013339  0x00002336 beq  0x00000002 , 0x00003424 
+ 00013340  0x00002338 setarg  0x00000001 
+ 00013341  0x00002339 istore  0x00000001 , 0x00000013 
+ 00013342  0x0000233a add  0x00000002 , 0x00000003 , 0x00000011 
+ 00013343  0x0000233b add  0x00000002 , 0x00000006 , 0x00000012 
+ 00013344  0x0000233d ifetcht  0x00000001 , 0x00000011 
+ 00013345  0x0000233e increase  0x00000001 , 0x00000013 
+ 00013346  0x0000233f istoret  0x00000001 , 0x00000013 
+ 00013347  0x00002340 branch  0x00003385 
+ 00013348  0x00002343 setarg  0x00000000 
+ 00013349  0x00002344 istore  0x00000001 , 0x00000013 
+ 00013350  0x00002345 fetch  0x00000002 , 0x00004682 
+ 00013351  0x00002346 bbit0  0x00000009 , 0x00003429 
+ 00013352  0x00002347 call  0x00003402 
+ 00013353  0x00002349 fetcht  0x00000002 , 0x0000423f 
+ 00013354  0x0000234a add  0x00000002 , 0x00000002 , 0x00000011 
+ 00013355  0x0000234b add  0x00000002 , 0x00000004 , 0x00000012 
+ 00013356  0x0000234c branch  0x00003420 
+ 00013357  0x0000234f fetcht  0x00000002 , 0x0000423f 
+ 00013358  0x00002350 add  0x00000002 , 0x00000000 , 0x00000013 
+ 00013359  0x00002351 ifetch  0x00000001 , 0x00000013 
+ 00013360  0x00002352 rtn 
+ 00013361  0x00002355 call  0x0000342d 
+ 00013362  0x00002356 bne  0x00000000 , 0x00003434 
+ 00013363  0x00002357 branch  0x0000340a 
+ 00013364  0x00002359 add  0x00000002 , 0x0000000a , 0x00000012 
+ 00013365  0x0000235a branch  0x00003385 
+ 00013366  0x0000235d rtn  0x0000002b 
+ 00013367  0x0000235e jam  0x00000000 , 0x00008081 
+ 00013368  0x0000235f setarg  0x00003463 
+ 00013369  0x00002360 store  0x00000002 , 0x000041eb 
+ 00013370  0x00002361 setarg  0x0000696c 
+ 00013371  0x00002362 store  0x00000002 , 0x000041ed 
+ 00013372  0x00002363 setarg  0x000034f5 
+ 00013373  0x00002364 store  0x00000002 , 0x000041f3 
+ 00013374  0x00002365 setarg  0x000034f4 
+ 00013375  0x00002366 store  0x00000002 , 0x000041ef 
+ 00013376  0x00002367 setarg  0x0000347e 
+ 00013377  0x00002368 store  0x00000002 , 0x000041f5 
+ 00013378  0x00002369 setarg  0x000034b2 
+ 00013379  0x0000236a store  0x00000002 , 0x000041fd 
+ 00013380  0x0000236b setarg  0x00003465 
+ 00013381  0x0000236c store  0x00000002 , 0x000041fb 
+ 00013382  0x0000236d setarg  0x00003470 
+ 00013383  0x0000236e store  0x00000002 , 0x000041e9 
+ 00013384  0x0000236f setarg  0x00003501 
+ 00013385  0x00002370 store  0x00000002 , 0x000041f9 
+ 00013386  0x00002371 bpatch  0x000000cc , 0x00004019 
+ 00013387  0x00002372 call  0x0000359b 
+ 00013388  0x00002373 call  0x00006948 
+ 00013389  0x00002374 call  0x000035ad 
+ 00013390  0x00002375 call  0x00007d08 
+ 00013391  0x00002376 call  0x00007cd3 
+ 00013392  0x00002377 setarg  0x0000350b 
+ 00013393  0x00002378 store  0x00000002 , 0x00004766 
+ 00013394  0x00002379 setarg  0x000034fc 
+ 00013395  0x0000237a store  0x00000002 , 0x0000475d 
+ 00013396  0x0000237b setarg  0x000034f8 
+ 00013397  0x0000237c store  0x00000002 , 0x0000475f 
+ 00013398  0x0000237d setarg  0x0000346c 
+ 00013399  0x0000237e store  0x00000002 , 0x00004761 
+ 00013400  0x0000237f setarg  0x000035a2 
+ 00013401  0x00002380 store  0x00000002 , 0x000046a9 
+ 00013402  0x00002381 setarg  0x000035a4 
+ 00013403  0x00002382 store  0x00000002 , 0x000046ab 
+ 00013404  0x00002383 setarg  0x000035a9 
+ 00013405  0x00002384 store  0x00000002 , 0x000046b4 
+ 00013406  0x00002385 setarg  0x000035a6 
+ 00013407  0x00002386 store  0x00000002 , 0x000046b6 
+ 00013408  0x00002387 fetch  0x00000002 , 0x00004682 
+ 00013409  0x00002388 rtnbit1  0x0000000c 
+ 00013410  0x00002389 branch  0x0000340a 
+ 00013411  0x0000238c call  0x00003586 
+ 00013412  0x0000238d branch  0x0000340a 
+ 00013413  0x00002390 call  0x00005892 
+ 00013414  0x00002391 nrtn  0x00000034 
+ 00013415  0x00002392 arg  0x00000b06 , 0x00000011 
+ 00013416  0x00002393 call  0x00007e54 
+ 00013417  0x00002394 nrtn  0x00000028 
+ 00013418  0x00002395 arg  0x00000b06 , 0x00000006 
+ 00013419  0x00002396 branch  0x00004746 
+ 00013420  0x00002399 fetch  0x00000002 , 0x00004797 
+ 00013421  0x0000239a store  0x00000002 , 0x00004791 
+ 00013422  0x0000239b jam  0x00000001 , 0x00004753 
+ 00013423  0x0000239c branch  0x0000358f 
+ 00013424  0x0000239f fetch  0x00000001 , 0x0000479d 
+ 00013425  0x000023a0 beq  0x00000001 , 0x00003479 
+ 00013426  0x000023a1 fetch  0x00000002 , 0x00004682 
+ 00013427  0x000023a2 bbit0  0x00000009 , 0x00003479 
+ 00013428  0x000023a3 fetch  0x00000001 , 0x0000479e 
+ 00013429  0x000023a4 beq  0x00000001 , 0x000033d0 
+ 00013430  0x000023a5 fetch  0x00000001 , 0x00004700 
+ 00013431  0x000023a6 nbranch  0x000033d0 , 0x00000034 
+ 00013432  0x000023a7 branch  0x000033d2 
+ 00013433  0x000023aa fetch  0x00000001 , 0x0000479b 
+ 00013434  0x000023ab fetcht  0x00000001 , 0x0000479c 
+ 00013435  0x000023ac ior  0x00000002 , 0x0000003f 
+ 00013436  0x000023ad beq  0x00000001 , 0x000033d0 
+ 00013437  0x000023ae branch  0x000033d2 
+ 00013438  0x000023b1 copy  0x00000013 , 0x0000003f 
+ 00013439  0x000023b2 beq  0x0000002d , 0x00003431 
+ 00013440  0x000023b3 beq  0x00000010 , 0x0000341a 
+ 00013441  0x000023b4 beq  0x00000014 , 0x000034df 
+ 00013442  0x000023b5 beq  0x00000015 , 0x000034e8 
+ 00013443  0x000023b6 beq  0x00000040 , 0x00003485 
+ 00013444  0x000023b7 rtn 
+ 00013445  0x000023b9 fetch  0x00000002 , 0x00004509 
+ 00013446  0x000023ba beq  0x00000001 , 0x0000348c 
+ 00013447  0x000023bc fetch  0x00000002 , 0x000043d8 
+ 00013448  0x000023bd branch  0x000034a2 , 0x00000034 
+ 00013449  0x000023bf jam  0x00000002 , 0x0000478a 
+ 00013450  0x000023c0 jam  0x0000003c , 0x0000478f 
+ 00013451  0x000023c1 rtn 
+ 00013452  0x000023c4 fetch  0x00000002 , 0x0000449a 
+ 00013453  0x000023c5 branch  0x000034a0 , 0x00000034 
+ 00013454  0x000023c7 jam  0x00000001 , 0x0000478a 
+ 00013455  0x000023c8 fetcht  0x00000002 , 0x000047b4 
+ 00013456  0x000023c9 fetch  0x00000002 , 0x00004496 
+ 00013457  0x000023ca iadd  0x00000002 , 0x0000003f 
+ 00013458  0x000023cb store  0x00000002 , 0x00004496 
+ 00013459  0x000023cc copy  0x0000003f , 0x00000011 
+ 00013460  0x000023cd fetch  0x00000002 , 0x00004498 
+ 00013461  0x000023ce iadd  0x00000002 , 0x0000003f 
+ 00013462  0x000023cf store  0x00000002 , 0x00004498 
+ 00013463  0x000023d0 iadd  0x00000011 , 0x0000003f 
+ 00013464  0x000023d1 rshift  0x0000003f , 0x00000002 
+ 00013465  0x000023d2 fetch  0x00000002 , 0x000047c0 
+ 00013466  0x000023d3 idiv  0x00000002 
+ 00013467  0x000023d4 call  0x00007f86 
+ 00013468  0x000023d5 quotient  0x0000003f 
+ 00013469  0x000023d6 store  0x00000002 , 0x0000449a 
+ 00013470  0x000023d7 jam  0x00000001 , 0x00004790 
+ 00013471  0x000023d8 rtn 
+ 00013472  0x000023da jam  0x00000003 , 0x0000478a 
+ 00013473  0x000023db rtn 
+ 00013474  0x000023de jam  0x00000000 , 0x00004172 
+ 00013475  0x000023df jam  0x00000000 , 0x00004790 
+ 00013476  0x000023e0 fetch  0x00000002 , 0x000043d6 
+ 00013477  0x000023e1 fetcht  0x00000002 , 0x000047be 
+ 00013478  0x000023e2 isub  0x00000002 , 0x0000003e 
+ 00013479  0x000023e3 setflag  0x00000002 , 0x00000000 , 0x00000011 
+ 00013480  0x000023e4 fetch  0x00000002 , 0x000047c0 
+ 00013481  0x000023e5 fetcht  0x00000002 , 0x000043d6 
+ 00013482  0x000023e6 isub  0x00000002 , 0x0000003f 
+ 00013483  0x000023e7 setflag  0x00000002 , 0x00000001 , 0x00000011 
+ 00013484  0x000023e8 compare  0x00000003 , 0x00000011 , 0x00000003 
+ 00013485  0x000023e9 rtn  0x00000001 
+ 00013486  0x000023ea fetch  0x00000008 , 0x000047be 
+ 00013487  0x000023eb store  0x00000008 , 0x00004496 
+ 00013488  0x000023ec jam  0x00000001 , 0x00004790 
+ 00013489  0x000023ed rtn 
+ 00013490  0x000023f2 call  0x0000337b 
+ 00013491  0x000023f3 call  0x000034b9 
+ 00013492  0x000023f4 call  0x000034be 
+ 00013493  0x000023f5 call  0x000034d5 
+ 00013494  0x000023f6 call  0x000034ca 
+ 00013495  0x000023f7 call  0x000034c4 
+ 00013496  0x000023f8 branch  0x000034d9 
+ 00013497  0x000023fc arg  0x00004799 , 0x00000013 
+ 00013498  0x000023fd arg  0x000034bc , 0x00000012 
+ 00013499  0x000023fe branch  0x0000336d 
+ 00013500  0x00002400 jam  0x00000000 , 0x0000479a 
+ 00013501  0x00002401 rtn 
+ 00013502  0x00002403 arg  0x00004793 , 0x00000013 
+ 00013503  0x00002404 arg  0x000034c1 , 0x00000012 
+ 00013504  0x00002405 branch  0x00003374 
+ 00013505  0x00002407 arg  0x000046bf , 0x00000013 
+ 00013506  0x00002408 arg  0x0000469e , 0x00000012 
+ 00013507  0x00002409 branch  0x00003591 
+ 00013508  0x0000240d arg  0x0000478f , 0x00000013 
+ 00013509  0x0000240e arg  0x000034c7 , 0x00000012 
+ 00013510  0x0000240f branch  0x0000336d 
+ 00013511  0x00002412 fetch  0x00000002 , 0x0000449a 
+ 00013512  0x00002413 store  0x00000001 , 0x00004172 
+ 00013513  0x00002414 rtn 
+ 00013514  0x00002416 arg  0x00004790 , 0x00000013 
+ 00013515  0x00002417 arg  0x000034cd , 0x00000012 
+ 00013516  0x00002418 branch  0x0000336d 
+ 00013517  0x0000241a fetch  0x00000001 , 0x0000043f 
+ 00013518  0x0000241b compare  0x00000000 , 0x0000003f , 0x00000060 
+ 00013519  0x0000241c nbranch  0x000034d3 , 0x00000001 
+ 00013520  0x0000241d jam  0x00000001 , 0x0000478a 
+ 00013521  0x0000241e call  0x00003416 
+ 00013522  0x0000241f branch  0x00005abf 
+ 00013523  0x00002421 jam  0x00000001 , 0x00004790 
+ 00013524  0x00002422 rtn 
+ 00013525  0x00002425 arg  0x00004791 , 0x00000013 
+ 00013526  0x00002426 arg  0x000034d8 , 0x00000012 
+ 00013527  0x00002427 branch  0x00003374 
+ 00013528  0x0000242b branch  0x0000341a 
+ 00013529  0x00002430 arg  0x0000478d , 0x00000013 
+ 00013530  0x00002431 arg  0x000034dc , 0x00000012 
+ 00013531  0x00002432 branch  0x00003374 
+ 00013532  0x00002434 fetch  0x00000002 , 0x000047a7 
+ 00013533  0x00002435 store  0x00000002 , 0x0000478d 
+ 00013534  0x00002436 branch  0x000035af 
+ 00013535  0x0000243a fetch  0x00000002 , 0x000047a7 
+ 00013536  0x0000243b store  0x00000002 , 0x0000478d 
+ 00013537  0x0000243c setarg  0x00000000 
+ 00013538  0x0000243d store  0x00000002 , 0x00004793 
+ 00013539  0x0000243e store  0x00000002 , 0x00004791 
+ 00013540  0x0000243f call  0x0000355c 
+ 00013541  0x00002440 call  0x00003586 
+ 00013542  0x00002441 jam  0x00000000 , 0x00004172 
+ 00013543  0x00002442 branch  0x000033f8 
+ 00013544  0x00002448 setarg  0x00000000 
+ 00013545  0x00002449 store  0x00000004 , 0x0000478d 
+ 00013546  0x0000244a store  0x00000003 , 0x0000478a 
+ 00013547  0x0000244b store  0x00000002 , 0x00004509 
+ 00013548  0x0000244d jam  0x00000001 , 0x000047a0 
+ 00013549  0x0000244e fetch  0x00000002 , 0x00004797 
+ 00013550  0x0000244f store  0x00000002 , 0x00004791 
+ 00013551  0x00002450 call  0x00007e38 
+ 00013552  0x00002451 fetch  0x00000001 , 0x00004759 
+ 00013553  0x00002452 rtneq  0x00000000 
+ 00013554  0x00002453 call  0x0000358f 
+ 00013555  0x00002454 branch  0x0000356e 
+ 00013556  0x00002459 branch  0x00003508 
+ 00013557  0x0000245d fetch  0x00000001 , 0x00004759 
+ 00013558  0x0000245e rtnne  0x00000002 
+ 00013559  0x0000245f branch  0x00003508 
+ 00013560  0x00002465 arg  0x000046cd , 0x00000013 
+ 00013561  0x00002466 call  0x00003582 
+ 00013562  0x00002467 arg  0x000046c6 , 0x00000013 
+ 00013563  0x00002469 branch  0x00003584 
+ 00013564  0x0000246c jam  0x00000000 , 0x0000436e 
+ 00013565  0x0000246d arg  0x000046db , 0x00000013 
+ 00013566  0x0000246e call  0x00003582 
+ 00013567  0x0000246f arg  0x000046d4 , 0x00000013 
+ 00013568  0x00002470 branch  0x000034fb 
+ 00013569  0x00002473 fetch  0x00000001 , 0x00000477 
+ 00013570  0x00002474 beq  0x00000012 , 0x00003504 
+ 00013571  0x00002475 rtn 
+ 00013572  0x00002477 fetch  0x00000002 , 0x00000478 
+ 00013573  0x00002479 beq  0x0000000d , 0x00003536 
+ 00013574  0x0000247a beq  0x0000000b , 0x00003571 
+ 00013575  0x0000247b rtn 
+ 00013576  0x00002481 fetch  0x00000001 , 0x00004753 
+ 00013577  0x00002482 rtn  0x00000034 
+ 00013578  0x00002483 branch  0x00006978 
+ 00013579  0x00002488 copy  0x00000011 , 0x0000003f 
+ 00013580  0x00002489 branch  0x00003510 , 0x00000034 
+ 00013581  0x0000248b copy  0x00000007 , 0x0000003f 
+ 00013582  0x0000248c beq  0x00000000 , 0x00003513 
+ 00013583  0x0000248d rtn 
+ 00013584  0x0000248f copy  0x00000007 , 0x0000003f 
+ 00013585  0x00002490 beq  0x00000000 , 0x0000351b 
+ 00013586  0x00002491 rtn 
+ 00013587  0x00002494 jam  0x00000001 , 0x0000479d 
+ 00013588  0x00002495 arg  0x000046f7 , 0x00000013 
+ 00013589  0x00002496 call  0x00003582 
+ 00013590  0x00002497 arg  0x000046f0 , 0x00000013 
+ 00013591  0x00002498 call  0x00003584 
+ 00013592  0x00002499 fetch  0x00000002 , 0x00004682 
+ 00013593  0x0000249a bbit0  0x00000009 , 0x00003532 
+ 00013594  0x0000249b branch  0x00003521 
+ 00013595  0x0000249e jam  0x00000000 , 0x0000479d 
+ 00013596  0x0000249f branch  0x0000351d 
+ 00013597  0x000024a4 fetch  0x00000001 , 0x0000479a 
+ 00013598  0x000024a5 rtnne  0x00000001 
+ 00013599  0x000024a6 jam  0x00000005 , 0x00004799 
+ 00013600  0x000024a7 rtn 
+ 00013601  0x000024aa fetch  0x00000001 , 0x0000479a 
+ 00013602  0x000024ab pincrease  0x00000001 
+ 00013603  0x000024ac store  0x00000001 , 0x0000479a 
+ 00013604  0x000024ad beq  0x00000001 , 0x00003527 
+ 00013605  0x000024ae beq  0x00000002 , 0x0000352b 
+ 00013606  0x000024af rtn 
+ 00013607  0x000024b1 call  0x0000355c 
+ 00013608  0x000024b2 jam  0x00000001 , 0x00004771 
+ 00013609  0x000024b3 arg  0x0000476c , 0x00000013 
+ 00013610  0x000024b4 branch  0x00003544 
+ 00013611  0x000024b6 jam  0x00000000 , 0x0000479a 
+ 00013612  0x000024b7 jam  0x00000002 , 0x00004771 
+ 00013613  0x000024b8 arg  0x0000476c , 0x00000013 
+ 00013614  0x000024b9 call  0x00003544 
+ 00013615  0x000024ba fetch  0x00000001 , 0x0000479e 
+ 00013616  0x000024bb beq  0x00000001 , 0x00003551 
+ 00013617  0x000024bc rtn 
+ 00013618  0x000024bf fetch  0x00000002 , 0x00004797 
+ 00013619  0x000024c0 store  0x00000002 , 0x00004791 
+ 00013620  0x000024c1 call  0x0000355c 
+ 00013621  0x000024c2 branch  0x0000358f 
+ 00013622  0x000024c6 bpatch  0x000000cd , 0x00004019 
+ 00013623  0x000024c7 call  0x000036fc 
+ 00013624  0x000024c8 ifetch  0x00000001 , 0x00000011 
+ 00013625  0x000024c9 beq  0x00000003 , 0x0000353c 
+ 00013626  0x000024ca beq  0x00000007 , 0x00003540 
+ 00013627  0x000024cb rtn 
+ 00013628  0x000024ce fetch  0x00000001 , 0x0000479e 
+ 00013629  0x000024cf beq  0x00000000 , 0x00003551 
+ 00013630  0x000024d0 beq  0x00000001 , 0x0000355c 
+ 00013631  0x000024d1 rtn 
+ 00013632  0x000024d4 ifetch  0x00000001 , 0x00000012 
+ 00013633  0x000024d5 beq  0x00000001 , 0x00003564 
+ 00013634  0x000024d6 beq  0x00000000 , 0x00003569 
+ 00013635  0x000024d7 rtn 
+ 00013636  0x000024df bpatch  0x000000ce , 0x00004019 
+ 00013637  0x000024e0 fetch  0x00000001 , 0x0000478b 
+ 00013638  0x000024e1 isolate1  0x00000000 , 0x0000003f 
+ 00013639  0x000024e2 nrtn  0x00000001 
+ 00013640  0x000024e3 add  0x00000013 , 0x00000006 , 0x00000006 
+ 00013641  0x000024e4 ifetch  0x00000002 , 0x00000006 
+ 00013642  0x000024e5 byteswap  0x0000003f , 0x0000003f 
+ 00013643  0x000024e6 add  0x0000003f , 0x00000005 , 0x00000039 
+ 00013644  0x000024e7 add  0x00000013 , 0x00000003 , 0x00000006 
+ 00013645  0x000024e8 call  0x000036f0 
+ 00013646  0x000024e9 istore  0x00000001 , 0x00000006 
+ 00013647  0x000024ea copy  0x00000013 , 0x00000011 
+ 00013648  0x000024eb branch  0x00007e3d 
+ 00013649  0x000024f2 fetch  0x00000001 , 0x00004759 
+ 00013650  0x000024f3 rtn  0x00000034 
+ 00013651  0x000024f4 jam  0x00000001 , 0x0000479e 
+ 00013652  0x000024f5 arg  0x000046e9 , 0x00000013 
+ 00013653  0x000024f6 call  0x00003582 
+ 00013654  0x000024f7 arg  0x000046e2 , 0x00000013 
+ 00013655  0x000024f8 call  0x00003584 
+ 00013656  0x000024f9 jam  0x00000004 , 0x00004780 
+ 00013657  0x000024fa jam  0x00000001 , 0x00004783 
+ 00013658  0x000024fb arg  0x0000477b , 0x00000013 
+ 00013659  0x000024fc branch  0x00003544 
+ 00013660  0x000024fe fetch  0x00000001 , 0x0000479e 
+ 00013661  0x000024ff rtn  0x00000034 
+ 00013662  0x00002500 jam  0x00000000 , 0x0000479e 
+ 00013663  0x00002501 call  0x00003586 
+ 00013664  0x00002502 jam  0x00000004 , 0x00004780 
+ 00013665  0x00002503 jam  0x00000000 , 0x00004783 
+ 00013666  0x00002504 arg  0x0000477b , 0x00000013 
+ 00013667  0x00002505 branch  0x00003544 
+ 00013668  0x00002508 jam  0x00000001 , 0x0000479f 
+ 00013669  0x00002509 jam  0x00000007 , 0x00004780 
+ 00013670  0x0000250a jam  0x00000001 , 0x00004783 
+ 00013671  0x0000250b arg  0x0000477b , 0x00000013 
+ 00013672  0x0000250c branch  0x00003544 
+ 00013673  0x0000250e jam  0x00000000 , 0x0000479f 
+ 00013674  0x0000250f jam  0x00000007 , 0x00004780 
+ 00013675  0x00002510 jam  0x00000000 , 0x00004783 
+ 00013676  0x00002511 arg  0x0000477b , 0x00000013 
+ 00013677  0x00002512 branch  0x00003544 
+ 00013678  0x00002514 fetch  0x00000001 , 0x0000479f 
+ 00013679  0x00002515 rtn  0x00000034 
+ 00013680  0x00002516 branch  0x00003551 
+ 00013681  0x00002519 ifetch  0x00000002 , 0x00000011 
+ 00013682  0x0000251a store  0x00000002 , 0x0000478b 
+ 00013683  0x0000251b isolate1  0x00000000 , 0x0000003f 
+ 00013684  0x0000251c nrtn  0x00000001 
+ 00013685  0x0000251d fetch  0x00000001 , 0x000047a0 
+ 00013686  0x0000251e rtn  0x00000034 
+ 00013687  0x0000251f jam  0x00000000 , 0x000047a0 
+ 00013688  0x00002520 fetch  0x00000008 , 0x000047b6 
+ 00013689  0x00002521 store  0x00000008 , 0x00004496 
+ 00013690  0x00002522 jam  0x00000002 , 0x00004790 
+ 00013691  0x00002523 call  0x000035af 
+ 00013692  0x00002524 call  0x000035b9 
+ 00013693  0x00002525 jam  0x00000007 , 0x00004780 
+ 00013694  0x00002526 fetch  0x00000001 , 0x0000479f 
+ 00013695  0x00002527 store  0x00000001 , 0x00004783 
+ 00013696  0x00002528 arg  0x0000477b , 0x00000013 
+ 00013697  0x00002529 branch  0x00003544 
+ 00013698  0x0000252e arg  0x00000001 , 0x00000011 
+ 00013699  0x0000252f branch  0x00003585 
+ 00013700  0x00002531 arg  0x00000000 , 0x00000011 
+ 00013701  0x00002533 branch  0x0000358c 
+ 00013702  0x00002536 arg  0x00000000 , 0x00000011 
+ 00013703  0x00002537 call  0x00007d19 
+ 00013704  0x00002538 arg  0x00000001 , 0x00000011 
+ 00013705  0x00002539 call  0x00007d19 
+ 00013706  0x0000253a fetch  0x00000001 , 0x000047a1 
+ 00013707  0x0000253b branch  0x000069d7 
+ 00013708  0x0000253e call  0x00007d04 
+ 00013709  0x0000253f arg  0x00000007 , 0x00000039 
+ 00013710  0x00002540 branch  0x00007d26 
+ 00013711  0x00002545 arg  0x000046b8 , 0x00000013 
+ 00013712  0x00002546 arg  0x0000469a , 0x00000012 
+ 00013713  0x00002548 call  0x00003596 
+ 00013714  0x00002549 call  0x00003584 
+ 00013715  0x0000254a fetch  0x00000002 , 0x00004795 
+ 00013716  0x0000254b store  0x00000002 , 0x00004793 
+ 00013717  0x0000254c branch  0x000033fa 
+ 00013718  0x0000254f ifetch  0x00000002 , 0x00000012 
+ 00013719  0x00002550 store  0x00000002 , 0x00004154 
+ 00013720  0x00002551 ifetch  0x00000002 , 0x00000006 
+ 00013721  0x00002552 store  0x00000002 , 0x00004482 
+ 00013722  0x00002553 rtn 
+ 00013723  0x00002556 arg  0x00000000 , 0x00000011 
+ 00013724  0x00002557 call  0x000069a6 
+ 00013725  0x00002558 fetch  0x00000006 , 0x000047a1 
+ 00013726  0x00002559 store  0x00000006 , 0x00000a9a 
+ 00013727  0x0000255a call  0x000069ae 
+ 00013728  0x0000255b fetch  0x00000001 , 0x000047a1 
+ 00013729  0x0000255c branch  0x000069d7 
+ 00013730  0x0000255f jam  0x00000001 , 0x0000479b 
+ 00013731  0x00002560 rtn 
+ 00013732  0x00002562 jam  0x00000000 , 0x0000479b 
+ 00013733  0x00002563 rtn 
+ 00013734  0x00002568 jam  0x00000000 , 0x0000479c 
+ 00013735  0x00002569 fetch  0x00000001 , 0x000047a1 
+ 00013736  0x0000256a branch  0x000069d7 
+ 00013737  0x0000256d jam  0x00000001 , 0x0000479c 
+ 00013738  0x0000256e fetch  0x00000006 , 0x000047a1 
+ 00013739  0x0000256f store  0x00000006 , 0x00000a9a 
+ 00013740  0x00002570 branch  0x000069ae 
+ 00013741  0x00002575 jam  0x00000000 , 0x0000422d 
+ 00013742  0x00002576 branch  0x000068a8 
+ 00013743  0x00002579 call  0x000068eb 
+ 00013744  0x0000257a call  0x00006908 
+ 00013745  0x0000257b store  0x00000002 , 0x000047b0 
+ 00013746  0x0000257c arg  0x000047aa , 0x00000011 
+ 00013747  0x0000257d call  0x00006930 
+ 00013748  0x0000257e store  0x00000001 , 0x000047a9 
+ 00013749  0x0000257f beq  0x00000000 , 0x000035be 
+ 00013750  0x00002580 sub  0x0000003f , 0x00000064 , 0x0000003e 
+ 00013751  0x00002581 nbranch  0x000035bc , 0x00000002 
+ 00013752  0x00002582 store  0x00000001 , 0x00004783 
+ 00013753  0x00002584 jam  0x00000005 , 0x00004780 
+ 00013754  0x00002585 arg  0x0000477b , 0x00000013 
+ 00013755  0x00002586 branch  0x00003544 
+ 00013756  0x00002588 jam  0x00000064 , 0x00004783 
+ 00013757  0x00002589 branch  0x000035b9 
+ 00013758  0x0000258c branch  0x0000341a 
+ 00013759  0x00002591 rtn  0x0000002b 
+ 00013760  0x00002592 hfetch  0x00000001 , 0x00008081 
+ 00013761  0x00002593 and_into  0x000000f0 , 0x0000003f 
+ 00013762  0x00002594 hstore  0x00000001 , 0x00008081 
+ 00013763  0x00002595 setarg  0x00003631 
+ 00013764  0x00002596 store  0x00000002 , 0x000041eb 
+ 00013765  0x00002598 setarg  0x00003633 
+ 00013766  0x00002599 store  0x00000002 , 0x000041ed 
+ 00013767  0x0000259b setarg  0x0000340a 
+ 00013768  0x0000259c store  0x00000002 , 0x000041f7 
+ 00013769  0x0000259e setarg  0x00003635 
+ 00013770  0x0000259f store  0x00000002 , 0x000041f3 
+ 00013771  0x000025a1 setarg  0x0000364b 
+ 00013772  0x000025a2 store  0x00000002 , 0x000041f5 
+ 00013773  0x000025a4 setarg  0x000033d0 
+ 00013774  0x000025a5 store  0x00000002 , 0x000041e9 
+ 00013775  0x000025a7 setarg  0x000036f6 
+ 00013776  0x000025a8 store  0x00000002 , 0x000041f9 
+ 00013777  0x000025aa setarg  0x0000367a 
+ 00013778  0x000025ab store  0x00000002 , 0x000041fd 
+ 00013779  0x000025ad call  0x00002c7a 
+ 00013780  0x000025ae setarg  0x00003722 
+ 00013781  0x000025af add  0x00000013 , 0x000000de , 0x00000005 
+ 00013782  0x000025b0 istore  0x00000002 , 0x00000005 
+ 00013783  0x000025b2 setarg  0x000035ed 
+ 00013784  0x000025b3 store  0x00000002 , 0x0000475b 
+ 00013785  0x000025b5 setarg  0x000035ef 
+ 00013786  0x000025b6 store  0x00000002 , 0x0000475f 
+ 00013787  0x000025b8 bpatch  0x000000cf , 0x00004019 
+ 00013788  0x000025b9 call  0x00003628 
+ 00013789  0x000025ba call  0x00007e38 
+ 00013790  0x000025bb jam  0x00000002 , 0x00004172 
+ 00013791  0x000025bc jam  0x00000000 , 0x000049f6 
+ 00013792  0x000025bd fetch  0x00000001 , 0x000047cb 
+ 00013793  0x000025be store  0x00000001 , 0x0000469a 
+ 00013794  0x000025bf beq  0x00000000 , 0x000035ee 
+ 00013795  0x000025c0 fetch  0x00000001 , 0x000047cc 
+ 00013796  0x000025c1 store  0x00000001 , 0x00004686 
+ 00013797  0x000025c2 jam  0x00000000 , 0x0000436e 
+ 00013798  0x000025c4 call  0x0000360f 
+ 00013799  0x000025c5 call  0x00007cd3 
+ 00013800  0x000025c6 call  0x00007cdd 
+ 00013801  0x000025c7 jam  0x00000001 , 0x000047f3 
+ 00013802  0x000025c8 fetch  0x00000002 , 0x00004682 
+ 00013803  0x000025c9 rtnbit1  0x0000000c 
+ 00013804  0x000025ca branch  0x0000340a 
+ 00013805  0x000025cd branch  0x0000360f 
+ 00013806  0x000025d0 jam  0x00000002 , 0x000047f3 
+ 00013807  0x000025d2 jam  0x00000001 , 0x0000436e 
+ 00013808  0x000025d3 call  0x0000360f 
+ 00013809  0x000025d4 arg  0x00000000 , 0x00000011 
+ 00013810  0x000025d5 call  0x00007d1e 
+ 00013811  0x000025d7 setarg  0x00000020 
+ 00013812  0x000025d8 call  0x000046f0 
+ 00013813  0x000025da arg  0x000043b7 , 0x00000005 
+ 00013814  0x000025db fetch  0x00000001 , 0x000044a0 
+ 00013815  0x000025dd and  0x0000003f , 0x000000f0 , 0x00000002 
+ 00013816  0x000025de rshift4  0x00000002 , 0x00000002 
+ 00013817  0x000025df call  0x00003609 
+ 00013818  0x000025e0 istoret  0x00000001 , 0x00000005 
+ 00013819  0x000025e1 and  0x0000003f , 0x0000000f , 0x00000002 
+ 00013820  0x000025e2 call  0x00003609 
+ 00013821  0x000025e3 istoret  0x00000001 , 0x00000005 
+ 00013822  0x000025e4 call  0x000057a6 
+ 00013823  0x000025e5 fetcht  0x00000001 , 0x000043af 
+ 00013824  0x000025e6 copy  0x00000002 , 0x00000039 
+ 00013825  0x000025e7 arg  0x00004372 , 0x00000005 
+ 00013826  0x000025e8 arg  0x000043b0 , 0x00000006 
+ 00013827  0x000025e9 call  0x00007f01 
+ 00013828  0x000025eb fetcht  0x00000001 , 0x000043af 
+ 00013829  0x000025ec copy  0x00000002 , 0x00000039 
+ 00013830  0x000025ed arg  0x00004392 , 0x00000005 
+ 00013831  0x000025ee arg  0x000043b0 , 0x00000006 
+ 00013832  0x000025ef branch  0x00007f01 
+ 00013833  0x000025f1 sub  0x00000002 , 0x00000009 , 0x0000003e 
+ 00013834  0x000025f2 branch  0x0000360d , 0x00000002 
+ 00013835  0x000025f3 add  0x00000002 , 0x00000037 , 0x00000002 
+ 00013836  0x000025f4 rtn 
+ 00013837  0x000025f6 add  0x00000002 , 0x00000030 , 0x00000002 
+ 00013838  0x000025f7 rtn 
+ 00013839  0x000025fa fetch  0x00000001 , 0x000047c0 
+ 00013840  0x000025fb bne  0x000000ff , 0x00003621 
+ 00013841  0x000025fd fetch  0x00000001 , 0x000047be 
+ 00013842  0x000025fe bne  0x000000ff , 0x00003624 
+ 00013843  0x00002600 fetch  0x00000001 , 0x000047c9 
+ 00013844  0x00002601 bne  0x000000ff , 0x00003626 
+ 00013845  0x00002603 fetch  0x00000001 , 0x0000472c 
+ 00013846  0x00002604 copy  0x0000003f , 0x00000039 
+ 00013847  0x00002605 setarg  0x0000472d 
+ 00013848  0x00002606 copy  0x0000003f , 0x00000011 
+ 00013849  0x00002608 copy  0x00000011 , 0x00000006 
+ 00013850  0x00002609 ifetch  0x00000001 , 0x00000006 
+ 00013851  0x0000260a copy  0x00000006 , 0x00000011 
+ 00013852  0x0000260b beq  0x000000ff , 0x0000361f 
+ 00013853  0x0000260c copy  0x0000003f , 0x00000002 
+ 00013854  0x0000260d call  0x0000680e 
+ 00013855  0x0000260f loop  0x00003619 
+ 00013856  0x00002611 rtn 
+ 00013857  0x00002613 fetch  0x00000008 , 0x000047c0 
+ 00013858  0x00002614 store  0x00000008 , 0x0000472f 
+ 00013859  0x00002615 branch  0x00003611 
+ 00013860  0x00002617 store  0x00000001 , 0x0000472d 
+ 00013861  0x00002618 branch  0x00003613 
+ 00013862  0x0000261a store  0x00000001 , 0x0000472e 
+ 00013863  0x0000261b branch  0x00003615 
+ 00013864  0x0000261f arg  0x00000000 , 0x00000011 
+ 00013865  0x00002620 call  0x000069a6 
+ 00013866  0x00002621 call  0x000037e4 
+ 00013867  0x00002622 call  0x00002c7d 
+ 00013868  0x00002623 branch  0x0000362d 
+ 00013869  0x00002626 jam  0x00000064 , 0x000047cf 
+ 00013870  0x00002627 fetch  0x00000001 , 0x000047c9 
+ 00013871  0x00002628 store  0x00000001 , 0x00004744 
+ 00013872  0x00002629 branch  0x000068a8 
+ 00013873  0x0000262c call  0x00006835 
+ 00013874  0x0000262d branch  0x0000696c 
+ 00013875  0x00002630 branch  0x0000696c 
+ 00013876  0x00002635 branch  0x00006978 
+ 00013877  0x00002638 call  0x00003642 
+ 00013878  0x00002639 call  0x000037ee 
+ 00013879  0x0000263a call  0x00003639 
+ 00013880  0x0000263b branch  0x00003634 
+ 00013881  0x0000263e fetch  0x00000002 , 0x00004682 
+ 00013882  0x0000263f rtnbit1  0x00000009 
+ 00013883  0x00002640 fetch  0x00000001 , 0x000049f6 
+ 00013884  0x00002641 beq  0x00000001 , 0x0000363e 
+ 00013885  0x00002642 rtn 
+ 00013886  0x00002644 fetch  0x00000001 , 0x000047ea 
+ 00013887  0x00002645 rtneq  0x00000001 
+ 00013888  0x00002646 jam  0x00000001 , 0x000047ea 
+ 00013889  0x00002647 branch  0x00003654 
+ 00013890  0x0000264a fetch  0x00000002 , 0x00004682 
+ 00013891  0x0000264b rtnbit0  0x00000009 
+ 00013892  0x0000264c call  0x00005892 
+ 00013893  0x0000264d nrtn  0x00000034 
+ 00013894  0x0000264e arg  0x00004718 , 0x00000011 
+ 00013895  0x0000264f call  0x00007e54 
+ 00013896  0x00002650 nrtn  0x00000028 
+ 00013897  0x00002651 arg  0x00004718 , 0x00000006 
+ 00013898  0x00002652 branch  0x00004746 
+ 00013899  0x00002655 copy  0x00000013 , 0x0000003f 
+ 00013900  0x00002656 beq  0x0000002d , 0x00003431 
+ 00013901  0x00002657 beq  0x00000010 , 0x0000341a 
+ 00013902  0x00002658 beq  0x00000014 , 0x00003651 
+ 00013903  0x00002659 beq  0x00000015 , 0x00003660 
+ 00013904  0x0000265a rtn 
+ 00013905  0x0000265d setarg  0x00000000 
+ 00013906  0x0000265e call  0x00003220 
+ 00013907  0x0000265f branch  0x00003656 
+ 00013908  0x00002661 fetch  0x00000002 , 0x000047eb 
+ 00013909  0x00002662 store  0x00000002 , 0x000047ed 
+ 00013910  0x00002664 jam  0x00000014 , 0x000047ce 
+ 00013911  0x00002665 jam  0x00000000 , 0x00004091 
+ 00013912  0x00002666 call  0x000033f8 
+ 00013913  0x00002667 call  0x00003416 
+ 00013914  0x00002668 fetch  0x00000001 , 0x000047bd 
+ 00013915  0x00002669 beq  0x00000001 , 0x0000365e 
+ 00013916  0x0000266b arg  0x00000000 , 0x00000011 
+ 00013917  0x0000266c branch  0x00007d14 
+ 00013918  0x0000266e arg  0x00000000 , 0x00000011 
+ 00013919  0x0000266f branch  0x00007d19 
+ 00013920  0x00002672 setarg  0x00000002 
+ 00013921  0x00002673 call  0x00003220 
+ 00013922  0x00002675 setarg  0x00000000 
+ 00013923  0x00002676 store  0x00000005 , 0x0000479c 
+ 00013924  0x00002677 setarg  0x00000004 
+ 00013925  0x00002678 call  0x000069d7 
+ 00013926  0x00002679 setarg  0x00000005 
+ 00013927  0x0000267a call  0x000069d7 
+ 00013928  0x0000267b setarg  0x00000014 
+ 00013929  0x0000267c call  0x000069d7 
+ 00013930  0x0000267d setarg  0x00000015 
+ 00013931  0x0000267e call  0x000069d7 
+ 00013932  0x0000267f setarg  0x00000016 
+ 00013933  0x00002680 call  0x000069d7 
+ 00013934  0x00002681 setarg  0x00000007 
+ 00013935  0x00002682 call  0x000069d7 
+ 00013936  0x00002683 call  0x00007e38 
+ 00013937  0x00002684 jam  0x0000000a , 0x0000475e 
+ 00013938  0x00002685 jam  0x0000000a , 0x00004760 
+ 00013939  0x00002686 jam  0x0000000a , 0x00004762 
+ 00013940  0x00002688 jam  0x00000002 , 0x00004172 
+ 00013941  0x00002689 arg  0x00000000 , 0x00000011 
+ 00013942  0x0000268a call  0x00007d1e 
+ 00013943  0x0000268c setarg  0x00000020 
+ 00013944  0x0000268d call  0x000046f0 
+ 00013945  0x0000268e branch  0x000033fa 
+ 00013946  0x00002692 call  0x0000373b 
+ 00013947  0x00002693 call  0x0000373e 
+ 00013948  0x00002694 call  0x00003741 
+ 00013949  0x00002695 call  0x0000337b 
+ 00013950  0x00002696 call  0x000036c8 
+ 00013951  0x00002697 call  0x000036a1 
+ 00013952  0x00002698 call  0x0000368a 
+ 00013953  0x00002699 call  0x00003683 
+ 00013954  0x0000269a branch  0x0000368f 
+ 00013955  0x0000269d arg  0x0000479a , 0x00000013 
+ 00013956  0x0000269e arg  0x00003686 , 0x00000012 
+ 00013957  0x0000269f branch  0x0000336d 
+ 00013958  0x000026a1 call  0x00003847 
+ 00013959  0x000026a2 nrtn  0x00000001 
+ 00013960  0x000026a3 jam  0x00000001 , 0x0000479b 
+ 00013961  0x000026a4 rtn 
+ 00013962  0x000026a7 arg  0x000047ed , 0x00000013 
+ 00013963  0x000026a8 arg  0x0000368d , 0x00000012 
+ 00013964  0x000026a9 branch  0x00003374 
+ 00013965  0x000026ab jam  0x00000002 , 0x000047ea 
+ 00013966  0x000026ac branch  0x00003662 
+ 00013967  0x000026af arg  0x000047f1 , 0x00000013 
+ 00013968  0x000026b0 arg  0x00003692 , 0x00000012 
+ 00013969  0x000026b1 branch  0x0000336d 
+ 00013970  0x000026b3 fetch  0x00000001 , 0x000047f2 
+ 00013971  0x000026b4 branch  0x0000369e , 0x00000034 
+ 00013972  0x000026b5 jam  0x00000002 , 0x000047f1 
+ 00013973  0x000026b6 jam  0x00000000 , 0x000047f2 
+ 00013974  0x000026b7 setarg  0x00000a02 
+ 00013975  0x000026b8 store  0x00000002 , 0x00004752 
+ 00013976  0x000026b9 fetch  0x00000001 , 0x000047b9 
+ 00013977  0x000026ba beq  0x00000003 , 0x0000369b 
+ 00013978  0x000026bc branch  0x00003762 
+ 00013979  0x000026be setarg  0x00000a02 
+ 00013980  0x000026bf store  0x00000002 , 0x00004754 
+ 00013981  0x000026c0 branch  0x00003762 
+ 00013982  0x000026c2 setarg  0x00000000 
+ 00013983  0x000026c3 store  0x00000004 , 0x00004752 
+ 00013984  0x000026c4 branch  0x00003762 
+ 00013985  0x000026c7 fetch  0x00000001 , 0x000047c8 
+ 00013986  0x000026c8 rtn  0x00000034 
+ 00013987  0x000026c9 fetch  0x00000002 , 0x00004682 
+ 00013988  0x000026ca bbit0  0x00000009 , 0x000036c6 
+ 00013989  0x000026cb arg  0x000047ce , 0x00000013 
+ 00013990  0x000026cc arg  0x000036a8 , 0x00000012 
+ 00013991  0x000026cd branch  0x0000336d 
+ 00013992  0x000026cf fetch  0x00000001 , 0x000047cd 
+ 00013993  0x000026d0 store  0x00000001 , 0x000047ce 
+ 00013994  0x000026d1 fetch  0x00000001 , 0x000047d1 
+ 00013995  0x000026d2 nrtn  0x00000034 
+ 00013996  0x000026d4 call  0x000068eb 
+ 00013997  0x000026d5 call  0x00006908 
+ 00013998  0x000026d6 store  0x00000002 , 0x000047e8 
+ 00013999  0x000026d7 arg  0x000047e2 , 0x00000011 
+ 00014000  0x000026d8 call  0x00006930 
+ 00014001  0x000026d9 fetcht  0x00000001 , 0x000047cf 
+ 00014002  0x000026da isub  0x00000002 , 0x0000003e 
+ 00014003  0x000026db branch  0x000036b6 , 0x00000002 
+ 00014004  0x000026dc store  0x00000001 , 0x000047cf 
+ 00014005  0x000026dd copy  0x0000003f , 0x00000002 
+ 00014006  0x000026df storet  0x00000001 , 0x000047d0 
+ 00014007  0x000026e0 fetch  0x00000001 , 0x000047ca 
+ 00014008  0x000026e1 isub  0x00000002 , 0x0000003e 
+ 00014009  0x000026e2 call  0x000036c1 , 0x00000002 
+ 00014010  0x000026e3 storet  0x00000001 , 0x000047db 
+ 00014011  0x000026e4 arg  0x00000006 , 0x00000039 
+ 00014012  0x000026e5 arg  0x000047d6 , 0x00000006 
+ 00014013  0x000026e6 call  0x000036f0 
+ 00014014  0x000026e7 store  0x00000001 , 0x000047dc 
+ 00014015  0x000026e8 arg  0x000047d3 , 0x00000011 
+ 00014016  0x000026e9 branch  0x00007e3d 
+ 00014017  0x000026eb fetch  0x00000001 , 0x000047d2 
+ 00014018  0x000026ec nrtn  0x00000034 
+ 00014019  0x000026ed jam  0x00000001 , 0x000047d2 
+ 00014020  0x000026ee arg  0x00000001 , 0x00000011 
+ 00014021  0x000026ef branch  0x00007d1e 
+ 00014022  0x000026f1 arg  0x00000001 , 0x00000011 
+ 00014023  0x000026f2 branch  0x00007d19 
+ 00014024  0x000026f5 arg  0x000047a4 , 0x00000013 
+ 00014025  0x000026f6 arg  0x000036cb , 0x00000012 
+ 00014026  0x000026f7 branch  0x0000336d 
+ 00014027  0x000026f9 jam  0x00000005 , 0x000047a4 
+ 00014028  0x000026fa jam  0x00000000 , 0x000047a6 
+ 00014029  0x000026fb fetch  0x00000001 , 0x000047a5 
+ 00014030  0x000026fc beq  0x00000001 , 0x000036ee 
+ 00014031  0x000026fd beq  0x00000000 , 0x000036ec 
+ 00014032  0x000026ff arg  0x0000479c , 0x00000006 
+ 00014033  0x00002700 copy  0x00000006 , 0x00000011 
+ 00014034  0x00002701 arg  0x00000008 , 0x00000039 
+ 00014035  0x00002703 copy  0x00000011 , 0x00000006 
+ 00014036  0x00002704 ifetch  0x00000001 , 0x00000006 
+ 00014037  0x00002705 copy  0x00000006 , 0x00000011 
+ 00014038  0x00002706 beq  0x00000000 , 0x000036e3 
+ 00014039  0x00002707 beq  0x00000001 , 0x000036e6 
+ 00014040  0x00002708 beq  0x00000002 , 0x000036e9 
+ 00014041  0x0000270a fetch  0x00000001 , 0x000047a6 
+ 00014042  0x0000270b increase  0x00000001 , 0x0000003f 
+ 00014043  0x0000270c store  0x00000001 , 0x000047a6 
+ 00014044  0x0000270d loop  0x000036d3 
+ 00014045  0x0000270e rtn 
+ 00014046  0x00002710 fetch  0x00000001 , 0x000047a6 
+ 00014047  0x00002711 arg  0x000047c0 , 0x00000012 
+ 00014048  0x00002712 iadd  0x00000012 , 0x00000012 
+ 00014049  0x00002713 ifetcht  0x00000001 , 0x00000012 
+ 00014050  0x00002714 rtn 
+ 00014051  0x00002716 call  0x000036de 
+ 00014052  0x00002717 call  0x00006825 
+ 00014053  0x00002718 branch  0x000036d9 
+ 00014054  0x0000271a call  0x000036de 
+ 00014055  0x0000271b call  0x00006829 
+ 00014056  0x0000271c branch  0x000036d9 
+ 00014057  0x0000271e fetch  0x00000001 , 0x000047a5 
+ 00014058  0x0000271f beq  0x00000001 , 0x000036e3 
+ 00014059  0x00002720 branch  0x000036e6 
+ 00014060  0x00002722 jam  0x00000001 , 0x000047a5 
+ 00014061  0x00002723 branch  0x000036d0 
+ 00014062  0x00002725 jam  0x00000000 , 0x000047a5 
+ 00014063  0x00002726 branch  0x000036d0 
+ 00014064  0x0000272b arg  0x00000000 , 0x00000011 
+ 00014065  0x0000272d ifetch  0x00000001 , 0x00000006 
+ 00014066  0x0000272e iadd  0x00000011 , 0x00000011 
+ 00014067  0x0000272f loop  0x000036f1 
+ 00014068  0x00002731 and  0x00000011 , 0x000000ff , 0x0000003f 
+ 00014069  0x00002732 rtn 
+ 00014070  0x00002735 fetch  0x00000001 , 0x00000477 
+ 00014071  0x00002736 beq  0x00000012 , 0x000036f9 
+ 00014072  0x00002737 rtn 
+ 00014073  0x00002739 fetch  0x00000002 , 0x00000478 
+ 00014074  0x0000273a beq  0x00000014 , 0x00003710 
+ 00014075  0x0000273b rtn 
+ 00014076  0x00002748 bpatch  0x000000d0 , 0x0000401a 
+ 00014077  0x00002749 ifetch  0x00000005 , 0x00000011 
+ 00014078  0x0000274a store  0x00000005 , 0x00000b12 
+ 00014079  0x0000274b fetch  0x00000002 , 0x00000b12 
+ 00014080  0x0000274c arg  0x00006b5a , 0x00000002 
+ 00014081  0x0000274d isub  0x00000002 , 0x0000003e 
+ 00014082  0x0000274e nrtn  0x00000005 
+ 00014083  0x0000274f fetch  0x00000002 , 0x00000b15 
+ 00014084  0x00002750 byteswap  0x0000003f , 0x0000003f 
+ 00014085  0x00002751 store  0x00000002 , 0x00000b15 
+ 00014086  0x00002752 copy  0x0000003f , 0x00000039 
+ 00014087  0x00002753 increase  0x00000005 , 0x00000011 
+ 00014088  0x00002754 copy  0x00000011 , 0x00000006 
+ 00014089  0x00002755 arg  0x00000b17 , 0x00000005 
+ 00014090  0x00002756 call  0x00007f01 
+ 00014091  0x00002757 ifetch  0x00000001 , 0x00000006 
+ 00014092  0x00002758 store  0x00000001 , 0x00000b21 
+ 00014093  0x00002759 arg  0x00000b14 , 0x00000011 
+ 00014094  0x0000275a arg  0x00000b17 , 0x00000012 
+ 00014095  0x0000275b rtn 
+ 00014096  0x0000275e setarg  0x00000000 
+ 00014097  0x0000275f store  0x00000005 , 0x00004752 
+ 00014098  0x00002760 store  0x00000005 , 0x00004757 
+ 00014099  0x00002761 call  0x000036fc 
+ 00014100  0x00002762 copy  0x00000012 , 0x00000006 
+ 00014101  0x00002763 arg  0x00004752 , 0x00000005 
+ 00014102  0x00002764 arg  0x0000000a , 0x00000039 
+ 00014103  0x00002765 call  0x00007f01 
+ 00014104  0x00002767 bpatch  0x000000d1 , 0x0000401a 
+ 00014105  0x00002768 ifetch  0x00000001 , 0x00000011 
+ 00014106  0x00002769 beq  0x00000002 , 0x0000374a 
+ 00014107  0x0000276a beq  0x00000003 , 0x0000375c 
+ 00014108  0x0000276b beq  0x00000004 , 0x00003762 
+ 00014109  0x0000276c beq  0x00000005 , 0x00003762 
+ 00014110  0x0000276d beq  0x00000006 , 0x000037b1 
+ 00014111  0x0000276e beq  0x00000007 , 0x00003849 
+ 00014112  0x0000276f beq  0x00000008 , 0x0000384c 
+ 00014113  0x00002770 rtn 
+ 00014114  0x00002773 fetch  0x00000002 , 0x00004682 
+ 00014115  0x00002774 rtnbit1  0x00000009 
+ 00014116  0x00002776 fetch  0x00000002 , 0x000047eb 
+ 00014117  0x00002777 store  0x00000002 , 0x000047ed 
+ 00014118  0x00002779 jam  0x00000001 , 0x000049f6 
+ 00014119  0x0000277b setarg  0x0000010c 
+ 00014120  0x0000277c call  0x000032cd 
+ 00014121  0x0000277d call  0x00003710 
+ 00014122  0x0000277f fetch  0x00000001 , 0x00000b14 
+ 00014123  0x00002780 beq  0x00000004 , 0x0000372e 
+ 00014124  0x00002781 beq  0x00000005 , 0x0000372e 
+ 00014125  0x00002782 rtn 
+ 00014126  0x00002784 fetch  0x00000001 , 0x00004752 
+ 00014127  0x00002785 ncall  0x00003735 , 0x00000034 
+ 00014128  0x00002786 fetch  0x00000001 , 0x00004754 
+ 00014129  0x00002787 ncall  0x00003737 , 0x00000034 
+ 00014130  0x00002788 fetch  0x00000001 , 0x00004756 
+ 00014131  0x00002789 ncall  0x00003739 , 0x00000034 
+ 00014132  0x0000278a rtn 
+ 00014133  0x0000278d jam  0x00000005 , 0x000049f3 
+ 00014134  0x0000278e rtn 
+ 00014135  0x00002790 jam  0x00000005 , 0x000049f4 
+ 00014136  0x00002791 rtn 
+ 00014137  0x00002793 jam  0x00000005 , 0x000049f5 
+ 00014138  0x00002794 rtn 
+ 00014139  0x00002797 arg  0x000049f3 , 0x00000013 
+ 00014140  0x00002798 arg  0x00003744 , 0x00000012 
+ 00014141  0x00002799 branch  0x0000336d 
+ 00014142  0x0000279b arg  0x000049f4 , 0x00000013 
+ 00014143  0x0000279c arg  0x00003746 , 0x00000012 
+ 00014144  0x0000279d branch  0x0000336d 
+ 00014145  0x0000279f arg  0x000049f5 , 0x00000013 
+ 00014146  0x000027a0 arg  0x00003748 , 0x00000012 
+ 00014147  0x000027a1 branch  0x0000336d 
+ 00014148  0x000027a4 jam  0x00000000 , 0x00004752 
+ 00014149  0x000027a5 branch  0x00003762 
+ 00014150  0x000027a7 jam  0x00000000 , 0x00004754 
+ 00014151  0x000027a8 branch  0x00003762 
+ 00014152  0x000027aa jam  0x00000000 , 0x00004756 
+ 00014153  0x000027ab branch  0x00003762 
+ 00014154  0x000027b1 call  0x0000374c 
+ 00014155  0x000027b2 branch  0x0000374f 
+ 00014156  0x000027b4 fetch  0x00000001 , 0x00004752 
+ 00014157  0x000027b5 store  0x00000001 , 0x0000475f 
+ 00014158  0x000027b6 branch  0x00003773 
+ 00014159  0x000027b8 fetch  0x00000001 , 0x0000475e 
+ 00014160  0x000027b9 call  0x00003754 
+ 00014161  0x000027ba fetch  0x00000001 , 0x00004753 
+ 00014162  0x000027bb store  0x00000001 , 0x0000475d 
+ 00014163  0x000027bc branch  0x00003770 
+ 00014164  0x000027be beq  0x00000002 , 0x00003758 
+ 00014165  0x000027bf beq  0x00000003 , 0x0000375a 
+ 00014166  0x000027c0 store  0x00000001 , 0x0000475e 
+ 00014167  0x000027c1 rtn 
+ 00014168  0x000027c3 jam  0x00000005 , 0x0000475e 
+ 00014169  0x000027c4 rtn 
+ 00014170  0x000027c6 jam  0x0000000a , 0x0000475e 
+ 00014171  0x000027c7 rtn 
+ 00014172  0x000027c9 fetch  0x00000001 , 0x00004752 
+ 00014173  0x000027ca call  0x00003754 
+ 00014174  0x000027cb fetch  0x00000001 , 0x0000475e 
+ 00014175  0x000027cc call  0x0000379e 
+ 00014176  0x000027cd call  0x000037a1 
+ 00014177  0x000027ce branch  0x000069c4 
+ 00014178  0x000027d1 fetch  0x00000001 , 0x000047f0 
+ 00014179  0x000027d2 nrtn  0x00000034 
+ 00014180  0x000027d3 fetch  0x00000006 , 0x00004752 
+ 00014181  0x000027d4 store  0x00000006 , 0x0000475d 
+ 00014182  0x000027d5 fetch  0x00000001 , 0x0000475e 
+ 00014183  0x000027d6 fetcht  0x00000001 , 0x00004760 
+ 00014184  0x000027d7 iand  0x00000002 , 0x0000003f 
+ 00014185  0x000027d8 fetcht  0x00000001 , 0x00004762 
+ 00014186  0x000027d9 iand  0x00000002 , 0x0000003f 
+ 00014187  0x000027da call  0x00003779 , 0x00000034 
+ 00014188  0x000027db bpatch  0x000000d2 , 0x0000401a 
+ 00014189  0x000027dc call  0x00003770 
+ 00014190  0x000027dd call  0x00003773 
+ 00014191  0x000027de branch  0x00003776 
+ 00014192  0x000027e0 arg  0x00004763 , 0x00000012 
+ 00014193  0x000027e1 arg  0x0000475d , 0x00000006 
+ 00014194  0x000027e2 branch  0x0000377b 
+ 00014195  0x000027e4 arg  0x0000476b , 0x00000012 
+ 00014196  0x000027e5 arg  0x0000475f , 0x00000006 
+ 00014197  0x000027e6 branch  0x0000377b 
+ 00014198  0x000027e8 arg  0x00004773 , 0x00000012 
+ 00014199  0x000027e9 arg  0x00004761 , 0x00000006 
+ 00014200  0x000027ea branch  0x0000377b 
+ 00014201  0x000027ec jam  0x00000000 , 0x000047d1 
+ 00014202  0x000027ed rtn 
+ 00014203  0x000027f0 ifetch  0x00000001 , 0x00000006 
+ 00014204  0x000027f1 beq  0x00000000 , 0x00003787 
+ 00014205  0x000027f2 beq  0x00000001 , 0x00003780 
+ 00014206  0x000027f3 beq  0x00000002 , 0x00003782 
+ 00014207  0x000027f4 rtn 
+ 00014208  0x000027f6 jam  0x00000000 , 0x0000477b 
+ 00014209  0x000027f7 branch  0x00003783 
+ 00014210  0x000027f9 jam  0x00000001 , 0x0000477b 
+ 00014211  0x000027fa ifetch  0x00000001 , 0x00000006 
+ 00014212  0x000027fb store  0x00000001 , 0x0000477d 
+ 00014213  0x000027fc ifetch  0x00000008 , 0x00000012 
+ 00014214  0x000027fd branch  0x0000378c 
+ 00014215  0x00002800 ifetch  0x00000001 , 0x00000012 
+ 00014216  0x00002801 call  0x000069d7 
+ 00014217  0x00002802 increase  0x00000001 , 0x00000012 
+ 00014218  0x00002803 ifetch  0x00000001 , 0x00000012 
+ 00014219  0x00002804 branch  0x000069d7 
+ 00014220  0x00002806 store  0x00000008 , 0x0000477e 
+ 00014221  0x00002807 jam  0x00000001 , 0x000047d1 
+ 00014222  0x00002808 fetch  0x00000001 , 0x0000477b 
+ 00014223  0x00002809 beq  0x00000000 , 0x0000379a 
+ 00014224  0x0000280b fetch  0x00000001 , 0x0000477f 
+ 00014225  0x0000280c store  0x00000001 , 0x00004780 
+ 00014226  0x0000280d fetch  0x00000001 , 0x0000477e 
+ 00014227  0x0000280f call  0x000069d7 
+ 00014228  0x00002810 fetch  0x00000001 , 0x0000477d 
+ 00014229  0x00002811 call  0x0000379e 
+ 00014230  0x00002812 store  0x00000001 , 0x00004785 
+ 00014231  0x00002813 fetch  0x00000006 , 0x00004780 
+ 00014232  0x00002814 store  0x00000006 , 0x00000a9a 
+ 00014233  0x00002815 branch  0x000069ae 
+ 00014234  0x00002817 fetch  0x00000001 , 0x0000477e 
+ 00014235  0x00002818 store  0x00000001 , 0x00004780 
+ 00014236  0x00002819 fetch  0x00000001 , 0x0000477f 
+ 00014237  0x0000281a branch  0x00003793 
+ 00014238  0x0000281d mul32  0x0000003f , 0x00000005 , 0x0000003f 
+ 00014239  0x0000281e add  0x0000003f , 0x00000032 , 0x0000003f 
+ 00014240  0x0000281f rtn 
+ 00014241  0x00002821 arg  0x00002ee0 , 0x00000002 
+ 00014242  0x00002822 imul32  0x00000002 , 0x0000003f 
+ 00014243  0x00002823 div  0x0000003f , 0x00000064 
+ 00014244  0x00002824 call  0x00007f86 
+ 00014245  0x00002825 quotient  0x00000002 
+ 00014246  0x00002826 copy  0x00000002 , 0x00000011 
+ 00014247  0x00002827 setarg  0x00002ee0 
+ 00014248  0x00002828 isub  0x00000002 , 0x00000012 
+ 00014249  0x00002829 rtn 
+ 00014250  0x0000282d hfetch  0x00000001 , 0x00008082 
+ 00014251  0x0000282e set1  0x00000002 , 0x0000003f 
+ 00014252  0x0000282f hstore  0x00000001 , 0x00008082 
+ 00014253  0x00002830 setarg  0x0000009e 
+ 00014254  0x00002831 hstore  0x00000002 , 0x00008068 
+ 00014255  0x00002832 hstore  0x00000002 , 0x0000806a 
+ 00014256  0x00002833 rtn 
+ 00014257  0x00002836 fetch  0x00000001 , 0x000047f0 
+ 00014258  0x00002837 nrtn  0x00000034 
+ 00014259  0x00002838 fetch  0x00000002 , 0x00004752 
+ 00014260  0x00002839 store  0x00000002 , 0x00004787 
+ 00014261  0x0000283a fetch  0x00000001 , 0x000047ea 
+ 00014262  0x0000283b bne  0x00000001 , 0x000037b9 
+ 00014263  0x0000283c fetch  0x00000002 , 0x000044a0 
+ 00014264  0x0000283d store  0x00000002 , 0x00004787 
+ 00014265  0x0000283f bpatch  0x000000d3 , 0x0000401a 
+ 00014266  0x00002840 call  0x000037aa 
+ 00014267  0x00002841 call  0x000037dc 
+ 00014268  0x00002842 setarg  0x0000bb80 
+ 00014269  0x00002843 call  0x00002a8f 
+ 00014270  0x00002844 call  0x000037e0 
+ 00014271  0x00002845 setarg  0x00001c20 
+ 00014272  0x00002846 call  0x00002a8f 
+ 00014273  0x00002847 arg  0x00000010 , 0x00000039 
+ 00014274  0x00002849 call  0x000037dc 
+ 00014275  0x0000284a fetch  0x00000002 , 0x00004787 
+ 00014276  0x0000284b bbit1  0x00000000 , 0x000037c9 
+ 00014277  0x0000284c setarg  0x00001c20 
+ 00014278  0x0000284d call  0x00002a8f 
+ 00014279  0x0000284e call  0x000037e0 
+ 00014280  0x0000284f branch  0x000037cc 
+ 00014281  0x00002852 setarg  0x00003840 
+ 00014282  0x00002853 call  0x00002a8f 
+ 00014283  0x00002854 call  0x000037e0 
+ 00014284  0x00002856 setarg  0x00001c20 
+ 00014285  0x00002857 call  0x00002a8f 
+ 00014286  0x00002858 fetch  0x00000002 , 0x00004787 
+ 00014287  0x00002859 rshift  0x0000003f , 0x0000003f 
+ 00014288  0x0000285a store  0x00000002 , 0x00004787 
+ 00014289  0x0000285b loop  0x000037c2 
+ 00014290  0x0000285d jam  0x00000002 , 0x000047f1 
+ 00014291  0x0000285e jam  0x00000001 , 0x000047f2 
+ 00014292  0x0000285f setarg  0x00000a01 
+ 00014293  0x00002860 store  0x00000002 , 0x00004752 
+ 00014294  0x00002861 fetch  0x00000001 , 0x000047b9 
+ 00014295  0x00002862 beq  0x00000003 , 0x000037d9 
+ 00014296  0x00002864 branch  0x00003762 
+ 00014297  0x00002866 setarg  0x00000a01 
+ 00014298  0x00002867 store  0x00000002 , 0x00004754 
+ 00014299  0x00002868 branch  0x00003762 
+ 00014300  0x0000286b hfetch  0x00000001 , 0x00008085 
+ 00014301  0x0000286c or_into  0x00000040 , 0x0000003f 
+ 00014302  0x0000286d hstore  0x00000001 , 0x00008085 
+ 00014303  0x0000286e rtn 
+ 00014304  0x00002870 hfetch  0x00000001 , 0x00008085 
+ 00014305  0x00002871 and_into  0x000000bf , 0x0000003f 
+ 00014306  0x00002872 hstore  0x00000001 , 0x00008085 
+ 00014307  0x00002873 rtn 
+ 00014308  0x00002876 fetch  0x00000001 , 0x000047bb 
+ 00014309  0x00002877 rtneq  0x00000000 
+ 00014310  0x00002878 call  0x00002c65 
+ 00014311  0x00002879 fetcht  0x00000001 , 0x000047bc 
+ 00014312  0x0000287a storet  0x00000001 , 0x00004786 
+ 00014313  0x0000287b call  0x000067fb 
+ 00014314  0x0000287c call  0x00003847 
+ 00014315  0x0000287d nrtn  0x00000001 
+ 00014316  0x0000287e jam  0x00000001 , 0x0000479a 
+ 00014317  0x0000287f rtn 
+ 00014318  0x00002882 fetch  0x00000001 , 0x000047bb 
+ 00014319  0x00002883 rtneq  0x00000000 
+ 00014320  0x00002884 fetch  0x00000001 , 0x0000479b 
+ 00014321  0x00002885 nrtn  0x00000034 
+ 00014322  0x00002886 fetch  0x00000002 , 0x00004682 
+ 00014323  0x00002887 bbit1  0x00000009 , 0x000037f6 
+ 00014324  0x00002888 fetch  0x00000001 , 0x000047ea 
+ 00014325  0x00002889 rtnne  0x00000001 
+ 00014326  0x0000288b bpatch  0x000000d4 , 0x0000401a 
+ 00014327  0x0000288c call  0x00003847 
+ 00014328  0x0000288d nrtn  0x00000001 
+ 00014329  0x0000288e setarg  0x00008ca0 
+ 00014330  0x0000288f call  0x00002a8f 
+ 00014331  0x00002890 call  0x00003847 
+ 00014332  0x00002891 nrtn  0x00000001 
+ 00014333  0x00002892 call  0x0000383f 
+ 00014334  0x00002894 call  0x00003842 
+ 00014335  0x00002895 nrtn  0x00000002 
+ 00014336  0x00002896 call  0x00003847 
+ 00014337  0x00002897 branch  0x000037fe , 0x00000001 
+ 00014338  0x00002898 arg  0x00000000 , 0x00000011 
+ 00014339  0x00002899 arg  0x00000010 , 0x00000039 
+ 00014340  0x0000289a call  0x0000383f 
+ 00014341  0x0000289c call  0x00003842 
+ 00014342  0x0000289d nrtn  0x00000002 
+ 00014343  0x0000289e call  0x00003847 
+ 00014344  0x0000289f nbranch  0x00003805 , 0x00000001 
+ 00014345  0x000028a0 setarg  0x00002a30 
+ 00014346  0x000028a1 call  0x00002a8f 
+ 00014347  0x000028a2 call  0x00003847 
+ 00014348  0x000028a3 branch  0x00003812 , 0x00000001 
+ 00014349  0x000028a5 setarg  0x00000000 
+ 00014350  0x000028a6 rshift  0x00000011 , 0x00000011 
+ 00014351  0x000028a7 ior  0x00000011 , 0x00000011 
+ 00014352  0x000028a8 loop  0x00003805 
+ 00014353  0x000028a9 branch  0x0000381b 
+ 00014354  0x000028ab setarg  0x00008000 
+ 00014355  0x000028ac rshift  0x00000011 , 0x00000011 
+ 00014356  0x000028ad ior  0x00000011 , 0x00000011 
+ 00014357  0x000028ae call  0x0000383f 
+ 00014358  0x000028b0 call  0x00003842 
+ 00014359  0x000028b1 nrtn  0x00000002 
+ 00014360  0x000028b2 call  0x00003847 
+ 00014361  0x000028b3 branch  0x00003816 , 0x00000001 
+ 00014362  0x000028b4 loop  0x00003805 
+ 00014363  0x000028b6 bpatch  0x000000d5 , 0x0000401a 
+ 00014364  0x000028b7 copy  0x00000011 , 0x0000003f 
+ 00014365  0x000028b8 store  0x00000002 , 0x00004789 
+ 00014366  0x000028b9 store  0x00000002 , 0x00004797 
+ 00014367  0x000028ba fetch  0x00000001 , 0x000047ea 
+ 00014368  0x000028bb beq  0x00000001 , 0x00003827 
+ 00014369  0x000028bd arg  0x00000007 , 0x00000039 
+ 00014370  0x000028be arg  0x00004792 , 0x00000006 
+ 00014371  0x000028bf call  0x000036f0 
+ 00014372  0x000028c0 store  0x00000001 , 0x00004799 
+ 00014373  0x000028c1 arg  0x0000478f , 0x00000011 
+ 00014374  0x000028c2 branch  0x00007e3d 
+ 00014375  0x000028c5 fetch  0x00000001 , 0x000047ef 
+ 00014376  0x000028c6 increase  0x00000001 , 0x0000003f 
+ 00014377  0x000028c7 store  0x00000001 , 0x000047ef 
+ 00014378  0x000028c8 div  0x0000003f , 0x00000002 
+ 00014379  0x000028c9 call  0x00007f86 
+ 00014380  0x000028ca quotient  0x00000002 
+ 00014381  0x000028cb remainder  0x0000003f 
+ 00014382  0x000028cc nbranch  0x00003838 , 0x00000034 
+ 00014383  0x000028ce fetch  0x00000001 , 0x000047bf 
+ 00014384  0x000028cf isub  0x00000002 , 0x0000003e 
+ 00014385  0x000028d0 call  0x0000383d , 0x00000005 
+ 00014386  0x000028d1 arg  0x0000479c , 0x0000003f 
+ 00014387  0x000028d2 increase  0xffffffff , 0x00000002 
+ 00014388  0x000028d3 iadd  0x00000002 , 0x00000011 
+ 00014389  0x000028d4 arg  0x00000000 , 0x0000003f 
+ 00014390  0x000028d5 istore  0x00000001 , 0x00000011 
+ 00014391  0x000028d6 rtn 
+ 00014392  0x000028d8 arg  0x0000479c , 0x0000003f 
+ 00014393  0x000028d9 iadd  0x00000002 , 0x00000011 
+ 00014394  0x000028da arg  0x00000002 , 0x0000003f 
+ 00014395  0x000028db istore  0x00000001 , 0x00000011 
+ 00014396  0x000028dc rtn 
+ 00014397  0x000028de jam  0x00000001 , 0x000047f0 
+ 00014398  0x000028df rtn 
+ 00014399  0x000028e1 copy  0x00000022 , 0x0000003f 
+ 00014400  0x000028e2 store  0x00000004 , 0x0000478b 
+ 00014401  0x000028e3 rtn 
+ 00014402  0x000028e5 copy  0x00000022 , 0x0000003f 
+ 00014403  0x000028e6 fetcht  0x00000004 , 0x0000478b 
+ 00014404  0x000028e7 isub  0x00000002 , 0x0000003f 
+ 00014405  0x000028e8 sub  0x0000003f , 0x000000c8 , 0x0000003e 
+ 00014406  0x000028e9 rtn 
+ 00014407  0x000028ec fetcht  0x00000001 , 0x00004786 
+ 00014408  0x000028ed branch  0x0000681d 
+ 00014409  0x000028f0 fetch  0x00000008 , 0x00004752 
+ 00014410  0x000028f1 store  0x00000008 , 0x0000479c 
+ 00014411  0x000028f2 rtn 
+ 00014412  0x000028f5 fetch  0x00000001 , 0x000047b9 
+ 00014413  0x000028f6 store  0x00000001 , 0x000047af 
+ 00014414  0x000028f7 fetch  0x00000001 , 0x000047ba 
+ 00014415  0x000028f8 store  0x00000001 , 0x000047b0 
+ 00014416  0x000028f9 fetch  0x00000001 , 0x000047bb 
+ 00014417  0x000028fa store  0x00000001 , 0x000047b1 
+ 00014418  0x000028fb arg  0x0000000d , 0x00000039 
+ 00014419  0x000028fc arg  0x000047aa , 0x00000006 
+ 00014420  0x000028fd call  0x000036f0 
+ 00014421  0x000028fe store  0x00000001 , 0x000047b7 
+ 00014422  0x000028ff arg  0x000047a7 , 0x00000011 
+ 00014423  0x00002900 branch  0x00007e3d 
+ 00014424  0x00002907 call  0x000065c2 
+ 00014425  0x00002908 jam  0x0000007a , 0x000046f6 
+ 00014426  0x00002909 call  0x0000386d 
+ 00014427  0x0000290a call  0x00003867 
+ 00014428  0x0000290b setarg  0x00003860 
+ 00014429  0x0000290c store  0x00000002 , 0x000041fd 
+ 00014430  0x0000290d arg  0x00000000 , 0x00000011 
+ 00014431  0x0000290e branch  0x000069a6 
+ 00014432  0x00002911 fetch  0x00000002 , 0x000046a1 
+ 00014433  0x00002912 rtn  0x00000034 
+ 00014434  0x00002913 increase  0xffffffff , 0x0000003f 
+ 00014435  0x00002914 store  0x00000002 , 0x000046a1 
+ 00014436  0x00002915 rtnne  0x00000000 
+ 00014437  0x00002916 jam  0x00000000 , 0x000046a0 
+ 00014438  0x00002917 rtn 
+ 00014439  0x0000291a bpatch  0x000000d6 , 0x0000401a 
+ 00014440  0x0000291b fetch  0x00000001 , 0x000046a4 
+ 00014441  0x0000291c sub  0x0000003f , 0x00000028 , 0x0000003e 
+ 00014442  0x0000291d rtn  0x00000002 
+ 00014443  0x0000291e jam  0x00000000 , 0x000046a4 
+ 00014444  0x0000291f rtn 
+ 00014445  0x00002922 arg  0x000046a4 , 0x00000011 
+ 00014446  0x00002923 arg  0x00000000 , 0x00000012 
+ 00014447  0x00002924 arg  0x00000051 , 0x00000002 
+ 00014448  0x00002925 branch  0x000065df 
+ 00014449  0x00002929 disable  0x00000028 
+ 00014450  0x0000292a fetch  0x00000001 , 0x000046a3 
+ 00014451  0x0000292b copy  0x0000003f , 0x00000039 
+ 00014452  0x0000292d arg  0x000046a5 , 0x00000011 
+ 00014453  0x0000292e copy  0x00000013 , 0x00000012 
+ 00014454  0x00002930 bpatch  0x000000d7 , 0x0000401a 
+ 00014455  0x00002931 call  0x0000387c 
+ 00014456  0x00002932 branch  0x00007fe7 , 0x00000005 
+ 00014457  0x00002934 increase  0x00000004 , 0x00000011 
+ 00014458  0x00002935 loop  0x00003876 
+ 00014459  0x00002936 rtn 
+ 00014460  0x0000293a bpatch  0x000000d8 , 0x0000401b 
+ 00014461  0x0000293b ifetch  0x00000003 , 0x00000011 
+ 00014462  0x0000293c ifetcht  0x00000003 , 0x00000012 
+ 00014463  0x0000293d isub  0x00000002 , 0x0000003e 
+ 00014464  0x0000293e rtn 
+ 00014465  0x00002941 bpatch  0x000000d9 , 0x0000401b 
+ 00014466  0x00002942 ifetch  0x00000003 , 0x00000011 
+ 00014467  0x00002943 ifetcht  0x00000003 , 0x00000012 
+ 00014468  0x00002944 isub  0x00000002 , 0x0000003e 
+ 00014469  0x00002945 nrtn  0x00000005 
+ 00014470  0x00002946 ifetch  0x00000001 , 0x00000006 
+ 00014471  0x00002947 sub  0x0000003f , 0x00000000 , 0x0000003e 
+ 00014472  0x00002948 rtn  0x00000005 
+ 00014473  0x00002949 add  0x00000011 , 0x00000003 , 0x00000006 
+ 00014474  0x0000294a ifetcht  0x00000001 , 0x00000006 
+ 00014475  0x0000294b isub  0x00000002 , 0x0000003e 
+ 00014476  0x0000294c rtn 
+ 00014477  0x00002950 bpatch  0x000000da , 0x0000401b 
+ 00014478  0x00002951 disable  0x00000028 
+ 00014479  0x00002952 fetch  0x00000001 , 0x000046a3 
+ 00014480  0x00002953 copy  0x0000003f , 0x00000039 
+ 00014481  0x00002955 arg  0x000046a5 , 0x00000011 
+ 00014482  0x00002956 copy  0x00000013 , 0x00000012 
+ 00014483  0x00002958 call  0x00003881 
+ 00014484  0x00002959 branch  0x00007fe7 , 0x00000005 
+ 00014485  0x0000295a increase  0x00000004 , 0x00000011 
+ 00014486  0x0000295b loop  0x00003893 
+ 00014487  0x0000295c rtn 
+ 00014488  0x00002960 fetch  0x00000001 , 0x00000004 
+ 00014489  0x00002961 increase  0x00000001 , 0x0000003f 
+ 00014490  0x00002962 store  0x00000001 , 0x00000004 
+ 00014491  0x00002963 arg  0x000002e5 , 0x00000013 
+ 00014492  0x00002966 ifetch  0x00000002 , 0x00000013 
+ 00014493  0x00002967 arg  0x000055aa , 0x00000002 
+ 00014494  0x00002968 isub  0x00000002 , 0x0000003e 
+ 00014495  0x00002969 nrtn  0x00000005 
+ 00014496  0x0000296a copy  0x00000006 , 0x00000013 
+ 00014497  0x0000296b ifetcht  0x00000003 , 0x00000013 
+ 00014498  0x0000296c setarg  0x00ffffff 
+ 00014499  0x0000296d isub  0x00000002 , 0x0000003e 
+ 00014500  0x0000296e branch  0x000038a8 , 0x00000005 
+ 00014501  0x0000296f call  0x0000388d 
+ 00014502  0x00002970 branch  0x000038a8 , 0x00000028 
+ 00014503  0x00002971 rtn 
+ 00014504  0x00002974 bpatch  0x000000db , 0x0000401b 
+ 00014505  0x00002975 increase  0x00000004 , 0x00000013 
+ 00014506  0x00002976 ifetch  0x00000001 , 0x00000013 
+ 00014507  0x00002977 fetcht  0x00000001 , 0x000046f6 
+ 00014508  0x00002978 isub  0x00000002 , 0x0000003e 
+ 00014509  0x00002979 rtn  0x00000005 
+ 00014510  0x0000297a store  0x00000001 , 0x000046f6 
+ 00014511  0x0000297b fetch  0x00000001 , 0x00000003 
+ 00014512  0x0000297c increase  0x00000001 , 0x0000003f 
+ 00014513  0x0000297d store  0x00000001 , 0x00000003 
+ 00014514  0x0000297f increase  0x00000001 , 0x00000013 
+ 00014515  0x00002980 ifetch  0x00000001 , 0x00000013 
+ 00014516  0x00002981 store  0x00000001 , 0x000046f5 
+ 00014517  0x00002982 copy  0x0000003f , 0x00000039 
+ 00014518  0x00002983 rtn  0x00000034 
+ 00014519  0x00002985 ifetch  0x00000001 , 0x00000006 
+ 00014520  0x00002986 beq  0x00000000 , 0x000038c2 
+ 00014521  0x00002987 beq  0x00000001 , 0x000038cf 
+ 00014522  0x00002988 beq  0x00000002 , 0x000038d4 
+ 00014523  0x00002989 beq  0x00000003 , 0x000038d9 
+ 00014524  0x0000298a beq  0x00000004 , 0x000038de 
+ 00014525  0x0000298b beq  0x00000005 , 0x000038e3 
+ 00014526  0x0000298c beq  0x00000006 , 0x000038e8 
+ 00014527  0x0000298d beq  0x000000ff , 0x000038ea 
+ 00014528  0x0000298e loop  0x000038b7 
+ 00014529  0x0000298f rtn 
+ 00014530  0x00002992 copy  0x00000006 , 0x00000013 
+ 00014531  0x00002993 fetch  0x00000001 , 0x0000469a 
+ 00014532  0x00002994 store  0x00000001 , 0x00000a9a 
+ 00014533  0x00002995 arg  0x00000000 , 0x00000002 
+ 00014534  0x00002997 storet  0x00000001 , 0x00000a9b 
+ 00014535  0x00002998 setarg  0x00002710 
+ 00014536  0x00002999 store  0x00000003 , 0x00000a9c 
+ 00014537  0x0000299a ifetch  0x00000001 , 0x00000013 
+ 00014538  0x0000299b store  0x00000001 , 0x00000a9f 
+ 00014539  0x0000299c call  0x000069ae 
+ 00014540  0x0000299d and  0x00000013 , 0x00000001 , 0x00000006 
+ 00014541  0x0000299e loop  0x000038b7 
+ 00014542  0x0000299f rtn 
+ 00014543  0x000029a1 copy  0x00000013 , 0x00000006 
+ 00014544  0x000029a2 fetch  0x00000001 , 0x0000469b 
+ 00014545  0x000029a3 store  0x00000001 , 0x00000a9a 
+ 00014546  0x000029a4 arg  0x00000001 , 0x00000002 
+ 00014547  0x000029a5 branch  0x000038c6 
+ 00014548  0x000029a7 copy  0x00000013 , 0x00000006 
+ 00014549  0x000029a8 fetch  0x00000001 , 0x0000469c 
+ 00014550  0x000029a9 store  0x00000001 , 0x00000a9a 
+ 00014551  0x000029aa arg  0x00000002 , 0x00000002 
+ 00014552  0x000029ab branch  0x000038c6 
+ 00014553  0x000029ad copy  0x00000013 , 0x00000006 
+ 00014554  0x000029ae fetch  0x00000001 , 0x0000469d 
+ 00014555  0x000029af store  0x00000001 , 0x00000a9a 
+ 00014556  0x000029b0 arg  0x00000003 , 0x00000002 
+ 00014557  0x000029b1 branch  0x000038c6 
+ 00014558  0x000029b3 copy  0x00000013 , 0x00000006 
+ 00014559  0x000029b4 fetch  0x00000001 , 0x0000469e 
+ 00014560  0x000029b5 store  0x00000001 , 0x00000a9a 
+ 00014561  0x000029b6 arg  0x00000004 , 0x00000002 
+ 00014562  0x000029b7 branch  0x000038c6 
+ 00014563  0x000029b9 copy  0x00000013 , 0x00000006 
+ 00014564  0x000029ba fetch  0x00000001 , 0x0000469f 
+ 00014565  0x000029bb store  0x00000001 , 0x00000a9a 
+ 00014566  0x000029bc arg  0x00000005 , 0x00000002 
+ 00014567  0x000029bd branch  0x000038c6 
+ 00014568  0x000029c0 ifetch  0x00000001 , 0x00000006 
+ 00014569  0x000029c1 rtn 
+ 00014570  0x000029c4 copy  0x00000006 , 0x00000013 
+ 00014571  0x000029c5 fetch  0x00000001 , 0x000046a0 
+ 00014572  0x000029c6 bne  0x00000001 , 0x000038ee 
+ 00014573  0x000029c7 call  0x000038f0 
+ 00014574  0x000029c9 and  0x00000013 , 0x00000004 , 0x00000006 
+ 00014575  0x000029ca rtn 
+ 00014576  0x000029cc bpatch  0x000000dc , 0x0000401b 
+ 00014577  0x000029cd call  0x00003871 
+ 00014578  0x000029ce branch  0x000038fe , 0x00000028 
+ 00014579  0x000029cf fetch  0x00000001 , 0x000046a4 
+ 00014580  0x000029d0 copy  0x0000003f , 0x00000002 
+ 00014581  0x000029d1 increase  0x00000001 , 0x0000003f 
+ 00014582  0x000029d2 store  0x00000001 , 0x000046a4 
+ 00014583  0x000029d3 call  0x00003867 
+ 00014584  0x000029d4 lshift2  0x00000002 , 0x00000002 
+ 00014585  0x000029d5 setarg  0x000046a5 
+ 00014586  0x000029d6 iadd  0x00000002 , 0x00000005 
+ 00014587  0x000029d7 ifetch  0x00000004 , 0x00000013 
+ 00014588  0x000029d8 istore  0x00000004 , 0x00000005 
+ 00014589  0x000029d9 branch  0x00003903 
+ 00014590  0x000029db add  0x00000013 , 0x00000003 , 0x00000006 
+ 00014591  0x000029dc ifetch  0x00000001 , 0x00000006 
+ 00014592  0x000029dd rtn  0x00000034 
+ 00014593  0x000029de ifetch  0x00000004 , 0x00000013 
+ 00014594  0x000029df istore  0x00000004 , 0x00000011 
+ 00014595  0x000029e1 arg  0x000046a4 , 0x00000011 
+ 00014596  0x000029e2 arg  0x00000000 , 0x00000012 
+ 00014597  0x000029e3 arg  0x00000051 , 0x00000002 
+ 00014598  0x000029e4 branch  0x00006606 
+ 00014599  0x000029ec fetcht  0x00000001 , 0x0000469a 
+ 00014600  0x000029ed call  0x00006825 
+ 00014601  0x000029ee rtn 
+ 00014602  0x000029f4 fetcht  0x00000001 , 0x0000469a 
+ 00014603  0x000029f5 call  0x00006829 
+ 00014604  0x000029f8 fetcht  0x00000001 , 0x0000469a 
+ 00014605  0x000029f9 call  0x00006825 
+ 00014606  0x000029fc call  0x0000391d 
+ 00014607  0x000029fe fetch  0x00000001 , 0x000046a7 
+ 00014608  0x000029ff nrtn  0x00000034 
+ 00014609  0x00002a01 call  0x00002c29 
+ 00014610  0x00002a02 hfetch  0x00000004 , 0x00008138 
+ 00014611  0x00002a03 set0  0x0000000f , 0x0000003f 
+ 00014612  0x00002a04 hstore  0x00000004 , 0x0000804c 
+ 00014613  0x00002a05 call  0x00002c21 
+ 00014614  0x00002a06 arg  0xffffffff , 0x00000002 
+ 00014615  0x00002a07 branch  0x00002b2a 
+ 00014616  0x00002a0a fetch  0x00000001 , 0x000046a7 
+ 00014617  0x00002a0b branch  0x000056f9 , 0x00000034 
+ 00014618  0x00002a0c increase  0xffffffff , 0x0000003f 
+ 00014619  0x00002a0d store  0x00000001 , 0x000046a7 
+ 00014620  0x00002a0e branch  0x000056f9 
+ 00014621  0x00002a11 mul32  0x0000003f , 0x00000014 , 0x0000003f 
+ 00014622  0x00002a12 arg  0x000046a8 , 0x00000006 
+ 00014623  0x00002a13 iadd  0x00000006 , 0x00000006 
+ 00014624  0x00002a14 ifetch  0x00000001 , 0x00000006 
+ 00014625  0x00002a15 rtn  0x00000034 
+ 00014626  0x00002a16 copy  0x0000003f , 0x00000011 
+ 00014627  0x00002a17 copy  0x00000011 , 0x00000039 
+ 00014628  0x00002a18 arg  0x00004372 , 0x00000005 
+ 00014629  0x00002a19 call  0x00007f01 
+ 00014630  0x00002a1a copy  0x00000011 , 0x0000003f 
+ 00014631  0x00002a1b increase  0x00000002 , 0x0000003f 
+ 00014632  0x00002a1c store  0x00000001 , 0x0000436f 
+ 00014633  0x00002a1d rtn 
+ 00014634  0x00002a26 rtn  0x0000002b 
+ 00014635  0x00002a27 call  0x000057a3 
+ 00014636  0x00002a28 call  0x000068a8 
+ 00014637  0x00002a29 setarg  0x00003982 
+ 00014638  0x00002a2a store  0x00000002 , 0x000041f3 
+ 00014639  0x00002a2b setarg  0x0000396e 
+ 00014640  0x00002a2c store  0x00000002 , 0x000041f1 
+ 00014641  0x00002a2d setarg  0x00003986 
+ 00014642  0x00002a2e store  0x00000002 , 0x000041f5 
+ 00014643  0x00002a2f setarg  0x0000396d 
+ 00014644  0x00002a30 store  0x00000002 , 0x000041ef 
+ 00014645  0x00002a31 setarg  0x00003969 
+ 00014646  0x00002a32 store  0x00000002 , 0x000041e9 
+ 00014647  0x00002a33 setarg  0x00003ab7 
+ 00014648  0x00002a34 store  0x00000002 , 0x000041fb 
+ 00014649  0x00002a35 setarg  0x00003c32 
+ 00014650  0x00002a36 store  0x00000002 , 0x0000456f 
+ 00014651  0x00002a37 setarg  0x00003cc2 
+ 00014652  0x00002a38 store  0x00000002 , 0x000041f9 
+ 00014653  0x00002a39 setarg  0x00003cd7 
+ 00014654  0x00002a3a store  0x00000002 , 0x000041fd 
+ 00014655  0x00002a3c call  0x0000397f 
+ 00014656  0x00002a3d bpatch  0x000000dd , 0x0000401b 
+ 00014657  0x00002a3e call  0x00003945 
+ 00014658  0x00002a3f call  0x00003964 
+ 00014659  0x00002a40 call  0x00002c6f 
+ 00014660  0x00002a41 branch  0x00003c48 
+ 00014661  0x00002a45 fetch  0x00000004 , 0x000046aa 
+ 00014662  0x00002a46 hstore  0x00000004 , 0x00008054 
+ 00014663  0x00002a48 fetch  0x00000004 , 0x000046ae 
+ 00014664  0x00002a49 hstore  0x00000004 , 0x0000805a 
+ 00014665  0x00002a4b hfetch  0x00000001 , 0x00008081 
+ 00014666  0x00002a4c or_into  0x00000004 , 0x0000003f 
+ 00014667  0x00002a4d and_into  0x000000fc , 0x0000003f 
+ 00014668  0x00002a4e hstore  0x00000001 , 0x00008081 
+ 00014669  0x00002a4f jam  0x00000000 , 0x00008062 
+ 00014670  0x00002a51 fetch  0x00000002 , 0x000046aa 
+ 00014671  0x00002a52 hstore  0x00000002 , 0x00008058 
+ 00014672  0x00002a53 fetch  0x00000002 , 0x000046ae 
+ 00014673  0x00002a54 hstore  0x00000002 , 0x0000805e 
+ 00014674  0x00002a55 hstore  0x00000002 , 0x00008060 
+ 00014675  0x00002a57 hfetch  0x00000004 , 0x00008078 
+ 00014676  0x00002a58 set1  0x00000007 , 0x0000003f 
+ 00014677  0x00002a59 hstore  0x00000004 , 0x00008078 
+ 00014678  0x00002a5b hfetch  0x00000002 , 0x00008050 
+ 00014679  0x00002a5c set0  0x0000000f , 0x0000003f 
+ 00014680  0x00002a5d hstore  0x00000002 , 0x00008050 
+ 00014681  0x00002a5e call  0x000066ce 
+ 00014682  0x00002a5f jam  0x00000000 , 0x00008043 
+ 00014683  0x00002a60 jam  0x00000081 , 0x00008062 
+ 00014684  0x00002a62 fetch  0x00000001 , 0x000046bf 
+ 00014685  0x00002a63 isolate1  0x00000000 , 0x0000003f 
+ 00014686  0x00002a64 hfetcht  0x00000001 , 0x00008062 
+ 00014687  0x00002a65 setflag  0x00000001 , 0x00000004 , 0x00000002 
+ 00014688  0x00002a66 hstoret  0x00000001 , 0x00008062 
+ 00014689  0x00002a67 rtn 
+ 00014690  0x00002a6c call  0x0000397f 
+ 00014691  0x00002a6d branch  0x00003945 
+ 00014692  0x00002a75 fetcht  0x00000001 , 0x0000469e 
+ 00014693  0x00002a76 call  0x0000680e 
+ 00014694  0x00002a77 call  0x000039e6 
+ 00014695  0x00002a79 fetcht  0x00000001 , 0x0000469c 
+ 00014696  0x00002a7a branch  0x000067fb 
+ 00014697  0x00002a7d fetcht  0x00000001 , 0x0000469c 
+ 00014698  0x00002a7e call  0x0000681d 
+ 00014699  0x00002a7f nbranch  0x000033d2 , 0x00000001 
+ 00014700  0x00002a80 branch  0x000033d0 
+ 00014701  0x00002a84 rtn 
+ 00014702  0x00002a87 call  0x00003970 
+ 00014703  0x00002a88 branch  0x00003ce9 
+ 00014704  0x00002a8b fetch  0x00000001 , 0x00004682 
+ 00014705  0x00002a8c bbit0  0x00000004 , 0x0000397f 
+ 00014706  0x00002a8d bpatch  0x000000de , 0x0000401b 
+ 00014707  0x00002a8e setarg  0x00003eff 
+ 00014708  0x00002a8f fetcht  0x00000004 , 0x000046c5 
+ 00014709  0x00002a90 iadd  0x00000002 , 0x00000002 
+ 00014710  0x00002a91 copy  0x00000022 , 0x0000003f 
+ 00014711  0x00002a92 isub  0x00000002 , 0x0000003e 
+ 00014712  0x00002a93 nrtn  0x00000002 
+ 00014713  0x00002a94 fetch  0x00000002 , 0x00004682 
+ 00014714  0x00002a95 bbit1  0x00000005 , 0x0000397f 
+ 00014715  0x00002a96 fetch  0x00000001 , 0x000046bf 
+ 00014716  0x00002a97 rtnbit1  0x00000006 
+ 00014717  0x00002a98 call  0x00003cec 
+ 00014718  0x00002a99 call  0x0000340e 
+ 00014719  0x00002a9b copy  0x00000022 , 0x0000003f 
+ 00014720  0x00002a9c store  0x00000004 , 0x000046c5 
+ 00014721  0x00002a9d rtn 
+ 00014722  0x00002aa1 call  0x00003ce9 
+ 00014723  0x00002aa2 call  0x0000526e 
+ 00014724  0x00002aa3 nrtn  0x00000034 
+ 00014725  0x00002aa4 branch  0x000039eb 
+ 00014726  0x00002aa8 copy  0x00000013 , 0x0000003f 
+ 00014727  0x00002aa9 beq  0x00000001 , 0x000039d4 
+ 00014728  0x00002aaa beq  0x00000002 , 0x000039a3 
+ 00014729  0x00002aab beq  0x00000004 , 0x000039d7 
+ 00014730  0x00002aac beq  0x00000005 , 0x000039c4 
+ 00014731  0x00002aad beq  0x00000008 , 0x000039aa 
+ 00014732  0x00002aae beq  0x00000009 , 0x000039b1 
+ 00014733  0x00002aaf beq  0x0000000a , 0x000039c9 
+ 00014734  0x00002ab0 beq  0x0000000b , 0x000039b6 
+ 00014735  0x00002ab1 beq  0x0000000c , 0x000039c2 
+ 00014736  0x00002ab2 beq  0x00000013 , 0x000039d7 
+ 00014737  0x00002ab3 beq  0x00000014 , 0x000039cf 
+ 00014738  0x00002ab4 beq  0x00000015 , 0x000039c6 
+ 00014739  0x00002ab5 beq  0x00000021 , 0x000039ca 
+ 00014740  0x00002ab6 beq  0x00000023 , 0x000039cb 
+ 00014741  0x00002ab7 beq  0x00000024 , 0x000039ce 
+ 00014742  0x00002ab8 beq  0x00000030 , 0x00003c8a 
+ 00014743  0x00002ab9 beq  0x00000031 , 0x00003c8c 
+ 00014744  0x00002aba beq  0x00000032 , 0x00003c9a 
+ 00014745  0x00002abb beq  0x00000033 , 0x00003c98 
+ 00014746  0x00002abc beq  0x00000034 , 0x00003c84 
+ 00014747  0x00002abd beq  0x00000035 , 0x00003c73 
+ 00014748  0x00002abe beq  0x00000036 , 0x00003c82 
+ 00014749  0x00002abf beq  0x00000037 , 0x00003c8e 
+ 00014750  0x00002ac0 beq  0x00000038 , 0x00003c90 
+ 00014751  0x00002ac1 beq  0x0000003b , 0x00003ca1 
+ 00014752  0x00002ac2 beq  0x0000003d , 0x00003c6a 
+ 00014753  0x00002ac3 beq  0x00000041 , 0x000039d9 
+ 00014754  0x00002ac4 rtn 
+ 00014755  0x00002ac8 call  0x0000397f 
+ 00014756  0x00002ac9 fetch  0x00000001 , 0x00004665 
+ 00014757  0x00002aca ncall  0x00003c8e , 0x00000034 
+ 00014758  0x00002acb call  0x000039d7 
+ 00014759  0x00002acc fetch  0x00000002 , 0x00004682 
+ 00014760  0x00002acd rtnbit0  0x00000004 
+ 00014761  0x00002ace branch  0x000039b1 
+ 00014762  0x00002ad1 fetch  0x00000002 , 0x00004682 
+ 00014763  0x00002ad2 set1  0x00000004 , 0x0000003f 
+ 00014764  0x00002ad3 store  0x00000002 , 0x00004682 
+ 00014765  0x00002ad4 fetch  0x00000001 , 0x000046a7 
+ 00014766  0x00002ad5 store  0x00000001 , 0x00004172 
+ 00014767  0x00002ad6 call  0x000039e6 
+ 00014768  0x00002ad7 branch  0x00003c1d 
+ 00014769  0x00002adc fetch  0x00000002 , 0x00004682 
+ 00014770  0x00002add rtnbit0  0x00000004 
+ 00014771  0x00002ade set0  0x00000004 , 0x0000003f 
+ 00014772  0x00002adf store  0x00000002 , 0x00004682 
+ 00014773  0x00002ae0 branch  0x00003c21 
+ 00014774  0x00002ae6 call  0x0000397f 
+ 00014775  0x00002ae9 fetch  0x00000002 , 0x00004042 
+ 00014776  0x00002aea rshift  0x0000003f , 0x0000003f 
+ 00014777  0x00002aeb fetcht  0x00000002 , 0x000041e3 
+ 00014778  0x00002aec isub  0x00000002 , 0x0000003e 
+ 00014779  0x00002aed nbranch  0x000039bd , 0x00000005 
+ 00014780  0x00002aee branch  0x00003416 
+ 00014781  0x00002af0 fetch  0x00000001 , 0x000046bf 
+ 00014782  0x00002af1 rtnbit1  0x00000005 
+ 00014783  0x00002af2 hfetch  0x00000002 , 0x00008112 
+ 00014784  0x00002af3 ncall  0x00003cf0 , 0x00000034 
+ 00014785  0x00002af4 branch  0x0000340c 
+ 00014786  0x00002af7 call  0x00003cee 
+ 00014787  0x00002af8 branch  0x00003418 
+ 00014788  0x00002afb call  0x0000397f 
+ 00014789  0x00002afc branch  0x000039dd 
+ 00014790  0x00002aff call  0x00005816 
+ 00014791  0x00002b00 call  0x000039d7 
+ 00014792  0x00002b01 branch  0x00003c23 
+ 00014793  0x00002b04 branch  0x000033dd 
+ 00014794  0x00002b08 branch  0x00003cee 
+ 00014795  0x00002b0c fetch  0x00000001 , 0x000046bf 
+ 00014796  0x00002b0d bbit0  0x00000005 , 0x0000340e 
+ 00014797  0x00002b0e branch  0x00003cf2 
+ 00014798  0x00002b12 branch  0x00003cf2 
+ 00014799  0x00002b16 call  0x000058ba 
+ 00014800  0x00002b17 call  0x000039dd 
+ 00014801  0x00002b18 fetch  0x00000001 , 0x000046a8 
+ 00014802  0x00002b19 store  0x00000001 , 0x00004172 
+ 00014803  0x00002b1a branch  0x00003c1f 
+ 00014804  0x00002b1e jam  0x00000000 , 0x00004661 
+ 00014805  0x00002b1f call  0x00003cee 
+ 00014806  0x00002b20 branch  0x00003cf2 
+ 00014807  0x00002b25 call  0x00003a52 
+ 00014808  0x00002b26 branch  0x000039db 
+ 00014809  0x00002b2a call  0x00005cc9 
+ 00014810  0x00002b2b branch  0x00005b02 
+ 00014811  0x00002b2f fetcht  0x00000001 , 0x0000469e 
+ 00014812  0x00002b30 branch  0x00006829 
+ 00014813  0x00002b33 call  0x000039df 
+ 00014814  0x00002b34 branch  0x000039e6 
+ 00014815  0x00002b37 fetch  0x00000001 , 0x000046a1 
+ 00014816  0x00002b38 isolate1  0x00000000 , 0x0000003f 
+ 00014817  0x00002b39 call  0x000033f0 , 0x00000001 
+ 00014818  0x00002b3a fetch  0x00000001 , 0x000046a1 
+ 00014819  0x00002b3b isolate1  0x00000001 , 0x0000003f 
+ 00014820  0x00002b3c call  0x000033f8 , 0x00000001 
+ 00014821  0x00002b3d rtn 
+ 00014822  0x00002b3f fetcht  0x00000001 , 0x0000469e 
+ 00014823  0x00002b40 branch  0x00006825 
+ 00014824  0x00002b43 fetch  0x00000001 , 0x0000456b 
+ 00014825  0x00002b44 rtneq  0x00000000 
+ 00014826  0x00002b45 branch  0x00006c28 
+ 00014827  0x00002b48 hfetch  0x00000001 , 0x0000810c 
+ 00014828  0x00002b49 bbit1  0x00000003 , 0x000039e8 
+ 00014829  0x00002b4a call  0x000066cb 
+ 00014830  0x00002b4b ifetch  0x00000001 , 0x00000003 
+ 00014831  0x00002b4c bne  0x00000001 , 0x00003a01 
+ 00014832  0x00002b4d hfetch  0x00000002 , 0x00008112 
+ 00014833  0x00002b4e sub  0x0000003f , 0x00000002 , 0x0000003e 
+ 00014834  0x00002b4f rtn  0x00000002 
+ 00014835  0x00002b50 ifetch  0x00000001 , 0x00000003 
+ 00014836  0x00002b51 store  0x00000001 , 0x00000b03 
+ 00014837  0x00002b52 ifetcht  0x00000001 , 0x00000003 
+ 00014838  0x00002b53 copy  0x00000003 , 0x00000011 
+ 00014839  0x00002b54 storet  0x00000001 , 0x00000b04 
+ 00014840  0x00002b55 add  0x00000002 , 0x00000003 , 0x00000002 
+ 00014841  0x00002b56 hfetch  0x00000002 , 0x00008112 
+ 00014842  0x00002b57 isub  0x00000002 , 0x00000002 
+ 00014843  0x00002b58 nrtn  0x00000002 
+ 00014844  0x00002b59 jam  0x00000001 , 0x00000b05 
+ 00014845  0x00002b5a call  0x00003a17 
+ 00014846  0x00002b5b fetch  0x00000001 , 0x00000b05 
+ 00014847  0x00002b5c rtneq  0x00000000 
+ 00014848  0x00002b5d branch  0x00003a12 
+ 00014849  0x00002b60 call  0x00007ec1 
+ 00014850  0x00002b61 call  0x00003c79 
+ 00014851  0x00002b62 branch  0x00003a04 
+ 00014852  0x00002b66 bpatch  0x000000df , 0x0000401b 
+ 00014853  0x00002b67 hfetch  0x00000002 , 0x00008112 
+ 00014854  0x00002b68 rtn  0x00000034 
+ 00014855  0x00002b69 call  0x000066cb 
+ 00014856  0x00002b6a ifetch  0x00000001 , 0x00000003 
+ 00014857  0x00002b6b sub  0x0000003f , 0x00000001 , 0x0000003e 
+ 00014858  0x00002b6c ncall  0x00003a16 , 0x00000005 
+ 00014859  0x00002b6d nbranch  0x00003a04 , 0x00000005 
+ 00014860  0x00002b6e ifetch  0x00000001 , 0x00000003 
+ 00014861  0x00002b6f rtneq  0x00000005 
+ 00014862  0x00002b70 rtneq  0x00000029 
+ 00014863  0x00002b71 increase  0xffffffff , 0x00000003 
+ 00014864  0x00002b72 call  0x00003a16 
+ 00014865  0x00002b73 branch  0x00003a04 
+ 00014866  0x00002b76 call  0x000066cb 
+ 00014867  0x00002b77 increase  0x00000002 , 0x00000003 
+ 00014868  0x00002b78 ifetch  0x00000001 , 0x00000003 
+ 00014869  0x00002b79 iadd  0x00000003 , 0x00000003 
+ 00014870  0x00002b7b branch  0x000066c8 
+ 00014871  0x00002b7f bpatch  0x000000e0 , 0x0000401c 
+ 00014872  0x00002b80 fetch  0x00000001 , 0x00000b03 
+ 00014873  0x00002b81 beq  0x00000000 , 0x00003a3f 
+ 00014874  0x00002b82 beq  0x00000001 , 0x00003a44 
+ 00014875  0x00002b83 beq  0x00000002 , 0x00003a49 
+ 00014876  0x00002b84 beq  0x00000003 , 0x00003a5f 
+ 00014877  0x00002b85 beq  0x00000004 , 0x00003a6b 
+ 00014878  0x00002b86 beq  0x00000005 , 0x00003a75 
+ 00014879  0x00002b87 beq  0x00000009 , 0x00003a9a 
+ 00014880  0x00002b88 beq  0x0000000b , 0x00003ad7 
+ 00014881  0x00002b89 beq  0x0000000c , 0x00003ad8 
+ 00014882  0x00002b8a beq  0x0000000d , 0x00003aec 
+ 00014883  0x00002b8b beq  0x0000000e , 0x00003af4 
+ 00014884  0x00002b8c beq  0x0000000f , 0x00003afa 
+ 00014885  0x00002b8d beq  0x00000010 , 0x00003b06 
+ 00014886  0x00002b8e beq  0x00000011 , 0x00003b0e 
+ 00014887  0x00002b8f beq  0x00000012 , 0x00003b12 
+ 00014888  0x00002b90 beq  0x00000026 , 0x00003b16 
+ 00014889  0x00002b91 beq  0x00000028 , 0x00003b1d 
+ 00014890  0x00002b92 beq  0x00000029 , 0x00003b2d 
+ 00014891  0x00002b93 beq  0x0000002a , 0x00003b36 
+ 00014892  0x00002b94 beq  0x0000002b , 0x00003b69 
+ 00014893  0x00002b95 beq  0x0000002c , 0x00003b6f 
+ 00014894  0x00002b96 beq  0x00000030 , 0x00003b76 
+ 00014895  0x00002b97 beq  0x00000031 , 0x00003b7c 
+ 00014896  0x00002b98 beq  0x00000032 , 0x00003b90 
+ 00014897  0x00002b99 beq  0x00000033 , 0x00003b98 
+ 00014898  0x00002b9a beq  0x00000034 , 0x00003bbb 
+ 00014899  0x00002b9b beq  0x00000035 , 0x00003bc4 
+ 00014900  0x00002b9c beq  0x00000036 , 0x00003bcd 
+ 00014901  0x00002b9d beq  0x00000037 , 0x00003bd7 
+ 00014902  0x00002b9e beq  0x00000038 , 0x00003bda 
+ 00014903  0x00002b9f beq  0x00000040 , 0x00003be2 
+ 00014904  0x00002ba0 beq  0x00000042 , 0x00003bec 
+ 00014905  0x00002ba1 beq  0x00000048 , 0x00003bf1 
+ 00014906  0x00002ba2 beq  0x00000049 , 0x00003bfc 
+ 00014907  0x00002ba3 beq  0x00000051 , 0x00003c02 
+ 00014908  0x00002ba4 beq  0x00000061 , 0x00003c06 
+ 00014909  0x00002ba5 beq  0x000000ff , 0x00003c15 
+ 00014910  0x00002ba6 branch  0x00003c17 
+ 00014911  0x00002bac fetch  0x00000001 , 0x00000b04 
+ 00014912  0x00002bad bne  0x00000006 , 0x00003c17 
+ 00014913  0x00002bae ifetch  0x00000006 , 0x00000003 
+ 00014914  0x00002baf store  0x00000006 , 0x000040a0 
+ 00014915  0x00002bb0 branch  0x00003c1a 
+ 00014916  0x00002bb4 fetch  0x00000001 , 0x00000b04 
+ 00014917  0x00002bb5 bne  0x00000006 , 0x00003c17 
+ 00014918  0x00002bb6 ifetch  0x00000006 , 0x00000003 
+ 00014919  0x00002bb7 store  0x00000006 , 0x000044a0 
+ 00014920  0x00002bb8 branch  0x00003c1a 
+ 00014921  0x00002bbd fetch  0x00000001 , 0x00000b04 
+ 00014922  0x00002bbe bne  0x00000001 , 0x00003c17 
+ 00014923  0x00002bbf copy  0x00000011 , 0x00000003 
+ 00014924  0x00002bc0 call  0x00003c1a 
+ 00014925  0x00002bc1 ifetcht  0x00000001 , 0x00000003 
+ 00014926  0x00002bc2 storet  0x00000001 , 0x000046a9 
+ 00014927  0x00002bc3 fetch  0x00000002 , 0x00004682 
+ 00014928  0x00002bc4 rtnbit1  0x00000009 
+ 00014929  0x00002bc5 rtnbit1  0x00000000 
+ 00014930  0x00002bc7 fetch  0x00000001 , 0x000046a1 
+ 00014931  0x00002bc8 isolate1  0x00000000 , 0x0000003f 
+ 00014932  0x00002bc9 nbranch  0x00003a58 , 0x00000001 
+ 00014933  0x00002bca fetcht  0x00000001 , 0x000046a9 
+ 00014934  0x00002bcb and  0x00000002 , 0x00000003 , 0x0000003f 
+ 00014935  0x00002bcc store  0x00000001 , 0x00004093 
+ 00014936  0x00002bce fetch  0x00000001 , 0x000046a1 
+ 00014937  0x00002bcf isolate1  0x00000001 , 0x0000003f 
+ 00014938  0x00002bd0 nrtn  0x00000001 
+ 00014939  0x00002bd1 fetcht  0x00000001 , 0x000046a9 
+ 00014940  0x00002bd2 isolate1  0x00000002 , 0x00000002 
+ 00014941  0x00002bd3 branch  0x000033fa , 0x00000001 
+ 00014942  0x00002bd4 branch  0x000033f8 
+ 00014943  0x00002bd9 fetch  0x00000001 , 0x00000b04 
+ 00014944  0x00002bda sub  0x0000003f , 0x00000043 , 0x0000003e 
+ 00014945  0x00002bdb nbranch  0x00003c17 , 0x00000002 
+ 00014946  0x00002bdc store  0x00000001 , 0x00004515 
+ 00014947  0x00002bdd arg  0x00000008 , 0x00000039 
+ 00014948  0x00002bde call  0x00007ec6 
+ 00014949  0x00002bdf fetch  0x00000001 , 0x00000b04 
+ 00014950  0x00002be0 copy  0x0000003f , 0x00000039 
+ 00014951  0x00002be1 copy  0x00000011 , 0x00000003 
+ 00014952  0x00002be2 arg  0x00004516 , 0x00000005 
+ 00014953  0x00002be3 call  0x000066ea 
+ 00014954  0x00002be4 branch  0x00003c1a 
+ 00014955  0x00002be9 fetch  0x00000001 , 0x00000b04 
+ 00014956  0x00002bea sub  0x0000003f , 0x0000001d , 0x0000003e 
+ 00014957  0x00002beb nbranch  0x00003c17 , 0x00000002 
+ 00014958  0x00002bec store  0x00000001 , 0x000043af 
+ 00014959  0x00002bed copy  0x0000003f , 0x00000039 
+ 00014960  0x00002bee copy  0x00000011 , 0x00000003 
+ 00014961  0x00002bef arg  0x000043b0 , 0x00000005 
+ 00014962  0x00002bf0 call  0x000066ea 
+ 00014963  0x00002bf1 call  0x000057a3 
+ 00014964  0x00002bf2 branch  0x00003c1a 
+ 00014965  0x00002bf7 fetch  0x00000001 , 0x00004682 
+ 00014966  0x00002bf8 bbit0  0x00000004 , 0x00003c17 
+ 00014967  0x00002bf9 call  0x000033ba 
+ 00014968  0x00002bfa branch  0x00003a86 , 0x00000001 
+ 00014969  0x00002bfb jam  0x00000000 , 0x00000b05 
+ 00014970  0x00002bfd call  0x0000397f 
+ 00014971  0x00002bfe fetch  0x00000001 , 0x00004568 
+ 00014972  0x00002bff rtn  0x00000034 
+ 00014973  0x00002c00 fetch  0x00000002 , 0x00004573 
+ 00014974  0x00002c01 bne  0x00000000 , 0x00003a84 
+ 00014975  0x00002c02 fetch  0x00000001 , 0x00000b04 
+ 00014976  0x00002c03 store  0x00000002 , 0x00004573 
+ 00014977  0x00002c05 copy  0x00000011 , 0x00000003 
+ 00014978  0x00002c08 copy  0x00000003 , 0x0000003f 
+ 00014979  0x00002c09 store  0x00000002 , 0x00004571 
+ 00014980  0x00002c0b call  0x00003a88 
+ 00014981  0x00002c0c branch  0x00006c4d 
+ 00014982  0x00002c0f jam  0x00000000 , 0x00000b05 
+ 00014983  0x00002c10 branch  0x00003cd1 
+ 00014984  0x00002c13 call  0x00003a8e 
+ 00014985  0x00002c14 fetch  0x00000002 , 0x00004573 
+ 00014986  0x00002c15 fetcht  0x00000002 , 0x0000469f 
+ 00014987  0x00002c16 isub  0x00000002 , 0x0000003f 
+ 00014988  0x00002c17 store  0x00000002 , 0x00004573 
+ 00014989  0x00002c18 rtn 
+ 00014990  0x00002c1b fetch  0x00000002 , 0x00004573 
+ 00014991  0x00002c1c arg  0x0000006e , 0x00000002 
+ 00014992  0x00002c1d call  0x00007fdd 
+ 00014993  0x00002c1e fetcht  0x00000002 , 0x0000456c 
+ 00014994  0x00002c1f call  0x00007fdd 
+ 00014995  0x00002c20 fetcht  0x00000002 , 0x0000455e 
+ 00014996  0x00002c21 call  0x00007fdd 
+ 00014997  0x00002c22 store  0x00000002 , 0x0000469f 
+ 00014998  0x00002c23 rtn 
+ 00014999  0x00002c26 jam  0x00000001 , 0x00000b05 
+ 00015000  0x00002c27 jam  0x00000005 , 0x00000b03 
+ 00015001  0x00002c28 branch  0x00003c1a 
+ 00015002  0x00002c2d fetch  0x00000002 , 0x00004682 
+ 00015003  0x00002c2e bbit0  0x00000009 , 0x00003c17 
+ 00015004  0x00002c2f call  0x00003ad4 
+ 00015005  0x00002c30 branch  0x00003c17 , 0x00000028 
+ 00015006  0x00002c31 jam  0x00000000 , 0x00000b05 
+ 00015007  0x00002c32 fetch  0x00000001 , 0x000046bf 
+ 00015008  0x00002c33 bbit1  0x00000004 , 0x00003ab4 
+ 00015009  0x00002c34 fetch  0x00000001 , 0x000046c0 
+ 00015010  0x00002c35 nrtn  0x00000034 
+ 00015011  0x00002c36 jam  0x00000001 , 0x00000b05 
+ 00015012  0x00002c37 ifetch  0x00000002 , 0x00000003 
+ 00015013  0x00002c38 store  0x00000002 , 0x000046c1 
+ 00015014  0x00002c39 copy  0x00000003 , 0x0000003f 
+ 00015015  0x00002c3a store  0x00000002 , 0x000046c3 
+ 00015016  0x00002c3b fetch  0x00000001 , 0x00000b04 
+ 00015017  0x00002c3c pincrease  0xfffffffe 
+ 00015018  0x00002c3d nbranch  0x00003c17 , 0x00000002 
+ 00015019  0x00002c3e branch  0x00003c17 , 0x00000005 
+ 00015020  0x00002c3f store  0x00000001 , 0x000046c0 
+ 00015021  0x00002c40 jam  0x00000000 , 0x00000b05 
+ 00015022  0x00002c41 call  0x00005814 
+ 00015023  0x00002c42 call  0x00003ab7 
+ 00015024  0x00002c43 call  0x00003ab7 
+ 00015025  0x00002c44 call  0x00003ab7 
+ 00015026  0x00002c45 fetch  0x00000001 , 0x000046bf 
+ 00015027  0x00002c46 rtnbit0  0x00000004 
+ 00015028  0x00002c48 jam  0x00000001 , 0x00000b05 
+ 00015029  0x00002c49 call  0x00003cf6 
+ 00015030  0x00002c4a branch  0x00003c1a 
+ 00015031  0x00002c4d fetch  0x00000001 , 0x000046c0 
+ 00015032  0x00002c4e rtn  0x00000034 
+ 00015033  0x00002c4f call  0x00005892 
+ 00015034  0x00002c50 nrtn  0x00000034 
+ 00015035  0x00002c51 call  0x00003acf 
+ 00015036  0x00002c52 bpatch  0x000000e1 , 0x0000401c 
+ 00015037  0x00002c53 add  0x00000002 , 0xfffffffd , 0x0000003f 
+ 00015038  0x00002c54 fetcht  0x00000001 , 0x000046c0 
+ 00015039  0x00002c55 call  0x00007fdd 
+ 00015040  0x00002c56 copy  0x0000003f , 0x00000011 
+ 00015041  0x00002c57 copy  0x00000002 , 0x0000003f 
+ 00015042  0x00002c58 isub  0x00000011 , 0x0000003f 
+ 00015043  0x00002c59 store  0x00000001 , 0x000046c0 
+ 00015044  0x00002c5a fetcht  0x00000002 , 0x000046c1 
+ 00015045  0x00002c5b call  0x00005a64 
+ 00015046  0x00002c5c fetch  0x00000002 , 0x000046c3 
+ 00015047  0x00002c5d copy  0x0000003f , 0x00000003 
+ 00015048  0x00002c5e copy  0x00000011 , 0x00000039 
+ 00015049  0x00002c5f call  0x000066ea 
+ 00015050  0x00002c60 copy  0x00000003 , 0x0000003f 
+ 00015051  0x00002c61 store  0x00000002 , 0x000046c3 
+ 00015052  0x00002c62 fetch  0x00000001 , 0x000046c0 
+ 00015053  0x00002c63 nrtn  0x00000034 
+ 00015054  0x00002c64 branch  0x00003cf4 
+ 00015055  0x00002c69 arg  0x00000017 , 0x00000002 
+ 00015056  0x00002c6a fetch  0x00000001 , 0x000046bf 
+ 00015057  0x00002c6b rtnbit1  0x00000001 
+ 00015058  0x00002c6c fetcht  0x00000002 , 0x000044a8 
+ 00015059  0x00002c6d rtn 
+ 00015060  0x00002c70 fetch  0x00000001 , 0x000046bf 
+ 00015061  0x00002c71 bbit1  0x00000002 , 0x00005a42 
+ 00015062  0x00002c72 branch  0x00007fe9 
+ 00015063  0x00002c77 branch  0x00003c4c 
+ 00015064  0x00002c7c copy  0x00000011 , 0x00000003 
+ 00015065  0x00002c7d ifetch  0x00000001 , 0x00000003 
+ 00015066  0x00002c7e beq  0x00000000 , 0x00003adf 
+ 00015067  0x00002c7f beq  0x00000001 , 0x00003ae2 
+ 00015068  0x00002c80 beq  0x00000002 , 0x00003ae8 
+ 00015069  0x00002c81 beq  0x00000003 , 0x00003aea 
+ 00015070  0x00002c82 branch  0x00003c17 
+ 00015071  0x00002c84 call  0x0000612b 
+ 00015072  0x00002c85 jam  0x00000000 , 0x0000465a 
+ 00015073  0x00002c86 branch  0x00003c1a 
+ 00015074  0x00002c88 setarg  0x00040003 
+ 00015075  0x00002c8a store  0x00000003 , 0x0000465b 
+ 00015076  0x00002c8b store  0x00000001 , 0x00004662 
+ 00015077  0x00002c8c call  0x00006124 
+ 00015078  0x00002c8d jam  0x00000001 , 0x0000465a 
+ 00015079  0x00002c8e branch  0x00003c1a 
+ 00015080  0x00002c90 setarg  0x00040002 
+ 00015081  0x00002c91 branch  0x00003ae3 
+ 00015082  0x00002c94 setarg  0x00040001 
+ 00015083  0x00002c95 branch  0x00003ae3 
+ 00015084  0x00002c99 fetch  0x00000001 , 0x00000b04 
+ 00015085  0x00002c9a sub  0x0000003f , 0x00000010 , 0x0000003e 
+ 00015086  0x00002c9b nbranch  0x00003c17 , 0x00000002 
+ 00015087  0x00002c9c store  0x00000001 , 0x00004689 
+ 00015088  0x00002c9d copy  0x0000003f , 0x00000039 
+ 00015089  0x00002c9e arg  0x0000468a , 0x00000005 
+ 00015090  0x00002c9f call  0x000066fd 
+ 00015091  0x00002ca0 branch  0x00003c1a 
+ 00015092  0x00002ca5 copy  0x00000011 , 0x00000003 
+ 00015093  0x00002ca6 ifetch  0x00000001 , 0x00000003 
+ 00015094  0x00002ca7 hfetcht  0x00000001 , 0x00008062 
+ 00015095  0x00002ca8 nsetflag  0x00000034 , 0x00000004 , 0x00000002 
+ 00015096  0x00002ca9 hstoret  0x00000001 , 0x00008062 
+ 00015097  0x00002caa branch  0x00003c1a 
+ 00015098  0x00002caf fetch  0x00000001 , 0x00000b04 
+ 00015099  0x00002cb0 copy  0x0000003f , 0x00000039 
+ 00015100  0x00002cb1 copy  0x00000011 , 0x00000003 
+ 00015101  0x00002cb2 call  0x00007f58 
+ 00015102  0x00002cb3 setarg  0x016e3600 
+ 00015103  0x00002cb4 idiv  0x00000002 
+ 00015104  0x00002cb5 call  0x00007f86 
+ 00015105  0x00002cb6 quotient  0x0000003f 
+ 00015106  0x00002cb8 store  0x00000002 , 0x00004243 
+ 00015107  0x00002cb9 call  0x00003c1a 
+ 00015108  0x00002cba call  0x00007f9e 
+ 00015109  0x00002cbb branch  0x000066ce 
+ 00015110  0x00002cc0 arg  0x00000002 , 0x00000011 
+ 00015111  0x00002cc1 arg  0x0000469a , 0x00000012 
+ 00015112  0x00002cc2 arg  0x00000000 , 0x00000002 
+ 00015113  0x00002cc3 branch  0x00003c25 
+ 00015114  0x00002cc5 store  0x00000002 , 0x00000ac2 
+ 00015115  0x00002cc6 arg  0x00000ac2 , 0x00000012 
+ 00015116  0x00002cc7 arg  0x00000000 , 0x00000002 
+ 00015117  0x00002cc8 branch  0x00003c25 
+ 00015118  0x00002ccd fetch  0x00000002 , 0x00004682 
+ 00015119  0x00002cce bbit0  0x00000000 , 0x00003c17 
+ 00015120  0x00002cd0 call  0x00003c1a 
+ 00015121  0x00002cd1 branch  0x000033e9 
+ 00015122  0x00002cd6 fetch  0x00000002 , 0x00004682 
+ 00015123  0x00002cd7 bbit0  0x00000009 , 0x00003c17 
+ 00015124  0x00002cd9 call  0x00003c1a 
+ 00015125  0x00002cda branch  0x00003402 
+ 00015126  0x00002ce1 fetch  0x00000001 , 0x00000b04 
+ 00015127  0x00002ce2 copy  0x0000003f , 0x00000039 
+ 00015128  0x00002ce3 copy  0x00000011 , 0x00000003 
+ 00015129  0x00002ce4 fetch  0x00000002 , 0x00004215 
+ 00015130  0x00002ce5 icopy  0x00000005 
+ 00015131  0x00002ce6 call  0x000066ea 
+ 00015132  0x00002ce7 branch  0x00003c1a 
+ 00015133  0x00002cec fetch  0x00000001 , 0x00004682 
+ 00015134  0x00002ced bbit0  0x00000000 , 0x00003c17 
+ 00015135  0x00002cee ifetch  0x00000001 , 0x00000003 
+ 00015136  0x00002cef fetcht  0x00000001 , 0x00004661 
+ 00015137  0x00002cf0 setflag  0x00000034 , 0x00000000 , 0x00000002 
+ 00015138  0x00002cf1 set1  0x00000007 , 0x00000002 
+ 00015139  0x00002cf2 storet  0x00000001 , 0x00004661 
+ 00015140  0x00002cf4 call  0x00003c1a 
+ 00015141  0x00002cf6 fetch  0x00000001 , 0x00004661 
+ 00015142  0x00002cf7 bbit1  0x00000006 , 0x00003b2b 
+ 00015143  0x00002cf8 rtn 
+ 00015144  0x00002cfb jam  0x00000000 , 0x00004661 
+ 00015145  0x00002cfc jam  0x00000021 , 0x00000a99 
+ 00015146  0x00002cfd branch  0x00007d8f 
+ 00015147  0x00002d01 bbit1  0x00000000 , 0x00005f95 
+ 00015148  0x00002d02 branch  0x00003b28 
+ 00015149  0x00002d07 fetch  0x00000001 , 0x00004682 
+ 00015150  0x00002d08 rtnbit0  0x00000004 
+ 00015151  0x00002d09 fetch  0x00000001 , 0x0000456b 
+ 00015152  0x00002d0a rtneq  0x00000000 
+ 00015153  0x00002d0b ifetch  0x00000001 , 0x00000003 
+ 00015154  0x00002d0c fetcht  0x00000001 , 0x00004569 
+ 00015155  0x00002d0d iadd  0x00000002 , 0x00000002 
+ 00015156  0x00002d0e storet  0x00000001 , 0x00004569 
+ 00015157  0x00002d0f rtn 
+ 00015158  0x00002d14 arg  0x00000040 , 0x00000039 
+ 00015159  0x00002d15 arg  0x0000436f , 0x00000005 
+ 00015160  0x00002d16 call  0x00007ed4 
+ 00015161  0x00002d17 setarg  0x00000000 
+ 00015162  0x00002d18 store  0x00000001 , 0x00000ab2 
+ 00015163  0x00002d19 copy  0x00000011 , 0x00000003 
+ 00015164  0x00002d1b copy  0x00000003 , 0x0000003f 
+ 00015165  0x00002d1c store  0x00000002 , 0x00000ab6 
+ 00015166  0x00002d1d call  0x00003b64 
+ 00015167  0x00002d1f fetch  0x00000001 , 0x00000ab2 
+ 00015168  0x00002d20 fetcht  0x00000001 , 0x00000aa2 
+ 00015169  0x00002d21 increase  0x00000001 , 0x00000002 
+ 00015170  0x00002d22 iadd  0x00000002 , 0x0000003f 
+ 00015171  0x00002d23 store  0x00000001 , 0x00000ab2 
+ 00015172  0x00002d25 sub  0x0000003f , 0x0000001f , 0x0000003e 
+ 00015173  0x00002d26 nbranch  0x00003b50 , 0x00000002 
+ 00015174  0x00002d28 fetcht  0x00000001 , 0x0000436f 
+ 00015175  0x00002d29 setarg  0x00004370 
+ 00015176  0x00002d2a iadd  0x00000002 , 0x0000003f 
+ 00015177  0x00002d2b store  0x00000002 , 0x00000abb 
+ 00015178  0x00002d2c fetcht  0x00000001 , 0x00000aa2 
+ 00015179  0x00002d2d increase  0x00000001 , 0x00000002 
+ 00015180  0x00002d2e fetch  0x00000001 , 0x0000436f 
+ 00015181  0x00002d2f iadd  0x00000002 , 0x0000003f 
+ 00015182  0x00002d30 store  0x00000001 , 0x0000436f 
+ 00015183  0x00002d31 branch  0x00003b59 
+ 00015184  0x00002d33 fetcht  0x00000001 , 0x0000438f 
+ 00015185  0x00002d34 setarg  0x00004390 
+ 00015186  0x00002d35 iadd  0x00000002 , 0x0000003f 
+ 00015187  0x00002d36 store  0x00000002 , 0x00000abb 
+ 00015188  0x00002d37 fetcht  0x00000001 , 0x00000aa2 
+ 00015189  0x00002d38 increase  0x00000001 , 0x00000002 
+ 00015190  0x00002d39 fetch  0x00000001 , 0x0000438f 
+ 00015191  0x00002d3a iadd  0x00000002 , 0x0000003f 
+ 00015192  0x00002d3b store  0x00000001 , 0x0000438f 
+ 00015193  0x00002d3d fetch  0x00000002 , 0x00000abb 
+ 00015194  0x00002d3e copy  0x0000003f , 0x00000005 
+ 00015195  0x00002d3f fetch  0x00000002 , 0x00000ab6 
+ 00015196  0x00002d40 copy  0x0000003f , 0x00000003 
+ 00015197  0x00002d42 copy  0x00000002 , 0x00000039 
+ 00015198  0x00002d43 call  0x000066ea 
+ 00015199  0x00002d45 fetch  0x00000001 , 0x00000b04 
+ 00015200  0x00002d46 fetcht  0x00000001 , 0x00000ab2 
+ 00015201  0x00002d47 isub  0x00000002 , 0x0000003e 
+ 00015202  0x00002d48 nbranch  0x00003b3c , 0x00000005 
+ 00015203  0x00002d49 branch  0x00003c1a 
+ 00015204  0x00002d4d ifetch  0x00000001 , 0x00000003 
+ 00015205  0x00002d4e store  0x00000001 , 0x00000aa2 
+ 00015206  0x00002d4f ifetch  0x00000001 , 0x00000003 
+ 00015207  0x00002d50 store  0x00000001 , 0x00000aae 
+ 00015208  0x00002d51 rtn 
+ 00015209  0x00002d56 arg  0x00000000 , 0x00000002 
+ 00015210  0x00002d57 arg  0x00000002 , 0x00000011 
+ 00015211  0x00002d58 fetch  0x00000002 , 0x000046b4 
+ 00015212  0x00002d59 store  0x00000002 , 0x00000ac2 
+ 00015213  0x00002d5a arg  0x00000ac2 , 0x00000012 
+ 00015214  0x00002d5b branch  0x00003c25 
+ 00015215  0x00002d60 fetch  0x00000001 , 0x00000b04 
+ 00015216  0x00002d61 bne  0x00000001 , 0x00003c17 
+ 00015217  0x00002d62 ifetch  0x00000001 , 0x00000003 
+ 00015218  0x00002d63 store  0x00000001 , 0x000046b2 
+ 00015219  0x00002d64 setarg  0x00000000 
+ 00015220  0x00002d65 store  0x00000002 , 0x000046b4 
+ 00015221  0x00002d66 branch  0x00003c1a 
+ 00015222  0x00002d6b ifetch  0x00000004 , 0x00000003 
+ 00015223  0x00002d6c store  0x00000004 , 0x0000468a 
+ 00015224  0x00002d6d jam  0x00000004 , 0x00004689 
+ 00015225  0x00002d6e jam  0x00000000 , 0x00004663 
+ 00015226  0x00002d6f call  0x00003c1a 
+ 00015227  0x00002d70 branch  0x00005f31 
+ 00015228  0x00002d75 fetch  0x00000001 , 0x00000b04 
+ 00015229  0x00002d76 bne  0x00000003 , 0x00003c17 
+ 00015230  0x00002d77 ifetch  0x00000001 , 0x00000003 
+ 00015231  0x00002d78 beq  0x00000000 , 0x00003b82 
+ 00015232  0x00002d79 beq  0x00000001 , 0x00003b8a 
+ 00015233  0x00002d7a branch  0x00003c17 
+ 00015234  0x00002d7d ifetcht  0x00000001 , 0x00000003 
+ 00015235  0x00002d7e ifetch  0x00000001 , 0x00000003 
+ 00015236  0x00002d7f beq  0x00000002 , 0x00003b88 
+ 00015237  0x00002d80 nsetflag  0x00000034 , 0x00000007 , 0x00000002 
+ 00015238  0x00002d81 call  0x000067fb 
+ 00015239  0x00002d82 branch  0x00003c1a 
+ 00015240  0x00002d85 call  0x00006806 
+ 00015241  0x00002d86 branch  0x00003c1a 
+ 00015242  0x00002d89 ifetcht  0x00000001 , 0x00000003 
+ 00015243  0x00002d8a call  0x00006812 
+ 00015244  0x00002d8b ifetch  0x00000001 , 0x00000003 
+ 00015245  0x00002d8c isolate1  0x00000000 , 0x0000003f 
+ 00015246  0x00002d8d call  0x0000682c 
+ 00015247  0x00002d8e branch  0x00003c1a 
+ 00015248  0x00002d93 fetch  0x00000001 , 0x00000b04 
+ 00015249  0x00002d94 bne  0x00000001 , 0x00003c17 
+ 00015250  0x00002d95 ifetcht  0x00000001 , 0x00000003 
+ 00015251  0x00002d96 call  0x0000681d 
+ 00015252  0x00002d97 setarg  0x00000000 
+ 00015253  0x00002d98 nsetflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00015254  0x00002d99 arg  0x00000001 , 0x00000011 
+ 00015255  0x00002d9a branch  0x00003b0a 
+ 00015256  0x00002d9f copy  0x00000011 , 0x00000003 
+ 00015257  0x00002da0 ifetch  0x00000001 , 0x00000003 
+ 00015258  0x00002da1 copy  0x0000003f , 0x00000002 
+ 00015259  0x00002da2 beq  0x00000081 , 0x00003ba3 
+ 00015260  0x00002da3 beq  0x00000082 , 0x00003ba8 
+ 00015261  0x00002da4 beq  0x00000083 , 0x00003bae 
+ 00015262  0x00002da5 store  0x00000001 , 0x000044c6 
+ 00015263  0x00002da6 beq  0x00000000 , 0x00003bb3 
+ 00015264  0x00002da7 beq  0x00000001 , 0x00003bb6 
+ 00015265  0x00002da8 beq  0x00000002 , 0x00003bb8 
+ 00015266  0x00002da9 branch  0x00003c17 
+ 00015267  0x00002dac fetch  0x00000001 , 0x000044be 
+ 00015268  0x00002dad branch  0x00003c17 , 0x00000034 
+ 00015269  0x00002dae storet  0x00000001 , 0x000044c6 
+ 00015270  0x00002daf jam  0x0000000d , 0x00004456 
+ 00015271  0x00002db0 branch  0x00003bb4 
+ 00015272  0x00002db2 fetch  0x00000001 , 0x000044be 
+ 00015273  0x00002db3 branch  0x00003c17 , 0x00000034 
+ 00015274  0x00002db4 storet  0x00000001 , 0x000044c6 
+ 00015275  0x00002db5 jam  0x0000000d , 0x00004456 
+ 00015276  0x00002db6 jam  0x00000001 , 0x00004454 
+ 00015277  0x00002db7 branch  0x00003c1a 
+ 00015278  0x00002db9 fetch  0x00000001 , 0x000044be 
+ 00015279  0x00002dba branch  0x00003c17 , 0x00000034 
+ 00015280  0x00002dbb storet  0x00000001 , 0x000044c6 
+ 00015281  0x00002dbc jam  0x0000000d , 0x00004456 
+ 00015282  0x00002dbd branch  0x00003bb9 
+ 00015283  0x00002dbf jam  0x00000000 , 0x00004456 
+ 00015284  0x00002dc1 jam  0x00000003 , 0x00004454 
+ 00015285  0x00002dc2 branch  0x00003c1a 
+ 00015286  0x00002dc4 jam  0x00000005 , 0x00004456 
+ 00015287  0x00002dc5 branch  0x00003bb4 
+ 00015288  0x00002dc7 jam  0x00000005 , 0x00004456 
+ 00015289  0x00002dc9 jam  0x00000000 , 0x00004454 
+ 00015290  0x00002dca branch  0x00003c1a 
+ 00015291  0x00002dcf fetch  0x00000001 , 0x00000b04 
+ 00015292  0x00002dd0 sub  0x0000003f , 0x0000001f , 0x0000003e 
+ 00015293  0x00002dd1 nbranch  0x00003c17 , 0x00000002 
+ 00015294  0x00002dd2 store  0x00000001 , 0x0000436f 
+ 00015295  0x00002dd3 copy  0x0000003f , 0x00000039 
+ 00015296  0x00002dd4 copy  0x00000011 , 0x00000003 
+ 00015297  0x00002dd5 arg  0x00004370 , 0x00000005 
+ 00015298  0x00002dd6 call  0x000066ea 
+ 00015299  0x00002dd7 branch  0x00003c1a 
+ 00015300  0x00002ddc fetch  0x00000001 , 0x00000b04 
+ 00015301  0x00002ddd sub  0x0000003f , 0x0000001f , 0x0000003e 
+ 00015302  0x00002dde nbranch  0x00003c17 , 0x00000002 
+ 00015303  0x00002ddf store  0x00000001 , 0x0000438f 
+ 00015304  0x00002de0 copy  0x0000003f , 0x00000039 
+ 00015305  0x00002de1 copy  0x00000011 , 0x00000003 
+ 00015306  0x00002de2 arg  0x00004390 , 0x00000005 
+ 00015307  0x00002de3 call  0x000066ea 
+ 00015308  0x00002de4 branch  0x00003c1a 
+ 00015309  0x00002de9 fetch  0x00000002 , 0x00004682 
+ 00015310  0x00002dea bbit0  0x00000009 , 0x00003c17 
+ 00015311  0x00002deb fetch  0x00000001 , 0x00000b04 
+ 00015312  0x00002dec bne  0x00000008 , 0x00003c17 
+ 00015313  0x00002ded copy  0x00000011 , 0x00000003 
+ 00015314  0x00002dee ifetch  0x00000008 , 0x00000003 
+ 00015315  0x00002def store  0x00000008 , 0x00004496 
+ 00015316  0x00002df0 jam  0x00000012 , 0x00000a99 
+ 00015317  0x00002df1 call  0x00007d8f 
+ 00015318  0x00002df2 branch  0x00003c1a 
+ 00015319  0x00002df7 ifetch  0x00000002 , 0x00000003 
+ 00015320  0x00002df8 store  0x00000002 , 0x00004482 
+ 00015321  0x00002df9 branch  0x00003c1a 
+ 00015322  0x00002dfe fetch  0x00000001 , 0x000044c6 
+ 00015323  0x00002dff branch  0x00003c17 , 0x00000034 
+ 00015324  0x00002e00 fetch  0x00000001 , 0x000044c4 
+ 00015325  0x00002e01 bne  0x00000000 , 0x00003c17 
+ 00015326  0x00002e02 fetch  0x00000001 , 0x000044c5 
+ 00015327  0x00002e03 bne  0x00000000 , 0x00003c17 
+ 00015328  0x00002e04 call  0x00007e25 
+ 00015329  0x00002e05 branch  0x00003c1a 
+ 00015330  0x00002e0a fetch  0x00000001 , 0x00000b04 
+ 00015331  0x00002e0b bne  0x00000005 , 0x00003c17 
+ 00015332  0x00002e0c ifetch  0x00000001 , 0x00000003 
+ 00015333  0x00002e0d store  0x00000001 , 0x000046a2 
+ 00015334  0x00002e0e ifetch  0x00000004 , 0x00000003 
+ 00015335  0x00002e0f store  0x00000004 , 0x000046a3 
+ 00015336  0x00002e10 fetcht  0x00000001 , 0x000046a2 
+ 00015337  0x00002e11 call  0x0000680e 
+ 00015338  0x00002e12 call  0x00003cbc 
+ 00015339  0x00002e13 branch  0x00003c1a 
+ 00015340  0x00002e18 fetch  0x00000001 , 0x00000b04 
+ 00015341  0x00002e19 bne  0x00000001 , 0x00003c17 
+ 00015342  0x00002e1a ifetch  0x00000001 , 0x00000003 
+ 00015343  0x00002e1b store  0x00000001 , 0x000041de 
+ 00015344  0x00002e1c branch  0x00003c1a 
+ 00015345  0x00002e21 ifetch  0x00000001 , 0x00000003 
+ 00015346  0x00002e22 beq  0x00000001 , 0x00003bfa 
+ 00015347  0x00002e23 fetch  0x00000001 , 0x000044c1 
+ 00015348  0x00002e24 beq  0x00000003 , 0x00003bf8 
+ 00015349  0x00002e25 beq  0x00000006 , 0x00003bf8 
+ 00015350  0x00002e26 beq  0x00000007 , 0x00003bf8 
+ 00015351  0x00002e27 branch  0x00003c17 
+ 00015352  0x00002e29 jam  0x00000001 , 0x000044c2 
+ 00015353  0x00002e2a branch  0x00003c1a 
+ 00015354  0x00002e2d call  0x00005b53 
+ 00015355  0x00002e2e branch  0x00003c1a 
+ 00015356  0x00002e33 fetch  0x00000001 , 0x00000b04 
+ 00015357  0x00002e34 bne  0x00000001 , 0x00003c17 
+ 00015358  0x00002e35 call  0x00003c1a 
+ 00015359  0x00002e36 ifetch  0x00000001 , 0x00000003 
+ 00015360  0x00002e37 branch  0x000060cb , 0x00000034 
+ 00015361  0x00002e38 branch  0x000060c9 
+ 00015362  0x00002e3d call  0x00003c1a 
+ 00015363  0x00002e3e call  0x00007f9e 
+ 00015364  0x00002e3f jam  0x00000001 , 0x00008010 
+ 00015365  0x00002e40 branch  0x00002a8e 
+ 00015366  0x00002e45 fetch  0x00000001 , 0x00000b04 
+ 00015367  0x00002e46 beq  0x00000000 , 0x00003c17 
+ 00015368  0x00002e47 ifetch  0x00000001 , 0x00000003 
+ 00015369  0x00002e48 branch  0x00003c13 , 0x00000034 
+ 00015370  0x00002e49 fetch  0x00000001 , 0x00000b04 
+ 00015371  0x00002e4a bne  0x00000005 , 0x00003c17 
+ 00015372  0x00002e4b ifetch  0x00000004 , 0x00000003 
+ 00015373  0x00002e4c arg  0x000f4240 , 0x00000002 
+ 00015374  0x00002e4d isub  0x00000002 , 0x0000003e 
+ 00015375  0x00002e4e branch  0x00003c17 , 0x00000002 
+ 00015376  0x00002e4f store  0x00000004 , 0x000044c7 
+ 00015377  0x00002e50 call  0x0000580c 
+ 00015378  0x00002e51 branch  0x00003c1a 
+ 00015379  0x00002e54 call  0x0000580e 
+ 00015380  0x00002e55 branch  0x00003c1a 
+ 00015381  0x00002e5a jam  0x00000000 , 0x00004091 
+ 00015382  0x00002e5b branch  0x00003c1a 
+ 00015383  0x00002e61 arg  0x00000001 , 0x00000002 
+ 00015384  0x00002e62 arg  0x00000000 , 0x00000011 
+ 00015385  0x00002e63 branch  0x00003c25 
+ 00015386  0x00002e67 arg  0x00000000 , 0x00000002 
+ 00015387  0x00002e68 arg  0x00000000 , 0x00000011 
+ 00015388  0x00002e69 branch  0x00003c25 
+ 00015389  0x00002e6e jam  0x00000000 , 0x00000b03 
+ 00015390  0x00002e6f branch  0x00003c49 
+ 00015391  0x00002e74 jam  0x00000002 , 0x00000b03 
+ 00015392  0x00002e75 branch  0x00003c49 
+ 00015393  0x00002e7a jam  0x00000003 , 0x00000b03 
+ 00015394  0x00002e7b branch  0x00003c49 
+ 00015395  0x00002e80 jam  0x00000005 , 0x00000b03 
+ 00015396  0x00002e81 branch  0x00003c49 
+ 00015397  0x00002e8a fetch  0x00000001 , 0x00000b03 
+ 00015398  0x00002e8b copy  0x0000003f , 0x00000013 
+ 00015399  0x00002e8c jam  0x00000006 , 0x00000b03 
+ 00015400  0x00002e8d setarg  0x00000002 
+ 00015401  0x00002e8e iadd  0x00000011 , 0x0000003f 
+ 00015402  0x00002e8f call  0x00003ca7 
+ 00015403  0x00002e90 copy  0x00000013 , 0x0000003f 
+ 00015404  0x00002e91 istore  0x00000001 , 0x0000000a 
+ 00015405  0x00002e92 istoret  0x00000001 , 0x0000000a 
+ 00015406  0x00002e93 copy  0x00000011 , 0x00000039 
+ 00015407  0x00002e94 copy  0x00000012 , 0x00000006 
+ 00015408  0x00002e95 call  0x000066e4 
+ 00015409  0x00002e96 branch  0x000066c5 
+ 00015410  0x00002e9c call  0x0000397f 
+ 00015411  0x00002e9d jam  0x00000007 , 0x00000b03 
+ 00015412  0x00002e9e fetch  0x00000001 , 0x000004ff 
+ 00015413  0x00002e9f rtn  0x00000034 
+ 00015414  0x00002ea0 call  0x00003ca7 
+ 00015415  0x00002ea1 fetch  0x00000001 , 0x000004ff 
+ 00015416  0x00002ea2 copy  0x0000003f , 0x00000039 
+ 00015417  0x00002ea3 fetch  0x00000002 , 0x00000501 
+ 00015418  0x00002ea4 copy  0x0000003f , 0x00000006 
+ 00015419  0x00002ea5 call  0x000066d1 
+ 00015420  0x00002ea6 branch  0x000066c5 
+ 00015421  0x00002eab jam  0x00000008 , 0x00000b03 
+ 00015422  0x00002eac fetch  0x00000001 , 0x000046b6 
+ 00015423  0x00002ead icopy  0x00000039 
+ 00015424  0x00002eae increase  0x00000002 , 0x0000003f 
+ 00015425  0x00002eaf call  0x00003ca7 
+ 00015426  0x00002eb0 fetch  0x00000002 , 0x000046b9 
+ 00015427  0x00002eb1 istore  0x00000002 , 0x0000000a 
+ 00015428  0x00002eb2 fetch  0x00000002 , 0x000046b7 
+ 00015429  0x00002eb3 icopy  0x00000006 
+ 00015430  0x00002eb4 call  0x000066d1 
+ 00015431  0x00002eb5 branch  0x000066c5 
+ 00015432  0x00002eba jam  0x00000009 , 0x00000b03 
+ 00015433  0x00002ebc setarg  0x00000000 
+ 00015434  0x00002ebd call  0x00003ca7 
+ 00015435  0x00002ebe branch  0x000066c5 
+ 00015436  0x00002ec3 jam  0x0000000a , 0x00000b03 
+ 00015437  0x00002ec4 setarg  0x00000001 
+ 00015438  0x00002ec5 call  0x00003ca7 
+ 00015439  0x00002ec7 call  0x00003c5d 
+ 00015440  0x00002ec9 fetch  0x00000002 , 0x00004682 
+ 00015441  0x00002eca arg  0x00000002 , 0x00000007 
+ 00015442  0x00002ecb qisolate1  0x0000003f 
+ 00015443  0x00002ecc setflag  0x00000001 , 0x00000003 , 0x00000002 
+ 00015444  0x00002ece arg  0x00000009 , 0x00000007 
+ 00015445  0x00002ecf qisolate1  0x0000003f 
+ 00015446  0x00002ed0 setflag  0x00000001 , 0x00000005 , 0x00000002 
+ 00015447  0x00002ed2 fetch  0x00000001 , 0x00004682 
+ 00015448  0x00002ed3 arg  0x00000004 , 0x00000007 
+ 00015449  0x00002ed4 qisolate1  0x0000003f 
+ 00015450  0x00002ed5 setflag  0x00000001 , 0x00000004 , 0x00000002 
+ 00015451  0x00002ed7 istoret  0x00000001 , 0x0000000a 
+ 00015452  0x00002ed8 branch  0x000066c5 
+ 00015453  0x00002edd arg  0x00000000 , 0x00000002 
+ 00015454  0x00002ede fetch  0x00000001 , 0x00004093 
+ 00015455  0x00002edf arg  0x00000000 , 0x00000007 
+ 00015456  0x00002ee0 qisolate1  0x0000003f 
+ 00015457  0x00002ee1 setflag  0x00000001 , 0x00000000 , 0x00000002 
+ 00015458  0x00002ee2 arg  0x00000001 , 0x00000007 
+ 00015459  0x00002ee3 qisolate1  0x0000003f 
+ 00015460  0x00002ee4 setflag  0x00000001 , 0x00000001 , 0x00000002 
+ 00015461  0x00002ee6 fetch  0x00000001 , 0x0000436e 
+ 00015462  0x00002ee7 arg  0x00000000 , 0x00000007 
+ 00015463  0x00002ee8 qisolate1  0x0000003f 
+ 00015464  0x00002ee9 setflag  0x00000001 , 0x00000002 , 0x00000002 
+ 00015465  0x00002eea rtn 
+ 00015466  0x00002eef jam  0x0000000d , 0x00000b03 
+ 00015467  0x00002ef0 fetch  0x00000001 , 0x00004217 
+ 00015468  0x00002ef1 mul32  0x0000003f , 0x00000022 , 0x0000003f 
+ 00015469  0x00002ef2 icopy  0x00000039 
+ 00015470  0x00002ef3 call  0x00003ca7 
+ 00015471  0x00002ef4 fetch  0x00000002 , 0x00004215 
+ 00015472  0x00002ef5 icopy  0x00000006 
+ 00015473  0x00002ef6 call  0x000066d1 
+ 00015474  0x00002ef7 branch  0x000066c5 
+ 00015475  0x00002efc jam  0x0000000e , 0x00000b03 
+ 00015476  0x00002efd setarg  0x00000004 
+ 00015477  0x00002efe call  0x00003ca7 
+ 00015478  0x00002eff fetch  0x00000004 , 0x000009ba 
+ 00015479  0x00002f00 istore  0x00000004 , 0x0000000a 
+ 00015480  0x00002f01 branch  0x000066c5 
+ 00015481  0x00002f06 jam  0x0000000f , 0x00000b03 
+ 00015482  0x00002f07 hfetch  0x00000002 , 0x00008112 
+ 00015483  0x00002f08 arg  0x000000ff , 0x00000002 
+ 00015484  0x00002f09 call  0x00007fdd 
+ 00015485  0x00002f0a copy  0x0000003f , 0x00000039 
+ 00015486  0x00002f0b call  0x00003ca7 
+ 00015487  0x00002f0c call  0x000066cb 
+ 00015488  0x00002f0d call  0x00006703 
+ 00015489  0x00002f0e branch  0x000066c5 
+ 00015490  0x00002f13 jam  0x00000010 , 0x00000b03 
+ 00015491  0x00002f14 branch  0x00003c49 
+ 00015492  0x00002f19 jam  0x00000011 , 0x00000b03 
+ 00015493  0x00002f1a setarg  0x00000004 
+ 00015494  0x00002f1b call  0x00003ca7 
+ 00015495  0x00002f1c fetch  0x00000004 , 0x000044c7 
+ 00015496  0x00002f1d istore  0x00000004 , 0x0000000a 
+ 00015497  0x00002f1e branch  0x000066c5 
+ 00015498  0x00002f23 arg  0x00000180 , 0x00000011 
+ 00015499  0x00002f24 branch  0x00003c91 
+ 00015500  0x00002f27 arg  0x00000080 , 0x00000011 
+ 00015501  0x00002f28 branch  0x00003c91 
+ 00015502  0x00002f2b arg  0x00000101 , 0x00000011 
+ 00015503  0x00002f2c branch  0x00003c91 
+ 00015504  0x00002f2f arg  0x00000001 , 0x00000011 
+ 00015505  0x00002f32 jam  0x00000000 , 0x00004661 
+ 00015506  0x00002f33 jam  0x00000014 , 0x00000b03 
+ 00015507  0x00002f34 setarg  0x00000002 
+ 00015508  0x00002f35 call  0x00003ca7 
+ 00015509  0x00002f36 copy  0x00000011 , 0x0000003f 
+ 00015510  0x00002f37 istore  0x00000002 , 0x0000000a 
+ 00015511  0x00002f38 branch  0x000066c5 
+ 00015512  0x00002f3d arg  0x00000000 , 0x00000013 
+ 00015513  0x00002f3e branch  0x00003c9b 
+ 00015514  0x00002f41 arg  0x00000001 , 0x00000013 
+ 00015515  0x00002f44 jam  0x00000015 , 0x00000b03 
+ 00015516  0x00002f45 setarg  0x00000001 
+ 00015517  0x00002f46 call  0x00003ca7 
+ 00015518  0x00002f47 copy  0x00000013 , 0x0000003f 
+ 00015519  0x00002f48 istore  0x00000001 , 0x0000000a 
+ 00015520  0x00002f49 branch  0x000066c5 
+ 00015521  0x00002f4e jam  0x0000001d , 0x00000b03 
+ 00015522  0x00002f4f setarg  0x00000004 
+ 00015523  0x00002f50 call  0x00003ca7 
+ 00015524  0x00002f51 fetch  0x00000004 , 0x000009ba 
+ 00015525  0x00002f52 istore  0x00000004 , 0x0000000a 
+ 00015526  0x00002f53 branch  0x000066c5 
+ 00015527  0x00002f5f jam  0x00000002 , 0x00000b02 
+ 00015528  0x00002f60 store  0x00000001 , 0x00000b04 
+ 00015529  0x00002f61 storet  0x00000008 , 0x00000aa2 
+ 00015530  0x00002f62 bpatch  0x000000e2 , 0x0000401c 
+ 00015531  0x00002f63 call  0x00003cb1 
+ 00015532  0x00002f64 fetcht  0x00000008 , 0x00000aa2 
+ 00015533  0x00002f65 call  0x000066c2 
+ 00015534  0x00002f66 fetch  0x00000003 , 0x00000b02 
+ 00015535  0x00002f67 istore  0x00000003 , 0x0000000a 
+ 00015536  0x00002f68 rtn 
+ 00015537  0x00002f6c call  0x00003cba 
+ 00015538  0x00002f6d rtn  0x00000001 
+ 00015539  0x00002f6f call  0x00003cb8 
+ 00015540  0x00002f70 fetch  0x00000004 , 0x000046a3 
+ 00015541  0x00002f71 rshift2  0x0000003f , 0x0000003f 
+ 00015542  0x00002f72 rtn  0x00000034 
+ 00015543  0x00002f73 branch  0x00003cbe 
+ 00015544  0x00002f77 fetcht  0x00000001 , 0x000046a2 
+ 00015545  0x00002f78 branch  0x00006829 
+ 00015546  0x00002f7b fetcht  0x00000001 , 0x000046a2 
+ 00015547  0x00002f7c branch  0x0000681b 
+ 00015548  0x00002f7f fetcht  0x00000001 , 0x000046a2 
+ 00015549  0x00002f80 branch  0x00006825 
+ 00015550  0x00002f84 increase  0xffffffff , 0x0000003f 
+ 00015551  0x00002f85 nop  0x00000026 
+ 00015552  0x00002f86 nbranch  0x00003cbe , 0x00000034 
+ 00015553  0x00002f87 rtn 
+ 00015554  0x00002f91 call  0x00003ad4 
+ 00015555  0x00002f92 rtn  0x00000028 
+ 00015556  0x00002f93 copy  0x00000011 , 0x0000003f 
+ 00015557  0x00002f94 store  0x00000002 , 0x000046b7 
+ 00015558  0x00002f95 copy  0x00000012 , 0x0000003f 
+ 00015559  0x00002f96 store  0x00000001 , 0x000046b6 
+ 00015560  0x00002f97 fetch  0x00000002 , 0x00000478 
+ 00015561  0x00002f98 fetcht  0x00000002 , 0x000046bb 
+ 00015562  0x00002f99 isub  0x00000002 , 0x0000003e 
+ 00015563  0x00002f9a branch  0x00003ccf , 0x00000005 
+ 00015564  0x00002f9b fetcht  0x00000002 , 0x000046bd 
+ 00015565  0x00002f9c isub  0x00000002 , 0x0000003e 
+ 00015566  0x00002f9d nrtn  0x00000005 
+ 00015567  0x00002f9f store  0x00000002 , 0x000046b9 
+ 00015568  0x00002fa0 branch  0x00003c3d 
+ 00015569  0x00002fa6 fetch  0x00000001 , 0x000046bf 
+ 00015570  0x00002fa7 rtnbit1  0x00000005 
+ 00015571  0x00002fa8 call  0x00003cf0 
+ 00015572  0x00002fa9 branch  0x0000340c 
+ 00015573  0x00002fad jam  0x00000002 , 0x00004172 
+ 00015574  0x00002fae rtn 
+ 00015575  0x00002fb3 branch  0x00003cd8 
+ 00015576  0x00002fb6 fetch  0x00000001 , 0x000046b2 
+ 00015577  0x00002fb7 rtn  0x00000034 
+ 00015578  0x00002fb8 fetch  0x00000001 , 0x000046b3 
+ 00015579  0x00002fb9 rtn  0x00000034 
+ 00015580  0x00002fba increase  0xffffffff , 0x0000003f 
+ 00015581  0x00002fbb store  0x00000001 , 0x000046b3 
+ 00015582  0x00002fbc nrtn  0x00000034 
+ 00015583  0x00002fbd jam  0x0000000a , 0x000046b3 
+ 00015584  0x00002fbe call  0x000068eb 
+ 00015585  0x00002fbf call  0x00006908 
+ 00015586  0x00002fc0 div  0x0000003f , 0x00000064 
+ 00015587  0x00002fc1 call  0x00007f86 
+ 00015588  0x00002fc2 quotient  0x0000003f 
+ 00015589  0x00002fc3 remainder  0x00000002 
+ 00015590  0x00002fc4 store  0x00000001 , 0x000046b4 
+ 00015591  0x00002fc5 storet  0x00000001 , 0x000046b5 
+ 00015592  0x00002fc6 rtn 
+ 00015593  0x00002fca call  0x00007fb4 
+ 00015594  0x00002fcb branch  0x000033d9 , 0x00000002 
+ 00015595  0x00002fcc branch  0x000033db 
+ 00015596  0x00002fd1 arg  0x00000006 , 0x00000007 
+ 00015597  0x00002fd2 branch  0x00003cfc 
+ 00015598  0x00002fd5 arg  0x00000006 , 0x00000007 
+ 00015599  0x00002fd6 branch  0x00003cf8 
+ 00015600  0x00002fd9 arg  0x00000005 , 0x00000007 
+ 00015601  0x00002fda branch  0x00003cfc 
+ 00015602  0x00002fdd arg  0x00000005 , 0x00000007 
+ 00015603  0x00002fde branch  0x00003cf8 
+ 00015604  0x00002fe1 arg  0x00000004 , 0x00000007 
+ 00015605  0x00002fe2 branch  0x00003cfc 
+ 00015606  0x00002fe5 arg  0x00000004 , 0x00000007 
+ 00015607  0x00002fe6 branch  0x00003cf8 
+ 00015608  0x00002fe9 fetch  0x00000001 , 0x000046bf 
+ 00015609  0x00002fea qset0  0x0000003f 
+ 00015610  0x00002feb store  0x00000001 , 0x000046bf 
+ 00015611  0x00002fec rtn 
+ 00015612  0x00002fef fetch  0x00000001 , 0x000046bf 
+ 00015613  0x00002ff0 qset1  0x0000003f 
+ 00015614  0x00002ff1 store  0x00000001 , 0x000046bf 
+ 00015615  0x00002ff2 rtn 
+ 00015616  0x00002ffd call  0x00003d39 
+ 00015617  0x00002ffe call  0x0000640f 
+ 00015618  0x00002fff call  0x000040c6 
+ 00015619  0x00003000 call  0x00003d66 
+ 00015620  0x00003001 call  0x00006411 
+ 00015621  0x00003002 rtn  0x0000002b 
+ 00015622  0x00003003 call  0x00003d16 
+ 00015623  0x00003004 call  0x00003d19 
+ 00015624  0x00003007 fetch  0x00000004 , 0x000046d3 
+ 00015625  0x00003008 rtnbit1  0x00000010 
+ 00015626  0x00003009 call  0x00003d4e 
+ 00015627  0x0000300a rtnmark1  0x00000026 
+ 00015628  0x0000300b fetch  0x00000002 , 0x00004682 
+ 00015629  0x0000300c bbit1  0x0000000c , 0x000042b0 
+ 00015630  0x0000300d branch  0x000042a2 
+ 00015631  0x00003011 fetch  0x00000004 , 0x000046d3 
+ 00015632  0x00003012 rtnbit0  0x0000001b 
+ 00015633  0x00003013 arg  0x00000014 , 0x00000039 
+ 00015634  0x00003015 setarg  0x00030d40 
+ 00015635  0x00003016 call  0x00002a8f 
+ 00015636  0x00003017 loop  0x00007ec1 
+ 00015637  0x00003018 rtn 
+ 00015638  0x0000301c fetch  0x00000004 , 0x000046d3 
+ 00015639  0x0000301d rtnbit0  0x00000010 
+ 00015640  0x0000301e branch  0x000048ea 
+ 00015641  0x00003022 setarg  0x0000416d 
+ 00015642  0x00003023 store  0x00000002 , 0x000041ef 
+ 00015643  0x00003024 setarg  0x00003f77 
+ 00015644  0x00003025 store  0x00000002 , 0x000041f1 
+ 00015645  0x00003026 setarg  0x00003ebb 
+ 00015646  0x00003027 store  0x00000002 , 0x000041ed 
+ 00015647  0x00003028 setarg  0x0000417c 
+ 00015648  0x00003029 store  0x00000002 , 0x000041f5 
+ 00015649  0x0000302a setarg  0x00003de3 
+ 00015650  0x0000302b store  0x00000002 , 0x000041f3 
+ 00015651  0x0000302c setarg  0x00003eb3 
+ 00015652  0x0000302d store  0x00000002 , 0x000041eb 
+ 00015653  0x0000302e setarg  0x00003d5b 
+ 00015654  0x0000302f store  0x00000002 , 0x000041f9 
+ 00015655  0x00003031 call  0x00002c7a 
+ 00015656  0x00003032 setarg  0x00004401 
+ 00015657  0x00003033 add  0x00000013 , 0x000000d8 , 0x00000005 
+ 00015658  0x00003034 istore  0x00000002 , 0x00000005 
+ 00015659  0x00003035 setarg  0x00004406 
+ 00015660  0x00003036 add  0x00000013 , 0x000000da , 0x00000005 
+ 00015661  0x00003037 istore  0x00000002 , 0x00000005 
+ 00015662  0x00003038 setarg  0x00003ebf 
+ 00015663  0x00003039 add  0x00000013 , 0x000000dc , 0x00000005 
+ 00015664  0x0000303a istore  0x00000002 , 0x00000005 
+ 00015665  0x0000303c setarg  0x000041f9 
+ 00015666  0x0000303d store  0x00000002 , 0x000041fd 
+ 00015667  0x0000303e setarg  0x00003d36 
+ 00015668  0x0000303f store  0x00000002 , 0x00004201 
+ 00015669  0x00003040 rtn 
+ 00015670  0x00003043 fetch  0x00000004 , 0x000046d3 
+ 00015671  0x00003044 bbit0  0x00000012 , 0x000064d7 
+ 00015672  0x00003045 branch  0x000064da 
+ 00015673  0x00003048 rtn  0x0000002b 
+ 00015674  0x00003049 call  0x00002c9d 
+ 00015675  0x0000304a call  0x00003e6e 
+ 00015676  0x0000304b call  0x00003e1e 
+ 00015677  0x0000304c call  0x00003e54 
+ 00015678  0x0000304d call  0x00005810 
+ 00015679  0x0000304e call  0x00005839 
+ 00015680  0x0000304f call  0x0000582c 
+ 00015681  0x00003050 call  0x00005818 
+ 00015682  0x00003051 fetch  0x00000004 , 0x000046d3 
+ 00015683  0x00003052 bbit1  0x00000014 , 0x00003d46 
+ 00015684  0x00003053 bbit1  0x00000013 , 0x00004414 
+ 00015685  0x00003054 rtn 
+ 00015686  0x00003057 call  0x0000659c 
+ 00015687  0x00003058 fetch  0x00000004 , 0x000046d3 
+ 00015688  0x00003059 isolate1  0x00000019 , 0x0000003f 
+ 00015689  0x0000305a ncall  0x000065c2 , 0x00000001 
+ 00015690  0x0000305b call  0x0000443f 
+ 00015691  0x0000305c call  0x00003dc9 
+ 00015692  0x0000305d call  0x000041aa 
+ 00015693  0x0000305e branch  0x000065df 
+ 00015694  0x00003061 fetch  0x00000004 , 0x000046d3 
+ 00015695  0x00003062 bbit0  0x0000001e , 0x00003d53 
+ 00015696  0x00003063 fetch  0x00000001 , 0x00000abd 
+ 00015697  0x00003064 isolate0  0x00000003 , 0x0000003f 
+ 00015698  0x00003065 nrtn  0x00000001 
+ 00015699  0x00003067 fetch  0x00000001 , 0x0000471f 
+ 00015700  0x00003068 store  0x00000001 , 0x0000471e 
+ 00015701  0x00003069 fetch  0x00000001 , 0x000046f5 
+ 00015702  0x0000306a rtnbit1  0x00000006 
+ 00015703  0x0000306c fetch  0x00000004 , 0x000046d3 
+ 00015704  0x0000306d rtnbit0  0x00000011 
+ 00015705  0x0000306e bbit1  0x0000001d , 0x00002ee4 
+ 00015706  0x0000306f branch  0x00002f2c 
+ 00015707  0x00003071 fetch  0x00000001 , 0x00000478 
+ 00015708  0x00003072 sub  0x0000003f , 0x0000001a , 0x0000003f 
+ 00015709  0x00003073 nrtn  0x00000005 
+ 00015710  0x00003074 jam  0x00000012 , 0x00000a99 
+ 00015711  0x00003075 call  0x00007d8f 
+ 00015712  0x00003077 arg  0x00000000 , 0x00000007 
+ 00015713  0x00003078 branch  0x000041b9 
+ 00015714  0x0000307b fetch  0x00000001 , 0x000046b6 
+ 00015715  0x0000307c rtneq  0x00000001 
+ 00015716  0x0000307d jam  0x00000001 , 0x000046b6 
+ 00015717  0x0000307e rtn 
+ 00015718  0x00003080 fetch  0x00000001 , 0x000046e1 
+ 00015719  0x00003081 and  0x0000003f , 0x0000000f , 0x0000003f 
+ 00015720  0x00003082 store  0x00000001 , 0x0000477a 
+ 00015721  0x00003083 branch  0x00003d80 
+ 00015722  0x00003087 fetcht  0x00000001 , 0x000046e7 
+ 00015723  0x00003088 call  0x0000681d 
+ 00015724  0x00003089 nbranch  0x00003d62 , 0x00000001 
+ 00015725  0x0000308b fetch  0x00000001 , 0x000046b6 
+ 00015726  0x0000308c rtneq  0x00000000 
+ 00015727  0x0000308d jam  0x00000000 , 0x000046b6 
+ 00015728  0x0000308e fetch  0x00000001 , 0x0000477a 
+ 00015729  0x0000308f increase  0x00000001 , 0x0000003f 
+ 00015730  0x00003090 and  0x0000003f , 0x00000003 , 0x0000003f 
+ 00015731  0x00003091 store  0x00000001 , 0x0000477a 
+ 00015732  0x00003092 call  0x00003d7e 
+ 00015733  0x00003093 fetch  0x00000004 , 0x000046d3 
+ 00015734  0x00003094 bbit1  0x00000014 , 0x0000443b 
+ 00015735  0x00003095 bbit1  0x00000013 , 0x00003d79 
+ 00015736  0x00003096 rtn 
+ 00015737  0x00003098 arg  0x0000001e , 0x00000002 
+ 00015738  0x00003099 call  0x0000680e 
+ 00015739  0x0000309a arg  0x0000001f , 0x00000002 
+ 00015740  0x0000309b call  0x0000680e 
+ 00015741  0x0000309c branch  0x00004435 
+ 00015742  0x0000309f bpatch  0x000000e3 , 0x0000401c 
+ 00015743  0x000030a0 call  0x0000424a 
+ 00015744  0x000030a1 fetch  0x00000001 , 0x000046e0 
+ 00015745  0x000030a2 beq  0x00000005 , 0x00003daa 
+ 00015746  0x000030a3 beq  0x00000004 , 0x00003d96 
+ 00015747  0x000030a4 fetch  0x00000001 , 0x0000477a 
+ 00015748  0x000030a5 beq  0x00000000 , 0x00003d8a 
+ 00015749  0x000030a6 beq  0x00000001 , 0x00003d88 
+ 00015750  0x000030a7 beq  0x00000002 , 0x00003d8c 
+ 00015751  0x000030a8 beq  0x00000003 , 0x00003d8e 
+ 00015752  0x000030aa fetch  0x00000001 , 0x00004780 
+ 00015753  0x000030ab branch  0x00003dbe 
+ 00015754  0x000030ad fetch  0x00000001 , 0x0000477f 
+ 00015755  0x000030ae branch  0x00003dbe 
+ 00015756  0x000030b0 fetch  0x00000001 , 0x00004781 
+ 00015757  0x000030b1 branch  0x00003dbe 
+ 00015758  0x000030b3 fetch  0x00000001 , 0x00004782 
+ 00015759  0x000030b4 branch  0x00003dbe 
+ 00015760  0x000030b6 fetch  0x00000001 , 0x000046e0 
+ 00015761  0x000030b7 rtneq  0x00000006 
+ 00015762  0x000030b8 fetch  0x00000001 , 0x000046b5 
+ 00015763  0x000030b9 increase  0x00000001 , 0x0000003f 
+ 00015764  0x000030ba store  0x00000001 , 0x000046b5 
+ 00015765  0x000030bb rtn 
+ 00015766  0x000030be fetch  0x00000001 , 0x0000477a 
+ 00015767  0x000030bf beq  0x00000000 , 0x00003d9d 
+ 00015768  0x000030c0 beq  0x00000001 , 0x00003d9b 
+ 00015769  0x000030c1 beq  0x00000002 , 0x00003d9f 
+ 00015770  0x000030c2 beq  0x00000003 , 0x00003da1 
+ 00015771  0x000030c4 fetch  0x00000001 , 0x00004784 
+ 00015772  0x000030c5 branch  0x00003da2 
+ 00015773  0x000030c7 fetch  0x00000001 , 0x00004783 
+ 00015774  0x000030c8 branch  0x00003da2 
+ 00015775  0x000030ca fetch  0x00000001 , 0x00004785 
+ 00015776  0x000030cb branch  0x00003da2 
+ 00015777  0x000030cd fetch  0x00000001 , 0x00004786 
+ 00015778  0x000030cf store  0x00000001 , 0x000046b5 
+ 00015779  0x000030d0 lshift8  0x0000003f , 0x0000003f 
+ 00015780  0x000030d1 copy  0x0000003f , 0x00000011 
+ 00015781  0x000030d2 add  0x0000003f , 0x0000000d , 0x0000003f 
+ 00015782  0x000030d3 call  0x00006413 
+ 00015783  0x000030d4 copy  0x00000011 , 0x0000003f 
+ 00015784  0x000030d5 add  0x0000003f , 0x0000000e , 0x0000003f 
+ 00015785  0x000030d6 branch  0x00006413 
+ 00015786  0x000030d9 fetch  0x00000001 , 0x0000477a 
+ 00015787  0x000030da beq  0x00000000 , 0x00003db1 
+ 00015788  0x000030db beq  0x00000001 , 0x00003daf 
+ 00015789  0x000030dc beq  0x00000002 , 0x00003db3 
+ 00015790  0x000030dd beq  0x00000003 , 0x00003db5 
+ 00015791  0x000030df fetch  0x00000001 , 0x00004788 
+ 00015792  0x000030e0 branch  0x00003db6 
+ 00015793  0x000030e2 fetch  0x00000001 , 0x00004787 
+ 00015794  0x000030e3 branch  0x00003db6 
+ 00015795  0x000030e5 fetch  0x00000001 , 0x00004789 
+ 00015796  0x000030e6 branch  0x00003db6 
+ 00015797  0x000030e8 fetch  0x00000001 , 0x0000478a 
+ 00015798  0x000030ea store  0x00000001 , 0x000046b5 
+ 00015799  0x000030eb call  0x000040c0 
+ 00015800  0x000030ec fetch  0x00000001 , 0x000046b5 
+ 00015801  0x000030ee add  0x0000003f , 0x00000080 , 0x0000003f 
+ 00015802  0x000030ef lshift8  0x0000003f , 0x0000003f 
+ 00015803  0x000030f0 add  0x0000003f , 0x00000005 , 0x0000003f 
+ 00015804  0x000030f1 copy  0x0000003f , 0x00000011 
+ 00015805  0x000030f2 branch  0x0000415a 
+ 00015806  0x000030f5 store  0x00000001 , 0x000046b5 
+ 00015807  0x000030f6 call  0x00003d90 
+ 00015808  0x000030f7 fetch  0x00000001 , 0x000046b5 
+ 00015809  0x000030f8 setarg  0x00000006 
+ 00015810  0x000030f9 call  0x00006414 
+ 00015811  0x000030fa and  0x0000003f , 0x000000f8 , 0x00000002 
+ 00015812  0x000030fb fetch  0x00000001 , 0x000046b5 
+ 00015813  0x000030fc iadd  0x00000002 , 0x0000003f 
+ 00015814  0x000030fd lshift8  0x0000003f , 0x0000003f 
+ 00015815  0x000030fe add  0x0000003f , 0x00000006 , 0x0000003f 
+ 00015816  0x000030ff branch  0x00006413 
+ 00015817  0x00003103 call  0x000033c4 
+ 00015818  0x00003104 branch  0x00004316 , 0x00000005 
+ 00015819  0x00003105 call  0x0000441c 
+ 00015820  0x00003106 call  0x000042e4 
+ 00015821  0x00003107 branch  0x000033bd 
+ 00015822  0x0000310b fetch  0x00000002 , 0x00004707 
+ 00015823  0x0000310c rtn  0x00000034 
+ 00015824  0x0000310d fetch  0x00000004 , 0x000046d3 
+ 00015825  0x0000310e rtnbit0  0x00000011 
+ 00015826  0x0000310f rtnbit1  0x00000003 
+ 00015827  0x00003110 rtnmark1  0x00000026 
+ 00015828  0x00003111 call  0x00004083 
+ 00015829  0x00003112 rtnne  0x00000007 
+ 00015830  0x00003113 call  0x00004482 
+ 00015831  0x00003114 arg  0x00000003 , 0x00000007 
+ 00015832  0x00003115 call  0x000043ce 
+ 00015833  0x00003116 setarg  0x00000000 
+ 00015834  0x00003117 store  0x00000002 , 0x000046ae 
+ 00015835  0x00003118 store  0x00000001 , 0x000046b4 
+ 00015836  0x00003119 call  0x00003263 
+ 00015837  0x0000311b fetch  0x00000002 , 0x00004682 
+ 00015838  0x0000311c bbit1  0x00000007 , 0x00004392 
+ 00015839  0x0000311d bbit1  0x00000009 , 0x00003402 
+ 00015840  0x0000311e bbit1  0x00000000 , 0x000033e9 
+ 00015841  0x0000311f call  0x000042ca 
+ 00015842  0x00003120 branch  0x00002ead 
+ 00015843  0x00003124 call  0x00003dce 
+ 00015844  0x00003125 call  0x00007e34 
+ 00015845  0x00003126 call  0x00003d6a 
+ 00015846  0x00003127 call  0x00003de9 
+ 00015847  0x00003128 call  0x00003ee0 
+ 00015848  0x00003129 branch  0x00003df7 
+ 00015849  0x0000312b fetch  0x00000004 , 0x000046d3 
+ 00015850  0x0000312c rtnbit0  0x00000010 
+ 00015851  0x0000312d call  0x000048d3 
+ 00015852  0x0000312e branch  0x000048fd 
+ 00015853  0x00003131 hfetch  0x00000001 , 0x00008a04 
+ 00015854  0x00003132 bbit0  0x00000007 , 0x00003df1 
+ 00015855  0x00003133 bbit1  0x00000007 , 0x00003df4 
+ 00015856  0x00003134 rtn 
+ 00015857  0x00003136 fetch  0x00000001 , 0x000046ff 
+ 00015858  0x00003137 rtnbit0  0x00000007 
+ 00015859  0x00003138 branch  0x0000659a 
+ 00015860  0x0000313a fetch  0x00000001 , 0x000046ff 
+ 00015861  0x0000313b rtnbit1  0x00000007 
+ 00015862  0x0000313c branch  0x00004381 
+ 00015863  0x0000313f call  0x00003ded 
+ 00015864  0x00003140 hfetch  0x00000001 , 0x00008a04 
+ 00015865  0x00003141 store  0x00000001 , 0x000046ff 
+ 00015866  0x00003142 rtnbit0  0x00000007 
+ 00015867  0x00003143 call  0x00003e07 
+ 00015868  0x00003144 fetch  0x00000004 , 0x000046f9 
+ 00015869  0x00003145 fetcht  0x00000001 , 0x000046fd 
+ 00015870  0x00003146 iadd  0x00000002 , 0x00000002 
+ 00015871  0x00003147 copy  0x00000022 , 0x0000003f 
+ 00015872  0x00003148 isub  0x00000002 , 0x0000003e 
+ 00015873  0x00003149 nrtn  0x00000002 
+ 00015874  0x0000314a store  0x00000004 , 0x000046f9 
+ 00015875  0x0000314b call  0x00003f97 
+ 00015876  0x0000314c nrtn  0x00000028 
+ 00015877  0x0000314d jam  0x00000004 , 0x00000d38 
+ 00015878  0x0000314e branch  0x00003e0f 
+ 00015879  0x00003151 fetcht  0x00000004 , 0x000046f9 
+ 00015880  0x00003152 copy  0x00000022 , 0x0000003f 
+ 00015881  0x00003153 isub  0x00000002 , 0x0000003e 
+ 00015882  0x00003154 ncall  0x00003e0c , 0x00000002 
+ 00015883  0x00003155 rtn 
+ 00015884  0x00003157 setarg  0x00000000 
+ 00015885  0x00003158 store  0x00000004 , 0x000046f9 
+ 00015886  0x00003159 rtn 
+ 00015887  0x0000315e fetch  0x00000001 , 0x00000d38 
+ 00015888  0x0000315f rtnbit0  0x00000002 
+ 00015889  0x00003160 branch  0x00003e12 
+ 00015890  0x00003162 hfetch  0x00000001 , 0x00008a04 
+ 00015891  0x00003163 rtnbit0  0x00000007 
+ 00015892  0x00003164 jam  0x00000020 , 0x00000d52 
+ 00015893  0x00003165 setarg  0x00000001 
+ 00015894  0x00003166 store  0x00000001 , 0x00000d54 
+ 00015895  0x00003167 fetch  0x00000007 , 0x0000469a 
+ 00015896  0x00003168 istore  0x00000007 , 0x00000005 
+ 00015897  0x00003169 rtn 
+ 00015898  0x0000316d hfetch  0x00000002 , 0x00008050 
+ 00015899  0x0000316e set0  0x0000000b , 0x0000003f 
+ 00015900  0x0000316f hstore  0x00000002 , 0x00008050 
+ 00015901  0x00003170 rtn 
+ 00015902  0x00003173 setarg  0x00008c00 
+ 00015903  0x00003174 store  0x00000002 , 0x00004575 
+ 00015904  0x00003175 setarg  0x00008e7a 
+ 00015905  0x00003176 store  0x00000002 , 0x000044bc 
+ 00015906  0x00003177 setarg  0x00002402 
+ 00015907  0x00003178 store  0x00000002 , 0x000040bd 
+ 00015908  0x00003179 setarg  0x00002580 
+ 00015909  0x0000317a store  0x00000003 , 0x000040aa 
+ 00015910  0x0000317b jam  0x00000003 , 0x00004173 
+ 00015911  0x0000317c jam  0x00000008 , 0x00004156 
+ 00015912  0x0000317d jam  0x00000001 , 0x000046d9 
+ 00015913  0x0000317e setarg  0x00000200 
+ 00015914  0x0000317f store  0x00000002 , 0x00004154 
+ 00015915  0x00003180 jam  0x00000017 , 0x000044a6 
+ 00015916  0x00003181 jam  0x00000017 , 0x000044a8 
+ 00015917  0x00003183 setarg  0x00000a77 
+ 00015918  0x00003184 store  0x00000002 , 0x00004212 
+ 00015919  0x00003194 setsect  0x00000000 , 0x00000306 
+ 00015920  0x00003195 setsect  0x00000001 , 0x00004440 
+ 00015921  0x00003196 setsect  0x00000002 , 0x00010000 
+ 00015922  0x00003197 setsect  0x00000003 , 0x00004408 
+ 00015923  0x00003198 store  0x00000009 , 0x00004577 
+ 00015924  0x00003199 setsect  0x00000000 , 0x00001224 
+ 00015925  0x0000319a setsect  0x00000001 , 0x00004000 
+ 00015926  0x0000319b setsect  0x00000002 , 0x00000000 
+ 00015927  0x0000319c istore  0x00000005 , 0x00000005 
+ 00015928  0x0000319e setsect  0x00000000 , 0x0003ffff 
+ 00015929  0x0000319f setsect  0x00000001 , 0x0002fe23 
+ 00015930  0x000031a0 setsect  0x00000002 , 0x000199d9 
+ 00015931  0x000031a1 setsect  0x00000003 , 0x0000020d 
+ 00015932  0x000031a2 store  0x00000008 , 0x00004098 
+ 00015933  0x000031a4 setarg  0x0000012c 
+ 00015934  0x000031a5 store  0x00000002 , 0x00004707 
+ 00015935  0x000031a6 call  0x000057a3 
+ 00015936  0x000031a7 fetch  0x00000004 , 0x000046d3 
+ 00015937  0x000031a8 rtnbit0  0x0000001f 
+ 00015938  0x000031a9 call  0x00003e44 
+ 00015939  0x000031aa branch  0x00003e4c 
+ 00015940  0x000031ad fetcht  0x00000001 , 0x000046f7 
+ 00015941  0x000031ae call  0x000067fb 
+ 00015942  0x000031af fetcht  0x00000001 , 0x000046f7 
+ 00015943  0x000031b0 call  0x0000681d 
+ 00015944  0x000031b1 jam  0x00000003 , 0x000046f6 
+ 00015945  0x000031b2 rtn  0x00000001 
+ 00015946  0x000031b3 jam  0x00000002 , 0x000046f6 
+ 00015947  0x000031b4 rtn 
+ 00015948  0x000031b7 fetcht  0x00000001 , 0x000046f8 
+ 00015949  0x000031b8 call  0x000067fb 
+ 00015950  0x000031b9 fetcht  0x00000001 , 0x000046f8 
+ 00015951  0x000031ba call  0x0000681d 
+ 00015952  0x000031bb jam  0x00000000 , 0x0000422d 
+ 00015953  0x000031bc rtn  0x00000001 
+ 00015954  0x000031bd jam  0x00000002 , 0x0000422d 
+ 00015955  0x000031be rtn 
+ 00015956  0x000031c2 fetch  0x00000001 , 0x0000422d 
+ 00015957  0x000031c3 beq  0x00000000 , 0x00003e59 
+ 00015958  0x000031c4 beq  0x00000001 , 0x00003e62 
+ 00015959  0x000031c5 beq  0x00000002 , 0x00003e6b 
+ 00015960  0x000031c6 branch  0x00003e59 
+ 00015961  0x000031c9 fetcht  0x00000002 , 0x00004221 
+ 00015962  0x000031ca fetch  0x00000002 , 0x00004227 
+ 00015963  0x000031cb isub  0x00000002 , 0x0000003f 
+ 00015964  0x000031cc mul32  0x0000003f , 0x00000014 , 0x0000003f 
+ 00015965  0x000031cd div  0x0000003f , 0x00000064 
+ 00015966  0x000031ce call  0x00007f86 
+ 00015967  0x000031cf quotient  0x0000003f 
+ 00015968  0x000031d0 store  0x00000002 , 0x000046d0 
+ 00015969  0x000031d1 rtn 
+ 00015970  0x000031d3 fetcht  0x00000002 , 0x0000421f 
+ 00015971  0x000031d4 fetch  0x00000002 , 0x00004225 
+ 00015972  0x000031d5 isub  0x00000002 , 0x0000003f 
+ 00015973  0x000031d6 mul32  0x0000003f , 0x000000e6 , 0x0000003f 
+ 00015974  0x000031d7 div  0x0000003f , 0x00000190 
+ 00015975  0x000031d8 call  0x00007f86 
+ 00015976  0x000031d9 quotient  0x0000003f 
+ 00015977  0x000031da store  0x00000002 , 0x000046d0 
+ 00015978  0x000031db rtn 
+ 00015979  0x000031dd fetch  0x00000002 , 0x00004223 
+ 00015980  0x000031de store  0x00000002 , 0x000046d0 
+ 00015981  0x000031df rtn 
+ 00015982  0x000031e1 fetcht  0x00000001 , 0x0000423a 
+ 00015983  0x000031e2 call  0x0000680e 
+ 00015984  0x000031e3 call  0x000048fb 
+ 00015985  0x000031e4 fetcht  0x00000001 , 0x000046e2 
+ 00015986  0x000031e5 call  0x000067fb 
+ 00015987  0x000031e6 fetcht  0x00000001 , 0x000046e3 
+ 00015988  0x000031e7 call  0x000067fb 
+ 00015989  0x000031e8 fetcht  0x00000001 , 0x000046e4 
+ 00015990  0x000031e9 call  0x000067fb 
+ 00015991  0x000031ea fetcht  0x00000001 , 0x000046f3 
+ 00015992  0x000031eb call  0x000067fb 
+ 00015993  0x000031ed fetcht  0x00000001 , 0x000046dc 
+ 00015994  0x000031ee call  0x0000680e 
+ 00015995  0x000031f0 fetcht  0x00000001 , 0x000046e8 
+ 00015996  0x000031f1 call  0x000067fb 
+ 00015997  0x000031f3 fetcht  0x00000001 , 0x000046e9 
+ 00015998  0x000031f4 call  0x000067fb 
+ 00015999  0x000031f6 fetcht  0x00000001 , 0x000046ea 
+ 00016000  0x000031f7 call  0x000067fb 
+ 00016001  0x000031f8 fetcht  0x00000001 , 0x000046eb 
+ 00016002  0x000031f9 call  0x000067fb 
+ 00016003  0x000031fb fetcht  0x00000001 , 0x000046e5 
+ 00016004  0x000031fc call  0x000067fb 
+ 00016005  0x000031fd fetcht  0x00000001 , 0x000046e6 
+ 00016006  0x000031fe call  0x000067fb 
+ 00016007  0x00003200 fetcht  0x00000001 , 0x000046ef 
+ 00016008  0x00003201 call  0x0000680e 
+ 00016009  0x00003203 fetcht  0x00000001 , 0x000046f0 
+ 00016010  0x00003204 call  0x0000680e 
+ 00016011  0x00003206 fetcht  0x00000001 , 0x000046f1 
+ 00016012  0x00003207 call  0x0000680e 
+ 00016013  0x00003209 fetcht  0x00000001 , 0x000046f2 
+ 00016014  0x0000320a call  0x0000680e 
+ 00016015  0x0000320c fetcht  0x00000001 , 0x000046f4 
+ 00016016  0x0000320d call  0x0000680e 
+ 00016017  0x0000320f fetcht  0x00000001 , 0x000046ed 
+ 00016018  0x00003210 call  0x000067fb 
+ 00016019  0x00003212 fetcht  0x00000001 , 0x000046ec 
+ 00016020  0x00003213 call  0x000067fb 
+ 00016021  0x00003215 fetcht  0x00000001 , 0x000046e7 
+ 00016022  0x00003216 branch  0x000067fb 
+ 00016023  0x00003219 fetcht  0x00000001 , 0x000046e8 
+ 00016024  0x0000321a call  0x000067dd 
+ 00016025  0x0000321b fetcht  0x00000001 , 0x000046e9 
+ 00016026  0x0000321c call  0x000067dd 
+ 00016027  0x0000321d fetcht  0x00000001 , 0x000046ea 
+ 00016028  0x0000321e call  0x000067dd 
+ 00016029  0x0000321f fetcht  0x00000001 , 0x000046eb 
+ 00016030  0x00003220 branch  0x000067dd 
+ 00016031  0x00003223 fetcht  0x00000001 , 0x000046e8 
+ 00016032  0x00003224 call  0x00003ea7 
+ 00016033  0x00003225 fetcht  0x00000001 , 0x000046e9 
+ 00016034  0x00003226 call  0x00003ea7 
+ 00016035  0x00003227 fetcht  0x00000001 , 0x000046ea 
+ 00016036  0x00003228 call  0x00003ea7 
+ 00016037  0x00003229 fetcht  0x00000001 , 0x000046eb 
+ 00016038  0x0000322a branch  0x00003ea7 
+ 00016039  0x0000322d sub  0x00000002 , 0x000000ff , 0x0000003e 
+ 00016040  0x0000322e rtn  0x00000005 
+ 00016041  0x0000322f and  0x00000002 , 0x0000007f , 0x00000007 
+ 00016042  0x00003230 hfetch  0x00000004 , 0x0000811c 
+ 00016043  0x00003231 qisolate1  0x0000003f 
+ 00016044  0x00003232 hfetch  0x00000004 , 0x00008078 
+ 00016045  0x00003233 qsetflag  0x00000001 , 0x0000003f 
+ 00016046  0x00003234 hstore  0x00000004 , 0x00008078 
+ 00016047  0x00003235 hfetch  0x00000004 , 0x0000807c 
+ 00016048  0x00003236 nqsetflag  0x00000001 , 0x0000003f 
+ 00016049  0x00003237 hstore  0x00000004 , 0x0000807c 
+ 00016050  0x00003238 rtn 
+ 00016051  0x0000323b enable  0x00000028 
+ 00016052  0x0000323c hfetch  0x00000004 , 0x00008138 
+ 00016053  0x0000323d setflag  0x00000028 , 0x0000001a , 0x0000003f 
+ 00016054  0x0000323e hstore  0x00000004 , 0x0000804c 
+ 00016055  0x0000323f call  0x00002c21 
+ 00016056  0x00003240 call  0x00004482 
+ 00016057  0x00003241 call  0x00003e9f 
+ 00016058  0x00003243 branch  0x00003ebf 
+ 00016059  0x00003248 call  0x00003ebf 
+ 00016060  0x00003249 fetch  0x00000001 , 0x000000a0 
+ 00016061  0x0000324a nrtn  0x00000034 
+ 00016062  0x0000324b branch  0x000067ed 
+ 00016063  0x0000324e call  0x00003ee0 
+ 00016064  0x0000324f arg  0x00000019 , 0x00000002 
+ 00016065  0x00003250 fetch  0x00000004 , 0x000046d3 
+ 00016066  0x00003251 isolate1  0x00000012 , 0x0000003f 
+ 00016067  0x00003252 call  0x00003ede , 0x00000001 
+ 00016068  0x00003253 call  0x0000680e 
+ 00016069  0x00003254 call  0x000063ee 
+ 00016070  0x00003258 fetcht  0x00000001 , 0x000046e2 
+ 00016071  0x00003259 call  0x000067dd 
+ 00016072  0x0000325a fetcht  0x00000001 , 0x000046e3 
+ 00016073  0x0000325b call  0x000067dd 
+ 00016074  0x0000325c fetcht  0x00000001 , 0x000046e4 
+ 00016075  0x0000325d call  0x000067dd 
+ 00016076  0x0000325f fetcht  0x00000001 , 0x000046e5 
+ 00016077  0x00003260 call  0x000067dd 
+ 00016078  0x00003261 fetcht  0x00000001 , 0x000046e6 
+ 00016079  0x00003262 call  0x000067dd 
+ 00016080  0x00003263 fetcht  0x00000001 , 0x000046e7 
+ 00016081  0x00003264 call  0x000067dd 
+ 00016082  0x00003265 fetcht  0x00000001 , 0x000046ed 
+ 00016083  0x00003266 call  0x000067dd 
+ 00016084  0x00003267 fetcht  0x00000001 , 0x000046e8 
+ 00016085  0x00003268 call  0x000067dd 
+ 00016086  0x00003269 fetcht  0x00000001 , 0x000046e9 
+ 00016087  0x0000326a call  0x000067dd 
+ 00016088  0x0000326b fetcht  0x00000001 , 0x000046ea 
+ 00016089  0x0000326c call  0x000067dd 
+ 00016090  0x0000326d fetcht  0x00000001 , 0x000046eb 
+ 00016091  0x0000326e call  0x000067dd 
+ 00016092  0x0000326f fetcht  0x00000001 , 0x000046f3 
+ 00016093  0x00003270 branch  0x000067e1 
+ 00016094  0x00003275 arg  0x0000001e , 0x00000002 
+ 00016095  0x00003276 rtn 
+ 00016096  0x00003279 bpatch  0x000000e4 , 0x0000401c 
+ 00016097  0x0000327a call  0x00003eee 
+ 00016098  0x0000327b call  0x00003f36 
+ 00016099  0x0000327c fetch  0x00000001 , 0x000046b8 
+ 00016100  0x0000327d fetcht  0x00000001 , 0x000046b7 
+ 00016101  0x0000327e store  0x00000001 , 0x000046b7 
+ 00016102  0x0000327f isub  0x00000002 , 0x0000003e 
+ 00016103  0x00003280 nbranch  0x000033d4 , 0x00000005 
+ 00016104  0x00003281 fetch  0x00000001 , 0x000046be 
+ 00016105  0x00003282 fetcht  0x00000001 , 0x000046bd 
+ 00016106  0x00003283 store  0x00000001 , 0x000046bd 
+ 00016107  0x00003284 isub  0x00000002 , 0x0000003e 
+ 00016108  0x00003285 nbranch  0x000033d4 , 0x00000005 
+ 00016109  0x00003286 rtn 
+ 00016110  0x00003288 fetch  0x00000001 , 0x000046ea 
+ 00016111  0x00003289 rtneq  0x000000ff 
+ 00016112  0x0000328a arg  0x00000000 , 0x00000011 
+ 00016113  0x0000328b fetcht  0x00000001 , 0x000046ea 
+ 00016114  0x0000328c call  0x0000681d 
+ 00016115  0x0000328d setflag  0x00000001 , 0x00000000 , 0x00000011 
+ 00016116  0x0000328e fetcht  0x00000001 , 0x000046eb 
+ 00016117  0x0000328f call  0x0000681d 
+ 00016118  0x00003290 setflag  0x00000001 , 0x00000001 , 0x00000011 
+ 00016119  0x00003291 copy  0x00000011 , 0x0000003f 
+ 00016120  0x00003292 store  0x00000001 , 0x000046b8 
+ 00016121  0x00003293 beq  0x00000001 , 0x00003efe 
+ 00016122  0x00003294 beq  0x00000002 , 0x00003f02 
+ 00016123  0x00003295 fetch  0x00000001 , 0x000046b9 
+ 00016124  0x00003296 bbit1  0x00000007 , 0x00003f0e 
+ 00016125  0x00003297 rtn 
+ 00016126  0x0000329a fetch  0x00000001 , 0x000046b7 
+ 00016127  0x0000329b beq  0x00000000 , 0x00003f06 
+ 00016128  0x0000329c beq  0x00000003 , 0x00003f08 
+ 00016129  0x0000329d rtn 
+ 00016130  0x0000329f fetch  0x00000001 , 0x000046b7 
+ 00016131  0x000032a0 beq  0x00000000 , 0x00003f0a 
+ 00016132  0x000032a1 beq  0x00000003 , 0x00003f0c 
+ 00016133  0x000032a2 rtn 
+ 00016134  0x000032a4 jam  0x00000082 , 0x000046b9 
+ 00016135  0x000032a5 rtn 
+ 00016136  0x000032a7 jam  0x00000081 , 0x000046b9 
+ 00016137  0x000032a8 rtn 
+ 00016138  0x000032aa jam  0x00000080 , 0x000046b9 
+ 00016139  0x000032ab rtn 
+ 00016140  0x000032ad jam  0x00000083 , 0x000046b9 
+ 00016141  0x000032ae rtn 
+ 00016142  0x000032b0 fetch  0x00000001 , 0x000046b9 
+ 00016143  0x000032b1 set0  0x00000007 , 0x0000003f 
+ 00016144  0x000032b2 store  0x00000001 , 0x000046b9 
+ 00016145  0x000032b3 beq  0x00000000 , 0x00003f16 
+ 00016146  0x000032b4 beq  0x00000001 , 0x00003f19 
+ 00016147  0x000032b5 beq  0x00000002 , 0x00003f1c 
+ 00016148  0x000032b6 beq  0x00000003 , 0x00003f1f 
+ 00016149  0x000032b7 rtn 
+ 00016150  0x000032b9 fetch  0x00000001 , 0x000046b8 
+ 00016151  0x000032ba beq  0x00000003 , 0x00003f22 
+ 00016152  0x000032bb rtn 
+ 00016153  0x000032bd fetch  0x00000001 , 0x000046b8 
+ 00016154  0x000032be beq  0x00000000 , 0x00003f22 
+ 00016155  0x000032bf rtn 
+ 00016156  0x000032c1 fetch  0x00000001 , 0x000046b8 
+ 00016157  0x000032c2 beq  0x00000003 , 0x00003f2c 
+ 00016158  0x000032c3 rtn 
+ 00016159  0x000032c5 fetch  0x00000001 , 0x000046b8 
+ 00016160  0x000032c6 beq  0x00000000 , 0x00003f2c 
+ 00016161  0x000032c7 rtn 
+ 00016162  0x000032c9 fetch  0x00000001 , 0x000046bc 
+ 00016163  0x000032ca increase  0x00000001 , 0x0000003f 
+ 00016164  0x000032cb store  0x00000001 , 0x000046bc 
+ 00016165  0x000032cc sub  0x0000003f , 0x00000001 , 0x0000003e 
+ 00016166  0x000032cd rtn  0x00000002 
+ 00016167  0x000032ce jam  0x00000000 , 0x000046bc 
+ 00016168  0x000032cf fetch  0x00000001 , 0x000046ba 
+ 00016169  0x000032d0 increase  0x00000001 , 0x0000003f 
+ 00016170  0x000032d1 store  0x00000001 , 0x000046ba 
+ 00016171  0x000032d2 rtn 
+ 00016172  0x000032d4 fetch  0x00000001 , 0x000046bb 
+ 00016173  0x000032d5 increase  0x00000001 , 0x0000003f 
+ 00016174  0x000032d6 store  0x00000001 , 0x000046bb 
+ 00016175  0x000032d7 sub  0x0000003f , 0x00000001 , 0x0000003e 
+ 00016176  0x000032d8 rtn  0x00000002 
+ 00016177  0x000032d9 jam  0x00000000 , 0x000046bb 
+ 00016178  0x000032da fetch  0x00000001 , 0x000046ba 
+ 00016179  0x000032db increase  0xffffffff , 0x0000003f 
+ 00016180  0x000032dc store  0x00000001 , 0x000046ba 
+ 00016181  0x000032dd rtn 
+ 00016182  0x000032e1 fetch  0x00000001 , 0x000046e8 
+ 00016183  0x000032e2 rtneq  0x000000ff 
+ 00016184  0x000032e3 arg  0x00000000 , 0x00000011 
+ 00016185  0x000032e4 fetcht  0x00000001 , 0x000046e8 
+ 00016186  0x000032e5 call  0x0000681d 
+ 00016187  0x000032e6 setflag  0x00000001 , 0x00000000 , 0x00000011 
+ 00016188  0x000032e7 fetcht  0x00000001 , 0x000046e9 
+ 00016189  0x000032e8 call  0x0000681d 
+ 00016190  0x000032e9 setflag  0x00000001 , 0x00000001 , 0x00000011 
+ 00016191  0x000032ea copy  0x00000011 , 0x0000003f 
+ 00016192  0x000032eb store  0x00000001 , 0x000046be 
+ 00016193  0x000032ec beq  0x00000001 , 0x00003f46 
+ 00016194  0x000032ed beq  0x00000002 , 0x00003f4a 
+ 00016195  0x000032ee fetch  0x00000001 , 0x000046bf 
+ 00016196  0x000032ef bbit1  0x00000007 , 0x00003f56 
+ 00016197  0x000032f0 rtn 
+ 00016198  0x000032f3 fetch  0x00000001 , 0x000046bd 
+ 00016199  0x000032f4 beq  0x00000000 , 0x00003f4e 
+ 00016200  0x000032f5 beq  0x00000003 , 0x00003f50 
+ 00016201  0x000032f6 rtn 
+ 00016202  0x000032f8 fetch  0x00000001 , 0x000046bd 
+ 00016203  0x000032f9 beq  0x00000000 , 0x00003f52 
+ 00016204  0x000032fa beq  0x00000003 , 0x00003f54 
+ 00016205  0x000032fb rtn 
+ 00016206  0x000032fd jam  0x00000082 , 0x000046bf 
+ 00016207  0x000032fe rtn 
+ 00016208  0x00003300 jam  0x00000081 , 0x000046bf 
+ 00016209  0x00003301 rtn 
+ 00016210  0x00003303 jam  0x00000080 , 0x000046bf 
+ 00016211  0x00003304 rtn 
+ 00016212  0x00003306 jam  0x00000083 , 0x000046bf 
+ 00016213  0x00003307 rtn 
+ 00016214  0x00003309 fetch  0x00000001 , 0x000046bf 
+ 00016215  0x0000330a set0  0x00000007 , 0x0000003f 
+ 00016216  0x0000330b store  0x00000001 , 0x000046bf 
+ 00016217  0x0000330c beq  0x00000000 , 0x00003f5e 
+ 00016218  0x0000330d beq  0x00000001 , 0x00003f61 
+ 00016219  0x0000330e beq  0x00000002 , 0x00003f64 
+ 00016220  0x0000330f beq  0x00000003 , 0x00003f67 
+ 00016221  0x00003310 rtn 
+ 00016222  0x00003312 fetch  0x00000001 , 0x000046be 
+ 00016223  0x00003313 beq  0x00000003 , 0x00003f6a 
+ 00016224  0x00003314 rtn 
+ 00016225  0x00003316 fetch  0x00000001 , 0x000046be 
+ 00016226  0x00003317 beq  0x00000000 , 0x00003f6a 
+ 00016227  0x00003318 rtn 
+ 00016228  0x0000331a fetch  0x00000001 , 0x000046be 
+ 00016229  0x0000331b beq  0x00000003 , 0x00003f6f 
+ 00016230  0x0000331c rtn 
+ 00016231  0x0000331e fetch  0x00000001 , 0x000046be 
+ 00016232  0x0000331f beq  0x00000000 , 0x00003f6f 
+ 00016233  0x00003320 rtn 
+ 00016234  0x00003322 jam  0x00000000 , 0x000046c2 
+ 00016235  0x00003323 fetch  0x00000001 , 0x000046c0 
+ 00016236  0x00003324 increase  0x00000001 , 0x0000003f 
+ 00016237  0x00003325 store  0x00000001 , 0x000046c0 
+ 00016238  0x00003326 rtn 
+ 00016239  0x00003328 jam  0x00000000 , 0x000046c1 
+ 00016240  0x00003329 fetch  0x00000001 , 0x000046c0 
+ 00016241  0x0000332a increase  0xffffffff , 0x0000003f 
+ 00016242  0x0000332b store  0x00000001 , 0x000046c0 
+ 00016243  0x0000332c rtn 
+ 00016244  0x00003330 setarg  0x00000002 
+ 00016245  0x00003331 store  0x00000001 , 0x00004680 
+ 00016246  0x00003332 rtn 
+ 00016247  0x00003335 fetch  0x00000001 , 0x000041e2 
+ 00016248  0x00003336 rtn  0x00000034 
+ 00016249  0x00003337 call  0x00005271 
+ 00016250  0x00003338 nrtn  0x00000034 
+ 00016251  0x00003339 fetch  0x00000004 , 0x000046d3 
+ 00016252  0x0000333a bbit1  0x00000003 , 0x00003f8a 
+ 00016253  0x0000333b bbit1  0x00000000 , 0x00003f8a 
+ 00016254  0x0000333c bbit1  0x00000005 , 0x00003f8a 
+ 00016255  0x0000333d call  0x00003f97 
+ 00016256  0x0000333e nrtn  0x00000028 
+ 00016257  0x00003340 arg  0x00000009 , 0x00000011 
+ 00016258  0x00003341 call  0x00004d63 
+ 00016259  0x00003342 fetch  0x00000002 , 0x0000424e 
+ 00016260  0x00003343 istore  0x00000002 , 0x00000005 
+ 00016261  0x00003344 setarg  0x000002a1 
+ 00016262  0x00003345 istore  0x00000002 , 0x00000005 
+ 00016263  0x00003346 fetch  0x00000007 , 0x0000469a 
+ 00016264  0x00003347 istore  0x00000007 , 0x00000005 
+ 00016265  0x00003348 rtn 
+ 00016266  0x0000334c setarg  0x00000000 
+ 00016267  0x0000334d store  0x00000007 , 0x0000469a 
+ 00016268  0x0000334e branch  0x00003f81 
+ 00016269  0x00003352 fetch  0x00000002 , 0x000046aa 
+ 00016270  0x00003353 store  0x00000002 , 0x000046b0 
+ 00016271  0x00003354 rtn 
+ 00016272  0x00003358 bpatch  0x000000e5 , 0x0000401c 
+ 00016273  0x00003359 arg  0x00000007 , 0x00000011 
+ 00016274  0x0000335a fetcht  0x00000002 , 0x0000446f 
+ 00016275  0x0000335b call  0x00005a64 
+ 00016276  0x0000335c fetch  0x00000007 , 0x0000469a 
+ 00016277  0x0000335d istore  0x00000007 , 0x00000005 
+ 00016278  0x0000335e rtn 
+ 00016279  0x00003361 bpatch  0x000000e6 , 0x0000401c 
+ 00016280  0x00003362 disable  0x00000028 
+ 00016281  0x00003363 setarg  0x00000000 
+ 00016282  0x00003364 store  0x00000006 , 0x0000469b 
+ 00016283  0x00003365 call  0x00003fb5 
+ 00016284  0x00003366 call  0x00004079 
+ 00016285  0x00003367 call  0x0000407e 
+ 00016286  0x00003368 call  0x00004099 
+ 00016287  0x00003369 nrtn  0x00000028 
+ 00016288  0x0000336a call  0x00003f8d 
+ 00016289  0x0000336b arg  0x00000008 , 0x00000007 
+ 00016290  0x0000336c branch  0x000043ce 
+ 00016291  0x0000336f fetch  0x00000002 , 0x0000469b 
+ 00016292  0x00003370 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00016293  0x00003371 store  0x00000002 , 0x0000469b 
+ 00016294  0x00003372 branch  0x00007fe7 
+ 00016295  0x00003374 fetch  0x00000002 , 0x0000469d 
+ 00016296  0x00003375 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00016297  0x00003376 store  0x00000002 , 0x0000469d 
+ 00016298  0x00003377 branch  0x00007fe7 
+ 00016299  0x00003379 fetch  0x00000002 , 0x0000469d 
+ 00016300  0x0000337a sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00016301  0x0000337b store  0x00000002 , 0x0000469d 
+ 00016302  0x0000337c fetch  0x00000002 , 0x0000469b 
+ 00016303  0x0000337d sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00016304  0x0000337e store  0x00000002 , 0x0000469b 
+ 00016305  0x0000337f call  0x00004002 
+ 00016306  0x00003380 branch  0x00007fe7 
+ 00016307  0x00003382 call  0x00004002 
+ 00016308  0x00003383 branch  0x00007fe7 
+ 00016309  0x00003385 fetch  0x00000001 , 0x00004239 
+ 00016310  0x00003386 rtnne  0x00000000 
+ 00016311  0x00003387 fetch  0x00000001 , 0x000046e0 
+ 00016312  0x00003388 beq  0x00000000 , 0x00003fe2 
+ 00016313  0x00003389 beq  0x00000001 , 0x00003fe2 
+ 00016314  0x0000338a beq  0x00000002 , 0x00003fe2 
+ 00016315  0x0000338b beq  0x00000003 , 0x00003fe2 
+ 00016316  0x0000338c beq  0x00000004 , 0x00003fc4 
+ 00016317  0x0000338d beq  0x00000005 , 0x00004010 
+ 00016318  0x0000338e beq  0x00000006 , 0x00003fe2 
+ 00016319  0x0000338f branch  0x00003fe2 
+ 00016320  0x00003392 fetch  0x00000001 , 0x000046a7 
+ 00016321  0x00003393 call  0x0000405d , 0x00000034 
+ 00016322  0x00003394 jam  0x00000001 , 0x000046a7 
+ 00016323  0x00003395 rtn 
+ 00016324  0x00003399 call  0x00003fc0 
+ 00016325  0x0000339a fetcht  0x00000001 , 0x000046f3 
+ 00016326  0x0000339b call  0x0000681d 
+ 00016327  0x0000339c nrtn  0x00000001 
+ 00016328  0x0000339d setarg  0x00000000 
+ 00016329  0x0000339e call  0x00006414 
+ 00016330  0x0000339f bne  0x00000030 , 0x000040d1 
+ 00016331  0x000033a0 setarg  0x00000002 
+ 00016332  0x000033a1 call  0x00006414 
+ 00016333  0x000033a2 rtnbit0  0x00000007 
+ 00016334  0x000033a3 call  0x0000405d 
+ 00016335  0x000033a4 call  0x00003fde 
+ 00016336  0x000033a5 store  0x00000001 , 0x000046a1 
+ 00016337  0x000033a6 rshift4  0x0000003f , 0x0000003f 
+ 00016338  0x000033a7 call  0x00004169 
+ 00016339  0x000033a8 store  0x00000001 , 0x0000469c 
+ 00016340  0x000033a9 fetch  0x00000001 , 0x000046a1 
+ 00016341  0x000033aa and  0x0000003f , 0x0000000f , 0x0000003f 
+ 00016342  0x000033ab call  0x00004169 
+ 00016343  0x000033ac store  0x00000001 , 0x0000469e 
+ 00016344  0x000033ad fetch  0x00000001 , 0x000046f6 
+ 00016345  0x000033ae beq  0x00000000 , 0x00003fa3 
+ 00016346  0x000033af beq  0x00000001 , 0x00003fab 
+ 00016347  0x000033b0 beq  0x00000002 , 0x00003fa7 
+ 00016348  0x000033b1 beq  0x00000003 , 0x00003fb3 
+ 00016349  0x000033b2 rtn 
+ 00016350  0x000033b5 setarg  0x00000012 
+ 00016351  0x000033b6 branch  0x00006414 
+ 00016352  0x000033b9 beq  0x00000031 , 0x00003fea 
+ 00016353  0x000033ba branch  0x000040d1 
+ 00016354  0x000033bd call  0x00003fc0 
+ 00016355  0x000033be disable  0x00000028 
+ 00016356  0x000033bf fetcht  0x00000001 , 0x000046f3 
+ 00016357  0x000033c0 call  0x0000681d 
+ 00016358  0x000033c1 nrtn  0x00000001 
+ 00016359  0x000033c2 setarg  0x00000000 
+ 00016360  0x000033c3 call  0x00006414 
+ 00016361  0x000033c4 bne  0x00000030 , 0x00003fe0 
+ 00016362  0x000033c6 setarg  0x00000002 
+ 00016363  0x000033c7 call  0x00006414 
+ 00016364  0x000033c8 rtnbit0  0x00000007 
+ 00016365  0x000033c9 call  0x0000405d 
+ 00016366  0x000033ca fetch  0x00000001 , 0x0000469b 
+ 00016367  0x000033cb call  0x00004165 
+ 00016368  0x000033cc store  0x00000002 , 0x0000469b 
+ 00016369  0x000033cd fetch  0x00000001 , 0x0000469d 
+ 00016370  0x000033ce call  0x00004165 
+ 00016371  0x000033cf store  0x00000002 , 0x0000469d 
+ 00016372  0x000033d0 fetch  0x00000001 , 0x000046f6 
+ 00016373  0x000033d1 beq  0x00000000 , 0x00003ffa 
+ 00016374  0x000033d2 beq  0x00000001 , 0x00003ffc 
+ 00016375  0x000033d3 beq  0x00000002 , 0x00003ffe 
+ 00016376  0x000033d4 beq  0x00000003 , 0x00004000 
+ 00016377  0x000033d5 rtn 
+ 00016378  0x000033d8 call  0x00003fa3 
+ 00016379  0x000033d9 branch  0x000040b3 
+ 00016380  0x000033db call  0x00003fab 
+ 00016381  0x000033dc branch  0x000040b3 
+ 00016382  0x000033de call  0x00003fa7 
+ 00016383  0x000033df branch  0x000040b3 
+ 00016384  0x000033e1 call  0x00003fb3 
+ 00016385  0x000033e2 branch  0x000040b3 
+ 00016386  0x000033e5 fetch  0x00000002 , 0x0000469d 
+ 00016387  0x000033e6 fetcht  0x00000002 , 0x0000469b 
+ 00016388  0x000033e7 store  0x00000002 , 0x0000469b 
+ 00016389  0x000033e8 storet  0x00000002 , 0x0000469d 
+ 00016390  0x000033e9 rtn 
+ 00016391  0x000033ec call  0x0000640f 
+ 00016392  0x000033ed nop  0x00000064 
+ 00016393  0x000033ee copy  0x00000012 , 0x0000003f 
+ 00016394  0x000033ef call  0x00006414 
+ 00016395  0x000033f0 copy  0x0000003f , 0x00000012 
+ 00016396  0x000033f1 call  0x00006411 
+ 00016397  0x000033f2 nop  0x00000064 
+ 00016398  0x000033f3 copy  0x00000012 , 0x0000003f 
+ 00016399  0x000033f4 rtn 
+ 00016400  0x000033f6 disable  0x00000028 
+ 00016401  0x000033f7 fetcht  0x00000001 , 0x000046f3 
+ 00016402  0x000033f8 call  0x0000681d 
+ 00016403  0x000033f9 nrtn  0x00000001 
+ 00016404  0x000033fa arg  0x00000002 , 0x00000012 
+ 00016405  0x000033fb call  0x00004007 
+ 00016406  0x000033fc rtnbit0  0x00000007 
+ 00016407  0x000033fd arg  0x00000000 , 0x00000012 
+ 00016408  0x000033fe call  0x00004007 
+ 00016409  0x000033ff store  0x00000001 , 0x000046dd 
+ 00016410  0x00003400 bne  0x0000003e , 0x00004145 
+ 00016411  0x00003401 fetch  0x00000001 , 0x000046a7 
+ 00016412  0x00003402 call  0x00004039 , 0x00000034 
+ 00016413  0x00003403 jam  0x00000001 , 0x000046a7 
+ 00016414  0x00003404 call  0x00004039 
+ 00016415  0x00003405 fetch  0x00000001 , 0x000046a1 
+ 00016416  0x00003406 rshift4  0x0000003f , 0x0000003f 
+ 00016417  0x00003407 call  0x00004169 
+ 00016418  0x00003408 store  0x00000001 , 0x0000469c 
+ 00016419  0x00003409 fetch  0x00000001 , 0x000046a1 
+ 00016420  0x0000340a and  0x0000003f , 0x0000000f , 0x0000003f 
+ 00016421  0x0000340b call  0x00004169 
+ 00016422  0x0000340c store  0x00000001 , 0x0000469e 
+ 00016423  0x0000340d fetch  0x00000001 , 0x000046f6 
+ 00016424  0x0000340e beq  0x00000000 , 0x00004031 
+ 00016425  0x0000340f beq  0x00000001 , 0x00004035 
+ 00016426  0x00003410 beq  0x00000002 , 0x00004033 
+ 00016427  0x00003411 beq  0x00000003 , 0x00004037 
+ 00016428  0x00003412 rtn 
+ 00016429  0x00003415 fetch  0x00000001 , 0x000046a4 
+ 00016430  0x00003416 beq  0x00000000 , 0x00004051 
+ 00016431  0x00003417 beq  0x00000001 , 0x00004045 
+ 00016432  0x00003418 rtn 
+ 00016433  0x0000341c call  0x00003fa3 
+ 00016434  0x0000341d branch  0x0000402d 
+ 00016435  0x00003420 call  0x00003fa7 
+ 00016436  0x00003421 branch  0x0000402d 
+ 00016437  0x00003424 call  0x00003fab 
+ 00016438  0x00003425 branch  0x0000402d 
+ 00016439  0x00003428 call  0x00003fb3 
+ 00016440  0x00003429 branch  0x0000402d 
+ 00016441  0x0000342c call  0x0000640f 
+ 00016442  0x0000342d call  0x0000405d 
+ 00016443  0x0000342e arg  0x00000005 , 0x0000003f 
+ 00016444  0x0000342f call  0x00006414 
+ 00016445  0x00003430 store  0x00000001 , 0x000046a1 
+ 00016446  0x00003431 arg  0x00000007 , 0x0000003f 
+ 00016447  0x00003432 call  0x00006414 
+ 00016448  0x00003433 store  0x00000001 , 0x000046a2 
+ 00016449  0x00003434 arg  0x00000008 , 0x0000003f 
+ 00016450  0x00003435 call  0x00006414 
+ 00016451  0x00003436 store  0x00000001 , 0x000046a3 
+ 00016452  0x00003437 branch  0x00006411 
+ 00016453  0x0000343b fetch  0x00000001 , 0x000046a2 
+ 00016454  0x0000343c rtnne  0x00000000 
+ 00016455  0x0000343d fetch  0x00000001 , 0x000046a3 
+ 00016456  0x0000343e sub  0x0000003f , 0x0000002d , 0x0000003e 
+ 00016457  0x0000343f rtn  0x00000002 
+ 00016458  0x00003440 jam  0x00000000 , 0x000046a4 
+ 00016459  0x00003441 setarg  0x0000ba41 
+ 00016460  0x00003442 call  0x00006405 
+ 00016461  0x00003443 setarg  0x00000032 
+ 00016462  0x00003444 call  0x00006405 
+ 00016463  0x00003445 setarg  0x0000b541 
+ 00016464  0x00003446 branch  0x00006405 
+ 00016465  0x00003448 fetch  0x00000001 , 0x000046a2 
+ 00016466  0x00003449 rtnne  0x00000000 
+ 00016467  0x0000344a fetch  0x00000001 , 0x000046a3 
+ 00016468  0x0000344b sub  0x0000003f , 0x0000002d , 0x0000003e 
+ 00016469  0x0000344c nrtn  0x00000002 
+ 00016470  0x0000344d jam  0x00000001 , 0x000046a4 
+ 00016471  0x0000344e setarg  0x0000ba41 
+ 00016472  0x0000344f call  0x00006405 
+ 00016473  0x00003450 setarg  0x00008032 
+ 00016474  0x00003451 call  0x00006405 
+ 00016475  0x00003452 setarg  0x0000b541 
+ 00016476  0x00003453 branch  0x00006405 
+ 00016477  0x00003458 arg  0x00000003 , 0x0000003f 
+ 00016478  0x00003459 call  0x00006414 
+ 00016479  0x0000345a store  0x00000002 , 0x0000469b 
+ 00016480  0x0000345b arg  0x00000004 , 0x0000003f 
+ 00016481  0x0000345c call  0x00006414 
+ 00016482  0x0000345d store  0x00000002 , 0x0000469d 
+ 00016483  0x0000345e rtn 
+ 00016484  0x00003461 arg  0x0000001b , 0x00000002 
+ 00016485  0x00003462 call  0x000067fb 
+ 00016486  0x00003463 arg  0x0000001b , 0x00000002 
+ 00016487  0x00003464 call  0x0000681d 
+ 00016488  0x00003465 rtn  0x00000001 
+ 00016489  0x00003466 hfetch  0x00000001 , 0x00008109 
+ 00016490  0x00003467 set1  0x00000004 , 0x0000003f 
+ 00016491  0x00003468 hstore  0x00000001 , 0x00008109 
+ 00016492  0x00003469 rtn 
+ 00016493  0x0000346c fetcht  0x00000001 , 0x000046c0 
+ 00016494  0x0000346d hfetch  0x00000001 , 0x00008109 
+ 00016495  0x0000346e iadd  0x00000002 , 0x0000003f 
+ 00016496  0x0000346f rtn  0x00000034 
+ 00016497  0x00003470 store  0x00000001 , 0x0000469f 
+ 00016498  0x00003471 jam  0x00000000 , 0x000046c0 
+ 00016499  0x00003472 branch  0x00007fe7 
+ 00016500  0x00003474 fetcht  0x00000001 , 0x000046c0 
+ 00016501  0x00003475 hfetch  0x00000001 , 0x00008109 
+ 00016502  0x00003476 iadd  0x00000002 , 0x0000003f 
+ 00016503  0x00003477 store  0x00000001 , 0x000046c0 
+ 00016504  0x00003478 rtn 
+ 00016505  0x0000347a fetch  0x00000001 , 0x000046c0 
+ 00016506  0x0000347b rtn  0x00000034 
+ 00016507  0x0000347c store  0x00000001 , 0x0000469f 
+ 00016508  0x0000347d jam  0x00000000 , 0x000046c0 
+ 00016509  0x0000347e branch  0x00007fe7 
+ 00016510  0x00003481 fetch  0x00000001 , 0x000046ba 
+ 00016511  0x00003482 rtn  0x00000034 
+ 00016512  0x00003483 store  0x00000001 , 0x000046a0 
+ 00016513  0x00003484 jam  0x00000000 , 0x000046ba 
+ 00016514  0x00003485 branch  0x00007fe7 
+ 00016515  0x00003488 arg  0x00000000 , 0x00000011 
+ 00016516  0x00003489 fetcht  0x00000001 , 0x000046e2 
+ 00016517  0x0000348a call  0x0000681d 
+ 00016518  0x0000348b setflag  0x00000001 , 0x00000000 , 0x00000011 
+ 00016519  0x0000348c fetcht  0x00000001 , 0x000046e3 
+ 00016520  0x0000348d call  0x0000681d 
+ 00016521  0x0000348e setflag  0x00000001 , 0x00000001 , 0x00000011 
+ 00016522  0x0000348f fetcht  0x00000001 , 0x000046e4 
+ 00016523  0x00003490 call  0x0000681d 
+ 00016524  0x00003491 setflag  0x00000001 , 0x00000002 , 0x00000011 
+ 00016525  0x00003492 call  0x00004090 
+ 00016526  0x00003493 copy  0x00000011 , 0x0000003f 
+ 00016527  0x00003494 rtn 
+ 00016528  0x00003496 fetch  0x00000001 , 0x000046e5 
+ 00016529  0x00003497 rtneq  0x000000ff 
+ 00016530  0x00003498 fetcht  0x00000001 , 0x000046e5 
+ 00016531  0x00003499 call  0x0000681d 
+ 00016532  0x0000349a setflag  0x00000001 , 0x00000003 , 0x00000011 
+ 00016533  0x0000349b fetcht  0x00000001 , 0x000046e6 
+ 00016534  0x0000349c call  0x0000681d 
+ 00016535  0x0000349d setflag  0x00000001 , 0x00000004 , 0x00000011 
+ 00016536  0x0000349e rtn 
+ 00016537  0x000034a1 call  0x00004083 
+ 00016538  0x000034a2 call  0x000040a8 
+ 00016539  0x000034a3 call  0x000040a3 
+ 00016540  0x000034a4 copy  0x00000011 , 0x0000003f 
+ 00016541  0x000034a5 fetcht  0x00000001 , 0x0000469a 
+ 00016542  0x000034a6 store  0x00000001 , 0x0000469a 
+ 00016543  0x000034a7 ixor  0x00000002 , 0x0000003f 
+ 00016544  0x000034a8 sub  0x0000003f , 0x00000000 , 0x0000003e 
+ 00016545  0x000034a9 rtn  0x00000005 
+ 00016546  0x000034aa branch  0x00007fe7 
+ 00016547  0x000034ad rtnmark0  0x00000026 
+ 00016548  0x000034ae copy  0x00000011 , 0x0000003f 
+ 00016549  0x000034af rtn  0x00000034 
+ 00016550  0x000034b0 store  0x00000001 , 0x0000469a 
+ 00016551  0x000034b1 branch  0x00007fe7 
+ 00016552  0x000034b5 fetch  0x00000002 , 0x00004682 
+ 00016553  0x000034b6 bbit1  0x00000009 , 0x000040ad 
+ 00016554  0x000034b7 fetch  0x00000002 , 0x00004682 
+ 00016555  0x000034b8 bbit1  0x00000000 , 0x000040b0 
+ 00016556  0x000034b9 rtn 
+ 00016557  0x000034bb copy  0x00000011 , 0x0000003f 
+ 00016558  0x000034bc nbranch  0x00005820 , 0x00000034 
+ 00016559  0x000034bd branch  0x00005822 
+ 00016560  0x000034bf copy  0x00000011 , 0x0000003f 
+ 00016561  0x000034c0 nbranch  0x00002bc7 , 0x00000034 
+ 00016562  0x000034c1 branch  0x00002bc9 
+ 00016563  0x000034c5 bpatch  0x000000e7 , 0x0000401c 
+ 00016564  0x000034c6 arg  0x0000001a , 0x00000002 
+ 00016565  0x000034c7 fetch  0x00000004 , 0x000046d3 
+ 00016566  0x000034c8 isolate1  0x00000012 , 0x0000003f 
+ 00016567  0x000034c9 call  0x000040be , 0x00000001 
+ 00016568  0x000034ca call  0x0000681d 
+ 00016569  0x000034cb rtn  0x00000001 
+ 00016570  0x000034cc setarg  0x0000000a 
+ 00016571  0x000034cd call  0x00006414 
+ 00016572  0x000034ce nop  0x000003e8 
+ 00016573  0x000034cf branch  0x000040b3 
+ 00016574  0x000034d1 arg  0x0000001f , 0x00000002 
+ 00016575  0x000034d2 rtn 
+ 00016576  0x000034d5 fetch  0x00000004 , 0x000046d3 
+ 00016577  0x000034d6 bbit1  0x00000012 , 0x000040c4 
+ 00016578  0x000034d8 arg  0x0000001a , 0x00000002 
+ 00016579  0x000034d9 branch  0x000067fe 
+ 00016580  0x000034db arg  0x0000001f , 0x00000002 
+ 00016581  0x000034dc branch  0x000067fe 
+ 00016582  0x000034e0 call  0x00003d36 
+ 00016583  0x000034e1 rtn  0x0000002b 
+ 00016584  0x000034e2 call  0x000040c0 
+ 00016585  0x000034e3 fetch  0x00000001 , 0x000046e0 
+ 00016586  0x000034e4 beq  0x00000005 , 0x000040d5 
+ 00016587  0x000034e6 call  0x000040d9 
+ 00016588  0x000034e7 beq  0x00000030 , 0x000040e0 
+ 00016589  0x000034e8 beq  0x00000031 , 0x000040ea 
+ 00016590  0x000034e9 call  0x000040d1 
+ 00016591  0x000034ea nop  0x000003e8 
+ 00016592  0x000034eb branch  0x000040cb 
+ 00016593  0x000034ed bpatch  0x000000e8 , 0x0000401d 
+ 00016594  0x000034ee fetch  0x00000004 , 0x000046d3 
+ 00016595  0x000034ef bbit1  0x00000012 , 0x000063e0 
+ 00016596  0x000034f0 branch  0x000063d1 
+ 00016597  0x000034f3 call  0x000040d9 
+ 00016598  0x000034f4 beq  0x0000003e , 0x0000414b 
+ 00016599  0x000034f5 call  0x00004145 
+ 00016600  0x000034f6 branch  0x000040d5 
+ 00016601  0x000034f9 setarg  0x00000001 
+ 00016602  0x000034fa call  0x00006414 
+ 00016603  0x000034fb store  0x00000001 , 0x000046de 
+ 00016604  0x000034fc setarg  0x00000000 
+ 00016605  0x000034fd call  0x00006414 
+ 00016606  0x000034fe store  0x00000001 , 0x000046dd 
+ 00016607  0x000034ff rtn 
+ 00016608  0x00003501 fetch  0x00000001 , 0x000046de 
+ 00016609  0x00003502 beq  0x000000d1 , 0x00004139 
+ 00016610  0x00003503 beq  0x000000d2 , 0x000040f8 
+ 00016611  0x00003504 beq  0x00000002 , 0x000040ee 
+ 00016612  0x00003505 beq  0x00000054 , 0x000040e6 
+ 00016613  0x00003506 rtn 
+ 00016614  0x00003508 jam  0x00000002 , 0x000046e0 
+ 00016615  0x00003509 rtn 
+ 00016616  0x0000350b jam  0x00000006 , 0x000046e0 
+ 00016617  0x0000350c rtn 
+ 00016618  0x0000350e fetch  0x00000001 , 0x000046de 
+ 00016619  0x0000350f beq  0x00000070 , 0x000040e8 
+ 00016620  0x00003510 jam  0x00000001 , 0x000046e0 
+ 00016621  0x00003511 rtn 
+ 00016622  0x00003513 jam  0x00000004 , 0x000046e0 
+ 00016623  0x00003514 call  0x000040f6 
+ 00016624  0x00003515 setarg  0x00003426 
+ 00016625  0x00003516 call  0x00006413 
+ 00016626  0x00003517 setarg  0x00000419 
+ 00016627  0x00003518 call  0x00006413 
+ 00016628  0x0000351a setarg  0x00000009 
+ 00016629  0x0000351b branch  0x00006413 
+ 00016630  0x0000351d setarg  0x00005a09 
+ 00016631  0x0000351e branch  0x00006413 
+ 00016632  0x00003521 jam  0x00000003 , 0x000046e0 
+ 00016633  0x00003522 call  0x000040f6 
+ 00016634  0x00003523 setarg  0x00000f0d 
+ 00016635  0x00003524 call  0x00006413 
+ 00016636  0x00003525 setarg  0x0000e31d 
+ 00016637  0x00003526 call  0x00006413 
+ 00016638  0x00003527 setarg  0x0000d27d 
+ 00016639  0x00003528 call  0x00006413 
+ 00016640  0x00003529 call  0x00004102 
+ 00016641  0x0000352a branch  0x0000411a 
+ 00016642  0x0000352d setarg  0x0000351b 
+ 00016643  0x0000352e call  0x00006413 
+ 00016644  0x0000352f setarg  0x0000b428 
+ 00016645  0x00003530 call  0x00006413 
+ 00016646  0x00003531 setarg  0x00004629 
+ 00016647  0x00003532 call  0x00006413 
+ 00016648  0x00003533 setarg  0x0000962a 
+ 00016649  0x00003534 call  0x00006413 
+ 00016650  0x00003535 setarg  0x00008c2b 
+ 00016651  0x00003536 call  0x00006413 
+ 00016652  0x00003537 setarg  0x00006e2c 
+ 00016653  0x00003538 call  0x00006413 
+ 00016654  0x00003539 setarg  0x0000642d 
+ 00016655  0x0000353a call  0x00006413 
+ 00016656  0x0000353b setarg  0x00005f38 
+ 00016657  0x0000353c call  0x00006413 
+ 00016658  0x0000353d setarg  0x00000f39 
+ 00016659  0x0000353e call  0x00006413 
+ 00016660  0x0000353f setarg  0x0000323a 
+ 00016661  0x00003540 call  0x00006413 
+ 00016662  0x00003541 setarg  0x0000473b 
+ 00016663  0x00003542 call  0x00006413 
+ 00016664  0x00003543 setarg  0x00001042 
+ 00016665  0x00003544 branch  0x00006413 
+ 00016666  0x00003546 setarg  0x00002e54 
+ 00016667  0x00003547 call  0x00006413 
+ 00016668  0x00003548 setarg  0x0000f255 
+ 00016669  0x00003549 call  0x00006413 
+ 00016670  0x0000354a setarg  0x0000f461 
+ 00016671  0x0000354b call  0x00006413 
+ 00016672  0x0000354c setarg  0x00007063 
+ 00016673  0x0000354d call  0x00006413 
+ 00016674  0x0000354e setarg  0x00005275 
+ 00016675  0x0000354f call  0x00006413 
+ 00016676  0x00003550 setarg  0x00004176 
+ 00016677  0x00003551 call  0x00006413 
+ 00016678  0x00003552 setarg  0x0000ed77 
+ 00016679  0x00003553 call  0x00006413 
+ 00016680  0x00003554 setarg  0x00002378 
+ 00016681  0x00003555 call  0x00006413 
+ 00016682  0x00003556 setarg  0x00004679 
+ 00016683  0x00003557 call  0x00006413 
+ 00016684  0x00003558 setarg  0x0000e57a 
+ 00016685  0x00003559 call  0x00006413 
+ 00016686  0x0000355a setarg  0x0000487c 
+ 00016687  0x0000355b call  0x00006413 
+ 00016688  0x0000355c setarg  0x0000777e 
+ 00016689  0x0000355d call  0x00006413 
+ 00016690  0x0000355e setarg  0x0000017f 
+ 00016691  0x0000355f call  0x00006413 
+ 00016692  0x00003560 setarg  0x0000000b 
+ 00016693  0x00003561 call  0x00006413 
+ 00016694  0x00003562 setarg  0x0000007f 
+ 00016695  0x00003563 call  0x00006413 
+ 00016696  0x00003564 branch  0x000040f4 
+ 00016697  0x00003568 jam  0x00000000 , 0x000046e0 
+ 00016698  0x00003569 call  0x000040f6 
+ 00016699  0x0000356a setarg  0x0000100d 
+ 00016700  0x0000356b call  0x00006413 
+ 00016701  0x0000356c setarg  0x0000ed1d 
+ 00016702  0x0000356d call  0x00006413 
+ 00016703  0x0000356e setarg  0x0000807d 
+ 00016704  0x0000356f call  0x00006413 
+ 00016705  0x00003570 call  0x00004102 
+ 00016706  0x00003571 setarg  0x00000943 
+ 00016707  0x00003572 call  0x00006413 
+ 00016708  0x00003573 branch  0x0000411a 
+ 00016709  0x00003577 fetcht  0x00000001 , 0x000046dc 
+ 00016710  0x00003578 call  0x00006829 
+ 00016711  0x00003579 call  0x00007ec1 
+ 00016712  0x0000357a fetcht  0x00000001 , 0x000046dc 
+ 00016713  0x0000357b call  0x00006825 
+ 00016714  0x0000357c branch  0x00007ec1 
+ 00016715  0x0000357f jam  0x00000005 , 0x000046e0 
+ 00016716  0x00003580 setarg  0x0000ba41 
+ 00016717  0x00003581 call  0x00006405 
+ 00016718  0x00003582 setarg  0x00000d11 
+ 00016719  0x00003583 call  0x00006405 
+ 00016720  0x00003584 setarg  0x0000041b 
+ 00016721  0x00003585 call  0x00006405 
+ 00016722  0x00003586 setarg  0x0000041c 
+ 00016723  0x00003587 call  0x00006405 
+ 00016724  0x00003588 setarg  0x00000f1d 
+ 00016725  0x00003589 call  0x00006405 
+ 00016726  0x0000358a setarg  0x00000032 
+ 00016727  0x0000358b call  0x00006405 
+ 00016728  0x0000358c setarg  0x0000b541 
+ 00016729  0x0000358d branch  0x00006405 
+ 00016730  0x00003592 setarg  0x0000ba41 
+ 00016731  0x00003593 call  0x00006405 
+ 00016732  0x00003594 nop  0x00000fa0 
+ 00016733  0x00003595 setarg  0x0000ff7f 
+ 00016734  0x00003596 call  0x00006405 
+ 00016735  0x00003597 copy  0x00000011 , 0x0000003f 
+ 00016736  0x00003598 call  0x00006405 
+ 00016737  0x00003599 setarg  0x0000007f 
+ 00016738  0x0000359a call  0x00006405 
+ 00016739  0x0000359b setarg  0x0000b541 
+ 00016740  0x0000359c branch  0x00006405 
+ 00016741  0x0000359f rtnbit0  0x00000007 
+ 00016742  0x000035a0 arg  0x0000ff00 , 0x00000002 
+ 00016743  0x000035a1 ior  0x00000002 , 0x0000003f 
+ 00016744  0x000035a2 rtn 
+ 00016745  0x000035a5 rtnbit0  0x00000003 
+ 00016746  0x000035a6 arg  0x000000f0 , 0x00000002 
+ 00016747  0x000035a7 ior  0x00000002 , 0x0000003f 
+ 00016748  0x000035a8 rtn 
+ 00016749  0x000035ac call  0x00005892 
+ 00016750  0x000035ad nrtn  0x00000034 
+ 00016751  0x000035ae fetch  0x00000001 , 0x000046c5 
+ 00016752  0x000035af and  0x0000003f , 0x00000003 , 0x0000003f 
+ 00016753  0x000035b0 rtnne  0x00000003 
+ 00016754  0x000035b1 fetch  0x00000004 , 0x000046d3 
+ 00016755  0x000035b2 bbit1  0x00000003 , 0x00004179 
+ 00016756  0x000035b3 bbit1  0x00000000 , 0x00004179 
+ 00016757  0x000035b4 bbit1  0x00000005 , 0x00004179 
+ 00016758  0x000035b5 call  0x00003f97 
+ 00016759  0x000035b6 nrtn  0x00000028 
+ 00016760  0x000035b7 branch  0x00003f90 
+ 00016761  0x000035ba setarg  0x00000000 
+ 00016762  0x000035bb store  0x00000007 , 0x0000469a 
+ 00016763  0x000035bc branch  0x00003f90 
+ 00016764  0x000035bf copy  0x00000013 , 0x0000003f 
+ 00016765  0x000035c0 beq  0x00000014 , 0x000041c3 
+ 00016766  0x000035c1 beq  0x00000001 , 0x000042ca 
+ 00016767  0x000035c2 beq  0x00000015 , 0x000041d9 
+ 00016768  0x000035c3 beq  0x00000002 , 0x000041d9 
+ 00016769  0x000035c4 beq  0x00000005 , 0x000041d6 
+ 00016770  0x000035c5 beq  0x00000010 , 0x0000426c 
+ 00016771  0x000035c6 beq  0x00000012 , 0x0000429b 
+ 00016772  0x000035c7 beq  0x00000006 , 0x000041d5 
+ 00016773  0x000035c8 beq  0x00000004 , 0x000041cc 
+ 00016774  0x000035c9 beq  0x00000013 , 0x000041cc 
+ 00016775  0x000035ca beq  0x0000000a , 0x000041ca 
+ 00016776  0x000035cb beq  0x0000002e , 0x000033cd 
+ 00016777  0x000035cc beq  0x00000031 , 0x000041b4 
+ 00016778  0x000035cd beq  0x00000032 , 0x000041b6 
+ 00016779  0x000035ce beq  0x0000003e , 0x00004191 
+ 00016780  0x000035cf beq  0x00000027 , 0x0000438e 
+ 00016781  0x000035d0 beq  0x00000039 , 0x0000419c 
+ 00016782  0x000035d1 beq  0x0000003a , 0x00004192 
+ 00016783  0x000035d2 beq  0x0000003c , 0x0000419a 
+ 00016784  0x000035d3 rtn 
+ 00016785  0x000035d7 branch  0x00003410 
+ 00016786  0x000035da jam  0x00000001 , 0x0000478b 
+ 00016787  0x000035db fetch  0x00000001 , 0x0000471e 
+ 00016788  0x000035dc nbranch  0x00004492 , 0x00000034 
+ 00016789  0x000035dd fetch  0x00000001 , 0x00004720 
+ 00016790  0x000035de fetcht  0x00000001 , 0x00004703 
+ 00016791  0x000035df isub  0x00000002 , 0x0000003e 
+ 00016792  0x000035e0 branch  0x0000340a , 0x00000005 
+ 00016793  0x000035e1 rtn 
+ 00016794  0x000035e3 jam  0x00000001 , 0x0000478b 
+ 00016795  0x000035e4 rtn 
+ 00016796  0x000035e6 jam  0x00000001 , 0x0000478b 
+ 00016797  0x000035e7 arg  0x00000003 , 0x00000007 
+ 00016798  0x000035e8 call  0x000043d2 
+ 00016799  0x000035e9 setarg  0x00000000 
+ 00016800  0x000035ea store  0x00000002 , 0x00004707 
+ 00016801  0x000035eb jam  0x00000000 , 0x000046a7 
+ 00016802  0x000035ed fetch  0x00000001 , 0x000046e0 
+ 00016803  0x000035ee sub  0x0000003f , 0x00000005 , 0x0000003e 
+ 00016804  0x000035ef call  0x00004039 , 0x00000005 
+ 00016805  0x000035f0 ncall  0x0000405d , 0x00000005 
+ 00016806  0x000035f2 fetch  0x00000001 , 0x00000004 , 0x000046d3 
+ 00016807  0x000035f3 bbit1  0x00000013 , 0x000041af 
+ 00016808  0x000035f4 call  0x000041aa 
+ 00016809  0x000035f5 branch  0x000065d1 
+ 00016810  0x000035f8 call  0x00002c7a 
+ 00016811  0x000035f9 add  0x00000013 , 0x000000ae , 0x00000011 
+ 00016812  0x000035fa arg  0x0000005b , 0x00000012 
+ 00016813  0x000035fb arg  0x00000004 , 0x00000002 
+ 00016814  0x000035fc rtn 
+ 00016815  0x000035ff call  0x00002c7a 
+ 00016816  0x00003600 add  0x00000013 , 0x000000ae , 0x00000012 
+ 00016817  0x00003601 ifetch  0x00000001 , 0x00000012 
+ 00016818  0x00003602 store  0x00000001 , 0x0000477b 
+ 00016819  0x00003603 branch  0x00004435 
+ 00016820  0x00003607 arg  0x00000002 , 0x00000007 
+ 00016821  0x00003608 branch  0x000041b9 
+ 00016822  0x0000360a jam  0x00000002 , 0x000046c6 
+ 00016823  0x0000360b arg  0x00000001 , 0x00000007 
+ 00016824  0x0000360c branch  0x000041b9 
+ 00016825  0x00003610 fetch  0x00000001 , 0x000046c5 
+ 00016826  0x00003611 qset1  0x0000003f 
+ 00016827  0x00003612 store  0x00000001 , 0x000046c5 
+ 00016828  0x00003613 rtn 
+ 00016829  0x00003616 fetch  0x00000001 , 0x000046c5 
+ 00016830  0x00003617 qset0  0x0000003f 
+ 00016831  0x00003618 store  0x00000001 , 0x000046c5 
+ 00016832  0x00003619 rtn 
+ 00016833  0x0000361b jam  0x00000000 , 0x000046c5 
+ 00016834  0x0000361c rtn 
+ 00016835  0x0000361f fetch  0x00000002 , 0x0000420a 
+ 00016836  0x00003620 set0  0x00000000 , 0x0000003f 
+ 00016837  0x00003621 store  0x00000002 , 0x0000420a 
+ 00016838  0x00003622 setarg  0x00000000 
+ 00016839  0x00003623 store  0x00000002 , 0x000046ae 
+ 00016840  0x00003624 call  0x00003f8d 
+ 00016841  0x00003625 branch  0x000042ca 
+ 00016842  0x00003628 call  0x000063cb 
+ 00016843  0x00003629 branch  0x000033dd 
+ 00016844  0x0000362c fetch  0x00000001 , 0x0000471e 
+ 00016845  0x0000362d nbranch  0x00004492 , 0x00000034 
+ 00016846  0x0000362e fetch  0x00000002 , 0x00004682 
+ 00016847  0x0000362f bbit1  0x0000000c , 0x000042b0 
+ 00016848  0x00003630 fetch  0x00000004 , 0x000046d3 
+ 00016849  0x00003631 bbit1  0x00000000 , 0x000041d7 
+ 00016850  0x00003632 bbit1  0x00000005 , 0x000042b0 
+ 00016851  0x00003633 bbit1  0x00000003 , 0x00002ead 
+ 00016852  0x00003634 branch  0x000033a7 
+ 00016853  0x00003638 branch  0x00003f74 
+ 00016854  0x0000363b rtn 
+ 00016855  0x0000363e call  0x000043c0 
+ 00016856  0x0000363f branch  0x0000659a 
+ 00016857  0x00003642 bpatch  0x000000e9 , 0x0000401d 
+ 00016858  0x00003643 call  0x000041e7 
+ 00016859  0x00003644 fetch  0x00000004 , 0x000046d3 
+ 00016860  0x00003645 bbit1  0x00000000 , 0x000041d7 
+ 00016861  0x00003646 bbit1  0x00000003 , 0x00002ead 
+ 00016862  0x00003647 fetch  0x00000001 , 0x0000471e 
+ 00016863  0x00003648 nbranch  0x00004492 , 0x00000034 
+ 00016864  0x00003649 fetch  0x00000002 , 0x00004208 
+ 00016865  0x0000364a bbit1  0x00000007 , 0x000041f5 
+ 00016866  0x0000364b bbit1  0x00000000 , 0x000033a9 
+ 00016867  0x0000364c bbit1  0x00000001 , 0x000041ef 
+ 00016868  0x0000364d bbit1  0x00000002 , 0x000041f2 
+ 00016869  0x0000364e bbit1  0x00000003 , 0x000041f2 
+ 00016870  0x0000364f branch  0x000042b0 
+ 00016871  0x00003651 setarg  0x00000000 
+ 00016872  0x00003652 store  0x00000008 , 0x000046b7 
+ 00016873  0x00003653 istore  0x00000004 , 0x00000005 
+ 00016874  0x00003654 jam  0x00000000 , 0x000046b4 
+ 00016875  0x00003655 jam  0x00000000 , 0x000046a7 
+ 00016876  0x00003656 jam  0x00000000 , 0x000041e2 
+ 00016877  0x00003657 jam  0x00000000 , 0x00004429 
+ 00016878  0x00003658 rtn 
+ 00016879  0x0000365b bbit1  0x00000005 , 0x000041f2 
+ 00016880  0x0000365c bbit1  0x00000003 , 0x000041f2 
+ 00016881  0x0000365d branch  0x000042b0 
+ 00016882  0x0000365f fetch  0x00000002 , 0x00004682 
+ 00016883  0x00003660 bbit1  0x0000000c , 0x000042b0 
+ 00016884  0x00003661 branch  0x000033a7 
+ 00016885  0x00003664 call  0x000041c1 
+ 00016886  0x00003665 fetch  0x00000002 , 0x00004208 
+ 00016887  0x00003666 bbit1  0x00000000 , 0x000033a9 
+ 00016888  0x00003667 branch  0x000033a7 
+ 00016889  0x0000366a call  0x000043d6 
+ 00016890  0x0000366b call  0x00004243 
+ 00016891  0x0000366c call  0x00004246 
+ 00016892  0x0000366d call  0x00004250 
+ 00016893  0x0000366e call  0x0000445d 
+ 00016894  0x00003670 call  0x00004443 
+ 00016895  0x00003671 call  0x00004333 
+ 00016896  0x00003672 call  0x000043a5 
+ 00016897  0x00003673 call  0x000043eb 
+ 00016898  0x00003674 call  0x00004209 
+ 00016899  0x00003675 call  0x00004231 
+ 00016900  0x00003676 call  0x00004234 
+ 00016901  0x00003677 call  0x00004237 
+ 00016902  0x00003678 call  0x0000423a 
+ 00016903  0x00003679 call  0x0000423d 
+ 00016904  0x0000367a branch  0x00004240 
+ 00016905  0x0000367f fetch  0x00000001 , 0x00004711 
+ 00016906  0x00003680 rtn  0x00000034 
+ 00016907  0x00003681 increase  0xffffffff , 0x0000003f 
+ 00016908  0x00003682 store  0x00000001 , 0x00004711 
+ 00016909  0x00003683 nrtn  0x00000034 
+ 00016910  0x00003684 branch  0x0000420f 
+ 00016911  0x00003686 fetch  0x00000001 , 0x00004712 
+ 00016912  0x00003687 rtneq  0x00000000 
+ 00016913  0x00003688 beq  0x00000005 , 0x00004216 
+ 00016914  0x0000368a call  0x00004225 
+ 00016915  0x0000368b jam  0x00000005 , 0x00004712 
+ 00016916  0x0000368c jam  0x00000005 , 0x00004711 
+ 00016917  0x0000368d rtn 
+ 00016918  0x0000368f call  0x0000422c 
+ 00016919  0x00003690 jam  0x00000004 , 0x00004712 
+ 00016920  0x00003691 jam  0x00000005 , 0x00004711 
+ 00016921  0x00003692 rtn 
+ 00016922  0x00003696 setarg  0x00008006 
+ 00016923  0x00003697 call  0x00006413 
+ 00016924  0x00003698 nop  0x000003e8 
+ 00016925  0x00003699 jam  0x00000000 , 0x00004711 
+ 00016926  0x0000369a jam  0x00000000 , 0x00004712 
+ 00016927  0x0000369b branch  0x000040e0 
+ 00016928  0x0000369e setarg  0x0000a006 
+ 00016929  0x0000369f call  0x00006413 
+ 00016930  0x000036a0 setarg  0x0000a005 
+ 00016931  0x000036a1 branch  0x00006413 
+ 00016932  0x000036a3 jam  0x00000000 , 0x00004711 
+ 00016933  0x000036a5 fetch  0x00000001 , 0x000046e0 
+ 00016934  0x000036a6 beq  0x00000004 , 0x00004220 
+ 00016935  0x000036a7 setarg  0x00000106 
+ 00016936  0x000036a8 call  0x00006413 
+ 00016937  0x000036a9 setarg  0x0000a105 
+ 00016938  0x000036aa branch  0x00006413 
+ 00016939  0x000036ad jam  0x00000000 , 0x00004711 
+ 00016940  0x000036af setarg  0x00000906 
+ 00016941  0x000036b0 branch  0x00006413 
+ 00016942  0x000036b2 jam  0x00000005 , 0x00004711 
+ 00016943  0x000036b3 jam  0x00000001 , 0x00004712 
+ 00016944  0x000036b4 rtn 
+ 00016945  0x000036b7 arg  0x00004680 , 0x00000013 
+ 00016946  0x000036b8 arg  0x0000429b , 0x00000012 
+ 00016947  0x000036b9 branch  0x0000336d 
+ 00016948  0x000036bc arg  0x000046ac , 0x00000013 
+ 00016949  0x000036bd arg  0x00004264 , 0x00000012 
+ 00016950  0x000036be branch  0x00003374 
+ 00016951  0x000036c1 arg  0x000046ae , 0x00000013 
+ 00016952  0x000036c2 arg  0x00004266 , 0x00000012 
+ 00016953  0x000036c3 branch  0x00003374 
+ 00016954  0x000036c6 arg  0x000046b0 , 0x00000013 
+ 00016955  0x000036c7 arg  0x0000426a , 0x00000012 
+ 00016956  0x000036c8 branch  0x00003374 
+ 00016957  0x000036cb arg  0x000046c4 , 0x00000013 
+ 00016958  0x000036cc arg  0x00004478 , 0x00000012 
+ 00016959  0x000036cd branch  0x0000336d 
+ 00016960  0x000036d2 arg  0x000046c6 , 0x00000013 
+ 00016961  0x000036d3 arg  0x0000425e , 0x00000012 
+ 00016962  0x000036d4 branch  0x0000336d 
+ 00016963  0x000036d7 arg  0x00004704 , 0x00000013 
+ 00016964  0x000036d8 arg  0x00004249 , 0x00000012 
+ 00016965  0x000036d9 branch  0x0000336d 
+ 00016966  0x000036dc arg  0x00004707 , 0x00000013 
+ 00016967  0x000036dd arg  0x00004249 , 0x00000012 
+ 00016968  0x000036de branch  0x00003374 
+ 00016969  0x000036e1 rtn 
+ 00016970  0x000036e5 fetch  0x00000004 , 0x000046d3 
+ 00016971  0x000036e6 rtnbit0  0x00000017 
+ 00016972  0x000036e7 jam  0x0000000a , 0x000046df 
+ 00016973  0x000036e8 fetch  0x00000001 , 0x000046f4 
+ 00016974  0x000036e9 store  0x00000001 , 0x00004715 
+ 00016975  0x000036ea rtn 
+ 00016976  0x000036ee arg  0x000046df , 0x00000013 
+ 00016977  0x000036ef arg  0x00004253 , 0x00000012 
+ 00016978  0x000036f0 branch  0x0000336d 
+ 00016979  0x000036f2 fetch  0x00000001 , 0x000046f4 
+ 00016980  0x000036f3 store  0x00000001 , 0x00004715 
+ 00016981  0x000036f4 setarg  0x00000190 
+ 00016982  0x000036f5 store  0x00000002 , 0x00004716 
+ 00016983  0x000036f6 store  0x00000002 , 0x00004718 
+ 00016984  0x000036f7 arg  0x00000000 , 0x00000011 
+ 00016985  0x000036f8 fetcht  0x00000001 , 0x0000477a 
+ 00016986  0x000036f9 increase  0x00000001 , 0x00000002 
+ 00016987  0x000036fa storet  0x00000001 , 0x00004714 
+ 00016988  0x000036fb jam  0x00000001 , 0x00004713 
+ 00016989  0x000036fc rtn 
+ 00016990  0x000036ff fetch  0x00000001 , 0x000046c5 
+ 00016991  0x00003700 rtnbit1  0x00000002 
+ 00016992  0x00003701 jam  0x00000012 , 0x00000a99 
+ 00016993  0x00003702 call  0x00007d8f 
+ 00016994  0x00003703 arg  0x00000000 , 0x00000007 
+ 00016995  0x00003704 branch  0x000041b9 
+ 00016996  0x00003708 call  0x000042ca 
+ 00016997  0x00003709 branch  0x0000340a 
+ 00016998  0x0000370c call  0x000033f6 
+ 00016999  0x0000370d fetch  0x00000001 , 0x0000471e 
+ 00017000  0x0000370e nbranch  0x00004492 , 0x00000034 
+ 00017001  0x0000370f branch  0x0000340a 
+ 00017002  0x00003712 bmark1  0x00000026 , 0x00007e1d 
+ 00017003  0x00003713 branch  0x00004386 
+ 00017004  0x00003718 bpatch  0x000000ea , 0x0000401d 
+ 00017005  0x00003719 jam  0x00000000 , 0x000046b4 
+ 00017006  0x0000371a call  0x00004386 
+ 00017007  0x0000371b call  0x000041c1 
+ 00017008  0x0000371c branch  0x000042b0 
+ 00017009  0x00003721 fetch  0x00000006 , 0x000041d0 
+ 00017010  0x00003722 branch  0x000033eb , 0x00000034 
+ 00017011  0x00003723 call  0x0000427e 
+ 00017012  0x00003724 jam  0x00000017 , 0x0000016d 
+ 00017013  0x00003725 fetch  0x00000001 , 0x0000465a 
+ 00017014  0x00003726 nbranch  0x000033e1 , 0x00000034 
+ 00017015  0x00003727 jam  0x00000004 , 0x0000016d 
+ 00017016  0x00003728 branch  0x000033e1 
+ 00017017  0x0000372b fetch  0x00000002 , 0x000046a8 
+ 00017018  0x0000372c store  0x00000002 , 0x000046ae 
+ 00017019  0x0000372d call  0x0000427e 
+ 00017020  0x0000372e call  0x00003418 
+ 00017021  0x0000372f branch  0x00007df4 
+ 00017022  0x00003732 setarg  0x000000c8 
+ 00017023  0x00003733 store  0x00000002 , 0x00004716 
+ 00017024  0x00003734 store  0x00000002 , 0x00004718 
+ 00017025  0x00003735 branch  0x00004285 
+ 00017026  0x00003738 setarg  0x000003e8 
+ 00017027  0x00003739 store  0x00000002 , 0x00004716 
+ 00017028  0x0000373a store  0x00000002 , 0x00004718 
+ 00017029  0x0000373c fetch  0x00000001 , 0x00004720 
+ 00017030  0x0000373d beq  0x00000001 , 0x0000428a 
+ 00017031  0x0000373e beq  0x00000002 , 0x0000428c 
+ 00017032  0x0000373f beq  0x00000003 , 0x0000428e 
+ 00017033  0x00003740 rtn 
+ 00017034  0x00003742 fetch  0x00000001 , 0x000046f0 
+ 00017035  0x00003743 branch  0x0000428f 
+ 00017036  0x00003745 fetch  0x00000001 , 0x000046f1 
+ 00017037  0x00003746 branch  0x0000428f 
+ 00017038  0x00003748 fetch  0x00000001 , 0x000046f2 
+ 00017039  0x0000374a store  0x00000001 , 0x00000aa2 
+ 00017040  0x0000374b call  0x00004482 
+ 00017041  0x0000374c fetch  0x00000001 , 0x00000aa2 
+ 00017042  0x0000374d store  0x00000001 , 0x00004715 
+ 00017043  0x0000374e arg  0x00000000 , 0x00000011 
+ 00017044  0x0000374f jam  0x00000001 , 0x00004713 
+ 00017045  0x00003750 branch  0x00007d1e 
+ 00017046  0x00003753 arg  0x00000000 , 0x00000011 
+ 00017047  0x00003754 branch  0x00007d19 
+ 00017048  0x00003756 arg  0x00000000 , 0x00000011 
+ 00017049  0x00003757 branch  0x00007d14 
+ 00017050  0x0000375a branch  0x000041c1 
+ 00017051  0x0000375d jam  0x00000001 , 0x000041e2 
+ 00017052  0x0000375e call  0x00003416 
+ 00017053  0x0000375f call  0x00003412 
+ 00017054  0x00003760 setarg  0x00000000 
+ 00017055  0x00003761 store  0x00000002 , 0x0000467e 
+ 00017056  0x00003762 store  0x00000001 , 0x00004680 
+ 00017057  0x00003763 branch  0x0000340e 
+ 00017058  0x00003766 call  0x0000435f 
+ 00017059  0x00003767 fetch  0x00000001 , 0x00004720 
+ 00017060  0x00003768 fetcht  0x00000001 , 0x00004703 
+ 00017061  0x00003769 isub  0x00000002 , 0x0000003e 
+ 00017062  0x0000376a branch  0x000042ab , 0x00000005 
+ 00017063  0x0000376b fetch  0x00000001 , 0x00004210 
+ 00017064  0x0000376c beq  0x00000033 , 0x00004271 
+ 00017065  0x0000376d beq  0x00000034 , 0x00004279 
+ 00017066  0x0000376e branch  0x000042b0 
+ 00017067  0x00003770 call  0x00003d57 
+ 00017068  0x00003771 rtnmark1  0x00000026 
+ 00017069  0x00003772 fetch  0x00000001 , 0x0000471e 
+ 00017070  0x00003773 nbranch  0x00004492 , 0x00000034 
+ 00017071  0x00003774 rtn 
+ 00017072  0x00003777 bpatch  0x000000eb , 0x0000401d 
+ 00017073  0x00003778 fetch  0x00000002 , 0x00004682 
+ 00017074  0x00003779 bbit1  0x0000000b , 0x000042b7 
+ 00017075  0x0000377a fetch  0x00000004 , 0x000046d3 
+ 00017076  0x0000377b bbit0  0x00000018 , 0x000042b7 
+ 00017077  0x0000377c random  0x0000003f 
+ 00017078  0x0000377d store  0x00000001 , 0x000044a1 
+ 00017079  0x0000377f call  0x00003418 
+ 00017080  0x00003780 fetch  0x00000002 , 0x00004687 
+ 00017081  0x00003781 store  0x00000002 , 0x000046ac 
+ 00017082  0x00003782 jam  0x00000006 , 0x0000016d 
+ 00017083  0x00003783 setarg  0x00000000 
+ 00017084  0x00003784 store  0x00000002 , 0x000046b0 
+ 00017085  0x00003785 store  0x00000002 , 0x000046ae 
+ 00017086  0x00003786 arg  0x00000007 , 0x00000007 
+ 00017087  0x00003787 call  0x000043ce 
+ 00017088  0x00003788 call  0x000043ca 
+ 00017089  0x00003789 fetch  0x00000001 , 0x00004092 
+ 00017090  0x0000378a isolate1  0x00000001 , 0x0000003f 
+ 00017091  0x0000378b call  0x00007df4 , 0x00000001 
+ 00017092  0x0000378c fetch  0x00000001 , 0x00004092 
+ 00017093  0x0000378d isolate1  0x00000000 , 0x0000003f 
+ 00017094  0x0000378e call  0x00007ddd , 0x00000001 
+ 00017095  0x0000378f fetch  0x00000004 , 0x000046d3 
+ 00017096  0x00003790 bbit1  0x0000001c , 0x0000422e 
+ 00017097  0x00003791 branch  0x00004282 
+ 00017098  0x00003794 bpatch  0x000000ec , 0x0000401d 
+ 00017099  0x00003795 fetch  0x00000001 , 0x00004092 
+ 00017100  0x00003796 isolate1  0x00000001 , 0x0000003f 
+ 00017101  0x00003797 call  0x000042d4 , 0x00000001 
+ 00017102  0x00003798 fetch  0x00000001 , 0x00004092 
+ 00017103  0x00003799 isolate1  0x00000000 , 0x0000003f 
+ 00017104  0x0000379a call  0x000042d7 , 0x00000001 
+ 00017105  0x0000379b fetch  0x00000004 , 0x000046d3 
+ 00017106  0x0000379c bbit1  0x0000001c , 0x0000421a 
+ 00017107  0x0000379d branch  0x00004482 
+ 00017108  0x0000379f setarg  0x00000000 
+ 00017109  0x000037a0 store  0x00000002 , 0x000046ae 
+ 00017110  0x000037a1 branch  0x00007dfa 
+ 00017111  0x000037a3 setarg  0x00000000 
+ 00017112  0x000037a4 store  0x00000002 , 0x000046ac 
+ 00017113  0x000037a5 branch  0x00007de2 
+ 00017114  0x000037ac fetch  0x00000004 , 0x000046d3 
+ 00017115  0x000037ad rtnbit0  0x00000007 
+ 00017116  0x000037ae arg  0x00000007 , 0x00000007 
+ 00017117  0x000037af call  0x000043d2 
+ 00017118  0x000037b0 call  0x000042e8 
+ 00017119  0x000037b2 call  0x000042fb 
+ 00017120  0x000037b3 fetch  0x00000004 , 0x000046d3 
+ 00017121  0x000037b4 bbit1  0x00000013 , 0x00004435 
+ 00017122  0x000037b5 bbit1  0x00000014 , 0x000042e4 
+ 00017123  0x000037b6 rtn 
+ 00017124  0x000037b8 arg  0x00000058 , 0x00000002 
+ 00017125  0x000037b9 arg  0x00004720 , 0x00000011 
+ 00017126  0x000037ba arg  0x00000000 , 0x00000012 
+ 00017127  0x000037bb branch  0x000065d1 
+ 00017128  0x000037be fetch  0x00000001 , 0x00000185 
+ 00017129  0x000037bf beq  0x00000034 , 0x000042ec 
+ 00017130  0x000037c0 beq  0x00000033 , 0x000042ef 
+ 00017131  0x000037c1 rtn 
+ 00017132  0x000037c3 store  0x00000001 , 0x000046c7 
+ 00017133  0x000037c4 fetch  0x00000006 , 0x0000044f 
+ 00017134  0x000037c5 branch  0x000042f1 
+ 00017135  0x000037c7 store  0x00000001 , 0x000046c7 
+ 00017136  0x000037c8 fetch  0x00000006 , 0x00000040 
+ 00017137  0x000037ca store  0x00000006 , 0x000046c8 
+ 00017138  0x000037cb fetch  0x00000007 , 0x000046c7 
+ 00017139  0x000037cc arg  0x00004721 , 0x00000006 
+ 00017140  0x000037cd arg  0x00000003 , 0x00000039 
+ 00017141  0x000037cf ifetcht  0x00000007 , 0x00000006 
+ 00017142  0x000037d0 isub  0x00000002 , 0x0000003e 
+ 00017143  0x000037d1 branch  0x00004310 , 0x00000005 
+ 00017144  0x000037d2 increase  0x00000016 , 0x00000006 
+ 00017145  0x000037d3 loop  0x000042f5 
+ 00017146  0x000037d4 rtn 
+ 00017147  0x000037d6 arg  0x00004721 , 0x00000011 
+ 00017148  0x000037d7 fetch  0x00000001 , 0x00004720 
+ 00017149  0x000037d8 increase  0xffffffff , 0x0000003f 
+ 00017150  0x000037d9 mul32  0x0000003f , 0x0000001d , 0x0000003f 
+ 00017151  0x000037da iadd  0x00000011 , 0x00000011 
+ 00017152  0x000037db fetch  0x00000001 , 0x00000185 
+ 00017153  0x000037dc istore  0x00000001 , 0x00000011 
+ 00017154  0x000037dd beq  0x00000034 , 0x00004305 
+ 00017155  0x000037de beq  0x00000033 , 0x0000430c 
+ 00017156  0x000037df rtn 
+ 00017157  0x000037e2 fetch  0x00000006 , 0x0000044f 
+ 00017158  0x000037e3 istore  0x00000006 , 0x00000005 
+ 00017159  0x000037e4 arg  0x00004419 , 0x00000006 
+ 00017160  0x000037e5 call  0x00007ebf 
+ 00017161  0x000037e6 fetch  0x00000006 , 0x000044a0 
+ 00017162  0x000037e7 istore  0x00000006 , 0x00000005 
+ 00017163  0x000037e8 rtn 
+ 00017164  0x000037ea fetch  0x00000006 , 0x00000040 
+ 00017165  0x000037eb istore  0x00000006 , 0x00000005 
+ 00017166  0x000037ec arg  0x000041be , 0x00000006 
+ 00017167  0x000037ed branch  0x00007ebf 
+ 00017168  0x000037f0 increase  0xfffffffa , 0x00000006 
+ 00017169  0x000037f1 copy  0x00000006 , 0x00000005 
+ 00017170  0x000037f2 fetcht  0x00000006 , 0x000046c8 
+ 00017171  0x000037f3 increase  0x00000003 , 0x00000002 
+ 00017172  0x000037f4 istoret  0x00000006 , 0x00000005 
+ 00017173  0x000037f5 rtn 
+ 00017174  0x000037fa arg  0x00000058 , 0x00000002 
+ 00017175  0x000037fb arg  0x00004720 , 0x00000011 
+ 00017176  0x000037fc arg  0x00000000 , 0x00000012 
+ 00017177  0x000037fd call  0x000065df 
+ 00017178  0x000037ff arg  0x00004721 , 0x00000011 
+ 00017179  0x00003800 fetch  0x00000001 , 0x00004720 
+ 00017180  0x00003801 fetcht  0x00000001 , 0x00004703 
+ 00017181  0x00003802 isub  0x00000002 , 0x0000003e 
+ 00017182  0x00003803 rtn  0x00000005 
+ 00017183  0x00003804 increase  0xffffffff , 0x0000003f 
+ 00017184  0x00003805 mul32  0x0000003f , 0x0000001d , 0x0000003f 
+ 00017185  0x00003806 iadd  0x00000011 , 0x00000011 
+ 00017186  0x00003807 ifetch  0x00000001 , 0x00000011 
+ 00017187  0x00003808 store  0x00000001 , 0x00004210 
+ 00017188  0x00003809 beq  0x00000033 , 0x00004327 
+ 00017189  0x0000380a beq  0x00000034 , 0x0000432c 
+ 00017190  0x0000380b rtn 
+ 00017191  0x0000380e ifetch  0x00000006 , 0x00000006 
+ 00017192  0x00003810 store  0x00000006 , 0x000041d0 
+ 00017193  0x00003811 arg  0x000041be , 0x00000005 
+ 00017194  0x00003812 call  0x00007ebf 
+ 00017195  0x00003813 branch  0x000067d7 
+ 00017196  0x00003816 ifetch  0x00000006 , 0x00000006 
+ 00017197  0x00003818 store  0x00000006 , 0x000041d0 
+ 00017198  0x00003819 arg  0x00004419 , 0x00000005 
+ 00017199  0x0000381a call  0x00007ebf 
+ 00017200  0x0000381b ifetch  0x00000006 , 0x00000006 
+ 00017201  0x0000381c store  0x00000006 , 0x000044a0 
+ 00017202  0x0000381d rtn 
+ 00017203  0x00003821 fetch  0x00000001 , 0x000046f5 
+ 00017204  0x00003822 bbit1  0x00000005 , 0x00004349 
+ 00017205  0x00003823 bbit1  0x00000006 , 0x00004359 
+ 00017206  0x00003824 branch  0x00004337 
+ 00017207  0x00003827 call  0x00004083 
+ 00017208  0x00003828 beq  0x00000006 , 0x0000433e 
+ 00017209  0x0000382a jam  0x0000001e , 0x000046d8 
+ 00017210  0x0000382b fetch  0x00000001 , 0x000046d9 
+ 00017211  0x0000382c rtneq  0x00000001 
+ 00017212  0x0000382d jam  0x00000001 , 0x000046d9 
+ 00017213  0x0000382e rtn 
+ 00017214  0x00003831 call  0x00004343 
+ 00017215  0x00003832 fetch  0x00000001 , 0x000046d9 
+ 00017216  0x00003833 rtneq  0x00000000 
+ 00017217  0x00003834 jam  0x00000000 , 0x000046d9 
+ 00017218  0x00003835 branch  0x000043c0 
+ 00017219  0x00003838 fetch  0x00000001 , 0x000046d8 
+ 00017220  0x00003839 rtn  0x00000034 
+ 00017221  0x0000383a pincrease  0xffffffff 
+ 00017222  0x0000383b store  0x00000001 , 0x000046d8 
+ 00017223  0x0000383c nrtn  0x00000034 
+ 00017224  0x0000383d branch  0x00004370 
+ 00017225  0x00003840 fetch  0x00000001 , 0x000046ed 
+ 00017226  0x00003841 rtneq  0x000000ff 
+ 00017227  0x00003842 fetcht  0x00000001 , 0x000046ed 
+ 00017228  0x00003843 call  0x0000681d 
+ 00017229  0x00003844 branch  0x00004354 , 0x00000001 
+ 00017230  0x00003846 fetch  0x00000001 , 0x000046d9 
+ 00017231  0x00003847 rtneq  0x00000001 
+ 00017232  0x00003848 jam  0x00000001 , 0x000046d9 
+ 00017233  0x00003849 fetch  0x00000004 , 0x000046d3 
+ 00017234  0x0000384a rtnbit1  0x00000006 
+ 00017235  0x0000384b branch  0x00004370 
+ 00017236  0x0000384e fetch  0x00000001 , 0x000046d9 
+ 00017237  0x0000384f rtneq  0x00000000 
+ 00017238  0x00003850 jam  0x00000000 , 0x000046d9 
+ 00017239  0x00003851 arg  0x00000006 , 0x00000007 
+ 00017240  0x00003852 branch  0x000043d2 
+ 00017241  0x00003857 fetch  0x00000001 , 0x00000004 , 0x000046d3 
+ 00017242  0x00003858 rtnbit0  0x00000006 
+ 00017243  0x00003859 fetch  0x00000001 , 0x00004720 
+ 00017244  0x0000385a beq  0x00000001 , 0x00004369 
+ 00017245  0x0000385b beq  0x00000002 , 0x0000436c 
+ 00017246  0x0000385c rtn 
+ 00017247  0x0000385e fetch  0x00000001 , 0x00000004 , 0x000046d3 
+ 00017248  0x0000385f rtnbit0  0x00000006 
+ 00017249  0x00003860 fetcht  0x00000001 , 0x000046ed 
+ 00017250  0x00003861 call  0x0000681d 
+ 00017251  0x00003862 branch  0x00004366 , 0x00000001 
+ 00017252  0x00003864 jam  0x00000001 , 0x00004720 
+ 00017253  0x00003865 rtn 
+ 00017254  0x00003867 fetch  0x00000001 , 0x00004703 
+ 00017255  0x00003868 store  0x00000001 , 0x00004720 
+ 00017256  0x00003869 rtn 
+ 00017257  0x0000386b fetcht  0x00000001 , 0x000046ed 
+ 00017258  0x0000386c nbranch  0x00004370 , 0x00000001 
+ 00017259  0x0000386d rtn 
+ 00017260  0x0000386f fetcht  0x00000001 , 0x000046ed 
+ 00017261  0x00003870 call  0x0000681d 
+ 00017262  0x00003871 branch  0x00004354 , 0x00000001 
+ 00017263  0x00003872 rtn 
+ 00017264  0x00003878 fetcht  0x00000001 , 0x00004720 
+ 00017265  0x00003879 increase  0x00000001 , 0x00000002 
+ 00017266  0x0000387a fetch  0x00000001 , 0x000046d2 
+ 00017267  0x0000387b isub  0x00000002 , 0x0000003e 
+ 00017268  0x0000387c ncall  0x000043cc , 0x00000002 
+ 00017269  0x0000387d storet  0x00000001 , 0x00004720 
+ 00017270  0x0000387e jam  0x00000000 , 0x000041bd 
+ 00017271  0x0000387f call  0x0000437a 
+ 00017272  0x00003880 call  0x000043c0 
+ 00017273  0x00003882 branch  0x0000437e 
+ 00017274  0x00003885 arg  0x00000001 , 0x00000002 
+ 00017275  0x00003886 arg  0x00004720 , 0x00000011 
+ 00017276  0x00003887 arg  0x00000000 , 0x00000012 
+ 00017277  0x00003888 branch  0x00006606 
+ 00017278  0x0000388b call  0x00004381 
+ 00017279  0x0000388c call  0x000043c2 
+ 00017280  0x0000388d branch  0x000041d7 
+ 00017281  0x0000388f fetch  0x00000002 , 0x00004682 
+ 00017282  0x00003890 bbit1  0x00000007 , 0x00004392 
+ 00017283  0x00003891 bbit1  0x00000009 , 0x00003402 
+ 00017284  0x00003892 bbit1  0x00000000 , 0x000033e9 
+ 00017285  0x00003893 branch  0x000042ca 
+ 00017286  0x00003896 bpatch  0x000000ed , 0x0000401d 
+ 00017287  0x00003897 setarg  0x00000000 
+ 00017288  0x00003898 store  0x00000002 , 0x000046b0 
+ 00017289  0x00003899 fetch  0x00000002 , 0x00004682 
+ 00017290  0x0000389a bbit1  0x00000009 , 0x00003402 
+ 00017291  0x0000389b fetch  0x00000002 , 0x00004682 
+ 00017292  0x0000389c bbit1  0x00000000 , 0x000033e9 
+ 00017293  0x0000389d rtn 
+ 00017294  0x000038a0 setarg  0x00000001 
+ 00017295  0x000038a1 store  0x00000006 , 0x00000040 
+ 00017296  0x000038a2 jam  0x00000033 , 0x00000185 
+ 00017297  0x000038a3 branch  0x000042df 
+ 00017298  0x000038a7 call  0x000043c4 
+ 00017299  0x000038a8 branch  0x00007e2f 
+ 00017300  0x000038ab fetch  0x00000001 , 0x000046ec 
+ 00017301  0x000038ac rtneq  0x000000ff 
+ 00017302  0x000038ad fetcht  0x00000001 , 0x000046ec 
+ 00017303  0x000038ae call  0x0000681d 
+ 00017304  0x000038af branch  0x0000439f , 0x00000001 
+ 00017305  0x000038b1 fetch  0x00000001 , 0x00004685 
+ 00017306  0x000038b2 store  0x00000001 , 0x000046da 
+ 00017307  0x000038b3 fetch  0x00000001 , 0x000046db 
+ 00017308  0x000038b4 rtneq  0x00000001 
+ 00017309  0x000038b5 jam  0x00000001 , 0x000046db 
+ 00017310  0x000038b6 branch  0x000043ca 
+ 00017311  0x000038b8 call  0x000043b5 
+ 00017312  0x000038b9 fetch  0x00000001 , 0x000046db 
+ 00017313  0x000038ba rtneq  0x00000000 
+ 00017314  0x000038bb jam  0x00000000 , 0x000046db 
+ 00017315  0x000038bc call  0x00007e2f 
+ 00017316  0x000038bd branch  0x000043c8 
+ 00017317  0x000038c1 fetch  0x00000001 , 0x000046f5 
+ 00017318  0x000038c2 bbit1  0x00000004 , 0x00004394 
+ 00017319  0x000038c4 call  0x00004083 
+ 00017320  0x000038c5 beq  0x00000007 , 0x000043af 
+ 00017321  0x000038c7 fetch  0x00000001 , 0x00004685 
+ 00017322  0x000038c8 store  0x00000001 , 0x000046da 
+ 00017323  0x000038c9 fetch  0x00000001 , 0x000046db 
+ 00017324  0x000038ca rtneq  0x00000001 
+ 00017325  0x000038cb jam  0x00000001 , 0x000046db 
+ 00017326  0x000038cc branch  0x000043ca 
+ 00017327  0x000038d0 call  0x000043b5 
+ 00017328  0x000038d1 fetch  0x00000001 , 0x000046db 
+ 00017329  0x000038d2 rtneq  0x00000000 
+ 00017330  0x000038d3 jam  0x00000000 , 0x000046db 
+ 00017331  0x000038d4 call  0x00007e2f 
+ 00017332  0x000038d5 branch  0x000043c8 
+ 00017333  0x000038d8 arg  0x000046da , 0x00000013 
+ 00017334  0x000038d9 arg  0x000043b8 , 0x00000012 
+ 00017335  0x000038da branch  0x0000336d 
+ 00017336  0x000038dd arg  0x00000006 , 0x00000007 
+ 00017337  0x000038de call  0x000043ce 
+ 00017338  0x000038df call  0x00003357 
+ 00017339  0x000038e0 branch  0x0000426c 
+ 00017340  0x000038e4 arg  0x00000001 , 0x00000007 
+ 00017341  0x000038e5 branch  0x000043ce 
+ 00017342  0x000038e7 arg  0x00000001 , 0x00000007 
+ 00017343  0x000038e8 branch  0x000043d2 
+ 00017344  0x000038ea arg  0x00000000 , 0x00000007 
+ 00017345  0x000038eb branch  0x000043ce 
+ 00017346  0x000038ed arg  0x00000000 , 0x00000007 
+ 00017347  0x000038ee branch  0x000043d2 
+ 00017348  0x000038f0 arg  0x00000002 , 0x00000007 
+ 00017349  0x000038f1 branch  0x000043ce 
+ 00017350  0x000038f3 arg  0x00000002 , 0x00000007 
+ 00017351  0x000038f4 branch  0x000043d2 
+ 00017352  0x000038f6 arg  0x00000005 , 0x00000007 
+ 00017353  0x000038f7 branch  0x000043ce 
+ 00017354  0x000038f9 arg  0x00000005 , 0x00000007 
+ 00017355  0x000038fa branch  0x000043d2 
+ 00017356  0x000038ff arg  0x00000001 , 0x00000002 
+ 00017357  0x00003900 rtn 
+ 00017358  0x00003903 fetch  0x00000004 , 0x000046d3 
+ 00017359  0x00003904 qset1  0x0000003f 
+ 00017360  0x00003905 store  0x00000004 , 0x000046d3 
+ 00017361  0x00003906 rtn 
+ 00017362  0x00003909 fetch  0x00000004 , 0x000046d3 
+ 00017363  0x0000390a qset0  0x0000003f 
+ 00017364  0x0000390b store  0x00000004 , 0x000046d3 
+ 00017365  0x0000390c rtn 
+ 00017366  0x0000390f fetch  0x00000004 , 0x000046d3 
+ 00017367  0x00003910 rtnbit0  0x0000001a 
+ 00017368  0x00003911 fetch  0x00000001 , 0x000046ce 
+ 00017369  0x00003912 increase  0x00000001 , 0x0000003f 
+ 00017370  0x00003913 store  0x00000001 , 0x000046ce 
+ 00017371  0x00003914 sub  0x0000003f , 0x0000000a , 0x0000003e 
+ 00017372  0x00003915 rtn  0x00000002 
+ 00017373  0x00003916 jam  0x00000000 , 0x000046ce 
+ 00017374  0x00003917 call  0x000068eb 
+ 00017375  0x00003918 call  0x00006908 
+ 00017376  0x00003919 store  0x00000002 , 0x0000470f 
+ 00017377  0x0000391a arg  0x00004709 , 0x00000011 
+ 00017378  0x0000391b call  0x00006930 
+ 00017379  0x0000391c fetch  0x00000001 , 0x00004231 
+ 00017380  0x0000391d bbit1  0x00000001 , 0x000044a0 
+ 00017381  0x0000391e bbit0  0x00000000 , 0x000043e9 
+ 00017382  0x0000391f branch  0x000043e7 
+ 00017383  0x00003921 arg  0x00000004 , 0x00000007 
+ 00017384  0x00003922 branch  0x000043ce 
+ 00017385  0x00003924 arg  0x00000004 , 0x00000007 
+ 00017386  0x00003925 branch  0x000043d2 
+ 00017387  0x00003928 fetch  0x00000004 , 0x000046d3 
+ 00017388  0x00003929 rtnbit0  0x00000004 
+ 00017389  0x0000392a fetch  0x00000001 , 0x000046ef 
+ 00017390  0x0000392b store  0x00000001 , 0x00004715 
+ 00017391  0x0000392c fetch  0x00000001 , 0x000046cf 
+ 00017392  0x0000392d pincrease  0x00000001 
+ 00017393  0x0000392e store  0x00000001 , 0x000046cf 
+ 00017394  0x0000392f sub  0x0000003f , 0x00000014 , 0x0000003e 
+ 00017395  0x00003930 ncall  0x000043f9 , 0x00000002 
+ 00017396  0x00003931 beq  0x00000002 , 0x000043fb 
+ 00017397  0x00003932 beq  0x00000004 , 0x000043fe 
+ 00017398  0x00003933 beq  0x00000006 , 0x000043fb 
+ 00017399  0x00003934 beq  0x00000008 , 0x000043fe 
+ 00017400  0x00003935 rtn 
+ 00017401  0x00003937 jam  0x00000001 , 0x000046cf 
+ 00017402  0x00003938 branch  0x000043fe 
+ 00017403  0x0000393a arg  0x00000000 , 0x00000011 
+ 00017404  0x0000393b jam  0x00000002 , 0x00004713 
+ 00017405  0x0000393c branch  0x00007d14 
+ 00017406  0x0000393e arg  0x00000000 , 0x00000011 
+ 00017407  0x0000393f jam  0x00000002 , 0x00004713 
+ 00017408  0x00003940 branch  0x00007d19 
+ 00017409  0x00003943 call  0x00003f97 
+ 00017410  0x00003944 nrtn  0x00000028 
+ 00017411  0x00003945 arg  0x00000007 , 0x00000011 
+ 00017412  0x00003946 arg  0x0000469a , 0x00000012 
+ 00017413  0x00003947 rtn 
+ 00017414  0x0000394a fetch  0x00000001 , 0x0000478b 
+ 00017415  0x0000394b rtn  0x00000034 
+ 00017416  0x0000394d fetcht  0x00000001 , 0x000046e7 
+ 00017417  0x0000394e call  0x0000681d 
+ 00017418  0x0000394f call  0x00004410 , 0x00000001 
+ 00017419  0x00003950 fetch  0x00000001 , 0x00004704 
+ 00017420  0x00003951 nrtn  0x00000034 
+ 00017421  0x00003952 call  0x00004083 
+ 00017422  0x00003953 nrtn  0x00000034 
+ 00017423  0x00003954 branch  0x00002d83 
+ 00017424  0x00003957 fetch  0x00000001 , 0x000046e7 
+ 00017425  0x00003958 rtneq  0x000000ff 
+ 00017426  0x00003959 jam  0x0000000a , 0x00004704 
+ 00017427  0x0000395a rtn 
+ 00017428  0x0000395e call  0x00004423 
+ 00017429  0x0000395f fetch  0x00000002 , 0x00004778 
+ 00017430  0x00003960 arg  0x0000aa55 , 0x00000002 
+ 00017431  0x00003961 isub  0x00000002 , 0x0000003e 
+ 00017432  0x00003962 branch  0x0000442b , 0x00000005 
+ 00017433  0x00003963 storet  0x00000002 , 0x00004778 
+ 00017434  0x00003964 call  0x0000441c 
+ 00017435  0x00003965 branch  0x00004435 
+ 00017436  0x00003967 fetch  0x00000006 , 0x000044a0 
+ 00017437  0x00003968 store  0x00000006 , 0x00004738 
+ 00017438  0x00003969 add  0x0000003f , 0x00000100 , 0x0000003f 
+ 00017439  0x0000396a store  0x00000006 , 0x00004755 
+ 00017440  0x0000396b add  0x0000003f , 0x00000100 , 0x0000003f 
+ 00017441  0x0000396c store  0x00000006 , 0x00004772 
+ 00017442  0x0000396d rtn 
+ 00017443  0x00003971 setarg  0x00004778 
+ 00017444  0x00003972 arg  0x00004720 , 0x00000002 
+ 00017445  0x00003973 isub  0x00000002 , 0x00000002 
+ 00017446  0x00003974 fetch  0x00000003 , 0x00004700 
+ 00017447  0x00003975 iadd  0x00000002 , 0x0000003f 
+ 00017448  0x00003976 arg  0x00000002 , 0x00000002 
+ 00017449  0x00003977 arg  0x00004778 , 0x00000011 
+ 00017450  0x00003978 branch  0x00006562 
+ 00017451  0x0000397c setarg  0x0000477f 
+ 00017452  0x0000397d arg  0x00004720 , 0x00000002 
+ 00017453  0x0000397e isub  0x00000002 , 0x00000002 
+ 00017454  0x0000397f fetch  0x00000003 , 0x00004700 
+ 00017455  0x00003980 arg  0x00004720 , 0x00000011 
+ 00017456  0x00003981 call  0x00006562 
+ 00017457  0x00003982 call  0x0000431a 
+ 00017458  0x00003983 fetch  0x00000004 , 0x0000477b 
+ 00017459  0x00003984 call  0x00002c7a 
+ 00017460  0x00003985 branch  0x0000322c 
+ 00017461  0x00003988 setarg  0x0000477f 
+ 00017462  0x00003989 arg  0x00004720 , 0x00000002 
+ 00017463  0x0000398a isub  0x00000002 , 0x00000002 
+ 00017464  0x0000398b arg  0x00004720 , 0x00000011 
+ 00017465  0x0000398c fetch  0x00000003 , 0x00004700 
+ 00017466  0x0000398d branch  0x00006514 
+ 00017467  0x00003990 arg  0x00000001 , 0x00000002 
+ 00017468  0x00003991 arg  0x0000477a , 0x00000011 
+ 00017469  0x00003992 arg  0x0000005a , 0x00000012 
+ 00017470  0x00003993 branch  0x000065d1 
+ 00017471  0x00003996 arg  0x00000001 , 0x00000002 
+ 00017472  0x00003997 arg  0x0000477a , 0x00000011 
+ 00017473  0x00003998 arg  0x0000005a , 0x00000012 
+ 00017474  0x00003999 branch  0x000065df 
+ 00017475  0x0000399c rtnmark1  0x00000026 
+ 00017476  0x0000399d fetch  0x00000004 , 0x000046d3 
+ 00017477  0x0000399e rtnbit0  0x00000016 
+ 00017478  0x0000399f fetch  0x00000001 , 0x00004705 
+ 00017479  0x000039a0 pincrease  0x00000001 
+ 00017480  0x000039a1 and  0x0000003f , 0x00000007 , 0x0000003f 
+ 00017481  0x000039a2 store  0x00000001 , 0x00004705 
+ 00017482  0x000039a3 rtnne  0x00000007 
+ 00017483  0x000039a4 fetch  0x00000002 , 0x00004682 
+ 00017484  0x000039a5 bbit1  0x00000000 , 0x0000444f 
+ 00017485  0x000039a6 bbit1  0x00000009 , 0x0000444f 
+ 00017486  0x000039a7 rtn 
+ 00017487  0x000039ad bpatch  0x000000ee , 0x0000401d 
+ 00017488  0x000039ae fetch  0x00000001 , 0x00004706 
+ 00017489  0x000039af nrtn  0x00000034 
+ 00017490  0x000039b0 fetch  0x00000004 , 0x000046d3 
+ 00017491  0x000039b1 rtnbit0  0x00000008 
+ 00017492  0x000039b2 fetch  0x00000001 , 0x000046a5 
+ 00017493  0x000039b3 call  0x000063fb 
+ 00017494  0x000039b4 store  0x00000001 , 0x000046a6 
+ 00017495  0x000039b5 sub  0x0000003f , 0x00000010 , 0x0000003e 
+ 00017496  0x000039b6 branch  0x0000445b , 0x00000002 
+ 00017497  0x000039b7 jam  0x00000000 , 0x00004706 
+ 00017498  0x000039b8 rtn 
+ 00017499  0x000039bb jam  0x0000001e , 0x00004706 
+ 00017500  0x000039bc rtn 
+ 00017501  0x000039be arg  0x00004706 , 0x00000013 
+ 00017502  0x000039bf arg  0x00004460 , 0x00000012 
+ 00017503  0x000039c0 branch  0x0000336d 
+ 00017504  0x000039c3 fetch  0x00000001 , 0x000046a5 
+ 00017505  0x000039c4 call  0x00006414 
+ 00017506  0x000039c5 sub  0x0000003f , 0x00000010 , 0x0000003e 
+ 00017507  0x000039c6 nrtn  0x00000002 
+ 00017508  0x000039c7 fetch  0x00000004 , 0x000046d3 
+ 00017509  0x000039c8 rtnbit0  0x00000008 
+ 00017510  0x000039c9 arg  0x00000008 , 0x00000007 
+ 00017511  0x000039ca call  0x000043d2 
+ 00017512  0x000039cb jam  0x00000000 , 0x00004172 
+ 00017513  0x000039cc jam  0x0000001e , 0x000046c4 
+ 00017514  0x000039cd call  0x00004482 
+ 00017515  0x000039ce fetch  0x00000004 , 0x000046d3 
+ 00017516  0x000039cf bbit1  0x00000015 , 0x00004471 
+ 00017517  0x000039d1 fetch  0x00000001 , 0x00004720 
+ 00017518  0x000039d2 beq  0x00000001 , 0x00004489 
+ 00017519  0x000039d3 beq  0x00000002 , 0x00004476 
+ 00017520  0x000039d4 rtn 
+ 00017521  0x000039d6 fetch  0x00000001 , 0x00004720 
+ 00017522  0x000039d7 beq  0x00000001 , 0x00004489 
+ 00017523  0x000039d8 beq  0x00000002 , 0x0000448c 
+ 00017524  0x000039d9 beq  0x00000003 , 0x0000448f 
+ 00017525  0x000039da rtn 
+ 00017526  0x000039dd fetch  0x00000001 , 0x000046f0 
+ 00017527  0x000039de branch  0x0000428f 
+ 00017528  0x000039e3 jam  0x00000020 , 0x00004172 
+ 00017529  0x000039e4 branch  0x00004482 
+ 00017530  0x000039e9 fetch  0x00000001 , 0x000046f0 
+ 00017531  0x000039ea rtneq  0x000000ff 
+ 00017532  0x000039eb store  0x00000001 , 0x00004715 
+ 00017533  0x000039ec branch  0x00004296 
+ 00017534  0x000039ef fetch  0x00000001 , 0x000046f1 
+ 00017535  0x000039f0 rtneq  0x000000ff 
+ 00017536  0x000039f1 store  0x00000001 , 0x00004715 
+ 00017537  0x000039f2 branch  0x00004296 
+ 00017538  0x000039f5 call  0x00004296 
+ 00017539  0x000039f6 call  0x0000447a 
+ 00017540  0x000039f7 call  0x0000447e 
+ 00017541  0x000039f9 fetch  0x00000001 , 0x000046f2 
+ 00017542  0x000039fa rtneq  0x000000ff 
+ 00017543  0x000039fb store  0x00000001 , 0x00004715 
+ 00017544  0x000039fc branch  0x00004296 
+ 00017545  0x000039ff fetch  0x00000001 , 0x000046f0 
+ 00017546  0x00003a00 store  0x00000001 , 0x00004715 
+ 00017547  0x00003a01 branch  0x00004298 
+ 00017548  0x00003a03 fetch  0x00000001 , 0x000046f1 
+ 00017549  0x00003a04 store  0x00000001 , 0x00004715 
+ 00017550  0x00003a05 branch  0x00004298 
+ 00017551  0x00003a07 fetch  0x00000001 , 0x000046f2 
+ 00017552  0x00003a08 store  0x00000001 , 0x00004715 
+ 00017553  0x00003a09 branch  0x00004298 
+ 00017554  0x00003a0e bpatch  0x000000ef , 0x0000401d 
+ 00017555  0x00003a0f fetch  0x00000001 , 0x0000471e 
+ 00017556  0x00003a10 increase  0xffffffff , 0x0000003f 
+ 00017557  0x00003a11 store  0x00000001 , 0x0000471e 
+ 00017558  0x00003a12 fetcht  0x00000001 , 0x00004720 
+ 00017559  0x00003a13 increase  0x00000001 , 0x00000002 
+ 00017560  0x00003a14 fetch  0x00000001 , 0x000046d2 
+ 00017561  0x00003a15 isub  0x00000002 , 0x0000003e 
+ 00017562  0x00003a16 ncall  0x000043cc , 0x00000002 
+ 00017563  0x00003a17 storet  0x00000001 , 0x00004720 
+ 00017564  0x00003a18 jam  0x00000000 , 0x000041bd 
+ 00017565  0x00003a19 call  0x0000437a 
+ 00017566  0x00003a1a call  0x000042fb 
+ 00017567  0x00003a1b branch  0x000042a2 
+ 00017568  0x00003a1e call  0x00004482 
+ 00017569  0x00003a1f setarg  0x00000000 
+ 00017570  0x00003a20 store  0x00000008 , 0x000000a1 
+ 00017571  0x00003a21 branch  0x00002b1f 
+ 00017572  0x00003a2d rtn  0x0000002b 
+ 00017573  0x00003a2e hfetch  0x00000001 , 0x00008081 
+ 00017574  0x00003a2f and_into  0x000000f0 , 0x0000003f 
+ 00017575  0x00003a30 hstore  0x00000001 , 0x00008081 
+ 00017576  0x00003a31 call  0x00006948 
+ 00017577  0x00003a32 setarg  0x000044e6 
+ 00017578  0x00003a33 store  0x00000002 , 0x000041eb 
+ 00017579  0x00003a35 setarg  0x000044e9 
+ 00017580  0x00003a36 store  0x00000002 , 0x000041ed 
+ 00017581  0x00003a38 setarg  0x000044ef 
+ 00017582  0x00003a39 store  0x00000002 , 0x000041f3 
+ 00017583  0x00003a3b setarg  0x000044f2 
+ 00017584  0x00003a3c store  0x00000002 , 0x000041f5 
+ 00017585  0x00003a3e setarg  0x000033d0 
+ 00017586  0x00003a3f store  0x00000002 , 0x000041e9 
+ 00017587  0x00003a41 call  0x00002c7a 
+ 00017588  0x00003a42 setarg  0x000045c2 
+ 00017589  0x00003a43 add  0x00000013 , 0x000000d8 , 0x00000005 
+ 00017590  0x00003a44 istore  0x00000002 , 0x00000005 
+ 00017591  0x00003a46 setarg  0x000044ea 
+ 00017592  0x00003a47 add  0x00000013 , 0x000000da , 0x00000005 
+ 00017593  0x00003a48 istore  0x00000002 , 0x00000005 
+ 00017594  0x00003a4a setarg  0x000044e9 
+ 00017595  0x00003a4b add  0x00000013 , 0x000000dc , 0x00000005 
+ 00017596  0x00003a4c istore  0x00000002 , 0x00000005 
+ 00017597  0x00003a4e setarg  0x0000450e 
+ 00017598  0x00003a4f store  0x00000002 , 0x000041fd 
+ 00017599  0x00003a51 setarg  0x000044da 
+ 00017600  0x00003a52 store  0x00000002 , 0x0000475b 
+ 00017601  0x00003a54 setarg  0x000044d6 
+ 00017602  0x00003a55 store  0x00000002 , 0x0000475f 
+ 00017603  0x00003a57 setarg  0x00004560 
+ 00017604  0x00003a58 store  0x00000002 , 0x0000470f 
+ 00017605  0x00003a5a bpatch  0x000000f0 , 0x0000401e 
+ 00017606  0x00003a5b call  0x000044e2 
+ 00017607  0x00003a5c call  0x00007e38 
+ 00017608  0x00003a5d jam  0x00000002 , 0x00004172 
+ 00017609  0x00003a5e fetch  0x00000001 , 0x0000472b 
+ 00017610  0x00003a5f store  0x00000001 , 0x0000469a 
+ 00017611  0x00003a60 beq  0x00000000 , 0x000044d5 
+ 00017612  0x00003a61 fetch  0x00000001 , 0x0000472c 
+ 00017613  0x00003a62 store  0x00000001 , 0x00004686 
+ 00017614  0x00003a64 call  0x000044db 
+ 00017615  0x00003a65 call  0x00007cd3 
+ 00017616  0x00003a66 call  0x00007cdd 
+ 00017617  0x00003a67 jam  0x00000001 , 0x00004757 
+ 00017618  0x00003a68 fetch  0x00000002 , 0x00004682 
+ 00017619  0x00003a69 rtnbit1  0x0000000c 
+ 00017620  0x00003a6a branch  0x0000340a 
+ 00017621  0x00003a6f jam  0x00000002 , 0x00004757 
+ 00017622  0x00003a71 call  0x000044db 
+ 00017623  0x00003a73 arg  0x00000000 , 0x00000011 
+ 00017624  0x00003a74 call  0x00007d1e 
+ 00017625  0x00003a76 branch  0x00002ee4 
+ 00017626  0x00003a79 branch  0x000044db 
+ 00017627  0x00003a7c bpatch  0x000000f1 , 0x0000401e 
+ 00017628  0x00003a7d fetch  0x00000001 , 0x00004729 
+ 00017629  0x00003a7e bne  0x000000ff , 0x000044e0 
+ 00017630  0x00003a80 fetcht  0x00000001 , 0x00004706 
+ 00017631  0x00003a81 branch  0x0000680e 
+ 00017632  0x00003a83 store  0x00000001 , 0x00004706 
+ 00017633  0x00003a84 branch  0x000044de 
+ 00017634  0x00003a88 call  0x00002c9d 
+ 00017635  0x00003a89 fetch  0x00000002 , 0x00004753 
+ 00017636  0x00003a8a store  0x00000002 , 0x00004755 
+ 00017637  0x00003a8b branch  0x00004515 
+ 00017638  0x00003a93 call  0x00006835 
+ 00017639  0x00003a94 call  0x000044e9 
+ 00017640  0x00003a95 branch  0x0000340a 
+ 00017641  0x00003a98 branch  0x0000696c 
+ 00017642  0x00003a9b fetch  0x00000001 , 0x00004765 
+ 00017643  0x00003a9c rtn  0x00000034 
+ 00017644  0x00003a9e branch  0x00002d83 
+ 00017645  0x00003aa1 rtn 
+ 00017646  0x00003aa4 branch  0x00006978 
+ 00017647  0x00003aa7 call  0x00004544 
+ 00017648  0x00003aa8 call  0x00004503 
+ 00017649  0x00003aa9 branch  0x000044ee 
+ 00017650  0x00003aac copy  0x00000013 , 0x0000003f 
+ 00017651  0x00003aad beq  0x0000002d , 0x00003431 
+ 00017652  0x00003aae beq  0x00000010 , 0x0000341a 
+ 00017653  0x00003aaf beq  0x00000039 , 0x000044fb 
+ 00017654  0x00003ab0 beq  0x0000003c , 0x000044ff 
+ 00017655  0x00003ab1 beq  0x0000003a , 0x000044f9 
+ 00017656  0x00003ab2 rtn 
+ 00017657  0x00003ab5 jam  0x00000001 , 0x00004765 
+ 00017658  0x00003ab6 rtn 
+ 00017659  0x00003ab9 jam  0x00000001 , 0x00004765 
+ 00017660  0x00003aba jam  0x00000001 , 0x00004763 
+ 00017661  0x00003abb jam  0x00000001 , 0x00004764 
+ 00017662  0x00003abc rtn 
+ 00017663  0x00003abf jam  0x00000001 , 0x00004765 
+ 00017664  0x00003ac0 jam  0x00000001 , 0x00004763 
+ 00017665  0x00003ac1 jam  0x00000001 , 0x00004764 
+ 00017666  0x00003ac2 rtn 
+ 00017667  0x00003ac5 fetch  0x00000001 , 0x00004763 
+ 00017668  0x00003ac6 rtneq  0x00000000 
+ 00017669  0x00003ac7 fetch  0x00000001 , 0x00004762 
+ 00017670  0x00003ac8 rtneq  0x00000001 
+ 00017671  0x00003ac9 jam  0x00000001 , 0x00004762 
+ 00017672  0x00003acb arg  0x00000000 , 0x00000011 
+ 00017673  0x00003acc branch  0x00007d19 
+ 00017674  0x00003ace arg  0x00000000 , 0x00000011 
+ 00017675  0x00003acf call  0x00007d19 
+ 00017676  0x00003ad0 call  0x000044db 
+ 00017677  0x00003ad1 branch  0x0000340a 
+ 00017678  0x00003ad4 call  0x0000337b 
+ 00017679  0x00003ad5 branch  0x00004510 
+ 00017680  0x00003ad8 fetch  0x00000001 , 0x0000472d 
+ 00017681  0x00003ad9 rtn  0x00000034 
+ 00017682  0x00003ada arg  0x00004755 , 0x00000013 
+ 00017683  0x00003adb arg  0x0000450a , 0x00000012 
+ 00017684  0x00003adc branch  0x00003374 
+ 00017685  0x00003ae0 call  0x0000451a 
+ 00017686  0x00003ae1 storet  0x00000002 , 0x0000471a 
+ 00017687  0x00003ae2 call  0x0000451f 
+ 00017688  0x00003ae3 storet  0x00000002 , 0x0000471c 
+ 00017689  0x00003ae4 rtn 
+ 00017690  0x00003ae7 fetch  0x00000002 , 0x0000471a 
+ 00017691  0x00003ae8 store  0x00000002 , 0x0000471e 
+ 00017692  0x00003ae9 call  0x00004540 
+ 00017693  0x00003aea call  0x00004525 
+ 00017694  0x00003aeb store  0x00000001 , 0x00004724 
+ 00017695  0x00003aed fetch  0x00000002 , 0x0000471c 
+ 00017696  0x00003aee store  0x00000002 , 0x0000471e 
+ 00017697  0x00003aef call  0x00004542 
+ 00017698  0x00003af0 call  0x00004525 
+ 00017699  0x00003af1 store  0x00000001 , 0x00004725 
+ 00017700  0x00003af2 rtn 
+ 00017701  0x00003af4 fetch  0x00000002 , 0x00004720 
+ 00017702  0x00003af5 copy  0x0000003f , 0x00000011 
+ 00017703  0x00003af6 fetch  0x00000002 , 0x0000471e 
+ 00017704  0x00003af7 call  0x0000452e 
+ 00017705  0x00003af8 fetch  0x00000001 , 0x00004719 
+ 00017706  0x00003af9 nbranch  0x00004537 , 0x00000034 
+ 00017707  0x00003afa nrtn  0x00000002 
+ 00017708  0x00003afb fetcht  0x00000002 , 0x0000471e 
+ 00017709  0x00003afc rtn 
+ 00017710  0x00003afe isub  0x00000002 , 0x0000003f 
+ 00017711  0x00003aff branch  0x00004534 , 0x00000002 
+ 00017712  0x00003b00 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00017713  0x00003b01 jam  0x00000001 , 0x00004718 
+ 00017714  0x00003b02 isub  0x00000011 , 0x0000003e 
+ 00017715  0x00003b03 rtn 
+ 00017716  0x00003b05 jam  0x00000000 , 0x00004718 
+ 00017717  0x00003b06 isub  0x00000011 , 0x0000003e 
+ 00017718  0x00003b07 rtn 
+ 00017719  0x00003b09 nbranch  0x0000453e , 0x00000002 
+ 00017720  0x00003b0a fetch  0x00000001 , 0x00004718 
+ 00017721  0x00003b0b nbranch  0x0000453c , 0x00000034 
+ 00017722  0x00003b0d setarg  0x00000001 
+ 00017723  0x00003b0e rtn 
+ 00017724  0x00003b10 setarg  0x00000002 
+ 00017725  0x00003b11 rtn 
+ 00017726  0x00003b13 setarg  0x00000000 
+ 00017727  0x00003b14 rtn 
+ 00017728  0x00003b16 jam  0x00000033 , 0x0000422e 
+ 00017729  0x00003b17 branch  0x000068eb 
+ 00017730  0x00003b19 jam  0x00000034 , 0x0000422e 
+ 00017731  0x00003b1a branch  0x000068eb 
+ 00017732  0x00003b1e fetch  0x00000001 , 0x0000472a 
+ 00017733  0x00003b1f rtnne  0x00000001 
+ 00017734  0x00003b21 bpatch  0x000000f2 , 0x0000401e 
+ 00017735  0x00003b22 jam  0x00000001 , 0x00004719 
+ 00017736  0x00003b23 call  0x0000451a 
+ 00017737  0x00003b24 fetch  0x00000002 , 0x00004724 
+ 00017738  0x00003b25 fetcht  0x00000002 , 0x00004722 
+ 00017739  0x00003b26 isub  0x00000002 , 0x0000003e 
+ 00017740  0x00003b27 rtn  0x00000005 
+ 00017741  0x00003b28 store  0x00000002 , 0x00004722 
+ 00017742  0x00003b29 call  0x00004550 
+ 00017743  0x00003b2a branch  0x00004554 
+ 00017744  0x00003b2d fetch  0x00000001 , 0x00004724 
+ 00017745  0x00003b2e branch  0x0000455a , 0x00000034 
+ 00017746  0x00003b2f increase  0xffffffff , 0x0000003f 
+ 00017747  0x00003b30 branch  0x00004557 
+ 00017748  0x00003b32 fetch  0x00000001 , 0x00004725 
+ 00017749  0x00003b33 branch  0x0000455d , 0x00000034 
+ 00017750  0x00003b34 increase  0x00000001 , 0x0000003f 
+ 00017751  0x00003b36 copy  0x0000003f , 0x00000007 
+ 00017752  0x00003b37 arg  0x00000001 , 0x00000011 
+ 00017753  0x00003b38 branch  0x00004560 
+ 00017754  0x00003b3b arg  0x00000000 , 0x00000007 
+ 00017755  0x00003b3c arg  0x00000000 , 0x00000011 
+ 00017756  0x00003b3d branch  0x00004560 
+ 00017757  0x00003b3f arg  0x00000002 , 0x00000007 
+ 00017758  0x00003b40 arg  0x00000000 , 0x00000011 
+ 00017759  0x00003b41 branch  0x00004560 
+ 00017760  0x00003b44 copy  0x00000011 , 0x0000003f 
+ 00017761  0x00003b45 store  0x00000001 , 0x00004761 
+ 00017762  0x00003b46 fetch  0x00000001 , 0x00004763 
+ 00017763  0x00003b47 beq  0x00000000 , 0x00002ee4 
+ 00017764  0x00003b48 fetch  0x00000002 , 0x00004753 
+ 00017765  0x00003b49 store  0x00000002 , 0x00004755 
+ 00017766  0x00003b4a fetch  0x00000001 , 0x00004761 
+ 00017767  0x00003b4b branch  0x00004580 , 0x00000034 
+ 00017768  0x00003b4d bpatch  0x000000f3 , 0x0000401e 
+ 00017769  0x00003b4e arg  0x00000000 , 0x00000011 
+ 00017770  0x00003b4f call  0x00007d14 
+ 00017771  0x00003b51 copy  0x00000007 , 0x0000003f 
+ 00017772  0x00003b52 beq  0x00000004 , 0x000045a3 
+ 00017773  0x00003b53 beq  0x00000005 , 0x000045a5 
+ 00017774  0x00003b54 beq  0x00000006 , 0x000045a7 
+ 00017775  0x00003b58 call  0x0000458b 
+ 00017776  0x00003b59 beq  0x00000000 , 0x00004574 
+ 00017777  0x00003b5a beq  0x00000002 , 0x0000457a 
+ 00017778  0x00003b5b beq  0x00000003 , 0x00004574 
+ 00017779  0x00003b5c rtn 
+ 00017780  0x00003b5f copy  0x00000007 , 0x0000003f 
+ 00017781  0x00003b60 beq  0x00000000 , 0x0000458f 
+ 00017782  0x00003b61 beq  0x00000001 , 0x00004591 
+ 00017783  0x00003b62 beq  0x00000002 , 0x00004593 
+ 00017784  0x00003b63 beq  0x00000003 , 0x00004595 
+ 00017785  0x00003b64 rtn 
+ 00017786  0x00003b67 copy  0x00000007 , 0x0000003f 
+ 00017787  0x00003b68 beq  0x00000000 , 0x00004597 
+ 00017788  0x00003b69 beq  0x00000001 , 0x0000459a 
+ 00017789  0x00003b6a beq  0x00000002 , 0x0000459d 
+ 00017790  0x00003b6b beq  0x00000003 , 0x000045a0 
+ 00017791  0x00003b6c rtn 
+ 00017792  0x00003b6f bpatch  0x000000f4 , 0x0000401e 
+ 00017793  0x00003b70 arg  0x00000000 , 0x00000011 
+ 00017794  0x00003b71 call  0x00007d19 
+ 00017795  0x00003b73 copy  0x00000007 , 0x0000003f 
+ 00017796  0x00003b74 beq  0x00000004 , 0x000045bc 
+ 00017797  0x00003b75 beq  0x00000005 , 0x000045bc 
+ 00017798  0x00003b79 call  0x0000458b 
+ 00017799  0x00003b7a beq  0x00000000 , 0x000045a9 
+ 00017800  0x00003b7b beq  0x00000002 , 0x000045af 
+ 00017801  0x00003b7c beq  0x00000003 , 0x000045a9 
+ 00017802  0x00003b7d rtn 
+ 00017803  0x00003b80 fetch  0x00000001 , 0x00004728 
+ 00017804  0x00003b81 fetcht  0x00000001 , 0x00004727 
+ 00017805  0x00003b82 ior  0x00000002 , 0x0000003f 
+ 00017806  0x00003b83 rtn 
+ 00017807  0x00003b87 jam  0x00000001 , 0x00004734 
+ 00017808  0x00003b88 branch  0x000045be 
+ 00017809  0x00003b8a jam  0x00000002 , 0x00004734 
+ 00017810  0x00003b8b branch  0x000045be 
+ 00017811  0x00003b8d jam  0x00000001 , 0x00004736 
+ 00017812  0x00003b8e branch  0x000045be 
+ 00017813  0x00003b90 jam  0x00000002 , 0x00004736 
+ 00017814  0x00003b91 branch  0x000045be 
+ 00017815  0x00003b95 jam  0x00000001 , 0x00004734 
+ 00017816  0x00003b96 jam  0x00000001 , 0x00004736 
+ 00017817  0x00003b97 branch  0x000045be 
+ 00017818  0x00003b99 jam  0x00000002 , 0x00004734 
+ 00017819  0x00003b9a jam  0x00000002 , 0x00004736 
+ 00017820  0x00003b9b branch  0x000045be 
+ 00017821  0x00003b9d jam  0x00000002 , 0x00004734 
+ 00017822  0x00003b9e jam  0x00000001 , 0x00004736 
+ 00017823  0x00003b9f branch  0x000045be 
+ 00017824  0x00003ba1 jam  0x00000001 , 0x00004734 
+ 00017825  0x00003ba2 jam  0x00000002 , 0x00004736 
+ 00017826  0x00003ba3 branch  0x000045be 
+ 00017827  0x00003ba7 jam  0x00000001 , 0x00004738 
+ 00017828  0x00003ba8 branch  0x000045be 
+ 00017829  0x00003baa jam  0x00000002 , 0x00004738 
+ 00017830  0x00003bab branch  0x000045be 
+ 00017831  0x00003bae jam  0x00000001 , 0x00004741 
+ 00017832  0x00003baf branch  0x000045c0 
+ 00017833  0x00003bb2 copy  0x00000007 , 0x0000003f 
+ 00017834  0x00003bb3 beq  0x00000000 , 0x000045b5 
+ 00017835  0x00003bb4 beq  0x00000001 , 0x000045b5 
+ 00017836  0x00003bb5 beq  0x00000002 , 0x000045b7 
+ 00017837  0x00003bb6 beq  0x00000003 , 0x000045b7 
+ 00017838  0x00003bb7 rtn 
+ 00017839  0x00003bba copy  0x00000007 , 0x0000003f 
+ 00017840  0x00003bbb beq  0x00000000 , 0x000045b9 
+ 00017841  0x00003bbc beq  0x00000001 , 0x000045b9 
+ 00017842  0x00003bbd beq  0x00000002 , 0x000045b9 
+ 00017843  0x00003bbe beq  0x00000003 , 0x000045b9 
+ 00017844  0x00003bbf rtn 
+ 00017845  0x00003bc3 jam  0x00000000 , 0x00004734 
+ 00017846  0x00003bc4 branch  0x000045be 
+ 00017847  0x00003bc7 jam  0x00000000 , 0x00004736 
+ 00017848  0x00003bc8 branch  0x000045be 
+ 00017849  0x00003bce jam  0x00000000 , 0x00004734 
+ 00017850  0x00003bcf jam  0x00000000 , 0x00004736 
+ 00017851  0x00003bd0 branch  0x000045be 
+ 00017852  0x00003bd4 jam  0x00000000 , 0x00004738 
+ 00017853  0x00003bd5 branch  0x000045be 
+ 00017854  0x00003bd8 arg  0x0000472e , 0x00000011 
+ 00017855  0x00003bd9 branch  0x00007e3d 
+ 00017856  0x00003bdb arg  0x0000473b , 0x00000011 
+ 00017857  0x00003bdc branch  0x00007e3d 
+ 00017858  0x00003bdf fetch  0x00000001 , 0x00004764 
+ 00017859  0x00003be0 beq  0x00000001 , 0x000045cc 
+ 00017860  0x00003be1 arg  0x00004744 , 0x00000011 
+ 00017861  0x00003be2 call  0x00007e54 
+ 00017862  0x00003be3 nbranch  0x000045d1 , 0x00000028 
+ 00017863  0x00003be5 arg  0x00004744 , 0x00000006 
+ 00017864  0x00003be6 ifetch  0x00000001 , 0x00000006 
+ 00017865  0x00003be7 copy  0x0000003f , 0x00000011 
+ 00017866  0x00003be8 arg  0x00004745 , 0x00000012 
+ 00017867  0x00003beb rtn 
+ 00017868  0x00003bee jam  0x00000000 , 0x00004764 
+ 00017869  0x00003bef enable  0x00000028 
+ 00017870  0x00003bf0 arg  0x00000001 , 0x00000011 
+ 00017871  0x00003bf1 arg  0x00004766 , 0x00000012 
+ 00017872  0x00003bf2 rtn 
+ 00017873  0x00003bf5 fetch  0x00000001 , 0x00004747 
+ 00017874  0x00003bf6 beq  0x00000004 , 0x000045d5 
+ 00017875  0x00003bf7 beq  0x00000005 , 0x000045d5 
+ 00017876  0x00003bf8 rtn 
+ 00017877  0x00003bfa fetch  0x00000001 , 0x0000474a 
+ 00017878  0x00003bfb nbranch  0x000045dc , 0x00000034 
+ 00017879  0x00003bfc fetch  0x00000001 , 0x0000474c 
+ 00017880  0x00003bfd nbranch  0x000045dc , 0x00000034 
+ 00017881  0x00003bfe fetch  0x00000001 , 0x0000474e 
+ 00017882  0x00003bff nbranch  0x000045dc , 0x00000034 
+ 00017883  0x00003c00 rtn 
+ 00017884  0x00003c02 enable  0x00000028 
+ 00017885  0x00003c03 branch  0x000045c7 
+ 00017886  0x00003c0c rtn  0x0000002b 
+ 00017887  0x00003c0d hfetch  0x00000001 , 0x00008081 
+ 00017888  0x00003c0e and_into  0x000000fc , 0x0000003f 
+ 00017889  0x00003c0f hstore  0x00000001 , 0x00008081 
+ 00017890  0x00003c10 setarg  0x000046b4 
+ 00017891  0x00003c11 store  0x00000002 , 0x000041eb 
+ 00017892  0x00003c13 setarg  0x000046b3 
+ 00017893  0x00003c14 store  0x00000002 , 0x000041ed 
+ 00017894  0x00003c16 setarg  0x0000340a 
+ 00017895  0x00003c17 store  0x00000002 , 0x000041f7 
+ 00017896  0x00003c19 setarg  0x000046b1 
+ 00017897  0x00003c1a store  0x00000002 , 0x000041f3 
+ 00017898  0x00003c1c setarg  0x00004612 
+ 00017899  0x00003c1d store  0x00000002 , 0x000041f5 
+ 00017900  0x00003c1f setarg  0x0000460c 
+ 00017901  0x00003c20 store  0x00000002 , 0x000041e9 
+ 00017902  0x00003c22 setarg  0x0000476a 
+ 00017903  0x00003c23 store  0x00000002 , 0x000041f9 
+ 00017904  0x00003c25 setarg  0x00004686 
+ 00017905  0x00003c26 store  0x00000002 , 0x000041fd 
+ 00017906  0x00003c28 setarg  0x00004729 
+ 00017907  0x00003c29 store  0x00000002 , 0x000046e7 
+ 00017908  0x00003c2b setarg  0x00004806 
+ 00017909  0x00003c2c store  0x00000002 , 0x000046e2 
+ 00017910  0x00003c2d setarg  0x00004807 
+ 00017911  0x00003c2e store  0x00000002 , 0x000046e4 
+ 00017912  0x00003c30 call  0x000057a3 
+ 00017913  0x00003c31 call  0x000047da 
+ 00017914  0x00003c32 call  0x00004788 
+ 00017915  0x00003c33 call  0x0000476d 
+ 00017916  0x00003c34 call  0x00006948 
+ 00017917  0x00003c35 call  0x0000477a 
+ 00017918  0x00003c36 call  0x00007e38 
+ 00017919  0x00003c37 call  0x00007d08 
+ 00017920  0x00003c38 call  0x00004793 
+ 00017921  0x00003c39 call  0x000047c7 
+ 00017922  0x00003c3b bpatch  0x000000f5 , 0x0000401e 
+ 00017923  0x00003c3c call  0x0000464f 
+ 00017924  0x00003c3d fetch  0x00000001 , 0x000046dd 
+ 00017925  0x00003c3e beq  0x00000000 , 0x00004609 
+ 00017926  0x00003c3f fetch  0x00000001 , 0x000046de 
+ 00017927  0x00003c40 store  0x00000001 , 0x00004686 
+ 00017928  0x00003c41 branch  0x0000480e 
+ 00017929  0x00003c45 jam  0x000000ff , 0x00004686 
+ 00017930  0x00003c46 jam  0x00000001 , 0x000046df 
+ 00017931  0x00003c47 branch  0x000046d9 
+ 00017932  0x00003c4c fetch  0x00000001 , 0x000046df 
+ 00017933  0x00003c4d beq  0x00000002 , 0x000033d0 
+ 00017934  0x00003c4e call  0x0000527e 
+ 00017935  0x00003c4f fetch  0x00000001 , 0x00004256 
+ 00017936  0x00003c50 nbranch  0x000033d0 , 0x00000034 
+ 00017937  0x00003c51 branch  0x000033d2 
+ 00017938  0x00003c56 copy  0x00000013 , 0x0000003f 
+ 00017939  0x00003c58 beq  0x00000001 , 0x00004626 
+ 00017940  0x00003c59 beq  0x00000002 , 0x00004629 
+ 00017941  0x00003c5a beq  0x00000004 , 0x00004631 
+ 00017942  0x00003c5b beq  0x00000005 , 0x00004633 
+ 00017943  0x00003c5c beq  0x00000006 , 0x00004635 
+ 00017944  0x00003c5d beq  0x00000007 , 0x00004638 
+ 00017945  0x00003c5e beq  0x00000012 , 0x0000463c 
+ 00017946  0x00003c5f beq  0x00000013 , 0x00004644 
+ 00017947  0x00003c60 beq  0x00000027 , 0x00004645 
+ 00017948  0x00003c61 beq  0x0000002e , 0x00004648 
+ 00017949  0x00003c62 beq  0x0000003d , 0x00004649 
+ 00017950  0x00003c64 beq  0x00000014 , 0x00004658 
+ 00017951  0x00003c65 beq  0x00000015 , 0x0000465c 
+ 00017952  0x00003c66 beq  0x0000003f , 0x0000465f 
+ 00017953  0x00003c67 beq  0x00000040 , 0x00004665 
+ 00017954  0x00003c69 beq  0x00000010 , 0x0000466b 
+ 00017955  0x00003c6a beq  0x0000002c , 0x0000466c 
+ 00017956  0x00003c6b beq  0x0000002d , 0x00004677 
+ 00017957  0x00003c6c rtn 
+ 00017958  0x00003c72 jam  0x00000000 , 0x000046ad 
+ 00017959  0x00003c73 jam  0x00000000 , 0x000046ac 
+ 00017960  0x00003c74 rtn 
+ 00017961  0x00003c78 call  0x0000462b 
+ 00017962  0x00003c79 branch  0x00004631 
+ 00017963  0x00003c7c jam  0x00000000 , 0x000041e2 
+ 00017964  0x00003c7d jam  0x00000000 , 0x00004680 
+ 00017965  0x00003c7e jam  0x00000000 , 0x00004205 
+ 00017966  0x00003c7f jam  0x00000000 , 0x000046ac 
+ 00017967  0x00003c80 jam  0x00000000 , 0x000046ad 
+ 00017968  0x00003c81 branch  0x00007e38 
+ 00017969  0x00003c85 call  0x000033a9 
+ 00017970  0x00003c86 branch  0x000046c2 
+ 00017971  0x00003c8a call  0x000046b6 
+ 00017972  0x00003c8b branch  0x00003408 
+ 00017973  0x00003c8f setarg  0x00000002 
+ 00017974  0x00003c90 store  0x00000001 , 0x00004680 
+ 00017975  0x00003c91 rtn 
+ 00017976  0x00003c95 jam  0x00000000 , 0x000046ac 
+ 00017977  0x00003c96 setarg  0x00000001 
+ 00017978  0x00003c97 store  0x00000001 , 0x000046ad 
+ 00017979  0x00003c98 rtn 
+ 00017980  0x00003c9c fetch  0x00000001 , 0x000041e2 
+ 00017981  0x00003c9d rtneq  0x00000001 
+ 00017982  0x00003c9e jam  0x00000001 , 0x000041e2 
+ 00017983  0x00003c9f call  0x00003416 
+ 00017984  0x00003ca0 call  0x00003414 
+ 00017985  0x00003ca1 call  0x000046b6 
+ 00017986  0x00003ca2 call  0x00003408 
+ 00017987  0x00003ca3 branch  0x0000340e 
+ 00017988  0x00003ca7 branch  0x00004631 
+ 00017989  0x00003cab setarg  0x00000005 
+ 00017990  0x00003cac store  0x00000001 , 0x000046ac 
+ 00017991  0x00003cad rtn 
+ 00017992  0x00003cb1 branch  0x000033cd 
+ 00017993  0x00003cb6 arg  0x00000000 , 0x00000012 
+ 00017994  0x00003cb7 fetch  0x00000001 , 0x00004217 
+ 00017995  0x00003cb8 mul32  0x0000003f , 0x00000022 , 0x00000002 
+ 00017996  0x00003cb9 fetch  0x00000002 , 0x00004215 
+ 00017997  0x00003cba copy  0x0000003f , 0x00000011 
+ 00017998  0x00003cbb branch  0x00006606 
+ 00017999  0x00003cbe arg  0x00000000 , 0x00000012 
+ 00018000  0x00003cbf fetch  0x00000001 , 0x0000469a 
+ 00018001  0x00003cc0 rtnbit0  0x00000001 
+ 00018002  0x00003cc1 fetch  0x00000001 , 0x00004217 
+ 00018003  0x00003cc2 rtn  0x00000034 
+ 00018004  0x00003cc3 mul32  0x0000003f , 0x00000022 , 0x00000002 
+ 00018005  0x00003cc4 fetch  0x00000002 , 0x00004215 
+ 00018006  0x00003cc5 copy  0x0000003f , 0x00000011 
+ 00018007  0x00003cc6 branch  0x000065df 
+ 00018008  0x00003ccb call  0x000046b6 
+ 00018009  0x00003ccc setarg  0x00000000 
+ 00018010  0x00003ccd store  0x00000002 , 0x000046b7 
+ 00018011  0x00003cce branch  0x00003408 
+ 00018012  0x00003cd2 call  0x00007e38 
+ 00018013  0x00003cd3 jam  0x00000000 , 0x000046b0 
+ 00018014  0x00003cd4 branch  0x000046d9 
+ 00018015  0x00003cd8 call  0x00007e38 
+ 00018016  0x00003cd9 jam  0x00000001 , 0x000046b0 
+ 00018017  0x00003cda fetch  0x00000008 , 0x000046c1 
+ 00018018  0x00003cdb store  0x00000008 , 0x00004496 
+ 00018019  0x00003cdc call  0x00003416 
+ 00018020  0x00003cdd branch  0x00005abf 
+ 00018021  0x00003ce1 fetch  0x00000002 , 0x00004509 
+ 00018022  0x00003ce2 rtneq  0x00000000 
+ 00018023  0x00003ce3 fetch  0x00000008 , 0x000046c9 
+ 00018024  0x00003ce4 rtn  0x00000034 
+ 00018025  0x00003ce5 store  0x00000008 , 0x00004496 
+ 00018026  0x00003ce6 branch  0x00005abf 
+ 00018027  0x00003ceb branch  0x0000481f 
+ 00018028  0x00003cee fetch  0x00000001 , 0x000046dd 
+ 00018029  0x00003cef rtneq  0x00000000 
+ 00018030  0x00003cf0 fetch  0x00000001 , 0x000046df 
+ 00018031  0x00003cf1 rtnne  0x00000001 
+ 00018032  0x00003cf2 call  0x00004672 
+ 00018033  0x00003cf3 branch  0x00003406 
+ 00018034  0x00003cf6 jam  0x00000001 , 0x000048df 
+ 00018035  0x00003cf7 arg  0x0000000b , 0x00000039 
+ 00018036  0x00003cf8 arg  0x000048e0 , 0x00000005 
+ 00018037  0x00003cf9 arg  0x000048c9 , 0x00000006 
+ 00018038  0x00003cfa branch  0x00007f01 
+ 00018039  0x00003cfd fetch  0x00000001 , 0x000046dd 
+ 00018040  0x00003cfe rtneq  0x00000000 
+ 00018041  0x00003cff fetch  0x00000001 , 0x000046df 
+ 00018042  0x00003d00 beq  0x00000001 , 0x0000467c 
+ 00018043  0x00003d01 branch  0x0000481b 
+ 00018044  0x00003d04 fetch  0x00000001 , 0x000048df 
+ 00018045  0x00003d05 rtnne  0x00000001 
+ 00018046  0x00003d06 jam  0x00000000 , 0x000048df 
+ 00018047  0x00003d07 fetch  0x00000002 , 0x00004682 
+ 00018048  0x00003d08 bbit1  0x00000000 , 0x00003408 
+ 00018049  0x00003d09 bbit1  0x00000009 , 0x00003408 
+ 00018050  0x00003d0a arg  0x0000000b , 0x00000039 
+ 00018051  0x00003d0b arg  0x000048e0 , 0x00000006 
+ 00018052  0x00003d0c arg  0x000048c9 , 0x00000005 
+ 00018053  0x00003d0d branch  0x00007f01 
+ 00018054  0x00003d14 call  0x0000468c 
+ 00018055  0x00003d17 call  0x00004693 
+ 00018056  0x00003d1a call  0x0000469e 
+ 00018057  0x00003d1b call  0x000046a6 
+ 00018058  0x00003d1c call  0x000046a9 
+ 00018059  0x00003d1f branch  0x000046ac 
+ 00018060  0x00003d24 arg  0x000046db , 0x00000013 
+ 00018061  0x00003d25 arg  0x0000468f , 0x00000012 
+ 00018062  0x00003d26 branch  0x00003374 
+ 00018063  0x00003d28 jam  0x00000002 , 0x000046df 
+ 00018064  0x00003d29 call  0x00003408 
+ 00018065  0x00003d2a call  0x000046f4 
+ 00018066  0x00003d2b branch  0x0000480b 
+ 00018067  0x00003d2f arg  0x000048ec , 0x00000013 
+ 00018068  0x00003d30 arg  0x00004696 , 0x00000012 
+ 00018069  0x00003d31 branch  0x0000336d 
+ 00018070  0x00003d34 fetch  0x00000002 , 0x00004682 
+ 00018071  0x00003d35 bbit1  0x00000009 , 0x0000480b 
+ 00018072  0x00003d36 bbit1  0x00000000 , 0x0000480b 
+ 00018073  0x00003d37 fetch  0x00000001 , 0x000048c9 
+ 00018074  0x00003d38 beq  0x00000001 , 0x0000480b 
+ 00018075  0x00003d39 beq  0x00000004 , 0x0000480b 
+ 00018076  0x00003d3a beq  0x00000005 , 0x0000480b 
+ 00018077  0x00003d3b branch  0x0000340a 
+ 00018078  0x00003d40 arg  0x000046ac , 0x00000013 
+ 00018079  0x00003d41 arg  0x000046a1 , 0x00000012 
+ 00018080  0x00003d42 branch  0x0000336d 
+ 00018081  0x00003d45 fetch  0x00000001 , 0x0000027f 
+ 00018082  0x00003d46 set1  0x00000000 , 0x0000003f 
+ 00018083  0x00003d47 set1  0x00000007 , 0x0000003f 
+ 00018084  0x00003d48 store  0x00000001 , 0x0000027f 
+ 00018085  0x00003d49 rtn 
+ 00018086  0x00003d4c arg  0x00004680 , 0x00000013 
+ 00018087  0x00003d4d arg  0x0000463c , 0x00000012 
+ 00018088  0x00003d4e branch  0x0000336d 
+ 00018089  0x00003d51 arg  0x000046ad , 0x00000013 
+ 00018090  0x00003d52 arg  0x000033e9 , 0x00000012 
+ 00018091  0x00003d53 branch  0x0000336d 
+ 00018092  0x00003d59 fetch  0x00000001 , 0x000046df 
+ 00018093  0x00003d5a rtnne  0x00000001 
+ 00018094  0x00003d5b arg  0x000046b7 , 0x00000013 
+ 00018095  0x00003d5c arg  0x000046c2 , 0x00000012 
+ 00018096  0x00003d5d branch  0x00003374 
+ 00018097  0x00003d61 call  0x0000473a 
+ 00018098  0x00003d62 branch  0x00006978 
+ 00018099  0x00003d66 branch  0x0000696c 
+ 00018100  0x00003d69 call  0x00006835 
+ 00018101  0x00003d6a branch  0x000046b3 
+ 00018102  0x00003d71 fetch  0x00000001 , 0x0000469a 
+ 00018103  0x00003d72 bbit1  0x00000001 , 0x000046be 
+ 00018104  0x00003d73 bbit1  0x00000000 , 0x000046ba 
+ 00018105  0x00003d74 rtn 
+ 00018106  0x00003d77 fetch  0x00000002 , 0x000046d7 
+ 00018107  0x00003d78 store  0x00000002 , 0x000046d9 
+ 00018108  0x00003d79 store  0x00000002 , 0x000046db 
+ 00018109  0x00003d7a branch  0x000033f8 
+ 00018110  0x00003d7d fetch  0x00000002 , 0x000046d3 
+ 00018111  0x00003d7e store  0x00000002 , 0x000046d9 
+ 00018112  0x00003d7f store  0x00000002 , 0x000046db 
+ 00018113  0x00003d80 branch  0x000033f0 
+ 00018114  0x00003d83 fetch  0x00000001 , 0x000046df 
+ 00018115  0x00003d84 rtnne  0x00000001 
+ 00018116  0x00003d85 fetch  0x00000001 , 0x0000469a 
+ 00018117  0x00003d86 bbit1  0x00000001 , 0x000046c8 
+ 00018118  0x00003d87 bbit1  0x00000000 , 0x000046cc 
+ 00018119  0x00003d88 rtn 
+ 00018120  0x00003d8b fetch  0x00000002 , 0x000046d1 ,
+ 00018121  0x00003d8c store  0x00000002 , 0x000046d9 
+ 00018122  0x00003d8d store  0x00000002 , 0x000046db 
+ 00018123  0x00003d8e branch  0x000033eb 
+ 00018124  0x00003d91 fetch  0x00000002 , 0x00004682 
+ 00018125  0x00003d92 rtnbit1  0x00000009 
+ 00018126  0x00003d93 fetch  0x00000002 , 0x000046d5 
+ 00018127  0x00003d94 store  0x00000002 , 0x000046d9 
+ 00018128  0x00003d95 store  0x00000002 , 0x000046db 
+ 00018129  0x00003d96 fetch  0x00000002 , 0x000046b3 
+ 00018130  0x00003d97 call  0x000046f0 
+ 00018131  0x00003d98 call  0x00003404 
+ 00018132  0x00003d99 fetch  0x00000004 , 0x000046bd 
+ 00018133  0x00003d9a store  0x00000004 , 0x000048cc 
+ 00018134  0x00003d9b fetch  0x00000002 , 0x00004682 
+ 00018135  0x00003d9c rtnbit1  0x0000000b 
+ 00018136  0x00003d9d branch  0x000033fa 
+ 00018137  0x00003da1 fetch  0x00000001 , 0x000046df 
+ 00018138  0x00003da2 rtnne  0x00000001 
+ 00018139  0x00003da3 fetch  0x00000001 , 0x0000469a 
+ 00018140  0x00003da4 bbit1  0x00000001 , 0x000046df 
+ 00018141  0x00003da5 bbit1  0x00000000 , 0x000046e4 
+ 00018142  0x00003da6 rtn 
+ 00018143  0x00003da9 call  0x000046f8 
+ 00018144  0x00003daa branch  0x000046c2 , 0x00000034 
+ 00018145  0x00003dab call  0x00003406 
+ 00018146  0x00003dac call  0x000033f0 
+ 00018147  0x00003dad branch  0x000033e1 
+ 00018148  0x00003db0 fetch  0x00000002 , 0x000046b7 
+ 00018149  0x00003db1 fetcht  0x00000002 , 0x000046b5 
+ 00018150  0x00003db2 storet  0x00000002 , 0x000046b7 
+ 00018151  0x00003db3 nrtn  0x00000034 
+ 00018152  0x00003db4 fetch  0x00000002 , 0x000046b1 
+ 00018153  0x00003db5 call  0x000046f0 
+ 00018154  0x00003db6 call  0x00003404 
+ 00018155  0x00003db7 fetch  0x00000004 , 0x000046b9 
+ 00018156  0x00003db8 store  0x00000004 , 0x000048cc 
+ 00018157  0x00003db9 fetch  0x00000002 , 0x00004682 
+ 00018158  0x00003dba rtnbit1  0x0000000b 
+ 00018159  0x00003dbb branch  0x000033fa 
+ 00018160  0x00003dbf store  0x00000002 , 0x00004154 
+ 00018161  0x00003dc0 increase  0xfffffffc , 0x0000003f 
+ 00018162  0x00003dc1 store  0x00000002 , 0x00004482 
+ 00018163  0x00003dc2 rtn 
+ 00018164  0x00003dc6 fetch  0x00000002 , 0x00004682 
+ 00018165  0x00003dc7 bbit1  0x00000009 , 0x00003402 
+ 00018166  0x00003dc8 bbit1  0x00000000 , 0x000033e9 
+ 00018167  0x00003dc9 branch  0x000046b6 
+ 00018168  0x00003dce fetch  0x00000001 , 0x00004217 
+ 00018169  0x00003dcf copy  0x0000003f , 0x00000039 
+ 00018170  0x00003dd0 fetch  0x00000002 , 0x00004215 
+ 00018171  0x00003dd1 copy  0x0000003f , 0x00000011 
+ 00018172  0x00003dd3 ifetch  0x00000002 , 0x00000011 
+ 00018173  0x00003dd4 beq  0x00000000 , 0x00004701 
+ 00018174  0x00003dd5 increase  0x00000022 , 0x00000011 
+ 00018175  0x00003dd6 loop  0x000046fc 
+ 00018176  0x00003dd7 branch  0x00007ff1 
+ 00018177  0x00003dda ifetch  0x00000006 , 0x00000006 
+ 00018178  0x00003ddb store  0x00000006 , 0x000041d0 
+ 00018179  0x00003ddc increase  0x0000000a , 0x00000006 
+ 00018180  0x00003ddd arg  0x000041be , 0x00000005 
+ 00018181  0x00003dde call  0x00007ebf 
+ 00018182  0x00003ddf call  0x000067d7 
+ 00018183  0x00003de0 branch  0x00007fef 
+ 00018184  0x00003de7 call  0x00007fe9 
+ 00018185  0x00003de8 fetch  0x00000002 , 0x00004682 
+ 00018186  0x00003de9 bbit1  0x00000000 , 0x0000470d 
+ 00018187  0x00003dea bbit1  0x00000009 , 0x00004710 
+ 00018188  0x00003deb rtn 
+ 00018189  0x00003dee fetch  0x00000001 , 0x00004253 
+ 00018190  0x00003def rtnne  0x0000003f 
+ 00018191  0x00003df0 branch  0x00007fe7 
+ 00018192  0x00003df3 fetch  0x00000001 , 0x000046b0 
+ 00018193  0x00003df4 rtn  0x00000034 
+ 00018194  0x00003df5 branch  0x00007fe7 
+ 00018195  0x00003dfb call  0x00007fe9 
+ 00018196  0x00003dfc fetch  0x00000002 , 0x00004682 
+ 00018197  0x00003dfd rtnbit1  0x00000000 
+ 00018198  0x00003dfe rtnbit1  0x00000009 
+ 00018199  0x00003dff branch  0x00007fe7 
+ 00018200  0x00003e04 fetch  0x00000001 , 0x0000469a 
+ 00018201  0x00003e05 bbit1  0x00000001 , 0x0000471c 
+ 00018202  0x00003e06 bbit1  0x00000000 , 0x0000471f 
+ 00018203  0x00003e07 rtn 
+ 00018204  0x00003e0a fetch  0x00000001 , 0x00004093 
+ 00018205  0x00003e0b rtnne  0x00000003 
+ 00018206  0x00003e0c branch  0x000046d9 
+ 00018207  0x00003e0f branch  0x000046d9 
+ 00018208  0x00003e13 disable  0x0000002c 
+ 00018209  0x00003e14 fetch  0x00000002 , 0x000046d9 
+ 00018210  0x00003e15 store  0x00000002 , 0x000046db 
+ 00018211  0x00003e17 call  0x00004713 
+ 00018212  0x00003e18 branch  0x00004718 , 0x00000028 
+ 00018213  0x00003e1a call  0x00004708 
+ 00018214  0x00003e1b nrtn  0x00000028 
+ 00018215  0x00003e1c enable  0x0000002c 
+ 00018216  0x00003e1d rtn 
+ 00018217  0x00003e22 call  0x00004720 
+ 00018218  0x00003e23 nrtn  0x0000002c 
+ 00018219  0x00003e24 deposit  0x00000011 
+ 00018220  0x00003e25 branch  0x00004730 , 0x00000034 
+ 00018221  0x00003e27 call  0x00003406 
+ 00018222  0x00003e28 arg  0x000046f1 , 0x00000013 
+ 00018223  0x00003e29 branch  0x00004732 
+ 00018224  0x00003e2c call  0x00003408 
+ 00018225  0x00003e2d arg  0x00004719 , 0x00000013 
+ 00018226  0x00003e30 arg  0x00000005 , 0x0000003f 
+ 00018227  0x00003e31 imul32  0x00000007 , 0x0000003f 
+ 00018228  0x00003e32 iadd  0x00000013 , 0x00000013 
+ 00018229  0x00003e36 ifetch  0x00000001 , 0x00000013 
+ 00018230  0x00003e37 rtn  0x00000034 
+ 00018231  0x00003e38 call  0x00004762 
+ 00018232  0x00003e39 increase  0x00000001 , 0x00000013 
+ 00018233  0x00003e3a branch  0x00004735 
+ 00018234  0x00003e3e fetch  0x00000002 , 0x00004682 
+ 00018235  0x00003e3f bbit1  0x00000009 , 0x0000473e 
+ 00018236  0x00003e40 bbit1  0x00000000 , 0x0000474e 
+ 00018237  0x00003e41 rtn 
+ 00018238  0x00003e44 call  0x00005892 
+ 00018239  0x00003e45 nrtn  0x00000034 
+ 00018240  0x00003e46 call  0x00004765 
+ 00018241  0x00003e47 nrtn  0x00000028 
+ 00018242  0x00003e48 pincrease  0xffffffff 
+ 00018243  0x00003e49 mul32  0x0000003f , 0x00000005 , 0x0000003f 
+ 00018244  0x00003e4a arg  0x00004741 , 0x00000002 
+ 00018245  0x00003e4b iadd  0x00000002 , 0x00000006 
+ 00018246  0x00003e4d ifetch  0x00000001 , 0x00000006 
+ 00018247  0x00003e4e copy  0x0000003f , 0x00000011 
+ 00018248  0x00003e4f ifetcht  0x00000002 , 0x00000006 
+ 00018249  0x00003e50 call  0x00007ea5 
+ 00018250  0x00003e51 call  0x00005a64 
+ 00018251  0x00003e52 copy  0x00000011 , 0x00000039 
+ 00018252  0x00003e53 call  0x00007e9f 
+ 00018253  0x00003e54 branch  0x00007f01 
+ 00018254  0x00003e58 call  0x00005271 
+ 00018255  0x00003e59 nrtn  0x00000034 
+ 00018256  0x00003e5a call  0x00004765 
+ 00018257  0x00003e5b nrtn  0x00000028 
+ 00018258  0x00003e5c pincrease  0xffffffff 
+ 00018259  0x00003e5d mul32  0x0000003f , 0x00000005 , 0x0000003f 
+ 00018260  0x00003e5e arg  0x000047a0 , 0x00000002 
+ 00018261  0x00003e5f iadd  0x00000002 , 0x00000006 
+ 00018262  0x00003e60 ifetch  0x00000005 , 0x00000006 
+ 00018263  0x00003e61 store  0x00000005 , 0x0000479b 
+ 00018264  0x00003e63 fetch  0x00000001 , 0x0000479b 
+ 00018265  0x00003e64 copy  0x0000003f , 0x00000011 
+ 00018266  0x00003e65 call  0x00004d63 
+ 00018267  0x00003e66 fetch  0x00000002 , 0x0000424e 
+ 00018268  0x00003e67 istore  0x00000002 , 0x00000005 
+ 00018269  0x00003e68 setarg  0x000000a1 
+ 00018270  0x00003e69 istore  0x00000001 , 0x00000005 
+ 00018271  0x00003e6a fetch  0x00000004 , 0x0000479c 
+ 00018272  0x00003e6b istore  0x00000009 , 0x00000005 
+ 00018273  0x00003e6c rtn 
+ 00018274  0x00003e71 store  0x00000001 , 0x00000a9a 
+ 00018275  0x00003e72 arg  0x00000a9a , 0x00000011 
+ 00018276  0x00003e73 branch  0x00007e3d 
+ 00018277  0x00003e76 arg  0x00000a9a , 0x00000011 
+ 00018278  0x00003e77 call  0x00007e54 
+ 00018279  0x00003e78 nrtn  0x00000028 
+ 00018280  0x00003e79 fetch  0x00000001 , 0x00000a9a 
+ 00018281  0x00003e7a rtn 
+ 00018282  0x00003e7e fetch  0x00000002 , 0x00000478 
+ 00018283  0x00003e7f beq  0x00000018 , 0x0000465f 
+ 00018284  0x00003e80 rtn 
+ 00018285  0x00003e83 setarg  0x00000002 
+ 00018286  0x00003e84 store  0x00000001 , 0x000048eb 
+ 00018287  0x00003e86 setarg  0x00200008 
+ 00018288  0x00003e87 store  0x00000004 , 0x000046c1 
+ 00018289  0x00003e88 setarg  0x012c0005 
+ 00018290  0x00003e89 istore  0x00000004 , 0x00000005 
+ 00018291  0x00003e8c jam  0x00000017 , 0x000044a6 
+ 00018292  0x00003e8f setarg  0x0000001b 
+ 00018293  0x00003e90 store  0x00000002 , 0x000044fa 
+ 00018294  0x00003e91 call  0x00005810 
+ 00018295  0x00003e92 call  0x0000582c 
+ 00018296  0x00003e93 call  0x00005839 
+ 00018297  0x00003e94 branch  0x00005818 
+ 00018298  0x00003e99 arg  0x00000028 , 0x00000039 
+ 00018299  0x00003e9a arg  0x00004741 , 0x00000005 
+ 00018300  0x00003e9b arg  0x0000949f , 0x00000006 
+ 00018301  0x00003e9c call  0x00007ef4 
+ 00018302  0x00003e9d arg  0x00000028 , 0x00000039 
+ 00018303  0x00003e9e arg  0x000047a0 , 0x00000005 
+ 00018304  0x00003e9f arg  0x000094c7 , 0x00000006 
+ 00018305  0x00003ea0 branch  0x00007ef4 
+ 00018306  0x00003ea4 arg  0x0000017e , 0x00000039 
+ 00018307  0x00003ea5 arg  0x0000913a , 0x00000006 
+ 00018308  0x00003ea6 branch  0x00007ef4 
+ 00018309  0x00003eaa arg  0x000001e7 , 0x00000039 
+ 00018310  0x00003eab arg  0x000092b8 , 0x00000006 
+ 00018311  0x00003eac branch  0x00007ef4 
+ 00018312  0x00003eb1 call  0x000047ae 
+ 00018313  0x00003eb2 nrtn  0x00000028 
+ 00018314  0x00003eb3 fetch  0x00000001 , 0x0000469f 
+ 00018315  0x00003eb4 call  0x00004790 
+ 00018316  0x00003eb5 fetch  0x00000001 , 0x000046a0 
+ 00018317  0x00003eb6 call  0x00004790 
+ 00018318  0x00003eb7 fetch  0x00000001 , 0x000046a1 
+ 00018319  0x00003eb8 branch  0x00004790 
+ 00018320  0x00003ebb rtn  0x00000034 
+ 00018321  0x00003ebc or  0x0000003f , 0x00000080 , 0x00000002 
+ 00018322  0x00003ebd branch  0x000067f9 
+ 00018323  0x00003ec1 call  0x000047ae 
+ 00018324  0x00003ec2 nrtn  0x00000028 
+ 00018325  0x00003ec3 call  0x00004797 
+ 00018326  0x00003ec4 branch  0x000047b4 
+ 00018327  0x00003ec7 arg  0x00000000 , 0x00000011 
+ 00018328  0x00003ec8 fetch  0x00000001 , 0x0000469f 
+ 00018329  0x00003ec9 call  0x000047a9 
+ 00018330  0x00003eca nsetflag  0x00000034 , 0x00000000 , 0x00000011 
+ 00018331  0x00003ecb fetch  0x00000001 , 0x000046a0 
+ 00018332  0x00003ecc call  0x000047a9 
+ 00018333  0x00003ecd nsetflag  0x00000034 , 0x00000001 , 0x00000011 
+ 00018334  0x00003ece fetch  0x00000001 , 0x000046a1 
+ 00018335  0x00003ecf call  0x000047a9 
+ 00018336  0x00003ed0 nsetflag  0x00000034 , 0x00000002 , 0x00000011 
+ 00018337  0x00003ed1 copy  0x00000011 , 0x0000003f 
+ 00018338  0x00003ed2 store  0x00000001 , 0x000046a9 
+ 00018339  0x00003ed3 fetch  0x00000001 , 0x0000469e 
+ 00018340  0x00003ed4 imul32  0x00000011 , 0x0000003f 
+ 00018341  0x00003ed5 fetcht  0x00000002 , 0x0000469c 
+ 00018342  0x00003ed6 iadd  0x00000002 , 0x0000003f 
+ 00018343  0x00003ed7 store  0x00000002 , 0x000046aa 
+ 00018344  0x00003ed8 rtn 
+ 00018345  0x00003edb rtn  0x00000034 
+ 00018346  0x00003edc or  0x0000003f , 0x00000080 , 0x00000002 
+ 00018347  0x00003edd call  0x0000681d 
+ 00018348  0x00003ede nbranch  0x00007ff1 , 0x00000001 
+ 00018349  0x00003edf branch  0x00007fef 
+ 00018350  0x00003ee3 call  0x00007fe9 
+ 00018351  0x00003ee4 fetch  0x00000001 , 0x000046a8 
+ 00018352  0x00003ee5 nrtn  0x00000034 
+ 00018353  0x00003ee6 fetch  0x00000001 , 0x0000469b 
+ 00018354  0x00003ee7 rtn  0x00000034 
+ 00018355  0x00003ee8 branch  0x00007fe7 
+ 00018356  0x00003eec call  0x0000666a 
+ 00018357  0x00003eed fetch  0x00000002 , 0x000046aa 
+ 00018358  0x00003eee arg  0x00000ac2 , 0x00000011 
+ 00018359  0x00003eef fetcht  0x00000001 , 0x0000469e 
+ 00018360  0x00003ef0 call  0x000066b3 
+ 00018361  0x00003ef1 call  0x0000666d 
+ 00018362  0x00003ef3 fetch  0x00000001 , 0x00000ac2 
+ 00018363  0x00003ef4 copy  0x0000003f , 0x00000039 
+ 00018364  0x00003ef5 store  0x00000001 , 0x000043af 
+ 00018365  0x00003ef6 call  0x00007ef4 
+ 00018366  0x00003ef7 fetch  0x00000001 , 0x00000ac2 
+ 00018367  0x00003ef8 copy  0x0000003f , 0x00000039 
+ 00018368  0x00003ef9 store  0x00000001 , 0x00004515 
+ 00018369  0x00003efa call  0x00007ef4 
+ 00018370  0x00003efb ifetch  0x00000001 , 0x00000006 
+ 00018371  0x00003efc store  0x00000001 , 0x000046e6 
+ 00018372  0x00003efd ifetch  0x00000001 , 0x00000006 
+ 00018373  0x00003efe store  0x00000001 , 0x000046dd 
+ 00018374  0x00003eff rtn 
+ 00018375  0x00003f03 fetch  0x00000001 , 0x0000469a 
+ 00018376  0x00003f04 rtnbit0  0x00000001 
+ 00018377  0x00003f05 arg  0x00000003 , 0x00000002 
+ 00018378  0x00003f06 fetch  0x00000002 , 0x000046a4 
+ 00018379  0x00003f07 copy  0x0000003f , 0x00000012 
+ 00018380  0x00003f08 arg  0x000046a6 , 0x00000011 
+ 00018381  0x00003f09 call  0x000065df 
+ 00018382  0x00003f0a fetcht  0x00000002 , 0x000046a6 
+ 00018383  0x00003f0b setarg  0x00001b3a 
+ 00018384  0x00003f0c isub  0x00000002 , 0x0000003e 
+ 00018385  0x00003f0d nrtn  0x00000005 
+ 00018386  0x00003f0e fetch  0x00000001 , 0x000046a8 
+ 00018387  0x00003f0f rtn  0x00000034 
+ 00018388  0x00003f10 copy  0x0000003f , 0x00000002 
+ 00018389  0x00003f11 fetch  0x00000002 , 0x000046a4 
+ 00018390  0x00003f12 add  0x0000003f , 0x00000003 , 0x00000012 
+ 00018391  0x00003f13 arg  0x00000ac2 , 0x00000011 
+ 00018392  0x00003f14 call  0x000065df 
+ 00018393  0x00003f15 branch  0x000047e8 
+ 00018394  0x00003f18 fetch  0x00000002 , 0x000046a2 
+ 00018395  0x00003f19 rtn  0x00000034 
+ 00018396  0x00003f1a call  0x0000666a 
+ 00018397  0x00003f1b arg  0x00000001 , 0x00000002 
+ 00018398  0x00003f1c arg  0x000046a8 , 0x00000011 
+ 00018399  0x00003f1d call  0x000066b3 
+ 00018400  0x00003f1f fetch  0x00000001 , 0x000046a8 
+ 00018401  0x00003f20 rtn  0x00000034 
+ 00018402  0x00003f22 fetch  0x00000002 , 0x000046a2 
+ 00018403  0x00003f23 pincrease  0x00000001 
+ 00018404  0x00003f24 arg  0x00000ac2 , 0x00000011 
+ 00018405  0x00003f25 fetcht  0x00000001 , 0x000046a8 
+ 00018406  0x00003f26 call  0x000066b3 
+ 00018407  0x00003f27 call  0x0000666d 
+ 00018408  0x00003f29 call  0x000047ba 
+ 00018409  0x00003f2b ifetch  0x00000002 , 0x00000006 
+ 00018410  0x00003f2c rtn  0x00000034 
+ 00018411  0x00003f2d copy  0x0000003f , 0x00000005 
+ 00018412  0x00003f2e ifetcht  0x00000001 , 0x00000006 
+ 00018413  0x00003f2f copy  0x00000002 , 0x00000039 
+ 00018414  0x00003f30 call  0x00007f01 
+ 00018415  0x00003f31 branch  0x000047e9 
+ 00018416  0x00003f36 fetch  0x00000001 , 0x0000469a 
+ 00018417  0x00003f37 rtnbit0  0x00000001 
+ 00018418  0x00003f38 fetch  0x00000002 , 0x000046ae 
+ 00018419  0x00003f39 copy  0x0000003f , 0x00000012 
+ 00018420  0x00003f3a arg  0x00000004 , 0x00000002 
+ 00018421  0x00003f3b arg  0x00000ac2 , 0x00000011 
+ 00018422  0x00003f3c call  0x000065df 
+ 00018423  0x00003f3d fetch  0x00000001 , 0x00000ac2 
+ 00018424  0x00003f3e bne  0x00000001 , 0x000047f9 
+ 00018425  0x00003f40 setarg  0x00000001 
+ 00018426  0x00003f41 store  0x00000001 , 0x00000ac2 
+ 00018427  0x00003f42 force  0x00000003 , 0x00000039 
+ 00018428  0x00003f43 call  0x0000630d 
+ 00018429  0x00003f44 fetch  0x00000002 , 0x000046ae 
+ 00018430  0x00003f45 copy  0x0000003f , 0x00000012 
+ 00018431  0x00003f46 arg  0x00000004 , 0x00000002 
+ 00018432  0x00003f47 arg  0x00000ac2 , 0x00000011 
+ 00018433  0x00003f48 call  0x00006606 
+ 00018434  0x00003f4a fetch  0x00000003 , 0x00000ac3 
+ 00018435  0x00003f4b store  0x00000003 , 0x000040a0 
+ 00018436  0x00003f4c store  0x00000003 , 0x000044a0 
+ 00018437  0x00003f4d rtn 
+ 00018438  0x00003f51 branch  0x000046d9 
+ 00018439  0x00003f55 arg  0x00000000 , 0x00000011 
+ 00018440  0x00003f56 arg  0x000048d4 , 0x00000013 
+ 00018441  0x00003f57 call  0x00007d24 
+ 00018442  0x00003f58 call  0x000046f4 
+ 00018443  0x00003f5a fetch  0x00000001 , 0x000048eb 
+ 00018444  0x00003f5b store  0x00000001 , 0x000048ec 
+ 00018445  0x00003f5c rtn 
+ 00018446  0x00003f61 setarg  0x00000000 
+ 00018447  0x00003f62 call  0x00004816 
+ 00018448  0x00003f63 jam  0x00000001 , 0x00004679 
+ 00018449  0x00003f64 call  0x00007cd3 
+ 00018450  0x00003f65 call  0x00007cdd 
+ 00018451  0x00003f66 fetch  0x00000002 , 0x00004682 
+ 00018452  0x00003f67 rtnbit1  0x0000000c 
+ 00018453  0x00003f68 branch  0x0000340a 
+ 00018454  0x00003f6b fetcht  0x00000002 , 0x0000423f 
+ 00018455  0x00003f6c istore  0x00000001 , 0x00000002 
+ 00018456  0x00003f6d ifetch  0x00000001 , 0x00000005 
+ 00018457  0x00003f6e store  0x00000001 , 0x00004685 
+ 00018458  0x00003f6f rtn 
+ 00018459  0x00003f73 fetch  0x00000002 , 0x0000423f 
+ 00018460  0x00003f74 ifetch  0x00000001 , 0x0000003f 
+ 00018461  0x00003f75 rtnne  0x00000000 
+ 00018462  0x00003f76 branch  0x0000340a 
+ 00018463  0x00003f7a fetcht  0x00000002 , 0x0000423f 
+ 00018464  0x00003f7b ifetch  0x00000001 , 0x00000002 
+ 00018465  0x00003f7c beq  0x00000001 , 0x0000482a 
+ 00018466  0x00003f7e setarg  0x00000001 
+ 00018467  0x00003f7f fetcht  0x00000002 , 0x0000423f 
+ 00018468  0x00003f80 istore  0x00000001 , 0x00000002 
+ 00018469  0x00003f81 add  0x00000002 , 0x00000002 , 0x00000006 
+ 00018470  0x00003f82 ifetch  0x00000001 , 0x00000006 
+ 00018471  0x00003f83 istore  0x00000001 , 0x00004685 
+ 00018472  0x00003f84 ifetch  0x00000002 , 0x00000006 
+ 00018473  0x00003f85 branch  0x00007f9c 
+ 00018474  0x00003f88 setarg  0x00000002 
+ 00018475  0x00003f89 call  0x00004816 
+ 00018476  0x00003f8a add  0x00000002 , 0x00000005 , 0x00000006 
+ 00018477  0x00003f8b ifetch  0x00000002 , 0x00000006 
+ 00018478  0x00003f8c branch  0x0000340a , 0x00000034 
+ 00018479  0x00003f8d branch  0x00007f9c 
+ 00018480  0x00003f94 store  0x00000006 , 0x00000101 
+ 00018481  0x00003f95 fetch  0x00000001 , 0x00000101 
+ 00018482  0x00003f96 store  0x00000001 , 0x0000010c 
+ 00018483  0x00003f97 ifetch  0x00000001 , 0x00000006 
+ 00018484  0x00003f98 store  0x00000001 , 0x0000010b 
+ 00018485  0x00003f99 ifetch  0x00000001 , 0x00000006 
+ 00018486  0x00003f9a store  0x00000001 , 0x0000010a 
+ 00018487  0x00003f9b ifetch  0x00000001 , 0x00000006 
+ 00018488  0x00003f9c store  0x00000001 , 0x00000109 
+ 00018489  0x00003f9d ifetch  0x00000001 , 0x00000006 
+ 00018490  0x00003f9e store  0x00000001 , 0x00000108 
+ 00018491  0x00003f9f ifetch  0x00000001 , 0x00000006 
+ 00018492  0x00003fa0 store  0x00000001 , 0x00000107 
+ 00018493  0x00003fa1 fetch  0x00000006 , 0x00000107 
+ 00018494  0x00003fa2 rtn 
+ 00018495  0x00003fa5 call  0x000068a2 
+ 00018496  0x00003fa6 fetch  0x00000001 , 0x00004223 
+ 00018497  0x00003fa7 store  0x00000001 , 0x000044a0 
+ 00018498  0x00003fa8 fetch  0x00000001 , 0x00004225 
+ 00018499  0x00003fa9 istore  0x00000001 , 0x00000005 
+ 00018500  0x00003faa fetch  0x00000001 , 0x00004227 
+ 00018501  0x00003fab istore  0x00000001 , 0x00000005 
+ 00018502  0x00003fac fetch  0x00000003 , 0x000044a0 
+ 00018503  0x00003fad store  0x00000003 , 0x000040a0 
+ 00018504  0x00003fae rtn 
+ 00018505  0x00003fbb fetch  0x00000002 , 0x00004203 
+ 00018506  0x00003fbc iadd  0x00000012 , 0x0000003f 
+ 00018507  0x00003fbd byteswap  0x0000003f , 0x0000003f 
+ 00018508  0x00003fbe store  0x00000002 , 0x000001f7 
+ 00018509  0x00003fbf copy  0x00000002 , 0x00000012 
+ 00018510  0x00003fc1 call  0x0000489b 
+ 00018511  0x00003fc2 setarg  0x000000a0 
+ 00018512  0x00003fc3 call  0x0000488d 
+ 00018513  0x00003fc4 fetch  0x00000001 , 0x000001f7 
+ 00018514  0x00003fc5 call  0x0000488d 
+ 00018515  0x00003fc6 bmark1  0x00000028 , 0x00004856 
+ 00018516  0x00003fc7 fetch  0x00000001 , 0x000001f8 
+ 00018517  0x00003fc8 call  0x0000488d 
+ 00018518  0x00003fca call  0x000048a1 
+ 00018519  0x00003fcc call  0x0000489b 
+ 00018520  0x00003fcd setarg  0x000000a1 
+ 00018521  0x00003fce call  0x0000488d 
+ 00018522  0x00003fd1 call  0x0000487f 
+ 00018523  0x00003fd2 istore  0x00000001 , 0x00000011 
+ 00018524  0x00003fd3 increase  0x00000001 , 0x00000011 
+ 00018525  0x00003fd4 increase  0xffffffff , 0x00000012 
+ 00018526  0x00003fd5 nbranch  0x0000485a , 0x00000005 
+ 00018527  0x00003fd6 branch  0x000048a1 
+ 00018528  0x00003fe2 byteswap  0x00000012 , 0x0000003f 
+ 00018529  0x00003fe3 store  0x00000002 , 0x000001f7 
+ 00018530  0x00003fe4 copy  0x00000002 , 0x00000012 
+ 00018531  0x00003fe6 call  0x0000489b 
+ 00018532  0x00003fe7 setarg  0x000000a0 
+ 00018533  0x00003fe8 call  0x0000488d 
+ 00018534  0x00003fea fetch  0x00000001 , 0x000001f7 
+ 00018535  0x00003feb call  0x0000488d 
+ 00018536  0x00003fec bmark1  0x00000028 , 0x0000486b 
+ 00018537  0x00003fed fetch  0x00000001 , 0x000001f8 
+ 00018538  0x00003fee call  0x0000488d 
+ 00018539  0x00003ff0 ifetch  0x00000001 , 0x00000011 
+ 00018540  0x00003ff1 call  0x0000488d 
+ 00018541  0x00003ff2 increase  0x00000001 , 0x00000011 
+ 00018542  0x00003ff3 increase  0xffffffff , 0x00000012 
+ 00018543  0x00003ff4 nbranch  0x0000486b , 0x00000005 
+ 00018544  0x00003ff5 branch  0x000048a1 
+ 00018545  0x00003ffa arg  0x0000000a , 0x00000039 
+ 00018546  0x00003ffb call  0x000048be 
+ 00018547  0x00003ffc call  0x000048a6 
+ 00018548  0x00003ffd call  0x000048d2 
+ 00018549  0x00003fff call  0x000048c7 
+ 00018550  0x00004000 branch  0x000048a9 , 0x00000034 
+ 00018551  0x00004001 loop  0x00004875 
+ 00018552  0x00004002 branch  0x000048a9 
+ 00018553  0x00004007 call  0x000048a9 
+ 00018554  0x00004008 call  0x000048af 
+ 00018555  0x00004009 call  0x000048d2 
+ 00018556  0x0000400a call  0x000048a6 
+ 00018557  0x0000400b call  0x000048d2 
+ 00018558  0x0000400c branch  0x000048a9 
+ 00018559  0x00004012 arg  0x00000008 , 0x00000039 
+ 00018560  0x00004013 arg  0x00000000 , 0x00000013 
+ 00018561  0x00004014 call  0x000048be 
+ 00018562  0x00004016 call  0x000048a6 
+ 00018563  0x00004017 call  0x000048d2 
+ 00018564  0x00004018 lshift  0x00000013 , 0x00000013 
+ 00018565  0x00004019 call  0x000048c7 
+ 00018566  0x0000401a iadd  0x00000013 , 0x00000013 
+ 00018567  0x0000401b call  0x000048d2 
+ 00018568  0x0000401c call  0x000048a9 
+ 00018569  0x0000401d loop  0x00004882 
+ 00018570  0x0000401e call  0x00004879 
+ 00018571  0x0000401f copy  0x00000013 , 0x0000003f 
+ 00018572  0x00004020 rtn 
+ 00018573  0x00004025 arg  0x00000008 , 0x00000039 
+ 00018574  0x00004026 copy  0x0000003f , 0x00000013 
+ 00018575  0x00004027 call  0x000048a9 
+ 00018576  0x00004029 isolate1  0x00000007 , 0x00000013 
+ 00018577  0x0000402a call  0x000048ac , 0x00000001 
+ 00018578  0x0000402b ncall  0x000048af , 0x00000001 
+ 00018579  0x0000402c lshift  0x00000013 , 0x00000013 
+ 00018580  0x0000402d call  0x000048d2 
+ 00018581  0x0000402e call  0x000048a6 
+ 00018582  0x0000402f call  0x000048d2 
+ 00018583  0x00004030 call  0x000048a9 
+ 00018584  0x00004031 call  0x000048d2 
+ 00018585  0x00004032 loop  0x00004890 
+ 00018586  0x00004033 branch  0x00004871 
+ 00018587  0x00004038 call  0x000048ac 
+ 00018588  0x00004039 call  0x000048a6 
+ 00018589  0x0000403a call  0x000048d2 
+ 00018590  0x0000403b call  0x000048af 
+ 00018591  0x0000403c call  0x000048d2 
+ 00018592  0x0000403d branch  0x000048a9 
+ 00018593  0x00004042 call  0x000048af 
+ 00018594  0x00004043 call  0x000048a6 
+ 00018595  0x00004044 call  0x000048d2 
+ 00018596  0x00004045 call  0x000048ac 
+ 00018597  0x00004046 branch  0x000048d2 
+ 00018598  0x0000404b enable  0x00000028 
+ 00018599  0x0000404c fetch  0x00000001 , 0x00004ffe 
+ 00018600  0x0000404d branch  0x000048b2 
+ 00018601  0x00004051 disable  0x00000028 
+ 00018602  0x00004052 fetch  0x00000001 , 0x00004ffe 
+ 00018603  0x00004053 branch  0x000048b2 
+ 00018604  0x00004057 enable  0x00000028 
+ 00018605  0x00004058 fetch  0x00000001 , 0x00004fff 
+ 00018606  0x00004059 branch  0x000048b2 
+ 00018607  0x0000405d disable  0x00000028 
+ 00018608  0x0000405e fetch  0x00000001 , 0x00004fff 
+ 00018609  0x0000405f branch  0x000048b2 
+ 00018610  0x00004065 and  0x0000003f , 0x00000007 , 0x00000007 
+ 00018611  0x00004066 rshift3  0x0000003f , 0x0000003f 
+ 00018612  0x00004067 arg  0x00008070 , 0x00000002 
+ 00018613  0x00004068 iadd  0x00000002 , 0x00000002 
+ 00018614  0x00004069 ifetch  0x00000001 , 0x00000002 
+ 00018615  0x0000406a qset1  0x0000003f 
+ 00018616  0x0000406b istore  0x00000001 , 0x00000002 
+ 00018617  0x0000406c increase  0x00000004 , 0x00000002 
+ 00018618  0x0000406d ifetch  0x00000001 , 0x00000002 
+ 00018619  0x0000406e qsetflag  0x00000028 , 0x0000003f 
+ 00018620  0x0000406f istore  0x00000001 , 0x00000002 
+ 00018621  0x00004070 rtn 
+ 00018622  0x00004074 fetch  0x00000001 , 0x00004fff 
+ 00018623  0x00004075 and  0x0000003f , 0x00000007 , 0x00000007 
+ 00018624  0x00004076 rshift3  0x0000003f , 0x0000003f 
+ 00018625  0x00004077 arg  0x00008070 , 0x00000002 
+ 00018626  0x00004078 iadd  0x00000002 , 0x00000002 
+ 00018627  0x00004079 ifetch  0x00000001 , 0x00000002 
+ 00018628  0x0000407a qset0  0x0000003f 
+ 00018629  0x0000407b istore  0x00000001 , 0x00000002 
+ 00018630  0x0000407c rtn 
+ 00018631  0x00004082 nop  0x00000004 
+ 00018632  0x00004083 fetch  0x00000001 , 0x00004fff 
+ 00018633  0x00004084 and  0x0000003f , 0x00000007 , 0x00000007 
+ 00018634  0x00004085 rshift3  0x0000003f , 0x0000003f 
+ 00018635  0x00004086 arg  0x0000811c , 0x00000002 
+ 00018636  0x00004087 iadd  0x00000002 , 0x00000002 
+ 00018637  0x00004088 setarg  0x00000000 
+ 00018638  0x00004089 ifetcht  0x00000001 , 0x00000002 
+ 00018639  0x0000408a qisolate1  0x00000002 
+ 00018640  0x0000408b setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00018641  0x0000408c rtn 
+ 00018642  0x00004091 rtn 
+ 00018643  0x00004098 bpatch  0x000000f6 , 0x0000401e 
+ 00018644  0x00004099 hfetch  0x00000001 , 0x00008a26 
+ 00018645  0x0000409a isolate1  0x00000007 , 0x0000003f 
+ 00018646  0x0000409b call  0x000048ea , 0x00000001 
+ 00018647  0x0000409c call  0x0000492e 
+ 00018648  0x0000409d hfetch  0x00000001 , 0x00008a26 
+ 00018649  0x0000409e store  0x00000001 , 0x00000b22 
+ 00018650  0x0000409f hfetch  0x00000001 , 0x00008a27 
+ 00018651  0x000040a0 store  0x00000001 , 0x00000b23 
+ 00018652  0x000040a1 hstore  0x00000001 , 0x00008a27 
+ 00018653  0x000040a2 pinvert 
+ 00018654  0x000040a3 fetcht  0x00000001 , 0x00000d37 
+ 00018655  0x000040a4 iand  0x00000002 , 0x0000003f 
+ 00018656  0x000040a5 store  0x00000001 , 0x00000d37 
+ 00018657  0x000040a6 jam  0x000000e0 , 0x00008a26 
+ 00018658  0x000040a7 fetch  0x00000001 , 0x00000b23 
+ 00018659  0x000040a8 compare  0x00000001 , 0x0000003f , 0x00000001 
+ 00018660  0x000040a9 call  0x00004941 , 0x00000001 
+ 00018661  0x000040aa fetch  0x00000001 , 0x00000b22 
+ 00018662  0x000040ab compare  0x00000001 , 0x0000003f , 0x00000001 
+ 00018663  0x000040ac call  0x0000494a , 0x00000001 
+ 00018664  0x000040ad call  0x00004b61 
+ 00018665  0x000040ae branch  0x00004903 
+ 00018666  0x000040b1 bpatch  0x000000f7 , 0x0000401e 
+ 00018667  0x000040b2 call  0x00004919 
+ 00018668  0x000040b3 jam  0x00000000 , 0x00008a00 
+ 00018669  0x000040b4 nop  0x00002710 
+ 00018670  0x000040b5 jam  0x000000c0 , 0x00008a10 
+ 00018671  0x000040b6 hfetch  0x00000002 , 0x00008050 
+ 00018672  0x000040b7 set0  0x0000000a , 0x0000003f 
+ 00018673  0x000040b8 hstore  0x00000002 , 0x00008050 
+ 00018674  0x000040b9 jam  0x0000003c , 0x00008a00 
+ 00018675  0x000040ba jam  0x000000ff , 0x00008a26 
+ 00018676  0x000040bb jam  0x000000ff , 0x00008a27 
+ 00018677  0x000040bc jam  0x00000000 , 0x00008a04 
+ 00018678  0x000040bd jam  0x00000002 , 0x00000c6b 
+ 00018679  0x000040be setarg  0x00000d9d 
+ 00018680  0x000040bf arg  0x00000c6e , 0x00000005 
+ 00018681  0x000040c0 isub  0x00000005 , 0x00000039 
+ 00018682  0x000040c1 branch  0x00007ed4 
+ 00018683  0x000040c4 fetcht  0x00000001 , 0x00000c6c 
+ 00018684  0x000040c5 branch  0x000067fb 
+ 00018685  0x000040c7 fetch  0x00000001 , 0x00000d45 
+ 00018686  0x000040c8 rtn  0x00000034 
+ 00018687  0x000040c9 fetcht  0x00000001 , 0x00000c6c 
+ 00018688  0x000040ca call  0x0000681d 
+ 00018689  0x000040cb branch  0x000048ea , 0x00000001 
+ 00018690  0x000040cc rtn 
+ 00018691  0x000040d0 arg  0x00000000 , 0x00000007 
+ 00018692  0x000040d1 call  0x00007f16 
+ 00018693  0x000040d2 nrtn  0x00000034 
+ 00018694  0x000040d3 fetch  0x00000001 , 0x00000d46 
+ 00018695  0x000040d4 nrtn  0x00000034 
+ 00018696  0x000040d5 fetch  0x00000001 , 0x00000d45 
+ 00018697  0x000040d6 ncall  0x00004bb7 , 0x00000034 
+ 00018698  0x000040d7 rtn 
+ 00018699  0x000040da arg  0x00000b68 , 0x00000005 
+ 00018700  0x000040db setsect  0x00000000 , 0x00011212 
+ 00018701  0x000040dc setsect  0x00000001 , 0x00008000 
+ 00018702  0x000040dd setsect  0x00000002 , 0x00000000 
+ 00018703  0x000040de setsect  0x00000003 , 0x00010000 
+ 00018704  0x000040df istore  0x00000009 , 0x00000005 
+ 00018705  0x000040e0 setsect  0x00000000 , 0x00022412 
+ 00018706  0x000040e1 setsect  0x00000001 , 0x00008604 
+ 00018707  0x000040e2 setsect  0x00000002 , 0x00001000 
+ 00018708  0x000040e3 setsect  0x00000003 , 0x00000008 
+ 00018709  0x000040e4 istore  0x00000009 , 0x00000005 
+ 00018710  0x000040e5 setsect  0x00000000 , 0x00000001 
+ 00018711  0x000040e6 istore  0x00000001 , 0x00000005 
+ 00018712  0x000040e7 rtn 
+ 00018713  0x000040ea jam  0x00000002 , 0x00000c6b 
+ 00018714  0x000040eb setarg  0x00000000 
+ 00018715  0x000040ec store  0x00000001 , 0x00000b67 
+ 00018716  0x000040ed store  0x00000002 , 0x00000c65 
+ 00018717  0x000040ee pincrease  0x00000001 
+ 00018718  0x000040ef store  0x00000002 , 0x00000c67 
+ 00018719  0x000040f0 pincrease  0x00000001 
+ 00018720  0x000040f1 store  0x00000002 , 0x00000c69 
+ 00018721  0x000040f2 setarg  0x00008ffa 
+ 00018722  0x000040f3 store  0x00000002 , 0x00000b7c 
+ 00018723  0x000040f4 setarg  0x0000903a 
+ 00018724  0x000040f5 store  0x00000002 , 0x00000b7e 
+ 00018725  0x000040f6 arg  0x00000b80 , 0x00000005 
+ 00018726  0x000040f7 arg  0x000090fe , 0x00000006 
+ 00018727  0x000040f8 call  0x00007eb3 
+ 00018728  0x000040f9 fetch  0x00000001 , 0x00000c6d 
+ 00018729  0x000040fa ncall  0x0000492b , 0x00000034 
+ 00018730  0x000040fb branch  0x0000490b 
+ 00018731  0x000040fe store  0x00000001 , 0x00000ba2 
+ 00018732  0x000040ff store  0x00000001 , 0x00000bbb 
+ 00018733  0x00004100 rtn 
+ 00018734  0x00004102 hfetch  0x00000001 , 0x00008a26 
+ 00018735  0x00004103 bbit1  0x00000006 , 0x00004931 
+ 00018736  0x00004104 rtn 
+ 00018737  0x00004107 call  0x00004936 
+ 00018738  0x00004108 call  0x00007f15 
+ 00018739  0x00004109 setarg  0x00000280 
+ 00018740  0x0000410a arg  0x00000000 , 0x00000007 
+ 00018741  0x0000410b branch  0x00007f08 
+ 00018742  0x0000410e fetch  0x00000001 , 0x00000d36 
+ 00018743  0x0000410f bne  0x00000002 , 0x0000493b 
+ 00018744  0x00004110 jam  0x00000000 , 0x00000d46 
+ 00018745  0x00004111 jam  0x00000000 , 0x00000d47 
+ 00018746  0x00004112 rtn 
+ 00018747  0x00004114 fetch  0x00000001 , 0x00000d53 
+ 00018748  0x00004115 rtn  0x00000034 
+ 00018749  0x00004116 jam  0x00000000 , 0x00000d53 
+ 00018750  0x00004117 jam  0x00000002 , 0x00000d36 
+ 00018751  0x00004118 jam  0x00000001 , 0x00000d45 
+ 00018752  0x00004119 rtn 
+ 00018753  0x0000411c jam  0x00000001 , 0x00008a27 
+ 00018754  0x0000411d branch  0x00004b37 
+ 00018755  0x00004120 fetch  0x00000001 , 0x00000b22 
+ 00018756  0x00004121 bbit1  0x00000004 , 0x00004955 
+ 00018757  0x00004122 rtn 
+ 00018758  0x00004125 hfetch  0x00000001 , 0x00008a18 
+ 00018759  0x00004126 istore  0x00000001 , 0x00000005 
+ 00018760  0x00004127 loop  0x00004946 
+ 00018761  0x00004128 rtn 
+ 00018762  0x0000412b bpatch  0x000000f8 , 0x0000401f 
+ 00018763  0x0000412c jam  0x00000011 , 0x00008a26 
+ 00018764  0x0000412d hfetch  0x00000001 , 0x00008a20 
+ 00018765  0x0000412e store  0x00000001 , 0x00000b24 
+ 00018766  0x0000412f copy  0x0000003f , 0x00000039 
+ 00018767  0x00004130 branch  0x00004943 , 0x00000034 
+ 00018768  0x00004131 arg  0x00000c6e , 0x00000005 
+ 00018769  0x00004132 call  0x00004946 
+ 00018770  0x00004133 fetch  0x00000001 , 0x00000b24 
+ 00018771  0x00004134 sub  0x0000003f , 0x00000007 , 0x0000003e 
+ 00018772  0x00004135 rtn  0x00000002 
+ 00018773  0x00004137 fetch  0x00000001 , 0x00000c6e 
+ 00018774  0x00004138 and_into  0x00000080 , 0x0000003f 
+ 00018775  0x00004139 beq  0x00000080 , 0x0000495a 
+ 00018776  0x0000413a beq  0x00000000 , 0x00004962 
+ 00018777  0x0000413b branch  0x00002a8c 
+ 00018778  0x0000413e fetch  0x00000001 , 0x00000c6e 
+ 00018779  0x0000413f rshift4  0x0000003f , 0x0000003f 
+ 00018780  0x00004140 rshift  0x0000003f , 0x0000003f 
+ 00018781  0x00004141 and_into  0x00000003 , 0x0000003f 
+ 00018782  0x00004142 beq  0x00000000 , 0x0000496a 
+ 00018783  0x00004143 beq  0x00000001 , 0x00004970 
+ 00018784  0x00004144 beq  0x00000002 , 0x00004975 
+ 00018785  0x00004145 branch  0x00002a8c 
+ 00018786  0x00004148 fetch  0x00000001 , 0x00000c6e 
+ 00018787  0x00004149 rshift4  0x0000003f , 0x0000003f 
+ 00018788  0x0000414a rshift  0x0000003f , 0x0000003f 
+ 00018789  0x0000414b and_into  0x00000003 , 0x0000003f 
+ 00018790  0x0000414c beq  0x00000000 , 0x00004976 
+ 00018791  0x0000414d beq  0x00000001 , 0x0000497e 
+ 00018792  0x0000414e beq  0x00000002 , 0x00004983 
+ 00018793  0x0000414f branch  0x00002a8c 
+ 00018794  0x00004152 fetch  0x00000001 , 0x00000c6f 
+ 00018795  0x00004153 beq  0x00000008 , 0x0000498a 
+ 00018796  0x00004154 beq  0x00000006 , 0x000049a0 
+ 00018797  0x00004155 beq  0x0000000a , 0x000049ea 
+ 00018798  0x00004156 beq  0x00000000 , 0x000049fc 
+ 00018799  0x00004157 branch  0x00004984 
+ 00018800  0x0000415a fetch  0x00000001 , 0x00000c6f 
+ 00018801  0x0000415b beq  0x00000002 , 0x00004a2f 
+ 00018802  0x0000415c beq  0x00000001 , 0x00004a33 
+ 00018803  0x0000415d beq  0x00000003 , 0x00004a45 
+ 00018804  0x0000415e branch  0x00004984 
+ 00018805  0x00004161 branch  0x00004984 
+ 00018806  0x00004164 fetch  0x00000001 , 0x00000c6f 
+ 00018807  0x00004165 beq  0x00000001 , 0x00004a4f 
+ 00018808  0x00004166 beq  0x00000003 , 0x00004a79 
+ 00018809  0x00004167 beq  0x00000005 , 0x00004aa3 
+ 00018810  0x00004168 beq  0x00000009 , 0x00004abc 
+ 00018811  0x00004169 beq  0x0000000b , 0x00004ad7 
+ 00018812  0x0000416a beq  0x00000007 , 0x00004984 
+ 00018813  0x0000416b branch  0x00004984 
+ 00018814  0x0000416e fetch  0x00000001 , 0x00000c6f 
+ 00018815  0x0000416f beq  0x0000000a , 0x00004ae8 
+ 00018816  0x00004170 beq  0x00000009 , 0x00004af9 
+ 00018817  0x00004171 beq  0x0000000b , 0x00004b11 
+ 00018818  0x00004172 branch  0x00004984 
+ 00018819  0x00004175 branch  0x00004984 
+ 00018820  0x00004178 hfetch  0x00000001 , 0x00008a11 
+ 00018821  0x00004179 set1  0x00000000 , 0x0000003f 
+ 00018822  0x0000417a hstore  0x00000001 , 0x00008a11 
+ 00018823  0x0000417b branch  0x00004988 
+ 00018824  0x0000417e jam  0x00000040 , 0x00008a12 
+ 00018825  0x0000417f rtn 
+ 00018826  0x00004182 fetch  0x00000001 , 0x00000c6e 
+ 00018827  0x00004183 bne  0x00000080 , 0x00004984 
+ 00018828  0x00004184 fetch  0x00000001 , 0x00000c72 
+ 00018829  0x00004185 bne  0x00000000 , 0x00004984 
+ 00018830  0x00004186 fetch  0x00000001 , 0x00000c73 
+ 00018831  0x00004187 bne  0x00000000 , 0x00004984 
+ 00018832  0x00004188 fetch  0x00000001 , 0x00000c74 
+ 00018833  0x00004189 bne  0x00000001 , 0x00004984 
+ 00018834  0x0000418a fetch  0x00000001 , 0x00000c75 
+ 00018835  0x0000418b bne  0x00000000 , 0x00004984 
+ 00018836  0x0000418c fetch  0x00000001 , 0x00000c70 
+ 00018837  0x0000418d bne  0x00000000 , 0x00004984 
+ 00018838  0x0000418e fetch  0x00000001 , 0x00000c71 
+ 00018839  0x0000418f bne  0x00000000 , 0x00004984 
+ 00018840  0x00004190 fetch  0x00000001 , 0x00000c6b 
+ 00018841  0x00004191 beq  0x00000004 , 0x0000499c 
+ 00018842  0x00004192 beq  0x00000003 , 0x0000499e 
+ 00018843  0x00004193 branch  0x00004984 
+ 00018844  0x00004196 arg  0x00000001 , 0x00000012 
+ 00018845  0x00004197 branch  0x00004a14 
+ 00018846  0x0000419a arg  0x00000001 , 0x00000012 
+ 00018847  0x0000419b branch  0x00004a12 
+ 00018848  0x0000419e bpatch  0x000000f9 , 0x0000401f 
+ 00018849  0x0000419f set0  0x00000023 , 0x00000000 
+ 00018850  0x000041a0 fetch  0x00000001 , 0x00000c71 
+ 00018851  0x000041a1 beq  0x00000001 , 0x000049b6 
+ 00018852  0x000041a2 beq  0x00000002 , 0x000049cf 
+ 00018853  0x000041a3 beq  0x00000003 , 0x000049d2 
+ 00018854  0x000041a4 beq  0x00000021 , 0x000049a9 
+ 00018855  0x000041a5 beq  0x00000022 , 0x000049e0 
+ 00018856  0x000041a6 branch  0x00004984 
+ 00018857  0x000041a9 jam  0x00000000 , 0x00000d4b 
+ 00018858  0x000041aa fetch  0x00000001 , 0x00000c72 
+ 00018859  0x000041ab beq  0x00000000 , 0x000049ae 
+ 00018860  0x000041ac beq  0x00000001 , 0x000049b2 
+ 00018861  0x000041ad branch  0x00004984 
+ 00018862  0x000041b0 arg  0x00000b93 , 0x00000011 
+ 00018863  0x000041b1 ifetch  0x00000001 , 0x00000011 
+ 00018864  0x000041b2 iforce  0x00000012 
+ 00018865  0x000041b3 branch  0x00004b21 
+ 00018866  0x000041b6 arg  0x00000bac , 0x00000011 
+ 00018867  0x000041b7 ifetch  0x00000001 , 0x00000011 
+ 00018868  0x000041b8 iforce  0x00000012 
+ 00018869  0x000041b9 branch  0x00004b21 
+ 00018870  0x000041bf fetch  0x00000001 , 0x00000d48 
+ 00018871  0x000041c0 ncall  0x000049c7 , 0x00000034 
+ 00018872  0x000041c1 setarg  0x00000b68 
+ 00018873  0x000041c2 fetcht  0x00000001 , 0x00000b68 
+ 00018874  0x000041c4 store  0x00000002 , 0x00000d3f 
+ 00018875  0x000041c5 storet  0x00000001 , 0x00000d41 
+ 00018876  0x000041c6 fetch  0x00000001 , 0x00000c74 
+ 00018877  0x000041c7 isub  0x00000002 , 0x0000003e 
+ 00018878  0x000041c8 nbranch  0x000049c5 , 0x00000002 
+ 00018879  0x000041ca fetch  0x00000001 , 0x00000d41 
+ 00018880  0x000041cc iforce  0x00000012 
+ 00018881  0x000041cd fetch  0x00000002 , 0x00000d3f 
+ 00018882  0x000041ce add  0x0000003f , 0x00000001 , 0x0000003f 
+ 00018883  0x000041cf iforce  0x00000011 
+ 00018884  0x000041d0 branch  0x00004b21 
+ 00018885  0x000041d2 fetch  0x00000001 , 0x00000c74 
+ 00018886  0x000041d3 branch  0x000049c0 
+ 00018887  0x000041d6 hfetch  0x00000001 , 0x00008a04 
+ 00018888  0x000041d7 ncall  0x000049cb , 0x00000034 
+ 00018889  0x000041d8 jam  0x00000000 , 0x00000d48 
+ 00018890  0x000041d9 rtn 
+ 00018891  0x000041db hfetch  0x00000001 , 0x00008a04 
+ 00018892  0x000041dc set1  0x00000007 , 0x0000003f 
+ 00018893  0x000041dd hstore  0x00000001 , 0x00008a04 
+ 00018894  0x000041de rtn 
+ 00018895  0x000041e1 setarg  0x00000b80 
+ 00018896  0x000041e2 fetcht  0x00000001 , 0x00000b80 
+ 00018897  0x000041e3 branch  0x000049ba 
+ 00018898  0x000041e6 fetch  0x00000001 , 0x00000c70 
+ 00018899  0x000041e7 sub  0x0000003f , 0x00000003 , 0x0000003e 
+ 00018900  0x000041e8 nbranch  0x00004984 , 0x00000002 
+ 00018901  0x000041e9 fetch  0x00000001 , 0x00000c70 
+ 00018902  0x000041ea arg  0x00000be4 , 0x00000011 
+ 00018903  0x000041eb beq  0x00000000 , 0x00004b1e 
+ 00018904  0x000041ec set1  0x00000023 , 0x00000000 
+ 00018905  0x000041ed arg  0x00000be9 , 0x00000011 
+ 00018906  0x000041ee beq  0x00000001 , 0x00004b1e 
+ 00018907  0x000041ef arg  0x00000c07 , 0x00000011 
+ 00018908  0x000041f0 beq  0x00000002 , 0x00004b1e 
+ 00018909  0x000041f1 arg  0x00000c47 , 0x00000011 
+ 00018910  0x000041f2 beq  0x00000003 , 0x00004b1e 
+ 00018911  0x000041f3 rtn 
+ 00018912  0x000041f6 fetch  0x00000002 , 0x00000c72 
+ 00018913  0x000041f7 beq  0x00000001 , 0x000049e5 
+ 00018914  0x000041f8 fetch  0x00000002 , 0x00000b7c 
+ 00018915  0x000041f9 copy  0x0000003f , 0x00000011 
+ 00018916  0x000041fb branch  0x00004b1e 
+ 00018917  0x000041fd jam  0x00000001 , 0x00000d45 
+ 00018918  0x000041fe jam  0x00000001 , 0x00000d36 
+ 00018919  0x000041ff fetch  0x00000002 , 0x00000b7e 
+ 00018920  0x00004200 copy  0x0000003f , 0x00000011 
+ 00018921  0x00004202 branch  0x00004b1e 
+ 00018922  0x00004206 fetch  0x00000001 , 0x00000c6b 
+ 00018923  0x00004207 bne  0x00000004 , 0x00004984 
+ 00018924  0x00004208 fetch  0x00000001 , 0x00000c6e 
+ 00018925  0x00004209 bne  0x00000081 , 0x00004984 
+ 00018926  0x0000420a fetch  0x00000001 , 0x00000c70 
+ 00018927  0x0000420b bne  0x00000000 , 0x00004984 
+ 00018928  0x0000420c fetch  0x00000001 , 0x00000c71 
+ 00018929  0x0000420d bne  0x00000000 , 0x00004984 
+ 00018930  0x0000420e fetch  0x00000001 , 0x00000c74 
+ 00018931  0x0000420f bne  0x00000001 , 0x00004984 
+ 00018932  0x00004210 fetch  0x00000001 , 0x00000c75 
+ 00018933  0x00004211 bne  0x00000000 , 0x00004984 
+ 00018934  0x00004212 fetch  0x00000001 , 0x00000c72 
+ 00018935  0x00004213 bne  0x00000000 , 0x00004984 
+ 00018936  0x00004214 fetch  0x00000001 , 0x00000c73 
+ 00018937  0x00004215 bne  0x00000000 , 0x00004984 
+ 00018938  0x00004216 arg  0x00000001 , 0x00000012 
+ 00018939  0x00004217 branch  0x00004a12 
+ 00018940  0x0000421b fetch  0x00000001 , 0x00000c6b 
+ 00018941  0x0000421c beq  0x00000002 , 0x00004984 
+ 00018942  0x0000421d fetch  0x00000001 , 0x00000c70 
+ 00018943  0x0000421e bne  0x00000000 , 0x00004984 
+ 00018944  0x0000421f fetch  0x00000001 , 0x00000c71 
+ 00018945  0x00004220 bne  0x00000000 , 0x00004984 
+ 00018946  0x00004221 fetch  0x00000001 , 0x00000c74 
+ 00018947  0x00004222 bne  0x00000002 , 0x00004984 
+ 00018948  0x00004223 fetch  0x00000001 , 0x00000c75 
+ 00018949  0x00004224 bne  0x00000000 , 0x00004984 
+ 00018950  0x00004225 fetch  0x00000001 , 0x00000c73 
+ 00018951  0x00004226 bne  0x00000000 , 0x00004984 
+ 00018952  0x00004227 fetch  0x00000001 , 0x00000c6e 
+ 00018953  0x00004228 beq  0x00000080 , 0x00004a0d 
+ 00018954  0x00004229 beq  0x00000081 , 0x00004a18 
+ 00018955  0x0000422a beq  0x00000082 , 0x00004a1c 
+ 00018956  0x0000422b branch  0x00004984 
+ 00018957  0x0000422e fetch  0x00000001 , 0x00000c72 
+ 00018958  0x0000422f bne  0x00000000 , 0x00004984 
+ 00018959  0x00004230 arg  0x00000002 , 0x00000012 
+ 00018960  0x00004231 fetch  0x00000001 , 0x00000d39 
+ 00018961  0x00004232 beq  0x00000001 , 0x00004a16 
+ 00018962  0x00004235 arg  0x00000c65 , 0x00000011 
+ 00018963  0x00004236 branch  0x00004b21 
+ 00018964  0x00004238 arg  0x00000c67 , 0x00000011 
+ 00018965  0x00004239 branch  0x00004b21 
+ 00018966  0x0000423b arg  0x00000c69 , 0x00000011 
+ 00018967  0x0000423c branch  0x00004b21 
+ 00018968  0x0000423f fetch  0x00000001 , 0x00000c6b 
+ 00018969  0x00004240 bne  0x00000004 , 0x00004984 
+ 00018970  0x00004241 arg  0x00000002 , 0x00000012 
+ 00018971  0x00004242 branch  0x00004a12 
+ 00018972  0x00004245 fetch  0x00000001 , 0x00000c6b 
+ 00018973  0x00004246 bne  0x00000004 , 0x00004984 
+ 00018974  0x00004247 fetch  0x00000001 , 0x00000c72 
+ 00018975  0x00004248 beq  0x00000081 , 0x00004a29 
+ 00018976  0x00004249 beq  0x00000082 , 0x00004a2b 
+ 00018977  0x0000424a beq  0x00000083 , 0x00004a2d 
+ 00018978  0x0000424b and_into  0x0000007f , 0x0000003f 
+ 00018979  0x0000424c beq  0x00000000 , 0x00004a25 
+ 00018980  0x0000424d branch  0x00004984 
+ 00018981  0x00004250 fetch  0x00000001 , 0x00000d3b 
+ 00018982  0x00004252 arg  0x00000002 , 0x00000012 
+ 00018983  0x00004253 beq  0x00000001 , 0x00004a14 
+ 00018984  0x00004254 branch  0x00004a12 
+ 00018985  0x00004256 fetch  0x00000001 , 0x00000d3c 
+ 00018986  0x00004257 branch  0x00004a26 
+ 00018987  0x00004259 fetch  0x00000001 , 0x00000d3d 
+ 00018988  0x0000425a branch  0x00004a26 
+ 00018989  0x0000425c fetch  0x00000001 , 0x00000d3e 
+ 00018990  0x0000425d branch  0x00004a26 
+ 00018991  0x00004260 jam  0x00000001 , 0x00000d4c 
+ 00018992  0x00004261 arg  0x00000d4d , 0x00000011 
+ 00018993  0x00004262 arg  0x00000001 , 0x00000012 
+ 00018994  0x00004263 branch  0x00004b21 
+ 00018995  0x00004266 fetch  0x00000002 , 0x00000c70 
+ 00018996  0x00004267 arg  0x000001ba , 0x00000002 
+ 00018997  0x00004268 isub  0x00000002 , 0x0000003e 
+ 00018998  0x00004269 nbranch  0x00004984 , 0x00000005 
+ 00018999  0x0000426a set0  0x00000023 , 0x00000000 
+ 00019000  0x0000426c fetch  0x00000001 , 0x00000d42 
+ 00019001  0x0000426d nbranch  0x00004a42 , 0x00000034 
+ 00019002  0x0000426e jam  0x00000000 , 0x00000cf6 
+ 00019003  0x00004270 fetch  0x00000001 , 0x00000c74 
+ 00019004  0x00004271 iforce  0x00000012 
+ 00019005  0x00004272 arg  0x00000cf6 , 0x00000011 
+ 00019006  0x00004273 call  0x00004b21 
+ 00019007  0x00004275 arg  0x00000cf6 , 0x00000005 
+ 00019008  0x00004276 arg  0x00000008 , 0x00000039 
+ 00019009  0x00004277 branch  0x00007ec6 
+ 00019010  0x00004279 jam  0x00000000 , 0x00000d42 
+ 00019011  0x0000427a jam  0x00000001 , 0x00000cf6 
+ 00019012  0x0000427b branch  0x00004a3b 
+ 00019013  0x0000427e fetch  0x00000001 , 0x00000c74 
+ 00019014  0x0000427f bne  0x00000001 , 0x00004984 
+ 00019015  0x00004280 jam  0x00000001 , 0x00000d4b 
+ 00019016  0x00004281 arg  0x00000001 , 0x00000012 
+ 00019017  0x00004282 fetch  0x00000001 , 0x00000d49 
+ 00019018  0x00004283 beq  0x00000000 , 0x00004a4d 
+ 00019019  0x00004284 beq  0x00000001 , 0x00004a4e 
+ 00019020  0x00004285 branch  0x00004a12 
+ 00019021  0x00004287 branch  0x00004a14 
+ 00019022  0x00004289 branch  0x00004a12 
+ 00019023  0x0000428f fetch  0x00000001 , 0x00000c6b 
+ 00019024  0x00004290 bne  0x00000004 , 0x00004984 
+ 00019025  0x00004291 fetch  0x00000001 , 0x00000c74 
+ 00019026  0x00004292 bne  0x00000000 , 0x00004984 
+ 00019027  0x00004293 fetch  0x00000001 , 0x00000c75 
+ 00019028  0x00004294 bne  0x00000000 , 0x00004984 
+ 00019029  0x00004295 fetch  0x00000001 , 0x00000c71 
+ 00019030  0x00004296 bne  0x00000000 , 0x00004984 
+ 00019031  0x00004297 fetch  0x00000001 , 0x00000c73 
+ 00019032  0x00004298 bne  0x00000000 , 0x00004984 
+ 00019033  0x00004299 fetch  0x00000001 , 0x00000c6e 
+ 00019034  0x0000429a beq  0x00000000 , 0x00004a5e 
+ 00019035  0x0000429b beq  0x00000001 , 0x00004a66 
+ 00019036  0x0000429c beq  0x00000002 , 0x00004a67 
+ 00019037  0x0000429d branch  0x00004984 
+ 00019038  0x000042a0 fetch  0x00000001 , 0x00000c70 
+ 00019039  0x000042a1 bne  0x00000001 , 0x00004984 
+ 00019040  0x000042a2 hfetch  0x00000001 , 0x00008a00 
+ 00019041  0x000042a3 set0  0x00000007 , 0x0000003f 
+ 00019042  0x000042a4 hstore  0x00000001 , 0x00008a00 
+ 00019043  0x000042a5 jam  0x00000000 , 0x00000d39 
+ 00019044  0x000042a6 jam  0x00000001 , 0x00000d3a 
+ 00019045  0x000042a7 branch  0x00004988 
+ 00019046  0x000042aa branch  0x00004984 
+ 00019047  0x000042ad fetch  0x00000001 , 0x00000c70 
+ 00019048  0x000042ae bne  0x00000000 , 0x00004984 
+ 00019049  0x000042af fetch  0x00000001 , 0x00000c72 
+ 00019050  0x000042b0 beq  0x00000081 , 0x00004a72 
+ 00019051  0x000042b1 beq  0x00000082 , 0x00004a75 
+ 00019052  0x000042b2 beq  0x00000083 , 0x00004a77 
+ 00019053  0x000042b3 and_into  0x0000007f , 0x0000003f 
+ 00019054  0x000042b4 beq  0x00000000 , 0x00004a70 
+ 00019055  0x000042b5 branch  0x00004984 
+ 00019056  0x000042b8 jam  0x00000000 , 0x00000d3b 
+ 00019057  0x000042b9 branch  0x00004988 
+ 00019058  0x000042bb jam  0x00000000 , 0x00000d3c 
+ 00019059  0x000042bd jam  0x00000001 , 0x00000d53 
+ 00019060  0x000042be branch  0x00004988 
+ 00019061  0x000042c0 jam  0x00000000 , 0x00000d3d 
+ 00019062  0x000042c1 branch  0x00004a73 
+ 00019063  0x000042c3 jam  0x00000000 , 0x00000d3e 
+ 00019064  0x000042c4 branch  0x00004a73 
+ 00019065  0x000042c8 fetch  0x00000001 , 0x00000c74 
+ 00019066  0x000042c9 bne  0x00000000 , 0x00004984 
+ 00019067  0x000042ca fetch  0x00000001 , 0x00000c75 
+ 00019068  0x000042cb bne  0x00000000 , 0x00004984 
+ 00019069  0x000042cc fetch  0x00000001 , 0x00000c6e 
+ 00019070  0x000042cd beq  0x00000000 , 0x00004a82 
+ 00019071  0x000042ce beq  0x00000001 , 0x00004a8f 
+ 00019072  0x000042cf beq  0x00000002 , 0x00004a90 
+ 00019073  0x000042d0 branch  0x00004984 
+ 00019074  0x000042d3 fetch  0x00000001 , 0x00000c70 
+ 00019075  0x000042d4 bne  0x00000001 , 0x00004984 
+ 00019076  0x000042d5 hfetch  0x00000001 , 0x00008a00 
+ 00019077  0x000042d6 set1  0x00000007 , 0x0000003f 
+ 00019078  0x000042d7 hstore  0x00000001 , 0x00008a00 
+ 00019079  0x000042d8 jam  0x00000001 , 0x00000d39 
+ 00019080  0x000042d9 jam  0x00000003 , 0x00000d36 
+ 00019081  0x000042da jam  0x00000000 , 0x00000d43 
+ 00019082  0x000042db call  0x00004988 
+ 00019083  0x000042dd call  0x00007f15 
+ 00019084  0x000042de setarg  0x00001388 
+ 00019085  0x000042df arg  0x0000000f , 0x00000007 
+ 00019086  0x000042e0 branch  0x00007f08 
+ 00019087  0x000042e3 branch  0x00004984 
+ 00019088  0x000042e6 fetch  0x00000001 , 0x00000c70 
+ 00019089  0x000042e7 bne  0x00000000 , 0x00004984 
+ 00019090  0x000042e8 fetch  0x00000001 , 0x00000c71 
+ 00019091  0x000042e9 bne  0x00000000 , 0x00004984 
+ 00019092  0x000042ea fetch  0x00000001 , 0x00000c72 
+ 00019093  0x000042eb beq  0x00000081 , 0x00004a9d 
+ 00019094  0x000042ec beq  0x00000082 , 0x00004a9f 
+ 00019095  0x000042ed beq  0x00000083 , 0x00004aa1 
+ 00019096  0x000042ee and_into  0x0000007f , 0x0000003f 
+ 00019097  0x000042ef beq  0x00000000 , 0x00004a9b 
+ 00019098  0x000042f0 branch  0x00004984 
+ 00019099  0x000042f3 jam  0x00000001 , 0x00000d3b 
+ 00019100  0x000042f4 branch  0x00004988 
+ 00019101  0x000042f6 jam  0x00000001 , 0x00000d3c 
+ 00019102  0x000042f7 branch  0x00004988 
+ 00019103  0x000042f9 jam  0x00000001 , 0x00000d3d 
+ 00019104  0x000042fa branch  0x00004988 
+ 00019105  0x000042fc jam  0x00000001 , 0x00000d3e 
+ 00019106  0x000042fd branch  0x00004988 
+ 00019107  0x00004301 fetch  0x00000001 , 0x00000c6e 
+ 00019108  0x00004302 bne  0x00000000 , 0x00004984 
+ 00019109  0x00004303 fetch  0x00000001 , 0x00000c72 
+ 00019110  0x00004304 bne  0x00000000 , 0x00004984 
+ 00019111  0x00004305 fetch  0x00000001 , 0x00000c73 
+ 00019112  0x00004306 bne  0x00000000 , 0x00004984 
+ 00019113  0x00004307 fetch  0x00000001 , 0x00000c74 
+ 00019114  0x00004308 bne  0x00000000 , 0x00004984 
+ 00019115  0x00004309 fetch  0x00000001 , 0x00000c75 
+ 00019116  0x0000430a bne  0x00000000 , 0x00004984 
+ 00019117  0x0000430b fetch  0x00000001 , 0x00000c71 
+ 00019118  0x0000430c bne  0x00000000 , 0x00004984 
+ 00019119  0x0000430d fetch  0x00000001 , 0x00000c70 
+ 00019120  0x0000430e and_into  0x00000080 , 0x0000003f 
+ 00019121  0x0000430f bne  0x00000000 , 0x00004984 
+ 00019122  0x00004310 fetch  0x00000001 , 0x00000c70 
+ 00019123  0x00004311 bne  0x00000000 , 0x00004aba 
+ 00019124  0x00004313 jam  0x00000002 , 0x00000c6b 
+ 00019125  0x00004315 fetch  0x00000001 , 0x00000c70 
+ 00019126  0x00004316 hstore  0x00000001 , 0x00008a04 
+ 00019127  0x00004317 call  0x00004988 
+ 00019128  0x00004318 jam  0x00000001 , 0x00000d48 
+ 00019129  0x00004319 rtn 
+ 00019130  0x0000431b jam  0x00000003 , 0x00000c6b 
+ 00019131  0x0000431c branch  0x00004ab5 
+ 00019132  0x00004320 fetch  0x00000001 , 0x00000c6b 
+ 00019133  0x00004321 beq  0x00000002 , 0x00004984 
+ 00019134  0x00004322 fetch  0x00000001 , 0x00000c6e 
+ 00019135  0x00004323 bne  0x00000000 , 0x00004984 
+ 00019136  0x00004324 fetch  0x00000001 , 0x00000c72 
+ 00019137  0x00004325 bne  0x00000000 , 0x00004984 
+ 00019138  0x00004326 fetch  0x00000001 , 0x00000c73 
+ 00019139  0x00004327 bne  0x00000000 , 0x00004984 
+ 00019140  0x00004328 fetch  0x00000001 , 0x00000c74 
+ 00019141  0x00004329 bne  0x00000000 , 0x00004984 
+ 00019142  0x0000432a fetch  0x00000001 , 0x00000c75 
+ 00019143  0x0000432b bne  0x00000000 , 0x00004984 
+ 00019144  0x0000432c fetch  0x00000001 , 0x00000c71 
+ 00019145  0x0000432d bne  0x00000000 , 0x00004984 
+ 00019146  0x0000432e fetch  0x00000001 , 0x00000c70 
+ 00019147  0x0000432f sub  0x0000003f , 0x00000001 , 0x0000003e 
+ 00019148  0x00004330 nbranch  0x00004984 , 0x00000002 
+ 00019149  0x00004331 fetch  0x00000001 , 0x00000c6b 
+ 00019150  0x00004332 beq  0x00000003 , 0x00004ad1 
+ 00019151  0x00004333 beq  0x00000004 , 0x00004ad1 
+ 00019152  0x00004334 branch  0x00004984 
+ 00019153  0x00004338 fetch  0x00000001 , 0x00000c70 
+ 00019154  0x00004339 beq  0x00000000 , 0x00004ad5 
+ 00019155  0x0000433a jam  0x00000004 , 0x00000c6b 
+ 00019156  0x0000433b branch  0x00004988 
+ 00019157  0x0000433d jam  0x00000003 , 0x00000c6b 
+ 00019158  0x0000433e branch  0x00004988 
+ 00019159  0x00004342 fetch  0x00000001 , 0x00000c6b 
+ 00019160  0x00004343 bne  0x00000004 , 0x00004984 
+ 00019161  0x00004344 fetch  0x00000001 , 0x00000c6e 
+ 00019162  0x00004345 bne  0x00000001 , 0x00004984 
+ 00019163  0x00004346 fetch  0x00000001 , 0x00000c70 
+ 00019164  0x00004347 bne  0x00000000 , 0x00004984 
+ 00019165  0x00004348 fetch  0x00000001 , 0x00000c71 
+ 00019166  0x00004349 bne  0x00000000 , 0x00004984 
+ 00019167  0x0000434a fetch  0x00000001 , 0x00000c74 
+ 00019168  0x0000434b bne  0x00000000 , 0x00004984 
+ 00019169  0x0000434c fetch  0x00000001 , 0x00000c75 
+ 00019170  0x0000434d bne  0x00000000 , 0x00004984 
+ 00019171  0x0000434e fetch  0x00000001 , 0x00000c72 
+ 00019172  0x0000434f bne  0x00000000 , 0x00004984 
+ 00019173  0x00004350 fetch  0x00000001 , 0x00000c73 
+ 00019174  0x00004351 bne  0x00000000 , 0x00004984 
+ 00019175  0x00004352 branch  0x00004988 
+ 00019176  0x00004356 jam  0x00000001 , 0x00000d4c 
+ 00019177  0x00004357 fetch  0x00000001 , 0x00000c71 
+ 00019178  0x00004358 store  0x00000001 , 0x00000d4d 
+ 00019179  0x00004359 fetch  0x00000001 , 0x00000c72 
+ 00019180  0x0000435a sub  0x0000003f , 0x00000001 , 0x0000003e 
+ 00019181  0x0000435b call  0x00004af5 , 0x00000005 
+ 00019182  0x0000435c fetch  0x00000001 , 0x00000d36 
+ 00019183  0x0000435d bne  0x00000004 , 0x00004988 
+ 00019184  0x0000435e jam  0x00000002 , 0x00000d36 
+ 00019185  0x0000435f call  0x00004988 
+ 00019186  0x00004360 nop  0x00007530 
+ 00019187  0x00004361 nop  0x00007530 
+ 00019188  0x00004362 rtn 
+ 00019189  0x00004364 jam  0x00000001 , 0x00000d45 
+ 00019190  0x00004365 jam  0x00000000 , 0x00000d3a 
+ 00019191  0x00004366 jam  0x00000004 , 0x00000d36 
+ 00019192  0x00004367 rtn 
+ 00019193  0x0000436b jam  0x00000001 , 0x00000d50 
+ 00019194  0x0000436c call  0x00004b03 
+ 00019195  0x0000436d fetch  0x00000002 , 0x00000c70 
+ 00019196  0x0000436e store  0x00000002 , 0x00000d4e 
+ 00019197  0x0000436f fetch  0x00000001 , 0x00000c74 
+ 00019198  0x00004370 iforce  0x00000039 
+ 00019199  0x00004371 arg  0x00000c76 , 0x00000006 
+ 00019200  0x00004372 arg  0x00000cb6 , 0x00000005 
+ 00019201  0x00004373 call  0x00007f01 
+ 00019202  0x00004374 branch  0x00004988 
+ 00019203  0x00004377 fetch  0x00000002 , 0x00000c70 
+ 00019204  0x00004378 arg  0x00000200 , 0x00000002 
+ 00019205  0x00004379 isub  0x00000002 , 0x0000003e 
+ 00019206  0x0000437a nrtn  0x00000005 
+ 00019207  0x0000437b fetch  0x00000002 , 0x00000c72 
+ 00019208  0x0000437c arg  0x00000000 , 0x00000002 
+ 00019209  0x0000437d isub  0x00000002 , 0x0000003e 
+ 00019210  0x0000437e nrtn  0x00000005 
+ 00019211  0x0000437f fetch  0x00000002 , 0x00000c74 
+ 00019212  0x00004380 arg  0x00000001 , 0x00000002 
+ 00019213  0x00004381 isub  0x00000002 , 0x0000003e 
+ 00019214  0x00004382 nrtn  0x00000005 
+ 00019215  0x00004383 jam  0x00000001 , 0x00000d43 
+ 00019216  0x00004384 rtn 
+ 00019217  0x00004388 fetch  0x00000001 , 0x00000c74 
+ 00019218  0x00004389 bne  0x00000000 , 0x00004984 
+ 00019219  0x0000438a fetch  0x00000001 , 0x00000c70 
+ 00019220  0x0000438b beq  0x00000000 , 0x00004b17 
+ 00019221  0x0000438c beq  0x00000001 , 0x00004b1a 
+ 00019222  0x0000438d branch  0x00004984 
+ 00019223  0x0000438f jam  0x00000000 , 0x00000d4a 
+ 00019224  0x00004390 jam  0x00000001 , 0x00000d49 
+ 00019225  0x00004391 branch  0x00004988 
+ 00019226  0x00004393 jam  0x00000001 , 0x00000d44 
+ 00019227  0x00004394 jam  0x00000001 , 0x00000d4a 
+ 00019228  0x00004395 jam  0x00000000 , 0x00000d49 
+ 00019229  0x00004396 branch  0x00004988 
+ 00019230  0x0000439a ifetch  0x00000001 , 0x00000011 
+ 00019231  0x0000439b iforce  0x00000012 
+ 00019232  0x0000439c increase  0x00000001 , 0x00000011 
+ 00019233  0x0000439f bpatch  0x000000fa , 0x0000401f 
+ 00019234  0x000043a0 bmark0  0x00000023 , 0x00004b2c 
+ 00019235  0x000043a1 add  0x00000012 , 0x00000001 , 0x0000003f 
+ 00019236  0x000043a2 lshift  0x0000003f , 0x0000003f 
+ 00019237  0x000043a3 hstore  0x00000001 , 0x00008a18 
+ 00019238  0x000043a4 jam  0x00000003 , 0x00008a18 
+ 00019239  0x000043a5 fetch  0x00000001 , 0x00000c74 
+ 00019240  0x000043a6 increase  0xfffffffe , 0x0000003f 
+ 00019241  0x000043a7 rshift  0x0000003f , 0x0000003f 
+ 00019242  0x000043a8 store  0x00000001 , 0x00000c74 
+ 00019243  0x000043a9 beq  0x00000000 , 0x00004b35 
+ 00019244  0x000043ab fetch  0x00000002 , 0x00000c74 
+ 00019245  0x000043ac isub  0x00000012 , 0x0000003e 
+ 00019246  0x000043ad branch  0x00004b30 , 0x00000002 
+ 00019247  0x000043ae copy  0x0000003f , 0x00000012 
+ 00019248  0x000043b0 deposit  0x00000011 
+ 00019249  0x000043b1 store  0x00000002 , 0x00000b65 
+ 00019250  0x000043b2 deposit  0x00000012 
+ 00019251  0x000043b3 store  0x00000001 , 0x00000b67 
+ 00019252  0x000043b4 branch  0x00004b37 
+ 00019253  0x000043b7 arg  0x00000000 , 0x00000007 
+ 00019254  0x000043b8 branch  0x00004b57 
+ 00019255  0x000043bc bpatch  0x000000fb , 0x0000401f 
+ 00019256  0x000043bd fetch  0x00000001 , 0x00000b67 
+ 00019257  0x000043be rtn  0x00000034 
+ 00019258  0x000043bf copy  0x0000003f , 0x00000039 
+ 00019259  0x000043c0 sub  0x0000003f , 0x00000040 , 0x0000003e 
+ 00019260  0x000043c1 branch  0x00004b3e , 0x00000002 
+ 00019261  0x000043c2 arg  0x00000040 , 0x00000039 
+ 00019262  0x000043c4 fetch  0x00000001 , 0x00000b67 
+ 00019263  0x000043c5 isub  0x00000039 , 0x0000003f 
+ 00019264  0x000043c6 store  0x00000001 , 0x00000b67 
+ 00019265  0x000043c7 fetch  0x00000002 , 0x00000b65 
+ 00019266  0x000043c8 copy  0x0000003f , 0x00000006 
+ 00019267  0x000043ca ifetch  0x00000001 , 0x00000006 
+ 00019268  0x000043cb hstore  0x00000001 , 0x00008a18 
+ 00019269  0x000043cc bmark0  0x00000023 , 0x00004b47 
+ 00019270  0x000043cd jam  0x00000000 , 0x00008a18 
+ 00019271  0x000043cf loop  0x00004b43 
+ 00019272  0x000043d0 copy  0x00000006 , 0x0000003f 
+ 00019273  0x000043d1 store  0x00000002 , 0x00000b65 
+ 00019274  0x000043d2 arg  0x00000000 , 0x00000007 
+ 00019275  0x000043d3 call  0x00004b57 
+ 00019276  0x000043d4 fetch  0x00000001 , 0x00000b67 
+ 00019277  0x000043d5 nrtn  0x00000034 
+ 00019278  0x000043d6 fetch  0x00000001 , 0x00000d36 
+ 00019279  0x000043d7 rtnne  0x00000001 
+ 00019280  0x000043d8 jam  0x00000002 , 0x00000d36 
+ 00019281  0x000043d9 rtn 
+ 00019282  0x000043dd arg  0x00008a19 , 0x00000011 
+ 00019283  0x000043de arg  0x00000001 , 0x00000007 
+ 00019284  0x000043e0 ifetch  0x00000001 , 0x00000006 
+ 00019285  0x000043e1 istore  0x00000001 , 0x00000011 
+ 00019286  0x000043e2 loop  0x00004b54 
+ 00019287  0x000043e4 setarg  0x00000000 
+ 00019288  0x000043e5 qset1  0x0000003f 
+ 00019289  0x000043e6 hstore  0x00000001 , 0x00008a10 
+ 00019290  0x000043e7 fetcht  0x00000001 , 0x00000d37 
+ 00019291  0x000043e8 ior  0x00000002 , 0x0000003f 
+ 00019292  0x000043e9 store  0x00000001 , 0x00000d37 
+ 00019293  0x000043ea rtn 
+ 00019294  0x000043ed arg  0x00000002 , 0x00000007 
+ 00019295  0x000043ee arg  0x00008a1a , 0x00000011 
+ 00019296  0x000043ef branch  0x00004b54 
+ 00019297  0x000043f2 bpatch  0x000000fc , 0x0000401f 
+ 00019298  0x000043f3 fetch  0x00000001 , 0x00000d38 
+ 00019299  0x000043f4 rtn  0x00000034 
+ 00019300  0x000043f5 fetch  0x00000001 , 0x00000d37 
+ 00019301  0x000043f6 nbranch  0x00004bac , 0x00000034 
+ 00019302  0x000043f7 fetch  0x00000001 , 0x00000d45 
+ 00019303  0x000043f8 branch  0x00004b86 , 0x00000034 
+ 00019304  0x000043f9 fetch  0x00000001 , 0x00000d36 
+ 00019305  0x000043fa beq  0x00000003 , 0x00004bbf 
+ 00019306  0x000043fb bne  0x00000002 , 0x00004b86 
+ 00019307  0x000043fc fetch  0x00000001 , 0x00000d3a 
+ 00019308  0x000043fd nbranch  0x00004b86 , 0x00000034 
+ 00019309  0x000043fe call  0x00004b6f 
+ 00019310  0x000043ff branch  0x00004b7a 
+ 00019311  0x00004402 fetch  0x00000001 , 0x00000d38 
+ 00019312  0x00004403 rtnbit0  0x00000001 
+ 00019313  0x00004404 fetch  0x00000001 , 0x00000d37 
+ 00019314  0x00004405 rtnbit1  0x00000001 
+ 00019315  0x00004406 fetch  0x00000001 , 0x00000d38 
+ 00019316  0x00004407 set0  0x00000001 , 0x0000003f 
+ 00019317  0x00004408 store  0x00000001 , 0x00000d38 
+ 00019318  0x00004409 fetch  0x00000001 , 0x00000d51 
+ 00019319  0x0000440a rtn  0x00000034 
+ 00019320  0x0000440b beq  0x00000010 , 0x00004ba8 
+ 00019321  0x0000440c branch  0x00002a8c 
+ 00019322  0x0000440f fetch  0x00000001 , 0x00000d38 
+ 00019323  0x00004410 rtnbit0  0x00000002 
+ 00019324  0x00004411 fetch  0x00000001 , 0x00000d37 
+ 00019325  0x00004412 rtnbit1  0x00000002 
+ 00019326  0x00004413 fetch  0x00000001 , 0x00000d38 
+ 00019327  0x00004414 set0  0x00000002 , 0x0000003f 
+ 00019328  0x00004415 store  0x00000001 , 0x00000d38 
+ 00019329  0x00004416 fetch  0x00000001 , 0x00000d52 
+ 00019330  0x00004417 rtn  0x00000034 
+ 00019331  0x00004418 beq  0x00000020 , 0x00004b89 
+ 00019332  0x00004419 beq  0x00000021 , 0x00004ba4 
+ 00019333  0x0000441a branch  0x00002a8c 
+ 00019334  0x0000441e arg  0x00000d54 , 0x00000005 
+ 00019335  0x0000441f arg  0x00000006 , 0x00000039 
+ 00019336  0x00004420 branch  0x00007ec6 
+ 00019337  0x00004423 fetch  0x00000001 , 0x00000d4c 
+ 00019338  0x00004424 fetcht  0x00000001 , 0x00000d4b 
+ 00019339  0x00004425 iand  0x00000002 , 0x0000003f 
+ 00019340  0x00004426 branch  0x00004ba0 , 0x00000034 
+ 00019341  0x00004427 fetcht  0x00000001 , 0x00000d4a 
+ 00019342  0x00004428 iadd  0x00000002 , 0x0000003f 
+ 00019343  0x00004429 beq  0x00000001 , 0x00004b91 
+ 00019344  0x0000442a branch  0x00004ba0 
+ 00019345  0x0000442d jam  0x00000000 , 0x00000d52 
+ 00019346  0x0000442f fetch  0x00000001 , 0x00000d55 
+ 00019347  0x00004430 beq  0x00000002 , 0x00004ba1 
+ 00019348  0x00004431 beq  0x00000003 , 0x00004ba1 
+ 00019349  0x00004432 fetch  0x00000001 , 0x00000d55 
+ 00019350  0x00004433 store  0x00000001 , 0x00000d54 
+ 00019351  0x00004434 fetch  0x00000001 , 0x00000d56 
+ 00019352  0x00004435 istore  0x00000001 , 0x00000005 
+ 00019353  0x00004436 fetch  0x00000001 , 0x00000d58 
+ 00019354  0x00004437 istore  0x00000001 , 0x00000005 
+ 00019355  0x00004438 fetch  0x00000001 , 0x00000d5a 
+ 00019356  0x00004439 istore  0x00000001 , 0x00000005 
+ 00019357  0x0000443a arg  0x00000004 , 0x00000039 
+ 00019358  0x0000443b arg  0x00000d54 , 0x00000006 
+ 00019359  0x0000443c branch  0x00004b5e 
+ 00019360  0x0000443f jam  0x00000000 , 0x00000d52 
+ 00019361  0x00004441 arg  0x00000008 , 0x00000039 
+ 00019362  0x00004442 arg  0x00000d54 , 0x00000006 
+ 00019363  0x00004443 branch  0x00004b5e 
+ 00019364  0x00004446 jam  0x00000000 , 0x00000d52 
+ 00019365  0x00004447 arg  0x00000003 , 0x00000039 
+ 00019366  0x00004448 arg  0x00000d74 , 0x00000006 
+ 00019367  0x00004449 branch  0x00004b5e 
+ 00019368  0x0000444c jam  0x00000000 , 0x00000d51 
+ 00019369  0x0000444d arg  0x00000008 , 0x00000039 
+ 00019370  0x0000444e arg  0x00000d64 , 0x00000006 
+ 00019371  0x0000444f branch  0x00004b52 
+ 00019372  0x00004452 fetch  0x00000001 , 0x00000d36 
+ 00019373  0x00004453 beq  0x00000003 , 0x00004bb0 
+ 00019374  0x00004454 beq  0x00000002 , 0x00004bb2 
+ 00019375  0x00004455 rtn 
+ 00019376  0x00004457 jam  0x00000000 , 0x00000d37 
+ 00019377  0x00004458 rtn 
+ 00019378  0x0000445a hfetch  0x00000001 , 0x00008a00 
+ 00019379  0x0000445b set1  0x00000007 , 0x0000003f 
+ 00019380  0x0000445c hstore  0x00000001 , 0x00008a00 
+ 00019381  0x0000445d jam  0x00000001 , 0x00000d47 
+ 00019382  0x0000445e rtn 
+ 00019383  0x00004461 fetch  0x00000001 , 0x00000d36 
+ 00019384  0x00004462 rtneq  0x00000003 
+ 00019385  0x00004463 beq  0x00000002 , 0x00004bbb 
+ 00019386  0x00004464 rtn 
+ 00019387  0x00004466 fetch  0x00000001 , 0x00000d47 
+ 00019388  0x00004467 rtn  0x00000034 
+ 00019389  0x00004468 jam  0x00000001 , 0x00000d46 
+ 00019390  0x00004469 branch  0x00004bc2 
+ 00019391  0x0000446c arg  0x0000000f , 0x00000007 
+ 00019392  0x0000446d call  0x00007f16 
+ 00019393  0x0000446e nrtn  0x00000034 
+ 00019394  0x00004470 hfetch  0x00000001 , 0x00008a00 
+ 00019395  0x00004471 rtnbit0  0x00000007 
+ 00019396  0x00004472 jam  0x000000fc , 0x00008a00 
+ 00019397  0x00004473 nop  0x00007530 
+ 00019398  0x00004474 jam  0x0000003c , 0x00008a00 
+ 00019399  0x00004475 rtn 
+ 00019400  0x0000447d bpatch  0x000000fd , 0x0000401f 
+ 00019401  0x0000447e fetch  0x00000001 , 0x000041ce 
+ 00019402  0x0000447f nrtn  0x00000034 
+ 00019403  0x00004481 call  0x00004bce 
+ 00019404  0x00004482 ncall  0x00004be6 , 0x00000028 
+ 00019405  0x00004483 rtn 
+ 00019406  0x00004486 bpatch  0x000000fe , 0x0000401f 
+ 00019407  0x00004487 copy  0x00000003 , 0x00000011 
+ 00019408  0x00004488 arg  0x00000004 , 0x00000002 
+ 00019409  0x00004489 ifetch  0x00000001 , 0x00000003 
+ 00019410  0x0000448a beq  0x00000001 , 0x00004bd8 
+ 00019411  0x0000448b increase  0x00000001 , 0x00000002 
+ 00019412  0x0000448c beq  0x00000002 , 0x00004bd8 
+ 00019413  0x0000448d copy  0x00000003 , 0x0000003f 
+ 00019414  0x0000448e hstore  0x00000002 , 0x00008058 
+ 00019415  0x0000448f rtn 
+ 00019416  0x00004491 hfetch  0x00000002 , 0x00008112 
+ 00019417  0x00004492 isub  0x00000002 , 0x0000003e 
+ 00019418  0x00004493 nbranch  0x00004bd8 , 0x00000002 
+ 00019419  0x00004495 disable  0x00000028 
+ 00019420  0x00004496 copy  0x00000011 , 0x00000003 
+ 00019421  0x00004497 call  0x00004bee 
+ 00019422  0x00004498 iadd  0x00000002 , 0x00000002 
+ 00019423  0x0000449a hfetch  0x00000002 , 0x00008112 
+ 00019424  0x0000449b isub  0x00000002 , 0x0000003e 
+ 00019425  0x0000449c nbranch  0x00004bdf , 0x00000002 
+ 00019426  0x0000449d copy  0x00000011 , 0x00000003 
+ 00019427  0x0000449e ifetch  0x00000001 , 0x00000003 
+ 00019428  0x0000449f beq  0x00000001 , 0x00004c3f 
+ 00019429  0x000044a0 branch  0x00002a8c 
+ 00019430  0x000044a3 bpatch  0x000000ff , 0x0000401f 
+ 00019431  0x000044a4 hfetch  0x00000002 , 0x00008058 
+ 00019432  0x000044a5 iforce  0x00000003 
+ 00019433  0x000044a6 call  0x00004bee 
+ 00019434  0x000044a7 iadd  0x00000003 , 0x00000003 
+ 00019435  0x000044a8 deposit  0x00000003 
+ 00019436  0x000044a9 hstore  0x00000002 , 0x00008058 
+ 00019437  0x000044aa rtn 
+ 00019438  0x000044b0 ifetch  0x00000001 , 0x00000003 
+ 00019439  0x000044b1 increase  0x00000002 , 0x00000003 
+ 00019440  0x000044b2 beq  0x00000002 , 0x00004bf3 
+ 00019441  0x000044b3 ifetch  0x00000001 , 0x00000003 
+ 00019442  0x000044b4 rtn 
+ 00019443  0x000044b6 ifetch  0x00000002 , 0x00000003 
+ 00019444  0x000044b7 rtn 
+ 00019445  0x000044ba hfetch  0x00000002 , 0x0000805e 
+ 00019446  0x000044bb increase  0xfffffffb , 0x0000000a 
+ 00019447  0x000044bc iadd  0x0000000a , 0x0000000a 
+ 00019448  0x000044bd rtn 
+ 00019449  0x000044c0 arg  0x00000004 , 0x00000002 
+ 00019450  0x000044c1 branch  0x00004bfc 
+ 00019451  0x000044c3 arg  0x00000002 , 0x00000002 
+ 00019452  0x000044c5 bpatchx  0x00000000 , 0x00004020 
+ 00019453  0x000044c6 increase  0x00000001 , 0x00000039 
+ 00019454  0x000044c7 hfetch  0x00000002 , 0x0000805e 
+ 00019455  0x000044c8 copy  0x0000003f , 0x0000000a 
+ 00019456  0x000044c9 copy  0x00000039 , 0x0000003f 
+ 00019457  0x000044ca istoret  0x00000001 , 0x0000000a 
+ 00019458  0x000044cb increase  0xffffffff , 0x0000003f 
+ 00019459  0x000044cc iadd  0x0000000a , 0x0000000a 
+ 00019460  0x000044cd copy  0x0000000a , 0x0000003f 
+ 00019461  0x000044ce store  0x00000002 , 0x00000258 
+ 00019462  0x000044cf copy  0x00000002 , 0x0000003f 
+ 00019463  0x000044d0 rtneq  0x00000002 
+ 00019464  0x000044d1 fetch  0x00000002 , 0x00000258 
+ 00019465  0x000044d2 hstore  0x00000002 , 0x0000805e 
+ 00019466  0x000044d3 branch  0x00004c0b 
+ 00019467  0x000044d7 setarg  0x00000000 
+ 00019468  0x000044d8 store  0x00000002 , 0x00000258 
+ 00019469  0x000044d9 rtn 
+ 00019470  0x000044e1 rtn  0x0000002b 
+ 00019471  0x000044e2 setarg  0x00004d28 
+ 00019472  0x000044e3 store  0x00000002 , 0x000041f3 
+ 00019473  0x000044e5 setarg  0x000001a0 
+ 00019474  0x000044e6 store  0x00000002 , 0x00004243 
+ 00019475  0x000044e8 setarg  0x00001800 
+ 00019476  0x000044e9 hstore  0x00000002 , 0x00008054 
+ 00019477  0x000044ea setarg  0x00001bff 
+ 00019478  0x000044eb hstore  0x00000002 , 0x00008056 
+ 00019479  0x000044ec setarg  0x00001c00 
+ 00019480  0x000044ed hstore  0x00000002 , 0x0000805a 
+ 00019481  0x000044ee call  0x00004c28 
+ 00019482  0x000044f0 jam  0x00000000 , 0x00008062 
+ 00019483  0x000044f1 setarg  0x00001c00 
+ 00019484  0x000044f2 hstore  0x00000002 , 0x0000805e 
+ 00019485  0x000044f3 hstore  0x00000002 , 0x00008060 
+ 00019486  0x000044f4 setarg  0x00001800 
+ 00019487  0x000044f5 hstore  0x00000002 , 0x00008058 
+ 00019488  0x000044f6 store  0x00000002 , 0x00000244 
+ 00019489  0x000044f8 hfetch  0x00000002 , 0x00008050 
+ 00019490  0x000044f9 set0  0x0000000f , 0x0000003f 
+ 00019491  0x000044fa hstore  0x00000002 , 0x00008050 
+ 00019492  0x000044fb call  0x000066ce 
+ 00019493  0x000044fc jam  0x00000001 , 0x00008043 
+ 00019494  0x000044fd jam  0x00000081 , 0x00008062 
+ 00019495  0x000044fe rtn 
+ 00019496  0x00004501 setarg  0x00001fff 
+ 00019497  0x00004502 hstore  0x00000002 , 0x0000805c 
+ 00019498  0x00004503 hfetch  0x00000001 , 0x00008081 
+ 00019499  0x00004504 or_into  0x00000007 , 0x0000003f 
+ 00019500  0x00004505 hstore  0x00000001 , 0x00008081 
+ 00019501  0x00004506 rtn 
+ 00019502  0x0000450a bpatchx  0x00000001 , 0x00004020 
+ 00019503  0x0000450b hfetch  0x00000001 , 0x0000810c 
+ 00019504  0x0000450c iforce  0x00000012 
+ 00019505  0x0000450d bbit0  0x00000003 , 0x00004c37 
+ 00019506  0x0000450e hfetch  0x00000002 , 0x00008112 
+ 00019507  0x0000450f iforce  0x00000013 
+ 00019508  0x00004510 arg  0x0000044f , 0x00000002 
+ 00019509  0x00004511 isub  0x00000002 , 0x0000003e 
+ 00019510  0x00004512 nrtn  0x00000005 
+ 00019511  0x00004514 hfetch  0x00000002 , 0x00008058 
+ 00019512  0x00004515 iforce  0x00000003 
+ 00019513  0x00004516 branch  0x00004bc8 
+ 00019514  0x00004519 hfetcht  0x00000001 , 0x0000810c 
+ 00019515  0x0000451a isolate1  0x00000006 , 0x00000002 
+ 00019516  0x0000451b branch  0x00004c3a , 0x00000001 
+ 00019517  0x0000451c hstore  0x00000001 , 0x00008015 
+ 00019518  0x0000451d rtn 
+ 00019519  0x00004520 bpatchx  0x00000002 , 0x00004020 
+ 00019520  0x00004521 fetch  0x00000001 , 0x000041ce 
+ 00019521  0x00004522 branch  0x00004c44 , 0x00000034 
+ 00019522  0x00004523 enable  0x00000028 
+ 00019523  0x00004524 rtn 
+ 00019524  0x00004526 ifetch  0x00000002 , 0x00000003 
+ 00019525  0x00004527 iforce  0x00000030 
+ 00019526  0x00004528 iforce  0x00000007 
+ 00019527  0x00004529 ifetch  0x00000001 , 0x00000003 
+ 00019528  0x0000452a iforce  0x00000002 
+ 00019529  0x0000452b rshift2  0x00000030 , 0x0000003f 
+ 00019530  0x0000452c rshift8  0x0000003f , 0x0000003f 
+ 00019531  0x0000452d beq  0x0000003f , 0x00004c4d 
+ 00019532  0x0000452e rtn 
+ 00019533  0x00004532 bpatchx  0x00000003 , 0x00004020 
+ 00019534  0x00004533 deposit  0x00000007 
+ 00019535  0x00004534 beq  0x00000000 , 0x00004cdc 
+ 00019536  0x00004535 beq  0x00000001 , 0x00004c66 
+ 00019537  0x00004536 beq  0x00000002 , 0x00004c6b 
+ 00019538  0x00004537 beq  0x00000003 , 0x00004c7a 
+ 00019539  0x00004538 beq  0x00000004 , 0x00004cb3 
+ 00019540  0x00004539 beq  0x00000005 , 0x00004cdc 
+ 00019541  0x0000453a beq  0x00000006 , 0x00004cc6 
+ 00019542  0x0000453b beq  0x00000007 , 0x00004c5c 
+ 00019543  0x0000453d beq  0x00000010 , 0x00004cc9 
+ 00019544  0x0000453e beq  0x00000011 , 0x00004cd1 
+ 00019545  0x0000453f beq  0x00000012 , 0x00004ca5 
+ 00019546  0x00004540 beq  0x00000013 , 0x00004c85 
+ 00019547  0x00004541 branch  0x00004cdc 
+ 00019548  0x00004544 call  0x00004cdc 
+ 00019549  0x00004545 call  0x00007f9e 
+ 00019550  0x00004546 call  0x0000688c 
+ 00019551  0x00004548 call  0x000033d2 
+ 00019552  0x00004549 call  0x000033d9 
+ 00019553  0x0000454a branch  0x0000688f 
+ 00019554  0x0000454d jam  0x00000000 , 0x00004245 
+ 00019555  0x0000454e call  0x000033d0 
+ 00019556  0x0000454f call  0x00004c13 
+ 00019557  0x00004550 branch  0x000033db 
+ 00019558  0x00004553 call  0x00004cf2 
+ 00019559  0x00004554 hfetch  0x00000002 , 0x00008000 
+ 00019560  0x00004555 istore  0x00000002 , 0x0000000a 
+ 00019561  0x00004556 force  0x00000006 , 0x00000039 
+ 00019562  0x00004557 branch  0x00004cdd 
+ 00019563  0x0000455a ifetch  0x00000002 , 0x00000003 
+ 00019564  0x0000455b store  0x00000002 , 0x00004243 
+ 00019565  0x0000455c hstore  0x00000002 , 0x00008052 
+ 00019566  0x0000455d rtn 
+ 00019567  0x00004562 ifetch  0x00000001 , 0x00000003 
+ 00019568  0x00004563 copy  0x0000003f , 0x00000002 
+ 00019569  0x00004564 hstore  0x00000001 , 0x00008024 
+ 00019570  0x00004565 ifetch  0x00000001 , 0x00000003 
+ 00019571  0x00004566 iadd  0x00000002 , 0x00000002 
+ 00019572  0x00004567 set1  0x00000007 , 0x0000003f 
+ 00019573  0x00004568 hstore  0x00000001 , 0x00008023 
+ 00019574  0x00004569 ifetch  0x00000001 , 0x00000003 
+ 00019575  0x0000456a iadd  0x00000002 , 0x00000002 
+ 00019576  0x0000456b copy  0x0000003f , 0x00000039 
+ 00019577  0x0000456c rtn 
+ 00019578  0x0000456f bmark1  0x0000002b , 0x00004cc4 
+ 00019579  0x00004570 call  0x00004c6f 
+ 00019580  0x00004572 ifetch  0x00000001 , 0x00000003 
+ 00019581  0x00004573 hstore  0x00000001 , 0x00008025 
+ 00019582  0x00004574 iadd  0x00000002 , 0x00000002 
+ 00019583  0x00004575 loop  0x00004c7c 
+ 00019584  0x00004577 and  0x00000002 , 0x000000ff , 0x00000002 
+ 00019585  0x00004578 ifetch  0x00000001 , 0x00000003 
+ 00019586  0x00004579 isub  0x00000002 , 0x0000003e 
+ 00019587  0x0000457a nbranch  0x00004cc4 , 0x00000005 
+ 00019588  0x0000457b branch  0x00004cdc 
+ 00019589  0x0000457f bmark0  0x0000002b , 0x00004cc4 
+ 00019590  0x00004580 call  0x00004c6f 
+ 00019591  0x00004581 store  0x00000008 , 0x00000a9a 
+ 00019592  0x00004583 call  0x00007422 
+ 00019593  0x00004584 arg  0x00000010 , 0x00000039 
+ 00019594  0x00004585 arg  0x00000ac2 , 0x00000005 
+ 00019595  0x00004586 call  0x00004ca0 
+ 00019596  0x00004587 storet  0x00000008 , 0x00000aa2 
+ 00019597  0x00004588 arg  0x00000ad2 , 0x00000005 
+ 00019598  0x00004589 call  0x00007497 
+ 00019599  0x0000458a arg  0x00000ad2 , 0x00000011 
+ 00019600  0x0000458b arg  0x00000ac2 , 0x00000012 
+ 00019601  0x0000458c arg  0x00000ae2 , 0x00000005 
+ 00019602  0x0000458d call  0x00007352 
+ 00019603  0x0000458e arg  0x00000010 , 0x00000039 
+ 00019604  0x0000458f arg  0x00000ae2 , 0x00000006 
+ 00019605  0x00004590 call  0x00004c9c 
+ 00019606  0x00004591 fetcht  0x00000008 , 0x00000aa2 
+ 00019607  0x00004592 fetch  0x00000008 , 0x00000a9a 
+ 00019608  0x00004593 increase  0xfffffff0 , 0x0000003f 
+ 00019609  0x00004594 store  0x00000008 , 0x00000a9a 
+ 00019610  0x00004595 nbranch  0x00004c88 , 0x00000034 
+ 00019611  0x00004596 branch  0x00004c80 
+ 00019612  0x00004599 ifetch  0x00000001 , 0x00000006 
+ 00019613  0x0000459a hstore  0x00000001 , 0x00008025 
+ 00019614  0x0000459b loop  0x00004c9c 
+ 00019615  0x0000459c rtn 
+ 00019616  0x0000459f ifetch  0x00000001 , 0x00000003 
+ 00019617  0x000045a0 istore  0x00000001 , 0x00000005 
+ 00019618  0x000045a1 iadd  0x00000002 , 0x00000002 
+ 00019619  0x000045a2 loop  0x00004ca0 
+ 00019620  0x000045a3 rtn 
+ 00019621  0x000045a6 bmark0  0x0000002b , 0x00004cc4 
+ 00019622  0x000045a7 arg  0x00000000 , 0x00000002 
+ 00019623  0x000045a8 arg  0x00000010 , 0x00000039 
+ 00019624  0x000045a9 arg  0x00000ac2 , 0x00000005 
+ 00019625  0x000045aa call  0x00004ca0 
+ 00019626  0x000045ab hfetch  0x00000001 , 0x00008085 
+ 00019627  0x000045ac and_into  0x000000fd , 0x0000003f 
+ 00019628  0x000045ad hstore  0x00000001 , 0x00008085 
+ 00019629  0x000045ae arg  0x00000ac2 , 0x00000006 
+ 00019630  0x000045af arg  0x00000010 , 0x00000039 
+ 00019631  0x000045b0 call  0x00007478 
+ 00019632  0x000045b1 call  0x00007428 
+ 00019633  0x000045b2 call  0x00007491 
+ 00019634  0x000045b3 branch  0x00004c80 
+ 00019635  0x000045b7 arg  0x00000020 , 0x00000039 
+ 00019636  0x000045b8 arg  0x00004000 , 0x00000005 
+ 00019637  0x000045b9 arg  0x00000000 , 0x00000002 
+ 00019638  0x000045bb ifetch  0x00000001 , 0x00000003 
+ 00019639  0x000045bc istore  0x00000001 , 0x00000005 
+ 00019640  0x000045bd iadd  0x00000002 , 0x00000002 
+ 00019641  0x000045be loop  0x00004cb6 
+ 00019642  0x000045bf and  0x00000002 , 0x000000ff , 0x00000002 
+ 00019643  0x000045c0 ifetch  0x00000001 , 0x00000003 
+ 00019644  0x000045c1 isub  0x00000002 , 0x0000003e 
+ 00019645  0x000045c2 nbranch  0x00004cc4 , 0x00000005 
+ 00019646  0x000045c3 jam  0x00000000 , 0x00008023 
+ 00019647  0x000045c4 call  0x00004cdc 
+ 00019648  0x000045c5 call  0x00004be6 
+ 00019649  0x000045c6 call  0x000064a3 
+ 00019650  0x000045c7 call  0x00007f9e 
+ 00019651  0x000045c8 branch  0x00002001 
+ 00019652  0x000045cb jam  0x00000000 , 0x00008023 
+ 00019653  0x000045cc branch  0x00002000 
+ 00019654  0x000045cf ifetch  0x00000006 , 0x00000003 
+ 00019655  0x000045d0 store  0x00000006 , 0x000040a0 
+ 00019656  0x000045d1 branch  0x00004cdc 
+ 00019657  0x000045d5 ifetch  0x00000001 , 0x00000003 
+ 00019658  0x000045d6 store  0x00000001 , 0x0000025a 
+ 00019659  0x000045d7 copy  0x0000003f , 0x00000039 
+ 00019660  0x000045d8 ifetch  0x00000002 , 0x00000003 
+ 00019661  0x000045d9 store  0x00000002 , 0x0000025b 
+ 00019662  0x000045da copy  0x0000003f , 0x00000005 
+ 00019663  0x000045db call  0x000066fd 
+ 00019664  0x000045dc branch  0x00004cdc 
+ 00019665  0x000045e0 ifetch  0x00000001 , 0x00000003 
+ 00019666  0x000045e1 store  0x00000001 , 0x0000025a 
+ 00019667  0x000045e2 copy  0x0000003f , 0x00000039 
+ 00019668  0x000045e3 ifetch  0x00000002 , 0x00000003 
+ 00019669  0x000045e4 store  0x00000002 , 0x0000025b 
+ 00019670  0x000045e5 arg  0x00001000 , 0x00000005 
+ 00019671  0x000045e6 call  0x000066fd 
+ 00019672  0x000045e7 fetcht  0x00000001 , 0x0000025a 
+ 00019673  0x000045e8 arg  0x00001000 , 0x00000011 
+ 00019674  0x000045e9 fetch  0x00000002 , 0x0000025b 
+ 00019675  0x000045ea branch  0x00006608 
+ 00019676  0x000045f0 force  0x00000004 , 0x00000039 
+ 00019677  0x000045f2 call  0x00004cf4 
+ 00019678  0x000045f3 force  0x00000001 , 0x0000003f 
+ 00019679  0x000045f4 istore  0x00000001 , 0x0000000a 
+ 00019680  0x000045f5 deposit  0x00000030 
+ 00019681  0x000045f6 istore  0x00000003 , 0x0000000a 
+ 00019682  0x000045f7 force  0x0000000e , 0x00000007 
+ 00019683  0x000045f9 bpatchx  0x00000004 , 0x00004020 
+ 00019684  0x000045fa call  0x00004cf6 
+ 00019685  0x000045fb deposit  0x00000007 
+ 00019686  0x000045fc istore  0x00000001 , 0x0000000a 
+ 00019687  0x000045fd deposit  0x00000039 
+ 00019688  0x000045fe istore  0x00000001 , 0x0000000a 
+ 00019689  0x00004600 force  0x00000005 , 0x00000007 
+ 00019690  0x00004601 increase  0x00000002 , 0x00000039 
+ 00019691  0x00004603 branch  0x00004bf9 
+ 00019692  0x00004606 force  0x000000ff , 0x00000007 
+ 00019693  0x00004607 call  0x00004cf4 
+ 00019694  0x00004608 setarg  0x00000001 
+ 00019695  0x00004609 istore  0x00000001 , 0x0000000a 
+ 00019696  0x0000460a force  0x00000001 , 0x00000039 
+ 00019697  0x0000460b branch  0x00004ce3 
+ 00019698  0x0000460e force  0x0000000c , 0x0000000a 
+ 00019699  0x0000460f branch  0x00004cf7 
+ 00019700  0x00004612 force  0x00000008 , 0x0000000a 
+ 00019701  0x00004613 branch  0x00004cf7 
+ 00019702  0x00004616 force  0x00000006 , 0x0000000a 
+ 00019703  0x00004618 branch  0x00004bf5 
+ 00019704  0x0000461d pulse  0x0000000f 
+ 00019705  0x0000461e enable  0x00000009 
+ 00019706  0x00004620 ifetch  0x00000001 , 0x0000000a 
+ 00019707  0x00004621 inject  0x00000000 , 0x00000008 
+ 00019708  0x00004622 loop  0x00004cfa 
+ 00019709  0x00004623 enable  0x00000008 
+ 00019710  0x00004624 inject  0x00000000 , 0x00000010 
+ 00019711  0x00004625 disable  0x00000008 
+ 00019712  0x00004626 disable  0x00000009 
+ 00019713  0x00004627 disable  0x0000000f 
+ 00019714  0x00004628 byteswap  0x0000003f , 0x0000003f 
+ 00019715  0x00004629 rtn 
+ 00019716  0x0000462e jam  0x00000000 , 0x000041ce 
+ 00019717  0x0000462f rtn 
+ 00019718  0x00004631 fetch  0x00000006 , 0x000041d0 
+ 00019719  0x00004632 fetcht  0x00000006 , 0x00000040 
+ 00019720  0x00004633 isub  0x00000002 , 0x0000003e 
+ 00019721  0x00004634 rtn 
+ 00019722  0x0000463a fetch  0x00000001 , 0x0000004b 
+ 00019723  0x0000463b bbit1  0x00000002 , 0x00004d0f 
+ 00019724  0x0000463c call  0x000062ef 
+ 00019725  0x0000463d jam  0x00000008 , 0x0000007c 
+ 00019726  0x0000463e branch  0x00004d04 
+ 00019727  0x00004640 set0  0x00000002 , 0x0000003f 
+ 00019728  0x00004641 store  0x00000001 , 0x0000004b 
+ 00019729  0x00004642 call  0x00006001 
+ 00019730  0x00004643 setarg  0x00000000 
+ 00019731  0x00004644 setflag  0x00000029 , 0x00000001 , 0x0000003f 
+ 00019732  0x00004645 store  0x00000001 , 0x0000007f 
+ 00019733  0x00004646 branch  0x00004d04 
+ 00019734  0x00004647 rtn 
+ 00019735  0x00004649 jam  0x00000017 , 0x0000007c 
+ 00019736  0x0000464a arg  0x000004d9 , 0x00000005 
+ 00019737  0x0000464b setarg  0x00000000 
+ 00019738  0x0000464c isolate1  0x0000001b , 0x00000028 
+ 00019739  0x0000464d setflag  0x00000001 , 0x00000001 , 0x0000003f 
+ 00019740  0x0000464e istore  0x00000001 , 0x00000005 
+ 00019741  0x0000464f setarg  0x00000000 
+ 00019742  0x00004650 istore  0x00000002 , 0x00000005 
+ 00019743  0x00004651 fetch  0x00000002 , 0x000041e3 
+ 00019744  0x00004652 istore  0x00000002 , 0x00000005 
+ 00019745  0x00004653 fetch  0x00000001 , 0x000041e5 
+ 00019746  0x00004654 istore  0x00000002 , 0x00000005 
+ 00019747  0x00004655 fetch  0x00000001 , 0x000041e7 
+ 00019748  0x00004656 istore  0x00000002 , 0x00000005 
+ 00019749  0x00004657 branch  0x00004d04 
+ 00019750  0x0000465a jam  0x00000018 , 0x0000007c 
+ 00019751  0x0000465b branch  0x00004d04 
+ 00019752  0x0000465e call  0x00006899 
+ 00019753  0x0000465f rtn  0x00000001 
+ 00019754  0x00004660 arg  0x00000007 , 0x00000002 
+ 00019755  0x00004661 call  0x0000681d 
+ 00019756  0x00004662 nbranch  0x00004d2f , 0x00000001 
+ 00019757  0x00004663 jam  0x00000001 , 0x00004245 
+ 00019758  0x00004664 rtn 
+ 00019759  0x00004666 fetch  0x00000001 , 0x00004245 
+ 00019760  0x00004667 rtnne  0x00000001 
+ 00019761  0x00004668 call  0x00004c62 
+ 00019762  0x00004669 branch  0x00004cec 
+ 00019763  0x00004678 bpatchx  0x00000005 , 0x00004020 
+ 00019764  0x00004679 fetch  0x00000002 , 0x00000264 
+ 00019765  0x0000467a copy  0x0000003f , 0x00000006 
+ 00019766  0x0000467b ifetch  0x00000001 , 0x00000006 
+ 00019767  0x0000467c and  0x0000003f , 0x0000000f , 0x00000002 
+ 00019768  0x0000467d rshift4  0x0000003f , 0x0000003f 
+ 00019769  0x0000467e beq  0x00000009 , 0x00004d53 
+ 00019770  0x0000467f beq  0x00000007 , 0x00004d53 
+ 00019771  0x00004680 beq  0x0000000a , 0x00004d5f 
+ 00019772  0x00004681 beq  0x00000005 , 0x00004d4b 
+ 00019773  0x00004682 beq  0x00000001 , 0x00004d3f 
+ 00019774  0x00004683 rtn 
+ 00019775  0x00004686 copy  0x00000002 , 0x0000003f 
+ 00019776  0x00004687 beq  0x00000005 , 0x00004d43 
+ 00019777  0x00004688 beq  0x00000003 , 0x00004d4a 
+ 00019778  0x00004689 rtn 
+ 00019779  0x0000468c jam  0x00000027 , 0x00000a99 
+ 00019780  0x0000468d call  0x00007d86 
+ 00019781  0x0000468e fetch  0x00000001 , 0x00004092 
+ 00019782  0x0000468f rtnbit0  0x00000006 
+ 00019783  0x00004690 copy  0x00000002 , 0x0000003f 
+ 00019784  0x00004691 beq  0x00000005 , 0x0000438e 
+ 00019785  0x00004692 rtn 
+ 00019786  0x00004694 rtn 
+ 00019787  0x00004697 call  0x00004d5f 
+ 00019788  0x00004698 arg  0x00000001 , 0x00000011 
+ 00019789  0x00004699 call  0x00004d63 
+ 00019790  0x0000469a fetch  0x00000002 , 0x0000424c 
+ 00019791  0x0000469b istore  0x00000002 , 0x00000005 
+ 00019792  0x0000469c setarg  0x00000000 
+ 00019793  0x0000469d istore  0x00000001 , 0x00000005 
+ 00019794  0x0000469e rtn 
+ 00019795  0x000046a1 arg  0x00000001 , 0x00000011 
+ 00019796  0x000046a2 call  0x00004d63 
+ 00019797  0x000046a3 fetch  0x00000002 , 0x0000424c 
+ 00019798  0x000046a4 istore  0x00000002 , 0x00000005 
+ 00019799  0x000046a5 setarg  0x00000000 
+ 00019800  0x000046a6 istore  0x00000001 , 0x00000005 
+ 00019801  0x000046a7 jam  0x00000001 , 0x00000a8e 
+ 00019802  0x000046a8 fetch  0x00000001 , 0x00004252 
+ 00019803  0x000046a9 set1  0x00000006 
+ 00019804  0x000046aa store  0x00000001 , 0x00004252 
+ 00019805  0x000046ab jam  0x00000012 , 0x00000a99 
+ 00019806  0x000046ac branch  0x00007d86 
+ 00019807  0x000046af ifetch  0x00000001 , 0x00000006 
+ 00019808  0x000046b0 beq  0x00000001 , 0x00004d62 
+ 00019809  0x000046b1 rtn 
+ 00019810  0x000046b4 rtn 
+ 00019811  0x000046b8 call  0x00005240 
+ 00019812  0x000046b9 copy  0x00000011 , 0x00000002 
+ 00019813  0x000046ba storet  0x00000001 , 0x00000a8e 
+ 00019814  0x000046bb copy  0x0000003f , 0x00000005 
+ 00019815  0x000046bc copy  0x00000011 , 0x0000003f 
+ 00019816  0x000046bd istore  0x00000002 , 0x00000005 
+ 00019817  0x000046be rtn 
+ 00019818  0x000046d0 branch  0x00004d6f , 0x0000002b 
+ 00019819  0x000046d2 setarg  0x00004365 
+ 00019820  0x000046d3 arg  0x00004246 , 0x00000005 
+ 00019821  0x000046d4 isub  0x00000005 , 0x00000039 
+ 00019822  0x000046d5 call  0x00007ed4 
+ 00019823  0x000046d7 bpatchx  0x00000006 , 0x00004020 
+ 00019824  0x000046d8 setarg  0x00000551 
+ 00019825  0x000046d9 arg  0x00000511 , 0x00000005 
+ 00019826  0x000046da isub  0x00000005 , 0x00000039 
+ 00019827  0x000046db call  0x00007ed4 
+ 00019828  0x000046dc setarg  0x000002c9 
+ 00019829  0x000046dd arg  0x0000025d , 0x00000005 
+ 00019830  0x000046de isub  0x00000005 , 0x00000039 
+ 00019831  0x000046df call  0x00007ed4 
+ 00019832  0x000046e0 branch  0x00005318 
+ 00019833  0x000046e3 bpatchx  0x00000007 , 0x00004020 
+ 00019834  0x000046e4 copy  0x00000006 , 0x00000002 
+ 00019835  0x000046e7 copy  0x00000002 , 0x00000006 
+ 00019836  0x000046e8 ifetch  0x00000002 , 0x00000006 
+ 00019837  0x000046e9 store  0x00000002 , 0x00000266 
+ 00019838  0x000046ea ifetch  0x00000002 , 0x00000006 
+ 00019839  0x000046eb store  0x00000002 , 0x00000268 
+ 00019840  0x000046ec deposit  0x00000006 
+ 00019841  0x000046ed store  0x00000002 , 0x00000264 
+ 00019842  0x000046ee fetch  0x00000001 , 0x00004681 
+ 00019843  0x000046ef beq  0x00000000 , 0x00004d85 
+ 00019844  0x000046f0 branch  0x000050ef 
+ 00019845  0x000046f3 fetch  0x00000002 , 0x00000266 
+ 00019846  0x000046f4 branch  0x00004dfc , 0x00000034 
+ 00019847  0x000046f5 bpatchx  0x00000008 , 0x00004021 
+ 00019848  0x000046f6 fetch  0x00000001 , 0x00000268 
+ 00019849  0x000046f7 beq  0x00000001 , 0x00004d9d 
+ 00019850  0x000046f9 beq  0x00000050 , 0x00004de0 
+ 00019851  0x000046fa beq  0x00000051 , 0x00004df5 
+ 00019852  0x000046fb beq  0x00000052 , 0x00004df3 
+ 00019853  0x000046fc beq  0x00000053 , 0x00004df3 
+ 00019854  0x000046fd branch  0x00004dfc 
+ 00019855  0x00004702 bpatchx  0x00000009 , 0x00004021 
+ 00019856  0x00004703 call  0x0000527e 
+ 00019857  0x00004704 fetch  0x00000001 , 0x00004256 
+ 00019858  0x00004705 beq  0x00000000 , 0x00004d9b 
+ 00019859  0x00004706 beq  0x00000001 , 0x00004d9b 
+ 00019860  0x00004707 beq  0x00000002 , 0x00004d9b 
+ 00019861  0x00004708 beq  0x00000003 , 0x00004d9b 
+ 00019862  0x00004709 beq  0x00000081 , 0x00004d9b 
+ 00019863  0x0000470a beq  0x000000c0 , 0x00004d9b 
+ 00019864  0x0000470b beq  0x00000080 , 0x00004d9b 
+ 00019865  0x0000470c beq  0x00000040 , 0x00004d9b 
+ 00019866  0x0000470d rtn 
+ 00019867  0x00004710 setarg  0x00000000 
+ 00019868  0x00004711 rtn 
+ 00019869  0x00004715 call  0x00004d8f 
+ 00019870  0x00004716 nrtn  0x00000034 
+ 00019871  0x00004718 call  0x000052b8 
+ 00019872  0x00004719 call  0x00004e01 
+ 00019873  0x0000471a fetcht  0x00000002 , 0x0000026f 
+ 00019874  0x0000471b branch  0x00004dfb , 0x00000034 
+ 00019875  0x0000471c call  0x000052c1 
+ 00019876  0x0000471d fetch  0x00000002 , 0x0000026f 
+ 00019877  0x0000471e istore  0x00000002 , 0x00000005 
+ 00019878  0x0000471f force  0x00000001 , 0x0000003f 
+ 00019879  0x00004720 istore  0x00000002 , 0x00000005 
+ 00019880  0x00004721 branch  0x00004dfc 
+ 00019881  0x00004724 fetch  0x00000001 , 0x00004364 
+ 00019882  0x00004725 rtn  0x00000034 
+ 00019883  0x00004726 copy  0x0000003f , 0x00000011 
+ 00019884  0x00004727 bpatchx  0x0000000a , 0x00004021 
+ 00019885  0x00004728 fetch  0x00000004 , 0x000002d5 
+ 00019886  0x00004729 arg  0x00000100 , 0x00000002 
+ 00019887  0x0000472a iadd  0x00000002 , 0x00000002 
+ 00019888  0x0000472b copy  0x00000022 , 0x0000003f 
+ 00019889  0x0000472c isub  0x00000002 , 0x0000003e 
+ 00019890  0x0000472d nrtn  0x00000002 
+ 00019891  0x0000472e jam  0x00000000 , 0x00004364 
+ 00019892  0x0000472f copy  0x00000011 , 0x0000003f 
+ 00019893  0x00004730 beq  0x00000050 , 0x00004db7 
+ 00019894  0x00004731 branch  0x00002a8c 
+ 00019895  0x00004733 arg  0x00000000 , 0x00000008 
+ 00019896  0x00004734 call  0x000052b8 
+ 00019897  0x00004735 call  0x00004e7a 
+ 00019898  0x00004736 call  0x000052c3 
+ 00019899  0x00004737 call  0x00007ea8 
+ 00019900  0x00004738 call  0x00004ead 
+ 00019901  0x00004739 call  0x000052c1 
+ 00019902  0x0000473b setarg  0x0000000c 
+ 00019903  0x0000473c istore  0x00000002 , 0x00000005 
+ 00019904  0x0000473d force  0x00000001 , 0x0000003f 
+ 00019905  0x0000473e istore  0x00000002 , 0x00000005 
+ 00019906  0x0000473f branch  0x00004dfc 
+ 00019907  0x00004744 bpatchx  0x0000000b , 0x00004021 
+ 00019908  0x00004745 fetch  0x00000002 , 0x00000275 
+ 00019909  0x00004746 increase  0x00000004 , 0x0000003f 
+ 00019910  0x00004747 rshift4  0x0000003f , 0x0000003f 
+ 00019911  0x00004748 rshift3  0x0000003f , 0x0000003f 
+ 00019912  0x00004749 add  0x0000003f , 0x00000001 , 0x00000002 
+ 00019913  0x0000474a arg  0x00004260 , 0x00000006 
+ 00019914  0x0000474b ifetch  0x00000003 , 0x00000006 
+ 00019915  0x0000474c rtn  0x00000034 
+ 00019916  0x0000474d store  0x00000003 , 0x00000ac2 
+ 00019917  0x0000474e fetch  0x00000001 , 0x00000ac2 
+ 00019918  0x0000474f copy  0x0000003f , 0x00000011 
+ 00019919  0x00004750 call  0x00004dd3 
+ 00019920  0x00004751 copy  0x00000012 , 0x0000003f 
+ 00019921  0x00004752 store  0x00000001 , 0x00004260 
+ 00019922  0x00004753 rtn 
+ 00019923  0x00004756 arg  0x00000000 , 0x00000007 
+ 00019924  0x00004757 arg  0x00000000 , 0x00000012 
+ 00019925  0x0000475a sub  0x00000007 , 0x00000007 , 0x0000003e 
+ 00019926  0x0000475b nrtn  0x00000002 
+ 00019927  0x0000475c qisolate1  0x00000011 
+ 00019928  0x0000475d branch  0x00004dda , 0x00000001 
+ 00019929  0x0000475e branch  0x00004dde 
+ 00019930  0x00004761 copy  0x00000002 , 0x0000003f 
+ 00019931  0x00004762 branch  0x00004dde , 0x00000034 
+ 00019932  0x00004763 qset1  0x00000012 
+ 00019933  0x00004764 increase  0xffffffff , 0x00000002 
+ 00019934  0x00004767 increase  0x00000001 , 0x00000007 
+ 00019935  0x00004768 branch  0x00004dd5 
+ 00019936  0x0000476b call  0x00005274 
+ 00019937  0x0000476c nrtn  0x00000034 
+ 00019938  0x0000476d call  0x00004d8f 
+ 00019939  0x0000476e nrtn  0x00000034 
+ 00019940  0x0000476f call  0x000052c5 
+ 00019941  0x00004770 call  0x00006e11 
+ 00019942  0x00004771 call  0x00004dc3 
+ 00019943  0x00004772 branch  0x00004dec 
+ 00019944  0x00004776 call  0x00005274 
+ 00019945  0x00004777 nrtn  0x00000034 
+ 00019946  0x00004778 call  0x000052c5 
+ 00019947  0x00004779 call  0x00006e11 
+ 00019948  0x0000477b call  0x000052ce 
+ 00019949  0x0000477c fetch  0x00000002 , 0x00000275 
+ 00019950  0x0000477d branch  0x00004dfb , 0x00000034 
+ 00019951  0x0000477e istore  0x00000002 , 0x00000005 
+ 00019952  0x0000477f fetch  0x00000002 , 0x00004248 
+ 00019953  0x00004780 istore  0x00000002 , 0x00000005 
+ 00019954  0x00004781 branch  0x00004dfc 
+ 00019955  0x00004784 call  0x00004d33 
+ 00019956  0x00004785 branch  0x00004dfc 
+ 00019957  0x00004788 bpatchx  0x0000000c , 0x00004021 
+ 00019958  0x00004789 jam  0x00000000 , 0x00000284 
+ 00019959  0x0000478a call  0x00006a8a 
+ 00019960  0x0000478b fetch  0x00000001 , 0x00000284 
+ 00019961  0x0000478c rtneq  0x00000001 
+ 00019962  0x0000478d branch  0x00004dfc 
+ 00019963  0x0000478f call  0x00005264 
+ 00019964  0x00004792 setarg  0x00000000 
+ 00019965  0x00004793 store  0x00000002 , 0x00000266 
+ 00019966  0x00004794 store  0x00000002 , 0x00000268 
+ 00019967  0x00004795 jam  0x00000001 , 0x0000026a 
+ 00019968  0x00004796 rtn 
+ 00019969  0x00004799 bpatchx  0x0000000d , 0x00004021 
+ 00019970  0x0000479a call  0x000052c3 
+ 00019971  0x0000479b force  0x00000000 , 0x00000012 
+ 00019972  0x0000479c fetch  0x00000002 , 0x00000266 
+ 00019973  0x0000479d copy  0x0000003f , 0x00000013 
+ 00019974  0x0000479e fetch  0x00000002 , 0x00000264 
+ 00019975  0x0000479f iforce  0x00000006 
+ 00019976  0x000047a1 call  0x00004e10 
+ 00019977  0x000047a2 deposit  0x00000013 
+ 00019978  0x000047a3 increase  0xfffffffc , 0x00000013 
+ 00019979  0x000047a4 increase  0xfffffffc , 0x0000003f 
+ 00019980  0x000047a5 nbranch  0x00004e08 , 0x00000034 
+ 00019981  0x000047a6 copy  0x00000012 , 0x0000003f 
+ 00019982  0x000047a7 store  0x00000002 , 0x0000026f 
+ 00019983  0x000047a8 rtn 
+ 00019984  0x000047ab bpatchx  0x0000000e , 0x00004021 
+ 00019985  0x000047ac ifetch  0x00000001 , 0x00000006 
+ 00019986  0x000047ad beq  0x00000001 , 0x00004e49 
+ 00019987  0x000047ae beq  0x00000002 , 0x00004e51 
+ 00019988  0x000047af beq  0x00000003 , 0x00004ed5 
+ 00019989  0x000047b0 beq  0x00000004 , 0x00004f05 
+ 00019990  0x000047b1 beq  0x00000005 , 0x00004fa2 
+ 00019991  0x000047b2 beq  0x00000006 , 0x00004fcb 
+ 00019992  0x000047b3 beq  0x00000007 , 0x0000501b 
+ 00019993  0x000047b4 beq  0x00000008 , 0x00005050 
+ 00019994  0x000047b5 beq  0x00000009 , 0x00005060 
+ 00019995  0x000047b6 beq  0x0000000a , 0x00004e1f 
+ 00019996  0x000047b7 beq  0x0000000b , 0x00005061 
+ 00019997  0x000047b8 call  0x00005062 
+ 00019998  0x000047ba rtn 
+ 00019999  0x000047bd ifetch  0x00000001 , 0x00000006 
+ 00020000  0x000047be copy  0x0000003f , 0x00000007 
+ 00020001  0x000047bf ifetch  0x00000002 , 0x00000006 
+ 00020002  0x000047c0 copy  0x0000003f , 0x00000011 
+ 00020003  0x000047c1 copy  0x00000013 , 0x0000003f 
+ 00020004  0x000047c2 isub  0x00000011 , 0x00000013 
+ 00020005  0x000047c3 setarg  0x0000000b 
+ 00020006  0x000047c4 istore  0x00000001 , 0x00000005 
+ 00020007  0x000047c5 copy  0x00000007 , 0x0000003f 
+ 00020008  0x000047c6 istore  0x00000001 , 0x00000005 
+ 00020009  0x000047c7 ifetch  0x00000002 , 0x00000006 
+ 00020010  0x000047c9 beq  0x00000002 , 0x00004e2d 
+ 00020011  0x000047ca beq  0x00000003 , 0x00004e33 
+ 00020012  0x000047cb rtn 
+ 00020013  0x000047cd setarg  0x00020008 
+ 00020014  0x000047ce istore  0x00000006 , 0x00000005 
+ 00020015  0x000047cf setarg  0x00000280 
+ 00020016  0x000047d0 istore  0x00000004 , 0x00000005 
+ 00020017  0x000047d1 force  0x0000000c , 0x0000003f 
+ 00020018  0x000047d2 branch  0x00004e38 
+ 00020019  0x000047d4 setarg  0x0003000c 
+ 00020020  0x000047d5 istore  0x00000006 , 0x00000005 
+ 00020021  0x000047d6 setarg  0x00000006 
+ 00020022  0x000047d7 istore  0x00000008 , 0x00000005 
+ 00020023  0x000047d8 force  0x00000010 , 0x0000003f 
+ 00020024  0x000047da iadd  0x00000012 , 0x00000012 
+ 00020025  0x000047db branch  0x00004e1e 
+ 00020026  0x000047de ifetch  0x00000001 , 0x00000006 
+ 00020027  0x000047df copy  0x0000003f , 0x00000007 
+ 00020028  0x000047e0 ifetch  0x00000002 , 0x00000006 
+ 00020029  0x000047e1 copy  0x0000003f , 0x00000011 
+ 00020030  0x000047e2 ifetch  0x00000002 , 0x00000006 
+ 00020031  0x000047e3 store  0x00000002 , 0x00000aa2 
+ 00020032  0x000047e4 copy  0x00000013 , 0x0000003f 
+ 00020033  0x000047e5 isub  0x00000011 , 0x00000013 
+ 00020034  0x000047e6 call  0x000052c3 
+ 00020035  0x000047e7 setarg  0x0000000b 
+ 00020036  0x000047e8 istore  0x00000001 , 0x00000005 
+ 00020037  0x000047e9 copy  0x00000007 , 0x0000003f 
+ 00020038  0x000047ea istore  0x00000001 , 0x00000005 
+ 00020039  0x000047eb fetch  0x00000002 , 0x00000aa2 
+ 00020040  0x000047ec branch  0x00004e2a 
+ 00020041  0x000047f1 ifetch  0x00000001 , 0x00000006 
+ 00020042  0x000047f2 copy  0x0000003f , 0x00000007 
+ 00020043  0x000047f3 ifetch  0x00000002 , 0x00000006 
+ 00020044  0x000047f4 copy  0x0000003f , 0x00000011 
+ 00020045  0x000047f5 iadd  0x00000006 , 0x00000006 
+ 00020046  0x000047f6 copy  0x00000013 , 0x0000003f 
+ 00020047  0x000047f7 isub  0x00000011 , 0x00000013 
+ 00020048  0x000047f9 branch  0x00004e1e 
+ 00020049  0x000047fc call  0x00007ea8 
+ 00020050  0x000047ff call  0x00007ead 
+ 00020051  0x00004800 arg  0x00000000 , 0x00000008 
+ 00020052  0x00004801 ifetch  0x00000001 , 0x00000006 
+ 00020053  0x00004802 copy  0x0000003f , 0x00000007 
+ 00020054  0x00004803 ifetch  0x00000002 , 0x00000006 
+ 00020055  0x00004804 copy  0x0000003f , 0x00000011 
+ 00020056  0x00004805 ifetch  0x00000002 , 0x00000006 
+ 00020057  0x00004806 copy  0x0000003f , 0x00000002 
+ 00020058  0x00004807 ifetch  0x00000002 , 0x00000006 
+ 00020059  0x00004808 copy  0x0000003f , 0x0000000b 
+ 00020060  0x00004809 bpatchx  0x0000000f , 0x00004021 
+ 00020061  0x0000480a copy  0x00000002 , 0x0000003f 
+ 00020062  0x0000480b beq  0x00000001 , 0x00004e64 
+ 00020063  0x0000480c beq  0x00000003 , 0x00004e86 
+ 00020064  0x0000480d beq  0x00000011 , 0x00004e92 
+ 00020065  0x0000480e beq  0x00000013 , 0x00004e9d 
+ 00020066  0x0000480f call  0x00005062 
+ 00020067  0x00004810 branch  0x00004ed4 
+ 00020068  0x00004813 call  0x00007ea8 
+ 00020069  0x00004814 arg  0x00000050 , 0x00000002 
+ 00020070  0x00004815 fetch  0x00000002 , 0x00004248 
+ 00020071  0x00004816 nbranch  0x00004ece , 0x00000034 
+ 00020072  0x00004817 copy  0x0000000b , 0x0000003f 
+ 00020073  0x00004818 store  0x00000002 , 0x00004248 
+ 00020074  0x00004819 copy  0x00000022 , 0x0000003f 
+ 00020075  0x0000481a store  0x00000004 , 0x000002d5 
+ 00020076  0x0000481b call  0x00004e6e 
+ 00020077  0x0000481c branch  0x00004ea9 
+ 00020078  0x0000481f storet  0x00000002 , 0x000002d3 
+ 00020079  0x00004820 deposit  0x0000000b 
+ 00020080  0x00004821 store  0x00000002 , 0x000002c9 
+ 00020081  0x00004822 deposit  0x00000011 
+ 00020082  0x00004823 store  0x00000002 , 0x000002cb 
+ 00020083  0x00004824 deposit  0x00000012 
+ 00020084  0x00004825 store  0x00000002 , 0x000002cd 
+ 00020085  0x00004826 deposit  0x00000013 
+ 00020086  0x00004827 store  0x00000002 , 0x000002cf 
+ 00020087  0x00004828 deposit  0x00000007 
+ 00020088  0x00004829 store  0x00000002 , 0x000002d1 
+ 00020089  0x0000482a rtn 
+ 00020090  0x0000482d fetcht  0x00000002 , 0x000002d3 
+ 00020091  0x0000482e fetch  0x00000002 , 0x000002c9 
+ 00020092  0x0000482f copy  0x0000003f , 0x0000000b 
+ 00020093  0x00004830 fetch  0x00000002 , 0x000002cb 
+ 00020094  0x00004831 copy  0x0000003f , 0x00000011 
+ 00020095  0x00004832 fetch  0x00000002 , 0x000002cd 
+ 00020096  0x00004833 copy  0x0000003f , 0x00000012 
+ 00020097  0x00004834 fetch  0x00000002 , 0x000002cf 
+ 00020098  0x00004835 copy  0x0000003f , 0x00000013 
+ 00020099  0x00004836 fetch  0x00000002 , 0x000002d1 
+ 00020100  0x00004837 copy  0x0000003f , 0x00000007 
+ 00020101  0x00004838 rtn 
+ 00020102  0x0000483b call  0x00007ea8 
+ 00020103  0x0000483c setarg  0x00000051 
+ 00020104  0x0000483d arg  0x00000051 , 0x00000002 
+ 00020105  0x0000483e fetch  0x00000002 , 0x0000424a 
+ 00020106  0x0000483f nbranch  0x00004ece , 0x00000034 
+ 00020107  0x00004840 copy  0x0000000b , 0x0000003f 
+ 00020108  0x00004841 store  0x00000002 , 0x0000424a 
+ 00020109  0x00004842 fetch  0x00000001 , 0x00004251 
+ 00020110  0x00004843 set1  0x00000000 , 0x0000003f 
+ 00020111  0x00004844 set1  0x00000001 , 0x0000003f 
+ 00020112  0x00004845 store  0x00000001 , 0x00004251 
+ 00020113  0x00004846 branch  0x00004eb1 
+ 00020114  0x00004848 call  0x00007ea8 
+ 00020115  0x00004849 arg  0x00000052 , 0x00000002 
+ 00020116  0x0000484a fetch  0x00000002 , 0x0000424c 
+ 00020117  0x0000484b nbranch  0x00004ece , 0x00000034 
+ 00020118  0x0000484c copy  0x0000000b , 0x0000003f 
+ 00020119  0x0000484d store  0x00000002 , 0x0000424c 
+ 00020120  0x0000484e fetch  0x00000001 , 0x00004252 
+ 00020121  0x0000484f set1  0x00000000 , 0x0000003f 
+ 00020122  0x00004850 set1  0x00000001 , 0x0000003f 
+ 00020123  0x00004851 store  0x00000001 , 0x00004252 
+ 00020124  0x00004852 branch  0x00004eb1 
+ 00020125  0x00004854 call  0x00007ea8 
+ 00020126  0x00004855 deposit  0x0000001a 
+ 00020127  0x00004856 arg  0x00000053 , 0x00000002 
+ 00020128  0x00004857 fetch  0x00000002 , 0x0000424e 
+ 00020129  0x00004858 nbranch  0x00004ece , 0x00000034 
+ 00020130  0x00004859 copy  0x0000000b , 0x0000003f 
+ 00020131  0x0000485a store  0x00000002 , 0x0000424e 
+ 00020132  0x0000485b fetch  0x00000001 , 0x00004253 
+ 00020133  0x0000485c set1  0x00000000 , 0x0000003f 
+ 00020134  0x0000485d set1  0x00000001 , 0x0000003f 
+ 00020135  0x0000485e store  0x00000001 , 0x00004253 
+ 00020136  0x0000485f branch  0x00004eb1 
+ 00020137  0x00004862 setarg  0x00000001 
+ 00020138  0x00004863 store  0x00000002 , 0x0000027d 
+ 00020139  0x00004864 jam  0x00000050 , 0x00004364 
+ 00020140  0x00004865 branch  0x00004eb3 
+ 00020141  0x00004867 fetch  0x00000001 , 0x00004250 
+ 00020142  0x00004868 set1  0x00000000 , 0x0000003f 
+ 00020143  0x00004869 set1  0x00000001 , 0x0000003f 
+ 00020144  0x0000486a store  0x00000001 , 0x00004250 
+ 00020145  0x0000486c setarg  0x00000000 
+ 00020146  0x0000486d store  0x00000002 , 0x0000027d 
+ 00020147  0x0000486f bpatchx  0x00000010 , 0x00004022 
+ 00020148  0x00004870 call  0x00007ead 
+ 00020149  0x00004871 setarg  0x00000003 
+ 00020150  0x00004872 istore  0x00000001 , 0x00000005 
+ 00020151  0x00004873 copy  0x00000007 , 0x0000003f 
+ 00020152  0x00004874 istore  0x00000001 , 0x00000005 
+ 00020153  0x00004875 setarg  0x00000008 
+ 00020154  0x00004876 istore  0x00000002 , 0x00000005 
+ 00020155  0x00004877 copy  0x00000002 , 0x0000003f 
+ 00020156  0x00004878 istore  0x00000002 , 0x00000005 
+ 00020157  0x00004879 copy  0x0000000b , 0x0000003f 
+ 00020158  0x0000487a istore  0x00000002 , 0x00000005 
+ 00020159  0x0000487b fetch  0x00000002 , 0x0000027d 
+ 00020160  0x0000487c beq  0x00000001 , 0x00004ec9 
+ 00020161  0x0000487d isolate0  0x00000000 , 0x00000008 
+ 00020162  0x0000487e branch  0x00004ec4 , 0x00000001 
+ 00020163  0x0000487f setarg  0x00000004 
+ 00020164  0x00004881 istore  0x00000002 , 0x00000005 
+ 00020165  0x00004882 force  0x00000000 , 0x0000003f 
+ 00020166  0x00004883 istore  0x00000002 , 0x00000005 
+ 00020167  0x00004884 setarg  0x0000000c 
+ 00020168  0x00004885 branch  0x00004ed0 
+ 00020169  0x00004887 istore  0x00000002 , 0x00000005 
+ 00020170  0x00004888 force  0x00000002 , 0x0000003f 
+ 00020171  0x00004889 istore  0x00000002 , 0x00000005 
+ 00020172  0x0000488a setarg  0x0000000c 
+ 00020173  0x0000488b branch  0x00004ed0 
+ 00020174  0x0000488e set1  0x00000000 , 0x00000008 
+ 00020175  0x0000488f branch  0x00004eb1 
+ 00020176  0x00004891 iadd  0x00000012 , 0x00000012 
+ 00020177  0x00004892 copy  0x00000013 , 0x0000003f 
+ 00020178  0x00004893 isub  0x00000011 , 0x00000013 
+ 00020179  0x00004894 branch  0x00004ed4 
+ 00020180  0x00004896 branch  0x00004e1e 
+ 00020181  0x00004899 ifetch  0x00000001 , 0x00000006 
+ 00020182  0x0000489a copy  0x0000003f , 0x00000007 
+ 00020183  0x0000489b ifetch  0x00000002 , 0x00000006 
+ 00020184  0x0000489c copy  0x0000003f , 0x00000011 
+ 00020185  0x0000489d copy  0x00000013 , 0x0000003f 
+ 00020186  0x0000489e isub  0x00000011 , 0x00000013 
+ 00020187  0x0000489f ifetch  0x00000002 , 0x00000006 
+ 00020188  0x000048a0 copy  0x0000003f , 0x0000000b 
+ 00020189  0x000048a1 ifetch  0x00000002 , 0x00000006 
+ 00020190  0x000048a2 copy  0x0000003f , 0x00000002 
+ 00020191  0x000048a3 bpatchx  0x00000011 , 0x00004022 
+ 00020192  0x000048a4 setarg  0x00000050 
+ 00020193  0x000048a5 isub  0x00000002 , 0x0000003e 
+ 00020194  0x000048a6 branch  0x00004eed , 0x00000005 
+ 00020195  0x000048a7 setarg  0x00000051 
+ 00020196  0x000048a8 isub  0x00000002 , 0x0000003e 
+ 00020197  0x000048a9 branch  0x00004ef3 , 0x00000005 
+ 00020198  0x000048aa setarg  0x00000052 
+ 00020199  0x000048ab isub  0x00000002 , 0x0000003e 
+ 00020200  0x000048ac branch  0x00004eff , 0x00000005 
+ 00020201  0x000048ad setarg  0x00000053 
+ 00020202  0x000048ae isub  0x00000002 , 0x0000003e 
+ 00020203  0x000048af branch  0x00004ef9 , 0x00000005 
+ 00020204  0x000048b0 rtn 
+ 00020205  0x000048b3 copy  0x0000000b , 0x0000003f 
+ 00020206  0x000048b4 store  0x00000002 , 0x00004248 
+ 00020207  0x000048b5 fetch  0x00000001 , 0x00004250 
+ 00020208  0x000048b6 set1  0x00000001 , 0x0000003f 
+ 00020209  0x000048b7 store  0x00000001 , 0x00004250 
+ 00020210  0x000048b8 branch  0x00004e1e 
+ 00020211  0x000048ba copy  0x0000000b , 0x0000003f 
+ 00020212  0x000048bb store  0x00000002 , 0x0000424a 
+ 00020213  0x000048bc fetch  0x00000001 , 0x00004251 
+ 00020214  0x000048bd set1  0x00000001 , 0x0000003f 
+ 00020215  0x000048be store  0x00000001 , 0x00004251 
+ 00020216  0x000048bf rtn 
+ 00020217  0x000048c1 copy  0x0000000b , 0x0000003f 
+ 00020218  0x000048c2 store  0x00000002 , 0x0000424c 
+ 00020219  0x000048c3 fetch  0x00000001 , 0x00004253 
+ 00020220  0x000048c4 set1  0x00000001 , 0x0000003f 
+ 00020221  0x000048c5 store  0x00000001 , 0x00004253 
+ 00020222  0x000048c6 rtn 
+ 00020223  0x000048c8 copy  0x0000000b , 0x0000003f 
+ 00020224  0x000048c9 store  0x00000002 , 0x0000424e 
+ 00020225  0x000048ca fetch  0x00000001 , 0x00004252 
+ 00020226  0x000048cb set1  0x00000001 , 0x0000003f 
+ 00020227  0x000048cc store  0x00000001 , 0x00004252 
+ 00020228  0x000048cd rtn 
+ 00020229  0x000048d0 ifetch  0x00000001 , 0x00000006 
+ 00020230  0x000048d1 copy  0x0000003f , 0x00000007 
+ 00020231  0x000048d2 ifetch  0x00000002 , 0x00000006 
+ 00020232  0x000048d3 copy  0x0000003f , 0x00000011 
+ 00020233  0x000048d4 copy  0x00000013 , 0x0000003f 
+ 00020234  0x000048d5 isub  0x00000011 , 0x00000013 
+ 00020235  0x000048d6 ifetch  0x00000002 , 0x00000006 
+ 00020236  0x000048d7 copy  0x0000003f , 0x00000002 
+ 00020237  0x000048d8 copy  0x00000002 , 0x00000011 
+ 00020238  0x000048d9 bpatchx  0x00000012 , 0x00004022 
+ 00020239  0x000048da setarg  0x00000050 
+ 00020240  0x000048db isub  0x00000002 , 0x0000003e 
+ 00020241  0x000048dc branch  0x00004f1c , 0x00000005 
+ 00020242  0x000048dd setarg  0x00000051 
+ 00020243  0x000048de isub  0x00000002 , 0x0000003e 
+ 00020244  0x000048df branch  0x00004f3a , 0x00000005 
+ 00020245  0x000048e0 setarg  0x00000052 
+ 00020246  0x000048e1 isub  0x00000002 , 0x0000003e 
+ 00020247  0x000048e2 branch  0x00004f26 , 0x00000005 
+ 00020248  0x000048e3 setarg  0x00000053 
+ 00020249  0x000048e4 isub  0x00000002 , 0x0000003e 
+ 00020250  0x000048e5 branch  0x00004f30 , 0x00000005 
+ 00020251  0x000048e6 branch  0x00005062 
+ 00020252  0x000048e9 copy  0x00000005 , 0x0000000b 
+ 00020253  0x000048ea fetch  0x00000001 , 0x00004250 
+ 00020254  0x000048eb set1  0x00000004 , 0x0000003f 
+ 00020255  0x000048ec set1  0x00000003 , 0x0000003f 
+ 00020256  0x000048ee store  0x00000001 , 0x00004250 
+ 00020257  0x000048ef copy  0x0000000b , 0x00000005 
+ 00020258  0x000048f0 arg  0x00000050 , 0x0000000b 
+ 00020259  0x000048f1 fetch  0x00000002 , 0x00004248 
+ 00020260  0x000048f2 copy  0x0000003f , 0x00000002 
+ 00020261  0x000048f3 branch  0x00004f43 
+ 00020262  0x000048f5 copy  0x00000005 , 0x0000000b 
+ 00020263  0x000048f6 fetch  0x00000001 , 0x00004252 
+ 00020264  0x000048f7 set1  0x00000004 , 0x0000003f 
+ 00020265  0x000048f8 set1  0x00000003 , 0x0000003f 
+ 00020266  0x000048fa store  0x00000001 , 0x00004252 
+ 00020267  0x000048fb copy  0x0000000b , 0x00000005 
+ 00020268  0x000048fc arg  0x00000052 , 0x0000000b 
+ 00020269  0x000048fd fetch  0x00000002 , 0x0000424c 
+ 00020270  0x000048fe copy  0x0000003f , 0x00000002 
+ 00020271  0x000048ff branch  0x00004f43 
+ 00020272  0x00004901 copy  0x00000005 , 0x0000000b 
+ 00020273  0x00004902 fetch  0x00000001 , 0x00004253 
+ 00020274  0x00004903 set1  0x00000004 , 0x0000003f 
+ 00020275  0x00004904 set1  0x00000003 , 0x0000003f 
+ 00020276  0x00004906 store  0x00000001 , 0x00004253 
+ 00020277  0x00004907 copy  0x0000000b , 0x00000005 
+ 00020278  0x00004908 arg  0x00000053 , 0x0000000b 
+ 00020279  0x00004909 fetch  0x00000002 , 0x0000424e 
+ 00020280  0x0000490a copy  0x0000003f , 0x00000002 
+ 00020281  0x0000490b branch  0x00004f43 
+ 00020282  0x0000490d copy  0x00000005 , 0x0000000b 
+ 00020283  0x0000490e fetch  0x00000001 , 0x00004251 
+ 00020284  0x0000490f set1  0x00000004 , 0x0000003f 
+ 00020285  0x00004910 set1  0x00000003 , 0x0000003f 
+ 00020286  0x00004912 store  0x00000001 , 0x00004251 
+ 00020287  0x00004914 copy  0x0000000b , 0x00000005 
+ 00020288  0x00004915 arg  0x00000051 , 0x0000000b 
+ 00020289  0x00004916 fetch  0x00000002 , 0x0000424a 
+ 00020290  0x00004917 copy  0x0000003f , 0x00000002 
+ 00020291  0x00004919 bpatchx  0x00000013 , 0x00004022 
+ 00020292  0x0000491a setarg  0x00000005 
+ 00020293  0x0000491b istore  0x00000001 , 0x00000005 
+ 00020294  0x0000491c copy  0x00000007 , 0x0000003f 
+ 00020295  0x0000491d istore  0x00000001 , 0x00000005 
+ 00020296  0x0000491e setarg  0x00000006 
+ 00020297  0x0000491f istore  0x00000002 , 0x00000005 
+ 00020298  0x00004920 copy  0x00000002 , 0x0000003f 
+ 00020299  0x00004921 istore  0x00000002 , 0x00000005 
+ 00020300  0x00004922 force  0x00000000 , 0x0000003f 
+ 00020301  0x00004923 istore  0x00000002 , 0x00000005 
+ 00020302  0x00004924 force  0x00000000 , 0x0000003f 
+ 00020303  0x00004925 istore  0x00000002 , 0x00000005 
+ 00020304  0x00004926 force  0x0000000a , 0x0000003f 
+ 00020305  0x00004927 iadd  0x00000012 , 0x00000012 
+ 00020306  0x00004929 storet  0x00000002 , 0x00000282 
+ 00020307  0x0000492a copy  0x00000007 , 0x0000003f 
+ 00020308  0x0000492b store  0x00000001 , 0x00000281 
+ 00020309  0x0000492c force  0x00000050 , 0x0000003f 
+ 00020310  0x0000492d icompare  0x000000ff , 0x0000000b 
+ 00020311  0x0000492e branch  0x00004f59 , 0x00000001 
+ 00020312  0x0000492f increase  0x00000001 , 0x0000003f 
+ 00020313  0x00004932 rtn 
+ 00020314  0x00004934 disable  0x00000028 
+ 00020315  0x00004935 rtnbit1  0x00000002 , 0x0000003f 
+ 00020316  0x00004936 rtnbit0  0x00000000 , 0x0000003f 
+ 00020317  0x00004937 rtnbit0  0x00000001 , 0x0000003f 
+ 00020318  0x00004938 set1  0x00000002 , 0x0000003f 
+ 00020319  0x00004939 copy  0x00000006 , 0x00000005 
+ 00020320  0x0000493a increase  0xffffffff , 0x00000005 
+ 00020321  0x0000493b istore  0x00000001 , 0x00000005 
+ 00020322  0x0000493c enable  0x00000028 
+ 00020323  0x0000493d rtn 
+ 00020324  0x00004940 fetch  0x00000001 , 0x00004250 
+ 00020325  0x00004941 call  0x00004f5a 
+ 00020326  0x00004942 nbranch  0x00004f6b , 0x00000028 
+ 00020327  0x00004943 jam  0x00000050 , 0x00000280 
+ 00020328  0x00004944 fetch  0x00000002 , 0x00004248 
+ 00020329  0x00004945 store  0x00000002 , 0x00000282 
+ 00020330  0x00004946 branch  0x00004f7f 
+ 00020331  0x00004948 fetch  0x00000001 , 0x00004251 
+ 00020332  0x00004949 call  0x00004f5a 
+ 00020333  0x0000494a nbranch  0x00004f72 , 0x00000028 
+ 00020334  0x0000494b jam  0x00000051 , 0x00000280 
+ 00020335  0x0000494c fetch  0x00000002 , 0x0000424a 
+ 00020336  0x0000494d store  0x00000002 , 0x00000282 
+ 00020337  0x0000494e branch  0x00004f7f 
+ 00020338  0x00004950 fetch  0x00000001 , 0x00004252 
+ 00020339  0x00004951 call  0x00004f5a 
+ 00020340  0x00004952 nbranch  0x00004f79 , 0x00000028 
+ 00020341  0x00004953 jam  0x00000052 , 0x00000280 
+ 00020342  0x00004954 fetch  0x00000002 , 0x0000424c 
+ 00020343  0x00004955 store  0x00000002 , 0x00000282 
+ 00020344  0x00004956 branch  0x00004f7f 
+ 00020345  0x00004958 fetch  0x00000001 , 0x00004253 
+ 00020346  0x00004959 call  0x00004f5a 
+ 00020347  0x0000495a nrtn  0x00000028 
+ 00020348  0x0000495b jam  0x00000053 , 0x00000280 
+ 00020349  0x0000495c fetch  0x00000002 , 0x0000424e 
+ 00020350  0x0000495d store  0x00000002 , 0x00000282 
+ 00020351  0x00004961 bpatchx  0x00000014 , 0x00004022 
+ 00020352  0x00004962 call  0x0000523a 
+ 00020353  0x00004963 call  0x000052b8 
+ 00020354  0x00004964 force  0x00000000 , 0x00000012 
+ 00020355  0x00004965 call  0x000052c3 
+ 00020356  0x00004966 force  0x00000004 , 0x0000003f 
+ 00020357  0x00004967 istore  0x00000001 , 0x00000005 
+ 00020358  0x00004968 fetch  0x00000001 , 0x00004255 
+ 00020359  0x00004969 istore  0x00000001 , 0x00000005 
+ 00020360  0x0000496a setarg  0x00000008 
+ 00020361  0x0000496b istore  0x00000002 , 0x00000005 
+ 00020362  0x0000496c fetch  0x00000002 , 0x00000282 
+ 00020363  0x0000496d istore  0x00000002 , 0x00000005 
+ 00020364  0x0000496e setarg  0x00000000 
+ 00020365  0x0000496f istore  0x00000002 , 0x00000005 
+ 00020366  0x00004970 force  0x00000001 , 0x0000003f 
+ 00020367  0x00004971 istore  0x00000001 , 0x00000005 
+ 00020368  0x00004972 force  0x00000002 , 0x0000003f 
+ 00020369  0x00004973 istore  0x00000001 , 0x00000005 
+ 00020370  0x00004974 fetch  0x00000001 , 0x00000280 
+ 00020371  0x00004975 beq  0x00000051 , 0x00004f97 
+ 00020372  0x00004976 setarg  0x00000030 
+ 00020373  0x00004977 istore  0x00000002 , 0x00000005 
+ 00020374  0x00004978 branch  0x00004f99 
+ 00020375  0x0000497a setarg  0x000003e3 
+ 00020376  0x0000497b istore  0x00000002 , 0x00000005 
+ 00020377  0x0000497d arg  0x0000000c , 0x00000002 
+ 00020378  0x0000497e storet  0x00000002 , 0x0000026f 
+ 00020379  0x0000497f call  0x000052c1 
+ 00020380  0x00004980 fetch  0x00000002 , 0x0000026f 
+ 00020381  0x00004981 istore  0x00000002 , 0x00000005 
+ 00020382  0x00004982 force  0x00000001 , 0x0000003f 
+ 00020383  0x00004983 istore  0x00000002 , 0x00000005 
+ 00020384  0x00004984 jam  0x00000000 , 0x00000280 
+ 00020385  0x00004986 branch  0x00004e1e 
+ 00020386  0x00004989 increase  0x00000001 , 0x00000006 
+ 00020387  0x0000498a ifetch  0x00000002 , 0x00000006 
+ 00020388  0x0000498b copy  0x0000003f , 0x00000011 
+ 00020389  0x0000498c copy  0x00000013 , 0x0000003f 
+ 00020390  0x0000498d isub  0x00000011 , 0x00000013 
+ 00020391  0x0000498e ifetch  0x00000002 , 0x00000006 
+ 00020392  0x0000498f copy  0x0000003f , 0x00000011 
+ 00020393  0x00004990 bpatchx  0x00000015 , 0x00004022 
+ 00020394  0x00004991 setarg  0x00000050 
+ 00020395  0x00004992 isub  0x00000011 , 0x0000003e 
+ 00020396  0x00004993 branch  0x00004fba , 0x00000005 
+ 00020397  0x00004994 setarg  0x00000051 
+ 00020398  0x00004995 isub  0x00000011 , 0x0000003e 
+ 00020399  0x00004996 branch  0x00004fbe , 0x00000005 
+ 00020400  0x00004997 setarg  0x00000052 
+ 00020401  0x00004998 isub  0x00000011 , 0x0000003e 
+ 00020402  0x00004999 branch  0x00004fc2 , 0x00000005 
+ 00020403  0x0000499a setarg  0x00000053 
+ 00020404  0x0000499b isub  0x00000011 , 0x0000003e 
+ 00020405  0x0000499c branch  0x00004fc6 , 0x00000005 
+ 00020406  0x0000499d increase  0x00000002 , 0x00000006 
+ 00020407  0x0000499e ifetch  0x00000002 , 0x00000006 
+ 00020408  0x0000499f iforce  0x0000003e 
+ 00020409  0x000049a0 branch  0x00004e1e 
+ 00020410  0x000049a2 fetch  0x00000001 , 0x00004250 
+ 00020411  0x000049a3 set1  0x00000005 , 0x0000003f 
+ 00020412  0x000049a4 store  0x00000001 , 0x00004250 
+ 00020413  0x000049a5 branch  0x00004e1e 
+ 00020414  0x000049a7 fetch  0x00000001 , 0x00004251 
+ 00020415  0x000049a8 set1  0x00000005 , 0x0000003f 
+ 00020416  0x000049a9 store  0x00000001 , 0x00004251 
+ 00020417  0x000049aa branch  0x00004e1e 
+ 00020418  0x000049ac fetch  0x00000001 , 0x00004252 
+ 00020419  0x000049ad set1  0x00000005 , 0x0000003f 
+ 00020420  0x000049ae store  0x00000001 , 0x00004252 
+ 00020421  0x000049af branch  0x00004e1e 
+ 00020422  0x000049b1 fetch  0x00000001 , 0x00004253 
+ 00020423  0x000049b2 set1  0x00000005 , 0x0000003f 
+ 00020424  0x000049b3 store  0x00000001 , 0x00004253 
+ 00020425  0x000049b4 jam  0x00000006 , 0x00000a99 
+ 00020426  0x000049b5 branch  0x00007d86 
+ 00020427  0x000049ba ifetch  0x00000001 , 0x00000006 
+ 00020428  0x000049bb copy  0x0000003f , 0x00000007 
+ 00020429  0x000049bc ifetch  0x00000002 , 0x00000006 
+ 00020430  0x000049bd copy  0x0000003f , 0x00000011 
+ 00020431  0x000049be copy  0x00000013 , 0x0000003f 
+ 00020432  0x000049bf isub  0x00000011 , 0x00000013 
+ 00020433  0x000049c0 ifetch  0x00000002 , 0x00000006 
+ 00020434  0x000049c1 copy  0x0000003f , 0x00000011 
+ 00020435  0x000049c2 ifetch  0x00000002 , 0x00000006 
+ 00020436  0x000049c3 copy  0x0000003f , 0x0000000b 
+ 00020437  0x000049c4 copy  0x00000011 , 0x00000002 
+ 00020438  0x000049c5 call  0x00007ea8 
+ 00020439  0x000049c6 bpatchx  0x00000016 , 0x00004022 
+ 00020440  0x000049c7 setarg  0x00000050 
+ 00020441  0x000049c8 isub  0x00000002 , 0x0000003e 
+ 00020442  0x000049c9 branch  0x00004ff2 , 0x00000005 
+ 00020443  0x000049ca setarg  0x00000051 
+ 00020444  0x000049cb isub  0x00000002 , 0x0000003e 
+ 00020445  0x000049cc branch  0x00005002 , 0x00000005 
+ 00020446  0x000049cd setarg  0x00000052 
+ 00020447  0x000049ce isub  0x00000002 , 0x0000003e 
+ 00020448  0x000049cf branch  0x00004fe6 , 0x00000005 
+ 00020449  0x000049d0 setarg  0x00000053 
+ 00020450  0x000049d1 isub  0x00000002 , 0x0000003e 
+ 00020451  0x000049d2 branch  0x00004fec , 0x00000005 
+ 00020452  0x000049d3 call  0x00005062 
+ 00020453  0x000049d4 branch  0x00005017 
+ 00020454  0x000049d6 copy  0x0000000b , 0x00000002 
+ 00020455  0x000049d7 fetch  0x00000002 , 0x0000424c 
+ 00020456  0x000049d8 isub  0x00000002 , 0x0000003e 
+ 00020457  0x000049d9 branch  0x00004ff8 , 0x00000005 
+ 00020458  0x000049da call  0x00005062 
+ 00020459  0x000049db branch  0x00005017 
+ 00020460  0x000049dd copy  0x0000000b , 0x00000002 
+ 00020461  0x000049de fetch  0x00000002 , 0x0000424e 
+ 00020462  0x000049df isub  0x00000002 , 0x0000003e 
+ 00020463  0x000049e0 branch  0x00004ffa , 0x00000005 
+ 00020464  0x000049e1 call  0x00005062 
+ 00020465  0x000049e2 branch  0x00005017 
+ 00020466  0x000049e5 copy  0x0000000b , 0x00000002 
+ 00020467  0x000049e6 fetch  0x00000002 , 0x00004248 
+ 00020468  0x000049e7 isub  0x00000002 , 0x0000003e 
+ 00020469  0x000049e8 branch  0x00004ffe , 0x00000005 
+ 00020470  0x000049e9 call  0x00005062 
+ 00020471  0x000049ea branch  0x00005017 
+ 00020472  0x000049ec call  0x00005079 
+ 00020473  0x000049ed branch  0x0000500a 
+ 00020474  0x000049ef call  0x0000507f 
+ 00020475  0x000049f0 fetch  0x00000002 , 0x0000424c 
+ 00020476  0x000049f1 branch  0x0000500a , 0x00000034 
+ 00020477  0x000049f9 branch  0x0000500a 
+ 00020478  0x000049fc call  0x00005074 
+ 00020479  0x000049fd fetch  0x00000001 , 0x00000288 
+ 00020480  0x000049fe nbranch  0x0000500a , 0x00000034 
+ 00020481  0x00004a01 branch  0x0000500a 
+ 00020482  0x00004a03 copy  0x0000000b , 0x00000002 
+ 00020483  0x00004a04 fetch  0x00000002 , 0x0000424a 
+ 00020484  0x00004a05 isub  0x00000002 , 0x0000003e 
+ 00020485  0x00004a06 branch  0x00005008 , 0x00000005 
+ 00020486  0x00004a07 call  0x00005062 
+ 00020487  0x00004a08 branch  0x00005017 
+ 00020488  0x00004a0a call  0x0000506f 
+ 00020489  0x00004a0b branch  0x0000500a 
+ 00020490  0x00004a0d call  0x00007ead 
+ 00020491  0x00004a0e setarg  0x00000007 
+ 00020492  0x00004a0f istore  0x00000001 , 0x00000005 
+ 00020493  0x00004a10 copy  0x00000007 , 0x0000003f 
+ 00020494  0x00004a11 istore  0x00000001 , 0x00000005 
+ 00020495  0x00004a12 setarg  0x00000004 
+ 00020496  0x00004a13 istore  0x00000002 , 0x00000005 
+ 00020497  0x00004a14 copy  0x00000011 , 0x0000003f 
+ 00020498  0x00004a15 istore  0x00000002 , 0x00000005 
+ 00020499  0x00004a16 copy  0x0000000b , 0x0000003f 
+ 00020500  0x00004a17 istore  0x00000002 , 0x00000005 
+ 00020501  0x00004a18 force  0x00000008 , 0x0000003f 
+ 00020502  0x00004a19 branch  0x00005019 
+ 00020503  0x00004a1b call  0x00007ead 
+ 00020504  0x00004a1c branch  0x00005019 
+ 00020505  0x00004a1e iadd  0x00000012 , 0x00000012 
+ 00020506  0x00004a1f branch  0x00004e1e 
+ 00020507  0x00004a21 ifetch  0x00000001 , 0x00000006 
+ 00020508  0x00004a22 copy  0x0000003f , 0x00000007 
+ 00020509  0x00004a23 ifetch  0x00000002 , 0x00000006 
+ 00020510  0x00004a24 copy  0x0000003f , 0x00000011 
+ 00020511  0x00004a25 copy  0x00000013 , 0x0000003f 
+ 00020512  0x00004a26 isub  0x00000011 , 0x00000013 
+ 00020513  0x00004a27 ifetch  0x00000002 , 0x00000006 
+ 00020514  0x00004a28 copy  0x0000003f , 0x0000000b 
+ 00020515  0x00004a29 ifetch  0x00000002 , 0x00000006 
+ 00020516  0x00004a2a copy  0x0000003f , 0x00000002 
+ 00020517  0x00004a2b call  0x00007ea8 
+ 00020518  0x00004a2c bpatchx  0x00000017 , 0x00004022 
+ 00020519  0x00004a2d setarg  0x00000050 
+ 00020520  0x00004a2e isub  0x00000002 , 0x0000003e 
+ 00020521  0x00004a2f branch  0x00005035 , 0x00000005 
+ 00020522  0x00004a30 setarg  0x00000051 
+ 00020523  0x00004a31 isub  0x00000002 , 0x0000003e 
+ 00020524  0x00004a32 branch  0x0000503b , 0x00000005 
+ 00020525  0x00004a33 setarg  0x00000052 
+ 00020526  0x00004a34 isub  0x00000002 , 0x0000003e 
+ 00020527  0x00004a35 branch  0x00005041 , 0x00000005 
+ 00020528  0x00004a36 setarg  0x00000053 
+ 00020529  0x00004a37 isub  0x00000002 , 0x0000003e 
+ 00020530  0x00004a38 branch  0x00005047 , 0x00000005 
+ 00020531  0x00004a39 call  0x00005062 
+ 00020532  0x00004a3a branch  0x0000504f 
+ 00020533  0x00004a3c copy  0x00000002 , 0x00000011 
+ 00020534  0x00004a3d copy  0x0000000b , 0x00000002 
+ 00020535  0x00004a3e fetch  0x00000002 , 0x00004248 
+ 00020536  0x00004a3f isub  0x00000002 , 0x0000003e 
+ 00020537  0x00004a40 call  0x00005074 , 0x00000005 
+ 00020538  0x00004a41 branch  0x0000504d 
+ 00020539  0x00004a43 copy  0x00000002 , 0x00000011 
+ 00020540  0x00004a44 copy  0x0000000b , 0x00000002 
+ 00020541  0x00004a45 fetch  0x00000002 , 0x0000424a 
+ 00020542  0x00004a46 isub  0x00000002 , 0x0000003e 
+ 00020543  0x00004a47 call  0x0000506f , 0x00000005 
+ 00020544  0x00004a48 branch  0x0000504d 
+ 00020545  0x00004a4a copy  0x00000002 , 0x00000011 
+ 00020546  0x00004a4b copy  0x0000000b , 0x00000002 
+ 00020547  0x00004a4c fetch  0x00000002 , 0x0000424c 
+ 00020548  0x00004a4d isub  0x00000002 , 0x0000003e 
+ 00020549  0x00004a4e call  0x00005079 , 0x00000005 
+ 00020550  0x00004a4f branch  0x0000504d 
+ 00020551  0x00004a51 copy  0x00000002 , 0x00000011 
+ 00020552  0x00004a52 copy  0x0000000b , 0x00000002 
+ 00020553  0x00004a53 fetch  0x00000002 , 0x0000424e 
+ 00020554  0x00004a54 isub  0x00000002 , 0x0000003e 
+ 00020555  0x00004a55 call  0x0000507f , 0x00000005 
+ 00020556  0x00004a56 branch  0x0000504d 
+ 00020557  0x00004a58 call  0x00007ead 
+ 00020558  0x00004a59 branch  0x00004e1e 
+ 00020559  0x00004a5b branch  0x00004e1e 
+ 00020560  0x00004a5f ifetch  0x00000001 , 0x00000006 
+ 00020561  0x00004a60 copy  0x0000003f , 0x00000007 
+ 00020562  0x00004a61 ifetch  0x00000002 , 0x00000006 
+ 00020563  0x00004a62 copy  0x0000003f , 0x00000011 
+ 00020564  0x00004a63 iadd  0x00000006 , 0x00000006 
+ 00020565  0x00004a64 setarg  0x00000009 
+ 00020566  0x00004a65 istore  0x00000001 , 0x00000005 
+ 00020567  0x00004a66 copy  0x00000007 , 0x0000003f 
+ 00020568  0x00004a67 istore  0x00000001 , 0x00000005 
+ 00020569  0x00004a68 force  0x00000000 , 0x0000003f 
+ 00020570  0x00004a69 istore  0x00000002 , 0x00000005 
+ 00020571  0x00004a6a force  0x00000004 , 0x0000003f 
+ 00020572  0x00004a6b iadd  0x00000012 , 0x00000012 
+ 00020573  0x00004a6c copy  0x00000013 , 0x0000003f 
+ 00020574  0x00004a6d isub  0x00000011 , 0x00000013 
+ 00020575  0x00004a6e branch  0x00004e1e 
+ 00020576  0x00004a70 branch  0x00004e1e 
+ 00020577  0x00004a73 branch  0x00004e1e 
+ 00020578  0x00004a75 force  0x00000000 , 0x00000012 
+ 00020579  0x00004a76 call  0x000052c3 
+ 00020580  0x00004a77 setarg  0x00000001 
+ 00020581  0x00004a78 istore  0x00000001 , 0x00000005 
+ 00020582  0x00004a79 copy  0x00000007 , 0x0000003f 
+ 00020583  0x00004a7a istore  0x00000001 , 0x00000005 
+ 00020584  0x00004a7b setarg  0x00000002 
+ 00020585  0x00004a7c istore  0x00000002 , 0x00000005 
+ 00020586  0x00004a7d setarg  0x00000000 
+ 00020587  0x00004a7e istore  0x00000002 , 0x00000005 
+ 00020588  0x00004a7f increase  0x00000006 , 0x00000012 
+ 00020589  0x00004a80 arg  0x00000004 , 0x00000013 
+ 00020590  0x00004a81 branch  0x00004e1e 
+ 00020591  0x00004a86 setarg  0x00000000 
+ 00020592  0x00004a87 store  0x00000002 , 0x0000027b 
+ 00020593  0x00004a88 store  0x00000002 , 0x0000424a 
+ 00020594  0x00004a89 jam  0x00000000 , 0x00004251 
+ 00020595  0x00004a8a rtn 
+ 00020596  0x00004a8c setarg  0x00000000 
+ 00020597  0x00004a8d store  0x00000002 , 0x00000275 
+ 00020598  0x00004a8e store  0x00000002 , 0x00004248 
+ 00020599  0x00004a8f jam  0x00000000 , 0x00004250 
+ 00020600  0x00004a90 rtn 
+ 00020601  0x00004a92 setarg  0x00000000 
+ 00020602  0x00004a93 store  0x00000002 , 0x0000424c 
+ 00020603  0x00004a94 jam  0x00000000 , 0x00004252 
+ 00020604  0x00004a95 fetch  0x00000001 , 0x00004253 
+ 00020605  0x00004a96 beq  0x00000000 , 0x00005085 
+ 00020606  0x00004a97 rtn 
+ 00020607  0x00004a9a setarg  0x00000000 
+ 00020608  0x00004a9b store  0x00000002 , 0x0000424e 
+ 00020609  0x00004a9c jam  0x00000000 , 0x00004253 
+ 00020610  0x00004a9d fetch  0x00000001 , 0x00004252 
+ 00020611  0x00004a9e beq  0x00000000 , 0x00005085 
+ 00020612  0x00004a9f rtn 
+ 00020613  0x00004aa2 jam  0x00000007 , 0x00000a99 
+ 00020614  0x00004aa3 branch  0x00007d86 
+ 00020615  0x00004aa6 fetch  0x00000001 , 0x0000027f 
+ 00020616  0x00004aa7 set0  0x00000000 , 0x0000003f 
+ 00020617  0x00004aa8 store  0x00000001 , 0x0000027f 
+ 00020618  0x00004aa9 fetch  0x00000002 , 0x0000424e 
+ 00020619  0x00004aaa rtn  0x00000034 
+ 00020620  0x00004aab call  0x000052b8 
+ 00020621  0x00004aac fetch  0x00000002 , 0x0000424e 
+ 00020622  0x00004aad copy  0x0000003f , 0x00000011 
+ 00020623  0x00004aae force  0x00000053 , 0x00000012 
+ 00020624  0x00004aaf branch  0x0000509a 
+ 00020625  0x00004ab1 fetch  0x00000001 , 0x0000027f 
+ 00020626  0x00004ab2 set0  0x00000007 , 0x0000003f 
+ 00020627  0x00004ab3 store  0x00000001 , 0x0000027f 
+ 00020628  0x00004ab4 fetch  0x00000002 , 0x0000424c 
+ 00020629  0x00004ab5 rtn  0x00000034 
+ 00020630  0x00004ab6 call  0x000052b8 
+ 00020631  0x00004ab7 fetch  0x00000002 , 0x0000424c 
+ 00020632  0x00004ab8 copy  0x0000003f , 0x00000011 
+ 00020633  0x00004ab9 force  0x00000052 , 0x00000012 
+ 00020634  0x00004abb call  0x0000523a 
+ 00020635  0x00004abc call  0x000052c3 
+ 00020636  0x00004abd force  0x00000006 , 0x0000003f 
+ 00020637  0x00004abe istore  0x00000001 , 0x00000005 
+ 00020638  0x00004abf fetch  0x00000001 , 0x00004255 
+ 00020639  0x00004ac0 istore  0x00000001 , 0x00000005 
+ 00020640  0x00004ac1 setarg  0x00000004 
+ 00020641  0x00004ac2 istore  0x00000002 , 0x00000005 
+ 00020642  0x00004ac3 copy  0x00000011 , 0x0000003f 
+ 00020643  0x00004ac4 istore  0x00000002 , 0x00000005 
+ 00020644  0x00004ac5 copy  0x00000012 , 0x0000003f 
+ 00020645  0x00004ac6 istore  0x00000002 , 0x00000005 
+ 00020646  0x00004ac7 force  0x00000008 , 0x00000002 
+ 00020647  0x00004ac8 branch  0x000050de 
+ 00020648  0x00004acb bpatchx  0x00000018 , 0x00004023 
+ 00020649  0x00004acc call  0x0000523a 
+ 00020650  0x00004acd call  0x000052c3 
+ 00020651  0x00004ace setarg  0x00000002 
+ 00020652  0x00004acf istore  0x00000001 , 0x00000005 
+ 00020653  0x00004ad0 fetch  0x00000001 , 0x00004255 
+ 00020654  0x00004ad1 istore  0x00000001 , 0x00000005 
+ 00020655  0x00004ad2 setarg  0x00000004 
+ 00020656  0x00004ad3 istore  0x00000002 , 0x00000005 
+ 00020657  0x00004ad4 copy  0x00000002 , 0x0000003f 
+ 00020658  0x00004ad5 istore  0x00000002 , 0x00000005 
+ 00020659  0x00004ad6 copy  0x0000000b , 0x0000003f 
+ 00020660  0x00004ad7 istore  0x00000002 , 0x00000005 
+ 00020661  0x00004ad8 arg  0x00000008 , 0x00000002 
+ 00020662  0x00004ad9 branch  0x000050de 
+ 00020663  0x00004adb bpatchx  0x00000019 , 0x00004023 
+ 00020664  0x00004adc call  0x0000523a 
+ 00020665  0x00004add call  0x000052c3 
+ 00020666  0x00004ade setarg  0x00000004 
+ 00020667  0x00004adf istore  0x00000001 , 0x00000005 
+ 00020668  0x00004ae0 fetch  0x00000001 , 0x00004255 
+ 00020669  0x00004ae1 istore  0x00000001 , 0x00000005 
+ 00020670  0x00004ae2 setarg  0x00000008 
+ 00020671  0x00004ae3 istore  0x00000002 , 0x00000005 
+ 00020672  0x00004ae5 copy  0x00000002 , 0x0000003f 
+ 00020673  0x00004ae7 istore  0x00000002 , 0x00000005 
+ 00020674  0x00004ae8 setarg  0x00000000 
+ 00020675  0x00004ae9 istore  0x00000002 , 0x00000005 
+ 00020676  0x00004aea setarg  0x00000001 
+ 00020677  0x00004aeb istore  0x00000001 , 0x00000005 
+ 00020678  0x00004aec setarg  0x00000002 
+ 00020679  0x00004aed istore  0x00000001 , 0x00000005 
+ 00020680  0x00004aee setarg  0x000003e3 
+ 00020681  0x00004aef istore  0x00000002 , 0x00000005 
+ 00020682  0x00004af0 arg  0x0000000c , 0x00000002 
+ 00020683  0x00004af1 branch  0x000050de 
+ 00020684  0x00004af3 bpatchx  0x0000001a , 0x00004023 
+ 00020685  0x00004af4 call  0x0000523a 
+ 00020686  0x00004af5 call  0x000052c3 
+ 00020687  0x00004af6 setarg  0x00000006 
+ 00020688  0x00004af7 istore  0x00000001 , 0x00000005 
+ 00020689  0x00004af8 fetch  0x00000001 , 0x00004255 
+ 00020690  0x00004af9 increase  0x00000001 , 0x0000003f 
+ 00020691  0x00004afa copy  0x00000005 , 0x00000011 
+ 00020692  0x00004afb store  0x00000001 , 0x00004255 
+ 00020693  0x00004afc copy  0x00000011 , 0x00000005 
+ 00020694  0x00004afd istore  0x00000001 , 0x00000005 
+ 00020695  0x00004afe setarg  0x00000004 
+ 00020696  0x00004aff istore  0x00000002 , 0x00000005 
+ 00020697  0x00004b00 copy  0x00000002 , 0x0000003f 
+ 00020698  0x00004b01 istore  0x00000002 , 0x00000005 
+ 00020699  0x00004b02 copy  0x0000000b , 0x0000003f 
+ 00020700  0x00004b03 istore  0x00000002 , 0x00000005 
+ 00020701  0x00004b04 arg  0x00000008 , 0x00000002 
+ 00020702  0x00004b08 storet  0x00000002 , 0x0000026f 
+ 00020703  0x00004b09 copy  0x00000002 , 0x0000003f 
+ 00020704  0x00004b0a branch  0x00005264 , 0x00000034 
+ 00020705  0x00004b0b call  0x000052c1 
+ 00020706  0x00004b0c fetch  0x00000002 , 0x0000026f 
+ 00020707  0x00004b0d istore  0x00000002 , 0x00000005 
+ 00020708  0x00004b0e force  0x00000001 , 0x0000003f 
+ 00020709  0x00004b0f istore  0x00000002 , 0x00000005 
+ 00020710  0x00004b10 rtn 
+ 00020711  0x00004b13 fetch  0x00000002 , 0x00000275 
+ 00020712  0x00004b14 branch  0x00002a8c , 0x00000034 
+ 00020713  0x00004b15 call  0x000052ce 
+ 00020714  0x00004b16 fetch  0x00000002 , 0x00000275 
+ 00020715  0x00004b17 istore  0x00000002 , 0x00000005 
+ 00020716  0x00004b18 fetch  0x00000002 , 0x00004248 
+ 00020717  0x00004b19 istore  0x00000002 , 0x00000005 
+ 00020718  0x00004b1a rtn 
+ 00020719  0x00004b1c fetch  0x00000002 , 0x00000266 
+ 00020720  0x00004b1d branch  0x00004dfc , 0x00000034 
+ 00020721  0x00004b1e bpatchx  0x0000001b , 0x00004023 
+ 00020722  0x00004b1f fetch  0x00000001 , 0x00000268 
+ 00020723  0x00004b20 beq  0x00000001 , 0x000050f9 
+ 00020724  0x00004b21 beq  0x00000050 , 0x00004de8 
+ 00020725  0x00004b22 beq  0x00000051 , 0x00004df5 
+ 00020726  0x00004b23 beq  0x00000052 , 0x00004df3 
+ 00020727  0x00004b24 beq  0x00000053 , 0x00004df3 
+ 00020728  0x00004b25 branch  0x00004dfc 
+ 00020729  0x00004b28 bpatchx  0x0000001c , 0x00004023 
+ 00020730  0x00004b29 call  0x000052b8 
+ 00020731  0x00004b2a force  0x00000000 , 0x00000012 
+ 00020732  0x00004b2b call  0x000052c3 
+ 00020733  0x00004b2c copy  0x0000003f , 0x00000005 
+ 00020734  0x00004b2d fetch  0x00000002 , 0x00000266 
+ 00020735  0x00004b2e copy  0x0000003f , 0x00000013 
+ 00020736  0x00004b2f fetch  0x00000002 , 0x00000264 
+ 00020737  0x00004b30 iforce  0x00000006 
+ 00020738  0x00004b32 call  0x00005108 
+ 00020739  0x00004b33 increase  0xfffffffc , 0x00000013 
+ 00020740  0x00004b34 nbranch  0x00005102 , 0x00000005 
+ 00020741  0x00004b35 copy  0x00000012 , 0x00000002 
+ 00020742  0x00004b36 call  0x000050de 
+ 00020743  0x00004b37 branch  0x00004dfc 
+ 00020744  0x00004b3a ifetch  0x00000001 , 0x00000006 
+ 00020745  0x00004b3b beq  0x00000002 , 0x00005113 
+ 00020746  0x00004b3c beq  0x00000001 , 0x00005116 
+ 00020747  0x00004b3d beq  0x00000003 , 0x00005120 
+ 00020748  0x00004b3e beq  0x00000005 , 0x0000515c 
+ 00020749  0x00004b3f beq  0x00000004 , 0x0000518e 
+ 00020750  0x00004b40 beq  0x00000007 , 0x00005213 
+ 00020751  0x00004b41 beq  0x00000006 , 0x000051e1 
+ 00020752  0x00004b42 beq  0x00000008 , 0x00005050 
+ 00020753  0x00004b43 beq  0x0000000a , 0x00004e3a 
+ 00020754  0x00004b44 branch  0x0000522e 
+ 00020755  0x00004b47 call  0x00007ea8 
+ 00020756  0x00004b49 call  0x00007ead 
+ 00020757  0x00004b4a branch  0x00004e51 
+ 00020758  0x00004b4c ifetch  0x00000001 , 0x00000006 
+ 00020759  0x00004b4d copy  0x0000003f , 0x00000007 
+ 00020760  0x00004b4e ifetch  0x00000002 , 0x00000006 
+ 00020761  0x00004b4f copy  0x0000003f , 0x00000011 
+ 00020762  0x00004b50 copy  0x00000013 , 0x0000003f 
+ 00020763  0x00004b51 isub  0x00000011 , 0x00000013 
+ 00020764  0x00004b53 ifetch  0x00000001 , 0x00000006 
+ 00020765  0x00004b54 increase  0xffffffff , 0x00000011 
+ 00020766  0x00004b55 nbranch  0x0000511c , 0x00000005 
+ 00020767  0x00004b56 rtn 
+ 00020768  0x00004b58 ifetch  0x00000001 , 0x00000006 
+ 00020769  0x00004b59 copy  0x0000003f , 0x00000007 
+ 00020770  0x00004b5a ifetch  0x00000002 , 0x00000006 
+ 00020771  0x00004b5b copy  0x0000003f , 0x00000011 
+ 00020772  0x00004b5c ifetch  0x00000002 , 0x00000006 
+ 00020773  0x00004b5d copy  0x0000003f , 0x0000000b 
+ 00020774  0x00004b5e ifetch  0x00000002 , 0x00000006 
+ 00020775  0x00004b5f copy  0x0000003f , 0x00000002 
+ 00020776  0x00004b60 ifetch  0x00000002 , 0x00000006 
+ 00020777  0x00004b61 sub  0x0000003f , 0x00000000 , 0x0000003e 
+ 00020778  0x00004b62 branch  0x00005132 , 0x00000005 
+ 00020779  0x00004b63 beq  0x00000002 , 0x0000512e 
+ 00020780  0x00004b64 beq  0x00000004 , 0x0000512e 
+ 00020781  0x00004b65 branch  0x00005130 
+ 00020782  0x00004b67 jam  0x00000016 , 0x00000a99 
+ 00020783  0x00004b68 call  0x00007d86 
+ 00020784  0x00004b6a ifetch  0x00000002 , 0x00000006 
+ 00020785  0x00004b6b branch  0x00005159 
+ 00020786  0x00004b6d call  0x00007ea8 
+ 00020787  0x00004b71 bpatchx  0x0000001d , 0x00004023 
+ 00020788  0x00004b72 setarg  0x00000050 
+ 00020789  0x00004b73 isub  0x00000002 , 0x0000003e 
+ 00020790  0x00004b74 branch  0x00005141 , 0x00000005 
+ 00020791  0x00004b75 setarg  0x00000051 
+ 00020792  0x00004b76 isub  0x00000002 , 0x0000003e 
+ 00020793  0x00004b77 branch  0x00005147 , 0x00000005 
+ 00020794  0x00004b78 setarg  0x00000053 
+ 00020795  0x00004b79 isub  0x00000002 , 0x0000003e 
+ 00020796  0x00004b7a branch  0x00005153 , 0x00000005 
+ 00020797  0x00004b7b setarg  0x00000052 
+ 00020798  0x00004b7c isub  0x00000002 , 0x0000003e 
+ 00020799  0x00004b7d branch  0x0000514d , 0x00000005 
+ 00020800  0x00004b7e branch  0x00005159 
+ 00020801  0x00004b80 copy  0x0000000b , 0x0000003f 
+ 00020802  0x00004b81 store  0x00000002 , 0x00004248 
+ 00020803  0x00004b82 fetch  0x00000001 , 0x00004250 
+ 00020804  0x00004b83 set1  0x00000001 
+ 00020805  0x00004b84 store  0x00000001 , 0x00004250 
+ 00020806  0x00004b85 branch  0x00005158 
+ 00020807  0x00004b87 copy  0x0000000b , 0x0000003f 
+ 00020808  0x00004b88 store  0x00000002 , 0x0000424a 
+ 00020809  0x00004b89 fetch  0x00000001 , 0x00004251 
+ 00020810  0x00004b8a set1  0x00000001 
+ 00020811  0x00004b8b store  0x00000001 , 0x00004251 
+ 00020812  0x00004b8c branch  0x00005158 
+ 00020813  0x00004b8e copy  0x0000000b , 0x0000003f 
+ 00020814  0x00004b8f store  0x00000002 , 0x0000424c 
+ 00020815  0x00004b90 fetch  0x00000001 , 0x00004252 
+ 00020816  0x00004b91 set1  0x00000001 
+ 00020817  0x00004b92 store  0x00000001 , 0x00004252 
+ 00020818  0x00004b93 branch  0x00005158 
+ 00020819  0x00004b95 copy  0x0000000b , 0x0000003f 
+ 00020820  0x00004b96 store  0x00000002 , 0x0000424e 
+ 00020821  0x00004b97 fetch  0x00000001 , 0x00004253 
+ 00020822  0x00004b98 set1  0x00000001 
+ 00020823  0x00004b99 store  0x00000001 , 0x00004253 
+ 00020824  0x00004b9d call  0x00007ead 
+ 00020825  0x00004b9f copy  0x00000013 , 0x0000003f 
+ 00020826  0x00004ba0 isub  0x00000011 , 0x00000013 
+ 00020827  0x00004ba1 rtn 
+ 00020828  0x00004ba4 ifetch  0x00000001 , 0x00000006 
+ 00020829  0x00004ba5 copy  0x0000003f , 0x00000007 
+ 00020830  0x00004ba6 ifetch  0x00000002 , 0x00000006 
+ 00020831  0x00004ba7 copy  0x0000003f , 0x00000011 
+ 00020832  0x00004ba8 copy  0x00000013 , 0x0000003f 
+ 00020833  0x00004ba9 isub  0x00000011 , 0x00000013 
+ 00020834  0x00004baa ifetch  0x00000002 , 0x00000006 
+ 00020835  0x00004bab copy  0x0000003f , 0x0000000b 
+ 00020836  0x00004bac ifetch  0x00000002 , 0x00000006 
+ 00020837  0x00004bad ifetch  0x00000002 , 0x00000006 
+ 00020838  0x00004bae nbranch  0x00005188 , 0x00000034 
+ 00020839  0x00004baf call  0x00007ea8 
+ 00020840  0x00004bb3 copy  0x0000000b , 0x00000002 
+ 00020841  0x00004bb4 bpatchx  0x0000001e , 0x00004023 
+ 00020842  0x00004bb5 setarg  0x00000050 
+ 00020843  0x00004bb6 isub  0x00000002 , 0x0000003e 
+ 00020844  0x00004bb7 branch  0x00005176 , 0x00000005 
+ 00020845  0x00004bb8 setarg  0x00000051 
+ 00020846  0x00004bb9 isub  0x00000002 , 0x0000003e 
+ 00020847  0x00004bba branch  0x0000517a , 0x00000005 
+ 00020848  0x00004bbb setarg  0x00000052 
+ 00020849  0x00004bbc isub  0x00000002 , 0x0000003e 
+ 00020850  0x00004bbd branch  0x0000517e , 0x00000005 
+ 00020851  0x00004bbe setarg  0x00000053 
+ 00020852  0x00004bbf isub  0x00000002 , 0x0000003e 
+ 00020853  0x00004bc0 branch  0x00005182 , 0x00000005 
+ 00020854  0x00004bc2 fetch  0x00000001 , 0x00004250 
+ 00020855  0x00004bc3 set1  0x00000005 
+ 00020856  0x00004bc4 store  0x00000001 , 0x00004250 
+ 00020857  0x00004bc5 rtn 
+ 00020858  0x00004bc7 fetch  0x00000001 , 0x00004251 
+ 00020859  0x00004bc8 set1  0x00000005 
+ 00020860  0x00004bc9 store  0x00000001 , 0x00004251 
+ 00020861  0x00004bca rtn 
+ 00020862  0x00004bcc fetch  0x00000001 , 0x00004252 
+ 00020863  0x00004bcd set1  0x00000005 
+ 00020864  0x00004bce store  0x00000001 , 0x00004252 
+ 00020865  0x00004bcf rtn 
+ 00020866  0x00004bd1 fetch  0x00000001 , 0x00004253 
+ 00020867  0x00004bd2 set1  0x00000005 
+ 00020868  0x00004bd3 store  0x00000001 , 0x00004253 
+ 00020869  0x00004bd4 jam  0x00000006 , 0x00000a99 
+ 00020870  0x00004bd5 branch  0x00007d86 
+ 00020871  0x00004bd9 call  0x00007ead 
+ 00020872  0x00004bdb increase  0xfffffffa , 0x00000011 
+ 00020873  0x00004bdd branch  0x0000518d , 0x00000005 
+ 00020874  0x00004bde increase  0x00000001 , 0x00000006 
+ 00020875  0x00004bdf increase  0xffffffff , 0x00000011 
+ 00020876  0x00004be0 branch  0x00005189 
+ 00020877  0x00004be2 rtn 
+ 00020878  0x00004be4 ifetch  0x00000001 , 0x00000006 
+ 00020879  0x00004be5 copy  0x0000003f , 0x00000007 
+ 00020880  0x00004be6 ifetch  0x00000002 , 0x00000006 
+ 00020881  0x00004be7 copy  0x0000003f , 0x00000011 
+ 00020882  0x00004be8 copy  0x00000013 , 0x0000003f 
+ 00020883  0x00004be9 isub  0x00000011 , 0x00000013 
+ 00020884  0x00004bea ifetch  0x00000002 , 0x00000006 
+ 00020885  0x00004beb increase  0x00000002 , 0x00000006 
+ 00020886  0x00004bec copy  0x0000003f , 0x00000002 
+ 00020887  0x00004bed setarg  0x00000005 
+ 00020888  0x00004bee istore  0x00000001 , 0x00000005 
+ 00020889  0x00004bef copy  0x00000007 , 0x0000003f 
+ 00020890  0x00004bf0 istore  0x00000001 , 0x00000005 
+ 00020891  0x00004bf1 increase  0x00000002 , 0x00000011 
+ 00020892  0x00004bf2 copy  0x00000011 , 0x0000003f 
+ 00020893  0x00004bf3 istore  0x00000002 , 0x00000005 
+ 00020894  0x00004bf4 call  0x00007ea8 
+ 00020895  0x00004bf5 bpatchx  0x0000001f , 0x00004023 
+ 00020896  0x00004bf6 setarg  0x00000050 
+ 00020897  0x00004bf7 isub  0x00000002 , 0x0000003e 
+ 00020898  0x00004bf8 branch  0x000051ad , 0x00000005 
+ 00020899  0x00004bf9 setarg  0x00000051 
+ 00020900  0x00004bfa isub  0x00000002 , 0x0000003e 
+ 00020901  0x00004bfb branch  0x000051be , 0x00000005 
+ 00020902  0x00004bfc setarg  0x00000052 
+ 00020903  0x00004bfd isub  0x00000002 , 0x0000003e 
+ 00020904  0x00004bfe branch  0x000051c4 , 0x00000005 
+ 00020905  0x00004bff setarg  0x00000053 
+ 00020906  0x00004c00 isub  0x00000002 , 0x0000003e 
+ 00020907  0x00004c01 branch  0x000051ca , 0x00000005 
+ 00020908  0x00004c02 branch  0x000051cf 
+ 00020909  0x00004c04 fetch  0x00000001 , 0x00004250 
+ 00020910  0x00004c05 set1  0x00000004 , 0x0000003f 
+ 00020911  0x00004c06 set1  0x00000003 , 0x0000003f 
+ 00020912  0x00004c07 store  0x00000001 , 0x00004250 
+ 00020913  0x00004c08 bbit1  0x00000002 , 0x000051bb 
+ 00020914  0x00004c09 fetcht  0x00000001 , 0x0000027f 
+ 00020915  0x00004c0a set1  0x00000006 , 0x00000002 
+ 00020916  0x00004c0b storet  0x00000001 , 0x0000027f 
+ 00020917  0x00004c0c copy  0x00000007 , 0x0000003f 
+ 00020918  0x00004c0d increase  0x00000001 , 0x0000003f 
+ 00020919  0x00004c0e store  0x00000001 , 0x00000281 
+ 00020920  0x00004c0f fetch  0x00000001 , 0x00004250 
+ 00020921  0x00004c10 set1  0x00000002 , 0x0000003f 
+ 00020922  0x00004c11 store  0x00000001 , 0x00004250 
+ 00020923  0x00004c13 fetch  0x00000002 , 0x00004248 
+ 00020924  0x00004c14 store  0x00000002 , 0x00000282 
+ 00020925  0x00004c15 branch  0x000051cf 
+ 00020926  0x00004c17 fetch  0x00000001 , 0x00004251 
+ 00020927  0x00004c18 set1  0x00000004 , 0x0000003f 
+ 00020928  0x00004c19 set1  0x00000003 , 0x0000003f 
+ 00020929  0x00004c1a store  0x00000001 , 0x00004251 
+ 00020930  0x00004c1b fetch  0x00000002 , 0x0000424a 
+ 00020931  0x00004c1c branch  0x000051cf 
+ 00020932  0x00004c1e fetch  0x00000001 , 0x00004252 
+ 00020933  0x00004c1f set1  0x00000004 , 0x0000003f 
+ 00020934  0x00004c20 set1  0x00000003 , 0x0000003f 
+ 00020935  0x00004c21 store  0x00000001 , 0x00004252 
+ 00020936  0x00004c22 fetch  0x00000002 , 0x0000424c 
+ 00020937  0x00004c23 branch  0x000051cf 
+ 00020938  0x00004c25 fetch  0x00000001 , 0x00004253 
+ 00020939  0x00004c26 set1  0x00000004 , 0x0000003f 
+ 00020940  0x00004c27 set1  0x00000003 , 0x0000003f 
+ 00020941  0x00004c28 store  0x00000001 , 0x00004253 
+ 00020942  0x00004c29 fetch  0x00000002 , 0x0000424e 
+ 00020943  0x00004c2d copy  0x0000003f , 0x0000000b 
+ 00020944  0x00004c2e call  0x00007ead 
+ 00020945  0x00004c30 copy  0x0000000b , 0x0000003f 
+ 00020946  0x00004c32 istore  0x00000002 , 0x00000005 
+ 00020947  0x00004c33 force  0x00000000 , 0x0000003f 
+ 00020948  0x00004c34 istore  0x00000002 , 0x00000005 
+ 00020949  0x00004c35 force  0x00000000 , 0x0000003f 
+ 00020950  0x00004c36 istore  0x00000002 , 0x00000005 
+ 00020951  0x00004c37 force  0x0000000a , 0x0000003f 
+ 00020952  0x00004c38 iadd  0x00000012 , 0x00000012 
+ 00020953  0x00004c39 increase  0xfffffffa , 0x00000011 
+ 00020954  0x00004c3b branch  0x000051e0 , 0x00000005 
+ 00020955  0x00004c3c ifetch  0x00000001 , 0x00000006 
+ 00020956  0x00004c3d istore  0x00000001 , 0x00000005 
+ 00020957  0x00004c3e increase  0x00000001 , 0x00000012 
+ 00020958  0x00004c3f increase  0xffffffff , 0x00000011 
+ 00020959  0x00004c40 branch  0x000051da 
+ 00020960  0x00004c42 rtn 
+ 00020961  0x00004c44 ifetch  0x00000001 , 0x00000006 
+ 00020962  0x00004c45 copy  0x0000003f , 0x00000007 
+ 00020963  0x00004c46 ifetch  0x00000002 , 0x00000006 
+ 00020964  0x00004c47 copy  0x0000003f , 0x00000011 
+ 00020965  0x00004c48 copy  0x00000013 , 0x0000003f 
+ 00020966  0x00004c49 isub  0x00000011 , 0x00000013 
+ 00020967  0x00004c4b ifetch  0x00000002 , 0x00000006 
+ 00020968  0x00004c4c copy  0x0000003f , 0x00000011 
+ 00020969  0x00004c4d ifetch  0x00000002 , 0x00000006 
+ 00020970  0x00004c4e copy  0x0000003f , 0x0000000b 
+ 00020971  0x00004c4f call  0x00007ea8 
+ 00020972  0x00004c50 bpatchx  0x00000020 , 0x00004024 
+ 00020973  0x00004c51 setarg  0x00000050 
+ 00020974  0x00004c52 copy  0x00000011 , 0x00000002 
+ 00020975  0x00004c53 isub  0x00000002 , 0x0000003e 
+ 00020976  0x00004c54 branch  0x000051fa , 0x00000005 
+ 00020977  0x00004c55 setarg  0x00000052 
+ 00020978  0x00004c56 copy  0x00000011 , 0x00000002 
+ 00020979  0x00004c57 isub  0x00000002 , 0x0000003e 
+ 00020980  0x00004c58 branch  0x000051ff , 0x00000005 
+ 00020981  0x00004c59 setarg  0x00000053 
+ 00020982  0x00004c5a copy  0x00000011 , 0x00000002 
+ 00020983  0x00004c5b isub  0x00000002 , 0x0000003e 
+ 00020984  0x00004c5c branch  0x00005201 , 0x00000005 
+ 00020985  0x00004c5d branch  0x00005203 
+ 00020986  0x00004c5f setarg  0x00000000 
+ 00020987  0x00004c60 store  0x00000002 , 0x00000275 
+ 00020988  0x00004c61 store  0x00000002 , 0x00004248 
+ 00020989  0x00004c62 store  0x00000001 , 0x00004250 
+ 00020990  0x00004c63 branch  0x00005205 
+ 00020991  0x00004c65 call  0x00005079 
+ 00020992  0x00004c66 branch  0x00005205 
+ 00020993  0x00004c68 call  0x0000507f 
+ 00020994  0x00004c6e branch  0x00005205 
+ 00020995  0x00004c70 setarg  0x00000000 
+ 00020996  0x00004c71 store  0x00000002 , 0x0000027b 
+ 00020997  0x00004c73 call  0x00007ead 
+ 00020998  0x00004c74 setarg  0x00000007 
+ 00020999  0x00004c75 istore  0x00000001 , 0x00000005 
+ 00021000  0x00004c76 copy  0x00000007 , 0x0000003f 
+ 00021001  0x00004c77 istore  0x00000001 , 0x00000005 
+ 00021002  0x00004c78 setarg  0x00000004 
+ 00021003  0x00004c79 istore  0x00000002 , 0x00000005 
+ 00021004  0x00004c7a copy  0x00000011 , 0x0000003f 
+ 00021005  0x00004c7b istore  0x00000002 , 0x00000005 
+ 00021006  0x00004c7c copy  0x0000000b , 0x0000003f 
+ 00021007  0x00004c7d istore  0x00000002 , 0x00000005 
+ 00021008  0x00004c7e force  0x00000008 , 0x0000003f 
+ 00021009  0x00004c7f iadd  0x00000012 , 0x00000012 
+ 00021010  0x00004c80 rtn 
+ 00021011  0x00004c83 ifetch  0x00000001 , 0x00000006 
+ 00021012  0x00004c84 copy  0x0000003f , 0x00000007 
+ 00021013  0x00004c85 ifetch  0x00000002 , 0x00000006 
+ 00021014  0x00004c86 copy  0x0000003f , 0x00000011 
+ 00021015  0x00004c87 ifetch  0x00000002 , 0x00000006 
+ 00021016  0x00004c88 copy  0x0000003f , 0x0000000b 
+ 00021017  0x00004c89 ifetch  0x00000002 , 0x00000006 
+ 00021018  0x00004c8a copy  0x0000003f , 0x00000002 
+ 00021019  0x00004c8b call  0x00007ea8 
+ 00021020  0x00004c8c bpatchx  0x00000021 , 0x00004024 
+ 00021021  0x00004c8d fetch  0x00000001 , 0x00004255 
+ 00021022  0x00004c8e icompare  0x000000ff , 0x00000007 
+ 00021023  0x00004c8f nbranch  0x0000522a , 0x00000001 
+ 00021024  0x00004c90 setarg  0x00000050 
+ 00021025  0x00004c91 isub  0x00000002 , 0x0000003e 
+ 00021026  0x00004c92 branch  0x00005227 , 0x00000005 
+ 00021027  0x00004c93 setarg  0x00000051 
+ 00021028  0x00004c94 isub  0x00000002 , 0x0000003e 
+ 00021029  0x00004c95 branch  0x0000522a , 0x00000005 
+ 00021030  0x00004c96 branch  0x0000522a 
+ 00021031  0x00004c98 jam  0x00000000 , 0x00004248 
+ 00021032  0x00004c99 jam  0x00000000 , 0x00004250 
+ 00021033  0x00004c9a branch  0x0000522a 
+ 00021034  0x00004c9f call  0x00007ead 
+ 00021035  0x00004ca0 copy  0x00000013 , 0x0000003f 
+ 00021036  0x00004ca1 isub  0x00000011 , 0x00000013 
+ 00021037  0x00004ca2 rtn 
+ 00021038  0x00004ca5 setarg  0x00000001 
+ 00021039  0x00004ca6 istore  0x00000001 , 0x00000005 
+ 00021040  0x00004ca7 ifetch  0x00000001 , 0x00000006 
+ 00021041  0x00004ca8 istore  0x00000001 , 0x00000005 
+ 00021042  0x00004ca9 setarg  0x00000002 
+ 00021043  0x00004caa istore  0x00000002 , 0x00000005 
+ 00021044  0x00004cab setarg  0x00000000 
+ 00021045  0x00004cac istore  0x00000002 , 0x00000005 
+ 00021046  0x00004cad setarg  0x00000006 
+ 00021047  0x00004cae iadd  0x00000012 , 0x00000012 
+ 00021048  0x00004caf force  0x00000004 , 0x00000013 
+ 00021049  0x00004cb0 rtn 
+ 00021050  0x00004cb4 fetch  0x00000001 , 0x00004255 
+ 00021051  0x00004cb5 increase  0x00000001 , 0x0000003f 
+ 00021052  0x00004cb6 bne  0x00000000 , 0x0000523e 
+ 00021053  0x00004cb7 increase  0x00000001 , 0x0000003f 
+ 00021054  0x00004cb9 store  0x00000001 , 0x00004255 
+ 00021055  0x00004cba rtn 
+ 00021056  0x00004cc5 bpatchx  0x00000022 , 0x00004024 
+ 00021057  0x00004cc6 arg  0x00000000 , 0x00000012 
+ 00021058  0x00004cc7 call  0x0000526e 
+ 00021059  0x00004cc8 nbranch  0x00002a8c , 0x00000034 
+ 00021060  0x00004cc9 call  0x0000527e 
+ 00021061  0x00004cca arg  0x00001800 , 0x00000012 
+ 00021062  0x00004ccb arg  0x00000000 , 0x00000007 
+ 00021063  0x00004ccd fetcht  0x00000001 , 0x00004256 
+ 00021064  0x00004cce qisolate1  0x00000002 
+ 00021065  0x00004ccf branch  0x0000524f , 0x00000001 
+ 00021066  0x00004cd0 call  0x000052a0 
+ 00021067  0x00004cd1 sub  0x0000000b , 0x00000000 , 0x0000003e 
+ 00021068  0x00004cd2 branch  0x0000524f , 0x00000002 
+ 00021069  0x00004cd3 call  0x00005288 
+ 00021070  0x00004cd4 branch  0x00005255 
+ 00021071  0x00004cd6 increase  0x00000080 , 0x00000012 
+ 00021072  0x00004cd7 increase  0x00000001 , 0x00000007 
+ 00021073  0x00004cd8 setarg  0x00000008 
+ 00021074  0x00004cd9 isub  0x00000007 , 0x0000003e 
+ 00021075  0x00004cda branch  0x00005247 , 0x00000002 
+ 00021076  0x00004cdb arg  0x00000000 , 0x00000012 
+ 00021077  0x00004cdd copy  0x00000012 , 0x0000003f 
+ 00021078  0x00004cde branch  0x00002a8c , 0x00000034 
+ 00021079  0x00004cdf rtn 
+ 00021080  0x00004ce8 bpatchx  0x00000023 , 0x00004024 
+ 00021081  0x00004ce9 call  0x00005277 
+ 00021082  0x00004cea increase  0x00000001 , 0x00000006 
+ 00021083  0x00004ceb ifetch  0x00000002 , 0x00000006 
+ 00021084  0x00004cec rtn 
+ 00021085  0x00004cf3 bpatchx  0x00000024 , 0x00004024 
+ 00021086  0x00004cf4 call  0x00005277 
+ 00021087  0x00004cf5 copy  0x00000006 , 0x00000005 
+ 00021088  0x00004cf6 copy  0x00000006 , 0x00000002 
+ 00021089  0x00004cf7 setarg  0x00000000 
+ 00021090  0x00004cf8 istore  0x00000003 , 0x00000005 
+ 00021091  0x00004cf9 rtn 
+ 00021092  0x00004cff bpatchx  0x00000025 , 0x00004024 
+ 00021093  0x00004d00 call  0x00005274 
+ 00021094  0x00004d01 branch  0x00002a8c , 0x00000034 
+ 00021095  0x00004d02 fetch  0x00000003 , 0x0000425d 
+ 00021096  0x00004d03 store  0x00000003 , 0x00004260 
+ 00021097  0x00004d04 fetch  0x00000003 , 0x0000425a 
+ 00021098  0x00004d05 store  0x00000003 , 0x0000425d 
+ 00021099  0x00004d06 fetch  0x00000003 , 0x00004257 
+ 00021100  0x00004d07 store  0x00000003 , 0x0000425a 
+ 00021101  0x00004d08 rtn 
+ 00021102  0x00004d0f bpatchx  0x00000026 , 0x00004024 
+ 00021103  0x00004d10 fetch  0x00000003 , 0x00004257 
+ 00021104  0x00004d11 rtn 
+ 00021105  0x00004d18 bpatchx  0x00000027 , 0x00004024 
+ 00021106  0x00004d19 fetch  0x00000003 , 0x0000425a 
+ 00021107  0x00004d1a rtn 
+ 00021108  0x00004d21 bpatchx  0x00000028 , 0x00004025 
+ 00021109  0x00004d22 fetch  0x00000003 , 0x00004260 
+ 00021110  0x00004d23 rtn 
+ 00021111  0x00004d29 call  0x00005274 
+ 00021112  0x00004d2a branch  0x00002a8c , 0x00000034 
+ 00021113  0x00004d2b arg  0x00004257 , 0x00000006 
+ 00021114  0x00004d2d ifetch  0x00000003 , 0x00000006 
+ 00021115  0x00004d2e branch  0x0000527a , 0x00000034 
+ 00021116  0x00004d2f increase  0xfffffffd , 0x00000006 
+ 00021117  0x00004d30 rtn 
+ 00021118  0x00004d38 bpatchx  0x00000029 , 0x00004025 
+ 00021119  0x00004d39 arg  0x00000004 , 0x00000039 
+ 00021120  0x00004d3a arg  0x00004257 , 0x00000006 
+ 00021121  0x00004d3b arg  0x00000000 , 0x00000002 
+ 00021122  0x00004d3d ifetch  0x00000003 , 0x00000006 
+ 00021123  0x00004d3e and  0x0000003f , 0x000000ff , 0x0000003f 
+ 00021124  0x00004d3f ior  0x00000002 , 0x00000002 
+ 00021125  0x00004d40 loop  0x00005282 
+ 00021126  0x00004d41 storet  0x00000001 , 0x00004256 
+ 00021127  0x00004d42 rtn 
+ 00021128  0x00004d4b bpatchx  0x0000002a , 0x00004025 
+ 00021129  0x00004d4c call  0x0000526e 
+ 00021130  0x00004d4d nbranch  0x00002a8c , 0x00000034 
+ 00021131  0x00004d4e call  0x00005274 
+ 00021132  0x00004d4f branch  0x00005295 , 0x00000034 
+ 00021133  0x00004d50 fetch  0x00000003 , 0x0000425a 
+ 00021134  0x00004d51 store  0x00000003 , 0x00004257 
+ 00021135  0x00004d52 ifetch  0x00000003 , 0x00000006 
+ 00021136  0x00004d53 istore  0x00000003 , 0x00000005 
+ 00021137  0x00004d54 ifetch  0x00000003 , 0x00000006 
+ 00021138  0x00004d55 istore  0x00000003 , 0x00000005 
+ 00021139  0x00004d56 setarg  0x00000000 
+ 00021140  0x00004d57 istore  0x00000003 , 0x00000005 
+ 00021141  0x00004d59 arg  0x00000000 , 0x00000002 
+ 00021142  0x00004d5a copy  0x0000000b , 0x0000003f 
+ 00021143  0x00004d5b iadd  0x00000007 , 0x0000003f 
+ 00021144  0x00004d5d qset1  0x00000002 
+ 00021145  0x00004d5e increase  0x00000001 , 0x00000007 
+ 00021146  0x00004d5f isub  0x00000007 , 0x0000003e 
+ 00021147  0x00004d60 nbranch  0x00005298 , 0x00000005 
+ 00021148  0x00004d62 lshift8  0x00000012 , 0x0000003f 
+ 00021149  0x00004d63 ior  0x00000002 , 0x0000003f 
+ 00021150  0x00004d64 store  0x00000003 , 0x00004260 
+ 00021151  0x00004d65 rtn 
+ 00021152  0x00004d70 bpatchx  0x0000002b , 0x00004025 
+ 00021153  0x00004d71 call  0x0000527e 
+ 00021154  0x00004d72 copy  0x00000007 , 0x00000013 
+ 00021155  0x00004d73 arg  0x00000000 , 0x00000002 
+ 00021156  0x00004d74 arg  0x00000000 , 0x0000000b 
+ 00021157  0x00004d77 copy  0x00000007 , 0x0000003f 
+ 00021158  0x00004d78 beq  0x00000008 , 0x000052b0 
+ 00021159  0x00004d79 fetch  0x00000001 , 0x00004256 
+ 00021160  0x00004d7a qisolate1  0x0000003f 
+ 00021161  0x00004d7b branch  0x000052b0 , 0x00000001 
+ 00021162  0x00004d7c increase  0x00000080 , 0x00000002 
+ 00021163  0x00004d7d increase  0x00000001 , 0x00000007 
+ 00021164  0x00004d7e copy  0x00000011 , 0x0000003f 
+ 00021165  0x00004d7f isub  0x00000002 , 0x0000003e 
+ 00021166  0x00004d80 branch  0x000052b0 , 0x00000005 
+ 00021167  0x00004d81 branch  0x000052a5 , 0x00000002 
+ 00021168  0x00004d83 copy  0x00000002 , 0x0000003f 
+ 00021169  0x00004d84 isub  0x00000011 , 0x0000003e 
+ 00021170  0x00004d85 nbranch  0x000052b6 , 0x00000002 
+ 00021171  0x00004d86 copy  0x00000007 , 0x0000003f 
+ 00021172  0x00004d87 copy  0x00000013 , 0x00000002 
+ 00021173  0x00004d88 isub  0x00000002 , 0x0000000b 
+ 00021174  0x00004d8a copy  0x00000013 , 0x00000007 
+ 00021175  0x00004d8b rtn 
+ 00021176  0x00004d8f bpatchx  0x0000002c , 0x00004025 
+ 00021177  0x00004d90 arg  0x0000007f , 0x00000011 
+ 00021178  0x00004d91 call  0x00005240 
+ 00021179  0x00004d92 store  0x00000002 , 0x0000026b 
+ 00021180  0x00004d93 increase  0x00000004 , 0x0000003f 
+ 00021181  0x00004d94 store  0x00000002 , 0x0000026d 
+ 00021182  0x00004d95 setarg  0x00000000 
+ 00021183  0x00004d96 store  0x00000002 , 0x0000026f 
+ 00021184  0x00004d97 rtn 
+ 00021185  0x00004d9a fetch  0x00000002 , 0x0000026b 
+ 00021186  0x00004d9b branch  0x000052e2 
+ 00021187  0x00004d9e fetch  0x00000002 , 0x0000026d 
+ 00021188  0x00004d9f branch  0x000052e2 
+ 00021189  0x00004da3 bpatchx  0x0000002d , 0x00004025 
+ 00021190  0x00004da4 arg  0x000000fa , 0x00000011 
+ 00021191  0x00004da5 call  0x00005240 
+ 00021192  0x00004da6 store  0x00000002 , 0x00000271 
+ 00021193  0x00004da7 increase  0x00000004 , 0x0000003f 
+ 00021194  0x00004da8 store  0x00000002 , 0x00000273 
+ 00021195  0x00004da9 setarg  0x00000000 
+ 00021196  0x00004daa store  0x00000002 , 0x00000275 
+ 00021197  0x00004dab rtn 
+ 00021198  0x00004dae fetch  0x00000002 , 0x00000271 
+ 00021199  0x00004daf branch  0x000052e2 
+ 00021200  0x00004db2 fetch  0x00000002 , 0x00000273 
+ 00021201  0x00004db3 branch  0x000052e2 
+ 00021202  0x00004db7 bpatchx  0x0000002e , 0x00004025 
+ 00021203  0x00004db8 call  0x00007e7c 
+ 00021204  0x00004db9 jam  0x00000001 , 0x00000284 
+ 00021205  0x00004dba call  0x0000526e 
+ 00021206  0x00004dbb nrtn  0x00000034 
+ 00021207  0x00004dbc arg  0x0000007f , 0x00000011 
+ 00021208  0x00004dbd call  0x00005240 
+ 00021209  0x00004dbe store  0x00000002 , 0x00000277 
+ 00021210  0x00004dbf increase  0x00000004 , 0x0000003f 
+ 00021211  0x00004dc0 store  0x00000002 , 0x00000279 
+ 00021212  0x00004dc1 setarg  0x00000000 
+ 00021213  0x00004dc2 store  0x00000002 , 0x0000027b 
+ 00021214  0x00004dc3 jam  0x00000000 , 0x00000284 
+ 00021215  0x00004dc4 branch  0x00007e8c 
+ 00021216  0x00004dc7 fetch  0x00000002 , 0x00000277 
+ 00021217  0x00004dc8 branch  0x000052e2 
+ 00021218  0x00004dcb branch  0x00002a8c , 0x00000034 
+ 00021219  0x00004dcc copy  0x0000003f , 0x00000005 
+ 00021220  0x00004dcd rtn 
+ 00021221  0x00004dd1 bpatchx  0x0000002f , 0x00004025 
+ 00021222  0x00004dd2 arg  0x00000000 , 0x00000012 
+ 00021223  0x00004dd3 arg  0x00004257 , 0x00000011 
+ 00021224  0x00004dd4 increase  0xfffffffe , 0x00000011 
+ 00021225  0x00004dd6 increase  0x00000002 , 0x00000011 
+ 00021226  0x00004dd7 setarg  0x00004263 
+ 00021227  0x00004dd8 isub  0x00000011 , 0x0000003e 
+ 00021228  0x00004dd9 branch  0x000052f5 , 0x00000005 
+ 00021229  0x00004dda ifetch  0x00000001 , 0x00000011 
+ 00021230  0x00004ddb increase  0x00000001 , 0x00000011 
+ 00021231  0x00004ddc branch  0x000052e9 , 0x00000034 
+ 00021232  0x00004ddd ifetcht  0x00000002 , 0x00000011 
+ 00021233  0x00004dde ifetch  0x00000002 , 0x00000002 
+ 00021234  0x00004ddf iadd  0x00000012 , 0x00000012 
+ 00021235  0x00004de0 increase  0x00000004 , 0x00000012 
+ 00021236  0x00004de1 branch  0x000052e9 
+ 00021237  0x00004de3 copy  0x00000012 , 0x0000003f 
+ 00021238  0x00004de4 rtn 
+ 00021239  0x00004de8 arg  0x0000000c , 0x00000007 
+ 00021240  0x00004de9 branch  0x00002c32 
+ 00021241  0x00004dec arg  0x0000000c , 0x00000007 
+ 00021242  0x00004ded branch  0x00002c36 
+ 00021243  0x00004df0 bpatchx  0x00000030 , 0x00004026 
+ 00021244  0x00004df1 call  0x0000527e 
+ 00021245  0x00004df2 fetch  0x00000001 , 0x00004256 
+ 00021246  0x00004df3 rtn  0x00000034 
+ 00021247  0x00004df4 call  0x000052e5 
+ 00021248  0x00004df5 arg  0x00000100 , 0x00000002 
+ 00021249  0x00004df6 isub  0x00000002 , 0x0000003e 
+ 00021250  0x00004df7 branch  0x000052f7 , 0x00000002 
+ 00021251  0x00004df8 call  0x000052f9 
+ 00021252  0x00004df9 arg  0x00004263 , 0x00000005 
+ 00021253  0x00004dfa arg  0x00004257 , 0x00000011 
+ 00021254  0x00004dfc setarg  0x00004263 
+ 00021255  0x00004dfd isub  0x00000011 , 0x0000003e 
+ 00021256  0x00004dfe rtn  0x00000005 
+ 00021257  0x00004dff ifetch  0x00000001 , 0x00000011 
+ 00021258  0x00004e00 increase  0x00000001 , 0x00000011 
+ 00021259  0x00004e01 nbranch  0x0000530f , 0x00000034 
+ 00021260  0x00004e02 istore  0x00000002 , 0x00000005 
+ 00021261  0x00004e03 increase  0x00000002 , 0x00000011 
+ 00021262  0x00004e04 branch  0x00005306 
+ 00021263  0x00004e06 ifetch  0x00000002 , 0x00000011 
+ 00021264  0x00004e07 increase  0x00000002 , 0x00000011 
+ 00021265  0x00004e08 copy  0x0000003f , 0x00000006 
+ 00021266  0x00004e09 ifetch  0x00000002 , 0x00000006 
+ 00021267  0x00004e0a istore  0x00000002 , 0x00000005 
+ 00021268  0x00004e0b copy  0x0000003f , 0x00000039 
+ 00021269  0x00004e0c increase  0x00000002 , 0x00000039 
+ 00021270  0x00004e0d call  0x00007f01 
+ 00021271  0x00004e0e branch  0x00005306 
+ 00021272  0x00004e11 bpatchx  0x00000031 , 0x00004026 
+ 00021273  0x00004e12 call  0x0000527e 
+ 00021274  0x00004e13 fetch  0x00000001 , 0x00004256 
+ 00021275  0x00004e14 rtn  0x00000034 
+ 00021276  0x00004e15 arg  0x00004258 , 0x00000011 
+ 00021277  0x00004e16 increase  0xfffffffd , 0x00000011 
+ 00021278  0x00004e17 arg  0x00004263 , 0x00000006 
+ 00021279  0x00004e19 increase  0x00000003 , 0x00000011 
+ 00021280  0x00004e1a setarg  0x00004264 
+ 00021281  0x00004e1b isub  0x00000011 , 0x0000003e 
+ 00021282  0x00004e1c rtn  0x00000005 
+ 00021283  0x00004e1d ifetch  0x00000002 , 0x00000006 
+ 00021284  0x00004e1e branch  0x0000531f , 0x00000034 
+ 00021285  0x00004e1f increase  0x00000004 , 0x0000003f 
+ 00021286  0x00004e20 copy  0x0000003f , 0x00000039 
+ 00021287  0x00004e21 copy  0x00000006 , 0x00000012 
+ 00021288  0x00004e22 ifetch  0x00000002 , 0x00000011 
+ 00021289  0x00004e23 copy  0x0000003f , 0x00000005 
+ 00021290  0x00004e24 copy  0x00000012 , 0x00000006 
+ 00021291  0x00004e25 increase  0xfffffffe , 0x00000006 
+ 00021292  0x00004e26 call  0x00007f01 
+ 00021293  0x00004e27 branch  0x0000531f 
+ 00021294  0x00004e32 bpatchx  0x00000032 , 0x00004026 
+ 00021295  0x00004e33 disable  0x0000002b 
+ 00021296  0x00004e34 jam  0x00000001 , 0x00000455 
+ 00021297  0x00004e35 jam  0x00000003 , 0x0000043f 
+ 00021298  0x00004e36 jam  0x00000001 , 0x00000456 
+ 00021299  0x00004e37 setarg  0xffffffff 
+ 00021300  0x00004e38 store  0x00000002 , 0x00000459 
+ 00021301  0x00004e39 force  0x00000000 , 0x0000003f 
+ 00021302  0x00004e3a store  0x00000001 , 0x00000457 
+ 00021303  0x00004e3b store  0x00000001 , 0x00000462 
+ 00021304  0x00004e3c store  0x00000003 , 0x00004169 
+ 00021305  0x00004e3d store  0x00000003 , 0x0000416c 
+ 00021306  0x00004e3e store  0x00000005 , 0x00004403 
+ 00021307  0x00004e3f set1  0x00000027 , 0x0000003f 
+ 00021308  0x00004e40 store  0x00000005 , 0x00004408 
+ 00021309  0x00004e41 jam  0x00000001 , 0x000043dc 
+ 00021310  0x00004e42 jam  0x00000000 , 0x000043dd 
+ 00021311  0x00004e43 branch  0x000056ed 
+ 00021312  0x00004e46 bpatchx  0x00000033 , 0x00004026 
+ 00021313  0x00004e47 enable  0x00000029 
+ 00021314  0x00004e48 jam  0x00000003 , 0x00000440 
+ 00021315  0x00004e49 jam  0x00000001 , 0x00000478 
+ 00021316  0x00004e4a jam  0x00000001 , 0x0000445a 
+ 00021317  0x00004e4b setarg  0x0000ffff 
+ 00021318  0x00004e4c store  0x00000002 , 0x0000445c 
+ 00021319  0x00004e4d force  0x00000000 , 0x0000003f 
+ 00021320  0x00004e4e store  0x00000005 , 0x00004408 
+ 00021321  0x00004e4f set1  0x00000027 , 0x0000003f 
+ 00021322  0x00004e50 store  0x00000005 , 0x00004403 
+ 00021323  0x00004e51 branch  0x0000532e 
+ 00021324  0x00004e55 bpatchx  0x00000034 , 0x00004026 
+ 00021325  0x00004e56 disable  0x00000029 
+ 00021326  0x00004e57 setarg  0x00000017 
+ 00021327  0x00004e58 store  0x00000002 , 0x000044a8 
+ 00021328  0x00004e59 jam  0x00000001 , 0x00000440 
+ 00021329  0x00004e5a jam  0x00000000 , 0x0000436e 
+ 00021330  0x00004e5b jam  0x00000000 , 0x000000a0 
+ 00021331  0x00004e5c jam  0x00000000 , 0x000044c4 
+ 00021332  0x00004e5d jam  0x00000000 , 0x000044c5 
+ 00021333  0x00004e5e fetch  0x00000002 , 0x0000046d 
+ 00021334  0x00004e5f store  0x00000002 , 0x000044ba 
+ 00021335  0x00004e60 fetch  0x00000002 , 0x00000441 
+ 00021336  0x00004e61 mul32  0x0000003f , 0x00000005 , 0x0000003f 
+ 00021337  0x00004e62 rshift4  0x0000003f , 0x0000003f 
+ 00021338  0x00004e63 store  0x00000002 , 0x0000046d 
+ 00021339  0x00004e64 branch  0x0000532e 
+ 00021340  0x00004e6b call  0x000053c4 
+ 00021341  0x00004e6c call  0x000055e8 
+ 00021342  0x00004e6d call  0x000056f0 
+ 00021343  0x00004e6e branch  0x000053ce 
+ 00021344  0x00004e71 bpatchx  0x00000035 , 0x00004026 
+ 00021345  0x00004e72 call  0x000053c4 
+ 00021346  0x00004e73 call  0x000032f4 
+ 00021347  0x00004e74 fetch  0x00000001 , 0x00000440 
+ 00021348  0x00004e75 beq  0x00000003 , 0x00005366 
+ 00021349  0x00004e76 branch  0x0000537a 
+ 00021350  0x00004e7d bpatchx  0x00000036 , 0x00004026 
+ 00021351  0x00004e7e enable  0x00000029 
+ 00021352  0x00004e7f call  0x000056e4 
+ 00021353  0x00004e80 branch  0x00005377 , 0x00000002 
+ 00021354  0x00004e81 call  0x00002c6c 
+ 00021355  0x00004e82 call  0x00005413 
+ 00021356  0x00004e83 call  0x0000561e 
+ 00021357  0x00004e84 disable  0x0000002d 
+ 00021358  0x00004e85 call  0x000054bf 
+ 00021359  0x00004e86 nrtn  0x0000002d 
+ 00021360  0x00004e87 bpatchx  0x00000037 , 0x00004026 
+ 00021361  0x00004e88 fetch  0x00000001 , 0x00000005 
+ 00021362  0x00004e89 increase  0x00000001 , 0x0000003f 
+ 00021363  0x00004e8a store  0x00000001 , 0x00000005 
+ 00021364  0x00004e8b call  0x000055aa 
+ 00021365  0x00004e8c disable  0x00000029 
+ 00021366  0x00004e8d rtn 
+ 00021367  0x00004e90 call  0x000053a9 
+ 00021368  0x00004e91 disable  0x00000029 
+ 00021369  0x00004e92 rtn 
+ 00021370  0x00004e98 bpatchx  0x00000038 , 0x00004027 
+ 00021371  0x00004e99 jam  0x00000000 , 0x0000450f 
+ 00021372  0x00004e9a call  0x00007aaf 
+ 00021373  0x00004e9b call  0x00005c18 
+ 00021374  0x00004e9c disable  0x0000002e 
+ 00021375  0x00004e9d call  0x000056e4 
+ 00021376  0x00004e9e branch  0x000053a9 , 0x00000002 
+ 00021377  0x00004e9f call  0x00002c6c 
+ 00021378  0x00004ea0 call  0x00005413 
+ 00021379  0x00004ea1 call  0x00005489 
+ 00021380  0x00004ea2 nbranch  0x0000539b , 0x00000018 
+ 00021381  0x00004ea3 call  0x000053b7 
+ 00021382  0x00004ea4 branch  0x00005388 , 0x0000002d 
+ 00021383  0x00004ea5 branch  0x00005395 
+ 00021384  0x00004ea9 bpatchx  0x00000039 , 0x00004027 
+ 00021385  0x00004eaa fetch  0x00000001 , 0x0000450f 
+ 00021386  0x00004eab pincrease  0x00000001 
+ 00021387  0x00004eac store  0x00000001 , 0x0000450f 
+ 00021388  0x00004ead beq  0x0000000c , 0x00005395 
+ 00021389  0x00004eae call  0x000055aa 
+ 00021390  0x00004eaf call  0x0000561e 
+ 00021391  0x00004eb0 call  0x000054c7 
+ 00021392  0x00004eb1 call  0x0000567e 
+ 00021393  0x00004eb2 fetch  0x00000002 , 0x000041fb 
+ 00021394  0x00004eb3 call  0x00007f9c 
+ 00021395  0x00004eb4 call  0x000053a0 
+ 00021396  0x00004eb5 branch  0x000053a4 , 0x00000028 
+ 00021397  0x00004eb7 bpatchx  0x0000003a , 0x00004027 
+ 00021398  0x00004eb8 call  0x00005be4 
+ 00021399  0x00004eb9 call  0x00005bdb 
+ 00021400  0x00004eba call  0x00007d9c 
+ 00021401  0x00004ebb fetch  0x00000001 , 0x00000462 
+ 00021402  0x00004ebc bbit1  0x00000003 , 0x000053a9 
+ 00021403  0x00004ebe bpatchx  0x0000003b , 0x00004027 
+ 00021404  0x00004ebf call  0x000057f4 
+ 00021405  0x00004ec0 call  0x0000559d 
+ 00021406  0x00004ec1 call  0x00005575 
+ 00021407  0x00004ec2 branch  0x00002841 
+ 00021408  0x00004ec6 disable  0x00000028 
+ 00021409  0x00004ec7 bmark1  0x0000002a , 0x00007fe7 
+ 00021410  0x00004ec8 bmark1  0x00000029 , 0x00007fe7 
+ 00021411  0x00004ec9 rtn 
+ 00021412  0x00004ecd bpatchx  0x0000003c , 0x00004027 
+ 00021413  0x00004ece enable  0x0000002e 
+ 00021414  0x00004ecf call  0x000054c1 
+ 00021415  0x00004ed0 branch  0x00005388 , 0x0000002d 
+ 00021416  0x00004ed1 branch  0x00005395 
+ 00021417  0x00004ed7 bpatchx  0x0000003d , 0x00004027 
+ 00021418  0x00004ed8 call  0x000053af 
+ 00021419  0x00004ed9 call  0x000033b4 
+ 00021420  0x00004eda call  0x00007a77 
+ 00021421  0x00004edb jam  0x00000015 , 0x00000a99 
+ 00021422  0x00004edc branch  0x00007d86 
+ 00021423  0x00004edf setarg  0x00000000 
+ 00021424  0x00004ee0 store  0x00000009 , 0x000044ff 
+ 00021425  0x00004ee1 jam  0x00000000 , 0x00000455 
+ 00021426  0x00004ee2 jam  0x00000000 , 0x00000440 
+ 00021427  0x00004ee3 jam  0x00000000 , 0x0000043f 
+ 00021428  0x00004ee4 jam  0x00000000 , 0x000044c5 
+ 00021429  0x00004ee5 jam  0x00000000 , 0x000044c4 
+ 00021430  0x00004ee6 rtn 
+ 00021431  0x00004ee9 bpatchx  0x0000003e , 0x00004027 
+ 00021432  0x00004eea fetch  0x00000001 , 0x00000005 
+ 00021433  0x00004eeb increase  0x00000001 , 0x0000003f 
+ 00021434  0x00004eec store  0x00000001 , 0x00000005 
+ 00021435  0x00004eed fetch  0x00000001 , 0x0000043f 
+ 00021436  0x00004eee rtnbit1  0x00000003 
+ 00021437  0x00004eef set1  0x00000003 
+ 00021438  0x00004ef0 store  0x00000001 , 0x0000043f 
+ 00021439  0x00004ef1 fetch  0x00000002 , 0x000044ba 
+ 00021440  0x00004ef2 store  0x00000002 , 0x0000046d 
+ 00021441  0x00004ef3 setarg  0x00000000 
+ 00021442  0x00004ef4 store  0x00000004 , 0x000044e5 
+ 00021443  0x00004ef5 rtn 
+ 00021444  0x00004ef9 bpatchx  0x0000003f , 0x00004027 
+ 00021445  0x00004efa jam  0x00000036 , 0x0000890f 
+ 00021446  0x00004efb jam  0x0000005f , 0x0000890b 
+ 00021447  0x00004efc enable  0x00000036 
+ 00021448  0x00004efd jam  0x00000007 , 0x00008914 
+ 00021449  0x00004efe call  0x00002c6c 
+ 00021450  0x00004eff fetch  0x00000001 , 0x000041e0 
+ 00021451  0x00004f00 rtn  0x00000034 
+ 00021452  0x00004f01 jam  0x000000b8 , 0x0000890a 
+ 00021453  0x00004f02 rtn 
+ 00021454  0x00004f05 bpatchx  0x00000040 , 0x00004028 
+ 00021455  0x00004f06 jam  0x0000002e , 0x0000890f 
+ 00021456  0x00004f07 jam  0x000000ff , 0x0000890b 
+ 00021457  0x00004f08 disable  0x00000036 
+ 00021458  0x00004f09 jam  0x00000003 , 0x00008914 
+ 00021459  0x00004f0a arg  0x00000000 , 0x0000001b 
+ 00021460  0x00004f0b rtn 
+ 00021461  0x00004f0e disable  0x00000009 
+ 00021462  0x00004f0f disable  0x00000007 
+ 00021463  0x00004f10 fetch  0x00000003 , 0x00000467 
+ 00021464  0x00004f11 iforce  0x0000000f 
+ 00021465  0x00004f12 fetch  0x00000001 , 0x00000016 
+ 00021466  0x00004f13 reverse  0x0000003f , 0x00000002 
+ 00021467  0x00004f14 set1  0x00000001 , 0x00000002 
+ 00021468  0x00004f15 rshift  0x00000002 , 0x0000000e 
+ 00021469  0x00004f16 rtn 
+ 00021470  0x00004f1a call  0x000053e6 
+ 00021471  0x00004f1b call  0x0000291f 
+ 00021472  0x00004f1c setarg  0x00000500 
+ 00021473  0x00004f1d call  0x00002a8f 
+ 00021474  0x00004f1e branch  0x00002924 
+ 00021475  0x00004f21 branch  0x00002939 , 0x0000002d 
+ 00021476  0x00004f23 call  0x000053e6 
+ 00021477  0x00004f24 branch  0x00002933 
+ 00021478  0x00004f26 bpatchx  0x00000041 , 0x00004028 
+ 00021479  0x00004f27 call  0x00002918 
+ 00021480  0x00004f28 fetch  0x00000001 , 0x0000048c 
+ 00021481  0x00004f29 nbranch  0x000053f9 , 0x00000034 
+ 00021482  0x00004f2a fetch  0x00000001 , 0x00000016 
+ 00021483  0x00004f2b sub  0x0000003f , 0x00000024 , 0x0000003e 
+ 00021484  0x00004f2c branch  0x000053f3 , 0x00000002 
+ 00021485  0x00004f2d force  0x00000000 , 0x00000002 
+ 00021486  0x00004f2e rtneq  0x00000025 
+ 00021487  0x00004f2f force  0x00000018 , 0x00000002 
+ 00021488  0x00004f30 rtneq  0x00000026 
+ 00021489  0x00004f31 force  0x0000004e , 0x00000002 
+ 00021490  0x00004f32 rtn 
+ 00021491  0x00004f35 sub  0x0000003f , 0x0000000a , 0x0000003e 
+ 00021492  0x00004f36 branch  0x000053f6 , 0x00000002 
+ 00021493  0x00004f37 increase  0x00000001 , 0x0000003f 
+ 00021494  0x00004f3a lshift  0x0000003f , 0x0000003f 
+ 00021495  0x00004f3b add  0x0000003f , 0x00000002 , 0x00000002 
+ 00021496  0x00004f3c rtn 
+ 00021497  0x00004f3f fetch  0x00000001 , 0x00000016 
+ 00021498  0x00004f40 lshift  0x0000003f , 0x00000002 
+ 00021499  0x00004f41 rtn 
+ 00021500  0x00004f44 arg  0x000001f4 , 0x00000002 
+ 00021501  0x00004f45 rtn  0x00000034 
+ 00021502  0x00004f46 arg  0x000000fa , 0x00000002 
+ 00021503  0x00004f47 rtneq  0x00000001 
+ 00021504  0x00004f48 arg  0x00000096 , 0x00000002 
+ 00021505  0x00004f49 rtneq  0x00000002 
+ 00021506  0x00004f4a arg  0x00000064 , 0x00000002 
+ 00021507  0x00004f4b rtneq  0x00000003 
+ 00021508  0x00004f4c arg  0x0000004b , 0x00000002 
+ 00021509  0x00004f4d rtneq  0x00000004 
+ 00021510  0x00004f4e arg  0x00000032 , 0x00000002 
+ 00021511  0x00004f4f rtneq  0x00000005 
+ 00021512  0x00004f50 arg  0x00000028 , 0x00000002 
+ 00021513  0x00004f51 rtneq  0x00000006 
+ 00021514  0x00004f52 arg  0x00000014 , 0x00000002 
+ 00021515  0x00004f53 rtn 
+ 00021516  0x00004f58 setarg  0x008e89be 
+ 00021517  0x00004f59 lshift8  0x0000003f , 0x0000003f 
+ 00021518  0x00004f5a or_into  0x000000d6 , 0x0000003f 
+ 00021519  0x00004f5b iforce  0x00000009 
+ 00021520  0x00004f5c setarg  0x00555555 
+ 00021521  0x00004f5d store  0x00000003 , 0x00000467 
+ 00021522  0x00004f5e rtn 
+ 00021523  0x00004f61 bpatchx  0x00000042 , 0x00004028 
+ 00021524  0x00004f62 enable  0x00000010 
+ 00021525  0x00004f63 fetch  0x00000004 , 0x00000463 
+ 00021526  0x00004f64 iforce  0x00000009 
+ 00021527  0x00004f65 call  0x00005466 
+ 00021528  0x00004f66 setarg  0x00000200 
+ 00021529  0x00004f67 branch  0x0000541c , 0x00000029 
+ 00021530  0x00004f68 fetch  0x00000002 , 0x0000044d 
+ 00021531  0x00004f69 rshift  0x0000003f , 0x0000003f 
+ 00021532  0x00004f6b arg  0x00000500 , 0x00000002 
+ 00021533  0x00004f6c iadd  0x00000002 , 0x0000003f 
+ 00021534  0x00004f6d call  0x00002a24 
+ 00021535  0x00004f6e deposit  0x0000001a 
+ 00021536  0x00004f6f store  0x00000006 , 0x00000491 
+ 00021537  0x00004f70 rtn 
+ 00021538  0x00004f73 bpatchx  0x00000043 , 0x00004028 
+ 00021539  0x00004f74 fetch  0x00000001 , 0x00000016 
+ 00021540  0x00004f75 beq  0x00000025 , 0x00005428 
+ 00021541  0x00004f76 beq  0x00000026 , 0x0000542e 
+ 00021542  0x00004f77 beq  0x00000027 , 0x00005434 
+ 00021543  0x00004f78 branch  0x00005434 
+ 00021544  0x00004f7b fetcht  0x00000001 , 0x0000448d 
+ 00021545  0x00004f7c isolate1  0x00000001 , 0x00000002 
+ 00021546  0x00004f7d branch  0x0000543f , 0x00000001 
+ 00021547  0x00004f7e isolate1  0x00000002 , 0x00000002 
+ 00021548  0x00004f7f branch  0x00005444 , 0x00000001 
+ 00021549  0x00004f80 branch  0x0000543a 
+ 00021550  0x00004f84 fetcht  0x00000001 , 0x0000448d 
+ 00021551  0x00004f85 isolate1  0x00000002 , 0x00000002 
+ 00021552  0x00004f86 branch  0x00005444 , 0x00000001 
+ 00021553  0x00004f87 isolate1  0x00000000 , 0x00000002 
+ 00021554  0x00004f88 branch  0x0000543a , 0x00000001 
+ 00021555  0x00004f89 branch  0x0000543f 
+ 00021556  0x00004f8d fetcht  0x00000001 , 0x0000448d 
+ 00021557  0x00004f8e isolate1  0x00000000 , 0x00000002 
+ 00021558  0x00004f8f branch  0x0000543a , 0x00000001 
+ 00021559  0x00004f90 isolate1  0x00000001 , 0x00000002 
+ 00021560  0x00004f91 branch  0x0000543f , 0x00000001 
+ 00021561  0x00004f92 branch  0x00005444 
+ 00021562  0x00004f97 jam  0x00000025 , 0x00000016 
+ 00021563  0x00004f98 fetch  0x00000001 , 0x00000ac2 
+ 00021564  0x00004f99 set1  0x00000000 , 0x0000003f 
+ 00021565  0x00004f9a store  0x00000001 , 0x00000ac2 
+ 00021566  0x00004f9b rtn 
+ 00021567  0x00004f9e jam  0x00000026 , 0x00000016 
+ 00021568  0x00004f9f fetch  0x00000001 , 0x00000ac2 
+ 00021569  0x00004fa0 set1  0x00000001 , 0x0000003f 
+ 00021570  0x00004fa1 store  0x00000001 , 0x00000ac2 
+ 00021571  0x00004fa2 rtn 
+ 00021572  0x00004fa5 jam  0x00000027 , 0x00000016 
+ 00021573  0x00004fa6 fetch  0x00000001 , 0x00000ac2 
+ 00021574  0x00004fa7 set1  0x00000002 , 0x0000003f 
+ 00021575  0x00004fa8 store  0x00000001 , 0x00000ac2 
+ 00021576  0x00004fa9 rtn 
+ 00021577  0x00004fae bpatchx  0x00000044 , 0x00004028 
+ 00021578  0x00004faf add  0x00000011 , 0x00000001 , 0x00000006 
+ 00021579  0x00004fb0 ifetch  0x00000001 , 0x00000006 
+ 00021580  0x00004fb1 rtnbit0  0x00000000 
+ 00021581  0x00004fb2 add  0x00000011 , 0x0000001a , 0x00000005 
+ 00021582  0x00004fb3 ifetch  0x00000002 , 0x00000005 
+ 00021583  0x00004fb4 increase  0x00000001 , 0x0000003f 
+ 00021584  0x00004fb5 istore  0x00000002 , 0x00000005 
+ 00021585  0x00004fb6 add  0x00000011 , 0x00000019 , 0x00000006 
+ 00021586  0x00004fb7 ifetch  0x00000001 , 0x00000006 
+ 00021587  0x00004fb8 add  0x00000011 , 0x00000018 , 0x00000005 
+ 00021588  0x00004fb9 ifetcht  0x00000001 , 0x00000005 
+ 00021589  0x00004fba iadd  0x00000002 , 0x0000003f 
+ 00021590  0x00004fbb sub  0x0000003f , 0x00000024 , 0x0000003e 
+ 00021591  0x00004fbc branch  0x00005459 , 0x00000002 
+ 00021592  0x00004fbd increase  0xffffffdb , 0x0000003f 
+ 00021593  0x00004fbf istore  0x00000001 , 0x00000005 
+ 00021594  0x00004fc0 rtn 
+ 00021595  0x00004fc4 bpatchx  0x00000045 , 0x00004028 
+ 00021596  0x00004fc5 fetch  0x00000005 , 0x0000046f 
+ 00021597  0x00004fc6 force  0x00000000 , 0x00000002 
+ 00021598  0x00004fc7 force  0x00000025 , 0x00000039 
+ 00021599  0x00004fc9 bbit0  0x00000000 , 0x00005461 
+ 00021600  0x00004fca increase  0x00000001 , 0x00000002 
+ 00021601  0x00004fcc rshift  0x0000003f , 0x0000003f 
+ 00021602  0x00004fcd loop  0x0000545f 
+ 00021603  0x00004fce add  0x00000002 , 0xffffffff , 0x0000003f 
+ 00021604  0x00004fcf store  0x00000001 , 0x00000461 
+ 00021605  0x00004fd0 rtn 
+ 00021606  0x00004fd3 bpatchx  0x00000046 , 0x00004028 
+ 00021607  0x00004fd4 fetch  0x00000001 , 0x00000457 
+ 00021608  0x00004fd5 iforce  0x00000007 
+ 00021609  0x00004fd6 fetcht  0x00000005 , 0x0000046f 
+ 00021610  0x00004fd7 qisolate1  0x00000002 
+ 00021611  0x00004fd8 branch  0x0000547c , 0x00000001 
+ 00021612  0x00004fda bpatchx  0x00000047 , 0x00004028 
+ 00021613  0x00004fdb fetch  0x00000001 , 0x00000461 
+ 00021614  0x00004fdc isub  0x00000007 , 0x0000003f 
+ 00021615  0x00004fdd branch  0x00005472 , 0x00000002 
+ 00021616  0x00004fde sub  0x0000003f , 0xffffffff , 0x00000007 
+ 00021617  0x00004fdf branch  0x0000546c 
+ 00021618  0x00004fe1 copy  0x00000007 , 0x00000039 
+ 00021619  0x00004fe2 force  0x00000000 , 0x00000007 
+ 00021620  0x00004fe4 qisolate1  0x00000002 
+ 00021621  0x00004fe5 branch  0x00005477 , 0x00000001 
+ 00021622  0x00004fe6 increase  0x00000001 , 0x00000039 
+ 00021623  0x00004fe8 deposit  0x00000039 
+ 00021624  0x00004fe9 branch  0x0000547c , 0x00000034 
+ 00021625  0x00004fea increase  0x00000001 , 0x00000007 
+ 00021626  0x00004feb increase  0xffffffff , 0x00000039 
+ 00021627  0x00004fec branch  0x00005474 
+ 00021628  0x00004fee deposit  0x00000007 
+ 00021629  0x00004fef store  0x00000001 , 0x00000016 
+ 00021630  0x00004ff0 rtn 
+ 00021631  0x00004ff4 branch  0x00005482 , 0x00000029 
+ 00021632  0x00004ff5 until  0x0000003e , 0x00000003 
+ 00021633  0x00004ff6 rtn 
+ 00021634  0x00004ff9 arg  0x00000ea0 , 0x0000000b 
+ 00021635  0x00004ffa until  0x00000023 , 0x00000026 
+ 00021636  0x00004ffb rtn 
+ 00021637  0x00004ffe disable  0x00000010 
+ 00021638  0x00004fff fetch  0x00000002 , 0x0000436c 
+ 00021639  0x00005000 copy  0x0000003f , 0x0000000b 
+ 00021640  0x00005001 branch  0x0000548e 
+ 00021641  0x00005005 bpatchx  0x00000048 , 0x00004029 
+ 00021642  0x00005006 enable  0x00000010 
+ 00021643  0x00005007 fetch  0x00000002 , 0x0000044d 
+ 00021644  0x00005008 fetcht  0x00000004 , 0x000044e5 
+ 00021645  0x00005009 iadd  0x00000002 , 0x0000000b 
+ 00021646  0x0000500b call  0x000053de 
+ 00021647  0x0000500d bpatchx  0x00000049 , 0x00004029 
+ 00021648  0x0000500e call  0x000053d5 
+ 00021649  0x0000500f disable  0x0000002d 
+ 00021650  0x00005010 enable  0x0000000d 
+ 00021651  0x00005011 enable  0x00000021 
+ 00021652  0x00005012 disable  0x00000020 
+ 00021653  0x00005013 copy  0x0000000b , 0x0000001b 
+ 00021654  0x00005014 correlate  0x0000003e , 0x00000003 
+ 00021655  0x00005015 branch  0x0000549a , 0x0000002e 
+ 00021656  0x00005016 copy  0x0000001a , 0x00000002 
+ 00021657  0x00005017 storet  0x00000006 , 0x0000009a 
+ 00021658  0x00005019 nbranch  0x0000264d , 0x00000018 
+ 00021659  0x0000501a branch  0x000054a1 , 0x0000002e 
+ 00021660  0x0000501b arg  0x000001e0 , 0x00000029 
+ 00021661  0x0000501c copy  0x00000021 , 0x00000028 
+ 00021662  0x0000501d fetch  0x00000001 , 0x0000043f 
+ 00021663  0x0000501e bbit0  0x00000003 , 0x000054a1 
+ 00021664  0x0000501f call  0x00002b05 , 0x0000002b 
+ 00021665  0x00005021 bpatchx  0x0000004a , 0x00004029 
+ 00021666  0x00005022 call  0x000029bb 
+ 00021667  0x00005023 enable  0x00000007 
+ 00021668  0x00005024 enable  0x00000009 
+ 00021669  0x00005025 parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00021670  0x00005026 rshift3  0x0000000c , 0x0000003f 
+ 00021671  0x00005027 store  0x00000001 , 0x000002d9 
+ 00021672  0x00005028 parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00021673  0x00005029 rshift3  0x0000000c , 0x0000003f 
+ 00021674  0x0000502a istore  0x00000001 , 0x00000005 
+ 00021675  0x0000502b and  0x0000003f , 0x0000003f , 0x00000039 
+ 00021676  0x0000502c branch  0x000054b1 , 0x00000005 
+ 00021677  0x0000502f parse  0x00000003 , 0x00000000 , 0x00000008 
+ 00021678  0x00005030 rshift3  0x0000000c , 0x0000003f 
+ 00021679  0x00005031 istore  0x00000001 , 0x00000005 
+ 00021680  0x00005032 loop  0x000054ad 
+ 00021681  0x00005035 bpatchx  0x0000004b , 0x00004029 
+ 00021682  0x00005036 parse  0x00000003 , 0x00000000 , 0x00000018 
+ 00021683  0x00005037 enable  0x00000010 
+ 00021684  0x00005038 arg  0x00000664 , 0x0000001b 
+ 00021685  0x00005039 rshift32  0x0000003f , 0x0000003f 
+ 00021686  0x0000503a rshift16  0x0000003f , 0x0000003f 
+ 00021687  0x0000503b istore  0x00000003 , 0x00000005 
+ 00021688  0x0000503c branch  0x0000264d , 0x00000006 
+ 00021689  0x0000503d enable  0x0000002d 
+ 00021690  0x0000503e fetch  0x00000001 , 0x00000017 
+ 00021691  0x0000503f add  0x0000003f , 0x00000000 , 0x00000011 
+ 00021692  0x00005040 call  0x00002981 
+ 00021693  0x00005041 disable  0x0000000d 
+ 00021694  0x00005042 branch  0x00002918 
+ 00021695  0x00005045 bpatchx  0x0000004c , 0x00004029 
+ 00021696  0x00005046 call  0x000054c9 
+ 00021697  0x00005048 fetcht  0x00000001 , 0x00000017 
+ 00021698  0x00005049 call  0x0000291f 
+ 00021699  0x0000504a call  0x00002924 
+ 00021700  0x0000504b enable  0x00000010 
+ 00021701  0x0000504c arg  0x0000157c , 0x0000000b 
+ 00021702  0x0000504d branch  0x0000548f 
+ 00021703  0x00005050 call  0x000054c9 
+ 00021704  0x00005051 branch  0x0000264d 
+ 00021705  0x00005054 bpatchx  0x0000004d , 0x00004029 
+ 00021706  0x00005055 call  0x000053d5 
+ 00021707  0x00005056 call  0x000053e3 
+ 00021708  0x00005057 branch  0x000054cd 
+ 00021709  0x0000505a set1  0x00000000 , 0x00000015 
+ 00021710  0x0000505b enable  0x0000001d 
+ 00021711  0x0000505c enable  0x00000020 
+ 00021712  0x0000505d disable  0x00000021 
+ 00021713  0x0000505e call  0x0000547f 
+ 00021714  0x0000505f rshift16  0x00000009 , 0x0000003f 
+ 00021715  0x00005060 rshift8  0x0000003f , 0x0000003f 
+ 00021716  0x00005061 rshift4  0x0000003f , 0x0000003f 
+ 00021717  0x00005062 inject  0x00000003 , 0x00000028 
+ 00021718  0x00005063 enable  0x00000007 
+ 00021719  0x00005064 enable  0x00000009 
+ 00021720  0x00005065 bpatchx  0x0000004e , 0x00004029 
+ 00021721  0x00005066 fetch  0x00000001 , 0x000043dc 
+ 00021722  0x00005067 inject  0x00000003 , 0x00000008 
+ 00021723  0x00005068 ifetch  0x00000001 , 0x00000006 
+ 00021724  0x00005069 and  0x0000003f , 0x0000003f , 0x00000039 
+ 00021725  0x0000506a inject  0x00000003 , 0x00000008 
+ 00021726  0x0000506b branch  0x000054e2 , 0x00000005 
+ 00021727  0x0000506d ifetch  0x00000001 , 0x00000006 
+ 00021728  0x0000506e inject  0x00000003 , 0x00000008 
+ 00021729  0x0000506f loop  0x000054df 
+ 00021730  0x00005072 enable  0x00000008 
+ 00021731  0x00005073 inject  0x00000003 , 0x00000018 
+ 00021732  0x00005074 disable  0x00000008 
+ 00021733  0x00005075 until  0x0000003e , 0x00000027 
+ 00021734  0x00005076 nop  0x00000064 
+ 00021735  0x00005077 disable  0x0000001d 
+ 00021736  0x00005078 rtn 
+ 00021737  0x0000507b bpatchx  0x0000004f , 0x00004029 
+ 00021738  0x0000507c fetch  0x00000001 , 0x00004484 
+ 00021739  0x0000507d beq  0x00000001 , 0x000054f9 
+ 00021740  0x0000507e fetch  0x00000001 , 0x00004485 
+ 00021741  0x0000507f lshift4  0x0000003f , 0x0000003f 
+ 00021742  0x00005080 lshift2  0x0000003f , 0x0000003f 
+ 00021743  0x00005081 store  0x00000001 , 0x000043dc 
+ 00021744  0x00005082 fetcht  0x00000001 , 0x0000436f 
+ 00021745  0x00005083 add  0x00000002 , 0x00000006 , 0x0000003f 
+ 00021746  0x00005084 store  0x00000001 , 0x000043dd 
+ 00021747  0x00005085 fetch  0x00000006 , 0x000044a0 
+ 00021748  0x00005086 store  0x00000006 , 0x000043de 
+ 00021749  0x00005087 copy  0x00000002 , 0x00000039 
+ 00021750  0x00005088 arg  0x00004370 , 0x00000006 
+ 00021751  0x00005089 call  0x00007ef4 
+ 00021752  0x0000508a branch  0x00005504 
+ 00021753  0x0000508c fetch  0x00000001 , 0x00004486 
+ 00021754  0x0000508d lshift4  0x0000003f , 0x0000003f 
+ 00021755  0x0000508e lshift2  0x0000003f , 0x0000003f 
+ 00021756  0x0000508f increase  0x00000001 , 0x0000003f 
+ 00021757  0x00005090 store  0x00000001 , 0x000043dc 
+ 00021758  0x00005091 setarg  0x0000000c 
+ 00021759  0x00005092 store  0x00000001 , 0x000043dd 
+ 00021760  0x00005093 fetch  0x00000006 , 0x000044a0 
+ 00021761  0x00005094 store  0x00000006 , 0x000043de 
+ 00021762  0x00005095 fetch  0x00000006 , 0x000041d0 
+ 00021763  0x00005096 istore  0x00000006 , 0x00000005 
+ 00021764  0x00005098 bpatchx  0x00000050 , 0x0000402a 
+ 00021765  0x00005099 fetch  0x00000001 , 0x00000000 
+ 00021766  0x0000509a increase  0x00000001 , 0x0000003f 
+ 00021767  0x0000509b store  0x00000001 , 0x00000000 
+ 00021768  0x0000509c arg  0x00000708 , 0x0000001b 
+ 00021769  0x0000509d disable  0x0000002d 
+ 00021770  0x0000509e branch  0x000054bf 
+ 00021771  0x000050a1 bpatchx  0x00000051 , 0x0000402a 
+ 00021772  0x000050a2 fetch  0x00000001 , 0x0000449e 
+ 00021773  0x000050a3 rtnne  0x00000001 
+ 00021774  0x000050a4 fetch  0x00000001 , 0x00000000 
+ 00021775  0x000050a5 increase  0x00000001 , 0x0000003f 
+ 00021776  0x000050a6 store  0x00000001 , 0x00000000 
+ 00021777  0x000050a7 arg  0x00000c03 , 0x00000002 
+ 00021778  0x000050a8 fetch  0x00000001 , 0x0000449f 
+ 00021779  0x000050a9 nsetflag  0x00000034 , 0x00000006 , 0x00000002 
+ 00021780  0x000050aa copy  0x00000011 , 0x0000003f 
+ 00021781  0x000050ab nsetflag  0x00000034 , 0x00000007 , 0x00000002 
+ 00021782  0x000050ac storet  0x00000002 , 0x000043dc 
+ 00021783  0x000050ad fetch  0x00000006 , 0x000044a0 
+ 00021784  0x000050ae istore  0x00000006 , 0x00000005 
+ 00021785  0x000050af fetch  0x00000006 , 0x0000044f 
+ 00021786  0x000050b0 istore  0x00000006 , 0x00000005 
+ 00021787  0x000050b1 branch  0x000054bf 
+ 00021788  0x000050b5 bpatchx  0x00000052 , 0x0000402a 
+ 00021789  0x000050b6 arg  0x00000004 , 0x00000002 
+ 00021790  0x000050b7 fetch  0x00000001 , 0x00004485 
+ 00021791  0x000050b8 nsetflag  0x00000034 , 0x00000006 , 0x00000002 
+ 00021792  0x000050b9 storet  0x00000001 , 0x000043dc 
+ 00021793  0x000050ba fetcht  0x00000001 , 0x0000438f 
+ 00021794  0x000050bb add  0x00000002 , 0x00000006 , 0x0000003f 
+ 00021795  0x000050bc store  0x00000001 , 0x000043dd 
+ 00021796  0x000050bd fetch  0x00000006 , 0x000044a0 
+ 00021797  0x000050be store  0x00000006 , 0x000043de 
+ 00021798  0x000050bf arg  0x00004390 , 0x00000006 
+ 00021799  0x000050c0 copy  0x00000002 , 0x00000039 
+ 00021800  0x000050c1 call  0x00007ef4 
+ 00021801  0x000050c2 call  0x000054c7 
+ 00021802  0x000050c3 branch  0x00005706 
+ 00021803  0x000050c6 bpatchx  0x00000053 , 0x0000402a 
+ 00021804  0x000050c7 force  0xffffffff , 0x0000003f 
+ 00021805  0x000050c8 setsect  0x00000002 , 0x00000001 
+ 00021806  0x000050c9 store  0x00000005 , 0x0000046f 
+ 00021807  0x000050ca call  0x0000545b 
+ 00021808  0x000050cb force  0x00000004 , 0x00000039 
+ 00021809  0x000050cc arg  0x00000463 , 0x00000005 
+ 00021810  0x000050cd call  0x0000630d 
+ 00021811  0x000050ce fetch  0x00000002 , 0x0000449c 
+ 00021812  0x000050cf store  0x00000002 , 0x0000046d 
+ 00021813  0x000050d1 random  0x0000003f 
+ 00021814  0x000050d2 and_into  0x0000000f , 0x0000003f 
+ 00021815  0x000050d3 sub  0x0000003f , 0x00000004 , 0x0000003e 
+ 00021816  0x000050d4 branch  0x00005535 , 0x00000002 
+ 00021817  0x000050d5 store  0x00000001 , 0x00000458 
+ 00021818  0x000050d6 store  0x00000001 , 0x000006e6 
+ 00021819  0x000050d7 bpatchx  0x00000054 , 0x0000402a 
+ 00021820  0x000050d8 fetcht  0x00000002 , 0x00004367 
+ 00021821  0x000050d9 storet  0x00000002 , 0x00000441 
+ 00021822  0x000050da copy  0x00000002 , 0x00000013 
+ 00021823  0x000050db add  0x00000022 , 0x00000007 , 0x0000003f 
+ 00021824  0x000050dc idiv  0x00000013 
+ 00021825  0x000050dd call  0x00007f86 
+ 00021826  0x000050de remainder  0x00000011 
+ 00021827  0x000050df isub  0x00000011 , 0x0000003f 
+ 00021828  0x000050e0 iadd  0x00000013 , 0x0000003f 
+ 00021829  0x000050e1 fetcht  0x00000002 , 0x00004365 
+ 00021830  0x000050e2 iadd  0x00000002 , 0x0000003f 
+ 00021831  0x000050e3 store  0x00000004 , 0x00000443 
+ 00021832  0x000050e4 isub  0x00000022 , 0x00000011 
+ 00021833  0x000050e5 increase  0xfffffffa , 0x00000011 
+ 00021834  0x000050e6 arg  0x00002205 , 0x00000012 
+ 00021835  0x000050e7 fetch  0x00000001 , 0x00004495 
+ 00021836  0x000050e8 nsetflag  0x00000034 , 0x00000006 , 0x00000012 
+ 00021837  0x000050e9 fetch  0x00000001 , 0x0000448e 
+ 00021838  0x000050ea nsetflag  0x00000034 , 0x00000007 , 0x00000012 
+ 00021839  0x000050eb copy  0x00000012 , 0x0000003f 
+ 00021840  0x000050ec store  0x00000002 , 0x000043dc 
+ 00021841  0x000050ed fetch  0x00000006 , 0x000044a0 
+ 00021842  0x000050ee istore  0x00000006 , 0x00000005 
+ 00021843  0x000050ef fetch  0x00000006 , 0x0000044f 
+ 00021844  0x000050f0 istore  0x00000006 , 0x00000005 
+ 00021845  0x000050f1 fetch  0x00000004 , 0x00000463 
+ 00021846  0x000050f2 istore  0x00000004 , 0x00000005 
+ 00021847  0x000050f3 random  0x0000003f 
+ 00021848  0x000050f4 istore  0x00000002 , 0x00000005 
+ 00021849  0x000050f5 random  0x0000003f 
+ 00021850  0x000050f6 istore  0x00000001 , 0x00000005 
+ 00021851  0x000050f7 force  0x00000002 , 0x0000003f 
+ 00021852  0x000050f8 istore  0x00000001 , 0x00000005 
+ 00021853  0x000050f9 rshift2  0x00000011 , 0x0000003f 
+ 00021854  0x000050fa istore  0x00000002 , 0x00000005 
+ 00021855  0x000050fb rshift2  0x00000013 , 0x0000003f 
+ 00021856  0x000050fc istore  0x00000002 , 0x00000005 
+ 00021857  0x000050fd bpatchx  0x00000055 , 0x0000402a 
+ 00021858  0x000050fe setarg  0x00000000 
+ 00021859  0x000050ff istore  0x00000002 , 0x00000005 
+ 00021860  0x00005100 fetch  0x00000002 , 0x0000449c 
+ 00021861  0x00005101 istore  0x00000002 , 0x00000005 
+ 00021862  0x00005102 fetch  0x00000005 , 0x0000046f 
+ 00021863  0x00005103 istore  0x00000005 , 0x00000005 
+ 00021864  0x00005104 fetch  0x00000001 , 0x00000458 
+ 00021865  0x00005105 arg  0x000000a0 , 0x00000002 
+ 00021866  0x00005106 ior  0x00000002 , 0x0000003f 
+ 00021867  0x00005107 istore  0x00000001 , 0x00000005 
+ 00021868  0x00005108 call  0x000054c7 
+ 00021869  0x00005109 setarg  0x000043dc 
+ 00021870  0x0000510a add  0x0000003f , 0x00000012 , 0x00000006 
+ 00021871  0x0000510b ifetch  0x00000003 , 0x00000006 
+ 00021872  0x0000510c store  0x00000003 , 0x00000467 
+ 00021873  0x0000510d rtn 
+ 00021874  0x00005110 bpatchx  0x00000056 , 0x0000402a 
+ 00021875  0x00005111 disable  0x00000029 
+ 00021876  0x00005112 branch  0x0000540c 
+ 00021877  0x00005117 fetch  0x00000001 , 0x0000043f 
+ 00021878  0x00005118 rtnbit0  0x00000005 
+ 00021879  0x00005119 fetch  0x00000002 , 0x00000459 
+ 00021880  0x0000511a fetcht  0x00000002 , 0x0000045f 
+ 00021881  0x0000511b isub  0x00000002 , 0x0000003f 
+ 00021882  0x0000511c nrtn  0x00000002 
+ 00021883  0x0000511d store  0x00000002 , 0x00000a9a 
+ 00021884  0x0000511e bpatchx  0x00000057 , 0x0000402a 
+ 00021885  0x0000511f fetch  0x00000001 , 0x0000043f 
+ 00021886  0x00005120 set0  0x00000005 , 0x0000003f 
+ 00021887  0x00005121 set0  0x00000003 , 0x0000003f 
+ 00021888  0x00005122 store  0x00000001 , 0x0000043f 
+ 00021889  0x00005123 fetch  0x00000004 , 0x00000443 
+ 00021890  0x00005124 fetcht  0x00000002 , 0x00000441 
+ 00021891  0x00005125 storet  0x00000002 , 0x00000aa2 
+ 00021892  0x00005126 isub  0x00000002 , 0x00000011 
+ 00021893  0x00005127 bpatchx  0x00000058 , 0x0000402b 
+ 00021894  0x00005128 fetch  0x00000001 , 0x000043d3 
+ 00021895  0x00005129 store  0x00000001 , 0x0000046a 
+ 00021896  0x0000512a ifetcht  0x00000002 , 0x00000006 
+ 00021897  0x0000512b ifetch  0x00000002 , 0x00000006 
+ 00021898  0x0000512c lshift2  0x0000003f , 0x0000003f 
+ 00021899  0x0000512d store  0x00000002 , 0x00000441 
+ 00021900  0x0000512e lshift2  0x00000002 , 0x00000002 
+ 00021901  0x0000512f iadd  0x00000002 , 0x0000003f 
+ 00021902  0x00005130 ifetcht  0x00000004 , 0x00000006 
+ 00021903  0x00005131 storet  0x00000004 , 0x0000046b 
+ 00021904  0x00005132 iadd  0x00000011 , 0x0000003f 
+ 00021905  0x00005133 copy  0x0000003f , 0x00000014 
+ 00021906  0x00005134 fetch  0x00000002 , 0x00000441 
+ 00021907  0x00005135 fetcht  0x00000002 , 0x00000aa2 
+ 00021908  0x00005136 isub  0x00000002 , 0x0000003f 
+ 00021909  0x00005137 fetcht  0x00000002 , 0x00000a9a 
+ 00021910  0x00005138 imul32  0x00000002 , 0x0000003f 
+ 00021911  0x00005139 iadd  0x00000014 , 0x0000003f 
+ 00021912  0x0000513a store  0x00000004 , 0x00000443 
+ 00021913  0x0000513b call  0x00005713 
+ 00021914  0x0000513c fetch  0x00000002 , 0x0000046d 
+ 00021915  0x0000513d store  0x00000002 , 0x000044ba 
+ 00021916  0x0000513e rtn 
+ 00021917  0x00005142 bpatchx  0x00000059 , 0x0000402b 
+ 00021918  0x00005143 fetch  0x00000001 , 0x0000043f 
+ 00021919  0x00005144 rtnbit0  0x00000006 
+ 00021920  0x00005145 fetch  0x00000002 , 0x00000459 
+ 00021921  0x00005146 fetcht  0x00000002 , 0x0000045f 
+ 00021922  0x00005147 isub  0x00000002 , 0x0000003f 
+ 00021923  0x00005148 nrtn  0x00000002 
+ 00021924  0x00005149 fetch  0x00000001 , 0x0000043f 
+ 00021925  0x0000514a set0  0x00000006 , 0x0000003f 
+ 00021926  0x0000514b store  0x00000001 , 0x0000043f 
+ 00021927  0x0000514c fetch  0x00000005 , 0x000043ce 
+ 00021928  0x0000514d store  0x00000005 , 0x0000046f 
+ 00021929  0x0000514e branch  0x0000545b 
+ 00021930  0x00005152 bpatchx  0x0000005a , 0x0000402b 
+ 00021931  0x00005153 call  0x000056ed 
+ 00021932  0x00005154 call  0x000055c0 
+ 00021933  0x00005155 fetch  0x00000001 , 0x000002d9 
+ 00021934  0x00005156 isolate1  0x00000004 , 0x0000003f 
+ 00021935  0x00005157 setflag  0x00000001 , 0x0000002a , 0x00000000 
+ 00021936  0x00005158 rshift  0x0000003f , 0x0000003f 
+ 00021937  0x00005159 ixor  0x00000002 , 0x0000003f 
+ 00021938  0x0000515a isolate1  0x00000002 , 0x0000003f 
+ 00021939  0x0000515b setflag  0x00000001 , 0x0000000f , 0x00000000 
+ 00021940  0x0000515c rtnmark1  0x0000000f 
+ 00021941  0x0000515d fetch  0x00000001 , 0x000002da 
+ 00021942  0x0000515e branch  0x000055bc , 0x00000034 
+ 00021943  0x0000515f fetch  0x00000001 , 0x0000043f 
+ 00021944  0x00005160 bbit0  0x00000004 , 0x000055bc 
+ 00021945  0x00005161 call  0x0000748d 
+ 00021946  0x00005162 call  0x000073fb 
+ 00021947  0x00005163 nrtn  0x00000034 
+ 00021948  0x00005165 fetcht  0x00000001 , 0x00000456 
+ 00021949  0x00005166 setflip  0x00000002 , 0x00000002 
+ 00021950  0x00005167 storet  0x00000001 , 0x00000456 
+ 00021951  0x00005168 rtn 
+ 00021952  0x0000516c bpatchx  0x0000005b , 0x0000402b 
+ 00021953  0x0000516d fetcht  0x00000001 , 0x00000456 
+ 00021954  0x0000516e isolate0  0x00000005 , 0x00000002 
+ 00021955  0x0000516f rtn  0x00000001 
+ 00021956  0x00005170 fetch  0x00000001 , 0x000002d9 
+ 00021957  0x00005171 lshift  0x0000003f , 0x0000003f 
+ 00021958  0x00005172 ixor  0x00000002 , 0x0000003f 
+ 00021959  0x00005173 rtnbit0  0x00000003 
+ 00021960  0x00005174 set0  0x00000005 , 0x00000002 
+ 00021961  0x00005175 setflip  0x00000003 , 0x00000002 
+ 00021962  0x00005176 storet  0x00000001 , 0x00000456 
+ 00021963  0x00005177 compare  0x00000003 , 0x00000002 , 0x00000003 
+ 00021964  0x00005178 nrtn  0x00000001 
+ 00021965  0x00005179 fetch  0x00000001 , 0x000043de 
+ 00021966  0x0000517a beq  0x00000005 , 0x000055d2 
+ 00021967  0x0000517b fetch  0x00000001 , 0x000044c5 
+ 00021968  0x0000517c beq  0x00000002 , 0x000055d6 
+ 00021969  0x0000517d rtn 
+ 00021970  0x00005181 fetch  0x00000001 , 0x0000043f 
+ 00021971  0x00005182 set1  0x00000004 , 0x0000003f 
+ 00021972  0x00005183 store  0x00000001 , 0x0000043f 
+ 00021973  0x00005184 rtn 
+ 00021974  0x00005187 bpatchx  0x0000005c , 0x0000402b 
+ 00021975  0x00005188 jam  0x00000000 , 0x000044c5 
+ 00021976  0x00005189 arg  0x00000000 , 0x0000003f 
+ 00021977  0x0000518a store  0x00000004 , 0x0000440d 
+ 00021978  0x0000518b store  0x00000005 , 0x00004403 
+ 00021979  0x0000518c set1  0x00000027 , 0x0000003f 
+ 00021980  0x0000518d store  0x00000005 , 0x00004408 
+ 00021981  0x0000518e fetch  0x00000001 , 0x0000043f 
+ 00021982  0x0000518f set0  0x00000004 , 0x0000003f 
+ 00021983  0x00005190 store  0x00000001 , 0x0000043f 
+ 00021984  0x00005191 rtn 
+ 00021985  0x00005195 bpatchx  0x0000005d , 0x0000402b 
+ 00021986  0x00005196 call  0x00005422 
+ 00021987  0x00005197 call  0x00005485 
+ 00021988  0x00005198 fetch  0x00000001 , 0x00000001 
+ 00021989  0x00005199 increase  0x00000001 , 0x0000003f 
+ 00021990  0x0000519a store  0x00000001 , 0x00000001 
+ 00021991  0x0000519b rtn 
+ 00021992  0x0000519f bpatchx  0x0000005e , 0x0000402b 
+ 00021993  0x000051a0 fetch  0x00000001 , 0x00004369 
+ 00021994  0x000051a1 rtnne  0x00000001 
+ 00021995  0x000051a2 arg  0x00000002 , 0x00000007 
+ 00021996  0x000051a3 call  0x00007f16 
+ 00021997  0x000051a4 nrtn  0x00000034 
+ 00021998  0x000051a5 fetch  0x00000002 , 0x0000436a 
+ 00021999  0x000051a6 fetcht  0x00000002 , 0x0000436c 
+ 00022000  0x000051a7 isub  0x00000002 , 0x0000003f 
+ 00022001  0x000051a8 arg  0x00000002 , 0x00000007 
+ 00022002  0x000051a9 call  0x00007f08 
+ 00022003  0x000051aa disable  0x00000029 
+ 00022004  0x000051ab call  0x00005572 
+ 00022005  0x000051ac call  0x000055e1 
+ 00022006  0x000051ad nrtn  0x0000002d 
+ 00022007  0x000051ae bpatchx  0x0000005f , 0x0000402b 
+ 00022008  0x000051af fetch  0x00000006 , 0x000002db 
+ 00022009  0x000051b0 store  0x00000006 , 0x0000044f 
+ 00022010  0x000051b3 fetch  0x00000001 , 0x00000002 
+ 00022011  0x000051b4 increase  0x00000001 , 0x0000003f 
+ 00022012  0x000051b5 store  0x00000001 , 0x00000002 
+ 00022013  0x000051b6 call  0x00005608 
+ 00022014  0x000051b7 rtn  0x00000029 
+ 00022015  0x000051b8 call  0x0000550b 
+ 00022016  0x000051b9 nrtn  0x0000002d 
+ 00022017  0x000051ba bpatchx  0x00000060 , 0x0000402c 
+ 00022018  0x000051bb fetch  0x00000001 , 0x00000004 
+ 00022019  0x000051bc increase  0x00000001 , 0x0000003f 
+ 00022020  0x000051bd store  0x00000001 , 0x00000004 
+ 00022021  0x000051be fetch  0x00000009 , 0x000002e1 
+ 00022022  0x000051bf store  0x00000009 , 0x00000101 
+ 00022023  0x000051c0 rtn 
+ 00022024  0x000051c3 bpatchx  0x00000061 , 0x0000402c 
+ 00022025  0x000051c4 fetch  0x00000001 , 0x0000049b 
+ 00022026  0x000051c5 rtnne  0x0000001b 
+ 00022027  0x000051c6 fetch  0x00000006 , 0x0000044f 
+ 00022028  0x000051c7 fetcht  0x00000006 , 0x0000448f 
+ 00022029  0x000051c8 isub  0x00000002 , 0x0000003e 
+ 00022030  0x000051c9 nrtn  0x00000005 
+ 00022031  0x000051ca call  0x0000223b 
+ 00022032  0x000051cb nrtn  0x00000005 
+ 00022033  0x000051cc call  0x0000552b 
+ 00022034  0x000051cd call  0x00005340 
+ 00022035  0x000051ce bpatchx  0x00000062 , 0x0000402c 
+ 00022036  0x000051cf jam  0x00000000 , 0x000041ce 
+ 00022037  0x000051d0 jam  0x00000000 , 0x00000476 
+ 00022038  0x000051d1 jam  0x00000000 , 0x00004369 
+ 00022039  0x000051d2 jam  0x00000000 , 0x0000049b 
+ 00022040  0x000051d3 branch  0x00002223 
+ 00022041  0x000051d6 arg  0x00000001 , 0x00000011 
+ 00022042  0x000051d7 fetch  0x00000001 , 0x000002d9 
+ 00022043  0x000051d8 rtnbit1  0x00000006 
+ 00022044  0x000051d9 arg  0x00000000 , 0x00000011 
+ 00022045  0x000051da rtn 
+ 00022046  0x000051df bpatchx  0x00000063 , 0x0000402c 
+ 00022047  0x000051e0 fetch  0x00000001 , 0x00000456 
+ 00022048  0x000051e1 rtnbit1  0x00000005 
+ 00022049  0x000051e2 call  0x00005642 
+ 00022050  0x000051e3 call  0x00005873 
+ 00022051  0x000051e4 branch  0x00005664 , 0x00000034 
+ 00022052  0x000051e5 ifetch  0x00000001 , 0x00000006 
+ 00022053  0x000051e6 ifetcht  0x00000001 , 0x00000006 
+ 00022054  0x000051e7 copy  0x00000002 , 0x00000011 
+ 00022055  0x000051e8 isub  0x00000011 , 0x0000003f 
+ 00022056  0x000051e9 arg  0x0000001b , 0x00000002 
+ 00022057  0x000051ea call  0x00007fdd 
+ 00022058  0x000051eb copy  0x0000003f , 0x00000002 
+ 00022059  0x000051ec ifetch  0x00000001 , 0x00000006 
+ 00022060  0x000051ed copy  0x0000003f , 0x00000001 
+ 00022061  0x000051ee copy  0x00000011 , 0x0000003f 
+ 00022062  0x000051ef iadd  0x00000006 , 0x00000006 
+ 00022063  0x000051f0 arg  0x000043de , 0x00000005 
+ 00022064  0x000051f1 copy  0x00000002 , 0x00000039 
+ 00022065  0x000051f2 call  0x00007f01 
+ 00022066  0x000051f3 call  0x00005654 
+ 00022067  0x000051f4 call  0x00005666 
+ 00022068  0x000051f6 call  0x00005873 
+ 00022069  0x000051f7 ifetch  0x00000001 , 0x00000006 
+ 00022070  0x000051f8 copy  0x0000003f , 0x00000011 
+ 00022071  0x000051f9 copy  0x00000006 , 0x00000013 
+ 00022072  0x000051fa ifetcht  0x00000001 , 0x00000006 
+ 00022073  0x000051fb copy  0x00000002 , 0x00000012 
+ 00022074  0x000051fc isub  0x00000012 , 0x0000003f 
+ 00022075  0x000051fd arg  0x0000001b , 0x00000002 
+ 00022076  0x000051fe call  0x00007fdd 
+ 00022077  0x000051ff iadd  0x00000012 , 0x0000003f 
+ 00022078  0x00005200 istore  0x00000001 , 0x00000013 
+ 00022079  0x00005201 isub  0x00000011 , 0x0000003e 
+ 00022080  0x00005202 nrtn  0x00000005 
+ 00022081  0x00005203 branch  0x00005896 
+ 00022082  0x00005207 call  0x00005649 
+ 00022083  0x00005208 rtnmark1  0x00000029 
+ 00022084  0x00005209 fetch  0x00000001 , 0x000044e9 
+ 00022085  0x0000520a bbit0  0x00000002 , 0x00005652 
+ 00022086  0x0000520b call  0x00005876 
+ 00022087  0x0000520c branch  0x00005652 , 0x00000034 
+ 00022088  0x0000520d branch  0x00005650 
+ 00022089  0x00005211 call  0x00005873 
+ 00022090  0x00005212 branch  0x00005652 , 0x00000034 
+ 00022091  0x00005213 ifetch  0x00000001 , 0x00000006 
+ 00022092  0x00005214 ifetcht  0x00000001 , 0x00000006 
+ 00022093  0x00005215 isub  0x00000002 , 0x0000003f 
+ 00022094  0x00005216 sub  0x0000003f , 0x0000001b , 0x0000003e 
+ 00022095  0x00005217 branch  0x00005652 , 0x00000002 
+ 00022096  0x00005219 set1  0x00000029 , 0x00000000 
+ 00022097  0x0000521a rtn 
+ 00022098  0x0000521d set0  0x00000029 , 0x00000000 
+ 00022099  0x0000521e rtn 
+ 00022100  0x00005221 copy  0x00000011 , 0x0000003f 
+ 00022101  0x00005222 rtn  0x00000034 
+ 00022102  0x00005223 arg  0x00000001 , 0x00000001 
+ 00022103  0x00005224 rtn 
+ 00022104  0x00005228 bpatchx  0x00000064 , 0x0000402c 
+ 00022105  0x00005229 increase  0x00000001 , 0x00000002 
+ 00022106  0x0000522a call  0x0000576a 
+ 00022107  0x0000522b increase  0xfffffffe , 0x00000006 
+ 00022108  0x0000522c ifetch  0x00000002 , 0x00000006 
+ 00022109  0x0000522d arg  0x00002902 , 0x00000002 
+ 00022110  0x0000522e isub  0x00000002 , 0x0000003e 
+ 00022111  0x0000522f nrtn  0x00000005 
+ 00022112  0x00005230 increase  0x00000001 , 0x00000006 
+ 00022113  0x00005231 copy  0x00000006 , 0x00000011 
+ 00022114  0x00005232 ifetch  0x00000001 , 0x00000006 
+ 00022115  0x00005233 rtn 
+ 00022116  0x00005237 force  0x00000000 , 0x00000002 
+ 00022117  0x00005238 force  0x00000001 , 0x00000001 
+ 00022118  0x0000523b bpatchx  0x00000065 , 0x0000402c 
+ 00022119  0x0000523c storet  0x00000001 , 0x000043dd 
+ 00022120  0x0000523d fetcht  0x00000001 , 0x00000456 
+ 00022121  0x0000523e set1  0x00000005 , 0x00000002 
+ 00022122  0x0000523f and  0x00000002 , 0x000000fc , 0x0000003f 
+ 00022123  0x00005240 ior  0x00000001 , 0x0000003f 
+ 00022124  0x00005241 store  0x00000001 , 0x00000456 
+ 00022125  0x00005242 and_into  0x0000001f , 0x0000003f 
+ 00022126  0x00005243 isolate1  0x00000029 , 0x00000000 
+ 00022127  0x00005244 setflag  0x00000001 , 0x00000004 , 0x0000003f 
+ 00022128  0x00005245 store  0x00000001 , 0x000043dc 
+ 00022129  0x00005247 fetch  0x00000001 , 0x000043dc 
+ 00022130  0x00005248 compare  0x00000001 , 0x00000001 , 0x00000003 
+ 00022131  0x00005249 nbranch  0x00005676 , 0x00000001 
+ 00022132  0x0000524a fetch  0x00000001 , 0x000043dd 
+ 00022133  0x0000524b rtn  0x00000034 
+ 00022134  0x0000524d fetch  0x00000001 , 0x0000043f 
+ 00022135  0x0000524e rtnbit0  0x00000004 
+ 00022136  0x0000524f call  0x0000748d 
+ 00022137  0x00005250 branch  0x000073e3 
+ 00022138  0x00005254 arg  0x00000000 , 0x00000007 
+ 00022139  0x00005255 branch  0x00002c32 
+ 00022140  0x00005258 arg  0x00000000 , 0x00000007 
+ 00022141  0x00005259 branch  0x00002c36 
+ 00022142  0x0000525d bpatchx  0x00000066 , 0x0000402c 
+ 00022143  0x0000525e rtnmark1  0x0000000f 
+ 00022144  0x0000525f call  0x00005890 
+ 00022145  0x00005260 nrtn  0x00000034 
+ 00022146  0x00005261 fetch  0x00000001 , 0x000002d9 
+ 00022147  0x00005262 and  0x0000003f , 0x00000003 , 0x0000003f 
+ 00022148  0x00005263 store  0x00000001 , 0x0000450c 
+ 00022149  0x00005264 ifetch  0x00000001 , 0x00000006 
+ 00022150  0x00005265 and  0x0000003f , 0x0000001f , 0x0000003f 
+ 00022151  0x00005266 store  0x00000001 , 0x0000450b 
+ 00022152  0x00005267 rtn  0x00000034 
+ 00022153  0x00005268 copy  0x00000006 , 0x0000003f 
+ 00022154  0x00005269 store  0x00000002 , 0x0000450d 
+ 00022155  0x0000526a fetch  0x00000001 , 0x0000450c 
+ 00022156  0x0000526b beq  0x00000003 , 0x00005c64 
+ 00022157  0x0000526d call  0x0000569a 
+ 00022158  0x0000526e nbranch  0x0000567a , 0x00000028 
+ 00022159  0x0000526f call  0x0000567c 
+ 00022160  0x00005270 fetch  0x00000002 , 0x0000450d 
+ 00022161  0x00005271 copy  0x0000003f , 0x00000006 
+ 00022162  0x00005272 ifetch  0x00000002 , 0x00000006 
+ 00022163  0x00005273 store  0x00000002 , 0x000044fc 
+ 00022164  0x00005274 bpatchx  0x00000067 , 0x0000402c 
+ 00022165  0x00005275 ifetch  0x00000002 , 0x00000006 
+ 00022166  0x00005276 beq  0x00000004 , 0x000058ab 
+ 00022167  0x00005277 beq  0x00000006 , 0x00005af4 
+ 00022168  0x00005278 beq  0x00000005 , 0x00005ab6 
+ 00022169  0x00005279 rtn 
+ 00022170  0x0000527d fetch  0x00000001 , 0x0000450c 
+ 00022171  0x0000527e beq  0x00000002 , 0x000056a9 
+ 00022172  0x0000527f beq  0x00000001 , 0x000056c1 
+ 00022173  0x00005280 rtn 
+ 00022174  0x00005286 call  0x00007fe7 
+ 00022175  0x00005287 arg  0x00000004 , 0x00000002 
+ 00022176  0x00005288 isub  0x0000003f , 0x0000003e 
+ 00022177  0x00005289 rtn  0x00000005 
+ 00022178  0x0000528a arg  0x00000005 , 0x00000002 
+ 00022179  0x0000528b isub  0x0000003f , 0x0000003e 
+ 00022180  0x0000528c rtn  0x00000005 
+ 00022181  0x0000528d arg  0x00000006 , 0x00000002 
+ 00022182  0x0000528e isub  0x0000003f , 0x0000003e 
+ 00022183  0x0000528f rtn  0x00000005 
+ 00022184  0x00005290 branch  0x00007fe9 
+ 00022185  0x00005294 fetch  0x00000002 , 0x0000450d 
+ 00022186  0x00005295 copy  0x0000003f , 0x00000006 
+ 00022187  0x00005296 ifetch  0x00000002 , 0x00000006 
+ 00022188  0x00005297 store  0x00000002 , 0x000044fc 
+ 00022189  0x00005298 ifetch  0x00000002 , 0x00000006 
+ 00022190  0x00005299 call  0x0000569e 
+ 00022191  0x0000529a nrtn  0x00000028 
+ 00022192  0x0000529b fetcht  0x00000001 , 0x0000450b 
+ 00022193  0x0000529c storet  0x00000001 , 0x000044fe 
+ 00022194  0x0000529d fetch  0x00000002 , 0x000044fc 
+ 00022195  0x0000529e increase  0x00000004 , 0x0000003f 
+ 00022196  0x0000529f isub  0x00000002 , 0x0000003e 
+ 00022197  0x000052a0 branch  0x00007fe7 , 0x00000005 
+ 00022198  0x000052a1 fetch  0x00000001 , 0x0000450b 
+ 00022199  0x000052a2 copy  0x0000003f , 0x00000039 
+ 00022200  0x000052a3 arg  0x00000311 , 0x00000005 
+ 00022201  0x000052a4 fetch  0x00000002 , 0x0000450d 
+ 00022202  0x000052a5 copy  0x0000003f , 0x00000006 
+ 00022203  0x000052a6 call  0x00007f01 
+ 00022204  0x000052a7 branch  0x00007fe9 
+ 00022205  0x000052ad call  0x00007fe7 
+ 00022206  0x000052ae fetch  0x00000001 , 0x000044fe 
+ 00022207  0x000052af nrtn  0x00000034 
+ 00022208  0x000052b0 branch  0x00007fe9 
+ 00022209  0x000052b3 call  0x000056bd 
+ 00022210  0x000052b4 nrtn  0x00000028 
+ 00022211  0x000052b5 fetch  0x00000001 , 0x000044fe 
+ 00022212  0x000052b6 arg  0x00000311 , 0x00000005 
+ 00022213  0x000052b7 iadd  0x00000005 , 0x00000011 
+ 00022214  0x000052b8 fetcht  0x00000001 , 0x0000450b 
+ 00022215  0x000052b9 iadd  0x00000002 , 0x0000003f 
+ 00022216  0x000052ba store  0x00000001 , 0x000044fe 
+ 00022217  0x000052bb fetch  0x00000001 , 0x0000450b 
+ 00022218  0x000052bc copy  0x0000003f , 0x00000039 
+ 00022219  0x000052bd copy  0x00000011 , 0x00000005 
+ 00022220  0x000052be fetch  0x00000002 , 0x0000450d 
+ 00022221  0x000052bf copy  0x0000003f , 0x00000006 
+ 00022222  0x000052c0 call  0x00007ef4 
+ 00022223  0x000052c1 setarg  0x00000311 
+ 00022224  0x000052c2 store  0x00000002 , 0x0000450d 
+ 00022225  0x000052c3 fetch  0x00000002 , 0x000044fc 
+ 00022226  0x000052c4 increase  0x00000004 , 0x0000003f 
+ 00022227  0x000052c5 fetcht  0x00000001 , 0x000044fe 
+ 00022228  0x000052c6 isub  0x00000002 , 0x0000003e 
+ 00022229  0x000052c7 branch  0x00007fe7 , 0x00000005 
+ 00022230  0x000052c8 branch  0x00007fe9 
+ 00022231  0x000052cf call  0x00007ea5 
+ 00022232  0x000052d0 arg  0x0000445e , 0x00000005 
+ 00022233  0x000052d2 fetch  0x00000002 , 0x000044fc 
+ 00022234  0x000052d3 increase  0xfffffffb , 0x0000003f 
+ 00022235  0x000052d5 istore  0x00000001 , 0x00000005 
+ 00022236  0x000052d6 copy  0x0000003f , 0x00000039 
+ 00022237  0x000052d7 call  0x00007e9f 
+ 00022238  0x000052d8 branch  0x00007ef4 
+ 00022239  0x000052db call  0x00007ea5 
+ 00022240  0x000052dc arg  0x00004471 , 0x00000005 
+ 00022241  0x000052dd branch  0x000056d9 
+ 00022242  0x000052e2 fetch  0x00000002 , 0x000041f9 
+ 00022243  0x000052e3 branch  0x00007f9c 
+ 00022244  0x000052e6 fetcht  0x00000004 , 0x0000045b 
+ 00022245  0x000052e7 call  0x00002a7b 
+ 00022246  0x000052e8 isub  0x00000002 , 0x0000000b 
+ 00022247  0x000052e9 deposit  0x0000000b 
+ 00022248  0x000052ea fetcht  0x00000002 , 0x0000046d 
+ 00022249  0x000052eb lshift4  0x00000002 , 0x00000002 
+ 00022250  0x000052ec lshift  0x00000002 , 0x00000002 
+ 00022251  0x000052ed isub  0x00000002 , 0x0000003f 
+ 00022252  0x000052ee rtn 
+ 00022253  0x000052f1 call  0x00002a7b 
+ 00022254  0x000052f2 store  0x00000004 , 0x0000045b 
+ 00022255  0x000052f3 rtn 
+ 00022256  0x000052f7 jam  0x00000024 , 0x00000016 
+ 00022257  0x000052f8 jam  0x00000000 , 0x00000ac2 
+ 00022258  0x000052fa bpatchx  0x00000068 , 0x0000402d 
+ 00022259  0x000052fb fetch  0x00000001 , 0x0000436e 
+ 00022260  0x000052fc rtn  0x00000034 
+ 00022261  0x000052fd arg  0x00000000 , 0x00000007 
+ 00022262  0x000052fe call  0x00007f16 
+ 00022263  0x000052ff nrtn  0x00000034 
+ 00022264  0x00005300 bpatchx  0x00000069 , 0x0000402d 
+ 00022265  0x00005302 disable  0x00000029 
+ 00022266  0x00005303 enable  0x00000010 
+ 00022267  0x00005304 call  0x00005572 
+ 00022268  0x00005305 call  0x00005422 
+ 00022269  0x00005306 call  0x000054e9 
+ 00022270  0x00005307 nbranch  0x00005706 , 0x0000002d 
+ 00022271  0x00005308 fetch  0x00000001 , 0x00000003 
+ 00022272  0x00005309 increase  0x00000001 , 0x0000003f 
+ 00022273  0x0000530a store  0x00000001 , 0x00000003 
+ 00022274  0x0000530b fetch  0x00000001 , 0x000002d9 
+ 00022275  0x0000530c and  0x0000003f , 0x0000000f , 0x0000003f 
+ 00022276  0x0000530d beq  0x00000003 , 0x0000551c 
+ 00022277  0x0000530e beq  0x00000005 , 0x00005728 
+ 00022278  0x00005310 bpatchx  0x0000006a , 0x0000402d 
+ 00022279  0x00005311 random  0x0000003f 
+ 00022280  0x00005312 arg  0x000001ff , 0x00000002 
+ 00022281  0x00005313 iand  0x00000002 , 0x0000003f 
+ 00022282  0x00005314 add  0x0000003f , 0x000000fa , 0x0000003f 
+ 00022283  0x00005315 call  0x00003cbe 
+ 00022284  0x00005316 fetch  0x00000001 , 0x00000ac2 
+ 00022285  0x00005317 fetcht  0x00000001 , 0x0000448d 
+ 00022286  0x00005318 isub  0x00000002 , 0x0000003e 
+ 00022287  0x00005319 nbranch  0x000056f2 , 0x00000005 
+ 00022288  0x0000531a arg  0x00000000 , 0x00000007 
+ 00022289  0x0000531b fetch  0x00000002 , 0x00004482 
+ 00022290  0x0000531c branch  0x00007f08 
+ 00022291  0x00005320 bpatchx  0x0000006b , 0x0000402d 
+ 00022292  0x00005321 fetch  0x00000001 , 0x00000476 
+ 00022293  0x00005322 call  0x000053fc 
+ 00022294  0x00005323 fetch  0x00000002 , 0x00000441 
+ 00022295  0x00005324 imul32  0x00000002 , 0x0000003f 
+ 00022296  0x00005325 arg  0x00000177 , 0x00000002 
+ 00022297  0x00005326 imul32  0x00000002 , 0x0000003f 
+ 00022298  0x00005327 arg  0x000186a0 , 0x00000002 
+ 00022299  0x00005328 idiv  0x00000002 
+ 00022300  0x00005329 fetch  0x00000001 , 0x0000046a 
+ 00022301  0x0000532a arg  0x00004e20 , 0x00000002 
+ 00022302  0x0000532b imul32  0x00000002 , 0x0000003f 
+ 00022303  0x0000532c iadd  0x00000002 , 0x0000003f 
+ 00022304  0x0000532d store  0x00000004 , 0x000044e5 
+ 00022305  0x0000532e bpatchx  0x0000006c , 0x0000402d 
+ 00022306  0x0000532f fetch  0x00000002 , 0x000040c1 
+ 00022307  0x00005330 call  0x00007f86 
+ 00022308  0x00005331 quotient  0x00000002 
+ 00022309  0x00005332 iadd  0x00000002 , 0x0000003f 
+ 00022310  0x00005333 store  0x00000002 , 0x0000044d 
+ 00022311  0x00005334 rtn 
+ 00022312  0x00005337 bpatchx  0x0000006d , 0x0000402d 
+ 00022313  0x00005338 fetch  0x00000006 , 0x000002e1 
+ 00022314  0x00005339 fetcht  0x00000006 , 0x000044a0 
+ 00022315  0x0000533a isub  0x00000002 , 0x0000003e 
+ 00022316  0x0000533b nrtn  0x00000005 
+ 00022317  0x0000533c call  0x00005619 
+ 00022318  0x0000533d copy  0x00000011 , 0x0000003f 
+ 00022319  0x0000533e store  0x00000001 , 0x0000448e 
+ 00022320  0x0000533f fetch  0x00000007 , 0x000002ee 
+ 00022321  0x00005340 store  0x00000007 , 0x00000101 
+ 00022322  0x00005341 ifetch  0x00000008 , 0x00000006 
+ 00022323  0x00005342 istore  0x00000008 , 0x00000005 
+ 00022324  0x00005343 fetch  0x00000006 , 0x000002db 
+ 00022325  0x00005344 store  0x00000006 , 0x0000044f 
+ 00022326  0x00005345 increase  0x00000006 , 0x00000006 
+ 00022327  0x00005346 ifetch  0x00000008 , 0x00000006 
+ 00022328  0x00005347 store  0x00000008 , 0x00000463 
+ 00022329  0x00005348 ifetcht  0x00000002 , 0x00000006 
+ 00022330  0x00005349 bpatchx  0x0000006e , 0x0000402d 
+ 00022331  0x0000534a lshift2  0x00000002 , 0x00000002 
+ 00022332  0x0000534b ifetch  0x00000002 , 0x00000006 
+ 00022333  0x0000534c lshift2  0x0000003f , 0x0000003f 
+ 00022334  0x0000534d store  0x00000002 , 0x00000441 
+ 00022335  0x0000534e store  0x00000004 , 0x00000443 
+ 00022336  0x0000534f isub  0x00000002 , 0x0000003f 
+ 00022337  0x00005350 add  0x0000003f , 0xfffffffe , 0x00000028 
+ 00022338  0x00005351 ifetch  0x00000009 , 0x00000006 
+ 00022339  0x00005352 store  0x00000009 , 0x0000046b 
+ 00022340  0x00005353 bpatchx  0x0000006f , 0x0000402d 
+ 00022341  0x00005354 ifetch  0x00000001 , 0x00000006 
+ 00022342  0x00005355 rshift4  0x0000003f , 0x00000002 
+ 00022343  0x00005356 rshift  0x00000002 , 0x00000002 
+ 00022344  0x00005357 storet  0x00000001 , 0x00000476 
+ 00022345  0x00005358 and_into  0x0000001f , 0x0000003f 
+ 00022346  0x00005359 store  0x00000001 , 0x00000458 
+ 00022347  0x0000535a call  0x00005713 
+ 00022348  0x0000535b call  0x0000545b 
+ 00022349  0x0000535c call  0x0000534c 
+ 00022350  0x0000535d call  0x0000223b 
+ 00022351  0x0000535e nrtn  0x00000005 
+ 00022352  0x0000535f bpatchx  0x00000070 , 0x0000402e 
+ 00022353  0x00005360 call  0x00002841 
+ 00022354  0x00005361 call  0x00005ad3 
+ 00022355  0x00005362 jam  0x00000014 , 0x00000a99 
+ 00022356  0x00005363 call  0x00007d86 
+ 00022357  0x00005364 branch  0x00002223 
+ 00022358  0x00005368 bpatchx  0x00000071 , 0x0000402e 
+ 00022359  0x00005369 fetch  0x00000002 , 0x0000445a 
+ 00022360  0x0000536a iforce  0x00000012 
+ 00022361  0x0000536b fetch  0x00000002 , 0x0000445c 
+ 00022362  0x0000536c iforce  0x00000013 
+ 00022363  0x0000536d fetch  0x00000002 , 0x000044bc 
+ 00022364  0x0000536e iforce  0x00000006 
+ 00022365  0x0000536f enable  0x00000028 
+ 00022366  0x00005370 rtn 
+ 00022367  0x00005374 ifetch  0x00000002 , 0x00000006 
+ 00022368  0x00005375 rtn  0x00000034 
+ 00022369  0x00005376 isub  0x00000012 , 0x0000003e 
+ 00022370  0x00005377 nrtn  0x00000002 
+ 00022371  0x00005378 isub  0x00000013 , 0x0000003e 
+ 00022372  0x00005379 rtn  0x00000005 
+ 00022373  0x0000537a branch  0x00005768 , 0x00000002 
+ 00022374  0x0000537b force  0x00000001 , 0x0000003e 
+ 00022375  0x0000537c rtn 
+ 00022376  0x0000537e force  0x00000000 , 0x0000003f 
+ 00022377  0x0000537f rtn 
+ 00022378  0x00005384 call  0x0000576d 
+ 00022379  0x00005385 branch  0x00005779 , 0x00000005 
+ 00022380  0x00005386 rtn 
+ 00022381  0x00005389 bpatchx  0x00000072 , 0x0000402e 
+ 00022382  0x0000538a fetch  0x00000002 , 0x000044bc 
+ 00022383  0x0000538b iforce  0x00000006 
+ 00022384  0x0000538d ifetch  0x00000002 , 0x00000006 
+ 00022385  0x0000538e rtn  0x00000034 
+ 00022386  0x0000538f isub  0x00000002 , 0x0000003e 
+ 00022387  0x00005390 rtn  0x00000005 
+ 00022388  0x00005391 ifetch  0x00000001 , 0x00000006 
+ 00022389  0x00005392 iadd  0x00000006 , 0x00000006 
+ 00022390  0x00005393 ifetch  0x00000001 , 0x00000006 
+ 00022391  0x00005394 iadd  0x00000006 , 0x00000006 
+ 00022392  0x00005395 branch  0x00005770 
+ 00022393  0x00005397 ifetch  0x00000001 , 0x00000006 
+ 00022394  0x00005398 iadd  0x00000006 , 0x00000006 
+ 00022395  0x00005399 rtn 
+ 00022396  0x0000539e bpatchx  0x00000073 , 0x0000402e 
+ 00022397  0x0000539f fetch  0x00000002 , 0x000044bc 
+ 00022398  0x000053a0 iforce  0x00000006 
+ 00022399  0x000053a2 ifetch  0x00000002 , 0x00000006 
+ 00022400  0x000053a3 rtn  0x00000034 
+ 00022401  0x000053a4 ifetch  0x00000001 , 0x00000006 
+ 00022402  0x000053a5 iadd  0x00000006 , 0x00000006 
+ 00022403  0x000053a6 increase  0xfffffffe , 0x00000006 
+ 00022404  0x000053a7 ifetch  0x00000002 , 0x00000006 
+ 00022405  0x000053a8 isub  0x00000002 , 0x0000003e 
+ 00022406  0x000053a9 rtn  0x00000005 
+ 00022407  0x000053aa ifetch  0x00000001 , 0x00000006 
+ 00022408  0x000053ab iadd  0x00000006 , 0x00000006 
+ 00022409  0x000053ac branch  0x0000577f 
+ 00022410  0x000053b1 fetch  0x00000002 , 0x0000049c 
+ 00022411  0x000053b2 branch  0x0000578e 
+ 00022412  0x000053b5 bpatchx  0x00000074 , 0x0000402e 
+ 00022413  0x000053b6 fetch  0x00000002 , 0x000044bc 
+ 00022414  0x000053b8 iforce  0x00000006 
+ 00022415  0x000053b9 copy  0x00000002 , 0x00000011 
+ 00022416  0x000053bb ifetch  0x00000002 , 0x00000006 
+ 00022417  0x000053bc branch  0x00005799 , 0x00000034 
+ 00022418  0x000053bd isub  0x00000011 , 0x0000003e 
+ 00022419  0x000053be branch  0x0000579a , 0x00000005 
+ 00022420  0x000053bf ifetch  0x00000001 , 0x00000006 
+ 00022421  0x000053c0 iadd  0x00000006 , 0x00000006 
+ 00022422  0x000053c1 ifetch  0x00000001 , 0x00000006 
+ 00022423  0x000053c2 iadd  0x00000006 , 0x00000006 
+ 00022424  0x000053c3 branch  0x00005790 
+ 00022425  0x000053c5 branch  0x00007fef 
+ 00022426  0x000053c8 ifetch  0x00000001 , 0x00000006 
+ 00022427  0x000053c9 store  0x00000001 , 0x000004a2 
+ 00022428  0x000053ca copy  0x0000003f , 0x00000039 
+ 00022429  0x000053cb arg  0x000004a3 , 0x00000005 
+ 00022430  0x000053cc call  0x00007ef4 
+ 00022431  0x000053cd ifetch  0x00000001 , 0x00000006 
+ 00022432  0x000053ce store  0x00000001 , 0x000004b3 
+ 00022433  0x000053cf call  0x00007ea5 
+ 00022434  0x000053d0 branch  0x00007ff1 
+ 00022435  0x000053d4 bpatchx  0x00000075 , 0x0000402e 
+ 00022436  0x000053d5 call  0x000057a6 
+ 00022437  0x000053d6 branch  0x000057b8 
+ 00022438  0x000053d9 arg  0x00002a00 , 0x00000002 
+ 00022439  0x000053da call  0x0000577c 
+ 00022440  0x000053db rtn  0x00000034 
+ 00022441  0x000053dc ifetch  0x00000001 , 0x00000006 
+ 00022442  0x000053dd copy  0x00000006 , 0x00000005 
+ 00022443  0x000053de fetcht  0x00000001 , 0x000043af 
+ 00022444  0x000053df copy  0x00000002 , 0x00000039 
+ 00022445  0x000053e0 isub  0x00000002 , 0x0000003e 
+ 00022446  0x000053e1 nbranch  0x000057b5 , 0x00000002 
+ 00022447  0x000053e2 isub  0x00000002 , 0x00000002 
+ 00022448  0x000053e3 arg  0x000043b0 , 0x00000006 
+ 00022449  0x000053e4 call  0x00007f01 
+ 00022450  0x000053e5 copy  0x00000002 , 0x00000039 
+ 00022451  0x000053e6 ncall  0x000057f0 , 0x00000005 
+ 00022452  0x000053e7 rtn 
+ 00022453  0x000053e9 copy  0x0000003f , 0x00000039 
+ 00022454  0x000053ea arg  0x000043b0 , 0x00000006 
+ 00022455  0x000053eb branch  0x00007ef4 
+ 00022456  0x000053ef arg  0x0000438f , 0x00000013 
+ 00022457  0x000053f0 arg  0x00004370 , 0x00000011 
+ 00022458  0x000053f1 call  0x000057c5 
+ 00022459  0x000053f2 setarg  0x00000000 
+ 00022460  0x000053f3 setflag  0x00000028 , 0x00000000 , 0x0000003f 
+ 00022461  0x000053f4 store  0x00000001 , 0x00000a9a 
+ 00022462  0x000053f5 arg  0x000043af , 0x00000013 
+ 00022463  0x000053f6 arg  0x00004390 , 0x00000011 
+ 00022464  0x000053f7 call  0x000057c5 
+ 00022465  0x000053f8 rtn  0x00000028 
+ 00022466  0x000053f9 fetch  0x00000001 , 0x00000a9a 
+ 00022467  0x000053fa branch  0x00002a8c , 0x00000034 
+ 00022468  0x000053fb rtn 
+ 00022469  0x000053ff bpatchx  0x00000076 , 0x0000402e 
+ 00022470  0x00005400 call  0x00007fe7 
+ 00022471  0x00005401 call  0x00007eda 
+ 00022472  0x00005402 arg  0x00000000 , 0x00000012 
+ 00022473  0x00005403 arg  0x00000ac3 , 0x00000005 
+ 00022474  0x00005404 call  0x000057df 
+ 00022475  0x00005405 fetch  0x00000001 , 0x000043af 
+ 00022476  0x00005406 add  0x0000003f , 0x00000001 , 0x00000002 
+ 00022477  0x00005407 iadd  0x00000012 , 0x00000011 
+ 00022478  0x00005408 increase  0x00000002 , 0x00000011 
+ 00022479  0x00005409 sub  0x00000011 , 0x0000001f , 0x0000003e 
+ 00022480  0x0000540a nbranch  0x000057dd , 0x00000002 
+ 00022481  0x0000540b istoret  0x00000001 , 0x00000005 
+ 00022482  0x0000540c arg  0x00000009 , 0x00000002 
+ 00022483  0x0000540d istoret  0x00000001 , 0x00000005 
+ 00022484  0x0000540e iforce  0x00000039 
+ 00022485  0x0000540f call  0x00007ef4 
+ 00022486  0x00005410 copy  0x00000011 , 0x00000012 
+ 00022487  0x00005412 deposit  0x00000012 
+ 00022488  0x00005413 store  0x00000001 , 0x00000ac2 
+ 00022489  0x00005414 arg  0x00000ac2 , 0x00000006 
+ 00022490  0x00005415 setarg  0xffffffe0 
+ 00022491  0x00005416 iadd  0x00000013 , 0x00000005 
+ 00022492  0x00005417 branch  0x00007ebd 
+ 00022493  0x0000541a call  0x00007fe9 
+ 00022494  0x0000541b branch  0x000057d7 
+ 00022495  0x0000541e ifetch  0x00000001 , 0x00000011 
+ 00022496  0x0000541f rtn  0x00000034 
+ 00022497  0x00005420 pincrease  0x00000001 
+ 00022498  0x00005421 ifetcht  0x00000001 , 0x00000006 
+ 00022499  0x00005422 sub  0x00000002 , 0x00000009 , 0x0000003e 
+ 00022500  0x00005423 branch  0x000057ee , 0x00000005 
+ 00022501  0x00005424 iadd  0x00000012 , 0x00000012 
+ 00022502  0x00005425 copy  0x00000011 , 0x00000006 
+ 00022503  0x00005426 iforce  0x00000039 
+ 00022504  0x00005427 call  0x00007ef4 
+ 00022505  0x00005428 copy  0x00000006 , 0x00000011 
+ 00022506  0x0000542a deposit  0x00000011 
+ 00022507  0x0000542b isub  0x00000013 , 0x0000003e 
+ 00022508  0x0000542c rtn  0x00000002 
+ 00022509  0x0000542d branch  0x000057df 
+ 00022510  0x00005430 iadd  0x00000011 , 0x00000011 
+ 00022511  0x00005431 branch  0x000057ea 
+ 00022512  0x00005435 setarg  0x00000020 
+ 00022513  0x00005436 istore  0x00000001 , 0x00000005 
+ 00022514  0x00005437 loop  0x000057f0 
+ 00022515  0x00005438 rtn 
+ 00022516  0x0000543c bpatchx  0x00000077 , 0x0000402e 
+ 00022517  0x0000543d disable  0x0000002b 
+ 00022518  0x0000543e branch  0x000057f8 , 0x0000002e 
+ 00022519  0x0000543f nbranch  0x00005806 , 0x0000002d 
+ 00022520  0x00005441 call  0x00002bcb 
+ 00022521  0x00005442 fetch  0x00000002 , 0x000040c1 
+ 00022522  0x00005443 store  0x00000002 , 0x0000044d 
+ 00022523  0x00005445 nbranch  0x00002bde , 0x0000002d 
+ 00022524  0x00005446 bmark1  0x0000000f , 0x00002bde 
+ 00022525  0x00005448 fetch  0x00000001 , 0x0000450b 
+ 00022526  0x00005449 nbranch  0x00002bde , 0x00000034 
+ 00022527  0x0000544a fetch  0x00000001 , 0x000043dd 
+ 00022528  0x0000544b nbranch  0x00002bde , 0x00000034 
+ 00022529  0x0000544d fetch  0x00000001 , 0x000044e9 
+ 00022530  0x0000544e bbit1  0x00000005 , 0x00002bde 
+ 00022531  0x00005450 fetch  0x00000001 , 0x0000043f 
+ 00022532  0x00005451 bbit1  0x00000005 , 0x00002bde 
+ 00022533  0x00005452 branch  0x00002bc0 
+ 00022534  0x00005455 fetcht  0x00000002 , 0x000040c1 
+ 00022535  0x00005456 rshift  0x00000002 , 0x00000002 
+ 00022536  0x00005457 fetch  0x00000002 , 0x0000044d 
+ 00022537  0x00005458 iadd  0x00000002 , 0x0000003f 
+ 00022538  0x00005459 store  0x00000002 , 0x0000044d 
+ 00022539  0x0000545a branch  0x00002bd6 
+ 00022540  0x0000545e arg  0x00000000 , 0x00000007 
+ 00022541  0x0000545f branch  0x00005824 
+ 00022542  0x00005462 arg  0x00000000 , 0x00000007 
+ 00022543  0x00005463 branch  0x00005828 
+ 00022544  0x00005466 arg  0x00000001 , 0x00000007 
+ 00022545  0x00005467 branch  0x00005824 
+ 00022546  0x0000546a arg  0x00000001 , 0x00000007 
+ 00022547  0x0000546b branch  0x00005828 
+ 00022548  0x0000546e arg  0x00000002 , 0x00000007 
+ 00022549  0x0000546f branch  0x00005824 
+ 00022550  0x00005472 arg  0x00000002 , 0x00000007 
+ 00022551  0x00005473 branch  0x00005828 
+ 00022552  0x00005476 arg  0x00000003 , 0x00000007 
+ 00022553  0x00005477 branch  0x00005824 
+ 00022554  0x0000547a arg  0x00000003 , 0x00000007 
+ 00022555  0x0000547b branch  0x00005828 
+ 00022556  0x0000547e arg  0x00000004 , 0x00000007 
+ 00022557  0x0000547f branch  0x00005824 
+ 00022558  0x00005482 arg  0x00000004 , 0x00000007 
+ 00022559  0x00005483 branch  0x00005828 
+ 00022560  0x00005486 arg  0x00000005 , 0x00000007 
+ 00022561  0x00005487 branch  0x00005824 
+ 00022562  0x0000548a arg  0x00000005 , 0x00000007 
+ 00022563  0x0000548b branch  0x00005828 
+ 00022564  0x0000548f fetch  0x00000001 , 0x000044e9 
+ 00022565  0x00005490 qset1  0x0000003f 
+ 00022566  0x00005491 store  0x00000001 , 0x000044e9 
+ 00022567  0x00005492 rtn 
+ 00022568  0x00005495 fetch  0x00000001 , 0x000044e9 
+ 00022569  0x00005496 qset0  0x0000003f 
+ 00022570  0x00005497 store  0x00000001 , 0x000044e9 
+ 00022571  0x00005498 rtn 
+ 00022572  0x0000549b setarg  0x00112233 
+ 00022573  0x0000549c store  0x00000003 , 0x000044ea 
+ 00022574  0x0000549d setarg  0x00445566 
+ 00022575  0x0000549e istore  0x00000003 , 0x00000005 
+ 00022576  0x0000549f setarg  0x00778899 
+ 00022577  0x000054a0 istore  0x00000003 , 0x00000005 
+ 00022578  0x000054a1 setarg  0x00001122 
+ 00022579  0x000054a2 istore  0x00000003 , 0x00000005 
+ 00022580  0x000054a3 setarg  0x00334455 
+ 00022581  0x000054a4 istore  0x00000003 , 0x00000005 
+ 00022582  0x000054a5 setarg  0x00000066 
+ 00022583  0x000054a6 istore  0x00000001 , 0x00000005 
+ 00022584  0x000054a7 rtn 
+ 00022585  0x000054ab setarg  0x01000302 
+ 00022586  0x000054ac store  0x00000004 , 0x00004453 
+ 00022587  0x000054ad setarg  0x00010010 
+ 00022588  0x000054ae store  0x00000003 , 0x00004457 
+ 00022589  0x000054af jam  0x00000001 , 0x000044c6 
+ 00022590  0x000054b0 rtn 
+ 00022591  0x000054b5 arg  0x00000000 , 0x00000011 
+ 00022592  0x000054b6 arg  0x00000001 , 0x00000001 
+ 00022593  0x000054b7 branch  0x00005850 
+ 00022594  0x000054bc arg  0x00000003 , 0x00000001 
+ 00022595  0x000054bd call  0x00005850 
+ 00022596  0x000054be copy  0x00000012 , 0x0000003f 
+ 00022597  0x000054bf istore  0x00000001 , 0x00000005 
+ 00022598  0x000054c0 rtn 
+ 00022599  0x000054c5 force  0x00000002 , 0x00000001 
+ 00022600  0x000054c6 increase  0x00000004 , 0x00000011 
+ 00022601  0x000054c7 call  0x00005850 
+ 00022602  0x000054c8 increase  0xfffffffc , 0x00000011 
+ 00022603  0x000054c9 copy  0x00000011 , 0x0000003f 
+ 00022604  0x000054ca istore  0x00000002 , 0x00000005 
+ 00022605  0x000054cb copy  0x00000012 , 0x0000003f 
+ 00022606  0x000054cc istore  0x00000002 , 0x00000005 
+ 00022607  0x000054cd rtn 
+ 00022608  0x000054d2 sub  0x00000011 , 0x000000f0 , 0x0000003e 
+ 00022609  0x000054d3 nbranch  0x00002a8c , 0x00000002 
+ 00022610  0x000054d4 fetch  0x00000001 , 0x000044ff 
+ 00022611  0x000054d5 arg  0x00000001 , 0x00000002 
+ 00022612  0x000054d6 arg  0x00000004 , 0x00000039 
+ 00022613  0x000054d8 iand  0x00000002 , 0x0000003e 
+ 00022614  0x000054d9 branch  0x0000585a , 0x00000005 
+ 00022615  0x000054da lshift  0x00000002 , 0x00000002 
+ 00022616  0x000054db loop  0x00005855 
+ 00022617  0x000054dc branch  0x00002a8c 
+ 00022618  0x000054de ixor  0x00000002 , 0x0000003f 
+ 00022619  0x000054df store  0x00000001 , 0x000044ff 
+ 00022620  0x000054e0 sub  0x00000039 , 0x00000004 , 0x0000003f 
+ 00022621  0x000054e1 lshift4  0x0000003f , 0x0000003f 
+ 00022622  0x000054e2 lshift4  0x0000003f , 0x0000003f 
+ 00022623  0x000054e3 arg  0x00001800 , 0x00000002 
+ 00022624  0x000054e4 iadd  0x00000002 , 0x00000002 
+ 00022625  0x000054e6 arg  0x00000000 , 0x00000039 
+ 00022626  0x000054e7 arg  0x00004500 , 0x00000006 
+ 00022627  0x000054e9 ifetch  0x00000002 , 0x00000006 
+ 00022628  0x000054ea branch  0x00005869 , 0x00000034 
+ 00022629  0x000054eb copy  0x00000039 , 0x0000003f 
+ 00022630  0x000054ec increase  0x00000001 , 0x00000039 
+ 00022631  0x000054ed bne  0x00000004 , 0x00005863 
+ 00022632  0x000054ee branch  0x00002a8c 
+ 00022633  0x000054f2 increase  0xfffffffe , 0x00000006 
+ 00022634  0x000054f3 istoret  0x00000002 , 0x00000006 
+ 00022635  0x000054f4 copy  0x00000002 , 0x00000005 
+ 00022636  0x000054f5 copy  0x00000011 , 0x0000003f 
+ 00022637  0x000054f6 istore  0x00000001 , 0x00000005 
+ 00022638  0x000054f7 setarg  0x00000000 
+ 00022639  0x000054f8 istore  0x00000001 , 0x00000005 
+ 00022640  0x000054f9 copy  0x00000001 , 0x0000003f 
+ 00022641  0x000054fa istore  0x00000001 , 0x00000005 
+ 00022642  0x000054fb rtn 
+ 00022643  0x00005500 fetch  0x00000002 , 0x00004500 
+ 00022644  0x00005501 copy  0x0000003f , 0x00000006 
+ 00022645  0x00005502 rtn 
+ 00022646  0x00005505 fetch  0x00000002 , 0x00004502 
+ 00022647  0x00005506 copy  0x0000003f , 0x00000006 
+ 00022648  0x00005507 rtn 
+ 00022649  0x0000550a call  0x0000587c 
+ 00022650  0x0000550b copy  0x0000003f , 0x00000006 
+ 00022651  0x0000550c rtn 
+ 00022652  0x0000550e fetch  0x00000002 , 0x00004506 
+ 00022653  0x0000550f nrtn  0x00000034 
+ 00022654  0x00005510 fetch  0x00000002 , 0x00004504 
+ 00022655  0x00005511 nrtn  0x00000034 
+ 00022656  0x00005512 fetch  0x00000002 , 0x00004502 
+ 00022657  0x00005513 nrtn  0x00000034 
+ 00022658  0x00005514 fetch  0x00000002 , 0x00004500 
+ 00022659  0x00005515 rtn 
+ 00022660  0x00005518 call  0x00005873 
+ 00022661  0x00005519 increase  0x00000003 , 0x00000006 
+ 00022662  0x0000551a rtn 
+ 00022663  0x0000551d call  0x00005873 
+ 00022664  0x0000551e increase  0x00000007 , 0x00000006 
+ 00022665  0x0000551f rtn 
+ 00022666  0x00005522 call  0x00005879 
+ 00022667  0x00005523 increase  0x00000007 , 0x00000006 
+ 00022668  0x00005524 rtn 
+ 00022669  0x00005527 call  0x00005879 
+ 00022670  0x00005528 increase  0x00000003 , 0x00000006 
+ 00022671  0x00005529 rtn 
+ 00022672  0x0000552e fetch  0x00000002 , 0x00004506 
+ 00022673  0x0000552f rtn 
+ 00022674  0x00005533 fetch  0x00000002 , 0x00004504 
+ 00022675  0x00005534 rtn 
+ 00022676  0x00005538 fetch  0x00000002 , 0x00004500 
+ 00022677  0x00005539 rtn 
+ 00022678  0x0000553d fetch  0x00000002 , 0x00004500 
+ 00022679  0x0000553e arg  0x00001800 , 0x00000002 
+ 00022680  0x0000553f isub  0x00000002 , 0x0000003f 
+ 00022681  0x00005540 rshift4  0x0000003f , 0x0000003f 
+ 00022682  0x00005541 rshift4  0x0000003f , 0x00000007 
+ 00022683  0x00005542 fetch  0x00000001 , 0x000044ff 
+ 00022684  0x00005543 qset0  0x0000003f 
+ 00022685  0x00005544 store  0x00000001 , 0x000044ff 
+ 00022686  0x00005545 arg  0x00000000 , 0x00000039 
+ 00022687  0x00005547 lshift  0x00000039 , 0x0000003f 
+ 00022688  0x00005548 arg  0x00004502 , 0x00000002 
+ 00022689  0x00005549 iadd  0x00000002 , 0x00000002 
+ 00022690  0x0000554a ifetch  0x00000002 , 0x00000002 
+ 00022691  0x0000554b increase  0xfffffffe , 0x00000002 
+ 00022692  0x0000554c istore  0x00000002 , 0x00000002 
+ 00022693  0x0000554d copy  0x00000039 , 0x0000003f 
+ 00022694  0x0000554e increase  0x00000001 , 0x00000039 
+ 00022695  0x0000554f bne  0x00000003 , 0x0000589f 
+ 00022696  0x00005550 setarg  0x00000000 
+ 00022697  0x00005551 istore  0x00000002 , 0x00000002 
+ 00022698  0x00005552 rtn 
+ 00022699  0x00005559 ifetch  0x00000003 , 0x00000006 
+ 00022700  0x0000555a store  0x00000003 , 0x00000477 
+ 00022701  0x0000555b beq  0x00000002 , 0x000058c1 
+ 00022702  0x0000555c beq  0x00000003 , 0x000058c9 
+ 00022703  0x0000555d beq  0x00000004 , 0x000058cc 
+ 00022704  0x0000555e beq  0x00000006 , 0x000058f2 
+ 00022705  0x0000555f beq  0x00000008 , 0x0000593f 
+ 00022706  0x00005560 beq  0x0000000a , 0x000059bc 
+ 00022707  0x00005561 beq  0x0000000c , 0x000059e4 
+ 00022708  0x00005562 beq  0x00000010 , 0x000059fa 
+ 00022709  0x00005563 beq  0x00000012 , 0x00005a2f 
+ 00022710  0x00005564 beq  0x00000016 , 0x00005a48 
+ 00022711  0x00005565 beq  0x00000018 , 0x00005a5b 
+ 00022712  0x00005566 beq  0x00000052 , 0x00005a60 
+ 00022713  0x00005567 rtn 
+ 00022714  0x0000556b force  0x00000003 , 0x00000011 
+ 00022715  0x0000556c call  0x00005a82 
+ 00022716  0x0000556d setarg  0x00000002 
+ 00022717  0x0000556e istore  0x00000001 , 0x00000005 
+ 00022718  0x0000556f fetch  0x00000002 , 0x000044a6 
+ 00022719  0x00005570 istore  0x00000002 , 0x00000005 
+ 00022720  0x00005571 rtn 
+ 00022721  0x00005575 call  0x000058c9 
+ 00022722  0x00005577 force  0x00000003 , 0x00000011 
+ 00022723  0x00005578 call  0x00005a82 
+ 00022724  0x00005579 setarg  0x00000003 
+ 00022725  0x0000557a istore  0x00000001 , 0x00000005 
+ 00022726  0x0000557b fetch  0x00000002 , 0x000044a6 
+ 00022727  0x0000557c istore  0x00000002 , 0x00000005 
+ 00022728  0x0000557d rtn 
+ 00022729  0x00005580 rshift8  0x0000003f , 0x0000003f 
+ 00022730  0x00005581 store  0x00000002 , 0x000044a8 
+ 00022731  0x00005582 rtn 
+ 00022732  0x00005585 call  0x00005ab1 
+ 00022733  0x00005586 call  0x00007fe7 
+ 00022734  0x00005587 branch  0x000058cf 
+ 00022735  0x0000558a arg  0x00000003 , 0x0000000b 
+ 00022736  0x0000558b call  0x00005756 
+ 00022737  0x0000558d call  0x0000575f 
+ 00022738  0x0000558e branch  0x000058f0 , 0x00000034 
+ 00022739  0x0000558f nbranch  0x000058ed , 0x00000002 
+ 00022740  0x00005590 increase  0xfffffffe , 0x00000006 
+ 00022741  0x00005591 call  0x00007ea5 
+ 00022742  0x00005592 call  0x00007e9c 
+ 00022743  0x00005593 nbranch  0x000058e1 , 0x00000028 
+ 00022744  0x00005594 call  0x00007e85 
+ 00022745  0x00005595 call  0x00007fe9 
+ 00022746  0x00005596 force  0x00000014 , 0x00000011 
+ 00022747  0x00005597 call  0x00005a82 
+ 00022748  0x00005598 call  0x00007e95 
+ 00022749  0x00005599 setarg  0x00000005 
+ 00022750  0x0000559a istore  0x00000001 , 0x00000005 
+ 00022751  0x0000559b setarg  0x00000001 
+ 00022752  0x0000559c istore  0x00000001 , 0x00000005 
+ 00022753  0x0000559e call  0x00007e9f 
+ 00022754  0x0000559f ifetch  0x00000002 , 0x00000006 
+ 00022755  0x000055a0 istore  0x00000002 , 0x00000005 
+ 00022756  0x000055a1 ifetch  0x00000001 , 0x00000006 
+ 00022757  0x000055a2 copy  0x0000003f , 0x00000039 
+ 00022758  0x000055a3 call  0x00007f01 
+ 00022759  0x000055a4 call  0x00007ea2 
+ 00022760  0x000055a5 increase  0xffffffff , 0x0000000b 
+ 00022761  0x000055a6 branch  0x000058f0 , 0x00000005 
+ 00022762  0x000055a8 ifetch  0x00000001 , 0x00000006 
+ 00022763  0x000055a9 iadd  0x00000006 , 0x00000006 
+ 00022764  0x000055aa branch  0x000058d1 
+ 00022765  0x000055ac ifetch  0x00000001 , 0x00000006 
+ 00022766  0x000055ad iadd  0x00000006 , 0x00000006 
+ 00022767  0x000055ae branch  0x000058ea 
+ 00022768  0x000055b0 branch  0x00005a76 , 0x00000028 
+ 00022769  0x000055b1 branch  0x00005aa5 
+ 00022770  0x000055b5 call  0x00005ab1 
+ 00022771  0x000055b6 ifetch  0x00000002 , 0x00000006 
+ 00022772  0x000055b7 store  0x00000002 , 0x00004472 
+ 00022773  0x000055b8 call  0x00007ea5 
+ 00022774  0x000055b9 arg  0x0000445e , 0x00000005 
+ 00022775  0x000055ba fetch  0x00000002 , 0x000044fc 
+ 00022776  0x000055bb increase  0xfffffff9 , 0x0000003f 
+ 00022777  0x000055bc call  0x000056db 
+ 00022778  0x000055bd branch  0x00005905 
+ 00022779  0x000055c1 disable  0x00000028 
+ 00022780  0x000055c2 fetcht  0x00000002 , 0x0000445a 
+ 00022781  0x000055c3 fetch  0x00000002 , 0x0000445c 
+ 00022782  0x000055c4 isub  0x00000002 , 0x0000003e 
+ 00022783  0x000055c5 nbranch  0x00005902 , 0x00000002 
+ 00022784  0x000055c6 deposit  0x00000002 
+ 00022785  0x000055c7 rtnne  0x00000000 
+ 00022786  0x000055c9 enable  0x00000028 
+ 00022787  0x000055ca jam  0x00000001 , 0x0000047a 
+ 00022788  0x000055cb branch  0x00005a77 
+ 00022789  0x000055cf call  0x000058fb 
+ 00022790  0x000055d0 rtn  0x00000028 
+ 00022791  0x000055d1 fetcht  0x00000002 , 0x00004472 
+ 00022792  0x000055d2 setarg  0x00002800 
+ 00022793  0x000055d3 isub  0x00000002 , 0x0000003e 
+ 00022794  0x000055d4 branch  0x0000590c , 0x00000005 
+ 00022795  0x000055d5 branch  0x00005a76 
+ 00022796  0x000055d9 jam  0x00000000 , 0x000004b4 
+ 00022797  0x000055da fetcht  0x00000002 , 0x0000445a 
+ 00022798  0x000055db storet  0x00000002 , 0x00000aa2 
+ 00022799  0x000055dc call  0x0000578c 
+ 00022800  0x000055dd nbranch  0x00005a76 , 0x00000034 
+ 00022801  0x000055df fetcht  0x00000002 , 0x00000aa2 
+ 00022802  0x000055e0 call  0x0000578c 
+ 00022803  0x000055e1 nbranch  0x00005925 , 0x00000034 
+ 00022804  0x000055e2 copy  0x00000006 , 0x00000011 
+ 00022805  0x000055e3 fetch  0x00000001 , 0x000004b3 
+ 00022806  0x000055e4 copy  0x0000003f , 0x00000039 
+ 00022807  0x000055e5 fetcht  0x00000001 , 0x0000445e 
+ 00022808  0x000055e6 isub  0x00000002 , 0x0000003e 
+ 00022809  0x000055e7 nbranch  0x00005921 , 0x00000005 
+ 00022810  0x000055e8 arg  0x0000445f , 0x00000012 
+ 00022811  0x000055e9 call  0x00007f88 
+ 00022812  0x000055eb branch  0x00005928 , 0x00000005 
+ 00022813  0x000055ed fetch  0x00000002 , 0x000004a3 
+ 00022814  0x000055ee fetcht  0x00000002 , 0x00004472 
+ 00022815  0x000055ef isub  0x00000002 , 0x0000003e 
+ 00022816  0x000055f0 branch  0x00005930 , 0x00000005 
+ 00022817  0x000055f2 fetch  0x00000002 , 0x00000aa2 
+ 00022818  0x000055f3 increase  0x00000001 , 0x0000003f 
+ 00022819  0x000055f4 store  0x00000002 , 0x00000aa2 
+ 00022820  0x000055f5 branch  0x00005911 
+ 00022821  0x000055f8 fetch  0x00000001 , 0x000004b4 
+ 00022822  0x000055f9 beq  0x00000001 , 0x00005930 
+ 00022823  0x000055fa branch  0x00005a76 
+ 00022824  0x000055fe fetch  0x00000002 , 0x000004a3 
+ 00022825  0x000055ff fetcht  0x00000002 , 0x00004472 
+ 00022826  0x00005600 isub  0x00000002 , 0x0000003e 
+ 00022827  0x00005601 nbranch  0x00005921 , 0x00000005 
+ 00022828  0x00005602 jam  0x00000001 , 0x000004b4 
+ 00022829  0x00005604 fetcht  0x00000002 , 0x00000aa2 
+ 00022830  0x00005605 storet  0x00000002 , 0x0000049e 
+ 00022831  0x00005606 branch  0x00005921 
+ 00022832  0x00005609 fetch  0x00000001 , 0x000004b4 
+ 00022833  0x0000560a beq  0x00000000 , 0x00005921 
+ 00022834  0x0000560b jam  0x00000002 , 0x000004b4 
+ 00022835  0x0000560c fetcht  0x00000002 , 0x00000aa2 
+ 00022836  0x0000560d increase  0xffffffff , 0x00000002 
+ 00022837  0x0000560e storet  0x00000002 , 0x000004a0 
+ 00022838  0x00005611 arg  0x00000005 , 0x00000011 
+ 00022839  0x00005612 call  0x00005a82 
+ 00022840  0x00005613 setarg  0x00000007 
+ 00022841  0x00005614 istore  0x00000001 , 0x00000005 
+ 00022842  0x00005615 fetch  0x00000002 , 0x0000049e 
+ 00022843  0x00005616 istore  0x00000002 , 0x00000005 
+ 00022844  0x00005617 fetch  0x00000002 , 0x000004a0 
+ 00022845  0x00005618 istore  0x00000002 , 0x00000005 
+ 00022846  0x00005619 rtn 
+ 00022847  0x0000561e call  0x00005ab1 
+ 00022848  0x0000561f call  0x000056df 
+ 00022849  0x00005620 branch  0x00005942 
+ 00022850  0x00005623 fetcht  0x00000002 , 0x0000445a 
+ 00022851  0x00005624 storet  0x00000002 , 0x00000aa2 
+ 00022852  0x00005625 call  0x00005756 
+ 00022853  0x00005626 call  0x0000576d 
+ 00022854  0x00005627 increase  0xfffffffe , 0x00000006 
+ 00022855  0x00005628 copy  0x00000006 , 0x0000003f 
+ 00022856  0x00005629 store  0x00000002 , 0x0000049c 
+ 00022857  0x0000562b fetcht  0x00000002 , 0x00004472 
+ 00022858  0x0000562c setarg  0x00002a00 
+ 00022859  0x0000562d isub  0x00000002 , 0x0000003e 
+ 00022860  0x0000562e branch  0x000059a8 , 0x00000005 
+ 00022861  0x0000562f setarg  0x00002803 
+ 00022862  0x00005630 isub  0x00000002 , 0x0000003e 
+ 00022863  0x00005631 nbranch  0x00005990 , 0x00000005 
+ 00022864  0x00005632 arg  0x00000002 , 0x0000000b 
+ 00022865  0x00005634 call  0x00005a88 
+ 00022866  0x00005635 nbranch  0x0000596d , 0x00000002 
+ 00022867  0x00005636 fetcht  0x00000002 , 0x00000aa2 
+ 00022868  0x00005637 call  0x0000578a 
+ 00022869  0x00005638 beq  0x00000001 , 0x0000596d 
+ 00022870  0x00005639 call  0x00005a94 
+ 00022871  0x0000563a nbranch  0x0000596b , 0x00000005 
+ 00022872  0x0000563b nbranch  0x0000596f , 0x00000028 
+ 00022873  0x0000563c disable  0x00000028 
+ 00022874  0x0000563d arg  0x00000014 , 0x00000011 
+ 00022875  0x0000563e call  0x00005a82 
+ 00022876  0x0000563f setarg  0x00000009 
+ 00022877  0x00005640 istore  0x00000001 , 0x00000005 
+ 00022878  0x00005641 copy  0x00000005 , 0x00000030 
+ 00022879  0x00005642 increase  0x00000001 , 0x00000005 
+ 00022880  0x00005644 call  0x0000597d 
+ 00022881  0x00005645 call  0x00005a84 
+ 00022882  0x00005646 call  0x0000578a 
+ 00022883  0x00005647 call  0x00005984 
+ 00022884  0x00005648 fetch  0x00000001 , 0x000004a2 
+ 00022885  0x00005649 increase  0x00000005 , 0x0000003f 
+ 00022886  0x0000564a istore  0x00000001 , 0x00000030 
+ 00022887  0x0000564b fetch  0x00000001 , 0x000004a2 
+ 00022888  0x0000564c beq  0x00000010 , 0x0000596d 
+ 00022889  0x0000564d increase  0xffffffff , 0x0000000b 
+ 00022890  0x0000564e branch  0x0000596d , 0x00000005 
+ 00022891  0x00005650 call  0x00005a84 
+ 00022892  0x00005651 branch  0x00005951 
+ 00022893  0x00005653 branch  0x00005a76 , 0x00000028 
+ 00022894  0x00005654 branch  0x00005aa5 
+ 00022895  0x00005657 call  0x00005a97 
+ 00022896  0x00005658 call  0x00005a84 
+ 00022897  0x00005659 call  0x0000578a 
+ 00022898  0x0000565a fetch  0x00000001 , 0x000004a2 
+ 00022899  0x0000565b beq  0x00000010 , 0x0000596d 
+ 00022900  0x0000565d call  0x00007e9c 
+ 00022901  0x0000565e fetch  0x00000002 , 0x00000aa2 
+ 00022902  0x0000565f increase  0xffffffff , 0x0000003f 
+ 00022903  0x00005660 istore  0x00000002 , 0x00000005 
+ 00022904  0x00005661 call  0x00005aa1 
+ 00022905  0x00005662 call  0x00005984 
+ 00022906  0x00005663 increase  0xffffffff , 0x0000000b 
+ 00022907  0x00005664 branch  0x0000596d , 0x00000005 
+ 00022908  0x00005665 branch  0x0000596b 
+ 00022909  0x00005669 fetch  0x00000002 , 0x00000aa2 
+ 00022910  0x0000566a istore  0x00000002 , 0x00000005 
+ 00022911  0x0000566c fetch  0x00000001 , 0x000004b3 
+ 00022912  0x0000566d copy  0x0000003f , 0x00000039 
+ 00022913  0x0000566e call  0x00007e9f 
+ 00022914  0x0000566f call  0x00007ef4 
+ 00022915  0x00005670 branch  0x00007ea2 
+ 00022916  0x00005672 call  0x00007e9c 
+ 00022917  0x00005673 fetch  0x00000002 , 0x00000aa2 
+ 00022918  0x00005674 istore  0x00000002 , 0x00000005 
+ 00022919  0x00005675 call  0x00007ea2 
+ 00022920  0x00005676 fetch  0x00000001 , 0x000004a2 
+ 00022921  0x00005677 copy  0x0000003f , 0x00000039 
+ 00022922  0x00005678 call  0x00007e9c 
+ 00022923  0x00005679 call  0x00007e9f 
+ 00022924  0x0000567a isub  0x00000039 , 0x00000006 
+ 00022925  0x0000567b increase  0xffffffff , 0x00000006 
+ 00022926  0x0000567c call  0x00007ef4 
+ 00022927  0x0000567d branch  0x00007ea2 
+ 00022928  0x00005682 fetcht  0x00000002 , 0x0000445a 
+ 00022929  0x00005683 storet  0x00000002 , 0x00000aa2 
+ 00022930  0x00005685 call  0x00005a88 
+ 00022931  0x00005686 nbranch  0x00005a76 , 0x00000002 
+ 00022932  0x00005687 call  0x0000578a 
+ 00022933  0x00005688 beq  0x00000001 , 0x00005a76 
+ 00022934  0x00005689 call  0x00005a94 
+ 00022935  0x0000568a nbranch  0x000059a6 , 0x00000005 
+ 00022936  0x0000568d arg  0x00000014 , 0x00000011 
+ 00022937  0x0000568e call  0x00005a82 
+ 00022938  0x0000568f setarg  0x00000009 
+ 00022939  0x00005690 istore  0x00000001 , 0x00000005 
+ 00022940  0x00005691 fetch  0x00000001 , 0x000004b3 
+ 00022941  0x00005692 copy  0x0000003f , 0x00000039 
+ 00022942  0x00005693 increase  0x00000002 , 0x0000003f 
+ 00022943  0x00005694 istore  0x00000001 , 0x00000005 
+ 00022944  0x00005695 fetch  0x00000002 , 0x00000aa2 
+ 00022945  0x00005696 istore  0x00000002 , 0x00000005 
+ 00022946  0x00005697 call  0x00007e9f 
+ 00022947  0x00005698 call  0x00007ef4 
+ 00022948  0x00005699 call  0x00007ea2 
+ 00022949  0x0000569a branch  0x00005aa5 
+ 00022950  0x0000569d call  0x00005a84 
+ 00022951  0x0000569e branch  0x00005992 
+ 00022952  0x000056a2 arg  0x00002a00 , 0x00000002 
+ 00022953  0x000056a3 call  0x0000577c 
+ 00022954  0x000056a4 rtn  0x00000034 
+ 00022955  0x000056a5 increase  0xfffffffb , 0x00000006 
+ 00022956  0x000056a6 ifetch  0x00000002 , 0x00000006 
+ 00022957  0x000056a7 store  0x00000002 , 0x00000aa2 
+ 00022958  0x000056a8 arg  0x00000014 , 0x00000011 
+ 00022959  0x000056a9 call  0x00005a82 
+ 00022960  0x000056aa setarg  0x00000009 
+ 00022961  0x000056ab istore  0x00000001 , 0x00000005 
+ 00022962  0x000056ac fetch  0x00000001 , 0x000043af 
+ 00022963  0x000056ad copy  0x0000003f , 0x00000039 
+ 00022964  0x000056ae increase  0x00000002 , 0x0000003f 
+ 00022965  0x000056af istore  0x00000001 , 0x00000005 
+ 00022966  0x000056b0 fetch  0x00000002 , 0x00000aa2 
+ 00022967  0x000056b1 istore  0x00000002 , 0x00000005 
+ 00022968  0x000056b2 arg  0x000043b0 , 0x00000006 
+ 00022969  0x000056b3 call  0x00007ef4 
+ 00022970  0x000056b4 call  0x00007ea2 
+ 00022971  0x000056b5 branch  0x00005aa5 
+ 00022972  0x000056ba fetcht  0x00000002 , 0x00000478 
+ 00022973  0x000056bb fetch  0x00000001 , 0x000044e9 
+ 00022974  0x000056bc bbit1  0x00000003 , 0x000059dd 
+ 00022975  0x000056bf call  0x0000576a 
+ 00022976  0x000056c0 branch  0x00005a76 , 0x00000034 
+ 00022977  0x000056c1 increase  0xfffffffe , 0x00000006 
+ 00022978  0x000056c2 ifetch  0x00000002 , 0x00000006 
+ 00022979  0x000056c3 arg  0x00002a00 , 0x00000002 
+ 00022980  0x000056c4 isub  0x00000002 , 0x0000003e 
+ 00022981  0x000056c5 branch  0x000059d3 , 0x00000005 
+ 00022982  0x000056c6 ifetch  0x00000001 , 0x00000006 
+ 00022983  0x000056c7 sub  0x0000003f , 0x00000016 , 0x0000003e 
+ 00022984  0x000056c8 branch  0x000059ca , 0x00000002 
+ 00022985  0x000056c9 force  0x00000016 , 0x0000003f 
+ 00022986  0x000056cb copy  0x0000003f , 0x00000013 
+ 00022987  0x000056cc call  0x00007ea5 
+ 00022988  0x000056cd add  0x00000013 , 0x00000001 , 0x00000011 
+ 00022989  0x000056ce call  0x00005a82 
+ 00022990  0x000056cf setarg  0x0000000b 
+ 00022991  0x000056d0 istore  0x00000001 , 0x00000005 
+ 00022992  0x000056d1 copy  0x00000013 , 0x00000039 
+ 00022993  0x000056d2 call  0x00007e9f 
+ 00022994  0x000056d3 branch  0x00007f01 
+ 00022995  0x000056d6 call  0x00007ea5 
+ 00022996  0x000056d7 fetch  0x00000001 , 0x000043af 
+ 00022997  0x000056d8 add  0x0000003f , 0x00000001 , 0x00000011 
+ 00022998  0x000056d9 call  0x00005a82 
+ 00022999  0x000056da setarg  0x0000000b 
+ 00023000  0x000056db istore  0x00000001 , 0x00000005 
+ 00023001  0x000056dc fetch  0x00000001 , 0x000043af 
+ 00023002  0x000056dd copy  0x0000003f , 0x00000039 
+ 00023003  0x000056de arg  0x000043b0 , 0x00000006 
+ 00023004  0x000056df branch  0x00007f01 
+ 00023005  0x000056e3 fetch  0x00000002 , 0x000044fa 
+ 00023006  0x000056e4 isub  0x00000002 , 0x0000003e 
+ 00023007  0x000056e5 nbranch  0x000059bf , 0x00000005 
+ 00023008  0x000056e7 call  0x00005a42 
+ 00023009  0x000056e8 nbranch  0x000059bf , 0x00000028 
+ 00023010  0x000056e9 jam  0x00000005 , 0x0000047a 
+ 00023011  0x000056ea branch  0x00005a77 
+ 00023012  0x000056ee ifetch  0x00000002 , 0x00000006 
+ 00023013  0x000056ef store  0x00000002 , 0x0000445e 
+ 00023014  0x000056f1 arg  0x00000014 , 0x00000011 
+ 00023015  0x000056f2 call  0x00005a82 
+ 00023016  0x000056f3 setarg  0x0000000d 
+ 00023017  0x000056f4 istore  0x00000001 , 0x00000005 
+ 00023018  0x000056f5 fetch  0x00000002 , 0x0000445e 
+ 00023019  0x000056f6 iforce  0x00000011 
+ 00023020  0x000056f7 fetcht  0x00000002 , 0x00000478 
+ 00023021  0x000056f8 call  0x0000576a 
+ 00023022  0x000056f9 branch  0x00005a76 , 0x00000034 
+ 00023023  0x000056fa ifetch  0x00000001 , 0x00000006 
+ 00023024  0x000056fb isub  0x00000011 , 0x00000039 
+ 00023025  0x000056fc nbranch  0x00005a76 , 0x00000002 
+ 00023026  0x000056fd sub  0x00000039 , 0x00000016 , 0x0000003e 
+ 00023027  0x000056fe branch  0x000059f5 , 0x00000002 
+ 00023028  0x000056ff force  0x00000016 , 0x00000039 
+ 00023029  0x00005701 deposit  0x00000011 
+ 00023030  0x00005702 iadd  0x00000006 , 0x00000006 
+ 00023031  0x00005703 call  0x00007ef4 
+ 00023032  0x00005704 call  0x00007ea2 
+ 00023033  0x00005705 branch  0x00005aa5 
+ 00023034  0x00005709 call  0x00005ab1 
+ 00023035  0x0000570a call  0x000056d7 
+ 00023036  0x0000570b branch  0x000059fd 
+ 00023037  0x00005711 arg  0x00000002 , 0x0000000b 
+ 00023038  0x00005712 fetcht  0x00000002 , 0x0000445a 
+ 00023039  0x00005716 storet  0x00000002 , 0x00000aa2 
+ 00023040  0x00005717 call  0x00005756 
+ 00023041  0x00005718 call  0x0000576d 
+ 00023042  0x00005719 increase  0xfffffffe , 0x00000006 
+ 00023043  0x0000571a copy  0x00000006 , 0x0000003f 
+ 00023044  0x0000571b store  0x00000002 , 0x0000049c 
+ 00023045  0x0000571d call  0x00005a88 
+ 00023046  0x0000571e nbranch  0x00005a25 , 0x00000002 
+ 00023047  0x0000571f fetcht  0x00000002 , 0x00000aa2 
+ 00023048  0x00005720 call  0x0000578a 
+ 00023049  0x00005721 beq  0x00000001 , 0x00005a28 
+ 00023050  0x00005723 call  0x00005a8c 
+ 00023051  0x00005724 nbranch  0x00005a23 , 0x00000005 
+ 00023052  0x00005725 copy  0x0000000b , 0x0000003f 
+ 00023053  0x00005726 beq  0x00000000 , 0x00005a28 
+ 00023054  0x00005727 nbranch  0x00005a19 , 0x00000028 
+ 00023055  0x00005728 disable  0x00000028 
+ 00023056  0x0000572a arg  0x00000014 , 0x00000011 
+ 00023057  0x0000572b call  0x00005a82 
+ 00023058  0x0000572c setarg  0x00000011 
+ 00023059  0x0000572d istore  0x00000001 , 0x00000005 
+ 00023060  0x0000572e fetch  0x00000001 , 0x000004b3 
+ 00023061  0x0000572f increase  0x00000004 , 0x0000003f 
+ 00023062  0x00005730 istore  0x00000001 , 0x00000005 
+ 00023063  0x00005731 call  0x00007ea2 
+ 00023064  0x00005732 branch  0x00005a1f 
+ 00023065  0x00005734 fetch  0x00000001 , 0x000004b3 
+ 00023066  0x00005735 beq  0x00000010 , 0x00005a28 
+ 00023067  0x00005736 fetch  0x00000002 , 0x00000aa2 
+ 00023068  0x00005737 increase  0xffffffff , 0x0000003f 
+ 00023069  0x00005738 store  0x00000002 , 0x000004a0 
+ 00023070  0x00005739 call  0x00005a9c 
+ 00023071  0x0000573b fetch  0x00000002 , 0x00000aa2 
+ 00023072  0x0000573c store  0x00000002 , 0x0000049e 
+ 00023073  0x0000573d call  0x00005a97 
+ 00023074  0x0000573e increase  0xffffffff , 0x0000000b 
+ 00023075  0x00005741 call  0x00005a84 
+ 00023076  0x00005742 branch  0x00005a05 
+ 00023077  0x00005745 fetch  0x00000002 , 0x00000aa2 
+ 00023078  0x00005746 store  0x00000002 , 0x000004a0 
+ 00023079  0x00005747 branch  0x00005a2c 
+ 00023080  0x00005749 fetch  0x00000002 , 0x00000aa2 
+ 00023081  0x0000574a increase  0xffffffff , 0x0000003f 
+ 00023082  0x0000574b store  0x00000002 , 0x000004a0 
+ 00023083  0x0000574c branch  0x00005a2c 
+ 00023084  0x0000574e branch  0x00005a76 , 0x00000028 
+ 00023085  0x0000574f call  0x00005a9c 
+ 00023086  0x00005750 branch  0x00005aa5 
+ 00023087  0x00005756 copy  0x00000006 , 0x00000011 
+ 00023088  0x00005757 fetch  0x00000002 , 0x000044fc 
+ 00023089  0x00005758 add  0x0000003f , 0xfffffffd , 0x00000012 
+ 00023090  0x00005759 call  0x000056e2 
+ 00023091  0x0000575b fetch  0x00000001 , 0x000044e9 
+ 00023092  0x0000575c bbit0  0x00000004 , 0x00005a3d 
+ 00023093  0x0000575e fetcht  0x00000002 , 0x00000478 
+ 00023094  0x0000575f fetch  0x00000002 , 0x000044fa 
+ 00023095  0x00005760 isub  0x00000002 , 0x0000003e 
+ 00023096  0x00005761 nbranch  0x00005a3d , 0x00000005 
+ 00023097  0x00005762 call  0x00005a42 
+ 00023098  0x00005763 nbranch  0x00005a3d , 0x00000028 
+ 00023099  0x00005764 jam  0x00000005 , 0x0000047a 
+ 00023100  0x00005765 branch  0x00005a77 
+ 00023101  0x00005768 force  0x00000001 , 0x00000011 
+ 00023102  0x00005769 call  0x00005a82 
+ 00023103  0x0000576a setarg  0x00000013 
+ 00023104  0x0000576b istore  0x00000001 , 0x00000005 
+ 00023105  0x0000576c rtn 
+ 00023106  0x0000576f call  0x00007fe9 
+ 00023107  0x00005770 fetch  0x00000001 , 0x000044c6 
+ 00023108  0x00005771 rtneq  0x00000000 
+ 00023109  0x00005772 fetch  0x00000001 , 0x00004040 
+ 00023110  0x00005773 rtnbit1  0x00000004 
+ 00023111  0x00005774 branch  0x00007fe7 
+ 00023112  0x00005778 add  0x00000006 , 0x00000002 , 0x00000011 
+ 00023113  0x00005779 fetch  0x00000002 , 0x000044fc 
+ 00023114  0x0000577a add  0x0000003f , 0xfffffffb , 0x00000012 
+ 00023115  0x0000577b call  0x000056e2 
+ 00023116  0x0000577c branch  0x00005a4d 
+ 00023117  0x00005780 fetch  0x00000002 , 0x000044fc 
+ 00023118  0x00005781 copy  0x0000003f , 0x00000011 
+ 00023119  0x00005782 call  0x00005a82 
+ 00023120  0x00005783 setarg  0x00000017 
+ 00023121  0x00005784 istore  0x00000001 , 0x00000005 
+ 00023122  0x00005785 fetch  0x00000002 , 0x00000478 
+ 00023123  0x00005786 istore  0x00000002 , 0x00000005 
+ 00023124  0x00005787 fetch  0x00000002 , 0x000044fc 
+ 00023125  0x00005788 add  0x0000003f , 0xfffffffb , 0x00000039 
+ 00023126  0x00005789 fetch  0x00000002 , 0x0000450d 
+ 00023127  0x0000578a add  0x0000003f , 0x00000007 , 0x00000006 
+ 00023128  0x0000578b ifetch  0x00000002 , 0x00000006 
+ 00023129  0x0000578c istore  0x00000002 , 0x00000005 
+ 00023130  0x0000578d branch  0x00007ef4 
+ 00023131  0x00005794 force  0x00000001 , 0x00000011 
+ 00023132  0x00005795 call  0x00005a82 
+ 00023133  0x00005796 setarg  0x00000019 
+ 00023134  0x00005797 istore  0x00000001 , 0x00000005 
+ 00023135  0x00005798 rtn 
+ 00023136  0x0000579d copy  0x00000006 , 0x00000011 
+ 00023137  0x0000579e fetch  0x00000002 , 0x000044fc 
+ 00023138  0x0000579f add  0x0000003f , 0xfffffffd , 0x00000012 
+ 00023139  0x000057a0 branch  0x000056e2 
+ 00023140  0x000057a6 copy  0x00000002 , 0x00000013 
+ 00023141  0x000057a7 increase  0x00000003 , 0x00000011 
+ 00023142  0x000057a8 call  0x00005a82 
+ 00023143  0x000057a9 increase  0xfffffffd , 0x00000011 
+ 00023144  0x000057aa setarg  0x0000001b 
+ 00023145  0x000057ab istore  0x00000001 , 0x00000005 
+ 00023146  0x000057ac copy  0x00000013 , 0x00000002 
+ 00023147  0x000057ad istoret  0x00000002 , 0x00000005 
+ 00023148  0x000057ae rtn 
+ 00023149  0x000057b2 copy  0x00000002 , 0x00000013 
+ 00023150  0x000057b3 increase  0x00000003 , 0x00000011 
+ 00023151  0x000057b4 call  0x00005a82 
+ 00023152  0x000057b5 increase  0xfffffffd , 0x00000011 
+ 00023153  0x000057b6 setarg  0x0000001d 
+ 00023154  0x000057b7 istore  0x00000001 , 0x00000005 
+ 00023155  0x000057b8 copy  0x00000013 , 0x00000002 
+ 00023156  0x000057b9 istoret  0x00000002 , 0x00000005 
+ 00023157  0x000057ba rtn 
+ 00023158  0x000057c0 jam  0x0000000a , 0x0000047a 
+ 00023159  0x000057c2 force  0x00000005 , 0x00000011 
+ 00023160  0x000057c3 call  0x00005a82 
+ 00023161  0x000057c4 setarg  0x00000001 
+ 00023162  0x000057c5 istore  0x00000001 , 0x00000005 
+ 00023163  0x000057c6 fetch  0x00000001 , 0x00000477 
+ 00023164  0x000057c7 istore  0x00000001 , 0x00000005 
+ 00023165  0x000057c8 fetch  0x00000002 , 0x00000478 
+ 00023166  0x000057c9 istore  0x00000002 , 0x00000005 
+ 00023167  0x000057ca fetch  0x00000001 , 0x0000047a 
+ 00023168  0x000057cb istore  0x00000001 , 0x00000005 
+ 00023169  0x000057cc rtn 
+ 00023170  0x000057d0 force  0x00000004 , 0x00000012 
+ 00023171  0x000057d1 branch  0x00005847 
+ 00023172  0x000057d5 fetcht  0x00000002 , 0x00000aa2 
+ 00023173  0x000057d6 increase  0x00000001 , 0x00000002 
+ 00023174  0x000057d7 storet  0x00000002 , 0x00000aa2 
+ 00023175  0x000057d8 rtn 
+ 00023176  0x000057db fetcht  0x00000002 , 0x00000aa2 
+ 00023177  0x000057dc fetch  0x00000002 , 0x0000445c 
+ 00023178  0x000057dd isub  0x00000002 , 0x0000003e 
+ 00023179  0x000057de rtn 
+ 00023180  0x000057e2 fetcht  0x00000001 , 0x0000445e 
+ 00023181  0x000057e3 arg  0x0000445f , 0x00000011 
+ 00023182  0x000057e5 fetch  0x00000001 , 0x000004a2 
+ 00023183  0x000057e6 copy  0x0000003f , 0x00000039 
+ 00023184  0x000057e7 isub  0x00000002 , 0x0000003e 
+ 00023185  0x000057e8 nrtn  0x00000005 
+ 00023186  0x000057e9 arg  0x000004a3 , 0x00000012 
+ 00023187  0x000057ea branch  0x00007f88 
+ 00023188  0x000057ed fetcht  0x00000001 , 0x00004471 
+ 00023189  0x000057ee arg  0x00004472 , 0x00000011 
+ 00023190  0x000057ef branch  0x00005a8e 
+ 00023191  0x000057f3 fetch  0x00000001 , 0x000004b3 
+ 00023192  0x000057f4 store  0x00000001 , 0x00000101 
+ 00023193  0x000057f5 copy  0x0000003f , 0x00000039 
+ 00023194  0x000057f6 call  0x00007e9f 
+ 00023195  0x000057f7 branch  0x00007ef4 
+ 00023196  0x000057fb call  0x00007e9c 
+ 00023197  0x000057fc fetch  0x00000002 , 0x0000049e 
+ 00023198  0x000057fd istore  0x00000002 , 0x00000005 
+ 00023199  0x000057fe fetch  0x00000002 , 0x000004a0 
+ 00023200  0x000057ff istore  0x00000002 , 0x00000005 
+ 00023201  0x00005801 fetch  0x00000001 , 0x00000101 
+ 00023202  0x00005802 copy  0x0000003f , 0x00000039 
+ 00023203  0x00005803 call  0x00007ef4 
+ 00023204  0x00005804 branch  0x00007ea2 
+ 00023205  0x00005809 call  0x00007e9c 
+ 00023206  0x0000580a call  0x0000588a 
+ 00023207  0x0000580b copy  0x00000005 , 0x0000003f 
+ 00023208  0x0000580c isub  0x00000006 , 0x00000011 
+ 00023209  0x0000580d call  0x0000588d 
+ 00023210  0x0000580e copy  0x00000011 , 0x0000003f 
+ 00023211  0x0000580f istore  0x00000002 , 0x00000006 
+ 00023212  0x00005810 increase  0x00000004 , 0x00000011 
+ 00023213  0x00005811 call  0x00005879 
+ 00023214  0x00005812 copy  0x00000011 , 0x0000003f 
+ 00023215  0x00005813 istore  0x00000001 , 0x00000006 
+ 00023216  0x00005814 rtn 
+ 00023217  0x00005818 rshift8  0x0000003f , 0x0000003f 
+ 00023218  0x00005819 store  0x00000002 , 0x0000445a 
+ 00023219  0x0000581a ifetch  0x00000002 , 0x00000006 
+ 00023220  0x0000581b store  0x00000002 , 0x0000445c 
+ 00023221  0x0000581c rtn 
+ 00023222  0x00005822 ifetch  0x00000001 , 0x00000006 
+ 00023223  0x00005823 ifetcht  0x00000001 , 0x00000006 
+ 00023224  0x00005824 ifetcht  0x00000002 , 0x00000006 
+ 00023225  0x00005825 beq  0x00000013 , 0x00005abb 
+ 00023226  0x00005826 rtn 
+ 00023227  0x00005828 ifetch  0x00000002 , 0x00000006 
+ 00023228  0x00005829 store  0x00000002 , 0x00004509 
+ 00023229  0x0000582a jam  0x00000040 , 0x00000a99 
+ 00023230  0x0000582b branch  0x00007d86 
+ 00023231  0x00005832 arg  0x0000000c , 0x00000011 
+ 00023232  0x00005833 arg  0x00000012 , 0x00000013 
+ 00023233  0x00005834 call  0x00005ac7 
+ 00023234  0x00005835 setarg  0x00000008 
+ 00023235  0x00005836 istore  0x00000002 , 0x00000005 
+ 00023236  0x00005837 fetch  0x00000008 , 0x00004496 
+ 00023237  0x00005838 istore  0x00000008 , 0x00000005 
+ 00023238  0x00005839 rtn 
+ 00023239  0x0000583e call  0x00005acf 
+ 00023240  0x0000583f arg  0x00000005 , 0x00000012 
+ 00023241  0x00005840 call  0x00005847 
+ 00023242  0x00005841 copy  0x00000013 , 0x0000003f 
+ 00023243  0x00005842 istore  0x00000001 , 0x00000005 
+ 00023244  0x00005843 fetch  0x00000001 , 0x00004508 
+ 00023245  0x00005844 istore  0x00000001 , 0x00000005 
+ 00023246  0x00005845 rtn 
+ 00023247  0x00005849 fetch  0x00000001 , 0x00004508 
+ 00023248  0x0000584b pincrease  0x00000001 
+ 00023249  0x0000584c store  0x00000001 , 0x00004508 
+ 00023250  0x0000584d rtnne  0x00000000 
+ 00023251  0x00005850 jam  0x00000001 , 0x00004508 
+ 00023252  0x00005851 rtn 
+ 00023253  0x00005857 fetch  0x00000001 , 0x000044c6 
+ 00023254  0x00005858 beq  0x00000000 , 0x00005ae4 
+ 00023255  0x00005859 beq  0x00000001 , 0x00005ae7 
+ 00023256  0x0000585a beq  0x00000002 , 0x00005ae9 
+ 00023257  0x0000585b beq  0x00000081 , 0x00005add 
+ 00023258  0x0000585c beq  0x00000082 , 0x00005adf 
+ 00023259  0x0000585d beq  0x00000083 , 0x00005ae2 
+ 00023260  0x0000585e rtn 
+ 00023261  0x00005861 jam  0x0000000d , 0x00004456 
+ 00023262  0x00005862 branch  0x00005ae5 
+ 00023263  0x00005864 jam  0x0000000d , 0x00004456 
+ 00023264  0x00005865 jam  0x00000001 , 0x00004454 
+ 00023265  0x00005866 rtn 
+ 00023266  0x00005868 jam  0x0000000d , 0x00004456 
+ 00023267  0x00005869 branch  0x00005aea 
+ 00023268  0x0000586b jam  0x00000000 , 0x00004456 
+ 00023269  0x0000586d jam  0x00000003 , 0x00004454 
+ 00023270  0x0000586e rtn 
+ 00023271  0x00005870 jam  0x00000005 , 0x00004456 
+ 00023272  0x00005871 branch  0x00005ae5 
+ 00023273  0x00005873 jam  0x00000005 , 0x00004456 
+ 00023274  0x00005875 jam  0x00000000 , 0x00004454 
+ 00023275  0x00005876 rtn 
+ 00023276  0x0000587a fetch  0x00000001 , 0x00004456 
+ 00023277  0x0000587b set1  0x00000003 , 0x0000003f 
+ 00023278  0x0000587c store  0x00000001 , 0x00004456 
+ 00023279  0x0000587d rtn 
+ 00023280  0x0000587f fetch  0x00000001 , 0x00004456 
+ 00023281  0x00005880 set0  0x00000003 , 0x0000003f 
+ 00023282  0x00005881 store  0x00000001 , 0x00004456 
+ 00023283  0x00005882 rtn 
+ 00023284  0x00005885 ifetch  0x00000001 , 0x00000006 
+ 00023285  0x00005886 beq  0x00000001 , 0x00005b09 
+ 00023286  0x00005888 beq  0x00000003 , 0x00005b30 
+ 00023287  0x00005889 beq  0x00000004 , 0x00005b4d 
+ 00023288  0x0000588a beq  0x00000005 , 0x00005b5a 
+ 00023289  0x0000588b beq  0x00000006 , 0x00005b80 
+ 00023290  0x0000588c beq  0x00000007 , 0x00005bc4 
+ 00023291  0x0000588d beq  0x00000008 , 0x00005baf 
+ 00023292  0x0000588e beq  0x00000009 , 0x00005bc0 
+ 00023293  0x0000588f beq  0x0000000a , 0x00005bc4 
+ 00023294  0x00005890 beq  0x0000000b , 0x00005bc4 
+ 00023295  0x00005891 beq  0x0000000c , 0x00005bc5 
+ 00023296  0x00005892 beq  0x0000000d , 0x00005bca 
+ 00023297  0x00005893 rtn 
+ 00023298  0x00005898 force  0x00000002 , 0x00000011 
+ 00023299  0x00005899 call  0x00005c62 
+ 00023300  0x0000589a setarg  0x0000000b 
+ 00023301  0x0000589b istore  0x00000001 , 0x00000005 
+ 00023302  0x0000589c fetch  0x00000001 , 0x00004456 
+ 00023303  0x0000589d istore  0x00000001 , 0x00000005 
+ 00023304  0x0000589e rtn 
+ 00023305  0x000058a1 store  0x00000001 , 0x0000444c 
+ 00023306  0x000058a2 ifetch  0x00000006 , 0x00000006 
+ 00023307  0x000058a3 istore  0x00000006 , 0x00000005 
+ 00023308  0x000058a4 fetch  0x00000001 , 0x000044c6 
+ 00023309  0x000058a5 beq  0x00000000 , 0x00005b5f 
+ 00023310  0x000058a6 call  0x00005b2b 
+ 00023311  0x000058a7 call  0x00005b26 
+ 00023312  0x000058a8 jam  0x00000003 , 0x000044c4 
+ 00023313  0x000058a9 fetch  0x00000001 , 0x0000444d 
+ 00023314  0x000058aa beq  0x00000000 , 0x00005b18 
+ 00023315  0x000058ab beq  0x00000001 , 0x00005b18 
+ 00023316  0x000058ac beq  0x00000003 , 0x00005b18 
+ 00023317  0x000058ad fetch  0x00000001 , 0x000044c6 
+ 00023318  0x000058ae beq  0x00000002 , 0x00005b1b 
+ 00023319  0x000058af rtneq  0x00000083 
+ 00023320  0x000058b1 arg  0x00000000 , 0x0000003f 
+ 00023321  0x000058b2 store  0x00000004 , 0x000044c7 
+ 00023322  0x000058b3 rtn 
+ 00023323  0x000058b6 fetch  0x00000001 , 0x000044e9 
+ 00023324  0x000058b7 bbit1  0x00000000 , 0x00005b24 
+ 00023325  0x000058b9 arg  0x000044c7 , 0x00000011 
+ 00023326  0x000058ba copy  0x00000011 , 0x00000005 
+ 00023327  0x000058bb arg  0x00000003 , 0x00000039 
+ 00023328  0x000058bc call  0x0000630d 
+ 00023329  0x000058bd fetch  0x00000002 , 0x000044c9 
+ 00023330  0x000058be and_into  0x00000007 , 0x0000003f 
+ 00023331  0x000058bf store  0x00000002 , 0x000044c9 
+ 00023332  0x000058c1 jam  0x00000034 , 0x00000a99 
+ 00023333  0x000058c2 branch  0x00007d86 
+ 00023334  0x000058c5 fetch  0x00000001 , 0x0000444f 
+ 00023335  0x000058c6 rtnbit1  0x00000003 
+ 00023336  0x000058c7 fetch  0x00000001 , 0x000044c6 
+ 00023337  0x000058c8 rtnbit0  0x00000007 
+ 00023338  0x000058c9 branch  0x00003402 
+ 00023339  0x000058cc force  0x00000007 , 0x00000011 
+ 00023340  0x000058cd call  0x00005c62 
+ 00023341  0x000058ce fetch  0x00000007 , 0x00004453 
+ 00023342  0x000058cf istore  0x00000007 , 0x00000005 
+ 00023343  0x000058d0 rtn 
+ 00023344  0x000058d4 copy  0x00000006 , 0x00000011 
+ 00023345  0x000058d5 fetch  0x00000001 , 0x000044c6 
+ 00023346  0x000058d6 beq  0x00000083 , 0x00005b37 
+ 00023347  0x000058d7 copy  0x00000011 , 0x00000006 
+ 00023348  0x000058d8 arg  0x0000442a , 0x00000005 
+ 00023349  0x000058d9 call  0x00007ebf 
+ 00023350  0x000058da branch  0x00005b3d 
+ 00023351  0x000058dc copy  0x00000011 , 0x00000006 
+ 00023352  0x000058dd arg  0x0000442a , 0x00000005 
+ 00023353  0x000058de call  0x00007ebf 
+ 00023354  0x000058df jam  0x00000002 , 0x000044bf 
+ 00023355  0x000058e0 jam  0x00000008 , 0x000044c1 
+ 00023356  0x000058e1 rtn 
+ 00023357  0x000058e5 fetch  0x00000001 , 0x000044c6 
+ 00023358  0x000058e6 bbit1  0x00000007 , 0x00005b45 
+ 00023359  0x000058e7 call  0x0000739c 
+ 00023360  0x000058e8 force  0x00000011 , 0x00000011 
+ 00023361  0x000058e9 call  0x00005c62 
+ 00023362  0x000058ea setarg  0x00000003 
+ 00023363  0x000058eb istore  0x00000001 , 0x00000005 
+ 00023364  0x000058ec branch  0x00007497 
+ 00023365  0x000058f0 arg  0x0000443a , 0x00000005 
+ 00023366  0x000058f1 call  0x0000630c 
+ 00023367  0x000058f2 call  0x000071c5 
+ 00023368  0x000058f3 force  0x00000011 , 0x00000011 
+ 00023369  0x000058f4 call  0x00005c62 
+ 00023370  0x000058f5 setarg  0x00000003 
+ 00023371  0x000058f6 istore  0x00000001 , 0x00000005 
+ 00023372  0x000058f7 branch  0x00007201 
+ 00023373  0x000058fc copy  0x00000006 , 0x00000011 
+ 00023374  0x000058fd fetch  0x00000001 , 0x000044c6 
+ 00023375  0x000058fe bbit1  0x00000007 , 0x00005b61 
+ 00023376  0x000058ff copy  0x00000011 , 0x00000006 
+ 00023377  0x00005900 call  0x00007394 
+ 00023378  0x00005901 branch  0x00005b75 , 0x00000005 
+ 00023379  0x00005903 jam  0x00000004 , 0x0000047b 
+ 00023380  0x00005905 force  0x00000002 , 0x00000011 
+ 00023381  0x00005906 call  0x00005c62 
+ 00023382  0x00005907 setarg  0x00000005 
+ 00023383  0x00005908 istore  0x00000001 , 0x00000005 
+ 00023384  0x00005909 fetch  0x00000001 , 0x0000047b 
+ 00023385  0x0000590a istore  0x00000001 , 0x00000005 
+ 00023386  0x0000590c force  0x0000000a , 0x00000007 
+ 00023387  0x0000590d call  0x00007f07 
+ 00023388  0x0000590e jam  0x00000000 , 0x000044c4 
+ 00023389  0x0000590f jam  0x00000030 , 0x00000a99 
+ 00023390  0x00005910 branch  0x00007d86 
+ 00023391  0x00005913 jam  0x00000005 , 0x0000047b 
+ 00023392  0x00005914 branch  0x00005b54 
+ 00023393  0x00005918 arg  0x0000042f , 0x00000005 
+ 00023394  0x00005919 copy  0x00000011 , 0x00000006 
+ 00023395  0x0000591a call  0x00007ebf 
+ 00023396  0x0000591b fetch  0x00000001 , 0x000044c6 
+ 00023397  0x0000591c beq  0x00000083 , 0x00005b6c 
+ 00023398  0x0000591d call  0x0000714f 
+ 00023399  0x00005920 call  0x00005b7a 
+ 00023400  0x00005921 fetch  0x00000001 , 0x000044c6 
+ 00023401  0x00005922 rtnne  0x00000082 
+ 00023402  0x00005923 jam  0x0000003b , 0x00000a99 
+ 00023403  0x00005924 branch  0x00007d86 
+ 00023404  0x00005927 call  0x000071ba 
+ 00023405  0x00005928 arg  0x00000af2 , 0x00000005 
+ 00023406  0x00005929 call  0x00007201 
+ 00023407  0x0000592a arg  0x00000af2 , 0x00000011 
+ 00023408  0x0000592b arg  0x0000442a , 0x00000012 
+ 00023409  0x0000592c arg  0x00000010 , 0x00000039 
+ 00023410  0x0000592d call  0x00007f88 
+ 00023411  0x0000592e nbranch  0x00005b53 , 0x00000005 
+ 00023412  0x0000592f branch  0x00005b7a 
+ 00023413  0x00005932 call  0x00007390 
+ 00023414  0x00005933 jam  0x00000031 , 0x00000a99 
+ 00023415  0x00005934 call  0x00007d86 
+ 00023416  0x00005935 jam  0x00000001 , 0x00004429 
+ 00023417  0x00005936 jam  0x00000005 , 0x000044c4 
+ 00023418  0x00005939 force  0x00000011 , 0x00000011 
+ 00023419  0x0000593a call  0x00005c62 
+ 00023420  0x0000593b setarg  0x00000004 
+ 00023421  0x0000593c istore  0x00000001 , 0x00000005 
+ 00023422  0x0000593d arg  0x0000443a , 0x00000006 
+ 00023423  0x0000593e branch  0x00007ebf 
+ 00023424  0x00005941 arg  0x0000041f , 0x00000005 
+ 00023425  0x00005942 branch  0x00007ebf 
+ 00023426  0x00005945 force  0x00000011 , 0x00000011 
+ 00023427  0x00005946 call  0x00005c62 
+ 00023428  0x00005947 setarg  0x00000006 
+ 00023429  0x00005948 istore  0x00000001 , 0x00000005 
+ 00023430  0x00005949 fetch  0x00000001 , 0x000044e9 
+ 00023431  0x0000594a bbit1  0x00000001 , 0x00005b8a 
+ 00023432  0x0000594b arg  0x00004419 , 0x00000006 
+ 00023433  0x0000594c branch  0x00007ebf 
+ 00023434  0x0000594f arg  0x000044ea , 0x00000006 
+ 00023435  0x00005950 branch  0x00007ebf 
+ 00023436  0x00005954 arg  0x000044cb , 0x00000005 
+ 00023437  0x00005955 force  0x0000000a , 0x00000039 
+ 00023438  0x00005956 call  0x0000630d 
+ 00023439  0x00005957 force  0x0000000b , 0x00000011 
+ 00023440  0x00005958 call  0x00005c62 
+ 00023441  0x00005959 setarg  0x00000007 
+ 00023442  0x0000595a istore  0x00000001 , 0x00000005 
+ 00023443  0x0000595b fetch  0x00000002 , 0x000044cb 
+ 00023444  0x0000595c istore  0x00000002 , 0x00000005 
+ 00023445  0x0000595d fetch  0x00000008 , 0x000044cd 
+ 00023446  0x0000595e istore  0x00000008 , 0x00000005 
+ 00023447  0x0000595f rtn 
+ 00023448  0x00005962 force  0x00000011 , 0x00000011 
+ 00023449  0x00005963 call  0x00005c62 
+ 00023450  0x00005964 setarg  0x00000008 
+ 00023451  0x00005965 istore  0x00000001 , 0x00000005 
+ 00023452  0x00005966 setarg  0x00000000 
+ 00023453  0x00005967 istore  0x00000008 , 0x00000005 
+ 00023454  0x00005968 istore  0x00000008 , 0x00000005 
+ 00023455  0x00005969 rtn 
+ 00023456  0x0000596d force  0x00000008 , 0x00000011 
+ 00023457  0x0000596e call  0x00005c62 
+ 00023458  0x0000596f setarg  0x00000009 
+ 00023459  0x00005970 istore  0x00000001 , 0x00000005 
+ 00023460  0x00005971 fetch  0x00000001 , 0x00004495 
+ 00023461  0x00005972 istore  0x00000001 , 0x00000005 
+ 00023462  0x00005973 fetch  0x00000006 , 0x000044a0 
+ 00023463  0x00005974 istore  0x00000006 , 0x00000005 
+ 00023464  0x00005975 rtn 
+ 00023465  0x00005979 jam  0x00000008 , 0x0000047b 
+ 00023466  0x0000597a branch  0x00005b54 
+ 00023467  0x0000597d fetch  0x00000001 , 0x00004458 
+ 00023468  0x0000597e fetcht  0x00000001 , 0x00004458 
+ 00023469  0x0000597f iand  0x00000002 , 0x0000003f 
+ 00023470  0x00005980 rtn 
+ 00023471  0x00005983 arg  0x000044d5 , 0x00000005 
+ 00023472  0x00005984 call  0x00007ebf 
+ 00023473  0x00005985 call  0x00005bab 
+ 00023474  0x00005986 isolate0  0x00000001 , 0x0000003f 
+ 00023475  0x00005987 branch  0x00005ba9 , 0x00000001 
+ 00023476  0x00005988 fetch  0x00000001 , 0x00004092 
+ 00023477  0x00005989 rtnne  0x0000000a 
+ 00023478  0x0000598a call  0x00005bb9 
+ 00023479  0x0000598b nrtn  0x00000028 
+ 00023480  0x0000598c branch  0x00003410 
+ 00023481  0x00005990 call  0x00007fe9 
+ 00023482  0x00005991 fetch  0x00000001 , 0x0000448e 
+ 00023483  0x00005992 rtneq  0x00000000 
+ 00023484  0x00005993 fetch  0x00000001 , 0x00000454 
+ 00023485  0x00005994 compare  0x000000c0 , 0x0000003f , 0x000000c0 
+ 00023486  0x00005995 rtn  0x00000001 
+ 00023487  0x00005996 branch  0x00007fe7 
+ 00023488  0x00005999 call  0x00005bab 
+ 00023489  0x0000599a isolate0  0x00000001 , 0x0000003f 
+ 00023490  0x0000599b branch  0x00005ba9 , 0x00000001 
+ 00023491  0x0000599c rtn 
+ 00023492  0x000059a1 rtn 
+ 00023493  0x000059a4 arg  0x000009be , 0x00000005 
+ 00023494  0x000059a5 call  0x00007eb3 
+ 00023495  0x000059a6 jam  0x00000002 , 0x000044bf 
+ 00023496  0x000059a7 jam  0x00000001 , 0x000044c1 
+ 00023497  0x000059a8 rtn 
+ 00023498  0x000059ab arg  0x00000a6e , 0x00000005 
+ 00023499  0x000059ac call  0x00007ebf 
+ 00023500  0x000059ad jam  0x00000006 , 0x000044c1 
+ 00023501  0x000059ae jam  0x00000002 , 0x000044bf 
+ 00023502  0x000059af rtn 
+ 00023503  0x000059b2 force  0x00000041 , 0x00000011 
+ 00023504  0x000059b3 call  0x00005c62 
+ 00023505  0x000059b4 setarg  0x0000000c 
+ 00023506  0x000059b5 istore  0x00000001 , 0x00000005 
+ 00023507  0x000059b6 arg  0x000045d2 , 0x00000006 
+ 00023508  0x000059b7 branch  0x00007eb3 
+ 00023509  0x000059ba call  0x00007166 
+ 00023510  0x000059bb force  0x00000011 , 0x00000011 
+ 00023511  0x000059bc call  0x00005c62 
+ 00023512  0x000059bd setarg  0x0000000d 
+ 00023513  0x000059be istore  0x00000001 , 0x00000005 
+ 00023514  0x000059bf branch  0x00007201 
+ 00023515  0x000059c3 fetch  0x00000001 , 0x000044c4 
+ 00023516  0x000059c4 rtneq  0x000000ff 
+ 00023517  0x000059c5 arg  0x00000003 , 0x00000002 
+ 00023518  0x000059c6 isub  0x00000002 , 0x0000003e 
+ 00023519  0x000059c7 nrtn  0x00000002 
+ 00023520  0x000059c8 arg  0x0000000a , 0x00000007 
+ 00023521  0x000059c9 call  0x00007f16 
+ 00023522  0x000059ca nrtn  0x00000034 
+ 00023523  0x000059cb branch  0x00005ba9 
+ 00023524  0x000059ce bpatchx  0x00000078 , 0x0000402f 
+ 00023525  0x000059cf fetch  0x00000001 , 0x000044c4 
+ 00023526  0x000059d0 beq  0x00000000 , 0x00005bef 
+ 00023527  0x000059d1 beq  0x00000001 , 0x00005bf5 
+ 00023528  0x000059d2 beq  0x00000002 , 0x00005bef 
+ 00023529  0x000059d3 beq  0x00000003 , 0x00005bf7 
+ 00023530  0x000059d4 beq  0x00000005 , 0x00005bfb 
+ 00023531  0x000059d5 beq  0x00000007 , 0x00005c07 
+ 00023532  0x000059d6 beq  0x00000008 , 0x00005c09 
+ 00023533  0x000059d7 beq  0x00000009 , 0x00005c10 
+ 00023534  0x000059d8 rtn 
+ 00023535  0x000059dc fetch  0x00000001 , 0x000044c5 
+ 00023536  0x000059dd rtnne  0x00000004 
+ 00023537  0x000059de jam  0x000000ff , 0x000044c5 
+ 00023538  0x000059df jam  0x000000ff , 0x000044c4 
+ 00023539  0x000059e0 jam  0x0000003f , 0x00000a99 
+ 00023540  0x000059e1 branch  0x00007d86 
+ 00023541  0x000059e5 jam  0x00000002 , 0x000044c4 
+ 00023542  0x000059e6 branch  0x00005b02 
+ 00023543  0x000059e9 jam  0x00000004 , 0x000044c4 
+ 00023544  0x000059ea setarg  0x00017700 
+ 00023545  0x000059eb arg  0x0000000a , 0x00000007 
+ 00023546  0x000059ec branch  0x00007f08 
+ 00023547  0x000059ef fetch  0x00000001 , 0x000044c5 
+ 00023548  0x000059f0 beq  0x00000004 , 0x00005bfe 
+ 00023549  0x000059f1 rtn 
+ 00023550  0x000059f4 jam  0x00000007 , 0x000044c4 
+ 00023551  0x000059f5 jam  0x00000029 , 0x00000a99 
+ 00023552  0x000059f6 call  0x00007d86 
+ 00023553  0x000059f7 call  0x00005b82 
+ 00023554  0x000059f8 fetch  0x00000001 , 0x00004092 
+ 00023555  0x000059f9 rtnne  0x0000000a 
+ 00023556  0x000059fa call  0x00005bb9 
+ 00023557  0x000059fb rtn  0x00000028 
+ 00023558  0x000059fc branch  0x00003410 
+ 00023559  0x00005a00 jam  0x00000008 , 0x000044c4 
+ 00023560  0x00005a01 branch  0x00005b8c 
+ 00023561  0x00005a04 fetch  0x00000001 , 0x00004452 
+ 00023562  0x00005a05 fetcht  0x00000001 , 0x00004459 
+ 00023563  0x00005a06 iand  0x00000002 , 0x0000003f 
+ 00023564  0x00005a07 isolate0  0x00000001 , 0x0000003f 
+ 00023565  0x00005a08 branch  0x00005c12 , 0x00000001 
+ 00023566  0x00005a09 jam  0x00000009 , 0x000044c4 
+ 00023567  0x00005a0a branch  0x00005b98 
+ 00023568  0x00005a0d call  0x00005ba0 
+ 00023569  0x00005a0e branch  0x00005c12 
+ 00023570  0x00005a12 force  0x0000000a , 0x00000007 
+ 00023571  0x00005a13 call  0x00007f07 
+ 00023572  0x00005a14 jam  0x000000ff , 0x000044c5 
+ 00023573  0x00005a15 jam  0x000000ff , 0x000044c4 
+ 00023574  0x00005a16 jam  0x0000003e , 0x00000a99 
+ 00023575  0x00005a17 branch  0x00007d86 
+ 00023576  0x00005a1c bpatchx  0x00000079 , 0x0000402f 
+ 00023577  0x00005a1d fetch  0x00000001 , 0x000044c6 
+ 00023578  0x00005a1e rtnbit0  0x00000007 
+ 00023579  0x00005a1f fetch  0x00000001 , 0x000044bf 
+ 00023580  0x00005a20 rtnne  0x00000002 
+ 00023581  0x00005a21 jam  0x00000000 , 0x000044bf 
+ 00023582  0x00005a22 fetch  0x00000001 , 0x000044c1 
+ 00023583  0x00005a23 beq  0x00000001 , 0x00005c58 
+ 00023584  0x00005a24 beq  0x00000002 , 0x00005c5f 
+ 00023585  0x00005a25 beq  0x00000003 , 0x00005c52 
+ 00023586  0x00005a26 beq  0x00000006 , 0x00005c39 
+ 00023587  0x00005a27 beq  0x00000007 , 0x00005c30 
+ 00023588  0x00005a28 beq  0x00000008 , 0x00005c26 
+ 00023589  0x00005a29 rtn 
+ 00023590  0x00005a2d fetch  0x00000001 , 0x00004663 
+ 00023591  0x00005a2e copy  0x0000003f , 0x00000007 
+ 00023592  0x00005a2f increase  0x00000001 , 0x0000003f 
+ 00023593  0x00005a30 store  0x00000001 , 0x00004663 
+ 00023594  0x00005a31 fetch  0x00000004 , 0x000044c7 
+ 00023595  0x00005a32 qisolate1  0x0000003f 
+ 00023596  0x00005a33 setarg  0x00000080 
+ 00023597  0x00005a34 setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00023598  0x00005a35 store  0x00000001 , 0x00004664 
+ 00023599  0x00005a36 branch  0x00005c55 
+ 00023600  0x00005a39 fetch  0x00000001 , 0x000044c2 
+ 00023601  0x00005a3a jam  0x00000000 , 0x000044c2 
+ 00023602  0x00005a3b beq  0x00000001 , 0x00005c35 
+ 00023603  0x00005a3c jam  0x00000002 , 0x000044bf 
+ 00023604  0x00005a3d rtn 
+ 00023605  0x00005a40 jam  0x00000031 , 0x00000a99 
+ 00023606  0x00005a41 call  0x00007d86 
+ 00023607  0x00005a42 jam  0x00000005 , 0x000044c4 
+ 00023608  0x00005a43 branch  0x00005bd5 
+ 00023609  0x00005a46 fetch  0x00000001 , 0x000009b9 
+ 00023610  0x00005a47 beq  0x00000003 , 0x00005c3d 
+ 00023611  0x00005a48 jam  0x00000002 , 0x000044bf 
+ 00023612  0x00005a49 rtn 
+ 00023613  0x00005a4c call  0x0000718d 
+ 00023614  0x00005a50 fetch  0x00000001 , 0x000044c6 
+ 00023615  0x00005a51 beq  0x00000083 , 0x00005c41 
+ 00023616  0x00005a52 call  0x00005b18 
+ 00023617  0x00005a54 call  0x0000717a 
+ 00023618  0x00005a55 arg  0x00000af2 , 0x00000011 
+ 00023619  0x00005a56 arg  0x00000a6e , 0x00000012 
+ 00023620  0x00005a57 arg  0x00000010 , 0x00000039 
+ 00023621  0x00005a58 call  0x00007f88 
+ 00023622  0x00005a59 branch  0x00005c49 , 0x00000005 
+ 00023623  0x00005a5b jam  0x0000000b , 0x0000047b 
+ 00023624  0x00005a5c branch  0x00005b54 
+ 00023625  0x00005a60 call  0x00007595 
+ 00023626  0x00005a61 nbranch  0x00005c47 , 0x00000005 
+ 00023627  0x00005a62 jam  0x00000001 , 0x00004429 
+ 00023628  0x00005a63 fetch  0x00000001 , 0x000044c6 
+ 00023629  0x00005a64 beq  0x00000081 , 0x00005c35 
+ 00023630  0x00005a65 beq  0x00000083 , 0x00005c35 
+ 00023631  0x00005a66 jam  0x00000002 , 0x000044bf 
+ 00023632  0x00005a67 jam  0x00000007 , 0x000044c1 
+ 00023633  0x00005a68 rtn 
+ 00023634  0x00005a6b fetch  0x00000001 , 0x000044c6 
+ 00023635  0x00005a6c beq  0x00000083 , 0x00005c56 
+ 00023636  0x00005a6d jam  0x00000000 , 0x00004664 
+ 00023637  0x00005a6f branch  0x00005b3d 
+ 00023638  0x00005a75 jam  0x00000000 , 0x00004663 
+ 00023639  0x00005a76 branch  0x00005b1b 
+ 00023640  0x00005a7a jam  0x00000002 , 0x000044bf 
+ 00023641  0x00005a7b fetch  0x00000001 , 0x000044c3 
+ 00023642  0x00005a7c beq  0x00000003 , 0x00005c5c 
+ 00023643  0x00005a7e rtn 
+ 00023644  0x00005a81 jam  0x00000002 , 0x000044c1 
+ 00023645  0x00005a82 jam  0x00000000 , 0x000009b9 
+ 00023646  0x00005a83 branch  0x00007a99 
+ 00023647  0x00005a86 jam  0x00000002 , 0x000044bf 
+ 00023648  0x00005a87 jam  0x00000003 , 0x000044c1 
+ 00023649  0x00005a88 branch  0x00005bcf 
+ 00023650  0x00005a8d force  0x00000006 , 0x00000012 
+ 00023651  0x00005a8e branch  0x00005847 
+ 00023652  0x00005a93 fetch  0x00000001 , 0x000002db 
+ 00023653  0x00005a94 beq  0x00000000 , 0x00005c7b 
+ 00023654  0x00005a95 beq  0x00000001 , 0x00005c83 
+ 00023655  0x00005a96 beq  0x00000002 , 0x00005c8e 
+ 00023656  0x00005a97 beq  0x00000003 , 0x00005caa 
+ 00023657  0x00005a98 beq  0x00000004 , 0x00005ce1 
+ 00023658  0x00005a99 beq  0x00000005 , 0x00005ce6 
+ 00023659  0x00005a9a beq  0x00000006 , 0x00005cea 
+ 00023660  0x00005a9b beq  0x00000007 , 0x00005cf5 
+ 00023661  0x00005a9c beq  0x00000008 , 0x00005c99 
+ 00023662  0x00005a9d beq  0x00000009 , 0x00005cf5 
+ 00023663  0x00005a9e beq  0x0000000a , 0x00005cef 
+ 00023664  0x00005a9f beq  0x0000000b , 0x00005cf5 
+ 00023665  0x00005aa0 beq  0x0000000c , 0x00005c9f 
+ 00023666  0x00005aa1 beq  0x0000000d , 0x00005cf5 
+ 00023667  0x00005aa2 beq  0x00000012 , 0x00005ca6 
+ 00023668  0x00005aa3 beq  0x00000013 , 0x00005cf5 
+ 00023669  0x00005aa4 arg  0x00000002 , 0x00000011 
+ 00023670  0x00005aa5 arg  0x00000007 , 0x00000012 
+ 00023671  0x00005aa6 call  0x00005842 
+ 00023672  0x00005aa7 fetch  0x00000001 , 0x000002db 
+ 00023673  0x00005aa8 istore  0x00000001 , 0x00000005 
+ 00023674  0x00005aa9 rtn 
+ 00023675  0x00005aad ifetch  0x00000009 , 0x00000006 
+ 00023676  0x00005aae store  0x00000009 , 0x000043d3 
+ 00023677  0x00005aaf ifetch  0x00000002 , 0x00000006 
+ 00023678  0x00005ab0 store  0x00000002 , 0x0000045f 
+ 00023679  0x00005ab1 fetch  0x00000001 , 0x0000043f 
+ 00023680  0x00005ab2 set1  0x00000005 , 0x0000003f 
+ 00023681  0x00005ab3 store  0x00000001 , 0x0000043f 
+ 00023682  0x00005ab4 rtn 
+ 00023683  0x00005ab7 ifetch  0x00000005 , 0x00000006 
+ 00023684  0x00005ab8 store  0x00000005 , 0x000043ce 
+ 00023685  0x00005ab9 ifetch  0x00000002 , 0x00000006 
+ 00023686  0x00005aba store  0x00000002 , 0x0000045f 
+ 00023687  0x00005abb fetcht  0x00000002 , 0x00000459 
+ 00023688  0x00005abc isub  0x00000002 , 0x0000003e 
+ 00023689  0x00005abd nbranch  0x00005c8e , 0x00000002 
+ 00023690  0x00005abe fetch  0x00000001 , 0x0000043f 
+ 00023691  0x00005abf set1  0x00000006 , 0x0000003f 
+ 00023692  0x00005ac0 store  0x00000001 , 0x0000043f 
+ 00023693  0x00005ac1 rtn 
+ 00023694  0x00005ac5 setarg  0x00000014 
+ 00023695  0x00005ac6 store  0x00000002 , 0x0000046d 
+ 00023696  0x00005ac7 store  0x00000002 , 0x000044ba 
+ 00023697  0x00005ac8 rtn 
+ 00023698  0x00005acb arg  0x00000013 , 0x00000013 
+ 00023699  0x00005acf arg  0x00000002 , 0x00000011 
+ 00023700  0x00005ad0 arg  0x00000002 , 0x00000012 
+ 00023701  0x00005ad1 call  0x00005842 
+ 00023702  0x00005ad2 copy  0x00000013 , 0x0000003f 
+ 00023703  0x00005ad3 istore  0x00000001 , 0x00000005 
+ 00023704  0x00005ad4 rtn 
+ 00023705  0x00005ad9 arg  0x00000009 , 0x00000011 
+ 00023706  0x00005ada arg  0x00000009 , 0x00000012 
+ 00023707  0x00005adb call  0x00005842 
+ 00023708  0x00005adc setarg  0x00000001 
+ 00023709  0x00005add istore  0x00000008 , 0x00000005 
+ 00023710  0x00005ade rtn 
+ 00023711  0x00005ae2 rtn  0x00000029 
+ 00023712  0x00005ae4 arg  0x00000006 , 0x00000011 
+ 00023713  0x00005ae5 arg  0x0000000c , 0x00000012 
+ 00023714  0x00005ae6 call  0x00005842 
+ 00023715  0x00005ae7 fetch  0x00000005 , 0x00004510 
+ 00023716  0x00005ae8 istore  0x00000005 , 0x00000005 
+ 00023717  0x00005ae9 rtn 
+ 00023718  0x00005aed arg  0x00000013 , 0x00000012 
+ 00023719  0x00005aee branch  0x00005ca8 
+ 00023720  0x00005af2 arg  0x00000001 , 0x00000011 
+ 00023721  0x00005af3 branch  0x00005842 
+ 00023722  0x00005af7 ifetch  0x00000008 , 0x00000006 
+ 00023723  0x00005af8 store  0x00000008 , 0x000044cd 
+ 00023724  0x00005af9 ifetch  0x00000002 , 0x00000006 
+ 00023725  0x00005afa store  0x00000002 , 0x000044cb 
+ 00023726  0x00005afb ifetch  0x00000008 , 0x00000006 
+ 00023727  0x00005afc store  0x00000008 , 0x000044aa 
+ 00023728  0x00005afd ifetch  0x00000004 , 0x00000006 
+ 00023729  0x00005afe store  0x00000004 , 0x00004411 
+ 00023730  0x00005aff call  0x00005ccf 
+ 00023731  0x00005b00 bpatchx  0x0000007a , 0x0000402f 
+ 00023732  0x00005b01 fetch  0x00000001 , 0x000044c4 
+ 00023733  0x00005b02 beq  0x00000005 , 0x00005cbc 
+ 00023734  0x00005b03 fetch  0x00000001 , 0x000044e9 
+ 00023735  0x00005b04 bbit1  0x00000001 , 0x00005cbf 
+ 00023736  0x00005b05 fetch  0x00000001 , 0x00004217 
+ 00023737  0x00005b06 ncall  0x000067be , 0x00000034 
+ 00023738  0x00005b07 fetch  0x00000001 , 0x00004429 
+ 00023739  0x00005b08 beq  0x00000000 , 0x00005cc4 
+ 00023740  0x00005b0a jam  0x00000001 , 0x000044c5 
+ 00023741  0x00005b0b call  0x00005cdd 
+ 00023742  0x00005b0c branch  0x000073a2 
+ 00023743  0x00005b0f jam  0x00000001 , 0x00004429 
+ 00023744  0x00005b10 arg  0x000044ea , 0x00000006 
+ 00023745  0x00005b11 arg  0x00004419 , 0x00000005 
+ 00023746  0x00005b12 call  0x00007ebf 
+ 00023747  0x00005b13 branch  0x00005cbc 
+ 00023748  0x00005b17 bpatchx  0x0000007b , 0x0000402f 
+ 00023749  0x00005b18 jam  0x00000000 , 0x000044c5 
+ 00023750  0x00005b19 jam  0x00000000 , 0x000044c4 
+ 00023751  0x00005b1a jam  0x00000041 , 0x00000a99 
+ 00023752  0x00005b1b branch  0x00007d86 
+ 00023753  0x00005b1e arg  0x00000002 , 0x00000011 
+ 00023754  0x00005b1f arg  0x0000000d , 0x00000012 
+ 00023755  0x00005b20 call  0x00005842 
+ 00023756  0x00005b21 setarg  0x00000006 
+ 00023757  0x00005b22 istore  0x00000001 , 0x00000005 
+ 00023758  0x00005b23 rtn 
+ 00023759  0x00005b26 arg  0x000044b2 , 0x00000005 
+ 00023760  0x00005b27 force  0x00000008 , 0x00000039 
+ 00023761  0x00005b28 call  0x0000630d 
+ 00023762  0x00005b29 arg  0x00004415 , 0x00000005 
+ 00023763  0x00005b2a force  0x00000004 , 0x00000039 
+ 00023764  0x00005b2b call  0x0000630d 
+ 00023765  0x00005b2c arg  0x0000000d , 0x00000011 
+ 00023766  0x00005b2d arg  0x00000004 , 0x00000012 
+ 00023767  0x00005b2e call  0x00005842 
+ 00023768  0x00005b2f fetch  0x00000008 , 0x000044b2 
+ 00023769  0x00005b30 istore  0x00000008 , 0x00000005 
+ 00023770  0x00005b31 fetch  0x00000004 , 0x00004415 
+ 00023771  0x00005b32 istore  0x00000004 , 0x00000005 
+ 00023772  0x00005b33 rtn 
+ 00023773  0x00005b36 arg  0x00000005 , 0x00000012 
+ 00023774  0x00005b37 branch  0x00005ca8 
+ 00023775  0x00005b3a arg  0x00000006 , 0x00000012 
+ 00023776  0x00005b3b branch  0x00005ca8 
+ 00023777  0x00005b3f ifetch  0x00000008 , 0x00000006 
+ 00023778  0x00005b40 store  0x00000008 , 0x000044b2 
+ 00023779  0x00005b41 ifetch  0x00000004 , 0x00000006 
+ 00023780  0x00005b42 store  0x00000004 , 0x00004415 
+ 00023781  0x00005b43 branch  0x000073a2 
+ 00023782  0x00005b46 fetch  0x00000001 , 0x0000043f 
+ 00023783  0x00005b47 set1  0x00000004 , 0x0000003f 
+ 00023784  0x00005b48 store  0x00000001 , 0x0000043f 
+ 00023785  0x00005b49 rtn 
+ 00023786  0x00005b4c rtn  0x00000029 
+ 00023787  0x00005b4d jam  0x00000032 , 0x00000a99 
+ 00023788  0x00005b4e call  0x00007d86 
+ 00023789  0x00005b4f jam  0x00000004 , 0x000044c5 
+ 00023790  0x00005b50 branch  0x00005cdf 
+ 00023791  0x00005b53 jam  0x00000002 , 0x000044c5 
+ 00023792  0x00005b54 call  0x00005cf3 
+ 00023793  0x00005b55 jam  0x00000033 , 0x00000a99 
+ 00023794  0x00005b56 branch  0x00007d86 
+ 00023795  0x00005b59 arg  0x0000000b , 0x00000012 
+ 00023796  0x00005b5a branch  0x00005ca8 
+ 00023797  0x00005b62 rtn 
+ 00023798  0x00005b6a rtn  0x0000002b 
+ 00023799  0x00005b6c bpatchx  0x0000007c , 0x0000402f 
+ 00023800  0x00005b6d setarg  0x00000000 
+ 00023801  0x00005b6e store  0x00000001 , 0x00000048 
+ 00023802  0x00005b6f store  0x00000001 , 0x00000055 
+ 00023803  0x00005b70 store  0x00000001 , 0x00000078 
+ 00023804  0x00005b71 store  0x00000001 , 0x0000007c 
+ 00023805  0x00005b72 store  0x00000001 , 0x00004158 
+ 00023806  0x00005b73 store  0x00000001 , 0x000004d7 
+ 00023807  0x00005b74 store  0x00000001 , 0x0000016d 
+ 00023808  0x00005b75 store  0x00000001 , 0x000009b5 
+ 00023809  0x00005b76 jam  0x00000000 , 0x0000455b 
+ 00023810  0x00005b77 jam  0x00000000 , 0x00000229 
+ 00023811  0x00005b78 jam  0x00000000 , 0x000004d8 
+ 00023812  0x00005b7a jam  0x00000000 , 0x000009b5 
+ 00023813  0x00005b7b jam  0x00000000 , 0x000009b4 
+ 00023814  0x00005b7c jam  0x00000000 , 0x000004d1 
+ 00023815  0x00005b7f rtn 
+ 00023816  0x00005b82 bpatchx  0x0000007d , 0x0000402f 
+ 00023817  0x00005b83 call  0x000062ff , 0x00000029 
+ 00023818  0x00005b84 ncall  0x00006303 , 0x00000029 
+ 00023819  0x00005b85 call  0x000062bc 
+ 00023820  0x00005b86 nrtn  0x00000034 
+ 00023821  0x00005b87 fetch  0x00000001 , 0x0000004c 
+ 00023822  0x00005b88 rtnbit0  0x00000006 
+ 00023823  0x00005b89 set0  0x00000006 , 0x0000003f 
+ 00023824  0x00005b8a set0  0x00000001 , 0x00000000 
+ 00023825  0x00005b8b store  0x00000001 , 0x0000004c 
+ 00023826  0x00005b8c fetch  0x00000001 , 0x00000551 
+ 00023827  0x00005b8d fetcht  0x00000001 , 0x0000004c 
+ 00023828  0x00005b8e isolate1  0x00000000 , 0x0000003f 
+ 00023829  0x00005b8f setflag  0x00000001 , 0x00000001 , 0x00000002 
+ 00023830  0x00005b90 storet  0x00000001 , 0x0000004c 
+ 00023831  0x00005b91 and_into  0x00000002 , 0x00000002 
+ 00023832  0x00005b92 storet  0x00000001 , 0x0000007f 
+ 00023833  0x00005b93 fetcht  0x00000001 , 0x0000004c 
+ 00023834  0x00005b94 rshift  0x0000003f , 0x0000003f 
+ 00023835  0x00005b95 store  0x00000001 , 0x0000007d 
+ 00023836  0x00005b96 bpatchx  0x0000007e , 0x0000402f 
+ 00023837  0x00005b97 fetch  0x00000001 , 0x0000007d 
+ 00023838  0x00005b98 beq  0x0000007f , 0x00005d66 
+ 00023839  0x00005b99 beq  0x00000003 , 0x00005db1 
+ 00023840  0x00005b9a beq  0x00000004 , 0x00005dc2 
+ 00023841  0x00005b9b beq  0x0000003c , 0x00005d59 
+ 00023842  0x00005b9c beq  0x00000005 , 0x00005d55 
+ 00023843  0x00005b9d beq  0x0000000f , 0x00005fa8 
+ 00023844  0x00005b9e beq  0x00000010 , 0x00005e24 
+ 00023845  0x00005b9f beq  0x00000023 , 0x00005e42 
+ 00023846  0x00005ba0 beq  0x00000039 , 0x00005fc1 
+ 00023847  0x00005ba1 beq  0x00000038 , 0x00005fbc 
+ 00023848  0x00005ba2 beq  0x00000031 , 0x00005e27 
+ 00023849  0x00005ba3 beq  0x00000037 , 0x00005eb0 
+ 00023850  0x00005ba4 beq  0x00000027 , 0x00005eac 
+ 00023851  0x00005ba5 beq  0x00000033 , 0x00005ea9 
+ 00023852  0x00005ba6 beq  0x00000025 , 0x00005eae 
+ 00023853  0x00005ba7 beq  0x00000026 , 0x00005e3e 
+ 00023854  0x00005ba8 beq  0x00000007 , 0x00005e36 
+ 00023855  0x00005ba9 beq  0x0000002d , 0x00005e2d 
+ 00023856  0x00005baa beq  0x0000002e , 0x00005e2e 
+ 00023857  0x00005bab beq  0x00000001 , 0x00005ea5 
+ 00023858  0x00005bac beq  0x00000002 , 0x00005e90 
+ 00023859  0x00005bad beq  0x00000028 , 0x00005fb3 
+ 00023860  0x00005bae beq  0x00000009 , 0x00005e86 
+ 00023861  0x00005baf beq  0x0000000b , 0x00005e5f 
+ 00023862  0x00005bb0 beq  0x00000008 , 0x00005e43 
+ 00023863  0x00005bb1 beq  0x0000000c , 0x00005e6a 
+ 00023864  0x00005bb2 beq  0x0000001f , 0x00005e3a 
+ 00023865  0x00005bb3 beq  0x00000020 , 0x00005e3c 
+ 00023866  0x00005bb4 beq  0x00000021 , 0x00005eca 
+ 00023867  0x00005bb5 beq  0x00000022 , 0x00005eca 
+ 00023868  0x00005bb6 beq  0x00000035 , 0x00005ecb 
+ 00023869  0x00005bb7 beq  0x00000036 , 0x00005ecc 
+ 00023870  0x00005bb8 beq  0x00000024 , 0x00005eca 
+ 00023871  0x00005bb9 beq  0x00000034 , 0x00005ecd 
+ 00023872  0x00005bba beq  0x00000017 , 0x00005ed6 
+ 00023873  0x00005bbb beq  0x00000011 , 0x00005ef2 
+ 00023874  0x00005bbc beq  0x00000012 , 0x00005ef6 
+ 00023875  0x00005bbd beq  0x00000013 , 0x00005ef8 
+ 00023876  0x00005bbe beq  0x0000000d , 0x00005f0a 
+ 00023877  0x00005bbf beq  0x0000000e , 0x00005f0a 
+ 00023878  0x00005bc0 beq  0x0000002f , 0x00005eaa 
+ 00023879  0x00005bc1 beq  0x00000030 , 0x00005f0a 
+ 00023880  0x00005bc2 beq  0x0000000a , 0x00005f0a 
+ 00023881  0x00005bc3 beq  0x00000018 , 0x00005f0b 
+ 00023882  0x00005bc4 beq  0x00000032 , 0x00005f0a 
+ 00023883  0x00005bc5 beq  0x0000003d , 0x00005f10 
+ 00023884  0x00005bc6 beq  0x0000003e , 0x00005f51 
+ 00023885  0x00005bc7 beq  0x0000003f , 0x00005f4b 
+ 00023886  0x00005bc8 beq  0x00000040 , 0x00005f78 
+ 00023887  0x00005bc9 beq  0x00000041 , 0x00005f8a 
+ 00023888  0x00005bca beq  0x00000006 , 0x00005fa7 
+ 00023889  0x00005bcb beq  0x0000003a , 0x00005d57 
+ 00023890  0x00005bcf jam  0x00000019 , 0x0000007e 
+ 00023891  0x00005bd1 jam  0x00000004 , 0x0000007c 
+ 00023892  0x00005bd2 rtn 
+ 00023893  0x00005bd5 jam  0x00000006 , 0x0000007c 
+ 00023894  0x00005bd6 rtn 
+ 00023895  0x00005bd9 jam  0x0000003b , 0x0000007c 
+ 00023896  0x00005bda rtn 
+ 00023897  0x00005bdd fetch  0x00000004 , 0x00000552 
+ 00023898  0x00005bde lshift  0x0000003f , 0x0000003f 
+ 00023899  0x00005bdf store  0x00000004 , 0x000040d2 
+ 00023900  0x00005be0 fetch  0x00000001 , 0x00000556 
+ 00023901  0x00005be1 store  0x00000001 , 0x000040d9 
+ 00023902  0x00005be2 fetch  0x00000005 , 0x00000557 
+ 00023903  0x00005be3 store  0x00000005 , 0x000040e7 
+ 00023904  0x00005be4 fetch  0x00000005 , 0x0000055c 
+ 00023905  0x00005be5 istore  0x00000005 , 0x00000005 
+ 00023906  0x00005be6 fetch  0x00000001 , 0x00000031 
+ 00023907  0x00005be7 set1  0x00000003 , 0x0000003f 
+ 00023908  0x00005be8 store  0x00000001 , 0x00000031 
+ 00023909  0x00005be9 rtn 
+ 00023910  0x00005beb bpatchx  0x0000007f , 0x0000402f 
+ 00023911  0x00005bec fetch  0x00000001 , 0x00000552 
+ 00023912  0x00005bed set1  0x00000007 , 0x0000003f 
+ 00023913  0x00005bee store  0x00000001 , 0x0000007d 
+ 00023914  0x00005bef beq  0x00000081 , 0x00005d88 
+ 00023915  0x00005bf0 beq  0x00000082 , 0x00005d8d 
+ 00023916  0x00005bf1 beq  0x00000095 , 0x00005eb1 
+ 00023917  0x00005bf2 beq  0x00000096 , 0x00005eca 
+ 00023918  0x00005bf3 beq  0x0000008b , 0x00005ebf 
+ 00023919  0x00005bf4 beq  0x00000083 , 0x00005da5 
+ 00023920  0x00005bf5 beq  0x00000084 , 0x00005da7 
+ 00023921  0x00005bf6 beq  0x00000090 , 0x00005d7a 
+ 00023922  0x00005bf7 beq  0x00000097 , 0x00005d9e 
+ 00023923  0x00005bf8 beq  0x00000098 , 0x00005da3 
+ 00023924  0x00005bf9 beq  0x00000099 , 0x00005d7d 
+ 00023925  0x00005bfa beq  0x0000009a , 0x00005d80 
+ 00023926  0x00005bfb rtneq  0x00000084 
+ 00023927  0x00005bff jam  0x00000082 , 0x0000007c 
+ 00023928  0x00005c00 jam  0x00000019 , 0x0000007e 
+ 00023929  0x00005c02 rtn 
+ 00023930  0x00005c04 jam  0x00000082 , 0x0000007c 
+ 00023931  0x00005c05 jam  0x0000002e , 0x0000007e 
+ 00023932  0x00005c06 rtn 
+ 00023933  0x00005c09 call  0x00005d82 
+ 00023934  0x00005c0a jam  0x0000009a , 0x0000007c 
+ 00023935  0x00005c0b rtn 
+ 00023936  0x00005c0e call  0x00005d82 
+ 00023937  0x00005c0f branch  0x00005d86 
+ 00023938  0x00005c12 arg  0x0000465e , 0x00000005 
+ 00023939  0x00005c13 fetch  0x00000003 , 0x00000553 
+ 00023940  0x00005c14 istore  0x00000003 , 0x00000005 
+ 00023941  0x00005c15 rtn 
+ 00023942  0x00005c18 branch  0x000076d8 , 0x00000001 
+ 00023943  0x00005c19 rtn 
+ 00023944  0x00005c1b fetch  0x00000001 , 0x00000554 
+ 00023945  0x00005c1c set1  0x00000007 , 0x0000003f 
+ 00023946  0x00005c1d store  0x00000001 , 0x000004c9 
+ 00023947  0x00005c1e beq  0x0000008b , 0x00005d92 
+ 00023948  0x00005c1f rtn 
+ 00023949  0x00005c23 fetch  0x00000001 , 0x00000554 
+ 00023950  0x00005c24 set1  0x00000007 , 0x0000003f 
+ 00023951  0x00005c25 store  0x00000001 , 0x000004c9 
+ 00023952  0x00005c26 beq  0x0000008b , 0x00005d96 
+ 00023953  0x00005c27 rtn 
+ 00023954  0x00005c2a fetch  0x00000001 , 0x0000415a 
+ 00023955  0x00005c2b fetcht  0x00000001 , 0x0000004c 
+ 00023956  0x00005c2c nsetflag  0x00000034 , 0x00000005 , 0x00000002 
+ 00023957  0x00005c2d storet  0x00000001 , 0x0000004c 
+ 00023958  0x00005c2f fetch  0x00000001 , 0x00000030 
+ 00023959  0x00005c30 rtnbit0  0x00000005 
+ 00023960  0x00005c31 set0  0x00000005 , 0x0000003f 
+ 00023961  0x00005c32 store  0x00000001 , 0x00000030 
+ 00023962  0x00005c33 fetch  0x00000001 , 0x000004d7 
+ 00023963  0x00005c34 nrtn  0x00000034 
+ 00023964  0x00005c35 jam  0x00000031 , 0x0000007c 
+ 00023965  0x00005c36 rtn 
+ 00023966  0x00005c39 nbranch  0x00005da1 , 0x00000029 
+ 00023967  0x00005c3a jam  0x00000012 , 0x0000007c 
+ 00023968  0x00005c3b branch  0x000062eb 
+ 00023969  0x00005c3e jam  0x00000097 , 0x0000007c 
+ 00023970  0x00005c3f rtn 
+ 00023971  0x00005c44 call  0x000062eb 
+ 00023972  0x00005c45 branch  0x00005ffe 
+ 00023973  0x00005c48 jam  0x00000084 , 0x0000007c 
+ 00023974  0x00005c49 rtn 
+ 00023975  0x00005c4c fetcht  0x00000001 , 0x00000555 
+ 00023976  0x00005c4d and  0x00000002 , 0x00000001 , 0x00000002 
+ 00023977  0x00005c4e storet  0x00000001 , 0x000004d0 
+ 00023978  0x00005c4f fetch  0x00000001 , 0x000041ce 
+ 00023979  0x00005c50 bne  0x00000051 , 0x00005dad 
+ 00023980  0x00005c51 jam  0x00000000 , 0x000041ce 
+ 00023981  0x00005c53 fetch  0x00000001 , 0x00000055 
+ 00023982  0x00005c54 rtnne  0x00000015 
+ 00023983  0x00005c55 jam  0x00000004 , 0x00000055 
+ 00023984  0x00005c56 branch  0x0000631b 
+ 00023985  0x00005c59 bpatchx  0x00000080 , 0x00004030 
+ 00023986  0x00005c5a fetch  0x00000001 , 0x00000552 
+ 00023987  0x00005c5b store  0x00000001 , 0x000004c9 
+ 00023988  0x00005c5c beq  0x00000033 , 0x00005dd8 
+ 00023989  0x00005c5d beq  0x00000008 , 0x00005de7 
+ 00023990  0x00005c5e beq  0x0000000f , 0x00005dee 
+ 00023991  0x00005c5f beq  0x00000010 , 0x00005df4 
+ 00023992  0x00005c60 beq  0x00000011 , 0x00005df5 
+ 00023993  0x00005c61 beq  0x00000012 , 0x00005dfd 
+ 00023994  0x00005c62 beq  0x00000018 , 0x00005e13 
+ 00023995  0x00005c63 beq  0x00000017 , 0x00005e16 
+ 00023996  0x00005c64 beq  0x00000013 , 0x00005dcf 
+ 00023997  0x00005c66 beq  0x0000003d , 0x00005f1e 
+ 00023998  0x00005c67 beq  0x0000003e , 0x00005f6a 
+ 00023999  0x00005c68 beq  0x00000040 , 0x00005f20 
+ 00024000  0x00005c69 beq  0x00000041 , 0x00005f3d 
+ 00024001  0x00005c6a rtn 
+ 00024002  0x00005c6d bpatchx  0x00000081 , 0x00004030 
+ 00024003  0x00005c6e fetch  0x00000001 , 0x00000552 
+ 00024004  0x00005c6f store  0x00000001 , 0x000004c9 
+ 00024005  0x00005c70 beq  0x00000001 , 0x00005e0a 
+ 00024006  0x00005c71 beq  0x00000033 , 0x00005de2 
+ 00024007  0x00005c72 beq  0x0000000b , 0x00005dfe 
+ 00024008  0x00005c73 beq  0x00000008 , 0x00005e01 
+ 00024009  0x00005c74 beq  0x00000013 , 0x00005dd2 
+ 00024010  0x00005c76 beq  0x00000040 , 0x00005e0b 
+ 00024011  0x00005c77 beq  0x00000041 , 0x00005e0e 
+ 00024012  0x00005c78 beq  0x00000018 , 0x00005e11 
+ 00024013  0x00005c79 beq  0x00000017 , 0x00005e22 
+ 00024014  0x00005c7a rtn 
+ 00024015  0x00005c7d jam  0x00000020 , 0x00000a99 
+ 00024016  0x00005c7e call  0x00007d86 
+ 00024017  0x00005c7f branch  0x000021dc 
+ 00024018  0x00005c81 jam  0x00000019 , 0x00000a99 
+ 00024019  0x00005c82 call  0x00007d86 
+ 00024020  0x00005c83 jam  0x00000002 , 0x0000455b 
+ 00024021  0x00005c84 setarg  0x00000050 
+ 00024022  0x00005c85 arg  0x00000006 , 0x00000007 
+ 00024023  0x00005c86 branch  0x00007f08 
+ 00024024  0x00005c8c fetch  0x00000001 , 0x000004d1 
+ 00024025  0x00005c8d set1  0x00000000 , 0x0000003f 
+ 00024026  0x00005c8e store  0x00000001 , 0x000004d1 
+ 00024027  0x00005c8f jam  0x00000001 , 0x00000a99 
+ 00024028  0x00005c90 call  0x00007d86 
+ 00024029  0x00005c91 jam  0x0000008b , 0x0000007c 
+ 00024030  0x00005c95 fetch  0x00000001 , 0x00000055 
+ 00024031  0x00005c96 bne  0x00000005 , 0x00005d07 
+ 00024032  0x00005c99 jam  0x00000006 , 0x00000055 
+ 00024033  0x00005c9a rtn 
+ 00024034  0x00005ca3 jam  0x0000000b , 0x000004ca 
+ 00024035  0x00005ca4 jam  0x00000007 , 0x0000007c 
+ 00024036  0x00005ca6 jam  0x00000000 , 0x00000055 
+ 00024037  0x00005ca8 branch  0x00005d07 , 0x00000001 
+ 00024038  0x00005ca9 rtn 
+ 00024039  0x00005cac fetch  0x00000001 , 0x000041bd 
+ 00024040  0x00005cad nrtn  0x00000034 
+ 00024041  0x00005cae call  0x0000244f 
+ 00024042  0x00005caf call  0x00005ffc 
+ 00024043  0x00005cb0 rtn  0x00000029 
+ 00024044  0x00005cb1 set1  0x00000021 , 0x00000000 
+ 00024045  0x00005cb2 rtn 
+ 00024046  0x00005cb5 nrtn  0x00000029 
+ 00024047  0x00005cb6 jam  0x00000010 , 0x0000007c 
+ 00024048  0x00005cb7 fetch  0x00000001 , 0x0000004c 
+ 00024049  0x00005cb8 rtnbit0  0x00000002 
+ 00024050  0x00005cb9 jam  0x00000012 , 0x0000007c 
+ 00024051  0x00005cba rtn 
+ 00024052  0x00005cbd branch  0x00005ffe 
+ 00024053  0x00005cc0 call  0x00006059 
+ 00024054  0x00005cc1 fetch  0x00000001 , 0x00000030 
+ 00024055  0x00005cc2 rtnbit1  0x00000004 
+ 00024056  0x00005cc3 jam  0x00000031 , 0x0000007c 
+ 00024057  0x00005cc4 fetch  0x00000001 , 0x00000055 
+ 00024058  0x00005cc5 rtnne  0x0000000a 
+ 00024059  0x00005cc6 jam  0x0000000b , 0x00000055 
+ 00024060  0x00005cc7 rtn 
+ 00024061  0x00005cd1 rtn 
+ 00024062  0x00005cd5 jam  0x00000007 , 0x0000007c 
+ 00024063  0x00005cd6 jam  0x00000013 , 0x000004ca 
+ 00024064  0x00005cd7 rtn 
+ 00024065  0x00005cda fetch  0x00000001 , 0x00000553 
+ 00024066  0x00005cdb beq  0x00000006 , 0x00005e07 
+ 00024067  0x00005cdc rtnne  0x00000018 
+ 00024068  0x00005cdd jam  0x00000018 , 0x000004ca 
+ 00024069  0x00005cde jam  0x00000007 , 0x0000007c 
+ 00024070  0x00005cdf rtn 
+ 00024071  0x00005ce1 jam  0x00000006 , 0x000004ca 
+ 00024072  0x00005ce2 jam  0x00000007 , 0x0000007c 
+ 00024073  0x00005ce3 rtn 
+ 00024074  0x00005ce6 rtn 
+ 00024075  0x00005ce9 jam  0x00000000 , 0x000009ae 
+ 00024076  0x00005cea jam  0x00000007 , 0x0000007c 
+ 00024077  0x00005ceb branch  0x00005d07 
+ 00024078  0x00005cee jam  0x00000000 , 0x000009ae 
+ 00024079  0x00005cef jam  0x00000007 , 0x0000007c 
+ 00024080  0x00005cf0 branch  0x00005d07 
+ 00024081  0x00005cf2 jam  0x00000024 , 0x00000a99 
+ 00024082  0x00005cf3 branch  0x00007d86 
+ 00024083  0x00005cf6 jam  0x00000023 , 0x00000a99 
+ 00024084  0x00005cf7 call  0x00007d86 
+ 00024085  0x00005cf8 branch  0x000026e9 
+ 00024086  0x00005cfb jam  0x00000022 , 0x00000a99 
+ 00024087  0x00005cfc call  0x00007d86 
+ 00024088  0x00005cfd setarg  0x00000000 
+ 00024089  0x00005cfe store  0x00000002 , 0x00000075 
+ 00024090  0x00005cff fetch  0x00000002 , 0x000041e3 
+ 00024091  0x00005d00 lshift  0x0000003f , 0x0000003f 
+ 00024092  0x00005d01 store  0x00000002 , 0x00000032 
+ 00024093  0x00005d02 fetch  0x00000001 , 0x000041e5 
+ 00024094  0x00005d03 store  0x00000001 , 0x00000073 
+ 00024095  0x00005d04 fetch  0x00000001 , 0x000041e7 
+ 00024096  0x00005d05 store  0x00000001 , 0x00000074 
+ 00024097  0x00005d06 branch  0x000026c6 
+ 00024098  0x00005d09 jam  0x00000021 , 0x00000a99 
+ 00024099  0x00005d0a branch  0x00007d86 
+ 00024100  0x00005d0d fetcht  0x00000001 , 0x00000552 
+ 00024101  0x00005d0e storet  0x00000001 , 0x00000054 
+ 00024102  0x00005d0f branch  0x00005e38 
+ 00024103  0x00005d12 fetch  0x00000001 , 0x000004d1 
+ 00024104  0x00005d13 set1  0x00000002 , 0x0000003f 
+ 00024105  0x00005d14 store  0x00000001 , 0x000004d1 
+ 00024106  0x00005d15 rtnbit1  0x00000003 
+ 00024107  0x00005d16 jam  0x00000031 , 0x0000007c 
+ 00024108  0x00005d17 branch  0x00005d07 
+ 00024109  0x00005d1c rtn 
+ 00024110  0x00005d1f fetch  0x00000001 , 0x000040d0 
+ 00024111  0x00005d20 fetcht  0x00000001 , 0x00000552 
+ 00024112  0x00005d21 isub  0x00000002 , 0x0000003e 
+ 00024113  0x00005d23 branch  0x00005e38 , 0x00000002 
+ 00024114  0x00005d24 jam  0x00000004 , 0x0000007c 
+ 00024115  0x00005d25 jam  0x0000001f , 0x0000007e 
+ 00024116  0x00005d26 jam  0x0000002e , 0x0000007d 
+ 00024117  0x00005d27 rtn 
+ 00024118  0x00005d2a call  0x00006157 
+ 00024119  0x00005d2b branch  0x00005e38 
+ 00024120  0x00005d2e jam  0x00000003 , 0x0000007c 
+ 00024121  0x00005d2f rtn 
+ 00024122  0x00005d32 jam  0x00000021 , 0x0000007c 
+ 00024123  0x00005d33 rtn 
+ 00024124  0x00005d36 jam  0x00000022 , 0x0000007c 
+ 00024125  0x00005d37 rtn 
+ 00024126  0x00005d3a fetch  0x00000001 , 0x00000055 
+ 00024127  0x00005d3b rtneq  0x00000013 
+ 00024128  0x00005d3d jam  0x00000002 , 0x00000055 
+ 00024129  0x00005d3f rtn 
+ 00024130  0x00005d43 rtn 
+ 00024131  0x00005d46 call  0x00005ff9 
+ 00024132  0x00005d47 jam  0x00000001 , 0x000004d4 
+ 00024133  0x00005d48 jam  0x0000000a , 0x00000a99 
+ 00024134  0x00005d49 call  0x00007d86 
+ 00024135  0x00005d4b call  0x000062f3 
+ 00024136  0x00005d4c nbranch  0x00006001 , 0x00000001 
+ 00024137  0x00005d4e nbranch  0x00005e4e , 0x00000029 
+ 00024138  0x00005d4f jam  0x00000004 , 0x0000007c 
+ 00024139  0x00005d50 jam  0x00000008 , 0x0000007d 
+ 00024140  0x00005d51 jam  0x00000023 , 0x0000007e 
+ 00024141  0x00005d52 rtn 
+ 00024142  0x00005d54 fetch  0x00000001 , 0x0000004b 
+ 00024143  0x00005d55 set1  0x00000002 , 0x0000003f 
+ 00024144  0x00005d56 store  0x00000001 , 0x0000004b 
+ 00024145  0x00005d57 rtn 
+ 00024146  0x00005d5b fetcht  0x00000001 , 0x0000004c 
+ 00024147  0x00005d5c nsetflag  0x00000034 , 0x00000001 , 0x00000002 
+ 00024148  0x00005d5d storet  0x00000001 , 0x0000004c 
+ 00024149  0x00005d5e rtn 
+ 00024150  0x00005d62 fetch  0x00000001 , 0x0000007f 
+ 00024151  0x00005d63 rshift  0x0000003f , 0x0000003f 
+ 00024152  0x00005d64 and_into  0x00000001 , 0x0000003f 
+ 00024153  0x00005d65 rtn 
+ 00024154  0x00005d68 fetch  0x00000001 , 0x00004217 
+ 00024155  0x00005d69 rtn  0x00000034 
+ 00024156  0x00005d6a fetch  0x00000001 , 0x000009b5 
+ 00024157  0x00005d6b call  0x000067b2 , 0x00000034 
+ 00024158  0x00005d6c rtn 
+ 00024159  0x00005d6f call  0x00005e5a 
+ 00024160  0x00005d70 call  0x00005e56 
+ 00024161  0x00005d71 store  0x00000001 , 0x000004d5 
+ 00024162  0x00005d72 call  0x00005ff9 
+ 00024163  0x00005d73 jam  0x0000000c , 0x0000007c 
+ 00024164  0x00005d74 fetch  0x00000001 , 0x000041bd 
+ 00024165  0x00005d75 nrtn  0x00000034 
+ 00024166  0x00005d76 fetch  0x00000001 , 0x00000030 
+ 00024167  0x00005d77 rtnbit1  0x00000006 
+ 00024168  0x00005d78 jam  0x00000006 , 0x0000007e 
+ 00024169  0x00005d79 branch  0x00005d53 
+ 00024170  0x00005d7c arg  0x00000040 , 0x00000011 
+ 00024171  0x00005d7d call  0x00007288 
+ 00024172  0x00005d7e fetch  0x00000004 , 0x00000552 
+ 00024173  0x00005d7f fetcht  0x00000004 , 0x00000592 
+ 00024174  0x00005d80 isub  0x00000002 , 0x0000003e 
+ 00024175  0x00005d81 branch  0x00005e73 , 0x00000005 
+ 00024176  0x00005d82 jam  0x00000007 , 0x0000007c 
+ 00024177  0x00005d83 jam  0x00000005 , 0x000004ca 
+ 00024178  0x00005d84 rtn 
+ 00024179  0x00005d86 call  0x00005e77 
+ 00024180  0x00005d87 fetch  0x00000001 , 0x0000465a 
+ 00024181  0x00005d88 branch  0x00005f3e , 0x00000034 
+ 00024182  0x00005d89 rtn 
+ 00024183  0x00005d8d call  0x00007386 
+ 00024184  0x00005d8e call  0x000021b2 
+ 00024185  0x00005d8f fetch  0x00000001 , 0x0000004b 
+ 00024186  0x00005d90 isolate1  0x00000001 , 0x0000003f 
+ 00024187  0x00005d91 set0  0x00000001 , 0x0000003f 
+ 00024188  0x00005d92 store  0x00000001 , 0x0000004b 
+ 00024189  0x00005d93 fetch  0x00000001 , 0x00000055 
+ 00024190  0x00005d94 beq  0x00000019 , 0x00005e81 
+ 00024191  0x00005d95 beq  0x00000018 , 0x00005e81 
+ 00024192  0x00005d96 rtn 
+ 00024193  0x00005d98 fetch  0x00000001 , 0x000009b5 
+ 00024194  0x00005d99 rtnne  0x00000000 
+ 00024195  0x00005d9a fetch  0x00000001 , 0x0000004c 
+ 00024196  0x00005d9b rtnbit1  0x00000002 
+ 00024197  0x00005d9c branch  0x000063b1 
+ 00024198  0x00005d9f arg  0x00000552 , 0x00000011 
+ 00024199  0x00005da0 arg  0x00000582 , 0x00000012 
+ 00024200  0x00005da1 arg  0x00000562 , 0x00000005 
+ 00024201  0x00005da2 call  0x00007352 
+ 00024202  0x00005da3 arg  0x00000040 , 0x00000011 
+ 00024203  0x00005da4 call  0x00006311 
+ 00024204  0x00005da5 jam  0x0000000b , 0x0000007c 
+ 00024205  0x00005da6 fetch  0x00000001 , 0x00000030 
+ 00024206  0x00005da7 bbit0  0x00000006 , 0x00005ffc 
+ 00024207  0x00005da8 rtn 
+ 00024208  0x00005dab fetch  0x00000002 , 0x0000015f 
+ 00024209  0x00005dac add  0x0000003f , 0xfffffffd , 0x00000039 
+ 00024210  0x00005dad fetcht  0x00000001 , 0x00000552 
+ 00024211  0x00005dae setarg  0x00000101 
+ 00024212  0x00005daf iadd  0x00000002 , 0x00000005 
+ 00024213  0x00005db0 arg  0x00000554 , 0x00000006 
+ 00024214  0x00005db1 call  0x00007f01 
+ 00024215  0x00005db2 fetcht  0x00000001 , 0x00000053 
+ 00024216  0x00005db3 fetch  0x00000001 , 0x00000553 
+ 00024217  0x00005db4 isub  0x00000002 , 0x0000003f 
+ 00024218  0x00005db5 sub  0x0000003f , 0x0000000e , 0x0000003e 
+ 00024219  0x00005db6 branch  0x00005ea0 , 0x00000002 
+ 00024220  0x00005db7 add  0x00000002 , 0x0000000e , 0x0000003f 
+ 00024221  0x00005db8 store  0x00000001 , 0x00000053 
+ 00024222  0x00005db9 jam  0x00000001 , 0x0000007c 
+ 00024223  0x00005dba rtn 
+ 00024224  0x00005dbc fetch  0x00000001 , 0x0000004c 
+ 00024225  0x00005dbd set1  0x00000003 , 0x0000003f 
+ 00024226  0x00005dbe store  0x00000001 , 0x0000004c 
+ 00024227  0x00005dbf bbit1  0x00000004 , 0x00006006 
+ 00024228  0x00005dc0 rtn 
+ 00024229  0x00005dc2 fetch  0x00000001 , 0x00000552 
+ 00024230  0x00005dc3 store  0x00000001 , 0x0000007d 
+ 00024231  0x00005dc4 jam  0x00000002 , 0x0000007c 
+ 00024232  0x00005dc5 rtn 
+ 00024233  0x00005dc8 branch  0x00005e38 
+ 00024234  0x00005dcb jam  0x00000030 , 0x0000007c 
+ 00024235  0x00005dcc rtn 
+ 00024236  0x00005dcf jam  0x00000028 , 0x0000007c 
+ 00024237  0x00005dd0 rtn 
+ 00024238  0x00005dd3 jam  0x00000026 , 0x0000007c 
+ 00024239  0x00005dd4 rtn 
+ 00024240  0x00005dd9 rtn 
+ 00024241  0x00005dde fetch  0x00000002 , 0x00000032 
+ 00024242  0x00005ddf iforce  0x00000002 
+ 00024243  0x00005de0 fetch  0x00000001 , 0x00000553 
+ 00024244  0x00005de1 store  0x00000001 , 0x00000095 
+ 00024245  0x00005de2 imul32  0x00000002 , 0x00000002 
+ 00024246  0x00005de3 fetch  0x00000002 , 0x00000554 
+ 00024247  0x00005de4 lshift  0x0000003f , 0x0000003f 
+ 00024248  0x00005de5 store  0x00000002 , 0x00000096 
+ 00024249  0x00005de6 fetch  0x00000004 , 0x00000556 
+ 00024250  0x00005de7 lshift  0x0000003f , 0x0000003f 
+ 00024251  0x00005de8 store  0x00000004 , 0x00000091 
+ 00024252  0x00005dea deposit  0x00000002 
+ 00024253  0x00005deb store  0x00000002 , 0x00000098 
+ 00024254  0x00005dec rtn 
+ 00024255  0x00005dee fetcht  0x00000001 , 0x0000415a 
+ 00024256  0x00005def fetch  0x00000001 , 0x00000553 
+ 00024257  0x00005df0 ixor  0x00000002 , 0x0000003e 
+ 00024258  0x00005df1 nbranch  0x00005d77 , 0x00000005 
+ 00024259  0x00005df2 isolate1  0x00000000 , 0x0000003f 
+ 00024260  0x00005df3 fetch  0x00000001 , 0x0000004c 
+ 00024261  0x00005df4 setflag  0x00000001 , 0x00000005 , 0x0000003f 
+ 00024262  0x00005df5 store  0x00000001 , 0x0000004c 
+ 00024263  0x00005df6 jam  0x00000081 , 0x0000007c 
+ 00024264  0x00005df7 jam  0x0000008b , 0x0000007d 
+ 00024265  0x00005df8 rtn 
+ 00024266  0x00005dff rtn 
+ 00024267  0x00005e02 branch  0x00005e38 
+ 00024268  0x00005e06 branch  0x00005e38 
+ 00024269  0x00005e0b fetch  0x00000002 , 0x00000552 
+ 00024270  0x00005e0c store  0x00000002 , 0x00000171 
+ 00024271  0x00005e0d rtn 
+ 00024272  0x00005e10 fetch  0x00000002 , 0x00000555 
+ 00024273  0x00005e11 fetcht  0x00000001 , 0x00004172 
+ 00024274  0x00005e12 imul32  0x00000002 , 0x0000003f 
+ 00024275  0x00005e13 arg  0x00000640 , 0x00000002 
+ 00024276  0x00005e14 isub  0x00000002 , 0x0000003e 
+ 00024277  0x00005e16 rtn 
+ 00024278  0x00005e19 fetch  0x00000002 , 0x00000557 
+ 00024279  0x00005e1a branch  0x00005ef0 , 0x00000034 
+ 00024280  0x00005e1b call  0x00005ed0 
+ 00024281  0x00005e1c branch  0x00005ef0 , 0x00000002 
+ 00024282  0x00005e1d fetch  0x00000001 , 0x00004092 
+ 00024283  0x00005e1e sub  0x0000003f , 0x0000000a , 0x0000003e 
+ 00024284  0x00005e1f call  0x00003cd5 , 0x00000005 
+ 00024285  0x00005e20 fetch  0x00000001 , 0x00000030 
+ 00024286  0x00005e21 bbit1  0x00000001 , 0x00005ef0 
+ 00024287  0x00005e22 fetch  0x00000002 , 0x00000553 
+ 00024288  0x00005e23 lshift  0x0000003f , 0x0000003f 
+ 00024289  0x00005e24 store  0x00000002 , 0x00000075 
+ 00024290  0x00005e25 fetch  0x00000002 , 0x00000555 
+ 00024291  0x00005e26 lshift  0x0000003f , 0x0000003f 
+ 00024292  0x00005e27 store  0x00000002 , 0x00000032 
+ 00024293  0x00005e28 fetch  0x00000002 , 0x00000557 
+ 00024294  0x00005e29 store  0x00000001 , 0x00000073 
+ 00024295  0x00005e2a iforce  0x00000002 
+ 00024296  0x00005e2b fetch  0x00000002 , 0x00000559 
+ 00024297  0x00005e2c store  0x00000001 , 0x00000074 
+ 00024298  0x00005e2d isub  0x00000002 , 0x0000003e 
+ 00024299  0x00005e2e nbranch  0x00005eed , 0x00000002 
+ 00024300  0x00005e2f store  0x00000001 , 0x00000073 
+ 00024301  0x00005e32 jam  0x00000003 , 0x0000007c 
+ 00024302  0x00005e33 jam  0x00000017 , 0x0000007d 
+ 00024303  0x00005e34 rtn 
+ 00024304  0x00005e37 jam  0x00000024 , 0x0000007e 
+ 00024305  0x00005e38 branch  0x00005d53 
+ 00024306  0x00005e3b call  0x00005e38 
+ 00024307  0x00005e3c call  0x00005ff9 
+ 00024308  0x00005e3d call  0x0000728b 
+ 00024309  0x00005e3e branch  0x000026b8 
+ 00024310  0x00005e41 call  0x00005e38 
+ 00024311  0x00005e42 branch  0x000026c0 
+ 00024312  0x00005e46 fetch  0x00000004 , 0x00000552 
+ 00024313  0x00005e47 lshift  0x0000003f , 0x0000003f 
+ 00024314  0x00005e49 branch  0x00005f04 , 0x00000029 
+ 00024315  0x00005e4a fetcht  0x00000001 , 0x000041bd 
+ 00024316  0x00005e4b nbranch  0x00005f01 , 0x00000034 
+ 00024317  0x00005e4d jam  0x00000004 , 0x0000007c 
+ 00024318  0x00005e4e jam  0x00000013 , 0x0000007d 
+ 00024319  0x00005e4f jam  0x00000024 , 0x0000007e 
+ 00024320  0x00005e50 rtn 
+ 00024321  0x00005e52 jam  0x00000034 , 0x0000007c 
+ 00024322  0x00005e53 jam  0x00000000 , 0x00000055 
+ 00024323  0x00005e54 branch  0x000021d9 
+ 00024324  0x00005e57 call  0x000021d9 
+ 00024325  0x00005e58 set1  0x00000022 , 0x00000000 
+ 00024326  0x00005e59 fetch  0x00000001 , 0x0000016d 
+ 00024327  0x00005e5a set0  0x00000002 , 0x0000003f 
+ 00024328  0x00005e5b store  0x00000001 , 0x0000016d 
+ 00024329  0x00005e5c branch  0x00005e38 
+ 00024330  0x00005e65 rtn 
+ 00024331  0x00005e69 jam  0x00000003 , 0x0000007c 
+ 00024332  0x00005e6a jam  0x00000018 , 0x0000007d 
+ 00024333  0x00005e6b jam  0x0000002e , 0x00000a99 
+ 00024334  0x00005e6c call  0x00007d86 
+ 00024335  0x00005e6d branch  0x000026e9 
+ 00024336  0x00005e70 fetch  0x00000001 , 0x00000552 
+ 00024337  0x00005e71 bne  0x00000001 , 0x00005f1c 
+ 00024338  0x00005e72 fetch  0x00000001 , 0x00000553 
+ 00024339  0x00005e73 bne  0x00000001 , 0x00005f1c 
+ 00024340  0x00005e74 fetch  0x00000001 , 0x00000554 
+ 00024341  0x00005e75 bne  0x00000030 , 0x00005f1c 
+ 00024342  0x00005e76 call  0x000062fc 
+ 00024343  0x00005e77 branch  0x00005f19 , 0x00000001 
+ 00024344  0x00005e78 jam  0x00000001 , 0x000009ae 
+ 00024345  0x00005e7a jam  0x00000003 , 0x0000007c 
+ 00024346  0x00005e7b jam  0x0000003d , 0x0000007d 
+ 00024347  0x00005e7c branch  0x00005d07 
+ 00024348  0x00005e7f jam  0x00000024 , 0x0000007e 
+ 00024349  0x00005e80 branch  0x00005d53 
+ 00024350  0x00005e85 jam  0x0000003e , 0x0000007c 
+ 00024351  0x00005e87 rtn 
+ 00024352  0x00005e89 fetch  0x00000001 , 0x00004662 
+ 00024353  0x00005e8a beq  0x00000001 , 0x00005f27 
+ 00024354  0x00005e8b beq  0x00000002 , 0x00005f2b 
+ 00024355  0x00005e8d call  0x000062fc 
+ 00024356  0x00005e8e rtn  0x00000001 
+ 00024357  0x00005e8f jam  0x00000008 , 0x000009ae 
+ 00024358  0x00005e90 rtn 
+ 00024359  0x00005e93 call  0x00007962 
+ 00024360  0x00005e94 jam  0x00000035 , 0x00000a99 
+ 00024361  0x00005e95 call  0x00007d86 
+ 00024362  0x00005e96 branch  0x00005f23 
+ 00024363  0x00005e9a call  0x000062fc 
+ 00024364  0x00005e9b rtn  0x00000001 
+ 00024365  0x00005e9c fetch  0x00000001 , 0x00004663 
+ 00024366  0x00005e9d beq  0x00000013 , 0x00005f3b 
+ 00024367  0x00005e9e increase  0x00000001 , 0x0000003f 
+ 00024368  0x00005e9f store  0x00000001 , 0x00004663 
+ 00024369  0x00005ea3 jam  0x00000001 , 0x000009b0 
+ 00024370  0x00005ea4 jam  0x00000004 , 0x000009ae 
+ 00024371  0x00005ea5 fetch  0x00000001 , 0x00004663 
+ 00024372  0x00005ea6 copy  0x0000003f , 0x00000007 
+ 00024373  0x00005ea7 fetch  0x00000006 , 0x0000468a 
+ 00024374  0x00005ea8 qisolate1  0x0000003f 
+ 00024375  0x00005ea9 setarg  0x00000080 
+ 00024376  0x00005eaa setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00024377  0x00005eab store  0x00000001 , 0x00004664 
+ 00024378  0x00005eac rtn 
+ 00024379  0x00005eaf jam  0x00000008 , 0x000009ae 
+ 00024380  0x00005eb0 rtn 
+ 00024381  0x00005eb3 call  0x00005f43 
+ 00024382  0x00005eb5 fetch  0x00000001 , 0x00004665 
+ 00024383  0x00005eb6 rtn  0x00000034 
+ 00024384  0x00005eb7 jam  0x00000000 , 0x00004665 
+ 00024385  0x00005eb8 jam  0x00000038 , 0x00000a99 
+ 00024386  0x00005eb9 branch  0x00007d86 
+ 00024387  0x00005ebe call  0x000062fc 
+ 00024388  0x00005ebf ncall  0x00007965 , 0x00000001 
+ 00024389  0x00005ec0 call  0x00007975 , 0x00000001 
+ 00024390  0x00005ec1 call  0x000062fc 
+ 00024391  0x00005ec2 rtn  0x00000001 
+ 00024392  0x00005ec3 jam  0x0000000c , 0x000009ae 
+ 00024393  0x00005ec4 jam  0x00000001 , 0x000009b0 
+ 00024394  0x00005ec5 rtn 
+ 00024395  0x00005ec8 arg  0x00000a6e , 0x00000005 
+ 00024396  0x00005ec9 arg  0x00000552 , 0x00000006 
+ 00024397  0x00005eca call  0x00007ebf 
+ 00024398  0x00005ecb fetch  0x00000001 , 0x00004662 
+ 00024399  0x00005ecc rtneq  0x00000002 
+ 00024400  0x00005ecd branch  0x000076d8 
+ 00024401  0x00005ed0 fetch  0x00000001 , 0x000009af 
+ 00024402  0x00005ed1 beq  0x00000007 , 0x00005f55 
+ 00024403  0x00005ed2 fetch  0x00000001 , 0x000009ae 
+ 00024404  0x00005ed3 bne  0x00000001 , 0x00005f68 
+ 00024405  0x00005ed5 fetch  0x00000001 , 0x000009b7 
+ 00024406  0x00005ed6 sub  0x0000003f , 0x00000020 , 0x00000005 
+ 00024407  0x00005ed7 nbranch  0x00005f68 , 0x00000002 
+ 00024408  0x00005ed8 arg  0x000009c6 , 0x00000005 
+ 00024409  0x00005ed9 iadd  0x00000005 , 0x00000005 
+ 00024410  0x00005eda fetch  0x00000008 , 0x00000552 
+ 00024411  0x00005edb istore  0x00000008 , 0x00000005 
+ 00024412  0x00005edc fetch  0x00000008 , 0x0000055a 
+ 00024413  0x00005edd istore  0x00000008 , 0x00000005 
+ 00024414  0x00005ede fetch  0x00000001 , 0x000009b7 
+ 00024415  0x00005edf increase  0x00000010 , 0x0000003f 
+ 00024416  0x00005ee0 store  0x00000001 , 0x000009b7 
+ 00024417  0x00005ee1 bne  0x00000030 , 0x00005e38 
+ 00024418  0x00005ee3 call  0x000062fc 
+ 00024419  0x00005ee4 branch  0x00005e38 , 0x00000001 
+ 00024420  0x00005ee5 jam  0x00000001 , 0x000009b8 
+ 00024421  0x00005ee6 jam  0x00000002 , 0x000009ae 
+ 00024422  0x00005ee7 jam  0x00000001 , 0x000009b0 
+ 00024423  0x00005ee8 branch  0x00005e38 
+ 00024424  0x00005eea jam  0x00000024 , 0x0000007e 
+ 00024425  0x00005eeb branch  0x00005d53 
+ 00024426  0x00005eed fetch  0x00000001 , 0x000009b6 
+ 00024427  0x00005eee beq  0x00000030 , 0x00005f6e 
+ 00024428  0x00005eef jam  0x0000003e , 0x0000007c 
+ 00024429  0x00005ef0 branch  0x00005d07 
+ 00024430  0x00005ef3 call  0x000062fc 
+ 00024431  0x00005ef4 branch  0x00005f77 , 0x00000001 
+ 00024432  0x00005ef5 fetch  0x00000001 , 0x00004662 
+ 00024433  0x00005ef6 beq  0x00000002 , 0x00005f75 
+ 00024434  0x00005ef7 jam  0x00000001 , 0x000009b0 
+ 00024435  0x00005ef8 jam  0x00000004 , 0x000009ae 
+ 00024436  0x00005ef9 branch  0x00005d07 
+ 00024437  0x00005efc jam  0x00000036 , 0x00000a99 
+ 00024438  0x00005efd branch  0x00007d86 
+ 00024439  0x00005f02 branch  0x00005d07 
+ 00024440  0x00005f05 fetch  0x00000001 , 0x000009af 
+ 00024441  0x00005f06 beq  0x00000007 , 0x00005f7c 
+ 00024442  0x00005f07 fetch  0x00000001 , 0x000009ae 
+ 00024443  0x00005f08 bne  0x00000006 , 0x00005f88 
+ 00024444  0x00005f0a arg  0x00000a2e , 0x00000005 
+ 00024445  0x00005f0b fetch  0x00000008 , 0x00000552 
+ 00024446  0x00005f0c istore  0x00000008 , 0x00000005 
+ 00024447  0x00005f0d fetch  0x00000008 , 0x0000055a 
+ 00024448  0x00005f0e istore  0x00000008 , 0x00000005 
+ 00024449  0x00005f0f call  0x000062fc 
+ 00024450  0x00005f10 branch  0x00005f86 , 0x00000001 
+ 00024451  0x00005f11 jam  0x00000007 , 0x000009ae 
+ 00024452  0x00005f12 jam  0x00000001 , 0x000009b0 
+ 00024453  0x00005f13 branch  0x00005e38 
+ 00024454  0x00005f15 jam  0x00000004 , 0x000009af 
+ 00024455  0x00005f16 branch  0x000076d8 
+ 00024456  0x00005f1a jam  0x00000024 , 0x0000007e 
+ 00024457  0x00005f1b branch  0x00005d53 
+ 00024458  0x00005f1e fetch  0x00000001 , 0x000009af 
+ 00024459  0x00005f1f beq  0x0000000b , 0x00005f8e 
+ 00024460  0x00005f20 fetch  0x00000001 , 0x000009ae 
+ 00024461  0x00005f21 bne  0x00000008 , 0x00005f9d 
+ 00024462  0x00005f23 arg  0x00000a5e , 0x00000005 
+ 00024463  0x00005f24 arg  0x00000552 , 0x00000006 
+ 00024464  0x00005f25 call  0x00007ebf 
+ 00024465  0x00005f26 call  0x000062fc 
+ 00024466  0x00005f27 branch  0x00005f9a , 0x00000001 
+ 00024467  0x00005f28 fetch  0x00000001 , 0x00004662 
+ 00024468  0x00005f29 beq  0x00000001 , 0x00005f9f 
+ 00024469  0x00005f2b jam  0x00000000 , 0x00004661 
+ 00024470  0x00005f2c jam  0x00000009 , 0x000009ae 
+ 00024471  0x00005f2d jam  0x00000001 , 0x000009b0 
+ 00024472  0x00005f2e jam  0x00000041 , 0x0000007d 
+ 00024473  0x00005f2f branch  0x00005d07 
+ 00024474  0x00005f32 jam  0x00000009 , 0x000009af 
+ 00024475  0x00005f33 jam  0x00000001 , 0x000009b1 
+ 00024476  0x00005f34 branch  0x00005d07 
+ 00024477  0x00005f36 jam  0x00000024 , 0x0000007e 
+ 00024478  0x00005f37 branch  0x00005d53 
+ 00024479  0x00005f3a fetch  0x00000001 , 0x00004661 
+ 00024480  0x00005f3b bbit1  0x00000007 , 0x00005fa4 
+ 00024481  0x00005f3c set1  0x00000006 , 0x0000003f 
+ 00024482  0x00005f3d store  0x00000001 , 0x00004661 
+ 00024483  0x00005f3e rtn 
+ 00024484  0x00005f41 bbit1  0x00000000 , 0x00005f95 
+ 00024485  0x00005f42 jam  0x00000000 , 0x00004661 
+ 00024486  0x00005f43 branch  0x00005f9d 
+ 00024487  0x00005f47 branch  0x00005d07 
+ 00024488  0x00005f4a fetch  0x00000001 , 0x0000016d 
+ 00024489  0x00005f4b set0  0x00000001 
+ 00024490  0x00005f4c store  0x00000001 , 0x0000016d 
+ 00024491  0x00005f4d call  0x00005e38 
+ 00024492  0x00005f4e nrtn  0x00000029 
+ 00024493  0x00005f4f fetch  0x00000001 , 0x00000552 
+ 00024494  0x00005f50 fetcht  0x00000001 , 0x0000004b 
+ 00024495  0x00005f51 setflag  0x00000034 , 0x00000004 , 0x00000002 
+ 00024496  0x00005f52 nsetflag  0x00000034 , 0x00000005 , 0x00000002 
+ 00024497  0x00005f53 storet  0x00000001 , 0x0000004b 
+ 00024498  0x00005f54 rtn 
+ 00024499  0x00005f57 fetcht  0x00000008 , 0x00000552 
+ 00024500  0x00005f59 fetch  0x00000001 , 0x00000055 
+ 00024501  0x00005f5a rtnne  0x00000003 
+ 00024502  0x00005f5c fetch  0x00000001 , 0x0000016d 
+ 00024503  0x00005f5d bbit0  0x00000004 , 0x00005fba 
+ 00024504  0x00005f5f jam  0x00000014 , 0x00000055 
+ 00024505  0x00005f60 rtn 
+ 00024506  0x00005f62 jam  0x00000004 , 0x00000055 
+ 00024507  0x00005f63 rtn 
+ 00024508  0x00005f65 fetch  0x00000001 , 0x0000017f 
+ 00024509  0x00005f66 store  0x00000001 , 0x0000015b 
+ 00024510  0x00005f67 jam  0x00000003 , 0x0000007c 
+ 00024511  0x00005f68 jam  0x00000038 , 0x0000007d 
+ 00024512  0x00005f69 rtn 
+ 00024513  0x00005f6d jam  0x00000003 , 0x0000007c 
+ 00024514  0x00005f6e jam  0x00000039 , 0x0000007d 
+ 00024515  0x00005f6f force  0x00000009 , 0x00000039 
+ 00024516  0x00005f70 arg  0x00000552 , 0x00000006 
+ 00024517  0x00005f71 arg  0x00000152 , 0x00000005 
+ 00024518  0x00005f73 ifetch  0x00000001 , 0x00000006 
+ 00024519  0x00005f74 xor_into  0x00000055 , 0x0000003f 
+ 00024520  0x00005f75 istore  0x00000001 , 0x00000005 
+ 00024521  0x00005f76 loop  0x00005fc6 
+ 00024522  0x00005f77 fetch  0x00000001 , 0x00000152 
+ 00024523  0x00005f78 fetcht  0x00000001 , 0x00000151 
+ 00024524  0x00005f79 set0  0x00000007 , 0x00000002 
+ 00024525  0x00005f7a set0  0x00000004 , 0x00000002 
+ 00024526  0x00005f7b beq  0x000000ff , 0x00005fda 
+ 00024527  0x00005f7c beq  0x00000000 , 0x00005ff3 
+ 00024528  0x00005f7d beq  0x00000005 , 0x00005fe7 
+ 00024529  0x00005f7e beq  0x00000007 , 0x00005fe6 
+ 00024530  0x00005f7f beq  0x00000006 , 0x00005fe7 
+ 00024531  0x00005f80 beq  0x00000008 , 0x00005fe6 
+ 00024532  0x00005f81 beq  0x00000001 , 0x00005fdf 
+ 00024533  0x00005f82 beq  0x00000002 , 0x00005fdf 
+ 00024534  0x00005f83 beq  0x00000003 , 0x00005fdf 
+ 00024535  0x00005f84 beq  0x00000009 , 0x00005fdf 
+ 00024536  0x00005f85 beq  0x00000004 , 0x00005fdf 
+ 00024537  0x00005f86 rtn 
+ 00024538  0x00005f89 fetch  0x00000001 , 0x00000151 
+ 00024539  0x00005f8a set1  0x00000003 , 0x0000003f 
+ 00024540  0x00005f8b set1  0x00000002 , 0x0000003f 
+ 00024541  0x00005f8c store  0x00000001 , 0x00000151 
+ 00024542  0x00005f8d rtn 
+ 00024543  0x00005f8f set1  0x00000004 , 0x00000002 
+ 00024544  0x00005f90 jam  0x00000005 , 0x00000180 
+ 00024545  0x00005f91 fetch  0x00000002 , 0x00000159 
+ 00024546  0x00005f92 iforce  0x00000039 
+ 00024547  0x00005f93 store  0x00000002 , 0x0000015f 
+ 00024548  0x00005f94 arg  0x00000551 , 0x00000005 
+ 00024549  0x00005f95 call  0x00007f73 
+ 00024550  0x00005f97 set1  0x00000007 , 0x00000002 
+ 00024551  0x00005f99 set1  0x00000002 , 0x00000002 
+ 00024552  0x00005f9a force  0x00000000 , 0x0000003f 
+ 00024553  0x00005f9b store  0x00000001 , 0x0000000b 
+ 00024554  0x00005f9c store  0x00000002 , 0x000000fa 
+ 00024555  0x00005f9d store  0x00000002 , 0x000000fc 
+ 00024556  0x00005f9e store  0x00000002 , 0x000000f8 
+ 00024557  0x00005f9f store  0x00000002 , 0x000000f6 
+ 00024558  0x00005fa0 fetch  0x00000001 , 0x00000153 
+ 00024559  0x00005fa1 compare  0x00000000 , 0x0000003f , 0x000000ff 
+ 00024560  0x00005fa2 setflag  0x00000001 , 0x00000006 , 0x00000002 
+ 00024561  0x00005fa3 storet  0x00000001 , 0x00000151 
+ 00024562  0x00005fa4 rtn 
+ 00024563  0x00005fa7 set0  0x00000011 , 0x00000000 
+ 00024564  0x00005fa8 jam  0x00000000 , 0x00000151 
+ 00024565  0x00005fa9 fetch  0x00000001 , 0x0000017f 
+ 00024566  0x00005faa set0  0x00000006 , 0x0000003f 
+ 00024567  0x00005fab store  0x00000001 , 0x0000017f 
+ 00024568  0x00005fac rtn 
+ 00024569  0x00005fb3 arg  0x00000552 , 0x00000006 
+ 00024570  0x00005fb4 arg  0x00000562 , 0x00000005 
+ 00024571  0x00005fb5 branch  0x00007ebf 
+ 00024572  0x00005fb8 jam  0x00000009 , 0x0000007c 
+ 00024573  0x00005fb9 rtn 
+ 00024574  0x00005fbc nrtn  0x00000029 
+ 00024575  0x00005fbd jam  0x00000011 , 0x0000007c 
+ 00024576  0x00005fbe rtn 
+ 00024577  0x00005fc1 arg  0x000040a0 , 0x00000011 
+ 00024578  0x00005fc2 call  0x00007255 
+ 00024579  0x00005fc3 jam  0x00000003 , 0x0000007c 
+ 00024580  0x00005fc4 jam  0x00000008 , 0x0000007d 
+ 00024581  0x00005fc5 rtn 
+ 00024582  0x00005fc8 jam  0x0000000a , 0x00000072 
+ 00024583  0x00005fc9 jam  0x00000007 , 0x0000007c 
+ 00024584  0x00005fca jam  0x00000016 , 0x000004ca 
+ 00024585  0x00005fcb rtn 
+ 00024586  0x00005fd2 bpatchx  0x00000082 , 0x00004030 
+ 00024587  0x00005fd3 disable  0x00000028 
+ 00024588  0x00005fd4 call  0x000062c1 
+ 00024589  0x00005fd5 fetch  0x00000001 , 0x00000048 
+ 00024590  0x00005fd6 rtn  0x00000034 
+ 00024591  0x00005fdb bbit1  0x00000007 , 0x0000603f 
+ 00024592  0x00005fdd beq  0x00000001 , 0x0000616f 
+ 00024593  0x00005fde beq  0x00000002 , 0x000060e4 
+ 00024594  0x00005fdf beq  0x00000003 , 0x0000604a 
+ 00024595  0x00005fe0 beq  0x00000004 , 0x00006060 
+ 00024596  0x00005fe1 beq  0x00000027 , 0x000061db 
+ 00024597  0x00005fe2 beq  0x00000028 , 0x00006108 
+ 00024598  0x00005fe3 beq  0x00000030 , 0x000060f4 
+ 00024599  0x00005fe4 beq  0x00000025 , 0x000061d6 
+ 00024600  0x00005fe5 beq  0x00000026 , 0x00006103 
+ 00024601  0x00005fe6 beq  0x00000031 , 0x000061c3 
+ 00024602  0x00005fe7 beq  0x00000037 , 0x0000616a 
+ 00024603  0x00005fe8 beq  0x00000033 , 0x0000615c 
+ 00024604  0x00005fe9 beq  0x00000008 , 0x00006259 
+ 00024605  0x00005fea beq  0x00000009 , 0x0000624f 
+ 00024606  0x00005feb beq  0x0000000b , 0x00006264 
+ 00024607  0x00005fec beq  0x0000000c , 0x0000626d 
+ 00024608  0x00005fed beq  0x0000000f , 0x00006162 
+ 00024609  0x00005fee beq  0x00000010 , 0x00006292 
+ 00024610  0x00005fef beq  0x00000011 , 0x00006288 
+ 00024611  0x00005ff0 beq  0x00000007 , 0x00006152 
+ 00024612  0x00005ff1 beq  0x0000002a , 0x0000617e 
+ 00024613  0x00005ff2 beq  0x0000000a , 0x0000617f 
+ 00024614  0x00005ff4 beq  0x0000001f , 0x000061bc 
+ 00024615  0x00005ff5 beq  0x00000006 , 0x000060f9 
+ 00024616  0x00005ff6 beq  0x00000021 , 0x0000615f 
+ 00024617  0x00005ff7 beq  0x0000002d , 0x000061b2 
+ 00024618  0x00005ff8 beq  0x0000002e , 0x000061b7 
+ 00024619  0x00005ff9 beq  0x00000022 , 0x0000615f 
+ 00024620  0x00005ffa beq  0x00000034 , 0x00006180 
+ 00024621  0x00005ffb beq  0x00000013 , 0x00006195 
+ 00024622  0x00005ffc beq  0x00000017 , 0x000061a4 
+ 00024623  0x00005ffd beq  0x00000012 , 0x0000628f 
+ 00024624  0x00005ffe beq  0x0000002f , 0x000061aa 
+ 00024625  0x00005fff beq  0x00000018 , 0x000061af 
+ 00024626  0x00006000 beq  0x0000003d , 0x000061ff 
+ 00024627  0x00006001 beq  0x0000003e , 0x0000620b 
+ 00024628  0x00006002 beq  0x0000003f , 0x0000621d 
+ 00024629  0x00006003 beq  0x00000040 , 0x00006227 
+ 00024630  0x00006004 beq  0x00000041 , 0x0000623c 
+ 00024631  0x00006005 beq  0x00000023 , 0x0000624b 
+ 00024632  0x00006006 beq  0x0000003b , 0x00006246 
+ 00024633  0x00006008 beq  0x00000005 , 0x0000624c 
+ 00024634  0x00006009 beq  0x00000029 , 0x0000624d 
+ 00024635  0x0000600a beq  0x00000038 , 0x0000624e 
+ 00024636  0x0000600b beq  0x00000039 , 0x00006175 
+ 00024637  0x0000600d branch  0x00002a8c 
+ 00024638  0x0000600e rtn 
+ 00024639  0x00006010 beq  0x00000081 , 0x0000606d 
+ 00024640  0x00006011 beq  0x00000084 , 0x00006099 
+ 00024641  0x00006012 beq  0x00000082 , 0x00006076 
+ 00024642  0x00006013 beq  0x00000083 , 0x0000610d 
+ 00024643  0x00006014 beq  0x0000008b , 0x00006118 
+ 00024644  0x00006015 beq  0x00000097 , 0x0000614e 
+ 00024645  0x00006016 beq  0x00000099 , 0x000060d5 
+ 00024646  0x00006017 beq  0x0000009a , 0x000060a4 
+ 00024647  0x00006018 beq  0x00000095 , 0x000060da 
+ 00024648  0x00006019 beq  0x00000096 , 0x000060db 
+ 00024649  0x0000601a branch  0x00002a8c 
+ 00024650  0x00006021 force  0x00000002 , 0x0000003f 
+ 00024651  0x00006022 call  0x00006298 
+ 00024652  0x00006023 fetch  0x00000001 , 0x00000049 
+ 00024653  0x00006024 istore  0x00000001 , 0x00000005 
+ 00024654  0x00006025 call  0x000062a7 
+ 00024655  0x00006026 bpatchx  0x00000083 , 0x00004030 
+ 00024656  0x00006027 fetch  0x00000001 , 0x00000049 
+ 00024657  0x00006028 beq  0x00000008 , 0x00006080 
+ 00024658  0x00006029 beq  0x0000000f , 0x00006084 
+ 00024659  0x0000602a beq  0x00000010 , 0x0000608f 
+ 00024660  0x0000602b beq  0x00000017 , 0x0000605f 
+ 00024661  0x0000602c beq  0x00000033 , 0x00006092 
+ 00024662  0x0000602d beq  0x00000041 , 0x00006098 
+ 00024663  0x0000602e beq  0x00000011 , 0x00006059 
+ 00024664  0x0000602f rtn 
+ 00024665  0x00006032 fetch  0x00000001 , 0x00000055 
+ 00024666  0x00006033 rtn  0x00000034 
+ 00024667  0x00006034 jam  0x0000001b , 0x00000055 
+ 00024668  0x00006035 setarg  0x0000000c 
+ 00024669  0x00006036 arg  0x00000007 , 0x00000007 
+ 00024670  0x00006037 branch  0x00007f08 
+ 00024671  0x0000603a branch  0x000026c6 
+ 00024672  0x0000603c force  0x00000003 , 0x0000003f 
+ 00024673  0x0000603d call  0x00006298 
+ 00024674  0x0000603e fetch  0x00000001 , 0x00000049 
+ 00024675  0x0000603f beq  0x0000000b , 0x00006068 
+ 00024676  0x00006040 istore  0x00000001 , 0x00000005 
+ 00024677  0x00006041 fetch  0x00000001 , 0x0000004a 
+ 00024678  0x00006042 istore  0x00000001 , 0x00000005 
+ 00024679  0x00006043 branch  0x000062a7 
+ 00024680  0x00006046 istore  0x00000001 , 0x00000005 
+ 00024681  0x00006047 fetch  0x00000001 , 0x0000004a 
+ 00024682  0x00006048 istore  0x00000001 , 0x00000005 
+ 00024683  0x00006049 arg  0x000004d5 , 0x00000002 
+ 00024684  0x0000604a branch  0x000062e2 
+ 00024685  0x0000604d force  0x00000004 , 0x00000007 
+ 00024686  0x0000604e call  0x000062a0 
+ 00024687  0x0000604f setarg  0x0000007f 
+ 00024688  0x00006050 istore  0x00000001 , 0x00000005 
+ 00024689  0x00006051 fetch  0x00000001 , 0x00000049 
+ 00024690  0x00006052 set0  0x00000007 , 0x0000003f 
+ 00024691  0x00006053 istore  0x00000001 , 0x00000005 
+ 00024692  0x00006054 fetch  0x00000001 , 0x00000049 
+ 00024693  0x00006055 branch  0x000062a7 
+ 00024694  0x00006058 force  0x00000005 , 0x00000007 
+ 00024695  0x00006059 call  0x000062a0 
+ 00024696  0x0000605a setarg  0x0000007f 
+ 00024697  0x0000605b istore  0x00000001 , 0x00000005 
+ 00024698  0x0000605c fetch  0x00000001 , 0x00000049 
+ 00024699  0x0000605d set0  0x00000007 , 0x0000003f 
+ 00024700  0x0000605e istore  0x00000001 , 0x00000005 
+ 00024701  0x0000605f fetch  0x00000001 , 0x0000004a 
+ 00024702  0x00006060 istore  0x00000001 , 0x00000005 
+ 00024703  0x00006061 branch  0x000062a7 
+ 00024704  0x00006065 call  0x0000244f 
+ 00024705  0x00006066 call  0x000062f3 
+ 00024706  0x00006067 rtn  0x00000001 
+ 00024707  0x00006068 branch  0x00005ffc 
+ 00024708  0x0000606b fetch  0x00000001 , 0x0000004b 
+ 00024709  0x0000606c bbit1  0x00000005 , 0x0000608b 
+ 00024710  0x0000606d rtnbit0  0x00000004 
+ 00024711  0x0000606e jam  0x00000012 , 0x0000007c 
+ 00024712  0x0000606f set0  0x00000004 , 0x0000003f 
+ 00024713  0x00006070 call  0x000062eb 
+ 00024714  0x00006071 branch  0x0000608d 
+ 00024715  0x00006073 jam  0x00000010 , 0x0000007c 
+ 00024716  0x00006074 set0  0x00000005 , 0x0000003f 
+ 00024717  0x00006076 store  0x00000001 , 0x0000004b 
+ 00024718  0x00006077 rtn 
+ 00024719  0x0000607a call  0x000062fc 
+ 00024720  0x0000607b branch  0x00005ffe , 0x00000001 
+ 00024721  0x0000607c rtn 
+ 00024722  0x0000607f jam  0x0000008b , 0x0000007c 
+ 00024723  0x00006081 fetch  0x00000001 , 0x000004d1 
+ 00024724  0x00006082 set1  0x00000000 , 0x0000003f 
+ 00024725  0x00006083 store  0x00000001 , 0x000004d1 
+ 00024726  0x00006084 jam  0x00000001 , 0x00000a99 
+ 00024727  0x00006085 branch  0x00007d86 
+ 00024728  0x00006089 rtn 
+ 00024729  0x0000608e force  0x0000000c , 0x00000007 
+ 00024730  0x0000608f call  0x000062a0 
+ 00024731  0x00006090 setarg  0x00000001 
+ 00024732  0x00006091 istore  0x00000001 , 0x00000005 
+ 00024733  0x00006092 fetch  0x00000002 , 0x000004ce 
+ 00024734  0x00006093 istore  0x00000002 , 0x00000005 
+ 00024735  0x00006094 setarg  0x00000000 
+ 00024736  0x00006095 istore  0x00000003 , 0x00000005 
+ 00024737  0x00006096 setarg  0x00000000 
+ 00024738  0x00006097 istore  0x00000004 , 0x00000005 
+ 00024739  0x00006098 branch  0x000062b0 
+ 00024740  0x0000609a force  0x00000005 , 0x00000007 
+ 00024741  0x0000609b call  0x000062a0 
+ 00024742  0x0000609c fetch  0x00000003 , 0x0000465b 
+ 00024743  0x0000609d istore  0x00000003 , 0x00000005 
+ 00024744  0x0000609e call  0x000062b0 
+ 00024745  0x0000609f jam  0x00000001 , 0x00004665 
+ 00024746  0x000060a0 fetch  0x00000001 , 0x0000465b 
+ 00024747  0x000060a1 beq  0x00000001 , 0x000060b5 
+ 00024748  0x000060a2 beq  0x00000002 , 0x000060af 
+ 00024749  0x000060a3 beq  0x00000003 , 0x000060bb 
+ 00024750  0x000060a4 rtn 
+ 00024751  0x000060a7 fetch  0x00000001 , 0x0000465e 
+ 00024752  0x000060a8 beq  0x00000000 , 0x000060c7 
+ 00024753  0x000060a9 beq  0x00000001 , 0x000060c7 
+ 00024754  0x000060aa beq  0x00000002 , 0x000060c7 
+ 00024755  0x000060ab beq  0x00000003 , 0x000060c1 
+ 00024756  0x000060ac rtn 
+ 00024757  0x000060b0 fetch  0x00000001 , 0x0000465e 
+ 00024758  0x000060b1 beq  0x00000000 , 0x000060c1 
+ 00024759  0x000060b2 beq  0x00000001 , 0x000060c5 
+ 00024760  0x000060b3 beq  0x00000002 , 0x000060c7 
+ 00024761  0x000060b4 beq  0x00000003 , 0x000060c1 
+ 00024762  0x000060b5 rtn 
+ 00024763  0x000060b9 fetch  0x00000001 , 0x0000465e 
+ 00024764  0x000060ba beq  0x00000000 , 0x000060c1 
+ 00024765  0x000060bb beq  0x00000001 , 0x000060c1 
+ 00024766  0x000060bc beq  0x00000002 , 0x000060c1 
+ 00024767  0x000060bd beq  0x00000003 , 0x000060c1 
+ 00024768  0x000060be rtn 
+ 00024769  0x000060c8 jam  0x00000003 , 0x00004662 
+ 00024770  0x000060c9 fetch  0x00000001 , 0x0000455c 
+ 00024771  0x000060ca bbit1  0x00000000 , 0x000033e9 
+ 00024772  0x000060cb rtn 
+ 00024773  0x000060cf jam  0x00000001 , 0x00004662 
+ 00024774  0x000060d0 rtn 
+ 00024775  0x000060d7 jam  0x00000002 , 0x00004662 
+ 00024776  0x000060d8 rtn 
+ 00024777  0x000060dc arg  0x00000000 , 0x00000007 
+ 00024778  0x000060dd branch  0x000060cd 
+ 00024779  0x000060e0 arg  0x00000000 , 0x00000007 
+ 00024780  0x000060e1 branch  0x000060d1 
+ 00024781  0x000060e4 fetch  0x00000001 , 0x0000455c 
+ 00024782  0x000060e5 qset1  0x0000003f 
+ 00024783  0x000060e6 store  0x00000001 , 0x0000455c 
+ 00024784  0x000060e7 rtn 
+ 00024785  0x000060ea fetch  0x00000001 , 0x0000455c 
+ 00024786  0x000060eb qset0  0x0000003f 
+ 00024787  0x000060ec store  0x00000001 , 0x0000455c 
+ 00024788  0x000060ed rtn 
+ 00024789  0x000060f1 force  0x00000005 , 0x00000007 
+ 00024790  0x000060f2 call  0x000062a0 
+ 00024791  0x000060f3 fetch  0x00000003 , 0x0000465b 
+ 00024792  0x000060f4 istore  0x00000003 , 0x00000005 
+ 00024793  0x000060f5 branch  0x000062b2 
+ 00024794  0x000060fa rtn 
+ 00024795  0x000060fc force  0x00000009 , 0x00000007 
+ 00024796  0x000060fd call  0x000062a0 
+ 00024797  0x000060fe fetch  0x00000001 , 0x00000095 
+ 00024798  0x000060ff istore  0x00000001 , 0x00000005 
+ 00024799  0x00006100 fetch  0x00000002 , 0x00000096 
+ 00024800  0x00006101 istore  0x00000002 , 0x00000005 
+ 00024801  0x00006102 fetch  0x00000004 , 0x00000091 
+ 00024802  0x00006103 istore  0x00000004 , 0x00000005 
+ 00024803  0x00006104 branch  0x000062b0 
+ 00024804  0x00006107 force  0x00000011 , 0x0000003f 
+ 00024805  0x00006108 call  0x00006298 
+ 00024806  0x00006109 fetch  0x00000001 , 0x00000049 
+ 00024807  0x0000610a copy  0x0000003f , 0x00000002 
+ 00024808  0x0000610b beq  0x00000000 , 0x000060ec 
+ 00024809  0x0000610c beq  0x0000000e , 0x000060ec 
+ 00024810  0x0000610d beq  0x0000001c , 0x000060ec 
+ 00024811  0x0000610e rtn 
+ 00024812  0x00006110 istore  0x00000001 , 0x00000005 
+ 00024813  0x00006111 fetch  0x00000001 , 0x00004515 
+ 00024814  0x00006112 istore  0x00000001 , 0x00000005 
+ 00024815  0x00006113 arg  0x0000000e , 0x00000039 
+ 00024816  0x00006114 setarg  0x00004516 
+ 00024817  0x00006115 iadd  0x00000002 , 0x00000006 
+ 00024818  0x00006116 call  0x00007f01 
+ 00024819  0x00006117 branch  0x000062b0 
+ 00024820  0x0000611b force  0x00000003 , 0x0000003f 
+ 00024821  0x0000611c call  0x00006298 
+ 00024822  0x0000611d setarg  0x00000114 
+ 00024823  0x0000611e istore  0x00000002 , 0x00000005 
+ 00024824  0x0000611f branch  0x000062b0 
+ 00024825  0x00006123 force  0x00000003 , 0x0000003f 
+ 00024826  0x00006124 call  0x00006298 
+ 00024827  0x00006125 fetch  0x00000004 , 0x00000165 
+ 00024828  0x00006126 isub  0x00000022 , 0x0000003f 
+ 00024829  0x00006127 branch  0x000060ff , 0x00000029 
+ 00024830  0x00006128 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00024831  0x0000612b rshift2  0x0000003f , 0x0000003f 
+ 00024832  0x0000612c set0  0x0000000f , 0x0000003f 
+ 00024833  0x0000612d istore  0x00000002 , 0x00000005 
+ 00024834  0x0000612e branch  0x000062b0 
+ 00024835  0x00006131 force  0x00000006 , 0x0000003f 
+ 00024836  0x00006132 call  0x00006298 
+ 00024837  0x00006133 fetch  0x00000005 , 0x00004510 
+ 00024838  0x00006134 istore  0x00000005 , 0x00000005 
+ 00024839  0x00006135 branch  0x000062b0 
+ 00024840  0x00006138 force  0x00000009 , 0x0000003f 
+ 00024841  0x00006139 call  0x00006298 
+ 00024842  0x0000613a fetch  0x00000008 , 0x00004098 
+ 00024843  0x0000613b istore  0x00000008 , 0x00000005 
+ 00024844  0x0000613c branch  0x000062b0 
+ 00024845  0x00006144 force  0x0000000c , 0x00000007 
+ 00024846  0x00006145 call  0x000062a0 
+ 00024847  0x00006146 setarg  0x00000001 
+ 00024848  0x00006147 istore  0x00000001 , 0x00000005 
+ 00024849  0x00006148 fetch  0x00000002 , 0x000004ce 
+ 00024850  0x00006149 istore  0x00000002 , 0x00000005 
+ 00024851  0x0000614a setarg  0x00000000 
+ 00024852  0x0000614b istore  0x00000003 , 0x00000005 
+ 00024853  0x0000614c setarg  0x00000000 
+ 00024854  0x0000614d istore  0x00000004 , 0x00000005 
+ 00024855  0x0000614e branch  0x000062b2 
+ 00024856  0x00006151 force  0x00000003 , 0x00000007 
+ 00024857  0x00006152 call  0x000062a0 
+ 00024858  0x00006153 fetch  0x00000001 , 0x0000415a 
+ 00024859  0x00006154 istore  0x00000001 , 0x00000005 
+ 00024860  0x00006155 disable  0x00000028 
+ 00024861  0x00006156 call  0x000062b2 
+ 00024862  0x00006157 nrtn  0x00000028 
+ 00024863  0x00006158 nrtn  0x00000029 
+ 00024864  0x00006159 fetch  0x00000001 , 0x000040d8 
+ 00024865  0x0000615a rtnbit0  0x00000000 
+ 00024866  0x0000615b call  0x00006132 
+ 00024867  0x0000615c branch  0x0000613c 
+ 00024868  0x00006160 bpatchx  0x00000084 , 0x00004030 
+ 00024869  0x00006161 fetch  0x00000001 , 0x0000409e 
+ 00024870  0x00006162 set1  0x00000003 , 0x0000003f 
+ 00024871  0x00006163 store  0x00000001 , 0x0000409e 
+ 00024872  0x00006164 setarg  0x00000101 
+ 00024873  0x00006165 store  0x00000002 , 0x000004ce 
+ 00024874  0x00006166 rtn 
+ 00024875  0x00006169 bpatchx  0x00000085 , 0x00004030 
+ 00024876  0x0000616a fetch  0x00000001 , 0x0000409e 
+ 00024877  0x0000616b set0  0x00000003 , 0x0000003f 
+ 00024878  0x0000616c store  0x00000001 , 0x0000409e 
+ 00024879  0x0000616d setarg  0x00000000 
+ 00024880  0x0000616e store  0x00000002 , 0x000004ce 
+ 00024881  0x0000616f rtn 
+ 00024882  0x00006172 jam  0x00000003 , 0x000040d8 
+ 00024883  0x00006173 setarg  0x00000000 
+ 00024884  0x00006174 store  0x00000004 , 0x00004142 
+ 00024885  0x00006175 arg  0x000040da , 0x00000005 
+ 00024886  0x00006176 call  0x00006140 
+ 00024887  0x00006177 arg  0x000040e7 , 0x00000005 
+ 00024888  0x00006178 call  0x00006140 
+ 00024889  0x00006179 arg  0x00004146 , 0x00000005 
+ 00024890  0x0000617a call  0x00006140 
+ 00024891  0x0000617b branch  0x00006147 
+ 00024892  0x0000617d arg  0x000040e7 , 0x00000005 
+ 00024893  0x0000617e call  0x00006140 
+ 00024894  0x0000617f call  0x00006147 
+ 00024895  0x00006180 branch  0x0000614a 
+ 00024896  0x00006184 setarg  0x00ffffff 
+ 00024897  0x00006185 istore  0x00000003 , 0x00000005 
+ 00024898  0x00006186 istore  0x00000003 , 0x00000005 
+ 00024899  0x00006187 istore  0x00000003 , 0x00000005 
+ 00024900  0x00006188 setarg  0x0000007f 
+ 00024901  0x00006189 istore  0x00000001 , 0x00000005 
+ 00024902  0x0000618a rtn 
+ 00024903  0x0000618c setarg  0x00000000 
+ 00024904  0x0000618d store  0x00000002 , 0x000040d6 
+ 00024905  0x0000618e rtn 
+ 00024906  0x00006190 fetch  0x00000001 , 0x000040d8 
+ 00024907  0x00006191 set1  0x00000002 , 0x0000003f 
+ 00024908  0x00006192 store  0x00000001 , 0x000040d8 
+ 00024909  0x00006193 rtn 
+ 00024910  0x00006197 force  0x00000002 , 0x00000007 
+ 00024911  0x00006198 call  0x000062a0 
+ 00024912  0x00006199 nbranch  0x000062b0 , 0x00000029 
+ 00024913  0x0000619b branch  0x000062b2 
+ 00024914  0x000061a0 force  0x00000002 , 0x0000003f 
+ 00024915  0x000061a1 call  0x00006298 
+ 00024916  0x000061a2 fetch  0x00000001 , 0x000004ca 
+ 00024917  0x000061a3 istore  0x00000001 , 0x00000005 
+ 00024918  0x000061a4 call  0x000062b2 
+ 00024919  0x000061a6 fetch  0x00000001 , 0x0000004b 
+ 00024920  0x000061a7 set1  0x00000003 , 0x0000003f 
+ 00024921  0x000061a8 store  0x00000001 , 0x0000004b 
+ 00024922  0x000061a9 jam  0x00000032 , 0x00000072 
+ 00024923  0x000061aa rtn 
+ 00024924  0x000061ae force  0x00000001 , 0x0000003f 
+ 00024925  0x000061af call  0x00006298 
+ 00024926  0x000061b0 branch  0x000062b2 
+ 00024927  0x000061b2 force  0x00000001 , 0x0000003f 
+ 00024928  0x000061b3 call  0x00006298 
+ 00024929  0x000061b4 branch  0x000062b0 
+ 00024930  0x000061b8 force  0x00000002 , 0x0000003f 
+ 00024931  0x000061b9 call  0x00006298 
+ 00024932  0x000061ba fetch  0x00000001 , 0x0000004c 
+ 00024933  0x000061bb isolate0  0x00000002 , 0x0000003f 
+ 00024934  0x000061bc setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00024935  0x000061bd and_into  0x00000001 , 0x0000003f 
+ 00024936  0x000061be istore  0x00000001 , 0x00000005 
+ 00024937  0x000061bf branch  0x000062b2 
+ 00024938  0x000061c3 force  0x00000003 , 0x0000003f 
+ 00024939  0x000061c4 call  0x00006298 
+ 00024940  0x000061c5 fetch  0x00000002 , 0x00000051 
+ 00024941  0x000061c6 istore  0x00000002 , 0x00000005 
+ 00024942  0x000061c7 branch  0x000062b2 
+ 00024943  0x000061ca jam  0x000000fa , 0x00000072 
+ 00024944  0x000061cb force  0x00000002 , 0x0000003f 
+ 00024945  0x000061cc call  0x00006298 
+ 00024946  0x000061cd fetch  0x00000001 , 0x00000053 
+ 00024947  0x000061ce istore  0x00000001 , 0x00000005 
+ 00024948  0x000061cf branch  0x000062b2 
+ 00024949  0x000061d2 force  0x0000000a , 0x0000003f 
+ 00024950  0x000061d3 call  0x00006298 
+ 00024951  0x000061d4 arg  0x00000152 , 0x00000006 
+ 00024952  0x000061d5 force  0x00000009 , 0x00000039 
+ 00024953  0x000061d7 ifetch  0x00000001 , 0x00000006 
+ 00024954  0x000061d8 xor_into  0x00000055 , 0x0000003f 
+ 00024955  0x000061d9 istore  0x00000001 , 0x00000005 
+ 00024956  0x000061da loop  0x00006179 
+ 00024957  0x000061db branch  0x000062b2 
+ 00024958  0x000061de branch  0x000062b2 
+ 00024959  0x000061e0 branch  0x000062b2 
+ 00024960  0x000061e3 rtn  0x00000029 
+ 00024961  0x000061e4 call  0x0000282d 
+ 00024962  0x000061e5 force  0x00000009 , 0x0000003f 
+ 00024963  0x000061e6 call  0x00006298 
+ 00024964  0x000061e7 fetch  0x00000002 , 0x00000171 
+ 00024965  0x000061e8 istore  0x00000002 , 0x00000005 
+ 00024966  0x000061e9 fetch  0x00000003 , 0x000040a0 
+ 00024967  0x000061ea istore  0x00000003 , 0x00000005 
+ 00024968  0x000061eb fetch  0x00000001 , 0x000040a3 
+ 00024969  0x000061ec istore  0x00000001 , 0x00000005 
+ 00024970  0x000061ed fetch  0x00000002 , 0x000040a4 
+ 00024971  0x000061ee istore  0x00000002 , 0x00000005 
+ 00024972  0x000061ef bmark0  0x00000003 , 0x00006191 
+ 00024973  0x000061f0 set0  0x00000003 , 0x00000000 
+ 00024974  0x000061f1 call  0x000062b2 
+ 00024975  0x000061f2 jam  0x00000013 , 0x0000007c 
+ 00024976  0x000061f3 rtn 
+ 00024977  0x000061f5 call  0x000062b0 
+ 00024978  0x000061f6 jam  0x00000003 , 0x0000007c 
+ 00024979  0x000061f7 jam  0x00000013 , 0x0000007d 
+ 00024980  0x000061f8 rtn 
+ 00024981  0x000061fb arg  0x00000200 , 0x00000002 
+ 00024982  0x000061fc branch  0x00006199 , 0x00000029 
+ 00024983  0x000061fd deposit  0x00000028 
+ 00024984  0x000061fe branch  0x0000619a 
+ 00024985  0x00006200 deposit  0x00000022 
+ 00024986  0x00006202 deposit  0x00000021 
+ 00024987  0x00006203 iadd  0x00000002 , 0x0000003f 
+ 00024988  0x00006204 and_into  0x000001fc , 0x0000003f 
+ 00024989  0x00006205 store  0x00000004 , 0x00000034 
+ 00024990  0x00006206 force  0x00000005 , 0x0000003f 
+ 00024991  0x00006207 call  0x00006298 
+ 00024992  0x00006208 fetch  0x00000004 , 0x00000034 
+ 00024993  0x00006209 rshift  0x0000003f , 0x0000003f 
+ 00024994  0x0000620a istore  0x00000004 , 0x00000005 
+ 00024995  0x0000620b branch  0x000062b2 
+ 00024996  0x0000620e force  0x0000000a , 0x0000003f 
+ 00024997  0x0000620f call  0x00006298 
+ 00024998  0x00006210 arg  0x000004d9 , 0x00000006 
+ 00024999  0x00006211 ifetch  0x00000009 , 0x00000006 
+ 00025000  0x00006212 istore  0x00000009 , 0x00000005 
+ 00025001  0x00006213 branch  0x000062b2 
+ 00025002  0x00006218 force  0x00000003 , 0x0000003f 
+ 00025003  0x00006219 call  0x00006298 
+ 00025004  0x0000621a setarg  0x00000114 
+ 00025005  0x0000621b istore  0x00000002 , 0x00000005 
+ 00025006  0x0000621c branch  0x000062b2 
+ 00025007  0x00006220 force  0x00000001 , 0x0000003f 
+ 00025008  0x00006221 call  0x00006298 
+ 00025009  0x0000622a branch  0x000062b2 
+ 00025010  0x0000622e force  0x00000002 , 0x0000003f 
+ 00025011  0x0000622f call  0x00006298 
+ 00025012  0x00006230 fetch  0x00000001 , 0x000040d0 
+ 00025013  0x00006231 istore  0x00000001 , 0x00000005 
+ 00025014  0x00006232 branch  0x000062b2 
+ 00025015  0x00006236 force  0x00000002 , 0x0000003f 
+ 00025016  0x00006237 call  0x00006298 
+ 00025017  0x00006238 setarg  0x00000005 
+ 00025018  0x00006239 istore  0x00000001 , 0x00000005 
+ 00025019  0x0000623a branch  0x000062b2 
+ 00025020  0x0000623e force  0x00000002 , 0x0000003f 
+ 00025021  0x0000623f call  0x00006298 
+ 00025022  0x00006240 setarg  0x00000000 
+ 00025023  0x00006241 istore  0x00000001 , 0x00000005 
+ 00025024  0x00006242 branch  0x000062b2 
+ 00025025  0x00006246 jam  0x0000002e , 0x0000007c 
+ 00025026  0x00006247 rtn 
+ 00025027  0x00006249 fetch  0x00000001 , 0x00004092 
+ 00025028  0x0000624a sub  0x0000003f , 0x0000000a , 0x0000003e 
+ 00025029  0x0000624b call  0x000061c1 , 0x00000005 
+ 00025030  0x0000624c fetch  0x00000001 , 0x00000030 
+ 00025031  0x0000624d set1  0x00000004 , 0x0000003f 
+ 00025032  0x0000624e store  0x00000001 , 0x00000030 
+ 00025033  0x0000624f copy  0x00000022 , 0x0000003f 
+ 00025034  0x00006250 store  0x00000004 , 0x000004e9 
+ 00025035  0x00006251 fetch  0x00000001 , 0x000004d1 
+ 00025036  0x00006252 bbit1  0x00000003 , 0x000061d4 
+ 00025037  0x00006253 set1  0x00000003 , 0x0000003f 
+ 00025038  0x00006254 store  0x00000001 , 0x000004d1 
+ 00025039  0x00006255 jam  0x00000005 , 0x00000a99 
+ 00025040  0x00006256 call  0x00007d86 
+ 00025041  0x00006257 force  0x00000001 , 0x0000003f 
+ 00025042  0x00006258 call  0x00006298 
+ 00025043  0x00006259 branch  0x000062b2 
+ 00025044  0x0000625b jam  0x00000000 , 0x00000048 
+ 00025045  0x0000625c rtn 
+ 00025046  0x0000625f force  0x00000006 , 0x0000003f 
+ 00025047  0x00006260 call  0x00006298 
+ 00025048  0x00006261 fetch  0x00000005 , 0x00004510 
+ 00025049  0x00006262 istore  0x00000005 , 0x00000005 
+ 00025050  0x00006263 branch  0x000062b2 
+ 00025051  0x00006266 force  0x00000009 , 0x0000003f 
+ 00025052  0x00006267 call  0x00006298 
+ 00025053  0x00006268 fetch  0x00000008 , 0x00004098 
+ 00025054  0x00006269 istore  0x00000008 , 0x00000005 
+ 00025055  0x0000626a branch  0x000062b2 
+ 00025056  0x0000626d jam  0x00000001 , 0x000009b1 
+ 00025057  0x0000626e fetch  0x00000001 , 0x000045b1 
+ 00025058  0x0000626f rtnne  0x00000001 
+ 00025059  0x00006270 jam  0x00000013 , 0x000009af 
+ 00025060  0x00006271 rtn 
+ 00025061  0x00006274 call  0x000062ef 
+ 00025062  0x00006275 jam  0x00000099 , 0x0000007c 
+ 00025063  0x00006276 jam  0x00000003 , 0x000009af 
+ 00025064  0x00006277 rtn 
+ 00025065  0x0000627b call  0x000062ef 
+ 00025066  0x0000627c jam  0x0000003d , 0x0000007c 
+ 00025067  0x0000627d jam  0x00000007 , 0x000009af 
+ 00025068  0x0000627e rtn 
+ 00025069  0x00006281 arg  0x00000a4e , 0x00000011 
+ 00025070  0x00006282 arg  0x00000a6e , 0x00000012 
+ 00025071  0x00006283 arg  0x00000010 , 0x00000039 
+ 00025072  0x00006284 call  0x00007f88 
+ 00025073  0x00006285 branch  0x000061f7 , 0x00000005 
+ 00025074  0x00006286 jam  0x00000000 , 0x000009af 
+ 00025075  0x00006287 call  0x000076da 
+ 00025076  0x00006288 jam  0x00000024 , 0x0000007e 
+ 00025077  0x00006289 jam  0x00000040 , 0x0000007d 
+ 00025078  0x0000628a branch  0x00005d53 
+ 00025079  0x0000628c jam  0x0000000a , 0x000009af 
+ 00025080  0x0000628d call  0x000076d8 
+ 00025081  0x0000628e jam  0x00000040 , 0x0000007d 
+ 00025082  0x0000628f branch  0x00005e38 
+ 00025083  0x00006294 jam  0x00000040 , 0x0000007c 
+ 00025084  0x00006295 rtn 
+ 00025085  0x0000629c jam  0x0000003d , 0x0000007c 
+ 00025086  0x0000629e rtn 
+ 00025087  0x000062a5 jam  0x00000000 , 0x000009b6 
+ 00025088  0x000062a6 force  0x00000004 , 0x0000003f 
+ 00025089  0x000062a7 call  0x00006298 
+ 00025090  0x000062a8 force  0x00000001 , 0x0000003f 
+ 00025091  0x000062a9 istore  0x00000001 , 0x00000005 
+ 00025092  0x000062aa force  0x00000001 , 0x0000003f 
+ 00025093  0x000062ab istore  0x00000001 , 0x00000005 
+ 00025094  0x000062ac force  0x00000030 , 0x0000003f 
+ 00025095  0x000062ad istore  0x00000001 , 0x00000005 
+ 00025096  0x000062ae call  0x000062fc 
+ 00025097  0x000062af branch  0x000062b2 , 0x00000001 
+ 00025098  0x000062b0 branch  0x000062b0 
+ 00025099  0x000062b4 force  0x00000011 , 0x0000003f 
+ 00025100  0x000062b5 call  0x00006298 
+ 00025101  0x000062b6 fetch  0x00000001 , 0x000009b6 
+ 00025102  0x000062b7 arg  0x0000462a , 0x00000006 
+ 00025103  0x000062b8 iadd  0x00000006 , 0x00000006 
+ 00025104  0x000062b9 ifetch  0x00000008 , 0x00000006 
+ 00025105  0x000062ba istore  0x00000008 , 0x00000005 
+ 00025106  0x000062bb ifetch  0x00000008 , 0x00000006 
+ 00025107  0x000062bc istore  0x00000008 , 0x00000005 
+ 00025108  0x000062bd fetch  0x00000001 , 0x000009b6 
+ 00025109  0x000062be increase  0x00000010 , 0x0000003f 
+ 00025110  0x000062bf store  0x00000001 , 0x000009b6 
+ 00025111  0x000062c0 call  0x000062fc 
+ 00025112  0x000062c1 branch  0x000062b2 , 0x00000001 
+ 00025113  0x000062c2 branch  0x000062b0 
+ 00025114  0x000062c6 jam  0x00000006 , 0x000009ae 
+ 00025115  0x000062c7 jam  0x0000003f , 0x0000007c 
+ 00025116  0x000062c8 rtn 
+ 00025117  0x000062cc force  0x00000011 , 0x0000003f 
+ 00025118  0x000062cd call  0x00006298 
+ 00025119  0x000062ce arg  0x00000a4e , 0x00000006 
+ 00025120  0x000062cf ifetch  0x00000008 , 0x00000006 
+ 00025121  0x000062d0 istore  0x00000008 , 0x00000005 
+ 00025122  0x000062d1 ifetch  0x00000008 , 0x00000006 
+ 00025123  0x000062d2 istore  0x00000008 , 0x00000005 
+ 00025124  0x000062d3 branch  0x000062b0 
+ 00025125  0x000062d6 jam  0x00000040 , 0x0000007c 
+ 00025126  0x000062d7 rtn 
+ 00025127  0x000062db call  0x000062fc 
+ 00025128  0x000062dc call  0x00007612 , 0x00000001 
+ 00025129  0x000062dd force  0x00000011 , 0x0000003f 
+ 00025130  0x000062de call  0x00006298 
+ 00025131  0x000062df arg  0x00000a1e , 0x00000006 
+ 00025132  0x000062e0 ifetch  0x00000008 , 0x00000006 
+ 00025133  0x000062e1 istore  0x00000008 , 0x00000005 
+ 00025134  0x000062e2 ifetch  0x00000008 , 0x00000006 
+ 00025135  0x000062e3 istore  0x00000008 , 0x00000005 
+ 00025136  0x000062e4 call  0x000062fc 
+ 00025137  0x000062e5 nbranch  0x000062b0 , 0x00000001 
+ 00025138  0x000062e6 branch  0x000062b2 , 0x00000001 
+ 00025139  0x000062ea jam  0x0000000f , 0x000009af 
+ 00025140  0x000062ec call  0x000062ef 
+ 00025141  0x000062ed jam  0x0000000b , 0x0000007c 
+ 00025142  0x000062ee call  0x00006307 
+ 00025143  0x000062ef branch  0x0000764e , 0x00000001 
+ 00025144  0x000062f0 branch  0x00007658 
+ 00025145  0x000062f2 call  0x000062eb 
+ 00025146  0x000062f4 jam  0x00000041 , 0x0000007c 
+ 00025147  0x000062f5 rtn 
+ 00025148  0x000062f8 force  0x00000011 , 0x0000003f 
+ 00025149  0x000062f9 call  0x00006298 
+ 00025150  0x000062fa arg  0x00000a4e , 0x00000006 
+ 00025151  0x000062fb ifetch  0x00000008 , 0x00000006 
+ 00025152  0x000062fc istore  0x00000008 , 0x00000005 
+ 00025153  0x000062fd ifetch  0x00000008 , 0x00000006 
+ 00025154  0x000062fe istore  0x00000008 , 0x00000005 
+ 00025155  0x000062ff call  0x000062fc 
+ 00025156  0x00006300 nbranch  0x000062b0 , 0x00000001 
+ 00025157  0x00006301 branch  0x000062b2 , 0x00000001 
+ 00025158  0x00006304 force  0x00000003 , 0x0000003f 
+ 00025159  0x00006305 call  0x00006298 
+ 00025160  0x00006306 setarg  0x0000fffe 
+ 00025161  0x00006307 istore  0x00000002 , 0x00000005 
+ 00025162  0x00006308 branch  0x000062b0 
+ 00025163  0x0000630b branch  0x000062b2 
+ 00025164  0x0000630d branch  0x000062b2 
+ 00025165  0x0000630f branch  0x000062b2 
+ 00025166  0x00006311 branch  0x000062b2 
+ 00025167  0x00006317 call  0x0000630b 
+ 00025168  0x00006318 arg  0x000040a0 , 0x00000011 
+ 00025169  0x00006319 call  0x00006311 
+ 00025170  0x0000631a force  0x00000011 , 0x0000003f 
+ 00025171  0x0000631b call  0x00006298 
+ 00025172  0x0000631c arg  0x00000582 , 0x00000011 
+ 00025173  0x0000631d arg  0x00000562 , 0x00000012 
+ 00025174  0x0000631e call  0x00007352 
+ 00025175  0x0000631f nbranch  0x000062a7 , 0x00000029 
+ 00025176  0x00006320 branch  0x000062ad 
+ 00025177  0x00006323 call  0x0000630b 
+ 00025178  0x00006324 arg  0x00000040 , 0x00000011 
+ 00025179  0x00006325 call  0x00007255 
+ 00025180  0x00006327 force  0x00000011 , 0x0000003f 
+ 00025181  0x00006328 call  0x00006298 
+ 00025182  0x00006329 arg  0x00000562 , 0x00000006 
+ 00025183  0x0000632a call  0x00007ebf 
+ 00025184  0x0000632b fetch  0x00000001 , 0x00000055 
+ 00025185  0x0000632c beq  0x00000019 , 0x000062b2 
+ 00025186  0x0000632d beq  0x00000018 , 0x000062b2 
+ 00025187  0x0000632e branch  0x000062ad 
+ 00025188  0x00006331 fetch  0x00000001 , 0x000009b5 
+ 00025189  0x00006332 branch  0x0000626a , 0x00000034 
+ 00025190  0x00006333 call  0x000062fc 
+ 00025191  0x00006334 call  0x000062ef , 0x00000001 
+ 00025192  0x00006335 ncall  0x000062eb , 0x00000001 
+ 00025193  0x00006336 branch  0x0000626b 
+ 00025194  0x00006338 call  0x000062ef 
+ 00025195  0x0000633a call  0x0000630b 
+ 00025196  0x0000633b branch  0x0000625c 
+ 00025197  0x0000633e arg  0x000040a0 , 0x00000011 
+ 00025198  0x0000633f call  0x00007288 
+ 00025199  0x00006340 force  0x00000005 , 0x0000003f 
+ 00025200  0x00006341 call  0x00006298 
+ 00025201  0x00006342 fetch  0x00000004 , 0x00000592 
+ 00025202  0x00006343 istore  0x00000004 , 0x00000005 
+ 00025203  0x00006344 arg  0x000004d5 , 0x00000002 
+ 00025204  0x00006345 call  0x000062e2 
+ 00025205  0x00006346 call  0x00007386 
+ 00025206  0x00006347 call  0x000062fc 
+ 00025207  0x00006348 branch  0x0000627c , 0x00000001 
+ 00025208  0x00006349 jam  0x00000001 , 0x000004d8 
+ 00025209  0x0000634a fetch  0x00000001 , 0x000009b5 
+ 00025210  0x0000634b rtn  0x00000034 
+ 00025211  0x0000634c jam  0x0000000b , 0x0000007c 
+ 00025212  0x0000634e fetch  0x00000001 , 0x000041bd 
+ 00025213  0x0000634f rtn  0x00000034 
+ 00025214  0x00006351 call  0x000062fc 
+ 00025215  0x00006352 nbranch  0x00006284 , 0x00000001 
+ 00025216  0x00006353 fetch  0x00000001 , 0x000004d7 
+ 00025217  0x00006354 rtn  0x00000034 
+ 00025218  0x00006355 jam  0x0000000f , 0x0000007c 
+ 00025219  0x00006356 rtn 
+ 00025220  0x00006358 rtnmark0  0x00000021 
+ 00025221  0x00006359 set0  0x00000021 , 0x00000000 
+ 00025222  0x0000635a jam  0x0000000f , 0x0000007c 
+ 00025223  0x0000635b rtn 
+ 00025224  0x00006360 call  0x0000630b 
+ 00025225  0x00006361 call  0x0000728b 
+ 00025226  0x00006362 force  0x00000011 , 0x0000003f 
+ 00025227  0x00006363 call  0x00006298 
+ 00025228  0x00006364 arg  0x00000562 , 0x00000006 
+ 00025229  0x00006365 call  0x00007ebf 
+ 00025230  0x00006366 branch  0x000062ad 
+ 00025231  0x00006369 force  0x00000001 , 0x0000003f 
+ 00025232  0x0000636a call  0x00006298 
+ 00025233  0x0000636b branch  0x000062ad 
+ 00025234  0x0000636e force  0x00000002 , 0x0000003f 
+ 00025235  0x0000636f call  0x00006298 
+ 00025236  0x00006370 force  0x00000010 , 0x0000003f 
+ 00025237  0x00006371 istore  0x00000001 , 0x00000005 
+ 00025238  0x00006372 store  0x00000001 , 0x00000054 
+ 00025239  0x00006373 branch  0x000062ad 
+ 00025240  0x00006377 lshift3  0x0000003f , 0x0000003f 
+ 00025241  0x00006378 or_into  0x00000007 , 0x0000003f 
+ 00025242  0x00006379 store  0x00000001 , 0x000004b6 
+ 00025243  0x0000637a arg  0x00000011 , 0x00000039 
+ 00025244  0x0000637b arg  0x000004b8 , 0x00000005 
+ 00025245  0x0000637c call  0x00007ed4 
+ 00025246  0x0000637d arg  0x000004b8 , 0x00000005 
+ 00025247  0x0000637e rtn 
+ 00025248  0x00006381 and  0x0000003f , 0x0000007f , 0x00000011 
+ 00025249  0x00006382 jam  0x0000007f , 0x00000048 
+ 00025250  0x00006383 deposit  0x00000007 
+ 00025251  0x00006384 call  0x00006298 
+ 00025252  0x00006385 deposit  0x00000011 
+ 00025253  0x00006386 istore  0x00000001 , 0x00000005 
+ 00025254  0x00006387 rtn 
+ 00025255  0x0000638a fetch  0x00000001 , 0x00000048 
+ 00025256  0x0000638b lshift  0x0000003f , 0x0000003f 
+ 00025257  0x0000638c fetcht  0x00000001 , 0x0000004c 
+ 00025258  0x0000638d isolate1  0x00000001 , 0x00000002 
+ 00025259  0x0000638e setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00025260  0x0000638f branch  0x000062b7 
+ 00025261  0x00006393 fetcht  0x00000001 , 0x0000004c 
+ 00025262  0x00006394 and_into  0x00000001 , 0x00000002 
+ 00025263  0x00006395 branch  0x000062b3 
+ 00025264  0x00006398 force  0x00000000 , 0x00000002 
+ 00025265  0x00006399 branch  0x000062b3 
+ 00025266  0x0000639c force  0x00000001 , 0x00000002 
+ 00025267  0x0000639e fetch  0x00000001 , 0x00000048 
+ 00025268  0x0000639f lshift  0x0000003f , 0x0000003f 
+ 00025269  0x000063a0 setflag  0x00000029 , 0x00000000 , 0x0000003f 
+ 00025270  0x000063a1 ixor  0x00000002 , 0x0000003f 
+ 00025271  0x000063a3 store  0x00000001 , 0x000004b7 
+ 00025272  0x000063a4 jam  0x00000000 , 0x00000048 
+ 00025273  0x000063a5 call  0x000062c7 
+ 00025274  0x000063a6 enable  0x00000028 
+ 00025275  0x000063a7 rtn 
+ 00025276  0x000063ab fetch  0x00000001 , 0x0000007c 
+ 00025277  0x000063ac rtn  0x00000034 
+ 00025278  0x000063ad call  0x000062c1 
+ 00025279  0x000063ae fetch  0x00000001 , 0x0000007c 
+ 00025280  0x000063af rtn 
+ 00025281  0x000063b2 bpatchx  0x00000086 , 0x00004030 
+ 00025282  0x000063b3 fetch  0x00000001 , 0x00000048 
+ 00025283  0x000063b4 branch  0x000062c7 , 0x00000034 
+ 00025284  0x000063b5 fetch  0x00000001 , 0x00000078 
+ 00025285  0x000063b6 nrtn  0x00000034 
+ 00025286  0x000063b7 branch  0x000062d1 
+ 00025287  0x000063b9 fetch  0x00000001 , 0x00000078 
+ 00025288  0x000063ba branch  0x000062d7 , 0x00000034 
+ 00025289  0x000063bb fetch  0x00000003 , 0x00000078 
+ 00025290  0x000063bc store  0x00000003 , 0x00000048 
+ 00025291  0x000063bd fetcht  0x00000001 , 0x0000007b 
+ 00025292  0x000063be fetch  0x00000001 , 0x0000004c 
+ 00025293  0x000063bf set0  0x00000001 , 0x0000003f 
+ 00025294  0x000063c0 ior  0x00000002 , 0x0000003f 
+ 00025295  0x000063c1 store  0x00000001 , 0x0000004c 
+ 00025296  0x000063c2 jam  0x00000000 , 0x00000078 
+ 00025297  0x000063c4 fetch  0x00000001 , 0x0000007c 
+ 00025298  0x000063c5 rtn  0x00000034 
+ 00025299  0x000063c6 fetch  0x00000004 , 0x0000007c 
+ 00025300  0x000063c7 store  0x00000004 , 0x00000078 
+ 00025301  0x000063c8 jam  0x00000000 , 0x0000007c 
+ 00025302  0x000063c9 rtn 
+ 00025303  0x000063cb fetch  0x00000001 , 0x0000007c 
+ 00025304  0x000063cc rtn  0x00000034 
+ 00025305  0x000063cd fetch  0x00000003 , 0x0000007c 
+ 00025306  0x000063ce store  0x00000003 , 0x00000048 
+ 00025307  0x000063cf fetcht  0x00000001 , 0x0000007f 
+ 00025308  0x000063d0 fetch  0x00000001 , 0x0000004c 
+ 00025309  0x000063d1 set0  0x00000001 , 0x0000003f 
+ 00025310  0x000063d2 ior  0x00000002 , 0x0000003f 
+ 00025311  0x000063d3 store  0x00000001 , 0x0000004c 
+ 00025312  0x000063d4 jam  0x00000000 , 0x0000007c 
+ 00025313  0x000063d5 rtn 
+ 00025314  0x000063d9 bpatchx  0x00000087 , 0x00004030 
+ 00025315  0x000063da fetch  0x00000001 , 0x0000004c 
+ 00025316  0x000063db copy  0x0000003f , 0x00000013 
+ 00025317  0x000063dc ifetch  0x00000001 , 0x00000002 
+ 00025318  0x000063dd call  0x00005e52 
+ 00025319  0x000063de call  0x000062a7 
+ 00025320  0x000063df copy  0x00000013 , 0x0000003f 
+ 00025321  0x000063e0 store  0x00000001 , 0x0000004c 
+ 00025322  0x000063e1 rtn 
+ 00025323  0x000063e4 fetcht  0x00000001 , 0x0000004c 
+ 00025324  0x000063e5 set0  0x00000000 , 0x00000002 
+ 00025325  0x000063e6 storet  0x00000001 , 0x0000004c 
+ 00025326  0x000063e7 rtn 
+ 00025327  0x000063ea fetcht  0x00000001 , 0x0000004c 
+ 00025328  0x000063eb set1  0x00000000 , 0x00000002 
+ 00025329  0x000063ec storet  0x00000001 , 0x0000004c 
+ 00025330  0x000063ed rtn 
+ 00025331  0x000063f1 nsetflag  0x00000029 , 0x00000001 , 0x0000003f 
+ 00025332  0x000063f2 fetcht  0x00000001 , 0x0000004c 
+ 00025333  0x000063f3 ixor  0x00000002 , 0x0000003f 
+ 00025334  0x000063f4 isolate1  0x00000001 , 0x0000003f 
+ 00025335  0x000063f5 rtn 
+ 00025336  0x000063f9 fetch  0x00000001 , 0x0000004c 
+ 00025337  0x000063fa setflag  0x00000029 , 0x00000001 , 0x0000003f 
+ 00025338  0x000063fb store  0x00000001 , 0x0000004c 
+ 00025339  0x000063fc rtn 
+ 00025340  0x00006400 fetch  0x00000001 , 0x000009b4 
+ 00025341  0x00006401 compare  0x00000001 , 0x0000003f , 0x0000007f 
+ 00025342  0x00006402 rtn 
+ 00025343  0x00006404 fetch  0x00000001 , 0x000009b4 
+ 00025344  0x00006405 set1  0x00000007 , 0x0000003f 
+ 00025345  0x00006406 store  0x00000001 , 0x000009b4 
+ 00025346  0x00006407 rtn 
+ 00025347  0x00006409 fetch  0x00000001 , 0x000009b4 
+ 00025348  0x0000640a set0  0x00000007 , 0x0000003f 
+ 00025349  0x0000640b store  0x00000001 , 0x000009b4 
+ 00025350  0x0000640c rtn 
+ 00025351  0x0000640e fetch  0x00000001 , 0x000009b4 
+ 00025352  0x0000640f isolate1  0x00000007 , 0x0000003f 
+ 00025353  0x00006410 store  0x00000001 , 0x000009b4 
+ 00025354  0x00006411 rtn 
+ 00025355  0x00006415 arg  0x00000562 , 0x00000005 
+ 00025356  0x00006417 force  0x00000010 , 0x00000039 
+ 00025357  0x0000641a random  0x0000003f 
+ 00025358  0x0000641b istore  0x00000001 , 0x00000005 
+ 00025359  0x0000641c loop  0x0000630d 
+ 00025360  0x0000641d rtn 
+ 00025361  0x00006420 call  0x00007259 
+ 00025362  0x00006421 arg  0x000041be , 0x00000011 
+ 00025363  0x00006422 arg  0x00000592 , 0x00000012 
+ 00025364  0x00006423 ifetch  0x00000008 , 0x00000011 
+ 00025365  0x00006424 fetcht  0x00000001 , 0x00000030 
+ 00025366  0x00006425 nsetflag  0x00000034 , 0x00000006 , 0x00000002 
+ 00025367  0x00006426 storet  0x00000001 , 0x00000030 
+ 00025368  0x00006427 copy  0x00000011 , 0x00000005 
+ 00025369  0x00006428 call  0x00007352 
+ 00025370  0x00006429 branch  0x000021c4 
+ 00025371  0x00006431 bpatchx  0x00000088 , 0x00004031 
+ 00025372  0x00006433 call  0x000062bc 
+ 00025373  0x00006434 nrtn  0x00000034 
+ 00025374  0x00006436 fetch  0x00000001 , 0x00000055 
+ 00025375  0x00006437 rtn  0x00000034 
+ 00025376  0x0000643b beq  0x00000004 , 0x0000636f 
+ 00025377  0x0000643c beq  0x00000005 , 0x00006374 
+ 00025378  0x0000643d beq  0x00000002 , 0x00006366 
+ 00025379  0x0000643e beq  0x00000003 , 0x0000637c 
+ 00025380  0x0000643f beq  0x0000000e , 0x00006369 
+ 00025381  0x00006440 beq  0x00000006 , 0x00006398 
+ 00025382  0x00006441 beq  0x00000007 , 0x000063b0 
+ 00025383  0x00006442 beq  0x00000009 , 0x000063b1 
+ 00025384  0x00006443 beq  0x0000000a , 0x000063ba 
+ 00025385  0x00006444 beq  0x0000000b , 0x000063be 
+ 00025386  0x00006445 beq  0x0000000c , 0x00006386 
+ 00025387  0x00006446 beq  0x0000000d , 0x00006389 
+ 00025388  0x00006447 beq  0x0000000f , 0x0000638f 
+ 00025389  0x00006448 beq  0x00000012 , 0x00006359 
+ 00025390  0x00006449 beq  0x00000013 , 0x0000637c 
+ 00025391  0x0000644a beq  0x00000010 , 0x0000635c 
+ 00025392  0x0000644b beq  0x00000014 , 0x00006356 
+ 00025393  0x0000644c beq  0x00000015 , 0x0000637c 
+ 00025394  0x0000644d beq  0x00000016 , 0x00006350 
+ 00025395  0x0000644e beq  0x00000018 , 0x00006355 
+ 00025396  0x0000644f beq  0x00000017 , 0x00006349 
+ 00025397  0x00006450 beq  0x00000019 , 0x0000634f 
+ 00025398  0x00006451 beq  0x0000001a , 0x0000633a 
+ 00025399  0x00006452 beq  0x0000001b , 0x00006344 
+ 00025400  0x00006453 jam  0x00000000 , 0x00000055 
+ 00025401  0x00006455 rtn 
+ 00025402  0x00006457 fetch  0x00000001 , 0x000004d1 
+ 00025403  0x00006458 rtnbit0  0x00000002 
+ 00025404  0x00006459 rtnbit0  0x00000003 
+ 00025405  0x0000645a jam  0x00000000 , 0x00000055 
+ 00025406  0x0000645b call  0x00006340 
+ 00025407  0x0000645c branch  0x00006cef 
+ 00025408  0x0000645f fetch  0x00000001 , 0x0000016d 
+ 00025409  0x00006460 rtnbit0  0x00000001 
+ 00025410  0x00006461 jam  0x0000000a , 0x00000055 
+ 00025411  0x00006462 rtn 
+ 00025412  0x00006465 arg  0x00000007 , 0x00000007 
+ 00025413  0x00006466 call  0x00007f16 
+ 00025414  0x00006467 nrtn  0x00000034 
+ 00025415  0x00006468 jam  0x0000001a , 0x00000055 
+ 00025416  0x00006469 rtn 
+ 00025417  0x0000646c fetch  0x00000001 , 0x0000016d 
+ 00025418  0x0000646d set0  0x00000000 , 0x0000003f 
+ 00025419  0x0000646e store  0x00000001 , 0x0000016d 
+ 00025420  0x0000646f jam  0x00000019 , 0x00000055 
+ 00025421  0x00006470 jam  0x0000000b , 0x0000007c 
+ 00025422  0x00006471 rtn 
+ 00025423  0x00006473 rtn 
+ 00025424  0x00006475 fetch  0x00000001 , 0x000004d4 
+ 00025425  0x00006476 rtnne  0x00000002 
+ 00025426  0x00006477 call  0x000063c0 
+ 00025427  0x00006478 jam  0x00000018 , 0x00000055 
+ 00025428  0x00006479 rtn 
+ 00025429  0x0000647c rtn 
+ 00025430  0x0000647e jam  0x00000015 , 0x00000055 
+ 00025431  0x0000647f jam  0x00000083 , 0x0000007c 
+ 00025432  0x00006480 rtn 
+ 00025433  0x00006482 jam  0x00000013 , 0x00000055 
+ 00025434  0x00006483 jam  0x00000025 , 0x0000007c 
+ 00025435  0x00006484 rtn 
+ 00025436  0x00006487 fetch  0x00000001 , 0x0000455b 
+ 00025437  0x00006488 rtneq  0x00000000 
+ 00025438  0x00006489 beq  0x00000001 , 0x00006364 
+ 00025439  0x0000648a arg  0x00000006 , 0x00000007 
+ 00025440  0x0000648b call  0x00007f16 
+ 00025441  0x0000648c nrtn  0x00000034 
+ 00025442  0x0000648d jam  0x00000000 , 0x0000455b 
+ 00025443  0x0000648e branch  0x0000637d 
+ 00025444  0x00006490 rtn  0x00000029 
+ 00025445  0x00006491 branch  0x00006398 
+ 00025446  0x00006494 jam  0x00000003 , 0x00000055 
+ 00025447  0x00006495 jam  0x00000027 , 0x0000007c 
+ 00025448  0x00006496 rtn 
+ 00025449  0x00006498 jam  0x00000013 , 0x0000007c 
+ 00025450  0x00006499 set1  0x00000003 , 0x00000000 
+ 00025451  0x0000649a jam  0x00000005 , 0x00000055 
+ 00025452  0x0000649b setarg  0x000001ff 
+ 00025453  0x0000649c store  0x00000002 , 0x000004d2 
+ 00025454  0x0000649d rtn 
+ 00025455  0x0000649f jam  0x00000005 , 0x00000055 
+ 00025456  0x000064a0 jam  0x000000ff , 0x000004d2 
+ 00025457  0x000064a1 set0  0x00000022 , 0x00000000 
+ 00025458  0x000064a2 jam  0x00000033 , 0x0000007c 
+ 00025459  0x000064a3 branch  0x00005d04 
+ 00025460  0x000064a5 rtnmark1  0x00000022 
+ 00025461  0x000064a6 fetch  0x00000002 , 0x000004d2 
+ 00025462  0x000064a7 sub  0x0000003f , 0x00000001 , 0x0000003f 
+ 00025463  0x000064a8 branch  0x0000637a , 0x00000005 
+ 00025464  0x000064a9 store  0x00000002 , 0x000004d2 
+ 00025465  0x000064aa rtn 
+ 00025466  0x000064ac jam  0x0000000e , 0x00000055 
+ 00025467  0x000064ad rtn 
+ 00025468  0x000064b0 rtn 
+ 00025469  0x000064b3 fetch  0x00000001 , 0x000004d1 
+ 00025470  0x000064b4 rtnbit0  0x00000003 
+ 00025471  0x000064b5 rtnbit0  0x00000002 
+ 00025472  0x000064b6 fetch  0x00000001 , 0x0000016d 
+ 00025473  0x000064b7 set0  0x00000002 , 0x0000003f 
+ 00025474  0x000064b8 store  0x00000001 , 0x0000016d 
+ 00025475  0x000064b9 jam  0x00000013 , 0x0000007c 
+ 00025476  0x000064ba jam  0x00000010 , 0x00000055 
+ 00025477  0x000064bb rtn 
+ 00025478  0x000064be jam  0x0000000d , 0x00000055 
+ 00025479  0x000064bf jam  0x00000031 , 0x0000007c 
+ 00025480  0x000064c0 rtn 
+ 00025481  0x000064c3 fetch  0x00000001 , 0x000004d1 
+ 00025482  0x000064c4 rtnbit0  0x00000002 
+ 00025483  0x000064c5 jam  0x00000000 , 0x00000055 
+ 00025484  0x000064c7 rtn 
+ 00025485  0x000064c9 jam  0x00000006 , 0x00000055 
+ 00025486  0x000064ca rtn 
+ 00025487  0x000064cd fetch  0x00000001 , 0x000004d2 
+ 00025488  0x000064ce increase  0xffffffff , 0x0000003f 
+ 00025489  0x000064cf branch  0x00006394 , 0x00000034 
+ 00025490  0x000064d0 store  0x00000001 , 0x000004d2 
+ 00025491  0x000064d1 rtn 
+ 00025492  0x000064d3 jam  0x00000007 , 0x0000007c 
+ 00025493  0x000064d4 jam  0x00000016 , 0x000004ca 
+ 00025494  0x000064d5 jam  0x00000000 , 0x00000055 
+ 00025495  0x000064d6 rtn 
+ 00025496  0x000064d9 fetch  0x00000001 , 0x0000016d 
+ 00025497  0x000064da bbit1  0x00000002 , 0x0000637d 
+ 00025498  0x000064db bbit1  0x00000000 , 0x0000639d 
+ 00025499  0x000064dd jam  0x0000001a , 0x00000055 
+ 00025500  0x000064de rtn 
+ 00025501  0x000064e0 fetch  0x00000001 , 0x000041bd 
+ 00025502  0x000064e1 branch  0x000063a9 , 0x00000034 
+ 00025503  0x000064e2 fetch  0x00000001 , 0x000004d1 
+ 00025504  0x000064e3 rtnbit0  0x00000003 
+ 00025505  0x000064e4 rtnbit0  0x00000002 
+ 00025506  0x000064e5 fetch  0x00000004 , 0x000004e9 
+ 00025507  0x000064e6 arg  0x00000064 , 0x00000002 
+ 00025508  0x000064e7 iadd  0x00000002 , 0x00000002 
+ 00025509  0x000064e8 copy  0x00000022 , 0x0000003f 
+ 00025510  0x000064e9 isub  0x00000002 , 0x0000003e 
+ 00025511  0x000064ea nrtn  0x00000002 
+ 00025512  0x000064eb branch  0x00006349 
+ 00025513  0x000064f0 jam  0x00000016 , 0x00000055 
+ 00025514  0x000064f1 jam  0x00000004 , 0x00004689 
+ 00025515  0x000064f2 setarg  0x00003030 
+ 00025516  0x000064f3 store  0x00000002 , 0x0000468a 
+ 00025517  0x000064f4 istore  0x00000002 , 0x00000005 
+ 00025518  0x000064f5 jam  0x00000002 , 0x000004d4 
+ 00025519  0x000064f6 branch  0x00006350 
+ 00025520  0x000064f9 rtn 
+ 00025521  0x000064fb fetch  0x00000001 , 0x0000016d 
+ 00025522  0x000064fc bbit1  0x00000001 , 0x000063b5 
+ 00025523  0x000064fd jam  0x0000001a , 0x00000055 
+ 00025524  0x000064fe rtn 
+ 00025525  0x00006501 fetch  0x00000001 , 0x0000016d 
+ 00025526  0x00006502 set0  0x00000001 , 0x0000003f 
+ 00025527  0x00006503 store  0x00000001 , 0x0000016d 
+ 00025528  0x00006504 jam  0x0000000f , 0x0000007c 
+ 00025529  0x00006505 rtn 
+ 00025530  0x00006508 fetch  0x00000001 , 0x000004d8 
+ 00025531  0x00006509 rtn  0x00000034 
+ 00025532  0x0000650a jam  0x00000000 , 0x00000055 
+ 00025533  0x0000650b branch  0x000063b5 
+ 00025534  0x0000650e jam  0x0000000c , 0x00000055 
+ 00025535  0x0000650f rtn 
+ 00025536  0x00006512 fetch  0x00000001 , 0x0000004b 
+ 00025537  0x00006513 bbit1  0x00000002 , 0x000063c5 
+ 00025538  0x00006514 call  0x000062ef 
+ 00025539  0x00006515 jam  0x00000008 , 0x0000007c 
+ 00025540  0x00006516 branch  0x00004d04 
+ 00025541  0x00006518 fetch  0x00000001 , 0x0000004b 
+ 00025542  0x00006519 set0  0x00000002 , 0x0000003f 
+ 00025543  0x0000651a store  0x00000001 , 0x0000004b 
+ 00025544  0x0000651b call  0x00006001 
+ 00025545  0x0000651c call  0x000062f8 
+ 00025546  0x0000651d branch  0x00004d04 
+ 00025547  0x00006520 setarg  0x00000004 
+ 00025548  0x00006521 store  0x00000001 , 0x00004689 
+ 00025549  0x00006522 setarg  0x00003030 
+ 00025550  0x00006523 istore  0x00000002 , 0x00000005 
+ 00025551  0x00006524 istore  0x00000002 , 0x00000005 
+ 00025552  0x00006525 rtn 
+ 00025553  0x0000652c bpatchx  0x0000008c , 0x00004031 
+ 00025554  0x0000652d hfetch  0x00000001 , 0x00008073 
+ 00025555  0x0000652e arg  0x00000006 , 0x00000002 
+ 00025556  0x0000652f ior  0x00000002 , 0x0000003f 
+ 00025557  0x00006530 hstore  0x00000001 , 0x00008073 
+ 00025558  0x00006531 hfetch  0x00000001 , 0x00008077 
+ 00025559  0x00006532 ior  0x00000002 , 0x0000003f 
+ 00025560  0x00006533 hstore  0x00000001 , 0x00008077 
+ 00025561  0x00006534 call  0x000063ee 
+ 00025562  0x00006535 hfetch  0x00000001 , 0x00008077 
+ 00025563  0x00006536 set0  0x00000001 , 0x0000003f 
+ 00025564  0x00006537 set0  0x00000002 , 0x0000003f 
+ 00025565  0x00006538 hstore  0x00000001 , 0x00008077 
+ 00025566  0x00006539 nop  0x0000001e 
+ 00025567  0x0000653a branch  0x000063f2 
+ 00025568  0x0000653d hfetch  0x00000001 , 0x00008073 
+ 00025569  0x0000653e arg  0x000000c0 , 0x00000002 
+ 00025570  0x0000653f ior  0x00000002 , 0x0000003f 
+ 00025571  0x00006540 hstore  0x00000001 , 0x00008073 
+ 00025572  0x00006541 hfetch  0x00000001 , 0x00008077 
+ 00025573  0x00006542 ior  0x00000002 , 0x0000003f 
+ 00025574  0x00006543 hstore  0x00000001 , 0x00008077 
+ 00025575  0x00006544 call  0x000063ee 
+ 00025576  0x00006545 hfetch  0x00000001 , 0x00008077 
+ 00025577  0x00006546 set0  0x00000006 , 0x0000003f 
+ 00025578  0x00006547 set0  0x00000007 , 0x0000003f 
+ 00025579  0x00006548 hstore  0x00000001 , 0x00008077 
+ 00025580  0x00006549 nop  0x0000001e 
+ 00025581  0x0000654a branch  0x000063f6 
+ 00025582  0x0000654d hfetch  0x00000001 , 0x00008081 
+ 00025583  0x0000654e and  0x0000003f , 0x000000fc , 0x0000003f 
+ 00025584  0x0000654f hstore  0x00000001 , 0x00008081 
+ 00025585  0x00006550 rtn 
+ 00025586  0x00006552 hfetch  0x00000001 , 0x00008081 
+ 00025587  0x00006553 or  0x0000003f , 0x00000001 , 0x0000003f 
+ 00025588  0x00006554 hstore  0x00000001 , 0x00008081 
+ 00025589  0x00006555 rtn 
+ 00025590  0x00006557 hfetch  0x00000001 , 0x00008081 
+ 00025591  0x00006558 or  0x0000003f , 0x00000003 , 0x0000003f 
+ 00025592  0x00006559 set0  0x00000004 , 0x0000003f 
+ 00025593  0x0000655a hstore  0x00000001 , 0x00008081 
+ 00025594  0x0000655b rtn 
+ 00025595  0x00006560 copy  0x0000003f , 0x00000012 
+ 00025596  0x00006561 call  0x0000640f 
+ 00025597  0x00006562 nop  0x00000064 
+ 00025598  0x00006563 copy  0x00000012 , 0x0000003f 
+ 00025599  0x00006564 call  0x00006414 
+ 00025600  0x00006565 copy  0x0000003f , 0x00000012 
+ 00025601  0x00006566 call  0x00006411 
+ 00025602  0x00006567 nop  0x00000064 
+ 00025603  0x00006568 copy  0x00000012 , 0x0000003f 
+ 00025604  0x00006569 rtn 
+ 00025605  0x0000656c copy  0x0000003f , 0x00000012 
+ 00025606  0x0000656d call  0x0000640f 
+ 00025607  0x0000656e nop  0x00000064 
+ 00025608  0x0000656f copy  0x00000012 , 0x0000003f 
+ 00025609  0x00006570 call  0x00006413 
+ 00025610  0x00006571 call  0x00006411 
+ 00025611  0x00006572 nop  0x00000064 
+ 00025612  0x00006573 rtn 
+ 00025613  0x00006577 fetcht  0x00000001 , 0x00004214 
+ 00025614  0x00006578 branch  0x0000680e 
+ 00025615  0x0000657c fetcht  0x00000001 , 0x00004214 
+ 00025616  0x0000657d branch  0x00006829 
+ 00025617  0x00006581 fetcht  0x00000001 , 0x00004214 
+ 00025618  0x00006582 branch  0x00006825 
+ 00025619  0x00006586 branch  0x000064ec 
+ 00025620  0x00006589 branch  0x000064f3 
+ 00025621  0x00006591 nbranch  0x00006419 , 0x00000028 
+ 00025622  0x00006592 hfetch  0x00000001 , 0x00008085 
+ 00025623  0x00006593 or_into  0x00000002 , 0x0000003f 
+ 00025624  0x00006594 hstore  0x00000001 , 0x00008085 
+ 00025625  0x00006596 copy  0x00000002 , 0x0000003e 
+ 00025626  0x00006597 branch  0x0000641c , 0x00000005 
+ 00025627  0x00006598 copy  0x00000013 , 0x0000003d 
+ 00025628  0x0000659a isolate0  0x00000000 , 0x0000003e 
+ 00025629  0x0000659b branch  0x000064b9 
+ 00025630  0x0000659f force  0x00000004 , 0x00000002 
+ 00025631  0x000065a1 arg  0x000001fe , 0x00000011 
+ 00025632  0x000065a2 hfetch  0x00000001 , 0x00008085 
+ 00025633  0x000065a3 and_into  0x000000fd , 0x0000003f 
+ 00025634  0x000065a4 hstore  0x00000001 , 0x00008085 
+ 00025635  0x000065a5 call  0x00006419 
+ 00025636  0x000065a6 arg  0x000055aa , 0x00000011 
+ 00025637  0x000065a7 fetch  0x00000002 , 0x000001fe 
+ 00025638  0x000065a8 ifetcht  0x00000002 , 0x00000006 
+ 00025639  0x000065a9 isub  0x00000011 , 0x0000003e 
+ 00025640  0x000065aa rtn 
+ 00025641  0x000065ad arg  0x00000002 , 0x00000002 
+ 00025642  0x000065ae arg  0x00000204 , 0x00000011 
+ 00025643  0x000065af call  0x00006419 
+ 00025644  0x000065b0 fetch  0x00000002 , 0x00000204 
+ 00025645  0x000065b1 store  0x00000002 , 0x000001f7 
+ 00025646  0x000065b2 call  0x00006430 , 0x00000028 
+ 00025647  0x000065b3 rtn 
+ 00025648  0x000065b6 arg  0x00000010 , 0x00000002 
+ 00025649  0x000065b7 arg  0x00000206 , 0x00000011 
+ 00025650  0x000065b8 hfetch  0x00000001 , 0x00008085 
+ 00025651  0x000065b9 and_into  0x000000fd , 0x0000003f 
+ 00025652  0x000065ba hstore  0x00000001 , 0x00008085 
+ 00025653  0x000065bb call  0x00006419 
+ 00025654  0x000065bc arg  0x00000206 , 0x00000006 
+ 00025655  0x000065bd arg  0x00000010 , 0x00000039 
+ 00025656  0x000065be call  0x00007478 
+ 00025657  0x000065bf call  0x00007428 
+ 00025658  0x000065c0 call  0x00007491 
+ 00025659  0x000065c1 branch  0x00007422 
+ 00025660  0x000065c4 disable  0x0000002d 
+ 00025661  0x000065c5 call  0x0000641e 
+ 00025662  0x000065c6 nrtn  0x00000005 
+ 00025663  0x000065c7 enable  0x0000002d 
+ 00025664  0x000065c8 jam  0x00000080 , 0x00008023 
+ 00025665  0x000065c9 jam  0x00000000 , 0x00008022 
+ 00025666  0x000065ca jam  0x00000000 , 0x00008024 
+ 00025667  0x000065cb arg  0x00008025 , 0x00000011 
+ 00025668  0x000065cc call  0x00006415 
+ 00025669  0x000065cd jam  0x00000000 , 0x00008023 
+ 00025670  0x000065cf arg  0x00000006 , 0x00000002 
+ 00025671  0x000065d0 call  0x0000641f 
+ 00025672  0x000065d1 nrtn  0x00000005 
+ 00025673  0x000065d2 ifetch  0x00000002 , 0x00000006 
+ 00025674  0x000065d3 iforce  0x00000011 
+ 00025675  0x000065d4 call  0x00006419 
+ 00025676  0x000065d5 branch  0x00006446 
+ 00025677  0x000065da call  0x00007f99 
+ 00025678  0x000065db setarg  0x00001000 
+ 00025679  0x000065dc store  0x00000002 , 0x000001f7 
+ 00025680  0x000065dd arg  0x000065e5 , 0x00000013 
+ 00025681  0x000065de arg  0x00000002 , 0x00000039 
+ 00025682  0x000065e0 call  0x0000641e 
+ 00025683  0x000065e1 nrtn  0x00000005 
+ 00025684  0x000065e2 fetch  0x00000002 , 0x000001f7 
+ 00025685  0x000065e3 byteswap  0x0000003f , 0x0000003f 
+ 00025686  0x000065e4 iadd  0x00000002 , 0x0000003f 
+ 00025687  0x000065e5 byteswap  0x0000003f , 0x0000003f 
+ 00025688  0x000065e6 store  0x00000002 , 0x000001f7 
+ 00025689  0x000065e7 loop  0x00006452 
+ 00025690  0x000065e8 branch  0x00006446 
+ 00025691  0x000065eb call  0x00007f99 
+ 00025692  0x000065ec disable  0x00000028 
+ 00025693  0x000065ed call  0x0000666a 
+ 00025694  0x000065ee setarg  0x00000000 
+ 00025695  0x000065ef arg  0x000001f3 , 0x00000011 
+ 00025696  0x000065f0 arg  0x00000002 , 0x00000002 
+ 00025697  0x000065f1 call  0x000066b3 
+ 00025698  0x000065f2 fetch  0x00000002 , 0x000001f3 
+ 00025699  0x000065f3 bbit0  0x00000007 , 0x0000646e 
+ 00025700  0x000065f4 jam  0x00000025 , 0x00008050 
+ 00025701  0x000065f5 setarg  0x000007f0 
+ 00025702  0x000065f6 arg  0x00000206 , 0x00000011 
+ 00025703  0x000065f7 arg  0x00000010 , 0x00000002 
+ 00025704  0x000065f8 call  0x000066b3 
+ 00025705  0x000065f9 jam  0x00000008 , 0x00008006 
+ 00025706  0x000065fa set1  0x0000002b , 0x00000000 
+ 00025707  0x000065fb arg  0x00000206 , 0x00000006 
+ 00025708  0x000065fc call  0x00007484 
+ 00025709  0x000065fd enable  0x00000028 
+ 00025710  0x000065ff jam  0x00000000 , 0x000041da 
+ 00025711  0x00006601 call  0x000064b0 
+ 00025712  0x00006602 fetch  0x00000002 , 0x000001f3 
+ 00025713  0x00006603 byteswap  0x0000003f , 0x0000003f 
+ 00025714  0x00006604 arg  0x000007ff , 0x00000002 
+ 00025715  0x00006605 iand  0x00000002 , 0x0000003f 
+ 00025716  0x00006606 branch  0x0000647b , 0x00000005 
+ 00025717  0x00006607 call  0x0000666f 
+ 00025718  0x00006608 arg  0x000066b8 , 0x00000013 
+ 00025719  0x00006609 call  0x00006430 , 0x00000028 
+ 00025720  0x0000660a call  0x0000643c 
+ 00025721  0x0000660b fetch  0x00000001 , 0x000001f2 
+ 00025722  0x0000660c bbit0  0x00000000 , 0x0000646f 
+ 00025723  0x0000660f call  0x0000666d 
+ 00025724  0x00006610 jam  0x00000000 , 0x000041da 
+ 00025725  0x00006612 call  0x000064b0 
+ 00025726  0x00006613 call  0x000065c2 
+ 00025727  0x00006614 fetch  0x00000001 , 0x000001f3 
+ 00025728  0x00006615 bbit1  0x00000006 , 0x0000648e 
+ 00025729  0x00006616 call  0x000064aa 
+ 00025730  0x00006617 nbranch  0x00006486 , 0x0000002d 
+ 00025731  0x00006618 fetch  0x00000001 , 0x000001f2 
+ 00025732  0x00006619 bbit0  0x00000000 , 0x0000647d 
+ 00025733  0x0000661a branch  0x0000649b 
+ 00025734  0x0000661c call  0x000065bf 
+ 00025735  0x0000661d fetch  0x00000001 , 0x000001f3 
+ 00025736  0x0000661e bbit1  0x00000006 , 0x0000648e 
+ 00025737  0x0000661f call  0x000064aa 
+ 00025738  0x00006620 nbranch  0x0000648e , 0x0000002d 
+ 00025739  0x00006621 fetch  0x00000001 , 0x000001f2 
+ 00025740  0x00006622 bbit0  0x00000000 , 0x0000647d 
+ 00025741  0x00006623 branch  0x0000649b 
+ 00025742  0x00006626 jam  0x00000000 , 0x000041da 
+ 00025743  0x00006628 call  0x000064b0 
+ 00025744  0x00006629 fetch  0x00000001 , 0x000001f3 
+ 00025745  0x0000662a bbit1  0x00000005 , 0x0000649b 
+ 00025746  0x0000662b setarg  0x00000000 
+ 00025747  0x0000662c store  0x00000003 , 0x000001f6 
+ 00025748  0x0000662d call  0x00006502 
+ 00025749  0x0000662e arg  0x00006578 , 0x00000013 
+ 00025750  0x0000662f call  0x00006429 
+ 00025751  0x00006630 call  0x0000643c 
+ 00025752  0x00006631 nbranch  0x0000649b , 0x0000002d 
+ 00025753  0x00006632 fetch  0x00000001 , 0x000001f2 
+ 00025754  0x00006633 bbit0  0x00000000 , 0x0000648f 
+ 00025755  0x00006636 bmark1  0x0000002b , 0x0000649d 
+ 00025756  0x00006637 call  0x000064a3 
+ 00025757  0x00006639 fetch  0x00000001 , 0x000001f3 
+ 00025758  0x0000663a bbit0  0x00000004 , 0x000064a3 
+ 00025759  0x0000663b jam  0x00000021 , 0x00008050 
+ 00025760  0x0000663c call  0x00004c0e 
+ 00025761  0x0000663e call  0x00004c2e 
+ 00025762  0x0000663f branch  0x000064a1 
+ 00025763  0x00006642 setarg  0x00000000 
+ 00025764  0x00006643 store  0x00000008 , 0x00000206 
+ 00025765  0x00006644 store  0x00000008 , 0x0000020e 
+ 00025766  0x00006645 force  0x00000004 , 0x00000038 
+ 00025767  0x00006646 call  0x00007492 
+ 00025768  0x00006647 jam  0x00000021 , 0x00008050 
+ 00025769  0x00006648 rtn 
+ 00025770  0x0000664c setarg  0x00000000 
+ 00025771  0x0000664d store  0x00000002 , 0x000001f7 
+ 00025772  0x0000664e arg  0x000065e5 , 0x00000013 
+ 00025773  0x0000664f call  0x000065a3 
+ 00025774  0x00006650 call  0x00006429 
+ 00025775  0x00006651 branch  0x0000643c 
+ 00025776  0x00006655 fetch  0x00000001 , 0x000041da 
+ 00025777  0x00006656 increase  0x00000001 , 0x0000003f 
+ 00025778  0x00006657 sub  0x0000003f , 0x00000003 , 0x0000003e 
+ 00025779  0x00006658 nbranch  0x000064b6 , 0x00000002 
+ 00025780  0x00006659 store  0x00000001 , 0x000041da 
+ 00025781  0x0000665a rtn 
+ 00025782  0x0000665d call  0x000064a3 
+ 00025783  0x0000665e call  0x00007fa1 
+ 00025784  0x0000665f rtn 
+ 00025785  0x00006664 fetch  0x00000001 , 0x000001f2 
+ 00025786  0x00006665 lshift  0x0000003f , 0x0000003f 
+ 00025787  0x00006666 setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00025788  0x00006667 isolate0  0x0000000f , 0x00000011 
+ 00025789  0x00006668 rtn  0x00000001 
+ 00025790  0x00006669 store  0x00000001 , 0x000001f2 
+ 00025791  0x0000666a rtn 
+ 00025792  0x0000666e hfetch  0x00000001 , 0x00008085 
+ 00025793  0x0000666f rtnbit0  0x00000001 
+ 00025794  0x00006670 branch  0x000064c6 
+ 00025795  0x00006672 hfetch  0x00000001 , 0x0000812c 
+ 00025796  0x00006673 qisolate1  0x0000003f 
+ 00025797  0x00006674 rtn  0x00000001 
+ 00025798  0x00006676 hfetch  0x00000001 , 0x00008108 
+ 00025799  0x00006677 bbit0  0x00000001 , 0x000064c3 
+ 00025800  0x00006678 call  0x00007422 
+ 00025801  0x00006679 branch  0x000064c3 
+ 00025802  0x0000667e fetch  0x00000002 , 0x00004199 
+ 00025803  0x0000667f rtn  0x00000034 
+ 00025804  0x00006680 jam  0x00000080 , 0x00008023 
+ 00025805  0x00006681 jam  0x00000000 , 0x00008022 
+ 00025806  0x00006682 jam  0x00000000 , 0x00008024 
+ 00025807  0x00006683 fetcht  0x00000002 , 0x0000419b 
+ 00025808  0x00006684 lshift2  0x00000002 , 0x00000039 
+ 00025809  0x00006685 iforce  0x00000006 
+ 00025810  0x00006687 ifetch  0x00000001 , 0x00000006 
+ 00025811  0x00006688 hstore  0x00000001 , 0x00008025 
+ 00025812  0x00006689 loop  0x000064d2 
+ 00025813  0x0000668a jam  0x00000000 , 0x00008023 
+ 00025814  0x0000668b rtn 
+ 00025815  0x00006691 bpatchx  0x0000008d , 0x00004031 
+ 00025816  0x00006692 call  0x000064dd 
+ 00025817  0x00006693 branch  0x000063f2 
+ 00025818  0x00006696 call  0x000064dd 
+ 00025819  0x00006697 call  0x000063ee 
+ 00025820  0x00006698 branch  0x000063f6 
+ 00025821  0x0000669b fetch  0x00000001 , 0x00004212 
+ 00025822  0x0000669c hstore  0x00000001 , 0x00008086 
+ 00025823  0x0000669d fetch  0x00000001 , 0x00004213 
+ 00025824  0x0000669e hstore  0x00000001 , 0x00008087 
+ 00025825  0x0000669f setarg  0x000001f5 
+ 00025826  0x000066a0 hstore  0x00000002 , 0x0000808a 
+ 00025827  0x000066a1 setarg  0x000001fa 
+ 00025828  0x000066a2 hstore  0x00000002 , 0x0000808c 
+ 00025829  0x000066a3 branch  0x000063ee 
+ 00025830  0x000066a6 hfetch  0x00000001 , 0x00008086 
+ 00025831  0x000066a7 set1  0x00000007 , 0x0000003f 
+ 00025832  0x000066a8 hstore  0x00000001 , 0x00008086 
+ 00025833  0x000066a9 set0  0x00000007 , 0x0000003f 
+ 00025834  0x000066aa hstore  0x00000001 , 0x00008086 
+ 00025835  0x000066ab rtn 
+ 00025836  0x000066b0 set1  0x00000007 , 0x0000003f 
+ 00025837  0x000066b1 store  0x00000002 , 0x000001f5 
+ 00025838  0x000066b2 bpatchx  0x0000008e , 0x00004031 
+ 00025839  0x000066b3 jam  0x00000002 , 0x00008088 
+ 00025840  0x000066b4 jam  0x00000000 , 0x0000808e 
+ 00025841  0x000066b5 jam  0x00000002 , 0x00008006 
+ 00025842  0x000066b6 branch  0x000064fc 
+ 00025843  0x000066ba force  0x00000001 , 0x00000002 
+ 00025844  0x000066be store  0x00000001 , 0x000001f5 
+ 00025845  0x000066bf bpatchx  0x0000008f , 0x00004031 
+ 00025846  0x000066c0 jam  0x00000001 , 0x00008088 
+ 00025847  0x000066c1 hstoret  0x00000002 , 0x0000808e 
+ 00025848  0x000066c2 jam  0x00000002 , 0x00008006 
+ 00025849  0x000066c3 call  0x000064fc 
+ 00025850  0x000066c4 fetch  0x00000001 , 0x000001fa 
+ 00025851  0x000066c5 rtn 
+ 00025852  0x000066c8 fetch  0x00000002 , 0x000040d6 
+ 00025853  0x000066c9 increase  0x00000001 , 0x0000003f 
+ 00025854  0x000066ca store  0x00000002 , 0x000040d6 
+ 00025855  0x000066cb hfetch  0x00000001 , 0x0000812c 
+ 00025856  0x000066cc bbit0  0x00000003 , 0x000064fc 
+ 00025857  0x000066cd rtn 
+ 00025858  0x000066d0 jam  0x00000040 , 0x00008086 
+ 00025859  0x000066d1 jam  0x00000000 , 0x00008087 
+ 00025860  0x000066d2 hfetch  0x00000001 , 0x00008081 
+ 00025861  0x000066d3 set0  0x00000000 , 0x0000003f 
+ 00025862  0x000066d4 set1  0x00000001 , 0x0000003f 
+ 00025863  0x000066d5 hstore  0x00000001 , 0x00008081 
+ 00025864  0x000066d6 setarg  0x00000000 
+ 00025865  0x000066d7 store  0x00000004 , 0x000001f5 
+ 00025866  0x000066d8 rtn 
+ 00025867  0x000066dc setarg  0x00000000 
+ 00025868  0x000066dd hstore  0x00000002 , 0x0000808e 
+ 00025869  0x000066de setarg  0x00000001 
+ 00025870  0x000066df hstore  0x00000002 , 0x00008088 
+ 00025871  0x000066e0 setarg  0x000001f5 
+ 00025872  0x000066e1 hstore  0x00000002 , 0x0000808a 
+ 00025873  0x000066e2 jam  0x00000006 , 0x000001f5 
+ 00025874  0x000066e3 jam  0x00000002 , 0x00008006 
+ 00025875  0x000066e4 branch  0x000064fc 
+ 00025876  0x000066f4 disable  0x00000028 
+ 00025877  0x000066f5 copy  0x0000003f , 0x00000012 
+ 00025878  0x000066f6 fetch  0x00000001 , 0x00004239 
+ 00025879  0x000066f7 rtnne  0x00000000 
+ 00025880  0x000066f8 enable  0x00000028 
+ 00025881  0x000066f9 copy  0x00000012 , 0x0000003f 
+ 00025882  0x000066fa branch  0x00006522 
+ 00025883  0x000066fe fetch  0x00000001 , 0x00004239 
+ 00025884  0x000066ff beq  0x00000001 , 0x00006522 
+ 00025885  0x00006700 beq  0x00000002 , 0x00006528 
+ 00025886  0x00006701 beq  0x00000003 , 0x00006530 
+ 00025887  0x00006702 beq  0x00000004 , 0x00006537 
+ 00025888  0x00006703 beq  0x00000005 , 0x0000653d 
+ 00025889  0x00006704 rtn 
+ 00025890  0x00006707 store  0x00000003 , 0x00004232 
+ 00025891  0x00006708 copy  0x00000011 , 0x0000003f 
+ 00025892  0x00006709 store  0x00000002 , 0x00004235 
+ 00025893  0x0000670a storet  0x00000002 , 0x00004237 
+ 00025894  0x0000670b jam  0x00000002 , 0x00004239 
+ 00025895  0x0000670c branch  0x00006502 
+ 00025896  0x0000670e call  0x00006502 
+ 00025897  0x0000670f jam  0x00000003 , 0x00004239 
+ 00025898  0x00006710 call  0x0000650b 
+ 00025899  0x00006711 arg  0x000001f5 , 0x00000011 
+ 00025900  0x00006712 fetch  0x00000003 , 0x00004232 
+ 00025901  0x00006713 jam  0x00000004 , 0x00008088 
+ 00025902  0x00006714 arg  0x00000020 , 0x00000002 
+ 00025903  0x00006715 branch  0x00006556 
+ 00025904  0x00006718 call  0x00006502 
+ 00025905  0x00006719 call  0x0000650b 
+ 00025906  0x0000671a setarg  0x00000005 
+ 00025907  0x0000671b call  0x000064f3 
+ 00025908  0x0000671c rtnbit1  0x00000000 
+ 00025909  0x0000671d jam  0x00000004 , 0x00004239 
+ 00025910  0x0000671e rtn 
+ 00025911  0x00006720 call  0x00006502 
+ 00025912  0x00006721 jam  0x00000005 , 0x00004239 
+ 00025913  0x00006722 call  0x0000650b 
+ 00025914  0x00006723 call  0x0000654a 
+ 00025915  0x00006724 call  0x00006552 
+ 00025916  0x00006725 branch  0x00006545 
+ 00025917  0x00006727 call  0x00006502 
+ 00025918  0x00006728 call  0x0000650b 
+ 00025919  0x00006729 setarg  0x00000005 
+ 00025920  0x0000672a call  0x000064f3 
+ 00025921  0x0000672b rtnbit1  0x00000000 
+ 00025922  0x0000672c jam  0x00000000 , 0x00004239 
+ 00025923  0x0000672d fetch  0x00000002 , 0x00004201 
+ 00025924  0x0000672e branch  0x00007f9c 
+ 00025925  0x00006730 fetch  0x00000004 , 0x00000aa2 
+ 00025926  0x00006731 fetcht  0x00000002 , 0x00004235 
+ 00025927  0x00006732 increase  0xfffffffc , 0x00000002 
+ 00025928  0x00006733 istore  0x00000004 , 0x00000002 
+ 00025929  0x00006734 rtn 
+ 00025930  0x00006736 fetcht  0x00000002 , 0x00004235 
+ 00025931  0x00006737 copy  0x00000002 , 0x00000011 
+ 00025932  0x00006738 increase  0xfffffffc , 0x00000002 
+ 00025933  0x00006739 ifetch  0x00000004 , 0x00000002 
+ 00025934  0x0000673a store  0x00000004 , 0x00000aa2 
+ 00025935  0x0000673b fetcht  0x00000002 , 0x00004237 
+ 00025936  0x0000673c fetch  0x00000003 , 0x00004232 
+ 00025937  0x0000673d rtn 
+ 00025938  0x00006742 increase  0x00000004 , 0x00000002 
+ 00025939  0x00006743 hstoret  0x00000002 , 0x00008088 
+ 00025940  0x00006744 arg  0x00000002 , 0x00000002 
+ 00025941  0x00006745 increase  0xfffffffc , 0x00000011 
+ 00025942  0x00006748 istoret  0x00000001 , 0x00000011 
+ 00025943  0x00006749 rshift16  0x0000003f , 0x00000002 
+ 00025944  0x0000674a istoret  0x00000001 , 0x00000005 
+ 00025945  0x0000674b rshift8  0x0000003f , 0x00000002 
+ 00025946  0x0000674c istoret  0x00000001 , 0x00000005 
+ 00025947  0x0000674d istore  0x00000001 , 0x00000005 
+ 00025948  0x0000674e deposit  0x00000011 
+ 00025949  0x0000674f hstore  0x00000002 , 0x0000808a 
+ 00025950  0x00006750 setarg  0x00000000 
+ 00025951  0x00006751 hstore  0x00000002 , 0x0000808e 
+ 00025952  0x00006752 jam  0x00000002 , 0x00008006 
+ 00025953  0x00006753 branch  0x000064fc 
+ 00025954  0x00006758 hstoret  0x00000002 , 0x0000808e 
+ 00025955  0x00006759 rshift16  0x0000003f , 0x00000002 
+ 00025956  0x0000675a storet  0x00000001 , 0x000001f6 
+ 00025957  0x0000675b rshift8  0x0000003f , 0x00000002 
+ 00025958  0x0000675c storet  0x00000001 , 0x000001f7 
+ 00025959  0x0000675d store  0x00000001 , 0x000001f8 
+ 00025960  0x0000675e setarg  0x00000004 
+ 00025961  0x0000675f hstore  0x00000002 , 0x00008088 
+ 00025962  0x00006760 jam  0x00000003 , 0x000001f5 
+ 00025963  0x00006761 setarg  0x000001f5 
+ 00025964  0x00006762 hstore  0x00000002 , 0x0000808a 
+ 00025965  0x00006763 deposit  0x00000011 
+ 00025966  0x00006764 hstore  0x00000002 , 0x0000808c 
+ 00025967  0x00006765 hfetch  0x00000001 , 0x00008086 
+ 00025968  0x00006766 isolate0  0x0000000f , 0x00000011 
+ 00025969  0x00006767 setflag  0x00000001 , 0x00000006 , 0x0000003f 
+ 00025970  0x00006768 hstore  0x00000001 , 0x00008086 
+ 00025971  0x00006769 jam  0x00000002 , 0x00008006 
+ 00025972  0x0000676b hfetch  0x00000001 , 0x0000812c 
+ 00025973  0x0000676c bbit1  0x00000007 , 0x00006574 
+ 00025974  0x0000676d arg  0x00000003 , 0x00000007 
+ 00025975  0x0000676e branch  0x000064fc 
+ 00025976  0x00006773 hstoret  0x00000002 , 0x0000808e 
+ 00025977  0x00006774 setarg  0x00000004 
+ 00025978  0x00006775 hstore  0x00000002 , 0x00008088 
+ 00025979  0x00006776 jam  0x00000003 , 0x000001f5 
+ 00025980  0x00006777 setarg  0x000001f5 
+ 00025981  0x00006778 hstore  0x00000002 , 0x0000808a 
+ 00025982  0x00006779 deposit  0x00000011 
+ 00025983  0x0000677a hstore  0x00000002 , 0x0000808c 
+ 00025984  0x0000677b hfetch  0x00000001 , 0x00008086 
+ 00025985  0x0000677c isolate0  0x0000000f , 0x00000011 
+ 00025986  0x0000677d setflag  0x00000001 , 0x00000006 , 0x0000003f 
+ 00025987  0x0000677e hstore  0x00000001 , 0x00008086 
+ 00025988  0x0000677f jam  0x00000002 , 0x00008006 
+ 00025989  0x00006781 hfetch  0x00000001 , 0x0000812c 
+ 00025990  0x00006782 bbit1  0x00000007 , 0x00006585 
+ 00025991  0x00006783 arg  0x00000003 , 0x00000007 
+ 00025992  0x00006784 call  0x000064c0 
+ 00025993  0x00006785 call  0x000064fc 
+ 00025994  0x00006786 isolate1  0x00000002 , 0x0000003f 
+ 00025995  0x00006787 call  0x000064b9 
+ 00025996  0x00006788 fetch  0x00000001 , 0x000001f6 
+ 00025997  0x00006789 lshift16  0x0000003f , 0x00000012 
+ 00025998  0x0000678a fetch  0x00000001 , 0x000001f7 
+ 00025999  0x0000678b lshift8  0x0000003f , 0x0000003f 
+ 00026000  0x0000678c ior  0x00000012 , 0x00000012 
+ 00026001  0x0000678d fetch  0x00000001 , 0x000001f8 
+ 00026002  0x0000678e ior  0x00000012 , 0x0000003f 
+ 00026003  0x0000678f iadd  0x00000002 , 0x0000003f 
+ 00026004  0x00006790 store  0x00000001 , 0x000001f8 
+ 00026005  0x00006791 rshift8  0x0000003f , 0x0000003f 
+ 00026006  0x00006792 store  0x00000001 , 0x000001f7 
+ 00026007  0x00006793 rshift8  0x0000003f , 0x0000003f 
+ 00026008  0x00006794 store  0x00000001 , 0x000001f6 
+ 00026009  0x00006795 rtn 
+ 00026010  0x0000679b jam  0x00000001 , 0x00008010 
+ 00026011  0x0000679c rtn 
+ 00026012  0x000067a3 jam  0x0000000c , 0x00008091 
+ 00026013  0x000067a4 jam  0x0000000d , 0x00008092 
+ 00026014  0x000067a5 jam  0x0000000d , 0x00008093 
+ 00026015  0x000067a6 jam  0x0000000d , 0x00008094 
+ 00026016  0x000067a7 jam  0x0000000d , 0x00008095 
+ 00026017  0x000067a8 jam  0x0000000c , 0x00008096 
+ 00026018  0x000067a9 branch  0x000065a9 
+ 00026019  0x000067ad jam  0x00000005 , 0x00008091 
+ 00026020  0x000067ae jam  0x00000007 , 0x00008092 
+ 00026021  0x000067af jam  0x00000007 , 0x00008093 
+ 00026022  0x000067b0 jam  0x00000007 , 0x00008094 
+ 00026023  0x000067b1 jam  0x00000007 , 0x00008095 
+ 00026024  0x000067b2 jam  0x00000005 , 0x00008096 
+ 00026025  0x000067b4 hfetch  0x00000001 , 0x0000807b 
+ 00026026  0x000067b5 or_into  0x000000c0 , 0x0000003f 
+ 00026027  0x000067b6 hstore  0x00000001 , 0x0000807b 
+ 00026028  0x000067b7 hfetch  0x00000001 , 0x00008081 
+ 00026029  0x000067b8 or_into  0x00000010 , 0x0000003f 
+ 00026030  0x000067b9 hstore  0x00000001 , 0x00008081 
+ 00026031  0x000067ba rtn 
+ 00026032  0x000067bf hfetch  0x00000001 , 0x0000812c 
+ 00026033  0x000067c0 bbit0  0x00000005 , 0x000065b0 
+ 00026034  0x000067c1 rtn 
+ 00026035  0x000067ca hstore  0x00000002 , 0x00008098 
+ 00026036  0x000067cb deposit  0x00000011 
+ 00026037  0x000067cc hstore  0x00000002 , 0x0000809a 
+ 00026038  0x000067cd deposit  0x00000012 
+ 00026039  0x000067ce hstore  0x00000002 , 0x0000809c 
+ 00026040  0x000067cf deposit  0x00000002 
+ 00026041  0x000067d0 hstore  0x00000002 , 0x0000809e 
+ 00026042  0x000067d1 arg  0x00000001 , 0x00000002 
+ 00026043  0x000067d2 nsetflag  0x00000034 , 0x00000001 , 0x00000002 
+ 00026044  0x000067d3 hstore  0x00000001 , 0x00008090 
+ 00026045  0x000067d4 jam  0x00000004 , 0x00008006 
+ 00026046  0x000067d5 branch  0x000065b0 
+ 00026047  0x000067d9 set1  0x00000028 , 0x00000000 
+ 00026048  0x000067da jam  0x00000008 , 0x00004211 
+ 00026049  0x000067db rtn 
+ 00026050  0x000067de set0  0x00000028 , 0x00000000 
+ 00026051  0x000067df jam  0x00000020 , 0x00004211 
+ 00026052  0x000067e0 rtn 
+ 00026053  0x000067e4 fetch  0x00000001 , 0x00004203 
+ 00026054  0x000067e5 iadd  0x00000012 , 0x0000003f 
+ 00026055  0x000067e6 store  0x00000001 , 0x000001f7 
+ 00026056  0x000067e7 branch  0x000065cc 
+ 00026057  0x000067ea fetch  0x00000002 , 0x000001f7 
+ 00026058  0x000067eb byteswap  0x0000003f , 0x0000003f 
+ 00026059  0x000067ec store  0x00000001 , 0x000001f7 
+ 00026060  0x000067f2 setarg  0x00000003 
+ 00026061  0x000067f3 hstore  0x00000002 , 0x00008098 
+ 00026062  0x000067f4 jam  0x000000a0 , 0x000001f6 
+ 00026063  0x000067f5 jam  0x000000a1 , 0x000001f8 
+ 00026064  0x000067f6 branch  0x000065eb 
+ 00026065  0x000067fd storet  0x00000002 , 0x00000aa2 
+ 00026066  0x000067fe call  0x000065d6 
+ 00026067  0x000067ff fetcht  0x00000002 , 0x00000aa2 
+ 00026068  0x00006800 call  0x00006606 
+ 00026069  0x00006801 branch  0x000065dd 
+ 00026070  0x00006804 fetch  0x00000001 , 0x0000423a 
+ 00026071  0x00006805 rtneq  0x000000ff 
+ 00026072  0x00006806 bbit0  0x00000006 , 0x000065db 
+ 00026073  0x00006807 setarg  0x000249f0 
+ 00026074  0x00006808 call  0x00002a8f 
+ 00026075  0x0000680a fetcht  0x00000001 , 0x0000423a 
+ 00026076  0x0000680b branch  0x00006829 
+ 00026077  0x0000680e fetcht  0x00000001 , 0x0000423a 
+ 00026078  0x0000680f branch  0x00006825 
+ 00026079  0x00006815 bpatchx  0x00000090 , 0x00004032 
+ 00026080  0x00006816 bmark1  0x00000028 , 0x000065c5 
+ 00026081  0x00006817 fetch  0x00000002 , 0x00004203 
+ 00026082  0x00006818 iadd  0x00000012 , 0x0000003f 
+ 00026083  0x00006819 byteswap  0x0000003f , 0x0000003f 
+ 00026084  0x0000681a store  0x00000002 , 0x000001f7 
+ 00026085  0x0000681e bpatchx  0x00000091 , 0x00004032 
+ 00026086  0x0000681f bmark1  0x00000028 , 0x000065c9 
+ 00026087  0x00006820 setarg  0x00000004 
+ 00026088  0x00006821 hstore  0x00000002 , 0x00008098 
+ 00026089  0x00006822 jam  0x000000a0 , 0x000001f6 
+ 00026090  0x00006823 jam  0x000000a1 , 0x000001f9 
+ 00026091  0x00006825 setarg  0x000001f6 
+ 00026092  0x00006826 hstore  0x00000002 , 0x0000809a 
+ 00026093  0x00006827 hstoret  0x00000002 , 0x0000809e 
+ 00026094  0x00006828 deposit  0x00000011 
+ 00026095  0x00006829 hstore  0x00000002 , 0x0000809c 
+ 00026096  0x0000682a setarg  0x00000002 
+ 00026097  0x0000682b isolate0  0x0000000f , 0x00000011 
+ 00026098  0x0000682c setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00026099  0x0000682d hstore  0x00000001 , 0x00008090 
+ 00026100  0x0000682e jam  0x00000004 , 0x00008006 
+ 00026101  0x0000682f arg  0x00000005 , 0x00000007 
+ 00026102  0x00006830 call  0x000064c0 
+ 00026103  0x00006831 call  0x000065b0 
+ 00026104  0x00006832 isolate1  0x00000004 , 0x0000003f 
+ 00026105  0x00006833 call  0x000064b9 
+ 00026106  0x00006834 bmark1  0x00000028 , 0x00006601 
+ 00026107  0x00006835 fetch  0x00000002 , 0x000001f7 
+ 00026108  0x00006836 byteswap  0x0000003f , 0x0000003f 
+ 00026109  0x00006837 iadd  0x00000002 , 0x0000003f 
+ 00026110  0x00006838 byteswap  0x0000003f , 0x0000003f 
+ 00026111  0x00006839 store  0x00000002 , 0x000001f7 
+ 00026112  0x0000683a rtn 
+ 00026113  0x0000683d fetch  0x00000001 , 0x000001f7 
+ 00026114  0x0000683e iadd  0x00000002 , 0x0000003f 
+ 00026115  0x0000683f byteswap  0x0000003f , 0x0000003f 
+ 00026116  0x00006840 store  0x00000002 , 0x000001f7 
+ 00026117  0x00006841 rtn 
+ 00026118  0x00006848 fetch  0x00000002 , 0x00004203 
+ 00026119  0x00006849 iadd  0x00000012 , 0x0000003f 
+ 00026120  0x0000684d store  0x00000002 , 0x00000a9a 
+ 00026121  0x0000684e bpatchx  0x00000092 , 0x00004032 
+ 00026122  0x0000684f storet  0x00000002 , 0x00000aa2 
+ 00026123  0x00006850 copy  0x00000011 , 0x0000003f 
+ 00026124  0x00006851 store  0x00000002 , 0x00000ab9 
+ 00026125  0x00006853 call  0x0000661d 
+ 00026126  0x00006855 fetcht  0x00000002 , 0x00000ab2 
+ 00026127  0x00006856 fetch  0x00000002 , 0x00000ab9 
+ 00026128  0x00006857 copy  0x0000003f , 0x00000011 
+ 00026129  0x00006858 fetch  0x00000002 , 0x00000a9a 
+ 00026130  0x0000685a call  0x0000663d 
+ 00026131  0x0000685c fetch  0x00000002 , 0x00000ab2 
+ 00026132  0x0000685d fetcht  0x00000002 , 0x00000ab9 
+ 00026133  0x0000685e iadd  0x00000002 , 0x00000002 
+ 00026134  0x0000685f storet  0x00000002 , 0x00000ab9 
+ 00026135  0x00006860 fetcht  0x00000002 , 0x00000a9a 
+ 00026136  0x00006861 iadd  0x00000002 , 0x00000002 
+ 00026137  0x00006862 storet  0x00000002 , 0x00000a9a 
+ 00026138  0x00006863 fetch  0x00000002 , 0x00000aa2 
+ 00026139  0x00006864 nbranch  0x0000660d , 0x00000034 
+ 00026140  0x00006865 rtn 
+ 00026141  0x0000686e bpatchx  0x00000093 , 0x00004032 
+ 00026142  0x0000686f fetch  0x00000001 , 0x00004211 
+ 00026143  0x00006870 increase  0xffffffff , 0x0000003f 
+ 00026144  0x00006871 fetcht  0x00000002 , 0x00000a9a 
+ 00026145  0x00006872 ior  0x00000002 , 0x0000003f 
+ 00026146  0x00006873 increase  0x00000001 , 0x0000003f 
+ 00026147  0x00006874 store  0x00000003 , 0x00000ab6 
+ 00026148  0x00006876 fetch  0x00000002 , 0x00000aa2 
+ 00026149  0x00006877 iadd  0x00000002 , 0x0000003f 
+ 00026150  0x00006879 fetcht  0x00000003 , 0x00000ab6 
+ 00026151  0x0000687a isub  0x00000002 , 0x0000003f 
+ 00026152  0x0000687b nbranch  0x0000662f , 0x00000002 
+ 00026153  0x0000687c store  0x00000002 , 0x00000aa2 
+ 00026154  0x0000687d fetch  0x00000003 , 0x00000ab6 
+ 00026155  0x0000687e fetcht  0x00000002 , 0x00000a9a 
+ 00026156  0x0000687f isub  0x00000002 , 0x0000003f 
+ 00026157  0x00006880 store  0x00000002 , 0x00000ab2 
+ 00026158  0x00006881 rtn 
+ 00026159  0x00006883 fetch  0x00000002 , 0x00000aa2 
+ 00026160  0x00006884 store  0x00000002 , 0x00000ab2 
+ 00026161  0x00006885 setarg  0x00000000 
+ 00026162  0x00006886 store  0x00000002 , 0x00000aa2 
+ 00026163  0x00006887 rtn 
+ 00026164  0x0000688a increase  0x00000002 , 0x00000002 
+ 00026165  0x0000688b hstoret  0x00000002 , 0x00008098 
+ 00026166  0x0000688c increase  0xfffffffe , 0x00000011 
+ 00026167  0x0000688d ifetcht  0x00000003 , 0x00000011 
+ 00026168  0x0000688e copy  0x00000002 , 0x00000012 
+ 00026169  0x0000688f arg  0x000000a0 , 0x00000002 
+ 00026170  0x00006890 istoret  0x00000001 , 0x00000011 
+ 00026171  0x00006892 istore  0x00000001 , 0x00000005 
+ 00026172  0x00006893 branch  0x0000664a 
+ 00026173  0x00006897 copy  0x0000003f , 0x00000012 
+ 00026174  0x00006898 bpatchx  0x00000094 , 0x00004032 
+ 00026175  0x00006899 bmark1  0x00000028 , 0x00006634 
+ 00026176  0x0000689a copy  0x00000012 , 0x0000003f 
+ 00026177  0x0000689b increase  0x00000003 , 0x00000002 
+ 00026178  0x0000689c hstoret  0x00000002 , 0x00008098 
+ 00026179  0x0000689d increase  0xfffffffd , 0x00000011 
+ 00026180  0x0000689e ifetcht  0x00000003 , 0x00000011 
+ 00026181  0x0000689f copy  0x00000002 , 0x00000012 
+ 00026182  0x000068a0 arg  0x000000a0 , 0x00000002 
+ 00026183  0x000068a1 istoret  0x00000001 , 0x00000011 
+ 00026184  0x000068a2 byteswap  0x0000003f , 0x0000003f 
+ 00026185  0x000068a3 istore  0x00000002 , 0x00000005 
+ 00026186  0x000068a5 deposit  0x00000011 
+ 00026187  0x000068a6 hstore  0x00000002 , 0x0000809a 
+ 00026188  0x000068a7 setarg  0x00000000 
+ 00026189  0x000068a8 hstore  0x00000002 , 0x0000809e 
+ 00026190  0x000068a9 jam  0x00000001 , 0x00008090 
+ 00026191  0x000068aa jam  0x00000004 , 0x00008006 
+ 00026192  0x000068ab call  0x000065b0 
+ 00026193  0x000068ac copy  0x00000012 , 0x0000003f 
+ 00026194  0x000068ad istore  0x00000003 , 0x00000011 
+ 00026195  0x000068b0 bpatchx  0x00000095 , 0x00004032 
+ 00026196  0x000068b1 jam  0x00000000 , 0x000001f9 
+ 00026197  0x000068b3 setarg  0x00000001 
+ 00026198  0x000068b4 hstore  0x00000002 , 0x00008098 
+ 00026199  0x000068b5 jam  0x000000a0 , 0x000001f6 
+ 00026200  0x000068b6 setarg  0x000001f6 
+ 00026201  0x000068b7 hstore  0x00000002 , 0x0000809a 
+ 00026202  0x000068b8 setarg  0x00000000 
+ 00026203  0x000068b9 hstore  0x00000002 , 0x0000809e 
+ 00026204  0x000068ba hstore  0x00000002 , 0x0000809c 
+ 00026205  0x000068bb setarg  0x00000003 
+ 00026206  0x000068bc hstore  0x00000001 , 0x00008090 
+ 00026207  0x000068bd jam  0x00000004 , 0x00008006 
+ 00026208  0x000068be call  0x000065b0 
+ 00026209  0x000068bf hfetch  0x00000001 , 0x0000812c 
+ 00026210  0x000068c0 rtnbit0  0x00000006 
+ 00026211  0x000068c1 nop  0x000005dc 
+ 00026212  0x000068c2 fetch  0x00000001 , 0x000001f9 
+ 00026213  0x000068c3 increase  0x00000001 , 0x0000003f 
+ 00026214  0x000068c4 store  0x00000001 , 0x000001f9 
+ 00026215  0x000068c5 sub  0x0000003f , 0x00000028 , 0x0000003e 
+ 00026216  0x000068c6 nrtn  0x00000002 
+ 00026217  0x000068c7 branch  0x00006655 
+ 00026218  0x000068cc jam  0x00000070 , 0x00008973 
+ 00026219  0x000068cd nop  0x00000bb8 
+ 00026220  0x000068ce rtn 
+ 00026221  0x000068d1 jam  0x00000030 , 0x00008973 
+ 00026222  0x000068d2 rtn 
+ 00026223  0x000068d5 lshift3  0x0000003f , 0x0000003f 
+ 00026224  0x000068d6 hstore  0x00000002 , 0x00008045 
+ 00026225  0x000068d7 jam  0x00000000 , 0x0000804b 
+ 00026226  0x000068d8 rtn 
+ 00026227  0x000068dc call  0x0000666f 
+ 00026228  0x000068dd call  0x000066a0 
+ 00026229  0x000068df ifetcht  0x00000001 , 0x00000011 
+ 00026230  0x000068e0 increase  0x00000001 , 0x00000011 
+ 00026231  0x000068e1 force  0x00000000 , 0x00000007 
+ 00026232  0x000068e3 qisolate0  0x00000002 
+ 00026233  0x000068e4 branch  0x00006697 , 0x00000001 
+ 00026234  0x000068e5 hfetch  0x00000001 , 0x00008046 
+ 00026235  0x000068e6 set1  0x00000006 , 0x0000003f 
+ 00026236  0x000068e7 set1  0x00000007 , 0x0000003f 
+ 00026237  0x000068e8 hstore  0x00000001 , 0x00008046 
+ 00026238  0x000068e9 jam  0x00000002 , 0x00008047 
+ 00026239  0x000068ea jam  0x00000082 , 0x00008047 
+ 00026240  0x000068eb set0  0x00000007 , 0x0000003f 
+ 00026241  0x000068ec hstore  0x00000001 , 0x00008046 
+ 00026242  0x000068ed jam  0x0000008a , 0x00008047 
+ 00026243  0x000068ee nop  0x0000000b 
+ 00026244  0x000068ef jam  0x000000ca , 0x00008047 
+ 00026245  0x000068f0 nop  0x00000021 
+ 00026246  0x000068f1 jam  0x0000004a , 0x00008047 
+ 00026247  0x000068f2 nop  0x0000002c 
+ 00026248  0x000068f3 jam  0x000000ca , 0x00008047 
+ 00026249  0x000068f4 nop  0x00000016 
+ 00026250  0x000068f5 jam  0x0000008a , 0x00008047 
+ 00026251  0x000068f6 nop  0x00000021 
+ 00026252  0x000068f7 jam  0x00000082 , 0x00008047 
+ 00026253  0x000068f8 nop  0x00000001 
+ 00026254  0x000068f9 jam  0x00000092 , 0x00008047 
+ 00026255  0x000068fa nop  0x0000000a 
+ 00026256  0x000068fb jam  0x000000b2 , 0x00008047 
+ 00026257  0x000068fc hfetch  0x00000001 , 0x00008007 
+ 00026258  0x000068fd jam  0x00000092 , 0x00008047 
+ 00026259  0x000068fe nop  0x00000001 
+ 00026260  0x000068ff jam  0x00000082 , 0x00008047 
+ 00026261  0x00006900 qisolate0  0x0000003f 
+ 00026262  0x00006901 branch  0x00006678 , 0x00000001 
+ 00026263  0x00006903 hfetch  0x00000002 , 0x00008045 
+ 00026264  0x00006904 increase  0x00000001 , 0x0000003f 
+ 00026265  0x00006905 hstore  0x00000002 , 0x00008045 
+ 00026266  0x00006906 increase  0x00000001 , 0x00000007 
+ 00026267  0x00006907 compare  0x00000008 , 0x00000007 , 0x0000000f 
+ 00026268  0x00006908 nbranch  0x00006678 , 0x00000001 
+ 00026269  0x00006909 loop  0x00006675 
+ 00026270  0x0000690a jam  0x00000083 , 0x00008047 
+ 00026271  0x0000690b rtn 
+ 00026272  0x0000690e jam  0x00000082 , 0x00008047 
+ 00026273  0x0000690f nop  0x0000000c 
+ 00026274  0x00006910 jam  0x00000080 , 0x00008047 
+ 00026275  0x00006911 jam  0x00000082 , 0x00008047 
+ 00026276  0x00006912 nop  0x00000096 
+ 00026277  0x00006913 rtn 
+ 00026278  0x00006917 call  0x000066a0 
+ 00026279  0x00006918 jam  0x000000a2 , 0x00008047 
+ 00026280  0x00006919 deposit  0x00000011 
+ 00026281  0x0000691a hstore  0x00000002 , 0x00008048 
+ 00026282  0x0000691b set1  0x0000000b , 0x00000002 
+ 00026283  0x0000691c isolate0  0x0000000f , 0x0000003f 
+ 00026284  0x0000691d setflag  0x00000001 , 0x0000000f , 0x00000002 
+ 00026285  0x0000691e hstoret  0x00000002 , 0x0000804a 
+ 00026286  0x0000691f jam  0x00000001 , 0x00008006 
+ 00026287  0x00006920 rtn 
+ 00026288  0x00006923 hfetch  0x00000001 , 0x0000812c 
+ 00026289  0x00006924 bbit0  0x00000001 , 0x000066b0 
+ 00026290  0x00006925 rtn 
+ 00026291  0x00006929 call  0x0000666f 
+ 00026292  0x0000692a call  0x000066a6 
+ 00026293  0x0000692b call  0x000066b0 
+ 00026294  0x0000692c jam  0x00000083 , 0x00008047 
+ 00026295  0x0000692d rtn 
+ 00026296  0x00006933 hfetch  0x00000002 , 0x00008124 
+ 00026297  0x00006934 hstore  0x00000002 , 0x00008045 
+ 00026298  0x00006935 call  0x000066a6 
+ 00026299  0x00006936 arg  0x00000001 , 0x00000007 
+ 00026300  0x00006937 call  0x000064c0 
+ 00026301  0x00006938 call  0x000066b0 
+ 00026302  0x00006939 isolate1  0x00000000 , 0x0000003f 
+ 00026303  0x0000693a call  0x000064b9 
+ 00026304  0x0000693b jam  0x00000083 , 0x00008047 
+ 00026305  0x0000693c rtn 
+ 00026306  0x00006940 hfetch  0x00000002 , 0x0000805e 
+ 00026307  0x00006941 iforce  0x0000000a 
+ 00026308  0x00006942 rtn 
+ 00026309  0x00006945 deposit  0x0000000a 
+ 00026310  0x00006946 hstore  0x00000002 , 0x0000805e 
+ 00026311  0x00006947 rtn 
+ 00026312  0x0000694a deposit  0x00000003 
+ 00026313  0x0000694b hstore  0x00000002 , 0x00008058 
+ 00026314  0x0000694c rtn 
+ 00026315  0x0000694f hfetch  0x00000002 , 0x00008058 
+ 00026316  0x00006950 copy  0x0000003f , 0x00000003 
+ 00026317  0x00006951 rtn 
+ 00026318  0x00006954 fetch  0x00000002 , 0x00004243 
+ 00026319  0x00006955 hstore  0x00000002 , 0x00008052 
+ 00026320  0x00006956 rtn 
+ 00026321  0x00006959 deposit  0x00000039 
+ 00026322  0x0000695a rtn  0x00000034 
+ 00026323  0x0000695c increase  0xfffffff8 , 0x00000039 
+ 00026324  0x0000695d call  0x000066de , 0x00000002 
+ 00026325  0x0000695e rtn  0x00000005 
+ 00026326  0x0000695f branch  0x000066d3 , 0x00000002 
+ 00026327  0x00006960 increase  0x00000008 , 0x00000039 
+ 00026328  0x00006962 increase  0xfffffffc , 0x00000039 
+ 00026329  0x00006963 call  0x000066e1 , 0x00000002 
+ 00026330  0x00006964 rtn  0x00000005 
+ 00026331  0x00006965 branch  0x000066d8 , 0x00000002 
+ 00026332  0x00006966 increase  0x00000004 , 0x00000039 
+ 00026333  0x00006967 branch  0x000066e4 
+ 00026334  0x0000696a ifetch  0x00000008 , 0x00000006 
+ 00026335  0x0000696b istore  0x00000008 , 0x0000000a 
+ 00026336  0x0000696c rtn 
+ 00026337  0x0000696f ifetch  0x00000004 , 0x00000006 
+ 00026338  0x00006970 istore  0x00000004 , 0x0000000a 
+ 00026339  0x00006971 rtn 
+ 00026340  0x00006974 deposit  0x00000039 
+ 00026341  0x00006975 rtn  0x00000034 
+ 00026342  0x00006977 ifetch  0x00000001 , 0x00000006 
+ 00026343  0x00006978 istore  0x00000001 , 0x0000000a 
+ 00026344  0x00006979 loop  0x000066e6 
+ 00026345  0x0000697a rtn 
+ 00026346  0x0000697d deposit  0x00000039 
+ 00026347  0x0000697e rtn  0x00000034 
+ 00026348  0x00006980 increase  0xfffffff8 , 0x00000039 
+ 00026349  0x00006981 call  0x000066f7 , 0x00000002 
+ 00026350  0x00006982 rtn  0x00000005 
+ 00026351  0x00006983 branch  0x000066ec , 0x00000002 
+ 00026352  0x00006984 increase  0x00000008 , 0x00000039 
+ 00026353  0x00006986 increase  0xfffffffc , 0x00000039 
+ 00026354  0x00006987 call  0x000066fa , 0x00000002 
+ 00026355  0x00006988 rtn  0x00000005 
+ 00026356  0x00006989 branch  0x000066f1 , 0x00000002 
+ 00026357  0x0000698a increase  0x00000004 , 0x00000039 
+ 00026358  0x0000698b branch  0x000066fd 
+ 00026359  0x0000698e ifetch  0x00000008 , 0x00000003 
+ 00026360  0x0000698f istore  0x00000008 , 0x00000005 
+ 00026361  0x00006990 rtn 
+ 00026362  0x00006993 ifetch  0x00000004 , 0x00000003 
+ 00026363  0x00006994 istore  0x00000004 , 0x00000005 
+ 00026364  0x00006995 rtn 
+ 00026365  0x00006999 deposit  0x00000039 
+ 00026366  0x0000699a rtn  0x00000034 
+ 00026367  0x0000699c ifetch  0x00000001 , 0x00000003 
+ 00026368  0x0000699d istore  0x00000001 , 0x00000005 
+ 00026369  0x0000699e loop  0x000066ff 
+ 00026370  0x0000699f rtn 
+ 00026371  0x000069a3 deposit  0x00000039 
+ 00026372  0x000069a4 rtn  0x00000034 
+ 00026373  0x000069a6 ifetch  0x00000001 , 0x00000003 
+ 00026374  0x000069a7 istore  0x00000001 , 0x0000000a 
+ 00026375  0x000069a8 loop  0x00006705 
+ 00026376  0x000069a9 rtn 
+ 00026377  0x000069af jam  0x0000003d , 0x00000a99 
+ 00026378  0x000069b0 branch  0x00007d86 
+ 00026379  0x000069b4 bpatchx  0x00000096 , 0x00004032 
+ 00026380  0x000069b5 fetch  0x00000001 , 0x00004217 
+ 00026381  0x000069b6 rtn  0x00000034 
+ 00026382  0x000069b7 call  0x000067a3 
+ 00026383  0x000069b8 call  0x000067a9 , 0x00000005 
+ 00026384  0x000069b9 call  0x0000673e 
+ 00026385  0x000069bb fetch  0x00000001 , 0x00004217 
+ 00026386  0x000069bc icopy  0x00000013 
+ 00026387  0x000069bd fetcht  0x00000002 , 0x00004215 
+ 00026388  0x000069be storet  0x00000002 , 0x0000018c 
+ 00026389  0x000069c0 copy  0x00000013 , 0x0000003f 
+ 00026390  0x000069c1 branch  0x00006709 , 0x00000034 
+ 00026391  0x000069c2 increase  0xffffffff , 0x00000013 
+ 00026392  0x000069c3 copy  0x00000002 , 0x00000011 
+ 00026393  0x000069c4 ifetch  0x00000001 , 0x00000011 
+ 00026394  0x000069c5 fetcht  0x00000001 , 0x00000184 
+ 00026395  0x000069c6 isub  0x00000002 , 0x0000003e 
+ 00026396  0x000069c7 call  0x00006725 , 0x00000005 
+ 00026397  0x000069c8 branch  0x00006721 , 0x00000002 
+ 00026398  0x000069c9 ifetch  0x00000001 , 0x00000011 
+ 00026399  0x000069ca increase  0x00000001 , 0x0000003f 
+ 00026400  0x000069cb istore  0x00000001 , 0x00000011 
+ 00026401  0x000069cd fetcht  0x00000002 , 0x0000018c 
+ 00026402  0x000069ce increase  0x00000022 , 0x00000002 
+ 00026403  0x000069cf storet  0x00000002 , 0x0000018c 
+ 00026404  0x000069d0 branch  0x00006715 
+ 00026405  0x000069d3 setarg  0x00000000 
+ 00026406  0x000069d4 istore  0x00000001 , 0x00000011 
+ 00026407  0x000069d5 fetch  0x00000001 , 0x00000185 
+ 00026408  0x000069d6 istore  0x00000001 , 0x00000005 
+ 00026409  0x000069d7 bne  0x00000033 , 0x00006733 
+ 00026410  0x000069d8 arg  0x000041be , 0x00000012 
+ 00026411  0x000069da ifetch  0x00000006 , 0x00000006 
+ 00026412  0x000069db istore  0x00000008 , 0x00000005 
+ 00026413  0x000069dc setarg  0x00000000 
+ 00026414  0x000069dd istore  0x00000008 , 0x00000005 
+ 00026415  0x000069de copy  0x00000012 , 0x00000006 
+ 00026416  0x000069e0 call  0x00007ebf 
+ 00026417  0x000069e1 force  0x00000001 , 0x0000003e 
+ 00026418  0x000069e2 rtn 
+ 00026419  0x000069e5 beq  0x00000036 , 0x00006737 
+ 00026420  0x000069e6 beq  0x00000037 , 0x0000673b 
+ 00026421  0x000069e7 arg  0x00004419 , 0x00000012 
+ 00026422  0x000069e8 branch  0x0000672b 
+ 00026423  0x000069eb arg  0x000044d5 , 0x00000006 
+ 00026424  0x000069ec call  0x00007ebf 
+ 00026425  0x000069ee arg  0x00004419 , 0x00000006 
+ 00026426  0x000069ef branch  0x00006730 
+ 00026427  0x000069f2 arg  0x000044cd , 0x00000006 
+ 00026428  0x000069f3 call  0x00007ebf 
+ 00026429  0x000069f4 branch  0x00006739 
+ 00026430  0x000069f8 call  0x00007fe9 
+ 00026431  0x000069f9 fetch  0x00000001 , 0x00004217 
+ 00026432  0x000069fa rtn  0x00000034 
+ 00026433  0x000069fb fetch  0x00000002 , 0x00004682 
+ 00026434  0x000069fc bbit1  0x00000000 , 0x00006754 
+ 00026435  0x000069fe bpatchx  0x00000097 , 0x00004032 
+ 00026436  0x000069ff fetch  0x00000001 , 0x0000448e 
+ 00026437  0x00006a00 beq  0x00000000 , 0x0000674d 
+ 00026438  0x00006a01 fetch  0x00000001 , 0x00000454 
+ 00026439  0x00006a02 compare  0x000000c0 , 0x0000003f , 0x000000c0 
+ 00026440  0x00006a03 branch  0x0000674d , 0x00000001 
+ 00026441  0x00006a04 compare  0x00000040 , 0x0000003f , 0x000000c0 
+ 00026442  0x00006a05 branch  0x00006752 , 0x00000001 
+ 00026443  0x00006a06 compare  0x00000000 , 0x0000003f , 0x000000c0 
+ 00026444  0x00006a07 branch  0x00006750 , 0x00000001 
+ 00026445  0x00006a09 jam  0x00000035 , 0x00000185 
+ 00026446  0x00006a0a fetch  0x00000006 , 0x0000044f 
+ 00026447  0x00006a0b branch  0x00006757 
+ 00026448  0x00006a0e jam  0x00000037 , 0x00000185 
+ 00026449  0x00006a0f branch  0x00006757 
+ 00026450  0x00006a13 jam  0x00000036 , 0x00000185 
+ 00026451  0x00006a14 branch  0x00006757 
+ 00026452  0x00006a18 bpatchx  0x00000098 , 0x00004033 
+ 00026453  0x00006a19 jam  0x00000033 , 0x00000185 
+ 00026454  0x00006a1a fetch  0x00000006 , 0x00000040 
+ 00026455  0x00006a1c store  0x00000006 , 0x00000186 
+ 00026456  0x00006a1d fetch  0x00000002 , 0x00004215 
+ 00026457  0x00006a1e ifetcht  0x00000001 , 0x0000003f 
+ 00026458  0x00006a1f pincrease  0x00000001 
+ 00026459  0x00006a20 store  0x00000002 , 0x0000018c 
+ 00026460  0x00006a21 storet  0x00000001 , 0x00000184 
+ 00026461  0x00006a22 fetch  0x00000001 , 0x00004217 
+ 00026462  0x00006a23 icopy  0x00000013 
+ 00026463  0x00006a25 fetch  0x00000002 , 0x0000018c 
+ 00026464  0x00006a26 copy  0x0000003f , 0x00000011 
+ 00026465  0x00006a27 call  0x0000676f 
+ 00026466  0x00006a28 rtn  0x00000028 
+ 00026467  0x00006a29 fetcht  0x00000002 , 0x0000018c 
+ 00026468  0x00006a2a increase  0x00000022 , 0x00000002 
+ 00026469  0x00006a2b storet  0x00000002 , 0x0000018c 
+ 00026470  0x00006a2c increase  0xffffffff , 0x00000002 
+ 00026471  0x00006a2d ifetch  0x00000001 , 0x00000002 
+ 00026472  0x00006a2e store  0x00000001 , 0x00000184 
+ 00026473  0x00006a2f increase  0xffffffff , 0x00000013 
+ 00026474  0x00006a30 nbranch  0x0000675f , 0x00000005 
+ 00026475  0x00006a31 fetch  0x00000001 , 0x00004217 
+ 00026476  0x00006a32 pincrease  0xffffffff 
+ 00026477  0x00006a33 store  0x00000001 , 0x00000184 
+ 00026478  0x00006a34 rtn 
+ 00026479  0x00006a36 fetch  0x00000001 , 0x00000185 
+ 00026480  0x00006a37 bne  0x00000033 , 0x00006776 
+ 00026481  0x00006a39 arg  0x00000185 , 0x00000012 
+ 00026482  0x00006a3a arg  0x00000007 , 0x00000039 
+ 00026483  0x00006a3b call  0x00007f88 
+ 00026484  0x00006a3c branch  0x00007fe7 , 0x00000005 
+ 00026485  0x00006a3d rtn 
+ 00026486  0x00006a40 beq  0x00000036 , 0x00006779 
+ 00026487  0x00006a41 beq  0x00000037 , 0x00006794 
+ 00026488  0x00006a42 branch  0x00006771 
+ 00026489  0x00006a45 ifetcht  0x00000001 , 0x00000011 
+ 00026490  0x00006a46 isub  0x00000002 , 0x0000003e 
+ 00026491  0x00006a47 nrtn  0x00000005 
+ 00026492  0x00006a48 arg  0x00000ac2 , 0x00000005 
+ 00026493  0x00006a49 arg  0x00000010 , 0x00000039 
+ 00026494  0x00006a4a call  0x00007ed4 
+ 00026495  0x00006a4b fetch  0x00000003 , 0x00000452 
+ 00026496  0x00006a4c store  0x00000003 , 0x00000ac2 
+ 00026497  0x00006a4d call  0x0000678b 
+ 00026498  0x00006a4e fetch  0x00000002 , 0x00000adf 
+ 00026499  0x00006a4f byteswap  0x0000003f , 0x0000003f 
+ 00026500  0x00006a50 lshift8  0x0000003f , 0x00000002 
+ 00026501  0x00006a51 ifetch  0x00000001 , 0x00000006 
+ 00026502  0x00006a52 iadd  0x00000002 , 0x0000003f 
+ 00026503  0x00006a53 fetcht  0x00000003 , 0x0000044f 
+ 00026504  0x00006a54 isub  0x00000002 , 0x0000003e 
+ 00026505  0x00006a55 branch  0x00007fe7 , 0x00000005 
+ 00026506  0x00006a56 rtn 
+ 00026507  0x00006a5a arg  0x00000ac2 , 0x00000006 
+ 00026508  0x00006a5b call  0x00007486 
+ 00026509  0x00006a5d ifetch  0x00000001 , 0x00000011 
+ 00026510  0x00006a5e call  0x00007487 
+ 00026511  0x00006a5f force  0x00000038 , 0x00000036 
+ 00026512  0x00006a60 force  0x00000000 , 0x00000036 
+ 00026513  0x00006a61 call  0x0000741d 
+ 00026514  0x00006a62 arg  0x00000ad2 , 0x00000005 
+ 00026515  0x00006a63 branch  0x00007497 
+ 00026516  0x00006a66 ifetcht  0x00000001 , 0x00000011 
+ 00026517  0x00006a67 isub  0x00000002 , 0x0000003e 
+ 00026518  0x00006a68 nrtn  0x00000005 
+ 00026519  0x00006a69 copy  0x00000006 , 0x00000011 
+ 00026520  0x00006a6a add  0x00000006 , 0x00000008 , 0x00000013 
+ 00026521  0x00006a6b arg  0x000044cd , 0x00000012 
+ 00026522  0x00006a6c arg  0x00000008 , 0x00000039 
+ 00026523  0x00006a6d call  0x00007f88 
+ 00026524  0x00006a6e branch  0x00007fe7 , 0x00000005 
+ 00026525  0x00006a6f copy  0x00000013 , 0x00000011 
+ 00026526  0x00006a70 arg  0x000044d5 , 0x00000012 
+ 00026527  0x00006a71 arg  0x00000008 , 0x00000039 
+ 00026528  0x00006a72 call  0x00007f88 
+ 00026529  0x00006a73 branch  0x00007fe7 , 0x00000005 
+ 00026530  0x00006a74 rtn 
+ 00026531  0x00006a77 fetch  0x00000002 , 0x00004215 
+ 00026532  0x00006a78 ifetcht  0x00000001 , 0x0000003f 
+ 00026533  0x00006a79 pincrease  0x00000022 
+ 00026534  0x00006a7a ifetch  0x00000001 , 0x0000003f 
+ 00026535  0x00006a7b isub  0x00000002 , 0x0000003e 
+ 00026536  0x00006a7c rtn 
+ 00026537  0x00006a7f fetch  0x00000001 , 0x00004217 
+ 00026538  0x00006a80 icopy  0x00000039 
+ 00026539  0x00006a81 fetcht  0x00000002 , 0x00004215 
+ 00026540  0x00006a82 setarg  0x00000000 
+ 00026541  0x00006a84 istore  0x00000001 , 0x00000002 
+ 00026542  0x00006a85 increase  0x00000022 , 0x00000002 
+ 00026543  0x00006a86 pincrease  0x00000001 
+ 00026544  0x00006a87 loop  0x000067ad 
+ 00026545  0x00006a88 rtn 
+ 00026546  0x00006a8b bpatchx  0x00000099 , 0x00004033 
+ 00026547  0x00006a8c call  0x0000673e 
+ 00026548  0x00006a8d fetch  0x00000001 , 0x00000030 
+ 00026549  0x00006a8e setflag  0x00000028 , 0x00000006 , 0x0000003f 
+ 00026550  0x00006a8f store  0x00000001 , 0x00000030 
+ 00026551  0x00006a90 nbranch  0x000067bc , 0x00000028 
+ 00026552  0x00006a91 add  0x00000011 , 0x0000000a , 0x00000006 
+ 00026553  0x00006a93 arg  0x000041be , 0x00000005 
+ 00026554  0x00006a94 call  0x00007ebf 
+ 00026555  0x00006a95 branch  0x000067d7 
+ 00026556  0x00006a97 jam  0x00000000 , 0x000041bd 
+ 00026557  0x00006a98 rtn 
+ 00026558  0x00006a9b fetch  0x00000009 , 0x000044cb 
+ 00026559  0x00006a9c branch  0x000067ca , 0x00000034 
+ 00026560  0x00006a9d call  0x0000673e 
+ 00026561  0x00006a9e nbranch  0x000067ca , 0x00000028 
+ 00026562  0x00006a9f fetch  0x00000002 , 0x0000018c 
+ 00026563  0x00006aa0 add  0x0000003f , 0x00000001 , 0x00000006 
+ 00026564  0x00006aa1 arg  0x000044d5 , 0x00000005 
+ 00026565  0x00006aa2 call  0x00007ebf 
+ 00026566  0x00006aa3 arg  0x00004419 , 0x00000005 
+ 00026567  0x00006aa4 call  0x00007ebf 
+ 00026568  0x00006aa5 jam  0x00000001 , 0x00004429 
+ 00026569  0x00006aa6 rtn 
+ 00026570  0x00006aa9 jam  0x00000000 , 0x00004429 
+ 00026571  0x00006aaa rtn 
+ 00026572  0x00006aae fetch  0x00000006 , 0x0000044f 
+ 00026573  0x00006aaf store  0x00000006 , 0x00000186 
+ 00026574  0x00006ab0 jam  0x00000034 , 0x00000185 
+ 00026575  0x00006ab1 branch  0x000067d3 
+ 00026576  0x00006ab3 fetch  0x00000006 , 0x00000040 
+ 00026577  0x00006ab4 store  0x00000006 , 0x00000186 
+ 00026578  0x00006ab5 jam  0x00000033 , 0x00000185 
+ 00026579  0x00006ab7 fetch  0x00000001 , 0x00004092 
+ 00026580  0x00006ab8 beq  0x0000000a , 0x0000670b 
+ 00026581  0x00006ab9 bbit1  0x00000006 , 0x000042da 
+ 00026582  0x00006aba rtn 
+ 00026583  0x00006abe fetch  0x00000008 , 0x000041be 
+ 00026584  0x00006abf fetcht  0x00000008 , 0x000041c6 
+ 00026585  0x00006ac0 ior  0x00000002 , 0x0000003f 
+ 00026586  0x00006ac1 rtn  0x00000034 
+ 00026587  0x00006ac2 jam  0x00000001 , 0x000041bd 
+ 00026588  0x00006ac3 rtn 
+ 00026589  0x00006acb bpatchx  0x0000009a , 0x00004033 
+ 00026590  0x00006acc set1  0x00000007 , 0x00000002 
+ 00026591  0x00006acd call  0x0000681d 
+ 00026592  0x00006ace nsetflag  0x00000001 , 0x00000007 , 0x00000002 
+ 00026593  0x00006ad4 bpatchx  0x0000009b , 0x00004033 
+ 00026594  0x00006ad5 sub  0x00000002 , 0x000000ff , 0x0000003e 
+ 00026595  0x00006ad6 rtn  0x00000005 
+ 00026596  0x00006ad7 isolate0  0x00000007 , 0x00000002 
+ 00026597  0x00006ad8 and  0x00000002 , 0x0000001f , 0x00000007 
+ 00026598  0x00006ad9 fetch  0x00000004 , 0x000000a1 
+ 00026599  0x00006ada qsetflag  0x00000001 , 0x0000003f 
+ 00026600  0x00006adb store  0x00000004 , 0x000000a1 
+ 00026601  0x00006adc fetch  0x00000004 , 0x000000a5 
+ 00026602  0x00006add nqsetflag  0x00000001 , 0x0000003f 
+ 00026603  0x00006ade store  0x00000004 , 0x000000a5 
+ 00026604  0x00006adf rtn 
+ 00026605  0x00006ae3 bpatchx  0x0000009c , 0x00004033 
+ 00026606  0x00006ae4 sub  0x00000002 , 0x000000ff , 0x0000003e 
+ 00026607  0x00006ae5 rtn  0x00000005 
+ 00026608  0x00006ae6 isolate0  0x00000007 , 0x00000002 
+ 00026609  0x00006ae7 and  0x00000002 , 0x0000001f , 0x00000007 
+ 00026610  0x00006ae8 fetch  0x00000004 , 0x000000a1 
+ 00026611  0x00006ae9 qset0  0x0000003f 
+ 00026612  0x00006aea store  0x00000004 , 0x000000a1 
+ 00026613  0x00006aeb fetch  0x00000004 , 0x000000a5 
+ 00026614  0x00006aec qset0  0x0000003f 
+ 00026615  0x00006aed store  0x00000004 , 0x000000a5 
+ 00026616  0x00006aee rtn 
+ 00026617  0x00006af2 call  0x000067ed 
+ 00026618  0x00006af3 branch  0x000067fe 
+ 00026619  0x00006af7 sub  0x00000002 , 0x000000ff , 0x0000003e 
+ 00026620  0x00006af8 rtn  0x00000005 
+ 00026621  0x00006af9 ncall  0x000067e1 , 0x0000002b 
+ 00026622  0x00006afc arg  0x0000807c , 0x00000005 
+ 00026623  0x00006afd call  0x00006830 
+ 00026624  0x00006afe setflip  0x00000007 , 0x00000002 
+ 00026625  0x00006aff arg  0x00008078 , 0x00000005 
+ 00026626  0x00006b00 call  0x00006830 
+ 00026627  0x00006b01 set0  0x00000007 , 0x00000002 
+ 00026628  0x00006b02 arg  0x00008070 , 0x00000005 
+ 00026629  0x00006b03 branch  0x00006830 
+ 00026630  0x00006b07 arg  0x0000807c , 0x00000005 
+ 00026631  0x00006b08 call  0x00006830 
+ 00026632  0x00006b09 set0  0x00000007 , 0x00000002 
+ 00026633  0x00006b0a arg  0x00008078 , 0x00000005 
+ 00026634  0x00006b0b call  0x00006830 
+ 00026635  0x00006b0c set0  0x00000007 , 0x00000002 
+ 00026636  0x00006b0d arg  0x00008070 , 0x00000005 
+ 00026637  0x00006b0e branch  0x00006830 
+ 00026638  0x00006b13 sub  0x00000002 , 0x000000ff , 0x0000003e 
+ 00026639  0x00006b14 rtn  0x00000005 
+ 00026640  0x00006b15 setflip  0x00000007 , 0x00000002 
+ 00026641  0x00006b16 call  0x0000682f 
+ 00026642  0x00006b18 set1  0x00000007 , 0x00000002 
+ 00026643  0x00006b19 arg  0x00008070 , 0x00000005 
+ 00026644  0x00006b1a branch  0x00006830 
+ 00026645  0x00006b1d and  0x00000002 , 0x00000007 , 0x00000007 
+ 00026646  0x00006b1e rshift3  0x00000002 , 0x0000003f 
+ 00026647  0x00006b1f and_into  0x00000003 , 0x0000003f 
+ 00026648  0x00006b20 iadd  0x00000005 , 0x00000005 
+ 00026649  0x00006b21 ifetch  0x00000001 , 0x00000005 
+ 00026650  0x00006b22 rtn 
+ 00026651  0x00006b25 arg  0x00008074 , 0x00000005 
+ 00026652  0x00006b26 branch  0x0000681e 
+ 00026653  0x00006b2b arg  0x0000811c , 0x00000005 
+ 00026654  0x00006b2d call  0x00006815 
+ 00026655  0x00006b2e isolate1  0x00000007 , 0x00000002 
+ 00026656  0x00006b2f branch  0x00006823 , 0x00000001 
+ 00026657  0x00006b30 qisolate0  0x0000003f 
+ 00026658  0x00006b31 rtn 
+ 00026659  0x00006b33 qisolate1  0x0000003f 
+ 00026660  0x00006b34 rtn 
+ 00026661  0x00006b37 sub  0x00000002 , 0x000000ff , 0x0000003e 
+ 00026662  0x00006b38 rtn  0x00000005 
+ 00026663  0x00006b39 isolate1  0x00000007 , 0x0000003e 
+ 00026664  0x00006b3a branch  0x0000682c 
+ 00026665  0x00006b3d sub  0x00000002 , 0x000000ff , 0x0000003e 
+ 00026666  0x00006b3e rtn  0x00000005 
+ 00026667  0x00006b3f isolate0  0x00000007 , 0x0000003e 
+ 00026668  0x00006b43 setarg  0x00000000 
+ 00026669  0x00006b44 nsetflag  0x00000001 , 0x00000007 , 0x0000003f 
+ 00026670  0x00006b45 ixor  0x00000002 , 0x00000002 
+ 00026671  0x00006b49 arg  0x00008074 , 0x00000005 
+ 00026672  0x00006b4d call  0x00006815 
+ 00026673  0x00006b4e isolate1  0x00000007 , 0x00000002 
+ 00026674  0x00006b4f qsetflag  0x00000001 , 0x0000003f 
+ 00026675  0x00006b50 istore  0x00000001 , 0x00000005 
+ 00026676  0x00006b51 rtn 
+ 00026677  0x00006b54 arg  0xffffffff , 0x00000011 
+ 00026678  0x00006b55 hfetch  0x00000001 , 0x00008081 
+ 00026679  0x00006b56 compare  0x00000002 , 0x0000003f , 0x00000003 
+ 00026680  0x00006b57 call  0x00006878 , 0x00000001 
+ 00026681  0x00006b59 compare  0x00000001 , 0x0000003f , 0x00000003 
+ 00026682  0x00006b5a call  0x0000687a , 0x00000001 
+ 00026683  0x00006b5c compare  0x00000003 , 0x0000003f , 0x00000003 
+ 00026684  0x00006b5d call  0x0000687a , 0x00000001 
+ 00026685  0x00006b5f isolate1  0x00000002 , 0x0000003f 
+ 00026686  0x00006b60 call  0x00006874 , 0x00000001 
+ 00026687  0x00006b62 isolate1  0x00000003 , 0x0000003f 
+ 00026688  0x00006b63 call  0x00006876 , 0x00000001 
+ 00026689  0x00006b65 isolate1  0x00000004 , 0x0000003f 
+ 00026690  0x00006b66 call  0x0000687c , 0x00000001 
+ 00026691  0x00006b68 isolate1  0x00000006 , 0x0000003f 
+ 00026692  0x00006b69 nsetflag  0x00000001 , 0x00000004 , 0x00000011 
+ 00026693  0x00006b6b isolate1  0x00000007 , 0x0000003f 
+ 00026694  0x00006b6c nsetflag  0x00000001 , 0x00000005 , 0x00000011 
+ 00026695  0x00006b6e hfetch  0x00000001 , 0x00008082 
+ 00026696  0x00006b6f isolate1  0x00000000 , 0x0000003f 
+ 00026697  0x00006b70 nsetflag  0x00000001 , 0x0000001b , 0x00000011 
+ 00026698  0x00006b71 isolate1  0x00000001 , 0x0000003f 
+ 00026699  0x00006b72 nsetflag  0x00000001 , 0x0000001c , 0x00000011 
+ 00026700  0x00006b73 isolate1  0x00000002 , 0x0000003f 
+ 00026701  0x00006b74 nsetflag  0x00000001 , 0x00000003 , 0x00000011 
+ 00026702  0x00006b75 isolate1  0x00000003 , 0x0000003f 
+ 00026703  0x00006b76 nsetflag  0x00000001 , 0x00000008 , 0x00000011 
+ 00026704  0x00006b77 isolate1  0x00000004 , 0x0000003f 
+ 00026705  0x00006b78 nsetflag  0x00000001 , 0x00000014 , 0x00000011 
+ 00026706  0x00006b79 isolate1  0x00000005 , 0x0000003f 
+ 00026707  0x00006b7a nsetflag  0x00000001 , 0x00000015 , 0x00000011 
+ 00026708  0x00006b7b isolate1  0x00000006 , 0x0000003f 
+ 00026709  0x00006b7c nsetflag  0x00000001 , 0x00000016 , 0x00000011 
+ 00026710  0x00006b7d isolate1  0x00000007 , 0x0000003f 
+ 00026711  0x00006b7e nsetflag  0x00000001 , 0x00000017 , 0x00000011 
+ 00026712  0x00006b80 hfetch  0x00000001 , 0x00008080 
+ 00026713  0x00006b81 isolate1  0x00000000 , 0x0000003f 
+ 00026714  0x00006b82 nsetflag  0x00000001 , 0x00000005 , 0x00000011 
+ 00026715  0x00006b83 isolate1  0x00000001 , 0x0000003f 
+ 00026716  0x00006b84 nsetflag  0x00000001 , 0x00000006 , 0x00000011 
+ 00026717  0x00006b85 isolate1  0x00000002 , 0x0000003f 
+ 00026718  0x00006b86 nsetflag  0x00000001 , 0x00000007 , 0x00000011 
+ 00026719  0x00006b87 isolate1  0x00000003 , 0x0000003f 
+ 00026720  0x00006b88 nsetflag  0x00000001 , 0x00000012 , 0x00000011 
+ 00026721  0x00006b89 isolate1  0x00000004 , 0x0000003f 
+ 00026722  0x00006b8a nsetflag  0x00000001 , 0x00000013 , 0x00000011 
+ 00026723  0x00006b8b isolate1  0x00000005 , 0x0000003f 
+ 00026724  0x00006b8c nsetflag  0x00000001 , 0x00000014 , 0x00000011 
+ 00026725  0x00006b8d isolate1  0x00000006 , 0x0000003f 
+ 00026726  0x00006b8e nsetflag  0x00000001 , 0x00000015 , 0x00000011 
+ 00026727  0x00006b8f isolate1  0x00000007 , 0x0000003f 
+ 00026728  0x00006b90 nsetflag  0x00000001 , 0x00000016 , 0x00000011 
+ 00026729  0x00006b92 hfetch  0x00000001 , 0x00008062 
+ 00026730  0x00006b93 isolate1  0x00000004 , 0x0000003f 
+ 00026731  0x00006b94 call  0x0000687e , 0x00000001 
+ 00026732  0x00006b95 bpatchx  0x0000009d , 0x00004033 
+ 00026733  0x00006b97 hfetch  0x00000004 , 0x00008078 
+ 00026734  0x00006b98 hfetcht  0x00000004 , 0x0000807c 
+ 00026735  0x00006b99 ior  0x00000002 , 0x0000003f 
+ 00026736  0x00006b9a invert  0x0000003f , 0x0000003f 
+ 00026737  0x00006b9b iand  0x00000011 , 0x0000003f 
+ 00026738  0x00006b9d hstore  0x00000004 , 0x00008070 
+ 00026739  0x00006b9e rtn 
+ 00026740  0x00006ba2 arg  0x00000006 , 0x00000007 
+ 00026741  0x00006ba3 branch  0x00006884 
+ 00026742  0x00006ba5 arg  0x00000009 , 0x00000007 
+ 00026743  0x00006ba6 branch  0x00006882 
+ 00026744  0x00006ba8 arg  0x00000017 , 0x00000007 
+ 00026745  0x00006ba9 branch  0x00006882 
+ 00026746  0x00006bab arg  0x00000019 , 0x00000007 
+ 00026747  0x00006bac branch  0x00006884 
+ 00026748  0x00006bae arg  0x0000001e , 0x00000007 
+ 00026749  0x00006baf branch  0x00006884 
+ 00026750  0x00006bb1 arg  0x00000002 , 0x00000007 
+ 00026751  0x00006bb2 branch  0x00006884 
+ 00026752  0x00006bb4 arg  0x00000001 , 0x00000039 
+ 00026753  0x00006bb5 branch  0x00006885 
+ 00026754  0x00006bb7 arg  0x00000004 , 0x00000039 
+ 00026755  0x00006bb8 branch  0x00006885 
+ 00026756  0x00006bba arg  0x00000002 , 0x00000039 
+ 00026757  0x00006bbc qset0  0x00000011 
+ 00026758  0x00006bbd increase  0x00000001 , 0x00000007 
+ 00026759  0x00006bbe loop  0x00006885 
+ 00026760  0x00006bbf rtn 
+ 00026761  0x00006bc8 call  0x00006895 
+ 00026762  0x00006bc9 arg  0x00000006 , 0x00000002 
+ 00026763  0x00006bca branch  0x0000680e 
+ 00026764  0x00006bcd call  0x00006889 
+ 00026765  0x00006bce arg  0x00000006 , 0x00000002 
+ 00026766  0x00006bcf branch  0x00006825 
+ 00026767  0x00006bd4 call  0x00006895 
+ 00026768  0x00006bd5 hfetch  0x00000001 , 0x00008078 
+ 00026769  0x00006bd6 set1  0x00000007 , 0x0000003f 
+ 00026770  0x00006bd7 hstore  0x00000001 , 0x00008078 
+ 00026771  0x00006bd8 arg  0x00000007 , 0x00000002 
+ 00026772  0x00006bd9 branch  0x000067fb 
+ 00026773  0x00006bdc hfetch  0x00000001 , 0x00008081 
+ 00026774  0x00006bdd and_into  0x000000fb , 0x0000003f 
+ 00026775  0x00006bde hstore  0x00000001 , 0x00008081 
+ 00026776  0x00006bdf rtn 
+ 00026777  0x00006be2 hfetch  0x00000001 , 0x00008081 
+ 00026778  0x00006be3 isolate1  0x00000002 , 0x0000003f 
+ 00026779  0x00006be4 rtn 
+ 00026780  0x00006be7 call  0x0000666a 
+ 00026781  0x00006be8 setarg  0x000007e0 
+ 00026782  0x00006be9 arg  0x00004150 , 0x00000011 
+ 00026783  0x00006bea arg  0x00000002 , 0x00000002 
+ 00026784  0x00006beb call  0x000066b3 
+ 00026785  0x00006bec branch  0x0000666d 
+ 00026786  0x00006bf0 call  0x0000666a 
+ 00026787  0x00006bf1 setarg  0x000007e2 
+ 00026788  0x00006bf2 arg  0x0000421d , 0x00000011 
+ 00026789  0x00006bf3 arg  0x0000000e , 0x00000002 
+ 00026790  0x00006bf4 call  0x000066b3 
+ 00026791  0x00006bf5 branch  0x0000666d 
+ 00026792  0x00006bfa bpatchx  0x0000009e , 0x00004033 
+ 00026793  0x00006bfc call  0x000068a2 
+ 00026794  0x00006bfe fetch  0x00000001 , 0x0000422d 
+ 00026795  0x00006bff beq  0x00000000 , 0x000068af 
+ 00026796  0x00006c00 beq  0x00000001 , 0x000068c3 
+ 00026797  0x00006c01 beq  0x00000002 , 0x000068d7 
+ 00026798  0x00006c02 rtn 
+ 00026799  0x00006c05 fetcht  0x00000002 , 0x00004229 
+ 00026800  0x00006c06 setarg  0x0000aa55 
+ 00026801  0x00006c07 isub  0x00000002 , 0x0000003e 
+ 00026802  0x00006c08 branch  0x000068b8 , 0x00000005 
+ 00026803  0x00006c09 setarg  0x00004dfa 
+ 00026804  0x00006c0a store  0x00000002 , 0x00004227 
+ 00026805  0x00006c0b setarg  0x00004894 
+ 00026806  0x00006c0c store  0x00000002 , 0x00004221 
+ 00026807  0x00006c0d branch  0x000068c0 
+ 00026808  0x00006c10 fetch  0x00000002 , 0x00004227 
+ 00026809  0x00006c11 nbranch  0x000068bc , 0x00000034 
+ 00026810  0x00006c12 setarg  0x00004dfa 
+ 00026811  0x00006c13 store  0x00000002 , 0x00004227 
+ 00026812  0x00006c15 fetch  0x00000002 , 0x00004221 
+ 00026813  0x00006c16 nbranch  0x000068c0 , 0x00000034 
+ 00026814  0x00006c17 setarg  0x00004894 
+ 00026815  0x00006c18 store  0x00000002 , 0x00004221 
+ 00026816  0x00006c1a setarg  0x00000064 
+ 00026817  0x00006c1b store  0x00000002 , 0x0000422b 
+ 00026818  0x00006c1c rtn 
+ 00026819  0x00006c1f fetcht  0x00000002 , 0x00004229 
+ 00026820  0x00006c20 setarg  0x0000aa55 
+ 00026821  0x00006c21 isub  0x00000002 , 0x0000003e 
+ 00026822  0x00006c22 branch  0x000068cc , 0x00000005 
+ 00026823  0x00006c23 setarg  0x00005932 
+ 00026824  0x00006c24 store  0x00000002 , 0x00004225 
+ 00026825  0x00006c25 setarg  0x00004323 
+ 00026826  0x00006c26 store  0x00000002 , 0x0000421f 
+ 00026827  0x00006c27 branch  0x000068d4 
+ 00026828  0x00006c2a fetch  0x00000002 , 0x00004225 
+ 00026829  0x00006c2b nbranch  0x000068d0 , 0x00000034 
+ 00026830  0x00006c2c setarg  0x00005932 
+ 00026831  0x00006c2d store  0x00000002 , 0x00004225 
+ 00026832  0x00006c2f fetch  0x00000002 , 0x0000421f 
+ 00026833  0x00006c30 nbranch  0x000068d4 , 0x00000034 
+ 00026834  0x00006c31 setarg  0x00004323 
+ 00026835  0x00006c32 store  0x00000002 , 0x0000421f 
+ 00026836  0x00006c34 setarg  0x00000190 
+ 00026837  0x00006c35 store  0x00000002 , 0x0000422b 
+ 00026838  0x00006c36 rtn 
+ 00026839  0x00006c39 fetcht  0x00000002 , 0x00004229 
+ 00026840  0x00006c3a setarg  0x0000aa55 
+ 00026841  0x00006c3b isub  0x00000002 , 0x0000003e 
+ 00026842  0x00006c3c branch  0x000068e0 , 0x00000005 
+ 00026843  0x00006c3d setarg  0x00006946 
+ 00026844  0x00006c3e store  0x00000002 , 0x00004223 
+ 00026845  0x00006c3f setarg  0x00005377 
+ 00026846  0x00006c40 store  0x00000002 , 0x0000421d 
+ 00026847  0x00006c41 branch  0x000068e8 
+ 00026848  0x00006c44 fetch  0x00000002 , 0x00004223 
+ 00026849  0x00006c45 nbranch  0x000068e4 , 0x00000034 
+ 00026850  0x00006c46 setarg  0x00006946 
+ 00026851  0x00006c47 store  0x00000002 , 0x00004223 
+ 00026852  0x00006c49 fetch  0x00000002 , 0x0000421d 
+ 00026853  0x00006c4a nbranch  0x000068e8 , 0x00000034 
+ 00026854  0x00006c4b setarg  0x00005377 
+ 00026855  0x00006c4c store  0x00000002 , 0x0000421d 
+ 00026856  0x00006c4e setarg  0x00000032 
+ 00026857  0x00006c4f store  0x00000002 , 0x0000422b 
+ 00026858  0x00006c50 rtn 
+ 00026859  0x00006c54 fetch  0x00000001 , 0x0000422d 
+ 00026860  0x00006c55 beq  0x00000000 , 0x000068f0 
+ 00026861  0x00006c56 beq  0x00000001 , 0x000068f2 
+ 00026862  0x00006c57 beq  0x00000002 , 0x000068f4 
+ 00026863  0x00006c58 rtn 
+ 00026864  0x00006c5a jam  0x000000bf , 0x00008971 
+ 00026865  0x00006c5b branch  0x000068f8 
+ 00026866  0x00006c5d jam  0x000000af , 0x00008971 
+ 00026867  0x00006c5e branch  0x000068f8 
+ 00026868  0x00006c60 jam  0x0000008f , 0x00008971 
+ 00026869  0x00006c61 fetch  0x00000001 , 0x0000422e 
+ 00026870  0x00006c62 hstore  0x00000001 , 0x00008973 
+ 00026871  0x00006c63 branch  0x000068f8 
+ 00026872  0x00006c65 bpatchx  0x0000009f , 0x00004033 
+ 00026873  0x00006c66 hfetch  0x00000001 , 0x00008053 
+ 00026874  0x00006c67 set1  0x00000007 , 0x0000003f 
+ 00026875  0x00006c68 hstore  0x00000001 , 0x00008053 
+ 00026876  0x00006c69 hfetch  0x00000001 , 0x00008973 
+ 00026877  0x00006c6a or_into  0x00000030 , 0x0000003f 
+ 00026878  0x00006c6b hstore  0x00000001 , 0x00008973 
+ 00026879  0x00006c6c jam  0x0000007c , 0x00008906 
+ 00026880  0x00006c6d jam  0x000000aa , 0x00008972 
+ 00026881  0x00006c6e nop  0x00001388 
+ 00026882  0x00006c6f hfetcht  0x00000002 , 0x00008150 
+ 00026883  0x00006c70 hfetch  0x00000001 , 0x00008053 
+ 00026884  0x00006c71 set0  0x00000007 , 0x0000003f 
+ 00026885  0x00006c72 hstore  0x00000001 , 0x00008053 
+ 00026886  0x00006c73 storet  0x00000002 , 0x0000422f 
+ 00026887  0x00006c74 rtn 
+ 00026888  0x00006c77 bpatchx  0x000000a0 , 0x00004034 
+ 00026889  0x00006c78 fetch  0x00000001 , 0x0000422d 
+ 00026890  0x00006c79 beq  0x00000000 , 0x0000690e 
+ 00026891  0x00006c7a beq  0x00000001 , 0x00006912 
+ 00026892  0x00006c7b beq  0x00000002 , 0x00006916 
+ 00026893  0x00006c7c rtn 
+ 00026894  0x00006c7f fetch  0x00000002 , 0x00004227 
+ 00026895  0x00006c80 fetcht  0x00000002 , 0x00004221 
+ 00026896  0x00006c81 arg  0x000000c8 , 0x00000013 
+ 00026897  0x00006c82 branch  0x0000691a 
+ 00026898  0x00006c85 fetch  0x00000002 , 0x00004225 
+ 00026899  0x00006c86 fetcht  0x00000002 , 0x0000421f 
+ 00026900  0x00006c87 arg  0x00000064 , 0x00000013 
+ 00026901  0x00006c88 branch  0x0000691a 
+ 00026902  0x00006c8b fetch  0x00000002 , 0x00004223 
+ 00026903  0x00006c8c fetcht  0x00000002 , 0x0000421d 
+ 00026904  0x00006c8d arg  0x00000032 , 0x00000013 
+ 00026905  0x00006c8e branch  0x0000691a 
+ 00026906  0x00006c91 isub  0x00000002 , 0x00000011 
+ 00026907  0x00006c92 fetch  0x00000002 , 0x0000422f 
+ 00026908  0x00006c93 isub  0x00000002 , 0x0000003f 
+ 00026909  0x00006c94 nbranch  0x00006927 , 0x00000002 
+ 00026910  0x00006c95 fetcht  0x00000002 , 0x0000422b 
+ 00026911  0x00006c96 imul32  0x00000002 , 0x00000012 
+ 00026912  0x00006c97 copy  0x00000013 , 0x0000003f 
+ 00026913  0x00006c98 imul32  0x00000011 , 0x0000003f 
+ 00026914  0x00006c99 iadd  0x00000012 , 0x0000003f 
+ 00026915  0x00006c9b idiv  0x00000011 
+ 00026916  0x00006c9c call  0x00007f86 
+ 00026917  0x00006c9d quotient  0x0000003f 
+ 00026918  0x00006c9e rtn 
+ 00026919  0x00006ca1 copy  0x00000002 , 0x0000003f 
+ 00026920  0x00006ca2 fetcht  0x00000002 , 0x0000422f 
+ 00026921  0x00006ca3 isub  0x00000002 , 0x0000003f 
+ 00026922  0x00006ca4 fetcht  0x00000002 , 0x0000422b 
+ 00026923  0x00006ca5 imul32  0x00000002 , 0x00000012 
+ 00026924  0x00006ca6 copy  0x00000013 , 0x0000003f 
+ 00026925  0x00006ca7 imul32  0x00000011 , 0x0000003f 
+ 00026926  0x00006ca8 isub  0x00000012 , 0x0000003f 
+ 00026927  0x00006ca9 branch  0x00006923 
+ 00026928  0x00006cb5 ifetch  0x00000008 , 0x00000011 
+ 00026929  0x00006cb6 store  0x00000008 , 0x00000a9a 
+ 00026930  0x00006cb7 fetch  0x00000002 , 0x00000a9a 
+ 00026931  0x00006cb8 fetcht  0x00000002 , 0x00000a9c 
+ 00026932  0x00006cb9 isub  0x00000002 , 0x00000011 
+ 00026933  0x00006cba fetch  0x00000002 , 0x00000aa0 
+ 00026934  0x00006cbb isub  0x00000002 , 0x00000012 
+ 00026935  0x00006cbc fetcht  0x00000002 , 0x00000a9e 
+ 00026936  0x00006cbd isub  0x00000002 , 0x0000003e 
+ 00026937  0x00006cbe ncall  0x00006940 , 0x00000002 
+ 00026938  0x00006cbf mul32  0x00000012 , 0x00000064 , 0x0000003f 
+ 00026939  0x00006cc0 idiv  0x00000011 
+ 00026940  0x00006cc1 call  0x00007f86 
+ 00026941  0x00006cc2 quotient  0x0000003f 
+ 00026942  0x00006cc3 call  0x00006944 , 0x00000034 
+ 00026943  0x00006cc4 rtn 
+ 00026944  0x00006cc6 fetch  0x00000001 , 0x00004231 
+ 00026945  0x00006cc7 set1  0x00000000 , 0x0000003f 
+ 00026946  0x00006cc8 store  0x00000001 , 0x00004231 
+ 00026947  0x00006cc9 rtn 
+ 00026948  0x00006ccb fetcht  0x00000001 , 0x00004231 
+ 00026949  0x00006ccc set1  0x00000001 , 0x00000002 
+ 00026950  0x00006ccd storet  0x00000001 , 0x00004231 
+ 00026951  0x00006cce rtn 
+ 00026952  0x00006cd4 fetch  0x00000002 , 0x0000423d 
+ 00026953  0x00006cd5 ifetch  0x00000001 , 0x0000003f 
+ 00026954  0x00006cd7 rtn  0x00000034 
+ 00026955  0x00006cd8 copy  0x0000003f , 0x00000039 
+ 00026956  0x00006cda fetch  0x00000002 , 0x0000423d 
+ 00026957  0x00006cdb increase  0x00000003 , 0x0000003f 
+ 00026958  0x00006cdc copy  0x0000003f , 0x00000011 
+ 00026959  0x00006cde ifetcht  0x00000001 , 0x00000011 
+ 00026960  0x00006cdf call  0x000067fb 
+ 00026961  0x00006ce0 increase  0x00000001 , 0x00000011 
+ 00026962  0x00006ce1 loop  0x0000694f 
+ 00026963  0x00006ce3 rtn 
+ 00026964  0x00006ce6 fetch  0x00000002 , 0x0000423d 
+ 00026965  0x00006ce7 increase  0x00000003 , 0x0000003f 
+ 00026966  0x00006ce8 copy  0x0000003f , 0x00000011 
+ 00026967  0x00006cea force  0x00000000 , 0x00000012 
+ 00026968  0x00006ceb jam  0x00000000 , 0x00000b12 
+ 00026969  0x00006ced ifetcht  0x00000001 , 0x00000011 
+ 00026970  0x00006cee call  0x0000681d 
+ 00026971  0x00006cef bpatchx  0x000000a1 , 0x00004034 
+ 00026972  0x00006cf0 fetch  0x00000002 , 0x00000b12 
+ 00026973  0x00006cf1 copy  0x00000012 , 0x00000007 
+ 00026974  0x00006cf2 qsetflag  0x00000001 , 0x0000003f 
+ 00026975  0x00006cf3 store  0x00000002 , 0x00000b12 
+ 00026976  0x00006cf4 increase  0x00000001 , 0x00000011 
+ 00026977  0x00006cf5 increase  0x00000001 , 0x00000012 
+ 00026978  0x00006cf6 fetch  0x00000002 , 0x0000423d 
+ 00026979  0x00006cf7 ifetch  0x00000001 , 0x0000003f 
+ 00026980  0x00006cf9 ixor  0x00000012 , 0x0000003e 
+ 00026981  0x00006cfa nbranch  0x00006959 , 0x00000005 
+ 00026982  0x00006cfb fetch  0x00000002 , 0x00000b12 
+ 00026983  0x00006cfc fetcht  0x00000002 , 0x00000b14 
+ 00026984  0x00006cfd ixor  0x00000002 , 0x0000003e 
+ 00026985  0x00006cfe rtn  0x00000005 
+ 00026986  0x00006cff enable  0x00000028 
+ 00026987  0x00006d00 rtn 
+ 00026988  0x00006d03 fetch  0x00000002 , 0x0000423d 
+ 00026989  0x00006d04 ifetch  0x00000001 , 0x0000003f 
+ 00026990  0x00006d06 rtn  0x00000034 
+ 00026991  0x00006d07 copy  0x0000003f , 0x00000039 
+ 00026992  0x00006d08 fetch  0x00000002 , 0x0000423d 
+ 00026993  0x00006d09 increase  0x00000003 , 0x0000003f 
+ 00026994  0x00006d0a copy  0x0000003f , 0x00000011 
+ 00026995  0x00006d0c ifetcht  0x00000001 , 0x00000011 
+ 00026996  0x00006d0d call  0x000067dd 
+ 00026997  0x00006d0e increase  0x00000001 , 0x00000011 
+ 00026998  0x00006d0f loop  0x00006973 
+ 00026999  0x00006d11 rtn 
+ 00027000  0x00006d14 arg  0x00000009 , 0x00000007 
+ 00027001  0x00006d15 call  0x00007f16 
+ 00027002  0x00006d16 nrtn  0x00000034 
+ 00027003  0x00006d17 setarg  0x00000020 
+ 00027004  0x00006d18 arg  0x00000009 , 0x00000007 
+ 00027005  0x00006d19 call  0x00007f08 
+ 00027006  0x00006d1a disable  0x00000028 
+ 00027007  0x00006d1b call  0x0000696c 
+ 00027008  0x00006d1c bpatchx  0x000000a2 , 0x00004034 
+ 00027009  0x00006d1d fetch  0x00000002 , 0x0000423d 
+ 00027010  0x00006d1e ifetch  0x00000001 , 0x0000003f 
+ 00027011  0x00006d20 rtn  0x00000034 
+ 00027012  0x00006d21 call  0x00006954 
+ 00027013  0x00006d22 nbranch  0x00007d02 , 0x00000028 
+ 00027014  0x00006d23 call  0x00007d00 
+ 00027015  0x00006d24 disable  0x00000028 
+ 00027016  0x00006d25 fetch  0x00000002 , 0x00000b12 
+ 00027017  0x00006d26 store  0x00000002 , 0x00000b19 
+ 00027018  0x00006d27 jam  0x00000000 , 0x00000b1b 
+ 00027019  0x00006d28 force  0x00000000 , 0x00000007 
+ 00027020  0x00006d2a fetch  0x00000002 , 0x00000b14 
+ 00027021  0x00006d2b rshift  0x0000003f , 0x00000002 
+ 00027022  0x00006d2c storet  0x00000002 , 0x00000b14 
+ 00027023  0x00006d2d and  0x0000003f , 0x00000001 , 0x0000003f 
+ 00027024  0x00006d2e fetcht  0x00000002 , 0x00000b19 
+ 00027025  0x00006d2f and  0x00000002 , 0x00000001 , 0x00000011 
+ 00027026  0x00006d30 rshift  0x00000002 , 0x00000002 
+ 00027027  0x00006d31 storet  0x00000002 , 0x00000b19 
+ 00027028  0x00006d32 ixor  0x00000011 , 0x0000003e 
+ 00027029  0x00006d33 ncall  0x000069a1 , 0x00000005 
+ 00027030  0x00006d34 fetch  0x00000002 , 0x0000423d 
+ 00027031  0x00006d35 ifetch  0x00000001 , 0x0000003f 
+ 00027032  0x00006d37 fetcht  0x00000001 , 0x00000b1b 
+ 00027033  0x00006d38 increase  0x00000001 , 0x00000002 
+ 00027034  0x00006d39 storet  0x00000001 , 0x00000b1b 
+ 00027035  0x00006d3a copy  0x00000002 , 0x00000007 
+ 00027036  0x00006d3b ixor  0x00000007 , 0x0000003e 
+ 00027037  0x00006d3c nbranch  0x0000698c , 0x00000005 
+ 00027038  0x00006d3d fetch  0x00000002 , 0x00000b12 
+ 00027039  0x00006d3e store  0x00000002 , 0x00000b14 
+ 00027040  0x00006d3f rtn 
+ 00027041  0x00006d41 bpatchx  0x000000a3 , 0x00004034 
+ 00027042  0x00006d42 fetch  0x00000002 , 0x0000423d 
+ 00027043  0x00006d43 increase  0x00000001 , 0x0000003f 
+ 00027044  0x00006d44 ifetch  0x00000002 , 0x0000003f 
+ 00027045  0x00006d45 branch  0x00007f9c 
+ 00027046  0x00006d51 hfetch  0x00000001 , 0x00008042 
+ 00027047  0x00006d52 ior  0x00000011 , 0x0000003f 
+ 00027048  0x00006d53 hstore  0x00000001 , 0x00008042 
+ 00027049  0x00006d54 hfetch  0x00000002 , 0x00008050 
+ 00027050  0x00006d55 set0  0x0000000d , 0x0000003f 
+ 00027051  0x00006d56 hstore  0x00000002 , 0x00008050 
+ 00027052  0x00006d57 nop  0x00000064 
+ 00027053  0x00006d58 rtn 
+ 00027054  0x00006d64 fetcht  0x00000003 , 0x00000a9c 
+ 00027055  0x00006d65 setarg  0x00b71b00 
+ 00027056  0x00006d66 idiv  0x00000002 
+ 00027057  0x00006d67 call  0x00007f86 
+ 00027058  0x00006d68 quotient  0x00000002 
+ 00027059  0x00006d69 fetch  0x00000001 , 0x00000a9f 
+ 00027060  0x00006d6a imul32  0x00000002 , 0x0000003f 
+ 00027061  0x00006d6b div  0x0000003f , 0x00000064 
+ 00027062  0x00006d6c call  0x00007f86 
+ 00027063  0x00006d6d quotient  0x00000011 
+ 00027064  0x00006d6e copy  0x00000002 , 0x0000003f 
+ 00027065  0x00006d6f isub  0x00000011 , 0x00000012 
+ 00027066  0x00006d70 fetch  0x00000001 , 0x00000a9b 
+ 00027067  0x00006d71 call  0x000069be 
+ 00027068  0x00006d72 fetch  0x00000001 , 0x00000a9a 
+ 00027069  0x00006d73 branch  0x000069d5 
+ 00027070  0x00006d77 beq  0x00000000 , 0x000069c4 
+ 00027071  0x00006d78 beq  0x00000001 , 0x000069c6 
+ 00027072  0x00006d79 beq  0x00000002 , 0x000069c8 
+ 00027073  0x00006d7a beq  0x00000003 , 0x000069ca 
+ 00027074  0x00006d7b beq  0x00000004 , 0x000069cc 
+ 00027075  0x00006d7c beq  0x00000005 , 0x000069ce 
+ 00027076  0x00006d7e arg  0x000080a0 , 0x00000005 
+ 00027077  0x00006d7f branch  0x000069d0 
+ 00027078  0x00006d81 arg  0x000080a4 , 0x00000005 
+ 00027079  0x00006d82 branch  0x000069d0 
+ 00027080  0x00006d84 arg  0x000080a8 , 0x00000005 
+ 00027081  0x00006d85 branch  0x000069d0 
+ 00027082  0x00006d87 arg  0x00008064 , 0x00000005 
+ 00027083  0x00006d88 branch  0x000069d0 
+ 00027084  0x00006d8a arg  0x00008068 , 0x00000005 
+ 00027085  0x00006d8b branch  0x000069d0 
+ 00027086  0x00006d8d arg  0x0000806c , 0x00000005 
+ 00027087  0x00006d8e branch  0x000069d0 
+ 00027088  0x00006d90 copy  0x00000011 , 0x0000003f 
+ 00027089  0x00006d91 istore  0x00000002 , 0x00000005 
+ 00027090  0x00006d92 copy  0x00000012 , 0x0000003f 
+ 00027091  0x00006d93 istore  0x00000002 , 0x00000005 
+ 00027092  0x00006d94 rtn 
+ 00027093  0x00006d99 enable  0x00000028 
+ 00027094  0x00006d9a branch  0x000069d8 
+ 00027095  0x00006d9c disable  0x00000028 
+ 00027096  0x00006d9e beq  0x00000004 , 0x000069e3 
+ 00027097  0x00006d9f beq  0x00000005 , 0x000069e5 
+ 00027098  0x00006da0 beq  0x0000001b , 0x000069e7 
+ 00027099  0x00006da1 beq  0x0000001c , 0x000069e9 
+ 00027100  0x00006da2 beq  0x00000003 , 0x000069eb 
+ 00027101  0x00006da3 beq  0x00000008 , 0x000069ed 
+ 00027102  0x00006da4 beq  0x00000014 , 0x000069ef 
+ 00027103  0x00006da5 beq  0x00000015 , 0x000069f1 
+ 00027104  0x00006da6 beq  0x00000016 , 0x000069f3 
+ 00027105  0x00006da7 beq  0x00000017 , 0x000069f5 
+ 00027106  0x00006da8 rtn 
+ 00027107  0x00006dac arg  0x00000006 , 0x00000007 
+ 00027108  0x00006dad branch  0x000069ff 
+ 00027109  0x00006daf arg  0x00000007 , 0x00000007 
+ 00027110  0x00006db0 branch  0x000069ff 
+ 00027111  0x00006db2 arg  0x00000008 , 0x00000007 
+ 00027112  0x00006db3 branch  0x000069ff 
+ 00027113  0x00006db5 arg  0x00000009 , 0x00000007 
+ 00027114  0x00006db6 branch  0x000069ff 
+ 00027115  0x00006db8 arg  0x0000000a , 0x00000007 
+ 00027116  0x00006db9 branch  0x000069ff 
+ 00027117  0x00006dbb arg  0x0000000b , 0x00000007 
+ 00027118  0x00006dbc branch  0x000069ff 
+ 00027119  0x00006dbe arg  0x0000000c , 0x00000007 
+ 00027120  0x00006dbf branch  0x00006a01 
+ 00027121  0x00006dc1 arg  0x0000000d , 0x00000007 
+ 00027122  0x00006dc2 branch  0x00006a01 
+ 00027123  0x00006dc4 arg  0x0000000e , 0x00000007 
+ 00027124  0x00006dc5 branch  0x00006a01 
+ 00027125  0x00006dc7 arg  0x0000000f , 0x00000007 
+ 00027126  0x00006dc8 branch  0x00006a01 
+ 00027127  0x00006dcb hfetch  0x00000002 , 0x00008081 
+ 00027128  0x00006dcc qsetflag  0x00000028 , 0x0000003f 
+ 00027129  0x00006dcd hstore  0x00000002 , 0x00008081 
+ 00027130  0x00006dce copy  0x00000011 , 0x00000007 
+ 00027131  0x00006dcf hfetch  0x00000001 , 0x00008085 
+ 00027132  0x00006dd0 qsetflag  0x00000028 , 0x0000003f 
+ 00027133  0x00006dd1 hstore  0x00000001 , 0x00008085 
+ 00027134  0x00006dd2 rtn 
+ 00027135  0x00006dd5 add  0x00000007 , 0xfffffffc , 0x00000011 
+ 00027136  0x00006dd6 branch  0x000069f7 
+ 00027137  0x00006dd9 add  0x00000007 , 0xfffffff6 , 0x00000011 
+ 00027138  0x00006dda branch  0x000069f7 
+ 00027139  0x00006de0 rtn  0x0000002b 
+ 00027140  0x00006de1 jam  0x00000000 , 0x00004567 
+ 00027141  0x00006de2 jam  0x00000003 , 0x000004ed 
+ 00027142  0x00006de3 jam  0x00000003 , 0x000004ee 
+ 00027143  0x00006de4 jam  0x00000011 , 0x000004f2 
+ 00027144  0x00006de5 jam  0x00000013 , 0x000004f3 
+ 00027145  0x00006de6 setarg  0x00000000 
+ 00027146  0x00006de7 store  0x00000003 , 0x000004ef 
+ 00027147  0x00006de8 store  0x00000001 , 0x00004254 
+ 00027148  0x00006de9 jam  0x00000000 , 0x00004681 
+ 00027149  0x00006dec bpatchx  0x000000a4 , 0x00004034 
+ 00027150  0x00006ded setarg  0x00000000 
+ 00027151  0x00006dee store  0x00000001 , 0x00004254 
+ 00027152  0x00006def store  0x00000001 , 0x00004564 
+ 00027153  0x00006df0 store  0x00000001 , 0x0000455d 
+ 00027154  0x00006df1 fetch  0x00000001 , 0x0000456b 
+ 00027155  0x00006df2 beq  0x00000001 , 0x00006a16 
+ 00027156  0x00006df3 jam  0x00000050 , 0x00004569 
+ 00027157  0x00006df4 rtn 
+ 00027158  0x00006df7 jam  0x00000000 , 0x00004569 
+ 00027159  0x00006df8 rtn 
+ 00027160  0x00006dfb or_into  0x00000002 , 0x00000002 
+ 00027161  0x00006dfc rtn 
+ 00027162  0x00006e09 copy  0x00000002 , 0x0000003f 
+ 00027163  0x00006e0a reverse  0x0000003f , 0x0000003f 
+ 00027164  0x00006e0b store  0x00000001 , 0x00004562 
+ 00027165  0x00006e0c force  0x0000003f , 0x0000003f 
+ 00027166  0x00006e0d reverse  0x0000003f , 0x0000003f 
+ 00027167  0x00006e0e store  0x00000001 , 0x00004561 
+ 00027168  0x00006e0f force  0x00000001 , 0x0000003f 
+ 00027169  0x00006e10 reverse  0x0000003f , 0x0000003f 
+ 00027170  0x00006e11 store  0x00000001 , 0x00004560 
+ 00027171  0x00006e12 call  0x00006a50 
+ 00027172  0x00006e13 copy  0x00000002 , 0x0000003f 
+ 00027173  0x00006e14 rtn 
+ 00027174  0x00006e16 reverse  0x0000003f , 0x0000003f 
+ 00027175  0x00006e17 store  0x00000001 , 0x00004562 
+ 00027176  0x00006e18 force  0x00000073 , 0x0000003f 
+ 00027177  0x00006e19 reverse  0x0000003f , 0x0000003f 
+ 00027178  0x00006e1a store  0x00000001 , 0x00004561 
+ 00027179  0x00006e1b force  0x00000001 , 0x0000003f 
+ 00027180  0x00006e1c reverse  0x0000003f , 0x0000003f 
+ 00027181  0x00006e1d store  0x00000001 , 0x00004560 
+ 00027182  0x00006e1e branch  0x00006a50 
+ 00027183  0x00006e21 fetch  0x00000001 , 0x00004563 
+ 00027184  0x00006e22 branch  0x00006a33 , 0x00000034 
+ 00027185  0x00006e23 setarg  0x00000070 
+ 00027186  0x00006e24 rtn 
+ 00027187  0x00006e26 setarg  0x000000aa 
+ 00027188  0x00006e27 rtn 
+ 00027189  0x00006e2a reverse  0x0000003f , 0x0000003f 
+ 00027190  0x00006e2b store  0x00000001 , 0x00004562 
+ 00027191  0x00006e2c force  0x000000ef , 0x0000003f 
+ 00027192  0x00006e2d call  0x00006a44 
+ 00027193  0x00006e2e fetcht  0x00000002 , 0x000004f7 
+ 00027194  0x00006e2f copy  0x00000002 , 0x00000005 
+ 00027195  0x00006e30 istore  0x00000001 , 0x00000005 
+ 00027196  0x00006e31 copy  0x00000005 , 0x00000002 
+ 00027197  0x00006e32 storet  0x00000002 , 0x000004f7 
+ 00027198  0x00006e33 force  0x000000ff , 0x0000003f 
+ 00027199  0x00006e34 call  0x00006a44 
+ 00027200  0x00006e35 fetcht  0x00000002 , 0x000004f7 
+ 00027201  0x00006e36 copy  0x00000002 , 0x00000005 
+ 00027202  0x00006e37 istore  0x00000001 , 0x00000005 
+ 00027203  0x00006e38 rtn 
+ 00027204  0x00006e42 reverse  0x0000003f , 0x0000003f 
+ 00027205  0x00006e43 store  0x00000001 , 0x00004561 
+ 00027206  0x00006e44 fetch  0x00000002 , 0x00004561 
+ 00027207  0x00006e45 lshift8  0x0000003f , 0x0000003f 
+ 00027208  0x00006e46 store  0x00000003 , 0x000004f4 
+ 00027209  0x00006e47 arg  0x00000107 , 0x00000011 
+ 00027210  0x00006e48 arg  0x0000000f , 0x00000012 
+ 00027211  0x00006e49 call  0x00006a5d 
+ 00027212  0x00006e4a xor_into  0x000000d7 , 0x0000003f 
+ 00027213  0x00006e4b invert  0x0000003f , 0x0000003f 
+ 00027214  0x00006e4c reverse  0x0000003f , 0x0000003f 
+ 00027215  0x00006e4d rtn 
+ 00027216  0x00006e58 fetch  0x00000003 , 0x00004560 
+ 00027217  0x00006e59 store  0x00000003 , 0x000004f4 
+ 00027218  0x00006e5a arg  0x00000107 , 0x00000011 
+ 00027219  0x00006e5b arg  0x0000000f , 0x00000012 
+ 00027220  0x00006e5c call  0x00006a5d 
+ 00027221  0x00006e5d lshift8  0x0000003f , 0x0000003f 
+ 00027222  0x00006e5e arg  0x00000007 , 0x00000012 
+ 00027223  0x00006e5f call  0x00006a5d 
+ 00027224  0x00006e60 xor_into  0x0000002b , 0x0000003f 
+ 00027225  0x00006e61 invert  0x0000003f , 0x0000003f 
+ 00027226  0x00006e62 reverse  0x0000003f , 0x0000003f 
+ 00027227  0x00006e63 copy  0x0000003f , 0x00000002 
+ 00027228  0x00006e64 rtn 
+ 00027229  0x00006e67 arg  0x00000000 , 0x00000013 
+ 00027230  0x00006e68 copy  0x00000012 , 0x00000039 
+ 00027231  0x00006e69 call  0x00007e71 
+ 00027232  0x00006e6a icopy  0x00000002 
+ 00027233  0x00006e70 copy  0x00000002 , 0x0000003f 
+ 00027234  0x00006e71 lshift  0x00000013 , 0x00000013 
+ 00027235  0x00006e72 bbit0  0x00000008 , 0x00006a66 
+ 00027236  0x00006e73 ixor  0x00000011 , 0x00000002 
+ 00027237  0x00006e74 increase  0x00000001 , 0x00000013 
+ 00027238  0x00006e76 lshift  0x00000002 , 0x00000002 
+ 00027239  0x00006e77 fetch  0x00000003 , 0x000004f4 
+ 00027240  0x00006e78 increase  0xffffffff , 0x00000012 
+ 00027241  0x00006e79 compare  0x000000ff , 0x00000012 , 0x000000ff 
+ 00027242  0x00006e7a branch  0x00006a70 , 0x00000001 
+ 00027243  0x00006e7b copy  0x00000012 , 0x00000039 
+ 00027244  0x00006e7c call  0x00007e71 
+ 00027245  0x00006e7d isolate1  0x00000000 , 0x0000003f 
+ 00027246  0x00006e7e setflag  0x00000001 , 0x00000000 , 0x00000002 
+ 00027247  0x00006e7f branch  0x00006a61 
+ 00027248  0x00006e82 rshift  0x00000002 , 0x0000003f 
+ 00027249  0x00006e83 rtn 
+ 00027250  0x00006e86 fetcht  0x00000001 , 0x0000455d 
+ 00027251  0x00006e89 lshift2  0x00000002 , 0x00000002 
+ 00027252  0x00006e8a set1  0x00000000 , 0x00000002 
+ 00027253  0x00006e8b fetch  0x00000001 , 0x00004563 
+ 00027254  0x00006e8c ncall  0x00006a18 , 0x00000034 
+ 00027255  0x00006e8d storet  0x00000001 , 0x0000050d 
+ 00027256  0x00006e8e rtn 
+ 00027257  0x00006e92 lshift  0x00000002 , 0x00000002 
+ 00027258  0x00006e93 fetch  0x00000001 , 0x00004563 
+ 00027259  0x00006e94 setflag  0x00000034 , 0x00000000 , 0x00000002 
+ 00027260  0x00006e96 rtn 
+ 00027261  0x00006e98 fetcht  0x00000001 , 0x000004fc 
+ 00027262  0x00006e99 jam  0x000000d7 , 0x000004fe 
+ 00027263  0x00006e9a call  0x00006bb6 
+ 00027264  0x00006e9b fetch  0x00000001 , 0x00004251 
+ 00027265  0x00006e9c set1  0x00000006 , 0x0000003f 
+ 00027266  0x00006e9d set1  0x00000007 , 0x0000003f 
+ 00027267  0x00006e9e store  0x00000001 , 0x00004251 
+ 00027268  0x00006e9f jam  0x00000000 , 0x00004563 
+ 00027269  0x00006ea0 branch  0x00006b97 
+ 00027270  0x00006ea2 fetch  0x00000001 , 0x00004251 
+ 00027271  0x00006ea3 set1  0x00000007 , 0x0000003f 
+ 00027272  0x00006ea4 store  0x00000001 , 0x00004251 
+ 00027273  0x00006ea5 branch  0x00006b97 
+ 00027274  0x00006ea9 bpatchx  0x000000a5 , 0x00004034 
+ 00027275  0x00006eaa fetch  0x00000001 , 0x00004681 
+ 00027276  0x00006eab beq  0x00000000 , 0x00006a8e 
+ 00027277  0x00006eac branch  0x00006b4c 
+ 00027278  0x00006eaf fetch  0x00000002 , 0x00000264 
+ 00027279  0x00006eb0 copy  0x0000003f , 0x00000006 
+ 00027280  0x00006eb1 call  0x00006ab8 
+ 00027281  0x00006eb2 fetch  0x00000001 , 0x000004fc 
+ 00027282  0x00006eb3 beq  0x00000000 , 0x00006a94 
+ 00027283  0x00006eb4 branch  0x00006b18 
+ 00027284  0x00006eb6 bpatchx  0x000000a6 , 0x00004034 
+ 00027285  0x00006eb7 fetch  0x00000001 , 0x000004fd 
+ 00027286  0x00006eb8 beq  0x0000003f , 0x00006a7d 
+ 00027287  0x00006eb9 beq  0x00000073 , 0x00006a86 
+ 00027288  0x00006eba beq  0x000000ef , 0x00006a9b 
+ 00027289  0x00006ebb beq  0x00000053 , 0x00006b44 
+ 00027290  0x00006ebc rtn 
+ 00027291  0x00006ec0 fetch  0x00000002 , 0x00000501 
+ 00027292  0x00006ec1 copy  0x0000003f , 0x00000006 
+ 00027293  0x00006ec2 call  0x00006ac3 
+ 00027294  0x00006ec3 fetch  0x00000001 , 0x00000503 
+ 00027295  0x00006ec4 beq  0x00000041 , 0x00006aa5 
+ 00027296  0x00006ec5 beq  0x00000040 , 0x00006aad 
+ 00027297  0x00006ec6 beq  0x00000071 , 0x00006ae6 
+ 00027298  0x00006ec7 beq  0x00000070 , 0x00006af2 
+ 00027299  0x00006ec8 beq  0x00000049 , 0x00006afd 
+ 00027300  0x00006ec9 branch  0x00006b97 
+ 00027301  0x00006ecc call  0x00006aaf 
+ 00027302  0x00006ece branch  0x00006aa7 
+ 00027303  0x00006ed1 fetch  0x00000001 , 0x00004254 
+ 00027304  0x00006ed2 set1  0x00000000 , 0x0000003f 
+ 00027305  0x00006ed3 set1  0x00000001 , 0x0000003f 
+ 00027306  0x00006ed4 store  0x00000001 , 0x00004254 
+ 00027307  0x00006ed5 call  0x00006be0 
+ 00027308  0x00006ed6 branch  0x00006b97 
+ 00027309  0x00006ed9 call  0x00006aaf 
+ 00027310  0x00006eda branch  0x00006b97 
+ 00027311  0x00006edd call  0x00006acb 
+ 00027312  0x00006ede branch  0x00006ad7 
+ 00027313  0x00006ee1 call  0x00006acb 
+ 00027314  0x00006ee2 ifetch  0x00000001 , 0x00000006 
+ 00027315  0x00006ee3 rshift3  0x0000003f , 0x0000003f 
+ 00027316  0x00006ee4 store  0x00000001 , 0x0000456a 
+ 00027317  0x00006ee5 ifetch  0x00000001 , 0x00000006 
+ 00027318  0x00006ee6 store  0x00000001 , 0x00000508 
+ 00027319  0x00006ee7 rtn 
+ 00027320  0x00006eeb ifetch  0x00000001 , 0x00000006 
+ 00027321  0x00006eec store  0x00000001 , 0x000004fb 
+ 00027322  0x00006eed rshift3  0x0000003f , 0x0000003f 
+ 00027323  0x00006eee store  0x00000001 , 0x000004fc 
+ 00027324  0x00006eef ifetch  0x00000001 , 0x00000006 
+ 00027325  0x00006ef0 store  0x00000001 , 0x000004fd 
+ 00027326  0x00006ef2 call  0x00006ace 
+ 00027327  0x00006ef3 storet  0x00000002 , 0x000004ff 
+ 00027328  0x00006ef4 copy  0x00000006 , 0x0000003f 
+ 00027329  0x00006ef5 store  0x00000002 , 0x00000501 
+ 00027330  0x00006ef6 rtn 
+ 00027331  0x00006ef9 ifetch  0x00000001 , 0x00000006 
+ 00027332  0x00006efa rshift  0x0000003f , 0x0000003f 
+ 00027333  0x00006efb store  0x00000001 , 0x00000503 
+ 00027334  0x00006efc call  0x00006ace 
+ 00027335  0x00006efd storet  0x00000002 , 0x00000504 
+ 00027336  0x00006efe copy  0x00000006 , 0x0000003f 
+ 00027337  0x00006eff store  0x00000002 , 0x00000506 
+ 00027338  0x00006f00 rtn 
+ 00027339  0x00006f04 fetch  0x00000002 , 0x00000506 
+ 00027340  0x00006f05 copy  0x0000003f , 0x00000006 
+ 00027341  0x00006f06 rtn 
+ 00027342  0x00006f09 ifetch  0x00000001 , 0x00000006 
+ 00027343  0x00006f0a copy  0x0000003f , 0x00000002 
+ 00027344  0x00006f0b rshift  0x00000002 , 0x00000002 
+ 00027345  0x00006f0c rtnbit1  0x00000000 
+ 00027346  0x00006f0d ifetch  0x00000001 , 0x00000006 
+ 00027347  0x00006f0e lshift3  0x0000003f , 0x0000003f 
+ 00027348  0x00006f0f lshift4  0x0000003f , 0x0000003f 
+ 00027349  0x00006f10 iadd  0x00000002 , 0x00000002 
+ 00027350  0x00006f11 rtn 
+ 00027351  0x00006f14 ifetch  0x00000001 , 0x00000006 
+ 00027352  0x00006f15 store  0x00000001 , 0x0000455d 
+ 00027353  0x00006f16 ifetch  0x00000001 , 0x00000006 
+ 00027354  0x00006f17 store  0x00000001 , 0x00000509 
+ 00027355  0x00006f18 ifetch  0x00000001 , 0x00000006 
+ 00027356  0x00006f19 store  0x00000001 , 0x0000050a 
+ 00027357  0x00006f1a ifetch  0x00000001 , 0x00000006 
+ 00027358  0x00006f1b store  0x00000001 , 0x0000050b 
+ 00027359  0x00006f1c ifetch  0x00000002 , 0x00000006 
+ 00027360  0x00006f1d store  0x00000002 , 0x0000455e 
+ 00027361  0x00006f1e ifetch  0x00000001 , 0x00000006 
+ 00027362  0x00006f1f store  0x00000001 , 0x0000050c 
+ 00027363  0x00006f20 ifetch  0x00000001 , 0x00000006 
+ 00027364  0x00006f21 store  0x00000001 , 0x00004568 
+ 00027365  0x00006f22 rtn 
+ 00027366  0x00006f26 call  0x00006ab1 
+ 00027367  0x00006f28 branch  0x00006ae8 
+ 00027368  0x00006f2b fetch  0x00000001 , 0x00004254 
+ 00027369  0x00006f2c set1  0x00000005 , 0x0000003f 
+ 00027370  0x00006f2d set1  0x00000006 , 0x0000003f 
+ 00027371  0x00006f2e store  0x00000001 , 0x00004254 
+ 00027372  0x00006f2f fetcht  0x00000001 , 0x0000455d 
+ 00027373  0x00006f30 lshift2  0x00000002 , 0x00000002 
+ 00027374  0x00006f31 or_into  0x00000003 , 0x00000002 
+ 00027375  0x00006f32 call  0x00006c11 
+ 00027376  0x00006f33 jam  0x00000003 , 0x00004567 
+ 00027377  0x00006f34 branch  0x00006b97 
+ 00027378  0x00006f37 jam  0x00000008 , 0x00000a99 
+ 00027379  0x00006f38 call  0x00007d86 
+ 00027380  0x00006f39 call  0x00006ab1 
+ 00027381  0x00006f3a fetch  0x00000001 , 0x0000456a 
+ 00027382  0x00006f3b sub  0x0000003f , 0x00000001 , 0x0000003e 
+ 00027383  0x00006f3c branch  0x00006af9 , 0x00000005 
+ 00027384  0x00006f3d branch  0x00002a8c 
+ 00027385  0x00006f3f fetch  0x00000001 , 0x00004254 
+ 00027386  0x00006f40 set1  0x00000007 , 0x0000003f 
+ 00027387  0x00006f41 store  0x00000001 , 0x00004254 
+ 00027388  0x00006f42 branch  0x00006b97 
+ 00027389  0x00006f45 call  0x00006acb 
+ 00027390  0x00006f46 ifetch  0x00000001 , 0x00000006 
+ 00027391  0x00006f47 store  0x00000001 , 0x00000ac2 
+ 00027392  0x00006f48 call  0x000052d2 
+ 00027393  0x00006f49 call  0x000052e0 
+ 00027394  0x00006f4a setarg  0x0000000e 
+ 00027395  0x00006f4b istore  0x00000002 , 0x00000005 
+ 00027396  0x00006f4c fetch  0x00000002 , 0x0000424a 
+ 00027397  0x00006f4d istore  0x00000002 , 0x00000005 
+ 00027398  0x00006f4e fetch  0x00000001 , 0x00004563 
+ 00027399  0x00006f50 lshift  0x0000003f , 0x0000003f 
+ 00027400  0x00006f51 set1  0x00000000 , 0x0000003f 
+ 00027401  0x00006f52 istore  0x00000001 , 0x00000005 
+ 00027402  0x00006f53 bpatchx  0x000000a7 , 0x00004034 
+ 00027403  0x00006f54 setarg  0x000015ef 
+ 00027404  0x00006f55 istore  0x00000002 , 0x00000005 
+ 00027405  0x00006f56 setarg  0x00001191 
+ 00027406  0x00006f57 istore  0x00000002 , 0x00000005 
+ 00027407  0x00006f5a fetch  0x00000001 , 0x00000ac2 
+ 00027408  0x00006f5b istore  0x00000001 , 0x00000005 
+ 00027409  0x00006f5c setarg  0x00000007 
+ 00027410  0x00006f5d istore  0x00000005 , 0x00000005 
+ 00027411  0x00006f60 setarg  0x00000001 
+ 00027412  0x00006f61 istore  0x00000002 , 0x00000005 
+ 00027413  0x00006f64 call  0x00006a2f 
+ 00027414  0x00006f65 istore  0x00000001 , 0x00000005 
+ 00027415  0x00006f66 rtn 
+ 00027416  0x00006f6b branch  0x00006b19 
+ 00027417  0x00006f6e bpatchx  0x000000a8 , 0x00004035 
+ 00027418  0x00006f6f fetch  0x00000001 , 0x000004fd 
+ 00027419  0x00006f70 beq  0x00000073 , 0x00006b21 
+ 00027420  0x00006f71 beq  0x0000003f , 0x00006b25 
+ 00027421  0x00006f72 beq  0x000000ef , 0x00006b3f 
+ 00027422  0x00006f73 beq  0x000000ff , 0x00006b37 
+ 00027423  0x00006f74 beq  0x00000053 , 0x00006b46 
+ 00027424  0x00006f75 rtn 
+ 00027425  0x00006f77 fetch  0x00000001 , 0x00004254 
+ 00027426  0x00006f78 set1  0x00000003 , 0x0000003f 
+ 00027427  0x00006f79 store  0x00000001 , 0x00004254 
+ 00027428  0x00006f7a branch  0x00006b97 
+ 00027429  0x00006f7c fetch  0x00000001 , 0x00004254 
+ 00027430  0x00006f7d set1  0x00000003 , 0x0000003f 
+ 00027431  0x00006f7e set1  0x00000002 , 0x0000003f 
+ 00027432  0x00006f7f store  0x00000001 , 0x00004254 
+ 00027433  0x00006f80 fetch  0x00000001 , 0x000004fb 
+ 00027434  0x00006f81 call  0x00006a26 
+ 00027435  0x00006f82 store  0x00000001 , 0x000004fe 
+ 00027436  0x00006f83 call  0x00006bb6 
+ 00027437  0x00006f84 fetch  0x00000001 , 0x000004fb 
+ 00027438  0x00006f85 rshift2  0x0000003f , 0x0000003f 
+ 00027439  0x00006f86 store  0x00000001 , 0x0000455d 
+ 00027440  0x00006f87 lshift2  0x0000003f , 0x0000003f 
+ 00027441  0x00006f88 set0  0x00000001 , 0x0000003f 
+ 00027442  0x00006f89 set1  0x00000000 , 0x0000003f 
+ 00027443  0x00006f8a arg  0x00004565 , 0x00000002 
+ 00027444  0x00006f8b storet  0x00000002 , 0x000004f7 
+ 00027445  0x00006f8c call  0x00006a35 
+ 00027446  0x00006f8d branch  0x00006b97 
+ 00027447  0x00006f90 fetch  0x00000002 , 0x00000501 
+ 00027448  0x00006f91 copy  0x0000003f , 0x00000006 
+ 00027449  0x00006f92 increase  0x00000001 , 0x0000003f 
+ 00027450  0x00006f93 store  0x00000002 , 0x00000501 
+ 00027451  0x00006f94 ifetch  0x00000001 , 0x00000006 
+ 00027452  0x00006f95 fetcht  0x00000001 , 0x00004568 
+ 00027453  0x00006f96 iadd  0x00000002 , 0x0000003f 
+ 00027454  0x00006f97 store  0x00000001 , 0x00004568 
+ 00027455  0x00006f99 call  0x00006c42 
+ 00027456  0x00006f9b call  0x00006a72 
+ 00027457  0x00006f9c call  0x00006c28 
+ 00027458  0x00006f9d call  0x00006c4b 
+ 00027459  0x00006f9e branch  0x00006b97 
+ 00027460  0x00006fa1 jam  0x00000009 , 0x00000a99 
+ 00027461  0x00006fa2 call  0x00007d86 
+ 00027462  0x00006fa4 call  0x00006a0d 
+ 00027463  0x00006fa5 fetch  0x00000001 , 0x000004fb 
+ 00027464  0x00006fa6 call  0x00006a26 
+ 00027465  0x00006fa7 store  0x00000001 , 0x000004fe 
+ 00027466  0x00006fa8 call  0x00006bb6 
+ 00027467  0x00006fa9 branch  0x00006b97 
+ 00027468  0x00006faf fetch  0x00000002 , 0x00000264 
+ 00027469  0x00006fb0 copy  0x0000003f , 0x00000006 
+ 00027470  0x00006fb1 call  0x00006ab8 
+ 00027471  0x00006fb2 fetch  0x00000001 , 0x000004fc 
+ 00027472  0x00006fb3 beq  0x00000000 , 0x00006b52 
+ 00027473  0x00006fb4 branch  0x00006b86 
+ 00027474  0x00006fb7 bpatchx  0x000000a9 , 0x00004035 
+ 00027475  0x00006fb8 fetch  0x00000001 , 0x000004fd 
+ 00027476  0x00006fb9 beq  0x0000003f , 0x00006a7d 
+ 00027477  0x00006fba beq  0x00000073 , 0x00006a86 
+ 00027478  0x00006fbb beq  0x000000ef , 0x00006b58 
+ 00027479  0x00006fbc branch  0x00006b97 
+ 00027480  0x00006fbe fetch  0x00000002 , 0x00000501 
+ 00027481  0x00006fbf copy  0x0000003f , 0x00000006 
+ 00027482  0x00006fc0 call  0x00006ac3 
+ 00027483  0x00006fc1 fetch  0x00000001 , 0x00000503 
+ 00027484  0x00006fc2 beq  0x00000041 , 0x00006b61 
+ 00027485  0x00006fc3 beq  0x00000040 , 0x00006b61 
+ 00027486  0x00006fc4 beq  0x00000071 , 0x00006b6c 
+ 00027487  0x00006fc5 beq  0x00000070 , 0x00006b7c 
+ 00027488  0x00006fc6 branch  0x00006b97 
+ 00027489  0x00006fc9 call  0x00006aaf 
+ 00027490  0x00006fca fetch  0x00000001 , 0x0000455d 
+ 00027491  0x00006fcb rshift  0x0000003f , 0x0000003f 
+ 00027492  0x00006fcc fetcht  0x00000001 , 0x00004564 
+ 00027493  0x00006fcd isub  0x00000002 , 0x0000003e 
+ 00027494  0x00006fce branch  0x00006b68 , 0x00000005 
+ 00027495  0x00006fcf branch  0x00002a8c 
+ 00027496  0x00006fd1 fetch  0x00000001 , 0x00004254 
+ 00027497  0x00006fd2 set1  0x00000001 , 0x0000003f 
+ 00027498  0x00006fd3 store  0x00000001 , 0x00004254 
+ 00027499  0x00006fd4 branch  0x00006b97 
+ 00027500  0x00006fd7 call  0x00006ab1 
+ 00027501  0x00006fd8 fetch  0x00000001 , 0x0000456a 
+ 00027502  0x00006fd9 fetcht  0x00000001 , 0x00004564 
+ 00027503  0x00006fda isub  0x00000002 , 0x0000003e 
+ 00027504  0x00006fdb branch  0x00006b73 , 0x00000005 
+ 00027505  0x00006fdc branch  0x00002a8c 
+ 00027506  0x00006fdd branch  0x00006b97 
+ 00027507  0x00006fdf fetch  0x00000001 , 0x00004254 
+ 00027508  0x00006fe0 set1  0x00000005 , 0x0000003f 
+ 00027509  0x00006fe1 set1  0x00000006 , 0x0000003f 
+ 00027510  0x00006fe2 store  0x00000001 , 0x00004254 
+ 00027511  0x00006fe3 fetcht  0x00000001 , 0x0000455d 
+ 00027512  0x00006fe4 lshift2  0x00000002 , 0x00000002 
+ 00027513  0x00006fe5 or_into  0x00000003 , 0x00000002 
+ 00027514  0x00006fe6 call  0x00006c11 
+ 00027515  0x00006fe7 branch  0x00006b97 
+ 00027516  0x00006fea call  0x00006ab1 
+ 00027517  0x00006feb fetch  0x00000001 , 0x0000456a 
+ 00027518  0x00006fec fetcht  0x00000001 , 0x00004564 
+ 00027519  0x00006fed isub  0x00000002 , 0x0000003e 
+ 00027520  0x00006fee branch  0x00006b82 , 0x00000005 
+ 00027521  0x00006fef branch  0x00002a8c 
+ 00027522  0x00006ff1 fetch  0x00000001 , 0x00004254 
+ 00027523  0x00006ff2 set1  0x00000007 , 0x0000003f 
+ 00027524  0x00006ff3 store  0x00000001 , 0x00004254 
+ 00027525  0x00006ff4 branch  0x00006b97 
+ 00027526  0x00006ff7 fetch  0x00000001 , 0x000004fc 
+ 00027527  0x00006ff8 fetcht  0x00000001 , 0x00004564 
+ 00027528  0x00006ff9 isub  0x00000002 , 0x0000003e 
+ 00027529  0x00006ffa branch  0x00006b8c , 0x00000005 
+ 00027530  0x00006ffb branch  0x00002a8c 
+ 00027531  0x00006ffc branch  0x00006b97 
+ 00027532  0x00006fff fetch  0x00000001 , 0x000004fd 
+ 00027533  0x00007000 beq  0x00000073 , 0x00006b91 
+ 00027534  0x00007001 beq  0x000000ef , 0x00006b3f 
+ 00027535  0x00007002 beq  0x000000ff , 0x00006b37 
+ 00027536  0x00007003 beq  0x00000053 , 0x00006b96 
+ 00027537  0x00007005 fetch  0x00000001 , 0x00004254 
+ 00027538  0x00007006 set1  0x00000003 , 0x0000003f 
+ 00027539  0x00007007 store  0x00000001 , 0x00004254 
+ 00027540  0x00007008 branch  0x00006b97 
+ 00027541  0x0000700a branch  0x00006b95 
+ 00027542  0x0000700c branch  0x00006b46 
+ 00027543  0x0000700e rtn 
+ 00027544  0x00007011 fetch  0x00000001 , 0x00004567 
+ 00027545  0x00007012 rtn  0x00000034 
+ 00027546  0x00007013 beq  0x00000003 , 0x00006b9c 
+ 00027547  0x00007014 branch  0x00002a8c 
+ 00027548  0x00007017 jam  0x00000000 , 0x00004567 
+ 00027549  0x00007018 call  0x000052d2 
+ 00027550  0x00007019 arg  0x00000001 , 0x00000002 
+ 00027551  0x0000701a fetcht  0x00000001 , 0x0000455d 
+ 00027552  0x0000701b lshift2  0x00000002 , 0x00000002 
+ 00027553  0x0000701d or_into  0x00000003 , 0x00000002 
+ 00027554  0x0000701e arg  0x000000aa , 0x00000011 
+ 00027555  0x0000701f call  0x00006bfc 
+ 00027556  0x00007020 call  0x000052e0 
+ 00027557  0x00007021 copy  0x00000005 , 0x00000006 
+ 00027558  0x00007022 ifetch  0x00000002 , 0x00000006 
+ 00027559  0x00007023 branch  0x00002a8c , 0x00000034 
+ 00027560  0x00007024 rtn 
+ 00027561  0x00007027 call  0x000052e0 
+ 00027562  0x00007028 setarg  0x00000004 
+ 00027563  0x00007029 istore  0x00000002 , 0x00000005 
+ 00027564  0x0000702a fetch  0x00000002 , 0x0000424a 
+ 00027565  0x0000702b istore  0x00000002 , 0x00000005 
+ 00027566  0x0000702c fetch  0x00000001 , 0x000004fb 
+ 00027567  0x0000702d istore  0x00000001 , 0x00000005 
+ 00027568  0x0000702e bpatchx  0x000000aa , 0x00004035 
+ 00027569  0x0000702f setarg  0x0000013f 
+ 00027570  0x00007030 istore  0x00000002 , 0x00000005 
+ 00027571  0x00007031 fetch  0x00000001 , 0x000004fe 
+ 00027572  0x00007032 istore  0x00000001 , 0x00000005 
+ 00027573  0x00007033 rtn 
+ 00027574  0x00007035 call  0x000052d2 
+ 00027575  0x00007036 call  0x000052e0 
+ 00027576  0x00007037 setarg  0x00000004 
+ 00027577  0x00007038 istore  0x00000002 , 0x00000005 
+ 00027578  0x00007039 fetch  0x00000002 , 0x0000424a 
+ 00027579  0x0000703a istore  0x00000002 , 0x00000005 
+ 00027580  0x0000703b fetch  0x00000001 , 0x000004fb 
+ 00027581  0x0000703c istore  0x00000001 , 0x00000005 
+ 00027582  0x0000703d bpatchx  0x000000ab , 0x00004035 
+ 00027583  0x0000703e setarg  0x00000173 
+ 00027584  0x0000703f istore  0x00000002 , 0x00000005 
+ 00027585  0x00007040 fetch  0x00000001 , 0x000004fe 
+ 00027586  0x00007041 istore  0x00000001 , 0x00000005 
+ 00027587  0x00007042 rtn 
+ 00027588  0x00007044 call  0x000052e0 
+ 00027589  0x00007045 setarg  0x0000000e 
+ 00027590  0x00007046 istore  0x00000002 , 0x00000005 
+ 00027591  0x00007047 fetch  0x00000002 , 0x0000424a 
+ 00027592  0x00007048 istore  0x00000002 , 0x00000005 
+ 00027593  0x00007049 fetch  0x00000001 , 0x00004563 
+ 00027594  0x0000704a lshift  0x0000003f , 0x0000003f 
+ 00027595  0x0000704b set1  0x00000000 , 0x0000003f 
+ 00027596  0x0000704c istore  0x00000001 , 0x00000005 
+ 00027597  0x0000704d bpatchx  0x000000ac , 0x00004035 
+ 00027598  0x0000704e setarg  0x000015ef 
+ 00027599  0x0000704f istore  0x00000002 , 0x00000005 
+ 00027600  0x00007050 setarg  0x00001183 
+ 00027601  0x00007051 istore  0x00000002 , 0x00000005 
+ 00027602  0x00007052 copy  0x00000002 , 0x0000003f 
+ 00027603  0x00007053 istore  0x00000001 , 0x00000005 
+ 00027604  0x00007054 setarg  0x000000f0 
+ 00027605  0x00007055 istore  0x00000003 , 0x00000005 
+ 00027606  0x00007056 setarg  0x0000007f 
+ 00027607  0x00007057 istore  0x00000002 , 0x00000005 
+ 00027608  0x00007058 setarg  0x00000000 
+ 00027609  0x00007059 istore  0x00000001 , 0x00000005 
+ 00027610  0x0000705a setarg  0x00000001 
+ 00027611  0x0000705b istore  0x00000001 , 0x00000005 
+ 00027612  0x0000705c call  0x00006a2f 
+ 00027613  0x0000705d istore  0x00000001 , 0x00000005 
+ 00027614  0x0000705e jam  0x00000010 , 0x00004569 
+ 00027615  0x0000705f rtn 
+ 00027616  0x00007061 call  0x000052d2 
+ 00027617  0x00007062 call  0x000052e0 
+ 00027618  0x00007063 setarg  0x0000000e 
+ 00027619  0x00007064 istore  0x00000002 , 0x00000005 
+ 00027620  0x00007065 fetch  0x00000002 , 0x0000424a 
+ 00027621  0x00007066 istore  0x00000002 , 0x00000005 
+ 00027622  0x00007067 fetch  0x00000001 , 0x00004563 
+ 00027623  0x00007068 lshift  0x0000003f , 0x0000003f 
+ 00027624  0x00007069 set1  0x00000000 , 0x0000003f 
+ 00027625  0x0000706a istore  0x00000001 , 0x00000005 
+ 00027626  0x0000706b bpatchx  0x000000ad , 0x00004035 
+ 00027627  0x0000706c setarg  0x000015ef 
+ 00027628  0x0000706d istore  0x00000002 , 0x00000005 
+ 00027629  0x0000706e setarg  0x00001181 
+ 00027630  0x0000706f istore  0x00000002 , 0x00000005 
+ 00027631  0x00007070 fetch  0x00000001 , 0x0000455d 
+ 00027632  0x00007071 istore  0x00000001 , 0x00000005 
+ 00027633  0x00007072 setarg  0x000000e0 
+ 00027634  0x00007073 istore  0x00000003 , 0x00000005 
+ 00027635  0x00007074 fetch  0x00000002 , 0x0000456c 
+ 00027636  0x00007075 istore  0x00000002 , 0x00000005 
+ 00027637  0x00007076 setarg  0x00000000 
+ 00027638  0x00007077 istore  0x00000001 , 0x00000005 
+ 00027639  0x00007078 fetch  0x00000001 , 0x0000456e 
+ 00027640  0x00007079 istore  0x00000001 , 0x00000005 
+ 00027641  0x0000707a call  0x00006a2f 
+ 00027642  0x0000707b istore  0x00000001 , 0x00000005 
+ 00027643  0x0000707c rtn 
+ 00027644  0x0000707e call  0x000052e0 
+ 00027645  0x0000707f setarg  0x00000008 
+ 00027646  0x00007080 istore  0x00000002 , 0x00000005 
+ 00027647  0x00007081 fetch  0x00000002 , 0x0000424a 
+ 00027648  0x00007082 istore  0x00000002 , 0x00000005 
+ 00027649  0x00007083 fetch  0x00000001 , 0x00004563 
+ 00027650  0x00007084 lshift  0x0000003f , 0x0000003f 
+ 00027651  0x00007085 set1  0x00000000 , 0x0000003f 
+ 00027652  0x00007086 istore  0x00000001 , 0x00000005 
+ 00027653  0x00007087 bpatchx  0x000000ae , 0x00004035 
+ 00027654  0x00007088 setarg  0x000009ef 
+ 00027655  0x00007089 istore  0x00000002 , 0x00000005 
+ 00027656  0x0000708a setarg  0x000005e3 
+ 00027657  0x0000708b istore  0x00000002 , 0x00000005 
+ 00027658  0x0000708c copy  0x00000002 , 0x0000003f 
+ 00027659  0x0000708d istore  0x00000001 , 0x00000005 
+ 00027660  0x0000708e setarg  0x0000008d 
+ 00027661  0x0000708f istore  0x00000001 , 0x00000005 
+ 00027662  0x00007090 call  0x00006a2f 
+ 00027663  0x00007091 istore  0x00000001 , 0x00000005 
+ 00027664  0x00007092 rtn 
+ 00027665  0x00007095 call  0x000052d2 
+ 00027666  0x00007096 call  0x000052e0 
+ 00027667  0x00007097 setarg  0x00000008 
+ 00027668  0x00007098 istore  0x00000002 , 0x00000005 
+ 00027669  0x00007099 fetch  0x00000002 , 0x0000424a 
+ 00027670  0x0000709a istore  0x00000002 , 0x00000005 
+ 00027671  0x0000709b copy  0x00000002 , 0x0000000b 
+ 00027672  0x0000709c fetch  0x00000001 , 0x00004563 
+ 00027673  0x0000709d lshift  0x0000003f , 0x0000003f 
+ 00027674  0x0000709e set1  0x00000000 , 0x0000003f 
+ 00027675  0x0000709f istore  0x00000001 , 0x00000005 
+ 00027676  0x000070a0 bpatchx  0x000000af , 0x00004035 
+ 00027677  0x000070a1 setarg  0x000009ef 
+ 00027678  0x000070a2 istore  0x00000002 , 0x00000005 
+ 00027679  0x000070a3 setarg  0x000005e1 
+ 00027680  0x000070a4 istore  0x00000002 , 0x00000005 
+ 00027681  0x000070a5 copy  0x0000000b , 0x0000003f 
+ 00027682  0x000070a6 istore  0x00000001 , 0x00000005 
+ 00027683  0x000070a7 setarg  0x0000008d 
+ 00027684  0x000070a8 istore  0x00000001 , 0x00000005 
+ 00027685  0x000070a9 call  0x00006a2f 
+ 00027686  0x000070aa istore  0x00000001 , 0x00000005 
+ 00027687  0x000070ab rtn 
+ 00027688  0x000070ae bpatchx  0x000000b0 , 0x00004036 
+ 00027689  0x000070af fetch  0x00000001 , 0x00004569 
+ 00027690  0x000070b0 rtn  0x00000034 
+ 00027691  0x000070b1 hfetch  0x00000002 , 0x00008112 
+ 00027692  0x000070b2 nrtn  0x00000034 
+ 00027693  0x000070b3 copy  0x00000011 , 0x0000003f 
+ 00027694  0x000070b4 store  0x00000001 , 0x00000a9b 
+ 00027695  0x000070b5 storet  0x00000001 , 0x00000a9a 
+ 00027696  0x000070b6 call  0x0000526e 
+ 00027697  0x000070b7 nrtn  0x00000034 
+ 00027698  0x000070b8 call  0x000052d2 
+ 00027699  0x000070b9 call  0x000052e0 
+ 00027700  0x000070ba setarg  0x00000005 
+ 00027701  0x000070bb istore  0x00000002 , 0x00000005 
+ 00027702  0x000070bc fetch  0x00000002 , 0x0000424a 
+ 00027703  0x000070bd istore  0x00000002 , 0x00000005 
+ 00027704  0x000070be fetch  0x00000001 , 0x0000050d 
+ 00027705  0x000070bf istore  0x00000001 , 0x00000005 
+ 00027706  0x000070c0 setarg  0x000001ff 
+ 00027707  0x000070c1 istore  0x00000002 , 0x00000005 
+ 00027708  0x000070c2 fetch  0x00000001 , 0x00004569 
+ 00027709  0x000070c3 istore  0x00000001 , 0x00000005 
+ 00027710  0x000070c4 fetch  0x00000001 , 0x00004566 
+ 00027711  0x000070c5 istore  0x00000001 , 0x00000005 
+ 00027712  0x000070c6 jam  0x00000000 , 0x00004569 
+ 00027713  0x000070c7 rtn 
+ 00027714  0x000070ca bpatchx  0x000000b1 , 0x00004036 
+ 00027715  0x000070cb fetch  0x00000001 , 0x0000456b 
+ 00027716  0x000070cc rtneq  0x00000001 
+ 00027717  0x000070cd fetch  0x00000002 , 0x000004ff 
+ 00027718  0x000070ce rtn  0x00000034 
+ 00027719  0x000070cf fetch  0x00000001 , 0x00004569 
+ 00027720  0x000070d0 increase  0x00000001 , 0x0000003f 
+ 00027721  0x000070d1 store  0x00000001 , 0x00004569 
+ 00027722  0x000070d2 rtn 
+ 00027723  0x000070d5 fetch  0x00000002 , 0x0000456f 
+ 00027724  0x000070d6 branch  0x00007f9c 
+ 00027725  0x000070d9 bpatchx  0x000000b2 , 0x00004036 
+ 00027726  0x000070db fetch  0x00000001 , 0x00004568 
+ 00027727  0x000070dc rtn  0x00000034 
+ 00027728  0x000070dd increase  0xffffffff , 0x0000003f 
+ 00027729  0x000070de store  0x00000001 , 0x00004568 
+ 00027730  0x000070df fetch  0x00000002 , 0x0000455e 
+ 00027731  0x000070e0 fetcht  0x00000002 , 0x0000469f 
+ 00027732  0x000070e1 isub  0x00000002 , 0x0000003e 
+ 00027733  0x000070e2 branch  0x00006c57 , 0x00000002 
+ 00027734  0x000070e3 store  0x00000002 , 0x0000469f 
+ 00027735  0x000070e5 fetch  0x00000001 , 0x00004569 
+ 00027736  0x000070e6 branch  0x00006c5f , 0x00000034 
+ 00027737  0x000070e7 jam  0x00000001 , 0x00000510 
+ 00027738  0x000070e8 fetch  0x00000001 , 0x00004566 
+ 00027739  0x000070e9 store  0x00000001 , 0x0000050f 
+ 00027740  0x000070ea setarg  0x000000ff 
+ 00027741  0x000070eb store  0x00000001 , 0x0000050e 
+ 00027742  0x000070ec branch  0x00006c64 
+ 00027743  0x000070ee jam  0x00000000 , 0x00000510 
+ 00027744  0x000070ef fetch  0x00000001 , 0x00004565 
+ 00027745  0x000070f0 store  0x00000001 , 0x0000050f 
+ 00027746  0x000070f1 setarg  0x000000ef 
+ 00027747  0x000070f2 store  0x00000001 , 0x0000050e 
+ 00027748  0x000070f4 bpatchx  0x000000b3 , 0x00004036 
+ 00027749  0x000070f5 fetch  0x00000002 , 0x0000469f 
+ 00027750  0x000070f6 sub  0x0000003f , 0x0000007f , 0x0000003e 
+ 00027751  0x000070f7 branch  0x00006c6b , 0x00000002 
+ 00027752  0x000070f8 fetch  0x00000001 , 0x00000510 
+ 00027753  0x000070f9 increase  0x00000001 , 0x0000003f 
+ 00027754  0x000070fa store  0x00000001 , 0x00000510 
+ 00027755  0x000070fc call  0x00006a72 
+ 00027756  0x000070fd fetch  0x00000002 , 0x0000469f 
+ 00027757  0x000070fe increase  0x00000008 , 0x0000003f 
+ 00027758  0x000070ff fetcht  0x00000001 , 0x00000510 
+ 00027759  0x00007100 iadd  0x00000002 , 0x00000011 
+ 00027760  0x00007102 call  0x00005240 
+ 00027761  0x00007103 store  0x00000002 , 0x00000277 
+ 00027762  0x00007104 increase  0x00000004 , 0x0000003f 
+ 00027763  0x00007105 store  0x00000002 , 0x00000279 
+ 00027764  0x00007106 copy  0x0000003f , 0x00000005 
+ 00027765  0x00007107 fetch  0x00000001 , 0x0000050d 
+ 00027766  0x00007108 istore  0x00000001 , 0x00000005 
+ 00027767  0x00007109 fetch  0x00000001 , 0x0000050e 
+ 00027768  0x0000710a istore  0x00000001 , 0x00000005 
+ 00027769  0x0000710b call  0x00006c95 
+ 00027770  0x0000710c call  0x00006ca6 
+ 00027771  0x0000710d bpatchx  0x000000b4 , 0x00004036 
+ 00027772  0x0000710e fetch  0x00000002 , 0x00004571 
+ 00027773  0x0000710f copy  0x0000003f , 0x00000003 
+ 00027774  0x00007110 fetch  0x00000002 , 0x0000469f 
+ 00027775  0x00007111 copy  0x0000003f , 0x00000039 
+ 00027776  0x00007112 call  0x000066ea 
+ 00027777  0x00007113 copy  0x00000005 , 0x00000002 
+ 00027778  0x00007114 copy  0x00000003 , 0x0000003f 
+ 00027779  0x00007115 store  0x00000002 , 0x00004571 
+ 00027780  0x00007116 copy  0x00000002 , 0x00000005 
+ 00027781  0x00007117 fetch  0x00000001 , 0x0000050f 
+ 00027782  0x00007118 istore  0x00000001 , 0x00000005 
+ 00027783  0x00007119 fetch  0x00000002 , 0x00000277 
+ 00027784  0x0000711a copy  0x0000003f , 0x00000005 
+ 00027785  0x0000711b fetch  0x00000002 , 0x0000469f 
+ 00027786  0x0000711c fetcht  0x00000001 , 0x00000510 
+ 00027787  0x0000711d iadd  0x00000002 , 0x0000003f 
+ 00027788  0x0000711e increase  0x00000004 , 0x0000003f 
+ 00027789  0x0000711f istore  0x00000002 , 0x00000005 
+ 00027790  0x00007120 fetch  0x00000002 , 0x0000424a 
+ 00027791  0x00007121 istore  0x00000002 , 0x00000005 
+ 00027792  0x00007122 jam  0x00000000 , 0x00004569 
+ 00027793  0x00007123 fetch  0x00000002 , 0x00004573 
+ 00027794  0x00007124 beq  0x00000000 , 0x00003a97 
+ 00027795  0x00007125 jam  0x00000000 , 0x00000b05 
+ 00027796  0x00007126 rtn 
+ 00027797  0x00007129 bpatchx  0x000000b5 , 0x00004036 
+ 00027798  0x0000712a fetch  0x00000002 , 0x0000469f 
+ 00027799  0x0000712b sub  0x0000003f , 0x0000007f , 0x0000003e 
+ 00027800  0x0000712c nbranch  0x00006c9d , 0x00000002 
+ 00027801  0x0000712d lshift  0x0000003f , 0x0000003f 
+ 00027802  0x0000712e set1  0x00000000 , 0x0000003f 
+ 00027803  0x0000712f istore  0x00000001 , 0x00000005 
+ 00027804  0x00007130 rtn 
+ 00027805  0x00007132 fetch  0x00000002 , 0x0000469f 
+ 00027806  0x00007133 rshift3  0x0000003f , 0x0000003f 
+ 00027807  0x00007134 rshift4  0x0000003f , 0x00000002 
+ 00027808  0x00007135 and_into  0x0000007f , 0x0000003f 
+ 00027809  0x00007136 lshift  0x0000003f , 0x0000003f 
+ 00027810  0x00007137 set0  0x00000000 , 0x0000003f 
+ 00027811  0x00007138 istore  0x00000001 , 0x00000005 
+ 00027812  0x00007139 istoret  0x00000001 , 0x00000005 
+ 00027813  0x0000713a rtn 
+ 00027814  0x0000713c fetch  0x00000001 , 0x00004569 
+ 00027815  0x0000713d rtn  0x00000034 
+ 00027816  0x0000713e istore  0x00000001 , 0x00000005 
+ 00027817  0x0000713f rtn 
+ 00027818  0x00007145 bpatchx  0x000000b6 , 0x00004036 
+ 00027819  0x00007146 call  0x00007d9c 
+ 00027820  0x00007147 call  0x000032f6 
+ 00027821  0x00007148 call  0x0000631b 
+ 00027822  0x0000714a bpatchx  0x000000b7 , 0x00004036 
+ 00027823  0x0000714b call  0x000076dc 
+ 00027824  0x0000714c call  0x000076b5 
+ 00027825  0x0000714d call  0x000076c6 
+ 00027826  0x00007150 call  0x0000526e 
+ 00027827  0x00007151 nrtn  0x00000034 
+ 00027828  0x00007153 call  0x00004da9 
+ 00027829  0x00007154 call  0x0000526e 
+ 00027830  0x00007155 nrtn  0x00000034 
+ 00027831  0x00007156 bpatchx  0x000000b8 , 0x00004037 
+ 00027832  0x00007158 call  0x00006cf5 
+ 00027833  0x00007159 call  0x00004f64 
+ 00027834  0x0000715a call  0x00006b98 
+ 00027835  0x0000715c call  0x00006cbe 
+ 00027836  0x0000715d bpatchx  0x000000b9 , 0x00004037 
+ 00027837  0x00007160 branch  0x000032f2 
+ 00027838  0x00007163 fetch  0x00000001 , 0x0000027f 
+ 00027839  0x00007164 bbit1  0x00000000 , 0x00005087 
+ 00027840  0x00007165 bbit1  0x00000007 , 0x00005091 
+ 00027841  0x00007166 rtn 
+ 00027842  0x00007169 bpatchx  0x000000ba , 0x00004037 
+ 00027843  0x0000716a call  0x00005274 
+ 00027844  0x0000716b rtn  0x00000034 
+ 00027845  0x0000716c fetch  0x00000001 , 0x0000004b 
+ 00027846  0x0000716d rtnbit1  0x00000006 
+ 00027847  0x0000716e call  0x00005258 
+ 00027848  0x0000716f store  0x00000002 , 0x0000016f 
+ 00027849  0x00007170 copy  0x0000003f , 0x00000006 
+ 00027850  0x00007171 ifetch  0x00000002 , 0x00000006 
+ 00027851  0x00007172 increase  0x00000004 , 0x0000003f 
+ 00027852  0x00007173 store  0x00000002 , 0x000041dc 
+ 00027853  0x00007174 jam  0x00000006 , 0x000041db 
+ 00027854  0x00007175 bpatchx  0x000000bb , 0x00004037 
+ 00027855  0x00007176 fetch  0x00000002 , 0x00004246 
+ 00027856  0x00007177 branch  0x00006cdd , 0x00000034 
+ 00027857  0x00007178 fetch  0x00000001 , 0x0000004b 
+ 00027858  0x00007179 rtnbit0  0x00000007 
+ 00027859  0x0000717a set0  0x00000007 , 0x0000003f 
+ 00027860  0x0000717b store  0x00000001 , 0x0000004b 
+ 00027861  0x0000717c jam  0x00000005 , 0x000041db 
+ 00027862  0x0000717d fetcht  0x00000002 , 0x00004246 
+ 00027863  0x0000717e fetch  0x00000002 , 0x0000016f 
+ 00027864  0x0000717f iadd  0x00000002 , 0x0000003f 
+ 00027865  0x00007180 store  0x00000002 , 0x0000016f 
+ 00027866  0x00007181 fetch  0x00000002 , 0x000041dc 
+ 00027867  0x00007182 isub  0x00000002 , 0x0000003f 
+ 00027868  0x00007183 store  0x00000002 , 0x000041dc 
+ 00027869  0x00007185 bpatchx  0x000000bc , 0x00004037 
+ 00027870  0x00007186 fetch  0x00000002 , 0x000041dc 
+ 00027871  0x00007187 branch  0x00002a8c , 0x00000034 
+ 00027872  0x00007188 arg  0x00000104 , 0x00000002 
+ 00027873  0x00007189 isub  0x00000002 , 0x0000003f 
+ 00027874  0x0000718a nbranch  0x00006ce9 , 0x00000002 
+ 00027875  0x0000718b bpatchx  0x000000bd , 0x00004037 
+ 00027876  0x0000718c storet  0x00000002 , 0x000041dc 
+ 00027877  0x0000718d fetch  0x00000002 , 0x00004246 
+ 00027878  0x0000718e iadd  0x00000002 , 0x0000003f 
+ 00027879  0x0000718f store  0x00000002 , 0x00004246 
+ 00027880  0x00007190 branch  0x00006ceb 
+ 00027881  0x00007192 setarg  0x00000000 
+ 00027882  0x00007193 store  0x00000002 , 0x00004246 
+ 00027883  0x00007195 fetch  0x00000001 , 0x0000004b 
+ 00027884  0x00007196 set1  0x00000006 , 0x0000003f 
+ 00027885  0x00007197 store  0x00000001 , 0x0000004b 
+ 00027886  0x00007198 rtn 
+ 00027887  0x0000719b fetch  0x00000001 , 0x00004684 
+ 00027888  0x0000719c bbit1  0x00000000 , 0x00006cf3 
+ 00027889  0x0000719d jam  0x00000001 , 0x00000287 
+ 00027890  0x0000719e rtn 
+ 00027891  0x000071a0 jam  0x0000000f , 0x00000287 
+ 00027892  0x000071a1 rtn 
+ 00027893  0x000071a4 fetch  0x00000001 , 0x00004681 
+ 00027894  0x000071a5 nbranch  0x00006cfb , 0x00000034 
+ 00027895  0x000071a7 fetch  0x00000001 , 0x00000286 
+ 00027896  0x000071a9 rtn  0x00000034 
+ 00027897  0x000071ab jam  0x00000000 , 0x00000286 
+ 00027898  0x000071ad rtn 
+ 00027899  0x000071b1 bpatchx  0x000000be , 0x00004037 
+ 00027900  0x000071b2 fetch  0x00000001 , 0x00000287 
+ 00027901  0x000071b3 rtn  0x00000034 
+ 00027902  0x000071b4 beq  0x00000001 , 0x00006d1b 
+ 00027903  0x000071b5 beq  0x00000002 , 0x00006d74 
+ 00027904  0x000071b6 beq  0x00000003 , 0x00006d21 
+ 00027905  0x000071b7 beq  0x00000004 , 0x00006d78 
+ 00027906  0x000071b8 beq  0x0000003b , 0x00006d2b 
+ 00027907  0x000071b9 beq  0x0000003c , 0x00006d7b 
+ 00027908  0x000071ba beq  0x0000000d , 0x00006d30 
+ 00027909  0x000071bb beq  0x0000000e , 0x00006d80 
+ 00027910  0x000071bc beq  0x0000000f , 0x00006d33 
+ 00027911  0x000071bd beq  0x00000010 , 0x00006d86 
+ 00027912  0x000071be beq  0x00000011 , 0x00006d39 
+ 00027913  0x000071bf beq  0x00000012 , 0x00006d8a 
+ 00027914  0x000071c0 beq  0x00000013 , 0x00006d3f 
+ 00027915  0x000071c1 beq  0x00000014 , 0x00006d8e 
+ 00027916  0x000071c2 beq  0x00000015 , 0x00006d45 
+ 00027917  0x000071c3 beq  0x00000016 , 0x00006d92 
+ 00027918  0x000071c4 beq  0x00000017 , 0x00006d4b 
+ 00027919  0x000071c5 beq  0x00000018 , 0x00006d97 
+ 00027920  0x000071c6 beq  0x00000019 , 0x00006d51 
+ 00027921  0x000071c7 beq  0x0000001a , 0x00006d9b 
+ 00027922  0x000071c8 beq  0x0000001b , 0x00006d57 
+ 00027923  0x000071c9 beq  0x0000001c , 0x00006d9f 
+ 00027924  0x000071ca beq  0x0000001d , 0x00006d5d 
+ 00027925  0x000071cb beq  0x0000001e , 0x00006da4 
+ 00027926  0x000071cc beq  0x0000001f , 0x00006d63 
+ 00027927  0x000071cd beq  0x00000020 , 0x00006da8 
+ 00027928  0x000071ce beq  0x00000021 , 0x00006d6e 
+ 00027929  0x000071cf beq  0x00000022 , 0x00006dac 
+ 00027930  0x000071d1 rtn 
+ 00027931  0x000071d3 call  0x00006db7 
+ 00027932  0x000071d4 jam  0x00000002 , 0x00000287 
+ 00027933  0x000071d5 fetch  0x00000001 , 0x00004250 
+ 00027934  0x000071d6 set1  0x00000000 , 0x0000003f 
+ 00027935  0x000071d7 store  0x00000001 , 0x00004250 
+ 00027936  0x000071d8 rtn 
+ 00027937  0x000071da jam  0x00000004 , 0x00000287 
+ 00027938  0x000071db fetch  0x00000001 , 0x00004250 
+ 00027939  0x000071dc rtnbit1  0x00000002 
+ 00027940  0x000071dd jam  0x00000003 , 0x00000287 
+ 00027941  0x000071de call  0x00006dbe 
+ 00027942  0x000071df jam  0x00000004 , 0x00000287 
+ 00027943  0x000071e0 fetch  0x00000001 , 0x00004250 
+ 00027944  0x000071e1 set1  0x00000002 , 0x0000003f 
+ 00027945  0x000071e2 store  0x00000001 , 0x00004250 
+ 00027946  0x000071e3 rtn 
+ 00027947  0x000071e5 call  0x00005274 
+ 00027948  0x000071e6 nrtn  0x00000034 
+ 00027949  0x000071e7 call  0x00006dcd 
+ 00027950  0x000071e8 jam  0x0000003c , 0x00000287 
+ 00027951  0x000071e9 rtn 
+ 00027952  0x000071eb call  0x00006dc3 
+ 00027953  0x000071ec jam  0x0000000e , 0x00000287 
+ 00027954  0x000071ed rtn 
+ 00027955  0x000071ef call  0x00006ddd 
+ 00027956  0x000071f0 jam  0x00000010 , 0x00000287 
+ 00027957  0x000071f1 fetch  0x00000001 , 0x00004252 
+ 00027958  0x000071f2 set1  0x00000000 , 0x0000003f 
+ 00027959  0x000071f3 store  0x00000001 , 0x00004252 
+ 00027960  0x000071f4 rtn 
+ 00027961  0x000071f6 call  0x00006de4 
+ 00027962  0x000071f7 jam  0x00000012 , 0x00000287 
+ 00027963  0x000071f8 fetch  0x00000001 , 0x00004252 
+ 00027964  0x000071f9 set1  0x00000002 , 0x0000003f 
+ 00027965  0x000071fa store  0x00000001 , 0x00004252 
+ 00027966  0x000071fb rtn 
+ 00027967  0x000071fd call  0x00006de9 
+ 00027968  0x000071fe jam  0x00000014 , 0x00000287 
+ 00027969  0x000071ff fetch  0x00000001 , 0x00004253 
+ 00027970  0x00007200 set1  0x00000000 , 0x0000003f 
+ 00027971  0x00007201 store  0x00000001 , 0x00004253 
+ 00027972  0x00007202 rtn 
+ 00027973  0x00007204 call  0x00006df0 
+ 00027974  0x00007205 jam  0x00000016 , 0x00000287 
+ 00027975  0x00007206 fetch  0x00000001 , 0x00004253 
+ 00027976  0x00007207 set1  0x00000002 , 0x0000003f 
+ 00027977  0x00007208 store  0x00000001 , 0x00004253 
+ 00027978  0x00007209 rtn 
+ 00027979  0x0000720b call  0x00006dd1 
+ 00027980  0x0000720c jam  0x00000018 , 0x00000287 
+ 00027981  0x0000720d fetch  0x00000001 , 0x00004251 
+ 00027982  0x0000720e set1  0x00000000 , 0x0000003f 
+ 00027983  0x0000720f store  0x00000001 , 0x00004251 
+ 00027984  0x00007210 rtn 
+ 00027985  0x00007212 call  0x00006dd8 
+ 00027986  0x00007213 jam  0x0000001a , 0x00000287 
+ 00027987  0x00007214 fetch  0x00000001 , 0x00004251 
+ 00027988  0x00007215 set1  0x00000002 , 0x0000003f 
+ 00027989  0x00007216 store  0x00000001 , 0x00004251 
+ 00027990  0x00007217 rtn 
+ 00027991  0x00007219 call  0x00006df5 
+ 00027992  0x0000721a jam  0x0000001c , 0x00000287 
+ 00027993  0x0000721b fetch  0x00000001 , 0x00004251 
+ 00027994  0x0000721c set1  0x00000006 , 0x0000003f 
+ 00027995  0x0000721d store  0x00000001 , 0x00004251 
+ 00027996  0x0000721e rtn 
+ 00027997  0x00007220 call  0x00006dfc 
+ 00027998  0x00007221 fetch  0x00000001 , 0x00004254 
+ 00027999  0x00007222 set1  0x00000000 
+ 00028000  0x00007223 store  0x00000001 , 0x00004254 
+ 00028001  0x00007224 jam  0x0000001e , 0x00000287 
+ 00028002  0x00007225 rtn 
+ 00028003  0x00007227 call  0x00006e02 
+ 00028004  0x00007228 fetch  0x00000001 , 0x00004254 
+ 00028005  0x00007229 set1  0x00000002 
+ 00028006  0x0000722a store  0x00000001 , 0x00004254 
+ 00028007  0x0000722b jam  0x00000020 , 0x00000287 
+ 00028008  0x0000722c fetch  0x00000001 , 0x00004564 
+ 00028009  0x0000722d lshift3  0x0000003f , 0x0000003f 
+ 00028010  0x0000722e or_into  0x00000003 , 0x0000003f 
+ 00028011  0x0000722f arg  0x00004565 , 0x00000002 
+ 00028012  0x00007230 storet  0x00000002 , 0x000004f7 
+ 00028013  0x00007231 branch  0x00006a35 
+ 00028014  0x00007233 call  0x00006e0c 
+ 00028015  0x00007234 fetch  0x00000001 , 0x00004254 
+ 00028016  0x00007235 set1  0x00000004 
+ 00028017  0x00007236 store  0x00000001 , 0x00004254 
+ 00028018  0x00007237 jam  0x00000022 , 0x00000287 
+ 00028019  0x00007238 rtn 
+ 00028020  0x0000723b fetch  0x00000001 , 0x00004250 
+ 00028021  0x0000723c rtnbit0  0x00000001 
+ 00028022  0x0000723d jam  0x00000003 , 0x00000287 
+ 00028023  0x0000723e branch  0x00006cfb 
+ 00028024  0x00007240 fetch  0x00000001 , 0x00004250 
+ 00028025  0x00007241 rtnne  0x0000003f 
+ 00028026  0x00007242 jam  0x0000003b , 0x00000287 
+ 00028027  0x00007244 fetch  0x00000001 , 0x00000285 
+ 00028028  0x00007245 rtnne  0x00000017 
+ 00028029  0x00007246 jam  0x00000000 , 0x00000285 
+ 00028030  0x00007247 jam  0x0000000d , 0x00000287 
+ 00028031  0x00007248 branch  0x00006cfb 
+ 00028032  0x0000724a fetch  0x00000001 , 0x00004250 
+ 00028033  0x0000724b nrtn  0x00000034 
+ 00028034  0x0000724c fetch  0x00000001 , 0x00004684 
+ 00028035  0x0000724d bbit1  0x00000000 , 0x00006daf 
+ 00028036  0x0000724e bbit1  0x00000006 , 0x00006db1 
+ 00028037  0x0000724f branch  0x00006db5 
+ 00028038  0x00007251 fetch  0x00000001 , 0x00004252 
+ 00028039  0x00007252 rtnbit0  0x00000001 
+ 00028040  0x00007253 jam  0x00000011 , 0x00000287 
+ 00028041  0x00007254 branch  0x00006cfb 
+ 00028042  0x00007256 fetch  0x00000001 , 0x00004252 
+ 00028043  0x00007257 rtnne  0x0000003f 
+ 00028044  0x00007258 jam  0x00000013 , 0x00000287 
+ 00028045  0x00007259 branch  0x00006cfb 
+ 00028046  0x0000725b fetch  0x00000001 , 0x00004253 
+ 00028047  0x0000725c rtnbit0  0x00000001 
+ 00028048  0x0000725d jam  0x00000015 , 0x00000287 
+ 00028049  0x0000725e branch  0x00006cfb 
+ 00028050  0x00007260 fetch  0x00000001 , 0x00004253 
+ 00028051  0x00007261 rtnne  0x0000003f 
+ 00028052  0x00007262 fetch  0x00000001 , 0x00004684 
+ 00028053  0x00007263 bbit1  0x00000006 , 0x00006db1 
+ 00028054  0x00007264 branch  0x00006db5 
+ 00028055  0x00007266 fetch  0x00000001 , 0x00004251 
+ 00028056  0x00007267 rtnbit0  0x00000001 
+ 00028057  0x00007268 jam  0x00000019 , 0x00000287 
+ 00028058  0x00007269 branch  0x00006cfb 
+ 00028059  0x0000726b fetch  0x00000001 , 0x00004251 
+ 00028060  0x0000726c rtnne  0x0000003f 
+ 00028061  0x0000726d jam  0x0000001b , 0x00000287 
+ 00028062  0x0000726e branch  0x00006cfb 
+ 00028063  0x00007270 fetch  0x00000001 , 0x00004251 
+ 00028064  0x00007271 rtnne  0x000000ff 
+ 00028065  0x00007272 fetch  0x00000001 , 0x00004684 
+ 00028066  0x00007273 bbit1  0x00000006 , 0x00006db3 
+ 00028067  0x00007274 branch  0x00006db5 
+ 00028068  0x00007276 fetch  0x00000001 , 0x00004254 
+ 00028069  0x00007277 rtnbit0  0x00000001 
+ 00028070  0x00007278 jam  0x0000001f , 0x00000287 
+ 00028071  0x00007279 branch  0x00006cfb 
+ 00028072  0x0000727b fetch  0x00000001 , 0x00004254 
+ 00028073  0x0000727c rtnbit0  0x00000003 
+ 00028074  0x0000727d jam  0x00000021 , 0x00000287 
+ 00028075  0x0000727e branch  0x00006cfb 
+ 00028076  0x00007280 fetch  0x00000001 , 0x00004254 
+ 00028077  0x00007281 rtnne  0x000000ff 
+ 00028078  0x00007282 branch  0x00006db5 
+ 00028079  0x00007285 jam  0x0000000f , 0x00000287 
+ 00028080  0x00007286 branch  0x00006cfb 
+ 00028081  0x00007289 jam  0x00000017 , 0x00000287 
+ 00028082  0x0000728a branch  0x00006cfb 
+ 00028083  0x0000728c jam  0x0000001d , 0x00000287 
+ 00028084  0x0000728d branch  0x00006cfb 
+ 00028085  0x00007292 jam  0x00000000 , 0x00000287 
+ 00028086  0x00007293 rtn 
+ 00028087  0x00007295 bpatchx  0x000000bf , 0x00004037 
+ 00028088  0x00007296 call  0x000052b8 
+ 00028089  0x00007297 setarg  0x00000001 
+ 00028090  0x00007298 copy  0x0000003f , 0x00000002 
+ 00028091  0x00007299 setarg  0x00000050 
+ 00028092  0x0000729a copy  0x0000003f , 0x0000000b 
+ 00028093  0x0000729b branch  0x000050a8 
+ 00028094  0x0000729e bpatchx  0x000000c0 , 0x00004038 
+ 00028095  0x0000729f call  0x000052b8 
+ 00028096  0x000072a0 fetch  0x00000002 , 0x00004248 
+ 00028097  0x000072a1 copy  0x0000003f , 0x00000002 
+ 00028098  0x000072a2 branch  0x000050b7 
+ 00028099  0x000072a5 bpatchx  0x000000c1 , 0x00004038 
+ 00028100  0x000072a6 call  0x000052b8 
+ 00028101  0x000072a7 fetch  0x00000002 , 0x00004248 
+ 00028102  0x000072a8 copy  0x0000003f , 0x00000002 
+ 00028103  0x000072a9 arg  0x00000050 , 0x0000000b 
+ 00028104  0x000072aa call  0x000050cc 
+ 00028105  0x000072ab fetch  0x00000001 , 0x00004250 
+ 00028106  0x000072ac set0  0x00000005 , 0x0000003f 
+ 00028107  0x000072ad store  0x00000001 , 0x00004250 
+ 00028108  0x000072ae rtn 
+ 00028109  0x000072b1 bpatchx  0x000000c2 , 0x00004038 
+ 00028110  0x000072b2 call  0x000052c5 
+ 00028111  0x000072b3 call  0x00007138 
+ 00028112  0x000072b4 branch  0x000050e7 
+ 00028113  0x000072b7 bpatchx  0x000000c3 , 0x00004038 
+ 00028114  0x000072b8 call  0x000052b8 
+ 00028115  0x000072b9 setarg  0x00000003 
+ 00028116  0x000072ba copy  0x0000003f , 0x00000002 
+ 00028117  0x000072bb setarg  0x00000051 
+ 00028118  0x000072bc copy  0x0000003f , 0x0000000b 
+ 00028119  0x000072bd branch  0x000050a8 
+ 00028120  0x000072c0 bpatchx  0x000000c4 , 0x00004038 
+ 00028121  0x000072c1 call  0x000052b8 
+ 00028122  0x000072c2 fetch  0x00000002 , 0x0000424a 
+ 00028123  0x000072c3 copy  0x0000003f , 0x00000002 
+ 00028124  0x000072c4 branch  0x000050b7 
+ 00028125  0x000072c7 bpatchx  0x000000c5 , 0x00004038 
+ 00028126  0x000072c8 call  0x000052b8 
+ 00028127  0x000072c9 setarg  0x00000011 
+ 00028128  0x000072ca copy  0x0000003f , 0x00000002 
+ 00028129  0x000072cb setarg  0x00000052 
+ 00028130  0x000072cc copy  0x0000003f , 0x0000000b 
+ 00028131  0x000072cd branch  0x000050a8 
+ 00028132  0x000072d0 bpatchx  0x000000c6 , 0x00004038 
+ 00028133  0x000072d1 call  0x000052b8 
+ 00028134  0x000072d2 fetch  0x00000002 , 0x0000424c 
+ 00028135  0x000072d3 copy  0x0000003f , 0x00000002 
+ 00028136  0x000072d4 branch  0x000050b7 
+ 00028137  0x000072d7 bpatchx  0x000000c7 , 0x00004038 
+ 00028138  0x000072d8 call  0x000052b8 
+ 00028139  0x000072d9 setarg  0x00000013 
+ 00028140  0x000072da copy  0x0000003f , 0x00000002 
+ 00028141  0x000072db setarg  0x00000053 
+ 00028142  0x000072dc copy  0x0000003f , 0x0000000b 
+ 00028143  0x000072dd branch  0x000050a8 
+ 00028144  0x000072e0 bpatchx  0x000000c8 , 0x00004039 
+ 00028145  0x000072e1 call  0x000052b8 
+ 00028146  0x000072e2 fetch  0x00000002 , 0x0000424e 
+ 00028147  0x000072e3 copy  0x0000003f , 0x00000002 
+ 00028148  0x000072e4 branch  0x000050b7 
+ 00028149  0x000072e7 bpatchx  0x000000c9 , 0x00004039 
+ 00028150  0x000072e8 call  0x000052d2 
+ 00028151  0x000072ea jam  0x00000003 , 0x000004fb 
+ 00028152  0x000072eb jam  0x0000001c , 0x000004fe 
+ 00028153  0x000072ec call  0x00006ba9 
+ 00028154  0x000072ed jam  0x00000001 , 0x00004563 
+ 00028155  0x000072ee rtn 
+ 00028156  0x000072f1 bpatchx  0x000000ca , 0x00004039 
+ 00028157  0x000072f2 call  0x000052d2 
+ 00028158  0x000072f3 fetcht  0x00000001 , 0x00004564 
+ 00028159  0x000072f4 call  0x00006a79 
+ 00028160  0x000072f5 storet  0x00000001 , 0x0000455d 
+ 00028161  0x000072f6 branch  0x00006bc4 
+ 00028162  0x000072f9 bpatchx  0x000000cb , 0x00004039 
+ 00028163  0x000072fa call  0x000052d2 
+ 00028164  0x000072fb fetcht  0x00000001 , 0x0000455d 
+ 00028165  0x000072fc call  0x00006a73 
+ 00028166  0x000072fd call  0x00006a1a 
+ 00028167  0x000072fe store  0x00000001 , 0x000004fe 
+ 00028168  0x000072ff fetcht  0x00000001 , 0x0000455d 
+ 00028169  0x00007300 call  0x00006a73 
+ 00028170  0x00007301 storet  0x00000001 , 0x000004fb 
+ 00028171  0x00007302 branch  0x00006ba9 
+ 00028172  0x00007305 bpatchx  0x000000cc , 0x00004039 
+ 00028173  0x00007306 call  0x000052d2 
+ 00028174  0x00007307 fetcht  0x00000001 , 0x0000455d 
+ 00028175  0x00007308 call  0x00006a73 
+ 00028176  0x00007309 branch  0x00006bfc 
+ 00028177  0x00007317 bpatchx  0x000000cd , 0x00004039 
+ 00028178  0x00007318 fetch  0x00000002 , 0x00000264 
+ 00028179  0x00007319 iforce  0x00000006 
+ 00028180  0x0000731c ifetch  0x00000001 , 0x00000006 
+ 00028181  0x0000731d copy  0x0000003f , 0x00000012 
+ 00028182  0x0000731e store  0x00000001 , 0x0000051b 
+ 00028183  0x0000731f ifetch  0x00000002 , 0x00000006 
+ 00028184  0x00007320 store  0x00000002 , 0x0000051c 
+ 00028185  0x00007321 ifetch  0x00000001 , 0x00000006 
+ 00028186  0x00007322 lshift8  0x0000003f , 0x0000000b 
+ 00028187  0x00007323 ifetch  0x00000001 , 0x00000006 
+ 00028188  0x00007324 iadd  0x0000000b , 0x0000000b 
+ 00028189  0x00007325 bpatchx  0x000000ce , 0x00004039 
+ 00028190  0x00007326 copy  0x00000006 , 0x00000002 
+ 00028191  0x00007327 arg  0x00000004 , 0x00000039 
+ 00028192  0x00007328 arg  0x0000052a , 0x00000005 
+ 00028193  0x00007329 call  0x00007ec6 
+ 00028194  0x0000732a copy  0x00000002 , 0x00000006 
+ 00028195  0x0000732b deposit  0x00000012 
+ 00028196  0x0000732c beq  0x00000001 , 0x00006fba 
+ 00028197  0x0000732d beq  0x00000002 , 0x00006e2c 
+ 00028198  0x0000732e beq  0x00000003 , 0x00006fba 
+ 00028199  0x0000732f beq  0x00000004 , 0x00006e54 
+ 00028200  0x00007330 beq  0x00000005 , 0x00006fba 
+ 00028201  0x00007331 beq  0x00000006 , 0x00006f02 
+ 00028202  0x00007332 beq  0x00000007 , 0x00006fba 
+ 00028203  0x00007333 branch  0x00006fc1 
+ 00028204  0x0000733f bpatchx  0x000000cf , 0x00004039 
+ 00028205  0x00007340 call  0x00006fd0 
+ 00028206  0x00007341 compare  0x00000001 , 0x00000002 , 0x000000ff 
+ 00028207  0x00007342 branch  0x00007040 , 0x00000001 
+ 00028208  0x00007343 compare  0x000000ff , 0x00000002 , 0x000000ff 
+ 00028209  0x00007344 branch  0x00006fc4 , 0x00000001 
+ 00028210  0x00007346 ifetch  0x00000002 , 0x00000006 
+ 00028211  0x00007347 store  0x00000002 , 0x00000522 
+ 00028212  0x00007348 increase  0xfffffffe , 0x0000000b 
+ 00028213  0x0000734a increase  0xffffffff , 0x0000000b 
+ 00028214  0x0000734b nbranch  0x00006fbe , 0x00000005 
+ 00028215  0x0000734c arg  0x00000511 , 0x0000000b 
+ 00028216  0x0000734d ifetch  0x00000002 , 0x0000000b 
+ 00028217  0x0000734e rtn  0x00000034 
+ 00028218  0x0000734f call  0x00007082 
+ 00028219  0x00007350 call  0x000052d0 
+ 00028220  0x00007351 force  0x00000003 , 0x0000003f 
+ 00028221  0x00007352 istore  0x00000001 , 0x00000005 
+ 00028222  0x00007353 fetch  0x00000002 , 0x0000051c 
+ 00028223  0x00007354 istore  0x00000002 , 0x00000005 
+ 00028224  0x00007355 lshift2  0x00000007 , 0x0000003f 
+ 00028225  0x00007356 add  0x0000003f , 0x00000005 , 0x0000003f 
+ 00028226  0x00007357 add  0x0000003f , 0x00000005 , 0x00000013 
+ 00028227  0x00007358 byteswap  0x0000003f , 0x0000003f 
+ 00028228  0x00007359 istore  0x00000002 , 0x00000005 
+ 00028229  0x0000735a deposit  0x00000007 
+ 00028230  0x0000735b byteswap  0x0000003f , 0x0000003f 
+ 00028231  0x0000735c istore  0x00000002 , 0x00000005 
+ 00028232  0x0000735d istore  0x00000002 , 0x00000005 
+ 00028233  0x0000735e arg  0x0000052a , 0x00000006 
+ 00028234  0x0000735f copy  0x00000007 , 0x00000039 
+ 00028235  0x00007360 branch  0x00006e4f , 0x00000005 
+ 00028236  0x00007362 ifetch  0x00000004 , 0x00000006 
+ 00028237  0x00007363 istore  0x00000004 , 0x00000005 
+ 00028238  0x00007364 loop  0x00006e4c 
+ 00028239  0x00007366 force  0x00000000 , 0x0000003f 
+ 00028240  0x00007367 istore  0x00000001 , 0x00000005 
+ 00028241  0x00007368 deposit  0x00000013 
+ 00028242  0x00007369 store  0x00000002 , 0x00000275 
+ 00028243  0x0000736b rtn 
+ 00028244  0x00007377 bpatchx  0x000000d0 , 0x0000403a 
+ 00028245  0x00007378 ifetch  0x00000004 , 0x00000006 
+ 00028246  0x00007379 store  0x00000004 , 0x00000524 
+ 00028247  0x0000737a increase  0xfffffffc , 0x0000000b 
+ 00028248  0x0000737b call  0x00006f2e 
+ 00028249  0x0000737c store  0x00000002 , 0x00000520 
+ 00028250  0x0000737d increase  0xfffffffe , 0x0000000b 
+ 00028251  0x0000737e call  0x00007028 
+ 00028252  0x0000737f branch  0x00006fc4 , 0x00000005 
+ 00028253  0x00007380 compare  0x00000005 , 0x00000011 , 0x000000ff 
+ 00028254  0x00007382 branch  0x00006e62 , 0x00000001 
+ 00028255  0x00007384 arg  0x0000052a , 0x00000005 
+ 00028256  0x00007385 force  0x00000000 , 0x00000007 
+ 00028257  0x00007386 branch  0x00006e71 
+ 00028258  0x00007388 ifetch  0x00000001 , 0x00000006 
+ 00028259  0x00007389 bne  0x0000000a , 0x00006fc4 
+ 00028260  0x0000738a ifetch  0x00000002 , 0x00000006 
+ 00028261  0x0000738b nbranch  0x00006e6f , 0x00000034 
+ 00028262  0x0000738c ifetch  0x00000001 , 0x00000006 
+ 00028263  0x0000738d bne  0x000000ff , 0x00006e6d 
+ 00028264  0x0000738e ifetch  0x00000001 , 0x00000006 
+ 00028265  0x0000738f bne  0x000000ff , 0x00006e6b 
+ 00028266  0x00007390 branch  0x00006eb8 
+ 00028267  0x00007392 increase  0xfffffffb , 0x00000006 
+ 00028268  0x00007393 branch  0x00006e5f 
+ 00028269  0x00007395 increase  0xfffffffc , 0x00000006 
+ 00028270  0x00007396 branch  0x00006e5f 
+ 00028271  0x00007398 increase  0xfffffffd , 0x00000006 
+ 00028272  0x00007399 branch  0x00006e5f 
+ 00028273  0x0000739b ifetch  0x00000001 , 0x00000006 
+ 00028274  0x0000739c beq  0x00000009 , 0x00006e86 
+ 00028275  0x0000739d beq  0x0000000a , 0x00006e74 
+ 00028276  0x0000739f ifetch  0x00000002 , 0x00000006 
+ 00028277  0x000073a0 istore  0x00000002 , 0x00000005 
+ 00028278  0x000073a1 increase  0x00000001 , 0x00000007 
+ 00028279  0x000073a2 byteswap  0x0000003f , 0x00000012 
+ 00028280  0x000073a3 ifetch  0x00000002 , 0x00000006 
+ 00028281  0x000073a4 byteswap  0x0000003f , 0x0000003f 
+ 00028282  0x000073a6 increase  0x00000001 , 0x00000012 
+ 00028283  0x000073a7 isub  0x00000012 , 0x0000003e 
+ 00028284  0x000073a8 nbranch  0x00006e83 , 0x00000002 
+ 00028285  0x000073a9 copy  0x0000003f , 0x00000013 
+ 00028286  0x000073aa byteswap  0x00000012 , 0x0000003f 
+ 00028287  0x000073ab istore  0x00000002 , 0x00000005 
+ 00028288  0x000073ac increase  0x00000001 , 0x00000007 
+ 00028289  0x000073ad copy  0x00000013 , 0x0000003f 
+ 00028290  0x000073ae branch  0x00006e7a 
+ 00028291  0x000073b0 increase  0xfffffffb , 0x0000000b 
+ 00028292  0x000073b1 increase  0xfffffffb , 0x00000011 
+ 00028293  0x000073b2 branch  0x00006e8b 
+ 00028294  0x000073b4 ifetch  0x00000002 , 0x00000006 
+ 00028295  0x000073b5 istore  0x00000002 , 0x00000005 
+ 00028296  0x000073b6 increase  0x00000001 , 0x00000007 
+ 00028297  0x000073b7 increase  0xfffffffd , 0x0000000b 
+ 00028298  0x000073b8 increase  0xfffffffd , 0x00000011 
+ 00028299  0x000073ba nbranch  0x00006fc4 , 0x00000002 
+ 00028300  0x000073bb nbranch  0x00006e71 , 0x00000005 
+ 00028301  0x000073bc increase  0xffffffff , 0x0000000b 
+ 00028302  0x000073bd nbranch  0x00006fc4 , 0x00000005 
+ 00028303  0x000073bf call  0x000052d0 
+ 00028304  0x000073c0 increase  0x0000000a , 0x00000005 
+ 00028305  0x000073c1 arg  0x0000052a , 0x00000011 
+ 00028306  0x000073c3 copy  0x00000007 , 0x0000003f 
+ 00028307  0x000073c4 branch  0x00006ea5 , 0x00000034 
+ 00028308  0x000073c5 ifetch  0x00000002 , 0x00000011 
+ 00028309  0x000073c6 branch  0x00006ea5 , 0x00000034 
+ 00028310  0x000073c7 iforce  0x00000012 
+ 00028311  0x000073c8 fetch  0x00000004 , 0x00000524 
+ 00028312  0x000073c9 iforce  0x00000002 
+ 00028313  0x000073ca call  0x000070e7 
+ 00028314  0x000073cb copy  0x00000006 , 0x0000003f 
+ 00028315  0x000073cc branch  0x00006ea2 , 0x00000034 
+ 00028316  0x000073cd increase  0xfffffffd , 0x00000006 
+ 00028317  0x000073ce ifetch  0x00000003 , 0x00000006 
+ 00028318  0x000073cf istore  0x00000003 , 0x00000005 
+ 00028319  0x000073d0 call  0x0000705b 
+ 00028320  0x000073d1 iforce  0x00000039 
+ 00028321  0x000073d2 call  0x00007f01 
+ 00028322  0x000073d4 increase  0x00000002 , 0x00000011 
+ 00028323  0x000073d5 increase  0xffffffff , 0x00000007 
+ 00028324  0x000073d6 branch  0x00006e92 
+ 00028325  0x000073d9 arg  0x00000005 , 0x00000011 
+ 00028326  0x000073da call  0x00006f84 
+ 00028327  0x000073db fetch  0x00000002 , 0x00000275 
+ 00028328  0x000073dc beq  0x0000000b , 0x00007043 
+ 00028329  0x000073dd branch  0x00006f9a 
+ 00028330  0x000073e1 ifetch  0x00000001 , 0x00000006 
+ 00028331  0x000073e2 beq  0x00000000 , 0x00006eae 
+ 00028332  0x000073e3 beq  0x00000001 , 0x00006eb0 
+ 00028333  0x000073e4 beq  0x00000002 , 0x00006eb3 
+ 00028334  0x000073e6 increase  0xffffffff , 0x0000000b 
+ 00028335  0x000073e7 branch  0x00006eb6 
+ 00028336  0x000073e9 ifetch  0x00000001 , 0x00000006 
+ 00028337  0x000073ea increase  0xfffffffe , 0x0000000b 
+ 00028338  0x000073eb branch  0x00006eb6 
+ 00028339  0x000073ed ifetch  0x00000002 , 0x00000006 
+ 00028340  0x000073ee byteswap  0x0000003f , 0x0000003f 
+ 00028341  0x000073ef increase  0xfffffffd , 0x0000000b 
+ 00028342  0x000073f1 store  0x00000002 , 0x00000519 
+ 00028343  0x000073f2 rtn 
+ 00028344  0x000073f5 increase  0xfffffffb , 0x0000000b 
+ 00028345  0x000073f6 call  0x00006eaa 
+ 00028346  0x000073f7 nbranch  0x00006fbe , 0x00000005 
+ 00028347  0x000073f8 fetcht  0x00000004 , 0x00000524 
+ 00028348  0x000073f9 call  0x000070b1 
+ 00028349  0x000073fa nbranch  0x00006fbb , 0x00000005 
+ 00028350  0x000073fb copy  0x00000006 , 0x00000011 
+ 00028351  0x000073fc call  0x000052d0 
+ 00028352  0x000073fd copy  0x00000011 , 0x00000006 
+ 00028353  0x000073fe increase  0x00000003 , 0x00000005 
+ 00028354  0x000073ff copy  0x00000006 , 0x0000000b 
+ 00028355  0x00007400 call  0x00007062 
+ 00028356  0x00007401 copy  0x0000003f , 0x00000011 
+ 00028357  0x00007403 fetch  0x00000002 , 0x00000519 
+ 00028358  0x00007404 copy  0x0000003f , 0x00000012 
+ 00028359  0x00007405 copy  0x00000011 , 0x0000003f 
+ 00028360  0x00007406 isub  0x00000012 , 0x00000012 
+ 00028361  0x00007407 fetch  0x00000002 , 0x00000520 
+ 00028362  0x00007408 isub  0x00000012 , 0x0000003e 
+ 00028363  0x00007409 nbranch  0x00006ee7 , 0x00000002 
+ 00028364  0x0000740b disable  0x00000028 
+ 00028365  0x0000740c fetch  0x00000002 , 0x00000519 
+ 00028366  0x0000740d branch  0x00006eda , 0x00000034 
+ 00028367  0x0000740e iadd  0x0000000b , 0x00000006 
+ 00028368  0x0000740f increase  0x00000003 , 0x00000012 
+ 00028369  0x00007410 copy  0x00000012 , 0x00000039 
+ 00028370  0x00007411 copy  0x00000039 , 0x0000003f 
+ 00028371  0x00007412 increase  0x00000003 , 0x0000003f 
+ 00028372  0x00007413 byteswap  0x0000003f , 0x0000003f 
+ 00028373  0x00007414 istore  0x00000002 , 0x00000005 
+ 00028374  0x00007415 copy  0x00000039 , 0x0000003f 
+ 00028375  0x00007416 byteswap  0x0000003f , 0x0000003f 
+ 00028376  0x00007417 istore  0x00000002 , 0x00000005 
+ 00028377  0x00007418 branch  0x00006ef5 
+ 00028378  0x0000741a add  0x00000011 , 0x00000006 , 0x00000039 
+ 00028379  0x0000741b branch  0x00006ede , 0x00000028 
+ 00028380  0x0000741c byteswap  0x00000039 , 0x0000003f 
+ 00028381  0x0000741d branch  0x00006ee1 
+ 00028382  0x0000741f copy  0x00000039 , 0x0000003f 
+ 00028383  0x00007420 increase  0x00000002 , 0x0000003f 
+ 00028384  0x00007421 byteswap  0x0000003f , 0x0000003f 
+ 00028385  0x00007423 istore  0x00000002 , 0x00000005 
+ 00028386  0x00007424 increase  0xfffffffd , 0x00000039 
+ 00028387  0x00007425 byteswap  0x00000039 , 0x0000003f 
+ 00028388  0x00007426 istore  0x00000002 , 0x00000005 
+ 00028389  0x00007427 copy  0x0000000b , 0x00000006 
+ 00028390  0x00007428 branch  0x00006ef5 
+ 00028391  0x0000742a enable  0x00000028 
+ 00028392  0x0000742c fetch  0x00000002 , 0x00000520 
+ 00028393  0x0000742d copy  0x0000003f , 0x00000011 
+ 00028394  0x0000742e copy  0x00000011 , 0x00000039 
+ 00028395  0x0000742f fetch  0x00000002 , 0x00000519 
+ 00028396  0x00007430 branch  0x00006eda , 0x00000034 
+ 00028397  0x00007431 iadd  0x0000000b , 0x00000006 
+ 00028398  0x00007432 copy  0x00000011 , 0x0000003f 
+ 00028399  0x00007433 increase  0x00000005 , 0x0000003f 
+ 00028400  0x00007434 byteswap  0x0000003f , 0x0000003f 
+ 00028401  0x00007435 istore  0x00000002 , 0x00000005 
+ 00028402  0x00007436 copy  0x00000011 , 0x0000003f 
+ 00028403  0x00007437 byteswap  0x0000003f , 0x0000003f 
+ 00028404  0x00007438 istore  0x00000002 , 0x00000005 
+ 00028405  0x0000743a call  0x00007f01 
+ 00028406  0x0000743b nbranch  0x00006efe , 0x00000028 
+ 00028407  0x0000743c force  0x00000002 , 0x0000003f 
+ 00028408  0x0000743d istore  0x00000001 , 0x00000005 
+ 00028409  0x0000743e copy  0x00000006 , 0x0000003f 
+ 00028410  0x0000743f isub  0x0000000b , 0x0000003f 
+ 00028411  0x00007440 byteswap  0x0000003f , 0x0000003f 
+ 00028412  0x00007441 istore  0x00000002 , 0x00000005 
+ 00028413  0x00007442 branch  0x00006f00 
+ 00028414  0x00007444 force  0x00000000 , 0x0000003f 
+ 00028415  0x00007445 istore  0x00000001 , 0x00000005 
+ 00028416  0x00007447 arg  0x00000005 , 0x00000011 
+ 00028417  0x00007448 branch  0x00006fb0 
+ 00028418  0x00007454 bpatchx  0x000000d1 , 0x0000403a 
+ 00028419  0x00007455 call  0x00006fd0 
+ 00028420  0x00007456 compare  0x000000ff , 0x00000002 , 0x000000ff 
+ 00028421  0x00007457 branch  0x00006fc4 , 0x00000001 
+ 00028422  0x00007458 call  0x00006f2e 
+ 00028423  0x00007459 store  0x00000002 , 0x00000520 
+ 00028424  0x0000745a increase  0xfffffffe , 0x0000000b 
+ 00028425  0x0000745b call  0x00007028 
+ 00028426  0x0000745c arg  0x0000052a , 0x00000005 
+ 00028427  0x0000745d force  0x00000000 , 0x00000007 
+ 00028428  0x0000745f ifetch  0x00000001 , 0x00000006 
+ 00028429  0x00007460 beq  0x0000000a , 0x00006f36 
+ 00028430  0x00007461 ifetch  0x00000002 , 0x00000006 
+ 00028431  0x00007462 istore  0x00000002 , 0x00000005 
+ 00028432  0x00007463 increase  0x00000001 , 0x00000007 
+ 00028433  0x00007464 increase  0xfffffffd , 0x0000000b 
+ 00028434  0x00007465 increase  0xfffffffd , 0x00000011 
+ 00028435  0x00007466 nbranch  0x00006fc4 , 0x00000002 
+ 00028436  0x00007467 nbranch  0x00006f0c , 0x00000005 
+ 00028437  0x00007468 increase  0xffffffff , 0x0000000b 
+ 00028438  0x00007469 nbranch  0x00006fc4 , 0x00000005 
+ 00028439  0x0000746a call  0x000052d0 
+ 00028440  0x0000746b increase  0x0000000d , 0x00000005 
+ 00028441  0x0000746c fetch  0x00000002 , 0x00000511 
+ 00028442  0x0000746d iforce  0x00000013 
+ 00028443  0x0000746e arg  0x0000052a , 0x00000011 
+ 00028444  0x00007470 ifetch  0x00000002 , 0x00000011 
+ 00028445  0x00007471 branch  0x00006f29 , 0x00000034 
+ 00028446  0x00007472 iforce  0x00000012 
+ 00028447  0x00007473 call  0x000070c6 
+ 00028448  0x00007474 branch  0x00006f27 , 0x00000034 
+ 00028449  0x00007475 increase  0xfffffffd , 0x00000006 
+ 00028450  0x00007476 ifetch  0x00000003 , 0x00000006 
+ 00028451  0x00007477 istore  0x00000003 , 0x00000005 
+ 00028452  0x00007478 call  0x0000705b 
+ 00028453  0x00007479 iforce  0x00000039 
+ 00028454  0x0000747a call  0x00007f01 
+ 00028455  0x0000747c increase  0x00000002 , 0x00000011 
+ 00028456  0x0000747d branch  0x00006f1c 
+ 00028457  0x00007480 call  0x00006f83 
+ 00028458  0x00007481 fetch  0x00000002 , 0x00000275 
+ 00028459  0x00007482 beq  0x0000000e , 0x00007046 
+ 00028460  0x00007483 call  0x00006f9a 
+ 00028461  0x00007484 branch  0x00006f9a 
+ 00028462  0x00007488 ifetch  0x00000002 , 0x00000006 
+ 00028463  0x00007489 byteswap  0x0000003f , 0x0000003f 
+ 00028464  0x0000748a increase  0xfffffffd , 0x0000003f 
+ 00028465  0x0000748b arg  0x000000c8 , 0x00000002 
+ 00028466  0x0000748c isub  0x00000002 , 0x0000003e 
+ 00028467  0x0000748d nrtn  0x00000002 
+ 00028468  0x0000748e setarg  0x000000c8 
+ 00028469  0x0000748f rtn 
+ 00028470  0x00007493 increase  0x00000004 , 0x00000006 
+ 00028471  0x00007494 increase  0xfffffffb , 0x0000000b 
+ 00028472  0x00007495 increase  0xfffffffb , 0x00000011 
+ 00028473  0x00007496 nbranch  0x00006fc4 , 0x00000005 
+ 00028474  0x00007497 call  0x00006eaa 
+ 00028475  0x00007498 nbranch  0x00006fbe , 0x00000005 
+ 00028476  0x00007499 arg  0x00000511 , 0x0000000b 
+ 00028477  0x0000749a call  0x00007082 
+ 00028478  0x0000749b deposit  0x00000007 
+ 00028479  0x0000749c branch  0x00007046 , 0x00000034 
+ 00028480  0x0000749d store  0x00000001 , 0x0000054e 
+ 00028481  0x0000749f copy  0x00000012 , 0x0000003f 
+ 00028482  0x000074a0 store  0x00000002 , 0x0000054c 
+ 00028483  0x000074a1 arg  0x00000000 , 0x00000007 
+ 00028484  0x000074a2 arg  0x00000000 , 0x00000011 
+ 00028485  0x000074a3 call  0x000052d0 
+ 00028486  0x000074a4 increase  0x0000000a , 0x00000005 
+ 00028487  0x000074a6 call  0x00006f6c 
+ 00028488  0x000074a7 nbranch  0x00002a8c , 0x00000028 
+ 00028489  0x000074a8 copy  0x00000006 , 0x0000000b 
+ 00028490  0x000074a9 copy  0x0000003f , 0x00000013 
+ 00028491  0x000074aa iadd  0x00000011 , 0x00000011 
+ 00028492  0x000074ad fetch  0x00000002 , 0x00000519 
+ 00028493  0x000074ae copy  0x0000003f , 0x00000012 
+ 00028494  0x000074af branch  0x00006f75 , 0x00000034 
+ 00028495  0x000074b1 copy  0x00000011 , 0x0000003f 
+ 00028496  0x000074b2 isub  0x00000012 , 0x00000012 
+ 00028497  0x000074b3 branch  0x00006f67 , 0x00000005 
+ 00028498  0x000074b4 nbranch  0x00006f67 , 0x00000002 
+ 00028499  0x000074b5 fetch  0x00000002 , 0x00000520 
+ 00028500  0x000074b6 isub  0x00000012 , 0x0000003e 
+ 00028501  0x000074b7 branch  0x00006f5e , 0x00000005 
+ 00028502  0x000074b8 nbranch  0x00006f5e , 0x00000002 
+ 00028503  0x000074bc copy  0x00000012 , 0x00000039 
+ 00028504  0x000074bd call  0x00006f61 
+ 00028505  0x000074be fetch  0x00000001 , 0x0000054e 
+ 00028506  0x000074bf increase  0x00000001 , 0x00000007 
+ 00028507  0x000074c0 isub  0x00000007 , 0x0000003e 
+ 00028508  0x000074c1 branch  0x00006f83 , 0x00000005 
+ 00028509  0x000074c2 branch  0x00006fa0 
+ 00028510  0x000074c5 copy  0x0000003f , 0x00000039 
+ 00028511  0x000074c6 call  0x00006f61 
+ 00028512  0x000074c7 branch  0x00006fa0 
+ 00028513  0x000074ca increase  0xfffffffd , 0x00000005 
+ 00028514  0x000074cb copy  0x00000039 , 0x00000002 
+ 00028515  0x000074cc copy  0x00000013 , 0x0000003f 
+ 00028516  0x000074cd isub  0x00000012 , 0x0000003f 
+ 00028517  0x000074ce iadd  0x0000000b , 0x00000006 
+ 00028518  0x000074cf branch  0x00007f01 
+ 00028519  0x000074d2 fetch  0x00000001 , 0x0000054e 
+ 00028520  0x000074d3 increase  0x00000001 , 0x00000007 
+ 00028521  0x000074d4 isub  0x00000007 , 0x0000003e 
+ 00028522  0x000074d5 rtn  0x00000005 
+ 00028523  0x000074d6 branch  0x00006f47 
+ 00028524  0x000074d9 call  0x00007fe9 
+ 00028525  0x000074da arg  0x0000052a , 0x00000006 
+ 00028526  0x000074db lshift2  0x00000007 , 0x0000003f 
+ 00028527  0x000074dc iadd  0x00000006 , 0x00000006 
+ 00028528  0x000074dd ifetcht  0x00000004 , 0x00000006 
+ 00028529  0x000074de call  0x000070b1 
+ 00028530  0x000074df nrtn  0x00000005 
+ 00028531  0x000074e0 call  0x0000705b 
+ 00028532  0x000074e1 branch  0x00007fe7 
+ 00028533  0x000074e4 fetch  0x00000002 , 0x00000520 
+ 00028534  0x000074e5 isub  0x00000011 , 0x0000003e 
+ 00028535  0x000074e6 nbranch  0x00006f8f , 0x00000002 
+ 00028536  0x000074e7 copy  0x00000011 , 0x00000039 
+ 00028537  0x000074e8 copy  0x00000039 , 0x00000002 
+ 00028538  0x000074e9 copy  0x0000000b , 0x00000006 
+ 00028539  0x000074ea call  0x00007f01 
+ 00028540  0x000074eb fetch  0x00000002 , 0x0000054c 
+ 00028541  0x000074ec isub  0x00000011 , 0x0000003e 
+ 00028542  0x000074ed branch  0x00006f81 , 0x00000005 
+ 00028543  0x000074ef call  0x00006fa0 
+ 00028544  0x000074f0 branch  0x00006f94 
+ 00028545  0x000074f3 call  0x00006f83 
+ 00028546  0x000074f4 branch  0x00006f94 
+ 00028547  0x000074f7 arg  0x00000007 , 0x00000011 
+ 00028548  0x000074f9 force  0x00000000 , 0x0000003f 
+ 00028549  0x000074fa istore  0x00000001 , 0x00000005 
+ 00028550  0x000074fb call  0x00006fb0 
+ 00028551  0x000074fc fetcht  0x00000002 , 0x00000275 
+ 00028552  0x000074fd increase  0xfffffffb , 0x00000002 
+ 00028553  0x000074fe byteswap  0x00000002 , 0x0000003f 
+ 00028554  0x000074ff istore  0x00000002 , 0x00000005 
+ 00028555  0x00007500 increase  0xfffffffd , 0x00000002 
+ 00028556  0x00007501 byteswap  0x00000002 , 0x0000003f 
+ 00028557  0x00007502 istore  0x00000002 , 0x00000005 
+ 00028558  0x00007503 rtn 
+ 00028559  0x00007506 copy  0x0000003f , 0x00000039 
+ 00028560  0x00007507 copy  0x00000039 , 0x00000002 
+ 00028561  0x00007508 copy  0x0000000b , 0x00000006 
+ 00028562  0x00007509 call  0x00007f01 
+ 00028563  0x0000750a call  0x00006fa0 
+ 00028564  0x0000750c setarg  0x00000036 
+ 00028565  0x0000750d istore  0x00000001 , 0x00000005 
+ 00028566  0x0000750e fetch  0x00000002 , 0x0000054c 
+ 00028567  0x0000750f byteswap  0x0000003f , 0x0000003f 
+ 00028568  0x00007510 istore  0x00000002 , 0x00000005 
+ 00028569  0x00007511 rtn 
+ 00028570  0x00007514 setarg  0x00000036 
+ 00028571  0x00007515 istore  0x00000001 , 0x00000005 
+ 00028572  0x00007516 increase  0xfffffffd , 0x00000002 
+ 00028573  0x00007517 byteswap  0x00000002 , 0x0000003f 
+ 00028574  0x00007518 istore  0x00000002 , 0x00000005 
+ 00028575  0x00007519 rtn 
+ 00028576  0x0000751c arg  0x00000007 , 0x00000011 
+ 00028577  0x0000751d setarg  0x00000002 
+ 00028578  0x0000751e istore  0x00000001 , 0x00000005 
+ 00028579  0x0000751f fetch  0x00000002 , 0x00000519 
+ 00028580  0x00007520 iadd  0x00000002 , 0x00000002 
+ 00028581  0x00007521 byteswap  0x00000002 , 0x0000003f 
+ 00028582  0x00007522 istore  0x00000002 , 0x00000005 
+ 00028583  0x00007523 call  0x00006fb0 
+ 00028584  0x00007524 fetcht  0x00000002 , 0x00000275 
+ 00028585  0x00007525 increase  0xfffffffb , 0x00000002 
+ 00028586  0x00007526 byteswap  0x00000002 , 0x0000003f 
+ 00028587  0x00007527 istore  0x00000002 , 0x00000005 
+ 00028588  0x00007528 increase  0xfffffffb , 0x00000002 
+ 00028589  0x00007529 byteswap  0x00000002 , 0x0000003f 
+ 00028590  0x0000752a istore  0x00000002 , 0x00000005 
+ 00028591  0x0000752b rtn 
+ 00028592  0x0000752e fetch  0x00000002 , 0x00000273 
+ 00028593  0x0000752f isub  0x00000005 , 0x0000003f 
+ 00028594  0x00007530 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00028595  0x00007531 store  0x00000002 , 0x00000275 
+ 00028596  0x00007532 call  0x000052d0 
+ 00028597  0x00007533 copy  0x00000011 , 0x0000003f 
+ 00028598  0x00007534 istore  0x00000001 , 0x00000005 
+ 00028599  0x00007535 fetch  0x00000002 , 0x0000051c 
+ 00028600  0x00007536 istore  0x00000002 , 0x00000005 
+ 00028601  0x00007537 rtn 
+ 00028602  0x00007548 rtn 
+ 00028603  0x0000756a setarg  0x00000200 
+ 00028604  0x0000756b store  0x00000002 , 0x0000054a 
+ 00028605  0x0000756c branch  0x00006fc6 
+ 00028606  0x0000756e setarg  0x00000400 
+ 00028607  0x0000756f store  0x00000002 , 0x0000054a 
+ 00028608  0x00007570 branch  0x00006fc6 
+ 00028609  0x00007572 setarg  0x00000600 
+ 00028610  0x00007573 store  0x00000002 , 0x0000054a 
+ 00028611  0x00007574 branch  0x00006fc6 
+ 00028612  0x00007576 setarg  0x00000300 
+ 00028613  0x00007577 store  0x00000002 , 0x0000054a 
+ 00028614  0x00007579 call  0x000052d0 
+ 00028615  0x0000757a istore  0x00000001 , 0x00000005 
+ 00028616  0x0000757b fetch  0x00000002 , 0x0000051c 
+ 00028617  0x0000757c istore  0x00000002 , 0x00000005 
+ 00028618  0x0000757d setarg  0x00000200 
+ 00028619  0x0000757e istore  0x00000002 , 0x00000005 
+ 00028620  0x0000757f fetch  0x00000002 , 0x0000054a 
+ 00028621  0x00007580 istore  0x00000002 , 0x00000005 
+ 00028622  0x00007581 jam  0x00000007 , 0x00000275 
+ 00028623  0x00007582 rtn 
+ 00028624  0x00007588 arg  0x00000000 , 0x00000012 
+ 00028625  0x00007589 force  0x00000000 , 0x00000002 
+ 00028626  0x0000758a arg  0x00000511 , 0x00000005 
+ 00028627  0x0000758b call  0x00007028 
+ 00028628  0x0000758c branch  0x00007026 , 0x00000005 
+ 00028629  0x0000758e increase  0x00000001 , 0x00000012 
+ 00028630  0x0000758f ifetch  0x00000001 , 0x00000006 
+ 00028631  0x00007590 increase  0xffffffff , 0x00000011 
+ 00028632  0x00007591 increase  0xffffffff , 0x0000000b 
+ 00028633  0x00007592 compare  0x00000018 , 0x0000003f , 0x000000f8 
+ 00028634  0x00007593 nbranch  0x00007026 , 0x00000001 
+ 00028635  0x00007594 compare  0x00000004 , 0x0000003f , 0x00000007 
+ 00028636  0x00007595 nbranch  0x00006ff3 , 0x00000001 
+ 00028637  0x00007596 force  0x00000001 , 0x00000002 
+ 00028638  0x00007598 ifetch  0x00000001 , 0x00000006 
+ 00028639  0x00007599 increase  0xffffffff , 0x00000011 
+ 00028640  0x0000759a increase  0xffffffff , 0x0000000b 
+ 00028641  0x0000759b bne  0x00000000 , 0x00006fe7 
+ 00028642  0x0000759c ifetch  0x00000001 , 0x00000006 
+ 00028643  0x0000759d increase  0xffffffff , 0x00000011 
+ 00028644  0x0000759e increase  0xffffffff , 0x0000000b 
+ 00028645  0x0000759f beq  0x00000000 , 0x00006ff8 
+ 00028646  0x000075a0 branch  0x00006fea 
+ 00028647  0x000075a2 increase  0x00000001 , 0x00000006 
+ 00028648  0x000075a3 increase  0xffffffff , 0x00000011 
+ 00028649  0x000075a4 increase  0xffffffff , 0x0000000b 
+ 00028650  0x000075a6 increase  0x00000002 , 0x00000006 
+ 00028651  0x000075a7 increase  0xfffffffe , 0x00000011 
+ 00028652  0x000075a8 increase  0xfffffffe , 0x0000000b 
+ 00028653  0x000075a9 compare  0x00000000 , 0x00000002 , 0x000000ff 
+ 00028654  0x000075aa branch  0x00007020 , 0x00000001 
+ 00028655  0x000075ab increase  0x0000000c , 0x00000006 
+ 00028656  0x000075ac increase  0xfffffff4 , 0x00000011 
+ 00028657  0x000075ad increase  0xfffffff4 , 0x0000000b 
+ 00028658  0x000075ae branch  0x00007020 
+ 00028659  0x000075b0 compare  0x00000002 , 0x0000003f , 0x00000007 
+ 00028660  0x000075b1 nbranch  0x00006ff6 , 0x00000001 
+ 00028661  0x000075b2 branch  0x00006fde 
+ 00028662  0x000075b4 compare  0x00000001 , 0x0000003f , 0x00000007 
+ 00028663  0x000075b5 nbranch  0x00007026 , 0x00000001 
+ 00028664  0x000075b7 increase  0xfffffffe , 0x00000011 
+ 00028665  0x000075b8 increase  0xfffffffe , 0x0000000b 
+ 00028666  0x000075b9 ifetch  0x00000002 , 0x00000006 
+ 00028667  0x000075ba sub  0x00000012 , 0x00000004 , 0x0000003e 
+ 00028668  0x000075bb branch  0x00006ffe , 0x00000005 
+ 00028669  0x000075bc istore  0x00000002 , 0x00000005 
+ 00028670  0x000075be compare  0x00000000 , 0x00000002 , 0x000000ff 
+ 00028671  0x000075bf branch  0x00007020 , 0x00000001 
+ 00028672  0x000075c0 copy  0x00000006 , 0x00000002 
+ 00028673  0x000075c1 ifetch  0x00000001 , 0x00000006 
+ 00028674  0x000075c2 bne  0x00000000 , 0x00007019 
+ 00028675  0x000075c3 ifetch  0x00000001 , 0x00000006 
+ 00028676  0x000075c4 bne  0x00000000 , 0x00007019 
+ 00028677  0x000075c5 ifetch  0x00000001 , 0x00000006 
+ 00028678  0x000075c6 bne  0x00000010 , 0x00007019 
+ 00028679  0x000075c7 ifetch  0x00000001 , 0x00000006 
+ 00028680  0x000075c8 bne  0x00000000 , 0x00007019 
+ 00028681  0x000075c9 ifetch  0x00000001 , 0x00000006 
+ 00028682  0x000075ca bne  0x00000080 , 0x00007019 
+ 00028683  0x000075cb ifetch  0x00000001 , 0x00000006 
+ 00028684  0x000075cc bne  0x00000000 , 0x00007019 
+ 00028685  0x000075cd ifetch  0x00000001 , 0x00000006 
+ 00028686  0x000075ce bne  0x00000000 , 0x00007019 
+ 00028687  0x000075cf ifetch  0x00000001 , 0x00000006 
+ 00028688  0x000075d0 bne  0x00000080 , 0x00007019 
+ 00028689  0x000075d1 ifetch  0x00000001 , 0x00000006 
+ 00028690  0x000075d2 bne  0x0000005f , 0x00007019 
+ 00028691  0x000075d3 ifetch  0x00000001 , 0x00000006 
+ 00028692  0x000075d4 bne  0x0000009b , 0x00007019 
+ 00028693  0x000075d5 ifetch  0x00000001 , 0x00000006 
+ 00028694  0x000075d6 bne  0x00000034 , 0x00007019 
+ 00028695  0x000075d7 ifetch  0x00000001 , 0x00000006 
+ 00028696  0x000075d8 beq  0x000000fb , 0x0000701e 
+ 00028697  0x000075da copy  0x00000002 , 0x00000006 
+ 00028698  0x000075dc increase  0x0000000c , 0x00000006 
+ 00028699  0x000075dd force  0x00000000 , 0x00000007 
+ 00028700  0x000075de force  0x00000000 , 0x00000002 
+ 00028701  0x000075df branch  0x0000701e 
+ 00028702  0x000075e2 increase  0xfffffff4 , 0x0000000b 
+ 00028703  0x000075e3 increase  0xfffffff4 , 0x00000011 
+ 00028704  0x000075e5 force  0x00000000 , 0x00000002 
+ 00028705  0x000075e6 compare  0x00000000 , 0x00000011 , 0x000000ff 
+ 00028706  0x000075e7 nbranch  0x00006fd5 , 0x00000001 
+ 00028707  0x000075e8 force  0x00000000 , 0x0000003f 
+ 00028708  0x000075e9 istore  0x00000002 , 0x00000005 
+ 00028709  0x000075ea rtn 
+ 00028710  0x000075ec arg  0x000000ff , 0x00000002 
+ 00028711  0x000075ed rtn 
+ 00028712  0x000075f8 bpatchx  0x000000d4 , 0x0000403a 
+ 00028713  0x000075f9 ifetch  0x00000001 , 0x00000006 
+ 00028714  0x000075fa increase  0xffffffff , 0x0000000b 
+ 00028715  0x000075fb compare  0x00000030 , 0x0000003f , 0x000000f8 
+ 00028716  0x000075fc nbranch  0x0000703e , 0x00000001 
+ 00028717  0x000075fd compare  0x00000007 , 0x0000003f , 0x00000007 
+ 00028718  0x000075fe branch  0x00007037 , 0x00000001 
+ 00028719  0x000075ff compare  0x00000006 , 0x0000003f , 0x00000007 
+ 00028720  0x00007600 branch  0x00007039 , 0x00000001 
+ 00028721  0x00007601 compare  0x00000005 , 0x0000003f , 0x00000007 
+ 00028722  0x00007602 nbranch  0x0000703e , 0x00000001 
+ 00028723  0x00007604 ifetch  0x00000001 , 0x00000006 
+ 00028724  0x00007605 copy  0x0000003f , 0x00000011 
+ 00028725  0x00007606 increase  0xffffffff , 0x0000000b 
+ 00028726  0x00007607 branch  0x0000703c 
+ 00028727  0x00007609 increase  0x00000002 , 0x00000006 
+ 00028728  0x0000760a increase  0xfffffffe , 0x0000000b 
+ 00028729  0x0000760c ifetch  0x00000002 , 0x00000006 
+ 00028730  0x0000760d byteswap  0x0000003f , 0x00000011 
+ 00028731  0x0000760e increase  0xfffffffe , 0x0000000b 
+ 00028732  0x00007610 force  0x00000001 , 0x0000003f 
+ 00028733  0x00007611 rtn 
+ 00028734  0x00007613 force  0x00000000 , 0x0000003f 
+ 00028735  0x00007614 rtn 
+ 00028736  0x0000761f setarg  0x00000003 
+ 00028737  0x00007620 store  0x00000001 , 0x0000051b 
+ 00028738  0x00007621 branch  0x00007048 
+ 00028739  0x00007623 setarg  0x00000005 
+ 00028740  0x00007624 store  0x00000001 , 0x0000051b 
+ 00028741  0x00007625 branch  0x00007048 
+ 00028742  0x00007627 setarg  0x00000007 
+ 00028743  0x00007628 store  0x00000001 , 0x0000051b 
+ 00028744  0x0000762a call  0x000052d0 
+ 00028745  0x0000762d fetch  0x00000001 , 0x0000051b 
+ 00028746  0x0000762e copy  0x0000003f , 0x00000012 
+ 00028747  0x0000762f istore  0x00000001 , 0x00000005 
+ 00028748  0x00007630 fetch  0x00000002 , 0x0000051c 
+ 00028749  0x00007631 istore  0x00000002 , 0x00000005 
+ 00028750  0x00007632 setarg  0x00000500 
+ 00028751  0x00007633 istore  0x00000002 , 0x00000005 
+ 00028752  0x00007634 compare  0x00000005 , 0x00000012 , 0x000000ff 
+ 00028753  0x00007635 branch  0x00007057 , 0x00000001 
+ 00028754  0x00007636 compare  0x00000007 , 0x00000012 , 0x000000ff 
+ 00028755  0x00007637 branch  0x00007057 , 0x00000001 
+ 00028756  0x00007638 setarg  0x00000000 
+ 00028757  0x00007639 istore  0x00000005 , 0x00000005 
+ 00028758  0x0000763a branch  0x00007059 
+ 00028759  0x0000763d setarg  0x00350200 
+ 00028760  0x0000763e istore  0x00000005 , 0x00000005 
+ 00028761  0x00007640 jam  0x0000000a , 0x00000275 
+ 00028762  0x00007641 rtn 
+ 00028763  0x00007645 call  0x00007ea2 
+ 00028764  0x00007646 call  0x00007ea5 
+ 00028765  0x00007647 call  0x00007062 
+ 00028766  0x00007648 call  0x00007e9c 
+ 00028767  0x00007649 call  0x00007e9f 
+ 00028768  0x0000764a copy  0x00000002 , 0x0000003f 
+ 00028769  0x0000764b rtn 
+ 00028770  0x0000764f ifetch  0x00000001 , 0x00000006 
+ 00028771  0x00007650 and  0x0000003f , 0x00000007 , 0x00000039 
+ 00028772  0x00007651 rshift3  0x0000003f , 0x0000003f 
+ 00028773  0x00007652 bne  0x00000000 , 0x0000706c 
+ 00028774  0x00007654 force  0x00000001 , 0x0000003f 
+ 00028775  0x00007655 force  0x00000001 , 0x00000002 
+ 00028776  0x00007656 rtn 
+ 00028777  0x00007659 call  0x00007e76 
+ 00028778  0x0000765a add  0x0000003f , 0x00000001 , 0x00000002 
+ 00028779  0x0000765b rtn 
+ 00028780  0x0000765d deposit  0x00000039 
+ 00028781  0x0000765e sub  0x0000003f , 0x00000004 , 0x0000003e 
+ 00028782  0x0000765f branch  0x00007069 , 0x00000002 
+ 00028783  0x00007660 beq  0x00000005 , 0x00007073 
+ 00028784  0x00007661 beq  0x00000006 , 0x00007076 
+ 00028785  0x00007662 beq  0x00000007 , 0x0000707a 
+ 00028786  0x00007663 rtn 
+ 00028787  0x00007666 ifetch  0x00000001 , 0x00000006 
+ 00028788  0x00007667 add  0x0000003f , 0x00000002 , 0x00000002 
+ 00028789  0x00007668 rtn 
+ 00028790  0x0000766a ifetch  0x00000002 , 0x00000006 
+ 00028791  0x0000766b byteswap  0x0000003f , 0x0000003f 
+ 00028792  0x0000766c add  0x0000003f , 0x00000003 , 0x00000002 
+ 00028793  0x0000766d rtn 
+ 00028794  0x0000766f ifetch  0x00000002 , 0x00000006 
+ 00028795  0x00007670 byteswap  0x0000003f , 0x0000003f 
+ 00028796  0x00007671 ifetcht  0x00000002 , 0x00000006 
+ 00028797  0x00007672 byteswap  0x00000002 , 0x00000002 
+ 00028798  0x00007673 lshift16  0x00000002 , 0x00000002 
+ 00028799  0x00007674 iadd  0x00000002 , 0x0000003f 
+ 00028800  0x00007675 add  0x0000003f , 0x00000005 , 0x00000002 
+ 00028801  0x00007676 rtn 
+ 00028802  0x0000767d bpatchx  0x000000d5 , 0x0000403a 
+ 00028803  0x0000767e force  0x00000000 , 0x00000007 
+ 00028804  0x0000767f arg  0x00000000 , 0x00000012 
+ 00028805  0x00007680 arg  0x0000052a , 0x00000005 
+ 00028806  0x00007682 ifetch  0x00000002 , 0x0000000b 
+ 00028807  0x00007683 rtn  0x00000034 
+ 00028808  0x00007684 call  0x0000708d 
+ 00028809  0x00007685 copy  0x00000007 , 0x0000003f 
+ 00028810  0x00007686 rtneq  0x00000007 
+ 00028811  0x00007687 increase  0x00000002 , 0x0000000b 
+ 00028812  0x00007688 branch  0x00007086 
+ 00028813  0x0000768c iforce  0x00000013 
+ 00028814  0x0000768e fetch  0x00000002 , 0x00004575 
+ 00028815  0x0000768f iforce  0x00000006 
+ 00028816  0x00007691 copy  0x00000007 , 0x0000003f 
+ 00028817  0x00007692 rtneq  0x00000007 
+ 00028818  0x00007693 disable  0x00000028 
+ 00028819  0x00007694 ifetch  0x00000001 , 0x00000006 
+ 00028820  0x00007695 rtn  0x00000034 
+ 00028821  0x00007696 iforce  0x00000039 
+ 00028822  0x00007698 ifetch  0x00000002 , 0x00000006 
+ 00028823  0x00007699 isub  0x00000013 , 0x0000003e 
+ 00028824  0x0000769a nbranch  0x0000709a , 0x00000005 
+ 00028825  0x0000769b enable  0x00000028 
+ 00028826  0x0000769d loop  0x00007096 
+ 00028827  0x0000769e ifetcht  0x00000004 , 0x00000006 
+ 00028828  0x0000769f copy  0x00000006 , 0x00000011 
+ 00028829  0x000076a0 nbranch  0x000070ad , 0x00000028 
+ 00028830  0x000076a1 arg  0x0000052a , 0x00000006 
+ 00028831  0x000076a2 arg  0x00000007 , 0x00000039 
+ 00028832  0x000076a4 ifetch  0x00000004 , 0x00000006 
+ 00028833  0x000076a5 branch  0x000070a6 , 0x00000034 
+ 00028834  0x000076a6 isub  0x00000002 , 0x0000003e 
+ 00028835  0x000076a7 branch  0x000070ad , 0x00000005 
+ 00028836  0x000076a8 loop  0x000070a0 
+ 00028837  0x000076a9 rtn 
+ 00028838  0x000076ab istoret  0x00000004 , 0x00000005 
+ 00028839  0x000076ac increase  0x00000001 , 0x00000007 
+ 00028840  0x000076ad copy  0x00000011 , 0x00000006 
+ 00028841  0x000076ae call  0x0000705b 
+ 00028842  0x000076af iadd  0x00000012 , 0x00000012 
+ 00028843  0x000076b0 iadd  0x00000006 , 0x00000006 
+ 00028844  0x000076b1 branch  0x00007090 
+ 00028845  0x000076b3 copy  0x00000011 , 0x00000006 
+ 00028846  0x000076b4 call  0x00007062 
+ 00028847  0x000076b5 iadd  0x00000006 , 0x00000006 
+ 00028848  0x000076b6 branch  0x00007090 
+ 00028849  0x000076bd bpatchx  0x000000d6 , 0x0000403a 
+ 00028850  0x000076be fetch  0x00000002 , 0x00004575 
+ 00028851  0x000076bf iforce  0x00000006 
+ 00028852  0x000076c1 ifetch  0x00000001 , 0x00000006 
+ 00028853  0x000076c2 branch  0x00007fe3 , 0x00000034 
+ 00028854  0x000076c3 lshift  0x0000003f , 0x0000003f 
+ 00028855  0x000076c4 iadd  0x00000006 , 0x00000006 
+ 00028856  0x000076c5 ifetch  0x00000004 , 0x00000006 
+ 00028857  0x000076c6 isub  0x00000002 , 0x0000003e 
+ 00028858  0x000076c7 rtn  0x00000005 
+ 00028859  0x000076c8 deposit  0x00000005 
+ 00028860  0x000076c9 store  0x00000002 , 0x00000abb 
+ 00028861  0x000076ca storet  0x00000008 , 0x00000aa2 
+ 00028862  0x000076cb call  0x00007062 
+ 00028863  0x000076cc iadd  0x00000006 , 0x00000006 
+ 00028864  0x000076cd copy  0x00000006 , 0x0000003f 
+ 00028865  0x000076ce fetcht  0x00000002 , 0x00000abb 
+ 00028866  0x000076cf copy  0x00000002 , 0x00000005 
+ 00028867  0x000076d0 fetcht  0x00000008 , 0x00000aa2 
+ 00028868  0x000076d1 copy  0x0000003f , 0x00000006 
+ 00028869  0x000076d2 branch  0x000070b4 
+ 00028870  0x000076d9 bpatchx  0x000000d7 , 0x0000403a 
+ 00028871  0x000076da fetch  0x00000002 , 0x00004575 
+ 00028872  0x000076db iforce  0x00000006 
+ 00028873  0x000076dd ifetch  0x00000001 , 0x00000006 
+ 00028874  0x000076de branch  0x000070e4 , 0x00000034 
+ 00028875  0x000076df iforce  0x00000039 
+ 00028876  0x000076e1 ifetch  0x00000002 , 0x00000006 
+ 00028877  0x000076e2 isub  0x00000013 , 0x0000003e 
+ 00028878  0x000076e3 branch  0x000070d4 , 0x00000005 
+ 00028879  0x000076e4 loop  0x000070cc 
+ 00028880  0x000076e5 increase  0x00000004 , 0x00000006 
+ 00028881  0x000076e6 call  0x00007062 
+ 00028882  0x000076e7 iadd  0x00000006 , 0x00000006 
+ 00028883  0x000076e8 branch  0x000070c9 
+ 00028884  0x000076ea increase  0xffffffff , 0x00000039 
+ 00028885  0x000076eb lshift  0x00000039 , 0x0000003f 
+ 00028886  0x000076ec iadd  0x00000006 , 0x00000006 
+ 00028887  0x000076ed increase  0x00000004 , 0x00000006 
+ 00028888  0x000076ee call  0x00007062 
+ 00028889  0x000076ef iadd  0x00000006 , 0x0000000b 
+ 00028890  0x000076f1 increase  0x00000001 , 0x00000006 
+ 00028891  0x000076f2 ifetch  0x00000002 , 0x00000006 
+ 00028892  0x000076f3 isub  0x00000012 , 0x0000003e 
+ 00028893  0x000076f7 branch  0x00007fef , 0x00000005 
+ 00028894  0x000076f8 call  0x0000705b 
+ 00028895  0x000076f9 iadd  0x00000006 , 0x00000006 
+ 00028896  0x000076fa deposit  0x0000000b 
+ 00028897  0x000076fb isub  0x00000006 , 0x0000003e 
+ 00028898  0x000076fc branch  0x000070e4 , 0x00000005 
+ 00028899  0x000076fd branch  0x000070da 
+ 00028900  0x000076ff force  0x00000000 , 0x00000006 
+ 00028901  0x00007700 force  0x00000000 , 0x0000003f 
+ 00028902  0x00007701 rtn 
+ 00028903  0x00007708 bpatchx  0x000000d8 , 0x0000403b 
+ 00028904  0x00007709 fetch  0x00000002 , 0x00004575 
+ 00028905  0x0000770a iforce  0x00000006 
+ 00028906  0x0000770c ifetch  0x00000001 , 0x00000006 
+ 00028907  0x0000770d branch  0x00007100 , 0x00000034 
+ 00028908  0x0000770e lshift  0x0000003f , 0x0000003f 
+ 00028909  0x0000770f iadd  0x00000006 , 0x00000006 
+ 00028910  0x00007710 ifetch  0x00000004 , 0x00000006 
+ 00028911  0x00007711 isub  0x00000002 , 0x0000003e 
+ 00028912  0x00007712 branch  0x000070f4 , 0x00000005 
+ 00028913  0x00007713 call  0x00007062 
+ 00028914  0x00007714 iadd  0x00000006 , 0x00000006 
+ 00028915  0x00007715 branch  0x000070ea 
+ 00028916  0x00007717 call  0x00007062 
+ 00028917  0x00007718 iadd  0x00000006 , 0x0000000b 
+ 00028918  0x0000771a increase  0x00000001 , 0x00000006 
+ 00028919  0x0000771b ifetch  0x00000002 , 0x00000006 
+ 00028920  0x0000771c isub  0x00000012 , 0x0000003e 
+ 00028921  0x0000771d rtn  0x00000005 
+ 00028922  0x0000771e call  0x0000705b 
+ 00028923  0x0000771f iadd  0x00000006 , 0x00000006 
+ 00028924  0x00007720 deposit  0x0000000b 
+ 00028925  0x00007721 isub  0x00000006 , 0x0000003e 
+ 00028926  0x00007722 branch  0x00007100 , 0x00000005 
+ 00028927  0x00007723 branch  0x000070f6 
+ 00028928  0x00007725 force  0x00000000 , 0x00000006 
+ 00028929  0x00007726 rtn 
+ 00028930  0x0000772b arg  0x00000400 , 0x00000012 
+ 00028931  0x0000772c call  0x000070f4 
+ 00028932  0x0000772d arg  0x00000300 , 0x00000012 
+ 00028933  0x0000772e call  0x0000710d 
+ 00028934  0x0000772f nrtn  0x00000028 
+ 00028935  0x00007730 sub  0x00000011 , 0x00000003 , 0x0000003e 
+ 00028936  0x00007731 branch  0x00007fe9 , 0x00000002 
+ 00028937  0x00007732 ifetch  0x00000001 , 0x00000006 
+ 00028938  0x00007733 bne  0x00000008 , 0x00007fe9 
+ 00028939  0x00007734 ifetch  0x00000001 , 0x00000006 
+ 00028940  0x00007735 rtn 
+ 00028941  0x0000773b bpatchx  0x000000d9 , 0x0000403b 
+ 00028942  0x0000773c call  0x00007062 
+ 00028943  0x0000773d copy  0x0000003f , 0x00000011 
+ 00028944  0x0000773f ifetch  0x00000001 , 0x00000006 
+ 00028945  0x00007740 and  0x0000003f , 0x00000007 , 0x00000039 
+ 00028946  0x00007741 rshift3  0x0000003f , 0x0000003f 
+ 00028947  0x00007742 sub  0x0000003f , 0x00000003 , 0x0000003e 
+ 00028948  0x00007743 branch  0x00007129 , 0x00000005 
+ 00028949  0x00007744 copy  0x00000039 , 0x0000003f 
+ 00028950  0x00007745 beq  0x00000005 , 0x00007120 
+ 00028951  0x00007746 beq  0x00000006 , 0x00007123 
+ 00028952  0x00007747 beq  0x00000007 , 0x00007126 
+ 00028953  0x00007748 increase  0xffffffff , 0x00000006 
+ 00028954  0x00007749 call  0x00007062 
+ 00028955  0x0000774a iadd  0x00000006 , 0x00000006 
+ 00028956  0x0000774b copy  0x00000011 , 0x0000003f 
+ 00028957  0x0000774c isub  0x00000002 , 0x00000011 
+ 00028958  0x0000774d branch  0x00007fe9 , 0x00000005 
+ 00028959  0x0000774e branch  0x00007110 
+ 00028960  0x00007751 increase  0xfffffffe , 0x00000011 
+ 00028961  0x00007752 increase  0x00000001 , 0x00000006 
+ 00028962  0x00007753 branch  0x00007110 
+ 00028963  0x00007755 increase  0xfffffffd , 0x00000011 
+ 00028964  0x00007756 increase  0x00000002 , 0x00000006 
+ 00028965  0x00007757 branch  0x00007110 
+ 00028966  0x00007759 increase  0xfffffffb , 0x00000011 
+ 00028967  0x0000775a increase  0x00000004 , 0x00000006 
+ 00028968  0x0000775b branch  0x00007110 
+ 00028969  0x0000775e increase  0xffffffff , 0x00000011 
+ 00028970  0x0000775f copy  0x00000039 , 0x0000003f 
+ 00028971  0x00007760 beq  0x00000001 , 0x00007132 
+ 00028972  0x00007761 beq  0x00000002 , 0x00007130 
+ 00028973  0x00007762 beq  0x00000004 , 0x0000712f 
+ 00028974  0x00007763 branch  0x00007fe9 
+ 00028975  0x00007765 increase  0xfffffff4 , 0x00000011 
+ 00028976  0x00007767 ifetch  0x00000002 , 0x00000006 
+ 00028977  0x00007768 increase  0xfffffffe , 0x00000011 
+ 00028978  0x0000776a ifetch  0x00000002 , 0x00000006 
+ 00028979  0x0000776b isub  0x00000012 , 0x0000003e 
+ 00028980  0x0000776c branch  0x00007fe7 , 0x00000005 
+ 00028981  0x0000776d increase  0xfffffffe , 0x00000011 
+ 00028982  0x0000776e branch  0x00007fe9 , 0x00000005 
+ 00028983  0x0000776f branch  0x00007110 
+ 00028984  0x000077ab call  0x000052d0 
+ 00028985  0x000077ac copy  0x0000003f , 0x00000005 
+ 00028986  0x000077ad setarg  0x00000006 
+ 00028987  0x000077ae istore  0x00000001 , 0x00000005 
+ 00028988  0x000077af setarg  0x0000006e 
+ 00028989  0x000077b0 istore  0x00000002 , 0x00000005 
+ 00028990  0x000077b1 setarg  0x00000f00 
+ 00028991  0x000077b2 istore  0x00000002 , 0x00000005 
+ 00028992  0x000077b3 setarg  0x001a0535 
+ 00028993  0x000077b4 istore  0x00000003 , 0x00000005 
+ 00028994  0x000077b5 setarg  0x00000111 
+ 00028995  0x000077b6 lshift16  0x0000003f , 0x0000003f 
+ 00028996  0x000077b7 istore  0x00000004 , 0x00000005 
+ 00028997  0x000077b8 setarg  0x00002600 
+ 00028998  0x000077b9 istore  0x00000002 , 0x00000005 
+ 00028999  0x000077ba setarg  0x00000335 
+ 00029000  0x000077bb istore  0x00000002 , 0x00000005 
+ 00029001  0x000077bc setarg  0x00000009 
+ 00029002  0x000077bd istore  0x00000002 , 0x00000005 
+ 00029003  0x000077be setarg  0x00000004 
+ 00029004  0x000077bf istore  0x00000002 , 0x00000005 
+ 00029005  0x000077c0 jam  0x00000014 , 0x00000275 
+ 00029006  0x000077c1 rtn 
+ 00029007  0x000077c6 bpatchx  0x000000da , 0x0000403b 
+ 00029008  0x000077c7 jam  0x00000050 , 0x000005e5 
+ 00029009  0x000077c8 arg  0x000005e6 , 0x00000005 
+ 00029010  0x000077c9 arg  0x0000443a , 0x00000006 
+ 00029011  0x000077ca call  0x00007ebf 
+ 00029012  0x000077cb arg  0x000045d2 , 0x00000006 
+ 00029013  0x000077cc call  0x00007ebd 
+ 00029014  0x000077cd arg  0x000009be , 0x00000006 
+ 00029015  0x000077ce call  0x00007ebd 
+ 00029016  0x000077cf call  0x0000720a 
+ 00029017  0x000077d0 arg  0x0000042f , 0x00000006 
+ 00029018  0x000077d1 call  0x00007205 
+ 00029019  0x000077d2 call  0x000071d0 
+ 00029020  0x000077d4 arg  0x00000af2 , 0x00000005 
+ 00029021  0x000077d5 call  0x00007201 
+ 00029022  0x000077d6 setarg  0x000f4240 
+ 00029023  0x000077d7 copy  0x0000003f , 0x00000011 
+ 00029024  0x000077d8 fetch  0x00000004 , 0x00000af2 
+ 00029025  0x000077d9 idiv  0x00000011 
+ 00029026  0x000077da call  0x00007f86 
+ 00029027  0x000077db remainder  0x0000003f 
+ 00029028  0x000077dc store  0x00000004 , 0x000009ba 
+ 00029029  0x000077de rtn 
+ 00029030  0x000077e1 jam  0x00000041 , 0x000005e5 
+ 00029031  0x000077e2 arg  0x000005e6 , 0x00000005 
+ 00029032  0x000077e3 call  0x000071b5 
+ 00029033  0x000077e4 call  0x000071b0 
+ 00029034  0x000077e5 fetch  0x00000003 , 0x00004454 
+ 00029035  0x000077e6 istore  0x00000003 , 0x00000005 
+ 00029036  0x000077e9 call  0x00007176 
+ 00029037  0x000077eb arg  0x0000042f , 0x00000006 
+ 00029038  0x000077ec call  0x00007ebf 
+ 00029039  0x000077ed arg  0x0000443a , 0x00000006 
+ 00029040  0x000077ee call  0x00007ebf 
+ 00029041  0x000077ef call  0x0000720a 
+ 00029042  0x000077f0 arg  0x00000b12 , 0x00000006 
+ 00029043  0x000077f1 arg  0x00000ac2 , 0x00000005 
+ 00029044  0x000077f2 call  0x00007ebf 
+ 00029045  0x000077f4 branch  0x000071d0 
+ 00029046  0x000077f9 fetch  0x00000004 , 0x000044c7 
+ 00029047  0x000077fa istore  0x00000004 , 0x00000005 
+ 00029048  0x000077fb call  0x00007ecd 
+ 00029049  0x000077fc branch  0x00007eca 
+ 00029050  0x000077ff bpatchx  0x000000db , 0x0000403b 
+ 00029051  0x00007800 jam  0x00000041 , 0x000005e5 
+ 00029052  0x00007801 arg  0x000005e6 , 0x00000005 
+ 00029053  0x00007802 call  0x000071b0 
+ 00029054  0x00007803 call  0x000071b5 
+ 00029055  0x00007804 fetch  0x00000003 , 0x0000444d 
+ 00029056  0x00007805 istore  0x00000003 , 0x00000005 
+ 00029057  0x00007808 call  0x00007176 
+ 00029058  0x00007809 arg  0x0000443a , 0x00000006 
+ 00029059  0x0000780a call  0x00007ebf 
+ 00029060  0x0000780b arg  0x0000042f , 0x00000006 
+ 00029061  0x0000780c call  0x00007ebf 
+ 00029062  0x0000780d call  0x0000720a 
+ 00029063  0x0000780e arg  0x00000b12 , 0x00000006 
+ 00029064  0x0000780f arg  0x00000ac2 , 0x00000005 
+ 00029065  0x00007810 call  0x00007ebf 
+ 00029066  0x00007812 call  0x000071d0 
+ 00029067  0x00007813 arg  0x00000af2 , 0x00000005 
+ 00029068  0x00007814 branch  0x00007201 
+ 00029069  0x00007817 jam  0x00000020 , 0x000005e5 
+ 00029070  0x00007818 arg  0x000009fe , 0x00000006 
+ 00029071  0x00007819 arg  0x000005e6 , 0x00000005 
+ 00029072  0x0000781a call  0x00007ebd 
+ 00029073  0x0000781b call  0x0000720a 
+ 00029074  0x0000781c arg  0x0000099e , 0x00000006 
+ 00029075  0x0000781d call  0x00007205 
+ 00029076  0x0000781e call  0x000071d0 
+ 00029077  0x0000781f arg  0x00000ac2 , 0x00000005 
+ 00029078  0x00007820 call  0x00007497 
+ 00029079  0x00007821 arg  0x00000001 , 0x00000002 
+ 00029080  0x00007822 call  0x0000719f 
+ 00029081  0x00007823 arg  0x00004419 , 0x00000005 
+ 00029082  0x00007824 call  0x00007201 
+ 00029083  0x00007825 arg  0x00000000 , 0x00000002 
+ 00029084  0x00007826 call  0x0000719f 
+ 00029085  0x00007827 arg  0x00000b12 , 0x00000005 
+ 00029086  0x00007829 branch  0x00007497 
+ 00029087  0x0000782d bpatchx  0x000000dc , 0x0000403b 
+ 00029088  0x0000782e jam  0x00000035 , 0x000005e5 
+ 00029089  0x0000782f setarg  0x00000100 
+ 00029090  0x00007830 store  0x00000002 , 0x000005e6 
+ 00029091  0x00007831 call  0x000071b0 
+ 00029092  0x00007832 call  0x000071b5 
+ 00029093  0x00007833 arg  0x0000443a , 0x00000006 
+ 00029094  0x00007834 call  0x00007ebf 
+ 00029095  0x00007835 arg  0x0000042f , 0x00000006 
+ 00029096  0x00007836 call  0x00007ebf 
+ 00029097  0x00007838 setarg  0x00006c65 
+ 00029098  0x00007839 istore  0x00000002 , 0x00000005 
+ 00029099  0x0000783a setarg  0x00006274 
+ 00029100  0x0000783b istore  0x00000002 , 0x00000005 
+ 00029101  0x0000783c istoret  0x00000001 , 0x00000005 
+ 00029102  0x0000783d call  0x0000720a 
+ 00029103  0x0000783e branch  0x000071d0 
+ 00029104  0x00007841 fetch  0x00000006 , 0x000044a0 
+ 00029105  0x00007842 istore  0x00000006 , 0x00000005 
+ 00029106  0x00007843 fetch  0x00000001 , 0x00004495 
+ 00029107  0x00007844 istore  0x00000001 , 0x00000005 
+ 00029108  0x00007845 rtn 
+ 00029109  0x00007848 fetch  0x00000006 , 0x0000044f 
+ 00029110  0x00007849 istore  0x00000006 , 0x00000005 
+ 00029111  0x0000784e fetch  0x00000001 , 0x0000448e 
+ 00029112  0x0000784f istore  0x00000001 , 0x00000005 
+ 00029113  0x00007850 rtn 
+ 00029114  0x00007853 jam  0x00000041 , 0x000005e5 
+ 00029115  0x00007854 fetch  0x00000001 , 0x00004664 
+ 00029116  0x00007855 store  0x00000001 , 0x000005e6 
+ 00029117  0x00007856 arg  0x000045d2 , 0x00000006 
+ 00029118  0x00007857 call  0x00007ebd 
+ 00029119  0x00007858 arg  0x000009be , 0x00000006 
+ 00029120  0x00007859 call  0x00007ebd 
+ 00029121  0x0000785a call  0x0000720a 
+ 00029122  0x0000785b arg  0x0000042f , 0x00000006 
+ 00029123  0x0000785c call  0x00007205 
+ 00029124  0x0000785d branch  0x000071d0 
+ 00029125  0x00007861 jam  0x00000041 , 0x000005e5 
+ 00029126  0x00007862 fetch  0x00000001 , 0x00004664 
+ 00029127  0x00007863 store  0x00000001 , 0x000005e6 
+ 00029128  0x00007864 arg  0x000009be , 0x00000006 
+ 00029129  0x00007865 call  0x00007ebd 
+ 00029130  0x00007866 arg  0x000045d2 , 0x00000006 
+ 00029131  0x00007867 call  0x00007ebd 
+ 00029132  0x00007868 call  0x0000720a 
+ 00029133  0x00007869 arg  0x0000443a , 0x00000006 
+ 00029134  0x0000786a call  0x00007205 
+ 00029135  0x0000786b branch  0x000071d0 
+ 00029136  0x0000786e bpatchx  0x000000dd , 0x0000403b 
+ 00029137  0x0000786f call  0x0000721f 
+ 00029138  0x00007873 fetch  0x00000001 , 0x000005e5 
+ 00029139  0x00007874 copy  0x0000003f , 0x00000002 
+ 00029140  0x00007876 increase  0x0000000f , 0x0000003f 
+ 00029141  0x00007877 rshift4  0x0000003f , 0x0000003f 
+ 00029142  0x00007878 copy  0x0000003f , 0x00000012 
+ 00029143  0x00007879 branch  0x000071e2 , 0x00000034 
+ 00029144  0x0000787a and  0x00000002 , 0x0000000f , 0x0000003f 
+ 00029145  0x0000787b nbranch  0x000071e5 , 0x00000034 
+ 00029146  0x0000787d arg  0x00000ad2 , 0x00000013 
+ 00029147  0x0000787e arg  0x000005e6 , 0x0000003f 
+ 00029148  0x0000787f increase  0xfffffff0 , 0x0000003f 
+ 00029149  0x00007882 iadd  0x00000002 , 0x00000011 
+ 00029150  0x00007883 arg  0x00000b02 , 0x00000005 
+ 00029151  0x00007884 arg  0x00000004 , 0x00000039 
+ 00029152  0x00007885 call  0x00007edd 
+ 00029153  0x00007889 branch  0x000071f0 
+ 00029154  0x0000788c arg  0x00000001 , 0x00000012 
+ 00029155  0x0000788d arg  0x00000000 , 0x00000011 
+ 00029156  0x0000788f branch  0x000071e6 
+ 00029157  0x00007894 and  0x00000002 , 0x0000000f , 0x00000011 
+ 00029158  0x00007896 arg  0x000005e6 , 0x0000003f 
+ 00029159  0x00007897 iadd  0x00000002 , 0x0000003f 
+ 00029160  0x00007898 isub  0x00000011 , 0x00000006 
+ 00029161  0x0000789a arg  0x00000af2 , 0x00000005 
+ 00029162  0x0000789b call  0x00007245 
+ 00029163  0x0000789d arg  0x00000ae2 , 0x00000013 
+ 00029164  0x0000789e arg  0x00000af2 , 0x00000011 
+ 00029165  0x0000789f arg  0x00000b02 , 0x00000005 
+ 00029166  0x000078a0 arg  0x00000004 , 0x00000039 
+ 00029167  0x000078a1 call  0x00007edd 
+ 00029168  0x000078ad call  0x00007491 
+ 00029169  0x000078ae call  0x00007428 
+ 00029170  0x000078b1 arg  0x000005e6 , 0x00000006 
+ 00029171  0x000078b4 increase  0xffffffff , 0x00000012 
+ 00029172  0x000078b5 deposit  0x00000012 
+ 00029173  0x000078b6 branch  0x000071f9 , 0x00000034 
+ 00029174  0x000078b7 call  0x00007486 
+ 00029175  0x000078b8 call  0x00007422 
+ 00029176  0x000078b9 branch  0x000071f3 
+ 00029177  0x000078bc arg  0x00000af2 , 0x00000005 
+ 00029178  0x000078bd call  0x00007497 
+ 00029179  0x000078be arg  0x00000b02 , 0x00000006 
+ 00029180  0x000078bf call  0x00007486 
+ 00029181  0x000078c0 call  0x00007428 
+ 00029182  0x000078c1 arg  0x00000af2 , 0x00000006 
+ 00029183  0x000078c2 call  0x00007486 
+ 00029184  0x000078c3 branch  0x00007422 
+ 00029185  0x000078c9 copy  0x00000005 , 0x00000011 
+ 00029186  0x000078ca call  0x00007497 
+ 00029187  0x000078cc arg  0x00000010 , 0x00000039 
+ 00029188  0x000078cd branch  0x00007ee5 
+ 00029189  0x000078d0 arg  0x00000ac2 , 0x00000005 
+ 00029190  0x000078d1 call  0x00007ebf 
+ 00029191  0x000078d3 arg  0x00000010 , 0x00000039 
+ 00029192  0x000078d4 arg  0x00000ac2 , 0x00000011 
+ 00029193  0x000078d5 branch  0x00007ee5 
+ 00029194  0x000078d8 fetch  0x00000001 , 0x000005e5 
+ 00029195  0x000078d9 copy  0x0000003f , 0x00000039 
+ 00029196  0x000078da arg  0x000005e6 , 0x00000011 
+ 00029197  0x000078db branch  0x00007ee5 
+ 00029198  0x000078de ifetch  0x00000001 , 0x00000011 
+ 00029199  0x000078df lshift  0x0000003f , 0x0000003f 
+ 00029200  0x000078e0 isolate1  0x00000000 , 0x00000013 
+ 00029201  0x000078e1 setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00029202  0x000078e2 isolate1  0x00000008 , 0x0000003f 
+ 00029203  0x000078e3 setflag  0x00000001 , 0x00000000 , 0x00000013 
+ 00029204  0x000078e4 istore  0x00000001 , 0x00000011 
+ 00029205  0x000078e5 increase  0xffffffff , 0x00000011 
+ 00029206  0x000078e6 loop  0x0000720e 
+ 00029207  0x000078e7 rtn 
+ 00029208  0x000078ea arg  0x00000ad2 , 0x00000011 
+ 00029209  0x000078ec increase  0x0000000f , 0x00000011 
+ 00029210  0x000078ed force  0x00000010 , 0x00000039 
+ 00029211  0x000078ee force  0x00000000 , 0x00000013 
+ 00029212  0x000078ef branch  0x0000720e 
+ 00029213  0x000078f2 arg  0x00000ae2 , 0x00000011 
+ 00029214  0x000078f3 branch  0x00007219 
+ 00029215  0x000078f7 arg  0x00000ac2 , 0x00000006 
+ 00029216  0x000078f8 call  0x00007484 
+ 00029217  0x000078fb force  0x00000008 , 0x00000038 
+ 00029218  0x000078fc call  0x00007492 
+ 00029219  0x000078fd call  0x00007491 
+ 00029220  0x000078fe call  0x0000741f 
+ 00029221  0x00007903 arg  0x00000ad2 , 0x00000005 
+ 00029222  0x00007904 call  0x00007497 
+ 00029223  0x00007906 bpatchx  0x000000de , 0x0000403b 
+ 00029224  0x00007907 fetch  0x00000001 , 0x00000ad2 
+ 00029225  0x00007908 isolate1  0x00000007 , 0x0000003f 
+ 00029226  0x00007909 nbranch  0x00007230 , 0x00000001 
+ 00029227  0x0000790a call  0x00007218 
+ 00029228  0x0000790d arg  0x00000ad2 , 0x00000013 
+ 00029229  0x0000790f arg  0x00000ad2 , 0x00000005 
+ 00029230  0x00007912 call  0x0000723a 
+ 00029231  0x00007913 branch  0x00007231 
+ 00029232  0x00007915 call  0x00007218 
+ 00029233  0x00007918 arg  0x00000ad2 , 0x00000006 
+ 00029234  0x00007919 arg  0x00000ae2 , 0x00000005 
+ 00029235  0x0000791a call  0x00007ebf 
+ 00029236  0x0000791b fetch  0x00000001 , 0x00000ae2 
+ 00029237  0x0000791c isolate1  0x00000007 , 0x0000003f 
+ 00029238  0x0000791d nbranch  0x0000721d , 0x00000001 
+ 00029239  0x0000791e call  0x0000721d 
+ 00029240  0x00007920 arg  0x00000ae2 , 0x00000013 
+ 00029241  0x00007922 arg  0x00000ae2 , 0x00000005 
+ 00029242  0x00007929 arg  0x00000003 , 0x00000039 
+ 00029243  0x0000792b arg  0x00000000 , 0x00000002 
+ 00029244  0x0000792c call  0x00007241 
+ 00029245  0x0000792d increase  0x00000004 , 0x00000013 
+ 00029246  0x0000792e loop  0x0000723b 
+ 00029247  0x0000792f arg  0x00008700 , 0x00000002 
+ 00029248  0x00007930 lshift16  0x00000002 , 0x00000002 
+ 00029249  0x00007932 ifetch  0x00000004 , 0x00000013 
+ 00029250  0x00007933 ixor  0x00000002 , 0x0000003f 
+ 00029251  0x00007934 istore  0x00000004 , 0x00000005 
+ 00029252  0x00007935 rtn 
+ 00029253  0x0000793c bpatchx  0x000000df , 0x0000403b 
+ 00029254  0x0000793d arg  0x00000010 , 0x00000039 
+ 00029255  0x0000793e arg  0x00000000 , 0x0000003f 
+ 00029256  0x00007940 isub  0x00000011 , 0x0000003e 
+ 00029257  0x00007941 branch  0x00007250 , 0x00000005 
+ 00029258  0x00007942 branch  0x00007253 , 0x00000002 
+ 00029259  0x00007943 ifetcht  0x00000001 , 0x00000006 
+ 00029260  0x00007944 istoret  0x00000001 , 0x00000005 
+ 00029261  0x00007946 increase  0x00000001 , 0x0000003f 
+ 00029262  0x00007947 loop  0x00007248 
+ 00029263  0x00007948 rtn 
+ 00029264  0x0000794a arg  0x00000080 , 0x00000002 
+ 00029265  0x0000794c istoret  0x00000001 , 0x00000005 
+ 00029266  0x0000794d branch  0x0000724d 
+ 00029267  0x00007950 arg  0x00000000 , 0x00000002 
+ 00029268  0x00007951 branch  0x00007251 
+ 00029269  0x00007955 call  0x00007268 
+ 00029270  0x00007956 arg  0x00000592 , 0x00000006 
+ 00029271  0x00007957 arg  0x00000582 , 0x00000005 
+ 00029272  0x00007958 branch  0x00007ebf 
+ 00029273  0x0000795c disable  0x00000028 
+ 00029274  0x0000795d call  0x0000735f 
+ 00029275  0x0000795e arg  0x00000562 , 0x00000006 
+ 00029276  0x0000795f arg  0x000005a2 , 0x00000005 
+ 00029277  0x00007960 force  0x0000000f , 0x00000039 
+ 00029278  0x00007961 call  0x00007f01 
+ 00029279  0x00007962 ifetch  0x00000001 , 0x00000006 
+ 00029280  0x00007963 xor_into  0x00000006 , 0x0000003f 
+ 00029281  0x00007964 istore  0x00000001 , 0x00000005 
+ 00029282  0x00007965 setarg  0x000005b2 
+ 00029283  0x00007966 store  0x00000002 , 0x000005d6 
+ 00029284  0x00007967 setarg  0x000005a2 
+ 00029285  0x00007968 store  0x00000002 , 0x000005d4 
+ 00029286  0x00007969 set1  0x00000012 , 0x00000000 
+ 00029287  0x0000796a branch  0x000072a8 
+ 00029288  0x0000796f fetcht  0x00000001 , 0x00004689 
+ 00029289  0x00007970 force  0x00000010 , 0x00000012 
+ 00029290  0x00007971 add  0x00000002 , 0x00000006 , 0x00000013 
+ 00029291  0x00007972 sub  0x00000013 , 0x00000010 , 0x0000003e 
+ 00029292  0x00007973 branch  0x0000726e , 0x00000002 
+ 00029293  0x00007974 force  0x00000010 , 0x00000013 
+ 00029294  0x00007976 arg  0x000005a2 , 0x00000005 
+ 00029295  0x00007978 arg  0x0000468a , 0x00000006 
+ 00029296  0x00007979 copy  0x00000002 , 0x00000039 
+ 00029297  0x0000797a disable  0x00000028 
+ 00029298  0x0000797c ifetch  0x00000001 , 0x00000006 
+ 00029299  0x0000797d istore  0x00000001 , 0x00000005 
+ 00029300  0x0000797e increase  0xffffffff , 0x00000012 
+ 00029301  0x0000797f branch  0x0000727c , 0x00000005 
+ 00029302  0x00007980 loop  0x00007272 
+ 00029303  0x00007981 branch  0x0000726f , 0x00000028 
+ 00029304  0x00007982 enable  0x00000028 
+ 00029305  0x00007983 force  0x00000006 , 0x00000039 
+ 00029306  0x00007984 copy  0x00000011 , 0x00000006 
+ 00029307  0x00007985 branch  0x00007272 
+ 00029308  0x00007987 arg  0x00000562 , 0x00000006 
+ 00029309  0x00007988 arg  0x000005b2 , 0x00000005 
+ 00029310  0x00007989 call  0x00007ebf 
+ 00029311  0x0000798a fetch  0x00000001 , 0x000005c1 
+ 00029312  0x0000798b ixor  0x00000013 , 0x0000003f 
+ 00029313  0x0000798c store  0x00000001 , 0x000005c1 
+ 00029314  0x0000798d setarg  0x000005b2 
+ 00029315  0x0000798e store  0x00000002 , 0x000005d6 
+ 00029316  0x0000798f setarg  0x000005a2 
+ 00029317  0x00007990 store  0x00000002 , 0x000005d4 
+ 00029318  0x00007991 set1  0x00000012 , 0x00000000 
+ 00029319  0x00007992 branch  0x000072a8 
+ 00029320  0x00007998 disable  0x00000028 
+ 00029321  0x00007999 call  0x0000735f 
+ 00029322  0x0000799a branch  0x00007292 
+ 00029323  0x0000799d arg  0x00000056 , 0x00000011 
+ 00029324  0x0000799e enable  0x00000028 
+ 00029325  0x0000799f call  0x0000735f 
+ 00029326  0x000079a0 call  0x00007292 
+ 00029327  0x000079a1 arg  0x00000592 , 0x00000006 
+ 00029328  0x000079a2 arg  0x00000062 , 0x00000005 
+ 00029329  0x000079a3 branch  0x00007ebf 
+ 00029330  0x000079a7 setarg  0x00000562 
+ 00029331  0x000079a8 store  0x00000002 , 0x000005d6 
+ 00029332  0x000079a9 setarg  0x000041be 
+ 00029333  0x000079aa store  0x00000002 , 0x000005d4 
+ 00029334  0x000079ab set0  0x00000012 , 0x00000000 
+ 00029335  0x000079ac call  0x000072a8 
+ 00029336  0x000079ad arg  0x00000592 , 0x00000011 
+ 00029337  0x000079ae arg  0x00000562 , 0x00000012 
+ 00029338  0x000079af arg  0x000005a2 , 0x00000005 
+ 00029339  0x000079b0 call  0x00007352 
+ 00029340  0x000079b1 arg  0x000005a2 , 0x00000011 
+ 00029341  0x000079b2 arg  0x000005b2 , 0x00000012 
+ 00029342  0x000079b3 copy  0x00000012 , 0x00000005 
+ 00029343  0x000079b4 enable  0x00000028 
+ 00029344  0x000079b5 call  0x00007350 
+ 00029345  0x000079b6 call  0x0000736a 
+ 00029346  0x000079b7 setarg  0x000005b2 
+ 00029347  0x000079b8 store  0x00000002 , 0x000005d6 
+ 00029348  0x000079b9 setarg  0x000005a2 
+ 00029349  0x000079ba store  0x00000002 , 0x000005d4 
+ 00029350  0x000079bb set1  0x00000012 , 0x00000000 
+ 00029351  0x000079bc branch  0x000072a8 
+ 00029352  0x000079c1 jam  0x00000000 , 0x000005d8 
+ 00029353  0x000079c2 fetch  0x00000002 , 0x000005d4 
+ 00029354  0x000079c3 iforce  0x00000006 
+ 00029355  0x000079c4 arg  0x000005c2 , 0x00000005 
+ 00029356  0x000079c5 call  0x00007ebf 
+ 00029357  0x000079c6 fetch  0x00000002 , 0x000005d6 
+ 00029358  0x000079c7 iforce  0x00000006 
+ 00029359  0x000079c8 arg  0x00000592 , 0x00000005 
+ 00029360  0x000079c9 call  0x00007ebf 
+ 00029361  0x000079cc call  0x000072cf 
+ 00029362  0x000079cd disable  0x00000028 
+ 00029363  0x000079ce bmark0  0x00000012 , 0x000072b9 
+ 00029364  0x000079cf fetch  0x00000001 , 0x000005d8 
+ 00029365  0x000079d0 bne  0x00000004 , 0x000072b9 
+ 00029366  0x000079d1 fetch  0x00000002 , 0x000005d6 
+ 00029367  0x000079d2 iforce  0x00000012 
+ 00029368  0x000079d3 call  0x00007301 
+ 00029369  0x000079d5 call  0x00007300 
+ 00029370  0x000079d6 call  0x00007313 
+ 00029371  0x000079d7 fetch  0x00000001 , 0x000005d8 
+ 00029372  0x000079d8 increase  0x00000001 , 0x0000003f 
+ 00029373  0x000079d9 store  0x00000001 , 0x000005d8 
+ 00029374  0x000079db call  0x000072cf 
+ 00029375  0x000079dc enable  0x00000028 
+ 00029376  0x000079dd call  0x00007300 
+ 00029377  0x000079de call  0x00007322 
+ 00029378  0x000079df call  0x00007331 
+ 00029379  0x000079e0 call  0x00007322 
+ 00029380  0x000079e1 call  0x00007331 
+ 00029381  0x000079e2 call  0x00007322 
+ 00029382  0x000079e3 call  0x00007331 
+ 00029383  0x000079e4 call  0x00007322 
+ 00029384  0x000079e5 fetch  0x00000001 , 0x000005d8 
+ 00029385  0x000079e6 increase  0x00000001 , 0x0000003f 
+ 00029386  0x000079e7 store  0x00000001 , 0x000005d8 
+ 00029387  0x000079e8 bne  0x00000010 , 0x000072b1 
+ 00029388  0x000079e9 call  0x000072cf 
+ 00029389  0x000079ea disable  0x00000028 
+ 00029390  0x000079eb branch  0x00007300 
+ 00029391  0x000079f0 fetch  0x00000001 , 0x000005d8 
+ 00029392  0x000079f1 arg  0x000005c2 , 0x00000006 
+ 00029393  0x000079f2 branch  0x000072f6 , 0x00000034 
+ 00029394  0x000079f3 iforce  0x00000012 
+ 00029395  0x000079f4 force  0x00000011 , 0x00000039 
+ 00029396  0x000079f5 copy  0x00000006 , 0x00000005 
+ 00029397  0x000079f7 ifetch  0x00000001 , 0x00000006 
+ 00029398  0x000079f8 lshift3  0x0000003f , 0x00000002 
+ 00029399  0x000079f9 rshift2  0x0000003f , 0x0000003f 
+ 00029400  0x000079fa rshift3  0x0000003f , 0x0000003f 
+ 00029401  0x000079fb ior  0x00000002 , 0x0000003f 
+ 00029402  0x000079fc istore  0x00000001 , 0x00000005 
+ 00029403  0x000079fd loop  0x000072d5 
+ 00029404  0x000079fe setarg  0x000005c2 
+ 00029405  0x000079ff iadd  0x00000012 , 0x00000006 
+ 00029406  0x00007a00 force  0x00000010 , 0x00000039 
+ 00029407  0x00007a01 arg  0x00000572 , 0x00000005 
+ 00029408  0x00007a03 ifetch  0x00000001 , 0x00000006 
+ 00029409  0x00007a04 istore  0x00000001 , 0x00000005 
+ 00029410  0x00007a05 compare  0x000005d3 , 0x00000006 , 0x000000ff 
+ 00029411  0x00007a06 nbranch  0x000072e5 , 0x00000001 
+ 00029412  0x00007a07 increase  0xffffffef , 0x00000006 
+ 00029413  0x00007a09 loop  0x000072e0 
+ 00029414  0x00007a0a force  0x00000000 , 0x00000011 
+ 00029415  0x00007a0b add  0x00000012 , 0xffffffff , 0x00000013 
+ 00029416  0x00007a0c lshift2  0x00000013 , 0x00000013 
+ 00029417  0x00007a0d lshift2  0x00000013 , 0x00000013 
+ 00029418  0x00007a0e call  0x000074b9 
+ 00029419  0x00007a0f setarg  0x00008400 
+ 00029420  0x00007a10 iadd  0x00000013 , 0x00000013 
+ 00029421  0x00007a11 arg  0x00000572 , 0x00000005 
+ 00029422  0x00007a12 force  0x00000010 , 0x00000039 
+ 00029423  0x00007a14 ifetcht  0x00000001 , 0x00000013 
+ 00029424  0x00007a15 ifetch  0x00000001 , 0x00000005 
+ 00029425  0x00007a16 iadd  0x00000002 , 0x0000003f 
+ 00029426  0x00007a17 istore  0x00000001 , 0x00000005 
+ 00029427  0x00007a18 increase  0x00000001 , 0x00000013 
+ 00029428  0x00007a19 loop  0x000072ef 
+ 00029429  0x00007a1a branch  0x000074bd 
+ 00029430  0x00007a1d force  0x00000010 , 0x00000039 
+ 00029431  0x00007a1e force  0x00000000 , 0x00000002 
+ 00029432  0x00007a20 ifetch  0x00000001 , 0x00000006 
+ 00029433  0x00007a21 ixor  0x00000002 , 0x00000002 
+ 00029434  0x00007a22 loop  0x000072f8 
+ 00029435  0x00007a23 deposit  0x00000002 
+ 00029436  0x00007a24 istore  0x00000001 , 0x00000006 
+ 00029437  0x00007a25 arg  0x000005c2 , 0x00000006 
+ 00029438  0x00007a26 arg  0x00000572 , 0x00000005 
+ 00029439  0x00007a27 branch  0x00007ebf 
+ 00029440  0x00007a2a arg  0x00000572 , 0x00000012 
+ 00029441  0x00007a2c force  0x00000010 , 0x00000039 
+ 00029442  0x00007a2d arg  0x00000592 , 0x00000011 
+ 00029443  0x00007a2e copy  0x00000011 , 0x00000005 
+ 00029444  0x00007a30 ifetcht  0x00000001 , 0x00000011 
+ 00029445  0x00007a31 ifetch  0x00000001 , 0x00000012 
+ 00029446  0x00007a32 ixor  0x00000002 , 0x00000030 
+ 00029447  0x00007a33 and  0x00000039 , 0x00000003 , 0x00000013 
+ 00029448  0x00007a34 nbranch  0x0000730a , 0x00000028 
+ 00029449  0x00007a35 xor_into  0x00000003 , 0x00000013 
+ 00029450  0x00007a37 sub  0x00000013 , 0x00000001 , 0x00000013 
+ 00029451  0x00007a38 branch  0x0000730d , 0x00000002 
+ 00029452  0x00007a39 iadd  0x00000002 , 0x00000030 
+ 00029453  0x00007a3b deposit  0x00000030 
+ 00029454  0x00007a3c istore  0x00000001 , 0x00000005 
+ 00029455  0x00007a3d increase  0x00000001 , 0x00000011 
+ 00029456  0x00007a3e increase  0x00000001 , 0x00000012 
+ 00029457  0x00007a3f loop  0x00007304 
+ 00029458  0x00007a40 rtn 
+ 00029459  0x00007a43 call  0x000074b9 
+ 00029460  0x00007a44 force  0x00000010 , 0x00000039 
+ 00029461  0x00007a45 arg  0x00000592 , 0x00000011 
+ 00029462  0x00007a47 ifetch  0x00000001 , 0x00000011 
+ 00029463  0x00007a48 arg  0x00008500 , 0x00000006 
+ 00029464  0x00007a49 and  0x00000039 , 0x00000003 , 0x00000013 
+ 00029465  0x00007a4a sub  0x00000013 , 0x00000001 , 0x0000003e 
+ 00029466  0x00007a4b branch  0x0000731c , 0x00000002 
+ 00029467  0x00007a4c arg  0x00008600 , 0x00000006 
+ 00029468  0x00007a4e iadd  0x00000006 , 0x00000006 
+ 00029469  0x00007a4f ifetch  0x00000001 , 0x00000006 
+ 00029470  0x00007a50 istore  0x00000001 , 0x00000011 
+ 00029471  0x00007a51 increase  0x00000001 , 0x00000011 
+ 00029472  0x00007a52 loop  0x00007316 
+ 00029473  0x00007a53 branch  0x000074bd 
+ 00029474  0x00007a56 force  0x00000008 , 0x00000039 
+ 00029475  0x00007a57 arg  0x00000592 , 0x00000006 
+ 00029476  0x00007a58 copy  0x00000006 , 0x00000005 
+ 00029477  0x00007a5a ifetch  0x00000001 , 0x00000006 
+ 00029478  0x00007a5b iforce  0x00000011 
+ 00029479  0x00007a5c ifetch  0x00000001 , 0x00000006 
+ 00029480  0x00007a5d iforce  0x00000012 
+ 00029481  0x00007a5e lshift  0x00000011 , 0x0000003f 
+ 00029482  0x00007a5f iadd  0x00000012 , 0x0000003f 
+ 00029483  0x00007a60 istore  0x00000001 , 0x00000005 
+ 00029484  0x00007a61 deposit  0x00000011 
+ 00029485  0x00007a62 iadd  0x00000012 , 0x0000003f 
+ 00029486  0x00007a63 istore  0x00000001 , 0x00000005 
+ 00029487  0x00007a64 loop  0x00007325 
+ 00029488  0x00007a65 rtn 
+ 00029489  0x00007a69 setarg  0x008ae42c 
+ 00029490  0x00007a6a iforce  0x00000002 
+ 00029491  0x00007a6b force  0x00000007 , 0x00000039 
+ 00029492  0x00007a6c call  0x00007340 
+ 00029493  0x00007a6d setarg  0x000d751b 
+ 00029494  0x00007a6e iforce  0x00000002 
+ 00029495  0x00007a6f force  0x00000005 , 0x00000039 
+ 00029496  0x00007a70 call  0x00007340 
+ 00029497  0x00007a71 fetch  0x00000001 , 0x000005a1 
+ 00029498  0x00007a72 iforce  0x00000011 
+ 00029499  0x00007a73 fetch  0x00000001 , 0x00000595 
+ 00029500  0x00007a74 store  0x00000001 , 0x000005a1 
+ 00029501  0x00007a75 deposit  0x00000011 
+ 00029502  0x00007a76 store  0x00000001 , 0x00000595 
+ 00029503  0x00007a77 rtn 
+ 00029504  0x00007a7a and  0x00000002 , 0x0000000f , 0x00000012 
+ 00029505  0x00007a7c and  0x00000002 , 0x0000000f , 0x0000003f 
+ 00029506  0x00007a7d arg  0x00000592 , 0x00000005 
+ 00029507  0x00007a7e iadd  0x00000005 , 0x00000005 
+ 00029508  0x00007a7f ifetch  0x00000001 , 0x00000005 
+ 00029509  0x00007a80 iforce  0x00000013 
+ 00029510  0x00007a81 deposit  0x00000011 
+ 00029511  0x00007a82 istore  0x00000001 , 0x00000005 
+ 00029512  0x00007a83 copy  0x00000013 , 0x00000011 
+ 00029513  0x00007a84 rshift4  0x00000002 , 0x00000002 
+ 00029514  0x00007a85 loop  0x00007341 
+ 00029515  0x00007a86 setarg  0x00000592 
+ 00029516  0x00007a87 iadd  0x00000012 , 0x00000005 
+ 00029517  0x00007a88 deposit  0x00000011 
+ 00029518  0x00007a89 istore  0x00000001 , 0x00000005 
+ 00029519  0x00007a8a rtn 
+ 00029520  0x00007a8d enable  0x00000028 
+ 00029521  0x00007a8e branch  0x00007353 
+ 00029522  0x00007a91 disable  0x00000028 
+ 00029523  0x00007a93 force  0x00000010 , 0x00000039 
+ 00029524  0x00007a95 ifetcht  0x00000001 , 0x00000011 
+ 00029525  0x00007a96 ifetch  0x00000001 , 0x00000012 
+ 00029526  0x00007a97 branch  0x00007359 , 0x00000028 
+ 00029527  0x00007a98 ixor  0x00000002 , 0x0000003f 
+ 00029528  0x00007a99 branch  0x0000735a 
+ 00029529  0x00007a9b iadd  0x00000002 , 0x0000003f 
+ 00029530  0x00007a9d istore  0x00000001 , 0x00000005 
+ 00029531  0x00007a9e increase  0x00000001 , 0x00000011 
+ 00029532  0x00007a9f increase  0x00000001 , 0x00000012 
+ 00029533  0x00007aa0 loop  0x00007354 
+ 00029534  0x00007aa1 rtn 
+ 00029535  0x00007aa5 arg  0x000005b2 , 0x00000005 
+ 00029536  0x00007aa6 ifetch  0x00000006 , 0x00000011 
+ 00029537  0x00007aa7 istore  0x00000006 , 0x00000005 
+ 00029538  0x00007aa8 branch  0x00007365 , 0x00000028 
+ 00029539  0x00007aa9 ifetch  0x00000006 , 0x00000011 
+ 00029540  0x00007aaa branch  0x00007366 
+ 00029541  0x00007aac ifetch  0x00000006 , 0x00000006 
+ 00029542  0x00007aae istore  0x00000006 , 0x00000005 
+ 00029543  0x00007aaf ifetch  0x00000004 , 0x00000011 
+ 00029544  0x00007ab0 istore  0x00000004 , 0x00000005 
+ 00029545  0x00007ab1 rtn 
+ 00029546  0x00007ab4 arg  0x000041be , 0x00000006 
+ 00029547  0x00007ab5 arg  0x000005a2 , 0x00000005 
+ 00029548  0x00007ab6 arg  0x00000000 , 0x00000002 
+ 00029549  0x00007ab7 setarg  0x008395a7 
+ 00029550  0x00007ab8 call  0x0000738b 
+ 00029551  0x00007ab9 setarg  0x00b3c1df 
+ 00029552  0x00007aba call  0x0000738b 
+ 00029553  0x00007abb setarg  0x0000e5e9 
+ 00029554  0x00007abc call  0x0000738c 
+ 00029555  0x00007abd copy  0x00000002 , 0x00000014 
+ 00029556  0x00007abe disable  0x00000028 
+ 00029557  0x00007abf call  0x00007379 
+ 00029558  0x00007ac0 copy  0x00000014 , 0x00000002 
+ 00029559  0x00007ac1 enable  0x00000028 
+ 00029560  0x00007ac2 branch  0x00007379 
+ 00029561  0x00007ac5 force  0x00000008 , 0x00000039 
+ 00029562  0x00007ac7 ifetch  0x00000001 , 0x00000006 
+ 00029563  0x00007ac8 compare  0x00000001 , 0x00000039 , 0x00000001 
+ 00029564  0x00007ac9 branch  0x00007380 , 0x00000028 
+ 00029565  0x00007aca branch  0x00007381 , 0x00000001 
+ 00029566  0x00007acc iadd  0x00000002 , 0x0000003f 
+ 00029567  0x00007acd branch  0x00007382 
+ 00029568  0x00007acf branch  0x0000737e , 0x00000001 
+ 00029569  0x00007ad1 ixor  0x00000002 , 0x0000003f 
+ 00029570  0x00007ad3 istore  0x00000001 , 0x00000005 
+ 00029571  0x00007ad4 rshift8  0x00000002 , 0x00000002 
+ 00029572  0x00007ad5 loop  0x0000737a 
+ 00029573  0x00007ad6 rtn 
+ 00029574  0x00007ad9 fetch  0x00000006 , 0x00000596 
+ 00029575  0x00007ada store  0x00000006 , 0x00000056 
+ 00029576  0x00007adb ifetch  0x00000006 , 0x00000006 
+ 00029577  0x00007adc istore  0x00000006 , 0x00000005 
+ 00029578  0x00007add rtn 
+ 00029579  0x00007ae0 lshift8  0x00000002 , 0x00000002 
+ 00029580  0x00007ae2 lshift16  0x00000002 , 0x00000002 
+ 00029581  0x00007ae3 ior  0x00000002 , 0x00000002 
+ 00029582  0x00007ae4 rtn 
+ 00029583  0x00007ae9 branch  0x0000738f 
+ 00029584  0x00007aee bpatchx  0x000000e0 , 0x0000403c 
+ 00029585  0x00007aef call  0x0000742b 
+ 00029586  0x00007af0 arg  0x00004419 , 0x00000005 
+ 00029587  0x00007af1 branch  0x00007497 
+ 00029588  0x00007af5 arg  0x0000443a , 0x00000005 
+ 00029589  0x00007af6 branch  0x00007397 , 0x00000029 
+ 00029590  0x00007af7 arg  0x0000042f , 0x00000005 
+ 00029591  0x00007af9 copy  0x00000006 , 0x00000011 
+ 00029592  0x00007afa call  0x00007ebf 
+ 00029593  0x00007afb call  0x00007440 
+ 00029594  0x00007afc arg  0x0000442a , 0x00000006 
+ 00029595  0x00007afd branch  0x000074b0 
+ 00029596  0x00007b00 arg  0x0000042f , 0x00000011 
+ 00029597  0x00007b01 branch  0x0000739f , 0x00000029 
+ 00029598  0x00007b02 arg  0x0000443a , 0x00000011 
+ 00029599  0x00007b04 copy  0x00000011 , 0x00000005 
+ 00029600  0x00007b05 call  0x0000630c 
+ 00029601  0x00007b06 branch  0x00007440 
+ 00029602  0x00007b09 arg  0x000044aa , 0x00000006 
+ 00029603  0x00007b0a call  0x00007486 
+ 00029604  0x00007b0b arg  0x00004419 , 0x00000006 
+ 00029605  0x00007b0c call  0x00007487 
+ 00029606  0x00007b0d force  0x00000038 , 0x00000036 
+ 00029607  0x00007b0e force  0x00000000 , 0x00000036 
+ 00029608  0x00007b0f call  0x0000741d 
+ 00029609  0x00007b10 arg  0x0000047c , 0x00000005 
+ 00029610  0x00007b11 branch  0x00007497 
+ 00029611  0x00007b15 force  0x00000049 , 0x0000003f 
+ 00029612  0x00007b16 branch  0x000073ae 
+ 00029613  0x00007b18 force  0x00000001 , 0x0000003f 
+ 00029614  0x00007b1a force  0x00000000 , 0x00000038 
+ 00029615  0x00007b1b lshift8  0x00000002 , 0x0000002f 
+ 00029616  0x00007b1c ior  0x0000002f , 0x0000002f 
+ 00029617  0x00007b1d increase  0x00000001 , 0x00000038 
+ 00029618  0x00007b1e rshift8  0x00000002 , 0x0000002f 
+ 00029619  0x00007b1f rshift16  0x0000002f , 0x0000002f 
+ 00029620  0x00007b20 fetch  0x00000002 , 0x00004411 
+ 00029621  0x00007b21 lshift16 , 0x0000003f , 0x0000003f 
+ 00029622  0x00007b22 ior  0x0000002f , 0x0000002f 
+ 00029623  0x00007b23 increase  0x00000001 , 0x00000038 
+ 00029624  0x00007b24 ifetch  0x00000004 , 0x00000006 
+ 00029625  0x00007b25 iforce  0x0000002f 
+ 00029626  0x00007b26 increase  0x00000001 , 0x00000038 
+ 00029627  0x00007b27 ifetch  0x00000002 , 0x00000006 
+ 00029628  0x00007b28 byteswap  0x00000011 , 0x0000002f 
+ 00029629  0x00007b29 lshift16  0x0000002f , 0x0000002f 
+ 00029630  0x00007b2a ior  0x0000002f , 0x0000002f 
+ 00029631  0x00007b2b increase  0x00000001 , 0x00000038 
+ 00029632  0x00007b2c rtn 
+ 00029633  0x00007b31 add  0x00000013 , 0x00000001 , 0x00000006 
+ 00029634  0x00007b32 ifetch  0x00000001 , 0x00000006 
+ 00029635  0x00007b33 iforce  0x00000011 
+ 00029636  0x00007b34 call  0x000073ab 
+ 00029637  0x00007b35 call  0x0000741f 
+ 00029638  0x00007b37 force  0x00000000 , 0x00000038 
+ 00029639  0x00007b38 ifetch  0x00000001 , 0x00000013 
+ 00029640  0x00007b39 and_into  0x00000003 , 0x0000003f 
+ 00029641  0x00007b3a lshift16  0x0000003f , 0x0000002f 
+ 00029642  0x00007b3b set1  0x00000008 , 0x0000002f 
+ 00029643  0x00007b3c call  0x0000748f 
+ 00029644  0x00007b3d call  0x00007422 
+ 00029645  0x00007b3f copy  0x00000011 , 0x00000039 
+ 00029646  0x00007b40 add  0x00000013 , 0x00000002 , 0x00000006 
+ 00029647  0x00007b41 call  0x0000746e 
+ 00029648  0x00007b43 call  0x00007478 
+ 00029649  0x00007b44 call  0x00007422 
+ 00029650  0x00007b45 deposit  0x00000039 
+ 00029651  0x00007b46 branch  0x000073d5 , 0x00000034 
+ 00029652  0x00007b47 branch  0x000073d0 
+ 00029653  0x00007b49 force  0x0000000c , 0x00000038 
+ 00029654  0x00007b4a deposit  0x0000002f 
+ 00029655  0x00007b4b store  0x00000004 , 0x00000417 
+ 00029656  0x00007b4c rtn 
+ 00029657  0x00007b4f increase  0x00000001 , 0x00000011 
+ 00029658  0x00007b50 call  0x000073ad 
+ 00029659  0x00007b51 copy  0x00000013 , 0x00000006 
+ 00029660  0x00007b52 call  0x00007482 
+ 00029661  0x00007b53 call  0x00007425 
+ 00029662  0x00007b54 call  0x0000749e 
+ 00029663  0x00007b55 increase  0x00000010 , 0x00000013 
+ 00029664  0x00007b56 increase  0xfffffff0 , 0x00000012 
+ 00029665  0x00007b57 branch  0x000073d9 , 0x00000002 
+ 00029666  0x00007b58 rtn 
+ 00029667  0x00007b5b bpatchx  0x000000e1 , 0x0000403c 
+ 00029668  0x00007b5c arg  0x000043dc , 0x00000013 
+ 00029669  0x00007b5d fetcht  0x00000005 , 0x00004403 
+ 00029670  0x00007b5e call  0x000073c1 
+ 00029671  0x00007b5f force  0x00000008 , 0x00000038 
+ 00029672  0x00007b60 iforce  0x0000002f 
+ 00029673  0x00007b61 force  0x00000000 , 0x00000011 
+ 00029674  0x00007b62 call  0x000073ad 
+ 00029675  0x00007b63 call  0x00007425 
+ 00029676  0x00007b64 arg  0x000043de , 0x00000013 
+ 00029677  0x00007b65 fetch  0x00000001 , 0x000043dd 
+ 00029678  0x00007b66 add  0x0000003f , 0xffffffff , 0x00000012 
+ 00029679  0x00007b67 iadd  0x00000013 , 0x00000005 
+ 00029680  0x00007b68 force  0x0000000c , 0x00000038 
+ 00029681  0x00007b69 deposit  0x0000002f 
+ 00029682  0x00007b6a istore  0x00000004 , 0x00000005 
+ 00029683  0x00007b6b call  0x000073d9 
+ 00029684  0x00007b6c fetch  0x00000001 , 0x000043dd 
+ 00029685  0x00007b6d increase  0x00000004 , 0x0000003f 
+ 00029686  0x00007b6e store  0x00000001 , 0x000043dd 
+ 00029687  0x00007b6f fetcht  0x00000005 , 0x00004403 
+ 00029688  0x00007b70 increase  0x00000001 , 0x00000002 
+ 00029689  0x00007b71 storet  0x00000005 , 0x00004403 
+ 00029690  0x00007b72 rtn 
+ 00029691  0x00007b75 bpatchx  0x000000e2 , 0x0000403c 
+ 00029692  0x00007b76 fetch  0x00000001 , 0x000002da 
+ 00029693  0x00007b77 sub  0x0000003f , 0x00000014 , 0x0000003e 
+ 00029694  0x00007b78 branch  0x000073ff , 0x00000002 
+ 00029695  0x00007b7a arg  0x000002db , 0x00000013 
+ 00029696  0x00007b7b add  0x0000003f , 0xffffffff , 0x00000012 
+ 00029697  0x00007b7c increase  0xfffffffc , 0x0000003f 
+ 00029698  0x00007b7d store  0x00000001 , 0x000002da 
+ 00029699  0x00007b7e iadd  0x00000013 , 0x00000006 
+ 00029700  0x00007b7f ifetch  0x00000004 , 0x00000006 
+ 00029701  0x00007b80 force  0x00000008 , 0x00000038 
+ 00029702  0x00007b81 iforce  0x0000002f 
+ 00029703  0x00007b82 force  0x00000000 , 0x00000011 
+ 00029704  0x00007b83 fetcht  0x00000005 , 0x00004408 
+ 00029705  0x00007b84 call  0x000073ad 
+ 00029706  0x00007b85 call  0x00007425 
+ 00029707  0x00007b86 force  0x0000000c , 0x00000038 
+ 00029708  0x00007b87 deposit  0x0000002f 
+ 00029709  0x00007b88 store  0x00000004 , 0x0000041b 
+ 00029710  0x00007b89 call  0x000073d9 
+ 00029711  0x00007b8a arg  0x000002d9 , 0x00000013 
+ 00029712  0x00007b8b call  0x000073c1 
+ 00029713  0x00007b8c fetcht  0x00000004 , 0x0000041b 
+ 00029714  0x00007b8d isub  0x00000002 , 0x0000003f 
+ 00029715  0x00007b8e nrtn  0x00000034 
+ 00029716  0x00007b8f fetch  0x00000004 , 0x0000440d 
+ 00029717  0x00007b90 isub  0x00000002 , 0x0000003f 
+ 00029718  0x00007b91 rtn  0x00000034 
+ 00029719  0x00007b92 storet  0x00000004 , 0x0000440d 
+ 00029720  0x00007b93 fetch  0x00000005 , 0x00004408 
+ 00029721  0x00007b94 increase  0x00000001 , 0x0000003f 
+ 00029722  0x00007b95 store  0x00000005 , 0x00004408 
+ 00029723  0x00007b96 force  0x00000000 , 0x0000003f 
+ 00029724  0x00007b97 rtn 
+ 00029725  0x00007b9a nbranch  0x0000741d , 0x00000037 
+ 00029726  0x00007b9b rtn 
+ 00029727  0x00007b9e force  0x00000030 , 0x00000036 
+ 00029728  0x00007b9f force  0x00000000 , 0x00000036 
+ 00029729  0x00007ba0 branch  0x0000741d 
+ 00029730  0x00007ba3 force  0x00000032 , 0x00000036 
+ 00029731  0x00007ba4 force  0x00000002 , 0x00000036 
+ 00029732  0x00007ba5 branch  0x0000741d 
+ 00029733  0x00007ba8 force  0x00000034 , 0x00000036 
+ 00029734  0x00007ba9 force  0x00000004 , 0x00000036 
+ 00029735  0x00007baa branch  0x0000741d 
+ 00029736  0x00007bae force  0x00000001 , 0x00000036 
+ 00029737  0x00007baf force  0x00000000 , 0x00000036 
+ 00029738  0x00007bb0 rtn 
+ 00029739  0x00007bb2 force  0x00000000 , 0x00000038 
+ 00029740  0x00007bb3 fetch  0x00000004 , 0x0000042f 
+ 00029741  0x00007bb4 iforce  0x0000002f 
+ 00029742  0x00007bb5 increase  0x00000001 , 0x00000038 
+ 00029743  0x00007bb6 ifetch  0x00000004 , 0x00000006 
+ 00029744  0x00007bb7 iforce  0x0000002f 
+ 00029745  0x00007bb8 increase  0x00000001 , 0x00000038 
+ 00029746  0x00007bb9 fetch  0x00000004 , 0x0000443a 
+ 00029747  0x00007bba iforce  0x0000002f 
+ 00029748  0x00007bbb increase  0x00000001 , 0x00000038 
+ 00029749  0x00007bbc ifetch  0x00000004 , 0x00000006 
+ 00029750  0x00007bbd iforce  0x0000002f 
+ 00029751  0x00007bbe increase  0x00000001 , 0x00000038 
+ 00029752  0x00007bbf call  0x00007492 
+ 00029753  0x00007bc0 increase  0xfffffffc , 0x00000038 
+ 00029754  0x00007bc1 fetch  0x00000004 , 0x000044c7 
+ 00029755  0x00007bc2 copy  0x0000003f , 0x0000002f 
+ 00029756  0x00007bc3 increase  0x00000004 , 0x00000038 
+ 00029757  0x00007bc4 force  0x00000038 , 0x00000036 
+ 00029758  0x00007bc5 force  0x00000008 , 0x00000036 
+ 00029759  0x00007bc6 branch  0x0000741d 
+ 00029760  0x00007bca bpatchx  0x000000e3 , 0x0000403c 
+ 00029761  0x00007bcb fetch  0x00000006 , 0x000044a0 
+ 00029762  0x00007bcc fetcht  0x00000006 , 0x0000044f 
+ 00029763  0x00007bcd branch  0x00007446 , 0x00000029 
+ 00029764  0x00007bce fetch  0x00000006 , 0x0000044f 
+ 00029765  0x00007bcf fetcht  0x00000006 , 0x000044a0 
+ 00029766  0x00007bd1 force  0x00000008 , 0x00000038 
+ 00029767  0x00007bd2 copy  0x00000002 , 0x0000002f 
+ 00029768  0x00007bd3 increase  0x00000001 , 0x00000038 
+ 00029769  0x00007bd4 rshift32  0x00000002 , 0x0000002f 
+ 00029770  0x00007bd5 lshift16  0x0000003f , 0x0000003f 
+ 00029771  0x00007bd6 ior  0x0000002f , 0x0000002f 
+ 00029772  0x00007bd7 increase  0x00000001 , 0x00000038 
+ 00029773  0x00007bd8 rshift32  0x0000003f , 0x0000002f 
+ 00029774  0x00007bd9 increase  0x00000001 , 0x00000038 
+ 00029775  0x00007bda force  0x00000000 , 0x0000002f 
+ 00029776  0x00007bdb force  0x00000000 , 0x0000003f 
+ 00029777  0x00007bdc fetch  0x00000001 , 0x0000448e 
+ 00029778  0x00007bdd fetcht  0x00000001 , 0x00004485 
+ 00029779  0x00007bde nbranch  0x00007456 , 0x00000029 
+ 00029780  0x00007be0 fetch  0x00000001 , 0x00004495 
+ 00029781  0x00007be1 fetcht  0x00000001 , 0x0000448e 
+ 00029782  0x00007be3 store  0x00000001 , 0x0000444a 
+ 00029783  0x00007be4 storet  0x00000001 , 0x0000444b 
+ 00029784  0x00007be5 force  0x00000000 , 0x00000038 
+ 00029785  0x00007be6 arg  0x0000444a , 0x00000012 
+ 00029786  0x00007be7 force  0x00000004 , 0x00000039 
+ 00029787  0x00007be9 ifetch  0x00000004 , 0x00000011 
+ 00029788  0x00007bea ifetcht  0x00000004 , 0x00000012 
+ 00029789  0x00007beb ixor  0x00000002 , 0x0000002f 
+ 00029790  0x00007bec increase  0x00000001 , 0x00000038 
+ 00029791  0x00007bed increase  0x00000004 , 0x00000011 
+ 00029792  0x00007bee increase  0x00000004 , 0x00000012 
+ 00029793  0x00007bef loop  0x0000745b 
+ 00029794  0x00007bf0 call  0x00007492 
+ 00029795  0x00007bf1 increase  0xfffffffc , 0x00000038 
+ 00029796  0x00007bf2 fetch  0x00000004 , 0x000044c7 
+ 00029797  0x00007bf3 copy  0x0000003f , 0x0000002f 
+ 00029798  0x00007bf4 increase  0x00000004 , 0x00000038 
+ 00029799  0x00007bf5 force  0x00000038 , 0x00000036 
+ 00029800  0x00007bf6 force  0x0000000c , 0x00000036 
+ 00029801  0x00007bf7 call  0x0000741d 
+ 00029802  0x00007bf9 call  0x00007491 
+ 00029803  0x00007bfa force  0x0000003a , 0x00000036 
+ 00029804  0x00007bfb force  0x00000008 , 0x00000036 
+ 00029805  0x00007bfc branch  0x0000741d 
+ 00029806  0x00007bff compare  0x00000000 , 0x00000039 , 0x00000003 
+ 00029807  0x00007c00 rtn  0x00000001 
+ 00029808  0x00007c01 deposit  0x00000006 
+ 00029809  0x00007c02 iadd  0x00000039 , 0x00000005 
+ 00029810  0x00007c03 force  0x00000000 , 0x0000003f 
+ 00029811  0x00007c05 istore  0x00000001 , 0x00000005 
+ 00029812  0x00007c06 increase  0x00000001 , 0x00000039 
+ 00029813  0x00007c07 compare  0x00000000 , 0x00000039 , 0x00000003 
+ 00029814  0x00007c08 rtn  0x00000001 
+ 00029815  0x00007c09 branch  0x00007473 
+ 00029816  0x00007c0c force  0x00000000 , 0x00000038 
+ 00029817  0x00007c0e deposit  0x00000039 
+ 00029818  0x00007c0f branch  0x0000747d , 0x00000034 
+ 00029819  0x00007c10 ifetch  0x00000004 , 0x00000006 
+ 00029820  0x00007c11 increase  0xfffffffc , 0x00000039 
+ 00029821  0x00007c13 iforce  0x0000002f 
+ 00029822  0x00007c14 increase  0x00000001 , 0x00000038 
+ 00029823  0x00007c15 compare  0x00000004 , 0x00000038 , 0x0000000f 
+ 00029824  0x00007c16 rtn  0x00000001 
+ 00029825  0x00007c17 branch  0x00007479 
+ 00029826  0x00007c1a force  0x00000008 , 0x00000038 
+ 00029827  0x00007c1b branch  0x00007487 
+ 00029828  0x00007c1d force  0x00000004 , 0x00000038 
+ 00029829  0x00007c1e branch  0x00007487 
+ 00029830  0x00007c20 force  0x00000000 , 0x00000038 
+ 00029831  0x00007c22 force  0x00000004 , 0x00000039 
+ 00029832  0x00007c24 ifetch  0x00000004 , 0x00000006 
+ 00029833  0x00007c25 iforce  0x0000002f 
+ 00029834  0x00007c26 increase  0x00000001 , 0x00000038 
+ 00029835  0x00007c27 loop  0x00007488 
+ 00029836  0x00007c28 rtn 
+ 00029837  0x00007c2b arg  0x0000047c , 0x00000006 
+ 00029838  0x00007c2c branch  0x00007484 
+ 00029839  0x00007c2f force  0x00000004 , 0x00000039 
+ 00029840  0x00007c30 branch  0x00007494 
+ 00029841  0x00007c33 force  0x00000000 , 0x00000038 
+ 00029842  0x00007c35 force  0x00000004 , 0x00000039 
+ 00029843  0x00007c37 force  0x00000000 , 0x0000002f 
+ 00029844  0x00007c39 increase  0x00000001 , 0x00000038 
+ 00029845  0x00007c3a loop  0x00007493 
+ 00029846  0x00007c3b rtn 
+ 00029847  0x00007c3e force  0x0000000c , 0x00000038 
+ 00029848  0x00007c3f force  0x00000004 , 0x00000039 
+ 00029849  0x00007c41 deposit  0x0000002f 
+ 00029850  0x00007c42 istore  0x00000004 , 0x00000005 
+ 00029851  0x00007c43 increase  0x00000001 , 0x00000038 
+ 00029852  0x00007c44 loop  0x00007499 
+ 00029853  0x00007c45 rtn 
+ 00029854  0x00007c48 force  0x0000000c , 0x00000038 
+ 00029855  0x00007c49 copy  0x00000013 , 0x00000005 
+ 00029856  0x00007c4a add  0x00000012 , 0x00000001 , 0x00000039 
+ 00029857  0x00007c4b sub  0x00000039 , 0x0000000f , 0x0000003e 
+ 00029858  0x00007c4c branch  0x000074a4 , 0x00000002 
+ 00029859  0x00007c4d force  0x00000010 , 0x00000039 
+ 00029860  0x00007c4f deposit  0x0000002f 
+ 00029861  0x00007c50 sub  0x00000039 , 0x00000003 , 0x0000003e 
+ 00029862  0x00007c51 branch  0x000074ac , 0x00000002 
+ 00029863  0x00007c52 istore  0x00000004 , 0x00000005 
+ 00029864  0x00007c53 increase  0xfffffffc , 0x00000039 
+ 00029865  0x00007c54 rtn  0x00000005 
+ 00029866  0x00007c55 increase  0x00000001 , 0x00000038 
+ 00029867  0x00007c56 branch  0x000074a4 
+ 00029868  0x00007c58 istore  0x00000001 , 0x00000005 
+ 00029869  0x00007c59 rshift8  0x0000003f , 0x0000003f 
+ 00029870  0x00007c5a loop  0x000074ac 
+ 00029871  0x00007c5b rtn 
+ 00029872  0x00007c5f force  0x0000000c , 0x00000038 
+ 00029873  0x00007c60 force  0x00000004 , 0x00000039 
+ 00029874  0x00007c62 ifetch  0x00000004 , 0x00000006 
+ 00029875  0x00007c63 isub  0x0000002f , 0x0000003e 
+ 00029876  0x00007c64 nrtn  0x00000005 
+ 00029877  0x00007c65 increase  0x00000001 , 0x00000038 
+ 00029878  0x00007c66 loop  0x000074b2 
+ 00029879  0x00007c67 force  0x00000000 , 0x0000003e 
+ 00029880  0x00007c68 rtn 
+ 00029881  0x00007c6b hfetch  0x00000001 , 0x00008050 
+ 00029882  0x00007c6c set0  0x00000000 , 0x0000003f 
+ 00029883  0x00007c6d hstore  0x00000001 , 0x00008050 
+ 00029884  0x00007c6e rtn 
+ 00029885  0x00007c71 hfetch  0x00000001 , 0x00008050 
+ 00029886  0x00007c72 set1  0x00000000 , 0x0000003f 
+ 00029887  0x00007c73 hstore  0x00000001 , 0x00008050 
+ 00029888  0x00007c74 rtn 
+ 00029889  0x00007c77 arg  0x00000886 , 0x00000005 
+ 00029890  0x00007c78 setsect  0x00000000 , 0x0003ffff 
+ 00029891  0x00007c79 setsect  0x00000001 , 0x0003ffff 
+ 00029892  0x00007c7a setsect  0x00000002 , 0x0003ffff 
+ 00029893  0x00007c7b setsect  0x00000003 , 0x0003fbff 
+ 00029894  0x00007c7c istore  0x00000009 , 0x00000005 
+ 00029895  0x00007c7d setsect  0x00000000 , 0x0003ffff 
+ 00029896  0x00007c7e setsect  0x00000001 , 0x0003ffff 
+ 00029897  0x00007c7f setsect  0x00000002 , 0x0003ffff 
+ 00029898  0x00007c80 setsect  0x00000003 , 0x0003ffff 
+ 00029899  0x00007c81 istore  0x00000009 , 0x00000005 
+ 00029900  0x00007c82 setsect  0x00000000 , 0x0003ffff 
+ 00029901  0x00007c83 setsect  0x00000001 , 0x0003ffff 
+ 00029902  0x00007c84 setsect  0x00000002 , 0x0003cfff 
+ 00029903  0x00007c85 setsect  0x00000003 , 0x0003ffff 
+ 00029904  0x00007c86 istore  0x00000009 , 0x00000005 
+ 00029905  0x00007c87 setsect  0x00000000 , 0x0003ffff 
+ 00029906  0x00007c88 setsect  0x00000001 , 0x0003ffff 
+ 00029907  0x00007c89 setsect  0x00000002 , 0x0003ffef 
+ 00029908  0x00007c8a setsect  0x00000003 , 0x0003ffff 
+ 00029909  0x00007c8b istore  0x00000009 , 0x00000005 
+ 00029910  0x00007c8c setsect  0x00000000 , 0x0003ffff 
+ 00029911  0x00007c8d setsect  0x00000001 , 0x0003ffff 
+ 00029912  0x00007c8e setsect  0x00000002 , 0x0003ffff 
+ 00029913  0x00007c8f setsect  0x00000003 , 0x0003ffff 
+ 00029914  0x00007c90 istore  0x00000009 , 0x00000005 
+ 00029915  0x00007c91 setsect  0x00000000 , 0x0003ffff 
+ 00029916  0x00007c92 setsect  0x00000001 , 0x00026c7f 
+ 00029917  0x00007c93 setsect  0x00000002 , 0x0000146b 
+ 00029918  0x00007c94 setsect  0x00000003 , 0x00037bb3 
+ 00029919  0x00007c95 istore  0x00000009 , 0x00000005 
+ 00029920  0x00007c96 setsect  0x00000000 , 0x0001feb8 
+ 00029921  0x00007c97 setsect  0x00000001 , 0x00010c12 
+ 00029922  0x00007c98 setsect  0x00000002 , 0x0002b722 
+ 00029923  0x00007c99 setsect  0x00000003 , 0x00029fa6 
+ 00029924  0x00007c9a istore  0x00000009 , 0x00000005 
+ 00029925  0x00007c9b setsect  0x00000000 , 0x0000e70f 
+ 00029926  0x00007c9c setsect  0x00000001 , 0x00016720 
+ 00029927  0x00007c9d setsect  0x00000002 , 0x0000519e 
+ 00029928  0x00007c9e setsect  0x00000003 , 0x00019084 
+ 00029929  0x00007c9f istore  0x00000009 , 0x00000005 
+ 00029930  0x00007ca0 setsect  0x00000000 , 0x00031012 
+ 00029931  0x00007ca1 setsect  0x00000001 , 0x000360bf 
+ 00029932  0x00007ca2 setsect  0x00000002 , 0x0003f0af 
+ 00029933  0x00007ca3 setsect  0x00000003 , 0x000003d3 
+ 00029934  0x00007ca4 istore  0x00000009 , 0x00000005 
+ 00029935  0x00007ca5 setsect  0x00000000 , 0x0003a188 
+ 00029936  0x00007ca6 setsect  0x00000001 , 0x00003ad0 
+ 00029937  0x00007ca7 setsect  0x00000002 , 0x0003cbf2 
+ 00029938  0x00007ca8 setsect  0x00000003 , 0x000243d9 
+ 00029939  0x00007ca9 istore  0x00000009 , 0x00000005 
+ 00029940  0x00007caa setsect  0x00000000 , 0x0002b030 
+ 00029941  0x00007cab setsect  0x00000001 , 0x00036a03 
+ 00029942  0x00007cac setsect  0x00000002 , 0x00011188 
+ 00029943  0x00007cad setsect  0x00000003 , 0x0001e520 
+ 00029944  0x00007cae istore  0x00000009 , 0x00000005 
+ 00029945  0x00007caf setsect  0x00000000 , 0x0003a11e 
+ 00029946  0x00007cb0 setsect  0x00000001 , 0x0000fe5d 
+ 00029947  0x00007cb1 setsect  0x00000002 , 0x0000dd57 
+ 00029948  0x00007cb2 setsect  0x00000003 , 0x0001ac93 
+ 00029949  0x00007cb3 istore  0x00000009 , 0x00000005 
+ 00029950  0x00007cb4 setsect  0x00000000 , 0x000011ed 
+ 00029951  0x00007cb5 setsect  0x00000001 , 0x000218c4 
+ 00029952  0x00007cb6 setsect  0x00000002 , 0x00008da7 
+ 00029953  0x00007cb7 setsect  0x00000003 , 0x000257ff 
+ 00029954  0x00007cb8 istore  0x00000009 , 0x00000005 
+ 00029955  0x00007cb9 setsect  0x00000000 , 0x0003192b 
+ 00029956  0x00007cba setsect  0x00000001 , 0x00034641 
+ 00029957  0x00007cbb setsect  0x00000002 , 0x0001be0c 
+ 00029958  0x00007cbc setsect  0x00000003 , 0x000366ad 
+ 00029959  0x00007cbd istore  0x00000009 , 0x00000005 
+ 00029960  0x00007cbe setsect  0x00000000 , 0x00001f83 
+ 00029961  0x00007cbf setsect  0x00000001 , 0x00015a23 
+ 00029962  0x00007cc0 setsect  0x00000002 , 0x0003f9b0 
+ 00029963  0x00007cc1 setsect  0x00000003 , 0x00003949 
+ 00029964  0x00007cc2 istore  0x00000009 , 0x00000005 
+ 00029965  0x00007cc3 setsect  0x00000000 , 0x00013a51 
+ 00029966  0x00007cc4 setsect  0x00000001 , 0x000153fd 
+ 00029967  0x00007cc5 setsect  0x00000002 , 0x0003372a 
+ 00029968  0x00007cc6 setsect  0x00000003 , 0x0000f1bb 
+ 00029969  0x00007cc7 istore  0x00000009 , 0x00000005 
+ 00029970  0x00007cc8 setsect  0x00000000 , 0x0003ae85 
+ 00029971  0x00007cc9 setsect  0x00000001 , 0x0001eed9 
+ 00029972  0x00007cca setsect  0x00000002 , 0x00009e66 
+ 00029973  0x00007ccb setsect  0x00000003 , 0x000001a8 
+ 00029974  0x00007ccc istore  0x00000008 , 0x00000005 
+ 00029975  0x00007ccd rtn 
+ 00029976  0x00007cd2 arg  0x0000091e , 0x00000005 
+ 00029977  0x00007cd3 setsect  0x00000000 , 0x0003ffff 
+ 00029978  0x00007cd4 setsect  0x00000001 , 0x0003ffff 
+ 00029979  0x00007cd5 setsect  0x00000002 , 0x0003ffff 
+ 00029980  0x00007cd6 setsect  0x00000003 , 0x0003ffff 
+ 00029981  0x00007cd7 istore  0x00000009 , 0x00000005 
+ 00029982  0x00007cd8 setsect  0x00000000 , 0x0003ffff 
+ 00029983  0x00007cd9 setsect  0x00000001 , 0x0000003f 
+ 00029984  0x00007cda setsect  0x00000002 , 0x00000000 
+ 00029985  0x00007cdb setsect  0x00000003 , 0x00000000 
+ 00029986  0x00007cdc istore  0x00000009 , 0x00000005 
+ 00029987  0x00007cdd setsect  0x00000000 , 0x00000000 
+ 00029988  0x00007cde setsect  0x00000001 , 0x00000000 
+ 00029989  0x00007cdf setsect  0x00000002 , 0x00001000 
+ 00029990  0x00007ce0 setsect  0x00000003 , 0x00000000 
+ 00029991  0x00007ce1 istore  0x00000009 , 0x00000005 
+ 00029992  0x00007ce2 setsect  0x00000000 , 0x0003ff00 
+ 00029993  0x00007ce3 setsect  0x00000001 , 0x0003ffff 
+ 00029994  0x00007ce4 setsect  0x00000002 , 0x0003ffcf 
+ 00029995  0x00007ce5 setsect  0x00000003 , 0x0003ffff 
+ 00029996  0x00007ce6 istore  0x00000009 , 0x00000005 
+ 00029997  0x00007ce7 setsect  0x00000000 , 0x0003ffff 
+ 00029998  0x00007ce8 setsect  0x00000001 , 0x0003ffff 
+ 00029999  0x00007ce9 setsect  0x00000002 , 0x0003ffff 
+ 00030000  0x00007cea setsect  0x00000003 , 0x000003ff 
+ 00030001  0x00007ceb istore  0x00000009 , 0x00000005 
+ 00030002  0x00007cec setsect  0x00000000 , 0x00000000 
+ 00030003  0x00007ced setsect  0x00000001 , 0x00000000 
+ 00030004  0x00007cee setsect  0x00000002 , 0x00000000 
+ 00030005  0x00007cef setsect  0x00000003 , 0x00000000 
+ 00030006  0x00007cf0 istore  0x00000009 , 0x00000005 
+ 00030007  0x00007cf1 setsect  0x00000000 , 0x00010000 
+ 00030008  0x00007cf2 setsect  0x00000001 , 0x00000000 
+ 00030009  0x00007cf3 setsect  0x00000002 , 0x0003f000 
+ 00030010  0x00007cf4 setsect  0x00000003 , 0x0003ffff 
+ 00030011  0x00007cf5 istore  0x00000009 , 0x00000005 
+ 00030012  0x00007cf6 setsect  0x00000000 , 0x000296ff 
+ 00030013  0x00007cf7 setsect  0x00000001 , 0x00022630 
+ 00030014  0x00007cf8 setsect  0x00000002 , 0x0003945d 
+ 00030015  0x00007cf9 setsect  0x00000003 , 0x0003d284 
+ 00030016  0x00007cfa istore  0x00000009 , 0x00000005 
+ 00030017  0x00007cfb setsect  0x00000000 , 0x000333a0 
+ 00030018  0x00007cfc setsect  0x00000001 , 0x00004b7a 
+ 00030019  0x00007cfd setsect  0x00000002 , 0x000037d8 
+ 00030020  0x00007cfe setsect  0x00000003 , 0x0003c9dc 
+ 00030021  0x00007cff istore  0x00000009 , 0x00000005 
+ 00030022  0x00007d00 setsect  0x00000000 , 0x0003a440 
+ 00030023  0x00007d01 setsect  0x00000001 , 0x0001b958 
+ 00030024  0x00007d02 setsect  0x00000002 , 0x00038bce 
+ 00030025  0x00007d03 setsect  0x00000003 , 0x0001091f 
+ 00030026  0x00007d04 istore  0x00000009 , 0x00000005 
+ 00030027  0x00007d05 setsect  0x00000000 , 0x0002e12c 
+ 00030028  0x00007d06 setsect  0x00000001 , 0x0001f47c 
+ 00030029  0x00007d07 setsect  0x00000002 , 0x000356b1 
+ 00030030  0x00007d08 setsect  0x00000003 , 0x0002fd47 
+ 00030031  0x00007d09 istore  0x00000009 , 0x00000005 
+ 00030032  0x00007d0a setsect  0x00000000 , 0x00006837 
+ 00030033  0x00007d0b setsect  0x00000001 , 0x0002ed90 
+ 00030034  0x00007d0c setsect  0x00000002 , 0x0001ecec 
+ 00030035  0x00007d0d setsect  0x00000003 , 0x0001acc5 
+ 00030036  0x00007d0e istore  0x00000009 , 0x00000005 
+ 00030037  0x00007d0f setsect  0x00000000 , 0x00023357 
+ 00030038  0x00007d10 setsect  0x00000001 , 0x00018af3 
+ 00030039  0x00007d11 setsect  0x00000002 , 0x0000f9e1 
+ 00030040  0x00007d12 setsect  0x00000003 , 0x000129f0 
+ 00030041  0x00007d13 istore  0x00000009 , 0x00000005 
+ 00030042  0x00007d14 setsect  0x00000000 , 0x0002e7eb 
+ 00030043  0x00007d15 setsect  0x00000001 , 0x0003e6e3 
+ 00030044  0x00007d16 setsect  0x00000002 , 0x0003e1a7 
+ 00030045  0x00007d17 setsect  0x00000003 , 0x00010b8b 
+ 00030046  0x00007d18 istore  0x00000009 , 0x00000005 
+ 00030047  0x00007d19 setsect  0x00000000 , 0x00024fe3 
+ 00030048  0x00007d1a setsect  0x00000001 , 0x000020ef 
+ 00030049  0x00007d1b setsect  0x00000002 , 0x0001b5a6 
+ 00030050  0x00007d1c setsect  0x00000003 , 0x0000dc2f 
+ 00030051  0x00007d1d istore  0x00000009 , 0x00000005 
+ 00030052  0x00007d1e setsect  0x00000000 , 0x00013860 
+ 00030053  0x00007d1f setsect  0x00000001 , 0x0002bd69 
+ 00030054  0x00007d20 setsect  0x00000002 , 0x0000391a 
+ 00030055  0x00007d21 setsect  0x00000003 , 0x0001b222 
+ 00030056  0x00007d22 istore  0x00000009 , 0x00000005 
+ 00030057  0x00007d23 rtn 
+ 00030058  0x00007d27 fetch  0x00000001 , 0x0000465a 
+ 00030059  0x00007d28 nbranch  0x0000757d , 0x00000034 
+ 00030060  0x00007d29 branch  0x00007a77 
+ 00030061  0x00007d2c bpatchx  0x000000e4 , 0x0000403c 
+ 00030062  0x00007d2d fetch  0x00000001 , 0x0000465a 
+ 00030063  0x00007d2e rtn  0x00000034 
+ 00030064  0x00007d2f fetch  0x00000001 , 0x000045b1 
+ 00030065  0x00007d30 rtnne  0x00000001 
+ 00030066  0x00007d31 fetch  0x00000001 , 0x000044be 
+ 00030067  0x00007d32 rtn  0x00000034 
+ 00030068  0x00007d33 fetch  0x00000001 , 0x000044c3 
+ 00030069  0x00007d34 rtneq  0x00000003 
+ 00030070  0x00007d35 fetch  0x00000002 , 0x00004682 
+ 00030071  0x00007d36 bbit1  0x00000000 , 0x0000757b 
+ 00030072  0x00007d37 fetch  0x00000001 , 0x000044c0 
+ 00030073  0x00007d38 beq  0x00000000 , 0x00007a77 
+ 00030074  0x00007d39 rtn 
+ 00030075  0x00007d3b jam  0x00000000 , 0x000044c0 
+ 00030076  0x00007d3c rtn 
+ 00030077  0x00007d40 bpatchx  0x000000e5 , 0x0000403c 
+ 00030078  0x00007d41 fetch  0x00000001 , 0x0000465a 
+ 00030079  0x00007d42 branch  0x0000612b , 0x00000034 
+ 00030080  0x00007d43 call  0x00006124 
+ 00030081  0x00007d44 call  0x00007583 
+ 00030082  0x00007d45 branch  0x0000766d 
+ 00030083  0x00007d48 setarg  0x00000000 
+ 00030084  0x00007d49 store  0x00000008 , 0x000009ae 
+ 00030085  0x00007d4a store  0x00000004 , 0x000009b6 
+ 00030086  0x00007d4b store  0x00000007 , 0x0000465e 
+ 00030087  0x00007d4c rtn 
+ 00030088  0x00007d4f jam  0x00000001 , 0x000009b0 
+ 00030089  0x00007d50 branch  0x0000758d 
+ 00030090  0x00007d52 fetch  0x00000001 , 0x000045b1 
+ 00030091  0x00007d53 beq  0x00000001 , 0x0000768a 
+ 00030092  0x00007d54 branch  0x00002a8c 
+ 00030093  0x00007d56 fetch  0x00000001 , 0x000045b1 
+ 00030094  0x00007d57 beq  0x00000001 , 0x00007590 
+ 00030095  0x00007d58 branch  0x0000766d 
+ 00030096  0x00007d5b call  0x0000768a 
+ 00030097  0x00007d5c fetch  0x00000001 , 0x000009af 
+ 00030098  0x00007d5d nrtn  0x00000034 
+ 00030099  0x00007d5e jam  0x00000003 , 0x000009ae 
+ 00030100  0x00007d5f rtn 
+ 00030101  0x00007d63 call  0x000075b0 
+ 00030102  0x00007d64 arg  0x000009de , 0x00000011 
+ 00030103  0x00007d65 arg  0x00000866 , 0x00000005 
+ 00030104  0x00007d66 call  0x00007c79 
+ 00030105  0x00007d67 arg  0x000009be , 0x00000011 
+ 00030106  0x00007d68 arg  0x00000826 , 0x00000005 
+ 00030107  0x00007d69 call  0x00007c79 
+ 00030108  0x00007d6a arg  0x00000826 , 0x00000011 
+ 00030109  0x00007d6b arg  0x000009be , 0x00000012 
+ 00030110  0x00007d6c arg  0x00000826 , 0x00000005 
+ 00030111  0x00007d6d call  0x00007be1 
+ 00030112  0x00007d6e arg  0x0000093e , 0x00000011 
+ 00030113  0x00007d6f arg  0x000009be , 0x00000012 
+ 00030114  0x00007d70 arg  0x00000846 , 0x00000005 
+ 00030115  0x00007d71 call  0x00007be1 
+ 00030116  0x00007d72 arg  0x00000846 , 0x00000011 
+ 00030117  0x00007d73 arg  0x00000826 , 0x00000012 
+ 00030118  0x00007d74 arg  0x00000826 , 0x00000005 
+ 00030119  0x00007d75 call  0x00007c7d 
+ 00030120  0x00007d76 arg  0x00000806 , 0x00000011 
+ 00030121  0x00007d77 arg  0x00000826 , 0x00000012 
+ 00030122  0x00007d78 arg  0x00000806 , 0x00000005 
+ 00030123  0x00007d79 call  0x00007c7d 
+ 00030124  0x00007d7a arg  0x00000020 , 0x00000039 
+ 00030125  0x00007d7b arg  0x00000866 , 0x00000011 
+ 00030126  0x00007d7c arg  0x00000806 , 0x00000012 
+ 00030127  0x00007d7d branch  0x00007f88 
+ 00030128  0x00007d80 arg  0x0000097e , 0x00000011 
+ 00030129  0x00007d81 arg  0x00000806 , 0x00000005 
+ 00030130  0x00007d82 call  0x00007c79 
+ 00030131  0x00007d83 arg  0x0000095e , 0x00000011 
+ 00030132  0x00007d84 arg  0x00000826 , 0x00000005 
+ 00030133  0x00007d85 call  0x00007c79 
+ 00030134  0x00007d86 arg  0x00000826 , 0x00000011 
+ 00030135  0x00007d87 arg  0x0000095e , 0x00000012 
+ 00030136  0x00007d88 arg  0x00000826 , 0x00000005 
+ 00030137  0x00007d89 call  0x00007be1 
+ 00030138  0x00007d8a arg  0x0000093e , 0x00000011 
+ 00030139  0x00007d8b arg  0x0000095e , 0x00000012 
+ 00030140  0x00007d8c arg  0x00000846 , 0x00000005 
+ 00030141  0x00007d8d call  0x00007be1 
+ 00030142  0x00007d8e arg  0x00000846 , 0x00000011 
+ 00030143  0x00007d8f arg  0x00000826 , 0x00000012 
+ 00030144  0x00007d90 arg  0x00000826 , 0x00000005 
+ 00030145  0x00007d91 call  0x00007c7d 
+ 00030146  0x00007d92 arg  0x00000806 , 0x00000011 
+ 00030147  0x00007d93 arg  0x00000826 , 0x00000012 
+ 00030148  0x00007d94 arg  0x00000806 , 0x00000005 
+ 00030149  0x00007d95 branch  0x00007c96 
+ 00030150  0x00007d98 call  0x000075e1 
+ 00030151  0x00007d99 arg  0x000009e6 , 0x00000011 
+ 00030152  0x00007d9a arg  0x00000866 , 0x00000005 
+ 00030153  0x00007d9b call  0x000077a8 
+ 00030154  0x00007d9c arg  0x000009c6 , 0x00000011 
+ 00030155  0x00007d9d arg  0x00000826 , 0x00000005 
+ 00030156  0x00007d9e call  0x000077a8 
+ 00030157  0x00007d9f arg  0x00000826 , 0x00000011 
+ 00030158  0x00007da0 arg  0x000009c6 , 0x00000012 
+ 00030159  0x00007da1 arg  0x00000826 , 0x00000005 
+ 00030160  0x00007da2 call  0x00007786 
+ 00030161  0x00007da3 arg  0x0000089e , 0x00000011 
+ 00030162  0x00007da4 arg  0x000009c6 , 0x00000012 
+ 00030163  0x00007da5 arg  0x00000846 , 0x00000005 
+ 00030164  0x00007da6 call  0x00007786 
+ 00030165  0x00007da7 arg  0x00000846 , 0x00000011 
+ 00030166  0x00007da8 arg  0x00000826 , 0x00000012 
+ 00030167  0x00007da9 arg  0x00000826 , 0x00000005 
+ 00030168  0x00007daa call  0x00007755 
+ 00030169  0x00007dab arg  0x00000806 , 0x00000011 
+ 00030170  0x00007dac arg  0x00000826 , 0x00000012 
+ 00030171  0x00007dad arg  0x00000806 , 0x00000005 
+ 00030172  0x00007dae call  0x00007755 
+ 00030173  0x00007daf arg  0x00000018 , 0x00000039 
+ 00030174  0x00007db0 arg  0x00000866 , 0x00000011 
+ 00030175  0x00007db1 arg  0x00000806 , 0x00000012 
+ 00030176  0x00007db2 branch  0x00007f88 
+ 00030177  0x00007db5 arg  0x000008e6 , 0x00000011 
+ 00030178  0x00007db6 arg  0x00000806 , 0x00000005 
+ 00030179  0x00007db7 call  0x000077a8 
+ 00030180  0x00007db8 arg  0x000008ce , 0x00000011 
+ 00030181  0x00007db9 arg  0x00000826 , 0x00000005 
+ 00030182  0x00007dba call  0x000077a8 
+ 00030183  0x00007dbb arg  0x00000826 , 0x00000011 
+ 00030184  0x00007dbc arg  0x000008ce , 0x00000012 
+ 00030185  0x00007dbd arg  0x00000826 , 0x00000005 
+ 00030186  0x00007dbe call  0x00007786 
+ 00030187  0x00007dbf arg  0x0000089e , 0x00000011 
+ 00030188  0x00007dc0 arg  0x000008ce , 0x00000012 
+ 00030189  0x00007dc1 arg  0x00000846 , 0x00000005 
+ 00030190  0x00007dc2 call  0x00007786 
+ 00030191  0x00007dc3 arg  0x00000846 , 0x00000011 
+ 00030192  0x00007dc4 arg  0x00000826 , 0x00000012 
+ 00030193  0x00007dc5 arg  0x00000826 , 0x00000005 
+ 00030194  0x00007dc6 call  0x00007755 
+ 00030195  0x00007dc7 arg  0x00000806 , 0x00000011 
+ 00030196  0x00007dc8 arg  0x00000826 , 0x00000012 
+ 00030197  0x00007dc9 arg  0x00000806 , 0x00000005 
+ 00030198  0x00007dca branch  0x00007758 
+ 00030199  0x00007dce fetch  0x00000001 , 0x000009b2 
+ 00030200  0x00007dcf bne  0x00000000 , 0x00007615 
+ 00030201  0x00007dd0 call  0x00007612 
+ 00030202  0x00007dd1 arg  0x00000a7e , 0x00000005 
+ 00030203  0x00007dd2 setarg  0x00000a2e 
+ 00030204  0x00007dd3 istore  0x00000002 , 0x00000005 
+ 00030205  0x00007dd4 setarg  0x00004642 
+ 00030206  0x00007dd5 istore  0x00000002 , 0x00000005 
+ 00030207  0x00007dd6 setarg  0x000009de 
+ 00030208  0x00007dd7 istore  0x00000002 , 0x00000005 
+ 00030209  0x00007dd8 branch  0x00007609 
+ 00030210  0x00007dda arg  0x00000a7e , 0x00000005 
+ 00030211  0x00007ddb setarg  0x00000a3e 
+ 00030212  0x00007ddc istore  0x00000002 , 0x00000005 
+ 00030213  0x00007ddd setarg  0x000009de 
+ 00030214  0x00007dde istore  0x00000002 , 0x00000005 
+ 00030215  0x00007ddf setarg  0x00004642 
+ 00030216  0x00007de0 istore  0x00000002 , 0x00000005 
+ 00030217  0x00007de2 call  0x000079a0 
+ 00030218  0x00007de3 fetch  0x00000001 , 0x000009af 
+ 00030219  0x00007de4 beq  0x00000004 , 0x0000760f 
+ 00030220  0x00007de5 jam  0x00000001 , 0x000009b0 
+ 00030221  0x00007de6 jam  0x00000005 , 0x000009ae 
+ 00030222  0x00007de7 rtn 
+ 00030223  0x00007de9 jam  0x00000014 , 0x000009af 
+ 00030224  0x00007dea call  0x0000758a 
+ 00030225  0x00007deb branch  0x000076d8 
+ 00030226  0x00007dee arg  0x00000a1e , 0x00000005 
+ 00030227  0x00007def force  0x00000008 , 0x00000007 
+ 00030228  0x00007df0 branch  0x000076a2 
+ 00030229  0x00007df3 jam  0x00000001 , 0x000009b0 
+ 00030230  0x00007df4 rtn 
+ 00030231  0x00007df8 bpatchx  0x000000e6 , 0x0000403c 
+ 00030232  0x00007df9 arg  0x00000727 , 0x00000005 
+ 00030233  0x00007dfa fetch  0x00000006 , 0x000040a0 
+ 00030234  0x00007dfb istore  0x00000006 , 0x00000005 
+ 00030235  0x00007dfc fetch  0x00000006 , 0x00000040 
+ 00030236  0x00007dfd istore  0x00000006 , 0x00000005 
+ 00030237  0x00007dfe fetch  0x00000003 , 0x0000465e 
+ 00030238  0x00007dff istore  0x00000003 , 0x00000005 
+ 00030239  0x00007e01 call  0x00007a0d 
+ 00030240  0x00007e03 arg  0x00000a4e , 0x00000011 
+ 00030241  0x00007e04 arg  0x00000a5e , 0x00000012 
+ 00030242  0x00007e05 force  0x00000004 , 0x00000007 
+ 00030243  0x00007e06 call  0x000076a7 
+ 00030244  0x00007e07 nbranch  0x00007631 , 0x00000001 
+ 00030245  0x00007e09 call  0x00007628 
+ 00030246  0x00007e0a jam  0x00000041 , 0x0000007d 
+ 00030247  0x00007e0b branch  0x000062f8 
+ 00030248  0x00007e0e fetch  0x00000001 , 0x000009af 
+ 00030249  0x00007e0f beq  0x00000009 , 0x0000762e 
+ 00030250  0x00007e10 jam  0x0000000a , 0x000009ae 
+ 00030251  0x00007e11 jam  0x00000001 , 0x000009b0 
+ 00030252  0x00007e12 jam  0x00000003 , 0x0000007c 
+ 00030253  0x00007e13 rtn 
+ 00030254  0x00007e15 jam  0x00000003 , 0x0000007c 
+ 00030255  0x00007e16 jam  0x00000015 , 0x000009af 
+ 00030256  0x00007e17 branch  0x000076d8 
+ 00030257  0x00007e1b fetch  0x00000001 , 0x000009af 
+ 00030258  0x00007e1c beq  0x00000009 , 0x00007637 
+ 00030259  0x00007e1d jam  0x00000000 , 0x000009ae 
+ 00030260  0x00007e1e jam  0x00000004 , 0x0000007c 
+ 00030261  0x00007e20 jam  0x00000005 , 0x0000007e 
+ 00030262  0x00007e21 rtn 
+ 00030263  0x00007e23 jam  0x00000004 , 0x0000007c 
+ 00030264  0x00007e24 jam  0x00000000 , 0x000009af 
+ 00030265  0x00007e25 rtn 
+ 00030266  0x00007e28 fetch  0x00000001 , 0x000009b3 
+ 00030267  0x00007e29 beq  0x00000001 , 0x0000763e 
+ 00030268  0x00007e2a jam  0x0000000a , 0x000009af 
+ 00030269  0x00007e2b branch  0x000076d8 
+ 00030270  0x00007e2d arg  0x00000727 , 0x00000005 
+ 00030271  0x00007e2e fetch  0x00000006 , 0x00000040 
+ 00030272  0x00007e2f istore  0x00000006 , 0x00000005 
+ 00030273  0x00007e30 fetch  0x00000006 , 0x000040a0 
+ 00030274  0x00007e31 istore  0x00000006 , 0x00000005 
+ 00030275  0x00007e32 fetch  0x00000003 , 0x0000465b 
+ 00030276  0x00007e33 istore  0x00000003 , 0x00000005 
+ 00030277  0x00007e35 call  0x00007a24 
+ 00030278  0x00007e36 fetch  0x00000001 , 0x000009af 
+ 00030279  0x00007e37 beq  0x0000000a , 0x0000764b 
+ 00030280  0x00007e38 jam  0x0000000b , 0x000009ae 
+ 00030281  0x00007e39 jam  0x00000001 , 0x000009b0 
+ 00030282  0x00007e3a rtn 
+ 00030283  0x00007e3c jam  0x0000000b , 0x000009af 
+ 00030284  0x00007e3d jam  0x00000001 , 0x000009b1 
+ 00030285  0x00007e3e rtn 
+ 00030286  0x00007e41 arg  0x00000a7e , 0x00000005 
+ 00030287  0x00007e42 fetch  0x00000006 , 0x00000040 
+ 00030288  0x00007e43 istore  0x00000006 , 0x00000005 
+ 00030289  0x00007e44 fetch  0x00000006 , 0x000040a0 
+ 00030290  0x00007e45 istore  0x00000006 , 0x00000005 
+ 00030291  0x00007e46 setarg  0x00000a2e 
+ 00030292  0x00007e47 istore  0x00000002 , 0x00000005 
+ 00030293  0x00007e48 setarg  0x00000a3e 
+ 00030294  0x00007e49 istore  0x00000002 , 0x00000005 
+ 00030295  0x00007e4a branch  0x00007662 
+ 00030296  0x00007e4c jam  0x0000000f , 0x000009ae 
+ 00030297  0x00007e4d arg  0x00000a7e , 0x00000005 
+ 00030298  0x00007e4e fetch  0x00000006 , 0x000040a0 
+ 00030299  0x00007e4f istore  0x00000006 , 0x00000005 
+ 00030300  0x00007e50 fetch  0x00000006 , 0x00000040 
+ 00030301  0x00007e51 istore  0x00000006 , 0x00000005 
+ 00030302  0x00007e52 setarg  0x00000a3e 
+ 00030303  0x00007e53 istore  0x00000002 , 0x00000005 
+ 00030304  0x00007e54 setarg  0x00000a2e 
+ 00030305  0x00007e55 istore  0x00000002 , 0x00000005 
+ 00030306  0x00007e58 arg  0x00000727 , 0x00000005 
+ 00030307  0x00007e59 fetch  0x00000006 , 0x00000a7e 
+ 00030308  0x00007e5a istore  0x00000006 , 0x00000005 
+ 00030309  0x00007e5b fetch  0x00000006 , 0x00000a84 
+ 00030310  0x00007e5c istore  0x00000006 , 0x00000005 
+ 00030311  0x00007e5e call  0x000079d7 
+ 00030312  0x00007e61 jam  0x00000001 , 0x000041bd 
+ 00030313  0x00007e62 arg  0x000041be , 0x00000005 
+ 00030314  0x00007e63 arg  0x00000a4e , 0x00000006 
+ 00030315  0x00007e64 call  0x00007ebf 
+ 00030316  0x00007e65 branch  0x000021c4 
+ 00030317  0x00007e69 bpatchx  0x000000e7 , 0x0000403c 
+ 00030318  0x00007e6a fetch  0x00000001 , 0x000045b1 
+ 00030319  0x00007e6b rtnne  0x00000000 
+ 00030320  0x00007e6c fetch  0x00000001 , 0x000009b2 
+ 00030321  0x00007e6d rtnne  0x00000000 
+ 00030322  0x00007e6e arg  0x00004612 , 0x00000005 
+ 00030323  0x00007e6f force  0x0000000b , 0x00000007 
+ 00030324  0x00007e70 call  0x000076a2 
+ 00030325  0x00007e71 random  0x0000003f 
+ 00030326  0x00007e72 rshift  0x0000003f , 0x0000003f 
+ 00030327  0x00007e73 istore  0x00000002 , 0x00000005 
+ 00030328  0x00007e75 arg  0x000006be , 0x00000005 
+ 00030329  0x00007e76 arg  0x00004612 , 0x00000006 
+ 00030330  0x00007e77 call  0x00007ebe 
+ 00030331  0x00007e79 arg  0x000005e6 , 0x00000005 
+ 00030332  0x00007e7a arg  0x000008ce , 0x00000006 
+ 00030333  0x00007e7b call  0x00007ebc 
+ 00030334  0x00007e7d arg  0x00000616 , 0x00000005 
+ 00030335  0x00007e7e call  0x00007ec5 
+ 00030336  0x00007e7f jam  0x00000001 , 0x00000616 
+ 00030337  0x00007e81 call  0x00007a5d 
+ 00030338  0x00007e82 jam  0x00000001 , 0x000009b2 
+ 00030339  0x00007e83 rtn 
+ 00030340  0x00007e86 arg  0x0000462a , 0x00000005 
+ 00030341  0x00007e87 arg  0x0000062e , 0x00000006 
+ 00030342  0x00007e88 call  0x00007ebc 
+ 00030343  0x00007e89 jam  0x00000001 , 0x000045b1 
+ 00030344  0x00007e8a jam  0x00000000 , 0x000009b2 
+ 00030345  0x00007e8b rtn 
+ 00030346  0x00007e8e bpatchx  0x000000e8 , 0x0000403d 
+ 00030347  0x00007e8f fetch  0x00000001 , 0x000009b9 
+ 00030348  0x00007e90 rtnne  0x00000000 
+ 00030349  0x00007e91 fetch  0x00000001 , 0x000009b2 
+ 00030350  0x00007e92 rtnne  0x00000000 
+ 00030351  0x00007e94 arg  0x000006be , 0x00000005 
+ 00030352  0x00007e95 arg  0x00004612 , 0x00000006 
+ 00030353  0x00007e96 call  0x00007ebe 
+ 00030354  0x00007e98 arg  0x000005e6 , 0x00000005 
+ 00030355  0x00007e99 arg  0x000009c6 , 0x00000006 
+ 00030356  0x00007e9a call  0x00007ebc 
+ 00030357  0x00007e9c arg  0x00000616 , 0x00000005 
+ 00030358  0x00007e9d call  0x00007ec5 
+ 00030359  0x00007e9e jam  0x00000001 , 0x00000616 
+ 00030360  0x00007ea0 call  0x00007a5d 
+ 00030361  0x00007ea1 jam  0x00000002 , 0x000009b2 
+ 00030362  0x00007ea2 rtn 
+ 00030363  0x00007ea5 jam  0x00000001 , 0x000009b3 
+ 00030364  0x00007ea6 arg  0x00000a06 , 0x00000005 
+ 00030365  0x00007ea7 arg  0x0000062e , 0x00000006 
+ 00030366  0x00007ea8 call  0x00007ebe 
+ 00030367  0x00007ea9 jam  0x00000001 , 0x000009b9 
+ 00030368  0x00007eaa jam  0x00000000 , 0x000009b2 
+ 00030369  0x00007eab rtn 
+ 00030370  0x00007eae increase  0xffffffff , 0x00000007 
+ 00030371  0x00007eaf nrtn  0x00000002 
+ 00030372  0x00007eb0 random  0x0000003f 
+ 00030373  0x00007eb1 istore  0x00000002 , 0x00000005 
+ 00030374  0x00007eb2 branch  0x000076a2 
+ 00030375  0x00007eb4 increase  0xffffffff , 0x00000007 
+ 00030376  0x00007eb5 nbranch  0x000076b3 , 0x00000002 
+ 00030377  0x00007eb6 ifetch  0x00000004 , 0x00000011 
+ 00030378  0x00007eb7 copy  0x0000003f , 0x00000002 
+ 00030379  0x00007eb8 ifetch  0x00000004 , 0x00000012 
+ 00030380  0x00007eb9 iflip  0x00000002 , 0x0000003f 
+ 00030381  0x00007eba nbranch  0x000076b1 , 0x00000005 
+ 00030382  0x00007ebb increase  0x00000004 , 0x00000011 
+ 00030383  0x00007ebc increase  0x00000004 , 0x00000012 
+ 00030384  0x00007ebd branch  0x000076a7 
+ 00030385  0x00007ebf disable  0x00000001 
+ 00030386  0x00007ec0 rtn 
+ 00030387  0x00007ec2 enable  0x00000001 
+ 00030388  0x00007ec3 rtn 
+ 00030389  0x00007ecb bpatchx  0x000000e9 , 0x0000403d 
+ 00030390  0x00007ecc fetch  0x00000001 , 0x000009b0 
+ 00030391  0x00007ecd rtn  0x00000034 
+ 00030392  0x00007ece call  0x000062bc 
+ 00030393  0x00007ecf nrtn  0x00000034 
+ 00030394  0x00007ed0 jam  0x00000000 , 0x000009b0 
+ 00030395  0x00007ed1 fetch  0x00000001 , 0x000009ae 
+ 00030396  0x00007ed2 beq  0x00000003 , 0x000061fd 
+ 00030397  0x00007ed3 beq  0x00000005 , 0x0000621a 
+ 00030398  0x00007ed4 beq  0x00000007 , 0x00006225 
+ 00030399  0x00007ed5 beq  0x0000000b , 0x0000623a 
+ 00030400  0x00007ed6 beq  0x00000002 , 0x00007588 
+ 00030401  0x00007ed7 beq  0x00000004 , 0x000075f7 
+ 00030402  0x00007ed8 beq  0x00000009 , 0x00007617 
+ 00030403  0x00007ed9 beq  0x0000000a , 0x0000763a 
+ 00030404  0x00007eda beq  0x0000000c , 0x00007658 
+ 00030405  0x00007edc rtn 
+ 00030406  0x00007edf bpatchx  0x000000ea , 0x0000403d 
+ 00030407  0x00007ee0 fetch  0x00000001 , 0x000009b1 
+ 00030408  0x00007ee1 rtn  0x00000034 
+ 00030409  0x00007ee2 call  0x000062bc 
+ 00030410  0x00007ee3 nrtn  0x00000034 
+ 00030411  0x00007ee4 jam  0x00000000 , 0x000009b1 
+ 00030412  0x00007ee5 fetch  0x00000001 , 0x000009af 
+ 00030413  0x00007ee6 beq  0x00000012 , 0x000061e0 
+ 00030414  0x00007ee7 beq  0x00000013 , 0x000061e5 
+ 00030415  0x00007ee8 beq  0x00000003 , 0x000061e9 
+ 00030416  0x00007ee9 beq  0x00000004 , 0x00007602 
+ 00030417  0x00007eea beq  0x00000014 , 0x000061ed 
+ 00030418  0x00007eeb beq  0x00000007 , 0x000061fb 
+ 00030419  0x00007eec beq  0x0000000a , 0x0000763a 
+ 00030420  0x00007eed beq  0x0000000b , 0x00006239 
+ 00030421  0x00007eee beq  0x00000009 , 0x00007617 
+ 00030422  0x00007eef beq  0x00000015 , 0x00006233 
+ 00030423  0x00007ef0 rtn 
+ 00030424  0x00007ef3 jam  0x00000001 , 0x000009b1 
+ 00030425  0x00007ef4 rtn 
+ 00030426  0x00007ef7 jam  0x00000000 , 0x000009b1 
+ 00030427  0x00007ef8 rtn 
+ 00030428  0x00007efa bpatchx  0x000000eb , 0x0000403d 
+ 00030429  0x00007efb fetch  0x00000001 , 0x0000465a 
+ 00030430  0x00007efc rtn  0x00000034 
+ 00030431  0x00007efd fetch  0x00000001 , 0x000009b2 
+ 00030432  0x00007efe rtn  0x00000034 
+ 00030433  0x00007eff increase  0x00000080 , 0x0000003f 
+ 00030434  0x00007f00 store  0x00000001 , 0x000009b2 
+ 00030435  0x00007f01 rtnbit1  0x00000007 
+ 00030436  0x00007f02 fetch  0x00000001 , 0x000005e3 
+ 00030437  0x00007f03 branch  0x000076e7 , 0x00000034 
+ 00030438  0x00007f04 branch  0x00007a68 
+ 00030439  0x00007f07 call  0x000078d3 
+ 00030440  0x00007f08 fetch  0x00000001 , 0x000009b2 
+ 00030441  0x00007f09 beq  0x00000001 , 0x00007684 
+ 00030442  0x00007f0a beq  0x00000002 , 0x0000769b 
+ 00030443  0x00007f0b rtn 
+ 00030444  0x00007f0f and  0x0000003f , 0x00000007 , 0x00000007 
+ 00030445  0x00007f10 rshift3  0x0000003f , 0x0000003f 
+ 00030446  0x00007f11 iadd  0x00000006 , 0x00000006 
+ 00030447  0x00007f12 ifetch  0x00000001 , 0x00000006 
+ 00030448  0x00007f13 qisolate0  0x0000003f 
+ 00030449  0x00007f14 rtn 
+ 00030450  0x00007f18 call  0x00007ebe 
+ 00030451  0x00007f19 call  0x00007ebe 
+ 00030452  0x00007f1a branch  0x00007ebe 
+ 00030453  0x00007f1e ifetch  0x00000008 , 0x00000006 
+ 00030454  0x00007f1f nrtn  0x00000034 
+ 00030455  0x00007f20 ifetch  0x00000008 , 0x00000006 
+ 00030456  0x00007f21 nrtn  0x00000034 
+ 00030457  0x00007f22 ifetch  0x00000008 , 0x00000006 
+ 00030458  0x00007f23 rtn 
+ 00030459  0x00007f29 ifetch  0x00000004 , 0x00000011 
+ 00030460  0x00007f2a iforce  0x00000002 
+ 00030461  0x00007f2b ifetch  0x00000004 , 0x00000012 
+ 00030462  0x00007f2c isub  0x00000002 , 0x0000003e 
+ 00030463  0x00007f2d nrtn  0x00000005 
+ 00030464  0x00007f2e increase  0x00000004 , 0x00000011 
+ 00030465  0x00007f2f increase  0x00000004 , 0x00000012 
+ 00030466  0x00007f30 loop  0x000076fb 
+ 00030467  0x00007f31 rtn 
+ 00030468  0x00007f35 force  0x00000006 , 0x00000039 
+ 00030469  0x00007f36 increase  0x00000014 , 0x00000011 
+ 00030470  0x00007f37 increase  0x00000014 , 0x00000012 
+ 00030471  0x00007f39 ifetch  0x00000004 , 0x00000012 
+ 00030472  0x00007f3a iforce  0x00000002 
+ 00030473  0x00007f3b ifetch  0x00000004 , 0x00000011 
+ 00030474  0x00007f3c isub  0x00000002 , 0x0000003f 
+ 00030475  0x00007f3d nrtn  0x00000002 
+ 00030476  0x00007f3e nrtn  0x00000034 
+ 00030477  0x00007f3f increase  0xfffffffc , 0x00000011 
+ 00030478  0x00007f40 increase  0xfffffffc , 0x00000012 
+ 00030479  0x00007f41 loop  0x00007707 
+ 00030480  0x00007f42 rtn 
+ 00030481  0x00007f45 force  0x00000006 , 0x00000039 
+ 00030482  0x00007f46 force  0x00000000 , 0x00000013 
+ 00030483  0x00007f48 ifetch  0x00000004 , 0x00000011 
+ 00030484  0x00007f49 iforce  0x00000002 
+ 00030485  0x00007f4a ifetch  0x00000004 , 0x00000012 
+ 00030486  0x00007f4b iadd  0x00000002 , 0x0000003f 
+ 00030487  0x00007f4c iadd  0x00000013 , 0x0000003f 
+ 00030488  0x00007f4d istore  0x00000004 , 0x00000005 
+ 00030489  0x00007f4e isolate1  0x00000020 , 0x0000003f 
+ 00030490  0x00007f4f setflag  0x00000001 , 0x00000000 , 0x00000013 
+ 00030491  0x00007f50 increase  0x00000004 , 0x00000011 
+ 00030492  0x00007f51 increase  0x00000004 , 0x00000012 
+ 00030493  0x00007f52 loop  0x00007713 
+ 00030494  0x00007f53 rtn 
+ 00030495  0x00007f56 force  0x00000006 , 0x00000039 
+ 00030496  0x00007f57 force  0x00000000 , 0x00000013 
+ 00030497  0x00007f59 ifetch  0x00000004 , 0x00000012 
+ 00030498  0x00007f5a iforce  0x00000002 
+ 00030499  0x00007f5b ifetch  0x00000004 , 0x00000011 
+ 00030500  0x00007f5c isub  0x00000002 , 0x0000003f 
+ 00030501  0x00007f5d isub  0x00000013 , 0x0000003f 
+ 00030502  0x00007f5e istore  0x00000004 , 0x00000005 
+ 00030503  0x00007f5f isolate1  0x00000020 , 0x0000003f 
+ 00030504  0x00007f60 setflag  0x00000001 , 0x00000000 , 0x00000013 
+ 00030505  0x00007f61 increase  0x00000004 , 0x00000011 
+ 00030506  0x00007f62 increase  0x00000004 , 0x00000012 
+ 00030507  0x00007f63 loop  0x00007721 
+ 00030508  0x00007f64 rtn 
+ 00030509  0x00007f67 force  0x00000006 , 0x00000039 
+ 00030510  0x00007f68 increase  0x00000014 , 0x00000011 
+ 00030511  0x00007f6a force  0x00000000 , 0x00000013 
+ 00030512  0x00007f6c ifetch  0x00000004 , 0x00000011 
+ 00030513  0x00007f6d isolate1  0x00000000 , 0x0000003f 
+ 00030514  0x00007f6e setflag  0x00000001 , 0x00000001 , 0x00000013 
+ 00030515  0x00007f6f rshift  0x0000003f , 0x0000003f 
+ 00030516  0x00007f70 isolate1  0x00000000 , 0x00000013 
+ 00030517  0x00007f71 setflag  0x00000001 , 0x0000001f , 0x0000003f 
+ 00030518  0x00007f72 istore  0x00000004 , 0x00000011 
+ 00030519  0x00007f73 increase  0xfffffffc , 0x00000011 
+ 00030520  0x00007f74 rshift  0x00000013 , 0x00000013 
+ 00030521  0x00007f75 loop  0x00007730 
+ 00030522  0x00007f76 rtn 
+ 00030523  0x00007f79 force  0x00000006 , 0x00000039 
+ 00030524  0x00007f7a force  0x00000000 , 0x00000013 
+ 00030525  0x00007f7c ifetch  0x00000004 , 0x00000011 
+ 00030526  0x00007f7d isolate1  0x0000001f , 0x0000003f 
+ 00030527  0x00007f7e setflag  0x00000001 , 0x00000001 , 0x00000013 
+ 00030528  0x00007f7f lshift  0x0000003f , 0x0000003f 
+ 00030529  0x00007f80 isolate1  0x00000000 , 0x00000013 
+ 00030530  0x00007f81 setflag  0x00000001 , 0x00000000 , 0x0000003f 
+ 00030531  0x00007f82 istore  0x00000004 , 0x00000011 
+ 00030532  0x00007f83 increase  0x00000004 , 0x00000011 
+ 00030533  0x00007f84 rshift  0x00000013 , 0x00000013 
+ 00030534  0x00007f85 loop  0x0000773d 
+ 00030535  0x00007f86 rtn 
+ 00030536  0x00007f89 call  0x0000773b 
+ 00030537  0x00007f8b isolate1  0x00000000 , 0x00000013 
+ 00030538  0x00007f8c branch  0x00007751 , 0x00000001 
+ 00030539  0x00007f8d arg  0x00000886 , 0x00000012 
+ 00030540  0x00007f8e copy  0x00000011 , 0x00000013 
+ 00030541  0x00007f8f increase  0xffffffe8 , 0x00000011 
+ 00030542  0x00007f90 call  0x00007704 
+ 00030543  0x00007f91 nrtn  0x00000002 
+ 00030544  0x00007f92 copy  0x00000013 , 0x00000011 
+ 00030545  0x00007f94 increase  0xffffffe8 , 0x00000011 
+ 00030546  0x00007f95 arg  0x00000886 , 0x00000012 
+ 00030547  0x00007f96 copy  0x00000011 , 0x00000005 
+ 00030548  0x00007f97 branch  0x0000771f 
+ 00030549  0x00007f9b call  0x00007711 
+ 00030550  0x00007f9c copy  0x00000005 , 0x00000011 
+ 00030551  0x00007f9d branch  0x00007749 
+ 00030552  0x00007fa0 call  0x0000771f 
+ 00030553  0x00007fa1 isolate0  0x00000000 , 0x00000013 
+ 00030554  0x00007fa2 rtn  0x00000001 
+ 00030555  0x00007fa3 arg  0x00000886 , 0x00000012 
+ 00030556  0x00007fa4 add  0x00000005 , 0xffffffe8 , 0x00000011 
+ 00030557  0x00007fa5 copy  0x00000011 , 0x00000005 
+ 00030558  0x00007fa6 branch  0x00007711 
+ 00030559  0x00007faa copy  0x00000005 , 0x0000000b 
+ 00030560  0x00007fab copy  0x00000011 , 0x00000030 
+ 00030561  0x00007fac arg  0x00000716 , 0x00000012 
+ 00030562  0x00007fad copy  0x00000012 , 0x00000005 
+ 00030563  0x00007fae add  0x00000011 , 0x00000018 , 0x00000006 
+ 00030564  0x00007faf ifetch  0x00000008 , 0x00000006 
+ 00030565  0x00007fb0 istore  0x00000008 , 0x00000005 
+ 00030566  0x00007fb1 istore  0x00000008 , 0x00000005 
+ 00030567  0x00007fb2 force  0x00000000 , 0x0000003f 
+ 00030568  0x00007fb3 istore  0x00000008 , 0x00000005 
+ 00030569  0x00007fb4 copy  0x0000000b , 0x00000005 
+ 00030570  0x00007fb5 call  0x00007755 
+ 00030571  0x00007fb6 arg  0x00000716 , 0x00000012 
+ 00030572  0x00007fb7 copy  0x00000012 , 0x00000005 
+ 00030573  0x00007fb8 force  0x00000000 , 0x0000003f 
+ 00030574  0x00007fb9 istore  0x00000008 , 0x00000005 
+ 00030575  0x00007fba add  0x00000030 , 0x00000020 , 0x00000006 
+ 00030576  0x00007fbb ifetch  0x00000008 , 0x00000006 
+ 00030577  0x00007fbc istore  0x00000008 , 0x00000005 
+ 00030578  0x00007fbd istore  0x00000008 , 0x00000005 
+ 00030579  0x00007fbe copy  0x0000000b , 0x00000011 
+ 00030580  0x00007fbf copy  0x00000011 , 0x00000005 
+ 00030581  0x00007fc0 call  0x00007755 
+ 00030582  0x00007fc1 arg  0x00000716 , 0x00000012 
+ 00030583  0x00007fc2 copy  0x00000012 , 0x00000005 
+ 00030584  0x00007fc3 add  0x00000030 , 0x00000028 , 0x00000006 
+ 00030585  0x00007fc4 ifetch  0x00000008 , 0x00000006 
+ 00030586  0x00007fc5 istore  0x00000008 , 0x00000005 
+ 00030587  0x00007fc6 istore  0x00000008 , 0x00000005 
+ 00030588  0x00007fc7 istore  0x00000008 , 0x00000005 
+ 00030589  0x00007fc8 copy  0x0000000b , 0x00000011 
+ 00030590  0x00007fc9 copy  0x00000011 , 0x00000005 
+ 00030591  0x00007fca branch  0x00007755 
+ 00030592  0x00007fce force  0x00000006 , 0x00000039 
+ 00030593  0x00007fd0 ifetch  0x00000004 , 0x00000006 
+ 00030594  0x00007fd1 iforce  0x0000002f 
+ 00030595  0x00007fd2 increase  0x00000001 , 0x00000038 
+ 00030596  0x00007fd3 loop  0x00007781 
+ 00030597  0x00007fd4 rtn 
+ 00030598  0x00007fd9 copy  0x00000005 , 0x0000000b 
+ 00030599  0x00007fda arg  0x000006e6 , 0x00000005 
+ 00030600  0x00007fdb call  0x00007ec5 
+ 00030601  0x00007fdc arg  0x000006e6 , 0x00000005 
+ 00030602  0x00007fdd copy  0x00000011 , 0x00000006 
+ 00030603  0x00007fde force  0x00000000 , 0x00000038 
+ 00030604  0x00007fdf call  0x00007780 
+ 00030605  0x00007fe0 copy  0x00000012 , 0x00000006 
+ 00030606  0x00007fe1 call  0x00007780 
+ 00030607  0x00007fe2 force  0x00000000 , 0x00000012 
+ 00030608  0x00007fe4 force  0x00000000 , 0x00000002 
+ 00030609  0x00007fe5 force  0x00000006 , 0x00000013 
+ 00030610  0x00007fe7 ifetch  0x00000004 , 0x00000005 
+ 00030611  0x00007fe8 iforce  0x00000011 
+ 00030612  0x00007fe9 copy  0x00000012 , 0x00000038 
+ 00030613  0x00007fea deposit  0x0000002f 
+ 00030614  0x00007feb copy  0x00000013 , 0x00000038 
+ 00030615  0x00007fec imul32  0x0000002f , 0x0000003f 
+ 00030616  0x00007fed iadd  0x00000011 , 0x0000003f 
+ 00030617  0x00007fee iadd  0x00000002 , 0x0000003f 
+ 00030618  0x00007fef istore  0x00000004 , 0x00000005 
+ 00030619  0x00007ff0 rshift32  0x0000003f , 0x00000002 
+ 00030620  0x00007ff1 increase  0x00000001 , 0x00000013 
+ 00030621  0x00007ff2 compare  0x0000000c , 0x00000013 , 0x000000ff 
+ 00030622  0x00007ff3 nbranch  0x00007792 , 0x00000001 
+ 00030623  0x00007ff4 deposit  0x00000002 
+ 00030624  0x00007ff5 istore  0x00000004 , 0x00000005 
+ 00030625  0x00007ff6 increase  0xffffffe8 , 0x00000005 
+ 00030626  0x00007ff7 increase  0x00000001 , 0x00000012 
+ 00030627  0x00007ff8 compare  0x00000006 , 0x00000012 , 0x000000ff 
+ 00030628  0x00007ff9 nbranch  0x00007790 , 0x00000001 
+ 00030629  0x00007ffa arg  0x000006e6 , 0x00000011 
+ 00030630  0x00007ffb copy  0x0000000b , 0x00000005 
+ 00030631  0x00007ffc branch  0x0000775f 
+ 00030632  0x00008000 copy  0x00000011 , 0x00000012 
+ 00030633  0x00008001 branch  0x00007786 
+ 00030634  0x00008004 copy  0x00000011 , 0x00000030 
+ 00030635  0x00008006 copy  0x00000030 , 0x00000011 
+ 00030636  0x00008007 ifetch  0x00000001 , 0x00000011 
+ 00030637  0x00008008 isolate1  0x00000000 , 0x0000003f 
+ 00030638  0x00008009 rtn  0x00000001 
+ 00030639  0x0000800a call  0x0000772d 
+ 00030640  0x0000800b ifetch  0x00000001 , 0x00000012 
+ 00030641  0x0000800c isolate0  0x00000000 , 0x0000003f 
+ 00030642  0x0000800d branch  0x000077ba , 0x00000001 
+ 00030643  0x0000800e arg  0x00000886 , 0x00000011 
+ 00030644  0x0000800f copy  0x00000012 , 0x00000005 
+ 00030645  0x00008010 call  0x00007711 
+ 00030646  0x00008011 ifetch  0x00000001 , 0x00000012 
+ 00030647  0x00008012 iadd  0x00000013 , 0x0000003f 
+ 00030648  0x00008013 istore  0x00000001 , 0x00000012 
+ 00030649  0x00008014 increase  0xffffffe8 , 0x00000012 
+ 00030650  0x00008016 add  0x00000012 , 0x00000018 , 0x00000011 
+ 00030651  0x00008017 force  0x00000007 , 0x00000039 
+ 00030652  0x00008018 call  0x0000772f 
+ 00030653  0x00008019 branch  0x000077ab 
+ 00030654  0x0000801d copy  0x00000005 , 0x0000000b 
+ 00030655  0x0000801e arg  0x00000746 , 0x00000005 
+ 00030656  0x0000801f call  0x00007ec5 
+ 00030657  0x00008020 force  0x00000000 , 0x0000003f 
+ 00030658  0x00008021 store  0x00000004 , 0x000006fe 
+ 00030659  0x00008022 store  0x00000004 , 0x0000075e 
+ 00030660  0x00008023 jam  0x00000001 , 0x00000746 
+ 00030661  0x00008024 arg  0x000006e6 , 0x00000005 
+ 00030662  0x00008025 call  0x00007ec5 
+ 00030663  0x00008026 arg  0x00000886 , 0x00000006 
+ 00030664  0x00008027 arg  0x00000716 , 0x00000005 
+ 00030665  0x00008028 call  0x00007ebe 
+ 00030666  0x00008029 copy  0x00000011 , 0x00000006 
+ 00030667  0x0000802a arg  0x0000072e , 0x00000005 
+ 00030668  0x0000802b call  0x00007ebe 
+ 00030669  0x0000802d arg  0x0000072e , 0x00000006 
+ 00030670  0x0000802e call  0x000076f5 
+ 00030671  0x0000802f branch  0x000077f6 , 0x00000034 
+ 00030672  0x00008030 arg  0x0000072e , 0x00000011 
+ 00030673  0x00008031 arg  0x00000746 , 0x00000012 
+ 00030674  0x00008032 call  0x000077aa 
+ 00030675  0x00008034 arg  0x00000716 , 0x00000011 
+ 00030676  0x00008035 arg  0x000006e6 , 0x00000012 
+ 00030677  0x00008036 call  0x000077aa 
+ 00030678  0x00008037 arg  0x0000072e , 0x00000011 
+ 00030679  0x00008038 arg  0x00000716 , 0x00000012 
+ 00030680  0x00008039 call  0x00007704 
+ 00030681  0x0000803a branch  0x000077e8 , 0x00000002 
+ 00030682  0x0000803b arg  0x00000716 , 0x00000011 
+ 00030683  0x0000803c arg  0x0000072e , 0x00000012 
+ 00030684  0x0000803d copy  0x00000011 , 0x00000005 
+ 00030685  0x0000803e call  0x0000771f 
+ 00030686  0x0000803f arg  0x00000746 , 0x00000011 
+ 00030687  0x00008040 arg  0x000006e6 , 0x00000012 
+ 00030688  0x00008041 copy  0x00000012 , 0x00000005 
+ 00030689  0x00008042 call  0x00007711 
+ 00030690  0x00008043 ifetch  0x00000001 , 0x00000011 
+ 00030691  0x00008044 iadd  0x00000013 , 0x00000013 
+ 00030692  0x00008045 ifetch  0x00000001 , 0x00000012 
+ 00030693  0x00008046 iadd  0x00000013 , 0x0000003f 
+ 00030694  0x00008047 istore  0x00000001 , 0x00000012 
+ 00030695  0x00008048 branch  0x000077cd 
+ 00030696  0x0000804a arg  0x0000072e , 0x00000011 
+ 00030697  0x0000804b arg  0x00000716 , 0x00000012 
+ 00030698  0x0000804c copy  0x00000011 , 0x00000005 
+ 00030699  0x0000804d call  0x0000771f 
+ 00030700  0x0000804e arg  0x000006e6 , 0x00000011 
+ 00030701  0x0000804f arg  0x00000746 , 0x00000012 
+ 00030702  0x00008050 copy  0x00000012 , 0x00000005 
+ 00030703  0x00008051 call  0x00007711 
+ 00030704  0x00008052 ifetch  0x00000001 , 0x00000011 
+ 00030705  0x00008053 iadd  0x00000013 , 0x00000013 
+ 00030706  0x00008054 ifetch  0x00000001 , 0x00000012 
+ 00030707  0x00008055 iadd  0x00000013 , 0x0000003f 
+ 00030708  0x00008056 istore  0x00000001 , 0x00000012 
+ 00030709  0x00008057 branch  0x000077cd 
+ 00030710  0x00008059 arg  0x00000746 , 0x00000005 
+ 00030711  0x0000805a call  0x00007ec5 
+ 00030712  0x0000805b fetch  0x00000001 , 0x000006fe 
+ 00030713  0x0000805c store  0x00000001 , 0x00000746 
+ 00030714  0x0000805d store  0x00000001 , 0x0000074e 
+ 00030715  0x0000805e arg  0x00000746 , 0x00000011 
+ 00030716  0x0000805f arg  0x000006e6 , 0x00000012 
+ 00030717  0x00008060 copy  0x00000012 , 0x00000005 
+ 00030718  0x00008061 call  0x00007755 
+ 00030719  0x00008062 arg  0x00000886 , 0x00000011 
+ 00030720  0x00008063 arg  0x000006e6 , 0x00000012 
+ 00030721  0x00008064 copy  0x0000000b , 0x00000005 
+ 00030722  0x00008065 branch  0x00007758 
+ 00030723  0x0000806b arg  0x000006a6 , 0x00000011 
+ 00030724  0x0000806c arg  0x0000075e , 0x00000005 
+ 00030725  0x0000806d call  0x000077a8 
+ 00030726  0x0000806e arg  0x0000075e , 0x00000011 
+ 00030727  0x0000806f arg  0x00000776 , 0x00000005 
+ 00030728  0x00008070 call  0x000077a8 
+ 00030729  0x00008071 arg  0x0000089e , 0x00000011 
+ 00030730  0x00008072 arg  0x00000776 , 0x00000012 
+ 00030731  0x00008073 arg  0x00000776 , 0x00000005 
+ 00030732  0x00008074 call  0x00007786 
+ 00030733  0x00008075 arg  0x00000676 , 0x00000011 
+ 00030734  0x00008076 arg  0x0000075e , 0x00000005 
+ 00030735  0x00008077 call  0x000077a8 
+ 00030736  0x00008078 arg  0x0000075e , 0x00000006 
+ 00030737  0x00008079 arg  0x0000072e , 0x00000005 
+ 00030738  0x0000807a call  0x00007ebe 
+ 00030739  0x0000807b arg  0x0000072e , 0x00000011 
+ 00030740  0x0000807c call  0x00007748 
+ 00030741  0x0000807d arg  0x0000075e , 0x00000011 
+ 00030742  0x0000807e arg  0x0000072e , 0x00000012 
+ 00030743  0x0000807f arg  0x0000075e , 0x00000005 
+ 00030744  0x00008080 call  0x00007755 
+ 00030745  0x00008081 arg  0x0000075e , 0x00000011 
+ 00030746  0x00008082 arg  0x00000776 , 0x00000012 
+ 00030747  0x00008083 arg  0x0000075e , 0x00000005 
+ 00030748  0x00008084 call  0x00007755 
+ 00030749  0x00008085 arg  0x00000676 , 0x00000006 
+ 00030750  0x00008086 arg  0x0000072e , 0x00000005 
+ 00030751  0x00008087 call  0x00007ebe 
+ 00030752  0x00008088 arg  0x0000068e , 0x00000011 
+ 00030753  0x00008089 arg  0x00000776 , 0x00000005 
+ 00030754  0x0000808a call  0x000077a8 
+ 00030755  0x0000808b arg  0x0000072e , 0x00000011 
+ 00030756  0x0000808c call  0x00007748 
+ 00030757  0x0000808d arg  0x0000072e , 0x00000011 
+ 00030758  0x0000808e call  0x00007748 
+ 00030759  0x0000808f arg  0x0000072e , 0x00000011 
+ 00030760  0x00008090 arg  0x00000776 , 0x00000012 
+ 00030761  0x00008091 arg  0x0000072e , 0x00000005 
+ 00030762  0x00008092 call  0x00007786 
+ 00030763  0x00008093 arg  0x00000776 , 0x00000011 
+ 00030764  0x00008094 arg  0x00000746 , 0x00000005 
+ 00030765  0x00008095 call  0x000077a8 
+ 00030766  0x00008096 arg  0x00000746 , 0x00000011 
+ 00030767  0x00008097 call  0x00007748 
+ 00030768  0x00008098 arg  0x00000746 , 0x00000011 
+ 00030769  0x00008099 call  0x00007748 
+ 00030770  0x0000809a arg  0x00000746 , 0x00000011 
+ 00030771  0x0000809b call  0x00007748 
+ 00030772  0x0000809c arg  0x0000068e , 0x00000006 
+ 00030773  0x0000809d arg  0x00000776 , 0x00000005 
+ 00030774  0x0000809e call  0x00007ebe 
+ 00030775  0x0000809f arg  0x00000776 , 0x00000011 
+ 00030776  0x000080a0 call  0x00007748 
+ 00030777  0x000080a1 arg  0x00000776 , 0x00000011 
+ 00030778  0x000080a2 arg  0x000006a6 , 0x00000012 
+ 00030779  0x000080a3 arg  0x000006a6 , 0x00000005 
+ 00030780  0x000080a4 call  0x00007786 
+ 00030781  0x000080a5 arg  0x0000075e , 0x00000011 
+ 00030782  0x000080a6 arg  0x00000776 , 0x00000005 
+ 00030783  0x000080a7 call  0x000077a8 
+ 00030784  0x000080a8 arg  0x00000776 , 0x00000011 
+ 00030785  0x000080a9 arg  0x0000072e , 0x00000012 
+ 00030786  0x000080aa arg  0x00000776 , 0x00000005 
+ 00030787  0x000080ab call  0x00007758 
+ 00030788  0x000080ac arg  0x00000776 , 0x00000011 
+ 00030789  0x000080ad arg  0x0000072e , 0x00000012 
+ 00030790  0x000080ae arg  0x00000676 , 0x00000005 
+ 00030791  0x000080af call  0x00007758 
+ 00030792  0x000080b0 arg  0x0000072e , 0x00000011 
+ 00030793  0x000080b1 arg  0x00000676 , 0x00000012 
+ 00030794  0x000080b2 arg  0x00000776 , 0x00000005 
+ 00030795  0x000080b3 call  0x00007758 
+ 00030796  0x000080b4 arg  0x00000776 , 0x00000011 
+ 00030797  0x000080b5 arg  0x0000075e , 0x00000012 
+ 00030798  0x000080b6 arg  0x00000776 , 0x00000005 
+ 00030799  0x000080b7 call  0x00007786 
+ 00030800  0x000080b8 arg  0x00000776 , 0x00000011 
+ 00030801  0x000080b9 arg  0x00000746 , 0x00000012 
+ 00030802  0x000080ba arg  0x0000068e , 0x00000005 
+ 00030803  0x000080bb branch  0x00007758 
+ 00030804  0x000080c0 arg  0x00000616 , 0x00000011 
+ 00030805  0x000080c1 arg  0x0000078e , 0x00000005 
+ 00030806  0x000080c2 call  0x000077a8 
+ 00030807  0x000080c3 arg  0x00000676 , 0x00000011 
+ 00030808  0x000080c4 arg  0x0000078e , 0x00000012 
+ 00030809  0x000080c5 arg  0x00000746 , 0x00000005 
+ 00030810  0x000080c6 call  0x00007786 
+ 00030811  0x000080c7 arg  0x00000616 , 0x00000011 
+ 00030812  0x000080c8 arg  0x0000078e , 0x00000012 
+ 00030813  0x000080c9 arg  0x0000078e , 0x00000005 
+ 00030814  0x000080ca call  0x00007786 
+ 00030815  0x000080cb arg  0x0000068e , 0x00000011 
+ 00030816  0x000080cc arg  0x0000078e , 0x00000012 
+ 00030817  0x000080cd arg  0x0000072e , 0x00000005 
+ 00030818  0x000080ce call  0x00007786 
+ 00030819  0x000080cf arg  0x000006a6 , 0x00000011 
+ 00030820  0x000080d0 arg  0x0000078e , 0x00000005 
+ 00030821  0x000080d1 call  0x000077a8 
+ 00030822  0x000080d2 arg  0x000005e6 , 0x00000011 
+ 00030823  0x000080d3 arg  0x0000078e , 0x00000012 
+ 00030824  0x000080d4 arg  0x0000075e , 0x00000005 
+ 00030825  0x000080d5 call  0x00007786 
+ 00030826  0x000080d6 arg  0x000006a6 , 0x00000011 
+ 00030827  0x000080d7 arg  0x0000078e , 0x00000012 
+ 00030828  0x000080d8 arg  0x0000078e , 0x00000005 
+ 00030829  0x000080d9 call  0x00007786 
+ 00030830  0x000080da arg  0x000005fe , 0x00000011 
+ 00030831  0x000080db arg  0x0000078e , 0x00000012 
+ 00030832  0x000080dc arg  0x00000776 , 0x00000005 
+ 00030833  0x000080dd call  0x00007786 
+ 00030834  0x000080de arg  0x00000746 , 0x00000011 
+ 00030835  0x000080df arg  0x0000075e , 0x00000012 
+ 00030836  0x000080e0 arg  0x0000078e , 0x00000005 
+ 00030837  0x000080e1 call  0x00007758 
+ 00030838  0x000080e2 arg  0x00000746 , 0x00000011 
+ 00030839  0x000080e3 arg  0x0000075e , 0x00000012 
+ 00030840  0x000080e4 arg  0x00000746 , 0x00000005 
+ 00030841  0x000080e5 call  0x00007755 
+ 00030842  0x000080e6 arg  0x0000072e , 0x00000011 
+ 00030843  0x000080e7 arg  0x00000776 , 0x00000012 
+ 00030844  0x000080e8 arg  0x0000075e , 0x00000005 
+ 00030845  0x000080e9 call  0x00007758 
+ 00030846  0x000080ea arg  0x0000072e , 0x00000011 
+ 00030847  0x000080eb arg  0x00000776 , 0x00000012 
+ 00030848  0x000080ec arg  0x0000072e , 0x00000005 
+ 00030849  0x000080ed call  0x00007755 
+ 00030850  0x000080ee arg  0x0000072e , 0x00000011 
+ 00030851  0x000080ef arg  0x0000078e , 0x00000012 
+ 00030852  0x000080f0 arg  0x0000072e , 0x00000005 
+ 00030853  0x000080f1 call  0x00007786 
+ 00030854  0x000080f2 arg  0x000006a6 , 0x00000011 
+ 00030855  0x000080f3 arg  0x00000616 , 0x00000012 
+ 00030856  0x000080f4 arg  0x00000776 , 0x00000005 
+ 00030857  0x000080f5 call  0x00007786 
+ 00030858  0x000080f6 arg  0x00000776 , 0x00000011 
+ 00030859  0x000080f7 arg  0x0000078e , 0x00000012 
+ 00030860  0x000080f8 arg  0x000006a6 , 0x00000005 
+ 00030861  0x000080f9 call  0x00007786 
+ 00030862  0x000080fa arg  0x0000078e , 0x00000011 
+ 00030863  0x000080fb arg  0x0000078e , 0x00000005 
+ 00030864  0x000080fc call  0x000077a8 
+ 00030865  0x000080fd arg  0x0000078e , 0x00000011 
+ 00030866  0x000080fe arg  0x00000746 , 0x00000012 
+ 00030867  0x000080ff arg  0x00000776 , 0x00000005 
+ 00030868  0x00008100 call  0x00007786 
+ 00030869  0x00008101 arg  0x0000078e , 0x00000011 
+ 00030870  0x00008102 arg  0x0000072e , 0x00000012 
+ 00030871  0x00008103 arg  0x0000072e , 0x00000005 
+ 00030872  0x00008104 call  0x00007786 
+ 00030873  0x00008105 arg  0x0000075e , 0x00000011 
+ 00030874  0x00008106 arg  0x00000676 , 0x00000005 
+ 00030875  0x00008107 call  0x000077a8 
+ 00030876  0x00008108 arg  0x00000676 , 0x00000011 
+ 00030877  0x00008109 arg  0x00000776 , 0x00000012 
+ 00030878  0x0000810a arg  0x00000676 , 0x00000005 
+ 00030879  0x0000810b call  0x00007758 
+ 00030880  0x0000810c arg  0x00000676 , 0x00000006 
+ 00030881  0x0000810d arg  0x0000078e , 0x00000005 
+ 00030882  0x0000810e call  0x00007ebe 
+ 00030883  0x0000810f arg  0x0000078e , 0x00000011 
+ 00030884  0x00008110 call  0x00007748 
+ 00030885  0x00008111 arg  0x00000776 , 0x00000011 
+ 00030886  0x00008112 arg  0x0000078e , 0x00000012 
+ 00030887  0x00008113 arg  0x00000776 , 0x00000005 
+ 00030888  0x00008114 call  0x00007758 
+ 00030889  0x00008115 arg  0x00000776 , 0x00000011 
+ 00030890  0x00008116 arg  0x0000075e , 0x00000012 
+ 00030891  0x00008117 arg  0x0000075e , 0x00000005 
+ 00030892  0x00008118 call  0x00007786 
+ 00030893  0x00008119 arg  0x0000075e , 0x00000011 
+ 00030894  0x0000811a arg  0x0000072e , 0x00000012 
+ 00030895  0x0000811b arg  0x0000068e , 0x00000005 
+ 00030896  0x0000811c call  0x00007758 
+ 00030897  0x0000811d arg  0x0000068e , 0x00000011 
+ 00030898  0x0000811e arg  0x00000886 , 0x00000012 
+ 00030899  0x0000811f arg  0x0000068e , 0x00000005 
+ 00030900  0x00008120 force  0x00000000 , 0x00000013 
+ 00030901  0x00008121 fetch  0x00000001 , 0x0000068e 
+ 00030902  0x00008122 isolate1  0x00000000 , 0x0000003f 
+ 00030903  0x00008123 call  0x00007711 , 0x00000001 
+ 00030904  0x00008124 copy  0x00000013 , 0x00000030 
+ 00030905  0x00008125 arg  0x0000068e , 0x00000011 
+ 00030906  0x00008126 call  0x0000772d 
+ 00030907  0x00008127 fetch  0x00000001 , 0x000006a5 
+ 00030908  0x00008128 isolate1  0x00000000 , 0x00000030 
+ 00030909  0x00008129 setflag  0x00000001 , 0x00000007 , 0x0000003f 
+ 00030910  0x0000812a store  0x00000001 , 0x000006a5 
+ 00030911  0x0000812b rtn 
+ 00030912  0x00008130 fetch  0x00000001 , 0x000005e3 
+ 00030913  0x00008131 increase  0xffffffff , 0x0000003f 
+ 00030914  0x00008132 nrtn  0x00000002 
+ 00030915  0x00008133 store  0x00000001 , 0x000005e3 
+ 00030916  0x00008134 fetch  0x00000001 , 0x000005e2 
+ 00030917  0x00008135 call  0x00007803 , 0x00000034 
+ 00030918  0x00008136 fetch  0x00000001 , 0x000005e3 
+ 00030919  0x00008137 arg  0x000006be , 0x00000006 
+ 00030920  0x00008138 call  0x000076ec 
+ 00030921  0x00008139 branch  0x000078c0 , 0x00000001 
+ 00030922  0x0000813a fetch  0x00000001 , 0x000005e2 
+ 00030923  0x0000813b nbranch  0x000078ce , 0x00000034 
+ 00030924  0x0000813c call  0x00007854 
+ 00030925  0x0000813d branch  0x000078c0 
+ 00030926  0x0000813f jam  0x00000000 , 0x000005e2 
+ 00030927  0x00008140 arg  0x000005e6 , 0x00000006 
+ 00030928  0x00008141 arg  0x00000676 , 0x00000005 
+ 00030929  0x00008142 call  0x000076f2 
+ 00030930  0x00008143 branch  0x000078c0 
+ 00030931  0x00008147 arg  0x000006a6 , 0x00000011 
+ 00030932  0x00008148 arg  0x00000776 , 0x00000005 
+ 00030933  0x00008149 call  0x000077be 
+ 00030934  0x0000814a arg  0x00000776 , 0x00000011 
+ 00030935  0x0000814b arg  0x0000072e , 0x00000005 
+ 00030936  0x0000814c call  0x000077a8 
+ 00030937  0x0000814d arg  0x00000676 , 0x00000011 
+ 00030938  0x0000814e arg  0x0000072e , 0x00000012 
+ 00030939  0x0000814f arg  0x0000062e , 0x00000005 
+ 00030940  0x00008150 call  0x00007786 
+ 00030941  0x00008151 arg  0x00000776 , 0x00000011 
+ 00030942  0x00008152 arg  0x0000072e , 0x00000012 
+ 00030943  0x00008153 arg  0x0000075e , 0x00000005 
+ 00030944  0x00008154 call  0x00007786 
+ 00030945  0x00008155 arg  0x0000068e , 0x00000011 
+ 00030946  0x00008156 arg  0x0000075e , 0x00000012 
+ 00030947  0x00008157 arg  0x00000646 , 0x00000005 
+ 00030948  0x00008158 branch  0x00007786 
+ 00030949  0x0000815d ifetch  0x00000004 , 0x00000006 
+ 00030950  0x0000815e force  0x00000004 , 0x00000011 
+ 00030951  0x0000815f increase  0x00000003 , 0x00000005 
+ 00030952  0x00008161 istore  0x00000001 , 0x00000005 
+ 00030953  0x00008162 rshift8  0x0000003f , 0x0000003f 
+ 00030954  0x00008163 increase  0xfffffffe , 0x00000005 
+ 00030955  0x00008164 increase  0xffffffff , 0x00000011 
+ 00030956  0x00008165 nbranch  0x000078e8 , 0x00000005 
+ 00030957  0x00008166 increase  0x00000005 , 0x00000005 
+ 00030958  0x00008167 loop  0x000078e5 
+ 00030959  0x00008168 rtn 
+ 00030960  0x0000816c lshift2  0x00000007 , 0x0000003f 
+ 00030961  0x0000816d iadd  0x0000000b , 0x00000006 
+ 00030962  0x0000816e ifetch  0x00000004 , 0x00000006 
+ 00030963  0x0000816f rtn 
+ 00030964  0x00008172 force  0x00000010 , 0x00000030 
+ 00030965  0x00008173 arg  0x000005e6 , 0x0000000b 
+ 00030966  0x00008175 add  0x00000030 , 0xfffffff9 , 0x00000007 
+ 00030967  0x00008176 call  0x000078f0 
+ 00030968  0x00008177 iforce  0x00000002 
+ 00030969  0x00008178 add  0x00000030 , 0xfffffff0 , 0x00000007 
+ 00030970  0x00008179 call  0x000078f0 
+ 00030971  0x0000817a iadd  0x00000002 , 0x00000002 
+ 00030972  0x0000817b add  0x00000030 , 0xfffffffe , 0x00000007 
+ 00030973  0x0000817c call  0x000078f0 
+ 00030974  0x0000817d shasx  0x0000003f , 0x00000001 , 0x0000003f 
+ 00030975  0x0000817e iadd  0x00000002 , 0x00000002 
+ 00030976  0x0000817f add  0x00000030 , 0xfffffff1 , 0x00000007 
+ 00030977  0x00008180 call  0x000078f0 
+ 00030978  0x00008181 shasx  0x0000003f , 0x00000000 , 0x0000003f 
+ 00030979  0x00008182 iadd  0x00000002 , 0x00000002 
+ 00030980  0x00008183 lshift2  0x00000030 , 0x0000003f 
+ 00030981  0x00008184 iadd  0x0000000b , 0x00000005 
+ 00030982  0x00008185 istoret  0x00000004 , 0x00000005 
+ 00030983  0x00008186 increase  0x00000001 , 0x00000030 
+ 00030984  0x00008187 compare  0x00000040 , 0x00000030 , 0x000000ff 
+ 00030985  0x00008188 nbranch  0x000078f6 , 0x00000001 
+ 00030986  0x00008189 rtn 
+ 00030987  0x0000818d arg  0x000008fe , 0x00000006 
+ 00030988  0x0000818e force  0x00000007 , 0x00000038 
+ 00030989  0x00008190 ifetch  0x00000004 , 0x00000006 
+ 00030990  0x00008191 iforce  0x0000002f 
+ 00030991  0x00008192 increase  0xffffffff , 0x00000038 
+ 00030992  0x00008193 branch  0x0000790d , 0x00000002 
+ 00030993  0x00008194 rtn 
+ 00030994  0x00008197 bpatchx  0x000000ec , 0x0000403d 
+ 00030995  0x00008198 call  0x000078f4 
+ 00030996  0x00008199 arg  0x000006e6 , 0x00000005 
+ 00030997  0x0000819a force  0x00000000 , 0x00000038 
+ 00030998  0x0000819c deposit  0x0000002f 
+ 00030999  0x0000819d istore  0x00000004 , 0x00000005 
+ 00031000  0x0000819e increase  0x00000001 , 0x00000038 
+ 00031001  0x0000819f compare  0x00000008 , 0x00000038 , 0x000000ff 
+ 00031002  0x000081a0 nbranch  0x00007916 , 0x00000001 
+ 00031003  0x000081a1 call  0x000074b9 
+ 00031004  0x000081a2 arg  0x00008700 , 0x0000000b 
+ 00031005  0x000081a3 arg  0x000005e6 , 0x00000030 
+ 00031006  0x000081a4 force  0x00000040 , 0x00000039 
+ 00031007  0x000081a6 ifetcht  0x00000004 , 0x00000030 
+ 00031008  0x000081a7 ifetch  0x00000004 , 0x0000000b 
+ 00031009  0x000081a8 increase  0x00000004 , 0x0000000b 
+ 00031010  0x000081a9 increase  0x00000004 , 0x00000030 
+ 00031011  0x000081aa iadd  0x00000002 , 0x0000003f 
+ 00031012  0x000081ab force  0x00000007 , 0x00000038 
+ 00031013  0x000081ac iadd  0x0000002f , 0x00000002 
+ 00031014  0x000081ad force  0x00000004 , 0x00000038 
+ 00031015  0x000081ae shasx  0x0000002f , 0x00000003 , 0x0000003f 
+ 00031016  0x000081af iadd  0x00000002 , 0x00000002 
+ 00031017  0x000081b0 force  0x00000005 , 0x00000038 
+ 00031018  0x000081b1 deposit  0x0000002f 
+ 00031019  0x000081b2 force  0x00000006 , 0x00000038 
+ 00031020  0x000081b3 ixor  0x0000002f , 0x0000003f 
+ 00031021  0x000081b4 force  0x00000004 , 0x00000038 
+ 00031022  0x000081b5 iand  0x0000002f , 0x0000003f 
+ 00031023  0x000081b6 force  0x00000006 , 0x00000038 
+ 00031024  0x000081b7 ixor  0x0000002f , 0x0000003f 
+ 00031025  0x000081b8 iadd  0x00000002 , 0x00000002 
+ 00031026  0x000081b9 force  0x00000007 , 0x00000038 
+ 00031027  0x000081ba copy  0x00000002 , 0x0000002f 
+ 00031028  0x000081bb force  0x00000003 , 0x00000038 
+ 00031029  0x000081bc deposit  0x0000002f 
+ 00031030  0x000081bd iadd  0x00000002 , 0x0000002f 
+ 00031031  0x000081be force  0x00000000 , 0x00000038 
+ 00031032  0x000081bf deposit  0x0000002f 
+ 00031033  0x000081c0 force  0x00000001 , 0x00000038 
+ 00031034  0x000081c1 iand  0x0000002f , 0x00000002 
+ 00031035  0x000081c2 ior  0x0000002f , 0x0000003f 
+ 00031036  0x000081c3 force  0x00000002 , 0x00000038 
+ 00031037  0x000081c4 iand  0x0000002f , 0x0000003f 
+ 00031038  0x000081c5 ior  0x00000002 , 0x00000002 
+ 00031039  0x000081c6 force  0x00000000 , 0x00000038 
+ 00031040  0x000081c7 shasx  0x0000002f , 0x00000002 , 0x0000003f 
+ 00031041  0x000081c8 iadd  0x00000002 , 0x0000003f 
+ 00031042  0x000081c9 force  0x00000007 , 0x00000038 
+ 00031043  0x000081ca iadd  0x0000002f , 0x0000002f 
+ 00031044  0x000081cb regexrot 
+ 00031045  0x000081cc loop  0x0000791f 
+ 00031046  0x000081cd arg  0x000006e6 , 0x00000006 
+ 00031047  0x000081ce force  0x00000000 , 0x00000038 
+ 00031048  0x000081d0 ifetch  0x00000004 , 0x00000006 
+ 00031049  0x000081d1 iadd  0x0000002f , 0x0000002f 
+ 00031050  0x000081d2 increase  0x00000001 , 0x00000038 
+ 00031051  0x000081d3 compare  0x00000008 , 0x00000038 , 0x000000ff 
+ 00031052  0x000081d4 nbranch  0x00007948 , 0x00000001 
+ 00031053  0x000081d5 branch  0x000074bd 
+ 00031054  0x000081d9 arg  0x00000a3e , 0x00000005 
+ 00031055  0x000081da force  0x00000007 , 0x00000038 
+ 00031056  0x000081dc deposit  0x0000002f 
+ 00031057  0x000081dd istore  0x00000004 , 0x00000005 
+ 00031058  0x000081de increase  0xffffffff , 0x00000038 
+ 00031059  0x000081df branch  0x00007950 , 0x00000002 
+ 00031060  0x000081e0 rtn 
+ 00031061  0x000081e4 arg  0x000005e6 , 0x00000005 
+ 00031062  0x000081e5 increase  0xfffffffc , 0x00000006 
+ 00031063  0x000081e6 sub  0x00000039 , 0x00000010 , 0x00000011 
+ 00031064  0x000081e8 ifetch  0x00000004 , 0x00000006 
+ 00031065  0x000081e9 ixor  0x00000002 , 0x0000003f 
+ 00031066  0x000081ea istore  0x00000004 , 0x00000005 
+ 00031067  0x000081eb increase  0xfffffff8 , 0x00000006 
+ 00031068  0x000081ec loop  0x00007958 
+ 00031069  0x000081ed copy  0x00000011 , 0x00000039 
+ 00031070  0x000081ee deposit  0x00000002 
+ 00031071  0x000081f0 istore  0x00000004 , 0x00000005 
+ 00031072  0x000081f1 loop  0x0000795f 
+ 00031073  0x000081f2 rtn 
+ 00031074  0x000081f5 call  0x00007967 
+ 00031075  0x000081f6 call  0x0000794e 
+ 00031076  0x000081f7 branch  0x0000798d 
+ 00031077  0x000081fa call  0x00007967 
+ 00031078  0x000081fb branch  0x0000798d 
+ 00031079  0x000081fe arg  0x000009de , 0x00000006 
+ 00031080  0x000081ff arg  0x000005e6 , 0x00000005 
+ 00031081  0x00008200 force  0x00000006 , 0x00000039 
+ 00031082  0x00008201 call  0x00007a71 
+ 00031083  0x00008202 arg  0x00004642 , 0x00000006 
+ 00031084  0x00008203 force  0x00000006 , 0x00000039 
+ 00031085  0x00008204 call  0x00007a71 
+ 00031086  0x00008205 arg  0x00000a3e , 0x00000006 
+ 00031087  0x00008206 call  0x00007a70 
+ 00031088  0x00008207 call  0x0000790b 
+ 00031089  0x00008208 call  0x00007912 
+ 00031090  0x00008209 arg  0x00000a2e , 0x00000006 
+ 00031091  0x0000820a arg  0x000005e6 , 0x00000005 
+ 00031092  0x0000820b branch  0x00007984 
+ 00031093  0x0000820e arg  0x00004642 , 0x00000006 
+ 00031094  0x0000820f arg  0x000005e6 , 0x00000005 
+ 00031095  0x00008210 force  0x00000006 , 0x00000039 
+ 00031096  0x00008211 call  0x00007a71 
+ 00031097  0x00008212 arg  0x000009de , 0x00000006 
+ 00031098  0x00008213 force  0x00000006 , 0x00000039 
+ 00031099  0x00008214 call  0x00007a71 
+ 00031100  0x00008215 arg  0x00000a2e , 0x00000006 
+ 00031101  0x00008216 call  0x00007a70 
+ 00031102  0x00008217 call  0x0000790b 
+ 00031103  0x00008218 call  0x00007912 
+ 00031104  0x00008219 arg  0x00000a3e , 0x00000006 
+ 00031105  0x0000821a arg  0x000005e6 , 0x00000005 
+ 00031106  0x0000821b call  0x00007984 
+ 00031107  0x0000821c branch  0x0000798d 
+ 00031108  0x0000821f call  0x00007a70 
+ 00031109  0x00008220 setarg  0x00800000 
+ 00031110  0x00008221 lshift8  0x0000003f , 0x0000003f 
+ 00031111  0x00008222 istore  0x00000004 , 0x00000005 
+ 00031112  0x00008223 force  0x00000005 , 0x00000039 
+ 00031113  0x00008224 call  0x00007ec6 
+ 00031114  0x00008225 setarg  0x00000280 
+ 00031115  0x00008226 istore  0x00000004 , 0x00000005 
+ 00031116  0x00008227 branch  0x00007912 
+ 00031117  0x00008229 fetch  0x00000004 , 0x00000a3e 
+ 00031118  0x0000822b arg  0x000003e8 , 0x00000011 
+ 00031119  0x0000822c idiv  0x00000011 
+ 00031120  0x0000822d call  0x00007f86 
+ 00031121  0x0000822e remainder  0x0000003f 
+ 00031122  0x0000822f store  0x00000004 , 0x000009ba 
+ 00031123  0x00008230 quotient  0x0000003f 
+ 00031124  0x00008231 arg  0x000003e8 , 0x00000011 
+ 00031125  0x00008232 idiv  0x00000011 
+ 00031126  0x00008233 call  0x00007f86 
+ 00031127  0x00008234 remainder  0x0000003f 
+ 00031128  0x00008235 arg  0x000003e8 , 0x00000011 
+ 00031129  0x00008236 imul32  0x00000011 , 0x0000003f 
+ 00031130  0x00008237 fetcht  0x00000004 , 0x000009ba 
+ 00031131  0x00008238 iadd  0x00000002 , 0x0000003f 
+ 00031132  0x00008239 store  0x00000004 , 0x000009ba 
+ 00031133  0x0000823a rtn 
+ 00031134  0x0000823d jam  0x00000000 , 0x00004664 
+ 00031135  0x0000823e branch  0x000079a2 
+ 00031136  0x00008241 fetch  0x00000001 , 0x00004662 
+ 00031137  0x00008242 bne  0x00000002 , 0x0000799e 
+ 00031138  0x00008244 bpatchx  0x000000ed , 0x0000403d 
+ 00031139  0x00008245 setarg  0x00363636 
+ 00031140  0x00008246 lshift8  0x0000003f , 0x00000002 
+ 00031141  0x00008247 or_into  0x00000036 , 0x00000002 
+ 00031142  0x00008248 fetch  0x00000002 , 0x00000a7e 
+ 00031143  0x00008249 copy  0x0000003f , 0x00000006 
+ 00031144  0x0000824a force  0x00000004 , 0x00000039 
+ 00031145  0x0000824b call  0x00007955 
+ 00031146  0x0000824c call  0x0000790b 
+ 00031147  0x0000824d call  0x00007912 
+ 00031148  0x0000824e fetch  0x00000002 , 0x00000a80 
+ 00031149  0x0000824f copy  0x0000003f , 0x00000006 
+ 00031150  0x00008250 arg  0x000005e6 , 0x00000005 
+ 00031151  0x00008251 force  0x00000006 , 0x00000039 
+ 00031152  0x00008252 call  0x00007a71 
+ 00031153  0x00008253 fetch  0x00000002 , 0x00000a82 
+ 00031154  0x00008254 copy  0x0000003f , 0x00000006 
+ 00031155  0x00008255 force  0x00000006 , 0x00000039 
+ 00031156  0x00008256 call  0x00007a71 
+ 00031157  0x00008257 setarg  0x00800000 
+ 00031158  0x00008258 istore  0x00000003 , 0x00000005 
+ 00031159  0x0000825a fetch  0x00000001 , 0x00004664 
+ 00031160  0x0000825c istore  0x00000001 , 0x00000005 
+ 00031161  0x0000825d force  0x00000000 , 0x0000003f 
+ 00031162  0x0000825e istore  0x00000008 , 0x00000005 
+ 00031163  0x0000825f setarg  0x00000388 
+ 00031164  0x00008260 istore  0x00000004 , 0x00000005 
+ 00031165  0x00008261 call  0x00007912 
+ 00031166  0x00008262 call  0x0000794e 
+ 00031167  0x00008263 arg  0x00000a3e , 0x00000006 
+ 00031168  0x00008264 arg  0x00000706 , 0x00000005 
+ 00031169  0x00008265 call  0x00007ebd 
+ 00031170  0x00008267 setarg  0x005c5c5c 
+ 00031171  0x00008268 lshift8  0x0000003f , 0x00000002 
+ 00031172  0x00008269 or_into  0x0000005c , 0x00000002 
+ 00031173  0x0000826a fetch  0x00000002 , 0x00000a7e 
+ 00031174  0x0000826b copy  0x0000003f , 0x00000006 
+ 00031175  0x0000826c force  0x00000004 , 0x00000039 
+ 00031176  0x0000826d call  0x00007955 
+ 00031177  0x0000826e call  0x0000790b 
+ 00031178  0x0000826f call  0x00007912 
+ 00031179  0x00008270 arg  0x00000726 , 0x00000006 
+ 00031180  0x00008271 arg  0x000005e6 , 0x00000005 
+ 00031181  0x00008272 force  0x00000008 , 0x00000039 
+ 00031182  0x00008273 call  0x00007a71 
+ 00031183  0x00008274 setarg  0x00800000 
+ 00031184  0x00008275 lshift8  0x0000003f , 0x0000003f 
+ 00031185  0x00008276 istore  0x00000004 , 0x00000005 
+ 00031186  0x00008277 call  0x00007ec5 
+ 00031187  0x00008278 setarg  0x00000300 
+ 00031188  0x00008279 istore  0x00000004 , 0x00000005 
+ 00031189  0x0000827a call  0x00007912 
+ 00031190  0x0000827b branch  0x0000794e 
+ 00031191  0x0000827f setarg  0x00363636 
+ 00031192  0x00008280 lshift8  0x0000003f , 0x00000002 
+ 00031193  0x00008281 or_into  0x00000036 , 0x00000002 
+ 00031194  0x00008282 arg  0x00000a1e , 0x00000006 
+ 00031195  0x00008283 force  0x00000006 , 0x00000039 
+ 00031196  0x00008284 call  0x00007955 
+ 00031197  0x00008285 call  0x0000790b 
+ 00031198  0x00008286 call  0x00007912 
+ 00031199  0x00008287 fetch  0x00000002 , 0x00000a8a 
+ 00031200  0x00008288 copy  0x0000003f , 0x00000006 
+ 00031201  0x00008289 arg  0x000005e6 , 0x00000005 
+ 00031202  0x0000828a call  0x00007a70 
+ 00031203  0x0000828b fetch  0x00000002 , 0x00000a8c 
+ 00031204  0x0000828c copy  0x0000003f , 0x00000006 
+ 00031205  0x0000828d call  0x00007a70 
+ 00031206  0x0000828f setarg  0x0062746c 
+ 00031207  0x00008290 lshift8  0x0000003f , 0x0000003f 
+ 00031208  0x00008291 or_into  0x0000006b , 0x0000003f 
+ 00031209  0x00008292 istore  0x00000004 , 0x00000005 
+ 00031210  0x00008293 arg  0x00000733 , 0x00000006 
+ 00031211  0x00008294 force  0x00000003 , 0x00000039 
+ 00031212  0x00008295 call  0x00007a71 
+ 00031213  0x00008297 setarg  0x00800000 
+ 00031214  0x00008298 lshift8  0x0000003f , 0x0000003f 
+ 00031215  0x00008299 istore  0x00000004 , 0x00000005 
+ 00031216  0x0000829a force  0x00000000 , 0x0000003f 
+ 00031217  0x0000829b istore  0x00000008 , 0x00000005 
+ 00031218  0x0000829c setarg  0x00000380 
+ 00031219  0x0000829d istore  0x00000004 , 0x00000005 
+ 00031220  0x0000829e call  0x00007912 
+ 00031221  0x000082a0 call  0x0000794e 
+ 00031222  0x000082a1 arg  0x00000a3e , 0x00000006 
+ 00031223  0x000082a2 arg  0x00000706 , 0x00000005 
+ 00031224  0x000082a3 call  0x00007ebd 
+ 00031225  0x000082a5 setarg  0x005c5c5c 
+ 00031226  0x000082a6 lshift8  0x0000003f , 0x00000002 
+ 00031227  0x000082a7 or_into  0x0000005c , 0x00000002 
+ 00031228  0x000082a8 arg  0x00000a1e , 0x00000006 
+ 00031229  0x000082a9 force  0x00000006 , 0x00000039 
+ 00031230  0x000082aa call  0x00007955 
+ 00031231  0x000082ab call  0x0000790b 
+ 00031232  0x000082ac call  0x00007912 
+ 00031233  0x000082ad arg  0x00000726 , 0x00000006 
+ 00031234  0x000082ae arg  0x000005e6 , 0x00000005 
+ 00031235  0x000082af force  0x00000008 , 0x00000039 
+ 00031236  0x000082b0 call  0x00007a71 
+ 00031237  0x000082b1 setarg  0x00800000 
+ 00031238  0x000082b2 lshift8  0x0000003f , 0x0000003f 
+ 00031239  0x000082b3 istore  0x00000004 , 0x00000005 
+ 00031240  0x000082b4 call  0x00007ec5 
+ 00031241  0x000082b5 setarg  0x00000300 
+ 00031242  0x000082b6 istore  0x00000004 , 0x00000005 
+ 00031243  0x000082b7 call  0x00007912 
+ 00031244  0x000082b8 branch  0x0000794e 
+ 00031245  0x000082bc fetch  0x00000001 , 0x00004662 
+ 00031246  0x000082bd bne  0x00000002 , 0x00007a1e 
+ 00031247  0x000082bf bpatchx  0x000000ee , 0x0000403d 
+ 00031248  0x000082c0 setarg  0x00363636 
+ 00031249  0x000082c1 lshift8  0x0000003f , 0x00000002 
+ 00031250  0x000082c2 or_into  0x00000036 , 0x00000002 
+ 00031251  0x000082c3 arg  0x00000a1e , 0x00000006 
+ 00031252  0x000082c4 force  0x00000006 , 0x00000039 
+ 00031253  0x000082c5 call  0x00007955 
+ 00031254  0x000082c6 call  0x0000790b 
+ 00031255  0x000082c7 call  0x00007912 
+ 00031256  0x000082c8 arg  0x00000a3e , 0x00000006 
+ 00031257  0x000082c9 arg  0x000005e6 , 0x00000005 
+ 00031258  0x000082ca call  0x00007a70 
+ 00031259  0x000082cb arg  0x00000a2e , 0x00000006 
+ 00031260  0x000082cc call  0x00007a70 
+ 00031261  0x000082cd branch  0x00007a33 
+ 00031262  0x000082d0 setarg  0x00000000 
+ 00031263  0x000082d1 store  0x00000004 , 0x0000468a 
+ 00031264  0x000082d2 branch  0x00007a0f 
+ 00031265  0x000082d5 setarg  0x00000000 
+ 00031266  0x000082d6 store  0x00000004 , 0x0000468a 
+ 00031267  0x000082d7 branch  0x00007a26 
+ 00031268  0x000082db fetch  0x00000001 , 0x00004662 
+ 00031269  0x000082dc bne  0x00000002 , 0x00007a21 
+ 00031270  0x000082de setarg  0x00363636 
+ 00031271  0x000082df lshift8  0x0000003f , 0x00000002 
+ 00031272  0x000082e0 or_into  0x00000036 , 0x00000002 
+ 00031273  0x000082e1 arg  0x00000a1e , 0x00000006 
+ 00031274  0x000082e2 force  0x00000006 , 0x00000039 
+ 00031275  0x000082e3 call  0x00007955 
+ 00031276  0x000082e4 call  0x0000790b 
+ 00031277  0x000082e5 call  0x00007912 
+ 00031278  0x000082e7 arg  0x00000a2e , 0x00000006 
+ 00031279  0x000082e8 arg  0x000005e6 , 0x00000005 
+ 00031280  0x000082e9 call  0x00007a70 
+ 00031281  0x000082ea arg  0x00000a3e , 0x00000006 
+ 00031282  0x000082eb call  0x00007a70 
+ 00031283  0x000082ed setarg  0x00000000 
+ 00031284  0x000082ee istore  0x00000008 , 0x00000005 
+ 00031285  0x000082ef istore  0x00000004 , 0x00000005 
+ 00031286  0x000082f0 fetch  0x00000004 , 0x0000468a 
+ 00031287  0x000082f1 istore  0x00000004 , 0x00000005 
+ 00031288  0x000082f3 copy  0x00000005 , 0x00000002 
+ 00031289  0x000082f4 jam  0x00000080 , 0x00000726 
+ 00031290  0x000082f5 copy  0x00000002 , 0x00000005 
+ 00031291  0x000082f6 arg  0x00000736 , 0x00000006 
+ 00031292  0x000082f7 call  0x00007a70 
+ 00031293  0x000082f9 call  0x00007912 
+ 00031294  0x000082fb arg  0x000005e6 , 0x00000005 
+ 00031295  0x000082fc force  0x00000007 , 0x00000039 
+ 00031296  0x000082fd call  0x00007ec6 
+ 00031297  0x000082fe istore  0x00000004 , 0x00000005 
+ 00031298  0x000082ff setarg  0x000003f8 
+ 00031299  0x00008300 istore  0x00000004 , 0x00000005 
+ 00031300  0x00008301 call  0x00007912 
+ 00031301  0x00008302 call  0x0000794e 
+ 00031302  0x00008304 arg  0x00000a3e , 0x00000006 
+ 00031303  0x00008305 arg  0x00000706 , 0x00000005 
+ 00031304  0x00008306 call  0x00007ebd 
+ 00031305  0x00008308 setarg  0x005c5c5c 
+ 00031306  0x00008309 lshift8  0x0000003f , 0x00000002 
+ 00031307  0x0000830a or_into  0x0000005c , 0x00000002 
+ 00031308  0x0000830b arg  0x00000a1e , 0x00000006 
+ 00031309  0x0000830c force  0x00000006 , 0x00000039 
+ 00031310  0x0000830d call  0x00007955 
+ 00031311  0x0000830e call  0x0000790b 
+ 00031312  0x0000830f call  0x00007912 
+ 00031313  0x00008310 arg  0x00000726 , 0x00000006 
+ 00031314  0x00008311 arg  0x000005e6 , 0x00000005 
+ 00031315  0x00008312 force  0x00000008 , 0x00000039 
+ 00031316  0x00008313 call  0x00007a71 
+ 00031317  0x00008314 setarg  0x00800000 
+ 00031318  0x00008315 lshift8  0x0000003f , 0x0000003f 
+ 00031319  0x00008316 istore  0x00000004 , 0x00000005 
+ 00031320  0x00008317 call  0x00007ec5 
+ 00031321  0x00008318 setarg  0x00000300 
+ 00031322  0x00008319 istore  0x00000004 , 0x00000005 
+ 00031323  0x0000831a call  0x00007912 
+ 00031324  0x0000831b branch  0x0000794e 
+ 00031325  0x00008323 jam  0x000000c0 , 0x000005e3 
+ 00031326  0x00008325 fetch  0x00000001 , 0x000005e3 
+ 00031327  0x00008326 rtn  0x00000034 
+ 00031328  0x00008327 increase  0xffffffff , 0x0000003f 
+ 00031329  0x00008328 store  0x00000001 , 0x000005e3 
+ 00031330  0x00008329 arg  0x000006be , 0x00000006 
+ 00031331  0x0000832a call  0x000076ec 
+ 00031332  0x0000832b branch  0x00007a5e , 0x00000001 
+ 00031333  0x0000832c arg  0x000005e6 , 0x00000006 
+ 00031334  0x0000832d arg  0x00000676 , 0x00000005 
+ 00031335  0x0000832e branch  0x000076f2 
+ 00031336  0x00008331 call  0x00007803 
+ 00031337  0x00008332 fetch  0x00000001 , 0x000005e3 
+ 00031338  0x00008333 increase  0xffffffff , 0x0000003f 
+ 00031339  0x00008334 store  0x00000001 , 0x000005e3 
+ 00031340  0x00008335 arg  0x000006be , 0x00000006 
+ 00031341  0x00008336 call  0x000076ec 
+ 00031342  0x00008337 rtn  0x00000001 
+ 00031343  0x00008338 branch  0x00007854 
+ 00031344  0x0000833b force  0x00000004 , 0x00000039 
+ 00031345  0x0000833d increase  0xfffffffc , 0x00000006 
+ 00031346  0x0000833f ifetch  0x00000004 , 0x00000006 
+ 00031347  0x00008340 istore  0x00000004 , 0x00000005 
+ 00031348  0x00008341 increase  0xfffffff8 , 0x00000006 
+ 00031349  0x00008342 loop  0x00007a72 
+ 00031350  0x00008343 rtn 
+ 00031351  0x00008349 bpatchx  0x000000ef , 0x0000403d 
+ 00031352  0x0000834a fetch  0x00000001 , 0x000044be 
+ 00031353  0x0000834b branch  0x00005af0 , 0x00000034 
+ 00031354  0x0000834c call  0x00005aec 
+ 00031355  0x0000834d call  0x00007583 
+ 00031356  0x0000834f branch  0x00007a7d 
+ 00031357  0x00008355 fetch  0x00000001 , 0x000044c3 
+ 00031358  0x00008356 rtnne  0x00000000 
+ 00031359  0x00008357 fetch  0x00000001 , 0x000044c0 
+ 00031360  0x00008358 rtnne  0x00000000 
+ 00031361  0x0000835a arg  0x000045b2 , 0x00000005 
+ 00031362  0x0000835b force  0x0000000f , 0x00000007 
+ 00031363  0x0000835c call  0x000076a2 
+ 00031364  0x0000835d random  0x0000003f 
+ 00031365  0x0000835e rshift  0x0000003f , 0x0000003f 
+ 00031366  0x0000835f istore  0x00000002 , 0x00000005 
+ 00031367  0x00008361 arg  0x00000766 , 0x00000005 
+ 00031368  0x00008362 arg  0x000045b2 , 0x00000006 
+ 00031369  0x00008363 call  0x00007ebd 
+ 00031370  0x00008365 arg  0x00000646 , 0x00000005 
+ 00031371  0x00008366 arg  0x0000095e , 0x00000006 
+ 00031372  0x00008367 call  0x00007eb3 
+ 00031373  0x00008369 arg  0x00000686 , 0x00000005 
+ 00031374  0x0000836a call  0x00007ed0 
+ 00031375  0x0000836b jam  0x00000001 , 0x00000686 
+ 00031376  0x0000836d call  0x00007ac7 
+ 00031377  0x0000836e jam  0x00000003 , 0x000044c0 
+ 00031378  0x0000836f rtn 
+ 00031379  0x00008372 arg  0x000045d2 , 0x00000005 
+ 00031380  0x00008373 arg  0x000006a6 , 0x00000006 
+ 00031381  0x00008374 call  0x00007eb3 
+ 00031382  0x00008375 jam  0x00000003 , 0x000044c3 
+ 00031383  0x00008376 jam  0x00000000 , 0x000044c0 
+ 00031384  0x00008377 rtn 
+ 00031385  0x0000837c fetch  0x00000001 , 0x000009b9 
+ 00031386  0x0000837d rtnne  0x00000000 
+ 00031387  0x0000837e fetch  0x00000001 , 0x000044c0 
+ 00031388  0x0000837f rtnne  0x00000000 
+ 00031389  0x00008381 arg  0x00000766 , 0x00000005 
+ 00031390  0x00008382 arg  0x000045b2 , 0x00000006 
+ 00031391  0x00008383 call  0x00007ebd 
+ 00031392  0x00008385 arg  0x00000646 , 0x00000005 
+ 00031393  0x00008386 arg  0x000009be , 0x00000006 
+ 00031394  0x00008387 call  0x00007eb3 
+ 00031395  0x00008389 arg  0x00000686 , 0x00000005 
+ 00031396  0x0000838a call  0x00007ed0 
+ 00031397  0x0000838b jam  0x00000001 , 0x00000686 
+ 00031398  0x0000838d call  0x00007ac7 
+ 00031399  0x0000838e jam  0x00000004 , 0x000044c0 
+ 00031400  0x0000838f rtn 
+ 00031401  0x00008394 arg  0x000009fe , 0x00000005 
+ 00031402  0x00008395 arg  0x000006a6 , 0x00000006 
+ 00031403  0x00008396 call  0x00007ebd 
+ 00031404  0x00008397 jam  0x00000003 , 0x000009b9 
+ 00031405  0x00008398 jam  0x00000000 , 0x000044c0 
+ 00031406  0x00008399 rtn 
+ 00031407  0x0000839e fetch  0x00000001 , 0x000044be 
+ 00031408  0x0000839f rtn  0x00000034 
+ 00031409  0x000083a0 fetch  0x00000001 , 0x000044c0 
+ 00031410  0x000083a1 rtn  0x00000034 
+ 00031411  0x000083a2 increase  0x00000080 , 0x0000003f 
+ 00031412  0x000083a3 store  0x00000001 , 0x000044c0 
+ 00031413  0x000083a4 rtnbit1  0x00000007 
+ 00031414  0x000083a5 fetch  0x00000002 , 0x000005e3 
+ 00031415  0x000083a6 branch  0x00007ab9 , 0x00000034 
+ 00031416  0x000083a7 branch  0x00007abf 
+ 00031417  0x000083aa bpatchx  0x000000f0 , 0x0000403e 
+ 00031418  0x000083ab call  0x00007ad4 
+ 00031419  0x000083ac fetch  0x00000001 , 0x000044c0 
+ 00031420  0x000083ad beq  0x00000003 , 0x00007a93 
+ 00031421  0x000083ae beq  0x00000004 , 0x00007aa9 
+ 00031422  0x000083af rtn 
+ 00031423  0x000083b3 call  0x00007ae6 
+ 00031424  0x000083b4 fetch  0x00000002 , 0x000005e3 
+ 00031425  0x000083b5 increase  0xffffffff , 0x0000003f 
+ 00031426  0x000083b6 store  0x00000002 , 0x000005e3 
+ 00031427  0x000083b7 arg  0x00000766 , 0x00000006 
+ 00031428  0x000083b8 call  0x000076ec 
+ 00031429  0x000083b9 rtn  0x00000001 
+ 00031430  0x000083ba branch  0x00007b37 
+ 00031431  0x000083bd bpatchx  0x000000f1 , 0x0000403e 
+ 00031432  0x000083be setarg  0x00000100 , 0x0000003f 
+ 00031433  0x000083bf store  0x00000002 , 0x000005e3 
+ 00031434  0x000083c1 fetch  0x00000002 , 0x000005e3 
+ 00031435  0x000083c2 rtn  0x00000034 
+ 00031436  0x000083c3 increase  0xffffffff , 0x0000003f 
+ 00031437  0x000083c4 store  0x00000002 , 0x000005e3 
+ 00031438  0x000083c5 arg  0x00000766 , 0x00000006 
+ 00031439  0x000083c6 call  0x000076ec 
+ 00031440  0x000083c7 branch  0x00007aca , 0x00000001 
+ 00031441  0x000083c8 arg  0x00000646 , 0x00000006 
+ 00031442  0x000083c9 arg  0x00000706 , 0x00000005 
+ 00031443  0x000083ca branch  0x00007eb2 
+ 00031444  0x000083ce arg  0x00000746 , 0x00000011 
+ 00031445  0x000083cf arg  0x00000846 , 0x00000005 
+ 00031446  0x000083d0 call  0x00007ba3 
+ 00031447  0x000083d1 arg  0x00000846 , 0x00000011 
+ 00031448  0x000083d2 arg  0x000007e6 , 0x00000005 
+ 00031449  0x000083d3 call  0x00007c79 
+ 00031450  0x000083d4 arg  0x00000706 , 0x00000011 
+ 00031451  0x000083d5 arg  0x000007e6 , 0x00000012 
+ 00031452  0x000083d6 arg  0x000006a6 , 0x00000005 
+ 00031453  0x000083d7 call  0x00007be1 
+ 00031454  0x000083d8 arg  0x00000846 , 0x00000011 
+ 00031455  0x000083d9 arg  0x000007e6 , 0x00000012 
+ 00031456  0x000083da arg  0x00000826 , 0x00000005 
+ 00031457  0x000083db call  0x00007be1 
+ 00031458  0x000083dc arg  0x00000726 , 0x00000011 
+ 00031459  0x000083dd arg  0x00000826 , 0x00000012 
+ 00031460  0x000083de arg  0x000006c6 , 0x00000005 
+ 00031461  0x000083df branch  0x00007be1 
+ 00031462  0x000083e2 arg  0x00000746 , 0x00000011 
+ 00031463  0x000083e3 arg  0x00000826 , 0x00000005 
+ 00031464  0x000083e4 call  0x00007c79 
+ 00031465  0x000083e5 arg  0x00000826 , 0x00000011 
+ 00031466  0x000083e6 arg  0x00000846 , 0x00000005 
+ 00031467  0x000083e7 call  0x00007c79 
+ 00031468  0x000083e9 arg  0x0000093e , 0x00000011 
+ 00031469  0x000083ea arg  0x00000846 , 0x00000012 
+ 00031470  0x000083eb arg  0x00000846 , 0x00000005 
+ 00031471  0x000083ec call  0x00007be1 
+ 00031472  0x000083ed arg  0x00000706 , 0x00000011 
+ 00031473  0x000083ee arg  0x00000826 , 0x00000005 
+ 00031474  0x000083ef call  0x00007c79 
+ 00031475  0x000083f1 arg  0x00000826 , 0x00000006 
+ 00031476  0x000083f2 arg  0x000007e6 , 0x00000005 
+ 00031477  0x000083f3 call  0x00007ebd 
+ 00031478  0x000083f4 arg  0x000007e6 , 0x00000011 
+ 00031479  0x000083f5 call  0x00007c80 
+ 00031480  0x000083f6 arg  0x00000826 , 0x00000011 
+ 00031481  0x000083f7 arg  0x000007e6 , 0x00000012 
+ 00031482  0x000083f8 arg  0x00000826 , 0x00000005 
+ 00031483  0x000083f9 call  0x00007c7d 
+ 00031484  0x000083fb arg  0x00000826 , 0x00000011 
+ 00031485  0x000083fc arg  0x00000846 , 0x00000012 
+ 00031486  0x000083fd arg  0x00000826 , 0x00000005 
+ 00031487  0x000083fe call  0x00007c7d 
+ 00031488  0x00008400 arg  0x00000706 , 0x00000006 
+ 00031489  0x00008401 arg  0x000007e6 , 0x00000005 
+ 00031490  0x00008402 call  0x00007ebd 
+ 00031491  0x00008403 arg  0x00000726 , 0x00000011 
+ 00031492  0x00008404 arg  0x00000846 , 0x00000005 
+ 00031493  0x00008405 call  0x00007c79 
+ 00031494  0x00008406 arg  0x000007e6 , 0x00000011 
+ 00031495  0x00008407 call  0x00007c80 
+ 00031496  0x00008408 arg  0x000007e6 , 0x00000011 
+ 00031497  0x00008409 call  0x00007c80 
+ 00031498  0x0000840a arg  0x000007e6 , 0x00000011 
+ 00031499  0x0000840b arg  0x00000846 , 0x00000012 
+ 00031500  0x0000840c arg  0x000007e6 , 0x00000005 
+ 00031501  0x0000840d call  0x00007be1 
+ 00031502  0x0000840e arg  0x00000846 , 0x00000011 
+ 00031503  0x0000840f arg  0x00000806 , 0x00000005 
+ 00031504  0x00008410 call  0x00007c79 
+ 00031505  0x00008411 arg  0x00000806 , 0x00000011 
+ 00031506  0x00008412 call  0x00007c80 
+ 00031507  0x00008413 arg  0x00000806 , 0x00000011 
+ 00031508  0x00008414 call  0x00007c80 
+ 00031509  0x00008415 arg  0x00000806 , 0x00000011 
+ 00031510  0x00008416 call  0x00007c80 
+ 00031511  0x00008417 arg  0x00000726 , 0x00000006 
+ 00031512  0x00008418 arg  0x00000846 , 0x00000005 
+ 00031513  0x00008419 call  0x00007ebd 
+ 00031514  0x0000841a arg  0x00000846 , 0x00000011 
+ 00031515  0x0000841b call  0x00007c80 
+ 00031516  0x0000841c arg  0x00000846 , 0x00000011 
+ 00031517  0x0000841d arg  0x00000746 , 0x00000012 
+ 00031518  0x0000841e arg  0x00000746 , 0x00000005 
+ 00031519  0x0000841f call  0x00007be1 
+ 00031520  0x00008422 arg  0x00000826 , 0x00000011 
+ 00031521  0x00008423 arg  0x00000846 , 0x00000005 
+ 00031522  0x00008424 call  0x00007c79 
+ 00031523  0x00008426 arg  0x00000846 , 0x00000011 
+ 00031524  0x00008427 arg  0x000007e6 , 0x00000012 
+ 00031525  0x00008428 arg  0x00000846 , 0x00000005 
+ 00031526  0x00008429 call  0x00007c96 
+ 00031527  0x0000842a arg  0x00000846 , 0x00000011 
+ 00031528  0x0000842b arg  0x000007e6 , 0x00000012 
+ 00031529  0x0000842c arg  0x00000706 , 0x00000005 
+ 00031530  0x0000842d call  0x00007c96 
+ 00031531  0x0000842e arg  0x000007e6 , 0x00000011 
+ 00031532  0x0000842f arg  0x00000706 , 0x00000012 
+ 00031533  0x00008430 arg  0x00000846 , 0x00000005 
+ 00031534  0x00008431 call  0x00007c96 
+ 00031535  0x00008432 arg  0x00000846 , 0x00000011 
+ 00031536  0x00008433 arg  0x00000826 , 0x00000012 
+ 00031537  0x00008434 arg  0x00000846 , 0x00000005 
+ 00031538  0x00008435 call  0x00007be1 
+ 00031539  0x00008436 arg  0x00000846 , 0x00000011 
+ 00031540  0x00008437 arg  0x00000806 , 0x00000012 
+ 00031541  0x00008438 arg  0x00000726 , 0x00000005 
+ 00031542  0x00008439 branch  0x00007c96 
+ 00031543  0x0000843d arg  0x00000686 , 0x00000011 
+ 00031544  0x0000843e arg  0x00000866 , 0x00000005 
+ 00031545  0x0000843f call  0x00007c79 
+ 00031546  0x00008440 arg  0x00000706 , 0x00000011 
+ 00031547  0x00008441 arg  0x00000866 , 0x00000012 
+ 00031548  0x00008442 arg  0x00000806 , 0x00000005 
+ 00031549  0x00008443 call  0x00007be1 
+ 00031550  0x00008446 arg  0x00000686 , 0x00000011 
+ 00031551  0x00008447 arg  0x00000866 , 0x00000012 
+ 00031552  0x00008448 arg  0x00000866 , 0x00000005 
+ 00031553  0x00008449 call  0x00007be1 
+ 00031554  0x0000844a arg  0x00000726 , 0x00000011 
+ 00031555  0x0000844b arg  0x00000866 , 0x00000012 
+ 00031556  0x0000844c arg  0x000007e6 , 0x00000005 
+ 00031557  0x0000844d call  0x00007be1 
+ 00031558  0x00008450 arg  0x00000746 , 0x00000011 
+ 00031559  0x00008451 arg  0x00000866 , 0x00000005 
+ 00031560  0x00008452 call  0x00007c79 
+ 00031561  0x00008453 arg  0x00000646 , 0x00000011 
+ 00031562  0x00008454 arg  0x00000866 , 0x00000012 
+ 00031563  0x00008455 arg  0x00000826 , 0x00000005 
+ 00031564  0x00008456 call  0x00007be1 
+ 00031565  0x00008458 arg  0x00000746 , 0x00000011 
+ 00031566  0x00008459 arg  0x00000866 , 0x00000012 
+ 00031567  0x0000845a arg  0x00000866 , 0x00000005 
+ 00031568  0x0000845b call  0x00007be1 
+ 00031569  0x0000845c arg  0x00000666 , 0x00000011 
+ 00031570  0x0000845d arg  0x00000866 , 0x00000012 
+ 00031571  0x0000845e arg  0x00000846 , 0x00000005 
+ 00031572  0x0000845f call  0x00007be1 
+ 00031573  0x00008464 arg  0x00000806 , 0x00000012 
+ 00031574  0x00008465 arg  0x00000826 , 0x00000011 
+ 00031575  0x00008466 arg  0x00000866 , 0x00000005 
+ 00031576  0x00008467 call  0x00007c96 
+ 00031577  0x00008468 arg  0x00000806 , 0x00000011 
+ 00031578  0x00008469 arg  0x00000826 , 0x00000012 
+ 00031579  0x0000846a arg  0x00000806 , 0x00000005 
+ 00031580  0x0000846b call  0x00007c7d 
+ 00031581  0x0000846e arg  0x000007e6 , 0x00000012 
+ 00031582  0x0000846f arg  0x00000846 , 0x00000011 
+ 00031583  0x00008470 arg  0x00000826 , 0x00000005 
+ 00031584  0x00008471 call  0x00007c96 
+ 00031585  0x00008472 arg  0x000007e6 , 0x00000011 
+ 00031586  0x00008473 arg  0x00000846 , 0x00000012 
+ 00031587  0x00008474 arg  0x000007e6 , 0x00000005 
+ 00031588  0x00008475 call  0x00007c7d 
+ 00031589  0x00008476 arg  0x000007e6 , 0x00000011 
+ 00031590  0x00008477 arg  0x00000866 , 0x00000012 
+ 00031591  0x00008478 arg  0x000007e6 , 0x00000005 
+ 00031592  0x00008479 call  0x00007be1 
+ 00031593  0x0000847a arg  0x00000746 , 0x00000011 
+ 00031594  0x0000847b arg  0x00000686 , 0x00000012 
+ 00031595  0x0000847c arg  0x00000846 , 0x00000005 
+ 00031596  0x0000847d call  0x00007be1 
+ 00031597  0x0000847e arg  0x00000846 , 0x00000011 
+ 00031598  0x0000847f arg  0x00000866 , 0x00000012 
+ 00031599  0x00008480 arg  0x00000746 , 0x00000005 
+ 00031600  0x00008481 call  0x00007be1 
+ 00031601  0x00008483 arg  0x00000866 , 0x00000011 
+ 00031602  0x00008484 arg  0x00000866 , 0x00000005 
+ 00031603  0x00008485 call  0x00007c79 
+ 00031604  0x00008486 arg  0x00000866 , 0x00000011 
+ 00031605  0x00008487 arg  0x00000806 , 0x00000012 
+ 00031606  0x00008488 arg  0x00000846 , 0x00000005 
+ 00031607  0x00008489 call  0x00007be1 
+ 00031608  0x0000848a arg  0x00000866 , 0x00000011 
+ 00031609  0x0000848b arg  0x000007e6 , 0x00000012 
+ 00031610  0x0000848c arg  0x000007e6 , 0x00000005 
+ 00031611  0x0000848d call  0x00007be1 
+ 00031612  0x0000848e arg  0x00000826 , 0x00000011 
+ 00031613  0x0000848f arg  0x00000706 , 0x00000005 
+ 00031614  0x00008490 call  0x00007c79 
+ 00031615  0x00008491 arg  0x00000706 , 0x00000011 
+ 00031616  0x00008492 arg  0x00000846 , 0x00000012 
+ 00031617  0x00008493 arg  0x00000706 , 0x00000005 
+ 00031618  0x00008494 call  0x00007c96 
+ 00031619  0x00008495 arg  0x00000706 , 0x00000006 
+ 00031620  0x00008496 arg  0x00000866 , 0x00000005 
+ 00031621  0x00008497 call  0x00007ebd 
+ 00031622  0x00008498 arg  0x00000866 , 0x00000011 
+ 00031623  0x00008499 call  0x00007c80 
+ 00031624  0x0000849a arg  0x00000846 , 0x00000011 
+ 00031625  0x0000849b arg  0x00000866 , 0x00000012 
+ 00031626  0x0000849c arg  0x00000846 , 0x00000005 
+ 00031627  0x0000849d call  0x00007c96 
+ 00031628  0x0000849e arg  0x00000846 , 0x00000011 
+ 00031629  0x0000849f arg  0x00000826 , 0x00000012 
+ 00031630  0x000084a0 arg  0x00000826 , 0x00000005 
+ 00031631  0x000084a1 call  0x00007be1 
+ 00031632  0x000084a2 arg  0x00000826 , 0x00000011 
+ 00031633  0x000084a3 arg  0x000007e6 , 0x00000012 
+ 00031634  0x000084a4 arg  0x00000726 , 0x00000005 
+ 00031635  0x000084a5 call  0x00007c96 
+ 00031636  0x000084a6 arg  0x00000726 , 0x00000011 
+ 00031637  0x000084a7 arg  0x0000091e , 0x00000012 
+ 00031638  0x000084a8 arg  0x00000726 , 0x00000005 
+ 00031639  0x000084a9 force  0x00000000 , 0x00000013 
+ 00031640  0x000084aa fetch  0x00000001 , 0x00000726 
+ 00031641  0x000084ab isolate1  0x00000000 , 0x0000003f 
+ 00031642  0x000084ac call  0x00007c7b , 0x00000001 
+ 00031643  0x000084ad copy  0x00000013 , 0x00000030 
+ 00031644  0x000084ae arg  0x00000726 , 0x00000011 
+ 00031645  0x000084af call  0x00007cab 
+ 00031646  0x000084b0 fetch  0x00000001 , 0x00000745 
+ 00031647  0x000084b1 isolate1  0x00000000 , 0x00000030 
+ 00031648  0x000084b2 setflag  0x00000001 , 0x00000007 , 0x0000003f 
+ 00031649  0x000084b3 store  0x00000001 , 0x00000745 
+ 00031650  0x000084b4 rtn 
+ 00031651  0x000084b7 copy  0x00000005 , 0x0000000b 
+ 00031652  0x000084b8 arg  0x00000806 , 0x00000005 
+ 00031653  0x000084b9 call  0x00007ed0 
+ 00031654  0x000084ba force  0x00000000 , 0x0000003f 
+ 00031655  0x000084bc store  0x00000004 , 0x00000826 
+ 00031656  0x000084bd jam  0x00000001 , 0x00000806 
+ 00031657  0x000084be arg  0x00000786 , 0x00000005 
+ 00031658  0x000084bf call  0x00007ed2 
+ 00031659  0x000084c0 arg  0x0000091e , 0x00000006 
+ 00031660  0x000084c1 arg  0x000007c6 , 0x00000005 
+ 00031661  0x000084c2 call  0x00007ebd 
+ 00031662  0x000084c3 copy  0x00000011 , 0x00000006 
+ 00031663  0x000084c4 arg  0x000007e6 , 0x00000005 
+ 00031664  0x000084c5 call  0x00007ebd 
+ 00031665  0x000084cc arg  0x000007e6 , 0x00000006 
+ 00031666  0x000084cd call  0x00007cb5 
+ 00031667  0x000084ce branch  0x00007bda , 0x00000034 
+ 00031668  0x000084d3 arg  0x000007e6 , 0x00000011 
+ 00031669  0x000084d4 arg  0x00000806 , 0x00000012 
+ 00031670  0x000084d5 call  0x00007cb8 
+ 00031671  0x000084d6 arg  0x000007c6 , 0x00000011 
+ 00031672  0x000084d7 arg  0x00000786 , 0x00000012 
+ 00031673  0x000084d8 call  0x00007cb8 
+ 00031674  0x000084da arg  0x000007e6 , 0x00000011 
+ 00031675  0x000084db arg  0x000007c6 , 0x00000012 
+ 00031676  0x000084dc call  0x00007cb1 
+ 00031677  0x000084dd branch  0x00007bcc , 0x00000002 
+ 00031678  0x000084de arg  0x000007c6 , 0x00000011 
+ 00031679  0x000084df arg  0x000007e6 , 0x00000012 
+ 00031680  0x000084e0 copy  0x00000011 , 0x00000005 
+ 00031681  0x000084e1 call  0x00007ca9 
+ 00031682  0x000084e2 arg  0x00000806 , 0x00000011 
+ 00031683  0x000084e3 arg  0x00000786 , 0x00000012 
+ 00031684  0x000084e4 copy  0x00000012 , 0x00000005 
+ 00031685  0x000084e5 call  0x00007c7b 
+ 00031686  0x000084e6 ifetch  0x00000001 , 0x00000011 
+ 00031687  0x000084e7 iadd  0x00000013 , 0x00000013 
+ 00031688  0x000084e8 ifetch  0x00000001 , 0x00000012 
+ 00031689  0x000084e9 iadd  0x00000013 , 0x0000003f 
+ 00031690  0x000084ea istore  0x00000001 , 0x00000012 
+ 00031691  0x000084eb branch  0x00007bb1 
+ 00031692  0x000084ed arg  0x000007e6 , 0x00000011 
+ 00031693  0x000084ee arg  0x000007c6 , 0x00000012 
+ 00031694  0x000084ef copy  0x00000011 , 0x00000005 
+ 00031695  0x000084f0 call  0x00007ca9 
+ 00031696  0x000084f1 arg  0x00000786 , 0x00000011 
+ 00031697  0x000084f2 arg  0x00000806 , 0x00000012 
+ 00031698  0x000084f3 copy  0x00000012 , 0x00000005 
+ 00031699  0x000084f4 call  0x00007c7b 
+ 00031700  0x000084f5 ifetch  0x00000001 , 0x00000011 
+ 00031701  0x000084f6 iadd  0x00000013 , 0x00000013 
+ 00031702  0x000084f7 ifetch  0x00000001 , 0x00000012 
+ 00031703  0x000084f8 iadd  0x00000013 , 0x0000003f 
+ 00031704  0x000084f9 istore  0x00000001 , 0x00000012 
+ 00031705  0x000084fa branch  0x00007bb1 
+ 00031706  0x000084fd arg  0x00000786 , 0x00000011 
+ 00031707  0x000084fe copy  0x0000000b , 0x00000005 
+ 00031708  0x000084ff call  0x00007c0a 
+ 00031709  0x00008501 arg  0x0000091e , 0x00000011 
+ 00031710  0x00008502 copy  0x0000000b , 0x00000012 
+ 00031711  0x00008503 copy  0x0000000b , 0x00000005 
+ 00031712  0x00008504 branch  0x00007c96 
+ 00031713  0x00008508 copy  0x00000005 , 0x0000000b 
+ 00031714  0x0000850a force  0x00000000 , 0x00000038 
+ 00031715  0x0000850c arg  0x00000786 , 0x00000005 
+ 00031716  0x0000850d call  0x00007ed2 
+ 00031717  0x0000850e arg  0x00000ad2 , 0x00000005 
+ 00031718  0x0000850f call  0x00007ed2 
+ 00031719  0x00008513 copy  0x00000011 , 0x00000006 
+ 00031720  0x00008515 jam  0x00000000 , 0x00000ad2 
+ 00031721  0x00008516 setarg  0x00000000 
+ 00031722  0x00008517 call  0x00007c73 
+ 00031723  0x00008518 copy  0x00000012 , 0x00000006 
+ 00031724  0x00008519 call  0x00007c77 
+ 00031725  0x0000851c force  0x00000000 , 0x00000007 
+ 00031726  0x0000851d arg  0x00000786 , 0x00000005 
+ 00031727  0x00008521 arg  0x00000ad2 , 0x00000002 
+ 00031728  0x00008522 copy  0x00000007 , 0x00000012 
+ 00031729  0x00008523 lshift2  0x00000012 , 0x0000003f 
+ 00031730  0x00008525 iadd  0x00000002 , 0x00000012 
+ 00031731  0x00008526 force  0x00000000 , 0x00000002 
+ 00031732  0x00008527 force  0x00000000 , 0x00000013 
+ 00031733  0x0000852d ifetch  0x00000004 , 0x00000005 
+ 00031734  0x0000852e iforce  0x00000011 
+ 00031735  0x00008531 ifetch  0x00000004 , 0x00000012 
+ 00031736  0x00008532 copy  0x00000013 , 0x00000038 
+ 00031737  0x00008533 imul32  0x0000002f , 0x0000003f 
+ 00031738  0x00008534 iadd  0x00000011 , 0x0000003f 
+ 00031739  0x00008535 iadd  0x00000002 , 0x0000003f 
+ 00031740  0x00008536 istore  0x00000004 , 0x00000005 
+ 00031741  0x00008537 rshift32  0x0000003f , 0x00000002 
+ 00031742  0x00008538 increase  0x00000001 , 0x00000013 
+ 00031743  0x00008539 compare  0x00000008 , 0x00000013 , 0x000000ff 
+ 00031744  0x0000853a nbranch  0x00007bf5 , 0x00000001 
+ 00031745  0x0000853c deposit  0x00000002 
+ 00031746  0x0000853d istore  0x00000004 , 0x00000005 
+ 00031747  0x0000853e increase  0xffffffe0 , 0x00000005 
+ 00031748  0x00008541 increase  0x00000001 , 0x00000007 
+ 00031749  0x00008542 compare  0x00000008 , 0x00000007 , 0x000000ff 
+ 00031750  0x00008543 nbranch  0x00007bef , 0x00000001 
+ 00031751  0x00008544 arg  0x00000786 , 0x00000011 
+ 00031752  0x00008545 copy  0x0000000b , 0x00000005 
+ 00031753  0x00008546 branch  0x00007c0a 
+ 00031754  0x00008549 bpatchx  0x000000f2 , 0x0000403e 
+ 00031755  0x0000854a copy  0x00000005 , 0x0000000b 
+ 00031756  0x0000854b copy  0x00000011 , 0x00000030 
+ 00031757  0x0000854c arg  0x000007c6 , 0x00000012 
+ 00031758  0x0000854d copy  0x00000012 , 0x00000005 
+ 00031759  0x0000854e call  0x00007ecd 
+ 00031760  0x0000854f istore  0x00000008 , 0x00000005 
+ 00031761  0x00008550 add  0x00000011 , 0x0000002c , 0x00000006 
+ 00031762  0x00008551 call  0x00007eb9 
+ 00031763  0x00008552 call  0x00007eb5 
+ 00031764  0x00008553 copy  0x00000012 , 0x00000011 
+ 00031765  0x00008554 call  0x00007c80 
+ 00031766  0x00008555 arg  0x000007c6 , 0x00000012 
+ 00031767  0x00008556 copy  0x00000030 , 0x00000011 
+ 00031768  0x00008557 copy  0x0000000b , 0x00000005 
+ 00031769  0x00008558 call  0x00007c7d 
+ 00031770  0x0000855a arg  0x000007c6 , 0x00000012 
+ 00031771  0x0000855b copy  0x00000012 , 0x00000005 
+ 00031772  0x0000855c call  0x00007ecd 
+ 00031773  0x0000855d istore  0x00000008 , 0x00000005 
+ 00031774  0x0000855e add  0x00000030 , 0x00000030 , 0x00000006 
+ 00031775  0x0000855f call  0x00007ebf 
+ 00031776  0x00008560 call  0x00007ecd 
+ 00031777  0x00008561 copy  0x00000012 , 0x00000011 
+ 00031778  0x00008562 call  0x00007c80 
+ 00031779  0x00008566 arg  0x000007c6 , 0x00000012 
+ 00031780  0x00008567 copy  0x0000000b , 0x00000011 
+ 00031781  0x00008568 copy  0x00000011 , 0x00000005 
+ 00031782  0x00008569 call  0x00007c7d 
+ 00031783  0x0000856d arg  0x000007c6 , 0x00000012 
+ 00031784  0x0000856e copy  0x00000012 , 0x00000005 
+ 00031785  0x0000856f add  0x00000030 , 0x00000020 , 0x00000006 
+ 00031786  0x00008570 call  0x00007eb5 
+ 00031787  0x00008571 call  0x00007ecd 
+ 00031788  0x00008572 istore  0x00000008 , 0x00000005 
+ 00031789  0x00008573 add  0x00000030 , 0x00000038 , 0x00000006 
+ 00031790  0x00008574 call  0x00007eb9 
+ 00031791  0x00008575 copy  0x0000000b , 0x00000011 
+ 00031792  0x00008576 copy  0x00000011 , 0x00000005 
+ 00031793  0x00008577 call  0x00007c7d 
+ 00031794  0x0000857b arg  0x000007c6 , 0x00000012 
+ 00031795  0x0000857c copy  0x00000012 , 0x00000005 
+ 00031796  0x0000857d add  0x00000030 , 0x00000024 , 0x00000006 
+ 00031797  0x0000857e call  0x00007eb5 
+ 00031798  0x0000857f add  0x00000030 , 0x00000034 , 0x00000006 
+ 00031799  0x00008580 call  0x00007eb5 
+ 00031800  0x00008581 add  0x00000030 , 0x00000034 , 0x00000006 
+ 00031801  0x00008582 call  0x00007eb6 
+ 00031802  0x00008583 add  0x00000030 , 0x00000020 , 0x00000006 
+ 00031803  0x00008584 call  0x00007eb6 
+ 00031804  0x00008585 copy  0x0000000b , 0x00000011 
+ 00031805  0x00008586 copy  0x00000011 , 0x00000005 
+ 00031806  0x00008587 call  0x00007c7d 
+ 00031807  0x0000858a arg  0x000007c6 , 0x00000012 
+ 00031808  0x0000858b copy  0x00000012 , 0x00000005 
+ 00031809  0x0000858c add  0x00000030 , 0x0000002c , 0x00000006 
+ 00031810  0x0000858d call  0x00007eb5 
+ 00031811  0x0000858e call  0x00007ecd 
+ 00031812  0x0000858f istore  0x00000008 , 0x00000005 
+ 00031813  0x00008590 add  0x00000030 , 0x00000020 , 0x00000006 
+ 00031814  0x00008591 call  0x00007eb6 
+ 00031815  0x00008592 add  0x00000030 , 0x00000028 , 0x00000006 
+ 00031816  0x00008593 call  0x00007eb6 
+ 00031817  0x00008594 copy  0x0000000b , 0x00000011 
+ 00031818  0x00008595 copy  0x00000011 , 0x00000005 
+ 00031819  0x00008596 call  0x00007c96 
+ 00031820  0x00008599 arg  0x000007c6 , 0x00000012 
+ 00031821  0x0000859a copy  0x00000012 , 0x00000005 
+ 00031822  0x0000859b add  0x00000030 , 0x00000030 , 0x00000006 
+ 00031823  0x0000859c call  0x00007eb9 
+ 00031824  0x0000859d call  0x00007eb9 
+ 00031825  0x0000859e force  0x00000000 , 0x0000003f 
+ 00031826  0x0000859f istore  0x00000008 , 0x00000005 
+ 00031827  0x000085a0 add  0x00000030 , 0x00000024 , 0x00000006 
+ 00031828  0x000085a1 call  0x00007eb6 
+ 00031829  0x000085a2 add  0x00000030 , 0x0000002c , 0x00000006 
+ 00031830  0x000085a3 call  0x00007eb6 
+ 00031831  0x000085a4 copy  0x0000000b , 0x00000011 
+ 00031832  0x000085a5 copy  0x00000011 , 0x00000005 
+ 00031833  0x000085a6 call  0x00007c96 
+ 00031834  0x000085a9 arg  0x000007c6 , 0x00000012 
+ 00031835  0x000085aa copy  0x00000012 , 0x00000005 
+ 00031836  0x000085ab add  0x00000030 , 0x00000034 , 0x00000006 
+ 00031837  0x000085ac call  0x00007eb5 
+ 00031838  0x000085ad add  0x00000030 , 0x00000020 , 0x00000006 
+ 00031839  0x000085ae call  0x00007eb5 
+ 00031840  0x000085af call  0x00007ecd 
+ 00031841  0x000085b0 add  0x00000030 , 0x00000030 , 0x00000006 
+ 00031842  0x000085b1 call  0x00007eb6 
+ 00031843  0x000085b2 copy  0x0000000b , 0x00000011 
+ 00031844  0x000085b3 copy  0x00000011 , 0x00000005 
+ 00031845  0x000085b4 call  0x00007c96 
+ 00031846  0x000085b7 arg  0x000007c6 , 0x00000012 
+ 00031847  0x000085b8 copy  0x00000012 , 0x00000005 
+ 00031848  0x000085b9 add  0x00000030 , 0x00000038 , 0x00000006 
+ 00031849  0x000085ba call  0x00007eb9 
+ 00031850  0x000085bb call  0x00007ecd 
+ 00031851  0x000085bc add  0x00000030 , 0x00000024 , 0x00000006 
+ 00031852  0x000085bd call  0x00007eb5 
+ 00031853  0x000085be call  0x00007ecd 
+ 00031854  0x000085bf add  0x00000030 , 0x00000034 , 0x00000006 
+ 00031855  0x000085c0 call  0x00007eb6 
+ 00031856  0x000085c1 copy  0x0000000b , 0x00000011 
+ 00031857  0x000085c2 copy  0x00000011 , 0x00000005 
+ 00031858  0x000085c3 branch  0x00007c96 
+ 00031859  0x000085c7 force  0x00000020 , 0x00000039 
+ 00031860  0x000085c8 arg  0x00000ad2 , 0x00000005 
+ 00031861  0x000085c9 iadd  0x00000005 , 0x00000005 
+ 00031862  0x000085ca branch  0x00007f01 
+ 00031863  0x000085cd force  0x00000008 , 0x00000039 
+ 00031864  0x000085ce branch  0x00007781 
+ 00031865  0x000085d1 copy  0x00000011 , 0x00000012 
+ 00031866  0x000085d2 branch  0x00007be1 
+ 00031867  0x000085d5 force  0x00000008 , 0x00000039 
+ 00031868  0x000085d6 branch  0x00007712 
+ 00031869  0x000085d9 call  0x00007c7b 
+ 00031870  0x000085da copy  0x00000005 , 0x00000011 
+ 00031871  0x000085db branch  0x00007c81 
+ 00031872  0x000085de call  0x00007cae 
+ 00031873  0x000085e0 isolate1  0x00000000 , 0x00000013 
+ 00031874  0x000085e1 branch  0x00007c8a , 0x00000001 
+ 00031875  0x000085e2 arg  0x0000091e , 0x00000012 
+ 00031876  0x000085e3 copy  0x00000011 , 0x00000013 
+ 00031877  0x000085e4 increase  0xffffffe0 , 0x00000011 
+ 00031878  0x000085e5 call  0x00007cb1 
+ 00031879  0x000085e6 nrtn  0x00000002 
+ 00031880  0x000085e7 copy  0x00000013 , 0x00000011 
+ 00031881  0x000085e8 branch  0x00007c92 
+ 00031882  0x000085eb call  0x00007c92 
+ 00031883  0x000085ed copy  0x00000011 , 0x00000013 
+ 00031884  0x000085ee increase  0xffffffe0 , 0x00000011 
+ 00031885  0x000085ef arg  0x0000091e , 0x00000012 
+ 00031886  0x000085f0 call  0x00007cb1 
+ 00031887  0x000085f1 nrtn  0x00000002 
+ 00031888  0x000085f2 copy  0x00000013 , 0x00000011 
+ 00031889  0x000085f3 branch  0x00007c92 
+ 00031890  0x000085f7 increase  0xffffffe0 , 0x00000011 
+ 00031891  0x000085f8 arg  0x0000091e , 0x00000012 
+ 00031892  0x000085f9 copy  0x00000011 , 0x00000005 
+ 00031893  0x000085fa branch  0x00007ca9 
+ 00031894  0x00008600 call  0x00007ca9 
+ 00031895  0x00008602 branch  0x00007ca0 , 0x00000001 
+ 00031896  0x00008605 add  0x00000005 , 0xffffffe0 , 0x00000011 
+ 00031897  0x00008606 arg  0x0000091e , 0x00000012 
+ 00031898  0x00008607 call  0x00007cb1 
+ 00031899  0x00008608 nrtn  0x00000002 
+ 00031900  0x00008609 arg  0x0000091e , 0x00000012 
+ 00031901  0x0000860a add  0x00000005 , 0xffffffe0 , 0x00000011 
+ 00031902  0x0000860c copy  0x00000011 , 0x00000005 
+ 00031903  0x0000860d branch  0x00007ca9 
+ 00031904  0x0000860f add  0x00000005 , 0xffffffe0 , 0x00000011 
+ 00031905  0x00008610 arg  0x0000091e , 0x00000012 
+ 00031906  0x00008611 copy  0x00000011 , 0x00000005 
+ 00031907  0x00008612 call  0x00007c7b 
+ 00031908  0x00008614 rtn  0x00000001 
+ 00031909  0x00008615 add  0x00000005 , 0xffffffe0 , 0x00000011 
+ 00031910  0x00008616 arg  0x0000091e , 0x00000012 
+ 00031911  0x00008617 copy  0x00000011 , 0x00000005 
+ 00031912  0x00008618 branch  0x00007c7b 
+ 00031913  0x0000861d force  0x00000008 , 0x00000039 
+ 00031914  0x0000861e branch  0x00007720 
+ 00031915  0x00008621 force  0x00000008 , 0x00000039 
+ 00031916  0x00008622 increase  0x0000001c , 0x00000011 
+ 00031917  0x00008623 branch  0x0000772f 
+ 00031918  0x00008626 force  0x00000008 , 0x00000039 
+ 00031919  0x00008627 force  0x00000000 , 0x00000013 
+ 00031920  0x00008628 branch  0x0000773d 
+ 00031921  0x0000862b force  0x00000008 , 0x00000039 
+ 00031922  0x0000862c increase  0x0000001c , 0x00000011 
+ 00031923  0x0000862d increase  0x0000001c , 0x00000012 
+ 00031924  0x0000862e branch  0x00007707 
+ 00031925  0x00008632 ifetch  0x00000008 , 0x00000006 
+ 00031926  0x00008633 nrtn  0x00000034 
+ 00031927  0x00008634 branch  0x000076f5 
+ 00031928  0x0000863a copy  0x00000011 , 0x00000030 
+ 00031929  0x0000863c copy  0x00000030 , 0x00000011 
+ 00031930  0x0000863d ifetch  0x00000001 , 0x00000011 
+ 00031931  0x0000863e isolate1  0x00000000 , 0x0000003f 
+ 00031932  0x0000863f rtn  0x00000001 
+ 00031933  0x00008640 call  0x00007cab 
+ 00031934  0x00008641 ifetch  0x00000001 , 0x00000012 
+ 00031935  0x00008642 isolate0  0x00000000 , 0x0000003f 
+ 00031936  0x00008643 branch  0x00007cc8 , 0x00000001 
+ 00031937  0x00008644 arg  0x0000091e , 0x00000011 
+ 00031938  0x00008645 copy  0x00000012 , 0x00000005 
+ 00031939  0x00008646 call  0x00007c7b 
+ 00031940  0x00008647 ifetch  0x00000001 , 0x00000012 
+ 00031941  0x00008648 iadd  0x00000013 , 0x0000003f 
+ 00031942  0x00008649 istore  0x00000001 , 0x00000012 
+ 00031943  0x0000864a increase  0xffffffe0 , 0x00000012 
+ 00031944  0x0000864c add  0x00000012 , 0x00000020 , 0x00000011 
+ 00031945  0x0000864d force  0x00000009 , 0x00000039 
+ 00031946  0x0000864e call  0x0000772f 
+ 00031947  0x0000864f branch  0x00007cb9 
+ 00031948  0x00008654 call  0x00002c65 
+ 00031949  0x00008655 rtn  0x0000002b 
+ 00031950  0x00008656 call  0x00007cd3 
+ 00031951  0x00008657 call  0x00007d75 
+ 00031952  0x00008658 branch  0x00007d08 
+ 00031953  0x0000865b call  0x00007d29 
+ 00031954  0x0000865d branch  0x00007d64 
+ 00031955  0x00008660 fetch  0x00000001 , 0x00004686 
+ 00031956  0x00008661 rtneq  0x000000ff 
+ 00031957  0x00008662 iforce  0x00000002 
+ 00031958  0x00008663 call  0x0000680e 
+ 00031959  0x00008664 fetcht  0x00000001 , 0x00004686 
+ 00031960  0x00008665 call  0x00006825 
+ 00031961  0x00008666 nop  0x00000064 
+ 00031962  0x00008667 fetcht  0x00000001 , 0x00004686 
+ 00031963  0x00008668 call  0x000067fb 
+ 00031964  0x00008669 branch  0x00007cdd 
+ 00031965  0x0000866e bpatchx  0x000000f3 , 0x0000403e 
+ 00031966  0x0000866f fetch  0x00000001 , 0x00004686 
+ 00031967  0x00008670 rtneq  0x000000ff 
+ 00031968  0x00008671 copy  0x0000003f , 0x00000002 
+ 00031969  0x00008672 call  0x0000681d 
+ 00031970  0x00008673 nbranch  0x00007cef , 0x00000001 
+ 00031971  0x00008676 call  0x00007cf9 
+ 00031972  0x00008677 fetch  0x00000002 , 0x00004682 
+ 00031973  0x00008678 set1  0x0000000c 
+ 00031974  0x00008679 store  0x00000002 , 0x00004682 
+ 00031975  0x0000867a fetch  0x00000001 , 0x00004679 
+ 00031976  0x0000867b rtneq  0x00000000 
+ 00031977  0x0000867c jam  0x00000000 , 0x00004679 
+ 00031978  0x0000867e fetch  0x00000001 , 0x00004685 
+ 00031979  0x0000867f store  0x00000001 , 0x00004678 
+ 00031980  0x00008680 call  0x00007d00 
+ 00031981  0x00008681 jam  0x0000002c , 0x00000a99 
+ 00031982  0x00008682 branch  0x00007d86 
+ 00031983  0x00008684 fetch  0x00000002 , 0x00004682 
+ 00031984  0x00008685 set0  0x0000000c 
+ 00031985  0x00008686 store  0x00000002 , 0x00004682 
+ 00031986  0x00008687 fetch  0x00000001 , 0x00004679 
+ 00031987  0x00008688 rtneq  0x00000001 
+ 00031988  0x00008689 jam  0x00000001 , 0x00004679 
+ 00031989  0x0000868b jam  0x00000000 , 0x00004678 
+ 00031990  0x0000868c call  0x00007d02 
+ 00031991  0x0000868d jam  0x0000002d , 0x00000a99 
+ 00031992  0x0000868e branch  0x00007d86 
+ 00031993  0x00008691 fetch  0x00000001 , 0x00004678 
+ 00031994  0x00008692 rtn  0x00000034 
+ 00031995  0x00008693 increase  0xffffffff , 0x0000003f 
+ 00031996  0x00008694 store  0x00000001 , 0x00004678 
+ 00031997  0x00008695 nrtn  0x00000034 
+ 00031998  0x00008697 jam  0x00000010 , 0x00000a99 
+ 00031999  0x00008698 branch  0x00007d86 
+ 00032000  0x0000869b arg  0x00000007 , 0x00000007 
+ 00032001  0x0000869c branch  0x00002c32 
+ 00032002  0x0000869f arg  0x00000007 , 0x00000007 
+ 00032003  0x000086a0 branch  0x00002c36 
+ 00032004  0x000086b7 fetch  0x00000002 , 0x0000421b 
+ 00032005  0x000086b8 mul32  0x00000011 , 0x0000000b , 0x00000012 
+ 00032006  0x000086b9 iadd  0x00000012 , 0x00000012 
+ 00032007  0x000086ba rtn 
+ 00032008  0x000086be fetch  0x00000001 , 0x0000421a 
+ 00032009  0x000086bf rtn  0x00000034 
+ 00032010  0x000086c0 copy  0x0000003f , 0x00000039 
+ 00032011  0x000086c1 fetch  0x00000002 , 0x0000421b 
+ 00032012  0x000086c2 copy  0x0000003f , 0x00000012 
+ 00032013  0x000086c4 add  0x00000012 , 0x00000002 , 0x00000013 
+ 00032014  0x000086c5 ifetcht  0x00000001 , 0x00000013 
+ 00032015  0x000086c6 call  0x0000680e 
+ 00032016  0x000086c7 call  0x00007d32 
+ 00032017  0x000086c8 increase  0x0000000b , 0x00000012 
+ 00032018  0x000086c9 loop  0x00007d0d 
+ 00032019  0x000086ca rtn 
+ 00032020  0x000086cf call  0x00007d04 
+ 00032021  0x000086d0 setarg  0x00000002 
+ 00032022  0x000086d1 istore  0x00000001 , 0x00000012 
+ 00032023  0x000086d2 call  0x00007d5e 
+ 00032024  0x000086d3 branch  0x00007d35 
+ 00032025  0x000086d9 call  0x00007d04 
+ 00032026  0x000086da setarg  0x00000003 
+ 00032027  0x000086db istore  0x00000001 , 0x00000012 
+ 00032028  0x000086dc call  0x00007d5e 
+ 00032029  0x000086dd branch  0x00007d32 
+ 00032030  0x000086e2 call  0x00007d04 
+ 00032031  0x000086e3 setarg  0x00000001 
+ 00032032  0x000086e4 istore  0x00000001 , 0x00000012 
+ 00032033  0x000086e5 setarg  0x000000ff 
+ 00032034  0x000086e6 istore  0x00000001 , 0x00000005 
+ 00032035  0x000086e7 branch  0x00007d32 
+ 00032036  0x000086ed call  0x00007d04 
+ 00032037  0x000086ee arg  0x0000000b , 0x00000039 
+ 00032038  0x000086ef copy  0x00000013 , 0x00000006 
+ 00032039  0x000086f0 copy  0x00000012 , 0x00000005 
+ 00032040  0x000086f1 branch  0x00007ef4 
+ 00032041  0x000086f6 fetch  0x00000001 , 0x0000421a 
+ 00032042  0x000086f7 rtn  0x00000034 
+ 00032043  0x000086f8 arg  0x00000000 , 0x00000011 
+ 00032044  0x000086fa call  0x00007d38 
+ 00032045  0x000086fb increase  0x00000001 , 0x00000011 
+ 00032046  0x000086fc fetch  0x00000001 , 0x0000421a 
+ 00032047  0x000086fd isub  0x00000011 , 0x0000003e 
+ 00032048  0x000086fe rtn  0x00000005 
+ 00032049  0x000086ff branch  0x00007d2c 
+ 00032050  0x00008703 add  0x00000012 , 0x00000002 , 0x00000013 
+ 00032051  0x00008704 ifetcht  0x00000001 , 0x00000013 
+ 00032052  0x00008705 branch  0x00006825 
+ 00032053  0x00008709 add  0x00000012 , 0x00000002 , 0x00000013 
+ 00032054  0x0000870a ifetcht  0x00000001 , 0x00000013 
+ 00032055  0x0000870b branch  0x00006829 
+ 00032056  0x00008710 add  0x00000011 , 0x0000000b , 0x00000007 
+ 00032057  0x00008711 call  0x00007f16 
+ 00032058  0x00008712 nrtn  0x00000034 
+ 00032059  0x00008714 call  0x00007d04 
+ 00032060  0x00008716 ifetch  0x00000001 , 0x00000012 
+ 00032061  0x00008718 beq  0x00000002 , 0x00007d35 
+ 00032062  0x00008719 beq  0x00000003 , 0x00007d32 
+ 00032063  0x0000871a beq  0x00000000 , 0x00007d32 
+ 00032064  0x0000871b beq  0x00000005 , 0x00007d4c 
+ 00032065  0x0000871d call  0x00007d35 
+ 00032066  0x0000871e add  0x00000012 , 0x00000007 , 0x00000013 
+ 00032067  0x0000871f call  0x00007e7c 
+ 00032068  0x00008720 ifetch  0x00000002 , 0x00000013 
+ 00032069  0x00008721 call  0x00007f9c 
+ 00032070  0x00008722 call  0x00007e8c 
+ 00032071  0x00008723 setarg  0x00000005 
+ 00032072  0x00008724 istore  0x00000001 , 0x00000012 
+ 00032073  0x00008725 add  0x00000012 , 0x00000003 , 0x00000013 
+ 00032074  0x00008726 ifetch  0x00000002 , 0x00000013 
+ 00032075  0x00008727 branch  0x00007d5c 
+ 00032076  0x0000872b call  0x00007d32 
+ 00032077  0x0000872c add  0x00000012 , 0x00000009 , 0x00000013 
+ 00032078  0x0000872d call  0x00007e7c 
+ 00032079  0x0000872e ifetch  0x00000002 , 0x00000013 
+ 00032080  0x0000872f call  0x00007f9c 
+ 00032081  0x00008730 call  0x00007e8c 
+ 00032082  0x00008732 add  0x00000012 , 0x00000001 , 0x00000013 
+ 00032083  0x00008733 ifetch  0x00000001 , 0x00000013 
+ 00032084  0x00008734 beq  0x000000ff , 0x00007d58 
+ 00032085  0x00008735 increase  0xffffffff , 0x0000003f 
+ 00032086  0x00008736 istore  0x00000001 , 0x00000013 
+ 00032087  0x00008737 branch  0x00007d19 , 0x00000034 
+ 00032088  0x00008739 setarg  0x00000004 
+ 00032089  0x0000873a istore  0x00000001 , 0x00000012 
+ 00032090  0x0000873b add  0x00000012 , 0x00000005 , 0x00000013 
+ 00032091  0x0000873c ifetch  0x00000002 , 0x00000013 
+ 00032092  0x0000873e add  0x00000011 , 0x0000000b , 0x00000007 
+ 00032093  0x0000873f branch  0x00007f08 
+ 00032094  0x00008742 setarg  0x00000000 
+ 00032095  0x00008743 branch  0x00007d5c 
+ 00032096  0x0000874a setarg  0x00001000 
+ 00032097  0x0000874b lshift16  0x0000003f , 0x0000003f 
+ 00032098  0x0000874c iadd  0x00000012 , 0x00000012 
+ 00032099  0x0000874d rtn 
+ 00032100  0x00008750 bpatchx  0x000000f4 , 0x0000403e 
+ 00032101  0x00008751 arg  0x00000000 , 0x00000011 
+ 00032102  0x00008752 fetcht  0x00000004 , 0x0000467a 
+ 00032103  0x00008753 copy  0x00000022 , 0x00000012 
+ 00032104  0x00008754 copy  0x00000012 , 0x0000003f 
+ 00032105  0x00008755 isub  0x00000002 , 0x0000003e 
+ 00032106  0x00008756 ncall  0x00007d60 , 0x00000002 
+ 00032107  0x00008759 copy  0x00000012 , 0x0000003f 
+ 00032108  0x0000875a increase  0x000000a0 , 0x00000002 
+ 00032109  0x0000875b increase  0x000000a0 , 0x00000002 
+ 00032110  0x0000875c isub  0x00000002 , 0x0000003e 
+ 00032111  0x0000875d nbranch  0x00007d78 , 0x00000002 
+ 00032112  0x0000875e increase  0x00000001 , 0x00000011 
+ 00032113  0x0000875f and  0x00000011 , 0x0000000f , 0x0000003f 
+ 00032114  0x00008760 nbranch  0x00007d6b , 0x00000034 
+ 00032115  0x00008761 arg  0x00000000 , 0x00000011 
+ 00032116  0x00008762 call  0x00007d7f 
+ 00032117  0x00008764 copy  0x00000022 , 0x0000003f 
+ 00032118  0x00008765 store  0x00000004 , 0x0000467a 
+ 00032119  0x00008766 rtn 
+ 00032120  0x00008768 bpatchx  0x000000f5 , 0x0000403e 
+ 00032121  0x00008769 copy  0x00000011 , 0x0000003f 
+ 00032122  0x0000876a rtn  0x00000034 
+ 00032123  0x0000876b increase  0xffffff60 , 0x00000002 
+ 00032124  0x0000876c increase  0xffffff60 , 0x00000002 
+ 00032125  0x0000876d set0  0x0000001c , 0x00000002 
+ 00032126  0x0000876e storet  0x00000004 , 0x0000467a 
+ 00032127  0x00008770 branch  0x0000335f 
+ 00032128  0x00008778 jam  0x00000001 , 0x00004666 
+ 00032129  0x0000877a fetch  0x00000001 , 0x00004667 
+ 00032130  0x0000877b nbranch  0x00007d81 , 0x00000034 
+ 00032131  0x0000877c rtn 
+ 00032132  0x0000877f jam  0x00000000 , 0x00004666 
+ 00032133  0x00008780 rtn 
+ 00032134  0x00008785 bpatchx  0x000000f6 , 0x0000403e 
+ 00032135  0x00008786 call  0x00007d80 
+ 00032136  0x00008787 copy  0x00000011 , 0x0000003f 
+ 00032137  0x00008788 store  0x00000004 , 0x00000a91 
+ 00032138  0x00008789 arg  0x00004668 , 0x00000011 
+ 00032139  0x0000878a call  0x00007fb8 
+ 00032140  0x0000878b fetch  0x00000004 , 0x00000a91 
+ 00032141  0x0000878c copy  0x0000003f , 0x00000011 
+ 00032142  0x0000878d branch  0x00007d84 
+ 00032143  0x00008790 bpatchx  0x000000f7 , 0x0000403e 
+ 00032144  0x00008791 call  0x00007d80 
+ 00032145  0x00008792 copy  0x00000011 , 0x0000003f 
+ 00032146  0x00008793 store  0x00000004 , 0x00000a91 
+ 00032147  0x00008794 arg  0x00004670 , 0x00000011 
+ 00032148  0x00008795 call  0x00007fb8 
+ 00032149  0x00008796 fetch  0x00000004 , 0x00000a91 
+ 00032150  0x00008797 copy  0x0000003f , 0x00000011 
+ 00032151  0x00008798 branch  0x00007d84 
+ 00032152  0x0000879b setarg  0x00000000 
+ 00032153  0x0000879c store  0x00000008 , 0x00004670 
+ 00032154  0x0000879d store  0x00000008 , 0x00004668 
+ 00032155  0x0000879e rtn 
+ 00032156  0x000087a1 bpatchx  0x000000f8 , 0x0000403f 
+ 00032157  0x000087a2 fetch  0x00000001 , 0x000041ce 
+ 00032158  0x000087a3 nrtn  0x00000034 
+ 00032159  0x000087a4 arg  0x00004670 , 0x00000011 
+ 00032160  0x000087a5 call  0x00007fd0 
+ 00032161  0x000087a6 rtn  0x00000034 
+ 00032162  0x000087a7 jam  0x00000000 , 0x00000a90 
+ 00032163  0x000087a8 call  0x00007da7 
+ 00032164  0x000087a9 fetch  0x00000001 , 0x00000a90 
+ 00032165  0x000087aa branch  0x00007d9c , 0x00000034 
+ 00032166  0x000087ab rtn 
+ 00032167  0x000087ae call  0x00007d80 
+ 00032168  0x000087af arg  0x00004670 , 0x00000011 
+ 00032169  0x000087b0 call  0x00007fc4 
+ 00032170  0x000087b1 copy  0x0000003f , 0x00000002 
+ 00032171  0x000087b2 call  0x00007d84 
+ 00032172  0x000087b3 bpatchx  0x000000f9 , 0x0000403f 
+ 00032173  0x000087b4 copy  0x00000002 , 0x0000003f 
+ 00032174  0x000087b5 rtn  0x00000034 
+ 00032175  0x000087b6 beq  0x00000001 , 0x00007ddd 
+ 00032176  0x000087b7 beq  0x00000002 , 0x00007de2 
+ 00032177  0x000087b8 beq  0x00000003 , 0x00007de8 
+ 00032178  0x000087b9 beq  0x00000007 , 0x00007ded 
+ 00032179  0x000087ba beq  0x00000008 , 0x00007dee 
+ 00032180  0x000087bb beq  0x00000009 , 0x00007def 
+ 00032181  0x000087bc beq  0x0000000b , 0x00007df2 
+ 00032182  0x000087bd beq  0x0000000c , 0x00007df3 
+ 00032183  0x000087be beq  0x0000000d , 0x00007df4 
+ 00032184  0x000087bf beq  0x0000000e , 0x00007dfa 
+ 00032185  0x000087c0 beq  0x0000000f , 0x00007dff 
+ 00032186  0x000087c1 beq  0x00000010 , 0x00007e05 
+ 00032187  0x000087c2 beq  0x00000013 , 0x00007e0f 
+ 00032188  0x000087c3 beq  0x00000014 , 0x00007e11 
+ 00032189  0x000087c4 beq  0x00000015 , 0x00007e13 
+ 00032190  0x000087c5 beq  0x00000016 , 0x00007e15 
+ 00032191  0x000087c6 beq  0x00000017 , 0x00007e18 
+ 00032192  0x000087c7 beq  0x00000018 , 0x00007e1a 
+ 00032193  0x000087c8 beq  0x00000019 , 0x00007e1d 
+ 00032194  0x000087c9 beq  0x0000001b , 0x00007e25 
+ 00032195  0x000087ca beq  0x0000001e , 0x00007e2f 
+ 00032196  0x000087cc store  0x00000001 , 0x00000a99 
+ 00032197  0x000087cd bpatchx  0x000000fa , 0x0000403f 
+ 00032198  0x000087ce call  0x000062bc 
+ 00032199  0x000087cf nbranch  0x00007ddb , 0x00000034 
+ 00032200  0x000087d1 fetch  0x00000001 , 0x00000a99 
+ 00032201  0x000087d2 bmark0  0x00000009 , 0x00007dd6 
+ 00032202  0x000087d3 beq  0x00000004 , 0x00007dea 
+ 00032203  0x000087d4 beq  0x00000005 , 0x00004d17 
+ 00032204  0x000087d5 beq  0x00000006 , 0x00004d26 
+ 00032205  0x000087d6 beq  0x0000000a , 0x00007df0 
+ 00032206  0x000087d7 beq  0x00000011 , 0x00007e0a 
+ 00032207  0x000087d8 beq  0x00000012 , 0x00007e0e 
+ 00032208  0x000087d9 beq  0x0000001d , 0x00007e26 
+ 00032209  0x000087da beq  0x0000001f , 0x000067cc 
+ 00032210  0x000087db beq  0x00000020 , 0x000067d0 
+ 00032211  0x000087dc beq  0x00000021 , 0x00007e31 
+ 00032212  0x000087dd beq  0x00000025 , 0x0000670b 
+ 00032213  0x000087de rtn 
+ 00032214  0x000087e1 store  0x00000001 , 0x00000a99 
+ 00032215  0x000087e2 call  0x00002252 
+ 00032216  0x000087e3 branch  0x00007ddb , 0x00000005 
+ 00032217  0x000087e4 call  0x0000225a 
+ 00032218  0x000087e5 nrtn  0x00000005 
+ 00032219  0x000087e7 jam  0x00000001 , 0x00000a90 
+ 00032220  0x000087e8 branch  0x00007d8f 
+ 00032221  0x000087ee fetch  0x00000002 , 0x00004682 
+ 00032222  0x000087ef set1  0x00000006 
+ 00032223  0x000087f0 store  0x00000002 , 0x00004682 
+ 00032224  0x000087f1 jam  0x00000003 , 0x00004093 
+ 00032225  0x000087f2 rtn 
+ 00032226  0x000087f7 jam  0x00000000 , 0x00004680 
+ 00032227  0x000087f8 jam  0x00000000 , 0x00004093 
+ 00032228  0x000087f9 fetch  0x00000002 , 0x00004682 
+ 00032229  0x000087fa set0  0x00000006 
+ 00032230  0x000087fb store  0x00000002 , 0x00004682 
+ 00032231  0x000087fc rtn 
+ 00032232  0x00008801 jam  0x00000005 , 0x000041ce 
+ 00032233  0x00008802 rtn 
+ 00032234  0x00008807 jam  0x00000007 , 0x0000007c 
+ 00032235  0x00008808 jam  0x00000013 , 0x000004ca 
+ 00032236  0x00008809 rtn 
+ 00032237  0x0000880e rtn 
+ 00032238  0x00008813 rtn 
+ 00032239  0x00008818 rtn 
+ 00032240  0x0000881d jam  0x00000002 , 0x000004d4 
+ 00032241  0x0000881e branch  0x00004d0a 
+ 00032242  0x00008823 rtn 
+ 00032243  0x00008828 rtn 
+ 00032244  0x0000882d jam  0x00000001 , 0x0000436e 
+ 00032245  0x0000882e jam  0x00000000 , 0x00004484 
+ 00032246  0x0000882f fetch  0x00000002 , 0x00004682 
+ 00032247  0x00008830 set1  0x0000000b , 0x0000003f 
+ 00032248  0x00008831 store  0x00000002 , 0x00004682 
+ 00032249  0x00008832 rtn 
+ 00032250  0x00008837 fetch  0x00000002 , 0x00004682 
+ 00032251  0x00008838 set0  0x0000000b , 0x0000003f 
+ 00032252  0x00008839 store  0x00000002 , 0x00004682 
+ 00032253  0x0000883a jam  0x00000000 , 0x0000436e 
+ 00032254  0x0000883b rtn 
+ 00032255  0x00008840 jam  0x00000001 , 0x0000436e 
+ 00032256  0x00008841 jam  0x00000001 , 0x00004484 
+ 00032257  0x00008842 fetch  0x00000002 , 0x00004682 
+ 00032258  0x00008843 set1  0x0000000b , 0x0000003f 
+ 00032259  0x00008844 store  0x00000002 , 0x00004682 
+ 00032260  0x00008845 rtn 
+ 00032261  0x0000884a fetch  0x00000002 , 0x00004682 
+ 00032262  0x0000884b set0  0x0000000b , 0x0000003f 
+ 00032263  0x0000884c store  0x00000002 , 0x00004682 
+ 00032264  0x0000884d jam  0x00000000 , 0x0000436e 
+ 00032265  0x0000884e rtn 
+ 00032266  0x00008853 setarg  0x00000014 
+ 00032267  0x00008854 store  0x00000002 , 0x0000046d 
+ 00032268  0x00008855 store  0x00000002 , 0x000044ba 
+ 00032269  0x00008856 branch  0x00005c92 
+ 00032270  0x0000885b branch  0x00005abf 
+ 00032271  0x00008860 arg  0x00000000 , 0x00000011 
+ 00032272  0x00008861 branch  0x00007d19 
+ 00032273  0x00008866 arg  0x00000000 , 0x00000011 
+ 00032274  0x00008867 branch  0x00007d14 
+ 00032275  0x0000886c arg  0x00000000 , 0x00000011 
+ 00032276  0x0000886d branch  0x00007d1e 
+ 00032277  0x00008872 jam  0x00000001 , 0x00004369 
+ 00032278  0x00008873 jam  0x0000001b , 0x000041ce 
+ 00032279  0x00008876 rtn 
+ 00032280  0x0000887b jam  0x00000001 , 0x00004369 
+ 00032281  0x0000887c rtn 
+ 00032282  0x00008881 jam  0x00000000 , 0x00004369 
+ 00032283  0x00008882 jam  0x00000000 , 0x000041ce 
+ 00032284  0x00008883 rtn 
+ 00032285  0x00008888 fetch  0x00000002 , 0x000041eb 
+ 00032286  0x00008889 call  0x00007f9c 
+ 00032287  0x0000888a fetch  0x00000001 , 0x00004686 
+ 00032288  0x0000888b beq  0x000000ff , 0x00007e23 
+ 00032289  0x0000888c copy  0x0000003f , 0x00000002 
+ 00032290  0x0000888d call  0x000067fb 
+ 00032291  0x0000888f call  0x00007d98 
+ 00032292  0x00008890 branch  0x00002b1f 
+ 00032293  0x00008895 branch  0x00005b02 
+ 00032294  0x0000889a jam  0x00000034 , 0x0000007c 
+ 00032295  0x0000889b set1  0x00000003 , 0x00000000 
+ 00032296  0x0000889c nrtn  0x00000029 
+ 00032297  0x0000889d jam  0x00000000 , 0x0000455b 
+ 00032298  0x0000889e jam  0x00000013 , 0x0000007c 
+ 00032299  0x0000889f fetch  0x00000001 , 0x0000016d 
+ 00032300  0x000088a0 set0  0x00000002 , 0x0000003f 
+ 00032301  0x000088a1 store  0x00000001 , 0x0000016d 
+ 00032302  0x000088a2 rtn 
+ 00032303  0x000088a7 force  0x00000003 , 0x00000007 
+ 00032304  0x000088a8 branch  0x00007f07 
+ 00032305  0x000088ad call  0x000062f8 
+ 00032306  0x000088ae jam  0x00000041 , 0x0000007d 
+ 00032307  0x000088af branch  0x00005f9d 
+ 00032308  0x000088b3 fetch  0x00000001 , 0x00004682 
+ 00032309  0x000088b4 rtnbit0  0x0000000c 
+ 00032310  0x000088b5 rtnbit0  0x00000007 
+ 00032311  0x000088b6 branch  0x00007e2f 
+ 00032312  0x000088bc fetch  0x00000002 , 0x00004218 
+ 00032313  0x000088bd add  0x0000003f , 0x00000002 , 0x00000005 
+ 00032314  0x000088be setarg  0x00000000 
+ 00032315  0x000088bf istore  0x00000003 , 0x00000005 
+ 00032316  0x000088c0 rtn 
+ 00032317  0x000088c5 call  0x00007fe9 
+ 00032318  0x000088c6 call  0x00007e69 
+ 00032319  0x000088c7 rtn  0x00000034 
+ 00032320  0x000088c8 fetch  0x00000002 , 0x00004218 
+ 00032321  0x000088c9 add  0x0000003f , 0x00000002 , 0x00000012 
+ 00032322  0x000088ca ifetcht  0x00000001 , 0x00000012 
+ 00032323  0x000088cb increase  0x00000001 , 0x00000002 
+ 00032324  0x000088cc istoret  0x00000001 , 0x00000012 
+ 00032325  0x000088ce ifetcht  0x00000001 , 0x0000003f 
+ 00032326  0x000088cf copy  0x00000002 , 0x00000039 
+ 00032327  0x000088d0 add  0x0000003f , 0x00000004 , 0x00000012 
+ 00032328  0x000088d1 ifetch  0x00000001 , 0x00000012 
+ 00032329  0x000088d2 imul32  0x00000002 , 0x0000003f 
+ 00032330  0x000088d3 iadd  0x00000006 , 0x00000005 
+ 00032331  0x000088d4 copy  0x00000011 , 0x00000006 
+ 00032332  0x000088d6 call  0x00007f01 
+ 00032333  0x000088d7 call  0x00007e6d 
+ 00032334  0x000088d8 pincrease  0xffffffff 
+ 00032335  0x000088d9 ifetcht  0x00000001 , 0x00000012 
+ 00032336  0x000088da increase  0x00000001 , 0x00000002 
+ 00032337  0x000088db iand  0x00000002 , 0x00000002 
+ 00032338  0x000088dc istoret  0x00000001 , 0x00000012 
+ 00032339  0x000088dd branch  0x00007fe7 
+ 00032340  0x000088e3 call  0x00007fe9 
+ 00032341  0x000088e4 call  0x00007e65 
+ 00032342  0x000088e5 rtn  0x00000034 
+ 00032343  0x000088e6 fetch  0x00000002 , 0x00004218 
+ 00032344  0x000088e7 add  0x0000003f , 0x00000002 , 0x00000012 
+ 00032345  0x000088e8 ifetcht  0x00000001 , 0x00000012 
+ 00032346  0x000088e9 increase  0xffffffff , 0x00000002 
+ 00032347  0x000088ea istoret  0x00000001 , 0x00000012 
+ 00032348  0x000088eb ifetcht  0x00000001 , 0x0000003f 
+ 00032349  0x000088ec copy  0x00000002 , 0x00000039 
+ 00032350  0x000088ed add  0x0000003f , 0x00000003 , 0x00000012 
+ 00032351  0x000088ee ifetch  0x00000001 , 0x00000012 
+ 00032352  0x000088ef imul32  0x00000002 , 0x0000003f 
+ 00032353  0x000088f0 iadd  0x00000006 , 0x00000006 
+ 00032354  0x000088f1 increase  0x00000001 , 0x00000006 
+ 00032355  0x000088f2 copy  0x00000011 , 0x00000005 
+ 00032356  0x000088f3 branch  0x00007e4c 
+ 00032357  0x000088f8 fetch  0x00000002 , 0x00004218 
+ 00032358  0x000088f9 add  0x0000003f , 0x00000002 , 0x00000006 
+ 00032359  0x000088fa ifetch  0x00000001 , 0x00000006 
+ 00032360  0x000088fb rtn 
+ 00032361  0x000088ff call  0x00007e6d 
+ 00032362  0x00008900 ifetcht  0x00000001 , 0x00000006 
+ 00032363  0x00008901 isub  0x00000002 , 0x0000003f 
+ 00032364  0x00008902 rtn 
+ 00032365  0x00008906 fetch  0x00000002 , 0x00004218 
+ 00032366  0x00008907 add  0x0000003f , 0x00000001 , 0x00000006 
+ 00032367  0x00008908 ifetch  0x00000001 , 0x00000006 
+ 00032368  0x00008909 rtn 
+ 00032369  0x00008912 sub  0x00000039 , 0x00000000 , 0x0000003e 
+ 00032370  0x00008913 rtn  0x00000005 
+ 00032371  0x00008915 rshift  0x0000003f , 0x0000003f 
+ 00032372  0x00008916 loop  0x00007e73 
+ 00032373  0x00008917 rtn 
+ 00032374  0x0000891b force  0x00000001 , 0x0000003f 
+ 00032375  0x0000891c sub  0x00000039 , 0x00000000 , 0x0000003e 
+ 00032376  0x0000891d rtn  0x00000005 
+ 00032377  0x0000891f lshift  0x0000003f , 0x0000003f 
+ 00032378  0x00008920 loop  0x00007e79 
+ 00032379  0x00008921 rtn 
+ 00032380  0x00008923 deposit  0x00000005 
+ 00032381  0x00008924 store  0x00000002 , 0x00000abb 
+ 00032382  0x00008925 storet  0x00000008 , 0x00000aa2 
+ 00032383  0x00008926 deposit  0x0000000b 
+ 00032384  0x00008927 store  0x00000004 , 0x00000aaa 
+ 00032385  0x00008928 call  0x00007e85 
+ 00032386  0x00008929 deposit  0x00000006 
+ 00032387  0x0000892a store  0x00000002 , 0x00000ab9 
+ 00032388  0x0000892b rtn 
+ 00032389  0x0000892e deposit  0x00000011 
+ 00032390  0x0000892f store  0x00000004 , 0x00000aae 
+ 00032391  0x00008930 deposit  0x00000012 
+ 00032392  0x00008931 store  0x00000004 , 0x00000ab2 
+ 00032393  0x00008932 deposit  0x00000013 
+ 00032394  0x00008933 store  0x00000003 , 0x00000ab6 
+ 00032395  0x00008934 rtn 
+ 00032396  0x00008937 fetcht  0x00000008 , 0x00000aa2 
+ 00032397  0x00008938 fetch  0x00000004 , 0x00000aaa 
+ 00032398  0x00008939 iforce  0x0000000b 
+ 00032399  0x0000893a call  0x00007e95 
+ 00032400  0x0000893b fetch  0x00000002 , 0x00000abb 
+ 00032401  0x0000893c iforce  0x00000005 
+ 00032402  0x0000893d fetch  0x00000002 , 0x00000ab9 
+ 00032403  0x0000893e iforce  0x00000006 
+ 00032404  0x0000893f rtn 
+ 00032405  0x00008942 fetch  0x00000004 , 0x00000aae 
+ 00032406  0x00008943 iforce  0x00000011 
+ 00032407  0x00008944 fetch  0x00000004 , 0x00000ab2 
+ 00032408  0x00008945 iforce  0x00000012 
+ 00032409  0x00008946 fetch  0x00000003 , 0x00000ab6 
+ 00032410  0x00008947 iforce  0x00000013 
+ 00032411  0x00008948 rtn 
+ 00032412  0x0000894b fetch  0x00000002 , 0x00000abb 
+ 00032413  0x0000894c copy  0x0000003f , 0x00000005 
+ 00032414  0x0000894d rtn 
+ 00032415  0x0000894f fetch  0x00000002 , 0x00000ab9 
+ 00032416  0x00008950 copy  0x0000003f , 0x00000006 
+ 00032417  0x00008951 rtn 
+ 00032418  0x00008953 copy  0x00000005 , 0x0000003f 
+ 00032419  0x00008954 store  0x00000002 , 0x00000abb 
+ 00032420  0x00008955 rtn 
+ 00032421  0x00008957 copy  0x00000006 , 0x0000003f 
+ 00032422  0x00008958 store  0x00000002 , 0x00000ab9 
+ 00032423  0x00008959 rtn 
+ 00032424  0x0000895e copy  0x00000005 , 0x0000003f 
+ 00032425  0x0000895f store  0x00000002 , 0x00000a97 
+ 00032426  0x00008960 copy  0x00000006 , 0x0000003f 
+ 00032427  0x00008961 store  0x00000002 , 0x00000a95 
+ 00032428  0x00008962 rtn 
+ 00032429  0x00008964 fetch  0x00000002 , 0x00000a97 
+ 00032430  0x00008965 copy  0x0000003f , 0x00000005 
+ 00032431  0x00008966 fetch  0x00000002 , 0x00000a95 
+ 00032432  0x00008967 copy  0x0000003f , 0x00000006 
+ 00032433  0x00008968 rtn 
+ 00032434  0x0000896b call  0x00007ebd 
+ 00032435  0x0000896d call  0x00007ebd 
+ 00032436  0x0000896e branch  0x00007ebd 
+ 00032437  0x00008970 call  0x00007eb9 
+ 00032438  0x00008972 ifetch  0x00000004 , 0x00000006 
+ 00032439  0x00008973 istore  0x00000004 , 0x00000005 
+ 00032440  0x00008974 rtn 
+ 00032441  0x00008976 ifetch  0x00000008 , 0x00000006 
+ 00032442  0x00008977 istore  0x00000008 , 0x00000005 
+ 00032443  0x00008978 rtn 
+ 00032444  0x0000897b call  0x00007ebf 
+ 00032445  0x0000897d call  0x00007eb9 
+ 00032446  0x0000897f call  0x00007eb9 
+ 00032447  0x00008981 call  0x00007eb9 
+ 00032448  0x00008982 branch  0x00007eb9 
+ 00032449  0x00008987 arg  0x0000000a , 0x00000039 
+ 00032450  0x00008989 nop  0x00002ee0 
+ 00032451  0x0000898a loop  0x00007ec2 
+ 00032452  0x0000898b rtn 
+ 00032453  0x0000898e force  0x00000003 , 0x00000039 
+ 00032454  0x00008990 force  0x00000000 , 0x0000003f 
+ 00032455  0x00008992 istore  0x00000008 , 0x00000005 
+ 00032456  0x00008993 loop  0x00007ec7 
+ 00032457  0x00008994 rtn 
+ 00032458  0x00008997 force  0x00000000 , 0x0000003f 
+ 00032459  0x00008998 istore  0x00000008 , 0x00000005 
+ 00032460  0x00008999 rtn 
+ 00032461  0x0000899b force  0x00000000 , 0x0000003f 
+ 00032462  0x0000899c istore  0x00000004 , 0x00000005 
+ 00032463  0x0000899d rtn 
+ 00032464  0x000089a0 force  0x00000004 , 0x00000039 
+ 00032465  0x000089a1 branch  0x00007ec6 
+ 00032466  0x000089a3 force  0x00000008 , 0x00000039 
+ 00032467  0x000089a4 branch  0x00007ec6 
+ 00032468  0x000089a7 deposit  0x00000039 
+ 00032469  0x000089a8 rtn  0x00000034 
+ 00032470  0x000089a9 setarg  0x00000000 
+ 00032471  0x000089ab istore  0x00000001 , 0x00000005 
+ 00032472  0x000089ac loop  0x00007ed7 
+ 00032473  0x000089ad rtn 
+ 00032474  0x000089b1 arg  0x00000020 , 0x00000039 
+ 00032475  0x000089b2 arg  0x00000ac2 , 0x00000005 
+ 00032476  0x000089b3 branch  0x00007ed4 
+ 00032477  0x000089b6 ifetch  0x00000004 , 0x00000013 
+ 00032478  0x000089b7 ifetcht  0x00000004 , 0x00000011 
+ 00032479  0x000089b8 ixor  0x00000002 , 0x0000003f 
+ 00032480  0x000089b9 istore  0x00000004 , 0x00000005 
+ 00032481  0x000089ba increase  0x00000004 , 0x00000011 
+ 00032482  0x000089bb increase  0x00000004 , 0x00000013 
+ 00032483  0x000089bc loop  0x00007edd 
+ 00032484  0x000089bd rtn 
+ 00032485  0x000089c2 bpatchx  0x000000fb , 0x0000403f 
+ 00032486  0x000089c3 copy  0x00000039 , 0x0000003f 
+ 00032487  0x000089c4 sub  0x0000003f , 0x00000001 , 0x0000003e 
+ 00032488  0x000089c5 rtn  0x00000002 
+ 00032489  0x000089c6 iadd  0x00000011 , 0x00000012 
+ 00032490  0x000089c7 increase  0xffffffff , 0x00000012 
+ 00032491  0x000089c8 rshift  0x00000039 , 0x00000039 
+ 00032492  0x000089ca ifetcht  0x00000001 , 0x00000011 
+ 00032493  0x000089cb ifetch  0x00000001 , 0x00000012 
+ 00032494  0x000089cc istore  0x00000001 , 0x00000011 
+ 00032495  0x000089cd istoret  0x00000001 , 0x00000012 
+ 00032496  0x000089ce increase  0xffffffff , 0x00000012 
+ 00032497  0x000089cf increase  0x00000001 , 0x00000011 
+ 00032498  0x000089d0 loop  0x00007eec 
+ 00032499  0x000089d1 rtn 
+ 00032500  0x000089d5 deposit  0x00000039 
+ 00032501  0x000089d6 rtn  0x00000034 
+ 00032502  0x000089d8 increase  0xfffffff8 , 0x00000039 
+ 00032503  0x000089d9 call  0x00007eb9 , 0x00000002 
+ 00032504  0x000089da rtn  0x00000005 
+ 00032505  0x000089db branch  0x00007ef6 , 0x00000002 
+ 00032506  0x000089dc increase  0x00000008 , 0x00000039 
+ 00032507  0x000089de increase  0xfffffffc , 0x00000039 
+ 00032508  0x000089df call  0x00007eb6 , 0x00000002 
+ 00032509  0x000089e0 rtn  0x00000005 
+ 00032510  0x000089e1 branch  0x00007efb , 0x00000002 
+ 00032511  0x000089e2 increase  0x00000004 , 0x00000039 
+ 00032512  0x000089e3 branch  0x00007f01 
+ 00032513  0x000089e6 deposit  0x00000039 
+ 00032514  0x000089e7 rtn  0x00000034 
+ 00032515  0x000089e9 ifetch  0x00000001 , 0x00000006 
+ 00032516  0x000089ea istore  0x00000001 , 0x00000005 
+ 00032517  0x000089eb loop  0x00007f03 
+ 00032518  0x000089ec rtn 
+ 00032519  0x000089ef setarg  0x00000000 
+ 00032520  0x000089f1 rshift  0x00000022 , 0x00000002 
+ 00032521  0x000089f2 storet  0x00000004 , 0x00004094 
+ 00032522  0x000089f3 arg  0x0000419d , 0x00000005 
+ 00032523  0x000089f4 iforce  0x00000002 
+ 00032524  0x000089f5 lshift  0x00000007 , 0x0000003f 
+ 00032525  0x000089f6 iadd  0x00000005 , 0x00000005 
+ 00032526  0x000089f7 istoret  0x00000002 , 0x00000005 
+ 00032527  0x000089f8 bpatchx  0x000000fc , 0x0000403f 
+ 00032528  0x000089f9 rtn 
+ 00032529  0x000089fc arg  0x00000800 , 0x0000000b 
+ 00032530  0x000089fd lshift16  0x0000000b , 0x0000000b 
+ 00032531  0x000089fe iadd  0x0000000b , 0x0000003f 
+ 00032532  0x000089ff rtn 
+ 00032533  0x00008a03 arg  0x00000000 , 0x00000007 
+ 00032534  0x00008a05 bpatchx  0x000000fd , 0x0000403f 
+ 00032535  0x00008a06 fetcht  0x00000004 , 0x00004094 
+ 00032536  0x00008a07 rshift  0x00000022 , 0x0000003f 
+ 00032537  0x00008a08 store  0x00000004 , 0x00004094 
+ 00032538  0x00008a09 isub  0x00000002 , 0x0000003e 
+ 00032539  0x00008a0a ncall  0x00007f11 , 0x00000002 
+ 00032540  0x00008a0b isub  0x00000002 , 0x0000000b 
+ 00032541  0x00008a0c copy  0x0000000b , 0x00000002 
+ 00032542  0x00008a0d arg  0x0000419d , 0x00000006 
+ 00032543  0x00008a0e copy  0x00000006 , 0x00000005 
+ 00032544  0x00008a0f arg  0x00000010 , 0x00000039 
+ 00032545  0x00008a11 ifetch  0x00000002 , 0x00000006 
+ 00032546  0x00008a12 isub  0x00000002 , 0x0000003f 
+ 00032547  0x00008a13 branch  0x00007f25 , 0x00000002 
+ 00032548  0x00008a14 force  0x00000000 , 0x0000003f 
+ 00032549  0x00008a16 istore  0x00000002 , 0x00000005 
+ 00032550  0x00008a17 loop  0x00007f21 
+ 00032551  0x00008a18 arg  0x0000419d , 0x00000006 
+ 00032552  0x00008a19 lshift  0x00000007 , 0x0000003f 
+ 00032553  0x00008a1a iadd  0x00000006 , 0x00000006 
+ 00032554  0x00008a1b ifetch  0x00000002 , 0x00000006 
+ 00032555  0x00008a1c rtn 
+ 00032556  0x00008a22 iadd  0x00000002 , 0x00000002 
+ 00032557  0x00008a23 copy  0x00000002 , 0x00000039 
+ 00032558  0x00008a24 setarg  0x00000ea6 
+ 00032559  0x00008a25 isub  0x00000039 , 0x0000003f 
+ 00032560  0x00008a26 rtn  0x00000002 
+ 00032561  0x00008a27 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00032562  0x00008a28 rshift16  0x00000002 , 0x00000002 
+ 00032563  0x00008a29 increase  0x00000001 , 0x00000002 
+ 00032564  0x00008a2a lshift16  0x00000002 , 0x00000002 
+ 00032565  0x00008a2b ior  0x00000002 , 0x00000002 
+ 00032566  0x00008a2c rtn 
+ 00032567  0x00008a2f call  0x00007f39 
+ 00032568  0x00008a30 branch  0x00007f43 
+ 00032569  0x00008a34 disable  0x00000028 
+ 00032570  0x00008a35 isub  0x00000002 , 0x0000003f 
+ 00032571  0x00008a36 branch  0x00007f3e , 0x00000002 
+ 00032572  0x00008a37 enable  0x00000028 
+ 00032573  0x00008a38 sub  0x0000003f , 0x00000000 , 0x0000003f 
+ 00032574  0x00008a3a rtnbit0  0x0000000f 
+ 00032575  0x00008a3b arg  0xffff0ea6 , 0x00000002 
+ 00032576  0x00008a3c iadd  0x00000002 , 0x0000003f 
+ 00032577  0x00008a3d set0  0x00000040 , 0x0000003f 
+ 00032578  0x00008a3e rtn 
+ 00032579  0x00008a41 iforce  0x00000006 
+ 00032580  0x00008a42 rshift16  0x0000003f , 0x0000003f 
+ 00032581  0x00008a43 arg  0x00000ea6 , 0x00000002 
+ 00032582  0x00008a44 imul32  0x00000002 , 0x0000003f 
+ 00032583  0x00008a45 iadd  0x00000006 , 0x0000003f 
+ 00032584  0x00008a46 rtn 
+ 00032585  0x00008a4a lshift8  0x0000003f , 0x0000003f 
+ 00032586  0x00008a4b lshift4  0x0000003f , 0x0000003f 
+ 00032587  0x00008a4c fetcht  0x00000003 , 0x0000416f 
+ 00032588  0x00008a4d idiv  0x00000002 
+ 00032589  0x00008a4e call  0x00007f86 
+ 00032590  0x00008a4f quotient  0x00000002 
+ 00032591  0x00008a50 rtn 
+ 00032592  0x00008a54 arg  0x00000ea6 , 0x00000002 
+ 00032593  0x00008a55 idiv  0x00000002 
+ 00032594  0x00008a56 call  0x00007f86 
+ 00032595  0x00008a57 quotient  0x0000003f 
+ 00032596  0x00008a58 lshift16  0x0000003f , 0x0000003f 
+ 00032597  0x00008a59 remainder  0x00000002 
+ 00032598  0x00008a5a ior  0x00000002 , 0x00000002 
+ 00032599  0x00008a5b rtn 
+ 00032600  0x00008a63 arg  0x00000000 , 0x00000002 
+ 00032601  0x00008a65 copy  0x00000002 , 0x00000013 
+ 00032602  0x00008a66 ifetch  0x00000001 , 0x00000003 
+ 00032603  0x00008a67 call  0x00007f64 
+ 00032604  0x00008a68 copy  0x00000013 , 0x00000002 
+ 00032605  0x00008a69 call  0x00007f95 
+ 00032606  0x00008a6a arg  0x0000000a , 0x00000012 
+ 00032607  0x00008a6b imul32  0x00000012 , 0x0000003f 
+ 00032608  0x00008a6c iadd  0x00000002 , 0x0000003f 
+ 00032609  0x00008a6d copy  0x0000003f , 0x00000002 
+ 00032610  0x00008a6e loop  0x00007f59 
+ 00032611  0x00008a6f rtn 
+ 00032612  0x00008a74 arg  0x0000003a , 0x00000002 
+ 00032613  0x00008a75 isub  0x00000002 , 0x0000003e 
+ 00032614  0x00008a76 nbranch  0x00007f6d , 0x00000002 
+ 00032615  0x00008a77 arg  0x00000061 , 0x00000002 
+ 00032616  0x00008a78 isub  0x00000002 , 0x0000003e 
+ 00032617  0x00008a79 branch  0x00007f70 , 0x00000002 
+ 00032618  0x00008a7a arg  0x00000037 , 0x00000002 
+ 00032619  0x00008a7b isub  0x00000002 , 0x0000003f 
+ 00032620  0x00008a7c rtn 
+ 00032621  0x00008a7e arg  0x00000030 , 0x00000002 
+ 00032622  0x00008a7f isub  0x00000002 , 0x0000003f 
+ 00032623  0x00008a80 rtn 
+ 00032624  0x00008a82 arg  0x00000057 , 0x00000002 
+ 00032625  0x00008a83 isub  0x00000002 , 0x0000003f 
+ 00032626  0x00008a84 rtn 
+ 00032627  0x00008a87 copy  0x00000002 , 0x00000030 
+ 00032628  0x00008a88 setarg  0x000001ff 
+ 00032629  0x00008a89 force  0x00000000 , 0x00000012 
+ 00032630  0x00008a8b rshift3  0x0000003f , 0x00000011 
+ 00032631  0x00008a8c rshift  0x00000011 , 0x00000011 
+ 00032632  0x00008a8d ixor  0x00000011 , 0x00000011 
+ 00032633  0x00008a8e isolate1  0x00000000 , 0x00000011 
+ 00032634  0x00008a8f setflag  0x00000001 , 0x00000009 , 0x0000003f 
+ 00032635  0x00008a90 rshift  0x00000002 , 0x00000002 
+ 00032636  0x00008a91 isolate1  0x00000000 , 0x0000003f 
+ 00032637  0x00008a92 setflag  0x00000001 , 0x00000007 , 0x00000002 
+ 00032638  0x00008a93 rshift  0x0000003f , 0x0000003f 
+ 00032639  0x00008a94 increase  0x00000001 , 0x00000012 
+ 00032640  0x00008a95 compare  0x00000000 , 0x00000012 , 0x00000007 
+ 00032641  0x00008a96 nbranch  0x00007f76 , 0x00000001 
+ 00032642  0x00008a97 istoret  0x00000001 , 0x00000005 
+ 00032643  0x00008a98 loop  0x00007f76 
+ 00032644  0x00008a99 copy  0x00000030 , 0x00000002 
+ 00032645  0x00008a9a rtn 
+ 00032646  0x00008a9e rtn  0x00000035 
+ 00032647  0x00008a9f branch  0x00007f86 
+ 00032648  0x00008aab ifetch  0x00000001 , 0x00000011 
+ 00032649  0x00008aac ifetcht  0x00000001 , 0x00000012 
+ 00032650  0x00008aad isub  0x00000002 , 0x0000003e 
+ 00032651  0x00008aae nrtn  0x00000005 
+ 00032652  0x00008aaf increase  0x00000001 , 0x00000011 
+ 00032653  0x00008ab0 increase  0x00000001 , 0x00000012 
+ 00032654  0x00008ab1 loop  0x00007f88 
+ 00032655  0x00008ab2 force  0x00000000 , 0x0000003e 
+ 00032656  0x00008ab3 rtn 
+ 00032657  0x00008ab7 isub  0x00000002 , 0x0000003e 
+ 00032658  0x00008ab8 nrtn  0x00000002 
+ 00032659  0x00008ab9 deposit  0x00000002 
+ 00032660  0x00008aba rtn 
+ 00032661  0x00008abd iadd  0x00000002 , 0x0000003f 
+ 00032662  0x00008abe isub  0x00000002 , 0x00000002 
+ 00032663  0x00008abf isub  0x00000002 , 0x0000003f 
+ 00032664  0x00008ac0 rtn 
+ 00032665  0x00008ac3 arg  0x00000200 , 0x00000039 
+ 00032666  0x00008ac4 arg  0x00004000 , 0x00000005 
+ 00032667  0x00008ac5 branch  0x00007ec6 
+ 00032668  0x00008ac9 rtn  0x00000034 
+ 00032669  0x00008aca copy  0x0000003f , 0x0000003d 
+ 00032670  0x00008ace hfetch  0x00000002 , 0x0000810e 
+ 00032671  0x00008acf nbranch  0x00007f9e , 0x00000034 
+ 00032672  0x00008ad0 rtn 
+ 00032673  0x00008ad3 jam  0x00000001 , 0x00008203 
+ 00032674  0x00008ad4 rtn 
+ 00032675  0x00008ad7 hstore  0x00000002 , 0x00008205 
+ 00032676  0x00008ad8 hfetch  0x00000001 , 0x00008203 
+ 00032677  0x00008ad9 set1  0x00000004 , 0x0000003f 
+ 00032678  0x00008ada hstore  0x00000001 , 0x00008203 
+ 00032679  0x00008adb rtn 
+ 00032680  0x00008add hstore  0x00000002 , 0x00008207 
+ 00032681  0x00008ade hfetch  0x00000001 , 0x00008203 
+ 00032682  0x00008adf set1  0x00000006 , 0x0000003f 
+ 00032683  0x00008ae0 hstore  0x00000001 , 0x00008203 
+ 00032684  0x00008ae1 rtn 
+ 00032685  0x00008ae4 hstore  0x00000002 , 0x00008205 
+ 00032686  0x00008ae5 jam  0x00000030 , 0x00008203 
+ 00032687  0x00008ae6 rtn 
+ 00032688  0x00008aeb hfetch  0x00000001 , 0x00008043 
+ 00032689  0x00008aec set0  0x00000004 , 0x0000003f 
+ 00032690  0x00008aed hstore  0x00000001 , 0x00008043 
+ 00032691  0x00008aee rtn 
+ 00032692  0x00008af1 hfetch  0x00000002 , 0x0000810e 
+ 00032693  0x00008af2 arg  0x00000200 , 0x00000002 
+ 00032694  0x00008af4 isub  0x00000002 , 0x0000003e 
+ 00032695  0x00008af5 rtn 
+ 00032696  0x00008afc bpatchx  0x000000fe , 0x0000403f 
+ 00032697  0x00008afd ifetcht  0x00000008 , 0x00000011 
+ 00032698  0x00008afe and  0x00000002 , 0x000000ff , 0x0000003f 
+ 00032699  0x00008aff nbranch  0x00007fbe , 0x00000034 
+ 00032700  0x00008b00 rshift8  0x00000002 , 0x0000003f 
+ 00032701  0x00008b01 istore  0x00000008 , 0x00000011 
+ 00032702  0x00008b03 increase  0x00000007 , 0x00000011 
+ 00032703  0x00008b04 ifetch  0x00000001 , 0x00000011 
+ 00032704  0x00008b05 nbranch  0x00002a8c , 0x00000034 
+ 00032705  0x00008b06 fetch  0x00000001 , 0x00000a99 
+ 00032706  0x00008b07 istore  0x00000001 , 0x00000011 
+ 00032707  0x00008b08 rtn 
+ 00032708  0x00008b0e bpatchx  0x000000ff , 0x0000403f 
+ 00032709  0x00008b0f arg  0x00000008 , 0x00000039 
+ 00032710  0x00008b10 ifetch  0x00000008 , 0x00000011 
+ 00032711  0x00008b11 rtn  0x00000034 
+ 00032712  0x00008b13 ifetch  0x00000001 , 0x00000011 
+ 00032713  0x00008b14 nbranch  0x00007fcd , 0x00000034 
+ 00032714  0x00008b15 increase  0x00000001 , 0x00000011 
+ 00032715  0x00008b16 loop  0x00007fc8 
+ 00032716  0x00008b17 branch  0x00002a8c 
+ 00032717  0x00008b19 arg  0x00000000 , 0x00000002 
+ 00032718  0x00008b1a istoret  0x00000001 , 0x00000011 
+ 00032719  0x00008b1b rtn 
+ 00032720  0x00008b21 ifetch  0x00000008 , 0x00000011 
+ 00032721  0x00008b22 rtn 
+ 00032722  0x00008b28 ifetch  0x00000001 , 0x00000011 
+ 00032723  0x00008b29 rtn 
+ 00032724  0x00008b2d ifetch  0x00000002 , 0x00000011 
+ 00032725  0x00008b2e rtn 
+ 00032726  0x00008b33 arg  0x00000000 , 0x00000002 
+ 00032727  0x00008b35 fetch  0x00000001 , 0x00000006 
+ 00032728  0x00008b36 loop  0x00007fd7 , 0x00000034 
+ 00032729  0x00008b37 increase  0x00000001 , 0x00000002 
+ 00032730  0x00008b38 loop  0x00007fd7 
+ 00032731  0x00008b39 copy  0x00000002 , 0x0000003f 
+ 00032732  0x00008b3a rtn 
+ 00032733  0x00008b3d isub  0x00000002 , 0x0000003e 
+ 00032734  0x00008b3e nrtn  0x00000002 
+ 00032735  0x00008b3f copy  0x00000002 , 0x0000003f 
+ 00032736  0x00008b40 rtn 
+ 00032737  0x00008b44 force  0xffffffff , 0x0000003e 
+ 00032738  0x00008b45 rtn 
+ 00032739  0x00008b48 force  0x00000001 , 0x0000003e 
+ 00032740  0x00008b49 rtn 
+ 00032741  0x00008b4b force  0x00000000 , 0x0000003e 
+ 00032742  0x00008b4c rtn 
+ 00032743  0x00008b4f enable  0x00000028 
+ 00032744  0x00008b50 rtn 
+ 00032745  0x00008b53 disable  0x00000028 
+ 00032746  0x00008b54 rtn 
+ 00032747  0x00008b57 enable  0x0000002c 
+ 00032748  0x00008b58 rtn 
+ 00032749  0x00008b5b disable  0x0000002c 
+ 00032750  0x00008b5c rtn 
+ 00032751  0x00008b5f setarg  0x00000001 
+ 00032752  0x00008b60 rtn 
+ 00032753  0x00008b63 setarg  0x00000000 
+ 00032754  0x00008b64 rtn 
+ 00032755  0x00008b68 copy  0x00000039 , 0x0000003f 
+ 00032756  0x00008b69 rtn  0x00000034 
+ 00032757  0x00008b6a copy  0x00000006 , 0x0000003f 
+ 00032758  0x00008b6b iadd  0x00000039 , 0x0000003f 
+ 00032759  0x00008b6c increase  0xffffffff , 0x0000003f 
+ 00032760  0x00008b6d copy  0x0000003f , 0x00000006 
+ 00032761  0x00008b6f ifetch  0x00000001 , 0x00000006 
+ 00032762  0x00008b70 increase  0xfffffffe , 0x00000006 
+ 00032763  0x00008b71 istore  0x00000001 , 0x00000005 
+ 00032764  0x00008b72 loop  0x00007ff9 
+ 00032765  0x00008b73 rtn 
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/bt_program23.list
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/bt_program23.list	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/bt_program23.list	(working copy)
@@ -0,0 +1,30005 @@
+              include "bt_format "
+              org 0x0000
+0x0000 000068 bbit1 8 ,pf_patch_ext 
+0x0001 000069 beq patch00_0 ,p_soft_reset 
+0x0002 000070 beq patch00_1 ,p_soft_reset_1 
+0x0003 000071 beq patch00_2 ,p_soft_reset_2 
+0x0004 000072 beq patch10_5 ,p_shutdown_radio 
+0x0005 000073 beq patch11_1 ,p_set_freq_tx 
+0x0006 000074 beq patch14_1 ,p_init_param 
+0x0007 000075 beq patch16_1 ,p_lpm_check_wake_lock 
+0x0008 000076 beq patch16_2 ,p_g24_dispatch 
+0x0009 000077 beq patch18_4 ,p_device_init 
+0x000a 000078 beq patch19_1 ,p_app_flag_store 
+0x000b 000079 beq patch19_2 ,p_app_initflag_check 
+0x000c 000080 beq patch1c_3 ,p_mouse_seting_dpi 
+0x000d 000081 beq patch1c_6 ,p_mouse_motion 
+0x000e 000082 beq patch1d_2 ,p_mouse_bb_event_discovery_btn 
+0x000f 000083 beq patch1d_3 ,p_mouse_start_discovery 
+0x0010 000084 beq patch1d_4 ,p_mouse_stop_discovery 
+0x0011 000085 branch loop 
+:      000086 pf_patch_ext:
+0x0012 000087 beq patch27_7 ,p_le_enable 
+0x0013 000088 beq patch31_4 ,p_twspi_reset 
+0x0014 000089 branch loop 
+:      000091 p_le_enable:
+0x0015 000092 jam 0x36 ,rf_adc_goff 
+0x0016 000093 jam 0x5f ,rf_agc_nsat 
+0x0017 000094 enable le 
+0x0018 000095 jam 7 ,rfen_ulp 
+0x0019 000097 fetch 1 ,mem_250k_freq_enable 
+0x001a 000098 rtn blank 
+0x001b 000099 jam 0xb8 ,rf_iq_gain 
+0x001c 000100 rtn 
+:      000103 p_rssi_signal:
+0x001d 000104 copy pdata ,rega 
+0x001e 000105 fetcht 1 ,mem_rssi_signal_index 
+0x001f 000106 setarg mem_rssi_signal_buf 
+0x0020 000107 iadd temp ,contw 
+0x0021 000108 copy rega ,pdata 
+0x0022 000109 istore 1 ,contw 
+0x0023 000110 increase 1 ,temp 
+0x0024 000111 and_into rssi_buf_len_signal ,temp 
+0x0025 000112 storet 1 ,mem_rssi_signal_index 
+0x0026 000113 rtn 
+:      000115 p_soft_reset:
+0x0027 000116 hfetch 1 ,0x813b 
+0x0028 000117 store 1 ,mem_power_on_flag 
+0x0029 000118 branch soft_reset + 1 
+:      000120 p_soft_reset_1:
+0x002a 000121 arg mem_sp_state ,contw 
+0x002b 000122 arg 12 ,loopcnt 
+0x002c 000123 call clear_mem 
+0x002d 000124 call rfcomm_init 
+0x002e 000125 call init_lmp 
+0x002f 000126 ncall lpm_disable_exen_output ,wake 
+0x0030 000127 call ui_init + 1 
+0x0031 000128 branch soft_reset + 11 
+:      000130 p_soft_reset_2:
+0x0032 000131 call app_lpm_init ,wake 
+0x0033 000132 call publickey_init 
+0x0034 000133 call lpm_recover_clk ,wake 
+:      000134 p_sp_cal_loop:
+0x0035 000135 call sp_calc_sequence 
+0x0036 000136 fetch 1 ,mem_ssp_enable 
+0x0037 000137 branch main_loop ,blank 
+0x0038 000138 fetch 1 ,mem_sp_local_key_invalid 
+0x0039 000139 branch p_sp_cal_loop ,blank 
+0x003a 000140 branch main_loop 
+:      000142 p_init_param:
+0x003b 000143 setarg param_le_version 
+0x003c 000144 store 3 ,mem_lmp_version 
+0x003d 000145 setarg param_le_subversion 
+0x003e 000146 store 2 ,mem_lmp_version + 3 
+0x003f 000147 branch init_param + 12 
+:      000149 p_lpm_check_wake_lock:
+0x0040 000150 rtnmark1 mark_24g 
+0x0041 000151 fetch 1 ,mem_mouse_clear_sensor_data_flag 
+0x0042 000152 branch disable_blank ,blank 
+0x0043 000153 fetch 1 ,mem_mouse_le_conn_param_reject 
+0x0044 000154 beq le_lpm_disable ,disable_blank 
+0x0045 000155 fetch 2 ,mem_sdp_remote_cid 
+0x0046 000156 nbranch disable_blank ,blank 
+0x0047 000157 fetch 1 ,mem_mouse_wheel_trigger 
+0x0048 000158 nbranch disable_blank ,blank 
+0x0049 000159 branch enable_blank 
+:      000162 p_g24_dispatch:
+0x004a 000163 rtnmark0 mark_24g 
+0x004b 000164 fetch 1 ,mem_24g_transmit_by_interrupt 
+0x004c 000165 beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt 
+:      000166 p_g24_transmit_process:
+0x004d 000167 call p_g24_txdata_prep 
+0x004e 000168 nbranch p_g24_nodata_transmit ,user 
+0x004f 000169 call p_g24_rf_sta_check 
+:      000170 p_g24_transmit_start:
+0x0050 000171 call p_g24_transmit_packet 
+0x0051 000172 fetch 1 ,mem_24g_pairing_sm 
+0x0052 000173 rtnne state_24g_pairing_success 
+0x0053 000174 call power_ctrl_start 
+:      000175 p_g24_short_sleep:
+0x0054 000176 call p_g24_lpm_wait 
+0x0055 000177 nrtn user 
+0x0056 000178 call p_clear_wake 
+0x0057 000179 setarg 60500 
+:      000180 p_g24_enter_sleep:
+0x0058 000181 call clk2lpo 
+0x0059 000182 storet 4 ,mem_sleep_counter 
+0x005a 000183 branch lpm_sleep 
+:      000185 p_g24_transmit_by_interrupt:
+0x005b 000186 call p_g24_timer_check 
+0x005c 000187 nrtn user 
+0x005d 000188 call p_g24_interval_calibrate 
+0x005e 000189 branch p_g24_transmit_process 
+:      000190 p_g24_transmit_by_interrupt_exit:
+0x005f 000191 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt 
+0x0060 000192 jam 0 ,mem_24g_transmit_by_interrupt_exit_count 
+:      000193 p_g24_interval_min:
+0x0061 000194 jam 0 ,mem_24g_pac_index 
+0x0062 000195 fetch 1 ,mem_24g_interval_min 
+:      000196 p_g24_current_interval_store:
+0x0063 000197 store 1 ,mem_24g_interval 
+0x0064 000198 rtn 
+:      000199 p_g24_interval_max:
+0x0065 000200 fetch 1 ,mem_24g_interval_max 
+0x0066 000201 branch p_g24_current_interval_store 
+:      000202 p_g24_interval_calibrate:
+0x0067 000203 fetch 1 ,mem_24g_pac_index 
+0x0068 000204 increase 1 ,pdata 
+0x0069 000205 store 1 ,mem_24g_pac_index 
+0x006a 000206 beq 4 ,p_g24_interval_max 
+0x006b 000207 beq 5 ,p_g24_interval_min 
+0x006c 000208 rtn 
+:      000209 p_g24_transmit_by_interrupt_enable:
+0x006d 000210 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt 
+0x006e 000211 jam 0 ,mem_24g_transmit_by_interrupt_exit_count 
+0x006f 000212 rtn 
+:      000214 p_g24_nodata_transmit:
+0x0070 000215 fetch 1 ,mem_24g_abort_pac 
+0x0071 000216 call p_g24_send_abort_packet ,blank 
+:      000217 p_g24_long_sleep:
+0x0072 000218 call p_g24_lpm_wait 
+0x0073 000219 nrtn user 
+0x0074 000220 fetch 3 ,mem_24g_enter_hibernate 
+0x0075 000221 branch p_g24_enter_sleep 
+:      000223 p_g24_lpm_wait:
+0x0076 000224 enable user 
+0x0077 000225 call lpo_calibration 
+0x0078 000226 fetch 3 ,mem_clks_per_lpo 
+0x0079 000227 branch disable_user ,blank 
+0x007a 000228 fetch 1 ,mem_lpm_mode 
+0x007b 000229 branch disable_user ,blank 
+0x007c 000230 fetch 1 ,mem_24g_transmit_by_interrupt 
+0x007d 000231 beq g24_tx_timer_int_enable ,disable_user 
+0x007e 000232 branch p_mouse_setgpio_lpm 
+:      000234 p_g24_send_abort_packet:
+0x007f 000235 jam 1 ,mem_24g_abort_pac 
+0x0080 000236 jam 0 ,mem_24g_rf_hop_ch 
+0x0081 000237 call p_g24_transmit_rf_ctrl_clear 
+0x0082 000238 store 1 ,mem_24g_txbuf 
+0x0083 000239 setarg 0 
+0x0084 000240 store 7 ,mem_24g_txbuf + 1 
+0x0085 000241 fetch 4 ,mem_24g_device_addr 
+0x0086 000242 store 4 ,mem_24g_txbuf + 8 
+0x0087 000243 jam 12 ,mem_24g_datalen 
+0x0088 000244 fetch 1 ,mem_24g_data_type 
+0x0089 000245 set1 bit_abort ,pdata 
+0x008a 000246 store 1 ,mem_24g_data_type 
+0x008b 000247 call p_g24_txdata_enable_tx 
+0x008c 000248 branch p_g24_transmit_start 
+:      000250 p_g24_set_device_addr:
+0x008d 000251 call adc_init_data 
+0x008e 000252 fetch 4 ,mem_lap 
+0x008f 000253 store 4 ,mem_24g_device_addr 
+0x0090 000254 rtn 
+:      000256 p_g24_transmit_rf_sta_init:
+0x0091 000257 jam 1 ,mem_24g_rf_last_sta 
+0x0092 000258 jam 0 ,mem_24g_sync_cnt 
+:      000259 p_g24_transmit_rf_ctrl_clear:
+0x0093 000260 fetch 1 ,mem_24g_data_type 
+0x0094 000261 and_into bits_data ,pdata 
+0x0095 000262 store 1 ,mem_24g_data_type 
+0x0096 000263 rtn 
+:      000265 p_g24_hop_ch_enable:
+0x0097 000266 fetch 1 ,mem_24g_data_type 
+0x0098 000267 set1 bit_hop ,pdata 
+0x0099 000268 store 1 ,mem_24g_data_type 
+0x009a 000270 store 1 ,mem_24g_txpayload 
+0x009b 000271 rtn 
+:      000272 p_g24_hop_ch_disable:
+0x009c 000273 fetch 1 ,mem_24g_data_type 
+0x009d 000274 set0 bit_hop ,pdata 
+0x009e 000275 store 1 ,mem_24g_data_type 
+0x009f 000276 rtn 
+:      000278 p_g24_transmit_hop_pac_fail:
+0x00a0 000279 call power_ctrl_pac_succ_decrs 
+0x00a1 000280 fetch 1 ,mem_24g_rf_work_stage 
+0x00a2 000281 beq 1 ,p_g24_transmit_hop_pac_fail_wo_hop 
+0x00a3 000282 beq 2 ,p_g24_transmit_hop_pac_fail_hop_stage2 
+0x00a4 000283 rtn 
+:      000284 p_g24_transmit_hop_pac_fail_wo_hop:
+0x00a5 000285 jam 2 ,mem_24g_sync_cnt 
+:      000286 p_g24_transmit_hop_pac_fail_stage1:
+0x00a6 000287 jam 0 ,mem_24g_hop_pac_retry 
+0x00a7 000288 jam 0 ,mem_24g_rf_last_sta 
+0x00a8 000289 branch p_g24_transmit_rf_ctrl_clear 
+:      000291 p_g24_transmit_hop_pac_fail_hop_stage2:
+0x00a9 000292 jam 0 ,mem_24g_rf_hop_ch 
+0x00aa 000293 branch p_g24_transmit_hop_pac_fail_stage1 
+:      000296 p_g24_transmit_pac_fail_hop_stage3:
+0x00ab 000297 fetch 2 ,mem_24g_txfail_cnt 
+0x00ac 000298 increase 1 ,pdata 
+0x00ad 000299 store 2 ,mem_24g_txfail_cnt 
+0x00ae 000300 bbit1 6 ,p_g24_tx_attempt_fail 
+0x00af 000301 fetch 1 ,mem_24g_rf_hop_ch 
+0x00b0 000302 beq 1 ,p_g24_rf_hop_fastly 
+0x00b1 000303 jam 1 ,mem_24g_rf_hop_ch 
+:      000304 p_g24_rf_hop_attemp_again:
+0x00b2 000305 fetch 1 ,mem_24g_rf_hop_ch 
+0x00b3 000306 bne 1 ,p_g24_transmit_rf_ctrl_clear 
+:      000307 p_g24_rf_hop_fastly:
+0x00b4 000308 fetch 1 ,mem_24g_hop_fastly_cnt 
+0x00b5 000309 increase 1 ,pdata 
+0x00b6 000310 store 1 ,mem_24g_hop_fastly_cnt 
+0x00b7 000311 beq 4 ,p_g24_rf_hop_fastly_exit 
+0x00b8 000312 call p_g24_ch 
+0x00b9 000313 jam 2 ,mem_24g_max_retry 
+0x00ba 000314 branch p_g24_transmit_packet 
+:      000316 p_g24_rf_hop_fastly_exit:
+0x00bb 000317 call power_ctrl_pac_succ_decrs 
+0x00bc 000318 jam 0 ,mem_24g_hop_fastly_cnt 
+0x00bd 000319 branch p_g24_transmit_rf_ctrl_clear 
+:      000321 p_g24_transmit_hop_pac_succ_wo_hop:
+0x00be 000322 jam 2 ,mem_24g_sync_cnt 
+:      000323 p_g24_transmit_hop_pac_succ:
+0x00bf 000324 jam 1 ,mem_24g_rf_last_sta 
+0x00c0 000325 jam 0 ,mem_24g_rf_hop_ch 
+0x00c1 000326 branch p_g24_transmit_rf_ctrl_clear 
+:      000328 p_g24_transmit_succ_rf_config:
+0x00c2 000329 fetch 1 ,mem_24g_rf_work_stage 
+0x00c3 000330 beq 3 ,p_g24_transmit_hop_pac_succ 
+0x00c4 000331 fetch 1 ,mem_24g_data_type 
+0x00c5 000332 isolate0 bit_hop ,pdata 
+0x00c6 000333 branch p_g24_transmit_rf_sta_init ,true 
+0x00c7 000334 fetch 1 ,mem_24g_rf_work_stage 
+0x00c8 000335 beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop 
+0x00c9 000336 beq 2 ,p_g24_transmit_hop_pac_succ 
+0x00ca 000337 rtn 
+:      000339 p_g24_rf_sta_check:
+0x00cb 000340 fetch 1 ,mem_24g_pairing_sm 
+0x00cc 000341 rtnne state_24g_pairing_success 
+0x00cd 000342 call p_g24_rf_laststa_synccnt_check 
+0x00ce 000343 ncall p_g24_rf_sync_cnt_check ,user2 
+0x00cf 000344 rtn 
+:      000346 p_g24_rf_laststa_synccnt_check:
+0x00d0 000347 disable user2 
+0x00d1 000348 fetch 1 ,mem_24g_rf_last_sta 
+0x00d2 000349 rtnne 1 
+0x00d3 000350 fetch 1 ,mem_24g_sync_cnt 
+0x00d4 000351 rtnne 0 
+0x00d5 000352 jam 1 ,mem_24g_rf_work_stage 
+0x00d6 000353 jam 4 ,mem_24g_max_retry 
+0x00d7 000354 branch enable_user2 
+:      000356 p_g24_rf_sync_cnt_check:
+0x00d8 000357 fetch 1 ,mem_24g_sync_cnt 
+0x00d9 000358 branch p_g24_rf_hop_attemp ,blank 
+0x00da 000359 increase -1 ,pdata 
+0x00db 000360 store 1 ,mem_24g_sync_cnt 
+0x00dc 000361 jam 2 ,mem_24g_rf_work_stage 
+0x00dd 000362 jam 4 ,mem_24g_max_retry 
+0x00de 000363 branch p_g24_ch 
+:      000365 p_g24_rf_hop_attemp:
+0x00df 000366 jam 3 ,mem_24g_rf_work_stage 
+0x00e0 000367 fetch 1 ,mem_24g_rf_hop_ch 
+0x00e1 000368 nbranch p_g24_rf_hop_attemp_again ,blank 
+0x00e2 000369 jam 2 ,mem_24g_max_retry 
+0x00e3 000370 branch p_g24_ch 
+:      000372 p_g24_txdata_prep:
+0x00e4 000373 fetch 1 ,mem_24g_pairing_sm 
+0x00e5 000374 bne state_24g_pairing_success ,p_g24_pairing_sm 
+:      000375 p_g24_txdata_prep_packeage_data:
+0x00e6 000376 call p_g24_package_data 
+:      000377 p_g24_txdata_enable_tx:
+0x00e7 000378 call p_g24_transmit_prep 
+0x00e8 000379 jam ensure_on_24g ,mem_24g_ensure 
+0x00e9 000380 rtn 
+:      000382 p_g24_package_data:
+0x00ea 000383 fetch 2 ,mem_cb_24g_data 
+0x00eb 000384 call callback_func 
+0x00ec 000385 branch p_g24_accumulate_mouse_data ,user 
+0x00ed 000386 fetch 7 ,mem_24g_txbuf + 1 
+0x00ee 000387 rtn blank 
+0x00ef 000388 branch enable_user 
+:      000389 p_g24_accumulate_mouse_data:
+0x00f0 000390 jam 0 ,mem_24g_abort_pac 
+0x00f1 000391 add rega ,1 ,pdata 
+0x00f2 000392 store 1 ,mem_24g_datalen 
+0x00f3 000393 call p_g24_transmit_rf_ctrl_clear 
+0x00f4 000394 store 1 ,mem_24g_txbuf 
+0x00f5 000395 ifetcht 1 ,contw 
+0x00f6 000396 ifetch 1 ,regb 
+0x00f7 000397 ior temp ,pdata 
+0x00f8 000398 istore 1 ,contw 
+0x00f9 000399 increase 1 ,regb 
+0x00fa 000400 ifetch 4 ,regb 
+0x00fb 000401 istore 4 ,contw 
+0x00fc 000402 increase 4 ,regb 
+0x00fd 000403 arg mem_24g_txbuf + 6 ,contw 
+0x00fe 000404 arg 2 ,loopcnt 
+:      000405 p_g24_accumulation_loop:
+0x00ff 000406 ifetch 1 ,regb 
+0x0100 000407 ifetcht 1 ,contw 
+0x0101 000408 iadd temp ,pdata 
+0x0102 000409 istore 1 ,contw 
+0x0103 000410 increase 1 ,regb 
+0x0104 000411 loop p_g24_accumulation_loop 
+0x0105 000412 rtn 
+:      000414 p_g24_transmit_packet:
+0x0106 000415 jam 0 ,mem_24g_retry 
+:      000416 p_g24_transmit_loop:
+0x0107 000417 arg param_rx_setup ,timeup 
+0x0108 000418 until clkn_rt ,meet 
+0x0109 000419 call p_g24_transmit_receive_ack 
+0x010a 000420 fetch 1 ,mem_24g_no_ack 
+0x010b 000421 rtneq no_ack_24g 
+0x010c 000422 nbranch p_g24_retransmit ,sync 
+0x010d 000423 nbranch p_g24_retransmit ,user3 
+0x010e 000424 call p_g24_txbuf_clear 
+0x010f 000425 call p_g24_ackpayload_parse 
+0x0110 000426 call power_ctrl_pac_succ_incrs 
+:      000427 p_g24_transmit_next_packet:
+0x0111 000428 fetch 1 ,mem_24g_pid 
+0x0112 000429 increase 1 ,pdata 
+0x0113 000430 store 1 ,mem_24g_pid 
+0x0114 000431 fetch 1 ,mem_24g_pairing_sm 
+0x0115 000432 bne state_24g_pairing_success ,p_g24_paring_mode_start 
+0x0116 000433 call p_g24_transmit_succ_rf_config 
+:      000434 p_g24_transmit_abandon:
+0x0117 000435 setarg 0 
+0x0118 000436 store 2 ,mem_24g_txfail_cnt 
+0x0119 000437 store 1 ,mem_24g_get_ack_fail 
+0x011a 000438 store 1 ,mem_24g_hop_pac_retry 
+0x011b 000439 jam ensure_off_24g ,mem_24g_ensure 
+0x011c 000440 rtn 
+:      000442 p_g24_txbuf_clear:
+0x011d 000443 arg 4 ,loopcnt 
+0x011e 000444 arg mem_24g_txbuf ,contw 
+0x011f 000445 branch memset0 
+:      000447 p_g24_paring_mode_start:
+0x0120 000448 call power_ctrl_pac_succ_cnt_init 
+0x0121 000449 branch p_g24_paring_mode 
+:      000451 p_g24_transmit_receive_ack:
+0x0122 000452 disable user3 
+0x0123 000453 call p_g24_transmit 
+0x0124 000456 fetch 1 ,mem_24g_no_ack 
+0x0125 000457 beq no_ack_24g ,p_g24_transmit_no_ack 
+0x0126 000458 force 0 ,radio_ctrl 
+0x0127 000459 fetch 4 ,mem_24g_addr 
+0x0128 000460 iforce access 
+0x0129 000461 fetcht 1 ,mem_last_freq 
+0x012a 000462 call set_freq_rx 
+0x012b 000463 call rf_rx_enable 
+0x012c 000464 call p_g24_receive_rxon 
+0x012d 000465 call p_g24_end_of_packet ,user3 
+0x012e 000466 rtn 
+:      000467 p_g24_transmit_no_ack:
+0x012f 000468 call p_g24_end_of_packet 
+0x0130 000469 branch p_g24_transmit_next_packet 
+:      000471 p_g24_retransmit:
+0x0131 000472 fetch 1 ,mem_24g_get_ack_fail 
+0x0132 000473 increase 1 ,pdata 
+0x0133 000474 store 1 ,mem_24g_get_ack_fail 
+0x0134 000475 fetch 1 ,mem_24g_pairing_sm 
+0x0135 000476 bne state_24g_pairing_success ,p_g24_tx_paring_retry 
+0x0136 000477 fetcht 1 ,mem_24g_retry 
+0x0137 000478 increase 1 ,temp 
+0x0138 000479 storet 1 ,mem_24g_retry 
+0x0139 000480 fetch 1 ,mem_24g_max_retry 
+0x013a 000481 isub temp ,pdata 
+0x013b 000482 nbranch p_g24_transmit_loop ,blank 
+0x013c 000483 fetch 1 ,mem_24g_rf_work_stage 
+0x013d 000484 beq 3 ,p_g24_transmit_pac_fail_hop_stage3 
+0x013e 000485 fetch 1 ,mem_24g_hop_pac_retry 
+0x013f 000486 increase 1 ,pdata 
+0x0140 000487 store 1 ,mem_24g_hop_pac_retry 
+0x0141 000488 beq 2 ,p_g24_transmit_hop_pac_fail 
+0x0142 000489 call p_g24_hop_ch_enable 
+0x0143 000490 jam 1 ,mem_24g_max_retry 
+0x0144 000491 branch p_g24_transmit_packet 
+:      000493 p_g24_tx_paring_retry:
+0x0145 000494 fetch 1 ,mem_24g_get_ack_fail 
+0x0146 000495 rtnne 0xff 
+0x0147 000496 jam 0 ,mem_24g_get_ack_fail 
+0x0148 000497 branch p_g24_stop_g24_mode 
+:      000499 p_g24_tx_attempt_fail:
+0x0149 000500 setarg 0 
+0x014a 000501 store 2 ,mem_24g_txfail_cnt 
+:      000502 p_g24_stop_g24_mode:
+0x014b 000503 jam bt_evt_24g_attempt_fail ,mem_fifo_temp 
+0x014c 000504 branch ui_ipc_send_event 
+:      000506 p_g24_ackpayload_parse:
+0x014d 000507 call p_g24_read_len_pid_crc 
+0x014e 000508 fetch 1 ,mem_24g_rxdata_length 
+0x014f 000509 rtn blank 
+0x0150 000510 iforce loopcnt 
+0x0151 000511 arg mem_24g_rxbuf + 2 ,contr 
+0x0152 000512 arg mem_24g_rxpayload ,contw 
+0x0153 000513 branch memcpy 
+:      000515 p_g24_start_pairing_sm1:
+0x0154 000516 set1 mark_24g ,mark 
+0x0155 000517 call p_g24_pair_init 
+:      000518 p_g24_set_pairing_sm_1:
+0x0156 000519 jam state_24g_pairing_1 ,mem_24g_pairing_sm 
+0x0157 000520 rtn 
+:      000522 p_g24_pair_init:
+0x0158 000523 jam tx_power_pair ,mem_tx_power 
+0x0159 000524 jam 0 ,mem_24g_pid 
+0x015a 000525 jam g24_pair_ch ,mem_24g_ch 
+0x015b 000526 fetch 4 ,mem_24g_paring_addr 
+0x015c 000527 branch p_g24_update_addr_and_synccrc8 
+:      000529 p_g24_pairing_sm:
+0x015d 000530 fetch 1 ,mem_24g_ensure 
+0x015e 000531 beq ensure_on_24g ,enable_user 
+0x015f 000532 fetch 1 ,mem_24g_pairing_sm 
+0x0160 000533 beq state_24g_pairing_1 ,p_g24_pairing_sm_1 
+0x0161 000534 beq state_24g_pairing_2 ,p_g24_pairing_sm_2 
+0x0162 000535 beq state_24g_pairing_3 ,p_g24_pairing_sm_3 
+0x0163 000536 branch assert 
+:      000538 p_g24_pairing_sm_1:
+0x0164 000539 jam state_24g_pairing_1_waiting_ack ,mem_24g_pairing_sm 
+0x0165 000540 jam 0xaa ,mem_24g_common_temp 
+0x0166 000541 branch p_g24_pairing_sm_common 
+:      000542 p_g24_pairing_sm_2:
+0x0167 000543 jam state_24g_pairing_2_waiting_ack ,mem_24g_pairing_sm 
+0x0168 000544 jam 0x55 ,mem_24g_common_temp 
+0x0169 000545 branch p_g24_pairing_sm_common 
+:      000546 p_g24_pairing_sm_3:
+0x016a 000547 jam state_24g_pairing_3_waiting_ack ,mem_24g_pairing_sm 
+0x016b 000548 jam 0x22 ,mem_24g_common_temp 
+:      000549 p_g24_pairing_sm_common:
+0x016c 000550 fetch 1 ,mem_24g_data_type 
+0x016d 000551 and_into bits_data ,pdata 
+0x016e 000552 store 1 ,mem_24g_common_temp + 1 
+0x016f 000553 fetch 4 ,mem_24g_device_addr 
+0x0170 000554 store 4 ,mem_24g_common_temp + 2 
+:      000555 p_g24_put_pairing_data_in_buff:
+0x0171 000556 jam 0 ,mem_24g_common_temp + 6 
+0x0172 000557 arg mem_24g_common_temp ,rega 
+0x0173 000558 arg 7 ,temp 
+0x0174 000559 call p_g24_put_data_in_buff 
+0x0175 000560 call p_g24_txdata_enable_tx 
+0x0176 000561 branch enable_user 
+:      000563 p_g24_paring_mode:
+0x0177 000564 fetch 1 ,mem_24g_pairing_sm 
+0x0178 000565 rtneq state_24g_pairing_success 
+0x0179 000566 beq state_24g_pairing_1_waiting_ack ,p_g24_pairing_sm_1_waiting_ack 
+0x017a 000567 beq state_24g_pairing_2_waiting_ack ,p_g24_pairing_sm_2_waiting_ack 
+0x017b 000568 beq state_24g_pairing_3_waiting_ack ,p_g24_pairing_sm_3_waiting_ack 
+0x017c 000569 rtn 
+:      000572 p_g24_pairing_sm_1_waiting_ack:
+0x017d 000573 jam state_24g_pairing_2 ,mem_24g_pairing_sm 
+0x017e 000574 branch p_g24_transmit_abandon 
+:      000575 p_g24_pairing_sm_2_waiting_ack:
+0x017f 000576 jam state_24g_pairing_3 ,mem_24g_pairing_sm 
+0x0180 000577 branch p_g24_transmit_abandon 
+:      000578 p_g24_pairing_sm_3_waiting_ack:
+0x0181 000579 jam state_24g_pairing_success ,mem_24g_pairing_sm 
+0x0182 000580 jam bt_evt_24g_pairing_complete ,mem_fifo_temp 
+0x0183 000581 call ui_ipc_send_event 
+0x0184 000582 fetch 4 ,mem_24g_rxpayload + 2 
+0x0185 000583 call p_g24_update_addr_and_synccrc8 
+0x0186 000584 branch p_g24_transmit_abandon 
+:      000586 p_g24_start_24g_mode:
+0x0187 000587 set0 mark_24g ,mark 
+0x0188 000588 call p_g24_ch_syncword_crc8_init 
+0x0189 000589 fetch 1 ,mem_24g_pairing_sm 
+0x018a 000590 rtnne state_24g_pairing_success 
+0x018b 000591 call p_g24_tx_attemp_data_prep 
+:      000592 p_g24_tx_attemp_dongle:
+0x018c 000593 setarg 0 
+0x018d 000594 store 2 ,mem_24g_check_dongle_times 
+:      000595 p_g24_tx_attemp_dongle_loop:
+0x018e 000596 call lpo_calibration 
+0x018f 000597 nop 2000 
+0x0190 000598 fetch 1 ,mem_24g_check_dongle_times 
+0x0191 000599 beq 0xff ,p_g24_stop_g24_mode 
+0x0192 000600 call p_g24_transmit_receive_ack 
+0x0193 000601 nbranch p_g24_attemp_txdata_retry ,sync 
+0x0194 000602 nbranch p_g24_attemp_txdata_retry ,user3 
+:      000603 p_g24_tx_attemp_dongle_succ:
+0x0195 000604 set1 mark_24g ,mark 
+0x0196 000605 setarg 0 
+0x0197 000606 store 2 ,mem_24g_check_dongle_times 
+0x0198 000607 jam bt_evt_24g_attempt_success ,mem_fifo_temp 
+0x0199 000608 call ui_ipc_send_event 
+0x019a 000609 call p_g24_txbuf_clear 
+0x019b 000610 branch p_g24_transmit_by_interrupt_enable 
+:      000612 p_g24_tx_attemp_data_prep:
+0x019c 000613 jam 0xff ,mem_24g_common_temp 
+0x019d 000614 fetch 1 ,mem_24g_data_type 
+0x019e 000615 store 1 ,mem_24g_common_temp + 1 
+0x019f 000616 fetch 4 ,mem_24g_device_addr 
+0x01a0 000617 store 4 ,mem_24g_common_temp + 2 
+0x01a1 000618 arg 6 ,temp 
+0x01a2 000619 arg mem_24g_common_temp ,rega 
+0x01a3 000620 call p_g24_put_data_in_buff 
+0x01a4 000621 branch p_g24_transmit_prep 
+:      000623 p_g24_attemp_txdata_retry:
+0x01a5 000624 fetch 2 ,mem_24g_check_dongle_times 
+0x01a6 000625 increase 1 ,pdata 
+0x01a7 000626 store 2 ,mem_24g_check_dongle_times 
+0x01a8 000627 call p_g24_ch 
+0x01a9 000628 branch p_g24_tx_attemp_dongle_loop 
+:      000630 p_g24_auto_pair_start:
+0x01aa 000631 set0 mark_24g ,mark 
+0x01ab 000632 call p_g24_auto_pair_all_powerful 
+0x01ac 000633 call p_g24_tx_attemp_data_prep 
+:      000634 p_g24_auto_pair_restart:
+0x01ad 000635 jam 0 ,mem_24g_check_dongle_times 
+:      000636 p_g24_auto_pair_start_loop:
+0x01ae 000637 call lpo_calibration 
+0x01af 000638 nop 2000 
+0x01b0 000639 fetch 1 ,mem_24g_check_dongle_times 
+0x01b1 000640 beq 0xff ,p_g24_stop_g24_mode 
+0x01b2 000641 call p_g24_transmit_receive_ack 
+0x01b3 000642 nbranch p_g24_auto_pair_retry ,sync 
+0x01b4 000643 nbranch p_g24_auto_pair_retry ,user3 
+0x01b5 000644 call p_g24_ackpayload_parse 
+0x01b6 000645 fetch 4 ,mem_24g_addr 
+0x01b7 000646 fetcht 4 ,mem_24g_paring_addr 
+0x01b8 000647 isub temp ,null 
+0x01b9 000648 branch p_g24_start_pairing_sm1 ,zero 
+0x01ba 000649 branch p_g24_tx_attemp_dongle_succ 
+:      000651 p_g24_auto_pair_retry:
+0x01bb 000652 fetch 1 ,mem_24g_check_dongle_times 
+0x01bc 000653 increase 1 ,pdata 
+0x01bd 000654 store 1 ,mem_24g_check_dongle_times 
+0x01be 000655 fetch 1 ,mem_24g_auto_paring_switch 
+0x01bf 000656 increase 1 ,pdata 
+0x01c0 000657 and_into 1 ,pdata 
+0x01c1 000658 store 1 ,mem_24g_auto_paring_switch 
+0x01c2 000659 beq 0 ,p_g24_auto_pair_device_attemp 
+0x01c3 000660 beq 1 ,p_g24_auto_pair_pair_attemp 
+0x01c4 000661 rtn 
+:      000663 p_g24_auto_pair_all_powerful:
+0x01c5 000664 jam tx_power_pair ,mem_tx_power 
+0x01c6 000665 call p_mouse_read_24g_addr 
+:      000666 p_g24_ch_syncword_crc8_init:
+0x01c7 000667 call p_g24_syncword_crc8 
+0x01c8 000668 branch p_g24_ch 
+:      000670 p_g24_auto_pair_device_attemp:
+0x01c9 000671 call p_g24_auto_pair_all_powerful 
+0x01ca 000672 branch p_g24_auto_pair_start_loop 
+:      000674 p_g24_auto_pair_pair_attemp:
+0x01cb 000675 call p_g24_pair_init 
+0x01cc 000676 branch p_g24_auto_pair_start_loop 
+:      000678 p_g24_check_51cmd_stop_24g:
+0x01cd 000679 set0 mark_24g ,mark 
+0x01ce 000680 call le_disable 
+:      000681 p_mouse_disable_g24_pairing_flag:
+0x01cf 000682 arg mosue_24g_pairing_flag ,queue 
+0x01d0 000683 branch mouse_disable_function_flag 
+:      000685 p_g24_put_data_in_buff:
+0x01d1 000686 storet 1 ,mem_24g_datalen 
+0x01d2 000687 copy temp ,loopcnt 
+0x01d3 000688 arg mem_24g_txbuf ,contw 
+0x01d4 000689 copy rega ,contr 
+0x01d5 000690 branch memcpy 
+:      000692 p_g24_read_len_pid_crc:
+0x01d6 000694 fetch 1 ,mem_24g_rxbuf + 1 
+0x01d7 000695 rshift3 pdata ,pdata 
+0x01d8 000696 store 1 ,mem_24g_rxdata_length 
+0x01d9 000698 increase 1 ,pdata 
+0x01da 000699 arg mem_24g_rxbuf + 1 ,contr 
+0x01db 000700 iadd contr ,contr 
+0x01dc 000701 ifetch 3 ,contr 
+0x01dd 000702 store 3 ,mem_24g_sta_crc 
+0x01de 000704 fetch 1 ,mem_24g_rxbuf + 1 
+0x01df 000705 rshift pdata ,pdata 
+0x01e0 000706 and pdata ,0x03 ,pdata 
+0x01e1 000707 store 1 ,mem_24g_sta_pid 
+0x01e2 000708 rtn 
+:      000710 p_g24_update_addr_and_synccrc8:
+0x01e3 000711 store 4 ,mem_24g_addr 
+:      000713 p_g24_syncword_crc8:
+0x01e4 000714 arg 0 ,rega 
+0x01e5 000715 arg 4 ,loopcnt 
+0x01e6 000716 arg mem_24g_addr ,contr 
+:      000717 p_g24_syncword_crc8_loop:
+0x01e7 000718 ifetch 1 ,contr 
+0x01e8 000719 iadd rega ,rega 
+0x01e9 000720 loop p_g24_syncword_crc8_loop 
+0x01ea 000721 copy rega ,pdata 
+0x01eb 000722 store 2 ,mem_24g_syncword 
+0x01ec 000723 fetch 1 ,mem_24g_syncword 
+0x01ed 000724 fetcht 1 ,mem_24g_syncword + 1 
+0x01ee 000725 iadd temp ,pdata 
+0x01ef 000726 store 1 ,mem_24g_syncword_crc8 
+0x01f0 000727 rtn 
+:      000729 p_g24_transmit_prep:
+0x01f1 000732 fetch 1 ,mem_24g_datalen 
+0x01f2 000733 increase 2 ,pdata 
+0x01f3 000734 store 1 ,mem_24g_txlen 
+0x01f4 000736 fetch 1 ,mem_24g_data_type 
+0x01f5 000737 store 1 ,mem_24g_txpayload 
+0x01f6 000739 fetch 1 ,mem_24g_datalen 
+0x01f7 000740 lshift3 pdata ,pdata 
+0x01f8 000741 fetcht 1 ,mem_24g_pid 
+0x01f9 000742 and temp ,0x03 ,temp 
+0x01fa 000743 lshift temp ,temp 
+0x01fb 000744 ior temp ,pdata 
+0x01fc 000745 fetcht 1 ,mem_24g_no_ack 
+0x01fd 000746 iadd temp ,pdata 
+0x01fe 000747 istore 1 ,contw 
+0x01ff 000749 fetch 1 ,mem_24g_datalen 
+0x0200 000750 iforce loopcnt 
+0x0201 000751 arg mem_24g_txbuf ,contr 
+0x0202 000752 branch memcpy 
+:      000754 p_g24_ch:
+0x0203 000755 fetcht 1 ,mem_24g_current_ch_number 
+0x0204 000756 call p_g24_ch_map_size 
+0x0205 000757 storet 1 ,mem_24g_current_ch_number 
+0x0206 000758 rtn 
+:      000760 p_g24_ch_map_size:
+0x0207 000761 call p_g24_ch_calc 
+0x0208 000762 increase 1 ,temp 
+0x0209 000763 and_into 3 ,temp 
+0x020a 000764 rtn 
+:      000766 p_g24_ch_calc:
+0x020b 000767 fetch 1 ,mem_24g_addr 
+0x020c 000768 and_into 0x03 ,pdata 
+0x020d 000769 mul32 pdata ,4 ,rega 
+0x020e 000770 setarg mem_24g_ch_map1 
+0x020f 000771 iadd rega ,pdata 
+0x0210 000772 iadd temp ,contr 
+0x0211 000773 ifetch 1 ,contr 
+0x0212 000774 store 1 ,mem_24g_ch 
+0x0213 000775 rtn 
+:      000777 p_g24_prep:
+0x0214 000778 disable enable_crc 
+0x0215 000779 disable enable_white 
+0x0216 000780 setarg 0x555555 
+0x0217 000781 iforce crc24_init 
+0x0218 000782 fetch 1 ,mem_24g_ch 
+0x0219 000783 reverse pdata ,temp 
+0x021a 000784 set1 1 ,temp 
+0x021b 000785 rshift temp ,white_init 
+0x021c 000786 rtn 
+:      000788 p_g24_receive_packet:
+0x021d 000789 call le_enable 
+0x021e 000790 fetch 4 ,mem_24g_addr 
+0x021f 000791 iforce access 
+0x0220 000792 call set_sync_on 
+0x0221 000793 fetcht 1 ,mem_24g_ch 
+0x0222 000794 call set_freq_rx 
+0x0223 000795 setarg param_pll_setup 
+0x0224 000796 call sleep 
+0x0225 000797 call rf_rx_enable 
+:      000798 p_g24_receive_rxon:
+0x0226 000801 call p_g24_prep 
+0x0227 000802 disable user3 
+0x0228 000803 enable decode_fec0 
+0x0229 000804 enable is_rx 
+0x022a 000805 disable is_tx 
+0x022b 000806 enable swfine 
+0x022c 000807 fetch 2 ,mem_24g_rx_window 
+0x022d 000808 iforce stop_watch 
+0x022e 000809 correlate null ,timeout 
+0x022f 000810 nbranch p_g24_sync_timeout ,sync 
+0x0230 000813 disable decode_fec0 
+0x0231 000814 enable decode_fec1 
+0x0232 000815 enable enable_white 
+0x0233 000816 enable enable_crc 
+0x0234 000817 call p_g24_receive_byte 
+0x0235 000818 store 1 ,mem_24g_get_syncword_crc8 
+0x0236 000819 fetcht 1 ,mem_24g_syncword_crc8 
+0x0237 000820 isub temp ,null 
+0x0238 000821 nbranch p_g24_end_of_packet ,zero 
+0x0239 000822 call p_g24_receive_byte 
+0x023a 000823 store 1 ,mem_24g_rxbuf 
+0x023b 000824 fetch 1 ,mem_24g_mode 
+0x023c 000825 sub pdata ,rx_24g ,null 
+0x023d 000826 branch p_g24_receive_skip ,zero 
+0x023e 000827 fetch 1 ,mem_24g_rxbuf 
+0x023f 000828 fetcht 1 ,mem_24g_data_type 
+0x0240 000829 icompare bits_data ,temp 
+0x0241 000830 nbranch p_g24_end_of_packet ,true 
+:      000831 p_g24_receive_skip:
+0x0242 000832 call p_g24_receive_byte 
+0x0243 000833 istore 1 ,contw 
+0x0244 000834 rshift3 pdata ,pdata 
+0x0245 000835 and pdata ,0x1f ,loopcnt 
+0x0246 000836 branch p_g24rx_nopayload ,zero 
+:      000837 p_g24rx_loop:
+0x0247 000838 call p_g24_receive_byte 
+0x0248 000839 istore 1 ,contw 
+0x0249 000840 loop p_g24rx_loop 
+:      000841 p_g24rx_nopayload:
+0x024a 000843 copy contw ,rega 
+0x024b 000844 call p_g24_receive_byte 
+0x024c 000845 store 1 ,mem_rssi_hex_received 
+0x024d 000846 copy rega ,contw 
+0x024e 000847 parse demod ,bucket ,24 
+0x024f 000848 enable swfine 
+0x0250 000849 arg param_sifs ,stop_watch 
+0x0251 000850 rshift32 pdata ,pdata 
+0x0252 000851 rshift16 pdata ,pdata 
+0x0253 000852 istore 3 ,contw 
+0x0254 000853 disable decode_fec1 
+0x0255 000854 branch p_g24_end_of_packet ,crc_failed 
+0x0256 000857 enable user3 
+0x0257 000858 fetch 1 ,mem_last_freq 
+0x0258 000859 add pdata ,0 ,rega 
+0x0259 000860 call rf_write_freq 
+0x025a 000861 disable decode_fec0 
+0x025b 000862 call set_sync_on 
+0x025c 000863 fetch 1 ,mem_rssi_hex_received 
+0x025d 000864 call p_rssi_signal 
+0x025e 000865 rtn 
+:      000867 p_g24_receive_byte:
+0x025f 000868 parse demod ,bucket ,8 
+0x0260 000869 rshift3 pwindow ,pdata 
+0x0261 000870 rtn 
+:      000872 p_g24_end_of_packet:
+0x0262 000873 disable encode_fec1 
+0x0263 000874 disable decode_fec1 
+0x0264 000875 call end_of_packet 
+0x0265 000876 rtn 
+:      000878 p_g24_sync_timeout:
+0x0266 000879 branch p_g24_end_of_packet 
+:      000881 p_g24_set_freq_tx:
+0x0267 000882 call set_sync_on 
+0x0268 000883 fetcht 1 ,mem_24g_ch 
+0x0269 000884 branch set_freq_tx 
+:      000886 p_g24_transmit:
+0x026a 000887 call le_enable 
+0x026b 000888 fetch 4 ,mem_24g_addr 
+0x026c 000889 iforce access 
+0x026d 000890 call p_g24_prep 
+0x026e 000891 call p_g24_set_freq_tx 
+0x026f 000892 set1 txgfsk ,radio_ctrl 
+0x0270 000893 enable encode_fec0 
+0x0271 000894 enable is_tx 
+0x0272 000895 disable is_rx 
+0x0273 000898 rshift16 access ,pdata 
+0x0274 000899 rshift8 pdata ,pdata 
+0x0275 000900 rshift4 pdata ,pdata 
+0x0276 000901 inject mod ,40 
+0x0277 000902 disable encode_fec0 
+0x0278 000903 enable encode_fec1 
+0x0279 000904 enable enable_white 
+0x027a 000905 enable enable_crc 
+0x027b 000906 fetch 1 ,mem_24g_syncword_crc8 
+0x027c 000907 inject mod ,8 
+0x027d 000908 fetch 1 ,mem_24g_txlen 
+0x027e 000909 iforce loopcnt 
+0x027f 000910 arg mem_24g_txpayload ,contr 
+:      000911 p_g24tr_loop:
+0x0280 000912 ifetch 1 ,contr 
+0x0281 000913 inject mod ,8 
+0x0282 000914 loop p_g24tr_loop 
+0x0283 000917 enable enable_parity 
+0x0284 000918 inject mod ,24 
+0x0285 000919 disable enable_parity 
+0x0286 000920 until null ,tx_clear 
+0x0287 000921 nop 100 
+0x0288 000922 disable encode_fec0 
+0x0289 000923 disable encode_fec1 
+0x028a 000924 rtn 
+:      000926 p_g24_timer_check:
+0x028b 000927 call disable_user 
+0x028c 000928 fetcht 4 ,mem_24g_tx_btclk 
+0x028d 000929 copy clkn_bt ,pdata 
+0x028e 000930 isub temp ,null 
+0x028f 000931 ncall g24_timer_timeout ,positive 
+0x0290 000932 copy pdata ,regb 
+0x0291 000933 fetch 4 ,mem_24g_tx_btclk 
+0x0292 000934 fetcht 1 ,mem_24g_interval 
+0x0293 000935 iadd temp ,temp 
+0x0294 000936 copy regb ,pdata 
+0x0295 000937 isub temp ,null 
+0x0296 000938 nrtn positive 
+0x0297 000939 set0 28 ,pdata 
+0x0298 000940 store 4 ,mem_24g_tx_btclk 
+0x0299 000941 branch enable_user 
+:      000943 p_rssi_noise:
+0x029a 000944 call save_rssi 
+0x029b 000945 rtn blank 
+0x029c 000946 fetcht 1 ,mem_rssi_noise_index 
+0x029d 000947 arg mem_rssi_noise_buffer ,rega 
+0x029e 000948 call p_rssi_store 
+0x029f 000949 storet 1 ,mem_rssi_noise_index 
+0x02a0 000950 rtn 
+:      000952 p_rssi_store:
+0x02a1 000953 copy rega ,pdata 
+0x02a2 000954 iadd temp ,contw 
+0x02a3 000955 fetch 1 ,mem_rssi 
+0x02a4 000956 istore 1 ,contw 
+0x02a5 000957 increase 1 ,temp 
+0x02a6 000958 and_into rssi_buf_len_signal ,temp 
+0x02a7 000959 rtn 
+:      000960 p_rssi_average:
+0x02a8 000961 arg 0 ,temp 
+0x02a9 000962 arg rssi_buf_len_signal + 1 ,loopcnt 
+0x02aa 000963 copy rega ,contr 
+:      000964 p_rssi_average_loop:
+0x02ab 000965 ifetch 1 ,contr 
+0x02ac 000966 iadd temp ,temp 
+0x02ad 000967 loop p_rssi_average_loop 
+0x02ae 000968 rshift3 temp ,pdata 
+0x02af 000969 copy pdata ,temp 
+0x02b0 000970 rtnmark0 mark_24g 
+0x02b1 000972 div pdata ,10 
+0x02b2 000973 call wait_div_end 
+0x02b3 000974 quotient pdata 
+0x02b4 000975 lshift4 pdata ,pdata 
+0x02b5 000976 remainder temp 
+0x02b6 000977 ior temp ,temp 
+0x02b7 000978 rtn 
+0x02b8 000979 rtn 
+:      000982 p_mouse_before_lpm:
+0x02b9 000983 rtnmark1 mark_24g 
+0x02ba 000984 call p_mouse_setgpio_lpm 
+0x02bb 000985 fetch 1 ,mem_context 
+0x02bc 000986 bbit0 state_inconn ,p_clear_wake 
+0x02bd 000987 fetch 1 ,mem_lpm_current_mult 
+0x02be 000988 nrtn blank 
+:      000989 p_clear_wake:
+0x02bf 000990 setarg 0 
+0x02c0 000991 store 8 ,mem_gpio_wakeup_low 
+0x02c1 000992 rtn 
+:      000994 p_mouse_setgpio_lpm:
+0x02c2 000995 call p_mouse_set_sdio_high 
+0x02c3 000996 call p_clear_wake 
+:      000997 p_mouse_setgpio_lpm_before:
+0x02c4 000998 call mouse_lpm_before_common 
+0x02c5 000999 hfetch 4 ,core_gpio_oe0 
+0x02c6 001000 hfetcht 4 ,core_gpio_pu0 
+0x02c7 001001 ior temp ,temp 
+0x02c8 001002 invert temp ,temp 
+0x02c9 001003 hstoret 4 ,core_gpio_pd0 
+0x02ca 001004 rtn 
+:      001006 p_mouse_set_sdio_high:
+0x02cb 001007 fetch 1 ,mem_mouse_init_sensor_reset_flag 
+0x02cc 001008 rtn blank 
+0x02cd 001009 branch p_mouse_seting_dpi_diff 
+:      001011 p_device_init:
+0x02ce 001012 call app_lpm_mult_enable 
+0x02cf 001013 branch p_device_init_common ,wake 
+0x02d0 001014 fetch 1 ,mem_tx_power 
+0x02d1 001015 store 1 ,mem_tx_power_temp 
+0x02d2 001016 call power_ctrl_pac_succ_cnt_init 
+0x02d3 001017 fetch 1 ,mem_ui_button_timeout 
+0x02d4 001018 store 1 ,mem_combination_ui_button_count 
+0x02d5 001019 call mouse_bt_discovery_button_down_disable 
+:      001020 p_device_init_common:
+0x02d6 001021 call p_mouse_init 
+0x02d7 001022 branch enable_authrom 
+:      001024 p_mouse_tx_power_init:
+0x02d8 001025 fetch 1 ,mem_tx_power_temp 
+0x02d9 001026 store 1 ,mem_tx_power 
+0x02da 001027 rtn 
+:      001029 p_mouse_init:
+0x02db 001030 ncall p_mouse_setting_config ,wake 
+0x02dc 001031 call p_mouse_spi_init 
+0x02dd 001032 rtn wake 
+0x02de 001033 call p_mouse_cb_fuction 
+0x02df 001034 fetch 1 ,mem_power_on_flag 
+0x02e0 001035 bbit1 2 ,p_mouse_skip_24g_pair 
+0x02e1 001036 call mouse_check_key_gpio 
+0x02e2 001037 beq mouse_lm_button ,p_mouse_24g_pairing_button 
+:      001038 p_mouse_skip_24g_pair:
+0x02e3 001039 branch p_mouse_wakeup_from_power 
+:      001041 p_mouse_check_reconn_target:
+0x02e4 001042 call p_mouse_tx_power_init 
+0x02e5 001043 fetch 1 ,mem_xrecord_mode 
+0x02e6 001044 rtn 
+:      001048 p_mouse_24g_pairing_button:
+0x02e7 001049 fetch mouse_flag_len ,mem_mouse_flag 
+0x02e8 001050 rtnbit0 mouse_enable_24g 
+0x02e9 001051 rtnbit1 mosue_24g_pairing_flag 
+0x02ea 001052 rtnmark1 mark_24g 
+0x02eb 001053 call mouse_devce_led_off 
+0x02ec 001054 arg mosue_24g_pairing_flag ,queue 
+0x02ed 001055 call mouse_enable_function_flag 
+0x02ee 001056 setarg 0 
+0x02ef 001057 store 2 ,mem_mouse_direct_timer 
+0x02f0 001058 store 1 ,mem_mouse_send_blank_timer 
+0x02f1 001059 store 2 ,mem_24g_check_dongle_times 
+0x02f2 001060 call mouse_stop_discovery 
+0x02f3 001061 branch p_g24_start_pairing_sm1 
+:      001063 p_mouse_dpi_config:
+0x02f4 001064 fetch mouse_flag_len ,mem_mouse_flag 
+0x02f5 001065 bbit0 mouse_enable_eeprom ,mouse_dpi_config 
+0x02f6 001066 fetch 1 ,mem_mouse_dpi 
+0x02f7 001067 beq 0xff ,mouse_dpi_config 
+0x02f8 001068 branch mouse_seting_dpi + 2 
+:      001070 p_mouse_spi_init:
+0x02f9 001071 jam 0x76 ,mem_spi_init_clk 
+0x02fa 001072 branch mouse_spi_init 
+:      001074 p_mouse_init_sunt:
+0x02fb 001075 call p_mouse_spi_init 
+0x02fc 001076 call mouse_spi_sdio_gpio_pollup 
+0x02fd 001077 fetch 1 ,mem_config_sensor_type 
+0x02fe 001078 beq p3610 ,mouse_init_3610sensor 
+:      001079 p_mouse_init_sensor:
+0x02ff 001080 call mouse_read_sensor_id 
+0x0300 001081 beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge 
+0x0301 001082 beq p3065_id1 ,p_mouse_p3065_init_param 
+0x0302 001083 call mouse_twspi_reset 
+0x0303 001084 nop 1000 
+0x0304 001085 branch p_mouse_init_sensor 
+:      001087 p_mouse_init_sensor_reset:
+0x0305 001088 jam 1 ,mem_mouse_init_sensor_reset_flag 
+0x0306 001089 call spi_ncs_enable 
+0x0307 001090 call p_mouse_init_sunt 
+0x0308 001091 branch spi_ncs_disable 
+:      001093 p_mouse_init_p32xx_id2_judge:
+0x0309 001094 call p_mouse_sensor_poweron 
+0x030a 001095 branch mouse_init_p32xx_id2_judge 
+:      001098 p_mouse_p3065_init_param:
+0x030b 001099 call p_mouse_sensor_poweron 
+0x030c 001100 fetch 1 ,mem_sensor_id2 
+0x030d 001101 beq p3065_xy_id2 ,mouse_p3065xy_init_param 
+0x030e 001102 jam p3065 ,mem_config_sensor_type 
+0x030f 001103 rtn 
+:      001105 p_mouse_sensor_poweron:
+0x0310 001106 setarg 0x8006 
+0x0311 001107 call twspi_write 
+0x0312 001108 nop 12000 
+0x0313 001109 branch p_mouse_dpi_config 
+:      001110 p_mouse_sensor_powerdown:
+0x0314 001111 setarg 0x06 
+0x0315 001112 call twspi_read 
+0x0316 001113 or pdata ,0x08 ,pdata 
+0x0317 001114 lshift8 pdata ,pdata 
+0x0318 001115 add pdata ,0x06 ,pdata 
+0x0319 001116 branch twspi_write 
+:      001118 p_mouse_setting_config:
+0x031a 001119 call p_g24_set_device_addr 
+0x031b 001121 hfetch 1 ,core_usb_config 
+0x031c 001122 set0 4 ,pdata 
+0x031d 001123 hstore 1 ,core_usb_config 
+0x031e 001124 call mouse_param_init 
+0x031f 001127 setarg 0 
+0x0320 001128 store 2 ,mem_lpm_interval 
+0x0321 001129 call mouse_adc_init 
+:      001130 p_mouse_init_iic:
+0x0322 001131 call iic_init_390k 
+0x0323 001132 fetch mouse_flag_len ,mem_mouse_flag 
+0x0324 001133 isolate1 mouse_enable_2k_eeprom ,pdata 
+0x0325 001134 ncall clear_eeprom_size_2k ,true 
+0x0326 001135 call mouse_load_eeprom_dpi 
+0x0327 001136 call p_mouse_init_environment 
+:      001137 p_mouse_read_24g_addr:
+0x0328 001138 call p_mouse_set_24g_addr_eeprom 
+0x0329 001139 branch iicd_read_eep_data 
+:      001142 p_mouse_init_environment:
+0x032a 001143 call app_initflag_check 
+0x032b 001144 branch mouse_eeprom_load_recon_info ,zero 
+0x032c 001145 branch mouse_init_environment + 2 
+:      001147 p_app_flag_store:
+0x032d 001148 arg 2 ,temp 
+0x032e 001149 arg mem_timeup ,rega 
+0x032f 001150 arg mouse_eeprom_module_init_flag ,regb 
+0x0330 001151 branch iicd_write_protect_eep_data 
+:      001153 p_app_initflag_check:
+0x0331 001154 arg 2 ,temp 
+0x0332 001155 arg mem_pdatatemp ,rega 
+0x0333 001156 arg mouse_eeprom_module_init_flag ,regb 
+0x0334 001157 branch app_initflag_check + 4 
+:      001159 p_mouse_wakeup_from_power:
+0x0335 001160 branch p_g24_auto_pair_start 
+0x0336 001161 fetch mouse_flag_len ,mem_mouse_flag 
+0x0337 001162 bbit0 mouse_enable_wakeup_from_power ,p_mouse_wakeup_no_from_power 
+0x0338 001163 fetch 1 ,mem_wakup_from_power_flag 
+0x0339 001164 isolate0 gpio_latch ,pdata 
+0x033a 001165 nbranch p_mouse_wakeup_no_from_power ,true 
+0x033b 001166 call p_mouse_init_sunt 
+0x033c 001167 call p_mouse_sensor_powerdown 
+:      001168 p_mouse_wakeup_no_from_power:
+0x033d 001169 fetch 1 ,mem_reconn_times_init 
+0x033e 001170 store 1 ,mem_reconn_times 
+:      001174 p_mouse_start_24g_mode:
+0x033f 001175 fetch mouse_flag_len ,mem_mouse_flag 
+0x0340 001176 rtnbit0 mouse_enable_24g 
+0x0341 001177 call p_g24_factory_check 
+0x0342 001178 branch p_g24_auto_pair_start ,user 
+0x0343 001179 branch p_g24_start_24g_mode 
+:      001181 p_g24_factory_check:
+0x0344 001182 arg 2 ,loopcnt 
+0x0345 001183 arg mem_24g_addr ,contr 
+:      001184 p_pdata_0xff_check:
+0x0346 001185 call enable_user 
+0x0347 001186 setarg 0xffff 
+:      001187 p_pdata_0xff_check_loop:
+0x0348 001188 ifetcht 2 ,contr 
+0x0349 001189 isub temp ,null 
+0x034a 001190 ncall disable_user ,zero 
+0x034b 001191 loop p_pdata_0xff_check_loop 
+0x034c 001192 rtn 
+:      001194 p_mouse_cb_fuction:
+0x034d 001195 setarg p_mouse_priority_bb_event 
+0x034e 001196 store 2 ,mem_cb_bb_event_process 
+0x034f 001197 setarg p_mouse_g24_package_data 
+0x0350 001198 store 2 ,mem_cb_24g_data 
+0x0351 001200 rtn 
+:      001202 p_mouse_g24_package_data:
+0x0352 001203 branch p_mouse_g24_package_data_allpower 
+:      001205 p_mouse_g24_package_data_normal:
+0x0353 001206 call mouse_g24_package_data 
+0x0354 001207 fetch 2 ,mem_mouse_z 
+0x0355 001208 rtn blank 
+0x0356 001209 branch p_g24_transmit_by_interrupt_enable 
+:      001211 p_mouse_g24_package_data_allpower:
+0x0357 001212 call p_g24_matrix_data 
+0x0358 001213 branch p_mouse_g24_package_data_normal + 1 
+:      001217 p_mouse_wheel_trigger:
+0x0359 001218 fetch 2 ,mem_mouse_z 
+0x035a 001219 rtn blank 
+0x035b 001220 jam 1 ,mem_mouse_wheel_trigger 
+0x035c 001221 jam 2 ,mem_mouse_wheel_trigger_timer 
+0x035d 001222 rtn 
+:      001225 p_mouse_clear_sensor_data:
+0x035e 001226 call le_set_config_more_data 
+0x035f 001227 jam 1 ,mem_mouse_clear_sensor_data_flag 
+0x0360 001228 branch p_mouse_sensor_poweron 
+:      001230 p_mouse_idle:
+0x0361 001231 call ui_check_paring_button 
+0x0362 001232 call mouse_dpi_cheak 
+0x0363 001233 branch mouse_wheel_check 
+:      001235 p_mouse_priority_bb_event:
+0x0364 001236 copy regc ,pdata 
+0x0365 001237 beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete 
+0x0366 001238 beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail 
+0x0367 001239 beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success 
+0x0368 001240 branch mouse_priority_bb_event + 1 
+:      001245 p_mouse_24g_pairing_complete:
+0x0369 001246 jam 1 ,mem_mouse_24g_enter_lpm_enable 
+0x036a 001247 arg mosue_24g_pairing_flag ,queue 
+0x036b 001248 call mouse_disable_function_flag 
+0x036c 001249 setarg 0 
+0x036d 001250 store 2 ,mem_24g_pairing_timer_count 
+0x036e 001251 jam 0 ,mem_mouse_move_flag 
+0x036f 001253 call mouse_read_sensor_common 
+0x0370 001255 call p_g24_transmit_by_interrupt_enable 
+0x0371 001256 call p_mouse_set_24g_addr_eeprom 
+0x0372 001257 branch iicd_write_protect_eep_data 
+:      001259 p_mouse_set_24g_addr_eeprom:
+0x0373 001260 arg mem_24g_addr ,rega 
+0x0374 001261 arg mouse_g24_addr_eeprom_offect ,regb 
+0x0375 001262 arg 4 ,temp 
+0x0376 001263 rtn 
+:      001265 p_mouse_24g_attempt_fail:
+0x0377 001266 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt 
+0x0378 001267 call p_mouse_tx_power_init 
+0x0379 001268 call p_g24_check_51cmd_stop_24g 
+0x037a 001269 branch soft_reset_chip 
+0x037b 001270 jam 0 ,mem_link_key_exists 
+0x037c 001271 call mouse_eeprom_load_recon_info 
+0x037d 001272 arg 3 ,loopcnt 
+0x037e 001273 arg mem_device1_addr ,contr 
+0x037f 001274 call p_pdata_0xff_check 
+0x0380 001275 branch p_mouse_null_enter_hibernate_count ,user 
+0x0381 001276 branch p_mouse_check_reconn_target 
+:      001278 p_mouse_24g_attempt_success:
+0x0382 001279 branch mouse_no_data_timer_init 
+:      001282 p_mouse_before_hibernate:
+0x0383 001283 enable user 
+0x0384 001284 hfetch 4 ,0x8138 
+0x0385 001285 setflag user ,26 ,pdata 
+0x0386 001286 hstore 4 ,core_lpm_reg 
+0x0387 001287 call lpm_write_ctrl 
+0x0388 001288 call p_mouse_sensor_powerdown_check 
+0x0389 001289 call disable_authrom 
+0x038a 001290 call mouse_devce_led_off 
+0x038b 001291 call mouse_before_hibernate_wheel_gpio_set 
+0x038c 001292 branch p_mouse_setgpio_lpm_before 
+:      001294 p_mouse_sensor_powerdown_check:
+0x038d 001295 fetch 1 ,mem_mouse_init_sensor_reset_flag 
+0x038e 001296 rtn blank 
+0x038f 001297 jam 0 ,mem_mouse_init_sensor_reset_flag 
+0x0390 001298 branch p_mouse_sensor_powerdown 
+:      001301 p_mouse_bb_event_timer:
+0x0391 001302 call p_mouse_wheel_trigger_timer 
+0x0392 001303 call p_mouse_null_enter_hibernate_check 
+0x0393 001304 call p_mouse_bt_discovery_check 
+0x0394 001305 call mouse_check_discovery_timeout_timer 
+0x0395 001306 branch mouse_check_no_data_timeout_timer 
+:      001311 p_mouse_wheel_trigger_timer:
+0x0396 001312 arg mem_mouse_wheel_trigger_timer ,regc 
+0x0397 001313 arg p_mouse_wheel_trigger_disable ,regb 
+0x0398 001314 branch timer_single_step 
+:      001315 p_mouse_wheel_trigger_disable:
+0x0399 001316 jam 0 ,mem_mouse_wheel_trigger 
+0x039a 001317 rtn 
+:      001319 p_mouse_bt_discovery_check:
+0x039b 001320 fetch 1 ,mem_config_function_enable 
+0x039c 001321 bbit1 enable_bt_button ,mouse_bt_discovery_by_button 
+:      001322 p_mouse_bt_discovery_commbination_key:
+0x039d 001323 call mouse_check_key_gpio 
+0x039e 001324 beq mouse_lmr_button ,p_mouse_bt_discovery_commbination_key_down 
+:      001325 p_mouse_bt_discovery_commbination_key_up:
+0x039f 001326 fetch 1 ,mem_ui_button_timeout 
+0x03a0 001327 store 1 ,mem_combination_ui_button_count 
+0x03a1 001328 fetch 1 ,mem_bt_discovey_button_statue 
+0x03a2 001329 rtneq dpi_button_state_up 
+0x03a3 001330 jam dpi_button_state_up ,mem_bt_discovey_button_statue 
+0x03a4 001331 arg mouse_bt_discovery_button_long_down_flag ,queue 
+0x03a5 001332 call mouse_disable_function_flag 
+0x03a6 001333 branch mouse_bt_discovery_button_down_disable 
+:      001334 p_mouse_bt_discovery_commbination_key_down:
+0x03a7 001335 jam 40 ,mem_mouse_null_enter_hibernate_timer 
+0x03a8 001336 call p_mouse_bt_discovery_timer 
+0x03a9 001337 branch mouse_bt_discovery_commbination_key_down + 1 
+:      001339 p_mouse_bt_discovery_timer:
+0x03aa 001340 arg mem_combination_ui_button_count ,regc 
+0x03ab 001341 arg p_mouse_long_button_bt_discovery ,regb 
+0x03ac 001342 branch timer_single_step 
+:      001344 p_mouse_long_button_bt_discovery:
+0x03ad 001345 fetch 2 ,mem_ui_state_map 
+0x03ae 001346 isolate1 ui_state_ble_adv ,pdata 
+0x03af 001347 call mouse_stop_le_adv ,true 
+0x03b0 001348 fetch 2 ,mem_ui_state_map 
+0x03b1 001349 isolate1 ui_state_bt_reconnect ,pdata 
+0x03b2 001350 call mouse_cancel_reconnect ,true 
+0x03b3 001351 arg mouse_bt_discovery_button_long_down_flag ,queue 
+0x03b4 001352 call mouse_enable_function_flag 
+0x03b5 001353 branch mouse_long_button_bt_discovry 
+:      001355 p_mouse_null_enter_hibernate_check:
+0x03b6 001356 fetch 1 ,mem_mouse_null_enter_hibernate_flag 
+0x03b7 001357 rtn blank 
+0x03b8 001358 fetch 1 ,mem_mouse_null_enter_hibernate_timer 
+0x03b9 001359 branch p_mouse_null_enter_hibernate ,blank 
+0x03ba 001360 increase -1 ,pdata 
+0x03bb 001361 store 1 ,mem_mouse_null_enter_hibernate_timer 
+0x03bc 001362 rtn 
+:      001363 p_mouse_null_enter_hibernate:
+0x03bd 001364 jam 0 ,mem_mouse_null_enter_hibernate_flag 
+0x03be 001365 branch app_enter_hibernate 
+:      001366 p_mouse_null_enter_hibernate_count:
+0x03bf 001367 jam 1 ,mem_mouse_null_enter_hibernate_flag 
+0x03c0 001368 jam 40 ,mem_mouse_null_enter_hibernate_timer 
+0x03c1 001369 rtn 
+:      001373 p_mouse_seting_dpi:
+0x03c2 001374 call mosue_dpi_led_blink_init 
+:      001375 p_mouse_seting_dpi_diff:
+0x03c3 001376 fetch 1 ,mem_config_sensor_type 
+0x03c4 001377 beq p3065_xy ,p_mouse_seting_3065xy_dpi 
+0x03c5 001378 branch mouse_seting_dpi + 3 
+:      001380 p_mouse_seting_3065xy_dpi:
+0x03c6 001381 fetch 1 ,mem_mouse_dpi 
+0x03c7 001382 call p_mouse_3065xy_dpi_recount ,blank 
+0x03c8 001383 fetch 1 ,mem_mouse_dpi 
+0x03c9 001384 beq mouse_dpi_level2 ,mouse_set_cpi1 
+0x03ca 001386 beq mouse_dpi_level4 ,mouse_set_cpi4 
+0x03cb 001387 branch mouse_set_cpi3 
+:      001388 p_mouse_3065xy_dpi_recount:
+0x03cc 001389 jam 1 ,mem_mouse_dpi 
+0x03cd 001390 rtn 
+:      001392 p_mouse_motion:
+0x03ce 001393 disable user 
+0x03cf 001394 setarg 0 
+0x03d0 001395 store 6 ,mem_mouse_x 
+0x03d1 001396 call mouse_cheak_sensor_data 
+0x03d2 001397 call mouse_zwheel 
+0x03d3 001398 call mouse_t_zwheel 
+0x03d4 001399 call mouse_key 
+0x03d5 001400 nrtn user 
+0x03d6 001401 branch mouse_motion + 9 
+:      001403 p_mouse_bb_event_discovery_btn:
+0x03d7 001404 jam 0 ,mem_mouse_null_enter_hibernate_flag 
+0x03d8 001405 jam 0 ,mem_mouse_null_enter_hibernate_timer 
+0x03d9 001406 isolate1 mark_24g ,mark 
+0x03da 001407 call p_g24_check_51cmd_stop_24g ,true 
+0x03db 001408 branch mouse_bb_event_discovery_btn + 1 
+:      001411 p_mouse_start_discovery:
+0x03dc 001412 call p_mouse_tx_power_init 
+0x03dd 001413 jam 0 ,mem_mouse_clear_sensor_data_flag 
+0x03de 001414 fetch 2 ,mem_ui_state_map 
+0x03df 001415 bbit1 ui_state_ble_adv ,p_mouse_start_discovery_norandom 
+0x03e0 001416 fetch mouse_flag_len ,mem_mouse_flag 
+0x03e1 001417 bbit0 mouse_enable_ble_random_addre ,p_mouse_start_discovery_norandom 
+:      001418 p_mouse_start_discovery_norandom:
+0x03e2 001419 call app_lpm_mult_disable 
+0x03e3 001420 fetch 2 ,mem_discovery_timeout 
+0x03e4 001421 store 2 ,mem_mouse_discovery_timer 
+0x03e5 001422 jam 6 ,mem_connection_options 
+0x03e6 001423 setarg 0 
+0x03e7 001424 store 2 ,mem_mouse_no_data_timer 
+0x03e8 001425 store 2 ,mem_mouse_direct_timer 
+0x03e9 001426 arg mouse_store_eeprom_flag ,queue 
+0x03ea 001427 call mouse_enable_function_flag 
+0x03eb 001428 call mouse_bt_discovery_button_down_disable 
+0x03ec 001429 branch mouse_start_discovery_norandom + 13 
+:      001432 p_mouse_stop_discovery:
+0x03ed 001433 setarg 0 
+0x03ee 001434 store 2 ,mem_mouse_discovery_timer 
+0x03ef 001435 call p_mouse_sensor_poweron 
+0x03f0 001436 branch mouse_stop_discovery + 1 
+:      001439 p_twspi_reset:
+0x03f1 001440 hfetch 1 ,core_gpio_out3 
+0x03f2 001441 and_into 0xfd ,pdata 
+0x03f3 001442 hstore 1 ,core_gpio_out3 
+0x03f4 001443 hfetcht 1 ,core_gpio_oe3 
+0x03f5 001444 or_into 0x2 ,temp 
+0x03f6 001445 hstoret 1 ,core_gpio_oe3 
+0x03f7 001446 call twspi_disable 
+0x03f8 001447 and_into 0xfd ,temp 
+0x03f9 001448 nop 13 
+0x03fa 001449 call twspi_enable 
+0x03fb 001450 hstoret 1 ,core_gpio_oe3 
+0x03fc 001451 rtn 
+:      001453 p_check_51cmd_once_continue:
+0x03fd 001454 call lmo_fifo_check 
+0x03fe 001455 nbranch check_51cmd_restore ,blank 
+0x03ff 001456 fetch 1 ,mem_fifo_temp 
+0x0400 001457 bmark0 mark_context ,check_51cmd_check_idle 
+0x0401 001458 beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param 
+0x0402 001459 branch check_51cmd_once_continue + 2 
+:      001461 p_check_51cmd_ble_update_connect_param:
+0x0403 001462 call le_fifo_check_full 
+0x0404 001463 nrtn blank 
+0x0405 001464 branch le_l2cap_tx_update_req 
+:      001468 power_ctrl_pac_succ_cnt_init:
+0x0406 001469 jam 1 ,mem_power_ctrl_level 
+0x0407 001470 jam 0 ,mem_power_ctrl_pac_succ_cnt 
+0x0408 001471 rtn 
+:      001472 power_ctrl_pac_succ_incrs:
+0x0409 001473 fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0x040a 001474 increase 1 ,pdata 
+0x040b 001475 store 1 ,mem_power_ctrl_pac_succ_cnt 
+0x040c 001476 rtn 
+:      001477 power_ctrl_pac_succ_decrs:
+0x040d 001478 fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0x040e 001479 sub pdata ,2 ,null 
+0x040f 001480 ncall power_ctrl_pac_succ_cnt_reinit ,positive 
+0x0410 001481 fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0x0411 001482 rtneq 0 
+0x0412 001483 increase -1 ,pdata 
+0x0413 001484 store 1 ,mem_power_ctrl_pac_succ_cnt 
+0x0414 001485 rtn 
+:      001486 power_ctrl_pac_succ_cnt_reinit:
+0x0415 001487 jam 3 ,mem_power_ctrl_pac_succ_cnt 
+0x0416 001488 rtn 
+:      001490 power_ctrl_start:
+0x0417 001491 rtn 
+0x0418 001492 fetch 2 ,mem_ui_state_map 
+0x0419 001493 rtnbit1 ui_state_ble_adv 
+0x041a 001494 rtnbit1 ui_state_bt_reconnect 
+0x041b 001495 rtnbit1 ui_state_bt_discovery 
+0x041c 001497 arg mem_rssi_signal_buf ,rega 
+0x041d 001498 call p_rssi_average 
+0x041e 001499 storet 1 ,mem_rssi_avg_received 
+0x041f 001501 setarg rssi_dis_max_24g 
+0x0420 001502 bmark1 mark_24g ,power_ctrl_start_next 
+0x0421 001503 setarg rssi_dis_max_ble 
+:      001504 power_ctrl_start_next:
+0x0422 001505 isub temp ,null 
+0x0423 001506 nbranch power_ctrl_txpower_incrs_force ,positive 
+0x0424 001508 fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0x0425 001509 sub pdata ,2 ,null 
+0x0426 001510 nbranch power_ctrl_txpower_decrs_check ,positive 
+0x0427 001511 fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0x0428 001512 beq 0 ,power_ctrl_txpower_incrs 
+0x0429 001513 rtn 
+:      001515 power_ctrl_txpower_decrs_check:
+0x042a 001516 fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0x042b 001517 rtnne 32 
+0x042c 001518 jam 0 ,mem_power_ctrl_pac_succ_cnt 
+:      001519 power_ctrl_txpower_decrs:
+0x042d 001520 fetcht 1 ,mem_rssi_avg_received 
+0x042e 001521 setarg rssi_dis_min_24g 
+0x042f 001522 bmark1 mark_24g ,power_ctrl_txpower_decrs_next 
+0x0430 001523 setarg rssi_dis_min_ble 
+:      001524 power_ctrl_txpower_decrs_next:
+0x0431 001525 isub temp ,null 
+0x0432 001526 nrtn positive 
+0x0433 001527 fetch 1 ,mem_power_ctrl_level 
+0x0434 001528 beq 0 ,power_ctrl_decrs_level0 
+0x0435 001529 increase -1 ,pdata 
+0x0436 001530 store 1 ,mem_power_ctrl_level 
+0x0437 001531 beq 0 ,power_ctrl_decrs_level0 
+:      001532 power_ctrl_decrs_level1:
+:      001533 power_ctrl_incrs_level1:
+0x0438 001534 jam tx_power_0db ,mem_tx_power 
+0x0439 001535 rtn 
+:      001537 power_ctrl_txpower_incrs_force:
+0x043a 001538 jam 0 ,mem_power_ctrl_pac_succ_cnt 
+:      001539 power_ctrl_txpower_incrs:
+0x043b 001540 fetch 1 ,mem_power_ctrl_level 
+0x043c 001541 beq 2 ,power_ctrl_incrs_level2 
+0x043d 001542 increase 1 ,pdata 
+0x043e 001543 store 1 ,mem_power_ctrl_level 
+0x043f 001544 beq 1 ,power_ctrl_incrs_level1 
+:      001545 power_ctrl_incrs_level2:
+0x0440 001547 jam tx_power_5db ,mem_tx_power 
+0x0441 001548 rtn 
+:      001550 power_ctrl_decrs_level0:
+0x0442 001551 jam tx_power_f5db ,mem_tx_power 
+0x0443 001552 rtn 
+:      001555 p_set_freq_tx:
+0x0444 001556 storet 1 ,mem_last_freq 
+0x0445 001557 add temp ,0 ,rega 
+0x0446 001558 call rf_write_freq 
+0x0447 001559 setarg param_pll_setup 
+0x0448 001560 call sleep 
+:      001561 p_rf_tx_enable:
+0x0449 001562 jam 0x1 ,rfen_adc 
+0x044a 001563 jam 0x3c ,rfen_rx 
+0x044b 001564 jam 0xe0 ,rfen_tx 
+0x044c 001565 nop 10 
+0x044d 001566 jam 0x01 ,rfen_mdm 
+0x044e 001567 jam 0x3d ,rfen_mdm 
+0x044f 001568 nop 10 
+0x0450 001569 jam 0xb7 ,rfen_sn 
+0x0451 001570 nop 10 
+0x0452 001571 jam 0x7d ,rfen_mdm 
+0x0453 001572 fetch 1 ,mem_tx_power 
+0x0454 001575 beq tx_power_5db ,p_set_tx_power_5db 
+0x0455 001577 beq tx_power_f5db ,p_set_tx_power_f5db 
+0x0456 001578 beq tx_power_pair ,p_set_tx_power_pair 
+:      001580 p_set_tx_power_0db:
+0x0457 001581 call p_rx_low_sens 
+0x0458 001583 jam 0xd0 ,0x8955 
+0x0459 001584 jam 0xe0 ,0x8956 
+0x045a 001586 jam 0x6c ,0x8958 
+0x045b 001588 branch set_tx_power_0db 
+:      001600 p_set_tx_power_5db:
+0x045c 001601 call p_rx_high_sens 
+0x045d 001603 jam 0xd0 ,0x8955 
+0x045e 001604 jam 0xe0 ,0x8956 
+0x045f 001606 jam 0x3c ,0x8958 
+0x0460 001608 branch set_tx_power_5db 
+:      001620 p_set_tx_power_f5db:
+0x0461 001621 call p_rx_low_sens 
+0x0462 001623 jam 0xd0 ,0x8955 
+0x0463 001624 jam 0xc0 ,0x8956 
+0x0464 001626 jam 0x6c ,0x8958 
+0x0465 001628 branch set_tx_power_f5db 
+:      001630 p_rx_low_sens:
+0x0466 001631 jam 0x5b ,0x894c 
+0x0467 001632 jam 0x96 ,0x894d 
+0x0468 001633 jam 0x2c ,0x894e 
+0x0469 001634 jam 0x46 ,0x894f 
+0x046a 001635 rtn 
+:      001637 p_rx_high_sens:
+0x046b 001638 jam 0xfb ,0x894c 
+0x046c 001639 jam 0xef ,0x894d 
+0x046d 001640 jam 0xec ,0x894e 
+0x046e 001641 jam 0x5e ,0x894f 
+0x046f 001642 rtn 
+:      001644 p_set_tx_power_pair:
+0x0470 001646 jam 0xc5 ,0x8956 
+0x0471 001647 jam 0xd0 ,0x8955 
+0x0472 001648 rtn 
+:      001650 p_shutdown_radio:
+0x0473 001651 force 8 ,radio_ctrl 
+0x0474 001652 branch shutdown_radio + 1 
+:      001664 p_g24_matrix_data:
+0x0475 001665 fetch 1 ,mem_24g_matrix_cnt 
+0x0476 001666 increase 1 ,pdata 
+0x0477 001667 store 1 ,mem_24g_matrix_cnt 
+0x0478 001668 sub pdata ,50 ,null 
+0x0479 001669 branch p_ms_x_right ,positive 
+0x047a 001670 sub pdata ,100 ,null 
+0x047b 001671 branch p_ms_y_up ,positive 
+0x047c 001672 sub pdata ,150 ,null 
+0x047d 001673 branch p_ms_x_left ,positive 
+0x047e 001674 sub pdata ,200 ,null 
+0x047f 001675 branch p_ms_y_down ,positive 
+0x0480 001676 rtn 
+:      001677 p_ms_x_right:
+0x0481 001678 setarg 0x05 
+0x0482 001679 store 2 ,mem_m_x 
+0x0483 001680 setarg 0 
+0x0484 001681 store 2 ,mem_m_y 
+0x0485 001682 store 1 ,mem_m_z 
+0x0486 001683 store 1 ,mem_m_key 
+0x0487 001684 store 1 ,mem_m_tz 
+:      001685 p_data:
+0x0488 001686 enable user 
+0x0489 001687 arg 7 ,rega 
+0x048a 001688 arg mem_m_key ,regb 
+0x048b 001689 rtn 
+:      001690 p_ms_y_up:
+0x048c 001691 setarg 0x05 
+0x048d 001692 store 2 ,mem_m_y 
+0x048e 001693 setarg 0 
+0x048f 001694 store 2 ,mem_m_x 
+0x0490 001695 store 1 ,mem_m_z 
+0x0491 001696 store 1 ,mem_m_key 
+0x0492 001697 store 1 ,mem_m_tz 
+0x0493 001698 branch p_data 
+:      001699 p_ms_x_left:
+0x0494 001700 setarg 0xfffb 
+0x0495 001701 store 2 ,mem_m_x 
+0x0496 001702 setarg 0 
+0x0497 001703 store 2 ,mem_m_y 
+0x0498 001704 store 1 ,mem_m_z 
+0x0499 001705 store 1 ,mem_m_key 
+0x049a 001706 store 1 ,mem_m_tz 
+0x049b 001707 branch p_data 
+:      001708 p_ms_y_down:
+0x049c 001709 fetch 1 ,mem_24g_matrix_cnt 
+0x049d 001710 beq 200 ,p_mem_usb_data_square_cnt_set0 
+0x049e 001711 setarg 0xfffb 
+0x049f 001712 store 2 ,mem_m_y 
+0x04a0 001713 setarg 0 
+0x04a1 001714 store 2 ,mem_m_x 
+0x04a2 001715 store 1 ,mem_m_z 
+0x04a3 001716 store 1 ,mem_m_key 
+0x04a4 001717 store 1 ,mem_m_tz 
+0x04a5 001718 branch p_data 
+:      001719 p_mem_usb_data_square_cnt_set0:
+0x04a6 001720 jam 0 ,mem_24g_matrix_cnt 
+0x04a7 001721 branch p_ms_y_down + 2 
+              org 0x2000
+:      001730 start:
+0x2000 001731 call lpmstate 
+:      001733 soft_reset:
+0x2001 001734 bpatch patch00_0 ,mem_patch00 
+0x2002 001735 clear_stack 
+0x2003 001736 call spi_ncs_gpio_init 
+0x2004 001737 call initialize_radio 
+0x2005 001738 call iicd_init_12m 
+0x2006 001739 call init_param 
+0x2007 001740 call l2cap_init 
+0x2008 001741 bpatch patch00_1 ,mem_patch00 
+0x2009 001742 call rfcomm_init 
+0x200a 001743 call init_lmp 
+0x200b 001744 call ui_init 
+0x200c 001745 call app_init 
+0x200d 001746 ncall load_chip_option ,wake 
+0x200e 001747 bpatch patch00_2 ,mem_patch00 
+0x200f 001748 call app_lpm_init ,wake 
+0x2010 001749 call publickey_init 
+:      001750 soft_reset_2:
+0x2011 001751 call lpm_recover_clk ,wake 
+:      001752 main_loop:
+0x2012 001753 bpatch patch00_3 ,mem_patch00 
+0x2013 001754 call sp_calc_sequence 
+0x2014 001755 call sp_calc_sequence_256 
+0x2015 001756 call sp_calc_sequence_256_check 
+0x2016 001757 call le_dispatch 
+0x2017 001758 bpatch patch00_4 ,mem_patch00 
+0x2018 001759 call idle_dispatch 
+0x2019 001760 call app_process_idle 
+0x201a 001761 call inquiry_dispatch 
+0x201b 001762 call inquiry_scan_dispatch 
+0x201c 001763 call page_scan_dispatch 
+0x201d 001764 call connection_dispatch 
+0x201e 001765 call lpm_dispatch 
+0x201f 001766 call g24_dispatch 
+0x2020 001767 branch main_loop 
+:      001769 connection_dispatch:
+0x2021 001770 call connection_incontext 
+0x2022 001771 rtnmark0 mark_context 
+0x2023 001772 set0 mark_context ,mark 
+0x2024 001773 call context_save 
+0x2025 001774 branch le_disable 
+:      001776 connection_incontext:
+0x2026 001777 bpatch patch00_5 ,mem_patch00 
+0x2027 001778 call context_search_insniff 
+0x2028 001779 nbranch connection_nosniff ,zero 
+0x2029 001780 call context_load 
+0x202a 001781 add rega ,coffset_mode ,contr 
+0x202b 001782 ifetch 1 ,contr 
+0x202c 001783 bbit1 mode_le ,le_conn_dispatch 
+0x202d 001784 bbit1 mode_master ,master_dispatch 
+0x202e 001785 branch slave_dispatch 
+:      001786 connection_nosniff:
+0x202f 001787 call context_get_next 
+0x2030 001788 copy loopcnt ,null 
+0x2031 001789 rtn zero 
+0x2032 001790 call context_load 
+0x2033 001791 fetch 1 ,mem_state 
+0x2034 001792 bbit1 state_inpage ,master_page 
+0x2035 001793 fetch 1 ,mem_mode 
+0x2036 001794 bbit1 mode_master ,master_dispatch 
+0x2037 001795 branch slave_dispatch 
+:      001803 idle_dispatch:
+0x2038 001804 fetch 1 ,mem_hci_cmd 
+0x2039 001805 rtn blank 
+0x203a 001806 beq hci_cmd_inquiry ,idle_inquiry 
+0x203b 001807 beq hci_cmd_inquiry_cancel ,idle_inquiry_cancel 
+0x203c 001808 beq hci_cmd_remote_name_req ,idle_remote_name_req 
+0x203d 001809 beq hci_cmd_create_conn ,idle_create_conn 
+0x203e 001810 beq hci_cmd_le_create_conn ,idle_le_create_conn 
+0x203f 001811 call context_search_conn_handle 
+0x2040 001812 rtn zero 
+0x2041 001813 call context_search_plap 
+0x2042 001814 rtn zero 
+:      001815 idle_exit:
+0x2043 001816 jam 0 ,mem_hci_cmd 
+0x2044 001817 rtn 
+:      001819 idle_le_create_conn:
+0x2045 001820 jam hci_cmd_le_create_conn ,mem_cmd_le_create_conn 
+0x2046 001821 jam 0 ,mem_hci_cmd 
+0x2047 001822 rtn 
+:      001824 idle_inquiry:
+0x2048 001825 set1 mark_inquiry_on ,mark 
+0x2049 001826 set0 mark_inquiry_trainb ,mark 
+0x204a 001827 jam param_ninquiry ,mem_ninqy_index 
+0x204b 001828 jam 31 ,mem_nfreq_index_inq 
+0x204c 001829 branch idle_exit 
+:      001831 idle_inquiry_cancel:
+0x204d 001832 set0 mark_inquiry_on ,mark 
+0x204e 001833 force 0 ,stop_watch 
+0x204f 001834 branch idle_exit 
+:      001836 idle_remote_name_req:
+0x2050 001837 call context_search_plap 
+0x2051 001838 rtn zero 
+0x2052 001839 force lmp_name_req ,temp 
+0x2053 001840 jam 5 ,mem_nameres_cnt 
+0x2054 001841 branch idle_start_page 
+:      001843 idle_create_conn:
+0x2055 001844 bpatch patch00_6 ,mem_patch00 
+:      001845 idle_create_conn_device:
+0x2056 001846 fetch 6 ,mem_hci_plap 
+0x2057 001847 branch idle_exit ,blank 
+0x2058 001848 jam reconnect_hid ,memui_reconnect_mode 
+0x2059 001850 jam conn_sm_wait_features_res ,mem_conn_sm 
+0x205a 001851 branch idle_create_conn_cont 
+:      001853 idle_create_conn_cont:
+0x205b 001854 force lmp_version_req ,temp 
+:      001855 idle_start_page:
+0x205c 001856 bpatch patch00_7 ,mem_patch00 
+0x205d 001857 fetch 1 ,mem_page_mode 
+0x205e 001858 branch idle_page_mode_r0 ,blank 
+0x205f 001859 lshift3 pdata ,pdata 
+0x2060 001860 lshift4 pdata ,pdata 
+0x2061 001861 increase -1 ,pdata 
+:      001862 idle_page_mode_r0:
+0x2062 001863 store 1 ,mem_npage 
+0x2063 001864 store 1 ,mem_npage_index 
+0x2064 001865 jam 31 ,mem_nfreq_index_page 
+0x2065 001866 set0 mark_page_trainb ,mark 
+0x2066 001867 call context_new 
+0x2067 001868 nbranch idle_page_fail ,zero 
+0x2068 001869 call get_free_amaddr 
+0x2069 001870 store 1 ,mem_amaddr 
+0x206a 001871 storet 1 ,mem_lmo_opcode2 
+0x206b 001872 fetch 6 ,mem_hci_plap 
+0x206c 001873 store 6 ,mem_plap 
+0x206d 001874 bpatch patch01_0 ,mem_patch01 
+0x206e 001875 call timer_reinit 
+0x206f 001876 force 0 ,pdata 
+0x2070 001877 compare lmp_name_req ,temp ,0xff 
+0x2071 001878 nsetflag true ,state_init_seq ,pdata 
+0x2072 001879 set1 state_inpage ,pdata 
+0x2073 001880 store 1 ,mem_state 
+0x2074 001881 jam bt_evt_reconn_started ,mem_fifo_temp 
+0x2075 001882 call ui_ipc_send_event 
+0x2076 001883 force 0 ,pdata 
+0x2077 001884 setflag true ,smap_name_req ,pdata 
+0x2078 001885 store 1 ,mem_state_map 
+0x2079 001886 setarg 0 
+0x207a 001887 set1 mode_master ,pdata 
+0x207b 001888 store 1 ,mem_mode 
+0x207c 001889 enable master 
+0x207d 001890 call context_save 
+0x207e 001891 disable master 
+0x207f 001892 force page_length_timer ,queue 
+0x2080 001893 fetch 2 ,mem_page_to 
+0x2081 001894 call timer_init 
+0x2082 001895 branch idle_exit 
+:      001896 idle_page_fail:
+0x2083 001897 bpatch patch01_1 ,mem_patch01 
+0x2084 001898 fetch 6 ,mem_hci_plap 
+0x2085 001899 store 6 ,mem_plap 
+0x2086 001900 compare lmp_name_req ,temp ,0xff 
+0x2087 001901 branch idle_name_fail ,true 
+0x2088 001902 branch idle_exit 
+:      001903 idle_name_fail:
+0x2089 001904 arg mem_tmp_buffer ,contw 
+0x208a 001905 arg 8 ,loopcnt 
+0x208b 001906 call memset0 
+0x208c 001907 jam bt_evt_reconn_failed ,mem_fifo_temp 
+0x208d 001908 call ui_ipc_send_event 
+0x208e 001909 branch idle_exit 
+:      001916 inquiry_dispatch:
+0x208f 001917 rtnmark0 mark_inquiry_on 
+0x2090 001918 force inquiry_length_timer ,queue 
+0x2091 001919 call timer_check 
+0x2092 001920 nsetflag blank ,mark_inquiry_on ,mark 
+0x2093 001921 nbranch inquiry_start ,blank 
+0x2094 001922 rtn 
+:      001926 inquiry_start:
+0x2095 001927 bpatch patch01_2 ,mem_patch01 
+0x2096 001928 fetcht 2 ,mem_inq_window 
+0x2097 001929 force 4 ,queue 
+0x2098 001930 call sniff_check_window 
+0x2099 001931 rtn user 
+0x209a 001932 call afh_clear 
+0x209b 001933 force 0 ,freq_mode 
+:      001934 inquiry_restart:
+0x209c 001935 rtn timeout 
+0x209d 001936 set0 mark_fhs_already_good ,mark 
+0x209e 001937 set0 mark_fhs_eir ,mark 
+:      001938 inquiry_rx_restart:
+0x209f 001939 add clkn_bt ,1 ,bt_clk 
+0x20a0 001940 isolate1 mark_inquiry_trainb ,mark 
+0x20a1 001941 setflag true ,2 ,freq_mode 
+0x20a2 001942 compare 0x00 ,bt_clk ,0x02 
+0x20a3 001943 nbranch inquiry_receive ,true 
+:      001945 inquiry_transmit:
+0x20a4 001946 bpatch patch01_3 ,mem_patch01 
+0x20a5 001947 fetch 1 ,mem_inquiry_transmit 
+0x20a6 001948 increase 1 ,pdata 
+0x20a7 001949 store 1 ,mem_inquiry_transmit 
+0x20a8 001950 call fetch_giac 
+0x20a9 001951 call tx_radio_freq 
+0x20aa 001952 call fetch_diac 
+0x20ab 001953 call start_transmitter 
+0x20ac 001954 call start_tx_native 
+0x20ad 001955 call send_access_word 
+0x20ae 001956 call end_of_packet 
+0x20af 001957 call inquiry_check_train 
+0x20b0 001958 branch inquiry_restart 
+:      001960 inquiry_check_train:
+0x20b1 001961 bpatch patch01_4 ,mem_patch01 
+0x20b2 001962 fetch 1 ,mem_nfreq_index_inq 
+0x20b3 001963 increase -1 ,pdata 
+0x20b4 001964 store 1 ,mem_nfreq_index_inq 
+0x20b5 001965 rtn positive 
+0x20b6 001966 jam 31 ,mem_nfreq_index_inq 
+0x20b7 001967 fetch 1 ,mem_ninqy_index 
+0x20b8 001968 increase -1 ,pdata 
+0x20b9 001969 store 1 ,mem_ninqy_index 
+0x20ba 001970 rtn positive 
+0x20bb 001971 setflip mark_inquiry_trainb ,mark 
+0x20bc 001972 jam param_ninquiry ,mem_ninqy_index 
+0x20bd 001973 rtn 
+:      001975 inquiry_receive:
+0x20be 001976 bpatch patch01_5 ,mem_patch01 
+0x20bf 001977 call fetch_giac 
+0x20c0 001978 call rx_radio_freq 
+0x20c1 001979 call fetch_diac 
+0x20c2 001980 call start_rx_native 
+0x20c3 001981 call start_receiver 
+0x20c4 001982 call wait_access_clkn_rt 
+0x20c5 001983 branch inquiry_sync ,sync 
+0x20c6 001984 call inquiry_check_train 
+0x20c7 001985 branch inquiry_rx_restart 
+:      001986 inquiry_sync:
+0x20c8 001987 bpatch patch01_6 ,mem_patch01 
+0x20c9 001988 call save_rssi 
+0x20ca 001989 call scan_mode_whiten 
+0x20cb 001990 call receive_packet_whitened 
+0x20cc 001991 set0 mark_rxbuf_inuse ,mark 
+0x20cd 001992 rtnmark0 mark_fhs_already_good 
+:      001993 inquiry_receive_rtn:
+0x20ce 001994 bpatch patch01_7 ,mem_patch01 
+:      001995 inquiry_receive_eir_rtn:
+0x20cf 001996 fetch 1 ,mem_inquiry_rcv 
+0x20d0 001997 increase 1 ,pdata 
+0x20d1 001998 store 1 ,mem_inquiry_rcv 
+0x20d2 001999 rtn 
+:      002007 master_page:
+0x20d3 002008 bpatch patch02_0 ,mem_patch02 
+0x20d4 002009 enable master 
+0x20d5 002010 enable clknt 
+0x20d6 002011 fetch 2 ,mem_page_interval 
+0x20d7 002012 branch master_page_no_interval ,blank 
+0x20d8 002013 force page_interval_timer ,queue 
+0x20d9 002014 call timer_check 
+0x20da 002015 nrtn blank 
+:      002016 master_page_no_interval:
+0x20db 002017 bpatch patch02_1 ,mem_patch02 
+0x20dc 002018 fetcht 2 ,mem_page_window 
+0x20dd 002019 force 40 ,queue 
+0x20de 002020 call sniff_check_window 
+0x20df 002021 branch page_exit ,user 
+0x20e0 002022 force page_length_timer ,queue 
+0x20e1 002023 call timer_check 
+0x20e2 002024 nbranch page_start ,blank 
+0x20e3 002025 fetch 1 ,mem_state_map 
+0x20e4 002026 bbit1 smap_name_req ,master_npage_timeout 
+0x20e5 002027 branch master_page_timeout 
+:      002028 master_npage_timeout:
+0x20e6 002029 arg mem_tmp_buffer ,contw 
+0x20e7 002030 arg 8 ,loopcnt 
+0x20e8 002031 call memset0 
+:      002032 master_page_timeout:
+0x20e9 002033 bpatch patch02_2 ,mem_patch02 
+0x20ea 002034 jam 0 ,mem_state 
+0x20eb 002035 call init_lmp_work 
+0x20ec 002036 jam 0 ,memui_reconnect_mode 
+0x20ed 002037 jam bt_evt_reconn_page_timeout ,mem_fifo_temp 
+0x20ee 002038 call ui_ipc_send_event 
+0x20ef 002039 branch page_exit 
+:      002041 page_start:
+0x20f0 002042 bpatch patch02_3 ,mem_patch02 
+0x20f1 002043 force 0 ,timeup 
+0x20f2 002044 until clkn_rt ,meet 
+0x20f3 002045 fetch 1 ,mem_page_clk 
+0x20f4 002046 increase -1 ,pdata 
+0x20f5 002047 ixor clkn_bt ,pdata 
+0x20f6 002048 compare 0 ,pdata ,3 
+0x20f7 002049 nbranch page_start ,true 
+0x20f8 002050 deposit am_addr 
+0x20f9 002051 store 1 ,mem_fhs_am_addr 
+0x20fa 002052 force 0 ,n_tx_slot 
+0x20fb 002053 force 0 ,freq_mode 
+:      002055 page_restart:
+0x20fc 002056 bpatch patch02_4 ,mem_patch02 
+0x20fd 002057 branch page_exit ,timeout 
+0x20fe 002058 call fetch_page_bt_adr 
+0x20ff 002059 arg param_rf_setup ,timeup 
+0x2100 002060 until clkn_rt ,meet 
+:      002061 page_rx_restart:
+0x2101 002062 bpatch patch02_5 ,mem_patch02 
+0x2102 002063 fetch 4 ,mem_page_clk 
+0x2103 002064 iforce bt_clk 
+0x2104 002065 increase 1 ,pdata 
+0x2105 002066 store 4 ,mem_page_clk 
+0x2106 002067 isolate1 mark_page_trainb ,mark 
+0x2107 002068 setflag true ,2 ,freq_mode 
+0x2108 002069 compare 0x00 ,bt_clk ,0x02 
+0x2109 002070 nbranch page_receive ,true 
+0x210a 002071 fetch 1 ,mem_page_transmit 
+0x210b 002072 increase 1 ,pdata 
+0x210c 002073 store 1 ,mem_page_transmit 
+0x210d 002074 call tx_radio_freq 
+0x210e 002075 call start_transmitter 
+0x210f 002076 call start_tx_native 
+0x2110 002077 call send_access_word 
+0x2111 002078 call end_of_packet 
+0x2112 002079 call page_check_train 
+0x2113 002080 branch page_restart 
+:      002081 page_exit:
+0x2114 002082 bpatch patch02_6 ,mem_patch02 
+0x2115 002083 disable master 
+0x2116 002084 fetch 2 ,mem_page_interval 
+0x2117 002085 rtn blank 
+0x2118 002086 force page_interval_timer ,queue 
+0x2119 002087 branch timer_init 
+:      002089 page_check_train:
+0x211a 002090 bpatch patch02_7 ,mem_patch02 
+0x211b 002091 fetch 1 ,mem_nfreq_index_page 
+0x211c 002092 increase -1 ,pdata 
+0x211d 002093 store 1 ,mem_nfreq_index_page 
+0x211e 002094 rtn positive 
+0x211f 002095 jam 31 ,mem_nfreq_index_page 
+0x2120 002096 fetch 1 ,mem_npage_index 
+0x2121 002097 increase -1 ,pdata 
+0x2122 002098 store 1 ,mem_npage_index 
+0x2123 002099 rtn positive 
+0x2124 002100 setflip mark_page_trainb ,mark 
+0x2125 002101 fetch 1 ,mem_npage 
+0x2126 002102 store 1 ,mem_npage_index 
+0x2127 002103 rtn 
+:      002105 page_receive:
+0x2128 002106 bpatch patch03_0 ,mem_patch03 
+0x2129 002107 call rx_radio_freq 
+0x212a 002108 call start_rx_native 
+0x212b 002109 call start_receiver 
+0x212c 002110 call wait_access_clkn_rt 
+0x212d 002111 branch page_sync ,sync 
+0x212e 002112 call page_check_train 
+0x212f 002113 branch page_rx_restart 
+:      002114 page_sync:
+0x2130 002115 call end_of_packet 
+0x2131 002116 fetch 1 ,mem_page_rcv 
+0x2132 002117 increase 1 ,pdata 
+0x2133 002118 store 1 ,mem_page_rcv 
+0x2134 002119 force 0 ,stop_watch 
+0x2135 002120 fetch 4 ,mem_page_clk 
+:      002121 page_send_fhs:
+0x2136 002122 bpatch patch03_1 ,mem_patch03 
+0x2137 002123 call rf_setup_time_master_slot 
+0x2138 002124 call fetch_page_bt_adr 
+0x2139 002125 increase 1 ,n_tx_slot 
+:      002126 page_send_fhs_continue:
+0x213a 002127 and_into 0x1fd ,bt_clk 
+0x213b 002128 and_into 0x1fc ,freq_mode 
+0x213c 002129 call tx_radio_freq 
+0x213d 002130 call start_transmitter 
+0x213e 002131 call start_tx_native 
+0x213f 002132 call send_access_word 
+0x2140 002133 deposit clkn_bt 
+0x2141 002134 store 4 ,mem_clkn_bt 
+0x2142 002135 force 0 ,am_addr 
+0x2143 002136 force type_fhs ,type 
+0x2144 002137 call scan_mode_whiten 
+0x2145 002138 call transmit_packet_whitened 
+:      002139 page_wait_fhs_reply:
+0x2146 002140 bpatch patch03_2 ,mem_patch03 
+0x2147 002141 call rf_setup_time_slave_slot 
+0x2148 002142 or_into 0x02 ,bt_clk 
+0x2149 002143 and_into 0x1fc ,freq_mode 
+0x214a 002144 call rx_radio_freq 
+0x214b 002145 call start_rx_native 
+0x214c 002146 call start_receiver 
+0x214d 002147 call wait_access_clkn_rt 
+0x214e 002148 call end_of_packet ,sync 
+0x214f 002149 branch page_wait_fhs_reply_ok ,sync 
+0x2150 002150 fetch 1 ,mem_fhs_wait_counter 
+0x2151 002151 branch page_restart ,blank 
+0x2152 002152 increase -1 ,pdata 
+0x2153 002153 store 1 ,mem_fhs_wait_counter 
+0x2154 002154 branch page_send_fhs 
+:      002156 page_wait_fhs_reply_ok:
+0x2155 002157 bpatch patch03_3 ,mem_patch03 
+0x2156 002158 fetch 1 ,mem_page_rcv_fhs 
+0x2157 002159 increase 1 ,pdata 
+0x2158 002160 store 1 ,mem_page_rcv_fhs 
+0x2159 002161 call prepare_newconn 
+:      002162 master_newconn_loop:
+0x215a 002163 call master_newconn_once 
+0x215b 002164 branch newconn_poll_responded ,sync 
+0x215c 002165 call new_conn_timeout 
+0x215d 002166 nbranch master_newconn_loop ,blank 
+0x215e 002167 branch page_restart 
+:      002169 newconn_poll_responded:
+0x215f 002170 bpatch patch03_4 ,mem_patch03 
+0x2160 002171 fetch 1 ,mem_state 
+0x2161 002172 set0 state_inpage ,pdata 
+0x2162 002173 store 1 ,mem_state 
+0x2163 002174 call newconn_init 
+0x2164 002175 disable master 
+0x2165 002176 rtn 
+:      002179 master_dispatch:
+0x2166 002180 bpatch patch03_5 ,mem_patch03 
+0x2167 002181 enable master 
+0x2168 002182 enable clknt 
+0x2169 002183 call role_switch_master 
+0x216a 002184 rtn user 
+0x216b 002185 call check_bt_disabled 
+0x216c 002186 call rf_setup_time_master_slot 
+0x216d 002187 add clkn_bt ,1 ,bt_clk 
+0x216e 002188 call fetch_self_bt_adr 
+0x216f 002189 force 0x03 ,freq_mode 
+0x2170 002190 call scheduler_tx_l2cap_pkt 
+0x2171 002191 call prepare_tx 
+0x2172 002192 call tx_radio_freq 
+0x2173 002193 call start_transmitter 
+0x2174 002194 call start_tx_native 
+0x2175 002195 call send_access_word 
+0x2176 002196 call transmit_packet 
+:      002197 master_loop:
+0x2177 002198 bpatch patch03_6 ,mem_patch03 
+0x2178 002199 call parse_lmp 
+0x2179 002200 call master_conn_recv_packet 
+0x217a 002201 nbranch master_notmatch ,match 
+0x217b 002202 call supervision_flush 
+0x217c 002203 call parse_l2cap 
+0x217d 002204 fetch 1 ,mem_master_rcvcnt 
+0x217e 002205 increase 1 ,pdata 
+0x217f 002206 store 1 ,mem_master_rcvcnt 
+:      002207 master_notmatch:
+0x2180 002208 bpatch patch03_7 ,mem_patch03 
+0x2181 002209 call scheduler_process 
+0x2182 002210 call check_master_disconnect 
+0x2183 002211 nrtn master 
+0x2184 002212 call check_attempt 
+0x2185 002213 nbranch master_attempt ,blank 
+:      002214 master_exit:
+0x2186 002215 disable master 
+0x2187 002216 rtn 
+:      002218 master_attempt:
+0x2188 002219 call prepare_tx 
+0x2189 002220 call master_conn_send_packet 
+0x218a 002221 branch master_loop 
+:      002224 check_master_disconnect:
+0x218b 002225 branch check_master_match ,match 
+0x218c 002226 call supervision_update 
+0x218d 002227 branch master_disconnect ,positive 
+:      002228 check_master_match:
+0x218e 002229 call check_disconnect_timeout 
+0x218f 002230 nbranch master_disconnect ,user 
+0x2190 002231 fetch 1 ,mem_state_map 
+0x2191 002232 rtnbit0 smap_name_req 
+0x2192 002233 rtnbit1 smap_name_res 
+0x2193 002234 fetch 1 ,mem_op 
+0x2194 002235 rtnbit1 op_disconn 
+0x2195 002236 call conn_timer_expired 
+0x2196 002237 nrtn blank 
+0x2197 002238 fetch 1 ,mem_nameres_cnt 
+0x2198 002239 increase -1 ,pdata 
+0x2199 002240 store 1 ,mem_nameres_cnt 
+0x219a 002241 nrtn blank 
+0x219b 002242 branch lmp_disconnect 
+:      002244 master_disconnect:
+0x219c 002245 bpatch patch04_0 ,mem_patch04 
+0x219d 002246 call quit_connection 
+0x219e 002247 disable master 
+0x219f 002248 fetch 1 ,mem_state_map 
+0x21a0 002249 bbit1 smap_name_req ,master_name_disconnect 
+0x21a1 002250 rtn 
+:      002252 master_name_disconnect:
+0x21a2 002253 fetch 1 ,mem_state_map 
+0x21a3 002254 rtnbit1 smap_name_res 
+:      002255 master_name_error:
+0x21a4 002256 arg mem_tmp_buffer ,contw 
+0x21a5 002257 arg 8 ,loopcnt 
+0x21a6 002258 branch memset0 
+:      002260 check_disconnect_timeout:
+0x21a7 002261 bpatch patch04_1 ,mem_patch04 
+0x21a8 002262 enable user 
+0x21a9 002263 fetch 1 ,mem_op 
+0x21aa 002264 rtnbit0 op_disconn 
+0x21ab 002265 call conn_timer_expired 
+0x21ac 002266 nrtn blank 
+0x21ad 002267 branch disable_user 
+:      002269 conn_timer_expired:
+0x21ae 002270 fetch 1 ,mem_conn_timer 
+0x21af 002271 increase -1 ,pdata 
+0x21b0 002272 store 1 ,mem_conn_timer 
+0x21b1 002273 rtn 
+:      002275 linkkey_ready:
+0x21b2 002276 bpatch patch04_2 ,mem_patch04 
+0x21b3 002277 fetch 1 ,mem_state 
+0x21b4 002278 bbit1 state_linkkey ,linkkey_set 
+0x21b5 002279 fetch 1 ,mem_pairing_auth 
+0x21b6 002280 branch linkkey_set ,blank 
+0x21b7 002281 jam defalt_pairing_auth ,mem_pairing_auth 
+0x21b8 002282 jam bt_evt_linkkey_generate ,mem_fifo_temp 
+0x21b9 002283 call ui_ipc_send_event 
+0x21ba 002284 branch linkkey_set 
+:      002285 linkkey_set:
+0x21bb 002286 bpatch patch04_3 ,mem_patch04 
+0x21bc 002287 call context_traverse_linkkey 
+0x21bd 002288 fetch 1 ,mem_state 
+0x21be 002289 set1 state_linkkey ,pdata 
+0x21bf 002290 store 1 ,mem_state 
+0x21c0 002291 jam 1 ,mem_link_key_exists 
+0x21c1 002292 fetch 1 ,mem_conn_sm 
+0x21c2 002293 bne conn_sm_pairing ,linkkey_set_continue 
+:      002294 linkkey_set_continue:
+0x21c3 002295 rtn 
+:      002297 generate_linkkey_continue:
+0x21c4 002298 jam pairing_auth ,mem_pairing_auth 
+:      002299 clear_linkstate:
+0x21c5 002300 fetch 1 ,mem_state 
+0x21c6 002301 set0 state_linkkey ,pdata 
+0x21c7 002302 store 1 ,mem_state 
+0x21c8 002303 rtn 
+:      002307 role_switch_check:
+0x21c9 002308 bpatch patch04_4 ,mem_patch04 
+0x21ca 002309 disable user 
+0x21cb 002310 fetch 2 ,mem_tsniff 
+0x21cc 002311 arg 0xffff ,temp 
+0x21cd 002312 isub temp ,null 
+0x21ce 002313 nrtn zero 
+0x21cf 002314 fetch 4 ,mem_sniff_anchor 
+0x21d0 002315 branch role_switch_clkn ,clknt 
+0x21d1 002316 isub clke_bt ,pdata 
+0x21d2 002317 branch role_switch_clke 
+:      002318 role_switch_clkn:
+0x21d3 002319 isub clkn_bt ,pdata 
+:      002320 role_switch_clke:
+0x21d4 002321 sub pdata ,4 ,null 
+0x21d5 002322 nrtn positive 
+0x21d6 002323 force 0 ,pdata 
+0x21d7 002324 store 2 ,mem_tsniff 
+0x21d8 002325 branch enable_user 
+:      002329 role_switch_prepare:
+0x21d9 002330 copy pdata ,temp 
+0x21da 002331 bpatch patch04_5 ,mem_patch04 
+0x21db 002332 storet 4 ,mem_sniff_anchor 
+:      002333 role_switch_prepare0:
+0x21dc 002334 jam switch_flag_accept ,mem_switch_flag 
+0x21dd 002335 setarg 0xffff 
+0x21de 002336 store 2 ,mem_tsniff 
+0x21df 002337 jam 1 ,mem_sniff_attempt 
+0x21e0 002338 rtn 
+:      002341 role_switch_master:
+0x21e1 002342 bpatch patch04_6 ,mem_patch04 
+0x21e2 002343 call role_switch_check 
+0x21e3 002344 nrtn user 
+0x21e4 002345 disable user 
+0x21e5 002346 jam param_newconnto ,mem_newconnto_counter 
+0x21e6 002347 set0 mark_fhs_already_good ,mark 
+:      002348 roles_waitfhs_loop:
+0x21e7 002349 call rf_setup_time_master_slot 
+0x21e8 002350 call master_recv_packet 
+0x21e9 002351 bmark1 mark_fhs_already_good ,roles_replyto_fhs 
+0x21ea 002352 call new_conn_timeout 
+0x21eb 002353 nbranch roles_waitfhs_loop ,blank 
+:      002354 role_switch_fail_master:
+0x21ec 002355 bpatch patch04_7 ,mem_patch04 
+0x21ed 002356 disable user 
+0x21ee 002357 deposit clkn_bt 
+0x21ef 002358 store 4 ,mem_next_btclk 
+0x21f0 002359 enable clknt 
+0x21f1 002360 enable master 
+0x21f2 002361 jam bt_evt_switch_fail_master ,mem_fifo_temp 
+0x21f3 002362 branch ui_ipc_send_event 
+:      002364 roles_replyto_fhs:
+0x21f4 002365 bpatch patch05_0 ,mem_patch05 
+0x21f5 002366 call rf_setup_time_slave_slot 
+0x21f6 002367 arg type_id ,type 
+0x21f7 002368 call master_send_packet 
+0x21f8 002369 disable clknt 
+0x21f9 002370 disable master 
+0x21fa 002371 call apply_switch_clke 
+0x21fb 002372 call prepare_newconn 
+:      002373 roles_newconns_loop:
+0x21fc 002374 bpatch patch05_1 ,mem_patch05 
+0x21fd 002375 call slave_newconn_once 
+0x21fe 002376 branch roles_newconns_responded ,match 
+0x21ff 002377 call new_conn_timeout 
+0x2200 002378 nbranch roles_newconns_loop ,blank 
+0x2201 002379 branch role_switch_fail_master 
+:      002380 roles_newconns_responded:
+0x2202 002381 fetch 1 ,mem_mode 
+0x2203 002382 set0 mode_master ,pdata 
+0x2204 002383 store 1 ,mem_mode 
+0x2205 002384 call supervision_flush 
+0x2206 002385 call calc_clke_offset 
+0x2207 002386 enable user 
+0x2208 002387 jam bt_evt_switch_success_master ,mem_fifo_temp 
+0x2209 002388 branch ui_ipc_send_event 
+:      002393 context_load:
+0x220a 002394 bpatch patch05_2 ,mem_patch05 
+0x220b 002395 set1 mark_context ,mark 
+0x220c 002396 deposit rega 
+0x220d 002397 store 2 ,mem_context_ptr 
+0x220e 002398 force context_size ,loopcnt 
+0x220f 002399 arg mem_le_state ,contw 
+0x2210 002400 add rega ,coffset_mode ,contr 
+0x2211 002401 ifetch 1 ,contr 
+0x2212 002402 copy rega ,contr 
+0x2213 002403 bbit1 mode_le ,memcpy 
+0x2214 002404 arg mem_state ,contw 
+0x2215 002405 call memcpy 
+0x2216 002406 disable attempt 
+0x2217 002407 fetch 1 ,mem_amaddr 
+0x2218 002408 iforce am_addr 
+0x2219 002409 jam 1 ,mem_current_sniff_attempt 
+0x221a 002410 branch context_load_master ,master 
+0x221b 002411 jam 1 ,mem_current_sniff_attempt 
+:      002412 context_load_master:
+0x221c 002413 fetch 1 ,mem_state 
+0x221d 002414 rtnbit0 state_insniff 
+0x221e 002415 fetch 1 ,mem_sniff_attempt 
+0x221f 002416 store 1 ,mem_current_sniff_attempt 
+0x2220 002417 fetch 1 ,mem_sniff_timeout 
+0x2221 002418 store 1 ,mem_current_sniff_timeout 
+0x2222 002419 rtn 
+:      002421 context_save:
+0x2223 002422 bpatch patch05_3 ,mem_patch05 
+0x2224 002423 fetch 2 ,mem_context_ptr 
+0x2225 002424 iforce contw 
+0x2226 002425 force context_size ,loopcnt 
+0x2227 002426 arg mem_le_state ,contr 
+0x2228 002427 branch memcpy ,le 
+0x2229 002428 arg mem_state ,contr 
+0x222a 002429 branch memcpy 
+:      002433 context_get_next:
+0x222b 002434 arg context_num ,loopcnt 
+0x222c 002435 fetcht 1 ,mem_current_context 
+:      002436 context_get_next_loop:
+0x222d 002437 increase 1 ,temp 
+0x222e 002438 compare context_num ,temp ,0xff 
+0x222f 002439 nbranch context_get_next_cont ,true 
+0x2230 002440 arg 0 ,temp 
+:      002441 context_get_next_cont:
+0x2231 002442 storet 1 ,mem_current_context 
+0x2232 002443 mul32 temp ,context_size ,pdata 
+0x2233 002444 arg mem_context ,rega 
+0x2234 002445 iadd rega ,rega 
+0x2235 002446 ifetch 1 ,rega 
+0x2236 002447 bbit1 state_insniff ,context_get_next_sniff 
+0x2237 002448 rtnbit1 state_inconn 
+0x2238 002449 rtnbit1 state_inpage 
+:      002450 context_get_next_sniff:
+0x2239 002451 loop context_get_next_loop 
+0x223a 002452 rtn 
+:      002454 context_new:
+0x223b 002455 bpatch patch05_4 ,mem_patch05 
+0x223c 002456 arg context_search_empty ,regc 
+0x223d 002457 call context_search 
+0x223e 002458 nrtn zero 
+0x223f 002459 deposit rega 
+0x2240 002460 store 2 ,mem_context_ptr 
+0x2241 002461 force 0 ,null 
+0x2242 002462 rtn 
+:      002466 context_check_all_wack:
+0x2243 002467 call check_esco_amaddr 
+0x2244 002468 branch context_check_esco_wack ,true 
+0x2245 002469 fetch 2 ,mem_context_ptr 
+0x2246 002470 add pdata ,coffset_arq ,contw 
+0x2247 002471 fetch 1 ,mem_arq 
+0x2248 002472 istore 1 ,contw 
+0x2249 002473 arg context_check_a_wack ,regc 
+0x224a 002474 branch context_search 
+:      002476 context_check_esco_wack:
+0x224b 002477 fetch 1 ,mem_arq 
+0x224c 002478 isolate1 wack ,pdata 
+0x224d 002479 branch context_esco_wack ,true 
+0x224e 002480 force 1 ,null 
+0x224f 002481 rtn 
+:      002482 context_esco_wack:
+0x2250 002483 force 0 ,null 
+0x2251 002484 rtn 
+:      002487 context_check_idle:
+0x2252 002488 arg context_check_inconn ,regc 
+0x2253 002489 branch context_search 
+:      002491 context_traverse_linkkey:
+0x2254 002492 fetcht 2 ,mem_context_ptr 
+0x2255 002493 arg context_traverse_clearkey ,regc 
+0x2256 002494 branch context_search 
+:      002498 context_search_conn_handle:
+0x2257 002499 fetcht 1 ,mem_hci_conn_handle 
+:      002500 context_search_conn_handle2:
+0x2258 002501 arg context_search_handle ,regc 
+0x2259 002502 branch context_search 
+:      002504 context_search_plap:
+0x225a 002505 bpatch patch05_5 ,mem_patch05 
+0x225b 002506 fetcht 6 ,mem_hci_plap 
+:      002507 context_search_plap2:
+0x225c 002508 arg context_search_lap ,regc 
+0x225d 002509 branch context_search 
+:      002511 context_search_insniff:
+0x225e 002512 arg context_search_sniff ,regc 
+0x225f 002513 branch context_search 
+:      002515 context_search_sniff_window:
+0x2260 002516 arg context_search_window ,regc 
+:      002517 context_search:
+0x2261 002518 bpatch patch05_6 ,mem_patch05 
+0x2262 002519 arg mem_context ,rega 
+0x2263 002520 arg context_num ,loopcnt 
+:      002521 context_search_loop:
+0x2264 002522 ifetch 1 ,rega 
+0x2265 002523 copy regc ,pc 
+:      002524 context_search_next:
+0x2266 002525 increase context_size ,rega 
+0x2267 002526 loop context_search_loop 
+0x2268 002527 force 1 ,null 
+0x2269 002528 rtn 
+:      002530 context_search_empty:
+0x226a 002531 bbit1 state_inconn ,context_search_next 
+0x226b 002532 bbit1 state_inpage ,context_search_next 
+0x226c 002533 force 0 ,null 
+0x226d 002534 rtn 
+:      002536 context_search_lap:
+0x226e 002537 bbit1 state_inpage ,context_search_lap_cont 
+0x226f 002538 bbit0 state_inconn ,context_search_next 
+:      002539 context_search_lap_cont:
+0x2270 002540 add rega ,coffset_plap ,contr 
+0x2271 002541 ifetch 6 ,contr 
+0x2272 002542 isub temp ,null 
+0x2273 002543 rtn zero 
+0x2274 002544 branch context_search_next 
+:      002546 context_search_handle:
+0x2275 002547 bbit0 state_inconn ,context_search_next 
+0x2276 002548 add rega ,coffset_conn_handle ,contr 
+0x2277 002549 ifetch 1 ,contr 
+0x2278 002550 isub temp ,null 
+0x2279 002551 rtn zero 
+0x227a 002552 branch context_search_next 
+:      002554 context_search_sniff:
+0x227b 002555 bbit0 state_insniff ,context_search_next 
+:      002556 context_search_sniff_loop:
+0x227c 002557 call context_get_anchor 
+0x227d 002558 call sign_pdata_temp 
+0x227e 002559 isub temp ,pdata 
+0x227f 002560 increase 1 ,pdata 
+0x2280 002561 branch context_search_sniff_miss ,positive 
+0x2281 002562 copy contr ,regb 
+0x2282 002563 store 9 ,mem_temp 
+0x2283 002564 fetch 1 ,mem_le_sc_calc 
+0x2284 002565 nbranch context_search_sniff_sc ,blank 
+0x2285 002566 fetch 9 ,mem_temp 
+0x2286 002567 copy regb ,contr 
+0x2287 002568 increase 5 ,pdata 
+0x2288 002569 branch context_search_meet1 
+:      002570 context_search_sniff_sc:
+0x2289 002571 fetch 9 ,mem_temp 
+0x228a 002572 copy regb ,contr 
+0x228b 002573 increase 20 ,pdata 
+:      002574 context_search_meet1:
+0x228c 002575 nbranch context_search_next ,positive 
+:      002576 context_search_meet:
+0x228d 002577 copy temp ,bt_clk 
+0x228e 002578 call context_next_anchor 
+0x228f 002579 force 0 ,null 
+0x2290 002580 rtn 
+:      002583 context_search_sniff_miss:
+0x2291 002584 iforce regb 
+0x2292 002585 add rega ,coffset_tsniff ,contr 
+0x2293 002586 ifetch 2 ,contr 
+0x2294 002587 branch context_search_meet ,blank 
+0x2295 002588 call context_next_anchor 
+0x2296 002589 branch context_search_sniff_loop 
+:      002591 sign_pdata_temp:
+0x2297 002592 rshift16 pdata ,timeup 
+0x2298 002593 rshift8 timeup ,timeup 
+0x2299 002594 branch sign_pdata_temp_p0 ,zero 
+0x229a 002595 compare 0xf ,timeup ,0xf 
+0x229b 002596 nrtn true 
+0x229c 002597 rshift16 temp ,timeup 
+0x229d 002598 rshift8 timeup ,timeup 
+0x229e 002599 nrtn zero 
+0x229f 002600 set1 28 ,temp 
+0x22a0 002601 rtn 
+:      002602 sign_pdata_temp_p0:
+0x22a1 002603 rshift16 temp ,timeup 
+0x22a2 002604 rshift8 timeup ,timeup 
+0x22a3 002605 compare 0xf ,timeup ,0xf 
+0x22a4 002606 nrtn true 
+0x22a5 002607 set1 28 ,pdata 
+0x22a6 002608 rtn 
+:      002610 context_check_inconn:
+0x22a7 002611 bbit0 state_inconn ,context_search_next 
+0x22a8 002612 force 0 ,null 
+0x22a9 002613 rtn 
+:      002615 context_check_a_wack:
+0x22aa 002616 bbit0 state_inconn ,context_search_next 
+0x22ab 002617 add rega ,coffset_mode ,contr 
+0x22ac 002618 ifetch 1 ,contr 
+0x22ad 002619 bbit1 mode_le ,context_search_next 
+0x22ae 002620 add rega ,coffset_arq ,contr 
+0x22af 002621 ifetch 1 ,contr 
+0x22b0 002622 bbit0 wack ,context_search_next 
+0x22b1 002623 force 0 ,null 
+0x22b2 002624 rtn 
+:      002626 context_get_anchor:
+0x22b3 002627 add rega ,coffset_mode ,contr 
+0x22b4 002628 ifetcht 1 ,contr 
+0x22b5 002629 deposit clkn_bt 
+0x22b6 002630 isolate1 mode_master ,temp 
+0x22b7 002631 add rega ,coffset_sniff_anchor ,contr 
+0x22b8 002632 ifetcht 4 ,contr 
+0x22b9 002633 rtn true 
+0x22ba 002634 add rega ,coffset_clk_offset ,contr 
+0x22bb 002635 ifetch 6 ,contr 
+0x22bc 002636 call calc_clke2 
+0x22bd 002637 deposit clke_bt 
+0x22be 002638 rtn 
+:      002640 context_next_anchor:
+0x22bf 002641 add rega ,coffset_tsniff ,contr 
+0x22c0 002642 add rega ,coffset_sniff_anchor ,contw 
+0x22c1 002643 ifetch 2 ,contr 
+0x22c2 002644 iadd temp ,timeup 
+0x22c3 002645 deposit timeup 
+0x22c4 002646 istore 4 ,contw 
+0x22c5 002647 branch le_context_nexthop 
+:      002650 context_search_window:
+0x22c6 002651 bbit0 state_insniff ,context_search_next 
+0x22c7 002652 call context_get_anchor 
+0x22c8 002653 iadd stop_watch ,pdata 
+0x22c9 002654 iadd stop_watch ,pdata 
+0x22ca 002655 iadd queue ,pdata 
+0x22cb 002656 isub temp ,null 
+0x22cc 002657 nbranch context_search_next ,positive 
+0x22cd 002658 force 0 ,null 
+0x22ce 002659 rtn 
+:      002661 context_traverse_clearkey:
+0x22cf 002662 bbit0 state_inconn ,context_search_next 
+0x22d0 002663 deposit temp 
+0x22d1 002664 isub rega ,null 
+0x22d2 002665 branch context_search_next ,null 
+0x22d3 002666 add rega ,coffset_mode ,contr 
+0x22d4 002667 ifetch 1 ,contr 
+0x22d5 002668 bbit1 mode_le ,context_search_next 
+0x22d6 002669 ifetch 1 ,rega 
+0x22d7 002670 set0 state_linkkey ,pdata 
+0x22d8 002671 istore 1 ,rega 
+0x22d9 002672 branch context_search_next 
+:      002675 master_conn_send_packet:
+0x22da 002676 bpatch patch05_7 ,mem_patch05 
+0x22db 002677 call rf_setup_time_master_slot 
+:      002678 master_send_packet:
+0x22dc 002679 add clkn_bt ,1 ,bt_clk 
+0x22dd 002680 call fetch_self_bt_adr 
+0x22de 002681 force 0x03 ,freq_mode 
+0x22df 002682 call tx_radio_freq 
+0x22e0 002683 call start_transmitter 
+0x22e1 002684 call start_tx_native 
+0x22e2 002685 call send_access_word 
+0x22e3 002686 branch transmit_packet 
+:      002688 master_conn_recv_packet:
+0x22e4 002689 bpatch patch06_0 ,mem_patch06 
+0x22e5 002690 call rf_setup_time_slave_slot 
+:      002691 master_recv_packet:
+0x22e6 002692 add clkn_bt ,1 ,bt_clk 
+0x22e7 002693 call fetch_self_bt_adr 
+0x22e8 002694 force 0x03 ,freq_mode 
+0x22e9 002695 call rx_radio_freq 
+0x22ea 002696 call init_rx_packet_flags 
+0x22eb 002697 call prep_crypt 
+0x22ec 002698 call start_rx_native 
+0x22ed 002699 call start_receiver 
+:      002700 master_rx_conn_finish_packet:
+0x22ee 002701 call wait_access_clkn_rt 
+0x22ef 002702 nrtn sync 
+0x22f0 002703 call save_rssi 
+0x22f1 002704 branch receive_packet 
+:      002708 master_newconn_once:
+0x22f2 002709 bpatch patch06_1 ,mem_patch06 
+0x22f3 002710 fetch 1 ,mem_fhs_am_addr 
+0x22f4 002711 iforce am_addr 
+0x22f5 002712 force type_poll ,type 
+0x22f6 002713 call master_conn_send_packet 
+0x22f7 002714 branch master_conn_recv_packet 
+:      002725 inquiry_scan_dispatch:
+0x22f8 002726 fetch 1 ,mem_scan_mode 
+0x22f9 002727 rtnbit0 inq_scan_mode 
+0x22fa 002728 force iscan_interval_timer ,queue 
+0x22fb 002729 call timer_check 
+0x22fc 002730 nrtn blank 
+0x22fd 002731 fetcht 2 ,mem_iscan_window 
+0x22fe 002732 force 4 ,queue 
+0x22ff 002733 call sniff_check_window 
+0x2300 002734 rtn user 
+0x2301 002735 call inquiry_scan_start 
+0x2302 002736 force iscan_interval_timer ,queue 
+0x2303 002737 fetch 2 ,mem_iscan_interval 
+0x2304 002738 nbranch timer_init ,sync 
+0x2305 002739 random pdata 
+0x2306 002740 iand mask3ff ,pdata 
+0x2307 002741 branch timer_init 
+:      002744 inquiry_scan_start:
+0x2308 002745 bpatch patch06_2 ,mem_patch06 
+0x2309 002746 jam 0 ,mem_fhs_am_addr 
+0x230a 002747 disable clknt 
+0x230b 002748 disable attempt 
+0x230c 002749 call afh_clear 
+0x230d 002750 and clkn_bt ,0x1fc ,bt_clk 
+0x230e 002751 force 0x01 ,freq_mode 
+0x230f 002752 call fetch_giac 
+0x2310 002753 call rx_radio_freq 
+0x2311 002754 setflip mark_inquiry_state ,mark 
+0x2312 002755 fetch 1 ,mem_inquiryscan_waitcnt 
+0x2313 002756 increase 1 ,pdata 
+0x2314 002757 store 1 ,mem_inquiryscan_waitcnt 
+0x2315 002758 call fetch_diac 
+0x2316 002759 call start_receiver 
+0x2317 002760 call wait_access_forever 
+0x2318 002761 nrtn sync 
+0x2319 002762 bpatch patch06_3 ,mem_patch06 
+0x231a 002763 force 0 ,stop_watch 
+0x231b 002764 call shutdown_radio 
+0x231c 002765 fetch 1 ,mem_inquiryscan_rcvcnt 
+0x231d 002766 increase 1 ,pdata 
+0x231e 002767 store 1 ,mem_inquiryscan_rcvcnt 
+0x231f 002768 call fetch_giac 
+0x2320 002769 call rf_setup_time_slave_slot 
+0x2321 002770 or_into 0x002 ,bt_clk 
+0x2322 002771 force 0x01 ,freq_mode 
+0x2323 002772 call tx_radio_freq 
+0x2324 002773 call fetch_diac 
+0x2325 002774 call start_transmitter 
+0x2326 002775 call start_tx_external 
+0x2327 002776 deposit clkn_bt 
+0x2328 002777 store 4 ,mem_clkn_bt 
+0x2329 002778 call send_access_word 
+0x232a 002779 force type_fhs ,type 
+0x232b 002780 force 0 ,am_addr 
+0x232c 002781 call scan_mode_whiten 
+0x232d 002782 call transmit_packet_whitened 
+0x232e 002783 call send_eir 
+0x232f 002784 and_into 0x1fd ,bt_clk 
+0x2330 002785 increase 1 ,n_tx_slot 
+0x2331 002786 rtn 
+:      002788 send_eir:
+0x2332 002789 bpatch patch06_4 ,mem_patch06 
+0x2333 002790 fetch 1 ,mem_eir_enable 
+0x2334 002791 rtn blank 
+0x2335 002792 arg mem_eir ,contw 
+0x2336 002793 fetch 1 ,mem_local_name_length 
+0x2337 002794 copy pdata ,loopcnt 
+0x2338 002795 increase 1 ,pdata 
+0x2339 002796 istore 1 ,contw 
+0x233a 002797 copy contw ,temp 
+0x233b 002798 increase 1 ,pdata 
+0x233c 002799 store 2 ,mem_tx_len 
+0x233d 002800 copy temp ,contw 
+0x233e 002801 setarg 0x09 
+0x233f 002802 istore 1 ,contw 
+0x2340 002803 arg mem_local_name ,contr 
+0x2341 002804 call memcpy 
+0x2342 002806 arg mem_all_uuid_128bits ,regc 
+0x2343 002807 arg 4 ,loopcnt 
+0x2344 002808 call get_all_uuid 
+0x2345 002809 arg mem_all_uuid_16bits ,regc 
+0x2346 002810 arg 1 ,loopcnt 
+0x2347 002811 call get_all_uuid 
+0x2348 002813 force type_dm3 ,type 
+0x2349 002814 jam 2 ,mem_tx_lch 
+0x234a 002815 setarg mem_eir 
+0x234b 002816 store 2 ,mem_txptr 
+0x234c 002817 call rf_setup_time_slave_slot 
+0x234d 002818 call tx_radio_freq 
+0x234e 002819 call start_transmitter 
+0x234f 002820 call start_tx_external 
+0x2350 002821 call send_access_word 
+0x2351 002822 call scan_mode_whiten 
+0x2352 002823 call transmit_packet_whitened 
+0x2353 002824 rtn 
+:      002827 get_all_uuid:
+0x2354 002828 copy contw ,temp 
+0x2355 002829 copy regc ,contr 
+0x2356 002830 ifetch 1 ,contr 
+0x2357 002831 rtn blank 
+:      002832 lshift_loop:
+0x2358 002833 lshift pdata ,pdata 
+0x2359 002834 loop lshift_loop 
+0x235a 002835 copy pdata ,rega 
+0x235b 002836 increase 2 ,pdata 
+0x235c 002837 copy pdata ,queue 
+0x235d 002838 fetch 2 ,mem_tx_len 
+0x235e 002839 iadd queue ,pdata 
+0x235f 002840 store 2 ,mem_tx_len 
+0x2360 002841 copy temp ,contw 
+0x2361 002842 copy rega ,pdata 
+0x2362 002843 increase 1 ,pdata 
+0x2363 002844 istore 1 ,contw 
+0x2364 002845 copy regc ,contr 
+0x2365 002846 ifetch 1 ,contr 
+0x2366 002847 ifetch 1 ,contr 
+0x2367 002848 istore 1 ,contw 
+0x2368 002849 copy rega ,loopcnt 
+0x2369 002850 branch memcpy 
+:      002856 page_scan_dispatch:
+0x236a 002857 fetch 1 ,mem_scan_mode 
+0x236b 002858 rtnbit0 page_scan_mode 
+0x236c 002859 force pscan_interval_timer ,queue 
+0x236d 002860 call timer_check 
+0x236e 002861 nrtn blank 
+0x236f 002862 fetcht 2 ,mem_pscan_window 
+0x2370 002863 force 40 ,queue 
+0x2371 002864 call sniff_check_window 
+0x2372 002865 rtn user 
+0x2373 002866 force 0 ,am_addr 
+0x2374 002867 jam param_pagerespto ,mem_fhs_wait_counter 
+0x2375 002868 set0 mark_fhs_already_good ,mark 
+0x2376 002869 call page_scan_start 
+0x2377 002870 force pscan_interval_timer ,queue 
+0x2378 002871 fetch 2 ,mem_pscan_interval 
+0x2379 002872 branch timer_init 
+:      002875 page_scan_start:
+0x237a 002876 bpatch patch06_5 ,mem_patch06 
+0x237b 002877 disable clknt 
+0x237c 002878 call afh_clear 
+0x237d 002879 fetch 1 ,mem_pagescan_waitcnt 
+0x237e 002880 increase 1 ,pdata 
+0x237f 002881 store 1 ,mem_pagescan_waitcnt 
+0x2380 002882 force 0 ,n_tx_slot 
+0x2381 002883 call fetch_self_bt_adr 
+0x2382 002884 add clkn_bt ,1 ,bt_clk 
+0x2383 002885 force 0x02 ,freq_mode 
+0x2384 002886 bpatch patch06_6 ,mem_patch06 
+0x2385 002887 call rx_radio_freq 
+0x2386 002888 call start_receiver 
+0x2387 002889 call wait_access_forever 
+0x2388 002890 nrtn sync 
+0x2389 002891 call shutdown_radio 
+0x238a 002892 fetch 1 ,mem_pagescan_rcvcnt 
+0x238b 002893 increase 1 ,pdata 
+0x238c 002894 store 1 ,mem_pagescan_rcvcnt 
+0x238d 002895 force 0 ,stop_watch 
+0x238e 002896 call rf_setup_time_slave_slot 
+0x238f 002897 or_into 0x002 ,bt_clk 
+0x2390 002898 force 0x01 ,freq_mode 
+0x2391 002899 call tx_radio_freq 
+0x2392 002900 call start_transmitter 
+0x2393 002901 call start_tx_external 
+0x2394 002902 call send_access_word 
+0x2395 002903 call end_of_packet 
+0x2396 002904 force 0 ,am_addr 
+0x2397 002905 arg param_rf_setup ,timeup 
+0x2398 002906 until clke_rt ,meet 
+0x2399 002907 or_into 0x03 ,clke_bt 
+0x239a 002908 and_into 0x1fd ,bt_clk 
+:      002909 page_scan_wait_fhs_restart:
+0x239b 002910 bpatch patch06_7 ,mem_patch06 
+0x239c 002911 increase 1 ,n_tx_slot 
+0x239d 002912 call rx_radio_freq 
+0x239e 002913 call start_receiver 
+0x239f 002914 call wait_access_mhalfbnd 
+0x23a0 002915 nbranch page_scan_wait_fhs_again ,sync 
+0x23a1 002916 call scan_mode_whiten 
+0x23a2 002917 call receive_packet_whitened 
+0x23a3 002918 bmark1 mark_fhs_already_good ,page_scan_reply_to_fhs 
+:      002919 page_scan_wait_fhs_again:
+0x23a4 002920 bpatch patch07_0 ,mem_patch07 
+0x23a5 002921 fetch 1 ,mem_fhs_wait_counter 
+0x23a6 002922 rtn blank 
+0x23a7 002923 increase -1 ,pdata 
+0x23a8 002924 store 1 ,mem_fhs_wait_counter 
+0x23a9 002925 call rf_setup_time_master_slot 
+0x23aa 002926 branch page_scan_wait_fhs_restart 
+:      002929 page_scan_reply_to_fhs:
+0x23ab 002930 bpatch patch07_1 ,mem_patch07 
+0x23ac 002931 set0 1 ,clke_bt 
+0x23ad 002932 set1 0 ,clke_bt 
+0x23ae 002933 fetch 1 ,mem_pagescan_rcvfhscnt 
+0x23af 002934 increase 1 ,pdata 
+0x23b0 002935 store 1 ,mem_pagescan_rcvfhscnt 
+0x23b1 002936 call rf_setup_time_slave_slot 
+0x23b2 002937 or_into 0x02 ,bt_clk 
+0x23b3 002938 call tx_radio_freq 
+0x23b4 002939 call start_transmitter 
+0x23b5 002940 call start_tx_external 
+0x23b6 002941 call send_access_word 
+0x23b7 002942 call end_of_packet 
+:      002943 slave_apply_clke_bt:
+0x23b8 002944 compare 0x03 ,clke_bt ,0x03 
+0x23b9 002945 branch slave_apply_clke_bt_now ,true 
+0x23ba 002946 until null ,mhalfbnd 
+0x23bb 002947 branch slave_apply_clke_bt 
+:      002948 slave_apply_clke_bt_now:
+0x23bc 002949 fetch 4 ,mem_clke_bt 
+0x23bd 002950 or_into 0x03 ,pdata 
+0x23be 002951 icopy clke_bt 
+:      002953 start_slave_connection:
+0x23bf 002954 bpatch patch07_2 ,mem_patch07 
+0x23c0 002955 fetch 6 ,extm_lap 
+0x23c1 002956 store 6 ,mem_plap 
+0x23c2 002957 call prepare_newconn 
+:      002958 slave_newconn_loop:
+0x23c3 002959 call slave_newconn_once 
+0x23c4 002960 branch sconn_successful ,match 
+0x23c5 002961 call new_conn_timeout 
+0x23c6 002962 nbranch slave_newconn_loop ,blank 
+0x23c7 002963 rtn 
+:      002966 sconn_successful:
+0x23c8 002967 bpatch patch07_3 ,mem_patch07 
+0x23c9 002968 call newconn_init 
+0x23ca 002969 call context_new 
+0x23cb 002970 nrtn zero 
+0x23cc 002971 jam 0 ,mem_mode 
+0x23cd 002972 call calc_clke_offset 
+0x23ce 002973 branch context_save 
+:      002978 slave_dispatch:
+0x23cf 002979 bpatch patch07_4 ,mem_patch07 
+0x23d0 002980 call calc_clke 
+0x23d1 002981 call role_switch_slave 
+0x23d2 002982 rtn user 
+:      002983 slave_loop:
+0x23d3 002984 bpatch patch07_5 ,mem_patch07 
+0x23d4 002985 call check_bt_disabled 
+0x23d5 002986 call scheduler_process 
+0x23d6 002987 call slave_conn_recv_packet 
+0x23d7 002988 nbranch slave_notmatch ,match 
+0x23d8 002989 call supervision_flush 
+0x23d9 002990 call scheduler_tx_l2cap_pkt 
+0x23da 002991 call prepare_tx 
+0x23db 002992 call slave_conn_send_packet 
+0x23dc 002993 call parse_l2cap 
+0x23dd 002994 call parse_lmp 
+0x23de 002995 fetch 1 ,mem_slave_rcvcnt 
+0x23df 002996 increase 1 ,pdata 
+0x23e0 002997 store 1 ,mem_slave_rcvcnt 
+0x23e1 002998 call calc_clke_offset 
+:      002999 slave_notmatch:
+0x23e2 003000 bpatch patch07_6 ,mem_patch07 
+0x23e3 003001 call lpm_set_mult 
+0x23e4 003002 call supervision_update 
+0x23e5 003003 branch slave_disconnect ,positive 
+0x23e6 003004 call check_disconnect_timeout 
+0x23e7 003005 nbranch slave_disconnect ,user 
+0x23e8 003006 call check_attempt 
+0x23e9 003007 nbranch slave_loop ,blank 
+0x23ea 003008 rtn 
+:      003010 slave_disconnect:
+0x23eb 003011 bpatch patch07_7 ,mem_patch07 
+0x23ec 003012 jam 0 ,mem_tester_emulate 
+0x23ed 003013 jam 0 ,mem_debug_config 
+0x23ee 003014 call quit_connection 
+0x23ef 003015 set0 mark_testmode ,mark 
+0x23f0 003016 call test_enable_white 
+0x23f1 003017 fetch 1 ,mem_state 
+0x23f2 003018 rtn 
+:      003021 role_switch_slave:
+0x23f3 003022 bpatch patch08_0 ,mem_patch08 
+0x23f4 003023 call role_switch_check 
+0x23f5 003024 nrtn user 
+0x23f6 003025 copy am_addr ,temp 
+0x23f7 003026 call get_free_amaddr 
+0x23f8 003027 store 1 ,mem_fhs_am_addr 
+0x23f9 003028 copy temp ,am_addr 
+0x23fa 003029 jam param_newconnto ,mem_newconnto_counter 
+:      003030 roles_sendfhs_loop:
+0x23fb 003031 bpatch patch08_1 ,mem_patch08 
+0x23fc 003032 call rf_setup_time_master_slot 
+0x23fd 003033 force type_fhs ,type 
+0x23fe 003034 call slave_send_access 
+0x23ff 003035 deposit clkn_bt 
+0x2400 003036 store 4 ,mem_clkn_bt 
+0x2401 003037 call transmit_packet 
+0x2402 003038 call rf_setup_time_slave_slot 
+0x2403 003039 enable user3 
+0x2404 003040 call slave_receive_access 
+0x2405 003041 branch roles_got_fhs_reply ,sync 
+0x2406 003042 call shutdown_radio 
+0x2407 003043 call new_conn_timeout 
+0x2408 003044 nbranch roles_sendfhs_loop ,blank 
+0x2409 003045 rtnmark0 mark_accept_switch 
+0x240a 003046 jam lmp_slot_offset ,mem_lmo_opcode2 
+0x240b 003047 set1 mark_switch_initiated ,mark 
+0x240c 003048 rtn 
+:      003049 roles_got_fhs_reply:
+0x240d 003050 enable clknt 
+0x240e 003051 call prepare_newconn 
+0x240f 003052 call afh_clear 
+:      003053 roles_newconn_loop:
+0x2410 003054 bpatch patch08_2 ,mem_patch08 
+0x2411 003055 call master_newconn_once 
+0x2412 003056 branch roles_newconn_responded ,sync 
+0x2413 003057 call new_conn_timeout 
+0x2414 003058 nbranch roles_newconn_loop ,blank 
+0x2415 003059 disable clknt 
+0x2416 003060 deposit clke_bt 
+0x2417 003061 store 4 ,mem_next_btclk 
+0x2418 003062 rtn 
+:      003063 roles_newconn_responded:
+0x2419 003064 enable master 
+0x241a 003065 bmark0 mark_accept_switch ,roles_newconn_nolmp 
+0x241b 003066 set0 mark_accept_switch ,mark 
+0x241c 003067 jam lmp_accepted ,mem_lmo_opcode2 
+0x241d 003068 jam lmp_host_connection_req ,mem_lmi_opcode2 
+0x241e 003069 call tid_set_reply 
+:      003070 roles_newconn_nolmp:
+0x241f 003071 deposit am_addr 
+0x2420 003072 store 1 ,mem_amaddr 
+0x2421 003073 force 0 ,pdata 
+0x2422 003074 store 6 ,mem_clk_offset 
+0x2423 003075 fetch 1 ,mem_mode 
+0x2424 003076 set1 mode_master ,pdata 
+0x2425 003077 store 1 ,mem_mode 
+0x2426 003078 call supervision_flush 
+0x2427 003079 disable master 
+0x2428 003080 enable user 
+0x2429 003081 rtn 
+:      003085 init_rx_packet_flags:
+0x242a 003086 bpatch patch08_3 ,mem_patch08 
+0x242b 003087 disable match 
+0x242c 003088 set0 mark_loopback ,mark 
+0x242d 003089 set0 mark_am_addr_broadcast ,mark 
+0x242e 003090 set0 mark_longpacket ,mark 
+0x242f 003091 set0 mark_old_packet ,mark 
+0x2430 003092 fetch 1 ,mem_arq 
+0x2431 003093 set0 arqnx ,pdata 
+0x2432 003094 set1 flowx ,pdata 
+0x2433 003095 store 1 ,mem_arq 
+0x2434 003096 rtn 
+:      003098 prepare_newconn:
+0x2435 003099 bpatch patch08_4 ,mem_patch08 
+0x2436 003100 jam param_newconnto ,mem_newconnto_counter 
+0x2437 003101 jam param_newconn_arq ,mem_arq 
+0x2438 003102 fetch 2 ,mem_rx_window_init 
+0x2439 003103 store 2 ,mem_rx_window 
+0x243a 003104 deposit clkn_bt 
+0x243b 003105 store 4 ,mem_next_btclk 
+0x243c 003106 rtn clknt 
+0x243d 003107 deposit clke_bt 
+0x243e 003108 store 4 ,mem_next_btclk 
+0x243f 003109 rtn 
+:      003111 newconn_init:
+0x2440 003112 bpatch patch08_5 ,mem_patch08 
+0x2441 003113 call init_lmp_reinit 
+0x2442 003114 call new_conn_handle 
+0x2443 003115 store 1 ,mem_conn_handle 
+0x2444 003116 setarg 0 
+0x2445 003117 store 2 ,mem_l2cap_rxbuff1_len 
+0x2446 003118 setarg param_supervision_to 
+0x2447 003119 store 2 ,mem_supervision_to 
+0x2448 003120 fetch 1 ,mem_state 
+0x2449 003121 set1 state_inconn ,pdata 
+0x244a 003122 store 1 ,mem_state 
+0x244b 003123 jam 0 ,mem_op 
+0x244c 003124 jam 0 ,mem_state_map 
+0x244d 003125 jam 0 ,mem_lpm_current_mult 
+0x244e 003126 branch supervision_flush 
+:      003129 clear_linkkey:
+0x244f 003130 bpatch patch08_6 ,mem_patch08 
+0x2450 003131 force 0 ,pdata 
+0x2451 003132 store 8 ,mem_link_key 
+0x2452 003133 istore 8 ,contw 
+0x2453 003134 call clear_linkstate 
+0x2454 003135 branch context_traverse_linkkey 
+:      003137 new_conn_timeout:
+0x2455 003138 fetch 1 ,mem_newconnto_counter 
+0x2456 003139 increase -1 ,pdata 
+0x2457 003140 store 1 ,mem_newconnto_counter 
+0x2458 003141 rtn 
+:      003143 new_conn_handle:
+0x2459 003144 fetch 1 ,mem_handle_num 
+0x245a 003145 increase 1 ,pdata 
+0x245b 003146 store 1 ,mem_handle_num 
+0x245c 003147 rtn 
+:      003150 quit_connection:
+0x245d 003151 bpatch patch08_7 ,mem_patch08 
+0x245e 003152 fetch 1 ,mem_hci_cmd 
+0x245f 003153 beq hci_cmd_remote_name_req ,quit_connection_name 
+0x2460 003154 fetch 1 ,mem_lmp_to_send 
+0x2461 003155 bne lmp_name_req ,quit_connection_cont 
+:      003156 quit_connection_name:
+0x2462 003157 call cmd_check_plap 
+0x2463 003158 nbranch quit_connection_cont ,zero 
+0x2464 003159 call master_name_error 
+0x2465 003160 jam 0 ,mem_hci_cmd 
+:      003161 quit_connection_cont:
+0x2466 003162 bpatch patch09_0 ,mem_patch09 
+0x2467 003163 call app_disconn_reason_collect_bt 
+0x2468 003164 call sniff_exit 
+0x2469 003165 jam bt_evt_bb_disconnected ,mem_fifo_temp 
+0x246a 003166 call ui_ipc_send_event 
+0x246b 003167 call init_lmp_work 
+0x246c 003168 call l2cap_init_work 
+0x246d 003169 call sp_initialize 
+0x246e 003170 fetch 1 ,mem_state 
+0x246f 003171 set0 state_inconn 
+0x2470 003172 store 1 ,mem_state 
+0x2471 003173 jam 0 ,memui_reconnect_mode 
+0x2472 003175 fetch 1 ,mem_state_map 
+0x2473 003176 compare 0x0 ,pdata ,0xc0 
+0x2474 003177 branch quit_connection_not_clear_mark ,true 
+0x2475 003178 set0 mark_rxbuf_inuse ,mark 
+:      003179 quit_connection_not_clear_mark:
+0x2476 003180 fetch 1 ,mem_arq 
+0x2477 003181 bbit0 wack ,quit_connection_not_clear_tx 
+:      003182 quit_connection_not_clear_tx:
+0x2478 003183 fetch 1 ,mem_op 
+0x2479 003184 rtnbit0 op_txl2cap 
+0x247a 003185 set0 mark_tx_l2cap ,mark 
+0x247b 003186 rtn 
+:      003188 slave_newconn_once:
+0x247c 003189 bpatch patch09_1 ,mem_patch09 
+0x247d 003190 fetch 1 ,extm_newconn_am_addr 
+0x247e 003191 rtn blank 
+0x247f 003192 icopy am_addr 
+0x2480 003193 call slave_conn_recv_packet 
+0x2481 003194 nrtn match 
+0x2482 003195 force type_null ,type 
+0x2483 003196 call slave_conn_send_packet 
+0x2484 003197 deposit am_addr 
+0x2485 003198 store 1 ,mem_amaddr 
+0x2486 003199 force 0 ,pdata 
+0x2487 003200 store 1 ,extm_newconn_am_addr 
+0x2488 003201 rtn 
+:      003207 prepare_tx:
+0x2489 003208 bpatch patch09_2 ,mem_patch09 
+0x248a 003209 fetch 1 ,mem_state 
+0x248b 003210 bbit0 state_insco ,prepare_tx_not_sco 
+0x248c 003211 force type_hv3 ,type 
+0x248d 003212 bmark0 mark_esco ,prepare_tx_not_esco 
+0x248e 003213 call check_esco_amaddr 
+0x248f 003214 nbranch prepare_tx_not_sco ,true 
+0x2490 003215 branch prepare_tx_not_sco ,attempt 
+0x2491 003216 call set_wait_ack 
+0x2492 003217 setarg 2 
+0x2493 003218 store 2 ,mem_retransmission_cnt 
+0x2494 003219 rtn 
+:      003220 prepare_tx_not_esco:
+0x2495 003221 nrtn attempt 
+:      003222 prepare_tx_not_sco:
+0x2496 003223 bpatch patch09_3 ,mem_patch09 
+0x2497 003224 call context_check_all_wack 
+0x2498 003225 nbranch prepare_tx_no_retransmit ,zero 
+0x2499 003226 fetch 1 ,mem_arq 
+0x249a 003227 bbit0 wack ,prepare_tx_pollnull 
+:      003228 prepare_tx_retransmit:
+0x249b 003229 bmark1 mark_loopback ,prepare_tx_loopback 
+0x249c 003230 fetch 1 ,mem_debug_config 
+0x249d 003231 bbit1 debug_tx_pattern ,prepare_tx_txpat 
+0x249e 003232 fetch 2 ,mem_retransmission_cnt 
+0x249f 003233 increase -1 ,pdata 
+0x24a0 003234 store 2 ,mem_retransmission_cnt 
+0x24a1 003235 branch prepare_tx_nomore_retransmit ,blank 
+0x24a2 003236 fetch 1 ,mem_last_type 
+0x24a3 003237 iforce type 
+0x24a4 003238 rtn 
+:      003240 prepare_tx_nomore_retransmit:
+0x24a5 003241 bpatch patch09_4 ,mem_patch09 
+0x24a6 003242 call clear_got_tx 
+:      003243 prepare_tx_no_retransmit:
+0x24a7 003244 call check_esco_amaddr 
+0x24a8 003245 branch prepare_tx_pollnull ,true 
+0x24a9 003246 call send_lmp 
+0x24aa 003247 branch prepare_tx_sendlmp ,user 
+0x24ab 003248 fetch 1 ,mem_op 
+0x24ac 003249 bbit1 op_txl2cap ,prepare_tx_sendl2cap 
+0x24ad 003250 bmark1 mark_loopback ,prepare_tx_loopback 
+0x24ae 003251 fetch 1 ,mem_debug_config 
+0x24af 003252 bbit1 debug_tx_pattern ,prepare_tx_txpat 
+:      003253 prepare_tx_pollnull:
+0x24b0 003254 force type_poll ,type 
+0x24b1 003255 rtn master 
+0x24b2 003256 force type_null ,type 
+0x24b3 003257 rtn 
+:      003258 prepare_tx_loopback:
+0x24b4 003259 bpatch patch09_5 ,mem_patch09 
+0x24b5 003260 fetch 1 ,mem_rx_type 
+0x24b6 003261 iforce type 
+0x24b7 003262 rtnne 1 
+0x24b8 003263 force type_null ,type 
+0x24b9 003264 rtn 
+:      003265 prepare_tx_txpat:
+0x24ba 003266 fetch 1 ,test_mode_packet_type 
+0x24bb 003267 and pdata ,0xf ,type 
+0x24bc 003268 set1 mark_loopback ,mark 
+0x24bd 003269 rtn 
+:      003270 prepare_tx_sendlmp:
+0x24be 003271 force type_lmp ,type 
+0x24bf 003272 branch set_wait_ack 
+:      003273 prepare_tx_sendl2cap:
+0x24c0 003274 call tx_l2cap_type 
+:      003276 set_wait_ack:
+0x24c1 003277 bpatch patch09_6 ,mem_patch09 
+0x24c2 003278 fetcht 1 ,mem_arq 
+0x24c3 003279 set1 wack ,temp 
+0x24c4 003280 storet 1 ,mem_arq 
+0x24c5 003281 deposit type 
+0x24c6 003282 store 1 ,mem_last_type 
+0x24c7 003283 setarg 0xffff 
+0x24c8 003284 store 2 ,mem_retransmission_cnt 
+0x24c9 003285 rtn 
+:      003287 tx_l2cap_type:
+0x24ca 003288 bpatch patch09_7 ,mem_patch09 
+0x24cb 003289 fetch 1 ,mem_state_map 
+0x24cc 003290 isolate1 smap_edr ,pdata 
+0x24cd 003291 fetch 2 ,mem_tx_len 
+0x24ce 003292 branch tx_l2cap_type_edr ,true 
+0x24cf 003293 force type_dm1 ,type 
+0x24d0 003294 sub pdata ,17 ,null 
+0x24d1 003295 rtn positive 
+0x24d2 003296 force type_dh1 ,type 
+0x24d3 003297 sub pdata ,27 ,null 
+0x24d4 003298 rtn positive 
+0x24d5 003299 force type_dm3 ,type 
+0x24d6 003300 sub pdata ,121 ,null 
+0x24d7 003301 rtn positive 
+0x24d8 003302 force type_dh3 ,type 
+0x24d9 003303 sub pdata ,183 ,null 
+0x24da 003304 rtn positive 
+0x24db 003305 force type_dm5 ,type 
+0x24dc 003306 sub pdata ,224 ,null 
+0x24dd 003307 rtn positive 
+0x24de 003308 force type_dh5 ,type 
+0x24df 003309 rtn 
+:      003310 tx_l2cap_type_edr:
+0x24e0 003311 force type_dm1 ,type 
+0x24e1 003312 sub pdata ,17 ,null 
+0x24e2 003313 rtn positive 
+0x24e3 003314 force type_dh1 ,type 
+0x24e4 003315 sub pdata ,54 ,null 
+0x24e5 003316 rtn positive 
+0x24e6 003317 force type_dm3 ,type 
+0x24e7 003318 arg 367 ,temp 
+0x24e8 003319 isub temp ,null 
+0x24e9 003320 nrtn positive 
+0x24ea 003321 force type_dm5 ,type 
+0x24eb 003322 arg 679 ,temp 
+0x24ec 003323 isub temp ,null 
+0x24ed 003324 nrtn positive 
+0x24ee 003325 force type_dh5 ,type 
+0x24ef 003326 rtn 
+:      003335 slave_receive_master_slot:
+0x24f0 003336 fetch 1 ,mem_state 
+0x24f1 003337 bbit0 state_insniff ,slave_receive_notsniff 
+0x24f2 003338 fetch 2 ,mem_tsniff 
+0x24f3 003339 branch slave_receive_notsniff ,blank 
+0x24f4 003340 nbranch slave_receive_sniff ,attempt 
+:      003341 slave_receive_notsniff:
+0x24f5 003342 call rf_setup_time_master_slot 
+:      003343 slave_receive_access:
+0x24f6 003344 add clke_bt ,1 ,bt_clk 
+:      003345 slave_receive_sniff:
+0x24f7 003346 enable swfine 
+0x24f8 003347 fetch 2 ,mem_rx_window 
+0x24f9 003348 rshift pdata ,pdata 
+0x24fa 003349 arg param_pll_setup ,temp 
+0x24fb 003350 iadd temp ,pdata 
+0x24fc 003351 call ahead_window 
+0x24fd 003352 call fetch_extm_bt_adr 
+0x24fe 003353 force 0x03 ,freq_mode 
+0x24ff 003354 call rx_radio_freq 
+0x2500 003355 call init_rx_packet_flags 
+0x2501 003356 call prep_crypt 
+0x2502 003357 bpatch patch0a_0 ,mem_patch0a 
+0x2503 003358 fetch 2 ,mem_rx_window 
+0x2504 003359 rshift pdata ,pdata 
+0x2505 003360 call ahead_window 
+0x2506 003361 call start_receiver 
+0x2507 003362 enable decode_fec0 
+0x2508 003363 fetch 2 ,mem_rx_window 
+0x2509 003364 arg param_clke_cal ,temp 
+0x250a 003365 iadd temp ,stop_watch 
+0x250b 003366 correlate null ,timeout 
+0x250c 003367 copy clke ,temp 
+0x250d 003368 storet 6 ,mem_sync_clke 
+0x250e 003369 disable decode_fec0 
+0x250f 003370 nrtn sync 
+0x2510 003371 arg param_clke_cal ,clke_rt 
+0x2511 003372 copy bt_clk ,clke_bt 
+0x2512 003373 branch lpm_adjust_clk ,wake 
+0x2513 003374 rtn 
+:      003377 slave_conn_recv_packet:
+0x2514 003378 bpatch patch0a_1 ,mem_patch0a 
+0x2515 003379 call slave_receive_master_slot 
+0x2516 003380 nbranch shutdown_radio ,sync 
+0x2517 003381 call save_rssi 
+0x2518 003382 bmark0 mark_testmode ,receive_packet 
+0x2519 003383 fetch 2 ,mem_tst_pktcnt_sync 
+0x251a 003384 increase 1 ,pdata 
+0x251b 003385 store 2 ,mem_tst_pktcnt_sync 
+:      003386 receive_packet:
+0x251c 003387 rshift bt_clk ,temp 
+0x251d 003388 or temp ,0x40 ,white_init 
+:      003389 receive_packet_whitened:
+0x251e 003390 bpatch patch0a_2 ,mem_patch0a 
+0x251f 003391 enable enable_white 
+0x2520 003392 enable enable_hec 
+0x2521 003393 enable decode_fec1 
+0x2522 003394 parse demod ,bucket ,3 
+0x2523 003395 rshift8 pwindow ,pdata 
+0x2524 003396 store 1 ,mem_temp_am_addr 
+0x2525 003397 parse demod ,bucket ,4 
+0x2526 003398 inject bucket ,7 
+0x2527 003399 copy pwindow ,pdata 
+0x2528 003400 store 1 ,mem_rx_type 
+0x2529 003401 parse demod ,bucket ,3 
+0x252a 003402 rshift8 pwindow ,pdata 
+0x252b 003403 store 1 ,mem_temp_arq 
+0x252c 003404 fetch 1 ,mem_rx_type 
+0x252d 003405 sub pdata ,3 ,null 
+0x252e 003406 branch receive_packet_noedr ,positive 
+0x252f 003407 beq 7 ,receive_packet_noedr 
+0x2530 003408 fetch 1 ,mem_state_map 
+0x2531 003409 isolate1 smap_edr ,pdata 
+0x2532 003410 setflag true ,psk ,radio_ctrl 
+:      003411 receive_packet_noedr:
+0x2533 003412 bpatch patch0a_3 ,mem_patch0a 
+0x2534 003413 parse demod ,bucket ,8 
+0x2535 003414 disable decode_fec1 
+0x2536 003415 disable enable_hec 
+0x2537 003416 branch error_header ,crc_failed 
+0x2538 003417 bmark0 mark_testmode ,receive_packet_amchk 
+0x2539 003418 fetch 2 ,mem_tst_pktcnt_hec 
+0x253a 003419 increase 1 ,pdata 
+0x253b 003420 store 2 ,mem_tst_pktcnt_hec 
+:      003421 receive_packet_amchk:
+0x253c 003422 bpatch patch0a_4 ,mem_patch0a 
+0x253d 003423 fetch 1 ,mem_temp_am_addr 
+0x253e 003424 compare 0 ,pdata ,0x07 
+0x253f 003425 setflag true ,mark_am_addr_broadcast ,mark 
+0x2540 003426 branch am_addr_ok ,true 
+0x2541 003427 icompare 0x07 ,am_addr 
+0x2542 003428 branch am_addr_match ,true 
+0x2543 003429 bmark0 mark_esco ,end_of_packet 
+0x2544 003430 fetcht 1 ,mem_saved_amaddr 
+0x2545 003431 icompare 0x7 ,temp 
+0x2546 003432 nbranch end_of_packet ,true 
+0x2547 003433 fetch 1 ,mem_arq 
+0x2548 003434 set0 arqnx ,pdata 
+0x2549 003435 set1 flowx ,pdata 
+0x254a 003436 store 1 ,mem_arq 
+:      003437 am_addr_match:
+0x254b 003438 enable match 
+:      003439 am_addr_ok:
+0x254c 003440 bpatch patch0a_5 ,mem_patch0a 
+0x254d 003441 fetch 1 ,mem_rx_type 
+0x254e 003442 icopy type 
+0x254f 003443 bmark1 mark_am_addr_broadcast ,arqn_bypass 
+0x2550 003444 fetcht 1 ,mem_temp_arq 
+0x2551 003445 fetch 1 ,mem_arq 
+0x2552 003446 set0 flow ,pdata 
+0x2553 003447 isolate1 flow ,temp 
+0x2554 003448 setflag true ,flow ,pdata 
+0x2555 003449 isolate1 arqn ,temp 
+0x2556 003450 setflag true ,arqn ,pdata 
+0x2557 003451 store 1 ,mem_arq 
+0x2558 003452 isolate0 arqn ,temp 
+0x2559 003453 branch arqn_bypass ,true 
+0x255a 003454 call clear_got_tx 
+:      003455 arqn_bypass:
+0x255b 003456 bpatch patch0a_6 ,mem_patch0a 
+0x255c 003457 arg 0 ,temp 
+0x255d 003458 call reserve_slot 
+0x255e 003459 and type ,0xf ,pdata 
+0x255f 003460 beq type_poll ,process_poll 
+0x2560 003461 beq type_null ,end_of_packet 
+0x2561 003462 beq type_fhs ,process_fhs 
+0x2562 003463 fetcht 1 ,mem_temp_arq 
+0x2563 003464 fetch 1 ,mem_arq 
+0x2564 003465 icompare 0x04 ,temp 
+0x2565 003466 nbranch rx_type_dispatch ,true 
+0x2566 003467 bmark0 mark_am_addr_broadcast ,failed_seqn 
+0x2567 003468 bbit0 bcast1 ,rx_type_dispatch 
+:      003469 failed_seqn:
+0x2568 003470 set1 mark_old_packet ,mark 
+:      003471 rx_type_dispatch:
+0x2569 003472 bpatch patch0a_7 ,mem_patch0a 
+0x256a 003473 deposit type 
+0x256b 003474 beq type_dm1 ,process_dm1 
+0x256c 003475 beq type_dh1 ,process_dh1 
+0x256d 003476 beq type_hv3 ,process_hev 
+0x256e 003477 beq type_3dh1 ,process_3dh1 
+0x256f 003478 arg 4 ,temp 
+0x2570 003479 call reserve_slot 
+0x2571 003480 beq type_dm3 ,process_dm3 
+0x2572 003481 beq type_dh3 ,process_dh3 
+0x2573 003482 arg 8 ,temp 
+0x2574 003483 call reserve_slot 
+0x2575 003484 beq type_dm5 ,process_dm5 
+0x2576 003485 beq type_dh5 ,process_dh5 
+0x2577 003486 rtn 
+:      003489 process_hev:
+0x2578 003490 bpatch patch0b_0 ,mem_patch0b 
+0x2579 003491 enable decode_fec0 
+0x257a 003492 enable enable_crc 
+0x257b 003493 enable encrypt 
+0x257c 003494 arg mem_sco_ibuf ,contw 
+0x257d 003495 force 30 ,loopcnt 
+:      003496 process_hev_loop:
+0x257e 003497 parse demod ,bucket ,8 
+0x257f 003498 rshift3 pwindow ,pdata 
+0x2580 003499 istore 1 ,contw 
+0x2581 003500 loop process_hev_loop 
+0x2582 003501 bmark0 mark_esco ,end_of_packet 
+0x2583 003502 parse demod ,bucket ,16 
+0x2584 003503 nsetflag crc_failed ,mark_esco_rxok ,mark 
+0x2585 003504 branch error_payload ,crc_failed 
+0x2586 003505 branch ack_payload 
+:      003508 process_poll:
+0x2587 003509 branch end_of_packet 
+:      003511 process_dm3:
+:      003512 process_dm5:
+0x2588 003513 set1 mark_longpacket ,mark 
+:      003514 process_dm1:
+0x2589 003515 enable decode_fec2 
+0x258a 003516 branch process_dmh 
+:      003518 process_dh3:
+:      003519 process_dh5:
+0x258b 003520 set1 mark_longpacket ,mark 
+:      003521 process_3dh1:
+0x258c 003522 set1 psk3m ,radio_ctrl 
+:      003523 process_dh1:
+0x258d 003524 enable decode_fec0 
+:      003525 process_dmh:
+0x258e 003526 bpatch patch0b_1 ,mem_patch0b 
+0x258f 003527 bmark1 mark_rxbuf_inuse ,end_of_packet 
+0x2590 003528 isolate0 psk ,radio_ctrl 
+0x2591 003529 branch process_dmh_noedr ,true 
+0x2592 003530 disable enable_white 
+0x2593 003531 enable decode_fec0 
+0x2594 003532 disable decode_fec2 
+0x2595 003533 add clkn_bt ,2 ,timeup 
+0x2596 003534 correlate clkn_bt ,meet 
+0x2597 003535 nbranch error_payload ,sync 
+0x2598 003536 set1 mark_longpacket ,mark 
+0x2599 003537 enable enable_white 
+:      003538 process_dmh_noedr:
+0x259a 003539 bpatch patch0b_2 ,mem_patch0b 
+0x259b 003540 enable encrypt 
+0x259c 003541 enable enable_crc 
+0x259d 003542 parse demod ,bucket ,3 
+0x259e 003543 rshift8 pwindow ,pdata 
+0x259f 003544 store 1 ,mem_lch_code 
+0x25a0 003545 parse demod ,bucket ,5 
+0x25a1 003546 bmark1 mark_longpacket ,process_dmh_long 
+0x25a2 003547 rshift3 pwindow ,loopcnt 
+0x25a3 003548 rshift3 loopcnt ,loopcnt 
+0x25a4 003549 branch process_dmh_common 
+:      003550 process_dmh_long:
+0x25a5 003551 parse demod ,bucket ,5 
+0x25a6 003552 rshift pwindow ,loopcnt 
+0x25a7 003553 parse demod ,bucket ,3 
+:      003554 process_dmh_common:
+0x25a8 003555 bpatch patch0b_3 ,mem_patch0b 
+0x25a9 003556 deposit loopcnt 
+0x25aa 003557 store 2 ,mem_len 
+0x25ab 003558 branch process_dmh_data_end ,blank 
+0x25ac 003559 isub mask3ff ,null 
+0x25ad 003560 branch error_payload ,positive 
+0x25ae 003561 bpatch patch0b_4 ,mem_patch0b 
+0x25af 003562 set0 mark_fhs_eir ,mark 
+0x25b0 003563 fetch 1 ,mem_lch_code 
+0x25b1 003564 and_into 0x03 ,pdata 
+0x25b2 003565 arg mem_rxbuf ,contw 
+0x25b3 003566 beq llid_lmp ,process_lmp 
+0x25b4 003567 bmark1 mark_testmode ,process_dmh_data 
+0x25b5 003569 fetch 1 ,mem_lch_code 
+0x25b6 003570 and_into 0x03 ,pdata 
+0x25b7 003571 beq llid_l2cap_start ,process_dmh_data_l2cap_start_pkt 
+0x25b8 003572 beq llid_l2cap_cont ,process_dmh_data_l2cap_continue_pkt 
+0x25b9 003573 branch error_payload 
+:      003575 process_lmp:
+0x25ba 003576 fetch 2 ,mem_len 
+0x25bb 003577 sub pdata ,0x70 ,null 
+0x25bc 003578 nbranch error_payload ,positive 
+0x25bd 003579 bmark1 mark_old_packet ,ack_payload 
+0x25be 003580 branch process_dmh_data 
+:      003583 process_dmh_data_l2cap_start_pkt:
+0x25bf 003584 bpatch patch0b_5 ,mem_patch0b 
+0x25c0 003585 bmark1 mark_old_packet ,ack_payload 
+0x25c1 003586 fetch 2 ,mem_len 
+0x25c2 003587 arg 0x2e0 ,temp 
+0x25c3 003588 isub temp ,null 
+0x25c4 003589 branch error_payload ,positive 
+0x25c5 003590 fetch 1 ,mem_l2cap_rxbuff_inuse 
+0x25c6 003591 bbit0 l2cap_inuse_buff1 ,process_dmh_data_into_buff1 
+0x25c7 003592 bbit0 l2cap_inuse_buff2 ,process_dmh_data_into_buff2 
+0x25c8 003593 branch end_of_packet 
+:      003594 process_dmh_data_into_buff1:
+0x25c9 003595 jam 1 ,mem_l2cap_rxbuff_new 
+0x25ca 003596 fetch 2 ,mem_l2cap_rxbuff1_len 
+0x25cb 003597 bne 0 ,end_of_packet 
+0x25cc 003598 arg mem_l2cap_rxbuff1 ,contw 
+0x25cd 003599 branch process_dmh_data 
+:      003600 process_dmh_data_into_buff2:
+0x25ce 003601 jam 2 ,mem_l2cap_rxbuff_new 
+0x25cf 003602 fetch 2 ,mem_l2cap_rxbuff2_len 
+0x25d0 003603 bne 0 ,end_of_packet 
+0x25d1 003604 arg mem_l2cap_rxbuff2 ,contw 
+0x25d2 003605 branch process_dmh_data 
+:      003607 process_dmh_data_l2cap_continue_pkt:
+0x25d3 003608 bpatch patch0b_6 ,mem_patch0b 
+0x25d4 003609 bmark1 mark_old_packet ,ack_payload 
+0x25d5 003610 fetch 2 ,mem_len 
+0x25d6 003611 arg 0x2e0 ,temp 
+0x25d7 003612 isub temp ,null 
+0x25d8 003613 branch error_payload ,positive 
+0x25d9 003614 fetch 1 ,mem_l2cap_rxbuff_new 
+0x25da 003615 beq 1 ,process_dmh_data_l2cap_continue_pkt1 
+0x25db 003616 beq 2 ,process_dmh_data_l2cap_continue_pkt2 
+0x25dc 003617 branch end_of_packet 
+:      003618 process_dmh_data_l2cap_continue_pkt1:
+0x25dd 003619 arg mem_l2cap_rxbuff1 ,contw 
+0x25de 003620 fetch 2 ,mem_l2cap_rxbuff1_len 
+0x25df 003621 iadd contw ,contw 
+0x25e0 003622 branch process_dmh_data 
+:      003623 process_dmh_data_l2cap_continue_pkt2:
+0x25e1 003624 arg mem_l2cap_rxbuff2 ,contw 
+0x25e2 003625 fetch 2 ,mem_l2cap_rxbuff2_len 
+0x25e3 003626 iadd contw ,contw 
+:      003627 process_dmh_data:
+0x25e4 003628 parse demod ,bucket ,8 
+0x25e5 003629 rshift3 pwindow ,pdata 
+0x25e6 003630 istore 1 ,contw 
+0x25e7 003631 loop process_dmh_data 
+:      003632 process_dmh_data_end:
+0x25e8 003633 bpatch patch0b_7 ,mem_patch0b 
+0x25e9 003634 parse demod ,bucket ,16 
+0x25ea 003635 branch error_payload_crc ,crc_failed 
+0x25eb 003636 fetch 1 ,mem_l2cap_flow_ctrl_flag 
+0x25ec 003637 beq l2cap_flow_ctrl_enable ,end_of_packet 
+0x25ed 003638 bmark1 mark_testmode ,process_dmh_cont 
+0x25ee 003639 bmark1 mark_old_packet ,redundant_payload 
+0x25ef 003640 fetch 1 ,mem_lch_code 
+0x25f0 003641 compare 3 ,pdata ,3 
+0x25f1 003642 branch process_dmh_cont ,true 
+0x25f2 003643 fetch 2 ,mem_len 
+0x25f3 003644 branch process_dmh_cont ,blank 
+0x25f4 003645 bpatch patch0c_0 ,mem_patch0c 
+0x25f5 003646 fetch 1 ,mem_l2cap_rxbuff_new 
+0x25f6 003647 beq 1 ,process_l2cap_pass_crc_buff1 
+0x25f7 003648 beq 2 ,process_l2cap_pass_crc_buff2 
+0x25f8 003649 branch assert 
+:      003650 process_l2cap_pass_crc_buff1:
+0x25f9 003651 fetch 2 ,mem_l2cap_rxbuff1_len 
+0x25fa 003652 fetcht 2 ,mem_len 
+0x25fb 003653 iadd temp ,pdata 
+0x25fc 003654 store 2 ,mem_l2cap_rxbuff1_len 
+0x25fd 003655 beq 0 ,assert 
+0x25fe 003656 fetcht 2 ,mem_l2cap_rxbuff1 
+0x25ff 003657 increase 4 ,temp 
+0x2600 003658 isub temp ,null 
+0x2601 003659 call l2cap_buff1_inuse ,zero 
+0x2602 003660 branch process_dmh_cont 
+:      003661 process_l2cap_pass_crc_buff2:
+0x2603 003662 fetch 2 ,mem_l2cap_rxbuff2_len 
+0x2604 003663 fetcht 2 ,mem_len 
+0x2605 003664 iadd temp ,pdata 
+0x2606 003665 store 2 ,mem_l2cap_rxbuff2_len 
+0x2607 003666 beq 0 ,assert 
+0x2608 003667 fetcht 2 ,mem_l2cap_rxbuff2 
+0x2609 003668 add temp ,4 ,temp 
+0x260a 003669 isub temp ,null 
+0x260b 003670 call l2cap_buff2_inuse ,zero 
+0x260c 003671 branch process_dmh_cont 
+:      003672 process_dmh_cont:
+0x260d 003673 bpatch patch0c_1 ,mem_patch0c 
+0x260e 003674 fetcht 1 ,mem_state_map 
+0x260f 003675 fetch 1 ,mem_lch_code 
+0x2610 003676 compare 3 ,pdata ,0x03 
+0x2611 003677 setflag true ,smap_rxlmp ,temp 
+0x2612 003678 nsetflag true ,smap_rxl2cap ,temp 
+0x2613 003679 storet 1 ,mem_state_map 
+0x2614 003680 nbranch process_dmh_cont_rxbuf_not_use ,true 
+0x2615 003681 set1 mark_rxbuf_inuse ,mark 
+:      003682 process_dmh_cont_rxbuf_not_use:
+0x2616 003683 bmark0 mark_testmode ,ack_payload 
+0x2617 003684 isolate1 smap_rxlmp ,temp 
+0x2618 003685 branch ack_payload ,true 
+0x2619 003686 fetch 2 ,mem_tst_pktcnt_crc 
+0x261a 003687 increase 1 ,pdata 
+0x261b 003688 store 2 ,mem_tst_pktcnt_crc 
+0x261c 003689 set1 mark_loopback ,mark 
+0x261d 003690 set0 smap_rxl2cap ,temp 
+0x261e 003691 set0 mark_rxbuf_inuse ,mark 
+0x261f 003692 storet 1 ,mem_state_map 
+:      003693 ack_payload:
+0x2620 003694 bpatch patch0c_2 ,mem_patch0c 
+0x2621 003695 fetcht 1 ,mem_temp_arq 
+0x2622 003696 fetch 1 ,mem_arq 
+0x2623 003697 set1 arqnx ,pdata 
+0x2624 003698 isolate1 seqn ,temp 
+0x2625 003699 setflag true ,seqn ,pdata 
+0x2626 003700 isolate1 mark_am_addr_broadcast ,mark 
+0x2627 003701 setflag true ,bcast1 ,pdata 
+0x2628 003702 store 1 ,mem_arq 
+0x2629 003703 fetch 2 ,mem_len 
+0x262a 003704 nbranch end_of_packet ,blank 
+0x262b 003705 fetch 1 ,mem_state_map 
+0x262c 003706 set0 smap_rxl2cap ,pdata 
+0x262d 003707 store 1 ,mem_state_map 
+0x262e 003708 fetch 1 ,mem_lch_code 
+0x262f 003709 compare 0x01 ,pdata ,0x07 
+0x2630 003711 branch end_of_packet 
+:      003713 error_header:
+0x2631 003714 bpatch patch0c_3 ,mem_patch0c 
+0x2632 003715 disable match 
+0x2633 003716 fetch 2 ,mem_rx_hec_err 
+0x2634 003717 increase 1 ,pdata 
+0x2635 003718 store 2 ,mem_rx_hec_err 
+0x2636 003719 branch end_of_packet 
+:      003720 error_payload_crc:
+0x2637 003721 fetch 2 ,mem_rx_crc_err 
+0x2638 003722 increase 1 ,pdata 
+0x2639 003723 store 2 ,mem_rx_crc_err 
+0x263a 003724 call discard_pkt 
+0x263b 003725 bmark0 mark_testmode ,error_payload 
+0x263c 003726 set1 mark_loopback ,mark 
+:      003727 error_payload:
+0x263d 003728 branch end_of_packet 
+:      003730 discard_pkt:
+0x263e 003731 bpatch patch0c_4 ,mem_patch0c 
+0x263f 003732 fetch 1 ,mem_lch_code 
+0x2640 003733 compare 3 ,pdata ,0x03 
+0x2641 003734 nbranch discard_pkt_l2cap ,true 
+:      003735 discard_pkt_lmp:
+0x2642 003736 fetcht 1 ,mem_state_map 
+0x2643 003737 set0 smap_rxlmp ,temp 
+0x2644 003738 storet 1 ,mem_state_map 
+0x2645 003739 rtn 
+:      003740 discard_pkt_l2cap:
+0x2646 003743 fetcht 1 ,mem_state_map 
+0x2647 003744 set0 smap_rxl2cap ,temp 
+0x2648 003745 storet 1 ,mem_state_map 
+0x2649 003746 branch h4_send_acl_trigger_clear 
+:      003748 redundant_payload:
+0x264a 003749 fetch 1 ,mem_arq 
+0x264b 003750 set1 arqnx ,pdata 
+0x264c 003751 store 1 ,mem_arq 
+:      003752 end_of_packet:
+0x264d 003753 bpatch patch0c_5 ,mem_patch0c 
+0x264e 003754 disable encode_fec0 
+0x264f 003755 disable encode_fec2 
+0x2650 003756 disable decode_fec0 
+0x2651 003757 disable decode_fec2 
+0x2652 003758 disable enable_crc 
+0x2653 003759 disable encrypt 
+0x2654 003760 disable enable_white 
+0x2655 003761 branch shutdown_radio ,is_rx 
+0x2656 003762 until null ,tx_clear 
+0x2657 003763 nop 100 
+0x2658 003764 branch shutdown_radio 
+:      003766 process_fhs:
+0x2659 003767 bpatch patch0c_6 ,mem_patch0c 
+0x265a 003768 enable enable_crc 
+0x265b 003769 enable decode_fec2 
+0x265c 003770 parse demod ,bucket ,72 
+0x265d 003771 isolate1 58 ,pdata 
+0x265e 003772 setflag true ,mark_fhs_eir ,mark 
+0x265f 003773 copy bt_adr ,temp 
+0x2660 003774 ialigned bt_adr 
+0x2661 003775 ialigned fhs0 
+0x2662 003776 pulse recalc 
+0x2663 003777 setsect 2 ,0xfffff 
+0x2664 003778 setsect 3 ,0x0ffff 
+0x2665 003779 nop 32 
+0x2666 003780 iverify fhs_parity 
+0x2667 003781 deposit lap 
+0x2668 003782 store 3 ,extm_lap 
+0x2669 003783 deposit uap 
+0x266a 003784 store 1 ,extm_uap 
+0x266b 003785 copy temp ,bt_adr 
+0x266c 003786 branch fhs_parity_ok ,true 
+0x266d 003787 branch error_payload 
+:      003788 fhs_parity_ok:
+0x266e 003789 bpatch patch0c_7 ,mem_patch0c 
+0x266f 003790 parse demod ,bucket ,72 
+0x2670 003791 ialigned fhs1 
+0x2671 003792 ialigned am_addr 
+0x2672 003793 ialigned nap 
+0x2673 003794 ialigned regb 
+0x2674 003795 force 0 ,pdata 
+0x2675 003796 parse demod ,bucket ,16 
+0x2676 003797 branch error_payload ,crc_failed 
+0x2677 003798 setarg 0x0ffffffc 
+0x2678 003799 iand regb ,pdata 
+0x2679 003800 store 4 ,mem_clke_bt 
+0x267a 003801 deposit fhs_class 
+0x267b 003802 store 3 ,extm_class 
+0x267c 003803 deposit fhs_misc 
+0x267d 003804 store 1 ,extm_fhs_misc 
+0x267e 003805 deposit am_addr 
+0x267f 003806 store 1 ,extm_newconn_am_addr 
+0x2680 003807 deposit nap 
+0x2681 003808 store 2 ,extm_nap 
+0x2682 003809 deposit bt_clk 
+0x2683 003810 inject rxf ,32 
+0x2684 003811 compare type_fhs ,type ,0x0f 
+0x2685 003812 setflag true ,mark_fhs_already_good ,mark 
+0x2686 003813 branch end_of_packet 
+:      003815 clear_got_tx:
+0x2687 003816 bpatch patch0d_0 ,mem_patch0d 
+0x2688 003817 fetch 1 ,mem_arq 
+0x2689 003818 rtnbit0 wack 
+0x268a 003819 set0 wack ,pdata 
+0x268b 003820 setflip seqnx ,pdata 
+0x268c 003821 store 1 ,mem_arq 
+0x268d 003822 fetch 1 ,mem_last_type 
+0x268e 003823 beq type_lmp ,clear_got_txlmp 
+0x268f 003824 rtneq type_hv3 
+0x2690 003825 fetch 1 ,mem_op 
+0x2691 003826 rtnbit0 op_txl2cap ,pdata 
+0x2692 003827 set0 op_txl2cap ,pdata 
+0x2693 003828 set1 op_pkt_comp ,pdata 
+0x2694 003829 store 1 ,mem_op 
+0x2695 003830 set0 mark_tx_l2cap ,mark 
+0x2696 003831 fetch 2 ,mem_l2cap_tx_multi_offset 
+0x2697 003832 nrtn blank 
+0x2698 003833 fetch 1 ,mem_op 
+0x2699 003834 set0 op_pkt_comp ,pdata 
+0x269a 003835 store 1 ,mem_op 
+0x269b 003836 branch l2cap_malloc_free 
+:      003838 clear_got_txlmp:
+0x269c 003839 bpatch patch0d_1 ,mem_patch0d 
+0x269d 003840 fetch 1 ,mem_lmo_header_opcode 
+0x269e 003841 rshift pdata ,pdata 
+0x269f 003842 beq lmp_start_encryption_req ,start_encryption 
+0x26a0 003843 beq lmp_stop_encryption_req ,stop_encryption 
+0x26a1 003844 beq lmp_unsniff_req ,sniff_exit 
+0x26a2 003845 beq lmp_escape ,clear_lmp_escape 
+0x26a3 003846 rtnne lmp_accepted 
+0x26a4 003847 fetch 1 ,mem_lmo_payload 
+0x26a5 003848 beq lmp_sco_link_req ,sco_link_req_by_slave 
+0x26a6 003849 beq lmp_start_encryption_req ,clear_send_setup_complete 
+0x26a7 003850 rtn 
+:      003852 clear_lmp_escape:
+0x26a8 003853 fetch 1 ,mem_lmo_payload 
+0x26a9 003854 set1 7 ,pdata 
+0x26aa 003855 rtn 
+:      003856 clear_send_setup_complete:
+0x26ab 003857 rtn master 
+0x26ac 003858 fetch 1 ,mem_state 
+0x26ad 003859 rtnbit1 state_conn_comp 
+0x26ae 003860 jam lmp_setup_complete ,mem_lmo_opcode2 
+0x26af 003861 rtn 
+:      003864 sco_link_req_by_slave:
+0x26b0 003865 rtn master 
+0x26b1 003866 fetch 1 ,mem_mode 
+0x26b2 003867 isolate1 send_sco_when_slave ,pdata 
+0x26b3 003868 branch clean_mem_mode ,true 
+0x26b4 003870 rtn 
+:      003871 clean_mem_mode:
+0x26b5 003872 set0 send_sco_when_slave ,pdata 
+0x26b6 003873 store 1 ,mem_mode 
+0x26b7 003874 rtn 
+:      003876 start_encryption:
+0x26b8 003877 bpatch patch0d_2 ,mem_patch0d 
+0x26b9 003878 fetch 1 ,mem_state_map 
+0x26ba 003879 set1 smap_encryption ,pdata 
+0x26bb 003880 store 1 ,mem_state_map 
+0x26bc 003881 jam 1 ,core_encrypt 
+0x26bd 003882 fetch 1 ,mem_state 
+0x26be 003883 isolate1 state_conn_comp ,pdata 
+0x26bf 003884 rtn 
+:      003886 stop_encryption:
+0x26c0 003887 bpatch patch0d_3 ,mem_patch0d 
+0x26c1 003888 fetch 1 ,mem_state_map 
+0x26c2 003889 set0 smap_encryption ,pdata 
+0x26c3 003890 store 1 ,mem_state_map 
+0x26c4 003891 jam 0 ,core_encrypt 
+0x26c5 003892 rtn 
+:      003895 sniff_init:
+0x26c6 003896 bpatch patch0d_4 ,mem_patch0d 
+0x26c7 003897 copy clkn_bt ,pdata 
+0x26c8 003898 store 4 ,mem_lpm_delay_after_sniff 
+0x26c9 003899 add clkn_bt ,3 ,rega 
+0x26ca 003900 branch sniff_init_master ,master 
+0x26cb 003901 add clke_bt ,3 ,rega 
+:      003902 sniff_init_master:
+0x26cc 003903 fetcht 2 ,mem_tsniff 
+0x26cd 003904 deposit rega 
+0x26ce 003905 set0 27 ,pdata 
+0x26cf 003906 idiv temp 
+0x26d0 003907 fetch 2 ,mem_dsniff 
+0x26d1 003908 call wait_div_end 
+0x26d2 003909 remainder regc 
+0x26d3 003910 isub regc ,pdata 
+0x26d4 003911 branch sniff_init_nowrap ,positive 
+0x26d5 003912 iadd temp ,pdata 
+:      003913 sniff_init_nowrap:
+0x26d6 003914 iadd rega ,pdata 
+0x26d7 003915 store 4 ,mem_sniff_anchor 
+0x26d8 003916 jam switch_flag_init ,mem_switch_flag 
+0x26d9 003917 fetch 1 ,mem_state 
+0x26da 003918 set1 state_insniff ,pdata 
+0x26db 003919 store 1 ,mem_state 
+0x26dc 003920 fetch 1 ,mem_sniff_attempt 
+0x26dd 003921 store 1 ,mem_current_sniff_attempt 
+0x26de 003922 setarg 0 
+0x26df 003923 store 3 ,mem_sniff_rcv 
+0x26e0 003924 store 3 ,mem_sniff_lost 
+0x26e1 003925 store 1 ,mem_sniff_unint_lost 
+0x26e2 003926 jam bt_evt_enter_sniff ,mem_fifo_temp 
+0x26e3 003927 call ui_ipc_send_event 
+0x26e4 003928 fetch 2 ,mem_rx_window_sniff 
+0x26e5 003929 store 2 ,mem_rx_window 
+0x26e6 003930 nrtn master 
+0x26e7 003931 add am_addr ,-1 ,queue 
+0x26e8 003932 rtn 
+:      003934 sniff_exit:
+0x26e9 003935 bpatch patch0d_5 ,mem_patch0d 
+0x26ea 003936 fetch 1 ,mem_state 
+0x26eb 003937 rtnbit0 state_insniff 
+0x26ec 003938 set0 state_insniff ,pdata 
+0x26ed 003939 store 1 ,mem_state 
+0x26ee 003940 fetch 2 ,mem_rx_window_init 
+0x26ef 003941 store 2 ,mem_rx_window 
+0x26f0 003942 disable wake 
+0x26f1 003943 jam bt_evt_exit_sniff ,mem_fifo_temp 
+0x26f2 003944 branch ui_ipc_send_event 
+:      003947 check_attempt:
+0x26f3 003948 bpatch patch0d_6 ,mem_patch0d 
+0x26f4 003949 enable attempt 
+0x26f5 003950 fetch 1 ,mem_state 
+0x26f6 003951 bbit1 state_insniff ,check_attempt_sniff 
+0x26f7 003952 rtnmark1 mark_testmode 
+0x26f8 003953 fetch 1 ,mem_arq 
+0x26f9 003954 rtnbit1 wack 
+0x26fa 003955 fetch 1 ,mem_lmp_to_send 
+0x26fb 003956 nrtn blank 
+0x26fc 003957 fetch 1 ,mem_op 
+0x26fd 003958 rtnbit1 op_txl2cap 
+:      003959 check_attempt_nomore:
+0x26fe 003960 force 0 ,pdata 
+0x26ff 003961 rtn 
+:      003963 check_attempt_sniff:
+0x2700 003964 bbit0 state_insco ,check_attempt_not_sco 
+0x2701 003965 fetch 1 ,mem_current_sniff_attempt 
+0x2702 003966 beq 2 ,check_attempt_sniff_restore_sco 
+0x2703 003967 fetch 1 ,mem_arq 
+0x2704 003968 bbit1 wack ,check_attempt_notimeout 
+0x2705 003969 bmark0 mark_esco_rxok ,check_attempt_notimeout 
+:      003970 check_attempt_sniff_restore_sco:
+0x2706 003971 nbranch check_attempt_notimeout ,master 
+0x2707 003972 fetch 1 ,mem_lmp_to_send 
+0x2708 003973 nbranch check_attempt_notimeout ,blank 
+:      003974 check_attempt_sco_master:
+0x2709 003975 fetch 1 ,mem_sco_poll 
+0x270a 003976 increase -1 ,pdata 
+0x270b 003977 store 1 ,mem_sco_poll 
+0x270c 003978 nbranch check_attempt_nomore ,blank 
+0x270d 003979 jam param_sco_poll ,mem_sco_poll 
+0x270e 003980 branch check_attempt_notimeout 
+:      003987 check_attempt_not_sco:
+0x270f 003988 fetch 1 ,mem_current_sniff_attempt 
+0x2710 003989 bne 1 ,check_attempt_notimeout 
+0x2711 003990 fetch 1 ,mem_current_sniff_timeout 
+0x2712 003991 branch check_attempt_notimeout ,blank 
+0x2713 003992 increase -1 ,pdata 
+0x2714 003993 store 1 ,mem_current_sniff_timeout 
+0x2715 003994 fetch 1 ,mem_arq 
+0x2716 003995 rtnbit1 wack 
+0x2717 003996 nrtn match 
+:      003997 check_attempt_notimeout:
+0x2718 003998 fetch 1 ,mem_current_sniff_attempt 
+0x2719 003999 increase -1 ,pdata 
+0x271a 004000 store 1 ,mem_current_sniff_attempt 
+0x271b 004001 rtn 
+:      004012 sniff_check_window:
+0x271c 004013 bpatch patch0d_7 ,mem_patch0d 
+0x271d 004014 disable swfine 
+0x271e 004015 copy temp ,stop_watch 
+0x271f 004016 call context_search_sniff_window 
+0x2720 004017 disable user 
+0x2721 004018 nrtn zero 
+0x2722 004019 force 0 ,stop_watch 
+0x2723 004020 enable user 
+0x2724 004021 rtn 
+:      004024 check_esco_amaddr:
+0x2725 004025 fetch 1 ,mem_esco_addr 
+0x2726 004026 icompare 0xff ,am_addr 
+0x2727 004027 rtn 
+:      004030 parse_l2cap:
+0x2728 004031 bpatch patch0e_0 ,mem_patch0e 
+0x2729 004032 set0 mark_rxbuf_inuse ,mark 
+:      004033 parse_l2cap_cont:
+0x272a 004034 jam l2cap_rx_clear ,mem_l2cap_rx_done 
+0x272b 004035 fetch 1 ,mem_l2cap_rxbuff_inuse 
+0x272c 004036 rtn blank 
+0x272d 004037 isolate1 l2cap_inuse_buff1 ,pdata 
+0x272e 004038 arg mem_l2cap_rxbuff1 ,contr 
+0x272f 004039 call process_rx_l2cap_pkt ,true 
+0x2730 004040 bpatch patch0e_1 ,mem_patch0e 
+0x2731 004041 fetch 1 ,mem_l2cap_rx_done 
+0x2732 004042 beq l2cap_rx_done ,parse_l2cap_release_buff1 
+0x2733 004044 jam l2cap_rx_clear ,mem_l2cap_rx_done 
+0x2734 004045 fetch 1 ,mem_l2cap_rxbuff_inuse 
+0x2735 004046 rtnbit0 l2cap_inuse_buff2 
+0x2736 004047 arg mem_l2cap_rxbuff2 ,contr 
+0x2737 004048 call process_rx_l2cap_pkt 
+0x2738 004049 fetch 1 ,mem_l2cap_rx_done 
+0x2739 004050 beq l2cap_rx_done ,parse_l2cap_release_buff2 
+0x273a 004051 rtn 
+:      004053 parse_l2cap_release_buff1:
+0x273b 004054 fetch 1 ,mem_l2cap_rxbuff_inuse 
+0x273c 004055 set0 l2cap_inuse_buff1 ,pdata 
+0x273d 004056 store 1 ,mem_l2cap_rxbuff_inuse 
+0x273e 004057 setarg 0 
+0x273f 004058 store 2 ,mem_l2cap_rxbuff1_len 
+0x2740 004059 rtn 
+:      004060 parse_l2cap_release_buff2:
+0x2741 004061 fetch 1 ,mem_l2cap_rxbuff_inuse 
+0x2742 004062 set0 l2cap_inuse_buff2 ,pdata 
+0x2743 004063 store 1 ,mem_l2cap_rxbuff_inuse 
+0x2744 004064 setarg 0 
+0x2745 004065 store 2 ,mem_l2cap_rxbuff2_len 
+0x2746 004066 rtn 
+:      004068 l2cap_buff1_inuse:
+0x2747 004069 fetch 1 ,mem_l2cap_rxbuff_inuse 
+0x2748 004070 set1 l2cap_inuse_buff1 ,pdata 
+0x2749 004071 store 1 ,mem_l2cap_rxbuff_inuse 
+0x274a 004072 rtn 
+:      004074 l2cap_buff2_inuse:
+0x274b 004075 fetch 1 ,mem_l2cap_rxbuff_inuse 
+0x274c 004076 set1 l2cap_inuse_buff2 ,pdata 
+0x274d 004077 store 1 ,mem_l2cap_rxbuff_inuse 
+0x274e 004078 rtn 
+:      004084 slave_send_access:
+0x274f 004085 bpatch patch0e_2 ,mem_patch0e 
+0x2750 004086 add clke_bt ,1 ,bt_clk 
+0x2751 004087 call fetch_extm_bt_adr 
+0x2752 004088 force 0x03 ,freq_mode 
+0x2753 004089 call tx_radio_freq 
+0x2754 004090 call start_transmitter 
+0x2755 004091 call start_tx_external 
+0x2756 004092 branch send_access_word 
+:      004095 slave_conn_send_packet:
+0x2757 004096 bpatch patch0e_3 ,mem_patch0e 
+0x2758 004097 call rf_setup_time_slave_slot 
+0x2759 004098 deposit clke_bt 
+0x275a 004099 fetcht 4 ,mem_next_btclk 
+0x275b 004100 isub temp ,pdata 
+0x275c 004101 rtnne 1 
+0x275d 004102 compare type_null ,type ,0x1f 
+0x275e 004103 nbranch slave_conn_send_access ,true 
+0x275f 004104 fetch 1 ,mem_rx_type 
+0x2760 004105 rtn blank 
+:      004106 slave_conn_send_access:
+0x2761 004107 call slave_send_access 
+:      004108 transmit_packet:
+0x2762 004109 compare type_id ,type ,0x1f 
+0x2763 004110 branch end_of_packet ,true 
+0x2764 004111 rshift bt_clk ,temp 
+0x2765 004112 or temp ,0x40 ,white_init 
+:      004113 transmit_packet_whitened:
+0x2766 004114 bpatch patch0e_4 ,mem_patch0e 
+0x2767 004115 enable enable_white 
+0x2768 004116 enable enable_hec 
+0x2769 004117 enable encode_fec1 
+0x276a 004118 set0 mark_longpacket ,mark 
+0x276b 004119 deposit am_addr 
+0x276c 004120 inject mod ,3 
+0x276d 004121 deposit type 
+0x276e 004122 inject mod ,4 
+0x276f 004123 fetch 1 ,mem_arq 
+0x2770 004124 inject bucket ,4 
+0x2771 004125 inject mod ,3 
+0x2772 004126 enable enable_parity 
+0x2773 004127 inject mod ,8 
+0x2774 004128 disable encode_fec1 
+0x2775 004129 disable enable_parity 
+0x2776 004130 disable enable_hec 
+0x2777 004131 set0 psk3m ,radio_ctrl 
+0x2778 004132 arg 0 ,temp 
+0x2779 004133 call reserve_slot 
+0x277a 004134 bpatch patch0e_5 ,mem_patch0e 
+0x277b 004135 and type ,0x1f ,pdata 
+0x277c 004136 beq type_lmp ,transmit_lmp 
+0x277d 004137 beq type_null ,end_of_packet 
+0x277e 004138 beq type_poll ,end_of_packet 
+0x277f 004139 beq type_fhs ,transmit_fhs 
+0x2780 004140 beq type_dm1 ,transmit_dm1 
+0x2781 004141 beq type_dh1 ,transmit_dh1 
+0x2782 004142 beq type_hv3 ,transmit_hev 
+0x2783 004143 beq type_3dh1 ,transmit_3dh1 
+0x2784 004144 arg 4 ,temp 
+0x2785 004145 call reserve_slot 
+0x2786 004146 beq type_dm3 ,transmit_dm3 
+0x2787 004147 beq type_dh3 ,transmit_dh3 
+0x2788 004148 arg 8 ,temp 
+0x2789 004149 call reserve_slot 
+0x278a 004150 beq type_dh5 ,transmit_dh5 
+0x278b 004151 branch transmit_dm5 
+:      004154 transmit_hev:
+0x278c 004155 bpatch patch0e_6 ,mem_patch0e 
+0x278d 004156 enable encode_fec0 
+0x278e 004157 enable enable_crc 
+0x278f 004158 enable encrypt 
+0x2790 004159 force 30 ,loopcnt 
+0x2791 004160 arg mem_sco_obuf ,contr 
+:      004161 transmit_ev_loop:
+0x2792 004162 ifetch 1 ,contr 
+0x2793 004163 inject mod ,8 
+0x2794 004164 loop transmit_ev_loop 
+0x2795 004165 bmark1 mark_esco ,transmit_end 
+0x2796 004166 branch end_of_packet 
+:      004168 transmit_fhs:
+0x2797 004169 bpatch patch0e_7 ,mem_patch0e 
+0x2798 004170 fetch 1 ,mem_fhs_am_addr 
+0x2799 004171 icopy am_addr 
+0x279a 004172 fetch 1 ,mem_fhs_misc 
+0x279b 004173 icopy fhs_misc 
+0x279c 004174 fetch 3 ,mem_class 
+0x279d 004175 icopy fhs_class 
+0x279e 004176 fetch 2 ,mem_nap 
+0x279f 004177 icopy nap 
+0x27a0 004178 enable enable_crc 
+0x27a1 004179 enable encode_fec2 
+0x27a2 004180 copy bt_adr ,rega 
+0x27a3 004181 call fetch_self_bt_adr 
+0x27a4 004182 pulse recalc 
+0x27a5 004183 nop 32 
+0x27a6 004184 copy bt_clk ,timeup 
+0x27a7 004185 fetch 4 ,mem_clkn_bt 
+0x27a8 004186 icopy bt_clk 
+0x27a9 004187 preload fhs0 
+0x27aa 004188 set1 58 ,pdata 
+0x27ab 004189 inject mod ,72 
+0x27ac 004190 preload fhs1 
+0x27ad 004191 inject mod ,72 
+0x27ae 004192 copy timeup ,bt_clk 
+0x27af 004193 copy rega ,bt_adr 
+0x27b0 004194 enable enable_parity 
+0x27b1 004195 inject mod ,16 
+0x27b2 004196 disable enable_parity 
+0x27b3 004197 branch end_of_packet 
+:      004199 transmit_lmp:
+0x27b4 004200 bpatch patch0f_0 ,mem_patch0f 
+0x27b5 004201 enable encrypt 
+0x27b6 004202 enable enable_crc 
+0x27b7 004203 enable encode_fec2 
+0x27b8 004204 fetch 1 ,mem_lmo_header_length 
+0x27b9 004205 and pdata ,0x1f8 ,temp 
+0x27ba 004206 arg mem_lmo_header_length ,contr 
+0x27bb 004207 increase 8 ,temp 
+:      004208 transmit_lmp_loop:
+0x27bc 004209 add temp ,-72 ,regc 
+0x27bd 004210 nbranch transmit_lmp_finish ,positive 
+0x27be 004211 ifetch 9 ,contr 
+0x27bf 004212 inject mod ,72 
+0x27c0 004213 copy regc ,temp 
+0x27c1 004214 branch transmit_lmp_loop 
+:      004215 transmit_lmp_finish:
+0x27c2 004216 ifetch 9 ,contr 
+0x27c3 004217 iinject mod ,temp 
+0x27c4 004218 branch transmit_end 
+:      004220 transmit_dm1:
+0x27c5 004221 enable encode_fec2 
+0x27c6 004222 branch transmit_dmh 
+:      004223 transmit_dm3:
+:      004224 transmit_dm5:
+0x27c7 004225 enable encode_fec2 
+0x27c8 004226 set1 mark_longpacket ,mark 
+0x27c9 004227 branch transmit_dmh 
+:      004229 transmit_3dh1:
+0x27ca 004230 set1 psk3m ,radio_ctrl 
+:      004231 transmit_dh1:
+0x27cb 004232 enable encode_fec0 
+0x27cc 004233 branch transmit_dmh 
+:      004235 transmit_dh3:
+:      004236 transmit_dh5:
+0x27cd 004237 set1 psk3m ,radio_ctrl 
+0x27ce 004238 enable encode_fec0 
+0x27cf 004239 set1 mark_longpacket ,mark 
+:      004241 transmit_dmh:
+0x27d0 004242 bpatch patch0f_1 ,mem_patch0f 
+0x27d1 004243 fetch 1 ,mem_state_map 
+0x27d2 004244 bbit0 smap_edr ,transmit_noedr 
+0x27d3 004245 sub type ,3 ,null 
+0x27d4 004246 branch transmit_noedr ,positive 
+0x27d5 004247 disable encrypt 
+0x27d6 004248 disable encode_fec2 
+0x27d7 004249 enable encode_fec0 
+0x27d8 004250 disable enable_white 
+0x27d9 004251 set1 psk ,radio_ctrl 
+0x27da 004252 isolate1 psk3m ,radio_ctrl 
+0x27db 004253 branch transmit_edr3m ,true 
+0x27dc 004254 setarg 0xabeee 
+0x27dd 004255 inject mod ,20 
+0x27de 004256 branch transmit_edr_sync_end 
+:      004257 transmit_edr3m:
+0x27df 004258 setarg 0x5faeba 
+0x27e0 004259 inject mod ,24 
+0x27e1 004260 setarg 0x12 
+0x27e2 004261 inject mod ,6 
+:      004262 transmit_edr_sync_end:
+0x27e3 004263 enable enable_white 
+0x27e4 004264 set1 mark_longpacket ,mark 
+:      004265 transmit_noedr:
+0x27e5 004266 enable encrypt 
+0x27e6 004267 enable enable_crc 
+0x27e7 004268 bmark1 mark_loopback ,transmit_loopback 
+0x27e8 004269 fetch 1 ,mem_tx_lch 
+0x27e9 004270 inject mod ,3 
+0x27ea 004271 fetch 2 ,mem_tx_len 
+0x27eb 004272 iforce loopcnt 
+0x27ec 004273 bmark1 mark_longpacket ,transmit_long 
+0x27ed 004274 inject mod ,5 
+0x27ee 004275 branch transmit_stuff 
+:      004276 transmit_long:
+0x27ef 004277 inject mod ,13 
+:      004278 transmit_stuff:
+0x27f0 004279 deposit loopcnt 
+0x27f1 004280 branch transmit_end ,blank 
+0x27f2 004281 fetch 2 ,mem_txptr 
+0x27f3 004282 iforce contr 
+:      004283 transmit_stuff_loop:
+0x27f4 004284 ifetch 1 ,contr 
+0x27f5 004285 inject mod ,8 
+0x27f6 004286 loop transmit_stuff_loop 
+:      004289 transmit_end:
+0x27f7 004290 enable enable_parity 
+0x27f8 004291 inject mod ,16 
+0x27f9 004292 disable enable_parity 
+0x27fa 004293 call set_wait_ack 
+0x27fb 004294 fetch 1 ,mem_state_map 
+0x27fc 004295 bbit0 smap_edr ,end_of_packet 
+0x27fd 004296 force 0 ,pdata 
+0x27fe 004297 inject mod ,6 
+0x27ff 004298 branch end_of_packet 
+:      004301 transmit_loopback:
+0x2800 004302 bpatch patch0f_2 ,mem_patch0f 
+0x2801 004303 bmark1 mark_longpacket ,transmit_loopback_long 
+:      004304 transmit_loopback_short:
+0x2802 004305 fetch 1 ,mem_lch_code 
+0x2803 004306 inject mod ,3 
+0x2804 004307 fetch 1 ,mem_len 
+0x2805 004308 iforce regc 
+0x2806 004309 inject mod ,5 
+0x2807 004310 branch transmit_loopback_cont 
+:      004311 transmit_loopback_long:
+0x2808 004312 fetch 1 ,mem_lch_code 
+0x2809 004313 inject mod ,3 
+0x280a 004314 fetch 2 ,mem_len 
+0x280b 004315 iforce regc 
+0x280c 004316 inject mod ,13 
+:      004317 transmit_loopback_cont:
+0x280d 004318 arg mem_rxbuf ,contr 
+:      004319 transmit_loopback_loop:
+0x280e 004320 copy regc ,null 
+0x280f 004321 branch transmit_loopback_end ,zero 
+0x2810 004322 ifetch 1 ,contr 
+0x2811 004323 inject mod ,8 
+0x2812 004324 increase -1 ,regc 
+0x2813 004325 branch transmit_loopback_loop 
+:      004326 transmit_loopback_end:
+0x2814 004327 fetch 2 ,mem_tst_pktcnt_dmh 
+0x2815 004328 increase 1 ,pdata 
+0x2816 004329 store 2 ,mem_tst_pktcnt_dmh 
+0x2817 004330 branch transmit_end 
+:      004333 apply_switch_clke:
+0x2818 004334 fetch 4 ,mem_clke_bt 
+0x2819 004335 add pdata ,7 ,rega 
+0x281a 004336 fetch 2 ,mem_slot_offset 
+0x281b 004337 nbranch apply_switch_nozero ,blank 
+0x281c 004338 increase -3 ,rega 
+0x281d 004339 branch apply_switch_wait_loop 
+:      004340 apply_switch_nozero:
+0x281e 004341 mul32 pdata ,12 ,pdata 
+0x281f 004342 hfetcht 2 ,core_halfslot 
+0x2820 004343 increase 1 ,temp 
+:      004344 apply_switch_loop:
+0x2821 004345 isub temp ,pdata 
+0x2822 004346 nbranch apply_switch_bt ,positive 
+0x2823 004347 increase -1 ,rega 
+0x2824 004348 branch apply_switch_loop 
+:      004349 apply_switch_bt:
+0x2825 004350 sub pdata ,0 ,pdata 
+:      004351 apply_switch_wait_loop:
+0x2826 004352 until null ,oneslot 
+0x2827 004353 compare 0 ,clkn_bt ,3 
+0x2828 004354 nbranch apply_switch_wait_loop ,true 
+0x2829 004355 iforce clke_rt 
+0x282a 004356 copy rega ,clke_bt 
+0x282b 004357 iforce clke_rt 
+0x282c 004358 rtn 
+:      004361 calc_slot_offset:
+0x282d 004362 bpatch patch0f_3 ,mem_patch0f 
+0x282e 004363 until null ,halfslot 
+0x282f 004364 deposit clke 
+0x2830 004365 iforce contr 
+0x2831 004366 rshift16 ,pdata ,pdata 
+0x2832 004367 isub clkn_bt ,loopcnt 
+0x2833 004368 and_into 3 ,loopcnt 
+0x2834 004369 nbranch calc_bt_portion ,zero 
+0x2835 004370 force 0 ,pdata 
+0x2836 004371 branch calc_skip_bt 
+:      004372 calc_bt_portion:
+0x2837 004373 arg 3750 ,temp 
+0x2838 004374 force 0 ,pdata 
+:      004375 calc_slot_offset_loop:
+0x2839 004376 iadd temp ,pdata 
+0x283a 004377 loop calc_slot_offset_loop 
+:      004378 calc_skip_bt:
+0x283b 004379 iadd contr ,pdata 
+0x283c 004380 div pdata ,12 
+0x283d 004381 call wait_div_end 
+0x283e 004382 quotient pdata 
+0x283f 004383 store 2 ,mem_slot_offset 
+0x2840 004384 rtn 
+:      004386 calc_clke_offset:
+0x2841 004387 bpatch patch0f_4 ,mem_patch0f 
+0x2842 004388 deposit clke 
+0x2843 004389 copy clkn ,temp 
+0x2844 004390 isub temp ,null 
+0x2845 004391 nsetflag positive ,44 ,pdata 
+0x2846 004392 isub temp ,temp 
+0x2847 004393 setarg 3750 
+0x2848 004394 isolate0 15 ,temp 
+0x2849 004395 branch calc_clke_pos ,true 
+0x284a 004396 setarg -61786 
+0x284b 004397 iadd temp ,temp 
+:      004398 calc_clke_pos:
+0x284c 004399 storet 6 ,mem_le_clk_offset 
+0x284d 004400 rtn le 
+0x284e 004401 storet 6 ,mem_clk_offset 
+0x284f 004402 rtn 
+:      004404 calc_clke:
+0x2850 004405 disable clknt 
+0x2851 004406 fetch 6 ,mem_le_clk_offset 
+0x2852 004407 branch calc_clke2 ,le 
+0x2853 004408 fetch 6 ,mem_clk_offset 
+:      004409 calc_clke2:
+0x2854 004410 iadd clkn ,alarm 
+0x2855 004411 increase 10 ,alarm 
+0x2856 004412 setarg 3750 
+0x2857 004413 isub alarm ,pdata 
+0x2858 004414 isolate0 15 ,pdata 
+0x2859 004415 branch calc_clke_pos_adj ,true 
+0x285a 004416 setarg 0xf15a 
+0x285b 004417 iadd alarm ,alarm 
+:      004418 calc_clke_pos2:
+0x285c 004419 copy alarm ,clke 
+0x285d 004420 rtn 
+:      004421 calc_clke_pos_adj:
+0x285e 004422 force 0 ,null 
+0x285f 004423 branch calc_clke_pos2 
+:      004430 calc_radio_freq:
+0x2860 004431 bpatch patch0f_5 ,mem_patch0f 
+0x2861 004432 call set_sync_on 
+0x2862 004433 copy bt_clk ,pdata 
+0x2863 004434 and_into 0x180 ,pdata 
+0x2864 004435 compare 3 ,freq_mode ,0x07 
+0x2865 004436 nbranch freq_not_connection ,true 
+0x2866 004437 rshift3 pdata ,pdata 
+0x2867 004438 iadd freq_index ,pdata 
+0x2868 004439 branch do_hop_mod_now 
+:      004440 freq_not_connection:
+0x2869 004441 copy freq_index ,pdata 
+:      004442 do_hop_mod_now:
+0x286a 004443 div pdata ,79 
+0x286b 004444 pulse recalc 
+0x286c 004445 call wait_div_end 
+0x286d 004446 remainder rega 
+0x286e 004447 add rega ,-40 ,temp 
+0x286f 004448 branch odd_half ,positive 
+0x2870 004449 lshift rega ,temp 
+0x2871 004450 branch freq_result 
+:      004451 odd_half:
+0x2872 004452 lshift temp ,temp 
+0x2873 004453 increase 1 ,temp 
+:      004454 freq_result:
+0x2874 004455 bpatch patch0f_6 ,mem_patch0f 
+0x2875 004456 fetch 1 ,mem_mode 
+0x2876 004457 bbit0 afh_change ,afh_process_con 
+:      004458 afh_process_0:
+0x2877 004459 fetch 4 ,mem_afh_instant 
+0x2878 004460 isub bt_clk ,null 
+0x2879 004461 branch afh_process_con ,positive 
+0x287a 004462 call afh_clear 
+0x287b 004463 fetch 1 ,mem_afh_new_mod 
+0x287c 004464 rtn blank 
+0x287d 004465 fetch 1 ,mem_mode 
+0x287e 004466 set1 afh_enable ,pdata 
+0x287f 004467 store 1 ,mem_mode 
+0x2880 004468 fetch 5 ,mem_afh_map_new 
+0x2881 004469 store 5 ,mem_afh_map_lo 
+0x2882 004470 ifetch 5 ,contr 
+0x2883 004471 store 5 ,mem_afh_map_hi 
+0x2884 004472 call afh_process_freq_map 
+:      004473 afh_process_con:
+0x2885 004474 fetch 1 ,mem_mode 
+0x2886 004475 rtnbit0 afh_enable 
+0x2887 004476 isolate1 1 ,bt_clk 
+0x2888 004477 branch afh_same_channel ,true 
+0x2889 004478 rshift3 temp ,rega 
+0x288a 004479 and temp ,7 ,queue 
+0x288b 004480 setarg mem_afh_map_lo 
+0x288c 004481 iadd rega ,rega 
+0x288d 004482 ifetch 1 ,rega 
+0x288e 004483 qisolate0 pdata 
+0x288f 004484 branch afh_process_1 ,true 
+0x2890 004485 deposit temp 
+0x2891 004486 branch afh_process_end 
+:      004487 afh_process_1:
+0x2892 004488 fetch 1 ,mem_afh_used 
+0x2893 004489 iforce regb 
+0x2894 004490 deposit bt_clk 
+0x2895 004491 and_into 0x180 ,pdata 
+0x2896 004492 rshift3 pdata ,pdata 
+0x2897 004493 iadd freq_index ,pdata 
+0x2898 004494 idiv regb 
+0x2899 004495 setarg mem_afh_map 
+0x289a 004496 call wait_div_end 
+0x289b 004497 remainder rega 
+0x289c 004498 iadd rega ,contr 
+0x289d 004499 ifetch 1 ,contr 
+:      004500 afh_process_end:
+0x289e 004501 store 1 ,mem_afh_index 
+0x289f 004502 iforce temp 
+0x28a0 004503 rtn 
+:      004505 afh_same_channel:
+0x28a1 004506 fetch 1 ,mem_afh_index 
+0x28a2 004507 iforce temp 
+0x28a3 004508 rtn 
+:      004510 afh_clear:
+0x28a4 004511 fetch 1 ,mem_mode 
+0x28a5 004512 set0 afh_enable ,pdata 
+0x28a6 004513 set0 afh_change ,pdata 
+0x28a7 004514 store 1 ,mem_mode 
+0x28a8 004515 rtn 
+:      004521 afh_process_freq_map:
+0x28a9 004522 bpatch patch0f_7 ,mem_patch0f 
+0x28aa 004523 arg mem_afh_map ,contw 
+0x28ab 004524 force 10 ,loopcnt 
+0x28ac 004525 call memset0 
+0x28ad 004526 arg mem_afh_map ,contw 
+0x28ae 004527 force 0 ,regc 
+0x28af 004528 force 2 ,queue 
+:      004529 process_freq_3:
+0x28b0 004530 fetch 5 ,mem_afh_map_lo 
+0x28b1 004531 iforce temp 
+0x28b2 004532 compare 2 ,queue ,0xff 
+0x28b3 004533 branch process_freq_1 ,true 
+0x28b4 004534 rshift temp ,temp 
+:      004535 process_freq_1:
+0x28b5 004536 isolate0 0 ,temp 
+0x28b6 004537 branch process_freq_0 ,true 
+0x28b7 004538 deposit regc 
+0x28b8 004539 istore 1 ,contw 
+:      004540 process_freq_0:
+0x28b9 004541 rshift2 temp ,temp 
+0x28ba 004542 increase 2 ,regc 
+0x28bb 004543 compare 40 ,regc ,0xfe 
+0x28bc 004544 nbranch process_freq_2 ,true 
+0x28bd 004545 fetch 5 ,mem_afh_map_hi 
+0x28be 004546 iforce temp 
+0x28bf 004547 compare 2 ,queue ,0xff 
+0x28c0 004548 branch process_freq_2 ,true 
+0x28c1 004549 rshift temp ,temp 
+:      004550 process_freq_2:
+0x28c2 004551 sub regc ,78 ,null 
+0x28c3 004552 branch process_freq_1 ,positive 
+0x28c4 004553 force 1 ,regc 
+0x28c5 004554 increase -1 ,queue 
+0x28c6 004555 nbranch process_freq_3 ,zero 
+0x28c7 004556 arg mem_afh_map ,rega 
+0x28c8 004557 deposit contw 
+0x28c9 004558 isub rega ,pdata 
+0x28ca 004559 store 1 ,mem_afh_used 
+0x28cb 004560 rtn 
+:      004562 rx_radio_freq:
+0x28cc 004563 bpatch patch10_0 ,mem_patch10 
+0x28cd 004564 call calc_radio_freq 
+0x28ce 004565 fetch 1 ,mem_debug_config 
+0x28cf 004566 bbit0 debug_rx_fixed_freq ,rx_radio_freq_now 
+0x28d0 004567 fetcht 1 ,mem_rx_fixed_freq 
+:      004568 rx_radio_freq_now:
+0x28d1 004569 branch set_freq_rx 
+:      004572 tx_radio_freq:
+0x28d2 004573 bpatch patch10_1 ,mem_patch10 
+0x28d3 004574 call calc_radio_freq 
+0x28d4 004575 fetch 1 ,mem_debug_config 
+0x28d5 004576 bbit0 debug_tx_fixed_freq ,tx_radio_freq_now 
+0x28d6 004577 fetcht 1 ,mem_tx_fixed_freq 
+:      004578 tx_radio_freq_now:
+0x28d7 004579 branch set_freq_tx 
+:      004582 fetch_giac:
+0x28d8 004583 force 0 ,uap 
+0x28d9 004584 fetch 3 ,mem_glap 
+0x28da 004585 iforce lap 
+0x28db 004586 rtn 
+:      004588 fetch_page_bt_adr:
+0x28dc 004589 bpatch patch10_2 ,mem_patch10 
+0x28dd 004590 fetch 1 ,mem_hci_puap 
+0x28de 004591 icopy uap 
+0x28df 004592 fetch 3 ,mem_hci_plap 
+0x28e0 004593 icopy lap 
+0x28e1 004594 rtn 
+:      004596 fetch_self_bt_adr:
+0x28e2 004597 bpatch patch10_3 ,mem_patch10 
+0x28e3 004598 fetch 2 ,mem_nap 
+0x28e4 004599 icopy nap 
+0x28e5 004600 fetch 1 ,mem_uap 
+0x28e6 004601 icopy uap 
+0x28e7 004602 fetch 3 ,mem_lap 
+0x28e8 004603 icopy lap 
+0x28e9 004604 rtn 
+:      004606 fetch_extm_bt_adr:
+0x28ea 004607 bpatch patch10_4 ,mem_patch10 
+0x28eb 004608 fetch 2 ,mem_pnap 
+0x28ec 004609 icopy nap 
+0x28ed 004610 fetch 1 ,mem_puap 
+0x28ee 004611 icopy uap 
+0x28ef 004612 fetch 3 ,mem_plap 
+0x28f0 004613 icopy lap 
+0x28f1 004614 rtn 
+:      004617 fetch_diac:
+0x28f2 004618 bmark1 mark_all_diac ,fetch_diac_do 
+0x28f3 004619 rtnmark0 mark_inquiry_state 
+0x28f4 004620 rtnmark0 mark_periodical_diac 
+:      004621 fetch_diac_do:
+0x28f5 004622 and_into -256 ,lap 
+0x28f6 004623 pulse recalc 
+0x28f7 004624 nop 32 
+0x28f8 004625 rtn 
+:      004628 shutdown_radio:
+0x28f9 004629 bpatch patch10_5 ,mem_patch10 
+0x28fa 004630 branch shutdown_radio0 ,is_rx 
+0x28fb 004631 jam 0xd4 ,rf_tx_pa_ib 
+0x28fc 004632 nop 4 
+0x28fd 004633 jam 0xd2 ,rf_tx_pa_ib 
+0x28fe 004634 nop 4 
+0x28ff 004635 jam 0xd1 ,rf_tx_pa_ib 
+0x2900 004636 nop 4 
+0x2901 004637 fetch 1 ,mem_tx_power 
+0x2902 004638 beq tx_power_0db ,shutdown_radio_0db 
+0x2903 004639 beq tx_power_3db ,shutdown_radio_3db 
+0x2904 004640 beq tx_power_5db ,shutdown_radio_5db 
+0x2905 004641 beq tx_power_f3db ,shutdown_radio_f3db 
+0x2906 004642 beq tx_power_f5db ,shutdown_radio_f5db 
+0x2907 004643 beq tx_power_pair ,shutdown_radio_pair 
+:      004644 shutdown_radio_5db:
+:      004645 shutdown_radio_0db:
+0x2908 004646 jam 0xd0 ,rf_tx_pa_ib 
+0x2909 004647 jam 0xe0 ,rf_tx_pa_gc 
+:      004648 shutdown_radio0:
+0x290a 004649 force 0 ,radio_ctrl 
+0x290b 004650 disable is_rx 
+0x290c 004651 disable is_tx 
+0x290d 004652 pulse packet_end 
+0x290e 004653 jam 0x0 ,rfen_mdm 
+0x290f 004654 jam 0x0 ,rfen_tx 
+0x2910 004655 jam 0x0 ,rfen_rx 
+0x2911 004656 jam 0 ,rfen_sn 
+0x2912 004657 jam 0x70 ,rfen_msc 
+0x2913 004658 jam 0x0 ,rfen_adc 
+0x2914 004659 rtn 
+:      004661 shutdown_radio_pair:
+:      004662 shutdown_radio_f5db:
+:      004663 shutdown_radio_f3db:
+:      004664 shutdown_radio_3db:
+0x2915 004665 jam 0xd0 ,rf_tx_pa_ib 
+0x2916 004666 jam 0xc0 ,rf_tx_pa_gc 
+0x2917 004667 branch shutdown_radio0 
+:      004669 set_sync_on:
+0x2918 004670 bpatch patch10_6 ,mem_patch10 
+0x2919 004671 jam 0x0 ,rfen_mdm 
+0x291a 004672 jam 0x0 ,rfen_tx 
+0x291b 004673 jam 0x18 ,rfen_rx 
+0x291c 004674 jam 0xa7 ,rfen_sn 
+0x291d 004675 jam 0x7f ,rfen_msc 
+0x291e 004676 rtn 
+:      004678 set_freq_rx:
+0x291f 004679 bpatch patch10_7 ,mem_patch10 
+0x2920 004681 storet 1 ,mem_last_freq 
+0x2921 004682 add temp ,rx_freq_offset ,rega 
+0x2922 004683 jam 0x07 ,rf_balun_ctrim 
+0x2923 004684 branch rf_write_freq 
+:      004685 rf_rx_enable:
+0x2924 004686 bpatch patch11_0 ,mem_patch11 
+0x2925 004687 jam 0xcf ,rfen_tx 
+0x2926 004688 nop 10 
+0x2927 004689 jam 0xff ,rfen_rx 
+0x2928 004690 jam 0xaf ,rfen_sn 
+0x2929 004691 jam 0xff ,rfen_msc 
+0x292a 004692 nop 10 
+0x292b 004693 jam 0xa0 ,rfen_mdm 
+0x292c 004694 rtn 
+:      004696 set_freq_tx_offset:
+0x292d 004697 fetch 1 ,mem_250k_freq_enable 
+0x292e 004698 branch set_freq_tx_2m_offset ,blank 
+:      004699 set_freq_tx_0m_offset:
+0x292f 004700 add temp ,2 ,rega 
+0x2930 004701 rtn 
+:      004702 set_freq_tx_2m_offset:
+0x2931 004703 add temp ,0 ,rega 
+0x2932 004704 rtn 
+:      004706 set_freq_tx:
+0x2933 004707 bpatch patch11_1 ,mem_patch11 
+0x2934 004708 storet 1 ,mem_last_freq 
+0x2935 004709 call set_freq_tx_offset 
+0x2936 004710 call rf_write_freq 
+0x2937 004711 setarg param_pll_setup 
+0x2938 004712 call sleep 
+:      004713 txon:
+0x2939 004714 jam 0x1 ,rfen_adc 
+0x293a 004715 jam 0x3c ,rfen_rx 
+0x293b 004716 jam 0xe0 ,rfen_tx 
+0x293c 004717 jam 0x12 ,rf_balun_ctrim 
+0x293d 004718 nop 10 
+0x293e 004719 jam 0x01 ,rfen_mdm 
+0x293f 004720 jam 0x3d ,rfen_mdm 
+0x2940 004721 nop 10 
+0x2941 004722 jam 0xb7 ,rfen_sn 
+0x2942 004723 nop 10 
+0x2943 004724 jam 0x7f ,rfen_mdm 
+:      004725 txon_power_select:
+0x2944 004726 fetch 1 ,mem_tx_power 
+0x2945 004727 beq tx_power_0db ,set_tx_power_0db 
+0x2946 004728 beq tx_power_3db ,set_tx_power_3db 
+0x2947 004729 beq tx_power_5db ,set_tx_power_5db 
+0x2948 004730 beq tx_power_f3db ,set_tx_power_f3db 
+0x2949 004731 beq tx_power_f5db ,set_tx_power_f5db 
+0x294a 004732 beq tx_power_pair ,set_tx_power_pair 
+:      004733 set_tx_power_0db:
+0x294b 004734 jam 0xf0 ,rf_tx_pa_gc 
+0x294c 004735 call txon_common 
+0x294d 004736 jam 0xd8 ,rf_tx_pa_ib 
+0x294e 004737 rtn 
+:      004739 set_tx_power_3db:
+0x294f 004740 jam 0xdf ,rf_tx_pa_gc 
+0x2950 004741 call txon_common 
+0x2951 004742 jam 0xdf ,rf_tx_pa_ib 
+0x2952 004743 rtn 
+:      004745 set_tx_power_5db:
+0x2953 004746 jam 0xff ,rf_tx_pa_gc 
+0x2954 004747 call txon_common 
+0x2955 004748 jam 0xdf ,rf_tx_pa_ib 
+0x2956 004749 rtn 
+:      004750 set_tx_power_f3db:
+0x2957 004751 jam 0xce ,rf_tx_pa_gc 
+0x2958 004752 call txon_common 
+0x2959 004753 jam 0xd8 ,rf_tx_pa_ib 
+0x295a 004754 rtn 
+:      004756 set_tx_power_f5db:
+0x295b 004757 jam 0xcb ,rf_tx_pa_gc 
+0x295c 004758 call txon_common 
+0x295d 004759 jam 0xd8 ,rf_tx_pa_ib 
+0x295e 004760 rtn 
+:      004762 set_tx_power_pair:
+0x295f 004763 jam 0xd0 ,rf_tx_pa_ib 
+0x2960 004764 jam 0xc0 ,rf_tx_pa_gc 
+0x2961 004765 jam 0x4c ,0x8957 
+0x2962 004766 jam 0x6c ,0x8958 
+0x2963 004767 jam 0x50 ,0x8959 
+0x2964 004768 rtn 
+:      004770 txon_common:
+0x2965 004771 nop 4 
+0x2966 004772 jam 0xd1 ,rf_tx_pa_ib 
+0x2967 004773 nop 4 
+0x2968 004774 jam 0xd2 ,rf_tx_pa_ib 
+0x2969 004775 nop 4 
+0x296a 004776 jam 0xd4 ,rf_tx_pa_ib 
+0x296b 004777 rtn 
+:      004780 initialize_radio:
+0x296c 004781 jam clksel_rc ,core_clksel 
+:      004782 initialize_radio_wait:
+0x296d 004783 fetch 2 ,mem_rf_init_ptr 
+0x296e 004784 bbit0 14 ,initialize_radio_wait 
+0x296f 004785 iforce contr 
+0x2970 004786 arg 0x8900 ,temp 
+:      004787 initialize_radio_loop:
+0x2971 004788 ifetch 1 ,contr 
+0x2972 004789 beq 0xff ,initialize_radio_cont 
+0x2973 004790 ior temp ,contw 
+0x2974 004791 ifetch 1 ,contr 
+0x2975 004792 istore 1 ,contw 
+0x2976 004793 branch initialize_radio_loop 
+:      004794 initialize_radio_cont:
+0x2977 004795 bpatch patch11_2 ,mem_patch11 
+0x2978 004796 call lpm_cal_xtal_startup 
+0x2979 004797 call switchto_dpllclk 
+0x297a 004799 setarg param_dpll_start_delay 
+0x297b 004800 iadd clkn_bt ,pdata 
+0x297c 004801 store 4 ,mem_dpll_clkn 
+0x297d 004802 set1 reset ,radio_ctrl 
+0x297e 004803 force 0 ,radio_ctrl 
+0x297f 004804 ncall do_rccal ,wake 
+0x2980 004805 branch set_rccal 
+:      004808 rf_write_freq:
+0x2981 004809 bpatch patch11_3 ,mem_patch11 
+0x2982 004810 setarg 2400 
+0x2983 004811 iadd rega ,temp 
+0x2984 004812 fetch 1 ,mem_fcomp_mul 
+0x2985 004813 jam 0x04 ,rf_pll_rstn 
+0x2986 004814 imul32 temp ,pdata 
+0x2987 004815 fetcht 1 ,mem_fcomp_div 
+0x2988 004816 idiv temp 
+0x2989 004817 call wait_div_end 
+0x298a 004818 quotient rega 
+0x298b 004819 remainder pdata 
+0x298c 004820 lshift16 pdata ,pdata 
+0x298d 004821 lshift4 pdata ,pdata 
+0x298e 004822 idiv temp 
+0x298f 004823 call wait_div_end 
+0x2990 004824 quotient pdata 
+0x2991 004825 lshift8 pdata ,pdata 
+0x2992 004826 lshift pdata ,pdata 
+0x2993 004827 ior rega ,pdata 
+0x2994 004828 hstore 4 ,rf_pll_intg 
+0x2995 004829 jam 0x44 ,rf_pll_rstn 
+0x2996 004830 jam 0xc4 ,rf_pll_rstn 
+0x2997 004831 rtn 
+:      004834 do_rccal:
+0x2998 004835 bpatch patch11_4 ,mem_patch11 
+0x2999 004836 jam 0x02 ,rfen_adc 
+0x299a 004837 setarg 250000 
+0x299b 004838 call sleep 
+0x299c 004839 jam 0x7f ,rfen_rx 
+0x299d 004840 nop 130 
+0x299e 004841 jam 0x30 ,rf_rccal_ctrl 
+0x299f 004842 jam 0xd0 ,rfen_tx 
+0x29a0 004843 jam 0x70 ,rf_rccal_ctrl 
+0x29a1 004844 jam 0xf0 ,rf_rccal_ctrl 
+0x29a2 004845 force 50 ,loopcnt 
+:      004846 do_rccal_loop:
+0x29a3 004847 hfetch 1 ,rf_rccal_result 
+0x29a4 004848 bbit1 5 ,do_rccal_end 
+0x29a5 004849 loop do_rccal_loop 
+:      004850 do_rccal_end:
+0x29a6 004851 store 1 ,mem_rf_rccal 
+0x29a7 004852 jam 0 ,rfen_tx 
+0x29a8 004853 jam 0 ,rfen_rx 
+0x29a9 004854 jam 0x00 ,rfen_adc 
+0x29aa 004855 rtn 
+:      004857 set_rccal:
+0x29ab 004858 bpatch patch11_5 ,mem_patch11 
+0x29ac 004859 fetch 1 ,mem_rf_rccal 
+0x29ad 004860 set1 5 ,pdata 
+0x29ae 004861 hstore 1 ,rf_rccal_ctrl 
+0x29af 004862 hfetcht 1 ,rf_bpf_ctrim 
+0x29b0 004863 and_into 7 ,temp 
+0x29b1 004864 lshift3 pdata ,pdata 
+0x29b2 004865 ior temp ,pdata 
+0x29b3 004866 hstore 1 ,rf_bpf_ctrim 
+0x29b4 004867 hfetch 1 ,rf_bpf_ib 
+0x29b5 004868 set0 bpf_rccal ,pdata 
+0x29b6 004869 hstore 1 ,rf_bpf_ib 
+0x29b7 004870 hfetch 1 ,rf_adc_rccal 
+0x29b8 004871 set0 adc_rccal ,pdata 
+0x29b9 004872 hstore 1 ,rf_adc_rccal 
+0x29ba 004873 rtn 
+:      004875 save_rssi:
+0x29bb 004876 bpatch patch11_6 ,mem_patch11 
+0x29bc 004877 hfetch 2 ,rf_afc_d2a 
+0x29bd 004878 rshift4 pdata ,pdata 
+0x29be 004879 rshift3 pdata ,pdata 
+0x29bf 004880 sub pdata ,0 ,pdata 
+:      004881 bcd:
+0x29c0 004882 and_into 0xff ,pdata 
+0x29c1 004883 div pdata ,10 
+0x29c2 004884 call wait_div_end 
+0x29c3 004885 quotient pdata 
+0x29c4 004886 lshift4 pdata ,pdata 
+0x29c5 004887 remainder temp 
+0x29c6 004888 ior temp ,pdata 
+0x29c7 004889 store 1 ,mem_rssi 
+0x29c8 004890 rtn 
+:      004893 switchto_dpllclk:
+0x29c9 004894 jam clksel_rc ,core_clksel 
+0x29ca 004895 hfetch 1 ,rf_clkpll_frac + 2 
+0x29cb 004896 set0 4 ,pdata 
+0x29cc 004897 set0 5 ,pdata 
+0x29cd 004898 hstore 1 ,rf_clkpll_frac + 2 
+0x29ce 004899 jam 0x00 ,rfen_ck 
+0x29cf 004900 jam 0x00 ,rfen_msc 
+0x29d0 004901 jam 0x70 ,rfen_msc 
+0x29d1 004902 jam 0xff ,rfen_ck 
+0x29d2 004903 hfetch 1 ,rf_clkpll_frac + 2 
+0x29d3 004904 set1 4 ,pdata 
+0x29d4 004905 set1 5 ,pdata 
+0x29d5 004906 hstore 1 ,rf_clkpll_frac + 2 
+0x29d6 004907 call init_lpm_ctrl 
+0x29d7 004908 hfetch 1 ,rf_clkpll_int 
+0x29d8 004909 set1 7 ,pdata 
+0x29d9 004910 hstore 1 ,rf_clkpll_int 
+0x29da 004911 set0 7 ,pdata 
+0x29db 004912 hstore 1 ,rf_clkpll_int 
+0x29dc 004913 set1 7 ,pdata 
+0x29dd 004914 hstore 1 ,rf_clkpll_int 
+0x29de 004915 jam clksel_dpll ,core_clksel 
+0x29df 004916 nop 1 
+0x29e0 004917 jam clksel_xtal ,core_clksel 
+0x29e1 004918 hfetch 1 ,rf_clkpll_frac + 2 
+0x29e2 004919 and_into 0xcf ,pdata 
+0x29e3 004920 hstore 1 ,rf_clkpll_frac + 2 
+0x29e4 004921 or_into 0x30 ,pdata 
+0x29e5 004922 hstore 1 ,rf_clkpll_frac + 2 
+0x29e6 004923 rtn 
+:      004926 xtal_fast_wake:
+0x29e7 004927 setarg 0xf0f 
+0x29e8 004928 branch lpm_write_config 
+:      004930 init_lpm_ctrl:
+0x29e9 004931 setarg 0x80f 
+0x29ea 004932 branch lpm_write_config 
+:      004936 start_receiver:
+0x29eb 004937 bpatch patch11_7 ,mem_patch11 
+0x29ec 004938 call rf_rx_enable 
+0x29ed 004939 disable is_tx 
+0x29ee 004940 enable is_rx 
+0x29ef 004941 pulse init_encrypt 
+0x29f0 004942 rtn 
+:      004944 prep_crypt:
+0x29f1 004945 bpatch patch12_0 ,mem_patch12 
+0x29f2 004946 fetch 1 ,mem_state_map 
+0x29f3 004947 isolate1 smap_encryption ,pdata 
+0x29f4 004948 setflag true ,0 ,pdata 
+0x29f5 004949 hstore 1 ,core_encrypt 
+0x29f6 004950 arg mem_kc ,contr 
+0x29f7 004951 ifetch 9 ,contr 
+0x29f8 004952 iforce kc_ls 
+0x29f9 004953 ifetch 7 ,contr 
+0x29fa 004954 iforce kc_ms 
+0x29fb 004955 fetch 1 ,mem_key_size 
+0x29fc 004956 add pdata ,-1 ,g1l 
+0x29fd 004957 pulse kc_p_activate 
+0x29fe 004958 rtn 
+:      004960 wait_access_end:
+0x29ff 004961 deposit clke 
+0x2a00 004962 store 6 ,mem_sync_clke 
+0x2a01 004963 disable decode_fec0 
+0x2a02 004964 nbranch shutdown_radio ,sync 
+0x2a03 004965 arg param_clke_cal ,clke_rt 
+0x2a04 004966 increase 1 ,clke_bt 
+0x2a05 004967 and_into 0x1fc ,clke_bt 
+0x2a06 004968 rtn 
+:      004972 wait_access_mhalfbnd:
+0x2a07 004973 enable decode_fec0 
+:      004974 wait_access_mhalfbnd_correlate:
+0x2a08 004975 correlate null ,mhalfbnd 
+0x2a09 004976 branch wait_access_end ,sync 
+0x2a0a 004977 compare 0x02 ,clke_bt ,0x02 
+0x2a0b 004978 nbranch wait_access_mhalfbnd_correlate ,true 
+0x2a0c 004979 branch wait_access_end 
+:      004981 wait_access_clkn_rt:
+0x2a0d 004982 bpatch patch12_1 ,mem_patch12 
+0x2a0e 004983 arg param_conn_access ,timeup 
+0x2a0f 004984 enable decode_fec0 
+0x2a10 004985 correlate clkn_rt ,meet 
+0x2a11 004986 disable decode_fec0 
+0x2a12 004987 nbranch shutdown_radio ,sync 
+0x2a13 004988 rtn 
+:      004990 wait_access_forever:
+0x2a14 004991 bpatch patch12_2 ,mem_patch12 
+0x2a15 004992 enable decode_fec0 
+0x2a16 004993 correlate null ,timeout 
+0x2a17 004994 disable decode_fec0 
+0x2a18 004995 nbranch shutdown_radio ,sync 
+0x2a19 004996 arg param_clke_cal ,clke_rt 
+0x2a1a 004997 and_into 0x1fc ,clke_bt 
+0x2a1b 004998 rtn 
+:      005001 reserve_slot:
+0x2a1c 005002 bpatch patch12_3 ,mem_patch12 
+0x2a1d 005003 iforce rega 
+0x2a1e 005004 deposit bt_clk 
+0x2a1f 005005 iadd temp ,timeup 
+0x2a20 005006 copy timeup ,pdata 
+0x2a21 005007 store 4 ,mem_next_btclk 
+0x2a22 005008 deposit rega 
+0x2a23 005009 rtn 
+:      005012 ahead_window:
+0x2a24 005013 copy pdata ,temp 
+0x2a25 005014 bpatch patch12_4 ,mem_patch12 
+0x2a26 005015 copy temp ,pdata 
+0x2a27 005016 call clk2bt 
+0x2a28 005017 lshift16 bt_clk ,pdata 
+0x2a29 005018 set1 44 ,pdata 
+0x2a2a 005019 call clk_diff 
+0x2a2b 005020 set0 44 ,pdata 
+0x2a2c 005021 call get_clk 
+0x2a2d 005022 call clk_diff 
+0x2a2e 005023 rtn user 
+0x2a2f 005024 call clk2rt 
+0x2a30 005025 iforce stop_watch 
+0x2a31 005026 until null ,timeout 
+0x2a32 005027 rtn 
+:      005030 setup_clk:
+0x2a33 005031 bpatch patch12_5 ,mem_patch12 
+0x2a34 005032 branch setup_clkn ,clknt 
+0x2a35 005033 until clke_rt ,meet 
+:      005034 skip_setup_clke:
+0x2a36 005035 copy clke_bt ,temp 
+0x2a37 005036 branch setup_clknbt 
+:      005037 setup_clkn:
+0x2a38 005038 branch skip_setup_clkn ,attempt 
+0x2a39 005039 until clkn_rt ,meet 
+:      005040 skip_setup_clkn:
+0x2a3a 005041 copy clkn_bt ,temp 
+:      005042 setup_clknbt:
+0x2a3b 005043 branch setup_clk11 ,user 
+0x2a3c 005044 compare 1 ,temp ,3 
+0x2a3d 005045 nbranch setup_clk ,true 
+:      005046 setup_complete:
+0x2a3e 005047 bpatch patch12_6 ,mem_patch12 
+0x2a3f 005048 fetch 1 ,mem_state 
+0x2a40 005049 rtnbit0 state_inconn 
+0x2a41 005050 fetch 4 ,mem_next_btclk 
+0x2a42 005051 isub temp ,pdata 
+0x2a43 005052 nrtn positive 
+0x2a44 005053 sub pdata ,0xff ,null 
+0x2a45 005054 branch setup_clk ,positive 
+0x2a46 005055 rtn 
+:      005056 setup_clk11:
+0x2a47 005057 compare 3 ,temp ,3 
+0x2a48 005058 nbranch setup_clk ,true 
+0x2a49 005059 branch setup_complete 
+:      005061 rf_setup_time:
+0x2a4a 005062 bpatch patch12_7 ,mem_patch12 
+0x2a4b 005063 arg param_rf_setup ,timeup 
+0x2a4c 005064 branch setup_clk 
+:      005066 rf_setup_time_slave_slot:
+0x2a4d 005067 disable user 
+0x2a4e 005068 branch rf_setup_time 
+:      005070 rf_setup_time_master_slot:
+0x2a4f 005071 enable user 
+0x2a50 005072 branch rf_setup_time 
+:      005074 start_transmitter:
+0x2a51 005075 bpatch patch13_0 ,mem_patch13 
+0x2a52 005076 call prep_crypt 
+0x2a53 005077 disable is_rx 
+0x2a54 005078 enable is_tx 
+0x2a55 005079 rtn 
+:      005083 start_tx_native:
+0x2a56 005084 bpatch patch13_1 ,mem_patch13 
+0x2a57 005085 arg param_tx_setup ,timeup 
+0x2a58 005086 until clkn_rt ,meet 
+0x2a59 005087 pulse init_encrypt 
+0x2a5a 005088 rtn 
+:      005090 start_rx_native:
+0x2a5b 005091 bpatch patch13_2 ,mem_patch13 
+0x2a5c 005092 arg param_rx_setup ,timeup 
+0x2a5d 005093 until clkn_rt ,meet 
+0x2a5e 005094 rtn 
+:      005097 start_tx_external:
+0x2a5f 005098 bpatch patch13_3 ,mem_patch13 
+0x2a60 005099 arg param_tx_setup ,timeup 
+0x2a61 005100 until clke_rt ,meet 
+0x2a62 005101 pulse init_encrypt 
+0x2a63 005102 rtn 
+:      005104 send_access_word:
+0x2a64 005105 bpatch patch13_4 ,mem_patch13 
+0x2a65 005106 preload access 
+0x2a66 005107 enable encode_fec0 
+0x2a67 005108 set1 txgfsk ,radio_ctrl 
+0x2a68 005109 inject mod ,72 
+0x2a69 005110 disable encode_fec0 
+0x2a6a 005111 rtn 
+:      005114 scan_mode_whiten:
+0x2a6b 005115 copy xin ,temp 
+0x2a6c 005116 or_into 0x60 ,temp 
+0x2a6d 005117 copy temp ,white_init 
+0x2a6e 005118 rtn 
+:      005123 get_free_amaddr:
+0x2a6f 005124 bpatch patch13_5 ,mem_patch13 
+0x2a70 005125 fetch 1 ,mem_current_amaddr 
+0x2a71 005126 increase 1 ,pdata 
+0x2a72 005127 bne param_esco_addr ,get_free_amaddr_cont 
+0x2a73 005128 force 1 ,pdata 
+:      005129 get_free_amaddr_cont:
+0x2a74 005130 store 1 ,mem_current_amaddr 
+0x2a75 005131 iforce am_addr 
+0x2a76 005132 rtn 
+:      005134 get_clk:
+0x2a77 005135 copy clkn ,temp 
+0x2a78 005136 rtn master 
+0x2a79 005137 copy clke ,temp 
+0x2a7a 005138 rtn 
+:      005140 get_clkbt:
+0x2a7b 005141 deposit clkn_bt 
+0x2a7c 005142 rtn master 
+0x2a7d 005143 deposit clke_bt 
+0x2a7e 005144 rtn 
+:      005147 supervision_update:
+0x2a7f 005148 bpatch patch13_6 ,mem_patch13 
+0x2a80 005149 fetcht 4 ,mem_supervision_timer 
+0x2a81 005150 call get_clkbt 
+0x2a82 005151 isub temp ,timeup 
+0x2a83 005152 deposit timeup 
+0x2a84 005153 fetcht 2 ,mem_supervision_to 
+0x2a85 005154 lshift temp ,temp 
+0x2a86 005155 isub temp ,pdata 
+0x2a87 005156 rtn 
+:      005158 supervision_flush:
+0x2a88 005159 bpatch patch13_7 ,mem_patch13 
+0x2a89 005160 call get_clkbt 
+0x2a8a 005161 store 4 ,mem_supervision_timer 
+0x2a8b 005162 rtn 
+:      005164 assert:
+0x2a8c 005165 bpatch patch14_0 ,mem_patch14 
+0x2a8d 005166 branch assert 
+:      005168 loop:
+0x2a8e 005169 branch loop 
+:      005171 sleep:
+0x2a8f 005172 rtn blank 
+0x2a90 005174 rshift pdata ,pdata 
+0x2a91 005175 increase -3 ,pdata 
+:      005176 sleep_loop:
+0x2a92 005177 increase -1 ,pdata 
+0x2a93 005178 nbranch sleep_loop ,zero 
+0x2a94 005179 force 0 ,pdata 
+0x2a95 005180 rtn 
+:      005184 init_param:
+0x2a96 005186 arg 0x10 ,loopcnt 
+0x2a97 005187 arg 0 ,contw 
+0x2a98 005188 call memset0 
+0x2a99 005189 arg mem_le_state ,contw 
+0x2a9a 005190 arg 10 ,loopcnt 
+0x2a9b 005191 call memset0 
+0x2a9c 005192 jam 0 ,mem_sp_calc 
+0x2a9d 005193 jam 0 ,mem_fifo_temp 
+0x2a9e 005194 jam 0 ,mem_le_testtype 
+0x2a9f 005195 jam 0 ,mem_debug_config 
+0x2aa0 005196 jam 0 ,mem_lmp_conn_state 
+0x2aa1 005197 bpatch patch14_1 ,mem_patch14 
+0x2aa2 005198 jam 0 ,mem_connection_options 
+0x2aa3 005199 jam 0 ,mem_tester_emulate 
+0x2aa4 005200 jam 0 ,mem_tester_cnt 
+0x2aa5 005201 setarg param_glap 
+0x2aa6 005202 store 3 ,mem_glap 
+0x2aa7 005203 setarg param_acl_pktlen 
+0x2aa8 005204 store 2 ,mem_acl_pktlen 
+0x2aa9 005205 jam param_sco_pktlen ,mem_sco_pktlen 
+0x2aaa 005206 jam param_acl_pktcnt ,mem_acl_pktcnt 
+0x2aab 005207 jam param_sco_pktcnt ,mem_sco_pktcnt 
+0x2aac 005208 setarg param_hci_version 
+0x2aad 005209 store 3 ,mem_hci_version 
+0x2aae 005214 jam 0x60 ,mem_fhs_misc 
+0x2aaf 005215 jam param_max_slot ,mem_max_slot 
+0x2ab0 005216 jam 0x02 ,mem_fw_ver 
+0x2ab1 005217 fetch 1 ,mem_ssp_enable 
+0x2ab2 005218 ncall init_memp ,blank 
+0x2ab3 005219 fetch 1 ,mem_le_secure_connect_enable 
+0x2ab4 005220 ncall init_memp_256 ,blank 
+0x2ab5 005221 bpatch patch14_2 ,mem_patch14 
+0x2ab6 005222 rtn wake 
+0x2ab7 005223 setarg 0 
+0x2ab8 005224 store 2 ,mem_tx_len 
+0x2ab9 005225 rshift clkn_bt ,pdata 
+0x2aba 005226 store 4 ,mem_last_clkn 
+0x2abb 005227 rtn 
+:      005234 lpmstate:
+0x2abc 005235 setarg 0xee21 
+0x2abd 005236 hstore 2 ,core_clkoff 
+0x2abe 005237 hfetch 4 ,core_gpio_in 
+0x2abf 005238 store 4 ,mem_saved_gpio_in 
+0x2ac0 005239 hfetch 1 ,core_lpm_ldocnt 
+0x2ac1 005240 store 1 ,mem_wakup_from_power_flag 
+0x2ac2 005241 bbit0 gpio_latch ,loadcode 
+0x2ac3 005242 enable wake 
+0x2ac4 005243 bbit0 cold_wake ,lpmwake 
+0x2ac5 005244 disable wake 
+0x2ac6 005245 deposit auxcnt 
+0x2ac7 005246 nbranch lpmwake ,blank 
+0x2ac8 005247 hfetch 1 ,core_lpm_ctrl + 3 
+0x2ac9 005248 bbit1 reload_code ,lpmwake 
+0x2aca 005249 arg param_hibernate_clks ,temp 
+0x2acb 005250 branch lpm_enter_sleep 
+:      005251 lpmwake:
+0x2acc 005252 hfetch 3 ,core_lpm_xtalcnt 
+0x2acd 005253 hstore 3 ,core_lpm_reg 
+0x2ace 005254 ifetch 1 ,contr 
+0x2acf 005255 or_into isogate_mask ,pdata 
+0x2ad0 005256 istore 1 ,contw 
+0x2ad1 005257 call lpm_write_ctrl2 
+0x2ad2 005258 hfetch 1 ,core_lpm_isogate 
+0x2ad3 005259 set1 enable_retmem ,pdata 
+0x2ad4 005260 hstore 1 ,core_lpm_isogate 
+0x2ad5 005261 call lpm_write_ctrl2 
+0x2ad6 005262 call lpm_load_context ,wake 
+0x2ad7 005263 hfetch 1 ,core_lpm_reg + 2 
+0x2ad8 005264 set0 gpio_latch ,pdata 
+0x2ad9 005265 hstore 1 ,core_lpm_reg + 2 
+0x2ada 005266 call lpm_write_ctrl2 
+0x2adb 005267 nbranch loadcode ,wake 
+0x2adc 005268 rtnmark0 mark_otp_encrypt 
+0x2add 005269 jam lock_otp ,core_misc_ctrl 
+0x2ade 005270 rtn 
+:      005272 lpm_load_context:
+0x2adf 005273 fetch 1 ,mem_saved_spidctrl 
+0x2ae0 005274 hstore 1 ,core_spid_ctrl 
+0x2ae1 005275 fetch 3 ,mem_saved_gsel 
+0x2ae2 005276 hstore 3 ,core_gpio_sel 
+0x2ae3 005277 fetch 4 ,mem_saved_gpio + 4 
+0x2ae4 005278 hstore 4 ,core_gpio_out0 
+0x2ae5 005279 fetch 4 ,mem_saved_gpio 
+0x2ae6 005280 hstore 4 ,core_gpio_oe0 
+0x2ae7 005281 fetch 8 ,mem_saved_gpio + 8 
+0x2ae8 005282 hstore 8 ,core_gpio_pu0 
+0x2ae9 005283 fetch 8 ,mem_saved_mark 
+0x2aea 005284 iforce mark 
+0x2aeb 005285 hfetch 8 ,core_gpio_wakeup_low 
+0x2aec 005286 store 8 ,mem_gpio_wakeup_low 
+0x2aed 005287 call load_ucode 
+0x2aee 005288 rtn 
+:      005290 lpm_save_context:
+0x2aef 005291 deposit mark 
+0x2af0 005292 store 8 ,mem_saved_mark 
+0x2af1 005293 hfetch 8 ,core_gpio_oe0 
+0x2af2 005294 store 8 ,mem_saved_gpio 
+0x2af3 005295 ifetch 8 ,contr 
+0x2af4 005296 istore 8 ,contw 
+0x2af5 005297 hfetch 3 ,core_gpio_sel 
+0x2af6 005298 store 3 ,mem_saved_gsel 
+0x2af7 005299 hfetch 1 ,core_spid_ctrl 
+0x2af8 005300 store 1 ,mem_saved_spidctrl 
+0x2af9 005301 branch lpm_write_gpio_wakeup 
+:      005303 lpo_calibration:
+0x2afa 005304 hfetch 1 ,core_bist_ctrl 
+0x2afb 005305 nbranch lpo_cal_inited ,blank 
+0x2afc 005306 fetch 3 ,mem_clks_per_lpo 
+0x2afd 005307 nrtn blank 
+0x2afe 005308 jam 0xc0 ,core_bist_ctrl 
+0x2aff 005309 jam ccnt_start ,core_misc_ctrl 
+:      005310 lpo_cal_inited:
+0x2b00 005311 hfetch 1 ,core_perf_status 
+0x2b01 005312 rtnbit0 1 
+0x2b02 005313 hfetch 3 ,core_clk_counter 
+0x2b03 005314 store 3 ,mem_clks_per_lpo 
+0x2b04 005315 rtn 
+:      005319 lpm_adjust_clk:
+0x2b05 005320 bpatch patch14_3 ,mem_patch14 
+0x2b06 005321 deposit clke 
+0x2b07 005322 call clk_diff_rt 
+0x2b08 005323 fetcht 4 ,mem_sleep_counter_all 
+0x2b09 005324 sub temp ,0xff ,null 
+0x2b0a 005325 rtn positive 
+0x2b0b 005326 lshift8 pdata ,pdata 
+0x2b0c 005327 lshift4 pdata ,pdata 
+0x2b0d 005328 idiv temp 
+0x2b0e 005329 call wait_div_end 
+0x2b0f 005330 quotient pdata 
+0x2b10 005331 arg param_lpm_adjmax ,temp 
+0x2b11 005332 call ceiling 
+0x2b12 005333 store 1 ,mem_lpm_adjust 
+0x2b13 005334 nbranch lpm_adjust_positive ,user 
+0x2b14 005335 sub pdata ,0 ,pdata 
+:      005336 lpm_adjust_positive:
+0x2b15 005337 fetcht 3 ,mem_clks_per_lpo 
+0x2b16 005338 iadd temp ,pdata 
+0x2b17 005339 store 3 ,mem_clks_per_lpo 
+:      005340 lpm_clear_counter:
+0x2b18 005341 setarg 0 
+0x2b19 005342 store 4 ,mem_sleep_counter_all 
+0x2b1a 005343 rtn 
+:      005347 lpm_doze:
+0x2b1b 005348 fetch 1 ,mem_lpm_config + 2 
+0x2b1c 005349 set1 reload_code ,pdata 
+0x2b1d 005350 store 1 ,mem_lpm_config + 2 
+0x2b1e 005351 branch lpm_hibernate_normal 
+:      005355 lpm_hibernate:
+0x2b1f 005356 arg param_hibernate_clks ,temp 
+0x2b20 005357 fetch 1 ,mem_lpm_config + 1 
+0x2b21 005358 set0 7 ,pdata 
+0x2b22 005359 store 1 ,mem_lpm_config + 1 
+:      005360 lpm_hibernate_normal:
+0x2b23 005361 bpatch patch14_4 ,mem_patch14 
+0x2b24 005362 call lpm_write_gpio_wakeup 
+0x2b25 005363 fetch 1 ,mem_lpm_hibernate_switch 
+0x2b26 005364 store 1 ,mem_lpm_xtalcnt + 4 
+0x2b27 005365 fetch 1 ,mem_lpm_xtalcnt + 2 
+0x2b28 005366 set1 cold_wake ,pdata 
+0x2b29 005367 store 1 ,mem_lpm_xtalcnt + 2 
+:      005370 lpm_sleep:
+0x2b2a 005371 bpatch patch14_5 ,mem_patch14 
+0x2b2b 005372 call xtal_fast_wake 
+0x2b2c 005373 fetch 4 ,mem_sleep_counter_all 
+0x2b2d 005374 iadd temp ,pdata 
+0x2b2e 005375 store 4 ,mem_sleep_counter_all 
+0x2b2f 005376 call lpm_save_context 
+0x2b30 005377 fetch 5 ,mem_lpm_xtalcnt 
+0x2b31 005378 hstore 4 ,core_lpm_reg 
+0x2b32 005379 rshift32 pdata ,rega 
+0x2b33 005380 until null ,lpo_edge 
+0x2b34 005381 deposit clkn 
+0x2b35 005382 store 6 ,mem_sleep_clkn 
+0x2b36 005383 jam lpmreg_sel_ctrl2 ,core_lpm_wr 
+0x2b37 005384 until null ,lpo_edge 
+0x2b38 005385 until null ,lpo_edge 
+0x2b39 005386 deposit rega 
+0x2b3a 005387 hstore 1 ,core_lpm_isogate 
+0x2b3b 005388 jam lpmreg_sel_ctrl2 ,core_lpm_wr 
+:      005389 lpm_enter_sleep:
+0x2b3c 005390 until null ,lpo_edge 
+0x2b3d 005391 until null ,lpo_edge 
+0x2b3e 005392 hstoret 4 ,core_lpm_reg 
+0x2b3f 005393 jam lpmreg_sel_counter ,core_lpm_wr 
+0x2b40 005394 until null ,never 
+:      005399 lpm_recover_clk:
+0x2b41 005400 bpatch patch14_6 ,mem_patch14 
+0x2b42 005401 setarg 0 
+0x2b43 005402 copy auxcnt ,null 
+0x2b44 005403 branch lpm_recover_timeout ,zero 
+0x2b45 005404 hfetch 1 ,core_lpm_xtalcnt 
+0x2b46 005405 hfetcht 1 ,core_lpm_buckcnt 
+0x2b47 005406 isub temp ,null 
+0x2b48 005407 branch lpm_recover_xtal ,positive 
+0x2b49 005408 deposit temp 
+:      005409 lpm_recover_xtal:
+0x2b4a 005410 isub auxcnt ,pdata 
+0x2b4b 005411 increase 1 ,pdata 
+:      005412 lpm_recover_timeout:
+0x2b4c 005413 increase 8 ,pdata 
+0x2b4d 005414 until null ,lpo_edge 
+0x2b4e 005415 iadd lpo_time ,pdata 
+0x2b4f 005416 fetcht 4 ,mem_sleep_counter 
+0x2b50 005417 iadd temp ,pdata 
+0x2b51 005418 fetcht 3 ,mem_clks_per_lpo 
+0x2b52 005419 imul32 temp ,pdata 
+0x2b53 005420 rshift8 pdata ,pdata 
+0x2b54 005421 rshift4 pdata ,pdata 
+0x2b55 005422 increase param_lpm_fix ,pdata 
+0x2b56 005423 arg 3750 ,temp 
+0x2b57 005424 idiv temp 
+0x2b58 005425 call wait_div_end 
+0x2b59 005426 quotient pdata 
+0x2b5a 005427 lshift16 pdata ,pdata 
+0x2b5b 005428 remainder temp 
+0x2b5c 005429 ior temp ,pdata 
+0x2b5d 005430 fetcht 6 ,mem_sleep_clkn 
+0x2b5e 005431 call clk_add 
+0x2b5f 005432 copy temp ,clkn 
+0x2b60 005433 fetch 6 ,mem_context + coffset_clk_offset 
+0x2b61 005434 call calc_clke2 
+0x2b62 005435 deposit clke 
+0x2b63 005436 store 6 ,mem_pdatatemp 
+0x2b64 005437 deposit auxcnt 
+0x2b65 005438 istore 1 ,contw 
+0x2b66 005439 hfetch 1 ,core_gpio_in1 
+0x2b67 005440 or_into 0xf0 ,pdata 
+0x2b68 005441 istore 1 ,contw 
+0x2b69 005442 rtn 
+:      005444 lpm_dispatch:
+0x2b6a 005445 bpatch patch14_7 ,mem_patch14 
+0x2b6b 005446 call lpo_calibration 
+0x2b6c 005447 fetch 3 ,mem_clks_per_lpo 
+0x2b6d 005448 rtn blank 
+0x2b6e 005449 fetch 1 ,mem_lpm_mode 
+0x2b6f 005450 rtn blank 
+0x2b70 005451 fetch 1 ,mem_ssp_enable 
+0x2b71 005452 branch lpm_dispatch_next ,blank 
+0x2b72 005453 fetch 1 ,mem_sp_local_key_invalid 
+0x2b73 005454 rtn blank 
+:      005455 lpm_dispatch_next:
+0x2b74 005456 fetch 1 ,mem_le_sc_calc 
+0x2b75 005457 nrtn blank 
+0x2b76 005458 call lpm_check_wake_lock 
+0x2b77 005459 nrtn blank 
+0x2b78 005460 fetch 1 ,mem_context 
+0x2b79 005461 compare 3 ,pdata ,0x7 
+0x2b7a 005462 nbranch lpm_dispatch_unconn ,true 
+0x2b7b 005463 fetch 2 ,mem_context + coffset_tsniff 
+0x2b7c 005464 rtn blank 
+0x2b7d 005465 rtn wake 
+0x2b7e 005466 bpatch patch15_0 ,mem_patch15 
+:      005467 lpm_dispatch_next2:
+0x2b7f 005468 fetcht 1 ,mem_lpm_current_mult 
+0x2b80 005469 fetch 2 ,mem_context + coffset_tsniff 
+0x2b81 005470 imul32 temp ,pdata 
+0x2b82 005471 rshift4 temp ,temp 
+0x2b83 005472 rshift2 temp ,temp 
+0x2b84 005473 isub temp ,pdata 
+0x2b85 005474 fetcht 4 ,mem_context + coffset_sniff_anchor 
+0x2b86 005475 iadd temp ,pdata 
+0x2b87 005476 fetcht 1 ,mem_lpm_overhead 
+0x2b88 005477 isub temp ,pdata 
+0x2b89 005478 lshift16 pdata ,alarm 
+0x2b8a 005479 bpatch patch15_1 ,mem_patch15 
+0x2b8b 005480 fetch 2 ,mem_context + coffset_rx_window 
+0x2b8c 005481 rshift pdata ,pdata 
+0x2b8d 005482 call clk2bt 
+0x2b8e 005483 deposit alarm 
+0x2b8f 005484 call clk_diff 
+0x2b90 005485 copy clke ,temp 
+0x2b91 005486 call clk_diff_rt 
+0x2b92 005487 rtn user 
+:      005488 lpm_dispatch_sleep:
+0x2b93 005489 call clk2lpo 
+:      005490 lpm_dispatch_lpo:
+0x2b94 005491 bpatch patch15_2 ,mem_patch15 
+0x2b95 005492 fetch 1 ,mem_lpm_xtalcnt 
+0x2b96 005493 isub temp ,null 
+0x2b97 005494 branch lpm_clear_counter ,positive 
+0x2b98 005495 storet 4 ,mem_sleep_counter 
+0x2b99 005496 call app_will_enter_lpm 
+0x2b9a 005497 call l2cap_lpm_save_txbuf 
+0x2b9b 005498 fetcht 4 ,mem_sleep_counter 
+0x2b9c 005499 branch lpm_sleep 
+:      005501 lpm_dispatch_unconn:
+0x2b9d 005502 bpatch patch15_3 ,mem_patch15 
+0x2b9e 005503 fetch 1 ,mem_context 
+0x2b9f 005504 rtnbit1 state_inconn 
+0x2ba0 005505 rtnbit1 state_inpage 
+0x2ba1 005506 fetch 1 ,mem_ssp_enable 
+0x2ba2 005507 branch lpm_unconn_nossp ,blank 
+0x2ba3 005508 fetch 1 ,mem_sp_local_key_invalid 
+0x2ba4 005509 rtn blank 
+:      005510 lpm_unconn_nossp:
+0x2ba5 005511 bpatch patch15_4 ,mem_patch15 
+0x2ba6 005512 fetch 1 ,mem_le_adv_enable 
+0x2ba7 005513 nbranch lpm_unconn_cont ,blank 
+0x2ba8 005514 fetch 1 ,mem_scan_mode 
+0x2ba9 005515 rtn blank 
+:      005516 lpm_unconn_cont:
+0x2baa 005517 fetch 2 ,mem_lpm_interval 
+0x2bab 005518 rtn blank 
+:      005519 lpm_sleep_btclk:
+0x2bac 005520 fetcht 1 ,mem_lpm_overhead 
+0x2bad 005521 isub temp ,pdata 
+0x2bae 005522 arg 7500 ,temp 
+0x2baf 005523 imul32 temp ,pdata 
+0x2bb0 005524 branch lpm_dispatch_sleep 
+:      005526 lpm_set_mult:
+0x2bb1 005527 bpatch patch15_5 ,mem_patch15 
+0x2bb2 005528 disable wake 
+0x2bb3 005529 fetch 1 ,mem_state 
+0x2bb4 005530 rtnbit0 state_insniff 
+0x2bb5 005531 nbranch lpm_not_match ,match 
+0x2bb6 005532 call lpm_match 
+0x2bb7 005533 fetch 2 ,mem_rx_window_sniff 
+0x2bb8 005534 store 2 ,mem_rx_window 
+0x2bb9 005535 fetch 1 ,mem_arq 
+0x2bba 005536 bbit1 wack ,lpm_mult_short 
+0x2bbb 005537 bmark0 mark_lpm_mult_enable ,lpm_mult_short 
+0x2bbc 005538 call l2cap_malloc_is_fifo_empty 
+0x2bbd 005539 nbranch lpm_mult_short ,blank 
+0x2bbe 005540 fetch 1 ,mem_classic_bt_flag 
+0x2bbf 005541 bbit1 short_mult_flag ,lpm_mult_short 
+:      005542 lpm_mult_wait_timeout:
+0x2bc0 005543 jam 0 ,mem_lpm_current_mult 
+0x2bc1 005544 bmark0 mark_lpm_mult_enable ,lpm_mult_short 
+0x2bc2 005545 fetch 1 ,mem_lpm_mult_cnt 
+0x2bc3 005546 branch lpm_mult_long ,blank 
+0x2bc4 005547 increase -1 ,pdata 
+0x2bc5 005548 store 1 ,mem_lpm_mult_cnt 
+0x2bc6 005549 rtn 
+:      005552 classic_bt_set_mult_short_flag:
+0x2bc7 005553 arg short_mult_flag ,queue 
+0x2bc8 005554 branch classic_bluetooth_set_flag 
+:      005556 classic_bt_clr_mult_short_flag:
+0x2bc9 005557 arg short_mult_flag ,queue 
+0x2bca 005558 branch classic_bluetooth_clr_flag 
+:      005562 lpm_match:
+0x2bcb 005563 jam 0 ,mem_sniff_unint_lost 
+0x2bcc 005564 fetch 3 ,mem_sniff_rcv 
+0x2bcd 005565 increase 1 ,pdata 
+0x2bce 005566 store 3 ,mem_sniff_rcv 
+0x2bcf 005567 rtn 
+:      005569 lpm_not_match:
+0x2bd0 005570 bpatch patch15_6 ,mem_patch15 
+0x2bd1 005571 fetcht 2 ,mem_rx_window_sniff 
+0x2bd2 005572 rshift temp ,temp 
+0x2bd3 005573 fetch 2 ,mem_rx_window 
+0x2bd4 005574 iadd temp ,pdata 
+0x2bd5 005575 store 2 ,mem_rx_window 
+:      005576 lpm_lost:
+0x2bd6 005577 jam 0 ,mem_lpm_current_mult 
+0x2bd7 005578 fetch 3 ,mem_sniff_lost 
+0x2bd8 005579 increase 1 ,pdata 
+0x2bd9 005580 store 3 ,mem_sniff_lost 
+0x2bda 005581 fetch 1 ,mem_sniff_unint_lost 
+0x2bdb 005582 increase 1 ,pdata 
+0x2bdc 005583 store 1 ,mem_sniff_unint_lost 
+0x2bdd 005584 rtn 
+:      005586 lpm_mult_short:
+0x2bde 005587 jam 0 ,mem_lpm_current_mult 
+0x2bdf 005588 fetch 1 ,mem_lpm_mult_timeout 
+0x2be0 005589 store 1 ,mem_lpm_mult_cnt 
+0x2be1 005590 rtn 
+:      005592 lpm_mult_long:
+0x2be2 005593 fetcht 1 ,mem_lpm_mult 
+0x2be3 005594 storet 1 ,mem_lpm_current_mult 
+0x2be4 005595 rtn 
+:      005597 lpm_cal_xtal_startup:
+0x2be5 005598 bpatch patch15_7 ,mem_patch15 
+0x2be6 005599 fetch 1 ,mem_lpm_xtalcnt 
+0x2be7 005600 nrtn blank 
+0x2be8 005601 jam clksel_rc ,core_clksel 
+0x2be9 005602 setarg 0xf0c 
+0x2bea 005603 call lpm_write_config 
+0x2beb 005604 setarg 200000 
+0x2bec 005605 call sleep 
+0x2bed 005606 until null ,lpo_edge 
+0x2bee 005607 copy lpo_time ,alarm 
+0x2bef 005608 call xtal_fast_wake 
+0x2bf0 005609 jam clksel_xtal ,core_clksel 
+0x2bf1 005610 nop 10 
+0x2bf2 005611 until null ,lpo_edge 
+0x2bf3 005612 deposit lpo_time 
+0x2bf4 005613 isub alarm ,pdata 
+0x2bf5 005614 increase 0x30 ,pdata 
+0x2bf6 005615 arg 0xff ,temp 
+0x2bf7 005616 call ceiling 
+0x2bf8 005617 store 1 ,mem_lpm_xtalcnt 
+0x2bf9 005618 nop 30000 
+0x2bfa 005619 nop 30000 
+0x2bfb 005620 nop 30000 
+0x2bfc 005621 rtn 
+:      005623 lpm_cal_xtal_startup_by_snooze:
+0x2bfd 005624 fetch 1 ,mem_lpm_xtalcnt 
+0x2bfe 005625 nrtn blank 
+0x2bff 005626 jam 0xff ,core_xtal_stable_time 
+0x2c00 005627 jam clksel_rc ,core_clksel 
+0x2c01 005628 call xtal_fast_wake 
+0x2c02 005629 setarg 1000 
+0x2c03 005630 iadd lpo_time ,alarm 
+0x2c04 005631 snooze 
+0x2c05 005632 deposit lpo_time 
+0x2c06 005633 nop 12000 
+0x2c07 005634 nop 12000 
+0x2c08 005635 nop 12000 
+0x2c09 005636 nop 12000 
+0x2c0a 005637 nop 12000 
+0x2c0b 005638 nop 12000 
+0x2c0c 005639 nop 12000 
+0x2c0d 005640 nop 12000 
+0x2c0e 005641 nop 12000 
+0x2c0f 005642 isub alarm ,pdata 
+0x2c10 005643 add pdata ,0x30 ,pdata 
+0x2c11 005644 arg 0xff ,temp 
+0x2c12 005645 call ceiling 
+0x2c13 005646 store 1 ,mem_lpm_xtalcnt 
+0x2c14 005647 nop 30000 
+0x2c15 005648 nop 30000 
+0x2c16 005649 nop 30000 
+0x2c17 005650 rtn 
+:      005655 lpm_write_config:
+0x2c18 005656 arg 0xfff ,contw 
+0x2c19 005657 iand contw ,contw 
+0x2c1a 005658 fetch 1 ,mem_lpm_config 
+0x2c1b 005659 and_into 0xf0 ,pdata 
+0x2c1c 005660 lshift8 pdata ,pdata 
+0x2c1d 005661 ior contw ,pdata 
+0x2c1e 005662 hstore 2 ,core_lpm_reg 
+0x2c1f 005663 ifetch 2 ,contr 
+0x2c20 005664 istore 2 ,contw 
+:      005666 lpm_write_ctrl:
+0x2c21 005667 setarg lpmreg_sel_ctrl 
+0x2c22 005668 branch lpm_write 
+:      005670 lpm_write_ctrl2:
+0x2c23 005671 setarg lpmreg_sel_ctrl2 
+:      005672 lpm_write:
+0x2c24 005673 until null ,lpo_edge 
+0x2c25 005674 hstore 1 ,core_lpm_wr 
+0x2c26 005675 until null ,lpo_edge 
+0x2c27 005676 until null ,lpo_edge 
+0x2c28 005677 rtn 
+:      005680 lpm_write_gpio_wakeup:
+0x2c29 005681 bpatch patch16_0 ,mem_patch16 
+0x2c2a 005682 fetch 4 ,mem_gpio_wakeup_low 
+0x2c2b 005683 hstore 4 ,core_lpm_reg 
+0x2c2c 005684 setarg lpmreg_sel_gpiolow 
+0x2c2d 005685 call lpm_write 
+0x2c2e 005686 fetch 4 ,mem_gpio_wakeup_high 
+0x2c2f 005687 hstore 4 ,core_lpm_reg 
+0x2c30 005688 setarg lpmreg_sel_gpiohigh 
+0x2c31 005689 branch lpm_write 
+:      005691 lpm_get_wake_lock:
+0x2c32 005692 fetch 2 ,mem_lpm_wake_lock 
+0x2c33 005693 qset1 pdata 
+0x2c34 005694 store 2 ,mem_lpm_wake_lock 
+0x2c35 005695 rtn 
+:      005697 lpm_put_wake_lock:
+0x2c36 005698 fetch 2 ,mem_lpm_wake_lock 
+0x2c37 005699 qset0 pdata 
+0x2c38 005700 store 2 ,mem_lpm_wake_lock 
+0x2c39 005701 rtn 
+:      005705 lpm_check_wake_lock:
+0x2c3a 005706 bpatch patch16_1 ,mem_patch16 
+0x2c3b 005707 call app_check_wake_lock 
+0x2c3c 005708 fetch 2 ,mem_lpm_wake_lock 
+0x2c3d 005709 copy pdata ,rega 
+0x2c3e 005710 fetch 1 ,mem_state_map 
+0x2c3f 005711 isolate1 smap_rxlmp ,pdata 
+0x2c40 005712 setflag true ,wake_lock_lmp_rx ,rega 
+0x2c41 005713 fetch 1 ,mem_lmo_opcode1 
+0x2c42 005714 fetcht 1 ,mem_lmo_opcode2 
+0x2c43 005715 iadd temp ,pdata 
+0x2c44 005716 fetcht 1 ,mem_lmp_to_send 
+0x2c45 005717 iadd temp ,pdata 
+0x2c46 005718 nsetflag blank ,wake_lock_lmp_tx ,rega 
+0x2c47 005719 fetch 1 ,mem_le_tx_buff_used 
+0x2c48 005720 nsetflag blank ,wake_lock_ble_tx ,rega 
+0x2c49 005721 fetch 2 ,mem_l2cap_rxbuff1_len 
+0x2c4a 005722 fetcht 2 ,mem_l2cap_rxbuff2_len 
+0x2c4b 005723 iadd temp ,pdata 
+0x2c4c 005724 nsetflag blank ,wake_lock_l2cap_rx ,rega 
+0x2c4d 005725 fetch util_fifo_len ,mem_ipc_fifo_bt2c51 
+0x2c4e 005726 nsetflag blank ,wake_lock_ipc_bt2c51 ,rega 
+0x2c4f 005727 fetch util_fifo_len ,mem_ipc_fifo_c512bt 
+0x2c50 005728 nsetflag blank ,wake_lock_ipc_c512bt ,rega 
+0x2c51 005729 fetch 1 ,mem_hci_cmd 
+0x2c52 005730 nsetflag blank ,wake_lock_cmd ,rega 
+0x2c53 005731 fetch 1 ,mem_device_option 
+0x2c54 005732 compare dvc_op_module ,pdata ,0xff 
+0x2c55 005733 call lpm_uart_wake_lock ,true 
+0x2c56 005734 setarg -8 
+0x2c57 005735 iand rega ,rega 
+0x2c58 005736 copy rega ,pdata 
+0x2c59 005737 store 2 ,mem_lpm_wake_lock 
+0x2c5a 005738 rtn 
+:      005740 lpm_uart_wake_lock:
+0x2c5b 005741 hfetch 2 ,core_uart_rxitems 
+0x2c5c 005742 nsetflag blank ,wake_lock_uart_rx ,rega 
+0x2c5d 005743 hfetch 2 ,core_uart_txitems 
+0x2c5e 005744 nsetflag blank ,wake_lock_uart_tx ,rega 
+0x2c5f 005745 rtn 
+:      005747 lpm_shut_down:
+0x2c60 005748 hfetch 4 ,core_lpm_ctrl 
+0x2c61 005749 set0 27 ,pdata 
+0x2c62 005750 hstore 4 ,core_lpm_reg 
+0x2c63 005751 call lpm_write_ctrl 
+0x2c64 005752 branch assert 
+:      005754 lpm_disable_exen_output:
+0x2c65 005755 hfetch 4 ,core_lpm_xtalcnt 
+0x2c66 005756 set0 20 ,pdata 
+0x2c67 005757 hstore 4 ,core_lpm_reg 
+0x2c68 005758 branch lpm_write_ctrl2 
+:      005760 check_bt_disabled:
+0x2c69 005761 fetch 2 ,mem_chip_functions 
+0x2c6a 005762 bbit1 bt_disabled ,assert 
+0x2c6b 005763 rtn 
+:      005764 check_ble_disabled:
+0x2c6c 005765 fetch 2 ,mem_chip_functions 
+0x2c6d 005766 bbit1 ble_disabled ,assert 
+0x2c6e 005767 rtn 
+:      005768 check_module_disabled:
+0x2c6f 005769 fetch 2 ,mem_chip_functions 
+0x2c70 005770 bbit1 module_disable ,assert 
+0x2c71 005771 rtn 
+:      005832 g24_dispatch:
+0x2c72 005833 bpatch patch16_2 ,mem_patch16 
+0x2c73 005834 call g24_head_ptr2regc 
+0x2c74 005835 add regc ,offset_24g_mode ,regb 
+0x2c75 005836 ifetch 1 ,regb 
+0x2c76 005838 rtneq disable_24g 
+0x2c77 005839 beq tx_24g ,g24_transmit_process 
+0x2c78 005840 beq rx_24g ,g24_receive_process 
+0x2c79 005841 rtn 
+:      005843 g24_head_ptr2regc:
+0x2c7a 005844 fetcht 2 ,mem_24g_head_ptr 
+0x2c7b 005845 copy temp ,regc 
+0x2c7c 005846 rtn 
+:      005848 g24_receive_process_init:
+0x2c7d 005849 call g24_receive_init 
+0x2c7e 005850 branch g24_mode_switch_init 
+:      005852 g24_receive_process:
+0x2c7f 005853 call g24_mode_switch 
+0x2c80 005854 call g24_dongle_work_mode_auto 
+0x2c81 005855 call g24_dongle_bind_mode_auto 
+0x2c82 005856 branch g24_dongle_search_mode_auto 
+:      005859 g24_pair_init:
+0x2c83 005862 call g24_set0_mem_pid 
+0x2c84 005863 setarg g24_pair_ch 
+0x2c85 005864 call g24_store_mem_ch 
+0x2c86 005865 call g24_store_mem_pair_txpower 
+0x2c87 005868 add regc ,offset_24g_paring_addr ,rega 
+0x2c88 005869 ifetch 4 ,rega 
+0x2c89 005870 branch g24_store_mem_addr 
+:      005872 g24_ch:
+0x2c8a 005873 call g24_head_ptr2regc 
+0x2c8b 005874 add regc ,offset_24g_current_ch_number ,regb 
+0x2c8c 005875 ifetcht 1 ,regb 
+0x2c8d 005877 call g24_ch_temp_incre_size4 
+0x2c8e 005878 add regc ,offset_24g_current_ch_number ,contw 
+0x2c8f 005880 branch g24_contw_istoret_1byte 
+:      005882 g24_ch_temp_incre_size4:
+0x2c90 005883 call g24_ch_calc 
+0x2c91 005884 increase 1 ,temp 
+0x2c92 005885 and_into 3 ,temp 
+0x2c93 005886 rtn 
+:      005888 g24_ch_calc:
+0x2c94 005889 add regc ,offset_24g_addr ,regb 
+0x2c95 005890 ifetch 1 ,regb 
+0x2c96 005892 and_into 0x03 ,pdata 
+0x2c97 005893 mul32 pdata ,4 ,rega 
+0x2c98 005894 add regc ,offset_24g_ch_map1 ,pdata 
+0x2c99 005896 iadd rega ,pdata 
+0x2c9a 005897 iadd temp ,contr 
+0x2c9b 005898 ifetch 1 ,contr 
+0x2c9c 005900 branch g24_store_mem_ch 
+:      005902 g24_set_device_addr:
+0x2c9d 005903 call g24_store_mem_tx_power_temp 
+0x2c9e 005904 call otp_enable_chgpump 
+0x2c9f 005905 setarg 0x7e2 
+0x2ca0 005906 arg mem_temp ,rega 
+0x2ca1 005907 arg 4 ,temp 
+0x2ca2 005908 call otpd_read_data 
+0x2ca3 005909 call otp_disable_chgpump 
+0x2ca4 005910 fetch 4 ,mem_temp 
+0x2ca5 005911 call g24_store_mem_device_addr 
+0x2ca6 005913 nrtn blank 
+0x2ca7 005914 fetch 4 ,mem_lap 
+0x2ca8 005916 branch g24_store_mem_device_addr 
+:      005918 g24_transmit_rf_sta_init:
+0x2ca9 005919 call g24_set1_mem_rf_last_sta 
+0x2caa 005921 setarg 0 
+0x2cab 005922 call g24_store_mem_sync_cnt 
+:      005924 g24_transmit_rf_ctrl_clear:
+0x2cac 005925 call g24_fetch_mem_data_type 
+0x2cad 005927 and_into bits_data ,pdata 
+0x2cae 005929 branch g24_store_mem_data_type 
+:      005931 g24_hop_ch_enable:
+0x2caf 005932 call g24_fetch_mem_data_type 
+0x2cb0 005934 set1 bit_hop ,pdata 
+0x2cb1 005935 call g24_store_mem_data_type 
+0x2cb2 005938 branch g24_store_mem_txpayload 
+:      005940 g24_transmit_hop_pac_fail:
+0x2cb3 005941 call g24_fetch_mem_rf_work_stage 
+0x2cb4 005943 beq 1 ,g24_transmit_hop_pac_fail_wo_hop 
+0x2cb5 005944 beq 2 ,g24_transmit_hop_pac_fail_hop_stage2 
+0x2cb6 005945 rtn 
+:      005947 g24_transmit_hop_pac_fail_wo_hop:
+0x2cb7 005948 call g24_set2_mem_sync_cnt 
+:      005950 g24_transmit_hop_pac_fail_stage1:
+0x2cb8 005951 add regc ,offset_24g_hop_pac_retry ,contw 
+0x2cb9 005952 call g24_mem_set0 
+0x2cba 005954 call g24_store_mem_rf_last_sta 
+0x2cbb 005956 branch g24_transmit_rf_ctrl_clear 
+:      005958 g24_transmit_hop_pac_fail_hop_stage2:
+0x2cbc 005959 call g24_set0_mem_rf_hop_ch 
+0x2cbd 005961 branch g24_transmit_hop_pac_fail_stage1 
+:      005963 g24_transmit_pac_fail_hop_stage3:
+0x2cbe 005964 add regc ,offset_24g_txfail_cnt ,rega 
+0x2cbf 005965 ifetch 1 ,rega 
+0x2cc0 005967 increase 1 ,pdata 
+0x2cc1 005968 add regc ,offset_24g_txfail_cnt ,contw 
+0x2cc2 005969 istore 1 ,contw 
+0x2cc3 005971 beq 0x20 ,g24_tx_attempt_fail 
+0x2cc4 005972 call g24_fetch_mem_rf_hop_ch 
+0x2cc5 005974 beq 1 ,g24_rf_hop_fastly 
+0x2cc6 005975 setarg 1 
+0x2cc7 005976 call g24_store_mem_rf_hop_ch 
+:      005978 g24_rf_hop_attemp_again:
+0x2cc8 005979 call g24_fetch_mem_rf_hop_ch 
+0x2cc9 005981 bne 1 ,g24_transmit_rf_ctrl_clear 
+:      005982 g24_rf_hop_fastly:
+0x2cca 005983 add regc ,offset_24g_hop_fastly_cnt ,rega 
+0x2ccb 005984 ifetch 1 ,rega 
+0x2ccc 005986 increase 1 ,pdata 
+0x2ccd 005987 call g24_store_mem_hop_fastly_cnt 
+0x2cce 005989 beq 4 ,g24_rf_hop_fastly_exit 
+0x2ccf 005990 call g24_ch 
+0x2cd0 005991 call g24_set2_mem_max_retry 
+0x2cd1 005993 branch g24_transmit_packet 
+:      005995 g24_rf_hop_fastly_exit:
+0x2cd2 005996 call g24_set0_mem_hop_fastly_cnt 
+0x2cd3 005998 branch g24_transmit_rf_ctrl_clear 
+:      006000 g24_set0_mem_hop_fastly_cnt:
+0x2cd4 006001 setarg 0 
+:      006002 g24_store_mem_hop_fastly_cnt:
+0x2cd5 006003 add regc ,offset_24g_hop_fastly_cnt ,contw 
+0x2cd6 006004 branch g24_contw_istore_1byte 
+:      006006 g24_transmit_hop_pac_succ_wo_hop:
+0x2cd7 006007 call g24_set2_mem_sync_cnt 
+:      006009 g24_transmit_hop_pac_succ:
+0x2cd8 006010 call g24_set0_mem_rf_hop_ch 
+0x2cd9 006012 call g24_set1_mem_rf_last_sta 
+0x2cda 006014 branch g24_transmit_rf_ctrl_clear 
+:      006016 g24_transmit_succ_rf_config:
+0x2cdb 006017 call g24_fetch_mem_rf_work_stage 
+0x2cdc 006019 beq 3 ,g24_transmit_hop_pac_succ 
+0x2cdd 006020 call g24_fetch_mem_data_type 
+0x2cde 006022 isolate0 bit_hop ,pdata 
+0x2cdf 006023 branch g24_transmit_rf_sta_init ,true 
+0x2ce0 006024 call g24_fetch_mem_rf_work_stage 
+0x2ce1 006026 beq 1 ,g24_transmit_hop_pac_succ_wo_hop 
+0x2ce2 006027 beq 2 ,g24_transmit_hop_pac_succ 
+0x2ce3 006028 rtn 
+:      006030 g24_rf_sta_check:
+0x2ce4 006031 call g24_fetch_mem_pairing_sm 
+0x2ce5 006033 rtnne state_24g_pairing_success 
+0x2ce6 006034 call g24_rf_laststa_synccnt_check 
+0x2ce7 006035 ncall g24_rf_sync_cnt_check ,user2 
+0x2ce8 006036 rtn 
+:      006038 g24_rf_laststa_synccnt_check:
+0x2ce9 006039 disable user2 
+0x2cea 006040 add regc ,offset_24g_rf_last_sta ,rega 
+0x2ceb 006041 ifetch 1 ,rega 
+0x2cec 006043 rtnne 1 
+0x2ced 006044 add regc ,offset_24g_sync_cnt ,rega 
+0x2cee 006045 ifetch 1 ,rega 
+0x2cef 006047 rtnne 0 
+0x2cf0 006048 setarg 1 
+0x2cf1 006049 call g24_store_mem_rf_work_stage 
+0x2cf2 006051 call g24_set4_mem_max_retry 
+0x2cf3 006053 branch enable_user2 
+:      006055 g24_rf_sync_cnt_check:
+0x2cf4 006056 add regc ,offset_24g_sync_cnt ,rega 
+0x2cf5 006057 ifetch 1 ,rega 
+0x2cf6 006059 branch g24_rf_hop_attemp ,blank 
+0x2cf7 006060 increase -1 ,pdata 
+0x2cf8 006061 call g24_store_mem_sync_cnt 
+0x2cf9 006063 setarg 2 
+0x2cfa 006064 call g24_store_mem_rf_work_stage 
+0x2cfb 006066 call g24_ch 
+0x2cfc 006068 branch g24_set4_mem_max_retry 
+:      006070 g24_store_mem_rf_work_stage:
+0x2cfd 006071 add regc ,offset_24g_rf_work_stage ,contw 
+0x2cfe 006072 branch g24_contw_istore_1byte 
+:      006075 g24_rf_hop_attemp:
+0x2cff 006076 setarg 3 
+0x2d00 006077 call g24_store_mem_rf_work_stage 
+0x2d01 006079 call g24_fetch_mem_rf_hop_ch 
+0x2d02 006081 nbranch g24_rf_hop_attemp_again ,blank 
+0x2d03 006082 call g24_ch 
+:      006084 g24_set2_mem_max_retry:
+0x2d04 006085 setarg 2 
+0x2d05 006086 branch g24_store_mem_max_retry 
+:      006088 g24_transmit_process:
+0x2d06 006089 rtnmark0 mark_24g 
+0x2d07 006090 set1 mark_24g_conext ,mark 
+0x2d08 006091 bpatch patch16_3 ,mem_patch16 
+0x2d09 006092 add regc ,offset_24g_tx_without_int ,rega 
+0x2d0a 006093 ifetch 1 ,rega 
+0x2d0b 006095 beq 1 ,g24_transmit_without_int 
+0x2d0c 006096 call g24_timer_check 
+0x2d0d 006097 nbranch g24_transmit_exit ,user 
+0x2d0e 006098 call g24_interval_calibrate 
+:      006099 g24_transmit_without_int:
+0x2d0f 006100 add regc ,offset_24g_tx_without_int ,contw 
+0x2d10 006101 call g24_mem_set0 
+0x2d11 006103 call g24_txdata_prep 
+0x2d12 006104 nbranch g24_enter_lpm ,user 
+0x2d13 006105 call g24_rf_sta_check 
+:      006106 g24_transmit_start:
+0x2d14 006107 call g24_transmit_packet 
+0x2d15 006108 call g24_power_ctrl 
+:      006109 g24_transmit_exit:
+0x2d16 006110 set0 mark_24g_conext ,mark 
+0x2d17 006111 rtn 
+:      006113 g24_timer_timeout:
+0x2d18 006114 rtn zero 
+0x2d19 006115 set1 28 ,pdata 
+0x2d1a 006116 rtn 
+:      006118 g24_interval_calibrate:
+0x2d1b 006119 add regc ,offset_24g_pac_index ,rega 
+0x2d1c 006120 ifetch 1 ,rega 
+0x2d1d 006122 increase 1 ,pdata 
+0x2d1e 006123 add regc ,offset_24g_pac_index ,contw 
+0x2d1f 006124 istore 1 ,contw 
+0x2d20 006126 beq 4 ,g24_interval_max 
+0x2d21 006127 beq 5 ,g24_interval_min 
+0x2d22 006128 rtn 
+:      006129 g24_interval_max:
+0x2d23 006130 add regc ,offset_24g_interval_max ,rega 
+0x2d24 006131 ifetch 1 ,rega 
+:      006133 g24_interval_update:
+0x2d25 006135 add regc ,offset_24g_interval ,contw 
+0x2d26 006136 branch g24_contw_istore_1byte 
+:      006138 g24_interval_min:
+0x2d27 006139 add regc ,offset_24g_pac_index ,contw 
+0x2d28 006140 call g24_mem_set0 
+0x2d29 006142 add regc ,offset_24g_interval_min ,rega 
+0x2d2a 006143 ifetch 1 ,rega 
+0x2d2b 006145 branch g24_interval_update 
+:      006147 g24_txdata_prep:
+0x2d2c 006148 call g24_fetch_mem_pairing_sm 
+0x2d2d 006150 bne state_24g_pairing_success ,g24_pairing_sm 
+0x2d2e 006151 bpatch patch16_4 ,mem_patch16 
+0x2d2f 006152 call g24_package_data 
+0x2d30 006153 nbranch g24_txdata_last_pac ,user 
+0x2d31 006154 call g24_transmit_prep 
+0x2d32 006155 call g24_power_ctrl_pac_incrs 
+:      006156 g24_txdata_enable_tx:
+0x2d33 006158 setarg ensure_on_24g 
+:      006159 g24_store_mem_ensure:
+0x2d34 006160 add regc ,offset_24g_ensure ,contw 
+0x2d35 006161 branch g24_contw_istore_1byte 
+:      006163 g24_txdata_last_pac:
+0x2d36 006164 add regc ,offset_24g_ensure ,rega 
+0x2d37 006165 ifetch 1 ,rega 
+0x2d38 006167 beq ensure_on_24g ,enable_user 
+0x2d39 006168 rtn 
+:      006170 g24_package_data:
+0x2d3a 006172 add regc ,offset_24g_cb_data ,temp 
+0x2d3b 006173 ifetch 2 ,temp 
+0x2d3c 006175 call callback_func 
+0x2d3d 006176 nrtn user 
+0x2d3e 006177 copy rega ,pdata 
+0x2d3f 006178 store 1 ,mem_rega 
+0x2d40 006179 add regc ,offset_24g_abort_pac ,contw 
+0x2d41 006180 call g24_mem_set0 
+0x2d42 006182 call g24_transmit_rf_ctrl_clear 
+0x2d43 006183 store 1 ,mem_24g_common_temp 
+0x2d44 006184 fetch 1 ,mem_rega 
+0x2d45 006185 copy pdata ,rega 
+0x2d46 006186 add rega ,1 ,temp 
+0x2d47 006187 arg mem_24g_common_temp + 1 ,contw 
+0x2d48 006188 copy rega ,loopcnt 
+0x2d49 006189 copy regb ,contr 
+0x2d4a 006190 call memcpy 
+0x2d4b 006191 arg mem_24g_common_temp ,rega 
+:      006192 g24_put_data_in_buff:
+0x2d4c 006193 rtnmark0 mark_24g_conext 
+0x2d4d 006194 add regc ,offset_24g_datalen ,contw 
+0x2d4e 006195 istoret 1 ,contw 
+0x2d4f 006197 copy temp ,loopcnt 
+0x2d50 006198 add regc ,offset_24g_txbuf ,contw 
+0x2d51 006200 copy rega ,contr 
+0x2d52 006201 branch memcpy 
+:      006203 g24_transmit_prep:
+0x2d53 006205 add regc ,offset_24g_datalen ,rega 
+0x2d54 006206 ifetch 1 ,rega 
+0x2d55 006208 increase 2 ,pdata 
+0x2d56 006209 add regc ,offset_24g_txlen ,contw 
+0x2d57 006210 istore 1 ,contw 
+0x2d58 006213 call g24_fetch_mem_data_type 
+0x2d59 006215 call g24_store_mem_txpayload 
+0x2d5a 006218 add regc ,offset_24g_datalen ,rega 
+0x2d5b 006219 ifetch 1 ,rega 
+0x2d5c 006221 lshift3 pdata ,pdata 
+0x2d5d 006222 add regc ,offset_24g_pid ,rega 
+0x2d5e 006223 ifetcht 1 ,rega 
+0x2d5f 006225 and temp ,0x03 ,temp 
+0x2d60 006226 lshift temp ,temp 
+0x2d61 006227 ior temp ,pdata 
+0x2d62 006228 add regc ,offset_24g_no_ack ,rega 
+0x2d63 006229 ifetcht 1 ,rega 
+0x2d64 006231 iadd temp ,pdata 
+0x2d65 006232 istore 1 ,contw 
+0x2d66 006234 add regc ,offset_24g_datalen ,rega 
+0x2d67 006235 ifetch 1 ,rega 
+0x2d68 006237 iforce loopcnt 
+0x2d69 006238 add regc ,offset_24g_txbuf ,contr 
+0x2d6a 006240 branch memcpy 
+:      006242 g24_send_abort_packet:
+0x2d6b 006243 call g24_set1_mem_abort_pac 
+0x2d6c 006245 call g24_set0_mem_rf_hop_ch 
+0x2d6d 006247 call g24_power_ctrl_reinit 
+0x2d6e 006248 call g24_transmit_rf_ctrl_clear 
+0x2d6f 006249 store 1 ,mem_24g_common_temp 
+0x2d70 006250 call g24_put_data_in_buff_pre 
+0x2d71 006251 call g24_fetch_mem_data_type 
+0x2d72 006253 set1 bit_abort ,pdata 
+0x2d73 006254 call g24_store_mem_data_type 
+0x2d74 006256 call g24_transmit_prep 
+0x2d75 006257 call g24_txdata_enable_tx 
+0x2d76 006258 branch g24_transmit_start 
+:      006260 g24_put_data_in_buff_pre:
+0x2d77 006261 store 1 ,mem_24g_common_temp + 1 
+0x2d78 006262 call g24_fetch_mem_device_addr 
+0x2d79 006264 store 4 ,mem_24g_common_temp + 2 
+0x2d7a 006265 arg 6 ,temp 
+0x2d7b 006266 arg mem_24g_common_temp ,rega 
+0x2d7c 006267 branch g24_put_data_in_buff 
+:      006269 g24_enter_lpm:
+0x2d7d 006270 add regc ,offset_24g_abort_pac ,rega 
+0x2d7e 006271 ifetch 1 ,rega 
+0x2d7f 006273 branch g24_send_abort_packet ,blank 
+:      006274 g24_enter_lpm_prepare:
+0x2d80 006276 add regc ,offset_24g_cb_lpm_prepare ,rega 
+0x2d81 006277 ifetch 2 ,rega 
+0x2d82 006279 branch callback_func 
+:      006281 g24_lpm_long_sleep:
+0x2d83 006282 call g24_head_ptr2regc 
+0x2d84 006284 call lpo_calibration 
+0x2d85 006285 fetch 3 ,mem_clks_per_lpo 
+0x2d86 006286 rtn blank 
+0x2d87 006287 add regc ,offset_24g_cb_lpm_before ,temp 
+0x2d88 006288 ifetch 2 ,temp 
+0x2d89 006290 call callback_func 
+0x2d8a 006291 add regc ,offset_24g_enter_hibernate ,temp 
+0x2d8b 006292 ifetch 8 ,temp 
+0x2d8c 006293 call clk2lpo 
+0x2d8d 006294 storet 4 ,mem_sleep_counter 
+0x2d8e 006295 branch lpm_sleep 
+:      006297 g24_transmit_packet:
+0x2d8f 006298 call g24_head_ptr2regc 
+0x2d90 006299 add regc ,offset_24g_retry ,contw 
+0x2d91 006300 call g24_mem_set0 
+:      006302 g24_transmit_loop:
+0x2d92 006303 call g24_transmit_receive_ack 
+0x2d93 006304 nbranch g24_retransmit ,sync 
+0x2d94 006305 nbranch g24_retransmit ,user3 
+0x2d95 006306 call g24_ackpayload_parse 
+0x2d96 006307 call g24_power_ctrl_ack_incrs 
+:      006308 g24_transmit_next_packet:
+0x2d97 006309 call g24_head_ptr2regc 
+0x2d98 006310 add regc ,offset_24g_pid ,rega 
+0x2d99 006311 ifetch 1 ,rega 
+0x2d9a 006313 increase 1 ,pdata 
+0x2d9b 006314 call g24_store_mem_pid 
+0x2d9c 006316 call g24_fetch_mem_pairing_sm 
+0x2d9d 006318 bne state_24g_pairing_success ,g24_paring_mode 
+0x2d9e 006319 call g24_transmit_succ_rf_config 
+:      006320 g24_transmit_abandon:
+0x2d9f 006321 setarg 0 
+0x2da0 006322 add regc ,offset_24g_txfail_cnt ,contw 
+0x2da1 006323 istore 2 ,contw 
+0x2da2 006327 setarg ensure_off_24g 
+0x2da3 006328 branch g24_store_mem_ensure 
+:      006331 g24_transmit_receive_ack:
+0x2da4 006332 disable user3 
+0x2da5 006333 call g24_transmit 
+0x2da6 006334 call g24_head_ptr2regc 
+0x2da7 006335 add regc ,offset_24g_no_ack ,rega 
+0x2da8 006336 ifetch 1 ,rega 
+0x2da9 006338 beq no_ack_24g ,g24_transmit_no_ack 
+0x2daa 006339 call g24_receive_packet 
+0x2dab 006340 branch g24_end_of_packet 
+:      006341 g24_transmit_no_ack:
+0x2dac 006342 call g24_end_of_packet 
+0x2dad 006343 branch g24_transmit_next_packet 
+:      006346 g24_retransmit:
+0x2dae 006347 bpatch patch16_5 ,mem_patch16 
+0x2daf 006348 add regc ,offset_24g_get_ack_fail ,rega 
+0x2db0 006349 ifetch 1 ,rega 
+0x2db1 006351 increase 1 ,pdata 
+0x2db2 006352 add regc ,offset_24g_get_ack_fail ,contw 
+0x2db3 006353 istore 1 ,contw 
+0x2db4 006355 call g24_fetch_mem_pairing_sm 
+0x2db5 006357 bne state_24g_pairing_success ,g24_tx_paring_retry 
+0x2db6 006358 add regc ,offset_24g_retry ,rega 
+0x2db7 006359 ifetcht 1 ,rega 
+0x2db8 006361 increase 1 ,temp 
+0x2db9 006362 add regc ,offset_24g_retry ,contw 
+0x2dba 006363 istoret 1 ,contw 
+0x2dbb 006365 add regc ,offset_24g_max_retry ,rega 
+0x2dbc 006366 ifetch 1 ,rega 
+0x2dbd 006368 isub temp ,pdata 
+0x2dbe 006369 nbranch g24_transmit_loop ,blank 
+0x2dbf 006370 bpatch patch16_6 ,mem_patch16 
+0x2dc0 006371 call g24_fetch_mem_rf_work_stage 
+0x2dc1 006373 beq 3 ,g24_transmit_pac_fail_hop_stage3 
+0x2dc2 006374 add regc ,offset_24g_hop_pac_retry ,rega 
+0x2dc3 006375 ifetch 1 ,rega 
+0x2dc4 006377 increase 1 ,pdata 
+0x2dc5 006378 add regc ,offset_24g_hop_pac_retry ,contw 
+0x2dc6 006379 istore 1 ,contw 
+0x2dc7 006381 beq 2 ,g24_transmit_hop_pac_fail 
+0x2dc8 006382 call g24_hop_ch_enable 
+0x2dc9 006383 setarg 1 
+0x2dca 006384 call g24_store_mem_max_retry 
+0x2dcb 006386 branch g24_transmit_packet 
+:      006388 g24_tx_paring_retry:
+0x2dcc 006389 add regc ,offset_24g_get_ack_fail ,rega 
+0x2dcd 006390 ifetch 1 ,rega 
+0x2dce 006392 rtnne 0xff 
+0x2dcf 006393 add regc ,offset_24g_get_ack_fail ,contw 
+0x2dd0 006394 call g24_mem_set0 
+0x2dd1 006396 branch g24_stop_24g_mode 
+:      006398 g24_tx_attempt_fail:
+0x2dd2 006399 add regc ,offset_24g_txfail_cnt ,contw 
+0x2dd3 006400 call g24_mem_set0 
+:      006402 g24_stop_24g_mode:
+0x2dd4 006403 jam bt_evt_24g_attempt_fail ,mem_fifo_temp 
+0x2dd5 006404 branch ui_ipc_send_event 
+:      006406 g24_ackpayload_parse:
+0x2dd6 006407 call g24_read_len_pid_crc 
+0x2dd7 006408 add regc ,offset_24g_rxdata_length ,rega 
+0x2dd8 006409 ifetch 1 ,rega 
+0x2dd9 006411 rtn blank 
+0x2dda 006412 iforce loopcnt 
+0x2ddb 006413 add regc ,offset_24g_rxbuf_add2 ,contr 
+0x2ddc 006415 add regc ,offset_24g_rxpayload ,contw 
+0x2ddd 006417 branch memcpy 
+:      006420 g24_read_len_pid_crc:
+0x2dde 006422 call g24_fetch_mem_rxbuf_add1 
+0x2ddf 006424 rshift3 pdata ,pdata 
+0x2de0 006425 add regc ,offset_24g_rxdata_length ,contw 
+0x2de1 006426 istore 1 ,contw 
+0x2de2 006429 increase 1 ,pdata 
+0x2de3 006430 add regc ,offset_24g_rxbuf_add1 ,contr 
+0x2de4 006432 iadd contr ,contr 
+0x2de5 006433 ifetch 3 ,contr 
+0x2de6 006434 add regc ,offset_24g_sta_crc ,contw 
+0x2de7 006435 istore 3 ,contw 
+0x2de8 006438 call g24_fetch_mem_rxbuf_add1 
+0x2de9 006440 rshift pdata ,pdata 
+0x2dea 006441 and pdata ,0x03 ,pdata 
+0x2deb 006442 add regc ,offset_24g_sta_pid ,contw 
+0x2dec 006443 istore 1 ,contw 
+0x2ded 006445 rtn 
+:      006447 g24_prep:
+0x2dee 006448 disable enable_crc 
+0x2def 006449 disable enable_white 
+0x2df0 006450 setarg 0x555555 
+0x2df1 006451 iforce crc24_init 
+0x2df2 006452 rtn 
+:      006454 g24_set_freq_tx:
+0x2df3 006455 call set_sync_on 
+0x2df4 006456 add regc ,offset_24g_ch ,rega 
+0x2df5 006457 ifetcht 1 ,rega 
+0x2df6 006459 branch set_freq_tx 
+:      006461 g24_transmit:
+0x2df7 006462 call g24_prep 
+0x2df8 006463 call g24_set_freq_tx 
+0x2df9 006464 set1 txgfsk ,radio_ctrl 
+0x2dfa 006465 enable encode_fec0 
+0x2dfb 006466 enable is_tx 
+0x2dfc 006467 disable is_rx 
+0x2dfd 006468 call le_enable 
+0x2dfe 006469 call g24_fetch_mem_addr 
+0x2dff 006471 iforce access 
+0x2e00 006472 inject mod ,32 
+0x2e01 006473 enable enable_crc 
+0x2e02 006474 add regc ,offset_24g_txlen ,rega 
+0x2e03 006475 ifetch 1 ,rega 
+0x2e04 006477 iforce loopcnt 
+0x2e05 006478 add regc ,offset_24g_txpayload ,contr 
+:      006480 g24tr_loop:
+0x2e06 006481 ifetch 1 ,contr 
+0x2e07 006482 inject mod ,8 
+0x2e08 006483 loop g24tr_loop 
+0x2e09 006484 enable enable_parity 
+0x2e0a 006485 inject mod ,24 
+0x2e0b 006486 disable enable_parity 
+0x2e0c 006487 until null ,tx_clear 
+0x2e0d 006488 bpatch patch16_7 ,mem_patch16 
+0x2e0e 006489 nop 100 
+0x2e0f 006490 disable encode_fec0 
+0x2e10 006491 rtn 
+:      006493 g24_receive_packet:
+0x2e11 006494 disable user3 
+0x2e12 006495 force 0 ,radio_ctrl 
+0x2e13 006496 add regc ,offset_24g_ch ,rega 
+0x2e14 006497 ifetcht 1 ,rega 
+0x2e15 006499 call set_freq_rx 
+0x2e16 006500 call rf_rx_enable 
+:      006501 g24_receive_rxon:
+0x2e17 006502 call g24_prep 
+0x2e18 006503 enable decode_fec0 
+0x2e19 006504 enable is_rx 
+0x2e1a 006505 disable is_tx 
+0x2e1b 006506 call le_enable 
+0x2e1c 006507 call g24_fetch_mem_addr 
+0x2e1d 006509 iforce access 
+0x2e1e 006510 enable swfine 
+0x2e1f 006511 add regc ,offset_24g_rx_window ,rega 
+0x2e20 006512 ifetch 2 ,rega 
+0x2e21 006514 iforce stop_watch 
+0x2e22 006515 correlate null ,timeout 
+0x2e23 006516 nbranch g24_sync_timeout ,sync 
+0x2e24 006517 enable enable_crc 
+0x2e25 006518 parse demod ,bucket ,8 
+0x2e26 006519 rshift3 pwindow ,pdata 
+0x2e27 006520 add regc ,offset_24g_rxbuf ,contw 
+0x2e28 006521 istore 1 ,contw 
+0x2e29 006523 add regc ,offset_24g_mode ,rega 
+0x2e2a 006524 ifetch 1 ,rega 
+0x2e2b 006526 beq rx_24g ,g24_receive_skip 
+0x2e2c 006527 bpatch patch17_0 ,mem_patch17 
+0x2e2d 006528 add regc ,offset_24g_rxbuf ,rega 
+0x2e2e 006529 ifetch 1 ,rega 
+0x2e2f 006531 add regc ,offset_24g_data_type ,rega 
+0x2e30 006532 ifetcht 1 ,rega 
+0x2e31 006534 icompare bits_data ,temp 
+0x2e32 006535 nbranch g24_end_of_packet ,true 
+:      006536 g24_receive_skip:
+0x2e33 006537 parse demod ,bucket ,8 
+0x2e34 006538 rshift3 pwindow ,pdata 
+0x2e35 006539 istore 1 ,contw 
+0x2e36 006540 rshift3 pdata ,pdata 
+0x2e37 006541 and pdata ,0x1f ,loopcnt 
+0x2e38 006542 branch g24rx_nopayload ,zero 
+:      006543 g24rx_loop:
+0x2e39 006544 parse demod ,bucket ,8 
+0x2e3a 006545 rshift3 pwindow ,pdata 
+0x2e3b 006546 istore 1 ,contw 
+0x2e3c 006547 loop g24rx_loop 
+:      006548 g24rx_nopayload:
+0x2e3d 006549 parse demod ,bucket ,24 
+0x2e3e 006550 rshift32 pdata ,pdata 
+0x2e3f 006551 rshift16 pdata ,pdata 
+0x2e40 006552 istore 3 ,contw 
+0x2e41 006553 branch g24_end_of_packet ,crc_failed 
+0x2e42 006554 enable user3 
+0x2e43 006555 disable decode_fec0 
+0x2e44 006556 rtn 
+:      006559 g24_end_of_packet:
+0x2e45 006560 disable encode_fec0 
+0x2e46 006561 disable decode_fec0 
+0x2e47 006562 disable enable_crc 
+0x2e48 006563 disable enable_white 
+0x2e49 006564 branch shutdown_radio ,is_rx 
+0x2e4a 006565 until null ,tx_clear 
+0x2e4b 006566 nop 100 
+0x2e4c 006567 branch shutdown_radio 
+:      006569 g24_sync_timeout:
+0x2e4d 006570 call rssi_noise 
+0x2e4e 006571 branch g24_end_of_packet 
+:      006573 rssi_noise:
+0x2e4f 006574 call save_rssi 
+0x2e50 006575 rtn blank 
+0x2e51 006576 add regc ,offset_rssi_noise_index ,rega 
+0x2e52 006577 ifetcht 1 ,rega 
+0x2e53 006579 arg mem_rssi_noise_buffer ,rega 
+0x2e54 006581 call rssi_noise_store 
+0x2e55 006582 add regc ,offset_rssi_noise_index ,contw 
+:      006584 g24_contw_istoret_1byte:
+0x2e56 006585 istoret 1 ,contw 
+0x2e57 006586 rtn 
+:      006588 rssi_noise_store:
+0x2e58 006589 arg rssi_buf_len_noise ,regb 
+0x2e59 006590 branch rssi_store 
+:      006608 rssi_store:
+0x2e5a 006609 copy rega ,pdata 
+0x2e5b 006610 iadd temp ,contw 
+0x2e5c 006611 fetch 1 ,mem_rssi 
+0x2e5d 006612 istore 1 ,contw 
+0x2e5e 006613 increase 1 ,temp 
+0x2e5f 006614 copy regb ,pdata 
+0x2e60 006615 iand_into temp 
+0x2e61 006616 rtn 
+:      006618 rssi_average:
+0x2e62 006619 arg 0 ,temp 
+0x2e63 006620 copy rega ,contr 
+:      006621 rssi_average_loop:
+0x2e64 006622 ifetch 1 ,contr 
+0x2e65 006623 iadd temp ,temp 
+0x2e66 006624 loop rssi_average_loop 
+0x2e67 006625 rshift8 temp ,temp 
+0x2e68 006626 rtn 
+:      006628 g24_power_ctrl_init:
+0x2e69 006629 call g24_head_ptr2regc 
+0x2e6a 006630 call g24_power_ctrl_incrs_level1 
+0x2e6b 006631 setarg 1 
+0x2e6c 006632 call g24_store_mem_power_ctrl_level 
+:      006634 g24_power_ctrl_reinit:
+0x2e6d 006635 setarg 0 
+0x2e6e 006636 call g24_store_mem_power_ctrl_pac 
+0x2e6f 006638 istore 1 ,contw 
+0x2e70 006640 rtn 
+:      006642 g24_power_ctrl_pac_incrs:
+0x2e71 006643 call g24_fetch_mem_power_ctrl_pac 
+0x2e72 006645 increase 1 ,pdata 
+:      006646 g24_store_mem_power_ctrl_pac:
+0x2e73 006648 add regc ,offset_power_ctrl_packet_cnt ,contw 
+0x2e74 006649 branch g24_contw_istore_1byte 
+:      006651 g24_power_ctrl_ack_incrs:
+0x2e75 006654 add regc ,offset_power_ctrl_ack_cnt ,rega 
+0x2e76 006655 ifetch 1 ,rega 
+0x2e77 006656 increase 1 ,pdata 
+0x2e78 006657 add regc ,offset_power_ctrl_ack_cnt ,contw 
+0x2e79 006658 branch g24_contw_istore_1byte 
+:      006660 g24_power_ctrl:
+0x2e7a 006661 bpatch patch17_1 ,mem_patch17 
+0x2e7b 006662 call g24_fetch_mem_power_ctrl_pac 
+0x2e7c 006664 sub pdata ,power_ctrl_max_packet_cnt ,null 
+0x2e7d 006665 rtn positive 
+0x2e7e 006666 add regc ,offset_power_ctrl_ack_cnt ,rega 
+0x2e7f 006667 ifetcht 1 ,rega 
+0x2e80 006669 isub temp ,temp 
+0x2e81 006670 call g24_power_ctrl_reinit 
+0x2e82 006671 setarg offset_power_ctrl_threshold_up 
+0x2e83 006672 iadd regc ,rega 
+0x2e84 006673 ifetch 1 ,rega 
+0x2e85 006675 isub temp ,null 
+0x2e86 006676 nbranch g24_power_ctrl_incrs ,positive 
+0x2e87 006677 setarg offset_power_ctrl_threshold_down 
+0x2e88 006678 iadd regc ,rega 
+0x2e89 006679 ifetch 1 ,rega 
+0x2e8a 006681 isub temp ,null 
+0x2e8b 006682 branch g24_power_ctrl_decrs ,positive 
+0x2e8c 006683 rtn 
+:      006685 g24_power_ctrl_incrs:
+0x2e8d 006686 add regc ,offset_power_ctrl_level ,rega 
+0x2e8e 006687 ifetch 1 ,rega 
+0x2e8f 006689 beq 2 ,g24_power_ctrl_incrs_level2 
+0x2e90 006690 increase 1 ,pdata 
+0x2e91 006691 call g24_store_mem_power_ctrl_level 
+0x2e92 006693 beq 1 ,g24_power_ctrl_incrs_level1 
+:      006694 g24_power_ctrl_incrs_level2:
+0x2e93 006695 setarg power_ctrl_losspac_thresh_up2 
+0x2e94 006696 call g24_store_mem_power_ctrl_threshold_up 
+0x2e95 006698 setarg power_ctrl_losspac_thresh_down2 
+0x2e96 006699 call g24_store_mem_power_ctrl_threshold_down 
+0x2e97 006702 add regc ,offset_power_ctrl_txpwr_level2 ,rega 
+0x2e98 006704 branch g24_ifetch_rega_store_mem_txpower 
+:      006706 g24_power_ctrl_decrs:
+0x2e99 006707 add regc ,offset_power_ctrl_level ,rega 
+0x2e9a 006708 ifetch 1 ,rega 
+0x2e9b 006710 beq 0 ,g24_power_ctrl_decrs_level0 
+0x2e9c 006711 increase -1 ,pdata 
+0x2e9d 006712 call g24_store_mem_power_ctrl_level 
+0x2e9e 006714 beq 0 ,g24_power_ctrl_decrs_level0 
+:      006715 g24_power_ctrl_decrs_level1:
+:      006718 g24_power_ctrl_incrs_level1:
+0x2e9f 006719 setarg power_ctrl_losspac_thresh_up1 
+0x2ea0 006720 call g24_store_mem_power_ctrl_threshold_up 
+0x2ea1 006722 setarg power_ctrl_losspac_thresh_down1 
+0x2ea2 006723 call g24_store_mem_power_ctrl_threshold_down 
+0x2ea3 006726 setarg offset_power_ctrl_txpwr_level1 
+:      006727 g24_iadd_offset_mem_txpower:
+0x2ea4 006728 iadd regc ,rega 
+:      006729 g24_ifetch_rega_store_mem_txpower:
+0x2ea5 006730 ifetch 1 ,rega 
+0x2ea6 006732 branch g24_store_mem_txpower 
+:      006734 g24_power_ctrl_decrs_level0:
+0x2ea7 006737 setarg power_ctrl_losspac_thresh_up0 
+0x2ea8 006738 call g24_store_mem_power_ctrl_threshold_up 
+0x2ea9 006740 setarg power_ctrl_losspac_thresh_down0 
+0x2eaa 006741 call g24_store_mem_power_ctrl_threshold_down 
+0x2eab 006744 setarg offset_power_ctrl_txpwr_level0 
+0x2eac 006746 branch g24_iadd_offset_mem_txpower 
+:      006760 g24_start_pairing_sm1:
+0x2ead 006761 set1 mark_24g ,mark 
+0x2eae 006762 call g24_pair_init 
+:      006763 g24_set_pairing_sm_1:
+0x2eaf 006765 setarg state_24g_pairing_1 
+0x2eb0 006766 branch g24_store_mem_pairing_sm 
+:      006768 g24_pairing_sm:
+0x2eb1 006769 add regc ,offset_24g_ensure ,rega 
+0x2eb2 006770 ifetch 1 ,rega 
+0x2eb3 006772 beq ensure_on_24g ,enable_user 
+0x2eb4 006773 call g24_fetch_mem_pairing_sm 
+0x2eb5 006775 beq state_24g_pairing_1 ,g24_pairing_sm_1 
+0x2eb6 006776 beq state_24g_pairing_2 ,g24_pairing_sm_2 
+0x2eb7 006777 beq state_24g_pairing_3 ,g24_pairing_sm_3 
+0x2eb8 006778 branch assert 
+:      006780 g24_pairing_sm_1:
+0x2eb9 006781 setarg state_24g_pairing_1_waiting_ack 
+0x2eba 006782 call g24_store_mem_pairing_sm 
+0x2ebb 006784 jam 0xaa ,mem_24g_common_temp 
+0x2ebc 006785 branch g24_pairing_sm_common 
+:      006786 g24_pairing_sm_2:
+0x2ebd 006787 setarg state_24g_pairing_2_waiting_ack 
+0x2ebe 006788 call g24_store_mem_pairing_sm 
+0x2ebf 006790 jam 0x55 ,mem_24g_common_temp 
+0x2ec0 006791 branch g24_pairing_sm_common 
+:      006792 g24_pairing_sm_3:
+0x2ec1 006793 setarg state_24g_pairing_3_waiting_ack 
+0x2ec2 006794 call g24_store_mem_pairing_sm 
+0x2ec3 006796 jam 0x22 ,mem_24g_common_temp 
+:      006797 g24_pairing_sm_common:
+0x2ec4 006798 call g24_fetch_mem_data_type 
+0x2ec5 006800 and_into bits_data ,pdata 
+0x2ec6 006801 store 1 ,mem_24g_common_temp + 1 
+0x2ec7 006802 call g24_fetch_mem_device_addr 
+0x2ec8 006804 store 4 ,mem_24g_common_temp + 2 
+:      006805 g24_put_pairing_data_in_buff:
+0x2ec9 006806 jam 0 ,mem_24g_common_temp + 6 
+0x2eca 006807 arg mem_24g_common_temp ,rega 
+0x2ecb 006808 arg 7 ,temp 
+0x2ecc 006809 call g24_put_data_in_buff 
+0x2ecd 006810 call g24_transmit_prep 
+0x2ece 006811 call g24_txdata_enable_tx 
+0x2ecf 006812 branch enable_user 
+:      006814 g24_paring_mode:
+0x2ed0 006815 call g24_fetch_mem_pairing_sm 
+0x2ed1 006817 rtneq state_24g_pairing_success 
+0x2ed2 006818 beq state_24g_pairing_1_waiting_ack ,g24_pairing_sm_1_waiting_ack 
+0x2ed3 006819 beq state_24g_pairing_2_waiting_ack ,g24_pairing_sm_2_waiting_ack 
+0x2ed4 006820 beq state_24g_pairing_3_waiting_ack ,g24_pairing_sm_3_waiting_ack 
+0x2ed5 006821 rtn 
+:      006823 g24_pairing_sm_1_waiting_ack:
+0x2ed6 006824 setarg state_24g_pairing_2 
+0x2ed7 006825 call g24_store_mem_pairing_sm 
+0x2ed8 006827 branch g24_transmit_abandon 
+:      006828 g24_pairing_sm_2_waiting_ack:
+0x2ed9 006829 setarg state_24g_pairing_3 
+0x2eda 006830 call g24_store_mem_pairing_sm 
+0x2edb 006832 branch g24_transmit_abandon 
+:      006833 g24_pairing_sm_3_waiting_ack:
+0x2edc 006834 setarg state_24g_pairing_success 
+0x2edd 006835 call g24_store_mem_pairing_sm 
+0x2ede 006837 jam bt_evt_24g_pairing_complete ,mem_fifo_temp 
+0x2edf 006838 call ui_ipc_send_event 
+0x2ee0 006839 add regc ,offset_24g_rxpayload_add2 ,rega 
+0x2ee1 006840 ifetch 4 ,rega 
+0x2ee2 006842 call g24_store_mem_addr 
+0x2ee3 006844 branch g24_transmit_abandon 
+:      006846 g24_auto_pair_start:
+0x2ee4 006847 set0 mark_24g ,mark 
+0x2ee5 006848 call g24_auto_pair_set_device_info 
+0x2ee6 006849 call g24_tx_attemp_data_prep 
+:      006850 g24_auto_pair_restart:
+0x2ee7 006851 call g24_set0_mem_check_dongle_times 
+:      006852 g24_auto_pair_start_loop:
+0x2ee8 006853 nop 2000 
+0x2ee9 006854 call g24_fetch_mem_check_dongle_times 
+0x2eea 006855 beq 0xff ,g24_stop_24g_mode 
+0x2eeb 006856 call g24_transmit_receive_ack 
+0x2eec 006857 nbranch g24_auto_pair_retry ,sync 
+0x2eed 006858 nbranch g24_auto_pair_retry ,user3 
+0x2eee 006859 call g24_ackpayload_parse 
+0x2eef 006860 call g24_head_ptr2regc 
+0x2ef0 006861 add regc ,offset_24g_paring_addr ,rega 
+0x2ef1 006862 ifetcht 4 ,rega 
+0x2ef2 006863 call g24_fetch_mem_addr_isub_temp 
+0x2ef3 006864 branch g24_start_pairing_sm1 ,zero 
+0x2ef4 006865 call g24_head_ptr2regc 
+0x2ef5 006866 add regc ,offset_24g_rxpayload_add2 ,rega 
+0x2ef6 006867 ifetch 4 ,rega 
+0x2ef7 006868 beq 0 ,g24_auto_pair_restart 
+0x2ef8 006869 call g24_store_mem_addr 
+0x2ef9 006870 branch g24_tx_attemp_dongle_succ 
+:      006872 g24_auto_pair_retry:
+0x2efa 006873 call g24_fetch_mem_check_dongle_times 
+0x2efb 006874 increase 1 ,pdata 
+0x2efc 006875 call g24_store_mem_check_dongle_times 
+0x2efd 006877 call g24_fetch_mem_auto_paring_switch 
+0x2efe 006878 increase 1 ,pdata 
+0x2eff 006879 and_into 1 ,pdata 
+0x2f00 006880 call g24_store_mem_auto_paring_switch 
+0x2f01 006881 beq 0 ,g24_auto_pair_device_attemp 
+0x2f02 006882 beq 1 ,g24_auto_pair_pair_attemp 
+0x2f03 006883 rtn 
+:      006885 g24_fetch_mem_auto_paring_switch:
+0x2f04 006886 setarg offset_24g_auto_pair_switch 
+0x2f05 006887 branch g24_set_rega_ifetch_1byte 
+:      006888 g24_store_mem_auto_paring_switch:
+0x2f06 006889 arg offset_24g_auto_pair_switch ,rega 
+0x2f07 006890 branch g24_set_contw_with_regb_store_1byte 
+:      006892 g24_auto_pair_set_device_info:
+0x2f08 006893 call g24_store_mem_tx_power 
+0x2f09 006894 call g24_fetch_mem_device_addr 
+0x2f0a 006895 call g24_store_mem_addr 
+0x2f0b 006896 branch g24_ch 
+:      006898 g24_auto_pair_device_attemp:
+0x2f0c 006899 call g24_auto_pair_set_device_info 
+0x2f0d 006900 branch g24_auto_pair_start_loop 
+:      006902 g24_auto_pair_pair_attemp:
+0x2f0e 006903 call g24_pair_init 
+0x2f0f 006904 branch g24_auto_pair_start_loop 
+:      006907 g24_start_24g_mode:
+0x2f10 006908 set0 mark_24g ,mark 
+0x2f11 006909 call g24_ch 
+0x2f12 006910 call g24_fetch_mem_pairing_sm 
+0x2f13 006912 rtnne state_24g_pairing_success 
+0x2f14 006913 call g24_tx_attemp_data_prep 
+0x2f15 006914 call g24_set0_mem_check_dongle_times 
+:      006916 g24_tx_attemp_dongle_loop:
+0x2f16 006917 nop 2000 
+0x2f17 006918 call g24_fetch_mem_check_dongle_times 
+0x2f18 006920 beq 0xff ,g24_stop_24g_mode 
+0x2f19 006921 call g24_transmit_receive_ack 
+0x2f1a 006922 nbranch g24_attemp_txdata_retry ,sync 
+0x2f1b 006923 nbranch g24_attemp_txdata_retry ,user3 
+:      006924 g24_tx_attemp_dongle_succ:
+0x2f1c 006925 set1 mark_24g ,mark 
+0x2f1d 006926 call g24_set0_mem_check_dongle_times 
+0x2f1e 006927 setarg state_24g_pairing_success 
+0x2f1f 006928 call g24_store_mem_pairing_sm 
+0x2f20 006930 jam bt_evt_24g_attempt_success ,mem_fifo_temp 
+0x2f21 006931 branch ui_ipc_send_event 
+:      006933 g24_tx_attemp_data_prep:
+0x2f22 006934 set1 mark_24g_conext ,mark 
+0x2f23 006935 jam 0xff ,mem_24g_common_temp 
+0x2f24 006936 call g24_fetch_mem_data_type 
+0x2f25 006938 call g24_put_data_in_buff_pre 
+0x2f26 006939 branch g24_transmit_prep 
+:      006941 g24_attemp_txdata_retry:
+0x2f27 006942 call g24_fetch_mem_check_dongle_times 
+0x2f28 006944 increase 1 ,pdata 
+0x2f29 006945 call g24_store_mem_check_dongle_times 
+0x2f2a 006947 call g24_ch 
+0x2f2b 006948 branch g24_tx_attemp_dongle_loop 
+:      006950 g24_check_51cmd_start_24g:
+0x2f2c 006951 call g24_store_mem_tx_power 
+0x2f2d 006954 setarg state_24g_pairing_success 
+0x2f2e 006955 call g24_store_mem_pairing_sm 
+0x2f2f 006957 branch g24_start_24g_mode 
+:      006966 dongle_init:
+0x2f30 006967 bpatch patch17_2 ,mem_patch17 
+0x2f31 006968 call g24_head_ptr2regc 
+0x2f32 006969 setarg dongle_rxdata_type1 
+0x2f33 006970 add regc ,offset_24g_cb_rxdata_type1 ,contw 
+0x2f34 006971 istore 2 ,contw 
+0x2f35 006973 call g24_receive_init 
+0x2f36 006974 call usb_init 
+0x2f37 006975 call g24_fetch_mem_pair_mode 
+0x2f38 006977 bpatch patch17_3 ,mem_patch17 
+0x2f39 006978 beq 0x00 ,dongle_auto_bind 
+0x2f3a 006979 beq 0x01 ,dongle_pc_bind 
+0x2f3b 006980 beq 0x0f ,dongle_all_powerful 
+0x2f3c 006981 branch assert 
+:      006983 g24_receive_init:
+0x2f3d 006984 call g24_store_mem_tx_power_temp 
+0x2f3e 006985 arg 0x80 ,loopcnt 
+0x2f3f 006986 arg mem_rssi_noise_buffer ,contw 
+0x2f40 006987 branch memset0 
+:      006989 dongle_all_powerful:
+0x2f41 006990 call dongle_check_mode 
+:      006991 dongle_all_powerful_loop:
+0x2f42 006992 call g24_dongle_work_mode 
+0x2f43 006993 call usb_isr 
+0x2f44 006994 branch dongle_all_powerful_loop 
+:      006996 dongle_pc_bind:
+0x2f45 006997 bpatch patch17_4 ,mem_patch17 
+0x2f46 006998 call dongle_check_mode 
+:      006999 dongle_pc_bind_loop:
+0x2f47 007000 call g24_dongle_work_mode 
+0x2f48 007001 call g24_dongle_bind_mode 
+0x2f49 007002 call usb_isr 
+0x2f4a 007003 call dongle_usb_dispatch 
+0x2f4b 007004 branch dongle_pc_bind_loop 
+:      007006 dongle_check_mode:
+0x2f4c 007010 call g24_set_work_mem_dongle_work_mode 
+0x2f4d 007011 call g24_set0_mem_dongle_mode_init 
+0x2f4e 007012 branch g24_set0_mem_ackpayload_enable 
+:      007014 g24_dongle_work_mode:
+0x2f4f 007015 call g24_fetch_mem_dongle_work_mode 
+0x2f50 007017 rtnne dongle_work 
+:      007018 g24_dongle_work_mode_start:
+0x2f51 007019 call g24_dongle_work_init 
+0x2f52 007020 call g24_ch_process 
+0x2f53 007021 call g24_receive_packet_start 
+0x2f54 007022 branch g24_blank_data_process 
+:      007024 g24_dongle_work_init:
+0x2f55 007025 call g24_fetch_mem_dongle_mode_init 
+0x2f56 007027 rtnbit1 dongle_work 
+0x2f57 007028 set1 dongle_work ,pdata 
+0x2f58 007029 call g24_store_mem_dongle_mode_init 
+0x2f59 007031 call g24_store_mem_tx_power 
+0x2f5a 007034 call g24_set0_mem_ackpayload_enable 
+0x2f5b 007036 jam 0 ,mem_usb_tx_enable 
+0x2f5c 007037 call g24_set1_mem_abort_pac 
+0x2f5d 007039 call g24_dongle_init 
+:      007040 g24_rx_interrupt_clear:
+0x2f5e 007041 add regc ,offset_24g_rxbuf ,contw 
+0x2f5f 007043 arg 66 ,loopcnt 
+0x2f60 007044 branch clear_mem 
+:      007046 g24_dongle_init:
+0x2f61 007047 call g24_set0_mem_pid 
+0x2f62 007049 call g24_fetch_mem_rx_addr 
+0x2f63 007051 call g24_store_mem_addr 
+0x2f64 007053 branch g24_ch 
+:      007055 g24_ch_process:
+0x2f65 007056 bpatch patch17_5 ,mem_patch17 
+0x2f66 007057 call g24_fetch_mem_abort_pac 
+0x2f67 007059 beq 1 ,g24_noise_rssi 
+0x2f68 007060 call g24_fetch_mem_hop_pac 
+0x2f69 007062 beq 1 ,g24_ch 
+0x2f6a 007063 setarg offset_24g_hop_btclk 
+0x2f6b 007064 iadd regc ,rega 
+0x2f6c 007065 ifetcht 4 ,rega 
+0x2f6d 007067 copy clkn_bt ,pdata 
+0x2f6e 007068 isub temp ,null 
+0x2f6f 007069 ncall g24_timer_timeout ,positive 
+0x2f70 007070 copy pdata ,regb 
+0x2f71 007071 setarg offset_24g_hop_btclk 
+0x2f72 007072 iadd regc ,rega 
+0x2f73 007073 ifetch 4 ,rega 
+0x2f74 007074 copy pdata ,temp 
+0x2f75 007076 setarg offset_24g_hop_interval 
+0x2f76 007077 iadd regc ,rega 
+0x2f77 007078 copy temp ,pdata 
+0x2f78 007079 ifetcht 1 ,rega 
+0x2f79 007081 iadd temp ,temp 
+0x2f7a 007082 copy regb ,pdata 
+0x2f7b 007083 isub temp ,null 
+0x2f7c 007084 nrtn positive 
+0x2f7d 007085 set0 28 ,pdata 
+0x2f7e 007086 setarg offset_24g_hop_btclk 
+0x2f7f 007087 iadd regc ,contw 
+0x2f80 007088 istore 4 ,contw 
+:      007090 g24_ch_update:
+0x2f81 007091 call g24_ch 
+0x2f82 007092 call g24_fetch_mem_rf_laststa 
+0x2f83 007094 increase 1 ,pdata 
+0x2f84 007095 call g24_store_mem_rf_laststa 
+0x2f85 007097 rtnne 2 
+0x2f86 007098 call g24_set0_mem_rf_laststa 
+0x2f87 007102 branch g24_set1_mem_abort_pac 
+:      007104 g24_ch_timer_reinit:
+0x2f88 007105 copy clkn_bt ,pdata 
+0x2f89 007106 arg offset_24g_hop_btclk ,rega 
+0x2f8a 007107 call g24_set_contw_with_temp 
+0x2f8b 007108 istore 4 ,contw 
+0x2f8c 007112 branch g24_set0_mem_rf_laststa 
+:      007114 g24_noise_rssi:
+0x2f8d 007115 arg mem_rssi_noise_buffer ,rega 
+0x2f8e 007116 call g24_noise_rssi_average 
+0x2f8f 007117 add regc ,offset_rssi_noise_avg ,contw 
+0x2f90 007118 istoret 1 ,contw 
+0x2f91 007120 sub temp ,rssi_thresh_noise ,null 
+0x2f92 007121 nrtn positive 
+0x2f93 007122 branch g24_ch 
+:      007124 g24_noise_rssi_average:
+0x2f94 007125 arg rssi_buf_len_noise + 1 ,loopcnt 
+0x2f95 007126 branch rssi_average 
+:      007128 g24_blank_data_process:
+0x2f96 007129 call g24_ms_blank_data 
+0x2f97 007130 call g24_kb_blank_data 
+0x2f98 007131 branch g24_kb_mul_blank_data 
+:      007133 g24_ms_blank_data:
+0x2f99 007134 setarg offset_24g_ms_blank_data_enable 
+0x2f9a 007135 call g24_set_rega_ifetch_1byte 
+0x2f9b 007137 rtn blank 
+0x2f9c 007138 arg timer_ms_blank ,queue 
+0x2f9d 007139 call timer_check 
+0x2f9e 007140 nrtn blank 
+0x2f9f 007141 call g24_set0_mem_ms_blank_data_enable 
+:      007143 g24_ms_blank_data_2usb:
+0x2fa0 007144 setarg ms_report_id 
+0x2fa1 007145 store 1 ,mem_usb_mouse_data 
+0x2fa2 007146 setarg 0 
+0x2fa3 007147 istore 7 ,contw 
+0x2fa4 007148 branch g24_data_type1_usbtx_enable 
+:      007150 g24_kb_blank_data:
+0x2fa5 007151 setarg offset_24g_kb_blank_data_enable 
+0x2fa6 007152 call g24_set_rega_ifetch_1byte 
+0x2fa7 007154 rtn blank 
+0x2fa8 007155 arg timer_kb_blank ,queue 
+0x2fa9 007156 call timer_check 
+0x2faa 007157 nrtn blank 
+0x2fab 007158 call g24_set0_mem_kb_blank_data_enable 
+:      007160 g24_kb_blank_data_2usb:
+0x2fac 007161 arg mem_usb_kb_data ,contw 
+0x2fad 007162 arg 2 ,loopcnt 
+0x2fae 007163 call memset0 
+0x2faf 007164 jam kb_normal_report_id ,mem_usb_kb_data 
+0x2fb0 007165 branch g24_kb_data_into_ep1_fifo 
+:      007167 g24_kb_mul_blank_data:
+0x2fb1 007168 setarg offset_24g_kb_mul_blank_data_enable 
+0x2fb2 007169 call g24_set_rega_ifetch_1byte 
+0x2fb3 007171 rtn blank 
+0x2fb4 007172 arg timer_kb_mul_blank ,queue 
+0x2fb5 007173 call timer_check 
+0x2fb6 007174 nrtn blank 
+0x2fb7 007175 call g24_set0_mem_kb_mul_blank_data_enable 
+:      007177 g24_kb_mul_blank_data_2usb:
+0x2fb8 007178 arg mem_usb_kb_multikey ,contw 
+0x2fb9 007179 arg 2 ,loopcnt 
+0x2fba 007180 call memset0 
+0x2fbb 007181 jam kb_multikey_report_id ,mem_usb_kb_multikey 
+0x2fbc 007182 branch g24_kb_mul_data_into_ep2_fifo 
+:      007184 g24_dongle_bind_mode:
+0x2fbd 007185 call g24_fetch_mem_dongle_work_mode 
+0x2fbe 007187 rtnne dongle_bind 
+0x2fbf 007188 call g24_dongle_bind_init 
+0x2fc0 007189 branch g24_dongle_bind_data_process 
+:      007191 g24_dongle_bind_init:
+0x2fc1 007192 call g24_fetch_mem_dongle_mode_init 
+0x2fc2 007194 rtnbit1 dongle_bind 
+0x2fc3 007195 set1 dongle_bind ,pdata 
+0x2fc4 007196 call g24_store_mem_dongle_mode_init 
+0x2fc5 007198 call g24_set1_mem_ackpayload_enable 
+0x2fc6 007200 call g24_pair_init 
+0x2fc7 007201 setarg 0 
+0x2fc8 007202 arg offset_dongle_ms_bind_step ,rega 
+0x2fc9 007203 call g24_set_contw_with_temp 
+0x2fca 007205 branch g24_contw_istore_3byte 
+:      007207 g24_dongle_bind_data_process:
+0x2fcb 007208 call g24_receive_transmit_ack 
+0x2fcc 007209 nbranch g24_rx_interrupt_clear ,user3 
+0x2fcd 007210 add regc ,offset_24g_rxbuf ,contr 
+0x2fce 007211 setarg offset_24g_rxdata_temp 
+0x2fcf 007212 iadd regc ,contw 
+0x2fd0 007213 arg 8 ,loopcnt 
+0x2fd1 007214 call memcpy 
+0x2fd2 007215 setarg offset_24g_rxdata_temp_add2 
+0x2fd3 007216 call g24_set_rega_ifetch_1byte 
+0x2fd4 007217 beq datatype_bind ,g24_dongle_bind_first_step 
+0x2fd5 007218 beq datatype_config ,g24_dongle_bind_second_step 
+0x2fd6 007219 beq datatype_ok ,g24_dongle_bind_third_step 
+0x2fd7 007220 beq 0xff ,g24_data_attemp 
+0x2fd8 007221 branch g24_rx_interrupt_clear 
+:      007223 g24_dongle_bind_first_step:
+0x2fd9 007224 call g24_fetch_mem_rxdata_temp_add3_1byte 
+0x2fda 007225 beq bind_mouse ,g24_dongle_bind_first_step_mouse 
+0x2fdb 007226 beq bind_keyboard ,g24_dongle_bind_first_step_keyboard 
+0x2fdc 007227 rtn 
+:      007228 g24_dongle_bind_first_step_mouse:
+0x2fdd 007229 setarg 1 
+0x2fde 007230 call g24_store_mem_ms_bind_step 
+:      007232 g24_dongle_bind_ms_payload_cfg:
+0x2fdf 007233 setarg datatype_mouse 
+0x2fe0 007234 call g24_store_mem_bind_payload 
+:      007236 g24_dongle_bind_payload_cfg:
+0x2fe1 007237 setarg 0x80 
+0x2fe2 007238 arg offset_24g_bind_payload_add1 ,rega 
+0x2fe3 007239 call g24_set_contw_with_regb_store_1byte 
+0x2fe4 007241 call g24_fetch_mem_rx_addr 
+0x2fe5 007243 arg offset_24g_bind_payload_add2 ,rega 
+0x2fe6 007244 call g24_set_contw_with_temp 
+0x2fe7 007246 branch g24_contw_istore_4byte 
+:      007248 g24_dongle_bind_first_step_keyboard:
+0x2fe8 007249 setarg 1 
+0x2fe9 007250 call g24_store_mem_kb_bind_step 
+:      007252 g24_dongle_bind_kb_payload_cfg:
+0x2fea 007253 setarg datatype_keyboard 
+0x2feb 007254 call g24_store_mem_bind_payload 
+0x2fec 007256 branch g24_dongle_bind_payload_cfg 
+:      007258 g24_dongle_bind_second_step:
+0x2fed 007259 call g24_fetch_mem_rxdata_temp_add3_1byte 
+0x2fee 007260 beq bind_mouse ,g24_dongle_bind_second_step_mouse 
+0x2fef 007261 beq bind_keyboard ,g24_dongle_bind_second_step_keyboard 
+0x2ff0 007262 rtn 
+:      007263 g24_dongle_bind_second_step_mouse:
+0x2ff1 007264 call g24_dongle_bind_ms_payload_cfg 
+0x2ff2 007265 setarg offset_dongle_ms_bind_step 
+0x2ff3 007266 call g24_set_rega_ifetch_1byte 
+0x2ff4 007268 beq 1 ,g24_dongle_ms_bind_step_set2 
+0x2ff5 007269 rtn 
+:      007270 g24_dongle_ms_bind_step_set2:
+0x2ff6 007271 setarg 2 
+:      007273 g24_store_mem_ms_bind_step:
+0x2ff7 007274 arg offset_dongle_ms_bind_step ,rega 
+0x2ff8 007275 branch g24_set_contw_with_regb_store_1byte 
+:      007277 g24_dongle_bind_second_step_keyboard:
+0x2ff9 007278 call g24_dongle_bind_kb_payload_cfg 
+0x2ffa 007279 setarg offset_dongle_kb_bind_step 
+0x2ffb 007280 call g24_set_rega_ifetch_1byte 
+0x2ffc 007282 beq 1 ,g24_dongle_kb_bind_step_set2 
+0x2ffd 007283 rtn 
+:      007284 g24_dongle_kb_bind_step_set2:
+0x2ffe 007285 setarg 2 
+:      007287 g24_store_mem_kb_bind_step:
+0x2fff 007288 arg offset_dongle_kb_bind_step ,rega 
+0x3000 007289 branch g24_set_contw_with_regb_store_1byte 
+:      007291 g24_dongle_bind_third_step:
+0x3001 007292 call g24_fetch_mem_rxdata_temp_add3_1byte 
+0x3002 007293 beq bind_mouse ,g24_dongle_bind_third_step_mouse 
+0x3003 007294 beq bind_keyboard ,g24_dongle_bind_third_step_keyboard 
+0x3004 007295 rtn 
+:      007296 g24_dongle_bind_third_step_mouse:
+0x3005 007297 setarg offset_dongle_ms_bind_step 
+0x3006 007298 call g24_set_rega_ifetch_1byte 
+0x3007 007300 beq 2 ,g24_dongle_ms_bind_step_success 
+0x3008 007301 rtn 
+:      007302 g24_dongle_ms_bind_step_success:
+0x3009 007303 call g24_fetch_mem_bind_device_status 
+0x300a 007305 or_into 0x01 ,pdata 
+0x300b 007306 call g24_store_mem_bind_device_status 
+:      007308 g24_dongle_bind_exit:
+0x300c 007309 setarg 0 
+0x300d 007310 setarg offset_dongle_ms_bind_step 
+0x300e 007311 iadd regc ,contw 
+0x300f 007312 istore 2 ,contw 
+0x3010 007313 branch g24_rx_interrupt_clear 
+:      007315 g24_dongle_bind_third_step_keyboard:
+0x3011 007316 setarg offset_dongle_kb_bind_step 
+0x3012 007317 call g24_set_rega_ifetch_1byte 
+0x3013 007319 bne 0 ,g24_dongle_kb_bind_step_success 
+0x3014 007320 rtn 
+:      007321 g24_dongle_kb_bind_step_success:
+0x3015 007322 call g24_fetch_mem_bind_device_status 
+0x3016 007324 or_into 0x02 ,pdata 
+0x3017 007325 call g24_store_mem_bind_device_status 
+0x3018 007327 branch g24_dongle_bind_exit 
+:      007330 dongle_usb_dispatch:
+0x3019 007331 fetch 1 ,mem_usb0_get_set_report 
+0x301a 007332 rtn blank 
+0x301b 007333 jam 0 ,mem_usb0_get_set_report 
+0x301c 007334 fetch 2 ,mem_usb_setup_bvalue_temp 
+0x301d 007335 arg pc_set_report ,temp 
+0x301e 007336 isub temp ,null 
+0x301f 007337 nrtn zero 
+0x3020 007339 fetch 1 ,mem_usb0_set_report_data 
+0x3021 007340 rtnne pc_report_id 
+0x3022 007341 fetch 1 ,mem_usb0_set_report_data + 1 
+0x3023 007342 bpatch patch17_6 ,mem_patch17 
+0x3024 007343 beq command_mode ,dongle_dispose_cmd_mode 
+0x3025 007344 beq command_bind ,dongle_dispose_cmd_bind 
+0x3026 007345 beq command_current_project ,dongle_dispose_cmd_current_project 
+0x3027 007346 beq command_current_mode ,dongle_dispose_cmd_current_mode 
+0x3028 007347 beq command_current_fw_version ,dongle_dispose_cmd_current_fw_version 
+0x3029 007348 beq command_user_defined ,dongle_dispose_cmd_user_defined 
+:      007349 usb0_data_ready_report_set0:
+0x302a 007350 jam 0 ,mem_usb0_data_ready_report 
+0x302b 007351 rtn 
+:      007352 dongle_dispose_cmd_bind:
+0x302c 007353 fetch 1 ,mem_usb0_set_report_data + 2 
+0x302d 007354 beq com_bind_get ,dongle_dispose_cmd_get_bind 
+0x302e 007355 beq com_bind_exit ,dongle_dispose_cmd_exit_bind 
+0x302f 007356 beq com_read_mode ,dongle_dispose_cmd_read_mode 
+0x3030 007357 branch usb0_data_ready_report_set0 
+:      007358 dongle_dispose_cmd_get_bind:
+0x3031 007359 call g24_fetch_mem_bind_device_status 
+0x3032 007361 store 1 ,mem_usb0_get_report_data + 1 
+0x3033 007362 branch usb0_data_ready_report_set1 
+:      007363 dongle_dispose_cmd_exit_bind:
+0x3034 007364 call g24_set_work_mem_dongle_work_mode 
+0x3035 007366 call g24_set0_mem_dongle_mode_init 
+0x3036 007368 call g24_fetch_mem_bind_device_status 
+0x3037 007370 store 1 ,mem_usb0_get_report_data + 1 
+0x3038 007371 branch usb0_data_ready_report_set1 
+:      007373 dongle_dispose_cmd_read_mode:
+:      007374 dongle_dispose_in_bind_mode:
+0x3039 007375 jam command_bind ,mem_usb0_get_report_data + 1 
+0x303a 007376 branch usb0_data_ready_report_set1 
+:      007378 dongle_dispose_cmd_mode:
+0x303b 007379 fetch 1 ,mem_usb0_set_report_data + 2 
+0x303c 007380 beq com_mode_bind ,dongle_enter_bind_mode 
+0x303d 007382 branch usb0_data_ready_report_set0 
+:      007383 dongle_enter_bind_mode:
+0x303e 007386 call g24_bind_mode_enable 
+:      007387 usb0_data_ready_report_set1:
+0x303f 007388 jam 1 ,mem_usb0_data_ready_report 
+0x3040 007389 rtn 
+:      007394 dongle_dispose_cmd_current_project:
+0x3041 007395 jam product_id ,mem_usb0_get_report_data + 1 
+0x3042 007396 branch usb0_data_ready_report_set1 
+:      007398 dongle_dispose_cmd_current_mode:
+0x3043 007399 call g24_fetch_mem_dongle_work_mode 
+0x3044 007401 beq dongle_work ,dongle_dispose_in_work_mode 
+0x3045 007402 beq dongle_bind ,dongle_dispose_in_bind_mode 
+0x3046 007404 rtn 
+:      007405 dongle_dispose_in_work_mode:
+0x3047 007406 jam command_mode ,mem_usb0_get_report_data + 1 
+0x3048 007407 branch usb0_data_ready_report_set1 
+:      007412 dongle_dispose_cmd_current_fw_version:
+0x3049 007413 jam fw_version0 ,mem_usb0_get_report_data + 1 
+0x304a 007414 jam fw_version1 ,mem_usb0_get_report_data + 2 
+0x304b 007415 jam fw_version2 ,mem_usb0_get_report_data + 3 
+0x304c 007416 branch usb0_data_ready_report_set1 
+:      007418 dongle_dispose_cmd_user_defined:
+0x304d 007420 call g24_set1_mem_ackpayload_enable 
+0x304e 007421 fetch 1 ,mem_usb0_set_report_data + 2 
+0x304f 007422 increase 2 ,pdata 
+0x3050 007423 copy pdata ,loopcnt 
+0x3051 007424 arg mem_usb0_set_report_data ,contr 
+0x3052 007425 setarg offset_24g_ackpayload 
+0x3053 007426 iadd regc ,contw 
+0x3054 007427 branch memcpy 
+:      007430 dongle_auto_bind:
+0x3055 007431 bpatch patch17_7 ,mem_patch17 
+0x3056 007432 call g24_mode_switch_init 
+:      007433 dongle_auto_bind_loop:
+0x3057 007434 call g24_receive_process 
+0x3058 007435 call usb_isr 
+0x3059 007436 branch dongle_auto_bind_loop 
+:      007438 g24_dongle_work_mode_auto:
+0x305a 007439 call g24_fetch_mem_dongle_work_mode 
+0x305b 007441 rtnne dongle_work 
+0x305c 007442 call g24_dongle_work_mode_start 
+0x305d 007443 branch g24_rx_nodata_process 
+:      007445 g24_dongle_bind_mode_auto:
+0x305e 007446 call g24_fetch_mem_dongle_work_mode 
+0x305f 007448 rtnne dongle_bind 
+0x3060 007449 call g24_dongle_bind_init 
+0x3061 007450 call g24_dongle_bind_data_process 
+0x3062 007451 call g24_fetch_mem_bind_device_status 
+0x3063 007453 rtn blank 
+0x3064 007454 call g24_set0_mem_mode_switch 
+0x3065 007456 call dongle_check_mode 
+0x3066 007457 call g24_enable_nodata_timer 
+:      007458 g24_timer_init:
+0x3067 007459 setarg 0 
+0x3068 007460 add regc ,offset_24g_tx_btclk ,contw 
+0x3069 007462 branch g24_contw_istore_4byte 
+:      007464 g24_timer_check:
+0x306a 007465 call disable_user 
+0x306b 007466 add regc ,offset_24g_tx_btclk ,rega 
+0x306c 007467 ifetcht 4 ,rega 
+0x306d 007469 copy clkn_bt ,pdata 
+0x306e 007470 isub temp ,null 
+0x306f 007471 ncall g24_timer_timeout ,positive 
+0x3070 007472 copy pdata ,regb 
+0x3071 007473 add regc ,offset_24g_tx_btclk ,rega 
+0x3072 007474 ifetch 4 ,rega 
+0x3073 007476 add regc ,offset_24g_interval ,rega 
+0x3074 007477 ifetcht 1 ,rega 
+0x3075 007479 iadd temp ,temp 
+0x3076 007480 copy regb ,pdata 
+0x3077 007481 isub temp ,null 
+0x3078 007482 nrtn positive 
+0x3079 007483 set0 28 ,pdata 
+0x307a 007484 add regc ,offset_24g_tx_btclk ,contw 
+0x307b 007485 istore 4 ,contw 
+0x307c 007487 branch enable_user 
+:      007489 g24_mode_switch_init:
+0x307d 007490 setarg 1 
+0x307e 007491 call g24_store_mem_mode_switch 
+0x307f 007493 call g24_set0_mem_time_slice 
+0x3080 007495 setarg 0xff 
+0x3081 007496 add regc ,offset_24g_interval ,contw 
+0x3082 007497 istore 1 ,contw 
+0x3083 007499 branch g24_timer_init 
+:      007501 g24_mode_switch:
+0x3084 007502 setarg offset_24g_mode_switch 
+0x3085 007503 call g24_set_rega_ifetch_1byte 
+0x3086 007505 rtn blank 
+0x3087 007506 call g24_timer_check 
+0x3088 007507 nrtn user 
+0x3089 007508 call g24_fetch_mem_time_slice 
+0x308a 007510 increase 1 ,pdata 
+0x308b 007511 and_into 1 ,pdata 
+0x308c 007512 call g24_store_mem_time_slice 
+0x308d 007514 beq 0 ,dongle_check_mode 
+0x308e 007515 beq 1 ,g24_bind_mode_enable 
+0x308f 007516 rtn 
+:      007518 g24_bind_mode_enable:
+0x3090 007522 setarg dongle_bind 
+0x3091 007523 call g24_store_mem_dongle_work_mode 
+0x3092 007524 branch g24_set0_mem_dongle_mode_init 
+:      007526 g24_enable_nodata_timer:
+0x3093 007527 setarg 1 
+0x3094 007528 call g24_store_mem_nodata_timer_enable 
+:      007530 g24_enable_nodata_timer_init:
+0x3095 007531 setarg timer_nodata_delay 
+0x3096 007532 arg timer_nodata ,queue 
+0x3097 007533 branch timer_init 
+:      007535 g24_rx_nodata_process:
+0x3098 007536 call g24_fetch_mem_nodata_timer_enable 
+0x3099 007538 rtn blank 
+0x309a 007539 arg timer_nodata ,queue 
+0x309b 007540 call timer_check 
+0x309c 007541 nrtn blank 
+0x309d 007542 call g24_set0_mem_nodata_timer_enable 
+0x309e 007545 setarg dongle_search 
+0x309f 007546 call g24_store_mem_dongle_work_mode 
+0x30a0 007548 call g24_set0_mem_dongle_mode_init 
+0x30a1 007550 branch g24_rx_interrupt_clear 
+:      007552 g24_dongle_search_mode_auto:
+0x30a2 007553 bpatch patch18_0 ,mem_patch18 
+0x30a3 007554 call g24_fetch_mem_dongle_work_mode 
+0x30a4 007556 rtnne dongle_search 
+0x30a5 007557 call g24_dongle_search_mode_init 
+0x30a6 007558 call g24_rx_auto_addr_ch_search 
+0x30a7 007559 call g24_receive_transmit_ack 
+0x30a8 007560 nbranch g24_rx_interrupt_clear ,user3 
+0x30a9 007562 call g24_dongle_search_addr_check 
+0x30aa 007563 call g24_receive_packet_parse ,zero 
+0x30ab 007567 call dongle_check_mode 
+0x30ac 007568 call g24_fetch_mem_dongle_mode_init 
+0x30ad 007570 set1 dongle_work ,pdata 
+0x30ae 007571 call g24_store_mem_dongle_mode_init 
+0x30af 007573 call g24_rx_interrupt_clear 
+0x30b0 007574 call g24_enable_nodata_timer 
+0x30b1 007575 call g24_dongle_search_addr_check 
+0x30b2 007576 branch g24_dg_ch_num_reinit ,zero 
+0x30b3 007577 setarg offset_24g_kb_addr 
+0x30b4 007578 call g24_set_rega_ifetcht_4byte 
+0x30b5 007580 call g24_fetch_mem_addr_isub_temp 
+0x30b6 007581 branch g24_kb_ch_num_reinit ,zero 
+0x30b7 007582 setarg offset_24g_mouse_addr 
+0x30b8 007583 call g24_set_rega_ifetcht_4byte 
+0x30b9 007585 call g24_fetch_mem_addr_isub_temp 
+0x30ba 007586 branch g24_ms_ch_num_reinit ,zero 
+0x30bb 007587 rtn 
+:      007589 g24_dongle_search_addr_check:
+0x30bc 007590 setarg offset_24g_rx_addr 
+0x30bd 007591 call g24_set_rega_ifetcht_4byte 
+:      007593 g24_fetch_mem_addr_isub_temp:
+0x30be 007594 call g24_fetch_mem_addr 
+0x30bf 007596 isub temp ,null 
+0x30c0 007597 rtn 
+:      007599 g24_dg_ch_num_reinit:
+0x30c1 007600 setarg offset_24g_dg_ch_number 
+0x30c2 007601 call g24_set_rega_ifetch_1byte 
+:      007603 g24_current_ch_num_reinit:
+0x30c3 007605 add regc ,offset_24g_current_ch_number ,contw 
+0x30c4 007606 branch g24_contw_istore_1byte 
+:      007608 g24_kb_ch_num_reinit:
+0x30c5 007609 setarg offset_24g_kb_ch_number 
+0x30c6 007610 call g24_set_rega_ifetch_1byte 
+0x30c7 007612 branch g24_current_ch_num_reinit 
+:      007613 g24_ms_ch_num_reinit:
+0x30c8 007614 setarg offset_24g_ms_ch_number 
+0x30c9 007615 call g24_set_rega_ifetch_1byte 
+0x30ca 007617 branch g24_current_ch_num_reinit 
+:      007619 g24_dongle_search_mode_init:
+0x30cb 007620 call g24_fetch_mem_dongle_mode_init 
+0x30cc 007622 rtnbit1 dongle_search 
+0x30cd 007623 set1 dongle_search ,pdata 
+0x30ce 007624 call g24_store_mem_dongle_mode_init 
+0x30cf 007626 call g24_set0_mem_time_slice 
+0x30d0 007628 call g24_set1_mem_ackpayload_enable 
+0x30d1 007630 setarg 0 
+0x30d2 007631 add regc ,offset_rssi_noise_dg_index ,contw 
+0x30d3 007632 istore 3 ,contw 
+0x30d4 007634 arg offset_24g_dg_config_ch_once ,rega 
+0x30d5 007635 call g24_set_contw_with_temp 
+0x30d6 007636 istore 7 ,contw 
+0x30d7 007639 call g24_dongle_search_addr_check 
+0x30d8 007640 nrtn zero 
+0x30d9 007641 add regc ,offset_24g_current_ch_number ,rega 
+0x30da 007642 ifetch 1 ,rega 
+0x30db 007644 arg offset_24g_dg_ch_number ,rega 
+0x30dc 007645 call g24_set_contw_with_regb_store_1byte 
+0x30dd 007647 add regc ,offset_24g_ch ,rega 
+0x30de 007648 ifetch 1 ,rega 
+0x30df 007651 branch g24_store_mem_dg_last_ch 
+:      007653 g24_rx_auto_addr_ch_search:
+0x30e0 007654 bpatch patch18_1 ,mem_patch18 
+0x30e1 007655 call g24_fetch_mem_time_slice 
+0x30e2 007657 increase 1 ,pdata 
+0x30e3 007658 and_into 3 ,pdata 
+0x30e4 007659 call g24_store_mem_time_slice 
+0x30e5 007662 beq 0 ,g24_rx_auto_bind_config_kb 
+0x30e6 007663 beq 1 ,g24_rx_auto_bind_config_dongle 
+0x30e7 007664 beq 2 ,g24_rx_auto_bind_config_mouse 
+0x30e8 007665 beq 3 ,g24_rx_auto_bind_config_dongle 
+0x30e9 007666 rtn 
+:      007668 g24_rx_auto_bind_config_mouse:
+0x30ea 007669 call g24_dongle_bind_ms_payload_cfg 
+0x30eb 007670 setarg offset_24g_mouse_addr 
+0x30ec 007671 call g24_set_rega_ifetch_4byte 
+0x30ed 007673 branch g24_rx_auto_addr_ch_search ,blank 
+0x30ee 007674 call g24_store_mem_addr 
+0x30ef 007676 setarg offset_24g_ms_config_ch_once 
+0x30f0 007677 call g24_set_rega_ifetch_1byte 
+0x30f1 007679 call g24_ms_config_ch_once ,blank 
+0x30f2 007680 setarg offset_24g_ms_last_ch 
+0x30f3 007681 call g24_set_rega_ifetch_1byte 
+0x30f4 007683 call g24_store_mem_ch 
+0x30f5 007685 add regc ,offset_rssi_noise_ms_index ,rega 
+0x30f6 007686 ifetcht 1 ,rega 
+0x30f7 007688 arg mem_rssi_noise_ms_buffer ,rega 
+0x30f8 007689 call rssi_noise_store 
+0x30f9 007690 add regc ,offset_rssi_noise_ms_index ,contw 
+0x30fa 007691 istoret 1 ,contw 
+0x30fb 007693 call g24_noise_rssi_average 
+0x30fc 007694 add regc ,offset_rssi_noise_ms_avg ,contw 
+0x30fd 007695 istoret 1 ,contw 
+0x30fe 007697 sub temp ,rssi_thresh_noise ,null 
+0x30ff 007698 nrtn positive 
+0x3100 007699 setarg offset_24g_ms_ch_number 
+0x3101 007700 call g24_set_rega_ifetcht_1byte 
+0x3102 007702 call g24_ch_temp_incre_size4 
+0x3103 007703 arg offset_24g_ms_ch_number ,rega 
+0x3104 007704 call g24_set_contw_with_regb2 
+0x3105 007705 istoret 1 ,contw 
+:      007707 g24_store_mem_ms_last_ch:
+0x3106 007709 arg offset_24g_ms_last_ch ,rega 
+0x3107 007710 branch g24_set_contw_with_regb_store_1byte 
+:      007712 g24_ms_config_ch_once:
+0x3108 007713 setarg 1 
+0x3109 007714 arg offset_24g_ms_config_ch_once ,rega 
+0x310a 007715 call g24_set_contw_with_regb_store_1byte 
+0x310b 007717 arg 0 ,temp 
+0x310c 007718 call g24_ch_calc 
+0x310d 007721 branch g24_store_mem_ms_last_ch 
+:      007723 g24_rx_auto_bind_config_kb:
+0x310e 007724 call g24_dongle_bind_kb_payload_cfg 
+0x310f 007725 setarg offset_24g_kb_addr 
+0x3110 007726 call g24_set_rega_ifetch_4byte 
+0x3111 007728 branch g24_rx_auto_addr_ch_search ,blank 
+0x3112 007729 call g24_store_mem_addr 
+0x3113 007731 setarg offset_24g_kb_config_ch_once 
+0x3114 007732 call g24_set_rega_ifetch_1byte 
+0x3115 007734 call g24_kb_config_ch_once ,blank 
+0x3116 007735 setarg offset_24g_kb_last_ch 
+0x3117 007736 call g24_set_rega_ifetch_1byte 
+0x3118 007738 call g24_store_mem_ch 
+0x3119 007740 add regc ,offset_rssi_noise_kb_index ,rega 
+0x311a 007741 ifetcht 1 ,rega 
+0x311b 007743 arg mem_rssi_noise_kb_buffer ,rega 
+0x311c 007744 call rssi_noise_store 
+0x311d 007745 add regc ,offset_rssi_noise_kb_index ,contw 
+0x311e 007746 istoret 1 ,contw 
+0x311f 007748 call g24_noise_rssi_average 
+0x3120 007749 add regc ,offset_rssi_noise_kb_avg ,contw 
+0x3121 007750 istoret 1 ,contw 
+0x3122 007752 sub temp ,rssi_thresh_noise ,null 
+0x3123 007753 nrtn positive 
+0x3124 007754 setarg offset_24g_kb_ch_number 
+0x3125 007755 call g24_set_rega_ifetcht_1byte 
+0x3126 007757 call g24_ch_temp_incre_size4 
+0x3127 007758 arg offset_24g_kb_ch_number ,rega 
+0x3128 007759 call g24_set_contw_with_regb2 
+0x3129 007760 istoret 1 ,contw 
+:      007762 g24_store_mem_kb_last_ch:
+0x312a 007764 arg offset_24g_kb_last_ch ,rega 
+0x312b 007765 branch g24_set_contw_with_regb_store_1byte 
+:      007767 g24_kb_config_ch_once:
+0x312c 007768 setarg 1 
+0x312d 007769 arg offset_24g_kb_config_ch_once ,rega 
+0x312e 007770 call g24_set_contw_with_regb_store_1byte 
+0x312f 007772 arg 0 ,temp 
+0x3130 007773 call g24_ch_calc 
+0x3131 007776 branch g24_store_mem_kb_last_ch 
+:      007778 g24_rx_auto_bind_config_dongle:
+0x3132 007779 call g24_dongle_bind_ms_payload_cfg 
+0x3133 007780 call g24_fetch_mem_rx_addr 
+0x3134 007782 call g24_store_mem_addr 
+0x3135 007784 setarg offset_24g_dg_config_ch_once 
+0x3136 007785 call g24_set_rega_ifetch_1byte 
+0x3137 007787 call g24_dg_config_ch_once ,blank 
+0x3138 007788 call g24_dg_store_config_ch 
+0x3139 007789 add regc ,offset_rssi_noise_dg_index ,rega 
+0x313a 007790 ifetcht 1 ,rega 
+0x313b 007792 arg mem_rssi_noise_dg_buffer ,rega 
+0x313c 007793 call rssi_noise_store 
+0x313d 007794 add regc ,offset_rssi_noise_dg_index ,contw 
+0x313e 007795 istoret 1 ,contw 
+0x313f 007797 call g24_noise_rssi_average 
+0x3140 007798 add regc ,offset_rssi_noise_dg_avg ,contw 
+0x3141 007799 istoret 1 ,contw 
+0x3142 007801 sub temp ,rssi_thresh_noise ,null 
+0x3143 007802 nrtn positive 
+0x3144 007803 setarg offset_24g_dg_ch_number 
+0x3145 007804 call g24_set_rega_ifetcht_1byte 
+0x3146 007806 call g24_ch_temp_incre_size4 
+0x3147 007807 arg offset_24g_dg_ch_number ,rega 
+0x3148 007808 call g24_set_contw_with_regb2 
+0x3149 007809 istoret 1 ,contw 
+:      007811 g24_store_mem_dg_last_ch:
+0x314a 007814 arg offset_24g_dg_last_ch ,rega 
+0x314b 007815 branch g24_set_contw_with_regb_store_1byte 
+:      007818 g24_dg_config_ch_once:
+0x314c 007823 setarg 1 
+0x314d 007824 arg offset_24g_dg_config_ch_once ,rega 
+0x314e 007825 call g24_set_contw_with_regb_store_1byte 
+:      007826 g24_dg_store_config_ch:
+0x314f 007827 setarg offset_24g_dg_last_ch 
+0x3150 007828 call g24_set_rega_ifetch_1byte 
+0x3151 007829 branch g24_store_mem_ch 
+:      007832 g24_transmit_ack:
+0x3152 007834 add regc ,offset_24g_rxbuf ,rega 
+0x3153 007835 ifetch 1 ,rega 
+0x3154 007837 call g24_store_mem_data_type 
+0x3155 007840 call g24_read_len_pid_crc 
+0x3156 007842 call g24_fetch_mem_rxbuf_add1 
+0x3157 007844 isolate1 bit_ack_24g ,pdata 
+0x3158 007845 branch g24tx_no_ack ,true 
+:      007846 g24tx_with_ack:
+0x3159 007847 call g24_ackpayload_prep 
+0x315a 007848 call g24_transmit_prep 
+0x315b 007849 call g24_transmit 
+:      007850 g24tx_no_ack:
+0x315c 007851 branch g24_end_of_packet 
+:      007853 g24_ackpayload_prep:
+0x315d 007854 bpatch patch18_2 ,mem_patch18 
+0x315e 007855 add regc ,offset_24g_datalen ,contw 
+0x315f 007856 call g24_mem_set0 
+0x3160 007858 setarg offset_24g_ackpayload_enable 
+0x3161 007859 call g24_set_rega_ifetch_1byte 
+0x3162 007861 rtn blank 
+0x3163 007862 setarg 0x06 
+0x3164 007863 add regc ,offset_24g_datalen ,contw 
+0x3165 007864 istore 1 ,contw 
+0x3166 007866 arg 0x06 ,loopcnt 
+0x3167 007867 setarg offset_24g_bind_payload 
+0x3168 007868 iadd regc ,contr 
+0x3169 007870 add regc ,offset_24g_txbuf ,contw 
+0x316a 007872 branch memcpy 
+:      007875 g24_receive_packet_start:
+0x316b 007876 call g24_receive_transmit_ack 
+0x316c 007877 nbranch g24_rx_interrupt_clear ,user3 
+0x316d 007878 branch g24_receive_packet_parse 
+:      007880 g24_receive_transmit_ack:
+0x316e 007881 call g24_rx_interrupt_clear 
+0x316f 007882 call g24_receive_packet 
+0x3170 007883 nrtn user3 
+0x3171 007884 branch g24_transmit_ack 
+:      007886 g24_receive_packet_parse:
+0x3172 007887 bpatch patch18_3 ,mem_patch18 
+0x3173 007888 call g24_receive_packet_parse_pid_crc 
+0x3174 007889 nbranch g24_rx_interrupt_clear ,user 
+0x3175 007890 add regc ,offset_24g_rxdata_length ,rega 
+0x3176 007891 ifetch 1 ,rega 
+0x3177 007893 branch g24_rx_interrupt_clear ,blank 
+0x3178 007894 increase 2 ,pdata 
+0x3179 007895 iforce loopcnt 
+0x317a 007896 add regc ,offset_24g_rxbuf ,contr 
+0x317b 007898 setarg offset_24g_rxdata_temp 
+0x317c 007899 iadd regc ,contw 
+0x317d 007901 call memcpy 
+0x317e 007902 call g24_set0_mem_mode_switch 
+0x317f 007904 call g24_fetch_mem_pair_mode 
+0x3180 007906 call g24_enable_nodata_timer ,blank 
+0x3181 007907 setarg offset_24g_rxdata_temp_add2 
+0x3182 007908 call g24_set_rega_ifetch_1byte 
+0x3183 007910 beq 0x01 ,g24_data_type1 
+0x3184 007911 beq 0x02 ,g24_data_type2 
+0x3185 007912 beq 0x03 ,g24_data_type3 
+0x3186 007913 beq 0xff ,g24_data_attemp 
+0x3187 007914 branch g24_rx_interrupt_clear 
+:      007916 g24_receive_packet_parse_pid_crc:
+0x3188 007917 call g24_head_ptr2regc 
+0x3189 007918 call disable_user 
+0x318a 007919 add regc ,offset_24g_sta_pid ,rega 
+0x318b 007920 ifetch 1 ,rega 
+0x318c 007922 add regc ,offset_24g_last_pid ,rega 
+0x318d 007923 ifetcht 1 ,rega 
+0x318e 007925 isub temp ,null 
+0x318f 007926 ncall enable_user ,zero 
+0x3190 007927 add regc ,offset_24g_sta_pid ,rega 
+0x3191 007928 ifetch 1 ,rega 
+0x3192 007930 add regc ,offset_24g_last_pid ,contw 
+0x3193 007931 istore 1 ,contw 
+0x3194 007933 add regc ,offset_24g_sta_crc ,rega 
+0x3195 007934 ifetch 3 ,rega 
+0x3196 007936 add regc ,offset_24g_last_crc ,rega 
+0x3197 007937 ifetcht 3 ,rega 
+0x3198 007939 isub temp ,null 
+0x3199 007940 ncall enable_user ,zero 
+0x319a 007941 add regc ,offset_24g_sta_crc ,rega 
+0x319b 007942 ifetch 3 ,rega 
+0x319c 007944 add regc ,offset_24g_last_crc ,contw 
+0x319d 007946 branch g24_contw_istore_3byte 
+:      007948 g24_data_type1:
+0x319e 007949 call g24_ch_timer_reinit 
+0x319f 007950 call g24_fetch_mem_abort_pac 
+0x31a0 007951 store 1 ,mem_temp 
+0x31a1 007953 call g24_fetcht_mem_rxdata_temp 
+0x31a2 007954 fetch 1 ,mem_temp 
+0x31a3 007956 isolate1 bit_abort ,temp 
+0x31a4 007957 setflag true ,0 ,pdata 
+0x31a5 007958 add regc ,offset_24g_abort_pac ,contw 
+0x31a6 007959 istore 1 ,contw 
+0x31a7 007961 beq 1 ,g24_data_attemp_mouse 
+0x31a8 007962 call g24_fetch_mem_hop_pac 
+0x31a9 007964 call g24_fetcht_mem_rxdata_temp 
+0x31aa 007966 isolate1 bit_hop ,temp 
+0x31ab 007967 setflag true ,0 ,pdata 
+0x31ac 007968 call g24_store_mem_hop_pac 
+0x31ad 007970 add regc ,offset_24g_cb_rxdata_type1 ,rega 
+0x31ae 007971 ifetch 2 ,rega 
+0x31af 007973 branch callback_func 
+:      007975 dongle_rxdata_type1:
+0x31b0 007976 setarg ms_report_id 
+0x31b1 007977 store 1 ,mem_usb_mouse_data 
+0x31b2 007978 call g24_fetch_mem_rxdata_temp_add3_7byte 
+0x31b3 007980 istore 7 ,contw 
+0x31b4 007981 call g24_fetch_mem_rxdata_temp_add3_7byte 
+0x31b5 007983 ncall g24_ms_enable_blank_data_forcibly ,blank 
+0x31b6 007984 call g24_fetch_mem_rxdata_temp_add3_7byte 
+0x31b7 007986 call g24_ms_disable_blank_data_forcibly ,blank 
+:      007987 g24_data_type1_usbtx_enable:
+0x31b8 007988 jam usb_ep2_ms ,mem_usb_ep2_data 
+:      007989 g24_data_type1_usbtx_enable_ep2:
+0x31b9 007990 fetch 1 ,mem_usb_tx_enable 
+0x31ba 007991 set1 2 ,pdata 
+0x31bb 007992 store 1 ,mem_usb_tx_enable 
+0x31bc 007993 rtn 
+:      007995 g24_ms_enable_blank_data_forcibly:
+0x31bd 007996 setarg 1 
+0x31be 007997 call g24_store_mem_ms_blank_data_enable 
+:      007999 g24_ms_enable_blank_data_timer:
+0x31bf 008000 setarg timer_ms_blank_delay 
+0x31c0 008001 arg timer_ms_blank ,queue 
+0x31c1 008002 branch timer_init 
+:      008003 g24_ms_disable_blank_data_forcibly:
+0x31c2 008004 call g24_set0_mem_ms_blank_data_enable 
+:      008006 g24_ms_disable_blank_data_timer:
+0x31c3 008007 setarg 0 
+0x31c4 008008 arg timer_ms_blank ,queue 
+0x31c5 008009 branch timer_init 
+:      008011 g24_data_type2:
+0x31c6 008012 call g24_fetcht_mem_rxdata_temp 
+0x31c7 008014 isolate1 bit_abort ,temp 
+0x31c8 008015 branch g24_data_attemp_kbd ,true 
+0x31c9 008016 arg mem_usb_kb_data ,contw 
+0x31ca 008017 call g24_data_type2_reverse_data 
+0x31cb 008018 fetch 8 ,mem_usb_kb_data 
+0x31cc 008019 ncall g24_kb_enable_blank_data_forcibly ,blank 
+0x31cd 008020 fetch 8 ,mem_usb_kb_data 
+0x31ce 008021 call g24_kb_disable_blank_data_forcibly ,blank 
+0x31cf 008022 call g24_head_ptr2regc 
+0x31d0 008023 fetch 8 ,mem_usb_kb_data 
+0x31d1 008024 arg offset_24g_kb_data_sta_data ,rega 
+0x31d2 008025 call g24_set_contw_with_temp 
+0x31d3 008026 istore 8 ,contw 
+0x31d4 008028 setarg offset_24g_kb_data_last_data 
+0x31d5 008029 iadd regc ,rega 
+0x31d6 008030 ifetcht 8 ,rega 
+0x31d7 008032 isub temp ,null 
+0x31d8 008033 ncall g24_kb_data_dispose ,zero 
+0x31d9 008034 setarg offset_24g_kb_data_sta_data 
+0x31da 008035 iadd regc ,rega 
+0x31db 008036 ifetch 8 ,rega 
+0x31dc 008038 arg offset_24g_kb_data_last_data ,rega 
+0x31dd 008039 call g24_set_contw_with_temp 
+0x31de 008040 istore 8 ,contw 
+0x31df 008042 branch g24_rx_interrupt_clear 
+:      008044 g24_data_type2_reverse_data:
+0x31e0 008045 setarg offset_24g_rxdata_temp_add2 
+0x31e1 008046 iadd regc ,contr 
+0x31e2 008048 arg 9 ,loopcnt 
+0x31e3 008049 branch reverse_byte 
+:      008051 g24_kb_enable_blank_data_forcibly:
+0x31e4 008052 setarg 1 
+0x31e5 008053 call g24_store_mem_kb_blank_data_enable 
+:      008055 g24_kb_enable_blank_data_timer:
+0x31e6 008056 setarg timer_kb_blank_delay 
+0x31e7 008057 arg timer_kb_blank ,queue 
+0x31e8 008058 branch timer_init 
+:      008060 g24_kb_disable_blank_data_forcibly:
+0x31e9 008061 call g24_set0_mem_kb_blank_data_enable 
+:      008063 g24_kb_disable_blank_data_timer:
+0x31ea 008064 setarg 0 
+0x31eb 008065 arg timer_kb_blank ,queue 
+0x31ec 008066 branch timer_init 
+:      008068 g24_kb_data_dispose:
+:      008069 g24_kb_data_into_ep1_fifo:
+0x31ed 008070 jam usb_ep1_kb ,mem_usb_ep1_data 
+0x31ee 008071 fetch 1 ,mem_usb_tx_enable 
+0x31ef 008072 set1 1 ,pdata 
+0x31f0 008073 store 1 ,mem_usb_tx_enable 
+0x31f1 008074 rtn 
+:      008076 g24_data_type3:
+0x31f2 008077 arg mem_usb_kb_multikey ,contw 
+0x31f3 008078 call g24_data_type2_reverse_data 
+0x31f4 008079 fetch 2 ,mem_usb_kb_multikey + 1 
+0x31f5 008080 ncall g24_kb_mul_enable_blank_data_forcibly ,blank 
+0x31f6 008081 fetch 2 ,mem_usb_kb_multikey + 1 
+0x31f7 008082 call g24_kb_mul_disable_blank_data_forcibly ,blank 
+0x31f8 008083 call g24_head_ptr2regc 
+0x31f9 008084 fetch 3 ,mem_usb_kb_multikey 
+0x31fa 008085 arg offset_24g_kb_multikey_sta_data ,rega 
+0x31fb 008086 call g24_set_contw_with_temp_store_3byte 
+0x31fc 008088 setarg offset_24g_kb_multikey_last_data 
+0x31fd 008089 iadd regc ,rega 
+0x31fe 008090 ifetcht 3 ,rega 
+0x31ff 008092 isub temp ,null 
+0x3200 008093 ncall g24_kb_mul_data_into_ep2_fifo ,zero 
+0x3201 008094 setarg offset_24g_kb_multikey_sta_data 
+0x3202 008095 iadd regc ,rega 
+0x3203 008096 ifetch 3 ,rega 
+0x3204 008098 arg offset_24g_kb_multikey_last_data ,rega 
+0x3205 008099 call g24_set_contw_with_temp_store_3byte 
+0x3206 008101 branch g24_rx_interrupt_clear 
+:      008103 g24_kb_mul_data_into_ep2_fifo:
+0x3207 008104 jam usb_ep2_multikey ,mem_usb_ep2_data 
+0x3208 008105 branch g24_data_type1_usbtx_enable_ep2 
+:      008107 g24_kb_mul_enable_blank_data_forcibly:
+0x3209 008108 setarg 1 
+0x320a 008109 call g24_store_mem_kb_mul_blank_data_enable 
+:      008111 g24_kb_mul_enable_blank_data_timer:
+0x320b 008112 setarg timer_kb_mul_blank_delay 
+0x320c 008113 arg timer_kb_mul_blank ,queue 
+0x320d 008114 branch timer_init 
+:      008116 g24_kb_mul_disable_blank_data_forcibly:
+0x320e 008117 call g24_set0_mem_kb_mul_blank_data_enable 
+:      008119 g24_kb_mul_disable_blank_data_timer:
+0x320f 008120 setarg 0 
+0x3210 008121 arg timer_kb_mul_blank ,queue 
+0x3211 008122 branch timer_init 
+:      008124 g24_data_attemp:
+0x3212 008125 call g24_fetch_mem_rxdata_temp_add3_1byte 
+0x3213 008127 beq datatype_mouse ,g24_data_attemp_mouse 
+0x3214 008128 beq datatype_keyboard ,g24_data_attemp_kbd 
+0x3215 008129 rtn 
+:      008130 g24_data_attemp_mouse:
+0x3216 008131 setarg offset_24g_rxdata_temp_add4 
+0x3217 008132 call g24_set_rega_ifetch_4byte 
+0x3218 008133 arg offset_24g_mouse_addr ,rega 
+0x3219 008134 call g24_set_contw_with_temp 
+0x321a 008137 branch g24_contw_istore_4byte 
+:      008139 g24_data_attemp_kbd:
+0x321b 008140 setarg offset_24g_rxdata_temp_add4 
+0x321c 008141 call g24_set_rega_ifetch_4byte 
+0x321d 008142 arg offset_24g_kb_addr ,rega 
+0x321e 008143 call g24_set_contw_with_temp 
+0x321f 008146 branch g24_contw_istore_4byte 
+:      008148 g24_store_mem_24g_mode:
+0x3220 008149 call g24_head_ptr2regc 
+0x3221 008150 add regc ,offset_24g_mode ,contw 
+0x3222 008151 istore 1 ,contw 
+0x3223 008152 rtn 
+:      008154 g24_fetch_mem_device_addr:
+0x3224 008155 call g24_head_ptr2regc 
+0x3225 008156 add regc ,offset_24g_device_addr ,rega 
+0x3226 008157 branch g24_rega_ifetch_4byte 
+:      008158 g24_store_mem_device_addr:
+0x3227 008159 call g24_head_ptr2regc 
+0x3228 008160 add regc ,offset_24g_device_addr ,contw 
+0x3229 008161 branch g24_contw_istore_4byte 
+:      008163 g24_fetch_mem_addr:
+0x322a 008164 add regc ,offset_24g_addr ,rega 
+0x322b 008165 branch g24_rega_ifetch_4byte 
+:      008166 g24_store_mem_addr:
+0x322c 008167 add regc ,offset_24g_addr ,contw 
+:      008168 g24_contw_istore_4byte:
+0x322d 008169 istore 4 ,contw 
+0x322e 008170 rtn 
+:      008172 g24_store_mem_ch:
+0x322f 008173 add regc ,offset_24g_ch ,contw 
+0x3230 008174 branch g24_contw_istore_1byte 
+:      008176 g24_set0_mem_pid:
+0x3231 008177 setarg 0 
+:      008178 g24_store_mem_pid:
+0x3232 008179 call g24_head_ptr2regc 
+0x3233 008180 add regc ,offset_24g_pid ,contw 
+0x3234 008181 branch g24_contw_istore_1byte 
+:      008183 g24_store_mem_txpayload:
+0x3235 008184 add regc ,offset_24g_txpayload ,contw 
+0x3236 008185 branch g24_contw_istore_1byte 
+:      008187 g24_set4_mem_max_retry:
+0x3237 008188 setarg 4 
+:      008189 g24_store_mem_max_retry:
+0x3238 008190 add regc ,offset_24g_max_retry ,contw 
+0x3239 008191 branch g24_contw_istore_1byte 
+:      008193 g24_fetch_mem_data_type:
+0x323a 008194 add regc ,offset_24g_data_type ,rega 
+0x323b 008195 branch g24_rega_ifetch_1byte 
+:      008196 g24_store_mem_data_type:
+0x323c 008197 add regc ,offset_24g_data_type ,contw 
+0x323d 008198 branch g24_contw_istore_1byte 
+:      008200 g24_set2_mem_sync_cnt:
+0x323e 008201 setarg 2 
+:      008202 g24_store_mem_sync_cnt:
+0x323f 008203 add regc ,offset_24g_sync_cnt ,contw 
+0x3240 008204 branch g24_contw_istore_1byte 
+:      008206 g24_set1_mem_rf_last_sta:
+0x3241 008207 setarg 1 
+:      008208 g24_store_mem_rf_last_sta:
+0x3242 008209 call g24_head_ptr2regc 
+0x3243 008210 add regc ,offset_24g_rf_last_sta ,contw 
+0x3244 008211 branch g24_contw_istore_1byte 
+:      008213 g24_fetch_mem_hop_pac:
+0x3245 008214 call g24_head_ptr2regc 
+0x3246 008215 add regc ,offset_24g_hop_pac ,rega 
+0x3247 008216 branch g24_rega_ifetch_1byte 
+:      008217 g24_set1_mem_hop_pac:
+0x3248 008218 setarg 1 
+:      008219 g24_store_mem_hop_pac:
+0x3249 008220 call g24_head_ptr2regc 
+0x324a 008221 add regc ,offset_24g_hop_pac ,contw 
+0x324b 008222 branch g24_contw_istore_1byte 
+:      008224 g24_fetch_mem_abort_pac:
+0x324c 008225 call g24_head_ptr2regc 
+0x324d 008226 add regc ,offset_24g_abort_pac ,rega 
+0x324e 008227 branch g24_rega_ifetch_1byte 
+:      008228 g24_set1_mem_abort_pac:
+0x324f 008229 setarg 1 
+:      008230 g24_store_mem_abort_pac:
+0x3250 008231 call g24_head_ptr2regc 
+0x3251 008232 add regc ,offset_24g_abort_pac ,contw 
+0x3252 008233 branch g24_contw_istore_1byte 
+:      008235 g24_fetch_mem_pairing_sm:
+0x3253 008236 call g24_head_ptr2regc 
+0x3254 008237 add regc ,offset_24g_pairing_sm ,rega 
+0x3255 008238 branch g24_rega_ifetch_1byte 
+:      008239 g24_store_mem_pairing_sm:
+0x3256 008240 add regc ,offset_24g_pairing_sm ,contw 
+0x3257 008241 branch g24_contw_istore_1byte 
+:      008243 g24_fetch_mem_rf_hop_ch:
+0x3258 008244 add regc ,offset_24g_rf_hop_ch ,rega 
+0x3259 008245 branch g24_rega_ifetch_1byte 
+:      008246 g24_set0_mem_rf_hop_ch:
+0x325a 008247 setarg 0 
+:      008248 g24_store_mem_rf_hop_ch:
+0x325b 008249 add regc ,offset_24g_rf_hop_ch ,contw 
+0x325c 008250 branch g24_contw_istore_1byte 
+:      008252 g24_fetch_mem_rf_work_stage:
+0x325d 008253 add regc ,offset_24g_rf_work_stage ,rega 
+0x325e 008254 branch g24_rega_ifetch_1byte 
+:      008256 g24_fetch_mem_rxbuf_add1:
+0x325f 008257 add regc ,offset_24g_rxbuf_add1 ,rega 
+0x3260 008258 branch g24_rega_ifetch_1byte 
+:      008260 g24_fetch_mem_check_dongle_times:
+0x3261 008261 add regc ,offset_24g_check_dongle_times ,rega 
+0x3262 008262 branch g24_rega_ifetch_1byte 
+:      008263 g24_set0_mem_check_dongle_times:
+0x3263 008264 setarg 0 
+:      008265 g24_store_mem_check_dongle_times:
+0x3264 008266 call g24_head_ptr2regc 
+0x3265 008267 add regc ,offset_24g_check_dongle_times ,contw 
+0x3266 008268 branch g24_contw_istore_1byte 
+:      008270 g24_store_mem_tx_power:
+0x3267 008271 call g24_head_ptr2regc 
+0x3268 008272 add regc ,offset_tx_power_temp ,rega 
+0x3269 008273 ifetch 1 ,rega 
+:      008274 g24_store_mem_txpower:
+0x326a 008275 store 1 ,mem_tx_power 
+0x326b 008276 rtn 
+:      008278 g24_store_mem_tx_power_temp:
+0x326c 008279 call g24_head_ptr2regc 
+0x326d 008280 fetch 1 ,mem_tx_power 
+0x326e 008282 add regc ,offset_tx_power_temp ,contw 
+0x326f 008283 branch g24_contw_istore_1byte 
+:      008285 g24_fetch_mem_power_ctrl_pac:
+0x3270 008286 add regc ,offset_power_ctrl_packet_cnt ,rega 
+0x3271 008287 branch g24_rega_ifetch_1byte 
+:      008289 g24_store_mem_power_ctrl_level:
+0x3272 008290 add regc ,offset_power_ctrl_level ,contw 
+0x3273 008291 branch g24_contw_istore_1byte 
+:      008293 g24_fetcht_mem_rxdata_temp:
+0x3274 008294 setarg offset_24g_rxdata_temp 
+:      008295 g24_set_rega_ifetcht_1byte:
+0x3275 008296 iadd regc ,rega 
+0x3276 008297 ifetcht 1 ,rega 
+0x3277 008298 rtn 
+:      008300 g24_fetch_mem_rf_laststa:
+0x3278 008301 setarg offset_24g_rf_laststa 
+0x3279 008302 branch g24_set_rega_ifetch_1byte 
+:      008303 g24_set0_mem_rf_laststa:
+0x327a 008304 setarg 0 
+:      008305 g24_store_mem_rf_laststa:
+0x327b 008306 arg offset_24g_rf_laststa ,rega 
+0x327c 008307 branch g24_set_contw_with_regb_store_1byte 
+:      008309 g24_fetch_mem_rx_addr:
+0x327d 008310 setarg offset_24g_rx_addr 
+:      008311 g24_set_rega_ifetch_4byte:
+0x327e 008312 call g24_set_rega 
+:      008313 g24_rega_ifetch_4byte:
+0x327f 008314 ifetch 4 ,rega 
+0x3280 008315 rtn 
+:      008317 g24_fetch_mem_time_slice:
+0x3281 008318 setarg offset_24g_time_slice 
+0x3282 008319 branch g24_set_rega_ifetch_1byte 
+:      008320 g24_set0_mem_time_slice:
+0x3283 008321 setarg 0 
+:      008322 g24_store_mem_time_slice:
+0x3284 008323 arg offset_24g_time_slice ,rega 
+0x3285 008324 branch g24_set_contw_with_regb_store_1byte 
+:      008326 g24_set0_mem_mode_switch:
+0x3286 008327 setarg 0 
+:      008328 g24_store_mem_mode_switch:
+0x3287 008329 arg offset_24g_mode_switch ,rega 
+0x3288 008330 branch g24_set_contw_with_regb_store_1byte 
+:      008332 g24_store_mem_bind_payload:
+0x3289 008333 arg offset_24g_bind_payload ,rega 
+0x328a 008334 branch g24_set_contw_with_regb_store_1byte 
+:      008336 g24_fetch_mem_bind_device_status:
+0x328b 008337 setarg offset_dongle_bind_device_status 
+0x328c 008338 branch g24_set_rega_ifetch_1byte 
+:      008339 g24_store_mem_bind_device_status:
+0x328d 008340 arg offset_dongle_bind_device_status ,rega 
+0x328e 008341 branch g24_set_contw_with_regb_store_1byte 
+:      008343 g24_fetch_mem_dongle_work_mode:
+0x328f 008344 setarg offset_dongle_work_mode 
+0x3290 008345 branch g24_set_rega_ifetch_1byte 
+:      008346 g24_set_work_mem_dongle_work_mode:
+0x3291 008347 setarg dongle_work 
+:      008348 g24_store_mem_dongle_work_mode:
+0x3292 008349 arg offset_dongle_work_mode ,rega 
+0x3293 008350 branch g24_set_contw_with_regb_store_1byte 
+:      008352 g24_fetch_mem_dongle_mode_init:
+0x3294 008353 setarg offset_dongle_mode_init 
+0x3295 008354 branch g24_set_rega_ifetch_1byte 
+:      008355 g24_set0_mem_dongle_mode_init:
+0x3296 008356 setarg clear_init 
+:      008357 g24_store_mem_dongle_mode_init:
+0x3297 008358 arg offset_dongle_mode_init ,rega 
+0x3298 008359 branch g24_set_contw_with_regb_store_1byte 
+:      008361 g24_set0_mem_ackpayload_enable:
+0x3299 008362 setarg 0 
+:      008363 g24_store_mem_ackpayload_enable:
+0x329a 008364 arg offset_24g_ackpayload_enable ,rega 
+0x329b 008365 branch g24_set_contw_with_regb_store_1byte 
+:      008366 g24_set1_mem_ackpayload_enable:
+0x329c 008367 setarg 1 
+0x329d 008368 branch g24_store_mem_ackpayload_enable 
+:      008370 g24_fetch_mem_rxdata_temp_add3_7byte:
+0x329e 008371 setarg offset_24g_rxdata_temp_add3 
+0x329f 008372 call g24_set_rega 
+0x32a0 008373 ifetch 7 ,rega 
+0x32a1 008374 rtn 
+:      008376 g24_fetch_mem_nodata_timer_enable:
+0x32a2 008377 setarg offset_24g_nodata_timer_enable 
+0x32a3 008378 branch g24_set_rega_ifetch_1byte 
+:      008379 g24_set0_mem_nodata_timer_enable:
+0x32a4 008380 setarg 0 
+:      008381 g24_store_mem_nodata_timer_enable:
+0x32a5 008382 arg offset_24g_nodata_timer_enable ,rega 
+0x32a6 008383 branch g24_set_contw_with_regb_store_1byte 
+:      008385 g24_set0_mem_ms_blank_data_enable:
+0x32a7 008386 setarg 0 
+:      008387 g24_store_mem_ms_blank_data_enable:
+0x32a8 008388 arg offset_24g_ms_blank_data_enable ,rega 
+0x32a9 008389 branch g24_set_contw_with_regb_store_1byte 
+:      008391 g24_set0_mem_kb_blank_data_enable:
+0x32aa 008392 setarg 0 
+:      008393 g24_store_mem_kb_blank_data_enable:
+0x32ab 008394 arg offset_24g_kb_blank_data_enable ,rega 
+0x32ac 008395 branch g24_set_contw_with_regb_store_1byte 
+:      008397 g24_set0_mem_kb_mul_blank_data_enable:
+0x32ad 008398 setarg 0 
+:      008399 g24_store_mem_kb_mul_blank_data_enable:
+0x32ae 008400 arg offset_24g_kb_mul_blank_data_enable ,rega 
+0x32af 008401 branch g24_set_contw_with_regb_store_1byte 
+:      008403 g24_store_mem_power_ctrl_threshold_up:
+0x32b0 008404 arg offset_power_ctrl_threshold_up ,rega 
+0x32b1 008405 branch g24_set_contw_with_regb_store_1byte 
+:      008407 g24_store_mem_power_ctrl_threshold_down:
+0x32b2 008408 arg offset_power_ctrl_threshold_down ,rega 
+:      008409 g24_set_contw_with_regb_store_1byte:
+0x32b3 008410 call g24_set_contw_with_regb 
+:      008411 g24_contw_istore_1byte:
+0x32b4 008412 istore 1 ,contw 
+0x32b5 008413 rtn 
+:      008415 g24_fetch_mem_pair_mode:
+0x32b6 008416 setarg offset_24g_pair_mode 
+0x32b7 008417 branch g24_set_rega_ifetch_1byte 
+:      008419 g24_store_mem_pair_mode:
+0x32b8 008420 arg offset_24g_pair_mode ,rega 
+0x32b9 008421 branch g24_set_contw_with_regb_store_1byte 
+:      008423 g24_store_mem_pair_txpower:
+0x32ba 008424 setarg offset_24g_pair_txpower 
+0x32bb 008425 call g24_set_rega_ifetch_1byte 
+0x32bc 008426 branch g24_store_mem_txpower 
+:      008428 g24_fetch_mem_rxdata_temp_add3_1byte:
+0x32bd 008429 setarg offset_24g_rxdata_temp_add3 
+0x32be 008430 branch g24_set_rega_ifetch_1byte 
+:      008432 g24_set_contw_with_temp:
+0x32bf 008433 copy pdata ,temp 
+0x32c0 008434 copy rega ,pdata 
+0x32c1 008435 iadd regc ,contw 
+0x32c2 008436 copy temp ,pdata 
+0x32c3 008437 rtn 
+:      008439 g24_set_contw_with_temp_store_3byte:
+0x32c4 008440 call g24_set_contw_with_temp 
+:      008441 g24_contw_istore_3byte:
+0x32c5 008442 istore 3 ,contw 
+0x32c6 008443 rtn 
+:      008445 g24_set_contw_with_regb:
+0x32c7 008446 call g24_head_ptr2regc 
+:      008447 g24_set_contw_with_regb2:
+0x32c8 008448 copy pdata ,regb 
+0x32c9 008449 copy rega ,pdata 
+0x32ca 008450 iadd regc ,contw 
+0x32cb 008451 copy regb ,pdata 
+0x32cc 008452 rtn 
+:      008454 g24_set_rega:
+0x32cd 008455 call g24_head_ptr2regc 
+0x32ce 008456 iadd regc ,rega 
+0x32cf 008457 rtn 
+:      008459 g24_set_rega_ifetch_1byte:
+0x32d0 008460 call g24_set_rega 
+:      008461 g24_rega_ifetch_1byte:
+0x32d1 008462 ifetch 1 ,rega 
+0x32d2 008463 rtn 
+:      008465 g24_set_rega_ifetcht_4byte:
+0x32d3 008466 call g24_set_rega 
+0x32d4 008467 ifetcht 4 ,rega 
+0x32d5 008468 rtn 
+:      008470 g24_mem_set0:
+0x32d6 008471 setarg 0 
+0x32d7 008472 branch g24_contw_istore_1byte 
+:      008476 app_init:
+0x32d8 008477 bpatch patch18_4 ,mem_patch18 
+0x32d9 008478 fetch 1 ,mem_device_option 
+0x32da 008479 branch app_init ,blank 
+0x32db 008481 beq dvc_op_dongle ,dongle_init 
+0x32dc 008482 beq dvc_op_antilost ,antilost_init 
+0x32dd 008483 beq dvc_op_shutter ,shutter_init 
+0x32de 008484 beq dvc_op_module ,module_init 
+0x32df 008485 beq dvc_op_car ,car_init 
+0x32e0 008486 beq dvc_op_remote_car ,remote_car_init 
+0x32e1 008487 bbit1 dvc_op_mouse ,mouse_init 
+0x32e2 008488 rtn 
+:      008490 app_lpm_init:
+0x32e3 008491 bpatch patch18_5 ,mem_patch18 
+0x32e4 008492 jam 0 ,mem_tester_emulate 
+0x32e5 008493 jam 0 ,mem_debug_config 
+0x32e6 008494 jam 0 ,mem_lch_code 
+0x32e7 008495 setarg 0 
+0x32e8 008496 store 5 ,mem_sp_state_start 
+0x32e9 008497 fetch 1 ,mem_device_option 
+0x32ea 008498 branch app_lpm_init ,blank 
+0x32eb 008499 beq dvc_op_module ,module_lpm_init 
+:      008500 app_lpm_init0:
+0x32ec 008501 rtn 
+:      008504 app_process_idle:
+0x32ed 008505 call ui_dispatch 
+0x32ee 008506 call check_51cmd 
+0x32ef 008507 call app_process_bb_event 
+0x32f0 008508 fetch 2 ,mem_cb_idle_process 
+0x32f1 008509 branch callback_func 
+:      008511 app_process_bt:
+0x32f2 008512 fetch 2 ,mem_cb_bt_process 
+0x32f3 008513 branch callback_func 
+:      008515 app_process_ble:
+0x32f4 008516 fetch 2 ,mem_cb_le_process 
+0x32f5 008517 branch callback_func 
+:      008519 app_process_bb_event:
+0x32f6 008520 bpatch patch18_6 ,mem_patch18 
+0x32f7 008522 arg mem_ipc_fifo_bt2c51 ,rega 
+0x32f8 008523 call fifo_out 
+0x32f9 008524 rtn blank 
+0x32fa 008526 copy pdata ,regc 
+0x32fb 008527 call app_event_normal_process 
+0x32fc 008528 branch app_process_bb_event_priority 
+:      008530 app_discard_event:
+0x32fd 008531 arg 0 ,regc 
+0x32fe 008532 rtn 
+:      008537 app_event_normal_process:
+0x32ff 008538 beq bt_evt_bb_connected ,app_evt_bt_conn 
+0x3300 008539 beq bt_evt_button_long_pressed ,app_evt_button_long_pressed 
+0x3301 008540 beq bt_evt_setup_complete ,app_evt_setup_complete 
+0x3302 008541 beq bt_evt_hid_handshake ,app_evt_hid_handshake 
+0x3303 008542 beq bt_evt_hid_connected ,app_bb_event_hid_connected 
+0x3304 008543 beq bt_evt_reconn_failed ,app_bb_event_reconn_failed 
+0x3305 008544 beq bt_evt_bb_disconnected ,app_bb_event_bb_disconn 
+0x3306 008545 beq bt_evt_reconn_page_timeout ,app_bb_event_reconn_failed 
+0x3307 008546 beq bt_evt_le_connected ,app_le_event_bb_connected 
+0x3308 008547 beq bt_evt_le_disconnected ,app_le_event_bb_disconn 
+0x3309 008548 beq bt_evt_reconn_started ,app_event_reconn_start 
+0x330a 008549 beq bt_evt_enter_sniff ,app_event_enter_sniff 
+0x330b 008550 beq bt_evt_exit_sniff ,app_event_exit_sniff 
+0x330c 008552 beq bt_evt_ml2cap_conn_refused ,app_event_ml2cap_conn_refused 
+0x330d 008553 beq bt_evt_linkkey_generate ,app_event_linkkey_generate 
+0x330e 008554 beq bt_evt_switch_fail_master ,app_event_switch_fail_master 
+0x330f 008555 beq bt_evt_switch_success_master ,app_event_switch_success 
+0x3310 008556 rtn 
+:      008559 app_evt_bt_conn:
+0x3311 008560 fetch 2 ,mem_ui_state_map 
+0x3312 008561 set1 ui_state_bt_connected ,pdata 
+0x3313 008562 store 2 ,mem_ui_state_map 
+0x3314 008563 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3315 008564 set0 app_disc_by_button ,pdata 
+0x3316 008565 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3317 008566 rtn 
+:      008568 app_event_switch_success:
+0x3318 008569 jam 0 ,mem_switch_fail_master_count 
+0x3319 008570 rtn 
+:      008572 app_event_switch_fail_master:
+0x331a 008573 fetch 1 ,mem_switch_fail_master_count 
+0x331b 008574 increase 1 ,pdata 
+0x331c 008575 store 1 ,mem_switch_fail_master_count 
+0x331d 008576 sub pdata ,1 ,null 
+0x331e 008577 branch app_bt_role_switch ,positive 
+0x331f 008578 jam 0 ,mem_switch_fail_master_count 
+0x3320 008579 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3321 008580 set1 app_disc_switch_fail ,pdata 
+0x3322 008581 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3323 008582 branch app_bt_disconnect 
+:      008584 app_process_bb_event_priority:
+0x3324 008585 fetch 2 ,mem_cb_bb_event_process 
+0x3325 008586 branch callback_func 
+:      008588 app_check_wake_lock:
+0x3326 008589 fetch 2 ,mem_cb_check_wakelock 
+0x3327 008590 branch callback_func 
+:      008592 app_will_enter_lpm:
+0x3328 008593 fetch 2 ,mem_cb_before_lpm 
+0x3329 008594 branch callback_func 
+:      008596 app_event_linkkey_generate:
+0x332a 008597 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x332b 008598 set1 app_disc_after_pairing ,pdata 
+0x332c 008599 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x332d 008600 branch app_bt_store_reconn_info 
+:      008602 app_event_reconn_start:
+0x332e 008603 fetch 2 ,mem_ui_state_map 
+0x332f 008604 set1 ui_state_bt_reconnect ,pdata 
+0x3330 008605 store 2 ,mem_ui_state_map 
+0x3331 008606 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3332 008607 set1 app_disc_after_reconn ,pdata 
+0x3333 008608 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3334 008609 rtn 
+:      008611 app_evt_setup_complete:
+0x3335 008612 fetch 2 ,mem_ui_state_map 
+0x3336 008613 set1 ui_state_bt_setup_complete ,pdata 
+0x3337 008614 store 2 ,mem_ui_state_map 
+0x3338 008615 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3339 008616 set1 app_disc_after_setup_done ,pdata 
+0x333a 008617 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x333b 008618 rtn 
+:      008620 app_evt_hid_handshake:
+0x333c 008621 fetch 2 ,mem_ui_state_map 
+0x333d 008622 set1 ui_state_bt_hid_handshake ,pdata 
+0x333e 008623 store 2 ,mem_ui_state_map 
+0x333f 008624 rtn 
+:      008626 app_event_enter_sniff:
+0x3340 008627 fetch 2 ,mem_ui_state_map 
+0x3341 008628 set1 ui_state_bt_sniff ,pdata 
+0x3342 008629 store 2 ,mem_ui_state_map 
+0x3343 008630 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3344 008631 set1 app_disc_after_sniff ,pdata 
+0x3345 008632 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3346 008633 rtn 
+:      008635 app_event_exit_sniff:
+0x3347 008636 fetch 2 ,mem_ui_state_map 
+0x3348 008637 set0 ui_state_bt_sniff ,pdata 
+0x3349 008638 store 2 ,mem_ui_state_map 
+0x334a 008639 rtn 
+:      008641 app_le_event_bb_connected:
+0x334b 008642 fetch 2 ,mem_ui_state_map 
+0x334c 008643 set1 ui_state_ble_connected ,pdata 
+0x334d 008644 store 2 ,mem_ui_state_map 
+0x334e 008645 rtn 
+:      008647 app_le_event_bb_disconn:
+0x334f 008648 fetch 2 ,mem_ui_state_map 
+0x3350 008649 set0 ui_state_ble_connected ,pdata 
+0x3351 008650 store 2 ,mem_ui_state_map 
+0x3352 008651 branch app_lpm_mult_disable 
+:      008653 app_bb_event_hid_connected:
+0x3353 008654 fetch 2 ,mem_ui_state_map 
+0x3354 008655 set1 ui_state_bt_hid_conn ,pdata 
+0x3355 008656 store 2 ,mem_ui_state_map 
+0x3356 008657 rtn 
+:      008659 app_evt_button_long_pressed:
+0x3357 008660 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x3358 008661 set1 app_disc_by_button ,pdata 
+0x3359 008662 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x335a 008663 rtn 
+:      008665 app_event_ml2cap_conn_refused:
+0x335b 008666 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x335c 008667 set1 app_disc_l2cap_refused ,pdata 
+0x335d 008668 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x335e 008669 branch app_bt_disconnect 
+:      008672 app_evt_timer:
+0x335f 008673 bpatch patch18_7 ,mem_patch18 
+0x3360 008674 store 1 ,mem_app_evt_timer_count 
+:      008675 app_evt_100ms_loop:
+0x3361 008676 fetch 1 ,mem_app_evt_timer_count 
+0x3362 008677 rtn blank 
+0x3363 008678 increase -1 ,pdata 
+0x3364 008679 store 1 ,mem_app_evt_timer_count 
+0x3365 008680 call ui_button_polling 
+0x3366 008681 call app_lpm_wake_auto_lock_timer 
+0x3367 008682 call app_unsniff_delay_timer 
+0x3368 008683 call app_discovery_timer 
+0x3369 008684 call flash_write_spi_sm_timer 
+0x336a 008685 fetch 2 ,mem_cb_event_timer 
+0x336b 008686 call callback_func 
+0x336c 008687 branch app_evt_100ms_loop 
+:      008692 timer_single_step:
+0x336d 008693 ifetch 1 ,regc 
+0x336e 008694 rtn blank 
+0x336f 008695 pincrease -1 
+0x3370 008696 istore 1 ,regc 
+0x3371 008697 nrtn blank 
+0x3372 008698 copy regb ,pdata 
+0x3373 008699 branch callback_func 
+:      008703 timer_single_step_2b:
+0x3374 008704 ifetch 2 ,regc 
+0x3375 008705 rtn blank 
+0x3376 008706 pincrease -1 
+0x3377 008707 istore 2 ,regc 
+0x3378 008708 nrtn blank 
+0x3379 008709 copy regb ,pdata 
+0x337a 008710 branch callback_func 
+:      008712 app_power_timer:
+0x337b 008713 fetcht 2 ,mem_power_param_ptr 
+0x337c 008714 add temp ,power_timer_offset ,regc 
+0x337d 008715 arg app_power_timer_timeout ,regb 
+0x337e 008716 branch timer_single_step 
+:      008718 app_power_timer_timeout:
+0x337f 008719 call app_got_power_state_common 
+0x3380 008720 beq power_starting ,app_enter_power_stanby_state 
+:      008721 app_enter_power_off_state:
+0x3381 008722 branch app_enter_hibernate 
+:      008723 app_enter_power_stanby_state:
+0x3382 008724 setarg power_standby 
+0x3383 008725 istore 1 ,regc 
+0x3384 008726 add temp ,power_standby_cb_offset ,regb 
+:      008727 app_power_cb_common:
+0x3385 008728 ifetch 2 ,regb 
+0x3386 008729 branch callback_func 
+:      008731 app_unsniff_delay_timer:
+0x3387 008732 arg mem_unsniff2sniff_timer_count ,regc 
+0x3388 008733 arg app_unsniff_delay_timeout ,regb 
+0x3389 008734 branch timer_single_step 
+:      008736 app_unsniff_delay_timeout:
+0x338a 008737 call context_check_idle 
+0x338b 008738 branch app_bt_enter_sniff ,zero 
+0x338c 008739 rtn 
+:      008742 app_discovery_timer:
+0x338d 008743 arg mem_discovery_timeout_timer_count ,regc 
+0x338e 008744 arg app_discovery_timeout ,regb 
+0x338f 008745 branch timer_single_step_2b 
+:      008747 app_discovery_timeout:
+0x3390 008748 call app_bt_stop_discovery 
+0x3391 008749 call app_led_off 
+0x3392 008750 fetch 2 ,mem_cb_discovry_timeout 
+0x3393 008751 branch callback_func 
+:      008754 app_bb_event_reconn_failed:
+0x3394 008755 call app_disconn_reason_flag_clear 
+:      008756 app_clear_reconnect_flag:
+0x3395 008757 fetch 2 ,mem_ui_state_map 
+0x3396 008758 set0 ui_state_bt_reconnect ,pdata 
+0x3397 008759 store 2 ,mem_ui_state_map 
+0x3398 008760 rtn 
+:      008762 app_bb_event_bb_disconn:
+0x3399 008763 jam 0 ,mem_unsniff2sniff_timer_count 
+0x339a 008764 fetch 2 ,mem_ui_state_map 
+0x339b 008765 bbit1 ui_state_bt_reconnect ,app_bb_event_bb_reconn_disconn 
+0x339c 008766 isolate0 ui_state_bt_setup_complete ,pdata 
+0x339d 008767 call app_discard_event ,true 
+:      008768 app_bb_event_bb_reconn_disconn:
+0x339e 008769 bpatch patch19_0 ,mem_patch19 
+0x339f 008770 fetch 2 ,mem_ui_state_map 
+0x33a0 008771 set0 ui_state_bt_connected ,pdata 
+0x33a1 008772 set0 ui_state_bt_setup_complete ,pdata 
+0x33a2 008773 set0 ui_state_bt_hid_conn ,pdata 
+0x33a3 008774 set0 ui_state_bt_hid_handshake ,pdata 
+0x33a4 008775 set0 ui_state_bt_reconnect ,pdata 
+0x33a5 008776 store 2 ,mem_ui_state_map 
+0x33a6 008777 branch app_lpm_mult_disable 
+:      008779 app_bb_hibernate:
+0x33a7 008780 call app_disconn_reason_clear 
+0x33a8 008781 branch app_enter_hibernate 
+:      008784 app_disconn_reason_clear:
+0x33a9 008785 setarg 0 
+0x33aa 008786 store app_disc_rsn_size ,mem_app_disconn_reason 
+0x33ab 008787 rtn 
+:      008788 app_disconn_reason_flag_clear:
+0x33ac 008789 setarg 0 
+0x33ad 008790 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x33ae 008791 rtn 
+:      008793 app_disconn_reason_collect_bt:
+0x33af 008794 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x33b0 008795 store app_disc_rsn_size ,mem_app_disconn_reason 
+0x33b1 008796 setarg 0 
+0x33b2 008797 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x33b3 008798 rtn 
+:      008800 app_disconn_reason_collect_ble:
+0x33b4 008801 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x33b5 008802 set1 app_disc_ble ,pdata 
+0x33b6 008803 store app_disc_rsn_size ,mem_app_disconn_reason 
+0x33b7 008804 setarg 0 
+0x33b8 008805 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x33b9 008806 rtn 
+:      008814 app_check_sniff:
+0x33ba 008815 fetch 1 ,mem_ui_state_map 
+0x33bb 008816 isolate1 ui_state_bt_sniff ,pdata 
+0x33bc 008817 rtn 
+:      008825 app_initflag_store:
+0x33bd 008826 setarg eeprom_init_flag 
+:      008827 app_flag_store:
+0x33be 008828 store 2 ,mem_timeup 
+0x33bf 008829 bpatch patch19_1 ,mem_patch19 
+0x33c0 008830 arg 2 ,temp 
+0x33c1 008831 arg mem_timeup ,rega 
+0x33c2 008832 arg eeprom_module_init_flag ,regb 
+0x33c3 008833 branch iicd_write_eep_data 
+:      008836 app_initflag_check:
+0x33c4 008837 bpatch patch19_2 ,mem_patch19 
+0x33c5 008838 arg 2 ,temp 
+0x33c6 008839 arg mem_pdatatemp ,rega 
+0x33c7 008840 arg eeprom_module_init_flag ,regb 
+0x33c8 008841 call iicd_read_eep_data 
+0x33c9 008842 fetch 2 ,mem_pdatatemp 
+0x33ca 008843 arg eeprom_init_flag ,temp 
+0x33cb 008844 isub temp ,null 
+0x33cc 008845 rtn 
+:      008848 app_start_auto_sniff:
+0x33cd 008849 fetch 1 ,mem_unsniff2sniff_timer 
+0x33ce 008850 store 1 ,mem_unsniff2sniff_timer_count 
+0x33cf 008851 rtn 
+:      008853 app_get_lpm_wake_lock:
+0x33d0 008854 arg wake_lock_app ,queue 
+0x33d1 008855 branch lpm_get_wake_lock 
+:      008857 app_put_lpm_wake_lock:
+0x33d2 008858 arg wake_lock_app ,queue 
+0x33d3 008859 branch lpm_put_wake_lock 
+:      008861 app_lpm_wake_auto_lock:
+0x33d4 008862 jam lpm_wake_up_delay_timer ,mem_wake_up_delay_timer 
+0x33d5 008863 branch app_get_lpm_wake_lock 
+:      008865 app_lpm_wake_auto_lock_timer:
+0x33d6 008866 arg mem_wake_up_delay_timer ,regc 
+0x33d7 008867 arg app_put_lpm_wake_lock ,regb 
+0x33d8 008868 branch timer_single_step 
+:      008870 app_l2cap_flow_control_enable:
+0x33d9 008871 jam l2cap_flow_ctrl_enable ,mem_l2cap_flow_ctrl_flag 
+0x33da 008872 rtn 
+:      008874 app_l2cap_flow_control_disable:
+0x33db 008875 jam l2cap_flow_ctrl_disable ,mem_l2cap_flow_ctrl_flag 
+0x33dc 008876 rtn 
+:      008878 app_bt_set_pincode:
+0x33dd 008879 jam bt_cmd_set_pin_code ,mem_fifo_temp 
+0x33de 008880 branch ui_ipc_send_cmd 
+:      008882 app_bt_role_switch:
+0x33df 008883 jam bt_cmd_role_switch ,mem_fifo_temp 
+0x33e0 008884 branch ui_ipc_send_cmd 
+:      008886 app_bt_start_reconnect:
+0x33e1 008887 bpatch patch19_3 ,mem_patch19 
+0x33e2 008888 fetch 1 ,mem_app_connection_options 
+0x33e3 008889 store 1 ,mem_connection_options 
+0x33e4 008890 jam app_flag_reconnect ,mem_reconnect_flag 
+0x33e5 008891 jam bt_cmd_reconnect ,mem_fifo_temp 
+0x33e6 008892 branch ui_ipc_send_cmd 
+:      008894 app_bt_reconnect_cancel:
+0x33e7 008895 jam bt_cmd_bb_reconn_cancel ,mem_fifo_temp 
+0x33e8 008896 branch ui_ipc_send_cmd 
+:      008898 app_bt_disconnect:
+0x33e9 008899 jam bt_cmd_disconnect ,mem_fifo_temp 
+0x33ea 008900 branch ui_ipc_send_cmd 
+:      008902 app_bt_start_discovery_short:
+0x33eb 008903 fetch 2 ,mem_discovery_timeout 
+0x33ec 008904 store 2 ,mem_discovery_timeout_timer_count 
+:      008905 app_bt_start_discovery_led_blink:
+0x33ed 008906 call app_led_start_blink 
+:      008907 app_bt_start_discovery:
+0x33ee 008908 jam bt_cmd_start_discovery ,mem_fifo_temp 
+0x33ef 008909 branch ui_ipc_send_cmd 
+:      008911 app_bt_stop_discovery:
+0x33f0 008912 setarg 0 
+0x33f1 008913 store 2 ,mem_discovery_timeout_timer_count 
+0x33f2 008914 jam bt_cmd_stop_discovery ,mem_fifo_temp 
+0x33f3 008915 branch ui_ipc_send_cmd 
+:      008917 app_ble_start_direct_adv:
+0x33f4 008918 jam bt_cmd_start_direct_adv ,mem_fifo_temp 
+0x33f5 008919 branch ui_ipc_send_cmd 
+:      008921 app_ble_stop_direct_adv:
+0x33f6 008922 jam bt_cmd_stop_direct_adv ,mem_fifo_temp 
+0x33f7 008923 branch ui_ipc_send_cmd 
+:      008925 app_ble_stop_adv:
+0x33f8 008926 jam bt_cmd_stop_adv ,mem_fifo_temp 
+0x33f9 008927 branch ui_ipc_send_cmd 
+:      008929 app_ble_start_adv:
+0x33fa 008930 jam bt_cmd_start_adv ,mem_fifo_temp 
+0x33fb 008931 branch ui_ipc_send_cmd 
+:      008933 app_ble_start_scan:
+0x33fc 008934 jam bt_cmd_le_start_scan ,mem_fifo_temp 
+0x33fd 008935 branch ui_ipc_send_cmd 
+:      008937 app_ble_stop_scan:
+0x33fe 008938 jam bt_cmd_le_stop_scan ,mem_fifo_temp 
+0x33ff 008939 branch ui_ipc_send_cmd 
+:      008941 app_ble_start_conn:
+0x3400 008942 jam bt_cmd_le_start_conn ,mem_fifo_temp 
+0x3401 008943 branch ui_ipc_send_cmd 
+:      008945 app_ble_disconnect:
+0x3402 008946 jam bt_cmd_le_disconnect ,mem_fifo_temp 
+0x3403 008947 branch ui_ipc_send_cmd 
+:      008949 app_led_start_blink:
+0x3404 008950 jam bt_cmd_led_blink ,mem_fifo_temp 
+0x3405 008951 branch ui_ipc_send_cmd 
+:      008953 app_led_on:
+0x3406 008954 jam bt_cmd_led_on ,mem_fifo_temp 
+0x3407 008955 branch ui_ipc_send_cmd 
+:      008957 app_led_stop_blink:
+:      008958 app_led_off:
+0x3408 008959 jam bt_cmd_led_off ,mem_fifo_temp 
+0x3409 008960 branch ui_ipc_send_cmd 
+:      008962 app_enter_hibernate:
+0x340a 008963 jam bt_cmd_enter_hibernate ,mem_fifo_temp 
+0x340b 008964 branch ui_ipc_send_cmd 
+:      008966 app_bt_sniff_exit:
+0x340c 008967 jam bt_cmd_exit_sniff ,mem_fifo_temp 
+0x340d 008968 branch ui_ipc_send_cmd 
+:      008970 app_bt_enter_sniff:
+0x340e 008971 jam bt_cmd_enter_sniff ,mem_fifo_temp 
+0x340f 008972 branch ui_ipc_send_cmd 
+:      008974 app_ble_store_reconn_info:
+0x3410 008975 jam bt_cmd_store_reconn_info_le ,mem_fifo_temp 
+0x3411 008976 branch ui_ipc_send_cmd 
+:      008978 app_bt_store_reconn_info:
+0x3412 008979 jam bt_cmd_store_reconn_info_bt ,mem_fifo_temp 
+0x3413 008980 branch ui_ipc_send_cmd 
+:      008982 app_store_reconn_info:
+0x3414 008983 jam bt_cmd_store_reconn_info ,mem_fifo_temp 
+0x3415 008984 branch ui_ipc_send_cmd 
+:      008986 app_lpm_mult_enable:
+0x3416 008987 set1 mark_lpm_mult_enable ,mark 
+0x3417 008988 rtn 
+:      008990 app_lpm_mult_disable:
+0x3418 008991 set0 mark_lpm_mult_enable ,mark 
+0x3419 008992 rtn 
+:      009012 app_button_long_pressed:
+0x341a 009013 call app_got_power_state_common 
+0x341b 009014 beq power_standby ,app_power_shutting_down 
+:      009015 app_power_starting:
+0x341c 009016 setarg power_starting 
+0x341d 009017 istore 1 ,regc 
+0x341e 009018 add temp ,power_starting_timeout_offset ,rega 
+0x341f 009019 add temp ,power_starting_cb_offset ,regb 
+:      009020 app_power_common:
+0x3420 009021 ifetcht 1 ,rega 
+0x3421 009022 increase 1 ,regc 
+0x3422 009023 istoret 1 ,regc 
+0x3423 009024 branch app_power_cb_common 
+:      009026 app_power_shutting_down:
+0x3424 009027 setarg power_off 
+0x3425 009028 istore 1 ,regc 
+0x3426 009029 fetch 2 ,mem_ui_state_map 
+0x3427 009030 bbit0 ui_state_ble_connected ,app_power_off_end 
+0x3428 009031 call app_ble_disconnect 
+:      009032 app_power_off_end:
+0x3429 009033 fetcht 2 ,mem_power_param_ptr 
+0x342a 009034 add temp ,power_off_timeout_offset ,rega 
+0x342b 009035 add temp ,power_off_cb_offset ,regb 
+0x342c 009036 branch app_power_common 
+:      009038 app_got_power_state_common:
+0x342d 009039 fetcht 2 ,mem_power_param_ptr 
+0x342e 009040 add temp ,power_state_offset ,regc 
+0x342f 009041 ifetch 1 ,regc 
+0x3430 009042 rtn 
+:      009044 app_event_button_up:
+0x3431 009045 call app_got_power_state_common 
+0x3432 009046 bne power_off ,app_power_release 
+0x3433 009047 branch app_enter_hibernate 
+:      009048 app_power_release:
+0x3434 009049 add temp ,ui_butten_up_cb_offset ,regb 
+0x3435 009050 branch app_power_cb_common 
+:      009052 antilost_init:
+0x3436 009053 rtn wake 
+0x3437 009054 jam 0x00 ,core_gpio_sel1 
+0x3438 009055 setarg antilost_le_before_hibernate 
+0x3439 009056 store 2 ,mem_cb_before_hibernate 
+0x343a 009057 setarg keyscan_process_lpm_before 
+0x343b 009058 store 2 ,mem_cb_before_lpm 
+0x343c 009059 setarg antilost_idle_process 
+0x343d 009060 store 2 ,mem_cb_idle_process 
+0x343e 009061 setarg antilost_le_conn_process 
+0x343f 009062 store 2 ,mem_cb_le_process 
+0x3440 009063 setarg antilost_bb_event_process 
+0x3441 009064 store 2 ,mem_cb_bb_event_process 
+0x3442 009065 setarg antilost_le_bb_event_timer 
+0x3443 009066 store 2 ,mem_cb_event_timer 
+0x3444 009067 setarg antilost_le_notification 
+0x3445 009068 store 2 ,mem_cb_ble_transmit 
+0x3446 009069 setarg antilost_lpm_lock_process 
+0x3447 009070 store 2 ,mem_cb_check_wakelock 
+0x3448 009071 setarg antilost_le_receive_data_process 
+0x3449 009072 store 2 ,mem_cb_att_write 
+0x344a 009073 bpatch patch19_4 ,mem_patch19 
+0x344b 009074 call antilost_buzzer_pwm_init 
+0x344c 009075 call keyscan_key_init 
+0x344d 009076 call antilost_adc_init 
+0x344e 009077 call ui_led_init_global 
+0x344f 009078 call ui_button_init 
+0x3450 009079 setarg antilost_key_up_down 
+0x3451 009080 store 2 ,mem_cb_antl_key 
+0x3452 009081 setarg antilost_power_off_cb 
+0x3453 009082 store 2 ,mem_antl_power_off_cb 
+0x3454 009083 setarg antilost_power_starting_cb 
+0x3455 009084 store 2 ,mem_antl_power_starting_cb 
+0x3456 009085 setarg antilost_power_standby_cb 
+0x3457 009086 store 2 ,mem_antl_power_standby_cb 
+0x3458 009087 setarg antilost_led_on_cb 
+0x3459 009088 store 2 ,mem_antl_led_cb_on 
+0x345a 009089 setarg antilost_led_off_cb 
+0x345b 009090 store 2 ,mem_antl_led_cb_off 
+0x345c 009091 setarg antilost_buzzer_on 
+0x345d 009092 store 2 ,mem_antl_buzzer_cb_on 
+0x345e 009093 setarg antilost_buzzer_off 
+0x345f 009094 store 2 ,mem_antl_buzzer_cb_off 
+0x3460 009095 fetch 2 ,mem_ui_state_map 
+0x3461 009096 rtnbit1 ui_state_btn_down 
+0x3462 009097 branch app_enter_hibernate 
+:      009099 antilost_le_before_hibernate:
+0x3463 009100 call antilost_led_buzzer_stop_blink 
+0x3464 009101 branch app_enter_hibernate 
+:      009103 antilost_le_notification:
+0x3465 009104 call le_fifo_check_nearly_full 
+0x3466 009105 nrtn blank 
+0x3467 009106 arg mem_temp_block5 ,rega 
+0x3468 009107 call queue_pop 
+0x3469 009108 nrtn user 
+0x346a 009109 arg mem_temp_block5 ,contr 
+0x346b 009110 branch le_send_notify_from_list 
+:      009112 antilost_power_standby_cb:
+0x346c 009113 fetch 2 ,mem_antl_le_sleep_timeout 
+0x346d 009114 store 2 ,mem_antl_le_sleep_timer 
+0x346e 009115 jam 1 ,mem_antl_key_scan_enable 
+0x346f 009116 branch antilost_fast_adv_start 
+:      009118 antilost_lpm_lock_process:
+0x3470 009119 fetch 1 ,mem_antl_key_state 
+0x3471 009120 beq 1 ,antilost_lpm_ctrl_for_led_buzzer 
+0x3472 009121 fetch 2 ,mem_ui_state_map 
+0x3473 009122 bbit0 ui_state_ble_connected ,antilost_lpm_ctrl_for_led_buzzer 
+0x3474 009123 fetch 1 ,mem_antl_lost_mode 
+0x3475 009124 beq 1 ,app_get_lpm_wake_lock 
+0x3476 009125 fetch 1 ,mem_antl_queue_curr_num 
+0x3477 009126 nbranch app_get_lpm_wake_lock ,blank 
+0x3478 009127 branch app_put_lpm_wake_lock 
+:      009129 antilost_lpm_ctrl_for_led_buzzer:
+0x3479 009130 fetch 1 ,mem_antl_led_state 
+0x347a 009131 fetcht 1 ,mem_antl_buzzer_state 
+0x347b 009132 ior temp ,pdata 
+0x347c 009133 beq 1 ,app_get_lpm_wake_lock 
+0x347d 009134 branch app_put_lpm_wake_lock 
+:      009136 antilost_bb_event_process:
+0x347e 009137 copy regc ,pdata 
+0x347f 009138 beq bt_evt_button_up ,app_event_button_up 
+0x3480 009139 beq bt_evt_button_long_pressed ,app_button_long_pressed 
+0x3481 009140 beq bt_evt_le_connected ,antilost_le_process_conn 
+0x3482 009141 beq bt_evt_le_disconnected ,antilost_le_process_discon 
+0x3483 009142 beq bt_evt_le_parse_conn_papa_update_rsp ,antilost_le_conn_param_update_rsp_recieved 
+0x3484 009143 rtn 
+:      009144 antilost_le_conn_param_update_rsp_recieved:
+0x3485 009145 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 
+0x3486 009146 beq ble_signaling_connect_parameter_update_rejected ,antilost_le_conn_param_rejected 
+:      009147 antilost_le_conn_param_accepted:
+0x3487 009148 fetch 2 ,mem_le_new_connslavelatency 
+0x3488 009149 branch antilost_master_nonsupport_latency ,blank 
+:      009150 antilost_le_conn_param_updata_procedure_sucsess:
+0x3489 009151 jam conn_param_updata_procedure_complete ,mem_antl_conn_updata_procedure_state 
+0x348a 009152 jam 60 ,mem_antl_conn_update_timer 
+0x348b 009153 rtn 
+:      009155 antilost_le_conn_param_rejected:
+0x348c 009156 fetch 2 ,mem_le_latency 
+0x348d 009157 branch antilost_conn_param_updata_procedure_faild ,blank 
+:      009158 antilost_conn_param_retransimiting:
+0x348e 009159 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state 
+0x348f 009160 fetcht 2 ,mem_interval_increment 
+0x3490 009161 fetch 2 ,mem_le_interval_min 
+0x3491 009162 iadd temp ,pdata 
+0x3492 009163 store 2 ,mem_le_interval_min 
+0x3493 009164 copy pdata ,rega 
+0x3494 009165 fetch 2 ,mem_le_interval_max 
+0x3495 009166 iadd temp ,pdata 
+0x3496 009167 store 2 ,mem_le_interval_max 
+0x3497 009168 iadd rega ,pdata 
+0x3498 009169 rshift pdata ,temp 
+0x3499 009170 fetch 2 ,mem_antl_le_unnormal_interval_max 
+0x349a 009171 idiv temp 
+0x349b 009172 call wait_div_end 
+0x349c 009173 quotient pdata 
+0x349d 009174 store 2 ,mem_le_latency 
+0x349e 009175 jam 1 ,mem_antl_send_updata_le_param_timer 
+0x349f 009176 rtn 
+:      009177 antilost_conn_param_updata_procedure_faild:
+0x34a0 009178 jam conn_param_updata_procedure_faild ,mem_antl_conn_updata_procedure_state 
+0x34a1 009179 rtn 
+:      009181 antilost_master_nonsupport_latency:
+0x34a2 009182 jam 0 ,mem_lpm_mult 
+0x34a3 009183 jam 0 ,mem_antl_send_updata_le_param_timer 
+0x34a4 009184 fetch 2 ,mem_le_new_conninterval 
+0x34a5 009185 fetcht 2 ,mem_antl_le_unnormal_interval_min 
+0x34a6 009186 isub temp ,null 
+0x34a7 009187 setflag positive ,0 ,rega 
+0x34a8 009188 fetch 2 ,mem_antl_le_unnormal_interval_max 
+0x34a9 009189 fetcht 2 ,mem_le_new_conninterval 
+0x34aa 009190 isub temp ,pdata 
+0x34ab 009191 setflag positive ,1 ,rega 
+0x34ac 009192 compare 0x03 ,rega ,0x03 
+0x34ad 009193 rtn true 
+0x34ae 009194 fetch 8 ,mem_antl_le_unnormal_interval_min 
+0x34af 009195 store 8 ,mem_le_interval_min 
+0x34b0 009196 jam 1 ,mem_antl_send_updata_le_param_timer 
+0x34b1 009197 rtn 
+:      009200 antilost_le_bb_event_timer:
+0x34b2 009202 call app_power_timer 
+0x34b3 009203 call antilost_double_click_timer 
+0x34b4 009204 call antilost_le_fast_adv_timer 
+0x34b5 009205 call antilost_le_sleep_timer 
+0x34b6 009206 call antilost_app_updata_le_param_timer 
+0x34b7 009207 call antilost_conn_update_timer 
+0x34b8 009208 branch antilost_adc_check_timer 
+:      009211 antilost_double_click_timer:
+0x34b9 009212 arg mem_double_click_timer ,regc 
+0x34ba 009213 arg antilost_double_click_timeout ,regb 
+0x34bb 009214 branch timer_single_step 
+:      009215 antilost_double_click_timeout:
+0x34bc 009216 jam 0 ,mem_butten_click_cnt 
+0x34bd 009217 rtn 
+:      009218 antilost_le_fast_adv_timer:
+0x34be 009219 arg mem_antl_fast_adv_timer ,regc 
+0x34bf 009220 arg antilost_le_fast_adv_timeout ,regb 
+0x34c0 009221 branch timer_single_step_2b 
+:      009222 antilost_le_fast_adv_timeout:
+0x34c1 009223 arg mem_antl_slow_adv_led_style ,regc 
+0x34c2 009224 arg mem_antl_slow_adv_lpm_interval ,regb 
+0x34c3 009225 branch antilost_adv_start_common 
+:      009228 antilost_conn_update_timer:
+0x34c4 009229 arg mem_antl_conn_update_timer ,regc 
+0x34c5 009230 arg antilost_conn_update_timer_time_out ,regb 
+0x34c6 009231 branch timer_single_step 
+:      009233 antilost_conn_update_timer_time_out:
+0x34c7 009234 fetch 2 ,mem_le_latency 
+0x34c8 009235 store 1 ,mem_lpm_mult 
+0x34c9 009236 rtn 
+:      009237 antilost_app_updata_le_param_timer:
+0x34ca 009238 arg mem_antl_send_updata_le_param_timer ,regc 
+0x34cb 009239 arg antilost_app_updata_le_param_timeout ,regb 
+0x34cc 009240 branch timer_single_step 
+:      009241 antilost_app_updata_le_param_timeout:
+0x34cd 009242 fetch 1 ,mem_le_state 
+0x34ce 009243 compare 0 ,pdata ,0x60 
+0x34cf 009244 nbranch antilost_wait_for_updata_param_instant_expire ,true 
+0x34d0 009245 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state 
+0x34d1 009246 call app_lpm_mult_enable 
+0x34d2 009247 branch le_l2cap_tx_update_req 
+:      009248 antilost_wait_for_updata_param_instant_expire:
+0x34d3 009249 jam 1 ,mem_antl_send_updata_le_param_timer 
+0x34d4 009250 rtn 
+:      009252 antilost_le_sleep_timer:
+0x34d5 009253 arg mem_antl_le_sleep_timer ,regc 
+0x34d6 009254 arg antilost_le_sleep_timer_timeout ,regb 
+0x34d7 009255 branch timer_single_step_2b 
+:      009258 antilost_le_sleep_timer_timeout:
+0x34d8 009259 branch app_button_long_pressed 
+:      009261 antilost_adc_check_timer:
+0x34d9 009264 arg mem_adc_timer ,regc 
+0x34da 009265 arg antilost_adc_check_timer_timeout ,regb 
+0x34db 009266 branch timer_single_step_2b 
+:      009267 antilost_adc_check_timer_timeout:
+0x34dc 009268 fetch 2 ,mem_adc_timeout 
+0x34dd 009269 store 2 ,mem_adc_timer 
+0x34de 009270 branch antilost_battery_process 
+:      009273 antilost_le_process_conn:
+0x34df 009274 fetch 2 ,mem_adc_timeout 
+0x34e0 009275 store 2 ,mem_adc_timer 
+0x34e1 009276 setarg 0 
+0x34e2 009277 store 2 ,mem_antl_fast_adv_timer 
+0x34e3 009278 store 2 ,mem_antl_le_sleep_timer 
+0x34e4 009279 call antilost_alert_off 
+0x34e5 009280 call antilost_led_buzzer_stop_blink 
+0x34e6 009281 jam 0 ,mem_lpm_mult 
+0x34e7 009282 branch app_ble_stop_adv 
+:      009285 antilost_le_process_discon:
+0x34e8 009288 setarg 0 
+0x34e9 009289 store 4 ,mem_adc_timer 
+0x34ea 009290 store 3 ,mem_antl_conn_updata_procedure_state 
+0x34eb 009291 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 
+0x34ec 009293 jam 1 ,mem_alarm_config_notfy_cnt 
+0x34ed 009294 fetch 2 ,mem_antl_le_sleep_timeout 
+0x34ee 009295 store 2 ,mem_antl_le_sleep_timer 
+0x34ef 009296 call queue_init 
+0x34f0 009297 fetch 1 ,mem_antl_power_state 
+0x34f1 009298 rtneq power_off 
+0x34f2 009299 call antilost_fast_adv_start 
+0x34f3 009300 branch antilost_on_off_alarm_after_disconn 
+:      009303 antilost_le_conn_process:
+0x34f4 009305 branch antilost_key_process 
+:      009307 antilost_idle_process:
+0x34f5 009309 fetch 1 ,mem_antl_power_state 
+0x34f6 009310 rtnne power_standby 
+0x34f7 009311 branch antilost_key_process 
+:      009316 antilost_power_starting_cb:
+0x34f8 009317 arg mem_antl_power_starting_buzzer_style ,regc 
+0x34f9 009318 call antilost_buzzer_configuration 
+0x34fa 009319 arg mem_antl_power_starting_led_style ,regc 
+:      009320 antilost_power_common:
+0x34fb 009321 branch antilost_led_configuration 
+:      009323 antilost_power_off_cb:
+0x34fc 009324 jam off ,mem_le_adv_enable 
+0x34fd 009325 arg mem_antl_power_off_buzzer_style ,regc 
+0x34fe 009326 call antilost_buzzer_configuration 
+0x34ff 009327 arg mem_antl_power_off_led_style ,regc 
+0x3500 009328 branch antilost_power_common 
+:      009330 antilost_le_receive_data_process:
+0x3501 009331 fetch 1 ,mem_le_att_opcode 
+0x3502 009332 beq attop_write_request ,antilost_le_parse_att_write_request 
+0x3503 009333 rtn 
+:      009334 antilost_le_parse_att_write_request:
+0x3504 009335 fetch 2 ,mem_le_att_handle 
+0x3505 009337 beq new_spec_write_handle ,antilost_cmd_parse_for_application 
+0x3506 009338 beq new_spec_notification_enable_handle ,antilost_notify_alarm_config_first_time 
+0x3507 009339 rtn 
+:      009344 antilost_key_process:
+0x3508 009345 fetch 1 ,mem_antl_key_scan_enable 
+0x3509 009346 rtn blank 
+0x350a 009347 branch keyscan_key_process 
+:      009351 antilost_key_up_down:
+0x350b 009352 copy rega ,pdata 
+0x350c 009353 branch antilost_key_is_up ,blank 
+:      009354 antilost_key_is_down:
+0x350d 009355 copy queue ,pdata 
+0x350e 009356 beq 0 ,antilost_key0_down 
+0x350f 009357 rtn 
+:      009358 antilost_key_is_up:
+0x3510 009359 copy queue ,pdata 
+0x3511 009360 beq 0 ,antilost_key0_up 
+0x3512 009361 rtn 
+:      009363 antilost_key0_down:
+0x3513 009364 jam 1 ,mem_antl_key_state 
+0x3514 009365 arg mem_antl_key_buzzer_style ,regc 
+0x3515 009366 call antilost_buzzer_configuration 
+0x3516 009367 arg mem_antl_key_led_style ,regc 
+0x3517 009368 call antilost_led_configuration 
+0x3518 009369 fetch 2 ,mem_ui_state_map 
+0x3519 009370 bbit0 ui_state_ble_connected ,antilost_butten_down_while_disconn 
+0x351a 009371 branch antilost_butten_down_after_conn 
+:      009373 antilost_key0_up:
+0x351b 009374 jam 0 ,mem_antl_key_state 
+0x351c 009375 branch antilost_double_click_timer_init 
+:      009379 antilost_double_click_timer_init:
+0x351d 009380 fetch 1 ,mem_butten_click_cnt 
+0x351e 009381 rtnne 1 
+0x351f 009382 jam 5 ,mem_double_click_timer 
+0x3520 009383 rtn 
+:      009385 antilost_butten_down_after_conn:
+0x3521 009386 fetch 1 ,mem_butten_click_cnt 
+0x3522 009387 pincrease 1 
+0x3523 009388 store 1 ,mem_butten_click_cnt 
+0x3524 009389 beq 1 ,antilost_click_once 
+0x3525 009390 beq 2 ,antilost_click_twice 
+0x3526 009391 rtn 
+:      009392 antilost_click_once:
+0x3527 009393 call antilost_alert_off 
+0x3528 009394 jam opcode1_butten_click_once ,mem_antl_key0_press + 5 
+0x3529 009395 arg mem_antl_key0_press ,regc 
+0x352a 009396 branch antilost_prepare_data_and_send 
+:      009397 antilost_click_twice:
+0x352b 009398 jam 0 ,mem_butten_click_cnt 
+0x352c 009399 jam opcode2_butten_double_click ,mem_antl_key0_press + 5 
+0x352d 009400 arg mem_antl_key0_press ,regc 
+0x352e 009401 call antilost_prepare_data_and_send 
+0x352f 009402 fetch 1 ,mem_antl_lost_mode 
+0x3530 009403 beq 1 ,antilost_alert_on 
+0x3531 009404 rtn 
+:      009406 antilost_butten_down_while_disconn:
+0x3532 009407 fetch 2 ,mem_antl_le_sleep_timeout 
+0x3533 009408 store 2 ,mem_antl_le_sleep_timer 
+0x3534 009409 call antilost_alert_off 
+0x3535 009410 branch antilost_fast_adv_start 
+:      009413 antilost_cmd_parse_for_application:
+0x3536 009414 bpatch patch19_5 ,mem_patch19 
+0x3537 009415 call le_app_receive_data 
+0x3538 009416 ifetch 1 ,rega 
+0x3539 009417 beq opcode3_antl_start_alram ,antilost_on_of_alram 
+0x353a 009418 beq opcode7_antl_config_alram ,antilost_configuration_for_alram 
+0x353b 009419 rtn 
+:      009421 antilost_on_of_alram:
+0x353c 009422 fetch 1 ,mem_antl_lost_mode 
+0x353d 009423 beq anti_le_alarm_off ,antilost_alert_on 
+0x353e 009424 beq anti_le_alarm_on ,antilost_alert_off 
+0x353f 009425 rtn 
+:      009427 antilost_configuration_for_alram:
+0x3540 009428 ifetch 1 ,regb 
+0x3541 009429 beq 1 ,antilost_set_start_alarm_after_disconn 
+0x3542 009430 beq 0 ,antilost_set_no_alarm_after_disconn 
+0x3543 009431 rtn 
+:      009438 antilost_prepare_data_and_send:
+0x3544 009439 bpatch patch19_6 ,mem_patch19 
+0x3545 009440 fetch 1 ,mem_client_characteristic_configuration_descriptor 
+0x3546 009441 isolate1 notification_enable_bit ,pdata 
+0x3547 009442 nrtn true 
+0x3548 009443 add regc ,6 ,contr 
+0x3549 009444 ifetch 2 ,contr 
+0x354a 009445 byteswap pdata ,pdata 
+0x354b 009446 add pdata ,5 ,loopcnt 
+0x354c 009447 add regc ,3 ,contr 
+0x354d 009448 call calc_check_sum_start 
+0x354e 009449 istore 1 ,contr 
+0x354f 009450 copy regc ,rega 
+0x3550 009451 branch queue_push 
+:      009457 antilost_alert_on:
+0x3551 009458 fetch 1 ,mem_antl_power_state 
+0x3552 009459 rtn blank 
+0x3553 009460 jam 1 ,mem_antl_lost_mode 
+0x3554 009461 arg mem_antl_alert_buzzer_stlye ,regc 
+0x3555 009462 call antilost_buzzer_configuration 
+0x3556 009463 arg mem_antl_alert_led_stlye ,regc 
+0x3557 009464 call antilost_led_configuration 
+0x3558 009465 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 
+0x3559 009466 jam 1 ,mem_antl_key0_release + 8 
+0x355a 009467 arg mem_antl_key0_release ,regc 
+0x355b 009468 branch antilost_prepare_data_and_send 
+:      009469 antilost_alert_off:
+0x355c 009470 fetch 1 ,mem_antl_lost_mode 
+0x355d 009471 rtn blank 
+0x355e 009472 jam 0 ,mem_antl_lost_mode 
+0x355f 009473 call antilost_led_buzzer_stop_blink 
+0x3560 009474 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 
+0x3561 009475 jam 0 ,mem_antl_key0_release + 8 
+0x3562 009476 arg mem_antl_key0_release ,regc 
+0x3563 009477 branch antilost_prepare_data_and_send 
+:      009479 antilost_set_start_alarm_after_disconn:
+0x3564 009480 jam 1 ,mem_alarm_config 
+0x3565 009481 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 
+0x3566 009482 jam 1 ,mem_antl_key0_release + 8 
+0x3567 009483 arg mem_antl_key0_release ,regc 
+0x3568 009484 branch antilost_prepare_data_and_send 
+:      009485 antilost_set_no_alarm_after_disconn:
+0x3569 009486 jam 0 ,mem_alarm_config 
+0x356a 009487 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 
+0x356b 009488 jam 0 ,mem_antl_key0_release + 8 
+0x356c 009489 arg mem_antl_key0_release ,regc 
+0x356d 009490 branch antilost_prepare_data_and_send 
+:      009491 antilost_on_off_alarm_after_disconn:
+0x356e 009492 fetch 1 ,mem_alarm_config 
+0x356f 009493 rtn blank 
+0x3570 009494 branch antilost_alert_on 
+:      009496 antilost_notify_alarm_config_first_time:
+0x3571 009497 ifetch 2 ,rega 
+0x3572 009498 store 2 ,mem_client_characteristic_configuration_descriptor 
+0x3573 009499 isolate1 notification_enable_bit ,pdata 
+0x3574 009500 nrtn true 
+0x3575 009501 fetch 1 ,mem_alarm_config_notfy_cnt 
+0x3576 009502 rtn blank 
+0x3577 009503 jam 0 ,mem_alarm_config_notfy_cnt 
+0x3578 009504 fetch 8 ,mem_antl_le_interval_min 
+0x3579 009505 store 8 ,mem_le_interval_min 
+0x357a 009506 jam 2 ,mem_antl_send_updata_le_param_timer 
+0x357b 009507 call antilost_battery_process 
+0x357c 009508 call antilost_battery_calculate_end 
+0x357d 009509 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 
+0x357e 009510 fetch 1 ,mem_alarm_config 
+0x357f 009511 store 1 ,mem_antl_key0_release + 8 
+0x3580 009512 arg mem_antl_key0_release ,regc 
+0x3581 009513 branch antilost_prepare_data_and_send 
+:      009517 antilost_buzzer_configuration:
+0x3582 009518 arg 1 ,rega 
+0x3583 009519 branch antilost_configuration_common 
+:      009520 antilost_led_configuration:
+0x3584 009521 arg 0 ,rega 
+:      009522 antilost_configuration_common:
+0x3585 009523 branch antilost_led_buzzer_style_configuration 
+:      009525 antilost_led_buzzer_stop_blink:
+0x3586 009526 arg 0 ,rega 
+0x3587 009527 call ui_led_blink_stop_global 
+0x3588 009528 arg 1 ,rega 
+0x3589 009529 call ui_led_blink_stop_global 
+0x358a 009530 fetch 1 ,mem_buzzer_pwm_conf 
+0x358b 009531 branch pwm_disable 
+:      009533 antilost_led_buzzer_style_configuration:
+0x358c 009534 call calc_curr_struct_prt 
+0x358d 009535 arg 7 ,loopcnt 
+0x358e 009536 branch ui_led_set_style_global + 2 
+:      009540 antilost_fast_adv_start:
+0x358f 009541 arg mem_antl_fast_adv_led_style ,regc 
+0x3590 009542 arg mem_antl_lpm_interval ,regb 
+:      009543 antilost_adv_start_common:
+0x3591 009544 call antilost_adv_interval_lpm_interval_set 
+0x3592 009545 call antilost_led_configuration 
+0x3593 009546 fetch 2 ,mem_antl_fast_adv_timeout 
+0x3594 009547 store 2 ,mem_antl_fast_adv_timer 
+0x3595 009548 branch app_ble_start_adv 
+:      009550 antilost_adv_interval_lpm_interval_set:
+0x3596 009551 ifetch 2 ,regb 
+0x3597 009552 store 2 ,mem_lpm_interval 
+0x3598 009553 ifetch 2 ,contr 
+0x3599 009554 store 2 ,mem_le_adv_interval 
+0x359a 009555 rtn 
+:      009557 antilost_buzzer_pwm_init:
+0x359b 009558 arg 0 ,rega 
+0x359c 009559 call pwm_init 
+0x359d 009560 fetch 6 ,mem_buzzer_pwm_conf 
+0x359e 009561 store 6 ,mem_pdatatemp 
+0x359f 009562 call pwm_out_set 
+0x35a0 009563 fetch 1 ,mem_buzzer_pwm_conf 
+0x35a1 009564 branch pwm_disable 
+:      009566 antilost_led_on_cb:
+0x35a2 009567 jam 1 ,mem_antl_led_state 
+0x35a3 009568 rtn 
+:      009569 antilost_led_off_cb:
+0x35a4 009570 jam 0 ,mem_antl_led_state 
+0x35a5 009571 rtn 
+:      009575 antilost_buzzer_off:
+0x35a6 009576 jam 0 ,mem_antl_buzzer_state 
+0x35a7 009577 fetch 1 ,mem_buzzer_pwm_conf 
+0x35a8 009578 branch pwm_disable 
+:      009580 antilost_buzzer_on:
+0x35a9 009581 jam 1 ,mem_antl_buzzer_state 
+0x35aa 009582 fetch 6 ,mem_buzzer_pwm_conf 
+0x35ab 009583 store 6 ,mem_pdatatemp 
+0x35ac 009584 branch pwm_out_set 
+:      009588 antilost_adc_init:
+0x35ad 009589 jam 0 ,mem_adc_config_flag 
+0x35ae 009590 branch adc_init_data 
+:      009592 antilost_battery_process:
+0x35af 009593 call adc_set_mode 
+0x35b0 009594 call vdd_calculate_by_mode 
+0x35b1 009595 store 2 ,mem_battery_current_voltage 
+0x35b2 009596 arg mem_battery_calculate_set ,rega 
+0x35b3 009597 call adc_bat_percent_lowpower_out 
+0x35b4 009598 store 1 ,mem_voltage_remain_percent 
+0x35b5 009599 beq 0 ,antilost_low_battery 
+0x35b6 009600 sub pdata ,0x64 ,null 
+0x35b7 009601 nbranch antilost_full_battery ,positive 
+0x35b8 009602 store 1 ,mem_antl_key0_release + 8 
+:      009603 antilost_battery_calculate_end:
+0x35b9 009604 jam opcode5_batter_information ,mem_antl_key0_release + 5 
+0x35ba 009605 arg mem_antl_key0_release ,regc 
+0x35bb 009606 branch antilost_prepare_data_and_send 
+:      009607 antilost_full_battery:
+0x35bc 009608 jam 100 ,mem_antl_key0_release + 8 
+0x35bd 009609 branch antilost_battery_calculate_end 
+:      009611 antilost_low_battery:
+0x35be 009612 branch app_button_long_pressed 
+:      009616 car_init:
+0x35bf 009617 rtn wake 
+0x35c0 009618 hfetch 1 ,core_gpio_sel1 
+0x35c1 009619 and_into 0xf0 ,pdata 
+0x35c2 009620 hstore 1 ,core_gpio_sel1 
+0x35c3 009621 setarg car_le_before_hibernate 
+0x35c4 009622 store 2 ,mem_cb_before_hibernate 
+0x35c5 009624 setarg car_le_process_lpm_before 
+0x35c6 009625 store 2 ,mem_cb_before_lpm 
+0x35c7 009627 setarg app_enter_hibernate 
+0x35c8 009628 store 2 ,mem_cb_discovry_timeout 
+0x35c9 009630 setarg car_scale_process_idle 
+0x35ca 009631 store 2 ,mem_cb_idle_process 
+0x35cb 009633 setarg car_scale_process_bb_event 
+0x35cc 009634 store 2 ,mem_cb_bb_event_process 
+0x35cd 009636 setarg app_get_lpm_wake_lock 
+0x35ce 009637 store 2 ,mem_cb_check_wakelock 
+0x35cf 009639 setarg car_le_receive_data 
+0x35d0 009640 store 2 ,mem_cb_att_write 
+0x35d1 009642 setarg car_le_bb_event_timer 
+0x35d2 009643 store 2 ,mem_cb_event_timer 
+0x35d3 009645 call g24_head_ptr2regc 
+0x35d4 009646 setarg car_24g_receive_data 
+0x35d5 009647 add regc ,offset_24g_cb_rxdata_type1 ,contw 
+0x35d6 009648 istore 2 ,contw 
+0x35d7 009650 setarg car_power_off_signal 
+0x35d8 009651 store 2 ,mem_remote_car_power_off_cb 
+0x35d9 009653 setarg car_soft_switch_power_on_signal 
+0x35da 009654 store 2 ,mem_remote_car_power_standby_cb 
+0x35db 009656 bpatch patch19_7 ,mem_patch19 
+0x35dc 009657 call car_init_environment 
+0x35dd 009658 call queue_init 
+0x35de 009659 jam 2 ,mem_lpm_mult 
+0x35df 009660 jam power_on ,mem_car_24g_received_pac 
+0x35e0 009661 fetch 1 ,mem_car_config_soft_switch_enable 
+0x35e1 009662 store 1 ,mem_car_hard_soft_switch 
+0x35e2 009663 beq hard_switch ,car_hard_switch_power_on_signal 
+0x35e3 009664 fetch 1 ,mem_car_config_soft_switch_gpio 
+0x35e4 009665 store 1 ,mem_ui_button_gpio 
+0x35e5 009666 jam off ,mem_le_adv_enable 
+:      009667 car_soft_switch_power_on_init:
+0x35e6 009668 call car_ui_led_init 
+0x35e7 009669 call ui_button_init 
+0x35e8 009670 call ui_button_polling 
+0x35e9 009671 jam power_starting ,mem_car_power_state 
+0x35ea 009672 fetch 2 ,mem_ui_state_map 
+0x35eb 009673 rtnbit1 ui_state_btn_down 
+0x35ec 009674 branch app_enter_hibernate 
+:      009676 car_power_off_signal:
+0x35ed 009677 branch car_ui_led_init 
+:      009679 car_hard_switch_power_on_signal:
+0x35ee 009680 jam power_standby ,mem_car_power_state 
+:      009681 car_soft_switch_power_on_signal:
+0x35ef 009682 jam on ,mem_le_adv_enable 
+0x35f0 009683 call car_ui_led_init 
+0x35f1 009684 arg 0 ,rega 
+0x35f2 009685 call ui_led_blink_start_global 
+0x35f3 009687 setarg fast_adv_interval_value_car 
+0x35f4 009688 call shutter_ble_adv_interval_set 
+:      009689 car_le_modified_name_adv:
+0x35f5 009690 arg mem_le_name + 7 ,contw 
+0x35f6 009691 fetch 1 ,mem_le_lap 
+:      009692 car_name_loop:
+0x35f7 009693 and pdata ,0xF0 ,temp 
+0x35f8 009694 rshift4 temp ,temp 
+0x35f9 009695 call car_hex_to_ascii 
+0x35fa 009696 istoret 1 ,contw 
+0x35fb 009697 and pdata ,0x0F ,temp 
+0x35fc 009698 call car_hex_to_ascii 
+0x35fd 009699 istoret 1 ,contw 
+0x35fe 009700 call le_modified_name_att_list 
+0x35ff 009701 fetcht 1 ,mem_le_name_len 
+0x3600 009702 copy temp ,loopcnt 
+0x3601 009703 arg mem_le_adv_data + 2 ,contw 
+0x3602 009704 arg mem_le_name ,contr 
+0x3603 009705 call memcpy 
+:      009706 car_le_modified_name_scan:
+0x3604 009707 fetcht 1 ,mem_le_name_len 
+0x3605 009708 copy temp ,loopcnt 
+0x3606 009709 arg mem_le_scan_data + 2 ,contw 
+0x3607 009710 arg mem_le_name ,contr 
+0x3608 009711 branch memcpy 
+:      009712 car_hex_to_ascii:
+0x3609 009713 sub temp ,9 ,null 
+0x360a 009714 branch car_hex_num ,positive 
+0x360b 009715 add temp ,55 ,temp 
+0x360c 009716 rtn 
+:      009717 car_hex_num:
+0x360d 009718 add temp ,48 ,temp 
+0x360e 009719 rtn 
+:      009721 car_ui_led_init:
+0x360f 009722 fetch 1 ,mem_car_config_blood_led1_gpio 
+0x3610 009723 bne invalid_pin_num ,car_blood_led_gpio_set 
+:      009724 car_ui_led_init_1:
+0x3611 009725 fetch 1 ,mem_car_config_pairing_led_gpio 
+0x3612 009726 bne invalid_pin_num ,car_pairing_led_gpio_set 
+:      009727 car_ui_led_init_2:
+0x3613 009728 fetch 1 ,mem_car_config_low_voltage_led_gpio 
+0x3614 009729 bne invalid_pin_num ,car_low_voltage_led_gpio_set 
+:      009730 car_ui_led_init_3:
+0x3615 009731 fetch 1 ,mem_car_led_num 
+0x3616 009732 copy pdata ,loopcnt 
+0x3617 009733 setarg mem_car_led_map 
+0x3618 009734 copy pdata ,rega 
+:      009735 car_in_lp1:
+0x3619 009736 copy rega ,contr 
+0x361a 009737 ifetch 1 ,contr 
+0x361b 009738 copy contr ,rega 
+0x361c 009739 beq invalid_pin_num ,car_in_lp1_end 
+0x361d 009740 copy pdata ,temp 
+0x361e 009741 call gpio_config_output 
+:      009742 car_in_lp1_end:
+0x361f 009743 loop car_in_lp1 
+:      009744 car_ui_led_init_end:
+0x3620 009745 rtn 
+:      009746 car_blood_led_gpio_set:
+0x3621 009747 fetch 8 ,mem_car_config_blood_led1_gpio 
+0x3622 009748 store 8 ,mem_car_led_map + 2 
+0x3623 009749 branch car_ui_led_init_1 
+:      009750 car_pairing_led_gpio_set:
+0x3624 009751 store 1 ,mem_car_led_map 
+0x3625 009752 branch car_ui_led_init_2 
+:      009753 car_low_voltage_led_gpio_set:
+0x3626 009754 store 1 ,mem_car_led_map + 1 
+0x3627 009755 branch car_ui_led_init_3 
+:      009758 car_init_environment:
+0x3628 009759 arg 0 ,rega 
+0x3629 009760 call pwm_init 
+0x362a 009761 call car_ir_rx_init 
+0x362b 009762 call g24_receive_process_init 
+0x362c 009763 branch car_init_adc_hvin 
+:      009765 car_init_adc_hvin:
+0x362d 009766 jam 100 ,mem_car_notify_vdd_value_last 
+0x362e 009767 fetch 1 ,mem_car_config_low_voltage_led_gpio 
+0x362f 009768 store 1 ,mem_car_style2_struct_led_gpio 
+0x3630 009769 branch adc_init_data 
+:      009771 car_le_before_hibernate:
+0x3631 009772 call gpio_set_before_lpm_common 
+0x3632 009773 branch keyscan_process_lpm_before 
+:      009775 car_le_process_lpm_before:
+0x3633 009776 branch keyscan_process_lpm_before 
+:      009778 car_key_scan_process:
+0x3634 009781 branch keyscan_key_process 
+:      009783 car_scale_process_idle:
+0x3635 009784 call car_le_send_packet 
+0x3636 009785 call car_ir_receive_process 
+0x3637 009786 call car_g24_status_process 
+0x3638 009787 branch car_key_scan_process 
+:      009789 car_g24_status_process:
+0x3639 009790 fetch 2 ,mem_ui_state_map 
+0x363a 009791 rtnbit1 ui_state_ble_connected 
+0x363b 009792 fetch 1 ,mem_car_24g_received_pac 
+0x363c 009793 beq work_paired ,car_g24_connected_event 
+0x363d 009794 rtn 
+:      009795 car_g24_connected_event:
+0x363e 009796 fetch 1 ,mem_car_24g_status 
+0x363f 009797 rtneq work_paired 
+0x3640 009798 jam work_paired ,mem_car_24g_status 
+0x3641 009799 branch car_g24_connected 
+:      009801 car_le_send_packet:
+0x3642 009802 fetch 2 ,mem_ui_state_map 
+0x3643 009803 rtnbit0 ui_state_ble_connected 
+0x3644 009804 call le_fifo_check_nearly_full 
+0x3645 009805 nrtn blank 
+0x3646 009806 arg mem_car_pop_queue_buff ,rega 
+0x3647 009807 call queue_pop 
+0x3648 009808 nrtn user 
+0x3649 009809 arg mem_car_pop_queue_buff ,contr 
+0x364a 009810 branch le_send_notify_from_list 
+:      009812 car_scale_process_bb_event:
+0x364b 009813 copy regc ,pdata 
+0x364c 009814 beq bt_evt_button_up ,app_event_button_up 
+0x364d 009815 beq bt_evt_button_long_pressed ,app_button_long_pressed 
+0x364e 009816 beq bt_evt_le_connected ,car_scale_event_le_conn 
+0x364f 009817 beq bt_evt_le_disconnected ,car_scale_event_le_discon 
+0x3650 009818 rtn 
+:      009820 car_scale_event_le_conn:
+0x3651 009821 setarg disable_24g 
+0x3652 009822 call g24_store_mem_24g_mode 
+0x3653 009823 branch car_scale_process_conn 
+:      009824 car_g24_connected:
+0x3654 009825 fetch 2 ,mem_car_24g_no_data_timeout_count 
+0x3655 009826 store 2 ,mem_car_24g_no_data_timeout_timer 
+:      009827 car_scale_process_conn:
+0x3656 009828 jam 0x14 ,mem_car_notify_vdd_timer 
+0x3657 009829 jam 0 ,mem_lpm_mode 
+0x3658 009830 call app_ble_stop_adv 
+0x3659 009831 call app_lpm_mult_enable 
+0x365a 009832 fetch 1 ,mem_car_config_pairing_led_conn_status 
+0x365b 009833 beq 0x01 ,car_pairing_led_conn_status_setting 
+:      009834 car_scale_process_conn_next:
+0x365c 009835 arg 0 ,rega 
+0x365d 009836 branch ui_led_on_global 
+:      009837 car_pairing_led_conn_status_setting:
+0x365e 009838 arg 0 ,rega 
+0x365f 009839 branch ui_led_blink_stop_global 
+:      009841 car_scale_event_le_discon:
+0x3660 009842 setarg rx_24g 
+0x3661 009843 call g24_store_mem_24g_mode 
+:      009844 car_g24_disconnect:
+0x3662 009845 setarg 0 
+0x3663 009846 store 5 ,mem_car_led_control 
+0x3664 009847 setarg 4 
+0x3665 009848 call pwm_disable 
+0x3666 009849 setarg 5 
+0x3667 009850 call pwm_disable 
+0x3668 009851 setarg 20 
+0x3669 009852 call pwm_disable 
+0x366a 009853 setarg 21 
+0x366b 009854 call pwm_disable 
+0x366c 009855 setarg 22 
+0x366d 009856 call pwm_disable 
+0x366e 009857 setarg 7 
+0x366f 009858 call pwm_disable 
+0x3670 009859 call queue_init 
+0x3671 009860 jam 10 ,mem_motor1_speed 
+0x3672 009861 jam 10 ,mem_motor2_speed 
+0x3673 009862 jam 10 ,mem_motor3_speed 
+0x3674 009864 jam 2 ,mem_lpm_mult 
+0x3675 009865 arg 0 ,rega 
+0x3676 009866 call ui_led_blink_start_global 
+0x3677 009868 setarg fast_adv_interval_value_car 
+0x3678 009869 call shutter_ble_adv_interval_set 
+0x3679 009870 branch app_ble_start_adv 
+:      009872 car_le_bb_event_timer:
+0x367a 009874 call car_moto1_blank_data_timer 
+0x367b 009875 call car_moto2_blank_data_timer 
+0x367c 009876 call car_moto3_blank_data_timer 
+0x367d 009877 call app_power_timer 
+0x367e 009878 call car_led_control_timer 
+0x367f 009879 call car_notify_vdd_timer 
+0x3680 009880 call car_24g_no_data_timeout_timer 
+0x3681 009881 call car_ir_breakdown_timer 
+0x3682 009882 branch car_attack_shake_timer 
+:      009884 car_ir_breakdown_timer:
+0x3683 009885 arg mem_car_ir_breakdown_check_timer ,regc 
+0x3684 009886 arg car_ir_breakdown_timeout ,regb 
+0x3685 009887 branch timer_single_step 
+:      009888 car_ir_breakdown_timeout:
+0x3686 009889 call car_ir_gpio_get_status 
+0x3687 009890 nrtn true 
+0x3688 009891 jam 1 ,mem_car_ir_breakdown_flag 
+0x3689 009892 rtn 
+:      009894 car_24g_no_data_timeout_timer:
+0x368a 009895 arg mem_car_24g_no_data_timeout_timer ,regc 
+0x368b 009896 arg car_24g_no_data_timer_timeout ,regb 
+0x368c 009897 branch timer_single_step_2b 
+:      009898 car_24g_no_data_timer_timeout:
+0x368d 009899 jam work_search ,mem_car_24g_status 
+0x368e 009900 branch car_g24_disconnect 
+:      009902 car_attack_shake_timer:
+0x368f 009903 arg mem_car_attack_shake_timer ,regc 
+0x3690 009904 arg car_attack_shake ,regb 
+0x3691 009905 branch timer_single_step 
+:      009906 car_attack_shake:
+0x3692 009907 fetch 1 ,mem_car_attack_shake_flag 
+0x3693 009908 branch car_attack_shake_stop ,blank 
+0x3694 009909 jam 2 ,mem_car_attack_shake_timer 
+0x3695 009910 jam 0 ,mem_car_attack_shake_flag 
+0x3696 009911 setarg 0x0a02 
+0x3697 009912 store 2 ,mem_le_receive_payload 
+0x3698 009913 fetch 1 ,mem_car_config_device_select 
+0x3699 009914 beq device_battle_tank ,car_attack_shake_front_battle_tank 
+:      009915 car_attack_shake_front_battle_car:
+0x369a 009916 branch car_motor_control 
+:      009917 car_attack_shake_front_battle_tank:
+0x369b 009918 setarg 0x0a02 
+0x369c 009919 store 2 ,mem_le_receive_payload + 2 
+0x369d 009920 branch car_motor_control 
+:      009921 car_attack_shake_stop:
+0x369e 009922 setarg 0 
+0x369f 009923 store 4 ,mem_le_receive_payload 
+0x36a0 009924 branch car_motor_control 
+:      009926 car_notify_vdd_timer:
+0x36a1 009927 fetch 1 ,mem_car_config_bat_notify_enable 
+0x36a2 009928 rtn blank 
+0x36a3 009929 fetch 2 ,mem_ui_state_map 
+0x36a4 009930 bbit0 ui_state_ble_connected ,car_low_bat_led_off 
+0x36a5 009931 arg mem_car_notify_vdd_timer ,regc 
+0x36a6 009932 arg car_notify_vdd ,regb 
+0x36a7 009933 branch timer_single_step 
+:      009934 car_notify_vdd:
+0x36a8 009935 fetch 1 ,mem_car_notify_vdd_count 
+0x36a9 009936 store 1 ,mem_car_notify_vdd_timer 
+0x36aa 009937 fetch 1 ,mem_car_working_flag 
+0x36ab 009938 nrtn blank 
+:      009939 car_read_hvin:
+0x36ac 009940 call adc_set_mode 
+0x36ad 009941 call vdd_calculate_by_mode 
+0x36ae 009942 store 2 ,mem_vdd_now_vol 
+0x36af 009943 arg mem_vdd_calculate_set ,rega 
+0x36b0 009944 call adc_bat_percent_lowpower_out 
+0x36b1 009945 fetcht 1 ,mem_car_notify_vdd_value_last 
+0x36b2 009946 isub temp ,null 
+0x36b3 009947 branch car_notify_vdd_next2 ,positive 
+0x36b4 009948 store 1 ,mem_car_notify_vdd_value_last 
+0x36b5 009949 copy pdata ,temp 
+:      009950 car_notify_vdd_next2:
+0x36b6 009951 storet 1 ,mem_car_notify_vdd_percent 
+0x36b7 009952 fetch 1 ,mem_car_config_low_voltage_percent 
+0x36b8 009953 isub temp ,null 
+0x36b9 009954 call car_enter_low_bat ,positive 
+0x36ba 009955 storet 1 ,mem_notify_bat_payload 
+0x36bb 009956 arg 6 ,loopcnt 
+0x36bc 009957 arg mem_notify_bat_head ,contr 
+0x36bd 009958 call calc_check_sum_start 
+0x36be 009959 store 1 ,mem_notify_bat_check_sum 
+0x36bf 009960 arg mem_notify_bat_packet ,rega 
+0x36c0 009961 branch queue_push 
+:      009962 car_enter_low_bat:
+0x36c1 009963 fetch 1 ,mem_low_bat_flag 
+0x36c2 009964 nrtn blank 
+0x36c3 009965 jam 1 ,mem_low_bat_flag 
+0x36c4 009966 arg 1 ,rega 
+0x36c5 009967 branch ui_led_blink_start_global 
+:      009968 car_low_bat_led_off:
+0x36c6 009969 arg 1 ,rega 
+0x36c7 009970 branch ui_led_blink_stop_global 
+:      009972 car_led_control_timer:
+0x36c8 009973 arg mem_car_led_control_timer ,regc 
+0x36c9 009974 arg car_led_control ,regb 
+0x36ca 009975 branch timer_single_step 
+:      009976 car_led_control:
+0x36cb 009977 jam 5 ,mem_car_led_control_timer 
+0x36cc 009978 jam 0 ,mem_car_led_no 
+0x36cd 009979 fetch 1 ,mem_car_led_blink_status 
+0x36ce 009980 beq led_on ,car_led_control_blink_off 
+0x36cf 009981 beq led_off ,car_led_control_blink_on 
+:      009982 car_led_control_set:
+0x36d0 009983 arg mem_car_led_control ,contr 
+0x36d1 009984 copy contr ,rega 
+0x36d2 009985 arg 8 ,loopcnt 
+:      009986 car_led_control_timer_next:
+0x36d3 009987 copy rega ,contr 
+0x36d4 009988 ifetch 1 ,contr 
+0x36d5 009989 copy contr ,rega 
+0x36d6 009990 beq led_off ,car_led_control_off 
+0x36d7 009991 beq led_on ,car_led_control_on 
+0x36d8 009992 beq led_blink ,car_led_control_blink 
+:      009993 car_led_control_timer_next_2:
+0x36d9 009994 fetch 1 ,mem_car_led_no 
+0x36da 009995 increase 1 ,pdata 
+0x36db 009996 store 1 ,mem_car_led_no 
+0x36dc 009997 loop car_led_control_timer_next 
+0x36dd 009998 rtn 
+:      009999 car_led_switch:
+0x36de 010000 fetch 1 ,mem_car_led_no 
+0x36df 010001 arg mem_car_config_blood_led_gpio ,regb 
+0x36e0 010002 iadd regb ,regb 
+0x36e1 010003 ifetcht 1 ,regb 
+0x36e2 010004 rtn 
+:      010005 car_led_control_off:
+0x36e3 010006 call car_led_switch 
+0x36e4 010007 call gpio_out_inactive 
+0x36e5 010008 branch car_led_control_timer_next_2 
+:      010009 car_led_control_on:
+0x36e6 010010 call car_led_switch 
+0x36e7 010011 call gpio_out_active 
+0x36e8 010012 branch car_led_control_timer_next_2 
+:      010013 car_led_control_blink:
+0x36e9 010014 fetch 1 ,mem_car_led_blink_status 
+0x36ea 010015 beq led_on ,car_led_control_off 
+0x36eb 010016 branch car_led_control_on 
+:      010017 car_led_control_blink_on:
+0x36ec 010018 jam led_on ,mem_car_led_blink_status 
+0x36ed 010019 branch car_led_control_set 
+:      010020 car_led_control_blink_off:
+0x36ee 010021 jam led_off ,mem_car_led_blink_status 
+0x36ef 010022 branch car_led_control_set 
+:      010026 calc_check_sum_start:
+0x36f0 010027 arg 0 ,rega 
+:      010028 calc_check_sum_loop:
+0x36f1 010029 ifetch 1 ,contr 
+0x36f2 010030 iadd rega ,rega 
+0x36f3 010031 loop calc_check_sum_loop 
+:      010032 calc_check_sum_and:
+0x36f4 010033 and rega ,0xff ,pdata 
+0x36f5 010034 rtn 
+:      010036 car_le_receive_data:
+0x36f6 010037 fetch 1 ,mem_le_att_opcode 
+0x36f7 010038 beq attop_write_request ,car_le_parse_att_write_request 
+0x36f8 010039 rtn 
+:      010040 car_le_parse_att_write_request:
+0x36f9 010041 fetch 2 ,mem_le_att_handle 
+0x36fa 010042 beq att_car_control_handle ,car_control_le_receive 
+0x36fb 010043 rtn 
+:      010055 le_app_receive_data:
+0x36fc 010056 bpatch patch1a_0 ,mem_patch1a 
+0x36fd 010057 ifetch 5 ,rega 
+0x36fe 010058 store 5 ,mem_app_receive_temp 
+0x36ff 010059 fetch 2 ,mem_app_receive_temp 
+0x3700 010060 arg le_receive_packet_head ,temp 
+0x3701 010061 isub temp ,null 
+0x3702 010062 nrtn zero 
+0x3703 010063 fetch 2 ,mem_app_receive_temp + 3 
+0x3704 010064 byteswap pdata ,pdata 
+0x3705 010065 store 2 ,mem_app_receive_temp + 3 
+0x3706 010066 copy pdata ,loopcnt 
+0x3707 010067 increase 5 ,rega 
+0x3708 010068 copy rega ,contr 
+0x3709 010069 arg mem_app_receive_temp + 5 ,contw 
+0x370a 010070 call memcpy 
+0x370b 010071 ifetch 1 ,contr 
+0x370c 010072 store 1 ,mem_app_receive_temp + 15 
+0x370d 010073 arg mem_app_receive_temp + 2 ,rega 
+0x370e 010074 arg mem_app_receive_temp + 5 ,regb 
+0x370f 010075 rtn 
+:      010077 car_control_le_receive:
+0x3710 010078 setarg 0 
+0x3711 010079 store 5 ,mem_le_receive_payload 
+0x3712 010080 store 5 ,mem_le_receive_payload + 5 
+0x3713 010081 call le_app_receive_data 
+0x3714 010082 copy regb ,contr 
+0x3715 010083 arg mem_le_receive_payload ,contw 
+0x3716 010084 arg 10 ,loopcnt 
+0x3717 010085 call memcpy 
+:      010086 car_receive_cmd_select:
+0x3718 010087 bpatch patch1a_1 ,mem_patch1a 
+0x3719 010088 ifetch 1 ,rega 
+0x371a 010089 beq car_cmd_old_car_control ,car_drive_old 
+0x371b 010090 beq car_cmd_old_speed_control ,car_speed_set_old 
+0x371c 010091 beq car_cmd_l_r_motor_control ,car_motor_control 
+0x371d 010092 beq car_cmd_f_b_motor_control ,car_motor_control 
+0x371e 010093 beq car_cmd_ir_control ,car_ir_data_rx_from_app 
+0x371f 010094 beq car_cmd_led_control ,car_led_control_receive 
+0x3720 010095 beq car_cmd_device_info ,car_info_request 
+0x3721 010096 rtn 
+:      010098 car_24g_receive_data:
+0x3722 010099 fetch 2 ,mem_ui_state_map 
+0x3723 010100 rtnbit1 ui_state_ble_connected 
+0x3724 010102 fetch 2 ,mem_car_24g_no_data_timeout_count 
+0x3725 010103 store 2 ,mem_car_24g_no_data_timeout_timer 
+0x3726 010105 jam work_paired ,mem_car_24g_received_pac 
+0x3727 010107 setarg offset_24g_rxdata_temp_add3 
+0x3728 010108 call g24_set_rega 
+0x3729 010109 call car_control_le_receive 
+0x372a 010111 fetch 1 ,mem_app_receive_temp + 2 
+0x372b 010112 beq car_cmd_l_r_motor_control ,car_24g_receive_data_next 
+0x372c 010113 beq car_cmd_f_b_motor_control ,car_24g_receive_data_next 
+0x372d 010114 rtn 
+:      010115 car_24g_receive_data_next:
+0x372e 010116 fetch 1 ,mem_le_receive_payload 
+0x372f 010117 ncall car_moto1_enable_blank_data_timer ,blank 
+0x3730 010118 fetch 1 ,mem_le_receive_payload + 2 
+0x3731 010119 ncall car_moto2_enable_blank_data_timer ,blank 
+0x3732 010120 fetch 1 ,mem_le_receive_payload + 4 
+0x3733 010121 ncall car_moto3_enable_blank_data_timer ,blank 
+0x3734 010122 rtn 
+:      010124 car_moto1_enable_blank_data_timer:
+0x3735 010125 jam 5 ,mem_car_moto1_blank_timer 
+0x3736 010126 rtn 
+:      010127 car_moto2_enable_blank_data_timer:
+0x3737 010128 jam 5 ,mem_car_moto2_blank_timer 
+0x3738 010129 rtn 
+:      010130 car_moto3_enable_blank_data_timer:
+0x3739 010131 jam 5 ,mem_car_moto3_blank_timer 
+0x373a 010132 rtn 
+:      010134 car_moto1_blank_data_timer:
+0x373b 010135 arg mem_car_moto1_blank_timer ,regc 
+0x373c 010136 arg car_moto1_blank_data ,regb 
+0x373d 010137 branch timer_single_step 
+:      010138 car_moto2_blank_data_timer:
+0x373e 010139 arg mem_car_moto2_blank_timer ,regc 
+0x373f 010140 arg car_moto2_blank_data ,regb 
+0x3740 010141 branch timer_single_step 
+:      010142 car_moto3_blank_data_timer:
+0x3741 010143 arg mem_car_moto3_blank_timer ,regc 
+0x3742 010144 arg car_moto3_blank_data ,regb 
+0x3743 010145 branch timer_single_step 
+:      010147 car_moto1_blank_data:
+0x3744 010148 jam 0 ,mem_le_receive_payload 
+0x3745 010149 branch car_motor_control 
+:      010150 car_moto2_blank_data:
+0x3746 010151 jam 0 ,mem_le_receive_payload + 2 
+0x3747 010152 branch car_motor_control 
+:      010153 car_moto3_blank_data:
+0x3748 010154 jam 0 ,mem_le_receive_payload + 4 
+0x3749 010155 branch car_motor_control 
+:      010160 car_drive_old:
+0x374a 010161 call car_left_right_control_old 
+0x374b 010162 branch car_front_back_control_old 
+:      010163 car_left_right_control_old:
+0x374c 010164 fetch 1 ,mem_le_receive_payload 
+0x374d 010165 store 1 ,mem_motor2_status 
+0x374e 010166 branch car_motor2_control 
+:      010167 car_front_back_control_old:
+0x374f 010168 fetch 1 ,mem_motor1_speed 
+0x3750 010169 call car_reset_old_speed 
+0x3751 010170 fetch 1 ,mem_le_receive_payload + 1 
+0x3752 010171 store 1 ,mem_motor1_status 
+0x3753 010172 branch car_motor1_control 
+:      010173 car_reset_old_speed:
+0x3754 010174 beq speed_level_2 ,car_reset_old_speed2 
+0x3755 010175 beq speed_level_3 ,car_reset_old_speed3 
+0x3756 010176 store 1 ,mem_motor1_speed 
+0x3757 010177 rtn 
+:      010178 car_reset_old_speed2:
+0x3758 010179 jam speed_level_5 ,mem_motor1_speed 
+0x3759 010180 rtn 
+:      010181 car_reset_old_speed3:
+0x375a 010182 jam speed_level_10 ,mem_motor1_speed 
+0x375b 010183 rtn 
+:      010184 car_speed_set_old:
+0x375c 010185 fetch 1 ,mem_le_receive_payload 
+0x375d 010186 call car_reset_old_speed 
+0x375e 010187 fetch 1 ,mem_motor1_speed 
+0x375f 010188 call car_motor_speed_duty_setting 
+0x3760 010189 call car_motor_speed_duty_transform 
+0x3761 010190 branch pwm_pwm0_duty_set 
+:      010192 car_motor_control:
+0x3762 010193 fetch 1 ,mem_car_24g_go_die_flag 
+0x3763 010194 nrtn blank 
+0x3764 010195 fetch 6 ,mem_le_receive_payload 
+0x3765 010196 store 6 ,mem_motor1_status 
+0x3766 010197 fetch 1 ,mem_motor1_speed 
+0x3767 010198 fetcht 1 ,mem_motor2_speed 
+0x3768 010199 iand temp ,pdata 
+0x3769 010200 fetcht 1 ,mem_motor3_speed 
+0x376a 010201 iand temp ,pdata 
+0x376b 010202 call car_motor_working_flag ,blank 
+0x376c 010203 bpatch patch1a_2 ,mem_patch1a 
+0x376d 010204 call car_motor1_control 
+0x376e 010205 call car_motor2_control 
+0x376f 010206 branch car_motor3_control 
+:      010207 car_motor1_control:
+0x3770 010208 arg mem_motor1_pwm_set ,regb 
+0x3771 010209 arg mem_motor1_status ,contr 
+0x3772 010210 branch car_motor_status_select 
+:      010211 car_motor2_control:
+0x3773 010212 arg mem_motor2_pwm_set ,regb 
+0x3774 010213 arg mem_motor2_status ,contr 
+0x3775 010214 branch car_motor_status_select 
+:      010215 car_motor3_control:
+0x3776 010216 arg mem_motor3_pwm_set ,regb 
+0x3777 010217 arg mem_motor3_status ,contr 
+0x3778 010218 branch car_motor_status_select 
+:      010219 car_motor_working_flag:
+0x3779 010220 jam 0 ,mem_car_working_flag 
+0x377a 010221 rtn 
+:      010223 car_motor_status_select:
+0x377b 010224 ifetch 1 ,contr 
+0x377c 010225 beq motor_stop ,car_motor_stop 
+0x377d 010226 beq go_front ,car_motor_positive 
+0x377e 010227 beq go_back ,car_motor_negative 
+0x377f 010228 rtn 
+:      010229 car_motor_positive:
+0x3780 010230 jam 0 ,mem_motor_select_p_n 
+0x3781 010231 branch car_motor_negative + 1 
+:      010232 car_motor_negative:
+0x3782 010233 jam 1 ,mem_motor_select_p_n 
+0x3783 010234 ifetch 1 ,contr 
+0x3784 010235 store 1 ,mem_car_motor_speed 
+0x3785 010236 ifetch 8 ,regb 
+0x3786 010237 branch car_motor_work 
+:      010239 car_motor_stop:
+0x3787 010240 ifetch 1 ,regb 
+0x3788 010241 call pwm_disable 
+0x3789 010242 increase 1 ,regb 
+0x378a 010243 ifetch 1 ,regb 
+0x378b 010244 branch pwm_disable 
+:      010245 car_motor_work:
+0x378c 010246 store 8 ,mem_motor_pwm_pin1_set 
+0x378d 010247 jam 1 ,mem_car_working_flag 
+0x378e 010248 fetch 1 ,mem_motor_select_p_n 
+0x378f 010249 beq 0 ,car_motor_select_positive 
+:      010250 car_motor_select_negative:
+0x3790 010251 fetch 1 ,mem_motor_pwm_pin2_set 
+0x3791 010252 store 1 ,mem_motor_pwm_pin_set 
+0x3792 010253 fetch 1 ,mem_motor_pwm_pin1_set 
+:      010254 car_motor_work_next:
+0x3793 010255 call pwm_disable 
+0x3794 010256 fetch 1 ,mem_car_motor_speed 
+0x3795 010257 call car_motor_speed_duty_setting 
+0x3796 010258 store 1 ,mem_motor_pwm_dute_set 
+0x3797 010259 fetch 6 ,mem_motor_pwm_pin_set 
+0x3798 010260 store 6 ,mem_pdatatemp 
+0x3799 010261 branch pwm_out_set 
+:      010262 car_motor_select_positive:
+0x379a 010263 fetch 1 ,mem_motor_pwm_pin1_set 
+0x379b 010264 store 1 ,mem_motor_pwm_pin_set 
+0x379c 010265 fetch 1 ,mem_motor_pwm_pin2_set 
+0x379d 010266 branch car_motor_work_next 
+:      010268 car_motor_speed_duty_setting:
+0x379e 010269 mul32 pdata ,5 ,pdata 
+0x379f 010270 add pdata ,50 ,pdata 
+0x37a0 010271 rtn 
+:      010272 car_motor_speed_duty_transform:
+0x37a1 010273 arg 12000 ,temp 
+0x37a2 010274 imul32 temp ,pdata 
+0x37a3 010275 div pdata ,100 
+0x37a4 010276 call wait_div_end 
+0x37a5 010277 quotient temp 
+0x37a6 010278 copy temp ,rega 
+0x37a7 010279 setarg 12000 
+0x37a8 010280 isub temp ,regb 
+0x37a9 010281 rtn 
+:      010284 car_ir_init:
+0x37aa 010285 hfetch 1 ,core_gpio_sel2 
+0x37ab 010286 set1 2 ,pdata 
+0x37ac 010287 hstore 1 ,core_gpio_sel2 
+0x37ad 010288 setarg 158 
+0x37ae 010289 hstore 2 ,core_pwm_pcnt4 
+0x37af 010290 hstore 2 ,core_pwm_ncnt4 
+0x37b0 010291 rtn 
+:      010293 car_ir_data_rx_from_app:
+0x37b1 010294 fetch 1 ,mem_car_24g_go_die_flag 
+0x37b2 010295 nrtn blank 
+0x37b3 010296 fetch 2 ,mem_le_receive_payload 
+0x37b4 010297 store 2 ,mem_ir_data 
+0x37b5 010298 fetch 1 ,mem_car_24g_status 
+0x37b6 010299 bne work_paired ,car_ir_data_tx 
+0x37b7 010300 fetch 2 ,mem_le_lap 
+0x37b8 010301 store 2 ,mem_ir_data 
+:      010302 car_ir_data_tx:
+0x37b9 010303 bpatch patch1a_3 ,mem_patch1a 
+0x37ba 010304 call car_ir_init 
+0x37bb 010305 call car_ir_enable 
+0x37bc 010306 setarg 48000 
+0x37bd 010307 call sleep 
+0x37be 010308 call car_ir_disable 
+0x37bf 010309 setarg 7200 
+0x37c0 010310 call sleep 
+0x37c1 010311 arg 16 ,loopcnt 
+:      010312 car_ir_send_loop:
+0x37c2 010313 call car_ir_enable 
+0x37c3 010314 fetch 2 ,mem_ir_data 
+0x37c4 010315 bbit1 0 ,car_ir_is_bit1 
+0x37c5 010316 setarg 7200 
+0x37c6 010317 call sleep 
+0x37c7 010318 call car_ir_disable 
+0x37c8 010319 branch car_ir_wait_finish 
+:      010321 car_ir_is_bit1:
+0x37c9 010322 setarg 14400 
+0x37ca 010323 call sleep 
+0x37cb 010324 call car_ir_disable 
+:      010325 car_ir_wait_finish:
+0x37cc 010326 setarg 7200 
+0x37cd 010327 call sleep 
+0x37ce 010328 fetch 2 ,mem_ir_data 
+0x37cf 010329 rshift pdata ,pdata 
+0x37d0 010330 store 2 ,mem_ir_data 
+0x37d1 010331 loop car_ir_send_loop 
+0x37d2 010333 jam 2 ,mem_car_attack_shake_timer 
+0x37d3 010334 jam 1 ,mem_car_attack_shake_flag 
+0x37d4 010335 setarg 0x0a01 
+0x37d5 010336 store 2 ,mem_le_receive_payload 
+0x37d6 010337 fetch 1 ,mem_car_config_device_select 
+0x37d7 010338 beq device_battle_tank ,car_attack_shake_back_battle_tank 
+:      010339 car_attack_shake_back_battle_car:
+0x37d8 010340 branch car_motor_control 
+:      010341 car_attack_shake_back_battle_tank:
+0x37d9 010342 setarg 0x0a01 
+0x37da 010343 store 2 ,mem_le_receive_payload + 2 
+0x37db 010344 branch car_motor_control 
+:      010346 car_ir_enable:
+0x37dc 010347 hfetch 1 ,core_gpio_key2 
+0x37dd 010348 or_into 0x40 ,pdata 
+0x37de 010349 hstore 1 ,core_gpio_key2 
+0x37df 010350 rtn 
+:      010351 car_ir_disable:
+0x37e0 010352 hfetch 1 ,core_gpio_key2 
+0x37e1 010353 and_into 0xbf ,pdata 
+0x37e2 010354 hstore 1 ,core_gpio_key2 
+0x37e3 010355 rtn 
+:      010357 car_ir_rx_init:
+0x37e4 010358 fetch 1 ,mem_car_config_ir_enable 
+0x37e5 010359 rtneq 0x00 
+0x37e6 010360 call lpm_disable_exen_output 
+0x37e7 010361 fetcht 1 ,mem_car_config_ir_rx_gpio 
+0x37e8 010362 storet 1 ,mem_ir_rx_gpio 
+0x37e9 010363 call gpio_config_input 
+0x37ea 010364 call car_ir_gpio_get_status 
+0x37eb 010365 nrtn true 
+0x37ec 010366 jam 1 ,mem_car_ir_breakdown_check_timer 
+0x37ed 010367 rtn 
+:      010369 car_ir_receive_process:
+0x37ee 010370 fetch 1 ,mem_car_config_ir_enable 
+0x37ef 010371 rtneq flag_ir_disable 
+0x37f0 010372 fetch 1 ,mem_car_ir_breakdown_flag 
+0x37f1 010373 nrtn blank 
+0x37f2 010374 fetch 2 ,mem_ui_state_map 
+0x37f3 010375 bbit1 ui_state_ble_connected ,car_ir_receive_process_next 
+0x37f4 010376 fetch 1 ,mem_car_24g_status 
+0x37f5 010377 rtnne work_paired 
+:      010378 car_ir_receive_process_next:
+0x37f6 010379 bpatch patch1a_4 ,mem_patch1a 
+0x37f7 010380 call car_ir_gpio_get_status 
+0x37f8 010381 nrtn true 
+0x37f9 010382 setarg 36000 
+0x37fa 010383 call sleep 
+0x37fb 010384 call car_ir_gpio_get_status 
+0x37fc 010385 nrtn true 
+0x37fd 010386 call car_ir_clk_get 
+:      010387 car_ir_packet_head_wait_end:
+0x37fe 010388 call car_ir_clk_check 
+0x37ff 010389 nrtn positive 
+0x3800 010390 call car_ir_gpio_get_status 
+0x3801 010391 branch car_ir_packet_head_wait_end ,true 
+0x3802 010392 arg 0 ,rega 
+0x3803 010393 arg 16 ,loopcnt 
+0x3804 010394 call car_ir_clk_get 
+:      010395 car_ir_receive_process_loop:
+0x3805 010396 call car_ir_clk_check 
+0x3806 010397 nrtn positive 
+0x3807 010398 call car_ir_gpio_get_status 
+0x3808 010399 nbranch car_ir_receive_process_loop ,true 
+0x3809 010400 setarg 10800 
+0x380a 010401 call sleep 
+0x380b 010402 call car_ir_gpio_get_status 
+0x380c 010403 branch car_ir_get_bit1 ,true 
+:      010404 car_ir_get_bit0:
+0x380d 010405 setarg 0 
+0x380e 010406 rshift rega ,rega 
+0x380f 010407 ior rega ,rega 
+0x3810 010408 loop car_ir_receive_process_loop 
+0x3811 010409 branch car_ir_receive_process_end 
+:      010410 car_ir_get_bit1:
+0x3812 010411 setarg 0x8000 
+0x3813 010412 rshift rega ,rega 
+0x3814 010413 ior rega ,rega 
+0x3815 010414 call car_ir_clk_get 
+:      010415 car_ir_get_bit1_wait_low_end:
+0x3816 010416 call car_ir_clk_check 
+0x3817 010417 nrtn positive 
+0x3818 010418 call car_ir_gpio_get_status 
+0x3819 010419 branch car_ir_get_bit1_wait_low_end ,true 
+0x381a 010420 loop car_ir_receive_process_loop 
+:      010421 car_ir_receive_process_end:
+0x381b 010422 bpatch patch1a_5 ,mem_patch1a 
+0x381c 010423 copy rega ,pdata 
+0x381d 010424 store 2 ,mem_ir_rx_buf 
+0x381e 010425 store 2 ,mem_ir_notify_data + 8 
+0x381f 010426 fetch 1 ,mem_car_24g_status 
+0x3820 010427 beq work_paired ,car_ir_24g_receive_attack 
+:      010428 car_ir_data_notify:
+0x3821 010429 arg 0x07 ,loopcnt 
+0x3822 010430 arg mem_ir_notify_data_head ,contr 
+0x3823 010431 call calc_check_sum_start 
+0x3824 010432 store 1 ,mem_ir_notify_data_check_sum 
+0x3825 010433 arg mem_ir_notify_data ,rega 
+0x3826 010434 branch queue_push 
+:      010436 car_ir_24g_receive_attack:
+0x3827 010437 fetch 1 ,mem_car_24g_ir_receive_attack_count 
+0x3828 010438 increase 1 ,pdata 
+0x3829 010439 store 1 ,mem_car_24g_ir_receive_attack_count 
+0x382a 010440 div pdata ,2 
+0x382b 010441 call wait_div_end 
+0x382c 010442 quotient temp 
+0x382d 010443 remainder pdata 
+0x382e 010444 nbranch car_ir_24g_receive_attack_blink ,blank 
+:      010445 car_ir_24g_receive_attack_off:
+0x382f 010446 fetch 1 ,mem_car_config_led_num 
+0x3830 010447 isub temp ,null 
+0x3831 010448 call car_ir_24g_go_die ,zero 
+0x3832 010449 arg mem_car_led_control ,pdata 
+0x3833 010450 increase -1 ,temp 
+0x3834 010451 iadd temp ,rega 
+0x3835 010452 arg 0 ,pdata 
+0x3836 010453 istore 1 ,rega 
+0x3837 010454 rtn 
+:      010455 car_ir_24g_receive_attack_blink:
+0x3838 010456 arg mem_car_led_control ,pdata 
+0x3839 010457 iadd temp ,rega 
+0x383a 010458 arg 2 ,pdata 
+0x383b 010459 istore 1 ,rega 
+0x383c 010460 rtn 
+:      010461 car_ir_24g_go_die:
+0x383d 010462 jam 1 ,mem_car_24g_go_die_flag 
+0x383e 010463 rtn 
+:      010464 car_ir_clk_get:
+0x383f 010465 copy clkn_bt ,pdata 
+0x3840 010466 store 4 ,mem_ir_receive_clkn 
+0x3841 010467 rtn 
+:      010468 car_ir_clk_check:
+0x3842 010469 copy clkn_bt ,pdata 
+0x3843 010470 fetcht 4 ,mem_ir_receive_clkn 
+0x3844 010471 isub temp ,pdata 
+0x3845 010472 sub pdata ,200 ,null 
+0x3846 010473 rtn 
+:      010475 car_ir_gpio_get_status:
+0x3847 010476 fetcht 1 ,mem_ir_rx_gpio 
+0x3848 010477 branch gpio_get_bit 
+:      010479 car_led_control_receive:
+0x3849 010480 fetch 8 ,mem_le_receive_payload 
+0x384a 010481 store 8 ,mem_car_led_control 
+0x384b 010482 rtn 
+:      010484 car_info_request:
+0x384c 010485 fetch 1 ,mem_car_config_device_select 
+0x384d 010486 store 1 ,mem_car_info_request_payload 
+0x384e 010487 fetch 1 ,mem_car_config_motor_layout 
+0x384f 010488 store 1 ,mem_car_info_request_payload + 1 
+0x3850 010489 fetch 1 ,mem_car_config_ir_enable 
+0x3851 010490 store 1 ,mem_car_info_request_payload + 2 
+0x3852 010491 arg 13 ,loopcnt 
+0x3853 010492 arg mem_car_info_request_head ,contr 
+0x3854 010493 call calc_check_sum_start 
+0x3855 010494 store 1 ,mem_car_info_request_checksum 
+0x3856 010495 arg mem_car_info_request ,rega 
+0x3857 010496 branch queue_push 
+:      010502 light_init:
+0x3858 010503 call clear_eeprom_size_2k 
+0x3859 010504 jam 0x7a ,mem_curr_packet_num 
+0x385a 010505 call light_load_controler_list 
+0x385b 010506 call light_init_crr_cmd_count 
+0x385c 010507 setarg light_pairing_timer 
+0x385d 010508 store 2 ,mem_cb_event_timer 
+0x385e 010509 arg 0 ,rega 
+0x385f 010510 branch pwm_init 
+:      010512 light_pairing_timer:
+0x3860 010513 fetch 2 ,mem_light_pairing_timer 
+0x3861 010514 rtn blank 
+0x3862 010515 increase -1 ,pdata 
+0x3863 010516 store 2 ,mem_light_pairing_timer 
+0x3864 010517 rtnne 0 
+0x3865 010518 jam 0 ,mem_light_pairing_enable 
+0x3866 010519 rtn 
+:      010521 light_init_crr_cmd_count:
+0x3867 010522 bpatch patch1a_6 ,mem_patch1a 
+0x3868 010523 fetch 1 ,mem_light_next_record 
+0x3869 010524 sub pdata ,40 ,null 
+0x386a 010525 rtn positive 
+0x386b 010526 jam 0 ,mem_light_next_record 
+0x386c 010527 rtn 
+:      010529 light_load_controler_list:
+0x386d 010530 arg mem_light_next_record ,rega 
+0x386e 010531 arg 0 ,regb 
+0x386f 010532 arg 81 ,temp 
+0x3870 010533 branch iicd_read_eep_data 
+:      010536 light_find_controler_pairing:
+0x3871 010537 disable user 
+0x3872 010538 fetch 1 ,mem_light_cnum 
+0x3873 010539 copy pdata ,loopcnt 
+0x3874 010541 arg mem_light_clist ,rega 
+0x3875 010542 copy regc ,regb 
+:      010543 light_find_controler_pairing_loop:
+0x3876 010544 bpatch patch1a_7 ,mem_patch1a 
+0x3877 010545 call light_compare_addr_record 
+0x3878 010546 branch enable_user ,zero 
+:      010547 light_find_single_pairing_diff:
+0x3879 010548 increase 4 ,rega 
+0x387a 010549 loop light_find_controler_pairing_loop 
+0x387b 010550 rtn 
+:      010553 light_compare_addr_record:
+0x387c 010554 bpatch patch1b_0 ,mem_patch1b 
+0x387d 010555 ifetch 3 ,rega 
+0x387e 010556 ifetcht 3 ,regb 
+0x387f 010557 isub temp ,null 
+0x3880 010558 rtn 
+:      010560 light_compare_single_record:
+0x3881 010561 bpatch patch1b_1 ,mem_patch1b 
+0x3882 010562 ifetch 3 ,rega 
+0x3883 010563 ifetcht 3 ,regb 
+0x3884 010564 isub temp ,null 
+0x3885 010565 nrtn zero 
+0x3886 010566 ifetch 1 ,contr 
+0x3887 010567 sub pdata ,0 ,null 
+0x3888 010568 rtn zero 
+0x3889 010569 add rega ,3 ,contr 
+0x388a 010570 ifetcht 1 ,contr 
+0x388b 010571 isub temp ,null 
+0x388c 010572 rtn 
+:      010575 light_find_controler_cmd:
+0x388d 010576 bpatch patch1b_2 ,mem_patch1b 
+0x388e 010577 disable user 
+0x388f 010578 fetch 1 ,mem_light_cnum 
+0x3890 010579 copy pdata ,loopcnt 
+0x3891 010581 arg mem_light_clist ,rega 
+0x3892 010582 copy regc ,regb 
+:      010583 light_find_controler_cmd_loop:
+0x3893 010584 call light_compare_single_record 
+0x3894 010585 branch enable_user ,zero 
+0x3895 010586 increase 4 ,rega 
+0x3896 010587 loop light_find_controler_cmd_loop 
+0x3897 010588 rtn 
+:      010591 light_recv_adv:
+0x3898 010592 fetch 1 ,mem_le_scanrsp_rcv 
+0x3899 010593 increase 1 ,pdata 
+0x389a 010594 store 1 ,mem_le_scanrsp_rcv 
+0x389b 010595 arg mem_le_rxbuf + 12 ,regc 
+:      010597 light_anylize_command:
+0x389c 010598 ifetch 2 ,regc 
+0x389d 010599 arg 0x55aa ,temp 
+0x389e 010600 isub temp ,null 
+0x389f 010601 nrtn zero 
+0x38a0 010602 copy contr ,regc 
+0x38a1 010603 ifetcht 3 ,regc 
+0x38a2 010604 setarg 0xffffff 
+0x38a3 010605 isub temp ,null 
+0x38a4 010606 branch light_parse_cmd ,zero 
+0x38a5 010607 call light_find_controler_cmd 
+0x38a6 010608 branch light_parse_cmd ,user 
+0x38a7 010609 rtn 
+:      010611 light_parse_cmd:
+0x38a8 010612 bpatch patch1b_3 ,mem_patch1b 
+0x38a9 010613 increase 4 ,regc 
+0x38aa 010614 ifetch 1 ,regc 
+0x38ab 010615 fetcht 1 ,mem_curr_packet_num 
+0x38ac 010616 isub temp ,null 
+0x38ad 010617 rtn zero 
+0x38ae 010618 store 1 ,mem_curr_packet_num 
+0x38af 010619 fetch 1 ,mem_le_req_rcv 
+0x38b0 010620 increase 1 ,pdata 
+0x38b1 010621 store 1 ,mem_le_req_rcv 
+0x38b2 010623 increase 1 ,regc 
+0x38b3 010624 ifetch 1 ,regc 
+0x38b4 010625 store 1 ,mem_light_crr_cmd_count 
+0x38b5 010626 copy pdata ,loopcnt 
+0x38b6 010627 rtn blank 
+:      010628 light_parse_cmd_loop:
+0x38b7 010629 ifetch 1 ,contr 
+0x38b8 010630 beq light_cmd_pwm0 ,light_parse_cmd_pwm0 
+0x38b9 010631 beq light_cmd_pwm1 ,light_parse_cmd_pwm1 
+0x38ba 010632 beq light_cmd_pwm2 ,light_parse_cmd_pwm2 
+0x38bb 010633 beq light_cmd_pwm3 ,light_parse_cmd_pwm3 
+0x38bc 010634 beq light_cmd_pwm4 ,light_parse_cmd_pwm4 
+0x38bd 010635 beq light_cmd_pwm5 ,light_parse_cmd_pwm5 
+0x38be 010636 beq light_cmd_auto_mode ,light_parse_auto_mode 
+0x38bf 010637 beq light_cmd_pairing ,light_parse_pairing 
+0x38c0 010638 loop light_parse_cmd_loop 
+0x38c1 010639 rtn 
+:      010641 light_parse_cmd_pwm0:
+0x38c2 010642 copy contr ,regc 
+0x38c3 010643 fetch 1 ,mem_light_pwm0 
+0x38c4 010644 store 1 ,mem_pdatatemp 
+0x38c5 010645 arg 0 ,temp 
+:      010646 light_parse_cmd_pwm_common:
+0x38c6 010647 storet 1 ,mem_pdatatemp + 1 
+0x38c7 010648 setarg 10000 
+0x38c8 010649 store 3 ,mem_pdatatemp + 2 
+0x38c9 010650 ifetch 1 ,regc 
+0x38ca 010651 store 1 ,mem_pdatatemp + 5 
+0x38cb 010652 call pwm_out_set 
+0x38cc 010653 and regc ,1 ,contr 
+0x38cd 010654 loop light_parse_cmd_loop 
+0x38ce 010655 rtn 
+:      010656 light_parse_cmd_pwm1:
+0x38cf 010657 copy regc ,contr 
+0x38d0 010658 fetch 1 ,mem_light_pwm1 
+0x38d1 010659 store 1 ,mem_pdatatemp 
+0x38d2 010660 arg 1 ,temp 
+0x38d3 010661 branch light_parse_cmd_pwm_common 
+:      010662 light_parse_cmd_pwm2:
+0x38d4 010663 copy regc ,contr 
+0x38d5 010664 fetch 1 ,mem_light_pwm2 
+0x38d6 010665 store 1 ,mem_pdatatemp 
+0x38d7 010666 arg 2 ,temp 
+0x38d8 010667 branch light_parse_cmd_pwm_common 
+:      010668 light_parse_cmd_pwm3:
+0x38d9 010669 copy regc ,contr 
+0x38da 010670 fetch 1 ,mem_light_pwm3 
+0x38db 010671 store 1 ,mem_pdatatemp 
+0x38dc 010672 arg 3 ,temp 
+0x38dd 010673 branch light_parse_cmd_pwm_common 
+:      010674 light_parse_cmd_pwm4:
+0x38de 010675 copy regc ,contr 
+0x38df 010676 fetch 1 ,mem_light_pwm4 
+0x38e0 010677 store 1 ,mem_pdatatemp 
+0x38e1 010678 arg 4 ,temp 
+0x38e2 010679 branch light_parse_cmd_pwm_common 
+:      010680 light_parse_cmd_pwm5:
+0x38e3 010681 copy regc ,contr 
+0x38e4 010682 fetch 1 ,mem_light_pwm5 
+0x38e5 010683 store 1 ,mem_pdatatemp 
+0x38e6 010684 arg 5 ,temp 
+0x38e7 010685 branch light_parse_cmd_pwm_common 
+:      010687 light_parse_auto_mode:
+0x38e8 010688 ifetch 1 ,contr 
+0x38e9 010689 rtn 
+:      010691 light_parse_pairing:
+0x38ea 010692 copy contr ,regc 
+0x38eb 010693 fetch 1 ,mem_light_pairing_enable 
+0x38ec 010694 bne 1 ,light_parse_pairing_abandon 
+0x38ed 010695 call update_controler_list 
+:      010696 light_parse_pairing_abandon:
+0x38ee 010697 and regc ,4 ,contr 
+0x38ef 010698 rtn 
+:      010699 update_controler_list:
+0x38f0 010700 bpatch patch1b_4 ,mem_patch1b 
+0x38f1 010701 call light_find_controler_pairing 
+0x38f2 010702 branch update_conrtoler_list_found ,user 
+0x38f3 010703 fetch 1 ,mem_light_next_record 
+0x38f4 010704 copy pdata ,temp 
+0x38f5 010705 increase 1 ,pdata 
+0x38f6 010706 store 1 ,mem_light_next_record 
+0x38f7 010707 call light_init_crr_cmd_count 
+0x38f8 010708 lshift2 temp ,temp 
+0x38f9 010709 setarg mem_light_clist 
+0x38fa 010710 iadd temp ,contw 
+0x38fb 010711 ifetch 4 ,regc 
+0x38fc 010712 istore 4 ,contw 
+0x38fd 010713 branch update_conrtoler_store_list 
+:      010714 update_conrtoler_list_found:
+0x38fe 010715 add regc ,3 ,contr 
+0x38ff 010716 ifetch 1 ,contr 
+0x3900 010717 rtn blank 
+0x3901 010718 ifetch 4 ,regc 
+0x3902 010719 istore 4 ,rega 
+:      010720 update_conrtoler_store_list:
+0x3903 010721 arg mem_light_next_record ,rega 
+0x3904 010722 arg 0 ,regb 
+0x3905 010723 arg 81 ,temp 
+0x3906 010724 branch iicd_write_eep_data 
+:      010728 lightc_init:
+0x3907 010732 fetcht 1 ,mem_lightc_led_gpio 
+0x3908 010733 call gpio_out_inactive 
+0x3909 010734 rtn 
+:      010737 lightc_dispatch:
+0x390a 010740 fetcht 1 ,mem_lightc_led_gpio 
+0x390b 010741 call gpio_out_active 
+0x390c 010744 fetcht 1 ,mem_lightc_led_gpio 
+0x390d 010745 call gpio_out_inactive 
+0x390e 010748 call lightc_start_adv 
+0x390f 010750 fetch 1 ,mem_adv_time 
+0x3910 010751 nrtn blank 
+0x3911 010753 call lpm_write_gpio_wakeup 
+0x3912 010754 hfetch 4 ,core_lpm_ctrl 
+0x3913 010755 set0 15 ,pdata 
+0x3914 010756 hstore 4 ,core_lpm_reg 
+0x3915 010757 call lpm_write_ctrl 
+0x3916 010758 arg param_hibernate_clks ,temp 
+0x3917 010759 branch lpm_sleep 
+:      010761 lightc_adv:
+0x3918 010762 fetch 1 ,mem_adv_time 
+0x3919 010763 branch le_adv_loop_tx ,blank 
+0x391a 010764 increase -1 ,pdata 
+0x391b 010765 store 1 ,mem_adv_time 
+0x391c 010766 branch le_adv_loop_tx 
+:      010768 lightc_start_adv:
+0x391d 010769 mul32 pdata ,20 ,pdata 
+0x391e 010770 arg mem_cmd0_string ,contr 
+0x391f 010771 iadd contr ,contr 
+0x3920 010772 ifetch 1 ,contr 
+0x3921 010773 rtn blank 
+0x3922 010774 copy pdata ,rega 
+0x3923 010775 copy rega ,loopcnt 
+0x3924 010776 arg mem_le_adv_data + 2 ,contw 
+0x3925 010777 call memcpy 
+0x3926 010778 copy rega ,pdata 
+0x3927 010779 increase 2 ,pdata 
+0x3928 010780 store 1 ,mem_le_adv_data_len 
+0x3929 010781 rtn 
+:      010788 module_init:
+0x392a 010790 rtn wake 
+0x392b 010791 call le_modified_name 
+0x392c 010792 call adc_init_data 
+0x392d 010793 setarg module_process_idle 
+0x392e 010794 store 2 ,mem_cb_idle_process 
+0x392f 010795 setarg module_bt_conn_process 
+0x3930 010796 store 2 ,mem_cb_bt_process 
+0x3931 010797 setarg module_process_bb_event 
+0x3932 010798 store 2 ,mem_cb_bb_event_process 
+0x3933 010799 setarg module_le_conn_process 
+0x3934 010800 store 2 ,mem_cb_le_process 
+0x3935 010801 setarg module_lpm_lock 
+0x3936 010802 store 2 ,mem_cb_check_wakelock 
+0x3937 010803 setarg module_hci_cmd_transmit_le_notify 
+0x3938 010804 store 2 ,mem_cb_ble_transmit 
+0x3939 010805 setarg module_hci_event_receive_spp_data 
+0x393a 010806 store 2 ,mem_cb_receive_spp_data 
+0x393b 010807 setarg module_le_receive_data 
+0x393c 010808 store 2 ,mem_cb_att_write 
+0x393d 010809 setarg module_bb_event_timer 
+0x393e 010810 store 2 ,mem_cb_event_timer 
+0x393f 010812 call module_spp_clear_last_transmite_clock 
+0x3940 010813 bpatch patch1b_5 ,mem_patch1b 
+0x3941 010814 call module_lpm_uart_init 
+0x3942 010815 call module_gpio_init 
+0x3943 010816 call check_module_disabled 
+0x3944 010817 branch module_hci_event_enter_standby_mode 
+:      010820 module_lpm_uart_init:
+0x3945 010821 fetch 4 ,mem_module_uart_rx_buffer 
+0x3946 010822 hstore 4 ,core_uart_rsaddr 
+0x3947 010824 fetch 4 ,mem_module_uart_tx_buffer 
+0x3948 010825 hstore 4 ,core_uart_tsaddr 
+0x3949 010827 hfetch 1 ,core_gpio_sel1 
+0x394a 010828 or_into 0x04 ,pdata 
+0x394b 010829 and_into 0xfc ,pdata 
+0x394c 010830 hstore 1 ,core_gpio_sel1 
+0x394d 010831 jam 0x00 ,core_uart_ctrl 
+0x394e 010833 fetch 2 ,mem_module_uart_rx_buffer 
+0x394f 010834 hstore 2 ,core_uart_rrptr 
+0x3950 010835 fetch 2 ,mem_module_uart_tx_buffer 
+0x3951 010836 hstore 2 ,core_uart_twptr 
+0x3952 010837 hstore 2 ,core_uart_trptrp 
+0x3953 010839 hfetch 4 ,core_gpio_pu0 
+0x3954 010840 set1 7 ,pdata 
+0x3955 010841 hstore 4 ,core_gpio_pu0 
+0x3956 010843 hfetch 2 ,core_clkoff 
+0x3957 010844 set0 clock_off_uart ,pdata 
+0x3958 010845 hstore 2 ,core_clkoff 
+0x3959 010846 call uart_set_baud_by_mem 
+0x395a 010847 jam uartclk_crystal ,core_uart_clksel 
+0x395b 010848 jam uart_ctrl_h4 ,core_uart_ctrl 
+0x395c 010850 fetch 1 ,mem_module_flag 
+0x395d 010851 isolate1 module_flag_uart_flow_control ,pdata 
+0x395e 010852 hfetcht 1 ,core_uart_ctrl 
+0x395f 010853 setflag true ,4 ,temp 
+0x3960 010854 hstoret 1 ,core_uart_ctrl 
+0x3961 010855 rtn 
+:      010859 module_lpm_init:
+0x3962 010860 call module_spp_clear_last_transmite_clock 
+0x3963 010861 branch module_lpm_uart_init 
+:      010864 module_gpio_init:
+0x3964 010869 fetcht 1 ,mem_module_connect_state_gpio 
+0x3965 010870 call gpio_config_output 
+0x3966 010871 call module_set_conn_pin_low 
+0x3967 010873 fetcht 1 ,mem_module_wake_up_gpio 
+0x3968 010874 branch gpio_config_input 
+:      010876 module_lpm_lock:
+0x3969 010877 fetcht 1 ,mem_module_wake_up_gpio 
+0x396a 010878 call gpio_get_bit 
+0x396b 010879 nbranch app_put_lpm_wake_lock ,true 
+0x396c 010880 branch app_get_lpm_wake_lock 
+:      010883 module_le_conn_process:
+0x396d 010884 rtn 
+:      010886 module_bt_conn_process:
+0x396e 010887 call module_spp_enter_sniff 
+0x396f 010888 branch module_control_air_flow 
+:      010890 module_spp_enter_sniff:
+0x3970 010891 fetch 1 ,mem_ui_state_map 
+0x3971 010892 bbit0 ui_state_bt_spp_conn ,module_spp_clear_last_transmite_clock 
+0x3972 010893 bpatch patch1b_6 ,mem_patch1b 
+0x3973 010894 setarg 0x3eff 
+0x3974 010895 fetcht 4 ,mem_last_transmite_clock 
+0x3975 010896 iadd temp ,temp 
+0x3976 010897 copy clkn_bt ,pdata 
+0x3977 010898 isub temp ,null 
+0x3978 010899 nrtn positive 
+0x3979 010900 fetch 2 ,mem_ui_state_map 
+0x397a 010901 bbit1 ui_state_bt_sniff ,module_spp_clear_last_transmite_clock 
+0x397b 010902 fetch 1 ,mem_module_flag 
+0x397c 010903 rtnbit1 moudle_task_sniff 
+0x397d 010904 call module_set_sniff_task_flag 
+0x397e 010905 call app_bt_enter_sniff 
+:      010906 module_spp_clear_last_transmite_clock:
+0x397f 010907 copy clkn_bt ,pdata 
+0x3980 010908 store 4 ,mem_last_transmite_clock 
+0x3981 010909 rtn 
+:      010912 module_process_idle:
+0x3982 010913 call module_control_air_flow 
+0x3983 010914 call l2cap_malloc_is_fifo_full 
+0x3984 010915 nrtn blank 
+0x3985 010916 branch module_process 
+:      010919 module_process_bb_event:
+0x3986 010920 copy regc ,pdata 
+0x3987 010921 beq bt_evt_bb_connected ,module_process_bb_conn 
+0x3988 010922 beq bt_evt_bb_disconnected ,module_process_bb_event_disconned 
+0x3989 010923 beq bt_evt_reconn_failed ,module_process_reconn_fail 
+0x398a 010924 beq bt_evt_setup_complete ,module_process_setup_complete 
+0x398b 010925 beq bt_evt_spp_connected ,module_process_spp_connected 
+0x398c 010926 beq bt_evt_spp_disconnected ,module_process_spp_disconnected 
+0x398d 010927 beq bt_evt_pincode_req ,module_process_evt_pincode_req 
+0x398e 010928 beq bt_evt_enter_sniff ,module_process_enter_sniff 
+0x398f 010929 beq bt_evt_exit_sniff ,module_process_exit_sniff 
+0x3990 010930 beq bt_evt_reconn_page_timeout ,module_process_page_time_out 
+0x3991 010931 beq bt_evt_le_connected ,module_process_le_conn 
+0x3992 010932 beq bt_evt_le_disconnected ,module_process_bb_even_le_disconn 
+0x3993 010933 beq bt_evt_sniff_not_accept ,module_process_sniff_not_accept 
+0x3994 010934 beq bt_evt_unsniff_accept ,module_process_unsniff_accept 
+0x3995 010935 beq bt_evt_unsniff_not_accept ,module_process_unsniff_not_accept 
+0x3996 010936 beq bt_evt_le_pairing_fail ,module_hci_event_le_pairing_fail 
+0x3997 010937 beq bt_evt_le_pairing_success ,module_hci_event_le_pairing_success 
+0x3998 010938 beq bt_evt_le_start_enc ,module_hci_event_start_enc 
+0x3999 010939 beq bt_evt_le_pause_enc ,module_hci_event_pause_enc 
+0x399a 010940 beq bt_evt_le_tk_generate ,module_hci_event_le_tk 
+0x399b 010941 beq bt_evt_bt_gkey_generate ,module_hci_event_gkey_generate 
+0x399c 010942 beq bt_evt_bt_get_passkey ,module_hci_event_passkey_entry_mode 
+0x399d 010943 beq bt_evt_bt_pairing_fail ,module_hci_event_bt_pairing_fail 
+0x399e 010944 beq bt_evt_bt_pairing_success ,module_hci_event_bt_pairing_success 
+0x399f 010945 beq bt_evt_le_gkey_generate ,module_hci_event_le_gkey 
+0x39a0 010946 beq bt_evt_store_nvram ,module_hci_event_store_device 
+0x39a1 010947 beq bt_evt_le_ltk_lost ,module_process_ble_ltk_lost 
+0x39a2 010948 rtn 
+:      010951 module_process_bb_event_disconned:
+0x39a3 010952 call module_spp_clear_last_transmite_clock 
+0x39a4 010953 fetch 1 ,mem_flag_pairing_state 
+0x39a5 010954 ncall module_hci_event_bt_pairing_fail ,blank 
+0x39a6 010955 call module_disconn_start 
+0x39a7 010956 fetch 2 ,mem_ui_state_map 
+0x39a8 010957 rtnbit0 ui_state_bt_spp_conn 
+0x39a9 010958 branch module_spp_disconnected 
+:      010960 module_process_spp_connected:
+0x39aa 010961 fetch 2 ,mem_ui_state_map 
+0x39ab 010962 set1 ui_state_bt_spp_conn ,pdata 
+0x39ac 010963 store 2 ,mem_ui_state_map 
+0x39ad 010964 fetch 1 ,mem_module_spp_lpm_mult 
+0x39ae 010965 store 1 ,mem_lpm_mult 
+0x39af 010966 call module_set_conn_pin_low 
+0x39b0 010967 branch module_hci_event_spp_connect 
+:      010969 module_process_spp_disconnected:
+:      010971 module_spp_disconnected:
+0x39b1 010972 fetch 2 ,mem_ui_state_map 
+0x39b2 010973 rtnbit0 ui_state_bt_spp_conn 
+0x39b3 010974 set0 ui_state_bt_spp_conn ,pdata 
+0x39b4 010975 store 2 ,mem_ui_state_map 
+0x39b5 010976 branch module_hci_event_spp_disconnect 
+:      010979 module_process_enter_sniff:
+:      010981 module_sniff_param_check:
+0x39b6 010982 call module_spp_clear_last_transmite_clock 
+0x39b7 010985 fetch 2 ,mem_context + coffset_tsniff 
+0x39b8 010986 rshift pdata ,pdata 
+0x39b9 010987 fetcht 2 ,mem_sniff_param_interval 
+0x39ba 010988 isub temp ,null 
+0x39bb 010989 nbranch module_sniff_param_check_unsniff ,zero 
+0x39bc 010990 branch app_lpm_mult_enable 
+:      010991 module_sniff_param_check_unsniff:
+0x39bd 010992 fetch 1 ,mem_module_flag 
+0x39be 010993 rtnbit1 moudle_task_unsniff 
+0x39bf 010994 hfetch 2 ,core_uart_rxitems 
+0x39c0 010995 ncall module_set_unsniff_task_flag ,blank 
+0x39c1 010996 branch app_bt_sniff_exit 
+:      010998 module_process_exit_sniff:
+0x39c2 010999 call module_clear_sniff_task_flag 
+0x39c3 011000 branch app_lpm_mult_disable 
+:      011002 module_process_setup_complete:
+0x39c4 011003 call module_spp_clear_last_transmite_clock 
+0x39c5 011004 branch module_conn_start 
+:      011006 module_process_bb_even_le_disconn:
+0x39c6 011007 call le_clr_config_more_data 
+0x39c7 011008 call module_disconn_start 
+0x39c8 011009 branch module_hci_event_le_disconnect 
+:      011011 module_process_evt_pincode_req:
+0x39c9 011012 branch app_bt_set_pincode 
+:      011015 module_process_sniff_not_accept:
+0x39ca 011016 branch module_clear_sniff_task_flag 
+:      011019 module_process_unsniff_accept:
+0x39cb 011020 fetch 1 ,mem_module_flag 
+0x39cc 011021 bbit0 moudle_task_unsniff ,app_bt_enter_sniff 
+0x39cd 011022 branch module_clear_unsniff_task_flag 
+:      011025 module_process_unsniff_not_accept:
+0x39ce 011026 branch module_clear_unsniff_task_flag 
+:      011029 module_process_le_conn:
+0x39cf 011030 call le_send_att_exchange_mtu_requset 
+0x39d0 011031 call module_conn_start 
+0x39d1 011032 fetch 1 ,mem_module_le_lpm_mult 
+0x39d2 011033 store 1 ,mem_lpm_mult 
+0x39d3 011034 branch module_hci_event_le_connect 
+:      011037 module_process_bb_conn:
+0x39d4 011038 jam 0 ,mem_flag_mode_ssp_pin 
+0x39d5 011039 call module_clear_sniff_task_flag 
+0x39d6 011040 branch module_clear_unsniff_task_flag 
+:      011042 module_process_page_time_out:
+:      011043 module_process_reconn_fail:
+:      011044 module_disconn_start:
+0x39d7 011045 call module_start_adv_discovery_by_command 
+0x39d8 011046 branch module_set_conn_pin_high 
+:      011049 module_process_ble_ltk_lost:
+0x39d9 011050 call le_send_reject_ind 
+0x39da 011051 branch le_send_smp_security_request 
+:      011054 module_set_conn_pin_high:
+0x39db 011055 fetcht 1 ,mem_module_connect_state_gpio 
+0x39dc 011056 branch gpio_out_active 
+:      011058 module_conn_start:
+0x39dd 011059 call module_stop_adv_discovery 
+0x39de 011060 branch module_set_conn_pin_low 
+:      011062 module_stop_adv_discovery:
+0x39df 011063 fetch 1 ,mem_module_state 
+0x39e0 011064 isolate1 moudle_state_bt_bit ,pdata 
+0x39e1 011065 call app_bt_stop_discovery ,true 
+0x39e2 011066 fetch 1 ,mem_module_state 
+0x39e3 011067 isolate1 moudle_state_ble_bit ,pdata 
+0x39e4 011068 call app_ble_stop_adv ,true 
+0x39e5 011069 rtn 
+:      011070 module_set_conn_pin_low:
+0x39e6 011071 fetcht 1 ,mem_module_connect_state_gpio 
+0x39e7 011072 branch gpio_out_inactive 
+:      011074 module_process_with_credit:
+0x39e8 011075 fetch 1 ,mem_credit_flag 
+0x39e9 011076 rtneq credit_disable 
+0x39ea 011077 branch rfcomm_send_uih_without_payload 
+:      011079 module_process:
+0x39eb 011080 hfetch 1 ,core_uart_status 
+0x39ec 011081 bbit1 uart_status_rx_fifo_empty ,module_process_with_credit 
+0x39ed 011082 call uartd_prepare_rx 
+0x39ee 011083 ifetch 1 ,contru 
+0x39ef 011084 bne 0x01 ,module_hci_in_excp 
+0x39f0 011085 hfetch 2 ,core_uart_rxitems 
+0x39f1 011086 sub pdata ,2 ,null 
+0x39f2 011087 rtn positive 
+0x39f3 011088 ifetch 1 ,contru 
+0x39f4 011089 store 1 ,mem_module_uart_opcode 
+0x39f5 011090 ifetcht 1 ,contru 
+0x39f6 011091 copy contru ,rega 
+0x39f7 011092 storet 1 ,mem_module_uart_len 
+0x39f8 011093 add temp ,3 ,temp 
+0x39f9 011094 hfetch 2 ,core_uart_rxitems 
+0x39fa 011095 isub temp ,temp 
+0x39fb 011096 nrtn positive 
+0x39fc 011097 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 
+0x39fd 011098 call module_hci_cmd_control 
+0x39fe 011099 fetch 1 ,mem_module_temp_nl_discard_packet 
+0x39ff 011100 rtneq hci_not_discard_packet 
+0x3a00 011101 branch module_hci_dicard_packet 
+:      011103 module_hci_in_excp:
+0x3a01 011104 call delay_10ms 
+0x3a02 011105 call module_hci_event_invalid_packet 
+0x3a03 011106 branch module_hci_release_except 
+:      011109 module_hci_release_except:
+0x3a04 011110 bpatch patch1b_7 ,mem_patch1b 
+0x3a05 011111 hfetch 2 ,core_uart_rxitems 
+0x3a06 011112 rtn blank 
+0x3a07 011113 call uartd_prepare_rx 
+0x3a08 011114 ifetch 1 ,contru 
+0x3a09 011115 sub pdata ,0x01 ,null 
+0x3a0a 011116 ncall module_hci_dicard_bytes ,zero 
+0x3a0b 011117 nbranch module_hci_release_except ,zero 
+0x3a0c 011118 ifetch 1 ,contru 
+0x3a0d 011119 rtneq hci_cmd_spp_data_req 
+0x3a0e 011120 rtneq hci_cmd_set_credit_given 
+0x3a0f 011121 increase -1 ,contru 
+0x3a10 011122 call module_hci_dicard_bytes 
+0x3a11 011123 branch module_hci_release_except 
+:      011125 module_hci_dicard_packet:
+0x3a12 011126 call uartd_prepare_rx 
+0x3a13 011127 increase 2 ,contru 
+0x3a14 011128 ifetch 1 ,contru 
+0x3a15 011129 iadd contru ,contru 
+:      011130 module_hci_dicard_bytes:
+0x3a16 011131 branch uartd_rxdone 
+:      011134 module_hci_cmd_control:
+0x3a17 011135 bpatch patch1c_0 ,mem_patch1c 
+0x3a18 011136 fetch 1 ,mem_module_uart_opcode 
+0x3a19 011137 beq hci_cmd_set_bt_addr_req ,module_hci_cmd_set_bt_addr 
+0x3a1a 011138 beq hci_cmd_set_le_addr_req ,module_hci_cmd_set_le_addr 
+0x3a1b 011139 beq hci_cmd_set_visibility_req ,module_hci_cmd_set_visibility 
+0x3a1c 011140 beq hci_cmd_set_bt_name_req ,module_hci_cmd_set_bt_name 
+0x3a1d 011141 beq hci_cmd_set_le_name_req ,module_hci_cmd_set_le_name 
+0x3a1e 011142 beq hci_cmd_spp_data_req ,module_hci_cmd_receive_spp_data 
+0x3a1f 011143 beq hci_cmd_le_data_req ,module_hci_cmd_receive_le_data 
+0x3a20 011144 beq hci_cmd_status_irq ,module_hci_cmd_inquire_status 
+0x3a21 011145 beq hci_cmd_set_pairing_req ,module_hci_cmd_set_pairing_mode 
+0x3a22 011146 beq hci_cmd_set_pincode_req ,module_hci_cmd_set_pincode 
+0x3a23 011147 beq hci_cmd_set_uartcontrol_req ,module_hci_cmd_set_uart_control_mode 
+0x3a24 011148 beq hci_cmd_set_uart_baud_req ,module_hci_cmd_set_uart_baud 
+0x3a25 011149 beq hci_cmd_version_req ,module_hci_cmd_version_request 
+0x3a26 011150 beq hci_cmd_bt_disconnect ,module_hci_cmd_bt_disconnect 
+0x3a27 011151 beq hci_cmd_ble_disconnect ,module_hci_cmd_ble_disconnect 
+0x3a28 011152 beq hci_cmd_set_nvram_req ,module_hci_cmd_set_nvram 
+0x3a29 011153 beq hci_cmd_confirm_gkey ,module_hci_cmd_confirm_gkey 
+0x3a2a 011154 beq hci_cmd_set_credit_given ,module_hci_cmd_set_credit_given 
+0x3a2b 011155 beq hci_cmd_auto_adv_scan ,module_hci_cmd_auto_adv 
+0x3a2c 011156 beq hci_cmd_power_req ,module_hci_cmd_power_request 
+0x3a2d 011157 beq hci_cmd_power_set ,module_hci_cmd_power_set 
+0x3a2e 011158 beq hci_cmd_passkey_entry ,module_hci_cmd_passkey_entry 
+0x3a2f 011159 beq hci_cmd_set_gpio ,module_hci_cmd_set_gpio 
+0x3a30 011160 beq hci_cmd_read_gpio ,module_hci_cmd_read_gpio 
+0x3a31 011161 beq hci_cmd_le_set_pairing ,module_hci_cmd_le_set_pairing_mode 
+0x3a32 011162 beq hci_cmd_le_set_adv_data ,module_hci_cmd_le_set_adv_data 
+0x3a33 011163 beq hci_cmd_le_set_scan_data ,module_hci_cmd_le_set_scan_data 
+0x3a34 011164 beq hci_cmd_le_send_conn_update_req ,module_hci_cmd_le_send_conn_update_req 
+0x3a35 011165 beq hci_cmd_le_set_adv_parm ,module_hci_cmd_set_le_adv_parameter 
+0x3a36 011166 beq hci_cmd_le_start_pairing ,module_hci_cmd_le_start_pairing 
+0x3a37 011167 beq hci_cmd_set_wake_gpio ,module_hci_cmd_set_wake_gpio 
+0x3a38 011168 beq hci_cmd_set_tx_power ,module_hci_cmd_set_tx_power 
+0x3a39 011169 beq hci_cmd_le_confirm_gkey ,module_hci_cmd_le_confirm_gkey 
+0x3a3a 011170 beq hci_cmd_reject_justwork ,module_hci_cmd_set_reject_justwork_flag 
+0x3a3b 011171 beq hci_cmd_reset_chip_req ,module_hci_cmd_reset_chip 
+0x3a3c 011172 beq hci_cmd_le_set_fixed_passkey ,module_hci_cmd_le_set_fixed_passkey 
+0x3a3d 011173 beq hci_test_cmd_close_lpm ,module_hci_test_cmde_close_lpm 
+0x3a3e 011174 branch module_hci_event_receive_invalid_cmd 
+:      011179 module_hci_cmd_set_bt_addr:
+0x3a3f 011180 fetch 1 ,mem_module_uart_len 
+0x3a40 011181 bne 6 ,module_hci_event_receive_invalid_cmd 
+0x3a41 011182 ifetch 6 ,contru 
+0x3a42 011183 store 6 ,mem_lap 
+0x3a43 011184 branch module_hci_event_receive_valid_cmd 
+:      011187 module_hci_cmd_set_le_addr:
+0x3a44 011188 fetch 1 ,mem_module_uart_len 
+0x3a45 011189 bne 6 ,module_hci_event_receive_invalid_cmd 
+0x3a46 011190 ifetch 6 ,contru 
+0x3a47 011191 store 6 ,mem_le_lap 
+0x3a48 011192 branch module_hci_event_receive_valid_cmd 
+:      011196 module_hci_cmd_set_visibility:
+0x3a49 011197 fetch 1 ,mem_module_uart_len 
+0x3a4a 011198 bne 1 ,module_hci_event_receive_invalid_cmd 
+0x3a4b 011199 copy rega ,contru 
+0x3a4c 011200 call module_hci_event_receive_valid_cmd 
+0x3a4d 011201 ifetcht 1 ,contru 
+0x3a4e 011202 storet 1 ,mem_module_bluetooth_stauts_by_command 
+0x3a4f 011203 fetch 2 ,mem_ui_state_map 
+0x3a50 011204 rtnbit1 ui_state_ble_connected 
+0x3a51 011205 rtnbit1 ui_state_bt_connected 
+:      011206 module_start_adv_discovery_by_command:
+0x3a52 011207 fetch 1 ,mem_module_state 
+0x3a53 011208 isolate1 moudle_state_bt_bit ,pdata 
+0x3a54 011209 nbranch moudle_start_adv_by_command ,true 
+0x3a55 011210 fetcht 1 ,mem_module_bluetooth_stauts_by_command 
+0x3a56 011211 and temp ,0x03 ,pdata 
+0x3a57 011212 store 1 ,mem_scan_mode 
+:      011213 moudle_start_adv_by_command:
+0x3a58 011214 fetch 1 ,mem_module_state 
+0x3a59 011215 isolate1 moudle_state_ble_bit ,pdata 
+0x3a5a 011216 nrtn true 
+0x3a5b 011217 fetcht 1 ,mem_module_bluetooth_stauts_by_command 
+0x3a5c 011218 isolate1 2 ,temp 
+0x3a5d 011219 branch app_ble_start_adv ,true 
+0x3a5e 011220 branch app_ble_stop_adv 
+:      011224 module_hci_cmd_set_bt_name:
+0x3a5f 011225 fetch 1 ,mem_module_uart_len 
+0x3a60 011226 sub pdata ,67 ,null 
+0x3a61 011227 nbranch module_hci_event_receive_invalid_cmd ,positive 
+0x3a62 011228 store 1 ,mem_local_name_length 
+0x3a63 011229 arg 8 ,loopcnt 
+0x3a64 011230 call memset0 
+0x3a65 011231 fetch 1 ,mem_module_uart_len 
+0x3a66 011232 copy pdata ,loopcnt 
+0x3a67 011233 copy rega ,contru 
+0x3a68 011234 arg mem_local_name ,contw 
+0x3a69 011235 call uart_copy_rx_bytes_fast 
+0x3a6a 011236 branch module_hci_event_receive_valid_cmd 
+:      011240 module_hci_cmd_set_le_name:
+0x3a6b 011241 fetch 1 ,mem_module_uart_len 
+0x3a6c 011242 sub pdata ,29 ,null 
+0x3a6d 011243 nbranch module_hci_event_receive_invalid_cmd ,positive 
+0x3a6e 011244 store 1 ,mem_le_name_len 
+0x3a6f 011245 copy pdata ,loopcnt 
+0x3a70 011246 copy rega ,contru 
+0x3a71 011247 arg mem_le_name ,contw 
+0x3a72 011248 call uart_copy_rx_bytes_fast 
+0x3a73 011249 call le_modified_name 
+0x3a74 011250 branch module_hci_event_receive_valid_cmd 
+:      011254 module_hci_cmd_receive_spp_data:
+0x3a75 011255 fetch 1 ,mem_ui_state_map 
+0x3a76 011256 bbit0 ui_state_bt_spp_conn ,module_hci_event_receive_invalid_cmd 
+0x3a77 011257 call app_check_sniff 
+0x3a78 011258 branch module_hci_cmd_spp_exit_sniff ,true 
+0x3a79 011259 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+0x3a7a 011261 call module_spp_clear_last_transmite_clock 
+0x3a7b 011262 fetch 1 ,mem_remote_credits 
+0x3a7c 011263 rtn blank 
+0x3a7d 011264 fetch 2 ,mem_nl_rx_len_all 
+0x3a7e 011265 bne 0 ,module_hci_cmd_pass_init_ng_rx_len_all 
+0x3a7f 011266 fetch 1 ,mem_module_uart_len 
+0x3a80 011267 store 2 ,mem_nl_rx_len_all 
+0x3a81 011269 copy rega ,contru 
+0x3a82 011272 copy contru ,pdata 
+0x3a83 011273 store 2 ,mem_nl_rx_data_src 
+:      011274 module_hci_cmd_pass_init_ng_rx_len_all:
+0x3a84 011275 call module_hci_cmd_get_current_packet_len_and_remain_len 
+0x3a85 011276 branch spp_tx_rfcomm_packet 
+:      011278 module_hci_cmd_spp_exit_sniff:
+0x3a86 011279 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+0x3a87 011280 branch module_exit_sniff 
+:      011282 module_hci_cmd_get_current_packet_len_and_remain_len:
+0x3a88 011283 call module_hci_cmd_get_current_patcket_len 
+0x3a89 011284 fetch 2 ,mem_nl_rx_len_all 
+0x3a8a 011285 fetcht 2 ,mem_current_packet_length 
+0x3a8b 011286 isub temp ,pdata 
+0x3a8c 011287 store 2 ,mem_nl_rx_len_all 
+0x3a8d 011288 rtn 
+:      011290 module_hci_cmd_get_current_patcket_len:
+0x3a8e 011291 fetch 2 ,mem_nl_rx_len_all 
+0x3a8f 011292 arg dm_refcom_buff_len ,temp 
+0x3a90 011293 call not_greater_than 
+0x3a91 011294 fetcht 2 ,mem_rfcomm_max_frame_size 
+0x3a92 011295 call not_greater_than 
+0x3a93 011296 fetcht 2 ,mem_pn_max_frame_size 
+0x3a94 011297 call not_greater_than 
+0x3a95 011298 store 2 ,mem_current_packet_length 
+0x3a96 011299 rtn 
+:      011301 module_hci_command_tx_spp_tx_complete:
+0x3a97 011302 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 
+0x3a98 011303 jam hci_cmd_spp_data_req ,mem_module_uart_opcode 
+0x3a99 011304 branch module_hci_event_receive_valid_cmd 
+:      011308 module_hci_cmd_receive_le_data:
+0x3a9a 011309 fetch 2 ,mem_ui_state_map 
+0x3a9b 011310 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd 
+0x3a9c 011311 call module_check_ble_encrypt_state 
+0x3a9d 011312 branch module_hci_event_receive_invalid_cmd ,user 
+0x3a9e 011313 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+0x3a9f 011314 fetch 1 ,mem_module_flag 
+0x3aa0 011315 bbit1 module_flag_ble_data_finish ,module_hci_cmd_receive_le_data_finish 
+0x3aa1 011316 fetch 1 ,mem_module_hci_notify_len 
+0x3aa2 011317 nrtn blank 
+0x3aa3 011318 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 
+0x3aa4 011319 ifetch 2 ,contru 
+0x3aa5 011320 store 2 ,mem_module_hci_notify_handle 
+0x3aa6 011321 copy contru ,pdata 
+0x3aa7 011322 store 2 ,mem_module_hci_nofiy_addr 
+0x3aa8 011323 fetch 1 ,mem_module_uart_len 
+0x3aa9 011324 pincrease -2 
+0x3aaa 011325 nbranch module_hci_event_receive_invalid_cmd ,positive 
+0x3aab 011326 branch module_hci_event_receive_invalid_cmd ,zero 
+0x3aac 011327 store 1 ,mem_module_hci_notify_len 
+0x3aad 011328 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+0x3aae 011329 call le_set_config_more_data 
+0x3aaf 011330 call module_hci_cmd_transmit_le_notify 
+0x3ab0 011331 call module_hci_cmd_transmit_le_notify 
+0x3ab1 011332 call module_hci_cmd_transmit_le_notify 
+0x3ab2 011333 fetch 1 ,mem_module_flag 
+0x3ab3 011334 rtnbit0 module_flag_ble_data_finish 
+:      011335 module_hci_cmd_receive_le_data_finish:
+0x3ab4 011336 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 
+0x3ab5 011337 call module_clear_le_tx_data_flag 
+0x3ab6 011338 branch module_hci_event_receive_valid_cmd 
+:      011340 module_hci_cmd_transmit_le_notify:
+0x3ab7 011341 fetch 1 ,mem_module_hci_notify_len 
+0x3ab8 011342 rtn blank 
+0x3ab9 011343 call le_fifo_check_nearly_full 
+0x3aba 011344 nrtn blank 
+0x3abb 011345 call module_get_le_remote_mtu 
+0x3abc 011346 bpatch patch1c_1 ,mem_patch1c 
+0x3abd 011347 add temp ,-3 ,pdata 
+0x3abe 011348 fetcht 1 ,mem_module_hci_notify_len 
+0x3abf 011349 call not_greater_than 
+0x3ac0 011350 copy pdata ,rega 
+0x3ac1 011351 copy temp ,pdata 
+0x3ac2 011352 isub rega ,pdata 
+0x3ac3 011353 store 1 ,mem_module_hci_notify_len 
+0x3ac4 011354 fetcht 2 ,mem_module_hci_notify_handle 
+0x3ac5 011355 call le_att_malloc_tx_notify 
+0x3ac6 011356 fetch 2 ,mem_module_hci_nofiy_addr 
+0x3ac7 011357 copy pdata ,contru 
+0x3ac8 011358 copy rega ,loopcnt 
+0x3ac9 011359 call uart_copy_rx_bytes_fast 
+0x3aca 011360 copy contru ,pdata 
+0x3acb 011361 store 2 ,mem_module_hci_nofiy_addr 
+0x3acc 011362 fetch 1 ,mem_module_hci_notify_len 
+0x3acd 011363 nrtn blank 
+0x3ace 011364 branch module_set_le_tx_data_flag 
+:      011368 module_get_le_remote_mtu:
+0x3acf 011369 arg 0x17 ,temp 
+0x3ad0 011370 fetch 1 ,mem_module_flag 
+0x3ad1 011371 rtnbit1 module_flag_ble_send_mtu23 
+0x3ad2 011372 fetcht 2 ,mem_le_remote_mtu 
+0x3ad3 011373 rtn 
+:      011375 module_check_ble_encrypt_state:
+0x3ad4 011376 fetch 1 ,mem_module_flag 
+0x3ad5 011377 bbit1 module_flag_ble_data_encrypt ,le_check_encrypt_state 
+0x3ad6 011378 branch disable_user 
+:      011382 module_hci_cmd_inquire_status:
+0x3ad7 011383 branch module_hci_event_status_res 
+:      011387 module_hci_cmd_set_pairing_mode:
+0x3ad8 011388 copy rega ,contru 
+0x3ad9 011389 ifetch 1 ,contru 
+0x3ada 011390 beq pairing_pincode ,module_hci_pairing_pincode_mode 
+0x3adb 011391 beq pairing_justwork ,module_hci_pairing_just_work_mode 
+0x3adc 011392 beq pairing_passkey ,module_hci_pairing_passkey 
+0x3add 011393 beq pairing_confirm ,module_hci_pairing_numeric_comparison 
+0x3ade 011394 branch module_hci_event_receive_invalid_cmd 
+:      011395 module_hci_pairing_pincode_mode:
+0x3adf 011396 call ssp_disable 
+0x3ae0 011397 jam 0 ,mem_ssp_enable 
+0x3ae1 011398 branch module_hci_event_receive_valid_cmd 
+:      011399 module_hci_pairing_just_work_mode:
+0x3ae2 011400 setarg ssp_mode_just_work_io_cap_data 
+:      011401 module_hci_sspairing_mode:
+0x3ae3 011402 store 3 ,mem_sp_iocap_local 
+0x3ae4 011403 store 1 ,mem_ssp_mode_flag 
+0x3ae5 011404 call ssp_enable 
+0x3ae6 011405 jam 1 ,mem_ssp_enable 
+0x3ae7 011406 branch module_hci_event_receive_valid_cmd 
+:      011407 module_hci_pairing_passkey:
+0x3ae8 011408 setarg ssp_mode_passkey_io_cap_data 
+0x3ae9 011409 branch module_hci_sspairing_mode 
+:      011411 module_hci_pairing_numeric_comparison:
+0x3aea 011412 setarg ssp_mode_ssp_pin_io_cap_data 
+0x3aeb 011413 branch module_hci_sspairing_mode 
+:      011416 module_hci_cmd_set_pincode:
+0x3aec 011417 fetch 1 ,mem_module_uart_len 
+0x3aed 011418 sub pdata ,16 ,null 
+0x3aee 011419 nbranch module_hci_event_receive_invalid_cmd ,positive 
+0x3aef 011420 store 1 ,mem_pin_length 
+0x3af0 011421 copy pdata ,loopcnt 
+0x3af1 011422 arg mem_pin ,contw 
+0x3af2 011423 call uart_copy_rx_bytes 
+0x3af3 011424 branch module_hci_event_receive_valid_cmd 
+:      011428 module_hci_cmd_set_uart_control_mode:
+0x3af4 011429 copy rega ,contru 
+0x3af5 011430 ifetch 1 ,contru 
+0x3af6 011431 hfetcht 1 ,core_uart_ctrl 
+0x3af7 011432 nsetflag blank ,4 ,temp 
+0x3af8 011433 hstoret 1 ,core_uart_ctrl 
+0x3af9 011434 branch module_hci_event_receive_valid_cmd 
+:      011438 module_hci_cmd_set_uart_baud:
+0x3afa 011439 fetch 1 ,mem_module_uart_len 
+0x3afb 011440 copy pdata ,loopcnt 
+0x3afc 011441 copy rega ,contru 
+0x3afd 011442 call string2dec_from_uart 
+0x3afe 011443 setarg uart_clk_24 
+0x3aff 011444 idiv temp 
+0x3b00 011445 call wait_div_end 
+0x3b01 011446 quotient pdata 
+:      011447 module_hci_cmd_set_uart_baud_ok:
+0x3b02 011448 store uart_baud_len ,mem_baud 
+0x3b03 011449 call module_hci_event_receive_valid_cmd 
+0x3b04 011450 call wait_uarttx 
+0x3b05 011451 branch uart_set_baud_by_mem 
+:      011455 module_hci_cmd_version_request:
+0x3b06 011456 arg 2 ,rega 
+0x3b07 011457 arg mem_soft_version_num ,regb 
+0x3b08 011458 arg 0 ,temp 
+0x3b09 011459 branch module_hci_event_set_cmd 
+:      011460 module_hci_event_set_cmd_send_response:
+0x3b0a 011461 store 2 ,mem_event_cmd_response_content 
+0x3b0b 011462 arg mem_event_cmd_response_content ,regb 
+0x3b0c 011463 arg 0 ,temp 
+0x3b0d 011464 branch module_hci_event_set_cmd 
+:      011468 module_hci_cmd_bt_disconnect:
+0x3b0e 011469 fetch 2 ,mem_ui_state_map 
+0x3b0f 011470 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd 
+:      011471 module_hci_cmd_bt_disconnect_doing:
+0x3b10 011472 call module_hci_event_receive_valid_cmd 
+0x3b11 011473 branch app_bt_disconnect 
+:      011477 module_hci_cmd_ble_disconnect:
+0x3b12 011478 fetch 2 ,mem_ui_state_map 
+0x3b13 011479 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd 
+:      011480 module_hci_cmd_ble_disconnect_doing:
+0x3b14 011481 call module_hci_event_receive_valid_cmd 
+0x3b15 011482 branch app_ble_disconnect 
+:      011488 module_hci_cmd_set_nvram:
+0x3b16 011489 fetch 1 ,mem_module_uart_len 
+0x3b17 011490 copy pdata ,loopcnt 
+0x3b18 011491 copy rega ,contru 
+0x3b19 011492 fetch 2 ,mem_nv_data_ptr 
+0x3b1a 011493 icopy contw 
+0x3b1b 011494 call uart_copy_rx_bytes_fast 
+0x3b1c 011495 branch module_hci_event_receive_valid_cmd 
+:      011499 module_hci_cmd_confirm_gkey:
+0x3b1d 011500 fetch 1 ,mem_ui_state_map 
+0x3b1e 011501 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd 
+0x3b1f 011502 ifetch 1 ,contru 
+0x3b20 011503 fetcht 1 ,mem_flag_mode_ssp_pin 
+0x3b21 011504 setflag blank ,flag_mode_ssp_pin_comparison_result_bit ,temp 
+0x3b22 011505 set1 flag_mode_ssp_pin_reviceve_comparison_bit ,temp 
+0x3b23 011506 storet 1 ,mem_flag_mode_ssp_pin 
+0x3b24 011508 call module_hci_event_receive_valid_cmd 
+0x3b25 011510 fetch 1 ,mem_flag_mode_ssp_pin 
+0x3b26 011511 bbit1 flag_mode_ssp_pin_recieve_dhkey_bit ,module_hci_cmd_spp_number_comparison_result_is1 
+0x3b27 011512 rtn 
+:      011514 dhkey_not_accept:
+0x3b28 011515 jam 0 ,mem_flag_mode_ssp_pin 
+0x3b29 011516 jam bt_cmd_dhkey_not_accept ,mem_fifo_temp 
+0x3b2a 011517 branch ui_ipc_send_cmd 
+:      011520 module_hci_cmd_spp_number_comparison_result_is1:
+0x3b2b 011521 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed 
+0x3b2c 011522 branch dhkey_not_accept 
+:      011526 module_hci_cmd_set_credit_given:
+0x3b2d 011527 fetch 1 ,mem_ui_state_map 
+0x3b2e 011528 rtnbit0 ui_state_bt_spp_conn 
+0x3b2f 011529 fetch 1 ,mem_credit_flag 
+0x3b30 011530 rtneq credit_disable 
+0x3b31 011531 ifetch 1 ,contru 
+0x3b32 011532 fetcht 1 ,mem_credit_given 
+0x3b33 011533 iadd temp ,temp 
+0x3b34 011534 storet 1 ,mem_credit_given 
+0x3b35 011535 rtn 
+:      011539 module_hci_cmd_auto_adv:
+0x3b36 011540 arg 0x40 ,loopcnt 
+0x3b37 011541 arg mem_le_adv_data_len ,contw 
+0x3b38 011542 call clear_mem 
+0x3b39 011543 setarg 0 
+0x3b3a 011544 store 1 ,mem_regb 
+0x3b3b 011545 copy rega ,contru 
+:      011546 module_hci_cmd_auto_adv_loop:
+0x3b3c 011547 copy contru ,pdata 
+0x3b3d 011548 store 2 ,mem_regc 
+0x3b3e 011549 call module_hci_cmd_auto_adv_adv_analys 
+0x3b3f 011551 fetch 1 ,mem_regb 
+0x3b40 011552 fetcht 1 ,mem_temp 
+0x3b41 011553 increase 1 ,temp 
+0x3b42 011554 iadd temp ,pdata 
+0x3b43 011555 store 1 ,mem_regb 
+0x3b44 011557 sub pdata ,31 ,null 
+0x3b45 011558 nbranch module_hci_cmd_auto_adv_store_scan ,positive 
+:      011559 module_hci_cmd_auto_adv_store_adv:
+0x3b46 011560 fetcht 1 ,mem_le_adv_data_len 
+0x3b47 011561 setarg mem_le_adv_data 
+0x3b48 011562 iadd temp ,pdata 
+0x3b49 011563 store 2 ,mem_contw 
+0x3b4a 011564 fetcht 1 ,mem_temp 
+0x3b4b 011565 increase 1 ,temp 
+0x3b4c 011566 fetch 1 ,mem_le_adv_data_len 
+0x3b4d 011567 iadd temp ,pdata 
+0x3b4e 011568 store 1 ,mem_le_adv_data_len 
+0x3b4f 011569 branch module_hci_cmd_auto_adv_store_common 
+:      011570 module_hci_cmd_auto_adv_store_scan:
+0x3b50 011571 fetcht 1 ,mem_le_scan_data_len 
+0x3b51 011572 setarg mem_le_scan_data 
+0x3b52 011573 iadd temp ,pdata 
+0x3b53 011574 store 2 ,mem_contw 
+0x3b54 011575 fetcht 1 ,mem_temp 
+0x3b55 011576 increase 1 ,temp 
+0x3b56 011577 fetch 1 ,mem_le_scan_data_len 
+0x3b57 011578 iadd temp ,pdata 
+0x3b58 011579 store 1 ,mem_le_scan_data_len 
+:      011580 module_hci_cmd_auto_adv_store_common:
+0x3b59 011581 fetch 2 ,mem_contw 
+0x3b5a 011582 copy pdata ,contw 
+0x3b5b 011583 fetch 2 ,mem_regc 
+0x3b5c 011584 copy pdata ,contru 
+0x3b5d 011586 copy temp ,loopcnt 
+0x3b5e 011587 call uart_copy_rx_bytes_fast 
+0x3b5f 011589 fetch 1 ,mem_module_uart_len 
+0x3b60 011590 fetcht 1 ,mem_regb 
+0x3b61 011591 isub temp ,null 
+0x3b62 011592 nbranch module_hci_cmd_auto_adv_loop ,zero 
+0x3b63 011593 branch module_hci_event_receive_valid_cmd 
+:      011596 module_hci_cmd_auto_adv_adv_analys:
+0x3b64 011597 ifetch 1 ,contru 
+0x3b65 011598 store 1 ,mem_temp 
+0x3b66 011599 ifetch 1 ,contru 
+0x3b67 011600 store 1 ,mem_rega 
+0x3b68 011601 rtn 
+:      011605 module_hci_cmd_power_request:
+0x3b69 011606 arg 0 ,temp 
+0x3b6a 011607 arg 2 ,rega 
+0x3b6b 011608 fetch 2 ,mem_module_vdd_quotient 
+0x3b6c 011609 store 2 ,mem_event_cmd_response_content 
+0x3b6d 011610 arg mem_event_cmd_response_content ,regb 
+0x3b6e 011611 branch module_hci_event_set_cmd 
+:      011615 module_hci_cmd_power_set:
+0x3b6f 011616 fetch 1 ,mem_module_uart_len 
+0x3b70 011617 bne 1 ,module_hci_event_receive_invalid_cmd 
+0x3b71 011618 ifetch 1 ,contru 
+0x3b72 011619 store 1 ,mem_module_read_vdd_flag 
+0x3b73 011620 setarg 0x00 
+0x3b74 011621 store 2 ,mem_module_vdd_quotient 
+0x3b75 011622 branch module_hci_event_receive_valid_cmd 
+:      011626 module_hci_cmd_passkey_entry:
+0x3b76 011627 ifetch 4 ,contru 
+0x3b77 011628 store 4 ,mem_pin 
+0x3b78 011629 jam 4 ,mem_pin_length 
+0x3b79 011630 jam 0 ,mem_authentication_passkey_times 
+0x3b7a 011631 call module_hci_event_receive_valid_cmd 
+0x3b7b 011632 branch authentication_passkey 
+:      011636 module_hci_cmd_set_gpio:
+0x3b7c 011637 fetch 1 ,mem_module_uart_len 
+0x3b7d 011638 bne 3 ,module_hci_event_receive_invalid_cmd 
+0x3b7e 011639 ifetch 1 ,contru 
+0x3b7f 011640 beq hci_cmd_config_gpio_input ,module_set_gpio_input 
+0x3b80 011641 beq hci_cmd_config_gpio_output ,module_set_gpio_output 
+0x3b81 011642 branch module_hci_event_receive_invalid_cmd 
+:      011644 module_set_gpio_input:
+0x3b82 011645 ifetcht 1 ,contru 
+0x3b83 011646 ifetch 1 ,contru 
+0x3b84 011647 beq gpio_input_high_impedance ,module_set_gpio_high_impedance 
+0x3b85 011648 nsetflag blank ,7 ,temp 
+0x3b86 011649 call gpio_config_input 
+0x3b87 011650 branch module_hci_event_receive_valid_cmd 
+:      011652 module_set_gpio_high_impedance:
+0x3b88 011653 call gpio_set_high_impedance 
+0x3b89 011654 branch module_hci_event_receive_valid_cmd 
+:      011656 module_set_gpio_output:
+0x3b8a 011657 ifetcht 1 ,contru 
+0x3b8b 011658 call gpio_config_output0 
+0x3b8c 011659 ifetch 1 ,contru 
+0x3b8d 011660 isolate1 0 ,pdata 
+0x3b8e 011661 call gpio_out_flag 
+0x3b8f 011662 branch module_hci_event_receive_valid_cmd 
+:      011666 module_hci_cmd_read_gpio:
+0x3b90 011667 fetch 1 ,mem_module_uart_len 
+0x3b91 011668 bne 1 ,module_hci_event_receive_invalid_cmd 
+0x3b92 011669 ifetcht 1 ,contru 
+0x3b93 011670 call gpio_get_bit 
+0x3b94 011671 setarg 0x0 
+0x3b95 011672 nsetflag true ,0 ,pdata 
+0x3b96 011673 arg 1 ,rega 
+0x3b97 011674 branch module_hci_event_set_cmd_send_response 
+:      011678 module_hci_cmd_le_set_pairing_mode:
+0x3b98 011679 copy rega ,contru 
+0x3b99 011680 ifetch 1 ,contru 
+0x3b9a 011681 copy pdata ,temp 
+0x3b9b 011682 beq le_pairing_mode_secure_connect_justwork ,module_le_set_pairing_mode_secure_justwork 
+0x3b9c 011683 beq le_pairing_mode_secure_connect_numeric ,module_le_set_pairing_mode_secure_numeric 
+0x3b9d 011684 beq le_pairing_mode_secure_connect_passkey ,module_le_set_pairing_mode_secure_passkey 
+0x3b9e 011685 store 1 ,mem_le_pairing_mode 
+0x3b9f 011686 beq le_pairing_mode_none ,module_le_set_no_pairing 
+0x3ba0 011687 beq le_pairing_mode_lagacy_justwork ,module_le_set_pairing_mode_lagacy_just_work 
+0x3ba1 011688 beq le_pairing_mode_lagacy_passkey ,module_le_set_pairing_mode_lagacy_passkey 
+0x3ba2 011689 branch module_hci_event_receive_invalid_cmd 
+:      011691 module_le_set_pairing_mode_secure_justwork:
+0x3ba3 011692 fetch 1 ,mem_le_secure_connect_enable 
+0x3ba4 011693 branch module_hci_event_receive_invalid_cmd ,blank 
+0x3ba5 011694 storet 1 ,mem_le_pairing_mode 
+0x3ba6 011695 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+0x3ba7 011696 branch module_le_set_noinputnooutput 
+:      011697 module_le_set_pairing_mode_secure_numeric:
+0x3ba8 011698 fetch 1 ,mem_le_secure_connect_enable 
+0x3ba9 011699 branch module_hci_event_receive_invalid_cmd ,blank 
+0x3baa 011700 storet 1 ,mem_le_pairing_mode 
+0x3bab 011701 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+0x3bac 011702 jam flag_iocap_displayyesno ,mem_le_pres_iocap 
+0x3bad 011703 branch module_hci_event_receive_valid_cmd 
+:      011704 module_le_set_pairing_mode_secure_passkey:
+0x3bae 011705 fetch 1 ,mem_le_secure_connect_enable 
+0x3baf 011706 branch module_hci_event_receive_invalid_cmd ,blank 
+0x3bb0 011707 storet 1 ,mem_le_pairing_mode 
+0x3bb1 011708 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+0x3bb2 011709 branch module_le_set_displayonly 
+:      011710 module_le_set_no_pairing:
+0x3bb3 011711 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth 
+:      011712 module_le_set_noinputnooutput:
+0x3bb4 011713 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap 
+0x3bb5 011714 branch module_hci_event_receive_valid_cmd 
+:      011715 module_le_set_pairing_mode_lagacy_just_work:
+0x3bb6 011716 jam flag_le_bonding_mitm ,mem_le_pres_auth 
+0x3bb7 011717 branch module_le_set_noinputnooutput 
+:      011718 module_le_set_pairing_mode_lagacy_passkey:
+0x3bb8 011719 jam flag_le_bonding_mitm ,mem_le_pres_auth 
+:      011720 module_le_set_displayonly:
+0x3bb9 011721 jam flag_iocap_displayonly ,mem_le_pres_iocap 
+0x3bba 011722 branch module_hci_event_receive_valid_cmd 
+:      011726 module_hci_cmd_le_set_adv_data:
+0x3bbb 011727 fetch 1 ,mem_module_uart_len 
+0x3bbc 011728 sub pdata ,31 ,null 
+0x3bbd 011729 nbranch module_hci_event_receive_invalid_cmd ,positive 
+0x3bbe 011730 store 1 ,mem_le_adv_data_len 
+0x3bbf 011731 copy pdata ,loopcnt 
+0x3bc0 011732 copy rega ,contru 
+0x3bc1 011733 arg mem_le_adv_data ,contw 
+0x3bc2 011734 call uart_copy_rx_bytes_fast 
+0x3bc3 011735 branch module_hci_event_receive_valid_cmd 
+:      011739 module_hci_cmd_le_set_scan_data:
+0x3bc4 011740 fetch 1 ,mem_module_uart_len 
+0x3bc5 011741 sub pdata ,31 ,null 
+0x3bc6 011742 nbranch module_hci_event_receive_invalid_cmd ,positive 
+0x3bc7 011743 store 1 ,mem_le_scan_data_len 
+0x3bc8 011744 copy pdata ,loopcnt 
+0x3bc9 011745 copy rega ,contru 
+0x3bca 011746 arg mem_le_scan_data ,contw 
+0x3bcb 011747 call uart_copy_rx_bytes_fast 
+0x3bcc 011748 branch module_hci_event_receive_valid_cmd 
+:      011752 module_hci_cmd_le_send_conn_update_req:
+0x3bcd 011753 fetch 2 ,mem_ui_state_map 
+0x3bce 011754 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd 
+0x3bcf 011755 fetch 1 ,mem_module_uart_len 
+0x3bd0 011756 bne 0x08 ,module_hci_event_receive_invalid_cmd 
+0x3bd1 011757 copy rega ,contru 
+0x3bd2 011758 ifetch 8 ,contru 
+0x3bd3 011759 store 8 ,mem_le_interval_min 
+0x3bd4 011760 jam bt_cmd_le_update_conn ,mem_fifo_temp 
+0x3bd5 011761 call ui_ipc_send_cmd 
+0x3bd6 011762 branch module_hci_event_receive_valid_cmd 
+:      011766 module_hci_cmd_set_le_adv_parameter:
+0x3bd7 011767 ifetch 2 ,contru 
+0x3bd8 011768 store 2 ,mem_le_adv_interval 
+0x3bd9 011769 branch module_hci_event_receive_valid_cmd 
+:      011773 module_hci_cmd_le_start_pairing:
+0x3bda 011774 fetch 1 ,mem_le_pairing_mode 
+0x3bdb 011775 branch module_hci_event_receive_invalid_cmd ,blank 
+0x3bdc 011776 fetch 1 ,mem_le_pairing_state 
+0x3bdd 011777 bne flag_le_pairing_null ,module_hci_event_receive_invalid_cmd 
+0x3bde 011778 fetch 1 ,mem_le_enc_state 
+0x3bdf 011779 bne flag_le_enc_null ,module_hci_event_receive_invalid_cmd 
+0x3be0 011780 call check_51cmd_le_smp_sec_req 
+0x3be1 011781 branch module_hci_event_receive_valid_cmd 
+:      011785 module_hci_cmd_set_wake_gpio:
+0x3be2 011786 fetch 1 ,mem_module_uart_len 
+0x3be3 011787 bne 5 ,module_hci_event_receive_invalid_cmd 
+0x3be4 011788 ifetch 1 ,contru 
+0x3be5 011789 store 1 ,mem_module_mcu_wake_pin 
+0x3be6 011790 ifetch 4 ,contru 
+0x3be7 011791 store 4 ,mem_module_mcu_wake_delay_us 
+0x3be8 011792 fetcht 1 ,mem_module_mcu_wake_pin 
+0x3be9 011793 call gpio_config_output 
+0x3bea 011794 call module_set_mcu_wake_pin_low 
+0x3beb 011795 branch module_hci_event_receive_valid_cmd 
+:      011799 module_hci_cmd_set_tx_power:
+0x3bec 011800 fetch 1 ,mem_module_uart_len 
+0x3bed 011801 bne 0x01 ,module_hci_event_receive_invalid_cmd 
+0x3bee 011802 ifetch 1 ,contru 
+0x3bef 011803 store 1 ,mem_tx_power 
+0x3bf0 011804 branch module_hci_event_receive_valid_cmd 
+:      011808 module_hci_cmd_le_confirm_gkey:
+0x3bf1 011809 ifetch 1 ,contru 
+0x3bf2 011810 beq 0x01 ,module_hci_cmd_le_confirm_gkey_fail 
+0x3bf3 011811 fetch 1 ,mem_le_secure_connect_state 
+0x3bf4 011812 beq le_sc_stat_send_public_key ,module_hci_cmd_le_confirm_gkey_ok 
+0x3bf5 011813 beq le_sc_stat_receive_dhkey ,module_hci_cmd_le_confirm_gkey_ok 
+0x3bf6 011814 beq le_sc_stat_wait_confirm_gkey ,module_hci_cmd_le_confirm_gkey_ok 
+0x3bf7 011815 branch module_hci_event_receive_invalid_cmd 
+:      011816 module_hci_cmd_le_confirm_gkey_ok:
+0x3bf8 011817 jam flag_le_sc_confrim_gkey_ok ,mem_le_sc_confirm_gkey_flag 
+0x3bf9 011818 branch module_hci_event_receive_valid_cmd 
+:      011820 module_hci_cmd_le_confirm_gkey_fail:
+0x3bfa 011821 call le_send_pairing_confirm_value_failed 
+0x3bfb 011822 branch module_hci_event_receive_valid_cmd 
+:      011826 module_hci_cmd_set_reject_justwork_flag:
+0x3bfc 011827 fetch 1 ,mem_module_uart_len 
+0x3bfd 011828 bne 0x01 ,module_hci_event_receive_invalid_cmd 
+0x3bfe 011829 call module_hci_event_receive_valid_cmd 
+0x3bff 011830 ifetch 1 ,contru 
+0x3c00 011831 branch classic_bt_clr_reject_justwork_flag ,blank 
+0x3c01 011832 branch classic_bt_set_reject_justwork_flag 
+:      011836 module_hci_cmd_reset_chip:
+0x3c02 011837 call module_hci_event_receive_valid_cmd 
+0x3c03 011838 call wait_uarttx 
+0x3c04 011839 jam 0x01 ,core_reset 
+0x3c05 011840 branch loop 
+:      011844 module_hci_cmd_le_set_fixed_passkey:
+0x3c06 011845 fetch 1 ,mem_module_uart_len 
+0x3c07 011846 beq 0 ,module_hci_event_receive_invalid_cmd 
+0x3c08 011847 ifetch 1 ,contru 
+0x3c09 011848 branch module_hci_cmd_le_set_random_passkey ,blank 
+0x3c0a 011849 fetch 1 ,mem_module_uart_len 
+0x3c0b 011850 bne 5 ,module_hci_event_receive_invalid_cmd 
+0x3c0c 011851 ifetch 4 ,contru 
+0x3c0d 011852 arg 1000000 ,temp 
+0x3c0e 011853 isub temp ,null 
+0x3c0f 011854 branch module_hci_event_receive_invalid_cmd ,positive 
+0x3c10 011855 store 4 ,mem_le_tk 
+0x3c11 011856 call le_set_config_fixed_tk 
+0x3c12 011857 branch module_hci_event_receive_valid_cmd 
+:      011859 module_hci_cmd_le_set_random_passkey:
+0x3c13 011860 call le_clr_config_fixed_tk 
+0x3c14 011861 branch module_hci_event_receive_valid_cmd 
+:      011865 module_hci_test_cmde_close_lpm:
+0x3c15 011866 jam 0 ,mem_lpm_mode 
+0x3c16 011867 branch module_hci_event_receive_valid_cmd 
+:      011872 module_hci_event_receive_invalid_cmd:
+0x3c17 011873 arg 1 ,temp 
+0x3c18 011874 arg 0 ,rega 
+0x3c19 011875 branch module_hci_event_set_cmd 
+:      011878 module_hci_event_receive_valid_cmd:
+0x3c1a 011879 arg 0 ,temp 
+0x3c1b 011880 arg 0 ,rega 
+0x3c1c 011881 branch module_hci_event_set_cmd 
+:      011885 module_hci_event_spp_connect:
+0x3c1d 011886 jam hci_event_spp_conn_rep ,mem_module_uart_opcode 
+0x3c1e 011887 branch module_hci_event_enter_standby_mode_len0 
+:      011891 module_hci_event_le_connect:
+0x3c1f 011892 jam hci_event_le_conn_rep ,mem_module_uart_opcode 
+0x3c20 011893 branch module_hci_event_enter_standby_mode_len0 
+:      011897 module_hci_event_spp_disconnect:
+0x3c21 011898 jam hci_event_spp_dis_rep ,mem_module_uart_opcode 
+0x3c22 011899 branch module_hci_event_enter_standby_mode_len0 
+:      011903 module_hci_event_le_disconnect:
+0x3c23 011904 jam hci_event_le_dis_rep ,mem_module_uart_opcode 
+0x3c24 011905 branch module_hci_event_enter_standby_mode_len0 
+:      011913 module_hci_event_set_cmd:
+0x3c25 011914 fetch 1 ,mem_module_uart_opcode 
+0x3c26 011915 copy pdata ,regc 
+0x3c27 011916 jam hci_event_cmd_res ,mem_module_uart_opcode 
+0x3c28 011917 setarg 2 
+0x3c29 011918 iadd rega ,pdata 
+0x3c2a 011919 call module_hci_prepare_tx 
+0x3c2b 011920 copy regc ,pdata 
+0x3c2c 011921 istore 1 ,contwu 
+0x3c2d 011922 istoret 1 ,contwu 
+0x3c2e 011923 copy rega ,loopcnt 
+0x3c2f 011924 copy regb ,contr 
+0x3c30 011925 call uart_copy_tx_bytes 
+0x3c31 011926 branch uartd_send 
+:      011930 module_hci_event_receive_spp_data:
+0x3c32 011932 call module_spp_clear_last_transmite_clock 
+0x3c33 011933 jam hci_event_spp_data_rep ,mem_module_uart_opcode 
+0x3c34 011934 fetch 1 ,mem_current_length 
+0x3c35 011935 rtn blank 
+0x3c36 011936 call module_hci_prepare_tx 
+0x3c37 011937 fetch 1 ,mem_current_length 
+0x3c38 011938 copy pdata ,loopcnt 
+0x3c39 011939 fetch 2 ,mem_rfcomm_uih_payload_ptr 
+0x3c3a 011940 copy pdata ,contr 
+0x3c3b 011941 call uart_copy_tx_bytes_fast 
+0x3c3c 011942 branch uartd_send 
+:      011946 module_hci_event_receive_le_data:
+0x3c3d 011947 jam hci_event_le_data_rep ,mem_module_uart_opcode 
+0x3c3e 011948 fetch 1 ,mem_module_le_rx_data_len 
+0x3c3f 011949 icopy loopcnt 
+0x3c40 011950 increase 2 ,pdata 
+0x3c41 011951 call module_hci_prepare_tx 
+0x3c42 011952 fetch 2 ,mem_module_le_rx_data_handle 
+0x3c43 011953 istore 2 ,contwu 
+0x3c44 011954 fetch 2 ,mem_module_le_rx_data_address 
+0x3c45 011955 icopy contr 
+0x3c46 011956 call uart_copy_tx_bytes_fast 
+0x3c47 011957 branch uartd_send 
+:      011961 module_hci_event_enter_standby_mode:
+0x3c48 011962 jam hci_event_standby_rep ,mem_module_uart_opcode 
+:      011963 module_hci_event_enter_standby_mode_len0:
+0x3c49 011964 setarg 0 
+0x3c4a 011965 call module_hci_prepare_tx 
+0x3c4b 011966 branch uartd_send 
+:      011970 module_hci_event_status_res:
+0x3c4c 011971 jam hci_event_status_res ,mem_module_uart_opcode 
+0x3c4d 011972 setarg 1 
+0x3c4e 011973 call module_hci_prepare_tx 
+0x3c4f 011975 call module_hci_read_bt_status 
+0x3c50 011977 fetch 2 ,mem_ui_state_map 
+0x3c51 011978 arg ui_state_bt_hid_conn ,queue 
+0x3c52 011979 qisolate1 pdata 
+0x3c53 011980 setflag true ,3 ,temp 
+0x3c54 011982 arg ui_state_ble_connected ,queue 
+0x3c55 011983 qisolate1 pdata 
+0x3c56 011984 setflag true ,5 ,temp 
+0x3c57 011986 fetch 1 ,mem_ui_state_map 
+0x3c58 011987 arg ui_state_bt_spp_conn ,queue 
+0x3c59 011988 qisolate1 pdata 
+0x3c5a 011989 setflag true ,4 ,temp 
+0x3c5b 011991 istoret 1 ,contwu 
+0x3c5c 011992 branch uartd_send 
+:      011996 module_hci_read_bt_status:
+0x3c5d 011997 arg 0 ,temp 
+0x3c5e 011998 fetch 1 ,mem_scan_mode 
+0x3c5f 011999 arg inq_scan_mode ,queue 
+0x3c60 012000 qisolate1 pdata 
+0x3c61 012001 setflag true ,0 ,temp 
+0x3c62 012002 arg page_scan_mode ,queue 
+0x3c63 012003 qisolate1 pdata 
+0x3c64 012004 setflag true ,1 ,temp 
+0x3c65 012006 fetch 1 ,mem_le_adv_enable 
+0x3c66 012007 arg 0 ,queue 
+0x3c67 012008 qisolate1 pdata 
+0x3c68 012009 setflag true ,2 ,temp 
+0x3c69 012010 rtn 
+:      012014 module_hci_event_store_device:
+0x3c6a 012015 jam hci_event_nvram_rep ,mem_module_uart_opcode 
+0x3c6b 012016 fetch 1 ,mem_nv_data_number 
+0x3c6c 012017 mul32 pdata ,34 ,pdata 
+0x3c6d 012018 icopy loopcnt 
+0x3c6e 012019 call module_hci_prepare_tx 
+0x3c6f 012020 fetch 2 ,mem_nv_data_ptr 
+0x3c70 012021 icopy contr 
+0x3c71 012022 call uart_copy_tx_bytes_fast 
+0x3c72 012023 branch uartd_send 
+:      012027 module_hci_event_gkey_generate:
+0x3c73 012028 jam hci_event_gkey ,mem_module_uart_opcode 
+0x3c74 012029 setarg 4 
+0x3c75 012030 call module_hci_prepare_tx 
+0x3c76 012031 fetch 4 ,mem_gkey 
+0x3c77 012032 istore 4 ,contwu 
+0x3c78 012033 branch uartd_send 
+:      012037 module_hci_event_invalid_packet:
+0x3c79 012038 jam hci_event_invalid_packet ,mem_module_uart_opcode 
+0x3c7a 012039 hfetch 2 ,core_uart_rxitems 
+0x3c7b 012040 arg 0xff ,temp 
+0x3c7c 012041 call not_greater_than 
+0x3c7d 012042 copy pdata ,loopcnt 
+0x3c7e 012043 call module_hci_prepare_tx 
+0x3c7f 012044 call uartd_prepare_rx 
+0x3c80 012045 call uart_copy_rx2tx 
+0x3c81 012046 branch uartd_send 
+:      012050 module_hci_event_passkey_entry_mode:
+0x3c82 012051 jam hci_event_get_passkey ,mem_module_uart_opcode 
+0x3c83 012052 branch module_hci_event_enter_standby_mode_len0 
+:      012056 module_hci_event_le_tk:
+0x3c84 012057 jam hci_event_le_tk ,mem_module_uart_opcode 
+0x3c85 012058 setarg 4 
+0x3c86 012059 call module_hci_prepare_tx 
+0x3c87 012060 fetch 4 ,mem_le_tk 
+0x3c88 012061 istore 4 ,contwu 
+0x3c89 012062 branch uartd_send 
+:      012066 module_hci_event_le_pairing_fail:
+0x3c8a 012067 arg flag_ble_pairing_fail ,rega 
+0x3c8b 012068 branch module_hci_event_pairing_completed 
+:      012070 module_hci_event_le_pairing_success:
+0x3c8c 012071 arg flag_ble_pairing_success ,rega 
+0x3c8d 012072 branch module_hci_event_pairing_completed 
+:      012074 module_hci_event_bt_pairing_fail:
+0x3c8e 012075 arg flag_bt_pairing_fail ,rega 
+0x3c8f 012076 branch module_hci_event_pairing_completed 
+:      012078 module_hci_event_bt_pairing_success:
+0x3c90 012079 arg flag_bt_pairing_success ,rega 
+:      012081 module_hci_event_pairing_completed:
+0x3c91 012082 jam 0 ,mem_flag_mode_ssp_pin 
+0x3c92 012083 jam hci_event_le_pairing_state ,mem_module_uart_opcode 
+0x3c93 012084 setarg 2 
+0x3c94 012085 call module_hci_prepare_tx 
+0x3c95 012086 copy rega ,pdata 
+0x3c96 012087 istore 2 ,contwu 
+0x3c97 012088 branch uartd_send 
+:      012092 module_hci_event_pause_enc:
+0x3c98 012093 arg flag_event_pause_enc ,regc 
+0x3c99 012094 branch module_hci_event_enc 
+:      012096 module_hci_event_start_enc:
+0x3c9a 012097 arg flag_event_start_enc ,regc 
+:      012099 module_hci_event_enc:
+0x3c9b 012100 jam hci_event_le_encryption_state ,mem_module_uart_opcode 
+0x3c9c 012101 setarg 1 
+0x3c9d 012102 call module_hci_prepare_tx 
+0x3c9e 012103 copy regc ,pdata 
+0x3c9f 012104 istore 1 ,contwu 
+0x3ca0 012105 branch uartd_send 
+:      012109 module_hci_event_le_gkey:
+0x3ca1 012110 jam hci_event_le_gkey ,mem_module_uart_opcode 
+0x3ca2 012111 setarg 4 
+0x3ca3 012112 call module_hci_prepare_tx 
+0x3ca4 012113 fetch 4 ,mem_gkey 
+0x3ca5 012114 istore 4 ,contwu 
+0x3ca6 012115 branch uartd_send 
+:      012126 module_hci_prepare_tx:
+0x3ca7 012127 jam 0x02 ,mem_module_uart_cmd 
+0x3ca8 012128 store 1 ,mem_module_uart_len 
+0x3ca9 012129 storet 8 ,mem_temp 
+0x3caa 012130 bpatch patch1c_2 ,mem_patch1c 
+0x3cab 012131 call module_set_mcu_wake_pin_high_delay 
+0x3cac 012132 fetcht 8 ,mem_temp 
+0x3cad 012133 call uartd_prepare_tx 
+0x3cae 012134 fetch 3 ,mem_module_uart_cmd 
+0x3caf 012135 istore 3 ,contwu 
+0x3cb0 012136 rtn 
+:      012139 module_set_mcu_wake_pin_high_delay:
+0x3cb1 012140 call module_check_mcu_wake_pin_high 
+0x3cb2 012141 rtn true 
+:      012142 module_set_mcu_wake_pin_h_delay:
+0x3cb3 012143 call module_set_mcu_wake_pin_high 
+0x3cb4 012144 fetch 4 ,mem_module_mcu_wake_delay_us 
+0x3cb5 012145 rshift2 pdata ,pdata 
+0x3cb6 012146 rtn blank 
+0x3cb7 012147 branch delay 
+:      012149 module_set_mcu_wake_pin_high:
+0x3cb8 012151 fetcht 1 ,mem_module_mcu_wake_pin 
+0x3cb9 012152 branch gpio_out_active 
+:      012154 module_check_mcu_wake_pin_high:
+0x3cba 012155 fetcht 1 ,mem_module_mcu_wake_pin 
+0x3cbb 012156 branch gpio_check_active 
+:      012158 module_set_mcu_wake_pin_low:
+0x3cbc 012159 fetcht 1 ,mem_module_mcu_wake_pin 
+0x3cbd 012160 branch gpio_out_inactive 
+:      012163 delay:
+0x3cbe 012164 increase -1 ,pdata 
+0x3cbf 012165 nop 38 
+0x3cc0 012166 nbranch delay ,blank 
+0x3cc1 012167 rtn 
+:      012176 module_le_receive_data:
+0x3cc2 012177 call module_check_ble_encrypt_state 
+0x3cc3 012178 rtn user 
+0x3cc4 012179 copy rega ,pdata 
+0x3cc5 012180 store 2 ,mem_module_le_rx_data_address 
+0x3cc6 012181 copy regb ,pdata 
+0x3cc7 012182 store 1 ,mem_module_le_rx_data_len 
+0x3cc8 012183 fetch 2 ,mem_le_att_handle 
+0x3cc9 012184 fetcht 2 ,mem_module_data_write_handle 
+0x3cca 012185 isub temp ,null 
+0x3ccb 012186 branch module_le_receive_data_ok ,zero 
+0x3ccc 012187 fetcht 2 ,mem_module_data_write_handle2 
+0x3ccd 012188 isub temp ,null 
+0x3cce 012189 nrtn zero 
+:      012190 module_le_receive_data_ok:
+0x3ccf 012191 store 2 ,mem_module_le_rx_data_handle 
+0x3cd0 012192 branch module_hci_event_receive_le_data 
+:      012197 module_exit_sniff:
+0x3cd1 012198 fetch 1 ,mem_module_flag 
+0x3cd2 012199 rtnbit1 moudle_task_unsniff 
+0x3cd3 012200 call module_set_unsniff_task_flag 
+0x3cd4 012201 branch app_bt_sniff_exit 
+:      012204 module_set_lpm_mult_2:
+0x3cd5 012205 jam 2 ,mem_lpm_mult 
+0x3cd6 012206 rtn 
+:      012210 module_bb_event_timer:
+0x3cd7 012211 branch module_read_vdd_timer 
+:      012213 module_read_vdd_timer:
+0x3cd8 012214 fetch 1 ,mem_module_read_vdd_flag 
+0x3cd9 012215 rtn blank 
+0x3cda 012216 fetch 1 ,mem_module_read_vdd_count 
+0x3cdb 012217 rtn blank 
+0x3cdc 012218 increase -1 ,pdata 
+0x3cdd 012219 store 1 ,mem_module_read_vdd_count 
+0x3cde 012220 nrtn blank 
+0x3cdf 012221 jam flag_module_read_vdd_count ,mem_module_read_vdd_count 
+0x3ce0 012222 call adc_set_mode 
+0x3ce1 012223 call vdd_calculate_by_mode 
+0x3ce2 012224 div pdata ,0x64 
+0x3ce3 012225 call wait_div_end 
+0x3ce4 012226 quotient pdata 
+0x3ce5 012227 remainder temp 
+0x3ce6 012228 store 1 ,mem_module_vdd_quotient 
+0x3ce7 012229 storet 1 ,mem_module_vdd_remainder 
+0x3ce8 012230 rtn 
+:      012233 module_control_air_flow:
+0x3ce9 012234 call check_uart_tx_buff 
+0x3cea 012235 branch app_l2cap_flow_control_enable ,positive 
+0x3ceb 012236 branch app_l2cap_flow_control_disable 
+:      012240 module_set_sniff_task_flag:
+0x3cec 012241 arg moudle_task_sniff ,queue 
+0x3ced 012242 branch module_set_state 
+:      012244 module_clear_sniff_task_flag:
+0x3cee 012245 arg moudle_task_sniff ,queue 
+0x3cef 012246 branch module_clr_state 
+:      012248 module_set_unsniff_task_flag:
+0x3cf0 012249 arg moudle_task_unsniff ,queue 
+0x3cf1 012250 branch module_set_state 
+:      012252 module_clear_unsniff_task_flag:
+0x3cf2 012253 arg moudle_task_unsniff ,queue 
+0x3cf3 012254 branch module_clr_state 
+:      012256 module_set_le_tx_data_flag:
+0x3cf4 012257 arg module_flag_ble_data_finish ,queue 
+0x3cf5 012258 branch module_set_state 
+:      012260 module_clear_le_tx_data_flag:
+0x3cf6 012261 arg module_flag_ble_data_finish ,queue 
+0x3cf7 012262 branch module_clr_state 
+:      012264 module_clr_state:
+0x3cf8 012265 fetch 1 ,mem_module_flag 
+0x3cf9 012266 qset0 pdata 
+0x3cfa 012267 store 1 ,mem_module_flag 
+0x3cfb 012268 rtn 
+:      012270 module_set_state:
+0x3cfc 012271 fetch 1 ,mem_module_flag 
+0x3cfd 012272 qset1 pdata 
+0x3cfe 012273 store 1 ,mem_module_flag 
+0x3cff 012274 rtn 
+:      012284 mouse_init:
+0x3d00 012285 call mouse_setting_config 
+0x3d01 012286 call spi_ncs_enable 
+0x3d02 012287 call mouse_init_sunt 
+0x3d03 012288 call mouse_dpi_config 
+0x3d04 012289 call spi_ncs_disable 
+0x3d05 012290 rtn wake 
+0x3d06 012291 call mouse_cheak_enable_usb 
+0x3d07 012292 call mouse_cb_fuction 
+0x3d08 012295 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d09 012296 rtnbit1 mouse_enable_usb 
+0x3d0a 012297 call mouse_wakeup_from_power 
+0x3d0b 012298 rtnmark1 mark_24g 
+0x3d0c 012299 fetch 2 ,mem_ui_state_map 
+0x3d0d 012300 bbit1 ui_state_btn_down ,mouse_start_discovery 
+0x3d0e 012301 branch mouse_check_reconn_target 
+:      012304 mouse_delay_4s:
+0x3d0f 012305 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d10 012306 rtnbit0 mouse_enable_init_delay 
+0x3d11 012307 arg 20 ,loopcnt 
+:      012308 mouse_delay_20ms:
+0x3d12 012309 setarg 200000 
+0x3d13 012310 call sleep 
+0x3d14 012311 loop delay_10ms 
+0x3d15 012312 rtn 
+:      012315 mouse_cheak_enable_usb:
+0x3d16 012316 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d17 012317 rtnbit0 mouse_enable_usb 
+0x3d18 012318 branch usb_init 
+:      012321 mouse_cb_fuction:
+0x3d19 012322 setarg mouse_le 
+0x3d1a 012323 store 2 ,mem_cb_le_process 
+0x3d1b 012324 setarg mouse_send_process 
+0x3d1c 012325 store 2 ,mem_cb_bt_process 
+0x3d1d 012326 setarg mouse_process_lpm_before 
+0x3d1e 012327 store 2 ,mem_cb_before_lpm 
+0x3d1f 012328 setarg mouse_priority_bb_event 
+0x3d20 012329 store 2 ,mem_cb_bb_event_process 
+0x3d21 012330 setarg mouse_idle 
+0x3d22 012331 store 2 ,mem_cb_idle_process 
+0x3d23 012332 setarg mouse_before_hibernate 
+0x3d24 012333 store 2 ,mem_cb_before_hibernate 
+0x3d25 012334 setarg le_mouse_bb_event_connect_complete 
+0x3d26 012335 store 2 ,mem_cb_att_write 
+0x3d27 012337 call g24_head_ptr2regc 
+0x3d28 012338 setarg mouse_g24_package_data 
+0x3d29 012339 add regc ,offset_24g_cb_data ,contw 
+0x3d2a 012340 istore 2 ,contw 
+0x3d2b 012341 setarg mouse_g24_enter_lpm 
+0x3d2c 012342 add regc ,offset_24g_cb_lpm_prepare ,contw 
+0x3d2d 012343 istore 2 ,contw 
+0x3d2e 012344 setarg mouse_lpm_before_common 
+0x3d2f 012345 add regc ,offset_24g_cb_lpm_before ,contw 
+0x3d30 012346 istore 2 ,contw 
+0x3d31 012348 setarg mouse_bb_event_timer 
+0x3d32 012349 store 2 ,mem_cb_event_timer 
+0x3d33 012350 setarg mouse_spi_write_flash_cb 
+0x3d34 012351 store 2 ,mem_cb_spi_flash_write_complate 
+0x3d35 012352 rtn 
+:      012353 mouse_spi_write_flash_cb:
+:      012354 mouse_spi_init:
+0x3d36 012355 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d37 012356 bbit0 mouse_enable_spi2 ,spid_init 
+0x3d38 012357 branch spid_init2 
+:      012359 mouse_setting_config:
+0x3d39 012360 rtn wake 
+0x3d3a 012361 call g24_set_device_addr 
+0x3d3b 012362 call mouse_gpio_init 
+0x3d3c 012363 call mouse_param_init 
+0x3d3d 012364 call mouse_adc_init 
+0x3d3e 012365 call le_set_config_fixed_ltk 
+0x3d3f 012366 call le_set_justwork 
+0x3d40 012367 call le_set_fixed_ltk 
+0x3d41 012368 call le_set_config_read_authentication 
+0x3d42 012369 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d43 012370 bbit1 mouse_enable_eeprom ,mouse_init_iic 
+0x3d44 012371 bbit1 mouse_enable_flash ,mouse_load_flash_info_cheak 
+0x3d45 012372 rtn 
+:      012374 mouse_init_iic:
+0x3d46 012375 call iic_init_390k 
+0x3d47 012376 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d48 012377 isolate1 mouse_enable_2k_eeprom ,pdata 
+0x3d49 012378 ncall clear_eeprom_size_2k ,true 
+0x3d4a 012379 call mouse_load_eeprom_dpi 
+0x3d4b 012380 call mouse_init_environment 
+0x3d4c 012381 call mouse_set_24g_addr_eeprom 
+0x3d4d 012382 branch iicd_read_eep_data 
+:      012384 mouse_wakeup_from_power:
+0x3d4e 012385 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d4f 012386 bbit0 mouse_enable_wakeup_from_power ,mouse_wakeup_no_from_power 
+0x3d50 012387 fetch 1 ,mem_wakup_from_power_flag 
+0x3d51 012388 isolate0 gpio_latch ,pdata 
+0x3d52 012389 nrtn true 
+:      012390 mouse_wakeup_no_from_power:
+0x3d53 012391 fetch 1 ,mem_reconn_times_init 
+0x3d54 012392 store 1 ,mem_reconn_times 
+0x3d55 012393 fetch 1 ,mem_config_function_enable 
+0x3d56 012394 rtnbit1 enable_select_device_by_switch 
+:      012395 mouse_start_24g_mode:
+0x3d57 012396 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d58 012397 rtnbit0 mouse_enable_24g 
+0x3d59 012398 bbit1 mouse_enable_auto_24g_paring ,g24_auto_pair_start 
+0x3d5a 012399 branch g24_check_51cmd_start_24g 
+:      012400 le_mouse_bb_event_connect_complete:
+0x3d5b 012401 fetch 1 ,mem_le_att_handle 
+0x3d5c 012402 sub pdata ,26 ,pdata 
+0x3d5d 012403 nrtn zero 
+0x3d5e 012404 jam bt_cmd_le_update_conn ,mem_fifo_temp 
+0x3d5f 012405 call ui_ipc_send_cmd 
+:      012406 mouse_le_write_enable:
+0x3d60 012407 arg write_req_enable_flag ,queue 
+0x3d61 012408 branch mouse_le_enable_connect_flag 
+:      012410 mouse_dpi_up:
+0x3d62 012411 fetch 1 ,mem_mouse_dpi_button_state 
+0x3d63 012412 rtneq dpi_button_state_up 
+0x3d64 012413 jam dpi_button_state_up ,mem_mouse_dpi_button_state 
+0x3d65 012414 rtn 
+:      012415 mouse_dpi_config:
+0x3d66 012416 fetch 1 ,mem_config_sensor_motion 
+0x3d67 012417 and pdata ,0x0f ,pdata 
+0x3d68 012418 store 1 ,mem_mouse_dpi 
+0x3d69 012419 branch mouse_seting_dpi + 2 
+:      012422 mouse_dpi_cheak:
+0x3d6a 012423 fetcht 1 ,mem_dpi_button_gpio 
+0x3d6b 012424 call gpio_get_bit 
+0x3d6c 012425 nbranch mouse_dpi_up ,true 
+:      012426 mouse_dpi_down:
+0x3d6d 012427 fetch 1 ,mem_mouse_dpi_button_state 
+0x3d6e 012428 rtneq dpi_button_state_down 
+0x3d6f 012429 jam dpi_button_state_down ,mem_mouse_dpi_button_state 
+0x3d70 012430 fetch 1 ,mem_mouse_dpi 
+0x3d71 012431 increase 1 ,pdata 
+0x3d72 012432 and pdata ,0x03 ,pdata 
+0x3d73 012433 store 1 ,mem_mouse_dpi 
+0x3d74 012434 call mouse_seting_dpi 
+0x3d75 012435 fetch mouse_flag_len ,mem_mouse_flag 
+0x3d76 012436 bbit1 mouse_enable_eeprom ,mouse_store_eerpom_dpi 
+0x3d77 012437 bbit1 mouse_enable_flash ,mouse_before_store_flash_cpi 
+0x3d78 012438 rtn 
+:      012439 mouse_before_store_flash_cpi:
+0x3d79 012440 arg mouse_spi2_clk_gpio ,temp 
+0x3d7a 012441 call gpio_config_output 
+0x3d7b 012442 arg mouse_spi2_sdio_gpio ,temp 
+0x3d7c 012443 call gpio_config_output 
+0x3d7d 012444 branch mouse_store_flash_device_info 
+:      012446 mouse_seting_dpi:
+0x3d7e 012447 bpatch patch1c_3 ,mem_patch1c 
+0x3d7f 012448 call mosue_dpi_led_blink_init 
+0x3d80 012449 fetch 1 ,mem_config_sensor_type 
+0x3d81 012450 beq p3610 ,mouse_seting_3610_dpi 
+0x3d82 012451 beq p3212 ,mouse_seting_3212_dpi 
+0x3d83 012452 fetch 1 ,mem_mouse_dpi 
+0x3d84 012453 beq mouse_dpi_level1 ,mouse_set_cpi1 
+0x3d85 012454 beq mouse_dpi_level2 ,mouse_set_cpi2 
+0x3d86 012455 beq mouse_dpi_level3 ,mouse_set_cpi3 
+0x3d87 012456 beq mouse_dpi_level4 ,mouse_set_cpi4 
+:      012457 mouse_set_cpi2:
+0x3d88 012458 fetch 1 ,mem_320x_dpi_2 
+0x3d89 012459 branch mouse_p3205_dpi 
+:      012460 mouse_set_cpi1:
+0x3d8a 012461 fetch 1 ,mem_320x_dpi_1 
+0x3d8b 012462 branch mouse_p3205_dpi 
+:      012463 mouse_set_cpi3:
+0x3d8c 012464 fetch 1 ,mem_320x_dpi_3 
+0x3d8d 012465 branch mouse_p3205_dpi 
+:      012466 mouse_set_cpi4:
+0x3d8e 012467 fetch 1 ,mem_320x_dpi_4 
+0x3d8f 012468 branch mouse_p3205_dpi 
+:      012469 moue_seting_cpi_count:
+0x3d90 012470 fetch 1 ,mem_config_sensor_type 
+0x3d91 012471 rtneq p3065_xy 
+0x3d92 012472 fetch 1 ,mem_mouse_cpi_count 
+0x3d93 012473 increase 1 ,pdata 
+0x3d94 012474 store 1 ,mem_mouse_cpi_count 
+0x3d95 012475 rtn 
+:      012477 mouse_seting_3212_dpi:
+0x3d96 012478 fetch 1 ,mem_mouse_dpi 
+0x3d97 012479 beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 
+0x3d98 012480 beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 
+0x3d99 012481 beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 
+0x3d9a 012482 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 
+:      012483 mouse_set_p3212_cpi2:
+0x3d9b 012484 fetch 1 ,mem_3212_dpi_2 
+0x3d9c 012485 branch mouse_p3212_dpi 
+:      012486 mouse_set_p3212_cpi1:
+0x3d9d 012487 fetch 1 ,mem_3212_dpi_1 
+0x3d9e 012488 branch mouse_p3212_dpi 
+:      012489 mouse_set_p3212_cpi3:
+0x3d9f 012490 fetch 1 ,mem_3212_dpi_3 
+0x3da0 012491 branch mouse_p3212_dpi 
+:      012492 mouse_set_p3212_cpi4:
+0x3da1 012493 fetch 1 ,mem_3212_dpi_4 
+:      012494 mouse_p3212_dpi:
+0x3da2 012495 store 1 ,mem_mouse_cpi_count 
+0x3da3 012496 lshift8 pdata ,pdata 
+0x3da4 012497 copy pdata ,rega 
+0x3da5 012498 add pdata ,mouse_p3212_dpi_xaddress ,pdata 
+0x3da6 012499 call twspi_write 
+0x3da7 012500 copy rega ,pdata 
+0x3da8 012501 add pdata ,mouse_p3212_dpi_yaddress ,pdata 
+0x3da9 012502 branch twspi_write 
+:      012504 mouse_seting_3610_dpi:
+0x3daa 012505 fetch 1 ,mem_mouse_dpi 
+0x3dab 012506 beq mouse_dpi_level1 ,mouse_set_p3610_cpi1 
+0x3dac 012507 beq mouse_dpi_level2 ,mouse_set_p3610_cpi2 
+0x3dad 012508 beq mouse_dpi_level3 ,mouse_set_p3610_cpi3 
+0x3dae 012509 beq mouse_dpi_level4 ,mouse_set_p3610_cpi4 
+:      012510 mouse_set_p3610_cpi2:
+0x3daf 012511 fetch 1 ,mem_3610_dpi_2 
+0x3db0 012512 branch mouse_p3610_dpi 
+:      012513 mouse_set_p3610_cpi1:
+0x3db1 012514 fetch 1 ,mem_3610_dpi_1 
+0x3db2 012515 branch mouse_p3610_dpi 
+:      012516 mouse_set_p3610_cpi3:
+0x3db3 012517 fetch 1 ,mem_3610_dpi_3 
+0x3db4 012518 branch mouse_p3610_dpi 
+:      012519 mouse_set_p3610_cpi4:
+0x3db5 012520 fetch 1 ,mem_3610_dpi_4 
+:      012521 mouse_p3610_dpi:
+0x3db6 012522 store 1 ,mem_mouse_cpi_count 
+0x3db7 012523 call mouse_spi_sdio_gpio_pollup 
+0x3db8 012524 fetch 1 ,mem_mouse_cpi_count 
+:      012525 mouse_reset_p3610_dpi:
+0x3db9 012526 add pdata ,0x80 ,pdata 
+0x3dba 012527 lshift8 pdata ,pdata 
+0x3dbb 012528 add pdata ,mouse_p3610_dpi_address ,pdata 
+0x3dbc 012529 copy pdata ,rega 
+0x3dbd 012530 branch mouse_set_sensor_reg 
+:      012532 mouse_p3205_dpi:
+0x3dbe 012533 store 1 ,mem_mouse_cpi_count 
+0x3dbf 012534 call moue_seting_cpi_count 
+0x3dc0 012535 fetch 1 ,mem_mouse_cpi_count 
+0x3dc1 012536 setarg mouse_dpi_address 
+0x3dc2 012537 call twspi_read 
+0x3dc3 012538 and pdata ,0xf8 ,temp 
+0x3dc4 012539 fetch 1 ,mem_mouse_cpi_count 
+0x3dc5 012540 iadd temp ,pdata 
+0x3dc6 012541 lshift8 pdata ,pdata 
+0x3dc7 012542 add pdata ,mouse_dpi_address ,pdata 
+0x3dc8 012543 branch twspi_write 
+:      012546 mouse_init_environment:
+0x3dc9 012547 call app_initflag_check 
+0x3dca 012548 branch mouse_eeprom_load_recon_info ,zero 
+0x3dcb 012549 call mouse_ble_init_address 
+0x3dcc 012550 call mouse_store_eeprom_device_info 
+0x3dcd 012551 branch app_initflag_store 
+:      012554 mouse_24g_pairing_button:
+0x3dce 012555 fetch 2 ,mem_24g_pairing_timer_count 
+0x3dcf 012556 rtn blank 
+0x3dd0 012557 fetch mouse_flag_len ,mem_mouse_flag 
+0x3dd1 012558 rtnbit0 mouse_enable_24g 
+0x3dd2 012559 rtnbit1 mosue_24g_pairing_flag 
+0x3dd3 012560 rtnmark1 mark_24g 
+0x3dd4 012561 call mouse_check_key_gpio 
+0x3dd5 012562 rtnne mouse_lmr_button 
+0x3dd6 012563 call mouse_devce_led_off 
+0x3dd7 012564 arg mosue_24g_pairing_flag ,queue 
+0x3dd8 012565 call mouse_enable_function_flag 
+0x3dd9 012566 setarg 0 
+0x3dda 012567 store 2 ,mem_mouse_direct_timer 
+0x3ddb 012568 store 1 ,mem_mouse_send_blank_timer 
+0x3ddc 012569 call g24_set0_mem_check_dongle_times 
+0x3ddd 012571 fetch 2 ,mem_ui_state_map 
+0x3dde 012572 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect 
+0x3ddf 012573 bbit1 ui_state_ble_connected ,app_ble_disconnect 
+0x3de0 012574 bbit1 ui_state_bt_connected ,app_bt_disconnect 
+0x3de1 012575 call mouse_stop_discovery 
+0x3de2 012576 branch g24_start_pairing_sm1 
+:      012579 mouse_idle:
+0x3de3 012580 call mouse_24g_pairing_button 
+0x3de4 012581 call ui_check_paring_button 
+0x3de5 012582 call mouse_dpi_cheak 
+0x3de6 012583 call mouse_usb_isr 
+0x3de7 012584 call mouse_wheel_check 
+0x3de8 012585 branch mouse_usb_mode 
+:      012586 mouse_usb_isr:
+0x3de9 012587 fetch mouse_flag_len ,mem_mouse_flag 
+0x3dea 012588 rtnbit0 mouse_enable_usb 
+0x3deb 012589 call usb_isr 
+0x3dec 012590 branch usb_offline_state 
+:      012592 mouse_cheak_usb:
+0x3ded 012593 hfetch 1 ,core_usb_addr 
+0x3dee 012594 bbit0 7 ,mouse_usb_no_exsit 
+0x3def 012595 bbit1 7 ,mouse_usb_exsit 
+0x3df0 012596 rtn 
+:      012597 mouse_usb_no_exsit:
+0x3df1 012598 fetch 1 ,mem_usb_addr 
+0x3df2 012599 rtnbit0 7 
+0x3df3 012600 branch soft_reset_chip 
+:      012601 mouse_usb_exsit:
+0x3df4 012602 fetch 1 ,mem_usb_addr 
+0x3df5 012603 rtnbit1 7 
+0x3df6 012604 branch mouse_stop_bluetooth_mode 
+:      012606 mouse_usb_mode:
+0x3df7 012607 call mouse_cheak_usb 
+0x3df8 012608 hfetch 1 ,core_usb_addr 
+0x3df9 012609 store 1 ,mem_usb_addr 
+0x3dfa 012610 rtnbit0 7 
+0x3dfb 012611 call mouse_clkn_check 
+0x3dfc 012612 fetch 4 ,mem_btclk_sensor 
+0x3dfd 012613 fetcht 1 ,mem_wire_usb_interval 
+0x3dfe 012614 iadd temp ,temp 
+0x3dff 012615 copy clkn_bt ,pdata 
+0x3e00 012616 isub temp ,null 
+0x3e01 012617 nrtn positive 
+0x3e02 012618 store 4 ,mem_btclk_sensor 
+0x3e03 012619 call mouse_motion 
+0x3e04 012620 nrtn user 
+0x3e05 012621 jam 4 ,mem_usb_tx_enable 
+0x3e06 012622 branch mouse_wired_to_usb 
+:      012624 mouse_clkn_check:
+0x3e07 012625 fetcht 4 ,mem_btclk_sensor 
+0x3e08 012626 copy clkn_bt ,pdata 
+0x3e09 012627 isub temp ,null 
+0x3e0a 012628 ncall mouse_clkn_timeout ,positive 
+0x3e0b 012629 rtn 
+:      012630 mouse_clkn_timeout:
+0x3e0c 012631 setarg 0 
+0x3e0d 012632 store 4 ,mem_btclk_sensor 
+0x3e0e 012633 rtn 
+:      012637 mouse_wired_to_usb:
+0x3e0f 012638 fetch 1 ,mem_usb_tx_enable 
+0x3e10 012639 rtnbit0 2 
+0x3e11 012640 branch mouse_data_push 
+:      012641 mouse_data_push:
+0x3e12 012642 hfetch 1 ,core_usb_addr 
+0x3e13 012643 rtnbit0 7 
+0x3e14 012644 jam usb_ep2_ms ,mem_usb_ep2_data 
+0x3e15 012645 setarg ms_report_id 
+0x3e16 012646 store 1 ,mem_usb_mouse_data 
+0x3e17 012647 fetch 7 ,mem_mouse_key 
+0x3e18 012648 istore 7 ,contw 
+0x3e19 012649 rtn 
+:      012652 mouse_enable_clock_qdecoder:
+0x3e1a 012653 hfetch 2 ,core_clkoff 
+0x3e1b 012654 set0 clock_off_qdecoder ,pdata 
+0x3e1c 012655 hstore 2 ,core_clkoff 
+0x3e1d 012656 rtn 
+:      012658 mouse_param_init:
+0x3e1e 012659 setarg 0x8c00 
+0x3e1f 012660 store 2 ,mem_ui_uuid_table 
+0x3e20 012661 setarg 0x8e7a 
+0x3e21 012662 store 2 ,mem_ui_le_uuid_table 
+0x3e22 012663 setarg 0x2402 
+0x3e23 012664 store 2 ,mem_fcomp_mul 
+0x3e24 012665 setarg 0x2580 
+0x3e25 012666 store 3 ,mem_class 
+0x3e26 012667 jam 3 ,mem_lpm_mult_timeout 
+0x3e27 012668 jam 8 ,mem_lpm_overhead 
+0x3e28 012669 jam dpi_button_state_up ,mem_select_device_button_statue 
+0x3e29 012670 setarg 0x0200 
+0x3e2a 012671 store 2 ,mem_lpm_interval 
+0x3e2b 012672 jam 0x17 ,mem_le_local_mtu 
+0x3e2c 012673 jam 0x17 ,mem_le_remote_mtu 
+0x3e2d 012675 setarg 0x0a77 
+0x3e2e 012676 store 2 ,mem_spi_init_clk 
+0x3e2f 012692 setsect 0 ,0x306 
+0x3e30 012693 setsect 1 ,0x4440 
+0x3e31 012694 setsect 2 ,0x10000 
+0x3e32 012695 setsect 3 ,0x4408 
+0x3e33 012696 store 9 ,mem_all_uuid_16bits 
+0x3e34 012697 setsect 0 ,0x1224 
+0x3e35 012698 setsect 1 ,0x4000 
+0x3e36 012699 setsect 2 ,0x0 
+0x3e37 012700 istore 5 ,contw 
+0x3e38 012702 setsect 0 ,0x3ffff 
+0x3e39 012703 setsect 1 ,0x2fe23 
+0x3e3a 012704 setsect 2 ,0x199d9 
+0x3e3b 012705 setsect 3 ,0x20d 
+0x3e3c 012706 store 8 ,mem_features 
+0x3e3d 012708 setarg 0x012c 
+0x3e3e 012709 store 2 ,mem_24g_pairing_timer_count 
+0x3e3f 012710 call le_modified_name 
+0x3e40 012711 fetch mouse_flag_len ,mem_mouse_flag 
+0x3e41 012712 rtnbit0 mouse_enable_gpio_control_adc_sensor 
+0x3e42 012713 call mouse_sensor_set_angle 
+0x3e43 012714 branch mouse_select_adc 
+:      012716 mouse_sensor_set_angle:
+0x3e44 012717 fetcht 1 ,mem_select_sensor_angle_gpio 
+0x3e45 012718 call gpio_config_input 
+0x3e46 012719 fetcht 1 ,mem_select_sensor_angle_gpio 
+0x3e47 012720 call gpio_get_bit 
+0x3e48 012721 jam mouse_3clk_angle ,mem_config_sensor_angle 
+0x3e49 012722 rtn true 
+0x3e4a 012723 jam mouse_12clk_angle ,mem_config_sensor_angle 
+0x3e4b 012724 rtn 
+:      012726 mouse_select_adc:
+0x3e4c 012727 fetcht 1 ,mem_select_adc_gpio 
+0x3e4d 012728 call gpio_config_input 
+0x3e4e 012729 fetcht 1 ,mem_select_adc_gpio 
+0x3e4f 012730 call gpio_get_bit 
+0x3e50 012731 jam adc_config_vinlpm ,mem_adc_config_flag 
+0x3e51 012732 rtn true 
+0x3e52 012733 jam adc_config_gpio ,mem_adc_config_flag 
+0x3e53 012734 rtn 
+:      012737 mouse_adc_init:
+0x3e54 012738 fetch 1 ,mem_adc_config_flag 
+0x3e55 012739 beq adc_config_vinlpm ,mouse_adc_init_data_vinlpm 
+0x3e56 012740 beq adc_config_hvin ,mouse_adc_init_data_hvin 
+0x3e57 012741 beq adc_config_gpio ,mouse_adc_init_data_io 
+0x3e58 012742 branch mouse_adc_init_data_vinlpm 
+:      012744 mouse_adc_init_data_vinlpm:
+0x3e59 012745 fetcht 2 ,mem_2v_adc_vinlpm_data 
+0x3e5a 012746 fetch 2 ,mem_3v_adc_vinlpm_data 
+0x3e5b 012747 isub temp ,pdata 
+0x3e5c 012748 mul32 pdata ,20 ,pdata 
+0x3e5d 012749 div pdata ,100 
+0x3e5e 012750 call wait_div_end 
+0x3e5f 012751 quotient pdata 
+0x3e60 012752 store 2 ,mem_adc_reference_voltage 
+0x3e61 012753 rtn 
+:      012754 mouse_adc_init_data_hvin:
+0x3e62 012755 fetcht 2 ,mem_1v_adc_hvin_data 
+0x3e63 012756 fetch 2 ,mem_5v_adc_hvin_data 
+0x3e64 012757 isub temp ,pdata 
+0x3e65 012758 mul32 pdata ,230 ,pdata 
+0x3e66 012759 div pdata ,400 
+0x3e67 012760 call wait_div_end 
+0x3e68 012761 quotient pdata 
+0x3e69 012762 store 2 ,mem_adc_reference_voltage 
+0x3e6a 012763 rtn 
+:      012764 mouse_adc_init_data_io:
+0x3e6b 012765 fetch 2 ,mem_1v_adc_io_data 
+0x3e6c 012766 store 2 ,mem_adc_reference_voltage 
+0x3e6d 012767 rtn 
+:      012768 mouse_gpio_init:
+0x3e6e 012769 fetcht 1 ,mem_eeprom_wp_gpio 
+0x3e6f 012770 call gpio_config_output 
+0x3e70 012771 call usb_offline_check_init 
+0x3e71 012772 fetcht 1 ,mem_lbutton_gpio 
+0x3e72 012773 call gpio_config_input 
+0x3e73 012774 fetcht 1 ,mem_rbutton_gpio 
+0x3e74 012775 call gpio_config_input 
+0x3e75 012776 fetcht 1 ,mem_mbutton_gpio 
+0x3e76 012777 call gpio_config_input 
+0x3e77 012778 fetcht 1 ,mem_sensor_data_gpio 
+0x3e78 012779 call gpio_config_input 
+0x3e79 012781 fetcht 1 ,mem_sensor_reset_gpio 
+0x3e7a 012782 call gpio_config_output 
+0x3e7b 012784 fetcht 1 ,mem_whee_a_data_gpio 
+0x3e7c 012785 call gpio_config_input 
+0x3e7d 012787 fetcht 1 ,mem_whee_b_data_gpio 
+0x3e7e 012788 call gpio_config_input 
+0x3e7f 012790 fetcht 1 ,mem_whee_ta_data_gpio 
+0x3e80 012791 call gpio_config_input 
+0x3e81 012792 fetcht 1 ,mem_whee_tb_data_gpio 
+0x3e82 012793 call gpio_config_input 
+0x3e83 012795 fetcht 1 ,mem_bk_button_gpio 
+0x3e84 012796 call gpio_config_input 
+0x3e85 012797 fetcht 1 ,mem_fw_button_gpio 
+0x3e86 012798 call gpio_config_input 
+0x3e87 012800 fetcht 1 ,mem_config_low_voltage_alarm_gpio 
+0x3e88 012801 call gpio_config_output 
+0x3e89 012803 fetcht 1 ,mem_config_device1_led_gpio 
+0x3e8a 012804 call gpio_config_output 
+0x3e8b 012806 fetcht 1 ,mem_config_device2_led_gpio 
+0x3e8c 012807 call gpio_config_output 
+0x3e8d 012809 fetcht 1 ,mem_config_device3_led_gpio 
+0x3e8e 012810 call gpio_config_output 
+0x3e8f 012812 fetcht 1 ,mem_dpi_led_gpio 
+0x3e90 012813 call gpio_config_output 
+0x3e91 012815 fetcht 1 ,mem_config_select_device_button_gpio 
+0x3e92 012816 call gpio_config_input 
+0x3e93 012818 fetcht 1 ,mem_config_bt_button_gpio 
+0x3e94 012819 call gpio_config_input 
+0x3e95 012821 fetcht 1 ,mem_dpi_button_gpio 
+0x3e96 012822 branch gpio_config_input 
+:      012824 mouse_wheel_gpio_set_wake:
+0x3e97 012825 fetcht 1 ,mem_whee_a_data_gpio 
+0x3e98 012826 call gpio_set_wake_by_current_state 
+0x3e99 012827 fetcht 1 ,mem_whee_b_data_gpio 
+0x3e9a 012828 call gpio_set_wake_by_current_state 
+0x3e9b 012829 fetcht 1 ,mem_whee_ta_data_gpio 
+0x3e9c 012830 call gpio_set_wake_by_current_state 
+0x3e9d 012831 fetcht 1 ,mem_whee_tb_data_gpio 
+0x3e9e 012832 branch gpio_set_wake_by_current_state 
+:      012834 mouse_before_hibernate_wheel_gpio_set:
+0x3e9f 012835 fetcht 1 ,mem_whee_a_data_gpio 
+0x3ea0 012836 call mouse_gpio_set_pupd_by_input 
+0x3ea1 012837 fetcht 1 ,mem_whee_b_data_gpio 
+0x3ea2 012838 call mouse_gpio_set_pupd_by_input 
+0x3ea3 012839 fetcht 1 ,mem_whee_ta_data_gpio 
+0x3ea4 012840 call mouse_gpio_set_pupd_by_input 
+0x3ea5 012841 fetcht 1 ,mem_whee_tb_data_gpio 
+0x3ea6 012842 branch mouse_gpio_set_pupd_by_input 
+:      012844 mouse_gpio_set_pupd_by_input:
+0x3ea7 012845 sub temp ,ui_button_gpio_disable ,null 
+0x3ea8 012846 rtn zero 
+0x3ea9 012847 and temp ,0x7f ,queue 
+0x3eaa 012848 hfetch 4 ,core_gpio_in 
+0x3eab 012849 qisolate1 pdata 
+0x3eac 012850 hfetch 4 ,core_gpio_pu0 
+0x3ead 012851 qsetflag true ,pdata 
+0x3eae 012852 hstore 4 ,core_gpio_pu0 
+0x3eaf 012853 hfetch 4 ,core_gpio_pd0 
+0x3eb0 012854 nqsetflag true ,pdata 
+0x3eb1 012855 hstore 4 ,core_gpio_pd0 
+0x3eb2 012856 rtn 
+:      012858 mouse_before_hibernate:
+0x3eb3 012859 enable user 
+0x3eb4 012860 hfetch 4 ,0x8138 
+0x3eb5 012861 setflag user ,26 ,pdata 
+0x3eb6 012862 hstore 4 ,core_lpm_reg 
+0x3eb7 012863 call lpm_write_ctrl 
+0x3eb8 012864 call mouse_devce_led_off 
+0x3eb9 012865 call mouse_before_hibernate_wheel_gpio_set 
+0x3eba 012867 branch mouse_lpm_before_common 
+:      012871 mouse_process_lpm_before:
+0x3ebb 012872 call mouse_lpm_before_common 
+0x3ebc 012873 fetch 1 ,mem_lpm_current_mult 
+0x3ebd 012874 nrtn blank 
+0x3ebe 012875 branch gpio_clr_wake 
+:      012877 mouse_lpm_before_common:
+0x3ebf 012878 call mouse_wheel_check 
+0x3ec0 012879 arg mouse_spi1_clk_gpio ,temp 
+0x3ec1 012880 fetch mouse_flag_len ,mem_mouse_flag 
+0x3ec2 012881 isolate1 mouse_enable_spi2 ,pdata 
+0x3ec3 012882 call mouse_spi_clk_gpio ,true 
+0x3ec4 012883 call gpio_config_output 
+0x3ec5 012884 call twspi_disable 
+0x3ec6 012888 fetcht 1 ,mem_lbutton_gpio 
+0x3ec7 012889 call gpio_set_wake_by_current_state 
+0x3ec8 012890 fetcht 1 ,mem_rbutton_gpio 
+0x3ec9 012891 call gpio_set_wake_by_current_state 
+0x3eca 012892 fetcht 1 ,mem_mbutton_gpio 
+0x3ecb 012893 call gpio_set_wake_by_current_state 
+0x3ecc 012895 fetcht 1 ,mem_bk_button_gpio 
+0x3ecd 012896 call gpio_set_wake_by_current_state 
+0x3ece 012897 fetcht 1 ,mem_fw_button_gpio 
+0x3ecf 012898 call gpio_set_wake_by_current_state 
+0x3ed0 012899 fetcht 1 ,mem_dpi_button_gpio 
+0x3ed1 012900 call gpio_set_wake_by_current_state 
+0x3ed2 012901 fetcht 1 ,mem_config_select_device_button_gpio 
+0x3ed3 012902 call gpio_set_wake_by_current_state 
+0x3ed4 012903 fetcht 1 ,mem_whee_a_data_gpio 
+0x3ed5 012904 call gpio_set_wake_by_current_state 
+0x3ed6 012905 fetcht 1 ,mem_whee_b_data_gpio 
+0x3ed7 012906 call gpio_set_wake_by_current_state 
+0x3ed8 012907 fetcht 1 ,mem_whee_ta_data_gpio 
+0x3ed9 012908 call gpio_set_wake_by_current_state 
+0x3eda 012909 fetcht 1 ,mem_whee_tb_data_gpio 
+0x3edb 012910 call gpio_set_wake_by_current_state 
+0x3edc 012911 fetcht 1 ,mem_sensor_data_gpio 
+0x3edd 012912 branch gpio_set_wake 
+:      012916 mouse_spi_clk_gpio:
+0x3ede 012917 arg mouse_spi2_clk_gpio ,temp 
+0x3edf 012918 rtn 
+:      012920 mouse_wheel_check:
+0x3ee0 012921 bpatch patch1c_4 ,mem_patch1c 
+0x3ee1 012922 call mouse_t_wheel_scan 
+0x3ee2 012923 call mouse_wheel_scan 
+0x3ee3 012924 fetch 1 ,mem_wheel_tb_new_pinlevel 
+0x3ee4 012925 fetcht 1 ,mem_wheel_tb_old_pinlevel 
+0x3ee5 012926 store 1 ,mem_wheel_tb_old_pinlevel 
+0x3ee6 012927 isub temp ,null 
+0x3ee7 012928 nbranch app_lpm_wake_auto_lock ,zero 
+0x3ee8 012929 fetch 1 ,mem_mwheel_b_new_pinlevel 
+0x3ee9 012930 fetcht 1 ,mem_mwheel_b_old_pinlevel 
+0x3eea 012931 store 1 ,mem_mwheel_b_old_pinlevel 
+0x3eeb 012932 isub temp ,null 
+0x3eec 012933 nbranch app_lpm_wake_auto_lock ,zero 
+0x3eed 012934 rtn 
+:      012935 mouse_t_wheel_scan:
+0x3eee 012936 fetch 1 ,mem_whee_ta_data_gpio 
+0x3eef 012937 rtneq gpio_disable 
+0x3ef0 012938 arg 0 ,rega 
+0x3ef1 012939 fetcht 1 ,mem_whee_ta_data_gpio 
+0x3ef2 012940 call gpio_get_bit 
+0x3ef3 012941 setflag true ,0 ,rega 
+0x3ef4 012942 fetcht 1 ,mem_whee_tb_data_gpio 
+0x3ef5 012943 call gpio_get_bit 
+0x3ef6 012944 setflag true ,1 ,rega 
+0x3ef7 012945 copy rega ,pdata 
+0x3ef8 012946 store 1 ,mem_wheel_tb_new_pinlevel 
+0x3ef9 012947 beq 0x01 ,mouse_t_wheel_scan_judge1 
+0x3efa 012948 beq 0x02 ,mouse_t_wheel_scan_judge2 
+0x3efb 012949 fetch 1 ,mem_wheel_tog 
+0x3efc 012950 bbit1 7 ,mouse_t_wheel_scan_judge3 
+0x3efd 012951 rtn 
+:      012953 mouse_t_wheel_scan_judge1:
+0x3efe 012954 fetch 1 ,mem_wheel_tb_old_pinlevel 
+0x3eff 012955 beq 0 ,mouse_t_wheel_scan_judge11 
+0x3f00 012956 beq 3 ,mouse_t_wheel_scan_judge12 
+0x3f01 012957 rtn 
+:      012958 mouse_t_wheel_scan_judge2:
+0x3f02 012959 fetch 1 ,mem_wheel_tb_old_pinlevel 
+0x3f03 012960 beq 0 ,mouse_t_wheel_scan_judge21 
+0x3f04 012961 beq 3 ,mouse_t_wheel_scan_judge22 
+0x3f05 012962 rtn 
+:      012963 mouse_t_wheel_scan_judge11:
+0x3f06 012964 jam 0x82 ,mem_wheel_tog 
+0x3f07 012965 rtn 
+:      012966 mouse_t_wheel_scan_judge12:
+0x3f08 012967 jam 0x81 ,mem_wheel_tog 
+0x3f09 012968 rtn 
+:      012969 mouse_t_wheel_scan_judge21:
+0x3f0a 012970 jam 0x80 ,mem_wheel_tog 
+0x3f0b 012971 rtn 
+:      012972 mouse_t_wheel_scan_judge22:
+0x3f0c 012973 jam 0x83 ,mem_wheel_tog 
+0x3f0d 012974 rtn 
+:      012975 mouse_t_wheel_scan_judge3:
+0x3f0e 012976 fetch 1 ,mem_wheel_tog 
+0x3f0f 012977 set0 7 ,pdata 
+0x3f10 012978 store 1 ,mem_wheel_tog 
+0x3f11 012979 beq 0 ,mouse_t_wheel_scan_judge30 
+0x3f12 012980 beq 1 ,mouse_t_wheel_scan_judge31 
+0x3f13 012981 beq 2 ,mouse_t_wheel_scan_judge32 
+0x3f14 012982 beq 3 ,mouse_t_wheel_scan_judge33 
+0x3f15 012983 rtn 
+:      012984 mouse_t_wheel_scan_judge30:
+0x3f16 012985 fetch 1 ,mem_wheel_tb_new_pinlevel 
+0x3f17 012986 beq 3 ,mouse_wheel_t_forward 
+0x3f18 012987 rtn 
+:      012988 mouse_t_wheel_scan_judge31:
+0x3f19 012989 fetch 1 ,mem_wheel_tb_new_pinlevel 
+0x3f1a 012990 beq 0 ,mouse_wheel_t_forward 
+0x3f1b 012991 rtn 
+:      012992 mouse_t_wheel_scan_judge32:
+0x3f1c 012993 fetch 1 ,mem_wheel_tb_new_pinlevel 
+0x3f1d 012994 beq 3 ,mouse_wheel_t_back 
+0x3f1e 012995 rtn 
+:      012996 mouse_t_wheel_scan_judge33:
+0x3f1f 012997 fetch 1 ,mem_wheel_tb_new_pinlevel 
+0x3f20 012998 beq 0 ,mouse_wheel_t_back 
+0x3f21 012999 rtn 
+:      013000 mouse_wheel_t_forward:
+0x3f22 013001 fetch 1 ,mem_mouse_tz_data_count1 
+0x3f23 013002 increase 1 ,pdata 
+0x3f24 013003 store 1 ,mem_mouse_tz_data_count1 
+0x3f25 013004 sub pdata ,1 ,null 
+0x3f26 013005 rtn positive 
+0x3f27 013006 jam 0 ,mem_mouse_tz_data_count1 
+0x3f28 013007 fetch 1 ,mem_mouse_tz_data 
+0x3f29 013008 increase 1 ,pdata 
+0x3f2a 013009 store 1 ,mem_mouse_tz_data 
+0x3f2b 013010 rtn 
+:      013011 mouse_wheel_t_back:
+0x3f2c 013012 fetch 1 ,mem_mouse_tz_data_count 
+0x3f2d 013013 increase 1 ,pdata 
+0x3f2e 013014 store 1 ,mem_mouse_tz_data_count 
+0x3f2f 013015 sub pdata ,1 ,null 
+0x3f30 013016 rtn positive 
+0x3f31 013017 jam 0 ,mem_mouse_tz_data_count 
+0x3f32 013018 fetch 1 ,mem_mouse_tz_data 
+0x3f33 013019 increase -1 ,pdata 
+0x3f34 013020 store 1 ,mem_mouse_tz_data 
+0x3f35 013021 rtn 
+:      013024 mouse_wheel_scan:
+0x3f36 013025 fetch 1 ,mem_whee_a_data_gpio 
+0x3f37 013026 rtneq gpio_disable 
+0x3f38 013027 arg 0 ,rega 
+0x3f39 013028 fetcht 1 ,mem_whee_a_data_gpio 
+0x3f3a 013029 call gpio_get_bit 
+0x3f3b 013030 setflag true ,0 ,rega 
+0x3f3c 013031 fetcht 1 ,mem_whee_b_data_gpio 
+0x3f3d 013032 call gpio_get_bit 
+0x3f3e 013033 setflag true ,1 ,rega 
+0x3f3f 013034 copy rega ,pdata 
+0x3f40 013035 store 1 ,mem_mwheel_b_new_pinlevel 
+0x3f41 013036 beq 0x01 ,mouse_wheel_scan_judge1 
+0x3f42 013037 beq 0x02 ,mouse_wheel_scan_judge2 
+0x3f43 013038 fetch 1 ,mem_mwheel_tog 
+0x3f44 013039 bbit1 7 ,mouse_wheel_scan_judge3 
+0x3f45 013040 rtn 
+:      013042 mouse_wheel_scan_judge1:
+0x3f46 013043 fetch 1 ,mem_mwheel_b_old_pinlevel 
+0x3f47 013044 beq 0 ,mouse_wheel_scan_judge11 
+0x3f48 013045 beq 3 ,mouse_wheel_scan_judge12 
+0x3f49 013046 rtn 
+:      013047 mouse_wheel_scan_judge2:
+0x3f4a 013048 fetch 1 ,mem_mwheel_b_old_pinlevel 
+0x3f4b 013049 beq 0 ,mouse_wheel_scan_judge21 
+0x3f4c 013050 beq 3 ,mouse_wheel_scan_judge22 
+0x3f4d 013051 rtn 
+:      013052 mouse_wheel_scan_judge11:
+0x3f4e 013053 jam 0x82 ,mem_mwheel_tog 
+0x3f4f 013054 rtn 
+:      013055 mouse_wheel_scan_judge12:
+0x3f50 013056 jam 0x81 ,mem_mwheel_tog 
+0x3f51 013057 rtn 
+:      013058 mouse_wheel_scan_judge21:
+0x3f52 013059 jam 0x80 ,mem_mwheel_tog 
+0x3f53 013060 rtn 
+:      013061 mouse_wheel_scan_judge22:
+0x3f54 013062 jam 0x83 ,mem_mwheel_tog 
+0x3f55 013063 rtn 
+:      013064 mouse_wheel_scan_judge3:
+0x3f56 013065 fetch 1 ,mem_mwheel_tog 
+0x3f57 013066 set0 7 ,pdata 
+0x3f58 013067 store 1 ,mem_mwheel_tog 
+0x3f59 013068 beq 0 ,mouse_wheel_scan_judge30 
+0x3f5a 013069 beq 1 ,mouse_wheel_scan_judge31 
+0x3f5b 013070 beq 2 ,mouse_wheel_scan_judge32 
+0x3f5c 013071 beq 3 ,mouse_wheel_scan_judge33 
+0x3f5d 013072 rtn 
+:      013073 mouse_wheel_scan_judge30:
+0x3f5e 013074 fetch 1 ,mem_mwheel_b_new_pinlevel 
+0x3f5f 013075 beq 3 ,mouse_wheel_forward 
+0x3f60 013076 rtn 
+:      013077 mouse_wheel_scan_judge31:
+0x3f61 013078 fetch 1 ,mem_mwheel_b_new_pinlevel 
+0x3f62 013079 beq 0 ,mouse_wheel_forward 
+0x3f63 013080 rtn 
+:      013081 mouse_wheel_scan_judge32:
+0x3f64 013082 fetch 1 ,mem_mwheel_b_new_pinlevel 
+0x3f65 013083 beq 3 ,mouse_wheel_back 
+0x3f66 013084 rtn 
+:      013085 mouse_wheel_scan_judge33:
+0x3f67 013086 fetch 1 ,mem_mwheel_b_new_pinlevel 
+0x3f68 013087 beq 0 ,mouse_wheel_back 
+0x3f69 013088 rtn 
+:      013089 mouse_wheel_forward:
+0x3f6a 013090 jam 0 ,mem_mouse_z_data_count1 
+0x3f6b 013091 fetch 1 ,mem_mouse_z_data 
+0x3f6c 013092 increase 1 ,pdata 
+0x3f6d 013093 store 1 ,mem_mouse_z_data 
+0x3f6e 013094 rtn 
+:      013095 mouse_wheel_back:
+0x3f6f 013096 jam 0 ,mem_mouse_z_data_count 
+0x3f70 013097 fetch 1 ,mem_mouse_z_data 
+0x3f71 013098 increase -1 ,pdata 
+0x3f72 013099 store 1 ,mem_mouse_z_data 
+0x3f73 013100 rtn 
+:      013103 mouse_hid_connected:
+0x3f74 013104 setarg hid_handshake_timeout 
+0x3f75 013105 store 1 ,mem_hid_handshake_timer_count 
+0x3f76 013106 rtn 
+:      013108 mouse_send_process:
+0x3f77 013109 fetch 1 ,mem_app_handshake_flag 
+0x3f78 013110 rtn blank 
+0x3f79 013111 call l2cap_malloc_is_fifo_nearly_full 
+0x3f7a 013112 nrtn blank 
+0x3f7b 013113 fetch mouse_flag_len ,mem_mouse_flag 
+0x3f7c 013114 bbit1 mosue_24g_pairing_flag ,mouse_send_empty_data 
+0x3f7d 013115 bbit1 mouse_select_device_flag ,mouse_send_empty_data 
+0x3f7e 013116 bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data 
+0x3f7f 013117 call mouse_motion 
+0x3f80 013118 nrtn user 
+:      013119 mouse_send_data:
+0x3f81 013120 arg 9 ,rega 
+0x3f82 013121 call hid_malloc_tx_buff 
+0x3f83 013122 fetch 2 ,mem_hid_int_remote_cid 
+0x3f84 013123 istore 2 ,contw 
+0x3f85 013124 setarg 0x02a1 
+0x3f86 013125 istore 2 ,contw 
+0x3f87 013126 fetch 7 ,mem_mouse_key 
+0x3f88 013127 istore 7 ,contw 
+0x3f89 013128 rtn 
+:      013131 mouse_send_empty_data:
+0x3f8a 013132 setarg 0 
+0x3f8b 013133 store 7 ,mem_mouse_key 
+0x3f8c 013134 branch mouse_send_data 
+:      013137 mouse_no_data_timer_init:
+0x3f8d 013138 fetch 2 ,mem_mouse_no_data_timeout 
+0x3f8e 013139 store 2 ,mem_mouse_no_data_timer 
+0x3f8f 013140 rtn 
+:      013143 mouse_fill_data_le:
+0x3f90 013144 bpatch patch1c_5 ,mem_patch1c 
+0x3f91 013145 arg 7 ,rega 
+0x3f92 013146 fetcht 2 ,mem_le_notify_handle 
+0x3f93 013147 call le_att_malloc_tx_notify 
+0x3f94 013148 fetch 7 ,mem_mouse_key 
+0x3f95 013149 istore 7 ,contw 
+0x3f96 013150 rtn 
+:      013152 mouse_motion:
+0x3f97 013153 bpatch patch1c_6 ,mem_patch1c 
+0x3f98 013154 disable user 
+0x3f99 013155 setarg 0 
+0x3f9a 013156 store 6 ,mem_mouse_x 
+0x3f9b 013157 call mouse_cheak_sensor_data 
+0x3f9c 013158 call mouse_zwheel 
+0x3f9d 013159 call mouse_t_zwheel 
+0x3f9e 013160 call mouse_key 
+0x3f9f 013161 nrtn user 
+0x3fa0 013162 call mouse_no_data_timer_init 
+0x3fa1 013163 arg mouse_statue_up_flag ,queue 
+0x3fa2 013164 branch mouse_enable_function_flag 
+:      013166 motion_6clk_direction_dispose:
+0x3fa3 013167 fetch 2 ,mem_mouse_x 
+0x3fa4 013168 sub pdata ,0 ,pdata 
+0x3fa5 013169 store 2 ,mem_mouse_x 
+0x3fa6 013170 branch enable_user 
+:      013171 motion_12clk_direction_dispose:
+0x3fa7 013172 fetch 2 ,mem_mouse_y 
+0x3fa8 013173 sub pdata ,0 ,pdata 
+0x3fa9 013174 store 2 ,mem_mouse_y 
+0x3faa 013175 branch enable_user 
+:      013176 motion_9clk_direction_dispose:
+0x3fab 013177 fetch 2 ,mem_mouse_y 
+0x3fac 013178 sub pdata ,0 ,pdata 
+0x3fad 013179 store 2 ,mem_mouse_y 
+0x3fae 013180 fetch 2 ,mem_mouse_x 
+0x3faf 013181 sub pdata ,0 ,pdata 
+0x3fb0 013182 store 2 ,mem_mouse_x 
+0x3fb1 013183 call mouse_sensor_data_swap_places 
+0x3fb2 013184 branch enable_user 
+:      013185 motion_3clk_direction_dispose:
+0x3fb3 013186 call mouse_sensor_data_swap_places 
+0x3fb4 013187 branch enable_user 
+:      013188 mouse_cheak_sensor_data:
+0x3fb5 013189 fetch 1 ,mem_spi_write_flash_sm 
+0x3fb6 013190 rtnne flash_sm_no_buys 
+0x3fb7 013191 fetch 1 ,mem_config_sensor_type 
+0x3fb8 013192 beq p3205 ,mouse_p32xx_sensor_motion 
+0x3fb9 013193 beq p3065 ,mouse_p32xx_sensor_motion 
+0x3fba 013194 beq ka8 ,mouse_p32xx_sensor_motion 
+0x3fbb 013195 beq p3204 ,mouse_p32xx_sensor_motion 
+0x3fbc 013196 beq p3212 ,mouse_p3212_sensor_motion 
+0x3fbd 013197 beq p3610 ,mouse_p3610_sensor_motion 
+0x3fbe 013198 beq p3065_xy ,mouse_p32xx_sensor_motion 
+0x3fbf 013199 branch mouse_p32xx_sensor_motion 
+:      013201 mouse_clear_sensor_data:
+0x3fc0 013202 fetch 1 ,mem_mouse_move_flag 
+0x3fc1 013203 call mouse_read_sensor_common ,blank 
+0x3fc2 013204 jam 1 ,mem_mouse_move_flag 
+0x3fc3 013205 rtn 
+:      013208 mouse_p3212_sensor_motion:
+0x3fc4 013209 call mouse_clear_sensor_data 
+0x3fc5 013210 fetcht 1 ,mem_sensor_data_gpio 
+0x3fc6 013211 call gpio_get_bit 
+0x3fc7 013212 nrtn true 
+0x3fc8 013213 setarg pan_reg_pid_l 
+0x3fc9 013214 call twspi_read 
+0x3fca 013215 bne p32xx_id1 ,mouse_twspi_reset 
+0x3fcb 013216 setarg pan_reg_motion_staus 
+0x3fcc 013217 call twspi_read 
+0x3fcd 013218 rtnbit0 7 
+0x3fce 013219 call mouse_read_sensor_common 
+0x3fcf 013220 call mouse_read_3212sensor_xy_high 
+0x3fd0 013221 store 1 ,mem_mouse_xy_h 
+0x3fd1 013222 rshift4 pdata ,pdata 
+0x3fd2 013223 call extsign_bit3 
+0x3fd3 013224 store 1 ,mem_mouse_x + 1 
+0x3fd4 013225 fetch 1 ,mem_mouse_xy_h 
+0x3fd5 013226 and pdata ,0x0f ,pdata 
+0x3fd6 013227 call extsign_bit3 
+0x3fd7 013228 store 1 ,mem_mouse_y + 1 
+0x3fd8 013229 fetch 1 ,mem_config_sensor_angle 
+0x3fd9 013230 beq mouse_6clk_angle ,motion_6clk_direction_dispose 
+0x3fda 013231 beq mouse_9clk_angle ,motion_9clk_direction_dispose 
+0x3fdb 013232 beq mouse_12clk_angle ,motion_12clk_direction_dispose 
+0x3fdc 013233 beq mouse_3clk_angle ,motion_3clk_direction_dispose 
+0x3fdd 013234 rtn 
+:      013236 mouse_read_3212sensor_xy_high:
+0x3fde 013237 setarg 0x12 
+0x3fdf 013238 branch twspi_read 
+:      013240 mouse_p3065_judge:
+0x3fe0 013241 beq p3065_id1 ,mouse_p32xx_sensor_motion_1 
+0x3fe1 013242 branch mouse_twspi_reset 
+:      013244 mouse_p32xx_sensor_motion:
+0x3fe2 013245 call mouse_clear_sensor_data 
+0x3fe3 013246 disable user 
+0x3fe4 013247 fetcht 1 ,mem_sensor_data_gpio 
+0x3fe5 013248 call gpio_get_bit 
+0x3fe6 013249 nrtn true 
+0x3fe7 013250 setarg pan_reg_pid_l 
+0x3fe8 013251 call twspi_read 
+0x3fe9 013252 bne p32xx_id1 ,mouse_p3065_judge 
+:      013253 mouse_p32xx_sensor_motion_1:
+0x3fea 013254 setarg pan_reg_motion_staus 
+0x3feb 013255 call twspi_read 
+0x3fec 013256 rtnbit0 7 
+0x3fed 013257 call mouse_read_sensor_common 
+0x3fee 013258 fetch 1 ,mem_mouse_x 
+0x3fef 013259 call extsign 
+0x3ff0 013260 store 2 ,mem_mouse_x 
+0x3ff1 013261 fetch 1 ,mem_mouse_y 
+0x3ff2 013262 call extsign 
+0x3ff3 013263 store 2 ,mem_mouse_y 
+0x3ff4 013264 fetch 1 ,mem_config_sensor_angle 
+0x3ff5 013265 beq mouse_6clk_angle ,motion32xx_6clk_direction_selection 
+0x3ff6 013266 beq mouse_9clk_angle ,motion32xx_9clk_direction_selection 
+0x3ff7 013267 beq mouse_12clk_angle ,motion32xx_12clk_direction_selection 
+0x3ff8 013268 beq mouse_3clk_angle ,motion32xx_3clk_direction_selection 
+0x3ff9 013269 rtn 
+:      013271 motion32xx_6clk_direction_selection:
+0x3ffa 013272 call motion_6clk_direction_dispose 
+0x3ffb 013273 branch mouse_sensor_sdio_low 
+:      013274 motion32xx_9clk_direction_selection:
+0x3ffc 013275 call motion_9clk_direction_dispose 
+0x3ffd 013276 branch mouse_sensor_sdio_low 
+:      013277 motion32xx_12clk_direction_selection:
+0x3ffe 013278 call motion_12clk_direction_dispose 
+0x3fff 013279 branch mouse_sensor_sdio_low 
+:      013280 motion32xx_3clk_direction_selection:
+0x4000 013281 call motion_3clk_direction_dispose 
+0x4001 013282 branch mouse_sensor_sdio_low 
+:      013284 mouse_sensor_data_swap_places:
+0x4002 013285 fetch 2 ,mem_mouse_y 
+0x4003 013286 fetcht 2 ,mem_mouse_x 
+0x4004 013287 store 2 ,mem_mouse_x 
+0x4005 013288 storet 2 ,mem_mouse_y 
+0x4006 013289 rtn 
+:      013291 mouse_p3610sensor_read:
+0x4007 013292 call spi_ncs_enable 
+0x4008 013293 nop 100 
+0x4009 013294 copy regb ,pdata 
+0x400a 013295 call twspi_read 
+0x400b 013296 copy pdata ,regb 
+0x400c 013297 call spi_ncs_disable 
+0x400d 013298 nop 100 
+0x400e 013299 copy regb ,pdata 
+0x400f 013300 rtn 
+:      013301 mouse_p3610_sensor_motion:
+0x4010 013302 disable user 
+0x4011 013303 fetcht 1 ,mem_sensor_data_gpio 
+0x4012 013304 call gpio_get_bit 
+0x4013 013305 nrtn true 
+0x4014 013306 arg pan_reg_motion_staus ,regb 
+0x4015 013307 call mouse_p3610sensor_read 
+0x4016 013308 rtnbit0 7 
+0x4017 013309 arg pan_reg_pid_l ,regb 
+0x4018 013310 call mouse_p3610sensor_read 
+0x4019 013311 store 1 ,mem_sensor_id1 
+0x401a 013312 bne p3610_id1 ,mouse_init_3610sensor_reset 
+0x401b 013313 fetch 1 ,mem_mouse_move_flag 
+0x401c 013314 call mouse_read_sensor3610_data ,blank 
+0x401d 013315 jam 1 ,mem_mouse_move_flag 
+0x401e 013316 call mouse_read_sensor3610_data 
+0x401f 013317 fetch 1 ,mem_mouse_xy_h 
+0x4020 013318 rshift4 pdata ,pdata 
+0x4021 013319 call extsign_bit3 
+0x4022 013320 store 1 ,mem_mouse_x + 1 
+0x4023 013321 fetch 1 ,mem_mouse_xy_h 
+0x4024 013322 and pdata ,0x0f ,pdata 
+0x4025 013323 call extsign_bit3 
+0x4026 013324 store 1 ,mem_mouse_y + 1 
+0x4027 013325 fetch 1 ,mem_config_sensor_angle 
+0x4028 013326 beq 0 ,motion3610_6clk_direction_selection 
+0x4029 013327 beq 1 ,motion3610_9clk_direction_selection 
+0x402a 013328 beq 2 ,motion3610_12clk_direction_selection 
+0x402b 013329 beq 3 ,motion3610_3clk_direction_selection 
+0x402c 013330 rtn 
+:      013332 mouse_3610_smart_select:
+0x402d 013333 fetch 1 ,mem_sensor_smart_flag 
+0x402e 013334 beq p3610_smart_enable ,mouse_3610_smart_disable 
+0x402f 013335 beq p3610_smart_disable ,mouse_3610_smart_enable 
+0x4030 013336 rtn 
+:      013339 motion3610_6clk_direction_selection:
+0x4031 013340 call motion_6clk_direction_dispose 
+0x4032 013341 branch mouse_3610_smart_select 
+:      013343 motion3610_12clk_direction_selection:
+0x4033 013344 call motion_12clk_direction_dispose 
+0x4034 013345 branch mouse_3610_smart_select 
+:      013347 motion3610_9clk_direction_selection:
+0x4035 013348 call motion_9clk_direction_dispose 
+0x4036 013349 branch mouse_3610_smart_select 
+:      013351 motion3610_3clk_direction_selection:
+0x4037 013352 call motion_3clk_direction_dispose 
+0x4038 013353 branch mouse_3610_smart_select 
+:      013355 mouse_read_sensor3610_data:
+0x4039 013356 call spi_ncs_enable 
+0x403a 013357 call mouse_read_sensor_common 
+0x403b 013358 arg 5 ,pdata 
+0x403c 013359 call twspi_read 
+0x403d 013360 store 1 ,mem_mouse_xy_h 
+0x403e 013361 arg 7 ,pdata 
+0x403f 013362 call twspi_read 
+0x4040 013363 store 1 ,mem_sensor_shutter_hi 
+0x4041 013364 arg 8 ,pdata 
+0x4042 013365 call twspi_read 
+0x4043 013366 store 1 ,mem_sensor_shutter_lo 
+0x4044 013367 branch spi_ncs_disable 
+:      013370 mouse_3610_smart_enable:
+0x4045 013371 fetch 1 ,mem_sensor_shutter_hi 
+0x4046 013372 rtnne 0 
+0x4047 013373 fetch 1 ,mem_sensor_shutter_lo 
+0x4048 013374 sub pdata ,45 ,null 
+0x4049 013375 rtn positive 
+0x404a 013376 jam p3610_smart_enable ,mem_sensor_smart_flag 
+0x404b 013377 setarg 0xba41 
+0x404c 013378 call sensor_write 
+0x404d 013379 setarg 0x0032 
+0x404e 013380 call sensor_write 
+0x404f 013381 setarg 0xb541 
+0x4050 013382 branch sensor_write 
+:      013383 mouse_3610_smart_disable:
+0x4051 013384 fetch 1 ,mem_sensor_shutter_hi 
+0x4052 013385 rtnne 0 
+0x4053 013386 fetch 1 ,mem_sensor_shutter_lo 
+0x4054 013387 sub pdata ,45 ,null 
+0x4055 013388 nrtn positive 
+0x4056 013389 jam p3610_smart_disable ,mem_sensor_smart_flag 
+0x4057 013390 setarg 0xba41 
+0x4058 013391 call sensor_write 
+0x4059 013392 setarg 0x8032 
+0x405a 013393 call sensor_write 
+0x405b 013394 setarg 0xb541 
+0x405c 013395 branch sensor_write 
+:      013399 mouse_read_sensor_common:
+0x405d 013400 arg pan_reg_delta_x ,pdata 
+0x405e 013401 call twspi_read 
+0x405f 013402 store 2 ,mem_mouse_x 
+0x4060 013403 arg pan_reg_delta_y ,pdata 
+0x4061 013404 call twspi_read 
+0x4062 013405 store 2 ,mem_mouse_y 
+0x4063 013406 rtn 
+:      013408 mouse_set_qdecoder_x:
+0x4064 013409 arg mouse_default_xa_gpio ,temp 
+0x4065 013410 call gpio_config_input 
+0x4066 013411 arg mouse_default_xa_gpio ,temp 
+0x4067 013412 call gpio_get_bit 
+0x4068 013413 rtn true 
+0x4069 013414 hfetch 1 ,core_qdec_cntx 
+0x406a 013415 set1 4 ,pdata 
+0x406b 013416 hstore 1 ,core_qdec_cntx 
+0x406c 013417 rtn 
+:      013419 mouse_hardware_zwheel:
+0x406d 013420 fetcht 1 ,mem_mouse_z_data 
+0x406e 013421 hfetch 1 ,core_qdec_cntx 
+0x406f 013422 iadd temp ,pdata 
+0x4070 013423 rtn blank 
+0x4071 013424 store 1 ,mem_mouse_z 
+0x4072 013425 jam 0 ,mem_mouse_z_data 
+0x4073 013426 branch enable_user 
+:      013427 mouse_hardware_zwheel_beforelpm:
+0x4074 013428 fetcht 1 ,mem_mouse_z_data 
+0x4075 013429 hfetch 1 ,core_qdec_cntx 
+0x4076 013430 iadd temp ,pdata 
+0x4077 013431 store 1 ,mem_mouse_z_data 
+0x4078 013432 rtn 
+:      013433 mouse_zwheel:
+0x4079 013434 fetch 1 ,mem_mouse_z_data 
+0x407a 013435 rtn blank 
+0x407b 013436 store 1 ,mem_mouse_z 
+0x407c 013437 jam 0 ,mem_mouse_z_data 
+0x407d 013438 branch enable_user 
+:      013440 mouse_t_zwheel:
+0x407e 013441 fetch 1 ,mem_mouse_tz_data 
+0x407f 013442 rtn blank 
+0x4080 013443 store 1 ,mem_mouse_tz 
+0x4081 013444 jam 0 ,mem_mouse_tz_data 
+0x4082 013445 branch enable_user 
+:      013447 mouse_check_key_gpio:
+0x4083 013448 arg 0 ,rega 
+0x4084 013449 fetcht 1 ,mem_lbutton_gpio 
+0x4085 013450 call gpio_get_bit 
+0x4086 013451 setflag true ,0 ,rega 
+0x4087 013452 fetcht 1 ,mem_rbutton_gpio 
+0x4088 013453 call gpio_get_bit 
+0x4089 013454 setflag true ,1 ,rega 
+0x408a 013455 fetcht 1 ,mem_mbutton_gpio 
+0x408b 013456 call gpio_get_bit 
+0x408c 013457 setflag true ,2 ,rega 
+0x408d 013458 call mouse_check_s_key_gpio 
+0x408e 013459 copy rega ,pdata 
+0x408f 013460 rtn 
+:      013461 mouse_check_s_key_gpio:
+0x4090 013462 fetch 1 ,mem_bk_button_gpio 
+0x4091 013463 rtneq gpio_disable 
+0x4092 013464 fetcht 1 ,mem_bk_button_gpio 
+0x4093 013465 call gpio_get_bit 
+0x4094 013466 setflag true ,3 ,rega 
+0x4095 013467 fetcht 1 ,mem_fw_button_gpio 
+0x4096 013468 call gpio_get_bit 
+0x4097 013469 setflag true ,4 ,rega 
+0x4098 013470 rtn 
+:      013472 mouse_key:
+0x4099 013473 call mouse_check_key_gpio 
+0x409a 013474 call mouse_set_mult 
+0x409b 013475 call mouse_24g_key 
+0x409c 013476 copy rega ,pdata 
+0x409d 013477 fetcht 1 ,mem_mouse_key 
+0x409e 013478 store 1 ,mem_mouse_key 
+0x409f 013479 ixor temp ,pdata 
+0x40a0 013480 sub pdata ,0 ,null 
+0x40a1 013481 rtn zero 
+0x40a2 013482 branch enable_user 
+:      013484 mouse_24g_key:
+0x40a3 013485 rtnmark0 mark_24g 
+0x40a4 013486 copy rega ,pdata 
+0x40a5 013487 rtn blank 
+0x40a6 013488 store 1 ,mem_mouse_key 
+0x40a7 013489 branch enable_user 
+:      013492 mouse_set_mult:
+0x40a8 013493 fetch 2 ,mem_ui_state_map 
+0x40a9 013494 bbit1 ui_state_ble_connected ,mouse_set_ble_mult 
+0x40aa 013495 fetch 2 ,mem_ui_state_map 
+0x40ab 013496 bbit1 ui_state_bt_connected ,mouse_set_bt_mult 
+0x40ac 013497 rtn 
+:      013498 mouse_set_ble_mult:
+0x40ad 013499 copy rega ,pdata 
+0x40ae 013500 nbranch le_set_config_short_mult ,blank 
+0x40af 013501 branch le_clr_config_short_mult 
+:      013502 mouse_set_bt_mult:
+0x40b0 013503 copy rega ,pdata 
+0x40b1 013504 nbranch classic_bt_set_mult_short_flag ,blank 
+0x40b2 013505 branch classic_bt_clr_mult_short_flag 
+:      013508 mouse_sensor_sdio_low:
+0x40b3 013509 bpatch patch1c_7 ,mem_patch1c 
+0x40b4 013510 arg mouse_spi1_sdio_gpio ,temp 
+0x40b5 013511 fetch mouse_flag_len ,mem_mouse_flag 
+0x40b6 013512 isolate1 mouse_enable_spi2 ,pdata 
+0x40b7 013513 call mouse_sensor_sdio_low2 ,true 
+0x40b8 013514 call gpio_get_bit 
+0x40b9 013515 rtn true 
+0x40ba 013516 setarg 0x0a 
+0x40bb 013517 call twspi_read 
+0x40bc 013518 nop 1000 
+0x40bd 013519 branch mouse_sensor_sdio_low 
+:      013520 mouse_sensor_sdio_low2:
+0x40be 013521 arg mouse_spi2_sdio_gpio ,temp 
+0x40bf 013522 rtn 
+:      013524 mouse_spi_sdio_gpio_pollup:
+0x40c0 013525 fetch mouse_flag_len ,mem_mouse_flag 
+0x40c1 013526 bbit1 mouse_enable_spi2 ,mouse_spi2_sdio_gpio_pollup 
+:      013527 mouse_spi1_sdio_gpio_pollup:
+0x40c2 013528 arg mouse_spi1_sdio_gpio ,temp 
+0x40c3 013529 branch gpio_config_input_without_wake 
+:      013530 mouse_spi2_sdio_gpio_pollup:
+0x40c4 013531 arg mouse_spi2_sdio_gpio ,temp 
+0x40c5 013532 branch gpio_config_input_without_wake 
+:      013535 mouse_init_sunt:
+0x40c6 013536 call mouse_spi_init 
+0x40c7 013537 rtn wake 
+0x40c8 013538 call mouse_spi_sdio_gpio_pollup 
+0x40c9 013539 fetch 1 ,mem_config_sensor_type 
+0x40ca 013540 beq p3610 ,mouse_init_3610sensor 
+:      013541 mouse_init_sensor:
+0x40cb 013542 call mouse_read_sensor_id 
+0x40cc 013543 beq p32xx_id1 ,mouse_init_p32xx_id2_judge 
+0x40cd 013544 beq p3065_id1 ,mouse_p3065_init_param 
+0x40ce 013545 call mouse_twspi_reset 
+0x40cf 013546 nop 1000 
+0x40d0 013547 branch mouse_init_sensor 
+:      013548 mouse_twspi_reset:
+0x40d1 013549 bpatch patch1d_0 ,mem_patch1d 
+0x40d2 013550 fetch mouse_flag_len ,mem_mouse_flag 
+0x40d3 013551 bbit1 mouse_enable_spi2 ,twspi_reset2 
+0x40d4 013552 branch twspi_reset 
+:      013554 mouse_init_3610sensor:
+0x40d5 013555 call mouse_read_sensor_id 
+0x40d6 013556 beq p3610_id1 ,mouse_init_p3610 
+0x40d7 013557 call mouse_init_3610sensor_reset 
+0x40d8 013558 branch mouse_init_3610sensor 
+:      013560 mouse_read_sensor_id:
+0x40d9 013561 setarg pan_reg_pid_h 
+0x40da 013562 call twspi_read 
+0x40db 013563 store 1 ,mem_sensor_id2 
+0x40dc 013564 setarg pan_reg_pid_l 
+0x40dd 013565 call twspi_read 
+0x40de 013566 store 1 ,mem_sensor_id1 
+0x40df 013567 rtn 
+:      013568 mouse_init_p32xx_id2_judge:
+0x40e0 013569 fetch 1 ,mem_sensor_id2 
+0x40e1 013570 beq p3205_tj3t_id2 ,mouse_3205_3t_init_param 
+0x40e2 013571 beq p3204_tj3l_id2 ,mouse_3204_3l_init_param 
+0x40e3 013572 beq p3212_id2 ,mouse_3212_init_param 
+0x40e4 013573 beq pka8_id2 ,mouse_ka8_init_param 
+0x40e5 013574 rtn 
+:      013575 mouse_ka8_init_param:
+0x40e6 013576 jam ka8 ,mem_config_sensor_type 
+0x40e7 013577 rtn 
+:      013578 mouse_p3065xy_init_param:
+0x40e8 013579 jam p3065_xy ,mem_config_sensor_type 
+0x40e9 013580 rtn 
+:      013581 mouse_p3065_init_param:
+0x40ea 013582 fetch 1 ,mem_sensor_id2 
+0x40eb 013583 beq p3065_xy_id2 ,mouse_p3065xy_init_param 
+0x40ec 013584 jam p3065 ,mem_config_sensor_type 
+0x40ed 013585 rtn 
+:      013586 mouse_3212_init_param:
+0x40ee 013587 jam p3212 ,mem_config_sensor_type 
+0x40ef 013588 call mouse_sensor_disable_wp 
+0x40f0 013589 setarg 0x3426 
+0x40f1 013590 call twspi_write 
+0x40f2 013591 setarg 0x0419 
+0x40f3 013592 call twspi_write 
+:      013593 mouse_sensor_enable_wp:
+0x40f4 013594 setarg 0x0009 
+0x40f5 013595 branch twspi_write 
+:      013596 mouse_sensor_disable_wp:
+0x40f6 013597 setarg 0x5a09 
+0x40f7 013598 branch twspi_write 
+:      013600 mouse_3204_3l_init_param:
+0x40f8 013601 jam p3204 ,mem_config_sensor_type 
+0x40f9 013602 call mouse_sensor_disable_wp 
+0x40fa 013603 setarg 0x0f0d 
+0x40fb 013604 call twspi_write 
+0x40fc 013605 setarg 0xe31d 
+0x40fd 013606 call twspi_write 
+0x40fe 013607 setarg 0xd27d 
+0x40ff 013608 call twspi_write 
+0x4100 013609 call mouse_32xx_init_param 
+0x4101 013610 branch mouse_32xx_init_param_1 
+:      013612 mouse_32xx_init_param:
+0x4102 013613 setarg 0x351b 
+0x4103 013614 call twspi_write 
+0x4104 013615 setarg 0xb428 
+0x4105 013616 call twspi_write 
+0x4106 013617 setarg 0x4629 
+0x4107 013618 call twspi_write 
+0x4108 013619 setarg 0x962a 
+0x4109 013620 call twspi_write 
+0x410a 013621 setarg 0x8c2b 
+0x410b 013622 call twspi_write 
+0x410c 013623 setarg 0x6e2c 
+0x410d 013624 call twspi_write 
+0x410e 013625 setarg 0x642d 
+0x410f 013626 call twspi_write 
+0x4110 013627 setarg 0x5f38 
+0x4111 013628 call twspi_write 
+0x4112 013629 setarg 0x0f39 
+0x4113 013630 call twspi_write 
+0x4114 013631 setarg 0x323a 
+0x4115 013632 call twspi_write 
+0x4116 013633 setarg 0x473b 
+0x4117 013634 call twspi_write 
+0x4118 013635 setarg 0x1042 
+0x4119 013636 branch twspi_write 
+:      013637 mouse_32xx_init_param_1:
+0x411a 013638 setarg 0x2e54 
+0x411b 013639 call twspi_write 
+0x411c 013640 setarg 0xf255 
+0x411d 013641 call twspi_write 
+0x411e 013642 setarg 0xf461 
+0x411f 013643 call twspi_write 
+0x4120 013644 setarg 0x7063 
+0x4121 013645 call twspi_write 
+0x4122 013646 setarg 0x5275 
+0x4123 013647 call twspi_write 
+0x4124 013648 setarg 0x4176 
+0x4125 013649 call twspi_write 
+0x4126 013650 setarg 0xed77 
+0x4127 013651 call twspi_write 
+0x4128 013652 setarg 0x2378 
+0x4129 013653 call twspi_write 
+0x412a 013654 setarg 0x4679 
+0x412b 013655 call twspi_write 
+0x412c 013656 setarg 0xe57a 
+0x412d 013657 call twspi_write 
+0x412e 013658 setarg 0x487c 
+0x412f 013659 call twspi_write 
+0x4130 013660 setarg 0x777e 
+0x4131 013661 call twspi_write 
+0x4132 013662 setarg 0x017f 
+0x4133 013663 call twspi_write 
+0x4134 013664 setarg 0x000b 
+0x4135 013665 call twspi_write 
+0x4136 013666 setarg 0x007f 
+0x4137 013667 call twspi_write 
+0x4138 013668 branch mouse_sensor_enable_wp 
+:      013671 mouse_3205_3t_init_param:
+0x4139 013672 jam p3205 ,mem_config_sensor_type 
+0x413a 013673 call mouse_sensor_disable_wp 
+0x413b 013674 setarg 0x100d 
+0x413c 013675 call twspi_write 
+0x413d 013676 setarg 0xed1d 
+0x413e 013677 call twspi_write 
+0x413f 013678 setarg 0x807d 
+0x4140 013679 call twspi_write 
+0x4141 013680 call mouse_32xx_init_param 
+0x4142 013681 setarg 0x0943 
+0x4143 013682 call twspi_write 
+0x4144 013683 branch mouse_32xx_init_param_1 
+:      013686 mouse_init_3610sensor_reset:
+0x4145 013687 fetcht 1 ,mem_sensor_reset_gpio 
+0x4146 013688 call gpio_out_active 
+0x4147 013689 call delay_10ms 
+0x4148 013690 fetcht 1 ,mem_sensor_reset_gpio 
+0x4149 013691 call gpio_out_inactive 
+0x414a 013692 branch delay_10ms 
+:      013694 mouse_init_p3610:
+0x414b 013695 jam p3610 ,mem_config_sensor_type 
+0x414c 013696 setarg 0xba41 
+0x414d 013697 call sensor_write 
+0x414e 013698 setarg 0x0d11 
+0x414f 013699 call sensor_write 
+0x4150 013700 setarg 0x041b 
+0x4151 013701 call sensor_write 
+0x4152 013702 setarg 0x041c 
+0x4153 013703 call sensor_write 
+0x4154 013704 setarg 0x0f1d 
+0x4155 013705 call sensor_write 
+0x4156 013706 setarg 0x0032 
+0x4157 013707 call sensor_write 
+0x4158 013708 setarg 0xb541 
+0x4159 013709 branch sensor_write 
+:      013713 mouse_set_sensor_reg:
+0x415a 013714 setarg 0xba41 
+0x415b 013715 call sensor_write 
+0x415c 013716 nop 4000 
+0x415d 013717 setarg 0xff7f 
+0x415e 013718 call sensor_write 
+0x415f 013719 copy rega ,pdata 
+0x4160 013720 call sensor_write 
+0x4161 013721 setarg 0x007f 
+0x4162 013722 call sensor_write 
+0x4163 013723 setarg 0xb541 
+0x4164 013724 branch sensor_write 
+:      013726 extsign:
+0x4165 013727 rtnbit0 7 
+0x4166 013728 arg 0xff00 ,temp 
+0x4167 013729 ior temp ,pdata 
+0x4168 013730 rtn 
+:      013732 extsign_bit3:
+0x4169 013733 rtnbit0 3 
+0x416a 013734 arg 0xf0 ,temp 
+0x416b 013735 ior temp ,pdata 
+0x416c 013736 rtn 
+:      013739 mouse_le:
+0x416d 013740 call le_fifo_check_nearly_full 
+0x416e 013741 nrtn blank 
+0x416f 013742 fetch 1 ,mem_le_connect_status_flag 
+0x4170 013743 and pdata ,0x03 ,pdata 
+0x4171 013744 rtnne 0x03 
+0x4172 013745 fetch mouse_flag_len ,mem_mouse_flag 
+0x4173 013746 bbit1 mosue_24g_pairing_flag ,mouse_le_send_empty_packet 
+0x4174 013747 bbit1 mouse_select_device_flag ,mouse_le_send_empty_packet 
+0x4175 013748 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet 
+0x4176 013749 call mouse_motion 
+0x4177 013750 nrtn user 
+0x4178 013751 branch mouse_fill_data_le 
+:      013753 mouse_le_send_empty_packet:
+0x4179 013754 setarg 0 
+0x417a 013755 store 7 ,mem_mouse_key 
+0x417b 013756 branch mouse_fill_data_le 
+:      013758 mouse_priority_bb_event:
+0x417c 013759 copy regc ,pdata 
+0x417d 013760 beq bt_evt_le_connected ,mouse_le_bb_event_connected 
+0x417e 013761 beq bt_evt_bb_connected ,mouse_stop_discovery 
+0x417f 013762 beq bt_evt_le_disconnected ,mouse_bb_disconnected 
+0x4180 013763 beq bt_evt_bb_disconnected ,mouse_bb_disconnected 
+0x4181 013764 beq bt_evt_setup_complete ,mouse_bt_event_setup_complete 
+0x4182 013765 beq bt_evt_button_long_pressed ,mouse_bb_event_discovery_btn 
+0x4183 013766 beq bt_evt_hid_handshake ,mouse_bt_hid_handshake 
+0x4184 013767 beq bt_evt_hid_connected ,mouse_bt_hid_connected 
+0x4185 013768 beq bt_evt_reconn_failed ,mouse_bb_event_reconn_failed 
+0x4186 013769 beq bt_evt_reconn_page_timeout ,mouse_bb_event_reconn_timeout 
+0x4187 013770 beq bt_evt_pincode_req ,mouse_bb_event_pincode 
+0x4188 013771 beq bt_evt_remote_unsniff ,app_start_auto_sniff 
+0x4189 013772 beq bt_evt_le_pairing_success ,mouse_le_pairing_success 
+0x418a 013773 beq bt_evt_le_start_enc ,mouse_le_ll_start_encryt 
+0x418b 013774 beq bt_evt_le_pairing_complete ,mouse_le_pairing_complete 
+0x418c 013775 beq bt_evt_virtual_cable_unplug ,mouse_irtual_cable_unplug 
+0x418d 013776 beq bt_evt_24g_pairing_complete ,mouse_24g_pairing_complete 
+0x418e 013777 beq bt_evt_24g_attempt_fail ,mouse_24g_attempt_fail 
+0x418f 013778 beq bt_evt_24g_attempt_success ,mouse_24g_attempt_success 
+0x4190 013779 rtn 
+:      013782 mouse_le_pairing_complete:
+0x4191 013783 branch app_ble_store_reconn_info 
+:      013785 mouse_24g_attempt_fail:
+0x4192 013786 jam 1 ,mem_mouse_24g_enter_lpm_enable 
+0x4193 013787 fetch 1 ,mem_reconn_times 
+0x4194 013788 nbranch mouse_polling_device ,blank 
+0x4195 013789 fetch 1 ,mem_device_flag 
+0x4196 013790 fetcht 1 ,mem_24g_device_number 
+0x4197 013791 isub temp ,null 
+0x4198 013792 branch app_enter_hibernate ,zero 
+0x4199 013793 rtn 
+:      013794 mouse_24g_attempt_success:
+0x419a 013795 jam 1 ,mem_mouse_24g_enter_lpm_enable 
+0x419b 013796 rtn 
+:      013797 mouse_24g_pairing_complete:
+0x419c 013798 jam 1 ,mem_mouse_24g_enter_lpm_enable 
+0x419d 013799 arg mosue_24g_pairing_flag ,queue 
+0x419e 013800 call mouse_disable_function_flag 
+0x419f 013801 setarg 0 
+0x41a0 013802 store 2 ,mem_24g_pairing_timer_count 
+0x41a1 013803 jam 0 ,mem_mouse_move_flag 
+0x41a2 013805 fetch 1 ,mem_config_sensor_type 
+0x41a3 013806 sub pdata ,p3610 ,null 
+0x41a4 013807 call mouse_read_sensor3610_data ,zero 
+0x41a5 013808 ncall mouse_read_sensor_common ,zero 
+0x41a6 013810 fetch 1 ,mouse_flag_len ,mem_mouse_flag 
+0x41a7 013811 bbit1 mouse_enable_flash ,mouse_store_flash_24g_address 
+0x41a8 013812 call mouse_set_24g_addr_eeprom 
+0x41a9 013813 branch iicd_write_protect_eep_data 
+:      013815 mouse_set_24g_addr_eeprom:
+0x41aa 013816 call g24_head_ptr2regc 
+0x41ab 013817 add regc ,offset_24g_addr ,rega 
+0x41ac 013818 arg mouse_g24_addr_eeprom_offect ,regb 
+0x41ad 013819 arg 4 ,temp 
+0x41ae 013820 rtn 
+:      013822 mouse_store_flash_24g_address:
+0x41af 013823 call g24_head_ptr2regc 
+0x41b0 013824 add regc ,offset_24g_addr ,regb 
+0x41b1 013825 ifetch 1 ,regb 
+0x41b2 013826 store 1 ,mem_mouse_24g_addr 
+0x41b3 013827 branch mouse_store_flash_device_info 
+:      013830 mouse_le_pairing_success:
+0x41b4 013831 arg ll_pairing_success_flag ,queue 
+0x41b5 013832 branch mouse_le_enable_connect_flag 
+:      013833 mouse_le_ll_start_encryt:
+0x41b6 013834 jam 2 ,mem_le_start_encrypt_timer 
+0x41b7 013835 arg ll_start_enc_flag ,queue 
+0x41b8 013836 branch mouse_le_enable_connect_flag 
+:      013839 mouse_le_enable_connect_flag:
+0x41b9 013840 fetch 1 ,mem_le_connect_status_flag 
+0x41ba 013841 qset1 pdata 
+0x41bb 013842 store 1 ,mem_le_connect_status_flag 
+0x41bc 013843 rtn 
+:      013845 mouse_le_disable_connect_flag:
+0x41bd 013846 fetch 1 ,mem_le_connect_status_flag 
+0x41be 013847 qset0 pdata 
+0x41bf 013848 store 1 ,mem_le_connect_status_flag 
+0x41c0 013849 rtn 
+:      013850 mouse_le_clean_connect_flag:
+0x41c1 013851 jam 0 ,mem_le_connect_status_flag 
+0x41c2 013852 rtn 
+:      013854 mouse_le_bb_event_connected:
+0x41c3 013855 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x41c4 013856 set0 app_disc_by_button ,pdata 
+0x41c5 013857 store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+0x41c6 013858 setarg 0 
+0x41c7 013859 store 2 ,mem_mouse_direct_timer 
+0x41c8 013860 call mouse_no_data_timer_init 
+0x41c9 013861 branch mouse_stop_discovery 
+:      013863 mouse_bb_event_pincode:
+0x41ca 013864 call pincode_reinit 
+0x41cb 013865 branch app_bt_set_pincode 
+:      013866 mouse_bb_event_reconn_timeout:
+:      013867 mouse_bb_event_reconn_failed:
+0x41cc 013868 fetch 1 ,mem_reconn_times 
+0x41cd 013869 nbranch mouse_polling_device ,blank 
+0x41ce 013870 fetch 2 ,mem_ui_state_map 
+0x41cf 013871 bbit1 ui_state_btn_down ,mouse_start_discovery 
+0x41d0 013872 fetch mouse_flag_len ,mem_mouse_flag 
+0x41d1 013873 bbit1 mouse_select_device_flag ,mouse_soft_reset 
+0x41d2 013874 bbit1 mouse_bt_discovery_button_down_flag ,mouse_start_discovery 
+0x41d3 013875 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 
+0x41d4 013876 branch app_bb_hibernate 
+:      013879 mouse_bt_hid_connected:
+0x41d5 013880 branch mouse_hid_connected 
+:      013882 mouse_bt_event_setup_complete:
+0x41d6 013883 rtn 
+:      013885 mouse_soft_reset:
+0x41d7 013886 call mouse_select_device_enable 
+0x41d8 013887 branch soft_reset_chip 
+:      013889 mouse_bb_disconnected:
+0x41d9 013890 bpatch patch1d_1 ,mem_patch1d 
+0x41da 013891 call mouse_bb_discon_clear_stack 
+0x41db 013892 fetch mouse_flag_len ,mem_mouse_flag 
+0x41dc 013893 bbit1 mouse_select_device_flag ,mouse_soft_reset 
+0x41dd 013894 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 
+0x41de 013895 fetch 1 ,mem_reconn_times 
+0x41df 013896 nbranch mouse_polling_device ,blank 
+0x41e0 013897 fetch app_disc_rsn_size ,mem_app_disconn_reason 
+0x41e1 013898 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn 
+0x41e2 013899 bbit1 app_disc_by_button ,app_disconn_reason_clear 
+0x41e3 013900 bbit1 app_disc_after_pairing ,mouse_event_light_state_pairing 
+0x41e4 013901 bbit1 app_disc_after_reconn ,mouse_event_light_state_hibernate 
+0x41e5 013902 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate 
+0x41e6 013903 branch mouse_start_discovery 
+:      013904 mouse_bb_discon_clear_stack:
+0x41e7 013905 setarg 0 
+0x41e8 013906 store 8 ,mem_wheel_tb_old_pinlevel 
+0x41e9 013907 istore 4 ,contw 
+0x41ea 013908 jam 0 ,mem_mouse_send_blank_timer 
+0x41eb 013909 jam 0 ,mem_mouse_move_flag 
+0x41ec 013910 jam app_handshake_null ,mem_app_handshake_flag 
+0x41ed 013911 jam 0 ,mem_ltk_exists 
+0x41ee 013912 rtn 
+:      013914 mouse_event_light_state_pairing:
+0x41ef 013915 bbit1 app_disc_after_handshake ,mouse_event_light_state_hibernate 
+0x41f0 013916 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate 
+0x41f1 013917 branch mouse_start_discovery 
+:      013918 mouse_event_light_state_hibernate:
+0x41f2 013919 fetch 2 ,mem_ui_state_map 
+0x41f3 013920 bbit1 ui_state_btn_down ,mouse_start_discovery 
+0x41f4 013921 branch app_bb_hibernate 
+:      013923 mouse4_0_event_bb_disconn:
+0x41f5 013924 call mouse_le_clean_connect_flag 
+0x41f6 013925 fetch app_disc_rsn_size ,mem_app_disconn_reason 
+0x41f7 013926 bbit1 app_disc_by_button ,app_disconn_reason_clear 
+0x41f8 013927 branch app_bb_hibernate 
+:      013929 mouse_bb_event_timer:
+0x41f9 013930 call mouse_adc_read 
+0x41fa 013931 call mouse_24g_delay_timer 
+0x41fb 013932 call mouse_ban_24g_pairing_timer 
+0x41fc 013933 call mouse_dpi_led_blink_delay_timer 
+0x41fd 013934 call mouse_statue_up_timer 
+0x41fe 013936 call mouse_statue_cheak_timer 
+0x41ff 013937 call mouse_select_device 
+0x4200 013938 call mouse_bt_discovery_cheak 
+0x4201 013939 call mouse_low_voltage_led_timer 
+0x4202 013940 call mouse_sensor_led_contrl_timer 
+0x4203 013941 call mouse_check_hid_handshake_timer 
+0x4204 013942 call mouse_check_discovery_timeout_timer 
+0x4205 013943 call mouse_check_direct_timeout_timer 
+0x4206 013944 call mouse_check_no_data_timeout_timer 
+0x4207 013945 call mouse_check_mouse_state_timer 
+0x4208 013946 branch mouse_le_enable_att_list_timer 
+:      013950 mouse_sensor_led_contrl_timer:
+0x4209 013951 fetch 1 ,mem_mouse_sensor_timer_count 
+0x420a 013952 rtn blank 
+0x420b 013953 increase -1 ,pdata 
+0x420c 013954 store 1 ,mem_mouse_sensor_timer_count 
+0x420d 013955 nrtn blank 
+0x420e 013956 branch mouse_sensor_led_contrl 
+:      013957 mouse_sensor_led_contrl:
+0x420f 013958 fetch 1 ,mem_sensor_led_style 
+0x4210 013959 rtneq ui_led_state_blink_stop 
+0x4211 013960 beq ui_led_state_blink_darking ,mouse_sensor_led_blink_state_darking 
+:      013961 mouse_sensor_led_blink_state_lighting:
+0x4212 013962 call mouse_sensor_led_on 
+0x4213 013963 jam ui_led_state_blink_darking ,mem_sensor_led_style 
+0x4214 013964 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count 
+0x4215 013965 rtn 
+:      013966 mouse_sensor_led_blink_state_darking:
+0x4216 013967 call mouse_sensor_led_off 
+0x4217 013968 jam ui_led_state_blink_lighting ,mem_sensor_led_style 
+0x4218 013969 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count 
+0x4219 013970 rtn 
+:      013972 mouse_sensor_led_blink_stop:
+:      013973 mouse_sensor_reset:
+0x421a 013974 setarg 0x8006 
+0x421b 013975 call twspi_write 
+0x421c 013976 nop 1000 
+0x421d 013977 jam 0x00 ,mem_mouse_sensor_timer_count 
+0x421e 013978 jam ui_led_state_blink_stop ,mem_sensor_led_style 
+0x421f 013979 branch mouse_init_p32xx_id2_judge 
+:      013981 mouse_p3212sensor_led_on:
+0x4220 013982 setarg 0xa006 
+0x4221 013983 call twspi_write 
+0x4222 013984 setarg 0xa005 
+0x4223 013985 branch twspi_write 
+:      013986 mouse_sensor_led_on_global:
+0x4224 013987 jam 0 ,mem_mouse_sensor_timer_count 
+:      013988 mouse_sensor_led_on:
+0x4225 013989 fetch 1 ,mem_config_sensor_type 
+0x4226 013990 beq p3212 ,mouse_p3212sensor_led_on 
+0x4227 013991 setarg 0x0106 
+0x4228 013992 call twspi_write 
+0x4229 013993 setarg 0xa105 
+0x422a 013994 branch twspi_write 
+:      013996 mouse_sensor_led_off_global:
+0x422b 013997 jam 0 ,mem_mouse_sensor_timer_count 
+:      013998 mouse_sensor_led_off:
+0x422c 013999 setarg 0x0906 
+0x422d 014000 branch twspi_write 
+:      014001 mouse_sensor_start_blink:
+0x422e 014002 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count 
+0x422f 014003 jam ui_led_state_blink_start ,mem_sensor_led_style 
+0x4230 014004 rtn 
+:      014006 mouse_check_hid_handshake_timer:
+0x4231 014007 arg mem_hid_handshake_timer_count ,regc 
+0x4232 014008 arg mouse_bt_hid_handshake ,regb 
+0x4233 014009 branch timer_single_step 
+:      014011 mouse_check_discovery_timeout_timer:
+0x4234 014012 arg mem_mouse_discovery_timer ,regc 
+0x4235 014013 arg mouse_check_discovery_timeout ,regb 
+0x4236 014014 branch timer_single_step_2b 
+:      014016 mouse_check_direct_timeout_timer:
+0x4237 014017 arg mem_mouse_direct_timer ,regc 
+0x4238 014018 arg mouse_check_direct_timeout ,regb 
+0x4239 014019 branch timer_single_step_2b 
+:      014021 mouse_check_no_data_timeout_timer:
+0x423a 014022 arg mem_mouse_no_data_timer ,regc 
+0x423b 014023 arg mouse_check_no_data_timeout ,regb 
+0x423c 014024 branch timer_single_step_2b 
+:      014026 mouse_check_mouse_state_timer:
+0x423d 014027 arg mem_mouse_statue_led_timer ,regc 
+0x423e 014028 arg mouse_statue_led_off ,regb 
+0x423f 014029 branch timer_single_step 
+:      014033 mouse_le_enable_att_list_timer:
+0x4240 014034 arg mem_le_start_encrypt_timer ,regc 
+0x4241 014035 arg mouse_le_enable_att_list ,regb 
+0x4242 014036 branch timer_single_step 
+:      014038 mouse_24g_delay_timer:
+0x4243 014039 arg mem_24g_enter_lpm_timer ,regc 
+0x4244 014040 arg mouse_24g_delay ,regb 
+0x4245 014041 branch timer_single_step 
+:      014043 mouse_ban_24g_pairing_timer:
+0x4246 014044 arg mem_24g_pairing_timer_count ,regc 
+0x4247 014045 arg mouse_ban_24g_pairing ,regb 
+0x4248 014046 branch timer_single_step_2b 
+:      014047 mouse_ban_24g_pairing:
+:      014048 mouse_24g_delay:
+0x4249 014049 rtn 
+:      014052 mosue_dpi_led_blink_init:
+0x424a 014053 fetch mouse_flag_len ,mem_mouse_flag 
+0x424b 014054 rtnbit0 mouse_enable_dpi_led_blink 
+0x424c 014055 jam 10 ,mem_mouse_dpi_led_delay_count 
+0x424d 014056 fetch 1 ,mem_dpi_led_gpio 
+0x424e 014057 store 1 ,mem_mouse_struct_led_gpio 
+0x424f 014058 rtn 
+:      014061 mouse_dpi_led_blink_delay_timer:
+0x4250 014062 arg mem_mouse_dpi_led_delay_count ,regc 
+0x4251 014063 arg mouse_dpi_led_setting ,regb 
+0x4252 014064 branch timer_single_step 
+:      014065 mouse_dpi_led_setting:
+0x4253 014066 fetch 1 ,mem_dpi_led_gpio 
+0x4254 014067 store 1 ,mem_mouse_struct_led_gpio 
+0x4255 014068 setarg led_dpi_blink 
+0x4256 014069 store 2 ,mem_mouse_on_time 
+0x4257 014070 store 2 ,mem_mouse_off_time 
+0x4258 014071 arg 0 ,rega 
+0x4259 014072 fetcht 1 ,mem_mouse_dpi 
+0x425a 014073 increase 1 ,temp 
+0x425b 014074 storet 1 ,mem_mouse_blink_count 
+0x425c 014075 jam ui_led_state_blink_start ,mem_mouse_led_type 
+0x425d 014076 rtn 
+:      014078 mouse_le_enable_att_list:
+0x425e 014079 fetch 1 ,mem_le_connect_status_flag 
+0x425f 014080 rtnbit1 ll_pairing_success_flag 
+0x4260 014081 jam bt_cmd_le_update_conn ,mem_fifo_temp 
+0x4261 014082 call ui_ipc_send_cmd 
+0x4262 014083 arg write_req_enable_flag ,queue 
+0x4263 014084 branch mouse_le_enable_connect_flag 
+:      014087 mouse_check_discovery_timeout:
+0x4264 014088 call mouse_stop_discovery 
+0x4265 014089 branch app_enter_hibernate 
+:      014091 mouse_check_direct_timeout:
+0x4266 014092 call app_ble_stop_direct_adv 
+0x4267 014093 fetch 1 ,mem_reconn_times 
+0x4268 014094 nbranch mouse_polling_device ,blank 
+0x4269 014095 branch app_enter_hibernate 
+:      014097 mouse_check_no_data_timeout:
+0x426a 014098 bmark1 mark_24g ,check_51cmd_hibernate 
+0x426b 014099 branch mouse_disconnect 
+:      014103 mouse_bb_event_discovery_btn:
+0x426c 014104 bpatch patch1d_2 ,mem_patch1d 
+0x426d 014105 jam 0 ,mem_mouse_send_blank_timer 
+0x426e 014106 call mouse_disconnect 
+0x426f 014107 call mouse_le_clean_connect_flag 
+0x4270 014108 branch mouse_start_discovery 
+:      014112 mouse3_0_check_reconn_target:
+0x4271 014113 fetch 6 ,mem_hci_plap 
+0x4272 014114 branch app_bt_start_discovery_short ,blank 
+0x4273 014115 call mouse_reconn_setting_led_gpio 
+0x4274 014116 jam 0x17 ,mem_connection_options 
+0x4275 014117 fetch 1 ,mem_ssp_enable 
+0x4276 014118 nbranch app_bt_start_reconnect ,blank 
+0x4277 014119 jam 0x04 ,mem_connection_options 
+0x4278 014120 branch app_bt_start_reconnect 
+:      014122 mouse4_0_check_reconn_target:
+0x4279 014123 fetch 2 ,mem_mouse_direct_timeout 
+0x427a 014124 store 2 ,mem_mouse_direct_timer 
+0x427b 014125 call mouse_reconn_setting_led_gpio 
+0x427c 014126 call app_lpm_mult_disable 
+0x427d 014127 branch check_51cmd_adv 
+:      014129 mouse_reconn_setting_led_gpio:
+0x427e 014130 setarg led_reconnect_blink 
+0x427f 014131 store 2 ,mem_mouse_on_time 
+0x4280 014132 store 2 ,mem_mouse_off_time 
+0x4281 014133 branch mouse_setting_led_gpio_comman 
+:      014135 mouse_discover_setting_led_gpio:
+0x4282 014136 setarg led_discovery_blink 
+0x4283 014137 store 2 ,mem_mouse_on_time 
+0x4284 014138 store 2 ,mem_mouse_off_time 
+:      014139 mouse_setting_led_gpio_comman:
+0x4285 014140 fetch 1 ,mem_device_flag 
+0x4286 014141 beq mode_bt_device1 ,mouse_device_led1 
+0x4287 014142 beq mode_bt_device2 ,mouse_device_led2 
+0x4288 014143 beq mode_bt_device3 ,mouse_device_led3 
+0x4289 014144 rtn 
+:      014145 mouse_device_led1:
+0x428a 014146 fetch 1 ,mem_config_device1_led_gpio 
+0x428b 014147 branch mouse_led_blink 
+:      014148 mouse_device_led2:
+0x428c 014149 fetch 1 ,mem_config_device2_led_gpio 
+0x428d 014150 branch mouse_led_blink 
+:      014151 mouse_device_led3:
+0x428e 014152 fetch 1 ,mem_config_device3_led_gpio 
+:      014153 mouse_led_blink:
+0x428f 014154 store 1 ,mem_temp 
+0x4290 014155 call mouse_devce_led_off 
+0x4291 014156 fetch 1 ,mem_temp 
+0x4292 014157 store 1 ,mem_mouse_struct_led_gpio 
+0x4293 014158 arg 0 ,rega 
+0x4294 014159 jam ui_led_state_blink_start ,mem_mouse_led_type 
+0x4295 014160 branch ui_led_blink_start_global 
+:      014162 mouse_led_off:
+0x4296 014163 arg 0 ,rega 
+0x4297 014164 branch ui_led_off_global 
+:      014165 mouse_led_on:
+0x4298 014166 arg 0 ,rega 
+0x4299 014167 branch ui_led_on_global 
+:      014169 mouse4_0_bb_event_discovery_btn:
+0x429a 014170 branch mouse_le_clean_connect_flag 
+:      014172 mouse_bt_hid_handshake:
+0x429b 014173 jam app_handshake_done ,mem_app_handshake_flag 
+0x429c 014174 call app_lpm_mult_enable 
+0x429d 014175 call app_bt_store_reconn_info 
+0x429e 014176 setarg 0 
+0x429f 014177 store 2 ,mem_discovery_timeout_timer_count 
+0x42a0 014178 store 1 ,mem_hid_handshake_timer_count 
+0x42a1 014179 branch app_bt_enter_sniff 
+:      014181 mouse_check_reconn_target:
+0x42a2 014182 call mouse_cheak_select_device_by_switch 
+0x42a3 014183 fetch 1 ,mem_device_flag 
+0x42a4 014184 fetcht 1 ,mem_24g_device_number 
+0x42a5 014185 isub temp ,null 
+0x42a6 014186 branch mouse_connect_24g_mode ,zero 
+0x42a7 014187 fetch 1 ,mem_xrecord_mode 
+0x42a8 014188 beq rec_3_mode ,mouse3_0_check_reconn_target 
+0x42a9 014189 beq rec_4_mode ,mouse4_0_check_reconn_target 
+0x42aa 014190 branch mouse_start_discovery 
+:      014191 mouse_connect_24g_mode:
+0x42ab 014192 call mouse_start_24g_mode 
+0x42ac 014193 rtnmark1 mark_24g 
+0x42ad 014194 fetch 1 ,mem_reconn_times 
+0x42ae 014195 nbranch mouse_polling_device ,blank 
+0x42af 014196 rtn 
+:      014198 mouse_start_discovery:
+0x42b0 014199 bpatch patch1d_3 ,mem_patch1d 
+0x42b1 014200 fetch 2 ,mem_ui_state_map 
+0x42b2 014201 bbit1 ui_state_ble_adv ,mouse_start_discovery_norandom 
+0x42b3 014202 fetch mouse_flag_len ,mem_mouse_flag 
+0x42b4 014203 bbit0 mouse_enable_ble_random_addre ,mouse_start_discovery_norandom 
+0x42b5 014204 random pdata 
+0x42b6 014205 store 1 ,mem_le_lap + 1 
+:      014206 mouse_start_discovery_norandom:
+0x42b7 014207 call app_lpm_mult_disable 
+0x42b8 014208 fetch 2 ,mem_discovery_timeout 
+0x42b9 014209 store 2 ,mem_mouse_discovery_timer 
+0x42ba 014210 jam 6 ,mem_connection_options 
+0x42bb 014211 setarg 0 
+0x42bc 014212 store 2 ,mem_mouse_no_data_timer 
+0x42bd 014213 store 2 ,mem_mouse_direct_timer 
+0x42be 014214 arg mouse_store_eeprom_flag ,queue 
+0x42bf 014215 call mouse_enable_function_flag 
+0x42c0 014216 call mouse_bt_discovery_button_down_disable 
+0x42c1 014217 fetch 1 ,mem_device_option 
+0x42c2 014218 isolate1 mode_4_mouse ,pdata 
+0x42c3 014219 call check_51cmd_adv ,true 
+0x42c4 014220 fetch 1 ,mem_device_option 
+0x42c5 014221 isolate1 mode_3_mouse ,pdata 
+0x42c6 014222 call check_51cmd_start_discovery ,true 
+0x42c7 014223 fetch mouse_flag_len ,mem_mouse_flag 
+0x42c8 014224 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_start_blink 
+0x42c9 014225 branch mouse_discover_setting_led_gpio 
+:      014227 mouse_stop_discovery:
+0x42ca 014228 bpatch patch1d_4 ,mem_patch1d 
+0x42cb 014229 fetch 1 ,mem_device_option 
+0x42cc 014230 isolate1 mode_4_mouse ,pdata 
+0x42cd 014231 call mouse_stop_le_adv ,true 
+0x42ce 014232 fetch 1 ,mem_device_option 
+0x42cf 014233 isolate1 mode_3_mouse ,pdata 
+0x42d0 014234 call mouse_stop_bt3_discovery ,true 
+0x42d1 014235 fetch mouse_flag_len ,mem_mouse_flag 
+0x42d2 014236 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_led_blink_stop 
+0x42d3 014237 branch mouse_devce_led_off 
+:      014238 mouse_stop_le_adv:
+0x42d4 014239 setarg 0 
+0x42d5 014240 store 2 ,mem_mouse_direct_timer 
+0x42d6 014241 branch check_51cmd_stop_adv 
+:      014242 mouse_stop_bt3_discovery:
+0x42d7 014243 setarg 0 
+0x42d8 014244 store 2 ,mem_mouse_discovery_timer 
+0x42d9 014245 branch check_51cmd_stop_discovery 
+:      014251 mouse_store_remote_bdaddr:
+0x42da 014252 fetch mouse_flag_len ,mem_mouse_flag 
+0x42db 014253 rtnbit0 mouse_store_eeprom_flag 
+0x42dc 014254 arg mouse_store_eeprom_flag ,queue 
+0x42dd 014255 call mouse_disable_function_flag 
+0x42de 014256 call mouse_check_device_addr 
+:      014257 mouse_unplug_clean_bdaddr:
+0x42df 014258 call mouse_before_store_reconn_info 
+0x42e0 014259 fetch mouse_flag_len ,mem_mouse_flag 
+0x42e1 014260 bbit1 mouse_enable_flash ,mouse_store_flash_device_info 
+0x42e2 014261 bbit1 mouse_enable_eeprom ,mouse_store_eeprom_device_info 
+0x42e3 014262 rtn 
+:      014263 mouse_store_eeprom_device_info:
+0x42e4 014264 arg 88 ,temp 
+0x42e5 014265 arg mem_device_flag ,rega 
+0x42e6 014266 arg mouse_info_eeprom_offect ,regb 
+0x42e7 014267 branch iicd_write_protect_eep_data 
+:      014269 mouse_check_device_addr:
+0x42e8 014270 fetch 1 ,mem_record_bt_mode 
+0x42e9 014271 beq rec_4_mode ,mouse_check_le_device_addr 
+0x42ea 014272 beq rec_3_mode ,mouse_check_bt_device_addr 
+0x42eb 014273 rtn 
+:      014274 mouse_check_le_device_addr:
+0x42ec 014275 store 1 ,mem_device_addr_temp 
+0x42ed 014276 fetch 6 ,mem_le_plap 
+0x42ee 014277 branch mouse_check_bt_device_addr_common 
+:      014278 mouse_check_bt_device_addr:
+0x42ef 014279 store 1 ,mem_device_addr_temp 
+0x42f0 014280 fetch 6 ,mem_plap 
+:      014281 mouse_check_bt_device_addr_common:
+0x42f1 014282 store 6 ,mem_device_addr_temp + 1 
+0x42f2 014283 fetch 7 ,mem_device_addr_temp 
+0x42f3 014284 arg mem_device1_type ,contr 
+0x42f4 014285 arg 3 ,loopcnt 
+:      014286 mouse_check_device_addr_end:
+0x42f5 014287 ifetcht 7 ,contr 
+0x42f6 014288 isub temp ,null 
+0x42f7 014289 branch mouse_clean_addr ,zero 
+0x42f8 014290 increase 22 ,contr 
+0x42f9 014291 loop mouse_check_device_addr_end 
+0x42fa 014292 rtn 
+:      014293 mouse_before_store_reconn_info:
+0x42fb 014294 arg mem_device1_type ,rega 
+0x42fc 014295 fetch 1 ,mem_device_flag 
+0x42fd 014296 increase -1 ,pdata 
+0x42fe 014297 mul32 pdata ,29 ,pdata 
+0x42ff 014298 iadd rega ,rega 
+0x4300 014299 fetch 1 ,mem_record_bt_mode 
+0x4301 014300 istore 1 ,rega 
+0x4302 014301 beq rec_4_mode ,mouse_store_le_device 
+0x4303 014302 beq rec_3_mode ,mouse_store_bt_device 
+0x4304 014303 rtn 
+:      014305 mouse_store_le_device:
+0x4305 014306 fetch 6 ,mem_le_plap 
+0x4306 014307 istore 6 ,contw 
+0x4307 014308 arg mem_le_ltk ,contr 
+0x4308 014309 call memcpy16 
+0x4309 014310 fetch 6 ,mem_le_lap 
+0x430a 014311 istore 6 ,contw 
+0x430b 014312 rtn 
+:      014313 mouse_store_bt_device:
+0x430c 014314 fetch 6 ,mem_plap 
+0x430d 014315 istore 6 ,contw 
+0x430e 014316 arg mem_link_key ,contr 
+0x430f 014317 branch memcpy16 
+:      014319 mouse_clean_addr:
+0x4310 014320 increase -6 ,contr 
+0x4311 014321 copy contr ,contw 
+0x4312 014322 fetcht 6 ,mem_device_addr_temp + 1 
+0x4313 014323 increase 3 ,temp 
+0x4314 014324 istoret 6 ,contw 
+0x4315 014325 rtn 
+:      014329 mouse_eeprom_load_recon_info:
+0x4316 014330 arg 88 ,temp 
+0x4317 014331 arg mem_device_flag ,rega 
+0x4318 014332 arg mouse_info_eeprom_offect ,regb 
+0x4319 014333 call iicd_read_eep_data 
+:      014334 mouse_select_reconn_device:
+0x431a 014335 arg mem_device1_type ,rega 
+0x431b 014336 fetch 1 ,mem_device_flag 
+0x431c 014337 fetcht 1 ,mem_24g_device_number 
+0x431d 014338 isub temp ,null 
+0x431e 014339 rtn zero 
+0x431f 014340 increase -1 ,pdata 
+0x4320 014341 mul32 pdata ,29 ,pdata 
+0x4321 014342 iadd rega ,rega 
+0x4322 014343 ifetch 1 ,rega 
+0x4323 014344 store 1 ,mem_xrecord_mode 
+0x4324 014345 beq rec_3_mode ,mouse_load_bt_device 
+0x4325 014346 beq rec_4_mode ,mouse_load_le_device 
+0x4326 014347 rtn 
+:      014349 mouse_load_bt_device:
+0x4327 014350 ifetch 6 ,contr 
+:      014351 mouse_load_bt_device_end:
+0x4328 014352 store 6 ,mem_hci_plap 
+0x4329 014353 arg mem_link_key ,contw 
+0x432a 014354 call memcpy16 
+0x432b 014355 branch check_link_key_load 
+:      014357 mouse_load_le_device:
+0x432c 014358 ifetch 6 ,contr 
+:      014359 mouse_load_le_device_end:
+0x432d 014360 store 6 ,mem_hci_plap 
+0x432e 014361 arg mem_le_ltk ,contw 
+0x432f 014362 call memcpy16 
+0x4330 014363 ifetch 6 ,contr 
+0x4331 014364 store 6 ,mem_le_lap 
+0x4332 014365 rtn 
+:      014368 mouse_select_device:
+0x4333 014369 fetch 1 ,mem_config_function_enable 
+0x4334 014370 bbit1 enable_select_device_by_gpio_button ,mouse_select_device_by_button 
+0x4335 014371 bbit1 enable_select_device_by_switch ,mouse_select_device_by_switch 
+0x4336 014372 branch mouse_select_device_by_combination_key 
+:      014374 mouse_select_device_by_combination_key:
+0x4337 014375 call mouse_check_key_gpio 
+0x4338 014376 beq mouse_rm_button ,mouse_select_device_commbination_key_down 
+:      014377 mouse_select_device_commbination_key_up:
+0x4339 014378 jam 30 ,mem_combination_select_device_count 
+0x433a 014379 fetch 1 ,mem_select_device_button_statue 
+0x433b 014380 rtneq dpi_button_state_up 
+0x433c 014381 jam dpi_button_state_up ,mem_select_device_button_statue 
+0x433d 014382 rtn 
+:      014384 mouse_select_device_commbination_key_down:
+0x433e 014385 call mouse_combination_select_device_timer 
+0x433f 014386 fetch 1 ,mem_select_device_button_statue 
+0x4340 014387 rtneq dpi_button_state_down 
+0x4341 014388 jam dpi_button_state_down ,mem_select_device_button_statue 
+0x4342 014389 branch mouse_select_device_enable 
+:      014391 mouse_combination_select_device_timer:
+0x4343 014392 fetch 1 ,mem_combination_select_device_count 
+0x4344 014393 rtn blank 
+0x4345 014394 pincrease -1 
+0x4346 014395 store 1 ,mem_combination_select_device_count 
+0x4347 014396 nrtn blank 
+0x4348 014397 branch mouse_ready_reconnection_by_button 
+:      014399 mouse_select_device_by_button:
+0x4349 014400 fetch 1 ,mem_config_select_device_button_gpio 
+0x434a 014401 rtneq gpio_disable 
+0x434b 014402 fetcht 1 ,mem_config_select_device_button_gpio 
+0x434c 014403 call gpio_get_bit 
+0x434d 014404 branch mouse_select_device_button_down ,true 
+:      014405 mouse_select_device_button_up:
+0x434e 014406 fetch 1 ,mem_select_device_button_statue 
+0x434f 014407 rtneq dpi_button_state_up 
+0x4350 014408 jam dpi_button_state_up ,mem_select_device_button_statue 
+0x4351 014409 fetch mouse_flag_len ,mem_mouse_flag 
+0x4352 014410 rtnbit1 mouse_long_bt_button_flag 
+0x4353 014411 branch mouse_ready_reconnection_by_button 
+:      014413 mouse_select_device_button_down:
+0x4354 014414 fetch 1 ,mem_select_device_button_statue 
+0x4355 014415 rtneq dpi_button_state_down 
+0x4356 014416 jam dpi_button_state_down ,mem_select_device_button_statue 
+0x4357 014417 arg mouse_long_bt_button_flag ,queue 
+0x4358 014418 branch mouse_disable_function_flag 
+:      014422 mouse_select_device_by_switch:
+0x4359 014423 fetch 1 ,mouse_flag_len ,mem_mouse_flag 
+0x435a 014424 rtnbit0 enable_select_device_by_switch 
+0x435b 014425 fetch 1 ,mem_device_flag 
+0x435c 014426 beq mode_bt_device1 ,mouse_select1_device 
+0x435d 014427 beq mode_24g_device ,mouse_select2_device 
+0x435e 014428 rtn 
+:      014429 mouse_cheak_select_device_by_switch:
+0x435f 014430 fetch 1 ,mouse_flag_len ,mem_mouse_flag 
+0x4360 014431 rtnbit0 enable_select_device_by_switch 
+0x4361 014432 fetcht 1 ,mem_config_select_device_button_gpio 
+0x4362 014433 call gpio_get_bit 
+0x4363 014434 branch mouse_cheak_select_24gdevice ,true 
+:      014435 mouse_select_btdevice:
+0x4364 014436 jam mode_bt_device1 ,mem_device_flag 
+0x4365 014437 rtn 
+:      014438 mouse_cheak_select_24gdevice:
+0x4366 014439 fetch 1 ,mem_24g_device_number 
+0x4367 014440 store 1 ,mem_device_flag 
+0x4368 014441 rtn 
+:      014442 mouse_select1_device:
+0x4369 014443 fetcht 1 ,mem_config_select_device_button_gpio 
+0x436a 014444 nbranch mouse_ready_reconnection_by_button ,true 
+0x436b 014445 rtn 
+:      014446 mouse_select2_device:
+0x436c 014447 fetcht 1 ,mem_config_select_device_button_gpio 
+0x436d 014448 call gpio_get_bit 
+0x436e 014449 branch mouse_select_device_button_down ,true 
+0x436f 014450 rtn 
+:      014455 mouse_ready_reconnection_by_button:
+0x4370 014456 fetcht 1 ,mem_device_flag 
+0x4371 014457 increase 1 ,temp 
+0x4372 014458 fetch 1 ,mem_device_number 
+0x4373 014459 isub temp ,null 
+0x4374 014460 ncall mouse_select_device_count_clean ,positive 
+0x4375 014461 storet 1 ,mem_device_flag 
+0x4376 014462 jam 0 ,mem_link_key_exists 
+0x4377 014463 call mouse_store_device_number2eeprom 
+0x4378 014464 call mouse_select_device_enable 
+0x4379 014466 branch mouse_set_reconnection 
+:      014468 mouse_store_device_number2eeprom:
+0x437a 014469 arg 1 ,temp 
+0x437b 014470 arg mem_device_flag ,rega 
+0x437c 014471 arg 0 ,regb 
+0x437d 014472 branch iicd_write_eep_data 
+:      014474 mouse_set_reconnection:
+0x437e 014475 call mouse_stop_bluetooth_mode 
+0x437f 014476 call mouse_select_device_disable 
+0x4380 014477 branch mouse_soft_reset 
+:      014478 mouse_stop_bluetooth_mode:
+0x4381 014479 fetch 2 ,mem_ui_state_map 
+0x4382 014480 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect 
+0x4383 014481 bbit1 ui_state_ble_connected ,app_ble_disconnect 
+0x4384 014482 bbit1 ui_state_bt_connected ,app_bt_disconnect 
+0x4385 014483 branch mouse_stop_discovery 
+:      014485 mouse_disconnect:
+0x4386 014486 bpatch patch1d_5 ,mem_patch1d 
+0x4387 014487 setarg 0 
+0x4388 014488 store 2 ,mem_mouse_no_data_timer 
+0x4389 014489 fetch 2 ,mem_ui_state_map 
+0x438a 014490 bbit1 ui_state_ble_connected ,app_ble_disconnect 
+0x438b 014491 fetch 2 ,mem_ui_state_map 
+0x438c 014492 bbit1 ui_state_bt_connected ,app_bt_disconnect 
+0x438d 014493 rtn 
+:      014495 mouse_irtual_cable_unplug:
+0x438e 014496 setarg 0x01 
+0x438f 014497 store 6 ,mem_plap 
+0x4390 014498 jam rec_3_mode ,mem_record_bt_mode 
+0x4391 014499 branch mouse_unplug_clean_bdaddr 
+:      014502 mouse_cancel_reconnect:
+0x4392 014503 call mouse_bt_cannel_reconn_enable 
+0x4393 014504 branch check_51cmd_bb_reconn_cancel 
+:      014506 mouse_bt_discovery_by_button:
+0x4394 014507 fetch 1 ,mem_config_bt_button_gpio 
+0x4395 014508 rtneq gpio_disable 
+0x4396 014509 fetcht 1 ,mem_config_bt_button_gpio 
+0x4397 014510 call gpio_get_bit 
+0x4398 014511 branch mouse_bt_discovery_button_down ,true 
+:      014512 mouse_bt_discovery_button_up:
+0x4399 014513 fetch 1 ,mem_ui_button_timeout 
+0x439a 014514 store 1 ,mem_combination_ui_button_count 
+0x439b 014515 fetch 1 ,mem_bt_discovey_button_statue 
+0x439c 014516 rtneq dpi_button_state_up 
+0x439d 014517 jam dpi_button_state_up ,mem_bt_discovey_button_statue 
+0x439e 014518 branch mouse_bt_discovery_button_down_disable 
+:      014519 mouse_bt_discovery_button_down:
+0x439f 014520 call mouse_bt_discovry_timer 
+0x43a0 014521 fetch 1 ,mem_bt_discovey_button_statue 
+0x43a1 014522 rtneq dpi_button_state_down 
+0x43a2 014523 jam dpi_button_state_down ,mem_bt_discovey_button_statue 
+0x43a3 014524 call check_51cmd_bb_reconn_cancel 
+0x43a4 014525 branch mouse_bt_discovery_button_down_enable 
+:      014528 mouse_bt_discovery_cheak:
+0x43a5 014529 fetch 1 ,mem_config_function_enable 
+0x43a6 014530 bbit1 enable_bt_button ,mouse_bt_discovery_by_button 
+:      014531 mouse_bt_discovery_commbination_key:
+0x43a7 014532 call mouse_check_key_gpio 
+0x43a8 014533 beq mouse_lmr_button ,mouse_bt_discovery_commbination_key_down 
+:      014534 mouse_bt_discovery_commbination_key_up:
+0x43a9 014535 fetch 1 ,mem_ui_button_timeout 
+0x43aa 014536 store 1 ,mem_combination_ui_button_count 
+0x43ab 014537 fetch 1 ,mem_bt_discovey_button_statue 
+0x43ac 014538 rtneq dpi_button_state_up 
+0x43ad 014539 jam dpi_button_state_up ,mem_bt_discovey_button_statue 
+0x43ae 014540 branch mouse_bt_discovery_button_down_disable 
+:      014543 mouse_bt_discovery_commbination_key_down:
+0x43af 014544 call mouse_bt_discovry_timer 
+0x43b0 014545 fetch 1 ,mem_bt_discovey_button_statue 
+0x43b1 014546 rtneq dpi_button_state_down 
+0x43b2 014547 jam dpi_button_state_down ,mem_bt_discovey_button_statue 
+0x43b3 014548 call check_51cmd_bb_reconn_cancel 
+0x43b4 014549 branch mouse_bt_discovery_button_down_enable 
+:      014551 mouse_bt_discovry_timer:
+0x43b5 014552 arg mem_combination_ui_button_count ,regc 
+0x43b6 014553 arg mouse_long_button_bt_discovry ,regb 
+0x43b7 014554 branch timer_single_step 
+:      014556 mouse_long_button_bt_discovry:
+0x43b8 014557 arg mouse_long_bt_button_flag ,queue 
+0x43b9 014558 call mouse_enable_function_flag 
+0x43ba 014559 call app_evt_button_long_pressed 
+0x43bb 014560 branch mouse_bb_event_discovery_btn 
+:      014563 mouse_cpi_enable:
+0x43bc 014564 arg mouse_cpi_flag ,queue 
+0x43bd 014565 branch mouse_enable_function_flag 
+:      014566 mouse_cpi_disable:
+0x43be 014567 arg mouse_cpi_flag ,queue 
+0x43bf 014568 branch mouse_disable_function_flag 
+:      014569 mouse_select_device_enable:
+0x43c0 014570 arg mouse_select_device_flag ,queue 
+0x43c1 014571 branch mouse_enable_function_flag 
+:      014572 mouse_select_device_disable:
+0x43c2 014573 arg mouse_select_device_flag ,queue 
+0x43c3 014574 branch mouse_disable_function_flag 
+:      014575 mouse_bt_cannel_reconn_enable:
+0x43c4 014576 arg mouse_bt_cannel_reconn_flag ,queue 
+0x43c5 014577 branch mouse_enable_function_flag 
+:      014578 mouse_bt_cannel_reconn_disable:
+0x43c6 014579 arg mouse_bt_cannel_reconn_flag ,queue 
+0x43c7 014580 branch mouse_disable_function_flag 
+:      014581 mouse_bt_discovery_button_down_enable:
+0x43c8 014582 arg mouse_bt_discovery_button_down_flag ,queue 
+0x43c9 014583 branch mouse_enable_function_flag 
+:      014584 mouse_bt_discovery_button_down_disable:
+0x43ca 014585 arg mouse_bt_discovery_button_down_flag ,queue 
+0x43cb 014586 branch mouse_disable_function_flag 
+:      014590 mouse_select_device_count_clean:
+0x43cc 014591 arg 1 ,temp 
+0x43cd 014592 rtn 
+:      014594 mouse_enable_function_flag:
+0x43ce 014595 fetch mouse_flag_len ,mem_mouse_flag 
+0x43cf 014596 qset1 pdata 
+0x43d0 014597 store mouse_flag_len ,mem_mouse_flag 
+0x43d1 014598 rtn 
+:      014600 mouse_disable_function_flag:
+0x43d2 014601 fetch mouse_flag_len ,mem_mouse_flag 
+0x43d3 014602 qset0 pdata 
+0x43d4 014603 store mouse_flag_len ,mem_mouse_flag 
+0x43d5 014604 rtn 
+:      014606 mouse_adc_read:
+0x43d6 014607 fetch mouse_flag_len ,mem_mouse_flag 
+0x43d7 014608 rtnbit0 mouse_enable_adc 
+0x43d8 014609 fetch 1 ,mem_adc_read_timer 
+0x43d9 014610 increase 1 ,pdata 
+0x43da 014611 store 1 ,mem_adc_read_timer 
+0x43db 014612 sub pdata ,10 ,null 
+0x43dc 014613 rtn positive 
+0x43dd 014614 jam 0 ,mem_adc_read_timer 
+0x43de 014615 call adc_set_mode 
+0x43df 014616 call vdd_calculate_by_mode 
+0x43e0 014617 store 2 ,mem_mouse_vdd_now_vol 
+0x43e1 014618 arg mem_mouse_vdd_calculate_set ,rega 
+0x43e2 014619 call adc_bat_percent_lowpower_out 
+0x43e3 014620 fetch 1 ,mem_adc_power_flag 
+0x43e4 014621 bbit1 1 ,mouse_power_down 
+0x43e5 014622 bbit0 0 ,mouse_adc_no_low_voltage 
+0x43e6 014623 branch mouse_adc_low_voltage 
+:      014624 mouse_adc_low_voltage:
+0x43e7 014625 arg mouse_low_voltage_flag ,queue 
+0x43e8 014626 branch mouse_enable_function_flag 
+:      014627 mouse_adc_no_low_voltage:
+0x43e9 014628 arg mouse_low_voltage_flag ,queue 
+0x43ea 014629 branch mouse_disable_function_flag 
+:      014631 mouse_low_voltage_led_timer:
+0x43eb 014632 fetch mouse_flag_len ,mem_mouse_flag 
+0x43ec 014633 rtnbit0 mouse_low_voltage_flag 
+0x43ed 014634 fetch 1 ,mem_config_low_voltage_alarm_gpio 
+0x43ee 014635 store 1 ,mem_mouse_struct_led_gpio 
+0x43ef 014636 fetch 1 ,mem_adc_low_volatage_led_timer_count 
+0x43f0 014637 pincrease 1 
+0x43f1 014638 store 1 ,mem_adc_low_volatage_led_timer_count 
+0x43f2 014639 sub pdata ,20 ,null 
+0x43f3 014640 ncall mouse_adc_low_volatage_led_timer_count_clean ,positive 
+0x43f4 014641 beq 2 ,mouse_low_voltage_led_on 
+0x43f5 014642 beq 4 ,mouse_low_voltage_led_off 
+0x43f6 014643 beq 6 ,mouse_low_voltage_led_on 
+0x43f7 014644 beq 8 ,mouse_low_voltage_led_off 
+0x43f8 014645 rtn 
+:      014646 mouse_adc_low_volatage_led_timer_count_clean:
+0x43f9 014647 jam 1 ,mem_adc_low_volatage_led_timer_count 
+0x43fa 014648 branch mouse_low_voltage_led_off 
+:      014649 mouse_low_voltage_led_on:
+0x43fb 014650 arg 0 ,rega 
+0x43fc 014651 jam ui_led_state_lighting ,mem_mouse_led_type 
+0x43fd 014652 branch ui_led_on_global 
+:      014653 mouse_low_voltage_led_off:
+0x43fe 014654 arg 0 ,rega 
+0x43ff 014655 jam ui_led_state_lighting ,mem_mouse_led_type 
+0x4400 014656 branch ui_led_off_global 
+:      014658 mouse_g24_package_data:
+0x4401 014659 call mouse_motion 
+0x4402 014660 nrtn user 
+0x4403 014661 arg 7 ,rega 
+0x4404 014662 arg mem_mouse_key ,regb 
+0x4405 014663 rtn 
+:      014665 mouse_g24_enter_lpm:
+0x4406 014666 fetch 1 ,mem_mouse_24g_enter_lpm_enable 
+0x4407 014667 rtn blank 
+0x4408 014669 fetcht 1 ,mem_dpi_button_gpio 
+0x4409 014670 call gpio_get_bit 
+0x440a 014671 call mouse_24g_dpi_delay_init ,true 
+0x440b 014672 fetch 1 ,mem_24g_enter_lpm_timer 
+0x440c 014673 nrtn blank 
+0x440d 014674 call mouse_check_key_gpio 
+0x440e 014675 nrtn blank 
+0x440f 014676 branch g24_lpm_long_sleep 
+:      014678 mouse_24g_dpi_delay_init:
+0x4410 014679 fetch 1 ,mem_dpi_button_gpio 
+0x4411 014680 rtneq ui_button_gpio_disable 
+0x4412 014681 jam 10 ,mem_24g_enter_lpm_timer 
+0x4413 014682 rtn 
+:      014685 mouse_load_flash_info_cheak:
+0x4414 014686 call mouse_load_flash_flag 
+0x4415 014687 fetch 2 ,mem_store_flag 
+0x4416 014688 arg eeprom_init_flag ,temp 
+0x4417 014689 isub temp ,null 
+0x4418 014690 branch mouse_load_flash_device_info ,zero 
+0x4419 014691 storet 2 ,mem_store_flag 
+0x441a 014692 call mouse_ble_init_address 
+0x441b 014693 branch mouse_store_flash_device_info 
+:      014694 mouse_ble_init_address:
+0x441c 014695 fetch 6 ,mem_le_lap 
+0x441d 014696 store 6 ,mem_device1_locall_addr 
+0x441e 014697 add pdata ,0x0100 ,pdata 
+0x441f 014698 store 6 ,mem_device2_locall_addr 
+0x4420 014699 add pdata ,0x0100 ,pdata 
+0x4421 014700 store 6 ,mem_device3_locall_addr 
+0x4422 014701 rtn 
+:      014704 mouse_load_flash_flag:
+0x4423 014705 setarg mem_store_flag 
+0x4424 014706 arg mem_mouse_information_start ,temp 
+0x4425 014707 isub temp ,temp 
+0x4426 014708 fetch 3 ,mem_flash_base 
+0x4427 014709 iadd temp ,pdata 
+0x4428 014710 arg 2 ,temp 
+0x4429 014711 arg mem_store_flag ,rega 
+0x442a 014712 branch spid_read_flash 
+:      014715 mouse_load_flash_device_info:
+0x442b 014716 setarg mem_mouse_information_end 
+0x442c 014717 arg mem_mouse_information_start ,temp 
+0x442d 014718 isub temp ,temp 
+0x442e 014719 fetch 3 ,mem_flash_base 
+0x442f 014720 arg mem_mouse_information_start ,rega 
+0x4430 014721 call spid_read_flash 
+0x4431 014722 call mouse_select_reconn_device 
+0x4432 014723 fetch 4 ,mem_mouse_24g_addr 
+0x4433 014724 call g24_head_ptr2regc 
+0x4434 014725 branch g24_store_mem_addr 
+:      014727 mouse_store_flash_device_info:
+0x4435 014728 setarg mem_mouse_information_end 
+0x4436 014729 arg mem_mouse_information_start ,temp 
+0x4437 014730 isub temp ,temp 
+0x4438 014731 arg mem_mouse_information_start ,rega 
+0x4439 014732 fetch 3 ,mem_flash_base 
+0x443a 014733 branch flash_write 
+:      014735 mouse_store_eerpom_dpi:
+0x443b 014736 arg 1 ,temp 
+0x443c 014737 arg mem_mouse_dpi ,rega 
+0x443d 014738 arg mouse_dpi_eeprom_offect ,regb 
+0x443e 014739 branch iicd_write_protect_eep_data 
+:      014741 mouse_load_eeprom_dpi:
+0x443f 014742 arg 1 ,temp 
+0x4440 014743 arg mem_mouse_dpi ,rega 
+0x4441 014744 arg mouse_dpi_eeprom_offect ,regb 
+0x4442 014745 branch iicd_read_eep_data 
+:      014747 mouse_statue_cheak_timer:
+0x4443 014748 rtnmark1 mark_24g 
+0x4444 014749 fetch mouse_flag_len ,mem_mouse_flag 
+0x4445 014750 rtnbit0 mouse_enable_statue_up 
+0x4446 014751 fetch 1 ,mem_mouse_1step_up_count 
+0x4447 014752 pincrease 1 
+0x4448 014753 and pdata ,0x07 ,pdata 
+0x4449 014754 store 1 ,mem_mouse_1step_up_count 
+0x444a 014755 rtnne 0x07 
+0x444b 014756 fetch 2 ,mem_ui_state_map 
+0x444c 014757 bbit1 ui_state_bt_connected ,mouse_check_statue_up 
+0x444d 014758 bbit1 ui_state_ble_connected ,mouse_check_statue_up 
+0x444e 014759 rtn 
+:      014764 mouse_check_statue_up:
+0x444f 014765 bpatch patch1d_6 ,mem_patch1d 
+0x4450 014766 fetch 1 ,mem_mouse_2step_up_count 
+0x4451 014767 nrtn blank 
+0x4452 014768 fetch mouse_flag_len ,mem_mouse_flag 
+0x4453 014769 rtnbit0 mouse_statue_up_flag 
+0x4454 014770 fetch 1 ,mem_sensor_squal_reg 
+0x4455 014771 call sensor_read 
+0x4456 014772 store 1 ,mem_sensor_iqc 
+0x4457 014773 sub pdata ,0x10 ,null 
+0x4458 014774 branch mouse_statue_up_timer_init ,positive 
+0x4459 014775 jam 0 ,mem_mouse_2step_up_count 
+0x445a 014776 rtn 
+:      014778 mouse_statue_up_timer_init:
+0x445b 014779 jam 30 ,mem_mouse_2step_up_count 
+0x445c 014780 rtn 
+:      014781 mouse_statue_up_timer:
+0x445d 014782 arg mem_mouse_2step_up_count ,regc 
+0x445e 014783 arg mouse_statue_up ,regb 
+0x445f 014784 branch timer_single_step 
+:      014786 mouse_statue_up:
+0x4460 014787 fetch 1 ,mem_sensor_squal_reg 
+0x4461 014788 call twspi_read 
+0x4462 014789 sub pdata ,0x10 ,null 
+0x4463 014790 nrtn positive 
+0x4464 014791 fetch mouse_flag_len ,mem_mouse_flag 
+0x4465 014792 rtnbit0 mouse_statue_up_flag 
+0x4466 014793 arg mouse_statue_up_flag ,queue 
+0x4467 014794 call mouse_disable_function_flag 
+0x4468 014795 jam 0 ,mem_lpm_mult 
+0x4469 014796 jam 30 ,mem_mouse_statue_led_timer 
+0x446a 014797 call mouse_devce_led_off 
+0x446b 014798 fetch mouse_flag_len ,mem_mouse_flag 
+0x446c 014799 bbit1 mouse_enable_statue_up_three_led ,mouse_three_device_statue_up 
+:      014800 mouse_two_device_statue_up:
+0x446d 014801 fetch 1 ,mem_device_flag 
+0x446e 014802 beq mode_bt_device1 ,mouse_device1_led_on 
+0x446f 014803 beq mode_bt_device2 ,mouse_device_blink_led_init 
+0x4470 014804 rtn 
+:      014805 mouse_three_device_statue_up:
+0x4471 014806 fetch 1 ,mem_device_flag 
+0x4472 014807 beq mode_bt_device1 ,mouse_device1_led_on 
+0x4473 014808 beq mode_bt_device2 ,mouse_device2_led_on 
+0x4474 014809 beq mode_bt_device3 ,mouse_device3_led_on 
+0x4475 014810 rtn 
+:      014812 mouse_device_blink_led_init:
+0x4476 014813 fetch 1 ,mem_config_device1_led_gpio 
+0x4477 014814 branch mouse_led_blink 
+:      014818 mouse_statue_led_off:
+0x4478 014819 jam 0x20 ,mem_lpm_mult 
+0x4479 014820 branch mouse_devce_led_off 
+:      014824 mouse_devce1_led_off:
+0x447a 014825 fetch 1 ,mem_config_device1_led_gpio 
+0x447b 014826 rtneq gpio_disable 
+0x447c 014827 store 1 ,mem_mouse_struct_led_gpio 
+0x447d 014828 branch mouse_led_off 
+:      014830 mouse_devce2_led_off:
+0x447e 014831 fetch 1 ,mem_config_device2_led_gpio 
+0x447f 014832 rtneq gpio_disable 
+0x4480 014833 store 1 ,mem_mouse_struct_led_gpio 
+0x4481 014834 branch mouse_led_off 
+:      014836 mouse_devce_led_off:
+0x4482 014837 call mouse_led_off 
+0x4483 014838 call mouse_devce1_led_off 
+0x4484 014839 call mouse_devce2_led_off 
+:      014840 mouse_devce3_led_off:
+0x4485 014841 fetch 1 ,mem_config_device3_led_gpio 
+0x4486 014842 rtneq gpio_disable 
+0x4487 014843 store 1 ,mem_mouse_struct_led_gpio 
+0x4488 014844 branch mouse_led_off 
+:      014846 mouse_device1_led_on:
+0x4489 014847 fetch 1 ,mem_config_device1_led_gpio 
+0x448a 014848 store 1 ,mem_mouse_struct_led_gpio 
+0x448b 014849 branch mouse_led_on 
+:      014850 mouse_device2_led_on:
+0x448c 014851 fetch 1 ,mem_config_device2_led_gpio 
+0x448d 014852 store 1 ,mem_mouse_struct_led_gpio 
+0x448e 014853 branch mouse_led_on 
+:      014854 mouse_device3_led_on:
+0x448f 014855 fetch 1 ,mem_config_device3_led_gpio 
+0x4490 014856 store 1 ,mem_mouse_struct_led_gpio 
+0x4491 014857 branch mouse_led_on 
+:      014861 mouse_polling_device:
+0x4492 014862 bpatch patch1d_7 ,mem_patch1d 
+0x4493 014863 fetch 1 ,mem_reconn_times 
+0x4494 014864 increase -1 ,pdata 
+0x4495 014865 store 1 ,mem_reconn_times 
+0x4496 014866 fetcht 1 ,mem_device_flag 
+0x4497 014867 increase 1 ,temp 
+0x4498 014868 fetch 1 ,mem_device_number 
+0x4499 014869 isub temp ,null 
+0x449a 014870 ncall mouse_select_device_count_clean ,positive 
+0x449b 014871 storet 1 ,mem_device_flag 
+0x449c 014872 jam 0 ,mem_link_key_exists 
+0x449d 014873 call mouse_store_device_number2eeprom 
+0x449e 014874 call mouse_before_store_reconn_info 
+0x449f 014875 branch mouse_check_reconn_target 
+:      014877 mouse_power_down:
+0x44a0 014878 call mouse_devce_led_off 
+0x44a1 014879 setarg 0 
+0x44a2 014880 store 8 ,mem_gpio_wakeup_low 
+0x44a3 014881 branch lpm_hibernate 
+:      014892 remote_car_init:
+0x44a4 014893 rtn wake 
+0x44a5 014894 hfetch 1 ,core_gpio_sel1 
+0x44a6 014895 and_into 0xf0 ,pdata 
+0x44a7 014896 hstore 1 ,core_gpio_sel1 
+0x44a8 014897 call keyscan_key_init 
+0x44a9 014898 setarg remote_car_le_before_hibernate 
+0x44aa 014899 store 2 ,mem_cb_before_hibernate 
+0x44ab 014901 setarg remote_car_process_lpm_before 
+0x44ac 014902 store 2 ,mem_cb_before_lpm 
+0x44ad 014904 setarg remote_car_scale_process_idle 
+0x44ae 014905 store 2 ,mem_cb_idle_process 
+0x44af 014907 setarg remote_car_scale_process_bb_event 
+0x44b0 014908 store 2 ,mem_cb_bb_event_process 
+0x44b1 014910 setarg app_get_lpm_wake_lock 
+0x44b2 014911 store 2 ,mem_cb_check_wakelock 
+0x44b3 014913 call g24_head_ptr2regc 
+0x44b4 014914 setarg remote_car_g24_package_data 
+0x44b5 014915 add regc ,offset_24g_cb_data ,contw 
+0x44b6 014916 istore 2 ,contw 
+0x44b7 014918 setarg remote_car_g24_enter_lpm 
+0x44b8 014919 add regc ,offset_24g_cb_lpm_prepare ,contw 
+0x44b9 014920 istore 2 ,contw 
+0x44ba 014922 setarg remote_car_process_lpm_before 
+0x44bb 014923 add regc ,offset_24g_cb_lpm_before ,contw 
+0x44bc 014924 istore 2 ,contw 
+0x44bd 014926 setarg remote_car_event_timer 
+0x44be 014927 store 2 ,mem_cb_event_timer 
+0x44bf 014929 setarg remote_car_power_off_signal 
+0x44c0 014930 store 2 ,mem_remote_car_power_off_cb 
+0x44c1 014932 setarg remote_car_soft_switch_power_on_signal 
+0x44c2 014933 store 2 ,mem_remote_car_power_standby_cb 
+0x44c3 014935 setarg remote_car_send_key_data 
+0x44c4 014936 store 2 ,mem_cb_remote_car_keyscan 
+0x44c5 014938 bpatch patch1e_0 ,mem_patch1e 
+0x44c6 014939 call remote_car_init_environment 
+0x44c7 014940 call queue_init 
+0x44c8 014941 jam 2 ,mem_lpm_mult 
+0x44c9 014942 fetch 1 ,mem_remote_car_config_soft_switch_enable 
+0x44ca 014943 store 1 ,mem_remote_car_hard_soft_switch 
+0x44cb 014944 beq hard_switch ,remote_car_hard_switch_power_on_signal 
+0x44cc 014945 fetch 1 ,mem_remote_car_config_soft_switch_gpio 
+0x44cd 014946 store 1 ,mem_ui_button_gpio 
+:      014947 remote_car_soft_switch_power_on_init:
+0x44ce 014948 call remote_car_ui_led_init 
+0x44cf 014949 call ui_button_init 
+0x44d0 014950 call ui_button_polling 
+0x44d1 014951 jam power_starting ,mem_remote_car_power_state 
+0x44d2 014952 fetch 2 ,mem_ui_state_map 
+0x44d3 014953 rtnbit1 ui_state_btn_down 
+0x44d4 014954 branch app_enter_hibernate 
+:      014958 remote_car_hard_switch_power_on_signal:
+0x44d5 014959 jam power_standby ,mem_remote_car_power_state 
+:      014960 remote_car_soft_switch_power_on_signal:
+0x44d6 014961 call remote_car_ui_led_init 
+0x44d7 014963 arg 0 ,rega 
+0x44d8 014964 call ui_led_blink_start_global 
+:      014965 remote_car_connect_24g_mode:
+0x44d9 014966 branch g24_auto_pair_start 
+:      014968 remote_car_power_off_signal:
+0x44da 014969 branch remote_car_ui_led_init 
+:      014971 remote_car_ui_led_init:
+0x44db 014972 bpatch patch1e_1 ,mem_patch1e 
+0x44dc 014973 fetch 1 ,mem_remote_car_config_connect_led_gpio 
+0x44dd 014974 bne invalid_pin_num ,remote_car_pairing_led_gpio_set 
+:      014975 remote_car_ui_led_init_1:
+0x44de 014976 fetcht 1 ,mem_remote_car_led_map 
+0x44df 014977 branch gpio_config_output 
+:      014978 remote_car_pairing_led_gpio_set:
+0x44e0 014979 store 1 ,mem_remote_car_led_map 
+0x44e1 014980 branch remote_car_ui_led_init_1 
+:      014983 remote_car_init_environment:
+0x44e2 014984 call g24_set_device_addr 
+0x44e3 014985 fetch 2 ,mem_remote_car_no_data_timeout 
+0x44e4 014986 store 2 ,mem_remote_car_no_data_timer 
+0x44e5 014987 branch remote_car_get_adc_default_data 
+:      014989 remote_car_le_before_hibernate:
+:      014994 remote_car_in_enter_hibernate:
+0x44e6 014995 call gpio_set_before_lpm_common 
+0x44e7 014996 call remote_car_process_lpm_before 
+0x44e8 014997 branch app_enter_hibernate 
+:      014999 remote_car_process_lpm_before:
+0x44e9 015000 branch keyscan_process_lpm_before 
+:      015002 remote_car_g24_enter_lpm:
+0x44ea 015003 fetch 1 ,mem_remote_car_24g_enter_lpm_enable 
+0x44eb 015004 rtn blank 
+0x44ec 015006 branch g24_lpm_long_sleep 
+:      015008 remote_car_process_auto_pair_exit:
+0x44ed 015009 rtn 
+:      015011 remote_car_key_scan_process:
+0x44ee 015012 branch keyscan_key_process 
+:      015014 remote_car_scale_process_idle:
+0x44ef 015015 call remote_car_rocker_process 
+0x44f0 015016 call remote_car_24g_status_process 
+0x44f1 015017 branch remote_car_key_scan_process 
+:      015019 remote_car_scale_process_bb_event:
+0x44f2 015020 copy regc ,pdata 
+0x44f3 015021 beq bt_evt_button_up ,app_event_button_up 
+0x44f4 015022 beq bt_evt_button_long_pressed ,app_button_long_pressed 
+0x44f5 015023 beq bt_evt_24g_pairing_complete ,remote_car_24g_pairing_complete 
+0x44f6 015024 beq bt_evt_24g_attempt_success ,remote_car_24g_attempt_success 
+0x44f7 015025 beq bt_evt_24g_attempt_fail ,remote_car_24g_attempt_fail 
+0x44f8 015026 rtn 
+:      015028 remote_car_24g_attempt_fail:
+0x44f9 015029 jam 1 ,mem_remote_car_24g_enter_lpm_enable 
+0x44fa 015030 rtn 
+:      015032 remote_car_24g_pairing_complete:
+0x44fb 015033 jam 1 ,mem_remote_car_24g_enter_lpm_enable 
+0x44fc 015034 jam work_paired ,mem_remote_car_24g_auto_work_step 
+0x44fd 015035 jam work_paired ,mem_remote_car_24g_pair_success_flag 
+0x44fe 015036 rtn 
+:      015038 remote_car_24g_attempt_success:
+0x44ff 015039 jam 1 ,mem_remote_car_24g_enter_lpm_enable 
+0x4500 015040 jam work_paired ,mem_remote_car_24g_auto_work_step 
+0x4501 015041 jam work_paired ,mem_remote_car_24g_pair_success_flag 
+0x4502 015042 rtn 
+:      015044 remote_car_24g_status_process:
+0x4503 015045 fetch 1 ,mem_remote_car_24g_auto_work_step 
+0x4504 015046 rtneq power_on 
+0x4505 015047 fetch 1 ,mem_remote_car_24g_status 
+0x4506 015048 rtneq work_paired 
+0x4507 015049 jam work_paired ,mem_remote_car_24g_status 
+:      015050 remote_car_scale_process_paired:
+0x4508 015051 arg 0 ,rega 
+0x4509 015052 branch ui_led_off_global 
+:      015053 remote_car_scale_process_shutdown:
+0x450a 015054 arg 0 ,rega 
+0x450b 015055 call ui_led_off_global 
+0x450c 015056 call remote_car_ui_led_init 
+0x450d 015057 branch app_enter_hibernate 
+:      015059 remote_car_event_timer:
+0x450e 015060 call app_power_timer 
+0x450f 015061 branch remote_car_no_data_timer 
+:      015063 remote_car_no_data_timer:
+0x4510 015064 fetch 1 ,mem_remote_car_config_timeout_shutdown_enable 
+0x4511 015065 rtn blank 
+0x4512 015066 arg mem_remote_car_no_data_timer ,regc 
+0x4513 015067 arg remote_car_scale_process_shutdown ,regb 
+0x4514 015068 branch timer_single_step_2b 
+:      015071 remote_car_get_adc_default_data:
+0x4515 015072 call remote_car_rocker_get_x 
+0x4516 015073 storet 2 ,mem_current_vdd_value_default_mid_x 
+0x4517 015074 call remote_car_rocker_get_y 
+0x4518 015075 storet 2 ,mem_current_vdd_value_default_mid_y 
+0x4519 015076 rtn 
+:      015077 remote_car_rocker_data_get:
+:      015078 remote_car_rocker_get_x:
+0x451a 015079 fetch 2 ,mem_current_vdd_value_default_mid_x 
+0x451b 015080 store 2 ,mem_current_vdd_value_default_mid_temp 
+0x451c 015081 call remote_car_get_adc_from_gpio6 
+0x451d 015082 call remote_car_rocker_get_value 
+0x451e 015083 store 1 ,mem_rocker_status 
+:      015084 remote_car_rocker_get_y:
+0x451f 015085 fetch 2 ,mem_current_vdd_value_default_mid_y 
+0x4520 015086 store 2 ,mem_current_vdd_value_default_mid_temp 
+0x4521 015087 call remote_car_get_adc_from_gpio7 
+0x4522 015088 call remote_car_rocker_get_value 
+0x4523 015089 store 1 ,mem_rocker_status + 1 
+0x4524 015090 rtn 
+:      015091 remote_car_rocker_get_value:
+0x4525 015092 fetch 2 ,mem_current_vdd_default_range 
+0x4526 015093 copy pdata ,rega 
+0x4527 015094 fetch 2 ,mem_current_vdd_value_default_mid_temp 
+0x4528 015095 call remote_car_rocker_mid_value_adjust 
+0x4529 015096 fetch 1 ,mem_rocker_work_status 
+0x452a 015097 nbranch remote_car_rocker_translate_key ,blank 
+0x452b 015098 nrtn positive 
+0x452c 015099 fetcht 2 ,mem_current_vdd_value_default_mid_temp 
+0x452d 015100 rtn 
+:      015101 remote_car_rocker_mid_value_adjust:
+0x452e 015102 isub temp ,pdata 
+0x452f 015103 branch remote_car_rocker_mid_adjust_positive ,positive 
+0x4530 015104 sub pdata ,0 ,pdata 
+0x4531 015105 jam 1 ,mem_rocker_negative_flag 
+0x4532 015106 isub rega ,null 
+0x4533 015107 rtn 
+:      015108 remote_car_rocker_mid_adjust_positive:
+0x4534 015109 jam 0 ,mem_rocker_negative_flag 
+0x4535 015110 isub rega ,null 
+0x4536 015111 rtn 
+:      015112 remote_car_rocker_translate_key:
+0x4537 015113 nbranch remote_car_rocker_middle_key ,positive 
+0x4538 015114 fetch 1 ,mem_rocker_negative_flag 
+0x4539 015115 nbranch remote_car_rocker_negative_key ,blank 
+:      015116 remote_car_rocker_positive_key:
+0x453a 015117 setarg rocker_positive_key 
+0x453b 015118 rtn 
+:      015119 remote_car_rocker_negative_key:
+0x453c 015120 setarg rocker_negative_key 
+0x453d 015121 rtn 
+:      015122 remote_car_rocker_middle_key:
+0x453e 015123 setarg rocker_middle_key 
+0x453f 015124 rtn 
+:      015125 remote_car_get_adc_from_gpio6:
+0x4540 015126 jam 0x33 ,mem_adc_channel 
+0x4541 015127 branch adc_set_mode 
+:      015128 remote_car_get_adc_from_gpio7:
+0x4542 015129 jam 0x34 ,mem_adc_channel 
+0x4543 015130 branch adc_set_mode 
+:      015133 remote_car_rocker_process:
+0x4544 015134 fetch 1 ,mem_remote_car_config_check_way 
+0x4545 015135 rtnne car_remote_check_rocker 
+:      015136 remote_car_read_rocker_check_start:
+0x4546 015137 bpatch patch1e_2 ,mem_patch1e 
+0x4547 015138 jam 1 ,mem_rocker_work_status 
+0x4548 015139 call remote_car_rocker_data_get 
+0x4549 015140 fetch 2 ,mem_rocker_status 
+0x454a 015141 fetcht 2 ,mem_rocker_last_status 
+0x454b 015142 isub temp ,null 
+0x454c 015143 rtn zero 
+0x454d 015144 store 2 ,mem_rocker_last_status 
+0x454e 015145 call remote_car_rocker_x_to_key 
+0x454f 015146 branch remote_car_rocker_y_to_key 
+:      015148 remote_car_rocker_x_to_key:
+0x4550 015149 fetch 1 ,mem_rocker_x_status 
+0x4551 015150 branch rocker_to_queue_set_0 ,blank 
+0x4552 015151 increase -1 ,pdata 
+0x4553 015152 branch remote_car_rocker_to_key 
+:      015153 remote_car_rocker_y_to_key:
+0x4554 015154 fetch 1 ,mem_rocker_y_status 
+0x4555 015155 branch rocker_to_queue_set_2 ,blank 
+0x4556 015156 increase 1 ,pdata 
+:      015157 remote_car_rocker_to_key:
+0x4557 015158 copy pdata ,queue 
+0x4558 015159 arg 1 ,rega 
+0x4559 015160 branch remote_car_send_key_data 
+:      015162 rocker_to_queue_set_0:
+0x455a 015163 arg 0 ,queue 
+0x455b 015164 arg 0 ,rega 
+0x455c 015165 branch remote_car_send_key_data 
+:      015166 rocker_to_queue_set_2:
+0x455d 015167 arg 2 ,queue 
+0x455e 015168 arg 0 ,rega 
+0x455f 015169 branch remote_car_send_key_data 
+:      015171 remote_car_send_key_data:
+0x4560 015172 copy rega ,pdata 
+0x4561 015173 store 1 ,mem_remote_key_status 
+0x4562 015174 fetch 1 ,mem_remote_car_24g_auto_work_step 
+0x4563 015175 beq power_on ,g24_auto_pair_start 
+0x4564 015176 fetch 2 ,mem_remote_car_no_data_timeout 
+0x4565 015177 store 2 ,mem_remote_car_no_data_timer 
+0x4566 015178 fetch 1 ,mem_remote_key_status 
+0x4567 015179 branch remote_car_key_is_release ,blank 
+:      015180 remote_car_key_is_press:
+0x4568 015181 bpatch patch1e_3 ,mem_patch1e 
+0x4569 015182 arg 0 ,rega 
+0x456a 015183 call ui_led_on_global 
+:      015184 remote_car_attack_key_press:
+0x456b 015185 copy queue ,pdata 
+0x456c 015186 beq 4 ,remote_car_send_attack_key4_press 
+0x456d 015187 beq 5 ,remote_car_send_attack_key5_press 
+0x456e 015188 beq 6 ,remote_car_send_fire_key6_press 
+:      015191 remote_car_motor_key_press:
+0x456f 015192 call remote_car_device_layout_select 
+0x4570 015193 beq control_f_b_ten ,remote_car_single_motor_key_is_press 
+0x4571 015194 beq control_l_r_ten ,remote_car_double_motor_key_press 
+0x4572 015195 beq control_l_r_lr ,remote_car_single_motor_key_is_press 
+0x4573 015196 rtn 
+:      015198 remote_car_single_motor_key_is_press:
+0x4574 015199 copy queue ,pdata 
+0x4575 015200 beq 0 ,remote_car_send_motor1_key0_press 
+0x4576 015201 beq 1 ,remote_car_send_motor1_key1_press 
+0x4577 015202 beq 2 ,remote_car_send_motor2_key2_press 
+0x4578 015203 beq 3 ,remote_car_send_motor2_key3_press 
+0x4579 015204 rtn 
+:      015206 remote_car_double_motor_key_press:
+0x457a 015207 copy queue ,pdata 
+0x457b 015208 beq 0 ,remote_car_send_double_motor_key0_press 
+0x457c 015209 beq 1 ,remote_car_send_double_motor_key1_press 
+0x457d 015210 beq 2 ,remote_car_send_double_motor_key2_press 
+0x457e 015211 beq 3 ,remote_car_send_double_motor_key3_press 
+0x457f 015212 rtn 
+:      015214 remote_car_key_is_release:
+0x4580 015215 bpatch patch1e_4 ,mem_patch1e 
+0x4581 015216 arg 0 ,rega 
+0x4582 015217 call ui_led_off_global 
+:      015218 remote_car_attack_key_release:
+0x4583 015219 copy queue ,pdata 
+0x4584 015220 beq 4 ,remote_car_send_attack_key4_rel 
+0x4585 015221 beq 5 ,remote_car_send_attack_key5_rel 
+:      015224 remote_car_motor_key_release:
+0x4586 015225 call remote_car_device_layout_select 
+0x4587 015226 beq control_f_b_ten ,remote_car_single_motor_key_rel 
+0x4588 015227 beq control_l_r_ten ,remote_car_double_motor_key_rel 
+0x4589 015228 beq control_l_r_lr ,remote_car_single_motor_key_rel 
+0x458a 015229 rtn 
+:      015231 remote_car_device_layout_select:
+0x458b 015232 fetch 1 ,mem_remote_car_config_layout 
+0x458c 015233 fetcht 1 ,mem_remote_car_config_key_map 
+0x458d 015234 ior temp ,pdata 
+0x458e 015235 rtn 
+:      015238 remote_car_send_motor1_key0_press:
+0x458f 015239 jam motor_positive ,mem_remote_car_24g_motor1_payload 
+0x4590 015240 branch remote_car_send_key 
+:      015241 remote_car_send_motor1_key1_press:
+0x4591 015242 jam motor_negative ,mem_remote_car_24g_motor1_payload 
+0x4592 015243 branch remote_car_send_key 
+:      015244 remote_car_send_motor2_key2_press:
+0x4593 015245 jam motor_positive ,mem_remote_car_24g_motor2_payload 
+0x4594 015246 branch remote_car_send_key 
+:      015247 remote_car_send_motor2_key3_press:
+0x4595 015248 jam motor_negative ,mem_remote_car_24g_motor2_payload 
+0x4596 015249 branch remote_car_send_key 
+:      015252 remote_car_send_double_motor_key0_press:
+0x4597 015253 jam motor_positive ,mem_remote_car_24g_motor1_payload 
+0x4598 015254 jam motor_positive ,mem_remote_car_24g_motor2_payload 
+0x4599 015255 branch remote_car_send_key 
+:      015256 remote_car_send_double_motor_key1_press:
+0x459a 015257 jam motor_negative ,mem_remote_car_24g_motor1_payload 
+0x459b 015258 jam motor_negative ,mem_remote_car_24g_motor2_payload 
+0x459c 015259 branch remote_car_send_key 
+:      015260 remote_car_send_double_motor_key2_press:
+0x459d 015261 jam motor_negative ,mem_remote_car_24g_motor1_payload 
+0x459e 015262 jam motor_positive ,mem_remote_car_24g_motor2_payload 
+0x459f 015263 branch remote_car_send_key 
+:      015264 remote_car_send_double_motor_key3_press:
+0x45a0 015265 jam motor_positive ,mem_remote_car_24g_motor1_payload 
+0x45a1 015266 jam motor_negative ,mem_remote_car_24g_motor2_payload 
+0x45a2 015267 branch remote_car_send_key 
+:      015270 remote_car_send_attack_key4_press:
+0x45a3 015271 jam motor_positive ,mem_remote_car_24g_motor3_payload 
+0x45a4 015272 branch remote_car_send_key 
+:      015273 remote_car_send_attack_key5_press:
+0x45a5 015274 jam motor_negative ,mem_remote_car_24g_motor3_payload 
+0x45a6 015275 branch remote_car_send_key 
+:      015277 remote_car_send_fire_key6_press:
+0x45a7 015278 jam 0x01 ,mem_remote_car_24g_fire_send_payload 
+0x45a8 015279 branch remote_car_send_attack 
+:      015281 remote_car_single_motor_key_rel:
+0x45a9 015282 copy queue ,pdata 
+0x45aa 015283 beq 0 ,remote_car_send_motor1_key0_rel 
+0x45ab 015284 beq 1 ,remote_car_send_motor1_key1_rel 
+0x45ac 015285 beq 2 ,remote_car_send_motor2_key2_rel 
+0x45ad 015286 beq 3 ,remote_car_send_motor2_key3_rel 
+0x45ae 015287 rtn 
+:      015289 remote_car_double_motor_key_rel:
+0x45af 015290 copy queue ,pdata 
+0x45b0 015291 beq 0 ,remote_car_send_double_motor_key0_rel 
+0x45b1 015292 beq 1 ,remote_car_send_double_motor_key1_rel 
+0x45b2 015293 beq 2 ,remote_car_send_double_motor_key2_rel 
+0x45b3 015294 beq 3 ,remote_car_send_double_motor_key3_rel 
+0x45b4 015295 rtn 
+:      015297 remote_car_send_motor1_key0_rel:
+:      015298 remote_car_send_motor1_key1_rel:
+0x45b5 015299 jam motor_stop ,mem_remote_car_24g_motor1_payload 
+0x45b6 015300 branch remote_car_send_key 
+:      015301 remote_car_send_motor2_key2_rel:
+:      015302 remote_car_send_motor2_key3_rel:
+0x45b7 015303 jam motor_stop ,mem_remote_car_24g_motor2_payload 
+0x45b8 015304 branch remote_car_send_key 
+:      015306 remote_car_send_double_motor_key0_rel:
+:      015307 remote_car_send_double_motor_key1_rel:
+:      015308 remote_car_send_double_motor_key2_rel:
+:      015309 remote_car_send_double_motor_key3_rel:
+0x45b9 015310 jam motor_stop ,mem_remote_car_24g_motor1_payload 
+0x45ba 015311 jam motor_stop ,mem_remote_car_24g_motor2_payload 
+0x45bb 015312 branch remote_car_send_key 
+:      015314 remote_car_send_attack_key4_rel:
+:      015315 remote_car_send_attack_key5_rel:
+0x45bc 015316 jam motor_stop ,mem_remote_car_24g_motor3_payload 
+0x45bd 015317 branch remote_car_send_key 
+:      015319 remote_car_send_key:
+0x45be 015320 arg mem_remote_car_24g_motor_packet ,rega 
+0x45bf 015321 branch queue_push 
+:      015322 remote_car_send_attack:
+0x45c0 015323 arg mem_remote_car_24g_fire_packet ,rega 
+0x45c1 015324 branch queue_push 
+:      015326 remote_car_g24_package_data:
+0x45c2 015327 fetch 1 ,mem_remote_car_24g_pair_success_flag 
+0x45c3 015328 beq work_paired ,remote_car_g24_send_empty 
+0x45c4 015329 arg mem_remote_car_24g_tx_temp ,rega 
+0x45c5 015330 call queue_pop 
+0x45c6 015331 nbranch remote_car_moto_data ,user 
+:      015332 remote_car_g24_package_data_continue:
+0x45c7 015333 arg mem_remote_car_24g_tx_temp ,contr 
+0x45c8 015334 ifetch 1 ,contr 
+0x45c9 015335 copy pdata ,rega 
+0x45ca 015336 arg mem_remote_car_24g_tx_temp + 1 ,regb 
+0x45cb 015339 rtn 
+:      015341 remote_car_g24_send_empty:
+0x45cc 015342 jam 0 ,mem_remote_car_24g_pair_success_flag 
+0x45cd 015343 enable user 
+0x45ce 015344 arg 1 ,rega 
+0x45cf 015345 arg mem_remote_car_empty_packet ,regb 
+0x45d0 015346 rtn 
+:      015348 remote_car_moto_data:
+0x45d1 015349 fetch 1 ,mem_remote_car_24g_tx_temp + 3 
+0x45d2 015350 beq car_cmd_l_r_motor_control ,remote_car_moto_data_next 
+0x45d3 015351 beq car_cmd_f_b_motor_control ,remote_car_moto_data_next 
+0x45d4 015352 rtn 
+:      015353 remote_car_moto_data_next:
+0x45d5 015354 fetch 1 ,mem_remote_car_24g_tx_temp + 6 
+0x45d6 015355 nbranch remote_car_moto_data_enable_user ,blank 
+0x45d7 015356 fetch 1 ,mem_remote_car_24g_tx_temp + 8 
+0x45d8 015357 nbranch remote_car_moto_data_enable_user ,blank 
+0x45d9 015358 fetch 1 ,mem_remote_car_24g_tx_temp + 10 
+0x45da 015359 nbranch remote_car_moto_data_enable_user ,blank 
+0x45db 015360 rtn 
+:      015361 remote_car_moto_data_enable_user:
+0x45dc 015362 enable user 
+0x45dd 015363 branch remote_car_g24_package_data_continue 
+:      015371 shutter_init:
+0x45de 015372 rtn wake 
+0x45df 015373 hfetch 1 ,core_gpio_sel1 
+0x45e0 015374 and_into 0xfc ,pdata 
+0x45e1 015375 hstore 1 ,core_gpio_sel1 
+0x45e2 015376 setarg shutter_le_before_hibernate 
+0x45e3 015377 store 2 ,mem_cb_before_hibernate 
+0x45e4 015379 setarg shutter_process_lpm_before 
+0x45e5 015380 store 2 ,mem_cb_before_lpm 
+0x45e6 015382 setarg app_enter_hibernate 
+0x45e7 015383 store 2 ,mem_cb_discovry_timeout 
+0x45e8 015385 setarg shutter_process_idle 
+0x45e9 015386 store 2 ,mem_cb_idle_process 
+0x45ea 015388 setarg shutter_process_bb_event 
+0x45eb 015389 store 2 ,mem_cb_bb_event_process 
+0x45ec 015391 setarg shutter_le_scale_lpm_lock 
+0x45ed 015392 store 2 ,mem_cb_check_wakelock 
+0x45ee 015394 setarg ble_shutter_receive_data 
+0x45ef 015395 store 2 ,mem_cb_att_write 
+0x45f0 015397 setarg shutter_le_bb_event_timer 
+0x45f1 015398 store 2 ,mem_cb_event_timer 
+0x45f2 015400 setarg shutter_key_change 
+0x45f3 015401 store 2 ,mem_cb_shutter_keycan 
+0x45f4 015403 setarg shutter_soft_swtich_power_on 
+0x45f5 015404 store 2 ,mem_shutter_soft_switch_poweron_callback_function 
+0x45f6 015405 setarg shutter_soft_swtich_power_off 
+0x45f7 015406 store 2 ,mem_shutter_soft_switch_poweroff_callback_function 
+0x45f8 015408 call le_modified_name 
+0x45f9 015409 call shutter_load_bluetooth_config_by_user_config 
+0x45fa 015410 call shutter_init_bluetooth_config 
+0x45fb 015411 call shutter_init_param 
+0x45fc 015412 call keyscan_key_init 
+0x45fd 015413 call shutter_load_buffer_config_form_datarom 
+0x45fe 015414 call queue_init 
+0x45ff 015415 call ui_led_init_global 
+0x4600 015416 call shutter_load_bluetooth_config 
+0x4601 015417 call shutter_load_bluetooth_config_by_eeprom 
+0x4602 015419 bpatch patch1e_5 ,mem_patch1e 
+0x4603 015420 call classic_shutter_load_reconn_info 
+0x4604 015421 fetch 1 ,mem_shutter_hard_soft_switch_case 
+0x4605 015422 beq hard_switch ,shutter_hart_swtich_power_on 
+0x4606 015423 fetch 1 ,mem_shutter_soft_switch_button_gpio 
+0x4607 015424 store 1 ,mem_ui_button_gpio 
+0x4608 015425 branch ui_soft_swtich_init 
+:      015428 shutter_hart_swtich_power_on:
+0x4609 015429 jam ui_button_gpio_disable ,mem_ui_button_gpio 
+0x460a 015430 jam ss_state_power_on ,mem_shutter_soft_switch_power_state 
+0x460b 015431 branch shutter_start_reconnect 
+:      015435 shutter_le_scale_lpm_lock:
+0x460c 015436 fetch 1 ,mem_shutter_soft_switch_power_state 
+0x460d 015437 beq ss_state_power_off ,app_get_lpm_wake_lock 
+0x460e 015438 call l2cap_malloc_get_full_map 
+0x460f 015439 fetch 1 ,mem_used_map 
+0x4610 015440 nbranch app_get_lpm_wake_lock ,blank 
+0x4611 015441 branch app_put_lpm_wake_lock 
+:      015445 shutter_process_bb_event:
+0x4612 015446 copy regc ,pdata 
+0x4613 015448 beq bt_evt_bb_connected ,classic_shutter_process_baseband_connect 
+0x4614 015449 beq bt_evt_bb_disconnected ,classic_shutter_process_baseband_disconnect 
+0x4615 015450 beq bt_evt_reconn_failed ,classic_shutter_process_reconnect_failed 
+0x4616 015451 beq bt_evt_setup_complete ,classic_shutter_process_setup_complete 
+0x4617 015452 beq bt_evt_hid_connected ,classic_shutter_process_hid_connect 
+0x4618 015453 beq bt_evt_hid_disconnected ,classic_shutter_process_hid_disconnect 
+0x4619 015454 beq bt_evt_hid_handshake ,classic_shutter_process_hid_handshake 
+0x461a 015455 beq bt_evt_reconn_page_timeout ,classic_shutter_process_reconnect_page_timeout 
+0x461b 015456 beq bt_evt_virtual_cable_unplug ,classic_shutter_process_virtual_cable_unplug 
+0x461c 015457 beq bt_evt_remote_unsniff ,classic_shutter_process_remote_unsniff 
+0x461d 015458 beq bt_evt_store_nvram ,classic_shutter_process_store_reconnect_information 
+0x461e 015460 beq bt_evt_le_connected ,ble_shutter_process_baseband_connect 
+0x461f 015461 beq bt_evt_le_disconnected ,ble_shutter_process_baseband_disconnect 
+0x4620 015462 beq bt_evt_le_reconnect_complete ,ble_shutter_process_reconnect_complete 
+0x4621 015463 beq bt_evt_le_parse_conn_papa_update_rsp ,ble_shutter_process_parse_connect_parameter_update_response 
+0x4622 015465 beq bt_evt_button_long_pressed ,shutter_process_soft_swtich_button_long_press 
+0x4623 015466 beq bt_evt_button_down ,shutter_process_soft_swtich_button_down 
+0x4624 015467 beq bt_evt_button_up ,shutter_process_soft_swtich_button_up 
+0x4625 015468 rtn 
+:      015473 classic_shutter_process_baseband_connect:
+0x4626 015474 jam 0 ,mem_classic_shutter_hid_disconn_count 
+0x4627 015475 jam 0 ,mem_classic_shutter_cable_unplug_conut 
+0x4628 015476 rtn 
+:      015479 classic_shutter_process_baseband_disconnect:
+0x4629 015480 call classic_shutter_disconnect_clear_flag 
+0x462a 015481 branch classic_shutter_process_reconnect_failed 
+:      015483 classic_shutter_disconnect_clear_flag:
+0x462b 015484 jam app_handshake_null ,mem_app_handshake_flag 
+0x462c 015485 jam 0 ,mem_hid_handshake_timer_count 
+0x462d 015486 jam 0 ,mem_unsniff2sniff_timer_count 
+0x462e 015487 jam 0 ,mem_classic_shutter_cable_unplug_conut 
+0x462f 015488 jam 0 ,mem_classic_shutter_hid_disconn_count 
+0x4630 015489 branch queue_init 
+:      015492 classic_shutter_process_reconnect_failed:
+0x4631 015493 call app_disconn_reason_clear 
+0x4632 015494 branch shutter_start_bluetooth_discovery 
+:      015497 classic_shutter_process_setup_complete:
+0x4633 015498 call shutter_stop_bluetooth_discovery 
+0x4634 015499 branch app_led_stop_blink 
+:      015502 classic_shutter_process_hid_connect:
+0x4635 015503 setarg hid_handshake_timeout 
+0x4636 015504 store 1 ,mem_hid_handshake_timer_count 
+0x4637 015505 rtn 
+:      015508 classic_shutter_process_hid_disconnect:
+0x4638 015509 jam 0 ,mem_classic_shutter_cable_unplug_conut 
+0x4639 015510 setarg flag_shutter_hid_disconn_timeout 
+0x463a 015511 store 1 ,mem_classic_shutter_hid_disconn_count 
+0x463b 015512 rtn 
+:      015515 classic_shutter_process_hid_handshake:
+0x463c 015516 fetch 1 ,mem_app_handshake_flag 
+0x463d 015517 rtneq app_handshake_done 
+0x463e 015518 jam app_handshake_done ,mem_app_handshake_flag 
+0x463f 015519 call app_lpm_mult_enable 
+0x4640 015520 call app_store_reconn_info 
+0x4641 015521 call shutter_stop_bluetooth_discovery 
+0x4642 015522 call app_led_off 
+0x4643 015523 branch app_bt_enter_sniff 
+:      015526 classic_shutter_process_reconnect_page_timeout:
+0x4644 015527 branch classic_shutter_process_reconnect_failed 
+:      015530 classic_shutter_process_virtual_cable_unplug:
+0x4645 015531 setarg flag_shutter_cable_unplug_timeout 
+0x4646 015532 store 1 ,mem_classic_shutter_cable_unplug_conut 
+0x4647 015533 rtn 
+:      015536 classic_shutter_process_remote_unsniff:
+0x4648 015537 branch app_start_auto_sniff 
+:      015541 classic_shutter_process_store_reconnect_information:
+0x4649 015542 arg nvram_eeprom_offset ,regb 
+0x464a 015543 fetch 1 ,mem_nv_data_number 
+0x464b 015544 mul32 pdata ,34 ,temp 
+0x464c 015545 fetch 2 ,mem_nv_data_ptr 
+0x464d 015546 copy pdata ,rega 
+0x464e 015547 branch iicd_write_eep_data 
+:      015549 classic_shutter_load_reconn_info:
+0x464f 015550 arg nvram_eeprom_offset ,regb 
+0x4650 015551 fetch 1 ,mem_shutter_bluetooth_type 
+0x4651 015552 rtnbit0 classic_shutter 
+0x4652 015553 fetch 1 ,mem_nv_data_number 
+0x4653 015554 rtn blank 
+0x4654 015555 mul32 pdata ,34 ,temp 
+0x4655 015556 fetch 2 ,mem_nv_data_ptr 
+0x4656 015557 copy pdata ,rega 
+0x4657 015558 branch iicd_read_eep_data 
+:      015562 ble_shutter_process_baseband_connect:
+0x4658 015563 call shutter_stop_bluetooth_discovery 
+0x4659 015564 setarg 0 
+0x465a 015565 store 2 ,mem_ble_shutter_reconn_timer 
+0x465b 015566 branch app_led_off 
+:      015569 ble_shutter_process_baseband_disconnect:
+0x465c 015570 call queue_init 
+0x465d 015571 jam 0 ,mem_ble_shutter_enable_notify 
+0x465e 015572 branch shutter_start_reconnect 
+:      015575 ble_shutter_process_reconnect_complete:
+0x465f 015576 call queue_init 
+0x4660 015577 jam 1 ,mem_ble_shutter_enable_notify 
+0x4661 015578 fetch 8 ,mem_ble_shutter_interval_min 
+0x4662 015579 store 8 ,mem_le_interval_min 
+0x4663 015580 call app_lpm_mult_enable 
+0x4664 015581 branch le_l2cap_tx_update_req 
+:      015584 ble_shutter_process_parse_connect_parameter_update_response:
+0x4665 015585 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 
+0x4666 015586 rtneq ble_signaling_connect_parameter_update_accepted 
+0x4667 015587 fetch 8 ,mem_ble_shutter_interval_min_new 
+0x4668 015588 rtn blank 
+0x4669 015589 store 8 ,mem_le_interval_min 
+0x466a 015590 branch le_l2cap_tx_update_req 
+:      015594 shutter_process_soft_swtich_button_long_press:
+0x466b 015595 branch ui_soft_switch_botton_long_press 
+:      015597 shutter_process_soft_swtich_button_down:
+0x466c 015598 fetch 1 ,mem_shutter_hard_soft_switch_case 
+0x466d 015599 rtneq hard_switch 
+0x466e 015600 fetch 1 ,mem_shutter_soft_switch_power_state 
+0x466f 015601 rtnne ss_state_power_on 
+0x4670 015602 call shutter_store_currenct_led_state 
+0x4671 015603 branch app_led_on 
+:      015605 shutter_store_currenct_led_state:
+0x4672 015606 jam 1 ,mem_shutter_soft_swtich_botton_down 
+0x4673 015607 arg 11 ,loopcnt 
+0x4674 015608 arg mem_shutter_soft_swtich_led_struct_temp ,contw 
+0x4675 015609 arg mem_shutter_led_struct_app_led ,contr 
+0x4676 015610 branch memcpy 
+:      015612 shutter_process_soft_swtich_button_up:
+0x4677 015613 fetch 1 ,mem_shutter_hard_soft_switch_case 
+0x4678 015614 rtneq hard_switch 
+0x4679 015615 fetch 1 ,mem_shutter_soft_switch_power_state 
+0x467a 015616 beq ss_state_power_on ,shutter_load_currenct_led_state 
+0x467b 015617 branch ui_soft_switch_botton_up 
+:      015619 shutter_load_currenct_led_state:
+0x467c 015620 fetch 1 ,mem_shutter_soft_swtich_botton_down 
+0x467d 015621 rtnne 1 
+0x467e 015622 jam 0 ,mem_shutter_soft_swtich_botton_down 
+0x467f 015623 fetch 2 ,mem_ui_state_map 
+0x4680 015624 bbit1 ui_state_bt_connected ,app_led_off 
+0x4681 015625 bbit1 ui_state_ble_connected ,app_led_off 
+0x4682 015626 arg 11 ,loopcnt 
+0x4683 015627 arg mem_shutter_soft_swtich_led_struct_temp ,contr 
+0x4684 015628 arg mem_shutter_led_struct_app_led ,contw 
+0x4685 015629 branch memcpy 
+:      015634 shutter_le_bb_event_timer:
+0x4686 015636 call shutter_check_sleep_timer 
+0x4687 015639 call shutter_check_power_off_timer 
+0x4688 015642 call classic_shutter_check_unplug_timer 
+0x4689 015643 call classic_shutter_hid_handshake_timer 
+0x468a 015644 call classic_shutter_hid_disconn_timer 
+0x468b 015647 branch ble_shutter_reconn_timer 
+:      015651 shutter_check_sleep_timer:
+0x468c 015652 arg mem_shutter_sleep_timer ,regc 
+0x468d 015653 arg shutter_sleep_timeout ,regb 
+0x468e 015654 branch timer_single_step_2b 
+:      015655 shutter_sleep_timeout:
+0x468f 015656 jam ss_state_power_off ,mem_shutter_soft_switch_power_state 
+0x4690 015657 call app_led_off 
+0x4691 015658 call shutter_disconnect_current_connection 
+0x4692 015659 branch shutter_wait_power_off 
+:      015662 shutter_check_power_off_timer:
+0x4693 015663 arg mem_shutter_power_off_timer ,regc 
+0x4694 015664 arg shutter_check_power_off_timeout ,regb 
+0x4695 015665 branch timer_single_step 
+:      015667 shutter_check_power_off_timeout:
+0x4696 015668 fetch 2 ,mem_ui_state_map 
+0x4697 015669 bbit1 ui_state_ble_connected ,shutter_wait_power_off 
+0x4698 015670 bbit1 ui_state_bt_connected ,shutter_wait_power_off 
+0x4699 015671 fetch 1 ,mem_shutter_led_struct_app_led_type 
+0x469a 015672 beq ui_led_state_blink_start ,shutter_wait_power_off 
+0x469b 015673 beq ui_led_state_blink_lighting ,shutter_wait_power_off 
+0x469c 015674 beq ui_led_state_blink_darking ,shutter_wait_power_off 
+0x469d 015675 branch app_enter_hibernate 
+:      015679 classic_shutter_check_unplug_timer:
+0x469e 015680 arg mem_classic_shutter_cable_unplug_conut ,regc 
+0x469f 015681 arg classic_shutter_unplug_timeout ,regb 
+0x46a0 015682 branch timer_single_step 
+:      015684 classic_shutter_unplug_timeout:
+0x46a1 015685 fetch 1 ,mem_control_tasks 
+0x46a2 015686 set1 l2cap_disconnect_interrupt ,pdata 
+0x46a3 015687 set1 l2cap_disconnect_control ,pdata 
+0x46a4 015688 store 1 ,mem_control_tasks 
+0x46a5 015689 rtn 
+:      015691 classic_shutter_hid_handshake_timer:
+0x46a6 015692 arg mem_hid_handshake_timer_count ,regc 
+0x46a7 015693 arg classic_shutter_process_hid_handshake ,regb 
+0x46a8 015694 branch timer_single_step 
+:      015696 classic_shutter_hid_disconn_timer:
+0x46a9 015697 arg mem_classic_shutter_hid_disconn_count ,regc 
+0x46aa 015698 arg app_bt_disconnect ,regb 
+0x46ab 015699 branch timer_single_step 
+:      015704 ble_shutter_reconn_timer:
+0x46ac 015705 fetch 1 ,mem_shutter_soft_switch_power_state 
+0x46ad 015706 rtnne ss_state_power_on 
+0x46ae 015707 arg mem_ble_shutter_reconn_timer ,regc 
+0x46af 015708 arg shutter_start_bluetooth_discovery ,regb 
+0x46b0 015709 branch timer_single_step_2b 
+:      015712 shutter_process_idle:
+0x46b1 015713 call shutter_send_data_to_master 
+0x46b2 015714 branch keyscan_key_process 
+:      015717 shutter_process_lpm_before:
+0x46b3 015718 branch keyscan_process_lpm_before 
+:      015720 shutter_le_before_hibernate:
+0x46b4 015721 call gpio_set_before_lpm_common 
+0x46b5 015722 branch shutter_process_lpm_before 
+:      015728 shutter_stop_bluetooth_discovery:
+0x46b6 015729 fetch 1 ,mem_shutter_bluetooth_type 
+0x46b7 015730 bbit1 classic_shutter ,classic_shutter_stop_bluetooth_discovery 
+0x46b8 015731 bbit1 ble_shutter ,ble_shutter_stop_bluetooth_discovery 
+0x46b9 015732 rtn 
+:      015734 ble_shutter_stop_bluetooth_discovery:
+0x46ba 015735 fetch 2 ,mem_ble_shutter_connect_timeout 
+0x46bb 015736 store 2 ,mem_shutter_sleep_timeout 
+0x46bc 015737 store 2 ,mem_shutter_sleep_timer 
+0x46bd 015738 branch app_ble_stop_adv 
+:      015740 classic_shutter_stop_bluetooth_discovery:
+0x46be 015741 fetch 2 ,mem_classic_shutter_connect_timeout 
+0x46bf 015742 store 2 ,mem_shutter_sleep_timeout 
+0x46c0 015743 store 2 ,mem_shutter_sleep_timer 
+0x46c1 015744 branch app_bt_stop_discovery 
+:      015746 shutter_start_bluetooth_discovery:
+0x46c2 015747 fetch 1 ,mem_shutter_soft_switch_power_state 
+0x46c3 015748 rtnne ss_state_power_on 
+0x46c4 015749 fetch 1 ,mem_shutter_bluetooth_type 
+0x46c5 015750 bbit1 classic_shutter ,classic_shutter_start_discovery 
+0x46c6 015751 bbit1 ble_shutter ,ble_shutter_start_discovery 
+0x46c7 015752 rtn 
+:      015754 classic_shutter_start_discovery:
+0x46c8 015755 fetch 2 ,mem_classic_shutter_discovery_timeout ,
+0x46c9 015756 store 2 ,mem_shutter_sleep_timeout 
+0x46ca 015757 store 2 ,mem_shutter_sleep_timer 
+0x46cb 015758 branch app_bt_start_discovery_short 
+:      015760 ble_shutter_start_discovery:
+0x46cc 015761 fetch 2 ,mem_ui_state_map 
+0x46cd 015762 rtnbit1 ui_state_ble_connected 
+0x46ce 015763 fetch 2 ,mem_ble_shutter_discovery_timeout 
+0x46cf 015764 store 2 ,mem_shutter_sleep_timeout 
+0x46d0 015765 store 2 ,mem_shutter_sleep_timer 
+0x46d1 015766 fetch 2 ,mem_ble_shutter_discovery_adv_interval 
+0x46d2 015767 call shutter_ble_adv_interval_set 
+0x46d3 015768 call app_led_start_blink 
+0x46d4 015769 fetch 4 ,mem_ble_shutter_discovery_blink_on_time 
+0x46d5 015770 store 4 ,mem_shutter_led_struct_app_led_on_time 
+0x46d6 015771 fetch 2 ,mem_ui_state_map 
+0x46d7 015772 rtnbit1 ui_state_ble_adv 
+0x46d8 015773 branch app_ble_start_adv 
+:      015776 shutter_start_reconnect:
+0x46d9 015777 fetch 1 ,mem_shutter_soft_switch_power_state 
+0x46da 015778 rtnne ss_state_power_on 
+0x46db 015779 fetch 1 ,mem_shutter_bluetooth_type 
+0x46dc 015780 bbit1 classic_shutter ,classic_shutter_start_reconnect 
+0x46dd 015781 bbit1 ble_shutter ,ble_shutter_start_reconnect 
+0x46de 015782 rtn 
+:      015784 classic_shutter_start_reconnect:
+0x46df 015785 call app_check_reconn_target 
+0x46e0 015786 branch shutter_start_bluetooth_discovery ,blank 
+0x46e1 015787 call app_led_on 
+0x46e2 015788 call app_bt_stop_discovery 
+0x46e3 015789 branch app_bt_start_reconnect 
+:      015791 ble_shutter_start_reconnect:
+0x46e4 015792 fetch 2 ,mem_ble_shutter_reconn_timer 
+0x46e5 015793 fetcht 2 ,mem_ble_shutter_reconn_timeout 
+0x46e6 015794 storet 2 ,mem_ble_shutter_reconn_timer 
+0x46e7 015795 nrtn blank 
+0x46e8 015796 fetch 2 ,mem_ble_shutter_reconn_dav_interval 
+0x46e9 015797 call shutter_ble_adv_interval_set 
+0x46ea 015798 call app_led_start_blink 
+0x46eb 015799 fetch 4 ,mem_ble_shutter_reconn_blink_on_time 
+0x46ec 015800 store 4 ,mem_shutter_led_struct_app_led_on_time 
+0x46ed 015801 fetch 2 ,mem_ui_state_map 
+0x46ee 015802 rtnbit1 ui_state_ble_adv 
+0x46ef 015803 branch app_ble_start_adv 
+:      015806 shutter_ble_adv_interval_set:
+0x46f0 015807 store 2 ,mem_lpm_interval 
+0x46f1 015808 increase -4 ,pdata 
+0x46f2 015809 store 2 ,mem_le_adv_interval 
+0x46f3 015810 rtn 
+:      015813 shutter_disconnect_current_connection:
+0x46f4 015814 fetch 2 ,mem_ui_state_map 
+0x46f5 015815 bbit1 ui_state_ble_connected ,app_ble_disconnect 
+0x46f6 015816 bbit1 ui_state_bt_connected ,app_bt_disconnect 
+0x46f7 015817 branch shutter_stop_bluetooth_discovery 
+:      015821 app_check_reconn_target:
+0x46f8 015822 fetch 1 ,mem_nv_data_number 
+0x46f9 015823 copy pdata ,loopcnt 
+0x46fa 015824 fetch 2 ,mem_nv_data_ptr 
+0x46fb 015825 copy pdata ,rega 
+:      015826 app_check_reconn_target_loop:
+0x46fc 015827 ifetch 2 ,rega 
+0x46fd 015828 beq 0 ,found_reconn_device 
+0x46fe 015829 increase nv_data_len ,rega 
+0x46ff 015830 loop app_check_reconn_target_loop 
+0x4700 015831 branch enable_blank 
+:      015833 found_reconn_device:
+0x4701 015834 ifetch 6 ,contr 
+0x4702 015835 store 6 ,mem_hci_plap 
+0x4703 015836 increase 10 ,contr 
+0x4704 015837 arg mem_link_key ,contw 
+0x4705 015838 call memcpy16 
+0x4706 015839 call check_link_key_load 
+0x4707 015840 branch disable_blank 
+:      015846 shutter_check_data_enable:
+0x4708 015847 call disable_user 
+0x4709 015848 fetch 2 ,mem_ui_state_map 
+0x470a 015849 bbit1 ui_state_bt_connected ,shutter_check_bt_data_enable 
+0x470b 015850 bbit1 ui_state_ble_connected ,shutter_check_ble_data_enable 
+0x470c 015851 rtn 
+:      015853 shutter_check_bt_data_enable:
+0x470d 015854 fetch 1 ,mem_hid_interrupt_state 
+0x470e 015855 rtnne 0x3f 
+0x470f 015856 branch enable_user 
+:      015858 shutter_check_ble_data_enable:
+0x4710 015859 fetch 1 ,mem_ble_shutter_enable_notify 
+0x4711 015860 rtn blank 
+0x4712 015861 branch enable_user 
+:      015866 shutter_check_bluetooth_conn:
+0x4713 015867 call disable_user 
+0x4714 015868 fetch 2 ,mem_ui_state_map 
+0x4715 015869 rtnbit1 ui_state_bt_connected 
+0x4716 015870 rtnbit1 ui_state_ble_connected 
+0x4717 015871 branch enable_user 
+:      015875 shutter_change_bluetooth_status_bt_disconn:
+0x4718 015876 fetch 1 ,mem_shutter_bluetooth_type 
+0x4719 015877 bbit1 classic_shutter ,classic_shutter_change_bluetooth_status_bt_disconn 
+0x471a 015878 bbit1 ble_shutter ,ble_shutter_change_bluetooth_status_bt_disconn 
+0x471b 015879 rtn 
+:      015881 classic_shutter_change_bluetooth_status_bt_disconn:
+0x471c 015882 fetch 1 ,mem_scan_mode 
+0x471d 015883 rtnne 0x03 
+0x471e 015884 branch shutter_start_reconnect 
+:      015886 ble_shutter_change_bluetooth_status_bt_disconn:
+0x471f 015887 branch shutter_start_reconnect 
+:      015890 shutter_check_send_data:
+0x4720 015891 disable user2 
+0x4721 015892 fetch 2 ,mem_shutter_sleep_timeout 
+0x4722 015893 store 2 ,mem_shutter_sleep_timer 
+0x4723 015895 call shutter_check_bluetooth_conn 
+0x4724 015896 branch shutter_change_bluetooth_status_bt_disconn ,user 
+0x4725 015898 call shutter_check_data_enable 
+0x4726 015899 nrtn user 
+0x4727 015900 enable user2 
+0x4728 015901 rtn 
+:      015905 shutter_key_change:
+0x4729 015906 call shutter_check_send_data 
+0x472a 015907 nrtn user2 
+0x472b 015908 deposit rega 
+0x472c 015909 branch shutter_key_release ,blank 
+:      015910 shutter_key_press:
+0x472d 015911 call app_led_on 
+0x472e 015912 arg mem_key0_press ,regc 
+0x472f 015913 branch push_queue_press_or_release 
+:      015915 shutter_key_release:
+0x4730 015916 call app_led_off 
+0x4731 015917 arg mem_key0_release ,regc 
+:      015919 push_queue_press_or_release:
+0x4732 015920 arg max_queue_num ,pdata 
+0x4733 015921 imul32 queue ,pdata 
+0x4734 015922 iadd regc ,regc 
+:      015925 push_buffer_in_queue:
+0x4735 015926 ifetch 1 ,regc 
+0x4736 015927 rtn blank 
+0x4737 015928 call queue_push_one_byte 
+0x4738 015929 increase 1 ,regc 
+0x4739 015930 branch push_buffer_in_queue 
+:      015933 shutter_send_data_to_master:
+0x473a 015934 fetch 2 ,mem_ui_state_map 
+0x473b 015935 bbit1 ui_state_ble_connected ,pop_queue_to_ble_data 
+0x473c 015936 bbit1 ui_state_bt_connected ,pop_queue_to_classic_data 
+0x473d 015937 rtn 
+:      015939 pop_queue_to_ble_data:
+0x473e 015940 call le_fifo_check_nearly_full 
+0x473f 015941 nrtn blank 
+0x4740 015942 call queue_pop_one_byte 
+0x4741 015943 nrtn user 
+0x4742 015944 pincrease -1 
+0x4743 015945 mul32 pdata ,shutter_ble_data_buffer ,pdata 
+0x4744 015946 arg mem_ble_data_buffer1 ,temp 
+0x4745 015947 iadd temp ,contr 
+:      015948 le_send_notify_from_list:
+0x4746 015949 ifetch 1 ,contr 
+0x4747 015950 copy pdata ,rega 
+0x4748 015951 ifetcht 2 ,contr 
+0x4749 015952 call store_contr 
+0x474a 015953 call le_att_malloc_tx_notify 
+0x474b 015954 copy rega ,loopcnt 
+0x474c 015955 call get_contr 
+0x474d 015956 branch memcpy 
+:      015959 pop_queue_to_classic_data:
+0x474e 015960 call l2cap_malloc_is_fifo_nearly_full 
+0x474f 015961 nrtn blank 
+0x4750 015962 call queue_pop_one_byte 
+0x4751 015963 nrtn user 
+0x4752 015964 pincrease -1 
+0x4753 015965 mul32 pdata ,shutter_classic_data_buffer ,pdata 
+0x4754 015966 arg mem_classic_data_buffer1 ,temp 
+0x4755 015967 iadd temp ,contr 
+0x4756 015968 ifetch 5 ,contr 
+0x4757 015969 store 5 ,mem_classic_data_buffer 
+:      015970 classic_send_hid_data:
+0x4758 015971 fetch 1 ,mem_classic_data_buffer 
+0x4759 015972 copy pdata ,rega 
+0x475a 015973 call hid_malloc_tx_buff 
+0x475b 015974 fetch 2 ,mem_hid_int_remote_cid 
+0x475c 015975 istore 2 ,contw 
+0x475d 015976 setarg 0xa1 
+0x475e 015977 istore 1 ,contw 
+0x475f 015978 fetch 4 ,mem_classic_data_buffer + 1 
+0x4760 015979 istore 9 ,contw 
+0x4761 015980 rtn 
+:      015984 queue_push_one_byte:
+0x4762 015985 store 1 ,mem_pdatatemp 
+0x4763 015986 arg mem_pdatatemp ,rega 
+0x4764 015987 branch queue_push 
+:      015989 queue_pop_one_byte:
+0x4765 015990 arg mem_pdatatemp ,rega 
+0x4766 015991 call queue_pop 
+0x4767 015992 nrtn user 
+0x4768 015993 fetch 1 ,mem_pdatatemp 
+0x4769 015994 rtn 
+:      015997 ble_shutter_receive_data:
+0x476a 015998 fetch 2 ,mem_le_att_handle 
+0x476b 015999 beq gatt_keyboard_write_handle ,ble_shutter_process_reconnect_complete 
+0x476c 016000 rtn 
+:      016002 shutter_init_param:
+0x476d 016003 setarg 0x02 
+0x476e 016004 store 1 ,mem_shutter_power_off_timeout 
+0x476f 016006 setarg 0x00200008 
+0x4770 016007 store 4 ,mem_ble_shutter_interval_min 
+0x4771 016008 setarg 0x012c0005 
+0x4772 016009 istore 4 ,contw 
+0x4773 016012 jam 0x17 ,mem_le_local_mtu 
+0x4774 016015 setarg 0x1b 
+0x4775 016016 store 2 ,mem_le_pairing_handle 
+0x4776 016017 call le_set_config_fixed_ltk 
+0x4777 016018 call le_set_fixed_ltk 
+0x4778 016019 call le_set_justwork 
+0x4779 016020 branch le_set_config_read_authentication 
+:      016023 shutter_load_buffer_config_form_datarom:
+0x477a 016025 arg ble_key_value_list_size ,loopcnt 
+0x477b 016026 arg mem_ble_data_buffer1 ,contw 
+0x477c 016027 arg ble_shutter_key_value_list ,contr 
+0x477d 016028 call memcpy_fast 
+0x477e 016029 arg bt_key_value_list_size ,loopcnt 
+0x477f 016030 arg mem_classic_data_buffer1 ,contw 
+0x4780 016031 arg classic_shutter_key_value_list ,contr 
+0x4781 016032 branch memcpy_fast 
+:      016035 shutter_load_ble_gatt_form_datarom:
+0x4782 016036 arg ble_gatt_list_size ,loopcnt 
+0x4783 016037 arg ble_shutter_gatt_list ,contr 
+0x4784 016038 branch memcpy_fast 
+:      016041 shutter_load_bt_sdp_form_datarom:
+0x4785 016042 arg bt_sdp_list_size ,loopcnt 
+0x4786 016043 arg classic_shutter_sdp_list ,contr 
+0x4787 016044 branch memcpy_fast 
+:      016048 shutter_init_bluetooth_config:
+0x4788 016049 call shutter_check_load_config_flag 
+0x4789 016050 nrtn user 
+0x478a 016051 fetch 1 ,mem_shutter_config_select_gpio1 
+0x478b 016052 call shutter_init_bluetooth_config_gpio_input 
+0x478c 016053 fetch 1 ,mem_shutter_config_select_gpio2 
+0x478d 016054 call shutter_init_bluetooth_config_gpio_input 
+0x478e 016055 fetch 1 ,mem_shutter_config_select_gpio3 
+0x478f 016056 branch shutter_init_bluetooth_config_gpio_input 
+:      016058 shutter_init_bluetooth_config_gpio_input:
+0x4790 016059 rtn blank 
+0x4791 016060 or pdata ,0x80 ,temp 
+0x4792 016061 branch gpio_config_input_nowake 
+:      016064 shutter_load_bluetooth_config:
+0x4793 016065 call shutter_check_load_config_flag 
+0x4794 016066 nrtn user 
+0x4795 016067 call shutter_load_bluetooth_config_label 
+0x4796 016068 branch shutter_load_bluetooth_config_by_otp 
+:      016070 shutter_load_bluetooth_config_label:
+0x4797 016071 arg 0 ,rega 
+0x4798 016072 fetch 1 ,mem_shutter_config_select_gpio1 
+0x4799 016073 call shutter_load_bluetooth_config_read_gpio_input 
+0x479a 016074 nsetflag blank ,0 ,rega 
+0x479b 016075 fetch 1 ,mem_shutter_config_select_gpio2 
+0x479c 016076 call shutter_load_bluetooth_config_read_gpio_input 
+0x479d 016077 nsetflag blank ,1 ,rega 
+0x479e 016078 fetch 1 ,mem_shutter_config_select_gpio3 
+0x479f 016079 call shutter_load_bluetooth_config_read_gpio_input 
+0x47a0 016080 nsetflag blank ,2 ,rega 
+0x47a1 016081 copy rega ,pdata 
+0x47a2 016082 store 1 ,mem_shutter_config_label 
+0x47a3 016083 fetch 1 ,mem_shutter_config_size 
+0x47a4 016084 imul32 rega ,pdata 
+0x47a5 016085 fetcht 2 ,mem_shutter_config_otp_base_address 
+0x47a6 016086 iadd temp ,pdata 
+0x47a7 016087 store 2 ,mem_shutter_config_otp_addr 
+0x47a8 016088 rtn 
+:      016090 shutter_load_bluetooth_config_read_gpio_input:
+0x47a9 016091 rtn blank 
+0x47aa 016092 or pdata ,0x80 ,temp 
+0x47ab 016093 call gpio_get_bit 
+0x47ac 016094 nbranch enable_blank ,true 
+0x47ad 016095 branch disable_blank 
+:      016098 shutter_check_load_config_flag:
+0x47ae 016099 call disable_user 
+0x47af 016100 fetch 1 ,mem_shutter_config_user_size 
+0x47b0 016101 nrtn blank 
+0x47b1 016102 fetch 1 ,mem_shutter_config_enable 
+0x47b2 016103 rtn blank 
+0x47b3 016104 branch enable_user 
+:      016107 shutter_load_bluetooth_config_by_otp:
+0x47b4 016108 call otp_enable_chgpump 
+0x47b5 016109 fetch 2 ,mem_shutter_config_otp_addr 
+0x47b6 016110 arg mem_shutter_config_data_temp ,rega 
+0x47b7 016111 fetcht 1 ,mem_shutter_config_size 
+0x47b8 016112 call otpd_read_data 
+0x47b9 016113 call otp_disable_chgpump 
+:      016114 shutter_load_bluetooth_config_store_name:
+0x47ba 016115 fetch 1 ,mem_shutter_config_data_temp 
+0x47bb 016116 copy pdata ,loopcnt 
+0x47bc 016117 store 1 ,mem_le_name_len 
+0x47bd 016118 call memcpy_fast 
+0x47be 016119 fetch 1 ,mem_shutter_config_data_temp 
+0x47bf 016120 copy pdata ,loopcnt 
+0x47c0 016121 store 1 ,mem_local_name_length 
+0x47c1 016122 call memcpy_fast 
+0x47c2 016123 ifetch 1 ,contr 
+0x47c3 016124 store 1 ,mem_shutter_key_num 
+0x47c4 016125 ifetch 1 ,contr 
+0x47c5 016126 store 1 ,mem_shutter_hard_soft_switch_case 
+0x47c6 016127 rtn 
+:      016130 shutter_load_bluetooth_config_by_eeprom:
+0x47c7 016131 fetch 1 ,mem_shutter_bluetooth_type 
+0x47c8 016132 rtnbit0 classic_shutter 
+0x47c9 016133 arg 3 ,temp 
+0x47ca 016134 fetch 2 ,mem_shutter_config_eeprom_offset_addr 
+0x47cb 016135 copy pdata ,regb 
+0x47cc 016136 arg mem_shutter_config_eeprom_start_flag ,rega 
+0x47cd 016137 call iicd_read_eep_data 
+0x47ce 016138 fetcht 2 ,mem_shutter_config_eeprom_start_flag 
+0x47cf 016139 setarg shutter_eeprom_config_crc 
+0x47d0 016140 isub temp ,null 
+0x47d1 016141 nrtn zero 
+0x47d2 016142 fetch 1 ,mem_shutter_config_user_size 
+0x47d3 016143 rtn blank 
+0x47d4 016144 copy pdata ,temp 
+0x47d5 016145 fetch 2 ,mem_shutter_config_eeprom_offset_addr 
+0x47d6 016146 add pdata ,3 ,regb 
+0x47d7 016147 arg mem_shutter_config_data_temp ,rega 
+0x47d8 016148 call iicd_read_eep_data 
+0x47d9 016149 branch shutter_store_config 
+:      016151 shutter_load_bluetooth_config_by_user_config:
+0x47da 016152 fetch 2 ,mem_shutter_config_user_otp_address 
+0x47db 016153 rtn blank 
+0x47dc 016154 call otp_enable_chgpump 
+0x47dd 016155 arg 1 ,temp 
+0x47de 016156 arg mem_shutter_config_user_size ,rega 
+0x47df 016157 call otpd_read_data 
+0x47e0 016159 fetch 1 ,mem_shutter_config_user_size 
+0x47e1 016160 rtn blank 
+0x47e2 016162 fetch 2 ,mem_shutter_config_user_otp_address 
+0x47e3 016163 pincrease 1 
+0x47e4 016164 arg mem_shutter_config_data_temp ,rega 
+0x47e5 016165 fetcht 1 ,mem_shutter_config_user_size 
+0x47e6 016166 call otpd_read_data 
+0x47e7 016167 call otp_disable_chgpump 
+:      016168 shutter_store_config:
+0x47e8 016169 call shutter_load_bluetooth_config_store_name 
+:      016170 shutter_load_bluetooth_config_custom:
+0x47e9 016171 ifetch 2 ,contr 
+0x47ea 016172 rtn blank 
+0x47eb 016173 copy pdata ,contw 
+0x47ec 016174 ifetcht 1 ,contr 
+0x47ed 016175 copy temp ,loopcnt 
+0x47ee 016176 call memcpy 
+0x47ef 016177 branch shutter_load_bluetooth_config_custom 
+:      016181 shutter_random_mac_addr:
+0x47f0 016182 fetch 1 ,mem_shutter_bluetooth_type 
+0x47f1 016183 rtnbit0 classic_shutter 
+0x47f2 016184 fetch 2 ,mem_classic_shutter_random_mac_offset_addr 
+0x47f3 016185 copy pdata ,regb 
+0x47f4 016186 arg 4 ,temp 
+0x47f5 016187 arg mem_shutter_random_mac_data_temp ,rega 
+0x47f6 016188 call iicd_read_eep_data 
+0x47f7 016189 fetch 1 ,mem_shutter_random_mac_data_temp 
+0x47f8 016190 bne 1 ,shutter_write_random_mac_addr_to_eeprom 
+:      016191 shutter_write_random_mac_addr_to_eeprom:
+0x47f9 016192 setarg 1 
+0x47fa 016193 store 1 ,mem_shutter_random_mac_data_temp 
+0x47fb 016194 force 3 ,loopcnt 
+0x47fc 016195 call generate_random_loop 
+0x47fd 016196 fetch 2 ,mem_classic_shutter_random_mac_offset_addr 
+0x47fe 016197 copy pdata ,regb 
+0x47ff 016198 arg 4 ,temp 
+0x4800 016199 arg mem_shutter_random_mac_data_temp ,rega 
+0x4801 016200 call iicd_write_eep_data 
+:      016201 shutter_write_random_mac_addr:
+0x4802 016202 fetch 3 ,mem_shutter_random_mac_data_temp + 1 
+0x4803 016203 store 3 ,mem_lap 
+0x4804 016204 store 3 ,mem_le_lap 
+0x4805 016205 rtn 
+:      016208 shutter_soft_swtich_power_on:
+0x4806 016209 branch shutter_start_reconnect 
+:      016212 shutter_soft_swtich_power_off:
+0x4807 016213 arg 0 ,rega 
+0x4808 016214 arg mem_shutter_power_off_led_style ,regc 
+0x4809 016215 call ui_led_set_style_global 
+0x480a 016216 call shutter_disconnect_current_connection 
+:      016217 shutter_wait_power_off:
+0x480b 016218 fetch 1 ,mem_shutter_power_off_timeout 
+0x480c 016219 store 1 ,mem_shutter_power_off_timer 
+0x480d 016220 rtn 
+:      016224 ui_soft_swtich_init:
+0x480e 016225 setarg ss_state_power_up 
+0x480f 016226 call ui_soft_swtich_init_power_on_time 
+0x4810 016227 jam ui_button_state_up ,mem_ui_button_last_state 
+0x4811 016228 call ui_button_init 
+0x4812 016229 call ui_button_polling 
+0x4813 016230 fetch 2 ,mem_ui_state_map 
+0x4814 016231 rtnbit1 ui_state_btn_down 
+0x4815 016232 branch app_enter_hibernate 
+:      016234 ui_soft_swtich_init_power_on_time:
+0x4816 016235 fetcht 2 ,mem_power_param_ptr 
+0x4817 016236 istore 1 ,temp 
+0x4818 016237 ifetch 1 ,contw 
+0x4819 016238 store 1 ,mem_ui_button_timeout 
+0x481a 016239 rtn 
+:      016242 ui_soft_switch_botton_up:
+0x481b 016243 fetch 2 ,mem_power_param_ptr 
+0x481c 016244 ifetch 1 ,pdata 
+0x481d 016245 rtnne ss_state_power_up 
+0x481e 016246 branch app_enter_hibernate 
+:      016249 ui_soft_switch_botton_long_press:
+0x481f 016250 fetcht 2 ,mem_power_param_ptr 
+0x4820 016251 ifetch 1 ,temp 
+0x4821 016252 beq ss_state_power_on ,ui_soft_switch_power_off 
+:      016253 ui_soft_switch_power_on:
+0x4822 016254 setarg ss_state_power_on 
+0x4823 016255 fetcht 2 ,mem_power_param_ptr 
+0x4824 016256 istore 1 ,temp 
+0x4825 016257 add temp ,ss_power_off_time ,contr 
+0x4826 016258 ifetch 1 ,contr 
+0x4827 016259 istore 1 ,mem_ui_button_timeout 
+0x4828 016260 ifetch 2 ,contr 
+0x4829 016261 branch callback_func 
+:      016263 ui_soft_switch_power_off:
+0x482a 016264 setarg ss_state_power_off 
+0x482b 016265 call ui_soft_swtich_init_power_on_time 
+0x482c 016266 add temp ,ss_power_off_cb ,contr 
+0x482d 016267 ifetch 2 ,contr 
+0x482e 016268 branch app_enter_hibernate ,blank 
+0x482f 016269 branch callback_func 
+:      016275 shutter_byteswap:
+0x4830 016276 store 6 ,mem_tmp_buffer 
+0x4831 016277 fetch 1 ,mem_tmp_buffer 
+0x4832 016278 store 1 ,mem_tmp_buffer + 11 
+0x4833 016279 ifetch 1 ,contr 
+0x4834 016280 store 1 ,mem_tmp_buffer + 10 
+0x4835 016281 ifetch 1 ,contr 
+0x4836 016282 store 1 ,mem_tmp_buffer + 9 
+0x4837 016283 ifetch 1 ,contr 
+0x4838 016284 store 1 ,mem_tmp_buffer + 8 
+0x4839 016285 ifetch 1 ,contr 
+0x483a 016286 store 1 ,mem_tmp_buffer + 7 
+0x483b 016287 ifetch 1 ,contr 
+0x483c 016288 store 1 ,mem_tmp_buffer + 6 
+0x483d 016289 fetch 6 ,mem_tmp_buffer + 6 
+0x483e 016290 rtn 
+:      016292 shutter_random_addr_by_otp:
+0x483f 016293 call load_adc_init 
+0x4840 016294 fetch 1 ,mem_1v_adc_io_data 
+0x4841 016295 store 1 ,mem_le_lap 
+0x4842 016296 fetch 1 ,mem_5v_adc_hvin_data 
+0x4843 016297 istore 1 ,contw 
+0x4844 016298 fetch 1 ,mem_3v_adc_vinlpm_data 
+0x4845 016299 istore 1 ,contw 
+0x4846 016300 fetch 3 ,mem_le_lap 
+0x4847 016301 store 3 ,mem_lap 
+0x4848 016302 rtn 
+:      016314 sim_iic_read_eep_data:
+0x4849 016315 fetch 2 ,mem_eeprom_base 
+0x484a 016316 iadd regb ,pdata 
+0x484b 016317 byteswap pdata ,pdata 
+0x484c 016318 store 2 ,mem_addr_mi 
+0x484d 016319 copy temp ,regb 
+0x484e 016321 call sim_iic_start 
+0x484f 016322 setarg 0xa0 
+0x4850 016323 call sim_iic_send_byte 
+0x4851 016324 fetch 1 ,mem_addr_mi 
+0x4852 016325 call sim_iic_send_byte 
+0x4853 016326 bmark1 mark_eeprom_size ,sim_iic_read_eep_data_2k 
+0x4854 016327 fetch 1 ,mem_addr_mi + 1 
+0x4855 016328 call sim_iic_send_byte 
+:      016329 sim_iic_read_eep_data_2k:
+0x4856 016330 call sim_iic_stop 
+0x4857 016332 call sim_iic_start 
+0x4858 016333 setarg 0xa1 
+0x4859 016334 call sim_iic_send_byte 
+:      016336 sim_iic_read_eep_data_loop:
+0x485a 016337 call sim_iic_read_byte 
+0x485b 016338 istore 1 ,rega 
+0x485c 016339 increase 1 ,rega 
+0x485d 016340 increase -1 ,regb 
+0x485e 016341 nbranch sim_iic_read_eep_data_loop ,zero 
+0x485f 016342 branch sim_iic_stop 
+:      016353 sim_iic_write_eep_data:
+0x4860 016354 byteswap regb ,pdata 
+0x4861 016355 store 2 ,mem_addr_mi 
+0x4862 016356 copy temp ,regb 
+0x4863 016358 call sim_iic_start 
+0x4864 016359 setarg 0xa0 
+0x4865 016360 call sim_iic_send_byte 
+0x4866 016362 fetch 1 ,mem_addr_mi 
+0x4867 016363 call sim_iic_send_byte 
+0x4868 016364 bmark1 mark_eeprom_size ,sim_iic_write_eep_data_loop 
+0x4869 016365 fetch 1 ,mem_addr_mi + 1 
+0x486a 016366 call sim_iic_send_byte 
+:      016367 sim_iic_write_eep_data_loop:
+0x486b 016368 ifetch 1 ,rega 
+0x486c 016369 call sim_iic_send_byte 
+0x486d 016370 increase 1 ,rega 
+0x486e 016371 increase -1 ,regb 
+0x486f 016372 nbranch sim_iic_write_eep_data_loop ,zero 
+0x4870 016373 branch sim_iic_stop 
+:      016377 sim_iic_wait_ack:
+0x4871 016378 arg 10 ,loopcnt 
+0x4872 016379 call sim_iic_release_sda 
+0x4873 016380 call sim_iic_scl_output_high 
+0x4874 016381 call sim_iic_delay 
+:      016382 sim_iic_wait_ack_loop:
+0x4875 016383 call sim_iic_read_sda_level 
+0x4876 016384 branch sim_iic_scl_output_low ,blank 
+0x4877 016385 loop sim_iic_wait_ack_loop 
+0x4878 016386 branch sim_iic_scl_output_low 
+:      016390 sim_iic_ack_slave:
+0x4879 016391 call sim_iic_scl_output_low 
+0x487a 016392 call sim_iic_sda_output_low 
+0x487b 016393 call sim_iic_delay 
+0x487c 016394 call sim_iic_scl_output_high 
+0x487d 016395 call sim_iic_delay 
+0x487e 016396 branch sim_iic_scl_output_low 
+:      016401 sim_iic_read_byte:
+0x487f 016402 arg 8 ,loopcnt 
+0x4880 016403 arg 0 ,regc 
+0x4881 016404 call sim_iic_release_sda 
+:      016405 sim_iic_read_byte_loop:
+0x4882 016406 call sim_iic_scl_output_high 
+0x4883 016407 call sim_iic_delay 
+0x4884 016408 lshift regc ,regc 
+0x4885 016409 call sim_iic_read_sda_level 
+0x4886 016410 iadd regc ,regc 
+0x4887 016411 call sim_iic_delay 
+0x4888 016412 call sim_iic_scl_output_low 
+0x4889 016413 loop sim_iic_read_byte_loop 
+0x488a 016414 call sim_iic_ack_slave 
+0x488b 016415 copy regc ,pdata 
+0x488c 016416 rtn 
+:      016420 sim_iic_send_byte:
+0x488d 016421 arg 8 ,loopcnt 
+0x488e 016422 copy pdata ,regc 
+0x488f 016423 call sim_iic_scl_output_low 
+:      016424 sim_iic_send_byte_loop:
+0x4890 016425 isolate1 7 ,regc 
+0x4891 016426 call sim_iic_sda_output_high ,true 
+0x4892 016427 ncall sim_iic_sda_output_low ,true 
+0x4893 016428 lshift regc ,regc 
+0x4894 016429 call sim_iic_delay 
+0x4895 016430 call sim_iic_scl_output_high 
+0x4896 016431 call sim_iic_delay 
+0x4897 016432 call sim_iic_scl_output_low 
+0x4898 016433 call sim_iic_delay 
+0x4899 016434 loop sim_iic_send_byte_loop 
+0x489a 016435 branch sim_iic_wait_ack 
+:      016439 sim_iic_start:
+0x489b 016440 call sim_iic_sda_output_high 
+0x489c 016441 call sim_iic_scl_output_high 
+0x489d 016442 call sim_iic_delay 
+0x489e 016443 call sim_iic_sda_output_low 
+0x489f 016444 call sim_iic_delay 
+0x48a0 016445 branch sim_iic_scl_output_low 
+:      016449 sim_iic_stop:
+0x48a1 016450 call sim_iic_sda_output_low 
+0x48a2 016451 call sim_iic_scl_output_high 
+0x48a3 016452 call sim_iic_delay 
+0x48a4 016453 call sim_iic_sda_output_high 
+0x48a5 016454 branch sim_iic_delay 
+:      016458 sim_iic_scl_output_high:
+0x48a6 016459 enable user 
+0x48a7 016460 fetch 1 ,sim_iic_scl_gpio_num 
+0x48a8 016461 branch sim_iic_config_gpio 
+:      016464 sim_iic_scl_output_low:
+0x48a9 016465 disable user 
+0x48aa 016466 fetch 1 ,sim_iic_scl_gpio_num 
+0x48ab 016467 branch sim_iic_config_gpio 
+:      016470 sim_iic_sda_output_high:
+0x48ac 016471 enable user 
+0x48ad 016472 fetch 1 ,sim_iic_sda_gpio_num 
+0x48ae 016473 branch sim_iic_config_gpio 
+:      016476 sim_iic_sda_output_low:
+0x48af 016477 disable user 
+0x48b0 016478 fetch 1 ,sim_iic_sda_gpio_num 
+0x48b1 016479 branch sim_iic_config_gpio 
+:      016484 sim_iic_config_gpio:
+0x48b2 016485 and pdata ,0x07 ,queue 
+0x48b3 016486 rshift3 pdata ,pdata 
+0x48b4 016487 arg core_gpio_oe0 ,temp 
+0x48b5 016488 iadd temp ,temp 
+0x48b6 016489 ifetch 1 ,temp 
+0x48b7 016490 qset1 pdata 
+0x48b8 016491 istore 1 ,temp 
+0x48b9 016492 increase 4 ,temp 
+0x48ba 016493 ifetch 1 ,temp 
+0x48bb 016494 qsetflag user ,pdata 
+0x48bc 016495 istore 1 ,temp 
+0x48bd 016496 rtn 
+:      016499 sim_iic_release_sda:
+0x48be 016500 fetch 1 ,sim_iic_sda_gpio_num 
+0x48bf 016501 and pdata ,0x07 ,queue 
+0x48c0 016502 rshift3 pdata ,pdata 
+0x48c1 016503 arg core_gpio_oe0 ,temp 
+0x48c2 016504 iadd temp ,temp 
+0x48c3 016505 ifetch 1 ,temp 
+0x48c4 016506 qset0 pdata 
+0x48c5 016507 istore 1 ,temp 
+0x48c6 016508 rtn 
+:      016513 sim_iic_read_sda_level:
+0x48c7 016514 nop 4 
+0x48c8 016515 fetch 1 ,sim_iic_sda_gpio_num 
+0x48c9 016516 and pdata ,0x07 ,queue 
+0x48ca 016517 rshift3 pdata ,pdata 
+0x48cb 016518 arg core_gpio_in ,temp 
+0x48cc 016519 iadd temp ,temp 
+0x48cd 016520 setarg 0 
+0x48ce 016521 ifetcht 1 ,temp 
+0x48cf 016522 qisolate1 temp 
+0x48d0 016523 setflag true ,0 ,pdata 
+0x48d1 016524 rtn 
+:      016527 sim_iic_delay:
+0x48d2 016529 rtn 
+:      016535 usb_isr:
+0x48d3 016536 bpatch patch1e_6 ,mem_patch1e 
+0x48d4 016537 hfetch 1 ,core_usb_status 
+0x48d5 016538 isolate1 7 ,pdata 
+0x48d6 016539 call usb_init ,true 
+0x48d7 016540 call usb_nak_state_judge 
+0x48d8 016541 hfetch 1 ,core_usb_status 
+0x48d9 016542 store 1 ,mem_usb_status 
+0x48da 016543 hfetch 1 ,core_usb_fifo_empty 
+0x48db 016544 store 1 ,mem_usb_fifo_empty 
+0x48dc 016545 hstore 1 ,core_usb_fifo_empty 
+0x48dd 016546 pinvert 
+0x48de 016547 fetcht 1 ,mem_usb_tx_wait 
+0x48df 016548 iand temp ,pdata 
+0x48e0 016549 store 1 ,mem_usb_tx_wait 
+0x48e1 016550 jam 0xe0 ,core_usb_status 
+0x48e2 016551 fetch 1 ,mem_usb_fifo_empty 
+0x48e3 016552 compare 0x1 ,pdata ,0x1 
+0x48e4 016553 call usb0_fifo_empty ,true 
+0x48e5 016554 fetch 1 ,mem_usb_status 
+0x48e6 016555 compare 0x1 ,pdata ,0x1 
+0x48e7 016556 call usb_status1 ,true 
+0x48e8 016557 call usb_tx 
+0x48e9 016558 branch usb_nak_state 
+:      016560 usb_init:
+0x48ea 016561 bpatch patch1e_7 ,mem_patch1e 
+0x48eb 016562 call usb_init_param 
+0x48ec 016563 jam 0x00 ,core_usb_config 
+0x48ed 016564 nop 10000 
+0x48ee 016565 jam 0xc0 ,core_usb_trig 
+0x48ef 016566 hfetch 2 ,core_clkoff 
+0x48f0 016567 set0 clock_off_usb ,pdata 
+0x48f1 016568 hstore 2 ,core_clkoff 
+0x48f2 016569 jam 0x3c ,core_usb_config 
+0x48f3 016570 jam 0xff ,core_usb_status 
+0x48f4 016571 jam 0xff ,core_usb_fifo_empty 
+0x48f5 016572 jam 0 ,core_usb_addr 
+0x48f6 016573 jam dev_default ,mem_usb0_state 
+0x48f7 016574 setarg mem_usb_clear_mem_end 
+0x48f8 016575 arg mem_usb_clear_mem_start ,contw 
+0x48f9 016576 isub contw ,loopcnt 
+0x48fa 016577 branch clear_mem 
+:      016579 usb_offline_check_init:
+0x48fb 016580 fetcht 1 ,mem_usb_offline_check_gpio 
+0x48fc 016581 branch gpio_config_input 
+:      016582 usb_offline_state:
+0x48fd 016583 fetch 1 ,mem_usb_device_enumeration_endflag 
+0x48fe 016584 rtn blank 
+0x48ff 016585 fetcht 1 ,mem_usb_offline_check_gpio 
+0x4900 016586 call gpio_get_bit 
+0x4901 016587 branch usb_init ,true 
+0x4902 016588 rtn 
+:      016591 usb_nak_state:
+0x4903 016592 arg timer_nak ,queue 
+0x4904 016593 call timer_check 
+0x4905 016594 nrtn blank 
+0x4906 016595 fetch 1 ,mem_usb_wakestate_onetime_flag 
+0x4907 016596 nrtn blank 
+0x4908 016597 fetch 1 ,mem_usb_device_enumeration_endflag 
+0x4909 016598 ncall usb_mac_wakeup_judge ,blank 
+0x490a 016599 rtn 
+:      016601 usb_mem_devicedesc_init:
+0x490b 016602 arg mem_devicedesc ,contw 
+0x490c 016603 setsect 0 ,0x11212 
+0x490d 016604 setsect 1 ,0x8000 
+0x490e 016605 setsect 2 ,0x0 
+0x490f 016606 setsect 3 ,0x10000 
+0x4910 016607 istore 9 ,contw 
+0x4911 016608 setsect 0 ,0x22412 
+0x4912 016609 setsect 1 ,0x8604 
+0x4913 016610 setsect 2 ,0x1000 
+0x4914 016611 setsect 3 ,0x8 
+0x4915 016612 istore 9 ,contw 
+0x4916 016613 setsect 0 ,0x1 
+0x4917 016614 istore 1 ,contw 
+0x4918 016615 rtn 
+:      016617 usb_init_param:
+0x4919 016618 jam 2 ,mem_usb0_state 
+0x491a 016619 setarg 0x0 
+0x491b 016620 store 1 ,mem_remain 
+0x491c 016621 store 2 ,mem_usb_zero_packet 
+0x491d 016622 pincrease 1 
+0x491e 016623 store 2 ,mem_usb_ones_packet 
+0x491f 016624 pincrease 1 
+0x4920 016625 store 2 ,mem_usb_two_packet 
+0x4921 016626 setarg hid_kbdata_addr 
+0x4922 016627 store 2 ,mem_hidreportdesc_kb 
+0x4923 016628 setarg hid_msdata_addr 
+0x4924 016629 store 2 ,mem_hidreportdesc_m 
+0x4925 016630 arg mem_confdesc ,contw 
+0x4926 016631 arg hid_confdata_addr ,contr 
+0x4927 016632 call memcpy64 
+0x4928 016633 fetch 1 ,mem_usb_tx_interval 
+0x4929 016634 ncall usb_tx_interval_config ,blank 
+0x492a 016635 branch usb_mem_devicedesc_init 
+:      016637 usb_tx_interval_config:
+0x492b 016638 store 1 ,mem_confdesc + 34 
+0x492c 016639 store 1 ,mem_confdesc + 59 
+0x492d 016640 rtn 
+:      016641 usb_nak_state_judge:
+0x492e 016642 hfetch 1 ,core_usb_status 
+0x492f 016643 bbit1 usb_status_nak ,usb_nak_state_timer_init 
+0x4930 016644 rtn 
+:      016646 usb_nak_state_timer_init:
+0x4931 016647 call usb0_attached_state_judge 
+0x4932 016648 call timer_reinit 
+0x4933 016649 setarg timer_nak_delay 
+0x4934 016650 arg timer_nak ,queue 
+0x4935 016651 branch timer_init 
+:      016653 usb0_attached_state_judge:
+0x4936 016654 fetch 1 ,mem_usb_state 
+0x4937 016655 bne usb_connected ,usb_clear_halt_dispose 
+0x4938 016656 jam 0 ,mem_usb_wakestate_onetime_flag 
+0x4939 016657 jam 0 ,mem_usb_mac_wakeup_trig 
+0x493a 016658 rtn 
+:      016659 usb_clear_halt_dispose:
+0x493b 016660 fetch 1 ,mem_usb_clear_halt 
+0x493c 016661 rtn blank 
+0x493d 016662 jam 0 ,mem_usb_clear_halt 
+0x493e 016663 jam usb_connected ,mem_usb_state 
+0x493f 016664 jam 1 ,mem_usb_device_enumeration_endflag 
+0x4940 016665 rtn 
+:      016667 usb0_fifo_empty:
+0x4941 016668 jam 0x1 ,core_usb_fifo_empty 
+0x4942 016669 branch usb0_tx 
+:      016671 usb_rx_no_data:
+0x4943 016672 fetch 1 ,mem_usb_status 
+0x4944 016673 bbit1 usb_status_setup ,usb_class_type 
+0x4945 016674 rtn 
+:      016676 usb_rx_read:
+0x4946 016677 hfetch 1 ,core_usb_ep 
+0x4947 016678 istore 1 ,contw 
+0x4948 016679 loop usb_rx_read 
+0x4949 016680 rtn 
+:      016682 usb_status1:
+0x494a 016683 bpatch patch1f_0 ,mem_patch1f 
+0x494b 016684 jam 0x11 ,core_usb_status 
+0x494c 016685 hfetch 1 ,core_usb_ep_len 
+0x494d 016686 store 1 ,mem_usb_read_len 
+0x494e 016687 copy pdata ,loopcnt 
+0x494f 016688 branch usb_rx_no_data ,blank 
+0x4950 016689 arg mem_usb_setup ,contw 
+0x4951 016690 call usb_rx_read 
+0x4952 016691 fetch 1 ,mem_usb_read_len 
+0x4953 016692 sub pdata ,7 ,null 
+0x4954 016693 rtn positive 
+:      016694 usb_class_type:
+0x4955 016695 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x4956 016696 and_into 0x80 ,pdata 
+0x4957 016697 beq in_device ,usb_in_device 
+0x4958 016698 beq out_device ,usb_out_device 
+0x4959 016699 branch assert 
+:      016701 usb_in_device:
+0x495a 016702 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x495b 016703 rshift4 pdata ,pdata 
+0x495c 016704 rshift pdata ,pdata 
+0x495d 016705 and_into 0x03 ,pdata 
+0x495e 016706 beq standard_req ,usb_in_standard_req 
+0x495f 016707 beq class_req ,usb_in_class_req 
+0x4960 016708 beq manufacturer_req ,usb_in_manufacturer_req 
+0x4961 016709 branch assert 
+:      016711 usb_out_device:
+0x4962 016712 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x4963 016713 rshift4 pdata ,pdata 
+0x4964 016714 rshift pdata ,pdata 
+0x4965 016715 and_into 0x03 ,pdata 
+0x4966 016716 beq standard_req ,usb_out_standard_req 
+0x4967 016717 beq class_req ,usb_out_class_req 
+0x4968 016718 beq manufacturer_req ,usb_out_manufacturer_req 
+0x4969 016719 branch assert 
+:      016721 usb_in_standard_req:
+0x496a 016722 fetch 1 ,mem_usb_setup_brequest 
+0x496b 016723 beq get_configuration ,usb0_request_get_configuration 
+0x496c 016724 beq get_descriptor ,usb0_request_get_descriptor 
+0x496d 016725 beq get_interface ,usb0_request_get_interface 
+0x496e 016726 beq get_status ,usb0_request_get_status 
+0x496f 016727 branch usb0_force_stall 
+:      016729 usb_in_class_req:
+0x4970 016730 fetch 1 ,mem_usb_setup_brequest 
+0x4971 016731 beq get_idle ,usb_get_idle 
+0x4972 016732 beq get_report ,usb_get_report 
+0x4973 016733 beq get_protocol ,usb_get_protocol_req 
+0x4974 016734 branch usb0_force_stall 
+:      016736 usb_in_manufacturer_req:
+0x4975 016737 branch usb0_force_stall 
+:      016739 usb_out_standard_req:
+0x4976 016740 fetch 1 ,mem_usb_setup_brequest 
+0x4977 016741 beq clear_feature ,usb0_request_clear_feature 
+0x4978 016742 beq set_feature ,usb0_request_set_feature 
+0x4979 016743 beq set_address ,usb0_request_set_address 
+0x497a 016744 beq set_configuration ,usb0_request_set_configuration 
+0x497b 016745 beq set_interface ,usb0_request_set_interface 
+0x497c 016746 beq set_descriptor ,usb0_force_stall 
+0x497d 016747 branch usb0_force_stall 
+:      016749 usb_out_class_req:
+0x497e 016750 fetch 1 ,mem_usb_setup_brequest 
+0x497f 016751 beq set_idle ,usb_set_idle 
+0x4980 016752 beq set_report ,usb_set_report 
+0x4981 016753 beq set_protocol ,usb_set_protocol_req 
+0x4982 016754 branch usb0_force_stall 
+:      016756 usb_out_manufacturer_req:
+0x4983 016757 branch usb0_force_stall 
+:      016759 usb0_force_stall:
+0x4984 016760 hfetch 1 ,core_usb_stall 
+0x4985 016761 set1 0 ,pdata 
+0x4986 016762 hstore 1 ,core_usb_stall 
+0x4987 016763 branch usb0_reply_zerolen 
+:      016765 usb0_reply_zerolen:
+0x4988 016766 jam 0x40 ,core_usb_clear 
+0x4989 016767 rtn 
+:      016769 usb0_request_get_configuration:
+0x498a 016770 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x498b 016771 bne in_device ,usb0_force_stall 
+0x498c 016772 fetch 1 ,mem_usb_setup_windex 
+0x498d 016773 bne 0 ,usb0_force_stall 
+0x498e 016774 fetch 1 ,mem_usb_setup_windex + 1 
+0x498f 016775 bne 0 ,usb0_force_stall 
+0x4990 016776 fetch 1 ,mem_usb_setup_blength 
+0x4991 016777 bne 1 ,usb0_force_stall 
+0x4992 016778 fetch 1 ,mem_usb_setup_blengthh 
+0x4993 016779 bne 0 ,usb0_force_stall 
+0x4994 016780 fetch 1 ,mem_usb_setup_bvalue 
+0x4995 016781 bne 0 ,usb0_force_stall 
+0x4996 016782 fetch 1 ,mem_usb_setup_bvalue + 1 
+0x4997 016783 bne 0 ,usb0_force_stall 
+0x4998 016784 fetch 1 ,mem_usb0_state 
+0x4999 016785 beq dev_configured ,usb0_request_get_cfg_dev_cfg 
+0x499a 016786 beq dev_address ,usb0_request_get_cfg_dev_addr 
+0x499b 016787 branch usb0_force_stall 
+:      016789 usb0_request_get_cfg_dev_cfg:
+0x499c 016790 arg 1 ,regb 
+0x499d 016791 branch usb_send_ones_packet 
+:      016793 usb0_request_get_cfg_dev_addr:
+0x499e 016794 arg 1 ,regb 
+0x499f 016795 branch usb_send_zero_packet 
+:      016797 usb0_request_get_descriptor:
+0x49a0 016798 bpatch patch1f_1 ,mem_patch1f 
+0x49a1 016799 set0 mark_isstr ,mark 
+0x49a2 016800 fetch 1 ,mem_usb_setup_bvalueh 
+0x49a3 016801 beq dsc_device ,dsc_device_info 
+0x49a4 016802 beq dsc_config ,dsc_config_info 
+0x49a5 016803 beq dsc_string ,dsc_string_info 
+0x49a6 016804 beq dsc_hid ,dsc_hid_info 
+0x49a7 016805 beq dsc_hid_report ,dsc_hid_report_info 
+0x49a8 016806 branch usb0_force_stall 
+:      016808 dsc_hid_info:
+0x49a9 016809 jam 0 ,mem_usb_get_protocol_flag 
+0x49aa 016810 fetch 1 ,mem_usb_setup_windex 
+0x49ab 016811 beq 0 ,dsc_hid_info_interface0 
+0x49ac 016812 beq 1 ,dsc_hid_info_interface1 
+0x49ad 016813 branch usb0_force_stall 
+:      016815 dsc_hid_info_interface0:
+0x49ae 016816 arg mem_confdesc + 19 ,rega 
+0x49af 016817 ifetch 1 ,rega 
+0x49b0 016818 iforce regb 
+0x49b1 016819 branch usb0_respond 
+:      016821 dsc_hid_info_interface1:
+0x49b2 016822 arg mem_confdesc + 44 ,rega 
+0x49b3 016823 ifetch 1 ,rega 
+0x49b4 016824 iforce regb 
+0x49b5 016825 branch usb0_respond 
+:      016827 dsc_device_info:
+0x49b6 016831 fetch 1 ,mem_usb_set_high_addr_flag 
+0x49b7 016832 ncall usb_set_high_addr ,blank 
+0x49b8 016833 setarg mem_devicedesc 
+0x49b9 016834 fetcht 1 ,mem_devicedesc 
+:      016835 dsc_info_set_data_len:
+0x49ba 016836 store 2 ,mem_dsc_info_data_pointer 
+0x49bb 016837 storet 1 ,mem_dsc_info_len 
+0x49bc 016838 fetch 1 ,mem_usb_setup_blength 
+0x49bd 016839 isub temp ,null 
+0x49be 016840 nbranch dsc_info_set_current_data_len ,positive 
+:      016841 dsc_info_set_initial_data_len:
+0x49bf 016842 fetch 1 ,mem_dsc_info_len 
+:      016843 dsc_info_set_data_size_completed:
+0x49c0 016844 iforce regb 
+0x49c1 016845 fetch 2 ,mem_dsc_info_data_pointer 
+0x49c2 016846 add pdata ,1 ,pdata 
+0x49c3 016847 iforce rega 
+0x49c4 016848 branch usb0_respond 
+:      016849 dsc_info_set_current_data_len:
+0x49c5 016850 fetch 1 ,mem_usb_setup_blength 
+0x49c6 016851 branch dsc_info_set_data_size_completed 
+:      016853 usb_set_high_addr:
+0x49c7 016854 hfetch 1 ,core_usb_addr 
+0x49c8 016855 ncall usb0_set_addr ,blank 
+0x49c9 016856 jam 0 ,mem_usb_set_high_addr_flag 
+0x49ca 016857 rtn 
+:      016858 usb0_set_addr:
+0x49cb 016859 hfetch 1 ,core_usb_addr 
+0x49cc 016860 set1 7 ,pdata 
+0x49cd 016861 hstore 1 ,core_usb_addr 
+0x49ce 016862 rtn 
+:      016864 dsc_config_info:
+0x49cf 016865 setarg mem_confdesc 
+0x49d0 016866 fetcht 1 ,mem_confdesc 
+0x49d1 016867 branch dsc_info_set_data_len 
+:      016869 dsc_string_info:
+0x49d2 016870 fetch 1 ,mem_usb_setup_bvalue 
+0x49d3 016871 sub pdata ,3 ,null 
+0x49d4 016872 nbranch usb0_force_stall ,positive 
+0x49d5 016873 fetch 1 ,mem_usb_setup_bvalue 
+0x49d6 016874 arg mem_string0 ,rega 
+0x49d7 016875 beq 0 ,usb0_respond_length 
+0x49d8 016876 set1 mark_isstr ,mark 
+0x49d9 016877 arg mem_string1 ,rega 
+0x49da 016878 beq 1 ,usb0_respond_length 
+0x49db 016879 arg mem_string2 ,rega 
+0x49dc 016880 beq 2 ,usb0_respond_length 
+0x49dd 016881 arg mem_string3 ,rega 
+0x49de 016882 beq 3 ,usb0_respond_length 
+0x49df 016883 rtn 
+:      016885 dsc_hid_report_info:
+0x49e0 016886 fetch 2 ,mem_usb_setup_windex 
+0x49e1 016887 beq 1 ,dsc_hid_report_info0 
+0x49e2 016888 fetch 2 ,mem_hidreportdesc_kb 
+0x49e3 016889 copy pdata ,rega 
+0x49e4 016891 branch usb0_respond_length 
+:      016892 dsc_hid_report_info0:
+0x49e5 016893 jam 1 ,mem_usb_device_enumeration_endflag 
+0x49e6 016894 jam usb_got_report_req ,mem_usb_state 
+0x49e7 016895 fetch 2 ,mem_hidreportdesc_m 
+0x49e8 016896 copy pdata ,rega 
+0x49e9 016898 branch usb0_respond_length 
+:      016901 usb0_request_get_interface:
+0x49ea 016902 fetch 1 ,mem_usb0_state 
+0x49eb 016903 bne dev_configured ,usb0_force_stall 
+0x49ec 016904 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x49ed 016905 bne in_interface ,usb0_force_stall 
+0x49ee 016906 fetch 1 ,mem_usb_setup_bvalue 
+0x49ef 016907 bne 0 ,usb0_force_stall 
+0x49f0 016908 fetch 1 ,mem_usb_setup_bvalueh 
+0x49f1 016909 bne 0 ,usb0_force_stall 
+0x49f2 016910 fetch 1 ,mem_usb_setup_blength 
+0x49f3 016911 bne 1 ,usb0_force_stall 
+0x49f4 016912 fetch 1 ,mem_usb_setup_blengthh 
+0x49f5 016913 bne 0 ,usb0_force_stall 
+0x49f6 016914 fetch 1 ,mem_usb_setup_windex 
+0x49f7 016915 bne 0 ,usb0_force_stall 
+0x49f8 016916 fetch 1 ,mem_usb_setup_windex + 1 
+0x49f9 016917 bne 0 ,usb0_force_stall 
+0x49fa 016918 arg 1 ,regb 
+0x49fb 016919 branch usb_send_zero_packet 
+:      016922 usb0_request_get_status:
+0x49fc 016923 fetch 1 ,mem_usb0_state 
+0x49fd 016924 beq dev_default ,usb0_force_stall 
+0x49fe 016925 fetch 1 ,mem_usb_setup_bvalue 
+0x49ff 016926 bne 0 ,usb0_force_stall 
+0x4a00 016927 fetch 1 ,mem_usb_setup_bvalueh 
+0x4a01 016928 bne 0 ,usb0_force_stall 
+0x4a02 016929 fetch 1 ,mem_usb_setup_blength 
+0x4a03 016930 bne 2 ,usb0_force_stall 
+0x4a04 016931 fetch 1 ,mem_usb_setup_blengthh 
+0x4a05 016932 bne 0 ,usb0_force_stall 
+0x4a06 016933 fetch 1 ,mem_usb_setup_windex + 1 
+0x4a07 016934 bne 0 ,usb0_force_stall 
+0x4a08 016935 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x4a09 016936 beq in_device ,usb0_get_status_in_device 
+0x4a0a 016937 beq in_interface ,usb0_get_status_in_interface 
+0x4a0b 016938 beq in_endpoint ,usb0_get_status_in_endpoint 
+0x4a0c 016939 branch usb0_force_stall 
+:      016941 usb0_get_status_in_device:
+0x4a0d 016942 fetch 1 ,mem_usb_setup_windex 
+0x4a0e 016943 bne 0 ,usb0_force_stall 
+0x4a0f 016944 arg 2 ,regb 
+0x4a10 016945 fetch 1 ,mem_usb_remote_wakeup 
+0x4a11 016946 beq 0x01 ,usb_send_two_packet 
+:      016948 usb_send_zero_packet:
+0x4a12 016949 arg mem_usb_zero_packet ,rega 
+0x4a13 016950 branch usb0_respond 
+:      016951 usb_send_ones_packet:
+0x4a14 016952 arg mem_usb_ones_packet ,rega 
+0x4a15 016953 branch usb0_respond 
+:      016954 usb_send_two_packet:
+0x4a16 016955 arg mem_usb_two_packet ,rega 
+0x4a17 016956 branch usb0_respond 
+:      016958 usb0_get_status_in_interface:
+0x4a18 016959 fetch 1 ,mem_usb0_state 
+0x4a19 016960 bne dev_configured ,usb0_force_stall 
+0x4a1a 016961 arg 2 ,regb 
+0x4a1b 016962 branch usb_send_zero_packet 
+:      016964 usb0_get_status_in_endpoint:
+0x4a1c 016965 fetch 1 ,mem_usb0_state 
+0x4a1d 016966 bne dev_configured ,usb0_force_stall 
+0x4a1e 016967 fetch 1 ,mem_usb_setup_windex 
+0x4a1f 016968 beq in_ep1 ,usb0_get_status_in_ep_in_ep1 
+0x4a20 016969 beq in_ep2 ,usb0_get_status_in_ep_in_ep2 
+0x4a21 016970 beq in_ep3 ,usb0_get_status_in_ep_in_ep3 
+0x4a22 016971 and_into 0x7f ,pdata 
+0x4a23 016972 beq 0x00 ,usb0_get_status_in_ep_in_ep0 
+0x4a24 016973 branch usb0_force_stall 
+:      016975 usb0_get_status_in_ep_in_ep0:
+0x4a25 016976 fetch 1 ,mem_usb_ep0_stall_status 
+:      016977 usb0_get_status_in_ep_in_ack:
+0x4a26 016978 arg 2 ,regb 
+0x4a27 016979 beq 1 ,usb_send_ones_packet 
+0x4a28 016980 branch usb_send_zero_packet 
+:      016981 usb0_get_status_in_ep_in_ep1:
+0x4a29 016982 fetch 1 ,mem_usb_ep1_stall_status 
+0x4a2a 016983 branch usb0_get_status_in_ep_in_ack 
+:      016984 usb0_get_status_in_ep_in_ep2:
+0x4a2b 016985 fetch 1 ,mem_usb_ep2_stall_status 
+0x4a2c 016986 branch usb0_get_status_in_ep_in_ack 
+:      016987 usb0_get_status_in_ep_in_ep3:
+0x4a2d 016988 fetch 1 ,mem_usb_ep3_stall_status 
+0x4a2e 016989 branch usb0_get_status_in_ep_in_ack 
+:      016991 usb_get_idle:
+0x4a2f 016992 jam 1 ,mem_usb_idle_flag 
+0x4a30 016993 arg mem_usb_idle_rate ,rega 
+0x4a31 016994 arg 1 ,regb 
+0x4a32 016995 branch usb0_respond 
+:      016997 usb_get_report:
+0x4a33 016998 fetch 2 ,mem_usb_setup_bvalue 
+0x4a34 016999 arg pc_get_report ,temp 
+0x4a35 017000 isub temp ,null 
+0x4a36 017001 nbranch usb0_force_stall ,zero 
+0x4a37 017002 set0 mark_isstr ,mark 
+:      017003 usb_get_report_dispose:
+0x4a38 017004 fetch 1 ,mem_usb0_data_ready_report 
+0x4a39 017005 nbranch usb_get_report_data_success ,blank 
+0x4a3a 017006 jam pc_get_nondata ,mem_usb0_get_report_data 
+:      017007 usb_get_report_send_data:
+0x4a3b 017008 fetch 1 ,mem_usb_setup_blength 
+0x4a3c 017009 iforce regb 
+0x4a3d 017010 arg mem_usb0_get_report_data ,rega 
+0x4a3e 017011 call usb0_respond 
+:      017012 usb_get_report_data_release:
+0x4a3f 017013 arg mem_usb0_get_report_data ,contw 
+0x4a40 017014 arg 8 ,loopcnt 
+0x4a41 017015 branch memset0 
+:      017016 usb_get_report_data_success:
+0x4a42 017017 jam 0 ,mem_usb0_data_ready_report 
+0x4a43 017018 jam pc_get_data ,mem_usb0_get_report_data 
+0x4a44 017019 branch usb_get_report_send_data 
+:      017021 usb_get_protocol_req:
+0x4a45 017022 fetch 1 ,mem_usb_setup_blength 
+0x4a46 017023 bne 1 ,usb0_force_stall 
+0x4a47 017024 jam 1 ,mem_usb_get_protocol_flag 
+0x4a48 017025 arg 1 ,regb 
+0x4a49 017026 fetch 1 ,mem_usb_set_protocol_value 
+0x4a4a 017027 beq 0 ,usb_get_report_protocol 
+0x4a4b 017028 beq 1 ,usb_get_boot_protocol 
+0x4a4c 017029 branch usb_send_zero_packet 
+:      017030 usb_get_report_protocol:
+0x4a4d 017031 branch usb_send_ones_packet 
+:      017032 usb_get_boot_protocol:
+0x4a4e 017033 branch usb_send_zero_packet 
+:      017038 usb0_request_clear_feature:
+0x4a4f 017039 fetch 1 ,mem_usb0_state 
+0x4a50 017040 bne dev_configured ,usb0_force_stall 
+0x4a51 017041 fetch 1 ,mem_usb_setup_blength 
+0x4a52 017042 bne 0 ,usb0_force_stall 
+0x4a53 017043 fetch 1 ,mem_usb_setup_blengthh 
+0x4a54 017044 bne 0 ,usb0_force_stall 
+0x4a55 017045 fetch 1 ,mem_usb_setup_bvalueh 
+0x4a56 017046 bne 0 ,usb0_force_stall 
+0x4a57 017047 fetch 1 ,mem_usb_setup_windex + 1 
+0x4a58 017048 bne 0 ,usb0_force_stall 
+0x4a59 017049 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x4a5a 017050 beq out_device ,usb0_request_clear_feature_out_device 
+0x4a5b 017051 beq out_interface ,usb0_request_clear_feature_out_interface 
+0x4a5c 017052 beq out_endpoint ,usb0_request_clear_feature_out_endpoint 
+0x4a5d 017053 branch usb0_force_stall 
+:      017055 usb0_request_clear_feature_out_device:
+0x4a5e 017056 fetch 1 ,mem_usb_setup_bvalue 
+0x4a5f 017057 bne device_remote_wakeup ,usb0_force_stall 
+0x4a60 017058 hfetch 1 ,core_usb_config 
+0x4a61 017059 set0 7 ,pdata 
+0x4a62 017060 hstore 1 ,core_usb_config 
+0x4a63 017061 jam 0 ,mem_usb_remote_wakeup 
+0x4a64 017062 jam 1 ,mem_usb_clear_remote_wakeup 
+0x4a65 017063 branch usb0_reply_zerolen 
+:      017065 usb0_request_clear_feature_out_interface:
+0x4a66 017066 branch usb0_force_stall 
+:      017068 usb0_request_clear_feature_out_endpoint:
+0x4a67 017069 fetch 1 ,mem_usb_setup_bvalue 
+0x4a68 017070 bne endpoint_halt ,usb0_force_stall 
+0x4a69 017071 fetch 1 ,mem_usb_setup_windex 
+0x4a6a 017072 beq in_ep1 ,usb0_force_stall_ep1_in_off 
+0x4a6b 017073 beq in_ep2 ,usb0_force_stall_ep2_in_off 
+0x4a6c 017074 beq in_ep3 ,usb0_force_stall_ep3_in_off 
+0x4a6d 017075 and_into 0x7f ,pdata 
+0x4a6e 017076 beq 0x00 ,usb0_force_stall_ep0_in_off 
+0x4a6f 017077 branch usb0_force_stall 
+:      017079 usb0_force_stall_ep0_in_off:
+0x4a70 017080 jam 0 ,mem_usb_ep0_stall_status 
+0x4a71 017081 branch usb0_reply_zerolen 
+:      017082 usb0_force_stall_ep1_in_off:
+0x4a72 017083 jam 0 ,mem_usb_ep1_stall_status 
+:      017084 usb0_force_stall_ep1_in_off_reply:
+0x4a73 017085 jam 1 ,mem_usb_clear_halt 
+0x4a74 017086 branch usb0_reply_zerolen 
+:      017087 usb0_force_stall_ep2_in_off:
+0x4a75 017088 jam 0 ,mem_usb_ep2_stall_status 
+0x4a76 017089 branch usb0_force_stall_ep1_in_off_reply 
+:      017090 usb0_force_stall_ep3_in_off:
+0x4a77 017091 jam 0 ,mem_usb_ep3_stall_status 
+0x4a78 017092 branch usb0_force_stall_ep1_in_off_reply 
+:      017095 usb0_request_set_feature:
+0x4a79 017096 fetch 1 ,mem_usb_setup_blength 
+0x4a7a 017097 bne 0 ,usb0_force_stall 
+0x4a7b 017098 fetch 1 ,mem_usb_setup_blengthh 
+0x4a7c 017099 bne 0 ,usb0_force_stall 
+0x4a7d 017100 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x4a7e 017101 beq out_device ,usb0_request_set_feature_out_device 
+0x4a7f 017102 beq out_interface ,usb0_request_set_feature_out_interface 
+0x4a80 017103 beq out_endpoint ,usb0_request_set_feature_out_endpoint 
+0x4a81 017104 branch usb0_force_stall 
+:      017106 usb0_request_set_feature_out_device:
+0x4a82 017107 fetch 1 ,mem_usb_setup_bvalue 
+0x4a83 017108 bne device_remote_wakeup ,usb0_force_stall 
+0x4a84 017109 hfetch 1 ,core_usb_config 
+0x4a85 017110 set1 7 ,pdata 
+0x4a86 017111 hstore 1 ,core_usb_config 
+0x4a87 017112 jam 1 ,mem_usb_remote_wakeup 
+0x4a88 017113 jam usb_sleep ,mem_usb_state 
+0x4a89 017114 jam 0 ,mem_usb_tx_win_enable 
+0x4a8a 017115 call usb0_reply_zerolen 
+:      017116 usb_wakeup_timer_reinit:
+0x4a8b 017117 call timer_reinit 
+0x4a8c 017118 setarg timer_wakeup_delay 
+0x4a8d 017119 arg timer_wakeup ,queue 
+0x4a8e 017120 branch timer_init 
+:      017122 usb0_request_set_feature_out_interface:
+0x4a8f 017123 branch usb0_force_stall 
+:      017125 usb0_request_set_feature_out_endpoint:
+0x4a90 017126 fetch 1 ,mem_usb_setup_bvalue 
+0x4a91 017127 bne endpoint_halt ,usb0_force_stall 
+0x4a92 017128 fetch 1 ,mem_usb_setup_bvalueh 
+0x4a93 017129 bne 0 ,usb0_force_stall 
+0x4a94 017130 fetch 1 ,mem_usb_setup_windex 
+0x4a95 017131 beq in_ep1 ,usb0_force_stall_ep1_in_on 
+0x4a96 017132 beq in_ep2 ,usb0_force_stall_ep2_in_on 
+0x4a97 017133 beq in_ep3 ,usb0_force_stall_ep3_in_on 
+0x4a98 017134 and_into 0x7f ,pdata 
+0x4a99 017135 beq 0x00 ,usb0_force_stall_ep0_in_on 
+0x4a9a 017136 branch usb0_force_stall 
+:      017138 usb0_force_stall_ep0_in_on:
+0x4a9b 017139 jam 1 ,mem_usb_ep0_stall_status 
+0x4a9c 017140 branch usb0_reply_zerolen 
+:      017141 usb0_force_stall_ep1_in_on:
+0x4a9d 017142 jam 1 ,mem_usb_ep1_stall_status 
+0x4a9e 017143 branch usb0_reply_zerolen 
+:      017144 usb0_force_stall_ep2_in_on:
+0x4a9f 017145 jam 1 ,mem_usb_ep2_stall_status 
+0x4aa0 017146 branch usb0_reply_zerolen 
+:      017147 usb0_force_stall_ep3_in_on:
+0x4aa1 017148 jam 1 ,mem_usb_ep3_stall_status 
+0x4aa2 017149 branch usb0_reply_zerolen 
+:      017152 usb0_request_set_address:
+0x4aa3 017153 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x4aa4 017154 bne out_device ,usb0_force_stall 
+0x4aa5 017155 fetch 1 ,mem_usb_setup_windex 
+0x4aa6 017156 bne 0 ,usb0_force_stall 
+0x4aa7 017157 fetch 1 ,mem_usb_setup_windex + 1 
+0x4aa8 017158 bne 0 ,usb0_force_stall 
+0x4aa9 017159 fetch 1 ,mem_usb_setup_blength 
+0x4aaa 017160 bne 0 ,usb0_force_stall 
+0x4aab 017161 fetch 1 ,mem_usb_setup_blengthh 
+0x4aac 017162 bne 0 ,usb0_force_stall 
+0x4aad 017163 fetch 1 ,mem_usb_setup_bvalueh 
+0x4aae 017164 bne 0 ,usb0_force_stall 
+0x4aaf 017165 fetch 1 ,mem_usb_setup_bvalue 
+0x4ab0 017166 and_into 0x80 ,pdata 
+0x4ab1 017167 bne 0 ,usb0_force_stall 
+0x4ab2 017168 fetch 1 ,mem_usb_setup_bvalue 
+0x4ab3 017169 bne 0 ,usb_usb0_state_set_dev_addr 
+:      017170 usb_usb0_state_set_dev_default:
+0x4ab4 017171 jam dev_default ,mem_usb0_state 
+:      017172 usb0_request_set_wait_address:
+0x4ab5 017173 fetch 1 ,mem_usb_setup_bvalue 
+0x4ab6 017174 hstore 1 ,core_usb_addr 
+0x4ab7 017175 call usb0_reply_zerolen 
+0x4ab8 017176 jam 1 ,mem_usb_set_high_addr_flag 
+0x4ab9 017177 rtn 
+:      017178 usb_usb0_state_set_dev_addr:
+0x4aba 017179 jam dev_address ,mem_usb0_state 
+0x4abb 017180 branch usb0_request_set_wait_address 
+:      017183 usb0_request_set_configuration:
+0x4abc 017184 fetch 1 ,mem_usb0_state 
+0x4abd 017185 beq dev_default ,usb0_force_stall 
+0x4abe 017186 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x4abf 017187 bne out_device ,usb0_force_stall 
+0x4ac0 017188 fetch 1 ,mem_usb_setup_windex 
+0x4ac1 017189 bne 0 ,usb0_force_stall 
+0x4ac2 017190 fetch 1 ,mem_usb_setup_windex + 1 
+0x4ac3 017191 bne 0 ,usb0_force_stall 
+0x4ac4 017192 fetch 1 ,mem_usb_setup_blength 
+0x4ac5 017193 bne 0 ,usb0_force_stall 
+0x4ac6 017194 fetch 1 ,mem_usb_setup_blengthh 
+0x4ac7 017195 bne 0 ,usb0_force_stall 
+0x4ac8 017196 fetch 1 ,mem_usb_setup_bvalue + 1 
+0x4ac9 017197 bne 0 ,usb0_force_stall 
+0x4aca 017198 fetch 1 ,mem_usb_setup_bvalue 
+0x4acb 017199 sub pdata ,usb_max_num_cfg ,null 
+0x4acc 017200 nbranch usb0_force_stall ,positive 
+0x4acd 017201 fetch 1 ,mem_usb0_state 
+0x4ace 017202 beq dev_address ,usb0_request_set_cfg_addr_state 
+0x4acf 017203 beq dev_configured ,usb0_request_set_cfg_cfg_state 
+0x4ad0 017204 branch usb0_force_stall 
+:      017206 usb0_request_set_cfg_addr_state:
+:      017207 usb0_request_set_cfg_cfg_state:
+0x4ad1 017208 fetch 1 ,mem_usb_setup_bvalue 
+0x4ad2 017209 beq 0 ,usb0_request_set_cfg_stay_addr_state 
+0x4ad3 017210 jam dev_configured ,mem_usb0_state 
+0x4ad4 017211 branch usb0_reply_zerolen 
+:      017212 usb0_request_set_cfg_stay_addr_state:
+0x4ad5 017213 jam dev_address ,mem_usb0_state 
+0x4ad6 017214 branch usb0_reply_zerolen 
+:      017217 usb0_request_set_interface:
+0x4ad7 017218 fetch 1 ,mem_usb0_state 
+0x4ad8 017219 bne dev_configured ,usb0_force_stall 
+0x4ad9 017220 fetch 1 ,mem_usb_setup_bmrequesttype 
+0x4ada 017221 bne out_interface ,usb0_force_stall 
+0x4adb 017222 fetch 1 ,mem_usb_setup_bvalue 
+0x4adc 017223 bne 0 ,usb0_force_stall 
+0x4add 017224 fetch 1 ,mem_usb_setup_bvalueh 
+0x4ade 017225 bne 0 ,usb0_force_stall 
+0x4adf 017226 fetch 1 ,mem_usb_setup_blength 
+0x4ae0 017227 bne 0 ,usb0_force_stall 
+0x4ae1 017228 fetch 1 ,mem_usb_setup_blengthh 
+0x4ae2 017229 bne 0 ,usb0_force_stall 
+0x4ae3 017230 fetch 1 ,mem_usb_setup_windex 
+0x4ae4 017231 bne 0 ,usb0_force_stall 
+0x4ae5 017232 fetch 1 ,mem_usb_setup_windex + 1 
+0x4ae6 017233 bne 0 ,usb0_force_stall 
+0x4ae7 017234 branch usb0_reply_zerolen 
+:      017237 usb_set_idle:
+0x4ae8 017238 jam 1 ,mem_usb_idle_flag 
+0x4ae9 017239 fetch 1 ,mem_usb_setup_bvalueh 
+0x4aea 017240 store 1 ,mem_usb_idle_rate 
+0x4aeb 017241 fetch 1 ,mem_usb_setup_windex 
+0x4aec 017242 sub pdata ,1 ,null 
+0x4aed 017243 call usb_clear_remote_wakeup_set0 ,zero 
+0x4aee 017244 fetch 1 ,mem_usb_state 
+0x4aef 017245 bne usb_resume ,usb0_reply_zerolen 
+0x4af0 017246 jam usb_connected ,mem_usb_state 
+0x4af1 017247 call usb0_reply_zerolen 
+0x4af2 017248 nop 30000 
+0x4af3 017249 nop 30000 
+0x4af4 017250 rtn 
+:      017251 usb_clear_remote_wakeup_set0:
+0x4af5 017252 jam 1 ,mem_usb_device_enumeration_endflag 
+0x4af6 017253 jam 0 ,mem_usb_clear_remote_wakeup 
+0x4af7 017254 jam usb_resume ,mem_usb_state 
+0x4af8 017255 rtn 
+:      017258 usb_set_report:
+0x4af9 017259 jam 1 ,mem_usb0_get_set_report 
+0x4afa 017260 call usb_set_report_resume_judge 
+0x4afb 017261 fetch 2 ,mem_usb_setup_bvalue 
+0x4afc 017262 store 2 ,mem_usb_setup_bvalue_temp 
+0x4afd 017263 fetch 1 ,mem_usb_setup_blength 
+0x4afe 017264 iforce loopcnt 
+0x4aff 017265 arg mem_usb0_setup ,contr 
+0x4b00 017266 arg mem_usb0_set_report_data ,contw 
+0x4b01 017267 call memcpy 
+0x4b02 017268 branch usb0_reply_zerolen 
+:      017270 usb_set_report_resume_judge:
+0x4b03 017271 fetch 2 ,mem_usb_setup_bvalue 
+0x4b04 017272 arg pc_set_report_bvalue ,temp 
+0x4b05 017273 isub temp ,null 
+0x4b06 017274 nrtn zero 
+0x4b07 017275 fetch 2 ,mem_usb_setup_windex 
+0x4b08 017276 arg pc_set_report_windex ,temp 
+0x4b09 017277 isub temp ,null 
+0x4b0a 017278 nrtn zero 
+0x4b0b 017279 fetch 2 ,mem_usb_setup_blength 
+0x4b0c 017280 arg pc_set_report_blength ,temp 
+0x4b0d 017281 isub temp ,null 
+0x4b0e 017282 nrtn zero 
+0x4b0f 017283 jam 1 ,mem_usb_tx_win_enable 
+0x4b10 017284 rtn 
+:      017287 usb_set_protocol_req:
+0x4b11 017288 fetch 1 ,mem_usb_setup_blength 
+0x4b12 017289 bne 0 ,usb0_force_stall 
+0x4b13 017290 fetch 1 ,mem_usb_setup_bvalue 
+0x4b14 017291 beq boot_protocol ,usb_set_boot_protocol 
+0x4b15 017292 beq report_protocol ,usb_set_report_protocol 
+0x4b16 017293 branch usb0_force_stall 
+:      017294 usb_set_boot_protocol:
+0x4b17 017295 jam 0 ,mem_usb_set_protocol_status 
+0x4b18 017296 jam 1 ,mem_usb_set_protocol_value 
+0x4b19 017297 branch usb0_reply_zerolen 
+:      017298 usb_set_report_protocol:
+0x4b1a 017299 jam 1 ,mem_usb_tx_mac_enable 
+0x4b1b 017300 jam 1 ,mem_usb_set_protocol_status 
+0x4b1c 017301 jam 0 ,mem_usb_set_protocol_value 
+0x4b1d 017302 branch usb0_reply_zerolen 
+:      017305 usb0_respond_length:
+0x4b1e 017306 ifetch 1 ,rega 
+0x4b1f 017307 iforce regb 
+0x4b20 017308 increase 1 ,rega 
+:      017310 usb0_respond:
+0x4b21 017311 bpatch patch1f_2 ,mem_patch1f 
+0x4b22 017312 bmark0 mark_isstr ,usb0_respond0 
+0x4b23 017313 add regb ,1 ,pdata 
+0x4b24 017314 lshift pdata ,pdata 
+0x4b25 017315 hstore 1 ,core_usb_dfifo0 
+0x4b26 017316 jam 3 ,core_usb_dfifo0 
+0x4b27 017317 fetch 1 ,mem_usb_setup_blength 
+0x4b28 017318 increase -2 ,pdata 
+0x4b29 017319 rshift pdata ,pdata 
+0x4b2a 017320 store 1 ,mem_usb_setup_blength 
+0x4b2b 017321 beq 0 ,usb_no_respond_data 
+:      017322 usb0_respond0:
+0x4b2c 017323 fetch 2 ,mem_usb_setup_blength 
+0x4b2d 017324 isub regb ,null 
+0x4b2e 017325 branch usb0_respond1 ,positive 
+0x4b2f 017326 copy pdata ,regb 
+:      017327 usb0_respond1:
+0x4b30 017328 deposit rega 
+0x4b31 017329 store 2 ,mem_bufptr 
+0x4b32 017330 deposit regb 
+0x4b33 017331 store 1 ,mem_remain 
+0x4b34 017332 branch usb0_tx 
+:      017334 usb_no_respond_data:
+0x4b35 017335 arg 0 ,queue 
+0x4b36 017336 branch usb_trig 
+:      017339 usb0_tx:
+0x4b37 017340 bpatch patch1f_3 ,mem_patch1f 
+0x4b38 017341 fetch 1 ,mem_remain 
+0x4b39 017342 rtn blank 
+0x4b3a 017343 copy pdata ,loopcnt 
+0x4b3b 017344 sub pdata ,ep0_packet_size ,null 
+0x4b3c 017345 branch usb0_tx_info ,positive 
+0x4b3d 017346 arg ep0_packet_size ,loopcnt 
+:      017347 usb0_tx_info:
+0x4b3e 017348 fetch 1 ,mem_remain 
+0x4b3f 017349 isub loopcnt ,pdata 
+0x4b40 017350 store 1 ,mem_remain 
+0x4b41 017351 fetch 2 ,mem_bufptr 
+0x4b42 017352 copy pdata ,contr 
+:      017353 usb0_tx0:
+0x4b43 017354 ifetch 1 ,contr 
+0x4b44 017355 hstore 1 ,core_usb_dfifo0 
+0x4b45 017356 bmark0 mark_isstr ,usb0_tx1 
+0x4b46 017357 jam 0 ,core_usb_dfifo0 
+:      017358 usb0_tx1:
+0x4b47 017359 loop usb0_tx0 
+0x4b48 017360 copy contr ,pdata 
+0x4b49 017361 store 2 ,mem_bufptr 
+0x4b4a 017362 arg 0 ,queue 
+0x4b4b 017363 call usb_trig 
+0x4b4c 017364 fetch 1 ,mem_remain 
+0x4b4d 017365 nrtn blank 
+0x4b4e 017366 fetch 1 ,mem_usb_state 
+0x4b4f 017367 rtnne usb_got_report_req 
+0x4b50 017368 jam usb_connected ,mem_usb_state 
+0x4b51 017369 rtn 
+:      017372 usb_tx_ep1:
+0x4b52 017373 arg core_usb_dfifo1 ,rega 
+0x4b53 017374 arg 1 ,queue 
+:      017375 usb_tx_loop:
+0x4b54 017376 ifetch 1 ,contr 
+0x4b55 017377 istore 1 ,rega 
+0x4b56 017378 loop usb_tx_loop 
+:      017379 usb_trig:
+0x4b57 017380 setarg 0 
+0x4b58 017381 qset1 pdata 
+0x4b59 017382 hstore 1 ,core_usb_trig 
+0x4b5a 017383 fetcht 1 ,mem_usb_tx_wait 
+0x4b5b 017384 ior temp ,pdata 
+0x4b5c 017385 store 1 ,mem_usb_tx_wait 
+0x4b5d 017386 rtn 
+:      017388 usb_tx_ep2:
+0x4b5e 017389 arg 2 ,queue 
+0x4b5f 017390 arg core_usb_dfifo2 ,rega 
+0x4b60 017391 branch usb_tx_loop 
+:      017393 usb_tx:
+0x4b61 017394 bpatch patch1f_4 ,mem_patch1f 
+0x4b62 017395 fetch 1 ,mem_usb_tx_enable 
+0x4b63 017396 rtn blank 
+0x4b64 017397 fetch 1 ,mem_usb_tx_wait 
+0x4b65 017398 nbranch usb_inwake_state_tx_dispose ,blank 
+0x4b66 017399 fetch 1 ,mem_usb_device_enumeration_endflag 
+0x4b67 017400 branch usb_tx_fifo_release ,blank 
+0x4b68 017401 fetch 1 ,mem_usb_state 
+0x4b69 017402 beq usb_sleep ,usb_windows_wakeup 
+0x4b6a 017403 bne usb_connected ,usb_tx_fifo_release 
+0x4b6b 017404 fetch 1 ,mem_usb_clear_remote_wakeup 
+0x4b6c 017405 nbranch usb_tx_fifo_release ,blank 
+0x4b6d 017406 call usb_tx_data_ep1 
+0x4b6e 017407 branch usb_tx_data_ep2 
+:      017409 usb_tx_data_ep1:
+0x4b6f 017410 fetch 1 ,mem_usb_tx_enable 
+0x4b70 017411 rtnbit0 1 
+0x4b71 017412 fetch 1 ,mem_usb_tx_wait 
+0x4b72 017413 rtnbit1 1 
+0x4b73 017414 fetch 1 ,mem_usb_tx_enable 
+0x4b74 017415 set0 1 ,pdata 
+0x4b75 017416 store 1 ,mem_usb_tx_enable 
+0x4b76 017417 fetch 1 ,mem_usb_ep1_data 
+0x4b77 017418 rtn blank 
+0x4b78 017419 beq usb_ep1_kb ,usb_tx_kb_normal_data 
+0x4b79 017420 branch assert 
+:      017422 usb_tx_data_ep2:
+0x4b7a 017423 fetch 1 ,mem_usb_tx_enable 
+0x4b7b 017424 rtnbit0 2 
+0x4b7c 017425 fetch 1 ,mem_usb_tx_wait 
+0x4b7d 017426 rtnbit1 2 
+0x4b7e 017427 fetch 1 ,mem_usb_tx_enable 
+0x4b7f 017428 set0 2 ,pdata 
+0x4b80 017429 store 1 ,mem_usb_tx_enable 
+0x4b81 017430 fetch 1 ,mem_usb_ep2_data 
+0x4b82 017431 rtn blank 
+0x4b83 017432 beq usb_ep2_ms ,usb_tx_ms_data 
+0x4b84 017433 beq usb_ep2_multikey ,usb_tx_kb_multikey_data 
+0x4b85 017434 branch assert 
+:      017436 usb_tx_fifo_release:
+0x4b86 017438 arg mem_usb_mouse_data ,contw 
+0x4b87 017439 arg 6 ,loopcnt 
+0x4b88 017440 branch memset0 
+:      017442 usb_tx_ms_data:
+0x4b89 017443 fetch 1 ,mem_usb_idle_flag 
+0x4b8a 017444 fetcht 1 ,mem_usb_get_protocol_flag 
+0x4b8b 017445 iand temp ,pdata 
+0x4b8c 017446 branch usb_tx_ms_data_normal_mode ,blank 
+0x4b8d 017447 fetcht 1 ,mem_usb_set_protocol_status 
+0x4b8e 017448 iadd temp ,pdata 
+0x4b8f 017449 beq mac_boot_mode ,usb_tx_ms_data_mac_boot_mode 
+0x4b90 017450 branch usb_tx_ms_data_normal_mode 
+:      017452 usb_tx_ms_data_mac_boot_mode:
+0x4b91 017453 jam 0 ,mem_usb_ep2_data 
+:      017454 usb_tx_ms_data_mac_boot_regroup:
+0x4b92 017455 fetch 1 ,mem_usb_mouse_data + 1 
+0x4b93 017456 beq r_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey 
+0x4b94 017457 beq lr_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey 
+0x4b95 017458 fetch 1 ,mem_usb_mouse_data + 1 
+0x4b96 017459 store 1 ,mem_usb_mouse_data 
+0x4b97 017460 fetch 1 ,mem_usb_mouse_data + 2 
+0x4b98 017461 istore 1 ,contw 
+0x4b99 017462 fetch 1 ,mem_usb_mouse_data + 4 
+0x4b9a 017463 istore 1 ,contw 
+0x4b9b 017464 fetch 1 ,mem_usb_mouse_data + 6 
+0x4b9c 017465 istore 1 ,contw 
+0x4b9d 017466 arg 4 ,loopcnt 
+0x4b9e 017467 arg mem_usb_mouse_data ,contr 
+0x4b9f 017468 branch usb_tx_ep2 
+:      017470 usb_tx_ms_data_normal_mode:
+0x4ba0 017471 jam 0 ,mem_usb_ep2_data 
+:      017472 usb_tx_mac_boot_ms_regroup_r_or_lrkey:
+0x4ba1 017473 arg 8 ,loopcnt 
+0x4ba2 017474 arg mem_usb_mouse_data ,contr 
+0x4ba3 017475 branch usb_tx_ep2 
+:      017477 usb_tx_kb_multikey_data:
+0x4ba4 017478 jam 0 ,mem_usb_ep2_data 
+0x4ba5 017479 arg 3 ,loopcnt 
+0x4ba6 017480 arg mem_usb_kb_multikey ,contr 
+0x4ba7 017481 branch usb_tx_ep2 
+:      017483 usb_tx_kb_normal_data:
+0x4ba8 017484 jam 0 ,mem_usb_ep1_data 
+0x4ba9 017485 arg 8 ,loopcnt 
+0x4baa 017486 arg mem_usb_kb_data ,contr 
+0x4bab 017487 branch usb_tx_ep1 
+:      017489 usb_inwake_state_tx_dispose:
+0x4bac 017490 fetch 1 ,mem_usb_state 
+0x4bad 017491 beq usb_sleep ,usb_clear_tx_wait 
+0x4bae 017492 beq usb_connected ,usb_mac_wakeup_trig 
+0x4baf 017493 rtn 
+:      017494 usb_clear_tx_wait:
+0x4bb0 017495 jam 0 ,mem_usb_tx_wait 
+0x4bb1 017496 rtn 
+:      017497 usb_mac_wakeup_trig:
+0x4bb2 017498 hfetch 1 ,core_usb_config 
+0x4bb3 017499 set1 7 ,pdata 
+0x4bb4 017500 hstore 1 ,core_usb_config 
+0x4bb5 017501 jam 1 ,mem_usb_mac_wakeup_trig 
+0x4bb6 017502 rtn 
+:      017504 usb_mac_wakeup_judge:
+0x4bb7 017505 fetch 1 ,mem_usb_state 
+0x4bb8 017506 rtneq usb_sleep 
+0x4bb9 017507 beq usb_connected ,usb_mac_wakeup 
+0x4bba 017508 rtn 
+:      017509 usb_mac_wakeup:
+0x4bbb 017510 fetch 1 ,mem_usb_mac_wakeup_trig 
+0x4bbc 017511 rtn blank 
+0x4bbd 017512 jam 1 ,mem_usb_wakestate_onetime_flag 
+0x4bbe 017513 branch usb_wakeup 
+:      017515 usb_windows_wakeup:
+0x4bbf 017516 arg timer_wakeup ,queue 
+0x4bc0 017517 call timer_check 
+0x4bc1 017518 nrtn blank 
+:      017519 usb_wakeup:
+0x4bc2 017520 hfetch 1 ,core_usb_config 
+0x4bc3 017521 rtnbit0 7 
+0x4bc4 017522 jam 0xfc ,core_usb_config 
+0x4bc5 017523 nop 30000 
+0x4bc6 017524 jam 0x3c ,core_usb_config 
+0x4bc7 017525 rtn 
+:      017532 hci_rx_h4:
+0x4bc8 017533 bpatch patch1f_5 ,mem_patch1f 
+0x4bc9 017534 fetch 1 ,mem_hci_cmd 
+0x4bca 017535 nrtn blank 
+:      017536 hci_rx_h4_1:
+0x4bcb 017537 call hci_h4_parse_packet 
+0x4bcc 017538 ncall h4_rx_discard_packet ,user 
+0x4bcd 017539 rtn 
+:      017541 hci_h4_parse_packet:
+0x4bce 017542 bpatch patch1f_6 ,mem_patch1f 
+0x4bcf 017543 copy contru ,rega 
+0x4bd0 017544 arg 4 ,temp 
+0x4bd1 017545 ifetch 1 ,contru 
+0x4bd2 017546 beq hci_h4_type_cmd ,hci_h4_parse_packet_wait_len 
+0x4bd3 017547 increase 1 ,temp 
+0x4bd4 017548 beq hci_h4_type_acl ,hci_h4_parse_packet_wait_len 
+0x4bd5 017549 copy contru ,pdata 
+0x4bd6 017550 hstore 2 ,core_uart_rrptr 
+0x4bd7 017551 rtn 
+:      017552 hci_h4_parse_packet_wait_len:
+0x4bd8 017553 hfetch 2 ,core_uart_rxitems 
+0x4bd9 017554 isub temp ,null 
+0x4bda 017555 nbranch hci_h4_parse_packet_wait_len ,positive 
+0x4bdb 017557 disable user 
+0x4bdc 017558 copy rega ,contru 
+0x4bdd 017559 call h4_get_rx_payload_len 
+0x4bde 017560 iadd temp ,temp 
+:      017561 hci_h4_parse_packet_wait:
+0x4bdf 017562 hfetch 2 ,core_uart_rxitems 
+0x4be0 017563 isub temp ,null 
+0x4be1 017564 nbranch hci_h4_parse_packet_wait ,positive 
+0x4be2 017565 copy rega ,contru 
+0x4be3 017566 ifetch 1 ,contru 
+0x4be4 017567 beq hci_h4_type_cmd ,process_hci_cmd 
+0x4be5 017568 branch assert 
+:      017570 h4_rx_discard_packet:
+0x4be6 017571 bpatch patch1f_7 ,mem_patch1f 
+0x4be7 017572 hfetch 2 ,core_uart_rrptr 
+0x4be8 017573 iforce contru 
+0x4be9 017574 call h4_get_rx_payload_len 
+0x4bea 017575 iadd contru ,contru 
+0x4beb 017576 deposit contru 
+0x4bec 017577 hstore 2 ,core_uart_rrptr 
+0x4bed 017578 rtn 
+:      017583 h4_get_rx_payload_len:
+0x4bee 017584 ifetch 1 ,contru 
+0x4bef 017585 increase 2 ,contru 
+0x4bf0 017586 beq hci_h4_type_acl ,h4_get_rx_payload_len_acl 
+0x4bf1 017587 ifetch 1 ,contru 
+0x4bf2 017588 rtn 
+:      017589 h4_get_rx_payload_len_acl:
+0x4bf3 017590 ifetch 2 ,contru 
+0x4bf4 017591 rtn 
+:      017593 h4_get_tx_ptr:
+0x4bf5 017594 hfetch 2 ,core_uart_twptr 
+0x4bf6 017595 increase -5 ,contwu 
+0x4bf7 017596 iadd contwu ,contwu 
+0x4bf8 017597 rtn 
+:      017599 h4_send_packet_event:
+0x4bf9 017600 arg hci_h4_type_event ,temp 
+0x4bfa 017601 branch h4_send_packet 
+:      017602 h4_send_packet_acl:
+0x4bfb 017603 arg hci_h4_type_acl ,temp 
+:      017604 h4_send_packet:
+0x4bfc 017605 bpatchx patch20_0 ,mem_patch20 
+0x4bfd 017606 increase 1 ,loopcnt 
+0x4bfe 017607 hfetch 2 ,core_uart_twptr 
+0x4bff 017608 copy pdata ,contwu 
+0x4c00 017609 copy loopcnt ,pdata 
+0x4c01 017610 istoret 1 ,contwu 
+0x4c02 017611 increase -1 ,pdata 
+0x4c03 017612 iadd contwu ,contwu 
+0x4c04 017613 copy contwu ,pdata 
+0x4c05 017614 store 2 ,mem_hci_acl_tx_trigger_wptr 
+0x4c06 017615 copy temp ,pdata 
+0x4c07 017616 rtneq hci_h4_type_acl 
+0x4c08 017617 fetch 2 ,mem_hci_acl_tx_trigger_wptr 
+0x4c09 017618 hstore 2 ,core_uart_twptr 
+0x4c0a 017619 branch h4_send_acl_trigger_clear 
+:      017622 h4_send_acl_trigger_clear:
+0x4c0b 017623 setarg 0 
+0x4c0c 017624 store 2 ,mem_hci_acl_tx_trigger_wptr 
+0x4c0d 017625 rtn 
+:      017632 hci_init:
+0x4c0e 017633 rtn wake 
+0x4c0f 017634 setarg hci_idle_dispatch 
+0x4c10 017635 store 2 ,mem_cb_idle_process 
+0x4c11 017637 setarg uart_baud_115200 
+0x4c12 017638 store uart_baud_len ,mem_baud 
+:      017639 hci_lpm_init:
+0x4c13 017640 setarg mem_h5rx_buf 
+0x4c14 017641 hstore 2 ,core_uart_rsaddr 
+0x4c15 017642 setarg mem_h5rx_buf_end 
+0x4c16 017643 hstore 2 ,core_uart_readdr 
+0x4c17 017644 setarg mem_h5tx_buf 
+0x4c18 017645 hstore 2 ,core_uart_tsaddr 
+0x4c19 017646 call hci_sel_init 
+:      017647 hci_reinit:
+0x4c1a 017648 jam 0x0 ,core_uart_ctrl 
+0x4c1b 017649 setarg mem_h5tx_buf 
+0x4c1c 017650 hstore 2 ,core_uart_twptr 
+0x4c1d 017651 hstore 2 ,core_uart_trptrp 
+0x4c1e 017652 setarg mem_h5rx_buf 
+0x4c1f 017653 hstore 2 ,core_uart_rrptr 
+0x4c20 017654 store 2 ,mem_h5rx_rptr 
+:      017655 hci_init_common:
+0x4c21 017656 hfetch 2 ,core_clkoff 
+0x4c22 017657 set0 clock_off_uart ,pdata 
+0x4c23 017658 hstore 2 ,core_clkoff 
+0x4c24 017659 call uart_set_baud_by_mem 
+0x4c25 017660 jam uartclk_dpll ,core_uart_clksel 
+0x4c26 017661 jam uart_ctrl_h4 ,core_uart_ctrl 
+0x4c27 017662 rtn 
+:      017664 hci_sel_init:
+0x4c28 017665 setarg mem_h5tx_buf_end 
+0x4c29 017666 hstore 2 ,core_uart_teaddr 
+0x4c2a 017667 hfetch 1 ,core_gpio_sel1 
+0x4c2b 017668 or_into 0x07 ,pdata 
+0x4c2c 017669 hstore 1 ,core_gpio_sel1 
+0x4c2d 017670 rtn 
+:      017673 hci_rx_packet:
+0x4c2e 017674 bpatchx patch20_1 ,mem_patch20 
+0x4c2f 017675 hfetch 1 ,core_uart_status 
+0x4c30 017676 iforce regb 
+0x4c31 017677 bbit0 uart_status_rx_fifo_empty ,hci_rx_packet_cont 
+0x4c32 017678 hfetch 2 ,core_uart_rxitems 
+0x4c33 017679 iforce regc 
+0x4c34 017680 arg 0x44f ,temp 
+0x4c35 017681 isub temp ,null 
+0x4c36 017682 nrtn zero 
+:      017683 hci_rx_packet_cont:
+0x4c37 017684 hfetch 2 ,core_uart_rrptr 
+0x4c38 017685 iforce contru 
+0x4c39 017686 branch hci_rx_h4 
+:      017688 uart_send_byte:
+0x4c3a 017689 hfetcht 1 ,core_uart_status 
+0x4c3b 017690 isolate1 6 ,temp 
+0x4c3c 017691 branch uart_send_byte ,true 
+0x4c3d 017692 hstore 1 ,core_uart_txd 
+0x4c3e 017693 rtn 
+:      017695 process_hci_cmd:
+0x4c3f 017696 bpatchx patch20_2 ,mem_patch20 
+0x4c40 017697 fetch 1 ,mem_hci_cmd 
+0x4c41 017698 branch process_hci_cmd_cont ,blank 
+0x4c42 017699 enable user 
+0x4c43 017700 rtn 
+:      017701 process_hci_cmd_cont:
+0x4c44 017702 ifetch 2 ,contru 
+0x4c45 017703 iforce alarm 
+0x4c46 017704 iforce queue 
+0x4c47 017705 ifetch 1 ,contru 
+0x4c48 017706 iforce temp 
+0x4c49 017707 rshift2 alarm ,pdata 
+0x4c4a 017708 rshift8 pdata ,pdata 
+0x4c4b 017709 beq hci_ogf_vendor_specific ,phci_grp_vendor_specific 
+0x4c4c 017710 rtn 
+:      017713 phci_grp_vendor_specific:
+0x4c4d 017714 bpatchx patch20_3 ,mem_patch20 
+0x4c4e 017715 deposit queue 
+0x4c4f 017716 beq hci_vendor_cmd_reset ,hci_normal_reply 
+0x4c50 017717 beq hci_vendor_cmd_chipid ,phci_grp_vendor_chipid 
+0x4c51 017718 beq hci_vendor_cmd_baud ,phci_grp_vendor_baud 
+0x4c52 017719 beq hci_vendor_cmd_patch ,phci_grp_vendor_patch 
+0x4c53 017720 beq hci_vendor_cmd_patch_done ,phci_grp_vendor_done 
+0x4c54 017721 beq hci_vendor_cmd_echo ,hci_normal_reply 
+0x4c55 017722 beq hci_vendor_cmd_bdaddr ,phci_grp_vendor_bdaddr 
+0x4c56 017723 beq hci_vendor_cmd_enter_lpm ,phci_grp_vendor_enter_lpm 
+0x4c57 017725 beq hci_vendor_cmd_mem ,phci_grp_vendor_mem 
+0x4c58 017726 beq hci_vendor_cmd_eep ,phci_grp_vendor_eep 
+0x4c59 017727 beq hci_vendor_cmd_patch_sec_init ,phci_grp_vendor_patch_sec_init 
+0x4c5a 017728 beq hci_vendor_cmd_patch_sec ,phci_grp_vendor_patch_sec 
+0x4c5b 017729 branch hci_normal_reply 
+:      017731 phci_grp_vendor_enter_lpm:
+0x4c5c 017732 call hci_normal_reply 
+0x4c5d 017733 call wait_uarttx 
+0x4c5e 017734 call gpio_pu_uart_tx 
+:      017735 hci_enter_lpm:
+0x4c5f 017736 call app_put_lpm_wake_lock 
+0x4c60 017737 call app_l2cap_flow_control_enable 
+0x4c61 017738 branch gpio_rx_config_input_with_pu 
+:      017740 hci_exit_lpm:
+0x4c62 017741 jam hci_rx_ready ,mem_hci_lt_rx_state 
+0x4c63 017742 call app_get_lpm_wake_lock 
+0x4c64 017743 call hci_lpm_init 
+0x4c65 017744 branch app_l2cap_flow_control_disable 
+:      017746 phci_grp_vendor_chipid:
+0x4c66 017747 call hci_get_cmd_complete_ptr 
+0x4c67 017748 hfetch 2 ,core_chipid 
+0x4c68 017749 istore 2 ,contwu 
+0x4c69 017750 force 6 ,loopcnt 
+0x4c6a 017751 branch hci_command_complete 
+:      017753 phci_grp_vendor_baud:
+0x4c6b 017754 ifetch 2 ,contru 
+0x4c6c 017755 store 2 ,mem_baud 
+0x4c6d 017756 hstore 2 ,core_uart_baud 
+0x4c6e 017757 rtn 
+:      017760 phci_grp_vendor_patch_common:
+0x4c6f 017762 ifetch 1 ,contru 
+0x4c70 017763 copy pdata ,temp 
+0x4c71 017764 hstore 1 ,core_ucode_low 
+0x4c72 017765 ifetch 1 ,contru 
+0x4c73 017766 iadd temp ,temp 
+0x4c74 017767 set1 7 ,pdata 
+0x4c75 017768 hstore 1 ,core_ucode_ctrl 
+0x4c76 017769 ifetch 1 ,contru 
+0x4c77 017770 iadd temp ,temp 
+0x4c78 017771 copy pdata ,loopcnt 
+0x4c79 017772 rtn 
+:      017774 phci_grp_vendor_patch:
+0x4c7a 017775 bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad 
+0x4c7b 017776 call phci_grp_vendor_patch_common 
+:      017777 phci_grp_vendor_patch_loop:
+0x4c7c 017778 ifetch 1 ,contru 
+0x4c7d 017779 hstore 1 ,core_ucode_data 
+0x4c7e 017780 iadd temp ,temp 
+0x4c7f 017781 loop phci_grp_vendor_patch_loop 
+:      017782 phci_grp_vendor_patch_check_sum:
+0x4c80 017783 and temp ,0xff ,temp 
+0x4c81 017784 ifetch 1 ,contru 
+0x4c82 017785 isub temp ,null 
+0x4c83 017786 nbranch phci_grp_vendor_patch_bad ,zero 
+0x4c84 017787 branch hci_normal_reply 
+:      017790 phci_grp_vendor_patch_sec:
+0x4c85 017791 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad 
+0x4c86 017792 call phci_grp_vendor_patch_common 
+0x4c87 017793 store 8 ,mem_pdatatemp 
+:      017794 phci_grp_vendor_patch_sec_loop:
+0x4c88 017795 call do_aes_cbc 
+0x4c89 017796 arg 16 ,loopcnt 
+0x4c8a 017797 arg mem_temp_block0 ,contw 
+0x4c8b 017798 call load_uart_sum_loop 
+0x4c8c 017799 storet 8 ,mem_temp 
+0x4c8d 017800 arg mem_temp_block2 ,contw 
+0x4c8e 017801 call store_aes_result 
+0x4c8f 017802 arg mem_temp_block2 ,rega 
+0x4c90 017803 arg mem_temp_block0 ,regb 
+0x4c91 017804 arg mem_temp_block3 ,contw 
+0x4c92 017805 call xor16 
+0x4c93 017806 arg 16 ,loopcnt 
+0x4c94 017807 arg mem_temp_block3 ,contr 
+0x4c95 017808 call load_ucode_only_loop 
+0x4c96 017809 fetcht 8 ,mem_temp 
+0x4c97 017810 fetch 8 ,mem_pdatatemp 
+0x4c98 017811 increase -16 ,pdata 
+0x4c99 017812 store 8 ,mem_pdatatemp 
+0x4c9a 017813 nbranch phci_grp_vendor_patch_sec_loop ,blank 
+0x4c9b 017814 branch phci_grp_vendor_patch_check_sum 
+:      017816 load_ucode_only_loop:
+0x4c9c 017817 ifetch 1 ,contr 
+0x4c9d 017818 hstore 1 ,core_ucode_data 
+0x4c9e 017819 loop load_ucode_only_loop 
+0x4c9f 017820 rtn 
+:      017822 load_uart_sum_loop:
+0x4ca0 017823 ifetch 1 ,contru 
+0x4ca1 017824 istore 1 ,contw 
+0x4ca2 017825 iadd temp ,temp 
+0x4ca3 017826 loop load_uart_sum_loop 
+0x4ca4 017827 rtn 
+:      017829 phci_grp_vendor_patch_sec_init:
+0x4ca5 017830 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad 
+0x4ca6 017831 arg 0 ,temp 
+0x4ca7 017832 arg 16 ,loopcnt 
+0x4ca8 017833 arg mem_temp_block0 ,contw 
+0x4ca9 017834 call load_uart_sum_loop 
+0x4caa 017835 hfetch 1 ,core_gpio_key2 
+0x4cab 017836 and_into 0xfd ,pdata 
+0x4cac 017837 hstore 1 ,core_gpio_key2 
+0x4cad 017838 arg mem_temp_block0 ,contr 
+0x4cae 017839 arg 16 ,loopcnt 
+0x4caf 017840 call aes_load_data 
+0x4cb0 017841 call aes_init 
+0x4cb1 017842 call aes_clear_data 
+0x4cb2 017843 branch phci_grp_vendor_patch_check_sum 
+:      017846 phci_grp_vendor_done:
+0x4cb3 017847 arg 0x20 ,loopcnt 
+0x4cb4 017848 arg mem_patch00 ,contw 
+0x4cb5 017849 arg 0 ,temp 
+:      017850 phci_grp_vendor_done_loop:
+0x4cb6 017851 ifetch 1 ,contru 
+0x4cb7 017852 istore 1 ,contw 
+0x4cb8 017853 iadd temp ,temp 
+0x4cb9 017854 loop phci_grp_vendor_done_loop 
+0x4cba 017855 and temp ,0xff ,temp 
+0x4cbb 017856 ifetch 1 ,contru 
+0x4cbc 017857 isub temp ,null 
+0x4cbd 017858 nbranch phci_grp_vendor_patch_bad ,zero 
+0x4cbe 017859 jam 0 ,core_ucode_ctrl 
+0x4cbf 017860 call hci_normal_reply 
+0x4cc0 017861 call h4_rx_discard_packet 
+0x4cc1 017862 call clear_key_buf 
+0x4cc2 017863 call wait_uarttx 
+0x4cc3 017864 branch soft_reset 
+:      017866 phci_grp_vendor_patch_bad:
+0x4cc4 017867 jam 0 ,core_ucode_ctrl 
+0x4cc5 017868 branch start 
+:      017870 phci_grp_vendor_bdaddr:
+0x4cc6 017871 ifetch 6 ,contru 
+0x4cc7 017872 store 6 ,mem_lap 
+0x4cc8 017873 branch hci_normal_reply 
+:      017876 phci_grp_vendor_mem:
+0x4cc9 017877 ifetch 1 ,contru 
+0x4cca 017878 store 1 ,mem_hci_curr_len 
+0x4ccb 017879 copy pdata ,loopcnt 
+0x4ccc 017880 ifetch 2 ,contru 
+0x4ccd 017881 store 2 ,mem_hci_curr_target 
+0x4cce 017882 copy pdata ,contw 
+0x4ccf 017883 call uart_copy_rx_bytes 
+0x4cd0 017884 branch hci_normal_reply 
+:      017887 phci_grp_vendor_eep:
+0x4cd1 017888 ifetch 1 ,contru 
+0x4cd2 017889 store 1 ,mem_hci_curr_len 
+0x4cd3 017890 copy pdata ,loopcnt 
+0x4cd4 017891 ifetch 2 ,contru 
+0x4cd5 017892 store 2 ,mem_hci_curr_target 
+0x4cd6 017893 arg mem_l2cap_rxbuff1 ,contw 
+0x4cd7 017894 call uart_copy_rx_bytes 
+0x4cd8 017895 fetcht 1 ,mem_hci_curr_len 
+0x4cd9 017896 arg mem_l2cap_rxbuff1 ,rega 
+0x4cda 017897 fetch 2 ,mem_hci_curr_target 
+0x4cdb 017898 branch iicd_write_ota_data 
+:      017903 hci_normal_reply:
+0x4cdc 017904 force 4 ,loopcnt 
+:      017905 hci_command_complete:
+0x4cdd 017906 call hci_get_payload_ptr 
+0x4cde 017907 force 0x1 ,pdata 
+0x4cdf 017908 istore 1 ,contwu 
+0x4ce0 017909 deposit alarm 
+0x4ce1 017910 istore 3 ,contwu 
+0x4ce2 017911 force hci_event_command_complete ,queue 
+:      017912 hci_send_event:
+0x4ce3 017913 bpatchx patch20_4 ,mem_patch20 
+0x4ce4 017914 call hci_get_packet_ptr 
+0x4ce5 017915 deposit queue 
+0x4ce6 017916 istore 1 ,contwu 
+0x4ce7 017917 deposit loopcnt 
+0x4ce8 017918 istore 1 ,contwu 
+:      017919 hci_send_event_raw:
+0x4ce9 017920 force 5 ,queue 
+0x4cea 017921 increase 2 ,loopcnt 
+:      017922 hci_send_packet:
+0x4ceb 017923 branch h4_send_packet_event 
+:      017925 hci_send_commu_ready_event:
+0x4cec 017926 force hci_event_vendor_specific ,queue 
+0x4ced 017927 call hci_get_payload_ptr 
+0x4cee 017928 setarg hci_vendor_event_commu_ready 
+0x4cef 017929 istore 1 ,contwu 
+0x4cf0 017930 force 1 ,loopcnt 
+0x4cf1 017931 branch hci_send_event 
+:      017933 hci_get_cmd_complete_ptr:
+0x4cf2 017934 force 12 ,contwu 
+0x4cf3 017935 branch hci_get_tx_ptr 
+:      017937 hci_get_payload_ptr:
+0x4cf4 017938 force 8 ,contwu 
+0x4cf5 017939 branch hci_get_tx_ptr 
+:      017941 hci_get_packet_ptr:
+0x4cf6 017942 force 6 ,contwu 
+:      017943 hci_get_tx_ptr:
+0x4cf7 017944 branch h4_get_tx_ptr 
+:      017948 calc_tx_crc16:
+0x4cf8 017949 pulse crc16 
+0x4cf9 017950 enable enable_crc 
+:      017951 crcloop:
+0x4cfa 017952 ifetch 1 ,contwu 
+0x4cfb 017953 inject bucket ,8 
+0x4cfc 017954 loop crcloop 
+0x4cfd 017955 enable enable_parity 
+0x4cfe 017956 inject bucket ,16 
+0x4cff 017957 disable enable_parity 
+0x4d00 017958 disable enable_crc 
+0x4d01 017959 disable crc16 
+0x4d02 017960 byteswap pdata ,pdata 
+0x4d03 017961 rtn 
+:      017965 cmd_exit:
+0x4d04 017966 jam 0 ,mem_hci_cmd 
+0x4d05 017967 rtn 
+:      017968 cmd_check_plap:
+0x4d06 017969 fetch 6 ,mem_hci_plap 
+0x4d07 017970 fetcht 6 ,mem_plap 
+0x4d08 017971 isub temp ,null 
+0x4d09 017972 rtn 
+:      017977 cmd_pair:
+0x4d0a 017978 fetch 1 ,mem_op 
+0x4d0b 017979 bbit1 op_inrand_req ,cmd_pair_passive 
+0x4d0c 017980 call tid_initiate 
+0x4d0d 017981 jam lmp_in_rand ,mem_lmo_opcode2 
+0x4d0e 017982 branch cmd_exit 
+:      017983 cmd_pair_passive:
+0x4d0f 017984 set0 op_inrand_req ,pdata 
+0x4d10 017985 store 1 ,mem_op 
+0x4d11 017986 call lmp_accept_inrand 
+0x4d12 017987 setarg 0 
+0x4d13 017988 setflag master ,smap_lmptid ,pdata 
+0x4d14 017989 store 1 ,mem_lmo_tid2 
+0x4d15 017990 branch cmd_exit 
+0x4d16 017991 rtn 
+:      017992 cmd_in_sniff:
+0x4d17 017993 jam lmp_sniff_req ,mem_lmo_opcode2 
+0x4d18 017994 arg mem_sniff_payload ,contw 
+0x4d19 017995 setarg 0 
+0x4d1a 017996 isolate1 27 ,clke_bt 
+0x4d1b 017997 setflag true ,1 ,pdata 
+0x4d1c 017998 istore 1 ,contw 
+0x4d1d 017999 setarg 0 
+0x4d1e 018000 istore 2 ,contw 
+0x4d1f 018001 fetch 2 ,mem_sniff_param_interval 
+0x4d20 018002 istore 2 ,contw 
+0x4d21 018003 fetch 1 ,mem_sniff_param_attempt 
+0x4d22 018004 istore 2 ,contw 
+0x4d23 018005 fetch 1 ,mem_sniff_param_timeout 
+0x4d24 018006 istore 2 ,contw 
+0x4d25 018007 branch cmd_exit 
+:      018009 cmd_exit_sniff:
+0x4d26 018010 jam lmp_unsniff_req ,mem_lmo_opcode2 
+0x4d27 018011 branch cmd_exit 
+:      018013 hci_idle_dispatch:
+0x4d28 018014 call gpio_check_uart_state 
+0x4d29 018015 rtn true 
+0x4d2a 018016 arg uart_wakeup_rx ,temp 
+0x4d2b 018017 call gpio_get_bit 
+0x4d2c 018018 nbranch uart_wake_up ,true 
+0x4d2d 018019 jam hci_rx_wake ,mem_hci_lt_rx_state 
+0x4d2e 018020 rtn 
+:      018021 uart_wake_up:
+0x4d2f 018022 fetch 1 ,mem_hci_lt_rx_state 
+0x4d30 018023 rtnne hci_rx_wake 
+0x4d31 018024 call hci_exit_lpm 
+0x4d32 018025 branch hci_send_commu_ready_event 
+:      018039 hid_rx_process:
+0x4d33 018040 bpatchx patch20_5 ,mem_patch20 
+0x4d34 018041 fetch 2 ,mem_l2cap_payload_ptr 
+0x4d35 018042 copy pdata ,contr 
+0x4d36 018043 ifetch 1 ,contr 
+0x4d37 018044 and pdata ,0x0f ,temp 
+0x4d38 018045 rshift4 pdata ,pdata 
+0x4d39 018046 beq hid_type_set_idle ,hid_rx_process_handshake 
+0x4d3a 018047 beq hid_type_set_protocol ,hid_rx_process_handshake 
+0x4d3b 018048 beq hid_type_data ,hid_rx_process_data 
+0x4d3c 018049 beq hid_type_set_report ,hid_rx_process_set_report 
+0x4d3d 018050 beq hid_type_control ,hid_rx_process_hid_control 
+0x4d3e 018051 rtn 
+:      018053 hid_rx_process_hid_control:
+0x4d3f 018054 copy temp ,pdata 
+0x4d40 018055 beq hid_control_p_virtualcableunplug ,hid_rx_process_virtual_cable_unplug 
+0x4d41 018056 beq hid_control_p_suspend ,hid_rx_process_suspend 
+0x4d42 018057 rtn 
+:      018059 hid_rx_process_virtual_cable_unplug:
+0x4d43 018060 jam bt_evt_virtual_cable_unplug ,mem_fifo_temp 
+0x4d44 018061 call ui_ipc_send_event 
+0x4d45 018062 fetch 1 ,mem_device_option 
+0x4d46 018063 rtnbit0 dvc_op_mouse 
+0x4d47 018064 copy temp ,pdata 
+0x4d48 018065 beq hid_control_p_virtualcableunplug ,mouse_irtual_cable_unplug 
+0x4d49 018066 rtn 
+:      018067 hid_rx_process_suspend:
+0x4d4a 018068 rtn 
+:      018070 hid_rx_process_set_report:
+0x4d4b 018071 call hid_rx_process_data 
+0x4d4c 018072 arg 0x01 ,rega 
+0x4d4d 018073 call hid_malloc_tx_buff 
+0x4d4e 018074 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x4d4f 018075 istore 2 ,contw 
+0x4d50 018076 setarg 0x00 
+0x4d51 018077 istore 1 ,contw 
+0x4d52 018078 rtn 
+:      018080 hid_rx_process_handshake:
+0x4d53 018081 arg 1 ,rega 
+0x4d54 018082 call hid_malloc_tx_buff 
+0x4d55 018083 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x4d56 018084 istore 2 ,contw 
+0x4d57 018085 setarg 0 
+0x4d58 018086 istore 1 ,contw 
+0x4d59 018087 jam 1 ,mem_ui_data_txbuff_length 
+0x4d5a 018088 fetch 1 ,mem_hid_control_state 
+0x4d5b 018089 set1 l2cap_channel_hid_handshake_done 
+0x4d5c 018090 store 1 ,mem_hid_control_state 
+0x4d5d 018091 jam bt_evt_hid_handshake ,mem_fifo_temp 
+0x4d5e 018092 branch ui_ipc_send_event 
+:      018094 hid_rx_process_data:
+0x4d5f 018095 ifetch 1 ,contr 
+0x4d60 018096 beq hid_report_id_kb ,hid_rx_process_data_hid_kb 
+0x4d61 018097 rtn 
+:      018099 hid_rx_process_data_hid_kb:
+0x4d62 018100 rtn 
+:      018103 hid_malloc_tx_buff:
+0x4d63 018104 call l2cap_malloc 
+0x4d64 018105 copy rega ,temp 
+0x4d65 018106 storet 1 ,mem_ui_data_txbuff_length 
+0x4d66 018107 copy pdata ,contw 
+0x4d67 018108 copy rega ,pdata 
+0x4d68 018109 istore 2 ,contw 
+0x4d69 018110 rtn 
+:      018127 l2cap_init:
+0x4d6a 018128 branch l2cap_init_wake ,wake 
+:      018129 l2cap_init_work:
+0x4d6b 018130 setarg mem_l2cap_xmem_end 
+0x4d6c 018131 arg mem_l2cap_xmem_start ,contw 
+0x4d6d 018132 isub contw ,loopcnt 
+0x4d6e 018133 call clear_mem 
+:      018134 l2cap_init_wake:
+0x4d6f 018135 bpatchx patch20_6 ,mem_patch20 
+0x4d70 018136 setarg mem_sdp_mem_end 
+0x4d71 018137 arg mem_sdp_mem_start ,contw 
+0x4d72 018138 isub contw ,loopcnt 
+0x4d73 018139 call clear_mem 
+0x4d74 018140 setarg mem_l2cap_mem_end 
+0x4d75 018141 arg mem_l2cap_mem_start ,contw 
+0x4d76 018142 isub contw ,loopcnt 
+0x4d77 018143 call clear_mem 
+0x4d78 018144 branch l2cap_lpm_load_txbuf 
+:      018146 process_rx_l2cap_pkt:
+0x4d79 018147 bpatchx patch20_7 ,mem_patch20 
+0x4d7a 018148 copy contr ,temp 
+0x4d7b 018151 copy temp ,contr 
+0x4d7c 018152 ifetch 2 ,contr 
+0x4d7d 018153 store 2 ,mem_l2cap_rx_pkt_length 
+0x4d7e 018154 ifetch 2 ,contr 
+0x4d7f 018155 store 2 ,mem_l2cap_rx_cid 
+0x4d80 018156 deposit contr 
+0x4d81 018157 store 2 ,mem_l2cap_payload_ptr 
+0x4d82 018158 fetch 1 ,memui_reconnect_mode 
+0x4d83 018159 beq no_reconnection ,l2cap_rx_multiplexing 
+0x4d84 018160 branch ml2cap_rx_multiplexing 
+:      018162 l2cap_rx_multiplexing:
+0x4d85 018163 fetch 2 ,mem_l2cap_rx_pkt_length 
+0x4d86 018164 branch l2cap_rx_reset_state ,blank 
+0x4d87 018165 bpatchx patch21_0 ,mem_patch21 
+0x4d88 018166 fetch 1 ,mem_l2cap_rx_cid 
+0x4d89 018167 beq l2cap_signal_channel ,l2cap_call_proc_signal 
+:      018168 l2cap_rx_multiplexing0:
+0x4d8a 018169 beq l2cap_sdp_channel ,l2cap_call_proc_sdp 
+0x4d8b 018170 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm 
+0x4d8c 018171 beq l2cap_hid_control_channel ,l2cap_call_proc_hid 
+0x4d8d 018172 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid 
+0x4d8e 018173 branch l2cap_rx_reset_state 
+:      018175 l2cap_check_map:
+0x4d8f 018178 bpatchx patch21_1 ,mem_patch21 
+0x4d90 018179 call l2cap_malloc_get_full_map 
+0x4d91 018180 fetch 1 ,mem_used_map 
+0x4d92 018181 beq 0 ,set_pdata_0 
+0x4d93 018182 beq 1 ,set_pdata_0 
+0x4d94 018183 beq 2 ,set_pdata_0 
+0x4d95 018184 beq 3 ,set_pdata_0 
+0x4d96 018185 beq 0x81 ,set_pdata_0 
+0x4d97 018186 beq 0xc0 ,set_pdata_0 
+0x4d98 018187 beq 0x80 ,set_pdata_0 
+0x4d99 018188 beq 0x40 ,set_pdata_0 
+0x4d9a 018189 rtn 
+:      018191 set_pdata_0:
+0x4d9b 018192 setarg 0 
+0x4d9c 018193 rtn 
+:      018196 l2cap_call_proc_signal:
+0x4d9d 018197 call l2cap_check_map 
+0x4d9e 018198 nrtn blank 
+:      018199 l2cap_call_proc_signal0:
+0x4d9f 018200 call l2cap_malloc_signal_channel 
+0x4da0 018201 call l2cap_process_signal_pkt 
+0x4da1 018202 fetcht 2 ,mem_l2cap_signal_tx_length 
+0x4da2 018203 branch l2cap_call_proc_no_reply ,blank 
+0x4da3 018204 call l2cap_get_signal_tx_buff 
+0x4da4 018205 fetch 2 ,mem_l2cap_signal_tx_length 
+0x4da5 018206 istore 2 ,contw 
+0x4da6 018207 force l2cap_signal_channel ,pdata 
+0x4da7 018208 istore 2 ,contw 
+0x4da8 018209 branch l2cap_rx_reset_state 
+:      018211 l2cap_call_proc_sigal_pending:
+0x4da9 018212 fetch 1 ,mem_l2cap_pending_item 
+0x4daa 018213 rtn blank 
+0x4dab 018214 copy pdata ,rega 
+0x4dac 018215 bpatchx patch21_2 ,mem_patch21 
+0x4dad 018216 fetch 4 ,mem_l2cap_sdpres_delay_time 
+0x4dae 018217 arg 0x100 ,temp 
+0x4daf 018218 iadd temp ,temp 
+0x4db0 018219 copy clkn_bt ,pdata 
+0x4db1 018220 isub temp ,null 
+0x4db2 018221 nrtn positive 
+0x4db3 018222 jam 0 ,mem_l2cap_pending_item 
+0x4db4 018223 copy rega ,pdata 
+0x4db5 018224 beq l2cap_sdp_channel ,l2cap_sdp_conn_succ 
+0x4db6 018225 branch assert 
+:      018226 l2cap_sdp_conn_succ:
+0x4db7 018227 arg 0 ,debug 
+0x4db8 018228 call l2cap_malloc_signal_channel 
+0x4db9 018229 call restore_l2cap_req_param 
+0x4dba 018230 call l2cap_get_signal_tx_payload 
+0x4dbb 018231 call save_cont_pointers 
+0x4dbc 018232 call send_connection_sdp_res 
+0x4dbd 018233 call l2cap_get_signal_tx_buff 
+0x4dbe 018235 setarg 0x000c 
+0x4dbf 018236 istore 2 ,contw 
+0x4dc0 018237 force l2cap_signal_channel ,pdata 
+0x4dc1 018238 istore 2 ,contw 
+0x4dc2 018239 branch l2cap_rx_reset_state 
+:      018243 l2cap_reset_sdp_map:
+0x4dc3 018244 bpatchx patch21_3 ,mem_patch21 
+0x4dc4 018245 fetch 2 ,mem_sdp_tx_pkt_length 
+0x4dc5 018246 increase 4 ,pdata 
+0x4dc6 018247 rshift4 pdata ,pdata 
+0x4dc7 018248 rshift3 pdata ,pdata 
+0x4dc8 018249 add pdata ,1 ,temp 
+0x4dc9 018250 arg mem_tx_fifo3 ,contr 
+0x4dca 018251 ifetch 3 ,contr 
+0x4dcb 018252 rtn blank 
+0x4dcc 018253 store 3 ,mem_tx_fifo_map_temp 
+0x4dcd 018254 fetch 1 ,mem_tx_fifo_map_temp 
+0x4dce 018255 copy pdata ,rega 
+0x4dcf 018256 call check_l2cap_map 
+0x4dd0 018257 copy regb ,pdata 
+0x4dd1 018258 store 1 ,mem_tx_fifo3 
+0x4dd2 018259 rtn 
+:      018261 check_l2cap_map:
+0x4dd3 018262 arg 0 ,queue 
+0x4dd4 018263 arg 0 ,regb 
+:      018265 check_l2cap_map_loop:
+0x4dd5 018266 sub queue ,7 ,null 
+0x4dd6 018267 nrtn positive 
+0x4dd7 018268 qisolate1 rega 
+0x4dd8 018269 branch check_l2cap_map_used ,true 
+0x4dd9 018270 branch check_l2cap_map_used2 
+:      018272 check_l2cap_map_used:
+0x4dda 018273 copy temp ,pdata 
+0x4ddb 018274 branch check_l2cap_map_used2 ,blank 
+0x4ddc 018275 qset1 regb 
+0x4ddd 018276 increase -1 ,temp 
+:      018278 check_l2cap_map_used2:
+0x4dde 018279 increase 1 ,queue 
+0x4ddf 018280 branch check_l2cap_map_loop 
+:      018282 l2cap_call_proc_sdp:
+0x4de0 018283 call l2cap_malloc_is_fifo_empty 
+0x4de1 018284 nrtn blank 
+0x4de2 018285 call l2cap_check_map 
+0x4de3 018286 nrtn blank 
+0x4de4 018287 call l2cap_malloc_sdp_channel 
+0x4de5 018288 call sdp_process 
+0x4de6 018289 call l2cap_reset_sdp_map 
+0x4de7 018290 branch l2cap_call_proc_sdp_common 
+:      018293 ml2cap_call_proc_sdp:
+0x4de8 018294 call l2cap_malloc_is_fifo_empty 
+0x4de9 018295 nrtn blank 
+0x4dea 018296 call l2cap_malloc_sdp_channel 
+0x4deb 018297 call sdp_process 
+:      018298 l2cap_call_proc_sdp_common:
+0x4dec 018299 call l2cap_get_sdp_tx_buff 
+0x4ded 018300 fetch 2 ,mem_sdp_tx_pkt_length 
+0x4dee 018301 branch l2cap_call_proc_no_reply ,blank 
+0x4def 018302 istore 2 ,contw 
+0x4df0 018303 fetch 2 ,mem_sdp_remote_cid 
+0x4df1 018304 istore 2 ,contw 
+0x4df2 018305 branch l2cap_rx_reset_state 
+:      018307 l2cap_call_proc_hid:
+0x4df3 018308 call hid_rx_process 
+0x4df4 018309 branch l2cap_rx_reset_state 
+:      018311 l2cap_call_proc_rfcomm:
+0x4df5 018312 bpatchx patch21_4 ,mem_patch21 
+0x4df6 018313 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag 
+0x4df7 018314 call rfcomm_rx_process 
+0x4df8 018315 fetch 1 ,mem_rfcomm_malloc_fail_flag 
+0x4df9 018316 rtneq rfcomm_malloc_fail 
+0x4dfa 018317 branch l2cap_rx_reset_state 
+:      018318 l2cap_call_proc_no_reply:
+0x4dfb 018319 call l2cap_malloc_discard 
+:      018321 l2cap_rx_reset_state:
+0x4dfc 018322 setarg 0 
+0x4dfd 018323 store 2 ,mem_l2cap_rx_pkt_length 
+0x4dfe 018324 store 2 ,mem_l2cap_rx_cid 
+0x4dff 018325 jam l2cap_rx_done ,mem_l2cap_rx_done 
+0x4e00 018326 rtn 
+:      018328 l2cap_process_signal_pkt:
+0x4e01 018329 bpatchx patch21_5 ,mem_patch21 
+0x4e02 018330 call l2cap_get_signal_tx_payload 
+0x4e03 018331 force 0 ,regb 
+0x4e04 018332 fetch 2 ,mem_l2cap_rx_pkt_length 
+0x4e05 018333 copy pdata ,regc 
+0x4e06 018334 fetch 2 ,mem_l2cap_payload_ptr 
+0x4e07 018335 iforce contr 
+:      018336 l2cap_process_signal_pkt_loop:
+0x4e08 018337 call l2cap_process_one_signal 
+0x4e09 018338 deposit regc 
+0x4e0a 018339 increase -4 ,regc 
+0x4e0b 018340 increase -4 ,pdata 
+0x4e0c 018341 nbranch l2cap_process_signal_pkt_loop ,blank 
+0x4e0d 018342 copy regb ,pdata 
+0x4e0e 018343 store 2 ,mem_l2cap_signal_tx_length 
+0x4e0f 018344 rtn 
+:      018346 l2cap_process_one_signal:
+0x4e10 018347 bpatchx patch21_6 ,mem_patch21 
+0x4e11 018348 ifetch 1 ,contr 
+0x4e12 018349 beq signal_cmd_reject ,l2cap_proc_signal_cmd_reject 
+0x4e13 018350 beq signal_connect_req ,l2cap_proc_signal_connect_req 
+0x4e14 018351 beq signal_connect_rsp ,l2cap_proc_signal_connect_rsp 
+0x4e15 018352 beq signal_config_req ,l2cap_proc_signal_config_req 
+0x4e16 018353 beq signal_config_rsp ,l2cap_proc_signal_config_rsp 
+0x4e17 018354 beq signal_disconnect_req ,l2cap_proc_signal_disconnect_req 
+0x4e18 018355 beq signal_disconnect_rsp ,l2cap_proc_signal_disconnect_rsp 
+0x4e19 018356 beq signal_echo_req ,l2cap_proc_signal_echo_req 
+0x4e1a 018357 beq signal_echo_rsp ,l2cap_proc_signal_echo_rsp 
+0x4e1b 018358 beq signal_info_req ,l2cap_proc_signal_info_req 
+0x4e1c 018359 beq signal_info_rsp ,l2cap_proc_signal_info_rsp 
+0x4e1d 018360 call l2cap_reject_command 
+:      018361 l2cap_process_one_signal_rtn:
+0x4e1e 018362 rtn 
+:      018364 l2cap_proc_signal_info_req:
+0x4e1f 018365 ifetch 1 ,contr 
+0x4e20 018366 copy pdata ,queue 
+0x4e21 018367 ifetch 2 ,contr 
+0x4e22 018368 copy pdata ,rega 
+0x4e23 018369 copy regc ,pdata 
+0x4e24 018370 isub rega ,regc 
+0x4e25 018371 setarg signal_info_rsp 
+0x4e26 018372 istore 1 ,contw 
+0x4e27 018373 copy queue ,pdata 
+0x4e28 018374 istore 1 ,contw 
+0x4e29 018375 ifetch 2 ,contr 
+:      018376 l2cap_proc_signal_info_req_reply:
+0x4e2a 018377 beq l2cap_sig_ext_featrue ,l2cap_proc_signal_info_req_ext 
+0x4e2b 018378 beq l2cap_sig_fix_featrue ,l2cap_proc_signal_info_req_fix 
+0x4e2c 018379 rtn 
+:      018380 l2cap_proc_signal_info_req_ext:
+0x4e2d 018381 setarg 0x020008 
+0x4e2e 018382 istore 6 ,contw 
+0x4e2f 018383 setarg 0x0280 
+0x4e30 018384 istore 4 ,contw 
+0x4e31 018385 force 12 ,pdata 
+0x4e32 018386 branch l2cap_proc_signal_info_req_common 
+:      018387 l2cap_proc_signal_info_req_fix:
+0x4e33 018388 setarg 0x3000c 
+0x4e34 018389 istore 6 ,contw 
+0x4e35 018390 setarg 0x0006 
+0x4e36 018391 istore 8 ,contw 
+0x4e37 018392 force 16 ,pdata 
+:      018393 l2cap_proc_signal_info_req_common:
+0x4e38 018394 iadd regb ,regb 
+0x4e39 018395 branch l2cap_process_one_signal_rtn 
+:      018397 ml2cap_proc_signal_info_req:
+0x4e3a 018398 ifetch 1 ,contr 
+0x4e3b 018399 copy pdata ,queue 
+0x4e3c 018400 ifetch 2 ,contr 
+0x4e3d 018401 copy pdata ,rega 
+0x4e3e 018402 ifetch 2 ,contr 
+0x4e3f 018403 store 2 ,mem_temp 
+0x4e40 018404 copy regc ,pdata 
+0x4e41 018405 isub rega ,regc 
+0x4e42 018406 call l2cap_get_signal_tx_payload 
+0x4e43 018407 setarg signal_info_rsp 
+0x4e44 018408 istore 1 ,contw 
+0x4e45 018409 copy queue ,pdata 
+0x4e46 018410 istore 1 ,contw 
+0x4e47 018411 fetch 2 ,mem_temp 
+0x4e48 018412 branch l2cap_proc_signal_info_req_reply 
+:      018416 l2cap_proc_signal_cmd_reject:
+0x4e49 018417 ifetch 1 ,contr 
+0x4e4a 018418 copy pdata ,queue 
+0x4e4b 018419 ifetch 2 ,contr 
+0x4e4c 018420 copy pdata ,rega 
+0x4e4d 018421 iadd contr ,contr 
+0x4e4e 018422 copy regc ,pdata 
+0x4e4f 018423 isub rega ,regc 
+:      018424 l2cap_proc_signal_cmd_reject_rtn:
+0x4e50 018425 branch l2cap_process_one_signal_rtn 
+:      018427 l2cap_proc_signal_connect_req:
+0x4e51 018428 call save_cont_pointers 
+0x4e52 018431 call load_cont_pointers 
+0x4e53 018432 arg 0 ,debug 
+0x4e54 018433 ifetch 1 ,contr 
+0x4e55 018434 copy pdata ,queue 
+0x4e56 018435 ifetch 2 ,contr 
+0x4e57 018436 copy pdata ,rega 
+0x4e58 018437 ifetch 2 ,contr 
+0x4e59 018438 copy pdata ,temp 
+0x4e5a 018439 ifetch 2 ,contr 
+0x4e5b 018440 copy pdata ,timeup 
+0x4e5c 018441 bpatchx patch21_7 ,mem_patch21 
+0x4e5d 018442 copy temp ,pdata 
+0x4e5e 018443 beq psm_sdp ,l2cap_proc_signal_connect_req_sdp 
+0x4e5f 018444 beq psm_rfcomm ,l2cap_proc_signal_connect_req_rfcomm 
+0x4e60 018445 beq psm_hid_control ,l2cap_proc_signal_connect_req_hid_ctrl 
+0x4e61 018446 beq psm_hid_interrupt ,l2cap_proc_signal_connect_req_hid_int 
+0x4e62 018447 call l2cap_reject_command 
+0x4e63 018448 branch l2cap_proc_signal_connect_req_rtn 
+:      018450 l2cap_proc_signal_connect_req_sdp:
+0x4e64 018451 call save_cont_pointers 
+0x4e65 018452 arg l2cap_sdp_channel ,temp 
+0x4e66 018453 fetch 2 ,mem_sdp_remote_cid 
+0x4e67 018454 nbranch already_connected ,blank 
+0x4e68 018455 copy timeup ,pdata 
+0x4e69 018456 store 2 ,mem_sdp_remote_cid 
+0x4e6a 018457 copy clkn_bt ,pdata 
+0x4e6b 018458 store 4 ,mem_l2cap_sdpres_delay_time 
+0x4e6c 018459 call store_l2cap_req_param 
+0x4e6d 018460 branch send_connection_pending 
+:      018462 store_l2cap_req_param:
+0x4e6e 018463 storet 2 ,mem_psm 
+0x4e6f 018464 deposit timeup 
+0x4e70 018465 store 2 ,mem_scid 
+0x4e71 018466 deposit rega 
+0x4e72 018467 store 2 ,mem_cmd_length 
+0x4e73 018468 deposit regb 
+0x4e74 018469 store 2 ,mem_tt2 
+0x4e75 018470 deposit regc 
+0x4e76 018471 store 2 ,mem_tt3 
+0x4e77 018472 deposit queue 
+0x4e78 018473 store 2 ,mem_id 
+0x4e79 018474 rtn 
+:      018476 restore_l2cap_req_param:
+0x4e7a 018477 fetcht 2 ,mem_psm 
+0x4e7b 018478 fetch 2 ,mem_scid 
+0x4e7c 018479 copy pdata ,timeup 
+0x4e7d 018480 fetch 2 ,mem_cmd_length 
+0x4e7e 018481 copy pdata ,rega 
+0x4e7f 018482 fetch 2 ,mem_tt2 
+0x4e80 018483 copy pdata ,regb 
+0x4e81 018484 fetch 2 ,mem_tt3 
+0x4e82 018485 copy pdata ,regc 
+0x4e83 018486 fetch 2 ,mem_id 
+0x4e84 018487 copy pdata ,queue 
+0x4e85 018488 rtn 
+:      018490 l2cap_proc_signal_connect_req_rfcomm:
+0x4e86 018491 call save_cont_pointers 
+0x4e87 018492 setarg l2cap_rfcomm_channel 
+0x4e88 018493 arg l2cap_rfcomm_channel ,temp 
+0x4e89 018494 fetch 2 ,mem_rfcomm_remote_cid 
+0x4e8a 018495 nbranch already_connected ,blank 
+0x4e8b 018496 copy timeup ,pdata 
+0x4e8c 018497 store 2 ,mem_rfcomm_remote_cid 
+0x4e8d 018498 fetch 1 ,mem_rfcomm_state 
+0x4e8e 018499 set1 l2cap_channel_state_conn_req ,pdata 
+0x4e8f 018500 set1 l2cap_channel_state_conn_res ,pdata 
+0x4e90 018501 store 1 ,mem_rfcomm_state 
+0x4e91 018502 branch send_connection_res 
+:      018503 l2cap_proc_signal_connect_req_hid_ctrl:
+0x4e92 018504 call save_cont_pointers 
+0x4e93 018505 arg l2cap_hid_control_channel ,temp 
+0x4e94 018506 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x4e95 018507 nbranch already_connected ,blank 
+0x4e96 018508 copy timeup ,pdata 
+0x4e97 018509 store 2 ,mem_hid_ctrl_remote_cid 
+0x4e98 018510 fetch 1 ,mem_hid_control_state 
+0x4e99 018511 set1 l2cap_channel_state_conn_req ,pdata 
+0x4e9a 018512 set1 l2cap_channel_state_conn_res ,pdata 
+0x4e9b 018513 store 1 ,mem_hid_control_state 
+0x4e9c 018514 branch send_connection_res 
+:      018515 l2cap_proc_signal_connect_req_hid_int:
+0x4e9d 018516 call save_cont_pointers 
+0x4e9e 018517 deposit clke 
+0x4e9f 018518 arg l2cap_hid_interrupt_channel ,temp 
+0x4ea0 018519 fetch 2 ,mem_hid_int_remote_cid 
+0x4ea1 018520 nbranch already_connected ,blank 
+0x4ea2 018521 copy timeup ,pdata 
+0x4ea3 018522 store 2 ,mem_hid_int_remote_cid 
+0x4ea4 018523 fetch 1 ,mem_hid_interrupt_state 
+0x4ea5 018524 set1 l2cap_channel_state_conn_req ,pdata 
+0x4ea6 018525 set1 l2cap_channel_state_conn_res ,pdata 
+0x4ea7 018526 store 1 ,mem_hid_interrupt_state 
+0x4ea8 018527 branch send_connection_res 
+:      018529 send_connection_pending:
+0x4ea9 018530 setarg l2cap_connect_pending 
+0x4eaa 018531 store 2 ,meml2cap_t1 
+0x4eab 018532 jam l2cap_sdp_channel ,mem_l2cap_pending_item 
+0x4eac 018533 branch send_connection_res0 
+:      018534 send_connection_sdp_res:
+0x4ead 018535 fetch 1 ,mem_sdp_state 
+0x4eae 018536 set1 l2cap_channel_state_conn_req ,pdata 
+0x4eaf 018537 set1 l2cap_channel_state_conn_res ,pdata 
+0x4eb0 018538 store 1 ,mem_sdp_state 
+:      018539 send_connection_res:
+0x4eb1 018540 setarg l2cap_connect_successful 
+0x4eb2 018541 store 2 ,meml2cap_t1 
+:      018542 send_connection_res0:
+0x4eb3 018543 bpatchx patch22_0 ,mem_patch22 
+0x4eb4 018544 call load_cont_pointers 
+0x4eb5 018545 setarg signal_connect_rsp 
+0x4eb6 018546 istore 1 ,contw 
+0x4eb7 018547 copy queue ,pdata 
+0x4eb8 018548 istore 1 ,contw 
+0x4eb9 018549 setarg 0x0008 
+0x4eba 018550 istore 2 ,contw 
+0x4ebb 018551 copy temp ,pdata 
+0x4ebc 018552 istore 2 ,contw 
+0x4ebd 018553 copy timeup ,pdata 
+0x4ebe 018554 istore 2 ,contw 
+0x4ebf 018555 fetch 2 ,meml2cap_t1 
+0x4ec0 018556 beq l2cap_connect_pending ,connect_pending 
+0x4ec1 018557 isolate0 0 ,debug 
+0x4ec2 018558 branch connect_suc ,true 
+0x4ec3 018559 setarg l2cap_connect_refused_no_resources 
+:      018560 connect_suc:
+0x4ec4 018561 istore 2 ,contw 
+0x4ec5 018562 force 0x0000 ,pdata 
+0x4ec6 018563 istore 2 ,contw 
+0x4ec7 018564 setarg 12 
+0x4ec8 018565 branch connect_req_update_byte_counts 
+:      018566 connect_pending:
+0x4ec9 018567 istore 2 ,contw 
+0x4eca 018568 force 0x0002 ,pdata 
+0x4ecb 018569 istore 2 ,contw 
+0x4ecc 018570 setarg 12 
+0x4ecd 018571 branch connect_req_update_byte_counts 
+:      018573 already_connected:
+0x4ece 018574 set1 0 ,debug 
+0x4ecf 018575 branch send_connection_res 
+:      018576 connect_req_update_byte_counts:
+0x4ed0 018577 iadd regb ,regb 
+0x4ed1 018578 copy regc ,pdata 
+0x4ed2 018579 isub rega ,regc 
+0x4ed3 018580 branch l2cap_proc_signal_connect_req_rtn 
+:      018581 l2cap_proc_signal_connect_req_rtn:
+0x4ed4 018582 branch l2cap_process_one_signal_rtn 
+:      018584 l2cap_proc_signal_connect_rsp:
+0x4ed5 018585 ifetch 1 ,contr 
+0x4ed6 018586 copy pdata ,queue 
+0x4ed7 018587 ifetch 2 ,contr 
+0x4ed8 018588 copy pdata ,rega 
+0x4ed9 018589 copy regc ,pdata 
+0x4eda 018590 isub rega ,regc 
+0x4edb 018591 ifetch 2 ,contr 
+0x4edc 018592 copy pdata ,timeup 
+0x4edd 018593 ifetch 2 ,contr 
+0x4ede 018594 copy pdata ,temp 
+0x4edf 018595 bpatchx patch22_1 ,mem_patch22 
+0x4ee0 018596 setarg l2cap_sdp_channel 
+0x4ee1 018597 isub temp ,null 
+0x4ee2 018598 branch l2cap_proc_signal_connect_rsp_sdp ,zero 
+0x4ee3 018599 setarg l2cap_rfcomm_channel 
+0x4ee4 018600 isub temp ,null 
+0x4ee5 018601 branch l2cap_proc_signal_connect_rsp_rfcomm ,zero 
+0x4ee6 018602 setarg l2cap_hid_control_channel 
+0x4ee7 018603 isub temp ,null 
+0x4ee8 018604 branch l2cap_proc_signal_connect_rsp_hid_ctrl ,zero 
+0x4ee9 018605 setarg l2cap_hid_interrupt_channel 
+0x4eea 018606 isub temp ,null 
+0x4eeb 018607 branch l2cap_proc_signal_connect_rsp_hid_int ,zero 
+0x4eec 018608 rtn 
+:      018610 l2cap_proc_signal_connect_rsp_sdp:
+0x4eed 018611 copy timeup ,pdata 
+0x4eee 018612 store 2 ,mem_sdp_remote_cid 
+0x4eef 018613 fetch 1 ,mem_sdp_state 
+0x4ef0 018614 set1 l2cap_channel_state_conn_res ,pdata 
+0x4ef1 018615 store 1 ,mem_sdp_state 
+0x4ef2 018616 branch l2cap_process_one_signal_rtn 
+:      018617 l2cap_proc_signal_connect_rsp_rfcomm:
+0x4ef3 018618 copy timeup ,pdata 
+0x4ef4 018619 store 2 ,mem_rfcomm_remote_cid 
+0x4ef5 018620 fetch 1 ,mem_rfcomm_state 
+0x4ef6 018621 set1 l2cap_channel_state_conn_res ,pdata 
+0x4ef7 018622 store 1 ,mem_rfcomm_state 
+0x4ef8 018623 rtn 
+:      018624 l2cap_proc_signal_connect_rsp_hid_int:
+0x4ef9 018625 copy timeup ,pdata 
+0x4efa 018626 store 2 ,mem_hid_ctrl_remote_cid 
+0x4efb 018627 fetch 1 ,mem_hid_interrupt_state 
+0x4efc 018628 set1 l2cap_channel_state_conn_res ,pdata 
+0x4efd 018629 store 1 ,mem_hid_interrupt_state 
+0x4efe 018630 rtn 
+:      018631 l2cap_proc_signal_connect_rsp_hid_ctrl:
+0x4eff 018632 copy timeup ,pdata 
+0x4f00 018633 store 2 ,mem_hid_int_remote_cid 
+0x4f01 018634 fetch 1 ,mem_hid_control_state 
+0x4f02 018635 set1 l2cap_channel_state_conn_res ,pdata 
+0x4f03 018636 store 1 ,mem_hid_control_state 
+0x4f04 018637 rtn 
+:      018639 l2cap_proc_signal_config_req:
+0x4f05 018640 ifetch 1 ,contr 
+0x4f06 018641 copy pdata ,queue 
+0x4f07 018642 ifetch 2 ,contr 
+0x4f08 018643 copy pdata ,rega 
+0x4f09 018644 copy regc ,pdata 
+0x4f0a 018645 isub rega ,regc 
+0x4f0b 018646 ifetch 2 ,contr 
+0x4f0c 018647 copy pdata ,temp 
+0x4f0d 018648 copy temp ,rega 
+0x4f0e 018649 bpatchx patch22_2 ,mem_patch22 
+0x4f0f 018650 setarg l2cap_sdp_channel 
+0x4f10 018651 isub temp ,null 
+0x4f11 018652 branch l2cap_proc_signal_config_req_sdp ,zero 
+0x4f12 018653 setarg l2cap_rfcomm_channel 
+0x4f13 018654 isub temp ,null 
+0x4f14 018655 branch l2cap_proc_signal_config_req_rfcomm ,zero 
+0x4f15 018656 setarg l2cap_hid_control_channel 
+0x4f16 018657 isub temp ,null 
+0x4f17 018658 branch l2cap_proc_signal_config_req_hid_ctrl ,zero 
+0x4f18 018659 setarg l2cap_hid_interrupt_channel 
+0x4f19 018660 isub temp ,null 
+0x4f1a 018661 branch l2cap_proc_signal_config_req_hid_int ,zero 
+0x4f1b 018662 branch l2cap_reject_command 
+:      018664 l2cap_proc_signal_config_req_sdp:
+0x4f1c 018665 copy contw ,timeup 
+0x4f1d 018666 fetch 1 ,mem_sdp_state 
+0x4f1e 018667 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+0x4f1f 018668 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+0x4f20 018670 store 1 ,mem_sdp_state 
+0x4f21 018671 copy timeup ,contw 
+0x4f22 018672 arg l2cap_sdp_channel ,timeup 
+0x4f23 018673 fetch 2 ,mem_sdp_remote_cid 
+0x4f24 018674 copy pdata ,temp 
+0x4f25 018675 branch l2cap_send_config_rsp 
+:      018676 l2cap_proc_signal_config_req_hid_ctrl:
+0x4f26 018677 copy contw ,timeup 
+0x4f27 018678 fetch 1 ,mem_hid_control_state 
+0x4f28 018679 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+0x4f29 018680 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+0x4f2a 018682 store 1 ,mem_hid_control_state 
+0x4f2b 018683 copy timeup ,contw 
+0x4f2c 018684 arg l2cap_hid_control_channel ,timeup 
+0x4f2d 018685 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x4f2e 018686 copy pdata ,temp 
+0x4f2f 018687 branch l2cap_send_config_rsp 
+:      018688 l2cap_proc_signal_config_req_hid_int:
+0x4f30 018689 copy contw ,timeup 
+0x4f31 018690 fetch 1 ,mem_hid_interrupt_state 
+0x4f32 018691 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+0x4f33 018692 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+0x4f34 018694 store 1 ,mem_hid_interrupt_state 
+0x4f35 018695 copy timeup ,contw 
+0x4f36 018696 arg l2cap_hid_interrupt_channel ,timeup 
+0x4f37 018697 fetch 2 ,mem_hid_int_remote_cid 
+0x4f38 018698 copy pdata ,temp 
+0x4f39 018699 branch l2cap_send_config_rsp 
+:      018700 l2cap_proc_signal_config_req_rfcomm:
+0x4f3a 018701 copy contw ,timeup 
+0x4f3b 018702 fetch 1 ,mem_rfcomm_state 
+0x4f3c 018703 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+0x4f3d 018704 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+0x4f3e 018706 store 1 ,mem_rfcomm_state 
+0x4f3f 018708 copy timeup ,contw 
+0x4f40 018709 arg l2cap_rfcomm_channel ,timeup 
+0x4f41 018710 fetch 2 ,mem_rfcomm_remote_cid 
+0x4f42 018711 copy pdata ,temp 
+:      018712 l2cap_send_config_rsp:
+0x4f43 018713 bpatchx patch22_3 ,mem_patch22 
+0x4f44 018714 setarg signal_config_rsp 
+0x4f45 018715 istore 1 ,contw 
+0x4f46 018716 copy queue ,pdata 
+0x4f47 018717 istore 1 ,contw 
+0x4f48 018718 setarg 0x0006 
+0x4f49 018719 istore 2 ,contw 
+0x4f4a 018720 copy temp ,pdata 
+0x4f4b 018721 istore 2 ,contw 
+0x4f4c 018722 force 0x00 ,pdata 
+0x4f4d 018723 istore 2 ,contw 
+0x4f4e 018724 force l2cap_config_success ,pdata 
+0x4f4f 018725 istore 2 ,contw 
+0x4f50 018726 force 10 ,pdata 
+0x4f51 018727 iadd regb ,regb 
+0x4f52 018729 storet 2 ,mem_config_req_dest_cid 
+0x4f53 018730 copy queue ,pdata 
+0x4f54 018731 store 1 ,mem_config_identifier 
+0x4f55 018732 force l2cap_sdp_channel ,pdata 
+0x4f56 018733 icompare 0xff ,timeup 
+0x4f57 018734 branch l2cap_send_config_rsp_is_sdp ,true 
+0x4f58 018735 increase 1 ,pdata 
+:      018736 l2cap_send_config_rsp_is_sdp:
+0x4f59 018738 rtn 
+:      018739 l2cap_check_channel_state:
+0x4f5a 018740 disable user 
+0x4f5b 018741 rtnbit1 l2cap_channel_state_snd_cfg_req ,pdata 
+0x4f5c 018742 rtnbit0 l2cap_channel_state_conn_req ,pdata 
+0x4f5d 018743 rtnbit0 l2cap_channel_state_conn_res ,pdata 
+0x4f5e 018744 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+0x4f5f 018745 copy contr ,contw 
+0x4f60 018746 increase -1 ,contw 
+0x4f61 018747 istore 1 ,contw 
+0x4f62 018748 enable user 
+0x4f63 018749 rtn 
+:      018750 l2cap_send_config_req:
+:      018751 l2cap_send_config_req_sdp:
+0x4f64 018752 fetch 1 ,mem_sdp_state 
+0x4f65 018753 call l2cap_check_channel_state 
+0x4f66 018754 nbranch l2cap_send_config_req_rfcomm ,user 
+0x4f67 018755 jam l2cap_sdp_channel ,mem_send_config_req 
+0x4f68 018756 fetch 2 ,mem_sdp_remote_cid 
+0x4f69 018757 store 2 ,mem_config_req_dest_cid 
+0x4f6a 018758 branch l2cap_generate_config_req 
+:      018759 l2cap_send_config_req_rfcomm:
+0x4f6b 018760 fetch 1 ,mem_rfcomm_state 
+0x4f6c 018761 call l2cap_check_channel_state 
+0x4f6d 018762 nbranch l2cap_send_config_req_hid_ctrl ,user 
+0x4f6e 018763 jam l2cap_rfcomm_channel ,mem_send_config_req 
+0x4f6f 018764 fetch 2 ,mem_rfcomm_remote_cid 
+0x4f70 018765 store 2 ,mem_config_req_dest_cid 
+0x4f71 018766 branch l2cap_generate_config_req 
+:      018767 l2cap_send_config_req_hid_ctrl:
+0x4f72 018768 fetch 1 ,mem_hid_control_state 
+0x4f73 018769 call l2cap_check_channel_state 
+0x4f74 018770 nbranch l2cap_send_config_req_hid_int ,user 
+0x4f75 018771 jam l2cap_hid_control_channel ,mem_send_config_req 
+0x4f76 018772 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x4f77 018773 store 2 ,mem_config_req_dest_cid 
+0x4f78 018774 branch l2cap_generate_config_req 
+:      018775 l2cap_send_config_req_hid_int:
+0x4f79 018776 fetch 1 ,mem_hid_interrupt_state 
+0x4f7a 018777 call l2cap_check_channel_state 
+0x4f7b 018778 nrtn user 
+0x4f7c 018779 jam l2cap_hid_interrupt_channel ,mem_send_config_req 
+0x4f7d 018780 fetch 2 ,mem_hid_int_remote_cid 
+0x4f7e 018781 store 2 ,mem_config_req_dest_cid 
+:      018784 l2cap_generate_config_req:
+0x4f7f 018785 bpatchx patch22_4 ,mem_patch22 
+0x4f80 018786 call l2cap_get_req_id 
+0x4f81 018787 call l2cap_malloc_signal_channel 
+0x4f82 018788 force 0 ,regb 
+0x4f83 018789 call l2cap_get_signal_tx_payload 
+0x4f84 018790 force signal_config_req ,pdata 
+0x4f85 018791 istore 1 ,contw 
+0x4f86 018792 fetch 1 ,mem_ml2cap_comm_id 
+0x4f87 018793 istore 1 ,contw 
+0x4f88 018794 setarg 0x0008 
+0x4f89 018795 istore 2 ,contw 
+0x4f8a 018796 fetch 2 ,mem_config_req_dest_cid 
+0x4f8b 018797 istore 2 ,contw 
+0x4f8c 018798 setarg 0x0000 
+0x4f8d 018799 istore 2 ,contw 
+0x4f8e 018800 force 1 ,pdata 
+0x4f8f 018801 istore 1 ,contw 
+0x4f90 018802 force 2 ,pdata 
+0x4f91 018803 istore 1 ,contw 
+0x4f92 018804 fetch 1 ,mem_send_config_req 
+0x4f93 018805 beq l2cap_rfcomm_channel ,l2cap_generate_config_req_rfcomm 
+0x4f94 018806 setarg l2cap_config_mtu_sdp 
+0x4f95 018807 istore 2 ,contw 
+0x4f96 018808 branch l2cap_generate_config_req_done 
+:      018809 l2cap_generate_config_req_rfcomm:
+0x4f97 018810 setarg l2cap_config_mtu_rfcomm 
+0x4f98 018811 istore 2 ,contw 
+:      018812 l2cap_generate_config_req_done:
+0x4f99 018813 arg 0x0c ,temp 
+0x4f9a 018814 storet 2 ,mem_l2cap_signal_tx_length 
+0x4f9b 018815 call l2cap_get_signal_tx_buff 
+0x4f9c 018816 fetch 2 ,mem_l2cap_signal_tx_length 
+0x4f9d 018817 istore 2 ,contw 
+0x4f9e 018818 force l2cap_signal_channel ,pdata 
+0x4f9f 018819 istore 2 ,contw 
+0x4fa0 018820 jam 0 ,mem_send_config_req 
+:      018821 l2cap_proc_signal_config_req_rtn:
+0x4fa1 018822 branch l2cap_process_one_signal_rtn 
+:      018824 l2cap_proc_signal_config_rsp:
+0x4fa2 018825 increase 1 ,contr 
+0x4fa3 018826 ifetch 2 ,contr 
+0x4fa4 018827 copy pdata ,rega 
+0x4fa5 018828 copy regc ,pdata 
+0x4fa6 018829 isub rega ,regc 
+0x4fa7 018830 ifetch 2 ,contr 
+0x4fa8 018831 copy pdata ,rega 
+0x4fa9 018832 bpatchx patch22_5 ,mem_patch22 
+0x4faa 018833 setarg l2cap_sdp_channel 
+0x4fab 018834 isub rega ,null 
+0x4fac 018835 branch l2cap_proc_signal_config_rsp_sdp ,zero 
+0x4fad 018836 setarg l2cap_rfcomm_channel 
+0x4fae 018837 isub rega ,null 
+0x4faf 018838 branch l2cap_proc_signal_config_rsp_rfcomm ,zero 
+0x4fb0 018839 setarg l2cap_hid_control_channel 
+0x4fb1 018840 isub rega ,null 
+0x4fb2 018841 branch l2cap_proc_signal_config_rsp_hid_ctrl ,zero 
+0x4fb3 018842 setarg l2cap_hid_interrupt_channel 
+0x4fb4 018843 isub rega ,null 
+0x4fb5 018844 branch l2cap_proc_signal_config_rsp_hid_int ,zero 
+0x4fb6 018845 increase 2 ,contr 
+0x4fb7 018846 ifetch 2 ,contr 
+0x4fb8 018847 iforce null 
+0x4fb9 018848 branch l2cap_process_one_signal_rtn 
+:      018849 l2cap_proc_signal_config_rsp_sdp:
+0x4fba 018850 fetch 1 ,mem_sdp_state 
+0x4fbb 018851 set1 l2cap_channel_state_rcv_cfg_res ,pdata 
+0x4fbc 018852 store 1 ,mem_sdp_state 
+0x4fbd 018853 branch l2cap_process_one_signal_rtn 
+:      018854 l2cap_proc_signal_config_rsp_rfcomm:
+0x4fbe 018855 fetch 1 ,mem_rfcomm_state 
+0x4fbf 018856 set1 l2cap_channel_state_rcv_cfg_res ,pdata 
+0x4fc0 018857 store 1 ,mem_rfcomm_state 
+0x4fc1 018858 branch l2cap_process_one_signal_rtn 
+:      018859 l2cap_proc_signal_config_rsp_hid_ctrl:
+0x4fc2 018860 fetch 1 ,mem_hid_control_state 
+0x4fc3 018861 set1 l2cap_channel_state_rcv_cfg_res ,pdata 
+0x4fc4 018862 store 1 ,mem_hid_control_state 
+0x4fc5 018863 branch l2cap_process_one_signal_rtn 
+:      018864 l2cap_proc_signal_config_rsp_hid_int:
+0x4fc6 018865 fetch 1 ,mem_hid_interrupt_state 
+0x4fc7 018866 set1 l2cap_channel_state_rcv_cfg_res ,pdata 
+0x4fc8 018867 store 1 ,mem_hid_interrupt_state 
+0x4fc9 018868 jam bt_evt_hid_connected ,mem_fifo_temp 
+0x4fca 018869 branch ui_ipc_send_event 
+:      018873 l2cap_proc_signal_disconnect_req:
+0x4fcb 018874 ifetch 1 ,contr 
+0x4fcc 018875 copy pdata ,queue 
+0x4fcd 018876 ifetch 2 ,contr 
+0x4fce 018877 copy pdata ,rega 
+0x4fcf 018878 copy regc ,pdata 
+0x4fd0 018879 isub rega ,regc 
+0x4fd1 018880 ifetch 2 ,contr 
+0x4fd2 018881 copy pdata ,rega 
+0x4fd3 018882 ifetch 2 ,contr 
+0x4fd4 018883 copy pdata ,timeup 
+0x4fd5 018884 copy rega ,temp 
+0x4fd6 018885 call save_cont_pointers 
+0x4fd7 018886 bpatchx patch22_6 ,mem_patch22 
+0x4fd8 018887 setarg l2cap_sdp_channel 
+0x4fd9 018888 isub temp ,null 
+0x4fda 018889 branch l2cap_proc_signal_disconnect_req_sdp ,zero 
+0x4fdb 018890 setarg l2cap_rfcomm_channel 
+0x4fdc 018891 isub temp ,null 
+0x4fdd 018892 branch l2cap_proc_signal_disconnect_req_rfcomm ,zero 
+0x4fde 018893 setarg l2cap_hid_control_channel 
+0x4fdf 018894 isub temp ,null 
+0x4fe0 018895 branch l2cap_proc_signal_disconnect_req_hid_ctrl ,zero 
+0x4fe1 018896 setarg l2cap_hid_interrupt_channel 
+0x4fe2 018897 isub temp ,null 
+0x4fe3 018898 branch l2cap_proc_signal_disconnect_req_hid_int ,zero 
+0x4fe4 018899 call l2cap_reject_command 
+0x4fe5 018900 branch l2cap_proc_signal_disconnect_req_err_rtn 
+:      018901 l2cap_proc_signal_disconnect_req_hid_ctrl:
+0x4fe6 018902 copy timeup ,temp 
+0x4fe7 018903 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x4fe8 018904 isub temp ,null 
+0x4fe9 018905 branch l2cap_disconnect_hid_control_now ,zero 
+0x4fea 018906 call l2cap_reject_command 
+0x4feb 018907 branch l2cap_proc_signal_disconnect_req_err_rtn 
+:      018908 l2cap_proc_signal_disconnect_req_hid_int:
+0x4fec 018909 copy timeup ,temp 
+0x4fed 018910 fetch 2 ,mem_hid_int_remote_cid 
+0x4fee 018911 isub temp ,null 
+0x4fef 018912 branch l2cap_disconnect_hid_interrupt_now ,zero 
+0x4ff0 018913 call l2cap_reject_command 
+0x4ff1 018914 branch l2cap_proc_signal_disconnect_req_err_rtn 
+:      018916 l2cap_proc_signal_disconnect_req_sdp:
+0x4ff2 018917 copy timeup ,temp 
+0x4ff3 018918 fetch 2 ,mem_sdp_remote_cid 
+0x4ff4 018919 isub temp ,null 
+0x4ff5 018920 branch l2cap_disconnect_sdp_now ,zero 
+0x4ff6 018921 call l2cap_reject_command 
+0x4ff7 018922 branch l2cap_proc_signal_disconnect_req_err_rtn 
+:      018923 l2cap_disconnect_hid_control_now:
+0x4ff8 018924 call l2cap_reset_hid_ctrl_state 
+0x4ff9 018925 branch l2cap_send_disconnect_rsp_pkt 
+:      018926 l2cap_disconnect_hid_interrupt_now:
+0x4ffa 018927 call l2cap_reset_hid_int_state 
+0x4ffb 018928 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x4ffc 018929 branch l2cap_send_disconnect_rsp_pkt ,blank 
+0x4ffd 018937 branch l2cap_send_disconnect_rsp_pkt 
+:      018939 l2cap_disconnect_sdp_now:
+0x4ffe 018940 call l2cap_reset_sdp_channel_state 
+0x4fff 018941 fetch 1 ,mem_upper_sm_ss 
+0x5000 018942 nbranch l2cap_send_disconnect_rsp_pkt ,blank 
+0x5001 018945 branch l2cap_send_disconnect_rsp_pkt 
+:      018946 l2cap_proc_signal_disconnect_req_rfcomm:
+0x5002 018947 copy timeup ,temp 
+0x5003 018948 fetch 2 ,mem_rfcomm_remote_cid 
+0x5004 018949 isub temp ,null 
+0x5005 018950 branch l2cap_disconnect_rfcomm_now ,zero 
+0x5006 018951 call l2cap_reject_command 
+0x5007 018952 branch l2cap_proc_signal_disconnect_req_err_rtn 
+:      018953 l2cap_disconnect_rfcomm_now:
+0x5008 018954 call l2cap_reset_rfcomm_channel_state 
+0x5009 018955 branch l2cap_send_disconnect_rsp_pkt 
+:      018956 l2cap_send_disconnect_rsp_pkt:
+0x500a 018957 call load_cont_pointers 
+0x500b 018958 setarg signal_disconnect_rsp 
+0x500c 018959 istore 1 ,contw 
+0x500d 018960 copy queue ,pdata 
+0x500e 018961 istore 1 ,contw 
+0x500f 018962 setarg 0x0004 
+0x5010 018963 istore 2 ,contw 
+0x5011 018964 copy rega ,pdata 
+0x5012 018965 istore 2 ,contw 
+0x5013 018966 copy timeup ,pdata 
+0x5014 018967 istore 2 ,contw 
+0x5015 018968 force 8 ,pdata 
+0x5016 018969 branch l2cap_proc_signal_disconnect_req_rtn 
+:      018970 l2cap_proc_signal_disconnect_req_err_rtn:
+0x5017 018971 call load_cont_pointers 
+0x5018 018972 branch l2cap_proc_signal_disconnect_req_rtn 
+:      018973 l2cap_proc_signal_disconnect_req_rtn:
+0x5019 018974 iadd regb ,regb 
+0x501a 018975 branch l2cap_process_one_signal_rtn 
+:      018976 l2cap_proc_signal_disconnect_rsp:
+0x501b 018977 ifetch 1 ,contr 
+0x501c 018978 copy pdata ,queue 
+0x501d 018979 ifetch 2 ,contr 
+0x501e 018980 copy pdata ,rega 
+0x501f 018981 copy regc ,pdata 
+0x5020 018982 isub rega ,regc 
+0x5021 018983 ifetch 2 ,contr 
+0x5022 018984 copy pdata ,timeup 
+0x5023 018985 ifetch 2 ,contr 
+0x5024 018986 copy pdata ,temp 
+0x5025 018987 call save_cont_pointers 
+0x5026 018988 bpatchx patch22_7 ,mem_patch22 
+0x5027 018989 setarg l2cap_sdp_channel 
+0x5028 018990 isub temp ,null 
+0x5029 018991 branch l2cap_proc_signal_disconnect_rsp_sdp ,zero 
+0x502a 018992 setarg l2cap_rfcomm_channel 
+0x502b 018993 isub temp ,null 
+0x502c 018994 branch l2cap_proc_signal_disconnect_rsp_rfcomm ,zero 
+0x502d 018995 setarg l2cap_hid_control_channel 
+0x502e 018996 isub temp ,null 
+0x502f 018997 branch l2cap_proc_signal_disconnect_rsp_hid_ctrl ,zero 
+0x5030 018998 setarg l2cap_hid_interrupt_channel 
+0x5031 018999 isub temp ,null 
+0x5032 019000 branch l2cap_proc_signal_disconnect_rsp_hid_int ,zero 
+0x5033 019001 call l2cap_reject_command 
+0x5034 019002 branch l2cap_proc_signal_disconnect_rsp_err_rtn 
+:      019003 l2cap_proc_signal_disconnect_rsp_sdp:
+0x5035 019004 copy temp ,rega 
+0x5036 019005 copy timeup ,temp 
+0x5037 019006 fetch 2 ,mem_sdp_remote_cid 
+0x5038 019007 isub temp ,null 
+0x5039 019008 call l2cap_reset_sdp_channel_state ,zero 
+0x503a 019009 branch l2cap_proc_signal_disconnect_rsp_rtn 
+:      019010 l2cap_proc_signal_disconnect_rsp_rfcomm:
+0x503b 019011 copy temp ,rega 
+0x503c 019012 copy timeup ,temp 
+0x503d 019013 fetch 2 ,mem_rfcomm_remote_cid 
+0x503e 019014 isub temp ,null 
+0x503f 019015 call l2cap_reset_rfcomm_channel_state ,zero 
+0x5040 019016 branch l2cap_proc_signal_disconnect_rsp_rtn 
+:      019017 l2cap_proc_signal_disconnect_rsp_hid_ctrl:
+0x5041 019018 copy temp ,rega 
+0x5042 019019 copy timeup ,temp 
+0x5043 019020 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x5044 019021 isub temp ,null 
+0x5045 019022 call l2cap_reset_hid_ctrl_state ,zero 
+0x5046 019023 branch l2cap_proc_signal_disconnect_rsp_rtn 
+:      019024 l2cap_proc_signal_disconnect_rsp_hid_int:
+0x5047 019025 copy temp ,rega 
+0x5048 019026 copy timeup ,temp 
+0x5049 019027 fetch 2 ,mem_hid_int_remote_cid 
+0x504a 019028 isub temp ,null 
+0x504b 019029 call l2cap_reset_hid_int_state ,zero 
+0x504c 019030 branch l2cap_proc_signal_disconnect_rsp_rtn 
+:      019031 l2cap_proc_signal_disconnect_rsp_rtn:
+0x504d 019032 call load_cont_pointers 
+0x504e 019033 branch l2cap_process_one_signal_rtn 
+:      019034 l2cap_proc_signal_disconnect_rsp_err_rtn:
+0x504f 019035 branch l2cap_process_one_signal_rtn 
+:      019038 l2cap_proc_signal_echo_req:
+0x5050 019039 ifetch 1 ,contr 
+0x5051 019040 copy pdata ,queue 
+0x5052 019041 ifetch 2 ,contr 
+0x5053 019042 copy pdata ,rega 
+0x5054 019043 iadd contr ,contr 
+0x5055 019044 setarg 9 
+0x5056 019045 istore 1 ,contw 
+0x5057 019046 copy queue ,pdata 
+0x5058 019047 istore 1 ,contw 
+0x5059 019048 force 0x0000 ,pdata 
+0x505a 019049 istore 2 ,contw 
+0x505b 019050 force 4 ,pdata 
+0x505c 019051 iadd regb ,regb 
+0x505d 019052 copy regc ,pdata 
+0x505e 019053 isub rega ,regc 
+0x505f 019054 branch l2cap_process_one_signal_rtn 
+:      019055 l2cap_proc_signal_echo_rsp:
+0x5060 019056 branch l2cap_process_one_signal_rtn 
+:      019058 l2cap_proc_signal_info_rsp:
+0x5061 019059 branch l2cap_process_one_signal_rtn 
+:      019060 l2cap_reject_command:
+0x5062 019061 force 0 ,regb 
+0x5063 019062 call l2cap_get_signal_tx_payload 
+0x5064 019063 setarg signal_cmd_reject 
+0x5065 019064 istore 1 ,contw 
+0x5066 019065 copy queue ,pdata 
+0x5067 019066 istore 1 ,contw 
+0x5068 019067 setarg 2 
+0x5069 019068 istore 2 ,contw 
+0x506a 019069 setarg cmd_not_understood 
+0x506b 019070 istore 2 ,contw 
+0x506c 019071 increase 6 ,regb 
+0x506d 019072 arg 4 ,regc 
+0x506e 019073 branch l2cap_process_one_signal_rtn 
+:      019077 l2cap_reset_rfcomm_channel_state:
+0x506f 019078 setarg 0 
+0x5070 019079 store 2 ,mem_rfcomm_tx_pkt_length 
+0x5071 019080 store 2 ,mem_rfcomm_remote_cid 
+0x5072 019081 jam 0 ,mem_rfcomm_state 
+0x5073 019082 rtn 
+:      019083 l2cap_reset_sdp_channel_state:
+0x5074 019084 setarg 0 
+0x5075 019085 store 2 ,mem_sdp_tx_pkt_length 
+0x5076 019086 store 2 ,mem_sdp_remote_cid 
+0x5077 019087 jam 0 ,mem_sdp_state 
+0x5078 019088 rtn 
+:      019089 l2cap_reset_hid_ctrl_state:
+0x5079 019090 setarg 0 
+0x507a 019091 store 2 ,mem_hid_ctrl_remote_cid 
+0x507b 019092 jam 0 ,mem_hid_control_state 
+0x507c 019093 fetch 1 ,mem_hid_interrupt_state 
+0x507d 019094 beq 0 ,l2cap_reset_hid_disconnected 
+0x507e 019095 rtn 
+:      019097 l2cap_reset_hid_int_state:
+0x507f 019098 setarg 0 
+0x5080 019099 store 2 ,mem_hid_int_remote_cid 
+0x5081 019100 jam 0 ,mem_hid_interrupt_state 
+0x5082 019101 fetch 1 ,mem_hid_control_state 
+0x5083 019102 beq 0 ,l2cap_reset_hid_disconnected 
+0x5084 019103 rtn 
+:      019105 l2cap_reset_hid_disconnected:
+0x5085 019106 jam bt_evt_hid_disconnected ,mem_fifo_temp 
+0x5086 019107 branch ui_ipc_send_event 
+:      019109 l2cap_disconnect_interrupt_req:
+0x5087 019110 fetch 1 ,mem_control_tasks 
+0x5088 019111 set0 l2cap_disconnect_interrupt ,pdata 
+0x5089 019112 store 1 ,mem_control_tasks 
+0x508a 019113 fetch 2 ,mem_hid_int_remote_cid 
+0x508b 019114 rtn blank 
+0x508c 019115 call l2cap_malloc_signal_channel 
+0x508d 019116 fetch 2 ,mem_hid_int_remote_cid 
+0x508e 019117 copy pdata ,rega 
+0x508f 019118 force l2cap_hid_interrupt_channel ,regb 
+0x5090 019119 branch l2cap_generate_disconnect_req 
+:      019120 l2cap_disconnect_control_req:
+0x5091 019121 fetch 1 ,mem_control_tasks 
+0x5092 019122 set0 l2cap_disconnect_control ,pdata 
+0x5093 019123 store 1 ,mem_control_tasks 
+0x5094 019124 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x5095 019125 rtn blank 
+0x5096 019126 call l2cap_malloc_signal_channel 
+0x5097 019127 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x5098 019128 copy pdata ,rega 
+0x5099 019129 force l2cap_hid_control_channel ,regb 
+:      019130 l2cap_generate_disconnect_req:
+0x509a 019131 call l2cap_get_req_id 
+0x509b 019132 call l2cap_get_signal_tx_payload 
+0x509c 019133 force signal_disconnect_req ,pdata 
+0x509d 019134 istore 1 ,contw 
+0x509e 019135 fetch 1 ,mem_ml2cap_comm_id 
+0x509f 019136 istore 1 ,contw 
+0x50a0 019137 setarg 0x0004 
+0x50a1 019138 istore 2 ,contw 
+0x50a2 019139 copy rega ,pdata 
+0x50a3 019140 istore 2 ,contw 
+0x50a4 019141 copy regb ,pdata 
+0x50a5 019142 istore 2 ,contw 
+0x50a6 019143 force 0x08 ,temp 
+0x50a7 019144 branch ml2cap_send_signal 
+:      019146 ml2cap_send_signal_connect_req:
+0x50a8 019147 bpatchx patch23_0 ,mem_patch23 
+0x50a9 019148 call l2cap_get_req_id 
+0x50aa 019149 call l2cap_get_signal_tx_payload 
+0x50ab 019150 setarg signal_connect_req 
+0x50ac 019151 istore 1 ,contw 
+0x50ad 019152 fetch 1 ,mem_ml2cap_comm_id 
+0x50ae 019153 istore 1 ,contw 
+0x50af 019154 setarg 0x0004 
+0x50b0 019155 istore 2 ,contw 
+0x50b1 019156 copy temp ,pdata 
+0x50b2 019157 istore 2 ,contw 
+0x50b3 019158 copy timeup ,pdata 
+0x50b4 019159 istore 2 ,contw 
+0x50b5 019160 arg 8 ,temp 
+0x50b6 019161 branch ml2cap_send_signal 
+:      019162 ml2cap_send_signal_config_req:
+0x50b7 019163 bpatchx patch23_1 ,mem_patch23 
+0x50b8 019164 call l2cap_get_req_id 
+0x50b9 019165 call l2cap_get_signal_tx_payload 
+0x50ba 019166 setarg signal_config_req 
+0x50bb 019167 istore 1 ,contw 
+0x50bc 019168 fetch 1 ,mem_ml2cap_comm_id 
+0x50bd 019169 istore 1 ,contw 
+0x50be 019170 setarg 0x0008 
+0x50bf 019171 istore 2 ,contw 
+0x50c0 019173 copy temp ,pdata 
+0x50c1 019175 istore 2 ,contw 
+0x50c2 019176 setarg 0x0000 
+0x50c3 019177 istore 2 ,contw 
+0x50c4 019178 setarg 0x01 
+0x50c5 019179 istore 1 ,contw 
+0x50c6 019180 setarg 0x02 
+0x50c7 019181 istore 1 ,contw 
+0x50c8 019182 setarg l2cap_config_mtu_rfcomm 
+0x50c9 019183 istore 2 ,contw 
+0x50ca 019184 arg 0xc ,temp 
+0x50cb 019185 branch ml2cap_send_signal 
+:      019186 ml2cap_send_signal_disconn_req:
+0x50cc 019187 bpatchx patch23_2 ,mem_patch23 
+0x50cd 019188 call l2cap_get_req_id 
+0x50ce 019189 call l2cap_get_signal_tx_payload 
+0x50cf 019190 setarg signal_disconnect_req 
+0x50d0 019191 istore 1 ,contw 
+0x50d1 019192 fetch 1 ,mem_ml2cap_comm_id 
+0x50d2 019193 increase 1 ,pdata 
+0x50d3 019194 copy contw ,rega 
+0x50d4 019195 store 1 ,mem_ml2cap_comm_id 
+0x50d5 019196 copy rega ,contw 
+0x50d6 019197 istore 1 ,contw 
+0x50d7 019198 setarg 0x0004 
+0x50d8 019199 istore 2 ,contw 
+0x50d9 019200 copy temp ,pdata 
+0x50da 019201 istore 2 ,contw 
+0x50db 019202 copy timeup ,pdata 
+0x50dc 019203 istore 2 ,contw 
+0x50dd 019204 arg 0x8 ,temp 
+:      019207 ml2cap_send_signal:
+0x50de 019208 storet 2 ,mem_l2cap_signal_tx_length 
+0x50df 019209 copy temp ,pdata 
+0x50e0 019210 branch l2cap_malloc_discard ,blank 
+0x50e1 019211 call l2cap_get_signal_tx_buff 
+0x50e2 019212 fetch 2 ,mem_l2cap_signal_tx_length 
+0x50e3 019213 istore 2 ,contw 
+0x50e4 019214 force l2cap_signal_channel ,pdata 
+0x50e5 019215 istore 2 ,contw 
+0x50e6 019216 rtn 
+:      019218 msdp_send_req_done:
+0x50e7 019219 fetch 2 ,mem_sdp_tx_pkt_length 
+0x50e8 019220 branch assert ,blank 
+0x50e9 019221 call l2cap_get_sdp_tx_buff 
+0x50ea 019222 fetch 2 ,mem_sdp_tx_pkt_length 
+0x50eb 019223 istore 2 ,contw 
+0x50ec 019224 fetch 2 ,mem_sdp_remote_cid 
+0x50ed 019225 istore 2 ,contw 
+0x50ee 019226 rtn 
+:      019227 ml2cap_rx_multiplexing:
+0x50ef 019228 fetch 2 ,mem_l2cap_rx_pkt_length 
+0x50f0 019229 branch l2cap_rx_reset_state ,blank 
+0x50f1 019230 bpatchx patch23_3 ,mem_patch23 
+0x50f2 019231 fetch 1 ,mem_l2cap_rx_cid 
+0x50f3 019232 beq l2cap_signal_channel ,ml2cap_call_proc_signal 
+0x50f4 019233 beq l2cap_sdp_channel ,ml2cap_call_proc_sdp 
+0x50f5 019234 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm 
+0x50f6 019235 beq l2cap_hid_control_channel ,l2cap_call_proc_hid 
+0x50f7 019236 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid 
+0x50f8 019237 branch l2cap_rx_reset_state 
+:      019239 ml2cap_call_proc_signal:
+0x50f9 019240 bpatchx patch23_4 ,mem_patch23 
+0x50fa 019241 call l2cap_malloc_signal_channel 
+0x50fb 019242 force 0 ,regb 
+0x50fc 019243 call l2cap_get_signal_tx_payload 
+0x50fd 019244 copy pdata ,contw 
+0x50fe 019245 fetch 2 ,mem_l2cap_rx_pkt_length 
+0x50ff 019246 copy pdata ,regc 
+0x5100 019247 fetch 2 ,mem_l2cap_payload_ptr 
+0x5101 019248 iforce contr 
+:      019249 ml2cap_proc_one_comm_loop:
+0x5102 019250 call ml2cap_proc_one_comm 
+0x5103 019251 increase -4 ,regc 
+0x5104 019252 nbranch ml2cap_proc_one_comm_loop ,zero 
+0x5105 019253 copy regb ,temp 
+0x5106 019254 call ml2cap_send_signal 
+0x5107 019255 branch l2cap_rx_reset_state 
+:      019257 ml2cap_proc_one_comm:
+0x5108 019258 ifetch 1 ,contr 
+0x5109 019259 beq signal_connect_req ,ml2cap_proc_signal_connect_req 
+0x510a 019260 beq signal_cmd_reject ,ml2cap_proc_signal_cmd_reject 
+0x510b 019261 beq signal_connect_rsp ,ml2cap_proc_signal_connect_rsp 
+0x510c 019262 beq signal_config_rsp ,ml2cap_proc_signal_config_rsp 
+0x510d 019263 beq signal_config_req ,ml2cap_proc_signal_config_req 
+0x510e 019264 beq signal_disconnect_rsp ,ml2cap_proc_signal_disconn_rsp 
+0x510f 019265 beq signal_disconnect_req ,ml2cap_proc_signal_disconn_req 
+0x5110 019266 beq signal_echo_req ,l2cap_proc_signal_echo_req 
+0x5111 019267 beq signal_info_req ,ml2cap_proc_signal_info_req 
+0x5112 019268 branch ml2cap_proc_send_reject 
+:      019270 ml2cap_proc_signal_connect_req:
+0x5113 019271 call save_cont_pointers 
+0x5114 019273 call load_cont_pointers 
+0x5115 019274 branch l2cap_proc_signal_connect_req 
+:      019275 ml2cap_proc_signal_cmd_reject:
+0x5116 019276 ifetch 1 ,contr 
+0x5117 019277 copy pdata ,queue 
+0x5118 019278 ifetch 2 ,contr 
+0x5119 019279 copy pdata ,rega 
+0x511a 019280 copy regc ,pdata 
+0x511b 019281 isub rega ,regc 
+:      019282 mvptr:
+0x511c 019283 ifetch 1 ,contr 
+0x511d 019284 increase -1 ,rega 
+0x511e 019285 nbranch mvptr ,zero 
+0x511f 019286 rtn 
+:      019287 ml2cap_proc_signal_connect_rsp:
+0x5120 019288 ifetch 1 ,contr 
+0x5121 019289 copy pdata ,queue 
+0x5122 019290 ifetch 2 ,contr 
+0x5123 019291 copy pdata ,rega 
+0x5124 019292 ifetch 2 ,contr 
+0x5125 019293 copy pdata ,timeup 
+0x5126 019294 ifetch 2 ,contr 
+0x5127 019295 copy pdata ,temp 
+0x5128 019296 ifetch 2 ,contr 
+0x5129 019297 sub pdata ,0 ,null 
+0x512a 019298 branch ml2cap_proc_signal_connect_rsp_sucessful ,zero 
+0x512b 019299 beq l2cap_connect_refused_psm_unsupported ,ml2cap_proc_signal_connect_refused_result 
+0x512c 019300 beq l2cap_connect_refused_no_resources ,ml2cap_proc_signal_connect_refused_result 
+0x512d 019301 branch ml2cap_proc_signal_connect_rsp_mnosucc 
+:      019302 ml2cap_proc_signal_connect_refused_result:
+0x512e 019303 jam bt_evt_ml2cap_conn_refused ,mem_fifo_temp 
+0x512f 019304 call ui_ipc_send_event 
+:      019305 ml2cap_proc_signal_connect_rsp_mnosucc:
+0x5130 019306 ifetch 2 ,contr 
+0x5131 019307 branch mnosucc 
+:      019308 ml2cap_proc_signal_connect_rsp_sucessful:
+0x5132 019309 call save_cont_pointers 
+0x5133 019313 bpatchx patch23_5 ,mem_patch23 
+0x5134 019314 setarg l2cap_sdp_channel 
+0x5135 019315 isub temp ,null 
+0x5136 019316 branch ml2cap_proc_signal_connect_rsp_sdp ,zero 
+0x5137 019317 setarg l2cap_rfcomm_channel 
+0x5138 019318 isub temp ,null 
+0x5139 019319 branch ml2cap_proc_signal_connect_rsp_rfcomm ,zero 
+0x513a 019320 setarg l2cap_hid_interrupt_channel 
+0x513b 019321 isub temp ,null 
+0x513c 019322 branch ml2cap_proc_signal_connect_rsp_hid_int ,zero 
+0x513d 019323 setarg l2cap_hid_control_channel 
+0x513e 019324 isub temp ,null 
+0x513f 019325 branch ml2cap_proc_signal_connect_rsp_hid_ctrl ,zero 
+0x5140 019326 branch mnosucc 
+:      019327 ml2cap_proc_signal_connect_rsp_sdp:
+0x5141 019328 copy timeup ,pdata 
+0x5142 019329 store 2 ,mem_sdp_remote_cid 
+0x5143 019330 fetch 1 ,mem_sdp_state 
+0x5144 019331 set1 l2cap_channel_state_conn_res 
+0x5145 019332 store 1 ,mem_sdp_state 
+0x5146 019333 branch mnosucc1 
+:      019334 ml2cap_proc_signal_connect_rsp_rfcomm:
+0x5147 019335 copy timeup ,pdata 
+0x5148 019336 store 2 ,mem_rfcomm_remote_cid 
+0x5149 019337 fetch 1 ,mem_rfcomm_state 
+0x514a 019338 set1 l2cap_channel_state_conn_res 
+0x514b 019339 store 1 ,mem_rfcomm_state 
+0x514c 019340 branch mnosucc1 
+:      019341 ml2cap_proc_signal_connect_rsp_hid_ctrl:
+0x514d 019342 copy timeup ,pdata 
+0x514e 019343 store 2 ,mem_hid_ctrl_remote_cid 
+0x514f 019344 fetch 1 ,mem_hid_control_state 
+0x5150 019345 set1 l2cap_channel_state_conn_res 
+0x5151 019346 store 1 ,mem_hid_control_state 
+0x5152 019347 branch mnosucc1 
+:      019348 ml2cap_proc_signal_connect_rsp_hid_int:
+0x5153 019349 copy timeup ,pdata 
+0x5154 019350 store 2 ,mem_hid_int_remote_cid 
+0x5155 019351 fetch 1 ,mem_hid_interrupt_state 
+0x5156 019352 set1 l2cap_channel_state_conn_res 
+0x5157 019353 store 1 ,mem_hid_interrupt_state 
+:      019356 mnosucc1:
+0x5158 019357 call load_cont_pointers 
+:      019358 mnosucc:
+0x5159 019359 copy regc ,pdata 
+0x515a 019360 isub rega ,regc 
+0x515b 019361 rtn 
+:      019363 ml2cap_proc_signal_config_rsp:
+0x515c 019364 ifetch 1 ,contr 
+0x515d 019365 copy pdata ,queue 
+0x515e 019366 ifetch 2 ,contr 
+0x515f 019367 copy pdata ,rega 
+0x5160 019368 copy regc ,pdata 
+0x5161 019369 isub rega ,regc 
+0x5162 019370 ifetch 2 ,contr 
+0x5163 019371 copy pdata ,timeup 
+0x5164 019372 ifetch 2 ,contr 
+0x5165 019373 ifetch 2 ,contr 
+0x5166 019374 nbranch mcrsdone1 ,blank 
+0x5167 019375 call save_cont_pointers 
+0x5168 019379 copy timeup ,temp 
+0x5169 019380 bpatchx patch23_6 ,mem_patch23 
+0x516a 019381 setarg l2cap_sdp_channel 
+0x516b 019382 isub temp ,null 
+0x516c 019383 branch ml2cap_proc_signal_config_rsp_sdp ,zero 
+0x516d 019384 setarg l2cap_rfcomm_channel 
+0x516e 019385 isub temp ,null 
+0x516f 019386 branch ml2cap_proc_signal_config_rsp_rfcomm ,zero 
+0x5170 019387 setarg l2cap_hid_control_channel 
+0x5171 019388 isub temp ,null 
+0x5172 019389 branch ml2cap_proc_signal_config_rsp_hid_ctrl ,zero 
+0x5173 019390 setarg l2cap_hid_interrupt_channel 
+0x5174 019391 isub temp ,null 
+0x5175 019392 branch ml2cap_proc_signal_config_rsp_hid_int ,zero 
+:      019393 ml2cap_proc_signal_config_rsp_sdp:
+0x5176 019394 fetch 1 ,mem_sdp_state 
+0x5177 019395 set1 l2cap_channel_state_rcv_cfg_res 
+0x5178 019396 store 1 ,mem_sdp_state 
+0x5179 019397 rtn 
+:      019398 ml2cap_proc_signal_config_rsp_rfcomm:
+0x517a 019399 fetch 1 ,mem_rfcomm_state 
+0x517b 019400 set1 l2cap_channel_state_rcv_cfg_res 
+0x517c 019401 store 1 ,mem_rfcomm_state 
+0x517d 019402 rtn 
+:      019403 ml2cap_proc_signal_config_rsp_hid_ctrl:
+0x517e 019404 fetch 1 ,mem_hid_control_state 
+0x517f 019405 set1 l2cap_channel_state_rcv_cfg_res 
+0x5180 019406 store 1 ,mem_hid_control_state 
+0x5181 019407 rtn 
+:      019408 ml2cap_proc_signal_config_rsp_hid_int:
+0x5182 019409 fetch 1 ,mem_hid_interrupt_state 
+0x5183 019410 set1 l2cap_channel_state_rcv_cfg_res 
+0x5184 019411 store 1 ,mem_hid_interrupt_state 
+0x5185 019412 jam bt_evt_hid_connected ,mem_fifo_temp 
+0x5186 019413 branch ui_ipc_send_event 
+:      019416 mcfrsdone:
+0x5187 019417 call load_cont_pointers 
+:      019418 mcrsdone1:
+0x5188 019419 increase -6 ,rega 
+:      019420 mloop2:
+0x5189 019421 branch mcrsdone ,zero 
+0x518a 019422 increase 1 ,contr 
+0x518b 019423 increase -1 ,rega 
+0x518c 019424 branch mloop2 
+:      019425 mcrsdone:
+0x518d 019426 rtn 
+:      019427 ml2cap_proc_signal_config_req:
+0x518e 019428 ifetch 1 ,contr 
+0x518f 019429 copy pdata ,queue 
+0x5190 019430 ifetch 2 ,contr 
+0x5191 019431 copy pdata ,rega 
+0x5192 019432 copy regc ,pdata 
+0x5193 019433 isub rega ,regc 
+0x5194 019434 ifetch 2 ,contr 
+0x5195 019435 increase 2 ,contr 
+0x5196 019436 copy pdata ,temp 
+0x5197 019437 setarg signal_config_rsp 
+0x5198 019438 istore 1 ,contw 
+0x5199 019439 copy queue ,pdata 
+0x519a 019440 istore 1 ,contw 
+0x519b 019441 increase 2 ,rega 
+0x519c 019442 copy rega ,pdata 
+0x519d 019443 istore 2 ,contw 
+0x519e 019444 call save_cont_pointers 
+0x519f 019445 bpatchx patch23_7 ,mem_patch23 
+0x51a0 019446 setarg l2cap_sdp_channel 
+0x51a1 019447 isub temp ,null 
+0x51a2 019448 branch ml2cap_proc_signal_config_req_sdp ,zero 
+0x51a3 019449 setarg l2cap_rfcomm_channel 
+0x51a4 019450 isub temp ,null 
+0x51a5 019451 branch ml2cap_proc_signal_config_req_rfcomm ,zero 
+0x51a6 019452 setarg l2cap_hid_control_channel 
+0x51a7 019453 isub temp ,null 
+0x51a8 019454 branch ml2cap_proc_signal_config_req_hid_ctrl ,zero 
+0x51a9 019455 setarg l2cap_hid_interrupt_channel 
+0x51aa 019456 isub temp ,null 
+0x51ab 019457 branch ml2cap_proc_signal_config_req_hid_int ,zero 
+0x51ac 019458 branch mcfgrq_done 
+:      019459 ml2cap_proc_signal_config_req_sdp:
+0x51ad 019460 fetch 1 ,mem_sdp_state 
+0x51ae 019461 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+0x51af 019462 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+0x51b0 019463 store 1 ,mem_sdp_state 
+0x51b1 019464 bbit1 l2cap_channel_state_snd_cfg_req ,ml2cap_proc_signal_config_req_sdp_nsndreq 
+0x51b2 019465 fetcht 1 ,mem_control_tasks 
+0x51b3 019466 set1 l2cap_init_config_req ,temp 
+0x51b4 019467 storet 1 ,mem_control_tasks 
+0x51b5 019468 copy queue ,pdata 
+0x51b6 019469 increase 1 ,pdata 
+0x51b7 019470 store 1 ,mem_config_identifier 
+0x51b8 019471 fetch 1 ,mem_sdp_state 
+0x51b9 019472 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+0x51ba 019473 store 1 ,mem_sdp_state 
+:      019474 ml2cap_proc_signal_config_req_sdp_nsndreq:
+0x51bb 019475 fetch 2 ,mem_sdp_remote_cid 
+0x51bc 019476 store 2 ,mem_config_req_dest_cid 
+0x51bd 019477 branch mcfgrq_done 
+:      019478 ml2cap_proc_signal_config_req_rfcomm:
+0x51be 019479 fetch 1 ,mem_rfcomm_state 
+0x51bf 019480 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+0x51c0 019481 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+0x51c1 019482 store 1 ,mem_rfcomm_state 
+0x51c2 019483 fetch 2 ,mem_rfcomm_remote_cid 
+0x51c3 019484 branch mcfgrq_done 
+:      019485 ml2cap_proc_signal_config_req_hid_ctrl:
+0x51c4 019486 fetch 1 ,mem_hid_control_state 
+0x51c5 019487 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+0x51c6 019488 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+0x51c7 019489 store 1 ,mem_hid_control_state 
+0x51c8 019490 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x51c9 019491 branch mcfgrq_done 
+:      019492 ml2cap_proc_signal_config_req_hid_int:
+0x51ca 019493 fetch 1 ,mem_hid_interrupt_state 
+0x51cb 019494 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+0x51cc 019495 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+0x51cd 019496 store 1 ,mem_hid_interrupt_state 
+0x51ce 019497 fetch 2 ,mem_hid_int_remote_cid 
+:      019500 mcfgrq_done:
+0x51cf 019501 copy pdata ,timeup 
+0x51d0 019502 call load_cont_pointers 
+0x51d1 019504 copy timeup ,pdata 
+0x51d2 019506 istore 2 ,contw 
+0x51d3 019507 force 0x0000 ,pdata 
+0x51d4 019508 istore 2 ,contw 
+0x51d5 019509 force 0x0000 ,pdata 
+0x51d6 019510 istore 2 ,contw 
+0x51d7 019511 force 10 ,pdata 
+0x51d8 019512 iadd regb ,regb 
+0x51d9 019513 increase -6 ,rega 
+:      019514 mloop1:
+0x51da 019515 branch mcrqdone ,zero 
+0x51db 019516 ifetch 1 ,contr 
+0x51dc 019517 istore 1 ,contw 
+0x51dd 019518 increase 1 ,regb 
+0x51de 019519 increase -1 ,rega 
+0x51df 019520 branch mloop1 
+:      019521 mcrqdone:
+0x51e0 019522 rtn 
+:      019523 ml2cap_proc_signal_disconn_req:
+0x51e1 019524 ifetch 1 ,contr 
+0x51e2 019525 copy pdata ,queue 
+0x51e3 019526 ifetch 2 ,contr 
+0x51e4 019527 copy pdata ,rega 
+0x51e5 019528 copy regc ,pdata 
+0x51e6 019529 isub rega ,regc 
+0x51e7 019531 ifetch 2 ,contr 
+0x51e8 019532 copy pdata ,rega 
+0x51e9 019533 ifetch 2 ,contr 
+0x51ea 019534 copy pdata ,timeup 
+0x51eb 019535 call save_cont_pointers 
+0x51ec 019536 bpatchx patch24_0 ,mem_patch24 
+0x51ed 019537 setarg l2cap_sdp_channel 
+0x51ee 019538 copy rega ,temp 
+0x51ef 019539 isub temp ,null 
+0x51f0 019540 branch ml2cap_proc_signal_disconn_sdp ,zero 
+0x51f1 019541 setarg l2cap_hid_control_channel 
+0x51f2 019542 copy rega ,temp 
+0x51f3 019543 isub temp ,null 
+0x51f4 019544 branch ml2cap_proc_signal_disconn_hid_ctrl ,zero 
+0x51f5 019545 setarg l2cap_hid_interrupt_channel 
+0x51f6 019546 copy rega ,temp 
+0x51f7 019547 isub temp ,null 
+0x51f8 019548 branch ml2cap_proc_signal_disconn_hid_int ,zero 
+0x51f9 019549 branch mclsrfc 
+:      019550 ml2cap_proc_signal_disconn_sdp:
+0x51fa 019551 setarg 0x0000 
+0x51fb 019552 store 2 ,mem_sdp_tx_pkt_length 
+0x51fc 019553 store 2 ,mem_sdp_remote_cid 
+0x51fd 019554 store 1 ,mem_sdp_state 
+0x51fe 019555 branch mclssdp 
+:      019556 ml2cap_proc_signal_disconn_hid_ctrl:
+0x51ff 019557 call l2cap_reset_hid_ctrl_state 
+0x5200 019558 branch mclssdp 
+:      019559 ml2cap_proc_signal_disconn_hid_int:
+0x5201 019560 call l2cap_reset_hid_int_state 
+0x5202 019566 branch mclssdp 
+:      019567 mclsrfc:
+0x5203 019568 setarg 0x0000 
+0x5204 019569 store 2 ,mem_rfcomm_tx_pkt_length 
+:      019570 mclssdp:
+0x5205 019571 call load_cont_pointers 
+0x5206 019572 setarg signal_disconnect_rsp 
+0x5207 019573 istore 1 ,contw 
+0x5208 019574 copy queue ,pdata 
+0x5209 019575 istore 1 ,contw 
+0x520a 019576 setarg 0x0004 
+0x520b 019577 istore 2 ,contw 
+0x520c 019578 copy rega ,pdata 
+0x520d 019579 istore 2 ,contw 
+0x520e 019580 copy timeup ,pdata 
+0x520f 019581 istore 2 ,contw 
+0x5210 019582 force 8 ,pdata 
+0x5211 019583 iadd regb ,regb 
+0x5212 019584 rtn 
+:      019586 ml2cap_proc_signal_disconn_rsp:
+0x5213 019587 ifetch 1 ,contr 
+0x5214 019588 copy pdata ,queue 
+0x5215 019589 ifetch 2 ,contr 
+0x5216 019590 copy pdata ,rega 
+0x5217 019591 ifetch 2 ,contr 
+0x5218 019592 copy pdata ,timeup 
+0x5219 019593 ifetch 2 ,contr 
+0x521a 019594 copy pdata ,temp 
+0x521b 019595 call save_cont_pointers 
+0x521c 019596 bpatchx patch24_1 ,mem_patch24 
+0x521d 019597 fetch 1 ,mem_ml2cap_comm_id 
+0x521e 019598 icompare 0xff ,queue 
+0x521f 019599 nbranch mdisdone ,true 
+0x5220 019600 setarg l2cap_sdp_channel 
+0x5221 019601 isub temp ,null 
+0x5222 019602 branch ml2cap_proc_signal_disconn_rsp_sdp ,zero 
+0x5223 019603 setarg l2cap_rfcomm_channel 
+0x5224 019604 isub temp ,null 
+0x5225 019605 branch ml2cap_proc_signal_disconn_rsp_rfcomm ,zero 
+0x5226 019606 branch mdisdone 
+:      019607 ml2cap_proc_signal_disconn_rsp_sdp:
+0x5227 019608 jam 0 ,mem_sdp_remote_cid 
+0x5228 019609 jam 0 ,mem_sdp_state 
+0x5229 019610 branch mdisdone 
+:      019611 ml2cap_proc_signal_disconn_rsp_rfcomm:
+:      019614 mdisdone:
+0x522a 019615 call load_cont_pointers 
+0x522b 019616 copy regc ,pdata 
+0x522c 019617 isub rega ,regc 
+0x522d 019618 rtn 
+:      019620 ml2cap_proc_send_reject:
+0x522e 019621 setarg signal_cmd_reject 
+0x522f 019622 istore 1 ,contw 
+0x5230 019623 ifetch 1 ,contr 
+0x5231 019624 istore 1 ,contw 
+0x5232 019625 setarg 0x0002 
+0x5233 019626 istore 2 ,contw 
+0x5234 019627 setarg 0x0000 
+0x5235 019628 istore 2 ,contw 
+0x5236 019629 setarg 0x0006 
+0x5237 019630 iadd regb ,regb 
+0x5238 019631 force 4 ,regc 
+0x5239 019632 rtn 
+:      019635 l2cap_get_req_id:
+0x523a 019636 fetch 1 ,mem_ml2cap_comm_id 
+0x523b 019637 increase 1 ,pdata 
+0x523c 019638 bne 0 ,l2cap_get_req_id_ok 
+0x523d 019639 increase 1 ,pdata 
+:      019640 l2cap_get_req_id_ok:
+0x523e 019641 store 1 ,mem_ml2cap_comm_id 
+0x523f 019642 rtn 
+:      019652 l2cap_malloc:
+0x5240 019653 bpatchx patch24_2 ,mem_patch24 
+0x5241 019654 arg 0 ,regb 
+0x5242 019655 call l2cap_malloc_is_fifo_full 
+0x5243 019656 nbranch assert ,blank 
+0x5244 019657 call l2cap_malloc_get_full_map 
+0x5245 019658 arg mem_tx_buff0 ,regb 
+0x5246 019659 arg 0 ,queue 
+:      019660 l2cap_malloc_loop:
+0x5247 019661 fetcht 1 ,mem_used_map 
+0x5248 019662 qisolate1 temp 
+0x5249 019663 branch l2cap_malloc_next ,true 
+0x524a 019664 call l2cap_malloc_enough 
+0x524b 019665 sub timeup ,0 ,null 
+0x524c 019666 branch l2cap_malloc_next ,positive 
+0x524d 019667 call l2cap_malloc_into_fifo 
+0x524e 019668 branch l2cap_malloc_rtn 
+:      019669 l2cap_malloc_next:
+0x524f 019670 increase 128 ,regb 
+0x5250 019671 increase 1 ,queue 
+0x5251 019672 setarg 8 
+0x5252 019673 isub queue ,null 
+0x5253 019674 branch l2cap_malloc_loop ,positive 
+0x5254 019675 arg 0 ,regb 
+:      019676 l2cap_malloc_rtn:
+0x5255 019677 copy regb ,pdata 
+0x5256 019678 branch assert ,blank 
+0x5257 019679 rtn 
+:      019687 l2cap_malloc_fifo_out:
+0x5258 019688 bpatchx patch24_3 ,mem_patch24 
+0x5259 019689 call l2cap_malloc_fifo_get_first_ptr 
+0x525a 019690 increase 1 ,contr 
+0x525b 019691 ifetch 2 ,contr 
+0x525c 019692 rtn 
+:      019698 l2cap_malloc_free:
+0x525d 019699 bpatchx patch24_4 ,mem_patch24 
+0x525e 019700 call l2cap_malloc_fifo_get_first_ptr 
+0x525f 019701 copy contr ,contw 
+0x5260 019702 copy contr ,temp 
+0x5261 019703 setarg 0 
+0x5262 019704 istore 3 ,contw 
+0x5263 019705 rtn 
+:      019710 l2cap_malloc_discard:
+0x5264 019711 bpatchx patch24_5 ,mem_patch24 
+0x5265 019712 call l2cap_malloc_is_fifo_empty 
+0x5266 019713 branch assert ,blank 
+0x5267 019714 fetch 3 ,mem_tx_fifo2 
+0x5268 019715 store 3 ,mem_tx_fifo3 
+0x5269 019716 fetch 3 ,mem_tx_fifo1 
+0x526a 019717 store 3 ,mem_tx_fifo2 
+0x526b 019718 fetch 3 ,mem_tx_fifo0 
+0x526c 019719 store 3 ,mem_tx_fifo1 
+0x526d 019720 rtn 
+:      019726 l2cap_malloc_is_fifo_full:
+0x526e 019727 bpatchx patch24_6 ,mem_patch24 
+0x526f 019728 fetch 3 ,mem_tx_fifo0 
+0x5270 019729 rtn 
+:      019735 l2cap_malloc_is_fifo_nearly_full:
+0x5271 019736 bpatchx patch24_7 ,mem_patch24 
+0x5272 019737 fetch 3 ,mem_tx_fifo1 
+0x5273 019738 rtn 
+:      019744 l2cap_malloc_is_fifo_empty:
+0x5274 019745 bpatchx patch25_0 ,mem_patch25 
+0x5275 019746 fetch 3 ,mem_tx_fifo3 
+0x5276 019747 rtn 
+:      019752 l2cap_malloc_fifo_get_first_ptr:
+0x5277 019753 call l2cap_malloc_is_fifo_empty 
+0x5278 019754 branch assert ,blank 
+0x5279 019755 arg mem_tx_fifo0 ,contr 
+:      019756 l2cap_malloc_free_loop:
+0x527a 019757 ifetch 3 ,contr 
+0x527b 019758 branch l2cap_malloc_free_loop ,blank 
+0x527c 019759 increase -3 ,contr 
+0x527d 019760 rtn 
+:      019767 l2cap_malloc_get_full_map:
+0x527e 019768 bpatchx patch25_1 ,mem_patch25 
+0x527f 019769 arg 4 ,loopcnt 
+0x5280 019770 arg mem_tx_fifo0_map ,contr 
+0x5281 019771 arg 0 ,temp 
+:      019772 l2cap_malloc_get_full_map_loop:
+0x5282 019773 ifetch 3 ,contr 
+0x5283 019774 and pdata ,0xff ,pdata 
+0x5284 019775 ior temp ,temp 
+0x5285 019776 loop l2cap_malloc_get_full_map_loop 
+0x5286 019777 storet 1 ,mem_used_map 
+0x5287 019778 rtn 
+:      019786 l2cap_malloc_into_fifo:
+0x5288 019787 bpatchx patch25_2 ,mem_patch25 
+0x5289 019788 call l2cap_malloc_is_fifo_full 
+0x528a 019789 nbranch assert ,blank 
+0x528b 019790 call l2cap_malloc_is_fifo_empty 
+0x528c 019791 branch l2cap_malloc_into_fifo_no_push ,blank 
+0x528d 019792 fetch 3 ,mem_tx_fifo1 
+0x528e 019793 store 3 ,mem_tx_fifo0 
+0x528f 019794 ifetch 3 ,contr 
+0x5290 019795 istore 3 ,contw 
+0x5291 019796 ifetch 3 ,contr 
+0x5292 019797 istore 3 ,contw 
+0x5293 019798 setarg 0 
+0x5294 019799 istore 3 ,contw 
+:      019800 l2cap_malloc_into_fifo_no_push:
+0x5295 019801 arg 0 ,temp 
+0x5296 019802 copy timeup ,pdata 
+0x5297 019803 iadd queue ,pdata 
+:      019804 l2cap_malloc_into_fifo_loop:
+0x5298 019805 qset1 temp 
+0x5299 019806 increase 1 ,queue 
+0x529a 019807 isub queue ,null 
+0x529b 019808 nbranch l2cap_malloc_into_fifo_loop ,zero 
+0x529c 019810 lshift8 regb ,pdata 
+0x529d 019811 ior temp ,pdata 
+0x529e 019812 store 3 ,mem_tx_fifo3 
+0x529f 019813 rtn 
+:      019823 l2cap_malloc_enough:
+0x52a0 019824 bpatchx patch25_3 ,mem_patch25 
+0x52a1 019825 call l2cap_malloc_get_full_map 
+0x52a2 019826 copy queue ,regc 
+0x52a3 019827 arg 0 ,temp 
+0x52a4 019828 arg 0 ,timeup 
+:      019830 l2cap_malloc_enough_loop:
+0x52a5 019831 copy queue ,pdata 
+0x52a6 019832 beq 8 ,l2cap_malloc_enough_end 
+0x52a7 019833 fetch 1 ,mem_used_map 
+0x52a8 019834 qisolate1 pdata 
+0x52a9 019835 branch l2cap_malloc_enough_end ,true 
+0x52aa 019836 increase 128 ,temp 
+0x52ab 019837 increase 1 ,queue 
+0x52ac 019838 copy rega ,pdata 
+0x52ad 019839 isub temp ,null 
+0x52ae 019840 branch l2cap_malloc_enough_end ,zero 
+0x52af 019841 branch l2cap_malloc_enough_loop ,positive 
+:      019842 l2cap_malloc_enough_end:
+0x52b0 019843 copy temp ,pdata 
+0x52b1 019844 isub rega ,null 
+0x52b2 019845 nbranch l2cap_malloc_enough_rtn ,positive 
+0x52b3 019846 copy queue ,pdata 
+0x52b4 019847 copy regc ,temp 
+0x52b5 019848 isub temp ,timeup 
+:      019849 l2cap_malloc_enough_rtn:
+0x52b6 019850 copy regc ,queue 
+0x52b7 019851 rtn 
+:      019854 l2cap_malloc_signal_channel:
+0x52b8 019855 bpatchx patch25_4 ,mem_patch25 
+0x52b9 019856 arg l2cap_signal_malloc_size ,rega 
+0x52ba 019857 call l2cap_malloc 
+0x52bb 019858 store 2 ,mem_l2cap_signal_tx_buff_ptr 
+0x52bc 019859 increase 4 ,pdata 
+0x52bd 019860 store 2 ,mem_l2cap_signal_tx_payload_ptr 
+0x52be 019861 setarg 0 
+0x52bf 019862 store 2 ,mem_l2cap_signal_tx_length 
+0x52c0 019863 rtn 
+:      019865 l2cap_get_signal_tx_buff:
+0x52c1 019866 fetch 2 ,mem_l2cap_signal_tx_buff_ptr 
+0x52c2 019867 branch l2cap_util_pdata_to_contw 
+:      019869 l2cap_get_signal_tx_payload:
+0x52c3 019870 fetch 2 ,mem_l2cap_signal_tx_payload_ptr 
+0x52c4 019871 branch l2cap_util_pdata_to_contw 
+:      019874 l2cap_malloc_sdp_channel:
+0x52c5 019875 bpatchx patch25_5 ,mem_patch25 
+0x52c6 019876 arg sdp_malloc_size ,rega 
+0x52c7 019877 call l2cap_malloc 
+0x52c8 019878 store 2 ,mem_sdp_tx_buff_ptr 
+0x52c9 019879 increase 4 ,pdata 
+0x52ca 019880 store 2 ,mem_sdp_tx_payload_ptr 
+0x52cb 019881 setarg 0 
+0x52cc 019882 store 2 ,mem_sdp_tx_pkt_length 
+0x52cd 019883 rtn 
+:      019885 l2cap_get_sdp_tx_buff:
+0x52ce 019886 fetch 2 ,mem_sdp_tx_buff_ptr 
+0x52cf 019887 branch l2cap_util_pdata_to_contw 
+:      019889 l2cap_get_sdp_tx_payload:
+0x52d0 019890 fetch 2 ,mem_sdp_tx_payload_ptr 
+0x52d1 019891 branch l2cap_util_pdata_to_contw 
+:      019894 l2cap_malloc_rfcomm_channel:
+0x52d2 019895 bpatchx patch25_6 ,mem_patch25 
+0x52d3 019896 call push_stack 
+0x52d4 019897 jam rfcomm_malloc_fail ,mem_rfcomm_malloc_fail_flag 
+0x52d5 019898 call l2cap_malloc_is_fifo_full 
+0x52d6 019899 nrtn blank 
+0x52d7 019900 arg rfcomm_malloc_size ,rega 
+0x52d8 019901 call l2cap_malloc 
+0x52d9 019902 store 2 ,mem_rfcomm_tx_buff_ptr 
+0x52da 019903 increase 4 ,pdata 
+0x52db 019904 store 2 ,mem_rfcomm_tx_payload_ptr 
+0x52dc 019905 setarg 0 
+0x52dd 019906 store 2 ,mem_rfcomm_tx_pkt_length 
+0x52de 019907 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag 
+0x52df 019908 branch pop_stack 
+:      019910 l2cap_get_rfcomm_tx_buff:
+0x52e0 019911 fetch 2 ,mem_rfcomm_tx_buff_ptr 
+0x52e1 019912 branch l2cap_util_pdata_to_contw 
+:      019914 l2cap_util_pdata_to_contw:
+0x52e2 019915 branch assert ,blank 
+0x52e3 019916 copy pdata ,contw 
+0x52e4 019917 rtn 
+:      019920 l2cap_lpm_save_calc_len:
+0x52e5 019921 bpatchx patch25_7 ,mem_patch25 
+0x52e6 019922 arg 0 ,regb 
+0x52e7 019923 arg mem_tx_fifo0_map ,rega 
+0x52e8 019924 increase -2 ,rega 
+:      019925 l2cap_lpm_save_calc_len_loop:
+0x52e9 019926 increase 2 ,rega 
+0x52ea 019927 setarg mem_tx_fifo_end 
+0x52eb 019928 isub rega ,null 
+0x52ec 019929 branch l2cap_lpm_save_calc_len_end ,zero 
+0x52ed 019930 ifetch 1 ,rega 
+0x52ee 019931 increase 1 ,rega 
+0x52ef 019932 branch l2cap_lpm_save_calc_len_loop ,blank 
+0x52f0 019933 ifetcht 2 ,rega 
+0x52f1 019934 ifetch 2 ,temp 
+0x52f2 019935 iadd regb ,regb 
+0x52f3 019936 increase 4 ,regb 
+0x52f4 019937 branch l2cap_lpm_save_calc_len_loop 
+:      019938 l2cap_lpm_save_calc_len_end:
+0x52f5 019939 copy regb ,pdata 
+0x52f6 019940 rtn 
+:      019943 l2cap_lpm_get_wake_lock:
+0x52f7 019944 arg wake_lock_l2cap_tx ,queue 
+0x52f8 019945 branch lpm_get_wake_lock 
+:      019947 l2cap_lpm_put_wake_lock:
+0x52f9 019948 arg wake_lock_l2cap_tx ,queue 
+0x52fa 019949 branch lpm_put_wake_lock 
+:      019951 l2cap_lpm_save_txbuf:
+0x52fb 019952 bpatchx patch26_0 ,mem_patch26 
+0x52fc 019953 call l2cap_malloc_get_full_map 
+0x52fd 019954 fetch 1 ,mem_used_map 
+0x52fe 019955 rtn blank 
+0x52ff 019956 call l2cap_lpm_save_calc_len 
+0x5300 019957 arg l2cap_lpm_txbuf_len ,temp 
+0x5301 019958 isub temp ,null 
+0x5302 019959 branch l2cap_lpm_get_wake_lock ,positive 
+0x5303 019960 call l2cap_lpm_put_wake_lock 
+0x5304 019961 arg mem_l2cap_lpm_txbuf ,contw 
+0x5305 019962 arg mem_tx_fifo0 ,rega 
+:      019963 l2cap_lpm_save_txbuf_loop:
+0x5306 019964 setarg mem_tx_fifo_end 
+0x5307 019965 isub rega ,null 
+0x5308 019966 rtn zero 
+0x5309 019967 ifetch 1 ,rega 
+0x530a 019968 increase 1 ,rega 
+0x530b 019969 nbranch l2cap_lpm_save_txbuf_nempty ,blank 
+0x530c 019970 istore 2 ,contw 
+0x530d 019971 increase 2 ,rega 
+0x530e 019972 branch l2cap_lpm_save_txbuf_loop 
+:      019973 l2cap_lpm_save_txbuf_nempty:
+0x530f 019974 ifetch 2 ,rega 
+0x5310 019975 increase 2 ,rega 
+0x5311 019976 copy pdata ,contr 
+0x5312 019977 ifetch 2 ,contr 
+0x5313 019978 istore 2 ,contw 
+0x5314 019979 copy pdata ,loopcnt 
+0x5315 019980 increase 2 ,loopcnt 
+0x5316 019981 call memcpy 
+0x5317 019982 branch l2cap_lpm_save_txbuf_loop 
+:      019984 l2cap_lpm_load_txbuf:
+0x5318 019985 bpatchx patch26_1 ,mem_patch26 
+0x5319 019986 call l2cap_malloc_get_full_map 
+0x531a 019987 fetch 1 ,mem_used_map 
+0x531b 019988 rtn blank 
+0x531c 019989 arg mem_tx_fifo0_ptr ,rega 
+0x531d 019990 increase -3 ,rega 
+0x531e 019991 arg mem_l2cap_lpm_txbuf ,contr 
+:      019992 l2cap_lpm_load_txbuf_loop:
+0x531f 019993 increase 3 ,rega 
+0x5320 019994 setarg mem_tx_fifo_end + 1 
+0x5321 019995 isub rega ,null 
+0x5322 019996 rtn zero 
+0x5323 019997 ifetch 2 ,contr 
+0x5324 019998 branch l2cap_lpm_load_txbuf_loop ,blank 
+0x5325 019999 increase 4 ,pdata 
+0x5326 020000 copy pdata ,loopcnt 
+0x5327 020001 copy contr ,regb 
+0x5328 020002 ifetch 2 ,rega 
+0x5329 020003 copy pdata ,contw 
+0x532a 020004 copy regb ,contr 
+0x532b 020005 increase -2 ,contr 
+0x532c 020006 call memcpy 
+0x532d 020007 branch l2cap_lpm_load_txbuf_loop 
+:      020017 le_init_conn:
+0x532e 020018 bpatchx patch26_2 ,mem_patch26 
+0x532f 020019 disable wake 
+0x5330 020020 jam 1 ,mem_le_conn_handle 
+0x5331 020021 jam 3 ,mem_le_state 
+0x5332 020022 jam 1 ,mem_le_arq 
+0x5333 020023 setarg -1 
+0x5334 020024 store 2 ,mem_le_event_count 
+0x5335 020025 force 0 ,pdata 
+0x5336 020026 store 1 ,mem_le_ch 
+0x5337 020027 store 1 ,mem_le_op 
+0x5338 020028 store 3 ,mem_sniff_rcv 
+0x5339 020029 store 3 ,mem_sniff_lost 
+0x533a 020030 store 5 ,mem_le_pcnt_tx 
+0x533b 020031 set1 39 ,pdata 
+0x533c 020032 store 5 ,mem_le_pcnt_rx 
+0x533d 020033 jam 1 ,mem_le_txheader 
+0x533e 020034 jam 0 ,mem_le_txlen 
+0x533f 020035 branch le_supervision_flush 
+:      020037 le_init_master:
+0x5340 020038 bpatchx patch26_3 ,mem_patch26 
+0x5341 020039 enable master 
+0x5342 020040 jam lemode_master ,mem_le_mode 
+0x5343 020041 jam 1 ,mem_le_att_handle 
+0x5344 020042 jam 1 ,mem_le_search_handle_start 
+0x5345 020043 setarg 0xffff 
+0x5346 020044 store 2 ,mem_le_search_handle_end 
+0x5347 020045 force 0 ,pdata 
+0x5348 020046 store 5 ,mem_le_pcnt_rx 
+0x5349 020047 set1 39 ,pdata 
+0x534a 020048 store 5 ,mem_le_pcnt_tx 
+0x534b 020049 branch le_init_conn 
+:      020052 le_init_slave:
+0x534c 020053 bpatchx patch26_4 ,mem_patch26 
+0x534d 020054 disable master 
+0x534e 020055 setarg 0x17 
+0x534f 020056 store 2 ,mem_le_remote_mtu 
+0x5350 020057 jam lemode_slave ,mem_le_mode 
+0x5351 020058 jam 0 ,mem_le_adv_enable 
+0x5352 020059 jam 0 ,mem_lpm_current_mult 
+0x5353 020060 jam flag_le_pairing_null ,mem_le_pairing_state 
+0x5354 020061 jam flag_le_enc_null ,mem_le_enc_state 
+0x5355 020062 fetch 2 ,mem_le_superto 
+0x5356 020063 store 2 ,mem_le_init_superto 
+0x5357 020064 fetch 2 ,mem_le_tsniff 
+0x5358 020065 mul32 pdata ,5 ,pdata 
+0x5359 020066 rshift4 pdata ,pdata 
+0x535a 020067 store 2 ,mem_le_superto 
+0x535b 020068 branch le_init_conn 
+:      020074 le_dispatch:
+0x535c 020075 call le_enable 
+0x535d 020076 call le_scan 
+0x535e 020077 call le_adv 
+0x535f 020078 branch le_disable 
+:      020080 le_conn_dispatch:
+0x5360 020081 bpatchx patch26_5 ,mem_patch26 
+0x5361 020082 call le_enable 
+0x5362 020083 call app_process_ble 
+0x5363 020084 fetch 1 ,mem_le_mode 
+0x5364 020085 beq lemode_master ,le_master_dispatch 
+0x5365 020086 branch le_slave_dispatch 
+:      020092 le_master_dispatch:
+0x5366 020093 bpatchx patch26_6 ,mem_patch26 
+0x5367 020094 enable master 
+0x5368 020095 call le_supervision_update 
+0x5369 020096 branch le_master_disconn ,positive 
+0x536a 020097 call check_ble_disabled 
+0x536b 020098 call le_setup 
+0x536c 020099 call le_prepare_tx 
+0x536d 020100 disable match 
+0x536e 020101 call le_transmit_receive_sifs 
+0x536f 020102 nrtn match 
+0x5370 020103 bpatchx patch26_7 ,mem_patch26 
+0x5371 020104 fetch 1 ,mem_le_conn_rcv 
+0x5372 020105 increase 1 ,pdata 
+0x5373 020106 store 1 ,mem_le_conn_rcv 
+0x5374 020107 call le_acknowledge 
+0x5375 020108 disable master 
+0x5376 020109 rtn 
+:      020111 le_master_disconn:
+0x5377 020112 call le_disconnect 
+0x5378 020113 disable master 
+0x5379 020114 rtn 
+:      020119 le_slave_dispatch:
+0x537a 020120 bpatchx patch27_0 ,mem_patch27 
+0x537b 020121 jam 0 ,mem_le_md_count 
+0x537c 020122 call sp_calc_sequence_256 
+0x537d 020123 call le_secure_connect_sm 
+0x537e 020124 disable attempt 
+0x537f 020125 call le_supervision_update 
+0x5380 020126 branch le_slave_disconn ,positive 
+0x5381 020127 call check_ble_disabled 
+0x5382 020128 call le_setup 
+0x5383 020129 call le_receive_slave 
+0x5384 020130 nbranch le_slave_unsync ,sync 
+0x5385 020131 call le_got_first_packet 
+0x5386 020132 branch le_slave_match ,match 
+0x5387 020133 branch le_slave_cont 
+:      020136 le_slave_match:
+0x5388 020137 bpatchx patch27_1 ,mem_patch27 
+0x5389 020138 fetch 1 ,mem_le_md_count 
+0x538a 020139 pincrease 1 
+0x538b 020140 store 1 ,mem_le_md_count 
+0x538c 020141 beq le_md_max_count ,le_slave_cont 
+0x538d 020142 call le_acknowledge 
+0x538e 020143 call le_prepare_tx 
+0x538f 020144 call le_transmit_norx 
+0x5390 020145 call le_parse 
+0x5391 020146 fetch 2 ,mem_cb_ble_transmit 
+0x5392 020147 call callback_func 
+0x5393 020148 call le_check_md 
+0x5394 020149 branch le_slave_more_data ,user 
+:      020150 le_slave_cont:
+0x5395 020151 bpatchx patch27_2 ,mem_patch27 
+0x5396 020152 call le_pairing_sm 
+0x5397 020153 call le_check_paring_time 
+0x5398 020154 call check_51cmd 
+0x5399 020155 fetch 1 ,mem_le_op 
+0x539a 020156 bbit1 op_disconn ,le_slave_disconn 
+:      020157 le_slave_unsync:
+0x539b 020158 bpatchx patch27_3 ,mem_patch27 
+0x539c 020159 call le_lpm_set_mult 
+0x539d 020160 call le_update_channel_map 
+0x539e 020161 call le_update_param 
+0x539f 020162 branch calc_clke_offset 
+:      020165 le_check_md:
+0x53a0 020166 disable user 
+0x53a1 020167 bmark1 mark_ble_rx_md ,enable_user 
+0x53a2 020168 bmark1 mark_ble_tx_md ,enable_user 
+0x53a3 020169 rtn 
+:      020172 le_slave_more_data:
+0x53a4 020173 bpatchx patch27_4 ,mem_patch27 
+0x53a5 020174 enable attempt 
+0x53a6 020175 call le_transmit_receive_sifs_notx 
+0x53a7 020176 branch le_slave_match ,match 
+0x53a8 020177 branch le_slave_cont 
+:      020179 le_slave_disconn:
+:      020182 le_disconnect:
+0x53a9 020183 bpatchx patch27_5 ,mem_patch27 
+0x53aa 020184 call le_clear_connection_info 
+0x53ab 020185 call app_disconn_reason_collect_ble 
+0x53ac 020186 call sp_initialize_256 
+0x53ad 020187 jam bt_evt_le_disconnected ,mem_fifo_temp 
+0x53ae 020188 branch ui_ipc_send_event 
+:      020190 le_clear_connection_info:
+0x53af 020191 setarg 0 
+0x53b0 020192 store 9 ,mem_le_tx_buff_used 
+0x53b1 020193 jam 0 ,mem_le_conn_handle 
+0x53b2 020194 jam lemode_idle ,mem_le_mode 
+0x53b3 020195 jam 0 ,mem_le_state 
+0x53b4 020196 jam flag_le_enc_null ,mem_le_enc_state 
+0x53b5 020197 jam flag_le_pairing_null ,mem_le_pairing_state 
+0x53b6 020198 rtn 
+:      020200 le_got_first_packet:
+0x53b7 020201 bpatchx patch27_6 ,mem_patch27 
+0x53b8 020202 fetch 1 ,mem_le_conn_rcv 
+0x53b9 020203 increase 1 ,pdata 
+0x53ba 020204 store 1 ,mem_le_conn_rcv 
+0x53bb 020205 fetch 1 ,mem_le_state 
+0x53bc 020206 rtnbit1 lestate_got_first_packet 
+0x53bd 020207 set1 lestate_got_first_packet 
+0x53be 020208 store 1 ,mem_le_state 
+0x53bf 020209 fetch 2 ,mem_le_init_superto 
+0x53c0 020210 store 2 ,mem_le_superto 
+0x53c1 020211 setarg 0 
+0x53c2 020212 store 4 ,mem_le_transmit_window 
+0x53c3 020213 rtn 
+:      020216 le_enable:
+0x53c4 020217 bpatchx patch27_7 ,mem_patch27 
+0x53c5 020218 jam 0x36 ,rf_adc_goff 
+0x53c6 020219 jam 0x5f ,rf_agc_nsat 
+0x53c7 020220 enable le 
+0x53c8 020221 jam 7 ,rfen_ulp 
+0x53c9 020222 call check_ble_disabled 
+0x53ca 020223 fetch 1 ,mem_250k_freq_enable 
+0x53cb 020224 rtn blank 
+0x53cc 020225 jam 0xb8 ,rf_iq_gain 
+0x53cd 020226 rtn 
+:      020228 le_disable:
+0x53ce 020229 bpatchx patch28_0 ,mem_patch28 
+0x53cf 020230 jam 0x2e ,rf_adc_goff 
+0x53d0 020231 jam 0xff ,rf_agc_nsat 
+0x53d1 020232 disable le 
+0x53d2 020233 jam 3 ,rfen_ulp 
+0x53d3 020234 arg 0 ,stop_watch 
+0x53d4 020235 rtn 
+:      020237 le_prep:
+0x53d5 020238 disable enable_crc 
+0x53d6 020239 disable enable_white 
+0x53d7 020240 fetch 3 ,mem_le_crcinit 
+0x53d8 020241 iforce crc24_init 
+0x53d9 020242 fetch 1 ,mem_le_ch_mapped 
+0x53da 020243 reverse pdata ,temp 
+0x53db 020244 set1 1 ,temp 
+0x53dc 020245 rshift temp ,white_init 
+0x53dd 020246 rtn 
+:      020249 lerx_setfreq:
+0x53de 020250 call le_setfreq 
+0x53df 020251 call set_freq_rx 
+0x53e0 020252 setarg param_pll_setup 
+0x53e1 020253 call sleep 
+0x53e2 020254 branch rf_rx_enable 
+:      020256 letx_setfreq:
+0x53e3 020257 branch txon ,match 
+:      020258 letx_setfreq0:
+0x53e4 020259 call le_setfreq 
+0x53e5 020260 branch set_freq_tx 
+:      020261 le_setfreq:
+0x53e6 020262 bpatchx patch28_1 ,mem_patch28 
+0x53e7 020263 call set_sync_on 
+0x53e8 020264 fetch 1 ,mem_le_testtype 
+0x53e9 020265 nbranch le_ctf_test ,blank 
+0x53ea 020266 fetch 1 ,mem_le_ch_mapped 
+0x53eb 020267 sub pdata ,36 ,null 
+0x53ec 020268 branch le_ctf_normal ,positive 
+0x53ed 020269 force 0 ,temp 
+0x53ee 020270 rtneq 37 
+0x53ef 020271 force 24 ,temp 
+0x53f0 020272 rtneq 38 
+0x53f1 020273 force 78 ,temp 
+0x53f2 020274 rtn 
+:      020276 le_ctf_normal:
+0x53f3 020277 sub pdata ,10 ,null 
+0x53f4 020278 branch le_ctf_low ,positive 
+0x53f5 020279 increase 1 ,pdata 
+:      020281 le_ctf_low:
+0x53f6 020282 lshift pdata ,pdata 
+0x53f7 020283 add pdata ,2 ,temp 
+0x53f8 020284 rtn 
+:      020286 le_ctf_test:
+0x53f9 020287 fetch 1 ,mem_le_ch_mapped 
+0x53fa 020288 lshift pdata ,temp 
+0x53fb 020289 rtn 
+:      020291 le_sca_map:
+0x53fc 020292 arg 500 ,temp 
+0x53fd 020293 rtn blank 
+0x53fe 020294 arg 250 ,temp 
+0x53ff 020295 rtneq 1 
+0x5400 020296 arg 150 ,temp 
+0x5401 020297 rtneq 2 
+0x5402 020298 arg 100 ,temp 
+0x5403 020299 rtneq 3 
+0x5404 020300 arg 75 ,temp 
+0x5405 020301 rtneq 4 
+0x5406 020302 arg 50 ,temp 
+0x5407 020303 rtneq 5 
+0x5408 020304 arg 40 ,temp 
+0x5409 020305 rtneq 6 
+0x540a 020306 arg 20 ,temp 
+0x540b 020307 rtn 
+:      020311 le_adv_access:
+0x540c 020312 setarg 0x8e89be 
+0x540d 020313 lshift8 pdata ,pdata 
+0x540e 020314 or_into 0xd6 ,pdata 
+0x540f 020315 iforce access 
+0x5410 020316 setarg 0x555555 
+0x5411 020317 store 3 ,mem_le_crcinit 
+0x5412 020318 rtn 
+:      020320 le_setup:
+0x5413 020321 bpatchx patch28_2 ,mem_patch28 
+0x5414 020322 enable swfine 
+0x5415 020323 fetch 4 ,mem_le_access 
+0x5416 020324 iforce access 
+0x5417 020325 call le_map_channel 
+0x5418 020326 setarg 0x200 
+0x5419 020327 branch le_setup_master ,master 
+0x541a 020328 fetch 2 ,mem_le_receive_window 
+0x541b 020329 rshift pdata ,pdata 
+:      020330 le_setup_master:
+0x541c 020331 arg param_pll_setup ,temp 
+0x541d 020332 iadd temp ,pdata 
+0x541e 020333 call ahead_window 
+0x541f 020334 deposit clke 
+0x5420 020335 store 6 ,mem_le_rxon_ts 
+0x5421 020336 rtn 
+:      020338 le_next_adv_channel:
+0x5422 020339 bpatchx patch28_3 ,mem_patch28 
+0x5423 020340 fetch 1 ,mem_le_ch_mapped 
+0x5424 020341 beq 37 ,le_next_adv_channel_curr_channel_37 
+0x5425 020342 beq 38 ,le_next_adv_channel_curr_channel_38 
+0x5426 020343 beq 39 ,le_next_adv_channel_curr_channel_39 
+0x5427 020344 branch le_next_adv_channel_curr_channel_39 
+:      020346 le_next_adv_channel_curr_channel_37:
+0x5428 020347 fetcht 1 ,mem_le_adv_channel_map 
+0x5429 020348 isolate1 bit_adv_channel_map_38 ,temp 
+0x542a 020349 branch set_le_next_adv_channel_38 ,true 
+0x542b 020350 isolate1 bit_adv_channel_map_39 ,temp 
+0x542c 020351 branch set_le_next_adv_channel_39 ,true 
+0x542d 020352 branch set_le_next_adv_channel_37 
+:      020355 le_next_adv_channel_curr_channel_38:
+0x542e 020356 fetcht 1 ,mem_le_adv_channel_map 
+0x542f 020357 isolate1 bit_adv_channel_map_39 ,temp 
+0x5430 020358 branch set_le_next_adv_channel_39 ,true 
+0x5431 020359 isolate1 bit_adv_channel_map_37 ,temp 
+0x5432 020360 branch set_le_next_adv_channel_37 ,true 
+0x5433 020361 branch set_le_next_adv_channel_38 
+:      020364 le_next_adv_channel_curr_channel_39:
+0x5434 020365 fetcht 1 ,mem_le_adv_channel_map 
+0x5435 020366 isolate1 bit_adv_channel_map_37 ,temp 
+0x5436 020367 branch set_le_next_adv_channel_37 ,true 
+0x5437 020368 isolate1 bit_adv_channel_map_38 ,temp 
+0x5438 020369 branch set_le_next_adv_channel_38 ,true 
+0x5439 020370 branch set_le_next_adv_channel_39 
+:      020374 set_le_next_adv_channel_37:
+0x543a 020375 jam 37 ,mem_le_ch_mapped 
+0x543b 020376 fetch 1 ,mem_le_adv_channel_map_temp 
+0x543c 020377 set1 bit_adv_channel_map_37 ,pdata 
+0x543d 020378 store 1 ,mem_le_adv_channel_map_temp 
+0x543e 020379 rtn 
+:      020381 set_le_next_adv_channel_38:
+0x543f 020382 jam 38 ,mem_le_ch_mapped 
+0x5440 020383 fetch 1 ,mem_le_adv_channel_map_temp 
+0x5441 020384 set1 bit_adv_channel_map_38 ,pdata 
+0x5442 020385 store 1 ,mem_le_adv_channel_map_temp 
+0x5443 020386 rtn 
+:      020388 set_le_next_adv_channel_39:
+0x5444 020389 jam 39 ,mem_le_ch_mapped 
+0x5445 020390 fetch 1 ,mem_le_adv_channel_map_temp 
+0x5446 020391 set1 bit_adv_channel_map_39 ,pdata 
+0x5447 020392 store 1 ,mem_le_adv_channel_map_temp 
+0x5448 020393 rtn 
+:      020397 le_context_nexthop:
+0x5449 020398 bpatchx patch28_4 ,mem_patch28 
+0x544a 020399 add rega ,coffset_mode ,contr 
+0x544b 020400 ifetch 1 ,contr 
+0x544c 020401 rtnbit0 mode_le 
+0x544d 020402 add rega ,coffset_le_event_cnt ,contw 
+0x544e 020403 ifetch 2 ,contw 
+0x544f 020404 increase 1 ,pdata 
+0x5450 020405 istore 2 ,contw 
+0x5451 020406 add rega ,coffset_le_hop ,contr 
+0x5452 020407 ifetch 1 ,contr 
+0x5453 020408 add rega ,coffset_le_ch ,contw 
+0x5454 020409 ifetcht 1 ,contw 
+0x5455 020410 iadd temp ,pdata 
+0x5456 020411 sub pdata ,36 ,null 
+0x5457 020412 branch le_nexthop_nowrap ,positive 
+0x5458 020413 increase -37 ,pdata 
+:      020414 le_nexthop_nowrap:
+0x5459 020415 istore 1 ,contw 
+0x545a 020416 rtn 
+:      020419 le_calc_channel_map:
+0x545b 020420 bpatchx patch28_5 ,mem_patch28 
+0x545c 020421 fetch 5 ,mem_le_channel_map 
+0x545d 020422 force 0 ,temp 
+0x545e 020423 force 37 ,loopcnt 
+:      020424 le_count_channels_loop:
+0x545f 020425 bbit0 0 ,le_count_channels_notused 
+0x5460 020426 increase 1 ,temp 
+:      020427 le_count_channels_notused:
+0x5461 020428 rshift pdata ,pdata 
+0x5462 020429 loop le_count_channels_loop 
+0x5463 020430 add temp ,-1 ,pdata 
+0x5464 020431 store 1 ,mem_le_channels 
+0x5465 020432 rtn 
+:      020434 le_map_channel:
+0x5466 020435 bpatchx patch28_6 ,mem_patch28 
+0x5467 020436 fetch 1 ,mem_le_ch 
+0x5468 020437 iforce queue 
+0x5469 020438 fetcht 5 ,mem_le_channel_map 
+0x546a 020439 qisolate1 temp 
+0x546b 020440 branch le_map_channel_end ,true 
+:      020441 le_map_channel_next:
+0x546c 020442 bpatchx patch28_7 ,mem_patch28 
+0x546d 020443 fetch 1 ,mem_le_channels 
+0x546e 020444 isub queue ,pdata 
+0x546f 020445 branch le_map_channel_cont ,positive 
+0x5470 020446 sub pdata ,-1 ,queue 
+0x5471 020447 branch le_map_channel_next 
+:      020448 le_map_channel_cont:
+0x5472 020449 copy queue ,loopcnt 
+0x5473 020450 force 0 ,queue 
+:      020451 le_map_channel_loop:
+0x5474 020452 qisolate1 temp 
+0x5475 020453 branch le_map_channel_skip ,true 
+0x5476 020454 increase 1 ,loopcnt 
+:      020455 le_map_channel_skip:
+0x5477 020456 deposit loopcnt 
+0x5478 020457 branch le_map_channel_end ,blank 
+0x5479 020458 increase 1 ,queue 
+0x547a 020459 increase -1 ,loopcnt 
+0x547b 020460 branch le_map_channel_loop 
+:      020461 le_map_channel_end:
+0x547c 020462 deposit queue 
+0x547d 020463 store 1 ,mem_le_ch_mapped 
+0x547e 020464 rtn 
+:      020467 le_wait_tx:
+0x547f 020468 branch le_wait_master ,master 
+0x5480 020469 until null ,timeout 
+0x5481 020470 rtn 
+:      020472 le_wait_master:
+0x5482 020473 arg 0xea0 ,timeup 
+0x5483 020474 until clkn_rt ,meet 
+0x5484 020475 rtn 
+:      020477 le_receive_adv:
+0x5485 020478 disable swfine 
+0x5486 020479 fetch 2 ,mem_le_scan_window 
+0x5487 020480 copy pdata ,timeup 
+0x5488 020481 branch le_receive_packet 
+:      020484 le_receive_slave:
+0x5489 020485 bpatchx patch29_0 ,mem_patch29 
+0x548a 020486 enable swfine 
+0x548b 020487 fetch 2 ,mem_le_receive_window 
+0x548c 020488 fetcht 4 ,mem_le_transmit_window 
+0x548d 020489 iadd temp ,timeup 
+:      020490 le_receive_packet:
+0x548e 020491 call lerx_setfreq 
+:      020492 le_receive_rxon:
+0x548f 020493 bpatchx patch29_1 ,mem_patch29 
+0x5490 020494 call le_prep 
+0x5491 020495 disable match 
+0x5492 020496 enable decode_fec0 
+0x5493 020497 enable is_rx 
+0x5494 020498 disable is_tx 
+0x5495 020499 copy timeup ,stop_watch 
+0x5496 020500 correlate null ,timeout 
+0x5497 020501 branch le_receive_on_attempt ,attempt 
+0x5498 020502 copy clke ,temp 
+0x5499 020503 storet 6 ,mem_sync_clke 
+:      020504 le_receive_on_attempt:
+0x549a 020505 nbranch end_of_packet ,sync 
+0x549b 020506 branch le_receive_skip ,attempt 
+0x549c 020507 arg param_clke_cal_le ,clke_rt 
+0x549d 020508 copy bt_clk ,clke_bt 
+0x549e 020509 fetch 1 ,mem_le_state 
+0x549f 020510 bbit0 lestate_got_first_packet ,le_receive_skip 
+0x54a0 020511 call lpm_adjust_clk ,wake 
+:      020512 le_receive_skip:
+0x54a1 020513 bpatchx patch29_2 ,mem_patch29 
+0x54a2 020514 call save_rssi 
+0x54a3 020515 enable enable_white 
+0x54a4 020516 enable enable_crc 
+0x54a5 020517 parse demod ,bucket ,8 
+0x54a6 020518 rshift3 pwindow ,pdata 
+0x54a7 020519 store 1 ,mem_le_rxbuf 
+0x54a8 020520 parse demod ,bucket ,8 
+0x54a9 020521 rshift3 pwindow ,pdata 
+0x54aa 020522 istore 1 ,contw 
+0x54ab 020523 and pdata ,0x3f ,loopcnt 
+0x54ac 020524 branch lerx_nopayload ,zero 
+:      020526 lerx_loop:
+0x54ad 020527 parse demod ,bucket ,8 
+0x54ae 020528 rshift3 pwindow ,pdata 
+0x54af 020529 istore 1 ,contw 
+0x54b0 020530 loop lerx_loop 
+:      020532 lerx_nopayload:
+0x54b1 020533 bpatchx patch29_3 ,mem_patch29 
+0x54b2 020534 parse demod ,bucket ,24 
+0x54b3 020535 enable swfine 
+0x54b4 020536 arg param_sifs ,stop_watch 
+0x54b5 020537 rshift32 pdata ,pdata 
+0x54b6 020538 rshift16 pdata ,pdata 
+0x54b7 020539 istore 3 ,contw 
+0x54b8 020540 branch end_of_packet ,crc_failed 
+0x54b9 020541 enable match 
+0x54ba 020542 fetch 1 ,mem_last_freq 
+0x54bb 020543 add pdata ,0 ,rega 
+0x54bc 020544 call rf_write_freq 
+0x54bd 020545 disable decode_fec0 
+0x54be 020546 branch set_sync_on 
+:      020548 le_transmit_receive_sifs:
+0x54bf 020549 bpatchx patch29_4 ,mem_patch29 
+0x54c0 020550 call le_transmit 
+:      020551 le_transmit_receive_sifs_notx:
+0x54c1 020552 fetcht 1 ,mem_last_freq 
+0x54c2 020553 call set_freq_rx 
+0x54c3 020554 call rf_rx_enable 
+0x54c4 020555 enable swfine 
+0x54c5 020556 arg 5500 ,timeup 
+0x54c6 020557 branch le_receive_rxon 
+:      020559 le_transmit_norx:
+0x54c7 020560 call le_transmit 
+0x54c8 020561 branch end_of_packet 
+:      020563 le_transmit:
+0x54c9 020564 bpatchx patch29_5 ,mem_patch29 
+0x54ca 020565 call le_prep 
+0x54cb 020566 call letx_setfreq 
+0x54cc 020567 branch le_transmit0 
+:      020569 le_transmit0:
+0x54cd 020570 set1 txgfsk ,radio_ctrl 
+0x54ce 020571 enable encode_fec0 
+0x54cf 020572 enable is_tx 
+0x54d0 020573 disable is_rx 
+0x54d1 020574 call le_wait_tx 
+0x54d2 020575 rshift16 access ,pdata 
+0x54d3 020576 rshift8 pdata ,pdata 
+0x54d4 020577 rshift4 pdata ,pdata 
+0x54d5 020578 inject mod ,40 
+0x54d6 020579 enable enable_white 
+0x54d7 020580 enable enable_crc 
+0x54d8 020581 bpatchx patch29_6 ,mem_patch29 
+0x54d9 020582 fetch 1 ,mem_le_txheader 
+0x54da 020583 inject mod ,8 
+0x54db 020584 ifetch 1 ,contr 
+0x54dc 020585 and pdata ,0x3f ,loopcnt 
+0x54dd 020586 inject mod ,8 
+0x54de 020587 branch letr_nopayload ,zero 
+:      020588 letr_loop:
+0x54df 020589 ifetch 1 ,contr 
+0x54e0 020590 inject mod ,8 
+0x54e1 020591 loop letr_loop 
+:      020593 letr_nopayload:
+0x54e2 020594 enable enable_parity 
+0x54e3 020595 inject mod ,24 
+0x54e4 020596 disable enable_parity 
+0x54e5 020597 until null ,tx_clear 
+0x54e6 020598 nop 100 
+0x54e7 020599 disable encode_fec0 
+0x54e8 020600 rtn 
+:      020602 le_send_adv_ind:
+0x54e9 020603 bpatchx patch29_7 ,mem_patch29 
+0x54ea 020604 fetch 1 ,mem_le_adv_type 
+0x54eb 020605 beq adv_direct_ind ,le_send_adv_direct_ind 
+0x54ec 020606 fetch 1 ,mem_le_adv_own_addr_type 
+0x54ed 020607 lshift4 pdata ,pdata 
+0x54ee 020608 lshift2 pdata ,pdata 
+0x54ef 020609 store 1 ,mem_le_txheader 
+0x54f0 020610 fetcht 1 ,mem_le_adv_data_len 
+0x54f1 020611 add temp ,6 ,pdata 
+0x54f2 020612 store 1 ,mem_le_txlen 
+0x54f3 020613 fetch 6 ,mem_le_lap 
+0x54f4 020614 store 6 ,mem_le_txpayload 
+0x54f5 020615 copy temp ,loopcnt 
+0x54f6 020616 arg mem_le_adv_data ,contr 
+0x54f7 020617 call memcpy_fast 
+0x54f8 020618 branch le_send_adv_transmit 
+:      020619 le_send_adv_direct_ind:
+0x54f9 020620 fetch 1 ,mem_le_adv_direct_addr_type 
+0x54fa 020621 lshift4 pdata ,pdata 
+0x54fb 020622 lshift2 pdata ,pdata 
+0x54fc 020623 increase 1 ,pdata 
+0x54fd 020624 store 1 ,mem_le_txheader 
+0x54fe 020625 setarg 12 
+0x54ff 020626 store 1 ,mem_le_txlen 
+0x5500 020627 fetch 6 ,mem_le_lap 
+0x5501 020628 store 6 ,mem_le_txpayload 
+0x5502 020629 fetch 6 ,mem_hci_plap 
+0x5503 020630 istore 6 ,contw 
+:      020631 le_send_adv_transmit:
+0x5504 020632 bpatchx patch2a_0 ,mem_patch2a 
+0x5505 020633 fetch 1 ,mem_le_adv_transmit 
+0x5506 020634 increase 1 ,pdata 
+0x5507 020635 store 1 ,mem_le_adv_transmit 
+0x5508 020636 arg 1800 ,stop_watch 
+0x5509 020637 disable match 
+0x550a 020638 branch le_transmit_receive_sifs 
+:      020640 le_send_scan_request:
+0x550b 020641 bpatchx patch2a_1 ,mem_patch2a 
+0x550c 020642 fetch 1 ,mem_le_scan_type 
+0x550d 020643 rtnne le_scan_type_active 
+0x550e 020644 fetch 1 ,mem_le_adv_transmit 
+0x550f 020645 increase 1 ,pdata 
+0x5510 020646 store 1 ,mem_le_adv_transmit 
+0x5511 020647 arg 0x0c03 ,temp 
+0x5512 020648 fetch 1 ,mem_le_scan_own_addr_type 
+0x5513 020649 nsetflag blank ,le_sender_addr_bit ,temp 
+0x5514 020650 copy rega ,pdata 
+0x5515 020651 nsetflag blank ,le_receiver_addr_bit ,temp 
+0x5516 020652 storet 2 ,mem_le_txheader 
+0x5517 020653 fetch 6 ,mem_le_lap 
+0x5518 020654 istore 6 ,contw 
+0x5519 020655 fetch 6 ,mem_le_plap 
+0x551a 020656 istore 6 ,contw 
+0x551b 020657 branch le_transmit_receive_sifs 
+:      020660 le_send_scan_response:
+0x551c 020661 bpatchx patch2a_2 ,mem_patch2a 
+0x551d 020662 arg scan_rsp ,temp 
+0x551e 020663 fetch 1 ,mem_le_adv_own_addr_type 
+0x551f 020664 nsetflag blank ,le_sender_addr_bit ,temp 
+0x5520 020665 storet 1 ,mem_le_txheader 
+0x5521 020666 fetcht 1 ,mem_le_scan_data_len 
+0x5522 020667 add temp ,6 ,pdata 
+0x5523 020668 store 1 ,mem_le_txlen 
+0x5524 020669 fetch 6 ,mem_le_lap 
+0x5525 020670 store 6 ,mem_le_txpayload 
+0x5526 020671 arg mem_le_scan_data ,contr 
+0x5527 020672 copy temp ,loopcnt 
+0x5528 020673 call memcpy_fast 
+0x5529 020674 call le_transmit_norx 
+0x552a 020675 branch le_adv_not_match 
+:      020677 le_connect_request:
+0x552b 020678 bpatchx patch2a_3 ,mem_patch2a 
+0x552c 020679 force -1 ,pdata 
+0x552d 020680 setsect 2 ,1 
+0x552e 020681 store 5 ,mem_le_channel_map 
+0x552f 020682 call le_calc_channel_map 
+0x5530 020683 force 4 ,loopcnt 
+0x5531 020684 arg mem_le_access ,contw 
+0x5532 020685 call generate_random_loop 
+0x5533 020686 fetch 2 ,mem_le_timeout 
+0x5534 020687 store 2 ,mem_le_superto 
+:      020688 le_con_req_hop_retry:
+0x5535 020689 random pdata 
+0x5536 020690 and_into 0xf ,pdata 
+0x5537 020691 sub pdata ,4 ,null 
+0x5538 020692 branch le_con_req_hop_retry ,positive 
+0x5539 020693 store 1 ,mem_le_hop 
+0x553a 020694 store 1 ,mem_tmp1 
+0x553b 020695 bpatchx patch2a_4 ,mem_patch2a 
+0x553c 020696 fetcht 2 ,mem_le_conn_interval 
+0x553d 020697 storet 2 ,mem_le_tsniff 
+0x553e 020698 copy temp ,regc 
+0x553f 020699 add clkn_bt ,7 ,pdata 
+0x5540 020700 idiv regc 
+0x5541 020701 call wait_div_end 
+0x5542 020702 remainder rega 
+0x5543 020703 isub rega ,pdata 
+0x5544 020704 iadd regc ,pdata 
+0x5545 020705 fetcht 2 ,mem_le_dsniff 
+0x5546 020706 iadd temp ,pdata 
+0x5547 020707 store 4 ,mem_le_anchor 
+0x5548 020708 isub clkn_bt ,rega 
+0x5549 020709 increase -6 ,rega 
+0x554a 020710 arg 0x2205 ,regb 
+0x554b 020711 fetch 1 ,mem_le_conn_own_addr_type 
+0x554c 020712 nsetflag blank ,le_sender_addr_bit ,regb 
+0x554d 020713 fetch 1 ,mem_le_conn_peer_addr_type 
+0x554e 020714 nsetflag blank ,le_receiver_addr_bit ,regb 
+0x554f 020715 copy regb ,pdata 
+0x5550 020716 store 2 ,mem_le_txheader 
+0x5551 020717 fetch 6 ,mem_le_lap 
+0x5552 020718 istore 6 ,contw 
+0x5553 020719 fetch 6 ,mem_le_plap 
+0x5554 020720 istore 6 ,contw 
+0x5555 020721 fetch 4 ,mem_le_access 
+0x5556 020722 istore 4 ,contw 
+0x5557 020723 random pdata 
+0x5558 020724 istore 2 ,contw 
+0x5559 020725 random pdata 
+0x555a 020726 istore 1 ,contw 
+0x555b 020727 force 2 ,pdata 
+0x555c 020728 istore 1 ,contw 
+0x555d 020729 rshift2 rega ,pdata 
+0x555e 020730 istore 2 ,contw 
+0x555f 020731 rshift2 regc ,pdata 
+0x5560 020732 istore 2 ,contw 
+0x5561 020733 bpatchx patch2a_5 ,mem_patch2a 
+0x5562 020734 setarg 0 
+0x5563 020735 istore 2 ,contw 
+0x5564 020736 fetch 2 ,mem_le_timeout 
+0x5565 020737 istore 2 ,contw 
+0x5566 020738 fetch 5 ,mem_le_channel_map 
+0x5567 020739 istore 5 ,contw 
+0x5568 020740 fetch 1 ,mem_le_hop 
+0x5569 020741 arg param_le_sca ,temp 
+0x556a 020742 ior temp ,pdata 
+0x556b 020743 istore 1 ,contw 
+0x556c 020744 call le_transmit_norx 
+0x556d 020745 setarg mem_le_txheader 
+0x556e 020746 add pdata ,18 ,contr 
+0x556f 020747 ifetch 3 ,contr 
+0x5570 020748 store 3 ,mem_le_crcinit 
+0x5571 020749 rtn 
+:      020751 le_init_adv:
+0x5572 020752 bpatchx patch2a_6 ,mem_patch2a 
+0x5573 020753 disable master 
+0x5574 020754 branch le_adv_access 
+:      020758 le_update_param:
+0x5575 020759 fetch 1 ,mem_le_state 
+0x5576 020760 rtnbit0 lestate_update_param 
+0x5577 020761 fetch 2 ,mem_le_event_count 
+0x5578 020762 fetcht 2 ,mem_le_instant 
+0x5579 020763 isub temp ,pdata 
+0x557a 020764 nrtn positive 
+0x557b 020765 store 2 ,mem_pdatatemp 
+0x557c 020766 bpatchx patch2a_7 ,mem_patch2a 
+0x557d 020767 fetch 1 ,mem_le_state 
+0x557e 020768 set0 lestate_update_param ,pdata 
+0x557f 020769 set0 lestate_got_first_packet ,pdata 
+0x5580 020770 store 1 ,mem_le_state 
+0x5581 020771 fetch 4 ,mem_le_anchor 
+0x5582 020772 fetcht 2 ,mem_le_tsniff 
+0x5583 020773 storet 2 ,mem_temp 
+0x5584 020774 isub temp ,rega 
+0x5585 020775 bpatchx patch2b_0 ,mem_patch2b 
+0x5586 020776 fetch 1 ,mem_le_new_param 
+0x5587 020777 store 1 ,mem_le_window_size 
+0x5588 020778 ifetcht 2 ,contr 
+0x5589 020779 ifetch 2 ,contr 
+0x558a 020780 lshift2 pdata ,pdata 
+0x558b 020781 store 2 ,mem_le_tsniff 
+0x558c 020782 lshift2 temp ,temp 
+0x558d 020783 iadd temp ,pdata 
+0x558e 020784 ifetcht 4 ,contr 
+0x558f 020785 storet 4 ,mem_le_slave_latency 
+0x5590 020786 iadd rega ,pdata 
+0x5591 020787 copy pdata ,regab 
+0x5592 020788 fetch 2 ,mem_le_tsniff 
+0x5593 020789 fetcht 2 ,mem_temp 
+0x5594 020790 isub temp ,pdata 
+0x5595 020791 fetcht 2 ,mem_pdatatemp 
+0x5596 020792 imul32 temp ,pdata 
+0x5597 020793 iadd regab ,pdata 
+0x5598 020794 store 4 ,mem_le_anchor 
+0x5599 020795 call le_receive_window_size 
+0x559a 020796 fetch 2 ,mem_le_superto 
+0x559b 020797 store 2 ,mem_le_init_superto 
+0x559c 020798 rtn 
+:      020801 le_update_channel_map:
+0x559d 020802 bpatchx patch2b_1 ,mem_patch2b 
+0x559e 020803 fetch 1 ,mem_le_state 
+0x559f 020804 rtnbit0 lestate_update_map 
+0x55a0 020805 fetch 2 ,mem_le_event_count 
+0x55a1 020806 fetcht 2 ,mem_le_instant 
+0x55a2 020807 isub temp ,pdata 
+0x55a3 020808 nrtn positive 
+0x55a4 020809 fetch 1 ,mem_le_state 
+0x55a5 020810 set0 lestate_update_map ,pdata 
+0x55a6 020811 store 1 ,mem_le_state 
+0x55a7 020812 fetch 5 ,mem_le_new_map 
+0x55a8 020813 store 5 ,mem_le_channel_map 
+0x55a9 020814 branch le_calc_channel_map 
+:      020817 le_acknowledge:
+0x55aa 020818 bpatchx patch2b_2 ,mem_patch2b 
+0x55ab 020819 call le_supervision_flush 
+0x55ac 020820 call le_check_wak 
+0x55ad 020821 fetch 1 ,mem_le_rxbuf 
+0x55ae 020822 isolate1 md ,pdata 
+0x55af 020823 setflag true ,mark_ble_rx_md ,mark 
+0x55b0 020824 rshift pdata ,pdata 
+0x55b1 020825 ixor temp ,pdata 
+0x55b2 020826 isolate1 nesn ,pdata 
+0x55b3 020827 setflag true ,mark_old_packet ,mark 
+0x55b4 020828 rtnmark1 mark_old_packet 
+0x55b5 020829 fetch 1 ,mem_le_rxbuf + 1 
+0x55b6 020830 branch le_ack_unenc ,blank 
+0x55b7 020831 fetch 1 ,mem_le_state 
+0x55b8 020832 bbit0 lestate_encryption ,le_ack_unenc 
+0x55b9 020833 call load_sk 
+0x55ba 020834 call le_decrypt 
+0x55bb 020835 nrtn blank 
+:      020836 le_ack_unenc:
+0x55bc 020837 fetcht 1 ,mem_le_arq 
+0x55bd 020838 setflip nesn ,temp 
+0x55be 020839 storet 1 ,mem_le_arq 
+0x55bf 020840 rtn 
+:      020843 le_check_wak:
+0x55c0 020844 bpatchx patch2b_3 ,mem_patch2b 
+0x55c1 020845 fetcht 1 ,mem_le_arq 
+0x55c2 020846 isolate0 wak ,temp 
+0x55c3 020847 rtn true 
+0x55c4 020848 fetch 1 ,mem_le_rxbuf 
+0x55c5 020849 lshift pdata ,pdata 
+0x55c6 020850 ixor temp ,pdata 
+0x55c7 020851 rtnbit0 sn 
+0x55c8 020852 set0 wak ,temp 
+0x55c9 020853 setflip sn ,temp 
+0x55ca 020854 storet 1 ,mem_le_arq 
+0x55cb 020855 compare 3 ,temp ,3 
+0x55cc 020856 nrtn true 
+0x55cd 020857 fetch 1 ,mem_le_txpayload 
+0x55ce 020858 beq ll_start_enc_req ,le_set_enc 
+0x55cf 020859 fetch 1 ,mem_le_enc_state 
+0x55d0 020860 beq flag_le_enc_pause ,le_clear_enc 
+0x55d1 020861 rtn 
+:      020864 le_set_enc:
+0x55d2 020865 fetch 1 ,mem_le_state 
+0x55d3 020866 set1 lestate_encryption ,pdata 
+0x55d4 020867 store 1 ,mem_le_state 
+0x55d5 020868 rtn 
+:      020870 le_clear_enc:
+0x55d6 020871 bpatchx patch2b_4 ,mem_patch2b 
+0x55d7 020872 jam flag_le_enc_null ,mem_le_enc_state 
+0x55d8 020873 arg 0 ,pdata 
+0x55d9 020874 store 4 ,mem_le_last_mic 
+0x55da 020875 store 5 ,mem_le_pcnt_tx 
+0x55db 020876 set1 39 ,pdata 
+0x55dc 020877 store 5 ,mem_le_pcnt_rx 
+0x55dd 020878 fetch 1 ,mem_le_state 
+0x55de 020879 set0 lestate_encryption ,pdata 
+0x55df 020880 store 1 ,mem_le_state 
+0x55e0 020881 rtn 
+:      020884 le_wait_adv:
+0x55e1 020885 bpatchx patch2b_5 ,mem_patch2b 
+0x55e2 020886 call le_next_adv_channel 
+0x55e3 020887 call le_receive_adv 
+0x55e4 020888 fetch 1 ,mem_le_adv_waitcnt 
+0x55e5 020889 increase 1 ,pdata 
+0x55e6 020890 store 1 ,mem_le_adv_waitcnt 
+0x55e7 020891 rtn 
+:      020894 le_scan:
+0x55e8 020895 bpatchx patch2b_6 ,mem_patch2b 
+0x55e9 020896 fetch 1 ,mem_le_scan_enable 
+0x55ea 020897 rtnne le_scan_enable 
+0x55eb 020898 arg le_scan_interval_timer ,queue 
+0x55ec 020899 call timer_check 
+0x55ed 020900 nrtn blank 
+0x55ee 020901 fetch 2 ,mem_le_scan_interval 
+0x55ef 020902 fetcht 2 ,mem_le_scan_window 
+0x55f0 020903 isub temp ,pdata 
+0x55f1 020904 arg le_scan_interval_timer ,queue 
+0x55f2 020905 call timer_init 
+0x55f3 020906 disable master 
+0x55f4 020907 call le_init_adv 
+0x55f5 020908 call le_wait_adv 
+0x55f6 020909 nrtn match 
+0x55f7 020910 bpatchx patch2b_7 ,mem_patch2b 
+0x55f8 020911 fetch 6 ,mem_le_rxbuf + 2 
+0x55f9 020912 store 6 ,mem_le_plap 
+0x55fa 020915 fetch 1 ,mem_le_adv_rcv 
+0x55fb 020916 increase 1 ,pdata 
+0x55fc 020917 store 1 ,mem_le_adv_rcv 
+0x55fd 020918 call le_create_conn 
+0x55fe 020919 rtn master 
+0x55ff 020920 call le_send_scan_request 
+0x5600 020921 nrtn match 
+0x5601 020922 bpatchx patch2c_0 ,mem_patch2c 
+0x5602 020923 fetch 1 ,mem_le_scanrsp_rcv 
+0x5603 020924 increase 1 ,pdata 
+0x5604 020925 store 1 ,mem_le_scanrsp_rcv 
+0x5605 020926 fetch 9 ,mem_le_rxbuf + 8 
+0x5606 020927 store 9 ,mem_tmp_buffer 
+0x5607 020928 rtn 
+:      020930 le_create_conn:
+0x5608 020931 bpatchx patch2c_1 ,mem_patch2c 
+0x5609 020932 fetch 1 ,mem_cmd_le_create_conn 
+0x560a 020933 rtnne hci_cmd_le_create_conn 
+0x560b 020934 fetch 6 ,mem_le_plap 
+0x560c 020935 fetcht 6 ,mem_le_conn_peer_addr 
+0x560d 020936 isub temp ,null 
+0x560e 020937 nrtn zero 
+0x560f 020938 call context_new 
+0x5610 020939 nrtn zero 
+0x5611 020940 call le_connect_request 
+0x5612 020941 call le_init_master 
+0x5613 020942 bpatchx patch2c_2 ,mem_patch2c 
+0x5614 020943 jam 0 ,mem_hci_cmd 
+0x5615 020944 jam 0 ,mem_le_peer_sca 
+0x5616 020945 jam 0 ,mem_le_scan_enable 
+0x5617 020946 jam 0 ,mem_cmd_le_create_conn 
+0x5618 020947 branch context_save 
+:      020949 le_scan_check_sender_addr_type:
+0x5619 020950 arg 1 ,rega 
+0x561a 020951 fetch 1 ,mem_le_rxbuf 
+0x561b 020952 rtnbit1 le_sender_addr_bit 
+0x561c 020953 arg 0 ,rega 
+0x561d 020954 rtn 
+:      020958 le_prepare_tx:
+0x561e 020959 bpatchx patch2c_3 ,mem_patch2c 
+0x561f 020960 fetch 1 ,mem_le_arq 
+0x5620 020961 rtnbit1 wak 
+0x5621 020962 call le_check_tx_md 
+0x5622 020963 call le_fifo_get_first_tx_ptr 
+0x5623 020964 branch le_send_empty ,blank 
+0x5624 020965 ifetch 1 ,contr 
+0x5625 020966 ifetcht 1 ,contr 
+0x5626 020967 copy temp ,rega 
+0x5627 020968 isub rega ,pdata 
+0x5628 020969 arg le_max_paket_len ,temp 
+0x5629 020970 call not_greater_than 
+0x562a 020971 copy pdata ,temp 
+0x562b 020972 ifetch 1 ,contr 
+0x562c 020973 copy pdata ,type 
+0x562d 020974 copy rega ,pdata 
+0x562e 020975 iadd contr ,contr 
+0x562f 020976 arg mem_le_txpayload ,contw 
+0x5630 020977 copy temp ,loopcnt 
+0x5631 020978 call memcpy 
+0x5632 020979 call le_update_tx_type 
+0x5633 020980 call le_send_packet 
+0x5634 020982 call le_fifo_get_first_tx_ptr 
+0x5635 020983 ifetch 1 ,contr 
+0x5636 020984 copy pdata ,rega 
+0x5637 020985 copy contr ,regc 
+0x5638 020986 ifetcht 1 ,contr 
+0x5639 020987 copy temp ,regb 
+0x563a 020988 isub regb ,pdata 
+0x563b 020989 arg le_max_paket_len ,temp 
+0x563c 020990 call not_greater_than 
+0x563d 020991 iadd regb ,pdata 
+0x563e 020992 istore 1 ,regc 
+0x563f 020993 isub rega ,null 
+0x5640 020994 nrtn zero 
+0x5641 020995 branch le_fifo_release_first_node 
+:      020998 le_check_tx_md:
+0x5642 020999 call le_check_continue 
+0x5643 021000 rtnmark1 mark_ble_tx_md 
+0x5644 021001 fetch 1 ,mem_le_configuration 
+0x5645 021002 bbit0 bit_ble_transmit_packet_by_md ,le_clear_md 
+0x5646 021003 call le_fifo_get_second_tx_ptr 
+0x5647 021004 branch le_clear_md ,blank 
+0x5648 021005 branch le_set_md 
+:      021008 le_check_continue:
+0x5649 021009 call le_fifo_get_first_tx_ptr 
+0x564a 021010 branch le_clear_md ,blank 
+0x564b 021011 ifetch 1 ,contr 
+0x564c 021012 ifetcht 1 ,contr 
+0x564d 021013 isub temp ,pdata 
+0x564e 021014 sub pdata ,le_max_paket_len ,null 
+0x564f 021015 branch le_clear_md ,positive 
+:      021016 le_set_md:
+0x5650 021017 set1 mark_ble_tx_md ,mark 
+0x5651 021018 rtn 
+:      021020 le_clear_md:
+0x5652 021021 set0 mark_ble_tx_md ,mark 
+0x5653 021022 rtn 
+:      021024 le_update_tx_type:
+0x5654 021025 copy rega ,pdata 
+0x5655 021026 rtn blank 
+0x5656 021027 arg llid_continue ,type 
+0x5657 021028 rtn 
+:      021031 le_att_check_notification_enable:
+0x5658 021032 bpatchx patch2c_4 ,mem_patch2c 
+0x5659 021033 increase 1 ,temp 
+0x565a 021034 call le_att_get_handle_ptr 
+0x565b 021035 increase -2 ,contr 
+0x565c 021036 ifetch 2 ,contr 
+0x565d 021037 arg client_charactertic_configuration ,temp 
+0x565e 021038 isub temp ,null 
+0x565f 021039 nrtn zero 
+0x5660 021040 increase 1 ,contr 
+0x5661 021041 copy contr ,rega 
+0x5662 021042 ifetch 1 ,contr 
+0x5663 021043 rtn 
+:      021046 le_send_empty:
+0x5664 021047 force 0 ,temp 
+0x5665 021048 force 1 ,type 
+:      021050 le_send_packet:
+0x5666 021051 bpatchx patch2c_5 ,mem_patch2c 
+0x5667 021052 storet 1 ,mem_le_txlen 
+0x5668 021053 fetcht 1 ,mem_le_arq 
+0x5669 021054 set1 wak ,temp 
+0x566a 021055 and temp ,0xfc ,pdata 
+0x566b 021056 ior type ,pdata 
+0x566c 021057 store 1 ,mem_le_arq 
+0x566d 021058 and_into 0x1f ,pdata 
+0x566e 021059 isolate1 mark_ble_tx_md ,mark 
+0x566f 021060 setflag true ,md ,pdata 
+0x5670 021061 store 1 ,mem_le_txheader 
+0x5671 021063 fetch 1 ,mem_le_txheader 
+0x5672 021064 compare 1 ,type ,3 
+0x5673 021065 nbranch le_send_no_txlen ,true 
+0x5674 021066 fetch 1 ,mem_le_txlen 
+0x5675 021067 rtn blank 
+:      021068 le_send_no_txlen:
+0x5676 021069 fetch 1 ,mem_le_state 
+0x5677 021070 rtnbit0 lestate_encryption 
+0x5678 021071 call load_sk 
+0x5679 021072 branch le_encrypt 
+:      021075 get_lpm_wake_ble_rx_lock:
+0x567a 021076 arg wake_lock_ble_rx ,queue 
+0x567b 021077 branch lpm_get_wake_lock 
+:      021079 put_lpm_wake_ble_rx_lock:
+0x567c 021080 arg wake_lock_ble_rx ,queue 
+0x567d 021081 branch lpm_put_wake_lock 
+:      021084 le_parse:
+0x567e 021085 bpatchx patch2c_6 ,mem_patch2c 
+0x567f 021086 rtnmark1 mark_old_packet 
+0x5680 021087 call le_fifo_check_full 
+0x5681 021088 nrtn blank 
+0x5682 021089 fetch 1 ,mem_le_rxbuf 
+0x5683 021090 and pdata ,0x3 ,pdata 
+0x5684 021091 store 1 ,mem_le_packet_llid 
+0x5685 021092 ifetch 1 ,contr 
+0x5686 021093 and pdata ,0x1f ,pdata 
+0x5687 021094 store 1 ,mem_le_packet_size 
+0x5688 021095 rtn blank 
+0x5689 021096 copy contr ,pdata 
+0x568a 021097 store 2 ,mem_le_payload_ptr 
+0x568b 021098 fetch 1 ,mem_le_packet_llid 
+0x568c 021099 beq llid_le_ll ,le_parse_ll 
+:      021100 le_parse_l2cap:
+0x568d 021101 call le_check_l2cap_complete 
+0x568e 021102 nbranch get_lpm_wake_ble_rx_lock ,user 
+0x568f 021103 call put_lpm_wake_ble_rx_lock 
+0x5690 021104 fetch 2 ,mem_le_payload_ptr 
+0x5691 021105 copy pdata ,contr 
+0x5692 021106 ifetch 2 ,contr 
+0x5693 021107 store 2 ,mem_le_l2cap_size 
+0x5694 021108 bpatchx patch2c_7 ,mem_patch2c 
+0x5695 021109 ifetch 2 ,contr 
+0x5696 021110 beq le_l2cap_cid_att ,le_parse_att 
+0x5697 021111 beq le_l2cap_cid_smp ,le_parse_smp 
+0x5698 021112 beq le_l2cap_cid_signal ,le_parse_signaling 
+0x5699 021113 rtn 
+:      021116 le_check_l2cap_complete:
+0x569a 021117 fetch 1 ,mem_le_packet_llid 
+0x569b 021118 beq llid_start ,le_check_l2cap_llid_start 
+0x569c 021119 beq llid_continue ,le_check_l2cap_llid_continue 
+0x569d 021120 rtn 
+:      021125 le_check_l2cap_cid_legal:
+0x569e 021126 call enable_user 
+0x569f 021127 arg le_l2cap_cid_att ,temp 
+0x56a0 021128 isub pdata ,null 
+0x56a1 021129 rtn zero 
+0x56a2 021130 arg le_l2cap_cid_signal ,temp 
+0x56a3 021131 isub pdata ,null 
+0x56a4 021132 rtn zero 
+0x56a5 021133 arg le_l2cap_cid_smp ,temp 
+0x56a6 021134 isub pdata ,null 
+0x56a7 021135 rtn zero 
+0x56a8 021136 branch disable_user 
+:      021139 le_check_l2cap_llid_start:
+0x56a9 021140 fetch 2 ,mem_le_payload_ptr 
+0x56aa 021141 copy pdata ,contr 
+0x56ab 021142 ifetch 2 ,contr 
+0x56ac 021143 store 2 ,mem_le_l2cap_size 
+0x56ad 021144 ifetch 2 ,contr 
+0x56ae 021145 call le_check_l2cap_cid_legal 
+0x56af 021146 nrtn user 
+0x56b0 021147 fetcht 1 ,mem_le_packet_size 
+0x56b1 021148 storet 1 ,mem_le_packet_len_recved 
+0x56b2 021149 fetch 2 ,mem_le_l2cap_size 
+0x56b3 021150 increase 4 ,pdata 
+0x56b4 021151 isub temp ,null 
+0x56b5 021152 branch enable_user ,zero 
+0x56b6 021153 fetch 1 ,mem_le_packet_size 
+0x56b7 021154 copy pdata ,loopcnt 
+0x56b8 021155 arg mem_le_l2capbuf ,contw 
+0x56b9 021156 fetch 2 ,mem_le_payload_ptr 
+0x56ba 021157 copy pdata ,contr 
+0x56bb 021158 call memcpy 
+0x56bc 021159 branch disable_user 
+:      021164 le_check_l2cap_continue_legal:
+0x56bd 021165 call enable_user 
+0x56be 021166 fetch 1 ,mem_le_packet_len_recved 
+0x56bf 021167 nrtn blank 
+0x56c0 021168 branch disable_user 
+:      021170 le_check_l2cap_llid_continue:
+0x56c1 021171 call le_check_l2cap_continue_legal 
+0x56c2 021172 nrtn user 
+0x56c3 021173 fetch 1 ,mem_le_packet_len_recved 
+0x56c4 021174 arg mem_le_l2capbuf ,contw 
+0x56c5 021175 iadd contw ,rega 
+0x56c6 021176 fetcht 1 ,mem_le_packet_size 
+0x56c7 021177 iadd temp ,pdata 
+0x56c8 021178 store 1 ,mem_le_packet_len_recved 
+0x56c9 021179 fetch 1 ,mem_le_packet_size 
+0x56ca 021180 copy pdata ,loopcnt 
+0x56cb 021181 copy rega ,contw 
+0x56cc 021182 fetch 2 ,mem_le_payload_ptr 
+0x56cd 021183 copy pdata ,contr 
+0x56ce 021184 call memcpy_fast 
+0x56cf 021185 setarg mem_le_l2capbuf 
+0x56d0 021186 store 2 ,mem_le_payload_ptr 
+0x56d1 021187 fetch 2 ,mem_le_l2cap_size 
+0x56d2 021188 increase 4 ,pdata 
+0x56d3 021189 fetcht 1 ,mem_le_packet_len_recved 
+0x56d4 021190 isub temp ,null 
+0x56d5 021191 branch enable_user ,zero 
+0x56d6 021192 branch disable_user 
+:      021198 le_get_search_att_type:
+0x56d7 021199 call store_contr 
+0x56d8 021200 arg mem_le_search_att_type_length ,contw 
+:      021201 le_get_search_common:
+0x56d9 021202 fetch 2 ,mem_le_l2cap_size 
+0x56da 021203 increase -5 ,pdata 
+:      021204 le_get_search_common2:
+0x56db 021205 istore 1 ,contw 
+0x56dc 021206 copy pdata ,loopcnt 
+0x56dd 021207 call get_contr 
+0x56de 021208 branch memcpy_fast 
+:      021210 le_get_search_att_uuid:
+0x56df 021211 call store_contr 
+0x56e0 021212 arg mem_le_search_uuid_length ,contw 
+0x56e1 021213 branch le_get_search_common 
+:      021217 le_writeatt_cb:
+0x56e2 021218 fetch 2 ,mem_cb_att_write 
+0x56e3 021219 branch callback_func 
+:      021221 le_supervision_update:
+0x56e4 021222 fetcht 4 ,mem_le_supervision_timer 
+0x56e5 021223 call get_clkbt 
+0x56e6 021224 isub temp ,timeup 
+0x56e7 021225 deposit timeup 
+0x56e8 021226 fetcht 2 ,mem_le_superto 
+0x56e9 021227 lshift4 temp ,temp 
+0x56ea 021228 lshift temp ,temp 
+0x56eb 021229 isub temp ,pdata 
+0x56ec 021230 rtn 
+:      021232 le_supervision_flush:
+0x56ed 021233 call get_clkbt 
+0x56ee 021234 store 4 ,mem_le_supervision_timer 
+0x56ef 021235 rtn 
+:      021238 le_adv:
+0x56f0 021239 jam 36 ,mem_le_ch_mapped 
+0x56f1 021240 jam 0 ,mem_le_adv_channel_map_temp 
+:      021241 le_adv_loop:
+0x56f2 021242 bpatchx patch2d_0 ,mem_patch2d 
+0x56f3 021243 fetch 1 ,mem_le_adv_enable 
+0x56f4 021244 rtn blank 
+0x56f5 021245 arg le_adv_interval_timer ,queue 
+0x56f6 021246 call timer_check 
+0x56f7 021247 nrtn blank 
+0x56f8 021248 bpatchx patch2d_1 ,mem_patch2d 
+:      021249 le_adv_loop_tx:
+0x56f9 021250 disable master 
+0x56fa 021251 enable swfine 
+0x56fb 021252 call le_init_adv 
+0x56fc 021253 call le_next_adv_channel 
+0x56fd 021254 call le_send_adv_ind 
+0x56fe 021255 nbranch le_adv_not_match ,match 
+0x56ff 021256 fetch 1 ,mem_le_req_rcv 
+0x5700 021257 increase 1 ,pdata 
+0x5701 021258 store 1 ,mem_le_req_rcv 
+0x5702 021259 fetch 1 ,mem_le_rxbuf 
+0x5703 021260 and pdata ,0x0f ,pdata 
+0x5704 021261 beq scan_req ,le_send_scan_response 
+0x5705 021262 beq connect_req ,le_parse_connect_req 
+:      021263 le_adv_not_match:
+0x5706 021264 bpatchx patch2d_2 ,mem_patch2d 
+0x5707 021265 random pdata 
+0x5708 021266 arg 0x1ff ,temp 
+0x5709 021267 iand temp ,pdata 
+0x570a 021268 add pdata ,250 ,pdata 
+0x570b 021269 call delay 
+0x570c 021270 fetch 1 ,mem_le_adv_channel_map_temp 
+0x570d 021271 fetcht 1 ,mem_le_adv_channel_map 
+0x570e 021272 isub temp ,null 
+0x570f 021273 nbranch le_adv_loop ,zero 
+0x5710 021274 arg le_adv_interval_timer ,queue 
+0x5711 021275 fetch 2 ,mem_le_adv_interval 
+0x5712 021276 branch timer_init 
+:      021279 le_receive_window_size:
+0x5713 021280 bpatchx patch2d_3 ,mem_patch2d 
+0x5714 021281 fetch 1 ,mem_le_peer_sca 
+0x5715 021282 call le_sca_map 
+0x5716 021283 fetch 2 ,mem_le_tsniff 
+0x5717 021284 imul32 temp ,pdata 
+0x5718 021285 arg 375 ,temp 
+0x5719 021286 imul32 temp ,pdata 
+0x571a 021287 arg 100000 ,temp 
+0x571b 021288 idiv temp 
+0x571c 021289 fetch 1 ,mem_le_window_size 
+0x571d 021290 arg 20000 ,temp 
+0x571e 021291 imul32 temp ,pdata 
+0x571f 021292 iadd temp ,pdata 
+0x5720 021293 store 4 ,mem_le_transmit_window 
+0x5721 021294 bpatchx patch2d_4 ,mem_patch2d 
+0x5722 021295 fetch 2 ,mem_rx_window_sniff 
+0x5723 021296 call wait_div_end 
+0x5724 021297 quotient temp 
+0x5725 021298 iadd temp ,pdata 
+0x5726 021299 store 2 ,mem_le_receive_window 
+0x5727 021300 rtn 
+:      021302 le_parse_connect_req:
+0x5728 021303 bpatchx patch2d_5 ,mem_patch2d 
+0x5729 021304 fetch 6 ,mem_le_rxbuf + 8 
+0x572a 021305 fetcht 6 ,mem_le_lap 
+0x572b 021306 isub temp ,null 
+0x572c 021307 nrtn zero 
+0x572d 021308 call le_scan_check_sender_addr_type 
+0x572e 021309 copy rega ,pdata 
+0x572f 021310 store 1 ,mem_le_conn_peer_addr_type 
+0x5730 021311 fetch 7 ,mem_le_rxbuf + 21 
+0x5731 021312 store 7 ,mem_tmp_buffer 
+0x5732 021313 ifetch 8 ,contr 
+0x5733 021314 istore 8 ,contw 
+0x5734 021315 fetch 6 ,mem_le_rxbuf + 2 
+0x5735 021316 store 6 ,mem_le_plap 
+0x5736 021317 increase 6 ,contr 
+0x5737 021318 ifetch 8 ,contr 
+0x5738 021319 store 8 ,mem_le_access 
+0x5739 021320 ifetcht 2 ,contr 
+0x573a 021321 bpatchx patch2d_6 ,mem_patch2d 
+0x573b 021322 lshift2 temp ,temp 
+0x573c 021323 ifetch 2 ,contr 
+0x573d 021324 lshift2 pdata ,pdata 
+0x573e 021325 store 2 ,mem_le_tsniff 
+0x573f 021326 store 4 ,mem_le_anchor 
+0x5740 021327 isub temp ,pdata 
+0x5741 021328 add pdata ,-2 ,clke_bt 
+0x5742 021329 ifetch 9 ,contr 
+0x5743 021330 store 9 ,mem_le_slave_latency 
+0x5744 021331 bpatchx patch2d_7 ,mem_patch2d 
+0x5745 021332 ifetch 1 ,contr 
+0x5746 021333 rshift4 pdata ,temp 
+0x5747 021334 rshift temp ,temp 
+0x5748 021335 storet 1 ,mem_le_peer_sca 
+0x5749 021336 and_into 0x1f ,pdata 
+0x574a 021337 store 1 ,mem_le_hop 
+0x574b 021338 call le_receive_window_size 
+0x574c 021339 call le_calc_channel_map 
+0x574d 021340 call le_init_slave 
+0x574e 021341 call context_new 
+0x574f 021342 nrtn zero 
+0x5750 021343 bpatchx patch2e_0 ,mem_patch2e 
+0x5751 021344 call calc_clke_offset 
+0x5752 021345 call le_l2cap_reset_signaling_identifier 
+0x5753 021346 jam bt_evt_le_connected ,mem_fifo_temp 
+0x5754 021347 call ui_ipc_send_event 
+0x5755 021348 branch context_save 
+:      021351 le_init_attlist_search:
+0x5756 021352 bpatchx patch2e_1 ,mem_patch2e 
+0x5757 021353 fetch 2 ,mem_le_search_handle_start 
+0x5758 021354 iforce regb 
+0x5759 021355 fetch 2 ,mem_le_search_handle_end 
+0x575a 021356 iforce regc 
+0x575b 021357 fetch 2 ,mem_ui_le_uuid_table 
+0x575c 021358 iforce contr 
+0x575d 021359 enable user 
+0x575e 021360 rtn 
+:      021363 le_att_handle_inrange:
+0x575f 021364 ifetch 2 ,contr 
+0x5760 021365 rtn blank 
+0x5761 021366 isub regb ,null 
+0x5762 021367 nrtn positive 
+0x5763 021368 isub regc ,null 
+0x5764 021369 rtn zero 
+0x5765 021370 branch le_att_handle_blank ,positive 
+0x5766 021371 force 1 ,null 
+0x5767 021372 rtn 
+:      021373 le_att_handle_blank:
+0x5768 021374 force 0 ,pdata 
+0x5769 021375 rtn 
+:      021379 le_att_get_handle_ptr:
+0x576a 021380 call le_att_get_handle_ptr2 
+0x576b 021381 branch le_att_get_handle_ptr_found ,zero 
+0x576c 021382 rtn 
+:      021384 le_att_get_handle_ptr2:
+0x576d 021385 bpatchx patch2e_2 ,mem_patch2e 
+0x576e 021386 fetch 2 ,mem_ui_le_uuid_table 
+0x576f 021387 iforce contr 
+:      021388 le_att_get_handle_loop1:
+0x5770 021389 ifetch 2 ,contr 
+0x5771 021390 rtn blank 
+0x5772 021391 isub temp ,null 
+0x5773 021392 rtn zero 
+0x5774 021393 ifetch 1 ,contr 
+0x5775 021394 iadd contr ,contr 
+0x5776 021395 ifetch 1 ,contr 
+0x5777 021396 iadd contr ,contr 
+0x5778 021397 branch le_att_get_handle_loop1 
+:      021398 le_att_get_handle_ptr_found:
+0x5779 021399 ifetch 1 ,contr 
+0x577a 021400 iadd contr ,contr 
+0x577b 021401 rtn 
+:      021405 le_att_get_short_uuid_ptr:
+0x577c 021406 bpatchx patch2e_3 ,mem_patch2e 
+0x577d 021407 fetch 2 ,mem_ui_le_uuid_table 
+0x577e 021408 iforce contr 
+:      021409 le_att_get_short_uuid_loop:
+0x577f 021410 ifetch 2 ,contr 
+0x5780 021411 rtn blank 
+0x5781 021412 ifetch 1 ,contr 
+0x5782 021413 iadd contr ,contr 
+0x5783 021414 increase -2 ,contr 
+0x5784 021415 ifetch 2 ,contr 
+0x5785 021416 isub temp ,null 
+0x5786 021417 rtn zero 
+0x5787 021418 ifetch 1 ,contr 
+0x5788 021419 iadd contr ,contr 
+0x5789 021420 branch le_att_get_short_uuid_loop 
+:      021424 le_att_get_handle_info_from_ptr:
+0x578a 021425 fetch 2 ,mem_le_cur_attlist_start_ptr 
+0x578b 021426 branch le_att_get_handle_info_fast 
+:      021428 le_att_get_handle_info:
+0x578c 021429 bpatchx patch2e_4 ,mem_patch2e 
+0x578d 021430 fetch 2 ,mem_ui_le_uuid_table 
+:      021431 le_att_get_handle_info_fast:
+0x578e 021432 iforce contr 
+0x578f 021433 copy temp ,rega 
+:      021434 le_att_get_handle_loop:
+0x5790 021435 ifetch 2 ,contr 
+0x5791 021436 branch le_att_unfind_handle ,blank 
+0x5792 021437 isub rega ,null 
+0x5793 021438 branch le_att_finded_handle ,zero 
+0x5794 021439 ifetch 1 ,contr 
+0x5795 021440 iadd contr ,contr 
+0x5796 021441 ifetch 1 ,contr 
+0x5797 021442 iadd contr ,contr 
+0x5798 021443 branch le_att_get_handle_loop 
+:      021444 le_att_unfind_handle:
+0x5799 021445 branch disable_blank 
+:      021447 le_att_finded_handle:
+0x579a 021448 ifetch 1 ,contr 
+0x579b 021449 store 1 ,mem_le_cur_uuid_length 
+0x579c 021450 copy pdata ,loopcnt 
+0x579d 021451 arg mem_le_cur_uuid ,contw 
+0x579e 021452 call memcpy_fast 
+0x579f 021453 ifetch 1 ,contr 
+0x57a0 021454 store 1 ,mem_le_curr_att_len 
+0x57a1 021455 call store_contr 
+0x57a2 021456 branch enable_blank 
+:      021459 le_modified_name:
+0x57a3 021460 bpatchx patch2e_5 ,mem_patch2e 
+0x57a4 021461 call le_modified_name_att_list 
+0x57a5 021462 branch le_modified_name_adv 
+:      021464 le_modified_name_att_list:
+0x57a6 021465 arg uuid_chrctr_device_name ,temp 
+0x57a7 021466 call le_att_get_short_uuid_ptr 
+0x57a8 021467 rtn blank 
+0x57a9 021468 ifetch 1 ,contr 
+0x57aa 021469 copy contr ,contw 
+0x57ab 021470 fetcht 1 ,mem_le_name_len 
+0x57ac 021471 copy temp ,loopcnt 
+0x57ad 021472 isub temp ,null 
+0x57ae 021473 nbranch le_name_length_longer_than_att ,positive 
+0x57af 021474 isub temp ,temp 
+0x57b0 021475 arg mem_le_name ,contr 
+0x57b1 021476 call memcpy 
+0x57b2 021477 copy temp ,loopcnt 
+0x57b3 021478 ncall memcpy_empty ,zero 
+0x57b4 021479 rtn 
+:      021480 le_name_length_longer_than_att:
+0x57b5 021481 copy pdata ,loopcnt 
+0x57b6 021482 arg mem_le_name ,contr 
+0x57b7 021483 branch memcpy_fast 
+:      021486 le_modified_name_adv:
+0x57b8 021487 arg mem_le_adv_data_len + 32 ,regc 
+0x57b9 021488 arg mem_le_adv_data ,rega 
+0x57ba 021489 call le_modified_name_adv_and_scan 
+0x57bb 021490 setarg 0 
+0x57bc 021491 setflag user ,0 ,pdata 
+0x57bd 021492 store 1 ,mem_pdatatemp 
+0x57be 021493 arg mem_le_scan_data_len + 32 ,regc 
+0x57bf 021494 arg mem_le_scan_data ,rega 
+0x57c0 021495 call le_modified_name_adv_and_scan 
+0x57c1 021496 rtn user 
+0x57c2 021497 fetch 1 ,mem_pdatatemp 
+0x57c3 021498 branch assert ,blank 
+0x57c4 021499 rtn 
+:      021502 le_modified_name_adv_and_scan:
+0x57c5 021503 bpatchx patch2e_6 ,mem_patch2e 
+0x57c6 021504 call enable_user 
+0x57c7 021505 call clear_temp_block 
+0x57c8 021506 arg 0 ,regb 
+0x57c9 021507 arg mem_le_data_temp ,contw 
+0x57ca 021508 call le_modified_name_adv_loop 
+0x57cb 021509 fetch 1 ,mem_le_name_len 
+0x57cc 021510 add pdata ,1 ,temp 
+0x57cd 021511 iadd regb ,rega 
+0x57ce 021512 increase 2 ,rega 
+0x57cf 021513 sub rega ,0x1f ,null 
+0x57d0 021514 nbranch le_modified_name_adv_and_scan_name_overflow ,positive 
+0x57d1 021515 istoret 1 ,contw 
+0x57d2 021516 arg gap_adtype_local_name_complete ,temp 
+0x57d3 021517 istoret 1 ,contw 
+0x57d4 021518 iforce loopcnt 
+0x57d5 021519 call memcpy_fast 
+0x57d6 021520 copy rega ,regb 
+:      021521 le_modified_name_adv_and_scan_store_data:
+0x57d7 021522 deposit regb 
+0x57d8 021523 store 1 ,mem_le_data_len_temp 
+0x57d9 021524 arg mem_le_data_len_temp ,contr 
+0x57da 021525 setarg -32 
+0x57db 021526 iadd regc ,contw 
+0x57dc 021527 branch memcpy32 
+:      021529 le_modified_name_adv_and_scan_name_overflow:
+0x57dd 021530 call disable_user 
+0x57de 021531 branch le_modified_name_adv_and_scan_store_data 
+:      021533 le_modified_name_adv_loop:
+0x57df 021534 ifetch 1 ,rega 
+0x57e0 021535 rtn blank 
+0x57e1 021536 pincrease 1 
+0x57e2 021537 ifetcht 1 ,contr 
+0x57e3 021538 sub temp ,gap_adtype_local_name_complete ,null 
+0x57e4 021539 branch le_modified_name_adv_found_name ,zero 
+0x57e5 021540 iadd regb ,regb 
+0x57e6 021541 copy rega ,contr 
+0x57e7 021542 iforce loopcnt 
+0x57e8 021543 call memcpy_fast 
+0x57e9 021544 copy contr ,rega 
+:      021545 le_modified_name_adv_loop2:
+0x57ea 021546 deposit rega 
+0x57eb 021547 isub regc ,null 
+0x57ec 021548 rtn positive 
+0x57ed 021549 branch le_modified_name_adv_loop 
+:      021551 le_modified_name_adv_found_name:
+0x57ee 021552 iadd rega ,rega 
+0x57ef 021553 branch le_modified_name_adv_loop2 
+:      021556 memcpy_empty:
+0x57f0 021557 setarg space 
+0x57f1 021558 istore 1 ,contw 
+0x57f2 021559 loop memcpy_empty 
+0x57f3 021560 rtn 
+:      021563 le_lpm_set_mult:
+0x57f4 021564 bpatchx patch2e_7 ,mem_patch2e 
+0x57f5 021565 disable wake 
+0x57f6 021566 branch le_lpm_set_mult_attempt ,attempt 
+0x57f7 021567 nbranch le_lpm_lost ,match 
+:      021568 le_lpm_set_mult_attempt:
+0x57f8 021569 call lpm_match 
+0x57f9 021570 fetch 2 ,mem_rx_window_sniff 
+0x57fa 021571 store 2 ,mem_le_receive_window 
+0x57fb 021573 nbranch lpm_mult_short ,match 
+0x57fc 021574 bmark1 mark_old_packet ,lpm_mult_short 
+0x57fd 021576 fetch 1 ,mem_le_packet_size 
+0x57fe 021577 nbranch lpm_mult_short ,blank 
+0x57ff 021578 fetch 1 ,mem_le_txlen 
+0x5800 021579 nbranch lpm_mult_short ,blank 
+0x5801 021581 fetch 1 ,mem_le_configuration 
+0x5802 021582 bbit1 bit_ble_short_mult ,lpm_mult_short 
+0x5803 021584 fetch 1 ,mem_le_state 
+0x5804 021585 bbit1 lestate_update_param ,lpm_mult_short 
+0x5805 021586 branch lpm_mult_wait_timeout 
+:      021588 le_lpm_lost:
+0x5806 021589 fetcht 2 ,mem_rx_window_sniff 
+0x5807 021590 rshift temp ,temp 
+0x5808 021591 fetch 2 ,mem_le_receive_window 
+0x5809 021592 iadd temp ,pdata 
+0x580a 021593 store 2 ,mem_le_receive_window 
+0x580b 021594 branch lpm_lost 
+:      021597 le_set_config_fixed_tk:
+0x580c 021598 arg bit_ble_passkey_fixed_key ,queue 
+0x580d 021599 branch le_set_config 
+:      021601 le_clr_config_fixed_tk:
+0x580e 021602 arg bit_ble_passkey_fixed_key ,queue 
+0x580f 021603 branch le_clr_config 
+:      021605 le_set_config_fixed_ltk:
+0x5810 021606 arg bit_ble_pairing_fixed_ltk ,queue 
+0x5811 021607 branch le_set_config 
+:      021609 le_clr_config_fixed_ltk:
+0x5812 021610 arg bit_ble_pairing_fixed_ltk ,queue 
+0x5813 021611 branch le_clr_config 
+:      021613 le_set_config_more_data:
+0x5814 021614 arg bit_ble_transmit_packet_by_md ,queue 
+0x5815 021615 branch le_set_config 
+:      021617 le_clr_config_more_data:
+0x5816 021618 arg bit_ble_transmit_packet_by_md ,queue 
+0x5817 021619 branch le_clr_config 
+:      021621 le_set_config_read_authentication:
+0x5818 021622 arg bit_ble_read_auth ,queue 
+0x5819 021623 branch le_set_config 
+:      021625 le_clr_config_read_authentication:
+0x581a 021626 arg bit_ble_read_auth ,queue 
+0x581b 021627 branch le_clr_config 
+:      021629 le_set_config_write_authentication:
+0x581c 021630 arg bit_ble_write_auth ,queue 
+0x581d 021631 branch le_set_config 
+:      021633 le_clr_config_write_authentication:
+0x581e 021634 arg bit_ble_write_auth ,queue 
+0x581f 021635 branch le_clr_config 
+:      021637 le_set_config_short_mult:
+0x5820 021638 arg bit_ble_short_mult ,queue 
+0x5821 021639 branch le_set_config 
+:      021641 le_clr_config_short_mult:
+0x5822 021642 arg bit_ble_short_mult ,queue 
+0x5823 021643 branch le_clr_config 
+:      021646 le_set_config:
+0x5824 021647 fetch 1 ,mem_le_configuration 
+0x5825 021648 qset1 pdata 
+0x5826 021649 store 1 ,mem_le_configuration 
+0x5827 021650 rtn 
+:      021652 le_clr_config:
+0x5828 021653 fetch 1 ,mem_le_configuration 
+0x5829 021654 qset0 pdata 
+0x582a 021655 store 1 ,mem_le_configuration 
+0x582b 021656 rtn 
+:      021658 le_set_fixed_ltk:
+0x582c 021659 setarg 0x112233 
+0x582d 021660 store 3 ,mem_le_fixed_ltk 
+0x582e 021661 setarg 0x445566 
+0x582f 021662 istore 3 ,contw 
+0x5830 021663 setarg 0x778899 
+0x5831 021664 istore 3 ,contw 
+0x5832 021665 setarg 0x001122 
+0x5833 021666 istore 3 ,contw 
+0x5834 021667 setarg 0x334455 
+0x5835 021668 istore 3 ,contw 
+0x5836 021669 setarg 0x66 
+0x5837 021670 istore 1 ,contw 
+0x5838 021671 rtn 
+:      021674 le_set_justwork:
+0x5839 021675 setarg 0x01000302 
+0x583a 021676 store 4 ,mem_le_pres 
+0x583b 021677 setarg 0x010010 
+0x583c 021678 store 3 ,mem_le_pres_max_keysize 
+0x583d 021679 jam 1 ,mem_le_pairing_mode 
+0x583e 021680 rtn 
+:      021684 le_fifo_malloc_tx_empty:
+0x583f 021685 arg 0 ,rega 
+0x5840 021686 arg llid_empty ,type 
+0x5841 021687 branch le_fifo_malloc_tx 
+:      021691 le_fifo_malloc_tx_ll:
+0x5842 021692 arg llid_le_ll ,type 
+0x5843 021693 call le_fifo_malloc_tx 
+0x5844 021694 copy regb ,pdata 
+0x5845 021695 istore 1 ,contw 
+0x5846 021696 rtn 
+:      021700 le_fifo_malloc_tx_l2cap:
+0x5847 021701 force llid_l2cap_start ,type 
+0x5848 021702 increase 4 ,rega 
+0x5849 021703 call le_fifo_malloc_tx 
+0x584a 021704 increase -4 ,rega 
+0x584b 021705 copy rega ,pdata 
+0x584c 021706 istore 2 ,contw 
+0x584d 021707 copy regb ,pdata 
+0x584e 021708 istore 2 ,contw 
+0x584f 021709 rtn 
+:      021713 le_fifo_malloc_tx:
+0x5850 021714 sub rega ,240 ,null 
+0x5851 021715 nbranch assert ,positive 
+0x5852 021716 fetch 1 ,mem_le_tx_buff_used 
+0x5853 021717 arg 1 ,temp 
+0x5854 021718 arg le_tx_buff_count ,loopcnt 
+:      021719 le_fifo_malloc_tx_loop:
+0x5855 021720 iand temp ,null 
+0x5856 021721 branch le_fifo_malloc_tx_got_empty ,zero 
+0x5857 021722 lshift temp ,temp 
+0x5858 021723 loop le_fifo_malloc_tx_loop 
+0x5859 021724 branch assert 
+:      021725 le_fifo_malloc_tx_got_empty:
+0x585a 021726 ixor temp ,pdata 
+0x585b 021727 store 1 ,mem_le_tx_buff_used 
+0x585c 021728 sub loopcnt ,le_tx_buff_count ,pdata 
+0x585d 021729 lshift4 pdata ,pdata 
+0x585e 021730 lshift4 pdata ,pdata 
+0x585f 021731 arg mem_le_tx_buffer0 ,temp 
+0x5860 021732 iadd temp ,temp 
+:      021733 le_fifo_tx_find_empty_ptr:
+0x5861 021734 arg 0 ,loopcnt 
+0x5862 021735 arg mem_le_tx_ptr0 ,contr 
+:      021736 le_fifo_tx_find_empty_ptr_loop:
+0x5863 021737 ifetch 2 ,contr 
+0x5864 021738 branch le_fifo_tx_found_empty_ptr ,blank 
+0x5865 021739 copy loopcnt ,pdata 
+0x5866 021740 increase 1 ,loopcnt 
+0x5867 021741 bne le_tx_buff_count ,le_fifo_tx_find_empty_ptr_loop 
+0x5868 021742 branch assert 
+:      021745 le_fifo_tx_found_empty_ptr:
+0x5869 021746 increase -2 ,contr 
+0x586a 021747 istoret 2 ,contr 
+0x586b 021748 copy temp ,contw 
+0x586c 021749 copy rega ,pdata 
+0x586d 021750 istore 1 ,contw 
+0x586e 021751 setarg 0 
+0x586f 021752 istore 1 ,contw 
+0x5870 021753 copy type ,pdata 
+0x5871 021754 istore 1 ,contw 
+0x5872 021755 rtn 
+:      021759 le_fifo_get_first_tx_ptr:
+0x5873 021760 fetch 2 ,mem_le_tx_ptr0 
+0x5874 021761 copy pdata ,contr 
+0x5875 021762 rtn 
+:      021764 le_fifo_get_second_tx_ptr:
+0x5876 021765 fetch 2 ,mem_le_tx_ptr1 
+0x5877 021766 copy pdata ,contr 
+0x5878 021767 rtn 
+:      021769 le_fifo_get_last_tx_ptr:
+0x5879 021770 call le_fifo_get_last_tx_ptr0 
+0x587a 021771 copy pdata ,contr 
+0x587b 021772 rtn 
+:      021773 le_fifo_get_last_tx_ptr0:
+0x587c 021774 fetch 2 ,mem_le_tx_ptr3 
+0x587d 021775 nrtn blank 
+0x587e 021776 fetch 2 ,mem_le_tx_ptr2 
+0x587f 021777 nrtn blank 
+0x5880 021778 fetch 2 ,mem_le_tx_ptr1 
+0x5881 021779 nrtn blank 
+0x5882 021780 fetch 2 ,mem_le_tx_ptr0 
+0x5883 021781 rtn 
+:      021783 le_fifo_get_first_l2cap_ptr:
+0x5884 021784 call le_fifo_get_first_tx_ptr 
+0x5885 021785 increase 3 ,contr 
+0x5886 021786 rtn 
+:      021788 le_fifo_get_first_att_ptr:
+0x5887 021789 call le_fifo_get_first_tx_ptr 
+0x5888 021790 increase 7 ,contr 
+0x5889 021791 rtn 
+:      021793 le_fifo_get_last_att_ptr:
+0x588a 021794 call le_fifo_get_last_tx_ptr 
+0x588b 021795 increase 7 ,contr 
+0x588c 021796 rtn 
+:      021798 le_fifo_get_last_l2cap_ptr:
+0x588d 021799 call le_fifo_get_last_tx_ptr 
+0x588e 021800 increase 3 ,contr 
+0x588f 021801 rtn 
+:      021805 le_fifo_check_full:
+0x5890 021806 fetch 2 ,mem_le_tx_ptr3 
+0x5891 021807 rtn 
+:      021810 le_fifo_check_nearly_full:
+0x5892 021811 fetch 2 ,mem_le_tx_ptr2 
+0x5893 021812 rtn 
+:      021815 le_fifo_check_empty:
+0x5894 021816 fetch 2 ,mem_le_tx_ptr0 
+0x5895 021817 rtn 
+:      021820 le_fifo_release_first_node:
+0x5896 021821 fetch 2 ,mem_le_tx_ptr0 
+0x5897 021822 arg mem_le_tx_buffer0 ,temp 
+0x5898 021823 isub temp ,pdata 
+0x5899 021824 rshift4 pdata ,pdata 
+0x589a 021825 rshift4 pdata ,queue 
+0x589b 021826 fetch 1 ,mem_le_tx_buff_used 
+0x589c 021827 qset0 pdata 
+0x589d 021828 store 1 ,mem_le_tx_buff_used 
+0x589e 021829 arg 0 ,loopcnt 
+:      021830 le_fifo_release_first_node_loop:
+0x589f 021831 lshift loopcnt ,pdata 
+0x58a0 021832 arg mem_le_tx_ptr1 ,temp 
+0x58a1 021833 iadd temp ,temp 
+0x58a2 021834 ifetch 2 ,temp 
+0x58a3 021835 increase -2 ,temp 
+0x58a4 021836 istore 2 ,temp 
+0x58a5 021837 copy loopcnt ,pdata 
+0x58a6 021838 increase 1 ,loopcnt 
+0x58a7 021839 bne le_tx_buff_update_loopcnt ,le_fifo_release_first_node_loop 
+0x58a8 021840 setarg 0 
+0x58a9 021841 istore 2 ,temp 
+0x58aa 021842 rtn 
+:      021848 le_parse_att:
+0x58ab 021849 ifetch 3 ,contr 
+0x58ac 021850 store 3 ,mem_le_att_opcode 
+0x58ad 021851 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request 
+0x58ae 021852 beq attop_exchange_mtu_response ,le_parse_att_exchange_mtu_response 
+0x58af 021853 beq attop_find_information_request ,le_parse_att_find_information_request 
+0x58b0 021854 beq attop_find_by_type_value_request ,le_parse_att_find_by_type_value_request 
+0x58b1 021855 beq attop_read_by_type_request ,le_parse_att_read_by_type_request 
+0x58b2 021856 beq attop_read_request ,le_parse_att_read_request 
+0x58b3 021857 beq attop_read_blob_request ,le_parse_att_read_blob_request 
+0x58b4 021858 beq attop_read_by_group_type_request ,le_parse_att_read_by_group_type_request 
+0x58b5 021859 beq attop_write_request ,le_parse_att_write_request 
+0x58b6 021860 beq attop_prepare_write_request ,le_parse_att_prepare_write_request 
+0x58b7 021861 beq attop_execute_write_request ,le_parse_att_execute_write_request 
+0x58b8 021862 beq attop_write_command ,le_parse_att_write_command 
+0x58b9 021863 rtn 
+:      021866 le_send_att_exchange_mtu_requset:
+0x58ba 021867 force 3 ,rega 
+0x58bb 021868 call le_fifo_malloc_tx_l2cap_gatt 
+0x58bc 021869 setarg attop_exchange_mtu_request 
+0x58bd 021870 istore 1 ,contw 
+0x58be 021871 fetch 2 ,mem_le_local_mtu 
+0x58bf 021872 istore 2 ,contw 
+0x58c0 021873 rtn 
+:      021876 le_parse_att_exchange_mtu_request:
+0x58c1 021877 call le_parse_att_exchange_mtu_response 
+:      021878 le_send_att_exchange_mtu_response:
+0x58c2 021879 force 3 ,rega 
+0x58c3 021880 call le_fifo_malloc_tx_l2cap_gatt 
+0x58c4 021881 setarg attop_exchange_mtu_response 
+0x58c5 021882 istore 1 ,contw 
+0x58c6 021883 fetch 2 ,mem_le_local_mtu 
+0x58c7 021884 istore 2 ,contw 
+0x58c8 021885 rtn 
+:      021887 le_parse_att_exchange_mtu_response:
+0x58c9 021888 rshift8 pdata ,pdata 
+0x58ca 021889 store 2 ,mem_le_remote_mtu 
+0x58cb 021890 rtn 
+:      021892 le_parse_att_find_information_request:
+0x58cc 021893 call le_get_search_handle_start_end_common 
+0x58cd 021894 call enable_user 
+0x58ce 021895 branch le_send_att_find_information_response 
+:      021897 le_send_att_find_information_response:
+0x58cf 021898 arg 3 ,timeup 
+0x58d0 021899 call le_init_attlist_search 
+:      021900 le_send_att_find_information_res_loop:
+0x58d1 021901 call le_att_handle_inrange 
+0x58d2 021902 branch le_send_att_find_information_res_end ,blank 
+0x58d3 021903 nbranch le_send_att_find_information_res_next ,positive 
+0x58d4 021904 increase -2 ,contr 
+0x58d5 021905 call store_contr 
+0x58d6 021906 call get_contw 
+0x58d7 021907 nbranch le_send_att_find_information_res_store_info ,user 
+0x58d8 021908 call push_stack_rega_b_c 
+0x58d9 021909 call disable_user 
+0x58da 021910 force 20 ,rega 
+0x58db 021911 call le_fifo_malloc_tx_l2cap_gatt 
+0x58dc 021912 call pop_stack_rega_b_c 
+0x58dd 021913 setarg attop_find_information_response 
+0x58de 021914 istore 1 ,contw 
+0x58df 021915 setarg uuid_size_16bit 
+0x58e0 021916 istore 1 ,contw 
+:      021917 le_send_att_find_information_res_store_info:
+0x58e1 021918 call get_contr 
+0x58e2 021919 ifetch 2 ,contr 
+0x58e3 021920 istore 2 ,contw 
+0x58e4 021921 ifetch 1 ,contr 
+0x58e5 021922 copy pdata ,loopcnt 
+0x58e6 021923 call memcpy 
+0x58e7 021924 call store_contw 
+0x58e8 021925 increase -1 ,timeup 
+0x58e9 021926 branch le_send_att_find_information_res_end ,zero 
+:      021927 le_send_att_find_information_res_cont:
+0x58ea 021928 ifetch 1 ,contr 
+0x58eb 021929 iadd contr ,contr 
+0x58ec 021930 branch le_send_att_find_information_res_loop 
+:      021931 le_send_att_find_information_res_next:
+0x58ed 021932 ifetch 1 ,contr 
+0x58ee 021933 iadd contr ,contr 
+0x58ef 021934 branch le_send_att_find_information_res_cont 
+:      021935 le_send_att_find_information_res_end:
+0x58f0 021936 branch le_send_att_error_response_notfound ,user 
+0x58f1 021937 branch le_send_auto_len_by_mem 
+:      021940 le_parse_att_find_by_type_value_request:
+0x58f2 021941 call le_get_search_handle_start_end_common 
+0x58f3 021942 ifetch 2 ,contr 
+0x58f4 021943 store 2 ,mem_le_search_uuid 
+0x58f5 021944 call store_contr 
+0x58f6 021945 arg mem_le_search_att_type_length ,contw 
+0x58f7 021946 fetch 2 ,mem_le_l2cap_size 
+0x58f8 021947 increase -7 ,pdata 
+0x58f9 021948 call le_get_search_common2 
+0x58fa 021949 branch le_send_att_find_by_type_value_response 
+:      021952 le_start_end_handle_check_1:
+0x58fb 021953 disable user 
+0x58fc 021954 fetcht 2 ,mem_le_search_handle_start 
+0x58fd 021955 fetch 2 ,mem_le_search_handle_end 
+0x58fe 021956 isub temp ,null 
+0x58ff 021957 nbranch le_start_end_handle_check_1_fail ,positive 
+0x5900 021958 deposit temp 
+0x5901 021959 rtnne 0 
+:      021960 le_start_end_handle_check_1_fail:
+0x5902 021961 enable user 
+0x5903 021962 jam att_err_invalid_handle ,mem_le_err_code 
+0x5904 021963 branch le_send_att_error_response 
+:      021966 le_send_att_find_by_type_value_response:
+0x5905 021967 call le_start_end_handle_check_1 
+0x5906 021968 rtn user 
+0x5907 021969 fetcht 2 ,mem_le_search_uuid 
+0x5908 021970 setarg uuid_gatt_primary_service 
+0x5909 021971 isub temp ,null 
+0x590a 021972 branch le_send_att_find_by_type_value_res_primary ,zero 
+0x590b 021973 branch le_send_att_error_response_notfound 
+:      021976 le_send_att_find_by_type_value_res_primary:
+0x590c 021977 jam le_find_by_type_val_res_not_found ,mem_le_search_res 
+0x590d 021978 fetcht 2 ,mem_le_search_handle_start 
+0x590e 021979 storet 2 ,mem_temp 
+0x590f 021980 call le_att_get_handle_info 
+0x5910 021981 nbranch le_send_att_error_response_notfound ,blank 
+:      021982 le_send_att_find_primary_search_loop:
+0x5911 021983 fetcht 2 ,mem_temp 
+0x5912 021984 call le_att_get_handle_info 
+0x5913 021985 nbranch le_send_att_error_response_notfound2 ,blank 
+0x5914 021986 copy contr ,rega 
+0x5915 021987 fetch 1 ,mem_le_curr_att_len 
+0x5916 021988 copy pdata ,loopcnt 
+0x5917 021989 fetcht 1 ,mem_le_search_att_type_length 
+0x5918 021990 isub temp ,null 
+0x5919 021991 nbranch le_send_att_find_primary_search_loop1 ,zero 
+0x591a 021992 arg mem_le_search_att_type ,regb 
+0x591b 021993 call string_compare 
+0x591c 021995 branch le_send_att_find_primary_search_end_start_handle_found ,zero 
+0x591d 021997 fetch 2 ,mem_le_cur_uuid 
+0x591e 021998 fetcht 2 ,mem_le_search_uuid 
+0x591f 021999 isub temp ,null 
+0x5920 022000 branch le_send_att_find_primary_search_end_ending_handle_found ,zero 
+:      022001 le_send_att_find_primary_search_loop1:
+0x5921 022002 fetch 2 ,mem_temp 
+0x5922 022003 increase 1 ,pdata 
+0x5923 022004 store 2 ,mem_temp 
+0x5924 022005 branch le_send_att_find_primary_search_loop 
+:      022007 le_send_att_error_response_notfound2:
+0x5925 022008 fetch 1 ,mem_le_search_res 
+0x5926 022009 beq le_find_by_type_val_res_found_starting_handle ,le_send_att_find_primary_search_end_ending_handle_found 
+0x5927 022010 branch le_send_att_error_response_notfound 
+:      022013 le_send_att_find_primary_search_end_start_handle_found:
+0x5928 022014 fetch 2 ,mem_le_cur_uuid 
+0x5929 022015 fetcht 2 ,mem_le_search_uuid 
+0x592a 022016 isub temp ,null 
+0x592b 022017 nbranch le_send_att_find_primary_search_loop1 ,zero 
+0x592c 022018 jam le_find_by_type_val_res_found_starting_handle ,mem_le_search_res 
+0x592d 022020 fetcht 2 ,mem_temp 
+0x592e 022021 storet 2 ,mem_le_cur_handle_start 
+0x592f 022022 branch le_send_att_find_primary_search_loop1 
+:      022024 le_send_att_find_primary_search_end_ending_handle_found:
+0x5930 022025 fetch 1 ,mem_le_search_res 
+0x5931 022026 beq le_find_by_type_val_res_not_found ,le_send_att_find_primary_search_loop1 
+0x5932 022027 jam le_find_by_type_val_res_found_ending_handle ,mem_le_search_res 
+0x5933 022028 fetcht 2 ,mem_temp 
+0x5934 022029 increase -1 ,temp 
+0x5935 022030 storet 2 ,mem_le_cur_handle_end 
+:      022032 le_send_att_find_primary_search_end:
+0x5936 022033 arg 5 ,rega 
+0x5937 022034 call le_fifo_malloc_tx_l2cap_gatt 
+0x5938 022035 setarg attop_find_by_type_value_response 
+0x5939 022036 istore 1 ,contw 
+0x593a 022037 fetch 2 ,mem_le_cur_handle_start 
+0x593b 022038 istore 2 ,contw 
+0x593c 022039 fetch 2 ,mem_le_cur_handle_end 
+0x593d 022040 istore 2 ,contw 
+0x593e 022041 rtn 
+:      022045 le_parse_att_read_by_type_request:
+0x593f 022046 call le_get_search_handle_start_end_common 
+0x5940 022047 call le_get_search_att_uuid 
+0x5941 022048 branch le_send_att_read_by_type_response 
+:      022050 le_send_att_read_by_type_response:
+0x5942 022051 fetcht 2 ,mem_le_search_handle_start 
+0x5943 022052 storet 2 ,mem_temp 
+0x5944 022053 call le_init_attlist_search 
+0x5945 022054 call le_att_get_handle_ptr2 
+0x5946 022055 increase -2 ,contr 
+0x5947 022056 copy contr ,pdata 
+0x5948 022057 store 2 ,mem_le_cur_attlist_start_ptr 
+0x5949 022059 fetcht 2 ,mem_le_search_uuid 
+0x594a 022060 setarg uuid_chrctr_device_name 
+0x594b 022061 isub temp ,null 
+0x594c 022062 branch le_send_att_read_by_type_res_device_name ,zero 
+0x594d 022063 setarg uuid_gatt_characteristic 
+0x594e 022064 isub temp ,null 
+0x594f 022065 nbranch le_send_att_read_by_type_res_not_characteristic ,zero 
+0x5950 022066 arg 2 ,timeup 
+:      022067 le_send_att_read_by_type_response_loop:
+0x5951 022068 call le_att_check_handle_end 
+0x5952 022069 nbranch le_send_att_read_by_type_response_end ,positive 
+0x5953 022070 fetcht 2 ,mem_temp 
+0x5954 022071 call le_att_get_handle_info_from_ptr 
+0x5955 022072 beq 1 ,le_send_att_read_by_type_response_end 
+0x5956 022073 call le_att_same_uuid 
+0x5957 022074 nbranch le_send_att_read_by_type_response_next_handle ,zero 
+0x5958 022075 nbranch le_send_att_read_by_type_res_found_next ,user 
+0x5959 022076 disable user 
+0x595a 022077 arg 20 ,rega 
+0x595b 022078 call le_fifo_malloc_tx_l2cap_gatt 
+0x595c 022079 setarg attop_read_by_type_response 
+0x595d 022080 istore 1 ,contw 
+0x595e 022081 copy contw ,alarm 
+0x595f 022082 increase 1 ,contw 
+0x5960 022084 call le_send_att_read_by_type_write_properties 
+0x5961 022085 call le_att_next_handle 
+0x5962 022086 call le_att_get_handle_info_from_ptr 
+0x5963 022087 call le_send_att_read_by_type_write_uuid 
+0x5964 022088 fetch 1 ,mem_le_cur_uuid_length 
+0x5965 022089 increase 5 ,pdata 
+0x5966 022090 istore 1 ,alarm 
+0x5967 022091 fetch 1 ,mem_le_cur_uuid_length 
+0x5968 022092 beq 16 ,le_send_att_read_by_type_response_end 
+0x5969 022093 increase -1 ,timeup 
+0x596a 022094 branch le_send_att_read_by_type_response_end ,zero 
+:      022095 le_send_att_read_by_type_response_next_handle:
+0x596b 022096 call le_att_next_handle 
+0x596c 022097 branch le_send_att_read_by_type_response_loop 
+:      022098 le_send_att_read_by_type_response_end:
+0x596d 022099 branch le_send_att_error_response_notfound ,user 
+0x596e 022100 branch le_send_auto_len_by_mem 
+:      022102 le_send_att_read_by_type_res_found_next:
+0x596f 022103 call le_store_att_record 
+0x5970 022104 call le_att_next_handle 
+0x5971 022105 call le_att_get_handle_info_from_ptr 
+0x5972 022106 fetch 1 ,mem_le_cur_uuid_length 
+0x5973 022107 beq 16 ,le_send_att_read_by_type_response_end 
+0x5974 022109 call get_contw 
+0x5975 022110 fetch 2 ,mem_temp 
+0x5976 022111 increase -1 ,pdata 
+0x5977 022112 istore 2 ,contw 
+0x5978 022113 call le_write_att_record_common 
+0x5979 022114 call le_send_att_read_by_type_write_uuid 
+0x597a 022115 increase -1 ,timeup 
+0x597b 022116 branch le_send_att_read_by_type_response_end ,zero 
+0x597c 022117 branch le_send_att_read_by_type_response_next_handle 
+:      022120 le_send_att_read_by_type_write_properties:
+0x597d 022121 fetch 2 ,mem_temp 
+0x597e 022122 istore 2 ,contw 
+0x597f 022124 fetch 1 ,mem_le_curr_att_len 
+0x5980 022125 copy pdata ,loopcnt 
+0x5981 022126 call get_contr 
+0x5982 022127 call memcpy_fast 
+0x5983 022128 branch store_contw 
+:      022129 le_send_att_read_by_type_write_uuid:
+0x5984 022130 call get_contw 
+0x5985 022131 fetch 2 ,mem_temp 
+0x5986 022132 istore 2 ,contw 
+0x5987 022133 call store_contw 
+0x5988 022134 fetch 1 ,mem_le_cur_uuid_length 
+0x5989 022135 copy pdata ,loopcnt 
+0x598a 022136 call get_contw 
+0x598b 022137 call get_contr 
+0x598c 022138 isub loopcnt ,contr 
+0x598d 022139 increase -1 ,contr 
+0x598e 022140 call memcpy_fast 
+0x598f 022141 branch store_contw 
+:      022145 le_send_att_read_by_type_res_not_characteristic:
+0x5990 022146 fetcht 2 ,mem_le_search_handle_start 
+0x5991 022147 storet 2 ,mem_temp 
+:      022148 le_send_att_read_by_type_res_not_char_loop:
+0x5992 022149 call le_att_check_handle_end 
+0x5993 022150 nbranch le_send_att_error_response_notfound ,positive 
+0x5994 022151 call le_att_get_handle_info_from_ptr 
+0x5995 022152 beq 1 ,le_send_att_error_response_notfound 
+0x5996 022153 call le_att_same_uuid 
+0x5997 022154 nbranch le_send_att_read_by_type_res_not_char_next ,zero 
+:      022156 le_send_att_read_by_type_res_not_char_common:
+0x5998 022157 arg 20 ,rega 
+0x5999 022158 call le_fifo_malloc_tx_l2cap_gatt 
+0x599a 022159 setarg attop_read_by_type_response 
+0x599b 022160 istore 1 ,contw 
+0x599c 022161 fetch 1 ,mem_le_curr_att_len 
+0x599d 022162 copy pdata ,loopcnt 
+0x599e 022163 increase 2 ,pdata 
+0x599f 022164 istore 1 ,contw 
+0x59a0 022165 fetch 2 ,mem_temp 
+0x59a1 022166 istore 2 ,contw 
+0x59a2 022167 call get_contr 
+0x59a3 022168 call memcpy_fast 
+0x59a4 022169 call store_contw 
+0x59a5 022170 branch le_send_auto_len_by_mem 
+:      022172 le_send_att_read_by_type_res_not_char_next:
+0x59a6 022173 call le_att_next_handle 
+0x59a7 022174 branch le_send_att_read_by_type_res_not_char_loop 
+:      022177 le_send_att_read_by_type_res_device_name:
+0x59a8 022178 arg uuid_chrctr_device_name ,temp 
+0x59a9 022179 call le_att_get_short_uuid_ptr 
+0x59aa 022180 rtn blank 
+0x59ab 022181 increase -5 ,contr 
+0x59ac 022182 ifetch 2 ,contr 
+0x59ad 022183 store 2 ,mem_temp 
+0x59ae 022184 arg 20 ,rega 
+0x59af 022185 call le_fifo_malloc_tx_l2cap_gatt 
+0x59b0 022186 setarg attop_read_by_type_response 
+0x59b1 022187 istore 1 ,contw 
+0x59b2 022188 fetch 1 ,mem_le_name_len 
+0x59b3 022189 copy pdata ,loopcnt 
+0x59b4 022190 increase 2 ,pdata 
+0x59b5 022191 istore 1 ,contw 
+0x59b6 022192 fetch 2 ,mem_temp 
+0x59b7 022193 istore 2 ,contw 
+0x59b8 022194 arg mem_le_name ,contr 
+0x59b9 022195 call memcpy_fast 
+0x59ba 022196 call store_contw 
+0x59bb 022197 branch le_send_auto_len_by_mem 
+:      022201 le_parse_att_read_request:
+0x59bc 022202 fetcht 2 ,mem_le_att_handle 
+0x59bd 022203 fetch 1 ,mem_le_configuration 
+0x59be 022204 bbit1 bit_ble_read_auth ,le_send_att_read_response_check_auth 
+:      022206 le_send_att_read_response:
+0x59bf 022207 call le_att_get_handle_ptr 
+0x59c0 022208 branch le_send_att_error_response_notfound ,blank 
+0x59c1 022209 increase -2 ,contr 
+0x59c2 022210 ifetch 2 ,contr 
+0x59c3 022211 arg uuid_chrctr_device_name ,temp 
+0x59c4 022212 isub temp ,null 
+0x59c5 022213 branch le_send_device_name ,zero 
+0x59c6 022214 ifetch 1 ,contr 
+0x59c7 022215 sub pdata ,22 ,null 
+0x59c8 022216 branch le_send_att_read_response_less ,positive 
+0x59c9 022217 force 22 ,pdata 
+:      022218 le_send_att_read_response_less:
+0x59ca 022219 copy pdata ,regc 
+0x59cb 022220 call store_contr 
+0x59cc 022221 add regc ,1 ,rega 
+0x59cd 022222 call le_fifo_malloc_tx_l2cap_gatt 
+0x59ce 022223 setarg attop_read_response 
+0x59cf 022224 istore 1 ,contw 
+0x59d0 022225 copy regc ,loopcnt 
+0x59d1 022226 call get_contr 
+0x59d2 022227 branch memcpy 
+:      022229 le_send_device_name:
+0x59d3 022230 call store_contr 
+0x59d4 022231 fetch 1 ,mem_le_name_len 
+0x59d5 022232 add pdata ,1 ,rega 
+0x59d6 022233 call le_fifo_malloc_tx_l2cap_gatt 
+0x59d7 022234 setarg attop_read_response 
+0x59d8 022235 istore 1 ,contw 
+0x59d9 022236 fetch 1 ,mem_le_name_len 
+0x59da 022237 copy pdata ,loopcnt 
+0x59db 022238 arg mem_le_name ,contr 
+0x59dc 022239 branch memcpy 
+:      022242 le_send_att_read_response_check_auth:
+0x59dd 022243 fetch 2 ,mem_le_pairing_handle 
+0x59de 022244 isub temp ,null 
+0x59df 022245 nbranch le_send_att_read_response ,zero 
+0x59e0 022247 call le_check_encrypt_state 
+0x59e1 022248 nbranch le_send_att_read_response ,user 
+0x59e2 022249 jam att_err_insufficient_authentication ,mem_le_err_code 
+0x59e3 022250 branch le_send_att_error_response 
+:      022253 le_parse_att_read_blob_request:
+0x59e4 022254 ifetch 2 ,contr 
+0x59e5 022255 store 2 ,mem_le_att_offset 
+:      022256 le_send_att_read_blob_response:
+0x59e6 022257 arg 20 ,rega 
+0x59e7 022258 call le_fifo_malloc_tx_l2cap_gatt 
+0x59e8 022259 setarg attop_read_blob_response 
+0x59e9 022260 istore 1 ,contw 
+0x59ea 022261 fetch 2 ,mem_le_att_offset 
+0x59eb 022262 iforce rega 
+0x59ec 022263 fetcht 2 ,mem_le_att_handle 
+0x59ed 022264 call le_att_get_handle_ptr 
+0x59ee 022265 branch le_send_att_error_response_notfound ,blank 
+0x59ef 022266 ifetch 1 ,contr 
+0x59f0 022267 isub rega ,loopcnt 
+0x59f1 022268 nbranch le_send_att_error_response_notfound ,positive 
+0x59f2 022269 sub loopcnt ,22 ,null 
+0x59f3 022270 branch le_send_att_read_blob_response_less ,positive 
+0x59f4 022271 force 22 ,loopcnt 
+:      022272 le_send_att_read_blob_response_less:
+0x59f5 022273 deposit rega 
+0x59f6 022274 iadd contr ,contr 
+0x59f7 022275 call memcpy_fast 
+0x59f8 022276 call store_contw 
+0x59f9 022277 branch le_send_auto_len_by_mem 
+:      022280 le_parse_att_read_by_group_type_request:
+0x59fa 022281 call le_get_search_handle_start_end_common 
+0x59fb 022282 call le_get_search_att_type 
+0x59fc 022283 branch le_send_att_read_by_group_type_response 
+:      022288 le_send_att_read_by_group_type_response:
+0x59fd 022289 arg 2 ,timeup 
+0x59fe 022290 fetcht 2 ,mem_le_search_handle_start 
+0x59ff 022294 storet 2 ,mem_temp 
+0x5a00 022295 call le_init_attlist_search 
+0x5a01 022296 call le_att_get_handle_ptr2 
+0x5a02 022297 increase -2 ,contr 
+0x5a03 022298 copy contr ,pdata 
+0x5a04 022299 store 2 ,mem_le_cur_attlist_start_ptr 
+:      022300 le_send_att_read_by_group_type_response_loop:
+0x5a05 022301 call le_att_check_handle_end 
+0x5a06 022302 nbranch le_send_att_read_by_group_type_end0 ,positive 
+0x5a07 022303 fetcht 2 ,mem_temp 
+0x5a08 022304 call le_att_get_handle_info_from_ptr 
+0x5a09 022305 beq 1 ,le_send_att_read_by_group_type_end1 
+0x5a0a 022307 call le_att_same_type 
+0x5a0b 022308 nbranch le_send_att_read_by_group_type_next_handle ,zero 
+0x5a0c 022309 copy timeup ,pdata 
+0x5a0d 022310 beq 0 ,le_send_att_read_by_group_type_end1 
+0x5a0e 022311 nbranch le_send_att_read_by_group_type_store_write_record ,user 
+0x5a0f 022312 disable user 
+0x5a10 022314 arg 20 ,rega 
+0x5a11 022315 call le_fifo_malloc_tx_l2cap_gatt 
+0x5a12 022316 setarg attop_read_by_group_type_response 
+0x5a13 022317 istore 1 ,contw 
+0x5a14 022318 fetch 1 ,mem_le_curr_att_len 
+0x5a15 022319 increase 4 ,pdata 
+0x5a16 022320 istore 1 ,contw 
+0x5a17 022321 call store_contw 
+0x5a18 022322 branch le_send_att_read_by_group_type_store_record 
+:      022323 le_send_att_read_by_group_type_store_write_record:
+0x5a19 022324 fetch 1 ,mem_le_curr_att_len 
+0x5a1a 022325 beq 16 ,le_send_att_read_by_group_type_end1 
+0x5a1b 022326 fetch 2 ,mem_temp 
+0x5a1c 022327 increase -1 ,pdata 
+0x5a1d 022328 store 2 ,mem_le_cur_handle_end 
+0x5a1e 022329 call le_write_att_record 
+:      022330 le_send_att_read_by_group_type_store_record:
+0x5a1f 022331 fetch 2 ,mem_temp 
+0x5a20 022332 store 2 ,mem_le_cur_handle_start 
+0x5a21 022333 call le_store_att_record 
+0x5a22 022334 increase -1 ,timeup 
+:      022336 le_send_att_read_by_group_type_next_handle:
+0x5a23 022337 call le_att_next_handle 
+0x5a24 022338 branch le_send_att_read_by_group_type_response_loop 
+:      022340 le_send_att_read_by_group_type_end0:
+0x5a25 022341 fetch 2 ,mem_temp 
+0x5a26 022342 store 2 ,mem_le_cur_handle_end 
+0x5a27 022343 branch le_send_att_read_by_group_type_end_common 
+:      022344 le_send_att_read_by_group_type_end1:
+0x5a28 022345 fetch 2 ,mem_temp 
+0x5a29 022346 increase -1 ,pdata 
+0x5a2a 022347 store 2 ,mem_le_cur_handle_end 
+0x5a2b 022348 branch le_send_att_read_by_group_type_end_common 
+:      022349 le_send_att_read_by_group_type_end_common:
+0x5a2c 022350 branch le_send_att_error_response_notfound ,user 
+0x5a2d 022351 call le_write_att_record 
+0x5a2e 022352 branch le_send_auto_len_by_mem 
+:      022357 le_parse_att_write_request:
+0x5a2f 022358 copy contr ,rega 
+0x5a30 022359 fetch 2 ,mem_le_l2cap_size 
+0x5a31 022360 add pdata ,-3 ,regb 
+0x5a32 022361 call le_writeatt_cb 
+:      022362 le_send_att_write_response_check_auth:
+0x5a33 022363 fetch 1 ,mem_le_configuration 
+0x5a34 022364 bbit0 bit_ble_write_auth ,le_send_att_write_response 
+0x5a35 022366 fetcht 2 ,mem_le_att_handle 
+0x5a36 022367 fetch 2 ,mem_le_pairing_handle 
+0x5a37 022368 isub temp ,null 
+0x5a38 022369 nbranch le_send_att_write_response ,zero 
+0x5a39 022370 call le_check_encrypt_state 
+0x5a3a 022371 nbranch le_send_att_write_response ,user 
+0x5a3b 022372 jam att_err_insufficient_authentication ,mem_le_err_code 
+0x5a3c 022373 branch le_send_att_error_response 
+:      022375 le_send_att_write_response:
+0x5a3d 022376 force 1 ,rega 
+0x5a3e 022377 call le_fifo_malloc_tx_l2cap_gatt 
+0x5a3f 022378 setarg attop_write_response 
+0x5a40 022379 istore 1 ,contw 
+0x5a41 022380 rtn 
+:      022382 le_check_encrypt_state:
+0x5a42 022383 call disable_user 
+0x5a43 022384 fetch 1 ,mem_le_pairing_mode 
+0x5a44 022385 rtneq le_pairing_mode_none 
+0x5a45 022386 fetch 1 ,mem_context 
+0x5a46 022387 rtnbit1 lestate_encryption 
+0x5a47 022388 branch enable_user 
+:      022391 le_parse_att_prepare_write_request:
+0x5a48 022392 add contr ,2 ,rega 
+0x5a49 022393 fetch 2 ,mem_le_l2cap_size 
+0x5a4a 022394 add pdata ,-5 ,regb 
+0x5a4b 022395 call le_writeatt_cb 
+0x5a4c 022396 branch le_send_att_prepare_write_response 
+:      022399 le_send_att_prepare_write_response:
+0x5a4d 022400 fetch 2 ,mem_le_l2cap_size 
+0x5a4e 022401 copy pdata ,rega 
+0x5a4f 022402 call le_fifo_malloc_tx_l2cap_gatt 
+0x5a50 022403 setarg attop_prepare_write_response 
+0x5a51 022404 istore 1 ,contw 
+0x5a52 022405 fetch 2 ,mem_le_att_handle 
+0x5a53 022406 istore 2 ,contw 
+0x5a54 022407 fetch 2 ,mem_le_l2cap_size 
+0x5a55 022408 add pdata ,-5 ,loopcnt 
+0x5a56 022409 fetch 2 ,mem_le_payload_ptr 
+0x5a57 022410 add pdata ,7 ,contr 
+0x5a58 022411 ifetch 2 ,contr 
+0x5a59 022412 istore 2 ,contw 
+0x5a5a 022413 branch memcpy_fast 
+:      022417 le_parse_att_execute_write_request:
+:      022419 le_send_att_execute_write_response:
+0x5a5b 022420 force 1 ,rega 
+0x5a5c 022421 call le_fifo_malloc_tx_l2cap_gatt 
+0x5a5d 022422 setarg attop_execute_write_response 
+0x5a5e 022423 istore 1 ,contw 
+0x5a5f 022424 rtn 
+:      022428 le_parse_att_write_command:
+0x5a60 022429 copy contr ,rega 
+0x5a61 022430 fetch 2 ,mem_le_l2cap_size 
+0x5a62 022431 add pdata ,-3 ,regb 
+0x5a63 022432 branch le_writeatt_cb 
+:      022437 le_att_malloc_tx_notify:
+0x5a64 022438 copy temp ,regc 
+0x5a65 022439 increase 3 ,rega 
+0x5a66 022440 call le_fifo_malloc_tx_l2cap_gatt 
+0x5a67 022441 increase -3 ,rega 
+0x5a68 022442 setarg attop_handle_value_notification 
+0x5a69 022443 istore 1 ,contw 
+0x5a6a 022444 copy regc ,temp 
+0x5a6b 022445 istoret 2 ,contw 
+0x5a6c 022446 rtn 
+:      022449 le_att_malloc_tx_indication:
+0x5a6d 022450 copy temp ,regc 
+0x5a6e 022451 increase 3 ,rega 
+0x5a6f 022452 call le_fifo_malloc_tx_l2cap_gatt 
+0x5a70 022453 increase -3 ,rega 
+0x5a71 022454 setarg attop_handle_value_indication 
+0x5a72 022455 istore 1 ,contw 
+0x5a73 022456 copy regc ,temp 
+0x5a74 022457 istoret 2 ,contw 
+0x5a75 022458 rtn 
+:      022463 le_send_att_error_response_notfound:
+0x5a76 022464 jam att_err_attribute_not_found ,mem_le_err_code 
+:      022465 le_send_att_error_response:
+0x5a77 022466 force 5 ,rega 
+0x5a78 022467 call le_fifo_malloc_tx_l2cap_gatt 
+0x5a79 022468 setarg attop_error_response 
+0x5a7a 022469 istore 1 ,contw 
+0x5a7b 022470 fetch 1 ,mem_le_att_opcode 
+0x5a7c 022471 istore 1 ,contw 
+0x5a7d 022472 fetch 2 ,mem_le_att_handle 
+0x5a7e 022473 istore 2 ,contw 
+0x5a7f 022474 fetch 1 ,mem_le_err_code 
+0x5a80 022475 istore 1 ,contw 
+0x5a81 022476 rtn 
+:      022479 le_fifo_malloc_tx_l2cap_gatt:
+0x5a82 022480 force le_l2cap_cid_att ,regb 
+0x5a83 022481 branch le_fifo_malloc_tx_l2cap 
+:      022484 le_att_next_handle:
+0x5a84 022485 fetcht 2 ,mem_temp 
+0x5a85 022486 increase 1 ,temp 
+0x5a86 022487 storet 2 ,mem_temp 
+0x5a87 022488 rtn 
+:      022490 le_att_check_handle_end:
+0x5a88 022491 fetcht 2 ,mem_temp 
+0x5a89 022492 fetch 2 ,mem_le_search_handle_end 
+0x5a8a 022493 isub temp ,null 
+0x5a8b 022494 rtn 
+:      022497 le_att_same_type:
+0x5a8c 022498 fetcht 1 ,mem_le_search_att_type_length 
+0x5a8d 022499 arg mem_le_search_att_type ,rega 
+:      022500 le_att_check_same_common:
+0x5a8e 022501 fetch 1 ,mem_le_cur_uuid_length 
+0x5a8f 022502 copy pdata ,loopcnt 
+0x5a90 022503 isub temp ,null 
+0x5a91 022504 nrtn zero 
+0x5a92 022505 arg mem_le_cur_uuid ,regb 
+0x5a93 022506 branch string_compare 
+:      022508 le_att_same_uuid:
+0x5a94 022509 fetcht 1 ,mem_le_search_uuid_length 
+0x5a95 022510 arg mem_le_search_uuid ,rega 
+0x5a96 022511 branch le_att_check_same_common 
+:      022514 le_store_att_record:
+0x5a97 022515 fetch 1 ,mem_le_curr_att_len 
+0x5a98 022516 store 1 ,mem_tmp_buffer 
+0x5a99 022517 copy pdata ,loopcnt 
+0x5a9a 022518 call get_contr 
+0x5a9b 022519 branch memcpy_fast 
+:      022522 le_write_att_record:
+0x5a9c 022523 call get_contw 
+0x5a9d 022524 fetch 2 ,mem_le_cur_handle_start 
+0x5a9e 022525 istore 2 ,contw 
+0x5a9f 022526 fetch 2 ,mem_le_cur_handle_end 
+0x5aa0 022527 istore 2 ,contw 
+:      022528 le_write_att_record_common:
+0x5aa1 022529 fetch 1 ,mem_tmp_buffer 
+0x5aa2 022530 copy pdata ,loopcnt 
+0x5aa3 022531 call memcpy_fast 
+0x5aa4 022532 branch store_contw 
+:      022536 le_send_auto_len_by_mem:
+0x5aa5 022537 call get_contw 
+0x5aa6 022538 call le_fifo_get_last_att_ptr 
+0x5aa7 022539 copy contw ,pdata 
+0x5aa8 022540 isub contr ,rega 
+0x5aa9 022541 call le_fifo_get_last_l2cap_ptr 
+0x5aaa 022542 copy rega ,pdata 
+0x5aab 022543 istore 2 ,contr 
+0x5aac 022544 increase 4 ,rega 
+0x5aad 022545 call le_fifo_get_last_tx_ptr 
+0x5aae 022546 copy rega ,pdata 
+0x5aaf 022547 istore 1 ,contr 
+0x5ab0 022548 rtn 
+:      022551 le_get_search_handle_start_end_common:
+0x5ab1 022552 rshift8 pdata ,pdata 
+0x5ab2 022553 store 2 ,mem_le_search_handle_start 
+0x5ab3 022554 ifetch 2 ,contr 
+0x5ab4 022555 store 2 ,mem_le_search_handle_end 
+0x5ab5 022556 rtn 
+:      022561 le_parse_signaling:
+0x5ab6 022562 ifetch 1 ,contr 
+0x5ab7 022563 ifetcht 1 ,contr 
+0x5ab8 022564 ifetcht 2 ,contr 
+0x5ab9 022565 beq l2cap_connection_parameter_update_response ,le_l2cap_parse_conn_parameter_update_rsp 
+0x5aba 022566 rtn 
+:      022567 le_l2cap_parse_conn_parameter_update_rsp:
+0x5abb 022568 ifetch 2 ,contr 
+0x5abc 022569 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 
+0x5abd 022570 jam bt_evt_le_parse_conn_papa_update_rsp ,mem_fifo_temp 
+0x5abe 022571 branch ui_ipc_send_event 
+:      022577 le_l2cap_tx_update_req:
+0x5abf 022578 arg 0x0c ,rega 
+0x5ac0 022579 arg l2cap_connection_parameter_update_request ,regc 
+0x5ac1 022580 call le_fifo_malloc_tx_l2cap_signaling 
+0x5ac2 022581 setarg 0x08 
+0x5ac3 022582 istore 2 ,contw 
+0x5ac4 022583 fetch 8 ,mem_le_interval_min 
+0x5ac5 022584 istore 8 ,contw 
+0x5ac6 022585 rtn 
+:      022589 le_fifo_malloc_tx_l2cap_signaling:
+0x5ac7 022590 call le_l2cap_update_signaling_identifier 
+0x5ac8 022591 arg le_l2cap_cid_signal ,regb 
+0x5ac9 022592 call le_fifo_malloc_tx_l2cap 
+0x5aca 022593 copy regc ,pdata 
+0x5acb 022594 istore 1 ,contw 
+0x5acc 022595 fetch 1 ,mem_le_signaling_identifier 
+0x5acd 022596 istore 1 ,contw 
+0x5ace 022597 rtn 
+:      022600 le_l2cap_update_signaling_identifier:
+0x5acf 022601 fetch 1 ,mem_le_signaling_identifier 
+0x5ad0 022603 pincrease 1 
+0x5ad1 022604 store 1 ,mem_le_signaling_identifier 
+0x5ad2 022605 rtnne 0 
+:      022607 le_l2cap_reset_signaling_identifier:
+0x5ad3 022608 jam 1 ,mem_le_signaling_identifier 
+0x5ad4 022609 rtn 
+:      022614 le_pairing_mode_init:
+0x5ad5 022615 fetch 1 ,mem_le_pairing_mode 
+0x5ad6 022616 beq le_pairing_mode_none ,le_set_no_pairing 
+0x5ad7 022617 beq le_pairing_mode_lagacy_justwork ,le_set_pairing_mode_lagacy_just_work 
+0x5ad8 022618 beq le_pairing_mode_lagacy_passkey ,le_set_pairing_mode_lagacy_passkey 
+0x5ad9 022619 beq le_pairing_mode_secure_connect_justwork ,le_set_pairing_mode_secure_justwork 
+0x5ada 022620 beq le_pairing_mode_secure_connect_numeric ,le_set_pairing_mode_secure_numeric 
+0x5adb 022621 beq le_pairing_mode_secure_connect_passkey ,le_set_pairing_mode_secure_passkey 
+0x5adc 022622 rtn 
+:      022624 le_set_pairing_mode_secure_justwork:
+0x5add 022625 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+0x5ade 022626 branch le_set_noinputnooutput 
+:      022627 le_set_pairing_mode_secure_numeric:
+0x5adf 022628 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+0x5ae0 022629 jam flag_iocap_displayyesno ,mem_le_pres_iocap 
+0x5ae1 022630 rtn 
+:      022631 le_set_pairing_mode_secure_passkey:
+0x5ae2 022632 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+0x5ae3 022633 branch le_set_displayonly 
+:      022634 le_set_no_pairing:
+0x5ae4 022635 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth 
+:      022636 le_set_noinputnooutput:
+0x5ae5 022637 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap 
+0x5ae6 022638 rtn 
+:      022639 le_set_pairing_mode_lagacy_just_work:
+0x5ae7 022640 jam flag_le_bonding_mitm ,mem_le_pres_auth 
+0x5ae8 022641 branch le_set_noinputnooutput 
+:      022642 le_set_pairing_mode_lagacy_passkey:
+0x5ae9 022643 jam flag_le_bonding_mitm ,mem_le_pres_auth 
+:      022644 le_set_displayonly:
+0x5aea 022645 jam flag_iocap_displayonly ,mem_le_pres_iocap 
+0x5aeb 022646 rtn 
+:      022649 le_secure_connection_enable:
+0x5aec 022650 fetch 1 ,mem_le_pres_auth 
+0x5aed 022651 set1 le_auth_secure_connection_pairing_bit ,pdata 
+0x5aee 022652 store 1 ,mem_le_pres_auth 
+0x5aef 022653 rtn 
+:      022654 le_secure_connection_disable:
+0x5af0 022655 fetch 1 ,mem_le_pres_auth 
+0x5af1 022656 set0 le_auth_secure_connection_pairing_bit ,pdata 
+0x5af2 022657 store 1 ,mem_le_pres_auth 
+0x5af3 022658 rtn 
+:      022660 le_parse_smp:
+0x5af4 022661 ifetch 1 ,contr 
+0x5af5 022662 beq smp_pairing_request ,le_parse_smp_pairing_request 
+0x5af6 022664 beq smp_pairing_confirm ,le_parse_smp_pairing_confirm 
+0x5af7 022665 beq smp_pairing_random ,le_parse_smp_pairing_random 
+0x5af8 022666 beq smp_pairing_failed ,le_parse_smp_pairing_failed 
+0x5af9 022667 beq smp_encryption_information ,le_parse_smp_encryption_information 
+0x5afa 022668 beq smp_master_identification ,le_parse_smp_master_identification 
+0x5afb 022669 beq smp_identity_information ,le_parse_smp_identity_information 
+0x5afc 022670 beq smp_identity_address_information ,le_parse_smp_identity_address_information 
+0x5afd 022671 beq smp_signing_information ,le_parse_smp_signing_information 
+0x5afe 022672 beq smp_security_request ,le_parse_smp_security_request 
+0x5aff 022673 beq smp_pairing_public_key ,le_parse_smp_public_key 
+0x5b00 022674 beq smp_pairing_dhkey_check ,le_parse_smp_dhkey_check 
+0x5b01 022675 rtn 
+:      022679 le_send_smp_security_request:
+0x5b02 022680 force 2 ,rega 
+0x5b03 022681 call le_fifo_malloc_tx_l2cap_smp 
+0x5b04 022682 setarg smp_security_request 
+0x5b05 022683 istore 1 ,contw 
+0x5b06 022684 fetch 1 ,mem_le_pres_auth 
+0x5b07 022685 istore 1 ,contw 
+0x5b08 022686 rtn 
+:      022688 le_parse_smp_pairing_request:
+0x5b09 022689 store 1 ,mem_le_preq 
+0x5b0a 022690 ifetch 6 ,contr 
+0x5b0b 022691 istore 6 ,contw 
+0x5b0c 022692 fetch 1 ,mem_le_pairing_mode 
+0x5b0d 022693 beq le_pairing_mode_none ,le_smp_pairing_fail_reason_not_support_pairing 
+0x5b0e 022694 call le_send_smp_pairing_response 
+0x5b0f 022695 call le_check_master_support_secure_connect 
+0x5b10 022696 jam flag_le_pairing_rcv_pairing_req ,mem_le_pairing_state 
+0x5b11 022697 fetch 1 ,mem_le_preq_iocap 
+0x5b12 022698 beq flag_iocap_displayonly ,le_set_tk_0 
+0x5b13 022699 beq flag_iocap_displayyesno ,le_set_tk_0 
+0x5b14 022700 beq flag_iocap_noinputnooutput ,le_set_tk_0 
+0x5b15 022701 fetch 1 ,mem_le_pairing_mode 
+0x5b16 022702 beq le_pairing_mode_lagacy_passkey ,le_parse_smp_pairing_req_passkey 
+0x5b17 022703 rtneq le_pairing_mode_secure_connect_passkey 
+:      022704 le_set_tk_0:
+0x5b18 022705 arg 0 ,pdata 
+0x5b19 022706 store 4 ,mem_le_tk 
+0x5b1a 022707 rtn 
+:      022709 le_parse_smp_pairing_req_passkey:
+0x5b1b 022710 fetch 1 ,mem_le_configuration 
+0x5b1c 022711 bbit1 bit_ble_passkey_fixed_key ,le_parse_smp_pairing_req_fixed_passkey 
+:      022712 le_genernate_tk:
+0x5b1d 022713 arg mem_le_tk ,rega 
+0x5b1e 022714 copy rega ,contw 
+0x5b1f 022715 arg 3 ,loopcnt 
+0x5b20 022716 call generate_random_loop 
+0x5b21 022717 fetch 2 ,mem_le_tk + 2 
+0x5b22 022718 and_into 0x7 ,pdata 
+0x5b23 022719 store 2 ,mem_le_tk + 2 
+:      022720 le_parse_smp_pairing_req_fixed_passkey:
+0x5b24 022721 jam bt_evt_le_tk_generate ,mem_fifo_temp 
+0x5b25 022722 branch ui_ipc_send_event 
+:      022724 le_check_master_support_secure_connect:
+0x5b26 022725 fetch 1 ,mem_le_preq_auth 
+0x5b27 022726 rtnbit1 le_auth_secure_connection_pairing_bit 
+0x5b28 022727 fetch 1 ,mem_le_pairing_mode 
+0x5b29 022728 rtnbit0 le_pairing_mode_secure_connect_bit 
+0x5b2a 022729 branch app_ble_disconnect 
+:      022731 le_send_smp_pairing_response:
+0x5b2b 022732 force 7 ,rega 
+0x5b2c 022733 call le_fifo_malloc_tx_l2cap_smp 
+0x5b2d 022734 fetch 7 ,mem_le_pres 
+0x5b2e 022735 istore 7 ,contw 
+0x5b2f 022736 rtn 
+:      022739 le_parse_smp_pairing_confirm:
+0x5b30 022740 copy contr ,rega 
+0x5b31 022741 fetch 1 ,mem_le_pairing_mode 
+0x5b32 022742 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_confirm_secure_passkey 
+0x5b33 022743 copy rega ,contr 
+0x5b34 022744 arg mem_le_rconfirm ,contw 
+0x5b35 022745 call memcpy16 
+0x5b36 022746 branch le_send_smp_pairing_confirm 
+:      022747 le_parse_smp_pairing_confirm_secure_passkey:
+0x5b37 022748 copy rega ,contr 
+0x5b38 022749 arg mem_le_rconfirm ,contw 
+0x5b39 022750 call memcpy16 
+0x5b3a 022751 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+0x5b3b 022752 jam le_sc_stat_passkey_wait_confirm ,mem_le_secure_connect_state 
+0x5b3c 022753 rtn 
+:      022756 le_send_smp_pairing_confirm:
+0x5b3d 022757 fetch 1 ,mem_le_pairing_mode 
+0x5b3e 022758 bbit1 le_pairing_mode_secure_connect_bit ,le_send_smp_pairing_confirm_sc 
+0x5b3f 022759 call generate_confirm 
+0x5b40 022760 force 17 ,rega 
+0x5b41 022761 call le_fifo_malloc_tx_l2cap_smp 
+0x5b42 022762 setarg smp_pairing_confirm 
+0x5b43 022763 istore 1 ,contw 
+0x5b44 022764 branch store_aes_result 
+:      022767 le_send_smp_pairing_confirm_sc:
+0x5b45 022768 arg mem_le_srand ,contw 
+0x5b46 022769 call generate_random 
+0x5b47 022770 call function_f4_cb 
+0x5b48 022771 force 17 ,rega 
+0x5b49 022772 call le_fifo_malloc_tx_l2cap_smp 
+0x5b4a 022773 setarg smp_pairing_confirm 
+0x5b4b 022774 istore 1 ,contw 
+0x5b4c 022775 branch load_inverse_result 
+:      022779 le_parse_smp_pairing_random:
+0x5b4d 022780 copy contr ,rega 
+0x5b4e 022781 fetch 1 ,mem_le_pairing_mode 
+0x5b4f 022782 bbit1 le_pairing_mode_secure_connect_bit ,le_parse_smp_pairing_random_sc 
+0x5b50 022783 copy rega ,contr 
+0x5b51 022784 call authenticate_rconfirm 
+0x5b52 022785 branch le_parse_smp_pairing_random_success ,zero 
+:      022786 le_send_pairing_confirm_value_failed:
+0x5b53 022787 jam pairing_failed_confirm_value_failed ,mem_le_ll_pairing_fail_reason 
+:      022788 le_send_pairing_failed:
+0x5b54 022789 force 2 ,rega 
+0x5b55 022790 call le_fifo_malloc_tx_l2cap_smp 
+0x5b56 022791 setarg smp_pairing_failed 
+0x5b57 022792 istore 1 ,contw 
+0x5b58 022793 fetch 1 ,mem_le_ll_pairing_fail_reason 
+0x5b59 022794 istore 1 ,contw 
+:      022795 le_parse_smp_pairing_failed:
+0x5b5a 022796 force smp_pairing_timer ,queue 
+0x5b5b 022797 call timer_stop 
+0x5b5c 022798 jam flag_le_pairing_null ,mem_le_pairing_state 
+0x5b5d 022799 jam bt_evt_le_pairing_fail ,mem_fifo_temp 
+0x5b5e 022800 branch ui_ipc_send_event 
+:      022802 le_smp_pairing_fail_reason_not_support_pairing:
+0x5b5f 022803 jam pairing_failed_pairing_not_supported ,mem_le_ll_pairing_fail_reason 
+0x5b60 022804 branch le_send_pairing_failed 
+:      022807 le_parse_smp_pairing_random_sc:
+0x5b61 022808 arg mem_le_mrand ,contw 
+0x5b62 022809 copy rega ,contr 
+0x5b63 022810 call memcpy16 
+0x5b64 022811 fetch 1 ,mem_le_pairing_mode 
+0x5b65 022812 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_random_sc_passkey 
+0x5b66 022813 call function_g2 
+0x5b67 022816 call le_send_smp_pairing_random 
+0x5b68 022817 fetch 1 ,mem_le_pairing_mode 
+0x5b69 022818 rtnne le_pairing_mode_secure_connect_numeric 
+0x5b6a 022819 jam bt_evt_le_gkey_generate ,mem_fifo_temp 
+0x5b6b 022820 branch ui_ipc_send_event 
+:      022822 le_parse_smp_pairing_random_sc_passkey:
+0x5b6c 022823 call function_f4_ca 
+0x5b6d 022824 arg mem_aes_cmac_temp ,contw 
+0x5b6e 022825 call load_inverse_result 
+0x5b6f 022826 arg mem_aes_cmac_temp ,rega 
+0x5b70 022827 arg mem_le_rconfirm ,regb 
+0x5b71 022828 arg 16 ,loopcnt 
+0x5b72 022829 call string_compare 
+0x5b73 022830 nbranch le_send_pairing_confirm_value_failed ,zero 
+0x5b74 022831 branch le_send_smp_pairing_random 
+:      022833 le_parse_smp_pairing_random_success:
+0x5b75 022834 call generate_stk 
+0x5b76 022835 jam bt_evt_le_pairing_success ,mem_fifo_temp 
+0x5b77 022836 call ui_ipc_send_event 
+0x5b78 022837 jam 1 ,mem_ltk_exists 
+0x5b79 022838 jam flag_le_pairing_after_auth ,mem_le_pairing_state 
+:      022840 le_send_smp_pairing_random:
+0x5b7a 022841 force 17 ,rega 
+0x5b7b 022842 call le_fifo_malloc_tx_l2cap_smp 
+0x5b7c 022843 setarg smp_pairing_random 
+0x5b7d 022844 istore 1 ,contw 
+0x5b7e 022845 arg mem_le_srand ,contr 
+0x5b7f 022846 branch memcpy16 
+:      022848 le_parse_smp_encryption_information:
+0x5b80 022849 arg mem_le_peer_ltk ,contw 
+0x5b81 022850 branch memcpy16 
+:      022852 le_send_smp_encryption_information:
+0x5b82 022853 force 17 ,rega 
+0x5b83 022854 call le_fifo_malloc_tx_l2cap_smp 
+0x5b84 022855 setarg smp_encryption_information 
+0x5b85 022856 istore 1 ,contw 
+0x5b86 022857 fetch 1 ,mem_le_configuration 
+0x5b87 022858 bbit1 bit_ble_pairing_fixed_ltk ,le_send_fixed_ltk 
+0x5b88 022859 arg mem_le_ltk ,contr 
+0x5b89 022860 branch memcpy16 
+:      022862 le_send_fixed_ltk:
+0x5b8a 022863 arg mem_le_fixed_ltk ,contr 
+0x5b8b 022864 branch memcpy16 
+:      022867 le_send_smp_master_identification:
+0x5b8c 022868 arg mem_le_ediv ,contw 
+0x5b8d 022869 force 10 ,loopcnt 
+0x5b8e 022870 call generate_random_loop 
+0x5b8f 022871 force 11 ,rega 
+0x5b90 022872 call le_fifo_malloc_tx_l2cap_smp 
+0x5b91 022873 setarg smp_master_identification 
+0x5b92 022874 istore 1 ,contw 
+0x5b93 022875 fetch 2 ,mem_le_ediv 
+0x5b94 022876 istore 2 ,contw 
+0x5b95 022877 fetch 8 ,mem_le_rand 
+0x5b96 022878 istore 8 ,contw 
+0x5b97 022879 rtn 
+:      022881 le_send_smp_identity_information:
+0x5b98 022882 force 17 ,rega 
+0x5b99 022883 call le_fifo_malloc_tx_l2cap_smp 
+0x5b9a 022884 setarg smp_identity_information 
+0x5b9b 022885 istore 1 ,contw 
+0x5b9c 022886 setarg 0 
+0x5b9d 022887 istore 8 ,contw 
+0x5b9e 022888 istore 8 ,contw 
+0x5b9f 022889 rtn 
+:      022892 le_send_smp_identity_address_information:
+0x5ba0 022893 force 8 ,rega 
+0x5ba1 022894 call le_fifo_malloc_tx_l2cap_smp 
+0x5ba2 022895 setarg smp_identity_address_information 
+0x5ba3 022896 istore 1 ,contw 
+0x5ba4 022897 fetch 1 ,mem_le_conn_own_addr_type 
+0x5ba5 022898 istore 1 ,contw 
+0x5ba6 022899 fetch 6 ,mem_le_lap 
+0x5ba7 022900 istore 6 ,contw 
+0x5ba8 022901 rtn 
+:      022904 le_send_pairing_fail_unspecified_reason:
+0x5ba9 022905 jam pairing_failed_unspecified_reason ,mem_le_ll_pairing_fail_reason 
+0x5baa 022906 branch le_send_pairing_failed 
+:      022908 le_check_init_key_distribution:
+0x5bab 022909 fetch 1 ,mem_le_pres_init_key_distribution 
+0x5bac 022910 fetcht 1 ,mem_le_pres_init_key_distribution 
+0x5bad 022911 iand temp ,pdata 
+0x5bae 022912 rtn 
+:      022914 le_parse_smp_identity_information:
+0x5baf 022915 arg mem_le_irk ,contw 
+0x5bb0 022916 call memcpy16 
+0x5bb1 022917 call le_check_init_key_distribution 
+0x5bb2 022918 isolate0 le_initator_irk_bit ,pdata 
+0x5bb3 022919 branch le_send_pairing_fail_unspecified_reason ,true 
+0x5bb4 022920 fetch 1 ,mem_device_option 
+0x5bb5 022921 rtnne dvc_op_module 
+0x5bb6 022922 call le_check_master_addr_type 
+0x5bb7 022923 nrtn user 
+0x5bb8 022924 branch app_ble_store_reconn_info 
+:      022927 le_check_master_addr_type:
+0x5bb9 022928 call disable_user 
+0x5bba 022929 fetch 1 ,mem_le_conn_peer_addr_type 
+0x5bbb 022930 rtneq master_public_addr 
+0x5bbc 022931 fetch 1 ,mem_le_plap + 5 
+0x5bbd 022932 compare 0xc0 ,pdata ,0xc0 
+0x5bbe 022933 rtn true 
+0x5bbf 022934 branch enable_user 
+:      022936 le_parse_smp_identity_address_information:
+0x5bc0 022937 call le_check_init_key_distribution 
+0x5bc1 022938 isolate0 le_initator_irk_bit ,pdata 
+0x5bc2 022939 branch le_send_pairing_fail_unspecified_reason ,true 
+0x5bc3 022940 rtn 
+:      022942 le_parse_smp_master_identification:
+:      022943 le_parse_smp_signing_information:
+:      022944 le_parse_smp_security_request:
+0x5bc4 022945 rtn 
+:      022947 le_parse_smp_public_key:
+0x5bc5 022948 arg mem_le_pubkey_remote_x_256 ,contw 
+0x5bc6 022949 call memcpy64 
+0x5bc7 022950 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+0x5bc8 022951 jam le_sc_stat_receive_public_key ,mem_le_secure_connect_state 
+0x5bc9 022952 rtn 
+:      022954 le_parse_smp_dhkey_check:
+0x5bca 022955 arg mem_sp_confirm_remote ,contw 
+0x5bcb 022956 call memcpy16 
+0x5bcc 022957 jam le_sc_stat_receive_dhkey ,mem_le_secure_connect_state 
+0x5bcd 022958 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+0x5bce 022959 rtn 
+:      022961 le_send_smp_pairing_public_key:
+0x5bcf 022962 force 65 ,rega 
+0x5bd0 022963 call le_fifo_malloc_tx_l2cap_smp 
+0x5bd1 022964 setarg smp_pairing_public_key 
+0x5bd2 022965 istore 1 ,contw 
+0x5bd3 022966 arg mem_le_pubkey_local_x_256 ,contr 
+0x5bd4 022967 branch memcpy64 
+:      022969 le_send_smp_pairing_dhkey_check:
+0x5bd5 022970 call function_f6_eb 
+0x5bd6 022971 force 17 ,rega 
+0x5bd7 022972 call le_fifo_malloc_tx_l2cap_smp 
+0x5bd8 022973 setarg smp_pairing_dhkey_check 
+0x5bd9 022974 istore 1 ,contw 
+0x5bda 022975 branch load_inverse_result 
+:      022978 le_check_paring_time:
+0x5bdb 022979 fetch 1 ,mem_le_pairing_state 
+0x5bdc 022980 rtneq flag_le_pairing_end 
+0x5bdd 022981 arg flag_le_pairing_rcv_pairing_req ,temp 
+0x5bde 022982 isub temp ,null 
+0x5bdf 022983 nrtn positive 
+0x5be0 022984 arg smp_pairing_timer ,queue 
+0x5be1 022985 call timer_check 
+0x5be2 022986 nrtn blank 
+0x5be3 022987 branch le_send_pairing_fail_unspecified_reason 
+:      022989 le_pairing_sm:
+0x5be4 022990 bpatchx patch2f_0 ,mem_patch2f 
+0x5be5 022991 fetch 1 ,mem_le_pairing_state 
+0x5be6 022992 beq flag_le_pairing_null ,le_pairing_sm_null 
+0x5be7 022993 beq flag_le_pairing_start ,le_pairing_sm_start 
+0x5be8 022994 beq flag_le_pairing_send_recurity_req ,le_pairing_sm_send_sec_req 
+0x5be9 022995 beq flag_le_pairing_rcv_pairing_req ,le_pairing_sm_rcv_pairing_req 
+0x5bea 022996 beq flag_le_pairing_after_auth ,le_pairing_sm_after_auth 
+0x5beb 022997 beq flag_le_paring_send_enc_information ,le_pairng_sm_send_enc_information 
+0x5bec 022998 beq flag_le_paring_send_master_identification ,le_pairng_sm_send_master_indentification 
+0x5bed 022999 beq flag_le_paring_send_indentity_information ,le_pairng_sm_send_indentity_information 
+0x5bee 023000 rtn 
+:      023002 le_pairing_sm_null:
+:      023003 le_pairing_sm_send_sec_req:
+0x5bef 023004 fetch 1 ,mem_le_enc_state 
+0x5bf0 023005 rtnne flag_le_send_start_enc_rsp 
+0x5bf1 023006 jam flag_le_enc_end ,mem_le_enc_state 
+0x5bf2 023007 jam flag_le_pairing_end ,mem_le_pairing_state 
+0x5bf3 023008 jam bt_evt_le_reconnect_complete ,mem_fifo_temp 
+0x5bf4 023009 branch ui_ipc_send_event 
+:      023012 le_pairing_sm_start:
+0x5bf5 023013 jam flag_le_pairing_send_recurity_req ,mem_le_pairing_state 
+0x5bf6 023014 branch le_send_smp_security_request 
+:      023016 le_pairing_sm_rcv_pairing_req:
+0x5bf7 023017 jam flag_le_pairing_auth ,mem_le_pairing_state 
+0x5bf8 023018 setarg timer_smp_pairing_timeout 
+0x5bf9 023019 arg smp_pairing_timer ,queue 
+0x5bfa 023020 branch timer_init 
+:      023022 le_pairing_sm_after_auth:
+0x5bfb 023023 fetch 1 ,mem_le_enc_state 
+0x5bfc 023024 beq flag_le_send_start_enc_rsp ,le_pairing_sm_after_auth_start_enc 
+0x5bfd 023025 rtn 
+:      023027 le_pairing_sm_after_auth_start_enc:
+0x5bfe 023028 jam flag_le_paring_send_enc_information ,mem_le_pairing_state 
+0x5bff 023029 jam bt_evt_le_enc_info ,mem_fifo_temp 
+0x5c00 023030 call ui_ipc_send_event 
+0x5c01 023031 call le_send_smp_encryption_information 
+0x5c02 023032 fetch 1 ,mem_device_option 
+0x5c03 023033 rtnne dvc_op_module 
+0x5c04 023034 call le_check_master_addr_type 
+0x5c05 023035 rtn user 
+0x5c06 023036 branch app_ble_store_reconn_info 
+:      023039 le_pairng_sm_send_enc_information:
+0x5c07 023040 jam flag_le_paring_send_master_identification ,mem_le_pairing_state 
+0x5c08 023041 branch le_send_smp_master_identification 
+:      023043 le_pairng_sm_send_master_indentification:
+0x5c09 023044 fetch 1 ,mem_le_preq_resp_key_distribution 
+0x5c0a 023045 fetcht 1 ,mem_le_pres_resp_key_distribution 
+0x5c0b 023046 iand temp ,pdata 
+0x5c0c 023047 isolate0 le_initator_irk_bit ,pdata 
+0x5c0d 023048 branch le_parse_start_enc_rsp_after_auth_end ,true 
+0x5c0e 023049 jam flag_le_paring_send_indentity_information ,mem_le_pairing_state 
+0x5c0f 023050 branch le_send_smp_identity_information 
+:      023052 le_pairng_sm_send_indentity_information:
+0x5c10 023053 call le_send_smp_identity_address_information 
+0x5c11 023054 branch le_parse_start_enc_rsp_after_auth_end 
+:      023057 le_parse_start_enc_rsp_after_auth_end:
+0x5c12 023058 force smp_pairing_timer ,queue 
+0x5c13 023059 call timer_stop 
+0x5c14 023060 jam flag_le_enc_end ,mem_le_enc_state 
+0x5c15 023061 jam flag_le_pairing_end ,mem_le_pairing_state 
+0x5c16 023062 jam bt_evt_le_pairing_complete ,mem_fifo_temp 
+0x5c17 023063 branch ui_ipc_send_event 
+:      023067 le_secure_connect_sm:
+0x5c18 023068 bpatchx patch2f_1 ,mem_patch2f 
+0x5c19 023069 fetch 1 ,mem_le_pairing_mode 
+0x5c1a 023070 rtnbit0 le_pairing_mode_secure_connect_bit 
+0x5c1b 023071 fetch 1 ,mem_le_secure_connect_flag 
+0x5c1c 023072 rtnne le_sp_flag_commit_256 
+0x5c1d 023073 jam sp_flag_standby ,mem_le_secure_connect_flag 
+0x5c1e 023074 fetch 1 ,mem_le_secure_connect_state 
+0x5c1f 023075 beq le_sc_stat_receive_public_key ,le_sc_sm_receive_public_key 
+0x5c20 023076 beq le_sc_stat_wait_send_public_key ,le_sc_sm_wait_send_public_key 
+0x5c21 023077 beq le_sc_stat_send_public_key ,le_sc_sm_send_public_key 
+0x5c22 023078 beq le_sc_stat_receive_dhkey ,le_sc_sm_receive_dhkey 
+0x5c23 023079 beq le_sc_stat_wait_confirm_gkey ,le_sc_sm_wait_confirm_gkey 
+0x5c24 023080 beq le_sc_stat_passkey_wait_confirm ,le_sc_sm_passkey_wait_confirm 
+0x5c25 023081 rtn 
+:      023084 le_sc_sm_passkey_wait_confirm:
+0x5c26 023085 fetch 1 ,mem_authentication_passkey_times 
+0x5c27 023086 copy pdata ,queue 
+0x5c28 023087 increase 1 ,pdata 
+0x5c29 023088 store 1 ,mem_authentication_passkey_times 
+0x5c2a 023089 fetch 4 ,mem_le_tk 
+0x5c2b 023090 qisolate1 pdata 
+0x5c2c 023091 setarg 0x80 
+0x5c2d 023092 setflag true ,0 ,pdata 
+0x5c2e 023093 store 1 ,mem_passkey_1bit 
+0x5c2f 023094 branch le_sc_sm_ready_send_pairing_confirm 
+:      023096 le_sc_sm_wait_confirm_gkey:
+0x5c30 023097 fetch 1 ,mem_le_sc_confirm_gkey_flag 
+0x5c31 023098 jam flag_le_sc_confrim_null ,mem_le_sc_confirm_gkey_flag 
+0x5c32 023099 beq flag_le_sc_confrim_gkey_ok ,le_sc_confirm_gkey_ok 
+0x5c33 023100 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+0x5c34 023101 rtn 
+:      023103 le_sc_confirm_gkey_ok:
+0x5c35 023104 jam bt_evt_le_pairing_success ,mem_fifo_temp 
+0x5c36 023105 call ui_ipc_send_event 
+0x5c37 023106 jam flag_le_pairing_after_auth ,mem_le_pairing_state 
+0x5c38 023107 branch le_send_smp_pairing_dhkey_check 
+:      023109 le_sc_sm_receive_dhkey:
+0x5c39 023110 fetch 1 ,mem_sp_dhkey_invalid 
+0x5c3a 023111 beq sp_key_valid_256 ,le_dhkey_ready 
+0x5c3b 023112 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+0x5c3c 023113 rtn 
+:      023115 le_dhkey_ready:
+0x5c3d 023116 call function_f5 
+0x5c3e 023120 fetch 1 ,mem_le_pairing_mode 
+0x5c3f 023121 beq le_pairing_mode_secure_connect_passkey ,le_dhkey_ready_common 
+0x5c40 023122 call le_set_tk_0 
+:      023123 le_dhkey_ready_common:
+0x5c41 023124 call function_f6_ea 
+0x5c42 023125 arg mem_aes_cmac_temp ,rega 
+0x5c43 023126 arg mem_sp_confirm_remote ,regb 
+0x5c44 023127 arg 16 ,loopcnt 
+0x5c45 023128 call string_compare 
+0x5c46 023129 branch le_dhkey_check_ok ,zero 
+:      023130 le_dhkey_check_fail:
+0x5c47 023131 jam pairing_failed_dhkey_check_failed ,mem_le_ll_pairing_fail_reason 
+0x5c48 023132 branch le_send_pairing_failed 
+:      023135 le_dhkey_check_ok:
+0x5c49 023136 call sp_calc_check_publickey_256 
+0x5c4a 023137 nbranch le_dhkey_check_fail ,zero 
+0x5c4b 023138 jam 1 ,mem_ltk_exists 
+0x5c4c 023139 fetch 1 ,mem_le_pairing_mode 
+0x5c4d 023140 beq le_pairing_mode_secure_connect_justwork ,le_sc_confirm_gkey_ok 
+0x5c4e 023141 beq le_pairing_mode_secure_connect_passkey ,le_sc_confirm_gkey_ok 
+0x5c4f 023142 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+0x5c50 023143 jam le_sc_stat_wait_confirm_gkey ,mem_le_secure_connect_state 
+0x5c51 023144 rtn 
+:      023146 le_sc_sm_send_public_key:
+0x5c52 023147 fetch 1 ,mem_le_pairing_mode 
+0x5c53 023148 beq le_pairing_mode_secure_connect_passkey ,le_sc_sm_send_public_key_passkey 
+0x5c54 023149 jam 0 ,mem_passkey_1bit 
+:      023150 le_sc_sm_ready_send_pairing_confirm:
+0x5c55 023151 branch le_send_smp_pairing_confirm 
+:      023153 le_sc_sm_send_public_key_passkey:
+0x5c56 023157 jam 0 ,mem_authentication_passkey_times 
+0x5c57 023158 branch le_parse_smp_pairing_req_passkey 
+:      023161 le_sc_sm_receive_public_key:
+0x5c58 023162 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+0x5c59 023163 fetch 1 ,mem_le_sc_local_key_invalid 
+0x5c5a 023164 beq sp_key_valid_256 ,le_public_key_ready 
+0x5c5b 023166 rtn 
+:      023168 le_public_key_ready:
+0x5c5c 023169 jam le_sc_stat_wait_send_public_key ,mem_le_secure_connect_state 
+0x5c5d 023170 jam sp_key_invalid ,mem_sp_dhkey_invalid 
+0x5c5e 023171 branch sp_dhkey_calc_256 
+:      023173 le_sc_sm_wait_send_public_key:
+0x5c5f 023174 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+0x5c60 023175 jam le_sc_stat_send_public_key ,mem_le_secure_connect_state 
+0x5c61 023176 branch le_send_smp_pairing_public_key 
+:      023180 le_fifo_malloc_tx_l2cap_smp:
+0x5c62 023181 force le_l2cap_cid_smp ,regb 
+0x5c63 023182 branch le_fifo_malloc_tx_l2cap 
+:      023186 le_parse_ll:
+0x5c64 023187 fetch 1 ,mem_le_rxbuf + 2 
+0x5c65 023188 beq ll_connection_update_req ,le_parse_connection_update_req 
+0x5c66 023189 beq ll_channel_map_req ,le_parse_channel_map_req 
+0x5c67 023190 beq ll_terminate_ind ,le_parse_terminate_ind 
+0x5c68 023191 beq ll_enc_req ,le_parse_enc_req 
+0x5c69 023192 beq ll_enc_rsp ,le_parse_enc_rsp 
+0x5c6a 023193 beq ll_start_enc_req ,le_parse_start_enc_req 
+0x5c6b 023194 beq ll_start_enc_rsp ,le_parse_start_enc_rsp 
+0x5c6c 023195 beq ll_unknown_rsp ,le_parse_unknown_rsp 
+0x5c6d 023196 beq ll_feature_req ,le_parse_feature_req 
+0x5c6e 023197 beq ll_feature_rsp ,le_parse_feature_rsp 
+0x5c6f 023198 beq ll_pause_enc_req ,le_parse_pause_enc_req 
+0x5c70 023199 beq ll_pause_enc_rsp ,le_parse_pause_enc_rsp 
+0x5c71 023200 beq ll_version_ind ,le_parse_version_ind 
+0x5c72 023201 beq ll_reject_ind ,le_parse_reject_ind 
+0x5c73 023202 beq ll_ping_req ,le_parse_ping_req 
+0x5c74 023203 beq ll_ping_rsp ,le_parse_ping_rsp 
+0x5c75 023204 arg 2 ,rega 
+0x5c76 023205 arg ll_unknown_rsp ,regb 
+0x5c77 023206 call le_fifo_malloc_tx_ll 
+0x5c78 023207 fetch 1 ,mem_le_rxbuf + 2 
+0x5c79 023208 istore 1 ,contw 
+0x5c7a 023209 rtn 
+:      023212 le_parse_connection_update_req:
+0x5c7b 023213 ifetch 9 ,contr 
+0x5c7c 023214 store 9 ,mem_le_new_param 
+0x5c7d 023215 ifetch 2 ,contr 
+0x5c7e 023216 store 2 ,mem_le_instant 
+0x5c7f 023217 fetch 1 ,mem_le_state 
+0x5c80 023218 set1 lestate_update_param ,pdata 
+0x5c81 023219 store 1 ,mem_le_state 
+0x5c82 023220 rtn 
+:      023222 le_parse_channel_map_req:
+0x5c83 023223 ifetch 5 ,contr 
+0x5c84 023224 store 5 ,mem_le_new_map 
+0x5c85 023225 ifetch 2 ,contr 
+0x5c86 023226 store 2 ,mem_le_instant 
+0x5c87 023227 fetcht 2 ,mem_le_event_count 
+0x5c88 023228 isub temp ,null 
+0x5c89 023229 nbranch le_parse_terminate_ind ,positive 
+0x5c8a 023230 fetch 1 ,mem_le_state 
+0x5c8b 023231 set1 lestate_update_map ,pdata 
+0x5c8c 023232 store 1 ,mem_le_state 
+0x5c8d 023233 rtn 
+:      023236 le_parse_terminate_ind:
+0x5c8e 023237 setarg 20 
+0x5c8f 023238 store 2 ,mem_le_superto 
+0x5c90 023239 store 2 ,mem_le_init_superto 
+0x5c91 023240 rtn 
+:      023242 le_send_terminate_ind_user_terminated:
+0x5c92 023243 arg error_remote_user_terminated_connection ,regc 
+:      023246 le_send_terminate_ind:
+0x5c93 023247 arg 2 ,rega 
+0x5c94 023248 arg ll_terminate_ind ,regb 
+0x5c95 023249 call le_fifo_malloc_tx_ll 
+0x5c96 023250 copy regc ,pdata 
+0x5c97 023251 istore 1 ,contw 
+0x5c98 023252 rtn 
+:      023254 le_parse_feature_req:
+:      023256 le_send_feature_rsp:
+0x5c99 023257 arg 9 ,rega 
+0x5c9a 023258 arg ll_feature_rsp ,regb 
+0x5c9b 023259 call le_fifo_malloc_tx_ll 
+0x5c9c 023260 setarg param_le_features 
+0x5c9d 023261 istore 8 ,contw 
+0x5c9e 023262 rtn 
+:      023265 le_parse_version_ind:
+0x5c9f 023266 rtn master 
+:      023267 le_send_version_ind:
+0x5ca0 023268 arg 6 ,rega 
+0x5ca1 023269 arg ll_version_ind ,regb 
+0x5ca2 023270 call le_fifo_malloc_tx_ll 
+0x5ca3 023271 fetch 5 ,mem_lmp_version 
+0x5ca4 023272 istore 5 ,contw 
+0x5ca5 023273 rtn 
+:      023276 le_parse_ping_req:
+0x5ca6 023277 arg ll_ping_rsp ,regb 
+0x5ca7 023278 branch le_send_ll_one_lenth 
+:      023281 le_send_ll_one_lenth:
+0x5ca8 023282 arg 1 ,rega 
+0x5ca9 023283 branch le_fifo_malloc_tx_ll 
+:      023286 le_parse_enc_req:
+0x5caa 023287 ifetch 8 ,contr 
+0x5cab 023288 store 8 ,mem_le_rand 
+0x5cac 023289 ifetch 2 ,contr 
+0x5cad 023290 store 2 ,mem_le_ediv 
+0x5cae 023291 ifetch 8 ,contr 
+0x5caf 023292 store 8 ,mem_le_skdm 
+0x5cb0 023293 ifetch 4 ,contr 
+0x5cb1 023294 store 4 ,mem_le_ivm 
+0x5cb2 023295 call le_send_enc_rsp 
+0x5cb3 023296 bpatchx patch2f_2 ,mem_patch2f 
+0x5cb4 023297 fetch 1 ,mem_le_pairing_state 
+0x5cb5 023298 beq flag_le_pairing_after_auth ,le_parse_enc_req_after_auth 
+0x5cb6 023299 fetch 1 ,mem_le_configuration 
+0x5cb7 023300 bbit1 bit_ble_pairing_fixed_ltk ,le_parse_enc_req_fixed_ltk 
+0x5cb8 023301 fetch 1 ,mem_nv_data_number 
+0x5cb9 023302 ncall load_device_list_mode_4 ,blank 
+0x5cba 023303 fetch 1 ,mem_ltk_exists 
+0x5cbb 023304 beq 0 ,le_ltk_lost 
+:      023305 le_parse_enc_req_after_auth:
+0x5cbc 023306 jam flag_le_rcv_enc_start ,mem_le_enc_state 
+0x5cbd 023307 call le_send_start_enc_req 
+0x5cbe 023308 branch generate_sk 
+:      023310 le_parse_enc_req_fixed_ltk:
+0x5cbf 023311 jam 1 ,mem_ltk_exists 
+0x5cc0 023312 arg mem_le_fixed_ltk ,contr 
+0x5cc1 023313 arg mem_le_ltk ,contw 
+0x5cc2 023314 call memcpy16 
+0x5cc3 023315 branch le_parse_enc_req_after_auth 
+:      023318 le_ltk_lost:
+0x5cc4 023319 bpatchx patch2f_3 ,mem_patch2f 
+0x5cc5 023320 jam flag_le_enc_null ,mem_le_enc_state 
+0x5cc6 023321 jam flag_le_enc_null ,mem_le_pairing_state 
+0x5cc7 023322 jam bt_evt_le_ltk_lost ,mem_fifo_temp 
+0x5cc8 023323 branch ui_ipc_send_event 
+:      023325 le_send_reject_ind:
+0x5cc9 023326 arg 2 ,rega 
+0x5cca 023327 arg ll_reject_ind ,regb 
+0x5ccb 023328 call le_fifo_malloc_tx_ll 
+0x5ccc 023329 setarg le_err_pin_or_key_missing 
+0x5ccd 023330 istore 1 ,contw 
+0x5cce 023331 rtn 
+:      023333 le_send_enc_rsp:
+0x5ccf 023334 arg mem_le_skds ,contw 
+0x5cd0 023335 force 8 ,loopcnt 
+0x5cd1 023336 call generate_random_loop 
+0x5cd2 023337 arg mem_le_ivs ,contw 
+0x5cd3 023338 force 4 ,loopcnt 
+0x5cd4 023339 call generate_random_loop 
+0x5cd5 023340 arg 13 ,rega 
+0x5cd6 023341 arg ll_enc_rsp ,regb 
+0x5cd7 023342 call le_fifo_malloc_tx_ll 
+0x5cd8 023343 fetch 8 ,mem_le_skds 
+0x5cd9 023344 istore 8 ,contw 
+0x5cda 023345 fetch 4 ,mem_le_ivs 
+0x5cdb 023346 istore 4 ,contw 
+0x5cdc 023347 rtn 
+:      023349 le_send_start_enc_req:
+0x5cdd 023350 arg ll_start_enc_req ,regb 
+0x5cde 023351 branch le_send_ll_one_lenth 
+:      023353 le_send_start_enc_rsp:
+0x5cdf 023354 arg ll_start_enc_rsp ,regb 
+0x5ce0 023355 branch le_send_ll_one_lenth 
+:      023358 le_parse_enc_rsp:
+0x5ce1 023359 ifetch 8 ,contr 
+0x5ce2 023360 store 8 ,mem_le_skds 
+0x5ce3 023361 ifetch 4 ,contr 
+0x5ce4 023362 store 4 ,mem_le_ivs 
+0x5ce5 023363 branch generate_sk 
+:      023365 le_parse_start_enc_req:
+0x5ce6 023366 fetch 1 ,mem_le_state 
+0x5ce7 023367 set1 lestate_encryption ,pdata 
+0x5ce8 023368 store 1 ,mem_le_state 
+0x5ce9 023369 rtn 
+:      023371 le_parse_start_enc_rsp:
+0x5cea 023372 rtn master 
+0x5ceb 023373 jam bt_evt_le_start_enc ,mem_fifo_temp 
+0x5cec 023374 call ui_ipc_send_event 
+0x5ced 023375 jam flag_le_send_start_enc_rsp ,mem_le_enc_state 
+0x5cee 023376 branch le_send_start_enc_rsp 
+:      023378 le_parse_pause_enc_req:
+0x5cef 023379 jam flag_le_enc_pause ,mem_le_enc_state 
+0x5cf0 023380 call le_send_pause_enc_rsp 
+0x5cf1 023381 jam bt_evt_le_pause_enc ,mem_fifo_temp 
+0x5cf2 023382 branch ui_ipc_send_event 
+:      023384 le_send_pause_enc_rsp:
+0x5cf3 023385 arg ll_pause_enc_rsp ,regb 
+0x5cf4 023386 branch le_send_ll_one_lenth 
+:      023389 le_parse_feature_rsp:
+:      023390 le_parse_unknown_rsp:
+:      023391 le_parse_pause_enc_rsp:
+:      023392 le_parse_reject_ind:
+:      023393 le_parse_ping_rsp:
+0x5cf5 023394 rtn 
+:      023401 init_lmp:
+0x5cf6 023402 rtn wake 
+:      023403 init_lmp_work:
+0x5cf7 023404 bpatchx patch2f_4 ,mem_patch2f 
+0x5cf8 023405 setarg 0 
+0x5cf9 023406 store 1 ,mem_lmp_to_send 
+0x5cfa 023407 store 1 ,mem_conn_sm 
+0x5cfb 023408 store 1 ,mem_lmo_opcode1 
+0x5cfc 023409 store 1 ,mem_lmo_opcode2 
+0x5cfd 023410 store 1 ,mem_esco_addr 
+0x5cfe 023411 store 1 ,mem_auth_enable 
+0x5cff 023412 store 1 ,mem_connection_options 
+0x5d00 023413 store 1 ,mem_pairing_auth 
+0x5d01 023414 jam switch_flag_init ,mem_switch_flag 
+0x5d02 023415 jam 0 ,mem_switch_fail_master_count 
+0x5d03 023416 jam null_encryp ,mem_wait_encryption 
+:      023417 init_lmp_reinit:
+0x5d04 023418 jam 0 ,mem_pairing_auth 
+0x5d05 023419 jam 0 ,mem_sp_localsm 
+0x5d06 023420 jam 0 ,mem_lmp_conn_state 
+:      023422 parse_rx_done:
+0x5d07 023423 rtn 
+:      023425 parse_lmp:
+0x5d08 023426 bpatchx patch2f_5 ,mem_patch2f 
+0x5d09 023427 call setlocalsm_master ,master 
+0x5d0a 023428 ncall setlocalsm_slave ,master 
+0x5d0b 023429 call lmo_fifo_check 
+0x5d0c 023430 nrtn blank 
+0x5d0d 023431 fetch 1 ,mem_state_map 
+0x5d0e 023432 rtnbit0 smap_rxlmp 
+0x5d0f 023433 set0 smap_rxlmp ,pdata 
+0x5d10 023434 set0 mark_rxbuf_inuse ,mark 
+0x5d11 023435 store 1 ,mem_state_map 
+0x5d12 023436 fetch 1 ,mem_rxbuf 
+0x5d13 023437 fetcht 1 ,mem_state_map 
+0x5d14 023438 isolate1 smap_lmptidinit ,pdata 
+0x5d15 023439 setflag true ,smap_lmptid ,temp 
+0x5d16 023440 storet 1 ,mem_state_map 
+0x5d17 023441 and_into 0x2 ,temp 
+0x5d18 023442 storet 1 ,mem_lmo_tid2 
+0x5d19 023443 fetcht 1 ,mem_state_map 
+0x5d1a 023444 rshift pdata ,pdata 
+0x5d1b 023445 store 1 ,mem_lmi_opcode2 
+0x5d1c 023446 bpatchx patch2f_6 ,mem_patch2f 
+0x5d1d 023447 fetch 1 ,mem_lmi_opcode2 
+0x5d1e 023448 beq lmp_escape ,parse_lmp_escape 
+0x5d1f 023449 beq lmp_accepted ,parse_lmp_accepted 
+0x5d20 023450 beq lmp_not_accepted ,parse_lmp_not_accepted 
+0x5d21 023451 beq lmp_set_afh ,parse_lmp_set_afh 
+0x5d22 023452 beq lmp_clkoffset_req ,parse_lmp_clkoffset_req 
+0x5d23 023453 beq lmp_encryption_mode_req ,parse_lmp_encryption_mode_req 
+0x5d24 023454 beq lmp_encryption_key_size_req ,parse_lmp_crypt_key 
+0x5d25 023455 beq lmp_auto_rate ,parse_lmp_auto_rate 
+0x5d26 023456 beq lmp_test_control ,parse_lmp_test_control 
+0x5d27 023457 beq lmp_test_activate ,parse_lmp_test_activate 
+0x5d28 023458 beq lmp_setup_complete ,parse_lmp_setup_complete 
+0x5d29 023459 beq lmp_supervision_timeout ,parse_lmp_supervision_timeout 
+0x5d2a 023460 beq lmp_features_req ,parse_lmp_features_req 
+0x5d2b 023461 beq lmp_host_connection_req ,parse_lmp_conn_req 
+0x5d2c 023462 beq lmp_version_req ,parse_lmp_version_req 
+0x5d2d 023463 beq lmp_version_res ,parse_lmp_version_res 
+0x5d2e 023464 beq lmp_detach ,parse_lmp_detach 
+0x5d2f 023465 beq lmp_max_slot ,parse_lmp_max_slot 
+0x5d30 023466 beq lmp_max_slot_req ,parse_lmp_max_slot_req 
+0x5d31 023467 beq lmp_name_req ,parse_lmp_name_req 
+0x5d32 023468 beq lmp_name_res ,parse_lmp_name_res 
+0x5d33 023469 beq lmp_features_res ,parse_lmp_features_res 
+0x5d34 023470 beq lmp_comb_key ,parse_lmp_comb_key 
+0x5d35 023471 beq lmp_au_rand ,parse_lmp_au_rand 
+0x5d36 023472 beq lmp_in_rand ,parse_lmp_in_rand 
+0x5d37 023473 beq lmp_sres ,parse_lmp_sres 
+0x5d38 023474 beq lmp_incr_power_req ,parse_lmp_incr_power 
+0x5d39 023475 beq lmp_decr_power_req ,parse_lmp_decr_power 
+0x5d3a 023476 beq lmp_max_power ,parse_lmp_max_power 
+0x5d3b 023477 beq lmp_min_power ,parse_lmp_min_power 
+0x5d3c 023478 beq lmp_page_mode_req ,parse_lmp_page_mode_req 
+0x5d3d 023479 beq lmp_page_scan_mode_req ,parse_lmp_page_scan_mode_req 
+0x5d3e 023480 beq lmp_preferred_rate ,parse_lmp_preferred_rate 
+0x5d3f 023481 beq lmp_slot_offset ,parse_lmp_slot_offset 
+0x5d40 023482 beq lmp_sniff_req ,parse_lmp_sniff_req 
+0x5d41 023483 beq lmp_start_encryption_req ,parse_lmp_start_encryption_req 
+0x5d42 023484 beq lmp_stop_encryption_req ,parse_lmp_stop_encryption_req 
+0x5d43 023485 beq lmp_switch_req ,parse_lmp_switch_req 
+0x5d44 023486 beq lmp_temp_rand ,parse_lmp_temp_rand 
+0x5d45 023487 beq lmp_temp_key ,parse_lmp_temp_key 
+0x5d46 023488 beq lmp_timing_accuracy_req ,parse_lmp_timing_accuracy_req 
+0x5d47 023489 beq lmp_timing_accuracy_res ,parse_lmp_timing_accuracy_res 
+0x5d48 023490 beq lmp_unit_key ,parse_lmp_unit_key 
+0x5d49 023491 beq lmp_unsniff_req ,parse_lmp_unsniff_req 
+0x5d4a 023492 beq lmp_use_semi_permanent_key ,parse_lmp_use_semi_permanend_key 
+0x5d4b 023493 beq lmp_encapsulated_header ,parse_lmp_encapsulated_header 
+0x5d4c 023494 beq lmp_encapsulated_payload ,parse_lmp_encapsulated_payload 
+0x5d4d 023495 beq lmp_simple_pairing_confirm ,parse_simple_pairing_confirm 
+0x5d4e 023496 beq lmp_simple_pairing_number ,parse_lmp_simple_pairing_number 
+0x5d4f 023497 beq lmp_dhkey_check ,parse_dhkey_check 
+0x5d50 023498 beq lmp_clkoffset_res ,parse_lmp_clkoffset_res 
+0x5d51 023499 beq lmp_enc_key_size_mask_req ,parse_enc_key_size_mask_req 
+:      023502 reject_unknown_packet:
+0x5d52 023503 jam unknown_lmp_pdu ,mem_lmo_reason2 
+:      023504 reject_lmp_packet:
+0x5d53 023505 jam lmp_not_accepted ,mem_lmo_opcode2 
+0x5d54 023506 rtn 
+:      023508 parse_lmp_clkoffset_req:
+0x5d55 023509 jam lmp_clkoffset_res ,mem_lmo_opcode2 
+0x5d56 023510 rtn 
+:      023512 parse_enc_key_size_mask_req:
+0x5d57 023513 jam lmp_enc_key_size_mask_res ,mem_lmo_opcode2 
+0x5d58 023514 rtn 
+:      023516 parse_lmp_set_afh:
+0x5d59 023517 fetch 4 ,mem_rxbuf + 1 
+0x5d5a 023518 lshift pdata ,pdata 
+0x5d5b 023519 store 4 ,mem_afh_instant 
+0x5d5c 023520 fetch 1 ,mem_rxbuf + 5 
+0x5d5d 023521 store 1 ,mem_afh_new_mod 
+0x5d5e 023522 fetch 5 ,mem_rxbuf + 6 
+0x5d5f 023523 store 5 ,mem_afh_map_new 
+0x5d60 023524 fetch 5 ,mem_rxbuf + 11 
+0x5d61 023525 istore 5 ,contw 
+0x5d62 023526 fetch 1 ,mem_mode 
+0x5d63 023527 set1 afh_change ,pdata 
+0x5d64 023528 store 1 ,mem_mode 
+0x5d65 023529 rtn 
+:      023530 parse_lmp_escape:
+0x5d66 023531 bpatchx patch2f_7 ,mem_patch2f 
+0x5d67 023532 fetch 1 ,mem_rxbuf + 1 
+0x5d68 023533 set1 7 ,pdata 
+0x5d69 023534 store 1 ,mem_lmi_opcode2 
+0x5d6a 023535 beq lmp_ext_accepted ,parse_lmpext_accepted 
+0x5d6b 023536 beq lmp_not_accepted_ext ,parse_lmpext_not_accepted 
+0x5d6c 023537 beq lmp_sniff_subrating_req ,parse_lmp_sniff_subrating_req 
+0x5d6d 023538 beq lmp_sniff_subrating_res ,parse_lmp_sniff_subrating_res 
+0x5d6e 023539 beq lmp_packet_type_table_req ,parse_lmpext_packet_type_table_req 
+0x5d6f 023540 beq lmp_ext_features_req ,parse_lmpext_features_req 
+0x5d70 023541 beq lmp_ext_features_res ,parse_lmpext_features_res 
+0x5d71 023542 beq lmp_ext_chn_classification_req ,parse_lmpext_chn_classification_req 
+0x5d72 023543 beq lmp_pause_encryption_req ,parse_lmpext_pause_encrypt 
+0x5d73 023544 beq lmp_resume_encryption_req ,parse_lmpext_resume_encrypt 
+0x5d74 023545 beq lmp_io_cap_req ,parse_lmpext_iocap_req 
+0x5d75 023546 beq lmp_io_cap_res ,parse_lmpext_iocap_res 
+0x5d76 023547 rtneq lmp_ext_features_res 
+:      023550 reject_unknown_ext_packet:
+0x5d77 023551 jam lmp_not_accepted_ext ,mem_lmo_opcode2 
+0x5d78 023552 jam unknown_lmp_pdu ,mem_lmo_reason2 
+0x5d79 023554 rtn 
+:      023555 parse_lmpext_chn_classification_req:
+0x5d7a 023556 jam lmp_not_accepted_ext ,mem_lmo_opcode2 
+0x5d7b 023557 jam not_support_chn_classification ,mem_lmo_reason2 
+0x5d7c 023558 rtn 
+:      023560 parse_lmpext_iocap_req:
+0x5d7d 023561 call iocap_lmpext_load 
+0x5d7e 023562 jam lmp_io_cap_res ,mem_lmo_opcode2 
+0x5d7f 023563 rtn 
+:      023565 parse_lmpext_iocap_res:
+0x5d80 023566 call iocap_lmpext_load 
+0x5d81 023567 branch iocap_lmpext_common 
+:      023569 iocap_lmpext_load:
+0x5d82 023570 arg mem_sp_iocap_remote ,contw 
+0x5d83 023571 fetch 3 ,mem_rxbuf + 2 
+0x5d84 023572 istore 3 ,contw 
+0x5d85 023573 rtn 
+:      023575 iocap_lmpext_common:
+0x5d86 023576 branch master_set_mem_master_sp_flag ,true 
+0x5d87 023577 rtn 
+:      023578 parse_lmpext_accepted:
+0x5d88 023579 fetch 1 ,mem_rxbuf + 3 
+0x5d89 023580 set1 7 ,pdata 
+0x5d8a 023581 store 1 ,mem_lmi_accepted_opcode 
+0x5d8b 023582 beq lmp_packet_type_table_req ,parse_lmpext_accepted_ptt 
+0x5d8c 023583 rtn 
+:      023586 parse_lmpext_not_accepted:
+0x5d8d 023587 fetch 1 ,mem_rxbuf + 3 
+0x5d8e 023588 set1 7 ,pdata 
+0x5d8f 023589 store 1 ,mem_lmi_accepted_opcode 
+0x5d90 023590 beq lmp_packet_type_table_req ,parse_lmpext_not_accepted_ptt 
+0x5d91 023591 rtn 
+:      023593 parse_lmpext_accepted_ptt:
+0x5d92 023594 fetch 1 ,mem_ptt 
+0x5d93 023595 fetcht 1 ,mem_state_map 
+0x5d94 023596 nsetflag blank ,smap_edr ,temp 
+0x5d95 023597 storet 1 ,mem_state_map 
+:      023598 parse_lmpext_not_accepted_ptt:
+0x5d96 023599 fetch 1 ,mem_state 
+0x5d97 023600 rtnbit0 state_init_seq 
+0x5d98 023601 set0 state_init_seq ,pdata 
+0x5d99 023602 store 1 ,mem_state 
+0x5d9a 023603 fetch 1 ,mem_auth_enable 
+0x5d9b 023604 nrtn blank 
+0x5d9c 023605 jam lmp_setup_complete ,mem_lmo_opcode2 
+0x5d9d 023606 rtn 
+:      023608 parse_lmpext_pause_encrypt:
+0x5d9e 023609 nbranch parse_lmpext_pause_encrypt_slave ,master 
+0x5d9f 023610 jam lmp_stop_encryption_req ,mem_lmo_opcode2 
+0x5da0 023611 branch tid_reply 
+:      023613 parse_lmpext_pause_encrypt_slave:
+0x5da1 023614 jam lmp_pause_encryption_req ,mem_lmo_opcode2 
+0x5da2 023615 rtn 
+:      023617 parse_lmpext_resume_encrypt:
+0x5da3 023620 call tid_reply 
+0x5da4 023621 branch lmp_start_encryption 
+:      023623 parse_lmpext_features_req:
+0x5da5 023624 jam lmp_ext_features_res ,mem_lmo_opcode2 
+0x5da6 023625 rtn 
+:      023627 parse_lmpext_features_res:
+0x5da7 023628 fetcht 1 ,mem_rxbuf + 4 
+0x5da8 023629 and temp ,0x1 ,temp 
+0x5da9 023630 storet 1 ,mem_remote_sppcap 
+0x5daa 023631 fetch 1 ,mem_hci_cmd 
+0x5dab 023632 bne hci_cmd_wait_remote_ext_feature ,parse_lmpext_features_res_not_hci 
+0x5dac 023633 jam 0 ,mem_hci_cmd 
+:      023634 parse_lmpext_features_res_not_hci:
+0x5dad 023635 fetch 1 ,mem_conn_sm 
+0x5dae 023636 rtnne conn_sm_wait_features_ext 
+0x5daf 023637 jam conn_sm_send_conn_req ,mem_conn_sm 
+0x5db0 023638 branch process_conn_sm 
+:      023640 parse_lmp_accepted:
+0x5db1 023641 bpatchx patch30_0 ,mem_patch30 
+0x5db2 023642 fetch 1 ,mem_rxbuf + 1 
+0x5db3 023643 store 1 ,mem_lmi_accepted_opcode 
+0x5db4 023644 beq lmp_host_connection_req ,parse_lmp_accepted_hostconn 
+0x5db5 023645 beq lmp_in_rand ,parse_lmp_accepted_inrand 
+0x5db6 023646 beq lmp_encryption_mode_req ,parse_lmp_accepted_enc_mode 
+0x5db7 023647 beq lmp_encryption_key_size_req ,parse_lmp_accepted_enc_keysize 
+0x5db8 023648 beq lmp_start_encryption_req ,parse_lmp_accepted_start_enc 
+0x5db9 023649 beq lmp_stop_encryption_req ,parse_lmp_accepted_stop_enc 
+0x5dba 023650 beq lmp_unsniff_req ,parse_lmp_accepted_unsniff_req 
+0x5dbb 023651 beq lmp_sniff_req ,parse_lmp_accepted_sniff_req 
+0x5dbc 023652 beq lmp_switch_req ,parse_lmp_accepted_switch 
+0x5dbd 023654 beq lmp_encapsulated_header ,parse_lmp_accepted_encapsulated_header 
+0x5dbe 023655 beq lmp_encapsulated_payload ,parse_lmp_accepted_encapsulated_payload 
+0x5dbf 023656 beq lmp_simple_pairing_number ,parse_lmp_accepted_simple_pairing_number 
+0x5dc0 023657 beq lmp_dhkey_check ,parse_lmp_accepted_dhkey_check 
+0x5dc1 023658 rtn 
+:      023660 parse_lmp_not_accepted:
+0x5dc2 023661 bpatchx patch30_1 ,mem_patch30 
+0x5dc3 023662 fetch 1 ,mem_rxbuf + 1 
+0x5dc4 023663 store 1 ,mem_lmi_accepted_opcode 
+0x5dc5 023664 beq lmp_name_req ,parse_lmp_not_accepted_name_req 
+0x5dc6 023665 beq lmp_host_connection_req ,parse_lmp_not_accepted_hostconn 
+0x5dc7 023666 beq lmp_au_rand ,parse_lmp_not_accepted_aurand 
+0x5dc8 023667 beq lmp_in_rand ,parse_lmp_not_accepted_inrand 
+0x5dc9 023668 beq lmp_switch_req ,parse_lmp_not_accepted_switch 
+0x5dca 023670 beq lmp_simple_pairing_number ,parse_lmp_not_accepted_simple_pairing_number 
+0x5dcb 023671 beq lmp_dhkey_check ,parse_lmp_not_accepted_dhkey_check 
+0x5dcc 023672 beq lmp_unsniff_req ,parse_lmp_not_accepted_unsniff_req 
+0x5dcd 023673 beq lmp_sniff_req ,parse_lmp_not_acdcept_sniff_req 
+0x5dce 023674 rtn 
+:      023676 parse_lmp_accepted_switch:
+0x5dcf 023677 jam bt_evt_switch_accept ,mem_fifo_temp 
+0x5dd0 023678 call ui_ipc_send_event 
+0x5dd1 023679 branch role_switch_prepare0 
+:      023680 parse_lmp_not_accepted_switch:
+0x5dd2 023681 jam bt_evt_switch_not_accept ,mem_fifo_temp 
+0x5dd3 023682 call ui_ipc_send_event 
+0x5dd4 023683 jam switch_flag_not_accept ,mem_switch_flag 
+0x5dd5 023684 setarg timer_switch_waite 
+0x5dd6 023685 arg switch_wait_timer ,queue 
+0x5dd7 023686 branch timer_init 
+:      023689 parse_lmp_accepted_hostconn:
+0x5dd8 023692 fetch 1 ,mem_lmp_conn_state 
+0x5dd9 023693 set1 received_conn_req ,pdata 
+0x5dda 023694 store 1 ,mem_lmp_conn_state 
+0x5ddb 023695 jam bt_evt_bb_connected ,mem_fifo_temp 
+0x5ddc 023696 call ui_ipc_send_event 
+0x5ddd 023697 jam lmp_packet_type_table_req ,mem_lmo_opcode2 
+:      023699 parse_lmp_accepted_hostconn_ctn:
+0x5dde 023701 fetch 1 ,mem_conn_sm 
+0x5ddf 023702 bne conn_sm_wait_conn_accept ,parse_rx_done 
+0x5de0 023705 jam conn_sm_auth_pair ,mem_conn_sm 
+0x5de1 023706 rtn 
+:      023714 parse_lmp_not_accepted_hostconn:
+0x5de2 023715 jam acl_connection_already_exists ,mem_disconn_reason_send 
+0x5de3 023716 jam lmp_detach ,mem_lmo_opcode2 
+0x5de4 023718 jam conn_sm_standby ,mem_conn_sm 
+0x5de5 023720 branch parse_rx_done ,true 
+0x5de6 023721 rtn 
+:      023723 parse_lmp_accepted_inrand:
+0x5de7 023724 fetch 1 ,mem_link_key_exists 
+0x5de8 023725 nrtn blank 
+0x5de9 023726 call clear_linkkey 
+0x5dea 023727 call lmp_generate_key 
+0x5deb 023728 rtn master 
+0x5dec 023729 set1 mark_slave_in_rand_accepted ,mark 
+0x5ded 023730 rtn 
+:      023732 parse_lmp_accepted_enc_mode:
+0x5dee 023733 nrtn master 
+0x5def 023734 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 
+0x5df0 023735 fetch 1 ,mem_state_map 
+0x5df1 023736 rtnbit0 smap_encryption 
+0x5df2 023737 jam lmp_stop_encryption_req ,mem_lmo_opcode2 
+0x5df3 023738 rtn 
+:      023740 parse_lmp_accepted_enc_keysize:
+0x5df4 023741 branch lmp_start_encryption 
+:      023743 parse_lmp_accepted_start_enc:
+0x5df5 023744 call send_create_conn_start_l2cap_timer_sm 
+0x5df6 023745 fetch 1 ,mem_state 
+0x5df7 023746 rtnbit1 state_conn_comp 
+0x5df8 023747 jam lmp_setup_complete ,mem_lmo_opcode2 
+0x5df9 023748 fetch 1 ,mem_conn_sm 
+0x5dfa 023749 rtnne conn_sm_encrypt_wait 
+0x5dfb 023750 jam conn_sm_encrypt_wait_clear ,mem_conn_sm 
+0x5dfc 023751 rtn 
+:      023753 parse_lmp_accepted_stop_enc:
+0x5dfd 023761 rtn 
+:      023763 parse_lmp_not_accepted_aurand:
+:      023764 parse_lmp_not_accepted_aurand_send_detach:
+0x5dfe 023765 jam lmp_detach ,mem_lmo_opcode2 
+0x5dff 023766 jam other_end_terminated ,mem_disconn_reason_send 
+0x5e00 023767 rtn 
+:      023769 parse_lmp_not_accepted_inrand:
+0x5e01 023770 fetch 1 ,mem_rxbuf + 2 
+0x5e02 023771 beq key_missing ,parse_lmp_inrand_key_missing 
+0x5e03 023772 rtnne pairing_not_allowed 
+0x5e04 023773 jam pairing_not_allowed ,mem_disconn_reason_send 
+0x5e05 023774 jam lmp_detach ,mem_lmo_opcode2 
+0x5e06 023775 rtn 
+:      023776 parse_lmp_inrand_key_missing:
+0x5e07 023777 jam key_missing ,mem_disconn_reason_send 
+0x5e08 023778 jam lmp_detach ,mem_lmo_opcode2 
+0x5e09 023779 rtn 
+:      023781 parse_lmp_not_accepted_name_req:
+0x5e0a 023782 rtn 
+:      023784 parse_lmp_not_accepted_simple_pairing_number:
+0x5e0b 023785 jam sp_stat_null ,mem_sp_state 
+0x5e0c 023786 jam lmp_detach ,mem_lmo_opcode2 
+0x5e0d 023787 branch parse_rx_done 
+:      023789 parse_lmp_not_accepted_dhkey_check:
+0x5e0e 023790 jam sp_stat_null ,mem_sp_state 
+0x5e0f 023791 jam lmp_detach ,mem_lmo_opcode2 
+0x5e10 023792 branch parse_rx_done 
+:      023793 parse_lmp_not_accepted_unsniff_req:
+0x5e11 023794 jam bt_evt_unsniff_not_accept ,mem_fifo_temp 
+0x5e12 023795 branch ui_ipc_send_event 
+:      023797 parse_lmp_accepted_unsniff_req:
+0x5e13 023798 jam bt_evt_unsniff_accept ,mem_fifo_temp 
+0x5e14 023799 call ui_ipc_send_event 
+0x5e15 023800 branch sniff_exit 
+:      023802 parse_lmp_accepted_sniff_req:
+0x5e16 023803 jam bt_evt_sniff_accept ,mem_fifo_temp 
+0x5e17 023804 call ui_ipc_send_event 
+0x5e18 023805 setarg 0 
+0x5e19 023806 store 2 ,mem_dsniff 
+0x5e1a 023807 fetch 2 ,mem_sniff_param_interval 
+0x5e1b 023808 lshift pdata ,pdata 
+0x5e1c 023809 store 2 ,mem_tsniff 
+0x5e1d 023810 fetch 1 ,mem_sniff_param_attempt 
+0x5e1e 023811 store 1 ,mem_sniff_attempt 
+0x5e1f 023812 fetch 1 ,mem_sniff_param_timeout 
+0x5e20 023813 store 1 ,mem_sniff_timeout 
+0x5e21 023814 branch sniff_init 
+:      023816 parse_lmp_not_acdcept_sniff_req:
+0x5e22 023817 jam bt_evt_sniff_not_accept ,mem_fifo_temp 
+0x5e23 023818 branch ui_ipc_send_event 
+:      023820 parse_lmp_crypt_key:
+0x5e24 023821 fetcht 1 ,mem_rxbuf + 1 
+0x5e25 023822 storet 1 ,mem_key_size 
+0x5e26 023823 branch accept_lmp_msg 
+:      023825 parse_lmp_setup_complete:
+0x5e27 023826 fetch 1 ,mem_lmp_conn_state 
+0x5e28 023827 set1 received_setup_complete ,pdata 
+0x5e29 023828 store 1 ,mem_lmp_conn_state 
+0x5e2a 023829 rtnbit1 sent_setup_complete 
+0x5e2b 023830 jam lmp_setup_complete ,mem_lmo_opcode2 
+0x5e2c 023831 branch parse_rx_done 
+:      023833 parse_lmp_max_slot:
+0x5e2d 023836 rtn 
+:      023838 parse_lmp_max_slot_req:
+0x5e2e 023839 fetch 1 ,mem_max_slot 
+0x5e2f 023840 fetcht 1 ,mem_rxbuf + 1 
+0x5e30 023841 isub temp ,null 
+0x5e31 023843 branch accept_lmp_msg ,positive 
+0x5e32 023844 jam lmp_not_accepted ,mem_lmo_opcode2 
+0x5e33 023845 jam unspecified_error ,mem_lmo_reason2 
+0x5e34 023846 jam lmp_max_slot_req ,mem_lmi_opcode2 
+0x5e35 023847 rtn 
+:      023849 parse_lmp_detach:
+0x5e36 023850 call prepare_disconnect 
+0x5e37 023851 branch accept_lmp_msg 
+:      023853 accept_lmp_msg:
+0x5e38 023854 jam lmp_accepted ,mem_lmo_opcode2 
+0x5e39 023855 rtn 
+:      023857 parse_lmp_incr_power:
+0x5e3a 023858 jam lmp_max_power ,mem_lmo_opcode2 
+0x5e3b 023859 rtn 
+:      023861 parse_lmp_decr_power:
+0x5e3c 023862 jam lmp_min_power ,mem_lmo_opcode2 
+0x5e3d 023863 rtn 
+:      023865 parse_lmp_version_res:
+0x5e3e 023866 fetch 1 ,mem_conn_sm 
+0x5e3f 023867 rtneq conn_sm_wait_version 
+0x5e40 023869 jam conn_sm_send_features ,mem_conn_sm 
+0x5e41 023871 rtn 
+:      023874 parse_lmp_auto_rate:
+0x5e42 023875 rtn 
+:      023877 parse_lmp_in_rand:
+0x5e43 023878 call lmp_copy_rand 
+0x5e44 023879 jam pincode_state_wait_pincode ,mem_pincode_state 
+0x5e45 023880 jam bt_evt_pincode_req ,mem_fifo_temp 
+0x5e46 023881 call ui_ipc_send_event 
+0x5e47 023883 call tid_check 
+0x5e48 023884 nbranch lmp_accept_inrand ,true 
+0x5e49 023886 nbranch parse_lmp_inrand_res ,master 
+0x5e4a 023887 jam lmp_not_accepted ,mem_lmo_opcode2 
+0x5e4b 023888 jam lmp_in_rand ,mem_lmi_opcode2 
+0x5e4c 023889 jam transaction_collision ,mem_lmo_reason2 
+0x5e4d 023890 rtn 
+:      023891 parse_lmp_inrand_res:
+0x5e4e 023892 fetch 1 ,mem_op 
+0x5e4f 023893 set1 op_inrand_req ,pdata 
+0x5e50 023894 store 1 ,mem_op 
+0x5e51 023895 rtn 
+:      023898 pop_tid_follow:
+0x5e52 023899 fetcht 1 ,mem_state_map 
+0x5e53 023900 nsetflag blank ,smap_lmptid ,temp 
+0x5e54 023901 storet 1 ,mem_state_map 
+0x5e55 023902 rtn 
+:      023905 push_tid_follow:
+0x5e56 023906 fetch 1 ,mem_lmo_tid2 
+0x5e57 023907 rshift pdata ,pdata 
+0x5e58 023908 and_into 1 ,pdata 
+0x5e59 023909 rtn 
+:      023911 parse_lmp_au_rand_moudle:
+0x5e5a 023912 fetch 1 ,mem_nv_data_number 
+0x5e5b 023913 rtn blank 
+0x5e5c 023914 fetch 1 ,mem_pairing_auth 
+0x5e5d 023915 call load_device_list ,blank 
+0x5e5e 023916 rtn 
+:      023918 parse_lmp_au_rand:
+0x5e5f 023919 call parse_lmp_au_rand_moudle 
+0x5e60 023920 call push_tid_follow 
+0x5e61 023921 store 1 ,mem_sres_tid 
+0x5e62 023922 call lmp_copy_rand 
+0x5e63 023923 jam lmp_sres ,mem_lmo_opcode2 
+0x5e64 023924 fetch 1 ,mem_link_key_exists 
+0x5e65 023925 nrtn blank 
+0x5e66 023926 fetch 1 ,mem_state 
+0x5e67 023927 rtnbit1 state_combkey 
+0x5e68 023928 jam key_missing ,mem_lmo_reason2 
+0x5e69 023929 branch reject_lmp_packet 
+:      023931 parse_lmp_sres:
+0x5e6a 023932 arg mem_plap ,rega 
+0x5e6b 023933 call function_e1 
+0x5e6c 023934 fetch 4 ,mem_rxbuf + 1 
+0x5e6d 023935 fetcht 4 ,mem_input_store 
+0x5e6e 023936 isub temp ,null 
+0x5e6f 023937 branch authentication_ok ,zero 
+0x5e70 023938 jam lmp_detach ,mem_lmo_opcode2 
+0x5e71 023939 jam authentication_failure_error ,mem_disconn_reason_send 
+0x5e72 023940 rtn 
+:      023941 authentication_ok:
+0x5e73 023942 call authentication_ok_common 
+0x5e74 023943 fetch 1 ,mem_ssp_enable 
+0x5e75 023944 branch pairing_success ,blank 
+0x5e76 023945 rtn 
+:      023948 authentication_ok_common:
+0x5e77 023949 call copy_aco 
+0x5e78 023950 call linkkey_ready 
+0x5e79 023951 fetch 1 ,mem_op 
+0x5e7a 023952 isolate1 op_auth_req ,pdata 
+0x5e7b 023953 set0 op_auth_req ,pdata 
+0x5e7c 023954 store 1 ,mem_op 
+0x5e7d 023955 fetch 1 ,mem_conn_sm 
+0x5e7e 023956 beq conn_sm_auth_wait ,authentication_ok_conn_sm 
+0x5e7f 023957 beq conn_sm_pairing_wait ,authentication_ok_conn_sm 
+0x5e80 023958 rtn 
+:      023959 authentication_ok_conn_sm:
+0x5e81 023960 fetch 1 ,mem_pairing_auth 
+0x5e82 023961 rtnne defalt_pairing_auth 
+0x5e83 023962 fetch 1 ,mem_state_map 
+0x5e84 023963 rtnbit1 smap_encryption 
+0x5e85 023964 branch host_create_conn_encrypt 
+:      023966 parse_lmp_comb_key:
+0x5e86 023967 arg mem_rxbuf + 1 ,rega 
+0x5e87 023968 arg mem_kinit ,regb 
+0x5e88 023969 arg mem_random_number ,contw 
+0x5e89 023970 call xor16 
+0x5e8a 023971 arg mem_plap ,rega 
+0x5e8b 023972 call generate_linkkey 
+0x5e8c 023973 jam lmp_au_rand ,mem_lmo_opcode2 
+0x5e8d 023974 fetch 1 ,mem_state 
+0x5e8e 023975 bbit0 state_combkey ,lmp_generate_key 
+0x5e8f 023976 rtn 
+:      023978 parse_lmp_name_res:
+0x5e90 023979 fetch 2 ,mem_len 
+0x5e91 023980 add pdata ,-3 ,loopcnt 
+0x5e92 023981 fetcht 1 ,mem_rxbuf + 1 
+0x5e93 023982 setarg mem_tmp_buffer 
+0x5e94 023983 iadd temp ,contw 
+0x5e95 023984 arg mem_rxbuf + 3 ,contr 
+0x5e96 023985 call memcpy 
+0x5e97 023986 fetcht 1 ,mem_name_offset 
+0x5e98 023987 fetch 1 ,mem_rxbuf + 2 
+0x5e99 023988 isub temp ,pdata 
+0x5e9a 023989 sub pdata ,14 ,null 
+0x5e9b 023990 branch parse_lmp_name_res_end ,positive 
+0x5e9c 023991 add temp ,14 ,pdata 
+0x5e9d 023992 store 1 ,mem_name_offset 
+0x5e9e 023993 jam lmp_name_req ,mem_lmo_opcode2 
+0x5e9f 023994 rtn 
+:      023995 parse_lmp_name_res_end:
+0x5ea0 023996 fetch 1 ,mem_state_map 
+0x5ea1 023997 set1 smap_name_res ,pdata 
+0x5ea2 023998 store 1 ,mem_state_map 
+0x5ea3 023999 bbit1 smap_name_req ,lmp_disconnect 
+0x5ea4 024000 rtn 
+:      024001 parse_lmp_name_req:
+0x5ea5 024002 fetch 1 ,mem_rxbuf + 1 
+0x5ea6 024003 store 1 ,mem_lmi_opcode2 
+0x5ea7 024004 jam lmp_name_res ,mem_lmo_opcode2 
+0x5ea8 024005 rtn 
+:      024007 parse_lmp_conn_req:
+0x5ea9 024008 branch accept_lmp_msg 
+:      024010 parse_lmp_timing_accuracy_req:
+0x5eaa 024011 jam lmp_timing_accuracy_res ,mem_lmo_opcode2 
+0x5eab 024012 rtn 
+:      024014 parse_lmp_features_req:
+0x5eac 024015 jam lmp_features_res ,mem_lmo_opcode2 
+0x5ead 024016 rtn 
+:      024018 parse_lmp_version_req:
+0x5eae 024019 jam lmp_version_res ,mem_lmo_opcode2 
+0x5eaf 024020 rtn 
+:      024022 parse_lmp_supervision_timeout:
+0x5eb0 024025 rtn 
+:      024029 parse_lmp_sniff_subrating_req:
+0x5eb1 024030 fetch 2 ,mem_tsniff 
+0x5eb2 024031 iforce temp 
+0x5eb3 024032 fetch 1 ,mem_rxbuf + 2 
+0x5eb4 024033 store 1 ,mem_subsniff_rate 
+0x5eb5 024034 imul32 temp ,temp 
+0x5eb6 024035 fetch 2 ,mem_rxbuf + 3 
+0x5eb7 024036 lshift pdata ,pdata 
+0x5eb8 024037 store 2 ,mem_subsniff_tcmax 
+0x5eb9 024038 fetch 4 ,mem_rxbuf + 5 
+0x5eba 024039 lshift pdata ,pdata 
+0x5ebb 024040 store 4 ,mem_subsniff_instant 
+0x5ebc 024042 deposit temp 
+0x5ebd 024043 store 2 ,mem_subsniff_tsniff 
+0x5ebe 024044 rtn 
+:      024045 parse_lmpext_packet_type_table_req:
+0x5ebf 024046 fetcht 1 ,mem_ptt 
+0x5ec0 024047 fetch 1 ,mem_rxbuf + 2 
+0x5ec1 024048 ixor temp ,null 
+0x5ec2 024049 nbranch reject_unknown_ext_packet ,zero 
+0x5ec3 024050 isolate1 0 ,pdata 
+0x5ec4 024051 fetch 1 ,mem_state_map 
+0x5ec5 024052 setflag true ,smap_edr ,pdata 
+0x5ec6 024053 store 1 ,mem_state_map 
+0x5ec7 024054 jam lmp_ext_accepted ,mem_lmo_opcode2 
+0x5ec8 024055 jam lmp_packet_type_table_req ,mem_lmi_opcode2 
+0x5ec9 024056 rtn 
+:      024059 parse_lmp_sniff_subrating_res:
+:      024060 parse_lmp_preferred_rate:
+:      024061 parse_lmp_max_power:
+:      024062 parse_lmp_min_power:
+0x5eca 024063 rtn 
+:      024064 parse_lmp_page_mode_req:
+0x5ecb 024066 branch accept_lmp_msg 
+:      024067 parse_lmp_page_scan_mode_req:
+0x5ecc 024070 branch accept_lmp_msg 
+:      024074 parse_lmp_slot_offset:
+0x5ecd 024075 fetch 2 ,mem_rxbuf + 1 
+0x5ece 024076 store 2 ,mem_slot_offset 
+0x5ecf 024077 rtn 
+:      024079 parse_lmp_sniff_req_check_sniff_para:
+0x5ed0 024080 fetch 2 ,mem_rxbuf + 4 
+0x5ed1 024081 fetcht 1 ,mem_lpm_mult 
+0x5ed2 024082 imul32 temp ,pdata 
+0x5ed3 024083 arg 0x640 ,temp 
+0x5ed4 024084 isub temp ,null 
+0x5ed5 024086 rtn 
+:      024088 parse_lmp_sniff_req:
+0x5ed6 024089 fetch 2 ,mem_rxbuf + 6 
+0x5ed7 024090 branch lmp_reject_sniff ,blank 
+0x5ed8 024091 call parse_lmp_sniff_req_check_sniff_para 
+0x5ed9 024092 branch lmp_reject_sniff ,positive 
+0x5eda 024093 fetch 1 ,mem_device_option 
+0x5edb 024094 sub pdata ,dvc_op_module ,null 
+0x5edc 024095 call module_set_lpm_mult_2 ,zero 
+0x5edd 024096 fetch 1 ,mem_state 
+0x5ede 024097 bbit1 state_insniff ,lmp_reject_sniff 
+0x5edf 024098 fetch 2 ,mem_rxbuf + 2 
+0x5ee0 024099 lshift pdata ,pdata 
+0x5ee1 024100 store 2 ,mem_dsniff 
+0x5ee2 024101 fetch 2 ,mem_rxbuf + 4 
+0x5ee3 024102 lshift pdata ,pdata 
+0x5ee4 024103 store 2 ,mem_tsniff 
+0x5ee5 024104 fetch 2 ,mem_rxbuf + 6 
+0x5ee6 024105 store 1 ,mem_sniff_attempt 
+0x5ee7 024106 iforce temp 
+0x5ee8 024107 fetch 2 ,mem_rxbuf + 8 
+0x5ee9 024108 store 1 ,mem_sniff_timeout 
+0x5eea 024109 isub temp ,null 
+0x5eeb 024110 nbranch set_big_value_to_attempt ,positive 
+0x5eec 024111 store 1 ,mem_sniff_attempt 
+:      024112 set_big_value_to_attempt:
+0x5eed 024114 jam lmp_accepted ,mem_lmo_opcode2 
+0x5eee 024115 jam lmp_sniff_req ,mem_lmi_opcode2 
+0x5eef 024116 rtn 
+:      024118 lmp_reject_sniff:
+0x5ef0 024119 jam pdu_not_allowed ,mem_lmo_reason2 
+0x5ef1 024120 branch reject_lmp_packet 
+:      024122 parse_lmp_start_encryption_req:
+0x5ef2 024123 call accept_lmp_msg 
+0x5ef3 024124 call lmp_copy_rand 
+0x5ef4 024125 call function_e3 
+0x5ef5 024126 branch start_encryption 
+:      024128 parse_lmp_stop_encryption_req:
+0x5ef6 024129 call accept_lmp_msg 
+0x5ef7 024130 branch stop_encryption 
+:      024133 parse_lmp_switch_req:
+0x5ef8 024134 fetch 4 ,mem_rxbuf + 1 
+0x5ef9 024135 lshift pdata ,pdata 
+0x5efa 024137 branch parse_lmp_switch_accept ,master 
+0x5efb 024138 fetcht 1 ,mem_link_key_exists 
+0x5efc 024139 nbranch parse_lmp_switch_req_clear_mark ,blank 
+:      024140 parse_lmp_switch_req_not_accept:
+0x5efd 024141 jam lmp_not_accepted ,mem_lmo_opcode2 
+0x5efe 024142 jam lmp_switch_req ,mem_lmi_opcode2 
+0x5eff 024143 jam pdu_not_allowed ,mem_lmo_reason2 
+0x5f00 024144 rtn 
+:      024145 parse_lmp_switch_req_clear_mark:
+0x5f01 024146 jam lmp_slot_offset ,mem_lmo_opcode2 
+0x5f02 024147 jam 0 ,mem_conn_sm 
+0x5f03 024148 branch role_switch_prepare 
+:      024150 parse_lmp_switch_accept:
+0x5f04 024151 call role_switch_prepare 
+0x5f05 024152 set1 mark_reconn_recieve_switch ,mark 
+0x5f06 024153 fetch 1 ,mem_connection_options 
+0x5f07 024154 set0 connection_switch ,pdata 
+0x5f08 024155 store 1 ,mem_connection_options 
+0x5f09 024156 branch accept_lmp_msg 
+:      024160 parse_lmp_temp_rand:
+:      024161 parse_lmp_temp_key:
+:      024162 parse_lmp_timing_accuracy_res:
+:      024163 parse_lmp_unit_key:
+:      024164 parse_lmp_use_semi_permanend_key:
+0x5f0a 024165 rtn 
+:      024168 parse_lmp_unsniff_req:
+0x5f0b 024169 jam lmp_accepted ,mem_lmo_opcode2 
+0x5f0c 024170 jam lmp_unsniff_req ,mem_lmi_opcode2 
+0x5f0d 024171 jam bt_evt_remote_unsniff ,mem_fifo_temp 
+0x5f0e 024172 call ui_ipc_send_event 
+0x5f0f 024173 branch sniff_exit 
+:      024175 parse_lmp_encapsulated_header:
+0x5f10 024176 fetch 1 ,mem_rxbuf + 1 
+0x5f11 024177 bne encapsulated_major_type_p192 ,parse_lmp_encapsulated_header_reject 
+0x5f12 024178 fetch 1 ,mem_rxbuf + 2 
+0x5f13 024179 bne encapsulated_minor_type_p192 ,parse_lmp_encapsulated_header_reject 
+0x5f14 024180 fetch 1 ,mem_rxbuf + 3 
+0x5f15 024181 bne encapsulated_len_p192 ,parse_lmp_encapsulated_header_reject 
+0x5f16 024182 call check_localsm 
+0x5f17 024183 branch parse_lmp_encapsulated_header_master ,true 
+0x5f18 024184 jam sp_stat_key_recv ,mem_sp_state 
+:      024185 parse_lmp_encapsulated_header_master:
+0x5f19 024186 jam lmp_accepted ,mem_lmo_opcode2 
+0x5f1a 024187 jam lmp_encapsulated_header ,mem_lmi_opcode2 
+0x5f1b 024188 branch parse_rx_done 
+:      024190 parse_lmp_encapsulated_header_reject:
+0x5f1c 024191 jam pdu_not_allowed ,mem_lmo_reason2 
+0x5f1d 024192 branch reject_lmp_packet 
+:      024194 parse_lmp_accepted_encapsulated_header:
+0x5f1e 024197 jam lmp_encapsulated_payload ,mem_lmo_opcode2 
+0x5f1f 024199 rtn 
+:      024200 parse_lmp_accepted_simple_pairing_number:
+0x5f20 024201 fetch 1 ,mem_ssp_mode_flag 
+0x5f21 024202 beq ssp_mode_ssp_pin_flag ,parse_lmp_accepted_simple_pairing_number_ssp_pin 
+0x5f22 024203 beq ssp_mode_passkey_entry_flag ,parse_lmp_accepted_simple_pairing_number_passkey 
+:      024204 parse_lmp_accepted_simple_pairing_number_common:
+0x5f23 024205 call check_localsm 
+0x5f24 024206 rtn true 
+0x5f25 024207 jam sp_stat_confirm_recv ,mem_sp_state 
+0x5f26 024208 rtn 
+:      024210 parse_lmp_accepted_simple_pairing_number_ssp_pin:
+0x5f27 024211 call g_noninit_number_confirm 
+0x5f28 024212 jam bt_evt_bt_gkey_generate ,mem_fifo_temp 
+0x5f29 024213 call ui_ipc_send_event 
+0x5f2a 024214 branch parse_lmp_accepted_simple_pairing_number_common 
+:      024217 parse_lmp_accepted_simple_pairing_number_passkey:
+0x5f2b 024218 call check_localsm 
+0x5f2c 024219 rtn true 
+0x5f2d 024220 fetch 1 ,mem_authentication_passkey_times 
+0x5f2e 024221 beq 19 ,authentication_passkey_end 
+0x5f2f 024222 increase 1 ,pdata 
+0x5f30 024223 store 1 ,mem_authentication_passkey_times 
+:      024226 authentication_passkey:
+0x5f31 024227 jam sp_flag_commit ,mem_sp_flag 
+0x5f32 024228 jam sp_stat_commit_calc ,mem_sp_state 
+0x5f33 024229 fetch 1 ,mem_authentication_passkey_times 
+0x5f34 024230 copy pdata ,queue 
+0x5f35 024231 fetch 6 ,mem_pin 
+0x5f36 024232 qisolate1 pdata 
+0x5f37 024233 setarg 0x80 
+0x5f38 024234 setflag true ,0 ,pdata 
+0x5f39 024235 store 1 ,mem_passkey_1bit 
+0x5f3a 024236 rtn 
+:      024238 authentication_passkey_end:
+0x5f3b 024239 jam sp_stat_confirm_recv ,mem_sp_state 
+0x5f3c 024240 rtn 
+:      024242 parse_lmp_accepted_dhkey_check:
+0x5f3d 024243 call parse_lmp_accepted_dhkey_check_common 
+:      024244 pairing_success:
+0x5f3e 024245 fetch 1 ,mem_flag_pairing_state 
+0x5f3f 024246 rtn blank 
+0x5f40 024247 jam flag_pairing_state_not_pairing ,mem_flag_pairing_state 
+0x5f41 024248 jam bt_evt_bt_pairing_success ,mem_fifo_temp 
+0x5f42 024249 branch ui_ipc_send_event 
+:      024252 parse_lmp_accepted_dhkey_check_common:
+0x5f43 024254 call check_localsm 
+0x5f44 024255 ncall g_noninit ,true 
+0x5f45 024256 call g_init ,true 
+0x5f46 024257 call check_localsm 
+0x5f47 024258 rtn true 
+0x5f48 024259 jam sp_stat_link_key_calc ,mem_sp_state 
+0x5f49 024260 jam sp_flag_commit ,mem_sp_flag 
+0x5f4a 024261 rtn 
+:      024263 parse_simple_pairing_confirm:
+0x5f4b 024264 arg mem_sp_confirm_remote ,contw 
+0x5f4c 024265 arg mem_rxbuf + 1 ,contr 
+0x5f4d 024266 call memcpy16 
+0x5f4e 024267 fetch 1 ,mem_ssp_mode_flag 
+0x5f4f 024268 rtneq ssp_mode_passkey_entry_flag 
+0x5f50 024269 branch master_set_mem_master_sp_flag 
+:      024271 parse_lmp_encapsulated_payload:
+0x5f51 024272 fetch 1 ,mem_master_sp_state 
+0x5f52 024273 beq sp_stat_random_send ,parse_encapsulated_payload_master 
+0x5f53 024274 fetch 1 ,mem_sp_state 
+0x5f54 024275 bne sp_stat_key_recv ,parse_lmp_encapsulated_payload_reject 
+:      024276 parse_encapsulated_payload_master:
+0x5f55 024277 fetch 1 ,mem_sp_remote_key_recv_count 
+0x5f56 024278 sub pdata ,0x20 ,contw 
+0x5f57 024279 nbranch parse_lmp_encapsulated_payload_reject ,positive 
+0x5f58 024280 arg mem_sp_pubkey_remote ,contw 
+0x5f59 024281 iadd contw ,contw 
+0x5f5a 024282 fetch 8 ,mem_rxbuf + 1 
+0x5f5b 024283 istore 8 ,contw 
+0x5f5c 024284 fetch 8 ,mem_rxbuf + 9 
+0x5f5d 024285 istore 8 ,contw 
+0x5f5e 024286 fetch 1 ,mem_sp_remote_key_recv_count 
+0x5f5f 024287 increase 16 ,pdata 
+0x5f60 024288 store 1 ,mem_sp_remote_key_recv_count 
+0x5f61 024289 bne encapsulated_len_p192 ,accept_lmp_msg 
+:      024290 parse_lmp_encapsulated_payload_completed:
+0x5f62 024291 call check_localsm 
+0x5f63 024292 branch accept_lmp_msg ,true 
+0x5f64 024293 jam sp_key_valid ,mem_sp_remote_key_invalid 
+0x5f65 024294 jam sp_stat_key_generate ,mem_sp_state 
+0x5f66 024295 jam sp_flag_commit ,mem_sp_flag 
+0x5f67 024296 branch accept_lmp_msg 
+:      024297 parse_lmp_encapsulated_payload_reject:
+0x5f68 024298 jam pdu_not_allowed ,mem_lmo_reason2 
+0x5f69 024299 branch reject_lmp_packet 
+:      024300 parse_lmp_accepted_encapsulated_payload:
+0x5f6a 024301 fetch 1 ,mem_sp_local_key_send_count 
+0x5f6b 024302 beq encapsulated_len_p192 ,parse_lmp_encapsulated_payload_all_accepted 
+0x5f6c 024303 jam lmp_encapsulated_payload ,mem_lmo_opcode2 
+0x5f6d 024304 branch parse_rx_done 
+:      024306 parse_lmp_encapsulated_payload_all_accepted:
+0x5f6e 024307 call check_localsm 
+0x5f6f 024308 branch parse_lmp_encapsulated_payload_all_accepted_master ,true 
+0x5f70 024309 fetch 1 ,mem_ssp_mode_flag 
+0x5f71 024310 beq ssp_mode_passkey_entry_flag ,parse_lmp_encapsulated_payload_all_accepted_get_passkey 
+0x5f72 024311 jam sp_flag_commit ,mem_sp_flag 
+0x5f73 024312 jam sp_stat_commit_calc ,mem_sp_state 
+0x5f74 024313 branch parse_rx_done 
+:      024315 parse_lmp_encapsulated_payload_all_accepted_get_passkey:
+0x5f75 024316 jam bt_evt_bt_get_passkey ,mem_fifo_temp 
+0x5f76 024317 branch ui_ipc_send_event 
+:      024320 parse_lmp_encapsulated_payload_all_accepted_master:
+0x5f77 024322 branch parse_rx_done 
+:      024324 parse_lmp_simple_pairing_number:
+0x5f78 024325 fetch 1 ,mem_master_sp_state 
+0x5f79 024326 beq sp_stat_random_send ,parse_lmp_simple_pairing_number_master 
+0x5f7a 024327 fetch 1 ,mem_sp_state 
+0x5f7b 024328 bne sp_stat_random_recv ,parse_lmp_simple_pairing_number_reject 
+:      024329 parse_lmp_simple_pairing_number_master:
+0x5f7c 024330 arg mem_sp_random_remote ,contw 
+0x5f7d 024331 fetch 8 ,mem_rxbuf + 1 
+0x5f7e 024332 istore 8 ,contw 
+0x5f7f 024333 fetch 8 ,mem_rxbuf + 9 
+0x5f80 024334 istore 8 ,contw 
+0x5f81 024335 call check_localsm 
+0x5f82 024336 branch parse_lmp_simple_pairing_number_master0 ,true 
+0x5f83 024337 jam sp_stat_random_send ,mem_sp_state 
+0x5f84 024338 jam sp_flag_commit ,mem_sp_flag 
+0x5f85 024339 branch accept_lmp_msg 
+:      024340 parse_lmp_simple_pairing_number_master0:
+0x5f86 024341 jam sp_stat_commit_calc ,mem_master_sp_state 
+0x5f87 024342 branch master_set_mem_master_sp_flag 
+:      024345 parse_lmp_simple_pairing_number_reject:
+0x5f88 024346 jam pdu_not_allowed ,mem_lmo_reason2 
+0x5f89 024347 branch reject_lmp_packet 
+:      024349 parse_dhkey_check:
+0x5f8a 024350 fetch 1 ,mem_master_sp_state 
+0x5f8b 024351 beq sp_stat_confirm_send ,parse_dhkey_check_master 
+0x5f8c 024352 fetch 1 ,mem_sp_state 
+0x5f8d 024353 bne sp_stat_confirm_recv ,parse_lmp_dhkey_check_reject 
+:      024354 parse_dhkey_check_master:
+0x5f8e 024355 arg mem_sp_check_result ,contw 
+0x5f8f 024356 arg mem_rxbuf + 1 ,contr 
+0x5f90 024357 call memcpy16 
+0x5f91 024358 call check_localsm 
+0x5f92 024359 branch parse_dhkey_check_master0 ,true 
+0x5f93 024360 fetch 1 ,mem_ssp_mode_flag 
+0x5f94 024361 beq ssp_mode_ssp_pin_flag ,number_comparison_mode 
+:      024362 number_comparison_successed:
+0x5f95 024363 jam 0 ,mem_flag_mode_ssp_pin 
+0x5f96 024364 jam sp_stat_confirm_check ,mem_sp_state 
+0x5f97 024365 jam sp_flag_commit ,mem_sp_flag 
+0x5f98 024366 jam lmp_dhkey_check ,mem_lmi_opcode2 
+0x5f99 024367 branch parse_rx_done 
+:      024369 parse_dhkey_check_master0:
+0x5f9a 024370 jam sp_stat_confirm_check ,mem_master_sp_state 
+0x5f9b 024371 jam sp_flag_commit ,mem_master_sp_flag 
+0x5f9c 024372 branch parse_rx_done 
+:      024373 parse_lmp_dhkey_check_reject:
+0x5f9d 024374 jam pdu_not_allowed ,mem_lmo_reason2 
+0x5f9e 024375 branch reject_lmp_packet 
+:      024377 number_comparison_mode:
+0x5f9f 024378 fetch 1 ,mem_flag_mode_ssp_pin 
+0x5fa0 024379 bbit1 flag_mode_ssp_pin_reviceve_comparison_bit ,comparison_result 
+0x5fa1 024380 set1 flag_mode_ssp_pin_recieve_dhkey_bit ,pdata 
+0x5fa2 024381 store 1 ,mem_flag_mode_ssp_pin 
+0x5fa3 024382 rtn 
+:      024384 comparison_result:
+0x5fa4 024385 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed 
+0x5fa5 024386 jam 0 ,mem_flag_mode_ssp_pin 
+0x5fa6 024387 branch parse_lmp_dhkey_check_reject 
+:      024390 parse_lmp_clkoffset_res:
+0x5fa7 024391 branch parse_rx_done 
+:      024393 parse_lmp_encryption_mode_req:
+0x5fa8 024394 fetch 1 ,mem_connection_options 
+0x5fa9 024395 set0 connection_encrypt 
+0x5faa 024396 store 1 ,mem_connection_options 
+0x5fab 024397 call accept_lmp_msg 
+0x5fac 024398 nrtn master 
+0x5fad 024399 fetch 1 ,mem_rxbuf + 1 
+0x5fae 024400 fetcht 1 ,mem_op 
+0x5faf 024401 setflag blank ,op_stop_enc ,temp 
+0x5fb0 024402 nsetflag blank ,op_start_enc ,temp 
+0x5fb1 024403 storet 1 ,mem_op 
+0x5fb2 024404 rtn 
+:      024406 parse_lmp_features_res:
+0x5fb3 024407 fetcht 8 ,mem_rxbuf + 1 
+:      024408 parse_lmp_features_res_not_hci:
+0x5fb4 024409 fetch 1 ,mem_conn_sm 
+0x5fb5 024410 rtnne conn_sm_wait_features_res 
+0x5fb6 024412 fetch 1 ,mem_connection_options 
+0x5fb7 024413 bbit0 connection_feature_ext ,parse_lmp_send_conn 
+0x5fb8 024415 jam conn_sm_send_features_ext ,mem_conn_sm 
+0x5fb9 024416 rtn 
+:      024417 parse_lmp_send_conn:
+0x5fba 024418 jam conn_sm_send_conn_req ,mem_conn_sm 
+0x5fbb 024419 rtn 
+:      024420 parse_lmp_test_activate:
+0x5fbc 024421 fetch 1 ,mem_debug_config 
+0x5fbd 024422 store 1 ,mem_test_mode_old_debug_config 
+0x5fbe 024423 jam lmp_accepted ,mem_lmo_opcode2 
+0x5fbf 024424 jam lmp_test_activate ,mem_lmi_opcode2 
+0x5fc0 024425 rtn 
+:      024426 parse_lmp_test_control:
+0x5fc1 024429 jam lmp_accepted ,mem_lmo_opcode2 
+0x5fc2 024430 jam lmp_test_control ,mem_lmi_opcode2 
+0x5fc3 024431 force 9 ,loopcnt 
+0x5fc4 024432 arg mem_rxbuf + 1 ,contr 
+0x5fc5 024433 arg mem_temp_payload ,contw 
+:      024434 parse_lmp_test_xor:
+0x5fc6 024435 ifetch 1 ,contr 
+0x5fc7 024436 xor_into 0x55 ,pdata 
+0x5fc8 024437 istore 1 ,contw 
+0x5fc9 024438 loop parse_lmp_test_xor 
+0x5fca 024439 fetch 1 ,test_mode_scenario 
+0x5fcb 024440 fetcht 1 ,mem_tester_emulate 
+0x5fcc 024441 set0 tester_no_whitening ,temp 
+0x5fcd 024442 set0 tester_pattern_test ,temp 
+0x5fce 024443 beq exit_test_mode ,parse_lmp_test_control_exit 
+0x5fcf 024444 beq pause_test_mode ,parse_lmp_test_control_pause 
+0x5fd0 024445 beq closed_loop_back_acl ,parse_lmp_test_control_loopback 
+0x5fd1 024446 beq acl_without_whitening ,parse_lmp_test_control_loopback_nowhite 
+0x5fd2 024447 beq closed_loop_back_sco ,parse_lmp_test_control_loopback 
+0x5fd3 024448 beq sco_without_whitening ,parse_lmp_test_control_loopback_nowhite 
+0x5fd4 024449 beq zero_pattern ,parse_lmp_test_control_pattern 
+0x5fd5 024450 beq one_pattern ,parse_lmp_test_control_pattern 
+0x5fd6 024451 beq alt_pattern ,parse_lmp_test_control_pattern 
+0x5fd7 024452 beq alt2_pattern ,parse_lmp_test_control_pattern 
+0x5fd8 024453 beq pseudorandom ,parse_lmp_test_control_pattern 
+0x5fd9 024454 rtn 
+:      024455 parse_lmp_test_control_exit:
+0x5fda 024457 fetch 1 ,mem_tester_emulate 
+0x5fdb 024458 set1 tester_exit ,pdata 
+0x5fdc 024459 set1 tester_change ,pdata 
+0x5fdd 024460 store 1 ,mem_tester_emulate 
+0x5fde 024461 rtn 
+:      024462 parse_lmp_test_control_pattern:
+0x5fdf 024463 set1 tester_pattern_test ,temp 
+0x5fe0 024464 jam 5 ,mem_lch_code 
+0x5fe1 024465 fetch 2 ,test_mode_data_length 
+0x5fe2 024466 iforce loopcnt 
+0x5fe3 024467 store 2 ,mem_len 
+0x5fe4 024468 arg mem_rxbuf ,contw 
+0x5fe5 024469 call pn9 
+:      024470 parse_lmp_test_control_loopback_nowhite:
+0x5fe6 024471 set1 tester_no_whitening ,temp 
+:      024472 parse_lmp_test_control_loopback:
+0x5fe7 024473 set1 tester_change ,temp 
+0x5fe8 024474 force 0 ,pdata 
+0x5fe9 024475 store 1 ,mem_slave_rcvcnt 
+0x5fea 024476 store 2 ,mem_tst_pktcnt_crc 
+0x5feb 024477 store 2 ,mem_tst_pktcnt_dmh 
+0x5fec 024478 store 2 ,mem_tst_pktcnt_hec 
+0x5fed 024479 store 2 ,mem_tst_pktcnt_sync 
+0x5fee 024480 fetch 1 ,test_mode_hopping_mode 
+0x5fef 024481 compare fixed_freq ,pdata ,0xff 
+0x5ff0 024482 setflag true ,tester_fixed_freq ,temp 
+0x5ff1 024483 storet 1 ,mem_tester_emulate 
+0x5ff2 024484 rtn 
+:      024486 parse_lmp_test_control_pause:
+0x5ff3 024487 set0 mark_testmode ,mark 
+0x5ff4 024488 jam 0 ,mem_tester_emulate 
+0x5ff5 024489 fetch 1 ,mem_debug_config 
+0x5ff6 024490 set0 debug_tx_pattern ,pdata 
+0x5ff7 024491 store 1 ,mem_debug_config 
+0x5ff8 024492 rtn 
+:      024498 lmp_copy_rand:
+0x5ff9 024499 arg mem_rxbuf + 1 ,contr 
+0x5ffa 024500 arg mem_random_number ,contw 
+0x5ffb 024501 branch memcpy16 
+:      024503 lmp_generate_key:
+0x5ffc 024504 jam lmp_comb_key ,mem_lmo_opcode2 
+0x5ffd 024505 rtn 
+:      024507 lmp_start_encryption:
+0x5ffe 024508 nrtn master 
+0x5fff 024509 jam lmp_start_encryption_req ,mem_lmo_opcode2 
+0x6000 024510 rtn 
+:      024512 lmp_accept_inrand:
+0x6001 024513 arg mem_lap ,rega 
+0x6002 024514 call generate_kinit 
+0x6003 024515 jam lmp_accepted ,mem_lmo_opcode2 
+0x6004 024516 jam lmp_in_rand ,mem_lmi_opcode2 
+0x6005 024517 rtn 
+:      024519 lmp_disconnect:
+0x6006 024520 jam 10 ,mem_conn_timer 
+0x6007 024521 jam lmp_detach ,mem_lmo_opcode2 
+0x6008 024522 jam local_host ,mem_disconn_reason_send 
+0x6009 024523 rtn 
+:      024529 send_lmp:
+0x600a 024530 bpatchx patch30_2 ,mem_patch30 
+0x600b 024531 disable user 
+0x600c 024532 call lmo_fifo_process 
+0x600d 024533 fetch 1 ,mem_lmp_to_send 
+0x600e 024534 rtn blank 
+0x600f 024539 bbit1 7 ,send_lmp_escape 
+:      024540 send_lmp0:
+0x6010 024541 beq lmp_name_req ,send_lmp_name_req 
+0x6011 024542 beq lmp_name_res ,send_lmp_name_res 
+0x6012 024543 beq lmp_accepted ,send_lmp_accepted 
+0x6013 024544 beq lmp_not_accepted ,send_lmp_not_accepted 
+0x6014 024545 beq lmp_features_req ,send_lmp_features_req 
+0x6015 024546 beq lmp_features_res ,send_lmp_features_res 
+0x6016 024547 beq lmp_timing_accuracy_res ,send_lmp_timing_accuracy_res 
+0x6017 024548 beq lmp_version_req ,send_lmp_version_req 
+0x6018 024549 beq lmp_version_res ,send_lmp_version_res 
+0x6019 024550 beq lmp_setup_complete ,send_lmp_setup_complete 
+0x601a 024551 beq lmp_supervision_timeout ,send_lmp_superto 
+0x601b 024552 beq lmp_host_connection_req ,send_lmp_no_payload 
+0x601c 024553 beq lmp_in_rand ,send_lmp_inrand 
+0x601d 024554 beq lmp_comb_key ,send_lmp_comb_key 
+0x601e 024555 beq lmp_au_rand ,send_lmp_aurand 
+0x601f 024556 beq lmp_sres ,send_lmp_sres 
+0x6020 024557 beq lmp_encryption_mode_req ,send_lmp_encryption_mode_req 
+0x6021 024558 beq lmp_encryption_key_size_req ,send_lmp_encryption_key_size_req 
+0x6022 024559 beq lmp_start_encryption_req ,send_lmp_start_encryption 
+0x6023 024560 beq lmp_detach ,send_lmp_detach 
+0x6024 024561 beq lmp_quality_of_service_req ,send_lmp_quality_of_service_req 
+0x6025 024562 beq lmp_unit_key ,send_lmp_unit_key 
+0x6026 024564 beq lmp_incr_power_req ,send_lmp_inc_power 
+0x6027 024565 beq lmp_clkoffset_res ,send_lmp_clkoffset_res 
+0x6028 024566 beq lmp_max_power ,send_lmp_nopayload_reply 
+0x6029 024567 beq lmp_max_slot ,send_lmp_max_slot 
+0x602a 024568 beq lmp_max_slot_req ,send_lmp_max_slot_req 
+0x602b 024569 beq lmp_min_power ,send_lmp_nopayload_reply 
+0x602c 024570 beq lmp_slot_offset ,send_lmp_slot_offset 
+0x602d 024571 beq lmp_switch_req ,send_lmp_switch_req 
+0x602e 024572 beq lmp_sniff_req ,send_lmp_sniff_req 
+0x602f 024573 beq lmp_stop_encryption_req ,send_lmp_stop_encryption_req 
+0x6030 024574 beq lmp_timing_accuracy_req ,send_lmp_timing_accuracy_req 
+0x6031 024575 beq lmp_unsniff_req ,send_lmp_unsniff_req 
+0x6032 024576 beq lmp_encapsulated_header ,send_lmp_encapsulated_header 
+0x6033 024577 beq lmp_encapsulated_payload ,send_lmp_encapsulated_payload 
+0x6034 024578 beq lmp_simple_pairing_confirm ,send_lmp_simple_pairing_comfirm 
+0x6035 024579 beq lmp_simple_pairing_number ,send_lmp_simple_pairing_number 
+0x6036 024580 beq lmp_dhkey_check ,send_lmp_dhkey_check 
+0x6037 024581 beq lmp_auto_rate ,send_lmp_auto_rate 
+0x6038 024582 beq lmp_enc_key_size_mask_res ,send_lmp_enc_key_size_mask_res 
+0x6039 024584 beq lmp_clkoffset_req ,send_lmp_clkoffset_req 
+0x603a 024585 beq lmp_quality_of_service ,send_lmp_quality_of_service 
+0x603b 024586 beq lmp_test_activate ,send_lmp_test_activate 
+0x603c 024587 beq lmp_test_control ,send_lmp_test_control 
+:      024588 send_lmp_error:
+0x603d 024589 branch assert 
+0x603e 024590 rtn 
+:      024591 send_lmp_escape:
+0x603f 024592 beq lmp_ext_accepted ,send_lmpext_accepted 
+0x6040 024593 beq lmp_ext_features_res ,send_lmpext_features_res 
+0x6041 024594 beq lmp_not_accepted_ext ,send_lmpext_not_accepted 
+0x6042 024595 beq lmp_ext_features_req ,send_lmpext_features_req 
+0x6043 024596 beq lmp_packet_type_table_req ,send_lmpext_packet_type_table_req 
+0x6044 024597 beq lmp_pause_encryption_req ,send_lmpext_pause_encryption_req 
+0x6045 024598 beq lmp_io_cap_req ,send_lmp_io_cap_req 
+0x6046 024599 beq lmp_io_cap_res ,send_lmpext_io_cap_res 
+0x6047 024600 beq lmp_sniff_subrating_req ,send_lmpext_sniff_subrating_req 
+0x6048 024601 beq lmp_sniff_subrating_res ,send_lmpext_sniff_subrating_res 
+0x6049 024602 branch assert 
+:      024608 send_lmp_accepted:
+0x604a 024609 force 2 ,pdata 
+0x604b 024610 call msg_send_lmp 
+0x604c 024611 fetch 1 ,mem_lmi_opcode 
+0x604d 024612 istore 1 ,contw 
+0x604e 024613 call send_lmp_follow 
+0x604f 024614 bpatchx patch30_3 ,mem_patch30 
+0x6050 024615 fetch 1 ,mem_lmi_opcode 
+0x6051 024616 beq lmp_in_rand ,send_lmp_accepted_inrand 
+0x6052 024617 beq lmp_encryption_mode_req ,send_lmp_accepted_enc_mode 
+0x6053 024618 beq lmp_encryption_key_size_req ,send_lmp_accepted_enc_key 
+0x6054 024619 beq lmp_sniff_req ,send_lmp_accept_sniff_req 
+0x6055 024620 beq lmp_host_connection_req ,send_lmp_accepted_connection 
+0x6056 024621 beq lmp_dhkey_check ,send_lmp_accept_dhkey_check 
+0x6057 024622 beq lmp_start_encryption_req ,send_create_conn_start_l2cap_timer_sm 
+0x6058 024623 rtn 
+:      024625 send_create_conn_start_l2cap_timer_sm:
+0x6059 024626 fetch 1 ,mem_conn_sm 
+0x605a 024627 rtn blank 
+0x605b 024628 jam conn_sm_wait_done ,mem_conn_sm 
+0x605c 024629 setarg timer_enpt_waite 
+0x605d 024630 arg enpt_delay_timer ,queue 
+0x605e 024631 branch timer_init 
+:      024633 send_lmp_accept_sniff_req:
+0x605f 024634 branch sniff_init 
+:      024635 send_lmp_not_accepted:
+0x6060 024636 force 3 ,pdata 
+0x6061 024637 call msg_send_lmp 
+0x6062 024638 fetch 1 ,mem_lmi_opcode 
+0x6063 024639 beq lmp_au_rand ,send_not_accept_aurand 
+0x6064 024640 istore 1 ,contw 
+0x6065 024641 fetch 1 ,mem_lmo_reason 
+0x6066 024642 istore 1 ,contw 
+0x6067 024643 branch send_lmp_follow 
+:      024645 send_not_accept_aurand:
+0x6068 024646 istore 1 ,contw 
+0x6069 024647 fetch 1 ,mem_lmo_reason 
+0x606a 024648 istore 1 ,contw 
+0x606b 024649 arg mem_sres_tid ,temp 
+0x606c 024650 branch special_tid_store 
+:      024652 send_lmpext_accepted:
+0x606d 024653 force 4 ,queue 
+0x606e 024654 call send_lmpext 
+0x606f 024655 setarg lmp_escape 
+0x6070 024656 istore 1 ,contw 
+0x6071 024657 fetch 1 ,mem_lmi_opcode 
+0x6072 024658 set0 7 ,pdata 
+0x6073 024659 istore 1 ,contw 
+0x6074 024660 fetch 1 ,mem_lmi_opcode 
+0x6075 024661 branch send_lmp_follow 
+:      024663 send_lmpext_not_accepted:
+0x6076 024664 force 5 ,queue 
+0x6077 024665 call send_lmpext 
+0x6078 024666 setarg lmp_escape 
+0x6079 024667 istore 1 ,contw 
+0x607a 024668 fetch 1 ,mem_lmi_opcode 
+0x607b 024669 set0 7 ,pdata 
+0x607c 024670 istore 1 ,contw 
+0x607d 024671 fetch 1 ,mem_lmo_reason 
+0x607e 024672 istore 1 ,contw 
+0x607f 024673 branch send_lmp_follow 
+:      024676 send_lmp_accepted_inrand:
+0x6080 024677 call clear_linkkey 
+0x6081 024678 call tid_check 
+0x6082 024679 rtn true 
+0x6083 024680 branch lmp_generate_key 
+:      024682 send_lmp_accepted_enc_mode:
+0x6084 024683 fetch 1 ,mem_op 
+0x6085 024684 bbit1 op_start_enc ,send_lmp_accepted_enc_start 
+0x6086 024685 rtnbit0 op_stop_enc 
+0x6087 024686 jam lmp_stop_encryption_req ,mem_lmo_opcode2 
+0x6088 024687 set0 op_stop_enc ,pdata 
+0x6089 024688 call tid_reply 
+0x608a 024689 branch send_lmp_accepted_enc_exit 
+:      024690 send_lmp_accepted_enc_start:
+0x608b 024691 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 
+0x608c 024692 set0 op_start_enc ,pdata 
+:      024693 send_lmp_accepted_enc_exit:
+0x608d 024694 store 1 ,mem_op 
+0x608e 024695 rtn 
+:      024697 send_lmp_accepted_enc_key:
+0x608f 024698 call check_localsm 
+0x6090 024699 branch lmp_start_encryption ,true 
+0x6091 024700 rtn 
+:      024702 send_lmp_accepted_connection:
+0x6092 024703 jam lmp_packet_type_table_req ,mem_lmo_opcode2 
+0x6093 024705 fetch 1 ,mem_lmp_conn_state 
+0x6094 024706 set1 received_conn_req ,pdata 
+0x6095 024707 store 1 ,mem_lmp_conn_state 
+0x6096 024708 jam bt_evt_bb_connected ,mem_fifo_temp 
+0x6097 024709 branch ui_ipc_send_event 
+:      024712 send_lmp_accept_dhkey_check:
+0x6098 024713 rtn 
+:      024717 send_lmpext_features_res:
+0x6099 024718 force 12 ,queue 
+0x609a 024719 call send_lmpext 
+0x609b 024720 setarg 0x01 
+0x609c 024721 istore 1 ,contw 
+0x609d 024722 fetch 2 ,mem_lmpext_ssp_enable 
+0x609e 024723 istore 2 ,contw 
+0x609f 024724 setarg 0 
+0x60a0 024725 istore 3 ,contw 
+0x60a1 024726 setarg 0x00 
+0x60a2 024727 istore 4 ,contw 
+0x60a3 024728 branch send_lmp_reply 
+:      024729 send_lmpext_io_cap_res:
+0x60a4 024730 force 5 ,queue 
+0x60a5 024731 call send_lmpext 
+0x60a6 024732 fetch 3 ,mem_sp_iocap_local 
+0x60a7 024733 istore 3 ,contw 
+0x60a8 024734 call send_lmp_reply 
+0x60a9 024735 jam flag_pairing_state_pairing ,mem_flag_pairing_state 
+0x60aa 024736 fetch 1 ,mem_sp_iocap_local 
+0x60ab 024737 beq display_yesno ,responder_iocap_display_yesno 
+0x60ac 024738 beq keyboard_only ,responder_iocap_keyboard_only 
+0x60ad 024739 beq no_input_no_output ,responder_iocap_no_input_no_output 
+0x60ae 024740 rtn 
+:      024742 responder_iocap_keyboard_only:
+0x60af 024743 fetch 1 ,mem_sp_iocap_remote 
+0x60b0 024744 beq display_only ,responder_iocap_keyboard_only_initiator_iocap_display_only 
+0x60b1 024745 beq display_yesno ,responder_iocap_keyboard_only_initiator_iocap_display_yesno 
+0x60b2 024746 beq keyboard_only ,responder_iocap_keyboard_only_initiator_iocap_keyboard_only 
+0x60b3 024747 beq no_input_no_output ,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output 
+0x60b4 024748 rtn 
+:      024751 responder_iocap_display_yesno:
+0x60b5 024752 fetch 1 ,mem_sp_iocap_remote 
+0x60b6 024753 beq display_only ,responder_iocap_display_yesno_initiator_iocap_display_only 
+0x60b7 024754 beq display_yesno ,responder_iocap_display_yesno_initiator_iocap_display_yesno 
+0x60b8 024755 beq keyboard_only ,responder_iocap_display_yesno_initiator_iocap_keyboard_only 
+0x60b9 024756 beq no_input_no_output ,responder_iocap_display_yesno_initiator_iocap_no_input_no_output 
+0x60ba 024757 rtn 
+:      024760 responder_iocap_no_input_no_output:
+0x60bb 024761 fetch 1 ,mem_sp_iocap_remote 
+0x60bc 024762 beq display_only ,responder_iocap_no_input_no_output_initiator_iocap_display_only 
+0x60bd 024763 beq display_yesno ,responder_iocap_no_input_no_output_initiator_iocap_display_yesno 
+0x60be 024764 beq keyboard_only ,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only 
+0x60bf 024765 beq no_input_no_output ,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output 
+0x60c0 024766 rtn 
+:      024768 responder_iocap_keyboard_only_initiator_iocap_no_input_no_output:
+:      024769 responder_iocap_display_yesno_initiator_iocap_no_input_no_output:
+:      024770 responder_iocap_display_yesno_initiator_iocap_display_only:
+:      024771 responder_iocap_no_input_no_output_initiator_iocap_display_only:
+:      024772 responder_iocap_no_input_no_output_initiator_iocap_display_yesno:
+:      024773 responder_iocap_no_input_no_output_initiator_iocap_keyboard_only:
+:      024774 responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output:
+:      024775 set_ssp_mode_justwork:
+0x60c1 024776 jam ssp_mode_just_work_flag ,mem_ssp_mode_flag 
+0x60c2 024777 fetch 1 ,mem_classic_bt_flag 
+0x60c3 024778 bbit1 flag_ssp_reject_justwork ,app_bt_disconnect 
+0x60c4 024779 rtn 
+:      024781 responder_iocap_display_yesno_initiator_iocap_display_yesno:
+:      024782 set_ssp_mode_numeric_comparison:
+0x60c5 024783 jam ssp_mode_ssp_pin_flag ,mem_ssp_mode_flag 
+0x60c6 024784 rtn 
+:      024786 responder_iocap_keyboard_only_initiator_iocap_display_yesno:
+:      024787 responder_iocap_keyboard_only_initiator_iocap_keyboard_only:
+:      024788 responder_iocap_keyboard_only_initiator_iocap_display_only:
+:      024789 responder_iocap_display_yesno_initiator_iocap_keyboard_only:
+:      024790 set_ssp_mode_passkey:
+0x60c7 024791 jam ssp_mode_passkey_entry_flag ,mem_ssp_mode_flag 
+0x60c8 024792 rtn 
+:      024795 classic_bt_set_reject_justwork_flag:
+0x60c9 024796 arg flag_ssp_reject_justwork ,queue 
+0x60ca 024797 branch classic_bluetooth_set_flag 
+:      024799 classic_bt_clr_reject_justwork_flag:
+0x60cb 024800 arg flag_ssp_reject_justwork ,queue 
+0x60cc 024801 branch classic_bluetooth_clr_flag 
+:      024803 classic_bluetooth_set_flag:
+0x60cd 024804 fetch 1 ,mem_classic_bt_flag 
+0x60ce 024805 qset1 pdata 
+0x60cf 024806 store 1 ,mem_classic_bt_flag 
+0x60d0 024807 rtn 
+:      024809 classic_bluetooth_clr_flag:
+0x60d1 024810 fetch 1 ,mem_classic_bt_flag 
+0x60d2 024811 qset0 pdata 
+0x60d3 024812 store 1 ,mem_classic_bt_flag 
+0x60d4 024813 rtn 
+:      024816 send_lmp_io_cap_req:
+0x60d5 024817 force 5 ,queue 
+0x60d6 024818 call send_lmpext 
+0x60d7 024819 fetch 3 ,mem_sp_iocap_local 
+0x60d8 024820 istore 3 ,contw 
+0x60d9 024821 branch send_lmp_request 
+:      024824 send_lmpext_sniff_subrating_req:
+0x60da 024826 rtn 
+:      024827 send_lmpext_sniff_subrating_res:
+0x60db 024828 force 9 ,queue 
+0x60dc 024829 call send_lmpext 
+0x60dd 024830 fetch 1 ,mem_subsniff_rate 
+0x60de 024831 istore 1 ,contw 
+0x60df 024832 fetch 2 ,mem_subsniff_tcmax 
+0x60e0 024833 istore 2 ,contw 
+0x60e1 024834 fetch 4 ,mem_subsniff_instant 
+0x60e2 024835 istore 4 ,contw 
+0x60e3 024836 branch send_lmp_reply 
+:      024838 send_lmp_name_res:
+0x60e4 024839 force 17 ,pdata 
+0x60e5 024840 call msg_send_lmp 
+0x60e6 024841 fetch 1 ,mem_lmi_opcode 
+0x60e7 024842 copy pdata ,temp 
+0x60e8 024843 beq 0x00 ,send_lmp_name_res_offset_ok 
+0x60e9 024844 beq 0x0e ,send_lmp_name_res_offset_ok 
+0x60ea 024845 beq 0x1c ,send_lmp_name_res_offset_ok 
+0x60eb 024846 rtn 
+:      024847 send_lmp_name_res_offset_ok:
+0x60ec 024848 istore 1 ,contw 
+0x60ed 024849 fetch 1 ,mem_local_name_length 
+0x60ee 024850 istore 1 ,contw 
+0x60ef 024851 arg 14 ,loopcnt 
+0x60f0 024852 setarg mem_local_name 
+0x60f1 024853 iadd temp ,contr 
+0x60f2 024854 call memcpy 
+0x60f3 024855 branch send_lmp_reply 
+:      024858 send_lmp_timing_accuracy_res:
+0x60f4 024859 force 3 ,pdata 
+0x60f5 024860 call msg_send_lmp 
+0x60f6 024861 setarg 0x0114 
+0x60f7 024862 istore 2 ,contw 
+0x60f8 024863 branch send_lmp_reply 
+:      024865 send_lmp_clkoffset_res:
+0x60f9 024867 force 3 ,pdata 
+0x60fa 024868 call msg_send_lmp 
+0x60fb 024869 fetch 4 ,mem_clke_bt 
+0x60fc 024870 isub clkn_bt ,pdata 
+0x60fd 024871 branch send_lmp_clkoffset_res_master ,master 
+0x60fe 024872 sub pdata ,0 ,pdata 
+:      024873 send_lmp_clkoffset_res_master:
+0x60ff 024875 rshift2 pdata ,pdata 
+0x6100 024876 set0 15 ,pdata 
+0x6101 024877 istore 2 ,contw 
+0x6102 024878 branch send_lmp_reply 
+:      024880 send_lmp_version_res:
+0x6103 024881 force 6 ,pdata 
+0x6104 024882 call msg_send_lmp 
+0x6105 024883 fetch 5 ,mem_lmp_version 
+0x6106 024884 istore 5 ,contw 
+0x6107 024885 branch send_lmp_reply 
+:      024887 send_lmp_features_res:
+0x6108 024888 force 9 ,pdata 
+0x6109 024889 call msg_send_lmp 
+0x610a 024890 fetch 8 ,mem_features 
+0x610b 024891 istore 8 ,contw 
+0x610c 024892 branch send_lmp_reply 
+:      024899 send_lmpext_features_req:
+0x610d 024900 force 12 ,queue 
+0x610e 024901 call send_lmpext 
+0x610f 024902 setarg 0x01 
+0x6110 024903 istore 1 ,contw 
+0x6111 024904 fetch 2 ,mem_lmpext_ssp_enable 
+0x6112 024905 istore 2 ,contw 
+0x6113 024906 setarg 0 
+0x6114 024907 istore 3 ,contw 
+0x6115 024908 setarg 0x00 
+0x6116 024909 istore 4 ,contw 
+0x6117 024910 branch send_lmp_request 
+:      024912 send_lmpext_packet_type_table_req:
+0x6118 024913 force 3 ,queue 
+0x6119 024914 call send_lmpext 
+0x611a 024915 fetch 1 ,mem_ptt 
+0x611b 024916 istore 1 ,contw 
+0x611c 024917 disable user 
+0x611d 024918 call send_lmp_request 
+0x611e 024919 nrtn user 
+0x611f 024920 nrtn master 
+0x6120 024921 fetch 1 ,mem_afh_cfg 
+0x6121 024922 rtnbit0 afh_cfg_on 
+0x6122 024923 call afh_init 
+0x6123 024924 branch afh_open_all_channels 
+:      024927 ssp_enable:
+0x6124 024928 bpatchx patch30_4 ,mem_patch30 
+0x6125 024929 fetch 1 ,mem_features + 6 
+0x6126 024930 set1 param_featrue_ssp ,pdata 
+0x6127 024931 store 1 ,mem_features + 6 
+0x6128 024932 setarg param_lmpext_ssp_enable 
+0x6129 024933 store 2 ,mem_lmpext_ssp_enable 
+0x612a 024934 rtn 
+:      024936 ssp_disable:
+0x612b 024937 bpatchx patch30_5 ,mem_patch30 
+0x612c 024938 fetch 1 ,mem_features + 6 
+0x612d 024939 set0 param_featrue_ssp ,pdata 
+0x612e 024940 store 1 ,mem_features + 6 
+0x612f 024941 setarg 0 
+0x6130 024942 store 2 ,mem_lmpext_ssp_enable 
+0x6131 024943 rtn 
+:      024945 afh_init:
+0x6132 024946 jam 0x3 ,mem_afh_cfg 
+0x6133 024947 setarg 0 
+0x6134 024948 store 4 ,mem_afh_timer 
+0x6135 024949 arg mem_afh_map_lo ,contw 
+0x6136 024950 call afh_reset_map 
+0x6137 024951 arg mem_afh_map_new ,contw 
+0x6138 024952 call afh_reset_map 
+0x6139 024953 arg mem_afh_classify_channel_map ,contw 
+0x613a 024954 call afh_reset_map 
+0x613b 024955 branch afh_clear_error_counter 
+:      024956 afh_open_all_channels:
+0x613c 024957 arg mem_afh_map_new ,contw 
+0x613d 024958 call afh_reset_map 
+0x613e 024959 call afh_clear_error_counter 
+0x613f 024960 branch afh_set_send_flag 
+:      024963 afh_reset_map:
+0x6140 024964 setarg 0xffffff 
+0x6141 024965 istore 3 ,contw 
+0x6142 024966 istore 3 ,contw 
+0x6143 024967 istore 3 ,contw 
+0x6144 024968 setarg 0x7f 
+0x6145 024969 istore 1 ,contw 
+0x6146 024970 rtn 
+:      024971 afh_clear_error_counter:
+0x6147 024972 setarg 0 
+0x6148 024973 store 2 ,mem_afh_error_total 
+0x6149 024974 rtn 
+:      024975 afh_set_send_flag:
+0x614a 024976 fetch 1 ,mem_afh_cfg 
+0x614b 024977 set1 send_lmp_set_afh ,pdata 
+0x614c 024978 store 1 ,mem_afh_cfg 
+0x614d 024979 rtn 
+:      024982 send_lmpext_pause_encryption_req:
+0x614e 024983 force 2 ,queue 
+0x614f 024984 call send_lmpext 
+0x6150 024985 nbranch send_lmp_reply ,master 
+0x6151 024987 branch send_lmp_request 
+:      024991 send_lmp_detach:
+0x6152 024992 force 2 ,pdata 
+0x6153 024993 call msg_send_lmp 
+0x6154 024994 fetch 1 ,mem_disconn_reason_send 
+0x6155 024995 istore 1 ,contw 
+0x6156 024996 call send_lmp_request 
+:      024997 prepare_disconnect:
+0x6157 024998 fetch 1 ,mem_op 
+0x6158 024999 set1 op_disconn ,pdata 
+0x6159 025000 store 1 ,mem_op 
+0x615a 025001 jam 50 ,mem_conn_timer 
+0x615b 025002 rtn 
+:      025005 send_lmp_no_payload:
+0x615c 025006 force 1 ,pdata 
+0x615d 025007 call msg_send_lmp 
+0x615e 025008 branch send_lmp_request 
+:      025009 send_lmp_nopayload_reply:
+0x615f 025010 force 1 ,pdata 
+0x6160 025011 call msg_send_lmp 
+0x6161 025012 branch send_lmp_reply 
+:      025015 send_lmp_encryption_mode_req:
+0x6162 025016 force 2 ,pdata 
+0x6163 025017 call msg_send_lmp 
+0x6164 025018 fetch 1 ,mem_state_map 
+0x6165 025019 isolate0 smap_encryption ,pdata 
+0x6166 025020 setflag true ,0 ,pdata 
+0x6167 025021 and_into 1 ,pdata 
+0x6168 025022 istore 1 ,contw 
+0x6169 025023 branch send_lmp_request 
+:      025026 send_lmp_superto:
+0x616a 025027 force 3 ,pdata 
+0x616b 025028 call msg_send_lmp 
+0x616c 025029 fetch 2 ,mem_supervision_to 
+0x616d 025030 istore 2 ,contw 
+0x616e 025031 branch send_lmp_request 
+:      025033 send_lmp_name_req:
+0x616f 025034 jam 250 ,mem_conn_timer 
+0x6170 025035 force 2 ,pdata 
+0x6171 025036 call msg_send_lmp 
+0x6172 025037 fetch 1 ,mem_name_offset 
+0x6173 025038 istore 1 ,contw 
+0x6174 025039 branch send_lmp_request 
+:      025041 send_lmp_test_control:
+0x6175 025042 force 10 ,pdata 
+0x6176 025043 call msg_send_lmp 
+0x6177 025044 arg mem_temp_payload ,contr 
+0x6178 025045 force 9 ,loopcnt 
+:      025046 send_lmp_test_control_loop:
+0x6179 025047 ifetch 1 ,contr 
+0x617a 025048 xor_into 0x55 ,pdata 
+0x617b 025049 istore 1 ,contw 
+0x617c 025050 loop send_lmp_test_control_loop 
+0x617d 025051 branch send_lmp_request 
+:      025053 send_lmp_quality_of_service_req:
+0x617e 025054 branch send_lmp_request 
+:      025055 send_lmp_unit_key:
+0x617f 025056 branch send_lmp_request 
+:      025058 send_lmp_slot_offset:
+0x6180 025059 rtn master 
+0x6181 025060 call calc_slot_offset 
+0x6182 025061 force 9 ,pdata 
+0x6183 025062 call msg_send_lmp 
+0x6184 025063 fetch 2 ,mem_slot_offset 
+0x6185 025064 istore 2 ,contw 
+0x6186 025065 fetch 3 ,mem_lap 
+0x6187 025066 istore 3 ,contw 
+0x6188 025067 fetch 1 ,mem_uap 
+0x6189 025068 istore 1 ,contw 
+0x618a 025069 fetch 2 ,mem_nap 
+0x618b 025070 istore 2 ,contw 
+0x618c 025071 bmark0 mark_switch_initiated ,send_lmp_slot_offset_reply 
+0x618d 025072 set0 mark_switch_initiated ,mark 
+0x618e 025073 call send_lmp_request 
+0x618f 025074 jam lmp_switch_req ,mem_lmo_opcode2 
+0x6190 025075 rtn 
+:      025076 send_lmp_slot_offset_reply:
+0x6191 025077 call send_lmp_reply 
+0x6192 025078 jam lmp_accepted ,mem_lmo_opcode2 
+0x6193 025079 jam lmp_switch_req ,mem_lmi_opcode2 
+0x6194 025080 rtn 
+:      025082 send_lmp_switch_req:
+0x6195 025083 arg 0x200 ,temp 
+0x6196 025084 branch switch_on_native ,master 
+0x6197 025085 deposit clke_bt 
+0x6198 025086 branch switch_slack 
+:      025087 switch_on_native:
+0x6199 025088 deposit clkn_bt 
+:      025089 switch_slack:
+0x619a 025090 deposit bt_clk 
+0x619b 025091 iadd temp ,pdata 
+0x619c 025092 and_into 0x1fc ,pdata 
+0x619d 025093 store 4 ,mem_sniff_anchor 
+0x619e 025094 force 5 ,pdata 
+0x619f 025095 call msg_send_lmp 
+0x61a0 025096 fetch 4 ,mem_sniff_anchor 
+0x61a1 025097 rshift pdata ,pdata 
+0x61a2 025098 istore 4 ,contw 
+0x61a3 025099 branch send_lmp_request 
+:      025101 send_lmp_sniff_req:
+0x61a4 025102 force 10 ,pdata 
+0x61a5 025103 call msg_send_lmp 
+0x61a6 025104 arg mem_sniff_payload ,contr 
+0x61a7 025105 ifetch 9 ,contr 
+0x61a8 025106 istore 9 ,contw 
+0x61a9 025107 branch send_lmp_request 
+:      025110 send_lmp_timing_accuracy_req:
+0x61aa 025112 force 3 ,pdata 
+0x61ab 025113 call msg_send_lmp 
+0x61ac 025114 setarg 0x0114 
+0x61ad 025115 istore 2 ,contw 
+0x61ae 025116 branch send_lmp_request 
+:      025118 send_lmp_unsniff_req:
+0x61af 025120 force 1 ,pdata 
+0x61b0 025121 call msg_send_lmp 
+0x61b1 025130 branch send_lmp_request 
+:      025133 send_lmp_max_slot:
+0x61b2 025134 force 2 ,pdata 
+0x61b3 025135 call msg_send_lmp 
+0x61b4 025136 fetch 1 ,mem_max_slot 
+0x61b5 025137 istore 1 ,contw 
+0x61b6 025138 branch send_lmp_request 
+:      025141 send_lmp_max_slot_req:
+0x61b7 025142 force 2 ,pdata 
+0x61b8 025143 call msg_send_lmp 
+0x61b9 025144 setarg 0x05 
+0x61ba 025145 istore 1 ,contw 
+0x61bb 025146 branch send_lmp_request 
+:      025149 send_lmp_inc_power:
+0x61bc 025150 force 2 ,pdata 
+0x61bd 025151 call msg_send_lmp 
+0x61be 025152 setarg 0x00 
+0x61bf 025153 istore 1 ,contw 
+0x61c0 025154 branch send_lmp_request 
+:      025157 send_lmp_setup_complete_by_module:
+0x61c1 025158 jam lmp_max_slot_req ,mem_lmo_opcode2 
+0x61c2 025159 rtn 
+:      025160 send_lmp_setup_complete:
+0x61c3 025161 fetch 1 ,mem_device_option 
+0x61c4 025162 sub pdata ,dvc_op_module ,null 
+0x61c5 025163 call send_lmp_setup_complete_by_module ,zero 
+0x61c6 025164 fetch 1 ,mem_state 
+0x61c7 025165 set1 state_conn_comp ,pdata 
+0x61c8 025166 store 1 ,mem_state 
+0x61c9 025167 copy clkn_bt ,pdata 
+0x61ca 025168 store 4 ,mem_aurand_send_delay_time 
+0x61cb 025169 fetch 1 ,mem_lmp_conn_state 
+0x61cc 025170 bbit1 sent_setup_complete ,send_lmp_setup_complete_has_sent 
+0x61cd 025171 set1 sent_setup_complete ,pdata 
+0x61ce 025172 store 1 ,mem_lmp_conn_state 
+0x61cf 025173 jam bt_evt_setup_complete ,mem_fifo_temp 
+0x61d0 025174 call ui_ipc_send_event 
+0x61d1 025175 force 1 ,pdata 
+0x61d2 025176 call msg_send_lmp 
+0x61d3 025177 branch send_lmp_request 
+:      025178 send_lmp_setup_complete_has_sent:
+0x61d4 025179 jam 0 ,mem_lmp_to_send 
+0x61d5 025180 rtn 
+:      025182 send_lmp_version_req:
+0x61d6 025183 force 6 ,pdata 
+0x61d7 025184 call msg_send_lmp 
+0x61d8 025185 fetch 5 ,mem_lmp_version 
+0x61d9 025186 istore 5 ,contw 
+0x61da 025187 branch send_lmp_request 
+:      025189 send_lmp_features_req:
+0x61db 025190 force 9 ,pdata 
+0x61dc 025191 call msg_send_lmp 
+0x61dd 025192 fetch 8 ,mem_features 
+0x61de 025193 istore 8 ,contw 
+0x61df 025194 branch send_lmp_request 
+:      025196 sp_master_send_io_cap_get:
+0x61e0 025197 jam sp_flag_commit ,mem_master_sp_flag 
+0x61e1 025198 fetch 1 ,mem_sp_local_key_invalid 
+0x61e2 025199 rtnne sp_key_valid 
+0x61e3 025200 jam sp_master_stat_start_done ,mem_master_sp_state 
+0x61e4 025201 rtn 
+:      025203 sp_master_send_io_cap_send:
+0x61e5 025204 call tid_initiate 
+0x61e6 025205 jam lmp_io_cap_req ,mem_lmo_opcode2 
+0x61e7 025206 jam sp_stat_key_send ,mem_master_sp_state 
+0x61e8 025207 rtn 
+:      025210 sp_master_send_lmp_encapsulated_header:
+0x61e9 025211 call tid_initiate 
+0x61ea 025212 jam lmp_encapsulated_header ,mem_lmo_opcode2 
+0x61eb 025213 jam sp_stat_random_send ,mem_master_sp_state 
+0x61ec 025214 rtn 
+:      025216 sp_master_commitment_compare:
+0x61ed 025217 arg mem_sp_calc_result_high ,rega 
+0x61ee 025218 arg mem_sp_confirm_remote ,regb 
+0x61ef 025219 arg 16 ,loopcnt 
+0x61f0 025220 call string_compare 
+0x61f1 025221 branch sp_master_commitment_compare_success ,zero 
+0x61f2 025222 jam sp_stat_null ,mem_master_sp_state 
+0x61f3 025223 call master_clear_mem_master_sp_flag 
+0x61f4 025224 jam pdu_not_allowed ,mem_lmo_reason2 
+0x61f5 025225 jam lmp_simple_pairing_number ,mem_lmi_opcode2 
+0x61f6 025226 branch reject_lmp_packet 
+:      025227 sp_master_commitment_compare_success:
+0x61f7 025228 jam sp_stat_confirm_calc ,mem_master_sp_state 
+0x61f8 025229 call master_set_mem_master_sp_flag 
+0x61f9 025230 jam lmp_simple_pairing_number ,mem_lmi_opcode2 
+0x61fa 025231 branch accept_lmp_msg 
+:      025235 sp_master_send_lmp_simple_pairing_number:
+0x61fb 025236 jam lmp_simple_pairing_number ,mem_lmo_opcode2 
+0x61fc 025237 rtn 
+:      025241 sp_send_lmp_encapsulated_header:
+0x61fd 025244 jam lmp_encapsulated_header ,mem_lmo_opcode2 
+0x61fe 025246 rtn 
+:      025252 send_lmp_encapsulated_header:
+0x61ff 025253 jam 0 ,mem_sp_local_key_send_count 
+0x6200 025254 force 4 ,pdata 
+0x6201 025255 call msg_send_lmp 
+0x6202 025256 force encapsulated_major_type_p192 ,pdata 
+0x6203 025257 istore 1 ,contw 
+0x6204 025258 force encapsulated_minor_type_p192 ,pdata 
+0x6205 025259 istore 1 ,contw 
+0x6206 025260 force encapsulated_len_p192 ,pdata 
+0x6207 025261 istore 1 ,contw 
+0x6208 025262 call check_localsm 
+0x6209 025263 branch send_lmp_request ,true 
+0x620a 025264 branch send_lmp_reply 
+:      025266 send_lmp_encapsulated_payload:
+0x620b 025268 force 17 ,pdata 
+0x620c 025269 call msg_send_lmp 
+0x620d 025270 fetch 1 ,mem_sp_local_key_send_count 
+0x620e 025271 arg mem_sp_pubkey_local ,contr 
+0x620f 025272 iadd contr ,contr 
+0x6210 025273 ifetch 8 ,contr 
+0x6211 025274 istore 8 ,contw 
+0x6212 025275 ifetch 8 ,contr 
+0x6213 025276 istore 8 ,contw 
+0x6214 025277 fetch 1 ,mem_sp_local_key_send_count 
+0x6215 025278 increase 16 ,pdata 
+0x6216 025279 store 1 ,mem_sp_local_key_send_count 
+0x6217 025280 call check_localsm 
+0x6218 025281 branch send_lmp_request ,true 
+0x6219 025282 branch send_lmp_reply 
+:      025285 sp_send_lmp_simple_pairing_comfirm:
+0x621a 025286 jam sp_stat_random_recv ,mem_sp_state 
+0x621b 025287 jam lmp_simple_pairing_confirm ,mem_lmo_opcode2 
+0x621c 025288 rtn 
+:      025289 send_lmp_simple_pairing_comfirm:
+0x621d 025292 force 17 ,pdata 
+0x621e 025293 call msg_send_lmp 
+0x621f 025294 arg mem_sp_calc_result_high ,contr 
+0x6220 025295 ifetch 8 ,contr 
+0x6221 025296 istore 8 ,contw 
+0x6222 025297 ifetch 8 ,contr 
+0x6223 025298 istore 8 ,contw 
+0x6224 025299 branch send_lmp_reply 
+:      025301 sp_send_lmp_simple_pairing_number:
+0x6225 025302 jam lmp_simple_pairing_number ,mem_lmo_opcode2 
+0x6226 025303 rtn 
+:      025305 send_lmp_simple_pairing_number:
+0x6227 025307 call check_localsm 
+0x6228 025308 call sp_local_random_key_generator ,true 
+0x6229 025309 force 17 ,pdata 
+0x622a 025310 call msg_send_lmp 
+0x622b 025311 arg mem_sp_random_local ,contr 
+0x622c 025312 ifetch 8 ,contr 
+0x622d 025313 istore 8 ,contw 
+0x622e 025314 ifetch 8 ,contr 
+0x622f 025315 istore 8 ,contw 
+0x6230 025316 call check_localsm 
+0x6231 025317 nbranch send_lmp_reply ,true 
+0x6232 025318 branch send_lmp_request ,true 
+:      025320 master_sp_sm_end:
+0x6233 025322 jam sp_stat_done ,mem_master_sp_state 
+:      025323 sp_aurand_send:
+0x6234 025324 call tid_initiate 
+0x6235 025325 jam lmp_au_rand ,mem_lmo_opcode2 
+0x6236 025326 call check_localsm_master 
+0x6237 025327 branch sp_master_key_prarm_push ,true 
+0x6238 025328 branch sp_link_key_prarm_push 
+:      025329 master_sp_send_lmp_dhkey_check:
+0x6239 025330 call tid_reply 
+:      025331 sp_send_lmp_dhkey_check:
+0x623a 025332 jam lmp_dhkey_check ,mem_lmo_opcode2 
+0x623b 025333 rtn 
+:      025334 send_lmp_dhkey_check:
+0x623c 025336 force 17 ,pdata 
+0x623d 025337 call msg_send_lmp 
+0x623e 025338 arg mem_sp_calc_result_high ,contr 
+0x623f 025339 ifetch 8 ,contr 
+0x6240 025340 istore 8 ,contw 
+0x6241 025341 ifetch 8 ,contr 
+0x6242 025342 istore 8 ,contw 
+0x6243 025343 call check_localsm 
+0x6244 025344 nbranch send_lmp_reply ,true 
+0x6245 025345 branch send_lmp_request ,true 
+:      025347 send_lmp_enc_key_size_mask_res:
+0x6246 025348 force 3 ,pdata 
+0x6247 025349 call msg_send_lmp 
+0x6248 025350 setarg 0xfffe 
+0x6249 025351 istore 2 ,contw 
+0x624a 025352 branch send_lmp_reply 
+:      025354 send_lmp_auto_rate:
+0x624b 025355 branch send_lmp_request 
+:      025356 send_lmp_clkoffset_req:
+0x624c 025357 branch send_lmp_request 
+:      025358 send_lmp_quality_of_service:
+0x624d 025359 branch send_lmp_request 
+:      025360 send_lmp_test_activate:
+0x624e 025361 branch send_lmp_request 
+:      025366 send_lmp_comb_key:
+0x624f 025367 call generate_random_number 
+0x6250 025368 arg mem_lap ,rega 
+0x6251 025369 call generate_linkkey 
+0x6252 025370 force 17 ,pdata 
+0x6253 025371 call msg_send_lmp 
+0x6254 025372 arg mem_kinit ,rega 
+0x6255 025373 arg mem_random_number ,regb 
+0x6256 025374 call xor16 
+0x6257 025375 nbranch send_lmp_follow ,master 
+0x6258 025376 branch send_lmp_tid 
+:      025378 send_lmp_inrand:
+0x6259 025379 call generate_random_number 
+0x625a 025380 arg mem_plap ,rega 
+0x625b 025381 call generate_kinit 
+:      025382 send_lmp_rand:
+0x625c 025383 force 17 ,pdata 
+0x625d 025384 call msg_send_lmp 
+0x625e 025385 arg mem_random_number ,contr 
+0x625f 025386 call memcpy16 
+0x6260 025387 fetch 1 ,mem_conn_sm 
+0x6261 025388 beq conn_sm_auth_wait ,send_lmp_request 
+0x6262 025389 beq conn_sm_pairing_wait ,send_lmp_request 
+0x6263 025390 branch send_lmp_tid 
+:      025392 send_lmp_aurand:
+0x6264 025393 fetch 1 ,mem_pairing_auth 
+0x6265 025394 branch send_lmp_aurand_notpairing ,blank 
+0x6266 025395 call check_localsm 
+0x6267 025396 call tid_initiate ,true 
+0x6268 025397 ncall tid_reply ,true 
+0x6269 025398 branch send_lmp_aurand_common 
+:      025399 send_lmp_aurand_notpairing:
+0x626a 025400 call tid_initiate 
+:      025401 send_lmp_aurand_common:
+0x626b 025402 call generate_random_number 
+0x626c 025403 branch send_lmp_rand 
+:      025405 send_lmp_sres:
+0x626d 025406 arg mem_lap ,rega 
+0x626e 025407 call function_e1 
+0x626f 025408 force 5 ,pdata 
+0x6270 025409 call msg_send_lmp 
+0x6271 025410 fetch 4 ,mem_input_store 
+0x6272 025411 istore 4 ,contw 
+0x6273 025412 arg mem_sres_tid ,temp 
+0x6274 025413 call special_tid_store 
+0x6275 025414 call copy_aco 
+0x6276 025415 call check_localsm 
+0x6277 025416 branch send_lmp_sres_master ,true 
+0x6278 025417 jam done_encryp ,mem_wait_encryption 
+0x6279 025418 fetch 1 ,mem_pairing_auth 
+0x627a 025419 rtn blank 
+0x627b 025420 jam lmp_au_rand ,mem_lmo_opcode2 
+:      025421 send_lmp_sres_master:
+0x627c 025422 fetch 1 ,mem_link_key_exists 
+0x627d 025423 rtn blank 
+:      025424 send_lmp_sres_startenc:
+0x627e 025425 call check_localsm 
+0x627f 025426 nbranch send_lmp_sres_startenc_slave ,true 
+0x6280 025427 fetch 1 ,mem_auth_enable 
+0x6281 025428 rtn blank 
+0x6282 025429 jam lmp_encryption_mode_req ,mem_lmo_opcode2 
+0x6283 025430 rtn 
+:      025431 send_lmp_sres_startenc_slave:
+0x6284 025432 rtnmark0 mark_slave_in_rand_accepted 
+0x6285 025433 set0 mark_slave_in_rand_accepted ,mark 
+0x6286 025434 jam lmp_encryption_mode_req ,mem_lmo_opcode2 
+0x6287 025435 rtn 
+:      025439 send_lmp_start_encryption:
+0x6288 025440 call generate_random_number 
+0x6289 025441 call function_e3 
+0x628a 025442 force 17 ,pdata 
+0x628b 025443 call msg_send_lmp 
+0x628c 025444 arg mem_random_number ,contr 
+0x628d 025445 call memcpy16 
+0x628e 025446 branch send_lmp_tid 
+:      025448 send_lmp_stop_encryption_req:
+0x628f 025449 force 1 ,pdata 
+0x6290 025450 call msg_send_lmp 
+0x6291 025451 branch send_lmp_tid 
+:      025453 send_lmp_encryption_key_size_req:
+0x6292 025454 force 2 ,pdata 
+0x6293 025455 call msg_send_lmp 
+0x6294 025456 force 16 ,pdata 
+0x6295 025457 istore 1 ,contw 
+0x6296 025458 store 1 ,mem_key_size 
+0x6297 025459 branch send_lmp_tid 
+:      025461 msg_send_lmp:
+0x6298 025463 lshift3 pdata ,pdata 
+0x6299 025464 or_into 0x07 ,pdata 
+0x629a 025465 store 1 ,mem_lmo_header_length 
+0x629b 025466 arg 17 ,loopcnt 
+0x629c 025467 arg mem_lmo_payload ,contw 
+0x629d 025468 call clear_mem 
+0x629e 025469 arg mem_lmo_payload ,contw 
+0x629f 025470 rtn 
+:      025472 send_lmpext:
+0x62a0 025473 and pdata ,0x7f ,rega 
+0x62a1 025474 jam lmp_escape ,mem_lmp_to_send 
+0x62a2 025475 deposit queue 
+0x62a3 025476 call msg_send_lmp 
+0x62a4 025477 deposit rega 
+0x62a5 025478 istore 1 ,contw 
+0x62a6 025479 rtn 
+:      025481 send_lmp_follow:
+0x62a7 025482 fetch 1 ,mem_lmp_to_send 
+0x62a8 025483 lshift pdata ,pdata 
+0x62a9 025484 fetcht 1 ,mem_state_map 
+0x62aa 025485 isolate1 smap_lmptid ,temp 
+0x62ab 025486 setflag true ,0 ,pdata 
+0x62ac 025487 branch send_lmp_exit 
+:      025490 send_lmp_tid:
+0x62ad 025491 fetcht 1 ,mem_state_map 
+0x62ae 025492 and_into 1 ,temp 
+0x62af 025493 branch send_lmp_end 
+:      025495 send_lmp_reply:
+0x62b0 025496 force 0 ,temp 
+0x62b1 025497 branch send_lmp_end 
+:      025499 send_lmp_request:
+0x62b2 025500 force 1 ,temp 
+:      025501 send_lmp_end:
+0x62b3 025502 fetch 1 ,mem_lmp_to_send 
+0x62b4 025503 lshift pdata ,pdata 
+0x62b5 025504 setflag master ,0 ,pdata 
+0x62b6 025505 ixor temp ,pdata 
+:      025506 send_lmp_exit:
+0x62b7 025507 store 1 ,mem_lmo_header_opcode 
+0x62b8 025508 jam 0 ,mem_lmp_to_send 
+0x62b9 025509 call lmo_fifo_process_lmo0empty 
+0x62ba 025510 enable user 
+0x62bb 025511 rtn 
+:      025514 lmo_fifo_check:
+0x62bc 025515 fetch 1 ,mem_lmo_opcode2 
+0x62bd 025516 rtn blank 
+0x62be 025517 call lmo_fifo_process 
+0x62bf 025518 fetch 1 ,mem_lmo_opcode2 
+0x62c0 025519 rtn 
+:      025521 lmo_fifo_process:
+0x62c1 025522 bpatchx patch30_6 ,mem_patch30 
+0x62c2 025523 fetch 1 ,mem_lmp_to_send 
+0x62c3 025524 branch lmo_fifo_process_lmo0empty ,blank 
+0x62c4 025525 fetch 1 ,mem_lmo_opcode1 
+0x62c5 025526 nrtn blank 
+0x62c6 025527 branch lmo_fifo_process_lmo2to1 
+:      025528 lmo_fifo_process_lmo0empty:
+0x62c7 025529 fetch 1 ,mem_lmo_opcode1 
+0x62c8 025530 branch lmo_fifo_process_lmo1_empty ,blank 
+0x62c9 025531 fetch 3 ,mem_lmo_opcode1 
+0x62ca 025532 store 3 ,mem_lmp_to_send 
+0x62cb 025533 fetcht 1 ,mem_lmo_tid1 
+0x62cc 025534 fetch 1 ,mem_state_map 
+0x62cd 025535 set0 smap_lmptid ,pdata 
+0x62ce 025536 ior temp ,pdata 
+0x62cf 025537 store 1 ,mem_state_map 
+0x62d0 025538 jam 0 ,mem_lmo_opcode1 
+:      025539 lmo_fifo_process_lmo2to1:
+0x62d1 025540 fetch 1 ,mem_lmo_opcode2 
+0x62d2 025541 rtn blank 
+0x62d3 025542 fetch 4 ,mem_lmo_opcode2 
+0x62d4 025543 store 4 ,mem_lmo_opcode1 
+0x62d5 025544 jam 0 ,mem_lmo_opcode2 
+0x62d6 025545 rtn 
+:      025546 lmo_fifo_process_lmo1_empty:
+0x62d7 025547 fetch 1 ,mem_lmo_opcode2 
+0x62d8 025548 rtn blank 
+0x62d9 025549 fetch 3 ,mem_lmo_opcode2 
+0x62da 025550 store 3 ,mem_lmp_to_send 
+0x62db 025551 fetcht 1 ,mem_lmo_tid2 
+0x62dc 025552 fetch 1 ,mem_state_map 
+0x62dd 025553 set0 smap_lmptid ,pdata 
+0x62de 025554 ior temp ,pdata 
+0x62df 025555 store 1 ,mem_state_map 
+0x62e0 025556 jam 0 ,mem_lmo_opcode2 
+0x62e1 025557 rtn 
+:      025560 special_tid_store:
+0x62e2 025561 bpatchx patch30_7 ,mem_patch30 
+0x62e3 025562 fetch 1 ,mem_state_map 
+0x62e4 025563 copy pdata ,regc 
+0x62e5 025564 ifetch 1 ,temp 
+0x62e6 025565 call pop_tid_follow 
+0x62e7 025566 call send_lmp_follow 
+0x62e8 025567 copy regc ,pdata 
+0x62e9 025568 store 1 ,mem_state_map 
+0x62ea 025569 rtn 
+:      025571 tid_reply:
+0x62eb 025572 fetcht 1 ,mem_state_map 
+0x62ec 025573 set0 smap_lmptidinit ,temp 
+0x62ed 025574 storet 1 ,mem_state_map 
+0x62ee 025575 rtn 
+:      025577 tid_initiate:
+0x62ef 025578 fetcht 1 ,mem_state_map 
+0x62f0 025579 set1 smap_lmptidinit ,temp 
+0x62f1 025580 storet 1 ,mem_state_map 
+0x62f2 025581 rtn 
+:      025584 tid_check:
+0x62f3 025585 nsetflag master ,smap_lmptid ,pdata 
+0x62f4 025586 fetcht 1 ,mem_state_map 
+0x62f5 025587 ixor temp ,pdata 
+0x62f6 025588 isolate1 smap_lmptid ,pdata 
+0x62f7 025589 rtn 
+:      025592 tid_set_reply:
+0x62f8 025593 fetch 1 ,mem_state_map 
+0x62f9 025594 setflag master ,smap_lmptid ,pdata 
+0x62fa 025595 store 1 ,mem_state_map 
+0x62fb 025596 rtn 
+:      025599 check_localsm:
+0x62fc 025600 fetch 1 ,mem_sp_localsm 
+0x62fd 025601 compare local_statemachine ,pdata ,0x7f 
+0x62fe 025602 rtn 
+:      025603 setlocalsm_master:
+0x62ff 025604 fetch 1 ,mem_sp_localsm 
+0x6300 025605 set1 7 ,pdata 
+0x6301 025606 store 1 ,mem_sp_localsm 
+0x6302 025607 rtn 
+:      025608 setlocalsm_slave:
+0x6303 025609 fetch 1 ,mem_sp_localsm 
+0x6304 025610 set0 7 ,pdata 
+0x6305 025611 store 1 ,mem_sp_localsm 
+0x6306 025612 rtn 
+:      025613 check_localsm_master:
+0x6307 025614 fetch 1 ,mem_sp_localsm 
+0x6308 025615 isolate1 7 ,pdata 
+0x6309 025616 store 1 ,mem_sp_localsm 
+0x630a 025617 rtn 
+:      025619 generate_random_number:
+0x630b 025621 arg mem_random_number ,contw 
+:      025622 generate_random:
+0x630c 025623 force 16 ,loopcnt 
+:      025624 generate_random_another:
+:      025625 generate_random_loop:
+0x630d 025626 random pdata 
+0x630e 025627 istore 1 ,contw 
+0x630f 025628 loop generate_random_another 
+0x6310 025629 rtn 
+:      025631 generate_linkkey:
+0x6311 025632 call function_e21 
+0x6312 025633 arg mem_link_key ,rega 
+0x6313 025634 arg mem_input_store ,regb 
+0x6314 025635 ifetch 8 ,rega 
+0x6315 025636 fetcht 1 ,mem_state 
+0x6316 025637 nsetflag blank ,state_combkey ,temp 
+0x6317 025638 storet 1 ,mem_state 
+0x6318 025639 copy rega ,contw 
+0x6319 025640 call xor16 
+0x631a 025641 branch generate_linkkey_continue 
+:      025647 process_conn_sm:
+0x631b 025649 bpatchx patch31_0 ,mem_patch31 
+0x631c 025651 call lmo_fifo_check 
+0x631d 025652 nrtn blank 
+:      025653 process_conn_sm_continue:
+0x631e 025654 fetch 1 ,mem_conn_sm 
+0x631f 025655 rtn blank 
+0x6320 025659 beq conn_sm_send_conn_req ,host_create_conn_send_conn_req 
+0x6321 025660 beq conn_sm_wait_conn_accept ,host_create_conn_wait_accept 
+0x6322 025661 beq conn_sm_send_features ,host_create_conn_send_features 
+0x6323 025662 beq conn_sm_wait_features_res ,host_create_conn_waiting 
+0x6324 025663 beq conn_sm_send_switch ,host_create_conn_send_switch 
+0x6325 025664 beq conn_sm_auth_pair ,host_create_conn_auth_pair 
+0x6326 025665 beq conn_sm_auth_pair_wait ,host_create_conn_auth_pair_wait 
+0x6327 025666 beq conn_sm_encrypt ,host_create_conn_encrypt 
+0x6328 025667 beq conn_sm_encrypt_wait ,host_create_conn_encrypt_wait 
+0x6329 025668 beq conn_sm_encrypt_wait_clear ,host_create_conn_encrypt_wait_clear 
+0x632a 025669 beq conn_sm_send_setup_complete ,host_create_conn_send_setup_complete 
+0x632b 025670 beq conn_sm_wait_setup_complete ,host_create_conn_wait_setup_complete 
+0x632c 025671 beq conn_sm_detach_delay ,host_create_conn_master_detach 
+0x632d 025672 beq conn_sm_send_version ,host_create_conn_send_version 
+0x632e 025673 beq conn_sm_wait_version ,host_create_conn_waiting 
+0x632f 025674 beq conn_sm_wait_switch_after_host_connection ,host_creat_conn_wait_switch 
+0x6330 025675 beq conn_sm_send_features_ext ,host_creat_conn_send_feat_ext 
+0x6331 025676 beq conn_sm_wait_features_ext ,host_create_conn_waiting 
+0x6332 025677 beq conn_sm_pairing ,host_create_conn_pairing 
+0x6333 025678 beq conn_sm_pairing_wait ,host_create_conn_pairing_wait 
+0x6334 025679 beq conn_sm_auth ,host_create_conn_auth 
+0x6335 025680 beq conn_sm_auth_wait ,host_create_conn_auth_wait 
+0x6336 025681 beq conn_sm_done ,host_create_conn_done 
+0x6337 025682 beq conn_sm_wait_done ,host_create_conn_done_wait 
+0x6338 025683 jam conn_sm_standby ,mem_conn_sm 
+0x6339 025685 rtn 
+:      025686 host_create_conn_done:
+0x633a 025687 fetch 1 ,mem_lmp_conn_state 
+0x633b 025688 rtnbit0 received_setup_complete 
+0x633c 025689 rtnbit0 sent_setup_complete 
+0x633d 025690 jam conn_sm_standby ,mem_conn_sm 
+0x633e 025691 call host_conn_judge_encrypt 
+0x633f 025692 branch scheduler_start_upper_sm 
+:      025694 host_conn_judge_encrypt:
+0x6340 025695 fetch 1 ,mem_connection_options 
+0x6341 025696 rtnbit0 connection_encrypt 
+0x6342 025697 jam conn_sm_encrypt_wait ,mem_conn_sm 
+0x6343 025698 rtn 
+:      025700 host_create_conn_done_wait:
+0x6344 025701 arg enpt_delay_timer ,queue 
+0x6345 025702 call timer_check 
+0x6346 025703 nrtn blank 
+0x6347 025704 jam conn_sm_done ,mem_conn_sm 
+0x6348 025705 rtn 
+:      025707 host_create_conn_auth:
+0x6349 025708 fetch 1 ,mem_connection_options 
+0x634a 025709 set0 connection_auth ,pdata 
+0x634b 025710 store 1 ,mem_connection_options 
+0x634c 025711 jam conn_sm_auth_wait ,mem_conn_sm 
+0x634d 025712 jam lmp_au_rand ,mem_lmo_opcode2 
+0x634e 025713 rtn 
+:      025714 host_create_conn_auth_wait:
+0x634f 025715 rtn 
+:      025716 host_create_conn_pairing:
+0x6350 025717 fetch 1 ,mem_pincode_state 
+0x6351 025718 rtnne pincode_state_pincode_ready 
+0x6352 025719 call host_auth 
+0x6353 025720 jam conn_sm_pairing_wait ,mem_conn_sm 
+0x6354 025721 rtn 
+:      025723 host_create_conn_pairing_wait:
+0x6355 025724 rtn 
+:      025725 host_creat_conn_send_feat_ext:
+0x6356 025726 jam conn_sm_wait_features_ext ,mem_conn_sm 
+0x6357 025727 jam lmp_ext_features_req ,mem_lmo_opcode2 
+0x6358 025728 rtn 
+:      025729 host_create_conn_send_version:
+0x6359 025730 jam conn_sm_wait_version ,mem_conn_sm 
+0x635a 025731 jam lmp_version_req ,mem_lmo_opcode2 
+0x635b 025732 rtn 
+:      025734 host_creat_conn_wait_switch:
+0x635c 025735 fetch 1 ,mem_switch_flag 
+0x635d 025736 rtneq switch_flag_init 
+0x635e 025737 beq switch_flag_accept ,host_create_conn_switch_accept 
+0x635f 025738 arg switch_wait_timer ,queue 
+0x6360 025739 call timer_check 
+0x6361 025740 nrtn blank 
+0x6362 025741 jam switch_flag_init ,mem_switch_flag 
+0x6363 025742 branch host_create_conn_switch 
+:      025743 host_create_conn_switch_accept:
+0x6364 025744 rtn master 
+0x6365 025745 branch host_create_conn_auth_pair 
+:      025747 host_create_conn_send_features:
+0x6366 025748 jam conn_sm_wait_features_res ,mem_conn_sm 
+0x6367 025749 jam lmp_features_req ,mem_lmo_opcode2 
+0x6368 025750 rtn 
+:      025751 host_create_conn_send_switch:
+0x6369 025752 jam lmp_switch_req ,mem_lmo_opcode2 
+0x636a 025753 set1 mark_switch_initiated ,mark 
+0x636b 025754 jam conn_sm_wait_conn_accept ,mem_conn_sm 
+0x636c 025755 setarg 0x1ff 
+0x636d 025756 store 2 ,mem_soft_timer 
+0x636e 025757 rtn 
+:      025758 host_create_conn_send_conn_req:
+0x636f 025759 jam conn_sm_wait_conn_accept ,mem_conn_sm 
+0x6370 025760 jam 0xff ,mem_soft_timer 
+0x6371 025761 set0 mark_reconn_recieve_switch ,mark 
+0x6372 025762 jam lmp_host_connection_req ,mem_lmo_opcode2 
+0x6373 025763 branch init_lmp_reinit 
+:      025764 host_create_conn_wait_accept:
+0x6374 025765 rtnmark1 mark_reconn_recieve_switch 
+0x6375 025766 fetch 2 ,mem_soft_timer 
+0x6376 025767 sub pdata ,1 ,pdata 
+0x6377 025768 branch host_create_conn_resend ,zero 
+0x6378 025769 store 2 ,mem_soft_timer 
+0x6379 025770 rtn 
+:      025771 host_create_conn_resend:
+0x637a 025772 jam conn_sm_send_switch ,mem_conn_sm 
+0x637b 025773 rtn 
+:      025774 host_create_conn_waiting:
+0x637c 025776 rtn 
+:      025778 host_create_conn_switch:
+0x637d 025779 fetch 1 ,mem_lmp_conn_state 
+0x637e 025780 rtnbit0 sent_setup_complete 
+0x637f 025781 rtnbit0 received_setup_complete 
+0x6380 025782 fetch 1 ,mem_connection_options 
+0x6381 025783 set0 connection_switch ,pdata 
+0x6382 025784 store 1 ,mem_connection_options 
+0x6383 025785 jam lmp_switch_req ,mem_lmo_opcode2 
+0x6384 025786 jam conn_sm_wait_switch_after_host_connection ,mem_conn_sm 
+0x6385 025787 rtn 
+:      025789 host_create_conn_send_setup_complete:
+0x6386 025790 jam conn_sm_wait_setup_complete ,mem_conn_sm 
+0x6387 025791 jam lmp_setup_complete ,mem_lmo_opcode2 
+0x6388 025792 rtn 
+:      025794 host_create_conn_wait_setup_complete:
+0x6389 025795 fetch 1 ,mem_lmp_conn_state 
+0x638a 025796 rtnbit0 received_setup_complete 
+0x638b 025797 jam conn_sm_standby ,mem_conn_sm 
+0x638c 025799 rtn 
+:      025800 host_create_conn_wait_setup_complete_rtn:
+0x638d 025801 jam conn_sm_auth_pair ,mem_conn_sm 
+0x638e 025802 rtn 
+:      025804 host_create_conn_master_detach:
+0x638f 025805 fetch 1 ,mem_soft_timer 
+0x6390 025806 increase -1 ,pdata 
+0x6391 025807 branch host_create_conn_send_detach ,blank 
+0x6392 025808 store 1 ,mem_soft_timer 
+0x6393 025809 rtn 
+:      025810 host_create_conn_send_detach:
+0x6394 025811 jam lmp_detach ,mem_lmo_opcode2 
+0x6395 025812 jam local_host ,mem_disconn_reason_send 
+0x6396 025813 jam 0 ,mem_conn_sm 
+0x6397 025814 rtn 
+:      025815 host_create_conn_auth_pair:
+0x6398 025817 fetch 1 ,mem_connection_options 
+0x6399 025818 bbit1 connection_switch ,host_create_conn_switch 
+0x639a 025819 bbit1 connection_auth ,host_create_conn_auth_pair_true 
+:      025820 host_create_conn_sm_done:
+0x639b 025821 jam conn_sm_done ,mem_conn_sm 
+0x639c 025822 rtn 
+:      025823 host_create_conn_auth_pair_true:
+0x639d 025824 fetch 1 ,mem_link_key_exists 
+0x639e 025825 branch host_create_conn_auth_pair_nokey ,blank 
+0x639f 025826 fetch 1 ,mem_lmp_conn_state 
+0x63a0 025827 rtnbit0 sent_setup_complete 
+0x63a1 025828 rtnbit0 received_setup_complete 
+0x63a2 025829 fetch 4 ,mem_aurand_send_delay_time 
+0x63a3 025830 arg 100 ,temp 
+0x63a4 025831 iadd temp ,temp 
+0x63a5 025832 copy clkn_bt ,pdata 
+0x63a6 025833 isub temp ,null 
+0x63a7 025834 nrtn positive 
+0x63a8 025835 branch host_create_conn_auth 
+:      025839 host_create_conn_auth_pair_nokey:
+0x63a9 025840 jam conn_sm_pairing ,mem_conn_sm 
+0x63aa 025841 jam 4 ,mem_pin_length 
+0x63ab 025842 setarg 0x3030 
+0x63ac 025843 store 2 ,mem_pin 
+0x63ad 025844 istore 2 ,contw 
+0x63ae 025845 jam pincode_state_pincode_ready ,mem_pincode_state 
+0x63af 025846 branch host_create_conn_pairing 
+:      025848 host_create_conn_auth_pair_wait:
+0x63b0 025849 rtn 
+:      025850 host_create_conn_encrypt:
+0x63b1 025851 fetch 1 ,mem_connection_options 
+0x63b2 025852 bbit1 connection_encrypt ,host_create_conn_encrypt_start 
+0x63b3 025853 jam conn_sm_done ,mem_conn_sm 
+0x63b4 025854 rtn 
+:      025856 host_create_conn_encrypt_start:
+0x63b5 025857 fetch 1 ,mem_connection_options 
+0x63b6 025858 set0 connection_encrypt ,pdata 
+0x63b7 025859 store 1 ,mem_connection_options 
+0x63b8 025860 jam lmp_encryption_mode_req ,mem_lmo_opcode2 
+0x63b9 025861 rtn 
+:      025863 host_create_conn_encrypt_wait:
+0x63ba 025864 fetch 1 ,mem_wait_encryption 
+0x63bb 025865 rtn blank 
+0x63bc 025866 jam conn_sm_standby ,mem_conn_sm 
+0x63bd 025867 branch host_create_conn_encrypt_start 
+:      025869 host_create_conn_encrypt_wait_clear:
+0x63be 025870 jam conn_sm_send_setup_complete ,mem_conn_sm 
+0x63bf 025871 rtn 
+:      025873 host_auth:
+0x63c0 025874 fetch 1 ,mem_op 
+0x63c1 025875 bbit1 op_inrand_req ,remote_auth 
+0x63c2 025876 call tid_initiate 
+0x63c3 025877 jam lmp_in_rand ,mem_lmo_opcode2 
+0x63c4 025878 branch cmd_exit 
+:      025879 remote_auth:
+0x63c5 025880 fetch 1 ,mem_op 
+0x63c6 025881 set0 op_inrand_req ,pdata 
+0x63c7 025882 store 1 ,mem_op 
+0x63c8 025883 call lmp_accept_inrand 
+0x63c9 025884 call tid_set_reply 
+0x63ca 025885 branch cmd_exit 
+:      025887 pincode_reinit:
+0x63cb 025888 setarg 4 
+0x63cc 025889 store 1 ,mem_pin_length 
+0x63cd 025890 setarg 0x3030 
+0x63ce 025891 istore 2 ,contw 
+0x63cf 025892 istore 2 ,contw 
+0x63d0 025893 rtn 
+:      025899 twspi_reset:
+0x63d1 025900 bpatchx patch31_4 ,mem_patch31 
+0x63d2 025901 hfetch 1 ,core_gpio_oe3 
+0x63d3 025902 arg 0x06 ,temp 
+0x63d4 025903 ior temp ,pdata 
+0x63d5 025904 hstore 1 ,core_gpio_oe3 
+0x63d6 025905 hfetch 1 ,core_gpio_out3 
+0x63d7 025906 ior temp ,pdata 
+0x63d8 025907 hstore 1 ,core_gpio_out3 
+0x63d9 025908 call twspi_disable 
+0x63da 025909 hfetch 1 ,core_gpio_out3 
+0x63db 025910 set0 1 ,pdata 
+0x63dc 025911 set0 2 ,pdata 
+0x63dd 025912 hstore 1 ,core_gpio_out3 
+0x63de 025913 nop 30 
+0x63df 025914 branch twspi_enable 
+:      025916 twspi_reset2:
+0x63e0 025917 hfetch 1 ,core_gpio_oe3 
+0x63e1 025918 arg 0xc0 ,temp 
+0x63e2 025919 ior temp ,pdata 
+0x63e3 025920 hstore 1 ,core_gpio_oe3 
+0x63e4 025921 hfetch 1 ,core_gpio_out3 
+0x63e5 025922 ior temp ,pdata 
+0x63e6 025923 hstore 1 ,core_gpio_out3 
+0x63e7 025924 call twspi_disable 
+0x63e8 025925 hfetch 1 ,core_gpio_out3 
+0x63e9 025926 set0 6 ,pdata 
+0x63ea 025927 set0 7 ,pdata 
+0x63eb 025928 hstore 1 ,core_gpio_out3 
+0x63ec 025929 nop 30 
+0x63ed 025930 branch twspi_enable2 
+:      025932 twspi_disable:
+0x63ee 025933 hfetch 1 ,core_gpio_sel1 
+0x63ef 025934 and pdata ,0xfc ,pdata 
+0x63f0 025935 hstore 1 ,core_gpio_sel1 
+0x63f1 025936 rtn 
+:      025937 twspi_enable:
+0x63f2 025938 hfetch 1 ,core_gpio_sel1 
+0x63f3 025939 or pdata ,0x01 ,pdata 
+0x63f4 025940 hstore 1 ,core_gpio_sel1 
+0x63f5 025941 rtn 
+:      025942 twspi_enable2:
+0x63f6 025943 hfetch 1 ,core_gpio_sel1 
+0x63f7 025944 or pdata ,0x03 ,pdata 
+0x63f8 025945 set0 4 ,pdata 
+0x63f9 025946 hstore 1 ,core_gpio_sel1 
+0x63fa 025947 rtn 
+:      025951 sensor_read:
+0x63fb 025952 copy pdata ,regb 
+0x63fc 025953 call spi_ncs_enable 
+0x63fd 025954 nop 100 
+0x63fe 025955 copy regb ,pdata 
+0x63ff 025956 call twspi_read 
+0x6400 025957 copy pdata ,regb 
+0x6401 025958 call spi_ncs_disable 
+0x6402 025959 nop 100 
+0x6403 025960 copy regb ,pdata 
+0x6404 025961 rtn 
+:      025963 sensor_write:
+0x6405 025964 copy pdata ,regb 
+0x6406 025965 call spi_ncs_enable 
+0x6407 025966 nop 100 
+0x6408 025967 copy regb ,pdata 
+0x6409 025968 call twspi_write 
+0x640a 025969 call spi_ncs_disable 
+0x640b 025970 nop 100 
+0x640c 025971 rtn 
+:      025974 spi_ncs_gpio_init:
+0x640d 025975 fetcht 1 ,mem_spi_ncs_gpio 
+0x640e 025976 branch gpio_config_output 
+:      025979 spi_ncs_enable:
+0x640f 025980 fetcht 1 ,mem_spi_ncs_gpio 
+0x6410 025981 branch gpio_out_active 
+:      025984 spi_ncs_disable:
+0x6411 025985 fetcht 1 ,mem_spi_ncs_gpio 
+0x6412 025986 branch gpio_out_inactive 
+:      025989 twspi_write:
+0x6413 025990 branch spid_write_reg 
+:      025992 twspi_read:
+0x6414 025993 branch spid_read_reg 
+:      026000 read_function_aes:
+0x6415 026001 nbranch read_function ,user 
+0x6416 026002 hfetch 1 ,core_gpio_key2 
+0x6417 026003 or_into 0x2 ,pdata 
+0x6418 026004 hstore 1 ,core_gpio_key2 
+:      026005 read_function:
+0x6419 026006 copy temp ,null 
+0x641a 026007 branch read_fuction_zero ,zero 
+0x641b 026008 copy regc ,pc 
+:      026009 read_fuction_zero:
+0x641c 026010 isolate0 0 ,null 
+0x641d 026011 branch set_ucode_status 
+:      026014 get_block_header:
+0x641e 026015 force 4 ,temp 
+:      026016 get_block_header0:
+0x641f 026017 arg mem_ucode_buf ,rega 
+0x6420 026018 hfetch 1 ,core_gpio_key2 
+0x6421 026019 and_into 0xfd ,pdata 
+0x6422 026020 hstore 1 ,core_gpio_key2 
+0x6423 026021 call read_function 
+0x6424 026022 arg 0x55aa ,rega 
+0x6425 026023 fetch 2 ,mem_ucode_buf 
+0x6426 026024 ifetcht 2 ,contr 
+0x6427 026025 isub rega ,null 
+0x6428 026026 rtn 
+:      026028 read_first_block:
+0x6429 026029 arg 2 ,temp 
+0x642a 026030 arg mem_ucode_ptr ,rega 
+0x642b 026031 call read_function 
+0x642c 026032 fetch 2 ,mem_ucode_ptr 
+0x642d 026033 store 2 ,mem_addr_mi 
+0x642e 026034 call get_iv ,user 
+0x642f 026035 rtn 
+:      026037 get_iv:
+0x6430 026038 arg 16 ,temp 
+0x6431 026039 arg mem_ucode_keybuf ,rega 
+0x6432 026040 hfetch 1 ,core_gpio_key2 
+0x6433 026041 and_into 0xfd ,pdata 
+0x6434 026042 hstore 1 ,core_gpio_key2 
+0x6435 026043 call read_function 
+0x6436 026044 arg mem_ucode_keybuf ,contr 
+0x6437 026045 arg 16 ,loopcnt 
+0x6438 026046 call aes_load_data 
+0x6439 026047 call aes_init 
+0x643a 026048 call aes_clear_data 
+0x643b 026049 branch do_aes_cbc 
+:      026051 load_storage:
+0x643c 026052 disable match 
+0x643d 026053 call get_block_header 
+0x643e 026054 nrtn zero 
+0x643f 026055 enable match 
+0x6440 026056 jam 0x80 ,core_ucode_ctrl 
+0x6441 026057 jam 0 ,core_ucode_hi 
+0x6442 026058 jam 0 ,core_ucode_low 
+0x6443 026059 arg core_ucode_data ,rega 
+0x6444 026060 call read_function_aes 
+0x6445 026061 jam 0x0 ,core_ucode_ctrl 
+:      026062 load_storage_loop:
+0x6446 026063 arg 6 ,temp 
+0x6447 026064 call get_block_header0 
+0x6448 026065 nrtn zero 
+0x6449 026066 ifetch 2 ,contr 
+0x644a 026067 iforce rega 
+0x644b 026068 call read_function 
+0x644c 026069 branch load_storage_loop 
+:      026073 reload_eeprom:
+0x644d 026074 call clean_mem 
+0x644e 026075 setarg 0x1000 
+0x644f 026076 store 2 ,mem_addr_mi 
+0x6450 026077 arg iicd_read_eep ,regc 
+0x6451 026078 arg 2 ,loopcnt 
+:      026079 reload_eeprom_loop:
+0x6452 026080 call get_block_header 
+0x6453 026081 nrtn zero 
+0x6454 026082 fetch 2 ,mem_addr_mi 
+0x6455 026083 byteswap pdata ,pdata 
+0x6456 026084 iadd temp ,pdata 
+0x6457 026085 byteswap pdata ,pdata 
+0x6458 026086 store 2 ,mem_addr_mi 
+0x6459 026087 loop reload_eeprom_loop 
+0x645a 026088 branch load_storage_loop 
+:      026090 loadcode:
+0x645b 026091 call clean_mem 
+0x645c 026092 disable user 
+0x645d 026093 call otp_enable_chgpump 
+0x645e 026094 setarg otp_ucode_flag 
+0x645f 026095 arg mem_otp_ucode_flag ,rega 
+0x6460 026096 arg 2 ,temp 
+0x6461 026097 call otpd_read_data 
+0x6462 026098 fetch 2 ,mem_otp_ucode_flag 
+0x6463 026099 bbit0 otp_uflag_aes ,loadcode_otp 
+0x6464 026100 jam 0x25 ,core_clkoff 
+0x6465 026101 setarg otp_ucode_aeskey 
+0x6466 026102 arg mem_ucode_keybuf ,rega 
+0x6467 026103 arg 16 ,temp 
+0x6468 026104 call otpd_read_data 
+0x6469 026105 jam lock_otp ,core_misc_ctrl 
+0x646a 026106 set1 mark_otp_encrypt ,mark 
+0x646b 026107 arg mem_ucode_keybuf ,contr 
+0x646c 026108 call load_key 
+0x646d 026109 enable user 
+:      026110 loadcode_otp:
+0x646e 026111 jam 0 ,mem_loadcode_times 
+:      026112 loadcode_otp_2:
+0x646f 026113 call loadcode_check_times 
+0x6470 026114 fetch 2 ,mem_otp_ucode_flag 
+0x6471 026115 byteswap pdata ,pdata 
+0x6472 026116 arg 0x7ff ,temp 
+0x6473 026117 iand temp ,pdata 
+0x6474 026118 branch loadcode_iic ,zero 
+0x6475 026119 call otp_set_addr 
+0x6476 026120 arg otpd_read_code ,regc 
+0x6477 026121 call get_iv ,user 
+0x6478 026122 call load_storage 
+0x6479 026123 fetch 1 ,mem_ucode_status 
+0x647a 026124 bbit0 0 ,loadcode_otp_2 
+:      026126 loadcode_iic:
+0x647b 026127 call otp_disable_chgpump 
+0x647c 026128 jam 0 ,mem_loadcode_times 
+:      026129 loadcode_iic_2:
+0x647d 026130 call loadcode_check_times 
+0x647e 026131 call clear_eeprom_size_2k 
+0x647f 026132 fetch 1 ,mem_otp_ucode_flag 
+0x6480 026133 bbit1 otp_uflag_skip_eep ,loadcode_spi 
+0x6481 026134 call loadcode_iic_by_eeprom 
+0x6482 026135 nbranch loadcode_iic_eeprom_2k ,match 
+0x6483 026136 fetch 1 ,mem_ucode_status 
+0x6484 026137 bbit0 0 ,loadcode_iic_2 
+0x6485 026138 branch loadcode_hci 
+:      026139 loadcode_iic_eeprom_2k:
+0x6486 026140 call set_eeprom_size_2k 
+0x6487 026141 fetch 1 ,mem_otp_ucode_flag 
+0x6488 026142 bbit1 otp_uflag_skip_eep ,loadcode_spi 
+0x6489 026143 call loadcode_iic_by_eeprom 
+0x648a 026144 nbranch loadcode_spi ,match 
+0x648b 026145 fetch 1 ,mem_ucode_status 
+0x648c 026146 bbit0 0 ,loadcode_iic_2 
+0x648d 026147 branch loadcode_hci 
+:      026149 loadcode_spi:
+0x648e 026150 jam 0 ,mem_loadcode_times 
+:      026151 loadcode_spi_2:
+0x648f 026152 call loadcode_check_times 
+0x6490 026153 fetch 1 ,mem_otp_ucode_flag 
+0x6491 026154 bbit1 otp_uflag_skip_flash ,loadcode_hci 
+0x6492 026155 setarg 0x0 
+0x6493 026156 store 3 ,mem_addr_hi 
+0x6494 026157 call spid_init_flash 
+0x6495 026158 arg spid_load_flash ,regc 
+0x6496 026159 call read_first_block 
+0x6497 026160 call load_storage 
+0x6498 026161 nbranch loadcode_hci ,match 
+0x6499 026162 fetch 1 ,mem_ucode_status 
+0x649a 026163 bbit0 0 ,loadcode_spi_2 
+:      026165 loadcode_hci:
+0x649b 026166 bmark1 mark_otp_encrypt ,loadcode_hci_enc 
+0x649c 026167 call clear_key_buf 
+:      026168 loadcode_hci_enc:
+0x649d 026169 fetch 1 ,mem_otp_ucode_flag 
+0x649e 026170 bbit0 otp_uflag_hci ,clear_key_buf 
+0x649f 026171 jam 0x21 ,core_clkoff 
+0x64a0 026172 call hci_init 
+:      026173 loadcode_hci_loop:
+0x64a1 026174 call hci_rx_packet 
+0x64a2 026175 branch loadcode_hci_loop 
+:      026177 clear_key_buf:
+0x64a3 026178 setarg 0 
+0x64a4 026179 store 8 ,mem_ucode_keybuf 
+0x64a5 026180 store 8 ,mem_ucode_keybuf + 8 
+0x64a6 026181 force regidx_key ,regext_index 
+0x64a7 026182 call aes_clear 
+0x64a8 026183 jam 0x21 ,core_clkoff 
+0x64a9 026184 rtn 
+:      026187 loadcode_iic_by_eeprom:
+0x64aa 026188 setarg 0x0 
+0x64ab 026189 store 2 ,mem_addr_mi 
+0x64ac 026190 arg iicd_read_eep ,regc 
+0x64ad 026191 call iicd_init_12m 
+0x64ae 026192 call read_first_block 
+0x64af 026193 branch load_storage 
+:      026196 loadcode_check_times:
+0x64b0 026197 fetch 1 ,mem_loadcode_times 
+0x64b1 026198 increase 1 ,pdata 
+0x64b2 026199 sub pdata ,3 ,null 
+0x64b3 026200 nbranch loadcode_error ,positive 
+0x64b4 026201 store 1 ,mem_loadcode_times 
+0x64b5 026202 rtn 
+:      026204 loadcode_error:
+0x64b6 026205 call clear_key_buf 
+0x64b7 026206 call ice_break 
+0x64b8 026207 rtn 
+:      026211 set_ucode_status:
+0x64b9 026212 fetch 1 ,mem_ucode_status 
+0x64ba 026213 lshift pdata ,pdata 
+0x64bb 026214 setflag true ,0 ,pdata 
+0x64bc 026215 isolate0 15 ,rega 
+0x64bd 026216 rtn true 
+0x64be 026217 store 1 ,mem_ucode_status 
+0x64bf 026218 rtn 
+:      026221 decrypt_code:
+0x64c0 026222 hfetch 1 ,core_gpio_key2 
+0x64c1 026223 rtnbit0 1 
+0x64c2 026224 branch decrypt_code_skip 
+:      026225 decrypt_code_loop:
+0x64c3 026226 hfetch 1 ,core_dma_status 
+0x64c4 026227 qisolate1 pdata 
+0x64c5 026228 rtn true 
+:      026229 decrypt_code_skip:
+0x64c6 026230 hfetch 1 ,core_misc_status 
+0x64c7 026231 bbit0 1 ,decrypt_code_loop 
+0x64c8 026232 call do_aes_cbc 
+0x64c9 026233 branch decrypt_code_loop 
+:      026237 load_ucode:
+0x64ca 026238 fetch 2 ,mem_patch_ptr 
+0x64cb 026239 rtn blank 
+0x64cc 026240 jam 0x80 ,core_ucode_ctrl 
+0x64cd 026241 jam 0 ,core_ucode_hi 
+0x64ce 026242 jam 0 ,core_ucode_low 
+0x64cf 026243 fetcht 2 ,mem_patch_len 
+0x64d0 026244 lshift2 temp ,loopcnt 
+0x64d1 026245 iforce contr 
+:      026246 load_ucode_loop:
+0x64d2 026247 ifetch 1 ,contr 
+0x64d3 026248 hstore 1 ,core_ucode_data 
+0x64d4 026249 loop load_ucode_loop 
+0x64d5 026250 jam 0x0 ,core_ucode_ctrl 
+0x64d6 026251 rtn 
+:      026256 spid_init:
+0x64d7 026257 bpatchx patch31_5 ,mem_patch31 
+0x64d8 026258 call spid_init_common 
+0x64d9 026259 branch twspi_enable 
+:      026261 spid_init2:
+0x64da 026262 call spid_init_common 
+0x64db 026263 call twspi_disable 
+0x64dc 026264 branch twspi_enable2 
+:      026266 spid_init_common:
+0x64dd 026267 fetch 1 ,mem_spi_init_clk 
+0x64de 026268 hstore 1 ,core_spid_ctrl 
+0x64df 026269 fetch 1 ,mem_spi_init_delay_time 
+0x64e0 026270 hstore 1 ,core_spid_delay 
+0x64e1 026271 setarg mem_spid_tbuf 
+0x64e2 026272 hstore 2 ,core_spid_txaddr 
+0x64e3 026273 setarg mem_spid_rbuf 
+0x64e4 026274 hstore 2 ,core_spid_rxaddr 
+0x64e5 026275 branch twspi_disable 
+:      026277 spid_reset:
+0x64e6 026278 hfetch 1 ,core_spid_ctrl 
+0x64e7 026279 set1 7 ,pdata 
+0x64e8 026280 hstore 1 ,core_spid_ctrl 
+0x64e9 026281 set0 7 ,pdata 
+0x64ea 026282 hstore 1 ,core_spid_ctrl 
+0x64eb 026283 rtn 
+:      026287 spid_write_reg:
+0x64ec 026288 set1 7 ,pdata 
+0x64ed 026289 store 2 ,mem_spid_tbuf 
+0x64ee 026290 bpatchx patch31_6 ,mem_patch31 
+0x64ef 026291 jam 2 ,core_spid_txlen 
+0x64f0 026292 jam 0 ,core_spid_rxlen 
+0x64f1 026293 jam spid_start ,core_misc_ctrl 
+0x64f2 026294 branch wait_spid_done 
+:      026297 spid_read_reg:
+0x64f3 026298 force 1 ,temp 
+:      026300 spid_read_regs:
+0x64f4 026302 store 1 ,mem_spid_tbuf 
+0x64f5 026303 bpatchx patch31_7 ,mem_patch31 
+0x64f6 026304 jam 1 ,core_spid_txlen 
+0x64f7 026305 hstoret 2 ,core_spid_rxlen 
+0x64f8 026306 jam spid_start ,core_misc_ctrl 
+0x64f9 026307 call wait_spid_done 
+0x64fa 026308 fetch 1 ,mem_spid_rbuf 
+0x64fb 026309 rtn 
+:      026311 wait_spid_done:
+0x64fc 026312 fetch 2 ,mem_afh_error_total 
+0x64fd 026313 increase 1 ,pdata 
+0x64fe 026314 store 2 ,mem_afh_error_total 
+0x64ff 026315 hfetch 1 ,core_dma_status 
+0x6500 026316 bbit0 spid_done ,wait_spid_done 
+0x6501 026317 rtn 
+:      026319 spid_init_flash:
+0x6502 026320 jam 0x40 ,core_spid_ctrl 
+0x6503 026321 jam 0x0 ,core_spid_delay 
+0x6504 026322 hfetch 1 ,core_gpio_sel1 
+0x6505 026323 set0 0 ,pdata 
+0x6506 026324 set1 1 ,pdata 
+0x6507 026325 hstore 1 ,core_gpio_sel1 
+0x6508 026326 setarg 0 
+0x6509 026327 store 4 ,mem_spid_tbuf 
+0x650a 026328 rtn 
+:      026331 spid_unlock_flash:
+0x650b 026332 setarg 0 
+0x650c 026333 hstore 2 ,core_spid_rxlen 
+0x650d 026334 setarg 1 
+0x650e 026335 hstore 2 ,core_spid_txlen 
+0x650f 026336 setarg mem_spid_tbuf 
+0x6510 026337 hstore 2 ,core_spid_txaddr 
+0x6511 026338 jam 6 ,mem_spid_tbuf 
+0x6512 026339 jam spid_start ,core_misc_ctrl 
+0x6513 026340 branch wait_spid_done 
+:      026355 flash_write:
+0x6514 026356 disable user 
+0x6515 026357 copy pdata ,regb 
+0x6516 026358 fetch 1 ,mem_spi_write_flash_sm 
+0x6517 026359 rtnne flash_sm_no_buys 
+0x6518 026360 enable user 
+0x6519 026361 copy regb ,pdata 
+0x651a 026362 branch flash_write_start 
+:      026365 flash_write_spi_sm_timer:
+0x651b 026366 fetch 1 ,mem_spi_write_flash_sm 
+0x651c 026367 beq flash_sm_start ,flash_write_start 
+0x651d 026368 beq flash_sm_erase_sector ,flash_erase_sector 
+0x651e 026369 beq flash_sm_wait_erase_sector ,flash_wait_erase_sector 
+0x651f 026370 beq flash_sm_write_data ,flash_write_data 
+0x6520 026371 beq flash_sm_wait_write_data ,flash_wait_write_data 
+0x6521 026372 rtn 
+:      026374 flash_write_start:
+0x6522 026375 store 3 ,mem_spi_write_addr 
+0x6523 026376 copy rega ,pdata 
+0x6524 026377 store 2 ,mem_spi_write_ptr 
+0x6525 026378 storet 2 ,mem_spi_write_len 
+0x6526 026379 jam flash_sm_erase_sector ,mem_spi_write_flash_sm 
+0x6527 026380 branch spid_init_flash 
+:      026381 flash_erase_sector:
+0x6528 026382 call spid_init_flash 
+0x6529 026383 jam flash_sm_wait_erase_sector ,mem_spi_write_flash_sm 
+0x652a 026384 call spid_unlock_flash 
+0x652b 026385 arg mem_spid_tbuf ,rega 
+0x652c 026386 fetch 3 ,mem_spi_write_addr 
+0x652d 026387 jam 4 ,core_spid_txlen 
+0x652e 026388 arg flash_command_sector_erase ,temp 
+0x652f 026389 branch spid_write_flash_common 
+:      026391 flash_wait_erase_sector:
+0x6530 026392 call spid_init_flash 
+0x6531 026393 call spid_unlock_flash 
+0x6532 026394 setarg flash_read_satus 
+0x6533 026395 call spid_read_reg 
+0x6534 026396 rtnbit1 flash_status_wip 
+0x6535 026397 jam flash_sm_write_data ,mem_spi_write_flash_sm 
+0x6536 026398 rtn 
+:      026399 flash_write_data:
+0x6537 026400 call spid_init_flash 
+0x6538 026401 jam flash_sm_wait_write_data ,mem_spi_write_flash_sm 
+0x6539 026402 call spid_unlock_flash 
+0x653a 026403 call flash_data_preserve 
+0x653b 026404 call spid_write_flash 
+0x653c 026405 branch flash_data_recover 
+:      026406 flash_wait_write_data:
+0x653d 026407 call spid_init_flash 
+0x653e 026408 call spid_unlock_flash 
+0x653f 026409 setarg flash_read_satus 
+0x6540 026410 call spid_read_reg 
+0x6541 026411 rtnbit1 flash_status_wip 
+0x6542 026412 jam flash_sm_no_buys ,mem_spi_write_flash_sm 
+0x6543 026413 fetch 2 ,mem_cb_spi_flash_write_complate 
+0x6544 026414 branch callback_func 
+:      026415 flash_data_recover:
+0x6545 026416 fetch 4 ,mem_temp 
+0x6546 026417 fetcht 2 ,mem_spi_write_ptr 
+0x6547 026418 increase -4 ,temp 
+0x6548 026419 istore 4 ,temp 
+0x6549 026420 rtn 
+:      026421 flash_data_preserve:
+0x654a 026422 fetcht 2 ,mem_spi_write_ptr 
+0x654b 026423 copy temp ,rega 
+0x654c 026424 increase -4 ,temp 
+0x654d 026425 ifetch 4 ,temp 
+0x654e 026426 store 4 ,mem_temp 
+0x654f 026427 fetcht 2 ,mem_spi_write_len 
+0x6550 026428 fetch 3 ,mem_spi_write_addr 
+0x6551 026429 rtn 
+:      026433 spid_write_flash:
+0x6552 026434 increase 4 ,temp 
+0x6553 026435 hstoret 2 ,core_spid_txlen 
+0x6554 026436 arg flash_command_write_data ,temp 
+0x6555 026437 increase -4 ,rega 
+:      026438 spid_write_flash_common:
+0x6556 026440 istoret 1 ,rega 
+0x6557 026441 rshift16 pdata ,temp 
+0x6558 026442 istoret 1 ,contw 
+0x6559 026443 rshift8 pdata ,temp 
+0x655a 026444 istoret 1 ,contw 
+0x655b 026445 istore 1 ,contw 
+0x655c 026446 deposit rega 
+0x655d 026447 hstore 2 ,core_spid_txaddr 
+0x655e 026448 setarg 0 
+0x655f 026449 hstore 2 ,core_spid_rxlen 
+0x6560 026450 jam spid_start ,core_misc_ctrl 
+0x6561 026451 branch wait_spid_done 
+:      026455 spid_read_flash:
+0x6562 026456 hstoret 2 ,core_spid_rxlen 
+0x6563 026457 rshift16 pdata ,temp 
+0x6564 026458 storet 1 ,mem_addr_hi 
+0x6565 026459 rshift8 pdata ,temp 
+0x6566 026460 storet 1 ,mem_addr_mi 
+0x6567 026461 store 1 ,mem_addr_lo 
+0x6568 026462 setarg 4 
+0x6569 026463 hstore 2 ,core_spid_txlen 
+0x656a 026464 jam flash_command_read_data ,mem_spid_tbuf 
+0x656b 026465 setarg mem_spid_tbuf 
+0x656c 026466 hstore 2 ,core_spid_txaddr 
+0x656d 026467 deposit rega 
+0x656e 026468 hstore 2 ,core_spid_rxaddr 
+0x656f 026469 hfetch 1 ,core_spid_ctrl 
+0x6570 026470 isolate0 15 ,rega 
+0x6571 026471 setflag true ,6 ,pdata 
+0x6572 026472 hstore 1 ,core_spid_ctrl 
+0x6573 026473 jam spid_start ,core_misc_ctrl 
+:      026474 spi_read_flash_wait:
+0x6574 026475 hfetch 1 ,core_dma_status 
+0x6575 026476 bbit1 7 ,spi_read_flash_wait 
+0x6576 026477 arg spid_done ,queue 
+0x6577 026478 branch wait_spid_done 
+:      026482 spid_load_flash:
+0x6578 026483 hstoret 2 ,core_spid_rxlen 
+0x6579 026484 setarg 4 
+0x657a 026485 hstore 2 ,core_spid_txlen 
+0x657b 026486 jam 3 ,mem_spid_tbuf 
+0x657c 026487 setarg mem_spid_tbuf 
+0x657d 026488 hstore 2 ,core_spid_txaddr 
+0x657e 026489 deposit rega 
+0x657f 026490 hstore 2 ,core_spid_rxaddr 
+0x6580 026491 hfetch 1 ,core_spid_ctrl 
+0x6581 026492 isolate0 15 ,rega 
+0x6582 026493 setflag true ,6 ,pdata 
+0x6583 026494 hstore 1 ,core_spid_ctrl 
+0x6584 026495 jam spid_start ,core_misc_ctrl 
+:      026496 spi_load_flash_wait:
+0x6585 026497 hfetch 1 ,core_dma_status 
+0x6586 026498 bbit1 7 ,spi_load_flash_wait 
+0x6587 026499 arg spid_done ,queue 
+0x6588 026500 call decrypt_code 
+0x6589 026501 call wait_spid_done 
+0x658a 026502 isolate1 spid_crcok ,pdata 
+0x658b 026503 call set_ucode_status 
+0x658c 026504 fetch 1 ,mem_addr_hi 
+0x658d 026505 lshift16 pdata ,regb 
+0x658e 026506 fetch 1 ,mem_addr_mi 
+0x658f 026507 lshift8 pdata ,pdata 
+0x6590 026508 ior regb ,regb 
+0x6591 026509 fetch 1 ,mem_addr_lo 
+0x6592 026510 ior regb ,pdata 
+0x6593 026511 iadd temp ,pdata 
+0x6594 026512 store 1 ,mem_addr_lo 
+0x6595 026513 rshift8 pdata ,pdata 
+0x6596 026514 store 1 ,mem_addr_mi 
+0x6597 026515 rshift8 pdata ,pdata 
+0x6598 026516 store 1 ,mem_addr_hi 
+0x6599 026517 rtn 
+:      026522 soft_reset_chip:
+0x659a 026523 jam 1 ,core_reset 
+0x659b 026524 rtn 
+:      026530 iic_init_390k:
+0x659c 026531 jam 12 ,core_iicd_scl_low 
+0x659d 026532 jam 13 ,core_iicd_scl_high 
+0x659e 026533 jam 13 ,core_iicd_start_setup 
+0x659f 026534 jam 13 ,core_iicd_start_hold 
+0x65a0 026535 jam 13 ,core_iicd_stop_setup 
+0x65a1 026536 jam 12 ,core_iicd_data_setup 
+0x65a2 026537 branch iicd_init_gpio 
+:      026540 iicd_init_12m:
+0x65a3 026541 jam 5 ,core_iicd_scl_low 
+0x65a4 026542 jam 7 ,core_iicd_scl_high 
+0x65a5 026543 jam 7 ,core_iicd_start_setup 
+0x65a6 026544 jam 7 ,core_iicd_start_hold 
+0x65a7 026545 jam 7 ,core_iicd_stop_setup 
+0x65a8 026546 jam 5 ,core_iicd_data_setup 
+:      026547 iicd_init_gpio:
+0x65a9 026548 hfetch 1 ,core_gpio_pu3 
+0x65aa 026549 or_into 0xc0 ,pdata 
+0x65ab 026550 hstore 1 ,core_gpio_pu3 
+0x65ac 026551 hfetch 1 ,core_gpio_sel1 
+0x65ad 026552 or_into 0x10 ,pdata 
+0x65ae 026553 hstore 1 ,core_gpio_sel1 
+0x65af 026554 rtn 
+:      026558 wait_iicd_done:
+0x65b0 026559 hfetch 1 ,core_dma_status 
+0x65b1 026560 bbit0 iicd_done ,wait_iicd_done 
+0x65b2 026561 rtn 
+:      026569 iicd_read_data:
+0x65b3 026570 hstore 2 ,core_iicd_txlen 
+0x65b4 026571 deposit rega 
+0x65b5 026572 hstore 2 ,core_iicd_txaddr 
+0x65b6 026573 deposit regb 
+0x65b7 026574 hstore 2 ,core_iicd_rxaddr 
+0x65b8 026575 deposit temp 
+0x65b9 026576 hstore 2 ,core_iicd_rxlen 
+0x65ba 026577 arg 1 ,temp 
+0x65bb 026578 nsetflag blank ,1 ,temp 
+0x65bc 026579 hstore 1 ,core_iicd_ctrl 
+0x65bd 026580 jam iicd_start ,core_misc_ctrl 
+0x65be 026581 branch wait_iicd_done 
+:      026584 set_eeprom_size_2k:
+0x65bf 026585 set1 mark_eeprom_size ,mark 
+0x65c0 026586 jam 0x08 ,mem_eeprom_block_size 
+0x65c1 026587 rtn 
+:      026589 clear_eeprom_size_2k:
+0x65c2 026590 set0 mark_eeprom_size ,mark 
+0x65c3 026591 jam 0x20 ,mem_eeprom_block_size 
+0x65c4 026592 rtn 
+:      026595 iicd_read_eep_data_size_2k:
+0x65c5 026596 fetch 1 ,mem_eeprom_base 
+0x65c6 026597 iadd regb ,pdata 
+0x65c7 026598 store 1 ,mem_addr_mi 
+0x65c8 026599 branch iicd_read_eep_size_2k 
+:      026601 iicd_read_eep_size_2k_lcadcode:
+0x65c9 026602 fetch 2 ,mem_addr_mi 
+0x65ca 026603 byteswap pdata ,pdata 
+0x65cb 026604 store 1 ,mem_addr_mi 
+:      026609 iicd_read_eep_size_2k:
+0x65cc 026610 setarg 3 
+0x65cd 026611 hstore 2 ,core_iicd_txlen 
+0x65ce 026612 jam 0xa0 ,mem_iicd_tbuf 
+0x65cf 026613 jam 0xa1 ,mem_iicd_tbuf + 2 
+0x65d0 026614 branch iicd_read_eep_common 
+:      026620 iicd_write_protect_eep_data:
+0x65d1 026621 storet 2 ,mem_temp 
+0x65d2 026622 call iicd_eeprom_write_enable 
+0x65d3 026623 fetcht 2 ,mem_temp 
+0x65d4 026624 call iicd_write_eep_data 
+0x65d5 026625 branch iicd_eeprom_write_disable 
+:      026627 iicd_eeprom_write_enable:
+0x65d6 026628 fetch 1 ,mem_eeprom_wp_gpio 
+0x65d7 026629 rtneq gpio_disable 
+0x65d8 026630 bbit0 6 ,iicd_wp_gpio_output_low 
+0x65d9 026631 setarg 150000 
+0x65da 026632 call sleep 
+:      026633 iicd_wp_gpio_output_low:
+0x65db 026634 fetcht 1 ,mem_eeprom_wp_gpio 
+0x65dc 026635 branch gpio_out_active 
+:      026637 iicd_eeprom_write_disable:
+0x65dd 026638 fetcht 1 ,mem_eeprom_wp_gpio 
+0x65de 026639 branch gpio_out_inactive 
+:      026644 iicd_read_eep_data:
+0x65df 026645 bpatchx patch32_0 ,mem_patch32 
+0x65e0 026646 bmark1 mark_eeprom_size ,iicd_read_eep_data_size_2k 
+0x65e1 026647 fetch 2 ,mem_eeprom_base 
+0x65e2 026648 iadd regb ,pdata 
+0x65e3 026649 byteswap pdata ,pdata 
+0x65e4 026650 store 2 ,mem_addr_mi 
+:      026653 iicd_read_eep:
+0x65e5 026654 bpatchx patch32_1 ,mem_patch32 
+0x65e6 026655 bmark1 mark_eeprom_size ,iicd_read_eep_size_2k_lcadcode 
+0x65e7 026656 setarg 4 
+0x65e8 026657 hstore 2 ,core_iicd_txlen 
+0x65e9 026658 jam 0xa0 ,mem_iicd_tbuf 
+0x65ea 026659 jam 0xa1 ,mem_iicd_tbuf + 3 
+:      026660 iicd_read_eep_common:
+0x65eb 026661 setarg mem_iicd_tbuf 
+0x65ec 026662 hstore 2 ,core_iicd_txaddr 
+0x65ed 026663 hstoret 2 ,core_iicd_rxlen 
+0x65ee 026664 deposit rega 
+0x65ef 026665 hstore 2 ,core_iicd_rxaddr 
+0x65f0 026666 setarg 2 
+0x65f1 026667 isolate0 15 ,rega 
+0x65f2 026668 setflag true ,0 ,pdata 
+0x65f3 026669 hstore 1 ,core_iicd_ctrl 
+0x65f4 026670 jam iicd_start ,core_misc_ctrl 
+0x65f5 026671 arg iicd_done ,queue 
+0x65f6 026672 call decrypt_code 
+0x65f7 026673 call wait_iicd_done 
+0x65f8 026674 isolate1 iicd_crcok ,pdata 
+0x65f9 026675 call set_ucode_status 
+0x65fa 026676 bmark1 mark_eeprom_size ,iicd_read_eep_load_code_size_2k 
+0x65fb 026677 fetch 2 ,mem_addr_mi 
+0x65fc 026678 byteswap pdata ,pdata 
+0x65fd 026679 iadd temp ,pdata 
+0x65fe 026680 byteswap pdata ,pdata 
+0x65ff 026681 store 2 ,mem_addr_mi 
+0x6600 026682 rtn 
+:      026684 iicd_read_eep_load_code_size_2k:
+0x6601 026685 fetch 1 ,mem_addr_mi 
+0x6602 026686 iadd temp ,pdata 
+0x6603 026687 byteswap pdata ,pdata 
+0x6604 026688 store 2 ,mem_addr_mi 
+0x6605 026689 rtn 
+:      026695 iicd_write_eep_data:
+0x6606 026696 fetch 2 ,mem_eeprom_base 
+0x6607 026697 iadd regb ,pdata 
+:      026700 iicd_write_ota_data:
+0x6608 026701 store 2 ,mem_pdatatemp 
+0x6609 026702 bpatchx patch32_2 ,mem_patch32 
+0x660a 026703 storet 2 ,mem_temp 
+0x660b 026704 copy rega ,pdata 
+0x660c 026705 store 2 ,mem_contr 
+:      026706 iicd_write_eep_loop:
+0x660d 026707 call iicd_eep_transparency 
+0x660e 026709 fetcht 2 ,mem_regb 
+0x660f 026710 fetch 2 ,mem_contr 
+0x6610 026711 copy pdata ,rega 
+0x6611 026712 fetch 2 ,mem_pdatatemp 
+0x6612 026714 call iicd_write_eep 
+0x6613 026716 fetch 2 ,mem_regb 
+0x6614 026717 fetcht 2 ,mem_contr 
+0x6615 026718 iadd temp ,temp 
+0x6616 026719 storet 2 ,mem_contr 
+0x6617 026720 fetcht 2 ,mem_pdatatemp 
+0x6618 026721 iadd temp ,temp 
+0x6619 026722 storet 2 ,mem_pdatatemp 
+0x661a 026723 fetch 2 ,mem_temp 
+0x661b 026724 nbranch iicd_write_eep_loop ,blank 
+0x661c 026725 rtn 
+:      026733 iicd_eep_transparency:
+0x661d 026734 bpatchx patch32_3 ,mem_patch32 
+0x661e 026735 fetch 1 ,mem_eeprom_block_size 
+0x661f 026736 increase -1 ,pdata 
+0x6620 026737 fetcht 2 ,mem_pdatatemp 
+0x6621 026738 ior temp ,pdata 
+0x6622 026739 increase 1 ,pdata 
+0x6623 026740 store 3 ,mem_regc 
+0x6624 026742 fetch 2 ,mem_temp 
+0x6625 026743 iadd temp ,pdata 
+0x6626 026745 fetcht 3 ,mem_regc 
+0x6627 026746 isub temp ,pdata 
+0x6628 026747 nbranch iicd_eep_deal_short_packet ,positive 
+0x6629 026748 store 2 ,mem_temp 
+0x662a 026749 fetch 3 ,mem_regc 
+0x662b 026750 fetcht 2 ,mem_pdatatemp 
+0x662c 026751 isub temp ,pdata 
+0x662d 026752 store 2 ,mem_regb 
+0x662e 026753 rtn 
+:      026754 iicd_eep_deal_short_packet:
+0x662f 026755 fetch 2 ,mem_temp 
+0x6630 026756 store 2 ,mem_regb 
+0x6631 026757 setarg 0 
+0x6632 026758 store 2 ,mem_temp 
+0x6633 026759 rtn 
+:      026761 iicd_write_eep_size_2k:
+0x6634 026762 increase 2 ,temp 
+0x6635 026763 hstoret 2 ,core_iicd_txlen 
+0x6636 026764 increase -2 ,rega 
+0x6637 026765 ifetcht 3 ,rega 
+0x6638 026766 copy temp ,regb 
+0x6639 026767 arg 0xa0 ,temp 
+0x663a 026768 istoret 1 ,rega 
+0x663b 026770 istore 1 ,contw 
+0x663c 026771 branch iicd_write_eep_common 
+:      026774 iicd_write_eep:
+0x663d 026775 copy pdata ,regb 
+0x663e 026776 bpatchx patch32_4 ,mem_patch32 
+0x663f 026777 bmark1 mark_eeprom_size ,iicd_write_eep_size_2k 
+0x6640 026778 copy regb ,pdata 
+0x6641 026779 increase 3 ,temp 
+0x6642 026780 hstoret 2 ,core_iicd_txlen 
+0x6643 026781 increase -3 ,rega 
+0x6644 026782 ifetcht 3 ,rega 
+0x6645 026783 copy temp ,regb 
+0x6646 026784 arg 0xa0 ,temp 
+0x6647 026785 istoret 1 ,rega 
+0x6648 026786 byteswap pdata ,pdata 
+0x6649 026787 istore 2 ,contw 
+:      026788 iicd_write_eep_common:
+0x664a 026789 deposit rega 
+0x664b 026790 hstore 2 ,core_iicd_txaddr 
+0x664c 026791 setarg 0 
+0x664d 026792 hstore 2 ,core_iicd_rxlen 
+0x664e 026793 jam 1 ,core_iicd_ctrl 
+0x664f 026794 jam iicd_start ,core_misc_ctrl 
+0x6650 026795 call wait_iicd_done 
+0x6651 026796 copy regb ,pdata 
+0x6652 026797 istore 3 ,rega 
+:      026799 iic_check_eeprom_standby:
+0x6653 026800 bpatchx patch32_5 ,mem_patch32 
+0x6654 026801 jam 0 ,mem_iicd_tbuf + 3 
+:      026802 iic_check_eeprom_standby_wait:
+0x6655 026803 setarg 1 
+0x6656 026804 hstore 2 ,core_iicd_txlen 
+0x6657 026805 jam 0xa0 ,mem_iicd_tbuf 
+0x6658 026806 setarg mem_iicd_tbuf 
+0x6659 026807 hstore 2 ,core_iicd_txaddr 
+0x665a 026808 setarg 0 
+0x665b 026809 hstore 2 ,core_iicd_rxlen 
+0x665c 026810 hstore 2 ,core_iicd_rxaddr 
+0x665d 026811 setarg 3 
+0x665e 026812 hstore 1 ,core_iicd_ctrl 
+0x665f 026813 jam iicd_start ,core_misc_ctrl 
+0x6660 026814 call wait_iicd_done 
+0x6661 026815 hfetch 1 ,core_dma_status 
+0x6662 026816 rtnbit0 iicd_ack 
+0x6663 026817 nop 1500 
+0x6664 026818 fetch 1 ,mem_iicd_tbuf + 3 
+0x6665 026819 increase 1 ,pdata 
+0x6666 026820 store 1 ,mem_iicd_tbuf + 3 
+0x6667 026821 sub pdata ,40 ,null 
+0x6668 026822 nrtn positive 
+0x6669 026823 branch iic_check_eeprom_standby_wait 
+:      026827 otp_enable_chgpump:
+0x666a 026828 jam 0x70 ,rfen_chgpump 
+0x666b 026829 nop param_chgpump_delay 
+0x666c 026830 rtn 
+:      026832 otp_disable_chgpump:
+0x666d 026833 jam 0x30 ,rfen_chgpump 
+0x666e 026834 rtn 
+:      026836 otp_set_addr:
+0x666f 026837 lshift3 pdata ,pdata 
+0x6670 026838 hstore 2 ,core_otp_addr 
+0x6671 026839 jam 0 ,core_otpd_ctrl 
+0x6672 026840 rtn 
+:      026843 otp_write:
+0x6673 026844 call otp_set_addr 
+0x6674 026845 call otp_ce 
+:      026846 otp_program:
+0x6675 026847 ifetcht 1 ,rega 
+0x6676 026848 increase 1 ,rega 
+0x6677 026849 force 0 ,queue 
+:      026850 otp_program_bit:
+0x6678 026851 qisolate0 temp 
+0x6679 026852 branch otp_skip_0 ,true 
+0x667a 026853 hfetch 1 ,core_otp_din 
+0x667b 026854 set1 6 ,pdata 
+0x667c 026855 set1 7 ,pdata 
+0x667d 026856 hstore 1 ,core_otp_din 
+0x667e 026857 jam 0x02 ,core_otp_ctrl 
+0x667f 026858 jam 0x82 ,core_otp_ctrl 
+0x6680 026859 set0 7 ,pdata 
+0x6681 026860 hstore 1 ,core_otp_din 
+0x6682 026861 jam 0x8a ,core_otp_ctrl 
+0x6683 026862 nop 11 
+0x6684 026863 jam 0xca ,core_otp_ctrl 
+0x6685 026864 nop 33 
+0x6686 026865 jam 0x4a ,core_otp_ctrl 
+0x6687 026866 nop 44 
+0x6688 026867 jam 0xca ,core_otp_ctrl 
+0x6689 026868 nop 22 
+0x668a 026869 jam 0x8a ,core_otp_ctrl 
+0x668b 026870 nop 33 
+0x668c 026871 jam 0x82 ,core_otp_ctrl 
+0x668d 026872 nop 1 
+0x668e 026873 jam 0x92 ,core_otp_ctrl 
+0x668f 026874 nop 10 
+0x6690 026875 jam 0xb2 ,core_otp_ctrl 
+0x6691 026876 hfetch 1 ,core_otp_rdata 
+0x6692 026877 jam 0x92 ,core_otp_ctrl 
+0x6693 026878 nop 1 
+0x6694 026879 jam 0x82 ,core_otp_ctrl 
+0x6695 026880 qisolate0 pdata 
+0x6696 026881 branch otp_program_bit ,true 
+:      026882 otp_skip_0:
+0x6697 026883 hfetch 2 ,core_otp_addr 
+0x6698 026884 increase 1 ,pdata 
+0x6699 026885 hstore 2 ,core_otp_addr 
+0x669a 026886 increase 1 ,queue 
+0x669b 026887 compare 8 ,queue ,0xf 
+0x669c 026888 nbranch otp_program_bit ,true 
+0x669d 026889 loop otp_program 
+0x669e 026890 jam 0x83 ,core_otp_ctrl 
+0x669f 026891 rtn 
+:      026893 otp_ce:
+0x66a0 026894 jam 0x82 ,core_otp_ctrl 
+0x66a1 026895 nop 12 
+0x66a2 026896 jam 0x80 ,core_otp_ctrl 
+0x66a3 026897 jam 0x82 ,core_otp_ctrl 
+0x66a4 026898 nop 150 
+0x66a5 026899 rtn 
+:      026902 otpd_read_init:
+0x66a6 026903 call otp_ce 
+0x66a7 026904 jam 0xa2 ,core_otp_ctrl 
+0x66a8 026905 deposit rega 
+0x66a9 026906 hstore 2 ,core_otpd_addr 
+0x66aa 026907 set1 11 ,temp 
+0x66ab 026908 isolate0 15 ,pdata 
+0x66ac 026909 setflag true ,15 ,temp 
+0x66ad 026910 hstoret 2 ,core_otpd_len 
+0x66ae 026911 jam otpd_start ,core_misc_ctrl 
+0x66af 026912 rtn 
+:      026914 otpd_wait_end:
+0x66b0 026915 hfetch 1 ,core_dma_status 
+0x66b1 026916 bbit0 otpd_done ,otpd_wait_end 
+0x66b2 026917 rtn 
+:      026920 otpd_read_data:
+0x66b3 026921 call otp_set_addr 
+0x66b4 026922 call otpd_read_init 
+0x66b5 026923 call otpd_wait_end 
+0x66b6 026924 jam 0x83 ,core_otp_ctrl 
+0x66b7 026925 rtn 
+:      026930 otpd_read_code:
+0x66b8 026931 hfetch 2 ,core_current_otp_addr 
+0x66b9 026932 hstore 2 ,core_otp_addr 
+0x66ba 026933 call otpd_read_init 
+0x66bb 026934 arg otpd_done ,queue 
+0x66bc 026935 call decrypt_code 
+0x66bd 026936 call otpd_wait_end 
+0x66be 026937 isolate1 otpd_crcok ,pdata 
+0x66bf 026938 call set_ucode_status 
+0x66c0 026939 jam 0x83 ,core_otp_ctrl 
+0x66c1 026940 rtn 
+:      026943 uartd_prepare_tx:
+0x66c2 026944 hfetch 2 ,core_uart_twptr 
+0x66c3 026945 iforce contwu 
+0x66c4 026946 rtn 
+:      026948 uartd_send:
+0x66c5 026949 deposit contwu 
+0x66c6 026950 hstore 2 ,core_uart_twptr 
+0x66c7 026951 rtn 
+:      026953 uartd_rxdone:
+0x66c8 026954 deposit contru 
+0x66c9 026955 hstore 2 ,core_uart_rrptr 
+0x66ca 026956 rtn 
+:      026958 uartd_prepare_rx:
+0x66cb 026959 hfetch 2 ,core_uart_rrptr 
+0x66cc 026960 copy pdata ,contru 
+0x66cd 026961 rtn 
+:      026963 uart_set_baud_by_mem:
+0x66ce 026964 fetch uart_baud_len ,mem_baud 
+0x66cf 026965 hstore uart_baud_len ,core_uart_baud 
+0x66d0 026966 rtn 
+:      026968 uart_copy_tx_bytes_fast:
+0x66d1 026969 deposit loopcnt 
+0x66d2 026970 rtn blank 
+:      026971 uart_copy_tx_bytes_fast_loop:
+0x66d3 026972 increase -8 ,loopcnt 
+0x66d4 026973 call uart_tx_8_bytes ,positive 
+0x66d5 026974 rtn zero 
+0x66d6 026975 branch uart_copy_tx_bytes_fast_loop ,positive 
+0x66d7 026976 increase 8 ,loopcnt 
+:      026977 uart_copy_tx_bytes_fast_loop_four:
+0x66d8 026978 increase -4 ,loopcnt 
+0x66d9 026979 call uart_tx_4_bytes ,positive 
+0x66da 026980 rtn zero 
+0x66db 026981 branch uart_copy_tx_bytes_fast_loop_four ,positive 
+0x66dc 026982 increase 4 ,loopcnt 
+0x66dd 026983 branch uart_copy_tx_bytes 
+:      026985 uart_tx_8_bytes:
+0x66de 026986 ifetch 8 ,contr 
+0x66df 026987 istore 8 ,contwu 
+0x66e0 026988 rtn 
+:      026990 uart_tx_4_bytes:
+0x66e1 026991 ifetch 4 ,contr 
+0x66e2 026992 istore 4 ,contwu 
+0x66e3 026993 rtn 
+:      026995 uart_copy_tx_bytes:
+0x66e4 026996 deposit loopcnt 
+0x66e5 026997 rtn blank 
+:      026998 uart_copy_tx_bytes_loop:
+0x66e6 026999 ifetch 1 ,contr 
+0x66e7 027000 istore 1 ,contwu 
+0x66e8 027001 loop uart_copy_tx_bytes_loop 
+0x66e9 027002 rtn 
+:      027004 uart_copy_rx_bytes_fast:
+0x66ea 027005 deposit loopcnt 
+0x66eb 027006 rtn blank 
+:      027007 uart_copy_rx_bytes_fast_loop:
+0x66ec 027008 increase -8 ,loopcnt 
+0x66ed 027009 call uart_rx_8_bytes ,positive 
+0x66ee 027010 rtn zero 
+0x66ef 027011 branch uart_copy_rx_bytes_fast_loop ,positive 
+0x66f0 027012 increase 8 ,loopcnt 
+:      027013 uart_copy_rx_bytes_fast_loop_four:
+0x66f1 027014 increase -4 ,loopcnt 
+0x66f2 027015 call uart_rx_4_bytes ,positive 
+0x66f3 027016 rtn zero 
+0x66f4 027017 branch uart_copy_rx_bytes_fast_loop_four ,positive 
+0x66f5 027018 increase 4 ,loopcnt 
+0x66f6 027019 branch uart_copy_rx_bytes 
+:      027021 uart_rx_8_bytes:
+0x66f7 027022 ifetch 8 ,contru 
+0x66f8 027023 istore 8 ,contw 
+0x66f9 027024 rtn 
+:      027026 uart_rx_4_bytes:
+0x66fa 027027 ifetch 4 ,contru 
+0x66fb 027028 istore 4 ,contw 
+0x66fc 027029 rtn 
+:      027032 uart_copy_rx_bytes:
+0x66fd 027033 deposit loopcnt 
+0x66fe 027034 rtn blank 
+:      027035 uart_copy_rx_bytes_loop:
+0x66ff 027036 ifetch 1 ,contru 
+0x6700 027037 istore 1 ,contw 
+0x6701 027038 loop uart_copy_rx_bytes_loop 
+0x6702 027039 rtn 
+:      027042 uart_copy_rx2tx:
+0x6703 027043 deposit loopcnt 
+0x6704 027044 rtn blank 
+:      027045 uart_copy_rx2tx_loop:
+0x6705 027046 ifetch 1 ,contru 
+0x6706 027047 istore 1 ,contwu 
+0x6707 027048 loop uart_copy_rx2tx_loop 
+0x6708 027049 rtn 
+:      027054 app_store_nvram_event:
+0x6709 027055 jam bt_evt_store_nvram ,mem_fifo_temp 
+0x670a 027056 branch ui_ipc_send_event 
+:      027058 check_51cmd_store_reconn_info:
+:      027059 check_51cmd_update_device_record:
+0x670b 027060 bpatchx patch32_6 ,mem_patch32 
+0x670c 027061 fetch 1 ,mem_nv_data_number 
+0x670d 027062 rtn blank 
+0x670e 027063 call check_nvram 
+0x670f 027064 call init_device_list ,zero 
+0x6710 027065 call nvram_find_addr_from_bd_list 
+:      027066 write_device_record:
+0x6711 027067 fetch 1 ,mem_nv_data_number 
+0x6712 027068 icopy regc 
+0x6713 027069 fetcht 2 ,mem_nv_data_ptr 
+0x6714 027070 storet 2 ,mem_list_item_ptr 
+:      027071 write_device_loop_find:
+0x6715 027072 copy regc ,pdata 
+0x6716 027073 branch app_store_nvram_event ,blank 
+0x6717 027074 increase -1 ,regc 
+0x6718 027075 copy temp ,rega 
+0x6719 027076 ifetch 1 ,rega 
+0x671a 027077 fetcht 1 ,mem_select_list_item 
+0x671b 027078 isub temp ,null 
+0x671c 027079 call set_index_finded_device ,zero 
+0x671d 027080 branch write_device_loop_find0 ,positive 
+0x671e 027081 ifetch 1 ,rega 
+0x671f 027082 increase 1 ,pdata 
+0x6720 027083 istore 1 ,rega 
+:      027084 write_device_loop_find0:
+0x6721 027085 fetcht 2 ,mem_list_item_ptr 
+0x6722 027086 increase nv_data_len ,temp 
+0x6723 027087 storet 2 ,mem_list_item_ptr 
+0x6724 027088 branch write_device_loop_find 
+:      027090 set_index_finded_device:
+0x6725 027091 setarg 0 
+0x6726 027092 istore 1 ,rega 
+0x6727 027093 fetch 1 ,mem_temp_reconn_record 
+0x6728 027094 istore 1 ,contw 
+0x6729 027095 bne rec_3_mode ,set_index_finded_device_ble_mode 
+0x672a 027096 arg mem_link_key ,regb 
+:      027097 set_index_find_device_master_addr:
+0x672b 027098 ifetch 6 ,contr 
+0x672c 027099 istore 8 ,contw 
+0x672d 027100 setarg 0 
+0x672e 027101 istore 8 ,contw 
+0x672f 027102 copy regb ,contr 
+:      027103 store_rec_data_common:
+0x6730 027104 call memcpy16 
+0x6731 027105 force 1 ,null 
+0x6732 027106 rtn 
+:      027108 set_index_finded_device_ble_mode:
+0x6733 027109 beq rec_4_mode_random_resolvable_private_address ,set_index_finded_device_irk 
+0x6734 027110 beq rec_4_mode_random_non_resolvable_private_address ,set_index_finded_device_ediv 
+0x6735 027111 arg mem_le_ltk ,regb 
+0x6736 027112 branch set_index_find_device_master_addr 
+:      027114 set_index_finded_device_irk:
+0x6737 027115 arg mem_le_irk ,contr 
+0x6738 027116 call memcpy16 
+:      027117 store_ble_rec_data_common:
+0x6739 027118 arg mem_le_ltk ,contr 
+0x673a 027119 branch store_rec_data_common 
+:      027121 set_index_finded_device_ediv:
+0x673b 027122 arg mem_le_rand ,contr 
+0x673c 027123 call memcpy16 
+0x673d 027124 branch store_ble_rec_data_common 
+:      027127 nvram_find_addr_from_bd_list:
+0x673e 027128 call disable_user 
+0x673f 027129 fetch 1 ,mem_nv_data_number 
+0x6740 027130 rtn blank 
+0x6741 027131 fetch 2 ,mem_ui_state_map 
+0x6742 027132 bbit1 ui_state_bt_connected ,find_addr_from_bd_list_spp_mode 
+:      027133 find_addr_from_bd_list_ble_mode:
+0x6743 027134 bpatchx patch32_7 ,mem_patch32 
+0x6744 027135 fetch 1 ,mem_le_conn_peer_addr_type 
+0x6745 027136 beq master_public_addr ,find_addr_from_bd_list_static_addr 
+0x6746 027137 fetch 1 ,mem_le_plap + 5 
+0x6747 027138 compare 0xc0 ,pdata ,0xc0 
+0x6748 027139 branch find_addr_from_bd_list_static_addr ,true 
+0x6749 027140 compare 0x40 ,pdata ,0xc0 
+0x674a 027141 branch find_addr_from_bd_list_random_addr ,true 
+0x674b 027142 compare 0x00 ,pdata ,0xc0 
+0x674c 027143 branch find_addr_from_bd_list_random_non_resolvable_private_address ,true 
+:      027144 find_addr_from_bd_list_static_addr:
+0x674d 027145 jam rec_4_mode_static_address ,mem_temp_reconn_record 
+0x674e 027146 fetch 6 ,mem_le_plap 
+0x674f 027147 branch find_addr_from_bd_list_common 
+:      027149 find_addr_from_bd_list_random_non_resolvable_private_address:
+0x6750 027150 jam rec_4_mode_random_non_resolvable_private_address ,mem_temp_reconn_record 
+0x6751 027151 branch find_addr_from_bd_list_common 
+:      027154 find_addr_from_bd_list_random_addr:
+0x6752 027155 jam rec_4_mode_random_resolvable_private_address ,mem_temp_reconn_record 
+0x6753 027156 branch find_addr_from_bd_list_common 
+:      027159 find_addr_from_bd_list_spp_mode:
+0x6754 027160 bpatchx patch33_0 ,mem_patch33 
+0x6755 027161 jam rec_3_mode ,mem_temp_reconn_record 
+0x6756 027162 fetch 6 ,mem_plap 
+:      027163 find_addr_from_bd_list_common:
+0x6757 027164 store 6 ,mem_temp_reconn_record + 1 
+0x6758 027165 fetch 2 ,mem_nv_data_ptr 
+0x6759 027166 ifetcht 1 ,pdata 
+0x675a 027167 pincrease 1 
+0x675b 027168 store 2 ,mem_list_item_ptr 
+0x675c 027169 storet 1 ,mem_select_list_item 
+0x675d 027170 fetch 1 ,mem_nv_data_number 
+0x675e 027171 icopy regc 
+:      027172 nvram_find_addr_from_list:
+0x675f 027173 fetch 2 ,mem_list_item_ptr 
+0x6760 027174 copy pdata ,rega 
+0x6761 027175 call nvram_find_addr_from_list_compare 
+0x6762 027176 rtn user 
+0x6763 027177 fetcht 2 ,mem_list_item_ptr 
+0x6764 027178 increase nv_data_len ,temp 
+0x6765 027179 storet 2 ,mem_list_item_ptr 
+0x6766 027180 increase -1 ,temp 
+0x6767 027181 ifetch 1 ,temp 
+0x6768 027182 store 1 ,mem_select_list_item 
+0x6769 027183 increase -1 ,regc 
+0x676a 027184 nbranch nvram_find_addr_from_list ,zero 
+0x676b 027185 fetch 1 ,mem_nv_data_number 
+0x676c 027186 pincrease decreased_one 
+0x676d 027187 store 1 ,mem_select_list_item 
+0x676e 027188 rtn 
+:      027189 nvram_find_addr_from_list_compare:
+0x676f 027190 fetch 1 ,mem_temp_reconn_record 
+0x6770 027191 bne rec_3_mode ,find_addr_from_list_compare_ble_mode 
+:      027192 find_master_addr_from_list_compare:
+0x6771 027193 arg mem_temp_reconn_record ,regb 
+0x6772 027194 arg 7 ,loopcnt 
+0x6773 027195 call string_compare 
+0x6774 027196 branch enable_user ,zero 
+0x6775 027197 rtn 
+:      027199 find_addr_from_list_compare_ble_mode:
+0x6776 027200 beq rec_4_mode_random_resolvable_private_address ,find_irk_form_list_compare 
+0x6777 027201 beq rec_4_mode_random_non_resolvable_private_address ,find_ediv_form_list_compare 
+0x6778 027202 branch find_master_addr_from_list_compare 
+:      027204 find_irk_form_list_compare:
+0x6779 027205 ifetcht 1 ,rega 
+0x677a 027206 isub temp ,null 
+0x677b 027207 nrtn zero 
+0x677c 027208 arg mem_le_prand ,contw 
+0x677d 027209 arg 16 ,loopcnt 
+0x677e 027210 call clear_mem 
+0x677f 027211 fetch 3 ,mem_le_plap + 3 
+0x6780 027212 store 3 ,mem_le_prand 
+0x6781 027213 call genernate_master_macaddress 
+0x6782 027214 fetch 2 ,mem_le_aes_128 + 13 
+0x6783 027215 byteswap pdata ,pdata 
+0x6784 027216 lshift8 pdata ,temp 
+0x6785 027217 ifetch 1 ,contr 
+0x6786 027218 iadd temp ,pdata 
+0x6787 027219 fetcht 3 ,mem_le_plap 
+0x6788 027220 isub temp ,null 
+0x6789 027221 branch enable_user ,zero 
+0x678a 027222 rtn 
+:      027225 genernate_master_macaddress:
+0x678b 027226 arg mem_le_prand ,contr 
+0x678c 027227 call load_data128 
+0x678d 027229 ifetch 1 ,rega 
+0x678e 027230 call load_regext 
+0x678f 027231 force 0x38 ,aes_ctrl 
+0x6790 027232 force 0x0 ,aes_ctrl 
+0x6791 027233 call wait_aes 
+0x6792 027234 arg mem_le_aes_128 ,contw 
+0x6793 027235 branch store_aes_result 
+:      027237 find_ediv_form_list_compare:
+0x6794 027238 ifetcht 1 ,rega 
+0x6795 027239 isub temp ,null 
+0x6796 027240 nrtn zero 
+0x6797 027241 copy contr ,rega 
+0x6798 027242 add contr ,8 ,regc 
+0x6799 027243 arg mem_le_rand ,regb 
+0x679a 027244 arg 8 ,loopcnt 
+0x679b 027245 call string_compare 
+0x679c 027246 branch enable_user ,zero 
+0x679d 027247 copy regc ,rega 
+0x679e 027248 arg mem_le_irk ,regb 
+0x679f 027249 arg 8 ,loopcnt 
+0x67a0 027250 call string_compare 
+0x67a1 027251 branch enable_user ,zero 
+0x67a2 027252 rtn 
+:      027254 check_nvram:
+0x67a3 027255 fetch 2 ,mem_nv_data_ptr 
+0x67a4 027256 ifetcht 1 ,pdata 
+0x67a5 027257 pincrease nv_data_len 
+0x67a6 027258 ifetch 1 ,pdata 
+0x67a7 027259 isub temp ,null 
+0x67a8 027260 rtn 
+:      027262 init_device_list:
+0x67a9 027263 fetch 1 ,mem_nv_data_number 
+0x67aa 027264 icopy loopcnt 
+0x67ab 027265 fetcht 2 ,mem_nv_data_ptr 
+0x67ac 027266 setarg 0 
+:      027267 init_device_list_loop:
+0x67ad 027268 istore 1 ,temp 
+0x67ae 027269 increase nv_data_len ,temp 
+0x67af 027270 pincrease 1 
+0x67b0 027271 loop init_device_list_loop 
+0x67b1 027272 rtn 
+:      027274 load_device_list:
+0x67b2 027275 bpatchx patch33_1 ,mem_patch33 
+0x67b3 027276 call nvram_find_addr_from_bd_list 
+0x67b4 027277 fetch 1 ,mem_state 
+0x67b5 027278 setflag user ,state_combkey ,pdata 
+0x67b6 027279 store 1 ,mem_state 
+0x67b7 027280 nbranch clear_key_exists ,user 
+0x67b8 027281 add rega ,10 ,contr 
+0x67b9 027283 arg mem_link_key ,contw 
+0x67ba 027284 call memcpy16 
+0x67bb 027285 branch check_link_key_load 
+:      027286 clear_key_exists:
+0x67bc 027287 jam 0 ,mem_link_key_exists 
+0x67bd 027288 rtn 
+:      027290 load_device_list_mode_4:
+0x67be 027291 fetch 9 ,mem_le_ediv 
+0x67bf 027292 branch clear_ltk_exists ,blank 
+0x67c0 027293 call nvram_find_addr_from_bd_list 
+0x67c1 027294 nbranch clear_ltk_exists ,user 
+0x67c2 027295 fetch 2 ,mem_list_item_ptr 
+0x67c3 027296 add pdata ,1 ,contr 
+0x67c4 027297 arg mem_le_irk ,contw 
+0x67c5 027298 call memcpy16 
+0x67c6 027299 arg mem_le_ltk ,contw 
+0x67c7 027300 call memcpy16 
+0x67c8 027301 jam 1 ,mem_ltk_exists 
+0x67c9 027302 rtn 
+:      027304 clear_ltk_exists:
+0x67ca 027305 jam 0 ,mem_ltk_exists 
+0x67cb 027306 rtn 
+:      027309 eeprom_store_le_reconn_info:
+0x67cc 027310 fetch 6 ,mem_le_plap 
+0x67cd 027311 store 6 ,mem_temp_lap 
+0x67ce 027312 jam rec_4_mode ,mem_record_bt_mode 
+0x67cf 027313 branch eeprom_store_reconn_info 
+:      027314 eeprom_store_bd_reconn_info:
+0x67d0 027315 fetch 6 ,mem_plap 
+0x67d1 027316 store 6 ,mem_temp_lap 
+0x67d2 027317 jam rec_3_mode ,mem_record_bt_mode 
+:      027318 eeprom_store_reconn_info:
+0x67d3 027319 fetch 1 ,mem_device_option 
+0x67d4 027320 beq dvc_op_module ,check_51cmd_update_device_record 
+0x67d5 027321 bbit1 dvc_op_mouse ,mouse_store_remote_bdaddr 
+0x67d6 027322 rtn 
+:      027325 check_link_key_load:
+0x67d7 027326 fetch 8 ,mem_link_key 
+0x67d8 027327 fetcht 8 ,mem_link_key + 8 
+0x67d9 027328 ior temp ,pdata 
+0x67da 027329 rtn blank 
+0x67db 027330 jam 1 ,mem_link_key_exists 
+0x67dc 027331 rtn 
+:      027338 gpio_set_wake_by_current_state:
+0x67dd 027339 bpatchx patch33_2 ,mem_patch33 
+0x67de 027340 set1 7 ,temp 
+0x67df 027341 call gpio_get_bit 
+0x67e0 027342 nsetflag true ,7 ,temp 
+:      027347 gpio_set_wake:
+0x67e1 027348 bpatchx patch33_3 ,mem_patch33 
+0x67e2 027349 sub temp ,ui_button_gpio_disable ,null 
+0x67e3 027350 rtn zero 
+0x67e4 027351 isolate0 7 ,temp 
+0x67e5 027352 and temp ,0x1f ,queue 
+0x67e6 027353 fetch 4 ,mem_gpio_wakeup_low 
+0x67e7 027354 qsetflag true ,pdata 
+0x67e8 027355 store 4 ,mem_gpio_wakeup_low 
+0x67e9 027356 fetch 4 ,mem_gpio_wakeup_high 
+0x67ea 027357 nqsetflag true ,pdata 
+0x67eb 027358 store 4 ,mem_gpio_wakeup_high 
+0x67ec 027359 rtn 
+:      027362 gpio_clr_wake:
+0x67ed 027363 bpatchx patch33_4 ,mem_patch33 
+0x67ee 027364 sub temp ,ui_button_gpio_disable ,null 
+0x67ef 027365 rtn zero 
+0x67f0 027366 isolate0 7 ,temp 
+0x67f1 027367 and temp ,0x1f ,queue 
+0x67f2 027368 fetch 4 ,mem_gpio_wakeup_low 
+0x67f3 027369 qset0 pdata 
+0x67f4 027370 store 4 ,mem_gpio_wakeup_low 
+0x67f5 027371 fetch 4 ,mem_gpio_wakeup_high 
+0x67f6 027372 qset0 pdata 
+0x67f7 027373 store 4 ,mem_gpio_wakeup_high 
+0x67f8 027374 rtn 
+:      027377 gpio_config_input_nowake:
+0x67f9 027378 call gpio_clr_wake 
+0x67fa 027379 branch gpio_config_input_without_wake 
+:      027382 gpio_config_input:
+0x67fb 027383 sub temp ,ui_button_gpio_disable ,null 
+0x67fc 027384 rtn zero 
+0x67fd 027385 ncall gpio_set_wake ,wake 
+:      027387 gpio_config_input_without_wake:
+0x67fe 027388 arg core_gpio_pd0 ,contw 
+0x67ff 027389 call gpio_set_bit 
+0x6800 027390 setflip gpio_active_bit ,temp 
+0x6801 027391 arg core_gpio_pu0 ,contw 
+0x6802 027392 call gpio_set_bit 
+0x6803 027393 set0 gpio_active_bit ,temp 
+0x6804 027394 arg core_gpio_oe0 ,contw 
+0x6805 027395 branch gpio_set_bit 
+:      027398 gpio_set_high_impedance:
+0x6806 027399 arg core_gpio_pd0 ,contw 
+0x6807 027400 call gpio_set_bit 
+0x6808 027401 set0 gpio_active_bit ,temp 
+0x6809 027402 arg core_gpio_pu0 ,contw 
+0x680a 027403 call gpio_set_bit 
+0x680b 027404 set0 gpio_active_bit ,temp 
+0x680c 027405 arg core_gpio_oe0 ,contw 
+0x680d 027406 branch gpio_set_bit 
+:      027410 gpio_config_output:
+0x680e 027411 sub temp ,ui_button_gpio_disable ,null 
+0x680f 027412 rtn zero 
+0x6810 027413 setflip gpio_active_bit ,temp 
+0x6811 027414 call gpio_out 
+:      027415 gpio_config_output0:
+0x6812 027416 set1 gpio_active_bit ,temp 
+0x6813 027417 arg core_gpio_oe0 ,contw 
+0x6814 027418 branch gpio_set_bit 
+:      027420 gpio_common:
+0x6815 027421 and temp ,0x07 ,queue 
+0x6816 027422 rshift3 temp ,pdata 
+0x6817 027423 and_into 3 ,pdata 
+0x6818 027424 iadd contw ,contw 
+0x6819 027425 ifetch 1 ,contw 
+0x681a 027426 rtn 
+:      027428 gpio_check_active:
+0x681b 027429 arg core_gpio_out0 ,contw 
+0x681c 027430 branch get_bit_common 
+:      027434 gpio_get_bit:
+0x681d 027435 arg core_gpio_in ,contw 
+:      027436 get_bit_common:
+0x681e 027437 call gpio_common 
+0x681f 027438 isolate1 gpio_active_bit ,temp 
+0x6820 027439 branch gpio_get_bit_reverse ,true 
+0x6821 027440 qisolate0 pdata 
+0x6822 027441 rtn 
+:      027442 gpio_get_bit_reverse:
+0x6823 027443 qisolate1 pdata 
+0x6824 027444 rtn 
+:      027446 gpio_out_inactive:
+0x6825 027447 sub temp ,ui_button_gpio_disable ,null 
+0x6826 027448 rtn zero 
+0x6827 027449 isolate1 7 ,null 
+0x6828 027450 branch gpio_out_flag 
+:      027452 gpio_out_active:
+0x6829 027453 sub temp ,ui_button_gpio_disable ,null 
+0x682a 027454 rtn zero 
+0x682b 027455 isolate0 7 ,null 
+:      027458 gpio_out_flag:
+0x682c 027459 setarg 0 
+0x682d 027460 nsetflag true ,gpio_active_bit ,pdata 
+0x682e 027461 ixor temp ,temp 
+:      027464 gpio_out:
+0x682f 027465 arg core_gpio_out0 ,contw 
+:      027468 gpio_set_bit:
+0x6830 027469 call gpio_common 
+0x6831 027470 isolate1 gpio_active_bit ,temp 
+0x6832 027471 qsetflag true ,pdata 
+0x6833 027472 istore 1 ,contw 
+0x6834 027473 rtn 
+:      027475 gpio_set_before_lpm_common:
+0x6835 027476 arg -1 ,rega 
+0x6836 027477 hfetch 1 ,core_gpio_sel1 
+0x6837 027478 compare 0x02 ,pdata ,0x03 
+0x6838 027479 call neglact4_from_23_pin ,true 
+0x6839 027481 compare 0x01 ,pdata ,0x03 
+0x683a 027482 call neglact2_form_25_pin ,true 
+0x683b 027484 compare 0x03 ,pdata ,0x03 
+0x683c 027485 call neglact2_form_25_pin ,true 
+0x683d 027487 isolate1 2 ,pdata 
+0x683e 027488 call neglect2_from_6_pin ,true 
+0x683f 027490 isolate1 3 ,pdata 
+0x6840 027491 call neglect4_from_9_pin ,true 
+0x6841 027493 isolate1 4 ,pdata 
+0x6842 027494 call neglact2_form_30_pin ,true 
+0x6843 027496 isolate1 6 ,pdata 
+0x6844 027497 nsetflag true ,04 ,rega 
+0x6845 027499 isolate1 7 ,pdata 
+0x6846 027500 nsetflag true ,05 ,rega 
+0x6847 027502 hfetch 1 ,core_gpio_sel2 
+0x6848 027503 isolate1 0 ,pdata 
+0x6849 027504 nsetflag true ,27 ,rega 
+0x684a 027505 isolate1 1 ,pdata 
+0x684b 027506 nsetflag true ,28 ,rega 
+0x684c 027507 isolate1 2 ,pdata 
+0x684d 027508 nsetflag true ,03 ,rega 
+0x684e 027509 isolate1 3 ,pdata 
+0x684f 027510 nsetflag true ,08 ,rega 
+0x6850 027511 isolate1 4 ,pdata 
+0x6851 027512 nsetflag true ,20 ,rega 
+0x6852 027513 isolate1 5 ,pdata 
+0x6853 027514 nsetflag true ,21 ,rega 
+0x6854 027515 isolate1 6 ,pdata 
+0x6855 027516 nsetflag true ,22 ,rega 
+0x6856 027517 isolate1 7 ,pdata 
+0x6857 027518 nsetflag true ,23 ,rega 
+0x6858 027520 hfetch 1 ,core_gpio_sel 
+0x6859 027521 isolate1 0 ,pdata 
+0x685a 027522 nsetflag true ,05 ,rega 
+0x685b 027523 isolate1 1 ,pdata 
+0x685c 027524 nsetflag true ,06 ,rega 
+0x685d 027525 isolate1 2 ,pdata 
+0x685e 027526 nsetflag true ,07 ,rega 
+0x685f 027527 isolate1 3 ,pdata 
+0x6860 027528 nsetflag true ,18 ,rega 
+0x6861 027529 isolate1 4 ,pdata 
+0x6862 027530 nsetflag true ,19 ,rega 
+0x6863 027531 isolate1 5 ,pdata 
+0x6864 027532 nsetflag true ,20 ,rega 
+0x6865 027533 isolate1 6 ,pdata 
+0x6866 027534 nsetflag true ,21 ,rega 
+0x6867 027535 isolate1 7 ,pdata 
+0x6868 027536 nsetflag true ,22 ,rega 
+0x6869 027538 hfetch 1 ,core_uart_ctrl 
+0x686a 027539 isolate1 4 ,pdata 
+0x686b 027540 call neglact2_form_2_pin ,true 
+0x686c 027541 bpatchx patch33_5 ,mem_patch33 
+0x686d 027543 hfetch 4 ,core_gpio_pu0 
+0x686e 027544 hfetcht 4 ,core_gpio_pd0 
+0x686f 027545 ior temp ,pdata 
+0x6870 027546 invert pdata ,pdata 
+0x6871 027547 iand rega ,pdata 
+0x6872 027549 hstore 4 ,core_gpio_oe0 
+0x6873 027550 rtn 
+:      027553 neglect2_from_6_pin:
+0x6874 027554 arg 6 ,queue 
+0x6875 027555 branch neglect_2_pin 
+:      027556 neglect4_from_9_pin:
+0x6876 027557 arg 9 ,queue 
+0x6877 027558 branch neglact_4_pin 
+:      027559 neglact4_from_23_pin:
+0x6878 027560 arg 23 ,queue 
+0x6879 027561 branch neglact_4_pin 
+:      027562 neglact2_form_25_pin:
+0x687a 027563 arg 25 ,queue 
+0x687b 027564 branch neglect_2_pin 
+:      027565 neglact2_form_30_pin:
+0x687c 027566 arg 30 ,queue 
+0x687d 027567 branch neglect_2_pin 
+:      027568 neglact2_form_2_pin:
+0x687e 027569 arg 2 ,queue 
+0x687f 027570 branch neglect_2_pin 
+:      027571 neglact_1_pin:
+0x6880 027572 arg 1 ,loopcnt 
+0x6881 027573 branch neglect_pin_loop 
+:      027574 neglact_4_pin:
+0x6882 027575 arg 4 ,loopcnt 
+0x6883 027576 branch neglect_pin_loop 
+:      027577 neglect_2_pin:
+0x6884 027578 arg 2 ,loopcnt 
+:      027579 neglect_pin_loop:
+0x6885 027580 qset0 rega 
+0x6886 027581 increase 1 ,queue 
+0x6887 027582 loop neglect_pin_loop 
+0x6888 027583 rtn 
+:      027591 gpio_cfg_uart_tx_output:
+0x6889 027592 call gpio_uart2gpio 
+0x688a 027593 arg uart_wakeup_tx ,temp 
+0x688b 027594 branch gpio_config_output 
+:      027596 gpio_pu_uart_tx:
+0x688c 027597 call gpio_cfg_uart_tx_output 
+0x688d 027598 arg uart_wakeup_tx ,temp 
+0x688e 027599 branch gpio_out_inactive 
+:      027603 gpio_rx_config_input_with_pu:
+0x688f 027604 call gpio_uart2gpio 
+0x6890 027605 hfetch 1 ,core_gpio_pu0 
+0x6891 027606 set1 uart_wakeup_rx ,pdata 
+0x6892 027607 hstore 1 ,core_gpio_pu0 
+0x6893 027608 arg uart_wakeup_rx ,temp 
+0x6894 027609 branch gpio_config_input 
+:      027611 gpio_uart2gpio:
+0x6895 027612 hfetch 1 ,core_gpio_sel1 
+0x6896 027613 and_into 0xfb ,pdata 
+0x6897 027614 hstore 1 ,core_gpio_sel1 
+0x6898 027615 rtn 
+:      027617 gpio_check_uart_state:
+0x6899 027618 hfetch 1 ,core_gpio_sel1 
+0x689a 027619 isolate1 2 ,pdata 
+0x689b 027620 rtn 
+:      027622 load_chip_option:
+0x689c 027623 call otp_enable_chgpump 
+0x689d 027624 setarg otp_chip_functions 
+0x689e 027625 arg mem_chip_functions ,rega 
+0x689f 027626 arg 0x02 ,temp 
+0x68a0 027627 call otpd_read_data 
+0x68a1 027628 branch otp_disable_chgpump 
+:      027631 load_adc_init:
+0x68a2 027632 call otp_enable_chgpump 
+0x68a3 027633 setarg otp_adc_io_0_5v_addr 
+0x68a4 027634 arg mem_0_5_adc_io_data ,rega 
+0x68a5 027635 arg 14 ,temp 
+0x68a6 027636 call otpd_read_data 
+0x68a7 027637 branch otp_disable_chgpump 
+:      027641 adc_init_data:
+0x68a8 027642 bpatchx patch33_6 ,mem_patch33 
+0x68a9 027644 call load_adc_init 
+0x68aa 027646 fetch 1 ,mem_adc_config_flag 
+0x68ab 027647 beq adc_config_vinlpm ,adc_init_data_vinlpm 
+0x68ac 027648 beq adc_config_hvin ,adc_init_data_hvin 
+0x68ad 027649 beq adc_config_gpio ,adc_init_data_io 
+0x68ae 027650 rtn 
+:      027652 adc_init_data_vinlpm:
+0x68af 027653 fetcht 2 ,mem_otp_adc_flag 
+0x68b0 027654 setarg otp_adc_flag 
+0x68b1 027655 isub temp ,null 
+0x68b2 027656 branch adc_check_data_vinlpm ,zero 
+0x68b3 027657 setarg 0x4dfa 
+0x68b4 027658 store 2 ,mem_3v_adc_vinlpm_data 
+0x68b5 027659 setarg 0x4894 
+0x68b6 027660 store 2 ,mem_2v_adc_vinlpm_data 
+0x68b7 027661 branch set_vdd_reference_voltage_1v 
+:      027663 adc_check_data_vinlpm:
+0x68b8 027664 fetch 2 ,mem_3v_adc_vinlpm_data 
+0x68b9 027665 nbranch adc_check_2v_vinlpm ,blank 
+0x68ba 027666 setarg 0x4dfa 
+0x68bb 027667 store 2 ,mem_3v_adc_vinlpm_data 
+:      027668 adc_check_2v_vinlpm:
+0x68bc 027669 fetch 2 ,mem_2v_adc_vinlpm_data 
+0x68bd 027670 nbranch set_vdd_reference_voltage_1v ,blank 
+0x68be 027671 setarg 0x4894 
+0x68bf 027672 store 2 ,mem_2v_adc_vinlpm_data 
+:      027673 set_vdd_reference_voltage_1v:
+0x68c0 027674 setarg 100 
+0x68c1 027675 store 2 ,mem_reference_voltage 
+0x68c2 027676 rtn 
+:      027678 adc_init_data_hvin:
+0x68c3 027679 fetcht 2 ,mem_otp_adc_flag 
+0x68c4 027680 setarg otp_adc_flag 
+0x68c5 027681 isub temp ,null 
+0x68c6 027682 branch adc_check_data_hvin ,zero 
+0x68c7 027683 setarg 0x5932 
+0x68c8 027684 store 2 ,mem_5v_adc_hvin_data 
+0x68c9 027685 setarg 0x4323 
+0x68ca 027686 store 2 ,mem_1v_adc_hvin_data 
+0x68cb 027687 branch set_vdd_reference_voltage_4v 
+:      027689 adc_check_data_hvin:
+0x68cc 027690 fetch 2 ,mem_5v_adc_hvin_data 
+0x68cd 027691 nbranch adc_check_1v_hvin ,blank 
+0x68ce 027692 setarg 0x5932 
+0x68cf 027693 store 2 ,mem_5v_adc_hvin_data 
+:      027694 adc_check_1v_hvin:
+0x68d0 027695 fetch 2 ,mem_1v_adc_hvin_data 
+0x68d1 027696 nbranch set_vdd_reference_voltage_4v ,blank 
+0x68d2 027697 setarg 0x4323 
+0x68d3 027698 store 2 ,mem_1v_adc_hvin_data 
+:      027699 set_vdd_reference_voltage_4v:
+0x68d4 027700 setarg 400 
+0x68d5 027701 store 2 ,mem_reference_voltage 
+0x68d6 027702 rtn 
+:      027704 adc_init_data_io:
+0x68d7 027705 fetcht 2 ,mem_otp_adc_flag 
+0x68d8 027706 setarg otp_adc_flag 
+0x68d9 027707 isub temp ,null 
+0x68da 027708 branch adc_check_data_io ,zero 
+0x68db 027709 setarg 0x6946 
+0x68dc 027710 store 2 ,mem_1v_adc_io_data 
+0x68dd 027711 setarg 0x5377 
+0x68de 027712 store 2 ,mem_0_5_adc_io_data 
+0x68df 027713 branch set_vdd_reference_voltage_0_5v 
+:      027715 adc_check_data_io:
+0x68e0 027716 fetch 2 ,mem_1v_adc_io_data 
+0x68e1 027717 nbranch adc_check_0_5v_io ,blank 
+0x68e2 027718 setarg 0x6946 
+0x68e3 027719 store 2 ,mem_1v_adc_io_data 
+:      027720 adc_check_0_5v_io:
+0x68e4 027721 fetch 2 ,mem_0_5_adc_io_data 
+0x68e5 027722 nbranch set_vdd_reference_voltage_0_5v ,blank 
+0x68e6 027723 setarg 0x5377 
+0x68e7 027724 store 2 ,mem_0_5_adc_io_data 
+:      027725 set_vdd_reference_voltage_0_5v:
+0x68e8 027726 setarg 50 
+0x68e9 027727 store 2 ,mem_reference_voltage 
+0x68ea 027728 rtn 
+:      027731 adc_set_mode:
+0x68eb 027732 fetch 1 ,mem_adc_config_flag 
+0x68ec 027733 beq adc_config_vinlpm ,adc_check_vinlpm 
+0x68ed 027734 beq adc_config_hvin ,adc_check_hvin 
+0x68ee 027735 beq adc_config_gpio ,adc_check_gpio 
+0x68ef 027736 rtn 
+:      027737 adc_check_vinlpm:
+0x68f0 027738 jam 0xbf ,rf_adc_mode 
+0x68f1 027739 branch read_adc 
+:      027740 adc_check_hvin:
+0x68f2 027741 jam 0xaf ,rf_adc_mode 
+0x68f3 027742 branch read_adc 
+:      027743 adc_check_gpio:
+0x68f4 027744 jam 0x8f ,rf_adc_mode 
+0x68f5 027745 fetch 1 ,mem_adc_channel 
+0x68f6 027746 hstore 1 ,rf_adc_ch 
+0x68f7 027747 branch read_adc 
+:      027748 read_adc:
+0x68f8 027749 bpatchx patch33_7 ,mem_patch33 
+0x68f9 027750 hfetch 1 ,core_uart_baud + 1 
+0x68fa 027751 set1 7 ,pdata 
+0x68fb 027752 hstore 1 ,core_uart_baud + 1 
+0x68fc 027753 hfetch 1 ,rf_adc_ch 
+0x68fd 027754 or_into 0x30 ,pdata 
+0x68fe 027755 hstore 1 ,rf_adc_ch 
+0x68ff 027756 jam 0x7c ,rfen_adc 
+0x6900 027757 jam 0xaa ,rf_adc_gc 
+0x6901 027758 nop 5000 
+0x6902 027759 hfetcht 2 ,core_adc_sum 
+0x6903 027760 hfetch 1 ,core_uart_baud + 1 
+0x6904 027761 set0 7 ,pdata 
+0x6905 027762 hstore 1 ,core_uart_baud + 1 
+0x6906 027763 storet 2 ,mem_adc_current_value 
+0x6907 027764 rtn 
+:      027766 vdd_calculate_by_mode:
+0x6908 027767 bpatchx patch34_0 ,mem_patch34 
+0x6909 027768 fetch 1 ,mem_adc_config_flag 
+0x690a 027769 beq adc_config_vinlpm ,vdd_calculate_vinlpm 
+0x690b 027770 beq adc_config_hvin ,vdd_calculate_hvin 
+0x690c 027771 beq adc_config_gpio ,vdd_calculate_io 
+0x690d 027772 rtn 
+:      027774 vdd_calculate_vinlpm:
+0x690e 027775 fetch 2 ,mem_3v_adc_vinlpm_data 
+0x690f 027776 fetcht 2 ,mem_2v_adc_vinlpm_data 
+0x6910 027777 arg 200 ,regc 
+0x6911 027778 branch vdd_calculate 
+:      027780 vdd_calculate_hvin:
+0x6912 027781 fetch 2 ,mem_5v_adc_hvin_data 
+0x6913 027782 fetcht 2 ,mem_1v_adc_hvin_data 
+0x6914 027783 arg 100 ,regc 
+0x6915 027784 branch vdd_calculate 
+:      027786 vdd_calculate_io:
+0x6916 027787 fetch 2 ,mem_1v_adc_io_data 
+0x6917 027788 fetcht 2 ,mem_0_5_adc_io_data 
+0x6918 027789 arg 50 ,regc 
+0x6919 027790 branch vdd_calculate 
+:      027792 vdd_calculate:
+0x691a 027793 isub temp ,rega 
+0x691b 027794 fetch 2 ,mem_adc_current_value 
+0x691c 027795 isub temp ,pdata 
+0x691d 027796 nbranch vdd_calculate1 ,positive 
+0x691e 027797 fetcht 2 ,mem_reference_voltage 
+0x691f 027798 imul32 temp ,regb 
+0x6920 027799 copy regc ,pdata 
+0x6921 027800 imul32 rega ,pdata 
+0x6922 027801 iadd regb ,pdata 
+:      027802 vdd_calculate2:
+0x6923 027803 idiv rega 
+0x6924 027804 call wait_div_end 
+0x6925 027805 quotient pdata 
+0x6926 027806 rtn 
+:      027808 vdd_calculate1:
+0x6927 027809 copy temp ,pdata 
+0x6928 027810 fetcht 2 ,mem_adc_current_value 
+0x6929 027811 isub temp ,pdata 
+0x692a 027812 fetcht 2 ,mem_reference_voltage 
+0x692b 027813 imul32 temp ,regb 
+0x692c 027814 copy regc ,pdata 
+0x692d 027815 imul32 rega ,pdata 
+0x692e 027816 isub regb ,pdata 
+0x692f 027817 branch vdd_calculate2 
+:      027828 adc_bat_percent_lowpower_out:
+0x6930 027829 ifetch 8 ,rega 
+0x6931 027830 store 8 ,mem_pdatatemp 
+0x6932 027831 fetch 2 ,mem_pdatatemp 
+0x6933 027832 fetcht 2 ,mem_pdatatemp + 2 
+0x6934 027833 isub temp ,rega 
+0x6935 027834 fetch 2 ,mem_pdatatemp + 6 
+0x6936 027835 isub temp ,regb 
+0x6937 027836 fetcht 2 ,mem_pdatatemp + 4 
+0x6938 027837 isub temp ,null 
+0x6939 027838 ncall adc_set_low_power_flag ,positive 
+0x693a 027839 mul32 regb ,100 ,pdata 
+0x693b 027840 idiv rega 
+0x693c 027841 call wait_div_end 
+0x693d 027842 quotient pdata 
+0x693e 027843 call adc_set_no_power_flag ,blank 
+0x693f 027844 rtn 
+:      027845 adc_set_low_power_flag:
+0x6940 027846 fetch 1 ,mem_adc_power_flag 
+0x6941 027847 set1 0 ,pdata 
+0x6942 027848 store 1 ,mem_adc_power_flag 
+0x6943 027849 rtn 
+:      027850 adc_set_no_power_flag:
+0x6944 027851 fetcht 1 ,mem_adc_power_flag 
+0x6945 027852 set1 1 ,temp 
+0x6946 027853 storet 1 ,mem_adc_power_flag 
+0x6947 027854 rtn 
+:      027859 keyscan_key_init:
+0x6948 027860 fetch 2 ,mem_key_num_ptr 
+0x6949 027861 ifetch 1 ,pdata 
+:      027862 keyscan_key_init_next:
+0x694a 027863 rtn blank 
+0x694b 027864 copy pdata ,loopcnt 
+0x694c 027866 fetch 2 ,mem_keyscan_ptr 
+0x694d 027867 increase 3 ,pdata 
+0x694e 027868 copy pdata ,rega 
+:      027869 keyscan_key_init_lp1:
+0x694f 027870 ifetcht 1 ,rega 
+0x6950 027871 call gpio_config_input 
+0x6951 027872 increase key_conf_struct_len ,rega 
+0x6952 027873 loop keyscan_key_init_lp1 
+:      027874 keyscan_key_init_end:
+0x6953 027875 rtn 
+:      027877 keyscan_scan_key:
+0x6954 027878 fetch 2 ,mem_keyscan_ptr 
+0x6955 027879 increase 3 ,pdata 
+0x6956 027880 copy pdata ,rega 
+0x6957 027882 force 0 ,regb 
+0x6958 027883 jam 0 ,mem_key_value_temp 
+:      027884 keyscan_scan_key_lp1:
+0x6959 027885 ifetcht 1 ,rega 
+0x695a 027886 call gpio_get_bit 
+0x695b 027887 bpatchx patch34_1 ,mem_patch34 
+0x695c 027888 fetch 2 ,mem_key_value_temp 
+0x695d 027889 copy regb ,queue 
+0x695e 027890 qsetflag true ,pdata 
+0x695f 027891 store 2 ,mem_key_value_temp 
+0x6960 027892 increase key_conf_struct_len ,rega 
+0x6961 027893 increase 1 ,regb 
+0x6962 027894 fetch 2 ,mem_key_num_ptr 
+0x6963 027895 ifetch 1 ,pdata 
+:      027896 keyscan_scan_key_lp1_next:
+0x6964 027897 ixor regb ,null 
+0x6965 027898 nbranch keyscan_scan_key_lp1 ,zero 
+0x6966 027899 fetch 2 ,mem_key_value_temp 
+0x6967 027900 fetcht 2 ,mem_key_value 
+0x6968 027901 ixor temp ,null 
+0x6969 027902 rtn zero 
+0x696a 027903 enable user 
+0x696b 027904 rtn 
+:      027906 keyscan_process_lpm_before:
+0x696c 027907 fetch 2 ,mem_key_num_ptr 
+0x696d 027908 ifetch 1 ,pdata 
+:      027909 keyscan_process_lpm_before_next:
+0x696e 027910 rtn blank 
+0x696f 027911 copy pdata ,loopcnt 
+0x6970 027912 fetch 2 ,mem_keyscan_ptr 
+0x6971 027913 increase 3 ,pdata 
+0x6972 027914 copy pdata ,rega 
+:      027915 keyscan_process_lpm_before_lp1:
+0x6973 027916 ifetcht 1 ,rega 
+0x6974 027917 call gpio_set_wake_by_current_state 
+0x6975 027918 increase key_conf_struct_len ,rega 
+0x6976 027919 loop keyscan_process_lpm_before_lp1 
+:      027920 keyscan_process_lpm_before_end:
+0x6977 027921 rtn 
+:      027923 keyscan_key_process:
+0x6978 027924 arg key_scan_timer ,queue 
+0x6979 027925 call timer_check 
+0x697a 027926 nrtn blank 
+0x697b 027927 setarg 0x20 
+0x697c 027928 arg key_scan_timer ,queue 
+0x697d 027929 call timer_init 
+0x697e 027930 disable user 
+0x697f 027931 call keyscan_process_lpm_before 
+0x6980 027932 bpatchx patch34_2 ,mem_patch34 
+0x6981 027933 fetch 2 ,mem_key_num_ptr 
+0x6982 027934 ifetch 1 ,pdata 
+:      027935 keyscan_key_process_next:
+0x6983 027936 rtn blank 
+0x6984 027937 call keyscan_scan_key 
+0x6985 027938 nbranch lpm_button_clean_wake_lock ,user 
+0x6986 027939 call lpm_button_get_wake_lock 
+0x6987 027940 disable user 
+0x6988 027941 fetch 2 ,mem_key_value_temp 
+0x6989 027942 store 2 ,mem_key_value_temp4 
+0x698a 027943 jam 0 ,mem_key_value_temp6 
+0x698b 027944 force 0 ,queue 
+:      027945 keyscan_key_lp1:
+0x698c 027946 fetch 2 ,mem_key_value 
+0x698d 027947 rshift pdata ,temp 
+0x698e 027948 storet 2 ,mem_key_value 
+0x698f 027949 and pdata ,0x01 ,pdata 
+0x6990 027950 fetcht 2 ,mem_key_value_temp4 
+0x6991 027951 and temp ,0x01 ,rega 
+0x6992 027952 rshift temp ,temp 
+0x6993 027953 storet 2 ,mem_key_value_temp4 
+0x6994 027954 ixor rega ,null 
+0x6995 027955 ncall keyscan_send_key_data ,zero 
+0x6996 027956 fetch 2 ,mem_key_num_ptr 
+0x6997 027957 ifetch 1 ,pdata 
+:      027958 keyscan_key_lp1_next:
+0x6998 027959 fetcht 1 ,mem_key_value_temp6 
+0x6999 027960 increase 1 ,temp 
+0x699a 027961 storet 1 ,mem_key_value_temp6 
+0x699b 027962 copy temp ,queue 
+0x699c 027963 ixor queue ,null 
+0x699d 027964 nbranch keyscan_key_lp1 ,zero 
+0x699e 027965 fetch 2 ,mem_key_value_temp 
+0x699f 027966 store 2 ,mem_key_value 
+0x69a0 027967 rtn 
+:      027968 keyscan_send_key_data:
+0x69a1 027969 bpatchx patch34_3 ,mem_patch34 
+0x69a2 027970 fetch 2 ,mem_keyscan_ptr 
+0x69a3 027971 increase 1 ,pdata 
+0x69a4 027972 ifetch 2 ,pdata 
+0x69a5 027973 branch callback_func 
+:      027984 pwm_init:
+0x69a6 027985 hfetch 1 ,core_clksel 
+0x69a7 027986 ior rega ,pdata 
+0x69a8 027987 hstore 1 ,core_clksel 
+0x69a9 027988 hfetch 2 ,core_clkoff 
+0x69aa 027989 set0 clock_off_pwm ,pdata 
+0x69ab 027990 hstore 2 ,core_clkoff 
+0x69ac 027991 nop 100 
+0x69ad 027992 rtn 
+:      028003 pwm_out_set:
+0x69ae 028004 fetcht 3 ,mem_pdatatemp + 2 
+0x69af 028005 setarg pwm_12mhz 
+0x69b0 028006 idiv temp 
+0x69b1 028007 call wait_div_end 
+0x69b2 028008 quotient temp 
+0x69b3 028009 fetch 1 ,mem_pdatatemp + 5 
+0x69b4 028010 imul32 temp ,pdata 
+0x69b5 028011 div pdata ,100 
+0x69b6 028012 call wait_div_end 
+0x69b7 028013 quotient rega 
+0x69b8 028014 copy temp ,pdata 
+0x69b9 028015 isub rega ,regb 
+0x69ba 028016 fetch 1 ,mem_pdatatemp + 1 
+0x69bb 028017 call pwm_duty_cycle_set 
+0x69bc 028018 fetch 1 ,mem_pdatatemp 
+0x69bd 028019 branch pwm_enable 
+:      028022 pwm_duty_cycle_set:
+0x69be 028023 beq 0 ,pwm_pwm0_duty_set 
+0x69bf 028024 beq 1 ,pwm_pwm1_duty_set 
+0x69c0 028025 beq 2 ,pwm_pwm2_duty_set 
+0x69c1 028026 beq 3 ,pwm_pwm3_duty_set 
+0x69c2 028027 beq 4 ,pwm_pwm4_duty_set 
+0x69c3 028028 beq 5 ,pwm_pwm5_duty_set 
+:      028029 pwm_pwm0_duty_set:
+0x69c4 028030 arg core_pwm_pcnt0 ,contw 
+0x69c5 028031 branch pwm_set_pncnt 
+:      028032 pwm_pwm1_duty_set:
+0x69c6 028033 arg core_pwm_pcnt1 ,contw 
+0x69c7 028034 branch pwm_set_pncnt 
+:      028035 pwm_pwm2_duty_set:
+0x69c8 028036 arg core_pwm_pcnt2 ,contw 
+0x69c9 028037 branch pwm_set_pncnt 
+:      028038 pwm_pwm3_duty_set:
+0x69ca 028039 arg core_pwm_pcnt3 ,contw 
+0x69cb 028040 branch pwm_set_pncnt 
+:      028041 pwm_pwm4_duty_set:
+0x69cc 028042 arg core_pwm_pcnt4 ,contw 
+0x69cd 028043 branch pwm_set_pncnt 
+:      028044 pwm_pwm5_duty_set:
+0x69ce 028045 arg core_pwm_pcnt5 ,contw 
+0x69cf 028046 branch pwm_set_pncnt 
+:      028047 pwm_set_pncnt:
+0x69d0 028048 copy rega ,pdata 
+0x69d1 028049 istore 2 ,contw 
+0x69d2 028050 copy regb ,pdata 
+0x69d3 028051 istore 2 ,contw 
+0x69d4 028052 rtn 
+:      028056 pwm_enable:
+0x69d5 028057 enable user 
+0x69d6 028058 branch pwm_gpio_set 
+:      028059 pwm_disable:
+0x69d7 028060 disable user 
+:      028061 pwm_gpio_set:
+0x69d8 028062 beq 4 ,pwm_gpio4_set 
+0x69d9 028063 beq 5 ,pwm_gpio5_set 
+0x69da 028064 beq 27 ,pwm_gpio27_set 
+0x69db 028065 beq 28 ,pwm_gpio28_set 
+0x69dc 028066 beq 3 ,pwm_gpio3_set 
+0x69dd 028067 beq 8 ,pwm_gpio8_set 
+0x69de 028068 beq 20 ,pwm_gpio20_set 
+0x69df 028069 beq 21 ,pwm_gpio21_set 
+0x69e0 028070 beq 22 ,pwm_gpio22_set 
+0x69e1 028071 beq 23 ,pwm_gpio23_set 
+0x69e2 028072 rtn 
+:      028075 pwm_gpio4_set:
+0x69e3 028076 arg 6 ,queue 
+0x69e4 028077 branch pwm_one_set_select 
+:      028078 pwm_gpio5_set:
+0x69e5 028079 arg 7 ,queue 
+0x69e6 028080 branch pwm_one_set_select 
+:      028081 pwm_gpio27_set:
+0x69e7 028082 arg 8 ,queue 
+0x69e8 028083 branch pwm_one_set_select 
+:      028084 pwm_gpio28_set:
+0x69e9 028085 arg 9 ,queue 
+0x69ea 028086 branch pwm_one_set_select 
+:      028087 pwm_gpio3_set:
+0x69eb 028088 arg 10 ,queue 
+0x69ec 028089 branch pwm_one_set_select 
+:      028090 pwm_gpio8_set:
+0x69ed 028091 arg 11 ,queue 
+0x69ee 028092 branch pwm_one_set_select 
+:      028093 pwm_gpio20_set:
+0x69ef 028094 arg 12 ,queue 
+0x69f0 028095 branch pwm_tw0_set_select 
+:      028096 pwm_gpio21_set:
+0x69f1 028097 arg 13 ,queue 
+0x69f2 028098 branch pwm_tw0_set_select 
+:      028099 pwm_gpio22_set:
+0x69f3 028100 arg 14 ,queue 
+0x69f4 028101 branch pwm_tw0_set_select 
+:      028102 pwm_gpio23_set:
+0x69f5 028103 arg 15 ,queue 
+0x69f6 028104 branch pwm_tw0_set_select 
+:      028106 pwm_set_select:
+0x69f7 028107 hfetch 2 ,core_gpio_sel1 
+0x69f8 028108 qsetflag user ,pdata 
+0x69f9 028109 hstore 2 ,core_gpio_sel1 
+0x69fa 028110 copy rega ,queue 
+0x69fb 028111 hfetch 1 ,core_gpio_key2 
+0x69fc 028112 qsetflag user ,pdata 
+0x69fd 028113 hstore 1 ,core_gpio_key2 
+0x69fe 028114 rtn 
+:      028116 pwm_one_set_select:
+0x69ff 028117 add queue ,-4 ,rega 
+0x6a00 028118 branch pwm_set_select 
+:      028120 pwm_tw0_set_select:
+0x6a01 028121 add queue ,-10 ,rega 
+0x6a02 028122 branch pwm_set_select 
+:      028127 rfcomm_init:
+0x6a03 028128 rtn wake 
+0x6a04 028129 jam 0 ,mem_rfcomm_send_more_pkt 
+0x6a05 028130 jam bits9600 ,memremoterpnbitrate 
+0x6a06 028131 jam databits8 ,memremoteprndatabits 
+0x6a07 028132 jam 0x11 ,memremoteprnxon 
+0x6a08 028133 jam 0x13 ,memremoteprnxoff 
+0x6a09 028134 setarg 0 
+0x6a0a 028135 store 3 ,memremoteprnstopbit 
+0x6a0b 028136 store 1 ,mem_spp_state 
+0x6a0c 028137 jam 0 ,memui_reconnect_mode 
+:      028139 rfcomm_init_spp:
+0x6a0d 028140 bpatchx patch34_4 ,mem_patch34 
+0x6a0e 028141 setarg 0 
+0x6a0f 028142 store 1 ,mem_spp_state 
+0x6a10 028143 store 1 ,mem_remote_spp_channel 
+0x6a11 028144 store 1 ,mem_pn_dlci 
+0x6a12 028145 fetch 1 ,mem_credit_flag 
+0x6a13 028146 beq credit_enable ,rfcomm_init_spp_with_credit 
+0x6a14 028147 jam 0x50 ,mem_credit_given 
+0x6a15 028148 rtn 
+:      028150 rfcomm_init_spp_with_credit:
+0x6a16 028151 jam 0x00 ,mem_credit_given 
+0x6a17 028152 rtn 
+:      028154 set_cr_bit:
+0x6a18 028155 or_into 0x02 ,temp 
+0x6a19 028156 rtn 
+:      028168 rfcomm_calculate_fcs_sabm:
+0x6a1a 028169 copy temp ,pdata 
+0x6a1b 028170 reverse pdata ,pdata 
+0x6a1c 028171 store 1 ,memfcstemp3 
+0x6a1d 028172 force ini_tx_sabm ,pdata 
+0x6a1e 028173 reverse pdata ,pdata 
+0x6a1f 028174 store 1 ,memfcstemp2 
+0x6a20 028175 force 0x01 ,pdata 
+0x6a21 028176 reverse pdata ,pdata 
+0x6a22 028177 store 1 ,memfcstemp1 
+0x6a23 028178 call caculate_fcs 
+0x6a24 028179 copy temp ,pdata 
+0x6a25 028180 rtn 
+:      028181 rfcomm_calculate_fcs_ua:
+0x6a26 028182 reverse pdata ,pdata 
+0x6a27 028183 store 1 ,memfcstemp3 
+0x6a28 028184 force rsp_tx_ua ,pdata 
+0x6a29 028185 reverse pdata ,pdata 
+0x6a2a 028186 store 1 ,memfcstemp2 
+0x6a2b 028187 force 0x01 ,pdata 
+0x6a2c 028188 reverse pdata ,pdata 
+0x6a2d 028189 store 1 ,memfcstemp1 
+0x6a2e 028190 branch caculate_fcs 
+:      028192 rfcomm_calculate_fcs_dlci0:
+0x6a2f 028193 fetch 1 ,mem_rfcomm_initiator 
+0x6a30 028194 branch rfcomm_calculate_fcs_dlci0_res ,blank 
+0x6a31 028195 setarg 0x70 
+0x6a32 028196 rtn 
+:      028197 rfcomm_calculate_fcs_dlci0_res:
+0x6a33 028198 setarg 0xaa 
+0x6a34 028199 rtn 
+:      028201 rfcomm_save_fcs_uih:
+0x6a35 028202 reverse pdata ,pdata 
+0x6a36 028203 store 1 ,memfcstemp3 
+0x6a37 028204 force rsp_rx_uih ,pdata 
+0x6a38 028205 call caculate_uihdata_fcs 
+0x6a39 028206 fetcht 2 ,mem_contw_temp 
+0x6a3a 028207 copy temp ,contw 
+0x6a3b 028208 istore 1 ,contw 
+0x6a3c 028209 copy contw ,temp 
+0x6a3d 028210 storet 2 ,mem_contw_temp 
+0x6a3e 028211 force rsp_rx_uih_wdata ,pdata 
+0x6a3f 028212 call caculate_uihdata_fcs 
+0x6a40 028213 fetcht 2 ,mem_contw_temp 
+0x6a41 028214 copy temp ,contw 
+0x6a42 028215 istore 1 ,contw 
+0x6a43 028216 rtn 
+:      028225 caculate_uihdata_fcs:
+0x6a44 028226 reverse pdata ,pdata 
+0x6a45 028227 store 1 ,memfcstemp2 
+0x6a46 028228 fetch 2 ,memfcstemp2 
+0x6a47 028229 lshift8 pdata ,pdata 
+0x6a48 028230 store 3 ,mem_mod2div_temp 
+0x6a49 028231 arg 0x107 ,rega 
+0x6a4a 028232 arg 0xf ,regb 
+0x6a4b 028233 call mod2div 
+0x6a4c 028234 xor_into 0xd7 ,pdata 
+0x6a4d 028235 invert pdata ,pdata 
+0x6a4e 028236 reverse pdata ,pdata 
+0x6a4f 028237 rtn 
+:      028247 caculate_fcs:
+0x6a50 028248 fetch 3 ,memfcstemp1 
+0x6a51 028249 store 3 ,mem_mod2div_temp 
+0x6a52 028250 arg 0x107 ,rega 
+0x6a53 028251 arg 0xf ,regb 
+0x6a54 028252 call mod2div 
+0x6a55 028253 lshift8 pdata ,pdata 
+0x6a56 028254 arg 0x7 ,regb 
+0x6a57 028255 call mod2div 
+0x6a58 028256 xor_into 0x2b ,pdata 
+0x6a59 028257 invert pdata ,pdata 
+0x6a5a 028258 reverse pdata ,pdata 
+0x6a5b 028259 copy pdata ,temp 
+0x6a5c 028260 rtn 
+:      028262 mod2div:
+0x6a5d 028263 arg 0 ,regc 
+0x6a5e 028264 copy regb ,loopcnt 
+0x6a5f 028265 call right_shift_n 
+0x6a60 028266 icopy temp 
+:      028267 mod2div_loop:
+0x6a61 028272 copy temp ,pdata 
+0x6a62 028273 lshift regc ,regc 
+0x6a63 028274 bbit0 8 ,mod2div_not_enough_reduction 
+0x6a64 028275 ixor rega ,temp 
+0x6a65 028276 increase 1 ,regc 
+:      028277 mod2div_not_enough_reduction:
+0x6a66 028278 lshift temp ,temp 
+0x6a67 028279 fetch 3 ,mem_mod2div_temp 
+0x6a68 028280 increase -1 ,regb 
+0x6a69 028281 compare 0xff ,regb ,0xff 
+0x6a6a 028282 branch mod2div_end ,true 
+0x6a6b 028283 copy regb ,loopcnt 
+0x6a6c 028284 call right_shift_n 
+0x6a6d 028285 isolate1 0 ,pdata 
+0x6a6e 028286 setflag true ,0 ,temp 
+0x6a6f 028287 branch mod2div_loop 
+:      028288 mod2div_end:
+0x6a70 028290 rshift temp ,pdata 
+0x6a71 028291 rtn 
+:      028293 get_rfcomm_snd_adss:
+0x6a72 028294 fetcht 1 ,mem_pn_dlci 
+:      028295 dlci_to_address_cmd:
+0x6a73 028297 lshift2 temp ,temp 
+0x6a74 028298 set1 rfcomm_address_ext_len ,temp 
+0x6a75 028299 fetch 1 ,mem_rfcomm_initiator 
+0x6a76 028300 ncall set_cr_bit ,blank 
+0x6a77 028301 storet 1 ,mem_rfcomm_send_adss 
+0x6a78 028302 rtn 
+:      028304 channel_to_dlci:
+0x6a79 028306 lshift temp ,temp 
+0x6a7a 028307 fetch 1 ,mem_rfcomm_initiator 
+0x6a7b 028308 setflag blank ,0 ,temp 
+0x6a7c 028310 rtn 
+:      028311 rfcomm_rx_process_dlci0_sabm:
+0x6a7d 028312 fetcht 1 ,mem_current_channel 
+0x6a7e 028313 jam 0xd7 ,mem_current_fcs 
+0x6a7f 028314 call rfcomm_send_ua 
+0x6a80 028315 fetch 1 ,mem_rfcomm_state 
+0x6a81 028316 set1 l2cap_channel_rfcomm_only_sabm ,pdata 
+0x6a82 028317 set1 l2cap_channel_rfcomm_only_ua ,pdata 
+0x6a83 028318 store 1 ,mem_rfcomm_state 
+0x6a84 028319 jam 0 ,mem_rfcomm_initiator 
+0x6a85 028320 branch rfcomm_rx_process_end 
+:      028321 rfcomm_rx_process_dlci0_ua:
+0x6a86 028322 fetch 1 ,mem_rfcomm_state 
+0x6a87 028323 set1 l2cap_channel_rfcomm_only_ua ,pdata 
+0x6a88 028324 store 1 ,mem_rfcomm_state 
+0x6a89 028325 branch rfcomm_rx_process_end 
+:      028328 rfcomm_rx_process:
+0x6a8a 028329 bpatchx patch34_5 ,mem_patch34 
+0x6a8b 028330 fetch 1 ,memui_reconnect_mode 
+0x6a8c 028331 beq no_reconnection ,rfcomm_rx_process_remote_page 
+0x6a8d 028332 branch rfcomm_rx_process_reconn 
+:      028334 rfcomm_rx_process_remote_page:
+0x6a8e 028335 fetch 2 ,mem_l2cap_payload_ptr 
+0x6a8f 028336 copy pdata ,contr 
+0x6a90 028337 call get_rfcomm_head_struct 
+0x6a91 028338 fetch 1 ,mem_current_channel 
+0x6a92 028339 beq 0 ,parse_dlci0_rp 
+0x6a93 028340 branch parse_uih_rp 
+:      028341 parse_dlci0_rp:
+0x6a94 028342 bpatchx patch34_6 ,mem_patch34 
+0x6a95 028343 fetch 1 ,mem_current_frame_type 
+0x6a96 028344 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm 
+0x6a97 028345 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua 
+0x6a98 028346 beq rfcomm_frame_type_uih ,parse_dlci0_rp_uih 
+0x6a99 028347 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn_send_event 
+0x6a9a 028348 rtn 
+:      028351 parse_dlci0_rp_uih:
+0x6a9b 028352 fetch 2 ,mem_rfcomm_uih_payload_ptr 
+0x6a9c 028353 copy pdata ,contr 
+0x6a9d 028354 call get_rfcomm_uih_head_struct 
+0x6a9e 028355 fetch 1 ,mem_uih_cmd_type 
+0x6a9f 028356 beq uih_param_neg_cmd ,parse_dlci0_rp_uih_pn_cmd 
+0x6aa0 028357 beq uih_param_neg_res ,parse_dlci0_rp_uih_pn_res 
+0x6aa1 028358 beq uih_modem_status_cmd ,parse_dlci0_rp_uih_ms_cmd 
+0x6aa2 028359 beq uih_modem_status_res ,parse_dlci0_rp_uih_ms_res 
+0x6aa3 028360 beq uih_param_cmd_remove_port ,parse_dlci0_rp_uih_cmd_port 
+0x6aa4 028361 branch rfcomm_rx_process_end 
+:      028363 parse_dlci0_rp_uih_pn_cmd:
+0x6aa5 028364 call parse_dlci0_rp_uih_pn_res_common 
+0x6aa6 028366 branch parse_dlci0_rp_uih_pn_cmd_spp 
+:      028368 parse_dlci0_rp_uih_pn_cmd_spp:
+0x6aa7 028369 fetch 1 ,mem_spp_state 
+0x6aa8 028370 set1 rfcomm_channel_state_pn_cmd ,pdata 
+0x6aa9 028371 set1 rfcomm_channel_state_pn_res ,pdata 
+0x6aaa 028372 store 1 ,mem_spp_state 
+0x6aab 028373 call rfcomm_send_param_neg_res 
+0x6aac 028374 branch rfcomm_rx_process_end 
+:      028376 parse_dlci0_rp_uih_pn_res:
+0x6aad 028377 call parse_dlci0_rp_uih_pn_res_common 
+0x6aae 028378 branch rfcomm_rx_process_end 
+:      028380 parse_dlci0_rp_uih_pn_res_common:
+0x6aaf 028381 call get_param_payload_ptr 
+0x6ab0 028382 branch get_rfcomm_prarmer_negotiation 
+:      028384 get_rfcomm_param_modem_status:
+0x6ab1 028385 call get_param_payload_ptr 
+0x6ab2 028386 ifetch 1 ,contr 
+0x6ab3 028387 rshift3 pdata ,pdata 
+0x6ab4 028388 store 1 ,mem_ms_channel 
+0x6ab5 028389 ifetch 1 ,contr 
+0x6ab6 028390 store 1 ,mem_ms_param 
+0x6ab7 028391 rtn 
+:      028394 get_rfcomm_head_struct:
+0x6ab8 028395 ifetch 1 ,contr 
+0x6ab9 028396 store 1 ,mem_current_adss 
+0x6aba 028397 rshift3 pdata ,pdata 
+0x6abb 028398 store 1 ,mem_current_channel 
+0x6abc 028399 ifetch 1 ,contr 
+0x6abd 028400 store 1 ,mem_current_frame_type 
+:      028401 get_rfcomm_current_length:
+0x6abe 028402 call get_rfcomm_length_common 
+0x6abf 028403 storet 2 ,mem_current_length 
+0x6ac0 028404 copy contr ,pdata 
+0x6ac1 028405 store 2 ,mem_rfcomm_uih_payload_ptr 
+0x6ac2 028406 rtn 
+:      028408 get_rfcomm_uih_head_struct:
+0x6ac3 028409 ifetch 1 ,contr 
+0x6ac4 028410 rshift pdata ,pdata 
+0x6ac5 028411 store 1 ,mem_uih_cmd_type 
+0x6ac6 028412 call get_rfcomm_length_common 
+0x6ac7 028413 storet 2 ,mem_uih_length 
+0x6ac8 028414 copy contr ,pdata 
+0x6ac9 028415 store 2 ,mem_param_payload_ptr 
+0x6aca 028416 rtn 
+:      028419 get_param_payload_ptr:
+0x6acb 028420 fetch 2 ,mem_param_payload_ptr 
+0x6acc 028421 copy pdata ,contr 
+0x6acd 028422 rtn 
+:      028424 get_rfcomm_length_common:
+0x6ace 028425 ifetch 1 ,contr 
+0x6acf 028426 copy pdata ,temp 
+0x6ad0 028427 rshift temp ,temp 
+0x6ad1 028428 rtnbit1 0 
+0x6ad2 028429 ifetch 1 ,contr 
+0x6ad3 028430 lshift3 pdata ,pdata 
+0x6ad4 028431 lshift4 pdata ,pdata 
+0x6ad5 028432 iadd temp ,temp 
+0x6ad6 028433 rtn 
+:      028435 get_rfcomm_prarmer_negotiation:
+0x6ad7 028436 ifetch 1 ,contr 
+0x6ad8 028437 store 1 ,mem_pn_dlci 
+0x6ad9 028438 ifetch 1 ,contr 
+0x6ada 028439 store 1 ,mem_pn_credit_flow_type_info 
+0x6adb 028440 ifetch 1 ,contr 
+0x6adc 028441 store 1 ,mem_pn_priority 
+0x6add 028442 ifetch 1 ,contr 
+0x6ade 028443 store 1 ,mem_pn_acknowledg_timer 
+0x6adf 028444 ifetch 2 ,contr 
+0x6ae0 028445 store 2 ,mem_pn_max_frame_size 
+0x6ae1 028446 ifetch 1 ,contr 
+0x6ae2 028447 store 1 ,mem_pn_max_retrans 
+0x6ae3 028448 ifetch 1 ,contr 
+0x6ae4 028449 store 1 ,mem_remote_credits 
+0x6ae5 028450 rtn 
+:      028453 parse_dlci0_rp_uih_ms_cmd:
+0x6ae6 028454 call get_rfcomm_param_modem_status 
+0x6ae7 028456 branch parse_dlci0_rp_uih_ms_cmd_spp 
+:      028458 parse_dlci0_rp_uih_ms_cmd_spp:
+0x6ae8 028459 fetch 1 ,mem_spp_state 
+0x6ae9 028460 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata 
+0x6aea 028461 set1 rfcomm_channel_state_snd_ms_res ,pdata 
+0x6aeb 028462 store 1 ,mem_spp_state 
+0x6aec 028463 fetcht 1 ,mem_pn_dlci 
+0x6aed 028464 lshift2 temp ,temp 
+0x6aee 028465 or_into 3 ,temp 
+0x6aef 028466 call rfcomm_send_modem_status_res 
+0x6af0 028467 jam more_pkt_msc_cmd_spp ,mem_rfcomm_send_more_pkt 
+0x6af1 028468 branch rfcomm_rx_process_end 
+:      028470 parse_dlci0_rp_uih_ms_res:
+0x6af2 028471 jam bt_evt_spp_connected ,mem_fifo_temp 
+0x6af3 028472 call ui_ipc_send_event 
+0x6af4 028473 call get_rfcomm_param_modem_status 
+0x6af5 028474 fetch 1 ,mem_ms_channel 
+0x6af6 028475 sub pdata ,1 ,null 
+0x6af7 028476 branch parse_dlci0_rp_uih_ms_res_spp ,zero 
+0x6af8 028477 branch assert 
+:      028478 parse_dlci0_rp_uih_ms_res_spp:
+0x6af9 028479 fetch 1 ,mem_spp_state 
+0x6afa 028480 set1 rfcomm_channel_state_rcv_ms_res ,pdata 
+0x6afb 028481 store 1 ,mem_spp_state 
+0x6afc 028482 branch rfcomm_rx_process_end 
+:      028484 parse_dlci0_rp_uih_cmd_port:
+0x6afd 028485 call get_param_payload_ptr 
+0x6afe 028486 ifetch 1 ,contr 
+0x6aff 028487 store 1 ,mem_rpn_dlci 
+0x6b00 028488 call l2cap_malloc_rfcomm_channel 
+0x6b01 028489 call l2cap_get_rfcomm_tx_buff 
+0x6b02 028490 setarg 0x000e 
+0x6b03 028491 istore 2 ,contw 
+0x6b04 028492 fetch 2 ,mem_rfcomm_remote_cid 
+0x6b05 028493 istore 2 ,contw 
+0x6b06 028494 fetch 1 ,mem_rfcomm_initiator 
+0x6b07 028496 lshift pdata ,pdata 
+0x6b08 028497 set1 0 ,pdata 
+0x6b09 028498 istore 1 ,contw 
+0x6b0a 028499 bpatchx patch34_7 ,mem_patch34 
+0x6b0b 028500 setarg 0x15ef 
+0x6b0c 028501 istore 2 ,contw 
+0x6b0d 028502 setarg 0x1191 
+0x6b0e 028503 istore 2 ,contw 
+0x6b0f 028506 fetch 1 ,mem_rpn_dlci 
+0x6b10 028507 istore 1 ,contw 
+0x6b11 028508 setarg 0x000007 
+0x6b12 028509 istore 5 ,contw 
+0x6b13 028512 setarg 0x01 
+0x6b14 028513 istore 2 ,contw 
+0x6b15 028516 call rfcomm_calculate_fcs_dlci0 
+0x6b16 028517 istore 1 ,contw 
+0x6b17 028518 rtn 
+:      028522 parse_uih_rp:
+0x6b18 028523 branch parse_uih_rp_spp 
+:      028525 parse_uih_rp_spp:
+0x6b19 028526 bpatchx patch35_0 ,mem_patch35 
+0x6b1a 028527 fetch 1 ,mem_current_frame_type 
+0x6b1b 028528 beq rfcomm_frame_type_ua ,parse_uih_rp_spp_ua 
+0x6b1c 028529 beq rfcomm_frame_type_sabm ,parse_uih_rp_spp_sabm 
+0x6b1d 028530 beq rfcomm_frame_type_uih ,parse_uih_spp_uih 
+0x6b1e 028531 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits 
+0x6b1f 028532 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn 
+0x6b20 028533 rtn 
+:      028534 parse_uih_rp_spp_ua:
+0x6b21 028535 fetch 1 ,mem_spp_state 
+0x6b22 028536 set1 rfcomm_channel_state_ua ,pdata 
+0x6b23 028537 store 1 ,mem_spp_state 
+0x6b24 028538 branch rfcomm_rx_process_end 
+:      028539 parse_uih_rp_spp_sabm:
+0x6b25 028540 fetch 1 ,mem_spp_state 
+0x6b26 028541 set1 rfcomm_channel_state_ua ,pdata 
+0x6b27 028542 set1 rfcomm_channel_state_sabm ,pdata 
+0x6b28 028543 store 1 ,mem_spp_state 
+0x6b29 028544 fetch 1 ,mem_current_adss 
+0x6b2a 028545 call rfcomm_calculate_fcs_ua 
+0x6b2b 028546 store 1 ,mem_current_fcs 
+0x6b2c 028547 call rfcomm_send_ua 
+0x6b2d 028548 fetch 1 ,mem_current_adss 
+0x6b2e 028549 rshift2 pdata ,pdata 
+0x6b2f 028550 store 1 ,mem_pn_dlci 
+0x6b30 028551 lshift2 pdata ,pdata 
+0x6b31 028552 set0 rfcomm_address_cr ,pdata 
+0x6b32 028553 set1 rfcomm_address_ext_len ,pdata 
+0x6b33 028554 arg mem_hiufcs_spp ,temp 
+0x6b34 028555 storet 2 ,mem_contw_temp 
+0x6b35 028556 call rfcomm_save_fcs_uih 
+0x6b36 028557 branch rfcomm_rx_process_end 
+:      028559 parse_uih_spp_uih_credits:
+0x6b37 028560 fetch 2 ,mem_rfcomm_uih_payload_ptr 
+0x6b38 028561 copy pdata ,contr 
+0x6b39 028562 increase 1 ,pdata 
+0x6b3a 028563 store 2 ,mem_rfcomm_uih_payload_ptr 
+0x6b3b 028564 ifetch 1 ,contr 
+0x6b3c 028565 fetcht 1 ,mem_remote_credits 
+0x6b3d 028566 iadd temp ,pdata 
+0x6b3e 028567 store 1 ,mem_remote_credits 
+:      028568 parse_uih_spp_uih:
+0x6b3f 028569 call rfcomm_increase_credit_given 
+:      028570 parse_uih_spp_uih_cont:
+0x6b40 028571 call get_rfcomm_snd_adss 
+0x6b41 028572 call rfcomm_send_uih_without_payload 
+0x6b42 028573 call spp_process_rx_data 
+0x6b43 028574 branch rfcomm_rx_process_end 
+:      028576 parse_uih_rp_spp_disconn_send_event:
+0x6b44 028577 jam bt_evt_spp_disconnected ,mem_fifo_temp 
+0x6b45 028578 call ui_ipc_send_event 
+:      028579 parse_uih_rp_spp_disconn:
+0x6b46 028580 call rfcomm_init_spp 
+0x6b47 028581 fetch 1 ,mem_current_adss 
+0x6b48 028582 call rfcomm_calculate_fcs_ua 
+0x6b49 028583 store 1 ,mem_current_fcs 
+0x6b4a 028584 call rfcomm_send_ua 
+0x6b4b 028585 branch rfcomm_rx_process_end 
+:      028590 rfcomm_rx_process_reconn:
+0x6b4c 028591 fetch 2 ,mem_l2cap_payload_ptr 
+0x6b4d 028592 copy pdata ,contr 
+0x6b4e 028593 call get_rfcomm_head_struct 
+0x6b4f 028594 fetch 1 ,mem_current_channel 
+0x6b50 028595 beq 0 ,parse_dlci0_reconn 
+0x6b51 028596 branch parse_uih_reconn 
+:      028598 parse_dlci0_reconn:
+0x6b52 028599 bpatchx patch35_1 ,mem_patch35 
+0x6b53 028600 fetch 1 ,mem_current_frame_type 
+0x6b54 028601 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm 
+0x6b55 028602 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua 
+0x6b56 028603 beq rfcomm_frame_type_uih ,parse_dlci0_reconn_uih 
+0x6b57 028604 branch rfcomm_rx_process_end 
+:      028605 parse_dlci0_reconn_uih:
+0x6b58 028606 fetch 2 ,mem_rfcomm_uih_payload_ptr 
+0x6b59 028607 copy pdata ,contr 
+0x6b5a 028608 call get_rfcomm_uih_head_struct 
+0x6b5b 028609 fetch 1 ,mem_uih_cmd_type 
+0x6b5c 028610 beq uih_param_neg_cmd ,parse_dlci0_reconn_uih_pn_cmd 
+0x6b5d 028611 beq uih_param_neg_res ,parse_dlci0_reconn_uih_pn_cmd 
+0x6b5e 028612 beq uih_modem_status_cmd ,parse_dlci0_reconn_uih_ms_cmd 
+0x6b5f 028613 beq uih_modem_status_res ,parse_dlci0_reconn_uih_ms_res 
+0x6b60 028614 branch rfcomm_rx_process_end 
+:      028616 parse_dlci0_reconn_uih_pn_cmd:
+0x6b61 028617 call parse_dlci0_rp_uih_pn_res_common 
+0x6b62 028618 fetch 1 ,mem_pn_dlci 
+0x6b63 028619 rshift pdata ,pdata 
+0x6b64 028620 fetcht 1 ,mem_remote_spp_channel 
+0x6b65 028621 isub temp ,null 
+0x6b66 028622 branch parse_dlci0_reconn_uih_pn_cmd_spp ,zero 
+0x6b67 028623 branch assert 
+:      028624 parse_dlci0_reconn_uih_pn_cmd_spp:
+0x6b68 028625 fetch 1 ,mem_spp_state 
+0x6b69 028626 set1 rfcomm_channel_state_pn_res ,pdata 
+0x6b6a 028627 store 1 ,mem_spp_state 
+0x6b6b 028628 branch rfcomm_rx_process_end 
+:      028630 parse_dlci0_reconn_uih_ms_cmd:
+0x6b6c 028631 call get_rfcomm_param_modem_status 
+0x6b6d 028632 fetch 1 ,mem_ms_channel 
+0x6b6e 028633 fetcht 1 ,mem_remote_spp_channel 
+0x6b6f 028634 isub temp ,null 
+0x6b70 028635 branch parse_dlci0_reconn_uih_ms_cmd_spp ,zero 
+0x6b71 028636 branch assert 
+0x6b72 028637 branch rfcomm_rx_process_end 
+:      028638 parse_dlci0_reconn_uih_ms_cmd_spp:
+0x6b73 028639 fetch 1 ,mem_spp_state 
+0x6b74 028640 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata 
+0x6b75 028641 set1 rfcomm_channel_state_snd_ms_res ,pdata 
+0x6b76 028642 store 1 ,mem_spp_state 
+0x6b77 028643 fetcht 1 ,mem_pn_dlci 
+0x6b78 028644 lshift2 temp ,temp 
+0x6b79 028645 or_into 3 ,temp 
+0x6b7a 028646 call rfcomm_send_modem_status_res 
+0x6b7b 028647 branch rfcomm_rx_process_end 
+:      028649 parse_dlci0_reconn_uih_ms_res:
+0x6b7c 028650 call get_rfcomm_param_modem_status 
+0x6b7d 028651 fetch 1 ,mem_ms_channel 
+0x6b7e 028652 fetcht 1 ,mem_remote_spp_channel 
+0x6b7f 028653 isub temp ,null 
+0x6b80 028654 branch parse_dlci0_reconn_uih_ms_res_spp ,zero 
+0x6b81 028655 branch assert 
+:      028656 parse_dlci0_reconn_uih_ms_res_spp:
+0x6b82 028657 fetch 1 ,mem_spp_state 
+0x6b83 028658 set1 rfcomm_channel_state_rcv_ms_res ,pdata 
+0x6b84 028659 store 1 ,mem_spp_state 
+0x6b85 028660 branch rfcomm_rx_process_end 
+:      028662 parse_uih_reconn:
+0x6b86 028663 fetch 1 ,mem_current_channel 
+0x6b87 028664 fetcht 1 ,mem_remote_spp_channel 
+0x6b88 028665 isub temp ,null 
+0x6b89 028666 branch parse_uih_reconn_spp ,zero 
+0x6b8a 028667 branch assert 
+0x6b8b 028668 branch rfcomm_rx_process_end 
+:      028670 parse_uih_reconn_spp:
+0x6b8c 028671 fetch 1 ,mem_current_frame_type 
+0x6b8d 028672 beq rfcomm_frame_type_ua ,parse_uih_reconn_spp_ua 
+0x6b8e 028673 beq rfcomm_frame_type_uih ,parse_uih_spp_uih 
+0x6b8f 028674 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits 
+0x6b90 028675 beq rfcomm_frame_type_disconn ,parse_uih_reconn_spp_disconn 
+:      028676 parse_uih_reconn_spp_ua:
+0x6b91 028677 fetch 1 ,mem_spp_state 
+0x6b92 028678 set1 rfcomm_channel_state_ua ,pdata 
+0x6b93 028679 store 1 ,mem_spp_state 
+0x6b94 028680 branch rfcomm_rx_process_end 
+:      028681 parse_uih_reconn_spp_sabm:
+0x6b95 028682 branch parse_uih_reconn_spp_sabm 
+:      028683 parse_uih_reconn_spp_disconn:
+0x6b96 028684 branch parse_uih_rp_spp_disconn 
+:      028685 rfcomm_rx_process_end:
+0x6b97 028686 rtn 
+:      028688 rfcomm_send_more_pkt:
+0x6b98 028689 fetch 1 ,mem_rfcomm_send_more_pkt 
+0x6b99 028690 rtn blank 
+0x6b9a 028691 beq more_pkt_msc_cmd_spp ,rfcomm_send_more_pkt_msc_cmd_spp 
+0x6b9b 028692 branch assert 
+:      028694 rfcomm_send_more_pkt_msc_cmd_spp:
+0x6b9c 028695 jam 0 ,mem_rfcomm_send_more_pkt 
+0x6b9d 028696 call l2cap_malloc_rfcomm_channel 
+0x6b9e 028697 arg spp_slave_channel ,temp 
+0x6b9f 028698 fetcht 1 ,mem_pn_dlci 
+0x6ba0 028699 lshift2 temp ,temp 
+:      028700 rfcomm_send_more_pkt_msc_cmd_spp0:
+0x6ba1 028701 or_into 0x03 ,temp 
+0x6ba2 028702 arg 0xaa ,rega 
+0x6ba3 028703 call rfcomm_send_modem_status_cmd 
+0x6ba4 028704 call l2cap_get_rfcomm_tx_buff 
+0x6ba5 028705 copy contw ,contr 
+0x6ba6 028706 ifetch 2 ,contr 
+0x6ba7 028707 branch assert ,blank 
+0x6ba8 028708 rtn 
+:      028710 rfcomm_send_sabm:
+0x6ba9 028711 call l2cap_get_rfcomm_tx_buff 
+0x6baa 028712 setarg 0x0004 
+0x6bab 028713 istore 2 ,contw 
+0x6bac 028714 fetch 2 ,mem_rfcomm_remote_cid 
+0x6bad 028715 istore 2 ,contw 
+0x6bae 028716 fetch 1 ,mem_current_adss 
+0x6baf 028717 istore 1 ,contw 
+0x6bb0 028718 bpatchx patch35_2 ,mem_patch35 
+0x6bb1 028719 setarg 0x013f 
+0x6bb2 028720 istore 2 ,contw 
+0x6bb3 028721 fetch 1 ,mem_current_fcs 
+0x6bb4 028722 istore 1 ,contw 
+0x6bb5 028723 rtn 
+:      028724 rfcomm_send_ua:
+0x6bb6 028725 call l2cap_malloc_rfcomm_channel 
+0x6bb7 028726 call l2cap_get_rfcomm_tx_buff 
+0x6bb8 028727 setarg 0x0004 
+0x6bb9 028728 istore 2 ,contw 
+0x6bba 028729 fetch 2 ,mem_rfcomm_remote_cid 
+0x6bbb 028730 istore 2 ,contw 
+0x6bbc 028731 fetch 1 ,mem_current_adss 
+0x6bbd 028732 istore 1 ,contw 
+0x6bbe 028733 bpatchx patch35_3 ,mem_patch35 
+0x6bbf 028734 setarg 0x0173 
+0x6bc0 028735 istore 2 ,contw 
+0x6bc1 028736 fetch 1 ,mem_current_fcs 
+0x6bc2 028737 istore 1 ,contw 
+0x6bc3 028738 rtn 
+:      028739 rfcomm_send_param_neg_cmd:
+0x6bc4 028740 call l2cap_get_rfcomm_tx_buff 
+0x6bc5 028741 setarg 0x000e 
+0x6bc6 028742 istore 2 ,contw 
+0x6bc7 028743 fetch 2 ,mem_rfcomm_remote_cid 
+0x6bc8 028744 istore 2 ,contw 
+0x6bc9 028745 fetch 1 ,mem_rfcomm_initiator 
+0x6bca 028746 lshift pdata ,pdata 
+0x6bcb 028747 set1 0 ,pdata 
+0x6bcc 028748 istore 1 ,contw 
+0x6bcd 028749 bpatchx patch35_4 ,mem_patch35 
+0x6bce 028750 setarg 0x15ef 
+0x6bcf 028751 istore 2 ,contw 
+0x6bd0 028752 setarg 0x1183 
+0x6bd1 028753 istore 2 ,contw 
+0x6bd2 028754 copy temp ,pdata 
+0x6bd3 028755 istore 1 ,contw 
+0x6bd4 028756 setarg 0x0000f0 
+0x6bd5 028757 istore 3 ,contw 
+0x6bd6 028758 setarg rfcomm_max_frame_size 
+0x6bd7 028759 istore 2 ,contw 
+0x6bd8 028760 setarg 0 
+0x6bd9 028761 istore 1 ,contw 
+0x6bda 028762 setarg 0x01 
+0x6bdb 028763 istore 1 ,contw 
+0x6bdc 028764 call rfcomm_calculate_fcs_dlci0 
+0x6bdd 028765 istore 1 ,contw 
+0x6bde 028766 jam 0x10 ,mem_credit_given 
+0x6bdf 028767 rtn 
+:      028768 rfcomm_send_param_neg_res:
+0x6be0 028769 call l2cap_malloc_rfcomm_channel 
+0x6be1 028770 call l2cap_get_rfcomm_tx_buff 
+0x6be2 028771 setarg 0x000e 
+0x6be3 028772 istore 2 ,contw 
+0x6be4 028773 fetch 2 ,mem_rfcomm_remote_cid 
+0x6be5 028774 istore 2 ,contw 
+0x6be6 028775 fetch 1 ,mem_rfcomm_initiator 
+0x6be7 028776 lshift pdata ,pdata 
+0x6be8 028777 set1 0 ,pdata 
+0x6be9 028778 istore 1 ,contw 
+0x6bea 028779 bpatchx patch35_5 ,mem_patch35 
+0x6beb 028780 setarg 0x15ef 
+0x6bec 028781 istore 2 ,contw 
+0x6bed 028782 setarg 0x1181 
+0x6bee 028783 istore 2 ,contw 
+0x6bef 028784 fetch 1 ,mem_pn_dlci 
+0x6bf0 028785 istore 1 ,contw 
+0x6bf1 028786 setarg 0x0000e0 
+0x6bf2 028787 istore 3 ,contw 
+0x6bf3 028788 fetch 2 ,mem_rfcomm_max_frame_size 
+0x6bf4 028789 istore 2 ,contw 
+0x6bf5 028790 setarg 0x00 
+0x6bf6 028791 istore 1 ,contw 
+0x6bf7 028792 fetch 1 ,mem_rfcomm_credit_init_data 
+0x6bf8 028793 istore 1 ,contw 
+0x6bf9 028794 call rfcomm_calculate_fcs_dlci0 
+0x6bfa 028795 istore 1 ,contw 
+0x6bfb 028796 rtn 
+:      028797 rfcomm_send_modem_status_cmd:
+0x6bfc 028798 call l2cap_get_rfcomm_tx_buff 
+0x6bfd 028799 setarg 0x0008 
+0x6bfe 028800 istore 2 ,contw 
+0x6bff 028801 fetch 2 ,mem_rfcomm_remote_cid 
+0x6c00 028802 istore 2 ,contw 
+0x6c01 028803 fetch 1 ,mem_rfcomm_initiator 
+0x6c02 028804 lshift pdata ,pdata 
+0x6c03 028805 set1 0 ,pdata 
+0x6c04 028806 istore 1 ,contw 
+0x6c05 028807 bpatchx patch35_6 ,mem_patch35 
+0x6c06 028808 setarg 0x09ef 
+0x6c07 028809 istore 2 ,contw 
+0x6c08 028810 setarg 0x05e3 
+0x6c09 028811 istore 2 ,contw 
+0x6c0a 028812 copy temp ,pdata 
+0x6c0b 028813 istore 1 ,contw 
+0x6c0c 028814 setarg 0x8d 
+0x6c0d 028815 istore 1 ,contw 
+0x6c0e 028816 call rfcomm_calculate_fcs_dlci0 
+0x6c0f 028817 istore 1 ,contw 
+0x6c10 028818 rtn 
+:      028820 rfcomm_send_modem_status_res:
+0x6c11 028821 call l2cap_malloc_rfcomm_channel 
+0x6c12 028822 call l2cap_get_rfcomm_tx_buff 
+0x6c13 028823 setarg 0x0008 
+0x6c14 028824 istore 2 ,contw 
+0x6c15 028825 fetch 2 ,mem_rfcomm_remote_cid 
+0x6c16 028826 istore 2 ,contw 
+0x6c17 028827 copy temp ,timeup 
+0x6c18 028828 fetch 1 ,mem_rfcomm_initiator 
+0x6c19 028829 lshift pdata ,pdata 
+0x6c1a 028830 set1 0 ,pdata 
+0x6c1b 028831 istore 1 ,contw 
+0x6c1c 028832 bpatchx patch35_7 ,mem_patch35 
+0x6c1d 028833 setarg 0x09ef 
+0x6c1e 028834 istore 2 ,contw 
+0x6c1f 028835 setarg 0x05e1 
+0x6c20 028836 istore 2 ,contw 
+0x6c21 028837 copy timeup ,pdata 
+0x6c22 028838 istore 1 ,contw 
+0x6c23 028839 setarg 0x8d 
+0x6c24 028840 istore 1 ,contw 
+0x6c25 028841 call rfcomm_calculate_fcs_dlci0 
+0x6c26 028842 istore 1 ,contw 
+0x6c27 028843 rtn 
+:      028845 rfcomm_send_uih_without_payload:
+0x6c28 028846 bpatchx patch36_0 ,mem_patch36 
+0x6c29 028847 fetch 1 ,mem_credit_given 
+0x6c2a 028848 rtn blank 
+0x6c2b 028849 hfetch 2 ,core_uart_rxitems 
+0x6c2c 028850 nrtn blank 
+0x6c2d 028851 copy rega ,pdata 
+0x6c2e 028852 store 1 ,mem_pdatatemp + 1 
+0x6c2f 028853 storet 1 ,mem_pdatatemp 
+0x6c30 028854 call l2cap_malloc_is_fifo_full 
+0x6c31 028855 nrtn blank 
+0x6c32 028856 call l2cap_malloc_rfcomm_channel 
+0x6c33 028857 call l2cap_get_rfcomm_tx_buff 
+0x6c34 028858 setarg 0x05 
+0x6c35 028859 istore 2 ,contw 
+0x6c36 028860 fetch 2 ,mem_rfcomm_remote_cid 
+0x6c37 028861 istore 2 ,contw 
+0x6c38 028862 fetch 1 ,mem_rfcomm_send_adss 
+0x6c39 028863 istore 1 ,contw 
+0x6c3a 028864 setarg 0x01ff 
+0x6c3b 028865 istore 2 ,contw 
+0x6c3c 028866 fetch 1 ,mem_credit_given 
+0x6c3d 028867 istore 1 ,contw 
+0x6c3e 028868 fetch 1 ,mem_hiufcs_spp_wcredits 
+0x6c3f 028869 istore 1 ,contw 
+0x6c40 028870 jam 0 ,mem_credit_given 
+0x6c41 028871 rtn 
+:      028873 rfcomm_increase_credit_given:
+0x6c42 028874 bpatchx patch36_1 ,mem_patch36 
+0x6c43 028875 fetch 1 ,mem_credit_flag 
+0x6c44 028876 rtneq credit_enable 
+0x6c45 028877 fetch 2 ,mem_current_length 
+0x6c46 028878 rtn blank 
+0x6c47 028879 fetch 1 ,mem_credit_given 
+0x6c48 028880 increase 1 ,pdata 
+0x6c49 028881 store 1 ,mem_credit_given 
+0x6c4a 028882 rtn 
+:      028884 spp_process_rx_data:
+0x6c4b 028885 fetch 2 ,mem_cb_receive_spp_data 
+0x6c4c 028886 branch callback_func 
+:      028888 spp_tx_rfcomm_packet:
+0x6c4d 028889 bpatchx patch36_2 ,mem_patch36 
+0x6c4e 028891 fetch 1 ,mem_remote_credits 
+0x6c4f 028892 rtn blank 
+0x6c50 028893 increase -1 ,pdata 
+0x6c51 028894 store 1 ,mem_remote_credits 
+0x6c52 028895 fetch 2 ,mem_pn_max_frame_size 
+0x6c53 028896 fetcht 2 ,mem_current_packet_length 
+0x6c54 028897 isub temp ,null 
+0x6c55 028898 branch ssp_tx_rfcomm_from_uart ,positive 
+0x6c56 028899 store 2 ,mem_current_packet_length 
+:      028900 ssp_tx_rfcomm_from_uart:
+0x6c57 028901 fetch 1 ,mem_credit_given 
+0x6c58 028902 branch ssp_tx_rfcomm_from_uart_without_credit ,blank 
+0x6c59 028903 jam 1 ,mem_rfcomm_send_offset 
+0x6c5a 028904 fetch 1 ,mem_hiufcs_spp_wcredits 
+0x6c5b 028905 store 1 ,mem_rfcomm_send_fcs 
+0x6c5c 028906 setarg rsp_rx_uih_wdata 
+0x6c5d 028907 store 1 ,mem_rfcomm_send_frame_type 
+0x6c5e 028908 branch ssp_tx_rfcomm_from_uart_common 
+:      028909 ssp_tx_rfcomm_from_uart_without_credit:
+0x6c5f 028910 jam 0 ,mem_rfcomm_send_offset 
+0x6c60 028911 fetch 1 ,mem_hiufcs_spp 
+0x6c61 028912 store 1 ,mem_rfcomm_send_fcs 
+0x6c62 028913 setarg rsp_tx_uih 
+0x6c63 028914 store 1 ,mem_rfcomm_send_frame_type 
+:      028915 ssp_tx_rfcomm_from_uart_common:
+0x6c64 028916 bpatchx patch36_3 ,mem_patch36 
+0x6c65 028917 fetch 2 ,mem_current_packet_length 
+0x6c66 028918 sub pdata ,127 ,null 
+0x6c67 028919 branch ssp_tx_rfcomm_from_uart_common0 ,positive 
+0x6c68 028920 fetch 1 ,mem_rfcomm_send_offset 
+0x6c69 028921 increase 1 ,pdata 
+0x6c6a 028922 store 1 ,mem_rfcomm_send_offset 
+:      028923 ssp_tx_rfcomm_from_uart_common0:
+0x6c6b 028924 call get_rfcomm_snd_adss 
+0x6c6c 028925 fetch 2 ,mem_current_packet_length 
+0x6c6d 028926 increase 8 ,pdata 
+0x6c6e 028927 fetcht 1 ,mem_rfcomm_send_offset 
+0x6c6f 028928 iadd temp ,rega 
+0x6c70 028930 call l2cap_malloc 
+0x6c71 028931 store 2 ,mem_rfcomm_tx_buff_ptr 
+0x6c72 028932 increase 4 ,pdata 
+0x6c73 028933 store 2 ,mem_rfcomm_tx_payload_ptr 
+0x6c74 028934 copy pdata ,contw 
+0x6c75 028935 fetch 1 ,mem_rfcomm_send_adss 
+0x6c76 028936 istore 1 ,contw 
+0x6c77 028937 fetch 1 ,mem_rfcomm_send_frame_type 
+0x6c78 028938 istore 1 ,contw 
+0x6c79 028939 call ssp_tx_write_length 
+0x6c7a 028940 call ssp_tx_write_given_credit 
+0x6c7b 028941 bpatchx patch36_4 ,mem_patch36 
+0x6c7c 028942 fetch 2 ,mem_nl_rx_data_src 
+0x6c7d 028943 copy pdata ,contru 
+0x6c7e 028944 fetch 2 ,mem_current_packet_length 
+0x6c7f 028945 copy pdata ,loopcnt 
+0x6c80 028946 call uart_copy_rx_bytes_fast 
+0x6c81 028947 copy contw ,temp 
+0x6c82 028948 copy contru ,pdata 
+0x6c83 028949 store 2 ,mem_nl_rx_data_src 
+0x6c84 028950 copy temp ,contw 
+0x6c85 028951 fetch 1 ,mem_rfcomm_send_fcs 
+0x6c86 028952 istore 1 ,contw 
+0x6c87 028953 fetch 2 ,mem_rfcomm_tx_buff_ptr 
+0x6c88 028954 copy pdata ,contw 
+0x6c89 028955 fetch 2 ,mem_current_packet_length 
+0x6c8a 028956 fetcht 1 ,mem_rfcomm_send_offset 
+0x6c8b 028957 iadd temp ,pdata 
+0x6c8c 028958 increase 4 ,pdata 
+0x6c8d 028959 istore 2 ,contw 
+0x6c8e 028960 fetch 2 ,mem_rfcomm_remote_cid 
+0x6c8f 028961 istore 2 ,contw 
+0x6c90 028962 jam 0 ,mem_credit_given 
+0x6c91 028963 fetch 2 ,mem_nl_rx_len_all 
+0x6c92 028964 beq 0 ,module_hci_command_tx_spp_tx_complete 
+0x6c93 028965 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+0x6c94 028966 rtn 
+:      028968 ssp_tx_write_length:
+0x6c95 028969 bpatchx patch36_5 ,mem_patch36 
+0x6c96 028970 fetch 2 ,mem_current_packet_length 
+0x6c97 028971 sub pdata ,0x7f ,null 
+0x6c98 028972 nbranch ssp_tx_write_long_packet ,positive 
+0x6c99 028973 lshift pdata ,pdata 
+0x6c9a 028974 set1 0 ,pdata 
+0x6c9b 028975 istore 1 ,contw 
+0x6c9c 028976 rtn 
+:      028977 ssp_tx_write_long_packet:
+0x6c9d 028978 fetch 2 ,mem_current_packet_length 
+0x6c9e 028979 rshift3 pdata ,pdata 
+0x6c9f 028980 rshift4 pdata ,temp 
+0x6ca0 028981 and_into 0x7f ,pdata 
+0x6ca1 028982 lshift pdata ,pdata 
+0x6ca2 028983 set0 0 ,pdata 
+0x6ca3 028984 istore 1 ,contw 
+0x6ca4 028985 istoret 1 ,contw 
+0x6ca5 028986 rtn 
+:      028987 ssp_tx_write_given_credit:
+0x6ca6 028988 fetch 1 ,mem_credit_given 
+0x6ca7 028989 rtn blank 
+0x6ca8 028990 istore 1 ,contw 
+0x6ca9 028991 rtn 
+:      028996 scheduler_process:
+0x6caa 028997 bpatchx patch36_6 ,mem_patch36 
+0x6cab 028998 call check_51cmd 
+0x6cac 028999 call app_process_bb_event 
+0x6cad 029000 call process_conn_sm 
+0x6cae 029002 bpatchx patch36_7 ,mem_patch36 
+0x6caf 029003 call sp_calc_sequence 
+0x6cb0 029004 call simple_pairing_sequence 
+0x6cb1 029005 call master_simple_paring_sequence 
+0x6cb2 029008 call l2cap_malloc_is_fifo_full 
+0x6cb3 029009 nrtn blank 
+0x6cb4 029011 call l2cap_call_proc_sigal_pending 
+0x6cb5 029012 call l2cap_malloc_is_fifo_full 
+0x6cb6 029013 nrtn blank 
+0x6cb7 029014 bpatchx patch37_0 ,mem_patch37 
+0x6cb8 029016 call process_upper_sm 
+0x6cb9 029017 call l2cap_send_config_req 
+0x6cba 029018 call rfcomm_send_more_pkt 
+:      029019 scheduler_process0:
+0x6cbb 029020 call scheduler_tx_disconnect_hid 
+0x6cbc 029021 bpatchx patch37_1 ,mem_patch37 
+0x6cbd 029024 branch app_process_bt 
+:      029026 scheduler_tx_disconnect_hid:
+0x6cbe 029027 fetch 1 ,mem_control_tasks 
+0x6cbf 029028 bbit1 l2cap_disconnect_interrupt ,l2cap_disconnect_interrupt_req 
+0x6cc0 029029 bbit1 l2cap_disconnect_control ,l2cap_disconnect_control_req 
+0x6cc1 029030 rtn 
+:      029032 scheduler_tx_l2cap_pkt:
+0x6cc2 029033 bpatchx patch37_2 ,mem_patch37 
+0x6cc3 029034 call l2cap_malloc_is_fifo_empty 
+0x6cc4 029035 rtn blank 
+0x6cc5 029036 fetch 1 ,mem_op 
+0x6cc6 029037 rtnbit1 op_txl2cap 
+0x6cc7 029038 call l2cap_malloc_fifo_out 
+0x6cc8 029039 store 2 ,mem_txptr 
+0x6cc9 029040 copy pdata ,contr 
+0x6cca 029041 ifetch 2 ,contr 
+0x6ccb 029042 increase 4 ,pdata 
+0x6ccc 029043 store 2 ,mem_tx_len 
+0x6ccd 029044 jam 6 ,mem_tx_lch 
+0x6cce 029045 bpatchx patch37_3 ,mem_patch37 
+0x6ccf 029046 fetch 2 ,mem_l2cap_tx_multi_offset 
+0x6cd0 029047 branch scheduler_tx_l2cap_start_pkt ,blank 
+0x6cd1 029048 fetch 1 ,mem_op 
+0x6cd2 029049 rtnbit0 op_pkt_comp 
+0x6cd3 029050 set0 op_pkt_comp ,pdata 
+0x6cd4 029051 store 1 ,mem_op 
+0x6cd5 029052 jam 5 ,mem_tx_lch 
+0x6cd6 029053 fetcht 2 ,mem_l2cap_tx_multi_offset 
+0x6cd7 029054 fetch 2 ,mem_txptr 
+0x6cd8 029055 iadd temp ,pdata 
+0x6cd9 029056 store 2 ,mem_txptr 
+0x6cda 029057 fetch 2 ,mem_tx_len 
+0x6cdb 029058 isub temp ,pdata 
+0x6cdc 029059 store 2 ,mem_tx_len 
+:      029060 scheduler_tx_l2cap_start_pkt:
+0x6cdd 029061 bpatchx patch37_4 ,mem_patch37 
+0x6cde 029062 fetch 2 ,mem_tx_len 
+0x6cdf 029063 branch assert ,blank 
+0x6ce0 029064 arg l2cap_max_pkt_len ,temp 
+0x6ce1 029065 isub temp ,pdata 
+0x6ce2 029066 nbranch scheduler_tx_l2cap_last_pkt ,positive 
+0x6ce3 029067 bpatchx patch37_5 ,mem_patch37 
+0x6ce4 029068 storet 2 ,mem_tx_len 
+0x6ce5 029069 fetch 2 ,mem_l2cap_tx_multi_offset 
+0x6ce6 029070 iadd temp ,pdata 
+0x6ce7 029071 store 2 ,mem_l2cap_tx_multi_offset 
+0x6ce8 029072 branch scheduler_tx_l2cap_pkt_end 
+:      029073 scheduler_tx_l2cap_last_pkt:
+0x6ce9 029074 setarg 0 
+0x6cea 029075 store 2 ,mem_l2cap_tx_multi_offset 
+:      029076 scheduler_tx_l2cap_pkt_end:
+0x6ceb 029077 fetch 1 ,mem_op 
+0x6cec 029078 set1 op_txl2cap ,pdata 
+0x6ced 029079 store 1 ,mem_op 
+0x6cee 029080 rtn 
+:      029082 scheduler_start_upper_sm:
+0x6cef 029083 fetch 1 ,mem_ui_profile_supported 
+0x6cf0 029084 bbit1 support_hid ,scheduler_start_upper_sm_hid 
+0x6cf1 029085 jam uppersm_reconn_sdp_conn ,mem_upper_sm_reconn 
+0x6cf2 029086 rtn 
+:      029087 scheduler_start_upper_sm_hid:
+0x6cf3 029088 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn 
+0x6cf4 029089 rtn 
+:      029091 process_upper_sm:
+0x6cf5 029092 fetch 1 ,memui_reconnect_mode 
+0x6cf6 029093 nbranch process_upper_sm_reconn ,blank 
+:      029094 process_upper_sm_remote_page:
+0x6cf7 029095 fetch 1 ,mem_upper_sm_remote_page 
+0x6cf8 029097 rtn blank 
+0x6cf9 029099 jam 0 ,mem_upper_sm_remote_page 
+:      029100 process_upper_sm_rp_wait:
+0x6cfa 029101 rtn 
+:      029104 process_upper_sm_reconn:
+0x6cfb 029105 bpatchx patch37_6 ,mem_patch37 
+0x6cfc 029106 fetch 1 ,mem_upper_sm_reconn 
+0x6cfd 029107 rtn blank 
+0x6cfe 029108 beq uppersm_reconn_sdp_conn ,process_upper_sm_reconn_sdp_conn 
+0x6cff 029109 beq uppersm_reconn_sdp_conn_wait ,process_upper_sm_reconn_sdp_conn_wait 
+0x6d00 029110 beq uppersm_reconn_sdp_cfg ,process_upper_sm_reconn_sdp_cfg 
+0x6d01 029111 beq uppersm_reconn_sdp_cfg_wait ,process_upper_sm_reconn_sdp_cfg_wait 
+0x6d02 029112 beq uppersm_reconn_ss_spp ,process_upper_sm_reconn_ss_spp 
+0x6d03 029113 beq uppersm_reconn_ss_spp_wait ,process_upper_sm_reconn_ss_spp_wait 
+0x6d04 029114 beq uppersm_reconn_sdp_disconn ,process_upper_sm_reconn_sdp_disconn 
+0x6d05 029115 beq uppersm_reconn_sdp_disconn_wait ,process_upper_sm_reconn_sdp_disconn_wait 
+0x6d06 029116 beq uppersm_reconn_hid_ctrl_conn ,process_upper_sm_reconn_hid_ctrl_conn 
+0x6d07 029117 beq uppersm_reconn_hid_ctrl_conn_wait ,process_upper_sm_reconn_hid_ctrl_conn_wait 
+0x6d08 029118 beq uppersm_reconn_hid_ctrl_cfg ,process_upper_sm_reconn_hid_ctrl_cfg 
+0x6d09 029119 beq uppersm_reconn_hid_ctrl_cfg_wait ,process_upper_sm_reconn_hid_ctrl_cfg_wait 
+0x6d0a 029120 beq uppersm_reconn_hid_int_conn ,process_upper_sm_reconn_hid_int_conn 
+0x6d0b 029121 beq uppersm_reconn_hid_int_conn_wait ,process_upper_sm_reconn_hid_int_conn_wait 
+0x6d0c 029122 beq uppersm_reconn_hid_int_cfg ,process_upper_sm_reconn_hid_int_cfg 
+0x6d0d 029123 beq uppersm_reconn_hid_int_cfg_wait ,process_upper_sm_reconn_hid_int_cfg_wait 
+0x6d0e 029124 beq uppersm_reconn_rfcomm_conn ,process_upper_sm_reconn_rfcomm_conn 
+0x6d0f 029125 beq uppersm_reconn_rfcomm_conn_wait ,process_upper_sm_reconn_rfcomm_conn_wait 
+0x6d10 029126 beq uppersm_reconn_rfcomm_cfg ,process_upper_sm_reconn_rfcomm_cfg 
+0x6d11 029127 beq uppersm_reconn_rfcomm_cfg_wait ,process_upper_sm_reconn_rfcomm_cfg_wait 
+0x6d12 029128 beq uppersm_reconn_rfcomm_sabm ,process_upper_sm_reconn_rfcomm_sabm 
+0x6d13 029129 beq uppersm_reconn_rfcomm_sabm_wait ,process_upper_sm_reconn_rfcomm_sabm_wait 
+0x6d14 029130 beq uppersm_reconn_spp_cmd_pn ,process_upper_sm_reconn_spp_cmd_pn 
+0x6d15 029131 beq uppersm_reconn_spp_cmd_pn_wait ,process_upper_sm_reconn_spp_cmd_pn_wait 
+0x6d16 029132 beq uppersm_reconn_spp_sabm ,process_upper_sm_reconn_spp_sabm 
+0x6d17 029133 beq uppersm_reconn_spp_sabm_wait ,process_upper_sm_reconn_spp_sabm_wait 
+0x6d18 029134 beq uppersm_reconn_spp_cmd_ms ,process_upper_sm_reconn_spp_cmd_ms 
+0x6d19 029135 beq uppersm_reconn_spp_cmd_ms_wait ,process_upper_sm_reconn_spp_cmd_ms_wait 
+:      029136 process_upper_sm_reconn_wait:
+0x6d1a 029137 rtn 
+:      029138 process_upper_sm_reconn_sdp_conn:
+0x6d1b 029139 call upper_sm_send_sdp_conn 
+0x6d1c 029140 jam uppersm_reconn_sdp_conn_wait ,mem_upper_sm_reconn 
+0x6d1d 029141 fetch 1 ,mem_sdp_state 
+0x6d1e 029142 set1 l2cap_channel_state_conn_req ,pdata 
+0x6d1f 029143 store 1 ,mem_sdp_state 
+0x6d20 029144 rtn 
+:      029145 process_upper_sm_reconn_sdp_cfg:
+0x6d21 029146 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn 
+0x6d22 029147 fetch 1 ,mem_sdp_state 
+0x6d23 029148 rtnbit1 l2cap_channel_state_snd_cfg_req 
+0x6d24 029149 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn 
+0x6d25 029150 call upper_sm_send_sdp_cfg 
+0x6d26 029151 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn 
+0x6d27 029152 fetch 1 ,mem_sdp_state 
+0x6d28 029153 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+0x6d29 029154 store 1 ,mem_sdp_state 
+0x6d2a 029155 rtn 
+:      029156 process_upper_sm_reconn_ss_spp:
+0x6d2b 029157 call l2cap_malloc_is_fifo_empty 
+0x6d2c 029158 nrtn blank 
+0x6d2d 029159 call upper_sm_send_ss_spp 
+0x6d2e 029160 jam uppersm_reconn_ss_spp_wait ,mem_upper_sm_reconn 
+0x6d2f 029161 rtn 
+:      029162 process_upper_sm_reconn_sdp_disconn:
+0x6d30 029163 call upper_sm_send_sdp_disconn 
+0x6d31 029164 jam uppersm_reconn_sdp_disconn_wait ,mem_upper_sm_reconn 
+0x6d32 029165 rtn 
+:      029166 process_upper_sm_reconn_hid_ctrl_conn:
+0x6d33 029167 call upper_sm_send_hid_ctrl_conn 
+0x6d34 029168 jam uppersm_reconn_hid_ctrl_conn_wait ,mem_upper_sm_reconn 
+0x6d35 029169 fetch 1 ,mem_hid_control_state 
+0x6d36 029170 set1 l2cap_channel_state_conn_req ,pdata 
+0x6d37 029171 store 1 ,mem_hid_control_state 
+0x6d38 029172 rtn 
+:      029173 process_upper_sm_reconn_hid_ctrl_cfg:
+0x6d39 029174 call upper_sm_send_hid_ctrl_cfg 
+0x6d3a 029175 jam uppersm_reconn_hid_ctrl_cfg_wait ,mem_upper_sm_reconn 
+0x6d3b 029176 fetch 1 ,mem_hid_control_state 
+0x6d3c 029177 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+0x6d3d 029178 store 1 ,mem_hid_control_state 
+0x6d3e 029179 rtn 
+:      029180 process_upper_sm_reconn_hid_int_conn:
+0x6d3f 029181 call upper_sm_send_hid_int_conn 
+0x6d40 029182 jam uppersm_reconn_hid_int_conn_wait ,mem_upper_sm_reconn 
+0x6d41 029183 fetch 1 ,mem_hid_interrupt_state 
+0x6d42 029184 set1 l2cap_channel_state_conn_req ,pdata 
+0x6d43 029185 store 1 ,mem_hid_interrupt_state 
+0x6d44 029186 rtn 
+:      029187 process_upper_sm_reconn_hid_int_cfg:
+0x6d45 029188 call upper_sm_send_hid_int_cfg 
+0x6d46 029189 jam uppersm_reconn_hid_int_cfg_wait ,mem_upper_sm_reconn 
+0x6d47 029190 fetch 1 ,mem_hid_interrupt_state 
+0x6d48 029191 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+0x6d49 029192 store 1 ,mem_hid_interrupt_state 
+0x6d4a 029193 rtn 
+:      029194 process_upper_sm_reconn_rfcomm_conn:
+0x6d4b 029195 call upper_sm_send_rfcomm_conn 
+0x6d4c 029196 jam uppersm_reconn_rfcomm_conn_wait ,mem_upper_sm_reconn 
+0x6d4d 029197 fetch 1 ,mem_rfcomm_state 
+0x6d4e 029198 set1 l2cap_channel_state_conn_req ,pdata 
+0x6d4f 029199 store 1 ,mem_rfcomm_state 
+0x6d50 029200 rtn 
+:      029201 process_upper_sm_reconn_rfcomm_cfg:
+0x6d51 029202 call upper_sm_send_rfcomm_cfg 
+0x6d52 029203 jam uppersm_reconn_rfcomm_cfg_wait ,mem_upper_sm_reconn 
+0x6d53 029204 fetch 1 ,mem_rfcomm_state 
+0x6d54 029205 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+0x6d55 029206 store 1 ,mem_rfcomm_state 
+0x6d56 029207 rtn 
+:      029208 process_upper_sm_reconn_rfcomm_sabm:
+0x6d57 029209 call upper_sm_send_rfcomm_sabm 
+0x6d58 029210 jam uppersm_reconn_rfcomm_sabm_wait ,mem_upper_sm_reconn 
+0x6d59 029211 fetch 1 ,mem_rfcomm_state 
+0x6d5a 029212 set1 l2cap_channel_rfcomm_only_sabm ,pdata 
+0x6d5b 029213 store 1 ,mem_rfcomm_state 
+0x6d5c 029214 rtn 
+:      029215 process_upper_sm_reconn_spp_cmd_pn:
+0x6d5d 029216 call upper_sm_send_spp_cmd_pn 
+0x6d5e 029217 fetch 1 ,mem_spp_state 
+0x6d5f 029218 set1 rfcomm_channel_state_pn_cmd 
+0x6d60 029219 store 1 ,mem_spp_state 
+0x6d61 029220 jam uppersm_reconn_spp_cmd_pn_wait ,mem_upper_sm_reconn 
+0x6d62 029221 rtn 
+:      029222 process_upper_sm_reconn_spp_sabm:
+0x6d63 029223 call upper_sm_send_spp_sabm 
+0x6d64 029224 fetch 1 ,mem_spp_state 
+0x6d65 029225 set1 rfcomm_channel_state_sabm 
+0x6d66 029226 store 1 ,mem_spp_state 
+0x6d67 029227 jam uppersm_reconn_spp_sabm_wait ,mem_upper_sm_reconn 
+0x6d68 029228 fetch 1 ,mem_remote_spp_channel 
+0x6d69 029229 lshift3 pdata ,pdata 
+0x6d6a 029230 or_into 3 ,pdata 
+0x6d6b 029231 arg mem_hiufcs_spp ,temp 
+0x6d6c 029232 storet 2 ,mem_contw_temp 
+0x6d6d 029233 branch rfcomm_save_fcs_uih 
+:      029234 process_upper_sm_reconn_spp_cmd_ms:
+0x6d6e 029235 call upper_sm_send_spp_cmd_ms 
+0x6d6f 029236 fetch 1 ,mem_spp_state 
+0x6d70 029237 set1 rfcomm_channel_state_snd_ms_cmd 
+0x6d71 029238 store 1 ,mem_spp_state 
+0x6d72 029239 jam uppersm_reconn_spp_cmd_ms_wait ,mem_upper_sm_reconn 
+0x6d73 029240 rtn 
+:      029242 process_upper_sm_reconn_sdp_conn_wait:
+0x6d74 029243 fetch 1 ,mem_sdp_state 
+0x6d75 029244 rtnbit0 l2cap_channel_state_conn_res 
+0x6d76 029245 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn 
+0x6d77 029246 branch process_upper_sm_reconn 
+:      029247 process_upper_sm_reconn_sdp_cfg_wait:
+0x6d78 029248 fetch 1 ,mem_sdp_state 
+0x6d79 029249 rtnne l2cap_channel_setup_complete 
+0x6d7a 029250 jam uppersm_reconn_ss_spp ,mem_upper_sm_reconn 
+:      029251 process_upper_sm_reconn_ss_spp_wait:
+0x6d7b 029252 fetch 1 ,mem_message_to_uppersm 
+0x6d7c 029253 rtnne recieve_ss_reasult_hf 
+0x6d7d 029254 jam 0 ,mem_message_to_uppersm 
+0x6d7e 029255 jam uppersm_reconn_sdp_disconn ,mem_upper_sm_reconn 
+0x6d7f 029256 branch process_upper_sm_reconn 
+:      029257 process_upper_sm_reconn_sdp_disconn_wait:
+0x6d80 029258 fetch 1 ,mem_sdp_state 
+0x6d81 029259 nrtn blank 
+0x6d82 029260 fetch 1 ,mem_ui_profile_supported 
+0x6d83 029261 bbit1 support_hid ,process_upper_sm_reconn_setup_hid 
+0x6d84 029262 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm 
+0x6d85 029263 branch process_upper_sm_reconn_termination 
+:      029264 process_upper_sm_reconn_hid_ctrl_conn_wait:
+0x6d86 029265 fetch 1 ,mem_hid_control_state 
+0x6d87 029266 rtnbit0 l2cap_channel_state_conn_res 
+0x6d88 029267 jam uppersm_reconn_hid_ctrl_cfg ,mem_upper_sm_reconn 
+0x6d89 029268 branch process_upper_sm_reconn 
+:      029269 process_upper_sm_reconn_hid_ctrl_cfg_wait:
+0x6d8a 029270 fetch 1 ,mem_hid_control_state 
+0x6d8b 029271 rtnne l2cap_channel_setup_complete 
+0x6d8c 029272 jam uppersm_reconn_hid_int_conn ,mem_upper_sm_reconn 
+0x6d8d 029273 branch process_upper_sm_reconn 
+:      029274 process_upper_sm_reconn_hid_int_conn_wait:
+0x6d8e 029275 fetch 1 ,mem_hid_interrupt_state 
+0x6d8f 029276 rtnbit0 l2cap_channel_state_conn_res 
+0x6d90 029277 jam uppersm_reconn_hid_int_cfg ,mem_upper_sm_reconn 
+0x6d91 029278 branch process_upper_sm_reconn 
+:      029279 process_upper_sm_reconn_hid_int_cfg_wait:
+0x6d92 029280 fetch 1 ,mem_hid_interrupt_state 
+0x6d93 029281 rtnne l2cap_channel_setup_complete 
+0x6d94 029282 fetch 1 ,mem_ui_profile_supported 
+0x6d95 029283 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm 
+0x6d96 029284 branch process_upper_sm_reconn_termination 
+:      029285 process_upper_sm_reconn_rfcomm_conn_wait:
+0x6d97 029286 fetch 1 ,mem_rfcomm_state 
+0x6d98 029287 rtnbit0 l2cap_channel_state_conn_res 
+0x6d99 029288 jam uppersm_reconn_rfcomm_cfg ,mem_upper_sm_reconn 
+0x6d9a 029289 branch process_upper_sm_reconn 
+:      029290 process_upper_sm_reconn_rfcomm_cfg_wait:
+0x6d9b 029291 fetch 1 ,mem_rfcomm_state 
+0x6d9c 029292 rtnne l2cap_channel_setup_complete 
+0x6d9d 029293 jam uppersm_reconn_rfcomm_sabm ,mem_upper_sm_reconn 
+0x6d9e 029294 branch process_upper_sm_reconn 
+:      029295 process_upper_sm_reconn_rfcomm_sabm_wait:
+0x6d9f 029296 fetch 1 ,mem_rfcomm_state 
+0x6da0 029297 rtnne l2cap_channel_rfcomm_dlci0_opened 
+0x6da1 029298 fetch 1 ,mem_ui_profile_supported 
+0x6da2 029299 bbit1 support_spp ,process_upper_sm_reconn_setup_spp 
+0x6da3 029300 branch process_upper_sm_reconn_termination 
+:      029301 process_upper_sm_reconn_spp_cmd_pn_wait:
+0x6da4 029302 fetch 1 ,mem_spp_state 
+0x6da5 029303 rtnbit0 rfcomm_channel_state_pn_res 
+0x6da6 029304 jam uppersm_reconn_spp_sabm ,mem_upper_sm_reconn 
+0x6da7 029305 branch process_upper_sm_reconn 
+:      029306 process_upper_sm_reconn_spp_sabm_wait:
+0x6da8 029307 fetch 1 ,mem_spp_state 
+0x6da9 029308 rtnbit0 rfcomm_channel_state_ua 
+0x6daa 029309 jam uppersm_reconn_spp_cmd_ms ,mem_upper_sm_reconn 
+0x6dab 029310 branch process_upper_sm_reconn 
+:      029311 process_upper_sm_reconn_spp_cmd_ms_wait:
+0x6dac 029312 fetch 1 ,mem_spp_state 
+0x6dad 029313 rtnne rfcomm_channel_setup_complete 
+0x6dae 029314 branch process_upper_sm_reconn_termination 
+:      029316 process_upper_sm_reconn_setup_hid:
+0x6daf 029317 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn 
+0x6db0 029318 branch process_upper_sm_reconn 
+:      029320 process_upper_sm_reconn_setup_rfcomm:
+0x6db1 029321 jam uppersm_reconn_rfcomm_conn ,mem_upper_sm_reconn 
+0x6db2 029322 branch process_upper_sm_reconn 
+:      029323 process_upper_sm_reconn_setup_spp:
+0x6db3 029324 jam uppersm_reconn_spp_cmd_pn ,mem_upper_sm_reconn 
+0x6db4 029325 branch process_upper_sm_reconn 
+:      029329 process_upper_sm_reconn_termination:
+0x6db5 029330 jam 0 ,mem_upper_sm_reconn 
+0x6db6 029331 rtn 
+:      029332 upper_sm_send_sdp_conn:
+0x6db7 029333 bpatchx patch37_7 ,mem_patch37 
+0x6db8 029334 call l2cap_malloc_signal_channel 
+0x6db9 029335 setarg psm_sdp 
+0x6dba 029336 copy pdata ,temp 
+0x6dbb 029337 setarg l2cap_sdp_channel 
+0x6dbc 029338 copy pdata ,timeup 
+0x6dbd 029339 branch ml2cap_send_signal_connect_req 
+:      029341 upper_sm_send_sdp_cfg:
+0x6dbe 029342 bpatchx patch38_0 ,mem_patch38 
+0x6dbf 029343 call l2cap_malloc_signal_channel 
+0x6dc0 029344 fetch 2 ,mem_sdp_remote_cid 
+0x6dc1 029345 copy pdata ,temp 
+0x6dc2 029346 branch ml2cap_send_signal_config_req 
+:      029348 upper_sm_send_sdp_disconn:
+0x6dc3 029349 bpatchx patch38_1 ,mem_patch38 
+0x6dc4 029350 call l2cap_malloc_signal_channel 
+0x6dc5 029351 fetch 2 ,mem_sdp_remote_cid 
+0x6dc6 029352 copy pdata ,temp 
+0x6dc7 029353 arg l2cap_sdp_channel ,timeup 
+0x6dc8 029354 call ml2cap_send_signal_disconn_req 
+0x6dc9 029355 fetch 1 ,mem_sdp_state 
+0x6dca 029356 set0 l2cap_channel_state_rcv_cfg_res ,pdata 
+0x6dcb 029357 store 1 ,mem_sdp_state 
+0x6dcc 029358 rtn 
+:      029360 upper_sm_send_ss_spp:
+0x6dcd 029361 bpatchx patch38_2 ,mem_patch38 
+0x6dce 029362 call l2cap_malloc_sdp_channel 
+0x6dcf 029363 call sdp_send_spp_request 
+0x6dd0 029364 branch msdp_send_req_done 
+:      029366 upper_sm_send_rfcomm_conn:
+0x6dd1 029367 bpatchx patch38_3 ,mem_patch38 
+0x6dd2 029368 call l2cap_malloc_signal_channel 
+0x6dd3 029369 setarg psm_rfcomm 
+0x6dd4 029370 copy pdata ,temp 
+0x6dd5 029371 setarg l2cap_rfcomm_channel 
+0x6dd6 029372 copy pdata ,timeup 
+0x6dd7 029373 branch ml2cap_send_signal_connect_req 
+:      029375 upper_sm_send_rfcomm_cfg:
+0x6dd8 029376 bpatchx patch38_4 ,mem_patch38 
+0x6dd9 029377 call l2cap_malloc_signal_channel 
+0x6dda 029378 fetch 2 ,mem_rfcomm_remote_cid 
+0x6ddb 029379 copy pdata ,temp 
+0x6ddc 029380 branch ml2cap_send_signal_config_req 
+:      029382 upper_sm_send_hid_ctrl_conn:
+0x6ddd 029383 bpatchx patch38_5 ,mem_patch38 
+0x6dde 029384 call l2cap_malloc_signal_channel 
+0x6ddf 029385 setarg psm_hid_control 
+0x6de0 029386 copy pdata ,temp 
+0x6de1 029387 setarg l2cap_hid_control_channel 
+0x6de2 029388 copy pdata ,timeup 
+0x6de3 029389 branch ml2cap_send_signal_connect_req 
+:      029391 upper_sm_send_hid_ctrl_cfg:
+0x6de4 029392 bpatchx patch38_6 ,mem_patch38 
+0x6de5 029393 call l2cap_malloc_signal_channel 
+0x6de6 029394 fetch 2 ,mem_hid_ctrl_remote_cid 
+0x6de7 029395 copy pdata ,temp 
+0x6de8 029396 branch ml2cap_send_signal_config_req 
+:      029398 upper_sm_send_hid_int_conn:
+0x6de9 029399 bpatchx patch38_7 ,mem_patch38 
+0x6dea 029400 call l2cap_malloc_signal_channel 
+0x6deb 029401 setarg psm_hid_interrupt 
+0x6dec 029402 copy pdata ,temp 
+0x6ded 029403 setarg l2cap_hid_interrupt_channel 
+0x6dee 029404 copy pdata ,timeup 
+0x6def 029405 branch ml2cap_send_signal_connect_req 
+:      029407 upper_sm_send_hid_int_cfg:
+0x6df0 029408 bpatchx patch39_0 ,mem_patch39 
+0x6df1 029409 call l2cap_malloc_signal_channel 
+0x6df2 029410 fetch 2 ,mem_hid_int_remote_cid 
+0x6df3 029411 copy pdata ,temp 
+0x6df4 029412 branch ml2cap_send_signal_config_req 
+:      029414 upper_sm_send_rfcomm_sabm:
+0x6df5 029415 bpatchx patch39_1 ,mem_patch39 
+0x6df6 029416 call l2cap_malloc_rfcomm_channel 
+0x6df7 029418 jam 3 ,mem_current_adss 
+0x6df8 029419 jam 0x1c ,mem_current_fcs 
+0x6df9 029420 call rfcomm_send_sabm 
+0x6dfa 029421 jam 1 ,mem_rfcomm_initiator 
+0x6dfb 029422 rtn 
+:      029424 upper_sm_send_spp_cmd_pn:
+0x6dfc 029425 bpatchx patch39_2 ,mem_patch39 
+0x6dfd 029426 call l2cap_malloc_rfcomm_channel 
+0x6dfe 029427 fetcht 1 ,mem_remote_spp_channel 
+0x6dff 029428 call channel_to_dlci 
+0x6e00 029429 storet 1 ,mem_pn_dlci 
+0x6e01 029430 branch rfcomm_send_param_neg_cmd 
+:      029432 upper_sm_send_spp_sabm:
+0x6e02 029433 bpatchx patch39_3 ,mem_patch39 
+0x6e03 029434 call l2cap_malloc_rfcomm_channel 
+0x6e04 029435 fetcht 1 ,mem_pn_dlci 
+0x6e05 029436 call dlci_to_address_cmd 
+0x6e06 029437 call rfcomm_calculate_fcs_sabm 
+0x6e07 029438 store 1 ,mem_current_fcs 
+0x6e08 029439 fetcht 1 ,mem_pn_dlci 
+0x6e09 029440 call dlci_to_address_cmd 
+0x6e0a 029441 storet 1 ,mem_current_adss 
+0x6e0b 029442 branch rfcomm_send_sabm 
+:      029444 upper_sm_send_spp_cmd_ms:
+0x6e0c 029445 bpatchx patch39_4 ,mem_patch39 
+0x6e0d 029446 call l2cap_malloc_rfcomm_channel 
+0x6e0e 029447 fetcht 1 ,mem_pn_dlci 
+0x6e0f 029448 call dlci_to_address_cmd 
+0x6e10 029449 branch rfcomm_send_modem_status_cmd 
+:      029462 sdp_process:
+0x6e11 029463 bpatchx patch39_5 ,mem_patch39 
+0x6e12 029464 fetch 2 ,mem_l2cap_payload_ptr 
+0x6e13 029465 iforce contr 
+0x6e14 029468 ifetch 1 ,contr 
+0x6e15 029469 copy pdata ,regb 
+0x6e16 029470 store 1 ,mem_sdp_pduid 
+0x6e17 029471 ifetch 2 ,contr 
+0x6e18 029472 store 2 ,mem_sdp_transactionid 
+0x6e19 029473 ifetch 1 ,contr 
+0x6e1a 029474 lshift8 pdata ,timeup 
+0x6e1b 029475 ifetch 1 ,contr 
+0x6e1c 029476 iadd timeup ,timeup 
+0x6e1d 029477 bpatchx patch39_6 ,mem_patch39 
+0x6e1e 029478 copy contr ,temp 
+0x6e1f 029479 arg 4 ,loopcnt 
+0x6e20 029480 arg mem_sdp_handle_list ,contw 
+0x6e21 029481 call memset0 
+0x6e22 029482 copy temp ,contr 
+0x6e23 029483 deposit regb 
+0x6e24 029484 beq sdp_error_res ,sdp_process_error_res 
+0x6e25 029485 beq sdp_search_req ,sdp_process_ss_req 
+0x6e26 029486 beq sdp_search_res ,sdp_process_ss_res 
+0x6e27 029487 beq sdp_attribute_req ,sdp_process_sa_req 
+0x6e28 029488 beq sdp_attribute_res ,sdp_process_sa_res 
+0x6e29 029489 beq sdp_searchattrib_req ,sdp_process_ssa_req 
+0x6e2a 029490 beq sdp_searchattrib_res ,sdp_process_ssa_res 
+0x6e2b 029491 branch sdp_insufficient_resource 
+:      029502 sdp_process_ss_req:
+0x6e2c 029503 bpatchx patch39_7 ,mem_patch39 
+0x6e2d 029504 call ask_serviceclassid 
+0x6e2e 029505 compare 1 ,temp ,0xff 
+0x6e2f 029506 branch ss_empty_rsp ,true 
+0x6e30 029507 compare 0xff ,temp ,0xff 
+0x6e31 029508 branch sdp_invalid_request_syntax ,true 
+0x6e32 029510 ifetch 2 ,contr 
+0x6e33 029511 store 2 ,mem_sdp_record_maxcnt 
+0x6e34 029512 increase -2 ,timeup 
+0x6e35 029514 increase -1 ,timeup 
+0x6e36 029515 nbranch sdp_invalid_pdu_size ,zero 
+0x6e37 029516 arg mem_sdp_uuid_search_ptr ,timeup 
+0x6e38 029517 ifetch 2 ,timeup 
+0x6e39 029518 rtn blank 
+0x6e3a 029519 call search_all_uuid 
+0x6e3b 029520 call l2cap_get_sdp_tx_payload 
+0x6e3c 029521 force 3 ,pdata 
+0x6e3d 029522 istore 1 ,contw 
+0x6e3e 029523 fetch 2 ,mem_sdp_transactionid 
+0x6e3f 029524 istore 2 ,contw 
+0x6e40 029525 lshift2 queue ,pdata 
+0x6e41 029526 add pdata ,5 ,pdata 
+0x6e42 029527 add pdata ,5 ,regc 
+0x6e43 029528 byteswap pdata ,pdata 
+0x6e44 029529 istore 2 ,contw 
+0x6e45 029530 deposit queue 
+0x6e46 029531 byteswap pdata ,pdata 
+0x6e47 029532 istore 2 ,contw 
+0x6e48 029533 istore 2 ,contw 
+0x6e49 029534 arg mem_sdp_handle_list ,contr 
+0x6e4a 029535 copy queue ,loopcnt 
+0x6e4b 029536 branch ss_req_blank ,zero 
+:      029537 ss_req_loop:
+0x6e4c 029538 ifetch 4 ,contr 
+0x6e4d 029539 istore 4 ,contw 
+0x6e4e 029540 loop ss_req_loop 
+:      029541 ss_req_blank:
+0x6e4f 029542 force 0 ,pdata 
+0x6e50 029543 istore 1 ,contw 
+0x6e51 029544 deposit regc 
+0x6e52 029545 store 2 ,mem_sdp_tx_pkt_length 
+0x6e53 029547 rtn 
+:      029558 sdp_process_sa_req:
+0x6e54 029559 bpatchx patch3a_0 ,mem_patch3a 
+0x6e55 029560 ifetch 4 ,contr 
+0x6e56 029561 store 4 ,mem_sdp_record_handle 
+0x6e57 029562 increase -4 ,timeup 
+0x6e58 029563 call sdp_store_maxbyte 
+0x6e59 029564 store 2 ,mem_sdp_attribute_maxbyte 
+0x6e5a 029565 increase -2 ,timeup 
+0x6e5b 029566 call dataelementtype6 
+0x6e5c 029567 branch sdp_invalid_request_syntax ,zero 
+0x6e5d 029568 compare 5 ,rega ,0xff 
+0x6e5e 029570 branch sa_judge_wholerange ,true 
+:      029571 sa_isnot_wholerange:
+0x6e5f 029572 arg mem_sdp_attrib_list ,contw 
+0x6e60 029573 force 0 ,queue 
+0x6e61 029574 branch sa_req_loop 
+:      029575 sa_judge_wholerange:
+0x6e62 029576 ifetch 1 ,contr 
+0x6e63 029577 bne sdp_attribute_range ,sdp_invalid_request_syntax 
+0x6e64 029578 ifetch 2 ,contr 
+0x6e65 029579 nbranch sa_judge_wholerange_false1 ,blank 
+0x6e66 029580 ifetch 1 ,contr 
+0x6e67 029581 bne 0xff ,sa_judge_wholerange_false2 
+0x6e68 029582 ifetch 1 ,contr 
+0x6e69 029583 bne 0xff ,sa_judge_wholerange_false3 
+0x6e6a 029584 branch sa_req_all 
+:      029585 sa_judge_wholerange_false3:
+0x6e6b 029586 increase -5 ,contr 
+0x6e6c 029587 branch sa_isnot_wholerange 
+:      029588 sa_judge_wholerange_false2:
+0x6e6d 029589 increase -4 ,contr 
+0x6e6e 029590 branch sa_isnot_wholerange 
+:      029591 sa_judge_wholerange_false1:
+0x6e6f 029592 increase -3 ,contr 
+0x6e70 029593 branch sa_isnot_wholerange 
+:      029594 sa_req_loop:
+0x6e71 029595 ifetch 1 ,contr 
+0x6e72 029596 beq sdp_attribute_id ,sa_req_one_id 
+0x6e73 029597 beq sdp_attribute_range ,sa_req_range 
+:      029598 sa_req_range:
+0x6e74 029599 ifetch 2 ,contr 
+0x6e75 029600 istore 2 ,contw 
+0x6e76 029601 increase 1 ,queue 
+0x6e77 029602 byteswap pdata ,regb 
+0x6e78 029603 ifetch 2 ,contr 
+0x6e79 029604 byteswap pdata ,pdata 
+:      029605 sa_req_range_id_increase:
+0x6e7a 029606 increase 1 ,regb 
+0x6e7b 029607 isub regb ,null 
+0x6e7c 029608 nbranch sa_req_range_id_finish ,positive 
+0x6e7d 029609 copy pdata ,regc 
+0x6e7e 029610 byteswap regb ,pdata 
+0x6e7f 029611 istore 2 ,contw 
+0x6e80 029612 increase 1 ,queue 
+0x6e81 029613 copy regc ,pdata 
+0x6e82 029614 branch sa_req_range_id_increase 
+:      029615 sa_req_range_id_finish:
+0x6e83 029616 increase -5 ,timeup 
+0x6e84 029617 increase -5 ,rega 
+0x6e85 029618 branch sa_req_check_next_id 
+:      029619 sa_req_one_id:
+0x6e86 029620 ifetch 2 ,contr 
+0x6e87 029621 istore 2 ,contw 
+0x6e88 029622 increase 1 ,queue 
+0x6e89 029623 increase -3 ,timeup 
+0x6e8a 029624 increase -3 ,rega 
+:      029625 sa_req_check_next_id:
+0x6e8b 029626 nbranch sdp_invalid_request_syntax ,positive 
+0x6e8c 029627 nbranch sa_req_loop ,zero 
+0x6e8d 029628 increase -1 ,timeup 
+0x6e8e 029629 nbranch sdp_invalid_request_syntax ,zero 
+0x6e8f 029631 call l2cap_get_sdp_tx_payload 
+0x6e90 029632 increase 10 ,contw 
+0x6e91 029633 arg mem_sdp_attrib_list ,rega 
+:      029634 sa_req_handle_attributelist_next:
+0x6e92 029635 copy queue ,pdata 
+0x6e93 029636 branch sa_req_handle_attributelist_end ,blank 
+0x6e94 029637 ifetch 2 ,rega 
+0x6e95 029638 branch sa_req_handle_attributelist_end ,blank 
+0x6e96 029639 iforce regb 
+0x6e97 029640 fetch 4 ,mem_sdp_record_handle 
+0x6e98 029641 iforce temp 
+0x6e99 029642 call search_handle_attrib 
+0x6e9a 029643 copy contr ,pdata 
+0x6e9b 029644 branch sa_req_handle_attributelist_notfound ,blank 
+0x6e9c 029645 increase -3 ,contr 
+0x6e9d 029646 ifetch 3 ,contr 
+0x6e9e 029647 istore 3 ,contw 
+0x6e9f 029648 call sdp_data_len 
+0x6ea0 029649 iforce loopcnt 
+0x6ea1 029650 call memcpy 
+:      029651 sa_req_handle_attributelist_notfound:
+0x6ea2 029652 increase 2 ,rega 
+0x6ea3 029653 increase -1 ,queue 
+0x6ea4 029654 branch sa_req_handle_attributelist_next 
+:      029656 sa_req_handle_attributelist_end:
+0x6ea5 029657 arg sdp_attribute_res ,rega 
+0x6ea6 029658 call ssa_req_range_lastfreg_common 
+0x6ea7 029659 fetch 2 ,mem_sdp_tx_pkt_length 
+0x6ea8 029660 beq 11 ,sa_empty_rsp 
+0x6ea9 029661 branch ssa_req_range_attrbutes_length_no_continue 
+:      029664 sdp_store_continue_common:
+0x6eaa 029665 ifetch 1 ,contr 
+0x6eab 029666 beq 0 ,sdp_store_continue_0byte 
+0x6eac 029667 beq 1 ,sdp_store_continue_1byte 
+0x6ead 029668 beq 2 ,sdp_store_continue_2byte 
+:      029669 sdp_store_continue_0byte:
+0x6eae 029670 increase -1 ,timeup 
+0x6eaf 029671 branch sdp_store_continue_end 
+:      029672 sdp_store_continue_1byte:
+0x6eb0 029673 ifetch 1 ,contr 
+0x6eb1 029674 increase -2 ,timeup 
+0x6eb2 029675 branch sdp_store_continue_end 
+:      029676 sdp_store_continue_2byte:
+0x6eb3 029677 ifetch 2 ,contr 
+0x6eb4 029678 byteswap pdata ,pdata 
+0x6eb5 029679 increase -3 ,timeup 
+:      029680 sdp_store_continue_end:
+0x6eb6 029681 store 2 ,mem_sdp_continue_byte 
+0x6eb7 029682 rtn 
+:      029684 sa_req_all:
+0x6eb8 029685 increase -5 ,timeup 
+0x6eb9 029686 call sdp_store_continue_common 
+0x6eba 029687 nbranch sdp_invalid_pdu_size ,zero 
+0x6ebb 029688 fetcht 4 ,mem_sdp_record_handle 
+0x6ebc 029689 call search_handle 
+0x6ebd 029690 nbranch sdp_invalid_service_record_handle ,zero 
+0x6ebe 029691 copy contr ,rega 
+0x6ebf 029692 call l2cap_get_sdp_tx_payload 
+0x6ec0 029693 copy rega ,contr 
+0x6ec1 029694 increase 3 ,contw 
+0x6ec2 029695 copy contr ,timeup 
+0x6ec3 029696 call sdp_get_data 
+0x6ec4 029697 copy pdata ,rega 
+0x6ec5 029699 fetch 2 ,mem_sdp_continue_byte 
+0x6ec6 029700 copy pdata ,regb 
+0x6ec7 029701 copy rega ,pdata 
+0x6ec8 029702 isub regb ,regb 
+0x6ec9 029703 fetch 2 ,mem_sdp_attribute_maxbyte 
+0x6eca 029704 isub regb ,null 
+0x6ecb 029705 nbranch sa_req_all_fragment_sdp ,positive 
+0x6ecc 029707 disable user 
+0x6ecd 029708 fetch 2 ,mem_sdp_continue_byte 
+0x6ece 029709 branch sa_req_all_fisrt_fragment ,blank 
+0x6ecf 029710 iadd timeup ,contr 
+0x6ed0 029711 increase 3 ,regb 
+0x6ed1 029712 copy regb ,loopcnt 
+0x6ed2 029713 copy loopcnt ,pdata 
+0x6ed3 029714 increase 3 ,pdata 
+0x6ed4 029715 byteswap pdata ,pdata 
+0x6ed5 029716 istore 2 ,contw 
+0x6ed6 029717 copy loopcnt ,pdata 
+0x6ed7 029718 byteswap pdata ,pdata 
+0x6ed8 029719 istore 2 ,contw 
+0x6ed9 029720 branch sa_req_all_answer_attributelist_full_loop 
+:      029721 sa_req_all_fisrt_fragment:
+0x6eda 029722 add rega ,6 ,loopcnt 
+0x6edb 029723 branch sa_req_all_parlength_continue_byte ,user 
+0x6edc 029724 byteswap loopcnt ,pdata 
+0x6edd 029725 branch sa_req_all_parlength_continue_byte_end 
+:      029726 sa_req_all_parlength_continue_byte:
+0x6ede 029727 copy loopcnt ,pdata 
+0x6edf 029728 increase 2 ,pdata 
+0x6ee0 029729 byteswap pdata ,pdata 
+:      029730 sa_req_all_parlength_continue_byte_end:
+0x6ee1 029731 istore 2 ,contw 
+0x6ee2 029732 increase -3 ,loopcnt 
+0x6ee3 029733 byteswap loopcnt ,pdata 
+0x6ee4 029734 istore 2 ,contw 
+0x6ee5 029735 copy timeup ,contr 
+0x6ee6 029736 branch sa_req_all_answer_attributelist_full_loop 
+:      029737 sa_req_all_fragment_sdp:
+0x6ee7 029738 enable user 
+0x6ee8 029740 fetch 2 ,mem_sdp_attribute_maxbyte 
+0x6ee9 029741 copy pdata ,rega 
+0x6eea 029742 copy rega ,loopcnt 
+0x6eeb 029743 fetch 2 ,mem_sdp_continue_byte 
+0x6eec 029744 branch sa_req_all_fisrt_fragment ,blank 
+0x6eed 029745 iadd timeup ,contr 
+0x6eee 029746 copy rega ,pdata 
+0x6eef 029747 increase 5 ,pdata 
+0x6ef0 029748 byteswap pdata ,pdata 
+0x6ef1 029749 istore 2 ,contw 
+0x6ef2 029750 copy rega ,pdata 
+0x6ef3 029751 byteswap pdata ,pdata 
+0x6ef4 029752 istore 2 ,contw 
+:      029753 sa_req_all_answer_attributelist_full_loop:
+0x6ef5 029754 call memcpy 
+0x6ef6 029755 nbranch sa_req_all_last_frag_continue ,user 
+0x6ef7 029756 force 2 ,pdata 
+0x6ef8 029757 istore 1 ,contw 
+0x6ef9 029758 copy contr ,pdata 
+0x6efa 029759 isub timeup ,pdata 
+0x6efb 029760 byteswap pdata ,pdata 
+0x6efc 029761 istore 2 ,contw 
+0x6efd 029762 branch sa_req_all_frag_end 
+:      029763 sa_req_all_last_frag_continue:
+0x6efe 029764 force 0 ,pdata 
+0x6eff 029765 istore 1 ,contw 
+:      029766 sa_req_all_frag_end:
+0x6f00 029767 arg sdp_attribute_res ,rega 
+0x6f01 029768 branch ssa_req_range_common 
+:      029779 sdp_process_ssa_req:
+0x6f02 029780 bpatchx patch3a_1 ,mem_patch3a 
+0x6f03 029781 call ask_serviceclassid 
+0x6f04 029782 compare 0xff ,temp ,0xff 
+0x6f05 029783 branch sdp_invalid_request_syntax ,true 
+0x6f06 029784 call sdp_store_maxbyte 
+0x6f07 029785 store 2 ,mem_sdp_attribute_maxbyte 
+0x6f08 029786 increase -2 ,timeup 
+0x6f09 029787 call dataelementtype6 
+0x6f0a 029788 arg mem_sdp_attrib_list ,contw 
+0x6f0b 029789 force 0 ,queue 
+:      029790 ssa_req_loop:
+0x6f0c 029791 ifetch 1 ,contr 
+0x6f0d 029792 beq sdp_attribute_range ,ssa_req_range 
+0x6f0e 029793 ifetch 2 ,contr 
+0x6f0f 029794 istore 2 ,contw 
+0x6f10 029795 increase 1 ,queue 
+0x6f11 029796 increase -3 ,timeup 
+0x6f12 029797 increase -3 ,rega 
+0x6f13 029798 nbranch sdp_invalid_request_syntax ,positive 
+0x6f14 029799 nbranch ssa_req_loop ,zero 
+0x6f15 029800 increase -1 ,timeup 
+0x6f16 029801 nbranch sdp_invalid_request_syntax ,zero 
+0x6f17 029802 call l2cap_get_sdp_tx_payload 
+0x6f18 029803 increase 13 ,contw 
+0x6f19 029804 fetch 2 ,mem_sdp_uuid_search_ptr 
+0x6f1a 029805 iforce regc 
+0x6f1b 029806 arg mem_sdp_attrib_list ,rega 
+:      029807 ssa_req_attributelist_next:
+0x6f1c 029808 ifetch 2 ,rega 
+0x6f1d 029809 branch ssa_req_attributelist_end ,blank 
+0x6f1e 029810 iforce regb 
+0x6f1f 029811 call search_attrib 
+0x6f20 029812 branch ssa_req_attributelist_notfound ,blank 
+0x6f21 029813 increase -3 ,contr 
+0x6f22 029814 ifetch 3 ,contr 
+0x6f23 029815 istore 3 ,contw 
+0x6f24 029816 call sdp_data_len 
+0x6f25 029817 iforce loopcnt 
+0x6f26 029818 call memcpy 
+:      029819 ssa_req_attributelist_notfound:
+0x6f27 029820 increase 2 ,rega 
+0x6f28 029821 branch ssa_req_attributelist_next 
+:      029823 ssa_req_attributelist_end:
+0x6f29 029824 call ssa_req_range_lastfreg 
+0x6f2a 029825 fetch 2 ,mem_sdp_tx_pkt_length 
+0x6f2b 029826 beq 14 ,ssa_empty_rsp 
+0x6f2c 029827 call ssa_req_range_attrbutes_length_no_continue 
+0x6f2d 029828 branch ssa_req_range_attrbutes_length_no_continue 
+:      029831 sdp_store_maxbyte:
+0x6f2e 029832 ifetch 2 ,contr 
+0x6f2f 029833 byteswap pdata ,pdata 
+0x6f30 029834 increase -3 ,pdata 
+0x6f31 029835 arg 200 ,temp 
+0x6f32 029836 isub temp ,null 
+0x6f33 029837 nrtn positive 
+0x6f34 029838 setarg 200 
+0x6f35 029839 rtn 
+:      029842 ssa_req_range:
+0x6f36 029843 increase 4 ,contr 
+0x6f37 029844 increase -5 ,timeup 
+0x6f38 029845 increase -5 ,rega 
+0x6f39 029846 nbranch sdp_invalid_request_syntax ,zero 
+0x6f3a 029847 call sdp_store_continue_common 
+0x6f3b 029848 nbranch sdp_invalid_pdu_size ,zero 
+0x6f3c 029849 arg mem_sdp_uuid_search_ptr ,timeup 
+0x6f3d 029850 call search_all_uuid 
+0x6f3e 029851 deposit queue 
+0x6f3f 029852 branch ssa_empty_rsp ,blank 
+0x6f40 029853 store 1 ,mem_handle_humber 
+0x6f41 029855 copy regb ,pdata 
+0x6f42 029856 store 2 ,mem_sdp_all_length 
+0x6f43 029857 arg 0 ,queue 
+0x6f44 029858 arg 0 ,rega 
+0x6f45 029859 call l2cap_get_sdp_tx_payload 
+0x6f46 029860 increase 10 ,contw 
+:      029861 ssa_req_range_find_handle:
+0x6f47 029862 call ssa_req_range_get_length 
+0x6f48 029863 nbranch assert ,user 
+0x6f49 029864 copy contr ,timeup 
+0x6f4a 029865 copy pdata ,regc 
+0x6f4b 029866 iadd rega ,rega 
+0x6f4c 029869 fetch 2 ,mem_sdp_continue_byte 
+0x6f4d 029870 copy pdata ,regb 
+0x6f4e 029871 branch ssa_req_range_first_freg ,blank 
+:      029872 ssa_req_range_later_freg_with_continue:
+0x6f4f 029873 copy rega ,pdata 
+0x6f50 029874 isub regb ,regb 
+0x6f51 029875 branch ssa_req_range_next_handle ,zero 
+0x6f52 029876 nbranch ssa_req_range_next_handle ,positive 
+0x6f53 029877 fetch 2 ,mem_sdp_attribute_maxbyte 
+0x6f54 029878 isub regb ,null 
+0x6f55 029879 branch ssa_req_range_maxbyte_with_continue ,zero 
+0x6f56 029880 nbranch ssa_req_range_maxbyte_with_continue ,positive 
+:      029883 ssa_req_range_send_not_maxbyte:
+0x6f57 029884 copy regb ,loopcnt 
+0x6f58 029885 call ssa_req_range_maxbyte_with_continue_cpy 
+0x6f59 029886 fetch 1 ,mem_handle_humber 
+0x6f5a 029887 increase 1 ,queue 
+0x6f5b 029888 isub queue ,null 
+0x6f5c 029889 branch ssa_req_range_lastfreg ,zero 
+0x6f5d 029890 branch ssa_req_range_freg_with_continue 
+:      029892 ssa_req_range_maxbyte_with_continue:
+0x6f5e 029893 copy pdata ,loopcnt 
+0x6f5f 029894 call ssa_req_range_maxbyte_with_continue_cpy 
+0x6f60 029895 branch ssa_req_range_freg_with_continue 
+:      029897 ssa_req_range_maxbyte_with_continue_cpy:
+0x6f61 029898 increase -3 ,contw 
+0x6f62 029899 copy loopcnt ,temp 
+0x6f63 029900 copy regc ,pdata 
+0x6f64 029901 isub regb ,pdata 
+0x6f65 029902 iadd timeup ,contr 
+0x6f66 029903 branch memcpy 
+:      029905 ssa_req_range_next_handle:
+0x6f67 029906 fetch 1 ,mem_handle_humber 
+0x6f68 029907 increase 1 ,queue 
+0x6f69 029908 isub queue ,null 
+0x6f6a 029909 rtn zero 
+0x6f6b 029910 branch ssa_req_range_find_handle 
+:      029912 ssa_req_range_get_length:
+0x6f6c 029913 call disable_user 
+0x6f6d 029914 arg mem_sdp_handle_list ,contr 
+0x6f6e 029915 lshift2 queue ,pdata 
+0x6f6f 029916 iadd contr ,contr 
+0x6f70 029917 ifetcht 4 ,contr 
+0x6f71 029918 call search_handle 
+0x6f72 029919 nrtn zero 
+0x6f73 029920 call sdp_data_len 
+0x6f74 029921 branch enable_user 
+:      029923 ssa_req_range_first_freg:
+0x6f75 029924 fetch 2 ,mem_sdp_attribute_maxbyte 
+0x6f76 029925 isub rega ,null 
+0x6f77 029926 nbranch ssa_req_range_firstfreg_maxbyte_with_continue ,positive 
+0x6f78 029927 copy rega ,loopcnt 
+0x6f79 029928 copy loopcnt ,temp 
+0x6f7a 029929 copy timeup ,contr 
+0x6f7b 029930 call memcpy 
+0x6f7c 029931 fetch 2 ,mem_sdp_all_length 
+0x6f7d 029932 isub rega ,null 
+0x6f7e 029933 branch ssa_req_range_freg_no_continue ,zero 
+:      029934 ssa_req_range_firstfreg_not_maxbyte_with_continue:
+0x6f7f 029935 call ssa_req_range_freg_with_continue 
+0x6f80 029936 branch ssa_req_range_attrbutes_length 
+:      029938 ssa_req_range_freg_no_continue:
+0x6f81 029939 call ssa_req_range_lastfreg 
+0x6f82 029940 branch ssa_req_range_attrbutes_length 
+:      029942 ssa_req_range_lastfreg:
+0x6f83 029943 arg sdp_searchattrib_res ,rega 
+:      029944 ssa_req_range_lastfreg_common:
+0x6f84 029945 force 0 ,pdata 
+0x6f85 029946 istore 1 ,contw 
+0x6f86 029947 call ssa_req_range_common 
+0x6f87 029948 fetcht 2 ,mem_sdp_tx_pkt_length 
+0x6f88 029949 increase -5 ,temp 
+0x6f89 029950 byteswap temp ,pdata 
+0x6f8a 029951 istore 2 ,contw 
+0x6f8b 029952 increase -3 ,temp 
+0x6f8c 029953 byteswap temp ,pdata 
+0x6f8d 029954 istore 2 ,contw 
+0x6f8e 029955 rtn 
+:      029957 ssa_req_range_firstfreg_maxbyte_with_continue:
+0x6f8f 029958 copy pdata ,loopcnt 
+0x6f90 029959 copy loopcnt ,temp 
+0x6f91 029960 copy timeup ,contr 
+0x6f92 029961 call memcpy 
+0x6f93 029962 call ssa_req_range_freg_with_continue 
+:      029963 ssa_req_range_attrbutes_length:
+0x6f94 029964 setarg 0x36 
+0x6f95 029965 istore 1 ,contw 
+0x6f96 029966 fetch 2 ,mem_sdp_all_length 
+0x6f97 029967 byteswap pdata ,pdata 
+0x6f98 029968 istore 2 ,contw 
+0x6f99 029969 rtn 
+:      029971 ssa_req_range_attrbutes_length_no_continue:
+0x6f9a 029972 setarg 0x36 
+0x6f9b 029973 istore 1 ,contw 
+0x6f9c 029974 increase -3 ,temp 
+0x6f9d 029975 byteswap temp ,pdata 
+0x6f9e 029976 istore 2 ,contw 
+0x6f9f 029977 rtn 
+:      029979 ssa_req_range_freg_with_continue:
+0x6fa0 029980 arg sdp_searchattrib_res ,rega 
+0x6fa1 029981 setarg 2 
+0x6fa2 029982 istore 1 ,contw 
+0x6fa3 029983 fetch 2 ,mem_sdp_continue_byte 
+0x6fa4 029984 iadd temp ,temp 
+0x6fa5 029985 byteswap temp ,pdata 
+0x6fa6 029986 istore 2 ,contw 
+0x6fa7 029987 call ssa_req_range_common 
+0x6fa8 029988 fetcht 2 ,mem_sdp_tx_pkt_length 
+0x6fa9 029989 increase -5 ,temp 
+0x6faa 029990 byteswap temp ,pdata 
+0x6fab 029991 istore 2 ,contw 
+0x6fac 029992 increase -5 ,temp 
+0x6fad 029993 byteswap temp ,pdata 
+0x6fae 029994 istore 2 ,contw 
+0x6faf 029995 rtn 
+:      029997 ssa_req_range_common:
+0x6fb0 029998 fetch 2 ,mem_sdp_tx_payload_ptr 
+0x6fb1 029999 isub contw ,pdata 
+0x6fb2 030000 sub pdata ,0 ,pdata 
+0x6fb3 030001 store 2 ,mem_sdp_tx_pkt_length 
+0x6fb4 030002 call l2cap_get_sdp_tx_payload 
+0x6fb5 030003 copy rega ,pdata 
+0x6fb6 030004 istore 1 ,contw 
+0x6fb7 030005 fetch 2 ,mem_sdp_transactionid 
+0x6fb8 030006 istore 2 ,contw 
+0x6fb9 030007 rtn 
+:      030020 sdp_process_ssa_res:
+:      030021 sdp_process_ss_res:
+:      030022 sdp_process_sa_res:
+:      030023 sdp_process_error_res:
+0x6fba 030024 rtn 
+:      030057 sdp_invalid_service_record_handle:
+0x6fbb 030058 setarg 0x0200 
+0x6fbc 030059 store 2 ,mem_sdp_error_code 
+0x6fbd 030060 branch sdp_error_response 
+:      030061 sdp_invalid_pdu_size:
+0x6fbe 030062 setarg 0x0400 
+0x6fbf 030063 store 2 ,mem_sdp_error_code 
+0x6fc0 030064 branch sdp_error_response 
+:      030065 sdp_insufficient_resource:
+0x6fc1 030066 setarg 0x0600 
+0x6fc2 030067 store 2 ,mem_sdp_error_code 
+0x6fc3 030068 branch sdp_error_response 
+:      030069 sdp_invalid_request_syntax:
+0x6fc4 030070 setarg 0x0300 
+0x6fc5 030071 store 2 ,mem_sdp_error_code 
+:      030072 sdp_error_response:
+0x6fc6 030073 call l2cap_get_sdp_tx_payload 
+0x6fc7 030074 istore 1 ,contw 
+0x6fc8 030075 fetch 2 ,mem_sdp_transactionid 
+0x6fc9 030076 istore 2 ,contw 
+0x6fca 030077 setarg 0x0200 
+0x6fcb 030078 istore 2 ,contw 
+0x6fcc 030079 fetch 2 ,mem_sdp_error_code 
+0x6fcd 030080 istore 2 ,contw 
+0x6fce 030081 jam 7 ,mem_sdp_tx_pkt_length 
+0x6fcf 030082 rtn 
+:      030087 ask_serviceclassid:
+0x6fd0 030088 arg 0 ,regb 
+0x6fd1 030089 force 0 ,temp 
+0x6fd2 030090 arg mem_sdp_uuid_search_ptr ,contw 
+0x6fd3 030091 call dataelementtype6 
+0x6fd4 030092 branch asksrv_error ,zero 
+:      030093 classidloop:
+0x6fd5 030094 increase 1 ,regb 
+0x6fd6 030095 ifetch 1 ,contr 
+0x6fd7 030096 increase -1 ,rega 
+0x6fd8 030097 increase -1 ,timeup 
+0x6fd9 030098 compare 0x18 ,pdata ,0xf8 
+0x6fda 030099 nbranch asksrv_error ,true 
+0x6fdb 030100 compare 0x04 ,pdata ,0x07 
+0x6fdc 030101 nbranch cmp032 ,true 
+0x6fdd 030102 force 1 ,temp 
+:      030103 skip2bytes:
+0x6fde 030104 ifetch 1 ,contr 
+0x6fdf 030105 increase -1 ,rega 
+0x6fe0 030106 increase -1 ,timeup 
+0x6fe1 030107 bne 0x00 ,frstbwrong 
+0x6fe2 030108 ifetch 1 ,contr 
+0x6fe3 030109 increase -1 ,rega 
+0x6fe4 030110 increase -1 ,timeup 
+0x6fe5 030111 beq 0x00 ,cmpuuid 
+0x6fe6 030112 branch scndbwrong 
+:      030113 frstbwrong:
+0x6fe7 030114 increase 1 ,contr 
+0x6fe8 030115 increase -1 ,rega 
+0x6fe9 030116 increase -1 ,timeup 
+:      030117 scndbwrong:
+0x6fea 030118 increase 2 ,contr 
+0x6feb 030119 increase -2 ,rega 
+0x6fec 030120 increase -2 ,timeup 
+0x6fed 030121 compare 0x00 ,temp ,0xff 
+0x6fee 030122 branch loopornot ,true 
+0x6fef 030123 increase 12 ,contr 
+0x6ff0 030124 increase -12 ,rega 
+0x6ff1 030125 increase -12 ,timeup 
+0x6ff2 030126 branch loopornot 
+:      030127 cmp032:
+0x6ff3 030128 compare 0x02 ,pdata ,0x07 
+0x6ff4 030129 nbranch cmp016 ,true 
+0x6ff5 030130 branch skip2bytes 
+:      030131 cmp016:
+0x6ff6 030132 compare 0x01 ,pdata ,0x07 
+0x6ff7 030133 nbranch asksrv_error ,true 
+:      030134 cmpuuid:
+0x6ff8 030135 increase -2 ,rega 
+0x6ff9 030136 increase -2 ,timeup 
+0x6ffa 030137 ifetch 2 ,contr 
+0x6ffb 030138 sub regb ,4 ,null 
+0x6ffc 030139 branch uuidsize ,zero 
+0x6ffd 030140 istore 2 ,contw 
+:      030141 uuidsize:
+0x6ffe 030142 compare 0x00 ,temp ,0xff 
+0x6fff 030143 branch loopornot ,true 
+0x7000 030144 copy contr ,temp 
+0x7001 030145 ifetch 1 ,contr 
+0x7002 030146 bne 0x00 ,wrong12b 
+0x7003 030147 ifetch 1 ,contr 
+0x7004 030148 bne 0x00 ,wrong12b 
+0x7005 030149 ifetch 1 ,contr 
+0x7006 030150 bne 0x10 ,wrong12b 
+0x7007 030151 ifetch 1 ,contr 
+0x7008 030152 bne 0x00 ,wrong12b 
+0x7009 030153 ifetch 1 ,contr 
+0x700a 030154 bne 0x80 ,wrong12b 
+0x700b 030155 ifetch 1 ,contr 
+0x700c 030156 bne 0x00 ,wrong12b 
+0x700d 030157 ifetch 1 ,contr 
+0x700e 030158 bne 0x00 ,wrong12b 
+0x700f 030159 ifetch 1 ,contr 
+0x7010 030160 bne 0x80 ,wrong12b 
+0x7011 030161 ifetch 1 ,contr 
+0x7012 030162 bne 0x5f ,wrong12b 
+0x7013 030163 ifetch 1 ,contr 
+0x7014 030164 bne 0x9b ,wrong12b 
+0x7015 030165 ifetch 1 ,contr 
+0x7016 030166 bne 0x34 ,wrong12b 
+0x7017 030167 ifetch 1 ,contr 
+0x7018 030168 beq 0xfb ,chck12dn 
+:      030169 wrong12b:
+0x7019 030170 copy temp ,contr 
+:      030171 wrong12b1:
+0x701a 030172 increase 12 ,contr 
+0x701b 030173 force 0x00 ,queue 
+0x701c 030174 force 0x00 ,temp 
+0x701d 030175 branch chck12dn 
+:      030177 chck12dn:
+0x701e 030178 increase -12 ,timeup 
+0x701f 030179 increase -12 ,rega 
+:      030180 loopornot:
+0x7020 030181 force 0x00 ,temp 
+0x7021 030182 compare 0x00 ,rega ,0xff 
+0x7022 030183 nbranch classidloop ,true 
+0x7023 030184 force 0 ,pdata 
+0x7024 030185 istore 2 ,contw 
+0x7025 030186 rtn 
+:      030187 asksrv_error:
+0x7026 030188 arg 0xff ,temp 
+0x7027 030189 rtn 
+:      030199 dataelementtype6:
+0x7028 030200 bpatchx patch3a_4 ,mem_patch3a 
+0x7029 030201 ifetch 1 ,contr 
+0x702a 030202 increase -1 ,timeup 
+0x702b 030203 compare 0x30 ,pdata ,0xf8 
+0x702c 030204 nbranch dsize_error ,true 
+0x702d 030205 compare 0x07 ,pdata ,0x07 
+0x702e 030206 branch dsize32 ,true 
+0x702f 030207 compare 0x06 ,pdata ,0x07 
+0x7030 030208 branch dsize16 ,true 
+0x7031 030209 compare 0x05 ,pdata ,0x07 
+0x7032 030210 nbranch dsize_error ,true 
+0x7033 030212 ifetch 1 ,contr 
+0x7034 030213 copy pdata ,rega 
+0x7035 030214 increase -1 ,timeup 
+0x7036 030215 branch dsize 
+:      030216 dsize32:
+0x7037 030217 increase 2 ,contr 
+0x7038 030218 increase -2 ,timeup 
+:      030219 dsize16:
+0x7039 030220 ifetch 2 ,contr 
+0x703a 030221 byteswap pdata ,rega 
+0x703b 030222 increase -2 ,timeup 
+:      030223 dsize:
+0x703c 030224 force 0x01 ,pdata 
+0x703d 030225 rtn 
+:      030226 dsize_error:
+0x703e 030227 force 0x00 ,pdata 
+0x703f 030228 rtn 
+:      030238 ss_empty_rsp:
+0x7040 030239 setarg sdp_search_res 
+0x7041 030240 store 1 ,mem_sdp_pduid 
+0x7042 030241 branch empty_response 
+:      030242 sa_empty_rsp:
+0x7043 030243 setarg sdp_attribute_res 
+0x7044 030244 store 1 ,mem_sdp_pduid 
+0x7045 030245 branch empty_response 
+:      030246 ssa_empty_rsp:
+0x7046 030247 setarg sdp_searchattrib_res 
+0x7047 030248 store 1 ,mem_sdp_pduid 
+:      030249 empty_response:
+0x7048 030250 call l2cap_get_sdp_tx_payload 
+0x7049 030253 fetch 1 ,mem_sdp_pduid 
+0x704a 030254 copy pdata ,regb 
+0x704b 030255 istore 1 ,contw 
+0x704c 030256 fetch 2 ,mem_sdp_transactionid 
+0x704d 030257 istore 2 ,contw 
+0x704e 030258 setarg 0x0500 
+0x704f 030259 istore 2 ,contw 
+0x7050 030260 compare sdp_attribute_res ,regb ,0xff 
+0x7051 030261 branch fullsearch ,true 
+0x7052 030262 compare sdp_searchattrib_res ,regb ,0xff 
+0x7053 030263 branch fullsearch ,true 
+0x7054 030264 setarg 0x000000 
+0x7055 030265 istore 5 ,contw 
+0x7056 030266 branch outempty 
+:      030268 fullsearch:
+0x7057 030269 setarg 0x350200 
+0x7058 030270 istore 5 ,contw 
+:      030271 outempty:
+0x7059 030272 jam 10 ,mem_sdp_tx_pkt_length 
+0x705a 030273 rtn 
+:      030276 sdp_data_len:
+0x705b 030277 call store_contw 
+0x705c 030278 call store_contr 
+0x705d 030279 call sdp_get_data 
+0x705e 030280 call get_contw 
+0x705f 030281 call get_contr 
+0x7060 030282 copy temp ,pdata 
+0x7061 030283 rtn 
+:      030286 sdp_get_data:
+0x7062 030287 ifetch 1 ,contr 
+0x7063 030288 and pdata ,0x7 ,loopcnt 
+0x7064 030289 rshift3 pdata ,pdata 
+0x7065 030290 bne 0 ,sdp_get_data_type_not0 
+:      030291 sdp_get_data_type0:
+0x7066 030292 force 1 ,pdata 
+0x7067 030293 force 1 ,temp 
+0x7068 030294 rtn 
+:      030296 sdp_get_data_type_not0_sizeindex01234:
+0x7069 030297 call left_shift_n 
+0x706a 030298 add pdata ,1 ,temp 
+0x706b 030299 rtn 
+:      030300 sdp_get_data_type_not0:
+0x706c 030301 deposit loopcnt 
+0x706d 030302 sub pdata ,4 ,null 
+0x706e 030303 branch sdp_get_data_type_not0_sizeindex01234 ,positive 
+0x706f 030304 beq 5 ,sdp_get_data_type_not0_sizeindex5 
+0x7070 030305 beq 6 ,sdp_get_data_type_not0_sizeindex6 
+0x7071 030306 beq 7 ,sdp_get_data_type_not0_sizeindex7 
+0x7072 030307 rtn 
+:      030309 sdp_get_data_type_not0_sizeindex5:
+0x7073 030310 ifetch 1 ,contr 
+0x7074 030311 add pdata ,2 ,temp 
+0x7075 030312 rtn 
+:      030313 sdp_get_data_type_not0_sizeindex6:
+0x7076 030314 ifetch 2 ,contr 
+0x7077 030315 byteswap pdata ,pdata 
+0x7078 030316 add pdata ,3 ,temp 
+0x7079 030317 rtn 
+:      030318 sdp_get_data_type_not0_sizeindex7:
+0x707a 030319 ifetch 2 ,contr 
+0x707b 030320 byteswap pdata ,pdata 
+0x707c 030321 ifetcht 2 ,contr 
+0x707d 030322 byteswap temp ,temp 
+0x707e 030323 lshift16 temp ,temp 
+0x707f 030324 iadd temp ,pdata 
+0x7080 030325 add pdata ,5 ,temp 
+0x7081 030326 rtn 
+:      030332 search_all_uuid:
+0x7082 030333 bpatchx patch3a_5 ,mem_patch3a 
+0x7083 030334 force 0 ,queue 
+0x7084 030335 arg 0 ,regb 
+0x7085 030336 arg mem_sdp_handle_list ,contw 
+:      030337 search_all_uuid_llop:
+0x7086 030338 ifetch 2 ,timeup 
+0x7087 030339 rtn blank 
+0x7088 030340 call search_uuid 
+0x7089 030341 copy queue ,pdata 
+0x708a 030342 rtneq sdp_max_handle_number 
+0x708b 030343 increase 2 ,timeup 
+0x708c 030344 branch search_all_uuid_llop 
+:      030346 search_uuid:
+0x708d 030348 iforce regc 
+0x708e 030350 fetch 2 ,mem_ui_uuid_table 
+0x708f 030351 iforce contr 
+:      030352 search_uuid_next:
+0x7090 030353 copy queue ,pdata 
+0x7091 030354 rtneq sdp_max_handle_number 
+0x7092 030355 disable user 
+0x7093 030356 ifetch 1 ,contr 
+0x7094 030357 rtn blank 
+0x7095 030358 iforce loopcnt 
+:      030359 search_uuid_loop:
+0x7096 030360 ifetch 2 ,contr 
+0x7097 030361 isub regc ,null 
+0x7098 030362 nbranch search_uuid_not_found ,zero 
+0x7099 030363 enable user 
+:      030364 search_uuid_not_found:
+0x709a 030365 loop search_uuid_loop 
+0x709b 030366 ifetcht 4 ,contr 
+0x709c 030367 copy contr ,rega 
+0x709d 030368 nbranch search_uuid_nomatch ,user 
+0x709e 030369 arg mem_sdp_handle_list ,contr 
+0x709f 030370 arg sdp_max_handle_number ,loopcnt 
+:      030371 search_uuid_check_same_handle:
+0x70a0 030372 ifetch 4 ,contr 
+0x70a1 030373 branch search_uuid_store_handle ,blank 
+0x70a2 030374 isub temp ,null 
+0x70a3 030375 branch search_uuid_nomatch ,zero 
+0x70a4 030376 loop search_uuid_check_same_handle 
+0x70a5 030377 rtn 
+:      030378 search_uuid_store_handle:
+0x70a6 030379 istoret 4 ,contw 
+0x70a7 030380 increase 1 ,queue 
+0x70a8 030381 copy rega ,contr 
+0x70a9 030382 call sdp_data_len 
+0x70aa 030383 iadd regb ,regb 
+0x70ab 030384 iadd contr ,contr 
+0x70ac 030385 branch search_uuid_next 
+:      030386 search_uuid_nomatch:
+0x70ad 030387 copy rega ,contr 
+0x70ae 030388 call sdp_get_data 
+0x70af 030389 iadd contr ,contr 
+0x70b0 030390 branch search_uuid_next 
+:      030396 search_handle:
+0x70b1 030397 bpatchx patch3a_6 ,mem_patch3a 
+0x70b2 030398 fetch 2 ,mem_ui_uuid_table 
+0x70b3 030399 iforce contr 
+:      030400 search_handle_loop:
+0x70b4 030401 ifetch 1 ,contr 
+0x70b5 030402 branch disable_zero ,blank 
+0x70b6 030403 lshift pdata ,pdata 
+0x70b7 030404 iadd contr ,contr 
+0x70b8 030405 ifetch 4 ,contr 
+0x70b9 030406 isub temp ,null 
+0x70ba 030407 rtn zero 
+0x70bb 030408 deposit contw 
+0x70bc 030409 store 2 ,mem_contw 
+0x70bd 030410 storet 8 ,mem_temp 
+0x70be 030411 call sdp_get_data 
+0x70bf 030412 iadd contr ,contr 
+0x70c0 030413 copy contr ,pdata 
+0x70c1 030414 fetcht 2 ,mem_contw 
+0x70c2 030415 copy temp ,contw 
+0x70c3 030416 fetcht 8 ,mem_temp 
+0x70c4 030417 copy pdata ,contr 
+0x70c5 030418 branch search_handle_loop 
+:      030424 search_attrib:
+0x70c6 030425 bpatchx patch3a_7 ,mem_patch3a 
+0x70c7 030426 fetch 2 ,mem_ui_uuid_table 
+0x70c8 030427 iforce contr 
+:      030428 search_attrib_next:
+0x70c9 030429 ifetch 1 ,contr 
+0x70ca 030430 branch search_attrib_end ,blank 
+0x70cb 030431 iforce loopcnt 
+:      030432 search_attrib_loop:
+0x70cc 030433 ifetch 2 ,contr 
+0x70cd 030434 isub regc ,null 
+0x70ce 030435 branch search_attrib_found_uuid ,zero 
+0x70cf 030436 loop search_attrib_loop 
+0x70d0 030437 increase 4 ,contr 
+0x70d1 030438 call sdp_get_data 
+0x70d2 030439 iadd contr ,contr 
+0x70d3 030440 branch search_attrib_next 
+:      030441 search_attrib_found_uuid:
+0x70d4 030442 increase -1 ,loopcnt 
+0x70d5 030443 lshift loopcnt ,pdata 
+0x70d6 030444 iadd contr ,contr 
+0x70d7 030445 increase 4 ,contr 
+0x70d8 030446 call sdp_get_data 
+0x70d9 030447 iadd contr ,timeup 
+:      030448 search_attrib_loop_attribs:
+0x70da 030449 increase 1 ,contr 
+0x70db 030450 ifetch 2 ,contr 
+0x70dc 030451 isub regb ,null 
+0x70dd 030455 branch disable_blank ,zero 
+0x70de 030456 call sdp_data_len 
+0x70df 030457 iadd contr ,contr 
+0x70e0 030458 deposit timeup 
+0x70e1 030459 isub contr ,null 
+0x70e2 030460 branch search_attrib_end ,zero 
+0x70e3 030461 branch search_attrib_loop_attribs 
+:      030462 search_attrib_end:
+0x70e4 030463 force 0 ,contr 
+0x70e5 030464 force 0 ,pdata 
+0x70e6 030465 rtn 
+:      030471 search_handle_attrib:
+0x70e7 030472 bpatchx patch3b_0 ,mem_patch3b 
+0x70e8 030473 fetch 2 ,mem_ui_uuid_table 
+0x70e9 030474 iforce contr 
+:      030475 search_handle_attrib_next:
+0x70ea 030476 ifetch 1 ,contr 
+0x70eb 030477 branch search_handle_attrib_end ,blank 
+0x70ec 030478 lshift pdata ,pdata 
+0x70ed 030479 iadd contr ,contr 
+0x70ee 030480 ifetch 4 ,contr 
+0x70ef 030481 isub temp ,null 
+0x70f0 030482 branch search_handl_attrib_found_handle ,zero 
+0x70f1 030483 call sdp_get_data 
+0x70f2 030484 iadd contr ,contr 
+0x70f3 030485 branch search_handle_attrib_next 
+:      030486 search_handl_attrib_found_handle:
+0x70f4 030487 call sdp_get_data 
+0x70f5 030488 iadd contr ,timeup 
+:      030489 search_handle_attrib_loop_attribs:
+0x70f6 030490 increase 1 ,contr 
+0x70f7 030491 ifetch 2 ,contr 
+0x70f8 030492 isub regb ,null 
+0x70f9 030493 rtn zero 
+0x70fa 030494 call sdp_data_len 
+0x70fb 030495 iadd contr ,contr 
+0x70fc 030496 deposit timeup 
+0x70fd 030497 isub contr ,null 
+0x70fe 030498 branch search_handle_attrib_end ,zero 
+0x70ff 030499 branch search_handle_attrib_loop_attribs 
+:      030500 search_handle_attrib_end:
+0x7100 030501 force 0 ,contr 
+0x7101 030502 rtn 
+:      030506 search_rfcomm_cn:
+0x7102 030507 arg 0x0400 ,regb 
+0x7103 030508 call search_handl_attrib_found_handle 
+0x7104 030509 arg 0x0300 ,regb 
+0x7105 030510 call search_uuid_in_data 
+0x7106 030511 nrtn user 
+0x7107 030512 sub rega ,3 ,null 
+0x7108 030513 branch disable_user ,positive 
+0x7109 030514 ifetch 1 ,contr 
+0x710a 030515 bne 0x08 ,disable_user 
+0x710b 030516 ifetch 1 ,contr 
+0x710c 030517 rtn 
+:      030522 search_uuid_in_data:
+0x710d 030523 bpatchx patch3b_1 ,mem_patch3b 
+0x710e 030524 call sdp_get_data 
+0x710f 030525 copy pdata ,rega 
+:      030526 search_uuid_in_data_loop:
+0x7110 030527 ifetch 1 ,contr 
+0x7111 030528 and pdata ,0x7 ,loopcnt 
+0x7112 030529 rshift3 pdata ,pdata 
+0x7113 030530 sub pdata ,3 ,null 
+0x7114 030531 branch search_uuid_in_data_found_uuid ,zero 
+0x7115 030532 copy loopcnt ,pdata 
+0x7116 030533 beq 5 ,search_uuid_in_data_found_element_index5 
+0x7117 030534 beq 6 ,search_uuid_in_data_found_element_index6 
+0x7118 030535 beq 7 ,search_uuid_in_data_found_element_index7 
+0x7119 030536 increase -1 ,contr 
+0x711a 030537 call sdp_get_data 
+0x711b 030538 iadd contr ,contr 
+0x711c 030539 copy rega ,pdata 
+0x711d 030540 isub temp ,rega 
+0x711e 030541 branch disable_user ,zero 
+0x711f 030542 branch search_uuid_in_data_loop 
+:      030544 search_uuid_in_data_found_element_index5:
+0x7120 030545 increase -2 ,rega 
+0x7121 030546 increase 1 ,contr 
+0x7122 030547 branch search_uuid_in_data_loop 
+:      030548 search_uuid_in_data_found_element_index6:
+0x7123 030549 increase -3 ,rega 
+0x7124 030550 increase 2 ,contr 
+0x7125 030551 branch search_uuid_in_data_loop 
+:      030552 search_uuid_in_data_found_element_index7:
+0x7126 030553 increase -5 ,rega 
+0x7127 030554 increase 4 ,contr 
+0x7128 030555 branch search_uuid_in_data_loop 
+:      030557 search_uuid_in_data_found_uuid:
+0x7129 030558 increase -1 ,rega 
+0x712a 030559 copy loopcnt ,pdata 
+0x712b 030560 beq 1 ,search_uuid_in_data_type_uuid_16 
+0x712c 030561 beq 2 ,search_uuid_in_data_type_uuid_32 
+0x712d 030562 beq 4 ,search_uuid_in_data_type_uuid_128 
+0x712e 030563 branch disable_user 
+:      030564 search_uuid_in_data_type_uuid_128:
+0x712f 030565 increase -12 ,rega 
+:      030566 search_uuid_in_data_type_uuid_32:
+0x7130 030567 ifetch 2 ,contr 
+0x7131 030568 increase -2 ,rega 
+:      030569 search_uuid_in_data_type_uuid_16:
+0x7132 030570 ifetch 2 ,contr 
+0x7133 030571 isub regb ,null 
+0x7134 030572 branch enable_user ,zero 
+0x7135 030573 increase -2 ,rega 
+0x7136 030574 branch disable_user ,zero 
+0x7137 030575 branch search_uuid_in_data_loop 
+:      030634 sdp_send_spp_request:
+0x7138 030635 call l2cap_get_sdp_tx_payload 
+0x7139 030636 copy pdata ,contw 
+0x713a 030637 setarg 6 
+0x713b 030638 istore 1 ,contw 
+0x713c 030639 setarg sdp_tid_spp 
+0x713d 030640 istore 2 ,contw 
+0x713e 030641 setarg 0x0f00 
+0x713f 030642 istore 2 ,contw 
+0x7140 030643 setarg 0x1a0535 
+0x7141 030644 istore 3 ,contw 
+0x7142 030645 setarg 0x0111 
+0x7143 030646 lshift16 pdata ,pdata 
+0x7144 030647 istore 4 ,contw 
+0x7145 030648 setarg 0x2600 
+0x7146 030649 istore 2 ,contw 
+0x7147 030650 setarg 0x0335 
+0x7148 030651 istore 2 ,contw 
+0x7149 030652 setarg 0x0009 
+0x714a 030653 istore 2 ,contw 
+0x714b 030654 setarg 0x0004 
+0x714c 030655 istore 2 ,contw 
+0x714d 030656 jam 0x14 ,mem_sdp_tx_pkt_length 
+0x714e 030657 rtn 
+:      030661 function_g2:
+0x714f 030662 bpatchx patch3b_2 ,mem_patch3b 
+0x7150 030663 jam 80 ,mem_aes_cmac_data_length 
+0x7151 030664 arg memdat ,contw 
+0x7152 030665 arg mem_le_srand ,contr 
+0x7153 030666 call memcpy16 
+0x7154 030667 arg mem_le_pubkey_local_x_256 ,contr 
+0x7155 030668 call memcpy32 
+0x7156 030669 arg mem_le_pubkey_remote_x_256 ,contr 
+0x7157 030670 call memcpy32 
+0x7158 030671 call inverse_memdat 
+0x7159 030672 arg mem_le_mrand ,contr 
+0x715a 030673 call store_inverse_k 
+0x715b 030674 call function_aes_cmac 
+0x715c 030676 arg mem_aes_cmac_temp ,contw 
+0x715d 030677 call load_inverse_result 
+0x715e 030678 setarg 1000000 
+0x715f 030679 copy pdata ,rega 
+0x7160 030680 fetch 4 ,mem_aes_cmac_temp 
+0x7161 030681 idiv rega 
+0x7162 030682 call wait_div_end 
+0x7163 030683 remainder pdata 
+0x7164 030684 store 4 ,mem_gkey 
+0x7165 030686 rtn 
+:      030688 function_f6_eb:
+0x7166 030689 jam 65 ,mem_aes_cmac_data_length 
+0x7167 030690 arg memdat ,contw 
+0x7168 030691 call store_addr_common_a 
+0x7169 030692 call store_addr_common_b 
+0x716a 030693 fetch 3 ,mem_le_pres + 1 
+0x716b 030694 istore 3 ,contw 
+0x716c 030697 call get_r 
+0x716d 030699 arg mem_le_mrand ,contr 
+0x716e 030700 call memcpy16 
+0x716f 030701 arg mem_le_srand ,contr 
+0x7170 030702 call memcpy16 
+0x7171 030703 call inverse_memdat 
+0x7172 030704 arg mem_le_mackey ,contr 
+0x7173 030705 arg mem_aes_cmac_k ,contw 
+0x7174 030706 call memcpy16 
+0x7175 030708 branch function_aes_cmac 
+:      030712 get_r:
+0x7176 030713 fetch 4 ,mem_le_tk 
+0x7177 030714 istore 4 ,contw 
+0x7178 030715 call memset0_4 
+0x7179 030716 branch memset0_8 
+:      030718 function_f6_ea:
+0x717a 030719 bpatchx patch3b_3 ,mem_patch3b 
+0x717b 030720 jam 65 ,mem_aes_cmac_data_length 
+0x717c 030721 arg memdat ,contw 
+0x717d 030722 call store_addr_common_b 
+0x717e 030723 call store_addr_common_a 
+0x717f 030724 fetch 3 ,mem_le_preq + 1 
+0x7180 030725 istore 3 ,contw 
+0x7181 030728 call get_r 
+0x7182 030729 arg mem_le_srand ,contr 
+0x7183 030730 call memcpy16 
+0x7184 030731 arg mem_le_mrand ,contr 
+0x7185 030732 call memcpy16 
+0x7186 030733 call inverse_memdat 
+0x7187 030734 arg mem_le_mackey ,contr 
+0x7188 030735 arg mem_aes_cmac_k ,contw 
+0x7189 030736 call memcpy16 
+0x718a 030738 call function_aes_cmac 
+0x718b 030739 arg mem_aes_cmac_temp ,contw 
+0x718c 030740 branch load_inverse_result 
+:      030742 function_f5:
+0x718d 030743 jam 32 ,mem_aes_cmac_data_length 
+0x718e 030744 arg mem_le_dhkey_256 ,contr 
+0x718f 030745 arg memdat ,contw 
+0x7190 030746 call memcpy32 
+0x7191 030747 call inverse_memdat 
+0x7192 030748 arg mem_le_slat ,contr 
+0x7193 030749 call store_inverse_k 
+0x7194 030750 call function_aes_cmac 
+0x7195 030751 arg mem_aes_cmac_k ,contw 
+0x7196 030752 call store_aes_result 
+0x7197 030753 arg 1 ,temp 
+0x7198 030754 call function_f5_common 
+0x7199 030755 arg mem_le_ltk ,contw 
+0x719a 030756 call load_inverse_result 
+0x719b 030757 arg 0 ,temp 
+0x719c 030758 call function_f5_common 
+0x719d 030759 arg mem_le_mackey ,contw 
+0x719e 030761 branch store_aes_result 
+:      030764 function_f5_common:
+0x719f 030765 bpatchx patch3b_4 ,mem_patch3b 
+0x71a0 030766 jam 53 ,mem_aes_cmac_data_length 
+0x71a1 030767 setarg 0x100 
+0x71a2 030768 store 2 ,memdat 
+0x71a3 030769 call store_addr_common_b 
+0x71a4 030770 call store_addr_common_a 
+0x71a5 030771 arg mem_le_srand ,contr 
+0x71a6 030772 call memcpy16 
+0x71a7 030773 arg mem_le_mrand ,contr 
+0x71a8 030774 call memcpy16 
+0x71a9 030776 setarg 0x6c65 
+0x71aa 030777 istore 2 ,contw 
+0x71ab 030778 setarg 0x6274 
+0x71ac 030779 istore 2 ,contw 
+0x71ad 030780 istoret 1 ,contw 
+0x71ae 030781 call inverse_memdat 
+0x71af 030782 branch function_aes_cmac 
+:      030784 store_addr_common_b:
+0x71b0 030785 fetch 6 ,mem_le_lap 
+0x71b1 030786 istore 6 ,contw 
+0x71b2 030787 fetch 1 ,mem_le_conn_own_addr_type 
+0x71b3 030788 istore 1 ,contw 
+0x71b4 030789 rtn 
+:      030791 store_addr_common_a:
+0x71b5 030792 fetch 6 ,mem_le_plap 
+0x71b6 030793 istore 6 ,contw 
+0x71b7 030798 fetch 1 ,mem_le_conn_peer_addr_type 
+0x71b8 030799 istore 1 ,contw 
+0x71b9 030800 rtn 
+:      030802 function_f4_ca:
+0x71ba 030803 jam 65 ,mem_aes_cmac_data_length 
+0x71bb 030804 fetch 1 ,mem_passkey_1bit 
+0x71bc 030805 store 1 ,memdat 
+0x71bd 030806 arg mem_le_pubkey_local_x_256 ,contr 
+0x71be 030807 call memcpy32 
+0x71bf 030808 arg mem_le_pubkey_remote_x_256 ,contr 
+0x71c0 030809 call memcpy32 
+0x71c1 030810 call inverse_memdat 
+0x71c2 030811 arg mem_le_mrand ,contr 
+0x71c3 030812 call store_inverse_k 
+0x71c4 030813 branch function_aes_cmac 
+:      030816 function_f4_cb:
+0x71c5 030817 jam 65 ,mem_aes_cmac_data_length 
+0x71c6 030818 fetch 1 ,mem_passkey_1bit 
+0x71c7 030819 store 1 ,memdat 
+0x71c8 030820 arg mem_le_pubkey_remote_x_256 ,contr 
+0x71c9 030821 call memcpy32 
+0x71ca 030822 arg mem_le_pubkey_local_x_256 ,contr 
+0x71cb 030823 call memcpy32 
+0x71cc 030824 call inverse_memdat 
+0x71cd 030825 arg mem_le_srand ,contr 
+0x71ce 030826 call store_inverse_k 
+0x71cf 030827 branch function_aes_cmac 
+:      030829 function_aes_cmac:
+0x71d0 030830 bpatchx patch3b_5 ,mem_patch3b 
+0x71d1 030831 call function_aes_cmac_generate_subkey 
+0x71d2 030835 fetch 1 ,mem_aes_cmac_data_length 
+0x71d3 030836 copy pdata ,temp 
+:      030837 function_ceil16:
+0x71d4 030838 increase 15 ,pdata 
+0x71d5 030839 rshift4 pdata ,pdata 
+0x71d6 030840 copy pdata ,regb 
+0x71d7 030841 branch function_aes_cmac_set_flag_0_balnk ,blank 
+0x71d8 030842 and temp ,0x0f ,pdata 
+0x71d9 030843 nbranch function_aes_cmac_set_flag_0 ,blank 
+0x71da 030845 arg mem_aes_cmac_k1 ,regc 
+0x71db 030846 arg memdat ,pdata 
+0x71dc 030847 increase -16 ,pdata 
+0x71dd 030850 iadd temp ,rega 
+0x71de 030851 arg mem_aes_cmac_m_last ,contw 
+0x71df 030852 arg 4 ,loopcnt 
+0x71e0 030853 call xor_loop 
+0x71e1 030857 branch function_aes_cmac_aes 
+:      030859 function_aes_cmac_set_flag_0_balnk:
+0x71e2 030860 arg 1 ,regb 
+0x71e3 030861 arg 0 ,rega 
+0x71e4 030863 branch function_aes_cmac_set_flag_0_common 
+:      030866 function_aes_cmac_set_flag_0:
+0x71e5 030868 and temp ,0x0f ,rega 
+:      030869 function_aes_cmac_set_flag_0_common:
+0x71e6 030870 arg memdat ,pdata 
+0x71e7 030871 iadd temp ,pdata 
+0x71e8 030872 isub rega ,contr 
+0x71e9 030874 arg mem_aes_cmac_temp ,contw 
+0x71ea 030875 call function_aes_cmac_padding 
+0x71eb 030877 arg mem_aes_cmac_k2 ,regc 
+0x71ec 030878 arg mem_aes_cmac_temp ,rega 
+0x71ed 030879 arg mem_aes_cmac_m_last ,contw 
+0x71ee 030880 arg 4 ,loopcnt 
+0x71ef 030881 call xor_loop 
+:      030888 function_aes_cmac_aes:
+0x71f0 030893 call aes_clear_data 
+0x71f1 030894 call aes_init 
+0x71f2 030897 arg memdat ,contr 
+:      030898 function_aes_cmac_aes_loop:
+0x71f3 030900 increase -1 ,regb 
+0x71f4 030901 deposit regb 
+0x71f5 030902 branch function_aes_cmac_aes_loop_end ,blank 
+0x71f6 030903 call load_data128 
+0x71f7 030904 call do_aes_cbc 
+0x71f8 030905 branch function_aes_cmac_aes_loop 
+:      030907 function_aes_cmac_aes_loop_end:
+0x71f9 030908 arg mem_aes_cmac_temp ,contw 
+0x71fa 030909 call store_aes_result 
+0x71fb 030910 arg mem_aes_cmac_m_last ,contr 
+0x71fc 030911 call load_data128 
+0x71fd 030912 call aes_init 
+0x71fe 030913 arg mem_aes_cmac_temp ,contr 
+0x71ff 030914 call load_data128 
+0x7200 030915 branch do_aes_cbc 
+:      030919 load_inverse_result:
+0x7201 030921 copy contw ,rega 
+0x7202 030922 call store_aes_result 
+0x7203 030924 arg 16 ,loopcnt 
+0x7204 030925 branch inverse_data 
+:      030927 store_inverse_k:
+0x7205 030928 arg mem_aes_cmac_k ,contw 
+0x7206 030929 call memcpy16 
+:      030930 inverse_k:
+0x7207 030931 arg 16 ,loopcnt 
+0x7208 030932 arg mem_aes_cmac_k ,rega 
+0x7209 030933 branch inverse_data 
+:      030935 inverse_memdat:
+0x720a 030936 fetch 1 ,mem_aes_cmac_data_length 
+0x720b 030937 copy pdata ,loopcnt 
+0x720c 030938 arg memdat ,rega 
+0x720d 030939 branch inverse_data 
+:      030941 bn_lshift_0_inverse:
+0x720e 030942 ifetch 1 ,rega 
+0x720f 030943 lshift pdata ,pdata 
+0x7210 030944 isolate1 0 ,regc 
+0x7211 030945 setflag true ,0 ,pdata 
+0x7212 030946 isolate1 8 ,pdata 
+0x7213 030947 setflag true ,0 ,regc 
+0x7214 030948 istore 1 ,rega 
+0x7215 030949 increase -1 ,rega 
+0x7216 030950 loop bn_lshift_0_inverse 
+0x7217 030951 rtn 
+:      030953 function_aes_cmac_k1_inverse:
+0x7218 030954 arg mem_aes_cmac_k1 ,rega 
+:      030955 function_aes_cmac_inverse_common:
+0x7219 030956 increase 15 ,rega 
+0x721a 030957 force 16 ,loopcnt 
+0x721b 030958 force 0 ,regc 
+0x721c 030959 branch bn_lshift_0_inverse 
+:      030961 function_aes_cmac_k2_inverse:
+0x721d 030962 arg mem_aes_cmac_k2 ,rega 
+0x721e 030963 branch function_aes_cmac_inverse_common 
+:      030966 function_aes_cmac_generate_subkey:
+0x721f 030967 arg mem_aes_cmac_k ,contr 
+0x7220 030968 call load_key 
+0x7221 030971 force regidx_xor ,regext_index 
+0x7222 030972 call aes_clear 
+0x7223 030973 call aes_clear_data 
+0x7224 030974 call do_aes_ocb 
+0x7225 030979 arg mem_aes_cmac_k1 ,contw 
+0x7226 030980 call store_aes_result 
+:      030981 function_aes_cmac_k1:
+0x7227 030982 bpatchx patch3b_6 ,mem_patch3b 
+0x7228 030983 fetch 1 ,mem_aes_cmac_k1 
+0x7229 030984 isolate1 7 ,pdata 
+0x722a 030985 nbranch function_aes_cmac_k1_0 ,true 
+0x722b 030986 call function_aes_cmac_k1_inverse 
+0x722c 030989 arg mem_aes_cmac_k1 ,regc 
+0x722d 030991 arg mem_aes_cmac_k1 ,contw 
+0x722e 030994 call function_aes_cmac_xor_rb 
+0x722f 030995 branch function_aes_cmac_k2 
+:      030996 function_aes_cmac_k1_0:
+0x7230 030997 call function_aes_cmac_k1_inverse 
+:      030998 function_aes_cmac_k2:
+0x7231 031000 arg mem_aes_cmac_k1 ,contr 
+0x7232 031001 arg mem_aes_cmac_k2 ,contw 
+0x7233 031002 call memcpy16 
+0x7234 031003 fetch 1 ,mem_aes_cmac_k2 
+0x7235 031004 isolate1 7 ,pdata 
+0x7236 031005 nbranch function_aes_cmac_k2_inverse ,true 
+0x7237 031006 call function_aes_cmac_k2_inverse 
+0x7238 031008 arg mem_aes_cmac_k2 ,regc 
+0x7239 031010 arg mem_aes_cmac_k2 ,contw 
+:      031016 function_aes_cmac_xor_rb:
+0x723a 031017 arg 3 ,loopcnt 
+:      031018 function_aes_cmac_xor_rb_loop:
+0x723b 031019 arg 0 ,temp 
+0x723c 031020 call function_aes_cmac_xor_loop_common 
+0x723d 031021 increase 4 ,regc 
+0x723e 031022 loop function_aes_cmac_xor_rb_loop 
+0x723f 031023 arg 0x8700 ,temp 
+0x7240 031024 lshift16 temp ,temp 
+:      031025 function_aes_cmac_xor_loop_common:
+0x7241 031026 ifetch 4 ,regc 
+0x7242 031027 ixor temp ,pdata 
+0x7243 031028 istore 4 ,contw 
+0x7244 031029 rtn 
+:      031035 function_aes_cmac_padding:
+0x7245 031036 bpatchx patch3b_7 ,mem_patch3b 
+0x7246 031037 arg 16 ,loopcnt 
+0x7247 031038 arg 0 ,pdata 
+:      031039 function_aes_cmac_padding_loop:
+0x7248 031040 isub rega ,null 
+0x7249 031041 branch function_aes_cmac_padding_beq_length ,zero 
+0x724a 031042 branch function_aes_cmac_padding_big_length ,positive 
+0x724b 031043 ifetcht 1 ,contr 
+0x724c 031044 istoret 1 ,contw 
+:      031045 function_aes_cmac_padding_loop2:
+0x724d 031046 increase 1 ,pdata 
+0x724e 031047 loop function_aes_cmac_padding_loop 
+0x724f 031048 rtn 
+:      031049 function_aes_cmac_padding_beq_length:
+0x7250 031050 arg 0x80 ,temp 
+:      031051 function_aes_cmac_padding_common:
+0x7251 031052 istoret 1 ,contw 
+0x7252 031053 branch function_aes_cmac_padding_loop2 
+:      031055 function_aes_cmac_padding_big_length:
+0x7253 031056 arg 0 ,temp 
+0x7254 031057 branch function_aes_cmac_padding_common 
+:      031060 generate_kinit:
+0x7255 031061 call function_e22 
+0x7256 031062 arg mem_input_store ,contr 
+0x7257 031063 arg mem_kinit ,contw 
+0x7258 031064 branch memcpy16 
+:      031067 function_e21:
+0x7259 031068 disable user 
+0x725a 031069 call function_expand 
+0x725b 031070 arg mem_random_number ,contr 
+0x725c 031071 arg mem_x ,contw 
+0x725d 031072 force 15 ,loopcnt 
+0x725e 031073 call memcpy 
+0x725f 031074 ifetch 1 ,contr 
+0x7260 031075 xor_into 6 ,pdata 
+0x7261 031076 istore 1 ,contw 
+0x7262 031077 setarg mem_y 
+0x7263 031078 store 2 ,memp_ar_input 
+0x7264 031079 setarg mem_x 
+0x7265 031080 store 2 ,memp_ar_key 
+0x7266 031081 set1 mark_ar2 ,mark 
+0x7267 031082 branch function_ar 
+:      031086 function_e22:
+0x7268 031087 fetcht 1 ,mem_pin_length 
+0x7269 031088 force 16 ,regb 
+0x726a 031089 add temp ,6 ,regc 
+0x726b 031090 sub regc ,16 ,null 
+0x726c 031091 branch function_e22_pin_init ,positive 
+0x726d 031092 force 16 ,regc 
+:      031093 function_e22_pin_init:
+0x726e 031094 arg mem_x ,contw 
+:      031095 function_e22_genx_pin:
+0x726f 031096 arg mem_pin ,contr 
+0x7270 031097 copy temp ,loopcnt 
+0x7271 031098 disable user 
+:      031099 function_e22_genx_loop:
+0x7272 031100 ifetch 1 ,contr 
+0x7273 031101 istore 1 ,contw 
+0x7274 031102 increase -1 ,regb 
+0x7275 031103 branch function_e22_genx_end ,zero 
+0x7276 031104 loop function_e22_genx_loop 
+0x7277 031105 branch function_e22_genx_pin ,user 
+0x7278 031106 enable user 
+0x7279 031107 force 6 ,loopcnt 
+0x727a 031108 copy rega ,contr 
+0x727b 031109 branch function_e22_genx_loop 
+:      031110 function_e22_genx_end:
+0x727c 031111 arg mem_random_number ,contr 
+0x727d 031112 arg mem_y ,contw 
+0x727e 031113 call memcpy16 
+0x727f 031114 fetch 1 ,mem_y15 
+0x7280 031115 ixor regc ,pdata 
+0x7281 031116 store 1 ,mem_y15 
+0x7282 031117 setarg mem_y 
+0x7283 031118 store 2 ,memp_ar_input 
+0x7284 031119 setarg mem_x 
+0x7285 031120 store 2 ,memp_ar_key 
+0x7286 031121 set1 mark_ar2 ,mark 
+0x7287 031122 branch function_ar 
+:      031127 function_e1:
+0x7288 031128 disable user 
+0x7289 031129 call function_expand 
+0x728a 031130 branch function_hash 
+:      031132 function_e3:
+0x728b 031133 arg mem_aco ,rega 
+0x728c 031134 enable user 
+0x728d 031135 call function_expand 
+0x728e 031136 call function_hash 
+0x728f 031137 arg mem_input_store ,contr 
+0x7290 031138 arg mem_kc ,contw 
+0x7291 031139 branch memcpy16 
+:      031142 function_hash:
+0x7292 031143 setarg mem_random_number 
+0x7293 031144 store 2 ,memp_ar_input 
+0x7294 031145 setarg mem_link_key 
+0x7295 031146 store 2 ,memp_ar_key 
+0x7296 031147 set0 mark_ar2 ,mark 
+0x7297 031148 call function_ar 
+0x7298 031149 arg mem_input_store ,rega 
+0x7299 031150 arg mem_random_number ,regb 
+0x729a 031151 arg mem_x ,contw 
+0x729b 031152 call xor16 
+0x729c 031153 arg mem_x ,rega 
+0x729d 031154 arg mem_y ,regb 
+0x729e 031155 copy regb ,contw 
+0x729f 031156 enable user 
+0x72a0 031157 call add16 
+0x72a1 031158 call key_offset 
+0x72a2 031159 setarg mem_y 
+0x72a3 031160 store 2 ,memp_ar_input 
+0x72a4 031161 setarg mem_x 
+0x72a5 031162 store 2 ,memp_ar_key 
+0x72a6 031163 set1 mark_ar2 ,mark 
+0x72a7 031164 branch function_ar 
+:      031168 function_ar:
+0x72a8 031169 jam 0 ,mem_ar_hround 
+0x72a9 031170 fetch 2 ,memp_ar_key 
+0x72aa 031171 iforce contr 
+0x72ab 031172 arg mem_key_store ,contw 
+0x72ac 031173 call memcpy16 
+0x72ad 031174 fetch 2 ,memp_ar_input 
+0x72ae 031175 iforce contr 
+0x72af 031176 arg mem_input_store ,contw 
+0x72b0 031177 call memcpy16 
+:      031179 function_ar_loop:
+0x72b1 031180 call key_scheduling 
+0x72b2 031181 disable user 
+0x72b3 031182 bmark0 mark_ar2 ,function_ar_original 
+0x72b4 031183 fetch 1 ,mem_ar_hround 
+0x72b5 031184 bne 4 ,function_ar_original 
+0x72b6 031185 fetch 2 ,memp_ar_input 
+0x72b7 031186 iforce regb 
+0x72b8 031187 call xor_mod32_ar2 
+:      031188 function_ar_original:
+0x72b9 031189 call xor_mod32 
+0x72ba 031190 call el_boxes 
+0x72bb 031191 fetch 1 ,mem_ar_hround 
+0x72bc 031192 increase 1 ,pdata 
+0x72bd 031193 store 1 ,mem_ar_hround 
+0x72be 031195 call key_scheduling 
+0x72bf 031196 enable user 
+0x72c0 031197 call xor_mod32 
+0x72c1 031198 call pht 
+0x72c2 031199 call permute 
+0x72c3 031200 call pht 
+0x72c4 031201 call permute 
+0x72c5 031202 call pht 
+0x72c6 031203 call permute 
+0x72c7 031204 call pht 
+0x72c8 031205 fetch 1 ,mem_ar_hround 
+0x72c9 031206 increase 1 ,pdata 
+0x72ca 031207 store 1 ,mem_ar_hround 
+0x72cb 031208 bne 16 ,function_ar_loop 
+0x72cc 031209 call key_scheduling 
+0x72cd 031210 disable user 
+0x72ce 031211 branch xor_mod32 
+:      031215 key_scheduling:
+0x72cf 031216 fetch 1 ,mem_ar_hround 
+0x72d0 031217 arg mem_key_store ,contr 
+0x72d1 031218 branch key_sched_zero ,blank 
+0x72d2 031219 iforce regb 
+0x72d3 031220 force 17 ,loopcnt 
+0x72d4 031221 copy contr ,contw 
+:      031222 key_rotateloop:
+0x72d5 031223 ifetch 1 ,contr 
+0x72d6 031224 lshift3 pdata ,temp 
+0x72d7 031225 rshift2 pdata ,pdata 
+0x72d8 031226 rshift3 pdata ,pdata 
+0x72d9 031227 ior temp ,pdata 
+0x72da 031228 istore 1 ,contw 
+0x72db 031229 loop key_rotateloop 
+0x72dc 031230 setarg mem_key_store 
+0x72dd 031231 iadd regb ,contr 
+0x72de 031232 force 16 ,loopcnt 
+0x72df 031233 arg mem_round_key ,contw 
+:      031234 key_select_octet_loop:
+0x72e0 031235 ifetch 1 ,contr 
+0x72e1 031236 istore 1 ,contw 
+0x72e2 031237 compare mem_key_store_end ,contr ,0xff 
+0x72e3 031238 nbranch key_select_octet_nwrap ,true 
+0x72e4 031239 increase -17 ,contr 
+:      031240 key_select_octet_nwrap:
+0x72e5 031241 loop key_select_octet_loop 
+0x72e6 031242 force 0 ,rega 
+0x72e7 031243 add regb ,-1 ,regc 
+0x72e8 031244 lshift2 regc ,regc 
+0x72e9 031245 lshift2 regc ,regc 
+0x72ea 031246 call enable_authrom 
+0x72eb 031247 setarg mem_b_box 
+0x72ec 031248 iadd regc ,regc 
+0x72ed 031249 arg mem_round_key ,contw 
+0x72ee 031250 force 16 ,loopcnt 
+:      031251 bias_round_key_loop:
+0x72ef 031252 ifetcht 1 ,regc 
+0x72f0 031253 ifetch 1 ,contw 
+0x72f1 031254 iadd temp ,pdata 
+0x72f2 031255 istore 1 ,contw 
+0x72f3 031256 increase 1 ,regc 
+0x72f4 031257 loop bias_round_key_loop 
+0x72f5 031258 branch disable_authrom 
+:      031260 key_sched_zero:
+0x72f6 031261 force 16 ,loopcnt 
+0x72f7 031262 force 0 ,temp 
+:      031263 create_byte_16_loop:
+0x72f8 031264 ifetch 1 ,contr 
+0x72f9 031265 ixor temp ,temp 
+0x72fa 031266 loop create_byte_16_loop 
+0x72fb 031267 deposit temp 
+0x72fc 031268 istore 1 ,contr 
+0x72fd 031269 arg mem_key_store ,contr 
+0x72fe 031270 arg mem_round_key ,contw 
+0x72ff 031271 branch memcpy16 
+:      031273 xor_mod32:
+0x7300 031274 arg mem_round_key ,regb 
+:      031275 xor_mod32_ar2:
+0x7301 031276 force 16 ,loopcnt 
+0x7302 031277 arg mem_input_store ,rega 
+0x7303 031278 copy rega ,contw 
+:      031279 xor_mod32_loop:
+0x7304 031280 ifetcht 1 ,rega 
+0x7305 031281 ifetch 1 ,regb 
+0x7306 031282 ixor temp ,alarm 
+0x7307 031283 and loopcnt ,3 ,regc 
+0x7308 031284 nbranch xor_mod32_invert ,user 
+0x7309 031285 xor_into 3 ,regc 
+:      031286 xor_mod32_invert:
+0x730a 031287 sub regc ,1 ,regc 
+0x730b 031288 branch xor_even ,positive 
+0x730c 031289 iadd temp ,alarm 
+:      031290 xor_even:
+0x730d 031291 deposit alarm 
+0x730e 031292 istore 1 ,contw 
+0x730f 031293 increase 1 ,rega 
+0x7310 031294 increase 1 ,regb 
+0x7311 031295 loop xor_mod32_loop 
+0x7312 031296 rtn 
+:      031298 el_boxes:
+0x7313 031299 call enable_authrom 
+0x7314 031300 force 16 ,loopcnt 
+0x7315 031301 arg mem_input_store ,rega 
+:      031302 el_box_loop:
+0x7316 031303 ifetch 1 ,rega 
+0x7317 031304 arg mem_e_box ,contr 
+0x7318 031305 and loopcnt ,3 ,regc 
+0x7319 031306 sub regc ,1 ,null 
+0x731a 031307 branch e_boxes ,positive 
+0x731b 031308 arg mem_l_box ,contr 
+:      031309 e_boxes:
+0x731c 031310 iadd contr ,contr 
+0x731d 031311 ifetch 1 ,contr 
+0x731e 031312 istore 1 ,rega 
+0x731f 031313 increase 1 ,rega 
+0x7320 031314 loop el_box_loop 
+0x7321 031315 branch disable_authrom 
+:      031317 pht:
+0x7322 031318 force 8 ,loopcnt 
+0x7323 031319 arg mem_input_store ,contr 
+0x7324 031320 copy contr ,contw 
+:      031321 pht_loop:
+0x7325 031322 ifetch 1 ,contr 
+0x7326 031323 iforce rega 
+0x7327 031324 ifetch 1 ,contr 
+0x7328 031325 iforce regb 
+0x7329 031326 lshift rega ,pdata 
+0x732a 031327 iadd regb ,pdata 
+0x732b 031328 istore 1 ,contw 
+0x732c 031329 deposit rega 
+0x732d 031330 iadd regb ,pdata 
+0x732e 031331 istore 1 ,contw 
+0x732f 031332 loop pht_loop 
+0x7330 031333 rtn 
+:      031336 permute:
+0x7331 031337 setarg 0x8ae42c 
+0x7332 031338 iforce temp 
+0x7333 031339 force 7 ,loopcnt 
+0x7334 031340 call permute_exchange 
+0x7335 031341 setarg 0xd751b 
+0x7336 031342 iforce temp 
+0x7337 031343 force 5 ,loopcnt 
+0x7338 031344 call permute_exchange 
+0x7339 031345 fetch 1 ,mem_input_store + 15 
+0x733a 031346 iforce rega 
+0x733b 031347 fetch 1 ,mem_input_store + 3 
+0x733c 031348 store 1 ,mem_input_store + 15 
+0x733d 031349 deposit rega 
+0x733e 031350 store 1 ,mem_input_store + 3 
+0x733f 031351 rtn 
+:      031353 permute_exchange:
+0x7340 031354 and temp ,0xf ,regb 
+:      031355 permute_loop:
+0x7341 031356 and temp ,0xf ,pdata 
+0x7342 031357 arg mem_input_store ,contw 
+0x7343 031358 iadd contw ,contw 
+0x7344 031359 ifetch 1 ,contw 
+0x7345 031360 iforce regc 
+0x7346 031361 deposit rega 
+0x7347 031362 istore 1 ,contw 
+0x7348 031363 copy regc ,rega 
+0x7349 031364 rshift4 temp ,temp 
+0x734a 031365 loop permute_loop 
+0x734b 031366 setarg mem_input_store 
+0x734c 031367 iadd regb ,contw 
+0x734d 031368 deposit rega 
+0x734e 031369 istore 1 ,contw 
+0x734f 031370 rtn 
+:      031372 add16:
+0x7350 031373 enable user 
+0x7351 031374 branch xor_add16 
+:      031376 xor16:
+0x7352 031377 disable user 
+:      031378 xor_add16:
+0x7353 031379 force 16 ,loopcnt 
+:      031380 xoradd_loop:
+0x7354 031381 ifetcht 1 ,rega 
+0x7355 031382 ifetch 1 ,regb 
+0x7356 031383 branch xoradd_add ,user 
+0x7357 031384 ixor temp ,pdata 
+0x7358 031385 branch xoradd_store 
+:      031386 xoradd_add:
+0x7359 031387 iadd temp ,pdata 
+:      031388 xoradd_store:
+0x735a 031389 istore 1 ,contw 
+0x735b 031390 increase 1 ,rega 
+0x735c 031391 increase 1 ,regb 
+0x735d 031392 loop xoradd_loop 
+0x735e 031393 rtn 
+:      031396 function_expand:
+0x735f 031397 arg mem_y ,contw 
+0x7360 031398 ifetch 6 ,rega 
+0x7361 031399 istore 6 ,contw 
+0x7362 031400 branch expand_12 ,user 
+0x7363 031401 ifetch 6 ,rega 
+0x7364 031402 branch expand_cont 
+:      031403 expand_12:
+0x7365 031404 ifetch 6 ,contr 
+:      031405 expand_cont:
+0x7366 031406 istore 6 ,contw 
+0x7367 031407 ifetch 4 ,rega 
+0x7368 031408 istore 4 ,contw 
+0x7369 031409 rtn 
+:      031411 key_offset:
+0x736a 031412 arg mem_link_key ,contr 
+0x736b 031413 arg mem_x ,contw 
+0x736c 031414 arg 0 ,temp 
+0x736d 031415 setarg 0x8395a7 
+0x736e 031416 call concatenate_temp24 
+0x736f 031417 setarg 0xb3c1df 
+0x7370 031418 call concatenate_temp24 
+0x7371 031419 setarg 0xe5e9 
+0x7372 031420 call concatenate_temp16 
+0x7373 031421 copy temp ,regab 
+0x7374 031422 disable user 
+0x7375 031423 call key_addxor 
+0x7376 031424 copy regab ,temp 
+0x7377 031425 enable user 
+0x7378 031426 branch key_addxor 
+:      031428 key_addxor:
+0x7379 031429 force 8 ,loopcnt 
+:      031430 key_addxor_loop:
+0x737a 031431 ifetch 1 ,contr 
+0x737b 031432 compare 1 ,loopcnt ,1 
+0x737c 031433 branch key_high ,user 
+0x737d 031434 branch key_xor ,true 
+:      031435 key_add:
+0x737e 031436 iadd temp ,pdata 
+0x737f 031437 branch key_store 
+:      031438 key_high:
+0x7380 031439 branch key_add ,true 
+:      031440 key_xor:
+0x7381 031441 ixor temp ,pdata 
+:      031442 key_store:
+0x7382 031443 istore 1 ,contw 
+0x7383 031444 rshift8 temp ,temp 
+0x7384 031445 loop key_addxor_loop 
+0x7385 031446 rtn 
+:      031448 copy_aco:
+0x7386 031449 fetch 6 ,mem_input_store + 4 
+0x7387 031450 store 6 ,mem_aco 
+0x7388 031451 ifetch 6 ,contr 
+0x7389 031452 istore 6 ,contw 
+0x738a 031453 rtn 
+:      031455 concatenate_temp24:
+0x738b 031456 lshift8 temp ,temp 
+:      031457 concatenate_temp16:
+0x738c 031458 lshift16 temp ,temp 
+0x738d 031459 ior temp ,temp 
+0x738e 031460 rtn 
+:      031464 loop1:
+0x738f 031465 branch loop1 
+:      031469 generate_stk:
+0x7390 031470 bpatchx patch3c_0 ,mem_patch3c 
+0x7391 031471 call function_s1 
+0x7392 031472 arg mem_le_ltk ,contw 
+0x7393 031473 branch store_aes_result 
+:      031476 authenticate_rconfirm:
+0x7394 031477 arg mem_le_srand ,contw 
+0x7395 031478 branch authenticate_mconfirm ,master 
+0x7396 031479 arg mem_le_mrand ,contw 
+:      031480 authenticate_mconfirm:
+0x7397 031481 copy contr ,rega 
+0x7398 031482 call memcpy16 
+0x7399 031483 call function_c1 
+0x739a 031484 arg mem_le_rconfirm ,contr 
+0x739b 031485 branch compare_res 
+:      031487 generate_confirm:
+0x739c 031488 arg mem_le_mrand ,rega 
+0x739d 031489 branch generate_mrand ,master 
+0x739e 031490 arg mem_le_srand ,rega 
+:      031491 generate_mrand:
+0x739f 031492 copy rega ,contw 
+0x73a0 031493 call generate_random 
+0x73a1 031494 branch function_c1 
+:      031496 generate_sk:
+0x73a2 031497 arg mem_le_skdm ,contr 
+0x73a3 031498 call load_data128 
+0x73a4 031499 arg mem_le_ltk ,contr 
+0x73a5 031500 call load_regext 
+0x73a6 031501 force 0x38 ,aes_ctrl 
+0x73a7 031502 force 0x0 ,aes_ctrl 
+0x73a8 031503 call wait_aes 
+0x73a9 031504 arg mem_le_sk ,contw 
+0x73aa 031505 branch store_aes_result 
+:      031508 first_block_counter:
+0x73ab 031509 force 0x49 ,pdata 
+0x73ac 031510 branch first_block 
+:      031511 first_block_data:
+0x73ad 031512 force 1 ,pdata 
+:      031513 first_block:
+0x73ae 031514 force regidx_data ,regext_index 
+0x73af 031515 lshift8 temp ,regext 
+0x73b0 031516 ior regext ,regext 
+0x73b1 031517 increase 1 ,regext_index 
+0x73b2 031518 rshift8 temp ,regext 
+0x73b3 031519 rshift16 regext ,regext 
+0x73b4 031520 fetch 2 ,mem_le_ivm 
+0x73b5 031521 lshift16 ,pdata ,pdata 
+0x73b6 031522 ior regext ,regext 
+0x73b7 031523 increase 1 ,regext_index 
+0x73b8 031524 ifetch 4 ,contr 
+0x73b9 031525 iforce regext 
+0x73ba 031526 increase 1 ,regext_index 
+0x73bb 031527 ifetch 2 ,contr 
+0x73bc 031528 byteswap rega ,regext 
+0x73bd 031529 lshift16 regext ,regext 
+0x73be 031530 ior regext ,regext 
+0x73bf 031531 increase 1 ,regext_index 
+0x73c0 031532 rtn 
+:      031536 generate_mic:
+0x73c1 031537 add regc ,1 ,contr 
+0x73c2 031538 ifetch 1 ,contr 
+0x73c3 031539 iforce rega 
+0x73c4 031540 call first_block_counter 
+0x73c5 031541 call do_aes_ocb 
+0x73c6 031543 force regidx_data ,regext_index 
+0x73c7 031544 ifetch 1 ,regc 
+0x73c8 031545 and_into 0x3 ,pdata 
+0x73c9 031546 lshift16 pdata ,regext 
+0x73ca 031547 set1 8 ,regext 
+0x73cb 031548 call clear_hidata 
+0x73cc 031549 call do_aes_cbc 
+0x73cd 031551 copy rega ,loopcnt 
+0x73ce 031552 add regc ,2 ,contr 
+0x73cf 031553 call padding_data 
+:      031554 generate_mic_loop:
+0x73d0 031555 call aes_load_data 
+0x73d1 031556 call do_aes_cbc 
+0x73d2 031557 deposit loopcnt 
+0x73d3 031558 branch generate_mic_end ,blank 
+0x73d4 031559 branch generate_mic_loop 
+:      031560 generate_mic_end:
+0x73d5 031561 force regidx_result ,regext_index 
+0x73d6 031562 deposit regext 
+0x73d7 031563 store 4 ,mem_le_mic 
+0x73d8 031564 rtn 
+:      031566 aes_crypt_data:
+0x73d9 031567 increase 1 ,rega 
+0x73da 031568 call first_block_data 
+0x73db 031569 copy regc ,contr 
+0x73dc 031570 call aes_load_xor 
+0x73dd 031571 call do_aes_ctr 
+0x73de 031572 call store_enc_data 
+0x73df 031573 increase 16 ,regc 
+0x73e0 031574 increase -16 ,regb 
+0x73e1 031575 branch aes_crypt_data ,positive 
+0x73e2 031576 rtn 
+:      031578 le_encrypt:
+0x73e3 031579 bpatchx patch3c_1 ,mem_patch3c 
+0x73e4 031580 arg mem_le_txheader ,regc 
+0x73e5 031581 fetcht 5 ,mem_le_pcnt_tx 
+0x73e6 031582 call generate_mic 
+0x73e7 031583 force regidx_xor ,regext_index 
+0x73e8 031584 iforce regext 
+0x73e9 031585 force 0 ,rega 
+0x73ea 031586 call first_block_data 
+0x73eb 031587 call do_aes_ctr 
+0x73ec 031588 arg mem_le_txpayload ,regc 
+0x73ed 031589 fetch 1 ,mem_le_txlen 
+0x73ee 031590 add pdata ,-1 ,regb 
+0x73ef 031591 iadd regc ,contw 
+0x73f0 031592 force regidx_result ,regext_index 
+0x73f1 031593 deposit regext 
+0x73f2 031594 istore 4 ,contw 
+0x73f3 031595 call aes_crypt_data 
+0x73f4 031596 fetch 1 ,mem_le_txlen 
+0x73f5 031597 increase 4 ,pdata 
+0x73f6 031598 store 1 ,mem_le_txlen 
+0x73f7 031599 fetcht 5 ,mem_le_pcnt_tx 
+0x73f8 031600 increase 1 ,temp 
+0x73f9 031601 storet 5 ,mem_le_pcnt_tx 
+0x73fa 031602 rtn 
+:      031604 le_decrypt:
+0x73fb 031605 bpatchx patch3c_2 ,mem_patch3c 
+0x73fc 031606 fetch 1 ,mem_le_rxbuf + 1 
+0x73fd 031607 sub pdata ,20 ,null 
+0x73fe 031608 branch le_dec_cont ,positive 
+:      031609 le_dec_cont:
+0x73ff 031610 arg mem_le_rxbuf + 2 ,regc 
+0x7400 031611 add pdata ,-1 ,regb 
+0x7401 031612 increase -4 ,pdata 
+0x7402 031613 store 1 ,mem_le_rxbuf + 1 
+0x7403 031614 iadd regc ,contr 
+0x7404 031615 ifetch 4 ,contr 
+0x7405 031616 force regidx_xor ,regext_index 
+0x7406 031617 iforce regext 
+0x7407 031618 force 0 ,rega 
+0x7408 031619 fetcht 5 ,mem_le_pcnt_rx 
+0x7409 031620 call first_block_data 
+0x740a 031621 call do_aes_ctr 
+0x740b 031622 force regidx_result ,regext_index 
+0x740c 031623 deposit regext 
+0x740d 031624 store 4 ,mem_le_peer_mic 
+0x740e 031625 call aes_crypt_data 
+0x740f 031626 arg mem_le_rxbuf ,regc 
+0x7410 031627 call generate_mic 
+0x7411 031628 fetcht 4 ,mem_le_peer_mic 
+0x7412 031629 isub temp ,pdata 
+0x7413 031630 nrtn blank 
+0x7414 031631 fetch 4 ,mem_le_last_mic 
+0x7415 031632 isub temp ,pdata 
+0x7416 031633 rtn blank 
+0x7417 031634 storet 4 ,mem_le_last_mic 
+0x7418 031635 fetch 5 ,mem_le_pcnt_rx 
+0x7419 031636 increase 1 ,pdata 
+0x741a 031637 store 5 ,mem_le_pcnt_rx 
+0x741b 031638 force 0 ,pdata 
+0x741c 031639 rtn 
+:      031641 wait_aes:
+0x741d 031642 nbranch wait_aes ,aes_ready 
+0x741e 031643 rtn 
+:      031645 do_aes_ocb:
+0x741f 031646 force 0x30 ,aes_ctrl 
+0x7420 031647 force 0x0 ,aes_ctrl 
+0x7421 031648 branch wait_aes 
+:      031650 do_aes_cbc:
+0x7422 031651 force 0x32 ,aes_ctrl 
+0x7423 031652 force 0x2 ,aes_ctrl 
+0x7424 031653 branch wait_aes 
+:      031655 do_aes_ctr:
+0x7425 031656 force 0x34 ,aes_ctrl 
+0x7426 031657 force 0x4 ,aes_ctrl 
+0x7427 031658 branch wait_aes 
+:      031661 aes_init:
+0x7428 031662 force 1 ,aes_ctrl 
+0x7429 031663 force 0 ,aes_ctrl 
+0x742a 031664 rtn 
+:      031665 function_s1:
+0x742b 031666 force regidx_data ,regext_index 
+0x742c 031667 fetch 4 ,mem_le_mrand 
+0x742d 031668 iforce regext 
+0x742e 031669 increase 1 ,regext_index 
+0x742f 031670 ifetch 4 ,contr 
+0x7430 031671 iforce regext 
+0x7431 031672 increase 1 ,regext_index 
+0x7432 031673 fetch 4 ,mem_le_srand 
+0x7433 031674 iforce regext 
+0x7434 031675 increase 1 ,regext_index 
+0x7435 031676 ifetch 4 ,contr 
+0x7436 031677 iforce regext 
+0x7437 031678 increase 1 ,regext_index 
+0x7438 031679 call aes_clear 
+0x7439 031680 increase -4 ,regext_index 
+0x743a 031681 fetch 4 ,mem_le_tk 
+0x743b 031682 copy pdata ,regext 
+0x743c 031683 increase 4 ,regext_index 
+0x743d 031684 force 0x38 ,aes_ctrl 
+0x743e 031685 force 0x8 ,aes_ctrl 
+0x743f 031686 branch wait_aes 
+:      031689 function_c1:
+0x7440 031690 bpatchx patch3c_3 ,mem_patch3c 
+0x7441 031691 fetch 6 ,mem_le_lap 
+0x7442 031692 fetcht 6 ,mem_le_plap 
+0x7443 031693 branch function_c1_master ,master 
+0x7444 031694 fetch 6 ,mem_le_plap 
+0x7445 031695 fetcht 6 ,mem_le_lap 
+:      031696 function_c1_master:
+0x7446 031697 force regidx_xor ,regext_index 
+0x7447 031698 copy temp ,regext 
+0x7448 031699 increase 1 ,regext_index 
+0x7449 031700 rshift32 temp ,regext 
+0x744a 031701 lshift16 pdata ,pdata 
+0x744b 031702 ior regext ,regext 
+0x744c 031703 increase 1 ,regext_index 
+0x744d 031704 rshift32 pdata ,regext 
+0x744e 031705 increase 1 ,regext_index 
+0x744f 031706 force 0 ,regext 
+0x7450 031707 force 0 ,pdata 
+0x7451 031708 fetch 1 ,mem_le_conn_peer_addr_type 
+0x7452 031709 fetcht 1 ,mem_le_adv_own_addr_type 
+0x7453 031710 nbranch function_c1_irat ,master 
+0x7454 031712 fetch 1 ,mem_le_conn_own_addr_type 
+0x7455 031713 fetcht 1 ,mem_le_conn_peer_addr_type 
+:      031714 function_c1_irat:
+0x7456 031715 store 1 ,mem_le_iat 
+0x7457 031716 storet 1 ,mem_le_rat 
+0x7458 031717 force regidx_data ,regext_index 
+0x7459 031718 arg mem_le_iat ,regb 
+0x745a 031719 force 4 ,loopcnt 
+:      031720 function_c1_loop1:
+0x745b 031721 ifetch 4 ,rega 
+0x745c 031722 ifetcht 4 ,regb 
+0x745d 031723 ixor temp ,regext 
+0x745e 031724 increase 1 ,regext_index 
+0x745f 031725 increase 4 ,rega 
+0x7460 031726 increase 4 ,regb 
+0x7461 031727 loop function_c1_loop1 
+0x7462 031728 call aes_clear 
+0x7463 031729 increase -4 ,regext_index 
+0x7464 031730 fetch 4 ,mem_le_tk 
+0x7465 031731 copy pdata ,regext 
+0x7466 031732 increase 4 ,regext_index 
+0x7467 031733 force 0x38 ,aes_ctrl 
+0x7468 031734 force 0xc ,aes_ctrl 
+0x7469 031735 call wait_aes 
+0x746a 031737 call aes_clear_data 
+0x746b 031738 force 0x3a ,aes_ctrl 
+0x746c 031739 force 0x8 ,aes_ctrl 
+0x746d 031740 branch wait_aes 
+:      031742 padding_data:
+0x746e 031743 compare 0 ,loopcnt ,3 
+0x746f 031744 rtn true 
+0x7470 031745 deposit contr 
+0x7471 031746 iadd loopcnt ,contw 
+0x7472 031747 force 0 ,pdata 
+:      031748 padding_loop:
+0x7473 031749 istore 1 ,contw 
+0x7474 031750 increase 1 ,loopcnt 
+0x7475 031751 compare 0 ,loopcnt ,3 
+0x7476 031752 rtn true 
+0x7477 031753 branch padding_loop 
+:      031755 aes_load_data:
+0x7478 031756 force regidx_data ,regext_index 
+:      031757 load_data_loop:
+0x7479 031758 deposit loopcnt 
+0x747a 031759 branch load_data_padding ,blank 
+0x747b 031760 ifetch 4 ,contr 
+0x747c 031761 increase -4 ,loopcnt 
+:      031762 load_data_padding:
+0x747d 031763 iforce regext 
+0x747e 031764 increase 1 ,regext_index 
+0x747f 031765 compare regidx_key ,regext_index ,0xf 
+0x7480 031766 rtn true 
+0x7481 031767 branch load_data_loop 
+:      031769 aes_load_xor:
+0x7482 031770 force regidx_xor ,regext_index 
+0x7483 031771 branch load_regext 
+:      031772 load_key:
+0x7484 031773 force regidx_key ,regext_index 
+0x7485 031774 branch load_regext 
+:      031775 load_data128:
+0x7486 031776 force regidx_data ,regext_index 
+:      031777 load_regext:
+0x7487 031778 force 4 ,loopcnt 
+:      031779 load_regext_loop:
+0x7488 031780 ifetch 4 ,contr 
+0x7489 031781 iforce regext 
+0x748a 031782 increase 1 ,regext_index 
+0x748b 031783 loop load_regext_loop 
+0x748c 031784 rtn 
+:      031786 load_sk:
+0x748d 031787 arg mem_le_sk ,contr 
+0x748e 031788 branch load_key 
+:      031790 clear_hidata:
+0x748f 031791 force 4 ,loopcnt 
+0x7490 031792 branch clear_data_rest 
+:      031794 aes_clear_data:
+0x7491 031795 force regidx_data ,regext_index 
+:      031796 aes_clear:
+0x7492 031797 force 4 ,loopcnt 
+:      031798 clear_loop:
+0x7493 031799 force 0 ,regext 
+:      031800 clear_data_rest:
+0x7494 031801 increase 1 ,regext_index 
+0x7495 031802 loop clear_loop 
+0x7496 031803 rtn 
+:      031805 store_aes_result:
+0x7497 031806 force regidx_result ,regext_index 
+0x7498 031807 force 4 ,loopcnt 
+:      031808 send_aes_result_loop:
+0x7499 031809 deposit regext 
+0x749a 031810 istore 4 ,contw 
+0x749b 031811 increase 1 ,regext_index 
+0x749c 031812 loop send_aes_result_loop 
+0x749d 031813 rtn 
+:      031815 store_enc_data:
+0x749e 031816 force regidx_result ,regext_index 
+0x749f 031817 copy regc ,contw 
+0x74a0 031818 add regb ,1 ,loopcnt 
+0x74a1 031819 sub loopcnt ,15 ,null 
+0x74a2 031820 branch store_enc_loop ,positive 
+0x74a3 031821 force 16 ,loopcnt 
+:      031822 store_enc_loop:
+0x74a4 031823 deposit regext 
+0x74a5 031824 sub loopcnt ,3 ,null 
+0x74a6 031825 branch store_enc_byte ,positive 
+0x74a7 031826 istore 4 ,contw 
+0x74a8 031827 increase -4 ,loopcnt 
+0x74a9 031828 rtn zero 
+0x74aa 031829 increase 1 ,regext_index 
+0x74ab 031830 branch store_enc_loop 
+:      031831 store_enc_byte:
+0x74ac 031832 istore 1 ,contw 
+0x74ad 031833 rshift8 pdata ,pdata 
+0x74ae 031834 loop store_enc_byte 
+0x74af 031835 rtn 
+:      031838 compare_res:
+0x74b0 031839 force regidx_result ,regext_index 
+0x74b1 031840 force 4 ,loopcnt 
+:      031841 compare_res_loop:
+0x74b2 031842 ifetch 4 ,contr 
+0x74b3 031843 isub regext ,null 
+0x74b4 031844 nrtn zero 
+0x74b5 031845 increase 1 ,regext_index 
+0x74b6 031846 loop compare_res_loop 
+0x74b7 031847 force 0 ,null 
+0x74b8 031848 rtn 
+:      031850 enable_authrom:
+0x74b9 031851 hfetch 1 ,core_clkoff 
+0x74ba 031852 set0 clock_off_auth_rom ,pdata 
+0x74bb 031853 hstore 1 ,core_clkoff 
+0x74bc 031854 rtn 
+:      031856 disable_authrom:
+0x74bd 031857 hfetch 1 ,core_clkoff 
+0x74be 031858 set1 clock_off_auth_rom ,pdata 
+0x74bf 031859 hstore 1 ,core_clkoff 
+0x74c0 031860 rtn 
+:      031862 init_memp:
+0x74c1 031863 arg mem_p ,contw 
+0x74c2 031864 setsect 0 ,0x3ffff 
+0x74c3 031865 setsect 1 ,0x3ffff 
+0x74c4 031866 setsect 2 ,0x3ffff 
+0x74c5 031867 setsect 3 ,0x3fbff 
+0x74c6 031868 istore 9 ,contw 
+0x74c7 031869 setsect 0 ,0x3ffff 
+0x74c8 031870 setsect 1 ,0x3ffff 
+0x74c9 031871 setsect 2 ,0x3ffff 
+0x74ca 031872 setsect 3 ,0x3ffff 
+0x74cb 031873 istore 9 ,contw 
+0x74cc 031874 setsect 0 ,0x3ffff 
+0x74cd 031875 setsect 1 ,0x3ffff 
+0x74ce 031876 setsect 2 ,0x3cfff 
+0x74cf 031877 setsect 3 ,0x3ffff 
+0x74d0 031878 istore 9 ,contw 
+0x74d1 031879 setsect 0 ,0x3ffff 
+0x74d2 031880 setsect 1 ,0x3ffff 
+0x74d3 031881 setsect 2 ,0x3ffef 
+0x74d4 031882 setsect 3 ,0x3ffff 
+0x74d5 031883 istore 9 ,contw 
+0x74d6 031884 setsect 0 ,0x3ffff 
+0x74d7 031885 setsect 1 ,0x3ffff 
+0x74d8 031886 setsect 2 ,0x3ffff 
+0x74d9 031887 setsect 3 ,0x3ffff 
+0x74da 031888 istore 9 ,contw 
+0x74db 031889 setsect 0 ,0x3ffff 
+0x74dc 031890 setsect 1 ,0x26c7f 
+0x74dd 031891 setsect 2 ,0x146b 
+0x74de 031892 setsect 3 ,0x37bb3 
+0x74df 031893 istore 9 ,contw 
+0x74e0 031894 setsect 0 ,0x1feb8 
+0x74e1 031895 setsect 1 ,0x10c12 
+0x74e2 031896 setsect 2 ,0x2b722 
+0x74e3 031897 setsect 3 ,0x29fa6 
+0x74e4 031898 istore 9 ,contw 
+0x74e5 031899 setsect 0 ,0xe70f 
+0x74e6 031900 setsect 1 ,0x16720 
+0x74e7 031901 setsect 2 ,0x519e 
+0x74e8 031902 setsect 3 ,0x19084 
+0x74e9 031903 istore 9 ,contw 
+0x74ea 031904 setsect 0 ,0x31012 
+0x74eb 031905 setsect 1 ,0x360bf 
+0x74ec 031906 setsect 2 ,0x3f0af 
+0x74ed 031907 setsect 3 ,0x3d3 
+0x74ee 031908 istore 9 ,contw 
+0x74ef 031909 setsect 0 ,0x3a188 
+0x74f0 031910 setsect 1 ,0x3ad0 
+0x74f1 031911 setsect 2 ,0x3cbf2 
+0x74f2 031912 setsect 3 ,0x243d9 
+0x74f3 031913 istore 9 ,contw 
+0x74f4 031914 setsect 0 ,0x2b030 
+0x74f5 031915 setsect 1 ,0x36a03 
+0x74f6 031916 setsect 2 ,0x11188 
+0x74f7 031917 setsect 3 ,0x1e520 
+0x74f8 031918 istore 9 ,contw 
+0x74f9 031919 setsect 0 ,0x3a11e 
+0x74fa 031920 setsect 1 ,0xfe5d 
+0x74fb 031921 setsect 2 ,0xdd57 
+0x74fc 031922 setsect 3 ,0x1ac93 
+0x74fd 031923 istore 9 ,contw 
+0x74fe 031924 setsect 0 ,0x11ed 
+0x74ff 031925 setsect 1 ,0x218c4 
+0x7500 031926 setsect 2 ,0x8da7 
+0x7501 031927 setsect 3 ,0x257ff 
+0x7502 031928 istore 9 ,contw 
+0x7503 031929 setsect 0 ,0x3192b 
+0x7504 031930 setsect 1 ,0x34641 
+0x7505 031931 setsect 2 ,0x1be0c 
+0x7506 031932 setsect 3 ,0x366ad 
+0x7507 031933 istore 9 ,contw 
+0x7508 031934 setsect 0 ,0x1f83 
+0x7509 031935 setsect 1 ,0x15a23 
+0x750a 031936 setsect 2 ,0x3f9b0 
+0x750b 031937 setsect 3 ,0x3949 
+0x750c 031938 istore 9 ,contw 
+0x750d 031939 setsect 0 ,0x13a51 
+0x750e 031940 setsect 1 ,0x153fd 
+0x750f 031941 setsect 2 ,0x3372a 
+0x7510 031942 setsect 3 ,0xf1bb 
+0x7511 031943 istore 9 ,contw 
+0x7512 031944 setsect 0 ,0x3ae85 
+0x7513 031945 setsect 1 ,0x1eed9 
+0x7514 031946 setsect 2 ,0x9e66 
+0x7515 031947 setsect 3 ,0x1a8 
+0x7516 031948 istore 8 ,contw 
+0x7517 031949 rtn 
+:      031953 init_memp_256:
+0x7518 031954 arg mem_p_256 ,contw 
+0x7519 031955 setsect 0 ,0x3ffff 
+0x751a 031956 setsect 1 ,0x3ffff 
+0x751b 031957 setsect 2 ,0x3ffff 
+0x751c 031958 setsect 3 ,0x3ffff 
+0x751d 031959 istore 9 ,contw 
+0x751e 031960 setsect 0 ,0x3ffff 
+0x751f 031961 setsect 1 ,0x3f 
+0x7520 031962 setsect 2 ,0x0 
+0x7521 031963 setsect 3 ,0x0 
+0x7522 031964 istore 9 ,contw 
+0x7523 031965 setsect 0 ,0x0 
+0x7524 031966 setsect 1 ,0x0 
+0x7525 031967 setsect 2 ,0x1000 
+0x7526 031968 setsect 3 ,0x0 
+0x7527 031969 istore 9 ,contw 
+0x7528 031970 setsect 0 ,0x3ff00 
+0x7529 031971 setsect 1 ,0x3ffff 
+0x752a 031972 setsect 2 ,0x3ffcf 
+0x752b 031973 setsect 3 ,0x3ffff 
+0x752c 031974 istore 9 ,contw 
+0x752d 031975 setsect 0 ,0x3ffff 
+0x752e 031976 setsect 1 ,0x3ffff 
+0x752f 031977 setsect 2 ,0x3ffff 
+0x7530 031978 setsect 3 ,0x3ff 
+0x7531 031979 istore 9 ,contw 
+0x7532 031980 setsect 0 ,0x0 
+0x7533 031981 setsect 1 ,0x0 
+0x7534 031982 setsect 2 ,0x0 
+0x7535 031983 setsect 3 ,0x0 
+0x7536 031984 istore 9 ,contw 
+0x7537 031985 setsect 0 ,0x10000 
+0x7538 031986 setsect 1 ,0x0 
+0x7539 031987 setsect 2 ,0x3f000 
+0x753a 031988 setsect 3 ,0x3ffff 
+0x753b 031989 istore 9 ,contw 
+0x753c 031990 setsect 0 ,0x296ff 
+0x753d 031991 setsect 1 ,0x22630 
+0x753e 031992 setsect 2 ,0x3945d 
+0x753f 031993 setsect 3 ,0x3d284 
+0x7540 031994 istore 9 ,contw 
+0x7541 031995 setsect 0 ,0x333a0 
+0x7542 031996 setsect 1 ,0x4b7a 
+0x7543 031997 setsect 2 ,0x37d8 
+0x7544 031998 setsect 3 ,0x3c9dc 
+0x7545 031999 istore 9 ,contw 
+0x7546 032000 setsect 0 ,0x3a440 
+0x7547 032001 setsect 1 ,0x1b958 
+0x7548 032002 setsect 2 ,0x38bce 
+0x7549 032003 setsect 3 ,0x1091f 
+0x754a 032004 istore 9 ,contw 
+0x754b 032005 setsect 0 ,0x2e12c 
+0x754c 032006 setsect 1 ,0x1f47c 
+0x754d 032007 setsect 2 ,0x356b1 
+0x754e 032008 setsect 3 ,0x2fd47 
+0x754f 032009 istore 9 ,contw 
+0x7550 032010 setsect 0 ,0x6837 
+0x7551 032011 setsect 1 ,0x2ed90 
+0x7552 032012 setsect 2 ,0x1ecec 
+0x7553 032013 setsect 3 ,0x1acc5 
+0x7554 032014 istore 9 ,contw 
+0x7555 032015 setsect 0 ,0x23357 
+0x7556 032016 setsect 1 ,0x18af3 
+0x7557 032017 setsect 2 ,0xf9e1 
+0x7558 032018 setsect 3 ,0x129f0 
+0x7559 032019 istore 9 ,contw 
+0x755a 032020 setsect 0 ,0x2e7eb 
+0x755b 032021 setsect 1 ,0x3e6e3 
+0x755c 032022 setsect 2 ,0x3e1a7 
+0x755d 032023 setsect 3 ,0x10b8b 
+0x755e 032024 istore 9 ,contw 
+0x755f 032025 setsect 0 ,0x24fe3 
+0x7560 032026 setsect 1 ,0x20ef 
+0x7561 032027 setsect 2 ,0x1b5a6 
+0x7562 032028 setsect 3 ,0xdc2f 
+0x7563 032029 istore 9 ,contw 
+0x7564 032030 setsect 0 ,0x13860 
+0x7565 032031 setsect 1 ,0x2bd69 
+0x7566 032032 setsect 2 ,0x391a 
+0x7567 032033 setsect 3 ,0x1b222 
+0x7568 032034 istore 9 ,contw 
+0x7569 032035 rtn 
+:      032038 publickey_init:
+0x756a 032039 fetch 1 ,mem_ssp_enable 
+0x756b 032040 nbranch sp_initialize ,blank 
+0x756c 032041 branch sp_initialize_256 
+:      032043 sp_calc_sequence_256_check:
+0x756d 032044 bpatchx patch3c_4 ,mem_patch3c 
+0x756e 032045 fetch 1 ,mem_ssp_enable 
+0x756f 032046 rtn blank 
+0x7570 032047 fetch 1 ,mem_sp_local_key_invalid 
+0x7571 032048 rtnne sp_key_valid 
+0x7572 032049 fetch 1 ,mem_le_secure_connect_enable 
+0x7573 032050 rtn blank 
+0x7574 032051 fetch 1 ,mem_le_sc_local_key_invalid 
+0x7575 032052 rtneq sp_key_valid_256 
+0x7576 032053 fetch 2 ,mem_ui_state_map 
+0x7577 032054 bbit1 ui_state_bt_connected ,stop_publickey_calc_256 
+0x7578 032055 fetch 1 ,mem_le_sc_calc 
+0x7579 032056 beq sp_calc_standby ,sp_initialize_256 
+0x757a 032057 rtn 
+:      032058 stop_publickey_calc_256:
+0x757b 032059 jam sp_calc_standby ,mem_le_sc_calc 
+0x757c 032060 rtn 
+:      032063 sp_initialize:
+0x757d 032064 bpatchx patch3c_5 ,mem_patch3c 
+0x757e 032065 fetch 1 ,mem_ssp_enable 
+0x757f 032066 branch ssp_disable ,blank 
+0x7580 032067 call ssp_enable 
+0x7581 032068 call sp_clear_flags 
+0x7582 032069 branch sp_pubkey_calc 
+:      032071 sp_clear_flags:
+0x7583 032072 setarg 0 
+0x7584 032073 store 8 ,mem_sp_state_start 
+0x7585 032074 store 4 ,mem_sp_flag_start 
+0x7586 032075 store 7 ,mem_sp_iocap_remote 
+0x7587 032076 rtn 
+:      032078 sp_generate_local_key:
+0x7588 032079 jam sp_flag_commit ,mem_sp_flag 
+0x7589 032080 branch sp_generate_local_key0 
+:      032081 sp_master_generate_local_key:
+0x758a 032082 fetch 1 ,mem_sp_local_key_invalid 
+0x758b 032083 beq sp_key_valid ,sp_dhkey_calc 
+0x758c 032084 branch assert 
+:      032085 sp_generate_local_key0:
+0x758d 032086 fetch 1 ,mem_sp_local_key_invalid 
+0x758e 032087 beq sp_key_valid ,sp_start_send_pubkey 
+0x758f 032088 branch sp_pubkey_calc 
+:      032090 sp_start_send_pubkey:
+0x7590 032091 call sp_dhkey_calc 
+0x7591 032092 fetch 1 ,mem_master_sp_state 
+0x7592 032093 nrtn blank 
+0x7593 032094 jam sp_stat_key_send ,mem_sp_state 
+0x7594 032095 rtn 
+:      032098 sp_calc_check_publickey_256:
+0x7595 032099 call sp_calc_b256 
+0x7596 032100 arg mem_le_pubkey_remote_y_256 ,rega 
+0x7597 032101 arg mem_t7_256 ,contw 
+0x7598 032102 call bn_sqrmod_256 
+0x7599 032103 arg mem_le_pubkey_remote_x_256 ,rega 
+0x759a 032104 arg mem_t2_256 ,contw 
+0x759b 032105 call bn_sqrmod_256 
+0x759c 032106 arg mem_t2_256 ,rega 
+0x759d 032107 arg mem_le_pubkey_remote_x_256 ,regb 
+0x759e 032108 arg mem_t2_256 ,contw 
+0x759f 032109 call bn_mulmod_256 
+0x75a0 032110 arg mem_a_256 ,rega 
+0x75a1 032111 arg mem_le_pubkey_remote_x_256 ,regb 
+0x75a2 032112 arg mem_t3_256 ,contw 
+0x75a3 032113 call bn_mulmod_256 
+0x75a4 032114 arg mem_t3_256 ,rega 
+0x75a5 032115 arg mem_t2_256 ,regb 
+0x75a6 032116 arg mem_t2_256 ,contw 
+0x75a7 032117 call bn_addmod_256 
+0x75a8 032118 arg mem_t0_256 ,rega 
+0x75a9 032119 arg mem_t2_256 ,regb 
+0x75aa 032120 arg mem_t0_256 ,contw 
+0x75ab 032121 call bn_addmod_256 
+0x75ac 032122 arg 32 ,loopcnt 
+0x75ad 032123 arg mem_t7_256 ,rega 
+0x75ae 032124 arg mem_t0_256 ,regb 
+0x75af 032125 branch string_compare 
+:      032127 sp_calc_b256:
+0x75b0 032128 arg mem_gy_256 ,rega 
+0x75b1 032129 arg mem_t0_256 ,contw 
+0x75b2 032130 call bn_sqrmod_256 
+0x75b3 032131 arg mem_gx_256 ,rega 
+0x75b4 032132 arg mem_t2_256 ,contw 
+0x75b5 032133 call bn_sqrmod_256 
+0x75b6 032134 arg mem_t2_256 ,rega 
+0x75b7 032135 arg mem_gx_256 ,regb 
+0x75b8 032136 arg mem_t2_256 ,contw 
+0x75b9 032137 call bn_mulmod_256 
+0x75ba 032138 arg mem_a_256 ,rega 
+0x75bb 032139 arg mem_gx_256 ,regb 
+0x75bc 032140 arg mem_t3_256 ,contw 
+0x75bd 032141 call bn_mulmod_256 
+0x75be 032142 arg mem_t3_256 ,rega 
+0x75bf 032143 arg mem_t2_256 ,regb 
+0x75c0 032144 arg mem_t2_256 ,contw 
+0x75c1 032145 call bn_addmod_256 
+0x75c2 032146 arg mem_t0_256 ,rega 
+0x75c3 032147 arg mem_t2_256 ,regb 
+0x75c4 032148 arg mem_t0_256 ,contw 
+0x75c5 032149 branch bn_submod_256 
+:      032151 sp_calc_check_publickey:
+0x75c6 032152 call sp_calc_b 
+0x75c7 032153 arg mem_sp_pubkey_remote_y ,rega 
+0x75c8 032154 arg mem_t7_256 ,contw 
+0x75c9 032155 call bn_sqrmod 
+0x75ca 032156 arg mem_sp_pubkey_remote_x ,rega 
+0x75cb 032157 arg mem_t2_256 ,contw 
+0x75cc 032158 call bn_sqrmod 
+0x75cd 032159 arg mem_t2_256 ,rega 
+0x75ce 032160 arg mem_sp_pubkey_remote_x ,regb 
+0x75cf 032161 arg mem_t2_256 ,contw 
+0x75d0 032162 call bn_mulmod 
+0x75d1 032163 arg mem_a ,rega 
+0x75d2 032164 arg mem_sp_pubkey_remote_x ,regb 
+0x75d3 032165 arg mem_t3_256 ,contw 
+0x75d4 032166 call bn_mulmod 
+0x75d5 032167 arg mem_t3_256 ,rega 
+0x75d6 032168 arg mem_t2_256 ,regb 
+0x75d7 032169 arg mem_t2_256 ,contw 
+0x75d8 032170 call bn_addmod 
+0x75d9 032171 arg mem_t0_256 ,rega 
+0x75da 032172 arg mem_t2_256 ,regb 
+0x75db 032173 arg mem_t0_256 ,contw 
+0x75dc 032174 call bn_addmod 
+0x75dd 032175 arg 24 ,loopcnt 
+0x75de 032176 arg mem_t7_256 ,rega 
+0x75df 032177 arg mem_t0_256 ,regb 
+0x75e0 032178 branch string_compare 
+:      032180 sp_calc_b:
+0x75e1 032181 arg mem_gy ,rega 
+0x75e2 032182 arg mem_t0_256 ,contw 
+0x75e3 032183 call bn_sqrmod 
+0x75e4 032184 arg mem_gx ,rega 
+0x75e5 032185 arg mem_t2_256 ,contw 
+0x75e6 032186 call bn_sqrmod 
+0x75e7 032187 arg mem_t2_256 ,rega 
+0x75e8 032188 arg mem_gx ,regb 
+0x75e9 032189 arg mem_t2_256 ,contw 
+0x75ea 032190 call bn_mulmod 
+0x75eb 032191 arg mem_a ,rega 
+0x75ec 032192 arg mem_gx ,regb 
+0x75ed 032193 arg mem_t3_256 ,contw 
+0x75ee 032194 call bn_mulmod 
+0x75ef 032195 arg mem_t3_256 ,rega 
+0x75f0 032196 arg mem_t2_256 ,regb 
+0x75f1 032197 arg mem_t2_256 ,contw 
+0x75f2 032198 call bn_addmod 
+0x75f3 032199 arg mem_t0_256 ,rega 
+0x75f4 032200 arg mem_t2_256 ,regb 
+0x75f5 032201 arg mem_t0_256 ,contw 
+0x75f6 032202 branch bn_submod 
+:      032205 sp_calculate_commitment:
+0x75f7 032206 fetch 1 ,mem_sp_calc 
+0x75f8 032207 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc 
+0x75f9 032208 call sp_local_random_key_generator 
+0x75fa 032209 arg mem_sp_prarm_stack ,contw 
+0x75fb 032210 setarg mem_sp_random_local_end 
+0x75fc 032211 istore 2 ,contw 
+0x75fd 032212 setarg mem_sp_pubkey_local_x_end 
+0x75fe 032213 istore 2 ,contw 
+0x75ff 032214 setarg mem_sp_pubkey_remote_x_end 
+0x7600 032215 istore 2 ,contw 
+0x7601 032216 branch sp_calculate_commitment0 
+:      032217 master_sp_calculate_commitment:
+0x7602 032218 arg mem_sp_prarm_stack ,contw 
+0x7603 032219 setarg mem_sp_random_remote_end 
+0x7604 032220 istore 2 ,contw 
+0x7605 032221 setarg mem_sp_pubkey_remote_x_end 
+0x7606 032222 istore 2 ,contw 
+0x7607 032223 setarg mem_sp_pubkey_local_x_end 
+0x7608 032224 istore 2 ,contw 
+:      032225 sp_calculate_commitment0:
+0x7609 032226 call function_f1 
+0x760a 032227 fetch 1 ,mem_master_sp_state 
+0x760b 032228 beq sp_stat_commit_calc ,master_sp_calculate_commitment0 
+0x760c 032229 jam sp_flag_commit ,mem_sp_flag 
+0x760d 032230 jam sp_stat_commit_send ,mem_sp_state 
+0x760e 032231 rtn 
+:      032232 master_sp_calculate_commitment0:
+0x760f 032233 jam sp_stat_commitment_compare ,mem_master_sp_state 
+0x7610 032234 call sp_master_generate_local_key 
+0x7611 032235 branch master_set_mem_master_sp_flag 
+:      032237 sp_local_random_key_generator:
+0x7612 032238 arg mem_sp_random_local ,contw 
+0x7613 032239 force 8 ,queue 
+0x7614 032240 branch random_generator 
+:      032242 sp_calculate_commitment_wait_dhkey_calc:
+0x7615 032243 jam sp_flag_commit ,mem_sp_flag 
+0x7616 032244 rtn 
+:      032246 sp_confirm_check:
+0x7617 032248 bpatchx patch3c_6 ,mem_patch3c 
+0x7618 032249 arg mem_addr_value ,contw 
+0x7619 032250 fetch 6 ,mem_lap 
+0x761a 032251 istore 6 ,contw 
+0x761b 032252 fetch 6 ,mem_plap 
+0x761c 032253 istore 6 ,contw 
+0x761d 032254 fetch 3 ,mem_sp_iocap_remote 
+0x761e 032255 istore 3 ,contw 
+0x761f 032257 call function_f3a 
+0x7620 032259 arg mem_sp_calc_result_high ,rega 
+0x7621 032260 arg mem_sp_check_result ,regb 
+0x7622 032261 force 4 ,queue 
+0x7623 032262 call compare4 
+0x7624 032263 nbranch sp_confirm_check_failed ,true 
+0x7625 032265 call sp_confirm_check_success 
+0x7626 032266 jam lmp_dhkey_check ,mem_lmi_opcode2 
+0x7627 032267 branch tid_set_reply 
+:      032269 sp_confirm_check_success:
+0x7628 032270 fetch 1 ,mem_master_sp_state 
+0x7629 032271 beq sp_stat_confirm_check ,sp_confirm_check_success_master 
+0x762a 032272 jam sp_stat_confirm_calc ,mem_sp_state 
+0x762b 032273 jam sp_flag_commit ,mem_sp_flag 
+0x762c 032274 jam lmp_accepted ,mem_lmo_opcode2 
+0x762d 032275 rtn 
+:      032276 sp_confirm_check_success_master:
+0x762e 032277 jam lmp_accepted ,mem_lmo_opcode2 
+0x762f 032278 jam sp_state_end ,mem_master_sp_state 
+0x7630 032279 branch master_set_mem_master_sp_flag 
+:      032282 sp_confirm_check_failed:
+0x7631 032283 fetch 1 ,mem_master_sp_state 
+0x7632 032284 beq sp_stat_confirm_check ,sp_confirm_check_failed_master 
+0x7633 032285 jam sp_stat_null ,mem_sp_state 
+0x7634 032286 jam lmp_not_accepted ,mem_lmo_opcode2 
+0x7635 032288 jam authentication_failure_error ,mem_lmo_reason2 
+0x7636 032289 rtn 
+:      032290 sp_confirm_check_failed_master:
+0x7637 032291 jam lmp_not_accepted ,mem_lmo_opcode2 
+0x7638 032292 jam sp_stat_null ,mem_master_sp_state 
+0x7639 032293 rtn 
+:      032295 sp_confirm_calc:
+0x763a 032296 fetch 1 ,mem_sp_dh_ready 
+0x763b 032297 beq sp_flag_commit ,sp_confirm_calc_ready 
+0x763c 032298 jam sp_stat_confirm_calc ,mem_master_sp_state 
+0x763d 032299 branch master_set_mem_master_sp_flag 
+:      032300 sp_confirm_calc_ready:
+0x763e 032301 arg mem_addr_value ,contw 
+0x763f 032302 fetch 6 ,mem_plap 
+0x7640 032303 istore 6 ,contw 
+0x7641 032304 fetch 6 ,mem_lap 
+0x7642 032305 istore 6 ,contw 
+0x7643 032306 fetch 3 ,mem_sp_iocap_local 
+0x7644 032307 istore 3 ,contw 
+0x7645 032309 call function_f3b 
+0x7646 032310 fetch 1 ,mem_master_sp_state 
+0x7647 032311 beq sp_stat_confirm_calc ,sp_confirm_calc_master 
+0x7648 032312 jam sp_stat_confirm_send ,mem_sp_state 
+0x7649 032313 jam sp_flag_commit ,mem_sp_flag 
+0x764a 032314 rtn 
+:      032315 sp_confirm_calc_master:
+0x764b 032316 jam sp_stat_confirm_send ,mem_master_sp_state 
+0x764c 032317 jam sp_flag_commit ,mem_master_sp_flag 
+0x764d 032318 rtn 
+:      032320 sp_master_key_prarm_push:
+0x764e 032321 arg mem_sp_prarm_stack ,contw 
+0x764f 032322 fetch 6 ,mem_plap 
+0x7650 032323 istore 6 ,contw 
+0x7651 032324 fetch 6 ,mem_lap 
+0x7652 032325 istore 6 ,contw 
+0x7653 032326 setarg mem_sp_random_local_end 
+0x7654 032327 istore 2 ,contw 
+0x7655 032328 setarg mem_sp_random_remote_end 
+0x7656 032329 istore 2 ,contw 
+0x7657 032330 branch sp_link_key_calc 
+:      032331 sp_link_key_prarm_push:
+0x7658 032332 jam sp_stat_done ,mem_sp_state 
+0x7659 032333 arg mem_sp_prarm_stack ,contw 
+0x765a 032334 fetch 6 ,mem_lap 
+0x765b 032335 istore 6 ,contw 
+0x765c 032336 fetch 6 ,mem_plap 
+0x765d 032337 istore 6 ,contw 
+0x765e 032338 setarg mem_sp_random_remote_end 
+0x765f 032339 istore 2 ,contw 
+0x7660 032340 setarg mem_sp_random_local_end 
+0x7661 032341 istore 2 ,contw 
+:      032342 sp_link_key_calc:
+0x7662 032344 arg mem_addr_value ,contw 
+0x7663 032345 fetch 6 ,mem_sp_prarm_stack 
+0x7664 032346 istore 6 ,contw 
+0x7665 032347 fetch 6 ,mem_sp_prarm_stack + 6 
+0x7666 032348 istore 6 ,contw 
+0x7667 032350 call function_f2 
+0x7668 032353 jam 1 ,mem_link_key_exists 
+0x7669 032354 arg mem_link_key ,contw 
+0x766a 032355 arg mem_sp_calc_result_high ,contr 
+0x766b 032356 call memcpy16 
+0x766c 032357 branch generate_linkkey_continue 
+:      032360 sp_pubkey_calc:
+0x766d 032361 bpatchx patch3c_7 ,mem_patch3c 
+0x766e 032362 fetch 1 ,mem_sp_local_key_invalid 
+0x766f 032363 rtnne sp_key_invalid 
+0x7670 032364 fetch 1 ,mem_sp_calc 
+0x7671 032365 rtnne sp_calc_standby 
+0x7672 032366 arg mem_sp_private_key ,contw 
+0x7673 032367 force 11 ,queue 
+0x7674 032368 call random_generator 
+0x7675 032369 random pdata 
+0x7676 032370 rshift pdata ,pdata 
+0x7677 032371 istore 2 ,contw 
+0x7678 032373 arg mem_k ,contw 
+0x7679 032374 arg mem_sp_private_key ,contr 
+0x767a 032375 call memcpy24 
+0x767b 032377 arg mem_ax ,contw 
+0x767c 032378 arg mem_gx ,contr 
+0x767d 032379 call memcpy48 
+0x767e 032381 arg mem_az ,contw 
+0x767f 032382 call bn_zero 
+0x7680 032383 jam 1 ,mem_az 
+0x7681 032385 call eckp_calc_init 
+0x7682 032386 jam sp_calc_pubkey ,mem_sp_calc 
+0x7683 032387 rtn 
+:      032389 sp_pubkey_generated:
+0x7684 032390 arg mem_sp_pubkey_local ,contw 
+0x7685 032391 arg mem_bx ,contr 
+0x7686 032392 call memcpy48 
+0x7687 032393 jam sp_key_valid ,mem_sp_local_key_invalid 
+0x7688 032394 jam sp_calc_standby ,mem_sp_calc 
+0x7689 032395 rtn 
+:      032397 sp_dhkey_calc:
+0x768a 032398 bpatchx patch3d_0 ,mem_patch3d 
+0x768b 032399 fetch 1 ,mem_sp_dhkey_invalid 
+0x768c 032400 rtnne sp_key_invalid 
+0x768d 032401 fetch 1 ,mem_sp_calc 
+0x768e 032402 rtnne sp_calc_standby 
+0x768f 032404 arg mem_k ,contw 
+0x7690 032405 arg mem_sp_private_key ,contr 
+0x7691 032406 call memcpy24 
+0x7692 032408 arg mem_ax ,contw 
+0x7693 032409 arg mem_sp_pubkey_remote ,contr 
+0x7694 032410 call memcpy48 
+0x7695 032412 arg mem_az ,contw 
+0x7696 032413 call bn_zero 
+0x7697 032414 jam 1 ,mem_az 
+0x7698 032416 call eckp_calc_init 
+0x7699 032417 jam sp_calc_dhkey ,mem_sp_calc 
+0x769a 032418 rtn 
+:      032420 sp_dhkey_generated:
+0x769b 032421 jam sp_flag_commit ,mem_sp_dh_ready 
+0x769c 032422 arg mem_sp_dhkey ,contw 
+0x769d 032423 arg mem_bx ,contr 
+0x769e 032424 call memcpy24 
+0x769f 032425 jam sp_key_valid ,mem_sp_dhkey_invalid 
+0x76a0 032426 jam sp_calc_standby ,mem_sp_calc 
+0x76a1 032427 rtn 
+:      032429 random_generator:
+0x76a2 032430 increase -1 ,queue 
+0x76a3 032431 nrtn positive 
+0x76a4 032432 random pdata 
+0x76a5 032433 istore 2 ,contw 
+0x76a6 032434 branch random_generator 
+:      032435 compare4:
+0x76a7 032436 increase -1 ,queue 
+0x76a8 032437 nbranch compare4_success ,positive 
+0x76a9 032438 ifetch 4 ,rega 
+0x76aa 032439 copy pdata ,temp 
+0x76ab 032440 ifetch 4 ,regb 
+0x76ac 032441 iflip temp ,pdata 
+0x76ad 032442 nbranch compare4_failed ,zero 
+0x76ae 032443 increase 4 ,rega 
+0x76af 032444 increase 4 ,regb 
+0x76b0 032445 branch compare4 
+:      032446 compare4_failed:
+0x76b1 032447 disable true 
+0x76b2 032448 rtn 
+:      032449 compare4_success:
+0x76b3 032450 enable true 
+0x76b4 032451 rtn 
+:      032458 simple_pairing_sequence:
+0x76b5 032459 bpatchx patch3d_1 ,mem_patch3d 
+0x76b6 032460 fetch 1 ,mem_sp_flag 
+0x76b7 032461 rtn blank 
+0x76b8 032462 call lmo_fifo_check 
+0x76b9 032463 nrtn blank 
+0x76ba 032464 jam sp_flag_standby ,mem_sp_flag 
+0x76bb 032465 fetch 1 ,mem_sp_state 
+0x76bc 032466 beq sp_stat_key_send ,sp_send_lmp_encapsulated_header 
+0x76bd 032467 beq sp_stat_commit_send ,sp_send_lmp_simple_pairing_comfirm 
+0x76be 032468 beq sp_stat_random_send ,sp_send_lmp_simple_pairing_number 
+0x76bf 032469 beq sp_stat_confirm_send ,sp_send_lmp_dhkey_check 
+0x76c0 032470 beq sp_stat_key_generate ,sp_generate_local_key 
+0x76c1 032471 beq sp_stat_commit_calc ,sp_calculate_commitment 
+0x76c2 032472 beq sp_stat_confirm_check ,sp_confirm_check 
+0x76c3 032473 beq sp_stat_confirm_calc ,sp_confirm_calc 
+0x76c4 032474 beq sp_stat_link_key_calc ,sp_link_key_prarm_push 
+0x76c5 032476 rtn 
+:      032478 master_simple_paring_sequence:
+0x76c6 032479 bpatchx patch3d_2 ,mem_patch3d 
+0x76c7 032480 fetch 1 ,mem_master_sp_flag 
+0x76c8 032481 rtn blank 
+0x76c9 032482 call lmo_fifo_check 
+0x76ca 032483 nrtn blank 
+0x76cb 032484 jam sp_flag_standby ,mem_master_sp_flag 
+0x76cc 032485 fetch 1 ,mem_master_sp_state 
+0x76cd 032486 beq sp_master_stat_start_skip ,sp_master_send_io_cap_get 
+0x76ce 032487 beq sp_master_stat_start_done ,sp_master_send_io_cap_send 
+0x76cf 032488 beq sp_stat_key_send ,sp_master_send_lmp_encapsulated_header 
+0x76d0 032489 beq sp_stat_commit_calc ,master_sp_calculate_commitment 
+0x76d1 032490 beq sp_stat_commitment_compare ,sp_master_commitment_compare 
+0x76d2 032491 beq sp_stat_random_send ,sp_master_send_lmp_simple_pairing_number 
+0x76d3 032492 beq sp_stat_confirm_calc ,sp_confirm_calc 
+0x76d4 032493 beq sp_stat_confirm_send ,master_sp_send_lmp_dhkey_check 
+0x76d5 032494 beq sp_stat_confirm_check ,sp_confirm_check 
+0x76d6 032495 beq sp_state_end ,master_sp_sm_end 
+0x76d7 032496 rtn 
+:      032498 master_set_mem_master_sp_flag:
+0x76d8 032499 jam sp_flag_commit ,mem_master_sp_flag 
+0x76d9 032500 rtn 
+:      032502 master_clear_mem_master_sp_flag:
+0x76da 032503 jam sp_flag_standby ,mem_master_sp_flag 
+0x76db 032504 rtn 
+:      032505 sp_calc_sequence:
+0x76dc 032506 bpatchx patch3d_3 ,mem_patch3d 
+0x76dd 032507 fetch 1 ,mem_ssp_enable 
+0x76de 032508 rtn blank 
+0x76df 032509 fetch 1 ,mem_sp_calc 
+0x76e0 032510 rtn blank 
+0x76e1 032511 increase 0x80 ,pdata 
+0x76e2 032512 store 1 ,mem_sp_calc 
+0x76e3 032513 rtnbit1 7 
+0x76e4 032514 fetch 1 ,mem_ec_loopc 
+0x76e5 032515 branch sp_calc_sequence_done ,blank 
+0x76e6 032516 branch eckp_calc 
+:      032518 sp_calc_sequence_done:
+0x76e7 032519 call ecunmapz 
+0x76e8 032520 fetch 1 ,mem_sp_calc 
+0x76e9 032521 beq sp_calc_pubkey ,sp_pubkey_generated 
+0x76ea 032522 beq sp_calc_dhkey ,sp_dhkey_generated 
+0x76eb 032523 rtn 
+:      032526 bn_testbit:
+0x76ec 032527 and pdata ,7 ,queue 
+0x76ed 032528 rshift3 pdata ,pdata 
+0x76ee 032529 iadd contr ,contr 
+0x76ef 032530 ifetch 1 ,contr 
+0x76f0 032531 qisolate0 pdata 
+0x76f1 032532 rtn 
+:      032535 ec_copy:
+0x76f2 032536 call memcpy24 
+0x76f3 032537 call memcpy24 
+0x76f4 032538 branch memcpy24 
+:      032541 bn_eq_zero:
+0x76f5 032542 ifetch 8 ,contr 
+0x76f6 032543 nrtn blank 
+0x76f7 032544 ifetch 8 ,contr 
+0x76f8 032545 nrtn blank 
+0x76f9 032546 ifetch 8 ,contr 
+0x76fa 032547 rtn 
+:      032552 bn_eq_0:
+0x76fb 032553 ifetch 4 ,rega 
+0x76fc 032554 iforce temp 
+0x76fd 032555 ifetch 4 ,regb 
+0x76fe 032556 isub temp ,null 
+0x76ff 032557 nrtn zero 
+0x7700 032558 increase 4 ,rega 
+0x7701 032559 increase 4 ,regb 
+0x7702 032560 loop bn_eq_0 
+0x7703 032561 rtn 
+:      032564 bn_bigeq:
+0x7704 032565 force 6 ,loopcnt 
+0x7705 032566 increase 20 ,rega 
+0x7706 032567 increase 20 ,regb 
+:      032568 bn_bigeq_0:
+0x7707 032569 ifetch 4 ,regb 
+0x7708 032570 iforce temp 
+0x7709 032571 ifetch 4 ,rega 
+0x770a 032572 isub temp ,pdata 
+0x770b 032573 nrtn positive 
+0x770c 032574 nrtn blank 
+0x770d 032575 increase -4 ,rega 
+0x770e 032576 increase -4 ,regb 
+0x770f 032577 loop bn_bigeq_0 
+0x7710 032578 rtn 
+:      032580 bn_add:
+0x7711 032581 force 6 ,loopcnt 
+0x7712 032582 force 0 ,regc 
+:      032583 bn_add_0:
+0x7713 032584 ifetch 4 ,rega 
+0x7714 032585 iforce temp 
+0x7715 032586 ifetch 4 ,regb 
+0x7716 032587 iadd temp ,pdata 
+0x7717 032588 iadd regc ,pdata 
+0x7718 032589 istore 4 ,contw 
+0x7719 032590 isolate1 32 ,pdata 
+0x771a 032591 setflag true ,0 ,regc 
+0x771b 032592 increase 4 ,rega 
+0x771c 032593 increase 4 ,regb 
+0x771d 032594 loop bn_add_0 
+0x771e 032595 rtn 
+:      032597 bn_sub:
+0x771f 032598 force 6 ,loopcnt 
+0x7720 032599 force 0 ,regc 
+:      032600 bn_sub_0:
+0x7721 032601 ifetch 4 ,regb 
+0x7722 032602 iforce temp 
+0x7723 032603 ifetch 4 ,rega 
+0x7724 032604 isub temp ,pdata 
+0x7725 032605 isub regc ,pdata 
+0x7726 032606 istore 4 ,contw 
+0x7727 032607 isolate1 32 ,pdata 
+0x7728 032608 setflag true ,0 ,regc 
+0x7729 032609 increase 4 ,rega 
+0x772a 032610 increase 4 ,regb 
+0x772b 032611 loop bn_sub_0 
+0x772c 032612 rtn 
+:      032614 bn_rshift6:
+0x772d 032615 force 6 ,loopcnt 
+0x772e 032616 increase 20 ,rega 
+:      032617 bn_rshift:
+0x772f 032618 force 0 ,regc 
+:      032619 bn_rshift_0:
+0x7730 032620 ifetch 4 ,rega 
+0x7731 032621 isolate1 0 ,pdata 
+0x7732 032622 setflag true ,1 ,regc 
+0x7733 032623 rshift pdata ,pdata 
+0x7734 032624 isolate1 0 ,regc 
+0x7735 032625 setflag true ,31 ,pdata 
+0x7736 032626 istore 4 ,rega 
+0x7737 032627 increase -4 ,rega 
+0x7738 032628 rshift regc ,regc 
+0x7739 032629 loop bn_rshift_0 
+0x773a 032630 rtn 
+:      032632 bn_lshift:
+0x773b 032633 force 6 ,loopcnt 
+0x773c 032634 force 0 ,regc 
+:      032635 bn_lshift_0:
+0x773d 032636 ifetch 4 ,rega 
+0x773e 032637 isolate1 31 ,pdata 
+0x773f 032638 setflag true ,1 ,regc 
+0x7740 032639 lshift pdata ,pdata 
+0x7741 032640 isolate1 0 ,regc 
+0x7742 032641 setflag true ,0 ,pdata 
+0x7743 032642 istore 4 ,rega 
+0x7744 032643 increase 4 ,rega 
+0x7745 032644 rshift regc ,regc 
+0x7746 032645 loop bn_lshift_0 
+0x7747 032646 rtn 
+:      032648 bn_lshiftmod:
+0x7748 032649 call bn_lshift 
+:      032650 bn_lshiftmod_ismod:
+0x7749 032651 isolate1 0 ,regc 
+0x774a 032652 branch bn_lshiftmod_0 ,true 
+0x774b 032653 arg mem_p ,regb 
+0x774c 032654 copy rega ,regc 
+0x774d 032655 increase -24 ,rega 
+0x774e 032656 call bn_bigeq 
+0x774f 032657 nrtn positive 
+0x7750 032658 copy regc ,rega 
+:      032659 bn_lshiftmod_0:
+0x7751 032660 increase -24 ,rega 
+0x7752 032661 arg mem_p ,regb 
+0x7753 032662 copy rega ,contw 
+0x7754 032663 branch bn_sub 
+:      032666 bn_addmod:
+0x7755 032667 call bn_add 
+0x7756 032668 copy contw ,rega 
+0x7757 032669 branch bn_lshiftmod_ismod 
+:      032671 bn_submod:
+0x7758 032672 call bn_sub 
+0x7759 032673 isolate0 0 ,regc 
+0x775a 032674 rtn true 
+0x775b 032675 arg mem_p ,regb 
+0x775c 032676 add contw ,-24 ,rega 
+0x775d 032677 copy rega ,contw 
+0x775e 032678 branch bn_add 
+:      032681 bn_p192mod:
+0x775f 032682 copy contw ,timeup 
+0x7760 032683 copy rega ,alarm 
+0x7761 032684 arg mem_tmp2 ,regb 
+0x7762 032685 copy regb ,contw 
+0x7763 032686 add rega ,24 ,contr 
+0x7764 032687 ifetch 8 ,contr 
+0x7765 032688 istore 8 ,contw 
+0x7766 032689 istore 8 ,contw 
+0x7767 032690 force 0 ,pdata 
+0x7768 032691 istore 8 ,contw 
+0x7769 032692 copy timeup ,contw 
+0x776a 032693 call bn_addmod 
+0x776b 032694 arg mem_tmp2 ,regb 
+0x776c 032695 copy regb ,contw 
+0x776d 032696 force 0 ,pdata 
+0x776e 032697 istore 8 ,contw 
+0x776f 032698 add alarm ,32 ,contr 
+0x7770 032699 ifetch 8 ,contr 
+0x7771 032700 istore 8 ,contw 
+0x7772 032701 istore 8 ,contw 
+0x7773 032702 copy timeup ,rega 
+0x7774 032703 copy rega ,contw 
+0x7775 032704 call bn_addmod 
+0x7776 032705 arg mem_tmp2 ,regb 
+0x7777 032706 copy regb ,contw 
+0x7778 032707 add alarm ,40 ,contr 
+0x7779 032708 ifetch 8 ,contr 
+0x777a 032709 istore 8 ,contw 
+0x777b 032710 istore 8 ,contw 
+0x777c 032711 istore 8 ,contw 
+0x777d 032712 copy timeup ,rega 
+0x777e 032713 copy rega ,contw 
+0x777f 032714 branch bn_addmod 
+:      032717 bn_load:
+0x7780 032718 force 6 ,loopcnt 
+:      032719 bn_load_0:
+0x7781 032720 ifetch 4 ,contr 
+0x7782 032721 iforce regext 
+0x7783 032722 increase 1 ,regext_index 
+0x7784 032723 loop bn_load_0 
+0x7785 032724 rtn 
+:      032728 bn_mulmod:
+0x7786 032729 copy contw ,timeup 
+0x7787 032730 arg mem_tmp1 ,contw 
+0x7788 032731 call bn_zero 
+0x7789 032732 arg mem_tmp1 ,contw 
+0x778a 032733 copy rega ,contr 
+0x778b 032734 force 0 ,regext_index 
+0x778c 032735 call bn_load 
+0x778d 032736 copy regb ,contr 
+0x778e 032737 call bn_load 
+0x778f 032738 force 0 ,regb 
+:      032739 bn_mulmod_1:
+0x7790 032740 force 0 ,temp 
+0x7791 032741 force 6 ,regc 
+:      032742 bn_mulmod_0:
+0x7792 032743 ifetch 4 ,contw 
+0x7793 032744 iforce rega 
+0x7794 032745 copy regb ,regext_index 
+0x7795 032746 deposit regext 
+0x7796 032747 copy regc ,regext_index 
+0x7797 032748 imul32 regext ,pdata 
+0x7798 032749 iadd rega ,pdata 
+0x7799 032750 iadd temp ,pdata 
+0x779a 032751 istore 4 ,contw 
+0x779b 032752 rshift32 pdata ,temp 
+0x779c 032753 increase 1 ,regc 
+0x779d 032754 compare 12 ,regc ,0xff 
+0x779e 032755 nbranch bn_mulmod_0 ,true 
+0x779f 032756 deposit temp 
+0x77a0 032757 istore 4 ,contw 
+0x77a1 032758 increase -24 ,contw 
+0x77a2 032759 increase 1 ,regb 
+0x77a3 032760 compare 6 ,regb ,0xff 
+0x77a4 032761 nbranch bn_mulmod_1 ,true 
+0x77a5 032762 arg mem_tmp1 ,rega 
+0x77a6 032763 copy timeup ,contw 
+0x77a7 032764 branch bn_p192mod 
+:      032767 bn_sqrmod:
+0x77a8 032768 copy rega ,regb 
+0x77a9 032769 branch bn_mulmod 
+:      032771 bn_rshifteven:
+0x77aa 032772 copy rega ,alarm 
+:      032773 bn_rshifteven_1:
+0x77ab 032774 copy alarm ,rega 
+0x77ac 032775 ifetch 1 ,rega 
+0x77ad 032776 isolate1 0 ,pdata 
+0x77ae 032777 rtn true 
+0x77af 032778 call bn_rshift6 
+0x77b0 032779 ifetch 1 ,regb 
+0x77b1 032780 isolate0 0 ,pdata 
+0x77b2 032781 branch bn_rshifteven_0 ,true 
+0x77b3 032782 arg mem_p ,rega 
+0x77b4 032783 copy regb ,contw 
+0x77b5 032784 call bn_add 
+0x77b6 032785 ifetch 1 ,regb 
+0x77b7 032786 iadd regc ,pdata 
+0x77b8 032787 istore 1 ,regb 
+0x77b9 032788 increase -24 ,regb 
+:      032789 bn_rshifteven_0:
+0x77ba 032790 add regb ,24 ,rega 
+0x77bb 032791 force 7 ,loopcnt 
+0x77bc 032792 call bn_rshift 
+0x77bd 032793 branch bn_rshifteven_1 
+:      032796 bn_invmod:
+0x77be 032797 copy contw ,timeup 
+0x77bf 032798 arg mem_tmp0 ,contw 
+0x77c0 032799 call bn_zero 
+0x77c1 032800 force 0 ,pdata 
+0x77c2 032801 store 4 ,mem_tmp5 
+0x77c3 032802 store 4 ,mem_t2 
+0x77c4 032803 jam 1 ,mem_tmp0 
+0x77c5 032804 arg mem_tmp1 ,contw 
+0x77c6 032805 call bn_zero 
+0x77c7 032806 arg mem_p ,contr 
+0x77c8 032807 arg mem_tmp2 ,contw 
+0x77c9 032808 call memcpy24 
+0x77ca 032809 copy rega ,contr 
+0x77cb 032810 arg mem_tmp3 ,contw 
+0x77cc 032811 call memcpy24 
+:      032812 bn_invmod_2:
+0x77cd 032813 arg mem_tmp3 ,contr 
+0x77ce 032814 call bn_eq_zero 
+0x77cf 032815 branch bn_invmod_0 ,blank 
+0x77d0 032816 arg mem_tmp3 ,rega 
+0x77d1 032817 arg mem_tmp0 ,regb 
+0x77d2 032818 call bn_rshifteven 
+0x77d3 032820 arg mem_tmp2 ,rega 
+0x77d4 032821 arg mem_tmp1 ,regb 
+0x77d5 032822 call bn_rshifteven 
+0x77d6 032823 arg mem_tmp3 ,rega 
+0x77d7 032824 arg mem_tmp2 ,regb 
+0x77d8 032825 call bn_bigeq 
+0x77d9 032826 branch bn_invmod_1 ,positive 
+0x77da 032827 arg mem_tmp2 ,rega 
+0x77db 032828 arg mem_tmp3 ,regb 
+0x77dc 032829 copy rega ,contw 
+0x77dd 032830 call bn_sub 
+0x77de 032831 arg mem_tmp0 ,rega 
+0x77df 032832 arg mem_tmp1 ,regb 
+0x77e0 032833 copy regb ,contw 
+0x77e1 032834 call bn_add 
+0x77e2 032835 ifetch 1 ,rega 
+0x77e3 032836 iadd regc ,regc 
+0x77e4 032837 ifetch 1 ,regb 
+0x77e5 032838 iadd regc ,pdata 
+0x77e6 032839 istore 1 ,regb 
+0x77e7 032840 branch bn_invmod_2 
+:      032841 bn_invmod_1:
+0x77e8 032842 arg mem_tmp3 ,rega 
+0x77e9 032843 arg mem_tmp2 ,regb 
+0x77ea 032844 copy rega ,contw 
+0x77eb 032845 call bn_sub 
+0x77ec 032846 arg mem_tmp1 ,rega 
+0x77ed 032847 arg mem_tmp0 ,regb 
+0x77ee 032848 copy regb ,contw 
+0x77ef 032849 call bn_add 
+0x77f0 032850 ifetch 1 ,rega 
+0x77f1 032851 iadd regc ,regc 
+0x77f2 032852 ifetch 1 ,regb 
+0x77f3 032853 iadd regc ,pdata 
+0x77f4 032854 istore 1 ,regb 
+0x77f5 032855 branch bn_invmod_2 
+:      032856 bn_invmod_0:
+0x77f6 032857 arg mem_tmp0 ,contw 
+0x77f7 032858 call bn_zero 
+0x77f8 032859 fetch 1 ,mem_tmp5 
+0x77f9 032860 store 1 ,mem_tmp0 
+0x77fa 032861 store 1 ,mem_tmp0a 
+0x77fb 032862 arg mem_tmp0 ,rega 
+0x77fc 032863 arg mem_tmp1 ,regb 
+0x77fd 032864 copy regb ,contw 
+0x77fe 032865 call bn_addmod 
+0x77ff 032866 arg mem_p ,rega 
+0x7800 032867 arg mem_tmp1 ,regb 
+0x7801 032868 copy timeup ,contw 
+0x7802 032869 branch bn_submod 
+:      032874 ecdbl:
+0x7803 032875 arg mem_cz ,rega 
+0x7804 032876 arg mem_t2 ,contw 
+0x7805 032877 call bn_sqrmod 
+0x7806 032878 arg mem_t2 ,rega 
+0x7807 032879 arg mem_t3 ,contw 
+0x7808 032880 call bn_sqrmod 
+0x7809 032881 arg mem_a ,rega 
+0x780a 032882 arg mem_t3 ,regb 
+0x780b 032883 arg mem_t3 ,contw 
+0x780c 032884 call bn_mulmod 
+0x780d 032885 arg mem_cx ,rega 
+0x780e 032886 arg mem_t2 ,contw 
+0x780f 032887 call bn_sqrmod 
+0x7810 032888 arg mem_t2 ,contr 
+0x7811 032889 arg mem_t1 ,contw 
+0x7812 032890 call memcpy24 
+0x7813 032891 arg mem_t1 ,rega 
+0x7814 032892 call bn_lshiftmod 
+0x7815 032893 arg mem_t2 ,rega 
+0x7816 032894 arg mem_t1 ,regb 
+0x7817 032895 arg mem_t2 ,contw 
+0x7818 032896 call bn_addmod 
+0x7819 032897 arg mem_t2 ,rega 
+0x781a 032898 arg mem_t3 ,regb 
+0x781b 032899 arg mem_t2 ,contw 
+0x781c 032900 call bn_addmod 
+0x781d 032901 arg mem_cx ,contr 
+0x781e 032902 arg mem_t1 ,contw 
+0x781f 032903 call memcpy24 
+0x7820 032904 arg mem_cy ,rega 
+0x7821 032905 arg mem_t3 ,contw 
+0x7822 032906 call bn_sqrmod 
+0x7823 032907 arg mem_t1 ,rega 
+0x7824 032908 call bn_lshiftmod 
+0x7825 032909 arg mem_t1 ,rega 
+0x7826 032910 call bn_lshiftmod 
+0x7827 032911 arg mem_t1 ,rega 
+0x7828 032912 arg mem_t3 ,regb 
+0x7829 032913 arg mem_t1 ,contw 
+0x782a 032914 call bn_mulmod 
+0x782b 032915 arg mem_t3 ,rega 
+0x782c 032916 arg mem_t0 ,contw 
+0x782d 032917 call bn_sqrmod 
+0x782e 032918 arg mem_t0 ,rega 
+0x782f 032919 call bn_lshiftmod 
+0x7830 032920 arg mem_t0 ,rega 
+0x7831 032921 call bn_lshiftmod 
+0x7832 032922 arg mem_t0 ,rega 
+0x7833 032923 call bn_lshiftmod 
+0x7834 032924 arg mem_cy ,contr 
+0x7835 032925 arg mem_t3 ,contw 
+0x7836 032926 call memcpy24 
+0x7837 032927 arg mem_t3 ,rega 
+0x7838 032928 call bn_lshiftmod 
+0x7839 032929 arg mem_t3 ,rega 
+0x783a 032930 arg mem_cz ,regb 
+0x783b 032931 arg mem_cz ,contw 
+0x783c 032932 call bn_mulmod 
+0x783d 032933 arg mem_t2 ,rega 
+0x783e 032934 arg mem_t3 ,contw 
+0x783f 032935 call bn_sqrmod 
+0x7840 032936 arg mem_t3 ,rega 
+0x7841 032937 arg mem_t1 ,regb 
+0x7842 032938 arg mem_t3 ,contw 
+0x7843 032939 call bn_submod 
+0x7844 032940 arg mem_t3 ,rega 
+0x7845 032941 arg mem_t1 ,regb 
+0x7846 032942 arg mem_cx ,contw 
+0x7847 032943 call bn_submod 
+0x7848 032944 arg mem_t1 ,rega 
+0x7849 032945 arg mem_cx ,regb 
+0x784a 032946 arg mem_t3 ,contw 
+0x784b 032947 call bn_submod 
+0x784c 032948 arg mem_t3 ,rega 
+0x784d 032949 arg mem_t2 ,regb 
+0x784e 032950 arg mem_t3 ,contw 
+0x784f 032951 call bn_mulmod 
+0x7850 032952 arg mem_t3 ,rega 
+0x7851 032953 arg mem_t0 ,regb 
+0x7852 032954 arg mem_cy ,contw 
+0x7853 032955 branch bn_submod 
+:      032959 ecadd:
+0x7854 032960 arg mem_az ,rega 
+0x7855 032961 arg mem_t7 ,contw 
+0x7856 032962 call bn_sqrmod 
+0x7857 032963 arg mem_cx ,rega 
+0x7858 032964 arg mem_t7 ,regb 
+0x7859 032965 arg mem_t0 ,contw 
+0x785a 032966 call bn_mulmod 
+0x785b 032967 arg mem_az ,rega 
+0x785c 032968 arg mem_t7 ,regb 
+0x785d 032969 arg mem_t7 ,contw 
+0x785e 032970 call bn_mulmod 
+0x785f 032971 arg mem_cy ,rega 
+0x7860 032972 arg mem_t7 ,regb 
+0x7861 032973 arg mem_t1 ,contw 
+0x7862 032974 call bn_mulmod 
+0x7863 032975 arg mem_cz ,rega 
+0x7864 032976 arg mem_t7 ,contw 
+0x7865 032977 call bn_sqrmod 
+0x7866 032978 arg mem_ax ,rega 
+0x7867 032979 arg mem_t7 ,regb 
+0x7868 032980 arg mem_t2 ,contw 
+0x7869 032981 call bn_mulmod 
+0x786a 032982 arg mem_cz ,rega 
+0x786b 032983 arg mem_t7 ,regb 
+0x786c 032984 arg mem_t7 ,contw 
+0x786d 032985 call bn_mulmod 
+0x786e 032986 arg mem_ay ,rega 
+0x786f 032987 arg mem_t7 ,regb 
+0x7870 032988 arg mem_t3 ,contw 
+0x7871 032989 call bn_mulmod 
+0x7872 032990 arg mem_t0 ,rega 
+0x7873 032991 arg mem_t2 ,regb 
+0x7874 032992 arg mem_t7 ,contw 
+0x7875 032993 call bn_submod 
+0x7876 032994 arg mem_t0 ,rega 
+0x7877 032995 arg mem_t2 ,regb 
+0x7878 032996 arg mem_t0 ,contw 
+0x7879 032997 call bn_addmod 
+0x787a 032998 arg mem_t1 ,rega 
+0x787b 032999 arg mem_t3 ,regb 
+0x787c 033000 arg mem_t2 ,contw 
+0x787d 033001 call bn_submod 
+0x787e 033002 arg mem_t1 ,rega 
+0x787f 033003 arg mem_t3 ,regb 
+0x7880 033004 arg mem_t1 ,contw 
+0x7881 033005 call bn_addmod 
+0x7882 033006 arg mem_t1 ,rega 
+0x7883 033007 arg mem_t7 ,regb 
+0x7884 033008 arg mem_t1 ,contw 
+0x7885 033009 call bn_mulmod 
+0x7886 033010 arg mem_cz ,rega 
+0x7887 033011 arg mem_az ,regb 
+0x7888 033012 arg mem_t3 ,contw 
+0x7889 033013 call bn_mulmod 
+0x788a 033014 arg mem_t3 ,rega 
+0x788b 033015 arg mem_t7 ,regb 
+0x788c 033016 arg mem_cz ,contw 
+0x788d 033017 call bn_mulmod 
+0x788e 033018 arg mem_t7 ,rega 
+0x788f 033019 arg mem_t7 ,contw 
+0x7890 033020 call bn_sqrmod 
+0x7891 033021 arg mem_t7 ,rega 
+0x7892 033022 arg mem_t0 ,regb 
+0x7893 033023 arg mem_t3 ,contw 
+0x7894 033024 call bn_mulmod 
+0x7895 033025 arg mem_t7 ,rega 
+0x7896 033026 arg mem_t1 ,regb 
+0x7897 033027 arg mem_t1 ,contw 
+0x7898 033028 call bn_mulmod 
+0x7899 033029 arg mem_t2 ,rega 
+0x789a 033030 arg mem_cx ,contw 
+0x789b 033031 call bn_sqrmod 
+0x789c 033032 arg mem_cx ,rega 
+0x789d 033033 arg mem_t3 ,regb 
+0x789e 033034 arg mem_cx ,contw 
+0x789f 033035 call bn_submod 
+0x78a0 033036 arg mem_cx ,contr 
+0x78a1 033037 arg mem_t7 ,contw 
+0x78a2 033038 call memcpy24 
+0x78a3 033039 arg mem_t7 ,rega 
+0x78a4 033040 call bn_lshiftmod 
+0x78a5 033041 arg mem_t3 ,rega 
+0x78a6 033042 arg mem_t7 ,regb 
+0x78a7 033043 arg mem_t3 ,contw 
+0x78a8 033044 call bn_submod 
+0x78a9 033045 arg mem_t3 ,rega 
+0x78aa 033046 arg mem_t2 ,regb 
+0x78ab 033047 arg mem_t2 ,contw 
+0x78ac 033048 call bn_mulmod 
+0x78ad 033049 arg mem_t2 ,rega 
+0x78ae 033050 arg mem_t1 ,regb 
+0x78af 033051 arg mem_cy ,contw 
+0x78b0 033052 call bn_submod 
+0x78b1 033053 arg mem_cy ,rega 
+0x78b2 033054 arg mem_p ,regb 
+0x78b3 033055 arg mem_cy ,contw 
+0x78b4 033056 force 0 ,regc 
+0x78b5 033057 fetch 1 ,mem_cy 
+0x78b6 033058 isolate1 0 ,pdata 
+0x78b7 033059 call bn_add ,true 
+0x78b8 033060 copy regc ,alarm 
+0x78b9 033061 arg mem_cy ,rega 
+0x78ba 033062 call bn_rshift6 
+0x78bb 033063 fetch 1 ,mem_cy5 
+0x78bc 033064 isolate1 0 ,alarm 
+0x78bd 033065 setflag true ,7 ,pdata 
+0x78be 033066 store 1 ,mem_cy5 
+0x78bf 033067 rtn 
+:      033071 eckp_0:
+0x78c0 033072 fetch 1 ,mem_ec_loopc 
+0x78c1 033073 increase -1 ,pdata 
+0x78c2 033074 nrtn positive 
+0x78c3 033075 store 1 ,mem_ec_loopc 
+0x78c4 033076 fetch 1 ,mem_ec_infinite 
+0x78c5 033077 call ecdbl ,blank 
+0x78c6 033078 fetch 1 ,mem_ec_loopc 
+0x78c7 033079 arg mem_k ,contr 
+0x78c8 033080 call bn_testbit 
+0x78c9 033081 branch eckp_0 ,true 
+0x78ca 033082 fetch 1 ,mem_ec_infinite 
+0x78cb 033083 nbranch eckp_1 ,blank 
+0x78cc 033084 call ecadd 
+0x78cd 033085 branch eckp_0 
+:      033086 eckp_1:
+0x78ce 033087 jam 0 ,mem_ec_infinite 
+0x78cf 033088 arg mem_ax ,contr 
+0x78d0 033089 arg mem_cx ,contw 
+0x78d1 033090 call ec_copy 
+0x78d2 033091 branch eckp_0 
+:      033094 ecunmapz:
+0x78d3 033095 arg mem_cz ,rega 
+0x78d4 033096 arg mem_t3 ,contw 
+0x78d5 033097 call bn_invmod 
+0x78d6 033098 arg mem_t3 ,rega 
+0x78d7 033099 arg mem_t1 ,contw 
+0x78d8 033100 call bn_sqrmod 
+0x78d9 033101 arg mem_cx ,rega 
+0x78da 033102 arg mem_t1 ,regb 
+0x78db 033103 arg mem_bx ,contw 
+0x78dc 033104 call bn_mulmod 
+0x78dd 033105 arg mem_t3 ,rega 
+0x78de 033106 arg mem_t1 ,regb 
+0x78df 033107 arg mem_t2 ,contw 
+0x78e0 033108 call bn_mulmod 
+0x78e1 033109 arg mem_cy ,rega 
+0x78e2 033110 arg mem_t2 ,regb 
+0x78e3 033111 arg mem_by ,contw 
+0x78e4 033112 branch bn_mulmod 
+:      033116 sha_endian_swap2:
+0x78e5 033117 ifetch 4 ,contr 
+0x78e6 033118 force 4 ,rega 
+0x78e7 033119 increase 3 ,contw 
+:      033120 sha_endian_loop:
+0x78e8 033121 istore 1 ,contw 
+0x78e9 033122 rshift8 pdata ,pdata 
+0x78ea 033123 increase -2 ,contw 
+0x78eb 033124 increase -1 ,rega 
+0x78ec 033125 nbranch sha_endian_loop ,zero 
+0x78ed 033126 increase 5 ,contw 
+0x78ee 033127 loop sha_endian_swap2 
+0x78ef 033128 rtn 
+:      033131 sha_getw:
+0x78f0 033132 lshift2 queue ,pdata 
+0x78f1 033133 iadd timeup ,contr 
+0x78f2 033134 ifetch 4 ,contr 
+0x78f3 033135 rtn 
+:      033137 sha_r:
+0x78f4 033138 force 16 ,alarm 
+0x78f5 033139 arg memdat ,timeup 
+:      033140 sha_r_loop:
+0x78f6 033141 add alarm ,-7 ,queue 
+0x78f7 033142 call sha_getw 
+0x78f8 033143 iforce temp 
+0x78f9 033144 add alarm ,-16 ,queue 
+0x78fa 033145 call sha_getw 
+0x78fb 033146 iadd temp ,temp 
+0x78fc 033147 add alarm ,-2 ,queue 
+0x78fd 033148 call sha_getw 
+0x78fe 033149 shasx pdata ,1 ,pdata 
+0x78ff 033150 iadd temp ,temp 
+0x7900 033151 add alarm ,-15 ,queue 
+0x7901 033152 call sha_getw 
+0x7902 033153 shasx pdata ,0 ,pdata 
+0x7903 033154 iadd temp ,temp 
+0x7904 033155 lshift2 alarm ,pdata 
+0x7905 033156 iadd timeup ,contw 
+0x7906 033157 istoret 4 ,contw 
+0x7907 033158 increase 1 ,alarm 
+0x7908 033159 compare 64 ,alarm ,0xff 
+0x7909 033160 nbranch sha_r_loop ,true 
+0x790a 033161 rtn 
+:      033164 sha_init:
+0x790b 033165 arg memh0 ,contr 
+0x790c 033166 force 7 ,regext_index 
+:      033167 sha_init_0:
+0x790d 033168 ifetch 4 ,contr 
+0x790e 033169 iforce regext 
+0x790f 033170 increase -1 ,regext_index 
+0x7910 033171 branch sha_init_0 ,positive 
+0x7911 033172 rtn 
+:      033174 sha:
+0x7912 033175 bpatchx patch3d_4 ,mem_patch3d 
+0x7913 033176 call sha_r 
+0x7914 033177 arg memahbak ,contw 
+0x7915 033178 force 0 ,regext_index 
+:      033179 sha_0:
+0x7916 033180 deposit regext 
+0x7917 033181 istore 4 ,contw 
+0x7918 033182 increase 1 ,regext_index 
+0x7919 033183 compare 8 ,regext_index ,0xff 
+0x791a 033184 nbranch sha_0 ,true 
+0x791b 033185 call enable_authrom 
+0x791c 033186 arg memk ,timeup 
+0x791d 033187 arg memdat ,alarm 
+0x791e 033188 force 64 ,loopcnt 
+:      033189 sha_loop:
+0x791f 033190 ifetcht 4 ,alarm 
+0x7920 033191 ifetch 4 ,timeup 
+0x7921 033192 increase 4 ,timeup 
+0x7922 033193 increase 4 ,alarm 
+0x7923 033194 iadd temp ,pdata 
+0x7924 033195 force 7 ,regext_index 
+0x7925 033196 iadd regext ,temp 
+0x7926 033197 force 4 ,regext_index 
+0x7927 033198 shasx regext ,3 ,pdata 
+0x7928 033199 iadd temp ,temp 
+0x7929 033200 force 5 ,regext_index 
+0x792a 033201 deposit regext 
+0x792b 033202 force 6 ,regext_index 
+0x792c 033203 ixor regext ,pdata 
+0x792d 033204 force 4 ,regext_index 
+0x792e 033205 iand regext ,pdata 
+0x792f 033206 force 6 ,regext_index 
+0x7930 033207 ixor regext ,pdata 
+0x7931 033208 iadd temp ,temp 
+0x7932 033209 force 7 ,regext_index 
+0x7933 033210 copy temp ,regext 
+0x7934 033211 force 3 ,regext_index 
+0x7935 033212 deposit regext 
+0x7936 033213 iadd temp ,regext 
+0x7937 033214 force 0 ,regext_index 
+0x7938 033215 deposit regext 
+0x7939 033216 force 1 ,regext_index 
+0x793a 033217 iand regext ,temp 
+0x793b 033218 ior regext ,pdata 
+0x793c 033219 force 2 ,regext_index 
+0x793d 033220 iand regext ,pdata 
+0x793e 033221 ior temp ,temp 
+0x793f 033222 force 0 ,regext_index 
+0x7940 033223 shasx regext ,2 ,pdata 
+0x7941 033224 iadd temp ,pdata 
+0x7942 033225 force 7 ,regext_index 
+0x7943 033226 iadd regext ,regext 
+0x7944 033227 regexrot 
+0x7945 033228 loop sha_loop 
+0x7946 033229 arg memahbak ,contr 
+0x7947 033230 force 0 ,regext_index 
+:      033231 sha_1:
+0x7948 033232 ifetch 4 ,contr 
+0x7949 033233 iadd regext ,regext 
+0x794a 033234 increase 1 ,regext_index 
+0x794b 033235 compare 8 ,regext_index ,0xff 
+0x794c 033236 nbranch sha_1 ,true 
+0x794d 033237 branch disable_authrom 
+:      033240 sha_result:
+0x794e 033241 arg memresult ,contw 
+0x794f 033242 force 7 ,regext_index 
+:      033243 sha_regext_save:
+0x7950 033244 deposit regext 
+0x7951 033245 istore 4 ,contw 
+0x7952 033246 increase -1 ,regext_index 
+0x7953 033247 branch sha_regext_save ,positive 
+0x7954 033248 rtn 
+:      033250 pad_xor:
+0x7955 033252 arg memdat ,contw 
+0x7956 033253 increase -4 ,contr 
+0x7957 033254 sub loopcnt ,16 ,rega 
+:      033255 pad_xor_0:
+0x7958 033256 ifetch 4 ,contr 
+0x7959 033257 ixor temp ,pdata 
+0x795a 033258 istore 4 ,contw 
+0x795b 033259 increase -8 ,contr 
+0x795c 033260 loop pad_xor_0 
+0x795d 033261 copy rega ,loopcnt 
+0x795e 033262 deposit temp 
+:      033263 pad_xor_1:
+0x795f 033264 istore 4 ,contw 
+0x7960 033265 loop pad_xor_1 
+0x7961 033266 rtn 
+:      033268 g_noninit_number_confirm:
+0x7962 033269 call g_noninit0 
+0x7963 033270 call sha_result 
+0x7964 033271 branch g_common0 
+:      033273 g_noninit:
+0x7965 033274 call g_noninit0 
+0x7966 033275 branch g_common0 
+:      033277 g_noninit0:
+0x7967 033278 arg mem_sp_pubkey_remote_x_end ,contr 
+0x7968 033279 arg memdat ,contw 
+0x7969 033280 force 6 ,loopcnt 
+0x796a 033281 call memcpy_dword_swap 
+0x796b 033282 arg mem_sp_pubkey_local_x_end ,contr 
+0x796c 033283 force 6 ,loopcnt 
+0x796d 033284 call memcpy_dword_swap 
+0x796e 033285 arg mem_sp_random_remote_end ,contr 
+0x796f 033286 call memcpy_dword_swap4 
+0x7970 033287 call sha_init 
+0x7971 033288 call sha 
+0x7972 033289 arg mem_sp_random_local_end ,contr 
+0x7973 033290 arg memdat ,contw 
+0x7974 033291 branch g_common 
+:      033293 g_init:
+0x7975 033294 arg mem_sp_pubkey_local_x_end ,contr 
+0x7976 033295 arg memdat ,contw 
+0x7977 033296 force 6 ,loopcnt 
+0x7978 033297 call memcpy_dword_swap 
+0x7979 033298 arg mem_sp_pubkey_remote_x_end ,contr 
+0x797a 033299 force 6 ,loopcnt 
+0x797b 033300 call memcpy_dword_swap 
+0x797c 033301 arg mem_sp_random_local_end ,contr 
+0x797d 033302 call memcpy_dword_swap4 
+0x797e 033303 call sha_init 
+0x797f 033304 call sha 
+0x7980 033305 arg mem_sp_random_remote_end ,contr 
+0x7981 033306 arg memdat ,contw 
+0x7982 033307 call g_common 
+0x7983 033308 branch g_common0 
+:      033310 g_common:
+0x7984 033311 call memcpy_dword_swap4 
+0x7985 033312 setarg 0x800000 
+0x7986 033313 lshift8 pdata ,pdata 
+0x7987 033314 istore 4 ,contw 
+0x7988 033315 force 5 ,loopcnt 
+0x7989 033316 call memset0 
+0x798a 033317 setarg 640 
+0x798b 033318 istore 4 ,contw 
+0x798c 033319 branch sha 
+:      033320 g_common0:
+0x798d 033321 fetch 4 ,memresult 
+0x798e 033323 arg 1000 ,rega 
+0x798f 033324 idiv rega 
+0x7990 033325 call wait_div_end 
+0x7991 033326 remainder pdata 
+0x7992 033327 store 4 ,mem_gkey 
+0x7993 033328 quotient pdata 
+0x7994 033329 arg 1000 ,rega 
+0x7995 033330 idiv rega 
+0x7996 033331 call wait_div_end 
+0x7997 033332 remainder pdata 
+0x7998 033333 arg 1000 ,rega 
+0x7999 033334 imul32 rega ,pdata 
+0x799a 033335 fetcht 4 ,mem_gkey 
+0x799b 033336 iadd temp ,pdata 
+0x799c 033337 store 4 ,mem_gkey 
+0x799d 033338 rtn 
+:      033340 function_f1_no_key:
+0x799e 033341 jam 0 ,mem_passkey_1bit 
+0x799f 033342 branch function_f1_common 
+:      033344 function_f1:
+0x79a0 033345 fetch 1 ,mem_ssp_mode_flag 
+0x79a1 033346 bne ssp_mode_passkey_entry_flag ,function_f1_no_key 
+:      033347 function_f1_common:
+0x79a2 033348 bpatchx patch3d_5 ,mem_patch3d 
+0x79a3 033349 setarg 0x363636 
+0x79a4 033350 lshift8 pdata ,temp 
+0x79a5 033351 or_into 0x36 ,temp 
+0x79a6 033352 fetch 2 ,mem_sp_prarm_stack 
+0x79a7 033353 copy pdata ,contr 
+0x79a8 033354 force 4 ,loopcnt 
+0x79a9 033355 call pad_xor 
+0x79aa 033356 call sha_init 
+0x79ab 033357 call sha 
+0x79ac 033358 fetch 2 ,mem_sp_prarm_stack + 2 
+0x79ad 033359 copy pdata ,contr 
+0x79ae 033360 arg memdat ,contw 
+0x79af 033361 force 6 ,loopcnt 
+0x79b0 033362 call memcpy_dword_swap 
+0x79b1 033363 fetch 2 ,mem_sp_prarm_stack + 4 
+0x79b2 033364 copy pdata ,contr 
+0x79b3 033365 force 6 ,loopcnt 
+0x79b4 033366 call memcpy_dword_swap 
+0x79b5 033367 setarg 0x800000 
+0x79b6 033368 istore 3 ,contw 
+0x79b7 033370 fetch 1 ,mem_passkey_1bit 
+0x79b8 033372 istore 1 ,contw 
+0x79b9 033373 force 0 ,pdata 
+0x79ba 033374 istore 8 ,contw 
+0x79bb 033375 setarg 0x0388 
+0x79bc 033376 istore 4 ,contw 
+0x79bd 033377 call sha 
+0x79be 033378 call sha_result 
+0x79bf 033379 arg memresult ,contr 
+0x79c0 033380 arg memahsave ,contw 
+0x79c1 033381 call memcpy32 
+0x79c2 033383 setarg 0x5c5c5c 
+0x79c3 033384 lshift8 pdata ,temp 
+0x79c4 033385 or_into 0x5c ,temp 
+0x79c5 033386 fetch 2 ,mem_sp_prarm_stack 
+0x79c6 033387 copy pdata ,contr 
+0x79c7 033388 force 4 ,loopcnt 
+0x79c8 033389 call pad_xor 
+0x79c9 033390 call sha_init 
+0x79ca 033391 call sha 
+0x79cb 033392 arg memahsave_end ,contr 
+0x79cc 033393 arg memdat ,contw 
+0x79cd 033394 force 8 ,loopcnt 
+0x79ce 033395 call memcpy_dword_swap 
+0x79cf 033396 setarg 0x800000 
+0x79d0 033397 lshift8 pdata ,pdata 
+0x79d1 033398 istore 4 ,contw 
+0x79d2 033399 call bn_zero 
+0x79d3 033400 setarg 0x0300 
+0x79d4 033401 istore 4 ,contw 
+0x79d5 033402 call sha 
+0x79d6 033403 branch sha_result 
+:      033406 function_f2:
+0x79d7 033407 setarg 0x363636 
+0x79d8 033408 lshift8 pdata ,temp 
+0x79d9 033409 or_into 0x36 ,temp 
+0x79da 033410 arg mem_sp_dhkey_end ,contr 
+0x79db 033411 force 6 ,loopcnt 
+0x79dc 033412 call pad_xor 
+0x79dd 033413 call sha_init 
+0x79de 033414 call sha 
+0x79df 033415 fetch 2 ,mem_sp_prarm_stack + 12 
+0x79e0 033416 copy pdata ,contr 
+0x79e1 033417 arg memdat ,contw 
+0x79e2 033418 call memcpy_dword_swap4 
+0x79e3 033419 fetch 2 ,mem_sp_prarm_stack + 14 
+0x79e4 033420 copy pdata ,contr 
+0x79e5 033421 call memcpy_dword_swap4 
+0x79e6 033423 setarg 0x62746c 
+0x79e7 033424 lshift8 pdata ,pdata 
+0x79e8 033425 or_into 0x6b ,pdata 
+0x79e9 033426 istore 4 ,contw 
+0x79ea 033427 arg mem_addr_value_end ,contr 
+0x79eb 033428 force 3 ,loopcnt 
+0x79ec 033429 call memcpy_dword_swap 
+0x79ed 033431 setarg 0x800000 
+0x79ee 033432 lshift8 pdata ,pdata 
+0x79ef 033433 istore 4 ,contw 
+0x79f0 033434 force 0 ,pdata 
+0x79f1 033435 istore 8 ,contw 
+0x79f2 033436 setarg 0x0380 
+0x79f3 033437 istore 4 ,contw 
+0x79f4 033438 call sha 
+0x79f5 033440 call sha_result 
+0x79f6 033441 arg memresult ,contr 
+0x79f7 033442 arg memahsave ,contw 
+0x79f8 033443 call memcpy32 
+0x79f9 033445 setarg 0x5c5c5c 
+0x79fa 033446 lshift8 pdata ,temp 
+0x79fb 033447 or_into 0x5c ,temp 
+0x79fc 033448 arg mem_sp_dhkey_end ,contr 
+0x79fd 033449 force 6 ,loopcnt 
+0x79fe 033450 call pad_xor 
+0x79ff 033451 call sha_init 
+0x7a00 033452 call sha 
+0x7a01 033453 arg memahsave_end ,contr 
+0x7a02 033454 arg memdat ,contw 
+0x7a03 033455 force 8 ,loopcnt 
+0x7a04 033456 call memcpy_dword_swap 
+0x7a05 033457 setarg 0x800000 
+0x7a06 033458 lshift8 pdata ,pdata 
+0x7a07 033459 istore 4 ,contw 
+0x7a08 033460 call bn_zero 
+0x7a09 033461 setarg 0x0300 
+0x7a0a 033462 istore 4 ,contw 
+0x7a0b 033463 call sha 
+0x7a0c 033464 branch sha_result 
+:      033467 function_f3a:
+0x7a0d 033468 fetch 1 ,mem_ssp_mode_flag 
+0x7a0e 033469 bne ssp_mode_passkey_entry_flag ,function_f3a_no_pin 
+:      033470 function_f3a_common:
+0x7a0f 033471 bpatchx patch3d_6 ,mem_patch3d 
+0x7a10 033472 setarg 0x363636 
+0x7a11 033473 lshift8 pdata ,temp 
+0x7a12 033474 or_into 0x36 ,temp 
+0x7a13 033475 arg mem_sp_dhkey_end ,contr 
+0x7a14 033476 force 6 ,loopcnt 
+0x7a15 033477 call pad_xor 
+0x7a16 033478 call sha_init 
+0x7a17 033479 call sha 
+0x7a18 033480 arg mem_sp_random_remote_end ,contr 
+0x7a19 033481 arg memdat ,contw 
+0x7a1a 033482 call memcpy_dword_swap4 
+0x7a1b 033483 arg mem_sp_random_local_end ,contr 
+0x7a1c 033484 call memcpy_dword_swap4 
+0x7a1d 033485 branch function_f3_common 
+:      033487 function_f3a_no_pin:
+0x7a1e 033488 setarg 0 
+0x7a1f 033489 store 4 ,mem_pin 
+0x7a20 033490 branch function_f3a_common 
+:      033492 function_f3b_no_pin:
+0x7a21 033493 setarg 0 
+0x7a22 033494 store 4 ,mem_pin 
+0x7a23 033495 branch function_f3b_common 
+:      033498 function_f3b:
+0x7a24 033499 fetch 1 ,mem_ssp_mode_flag 
+0x7a25 033500 bne ssp_mode_passkey_entry_flag ,function_f3b_no_pin 
+:      033501 function_f3b_common:
+0x7a26 033502 setarg 0x363636 
+0x7a27 033503 lshift8 pdata ,temp 
+0x7a28 033504 or_into 0x36 ,temp 
+0x7a29 033505 arg mem_sp_dhkey_end ,contr 
+0x7a2a 033506 force 6 ,loopcnt 
+0x7a2b 033507 call pad_xor 
+0x7a2c 033508 call sha_init 
+0x7a2d 033509 call sha 
+0x7a2e 033511 arg mem_sp_random_local_end ,contr 
+0x7a2f 033512 arg memdat ,contw 
+0x7a30 033513 call memcpy_dword_swap4 
+0x7a31 033514 arg mem_sp_random_remote_end ,contr 
+0x7a32 033515 call memcpy_dword_swap4 
+:      033516 function_f3_common:
+0x7a33 033517 setarg 0x0 
+0x7a34 033518 istore 8 ,contw 
+0x7a35 033519 istore 4 ,contw 
+0x7a36 033520 fetch 4 ,mem_pin 
+0x7a37 033521 istore 4 ,contw 
+0x7a38 033523 copy contw ,temp 
+0x7a39 033524 jam 0x80 ,mem_addr_padding 
+0x7a3a 033525 copy temp ,contw 
+0x7a3b 033526 arg mem_addr_iocap_end ,contr 
+0x7a3c 033527 call memcpy_dword_swap4 
+0x7a3d 033529 call sha 
+0x7a3e 033531 arg memdat ,contw 
+0x7a3f 033532 force 7 ,loopcnt 
+0x7a40 033533 call memset0 
+0x7a41 033534 istore 4 ,contw 
+0x7a42 033535 setarg 0x03F8 
+0x7a43 033536 istore 4 ,contw 
+0x7a44 033537 call sha 
+0x7a45 033538 call sha_result 
+0x7a46 033540 arg memresult ,contr 
+0x7a47 033541 arg memahsave ,contw 
+0x7a48 033542 call memcpy32 
+0x7a49 033544 setarg 0x5c5c5c 
+0x7a4a 033545 lshift8 pdata ,temp 
+0x7a4b 033546 or_into 0x5c ,temp 
+0x7a4c 033547 arg mem_sp_dhkey_end ,contr 
+0x7a4d 033548 force 6 ,loopcnt 
+0x7a4e 033549 call pad_xor 
+0x7a4f 033550 call sha_init 
+0x7a50 033551 call sha 
+0x7a51 033552 arg memahsave_end ,contr 
+0x7a52 033553 arg memdat ,contw 
+0x7a53 033554 force 8 ,loopcnt 
+0x7a54 033555 call memcpy_dword_swap 
+0x7a55 033556 setarg 0x800000 
+0x7a56 033557 lshift8 pdata ,pdata 
+0x7a57 033558 istore 4 ,contw 
+0x7a58 033559 call bn_zero 
+0x7a59 033560 setarg 0x0300 
+0x7a5a 033561 istore 4 ,contw 
+0x7a5b 033562 call sha 
+0x7a5c 033563 branch sha_result 
+:      033570 eckp_calc_init:
+0x7a5d 033571 jam 192 ,mem_ec_loopc 
+:      033572 eckp_calc_init_1:
+0x7a5e 033573 fetch 1 ,mem_ec_loopc 
+0x7a5f 033574 rtn blank 
+0x7a60 033575 increase -1 ,pdata 
+0x7a61 033576 store 1 ,mem_ec_loopc 
+0x7a62 033577 arg mem_k ,contr 
+0x7a63 033578 call bn_testbit 
+0x7a64 033579 branch eckp_calc_init_1 ,true 
+0x7a65 033580 arg mem_ax ,contr 
+0x7a66 033581 arg mem_cx ,contw 
+0x7a67 033582 branch ec_copy 
+:      033584 eckp_calc:
+0x7a68 033585 call ecdbl 
+0x7a69 033586 fetch 1 ,mem_ec_loopc 
+0x7a6a 033587 increase -1 ,pdata 
+0x7a6b 033588 store 1 ,mem_ec_loopc 
+0x7a6c 033589 arg mem_k ,contr 
+0x7a6d 033590 call bn_testbit 
+0x7a6e 033591 rtn true 
+0x7a6f 033592 branch ecadd 
+:      033594 memcpy_dword_swap4:
+0x7a70 033595 force 4 ,loopcnt 
+:      033596 memcpy_dword_swap:
+0x7a71 033597 increase -4 ,contr 
+:      033598 memcpy_dword_swap_loop:
+0x7a72 033599 ifetch 4 ,contr 
+0x7a73 033600 istore 4 ,contw 
+0x7a74 033601 increase -8 ,contr 
+0x7a75 033602 loop memcpy_dword_swap_loop 
+0x7a76 033603 rtn 
+:      033608 sp_initialize_256:
+0x7a77 033609 bpatchx patch3d_7 ,mem_patch3d 
+0x7a78 033610 fetch 1 ,mem_le_secure_connect_enable 
+0x7a79 033611 branch le_secure_connection_disable ,blank 
+0x7a7a 033612 call le_secure_connection_enable 
+0x7a7b 033613 call sp_clear_flags 
+0x7a7c 033615 branch sp_pubkey_calc_256 
+:      033620 sp_pubkey_calc_256:
+0x7a7d 033621 fetch 1 ,mem_le_sc_local_key_invalid 
+0x7a7e 033622 rtnne sp_key_invalid 
+0x7a7f 033623 fetch 1 ,mem_le_sc_calc 
+0x7a80 033624 rtnne sp_calc_standby 
+0x7a81 033626 arg mem_le_private_key_256 ,contw 
+0x7a82 033627 force 15 ,queue 
+0x7a83 033628 call random_generator 
+0x7a84 033629 random pdata 
+0x7a85 033630 rshift pdata ,pdata 
+0x7a86 033631 istore 2 ,contw 
+0x7a87 033633 arg mem_k_256 ,contw 
+0x7a88 033634 arg mem_le_private_key_256 ,contr 
+0x7a89 033635 call memcpy32 
+0x7a8a 033637 arg mem_ax_256 ,contw 
+0x7a8b 033638 arg mem_gx_256 ,contr 
+0x7a8c 033639 call memcpy64 
+0x7a8d 033641 arg mem_az_256 ,contw 
+0x7a8e 033642 call clear_mem_256 
+0x7a8f 033643 jam 1 ,mem_az_256 
+0x7a90 033645 call eckp_calc_init_256 
+0x7a91 033646 jam sp_calc_pubkey_256 ,mem_le_sc_calc 
+0x7a92 033647 rtn 
+:      033649 sp_pubkey_generated_256:
+0x7a93 033650 arg mem_le_pubkey_local_x_256 ,contw 
+0x7a94 033651 arg mem_bx_256 ,contr 
+0x7a95 033652 call memcpy64 
+0x7a96 033653 jam sp_key_valid_256 ,mem_le_sc_local_key_invalid 
+0x7a97 033654 jam sp_calc_standby ,mem_le_sc_calc 
+0x7a98 033655 rtn 
+:      033659 sp_dhkey_calc_256:
+0x7a99 033660 fetch 1 ,mem_sp_dhkey_invalid 
+0x7a9a 033661 rtnne sp_key_invalid 
+0x7a9b 033662 fetch 1 ,mem_le_sc_calc 
+0x7a9c 033663 rtnne sp_calc_standby 
+0x7a9d 033665 arg mem_k_256 ,contw 
+0x7a9e 033666 arg mem_le_private_key_256 ,contr 
+0x7a9f 033667 call memcpy32 
+0x7aa0 033669 arg mem_ax_256 ,contw 
+0x7aa1 033670 arg mem_le_pubkey_remote_x_256 ,contr 
+0x7aa2 033671 call memcpy64 
+0x7aa3 033673 arg mem_az_256 ,contw 
+0x7aa4 033674 call clear_mem_256 
+0x7aa5 033675 jam 1 ,mem_az_256 
+0x7aa6 033677 call eckp_calc_init_256 
+0x7aa7 033678 jam sp_calc_dhkey_256 ,mem_le_sc_calc 
+0x7aa8 033679 rtn 
+:      033682 sp_dhkey_generated_256:
+0x7aa9 033684 arg mem_le_dhkey_256 ,contw 
+0x7aaa 033685 arg mem_bx_256 ,contr 
+0x7aab 033686 call memcpy32 
+0x7aac 033687 jam sp_key_valid_256 ,mem_sp_dhkey_invalid 
+0x7aad 033688 jam sp_calc_standby ,mem_le_sc_calc 
+0x7aae 033689 rtn 
+:      033693 sp_calc_sequence_256:
+0x7aaf 033694 fetch 1 ,mem_le_secure_connect_enable 
+0x7ab0 033695 rtn blank 
+0x7ab1 033696 fetch 1 ,mem_le_sc_calc 
+0x7ab2 033697 rtn blank 
+0x7ab3 033698 increase 0x80 ,pdata 
+0x7ab4 033699 store 1 ,mem_le_sc_calc 
+0x7ab5 033700 rtnbit1 7 
+0x7ab6 033701 fetch 2 ,mem_ec_loopc 
+0x7ab7 033702 branch sp_calc_sequence_done_256 ,blank 
+0x7ab8 033703 branch eckp_calc_256 
+:      033705 sp_calc_sequence_done_256:
+0x7ab9 033706 bpatchx patch3e_0 ,mem_patch3e 
+0x7aba 033707 call ecunmapz_256 
+0x7abb 033708 fetch 1 ,mem_le_sc_calc 
+0x7abc 033709 beq sp_calc_pubkey_256 ,sp_pubkey_generated_256 
+0x7abd 033710 beq sp_calc_dhkey_256 ,sp_dhkey_generated_256 
+0x7abe 033711 rtn 
+:      033714 eckp_calc_256:
+0x7abf 033715 call ecdbl_256 
+0x7ac0 033716 fetch 2 ,mem_ec_loopc 
+0x7ac1 033717 increase -1 ,pdata 
+0x7ac2 033718 store 2 ,mem_ec_loopc 
+0x7ac3 033719 arg mem_k_256 ,contr 
+0x7ac4 033720 call bn_testbit 
+0x7ac5 033721 rtn true 
+0x7ac6 033722 branch ecadd_256 
+:      033724 eckp_calc_init_256:
+0x7ac7 033725 bpatchx patch3e_1 ,mem_patch3e 
+0x7ac8 033726 setarg 256 ,pdata 
+0x7ac9 033727 store 2 ,mem_ec_loopc 
+:      033728 eckp_calc_init_256_1:
+0x7aca 033729 fetch 2 ,mem_ec_loopc 
+0x7acb 033730 rtn blank 
+0x7acc 033731 increase -1 ,pdata 
+0x7acd 033732 store 2 ,mem_ec_loopc 
+0x7ace 033733 arg mem_k_256 ,contr 
+0x7acf 033734 call bn_testbit 
+0x7ad0 033735 branch eckp_calc_init_256_1 ,true 
+0x7ad1 033736 arg mem_ax_256 ,contr 
+0x7ad2 033737 arg mem_cx_256 ,contw 
+0x7ad3 033738 branch memcpy96 
+:      033741 ecunmapz_256:
+0x7ad4 033742 arg mem_cz_256 ,rega 
+0x7ad5 033743 arg mem_t3_256 ,contw 
+0x7ad6 033744 call bn_invmod_256 
+0x7ad7 033745 arg mem_t3_256 ,rega 
+0x7ad8 033746 arg mem_t1_256 ,contw 
+0x7ad9 033747 call bn_sqrmod_256 
+0x7ada 033748 arg mem_cx_256 ,rega 
+0x7adb 033749 arg mem_t1_256 ,regb 
+0x7adc 033750 arg mem_bx_256 ,contw 
+0x7add 033751 call bn_mulmod_256 
+0x7ade 033752 arg mem_t3_256 ,rega 
+0x7adf 033753 arg mem_t1_256 ,regb 
+0x7ae0 033754 arg mem_t2_256 ,contw 
+0x7ae1 033755 call bn_mulmod_256 
+0x7ae2 033756 arg mem_cy_256 ,rega 
+0x7ae3 033757 arg mem_t2_256 ,regb 
+0x7ae4 033758 arg mem_by_256 ,contw 
+0x7ae5 033759 branch bn_mulmod_256 
+:      033761 ecdbl_256:
+0x7ae6 033762 arg mem_cz_256 ,rega 
+0x7ae7 033763 arg mem_t2_256 ,contw 
+0x7ae8 033764 call bn_sqrmod_256 
+0x7ae9 033765 arg mem_t2_256 ,rega 
+0x7aea 033766 arg mem_t3_256 ,contw 
+0x7aeb 033767 call bn_sqrmod_256 
+0x7aec 033769 arg mem_a_256 ,rega 
+0x7aed 033770 arg mem_t3_256 ,regb 
+0x7aee 033771 arg mem_t3_256 ,contw 
+0x7aef 033772 call bn_mulmod_256 
+0x7af0 033773 arg mem_cx_256 ,rega 
+0x7af1 033774 arg mem_t2_256 ,contw 
+0x7af2 033775 call bn_sqrmod_256 
+0x7af3 033777 arg mem_t2_256 ,contr 
+0x7af4 033778 arg mem_t1_256 ,contw 
+0x7af5 033779 call memcpy32 
+0x7af6 033780 arg mem_t1_256 ,rega 
+0x7af7 033781 call bn_lshiftmod_256 
+0x7af8 033782 arg mem_t2_256 ,rega 
+0x7af9 033783 arg mem_t1_256 ,regb 
+0x7afa 033784 arg mem_t2_256 ,contw 
+0x7afb 033785 call bn_addmod_256 
+0x7afc 033787 arg mem_t2_256 ,rega 
+0x7afd 033788 arg mem_t3_256 ,regb 
+0x7afe 033789 arg mem_t2_256 ,contw 
+0x7aff 033790 call bn_addmod_256 
+0x7b00 033792 arg mem_cx_256 ,contr 
+0x7b01 033793 arg mem_t1_256 ,contw 
+0x7b02 033794 call memcpy32 
+0x7b03 033795 arg mem_cy_256 ,rega 
+0x7b04 033796 arg mem_t3_256 ,contw 
+0x7b05 033797 call bn_sqrmod_256 
+0x7b06 033798 arg mem_t1_256 ,rega 
+0x7b07 033799 call bn_lshiftmod_256 
+0x7b08 033800 arg mem_t1_256 ,rega 
+0x7b09 033801 call bn_lshiftmod_256 
+0x7b0a 033802 arg mem_t1_256 ,rega 
+0x7b0b 033803 arg mem_t3_256 ,regb 
+0x7b0c 033804 arg mem_t1_256 ,contw 
+0x7b0d 033805 call bn_mulmod_256 
+0x7b0e 033806 arg mem_t3_256 ,rega 
+0x7b0f 033807 arg mem_t0_256 ,contw 
+0x7b10 033808 call bn_sqrmod_256 
+0x7b11 033809 arg mem_t0_256 ,rega 
+0x7b12 033810 call bn_lshiftmod_256 
+0x7b13 033811 arg mem_t0_256 ,rega 
+0x7b14 033812 call bn_lshiftmod_256 
+0x7b15 033813 arg mem_t0_256 ,rega 
+0x7b16 033814 call bn_lshiftmod_256 
+0x7b17 033815 arg mem_cy_256 ,contr 
+0x7b18 033816 arg mem_t3_256 ,contw 
+0x7b19 033817 call memcpy32 
+0x7b1a 033818 arg mem_t3_256 ,rega 
+0x7b1b 033819 call bn_lshiftmod_256 
+0x7b1c 033820 arg mem_t3_256 ,rega 
+0x7b1d 033821 arg mem_cz_256 ,regb 
+0x7b1e 033822 arg mem_cz_256 ,contw 
+0x7b1f 033823 call bn_mulmod_256 
+0x7b20 033826 arg mem_t2_256 ,rega 
+0x7b21 033827 arg mem_t3_256 ,contw 
+0x7b22 033828 call bn_sqrmod_256 
+0x7b23 033830 arg mem_t3_256 ,rega 
+0x7b24 033831 arg mem_t1_256 ,regb 
+0x7b25 033832 arg mem_t3_256 ,contw 
+0x7b26 033833 call bn_submod_256 
+0x7b27 033834 arg mem_t3_256 ,rega 
+0x7b28 033835 arg mem_t1_256 ,regb 
+0x7b29 033836 arg mem_cx_256 ,contw 
+0x7b2a 033837 call bn_submod_256 
+0x7b2b 033838 arg mem_t1_256 ,rega 
+0x7b2c 033839 arg mem_cx_256 ,regb 
+0x7b2d 033840 arg mem_t3_256 ,contw 
+0x7b2e 033841 call bn_submod_256 
+0x7b2f 033842 arg mem_t3_256 ,rega 
+0x7b30 033843 arg mem_t2_256 ,regb 
+0x7b31 033844 arg mem_t3_256 ,contw 
+0x7b32 033845 call bn_mulmod_256 
+0x7b33 033846 arg mem_t3_256 ,rega 
+0x7b34 033847 arg mem_t0_256 ,regb 
+0x7b35 033848 arg mem_cy_256 ,contw 
+0x7b36 033849 branch bn_submod_256 
+:      033851 ecadd_256:
+0x7b37 033853 arg mem_az_256 ,rega 
+0x7b38 033854 arg mem_t7_256 ,contw 
+0x7b39 033855 call bn_sqrmod_256 
+0x7b3a 033856 arg mem_cx_256 ,rega 
+0x7b3b 033857 arg mem_t7_256 ,regb 
+0x7b3c 033858 arg mem_t0_256 ,contw 
+0x7b3d 033859 call bn_mulmod_256 
+0x7b3e 033862 arg mem_az_256 ,rega 
+0x7b3f 033863 arg mem_t7_256 ,regb 
+0x7b40 033864 arg mem_t7_256 ,contw 
+0x7b41 033865 call bn_mulmod_256 
+0x7b42 033866 arg mem_cy_256 ,rega 
+0x7b43 033867 arg mem_t7_256 ,regb 
+0x7b44 033868 arg mem_t1_256 ,contw 
+0x7b45 033869 call bn_mulmod_256 
+0x7b46 033872 arg mem_cz_256 ,rega 
+0x7b47 033873 arg mem_t7_256 ,contw 
+0x7b48 033874 call bn_sqrmod_256 
+0x7b49 033875 arg mem_ax_256 ,rega 
+0x7b4a 033876 arg mem_t7_256 ,regb 
+0x7b4b 033877 arg mem_t2_256 ,contw 
+0x7b4c 033878 call bn_mulmod_256 
+0x7b4d 033880 arg mem_cz_256 ,rega 
+0x7b4e 033881 arg mem_t7_256 ,regb 
+0x7b4f 033882 arg mem_t7_256 ,contw 
+0x7b50 033883 call bn_mulmod_256 
+0x7b51 033884 arg mem_ay_256 ,rega 
+0x7b52 033885 arg mem_t7_256 ,regb 
+0x7b53 033886 arg mem_t3_256 ,contw 
+0x7b54 033887 call bn_mulmod_256 
+0x7b55 033892 arg mem_t0_256 ,regb 
+0x7b56 033893 arg mem_t2_256 ,rega 
+0x7b57 033894 arg mem_t7_256 ,contw 
+0x7b58 033895 call bn_submod_256 
+0x7b59 033896 arg mem_t0_256 ,rega 
+0x7b5a 033897 arg mem_t2_256 ,regb 
+0x7b5b 033898 arg mem_t0_256 ,contw 
+0x7b5c 033899 call bn_addmod_256 
+0x7b5d 033902 arg mem_t1_256 ,regb 
+0x7b5e 033903 arg mem_t3_256 ,rega 
+0x7b5f 033904 arg mem_t2_256 ,contw 
+0x7b60 033905 call bn_submod_256 
+0x7b61 033906 arg mem_t1_256 ,rega 
+0x7b62 033907 arg mem_t3_256 ,regb 
+0x7b63 033908 arg mem_t1_256 ,contw 
+0x7b64 033909 call bn_addmod_256 
+0x7b65 033910 arg mem_t1_256 ,rega 
+0x7b66 033911 arg mem_t7_256 ,regb 
+0x7b67 033912 arg mem_t1_256 ,contw 
+0x7b68 033913 call bn_mulmod_256 
+0x7b69 033914 arg mem_cz_256 ,rega 
+0x7b6a 033915 arg mem_az_256 ,regb 
+0x7b6b 033916 arg mem_t3_256 ,contw 
+0x7b6c 033917 call bn_mulmod_256 
+0x7b6d 033918 arg mem_t3_256 ,rega 
+0x7b6e 033919 arg mem_t7_256 ,regb 
+0x7b6f 033920 arg mem_cz_256 ,contw 
+0x7b70 033921 call bn_mulmod_256 
+0x7b71 033923 arg mem_t7_256 ,rega 
+0x7b72 033924 arg mem_t7_256 ,contw 
+0x7b73 033925 call bn_sqrmod_256 
+0x7b74 033926 arg mem_t7_256 ,rega 
+0x7b75 033927 arg mem_t0_256 ,regb 
+0x7b76 033928 arg mem_t3_256 ,contw 
+0x7b77 033929 call bn_mulmod_256 
+0x7b78 033930 arg mem_t7_256 ,rega 
+0x7b79 033931 arg mem_t1_256 ,regb 
+0x7b7a 033932 arg mem_t1_256 ,contw 
+0x7b7b 033933 call bn_mulmod_256 
+0x7b7c 033934 arg mem_t2_256 ,rega 
+0x7b7d 033935 arg mem_cx_256 ,contw 
+0x7b7e 033936 call bn_sqrmod_256 
+0x7b7f 033937 arg mem_cx_256 ,rega 
+0x7b80 033938 arg mem_t3_256 ,regb 
+0x7b81 033939 arg mem_cx_256 ,contw 
+0x7b82 033940 call bn_submod_256 
+0x7b83 033941 arg mem_cx_256 ,contr 
+0x7b84 033942 arg mem_t7_256 ,contw 
+0x7b85 033943 call memcpy32 
+0x7b86 033944 arg mem_t7_256 ,rega 
+0x7b87 033945 call bn_lshiftmod_256 
+0x7b88 033946 arg mem_t3_256 ,rega 
+0x7b89 033947 arg mem_t7_256 ,regb 
+0x7b8a 033948 arg mem_t3_256 ,contw 
+0x7b8b 033949 call bn_submod_256 
+0x7b8c 033950 arg mem_t3_256 ,rega 
+0x7b8d 033951 arg mem_t2_256 ,regb 
+0x7b8e 033952 arg mem_t2_256 ,contw 
+0x7b8f 033953 call bn_mulmod_256 
+0x7b90 033954 arg mem_t2_256 ,rega 
+0x7b91 033955 arg mem_t1_256 ,regb 
+0x7b92 033956 arg mem_cy_256 ,contw 
+0x7b93 033957 call bn_submod_256 
+0x7b94 033958 arg mem_cy_256 ,rega 
+0x7b95 033959 arg mem_p_256 ,regb 
+0x7b96 033960 arg mem_cy_256 ,contw 
+0x7b97 033961 force 0 ,regc 
+0x7b98 033962 fetch 1 ,mem_cy_256 
+0x7b99 033963 isolate1 0 ,pdata 
+0x7b9a 033964 call bn_add_256 ,true 
+0x7b9b 033965 copy regc ,alarm 
+0x7b9c 033966 arg mem_cy_256 ,rega 
+0x7b9d 033967 call bn_rshift_256 
+0x7b9e 033968 fetch 1 ,mem_cy5_256 
+0x7b9f 033969 isolate1 0 ,alarm 
+0x7ba0 033970 setflag true ,7 ,pdata 
+0x7ba1 033971 store 1 ,mem_cy5_256 
+0x7ba2 033972 rtn 
+:      033974 bn_invmod_256:
+0x7ba3 033975 copy contw ,timeup 
+0x7ba4 033976 arg mem_tmp0_256 ,contw 
+0x7ba5 033977 call clear_mem_256 
+0x7ba6 033978 force 0 ,pdata 
+0x7ba7 033980 store 4 ,mem_t2_256 
+0x7ba8 033981 jam 1 ,mem_tmp0_256 
+0x7ba9 033982 arg mem_tmp1_256 ,contw 
+0x7baa 033983 call clear_mem_512 
+0x7bab 033984 arg mem_p_256 ,contr 
+0x7bac 033985 arg mem_tmp2_256 ,contw 
+0x7bad 033986 call memcpy32 
+0x7bae 033987 copy rega ,contr 
+0x7baf 033988 arg mem_tmp3_256 ,contw 
+0x7bb0 033989 call memcpy32 
+:      033995 bn_invmod_256_2:
+0x7bb1 033996 arg mem_tmp3_256 ,contr 
+0x7bb2 033997 call bn_eq_zero_256 
+0x7bb3 033998 branch bn_invmod_256_0 ,blank 
+0x7bb4 034003 arg mem_tmp3_256 ,rega 
+0x7bb5 034004 arg mem_tmp0_256 ,regb 
+0x7bb6 034005 call bn_rshifteven_256 
+0x7bb7 034006 arg mem_tmp2_256 ,rega 
+0x7bb8 034007 arg mem_tmp1_256 ,regb 
+0x7bb9 034008 call bn_rshifteven_256 
+0x7bba 034010 arg mem_tmp3_256 ,rega 
+0x7bbb 034011 arg mem_tmp2_256 ,regb 
+0x7bbc 034012 call bn_bigeq_256 
+0x7bbd 034013 branch bn_invmod_256_1 ,positive 
+0x7bbe 034014 arg mem_tmp2_256 ,rega 
+0x7bbf 034015 arg mem_tmp3_256 ,regb 
+0x7bc0 034016 copy rega ,contw 
+0x7bc1 034017 call bn_sub_256 
+0x7bc2 034018 arg mem_tmp0_256 ,rega 
+0x7bc3 034019 arg mem_tmp1_256 ,regb 
+0x7bc4 034020 copy regb ,contw 
+0x7bc5 034021 call bn_add_256 
+0x7bc6 034022 ifetch 1 ,rega 
+0x7bc7 034023 iadd regc ,regc 
+0x7bc8 034024 ifetch 1 ,regb 
+0x7bc9 034025 iadd regc ,pdata 
+0x7bca 034026 istore 1 ,regb 
+0x7bcb 034027 branch bn_invmod_256_2 
+:      034028 bn_invmod_256_1:
+0x7bcc 034029 arg mem_tmp3_256 ,rega 
+0x7bcd 034030 arg mem_tmp2_256 ,regb 
+0x7bce 034031 copy rega ,contw 
+0x7bcf 034032 call bn_sub_256 
+0x7bd0 034033 arg mem_tmp1_256 ,rega 
+0x7bd1 034034 arg mem_tmp0_256 ,regb 
+0x7bd2 034035 copy regb ,contw 
+0x7bd3 034036 call bn_add_256 
+0x7bd4 034037 ifetch 1 ,rega 
+0x7bd5 034038 iadd regc ,regc 
+0x7bd6 034039 ifetch 1 ,regb 
+0x7bd7 034040 iadd regc ,pdata 
+0x7bd8 034041 istore 1 ,regb 
+0x7bd9 034042 branch bn_invmod_256_2 
+:      034043 bn_invmod_256_0:
+0x7bda 034045 arg mem_tmp1_256 ,rega 
+0x7bdb 034046 copy timeup ,contw 
+0x7bdc 034047 call bn_p256mod 
+0x7bdd 034049 arg mem_p_256 ,rega 
+0x7bde 034050 copy timeup ,regb 
+0x7bdf 034051 copy timeup ,contw 
+0x7be0 034052 branch bn_submod_256 
+:      034055 bn_mulmod_256:
+0x7be1 034056 copy contw ,timeup 
+0x7be2 034058 force 0 ,regext_index 
+0x7be3 034060 arg mem_tmp1_256 ,contw 
+0x7be4 034061 call clear_mem_512 
+0x7be5 034062 arg mem_regext ,contw 
+0x7be6 034063 call clear_mem_512 
+0x7be7 034067 copy rega ,contr 
+0x7be8 034069 jam 0 ,mem_regext 
+0x7be9 034070 setarg 0 
+0x7bea 034071 call bn_load_mem 
+0x7beb 034072 copy regb ,contr 
+0x7bec 034073 call bn_load_256 
+0x7bed 034076 force 0 ,queue 
+0x7bee 034077 arg mem_tmp1_256 ,contw 
+:      034078 bn_mulmod_256_1:
+0x7bef 034081 arg mem_regext ,temp 
+0x7bf0 034082 copy queue ,regb 
+0x7bf1 034083 lshift2 regb ,pdata 
+0x7bf2 034085 iadd temp ,regb 
+0x7bf3 034086 force 0 ,temp 
+0x7bf4 034087 force 0 ,regc 
+:      034088 bn_mulmod_256_0:
+0x7bf5 034093 ifetch 4 ,contw 
+0x7bf6 034094 iforce rega 
+0x7bf7 034097 ifetch 4 ,regb 
+0x7bf8 034098 copy regc ,regext_index 
+0x7bf9 034099 imul32 regext ,pdata 
+0x7bfa 034100 iadd rega ,pdata 
+0x7bfb 034101 iadd temp ,pdata 
+0x7bfc 034102 istore 4 ,contw 
+0x7bfd 034103 rshift32 pdata ,temp 
+0x7bfe 034104 increase 1 ,regc 
+0x7bff 034105 compare 8 ,regc ,0xff 
+0x7c00 034106 nbranch bn_mulmod_256_0 ,true 
+0x7c01 034108 deposit temp 
+0x7c02 034109 istore 4 ,contw 
+0x7c03 034110 increase -32 ,contw 
+0x7c04 034113 increase 1 ,queue 
+0x7c05 034114 compare 8 ,queue ,0xff 
+0x7c06 034115 nbranch bn_mulmod_256_1 ,true 
+0x7c07 034116 arg mem_tmp1_256 ,rega 
+0x7c08 034117 copy timeup ,contw 
+0x7c09 034118 branch bn_p256mod 
+:      034120 bn_p256mod:
+0x7c0a 034121 bpatchx patch3e_2 ,mem_patch3e 
+0x7c0b 034122 copy contw ,timeup 
+0x7c0c 034123 copy rega ,alarm 
+0x7c0d 034124 arg mem_tmp2_256 ,regb 
+0x7c0e 034125 copy regb ,contw 
+0x7c0f 034126 call memset0_4 
+0x7c10 034127 istore 8 ,contw 
+0x7c11 034128 add rega ,44 ,contr 
+0x7c12 034129 call memcpy8 
+0x7c13 034130 call memcpy12 
+0x7c14 034131 copy regb ,rega 
+0x7c15 034132 call bn_lshiftmod_256 
+0x7c16 034133 arg mem_tmp2_256 ,regb 
+0x7c17 034134 copy alarm ,rega 
+0x7c18 034135 copy timeup ,contw 
+0x7c19 034136 call bn_addmod_256 
+0x7c1a 034138 arg mem_tmp2_256 ,regb 
+0x7c1b 034139 copy regb ,contw 
+0x7c1c 034140 call memset0_4 
+0x7c1d 034141 istore 8 ,contw 
+0x7c1e 034142 add alarm ,48 ,contr 
+0x7c1f 034143 call memcpy16 
+0x7c20 034144 call memset0_4 
+0x7c21 034145 copy regb ,rega 
+0x7c22 034146 call bn_lshiftmod_256 
+0x7c23 034150 arg mem_tmp2_256 ,regb 
+0x7c24 034151 copy timeup ,rega 
+0x7c25 034152 copy rega ,contw 
+0x7c26 034153 call bn_addmod_256 
+0x7c27 034157 arg mem_tmp2_256 ,regb 
+0x7c28 034158 copy regb ,contw 
+0x7c29 034159 add alarm ,32 ,contr 
+0x7c2a 034160 call memcpy12 
+0x7c2b 034161 call memset0_4 
+0x7c2c 034162 istore 8 ,contw 
+0x7c2d 034163 add alarm ,56 ,contr 
+0x7c2e 034164 call memcpy8 
+0x7c2f 034165 copy timeup ,rega 
+0x7c30 034166 copy rega ,contw 
+0x7c31 034167 call bn_addmod_256 
+0x7c32 034171 arg mem_tmp2_256 ,regb 
+0x7c33 034172 copy regb ,contw 
+0x7c34 034173 add alarm ,36 ,contr 
+0x7c35 034174 call memcpy12 
+0x7c36 034175 add alarm ,52 ,contr 
+0x7c37 034176 call memcpy12 
+0x7c38 034177 add alarm ,52 ,contr 
+0x7c39 034178 call memcpy4 
+0x7c3a 034179 add alarm ,32 ,contr 
+0x7c3b 034180 call memcpy4 
+0x7c3c 034181 copy timeup ,rega 
+0x7c3d 034182 copy rega ,contw 
+0x7c3e 034183 call bn_addmod_256 
+0x7c3f 034186 arg mem_tmp2_256 ,regb 
+0x7c40 034187 copy regb ,contw 
+0x7c41 034188 add alarm ,44 ,contr 
+0x7c42 034189 call memcpy12 
+0x7c43 034190 call memset0_4 
+0x7c44 034191 istore 8 ,contw 
+0x7c45 034192 add alarm ,32 ,contr 
+0x7c46 034193 call memcpy4 
+0x7c47 034194 add alarm ,40 ,contr 
+0x7c48 034195 call memcpy4 
+0x7c49 034196 copy timeup ,rega 
+0x7c4a 034197 copy rega ,contw 
+0x7c4b 034198 call bn_submod_256 
+0x7c4c 034201 arg mem_tmp2_256 ,regb 
+0x7c4d 034202 copy regb ,contw 
+0x7c4e 034203 add alarm ,48 ,contr 
+0x7c4f 034204 call memcpy8 
+0x7c50 034205 call memcpy8 
+0x7c51 034206 force 0 ,pdata 
+0x7c52 034207 istore 8 ,contw 
+0x7c53 034208 add alarm ,36 ,contr 
+0x7c54 034209 call memcpy4 
+0x7c55 034210 add alarm ,44 ,contr 
+0x7c56 034211 call memcpy4 
+0x7c57 034212 copy timeup ,rega 
+0x7c58 034213 copy rega ,contw 
+0x7c59 034214 call bn_submod_256 
+0x7c5a 034217 arg mem_tmp2_256 ,regb 
+0x7c5b 034218 copy regb ,contw 
+0x7c5c 034219 add alarm ,52 ,contr 
+0x7c5d 034220 call memcpy12 
+0x7c5e 034221 add alarm ,32 ,contr 
+0x7c5f 034222 call memcpy12 
+0x7c60 034223 call memset0_4 
+0x7c61 034224 add alarm ,48 ,contr 
+0x7c62 034225 call memcpy4 
+0x7c63 034226 copy timeup ,rega 
+0x7c64 034227 copy rega ,contw 
+0x7c65 034228 call bn_submod_256 
+0x7c66 034231 arg mem_tmp2_256 ,regb 
+0x7c67 034232 copy regb ,contw 
+0x7c68 034233 add alarm ,56 ,contr 
+0x7c69 034234 call memcpy8 
+0x7c6a 034235 call memset0_4 
+0x7c6b 034236 add alarm ,36 ,contr 
+0x7c6c 034237 call memcpy12 
+0x7c6d 034238 call memset0_4 
+0x7c6e 034239 add alarm ,52 ,contr 
+0x7c6f 034240 call memcpy4 
+0x7c70 034241 copy timeup ,rega 
+0x7c71 034242 copy rega ,contw 
+0x7c72 034243 branch bn_submod_256 
+:      034246 bn_load_mem:
+0x7c73 034247 force 32 ,loopcnt 
+0x7c74 034248 arg mem_regext ,contw 
+0x7c75 034249 iadd contw ,contw 
+0x7c76 034250 branch memcpy 
+:      034252 bn_load_256:
+0x7c77 034253 force 8 ,loopcnt 
+0x7c78 034254 branch bn_load_0 
+:      034256 bn_sqrmod_256:
+0x7c79 034257 copy rega ,regb 
+0x7c7a 034258 branch bn_mulmod_256 
+:      034260 bn_add_256:
+0x7c7b 034261 force 8 ,loopcnt 
+0x7c7c 034262 branch bn_add + 1 
+:      034264 bn_addmod_256:
+0x7c7d 034265 call bn_add_256 
+0x7c7e 034266 copy contw ,rega 
+0x7c7f 034267 branch bn_lshiftmod_ismod_256 
+:      034269 bn_lshiftmod_256:
+0x7c80 034270 call bn_lshift_256 
+:      034271 bn_lshiftmod_ismod_256:
+0x7c81 034272 isolate1 0 ,regc 
+0x7c82 034273 branch bn_lshiftmod_p_256 ,true 
+0x7c83 034274 arg mem_p_256 ,regb 
+0x7c84 034275 copy rega ,regc 
+0x7c85 034276 increase -32 ,rega 
+0x7c86 034277 call bn_bigeq_256 
+0x7c87 034278 nrtn positive 
+0x7c88 034279 copy regc ,rega 
+0x7c89 034280 branch sub_p2_256 
+:      034282 bn_lshiftmod_p_256:
+0x7c8a 034283 call sub_p2_256 
+0x7c8b 034285 copy rega ,regc 
+0x7c8c 034286 increase -32 ,rega 
+0x7c8d 034287 arg mem_p_256 ,regb 
+0x7c8e 034288 call bn_bigeq_256 
+0x7c8f 034289 nrtn positive 
+0x7c90 034290 copy regc ,rega 
+0x7c91 034291 branch sub_p2_256 
+:      034294 sub_p2_256:
+0x7c92 034295 increase -32 ,rega 
+0x7c93 034296 arg mem_p_256 ,regb 
+0x7c94 034297 copy rega ,contw 
+0x7c95 034298 branch bn_sub_256 
+:      034303 bn_submod_256:
+0x7c96 034304 call bn_sub_256 
+0x7c97 034306 branch bn_submod_256_np ,true 
+0x7c98 034309 add contw ,-32 ,rega 
+0x7c99 034310 arg mem_p_256 ,regb 
+0x7c9a 034311 call bn_bigeq_256 
+0x7c9b 034312 nrtn positive 
+0x7c9c 034313 arg mem_p_256 ,regb 
+0x7c9d 034314 add contw ,-32 ,rega 
+0x7c9e 034316 copy rega ,contw 
+0x7c9f 034317 branch bn_sub_256 
+:      034318 bn_submod_256_np:
+0x7ca0 034319 add contw ,-32 ,rega 
+0x7ca1 034320 arg mem_p_256 ,regb 
+0x7ca2 034321 copy rega ,contw 
+0x7ca3 034322 call bn_add_256 
+0x7ca4 034324 rtn true 
+0x7ca5 034325 add contw ,-32 ,rega 
+0x7ca6 034326 arg mem_p_256 ,regb 
+0x7ca7 034327 copy rega ,contw 
+0x7ca8 034328 branch bn_add_256 
+:      034332 bn_sub_256:
+0x7ca9 034333 force 8 ,loopcnt 
+0x7caa 034334 branch bn_sub + 1 
+:      034336 bn_rshift_256:
+0x7cab 034337 force 8 ,loopcnt 
+0x7cac 034338 increase 28 ,rega 
+0x7cad 034339 branch bn_rshift 
+:      034341 bn_lshift_256:
+0x7cae 034342 force 8 ,loopcnt 
+0x7caf 034343 force 0 ,regc 
+0x7cb0 034344 branch bn_lshift_0 
+:      034346 bn_bigeq_256:
+0x7cb1 034347 force 8 ,loopcnt 
+0x7cb2 034348 increase 28 ,rega 
+0x7cb3 034349 increase 28 ,regb 
+0x7cb4 034350 branch bn_bigeq_0 
+:      034353 bn_eq_zero_256:
+0x7cb5 034354 ifetch 8 ,contr 
+0x7cb6 034355 nrtn blank 
+0x7cb7 034356 branch bn_eq_zero 
+:      034361 bn_rshifteven_256:
+0x7cb8 034362 copy rega ,alarm 
+:      034363 bn_rshifteven_256_1:
+0x7cb9 034364 copy alarm ,rega 
+0x7cba 034365 ifetch 1 ,rega 
+0x7cbb 034366 isolate1 0 ,pdata 
+0x7cbc 034367 rtn true 
+0x7cbd 034368 call bn_rshift_256 
+0x7cbe 034369 ifetch 1 ,regb 
+0x7cbf 034370 isolate0 0 ,pdata 
+0x7cc0 034371 branch bn_rshifteven_256_0 ,true 
+0x7cc1 034372 arg mem_p_256 ,rega 
+0x7cc2 034373 copy regb ,contw 
+0x7cc3 034374 call bn_add_256 
+0x7cc4 034375 ifetch 1 ,regb 
+0x7cc5 034376 iadd regc ,pdata 
+0x7cc6 034377 istore 1 ,regb 
+0x7cc7 034378 increase -32 ,regb 
+:      034379 bn_rshifteven_256_0:
+0x7cc8 034380 add regb ,32 ,rega 
+0x7cc9 034381 force 9 ,loopcnt 
+0x7cca 034382 call bn_rshift 
+0x7ccb 034383 branch bn_rshifteven_256_1 
+:      034387 ui_init:
+0x7ccc 034388 call lpm_disable_exen_output 
+0x7ccd 034389 rtn wake 
+0x7cce 034390 call ui_button_init 
+0x7ccf 034391 call ui_timer_init 
+0x7cd0 034392 branch ui_led_init_global 
+:      034394 ui_dispatch:
+0x7cd1 034395 call ui_led_dispatch 
+0x7cd2 034397 branch ui_timer_check 
+:      034399 ui_button_init:
+0x7cd3 034400 fetch 1 ,mem_ui_button_gpio 
+0x7cd4 034401 rtneq ui_button_gpio_disable 
+0x7cd5 034402 iforce temp 
+0x7cd6 034403 call gpio_config_output 
+0x7cd7 034404 fetcht 1 ,mem_ui_button_gpio 
+0x7cd8 034405 call gpio_out_inactive 
+0x7cd9 034406 nop 100 
+0x7cda 034407 fetcht 1 ,mem_ui_button_gpio 
+0x7cdb 034408 call gpio_config_input 
+0x7cdc 034409 branch ui_button_polling 
+:      034413 ui_button_polling:
+0x7cdd 034414 bpatchx patch3e_3 ,mem_patch3e 
+0x7cde 034415 fetch 1 ,mem_ui_button_gpio 
+0x7cdf 034416 rtneq ui_button_gpio_disable 
+0x7ce0 034417 copy pdata ,temp 
+0x7ce1 034418 call gpio_get_bit 
+0x7ce2 034419 nbranch ui_button_up ,true 
+:      034421 ui_button_down:
+0x7ce3 034422 call ui_button_check_long_press 
+0x7ce4 034423 fetch 2 ,mem_ui_state_map 
+0x7ce5 034424 set1 ui_state_btn_down 
+0x7ce6 034425 store 2 ,mem_ui_state_map 
+0x7ce7 034426 fetch 1 ,mem_ui_button_last_state 
+0x7ce8 034427 rtneq ui_button_state_down 
+0x7ce9 034428 jam ui_button_state_down ,mem_ui_button_last_state 
+0x7cea 034430 fetch 1 ,mem_ui_button_timeout 
+0x7ceb 034431 store 1 ,mem_ui_button_timer 
+0x7cec 034432 call lpm_button_get_wake_lock 
+0x7ced 034433 jam bt_evt_button_down ,mem_fifo_temp 
+0x7cee 034434 branch ui_ipc_send_event 
+:      034435 ui_button_up:
+0x7cef 034436 fetch 2 ,mem_ui_state_map 
+0x7cf0 034437 set0 ui_state_btn_down 
+0x7cf1 034438 store 2 ,mem_ui_state_map 
+0x7cf2 034439 fetch 1 ,mem_ui_button_last_state 
+0x7cf3 034440 rtneq ui_button_state_up 
+0x7cf4 034441 jam ui_button_state_up ,mem_ui_button_last_state 
+0x7cf5 034443 jam 0 ,mem_ui_button_timer 
+0x7cf6 034444 call lpm_button_clean_wake_lock 
+0x7cf7 034445 jam bt_evt_button_up ,mem_fifo_temp 
+0x7cf8 034446 branch ui_ipc_send_event 
+:      034448 ui_button_check_long_press:
+0x7cf9 034449 fetch 1 ,mem_ui_button_timer 
+0x7cfa 034450 rtn blank 
+0x7cfb 034451 increase -1 ,pdata 
+0x7cfc 034452 store 1 ,mem_ui_button_timer 
+0x7cfd 034453 nrtn blank 
+0x7cfe 034455 jam bt_evt_button_long_pressed ,mem_fifo_temp 
+0x7cff 034456 branch ui_ipc_send_event 
+:      034458 lpm_button_get_wake_lock:
+0x7d00 034459 arg wake_lock_button ,queue 
+0x7d01 034460 branch lpm_get_wake_lock 
+:      034462 lpm_button_clean_wake_lock:
+0x7d02 034463 arg wake_lock_button ,queue 
+0x7d03 034464 branch lpm_put_wake_lock 
+:      034486 calc_curr_struct_prt:
+0x7d04 034487 fetch 2 ,mem_ui_led_struct_ptr 
+0x7d05 034488 mul32 rega ,led_offset_length ,regb 
+0x7d06 034489 iadd regb ,regb 
+0x7d07 034490 rtn 
+:      034493 ui_led_init_global:
+0x7d08 034494 fetch 1 ,mem_ui_led_struct_num 
+0x7d09 034495 rtn blank 
+0x7d0a 034496 copy pdata ,loopcnt 
+0x7d0b 034497 fetch 2 ,mem_ui_led_struct_ptr 
+0x7d0c 034498 copy pdata ,regb 
+:      034499 ui_led_init_loop:
+0x7d0d 034500 add regb ,led_offset_led_gpio ,regc 
+0x7d0e 034501 ifetcht 1 ,regc 
+0x7d0f 034502 call gpio_config_output 
+0x7d10 034503 call ui_led_off_static 
+0x7d11 034504 increase led_offset_length ,regb 
+0x7d12 034505 loop ui_led_init_loop 
+0x7d13 034506 rtn 
+:      034510 ui_led_on_global:
+0x7d14 034511 call calc_curr_struct_prt 
+0x7d15 034512 setarg ui_led_state_lighting 
+0x7d16 034513 istore 1 ,regb 
+0x7d17 034514 call ui_led_stop_timer 
+0x7d18 034515 branch ui_led_on_static 
+:      034519 ui_led_blink_stop_global:
+:      034520 ui_led_off_global:
+0x7d19 034521 call calc_curr_struct_prt 
+0x7d1a 034522 setarg ui_led_state_darking 
+0x7d1b 034523 istore 1 ,regb 
+0x7d1c 034524 call ui_led_stop_timer 
+0x7d1d 034525 branch ui_led_off_static 
+:      034529 ui_led_blink_start_global:
+0x7d1e 034530 call calc_curr_struct_prt 
+0x7d1f 034531 setarg ui_led_state_blink_start 
+0x7d20 034532 istore 1 ,regb 
+0x7d21 034533 setarg led_infinite_flash_num 
+0x7d22 034534 istore 1 ,contw 
+0x7d23 034535 branch ui_led_off_static 
+:      034540 ui_led_set_style_global:
+0x7d24 034541 call calc_curr_struct_prt 
+0x7d25 034542 arg led_offset_length ,loopcnt 
+0x7d26 034543 copy regc ,contr 
+0x7d27 034544 copy regb ,contw 
+0x7d28 034545 branch memcpy_fast 
+:      034549 ui_led_dispatch:
+0x7d29 034550 fetch 1 ,mem_ui_led_struct_num 
+0x7d2a 034551 rtn blank 
+0x7d2b 034552 arg 0 ,rega 
+:      034553 ui_led_blink_polling:
+0x7d2c 034554 call ui_led_change_style_by_type 
+0x7d2d 034555 increase 1 ,rega 
+0x7d2e 034556 fetch 1 ,mem_ui_led_struct_num 
+0x7d2f 034557 isub rega ,null 
+0x7d30 034558 rtn zero 
+0x7d31 034559 branch ui_led_blink_polling 
+:      034562 ui_led_off_static:
+0x7d32 034563 add regb ,led_offset_led_gpio ,regc 
+0x7d33 034564 ifetcht 1 ,regc 
+0x7d34 034565 branch gpio_out_inactive 
+:      034568 ui_led_on_static:
+0x7d35 034569 add regb ,led_offset_led_gpio ,regc 
+0x7d36 034570 ifetcht 1 ,regc 
+0x7d37 034571 branch gpio_out_active 
+:      034575 ui_led_change_style_by_type:
+0x7d38 034576 add rega ,ui_led_blink ,queue 
+0x7d39 034577 call timer_check 
+0x7d3a 034578 nrtn blank 
+0x7d3b 034580 call calc_curr_struct_prt 
+0x7d3c 034582 ifetch 1 ,regb 
+0x7d3d 034584 beq ui_led_state_lighting ,ui_led_on_static 
+0x7d3e 034585 beq ui_led_state_darking ,ui_led_off_static 
+0x7d3f 034586 beq ui_led_state_blink_stop ,ui_led_off_static 
+0x7d40 034587 beq ui_led_state_blink_darking ,ui_led_blink_state_darking 
+:      034588 ui_led_blink_state_lighting:
+0x7d41 034589 call ui_led_on_static 
+0x7d42 034590 add regb ,led_offset_cb_ledon ,regc 
+0x7d43 034591 call push_stack 
+0x7d44 034592 ifetch 2 ,regc 
+0x7d45 034593 call callback_func 
+0x7d46 034594 call pop_stack 
+0x7d47 034595 setarg ui_led_state_blink_darking 
+0x7d48 034596 istore 1 ,regb 
+0x7d49 034597 add regb ,led_offset_on_time ,regc 
+0x7d4a 034598 ifetch 2 ,regc 
+0x7d4b 034599 branch ui_led_blink_timer_start 
+:      034602 ui_led_blink_state_darking:
+0x7d4c 034603 call ui_led_off_static 
+0x7d4d 034604 add regb ,led_offset_cb_ledoff ,regc 
+0x7d4e 034605 call push_stack 
+0x7d4f 034606 ifetch 2 ,regc 
+0x7d50 034607 call callback_func 
+0x7d51 034608 call pop_stack 
+0x7d52 034610 add regb ,led_offset_blink_count ,regc 
+0x7d53 034611 ifetch 1 ,regc 
+0x7d54 034612 beq led_infinite_flash_num ,ui_led_blink_infinite 
+0x7d55 034613 increase -1 ,pdata 
+0x7d56 034614 istore 1 ,regc 
+0x7d57 034615 branch ui_led_blink_stop_global ,blank 
+:      034616 ui_led_blink_infinite:
+0x7d58 034617 setarg ui_led_state_blink_lighting 
+0x7d59 034618 istore 1 ,regb 
+0x7d5a 034619 add regb ,led_offset_off_time ,regc 
+0x7d5b 034620 ifetch 2 ,regc 
+:      034621 ui_led_blink_timer_start:
+0x7d5c 034622 add rega ,ui_led_blink ,queue 
+0x7d5d 034623 branch timer_init 
+:      034625 ui_led_stop_timer:
+0x7d5e 034626 setarg 0 
+0x7d5f 034627 branch ui_led_blink_timer_start 
+:      034633 ui_timer_timeout:
+0x7d60 034634 setarg 0x1000 
+0x7d61 034635 lshift16 pdata ,pdata 
+0x7d62 034636 iadd regb ,regb 
+0x7d63 034637 rtn 
+:      034639 ui_timer_check:
+0x7d64 034640 bpatchx patch3e_4 ,mem_patch3e 
+0x7d65 034641 arg 0 ,rega 
+0x7d66 034642 fetcht 4 ,mem_ui_timer_last_btclk 
+0x7d67 034643 copy clkn_bt ,regb 
+0x7d68 034644 copy regb ,pdata 
+0x7d69 034645 isub temp ,null 
+0x7d6a 034646 ncall ui_timer_timeout ,positive 
+:      034648 ui_timer_check_loop:
+0x7d6b 034649 copy regb ,pdata 
+0x7d6c 034650 increase 160 ,temp 
+0x7d6d 034651 increase 160 ,temp 
+0x7d6e 034652 isub temp ,null 
+0x7d6f 034653 nbranch ui_timer_check_end ,positive 
+0x7d70 034654 increase 1 ,rega 
+0x7d71 034655 and rega ,0x0f ,pdata 
+0x7d72 034656 nbranch ui_timer_check_loop ,blank 
+0x7d73 034657 arg 0 ,rega 
+0x7d74 034658 call ui_timer_check_send_evt 
+:      034659 ui_timer_init:
+0x7d75 034660 copy clkn_bt ,pdata 
+0x7d76 034661 store 4 ,mem_ui_timer_last_btclk 
+0x7d77 034662 rtn 
+:      034663 ui_timer_check_end:
+0x7d78 034664 bpatchx patch3e_5 ,mem_patch3e 
+0x7d79 034665 copy rega ,pdata 
+0x7d7a 034666 rtn blank 
+0x7d7b 034667 increase -160 ,temp 
+0x7d7c 034668 increase -160 ,temp 
+0x7d7d 034669 set0 28 ,temp 
+0x7d7e 034670 storet 4 ,mem_ui_timer_last_btclk 
+:      034671 ui_timer_check_send_evt:
+0x7d7f 034672 branch app_evt_timer 
+:      034679 ui_ipc_get_lock:
+0x7d80 034680 jam 1 ,mem_ipc_lock_bt 
+:      034681 ui_ipc_get_lock_wait:
+0x7d81 034682 fetch 1 ,mem_ipc_lock_c51 
+0x7d82 034683 nbranch ui_ipc_get_lock_wait ,blank 
+0x7d83 034684 rtn 
+:      034686 ui_ipc_put_lock:
+0x7d84 034687 jam 0 ,mem_ipc_lock_bt 
+0x7d85 034688 rtn 
+:      034692 ui_ipc_send_event:
+0x7d86 034693 bpatchx patch3e_6 ,mem_patch3e 
+0x7d87 034694 call ui_ipc_get_lock 
+0x7d88 034695 copy rega ,pdata 
+0x7d89 034696 store 4 ,mem_ipc_rega_temp 
+0x7d8a 034697 arg mem_ipc_fifo_bt2c51 ,rega 
+0x7d8b 034698 call fifo_in 
+0x7d8c 034699 fetch 4 ,mem_ipc_rega_temp 
+0x7d8d 034700 copy pdata ,rega 
+0x7d8e 034701 branch ui_ipc_put_lock 
+:      034703 ui_ipc_send_cmd:
+0x7d8f 034704 bpatchx patch3e_7 ,mem_patch3e 
+0x7d90 034705 call ui_ipc_get_lock 
+0x7d91 034706 copy rega ,pdata 
+0x7d92 034707 store 4 ,mem_ipc_rega_temp 
+0x7d93 034708 arg mem_ipc_fifo_c512bt ,rega 
+0x7d94 034709 call fifo_in 
+0x7d95 034710 fetch 4 ,mem_ipc_rega_temp 
+0x7d96 034711 copy pdata ,rega 
+0x7d97 034712 branch ui_ipc_put_lock 
+:      034714 ui_ipc_clean_all_fifo:
+0x7d98 034715 setarg 0 
+0x7d99 034716 store util_fifo_len ,mem_ipc_fifo_c512bt 
+0x7d9a 034717 store util_fifo_len ,mem_ipc_fifo_bt2c51 
+0x7d9b 034718 rtn 
+:      034720 check_51cmd:
+0x7d9c 034721 bpatchx patch3f_0 ,mem_patch3f 
+0x7d9d 034722 fetch 1 ,mem_hci_cmd 
+0x7d9e 034723 nrtn blank 
+0x7d9f 034724 arg mem_ipc_fifo_c512bt ,rega 
+0x7da0 034725 call fifo_is_empty 
+0x7da1 034726 rtn blank 
+0x7da2 034727 jam ipc_continue_process ,mem_ipc_skip_continue_proc 
+0x7da3 034728 call check_51cmd_once 
+0x7da4 034729 fetch 1 ,mem_ipc_skip_continue_proc 
+0x7da5 034730 branch check_51cmd ,blank 
+0x7da6 034731 rtn 
+:      034733 check_51cmd_once:
+0x7da7 034734 call ui_ipc_get_lock 
+0x7da8 034735 arg mem_ipc_fifo_c512bt ,rega 
+0x7da9 034736 call fifo_out 
+0x7daa 034737 copy pdata ,temp 
+0x7dab 034738 call ui_ipc_put_lock 
+0x7dac 034739 bpatchx patch3f_1 ,mem_patch3f 
+0x7dad 034740 copy temp ,pdata 
+0x7dae 034741 rtn blank 
+0x7daf 034742 beq bt_cmd_start_discovery ,check_51cmd_start_discovery 
+0x7db0 034743 beq bt_cmd_stop_discovery ,check_51cmd_stop_discovery 
+0x7db1 034744 beq bt_cmd_reconnect ,check_51cmd_reconnect 
+0x7db2 034745 beq bt_cmd_enter_sniff_subrating ,check_51cmd_enter_sniff_subrating 
+0x7db3 034746 beq bt_cmd_exit_sniff_subrating ,check_51cmd_exit_sniff_subrating 
+0x7db4 034747 beq bt_cmd_sniff_test ,check_51cmd_sniff_test 
+0x7db5 034748 beq bt_cmd_start_inquiry ,check_51cmd_inq 
+0x7db6 034749 beq bt_cmd_stop_inquiry ,check_51cmd_stop_inq 
+0x7db7 034750 beq bt_cmd_start_adv ,check_51cmd_adv 
+0x7db8 034751 beq bt_cmd_stop_adv ,check_51cmd_stop_adv 
+0x7db9 034752 beq bt_cmd_start_direct_adv ,check_51cmd_direct_adv 
+0x7dba 034753 beq bt_cmd_stop_direct_adv ,check_51cmd_stop_direct_adv 
+0x7dbb 034754 beq bt_cmd_led_off ,check_51cmd_led_off 
+0x7dbc 034755 beq bt_cmd_led_on ,check_51cmd_led_on 
+0x7dbd 034756 beq bt_cmd_led_blink ,check_51cmd_led_start_blink 
+0x7dbe 034757 beq bt_cmd_le_start_conn ,check_51cmd_le_start_con 
+0x7dbf 034758 beq bt_cmd_le_start_scan ,check_51cmd_start_scan 
+0x7dc0 034759 beq bt_cmd_le_stop_scan ,check_51cmd_stop_scan 
+0x7dc1 034760 beq bt_cmd_enter_hibernate ,check_51cmd_hibernate 
+0x7dc2 034761 beq bt_cmd_le_smp_security_request ,check_51cmd_le_smp_sec_req 
+0x7dc3 034762 beq bt_cmd_bb_reconn_cancel ,check_51cmd_bb_reconn_cancel 
+0x7dc4 034764 store 1 ,mem_fifo_temp 
+0x7dc5 034765 bpatchx patch3f_2 ,mem_patch3f 
+0x7dc6 034766 call lmo_fifo_check 
+0x7dc7 034767 nbranch check_51cmd_restore ,blank 
+:      034768 check_51cmd_once_continue:
+0x7dc8 034769 fetch 1 ,mem_fifo_temp 
+0x7dc9 034770 bmark0 mark_context ,check_51cmd_check_idle 
+0x7dca 034771 beq bt_cmd_disconnect ,check_51cmd_disconnect 
+0x7dcb 034772 beq bt_cmd_enter_sniff ,cmd_in_sniff 
+0x7dcc 034773 beq bt_cmd_exit_sniff ,cmd_exit_sniff 
+0x7dcd 034774 beq bt_cmd_set_pin_code ,check_51cmd_pincode 
+0x7dce 034775 beq bt_cmd_le_disconnect ,check_51cmd_le_disconnect 
+0x7dcf 034776 beq bt_cmd_le_update_conn ,check_51cmd_ble_update_connect_param 
+0x7dd0 034777 beq bt_cmd_role_switch ,check_51cmd_role_switch 
+0x7dd1 034778 beq bt_cmd_store_reconn_info_le ,eeprom_store_le_reconn_info 
+0x7dd2 034779 beq bt_cmd_store_reconn_info_bt ,eeprom_store_bd_reconn_info 
+0x7dd3 034780 beq bt_cmd_dhkey_not_accept ,check_51cmd_dhkey_not_accept 
+0x7dd4 034781 beq bt_cmd_store_reconn_info ,check_51cmd_store_reconn_info 
+0x7dd5 034782 rtn 
+:      034784 check_51cmd_check_idle:
+0x7dd6 034785 store 1 ,mem_fifo_temp 
+0x7dd7 034786 call context_check_idle 
+0x7dd8 034787 branch check_51cmd_restore ,zero 
+0x7dd9 034788 call context_search_plap 
+0x7dda 034789 nrtn zero 
+:      034790 check_51cmd_restore:
+0x7ddb 034791 jam ipc_skip_continue_process ,mem_ipc_skip_continue_proc 
+0x7ddc 034792 branch ui_ipc_send_cmd 
+:      034797 check_51cmd_start_discovery:
+0x7ddd 034798 fetch 2 ,mem_ui_state_map 
+0x7dde 034799 set1 ui_state_bt_discovery 
+0x7ddf 034800 store 2 ,mem_ui_state_map 
+0x7de0 034801 jam 3 ,mem_scan_mode 
+0x7de1 034802 rtn 
+:      034806 check_51cmd_stop_discovery:
+0x7de2 034807 jam 0 ,mem_hid_handshake_timer_count 
+0x7de3 034808 jam 0 ,mem_scan_mode 
+0x7de4 034809 fetch 2 ,mem_ui_state_map 
+0x7de5 034810 set0 ui_state_bt_discovery 
+0x7de6 034811 store 2 ,mem_ui_state_map 
+0x7de7 034812 rtn 
+:      034816 check_51cmd_reconnect:
+0x7de8 034817 jam hci_cmd_create_conn ,mem_hci_cmd 
+0x7de9 034818 rtn 
+:      034822 check_51cmd_disconnect:
+0x7dea 034823 jam lmp_detach ,mem_lmo_opcode2 
+0x7deb 034824 jam other_end_terminated ,mem_disconn_reason_send 
+0x7dec 034825 rtn 
+:      034829 check_51cmd_enter_sniff_subrating:
+0x7ded 034830 rtn 
+:      034834 check_51cmd_exit_sniff_subrating:
+0x7dee 034835 rtn 
+:      034839 check_51cmd_sniff_test:
+0x7def 034840 rtn 
+:      034844 check_51cmd_pincode:
+0x7df0 034845 jam pincode_state_pincode_ready ,mem_pincode_state 
+0x7df1 034846 branch cmd_pair 
+:      034850 check_51cmd_inq:
+0x7df2 034851 rtn 
+:      034855 check_51cmd_stop_inq:
+0x7df3 034856 rtn 
+:      034860 check_51cmd_adv:
+0x7df4 034861 jam on ,mem_le_adv_enable 
+0x7df5 034862 jam adv_ind ,mem_le_adv_type 
+0x7df6 034863 fetch 2 ,mem_ui_state_map 
+0x7df7 034864 set1 ui_state_ble_adv ,pdata 
+0x7df8 034865 store 2 ,mem_ui_state_map 
+0x7df9 034866 rtn 
+:      034870 check_51cmd_stop_adv:
+0x7dfa 034871 fetch 2 ,mem_ui_state_map 
+0x7dfb 034872 set0 ui_state_ble_adv ,pdata 
+0x7dfc 034873 store 2 ,mem_ui_state_map 
+0x7dfd 034874 jam off ,mem_le_adv_enable 
+0x7dfe 034875 rtn 
+:      034879 check_51cmd_direct_adv:
+0x7dff 034880 jam on ,mem_le_adv_enable 
+0x7e00 034881 jam adv_direct_ind ,mem_le_adv_type 
+0x7e01 034882 fetch 2 ,mem_ui_state_map 
+0x7e02 034883 set1 ui_state_ble_adv ,pdata 
+0x7e03 034884 store 2 ,mem_ui_state_map 
+0x7e04 034885 rtn 
+:      034889 check_51cmd_stop_direct_adv:
+0x7e05 034890 fetch 2 ,mem_ui_state_map 
+0x7e06 034891 set0 ui_state_ble_adv ,pdata 
+0x7e07 034892 store 2 ,mem_ui_state_map 
+0x7e08 034893 jam off ,mem_le_adv_enable 
+0x7e09 034894 rtn 
+:      034898 check_51cmd_le_disconnect:
+0x7e0a 034899 setarg 20 
+0x7e0b 034900 store 2 ,mem_le_superto 
+0x7e0c 034901 store 2 ,mem_le_init_superto 
+0x7e0d 034902 branch le_send_terminate_ind_user_terminated 
+:      034906 check_51cmd_ble_update_connect_param:
+0x7e0e 034907 branch le_l2cap_tx_update_req 
+:      034911 check_51cmd_led_off:
+0x7e0f 034912 arg 0 ,rega 
+0x7e10 034913 branch ui_led_off_global 
+:      034917 check_51cmd_led_on:
+0x7e11 034918 arg 0 ,rega 
+0x7e12 034919 branch ui_led_on_global 
+:      034923 check_51cmd_led_start_blink:
+0x7e13 034924 arg 0 ,rega 
+0x7e14 034925 branch ui_led_blink_start_global 
+:      034929 check_51cmd_le_start_con:
+0x7e15 034930 jam on ,mem_le_scan_enable 
+0x7e16 034931 jam hci_cmd_le_create_conn ,mem_hci_cmd 
+0x7e17 034934 rtn 
+:      034938 check_51cmd_start_scan:
+0x7e18 034939 jam on ,mem_le_scan_enable 
+0x7e19 034940 rtn 
+:      034944 check_51cmd_stop_scan:
+0x7e1a 034945 jam off ,mem_le_scan_enable 
+0x7e1b 034946 jam 0 ,mem_hci_cmd 
+0x7e1c 034947 rtn 
+:      034951 check_51cmd_hibernate:
+0x7e1d 034952 fetch 2 ,mem_cb_before_hibernate 
+0x7e1e 034953 call callback_func 
+0x7e1f 034954 fetch 1 ,mem_ui_button_gpio 
+0x7e20 034955 beq ui_button_gpio_disable ,check_51cmd_hibernate_btn_disabled 
+0x7e21 034956 copy pdata ,temp 
+0x7e22 034957 call gpio_config_input 
+:      034958 check_51cmd_hibernate_btn_disabled:
+0x7e23 034959 call ui_ipc_clean_all_fifo 
+0x7e24 034960 branch lpm_hibernate 
+:      034964 check_51cmd_le_smp_sec_req:
+0x7e25 034965 branch le_send_smp_security_request 
+:      034969 check_51cmd_role_switch:
+0x7e26 034970 jam lmp_slot_offset ,mem_lmo_opcode2 
+0x7e27 034971 set1 mark_switch_initiated ,mark 
+0x7e28 034972 nrtn master 
+0x7e29 034973 jam switch_flag_init ,mem_switch_flag 
+0x7e2a 034974 jam lmp_switch_req ,mem_lmo_opcode2 
+0x7e2b 034975 fetch 1 ,mem_connection_options 
+0x7e2c 034976 set0 connection_switch ,pdata 
+0x7e2d 034977 store 1 ,mem_connection_options 
+0x7e2e 034978 rtn 
+:      034982 check_51cmd_bb_reconn_cancel:
+0x7e2f 034983 force page_length_timer ,queue 
+0x7e30 034984 branch timer_stop 
+:      034988 check_51cmd_dhkey_not_accept:
+0x7e31 034989 call tid_set_reply 
+0x7e32 034990 jam lmp_dhkey_check ,mem_lmi_opcode2 
+0x7e33 034991 branch parse_lmp_dhkey_check_reject 
+:      034994 ui_check_paring_button:
+0x7e34 034995 fetch 1 ,mem_ui_state_map 
+0x7e35 034996 rtnbit0 ui_state_btn_down 
+0x7e36 034997 rtnbit0 ui_state_bt_reconnect 
+0x7e37 034998 branch check_51cmd_bb_reconn_cancel 
+:      035003 queue_init:
+0x7e38 035004 fetch 2 ,mem_queue_ptr 
+0x7e39 035005 add pdata ,queue_offset_curr_num ,contw 
+0x7e3a 035006 setarg 0 
+0x7e3b 035007 istore 3 ,contw 
+0x7e3c 035008 rtn 
+:      035012 queue_push:
+0x7e3d 035013 call disable_user 
+0x7e3e 035014 call queue_full 
+0x7e3f 035015 rtn blank 
+0x7e40 035016 fetch 2 ,mem_queue_ptr 
+0x7e41 035017 add pdata ,queue_offset_curr_num ,regb 
+0x7e42 035018 ifetcht 1 ,regb 
+0x7e43 035019 increase 1 ,temp 
+0x7e44 035020 istoret 1 ,regb 
+0x7e45 035022 ifetcht 1 ,pdata 
+0x7e46 035023 copy temp ,loopcnt 
+0x7e47 035024 add pdata ,queue_offset_write_ptr ,regb 
+0x7e48 035025 ifetch 1 ,regb 
+0x7e49 035026 imul32 temp ,pdata 
+0x7e4a 035027 iadd contr ,contw 
+0x7e4b 035028 copy rega ,contr 
+:      035029 calc_queue_next_ptr:
+0x7e4c 035030 call memcpy 
+0x7e4d 035031 call queue_get_size 
+0x7e4e 035032 pincrease -1 
+0x7e4f 035033 ifetcht 1 ,regb 
+0x7e50 035034 increase 1 ,temp 
+0x7e51 035035 iand temp ,temp 
+0x7e52 035036 istoret 1 ,regb 
+0x7e53 035037 branch enable_user 
+:      035042 queue_pop:
+0x7e54 035043 call disable_user 
+0x7e55 035044 call queue_empty 
+0x7e56 035045 rtn blank 
+0x7e57 035046 fetch 2 ,mem_queue_ptr 
+0x7e58 035047 add pdata ,queue_offset_curr_num ,regb 
+0x7e59 035048 ifetcht 1 ,regb 
+0x7e5a 035049 increase -1 ,temp 
+0x7e5b 035050 istoret 1 ,regb 
+0x7e5c 035051 ifetcht 1 ,pdata 
+0x7e5d 035052 copy temp ,loopcnt 
+0x7e5e 035053 add pdata ,queue_offset_read_ptr ,regb 
+0x7e5f 035054 ifetch 1 ,regb 
+0x7e60 035055 imul32 temp ,pdata 
+0x7e61 035056 iadd contr ,contr 
+0x7e62 035057 increase 1 ,contr 
+0x7e63 035058 copy rega ,contw 
+0x7e64 035059 branch calc_queue_next_ptr 
+:      035063 queue_empty:
+0x7e65 035064 fetch 2 ,mem_queue_ptr 
+0x7e66 035065 add pdata ,queue_offset_curr_num ,contr 
+0x7e67 035066 ifetch 1 ,contr 
+0x7e68 035067 rtn 
+:      035070 queue_full:
+0x7e69 035071 call queue_get_size 
+0x7e6a 035072 ifetcht 1 ,contr 
+0x7e6b 035073 isub temp ,pdata 
+0x7e6c 035074 rtn 
+:      035077 queue_get_size:
+0x7e6d 035078 fetch 2 ,mem_queue_ptr 
+0x7e6e 035079 add pdata ,queue_offset_length ,contr 
+0x7e6f 035080 ifetch 1 ,contr 
+0x7e70 035081 rtn 
+:      035089 right_shift_n:
+0x7e71 035090 sub loopcnt ,0 ,null 
+0x7e72 035091 rtn zero 
+:      035092 right_shift_n_loop:
+0x7e73 035093 rshift pdata ,pdata 
+0x7e74 035094 loop right_shift_n_loop 
+0x7e75 035095 rtn 
+:      035098 left_shift_n:
+0x7e76 035099 force 1 ,pdata 
+0x7e77 035100 sub loopcnt ,0 ,null 
+0x7e78 035101 rtn zero 
+:      035102 left_shift_n_loop:
+0x7e79 035103 lshift pdata ,pdata 
+0x7e7a 035104 loop left_shift_n_loop 
+0x7e7b 035105 rtn 
+:      035106 push_stack:
+0x7e7c 035107 deposit contw 
+0x7e7d 035108 store 2 ,mem_contw 
+0x7e7e 035109 storet 8 ,mem_temp 
+0x7e7f 035110 deposit timeup 
+0x7e80 035111 store 4 ,mem_timeup 
+0x7e81 035112 call push_stack_rega_b_c 
+0x7e82 035113 deposit contr 
+0x7e83 035114 store 2 ,mem_contr 
+0x7e84 035115 rtn 
+:      035117 push_stack_rega_b_c:
+0x7e85 035118 deposit rega 
+0x7e86 035119 store 4 ,mem_rega 
+0x7e87 035120 deposit regb 
+0x7e88 035121 store 4 ,mem_regb 
+0x7e89 035122 deposit regc 
+0x7e8a 035123 store 3 ,mem_regc 
+0x7e8b 035124 rtn 
+:      035126 pop_stack:
+0x7e8c 035127 fetcht 8 ,mem_temp 
+0x7e8d 035128 fetch 4 ,mem_timeup 
+0x7e8e 035129 iforce timeup 
+0x7e8f 035130 call pop_stack_rega_b_c 
+0x7e90 035131 fetch 2 ,mem_contw 
+0x7e91 035132 iforce contw 
+0x7e92 035133 fetch 2 ,mem_contr 
+0x7e93 035134 iforce contr 
+0x7e94 035135 rtn 
+:      035137 pop_stack_rega_b_c:
+0x7e95 035138 fetch 4 ,mem_rega 
+0x7e96 035139 iforce rega 
+0x7e97 035140 fetch 4 ,mem_regb 
+0x7e98 035141 iforce regb 
+0x7e99 035142 fetch 3 ,mem_regc 
+0x7e9a 035143 iforce regc 
+0x7e9b 035144 rtn 
+:      035146 get_contw:
+0x7e9c 035147 fetch 2 ,mem_contw 
+0x7e9d 035148 copy pdata ,contw 
+0x7e9e 035149 rtn 
+:      035150 get_contr:
+0x7e9f 035151 fetch 2 ,mem_contr 
+0x7ea0 035152 copy pdata ,contr 
+0x7ea1 035153 rtn 
+:      035154 store_contw:
+0x7ea2 035155 copy contw ,pdata 
+0x7ea3 035156 store 2 ,mem_contw 
+0x7ea4 035157 rtn 
+:      035158 store_contr:
+0x7ea5 035159 copy contr ,pdata 
+0x7ea6 035160 store 2 ,mem_contr 
+0x7ea7 035161 rtn 
+:      035165 save_cont_pointers:
+0x7ea8 035166 copy contw ,pdata 
+0x7ea9 035167 store 2 ,mem_hold_contw 
+0x7eaa 035168 copy contr ,pdata 
+0x7eab 035169 store 2 ,mem_hold_contr 
+0x7eac 035170 rtn 
+:      035171 load_cont_pointers:
+0x7ead 035172 fetch 2 ,mem_hold_contw 
+0x7eae 035173 copy pdata ,contw 
+0x7eaf 035174 fetch 2 ,mem_hold_contr 
+0x7eb0 035175 copy pdata ,contr 
+0x7eb1 035176 rtn 
+:      035178 memcpy96:
+0x7eb2 035179 call memcpy32 
+:      035180 memcpy64:
+0x7eb3 035181 call memcpy32 
+0x7eb4 035182 branch memcpy32 
+:      035183 memcpy12:
+0x7eb5 035184 call memcpy8 
+:      035185 memcpy4:
+0x7eb6 035186 ifetch 4 ,contr 
+0x7eb7 035187 istore 4 ,contw 
+0x7eb8 035188 rtn 
+:      035189 memcpy8:
+0x7eb9 035190 ifetch 8 ,contr 
+0x7eba 035191 istore 8 ,contw 
+0x7ebb 035192 rtn 
+:      035194 memcpy48:
+0x7ebc 035195 call memcpy16 
+:      035196 memcpy32:
+0x7ebd 035197 call memcpy8 
+:      035198 memcpy24:
+0x7ebe 035199 call memcpy8 
+:      035200 memcpy16:
+0x7ebf 035201 call memcpy8 
+0x7ec0 035202 branch memcpy8 
+:      035206 delay_10ms:
+0x7ec1 035207 arg 10 ,loopcnt 
+:      035208 delay_ms_wait:
+0x7ec2 035209 nop 12000 
+0x7ec3 035210 loop delay_ms_wait 
+0x7ec4 035211 rtn 
+:      035213 bn_zero:
+0x7ec5 035214 force 3 ,loopcnt 
+:      035215 memset0:
+0x7ec6 035216 force 0 ,pdata 
+:      035217 memset8:
+0x7ec7 035218 istore 8 ,contw 
+0x7ec8 035219 loop memset8 
+0x7ec9 035220 rtn 
+:      035222 memset0_8:
+0x7eca 035223 force 0 ,pdata 
+0x7ecb 035224 istore 8 ,contw 
+0x7ecc 035225 rtn 
+:      035226 memset0_4:
+0x7ecd 035227 force 0 ,pdata 
+0x7ece 035228 istore 4 ,contw 
+0x7ecf 035229 rtn 
+:      035231 clear_mem_256:
+0x7ed0 035232 force 4 ,loopcnt 
+0x7ed1 035233 branch memset0 
+:      035234 clear_mem_512:
+0x7ed2 035235 force 8 ,loopcnt 
+0x7ed3 035236 branch memset0 
+:      035238 clear_mem:
+0x7ed4 035239 deposit loopcnt 
+0x7ed5 035240 rtn blank 
+0x7ed6 035241 setarg 0 
+:      035242 clear_mem_loop:
+0x7ed7 035243 istore 1 ,contw 
+0x7ed8 035244 loop clear_mem_loop 
+0x7ed9 035245 rtn 
+:      035248 clear_temp_block:
+0x7eda 035249 arg 32 ,loopcnt 
+0x7edb 035250 arg mem_temp_block0 ,contw 
+0x7edc 035251 branch clear_mem 
+:      035253 xor_loop:
+0x7edd 035254 ifetch 4 ,regc 
+0x7ede 035255 ifetcht 4 ,rega 
+0x7edf 035256 ixor temp ,pdata 
+0x7ee0 035257 istore 4 ,contw 
+0x7ee1 035258 increase 4 ,rega 
+0x7ee2 035259 increase 4 ,regc 
+0x7ee3 035260 loop xor_loop 
+0x7ee4 035261 rtn 
+:      035265 inverse_data:
+0x7ee5 035266 bpatchx patch3f_3 ,mem_patch3f 
+0x7ee6 035267 copy loopcnt ,pdata 
+0x7ee7 035268 sub pdata ,1 ,null 
+0x7ee8 035269 rtn positive 
+0x7ee9 035270 iadd rega ,regb 
+0x7eea 035271 increase -1 ,regb 
+0x7eeb 035272 rshift loopcnt ,loopcnt 
+:      035273 inverse_loop:
+0x7eec 035274 ifetcht 1 ,rega 
+0x7eed 035275 ifetch 1 ,regb 
+0x7eee 035276 istore 1 ,rega 
+0x7eef 035277 istoret 1 ,regb 
+0x7ef0 035278 increase -1 ,regb 
+0x7ef1 035279 increase 1 ,rega 
+0x7ef2 035280 loop inverse_loop 
+0x7ef3 035281 rtn 
+:      035284 memcpy_fast:
+0x7ef4 035285 deposit loopcnt 
+0x7ef5 035286 rtn blank 
+:      035287 memcpy_fast_loop:
+0x7ef6 035288 increase -8 ,loopcnt 
+0x7ef7 035289 call memcpy8 ,positive 
+0x7ef8 035290 rtn zero 
+0x7ef9 035291 branch memcpy_fast_loop ,positive 
+0x7efa 035292 increase 8 ,loopcnt 
+:      035293 memcpy_fast_loop_four:
+0x7efb 035294 increase -4 ,loopcnt 
+0x7efc 035295 call memcpy4 ,positive 
+0x7efd 035296 rtn zero 
+0x7efe 035297 branch memcpy_fast_loop_four ,positive 
+0x7eff 035298 increase 4 ,loopcnt 
+0x7f00 035299 branch memcpy 
+:      035301 memcpy:
+0x7f01 035302 deposit loopcnt 
+0x7f02 035303 rtn blank 
+:      035304 memcpy_loop:
+0x7f03 035305 ifetch 1 ,contr 
+0x7f04 035306 istore 1 ,contw 
+0x7f05 035307 loop memcpy_loop 
+0x7f06 035308 rtn 
+:      035310 timer_stop:
+0x7f07 035311 setarg 0 
+:      035312 timer_init:
+0x7f08 035313 rshift clkn_bt ,temp 
+0x7f09 035314 storet 4 ,mem_last_clkn 
+0x7f0a 035315 arg mem_timers ,contw 
+0x7f0b 035316 iforce temp 
+0x7f0c 035317 lshift queue ,pdata 
+0x7f0d 035318 iadd contw ,contw 
+0x7f0e 035319 istoret 2 ,contw 
+0x7f0f 035320 bpatchx patch3f_4 ,mem_patch3f 
+0x7f10 035321 rtn 
+:      035323 timer_check_timeout:
+0x7f11 035324 arg 0x800 ,timeup 
+0x7f12 035325 lshift16 timeup ,timeup 
+0x7f13 035326 iadd timeup ,pdata 
+0x7f14 035327 rtn 
+:      035330 timer_reinit:
+0x7f15 035331 arg 0 ,queue 
+:      035332 timer_check:
+0x7f16 035333 bpatchx patch3f_5 ,mem_patch3f 
+0x7f17 035334 fetcht 4 ,mem_last_clkn 
+0x7f18 035335 rshift clkn_bt ,pdata 
+0x7f19 035336 store 4 ,mem_last_clkn 
+0x7f1a 035337 isub temp ,null 
+0x7f1b 035338 ncall timer_check_timeout ,positive 
+0x7f1c 035339 isub temp ,timeup 
+0x7f1d 035340 copy timeup ,temp 
+0x7f1e 035341 arg mem_timers ,contr 
+0x7f1f 035342 copy contr ,contw 
+0x7f20 035343 arg 16 ,loopcnt 
+:      035344 timer_loop:
+0x7f21 035345 ifetch 2 ,contr 
+0x7f22 035346 isub temp ,pdata 
+0x7f23 035347 branch timer_counting ,positive 
+0x7f24 035348 force 0 ,pdata 
+:      035349 timer_counting:
+0x7f25 035350 istore 2 ,contw 
+0x7f26 035351 loop timer_loop 
+0x7f27 035352 arg mem_timers ,contr 
+0x7f28 035353 lshift queue ,pdata 
+0x7f29 035354 iadd contr ,contr 
+0x7f2a 035355 ifetch 2 ,contr 
+0x7f2b 035356 rtn 
+:      035361 clk_add:
+0x7f2c 035362 iadd temp ,temp 
+0x7f2d 035363 copy temp ,loopcnt 
+0x7f2e 035364 setarg 3750 
+0x7f2f 035365 isub loopcnt ,pdata 
+0x7f30 035366 rtn positive 
+0x7f31 035367 sub pdata ,0 ,pdata 
+0x7f32 035368 rshift16 temp ,temp 
+0x7f33 035369 increase 1 ,temp 
+0x7f34 035370 lshift16 temp ,temp 
+0x7f35 035371 ior temp ,temp 
+0x7f36 035372 rtn 
+:      035374 clk_diff_rt:
+0x7f37 035375 call clk_diff 
+0x7f38 035376 branch clk2rt 
+:      035379 clk_diff:
+0x7f39 035380 disable user 
+0x7f3a 035381 isub temp ,pdata 
+0x7f3b 035382 branch clk_diff_pos ,positive 
+0x7f3c 035383 enable user 
+0x7f3d 035384 sub pdata ,0 ,pdata 
+:      035385 clk_diff_pos:
+0x7f3e 035386 rtnbit0 15 
+0x7f3f 035387 arg -61786 ,temp 
+0x7f40 035388 iadd temp ,pdata 
+0x7f41 035389 set0 64 ,pdata 
+0x7f42 035390 rtn 
+:      035392 clk2rt:
+0x7f43 035393 iforce contr 
+0x7f44 035394 rshift16 pdata ,pdata 
+0x7f45 035395 arg 3750 ,temp 
+0x7f46 035396 imul32 temp ,pdata 
+0x7f47 035397 iadd contr ,pdata 
+0x7f48 035398 rtn 
+:      035401 clk2lpo:
+0x7f49 035402 lshift8 pdata ,pdata 
+0x7f4a 035403 lshift4 pdata ,pdata 
+0x7f4b 035404 fetcht 3 ,mem_clks_per_lpo 
+0x7f4c 035405 idiv temp 
+0x7f4d 035406 call wait_div_end 
+0x7f4e 035407 quotient temp 
+0x7f4f 035408 rtn 
+:      035411 clk2bt:
+0x7f50 035412 arg 3750 ,temp 
+0x7f51 035413 idiv temp 
+0x7f52 035414 call wait_div_end 
+0x7f53 035415 quotient pdata 
+0x7f54 035416 lshift16 pdata ,pdata 
+0x7f55 035417 remainder temp 
+0x7f56 035418 ior temp ,temp 
+0x7f57 035419 rtn 
+:      035426 string2dec_from_uart:
+0x7f58 035427 arg 0 ,temp 
+:      035428 string2dec_from_uart_done:
+0x7f59 035429 copy temp ,regc 
+0x7f5a 035430 ifetch 1 ,contru 
+0x7f5b 035431 call uchar2dialog 
+0x7f5c 035432 copy regc ,temp 
+0x7f5d 035433 call swap 
+0x7f5e 035434 arg 10 ,regb 
+0x7f5f 035435 imul32 regb ,pdata 
+0x7f60 035436 iadd temp ,pdata 
+0x7f61 035437 copy pdata ,temp 
+0x7f62 035438 loop string2dec_from_uart_done 
+0x7f63 035439 rtn 
+:      035443 uchar2dialog:
+0x7f64 035444 arg 0x3a ,temp 
+0x7f65 035445 isub temp ,null 
+0x7f66 035446 nbranch uchar2dialog_number ,positive 
+0x7f67 035447 arg 0x61 ,temp 
+0x7f68 035448 isub temp ,null 
+0x7f69 035449 branch uchar2dialog_a2f ,positive 
+0x7f6a 035450 arg 0x37 ,temp 
+0x7f6b 035451 isub temp ,pdata 
+0x7f6c 035452 rtn 
+:      035453 uchar2dialog_number:
+0x7f6d 035454 arg 0x30 ,temp 
+0x7f6e 035455 isub temp ,pdata 
+0x7f6f 035456 rtn 
+:      035457 uchar2dialog_a2f:
+0x7f70 035458 arg 0x57 ,temp 
+0x7f71 035459 isub temp ,pdata 
+0x7f72 035460 rtn 
+:      035462 pn9:
+0x7f73 035463 copy temp ,alarm 
+0x7f74 035464 setarg 0x1ff 
+0x7f75 035465 force 0 ,regb 
+:      035466 pn9_loop:
+0x7f76 035467 rshift3 pdata ,rega 
+0x7f77 035468 rshift rega ,rega 
+0x7f78 035469 ixor rega ,rega 
+0x7f79 035470 isolate1 0 ,rega 
+0x7f7a 035471 setflag true ,9 ,pdata 
+0x7f7b 035472 rshift temp ,temp 
+0x7f7c 035473 isolate1 0 ,pdata 
+0x7f7d 035474 setflag true ,7 ,temp 
+0x7f7e 035475 rshift pdata ,pdata 
+0x7f7f 035476 increase 1 ,regb 
+0x7f80 035477 compare 0 ,regb ,0x7 
+0x7f81 035478 nbranch pn9_loop ,true 
+0x7f82 035479 istoret 1 ,contw 
+0x7f83 035480 loop pn9_loop 
+0x7f84 035481 copy alarm ,temp 
+0x7f85 035482 rtn 
+:      035485 wait_div_end:
+0x7f86 035486 rtn modone 
+0x7f87 035487 branch wait_div_end 
+:      035497 compare_loop:
+:      035498 string_compare:
+0x7f88 035499 ifetch 1 ,rega 
+0x7f89 035500 ifetcht 1 ,regb 
+0x7f8a 035501 isub temp ,null 
+0x7f8b 035502 nrtn zero 
+0x7f8c 035503 increase 1 ,rega 
+0x7f8d 035504 increase 1 ,regb 
+0x7f8e 035505 loop string_compare 
+0x7f8f 035506 force 0 ,null 
+0x7f90 035507 rtn 
+:      035510 ceiling:
+0x7f91 035511 isub temp ,null 
+0x7f92 035512 nrtn positive 
+0x7f93 035513 deposit temp 
+0x7f94 035514 rtn 
+:      035516 swap:
+0x7f95 035517 iadd temp ,pdata 
+0x7f96 035518 isub temp ,temp 
+0x7f97 035519 isub temp ,pdata 
+0x7f98 035520 rtn 
+:      035522 clean_mem:
+0x7f99 035523 arg 0x200 ,loopcnt 
+0x7f9a 035524 arg 0x4000 ,contw 
+0x7f9b 035525 branch memset0 
+:      035528 callback_func:
+0x7f9c 035529 rtn blank 
+0x7f9d 035530 copy pdata ,pc 
+:      035533 wait_uarttx:
+0x7f9e 035534 hfetch 2 ,core_uart_txitems 
+0x7f9f 035535 nbranch wait_uarttx ,blank 
+0x7fa0 035536 rtn 
+:      035538 ice_break:
+0x7fa1 035539 jam 0x1 ,core_ice_ctrl 
+0x7fa2 035540 rtn 
+:      035542 ice_setbp:
+0x7fa3 035543 hstore 2 ,core_ice_break0 
+0x7fa4 035544 hfetch 1 ,core_ice_ctrl 
+0x7fa5 035545 set1 4 ,pdata 
+0x7fa6 035546 hstore 1 ,core_ice_ctrl 
+0x7fa7 035547 rtn 
+:      035548 ice_setbp2:
+0x7fa8 035549 hstore 2 ,core_ice_break1 
+0x7fa9 035550 hfetch 1 ,core_ice_ctrl 
+0x7faa 035551 set1 6 ,pdata 
+0x7fab 035552 hstore 1 ,core_ice_ctrl 
+0x7fac 035553 rtn 
+:      035555 ice_set_write_bp:
+0x7fad 035556 hstore 2 ,core_ice_break0 
+0x7fae 035557 jam 0x30 ,core_ice_ctrl 
+0x7faf 035558 rtn 
+:      035562 test_enable_white:
+0x7fb0 035563 hfetch 1 ,core_config 
+0x7fb1 035564 set0 whiteoff_bit ,pdata 
+0x7fb2 035565 hstore 1 ,core_config 
+0x7fb3 035566 rtn 
+:      035568 check_uart_tx_buff:
+0x7fb4 035569 hfetch 2 ,core_uart_txitems 
+0x7fb5 035570 arg uart_air_control_threshold ,temp 
+:      035571 pdata_sub_temp:
+0x7fb6 035572 isub temp ,null 
+0x7fb7 035573 rtn 
+:      035579 fifo_in:
+0x7fb8 035580 bpatchx patch3f_6 ,mem_patch3f 
+0x7fb9 035581 ifetcht util_fifo_len ,rega 
+0x7fba 035582 and temp ,0xff ,pdata 
+0x7fbb 035583 nbranch fifo_in_push ,blank 
+0x7fbc 035584 rshift8 temp ,pdata 
+0x7fbd 035585 istore util_fifo_len ,rega 
+:      035586 fifo_in_push:
+0x7fbe 035587 increase util_fifo_len + util_fifo_offset ,rega 
+0x7fbf 035588 ifetch 1 ,rega 
+0x7fc0 035589 nbranch assert ,blank 
+0x7fc1 035590 fetch 1 ,mem_fifo_temp 
+0x7fc2 035591 istore 1 ,rega 
+0x7fc3 035592 rtn 
+:      035597 fifo_out:
+0x7fc4 035598 bpatchx patch3f_7 ,mem_patch3f 
+0x7fc5 035599 arg util_fifo_len ,loopcnt 
+0x7fc6 035600 ifetch util_fifo_len ,rega 
+0x7fc7 035601 rtn blank 
+:      035602 fifo_out_loop:
+0x7fc8 035603 ifetch 1 ,rega 
+0x7fc9 035604 nbranch fifo_out_end ,blank 
+0x7fca 035605 increase 1 ,rega 
+0x7fcb 035606 loop fifo_out_loop 
+0x7fcc 035607 branch assert 
+:      035608 fifo_out_end:
+0x7fcd 035609 arg 0 ,temp 
+0x7fce 035610 istoret 1 ,rega 
+0x7fcf 035611 rtn 
+:      035616 fifo_is_empty:
+0x7fd0 035617 ifetch util_fifo_len ,rega 
+0x7fd1 035618 rtn 
+:      035623 fifo_is_full:
+0x7fd2 035624 ifetch 1 ,rega 
+0x7fd3 035625 rtn 
+:      035628 fifo_is_near_full:
+0x7fd4 035629 ifetch 2 ,rega 
+0x7fd5 035630 rtn 
+:      035634 fifo_content_count:
+0x7fd6 035635 arg 0 ,temp 
+:      035636 fifo_content_count_loop:
+0x7fd7 035637 fetch 1 ,contr 
+0x7fd8 035638 loop fifo_content_count_loop ,blank 
+0x7fd9 035639 increase 1 ,temp 
+0x7fda 035640 loop fifo_content_count_loop 
+0x7fdb 035641 copy temp ,pdata 
+0x7fdc 035642 rtn 
+:      035644 not_greater_than:
+0x7fdd 035645 isub temp ,null 
+0x7fde 035646 nrtn positive 
+0x7fdf 035647 copy temp ,pdata 
+0x7fe0 035648 rtn 
+:      035651 disable_positive:
+0x7fe1 035652 force -1 ,null 
+0x7fe2 035653 rtn 
+:      035654 enable_positive:
+:      035655 disable_zero:
+0x7fe3 035656 force 1 ,null 
+0x7fe4 035657 rtn 
+:      035658 enable_zero:
+0x7fe5 035659 force 0 ,null 
+0x7fe6 035660 rtn 
+:      035662 enable_user:
+0x7fe7 035663 enable user 
+0x7fe8 035664 rtn 
+:      035666 disable_user:
+0x7fe9 035667 disable user 
+0x7fea 035668 rtn 
+:      035670 enable_user2:
+0x7feb 035671 enable user2 
+0x7fec 035672 rtn 
+:      035674 disable_user2:
+0x7fed 035675 disable user2 
+0x7fee 035676 rtn 
+:      035678 disable_blank:
+0x7fef 035679 setarg 1 
+0x7ff0 035680 rtn 
+:      035682 enable_blank:
+0x7ff1 035683 setarg 0 
+0x7ff2 035684 rtn 
+:      035687 reverse_byte:
+0x7ff3 035688 copy loopcnt ,pdata 
+0x7ff4 035689 rtn blank 
+0x7ff5 035690 copy contr ,pdata 
+0x7ff6 035691 iadd loopcnt ,pdata 
+0x7ff7 035692 increase -1 ,pdata 
+0x7ff8 035693 copy pdata ,contr 
+:      035694 reverse_loop:
+0x7ff9 035695 ifetch 1 ,contr 
+0x7ffa 035696 increase -2 ,contr 
+0x7ffb 035697 istore 1 ,contw 
+0x7ffc 035698 loop reverse_loop 
+0x7ffd 035699 rtn 
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/bt_program23.meta
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/bt_program23.meta	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/bt_program23.meta	(working copy)
@@ -0,0 +1,35701 @@
+define REVD
+//define FPGA
+define ROMCODE
+define PATCH
+define ADC
+//define RAM_VERSION
+//define CLK24M
+//define DEBUG_MALLOC
+//define DEBUG_H4LOG_ENABLE
+//define DEBUG_LIGHT_STATE
+//define E2_LOG
+//define LMP_DBG
+//define ACL_DEBUG
+//define DCDC
+define NVRAM
+define RELEASE
+define SECURE_CONNECTION
+define DEBUG_RF_INIT
+//define SPI_SIMULATE
+//define ROM_RESPIN_OPTIONAL
+
+define SIMPLE_PAIRING
+define COMPILE_RFCOMM
+define COMPILE_SHUTTER
+define COMPILE_AntiLost
+//define COMPILE_IR
+define COMPILE_KEYBOARD
+define COMPILE_MOUSE
+define COMPILE_MODULE
+//define COMPILE_AT
+//define COMPILE_PRCP
+//define COMPILE_USB
+//define COMPILE_DONGLE
+define COMPILE_LE
+define COMPILE_24G
+define COMPILE_CAR
+define COMPILE_REMOTE_CAR
+
+
+INCLUDE "bt_format"
+
+org 0x0000		// start from patch ram address start
+//define DONGLE
+define MOUSE
+define G24
+//define BLE
+//define CLASSIC_BT
+//define MOUSE_SMOOTHER
+//define ADC_ENABLE
+//define P24G_LOG
+//define RF_DEBUG
+//define HIGH_REPORT
+define MS_ALL_POWER
+define MS_MATRIX
+//define XTAL_16M
+
+//define DEBUGLOG
+//define DEBUGLOG_CALLBACK
+//define DEBUGLOG_EVENT
+//define DEBUGLOG_CMD
+//define DEBUGLOG_MISC
+//define DEBUGLOG_STATUS
+//define DEBUGLOG_PARSE_LMP
+//define DEBUGLOG_SEND_LMP
+//define DEBUGLOG_CONN_SM
+//define DEBUGLOG_UPPER_SM
+
+	bbit1 8,pf_patch_ext
+	beq patch00_0,p_soft_reset
+	beq patch00_1,p_soft_reset_1
+	beq patch00_2,p_soft_reset_2
+	beq patch10_5,p_shutdown_radio
+	beq patch11_1,p_set_freq_tx
+	beq patch14_1,p_init_param
+	beq patch16_1,p_lpm_check_wake_lock
+	beq patch16_2,p_g24_dispatch
+	beq patch18_4,p_device_init
+	beq patch19_1,p_app_flag_store
+	beq patch19_2,p_app_initflag_check
+	beq patch1c_3,p_mouse_seting_dpi
+	beq patch1c_6,p_mouse_motion
+	beq patch1d_2,p_mouse_bb_event_discovery_btn
+	beq patch1d_3,p_mouse_start_discovery
+	beq patch1d_4,p_mouse_stop_discovery
+	branch loop
+pf_patch_ext:
+	beq patch27_7,p_le_enable
+	beq patch31_4,p_twspi_reset
+	branch loop
+
+p_le_enable:
+	jam 0x36,rf_adc_goff        /*For BLE, tune AGC_gain_offset, Max added*/
+	jam 0x5f,rf_agc_nsat        //for BLE
+	enable le
+	jam 7,rfen_ulp			/* enable ulp */
+//	call check_ble_disabled
+	fetch 1,mem_250k_freq_enable	//default: 0
+	rtn blank
+	jam 0xb8,rf_iq_gain
+	rtn
+	
+
+p_rssi_signal:
+	copy pdata,rega
+	fetcht 1,mem_rssi_signal_index
+	setarg mem_rssi_signal_buf
+	iadd temp,contw
+	copy rega,pdata
+	istore 1,contw
+	increase 1,temp
+	and_into RSSI_BUF_LEN_SIGNAL,temp
+	storet 1,mem_rssi_signal_index
+	rtn
+
+p_soft_reset:
+	hfetch 1,0x813b
+	store 1,mem_power_on_flag
+	branch soft_reset+1
+
+p_soft_reset_1:
+	arg mem_sp_state,contw
+	arg 12,loopcnt
+	call clear_mem
+	call rfcomm_init
+	call init_lmp
+	ncall lpm_disable_exen_output,wake
+	call ui_init+1
+	branch soft_reset+11
+
+p_soft_reset_2:
+	call app_lpm_init,wake
+	call publickey_init
+	call lpm_recover_clk,wake
+p_sp_cal_loop:
+	call sp_calc_sequence
+	fetch 1,mem_ssp_enable
+	branch main_loop,blank
+	fetch 1,mem_sp_local_key_invalid // simple pairing is not ready
+	branch p_sp_cal_loop,blank
+	branch main_loop
+
+p_init_param:
+	setarg param_le_version
+	store 3,mem_lmp_version
+	setarg param_le_subversion
+	store 2,mem_lmp_version+3
+	branch init_param+12
+
+p_lpm_check_wake_lock:
+	rtnmark1 mark_24g
+	fetch 1,mem_mouse_clear_sensor_data_flag
+	branch disable_blank,blank
+	fetch 1,mem_mouse_le_conn_param_reject
+	beq LE_LPM_DISABLE,disable_blank
+	fetch 2,mem_sdp_remote_cid
+	nbranch disable_blank,blank
+	fetch 1,mem_mouse_wheel_trigger
+	nbranch disable_blank,blank
+	branch enable_blank
+
+
+p_g24_dispatch:
+	rtnmark0 mark_24g
+	fetch 1,mem_24g_transmit_by_interrupt
+	beq G24_TX_TIMER_INT_ENABLE,p_g24_transmit_by_interrupt
+p_g24_transmit_process:
+	call p_g24_txdata_prep
+	nbranch p_g24_nodata_transmit,user
+	call p_g24_rf_sta_check
+p_g24_transmit_start:
+	call p_g24_transmit_packet
+	fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call power_ctrl_start
+p_g24_short_sleep:	
+	call p_g24_lpm_wait
+	nrtn user
+	call p_clear_wake
+	setarg 60500
+p_g24_enter_sleep:	
+	call clk2lpo
+	storet 4,mem_sleep_counter
+  	branch lpm_sleep
+  	
+p_g24_transmit_by_interrupt:
+	call p_g24_timer_check
+	nrtn user
+	call p_g24_interval_calibrate
+	branch p_g24_transmit_process
+p_g24_transmit_by_interrupt_exit:
+	jam G24_TX_TIMER_INT_DISABLE,mem_24g_transmit_by_interrupt
+	jam 0,mem_24g_transmit_by_interrupt_exit_count
+p_g24_interval_min:
+	jam 0,mem_24g_pac_index
+	fetch 1,mem_24g_interval_min
+p_g24_current_interval_store:
+	store 1,mem_24g_interval
+	rtn
+p_g24_interval_max:
+	fetch 1,mem_24g_interval_max
+	branch p_g24_current_interval_store
+p_g24_interval_calibrate:
+	fetch 1,mem_24g_pac_index
+	increase 1,pdata
+	store 1,mem_24g_pac_index
+	beq 4,p_g24_interval_max
+	beq 5,p_g24_interval_min
+	rtn
+p_g24_transmit_by_interrupt_enable:
+	jam G24_TX_TIMER_INT_ENABLE,mem_24g_transmit_by_interrupt
+	jam 0,mem_24g_transmit_by_interrupt_exit_count
+	rtn
+
+p_g24_nodata_transmit:
+	fetch 1,mem_24g_abort_pac
+	call p_g24_send_abort_packet,blank
+p_g24_long_sleep:
+	call p_g24_lpm_wait
+	nrtn user
+	fetch 3,mem_24g_enter_hibernate
+  	branch p_g24_enter_sleep
+	
+p_g24_lpm_wait:
+	enable user
+	call lpo_calibration
+	fetch 3,mem_clks_per_lpo
+	branch disable_user,blank
+	fetch 1,mem_lpm_mode
+	branch disable_user,blank
+	fetch 1,mem_24g_transmit_by_interrupt
+	beq G24_TX_TIMER_INT_ENABLE,disable_user
+	branch p_mouse_setgpio_lpm
+
+p_g24_send_abort_packet:
+	jam 1,mem_24g_abort_pac
+	jam 0,mem_24g_rf_hop_ch
+	call p_g24_transmit_rf_ctrl_clear
+	store 1,mem_24g_txbuf
+	setarg 0
+	store 7,mem_24g_txbuf+1
+	fetch 4,mem_24g_device_addr
+	store 4,mem_24g_txbuf+8
+	jam 12,mem_24g_datalen
+	fetch 1,mem_24g_data_type
+	set1 bit_abort,pdata
+	store 1,mem_24g_data_type
+	call p_g24_txdata_enable_tx
+	branch p_g24_transmit_start
+
+p_g24_set_device_addr:
+	call adc_init_data
+	fetch 4,mem_lap
+	store 4,mem_24g_device_addr
+	rtn
+
+p_g24_transmit_rf_sta_init:
+	jam 1,mem_24g_rf_last_sta
+	jam 0,mem_24g_sync_cnt
+p_g24_transmit_rf_ctrl_clear:	
+	fetch 1,mem_24g_data_type
+	and_into bits_data,pdata
+	store 1,mem_24g_data_type
+	rtn
+	
+p_g24_hop_ch_enable:
+	fetch 1,mem_24g_data_type
+	set1 bit_hop,pdata
+	store 1,mem_24g_data_type
+	//update txpayload
+	store 1,mem_24g_txpayload
+	rtn
+p_g24_hop_ch_disable:
+	fetch 1,mem_24g_data_type
+	set0 bit_hop,pdata
+	store 1,mem_24g_data_type
+	rtn	
+
+p_g24_transmit_hop_pac_fail:
+	call power_ctrl_pac_succ_decrs
+	fetch 1,mem_24g_rf_work_stage
+	beq 1,p_g24_transmit_hop_pac_fail_wo_hop
+	beq 2,p_g24_transmit_hop_pac_fail_hop_stage2
+	rtn
+p_g24_transmit_hop_pac_fail_wo_hop:
+	jam 2,mem_24g_sync_cnt
+p_g24_transmit_hop_pac_fail_stage1:	
+	jam 0,mem_24g_hop_pac_retry
+	jam 0,mem_24g_rf_last_sta
+	branch p_g24_transmit_rf_ctrl_clear
+
+p_g24_transmit_hop_pac_fail_hop_stage2:
+	jam 0,mem_24g_rf_hop_ch
+	branch p_g24_transmit_hop_pac_fail_stage1
+
+	
+p_g24_transmit_pac_fail_hop_stage3:
+	fetch 2,mem_24g_txfail_cnt
+	increase 1,pdata
+	store 2,mem_24g_txfail_cnt
+	bbit1 6,p_g24_tx_attempt_fail	//1024ms * 8
+	fetch 1,mem_24g_rf_hop_ch
+	beq 1,p_g24_rf_hop_fastly
+	jam 1,mem_24g_rf_hop_ch
+p_g24_rf_hop_attemp_again:
+	fetch 1,mem_24g_rf_hop_ch
+	bne 1,p_g24_transmit_rf_ctrl_clear
+p_g24_rf_hop_fastly:
+	fetch 1,mem_24g_hop_fastly_cnt
+	increase 1,pdata
+	store 1,mem_24g_hop_fastly_cnt
+	beq 4,p_g24_rf_hop_fastly_exit
+	call p_g24_ch
+	jam 2,mem_24g_max_retry
+	branch p_g24_transmit_packet
+
+p_g24_rf_hop_fastly_exit:
+	call power_ctrl_pac_succ_decrs
+	jam 0,mem_24g_hop_fastly_cnt
+	branch p_g24_transmit_rf_ctrl_clear
+
+p_g24_transmit_hop_pac_succ_wo_hop:
+	jam 2,mem_24g_sync_cnt
+p_g24_transmit_hop_pac_succ:
+	jam 1,mem_24g_rf_last_sta
+	jam 0,mem_24g_rf_hop_ch
+	branch p_g24_transmit_rf_ctrl_clear
+
+p_g24_transmit_succ_rf_config:
+	fetch 1,mem_24g_rf_work_stage
+	beq 3,p_g24_transmit_hop_pac_succ
+	fetch 1,mem_24g_data_type
+	isolate0 bit_hop,pdata
+	branch p_g24_transmit_rf_sta_init,true
+	fetch 1,mem_24g_rf_work_stage
+	beq 1,p_g24_transmit_hop_pac_succ_wo_hop
+	beq 2,p_g24_transmit_hop_pac_succ
+	rtn
+
+p_g24_rf_sta_check:
+	fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call p_g24_rf_laststa_synccnt_check
+	ncall p_g24_rf_sync_cnt_check,user2
+	rtn
+
+p_g24_rf_laststa_synccnt_check:
+	disable user2
+	fetch 1,mem_24g_rf_last_sta
+	rtnne 1
+	fetch 1,mem_24g_sync_cnt
+	rtnne 0
+	jam 1,mem_24g_rf_work_stage
+	jam 4,mem_24g_max_retry
+	branch enable_user2
+
+p_g24_rf_sync_cnt_check:
+	fetch 1,mem_24g_sync_cnt
+	branch p_g24_rf_hop_attemp,blank
+	increase -1,pdata
+	store 1,mem_24g_sync_cnt
+	jam 2,mem_24g_rf_work_stage
+	jam 4,mem_24g_max_retry
+	branch p_g24_ch
+
+p_g24_rf_hop_attemp:
+	jam 3,mem_24g_rf_work_stage
+	fetch 1,mem_24g_rf_hop_ch
+	nbranch p_g24_rf_hop_attemp_again,blank
+	jam 2,mem_24g_max_retry
+	branch p_g24_ch
+
+p_g24_txdata_prep:
+	fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,p_g24_pairing_sm	
+p_g24_txdata_prep_packeage_data:
+	call p_g24_package_data
+p_g24_txdata_enable_tx:	
+	call p_g24_transmit_prep
+	jam ENSURE_ON_24G,mem_24g_ensure
+	rtn
+
+p_g24_package_data:
+	fetch 2,mem_cb_24g_data
+	call callback_func
+	branch p_g24_accumulate_mouse_data,user
+	fetch 7,mem_24g_txbuf+1	//mouse data
+	rtn blank
+	branch enable_user	// retransmit
+p_g24_accumulate_mouse_data:
+	jam 0,mem_24g_abort_pac
+	add rega,1,pdata
+	store 1,mem_24g_datalen
+	call p_g24_transmit_rf_ctrl_clear
+	store 1,mem_24g_txbuf
+	ifetcht 1,contw
+	ifetch 1,regb
+	ior temp,pdata
+	istore 1,contw	//key
+	increase 1,regb
+	ifetch 4,regb
+	istore 4,contw	//x,y
+	increase 4,regb
+	arg mem_24g_txbuf+6,contw
+	arg 2,loopcnt
+p_g24_accumulation_loop:
+	ifetch 1,regb
+	ifetcht 1,contw	//wheel,twheel
+	iadd temp,pdata
+	istore 1,contw
+	increase 1,regb
+	loop p_g24_accumulation_loop
+	rtn
+
+p_g24_transmit_packet:
+	jam 0,mem_24g_retry
+p_g24_transmit_loop:
+	arg param_rx_setup,timeup
+	until clkn_rt,meet
+	call p_g24_transmit_receive_ack
+	fetch 1,mem_24g_no_ack	//tx noack
+	rtneq no_ack_24g
+	nbranch p_g24_retransmit,sync
+	nbranch p_g24_retransmit,user3
+	call p_g24_txbuf_clear
+	call p_g24_ackpayload_parse
+	call power_ctrl_pac_succ_incrs
+p_g24_transmit_next_packet:
+	fetch 1,mem_24g_pid
+	increase 1,pdata
+	store 1,mem_24g_pid
+	fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,p_g24_paring_mode_start
+	call p_g24_transmit_succ_rf_config
+p_g24_transmit_abandon:
+	setarg 0
+	store 2,mem_24g_txfail_cnt
+	store 1,mem_24g_get_ack_fail
+	store 1,mem_24g_hop_pac_retry
+	jam ENSURE_OFF_24G,mem_24g_ensure
+	rtn
+
+p_g24_txbuf_clear:
+	arg 4,loopcnt
+	arg mem_24g_txbuf,contw
+	branch memset0
+
+p_g24_paring_mode_start:
+	call power_ctrl_pac_succ_cnt_init
+	branch p_g24_paring_mode
+
+p_g24_transmit_receive_ack:
+	disable user3
+	call p_g24_transmit
+	
+
+	fetch 1,mem_24g_no_ack
+	beq no_ack_24g,p_g24_transmit_no_ack	//tx no ack
+	force 0,radio_ctrl
+	fetch 4,mem_24g_addr
+	iforce access
+	fetcht 1,mem_last_freq
+	call set_freq_rx
+	call rf_rx_enable
+	call p_g24_receive_rxon
+	call p_g24_end_of_packet,user3
+	rtn
+p_g24_transmit_no_ack:
+	call p_g24_end_of_packet
+	branch p_g24_transmit_next_packet
+
+p_g24_retransmit:
+	fetch 1,mem_24g_get_ack_fail
+	increase 1,pdata
+	store 1,mem_24g_get_ack_fail
+	fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,p_g24_tx_paring_retry
+	fetcht 1,mem_24g_retry
+	increase 1,temp
+	storet 1,mem_24g_retry
+	fetch 1,mem_24g_max_retry
+	isub temp,pdata
+	nbranch p_g24_transmit_loop,blank
+	fetch 1,mem_24g_rf_work_stage
+	beq 3,p_g24_transmit_pac_fail_hop_stage3
+	fetch 1,mem_24g_hop_pac_retry
+	increase 1,pdata
+	store 1,mem_24g_hop_pac_retry
+	beq 2,p_g24_transmit_hop_pac_fail
+	call p_g24_hop_ch_enable
+	jam 1,mem_24g_max_retry
+	branch p_g24_transmit_packet
+
+p_g24_tx_paring_retry:
+	fetch 1,mem_24g_get_ack_fail
+	rtnne 0xff
+	jam 0,mem_24g_get_ack_fail
+	branch p_g24_stop_g24_mode
+
+p_g24_tx_attempt_fail:
+	setarg 0
+	store 2,mem_24g_txfail_cnt
+p_g24_stop_g24_mode:
+	jam BT_EVT_24G_ATTEMPT_FAIL,mem_fifo_temp
+	branch ui_ipc_send_event
+
+p_g24_ackpayload_parse:
+	call p_g24_read_len_pid_crc
+	fetch 1,mem_24g_rxdata_length	//ack payload length 
+	rtn blank
+	iforce loopcnt
+	arg mem_24g_rxbuf+2,contr
+	arg mem_24g_rxpayload,contw	//ack payload buffer 
+	branch memcpy
+
+p_g24_start_pairing_sm1:
+	set1 mark_24g,mark
+	call p_g24_pair_init
+p_g24_set_pairing_sm_1:
+	jam STATE_24G_PAIRING_1,mem_24g_pairing_sm
+	rtn
+
+p_g24_pair_init:
+	jam TX_POWER_PAIR,mem_tx_power
+	jam 0,mem_24g_pid
+	jam G24_PAIR_CH,mem_24g_ch
+	fetch 4,mem_24g_paring_addr
+	branch p_g24_update_addr_and_synccrc8
+
+p_g24_pairing_sm:
+	fetch 1,mem_24g_ensure
+	beq ENSURE_ON_24G,enable_user
+	fetch 1,mem_24g_pairing_sm
+	beq STATE_24G_PAIRING_1,p_g24_pairing_sm_1
+	beq STATE_24G_PAIRING_2,p_g24_pairing_sm_2
+	beq STATE_24G_PAIRING_3,p_g24_pairing_sm_3
+	branch assert
+
+p_g24_pairing_sm_1:
+	jam STATE_24G_PAIRING_1_WAITING_ACK,mem_24g_pairing_sm
+	jam 0xaa,mem_24g_common_temp
+	branch p_g24_pairing_sm_common
+p_g24_pairing_sm_2:
+	jam STATE_24G_PAIRING_2_WAITING_ACK,mem_24g_pairing_sm
+	jam 0x55,mem_24g_common_temp
+	branch p_g24_pairing_sm_common
+p_g24_pairing_sm_3:
+	jam STATE_24G_PAIRING_3_WAITING_ACK,mem_24g_pairing_sm
+	jam 0x22,mem_24g_common_temp
+p_g24_pairing_sm_common:
+	fetch 1,mem_24g_data_type
+	and_into bits_data,pdata
+	store 1,mem_24g_common_temp+1
+	fetch 4,mem_24g_device_addr
+	store 4,mem_24g_common_temp+2
+p_g24_put_pairing_data_in_buff:
+	jam 0,mem_24g_common_temp+6
+	arg mem_24g_common_temp,rega
+	arg 7,temp
+	call p_g24_put_data_in_buff
+	call p_g24_txdata_enable_tx
+	branch enable_user
+
+p_g24_paring_mode:
+	fetch 1,mem_24g_pairing_sm
+	rtneq STATE_24G_PAIRING_SUCCESS
+	beq STATE_24G_PAIRING_1_WAITING_ACK,p_g24_pairing_sm_1_waiting_ack
+	beq STATE_24G_PAIRING_2_WAITING_ACK,p_g24_pairing_sm_2_waiting_ack
+	beq STATE_24G_PAIRING_3_WAITING_ACK,p_g24_pairing_sm_3_waiting_ack
+	rtn
+
+
+p_g24_pairing_sm_1_waiting_ack:
+	jam STATE_24G_PAIRING_2,mem_24g_pairing_sm
+	branch p_g24_transmit_abandon
+p_g24_pairing_sm_2_waiting_ack:
+	jam STATE_24G_PAIRING_3,mem_24g_pairing_sm
+	branch p_g24_transmit_abandon
+p_g24_pairing_sm_3_waiting_ack:
+	jam STATE_24G_PAIRING_SUCCESS,mem_24g_pairing_sm
+	jam BT_EVT_24G_PAIRING_COMPLETE,mem_fifo_temp
+	call ui_ipc_send_event	
+	fetch 4,mem_24g_rxpayload+2
+	call p_g24_update_addr_and_synccrc8
+	branch p_g24_transmit_abandon
+
+p_g24_start_24g_mode:
+	set0 mark_24g,mark
+	call p_g24_ch_syncword_crc8_init
+	fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call p_g24_tx_attemp_data_prep
+p_g24_tx_attemp_dongle:
+	setarg 0
+	store 2,mem_24g_check_dongle_times
+p_g24_tx_attemp_dongle_loop:
+	call lpo_calibration
+	nop 2000
+	fetch 1,mem_24g_check_dongle_times
+	beq 0xff,p_g24_stop_g24_mode
+	call p_g24_transmit_receive_ack
+	nbranch p_g24_attemp_txdata_retry,sync
+	nbranch p_g24_attemp_txdata_retry,user3
+p_g24_tx_attemp_dongle_succ:
+	set1 mark_24g,mark
+	setarg 0
+	store 2,mem_24g_check_dongle_times
+	jam BT_EVT_24G_ATTEMPT_SUCCESS,mem_fifo_temp
+	call ui_ipc_send_event
+	call p_g24_txbuf_clear
+	branch p_g24_transmit_by_interrupt_enable
+
+p_g24_tx_attemp_data_prep:
+	jam 0xff,mem_24g_common_temp
+	fetch 1,mem_24g_data_type
+	store 1,mem_24g_common_temp+1
+	fetch 4,mem_24g_device_addr
+	store 4,mem_24g_common_temp+2
+	arg 6,temp
+	arg mem_24g_common_temp,rega
+	call p_g24_put_data_in_buff
+	branch p_g24_transmit_prep
+	
+p_g24_attemp_txdata_retry:
+	fetch 2,mem_24g_check_dongle_times
+	increase 1,pdata
+	store 2,mem_24g_check_dongle_times
+	call p_g24_ch
+	branch p_g24_tx_attemp_dongle_loop
+
+p_g24_auto_pair_start:
+	set0 mark_24g,mark
+	call p_g24_auto_pair_all_powerful
+	call p_g24_tx_attemp_data_prep
+p_g24_auto_pair_restart:
+	jam 0,mem_24g_check_dongle_times
+p_g24_auto_pair_start_loop:
+	call lpo_calibration
+	nop 2000
+	fetch 1,mem_24g_check_dongle_times
+	beq 0xff,p_g24_stop_g24_mode
+	call p_g24_transmit_receive_ack
+	nbranch p_g24_auto_pair_retry,sync
+	nbranch p_g24_auto_pair_retry,user3
+	call p_g24_ackpayload_parse
+	fetch 4,mem_24g_addr
+	fetcht 4,mem_24g_paring_addr
+	isub temp,null
+	branch p_g24_start_pairing_sm1,zero
+	branch p_g24_tx_attemp_dongle_succ
+
+p_g24_auto_pair_retry:
+	fetch 1,mem_24g_check_dongle_times
+	increase 1,pdata
+	store 1,mem_24g_check_dongle_times
+	fetch 1,mem_24g_auto_paring_switch
+	increase 1,pdata
+	and_into 1,pdata
+	store 1,mem_24g_auto_paring_switch
+	beq 0,p_g24_auto_pair_device_attemp
+	beq 1,p_g24_auto_pair_pair_attemp
+	rtn
+	
+p_g24_auto_pair_all_powerful:
+	jam TX_POWER_PAIR,mem_tx_power
+	call p_mouse_read_24g_addr
+p_g24_ch_syncword_crc8_init:	
+	call p_g24_syncword_crc8
+	branch p_g24_ch
+
+p_g24_auto_pair_device_attemp:
+	call p_g24_auto_pair_all_powerful
+	branch p_g24_auto_pair_start_loop
+
+p_g24_auto_pair_pair_attemp:
+	call p_g24_pair_init
+	branch p_g24_auto_pair_start_loop
+
+p_g24_check_51cmd_stop_24g:
+	set0 mark_24g,mark
+	call le_disable
+p_mouse_disable_g24_pairing_flag:
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	branch mouse_disable_function_flag
+
+p_g24_put_data_in_buff:
+	storet 1,mem_24g_datalen
+	copy temp,loopcnt
+	arg mem_24g_txbuf,contw
+	copy rega,contr
+	branch memcpy
+
+p_g24_read_len_pid_crc:
+//read control
+	fetch 1,mem_24g_rxbuf+1
+	rshift3 pdata,pdata
+	store 1,mem_24g_rxdata_length
+//get crc
+	increase 1,pdata
+	arg mem_24g_rxbuf+1,contr
+	iadd contr,contr
+	ifetch 3,contr
+	store 3,mem_24g_sta_crc
+//read pid
+	fetch 1,mem_24g_rxbuf+1
+	rshift pdata,pdata
+	and pdata,0x03,pdata
+	store 1,mem_24g_sta_pid
+	rtn
+
+p_g24_update_addr_and_synccrc8:	
+	store 4,mem_24g_addr
+//output: 1BYTE crc8
+p_g24_syncword_crc8:
+	arg 0,rega
+	arg 4,loopcnt
+	arg mem_24g_addr,contr
+p_g24_syncword_crc8_loop:
+	ifetch 1,contr
+	iadd rega,rega
+	loop p_g24_syncword_crc8_loop
+	copy rega,pdata
+	store 2,mem_24g_syncword
+	fetch 1,mem_24g_syncword
+	fetcht 1,mem_24g_syncword+1
+	iadd temp,pdata
+	store 1,mem_24g_syncword_crc8
+	rtn
+
+p_g24_transmit_prep:
+
+// total length
+	fetch 1,mem_24g_datalen
+	increase 2,pdata
+	store 1,mem_24g_txlen
+// data type
+	fetch 1,mem_24g_data_type
+	store 1,mem_24g_txpayload
+//prepare 5bit payload length, 2bit PID, 1bit NO_ACK
+	fetch 1,mem_24g_datalen
+	lshift3 pdata,pdata
+	fetcht 1,mem_24g_pid
+	and temp,0x03,temp
+	lshift temp,temp
+	ior temp,pdata
+	fetcht 1,mem_24g_no_ack
+	iadd temp,pdata
+	istore 1,contw
+//prepare payload data
+	fetch 1,mem_24g_datalen
+	iforce loopcnt
+	arg mem_24g_txbuf,contr
+	branch memcpy
+
+p_g24_ch:
+	fetcht 1,mem_24g_current_ch_number
+	call p_g24_ch_map_size
+	storet 1,mem_24g_current_ch_number
+	rtn
+
+p_g24_ch_map_size:
+	call p_g24_ch_calc
+	increase 1,temp
+	and_into 3,temp //map size =4
+	rtn
+	
+p_g24_ch_calc:
+	fetch 1,mem_24g_addr	
+	and_into 0x03,pdata
+	mul32 pdata,4,rega			//24addr low bit0 bit1 ,00-map1,01-map2,10-map3,11-map4
+	setarg mem_24g_ch_map1
+	iadd rega,pdata
+	iadd temp,contr
+	ifetch 1,contr
+	store 1,mem_24g_ch
+	rtn
+
+p_g24_prep:
+	disable enable_crc
+	disable enable_white
+	setarg 0x555555
+	iforce crc24_init
+	fetch 1,mem_24g_ch
+	reverse pdata,temp
+	set1 1,temp
+	rshift temp,white_init
+	rtn
+
+p_g24_receive_packet:
+	call le_enable
+	fetch 4,mem_24g_addr
+	iforce access
+	call set_sync_on
+	fetcht 1,mem_24g_ch
+	call set_freq_rx
+	setarg param_pll_setup
+	call sleep
+	call rf_rx_enable
+p_g24_receive_rxon:
+
+
+	call p_g24_prep
+	disable user3
+	enable decode_fec0
+	enable is_rx
+	disable is_tx
+	enable swfine
+	fetch 2,mem_24g_rx_window
+	iforce stop_watch
+	correlate null,timeout
+	nbranch p_g24_sync_timeout,sync
+
+
+	disable decode_fec0
+	enable decode_fec1
+	enable enable_white
+	enable enable_crc
+	call p_g24_receive_byte
+	store 1,mem_24g_get_syncword_crc8
+	fetcht 1,mem_24g_syncword_crc8
+	isub temp,null
+	nbranch p_g24_end_of_packet,zero
+	call p_g24_receive_byte
+	store 1,mem_24g_rxbuf	//device id
+	fetch 1,mem_24g_mode
+	sub pdata,rx_24g,null
+	branch p_g24_receive_skip,zero
+	fetch 1,mem_24g_rxbuf
+	fetcht 1,mem_24g_data_type
+	icompare bits_data,temp
+	nbranch p_g24_end_of_packet,true
+p_g24_receive_skip:
+	call p_g24_receive_byte
+	istore 1,contw
+	rshift3 pdata,pdata
+	and pdata,0x1f,loopcnt	//max payload: 32bytes
+	branch p_g24rx_nopayload,zero
+p_g24rx_loop:
+	call p_g24_receive_byte
+	istore 1,contw
+	loop p_g24rx_loop
+p_g24rx_nopayload:
+	//receive rssi hex
+	copy contw,rega
+	call p_g24_receive_byte
+	store 1,mem_rssi_hex_received
+	copy rega,contw
+	parse demod,bucket,24
+	enable swfine
+	arg param_sifs,stop_watch	
+	rshift32 pdata,pdata
+	rshift16 pdata,pdata
+	istore 3,contw
+	disable decode_fec1
+	branch p_g24_end_of_packet,crc_failed
+
+
+	enable user3
+	fetch 1,mem_last_freq
+	add pdata,0,rega
+	call rf_write_freq
+	disable decode_fec0
+	call set_sync_on
+	fetch 1,mem_rssi_hex_received
+	call p_rssi_signal
+	rtn
+
+p_g24_receive_byte:
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	rtn
+	
+p_g24_end_of_packet:
+	disable encode_fec1
+	disable decode_fec1
+	call end_of_packet
+	rtn
+
+p_g24_sync_timeout:
+	branch p_g24_end_of_packet
+
+p_g24_set_freq_tx:
+	call set_sync_on
+	fetcht 1,mem_24g_ch
+	branch set_freq_tx
+
+p_g24_transmit:
+	call le_enable
+	fetch 4,mem_24g_addr
+	iforce access
+	call p_g24_prep
+	call p_g24_set_freq_tx
+	set1 TXGFSK,radio_ctrl
+	enable encode_fec0
+	enable is_tx
+	disable is_rx
+
+	
+	rshift16 access,pdata
+	rshift8 pdata,pdata
+	rshift4 pdata,pdata
+	inject mod,40
+	disable encode_fec0
+	enable encode_fec1
+	enable enable_white
+	enable enable_crc
+	fetch 1,mem_24g_syncword_crc8
+	inject mod,8
+	fetch 1,mem_24g_txlen
+	iforce loopcnt
+	arg mem_24g_txpayload,contr
+p_g24tr_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop p_g24tr_loop
+
+
+	enable enable_parity
+	inject mod,24	//crc
+	disable enable_parity
+	until null,tx_clear
+	nop 100
+	disable encode_fec0
+	disable encode_fec1
+	rtn
+
+p_g24_timer_check:
+	call disable_user
+	fetcht 4,mem_24g_tx_btclk
+	copy clkn_bt,pdata
+	isub temp,null
+	ncall g24_timer_timeout,positive
+	copy pdata,regb
+	fetch 4,mem_24g_tx_btclk
+	fetcht 1,mem_24g_interval
+	iadd temp,temp
+	copy regb,pdata
+	isub temp,null
+	nrtn positive
+	set0 28,pdata
+	store 4,mem_24g_tx_btclk
+	branch enable_user
+
+p_rssi_noise:
+	call save_rssi
+	rtn blank
+	fetcht 1,mem_rssi_noise_index
+	arg mem_rssi_noise_buffer,rega
+	call p_rssi_store
+	storet 1,mem_rssi_noise_index
+	rtn
+	
+p_rssi_store:
+	copy rega,pdata
+	iadd temp,contw
+	fetch 1,mem_rssi
+	istore 1,contw
+	increase 1,temp
+	and_into RSSI_BUF_LEN_SIGNAL,temp
+	rtn
+p_rssi_average:
+	arg 0,temp
+	arg RSSI_BUF_LEN_SIGNAL+1,loopcnt
+	copy rega,contr
+p_rssi_average_loop:
+	ifetch 1,contr
+	iadd temp,temp
+	loop p_rssi_average_loop
+	rshift3 temp,pdata
+	copy pdata,temp
+	rtnmark0 mark_24g
+	//2BCD
+	div pdata,10
+	call wait_div_end
+	quotient pdata
+	lshift4 pdata,pdata
+	remainder temp
+	ior temp,temp
+	rtn
+	rtn
+
+
+p_mouse_before_lpm:
+	rtnmark1 mark_24g
+	call p_mouse_setgpio_lpm
+	fetch 1,mem_context
+	bbit0 state_inconn,p_clear_wake
+	fetch 1,mem_lpm_current_mult
+	nrtn blank
+p_clear_wake:
+	setarg 0
+	store 8,mem_gpio_wakeup_low
+	rtn
+
+p_mouse_setgpio_lpm:
+	call p_mouse_set_sdio_high
+	call p_clear_wake
+p_mouse_setgpio_lpm_before:
+	call mouse_lpm_before_common
+	hfetch 4,core_gpio_oe0
+	hfetcht 4,core_gpio_pu0
+	ior temp,temp
+	invert temp,temp
+	hstoret 4,core_gpio_pd0
+	rtn
+
+p_mouse_set_sdio_high:
+	fetch 1,mem_mouse_init_sensor_reset_flag
+	rtn blank
+	branch p_mouse_seting_dpi_diff// make sdio high to make 100uA less	
+
+p_device_init:
+	call app_lpm_mult_enable
+	branch p_device_init_common,wake
+	fetch 1,mem_tx_power
+	store 1,mem_tx_power_temp
+	call power_ctrl_pac_succ_cnt_init
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_combination_ui_button_count	//combination key timer init
+	call mouse_bt_discovery_button_down_disable
+p_device_init_common:
+	call p_mouse_init
+	branch enable_authrom
+
+p_mouse_tx_power_init:
+	fetch 1,mem_tx_power_temp
+	store 1,mem_tx_power
+	rtn
+
+p_mouse_init:
+	ncall p_mouse_setting_config,wake
+	call p_mouse_spi_init
+	rtn wake
+	call p_mouse_cb_fuction
+	fetch 1,mem_power_on_flag
+	bbit1 2,p_mouse_skip_24g_pair
+	call mouse_check_key_gpio
+	beq MOUSE_LM_BUTTON,p_mouse_24g_pairing_button
+p_mouse_skip_24g_pair:	
+	branch p_mouse_wakeup_from_power
+
+p_mouse_check_reconn_target:
+	call p_mouse_tx_power_init
+	fetch 1,mem_xrecord_mode
+	rtn
+
+
+
+p_mouse_24g_pairing_button:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_24G
+	rtnbit1 MOSUE_24G_PAIRING_FLAG
+	rtnmark1 mark_24g
+	call mouse_devce_led_off
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	call mouse_enable_function_flag
+	setarg 0
+	store 2,mem_mouse_direct_timer
+	store 1,mem_mouse_send_blank_timer
+	store 2,mem_24g_check_dongle_times
+	call mouse_stop_discovery
+	branch p_g24_start_pairing_sm1
+
+p_mouse_dpi_config:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_EEPROM,mouse_dpi_config
+	fetch 1,mem_mouse_dpi
+	beq 0xff,mouse_dpi_config
+	branch mouse_seting_dpi+2
+
+p_mouse_spi_init:
+	jam 0x76,mem_spi_init_clk
+	branch mouse_spi_init
+	
+p_mouse_init_sunt:
+	call p_mouse_spi_init
+	call mouse_spi_sdio_gpio_pollup
+	fetch 1,mem_config_sensor_type
+	beq P3610,mouse_init_3610sensor
+p_mouse_init_sensor:
+	call mouse_read_sensor_id
+	beq P32XX_ID1,p_mouse_init_p32xx_id2_judge
+	beq P3065_ID1,p_mouse_p3065_init_param
+	call mouse_twspi_reset
+	nop 1000
+	branch p_mouse_init_sensor
+
+p_mouse_init_sensor_reset:
+	jam 1,mem_mouse_init_sensor_reset_flag
+	call spi_ncs_enable
+	call p_mouse_init_sunt
+	branch spi_ncs_disable
+
+p_mouse_init_p32xx_id2_judge:
+	call p_mouse_sensor_poweron
+	branch mouse_init_p32xx_id2_judge
+
+
+p_mouse_p3065_init_param:
+	call p_mouse_sensor_poweron
+	fetch 1,mem_sensor_id2
+	beq P3065_XY_ID2,mouse_p3065xy_init_param
+	jam P3065,mem_config_sensor_type
+	rtn
+
+p_mouse_sensor_poweron:
+	setarg 0x8006	// reset to factory settings
+	call twspi_write
+	nop 12000
+	branch p_mouse_dpi_config
+p_mouse_sensor_powerdown:
+	setarg 0x06
+	call twspi_read
+	or pdata,0x08,pdata
+	lshift8 pdata,pdata
+	add pdata,0x06,pdata
+	branch twspi_write	//make sdio high
+
+p_mouse_setting_config:
+	call p_g24_set_device_addr
+	//disable usb function
+	hfetch 1,core_usb_config
+	set0 4,pdata
+	hstore 1,core_usb_config
+	call mouse_param_init
+
+	
+	setarg 0
+	store 2,mem_lpm_interval
+	call mouse_adc_init
+p_mouse_init_iic:
+	call iic_init_390k
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	isolate1 MOUSE_ENABLE_2K_EEPROM,pdata
+	ncall clear_eeprom_size_2k,true
+	call mouse_load_eeprom_dpi
+	call p_mouse_init_environment
+p_mouse_read_24g_addr:	
+	call p_mouse_set_24g_addr_eeprom
+	branch iicd_read_eep_data
+
+
+p_mouse_init_environment:
+	call app_initflag_check
+	branch mouse_eeprom_load_recon_info,zero
+	branch mouse_init_environment+2
+
+p_app_flag_store:
+	arg 2,temp
+	arg mem_timeup,rega
+	arg MOUSE_EEPROM_MODULE_INIT_FLAG,regb
+	branch iicd_write_protect_eep_data
+
+p_app_initflag_check:
+	arg 2,temp
+	arg mem_pdatatemp,rega
+	arg MOUSE_EEPROM_MODULE_INIT_FLAG,regb
+	branch app_initflag_check+4
+
+p_mouse_wakeup_from_power:
+	branch p_g24_auto_pair_start
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_WAKEUP_FROM_POWER,p_mouse_wakeup_no_from_power
+	fetch 1,mem_wakup_from_power_flag
+	isolate0 gpio_latch,pdata
+	nbranch p_mouse_wakeup_no_from_power,true
+	call p_mouse_init_sunt
+	call p_mouse_sensor_powerdown
+p_mouse_wakeup_no_from_power:
+	fetch 1,mem_reconn_times_init
+	store 1,mem_reconn_times
+//	fetch 1,mem_config_function_enable	//standard do not need it
+//	rtnbit1 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON
+//	rtnbit1 ENABLE_SELECT_DEVICE_BY_SWITCH
+p_mouse_start_24g_mode:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_24G
+	call p_g24_factory_check
+	branch p_g24_auto_pair_start,user
+	branch p_g24_start_24g_mode
+
+p_g24_factory_check:
+	arg 2,loopcnt
+	arg mem_24g_addr,contr
+p_pdata_0xff_check:
+	call enable_user
+	setarg 0xffff
+p_pdata_0xff_check_loop:
+	ifetcht 2,contr
+	isub temp,null
+	ncall disable_user,zero
+	loop p_pdata_0xff_check_loop
+	rtn
+
+p_mouse_cb_fuction:
+	setarg p_mouse_priority_bb_event
+	store 2,mem_cb_bb_event_process
+	setarg p_mouse_g24_package_data
+	store 2,mem_cb_24g_data
+
+	rtn
+
+p_mouse_g24_package_data:
+	branch p_mouse_g24_package_data_allpower
+
+p_mouse_g24_package_data_normal:
+	call mouse_g24_package_data
+	fetch 2,mem_mouse_z
+	rtn blank
+	branch p_g24_transmit_by_interrupt_enable
+
+p_mouse_g24_package_data_allpower:
+	call p_g24_matrix_data
+	branch p_mouse_g24_package_data_normal+1
+	
+	
+
+p_mouse_wheel_trigger:
+	fetch 2,mem_mouse_z
+	rtn blank
+	jam 1,mem_mouse_wheel_trigger
+	jam 2,mem_mouse_wheel_trigger_timer
+	rtn
+
+	
+p_mouse_clear_sensor_data:
+	call le_set_config_more_data
+	jam 1,mem_mouse_clear_sensor_data_flag
+	branch p_mouse_sensor_poweron
+
+p_mouse_idle:
+	call ui_check_paring_button
+	call mouse_dpi_cheak
+	branch mouse_wheel_check
+
+p_mouse_priority_bb_event:
+	copy regc,pdata
+	beq BT_EVT_24G_PAIRING_COMPLETE,p_mouse_24g_pairing_complete
+	beq BT_EVT_24G_ATTEMPT_FAIL,p_mouse_24g_attempt_fail
+	beq BT_EVT_24G_ATTEMPT_SUCCESS,p_mouse_24g_attempt_success
+	branch mouse_priority_bb_event+1
+
+
+
+
+p_mouse_24g_pairing_complete:
+	jam 1,mem_mouse_24g_enter_lpm_enable
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	call mouse_disable_function_flag
+	setarg 0
+	store 2,mem_24g_pairing_timer_count
+	jam 0,mem_mouse_move_flag
+	
+	call mouse_read_sensor_common
+
+	call p_g24_transmit_by_interrupt_enable
+	call p_mouse_set_24g_addr_eeprom	//store rx dongle addr to eeprom
+	branch iicd_write_protect_eep_data
+
+p_mouse_set_24g_addr_eeprom:
+	arg mem_24g_addr,rega
+	arg MOUSE_G24_ADDR_EEPROM_OFFECT,regb
+	arg 4,temp
+	rtn
+
+p_mouse_24g_attempt_fail:
+	jam G24_TX_TIMER_INT_DISABLE,mem_24g_transmit_by_interrupt
+	call p_mouse_tx_power_init
+	call p_g24_check_51cmd_stop_24g
+	branch soft_reset_chip
+	jam 0,mem_link_key_exists
+	call mouse_eeprom_load_recon_info
+	arg 3,loopcnt
+	arg mem_device1_addr,contr
+	call p_pdata_0xff_check
+	branch p_mouse_null_enter_hibernate_count,user
+	branch p_mouse_check_reconn_target
+
+p_mouse_24g_attempt_success:
+	branch mouse_no_data_timer_init	
+
+
+p_mouse_before_hibernate:
+	enable user
+	hfetch 4,0x8138
+	setflag user,26,pdata
+	hstore 4,core_lpm_reg
+	call lpm_write_ctrl
+	call p_mouse_sensor_powerdown_check
+	call disable_authrom
+	call mouse_devce_led_off
+	call mouse_before_hibernate_wheel_gpio_set
+	branch p_mouse_setgpio_lpm_before
+	
+p_mouse_sensor_powerdown_check:
+	fetch 1,mem_mouse_init_sensor_reset_flag
+	rtn blank
+	jam 0,mem_mouse_init_sensor_reset_flag
+	branch p_mouse_sensor_powerdown
+
+
+p_mouse_bb_event_timer:
+	call p_mouse_wheel_trigger_timer
+	call p_mouse_null_enter_hibernate_check
+	call p_mouse_bt_discovery_check
+	call mouse_check_discovery_timeout_timer
+	branch mouse_check_no_data_timeout_timer
+
+
+
+
+p_mouse_wheel_trigger_timer:
+	arg mem_mouse_wheel_trigger_timer,regc
+	arg p_mouse_wheel_trigger_disable,regb
+	branch timer_single_step
+p_mouse_wheel_trigger_disable:
+	jam 0,mem_mouse_wheel_trigger
+	rtn
+
+p_mouse_bt_discovery_check:
+	fetch 1,mem_config_function_enable
+	bbit1 ENABLE_BT_BUTTON,mouse_bt_discovery_by_button
+p_mouse_bt_discovery_commbination_key:
+	call mouse_check_key_gpio
+	beq MOUSE_LMR_BUTTON,p_mouse_bt_discovery_commbination_key_down
+p_mouse_bt_discovery_commbination_key_up:
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_combination_ui_button_count	//combination key timer init 
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_bt_discovey_button_statue
+	arg MOUSE_BT_DISCOVERY_BUTTON_LONG_DOWN_FLAG,queue
+	call mouse_disable_function_flag
+	branch mouse_bt_discovery_button_down_disable
+p_mouse_bt_discovery_commbination_key_down:
+	jam 40,mem_mouse_null_enter_hibernate_timer
+	call p_mouse_bt_discovery_timer
+	branch mouse_bt_discovery_commbination_key_down+1
+
+p_mouse_bt_discovery_timer:
+	arg mem_combination_ui_button_count,regc
+	arg p_mouse_long_button_bt_discovery,regb
+	branch timer_single_step
+	
+p_mouse_long_button_bt_discovery:
+	fetch 2,mem_ui_state_map
+	isolate1 UI_STATE_BLE_ADV,pdata
+	call mouse_stop_le_adv,true		//reconnect adv
+	fetch 2,mem_ui_state_map
+	isolate1 UI_STATE_BT_RECONNECT,pdata
+	call mouse_cancel_reconnect,true
+	arg MOUSE_BT_DISCOVERY_BUTTON_LONG_DOWN_FLAG,queue
+	call mouse_enable_function_flag
+	branch mouse_long_button_bt_discovry
+
+p_mouse_null_enter_hibernate_check:
+	fetch 1,mem_mouse_null_enter_hibernate_flag
+	rtn blank
+	fetch 1,mem_mouse_null_enter_hibernate_timer
+	branch p_mouse_null_enter_hibernate,blank
+	increase -1,pdata
+	store 1,mem_mouse_null_enter_hibernate_timer
+	rtn
+p_mouse_null_enter_hibernate:
+	jam 0,mem_mouse_null_enter_hibernate_flag
+	branch app_enter_hibernate
+p_mouse_null_enter_hibernate_count:	//ble never connected
+	jam 1,mem_mouse_null_enter_hibernate_flag
+	jam 40,mem_mouse_null_enter_hibernate_timer	//lmr 3s
+	rtn	
+
+	
+
+p_mouse_seting_dpi:
+	call mosue_dpi_led_blink_init
+p_mouse_seting_dpi_diff:
+	fetch 1,mem_config_sensor_type
+	beq P3065_XY,p_mouse_seting_3065XY_dpi
+	branch mouse_seting_dpi+3
+	
+p_mouse_seting_3065XY_dpi:
+	fetch 1,mem_mouse_dpi
+	call p_mouse_3065xy_dpi_recount,blank
+	fetch 1,mem_mouse_dpi
+	beq MOUSE_DPI_LEVEL2,mouse_set_cpi1
+	//beq MOUSE_DPI_LEVEL3,mouse_set_cpi3
+	beq MOUSE_DPI_LEVEL4,mouse_set_cpi4
+	branch mouse_set_cpi3
+p_mouse_3065xy_dpi_recount:
+	jam 1,mem_mouse_dpi
+	rtn
+
+p_mouse_motion:
+	disable user
+	setarg 0
+	store 6,mem_mouse_x
+	call mouse_cheak_sensor_data
+	call mouse_zwheel
+	call mouse_t_zwheel
+	call mouse_key
+	nrtn user
+	branch mouse_motion+9
+
+p_mouse_bb_event_discovery_btn:
+	jam 0,mem_mouse_null_enter_hibernate_flag
+	jam 0,mem_mouse_null_enter_hibernate_timer
+	isolate1 mark_24g,mark
+	call p_g24_check_51cmd_stop_24g,true
+	branch mouse_bb_event_discovery_btn+1
+
+
+p_mouse_start_discovery:
+	call p_mouse_tx_power_init
+	jam 0,mem_mouse_clear_sensor_data_flag
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_ADV,p_mouse_start_discovery_norandom
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_BLE_RANDOM_ADDRE,p_mouse_start_discovery_norandom
+p_mouse_start_discovery_norandom:
+	call app_lpm_mult_disable
+	fetch 2,mem_discovery_timeout
+	store 2,mem_mouse_discovery_timer
+	jam 6,mem_connection_options
+	setarg 0
+	store 2,mem_mouse_no_data_timer
+	store 2,mem_mouse_direct_timer
+	arg MOUSE_STORE_EEPROM_FLAG,queue
+	call mouse_enable_function_flag
+	call mouse_bt_discovery_button_down_disable
+	branch mouse_start_discovery_norandom+13
+
+
+p_mouse_stop_discovery:
+	setarg 0
+	store 2,mem_mouse_discovery_timer
+	call p_mouse_sensor_poweron		//clear sensor data,confirm the motion pin high
+	branch mouse_stop_discovery+1
+
+
+p_twspi_reset:
+	hfetch 1,core_gpio_out3
+	and_into 0xfd,pdata
+	hstore 1,core_gpio_out3
+	hfetcht 1,core_gpio_oe3
+	or_into 0x2,temp
+	hstoret 1,core_gpio_oe3
+	call twspi_disable
+	and_into 0xfd,temp
+	nop 13
+	call twspi_enable
+	hstoret 1,core_gpio_oe3
+	rtn
+
+p_check_51cmd_once_continue:
+	call lmo_fifo_check
+	nbranch check_51cmd_restore,blank  //process this cmd next time while lmo fifo is full
+	fetch 1,mem_fifo_temp
+	bmark0 mark_context,check_51cmd_check_idle
+	beq BT_CMD_LE_UPDATE_CONN,p_check_51cmd_ble_update_connect_param
+	branch check_51cmd_once_continue+2
+
+p_check_51cmd_ble_update_connect_param:
+	call le_fifo_check_full
+	nrtn blank
+	branch le_l2cap_tx_update_req
+
+	
+
+power_ctrl_pac_succ_cnt_init:
+	jam 1,mem_power_ctrl_level
+	jam 0,mem_power_ctrl_pac_succ_cnt
+	rtn
+power_ctrl_pac_succ_incrs:
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	increase 1,pdata
+	store 1,mem_power_ctrl_pac_succ_cnt
+	rtn
+power_ctrl_pac_succ_decrs:
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	sub pdata,2,null
+	ncall power_ctrl_pac_succ_cnt_reinit,positive
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	rtneq 0
+	increase -1,pdata
+	store 1,mem_power_ctrl_pac_succ_cnt
+	rtn
+power_ctrl_pac_succ_cnt_reinit:
+	jam 3,mem_power_ctrl_pac_succ_cnt
+	rtn
+
+power_ctrl_start:
+	rtn
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_ADV
+	rtnbit1 UI_STATE_BT_RECONNECT
+	rtnbit1 UI_STATE_BT_DISCOVERY
+	
+	arg mem_rssi_signal_buf,rega
+	call p_rssi_average
+	storet 1,mem_rssi_avg_received
+
+	setarg RSSI_DIS_MAX_24G
+	bmark1 mark_24g,power_ctrl_start_next
+	setarg RSSI_DIS_MAX_BLE
+power_ctrl_start_next:	
+	isub temp,null
+	nbranch power_ctrl_txpower_incrs_force,positive
+
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	sub pdata,2,null
+	nbranch power_ctrl_txpower_decrs_check,positive
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	beq 0,power_ctrl_txpower_incrs
+	rtn
+
+power_ctrl_txpower_decrs_check:
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	rtnne 32
+	jam 0,mem_power_ctrl_pac_succ_cnt
+power_ctrl_txpower_decrs:
+	fetcht 1,mem_rssi_avg_received
+	setarg RSSI_DIS_MIN_24G
+	bmark1 mark_24g,power_ctrl_txpower_decrs_next
+	setarg RSSI_DIS_MIN_BLE	
+power_ctrl_txpower_decrs_next:	
+	isub temp,null
+	nrtn positive
+	fetch 1,mem_power_ctrl_level
+	beq 0,power_ctrl_decrs_level0
+	increase -1,pdata
+	store 1,mem_power_ctrl_level
+	beq 0,power_ctrl_decrs_level0
+power_ctrl_decrs_level1:
+power_ctrl_incrs_level1:	//0dBm
+	jam TX_POWER_0DB,mem_tx_power
+	rtn
+
+power_ctrl_txpower_incrs_force:
+	jam 0,mem_power_ctrl_pac_succ_cnt
+power_ctrl_txpower_incrs:
+	fetch 1,mem_power_ctrl_level
+	beq 2,power_ctrl_incrs_level2
+	increase 1,pdata
+	store 1,mem_power_ctrl_level
+	beq 1,power_ctrl_incrs_level1
+power_ctrl_incrs_level2:	//+6dBm
+
+	jam TX_POWER_5DB,mem_tx_power
+	rtn
+	
+power_ctrl_decrs_level0: //-5dBm
+	jam TX_POWER_f5DB,mem_tx_power
+	rtn
+
+
+p_set_freq_tx:
+	storet 1,mem_last_freq
+	add temp,0,rega			/* index to frequency */
+	call rf_write_freq
+	setarg param_pll_setup	//128us
+	call sleep
+p_rf_tx_enable:
+	jam 0x1,rfen_adc
+	jam 0x3c,rfen_rx
+	jam 0xe0,rfen_tx
+	nop 10 /* wait LDOs to turn ON*/
+	jam 0x01, rfen_mdm
+	jam 0x3d, rfen_mdm
+	nop 10 /* wait tx blocks to turn ON*/
+	jam 0xb7,rfen_sn
+	nop 10 /* wait tx lo buffer to turn ON*/
+	jam 0x7d, rfen_mdm
+	fetch 1,mem_tx_power
+//	beq TX_POWER_0DB,p_set_tx_power_0db
+//	beq TX_POWER_3DB,p_set_tx_power_3db	
+	beq TX_POWER_5DB,p_set_tx_power_5db
+//	beq TX_POWER_f3DB,p_set_tx_power_f3db	
+	beq TX_POWER_f5DB,p_set_tx_power_f5db
+	beq TX_POWER_PAIR,p_set_tx_power_pair
+//	branch p_set_tx_power_0db
+p_set_tx_power_0db:
+	call p_rx_low_sens
+//	jam 0xba,0x894b
+	jam 0xd0,0x8955
+	jam 0xe0,0x8956
+//	jam 0x88,0x8957
+	jam 0x6c,0x8958
+//	jam 0x10,0x8959
+	branch set_tx_power_0db	
+
+//p_set_tx_power_3db:
+//	call p_rx_high_sens
+//	jam 0xba,0x894b
+//	jam 0xd0,0x8955
+//	jam 0xe0,0x8956
+//	jam 0x88,0x8957
+//	jam 0x3c,0x8958
+//	jam 0x10,0x8959
+//	branch set_tx_power_3db
+	
+p_set_tx_power_5db:
+	call p_rx_high_sens
+//	jam 0xba,0x894b
+	jam 0xd0,0x8955
+	jam 0xe0,0x8956
+//	jam 0x88,0x8957
+	jam 0x3c,0x8958
+//	jam 0x10,0x8959
+	branch set_tx_power_5db
+
+//p_set_tx_power_f3db:
+//	call p_rx_low_sens
+//	jam 0xba,0x894b
+//	jam 0xd0,0x8955
+//	jam 0xc0,0x8956
+//	jam 0x88,0x8957
+//	jam 0x6c,0x8958
+//	jam 0x10,0x8959
+//	branch set_tx_power_f3db
+	
+p_set_tx_power_f5db:
+	call p_rx_low_sens
+//	jam 0xba,0x894b
+	jam 0xd0,0x8955
+	jam 0xc0,0x8956
+//	jam 0x88,0x8957
+	jam 0x6c,0x8958
+//	jam 0x10,0x8959
+	branch set_tx_power_f5db
+
+p_rx_low_sens:
+	jam 0x5b,0x894c
+	jam 0x96,0x894d
+	jam 0x2c,0x894e 
+	jam 0x46,0x894f
+	rtn
+
+p_rx_high_sens:
+	jam 0xfb,0x894c 
+	jam 0xef,0x894d
+	jam 0xec,0x894e 
+	jam 0x5e,0x894f
+	rtn
+		
+p_set_tx_power_pair:	//50-100cm distance
+//	jam 0xba,0x894b
+ 	jam 0xc5,0x8956
+	jam 0xd0,0x8955
+	rtn	
+
+p_shutdown_radio:
+	force 8,radio_ctrl
+	branch shutdown_radio+1
+
+
+
+
+
+//1 mem_m_key
+//2 mem_m_x
+//2 mem_m_y
+//1 mem_m_z
+//1 mem_m_tz
+//1 mem_24g_matrix_cnt
+p_g24_matrix_data:
+	fetch 1,mem_24g_matrix_cnt
+	increase 1,pdata
+	store 1,mem_24g_matrix_cnt
+	sub pdata,50,null
+	branch p_ms_x_right,positive
+	sub pdata,100,null
+	branch p_ms_y_up,positive
+	sub pdata,150,null
+	branch p_ms_x_left,positive
+	sub pdata,200,null
+	branch p_ms_y_down,positive
+	rtn
+p_ms_x_right:
+	setarg 0x05
+	store 2,mem_m_x
+	setarg 0
+	store 2,mem_m_y
+	store 1,mem_m_z
+	store 1,mem_m_key
+	store 1,mem_m_tz
+p_data:	
+	enable user
+	arg 7,rega
+	arg mem_m_key,regb
+	rtn
+p_ms_y_up:
+	setarg 0x05
+	store 2,mem_m_y
+	setarg 0
+	store 2,mem_m_x
+	store 1,mem_m_z
+	store 1,mem_m_key
+	store 1,mem_m_tz
+	branch p_data
+p_ms_x_left:
+	setarg 0xfffb
+	store 2,mem_m_x
+	setarg 0
+	store 2,mem_m_y
+	store 1,mem_m_z
+	store 1,mem_m_key
+	store 1,mem_m_tz
+	branch p_data
+p_ms_y_down:
+	fetch 1,mem_24g_matrix_cnt
+	beq 200,p_mem_usb_data_square_cnt_set0
+	setarg 0xfffb
+	store 2,mem_m_y
+	setarg 0
+	store 2,mem_m_x
+	store 1,mem_m_z
+	store 1,mem_m_key
+	store 1,mem_m_tz
+	branch p_data
+p_mem_usb_data_square_cnt_set0:
+	jam 0,mem_24g_matrix_cnt
+	branch p_ms_y_down+2
+
+
+
+/******************************************/
+/***********   ROM Start   ***************/
+/******************************************/
+
+org 0x2000		// start from rom address start
+start:
+	call lpmstate
+
+soft_reset:
+	bpatch patch00_0,mem_patch00
+	clear_stack
+	call spi_ncs_gpio_init  // 0xff disable spi ncs gpio init
+	call initialize_radio
+	call iicd_init_12m
+	call init_param
+	call l2cap_init
+	bpatch patch00_1,mem_patch00
+	call rfcomm_init
+	call init_lmp
+	call ui_init
+	call app_init
+	ncall load_chip_option,wake
+	bpatch patch00_2,mem_patch00
+	call app_lpm_init,wake
+	call publickey_init
+soft_reset_2:
+	call lpm_recover_clk,wake
+main_loop:	
+	bpatch patch00_3,mem_patch00
+	call sp_calc_sequence
+	call sp_calc_sequence_256
+	call sp_calc_sequence_256_check
+	call le_dispatch
+	bpatch patch00_4,mem_patch00
+	call idle_dispatch
+	call app_process_idle
+	call inquiry_dispatch
+	call inquiry_scan_dispatch
+	call page_scan_dispatch
+	call connection_dispatch
+	call lpm_dispatch
+	call g24_dispatch
+	branch main_loop
+
+connection_dispatch:
+	call connection_incontext
+	rtnmark0 mark_context
+	set0 mark_context,mark
+	call context_save
+	branch le_disable
+	
+connection_incontext:
+	bpatch patch00_5,mem_patch00
+	call context_search_insniff
+	nbranch connection_nosniff,zero
+	call context_load
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	bbit1 mode_le,le_conn_dispatch
+	bbit1 mode_master, master_dispatch
+	branch slave_dispatch
+connection_nosniff:
+	call context_get_next
+	copy loopcnt,null
+	rtn zero
+	call context_load
+	fetch 1,mem_state
+	bbit1 state_inpage,master_page
+	fetch 1,mem_mode
+	bbit1 mode_master, master_dispatch
+	branch slave_dispatch
+
+
+
+/**************************************/
+/**************idle dispatch*********/
+/**************************************/
+	
+idle_dispatch:
+	fetch 1,mem_hci_cmd
+	rtn blank
+	beq hci_cmd_inquiry,idle_inquiry
+	beq hci_cmd_inquiry_cancel,idle_inquiry_cancel
+	beq hci_cmd_remote_name_req,idle_remote_name_req
+	beq hci_cmd_create_conn,idle_create_conn
+	beq hci_cmd_le_create_conn,idle_le_create_conn
+	call context_search_conn_handle
+	rtn zero
+	call context_search_plap
+	rtn zero
+idle_exit:
+	jam 0,mem_hci_cmd
+	rtn
+
+idle_le_create_conn:
+	jam hci_cmd_le_create_conn,mem_cmd_le_create_conn
+	jam 0,mem_hci_cmd
+	rtn
+	
+idle_inquiry:
+	set1 mark_inquiry_on,mark
+	set0 mark_inquiry_trainb,mark
+	jam param_ninquiry,mem_ninqy_index
+	jam 31,mem_nfreq_index_inq
+	branch idle_exit
+
+idle_inquiry_cancel:
+	set0 mark_inquiry_on,mark
+	force 0,stop_watch
+	branch idle_exit
+
+idle_remote_name_req:
+	call context_search_plap
+	rtn zero
+	force LMP_NAME_REQ,temp
+	jam 5,mem_nameres_cnt
+	branch idle_start_page
+
+idle_create_conn:
+	bpatch patch00_6,mem_patch00
+idle_create_conn_device:
+	fetch 6,mem_hci_plap
+	branch idle_exit,blank
+	jam RECONNECT_HID,memui_reconnect_mode
+	//jam HS_INIT_CALL,mem_hs_mode //init as master
+	jam CONN_SM_WAIT_FEATURES_RES,mem_conn_sm
+	branch idle_create_conn_cont
+	
+idle_create_conn_cont:
+	force LMP_VERSION_REQ,temp
+idle_start_page:
+	bpatch patch00_7,mem_patch00
+	fetch 1,mem_page_mode
+	branch idle_page_mode_r0,blank
+	lshift3 pdata,pdata
+	lshift4 pdata,pdata
+	increase -1,pdata
+idle_page_mode_r0:
+	store 1,mem_npage
+	store 1,mem_npage_index
+	jam 31,mem_nfreq_index_page
+	set0 mark_page_trainb,mark
+	call context_new
+	nbranch idle_page_fail,zero
+	call get_free_amaddr
+	store 1,mem_amaddr
+	storet 1,mem_lmo_opcode2
+	fetch 6,mem_hci_plap
+	store 6,mem_plap
+	bpatch patch01_0,mem_patch01
+	call timer_reinit
+	force 0,pdata
+	compare LMP_NAME_REQ,temp,0xff
+	nsetflag true,state_init_seq,pdata
+	set1 state_inpage,pdata
+	store 1,mem_state
+	jam BT_EVT_RECONN_STARTED,mem_fifo_temp
+	call ui_ipc_send_event
+	force 0,pdata
+	setflag true,smap_name_req,pdata
+	store 1,mem_state_map
+	setarg 0
+	set1 mode_master,pdata
+	store 1,mem_mode
+	enable master
+	call context_save
+	disable master
+	force page_length_timer,queue
+	fetch 2,mem_page_to
+	call timer_init
+	branch idle_exit
+idle_page_fail:
+	bpatch patch01_1,mem_patch01
+	fetch 6,mem_hci_plap
+	store 6,mem_plap
+	compare LMP_NAME_REQ,temp,0xff
+	branch idle_name_fail,true
+	branch idle_exit
+idle_name_fail:
+	arg mem_tmp_buffer,contw
+	arg 8,loopcnt
+	call memset0
+	jam BT_EVT_RECONN_FAILED,mem_fifo_temp
+	call ui_ipc_send_event
+	branch idle_exit
+	
+
+/******************************************/
+/**************  Inquiry  *****************/
+/******************************************/
+
+inquiry_dispatch:
+	rtnmark0 mark_inquiry_on
+	force inquiry_length_timer,queue
+	call timer_check
+	nsetflag blank,mark_inquiry_on,mark
+	nbranch inquiry_start,blank
+	rtn
+	
+
+
+inquiry_start:
+	bpatch patch01_2,mem_patch01
+	fetcht 2,mem_inq_window
+	force 4,queue
+	call sniff_check_window
+	rtn user
+	call afh_clear
+	force 0,freq_mode
+inquiry_restart:
+	rtn timeout
+	set0 mark_fhs_already_good,mark
+	set0 mark_fhs_eir,mark
+inquiry_rx_restart:
+	add clkn_bt,1,bt_clk
+	isolate1 mark_inquiry_trainb,mark
+	setflag true,2,freq_mode
+	compare 0x00,bt_clk,0x02      /* see if this is even slot */
+	nbranch inquiry_receive,true
+
+inquiry_transmit:
+	bpatch patch01_3,mem_patch01
+	fetch 1,mem_inquiry_transmit
+	increase 1,pdata
+	store 1,mem_inquiry_transmit
+	call fetch_giac
+	call tx_radio_freq
+	call fetch_diac
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_native
+	call send_access_word
+	call end_of_packet
+	call inquiry_check_train
+	branch inquiry_restart
+
+inquiry_check_train:
+	bpatch patch01_4,mem_patch01
+	fetch 1,mem_nfreq_index_inq
+	increase -1,pdata
+	store 1,mem_nfreq_index_inq
+	rtn positive  /* if it's time to incremnt N */
+	jam 31,mem_nfreq_index_inq
+	fetch 1,mem_ninqy_index
+	increase -1,pdata
+	store 1,mem_ninqy_index
+	rtn positive      /* if it's time to change train */
+	setflip mark_inquiry_trainb,mark
+	jam param_ninquiry,mem_ninqy_index
+	rtn
+
+inquiry_receive:
+	bpatch patch01_5,mem_patch01
+	call fetch_giac
+	call rx_radio_freq
+	call fetch_diac
+	call start_rx_native
+	call start_receiver	/* get ready for that id packet */
+	call wait_access_clkn_rt
+	branch inquiry_sync,sync   /* try look for id packet again if not found */
+	call inquiry_check_train
+	branch inquiry_rx_restart
+inquiry_sync:
+	bpatch patch01_6,mem_patch01
+	call save_rssi
+	call scan_mode_whiten
+	call receive_packet_whitened
+	set0 mark_rxbuf_inuse,mark
+	rtnmark0 mark_fhs_already_good
+inquiry_receive_rtn:
+	bpatch patch01_7,mem_patch01
+inquiry_receive_eir_rtn:
+	fetch 1,mem_inquiry_rcv
+	increase 1,pdata
+	store 1,mem_inquiry_rcv
+	rtn
+		
+/******************************************/
+/**************  Master Dispatch  *************/
+/******************************************/
+
+
+
+master_page:
+	bpatch patch02_0,mem_patch02
+	enable master
+	enable clknt
+	fetch 2,mem_page_interval
+	branch master_page_no_interval,blank
+	force page_interval_timer,queue
+	call timer_check               
+	nrtn blank
+master_page_no_interval:
+	bpatch patch02_1,mem_patch02
+	fetcht 2,mem_page_window
+	force 40,queue
+	call sniff_check_window
+	branch page_exit,user
+	force page_length_timer,queue
+	call timer_check
+	nbranch page_start,blank
+	fetch 1,mem_state_map
+	bbit1 smap_name_req,master_npage_timeout
+	branch master_page_timeout
+master_npage_timeout:
+	arg mem_tmp_buffer,contw
+	arg 8,loopcnt
+	call memset0
+master_page_timeout:
+	bpatch patch02_2,mem_patch02
+	jam 0,mem_state
+	call init_lmp_work
+	jam 0,memui_reconnect_mode
+	jam BT_EVT_RECONN_PAGE_TIMEOUT,mem_fifo_temp
+	call ui_ipc_send_event	
+	branch page_exit
+
+page_start:
+	bpatch patch02_3,mem_patch02
+	force 0,timeup
+	until clkn_rt,meet
+	fetch 1,mem_page_clk
+	increase -1,pdata
+	ixor clkn_bt,pdata
+	compare 0,pdata,3
+	nbranch page_start,true
+	deposit am_addr
+	store 1,mem_fhs_am_addr
+	force 0,N_tx_slot
+	force 0,freq_mode
+
+page_restart:
+	bpatch patch02_4,mem_patch02
+	branch page_exit,timeout
+	call fetch_page_bt_adr
+	arg param_rf_setup, timeup
+	until clkn_rt,meet         /* wait for the start_receiver time against native real clk  */
+page_rx_restart:
+	bpatch patch02_5,mem_patch02
+	fetch 4,mem_page_clk    /* deposit clk_estimate */
+	iforce bt_clk
+	increase 1,pdata
+	store 4,mem_page_clk
+	isolate1 mark_page_trainb,mark
+	setflag true,2,freq_mode
+	compare 0x00,bt_clk,0x02      /* see if this is even slot */
+	nbranch page_receive,true
+	fetch 1, mem_page_transmit
+	increase 1,pdata
+	store 1, mem_page_transmit
+	call tx_radio_freq
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_native
+	call send_access_word
+	call end_of_packet
+	call page_check_train
+	branch page_restart	
+page_exit:
+	bpatch patch02_6,mem_patch02
+	disable master
+	fetch 2,mem_page_interval      
+	rtn blank
+	force page_interval_timer,queue
+	branch timer_init              
+
+page_check_train:
+	bpatch patch02_7,mem_patch02
+	fetch 1,mem_nfreq_index_page
+	increase -1,pdata
+	store 1,mem_nfreq_index_page
+	rtn positive
+	jam 31,mem_nfreq_index_page
+	fetch 1,mem_npage_index
+	increase -1,pdata                 /* increment N */
+	store 1,mem_npage_index
+	rtn positive      			/* if it's time to change train */
+	setflip mark_page_trainb,mark             /* change train */
+	fetch 1,mem_npage
+	store 1,mem_npage_index
+	rtn
+	
+page_receive:
+	bpatch patch03_0,mem_patch03
+	call rx_radio_freq
+	call start_rx_native
+	call start_receiver	/* get ready for that id packet */
+	call wait_access_clkn_rt	/* try id look for id packet again */
+	branch page_sync,sync         /* restart if didn't receive anything */
+	call page_check_train
+	branch page_rx_restart
+page_sync:
+	call end_of_packet
+	fetch 1, mem_page_rcv
+	increase 1,pdata
+	store 1, mem_page_rcv
+	force 0,stop_watch
+	fetch 4,mem_page_clk
+page_send_fhs:
+	bpatch patch03_1,mem_patch03
+	call rf_setup_time_master_slot
+	call fetch_page_bt_adr
+	increase 1,N_tx_slot
+page_send_fhs_continue:
+	and_into 0x1fd,bt_clk
+	and_into 0x1fc,freq_mode               /* master response = x00, even_train settin must remain the same */
+	call tx_radio_freq
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_native
+	call send_access_word
+	deposit clkn_bt
+	store 4,mem_clkn_bt
+	force 0,am_addr
+	force type_fhs,type
+	call scan_mode_whiten
+	call transmit_packet_whitened
+page_wait_fhs_reply:
+	bpatch patch03_2,mem_patch03
+	call rf_setup_time_slave_slot
+	or_into 0x02,bt_clk
+	and_into 0x1fc,freq_mode               /* master response sequence = x00, even train setting must be preserved */
+	call rx_radio_freq
+	call start_rx_native
+	call start_receiver	/* get ready for that id packet */
+	call wait_access_clkn_rt	/* look for that reply */
+	call end_of_packet,sync              /* id reply is enough */
+	branch page_wait_fhs_reply_ok,sync           /* no reply then send fhs again */
+	fetch 1,mem_fhs_wait_counter
+	branch page_restart,blank
+	increase -1,pdata
+	store 1,mem_fhs_wait_counter
+	branch page_send_fhs
+	
+page_wait_fhs_reply_ok:
+	bpatch patch03_3,mem_patch03
+	fetch 1, mem_page_rcv_fhs
+	increase 1,pdata
+	store 1, mem_page_rcv_fhs
+	call prepare_newconn
+master_newconn_loop:
+	call master_newconn_once
+	branch newconn_poll_responded,sync
+	call new_conn_timeout
+	nbranch master_newconn_loop,blank
+	branch page_restart
+
+newconn_poll_responded:
+	bpatch patch03_4,mem_patch03
+	fetch 1,mem_state
+	set0 state_inpage,pdata
+	store 1,mem_state
+	call newconn_init
+	disable master
+	rtn
+	
+
+master_dispatch:
+	bpatch patch03_5,mem_patch03
+	enable master
+	enable clknt
+	call role_switch_master
+	rtn user
+	call check_bt_disabled
+	call rf_setup_time_master_slot
+	add clkn_bt,1,bt_clk
+	call fetch_self_bt_adr
+	force 0x03,freq_mode
+	call scheduler_tx_l2cap_pkt
+	call prepare_tx
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_native
+	call send_access_word
+	call transmit_packet
+master_loop:
+	bpatch patch03_6,mem_patch03
+	call parse_lmp
+	call master_conn_recv_packet
+	nbranch master_notmatch,match
+	call supervision_flush
+	call parse_l2cap
+	fetch 1,mem_master_rcvcnt
+	increase 1,pdata
+	store 1,mem_master_rcvcnt
+master_notmatch:
+	bpatch patch03_7,mem_patch03
+	call scheduler_process
+	call check_master_disconnect
+	nrtn master					/* disconnected */
+	call check_attempt
+	nbranch master_attempt,blank
+master_exit:
+	disable master
+	rtn
+
+master_attempt:
+	call prepare_tx
+	call master_conn_send_packet
+	branch master_loop
+
+
+check_master_disconnect:
+	branch check_master_match,match
+	call supervision_update
+	branch master_disconnect,positive
+check_master_match:
+	call check_disconnect_timeout
+	nbranch master_disconnect,user
+	fetch 1,mem_state_map
+	rtnbit0 smap_name_req
+	rtnbit1 smap_name_res
+	fetch 1,mem_op
+	rtnbit1 op_disconn
+	call conn_timer_expired
+	nrtn blank
+	fetch 1,mem_nameres_cnt
+	increase -1,pdata
+	store 1,mem_nameres_cnt
+	nrtn blank
+	branch lmp_disconnect
+
+master_disconnect:
+	bpatch patch04_0,mem_patch04
+	call quit_connection
+	disable master
+	fetch 1,mem_state_map
+	bbit1 smap_name_req,master_name_disconnect
+	rtn
+	
+master_name_disconnect:
+	fetch 1,mem_state_map
+	rtnbit1 smap_name_res
+master_name_error:
+	arg mem_tmp_buffer,contw
+	arg 8,loopcnt
+	branch memset0
+	
+check_disconnect_timeout:
+	bpatch patch04_1,mem_patch04
+	enable user
+	fetch 1,mem_op
+	rtnbit0 op_disconn
+	call conn_timer_expired
+	nrtn blank
+	branch disable_user
+
+conn_timer_expired:
+	fetch 1,mem_conn_timer
+	increase -1,pdata
+	store 1,mem_conn_timer
+	rtn
+
+linkkey_ready:
+	bpatch patch04_2,mem_patch04
+	fetch 1,mem_state
+	bbit1 state_linkkey,linkkey_set
+	fetch 1,mem_pairing_auth
+	branch linkkey_set,blank
+	jam DEFALT_PAIRING_AUTH,mem_pairing_auth
+	jam BT_EVT_LINKKEY_GENERATE,mem_fifo_temp
+	call ui_ipc_send_event
+	branch linkkey_set
+linkkey_set:
+	bpatch patch04_3,mem_patch04
+	call context_traverse_linkkey
+	fetch 1,mem_state
+	set1 state_linkkey,pdata
+	store 1,mem_state
+	jam 1,mem_link_key_exists
+	fetch 1,mem_conn_sm
+	bne CONN_SM_PAIRING,linkkey_set_continue
+linkkey_set_continue:
+	rtn
+
+generate_linkkey_continue:
+	jam PAIRING_AUTH,mem_pairing_auth
+clear_linkstate:
+	fetch 1,mem_state
+	set0 state_linkkey,pdata
+	store 1,mem_state
+	rtn
+	
+
+	/* rtn user if switch */
+role_switch_check:
+	bpatch patch04_4,mem_patch04
+	disable user
+	fetch 2,mem_tsniff
+	arg 0xffff,temp
+	isub temp,null
+	nrtn zero
+	fetch 4,mem_sniff_anchor
+	branch role_switch_clkn,clknt
+	isub clke_bt,pdata
+	branch role_switch_clke
+role_switch_clkn:
+	isub clkn_bt,pdata
+role_switch_clke:
+	sub pdata,4,null
+	nrtn positive
+	force 0,pdata
+	store 2,mem_tsniff
+	branch enable_user
+
+
+	/* pdata: switch instant, set tsniff=0 for special sniff */	
+role_switch_prepare:
+	copy pdata,temp
+	bpatch patch04_5,mem_patch04
+	storet 4,mem_sniff_anchor
+role_switch_prepare0:
+	jam SWITCH_FLAG_ACCEPT,mem_switch_flag
+	setarg 0xffff
+	store 2,mem_tsniff
+	jam 1,mem_sniff_attempt
+	rtn
+
+
+role_switch_master:
+	bpatch patch04_6,mem_patch04
+	call role_switch_check
+	nrtn user
+	disable user
+	jam param_newconnto,mem_newconnto_counter
+	set0 mark_fhs_already_good,mark
+roles_waitfhs_loop:
+	call rf_setup_time_master_slot
+	call master_recv_packet
+	bmark1 mark_fhs_already_good,roles_replyto_fhs
+	call new_conn_timeout
+	nbranch roles_waitfhs_loop,blank
+role_switch_fail_master:
+	bpatch patch04_7,mem_patch04
+	disable user
+	deposit clkn_bt
+	store 4,mem_next_btclk
+	enable clknt
+	enable master
+	jam BT_EVT_SWITCH_FAIL_MASTER,mem_fifo_temp
+	branch ui_ipc_send_event
+	
+roles_replyto_fhs:
+	bpatch patch05_0,mem_patch05
+	call rf_setup_time_slave_slot
+	arg type_id,type
+	call master_send_packet
+	disable clknt
+	disable master
+	call apply_switch_clke
+	call prepare_newconn
+roles_newconns_loop:
+	bpatch patch05_1,mem_patch05
+	call slave_newconn_once
+	branch roles_newconns_responded,match
+	call new_conn_timeout
+	nbranch roles_newconns_loop,blank
+	branch role_switch_fail_master
+roles_newconns_responded:
+	fetch 1,mem_mode
+	set0 mode_master,pdata
+	store 1,mem_mode
+	call supervision_flush
+	call calc_clke_offset
+	enable user
+	jam BT_EVT_SWITCH_SUCCESS_MASTER,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+
+
+context_load:
+	bpatch patch05_2,mem_patch05
+	set1 mark_context,mark
+	deposit rega
+	store 2,mem_context_ptr
+	force context_size,loopcnt
+	arg mem_le_state,contw
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	copy rega,contr
+	bbit1 mode_le,memcpy
+	arg mem_state,contw
+	call memcpy
+	disable attempt
+	fetch 1,mem_amaddr
+	iforce am_addr
+	jam 1,mem_current_sniff_attempt
+	branch context_load_master,master
+	jam 1,mem_current_sniff_attempt
+context_load_master:
+	fetch 1,mem_state
+	rtnbit0 state_insniff
+	fetch 1,mem_sniff_attempt
+	store 1,mem_current_sniff_attempt
+	fetch 1,mem_sniff_timeout
+	store 1,mem_current_sniff_timeout
+	rtn
+	
+context_save:
+	bpatch patch05_3,mem_patch05
+	fetch 2,mem_context_ptr
+	iforce contw
+	force context_size,loopcnt
+	arg mem_le_state,contr
+	branch memcpy,le
+	arg mem_state,contr
+	branch memcpy
+
+	
+
+context_get_next:
+	arg context_num,loopcnt
+	fetcht 1,mem_current_context
+context_get_next_loop:
+	increase 1,temp
+	compare context_num,temp,0xff
+	nbranch context_get_next_cont,true
+	arg 0,temp
+context_get_next_cont:
+	storet 1,mem_current_context
+	mul32 temp,context_size,pdata
+	arg mem_context,rega
+	iadd rega,rega
+	ifetch 1,rega
+	bbit1 state_insniff,context_get_next_sniff
+	rtnbit1 state_inconn
+	rtnbit1 state_inpage
+context_get_next_sniff:
+	loop context_get_next_loop
+	rtn
+	
+context_new:
+	bpatch patch05_4,mem_patch05
+	arg context_search_empty,regc
+	call context_search
+	nrtn zero					// all occupied
+	deposit rega
+	store 2,mem_context_ptr
+	force 0,null
+	rtn
+	
+	//return zero if anyone's wack is 1.
+	//return nzero if all wack is 0
+context_check_all_wack:
+	call check_esco_amaddr
+	branch context_check_esco_wack,true
+	fetch 2,mem_context_ptr
+	add pdata,coffset_arq,contw
+	fetch 1,mem_arq
+	istore 1,contw
+	arg context_check_a_wack,regc
+	branch context_search
+
+context_check_esco_wack:
+	fetch 1,mem_arq
+	isolate1 wack,pdata
+	branch context_esco_wack,true
+	force 1,null
+	rtn
+context_esco_wack:
+	force 0,null
+	rtn
+	
+	//rtn nzero if idle(no conn)
+context_check_idle:
+	arg context_check_inconn,regc
+	branch context_search
+	
+context_traverse_linkkey:
+	fetcht 2,mem_context_ptr
+	arg context_traverse_clearkey,regc
+	branch context_search
+	
+	
+	/* return zero if conn handle is found */
+context_search_conn_handle:
+	fetcht 1,mem_hci_conn_handle
+context_search_conn_handle2:
+	arg context_search_handle,regc
+	branch context_search
+	/* return zero if plap is found */
+context_search_plap:
+	bpatch patch05_5,mem_patch05
+	fetcht 6,mem_hci_plap
+context_search_plap2:
+	arg context_search_lap,regc
+	branch context_search
+	/* return zero if sniff anchor is meet and rega pointers to context */
+context_search_insniff:
+	arg context_search_sniff,regc
+	branch context_search
+	/* return zero if sniff window is in content with current transaction */
+context_search_sniff_window:
+	arg context_search_window,regc
+context_search:
+	bpatch patch05_6,mem_patch05
+	arg mem_context,rega
+	arg context_num,loopcnt
+context_search_loop:
+	ifetch 1,rega
+	copy regc,pc
+context_search_next:
+	increase context_size,rega
+	loop context_search_loop
+	force 1,null
+	rtn
+
+context_search_empty:
+	bbit1 state_inconn,context_search_next
+	bbit1 state_inpage,context_search_next
+	force 0,null
+	rtn
+	
+context_search_lap:
+	bbit1 state_inpage,context_search_lap_cont
+	bbit0 state_inconn,context_search_next
+context_search_lap_cont:
+	add rega,coffset_plap,contr
+	ifetch 6,contr
+	isub temp,null
+	rtn zero
+	branch context_search_next
+
+context_search_handle:
+	bbit0 state_inconn,context_search_next
+	add rega,coffset_conn_handle,contr
+	ifetch 1,contr
+	isub temp,null
+	rtn zero
+	branch context_search_next
+
+context_search_sniff:
+	bbit0 state_insniff,context_search_next
+context_search_sniff_loop:
+	call context_get_anchor
+	call sign_pdata_temp
+	isub temp,pdata
+	increase 1,pdata
+	branch context_search_sniff_miss,positive
+	copy contr,regb
+	store 9,mem_temp
+	fetch 1,mem_le_sc_calc
+	nbranch context_search_sniff_sc,blank
+	fetch 9,mem_temp
+	copy regb,contr
+	increase 5,pdata  
+	branch context_search_meet1
+context_search_sniff_sc:
+	fetch 9,mem_temp
+	copy regb,contr	
+	increase 20,pdata  
+context_search_meet1:
+	nbranch context_search_next,positive
+context_search_meet:
+	copy temp,bt_clk
+	call context_next_anchor
+	force 0,null
+	rtn
+	
+	
+context_search_sniff_miss:
+	iforce regb
+	add rega,coffset_tsniff,contr
+	ifetch 2,contr
+	branch context_search_meet,blank
+	call context_next_anchor
+	branch context_search_sniff_loop
+
+sign_pdata_temp:
+	rshift16 pdata,timeup    
+	rshift8 timeup,timeup    
+	branch sign_pdata_temp_p0,zero    
+	compare 0xf,timeup,0xf    
+	nrtn true    
+	rshift16 temp,timeup    
+	rshift8 timeup,timeup    
+	nrtn zero    
+	set1 28,temp    
+	rtn
+sign_pdata_temp_p0:    
+	rshift16 temp,timeup    
+	rshift8 timeup,timeup    
+	compare 0xf,timeup,0xf    
+	nrtn true    
+	set1 28,pdata    
+	rtn
+
+context_check_inconn:
+	bbit0 state_inconn,context_search_next
+	force 0,null 				// found
+	rtn
+	
+context_check_a_wack:
+	bbit0 state_inconn,context_search_next
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	bbit1 mode_le,context_search_next
+	add rega,coffset_arq,contr
+	ifetch 1,contr
+	bbit0 wack,context_search_next
+	force 0,null 				// found
+	rtn
+
+context_get_anchor:
+	add rega,coffset_mode,contr
+	ifetcht 1,contr
+	deposit clkn_bt
+	isolate1 mode_master,temp
+	add rega,coffset_sniff_anchor,contr
+	ifetcht 4,contr
+	rtn true
+	add rega,coffset_clk_offset,contr
+	ifetch 6,contr
+	call calc_clke2
+	deposit clke_bt
+	rtn
+
+context_next_anchor:
+	add rega,coffset_tsniff,contr
+	add rega,coffset_sniff_anchor,contw
+	ifetch 2,contr
+	iadd temp,timeup			/* wrap to 28 bits */
+	deposit timeup
+	istore 4,contw
+	branch le_context_nexthop
+	
+
+context_search_window:
+	bbit0 state_insniff,context_search_next
+	call context_get_anchor
+	iadd stop_watch,pdata
+	iadd stop_watch,pdata
+	iadd queue,pdata
+	isub temp,null
+	nbranch context_search_next,positive
+	force 0,null
+	rtn
+
+context_traverse_clearkey:
+	bbit0 state_inconn,context_search_next
+	deposit temp
+	isub rega,null
+	branch context_search_next,null
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	bbit1 mode_le,context_search_next
+	ifetch 1,rega
+	set0 state_linkkey,pdata
+	istore 1,rega
+	branch context_search_next
+
+	
+master_conn_send_packet:
+	bpatch patch05_7,mem_patch05
+	call rf_setup_time_master_slot
+master_send_packet:
+	add clkn_bt,1,bt_clk          /* master start to use native clock */
+	call fetch_self_bt_adr
+	force 0x03,freq_mode          /* we are in connection!! */
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_native
+	call send_access_word
+	branch transmit_packet
+
+master_conn_recv_packet:
+	bpatch patch06_0,mem_patch06
+	call rf_setup_time_slave_slot
+master_recv_packet:
+	add clkn_bt,1,bt_clk          /* master start to use native clock */
+	call fetch_self_bt_adr
+	force 0x03,freq_mode          /* we are in connection!! */
+	call rx_radio_freq
+	call init_rx_packet_flags
+	call prep_crypt
+	call start_rx_native	/* start listening at start_rx time */
+	call start_receiver
+master_rx_conn_finish_packet:
+	call wait_access_clkn_rt	/* master use native clock */
+	nrtn sync
+	call save_rssi
+	branch receive_packet
+	
+	
+
+master_newconn_once:
+	bpatch patch06_1,mem_patch06
+	fetch 1,mem_fhs_am_addr
+	iforce am_addr			//review
+	force type_poll,type
+	call master_conn_send_packet
+	branch master_conn_recv_packet
+
+
+
+
+
+
+/******************************************/
+/************* Inquiry Scan ***************/
+/******************************************/
+
+inquiry_scan_dispatch:
+	fetch 1,mem_scan_mode
+	rtnbit0 inq_scan_mode
+	force iscan_interval_timer,queue
+	call timer_check
+	nrtn blank
+	fetcht 2,mem_iscan_window
+	force 4,queue
+	call sniff_check_window
+	rtn user
+	call inquiry_scan_start
+	force iscan_interval_timer,queue
+	fetch 2,mem_iscan_interval
+	nbranch timer_init,sync
+	random pdata				/* inquiry scan backoff */
+	iand mask3ff,pdata
+	branch timer_init
+	
+
+inquiry_scan_start:
+	bpatch patch06_2,mem_patch06
+	jam 0,mem_fhs_am_addr
+	disable clknt
+	disable attempt
+	call afh_clear
+	and clkn_bt,0x1fc,bt_clk      /* freeze the clock, set bit[1] 0, this is version 1.1 */
+	force 0x01,freq_mode     /* slave in inquiry scan, kind of same as inquriy_response, this is version 1.1 */
+	call fetch_giac
+	call rx_radio_freq
+	setflip mark_inquiry_state,mark
+	fetch 1,mem_inquiryscan_waitcnt
+	increase 1,pdata
+	store 1,mem_inquiryscan_waitcnt
+	call fetch_diac
+	call start_receiver	/* get ready for that id packet */
+	call wait_access_forever	/* until there is timeout, or matched (true) */
+	nrtn sync
+	bpatch patch06_3,mem_patch06
+	force 0,stop_watch
+	call shutdown_radio	/* must have heard */
+	fetch 1,mem_inquiryscan_rcvcnt
+	increase 1,pdata
+	store 1,mem_inquiryscan_rcvcnt
+	call fetch_giac
+	call rf_setup_time_slave_slot
+	or_into 0x002,bt_clk               /* put clk(1) to 1 */
+	force 0x01,freq_mode               /* slave in inquriy and page, response only */
+	call tx_radio_freq
+	call fetch_diac
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_external
+	deposit clkn_bt
+	store 4,mem_clkn_bt
+	call send_access_word
+	force type_fhs,type
+	force 0,am_addr                       /* put 0 into am_addr field for fhs */
+	call scan_mode_whiten
+	call transmit_packet_whitened
+	call send_eir
+	and_into 0x1fd,bt_clk                 /* put clk(1) back to 0 */
+	increase 1,N_tx_slot
+	rtn
+
+send_eir:
+	bpatch patch06_4,mem_patch06
+	fetch 1,mem_eir_enable
+	rtn blank
+	arg mem_eir,contw
+	fetch 1,mem_local_name_length
+	copy pdata,loopcnt
+	increase 1,pdata
+	istore 1,contw	
+	copy contw,temp
+	increase 1,pdata
+	store 2,mem_tx_len	
+	copy temp,contw
+	setarg 0x09  //type:name
+	istore 1,contw		
+	arg  mem_local_name,contr
+	call memcpy       //name
+
+	arg mem_all_uuid_128bits,regc
+	arg 4,loopcnt
+	call get_all_uuid
+	arg mem_all_uuid_16bits,regc
+	arg 1,loopcnt
+	call get_all_uuid
+
+	force type_dm3,type		/* DM3 */
+	jam 2,mem_tx_lch
+	setarg mem_eir
+	store 2,mem_txptr
+	call rf_setup_time_slave_slot
+	call tx_radio_freq
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_external
+	call send_access_word
+	call scan_mode_whiten
+	call transmit_packet_whitened
+	rtn
+
+
+get_all_uuid:
+	copy contw,temp
+	copy regc,contr
+	ifetch 1,contr
+	rtn blank
+lshift_loop:
+	lshift pdata,pdata
+	loop lshift_loop
+	copy pdata,rega
+	increase 2,pdata
+	copy pdata,queue
+	fetch 2,mem_tx_len
+	iadd queue,pdata
+	store 2,mem_tx_len
+	copy temp,contw
+	copy rega,pdata
+	increase 1,pdata
+	istore 1,contw
+	copy regc,contr
+	ifetch 1,contr
+	ifetch 1,contr	//fetch type
+	istore 1,contw
+	copy rega,loopcnt
+	branch memcpy  //copy uuid
+	
+/******************************************/
+/******** Slave dispatch ***********/
+/******************************************/
+
+page_scan_dispatch:	
+	fetch 1,mem_scan_mode
+	rtnbit0 page_scan_mode
+	force pscan_interval_timer,queue
+	call timer_check
+	nrtn blank
+	fetcht 2,mem_pscan_window
+	force 40,queue
+	call sniff_check_window
+	rtn user
+	force 0,am_addr
+	jam param_pagerespto,mem_fhs_wait_counter
+	set0 mark_fhs_already_good,mark
+	call page_scan_start
+	force pscan_interval_timer,queue
+	fetch 2,mem_pscan_interval
+	branch timer_init
+	
+
+page_scan_start:
+	bpatch patch06_5,mem_patch06
+	disable clknt
+	call afh_clear
+	fetch 1,mem_pagescan_waitcnt
+	increase 1,pdata
+	store 1,mem_pagescan_waitcnt
+	force 0,N_tx_slot
+	call fetch_self_bt_adr
+	add clkn_bt,1,bt_clk      /* freeze the clock on native clock until scan window is up */
+	force 0x02, freq_mode     /* slave in inquiry and page, not response */
+	bpatch patch06_6,mem_patch06
+	call rx_radio_freq
+	call start_receiver	/* wait for that id packet from master */
+	call wait_access_forever
+	nrtn sync                          /* pscan window timeout occured, back to dispatch */
+	call shutdown_radio	/* got the id packet */
+	fetch 1,mem_pagescan_rcvcnt
+	increase 1,pdata
+	store 1,mem_pagescan_rcvcnt
+	force 0,stop_watch
+	call rf_setup_time_slave_slot
+	or_into 0x002,bt_clk               /* put clk(1) to 1 */
+	force 0x01,freq_mode               /* slave in inquriy and page, response only */
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_external
+	call send_access_word
+	call end_of_packet
+	force 0,am_addr
+	arg param_rf_setup, timeup
+	until clke_rt,meet
+	or_into 0x03,clke_bt
+	and_into 0x1fd,bt_clk
+page_scan_wait_fhs_restart:
+	bpatch patch06_7,mem_patch06
+	increase 1,N_tx_slot
+	call rx_radio_freq
+	call start_receiver
+	call wait_access_mhalfbnd
+	nbranch page_scan_wait_fhs_again,sync	/* go back if didn't find access code */
+	call scan_mode_whiten
+	call receive_packet_whitened
+	bmark1 mark_fhs_already_good,page_scan_reply_to_fhs
+page_scan_wait_fhs_again:
+	bpatch patch07_0,mem_patch07
+	fetch 1,mem_fhs_wait_counter
+	rtn blank
+	increase -1,pdata
+	store 1,mem_fhs_wait_counter
+	call rf_setup_time_master_slot	/* set up expiration time */
+	branch page_scan_wait_fhs_restart
+
+
+page_scan_reply_to_fhs:
+	bpatch patch07_1,mem_patch07
+	set0 1,clke_bt
+	set1 0,clke_bt
+	fetch 1,mem_pagescan_rcvfhscnt
+	increase 1,pdata
+	store 1,mem_pagescan_rcvfhscnt
+	call rf_setup_time_slave_slot
+	or_into 0x02,bt_clk
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_external
+	call send_access_word
+	call end_of_packet
+slave_apply_clke_bt:
+	compare 0x03,clke_bt,0x03
+	branch slave_apply_clke_bt_now,true
+	until null,mhalfbnd
+	branch slave_apply_clke_bt
+slave_apply_clke_bt_now:
+	fetch 4,mem_clke_bt
+	or_into 0x03,pdata
+	icopy clke_bt
+
+start_slave_connection:
+	bpatch patch07_2,mem_patch07
+	fetch 6,extm_lap
+	store 6,mem_plap
+	call prepare_newconn
+slave_newconn_loop:
+	call slave_newconn_once
+	branch sconn_successful,match     /* we were talked to */
+	call new_conn_timeout
+	nbranch slave_newconn_loop,blank
+	rtn
+
+	
+sconn_successful:
+	bpatch patch07_3,mem_patch07
+	call newconn_init
+	call context_new
+	nrtn zero
+	jam 0,mem_mode
+	call calc_clke_offset
+	branch context_save
+
+
+
+
+slave_dispatch:
+	bpatch patch07_4,mem_patch07
+	call calc_clke
+	call role_switch_slave
+	rtn user
+slave_loop:
+	bpatch patch07_5,mem_patch07
+	call check_bt_disabled
+	call scheduler_process
+	call slave_conn_recv_packet	/* go listen for a packet */
+	nbranch slave_notmatch,match
+	call supervision_flush
+	call scheduler_tx_l2cap_pkt
+	call prepare_tx
+	call slave_conn_send_packet
+	call parse_l2cap
+	call parse_lmp
+	fetch 1,mem_slave_rcvcnt
+	increase 1,pdata
+	store 1,mem_slave_rcvcnt
+	call calc_clke_offset
+slave_notmatch:
+	bpatch patch07_6,mem_patch07
+	call lpm_set_mult
+	call supervision_update
+	branch slave_disconnect,positive
+	call check_disconnect_timeout
+	nbranch slave_disconnect,user
+	call check_attempt
+	nbranch slave_loop,blank
+	rtn
+
+slave_disconnect:
+	bpatch patch07_7,mem_patch07
+	jam 0,mem_tester_emulate
+	jam 0,mem_debug_config
+	call quit_connection
+	set0 mark_testmode,mark
+	call test_enable_white
+	fetch 1,mem_state
+	rtn
+
+
+role_switch_slave:
+	bpatch patch08_0,mem_patch08
+	call role_switch_check
+	nrtn user
+	copy am_addr,temp
+	call get_free_amaddr
+	store 1,mem_fhs_am_addr
+	copy temp,am_addr
+	jam param_newconnto,mem_newconnto_counter
+roles_sendfhs_loop:
+	bpatch patch08_1,mem_patch08
+	call rf_setup_time_master_slot
+	force type_fhs,type
+	call slave_send_access
+	deposit clkn_bt
+	store 4,mem_clkn_bt
+	call transmit_packet
+	call rf_setup_time_slave_slot
+	enable user3
+	call slave_receive_access
+	branch roles_got_fhs_reply,sync
+	call shutdown_radio
+	call new_conn_timeout
+	nbranch roles_sendfhs_loop,blank
+	rtnmark0 mark_accept_switch
+	jam LMP_SLOT_OFFSET,mem_lmo_opcode2
+	set1 mark_switch_initiated,mark
+	rtn
+roles_got_fhs_reply:
+	enable clknt
+	call prepare_newconn
+	call afh_clear
+roles_newconn_loop:
+	bpatch patch08_2,mem_patch08
+	call master_newconn_once
+	branch roles_newconn_responded,sync
+	call new_conn_timeout
+	nbranch roles_newconn_loop,blank
+	disable clknt
+	deposit clke_bt
+	store 4,mem_next_btclk
+	rtn
+roles_newconn_responded:
+	enable master
+	bmark0 mark_accept_switch,roles_newconn_nolmp
+	set0 mark_accept_switch,mark
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_HOST_CONNECTION_REQ,mem_lmi_opcode2
+	call tid_set_reply
+roles_newconn_nolmp:
+	deposit am_addr
+	store 1,mem_amaddr
+	force 0,pdata
+	store 6,mem_clk_offset
+	fetch 1,mem_mode
+	set1 mode_master,pdata
+	store 1,mem_mode
+	call supervision_flush
+	disable master
+	enable user
+	rtn
+
+	
+
+init_rx_packet_flags:
+	bpatch patch08_3,mem_patch08
+	disable match
+	set0 mark_loopback,mark
+	set0 mark_am_addr_broadcast,mark          /* initialize slave flags */
+	set0 mark_longpacket,mark
+	set0 mark_old_packet,mark
+	fetch 1,mem_arq    /* mem_arq + am_addr */
+	set0 arqnx,pdata
+	set1 flowx,pdata
+	store 1,mem_arq
+	rtn
+
+prepare_newconn:
+	bpatch patch08_4,mem_patch08
+	jam param_newconnto,mem_newconnto_counter
+	jam param_newconn_arq,mem_arq
+	fetch 2,mem_rx_window_init
+	store 2,mem_rx_window
+	deposit clkn_bt
+	store 4,mem_next_btclk
+	rtn clknt
+	deposit clke_bt
+	store 4,mem_next_btclk
+	rtn
+
+newconn_init:
+	bpatch patch08_5,mem_patch08
+	call init_lmp_reinit
+	call new_conn_handle
+	store 1,mem_conn_handle
+	setarg 0
+	store 2,mem_l2cap_rxbuff1_len
+	setarg param_supervision_to
+	store 2,mem_supervision_to
+	fetch 1,mem_state
+	set1 state_inconn,pdata
+	store 1,mem_state
+	jam 0,mem_op
+	jam 0,mem_state_map
+	jam 0,mem_lpm_current_mult
+	branch supervision_flush
+	
+
+clear_linkkey:
+	bpatch patch08_6,mem_patch08
+	force 0,pdata
+	store 8,mem_link_key
+	istore 8,contw
+	call clear_linkstate
+	branch context_traverse_linkkey
+	
+new_conn_timeout:
+	fetch 1,mem_newconnto_counter
+	increase -1,pdata
+	store 1,mem_newconnto_counter
+	rtn
+
+new_conn_handle:
+	fetch 1,mem_handle_num
+	increase 1,pdata
+	store 1,mem_handle_num
+	rtn
+
+
+quit_connection:
+	bpatch patch08_7,mem_patch08
+	fetch 1,mem_hci_cmd
+	beq hci_cmd_remote_name_req,quit_connection_name
+	fetch 1,mem_lmp_to_send
+	bne LMP_NAME_REQ,quit_connection_cont
+quit_connection_name:
+	call cmd_check_plap
+	nbranch quit_connection_cont,zero
+	call master_name_error
+	jam 0,mem_hci_cmd
+quit_connection_cont:
+	bpatch patch09_0,mem_patch09
+	call app_disconn_reason_collect_bt
+	call sniff_exit
+	jam BT_EVT_BB_DISCONNECTED,mem_fifo_temp
+	call ui_ipc_send_event
+	call init_lmp_work
+	call l2cap_init_work
+	call sp_initialize
+	fetch 1,mem_state
+	set0 state_inconn
+	store 1,mem_state
+	jam 0,memui_reconnect_mode
+
+	fetch 1,mem_state_map
+	compare 0x0,pdata,0xc0
+	branch quit_connection_not_clear_mark,true
+	set0 mark_rxbuf_inuse,mark
+quit_connection_not_clear_mark:
+	fetch 1,mem_arq
+	bbit0 wack,quit_connection_not_clear_tx
+quit_connection_not_clear_tx:
+	fetch 1,mem_op
+	rtnbit0 op_txl2cap
+	set0 mark_tx_l2cap,mark
+	rtn
+
+slave_newconn_once:
+	bpatch patch09_1,mem_patch09
+	fetch 1,extm_newconn_am_addr
+	rtn blank     
+	icopy am_addr
+	call slave_conn_recv_packet
+	nrtn match
+	force type_null,type
+	call slave_conn_send_packet
+	deposit am_addr
+	store 1,mem_amaddr                 /* now the new am_addr is official */
+	force 0,pdata
+	store 1,extm_newconn_am_addr
+	rtn
+
+
+/******************************************/
+/********  Time consuming task  ***********/
+/******************************************/
+prepare_tx:
+	bpatch patch09_2,mem_patch09
+	fetch 1,mem_state
+	bbit0 state_insco,prepare_tx_not_sco
+	force type_hv3,type
+	bmark0 mark_esco,prepare_tx_not_esco
+	call check_esco_amaddr
+	nbranch prepare_tx_not_sco,true
+	branch prepare_tx_not_sco,attempt	
+	call set_wait_ack					/* send esco only at the first attempt */
+	setarg 2		/* esco only has 1 retry */
+	store 2,mem_retransmission_cnt
+	rtn
+prepare_tx_not_esco:
+	nrtn attempt						/* send sco only at the first attempt */
+prepare_tx_not_sco:
+	bpatch patch09_3,mem_patch09
+	call context_check_all_wack			 //abandon mark_retransmit, use context_check_all_wack instead.
+	nbranch prepare_tx_no_retransmit,zero
+	fetch 1,mem_arq
+	bbit0 wack,prepare_tx_pollnull		/* other wack, tx buffer in use, but not me */
+prepare_tx_retransmit:
+	bmark1 mark_loopback,prepare_tx_loopback
+	fetch 1,mem_debug_config
+	bbit1 debug_tx_pattern,prepare_tx_txpat
+	fetch 2,mem_retransmission_cnt
+	increase -1,pdata
+	store 2,mem_retransmission_cnt
+	branch prepare_tx_nomore_retransmit,blank
+	fetch 1,mem_last_type
+	iforce type
+	rtn
+
+prepare_tx_nomore_retransmit:
+	bpatch patch09_4,mem_patch09
+	call clear_got_tx
+prepare_tx_no_retransmit:
+	call check_esco_amaddr
+	branch prepare_tx_pollnull,true
+	call send_lmp
+	branch prepare_tx_sendlmp,user
+	fetch 1,mem_op
+	bbit1 op_txl2cap,prepare_tx_sendl2cap
+	bmark1 mark_loopback,prepare_tx_loopback
+	fetch 1,mem_debug_config
+	bbit1 debug_tx_pattern,prepare_tx_txpat
+prepare_tx_pollnull:
+	force type_poll,type				/* POLL for master */
+	rtn master
+	force type_null,type				/* default is NULL */
+	rtn
+prepare_tx_loopback:
+	bpatch patch09_5,mem_patch09
+	fetch 1,mem_rx_type
+	iforce type
+	rtnne 1
+	force type_null,type
+	rtn
+prepare_tx_txpat:
+	fetch 1,test_mode_packet_type
+	and pdata,0xf,type
+	set1 mark_loopback,mark
+	rtn
+prepare_tx_sendlmp:
+	force type_lmp,type
+	branch set_wait_ack
+prepare_tx_sendl2cap:
+	call tx_l2cap_type
+
+set_wait_ack:
+	bpatch patch09_6,mem_patch09
+	fetcht 1,mem_arq
+	set1 wack,temp
+	storet 1,mem_arq
+	deposit type
+	store 1,mem_last_type
+	setarg 0xffff
+	store 2,mem_retransmission_cnt
+	rtn
+
+tx_l2cap_type:
+	bpatch patch09_7,mem_patch09
+	fetch 1,mem_state_map
+	isolate1 smap_edr,pdata
+	fetch 2,mem_tx_len
+	branch tx_l2cap_type_edr,true
+	force type_dm1,type		/* DM1 */
+	sub pdata,17,null			
+	rtn positive
+	force type_dh1,type		/* DH1 */
+	sub pdata,27,null				
+	rtn positive
+	force type_dm3,type		/* DM3 */
+	sub pdata,121,null
+	rtn positive
+	force type_dh3,type		/* DH3 */
+	sub pdata,183,null
+	rtn positive	
+	force type_dm5,type		/* DM5 */
+	sub pdata,224,null
+	rtn positive
+	force type_dh5,type		/* DH5 */
+	rtn
+tx_l2cap_type_edr:
+	force type_dm1,type
+	sub pdata,17,null
+	rtn positive
+	force type_dh1,type		/*2-DH1*/
+	sub pdata,54,null
+	rtn positive
+	force type_dm3,type		/*2-DH3*/
+	arg 367,temp
+	isub temp,null
+	nrtn positive
+	force type_dm5,type		/*2-DH5*/
+	arg 679,temp
+	isub temp,null
+	nrtn positive
+	force type_dh5,type		/*3-DH5*/
+	rtn
+
+
+/******************************************/
+/***********  Receive Packet  *************/
+/******************************************/
+
+
+
+slave_receive_master_slot:
+	fetch 1,mem_state
+	bbit0 state_insniff,slave_receive_notsniff
+	fetch 2,mem_tsniff
+	branch slave_receive_notsniff,blank		/* role switch */
+	nbranch slave_receive_sniff,attempt
+slave_receive_notsniff:
+	call rf_setup_time_master_slot
+slave_receive_access:
+	add clke_bt,1,bt_clk
+slave_receive_sniff:
+	enable swfine
+	fetch 2,mem_rx_window
+	rshift pdata,pdata
+	arg param_pll_setup,temp
+	iadd temp,pdata
+	call ahead_window
+	call fetch_extm_bt_adr
+	force 0x03,freq_mode          /* connection hop */
+	call rx_radio_freq
+	call init_rx_packet_flags
+	call prep_crypt
+	bpatch patch0a_0,mem_patch0a
+	fetch 2,mem_rx_window
+	rshift pdata,pdata
+	call ahead_window
+	call start_receiver
+	enable decode_fec0
+	fetch 2,mem_rx_window
+	arg param_clke_cal,temp
+	iadd temp,stop_watch
+	correlate null,timeout
+	copy clke,temp
+	storet 6,mem_sync_clke
+	disable decode_fec0
+	nrtn sync
+	arg param_clke_cal,clke_rt
+	copy bt_clk,clke_bt
+	branch lpm_adjust_clk,wake
+	rtn
+	
+
+slave_conn_recv_packet:
+	bpatch patch0a_1,mem_patch0a
+	call slave_receive_master_slot
+	nbranch shutdown_radio,sync
+	call save_rssi
+	bmark0 mark_testmode,receive_packet
+	fetch 2,mem_tst_pktcnt_sync
+	increase 1,pdata
+	store 2,mem_tst_pktcnt_sync
+receive_packet:
+	rshift bt_clk,temp
+	or temp,0x40,white_init
+receive_packet_whitened:
+	bpatch patch0a_2,mem_patch0a
+	enable enable_white
+	enable enable_hec
+	enable decode_fec1
+	parse demod,bucket,3  /* get am_addr */
+	rshift8 pwindow,pdata
+	store 1,mem_temp_am_addr
+	parse demod,bucket,4  /* get type */
+	inject bucket,7       /* align up to pwindow */
+	copy pwindow,pdata
+	store 1,mem_rx_type
+	parse demod,bucket,3  /* get arq */
+	rshift8 pwindow,pdata
+	store 1,mem_temp_arq
+	fetch 1,mem_rx_type
+	sub pdata,3,null
+	branch receive_packet_noedr,positive
+	beq 7,receive_packet_noedr		/* esco packet */
+	fetch 1,mem_state_map
+	isolate1 smap_edr,pdata
+	setflag true,PSK,radio_ctrl
+receive_packet_noedr:
+	bpatch patch0a_3,mem_patch0a
+	parse demod,bucket,8   /* cycle thru hec */
+	disable decode_fec1
+	disable enable_hec   /* at this moment, 1 seqn + 8 hec is in shift */
+	branch error_header,crc_failed  /* if hec error, nothing is valid */
+	bmark0 mark_testmode,receive_packet_amchk
+	fetch 2,mem_tst_pktcnt_hec
+	increase 1,pdata
+	store 2,mem_tst_pktcnt_hec
+receive_packet_amchk:	
+	bpatch patch0a_4,mem_patch0a
+	fetch 1,mem_temp_am_addr
+	compare 0,pdata,0x07           /* check for broadcast */
+	setflag true,mark_am_addr_broadcast,mark   /* received a broadcast message, can fire ar_addr if during unpark_req */
+	branch am_addr_ok,true
+	icompare 0x07,am_addr
+	branch am_addr_match,true
+	bmark0 mark_esco,end_of_packet
+	fetcht 1,mem_saved_amaddr
+	icompare 0x7,temp
+	nbranch end_of_packet,true
+	fetch 1,mem_arq    /* mem_arq + am_addr */
+	set0 arqnx,pdata
+	set1 flowx,pdata
+	store 1,mem_arq
+am_addr_match:
+	enable match
+am_addr_ok:
+	bpatch patch0a_5,mem_patch0a
+	fetch 1,mem_rx_type
+	icopy type
+	bmark1 mark_am_addr_broadcast,arqn_bypass        /* arqn doesn't make sense */
+	fetcht 1,mem_temp_arq
+	fetch 1,mem_arq
+	set0 flow,pdata
+	isolate1 flow,temp
+	setflag true,flow,pdata
+	isolate1 arqn,temp
+	setflag true,arqn,pdata
+	store 1,mem_arq
+	isolate0 arqn,temp
+	branch arqn_bypass,true
+	call clear_got_tx
+arqn_bypass:
+	bpatch patch0a_6,mem_patch0a
+	arg 0,temp
+	call reserve_slot
+	and type,0xf,pdata
+	beq type_poll,process_poll
+	beq type_null,end_of_packet	/* null */
+	beq type_fhs,process_fhs
+	fetcht 1,mem_temp_arq
+	fetch 1,mem_arq
+	icompare 0x04,temp    /* bit 2 is seqn */
+	nbranch rx_type_dispatch,true   /* different then it's new */
+	bmark0 mark_am_addr_broadcast,failed_seqn         /* seqn failed, and not broadcast */
+	bbit0 bcast1,rx_type_dispatch           /* first broadcast never fail seqn */
+failed_seqn:
+	set1 mark_old_packet,mark
+rx_type_dispatch:
+	bpatch patch0a_7,mem_patch0a
+	deposit type
+	beq type_dm1, process_dm1
+	beq type_dh1, process_dh1
+	beq type_hv3, process_hev
+	beq type_3dh1, process_3dh1
+	arg 4,temp
+	call reserve_slot
+	beq type_dm3, process_dm3
+	beq type_dh3, process_dh3
+	arg 8,temp
+	call reserve_slot
+	beq type_dm5, process_dm5
+	beq type_dh5, process_dh5
+	rtn
+
+
+process_hev:
+	bpatch patch0b_0,mem_patch0b
+	enable decode_fec0
+	enable enable_crc
+	enable encrypt
+	arg mem_sco_ibuf,contw
+	force 30,loopcnt
+process_hev_loop:	
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	loop process_hev_loop
+	bmark0 mark_esco,end_of_packet
+	parse demod,bucket,16  /* cycle through the crc */
+	nsetflag crc_failed,mark_esco_rxok,mark
+	branch error_payload,crc_failed
+	branch ack_payload
+
+
+process_poll:
+	branch end_of_packet
+
+process_dm3:
+process_dm5:
+	set1 mark_longpacket,mark
+process_dm1:
+	enable decode_fec2
+	branch process_dmh
+	
+process_dh3:
+process_dh5:
+	set1 mark_longpacket,mark
+process_3dh1:
+	set1 PSK3M,radio_ctrl
+process_dh1:
+	enable decode_fec0
+process_dmh:
+	bpatch patch0b_1,mem_patch0b
+	bmark1 mark_rxbuf_inuse,end_of_packet			/* buffer in use, nack */
+	isolate0 PSK,radio_ctrl
+	branch process_dmh_noedr,true
+	disable enable_white
+	enable decode_fec0
+	disable decode_fec2
+	add clkn_bt,2,timeup
+	correlate clkn_bt,meet
+	nbranch error_payload,sync
+	set1 mark_longpacket,mark
+	enable enable_white
+process_dmh_noedr:
+	bpatch patch0b_2,mem_patch0b
+	enable encrypt
+	enable enable_crc
+	parse demod,bucket,3  /* parse in lch+l2cap flow */
+	rshift8 pwindow,pdata
+	store 1,mem_lch_code		/* for loopback */
+	parse demod,bucket,5  /* parse in 5 bit packetlength */
+	bmark1 mark_longpacket,process_dmh_long
+	rshift3 pwindow,loopcnt
+	rshift3 loopcnt,loopcnt
+	branch process_dmh_common
+process_dmh_long:
+	parse demod,bucket,5		/* multi slot packet length of dh3 dh5 dm3 dm5 */
+	rshift pwindow,loopcnt
+	parse demod,bucket,3  /* undefined+bit 9 of length */
+process_dmh_common:	
+	bpatch patch0b_3,mem_patch0b
+	deposit loopcnt
+	store 2,mem_len
+	branch process_dmh_data_end,blank
+	isub mask3ff,null
+	branch error_payload,positive	/* packet too large, discard */
+	bpatch patch0b_4,mem_patch0b
+	set0 mark_fhs_eir,mark
+	fetch 1,mem_lch_code
+	and_into 0x03,pdata
+	arg mem_rxbuf,contw //lmp_data or test packet
+	beq LLID_LMP,process_lmp
+	bmark1 mark_testmode,process_dmh_data
+	//non-HCI mode
+	fetch 1,mem_lch_code
+	and_into 0x03,pdata
+	beq LLID_L2CAP_START,process_dmh_data_l2cap_start_pkt
+	beq LLID_L2CAP_CONT,process_dmh_data_l2cap_continue_pkt
+	branch error_payload
+
+process_lmp:
+	fetch 2,mem_len
+	sub pdata,0x70,null		//lmp buffer size
+	nbranch error_payload,positive
+	bmark1 mark_old_packet,ack_payload
+	branch process_dmh_data
+
+	
+process_dmh_data_l2cap_start_pkt:
+	bpatch patch0b_5,mem_patch0b
+	bmark1 mark_old_packet,ack_payload
+	fetch 2,mem_len
+	arg 0x2e0,temp //l2cap buffer size
+	isub temp,null
+	branch error_payload,positive
+	fetch 1,mem_l2cap_rxbuff_inuse
+	bbit0 L2CAP_INUSE_BUFF1,process_dmh_data_into_buff1
+	bbit0 L2CAP_INUSE_BUFF2,process_dmh_data_into_buff2
+	branch end_of_packet
+process_dmh_data_into_buff1:
+	jam 1,mem_l2cap_rxbuff_new //new data in buff 1
+	fetch 2,mem_l2cap_rxbuff1_len
+	bne 0,end_of_packet			//baseband head error
+	arg mem_l2cap_rxbuff1,contw
+	branch process_dmh_data
+process_dmh_data_into_buff2:
+	jam 2,mem_l2cap_rxbuff_new //new data in buff 2
+	fetch 2,mem_l2cap_rxbuff2_len
+	bne 0,end_of_packet
+	arg mem_l2cap_rxbuff2,contw
+	branch process_dmh_data
+	
+process_dmh_data_l2cap_continue_pkt:
+	bpatch patch0b_6,mem_patch0b
+	bmark1 mark_old_packet,ack_payload
+	fetch 2,mem_len
+	arg 0x2e0,temp //l2cap buffer size
+	isub temp,null
+	branch error_payload,positive
+	fetch 1,mem_l2cap_rxbuff_new
+	beq 1,process_dmh_data_l2cap_continue_pkt1
+	beq 2,process_dmh_data_l2cap_continue_pkt2
+	branch end_of_packet
+process_dmh_data_l2cap_continue_pkt1:
+	arg mem_l2cap_rxbuff1,contw
+	fetch 2,mem_l2cap_rxbuff1_len
+	iadd contw,contw
+	branch process_dmh_data
+process_dmh_data_l2cap_continue_pkt2:
+	arg mem_l2cap_rxbuff2,contw
+	fetch 2,mem_l2cap_rxbuff2_len
+	iadd contw,contw
+process_dmh_data:	
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	loop process_dmh_data
+process_dmh_data_end:	
+	bpatch patch0b_7,mem_patch0b
+	parse demod,bucket,16  /* cycle through the crc */
+	branch error_payload_crc,crc_failed
+	fetch 1,mem_l2cap_flow_ctrl_flag
+	beq L2CAP_FLOW_CTRL_ENABLE,end_of_packet
+	bmark1 mark_testmode,process_dmh_cont
+	bmark1 mark_old_packet,redundant_payload
+	fetch 1,mem_lch_code
+	compare 3,pdata,3
+	branch process_dmh_cont,true
+	fetch 2,mem_len
+	branch process_dmh_cont,blank
+	bpatch patch0c_0,mem_patch0c
+	fetch 1,mem_l2cap_rxbuff_new
+	beq 1,process_l2cap_pass_crc_buff1
+	beq 2,process_l2cap_pass_crc_buff2
+	branch assert
+process_l2cap_pass_crc_buff1:
+	fetch 2,mem_l2cap_rxbuff1_len
+	fetcht 2,mem_len
+	iadd temp,pdata
+	store 2,mem_l2cap_rxbuff1_len
+	beq 0,assert
+	fetcht 2,mem_l2cap_rxbuff1// l2cap payload length
+	increase 4,temp
+	isub temp,null
+	call l2cap_buff1_inuse,zero //l2cap pkts not ended
+	branch process_dmh_cont
+process_l2cap_pass_crc_buff2:
+	fetch 2,mem_l2cap_rxbuff2_len
+	fetcht 2,mem_len
+	iadd temp,pdata
+	store 2,mem_l2cap_rxbuff2_len
+	beq 0,assert
+	fetcht 2,mem_l2cap_rxbuff2// l2cap payload length 
+	add temp,4,temp
+	isub temp,null
+	call l2cap_buff2_inuse,zero //l2cap pkts not ended
+	branch process_dmh_cont
+process_dmh_cont:
+	bpatch patch0c_1,mem_patch0c
+	fetcht 1,mem_state_map
+	fetch 1,mem_lch_code
+	compare 3,pdata,0x03
+	setflag true,smap_rxlmp,temp
+	nsetflag true,smap_rxl2cap,temp
+	storet 1,mem_state_map
+	nbranch process_dmh_cont_rxbuf_not_use,true
+	set1 mark_rxbuf_inuse,mark
+process_dmh_cont_rxbuf_not_use:
+	bmark0 mark_testmode,ack_payload
+	isolate1 smap_rxlmp,temp
+	branch ack_payload,true
+	fetch 2,mem_tst_pktcnt_crc
+	increase 1,pdata
+	store 2,mem_tst_pktcnt_crc
+	set1 mark_loopback,mark
+	set0 smap_rxl2cap,temp
+	set0 mark_rxbuf_inuse,mark
+	storet 1,mem_state_map
+ack_payload:
+	bpatch patch0c_2,mem_patch0c
+	fetcht 1,mem_temp_arq
+	fetch 1,mem_arq
+	set1 arqnx,pdata
+	isolate1 seqn,temp            /* if accept, seqn always copies from the header */
+	setflag true,seqn,pdata
+	isolate1 mark_am_addr_broadcast,mark
+	setflag true,bcast1,pdata
+	store 1,mem_arq
+	fetch 2,mem_len
+	nbranch end_of_packet,blank
+	fetch 1,mem_state_map
+	set0 smap_rxl2cap,pdata//better to do this in l2cap_flow_ctrl_stop
+	store 1,mem_state_map
+	fetch 1,mem_lch_code
+	compare 0x01,pdata,0x07
+	//call l2cap_flow_ctrl_stop,true
+	branch end_of_packet
+	
+error_header:
+	bpatch patch0c_3,mem_patch0c
+	disable match
+	fetch 2,mem_rx_hec_err
+	increase 1,pdata
+	store 2,mem_rx_hec_err
+	branch end_of_packet
+error_payload_crc:
+	fetch 2,mem_rx_crc_err
+	increase 1,pdata
+	store 2,mem_rx_crc_err
+	call discard_pkt
+	bmark0 mark_testmode,error_payload
+	set1 mark_loopback,mark
+error_payload:
+	branch end_of_packet
+	
+discard_pkt:
+	bpatch patch0c_4,mem_patch0c
+	fetch 1,mem_lch_code
+	compare 3,pdata,0x03
+	nbranch discard_pkt_l2cap,true
+discard_pkt_lmp:	
+	fetcht 1,mem_state_map
+	set0 smap_rxlmp,temp
+	storet 1,mem_state_map
+	rtn
+discard_pkt_l2cap:
+//	isolate1 mark_testmode,mark
+//	setflag true,mark_loopback,mark
+	fetcht 1,mem_state_map
+	set0 smap_rxl2cap,temp
+	storet 1,mem_state_map
+	branch  h4_send_acl_trigger_clear
+
+redundant_payload:
+	fetch 1,mem_arq
+	set1 arqnx,pdata
+	store 1,mem_arq
+end_of_packet:
+	bpatch patch0c_5,mem_patch0c
+	disable encode_fec0
+	disable encode_fec2
+	disable decode_fec0
+	disable decode_fec2
+	disable enable_crc
+	disable encrypt
+	disable enable_white
+	branch shutdown_radio,is_rx
+	until null,tx_clear
+	nop 100          /* flush out the last bit */
+	branch shutdown_radio
+	
+process_fhs:
+	bpatch patch0c_6,mem_patch0c
+	enable enable_crc
+	enable decode_fec2
+	parse demod,bucket,72
+	isolate1 58,pdata
+	setflag true,mark_fhs_eir,mark
+	copy bt_adr,temp             /* save current address to aside */
+	ialigned bt_adr            /* send it to access gen */
+	ialigned fhs0			/* get fhs_misc */
+	pulse recalc                /* calc the lap just received from the other guy */
+	setsect 2,0xfffff             /* preset ms of shift reg as big mask */
+	setsect 3,0x0ffff             /* preset ms of shift reg as big mask */
+	nop 32                       /* 30 cycles after recalc */
+	iverify fhs_parity             /* check fhs_parity against ls 34 bits at shift reg, with msb 36 bits as mask */
+	deposit lap
+	store 3,extm_lap
+	deposit uap
+	store 1,extm_uap
+	copy temp,bt_adr             /* put the address back */
+	branch fhs_parity_ok,true     /* fhs parity failed */
+	branch error_payload
+fhs_parity_ok:
+	bpatch patch0c_7,mem_patch0c
+	parse demod,bucket,72
+	ialigned fhs1                   /* give host the information on class and fhs_misc */
+	ialigned am_addr                /* store the am_addr the master assigned us */
+	ialigned nap
+	ialigned regb                   /* store external clock in regb according to clock format */
+	force 0,pdata
+	parse demod,bucket,16  /* cycle through the crc */
+	branch error_payload,crc_failed
+	setarg 0x0ffffffc
+	iand regb,pdata
+	store 4,mem_clke_bt
+	deposit fhs_class
+	store 3,extm_class
+	deposit fhs_misc
+	store 1,extm_fhs_misc
+	deposit am_addr
+	store 1,extm_newconn_am_addr
+	deposit nap
+	store 2,extm_nap
+	deposit bt_clk
+	inject rxf,32
+	compare type_fhs,type,0x0f         /* see if this was fhs packet */
+	setflag true,mark_fhs_already_good,mark
+	branch end_of_packet
+
+clear_got_tx:
+	bpatch patch0d_0,mem_patch0d
+	fetch 1,mem_arq
+	rtnbit0 wack
+	set0 wack,pdata
+	setflip seqnx,pdata
+	store 1,mem_arq
+	fetch 1,mem_last_type
+	beq type_lmp,clear_got_txlmp
+	rtneq type_hv3
+	fetch 1,mem_op
+	rtnbit0 op_txl2cap,pdata
+	set0 op_txl2cap,pdata
+	set1 op_pkt_comp,pdata
+	store 1,mem_op
+	set0 mark_tx_l2cap,mark
+	fetch 2,mem_l2cap_tx_multi_offset
+	nrtn blank
+	fetch 1,mem_op
+	set0 op_pkt_comp,pdata
+	store 1,mem_op
+	branch l2cap_malloc_free
+
+clear_got_txlmp:
+	bpatch patch0d_1,mem_patch0d
+	fetch 1,mem_lmo_header_opcode
+	rshift pdata,pdata
+	beq LMP_START_ENCRYPTION_REQ,start_encryption
+	beq LMP_STOP_ENCRYPTION_REQ,stop_encryption
+	beq LMP_UNSNIFF_REQ, sniff_exit
+	beq LMP_ESCAPE,clear_lmp_escape
+	rtnne LMP_ACCEPTED
+	fetch 1,mem_lmo_payload
+	beq LMP_SCO_LINK_REQ,sco_link_req_by_slave
+	beq LMP_START_ENCRYPTION_REQ,clear_send_setup_complete
+	rtn
+
+clear_lmp_escape:
+	fetch 1,mem_lmo_payload
+	set1 7,pdata
+	rtn
+clear_send_setup_complete:
+	rtn master
+	fetch 1,mem_state
+	rtnbit1 state_conn_comp
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	rtn
+	
+// nokia BH-105  CALLING when reconnection
+sco_link_req_by_slave:
+	rtn master
+	fetch 1,mem_mode
+	isolate1 send_sco_when_slave,pdata
+	branch clean_mem_mode,true
+	//jam LMP_REMOVE_SCO_LINK_REQ,mem_lmo_opcode2
+	rtn
+clean_mem_mode:
+	set0 send_sco_when_slave,pdata
+	store 1,mem_mode
+	rtn
+	
+start_encryption:
+	bpatch patch0d_2,mem_patch0d
+	fetch 1,mem_state_map
+	set1 smap_encryption,pdata
+	store 1,mem_state_map
+	jam 1,core_encrypt
+	fetch 1,mem_state
+	isolate1 state_conn_comp,pdata
+	rtn
+
+stop_encryption:
+	bpatch patch0d_3,mem_patch0d
+	fetch 1,mem_state_map
+	set0 smap_encryption,pdata
+	store 1,mem_state_map
+	jam 0,core_encrypt
+	rtn
+
+
+sniff_init:
+	bpatch patch0d_4,mem_patch0d
+	copy clkn_bt,pdata
+	store 4,mem_lpm_delay_after_sniff
+	add clkn_bt,3,rega
+	branch sniff_init_master,master
+	add clke_bt,3,rega
+sniff_init_master:
+	fetcht 2,mem_tsniff
+	deposit rega
+	set0 27,pdata
+	idiv temp
+	fetch 2,mem_dsniff
+	call wait_div_end
+	remainder regc
+	isub regc,pdata
+	branch sniff_init_nowrap,positive
+	iadd temp,pdata
+sniff_init_nowrap:
+	iadd rega,pdata
+	store 4,mem_sniff_anchor
+	jam SWITCH_FLAG_INIT,mem_switch_flag
+	fetch 1,mem_state
+	set1 state_insniff,pdata
+	store 1,mem_state
+	fetch 1,mem_sniff_attempt
+	store 1,mem_current_sniff_attempt
+	setarg 0
+	store 3,mem_sniff_rcv
+	store 3,mem_sniff_lost
+	store 1,mem_sniff_unint_lost
+	jam BT_EVT_ENTER_SNIFF,mem_fifo_temp
+	call ui_ipc_send_event
+	fetch 2,mem_rx_window_sniff
+	store 2,mem_rx_window
+	nrtn master
+	add am_addr,-1,queue
+	rtn
+
+sniff_exit:
+	bpatch patch0d_5,mem_patch0d
+	fetch 1,mem_state
+	rtnbit0 state_insniff
+	set0 state_insniff,pdata
+	store 1,mem_state
+	fetch 2,mem_rx_window_init
+	store 2,mem_rx_window
+	disable wake
+	jam BT_EVT_EXIT_SNIFF,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+check_attempt:
+	bpatch patch0d_6,mem_patch0d
+	enable attempt
+	fetch 1,mem_state
+	bbit1 state_insniff,check_attempt_sniff
+	rtnmark1 mark_testmode						/* pdata won't be blank now, try attempt */
+	fetch 1,mem_arq
+	rtnbit1 wack
+	fetch 1,mem_lmp_to_send
+	nrtn blank
+	fetch 1,mem_op
+	rtnbit1 op_txl2cap
+check_attempt_nomore:
+	force 0,pdata
+	rtn
+
+check_attempt_sniff:
+	bbit0 state_insco,check_attempt_not_sco
+	fetch 1,mem_current_sniff_attempt
+	beq 2,check_attempt_sniff_restore_sco
+	fetch 1,mem_arq
+	bbit1 wack,check_attempt_notimeout
+	bmark0 mark_esco_rxok,check_attempt_notimeout
+check_attempt_sniff_restore_sco:
+	nbranch check_attempt_notimeout,master
+	fetch 1,mem_lmp_to_send
+	nbranch check_attempt_notimeout,blank
+check_attempt_sco_master:
+	fetch 1,mem_sco_poll
+	increase -1,pdata
+	store 1,mem_sco_poll
+	nbranch check_attempt_nomore,blank
+	jam param_sco_poll,mem_sco_poll
+	branch check_attempt_notimeout
+
+
+
+
+
+	
+check_attempt_not_sco:
+	fetch 1,mem_current_sniff_attempt
+	bne 1,check_attempt_notimeout
+	fetch 1,mem_current_sniff_timeout
+	branch check_attempt_notimeout,blank
+	increase -1,pdata
+	store 1,mem_current_sniff_timeout
+	fetch 1,mem_arq
+	rtnbit1 wack						// waiting for next ack
+	nrtn match						// waiting for next poll
+check_attempt_notimeout:
+	fetch 1,mem_current_sniff_attempt
+	increase -1,pdata
+	store 1,mem_current_sniff_attempt
+	rtn
+
+
+
+
+
+
+
+
+
+	/* enable user if sniff window vialation, queue is extra overhead */
+sniff_check_window:
+	bpatch patch0d_7,mem_patch0d
+	disable swfine
+	copy temp,stop_watch
+	call context_search_sniff_window
+	disable user
+	nrtn zero
+	force 0,stop_watch
+	enable user
+	rtn
+
+	//return true if it is esco context
+check_esco_amaddr:
+	fetch 1,mem_esco_addr
+	icompare 0xff,am_addr
+	rtn
+	
+
+parse_l2cap:	
+	bpatch patch0e_0,mem_patch0e
+	set0 mark_rxbuf_inuse,mark 
+parse_l2cap_cont:
+	jam L2CAP_RX_CLEAR,mem_l2cap_rx_done
+	fetch 1,mem_l2cap_rxbuff_inuse
+	rtn blank
+	isolate1 L2CAP_INUSE_BUFF1,pdata
+	arg mem_l2cap_rxbuff1,contr
+	call process_rx_l2cap_pkt,true
+	bpatch patch0e_1,mem_patch0e
+	fetch 1,mem_l2cap_rx_done
+	beq L2CAP_RX_DONE,parse_l2cap_release_buff1
+	
+	jam L2CAP_RX_CLEAR,mem_l2cap_rx_done
+	fetch 1,mem_l2cap_rxbuff_inuse
+	rtnbit0 L2CAP_INUSE_BUFF2
+	arg mem_l2cap_rxbuff2,contr	
+	call process_rx_l2cap_pkt
+	fetch 1,mem_l2cap_rx_done
+	beq L2CAP_RX_DONE,parse_l2cap_release_buff2
+	rtn
+		
+parse_l2cap_release_buff1:
+	fetch 1,mem_l2cap_rxbuff_inuse
+	set0 L2CAP_INUSE_BUFF1,pdata
+	store 1,mem_l2cap_rxbuff_inuse
+	setarg 0
+	store 2,mem_l2cap_rxbuff1_len
+	rtn
+parse_l2cap_release_buff2:
+	fetch 1,mem_l2cap_rxbuff_inuse
+	set0 L2CAP_INUSE_BUFF2,pdata
+	store 1,mem_l2cap_rxbuff_inuse
+	setarg 0
+	store 2,mem_l2cap_rxbuff2_len
+	rtn
+
+l2cap_buff1_inuse:
+	fetch 1,mem_l2cap_rxbuff_inuse
+	set1 L2CAP_INUSE_BUFF1,pdata
+	store 1,mem_l2cap_rxbuff_inuse
+	rtn
+
+l2cap_buff2_inuse:
+	fetch 1,mem_l2cap_rxbuff_inuse
+	set1 L2CAP_INUSE_BUFF2,pdata
+	store 1,mem_l2cap_rxbuff_inuse
+	rtn
+
+/******************************************/
+/**********  Transmit Packet  *************/
+/******************************************/
+
+slave_send_access:
+	bpatch patch0e_2,mem_patch0e
+	add clke_bt,1,bt_clk          /* slave start to use native clock */
+	call fetch_extm_bt_adr
+	force 0x03,freq_mode          /* connection frequency */
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_external
+	branch send_access_word
+	
+
+slave_conn_send_packet:
+	bpatch patch0e_3,mem_patch0e
+	call rf_setup_time_slave_slot
+	deposit clke_bt
+	fetcht 4,mem_next_btclk
+	isub temp,pdata
+	rtnne 1					/* missed slave slot */
+	compare type_null,type,0x1f
+	nbranch slave_conn_send_access,true
+	fetch 1,mem_rx_type
+	rtn blank					/* null packet, do nothing */
+slave_conn_send_access:
+	call slave_send_access
+transmit_packet:
+	compare type_id,type,0x1f        /* is this id only ? */
+	branch end_of_packet,true
+	rshift bt_clk,temp
+	or temp,0x40,white_init
+transmit_packet_whitened:
+	bpatch patch0e_4,mem_patch0e
+	enable enable_white
+	enable enable_hec
+	enable encode_fec1
+	set0 mark_longpacket,mark
+	deposit am_addr
+	inject mod,3             /* am_addr, temp is disabled */
+	deposit type
+	inject mod,4
+	fetch 1,mem_arq   /* aka mem_arq */
+	inject bucket,4  /* align up to flowx, arqnx, seqnx */
+	inject mod,3
+	enable enable_parity
+	inject mod,8   /* transmit parity */
+	disable encode_fec1
+	disable enable_parity
+	disable enable_hec
+	set0 PSK3M,radio_ctrl
+	arg 0,temp
+	call reserve_slot
+	bpatch patch0e_5,mem_patch0e
+	and type,0x1f,pdata
+	beq type_lmp, transmit_lmp
+	beq type_null, end_of_packet
+	beq type_poll, end_of_packet
+	beq type_fhs, transmit_fhs  /* master mode fhs need got_tx and ack */
+	beq type_dm1, transmit_dm1
+	beq type_dh1, transmit_dh1
+	beq type_hv3, transmit_hev
+	beq type_3dh1, transmit_3dh1
+	arg 4,temp
+	call reserve_slot
+	beq type_dm3, transmit_dm3
+	beq type_dh3, transmit_dh3
+	arg 8,temp
+	call reserve_slot
+	beq type_dh5, transmit_dh5
+	branch transmit_dm5	/* must be 14, dm5 */
+
+
+transmit_hev:
+	bpatch patch0e_6,mem_patch0e
+	enable encode_fec0
+	enable enable_crc
+	enable encrypt
+	force 30,loopcnt
+	arg mem_sco_obuf,contr
+transmit_ev_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop transmit_ev_loop
+	bmark1 mark_esco,transmit_end
+	branch end_of_packet
+	
+transmit_fhs:
+	bpatch patch0e_7,mem_patch0e
+	fetch 1,mem_fhs_am_addr            /* this is the am_addr to assign to slave */
+	icopy am_addr
+	fetch 1,mem_fhs_misc
+	icopy fhs_misc    /* [7:6]SR [5:4]SP [3:1]PS [0]undef  */
+	fetch 3,mem_class   /* store away class */
+	icopy fhs_class
+	fetch 2,mem_nap
+	icopy nap
+	enable enable_crc
+	enable encode_fec2
+	copy bt_adr,rega
+	call fetch_self_bt_adr
+	pulse recalc
+	nop 32                    /* 30 cycles after recalc for sync word generation */
+	copy bt_clk,timeup
+	fetch 4,mem_clkn_bt
+	icopy bt_clk
+	preload fhs0
+	set1 58,pdata		/* eir */
+	inject mod,72
+	preload fhs1
+	inject mod,72
+	copy timeup,bt_clk
+	copy rega,bt_adr
+	enable enable_parity
+	inject mod,16   /* generate CRC */
+	disable enable_parity
+	branch end_of_packet
+
+transmit_lmp:    /* expect the payload ready as in bb spec */
+	bpatch patch0f_0,mem_patch0f
+	enable encrypt
+	enable enable_crc
+	enable encode_fec2
+	fetch 1,mem_lmo_header_length   /* this is the payload header */
+	and pdata,0x1f8,temp       /* temp is number of bits, check payload header format */
+	arg mem_lmo_header_length,contr
+	increase 8,temp   /* temp is in bits */
+transmit_lmp_loop:
+	add temp,-72,regc   /* regc is remainder */
+	nbranch transmit_lmp_finish,positive
+	ifetch 9,contr
+	inject mod,72
+	copy regc,temp
+	branch transmit_lmp_loop
+transmit_lmp_finish:
+	ifetch 9,contr
+	iinject mod,temp
+	branch transmit_end
+
+transmit_dm1:
+	enable encode_fec2
+	branch transmit_dmh
+transmit_dm3:
+transmit_dm5:
+	enable encode_fec2
+	set1 mark_longpacket,mark
+	branch transmit_dmh
+
+transmit_3dh1:
+	set1 PSK3M,radio_ctrl
+transmit_dh1:
+	enable encode_fec0
+	branch transmit_dmh
+	
+transmit_dh3:
+transmit_dh5:
+	set1 PSK3M,radio_ctrl
+	enable encode_fec0
+	set1 mark_longpacket,mark
+
+transmit_dmh:
+	bpatch patch0f_1,mem_patch0f
+	fetch 1,mem_state_map
+	bbit0 smap_edr,transmit_noedr
+	sub type,3,null
+	branch transmit_noedr,positive
+	disable encrypt
+	disable encode_fec2
+	enable encode_fec0
+	disable enable_white
+	set1 PSK,radio_ctrl
+	isolate1 PSK3M,radio_ctrl
+	branch transmit_edr3m,true
+	setarg 0xabeee
+	inject mod,20
+	branch transmit_edr_sync_end
+transmit_edr3m:
+	setarg 0x5faeba
+	inject mod,24
+	setarg 0x12
+	inject mod,6
+transmit_edr_sync_end:	
+	enable enable_white
+	set1 mark_longpacket,mark
+transmit_noedr:
+	enable encrypt
+	enable enable_crc
+	bmark1 mark_loopback,transmit_loopback
+	fetch 1,mem_tx_lch
+	inject mod,3
+	fetch 2,mem_tx_len
+	iforce loopcnt
+	bmark1 mark_longpacket,transmit_long
+	inject mod,5
+	branch transmit_stuff
+transmit_long:	
+	inject mod,13
+transmit_stuff:
+	deposit loopcnt
+	branch transmit_end,blank
+	fetch 2,mem_txptr
+	iforce contr
+transmit_stuff_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop transmit_stuff_loop
+//	branch transmit_end
+
+transmit_end:
+	enable enable_parity
+	inject mod,16
+	disable enable_parity
+	call set_wait_ack
+	fetch 1,mem_state_map
+	bbit0 smap_edr,end_of_packet
+	force 0,pdata
+	inject mod,6				/* edr trailer */
+	branch end_of_packet
+
+
+transmit_loopback:
+	bpatch patch0f_2,mem_patch0f
+	bmark1 mark_longpacket,transmit_loopback_long
+transmit_loopback_short:
+	fetch 1,mem_lch_code
+	inject mod,3						/* LLID and FLOW */
+	fetch 1,mem_len	/* take packet length */
+	iforce regc
+	inject mod,5
+	branch transmit_loopback_cont
+transmit_loopback_long:
+	fetch 1,mem_lch_code
+	inject mod,3						/* LLID and FLOW */
+	fetch 2,mem_len	/* take packet length */
+	iforce regc
+	inject mod,13
+transmit_loopback_cont:
+	arg mem_rxbuf,contr
+transmit_loopback_loop:	
+	copy regc,null
+	branch transmit_loopback_end,zero
+	ifetch 1,contr
+	inject mod,8
+	increase -1,regc
+	branch transmit_loopback_loop
+transmit_loopback_end:
+	fetch 2,mem_tst_pktcnt_dmh
+	increase 1,pdata
+	store 2,mem_tst_pktcnt_dmh
+	branch transmit_end
+	
+
+apply_switch_clke:
+	fetch 4,mem_clke_bt
+	add pdata,7,rega
+	fetch 2,mem_slot_offset
+	nbranch apply_switch_nozero,blank
+	increase -3,rega
+	branch apply_switch_wait_loop
+apply_switch_nozero:
+	mul32 pdata,12,pdata
+	hfetcht 2,core_halfslot
+	increase 1,temp
+apply_switch_loop:
+	isub temp,pdata
+	nbranch apply_switch_bt,positive
+	increase -1,rega
+	branch apply_switch_loop
+apply_switch_bt:
+	sub pdata,0,pdata
+apply_switch_wait_loop:
+	until null,oneslot
+	compare 0,clkn_bt,3
+	nbranch apply_switch_wait_loop,true
+	iforce clke_rt
+	copy rega,clke_bt
+	iforce clke_rt
+	rtn
+	
+
+calc_slot_offset:
+	bpatch patch0f_3,mem_patch0f
+	until null,halfslot
+	deposit clke
+	iforce contr
+	rshift16,pdata,pdata
+	isub clkn_bt,loopcnt
+	and_into 3,loopcnt			/* bt portion */
+	nbranch calc_bt_portion,zero
+	force 0,pdata
+	branch calc_skip_bt
+calc_bt_portion:
+	arg 3750,temp
+	force 0,pdata
+calc_slot_offset_loop:
+	iadd temp,pdata
+	loop calc_slot_offset_loop
+calc_skip_bt:
+	iadd contr,pdata			/* add rt portion */
+	div pdata,12
+	call wait_div_end
+	quotient pdata
+	store 2,mem_slot_offset
+	rtn
+
+calc_clke_offset:
+	bpatch patch0f_4,mem_patch0f
+	deposit clke
+	copy clkn,temp
+	isub temp,null
+	nsetflag positive,44,pdata
+	isub temp,temp
+	setarg 3750
+	isolate0 15,temp
+	branch calc_clke_pos,true
+	setarg -61786
+	iadd temp,temp
+calc_clke_pos:
+	storet 6,mem_le_clk_offset
+	rtn le
+	storet 6,mem_clk_offset
+	rtn
+
+calc_clke:
+	disable clknt
+	fetch 6,mem_le_clk_offset
+	branch calc_clke2,le
+	fetch 6,mem_clk_offset
+calc_clke2:
+	iadd clkn,alarm
+	increase 10,alarm
+	setarg 3750
+	isub alarm,pdata
+	isolate0 15,pdata
+	branch calc_clke_pos_adj,true
+	setarg 0xf15a
+	iadd alarm,alarm
+calc_clke_pos2:
+	copy alarm,clke
+	rtn
+calc_clke_pos_adj:		/* add 2 clock */
+	force 0,null
+	branch calc_clke_pos2
+	
+/******************************************/
+/********* RF related functions ***********/
+/******************************************/
+
+
+calc_radio_freq:
+	bpatch patch0f_5,mem_patch0f
+	call set_sync_on
+	copy bt_clk,pdata
+	and_into 0x180,pdata
+	compare 3,freq_mode,0x07
+	nbranch freq_not_connection,true    /* don't do the hack if not in connection */
+	rshift3 pdata,pdata
+	iadd freq_index,pdata
+	branch do_hop_mod_now
+freq_not_connection:	
+	copy freq_index,pdata
+do_hop_mod_now:
+	div pdata,79
+	pulse recalc         /* now is good time to recalc id */
+	call wait_div_end
+	remainder rega
+	add rega,-40,temp
+	branch odd_half,positive
+	lshift rega,temp
+	branch freq_result
+odd_half:
+	lshift temp,temp
+	increase 1,temp
+freq_result:	
+	bpatch patch0f_6,mem_patch0f
+	fetch 1,mem_mode
+	bbit0 afh_change,afh_process_con
+afh_process_0:	
+	fetch 4, mem_afh_instant   
+	isub bt_clk, null
+	branch afh_process_con,positive
+	call afh_clear
+	fetch 1,mem_afh_new_mod
+	rtn blank
+	fetch 1,mem_mode
+	set1 afh_enable,pdata
+	store 1,mem_mode
+	fetch 5,mem_afh_map_new
+	store 5,mem_afh_map_lo
+	ifetch 5,contr
+	store 5,mem_afh_map_hi
+	call afh_process_freq_map
+afh_process_con:
+	fetch 1,mem_mode
+	rtnbit0 afh_enable
+	isolate1 1,bt_clk
+	branch afh_same_channel,true	/* at odd slot, use the same as last even */
+	rshift3 temp,rega
+	and temp,7,queue
+	setarg mem_afh_map_lo  
+	iadd rega, rega
+	ifetch 1, rega
+	qisolate0 pdata
+	branch afh_process_1,true		/* not in map, do afh */
+	deposit temp
+	branch afh_process_end
+afh_process_1:
+	fetch 1, mem_afh_used
+	iforce regb                     
+	deposit bt_clk
+	and_into 0x180, pdata
+	rshift3 pdata,pdata
+	iadd freq_index,pdata
+	idiv regb
+	setarg mem_afh_map     
+	call wait_div_end
+	remainder rega
+	iadd rega,contr
+	ifetch 1,contr
+afh_process_end:	
+	store 1,mem_afh_index
+	iforce temp  
+  	rtn
+
+afh_same_channel:
+	fetch 1, mem_afh_index           /* last afh index  */
+	iforce temp
+	rtn
+
+afh_clear:
+	fetch 1,mem_mode
+	set0 afh_enable,pdata
+	set0 afh_change,pdata
+	store 1,mem_mode
+	rtn
+/*
+fixed_frequency:
+	fetcht 1,mem_fixed_freq
+	rtn
+*/
+afh_process_freq_map:
+	bpatch patch0f_7,mem_patch0f
+	arg mem_afh_map,contw
+	force 10,loopcnt
+	call memset0
+	arg mem_afh_map,contw
+	force 0,regC
+	force 2,queue
+process_freq_3:	
+	fetch 5,mem_afh_map_lo
+	iforce temp
+	compare 2,queue,0xff
+	branch process_freq_1,true
+	rshift temp,temp
+process_freq_1:	
+	isolate0 0,temp
+	branch process_freq_0,true
+	deposit regC
+	istore 1,contw
+process_freq_0:
+	rshift2 temp,temp
+	increase 2,regC
+	compare 40,regC,0xfe
+	nbranch process_freq_2,true
+	fetch 5,mem_afh_map_hi
+	iforce temp
+	compare 2,queue,0xff
+	branch process_freq_2,true
+	rshift temp,temp
+process_freq_2:	
+	sub regC,78,null
+	branch process_freq_1,positive
+	force 1,regC
+	increase -1,queue
+	nbranch process_freq_3,zero
+	arg mem_afh_map,rega
+	deposit contw
+	isub rega,pdata
+	store 1,mem_afh_used
+	rtn
+
+rx_radio_freq:
+	bpatch patch10_0,mem_patch10
+	call calc_radio_freq
+	fetch 1,mem_debug_config
+	bbit0 debug_rx_fixed_freq,rx_radio_freq_now
+	fetcht 1,mem_rx_fixed_freq
+rx_radio_freq_now:
+	branch set_freq_rx
+	
+
+tx_radio_freq:
+	bpatch patch10_1,mem_patch10
+	call calc_radio_freq
+	fetch 1,mem_debug_config
+	bbit0 debug_tx_fixed_freq,tx_radio_freq_now
+	fetcht 1,mem_tx_fixed_freq
+tx_radio_freq_now:
+	branch set_freq_tx
+	
+
+fetch_giac:
+	force 0,uap
+	fetch 3,mem_glap
+	iforce lap
+	rtn
+
+fetch_page_bt_adr:
+	bpatch patch10_2,mem_patch10
+	fetch 1,mem_hci_puap
+	icopy uap
+	fetch 3,mem_hci_plap
+	icopy lap
+	rtn
+
+fetch_self_bt_adr:
+	bpatch patch10_3,mem_patch10
+	fetch 2,mem_nap
+	icopy nap
+	fetch 1,mem_uap
+	icopy uap
+	fetch 3,mem_lap
+	icopy lap                 /* copy self_adr,bt_adr */      /* use own address */
+	rtn
+
+fetch_extm_bt_adr:
+	bpatch patch10_4,mem_patch10
+	fetch 2,mem_pnap
+	icopy nap
+	fetch 1,mem_puap
+	icopy uap
+	fetch 3,mem_plap
+	icopy lap         
+	rtn
+
+
+fetch_diac:
+	bmark1 mark_all_diac,fetch_diac_do
+	rtnmark0 mark_inquiry_state
+	rtnmark0 mark_periodical_diac
+fetch_diac_do:
+	and_into -256,lap
+	pulse recalc
+	nop 32
+	rtn
+
+
+shutdown_radio:
+	bpatch patch10_5,mem_patch10
+	branch shutdown_radio0,is_rx
+	jam 0xd4, rf_tx_pa_ib
+	nop 4
+	jam 0xd2, rf_tx_pa_ib
+	nop 4
+	jam 0xd1, rf_tx_pa_ib
+	nop 4	
+	fetch 1,mem_tx_power
+	beq TX_POWER_0DB,shutdown_radio_0db
+	beq TX_POWER_3DB,shutdown_radio_3db
+	beq TX_POWER_5DB,shutdown_radio_5db
+	beq TX_POWER_f3DB,shutdown_radio_f3db
+	beq TX_POWER_f5DB,shutdown_radio_f5db
+	beq TX_POWER_PAIR,shutdown_radio_pair
+shutdown_radio_5db:	
+shutdown_radio_0db:
+	jam 0xd0, rf_tx_pa_ib
+	jam 0xe0, rf_tx_pa_gc
+shutdown_radio0:
+	force 0,radio_ctrl
+	disable is_rx
+	disable is_tx
+	pulse packet_end
+	jam 0x0,rfen_mdm
+	jam 0x0,rfen_tx
+	jam 0x0,rfen_rx
+	jam 0,rfen_sn
+	jam 0x70,rfen_msc
+	jam 0x0,rfen_adc
+	rtn
+	
+shutdown_radio_pair:
+shutdown_radio_f5db:
+shutdown_radio_f3db:
+shutdown_radio_3db:
+	jam 0xd0,rf_tx_pa_ib
+	jam 0xc0,rf_tx_pa_gc
+	branch shutdown_radio0
+
+set_sync_on:
+	bpatch patch10_6,mem_patch10
+	jam 0x0,rfen_mdm					/* if called from tx or rx */
+	jam 0x0,rfen_tx
+	jam 0x18,rfen_rx
+	jam 0xa7,rfen_sn
+	jam 0x7f,rfen_msc
+	rtn
+
+set_freq_rx:
+	bpatch patch10_7,mem_patch10
+		/* IF is +2MHz */
+	storet 1,mem_last_freq
+	add temp,rx_freq_offset,rega			/* index to frequency */
+	jam 0x07,rf_balun_ctrim                                         /*Max added, for best sensitivity*/
+	branch rf_write_freq
+rf_rx_enable:
+	bpatch patch11_0,mem_patch11
+	jam 0xcf,rfen_tx
+	nop 10					/* wait adc clk48 ready */
+	jam 0xff,rfen_rx
+	jam 0xaf,rfen_sn
+	jam 0xff,rfen_msc
+	nop 10
+	jam 0xa0,rfen_mdm
+	rtn
+	
+set_freq_tx_offset:
+	fetch 1,mem_250k_freq_enable	//default: 0
+	branch set_freq_tx_2M_offset,blank
+set_freq_tx_0M_offset:
+	add temp,2,rega			//250k
+	rtn
+set_freq_tx_2M_offset:
+	add temp,0,rega			// bt 2M Medium Frequency
+	rtn
+
+set_freq_tx:
+	bpatch patch11_1,mem_patch11
+	storet 1,mem_last_freq
+	call set_freq_tx_offset
+	call rf_write_freq
+	setarg param_pll_setup
+	call sleep
+txon:	
+	jam 0x1,rfen_adc
+	jam 0x3c,rfen_rx
+	jam 0xe0,rfen_tx
+	jam 0x12,rf_balun_ctrim
+	nop 10
+	jam 0x01,rfen_mdm
+	jam 0x3d,rfen_mdm
+	nop 10
+	jam 0xb7,rfen_sn
+	nop 10
+	jam 0x7f, rfen_mdm
+txon_power_select:	
+	fetch 1,mem_tx_power
+	beq TX_POWER_0DB,set_tx_power_0db
+	beq TX_POWER_3DB,set_tx_power_3db	
+	beq TX_POWER_5DB,set_tx_power_5db
+	beq TX_POWER_f3DB,set_tx_power_f3db	
+	beq TX_POWER_f5DB,set_tx_power_f5db
+	beq TX_POWER_PAIR,set_tx_power_pair
+set_tx_power_0db:	
+	jam 0xf0,rf_tx_pa_gc
+	call txon_common
+	jam 0xd8,rf_tx_pa_ib
+	rtn
+
+set_tx_power_3db:
+	jam 0xdf,rf_tx_pa_gc
+	call txon_common
+	jam 0xdf,rf_tx_pa_ib
+	rtn
+
+set_tx_power_5db:
+	jam 0xff,rf_tx_pa_gc
+	call txon_common
+	jam 0xdf,rf_tx_pa_ib
+	rtn
+set_tx_power_f3db:
+	jam 0xce,rf_tx_pa_gc
+	call txon_common
+	jam 0xd8,rf_tx_pa_ib
+	rtn
+
+set_tx_power_f5db:
+	jam 0xcb,rf_tx_pa_gc
+	call txon_common
+	jam 0xd8,rf_tx_pa_ib
+	rtn
+
+set_tx_power_pair:
+	jam 0xd0,rf_tx_pa_ib
+	jam 0xc0,rf_tx_pa_gc
+	jam 0x4c,0x8957
+	jam 0x6c,0x8958
+	jam 0x50,0x8959
+	rtn
+
+txon_common:
+	nop 4
+	jam 0xd1,rf_tx_pa_ib
+	nop 4
+	jam 0xd2,rf_tx_pa_ib
+	nop 4
+	jam 0xd4,rf_tx_pa_ib
+	rtn
+
+
+initialize_radio:
+	jam clksel_rc,core_clksel
+initialize_radio_wait:
+	fetch 2,mem_rf_init_ptr
+	bbit0 14,initialize_radio_wait
+	iforce contr
+	arg 0x8900,temp
+initialize_radio_loop:
+	ifetch 1,contr
+	beq 0xff,initialize_radio_cont
+	ior temp,contw
+	ifetch 1,contr
+	istore 1,contw
+	branch initialize_radio_loop
+initialize_radio_cont:
+	bpatch patch11_2,mem_patch11
+	call lpm_cal_xtal_startup
+	call switchto_dpllclk
+//	ncall check_dpll,wake
+	setarg param_dpll_start_delay
+	iadd clkn_bt,pdata
+	store 4,mem_dpll_clkn
+	set1 RESET,radio_ctrl
+	force 0,radio_ctrl
+	ncall do_rccal,wake
+	branch set_rccal
+
+	/* rega is frequency, 00=2400Mhz */
+rf_write_freq:
+	bpatch patch11_3,mem_patch11
+	setarg 2400
+	iadd rega,temp
+	fetch 1,mem_fcomp_mul
+	jam 0x04,rf_pll_rstn
+	imul32 temp,pdata
+	fetcht 1,mem_fcomp_div
+	idiv temp
+	call wait_div_end
+	quotient rega			/* rega is FLOOR(FVCO/fcomp) */
+	remainder pdata		
+	lshift16 pdata,pdata
+	lshift4 pdata,pdata		/* pdata is frac * 2^20 */
+	idiv temp
+	call wait_div_end
+	quotient pdata		/* pdata is frac *2^20/fcomp */
+	lshift8 pdata,pdata
+	lshift pdata,pdata
+	ior rega,pdata
+	hstore 4,rf_pll_intg
+	jam 0x44,rf_pll_rstn
+	jam 0xc4,rf_pll_rstn
+	rtn
+
+	
+do_rccal:
+	bpatch patch11_4,mem_patch11
+	jam 0x02,rfen_adc
+	setarg 250000
+	call sleep					/* wait clkpll&xtal stable */
+	jam 0x7f,rfen_rx
+	nop 130
+	jam 0x30,rf_rccal_ctrl
+	jam 0xd0,rfen_tx
+	jam 0x70,rf_rccal_ctrl
+	jam 0xf0,rf_rccal_ctrl
+	force 50,loopcnt
+do_rccal_loop:
+	hfetch 1,rf_rccal_result
+	bbit1 5,do_rccal_end
+	loop do_rccal_loop
+do_rccal_end:
+	store 1,mem_rf_rccal
+	jam 0,rfen_tx
+	jam 0,rfen_rx
+	jam 0x00,rfen_adc
+	rtn
+
+set_rccal:
+	bpatch patch11_5,mem_patch11
+	fetch 1,mem_rf_rccal
+	set1 5,pdata
+	hstore 1,rf_rccal_ctrl
+	hfetcht 1,rf_bpf_ctrim
+	and_into 7,temp
+	lshift3 pdata,pdata
+	ior temp,pdata
+	hstore 1,rf_bpf_ctrim
+	hfetch 1,rf_bpf_ib
+	set0 bpf_rccal,pdata
+	hstore 1,rf_bpf_ib
+	hfetch 1,rf_adc_rccal
+	set0 adc_rccal,pdata
+	hstore 1,rf_adc_rccal
+	rtn
+
+save_rssi:
+	bpatch patch11_6,mem_patch11
+	hfetch 2,rf_afc_d2a
+	rshift4 pdata,pdata
+	rshift3 pdata,pdata
+	sub pdata,0,pdata
+bcd:
+	and_into 0xff,pdata
+	div pdata,10
+	call wait_div_end
+	quotient pdata
+	lshift4 pdata,pdata
+	remainder temp
+	ior temp,pdata
+	store 1,mem_rssi			/* bcd value */
+	rtn
+
+	
+switchto_dpllclk:
+	jam clksel_rc,core_clksel
+	hfetch 1,rf_clkpll_frac+2
+	set0 4,pdata
+	set0 5,pdata
+	hstore 1,rf_clkpll_frac+2
+	jam 0x00,rfen_ck
+	jam 0x00,rfen_msc
+	jam 0x70,rfen_msc
+	jam 0xff,rfen_ck
+	hfetch 1,rf_clkpll_frac+2
+	set1 4,pdata
+	set1 5,pdata
+	hstore 1,rf_clkpll_frac+2
+	call init_lpm_ctrl
+	hfetch 1,rf_clkpll_int
+	set1 7,pdata
+	hstore 1,rf_clkpll_int
+	set0 7,pdata
+	hstore 1,rf_clkpll_int
+	set1 7,pdata
+	hstore 1,rf_clkpll_int
+	jam clksel_dpll,core_clksel
+	nop 1
+	jam clksel_xtal,core_clksel
+	hfetch 1,rf_clkpll_frac+2
+	and_into 0xcf,pdata
+	hstore 1,rf_clkpll_frac+2
+	or_into 0x30,pdata
+	hstore 1,rf_clkpll_frac+2
+	rtn
+
+	
+xtal_fast_wake:
+	setarg 0xf0f
+	branch lpm_write_config
+
+init_lpm_ctrl:
+	setarg 0x80f
+	branch lpm_write_config
+
+
+
+start_receiver:
+	bpatch patch11_7,mem_patch11
+	call rf_rx_enable
+	disable is_tx
+	enable is_rx
+	pulse init_encrypt
+	rtn
+
+prep_crypt:
+	bpatch patch12_0,mem_patch12
+	fetch 1,mem_state_map
+	isolate1 smap_encryption,pdata
+	setflag true,0,pdata
+	hstore 1,core_encrypt
+	arg mem_kc,contr
+	ifetch 9,contr
+	iforce kc_ls
+	ifetch 7,contr
+	iforce kc_ms
+	fetch 1,mem_key_size
+	add pdata,-1,g1l
+	pulse kc_p_activate               /* immediately start calculating primary Key */
+	rtn
+	
+wait_access_end:
+	deposit clke
+	store 6,mem_sync_clke
+	disable decode_fec0
+	nbranch shutdown_radio,sync
+	arg param_clke_cal,clke_rt
+	increase 1,clke_bt
+	and_into 0x1fc,clke_bt
+	rtn
+
+
+
+wait_access_mhalfbnd:
+	enable decode_fec0
+wait_access_mhalfbnd_correlate:
+	correlate null,mhalfbnd    /* keep correlating until sync is found, or clke half */
+	branch wait_access_end,sync
+	compare 0x02,clke_bt,0x02
+	nbranch wait_access_mhalfbnd_correlate,true
+	branch wait_access_end
+
+wait_access_clkn_rt:
+	bpatch patch12_1,mem_patch12
+	arg param_conn_access,timeup	/* found sync must occur within this time */
+	enable decode_fec0
+	correlate clkn_rt,meet    /* keep correlating until sync is found, or until clkn_rt timeup */
+	disable decode_fec0
+	nbranch shutdown_radio,sync
+	rtn
+
+wait_access_forever:
+	bpatch patch12_2,mem_patch12
+	enable decode_fec0
+	correlate null,timeout    /* keep correlating until sync is found, or timeout */
+	disable decode_fec0
+	nbranch shutdown_radio,sync
+	arg param_clke_cal,clke_rt
+	and_into 0x1fc,clke_bt
+	rtn
+
+	/* reserve slots for mult-slot packet */
+reserve_slot:
+	bpatch patch12_3,mem_patch12
+	iforce rega
+	deposit bt_clk
+	iadd temp,timeup
+	copy timeup,pdata
+	store 4,mem_next_btclk
+	deposit rega
+	rtn
+
+	/* pdata = clks ahead of bt_clk */
+ahead_window:
+	copy pdata,temp
+	bpatch patch12_4,mem_patch12
+	copy temp,pdata
+	call clk2bt
+	lshift16 bt_clk,pdata
+	set1 44,pdata
+	call clk_diff
+	set0 44,pdata
+	call get_clk
+	call clk_diff
+	rtn user
+	call clk2rt
+	iforce stop_watch
+	until null,timeout
+	rtn
+
+
+setup_clk:
+	bpatch patch12_5,mem_patch12
+	branch setup_clkn,clknt
+	until clke_rt,meet
+skip_setup_clke:
+	copy clke_bt,temp
+	branch setup_clknbt
+setup_clkn:
+	branch skip_setup_clkn,attempt
+	until clkn_rt,meet
+skip_setup_clkn:
+	copy clkn_bt,temp
+setup_clknbt:
+	branch setup_clk11,user
+	compare 1,temp,3
+	nbranch setup_clk,true
+setup_complete:
+	bpatch patch12_6,mem_patch12
+	fetch 1,mem_state
+	rtnbit0 state_inconn
+	fetch 4,mem_next_btclk
+	isub temp,pdata
+	nrtn positive
+	sub pdata,0xff,null
+	branch setup_clk,positive
+	rtn
+setup_clk11:
+	compare 3,temp,3
+	nbranch setup_clk,true
+	branch setup_complete
+
+rf_setup_time:
+	bpatch patch12_7,mem_patch12
+	arg param_rf_setup,timeup
+	branch setup_clk
+	
+rf_setup_time_slave_slot:
+	disable user
+	branch rf_setup_time
+
+rf_setup_time_master_slot:
+	enable user
+	branch rf_setup_time
+	
+start_transmitter:
+	bpatch patch13_0,mem_patch13
+	call prep_crypt
+	disable is_rx
+	enable is_tx
+	rtn
+
+
+
+start_tx_native:
+	bpatch patch13_1,mem_patch13
+	arg param_tx_setup,timeup
+	until clkn_rt,meet         /* wait until start_tx time */
+	pulse init_encrypt
+	rtn
+
+start_rx_native:
+	bpatch patch13_2,mem_patch13
+	arg param_rx_setup,timeup
+	until clkn_rt,meet
+	rtn
+
+
+start_tx_external:
+	bpatch patch13_3,mem_patch13
+	arg param_tx_setup,timeup
+	until clke_rt,meet         /* wait until start_tx time */
+	pulse init_encrypt
+	rtn
+
+send_access_word:
+	bpatch patch13_4,mem_patch13
+	preload access          /* load in access word ready to be sent */
+	enable encode_fec0
+	set1 TXGFSK,radio_ctrl
+	inject mod,72
+	disable encode_fec0
+	rtn
+
+
+scan_mode_whiten:
+	copy xin,temp
+	or_into 0x60,temp                /* extend xin with 5->1, 6->1 */
+	copy temp,white_init
+	rtn
+
+
+
+	/* return blank if free amaddr is found */
+get_free_amaddr:
+	bpatch patch13_5,mem_patch13
+	fetch 1,mem_current_amaddr
+	increase 1,pdata
+	bne param_esco_addr,get_free_amaddr_cont
+	force 1,pdata
+get_free_amaddr_cont:
+	store 1,mem_current_amaddr
+	iforce am_addr
+	rtn
+
+get_clk:
+	copy clkn,temp
+	rtn master
+	copy clke,temp
+	rtn
+
+get_clkbt:
+	deposit clkn_bt
+	rtn master
+	deposit clke_bt
+	rtn
+
+
+supervision_update:
+	bpatch patch13_6,mem_patch13
+	fetcht 4,mem_supervision_timer
+	call get_clkbt
+	isub temp,timeup					/* and to 28 bits */
+	deposit timeup
+	fetcht 2,mem_supervision_to
+	lshift temp,temp
+	isub temp,pdata
+	rtn
+	
+supervision_flush:
+	bpatch patch13_7,mem_patch13
+	call get_clkbt
+	store 4,mem_supervision_timer
+	rtn
+
+assert:
+	bpatch patch14_0,mem_patch14
+	branch assert
+	
+loop:
+	branch loop
+
+sleep:	
+	rtn blank
+	/* sleep pdata clocks, only even clocks are accurate */
+	rshift pdata,pdata
+	increase -3,pdata
+sleep_loop:	
+	increase -1,pdata
+	nbranch sleep_loop,zero
+	force 0,pdata
+	rtn
+
+
+
+init_param:
+	/* clear specified sched ram */
+	arg 0x10,loopcnt
+	arg 0,contw
+	call memset0
+	arg mem_le_state,contw
+	arg 10,loopcnt
+	call memset0
+	jam 0,mem_sp_calc
+	jam 0,mem_fifo_temp
+	jam 0,mem_le_testtype
+	jam 0,mem_debug_config
+	jam 0,mem_lmp_conn_state
+	bpatch patch14_1,mem_patch14
+	jam 0,mem_connection_options
+	jam 0,mem_tester_emulate
+	jam 0,mem_tester_cnt
+	setarg param_glap
+	store 3,mem_glap
+	setarg param_acl_pktlen
+	store 2,mem_acl_pktlen
+	jam param_sco_pktlen,mem_sco_pktlen
+	jam param_acl_pktcnt,mem_acl_pktcnt
+	jam param_sco_pktcnt,mem_sco_pktcnt
+	setarg param_hci_version
+	store 3,mem_hci_version
+//	setarg param_lmp_version
+//	store 3,mem_lmp_version
+//	setarg param_lmp_subversion
+//	store 2,mem_lmp_subversion
+	jam 0x60,mem_fhs_misc		/* R1 for 1.28s ps interval,P2 */
+	jam param_max_slot,mem_max_slot
+	jam 0x02,mem_fw_ver		/* set firmware version */
+	fetch 1,mem_ssp_enable
+	ncall init_memp,blank
+	fetch 1,mem_le_secure_connect_enable
+	ncall init_memp_256,blank
+	bpatch patch14_2,mem_patch14
+	rtn wake
+	setarg 0
+	store 2,mem_tx_len
+	rshift clkn_bt,pdata
+	store 4,mem_last_clkn
+	rtn
+
+
+
+
+/*****************************************LPO************************************************/
+
+lpmstate:
+	setarg 0xee21
+	hstore 2,core_clkoff			// disable unused peripherals
+	hfetch 4,core_gpio_in
+	store 4,mem_saved_gpio_in
+	hfetch 1,core_lpm_ldocnt
+	store 1,mem_wakup_from_power_flag
+	bbit0 gpio_latch,loadcode		// power up boot
+	enable wake
+	bbit0 cold_wake,lpmwake		
+	disable wake
+	deposit auxcnt
+	nbranch lpmwake,blank		// sleep interrupted, wakeup
+	hfetch 1,core_lpm_ctrl + 3
+	bbit1 reload_code,lpmwake
+	arg param_hibernate_clks,temp
+	branch lpm_enter_sleep
+lpmwake:
+	hfetch 3,core_lpm_xtalcnt
+	hstore 3,core_lpm_reg
+	ifetch 1,contr
+	or_into isogate_mask,pdata		// open all isolation gate&power switch
+	istore 1,contw
+	call lpm_write_ctrl2
+	hfetch 1,core_lpm_isogate
+	set1 enable_retmem,pdata
+	hstore 1,core_lpm_isogate
+	call lpm_write_ctrl2
+	call lpm_load_context,wake
+	hfetch 1,core_lpm_reg+2
+	set0 gpio_latch,pdata			// enable gpio fuction
+	hstore 1,core_lpm_reg+2
+	call lpm_write_ctrl2
+	nbranch loadcode,wake		// wakeup from hibernate
+	rtnmark0 mark_otp_encrypt
+	jam lock_otp,core_misc_ctrl	// disable further read/write of key
+	rtn 
+
+lpm_load_context:
+	fetch 1,mem_saved_spidctrl
+	hstore 1,core_spid_ctrl
+	fetch 3,mem_saved_gsel
+	hstore 3,core_gpio_sel
+	fetch 4,mem_saved_gpio+4
+	hstore 4,core_gpio_out0
+	fetch 4,mem_saved_gpio
+	hstore 4,core_gpio_oe0
+	fetch 8,mem_saved_gpio+8
+	hstore 8,core_gpio_pu0	
+	fetch 8,mem_saved_mark
+	iforce mark
+	hfetch 8,core_gpio_wakeup_low
+	store 8,mem_gpio_wakeup_low
+	call load_ucode
+	rtn
+
+lpm_save_context:
+	deposit mark
+	store 8,mem_saved_mark
+	hfetch 8,core_gpio_oe0
+	store 8,mem_saved_gpio
+	ifetch 8,contr
+	istore 8,contw
+	hfetch 3,core_gpio_sel
+	store 3,mem_saved_gsel
+	hfetch 1,core_spid_ctrl
+	store 1,mem_saved_spidctrl
+	branch lpm_write_gpio_wakeup
+
+lpo_calibration:
+	hfetch 1,core_bist_ctrl
+	nbranch lpo_cal_inited,blank
+	fetch 3,mem_clks_per_lpo
+	nrtn blank
+	jam 0xc0,core_bist_ctrl
+	jam ccnt_start,core_misc_ctrl
+lpo_cal_inited:
+	hfetch 1,core_perf_status
+	rtnbit0 1
+	hfetch 3,core_clk_counter
+	store 3,mem_clks_per_lpo
+	rtn
+
+
+	/* temp is synced clke */
+lpm_adjust_clk:
+	bpatch patch14_3,mem_patch14
+	deposit clke
+	call clk_diff_rt
+	fetcht 4,mem_sleep_counter_all
+	sub temp,0xff,null
+	rtn positive				// interval too small
+	lshift8 pdata,pdata
+	lshift4 pdata,pdata
+	idiv temp
+	call wait_div_end
+	quotient pdata
+	arg param_lpm_adjmax,temp
+	call ceiling
+	store 1,mem_lpm_adjust
+	nbranch lpm_adjust_positive,user
+	sub pdata,0,pdata
+lpm_adjust_positive:
+	fetcht 3,mem_clks_per_lpo
+	iadd temp,pdata
+	store 3,mem_clks_per_lpo
+lpm_clear_counter:
+	setarg 0
+	store 4,mem_sleep_counter_all
+	rtn
+
+
+	/* temp is lpo counter for doze */
+lpm_doze:
+	fetch 1,mem_lpm_config+2
+	set1 reload_code,pdata
+	store 1,mem_lpm_config+2
+	branch lpm_hibernate_normal
+	
+
+	/* no retention memory at all */
+lpm_hibernate:
+	arg param_hibernate_clks,temp
+	fetch 1,mem_lpm_config+1
+	set0 7,pdata					/* lowest lpo */
+	store 1,mem_lpm_config+1
+lpm_hibernate_normal:
+	bpatch patch14_4,mem_patch14
+	call lpm_write_gpio_wakeup
+	fetch 1,mem_lpm_hibernate_switch
+	store 1,mem_lpm_xtalcnt + 4
+	fetch 1,mem_lpm_xtalcnt + 2
+	set1 cold_wake,pdata
+	store 1,mem_lpm_xtalcnt + 2
+
+	/* temp is lpo clocks to sleep */
+lpm_sleep:
+	bpatch patch14_5,mem_patch14
+	call xtal_fast_wake
+	fetch 4,mem_sleep_counter_all
+	iadd temp,pdata
+	store 4,mem_sleep_counter_all
+	call lpm_save_context
+	fetch 5,mem_lpm_xtalcnt
+	hstore 4,core_lpm_reg
+	rshift32 pdata,rega
+	until null,lpo_edge
+	deposit clkn
+	store 6,mem_sleep_clkn
+	jam lpmreg_sel_ctrl2,core_lpm_wr
+	until null,lpo_edge
+	until null,lpo_edge
+	deposit rega
+	hstore 1,core_lpm_isogate
+	jam lpmreg_sel_ctrl2,core_lpm_wr
+lpm_enter_sleep:
+	until null,lpo_edge
+	until null,lpo_edge
+	hstoret 4,core_lpm_reg
+	jam lpmreg_sel_counter,core_lpm_wr
+	until null,never
+
+
+
+
+lpm_recover_clk:
+	bpatch patch14_6,mem_patch14
+	setarg 0
+	copy auxcnt,null
+	branch lpm_recover_timeout,zero
+	hfetch 1,core_lpm_xtalcnt
+	hfetcht 1,core_lpm_buckcnt
+	isub temp,null
+	branch lpm_recover_xtal,positive
+	deposit temp
+lpm_recover_xtal:
+	isub auxcnt,pdata
+	increase 1,pdata
+lpm_recover_timeout:
+	increase 8,pdata
+	until null,lpo_edge
+	iadd lpo_time,pdata
+	fetcht 4,mem_sleep_counter
+	iadd temp,pdata
+	fetcht 3,mem_clks_per_lpo
+	imul32 temp,pdata
+	rshift8 pdata,pdata
+	rshift4 pdata,pdata
+	increase param_lpm_fix,pdata
+	arg 3750,temp
+	idiv temp
+	call wait_div_end
+	quotient pdata
+	lshift16 pdata,pdata
+	remainder temp
+	ior temp,pdata
+	fetcht 6,mem_sleep_clkn
+	call clk_add
+	copy temp,clkn
+	fetch 6,mem_context + coffset_clk_offset
+	call calc_clke2
+	deposit clke
+	store 6,mem_pdatatemp
+	deposit auxcnt
+	istore 1,contw
+	hfetch 1,core_gpio_in1
+	or_into 0xf0,pdata
+	istore 1,contw
+	rtn
+	
+lpm_dispatch:
+	bpatch patch14_7,mem_patch14
+	call lpo_calibration
+	fetch 3,mem_clks_per_lpo
+	rtn blank
+	fetch 1,mem_lpm_mode
+	rtn blank
+	fetch 1,mem_ssp_enable
+	branch lpm_dispatch_next,blank
+	fetch 1,mem_sp_local_key_invalid	// simple pairing is not ready
+	rtn blank
+lpm_dispatch_next:
+	fetch 1,mem_le_sc_calc
+	nrtn blank	
+	call lpm_check_wake_lock
+	nrtn blank
+	fetch 1,mem_context
+	compare 3,pdata,0x7							/* sco won't sleep */
+	nbranch lpm_dispatch_unconn,true
+	fetch 2,mem_context + coffset_tsniff
+	rtn blank										/* role switch */
+	rtn wake
+	bpatch patch15_0,mem_patch15
+lpm_dispatch_next2:
+	fetcht 1,mem_lpm_current_mult
+	fetch 2,mem_context + coffset_tsniff
+	imul32 temp,pdata
+	rshift4 temp,temp
+	rshift2 temp,temp
+	isub temp,pdata
+	fetcht 4,mem_context + coffset_sniff_anchor
+	iadd temp,pdata
+	fetcht 1,mem_lpm_overhead
+	isub temp,pdata
+	lshift16 pdata,alarm
+	bpatch patch15_1,mem_patch15
+	fetch 2,mem_context + coffset_rx_window
+	rshift pdata,pdata
+	call clk2bt
+	deposit alarm
+	call clk_diff
+	copy clke,temp
+	call clk_diff_rt
+	rtn user
+lpm_dispatch_sleep:
+	call clk2lpo
+lpm_dispatch_lpo:
+	bpatch patch15_2,mem_patch15
+	fetch 1,mem_lpm_xtalcnt
+	isub temp,null
+	branch lpm_clear_counter,positive
+	storet 4,mem_sleep_counter
+	call app_will_enter_lpm
+	call l2cap_lpm_save_txbuf
+	fetcht 4,mem_sleep_counter
+	branch lpm_sleep
+	
+lpm_dispatch_unconn:
+	bpatch patch15_3,mem_patch15
+	fetch 1,mem_context
+	rtnbit1 state_inconn					// wont sleep in connection
+	rtnbit1 state_inpage					// wont sleep when paging
+	fetch 1,mem_ssp_enable
+	branch lpm_unconn_nossp,blank
+	fetch 1,mem_sp_local_key_invalid	// simple pairing is not ready
+	rtn blank
+lpm_unconn_nossp:
+	bpatch patch15_4,mem_patch15
+	fetch 1,mem_le_adv_enable
+	nbranch lpm_unconn_cont,blank
+	fetch 1,mem_scan_mode
+	rtn blank
+lpm_unconn_cont:
+	fetch 2,mem_lpm_interval
+	rtn blank
+lpm_sleep_btclk:
+	fetcht 1,mem_lpm_overhead
+	isub temp,pdata
+	arg 7500,temp				/* 1.25ms */
+	imul32 temp,pdata
+	branch lpm_dispatch_sleep
+
+lpm_set_mult:
+	bpatch patch15_5,mem_patch15
+	disable wake
+	fetch 1,mem_state
+	rtnbit0 state_insniff
+	nbranch lpm_not_match,match
+	call lpm_match
+	fetch 2,mem_rx_window_sniff
+	store 2,mem_rx_window
+	fetch 1,mem_arq
+	bbit1 wack,lpm_mult_short
+	bmark0 mark_lpm_mult_enable,lpm_mult_short
+	call l2cap_malloc_is_fifo_empty
+	nbranch lpm_mult_short,blank
+	fetch 1,mem_classic_bt_flag
+	bbit1 SHORT_MULT_FLAG,lpm_mult_short
+lpm_mult_wait_timeout:
+	jam 0,mem_lpm_current_mult
+	bmark0 mark_lpm_mult_enable,lpm_mult_short
+	fetch 1,mem_lpm_mult_cnt
+	branch lpm_mult_long,blank
+	increase -1,pdata
+	store 1,mem_lpm_mult_cnt
+	rtn
+
+
+classic_bt_set_mult_short_flag:
+	arg SHORT_MULT_FLAG,queue
+	branch classic_bluetooth_set_flag
+	
+classic_bt_clr_mult_short_flag:
+	arg SHORT_MULT_FLAG,queue
+	branch classic_bluetooth_clr_flag
+
+
+
+lpm_match:
+	jam 0,mem_sniff_unint_lost
+	fetch 3,mem_sniff_rcv
+	increase 1,pdata
+	store 3,mem_sniff_rcv
+	rtn
+
+lpm_not_match:
+	bpatch patch15_6,mem_patch15
+	fetcht 2,mem_rx_window_sniff
+	rshift temp,temp
+	fetch 2,mem_rx_window
+	iadd temp,pdata
+	store 2,mem_rx_window
+lpm_lost:
+	jam 0,mem_lpm_current_mult
+	fetch 3,mem_sniff_lost
+	increase 1,pdata
+	store 3,mem_sniff_lost
+	fetch 1,mem_sniff_unint_lost
+	increase 1,pdata
+	store 1,mem_sniff_unint_lost
+	rtn
+
+lpm_mult_short:
+	jam 0,mem_lpm_current_mult
+	fetch 1,mem_lpm_mult_timeout
+	store 1,mem_lpm_mult_cnt
+	rtn
+
+lpm_mult_long:
+	fetcht 1,mem_lpm_mult
+	storet 1,mem_lpm_current_mult
+	rtn
+
+lpm_cal_xtal_startup:
+	bpatch patch15_7,mem_patch15
+	fetch 1,mem_lpm_xtalcnt
+	nrtn blank
+	jam clksel_rc,core_clksel
+	setarg 0xf0c
+	call lpm_write_config
+	setarg 200000
+	call sleep
+	until null,lpo_edge
+	copy lpo_time,alarm
+	call xtal_fast_wake
+	jam clksel_xtal,core_clksel
+	nop 10
+	until null,lpo_edge
+	deposit lpo_time
+	isub alarm,pdata
+	increase 0x30,pdata
+	arg 0xff,temp
+	call ceiling
+	store 1,mem_lpm_xtalcnt
+	nop 30000
+	nop 30000
+	nop 30000	
+	rtn
+
+lpm_cal_xtal_startup_by_snooze:
+	fetch 1,mem_lpm_xtalcnt
+	nrtn blank
+	jam 0xff,core_xtal_stable_time
+	jam clksel_rc,core_clksel
+	call xtal_fast_wake
+	setarg 1000
+	iadd lpo_time,alarm
+	snooze
+	deposit lpo_time
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	isub alarm,pdata
+	add pdata,0x30,pdata
+	arg 0xff,temp
+	call ceiling
+	store 1,mem_lpm_xtalcnt
+	nop 30000
+	nop 30000
+	nop 30000	//delay 90000 nop
+	rtn
+
+
+
+	/* pdata is lpm_reg[11:0] */
+lpm_write_config:
+	arg 0xfff,contw
+	iand contw,contw
+	fetch 1,mem_lpm_config
+	and_into 0xf0,pdata
+	lshift8 pdata,pdata
+	ior contw,pdata
+	hstore 2,core_lpm_reg
+	ifetch 2,contr
+	istore 2,contw
+
+lpm_write_ctrl:
+	setarg lpmreg_sel_ctrl
+	branch lpm_write
+
+lpm_write_ctrl2:
+	setarg lpmreg_sel_ctrl2
+lpm_write:
+	until null,lpo_edge
+	hstore 1,core_lpm_wr
+	until null,lpo_edge
+	until null,lpo_edge
+	rtn
+
+
+lpm_write_gpio_wakeup:
+	bpatch patch16_0,mem_patch16
+	fetch 4,mem_gpio_wakeup_low
+	hstore 4,core_lpm_reg
+	setarg lpmreg_sel_gpiolow
+	call lpm_write
+	fetch 4,mem_gpio_wakeup_high
+	hstore 4,core_lpm_reg
+	setarg lpmreg_sel_gpiohigh
+	branch lpm_write
+
+lpm_get_wake_lock:
+	fetch 2,mem_lpm_wake_lock
+	qset1 pdata
+	store 2,mem_lpm_wake_lock
+	rtn
+
+lpm_put_wake_lock:
+	fetch 2,mem_lpm_wake_lock
+	qset0 pdata
+	store 2,mem_lpm_wake_lock
+	rtn
+
+
+
+lpm_check_wake_lock:
+	bpatch patch16_1,mem_patch16
+	call app_check_wake_lock
+	fetch 2,mem_lpm_wake_lock
+	copy pdata,rega
+	fetch 1,mem_state_map
+	isolate1 smap_rxlmp,pdata
+	setflag true,wake_lock_lmp_rx,rega
+	fetch 1,mem_lmo_opcode1
+	fetcht 1,mem_lmo_opcode2
+	iadd temp,pdata
+	fetcht 1,mem_lmp_to_send
+	iadd temp,pdata
+	nsetflag blank,wake_lock_lmp_tx,rega
+	fetch 1,mem_le_tx_buff_used
+	nsetflag blank,wake_lock_ble_tx,rega
+	fetch 2,mem_l2cap_rxbuff1_len
+	fetcht 2,mem_l2cap_rxbuff2_len
+	iadd temp,pdata
+	nsetflag blank,wake_lock_l2cap_rx,rega
+	fetch UTIL_FIFO_LEN,mem_ipc_fifo_bt2c51
+	nsetflag blank,wake_lock_ipc_bt2c51,rega
+	fetch UTIL_FIFO_LEN,mem_ipc_fifo_c512bt
+	nsetflag blank,wake_lock_ipc_c512bt,rega
+	fetch 1,mem_hci_cmd
+	nsetflag blank,wake_lock_cmd,rega
+	fetch 1,mem_device_option
+	compare dvc_op_module,pdata,0xff
+	call lpm_uart_wake_lock,true
+	setarg -8
+	iand rega,rega
+	copy rega,pdata
+	store 2,mem_lpm_wake_lock
+	rtn
+
+lpm_uart_wake_lock:
+	hfetch 2,core_uart_rxitems
+	nsetflag blank,wake_lock_uart_rx ,rega
+	hfetch 2,core_uart_txitems
+	nsetflag blank,wake_lock_uart_tx ,rega
+	rtn
+
+lpm_shut_down:
+	hfetch 4,core_lpm_ctrl
+	set0 27,pdata
+	hstore 4,core_lpm_reg
+	call lpm_write_ctrl
+	branch assert
+	
+lpm_disable_exen_output:
+	hfetch 4,core_lpm_xtalcnt
+	set0 20,pdata
+	hstore 4,core_lpm_reg
+	branch lpm_write_ctrl2
+
+check_bt_disabled:
+	fetch 2,mem_chip_functions
+	bbit1 bt_disabled,assert
+	rtn
+check_ble_disabled:
+	fetch 2,mem_chip_functions
+	bbit1 ble_disabled,assert
+	rtn
+check_module_disabled:
+	fetch 2,mem_chip_functions
+	bbit1 module_disable,assert
+	rtn
+
+
+
+
+
+
+
+//p_check_attempt_sniff:
+//	bbit0 state_insco,p_check_attempt_not_sco
+//	fetch 1,mem_current_sniff_attempt
+//	beq 2,p_check_attempt_sniff_restore_sco
+//	fetch 1,mem_arq
+//	bbit1 wack,p_check_attempt_notimeout
+//	bmark0 mark_esco_rxok,p_check_attempt_notimeout
+//p_check_attempt_sniff_restore_sco:
+//	nbranch p_check_attempt_notimeout,master
+//	fetch 1,mem_lmp_to_send
+//	nbranch p_check_attempt_notimeout,blank
+//p_check_attempt_sco_master:
+//	fetch 1,mem_sco_poll
+//	increase -1,pdata
+//	store 1,mem_sco_poll
+//	nbranch check_attempt_nomore,blank
+//	jam param_sco_poll,mem_sco_poll
+//	branch check_attempt_notimeout
+//p_check_attempt_not_sco:
+//	compare type_null,type,0x1f
+//	branch check_timeout,true
+//	compare type_poll,type,0x1f
+//	branch check_timeout,true
+//	branch check_anchor_end
+//p_check_attempt_notimeout:
+//check_atttemp_decrease:
+//	fetch 1,mem_current_sniff_attempt
+//	increase -1,pdata
+//	store 1,mem_current_sniff_attempt
+//	rtn
+//check_timeout:
+//	fetch 1,mem_sniff_timeout_temp
+//	increase 1,pdata
+//	store 1,mem_sniff_timeout_temp
+//check_anchor_end:
+//	fetch 1,mem_current_sniff_attempt
+//	branch check_anchor_end_attempt0,blank
+//	call check_atttemp_decrease
+//	nrtn blank
+//check_anchor_end_attempt0:  
+//	fetch 1,mem_sniff_timeout_temp
+//	fetcht 1,mem_current_sniff_timeout
+//	isub temp,null
+//	branch p_blank,positive
+//	arg 1,pdata
+//	rtn
+//p_blank:
+//	arg 0,pdata
+//	rtn
+
+
+
+
+g24_dispatch:
+	bpatch patch16_2,mem_patch16
+	call g24_head_ptr2regc
+	add regc,offset_24g_mode,regb
+	ifetch 1,regb
+	//fetch 1,mem_24g_mode
+	rtneq disable_24g
+	beq tx_24g,g24_transmit_process
+	beq rx_24g,g24_receive_process
+	rtn
+
+g24_head_ptr2regc:
+	fetcht 2,mem_24g_head_ptr
+	copy temp,regc
+	rtn
+
+g24_receive_process_init:
+	call g24_receive_init
+	branch g24_mode_switch_init
+
+g24_receive_process:
+	call g24_mode_switch
+	call g24_dongle_work_mode_auto
+	call g24_dongle_bind_mode_auto
+	branch g24_dongle_search_mode_auto
+	
+
+g24_pair_init:
+	//jam 0,mem_24g_pid
+	//jam G24_PAIR_CH,mem_24g_ch
+	call g24_set0_mem_pid
+	setarg G24_PAIR_CH
+	call g24_store_mem_ch
+	call g24_store_mem_pair_txpower
+	//fetch 4,mem_24g_paring_addr
+	//store 4,mem_24g_addr
+	add regc,offset_24g_paring_addr,rega
+	ifetch 4,rega
+	branch g24_store_mem_addr
+		
+g24_ch:
+	call g24_head_ptr2regc
+	add regc,offset_24g_current_ch_number,regb
+	ifetcht 1,regb
+	//fetcht 1,mem_24g_current_ch_number
+	call g24_ch_temp_incre_size4 //map size =4
+	add regc,offset_24g_current_ch_number,contw
+	//storet 1,mem_24g_current_ch_number
+	branch g24_contw_istoret_1byte
+
+g24_ch_temp_incre_size4:
+	call g24_ch_calc
+	increase 1,temp
+	and_into 3,temp
+	rtn
+
+g24_ch_calc:
+	add regc,offset_24g_addr,regb
+	ifetch 1,regb
+	//fetch 1,mem_24g_addr
+	and_into 0x03,pdata
+	mul32 pdata,4,rega			//24addr low bit0 bit1 ,00-map1,01-map2,10-map3,11-map4
+	add regc,offset_24g_ch_map1,pdata
+	//setarg mem_24g_ch_map1
+	iadd rega,pdata
+	iadd temp,contr
+	ifetch 1,contr
+	//store 1,mem_24g_ch
+	branch g24_store_mem_ch
+
+g24_set_device_addr:
+	call g24_store_mem_tx_power_temp
+	call otp_enable_chgpump
+	setarg 0x7e2
+	arg mem_temp,rega
+	arg 4,temp
+	call otpd_read_data
+	call otp_disable_chgpump
+	fetch 4,mem_temp	//adc data from otp
+	call g24_store_mem_device_addr
+	//store 4,mem_24g_device_addr	
+	nrtn blank
+	fetch 4,mem_lap
+	//store 4,mem_24g_device_addr
+	branch g24_store_mem_device_addr
+
+g24_transmit_rf_sta_init:
+	call g24_set1_mem_rf_last_sta
+	//jam 1,mem_24g_rf_last_sta
+	setarg 0
+	call g24_store_mem_sync_cnt
+	//jam 0,mem_24g_sync_cnt
+g24_transmit_rf_ctrl_clear:	
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	and_into bits_data,pdata
+	//store 1,mem_24g_data_type
+	branch g24_store_mem_data_type
+	
+g24_hop_ch_enable:
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	set1 bit_hop,pdata
+	call g24_store_mem_data_type
+	//store 1,mem_24g_data_type
+	//store 1,mem_24g_txpayload
+	branch g24_store_mem_txpayload
+	
+g24_transmit_hop_pac_fail:
+	call g24_fetch_mem_rf_work_stage
+	//fetch 1,mem_24g_rf_work_stage
+	beq 1,g24_transmit_hop_pac_fail_wo_hop
+	beq 2,g24_transmit_hop_pac_fail_hop_stage2
+	rtn
+	
+g24_transmit_hop_pac_fail_wo_hop:
+	call g24_set2_mem_sync_cnt
+	//jam 2,mem_24g_sync_cnt
+g24_transmit_hop_pac_fail_stage1:
+	add regc,offset_24g_hop_pac_retry,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_hop_pac_retry
+	call g24_store_mem_rf_last_sta
+	//jam 0,mem_24g_rf_last_sta
+	branch g24_transmit_rf_ctrl_clear
+
+g24_transmit_hop_pac_fail_hop_stage2:
+	call g24_set0_mem_rf_hop_ch
+	//jam 0,mem_24g_rf_hop_ch
+	branch g24_transmit_hop_pac_fail_stage1
+
+g24_transmit_pac_fail_hop_stage3:
+	add regc,offset_24g_txfail_cnt,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_txfail_cnt
+	increase 1,pdata
+	add regc,offset_24g_txfail_cnt,contw
+	istore 1,contw
+	//store 1,mem_24g_txfail_cnt
+	beq 0x20,g24_tx_attempt_fail
+	call g24_fetch_mem_rf_hop_ch
+	//fetch 1,mem_24g_rf_hop_ch
+	beq 1,g24_rf_hop_fastly
+	setarg 1
+	call g24_store_mem_rf_hop_ch
+	//jam 1,mem_24g_rf_hop_ch
+g24_rf_hop_attemp_again:
+	call g24_fetch_mem_rf_hop_ch
+	//fetch 1,mem_24g_rf_hop_ch
+	bne 1,g24_transmit_rf_ctrl_clear
+g24_rf_hop_fastly:
+	add regc,offset_24g_hop_fastly_cnt,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_hop_fastly_cnt
+	increase 1,pdata
+	call g24_store_mem_hop_fastly_cnt
+	//store 1,mem_24g_hop_fastly_cnt
+	beq 4,g24_rf_hop_fastly_exit
+	call g24_ch
+	call g24_set2_mem_max_retry
+	//jam 2,mem_24g_max_retry
+	branch g24_transmit_packet
+
+g24_rf_hop_fastly_exit:
+	call g24_set0_mem_hop_fastly_cnt
+	//jam 0,mem_24g_hop_fastly_cnt
+	branch g24_transmit_rf_ctrl_clear
+
+g24_set0_mem_hop_fastly_cnt:
+	setarg 0
+g24_store_mem_hop_fastly_cnt:
+	add regc,offset_24g_hop_fastly_cnt,contw
+	branch g24_contw_istore_1byte
+
+g24_transmit_hop_pac_succ_wo_hop:
+	call g24_set2_mem_sync_cnt
+	//jam 2,mem_24g_sync_cnt
+g24_transmit_hop_pac_succ:
+	call g24_set0_mem_rf_hop_ch
+	//jam 0,mem_24g_rf_hop_ch
+	call g24_set1_mem_rf_last_sta
+	//jam 1,mem_24g_rf_last_sta
+	branch g24_transmit_rf_ctrl_clear
+
+g24_transmit_succ_rf_config:
+	call g24_fetch_mem_rf_work_stage
+	//fetch 1,mem_24g_rf_work_stage
+	beq 3,g24_transmit_hop_pac_succ
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	isolate0 bit_hop,pdata
+	branch g24_transmit_rf_sta_init,true
+	call g24_fetch_mem_rf_work_stage
+	//fetch 1,mem_24g_rf_work_stage
+	beq 1,g24_transmit_hop_pac_succ_wo_hop
+	beq 2,g24_transmit_hop_pac_succ
+	rtn
+
+g24_rf_sta_check:
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call g24_rf_laststa_synccnt_check
+	ncall g24_rf_sync_cnt_check,user2
+	rtn
+
+g24_rf_laststa_synccnt_check:
+	disable user2
+	add regc,offset_24g_rf_last_sta,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rf_last_sta
+	rtnne 1
+	add regc,offset_24g_sync_cnt,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_sync_cnt
+	rtnne 0
+	setarg 1
+	call g24_store_mem_rf_work_stage
+	//jam 1,mem_24g_rf_work_stage
+	call g24_set4_mem_max_retry
+	//jam 4,mem_24g_max_retry
+	branch enable_user2
+
+g24_rf_sync_cnt_check:
+	add regc,offset_24g_sync_cnt,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_sync_cnt
+	branch g24_rf_hop_attemp,blank
+	increase -1,pdata
+	call g24_store_mem_sync_cnt
+	//store 1,mem_24g_sync_cnt
+	setarg 2
+	call g24_store_mem_rf_work_stage
+	//jam 2,mem_24g_rf_work_stage
+	call g24_ch
+	//jam 4,mem_24g_max_retry
+	branch g24_set4_mem_max_retry
+
+g24_store_mem_rf_work_stage:
+	add regc,offset_24g_rf_work_stage,contw
+	branch g24_contw_istore_1byte
+
+
+g24_rf_hop_attemp:
+	setarg 3
+	call g24_store_mem_rf_work_stage
+	//jam 3,mem_24g_rf_work_stage
+	call g24_fetch_mem_rf_hop_ch
+	//fetch 1,mem_24g_rf_hop_ch
+	nbranch g24_rf_hop_attemp_again,blank
+	call g24_ch
+	//jam 2,mem_24g_max_retry
+g24_set2_mem_max_retry:	
+	setarg 2
+	branch g24_store_mem_max_retry
+
+g24_transmit_process:
+	rtnmark0 mark_24g
+	set1 mark_24g_conext,mark
+	bpatch patch16_3,mem_patch16
+	add regc,offset_24g_tx_without_int,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_tx_without_int
+	beq 1,g24_transmit_without_int
+	call g24_timer_check
+	nbranch g24_transmit_exit,user
+	call g24_interval_calibrate
+g24_transmit_without_int:
+	add regc,offset_24g_tx_without_int,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_tx_without_int
+	call g24_txdata_prep
+	nbranch g24_enter_lpm,user
+	call g24_rf_sta_check
+g24_transmit_start:
+	call g24_transmit_packet
+	call g24_power_ctrl
+g24_transmit_exit:
+	set0 mark_24g_conext,mark
+	rtn
+
+g24_timer_timeout:
+	rtn zero
+	set1 28,pdata
+	rtn
+
+g24_interval_calibrate:
+	add regc,offset_24g_pac_index,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_pac_index
+	increase 1,pdata
+	add regc,offset_24g_pac_index,contw
+	istore 1,contw
+	//store 1,mem_24g_pac_index
+	beq 4,g24_interval_max
+	beq 5,g24_interval_min
+	rtn
+g24_interval_max:
+	add regc,offset_24g_interval_max,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_interval_max
+g24_interval_update:	
+	//store 1,mem_24g_interval
+	add regc,offset_24g_interval,contw
+	branch g24_contw_istore_1byte
+
+g24_interval_min:
+	add regc,offset_24g_pac_index,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_pac_index
+	add regc,offset_24g_interval_min,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_interval_min
+	branch g24_interval_update
+
+g24_txdata_prep:
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,g24_pairing_sm
+	bpatch patch16_4,mem_patch16
+	call g24_package_data
+	nbranch g24_txdata_last_pac,user
+	call g24_transmit_prep
+	call g24_power_ctrl_pac_incrs
+g24_txdata_enable_tx:
+	//jam ENSURE_ON_24G,mem_24g_ensure
+	setarg ENSURE_ON_24G
+g24_store_mem_ensure:	
+	add regc,offset_24g_ensure,contw
+	branch g24_contw_istore_1byte
+
+g24_txdata_last_pac:
+	add regc,offset_24g_ensure,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_ensure
+	beq ENSURE_ON_24G,enable_user
+	rtn
+
+g24_package_data:
+	//rega:length,regb:contr
+	add regc,offset_24g_cb_data,temp
+	ifetch 2,temp
+	//fetch 2,mem_24g_cb_data
+	call callback_func
+	nrtn user
+	copy rega,pdata
+	store 1,mem_rega
+	add regc,offset_24g_abort_pac,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_abort_pac
+	call g24_transmit_rf_ctrl_clear
+	store 1,mem_24g_common_temp
+	fetch 1,mem_rega
+	copy pdata,rega
+	add rega,1,temp
+	arg mem_24g_common_temp+1,contw
+	copy rega,loopcnt
+	copy regb,contr
+	call memcpy
+	arg mem_24g_common_temp,rega
+g24_put_data_in_buff:
+	rtnmark0 mark_24g_conext
+	add regc,offset_24g_datalen,contw
+	istoret 1,contw
+	//storet 1,mem_24g_datalen
+	copy temp,loopcnt
+	add regc,offset_24g_txbuf,contw
+	//arg mem_24g_txbuf,contw
+	copy rega,contr
+	branch memcpy
+
+g24_transmit_prep:
+// total length
+	add regc,offset_24g_datalen,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_datalen
+	increase 2,pdata
+	add regc,offset_24g_txlen,contw
+	istore 1,contw
+	//store 1,mem_24g_txlen
+// data type
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	call g24_store_mem_txpayload
+	//store 1,mem_24g_txpayload
+//prepare 5bit payload length, 2bit PID, 1bit NO_ACK
+	add regc,offset_24g_datalen,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_datalen
+	lshift3 pdata,pdata
+	add regc,offset_24g_pid,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_pid
+	and temp,0x03,temp
+	lshift temp,temp
+	ior temp,pdata
+	add regc,offset_24g_no_ack,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_no_ack
+	iadd temp,pdata
+	istore 1,contw
+//prepare payload data
+	add regc,offset_24g_datalen,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_datalen
+	iforce loopcnt
+	add regc,offset_24g_txbuf,contr
+	//arg mem_24g_txbuf,contr
+	branch memcpy
+
+g24_send_abort_packet:
+	call g24_set1_mem_abort_pac
+	//jam 1,mem_24g_abort_pac
+	call g24_set0_mem_rf_hop_ch
+	//jam 0,mem_24g_rf_hop_ch
+	call g24_power_ctrl_reinit
+	call g24_transmit_rf_ctrl_clear
+	store 1,mem_24g_common_temp
+	call g24_put_data_in_buff_pre
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	set1 bit_abort,pdata
+	call g24_store_mem_data_type
+	//store 1,mem_24g_data_type
+	call g24_transmit_prep
+	call g24_txdata_enable_tx
+	branch g24_transmit_start
+
+g24_put_data_in_buff_pre:
+	store 1,mem_24g_common_temp+1
+	call g24_fetch_mem_device_addr
+	//fetch 4,mem_24g_device_addr
+	store 4,mem_24g_common_temp+2
+	arg 6,temp
+	arg mem_24g_common_temp,rega
+	branch g24_put_data_in_buff
+
+g24_enter_lpm:
+	add regc,offset_24g_abort_pac,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_abort_pac
+	branch g24_send_abort_packet,blank
+g24_enter_lpm_prepare:
+ 	// some thing need to do and do not enter 24g long sleep
+	add regc,offset_24g_cb_lpm_prepare,rega
+	ifetch 2,rega
+	//fetch 2,mem_24g_cb_lpm_prepare
+	branch callback_func
+
+g24_lpm_long_sleep:
+	call g24_head_ptr2regc
+	//fetch 8,mem_24g_enter_hibernate
+	call lpo_calibration
+	fetch 3,mem_clks_per_lpo
+	rtn blank
+	add regc,offset_24g_cb_lpm_before,temp
+	ifetch 2,temp
+	//fetch 2,mem_24g_cb_lpm_before
+	call callback_func
+	add regc,offset_24g_enter_hibernate,temp
+	ifetch 8,temp
+	call clk2lpo
+	storet 4,mem_sleep_counter
+  	branch lpm_sleep
+
+g24_transmit_packet:
+	call g24_head_ptr2regc
+	add regc,offset_24g_retry,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_retry
+g24_transmit_loop:
+	call g24_transmit_receive_ack
+	nbranch g24_retransmit,sync
+	nbranch g24_retransmit,user3
+	call g24_ackpayload_parse
+	call g24_power_ctrl_ack_incrs
+g24_transmit_next_packet:
+	call g24_head_ptr2regc
+	add regc,offset_24g_pid,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_pid
+	increase 1,pdata
+	call g24_store_mem_pid
+	//store 1,mem_24g_pid
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,g24_paring_mode
+	call g24_transmit_succ_rf_config
+g24_transmit_abandon:
+	setarg 0
+	add regc,offset_24g_txfail_cnt,contw
+	istore 2,contw	//include mem_24g_get_ack_fail
+	//store 1,mem_24g_txfail_cnt
+	//store 1,mem_24g_get_ack_fail
+	//jam ENSURE_OFF_24G,mem_24g_ensure
+	setarg ENSURE_OFF_24G
+	branch g24_store_mem_ensure
+
+	
+g24_transmit_receive_ack:
+	disable user3
+	call g24_transmit
+	call g24_head_ptr2regc
+	add regc,offset_24g_no_ack,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_no_ack
+	beq no_ack_24g,g24_transmit_no_ack	//tx no ack
+	call g24_receive_packet
+	branch g24_end_of_packet
+g24_transmit_no_ack:
+	call g24_end_of_packet
+	branch g24_transmit_next_packet
+
+
+g24_retransmit:
+	bpatch patch16_5,mem_patch16
+	add regc,offset_24g_get_ack_fail,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_get_ack_fail
+	increase 1,pdata
+	add regc,offset_24g_get_ack_fail,contw
+	istore 1,contw
+	//store 1,mem_24g_get_ack_fail
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,g24_tx_paring_retry
+	add regc,offset_24g_retry,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_retry
+	increase 1,temp
+	add regc,offset_24g_retry,contw
+	istoret 1,contw
+	//storet 1,mem_24g_retry
+	add regc,offset_24g_max_retry,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_max_retry
+	isub temp,pdata
+	nbranch g24_transmit_loop,blank
+	bpatch patch16_6,mem_patch16
+	call g24_fetch_mem_rf_work_stage
+	//fetch 1,mem_24g_rf_work_stage
+	beq 3,g24_transmit_pac_fail_hop_stage3
+	add regc,offset_24g_hop_pac_retry,rega
+	ifetch 1,rega	
+	//fetch 1,mem_24g_hop_pac_retry
+	increase 1,pdata
+	add regc,offset_24g_hop_pac_retry,contw
+	istore 1,contw
+	//store 1,mem_24g_hop_pac_retry
+	beq 2,g24_transmit_hop_pac_fail
+	call g24_hop_ch_enable
+	setarg 1
+	call g24_store_mem_max_retry
+	//jam 1,mem_24g_max_retry
+	branch g24_transmit_packet
+
+g24_tx_paring_retry:
+	add regc,offset_24g_get_ack_fail,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_get_ack_fail
+	rtnne 0xff
+	add regc,offset_24g_get_ack_fail,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_get_ack_fail
+	branch g24_stop_24g_mode
+
+g24_tx_attempt_fail:
+	add regc,offset_24g_txfail_cnt,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_txfail_cnt
+g24_stop_24g_mode:
+	jam BT_EVT_24G_ATTEMPT_FAIL,mem_fifo_temp
+	branch ui_ipc_send_event
+
+g24_ackpayload_parse:
+	call g24_read_len_pid_crc
+	add regc,offset_24g_rxdata_length,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rxdata_length	//ack payload length 
+	rtn blank
+	iforce loopcnt
+	add regc,offset_24g_rxbuf_add2,contr
+	//arg mem_24g_rxbuf+2,contr
+	add regc,offset_24g_rxpayload,contw	
+	//arg mem_24g_rxpayload,contw	//ack payload buffer 
+	branch memcpy
+
+
+g24_read_len_pid_crc:
+//read control
+	call g24_fetch_mem_rxbuf_add1
+	//fetch 1,mem_24g_rxbuf+1
+	rshift3 pdata,pdata
+	add regc,offset_24g_rxdata_length,contw
+	istore 1,contw
+	//store 1,mem_24g_rxdata_length
+//get crc
+	increase 1,pdata
+	add regc,offset_24g_rxbuf_add1,contr
+	//arg mem_24g_rxbuf+1,contr
+	iadd contr,contr
+	ifetch 3,contr
+	add regc,offset_24g_sta_crc,contw
+	istore 3,contw
+	//store 3,mem_24g_sta_crc
+//read pid
+	call g24_fetch_mem_rxbuf_add1
+	//fetch 1,mem_24g_rxbuf+1
+	rshift pdata,pdata
+	and pdata,0x03,pdata
+	add regc,offset_24g_sta_pid,contw
+	istore 1,contw
+	//store 1,mem_24g_sta_pid
+	rtn
+
+g24_prep:
+	disable enable_crc
+	disable enable_white
+	setarg 0x555555
+	iforce crc24_init
+	rtn
+
+g24_set_freq_tx:
+	call set_sync_on
+	add regc,offset_24g_ch,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_ch
+	branch set_freq_tx
+
+g24_transmit:
+	call g24_prep
+	call g24_set_freq_tx
+	set1 TXGFSK,radio_ctrl
+	enable encode_fec0
+	enable is_tx
+	disable is_rx
+	call le_enable
+	call g24_fetch_mem_addr
+	//fetch 4,mem_24g_addr
+	iforce access
+	inject mod,32
+	enable enable_crc
+	add regc,offset_24g_txlen,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_txlen
+	iforce loopcnt
+	add regc,offset_24g_txpayload,contr
+	//arg mem_24g_txpayload,contr
+g24tr_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop g24tr_loop
+	enable enable_parity
+	inject mod,24	//crc
+	disable enable_parity
+	until null,tx_clear
+	bpatch patch16_7,mem_patch16
+	nop 100
+	disable encode_fec0
+	rtn
+
+g24_receive_packet:
+	disable user3
+	force 0,radio_ctrl
+	add regc,offset_24g_ch,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_ch
+	call set_freq_rx
+	call rf_rx_enable
+g24_receive_rxon:
+	call g24_prep
+	enable decode_fec0
+	enable is_rx
+	disable is_tx
+	call le_enable
+	call g24_fetch_mem_addr
+	//fetch 4,mem_24g_addr
+	iforce access
+	enable swfine
+	add regc,offset_24g_rx_window,rega
+	ifetch 2,rega
+	//fetch 2,mem_24g_rx_window
+	iforce stop_watch
+	correlate null,timeout
+	nbranch g24_sync_timeout,sync
+	enable enable_crc
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	add regc,offset_24g_rxbuf,contw
+	istore 1,contw	
+	//store 1,mem_24g_rxbuf	//device id
+	add regc,offset_24g_mode,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_mode
+	beq rx_24g,g24_receive_skip
+	bpatch patch17_0,mem_patch17
+	add regc,offset_24g_rxbuf,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rxbuf
+	add regc,offset_24g_data_type,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_data_type
+	icompare bits_data,temp
+	nbranch g24_end_of_packet,true
+g24_receive_skip:
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	rshift3 pdata,pdata
+	and pdata,0x1f,loopcnt	//max payload: 32bytes
+	branch g24rx_nopayload,zero
+g24rx_loop:
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	loop g24rx_loop
+g24rx_nopayload:
+	parse demod,bucket,24
+	rshift32 pdata,pdata
+	rshift16 pdata,pdata
+	istore 3,contw
+	branch g24_end_of_packet,crc_failed
+	enable user3
+	disable decode_fec0
+	rtn
+//	branch rssi_signal
+
+g24_end_of_packet:
+	disable encode_fec0
+	disable decode_fec0
+	disable enable_crc
+	disable enable_white
+	branch shutdown_radio,is_rx
+	until null,tx_clear
+	nop 100          /* flush out the last bit */
+	branch shutdown_radio
+
+g24_sync_timeout:
+	call rssi_noise
+	branch g24_end_of_packet
+
+rssi_noise:
+	call save_rssi
+	rtn blank
+	add regc,offset_rssi_noise_index,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_rssi_noise_index
+	arg mem_rssi_noise_buffer,rega
+	//arg mem_rssi_noise_buf,rega
+	call rssi_noise_store
+	add regc,offset_rssi_noise_index,contw
+	//storet 1,mem_rssi_noise_index
+g24_contw_istoret_1byte:	
+	istoret 1,contw
+	rtn
+
+rssi_noise_store:
+	arg RSSI_BUF_LEN_NOISE,regb
+	branch rssi_store
+	
+/*	
+rssi_signal:
+	call save_rssi
+	rtn blank
+	add regc,offset_rssi_signal_index,rega
+	ifetcht 1,rega	
+	//fetcht 1,mem_rssi_signal_index
+	add regc,offset_rssi_signal_buf,rega
+	//arg mem_rssi_signal_buf,rega
+	arg RSSI_BUF_LEN_SIGNAL,regb
+	call rssi_store
+	add regc,offset_rssi_signal_index,contw
+	istoret 1,contw	
+	//storet 1,mem_rssi_signal_index
+	rtn
+*/	
+rssi_store:	
+	copy rega,pdata
+	iadd temp,contw
+	fetch 1,mem_rssi
+	istore 1,contw
+	increase 1,temp
+	copy regb,pdata
+	iand_into temp
+	rtn
+	
+rssi_average:
+	arg 0,temp
+	copy rega,contr
+rssi_average_loop:	
+	ifetch 1,contr
+	iadd temp,temp
+	loop rssi_average_loop
+	rshift8 temp,temp
+	rtn
+
+g24_power_ctrl_init:
+	call g24_head_ptr2regc
+	call g24_power_ctrl_incrs_level1
+	setarg 1
+	call g24_store_mem_power_ctrl_level
+	//jam 1,mem_power_ctrl_level
+g24_power_ctrl_reinit:
+	setarg 0
+	call g24_store_mem_power_ctrl_pac
+	//jam 0,mem_power_ctrl_packet_cnt
+	istore 1,contw
+	//jam 0,mem_power_ctrl_ack_cnt
+	rtn
+
+g24_power_ctrl_pac_incrs:
+	call g24_fetch_mem_power_ctrl_pac
+	//fetch 1,mem_power_ctrl_packet_cnt
+	increase 1,pdata
+g24_store_mem_power_ctrl_pac:	
+	//store 1,mem_power_ctrl_packet_cnt
+	add regc,offset_power_ctrl_packet_cnt,contw
+	branch g24_contw_istore_1byte
+
+g24_power_ctrl_ack_incrs:
+	//fetch 1,mem_power_ctrl_ack_cnt
+	//store 1,mem_power_ctrl_ack_cnt
+	add regc,offset_power_ctrl_ack_cnt,rega
+	ifetch 1,rega
+	increase 1,pdata
+	add regc,offset_power_ctrl_ack_cnt,contw
+	branch g24_contw_istore_1byte
+
+g24_power_ctrl:
+	bpatch patch17_1,mem_patch17
+	call g24_fetch_mem_power_ctrl_pac
+	//fetch 1,mem_power_ctrl_packet_cnt
+	sub pdata,POWER_CTRL_MAX_PACKET_CNT,null
+	rtn positive
+	add regc,offset_power_ctrl_ack_cnt,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_power_ctrl_ack_cnt
+	isub temp,temp	//loss packet cnt
+	call g24_power_ctrl_reinit
+	setarg offset_power_ctrl_threshold_up
+	iadd regc,rega
+	ifetch 1,rega
+	//fetch 1,mem_power_ctrl_threshold_up
+	isub temp,null
+	nbranch g24_power_ctrl_incrs,positive
+	setarg offset_power_ctrl_threshold_down
+	iadd regc,rega
+	ifetch 1,rega	
+	//fetch 1,mem_power_ctrl_threshold_down
+	isub temp,null
+	branch g24_power_ctrl_decrs,positive
+	rtn
+
+g24_power_ctrl_incrs:	
+	add regc,offset_power_ctrl_level,rega
+	ifetch 1,rega
+	//fetch 1,mem_power_ctrl_level
+	beq 2,g24_power_ctrl_incrs_level2
+	increase 1,pdata
+	call g24_store_mem_power_ctrl_level
+	//store 1,mem_power_ctrl_level
+	beq 1,g24_power_ctrl_incrs_level1
+g24_power_ctrl_incrs_level2:
+	setarg POWER_CTRL_LOSSPAC_THRESH_UP2
+	call g24_store_mem_power_ctrl_threshold_up
+	//jam POWER_CTRL_LOSSPAC_THRESH_UP2,mem_power_ctrl_threshold_up
+	setarg POWER_CTRL_LOSSPAC_THRESH_DOWN2
+	call g24_store_mem_power_ctrl_threshold_down
+	//jam POWER_CTRL_LOSSPAC_THRESH_DOWN2,mem_power_ctrl_threshold_down
+//	jam POWER_CTRL_RSSI_THRESH_DOWN2,mem_rssi_ctrl_threshold_down
+	add regc,offset_power_ctrl_txpwr_level2,rega
+	//fetch 1,mem_power_ctrl_txpwr_level2
+	branch g24_ifetch_rega_store_mem_txpower
+
+g24_power_ctrl_decrs:
+	add regc,offset_power_ctrl_level,rega
+	ifetch 1,rega
+	//fetch 1,mem_power_ctrl_level
+	beq 0,g24_power_ctrl_decrs_level0
+	increase -1,pdata
+	call g24_store_mem_power_ctrl_level
+	//store 1,mem_power_ctrl_level
+	beq 0,g24_power_ctrl_decrs_level0
+g24_power_ctrl_decrs_level1:
+//	call rssi_check_distance
+//	nrtn user
+g24_power_ctrl_incrs_level1:
+	setarg POWER_CTRL_LOSSPAC_THRESH_UP1
+	call g24_store_mem_power_ctrl_threshold_up
+	//jam POWER_CTRL_LOSSPAC_THRESH_UP1,mem_power_ctrl_threshold_up
+	setarg POWER_CTRL_LOSSPAC_THRESH_DOWN1
+	call g24_store_mem_power_ctrl_threshold_down
+	//jam POWER_CTRL_LOSSPAC_THRESH_DOWN1,mem_power_ctrl_threshold_down
+//	jam POWER_CTRL_RSSI_THRESH_DOWN1,mem_rssi_ctrl_threshold_down
+	setarg offset_power_ctrl_txpwr_level1
+g24_iadd_offset_mem_txpower:	
+	iadd regc,rega
+g24_ifetch_rega_store_mem_txpower:	
+	ifetch 1,rega
+	//fetch 1,mem_power_ctrl_txpwr_level1
+	branch g24_store_mem_txpower
+	
+g24_power_ctrl_decrs_level0:
+//	call rssi_check_distance
+//	nrtn user
+	setarg POWER_CTRL_LOSSPAC_THRESH_UP0
+	call g24_store_mem_power_ctrl_threshold_up
+	//jam POWER_CTRL_LOSSPAC_THRESH_UP0,mem_power_ctrl_threshold_up
+	setarg POWER_CTRL_LOSSPAC_THRESH_DOWN0
+	call g24_store_mem_power_ctrl_threshold_down
+	//jam POWER_CTRL_LOSSPAC_THRESH_DOWN0,mem_power_ctrl_threshold_down
+//	jam POWER_CTRL_RSSI_THRESH_DOWN0,mem_rssi_ctrl_threshold_down
+	setarg offset_power_ctrl_txpwr_level0
+	//fetch 1,mem_power_ctrl_txpwr_level0
+	branch g24_iadd_offset_mem_txpower
+
+/*
+rssi_check_distance:
+	disable user
+	arg mem_rssi_signal_buf,rega
+	arg RSSI_BUF_LEN_SIGNAL+1,loopcnt
+	call rssi_average
+	storet 1,mem_rssi_signal_avg
+	fetch 1,mem_rssi_ctrl_threshold_down
+	isub temp,null
+	branch enable_user,positive
+	rtn
+*/
+g24_start_pairing_sm1:
+	set1 mark_24g,mark
+	call g24_pair_init
+g24_set_pairing_sm_1:
+	//jam STATE_24G_PAIRING_1,mem_24g_pairing_sm
+	setarg STATE_24G_PAIRING_1
+	branch g24_store_mem_pairing_sm
+
+g24_pairing_sm:
+	add regc,offset_24g_ensure,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_ensure
+	beq ENSURE_ON_24G,enable_user
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	beq STATE_24G_PAIRING_1,g24_pairing_sm_1
+	beq STATE_24G_PAIRING_2,g24_pairing_sm_2
+	beq STATE_24G_PAIRING_3,g24_pairing_sm_3
+	branch assert
+
+g24_pairing_sm_1:
+	setarg STATE_24G_PAIRING_1_WAITING_ACK
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_1_WAITING_ACK,mem_24g_pairing_sm
+	jam 0xaa,mem_24g_common_temp
+	branch g24_pairing_sm_common
+g24_pairing_sm_2:
+	setarg STATE_24G_PAIRING_2_WAITING_ACK
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_2_WAITING_ACK,mem_24g_pairing_sm
+	jam 0x55,mem_24g_common_temp
+	branch g24_pairing_sm_common
+g24_pairing_sm_3:
+	setarg STATE_24G_PAIRING_3_WAITING_ACK
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_3_WAITING_ACK,mem_24g_pairing_sm
+	jam 0x22,mem_24g_common_temp
+g24_pairing_sm_common:
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	and_into bits_data,pdata
+	store 1,mem_24g_common_temp+1
+	call g24_fetch_mem_device_addr
+	//fetch 4,mem_24g_device_addr
+	store 4,mem_24g_common_temp+2
+g24_put_pairing_data_in_buff:
+	jam 0,mem_24g_common_temp+6
+	arg mem_24g_common_temp,rega
+	arg 7,temp
+	call g24_put_data_in_buff	
+	call g24_transmit_prep
+	call g24_txdata_enable_tx
+	branch enable_user
+
+g24_paring_mode:
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	rtneq STATE_24G_PAIRING_SUCCESS
+	beq STATE_24G_PAIRING_1_WAITING_ACK,g24_pairing_sm_1_waiting_ack
+	beq STATE_24G_PAIRING_2_WAITING_ACK,g24_pairing_sm_2_waiting_ack
+	beq STATE_24G_PAIRING_3_WAITING_ACK,g24_pairing_sm_3_waiting_ack
+	rtn
+
+g24_pairing_sm_1_waiting_ack:
+	setarg STATE_24G_PAIRING_2
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_2,mem_24g_pairing_sm
+	branch g24_transmit_abandon
+g24_pairing_sm_2_waiting_ack:
+	setarg STATE_24G_PAIRING_3
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_3,mem_24g_pairing_sm
+	branch g24_transmit_abandon
+g24_pairing_sm_3_waiting_ack:
+	setarg STATE_24G_PAIRING_SUCCESS
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_SUCCESS,mem_24g_pairing_sm
+	jam BT_EVT_24G_PAIRING_COMPLETE,mem_fifo_temp
+	call ui_ipc_send_event
+	add regc,offset_24g_rxpayload_add2,rega
+	ifetch 4,rega
+	//fetch 4,mem_24g_rxpayload+2
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	branch g24_transmit_abandon
+
+g24_auto_pair_start:
+	set0 mark_24g,mark
+	call g24_auto_pair_set_device_info
+	call g24_tx_attemp_data_prep
+g24_auto_pair_restart:	
+	call g24_set0_mem_check_dongle_times
+g24_auto_pair_start_loop:
+	nop 2000
+	call g24_fetch_mem_check_dongle_times
+	beq 0xff,g24_stop_24g_mode
+	call g24_transmit_receive_ack
+	nbranch g24_auto_pair_retry,sync
+	nbranch g24_auto_pair_retry,user3
+	call g24_ackpayload_parse
+	call g24_head_ptr2regc
+	add regc,offset_24g_paring_addr,rega
+	ifetcht 4,rega
+	call g24_fetch_mem_addr_isub_temp
+	branch g24_start_pairing_sm1,zero
+	call g24_head_ptr2regc
+	add regc,offset_24g_rxpayload_add2,rega
+	ifetch 4,rega
+	beq 0,g24_auto_pair_restart
+	call g24_store_mem_addr
+	branch g24_tx_attemp_dongle_succ
+
+g24_auto_pair_retry:
+	call g24_fetch_mem_check_dongle_times
+	increase 1,pdata
+	call g24_store_mem_check_dongle_times
+
+	call g24_fetch_mem_auto_paring_switch
+	increase 1,pdata
+	and_into 1,pdata
+	call g24_store_mem_auto_paring_switch
+	beq 0,g24_auto_pair_device_attemp
+	beq 1,g24_auto_pair_pair_attemp
+	rtn
+
+g24_fetch_mem_auto_paring_switch:
+	setarg offset_24g_auto_pair_switch
+	branch g24_set_rega_ifetch_1byte
+g24_store_mem_auto_paring_switch:
+	arg offset_24g_auto_pair_switch,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_auto_pair_set_device_info:
+	call g24_store_mem_tx_power
+	call g24_fetch_mem_device_addr
+	call g24_store_mem_addr
+	branch g24_ch
+
+g24_auto_pair_device_attemp:
+	call g24_auto_pair_set_device_info
+	branch g24_auto_pair_start_loop
+
+g24_auto_pair_pair_attemp:
+	call g24_pair_init
+	branch g24_auto_pair_start_loop
+
+
+g24_start_24g_mode:
+	set0 mark_24g,mark
+	call g24_ch
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call g24_tx_attemp_data_prep
+	call g24_set0_mem_check_dongle_times
+	//jam 0,mem_24g_check_dongle_times
+g24_tx_attemp_dongle_loop:
+	nop 2000
+	call g24_fetch_mem_check_dongle_times
+	//fetch 1,mem_24g_check_dongle_times
+	beq 0xff,g24_stop_24g_mode
+	call g24_transmit_receive_ack
+	nbranch g24_attemp_txdata_retry,sync
+	nbranch g24_attemp_txdata_retry,user3
+g24_tx_attemp_dongle_succ:	
+	set1 mark_24g,mark
+	call g24_set0_mem_check_dongle_times
+	setarg STATE_24G_PAIRING_SUCCESS
+	call g24_store_mem_pairing_sm
+	//jam 0,mem_24g_check_dongle_times
+	jam BT_EVT_24G_ATTEMPT_SUCCESS,mem_fifo_temp
+	branch ui_ipc_send_event
+
+g24_tx_attemp_data_prep:
+	set1 mark_24g_conext,mark
+	jam 0xff,mem_24g_common_temp
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	call g24_put_data_in_buff_pre
+	branch g24_transmit_prep
+	
+g24_attemp_txdata_retry:
+	call g24_fetch_mem_check_dongle_times
+	//fetch 1,mem_24g_check_dongle_times
+	increase 1,pdata
+	call g24_store_mem_check_dongle_times
+	//store 1,mem_24g_check_dongle_times
+	call g24_ch
+	branch g24_tx_attemp_dongle_loop
+
+g24_check_51cmd_start_24g:
+	call g24_store_mem_tx_power
+	//fetch 1,mem_tx_power_temp
+	//store 1,mem_tx_power
+	setarg STATE_24G_PAIRING_SUCCESS
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_SUCCESS,mem_24g_pairing_sm
+	branch g24_start_24g_mode
+/*	
+g24_check_51cmd_stop_24g:
+	call g24_store_mem_tx_power
+	set0 mark_24g,mark
+	branch le_disable
+*/
+
+
+dongle_init:
+	bpatch patch17_2,mem_patch17
+	call g24_head_ptr2regc
+	setarg dongle_rxdata_type1
+	add regc,offset_24g_cb_rxdata_type1,contw
+	istore 2,contw
+	//store 2,mem_24g_cb_rxdata_type1
+	call g24_receive_init
+	call usb_init
+	call g24_fetch_mem_pair_mode
+	//fetch 1,mem_24g_pair_mode
+	bpatch patch17_3,mem_patch17
+	beq 0x00,dongle_auto_bind
+	beq 0x01,dongle_pc_bind
+	beq 0x0f,dongle_all_powerful
+	branch assert
+
+g24_receive_init:
+	call g24_store_mem_tx_power_temp
+	arg 0x80,loopcnt
+	arg mem_rssi_noise_buffer,contw
+	branch memset0
+
+dongle_all_powerful:
+	call dongle_check_mode
+dongle_all_powerful_loop:
+	call g24_dongle_work_mode
+	call usb_isr
+	branch dongle_all_powerful_loop
+
+dongle_pc_bind:
+	bpatch patch17_4,mem_patch17
+	call dongle_check_mode
+dongle_pc_bind_loop:	
+	call g24_dongle_work_mode
+	call g24_dongle_bind_mode
+	call usb_isr
+	call dongle_usb_dispatch
+	branch dongle_pc_bind_loop
+
+dongle_check_mode:
+	//jam DONGLE_WORK,mem_dongle_work_mode
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	//jam 0,mem_24g_ackpayload_enable
+	call g24_set_work_mem_dongle_work_mode
+	call g24_set0_mem_dongle_mode_init
+	branch g24_set0_mem_ackpayload_enable
+	
+g24_dongle_work_mode:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_WORK
+g24_dongle_work_mode_start:
+	call g24_dongle_work_init
+	call g24_ch_process
+	call g24_receive_packet_start
+	branch g24_blank_data_process
+
+g24_dongle_work_init:
+	call g24_fetch_mem_dongle_mode_init
+	//fetch 1,mem_dongle_mode_init
+	rtnbit1 DONGLE_WORK
+	set1 DONGLE_WORK,pdata
+	call g24_store_mem_dongle_mode_init
+	//store 1,mem_dongle_mode_init
+	call g24_store_mem_tx_power
+	//fetch 1,mem_tx_power_temp
+	//store 1,mem_tx_power
+	call g24_set0_mem_ackpayload_enable
+	//jam 0,mem_24g_ackpayload_enable
+	jam 0,mem_usb_tx_enable
+	call g24_set1_mem_abort_pac
+	//jam 1,mem_24g_abort_pac
+	call g24_dongle_init
+g24_rx_interrupt_clear:
+	add regc,offset_24g_rxbuf,contw
+	//arg mem_24g_rxbuf,contw
+	arg 66,loopcnt
+	branch clear_mem
+
+g24_dongle_init:
+	call g24_set0_mem_pid
+	//jam 0,mem_24g_pid
+	call g24_fetch_mem_rx_addr
+	//fetch 4,mem_24g_rx_addr
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	branch g24_ch
+
+g24_ch_process:
+	bpatch patch17_5,mem_patch17
+	call g24_fetch_mem_abort_pac
+	//fetch 1,mem_24g_abort_pac
+	beq 1,g24_noise_rssi
+	call g24_fetch_mem_hop_pac
+	//fetch 1,mem_24g_hop_pac
+	beq 1,g24_ch	
+	setarg offset_24g_hop_btclk
+	iadd regc,rega
+	ifetcht 4,rega
+	//fetcht 4,mem_24g_hop_btclk
+	copy clkn_bt,pdata
+	isub temp,null
+	ncall g24_timer_timeout,positive
+	copy pdata,regb
+	setarg offset_24g_hop_btclk
+	iadd regc,rega
+	ifetch 4,rega
+	copy pdata,temp
+	//fetch 4,mem_24g_hop_btclk
+	setarg offset_24g_hop_interval
+	iadd regc,rega
+	copy temp,pdata
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_hop_interval
+	iadd temp,temp
+	copy regb,pdata
+	isub temp,null
+	nrtn positive
+	set0 28,pdata
+	setarg offset_24g_hop_btclk
+	iadd regc,contw
+	istore 4,contw
+	//store 4,mem_24g_hop_btclk
+g24_ch_update:
+	call g24_ch
+	call g24_fetch_mem_rf_laststa
+	//fetch 1,mem_24g_rf_laststa
+	increase 1,pdata
+	call g24_store_mem_rf_laststa
+	//store 1,mem_24g_rf_laststa
+	rtnne 2
+	call g24_set0_mem_rf_laststa
+	//jam 0,mem_24g_rf_laststa
+	//jam 1,mem_24g_abort_pac
+	//rtn
+	branch g24_set1_mem_abort_pac
+	
+g24_ch_timer_reinit:
+	copy clkn_bt,pdata
+	arg offset_24g_hop_btclk,rega
+	call g24_set_contw_with_temp
+	istore 4,contw
+	//store 4,mem_24g_hop_btclk
+	//jam 0,mem_24g_rf_laststa
+	//rtn
+	branch g24_set0_mem_rf_laststa
+
+g24_noise_rssi:
+	arg mem_rssi_noise_buffer,rega
+	call g24_noise_rssi_average
+	add regc,offset_rssi_noise_avg,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_avg
+	sub temp,RSSI_THRESH_NOISE,null
+	nrtn positive	
+	branch g24_ch
+
+g24_noise_rssi_average:
+	arg RSSI_BUF_LEN_NOISE+1,loopcnt
+	branch rssi_average
+
+g24_blank_data_process:
+	call g24_ms_blank_data
+	call g24_kb_blank_data
+	branch g24_kb_mul_blank_data
+
+g24_ms_blank_data:
+	setarg offset_24g_ms_blank_data_enable
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ms_blank_data_enable
+	rtn blank
+	arg TIMER_MS_BLANK,queue
+	call timer_check
+	nrtn blank
+	call g24_set0_mem_ms_blank_data_enable
+	//jam 0,mem_24g_ms_blank_data_enable
+g24_ms_blank_data_2usb:
+	setarg MS_REPORT_ID
+	store 1,mem_usb_mouse_data
+	setarg 0
+	istore 7,contw
+	branch g24_data_type1_usbtx_enable
+
+g24_kb_blank_data:
+	setarg offset_24g_kb_blank_data_enable
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_kb_blank_data_enable
+	rtn blank
+	arg TIMER_KB_BLANK,queue
+	call timer_check
+	nrtn blank
+	call g24_set0_mem_kb_blank_data_enable
+	//jam 0,mem_24g_kb_blank_data_enable
+g24_kb_blank_data_2usb:	
+	arg mem_usb_kb_data,contw
+	arg 2,loopcnt
+	call memset0
+	jam KB_NORMAL_REPORT_ID,mem_usb_kb_data
+	branch g24_kb_data_into_ep1_fifo
+
+g24_kb_mul_blank_data:
+	setarg offset_24g_kb_mul_blank_data_enable
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_kb_mul_blank_data_enable
+	rtn blank
+	arg TIMER_KB_MUL_BLANK,queue
+	call timer_check
+	nrtn blank
+	call g24_set0_mem_kb_mul_blank_data_enable
+	//jam 0,mem_24g_kb_mul_blank_data_enable
+g24_kb_mul_blank_data_2usb:
+	arg mem_usb_kb_multikey,contw
+	arg 2,loopcnt
+	call memset0
+	jam KB_MULTIKEY_REPORT_ID,mem_usb_kb_multikey
+	branch g24_kb_mul_data_into_ep2_fifo
+
+g24_dongle_bind_mode:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_BIND
+	call g24_dongle_bind_init
+	branch g24_dongle_bind_data_process
+
+g24_dongle_bind_init:
+	call g24_fetch_mem_dongle_mode_init
+	//fetch 1,mem_dongle_mode_init
+	rtnbit1 DONGLE_BIND
+	set1 DONGLE_BIND,pdata
+	call g24_store_mem_dongle_mode_init
+	//store 1,mem_dongle_mode_init
+	call g24_set1_mem_ackpayload_enable
+	//jam 1,mem_24g_ackpayload_enable
+	call g24_pair_init
+	setarg 0
+	arg offset_dongle_ms_bind_step,rega
+	call g24_set_contw_with_temp
+	//store 3,mem_dongle_ms_bind_step
+	branch g24_contw_istore_3byte
+
+g24_dongle_bind_data_process:
+	call g24_receive_transmit_ack
+	nbranch g24_rx_interrupt_clear,user3	
+	add regc,offset_24g_rxbuf,contr
+	setarg offset_24g_rxdata_temp
+	iadd regc,contw
+	arg 8,loopcnt
+	call memcpy
+	setarg offset_24g_rxdata_temp_add2
+	call g24_set_rega_ifetch_1byte
+	beq DATATYPE_BIND,g24_dongle_bind_first_step	//bind step 1
+	beq DATATYPE_CONFIG,g24_dongle_bind_second_step
+	beq DATATYPE_OK,g24_dongle_bind_third_step
+	beq 0xff,g24_data_attemp
+	branch g24_rx_interrupt_clear
+
+g24_dongle_bind_first_step:
+	call g24_fetch_mem_rxdata_temp_add3_1byte
+	beq BIND_MOUSE,g24_dongle_bind_first_step_mouse
+	beq BIND_KEYBOARD,g24_dongle_bind_first_step_keyboard
+	rtn
+g24_dongle_bind_first_step_mouse:
+	setarg 1
+	call g24_store_mem_ms_bind_step
+	//jam 1,mem_dongle_ms_bind_step
+g24_dongle_bind_ms_payload_cfg:
+	setarg DATATYPE_MOUSE
+	call g24_store_mem_bind_payload
+	//jam DATATYPE_MOUSE,mem_24g_bind_payload
+g24_dongle_bind_payload_cfg:	
+	setarg 0x80
+	arg offset_24g_bind_payload_add1,rega
+	call g24_set_contw_with_regb_store_1byte
+	//jam 0x80,mem_24g_bind_payload+1
+	call g24_fetch_mem_rx_addr
+	//fetch 4,mem_24g_rx_addr
+	arg offset_24g_bind_payload_add2,rega
+	call g24_set_contw_with_temp
+	//store 4,mem_24g_bind_payload+2
+	branch g24_contw_istore_4byte
+
+g24_dongle_bind_first_step_keyboard:
+	setarg 1
+	call g24_store_mem_kb_bind_step
+	//jam 1,mem_dongle_kb_bind_step
+g24_dongle_bind_kb_payload_cfg:
+	setarg DATATYPE_KEYBOARD
+	call g24_store_mem_bind_payload
+	//jam DATATYPE_KEYBOARD,mem_24g_bind_payload
+	branch g24_dongle_bind_payload_cfg
+		
+g24_dongle_bind_second_step:
+	call g24_fetch_mem_rxdata_temp_add3_1byte
+	beq BIND_MOUSE,g24_dongle_bind_second_step_mouse
+	beq BIND_KEYBOARD,g24_dongle_bind_second_step_keyboard
+	rtn
+g24_dongle_bind_second_step_mouse:
+	call g24_dongle_bind_ms_payload_cfg
+	setarg offset_dongle_ms_bind_step
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_dongle_ms_bind_step
+	beq 1,g24_dongle_ms_bind_step_set2
+	rtn
+g24_dongle_ms_bind_step_set2:
+	setarg 2
+	//jam 2,mem_dongle_ms_bind_step
+g24_store_mem_ms_bind_step:
+	arg offset_dongle_ms_bind_step,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_dongle_bind_second_step_keyboard:
+	call g24_dongle_bind_kb_payload_cfg
+	setarg offset_dongle_kb_bind_step
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_dongle_kb_bind_step
+	beq 1,g24_dongle_kb_bind_step_set2
+	rtn
+g24_dongle_kb_bind_step_set2:
+	setarg 2
+	//jam 2,mem_dongle_kb_bind_step
+g24_store_mem_kb_bind_step:
+	arg offset_dongle_kb_bind_step,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_dongle_bind_third_step:
+	call g24_fetch_mem_rxdata_temp_add3_1byte
+	beq BIND_MOUSE,g24_dongle_bind_third_step_mouse
+	beq BIND_KEYBOARD,g24_dongle_bind_third_step_keyboard
+	rtn
+g24_dongle_bind_third_step_mouse:
+	setarg offset_dongle_ms_bind_step
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_dongle_ms_bind_step
+	beq 2,g24_dongle_ms_bind_step_success
+	rtn
+g24_dongle_ms_bind_step_success:
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	or_into 0x01,pdata
+	call g24_store_mem_bind_device_status
+	//store 1,mem_dongle_bind_device_status
+g24_dongle_bind_exit:	
+	setarg 0
+	setarg offset_dongle_ms_bind_step
+	iadd regc,contw
+	istore 2,contw
+	branch g24_rx_interrupt_clear
+
+g24_dongle_bind_third_step_keyboard:
+	setarg offset_dongle_kb_bind_step
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_dongle_kb_bind_step
+	bne 0,g24_dongle_kb_bind_step_success
+	rtn
+g24_dongle_kb_bind_step_success:
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	or_into 0x02,pdata
+	call g24_store_mem_bind_device_status
+	//store 1,mem_dongle_bind_device_status
+	branch g24_dongle_bind_exit
+
+	
+dongle_usb_dispatch:
+	fetch 1,mem_usb0_get_set_report
+	rtn blank
+	jam 0,mem_usb0_get_set_report
+	fetch 2,mem_usb_setup_bValue_temp
+	arg PC_SET_REPORT,temp
+	isub temp,null
+	nrtn zero
+	//get usb host command
+	fetch 1,mem_usb0_set_report_data
+	rtnne PC_REPORT_ID
+	fetch 1,mem_usb0_set_report_data+1
+	bpatch patch17_6,mem_patch17
+	beq COMMAND_MODE,dongle_dispose_cmd_mode
+	beq COMMAND_BIND,dongle_dispose_cmd_bind
+	beq COMMAND_CURRENT_PROJECT,dongle_dispose_cmd_current_project
+	beq COMMAND_CURRENT_MODE,dongle_dispose_cmd_current_mode
+	beq COMMAND_CURRENT_FW_VERSION,dongle_dispose_cmd_current_fw_version
+	beq COMMAND_USER_DEFINED,dongle_dispose_cmd_user_defined
+usb0_data_ready_report_set0:
+	jam 0,mem_usb0_data_ready_report
+	rtn
+dongle_dispose_cmd_bind:
+	fetch 1,mem_usb0_set_report_data+2
+	beq COM_BIND_GET,dongle_dispose_cmd_get_bind
+	beq COM_BIND_EXIT,dongle_dispose_cmd_exit_bind
+	beq COM_READ_MODE,dongle_dispose_cmd_read_mode
+	branch usb0_data_ready_report_set0
+dongle_dispose_cmd_get_bind:
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	store 1,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+dongle_dispose_cmd_exit_bind:
+	call g24_set_work_mem_dongle_work_mode
+	//jam DONGLE_WORK,mem_dongle_work_mode
+	call g24_set0_mem_dongle_mode_init
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	store 1,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_read_mode:
+dongle_dispose_in_bind_mode:
+	jam COMMAND_BIND,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_mode:
+	fetch 1,mem_usb0_set_report_data+2
+	beq COM_MODE_BIND,dongle_enter_bind_mode
+//	beq COM_MODE_TEST,dongle_enter_test_mode
+	branch usb0_data_ready_report_set0
+dongle_enter_bind_mode:
+	//jam DONGLE_BIND,mem_dongle_work_mode
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	call g24_bind_mode_enable
+usb0_data_ready_report_set1:
+	jam 1,mem_usb0_data_ready_report
+	rtn
+//dongle_enter_test_mode:
+//	jam DONGLE_TEST,mem_dongle_work_mode
+//	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_current_project:
+	jam PRODUCT_ID,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_current_mode:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	beq DONGLE_WORK,dongle_dispose_in_work_mode
+	beq DONGLE_BIND,dongle_dispose_in_bind_mode
+//	beq DONGLE_TEST,dongle_dispose_in_test_mode
+	rtn
+dongle_dispose_in_work_mode:
+	jam COMMAND_MODE,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+//dongle_dispose_in_test_mode:
+//	jam COMMAND_TEST,mem_usb0_get_report_data+1
+//	branch usb0_data_ready_report_set1
+	
+dongle_dispose_cmd_current_fw_version:
+	jam FW_VERSION0,mem_usb0_get_report_data+1
+	jam FW_VERSION1,mem_usb0_get_report_data+2
+	jam FW_VERSION2,mem_usb0_get_report_data+3
+	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_user_defined:
+	//report_id|cmd|data_len|data
+	call g24_set1_mem_ackpayload_enable
+	fetch 1,mem_usb0_set_report_data+2	//data_len:max 30bytes
+	increase 2,pdata
+	copy pdata,loopcnt
+	arg mem_usb0_set_report_data,contr
+	setarg offset_24g_ackpayload
+	iadd regc,contw
+	branch memcpy
+
+
+dongle_auto_bind:
+	bpatch patch17_7,mem_patch17
+	call g24_mode_switch_init
+dongle_auto_bind_loop:
+	call g24_receive_process
+	call usb_isr
+	branch dongle_auto_bind_loop
+
+g24_dongle_work_mode_auto:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_WORK
+	call g24_dongle_work_mode_start
+	branch g24_rx_nodata_process
+
+g24_dongle_bind_mode_auto:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_BIND
+	call g24_dongle_bind_init
+	call g24_dongle_bind_data_process
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	rtn blank
+	call g24_set0_mem_mode_switch
+	//jam 0,mem_24g_mode_switch
+	call dongle_check_mode
+	call g24_enable_nodata_timer
+g24_timer_init:
+	setarg 0
+	add regc,offset_24g_tx_btclk,contw
+	//store 4,mem_24g_tx_btclk
+	branch g24_contw_istore_4byte
+
+g24_timer_check:
+	call disable_user
+	add regc,offset_24g_tx_btclk,rega
+	ifetcht 4,rega	
+	//fetcht 4,mem_24g_tx_btclk
+	copy clkn_bt,pdata
+	isub temp,null
+	ncall g24_timer_timeout,positive
+	copy pdata,regb
+	add regc,offset_24g_tx_btclk,rega
+	ifetch 4,rega
+	//fetch 4,mem_24g_tx_btclk
+	add regc,offset_24g_interval,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_interval
+	iadd temp,temp
+	copy regb,pdata
+	isub temp,null
+	nrtn positive
+	set0 28,pdata
+	add regc,offset_24g_tx_btclk,contw
+	istore 4,contw
+	//store 4,mem_24g_tx_btclk
+	branch enable_user
+
+g24_mode_switch_init:
+	setarg 1
+	call g24_store_mem_mode_switch
+	//jam 1,mem_24g_mode_switch
+	call g24_set0_mem_time_slice
+	//jam 0,mem_24g_time_slice
+	setarg 0xff
+	add regc,offset_24g_interval,contw
+	istore 1,contw
+	//jam 0xff,mem_24g_interval
+	branch g24_timer_init
+
+g24_mode_switch:
+	setarg offset_24g_mode_switch
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_mode_switch
+	rtn blank
+	call g24_timer_check
+	nrtn user
+	call g24_fetch_mem_time_slice
+	//fetch 1,mem_24g_time_slice
+	increase 1,pdata
+	and_into 1,pdata
+	call g24_store_mem_time_slice
+	//store 1,mem_24g_time_slice
+	beq 0,dongle_check_mode
+	beq 1,g24_bind_mode_enable
+	rtn
+
+g24_bind_mode_enable:
+	//jam DONGLE_BIND,mem_dongle_work_mode
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	//rtn
+	setarg DONGLE_BIND
+	call g24_store_mem_dongle_work_mode
+	branch g24_set0_mem_dongle_mode_init
+
+g24_enable_nodata_timer:
+	setarg 1
+	call g24_store_mem_nodata_timer_enable
+	//jam 1,mem_24g_nodata_timer_enable
+g24_enable_nodata_timer_init:
+	setarg TIMER_NODATA_DELAY
+	arg TIMER_NODATA,queue
+	branch timer_init
+
+g24_rx_nodata_process:
+	call g24_fetch_mem_nodata_timer_enable
+	//fetch 1,mem_24g_nodata_timer_enable
+	rtn blank
+	arg TIMER_NODATA,queue
+	call timer_check
+	nrtn blank
+	call g24_set0_mem_nodata_timer_enable
+	//jam 0,mem_24g_nodata_timer_enable
+	//no data for more than 100ms,then go to search
+	setarg DONGLE_SEARCH
+	call g24_store_mem_dongle_work_mode	
+	//jam DONGLE_SEARCH,mem_dongle_work_mode
+	call g24_set0_mem_dongle_mode_init
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	branch g24_rx_interrupt_clear
+
+g24_dongle_search_mode_auto:
+	bpatch patch18_0,mem_patch18
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_SEARCH
+	call g24_dongle_search_mode_init
+	call g24_rx_auto_addr_ch_search
+	call g24_receive_transmit_ack
+	nbranch g24_rx_interrupt_clear,user3
+	//dongle addr,then parse rxdata
+	call g24_dongle_search_addr_check
+	call g24_receive_packet_parse,zero
+	//receive data,then go to paired
+	//jam DONGLE_WORK,mem_dongle_work_mode
+	//jam 0,mem_24g_ackpayload_enable
+	call dongle_check_mode
+	call g24_fetch_mem_dongle_mode_init
+	//fetch 1,mem_dongle_mode_init
+	set1 DONGLE_WORK,pdata
+	call g24_store_mem_dongle_mode_init
+	//store 1,mem_dongle_mode_init
+	call g24_rx_interrupt_clear
+	call g24_enable_nodata_timer
+	call g24_dongle_search_addr_check
+	branch g24_dg_ch_num_reinit,zero
+	setarg offset_24g_kb_addr
+	call g24_set_rega_ifetcht_4byte
+	//fetcht 4,mem_24g_kb_addr
+	call g24_fetch_mem_addr_isub_temp
+	branch g24_kb_ch_num_reinit,zero		
+	setarg offset_24g_mouse_addr
+	call g24_set_rega_ifetcht_4byte
+	//fetcht 4,mem_24g_mouse_addr
+	call g24_fetch_mem_addr_isub_temp
+	branch g24_ms_ch_num_reinit,zero
+	rtn
+
+g24_dongle_search_addr_check:
+	setarg offset_24g_rx_addr
+	call g24_set_rega_ifetcht_4byte
+	//fetcht 4,mem_24g_rx_addr
+g24_fetch_mem_addr_isub_temp:
+	call g24_fetch_mem_addr
+	//fetch 4,mem_24g_addr
+	isub temp,null
+	rtn
+
+g24_dg_ch_num_reinit:
+	setarg offset_24g_dg_ch_number
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_dg_ch_number
+g24_current_ch_num_reinit:
+	//store 1,mem_24g_current_ch_number
+	add regc,offset_24g_current_ch_number,contw
+	branch g24_contw_istore_1byte
+
+g24_kb_ch_num_reinit:
+	setarg offset_24g_kb_ch_number
+	call g24_set_rega_ifetch_1byte	
+	//fetch 1,mem_24g_kb_ch_number
+	branch g24_current_ch_num_reinit
+g24_ms_ch_num_reinit:
+	setarg offset_24g_ms_ch_number
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ms_ch_number
+	branch g24_current_ch_num_reinit
+
+g24_dongle_search_mode_init:
+	call g24_fetch_mem_dongle_mode_init
+	//fetch 1,mem_dongle_mode_init
+	rtnbit1 DONGLE_SEARCH
+	set1 DONGLE_SEARCH,pdata
+	call g24_store_mem_dongle_mode_init
+	//store 1,mem_dongle_mode_init
+	call g24_set0_mem_time_slice
+	//jam 0,mem_24g_time_slice
+	call g24_set1_mem_ackpayload_enable
+	//jam 1,mem_24g_ackpayload_enable
+	setarg 0
+	add regc,offset_rssi_noise_dg_index,contw
+	istore 3,contw
+	//store 3,mem_rssi_noise_dg_index
+	arg offset_24g_dg_config_ch_once,rega
+	call g24_set_contw_with_temp
+	istore 7,contw
+	//store 7,mem_24g_dg_config_ch_once
+
+	call g24_dongle_search_addr_check
+	nrtn zero
+	add regc,offset_24g_current_ch_number,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_current_ch_number
+	arg offset_24g_dg_ch_number,rega
+	call g24_set_contw_with_regb_store_1byte
+	//store 1,mem_24g_dg_ch_number
+	add regc,offset_24g_ch,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_ch
+	//store 1,mem_24g_dg_last_ch
+	branch g24_store_mem_dg_last_ch
+
+g24_rx_auto_addr_ch_search:
+	bpatch patch18_1,mem_patch18
+	call g24_fetch_mem_time_slice
+	//fetch 1,mem_24g_time_slice
+	increase 1,pdata
+	and_into 3,pdata
+	call g24_store_mem_time_slice
+	//store 1,mem_24g_time_slice
+	//pairing address and channel come first
+	beq 0,g24_rx_auto_bind_config_kb
+	beq 1,g24_rx_auto_bind_config_dongle
+	beq 2,g24_rx_auto_bind_config_mouse
+	beq 3,g24_rx_auto_bind_config_dongle
+	rtn
+
+g24_rx_auto_bind_config_mouse:
+	call g24_dongle_bind_ms_payload_cfg
+	setarg offset_24g_mouse_addr
+	call g24_set_rega_ifetch_4byte
+	//fetch 4,mem_24g_mouse_addr
+	branch g24_rx_auto_addr_ch_search,blank
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	setarg offset_24g_ms_config_ch_once
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ms_config_ch_once
+	call g24_ms_config_ch_once,blank
+	setarg offset_24g_ms_last_ch
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ms_last_ch
+	call g24_store_mem_ch
+	//store 1,mem_24g_ch
+	add regc,offset_rssi_noise_ms_index,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_rssi_noise_ms_index
+	arg mem_rssi_noise_ms_buffer,rega
+	call rssi_noise_store
+	add regc,offset_rssi_noise_ms_index,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_ms_index
+	call g24_noise_rssi_average
+	add regc,offset_rssi_noise_ms_avg,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_ms_avg
+	sub temp,RSSI_THRESH_NOISE,null
+	nrtn positive
+	setarg offset_24g_ms_ch_number	
+	call g24_set_rega_ifetcht_1byte
+	//fetcht 1,mem_24g_ms_ch_number
+	call g24_ch_temp_incre_size4 //map size =4
+	arg offset_24g_ms_ch_number,rega
+	call g24_set_contw_with_regb2
+	istoret 1,contw
+	//storet 1,mem_24g_ms_ch_number
+g24_store_mem_ms_last_ch:
+	//store 1,mem_24g_ms_last_ch
+	arg offset_24g_ms_last_ch,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_ms_config_ch_once:
+	setarg 1
+	arg offset_24g_ms_config_ch_once,rega
+	call g24_set_contw_with_regb_store_1byte
+	//jam 1,mem_24g_ms_config_ch_once
+	arg 0,temp
+	call g24_ch_calc
+	//store 1,mem_24g_ms_last_ch
+	//rtn
+	branch g24_store_mem_ms_last_ch
+	
+g24_rx_auto_bind_config_kb:
+	call g24_dongle_bind_kb_payload_cfg
+	setarg offset_24g_kb_addr
+	call g24_set_rega_ifetch_4byte
+	//fetch 4,mem_24g_kb_addr
+	branch g24_rx_auto_addr_ch_search,blank
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	setarg offset_24g_kb_config_ch_once
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_kb_config_ch_once
+	call g24_kb_config_ch_once,blank
+	setarg offset_24g_kb_last_ch
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_kb_last_ch
+	call g24_store_mem_ch
+	//store 1,mem_24g_ch
+	add regc,offset_rssi_noise_kb_index,rega
+	ifetcht 1,rega	
+	//fetcht 1,mem_rssi_noise_kb_index
+	arg mem_rssi_noise_kb_buffer,rega
+	call rssi_noise_store
+	add regc,offset_rssi_noise_kb_index,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_kb_index
+	call g24_noise_rssi_average
+	add regc,offset_rssi_noise_kb_avg,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_kb_avg
+	sub temp,RSSI_THRESH_NOISE,null
+	nrtn positive
+	setarg offset_24g_kb_ch_number	
+	call g24_set_rega_ifetcht_1byte	
+	//fetcht 1,mem_24g_kb_ch_number
+	call g24_ch_temp_incre_size4 //map size =4
+	arg offset_24g_kb_ch_number,rega
+	call g24_set_contw_with_regb2	
+	istoret 1,contw
+	//storet 1,mem_24g_kb_ch_number
+g24_store_mem_kb_last_ch:
+	//store 1,mem_24g_kb_last_ch
+	arg offset_24g_kb_last_ch,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_kb_config_ch_once:
+	setarg 1
+	arg offset_24g_kb_config_ch_once,rega
+	call g24_set_contw_with_regb_store_1byte
+	//jam 1,mem_24g_kb_config_ch_once
+	arg 0,temp
+	call g24_ch_calc
+	//store 1,mem_24g_kb_last_ch
+	//rtn
+	branch g24_store_mem_kb_last_ch
+
+g24_rx_auto_bind_config_dongle:
+	call g24_dongle_bind_ms_payload_cfg
+	call g24_fetch_mem_rx_addr
+	//fetch 4,mem_24g_rx_addr
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	setarg offset_24g_dg_config_ch_once
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_dg_config_ch_once
+	call g24_dg_config_ch_once,blank
+	call g24_dg_store_config_ch
+	add regc,offset_rssi_noise_dg_index,rega
+	ifetcht 1,rega	
+	//fetcht 1,mem_rssi_noise_dg_index
+	arg mem_rssi_noise_dg_buffer,rega
+	call rssi_noise_store
+	add regc,offset_rssi_noise_dg_index,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_dg_index
+	call g24_noise_rssi_average
+	add regc,offset_rssi_noise_dg_avg,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_dg_avg
+	sub temp,RSSI_THRESH_NOISE,null
+	nrtn positive
+	setarg offset_24g_dg_ch_number	
+	call g24_set_rega_ifetcht_1byte	
+	//fetcht 1,mem_24g_dg_ch_number
+	call g24_ch_temp_incre_size4 //map size =4
+	arg offset_24g_dg_ch_number,rega
+	call g24_set_contw_with_regb2
+	istoret 1,contw
+	//storet 1,mem_24g_dg_ch_number
+g24_store_mem_dg_last_ch:
+	//store 1,mem_24g_dg_last_ch
+	//rtn
+	arg offset_24g_dg_last_ch,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+
+g24_dg_config_ch_once:
+	//jam 1,mem_24g_dg_config_ch_once
+	//fetch 1,mem_24g_dg_last_ch
+	//store 1,mem_24g_ch
+	//rtn
+	setarg 1
+	arg offset_24g_dg_config_ch_once,rega
+	call g24_set_contw_with_regb_store_1byte
+g24_dg_store_config_ch:
+	setarg offset_24g_dg_last_ch
+	call g24_set_rega_ifetch_1byte
+	branch g24_store_mem_ch
+
+
+g24_transmit_ack:
+//data type
+	add regc,offset_24g_rxbuf,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rxbuf
+	call g24_store_mem_data_type
+	//store 1,mem_24g_data_type
+//read len pid crc
+	call g24_read_len_pid_crc
+//read ack
+	call g24_fetch_mem_rxbuf_add1
+	//fetch 1,mem_24g_rxbuf+1
+	isolate1 bit_ack_24g,pdata
+	branch g24tx_no_ack,true
+g24tx_with_ack:
+	call g24_ackpayload_prep
+	call g24_transmit_prep
+	call g24_transmit
+g24tx_no_ack:
+	branch g24_end_of_packet
+
+g24_ackpayload_prep:
+	bpatch patch18_2,mem_patch18
+	add regc,offset_24g_datalen,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_datalen
+	setarg offset_24g_ackpayload_enable
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ackpayload_enable
+	rtn blank
+	setarg 0x06
+	add regc,offset_24g_datalen,contw
+	istore 1,contw
+	//jam 0x06,mem_24g_datalen
+	arg 0x06,loopcnt
+	setarg offset_24g_bind_payload
+	iadd regc,contr
+	//arg mem_24g_bind_payload,contr
+	add regc,offset_24g_txbuf,contw
+	//arg mem_24g_txbuf,contw
+	branch memcpy
+
+
+g24_receive_packet_start:
+	call g24_receive_transmit_ack
+	nbranch g24_rx_interrupt_clear,user3
+	branch g24_receive_packet_parse
+
+g24_receive_transmit_ack:
+	call g24_rx_interrupt_clear
+	call g24_receive_packet
+	nrtn user3
+	branch g24_transmit_ack
+
+g24_receive_packet_parse:
+	bpatch patch18_3,mem_patch18
+	call g24_receive_packet_parse_pid_crc
+	nbranch g24_rx_interrupt_clear,user
+	add regc,offset_24g_rxdata_length,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rxdata_length
+	branch g24_rx_interrupt_clear,blank
+	increase 2,pdata
+	iforce loopcnt
+	add regc,offset_24g_rxbuf,contr
+	//arg mem_24g_rxbuf,contr
+	setarg offset_24g_rxdata_temp
+	iadd regc,contw
+	//arg mem_24g_rxdata_temp,contw
+	call memcpy
+	call g24_set0_mem_mode_switch
+	//jam 0,mem_24g_mode_switch
+	call g24_fetch_mem_pair_mode
+	//fetch 1,mem_24g_pair_mode
+	call g24_enable_nodata_timer,blank
+	setarg offset_24g_rxdata_temp_add2
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_rxdata_temp+2
+	beq 0x01,g24_data_type1
+	beq 0x02,g24_data_type2
+	beq 0x03,g24_data_type3
+	beq 0xff,g24_data_attemp
+	branch g24_rx_interrupt_clear
+
+g24_receive_packet_parse_pid_crc:
+	call g24_head_ptr2regc
+	call disable_user
+	add regc,offset_24g_sta_pid,rega
+	ifetch 1,rega		
+	//fetch 1,mem_24g_sta_pid
+	add regc,offset_24g_last_pid,rega
+	ifetcht 1,rega		
+	//fetcht 1,mem_24g_last_pid
+	isub temp,null
+	ncall enable_user,zero
+	add regc,offset_24g_sta_pid,rega
+	ifetch 1,rega	
+	//fetch 1,mem_24g_sta_pid
+	add regc,offset_24g_last_pid,contw
+	istore 1,contw	
+	//store 1,mem_24g_last_pid
+	add regc,offset_24g_sta_crc,rega
+	ifetch 3,rega	
+	//fetch 3,mem_24g_sta_crc
+	add regc,offset_24g_last_crc,rega
+	ifetcht 3,rega	
+	//fetcht 3,mem_24g_last_crc
+	isub temp,null
+	ncall enable_user,zero
+	add regc,offset_24g_sta_crc,rega
+	ifetch 3,rega
+	//fetch 3,mem_24g_sta_crc
+	add regc,offset_24g_last_crc,contw
+	//store 3,mem_24g_last_crc
+	branch g24_contw_istore_3byte
+
+g24_data_type1:
+	call g24_ch_timer_reinit
+	call g24_fetch_mem_abort_pac
+	store 1,mem_temp
+	//fetch 1,mem_24g_abort_pac
+	call g24_fetcht_mem_rxdata_temp
+	fetch 1,mem_temp
+	//fetcht 1,mem_24g_rxdata_temp
+	isolate1 bit_abort,temp
+	setflag true,0,pdata
+	add regc,offset_24g_abort_pac,contw
+	istore 1,contw
+	//store 1,mem_24g_abort_pac
+	beq 1,g24_data_attemp_mouse
+	call g24_fetch_mem_hop_pac
+	//fetch 1,mem_24g_hop_pac
+	call g24_fetcht_mem_rxdata_temp
+	//fetcht 1,mem_24g_rxdata_temp
+	isolate1 bit_hop,temp
+	setflag true,0,pdata
+	call g24_store_mem_hop_pac
+	//store 1,mem_24g_hop_pac
+	add regc,offset_24g_cb_rxdata_type1,rega
+	ifetch 2,rega
+	//fetch 2,mem_24g_cb_rxdata_type1
+	branch callback_func
+
+dongle_rxdata_type1:
+	setarg MS_REPORT_ID
+	store 1,mem_usb_mouse_data	//report id
+	call g24_fetch_mem_rxdata_temp_add3_7byte
+	//fetch 7,mem_24g_rxdata_temp+3	//key
+	istore 7,contw
+	call g24_fetch_mem_rxdata_temp_add3_7byte
+	//fetch 7,mem_24g_rxdata_temp+3	//key
+	ncall g24_ms_enable_blank_data_forcibly,blank//get kb data
+	call g24_fetch_mem_rxdata_temp_add3_7byte
+	//fetch 7,mem_24g_rxdata_temp+3	//key
+	call g24_ms_disable_blank_data_forcibly,blank
+g24_data_type1_usbtx_enable:
+	jam USB_EP2_MS,mem_usb_ep2_data
+g24_data_type1_usbtx_enable_ep2:	
+	fetch 1,mem_usb_tx_enable
+	set1 2,pdata
+	store 1,mem_usb_tx_enable
+	rtn
+	
+g24_ms_enable_blank_data_forcibly:
+	setarg 1
+	call g24_store_mem_ms_blank_data_enable	
+	//jam 1,mem_24g_ms_blank_data_enable
+g24_ms_enable_blank_data_timer:
+	setarg TIMER_MS_BLANK_DELAY
+	arg TIMER_MS_BLANK,queue
+	branch timer_init
+g24_ms_disable_blank_data_forcibly:
+	call g24_set0_mem_ms_blank_data_enable
+	//jam 0,mem_24g_ms_blank_data_enable
+g24_ms_disable_blank_data_timer:	
+	setarg 0
+	arg TIMER_MS_BLANK,queue
+	branch timer_init
+	
+g24_data_type2:
+	call g24_fetcht_mem_rxdata_temp
+	//fetcht 1,mem_24g_rxdata_temp
+	isolate1 bit_abort,temp
+	branch g24_data_attemp_kbd,true
+	arg mem_usb_kb_data,contw
+	call g24_data_type2_reverse_data
+	fetch 8,mem_usb_kb_data
+	ncall g24_kb_enable_blank_data_forcibly,blank//get kb data
+	fetch 8,mem_usb_kb_data
+	call g24_kb_disable_blank_data_forcibly,blank
+	call g24_head_ptr2regc
+	fetch 8,mem_usb_kb_data
+	arg offset_24g_kb_data_sta_data,rega
+	call g24_set_contw_with_temp
+	istore 8,contw
+	//store 8,mem_24g_kb_data_sta_data
+	setarg offset_24g_kb_data_last_data
+	iadd regc,rega
+	ifetcht 8,rega
+	//fetcht 8,mem_24g_kb_data_last_data
+	isub temp,null
+	ncall g24_kb_data_dispose,zero
+	setarg offset_24g_kb_data_sta_data
+	iadd regc,rega
+	ifetch 8,rega
+	//fetch 8,mem_24g_kb_data_sta_data
+	arg offset_24g_kb_data_last_data,rega
+	call g24_set_contw_with_temp
+	istore 8,contw
+	//store 8,mem_24g_kb_data_last_data
+	branch g24_rx_interrupt_clear
+
+g24_data_type2_reverse_data:
+	setarg offset_24g_rxdata_temp_add2
+	iadd regc,contr
+	//arg mem_24g_rxdata_temp+2,contr
+	arg 9,loopcnt
+	branch reverse_byte
+
+g24_kb_enable_blank_data_forcibly:
+	setarg 1
+	call g24_store_mem_kb_blank_data_enable
+	//jam 1,mem_24g_kb_blank_data_enable
+g24_kb_enable_blank_data_timer:	
+	setarg TIMER_KB_BLANK_DELAY
+	arg TIMER_KB_BLANK,queue
+	branch timer_init
+
+g24_kb_disable_blank_data_forcibly:
+	call g24_set0_mem_kb_blank_data_enable
+	//jam 0,mem_24g_kb_blank_data_enable
+g24_kb_disable_blank_data_timer:	
+	setarg 0
+	arg TIMER_KB_BLANK,queue
+	branch timer_init
+
+g24_kb_data_dispose:
+g24_kb_data_into_ep1_fifo:
+	jam USB_EP1_KB,mem_usb_ep1_data
+	fetch 1,mem_usb_tx_enable
+	set1 1,pdata
+	store 1,mem_usb_tx_enable
+	rtn
+
+g24_data_type3:
+	arg mem_usb_kb_multikey,contw
+	call g24_data_type2_reverse_data
+	fetch 2,mem_usb_kb_multikey+1
+	ncall g24_kb_mul_enable_blank_data_forcibly,blank//get multikey data
+	fetch 2,mem_usb_kb_multikey+1
+	call g24_kb_mul_disable_blank_data_forcibly,blank
+	call g24_head_ptr2regc
+	fetch 3,mem_usb_kb_multikey
+	arg offset_24g_kb_multikey_sta_data,rega
+	call g24_set_contw_with_temp_store_3byte
+	//store 3,mem_24g_kb_multikey_sta_data
+	setarg offset_24g_kb_multikey_last_data
+	iadd regc,rega
+	ifetcht 3,rega
+	//fetcht 3,mem_24g_kb_multikey_last_data
+	isub temp,null
+	ncall g24_kb_mul_data_into_ep2_fifo,zero
+	setarg offset_24g_kb_multikey_sta_data
+	iadd regc,rega
+	ifetch 3,rega
+	//fetch 3,mem_24g_kb_multikey_sta_data
+	arg offset_24g_kb_multikey_last_data,rega
+	call g24_set_contw_with_temp_store_3byte
+	//store 3,mem_24g_kb_multikey_last_data
+	branch g24_rx_interrupt_clear
+
+g24_kb_mul_data_into_ep2_fifo:
+	jam USB_EP2_MULTIKEY,mem_usb_ep2_data
+	branch g24_data_type1_usbtx_enable_ep2
+
+g24_kb_mul_enable_blank_data_forcibly:
+	setarg 1
+	call g24_store_mem_kb_mul_blank_data_enable
+	//jam 1,mem_24g_kb_mul_blank_data_enable
+g24_kb_mul_enable_blank_data_timer:	
+	setarg TIMER_KB_MUL_BLANK_DELAY
+	arg TIMER_KB_MUL_BLANK,queue
+	branch timer_init
+
+g24_kb_mul_disable_blank_data_forcibly:
+	call g24_set0_mem_kb_mul_blank_data_enable
+	//jam 0,mem_24g_kb_mul_blank_data_enable
+g24_kb_mul_disable_blank_data_timer:	
+	setarg 0
+	arg TIMER_KB_MUL_BLANK,queue
+	branch timer_init
+	
+g24_data_attemp:
+	call g24_fetch_mem_rxdata_temp_add3_1byte
+	//fetch 1,mem_24g_rxdata_temp+3
+	beq DATATYPE_MOUSE,g24_data_attemp_mouse
+	beq DATATYPE_KEYBOARD,g24_data_attemp_kbd
+	rtn
+g24_data_attemp_mouse:
+	setarg offset_24g_rxdata_temp_add4
+	call g24_set_rega_ifetch_4byte
+	arg offset_24g_mouse_addr,rega
+	call g24_set_contw_with_temp
+	//fetch 4,mem_24g_rxdata_temp+4
+	//store 4,mem_24g_mouse_addr
+	branch g24_contw_istore_4byte
+
+g24_data_attemp_kbd:
+	setarg offset_24g_rxdata_temp_add4
+	call g24_set_rega_ifetch_4byte
+	arg offset_24g_kb_addr,rega
+	call g24_set_contw_with_temp
+	//fetch 4,mem_24g_rxdata_temp+4
+	//store 4,mem_24g_kb_addr
+	branch g24_contw_istore_4byte
+
+g24_store_mem_24g_mode:
+	call g24_head_ptr2regc
+	add regc,offset_24g_mode,contw
+	istore 1,contw
+	rtn
+
+g24_fetch_mem_device_addr:
+	call g24_head_ptr2regc
+	add regc,offset_24g_device_addr,rega
+	branch g24_rega_ifetch_4byte
+g24_store_mem_device_addr:
+	call g24_head_ptr2regc
+	add regc,offset_24g_device_addr,contw
+	branch g24_contw_istore_4byte
+
+g24_fetch_mem_addr:
+	add regc,offset_24g_addr,rega
+	branch g24_rega_ifetch_4byte
+g24_store_mem_addr:
+	add regc,offset_24g_addr,contw
+g24_contw_istore_4byte:	
+	istore 4,contw
+	rtn
+
+g24_store_mem_ch:
+	add regc,offset_24g_ch,contw
+	branch g24_contw_istore_1byte
+
+g24_set0_mem_pid:
+	setarg 0
+g24_store_mem_pid:
+	call g24_head_ptr2regc
+	add regc,offset_24g_pid,contw
+	branch g24_contw_istore_1byte
+
+g24_store_mem_txpayload:
+	add regc,offset_24g_txpayload,contw
+	branch g24_contw_istore_1byte
+
+g24_set4_mem_max_retry:
+	setarg 4
+g24_store_mem_max_retry:
+	add regc,offset_24g_max_retry,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_data_type:
+	add regc,offset_24g_data_type,rega
+	branch g24_rega_ifetch_1byte
+g24_store_mem_data_type:
+	add regc,offset_24g_data_type,contw
+	branch g24_contw_istore_1byte
+
+g24_set2_mem_sync_cnt:
+	setarg 2
+g24_store_mem_sync_cnt:
+	add regc,offset_24g_sync_cnt,contw
+	branch g24_contw_istore_1byte
+
+g24_set1_mem_rf_last_sta:
+	setarg 1
+g24_store_mem_rf_last_sta:
+	call g24_head_ptr2regc
+	add regc,offset_24g_rf_last_sta,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_hop_pac:
+	call g24_head_ptr2regc
+	add regc,offset_24g_hop_pac,rega
+	branch g24_rega_ifetch_1byte
+g24_set1_mem_hop_pac:
+	setarg 1
+g24_store_mem_hop_pac:
+	call g24_head_ptr2regc
+	add regc,offset_24g_hop_pac,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_abort_pac:
+	call g24_head_ptr2regc
+	add regc,offset_24g_abort_pac,rega
+	branch g24_rega_ifetch_1byte
+g24_set1_mem_abort_pac:
+	setarg 1
+g24_store_mem_abort_pac:
+	call g24_head_ptr2regc
+	add regc,offset_24g_abort_pac,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_pairing_sm:
+	call g24_head_ptr2regc
+	add regc,offset_24g_pairing_sm,rega
+	branch g24_rega_ifetch_1byte
+g24_store_mem_pairing_sm:
+	add regc,offset_24g_pairing_sm,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_rf_hop_ch:
+	add regc,offset_24g_rf_hop_ch,rega
+	branch g24_rega_ifetch_1byte
+g24_set0_mem_rf_hop_ch:
+	setarg 0
+g24_store_mem_rf_hop_ch:
+	add regc,offset_24g_rf_hop_ch,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_rf_work_stage:
+	add regc,offset_24g_rf_work_stage,rega
+	branch g24_rega_ifetch_1byte
+	
+g24_fetch_mem_rxbuf_add1:
+	add regc,offset_24g_rxbuf_add1,rega
+	branch g24_rega_ifetch_1byte
+
+g24_fetch_mem_check_dongle_times:
+	add regc,offset_24g_check_dongle_times,rega
+	branch g24_rega_ifetch_1byte
+g24_set0_mem_check_dongle_times:
+	setarg 0
+g24_store_mem_check_dongle_times:
+	call g24_head_ptr2regc
+	add regc,offset_24g_check_dongle_times,contw
+	branch g24_contw_istore_1byte
+
+g24_store_mem_tx_power:
+	call g24_head_ptr2regc
+	add regc,offset_tx_power_temp,rega
+	ifetch 1,rega
+g24_store_mem_txpower:
+	store 1,mem_tx_power
+	rtn
+
+g24_store_mem_tx_power_temp:
+	call g24_head_ptr2regc
+	fetch 1,mem_tx_power
+	//store 1,mem_tx_power_temp
+	add regc,offset_tx_power_temp,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_power_ctrl_pac:	
+	add regc,offset_power_ctrl_packet_cnt,rega
+	branch g24_rega_ifetch_1byte
+
+g24_store_mem_power_ctrl_level:
+	add regc,offset_power_ctrl_level,contw
+	branch g24_contw_istore_1byte
+
+g24_fetcht_mem_rxdata_temp:
+	setarg offset_24g_rxdata_temp
+g24_set_rega_ifetcht_1byte:	
+	iadd regc,rega
+	ifetcht 1,rega
+	rtn
+
+g24_fetch_mem_rf_laststa:
+	setarg offset_24g_rf_laststa
+	branch g24_set_rega_ifetch_1byte
+g24_set0_mem_rf_laststa:
+	setarg 0
+g24_store_mem_rf_laststa:
+	arg offset_24g_rf_laststa,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_fetch_mem_rx_addr:
+	setarg offset_24g_rx_addr
+g24_set_rega_ifetch_4byte:	
+	call g24_set_rega
+g24_rega_ifetch_4byte:
+	ifetch 4,rega
+	rtn
+
+g24_fetch_mem_time_slice:
+	setarg offset_24g_time_slice
+	branch g24_set_rega_ifetch_1byte
+g24_set0_mem_time_slice:
+	setarg 0
+g24_store_mem_time_slice:
+	arg offset_24g_time_slice,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_set0_mem_mode_switch:
+	setarg 0
+g24_store_mem_mode_switch:
+	arg offset_24g_mode_switch,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_store_mem_bind_payload:
+	arg offset_24g_bind_payload,rega
+	branch g24_set_contw_with_regb_store_1byte	
+	
+g24_fetch_mem_bind_device_status:
+	setarg offset_dongle_bind_device_status
+	branch g24_set_rega_ifetch_1byte
+g24_store_mem_bind_device_status:
+	arg offset_dongle_bind_device_status,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_fetch_mem_dongle_work_mode:
+	setarg offset_dongle_work_mode
+	branch g24_set_rega_ifetch_1byte
+g24_set_work_mem_dongle_work_mode:
+	setarg DONGLE_WORK
+g24_store_mem_dongle_work_mode:
+	arg offset_dongle_work_mode,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_fetch_mem_dongle_mode_init:
+	setarg offset_dongle_mode_init
+	branch g24_set_rega_ifetch_1byte
+g24_set0_mem_dongle_mode_init:
+	setarg CLEAR_INIT
+g24_store_mem_dongle_mode_init:
+	arg offset_dongle_mode_init,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_set0_mem_ackpayload_enable:
+	setarg 0
+g24_store_mem_ackpayload_enable:
+	arg offset_24g_ackpayload_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+g24_set1_mem_ackpayload_enable:
+	setarg 1
+	branch g24_store_mem_ackpayload_enable
+
+g24_fetch_mem_rxdata_temp_add3_7byte:
+	setarg offset_24g_rxdata_temp_add3
+	call g24_set_rega
+	ifetch 7,rega
+	rtn
+
+g24_fetch_mem_nodata_timer_enable:
+	setarg offset_24g_nodata_timer_enable
+	branch g24_set_rega_ifetch_1byte
+g24_set0_mem_nodata_timer_enable:
+	setarg 0
+g24_store_mem_nodata_timer_enable:
+	arg offset_24g_nodata_timer_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_set0_mem_ms_blank_data_enable:
+	setarg 0
+g24_store_mem_ms_blank_data_enable:
+	arg offset_24g_ms_blank_data_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_set0_mem_kb_blank_data_enable:
+	setarg 0
+g24_store_mem_kb_blank_data_enable:
+	arg offset_24g_kb_blank_data_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_set0_mem_kb_mul_blank_data_enable:
+	setarg 0
+g24_store_mem_kb_mul_blank_data_enable:
+	arg offset_24g_kb_mul_blank_data_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_store_mem_power_ctrl_threshold_up:
+	arg offset_power_ctrl_threshold_up,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_store_mem_power_ctrl_threshold_down:
+	arg offset_power_ctrl_threshold_down,rega
+g24_set_contw_with_regb_store_1byte:
+	call g24_set_contw_with_regb
+g24_contw_istore_1byte:
+	istore 1,contw
+	rtn
+
+g24_fetch_mem_pair_mode:
+	setarg offset_24g_pair_mode
+	branch g24_set_rega_ifetch_1byte
+
+g24_store_mem_pair_mode:
+	arg offset_24g_pair_mode,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_store_mem_pair_txpower:
+	setarg offset_24g_pair_txpower
+	call g24_set_rega_ifetch_1byte
+	branch g24_store_mem_txpower
+
+g24_fetch_mem_rxdata_temp_add3_1byte:
+	setarg offset_24g_rxdata_temp_add3
+	branch g24_set_rega_ifetch_1byte
+
+g24_set_contw_with_temp:
+	copy pdata,temp
+	copy rega,pdata
+	iadd regc,contw
+	copy temp,pdata
+	rtn
+	
+g24_set_contw_with_temp_store_3byte:
+	call g24_set_contw_with_temp
+g24_contw_istore_3byte:	
+	istore 3,contw
+	rtn
+
+g24_set_contw_with_regb:
+	call g24_head_ptr2regc
+g24_set_contw_with_regb2:
+	copy pdata,regb
+	copy rega,pdata
+	iadd regc,contw
+	copy regb,pdata
+	rtn
+
+g24_set_rega:
+	call g24_head_ptr2regc
+	iadd regc,rega
+	rtn
+
+g24_set_rega_ifetch_1byte:
+	call g24_set_rega
+g24_rega_ifetch_1byte:
+	ifetch 1,rega
+	rtn
+
+g24_set_rega_ifetcht_4byte:
+	call g24_set_rega
+	ifetcht 4,rega
+	rtn
+
+g24_mem_set0:
+	setarg 0
+	branch g24_contw_istore_1byte
+
+
+
+app_init:
+	bpatch patch18_4,mem_patch18
+	fetch 1,mem_device_option
+	branch app_init,blank				/* wait ram to be initialized */
+//	beq dvc_op_ukey,le_ukey_init
+	beq dvc_op_dongle,dongle_init
+	beq dvc_op_AntiLost,antilost_init
+	beq dvc_op_shutter,shutter_init
+	beq dvc_op_module,module_init
+	beq dvc_op_car,car_init
+	beq dvc_op_remote_car,remote_car_init
+	bbit1 dvc_op_mouse,mouse_init
+	rtn
+	
+app_lpm_init:
+	bpatch patch18_5,mem_patch18
+	jam 0,mem_tester_emulate
+	jam 0,mem_debug_config
+	jam 0, mem_lch_code
+	setarg 0
+	store 5,mem_sp_state_start
+	fetch 1,mem_device_option
+	branch app_lpm_init,blank				/* wait ram to be initialized */
+	beq dvc_op_module,module_lpm_init
+app_lpm_init0:
+	rtn
+
+	
+app_process_idle:
+	call ui_dispatch
+	call check_51cmd
+	call app_process_bb_event
+	fetch 2,mem_cb_idle_process
+	branch callback_func
+	
+app_process_bt:
+	fetch 2,mem_cb_bt_process
+	branch callback_func
+	
+app_process_ble:
+	fetch 2,mem_cb_le_process
+	branch callback_func
+
+app_process_bb_event:
+	bpatch patch18_6,mem_patch18
+	//return if c51 need to process bb event
+	arg mem_ipc_fifo_bt2c51,rega
+	call fifo_out
+	rtn blank
+	//reaching here mains c51 cannot get bb event.
+	copy pdata,regc
+	call app_event_normal_process
+	branch app_process_bb_event_priority
+	
+app_discard_event:
+	arg 0,regc
+	rtn
+
+//************************************************//
+//*APP BB EVENT NORMAL PROCESS**//
+//************************************************//
+app_event_normal_process:
+	beq BT_EVT_BB_CONNECTED,app_evt_bt_conn
+	beq BT_EVT_BUTTON_LONG_PRESSED,app_evt_button_long_pressed
+	beq BT_EVT_SETUP_COMPLETE,app_evt_setup_complete
+	beq BT_EVT_HID_HANDSHAKE,app_evt_hid_handshake
+	beq BT_EVT_HID_CONNECTED,app_bb_event_hid_connected
+	beq BT_EVT_RECONN_FAILED,app_bb_event_reconn_failed
+	beq BT_EVT_BB_DISCONNECTED,app_bb_event_bb_disconn
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,app_bb_event_reconn_failed	
+	beq BT_EVT_LE_CONNECTED,app_le_event_bb_connected
+	beq BT_EVT_LE_DISCONNECTED,app_le_event_bb_disconn
+	beq BT_EVT_RECONN_STARTED,app_event_reconn_start
+	beq BT_EVT_ENTER_SNIFF,app_event_enter_sniff
+	beq BT_EVT_EXIT_SNIFF,app_event_exit_sniff
+	
+	beq BT_EVT_ML2CAP_CONN_REFUSED,app_event_ml2cap_conn_refused
+	beq BT_EVT_LINKKEY_GENERATE,app_event_linkkey_generate
+	beq BT_EVT_SWITCH_FAIL_MASTER,app_event_switch_fail_master
+	beq BT_EVT_SWITCH_SUCCESS_MASTER,app_event_switch_success
+	rtn
+
+
+app_evt_bt_conn:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_CONNECTED,pdata
+	store 2,mem_ui_state_map
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set0 APP_DISC_BY_BUTTON ,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+app_event_switch_success:
+	jam 0,mem_switch_fail_master_count
+	rtn	
+
+app_event_switch_fail_master:
+	fetch 1,mem_switch_fail_master_count
+	increase 1,pdata
+	store 1,mem_switch_fail_master_count
+	sub pdata,1,null
+	branch app_bt_role_switch,positive
+	jam 0,mem_switch_fail_master_count
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_SWITCH_FAIL,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	branch app_bt_disconnect
+	
+app_process_bb_event_priority:
+	fetch 2,mem_cb_bb_event_process
+	branch callback_func
+
+app_check_wake_lock:
+	fetch 2,mem_cb_check_wakelock
+	branch callback_func
+	
+app_will_enter_lpm:
+	fetch 2,mem_cb_before_lpm
+	branch callback_func
+
+app_event_linkkey_generate:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_AFTER_PAIRING ,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	branch app_bt_store_reconn_info
+	
+app_event_reconn_start:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_RECONNECT,pdata
+	store 2,mem_ui_state_map
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_AFTER_RECONN,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+app_evt_setup_complete:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_SETUP_COMPLETE,pdata
+	store 2,mem_ui_state_map
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_AFTER_SETUP_DONE,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+app_evt_hid_handshake:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_HID_HANDSHAKE,pdata
+	store 2,mem_ui_state_map
+	rtn
+	
+app_event_enter_sniff:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_SNIFF,pdata
+	store 2,mem_ui_state_map
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_AFTER_SNIFF,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+	
+app_event_exit_sniff:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BT_SNIFF,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+app_le_event_bb_connected:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BLE_CONNECTED,pdata
+	store 2,mem_ui_state_map
+	rtn
+	
+app_le_event_bb_disconn:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BLE_CONNECTED,pdata
+	store 2,mem_ui_state_map
+	branch app_lpm_mult_disable
+	
+app_bb_event_hid_connected:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_HID_CONN,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+app_evt_button_long_pressed:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_BY_BUTTON,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+	
+app_event_ml2cap_conn_refused:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_L2CAP_REFUSED,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	branch  app_bt_disconnect
+
+
+app_evt_timer:
+	bpatch patch18_7,mem_patch18
+	store 1,mem_app_evt_timer_count
+app_evt_100ms_loop:
+	fetch 1,mem_app_evt_timer_count
+	rtn blank
+	increase -1,pdata
+	store 1,mem_app_evt_timer_count
+	call ui_button_polling
+	call app_lpm_wake_auto_lock_timer
+	call app_unsniff_delay_timer
+	call app_discovery_timer
+	call flash_write_spi_sm_timer
+	fetch 2,mem_cb_event_timer
+	call callback_func
+	branch app_evt_100ms_loop
+
+
+//regc:timer addr
+//regb:timer up call back fuction
+timer_single_step:
+	ifetch 1,regc
+	rtn blank
+	pincrease -1
+	istore 1,regc
+	nrtn blank
+	copy regb,pdata
+	branch callback_func
+
+//regc:timer addr
+//regb:timer up call back fuction
+timer_single_step_2B:
+	ifetch 2,regc
+	rtn blank
+	pincrease -1
+	istore 2,regc
+	nrtn blank
+	copy regb,pdata
+	branch callback_func
+	
+app_power_timer:
+	fetcht 2,mem_power_param_ptr
+	add temp,power_timer_offset,regc
+	arg app_power_timer_timeout,regb
+	branch timer_single_step
+	
+app_power_timer_timeout:
+	call app_got_power_state_common
+	beq POWER_STARTING,app_enter_power_stanby_state
+app_enter_power_off_state:
+	branch app_enter_hibernate
+app_enter_power_stanby_state:
+	setarg POWER_STANDBY
+	istore 1,regc
+	add temp,power_standby_cb_offset,regb
+app_power_cb_common:
+	ifetch 2,regb
+	branch callback_func
+
+app_unsniff_delay_timer:
+	arg mem_unsniff2sniff_timer_count,regc
+	arg app_unsniff_delay_timeout,regb
+	branch timer_single_step
+	
+app_unsniff_delay_timeout:
+	call context_check_idle
+	branch app_bt_enter_sniff,zero
+	rtn
+
+
+app_discovery_timer:
+	arg mem_discovery_timeout_timer_count,regc
+	arg app_discovery_timeout,regb
+	branch timer_single_step_2B
+	
+app_discovery_timeout:
+	call app_bt_stop_discovery
+	call app_led_off
+	fetch 2,mem_cb_discovry_timeout
+	branch callback_func
+
+	
+app_bb_event_reconn_failed:
+	call app_disconn_reason_flag_clear
+app_clear_reconnect_flag:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BT_RECONNECT,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+app_bb_event_bb_disconn:
+	jam 0,mem_unsniff2sniff_timer_count
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_RECONNECT,app_bb_event_bb_reconn_disconn
+	isolate0 UI_STATE_BT_SETUP_COMPLETE,pdata
+ 	call app_discard_event,true
+app_bb_event_bb_reconn_disconn:
+	bpatch patch19_0,mem_patch19
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BT_CONNECTED,pdata
+	set0 UI_STATE_BT_SETUP_COMPLETE,pdata
+	set0 UI_STATE_BT_HID_CONN,pdata
+	set0 UI_STATE_BT_HID_HANDSHAKE,pdata
+	set0 UI_STATE_BT_RECONNECT,pdata
+	store 2,mem_ui_state_map
+	branch app_lpm_mult_disable
+	
+app_bb_hibernate:
+	call app_disconn_reason_clear
+	branch app_enter_hibernate
+
+	
+app_disconn_reason_clear:
+	setarg 0
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	rtn
+app_disconn_reason_flag_clear:
+	setarg 0
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+app_disconn_reason_collect_bt:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	setarg 0
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+	
+app_disconn_reason_collect_ble:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_BLE,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	setarg 0
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+	
+//************************************************//
+//********APP SHARED FUNCSIONS*******//
+//************************************************//
+
+
+app_check_sniff:
+	fetch 1,mem_ui_state_map
+	isolate1 UI_STATE_BT_SNIFF,pdata
+	rtn
+
+//*****************************************//
+//*****************API********************//
+//*****************************************//
+//app_clearflag_store:
+//	setarg 0
+//	branch app_flag_store
+app_initflag_store:
+	setarg EEPROM_INIT_FLAG
+app_flag_store:
+	store 2,mem_timeup
+	bpatch patch19_1,mem_patch19
+	arg 2,temp
+	arg mem_timeup,rega
+	arg eeprom_module_init_flag,regb
+	branch iicd_write_eep_data
+
+//initflag is in eeprom to sure is eeprom nead to init
+app_initflag_check:
+	bpatch patch19_2,mem_patch19
+	arg 2,temp
+	arg mem_pdatatemp,rega
+	arg eeprom_module_init_flag,regb
+	call iicd_read_eep_data
+	fetch 2,mem_pdatatemp
+	arg EEPROM_INIT_FLAG,temp
+	isub  temp,null
+	rtn
+
+
+app_start_auto_sniff:
+	fetch 1,mem_unsniff2sniff_timer
+	store 1,mem_unsniff2sniff_timer_count
+	rtn	
+	
+app_get_lpm_wake_lock:
+	arg wake_lock_app,queue
+	branch lpm_get_wake_lock
+
+app_put_lpm_wake_lock:
+	arg wake_lock_app,queue
+	branch lpm_put_wake_lock
+	
+app_lpm_wake_auto_lock:
+	jam  LPM_WAKE_UP_DELAY_TIMER,mem_wake_up_delay_timer
+	branch app_get_lpm_wake_lock
+	
+app_lpm_wake_auto_lock_timer:
+	arg mem_wake_up_delay_timer,regc
+	arg app_put_lpm_wake_lock,regb
+	branch timer_single_step
+
+app_l2cap_flow_control_enable:
+	jam L2CAP_FLOW_CTRL_ENABLE,mem_l2cap_flow_ctrl_flag
+	rtn
+
+app_l2cap_flow_control_disable:
+	jam L2CAP_FLOW_CTRL_DISABLE,mem_l2cap_flow_ctrl_flag
+	rtn
+	
+app_bt_set_pincode:
+	jam BT_CMD_SET_PIN_CODE,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_bt_role_switch:
+	jam BT_CMD_ROLE_SWITCH,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_bt_start_reconnect:
+	bpatch patch19_3,mem_patch19
+	fetch 1,mem_app_connection_options
+	store 1,mem_connection_options
+	jam APP_FLAG_RECONNECT,mem_reconnect_flag
+	jam BT_CMD_RECONNECT,mem_fifo_temp
+	branch ui_ipc_send_cmd	
+	
+app_bt_reconnect_cancel:
+	jam BT_CMD_BB_RECONN_CANCEL,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_bt_disconnect:
+	jam BT_CMD_DISCONNECT,mem_fifo_temp
+	branch ui_ipc_send_cmd	
+
+app_bt_start_discovery_short:
+	fetch 2,mem_discovery_timeout
+	store 2,mem_discovery_timeout_timer_count
+app_bt_start_discovery_led_blink:
+	call app_led_start_blink
+app_bt_start_discovery:
+	jam BT_CMD_START_DISCOVERY,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_bt_stop_discovery:
+	setarg 0
+	store 2,mem_discovery_timeout_timer_count
+	jam BT_CMD_STOP_DISCOVERY,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_start_direct_adv:
+	jam BT_CMD_START_DIRECT_ADV,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_ble_stop_direct_adv:
+	jam BT_CMD_STOP_DIRECT_ADV,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_stop_adv:
+	jam BT_CMD_STOP_ADV,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_start_adv:	
+	jam BT_CMD_START_ADV,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_start_scan:
+	jam BT_CMD_LE_START_SCAN,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_stop_scan:
+	jam BT_CMD_LE_STOP_SCAN,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_start_conn:
+	jam BT_CMD_LE_START_CONN,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_disconnect:
+	jam BT_CMD_LE_DISCONNECT,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_led_start_blink:	
+	jam BT_CMD_LED_BLINK,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_led_on:
+	jam BT_CMD_LED_ON,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_led_stop_blink:
+app_led_off:
+	jam BT_CMD_LED_OFF,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_enter_hibernate:
+	jam BT_CMD_ENTER_HIBERNATE,mem_fifo_temp 
+	branch ui_ipc_send_cmd
+	
+app_bt_sniff_exit:
+	jam BT_CMD_EXIT_SNIFF,mem_fifo_temp
+	branch  ui_ipc_send_cmd
+	
+app_bt_enter_sniff:
+	jam BT_CMD_ENTER_SNIFF,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_ble_store_reconn_info:
+	jam BT_CMD_STORE_RECONN_INFO_LE,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_bt_store_reconn_info:
+	jam BT_CMD_STORE_RECONN_INFO_BT,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_store_reconn_info:
+	jam BT_CMD_STORE_RECONN_INFO,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_lpm_mult_enable:
+	set1 mark_lpm_mult_enable,mark
+	rtn
+
+app_lpm_mult_disable:
+	set0 mark_lpm_mult_enable,mark
+	rtn
+
+
+/*
+
+mem_power_param struct
+{
+	usigned char     mem_power_state
+	usigned char     mem_power_timer
+	usigned char	 mem_power_off_timeout
+	usigned char	 mem_power_starting_timeout
+	usigned long	 mem_power_off_cb
+	usigned long	 mem_power_starting_cb
+	usigned long	 mem_power_standby_cb
+	usigned long 	 mem_ui_butten_up_cb
+}
+    	functions:power state switching by mem_app_power_timer timeout or by button_long_pressed event
+    	(power off -> power starting->power standby->power off) and power timer initialization 
+ input parameters:mem_power_param_ptr should be point to the variable(mem_power_param) address where the input parameters stored in with its format
+output parameters:switched power state will be stored in variable mem_power_state*/
+app_button_long_pressed:
+	call app_got_power_state_common
+	beq POWER_STANDBY,app_power_shutting_down
+app_power_starting:
+	setarg POWER_STARTING
+	istore 1,regc
+	add temp,power_starting_timeout_offset,rega
+	add temp,power_starting_cb_offset,regb
+app_power_common:
+	ifetcht 1,rega
+	increase 1,regc
+	istoret 1,regc
+	branch app_power_cb_common
+	
+app_power_shutting_down:
+	setarg POWER_OFF
+	istore 1,regc
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,app_power_off_end
+	call app_ble_disconnect
+app_power_off_end:
+	fetcht 2,mem_power_param_ptr
+	add temp,power_off_timeout_offset,rega
+	add temp,power_off_cb_offset,regb
+	branch app_power_common
+	
+app_got_power_state_common:
+	fetcht 2,mem_power_param_ptr
+	add temp,power_state_offset,regc
+	ifetch 1,regc
+	rtn
+
+app_event_button_up:
+	call app_got_power_state_common
+	bne POWER_OFF,app_power_release
+	branch app_enter_hibernate
+app_power_release:
+	add temp,ui_butten_up_cb_offset,regb
+	branch app_power_cb_common
+
+antilost_init:
+	rtn wake	
+	jam 0x00,core_gpio_sel1//1: GPIO[26:25] is two wire SPI, 2: GPIO[26:23] is SPI, 3: GPIO[26:23] is PCM
+	setarg antilost_le_before_hibernate
+	store 2,mem_cb_before_hibernate
+	setarg keyscan_process_lpm_before
+	store 2,mem_cb_before_lpm
+	setarg antilost_idle_process	//
+	store 2,mem_cb_idle_process
+	setarg antilost_le_conn_process	//
+	store 2,mem_cb_le_process
+	setarg antilost_bb_event_process 
+	store 2,mem_cb_bb_event_process
+	setarg antilost_le_bb_event_timer
+	store 2,mem_cb_event_timer
+	setarg antilost_le_notification
+	store 2,mem_cb_ble_transmit
+	setarg antilost_lpm_lock_process
+	store 2,mem_cb_check_wakelock
+	setarg antilost_le_receive_data_process
+	store 2,mem_cb_att_write
+	bpatch patch19_4,mem_patch19
+	call antilost_buzzer_pwm_init
+	call keyscan_key_init
+	call antilost_adc_init
+	call ui_led_init_global
+	call ui_button_init
+	setarg antilost_key_up_down
+	store 2,mem_cb_antl_key
+	setarg antilost_power_off_cb
+	store 2,mem_antl_power_off_cb
+	setarg antilost_power_starting_cb
+	store 2,mem_antl_power_starting_cb
+	setarg antilost_power_standby_cb
+	store 2,mem_antl_power_standby_cb
+	setarg antilost_led_on_cb
+	store 2,mem_antl_led_cb_on
+	setarg antilost_led_off_cb
+	store 2,mem_antl_led_cb_off
+	setarg antilost_buzzer_on
+	store 2,mem_antl_buzzer_cb_on
+	setarg antilost_buzzer_off
+	store 2,mem_antl_buzzer_cb_off
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+	branch app_enter_hibernate
+
+antilost_le_before_hibernate:
+	call antilost_led_buzzer_stop_blink
+	branch  app_enter_hibernate
+
+antilost_le_notification:
+	call le_fifo_check_nearly_full
+	nrtn blank
+	arg mem_temp_block5,rega
+	call queue_pop
+	nrtn user
+	arg mem_temp_block5,contr
+	branch le_send_notify_from_list
+
+antilost_power_standby_cb:
+	fetch 2,mem_antl_le_sleep_timeout
+	store 2,mem_antl_le_sleep_timer
+	jam 1,mem_antl_key_scan_enable
+	branch antilost_fast_adv_start
+	
+antilost_lpm_lock_process:
+	fetch 1,mem_antl_key_state
+	beq 1,antilost_lpm_ctrl_for_led_buzzer
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,antilost_lpm_ctrl_for_led_buzzer
+	fetch 1,mem_antl_lost_mode
+	beq 1,app_get_lpm_wake_lock
+	fetch 1, mem_antl_queue_curr_num
+	nbranch app_get_lpm_wake_lock,blank 
+	branch app_put_lpm_wake_lock
+	
+antilost_lpm_ctrl_for_led_buzzer:
+	fetch 1,mem_antl_led_state
+	fetcht 1,mem_antl_buzzer_state
+	ior temp,pdata
+	beq 1,app_get_lpm_wake_lock
+	branch app_put_lpm_wake_lock
+
+antilost_bb_event_process:
+	copy regc,pdata
+	beq BT_EVT_BUTTON_UP,app_event_button_up
+	beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed
+	beq BT_EVT_LE_CONNECTED,antilost_le_process_conn
+	beq BT_EVT_LE_DISCONNECTED,antilost_le_process_discon
+	beq BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,antilost_le_conn_param_update_rsp_recieved
+	rtn
+antilost_le_conn_param_update_rsp_recieved:
+	fetch 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	beq BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_REJECTED,antilost_le_conn_param_rejected
+antilost_le_conn_param_accepted:
+	fetch 2,mem_le_new_connslavelatency
+	branch antilost_master_nonsupport_latency,blank
+antilost_le_conn_param_updata_procedure_sucsess:
+	jam CONN_PARAM_UPDATA_PROCEDURE_COMPLETE,mem_antl_conn_updata_procedure_state
+	jam 60,mem_antl_conn_update_timer
+	rtn
+
+antilost_le_conn_param_rejected:
+	fetch 2,mem_le_latency
+	branch antilost_conn_param_updata_procedure_faild,blank
+antilost_conn_param_retransimiting:
+	jam CONN_PARAM_UPDATA_PROCEDURE_STARTING,mem_antl_conn_updata_procedure_state
+	fetcht 2,mem_interval_increment
+	fetch 2,mem_le_interval_min
+	iadd temp,pdata
+	store 2,mem_le_interval_min
+	copy pdata,rega
+	fetch 2,mem_le_interval_max
+	iadd temp,pdata
+	store 2,mem_le_interval_max
+	iadd rega,pdata
+	rshift pdata,temp
+	fetch 2,mem_antl_le_unnormal_interval_max
+	idiv temp
+	call wait_div_end
+	quotient pdata
+	store 2,mem_le_latency
+	jam 1,mem_antl_send_updata_le_param_timer
+	rtn
+antilost_conn_param_updata_procedure_faild:
+	jam CONN_PARAM_UPDATA_PROCEDURE_FAILD,mem_antl_conn_updata_procedure_state
+	rtn
+
+antilost_master_nonsupport_latency:
+	jam 0,mem_lpm_mult
+	jam 0,mem_antl_send_updata_le_param_timer
+	fetch 2,mem_le_new_conninterval	//interval from master
+	fetcht 2,mem_antl_le_unnormal_interval_min
+	isub temp,null
+	setflag positive,0,rega 
+	fetch 2,mem_antl_le_unnormal_interval_max //local intervalmax
+	fetcht 2,mem_le_new_conninterval//interval form master
+	isub temp,pdata
+	setflag positive,1,rega
+	compare	0x03,rega,0x03
+	rtn true //return if the new conn_interval in range through conn_interval_min to conn_interval_max already
+	fetch 8,mem_antl_le_unnormal_interval_min
+	store 8,mem_le_interval_min
+	jam 1,mem_antl_send_updata_le_param_timer
+	rtn                               
+
+
+antilost_le_bb_event_timer:
+	//call ui_button_check_long_press
+	call app_power_timer
+	call antilost_double_click_timer
+	call antilost_le_fast_adv_timer
+	call antilost_le_sleep_timer
+	call antilost_app_updata_le_param_timer
+	call antilost_conn_update_timer
+	branch antilost_adc_check_timer
+
+
+antilost_double_click_timer:
+	arg mem_double_click_timer,regc
+	arg antilost_double_click_timeout,regb
+	branch timer_single_step
+antilost_double_click_timeout:
+	jam 0,mem_butten_click_cnt
+	rtn
+antilost_le_fast_adv_timer:
+	arg mem_antl_fast_adv_timer,regc
+	arg antilost_le_fast_adv_timeout,regb
+	branch timer_single_step_2B
+antilost_le_fast_adv_timeout:
+	arg mem_antl_slow_adv_led_style,regc
+	arg mem_antl_slow_adv_lpm_interval,regb
+	branch antilost_adv_start_common
+	
+
+antilost_conn_update_timer:
+	arg mem_antl_conn_update_timer,regc
+	arg antilost_conn_update_timer_time_out,regb
+	branch timer_single_step
+	
+antilost_conn_update_timer_time_out:
+	fetch 2,mem_le_latency
+	store 1,mem_lpm_mult
+	rtn
+antilost_app_updata_le_param_timer:
+	arg mem_antl_send_updata_le_param_timer,regc
+	arg antilost_app_updata_le_param_timeout,regb
+	branch timer_single_step
+antilost_app_updata_le_param_timeout:
+	fetch 1,mem_le_state
+	compare 0,pdata,0x60
+	nbranch antilost_wait_for_updata_param_instant_expire,true
+	jam CONN_PARAM_UPDATA_PROCEDURE_STARTING,mem_antl_conn_updata_procedure_state
+	call  app_lpm_mult_enable
+	branch le_l2cap_tx_update_req	
+antilost_wait_for_updata_param_instant_expire:
+	jam 1,mem_antl_send_updata_le_param_timer
+	rtn
+	
+antilost_le_sleep_timer:
+	arg mem_antl_le_sleep_timer,regc
+	arg antilost_le_sleep_timer_timeout,regb
+	branch timer_single_step_2B
+
+
+antilost_le_sleep_timer_timeout:
+	branch app_button_long_pressed
+
+antilost_adc_check_timer:
+	//fetch 1,mem_antl_power_timer
+	//rtneq SHUTTER_POWER_OFF
+	arg mem_adc_timer,regc
+	arg antilost_adc_check_timer_timeout,regb
+	branch timer_single_step_2B
+antilost_adc_check_timer_timeout:
+	fetch 2,mem_adc_timeout
+	store 2,mem_adc_timer
+	branch antilost_battery_process
+
+
+antilost_le_process_conn:
+	fetch 2,mem_adc_timeout
+	store 2,mem_adc_timer
+	setarg 0
+	store 2,mem_antl_fast_adv_timer
+	store 2,mem_antl_le_sleep_timer
+	call antilost_alert_off
+	call antilost_led_buzzer_stop_blink
+	jam 0,mem_lpm_mult
+	branch app_ble_stop_adv
+	                                                      
+
+antilost_le_process_discon:
+	//setarg 0
+	//store 1,mem_hci_curr_len
+	setarg 0
+	store 4,mem_adc_timer
+	store 3,mem_antl_conn_updata_procedure_state
+	store 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	
+	jam 1,mem_alarm_config_notfy_cnt
+	fetch 2,mem_antl_le_sleep_timeout
+	store 2,mem_antl_le_sleep_timer
+	call queue_init
+	fetch 1,mem_antl_power_state
+	rtneq POWER_OFF
+	call antilost_fast_adv_start
+	branch antilost_on_off_alarm_after_disconn
+
+
+antilost_le_conn_process:
+//bpatch
+	branch antilost_key_process
+
+antilost_idle_process:
+
+	fetch 1,mem_antl_power_state
+	rtnne POWER_STANDBY
+	branch antilost_key_process
+
+
+//////////////////////////////////////////////////////////////////////////////////////////
+/////SOFT WTICH////////
+antilost_power_starting_cb:
+	arg mem_antl_power_starting_buzzer_style,regc
+	call antilost_buzzer_configuration
+	arg mem_antl_power_starting_led_style,regc
+antilost_power_common:
+	branch antilost_led_configuration
+
+antilost_power_off_cb:
+	jam OFF,mem_le_adv_enable
+	arg mem_antl_power_off_buzzer_style,regc
+	call antilost_buzzer_configuration
+	arg mem_antl_power_off_led_style,regc
+	branch antilost_power_common
+	
+antilost_le_receive_data_process:
+	fetch 1,mem_le_att_opcode
+	beq ATTOP_WRITE_REQUEST,antilost_le_parse_att_write_request
+	rtn
+antilost_le_parse_att_write_request:
+	fetch 2,mem_le_att_handle
+//	beq  ATT_WRITE_REQUEST_HANDLE,antilost_key_data_send
+	beq NEW_SPEC_WRITE_HANDLE,antilost_cmd_parse_for_application
+	beq NEW_SPEC_NOTIFICATION_ENABLE_HANDLE,antilost_notify_alarm_config_first_time
+	rtn
+/////////////////////////////////////////////////////////
+
+
+/////////key scan
+antilost_key_process:
+	fetch 1,mem_antl_key_scan_enable
+	rtn blank
+	branch keyscan_key_process
+
+	//queue = key index
+	//rega =1 press, =0 release
+antilost_key_up_down:
+	copy rega,pdata
+	branch antilost_key_is_up,blank
+antilost_key_is_down:
+	copy queue,pdata
+	beq 0,antilost_key0_down
+	rtn
+antilost_key_is_up:
+	copy queue,pdata
+	beq 0,antilost_key0_up
+	rtn
+
+antilost_key0_down:
+	jam 1,mem_antl_key_state
+	arg mem_antl_key_buzzer_style,regc
+	call antilost_buzzer_configuration
+	arg mem_antl_key_led_style,regc
+	call antilost_led_configuration
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,antilost_butten_down_while_disconn
+	branch antilost_butten_down_after_conn
+	
+antilost_key0_up:
+	jam 0,mem_antl_key_state
+	branch antilost_double_click_timer_init
+
+//////////////process for double-click
+
+antilost_double_click_timer_init:
+	fetch 1,mem_butten_click_cnt
+	rtnne 1
+	jam 5,mem_double_click_timer
+	rtn
+
+antilost_butten_down_after_conn:
+	fetch 1,mem_butten_click_cnt
+	pincrease 1
+	store 1,mem_butten_click_cnt
+	beq 1,antilost_click_once
+	beq 2,antilost_click_twice
+	rtn
+antilost_click_once:
+	call antilost_alert_off
+	jam OPCODE1_BUTTEN_CLICK_ONCE,mem_antl_key0_press+5//5 represent opcode offset
+	arg mem_antl_key0_press,regc
+	branch antilost_prepare_data_and_send
+antilost_click_twice:
+	jam 0,mem_butten_click_cnt
+	jam OPCODE2_BUTTEN_DOUBLE_CLICK,mem_antl_key0_press+5
+	arg mem_antl_key0_press,regc
+	call antilost_prepare_data_and_send
+	fetch 1,mem_antl_lost_mode
+	beq 1,antilost_alert_on
+	rtn   //rtn should be retaind
+	
+antilost_butten_down_while_disconn:
+	fetch 2,mem_antl_le_sleep_timeout
+	store 2,mem_antl_le_sleep_timer
+	call antilost_alert_off
+	branch antilost_fast_adv_start
+	
+///////////////////////NEW App Spcecific///////
+antilost_cmd_parse_for_application:
+	bpatch patch19_5,mem_patch19
+	call le_app_receive_data
+	ifetch 1,rega
+	beq OPCODE3_ANTL_START_ALRAM,antilost_on_of_alram
+	beq OPCODE7_ANTL_CONFIG_ALRAM,antilost_configuration_for_alram
+	rtn
+
+antilost_on_of_alram:
+	fetch 1,mem_antl_lost_mode
+	beq ANTI_LE_ALARM_OFF,antilost_alert_on
+	beq ANTI_LE_ALARM_ON,antilost_alert_off
+	rtn
+
+antilost_configuration_for_alram:
+	ifetch 1,regb
+	beq 1,antilost_set_start_alarm_after_disconn
+	beq 0,antilost_set_no_alarm_after_disconn
+	rtn
+/////////////////check////////////////////////
+
+/*input: 1)package data addr in regc
+output:no
+function:calculate check_out value and send data*/
+//mem_temp_block5
+antilost_prepare_data_and_send:
+	bpatch patch19_6,mem_patch19
+	fetch 1,mem_client_characteristic_configuration_descriptor
+	isolate1 NOTIFICATION_ENABLE_BIT,pdata
+	nrtn true
+	add regc,6,contr
+	ifetch 2,contr
+	byteswap pdata,pdata
+	add pdata,5,loopcnt
+	add regc,3,contr
+	call calc_check_sum_start
+	istore 1,contr
+	copy regc,rega
+	branch queue_push
+
+/////////////////NEW APP SPECIFIC check end////////////////////
+
+
+/////////alarm//////////////////////////////
+antilost_alert_on:
+	fetch 1,mem_antl_power_state
+	rtn blank
+	jam 1,mem_antl_lost_mode
+	arg mem_antl_alert_buzzer_stlye,regc
+	call antilost_buzzer_configuration
+	arg mem_antl_alert_led_stlye,regc
+	call antilost_led_configuration
+	jam OPCODE4_CURRENT_ALARM_STATE,mem_antl_key0_release+5//5 represent opcode offset
+	jam 1,mem_antl_key0_release+8 //8 represent data offset,digit 1 represent alarm is on at present
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+antilost_alert_off:
+	fetch 1,mem_antl_lost_mode
+	rtn blank
+	jam 0,mem_antl_lost_mode
+	call antilost_led_buzzer_stop_blink
+	jam OPCODE4_CURRENT_ALARM_STATE,mem_antl_key0_release+5//5 represent opcode offset
+	jam 0,mem_antl_key0_release+8 //8 represent data offset,digit 0 represent alarm is off at present
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+
+antilost_set_start_alarm_after_disconn:
+	jam 1,mem_alarm_config
+	jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5
+	jam 1,mem_antl_key0_release+8
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+antilost_set_no_alarm_after_disconn:
+	jam 0,mem_alarm_config
+	jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5
+	jam 0,mem_antl_key0_release+8
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+antilost_on_off_alarm_after_disconn:
+	fetch 1,mem_alarm_config
+	rtn blank
+	branch antilost_alert_on
+	
+antilost_notify_alarm_config_first_time:
+	ifetch 2,rega
+	store 2,mem_client_characteristic_configuration_descriptor
+	isolate1 NOTIFICATION_ENABLE_BIT,pdata
+	nrtn true
+	fetch 1,mem_alarm_config_notfy_cnt
+	rtn blank
+	jam 0,mem_alarm_config_notfy_cnt
+	fetch 8,mem_antl_le_interval_min
+	store 8,mem_le_interval_min
+	jam 2,mem_antl_send_updata_le_param_timer
+	call antilost_battery_process
+	call antilost_battery_calculate_end //send twice to combat the failure of reception first time
+	jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5
+	fetch 1,mem_alarm_config
+	store 1,mem_antl_key0_release+8
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+
+//////////////alarm end//////////////////////////
+//sytle address in regc
+antilost_buzzer_configuration:
+	arg 1,rega
+	branch antilost_configuration_common
+antilost_led_configuration:
+	arg 0,rega
+antilost_configuration_common:
+	branch antilost_led_buzzer_style_configuration
+	
+antilost_led_buzzer_stop_blink:
+	arg 0,rega
+	call ui_led_blink_stop_global
+	arg 1,rega
+	call ui_led_blink_stop_global
+	fetch 1,mem_buzzer_pwm_conf
+	branch pwm_disable
+	
+antilost_led_buzzer_style_configuration:
+	call calc_curr_struct_prt
+	arg 7,loopcnt
+	branch ui_led_set_style_global+2
+
+
+
+antilost_fast_adv_start:
+	arg mem_antl_fast_adv_led_style,regc
+	arg mem_antl_lpm_interval,regb
+antilost_adv_start_common:
+	call antilost_adv_interval_lpm_interval_set
+	call antilost_led_configuration
+	fetch 2,mem_antl_fast_adv_timeout
+	store 2,mem_antl_fast_adv_timer
+	branch app_ble_start_adv
+	
+antilost_adv_interval_lpm_interval_set:
+	ifetch 2,regb
+	store 2,mem_lpm_interval
+	ifetch 2,contr
+	store 2,mem_le_adv_interval
+	rtn
+///////////////beep////////////
+antilost_buzzer_pwm_init:
+	arg 0,rega //sys clk 12mhz
+	call pwm_init
+	fetch 6,mem_buzzer_pwm_conf
+	store 6,mem_pdatatemp
+	call pwm_out_set
+	fetch 1,mem_buzzer_pwm_conf
+	branch pwm_disable
+	
+antilost_led_on_cb:
+	jam 1,mem_antl_led_state
+	rtn	
+antilost_led_off_cb:
+	jam 0,mem_antl_led_state
+	rtn
+
+
+
+antilost_buzzer_off:
+	jam 0,mem_antl_buzzer_state
+	fetch 1,mem_buzzer_pwm_conf
+	branch pwm_disable
+	
+antilost_buzzer_on:
+	jam 1,mem_antl_buzzer_state
+	fetch 6,mem_buzzer_pwm_conf
+	store 6,mem_pdatatemp
+	branch pwm_out_set
+
+////////////////beep end///////////////////////////
+/////////////adc start////////////////////////
+antilost_adc_init:
+	jam 0,mem_adc_config_flag
+	branch adc_init_data
+
+antilost_battery_process:
+	call adc_set_mode
+	call vdd_calculate_by_mode
+	store 2,mem_battery_current_voltage
+	arg mem_battery_calculate_set,rega
+	call adc_bat_percent_lowpower_out
+	store 1,mem_voltage_remain_percent //for debug
+	beq 0,antilost_low_battery
+	sub pdata,0x64,null
+	nbranch antilost_full_battery,positive
+	store 1,mem_antl_key0_release+8
+antilost_battery_calculate_end:
+	jam OPCODE5_BATTER_INFORMATION,mem_antl_key0_release+5
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+antilost_full_battery:
+	jam 100,mem_antl_key0_release+8
+	branch antilost_battery_calculate_end
+
+antilost_low_battery:
+	branch app_button_long_pressed
+
+
+
+car_init:
+	rtn wake	
+	hfetch 1,core_gpio_sel1
+	and_into 0xf0,pdata
+	hstore 1,core_gpio_sel1
+	setarg car_le_before_hibernate
+	store 2,mem_cb_before_hibernate
+	
+	setarg car_le_process_lpm_before
+	store 2,mem_cb_before_lpm	
+	
+	setarg app_enter_hibernate
+	store 2,mem_cb_discovry_timeout
+	
+	setarg car_scale_process_idle	
+	store 2,mem_cb_idle_process	
+	
+	setarg car_scale_process_bb_event 
+	store 2,mem_cb_bb_event_process	
+	
+	setarg app_get_lpm_wake_lock
+	store 2,mem_cb_check_wakelock
+	
+	setarg car_le_receive_data
+	store 2,mem_cb_att_write
+	
+	setarg car_le_bb_event_timer
+	store 2,mem_cb_event_timer
+	
+	call g24_head_ptr2regc
+	setarg car_24g_receive_data
+	add regc,offset_24g_cb_rxdata_type1,contw
+	istore 2,contw
+
+	setarg car_power_off_signal
+	store 2,mem_remote_car_power_off_cb
+	
+	setarg car_soft_switch_power_on_signal
+	store 2,mem_remote_car_power_standby_cb
+	
+	bpatch patch19_7,mem_patch19
+	call car_init_environment
+	call queue_init
+	jam 2,mem_lpm_mult
+	jam POWER_ON,mem_car_24g_received_pac
+	fetch 1,mem_car_config_soft_switch_enable
+	store 1,mem_car_hard_soft_switch
+	beq HARD_SWITCH, car_hard_switch_power_on_signal
+	fetch 1,mem_car_config_soft_switch_gpio
+	store 1,mem_ui_button_gpio
+	jam OFF,mem_le_adv_enable
+car_soft_switch_power_on_init:
+	call car_ui_led_init
+	call ui_button_init
+	call ui_button_polling
+	jam POWER_STARTING,mem_car_power_state
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+ 	branch app_enter_hibernate
+
+car_power_off_signal:	
+	branch car_ui_led_init
+	
+car_hard_switch_power_on_signal:
+	jam POWER_STANDBY,mem_car_power_state
+car_soft_switch_power_on_signal:
+	jam ON,mem_le_adv_enable
+	call car_ui_led_init
+	arg 0,rega
+	call ui_led_blink_start_global
+	
+	setarg FAST_ADV_INTERVAL_VALUE_CAR
+	call shutter_ble_adv_interval_set
+car_le_modified_name_adv:
+	arg mem_le_name+7,contw
+	fetch 1,mem_le_lap
+car_name_loop:
+	and pdata,0xF0,temp
+	rshift4 temp,temp
+	call car_hex_to_ascii
+	istoret 1, contw
+	and pdata,0x0F,temp
+	call car_hex_to_ascii
+	istoret 1, contw
+	call le_modified_name_att_list
+	fetcht 1,mem_le_name_len
+	copy temp,loopcnt
+	arg mem_le_adv_data+2,contw
+	arg mem_le_name,contr
+	call memcpy
+car_le_modified_name_scan:
+	fetcht 1,mem_le_name_len
+	copy temp,loopcnt
+	arg mem_le_scan_data+2,contw
+	arg mem_le_name,contr
+	branch memcpy
+car_hex_to_ascii:
+	sub temp,9,null
+	branch car_hex_num,positive
+	add temp,55,temp
+	rtn
+car_hex_num:	
+	add temp,48,temp
+	rtn
+
+car_ui_led_init:
+	fetch 1,mem_car_config_blood_led1_gpio
+	bne INVALID_PIN_NUM,car_blood_led_gpio_set
+car_ui_led_init_1:
+	fetch 1,mem_car_config_pairing_led_gpio
+	bne INVALID_PIN_NUM,car_pairing_led_gpio_set
+car_ui_led_init_2:
+	fetch 1,mem_car_config_low_voltage_led_gpio
+	bne INVALID_PIN_NUM,car_low_voltage_led_gpio_set
+car_ui_led_init_3:
+	fetch 1, mem_car_led_num
+	copy pdata,loopcnt
+	setarg mem_car_led_map
+	copy pdata,rega
+car_in_lp1:
+	copy rega,contr
+	ifetch 1,contr
+	copy contr,rega
+	beq INVALID_PIN_NUM,car_in_lp1_end
+	copy pdata,temp
+	call gpio_config_output
+car_in_lp1_end:
+	loop car_in_lp1
+car_ui_led_init_end:
+	rtn
+car_blood_led_gpio_set:
+	fetch 8,mem_car_config_blood_led1_gpio
+	store 8,mem_car_led_map+2
+	branch car_ui_led_init_1
+car_pairing_led_gpio_set:
+	store 1,mem_car_led_map
+	branch car_ui_led_init_2
+car_low_voltage_led_gpio_set:
+	store 1,mem_car_led_map+1
+	branch car_ui_led_init_3
+
+
+car_init_environment:
+	arg 0,rega
+	call pwm_init
+	call car_ir_rx_init
+	call g24_receive_process_init
+	branch car_init_adc_hvin
+
+car_init_adc_hvin:
+	jam 100,mem_car_notify_vdd_value_last
+	fetch 1,mem_car_config_low_voltage_led_gpio
+	store 1,mem_car_style2_struct_led_gpio
+	branch adc_init_data
+	
+car_le_before_hibernate:
+	call gpio_set_before_lpm_common
+	branch keyscan_process_lpm_before
+
+car_le_process_lpm_before:
+	branch keyscan_process_lpm_before
+
+car_key_scan_process:
+//	fetch 1,mem_enable_key_scan
+//	rtn blank
+	branch keyscan_key_process
+
+car_scale_process_idle:
+	call car_le_send_packet
+	call car_ir_receive_process
+	call car_g24_status_process
+	branch car_key_scan_process
+
+car_g24_status_process:
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	fetch 1,mem_car_24g_received_pac
+	beq WORK_PAIRED,car_g24_connected_event
+	rtn
+car_g24_connected_event:
+	fetch 1,mem_car_24g_status
+	rtneq WORK_PAIRED
+	jam WORK_PAIRED,mem_car_24g_status
+	branch car_g24_connected
+
+car_le_send_packet:
+	fetch 2,mem_ui_state_map
+	rtnbit0 UI_STATE_BLE_CONNECTED
+	call le_fifo_check_nearly_full
+	nrtn blank
+	arg mem_car_pop_queue_buff,rega
+	call queue_pop
+	nrtn user
+	arg mem_car_pop_queue_buff,contr
+	branch le_send_notify_from_list
+ 
+car_scale_process_bb_event:
+	copy regc,pdata
+	beq BT_EVT_BUTTON_UP,app_event_button_up
+	beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed
+	beq BT_EVT_LE_CONNECTED,car_scale_event_le_conn
+	beq BT_EVT_LE_DISCONNECTED,car_scale_event_le_discon
+	rtn
+
+car_scale_event_le_conn:
+	setarg disable_24g
+	call g24_store_mem_24g_mode
+	branch car_scale_process_conn
+car_g24_connected:
+	fetch 2,mem_car_24g_no_data_timeout_count
+	store 2,mem_car_24g_no_data_timeout_timer
+car_scale_process_conn:
+	jam 0x14,mem_car_notify_vdd_timer
+	jam 0,mem_lpm_mode
+	call app_ble_stop_adv
+	call app_lpm_mult_enable
+	fetch 1,mem_car_config_pairing_led_conn_status
+	beq 0x01,car_pairing_led_conn_status_setting
+car_scale_process_conn_next:
+	arg 0,rega
+	branch ui_led_on_global
+car_pairing_led_conn_status_setting:
+	arg 0,rega
+	branch ui_led_blink_stop_global
+
+car_scale_event_le_discon:
+	setarg rx_24g
+	call g24_store_mem_24g_mode
+car_g24_disconnect:
+	setarg 0
+	store 5,mem_car_led_control
+	setarg 4
+	call pwm_disable
+	setarg 5
+	call pwm_disable
+	setarg 20
+	call pwm_disable
+	setarg 21
+	call pwm_disable
+	setarg 22
+	call pwm_disable
+	setarg 7
+	call pwm_disable
+	call queue_init
+	jam 10,mem_motor1_speed
+	jam 10,mem_motor2_speed
+	jam 10,mem_motor3_speed
+//	jam 1,mem_lpm_mode
+	jam 2,mem_lpm_mult
+	arg 0,rega
+	call ui_led_blink_start_global
+
+	setarg FAST_ADV_INTERVAL_VALUE_CAR
+	call shutter_ble_adv_interval_set
+	branch app_ble_start_adv
+
+car_le_bb_event_timer:
+//	call car_ui_power_timeout_timer
+	call car_moto1_blank_data_timer
+	call car_moto2_blank_data_timer
+	call car_moto3_blank_data_timer
+	call app_power_timer
+	call car_led_control_timer
+	call car_notify_vdd_timer
+	call car_24g_no_data_timeout_timer
+	call car_ir_breakdown_timer
+	branch car_attack_shake_timer
+
+car_ir_breakdown_timer:
+	arg mem_car_ir_breakdown_check_timer,regc
+	arg car_ir_breakdown_timeout,regb
+	branch timer_single_step
+car_ir_breakdown_timeout:
+	call car_ir_gpio_get_status
+	nrtn true
+	jam 1,mem_car_ir_breakdown_flag
+	rtn
+	
+car_24g_no_data_timeout_timer:
+	arg mem_car_24g_no_data_timeout_timer,regc
+	arg car_24g_no_data_timer_timeout,regb
+	branch timer_single_step_2B
+car_24g_no_data_timer_timeout:
+	jam WORK_SEARCH,mem_car_24g_status
+	branch car_g24_disconnect
+
+car_attack_shake_timer:
+	arg mem_car_attack_shake_timer,regc
+	arg car_attack_shake,regb
+	branch timer_single_step
+car_attack_shake:
+	fetch 1, mem_car_attack_shake_flag
+	branch car_attack_shake_stop,blank
+	jam 2,mem_car_attack_shake_timer
+	jam 0, mem_car_attack_shake_flag
+	setarg 0x0a02
+	store 2,mem_le_receive_payload
+	fetch 1,mem_car_config_device_select
+	beq DEVICE_BATTLE_TANK,car_attack_shake_front_battle_tank
+car_attack_shake_front_battle_car:
+	branch car_motor_control
+car_attack_shake_front_battle_tank:
+	setarg 0x0a02
+	store 2,mem_le_receive_payload+2
+	branch car_motor_control
+car_attack_shake_stop:
+	setarg 0
+	store 4,mem_le_receive_payload
+	branch car_motor_control
+
+car_notify_vdd_timer:
+	fetch 1,mem_car_config_bat_notify_enable
+	rtn blank
+ 	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,car_low_bat_led_off
+	arg mem_car_notify_vdd_timer,regc
+	arg car_notify_vdd,regb
+	branch timer_single_step
+car_notify_vdd:
+	fetch 1,mem_car_notify_vdd_count
+	store 1,mem_car_notify_vdd_timer
+ 	fetch 1,mem_car_working_flag
+ 	nrtn blank
+car_read_hvin:
+	call adc_set_mode
+	call vdd_calculate_by_mode
+	store 2,mem_vdd_now_vol
+	arg mem_vdd_calculate_set,rega
+	call adc_bat_percent_lowpower_out
+	fetcht 1,mem_car_notify_vdd_value_last
+	isub temp,null
+	branch car_notify_vdd_next2,positive
+	store 1,mem_car_notify_vdd_value_last
+	copy pdata,temp
+car_notify_vdd_next2:
+	storet 1,mem_car_notify_vdd_percent
+	fetch 1,mem_car_config_low_voltage_percent
+	isub temp,null
+	call car_enter_low_bat,positive
+	storet 1,mem_notify_bat_payload 
+	arg 6,loopcnt
+	arg mem_notify_bat_head,contr
+	call calc_check_sum_start
+	store 1,mem_notify_bat_check_sum
+	arg mem_notify_bat_packet,rega
+	branch queue_push
+car_enter_low_bat:
+	fetch 1,mem_low_bat_flag
+	nrtn blank
+	jam 1,mem_low_bat_flag
+	arg 1,rega
+	branch ui_led_blink_start_global
+car_low_bat_led_off:
+	arg 1,rega
+	branch ui_led_blink_stop_global
+
+car_led_control_timer:
+	arg mem_car_led_control_timer,regc
+	arg car_led_control,regb
+	branch timer_single_step
+car_led_control:
+	jam 5,mem_car_led_control_timer
+	jam 0,mem_car_led_no
+	fetch 1,mem_car_led_blink_status
+	beq LED_ON,car_led_control_blink_off
+	beq LED_OFF,car_led_control_blink_on
+car_led_control_set:
+	arg mem_car_led_control,contr
+	copy contr,rega
+	arg 8,loopcnt
+car_led_control_timer_next:
+	copy rega,contr
+	ifetch 1,contr
+	copy contr,rega
+	beq LED_OFF,car_led_control_off
+	beq LED_ON,car_led_control_on
+	beq LED_BLINK,car_led_control_blink
+car_led_control_timer_next_2:
+	fetch 1,mem_car_led_no
+	increase 1,pdata
+	store 1,mem_car_led_no
+	loop car_led_control_timer_next
+	rtn
+car_led_switch:
+	fetch 1,mem_car_led_no
+	arg mem_car_config_blood_led_gpio,regb
+	iadd regb,regb
+	ifetcht 1,regb
+	rtn
+car_led_control_off:
+	call car_led_switch
+	call gpio_out_inactive
+	branch car_led_control_timer_next_2
+car_led_control_on:
+	call car_led_switch
+	call gpio_out_active
+	branch car_led_control_timer_next_2
+car_led_control_blink:
+	fetch 1,mem_car_led_blink_status
+	beq LED_ON,car_led_control_off
+	branch car_led_control_on
+car_led_control_blink_on:
+	jam LED_ON,mem_car_led_blink_status
+	branch car_led_control_set
+car_led_control_blink_off:
+	jam LED_OFF,mem_car_led_blink_status
+	branch car_led_control_set
+	
+////////////////////////check sum////////////////////////
+//loopcnt = sum number,contr = ptr
+calc_check_sum_start:
+	arg 0,rega
+calc_check_sum_loop:
+	ifetch 1,contr
+	iadd rega,rega
+	loop calc_check_sum_loop
+calc_check_sum_and:
+	and rega,0xff,pdata
+	rtn
+
+car_le_receive_data:	
+	fetch 1,mem_le_att_opcode
+	beq ATTOP_WRITE_REQUEST,car_le_parse_att_write_request
+	rtn
+car_le_parse_att_write_request:
+	fetch 2,mem_le_att_handle
+	beq ATT_CAR_CONTROL_HANDLE,car_control_le_receive
+	rtn
+
+/*
+*	typedef struct
+*	{
+*		2byte	packet_head				(mem_app_receive_temp)
+*		1byte	packet_cmd				(mem_app_receive_temp+2)
+*		2byte	packet_payload_length	(mem_app_receive_temp+3)
+*		10byte	packet_payload			(mem_app_receive_temp+5)
+*		1byte	packet_check_sum		(mem_app_receive_temp+15)
+*	}
+*/
+le_app_receive_data:
+	bpatch patch1a_0,mem_patch1a
+	ifetch 5,rega
+	store 5,mem_app_receive_temp
+	fetch 2,mem_app_receive_temp
+	arg LE_RECEIVE_PACKET_HEAD,temp
+	isub temp,null
+	nrtn zero
+	fetch 2,mem_app_receive_temp+3
+	byteswap pdata,pdata
+	store 2,mem_app_receive_temp+3
+	copy pdata,loopcnt
+	increase 5,rega
+	copy rega,contr
+	arg mem_app_receive_temp+5,contw
+	call memcpy
+	ifetch 1,contr
+	store 1,mem_app_receive_temp+15
+	arg mem_app_receive_temp+2,rega
+	arg mem_app_receive_temp+5,regb
+	rtn
+
+car_control_le_receive:
+	setarg 0
+	store 5,mem_le_receive_payload
+	store 5,mem_le_receive_payload+5
+	call le_app_receive_data
+	copy regb,contr
+	arg mem_le_receive_payload,contw
+	arg 10,loopcnt
+	call memcpy
+car_receive_cmd_select:
+	bpatch patch1a_1,mem_patch1a
+	ifetch 1,rega
+	beq CAR_CMD_OLD_CAR_CONTROL,car_drive_old
+	beq CAR_CMD_OLD_SPEED_CONTROL,car_speed_set_old
+	beq CAR_CMD_L_R_MOTOR_CONTROL,car_motor_control
+	beq CAR_CMD_F_B_MOTOR_CONTROL,car_motor_control
+	beq CAR_CMD_IR_CONTROL,car_ir_data_rx_from_app
+	beq CAR_CMD_LED_CONTROL,car_led_control_receive
+	beq CAR_CMD_DEVICE_INFO,car_info_request
+	rtn
+
+car_24g_receive_data:
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	
+	fetch 2,mem_car_24g_no_data_timeout_count
+	store 2,mem_car_24g_no_data_timeout_timer
+	
+	jam WORK_PAIRED,mem_car_24g_received_pac
+	
+	setarg offset_24g_rxdata_temp_add3
+	call g24_set_rega
+	call car_control_le_receive
+
+	fetch 1,mem_app_receive_temp+2	//cmd
+	beq CAR_CMD_L_R_MOTOR_CONTROL,car_24g_receive_data_next
+	beq CAR_CMD_F_B_MOTOR_CONTROL,car_24g_receive_data_next
+	rtn
+car_24g_receive_data_next:
+	fetch 1,mem_le_receive_payload	//moto1
+	ncall car_moto1_enable_blank_data_timer,blank
+	fetch 1,mem_le_receive_payload+2	//moto2
+	ncall car_moto2_enable_blank_data_timer,blank
+	fetch 1,mem_le_receive_payload+4	//moto3
+	ncall car_moto3_enable_blank_data_timer,blank
+	rtn
+
+car_moto1_enable_blank_data_timer:
+	jam 5,mem_car_moto1_blank_timer
+	rtn
+car_moto2_enable_blank_data_timer:
+	jam 5,mem_car_moto2_blank_timer
+	rtn
+car_moto3_enable_blank_data_timer:
+	jam 5,mem_car_moto3_blank_timer
+	rtn
+
+car_moto1_blank_data_timer:
+	arg mem_car_moto1_blank_timer,regc
+	arg car_moto1_blank_data,regb
+	branch timer_single_step
+car_moto2_blank_data_timer:	
+	arg mem_car_moto2_blank_timer,regc
+	arg car_moto2_blank_data,regb
+	branch timer_single_step
+car_moto3_blank_data_timer:		
+	arg mem_car_moto3_blank_timer,regc
+	arg car_moto3_blank_data,regb
+	branch timer_single_step
+
+car_moto1_blank_data:
+	jam 0,mem_le_receive_payload
+	branch car_motor_control
+car_moto2_blank_data:
+	jam 0,mem_le_receive_payload+2
+	branch car_motor_control
+car_moto3_blank_data:
+	jam 0,mem_le_receive_payload+4
+	branch car_motor_control
+	
+	
+///////////////////////Motor//////////////////////////////////////////
+
+car_drive_old:	
+	call car_left_right_control_old
+	branch car_front_back_control_old
+car_left_right_control_old:
+	fetch 1,mem_le_receive_payload
+	store 1,mem_motor2_status
+	branch car_motor2_control
+car_front_back_control_old:
+	fetch 1,mem_motor1_speed
+	call car_reset_old_speed
+	fetch 1,mem_le_receive_payload+1
+	store 1,mem_motor1_status
+	branch car_motor1_control
+car_reset_old_speed:
+	beq SPEED_LEVEL_2,car_reset_old_speed2
+	beq SPEED_LEVEL_3,car_reset_old_speed3
+	store 1,mem_motor1_speed
+	rtn
+car_reset_old_speed2:
+	jam SPEED_LEVEL_5,mem_motor1_speed
+	rtn
+car_reset_old_speed3:
+	jam SPEED_LEVEL_10,mem_motor1_speed
+	rtn
+car_speed_set_old:
+	fetch 1,mem_le_receive_payload
+	call car_reset_old_speed
+	fetch 1,mem_motor1_speed
+	call car_motor_speed_duty_setting
+	call car_motor_speed_duty_transform
+	branch pwm_pwm0_duty_set
+
+car_motor_control:
+	fetch 1,mem_car_24g_go_die_flag
+	nrtn blank
+	fetch 6,mem_le_receive_payload
+	store 6,mem_motor1_status
+	fetch 1,mem_motor1_speed
+	fetcht 1,mem_motor2_speed
+	iand temp,pdata
+	fetcht 1,mem_motor3_speed
+	iand temp,pdata
+	call car_motor_working_flag,blank
+	bpatch patch1a_2,mem_patch1a
+	call car_motor1_control
+	call car_motor2_control
+	branch car_motor3_control
+car_motor1_control:
+	arg mem_motor1_pwm_set,regb
+	arg mem_motor1_status,contr
+	branch car_motor_status_select
+car_motor2_control:
+	arg mem_motor2_pwm_set,regb
+	arg mem_motor2_status,contr
+	branch car_motor_status_select
+car_motor3_control:
+	arg mem_motor3_pwm_set,regb
+	arg mem_motor3_status,contr
+	branch car_motor_status_select
+car_motor_working_flag:
+	jam 0,mem_car_working_flag
+	rtn
+
+car_motor_status_select:
+	ifetch 1,contr
+	beq MOTOR_STOP,car_motor_stop
+	beq GO_FRONT,car_motor_positive
+	beq GO_BACK,car_motor_negative
+	rtn
+car_motor_positive:
+	jam 0,mem_motor_select_p_n
+	branch car_motor_negative+1
+car_motor_negative:
+	jam 1,mem_motor_select_p_n
+	ifetch 1,contr
+	store 1,mem_car_motor_speed
+	ifetch 8,regb
+	branch car_motor_work
+
+car_motor_stop:
+	ifetch 1,regb
+	call pwm_disable
+	increase 1,regb
+	ifetch 1,regb
+	branch pwm_disable
+car_motor_work:
+	store 8,mem_motor_pwm_pin1_set
+	jam 1,mem_car_working_flag
+	fetch 1,mem_motor_select_p_n
+	beq 0,car_motor_select_positive
+car_motor_select_negative:
+	fetch 1,mem_motor_pwm_pin2_set
+	store 1,mem_motor_pwm_pin_set
+	fetch 1,mem_motor_pwm_pin1_set
+car_motor_work_next:
+	call pwm_disable
+	fetch 1,mem_car_motor_speed
+	call car_motor_speed_duty_setting
+	store 1,mem_motor_pwm_dute_set
+	fetch 6,mem_motor_pwm_pin_set
+	store 6,mem_pdatatemp
+	branch pwm_out_set
+car_motor_select_positive:
+	fetch 1,mem_motor_pwm_pin1_set
+	store 1,mem_motor_pwm_pin_set
+	fetch 1,mem_motor_pwm_pin2_set
+	branch car_motor_work_next
+
+car_motor_speed_duty_setting:
+	mul32 pdata,5,pdata
+	add pdata,50,pdata
+	rtn
+car_motor_speed_duty_transform:
+	arg 12000,temp
+	imul32 temp,pdata
+	div pdata,100
+	call wait_div_end
+	quotient temp
+	copy temp,rega
+	setarg 12000
+	isub temp,regb
+	rtn
+
+/////////////////////IR PROCESS/////////////////////
+car_ir_init:
+	hfetch 1,core_gpio_sel2		// select GPIO3 as pwm4
+	set1 2,pdata
+	hstore 1,core_gpio_sel2
+	setarg 158
+	hstore 2,core_pwm_pcnt4
+	hstore 2,core_pwm_ncnt4
+	rtn
+
+car_ir_data_rx_from_app:
+	fetch 1,mem_car_24g_go_die_flag
+	nrtn blank
+	fetch 2,mem_le_receive_payload
+	store 2,mem_ir_data
+	fetch 1,mem_car_24g_status
+	bne WORK_PAIRED,car_ir_data_tx
+	fetch 2,mem_le_lap
+	store 2,mem_ir_data
+car_ir_data_tx:
+	bpatch patch1a_3,mem_patch1a
+	call car_ir_init
+	call car_ir_enable
+	setarg 48000
+	call sleep
+	call car_ir_disable
+	setarg 7200
+	call sleep
+	arg 16,loopcnt
+car_ir_send_loop:
+	call car_ir_enable
+	fetch 2,mem_ir_data
+	bbit1 0,car_ir_is_bit1
+	setarg 7200
+	call sleep
+	call car_ir_disable
+	branch car_ir_wait_finish
+	
+car_ir_is_bit1:
+	setarg 14400
+	call sleep
+	call car_ir_disable
+car_ir_wait_finish:
+	setarg 7200
+	call sleep
+	fetch 2,mem_ir_data
+	rshift pdata,pdata	
+	store 2,mem_ir_data
+	loop car_ir_send_loop
+
+	jam 2,mem_car_attack_shake_timer
+	jam 1, mem_car_attack_shake_flag
+	setarg 0x0a01
+	store 2,mem_le_receive_payload
+	fetch 1,mem_car_config_device_select
+	beq DEVICE_BATTLE_TANK,car_attack_shake_back_battle_tank
+car_attack_shake_back_battle_car:
+	branch car_motor_control
+car_attack_shake_back_battle_tank:
+	setarg 0x0a01
+	store 2,mem_le_receive_payload+2
+	branch car_motor_control
+	
+car_ir_enable:
+	hfetch 1,core_gpio_key2			// PWM4_enable
+	or_into 0x40,pdata
+	hstore 1,core_gpio_key2	
+	rtn
+car_ir_disable:
+	hfetch 1,core_gpio_key2			// PWM4_disable
+	and_into 0xbf,pdata
+	hstore 1,core_gpio_key2
+	rtn
+	
+car_ir_rx_init:
+	fetch 1,mem_car_config_ir_enable
+	rtneq 0x00
+	call lpm_disable_exen_output
+	fetcht 1,mem_car_config_ir_rx_gpio
+	storet 1,mem_ir_rx_gpio
+	call gpio_config_input
+	call car_ir_gpio_get_status
+	nrtn true
+	jam 1,mem_car_ir_breakdown_check_timer
+	rtn
+
+car_ir_receive_process:
+	fetch 1,mem_car_config_ir_enable
+	rtneq FLAG_IR_DISABLE	
+	fetch 1,mem_car_ir_breakdown_flag
+	nrtn blank
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,car_ir_receive_process_next
+	fetch 1,mem_car_24g_status
+	rtnne WORK_PAIRED
+car_ir_receive_process_next:
+	bpatch patch1a_4,mem_patch1a
+	call car_ir_gpio_get_status
+	nrtn true
+	setarg 36000
+	call sleep
+	call car_ir_gpio_get_status
+	nrtn true
+	call car_ir_clk_get
+car_ir_packet_head_wait_end:
+	call car_ir_clk_check
+	nrtn positive
+	call car_ir_gpio_get_status
+	branch car_ir_packet_head_wait_end,true
+	arg 0,rega
+	arg 16,loopcnt
+	call car_ir_clk_get
+car_ir_receive_process_loop:
+	call car_ir_clk_check
+	nrtn positive
+	call car_ir_gpio_get_status
+	nbranch car_ir_receive_process_loop,true
+	setarg 10800
+	call sleep
+	call car_ir_gpio_get_status
+	branch car_ir_get_bit1,true
+car_ir_get_bit0:
+	setarg 0
+ 	rshift rega,rega
+	ior rega,rega
+	loop car_ir_receive_process_loop
+	branch car_ir_receive_process_end
+car_ir_get_bit1:
+	setarg 0x8000
+	rshift rega,rega
+	ior rega,rega
+	call car_ir_clk_get
+car_ir_get_bit1_wait_low_end:
+	call car_ir_clk_check
+	nrtn positive
+	call car_ir_gpio_get_status
+	branch car_ir_get_bit1_wait_low_end,true
+	loop car_ir_receive_process_loop
+car_ir_receive_process_end:
+	bpatch patch1a_5,mem_patch1a
+	copy rega,pdata
+	store 2,mem_ir_rx_buf
+	store 2,mem_ir_notify_data+8
+	fetch 1,mem_car_24g_status
+	beq WORK_PAIRED,car_ir_24g_receive_attack
+car_ir_data_notify:
+	arg 0x07,loopcnt
+	arg mem_ir_notify_data_head,contr
+	call calc_check_sum_start
+	store 1,mem_ir_notify_data_check_sum
+	arg mem_ir_notify_data,rega
+	branch queue_push
+
+car_ir_24g_receive_attack:
+	fetch 1,mem_car_24g_ir_receive_attack_count
+	increase 1,pdata
+	store 1,mem_car_24g_ir_receive_attack_count
+	div pdata,2
+	call wait_div_end
+	quotient temp
+	remainder pdata
+	nbranch car_ir_24g_receive_attack_blink,blank
+car_ir_24g_receive_attack_off:
+	fetch 1,mem_car_config_led_num
+	isub temp,null
+	call car_ir_24g_go_die,zero
+	arg mem_car_led_control,pdata
+	increase -1,temp
+	iadd temp,rega
+	arg 0,pdata
+	istore 1,rega
+	rtn
+car_ir_24g_receive_attack_blink:
+	arg mem_car_led_control,pdata
+	iadd temp,rega
+	arg 2,pdata
+	istore 1,rega
+	rtn
+car_ir_24g_go_die:
+	jam 1,mem_car_24g_go_die_flag
+	rtn
+car_ir_clk_get:
+	copy clkn_bt,pdata
+	store 4,mem_ir_receive_clkn
+	rtn
+car_ir_clk_check:
+	copy clkn_bt,pdata
+	fetcht 4,mem_ir_receive_clkn
+	isub temp,pdata
+	sub pdata,200,null
+	rtn
+
+car_ir_gpio_get_status:
+	fetcht 1,mem_ir_rx_gpio
+	branch gpio_get_bit
+
+car_led_control_receive:
+	fetch 8,mem_le_receive_payload
+	store 8,mem_car_led_control
+	rtn
+
+car_info_request:
+	fetch 1,mem_car_config_device_select
+	store 1,mem_car_info_request_payload
+	fetch 1,mem_car_config_motor_layout
+	store 1,mem_car_info_request_payload+1
+	fetch 1,mem_car_config_ir_enable
+	store 1,mem_car_info_request_payload+2
+	arg 13,loopcnt
+	arg mem_car_info_request_head,contr
+	call calc_check_sum_start
+	store 1,mem_car_info_request_checksum
+	arg mem_car_info_request,rega
+	branch queue_push
+    
+
+
+
+
+light_init:
+	call clear_eeprom_size_2k
+	jam 0x7a,mem_curr_packet_num
+	call light_load_controler_list
+	call light_init_crr_cmd_count
+	setarg light_pairing_timer
+	store 2,mem_cb_event_timer
+	arg 0,rega
+	branch pwm_init
+
+light_pairing_timer:
+	fetch 2,mem_light_pairing_timer
+	rtn blank
+	increase -1,pdata
+	store 2,mem_light_pairing_timer
+	rtnne 0
+	jam 0,mem_light_pairing_enable
+	rtn
+
+light_init_crr_cmd_count:
+	bpatch patch1a_6,mem_patch1a
+	fetch 1,mem_light_next_record
+	sub pdata,40,null
+	rtn positive
+	jam 0,mem_light_next_record
+	rtn
+
+light_load_controler_list:
+	arg mem_light_next_record,rega
+	arg 0,regb
+	arg 81,temp
+	branch iicd_read_eep_data
+
+//output user:group record find
+light_find_controler_pairing:
+	disable user
+	fetch 1,mem_light_cnum
+	copy pdata,loopcnt
+	
+	arg mem_light_clist,rega
+	copy regc,regb
+light_find_controler_pairing_loop:
+	bpatch patch1a_7,mem_patch1a
+	call light_compare_addr_record
+	branch enable_user,zero
+light_find_single_pairing_diff:
+	increase 4,rega
+	loop light_find_controler_pairing_loop
+	rtn
+
+//rega: regb:
+light_compare_addr_record:
+	bpatch patch1b_0,mem_patch1b
+	ifetch 3,rega
+	ifetcht 3,regb
+	isub temp,null
+	rtn
+//rega: regb:
+light_compare_single_record:
+	bpatch patch1b_1,mem_patch1b
+	ifetch 3,rega
+	ifetcht 3,regb
+	isub temp,null
+	nrtn zero
+	ifetch 1,contr
+	sub pdata,0,null //0 zero
+	rtn zero
+	add rega,3,contr
+	ifetcht 1,contr
+	isub temp,null
+	rtn
+
+//output:find single controler
+light_find_controler_cmd:
+	bpatch patch1b_2,mem_patch1b
+	disable user
+	fetch 1,mem_light_cnum
+	copy pdata,loopcnt
+	
+	arg mem_light_clist,rega
+	copy regc,regb
+light_find_controler_cmd_loop:
+	call light_compare_single_record
+	branch enable_user,zero
+	increase 4,rega
+	loop light_find_controler_cmd_loop
+	rtn
+
+//regc
+light_recv_adv:
+	fetch 1,mem_le_scanrsp_rcv
+	increase 1,pdata
+	store 1,mem_le_scanrsp_rcv
+	arg mem_le_rxbuf+12,regc
+
+light_anylize_command:
+	ifetch 2,regc
+	arg 0x55aa,temp
+	isub temp,null
+	nrtn zero
+	copy contr,regc
+	ifetcht 3,regc
+	setarg 0xffffff
+	isub temp,null
+	branch light_parse_cmd,zero
+	call light_find_controler_cmd
+	branch light_parse_cmd,user
+	rtn
+
+light_parse_cmd:
+	bpatch patch1b_3,mem_patch1b
+	increase 4,regc
+	ifetch 1,regc
+	fetcht 1,mem_curr_packet_num
+	isub temp,null
+	rtn zero
+	store 1,mem_curr_packet_num
+	fetch 1,mem_le_req_rcv
+	increase 1,pdata
+	store 1,mem_le_req_rcv
+	
+	increase 1,regc
+	ifetch 1,regc
+	store 1,mem_light_crr_cmd_count
+	copy pdata,loopcnt
+	rtn blank
+light_parse_cmd_loop:
+	ifetch 1,contr
+	beq LIGHT_CMD_PWM0,light_parse_cmd_pwm0
+	beq LIGHT_CMD_PWM1,light_parse_cmd_pwm1
+	beq LIGHT_CMD_PWM2,light_parse_cmd_pwm2
+	beq LIGHT_CMD_PWM3,light_parse_cmd_pwm3
+	beq LIGHT_CMD_PWM4,light_parse_cmd_pwm4
+	beq LIGHT_CMD_PWM5,light_parse_cmd_pwm5
+	beq LIGHT_CMD_AUTO_MODE,light_parse_auto_mode
+	beq LIGHT_CMD_PAIRING,light_parse_pairing
+	loop light_parse_cmd_loop
+	rtn
+
+light_parse_cmd_pwm0:
+	copy contr,regc
+	fetch 1,mem_light_pwm0
+	store 1,mem_pdatatemp
+	arg 0,temp
+light_parse_cmd_pwm_common:
+	storet 1,mem_pdatatemp+1
+	setarg 10000
+	store 3,mem_pdatatemp+2
+	ifetch 1,regc
+	store 1,mem_pdatatemp+5
+	call  pwm_out_set
+	and regc,1,contr
+	loop light_parse_cmd_loop
+	rtn
+light_parse_cmd_pwm1:
+	copy regc,contr
+	fetch 1,mem_light_pwm1
+	store 1,mem_pdatatemp
+	arg 1,temp
+	branch light_parse_cmd_pwm_common
+light_parse_cmd_pwm2:
+	copy regc,contr
+	fetch 1,mem_light_pwm2
+	store 1,mem_pdatatemp
+	arg 2,temp
+	branch light_parse_cmd_pwm_common
+light_parse_cmd_pwm3:
+	copy regc,contr
+	fetch 1,mem_light_pwm3
+	store 1,mem_pdatatemp
+	arg 3,temp
+	branch light_parse_cmd_pwm_common
+light_parse_cmd_pwm4:
+	copy regc,contr
+	fetch 1,mem_light_pwm4
+	store 1,mem_pdatatemp
+	arg 4,temp
+	branch light_parse_cmd_pwm_common
+light_parse_cmd_pwm5:
+	copy regc,contr
+	fetch 1,mem_light_pwm5
+	store 1,mem_pdatatemp
+	arg 5,temp
+	branch light_parse_cmd_pwm_common
+
+light_parse_auto_mode:
+	ifetch 1,contr
+	rtn
+
+light_parse_pairing:
+	copy contr,regc
+	fetch 1,mem_light_pairing_enable
+	bne 1,light_parse_pairing_abandon
+	call update_controler_list
+light_parse_pairing_abandon:
+	and regc,4,contr
+	rtn
+update_controler_list:
+	bpatch patch1b_4,mem_patch1b
+	call light_find_controler_pairing
+	branch update_conrtoler_list_found,user
+	fetch 1,mem_light_next_record
+	copy pdata,temp
+	increase 1,pdata
+	store 1,mem_light_next_record
+	call light_init_crr_cmd_count
+	lshift2 temp,temp
+	setarg mem_light_clist
+	iadd temp,contw
+	ifetch 4,regc
+	istore 4,contw
+	branch update_conrtoler_store_list
+update_conrtoler_list_found:
+	add regc,3,contr
+	ifetch 1,contr
+	rtn blank
+	ifetch 4,regc
+	istore 4,rega
+update_conrtoler_store_list:
+	arg mem_light_next_record,rega
+	arg 0,regb
+	arg 81,temp
+	branch iicd_write_eep_data
+
+
+
+lightc_init:
+	//key scan init
+
+	//gpio init
+	fetcht 1,mem_lightc_led_gpio
+	call gpio_out_inactive
+	rtn
+
+
+lightc_dispatch:
+	//key scan 
+	
+	fetcht 1,mem_lightc_led_gpio
+	call gpio_out_active
+
+
+	fetcht 1,mem_lightc_led_gpio
+	call gpio_out_inactive
+
+	//
+	call lightc_start_adv
+
+	fetch 1,mem_adv_time
+	nrtn blank
+	//sleep 
+	call lpm_write_gpio_wakeup
+	hfetch 4,core_lpm_ctrl
+	set0 15,pdata						/* lowest lpo */
+	hstore 4,core_lpm_reg
+	call lpm_write_ctrl
+	arg param_hibernate_clks,temp
+	branch lpm_sleep
+
+lightc_adv:
+	fetch 1,mem_adv_time
+	branch le_adv_loop_tx,blank
+	increase -1,pdata
+	store 1,mem_adv_time
+	branch le_adv_loop_tx
+
+lightc_start_adv:
+	mul32 pdata,20,pdata
+	arg mem_cmd0_string,contr
+	iadd contr,contr
+	ifetch 1,contr
+	rtn blank
+	copy pdata,rega
+	copy rega,loopcnt
+	arg mem_le_adv_data+2,contw
+	call memcpy
+	copy rega,pdata
+	increase 2,pdata
+	store 1,mem_le_adv_data_len
+	rtn
+
+
+
+
+
+
+module_init:
+	
+	rtn wake
+	call le_modified_name
+	call adc_init_data
+	setarg module_process_idle
+	store 2,mem_cb_idle_process
+	setarg module_bt_conn_process
+	store 2,mem_cb_bt_process
+	setarg module_process_bb_event
+	store 2,mem_cb_bb_event_process
+	setarg module_le_conn_process
+	store 2,mem_cb_le_process
+	setarg module_lpm_lock
+	store 2,mem_cb_check_wakelock
+	setarg module_hci_cmd_transmit_le_notify
+	store 2,mem_cb_ble_transmit
+	setarg module_hci_event_receive_spp_data
+	store 2,mem_cb_receive_spp_data
+	setarg module_le_receive_data
+	store 2,mem_cb_att_write
+	setarg module_bb_event_timer
+	store 2,mem_cb_event_timer
+
+	call module_spp_clear_last_transmite_clock
+	bpatch patch1b_5,mem_patch1b
+	call module_lpm_uart_init
+	call module_gpio_init
+	call check_module_disabled
+	branch module_hci_event_enter_standby_mode
+
+
+module_lpm_uart_init:
+	fetch 4,mem_module_uart_rx_buffer
+	hstore 4,core_uart_rsaddr
+
+	fetch 4,mem_module_uart_tx_buffer
+	hstore 4,core_uart_tsaddr
+
+	hfetch 1,core_gpio_sel1
+	or_into 0x04,pdata
+	and_into 0xfc,pdata
+	hstore 1,core_gpio_sel1
+	jam 0x00,core_uart_ctrl
+
+	fetch 2,mem_module_uart_rx_buffer
+	hstore 2,core_uart_rrptr
+	fetch 2,mem_module_uart_tx_buffer
+	hstore 2,core_uart_twptr
+	hstore 2,core_uart_trptrp
+
+	hfetch 4,core_gpio_pu0
+	set1 7,pdata
+	hstore 4,core_gpio_pu0
+	
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_UART,pdata
+	hstore 2,core_clkoff
+	call uart_set_baud_by_mem
+	jam uartclk_crystal,core_uart_clksel
+	jam uart_ctrl_h4,core_uart_ctrl
+
+	fetch 1,mem_module_flag
+	isolate1 MODULE_FLAG_UART_FLOW_CONTROL,pdata
+	hfetcht 1,core_uart_ctrl
+	setflag true,4,temp
+	hstoret 1,core_uart_ctrl
+	rtn
+	
+
+
+module_lpm_init:
+	call module_spp_clear_last_transmite_clock
+	branch module_lpm_uart_init
+//	branch module_gpio_init
+	
+module_gpio_init:
+	//module state pin
+//	call ui_led_init	
+//	call app_led_start_blink
+	//module conn state pin
+	fetcht 1,mem_module_connect_state_gpio
+	call gpio_config_output
+	call module_set_conn_pin_low
+	
+	fetcht 1,mem_module_wake_up_gpio
+	branch gpio_config_input
+
+module_lpm_lock:
+	fetcht 1,mem_module_wake_up_gpio
+	call gpio_get_bit
+	nbranch app_put_lpm_wake_lock,true
+	branch app_get_lpm_wake_lock
+
+	
+module_le_conn_process:
+	rtn
+
+module_bt_conn_process:
+	call module_spp_enter_sniff
+	branch module_control_air_flow
+
+module_spp_enter_sniff:
+	fetch 1,mem_ui_state_map
+	bbit0 UI_STATE_BT_SPP_CONN,module_spp_clear_last_transmite_clock
+	bpatch patch1b_6,mem_patch1b
+	setarg 0x3eff
+	fetcht 4,mem_last_transmite_clock
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_SNIFF,module_spp_clear_last_transmite_clock
+	fetch 1,mem_module_flag
+	rtnbit1 MOUDLE_TASK_SNIFF
+	call module_set_sniff_task_flag
+	call app_bt_enter_sniff
+module_spp_clear_last_transmite_clock:
+	copy clkn_bt,pdata
+	store 4,mem_last_transmite_clock
+	rtn
+	
+
+module_process_idle:
+	call module_control_air_flow
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	branch module_process
+
+	
+module_process_bb_event:
+	copy regc,pdata
+	beq BT_EVT_BB_CONNECTED,module_process_bb_conn
+	beq BT_EVT_BB_DISCONNECTED,module_process_bb_event_disconned
+	beq BT_EVT_RECONN_FAILED,module_process_reconn_fail
+	beq BT_EVT_SETUP_COMPLETE,module_process_setup_complete
+	beq BT_EVT_SPP_CONNECTED,module_process_spp_connected
+	beq BT_EVT_SPP_DISCONNECTED,module_process_spp_disconnected
+	beq BT_EVT_PINCODE_REQ,module_process_evt_pincode_req
+	beq BT_EVT_ENTER_SNIFF,module_process_enter_sniff
+	beq BT_EVT_EXIT_SNIFF,module_process_exit_sniff
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,module_process_page_time_out
+	beq BT_EVT_LE_CONNECTED,module_process_le_conn
+	beq BT_EVT_LE_DISCONNECTED,module_process_bb_even_le_disconn
+	beq BT_EVT_SNIFF_NOT_ACCEPT,module_process_sniff_not_accept
+	beq BT_EVT_UNSNIFF_ACCEPT,module_process_unsniff_accept
+	beq BT_EVT_UNSNIFF_NOT_ACCEPT,module_process_unsniff_not_accept
+	beq BT_EVT_LE_PAIRING_FAIL,module_hci_event_le_pairing_fail
+	beq BT_EVT_LE_PAIRING_SUCCESS,module_hci_event_le_pairing_success
+	beq BT_EVT_LE_START_ENC,module_hci_event_start_enc
+	beq BT_EVT_LE_PAUSE_ENC,module_hci_event_pause_enc
+	beq BT_EVT_LE_TK_GENERATE,module_hci_event_le_tk
+	beq BT_EVT_BT_GKEY_GENERATE,module_hci_event_gkey_generate
+	beq BT_EVT_BT_GET_PASSKEY,module_hci_event_passkey_entry_mode
+	beq BT_EVT_BT_PAIRING_FAIL,module_hci_event_bt_pairing_fail	
+	beq BT_EVT_BT_PAIRING_SUCCESS,module_hci_event_bt_pairing_success
+	beq BT_EVT_LE_GKEY_GENERATE,module_hci_event_le_gkey
+	beq BT_EVT_STORE_NVRAM,module_hci_event_store_device
+	beq BT_EVT_LE_LTK_LOST,module_process_ble_ltk_lost
+	rtn
+
+	
+module_process_bb_event_disconned:
+	call module_spp_clear_last_transmite_clock
+	fetch 1,mem_flag_pairing_state
+	ncall module_hci_event_bt_pairing_fail,blank
+	call module_disconn_start
+	fetch 2,mem_ui_state_map
+	rtnbit0 UI_STATE_BT_SPP_CONN
+	branch  module_spp_disconnected
+
+module_process_spp_connected:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_SPP_CONN,pdata
+	store 2,mem_ui_state_map
+	fetch 1,mem_module_spp_lpm_mult
+	store 1,mem_lpm_mult
+	call module_set_conn_pin_low
+	branch module_hci_event_spp_connect
+
+module_process_spp_disconnected:
+//	branch module_spp_disconnected
+module_spp_disconnected:
+	fetch 2,mem_ui_state_map
+	rtnbit0 UI_STATE_BT_SPP_CONN
+	set0 UI_STATE_BT_SPP_CONN ,pdata
+	store 2,mem_ui_state_map
+	branch module_hci_event_spp_disconnect
+
+
+module_process_enter_sniff:
+
+module_sniff_param_check:
+	call module_spp_clear_last_transmite_clock
+	//fetch 1,mem_context
+	//rtnbit0 state_insniff
+	fetch 2,mem_context+coffset_tsniff
+	rshift pdata,pdata
+	fetcht 2,mem_sniff_param_interval
+	isub temp,null
+	nbranch module_sniff_param_check_unsniff,zero
+	branch app_lpm_mult_enable
+module_sniff_param_check_unsniff:
+	fetch 1,mem_module_flag
+	rtnbit1 MOUDLE_TASK_UNSNIFF
+	hfetch 2,core_uart_rxitems    //*
+	ncall module_set_unsniff_task_flag,blank    //*加这两句话
+	branch app_bt_sniff_exit
+
+module_process_exit_sniff:
+	call module_clear_sniff_task_flag
+	branch app_lpm_mult_disable
+ 	
+module_process_setup_complete:
+	call module_spp_clear_last_transmite_clock
+	branch module_conn_start
+	
+module_process_bb_even_le_disconn:
+	call le_clr_config_more_data
+	call module_disconn_start
+	branch module_hci_event_le_disconnect
+
+module_process_evt_pincode_req:
+	branch  app_bt_set_pincode
+	
+
+module_process_sniff_not_accept:
+	branch module_clear_sniff_task_flag
+
+
+module_process_unsniff_accept:
+	fetch 1,mem_module_flag
+	bbit0 MOUDLE_TASK_UNSNIFF,app_bt_enter_sniff
+	branch module_clear_unsniff_task_flag
+
+	
+module_process_unsniff_not_accept:
+	branch module_clear_unsniff_task_flag
+
+	
+module_process_le_conn:
+	call le_send_att_exchange_mtu_requset
+	call module_conn_start
+	fetch 1,mem_module_le_lpm_mult
+	store 1,mem_lpm_mult
+	branch module_hci_event_le_connect
+
+
+module_process_bb_conn:
+	jam 0,mem_flag_mode_ssp_pin
+	call module_clear_sniff_task_flag
+	branch module_clear_unsniff_task_flag
+
+module_process_page_time_out:
+module_process_reconn_fail:
+module_disconn_start:
+	call module_start_adv_discovery_by_command
+	branch module_set_conn_pin_high
+
+
+module_process_ble_ltk_lost:
+	call le_send_reject_ind
+	branch le_send_smp_security_request
+
+
+module_set_conn_pin_high:
+	fetcht 1,mem_module_connect_state_gpio
+	branch gpio_out_active
+
+module_conn_start:
+	call module_stop_adv_discovery
+	branch module_set_conn_pin_low
+	
+module_stop_adv_discovery:
+	fetch 1,mem_module_state
+	isolate1 MOUDLE_STATE_BT_BIT,pdata
+	call app_bt_stop_discovery,true
+	fetch 1,mem_module_state
+	isolate1 MOUDLE_STATE_BLE_BIT,pdata
+	call app_ble_stop_adv,true
+	rtn
+module_set_conn_pin_low:
+	fetcht 1,mem_module_connect_state_gpio
+	branch gpio_out_inactive
+
+module_process_with_credit:
+	fetch 1,mem_credit_flag
+	rtneq CREDIT_DISABLE
+	branch rfcomm_send_uih_without_payload
+
+module_process:
+	hfetch 1,core_uart_status
+	bbit1 uart_status_rx_fifo_empty,module_process_with_credit  //rx no data
+	call uartd_prepare_rx
+	ifetch 1,contru
+	bne 0x01,module_hci_in_excp
+	hfetch 2,core_uart_rxitems
+	sub pdata,2,null
+	rtn positive
+	ifetch 1,contru
+	store 1,mem_module_uart_opcode
+	ifetcht 1,contru
+	copy contru,rega
+	storet 1,mem_module_uart_len
+	add temp,3,temp
+	hfetch 2,core_uart_rxitems
+	isub temp,temp
+	nrtn positive
+	jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	call module_hci_cmd_control
+	fetch 1,mem_module_temp_nl_discard_packet
+	rtneq HCI_NOT_DISCARD_PACKET
+	branch module_hci_dicard_packet //discard this packet
+
+module_hci_in_excp:
+	call delay_10ms
+	call module_hci_event_invalid_packet
+	branch module_hci_release_except
+
+
+module_hci_release_except:
+	bpatch patch1b_7,mem_patch1b
+	hfetch 2,core_uart_rxitems
+	rtn blank
+	call uartd_prepare_rx
+	ifetch 1,contru
+	sub pdata,0x01,null
+	ncall module_hci_dicard_bytes,zero
+	nbranch module_hci_release_except,zero
+	ifetch 1,contru
+	rtneq HCI_CMD_SPP_DATA_REQ
+	rtneq HCI_CMD_SET_CREDIT_GIVEN
+	increase -1,contru
+	call module_hci_dicard_bytes
+	branch module_hci_release_except
+
+module_hci_dicard_packet:
+	call uartd_prepare_rx
+	increase 2,contru
+	ifetch 1,contru
+	iadd contru,contru
+module_hci_dicard_bytes:
+	branch uartd_rxdone
+	
+/*********************HCI CONTROL*********************/
+module_hci_cmd_control:
+	bpatch patch1c_0,mem_patch1c
+	fetch 1,mem_module_uart_opcode
+	beq HCI_CMD_SET_BT_ADDR_REQ,module_hci_cmd_set_bt_addr
+	beq HCI_CMD_SET_LE_ADDR_REQ,module_hci_cmd_set_le_addr
+	beq HCI_CMD_SET_VISIBILITY_REQ,module_hci_cmd_set_visibility	
+	beq HCI_CMD_SET_BT_NAME_REQ,module_hci_cmd_set_bt_name
+	beq HCI_CMD_SET_LE_NAME_REQ,module_hci_cmd_set_le_name
+	beq HCI_CMD_SPP_DATA_REQ,module_hci_cmd_receive_spp_data
+	beq HCI_CMD_LE_DATA_REQ,module_hci_cmd_receive_le_data
+	beq HCI_CMD_STATUS_IRQ,module_hci_cmd_inquire_status
+	beq HCI_CMD_SET_PAIRING_REQ,module_hci_cmd_set_pairing_mode
+	beq HCI_CMD_SET_PINCODE_REQ,module_hci_cmd_set_pincode	
+	beq HCI_CMD_SET_UARTCONTROL_REQ,module_hci_cmd_set_uart_control_mode
+	beq HCI_CMD_SET_UART_BAUD_REQ,module_hci_cmd_set_uart_baud
+	beq HCI_CMD_VERSION_REQ,module_hci_cmd_version_request
+	beq HCI_CMD_BT_DISCONNECT,module_hci_cmd_bt_disconnect
+	beq HCI_CMD_BLE_DISCONNECT,module_hci_cmd_ble_disconnect
+	beq HCI_CMD_SET_NVRAM_REQ,module_hci_cmd_set_nvram
+	beq HCI_CMD_CONFIRM_GKEY,module_hci_cmd_confirm_gkey
+	beq HCI_CMD_SET_CREDIT_GIVEN,module_hci_cmd_set_credit_given
+	beq HCI_CMD_AUTO_ADV_SCAN,module_hci_cmd_auto_adv
+	beq HCI_CMD_POWER_REQ,module_hci_cmd_power_request
+	beq HCI_CMD_POWER_SET,module_hci_cmd_power_set
+	beq HCI_CMD_PASSKEY_ENTRY,module_hci_cmd_passkey_entry
+	beq HCI_CMD_SET_GPIO,module_hci_cmd_set_gpio
+	beq HCI_CMD_READ_GPIO,module_hci_cmd_read_gpio
+	beq HCI_CMD_LE_SET_PAIRING,module_hci_cmd_le_set_pairing_mode
+	beq HCI_CMD_LE_SET_ADV_DATA,module_hci_cmd_le_set_adv_data
+	beq HCI_CMD_LE_SET_SCAN_DATA,module_hci_cmd_le_set_scan_data
+	beq HCI_CMD_LE_SEND_CONN_UPDATE_REQ,module_hci_cmd_le_send_conn_update_req
+	beq HCI_CMD_LE_SET_ADV_PARM,module_hci_cmd_set_le_adv_parameter
+	beq HCI_CMD_LE_START_PAIRING,module_hci_cmd_le_start_pairing
+	beq HCI_CMD_SET_WAKE_GPIO,module_hci_cmd_set_wake_gpio
+	beq HCI_CMD_SET_TX_POWER,module_hci_cmd_set_tx_power
+	beq HCI_CMD_LE_CONFIRM_GKEY,module_hci_cmd_le_confirm_gkey
+	beq HCI_CMD_REJECT_JUSTWORK,module_hci_cmd_set_reject_justwork_flag
+	beq HCI_CMD_RESET_CHIP_REQ,module_hci_cmd_reset_chip
+	beq HCI_CMD_LE_SET_FIXED_PASSKEY,module_hci_cmd_le_set_fixed_passkey
+	beq HCI_TEST_CMD_CLOSE_LPM,module_hci_test_cmde_close_lpm
+	branch  module_hci_event_receive_invalid_cmd
+
+/*********************HCI COMMAND*********************/
+
+//command opcode 0x00
+module_hci_cmd_set_bt_addr:
+	fetch 1,mem_module_uart_len
+	bne 6,module_hci_event_receive_invalid_cmd
+	ifetch 6,contru
+	store 6,mem_lap
+	branch module_hci_event_receive_valid_cmd
+
+//command opcode 0x01
+module_hci_cmd_set_le_addr:
+	fetch 1,mem_module_uart_len
+	bne 6,module_hci_event_receive_invalid_cmd
+	ifetch 6,contru
+	store 6,mem_le_lap
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x02
+module_hci_cmd_set_visibility:
+	fetch 1,mem_module_uart_len
+	bne 1,module_hci_event_receive_invalid_cmd
+	copy rega,contru
+	call module_hci_event_receive_valid_cmd
+	ifetcht 1,contru
+	storet 1,mem_module_bluetooth_stauts_by_command
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	rtnbit1 UI_STATE_BT_CONNECTED
+module_start_adv_discovery_by_command:
+	fetch 1,mem_module_state
+	isolate1 MOUDLE_STATE_BT_BIT,pdata
+	nbranch moudle_start_adv_by_command,true
+	fetcht 1,mem_module_bluetooth_stauts_by_command
+	and temp,0x03,pdata
+	store 1,mem_scan_mode
+moudle_start_adv_by_command:
+	fetch 1,mem_module_state
+	isolate1 MOUDLE_STATE_BLE_BIT,pdata
+	nrtn true
+	fetcht 1,mem_module_bluetooth_stauts_by_command
+	isolate1 2,temp
+	branch app_ble_start_adv,true
+	branch app_ble_stop_adv
+
+
+//command opcode 0x03
+module_hci_cmd_set_bt_name:
+	fetch 1,mem_module_uart_len
+	sub pdata,67,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_local_name_length
+	arg 8,loopcnt
+	call memset0
+	fetch 1,mem_module_uart_len
+	copy pdata,loopcnt
+	copy rega,contru
+	arg mem_local_name,contw
+	call uart_copy_rx_bytes_fast
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x04
+module_hci_cmd_set_le_name:
+	fetch 1,mem_module_uart_len
+	sub pdata,29,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_le_name_len
+	copy pdata,loopcnt
+	copy rega,contru
+	arg mem_le_name,contw
+	call uart_copy_rx_bytes_fast
+	call le_modified_name
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x05
+module_hci_cmd_receive_spp_data:
+	fetch 1,mem_ui_state_map
+	bbit0 UI_STATE_BT_SPP_CONN,module_hci_event_receive_invalid_cmd
+	call app_check_sniff
+	branch module_hci_cmd_spp_exit_sniff,true
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+//	call p_nl_clear_last_transmite_clock
+	call module_spp_clear_last_transmite_clock
+	fetch 1,mem_remote_credits
+	rtn blank
+	fetch 2,mem_nl_rx_len_all
+	bne 0,module_hci_cmd_pass_init_ng_rx_len_all
+	fetch 1,mem_module_uart_len
+	store 2,mem_nl_rx_len_all
+
+	copy rega,contru
+//	ifetch 2,contru
+//	store 2,mem_nl_rx_handle
+	copy contru,pdata
+	store 2,mem_nl_rx_data_src
+module_hci_cmd_pass_init_ng_rx_len_all:
+	call module_hci_cmd_get_current_packet_len_and_remain_len
+	branch spp_tx_rfcomm_packet
+	
+module_hci_cmd_spp_exit_sniff:
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	branch module_exit_sniff
+
+module_hci_cmd_get_current_packet_len_and_remain_len:
+	call module_hci_cmd_get_current_patcket_len
+	fetch 2,mem_nl_rx_len_all
+	fetcht 2,mem_current_packet_length
+	isub temp,pdata
+	store 2,mem_nl_rx_len_all
+	rtn
+
+module_hci_cmd_get_current_patcket_len:
+	fetch 2,mem_nl_rx_len_all
+	arg DM_REFCOM_BUFF_LEN,temp
+	call not_greater_than
+	fetcht 2,mem_rfcomm_max_frame_size
+	call not_greater_than
+	fetcht 2,mem_pn_max_frame_size
+	call not_greater_than
+	store 2,mem_current_packet_length
+	rtn
+
+module_hci_command_tx_spp_tx_complete:
+	jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	jam HCI_CMD_SPP_DATA_REQ,mem_module_uart_opcode
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x09
+module_hci_cmd_receive_le_data:
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd
+	call module_check_ble_encrypt_state
+	branch module_hci_event_receive_invalid_cmd,user
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet 
+	fetch 1,mem_module_flag
+	bbit1 MODULE_FLAG_BLE_DATA_FINISH,module_hci_cmd_receive_le_data_finish
+	fetch 1,mem_module_hci_notify_len
+	nrtn blank
+	jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet 
+	ifetch 2,contru		//handle
+	store 2,mem_module_hci_notify_handle
+	copy contru,pdata
+	store 2,mem_module_hci_nofiy_addr
+	fetch 1,mem_module_uart_len
+	pincrease -2
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	branch module_hci_event_receive_invalid_cmd,zero
+	store 1,mem_module_hci_notify_len
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	call le_set_config_more_data
+	call module_hci_cmd_transmit_le_notify
+	call module_hci_cmd_transmit_le_notify
+	call module_hci_cmd_transmit_le_notify
+	fetch 1,mem_module_flag
+	rtnbit0 MODULE_FLAG_BLE_DATA_FINISH
+module_hci_cmd_receive_le_data_finish:
+	jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet 
+	call module_clear_le_tx_data_flag
+	branch module_hci_event_receive_valid_cmd
+
+module_hci_cmd_transmit_le_notify:
+	fetch 1,mem_module_hci_notify_len
+	rtn blank
+	call le_fifo_check_nearly_full
+	nrtn blank				//no fifo
+	call module_get_le_remote_mtu
+	bpatch patch1c_1,mem_patch1c
+	add temp,-3,pdata		//sub handle and opcode
+	fetcht 1,mem_module_hci_notify_len
+	call not_greater_than
+	copy pdata,rega
+	copy temp,pdata
+	isub rega,pdata
+	store 1,mem_module_hci_notify_len
+	fetcht 2,mem_module_hci_notify_handle
+	call le_att_malloc_tx_notify
+	fetch 2,mem_module_hci_nofiy_addr
+	copy pdata,contru
+	copy rega,loopcnt
+	call uart_copy_rx_bytes_fast
+	copy contru,pdata
+	store 2,mem_module_hci_nofiy_addr
+	fetch 1,mem_module_hci_notify_len
+	nrtn blank
+	branch module_set_le_tx_data_flag
+
+
+//output: temp is master mtu
+module_get_le_remote_mtu:
+	arg 0x17,temp
+	fetch 1,mem_module_flag
+	rtnbit1 MODULE_FLAG_BLE_SEND_MTU23
+	fetcht 2,mem_le_remote_mtu
+	rtn
+
+module_check_ble_encrypt_state:
+	fetch 1,mem_module_flag
+	bbit1 MODULE_FLAG_BLE_DATA_ENCRYPT,le_check_encrypt_state
+	branch disable_user
+	
+
+//command opcode 0x0b
+module_hci_cmd_inquire_status:
+	branch module_hci_event_status_res
+
+
+//command opcode 0x0c
+module_hci_cmd_set_pairing_mode:
+	copy rega,contru
+	ifetch 1,contru
+	beq PAIRING_PINCODE,module_hci_pairing_pincode_mode
+	beq PAIRING_JUSTWORK,module_hci_pairing_just_work_mode
+	beq PAIRING_PASSKEY,module_hci_pairing_passkey
+	beq PAIRING_CONFIRM,module_hci_pairing_numeric_comparison
+	branch module_hci_event_receive_invalid_cmd
+module_hci_pairing_pincode_mode:
+	call ssp_disable
+	jam 0,mem_ssp_enable
+	branch module_hci_event_receive_valid_cmd
+module_hci_pairing_just_work_mode:
+	setarg SSP_MODE_JUST_WORK_IO_CAP_DATA
+module_hci_sspairing_mode:	
+	store 3,mem_sp_iocap_local
+	store 1,mem_ssp_mode_flag
+	call ssp_enable
+	jam 1,mem_ssp_enable
+	branch module_hci_event_receive_valid_cmd
+module_hci_pairing_passkey:
+	setarg SSP_MODE_PASSKEY_IO_CAP_DATA
+	branch module_hci_sspairing_mode
+
+module_hci_pairing_numeric_comparison:
+	setarg SSP_MODE_SSP_PIN_IO_CAP_DATA
+	branch module_hci_sspairing_mode
+
+//command opcode 0x0d
+module_hci_cmd_set_pincode:
+	fetch 1,mem_module_uart_len
+	sub pdata,16,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_pin_length
+	copy pdata,loopcnt
+	arg mem_pin,contw
+	call uart_copy_rx_bytes
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x0e
+module_hci_cmd_set_uart_control_mode:
+	copy rega,contru
+	ifetch 1,contru
+	hfetcht 1,core_uart_ctrl
+	nsetflag blank,4,temp
+	hstoret 1,core_uart_ctrl
+ 	branch module_hci_event_receive_valid_cmd
+
+ 	
+//command opcode 0x0f
+module_hci_cmd_set_uart_baud:
+	fetch 1,mem_module_uart_len
+	copy pdata,loopcnt
+	copy rega,contru
+	call string2dec_from_uart
+	setarg uart_clk_24
+	idiv temp
+	call wait_div_end
+	quotient pdata
+module_hci_cmd_set_uart_baud_ok:
+	store uart_baud_len,mem_baud
+	call module_hci_event_receive_valid_cmd
+	call wait_uarttx
+	branch uart_set_baud_by_mem
+
+
+//command opcode 0x10
+module_hci_cmd_version_request:
+	arg 2,rega
+	arg mem_soft_version_num,regb
+	arg 0,temp
+	branch module_hci_event_set_cmd
+module_hci_event_set_cmd_send_response:
+	store 2,mem_event_cmd_response_content
+	arg mem_event_cmd_response_content,regb
+	arg 0,temp
+	branch module_hci_event_set_cmd
+
+
+//command opcode 0x11
+module_hci_cmd_bt_disconnect:
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BT_CONNECTED,module_hci_event_receive_invalid_cmd
+module_hci_cmd_bt_disconnect_doing:
+	call module_hci_event_receive_valid_cmd
+	branch app_bt_disconnect
+
+	
+//command opcode 0x12
+module_hci_cmd_ble_disconnect:
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd
+module_hci_cmd_ble_disconnect_doing:
+	call module_hci_event_receive_valid_cmd
+	branch app_ble_disconnect
+
+
+
+
+//command opcode 0x26
+module_hci_cmd_set_nvram:
+	fetch 1,mem_module_uart_len
+	copy pdata,loopcnt
+	copy rega,contru
+	fetch 2,mem_nv_data_ptr
+	icopy contw
+	call uart_copy_rx_bytes_fast
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x28
+module_hci_cmd_confirm_gkey:
+	fetch 1,mem_ui_state_map
+	bbit0 UI_STATE_BT_CONNECTED,module_hci_event_receive_invalid_cmd	
+	ifetch 1,contru
+	fetcht 1,mem_flag_mode_ssp_pin
+	setflag blank,FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,temp
+	set1 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT ,temp
+	storet 1,mem_flag_mode_ssp_pin
+
+	call module_hci_event_receive_valid_cmd
+
+	fetch 1,mem_flag_mode_ssp_pin
+	bbit1 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT,module_hci_cmd_spp_number_comparison_result_is1
+	rtn
+
+dhkey_not_accept:
+	jam 0,mem_flag_mode_ssp_pin
+	jam BT_CMD_DHKEY_NOT_ACCEPT,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+
+module_hci_cmd_spp_number_comparison_result_is1:
+	bbit1 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,number_comparison_successed
+	branch dhkey_not_accept	
+
+
+//command opcode 0x29
+module_hci_cmd_set_credit_given:
+	fetch 1,mem_ui_state_map
+	rtnbit0 UI_STATE_BT_SPP_CONN
+	fetch 1,mem_credit_flag
+	rtneq CREDIT_DISABLE
+	ifetch 1,contru
+	fetcht 1,mem_credit_given
+	iadd temp,temp
+	storet 1,mem_credit_given
+	rtn
+
+	
+//command opcode 0x2a
+module_hci_cmd_auto_adv:
+	arg 0x40,loopcnt
+	arg mem_le_adv_data_len,contw
+	call clear_mem
+	setarg 0
+	store 1,mem_regb
+	copy rega,contru
+module_hci_cmd_auto_adv_loop:
+	copy contru,pdata
+	store 2,mem_regc
+	call module_hci_cmd_auto_adv_adv_analys
+
+	fetch 1,mem_regb
+	fetcht 1,mem_temp
+	increase 1,temp
+	iadd temp,pdata
+	store 1,mem_regb
+
+	sub pdata,31,null
+	nbranch module_hci_cmd_auto_adv_store_scan,positive
+module_hci_cmd_auto_adv_store_adv:
+	fetcht 1,mem_le_adv_data_len
+	setarg mem_le_adv_data
+	iadd temp,pdata
+	store 2,mem_contw
+	fetcht 1,mem_temp
+	increase 1,temp
+	fetch 1,mem_le_adv_data_len
+	iadd temp,pdata
+	store 1,mem_le_adv_data_len
+	branch module_hci_cmd_auto_adv_store_common
+module_hci_cmd_auto_adv_store_scan:
+	fetcht 1,mem_le_scan_data_len
+	setarg mem_le_scan_data
+	iadd temp,pdata
+	store 2,mem_contw
+	fetcht 1,mem_temp
+	increase 1,temp
+	fetch 1,mem_le_scan_data_len
+	iadd temp,pdata
+	store 1,mem_le_scan_data_len
+module_hci_cmd_auto_adv_store_common:
+	fetch 2,mem_contw
+	copy pdata,contw
+	fetch 2,mem_regc
+	copy pdata,contru
+
+	copy temp,loopcnt
+	call uart_copy_rx_bytes_fast
+
+	fetch 1,mem_module_uart_len
+	fetcht 1,mem_regb
+	isub temp,null
+	nbranch  module_hci_cmd_auto_adv_loop,zero
+	branch module_hci_event_receive_valid_cmd
+
+//block of adv len in mem_temp
+module_hci_cmd_auto_adv_adv_analys:
+	ifetch 1,contru
+	store 1,mem_temp
+	ifetch 1,contru
+	store 1,mem_rega
+	rtn
+
+
+//command opcode 0x2b
+module_hci_cmd_power_request:
+	arg 0,temp
+	arg 2,rega
+	fetch 2,mem_module_vdd_quotient
+	store 2,mem_event_cmd_response_content
+	arg mem_event_cmd_response_content,regb
+	branch module_hci_event_set_cmd
+
+
+//command opcode 0x2c
+module_hci_cmd_power_set:
+	fetch 1,mem_module_uart_len
+	bne 1,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	store 1,mem_module_read_vdd_flag
+	setarg 0x00
+	store 2,mem_module_vdd_quotient
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x30
+module_hci_cmd_passkey_entry:
+	ifetch 4,contru
+	store 4,mem_pin
+	jam 4,mem_pin_length
+	jam 0,mem_authentication_passkey_times
+	call module_hci_event_receive_valid_cmd
+	branch authentication_passkey
+
+
+//command opcode 0x31
+module_hci_cmd_set_gpio:
+	fetch 1,mem_module_uart_len
+	bne 3,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	beq HCI_CMD_CONFIG_GPIO_INPUT,module_set_gpio_input
+	beq HCI_CMD_CONFIG_GPIO_OUTPUT,module_set_gpio_output
+	branch module_hci_event_receive_invalid_cmd
+
+module_set_gpio_input:
+	ifetcht 1,contru
+	ifetch 1,contru
+	beq GPIO_INPUT_HIGH_IMPEDANCE,module_set_gpio_high_impedance
+	nsetflag blank,7,temp
+	call gpio_config_input
+	branch module_hci_event_receive_valid_cmd
+
+module_set_gpio_high_impedance:
+	call gpio_set_high_impedance
+	branch module_hci_event_receive_valid_cmd
+	
+module_set_gpio_output:
+	ifetcht 1,contru
+	call gpio_config_output0
+	ifetch 1,contru	
+	isolate1 0,pdata
+	call gpio_out_flag
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x32
+module_hci_cmd_read_gpio:
+	fetch 1,mem_module_uart_len
+	bne 1,module_hci_event_receive_invalid_cmd
+	ifetcht 1,contru
+	call gpio_get_bit
+	setarg 0x0
+	nsetflag true,0,pdata
+	arg 1,rega
+	branch module_hci_event_set_cmd_send_response
+
+
+//command opcode 0x33
+module_hci_cmd_le_set_pairing_mode:
+	copy rega,contru
+	ifetch 1,contru
+	copy pdata,temp
+	beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,module_le_set_pairing_mode_secure_justwork
+	beq LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC,module_le_set_pairing_mode_secure_numeric
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,module_le_set_pairing_mode_secure_passkey
+	store 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_NONE, module_le_set_no_pairing
+	beq LE_PAIRING_MODE_LAGACY_JUSTWORK,module_le_set_pairing_mode_lagacy_just_work
+	beq LE_PAIRING_MODE_LAGACY_PASSKEY,module_le_set_pairing_mode_lagacy_passkey
+	branch module_hci_event_receive_invalid_cmd
+		
+module_le_set_pairing_mode_secure_justwork:
+	fetch 1,mem_le_secure_connect_enable
+	branch module_hci_event_receive_invalid_cmd,blank
+	storet 1,mem_le_pairing_mode
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	branch module_le_set_noinputnooutput
+module_le_set_pairing_mode_secure_numeric:
+	fetch 1,mem_le_secure_connect_enable
+	branch module_hci_event_receive_invalid_cmd,blank
+	storet 1,mem_le_pairing_mode
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	jam FLAG_IOCAP_DISPLAYYESNO,mem_le_pres_iocap
+	branch module_hci_event_receive_valid_cmd	
+module_le_set_pairing_mode_secure_passkey:	
+	fetch 1,mem_le_secure_connect_enable
+	branch module_hci_event_receive_invalid_cmd,blank
+	storet 1,mem_le_pairing_mode
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	branch module_le_set_displayonly
+module_le_set_no_pairing:
+	jam FLAG_LE_NO_BONDING_NO_MITM,mem_le_pres_auth
+module_le_set_noinputnooutput:	
+	jam FLAG_IOCAP_NOINPUTNOOUTPUT,mem_le_pres_iocap
+	branch module_hci_event_receive_valid_cmd	
+module_le_set_pairing_mode_lagacy_just_work:
+	jam FLAG_LE_BONDING_MITM,mem_le_pres_auth
+	branch module_le_set_noinputnooutput
+module_le_set_pairing_mode_lagacy_passkey:
+	jam FLAG_LE_BONDING_MITM,mem_le_pres_auth
+module_le_set_displayonly:	
+	jam FLAG_IOCAP_DISPLAYONLY,mem_le_pres_iocap
+	branch module_hci_event_receive_valid_cmd	
+
+	
+//command opcode 0x34
+module_hci_cmd_le_set_adv_data:
+	fetch 1,mem_module_uart_len
+	sub pdata,31,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_le_adv_data_len
+	copy pdata,loopcnt
+	copy rega,contru
+	arg mem_le_adv_data,contw
+	call uart_copy_rx_bytes_fast
+	branch module_hci_event_receive_valid_cmd
+	
+
+//command opcode 0x35
+module_hci_cmd_le_set_scan_data:
+	fetch 1,mem_module_uart_len
+	sub pdata,31,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_le_scan_data_len
+	copy pdata,loopcnt
+	copy rega,contru
+	arg mem_le_scan_data,contw
+	call uart_copy_rx_bytes_fast	
+	branch module_hci_event_receive_valid_cmd	
+
+	
+//command opcode 0x36
+module_hci_cmd_le_send_conn_update_req:
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd
+	fetch 1,mem_module_uart_len
+	bne 0x08,module_hci_event_receive_invalid_cmd
+	copy rega,contru
+	ifetch 8,contru
+	store 8,mem_le_interval_min
+	jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp
+	call  ui_ipc_send_cmd
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x37
+module_hci_cmd_set_le_adv_parameter:
+	ifetch 2,contru
+	store 2,mem_le_adv_interval
+	branch module_hci_event_receive_valid_cmd
+	
+	
+//command opcode 0x38
+module_hci_cmd_le_start_pairing:
+	fetch 1,mem_le_pairing_mode
+	branch module_hci_event_receive_invalid_cmd,blank
+	fetch 1,mem_le_pairing_state
+	bne FLAG_LE_PAIRING_NULL,module_hci_event_receive_invalid_cmd
+	fetch 1,mem_le_enc_state
+	bne FLAG_LE_ENC_NULL,module_hci_event_receive_invalid_cmd
+	call check_51cmd_le_smp_sec_req
+	branch module_hci_event_receive_valid_cmd	
+
+
+//command opcode 0x40
+module_hci_cmd_set_wake_gpio:
+	fetch 1,mem_module_uart_len
+	bne 5,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	store 1,mem_module_mcu_wake_pin
+	ifetch 4,contru
+	store 4, mem_module_mcu_wake_delay_us
+	fetcht 1,mem_module_mcu_wake_pin
+	call gpio_config_output
+	call module_set_mcu_wake_pin_low
+	branch module_hci_event_receive_valid_cmd
+	
+
+//command opcode 0x42
+module_hci_cmd_set_tx_power:
+	fetch 1,mem_module_uart_len
+	bne 0x01,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	store 1,mem_tx_power
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x48
+module_hci_cmd_le_confirm_gkey:
+	ifetch 1,contru
+	beq 0x01,module_hci_cmd_le_confirm_gkey_fail
+	fetch 1,mem_le_secure_connect_state
+	beq LE_SC_STAT_SEND_PUBLIC_KEY,module_hci_cmd_le_confirm_gkey_ok
+	beq LE_SC_STAT_RECEIVE_DHKEY,module_hci_cmd_le_confirm_gkey_ok
+	beq LE_SC_STAT_WAIT_CONFIRM_GKEY,module_hci_cmd_le_confirm_gkey_ok
+	branch module_hci_event_receive_invalid_cmd		
+module_hci_cmd_le_confirm_gkey_ok:
+	jam FLAG_LE_SC_CONFRIM_GKEY_OK,mem_le_sc_confirm_gkey_flag
+	branch module_hci_event_receive_valid_cmd	
+	
+module_hci_cmd_le_confirm_gkey_fail:
+	call le_send_pairing_confirm_value_failed
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x49
+module_hci_cmd_set_reject_justwork_flag:
+	fetch 1,mem_module_uart_len
+	bne 0x01,module_hci_event_receive_invalid_cmd
+	call module_hci_event_receive_valid_cmd
+	ifetch 1,contru
+	branch classic_bt_clr_reject_justwork_flag,blank
+	branch classic_bt_set_reject_justwork_flag
+
+
+//command opcode 0x51
+module_hci_cmd_reset_chip:
+	call module_hci_event_receive_valid_cmd
+	call wait_uarttx
+	jam 0x01,core_reset // rest YC1021
+	branch loop
+
+
+//command opcode 0x61
+module_hci_cmd_le_set_fixed_passkey:
+	fetch 1,mem_module_uart_len
+	beq 0,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	branch module_hci_cmd_le_set_random_passkey,blank
+	fetch 1,mem_module_uart_len
+	bne 5,module_hci_event_receive_invalid_cmd
+	ifetch 4,contru
+	arg 1000000,temp
+	isub temp,null
+	branch module_hci_event_receive_invalid_cmd,positive
+	store 4,mem_le_tk
+	call le_set_config_fixed_tk
+	branch module_hci_event_receive_valid_cmd
+
+module_hci_cmd_le_set_random_passkey:
+	call le_clr_config_fixed_tk
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0xff
+module_hci_test_cmde_close_lpm:
+	jam 0,mem_lpm_mode
+	branch module_hci_event_receive_valid_cmd
+	
+
+/*********************HCI EVENT*********************/
+
+module_hci_event_receive_invalid_cmd:
+	arg 1,temp
+	arg 0,rega
+	branch module_hci_event_set_cmd
+
+
+module_hci_event_receive_valid_cmd:
+	arg 0,temp
+	arg 0,rega
+	branch module_hci_event_set_cmd
+
+
+//event opcode 0x00
+module_hci_event_spp_connect:
+	jam  HCI_EVENT_SPP_CONN_REP,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x02
+module_hci_event_le_connect:
+	jam  HCI_EVENT_LE_CONN_REP,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x03
+module_hci_event_spp_disconnect:
+	jam  HCI_EVENT_SPP_DIS_REP,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x05
+module_hci_event_le_disconnect:
+	jam  HCI_EVENT_LE_DIS_REP,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x06
+//input:
+//	temp: success 0; fail 1
+//	rega:Response Content length
+//	regb:Response Content address
+module_hci_event_set_cmd:
+	fetch 1,mem_module_uart_opcode
+	copy pdata,regc
+	jam  HCI_EVENT_CMD_RES,mem_module_uart_opcode
+	setarg 2
+	iadd rega,pdata
+	call module_hci_prepare_tx
+	copy regc,pdata
+	istore 1,contwu
+	istoret 1,contwu
+	copy rega,loopcnt
+	copy regb,contr
+	call uart_copy_tx_bytes
+	branch uartd_send
+
+
+//event opcode 0x07
+module_hci_event_receive_spp_data:
+//	call p_nl_clear_last_transmite_clock
+	call module_spp_clear_last_transmite_clock
+	jam HCI_EVENT_SPP_DATA_REP,mem_module_uart_opcode
+	fetch 1,mem_current_length
+	rtn blank
+	call module_hci_prepare_tx
+	fetch 1,mem_current_length
+	copy pdata,loopcnt
+	fetch 2,mem_rfcomm_uih_payload_ptr
+	copy pdata,contr
+	call uart_copy_tx_bytes_fast
+	branch uartd_send
+
+
+//event opcode 0x08
+module_hci_event_receive_le_data:
+	jam HCI_EVENT_LE_DATA_REP,mem_module_uart_opcode
+	fetch 1,mem_module_le_rx_data_len
+	icopy loopcnt
+	increase 2,pdata
+	call module_hci_prepare_tx
+	fetch 2,mem_module_le_rx_data_handle // Attribute handle
+	istore 2,contwu
+	fetch 2,mem_module_le_rx_data_address
+	icopy contr
+	call uart_copy_tx_bytes_fast
+	branch uartd_send
+
+
+//event opcode 0x09
+module_hci_event_enter_standby_mode:
+	jam HCI_EVENT_STANDBY_REP,mem_module_uart_opcode
+module_hci_event_enter_standby_mode_len0:
+	setarg 0
+	call module_hci_prepare_tx
+	branch uartd_send
+
+
+//event opcode 0x0a
+module_hci_event_status_res:
+	jam HCI_EVENT_STATUS_RES,mem_module_uart_opcode
+	setarg 1
+	call module_hci_prepare_tx
+	
+	call module_hci_read_bt_status
+	
+	fetch 2,mem_ui_state_map	
+	arg UI_STATE_BT_HID_CONN,queue
+	qisolate1 pdata
+	setflag true,3,temp
+
+	arg UI_STATE_BLE_CONNECTED,queue
+	qisolate1 pdata
+	setflag true,5,temp	
+	
+	fetch 1,mem_ui_state_map
+	arg UI_STATE_BT_SPP_CONN,queue
+	qisolate1 pdata
+	setflag true,4,temp	
+	
+	istoret 1,contwu
+	branch uartd_send
+
+//	temp: bit0 3.0 inquiry;bit1 3.0 scan;bit2 ble adv;
+
+module_hci_read_bt_status:
+	arg 0,temp
+	fetch 1,mem_scan_mode
+	arg inq_scan_mode,queue
+	qisolate1 pdata
+	setflag true,0,temp
+	arg page_scan_mode,queue
+	qisolate1 pdata
+	setflag true,1,temp	
+
+	fetch 1,mem_le_adv_enable
+	arg 0,queue
+	qisolate1 pdata
+	setflag true,2,temp	
+	rtn
+
+
+//event opcode 0x0d
+module_hci_event_store_device:
+	jam HCI_EVENT_NVRAM_REP,mem_module_uart_opcode
+	fetch 1,mem_nv_data_number
+	mul32 pdata,34,pdata
+	icopy loopcnt
+	call module_hci_prepare_tx
+	fetch 2,mem_nv_data_ptr
+	icopy contr
+	call uart_copy_tx_bytes_fast
+	branch uartd_send
+
+
+//event opcode 0x0e
+module_hci_event_gkey_generate:
+	jam HCI_EVENT_GKEY,mem_module_uart_opcode
+	setarg 4
+	call module_hci_prepare_tx
+	fetch 4,mem_gkey
+	istore 4,contwu
+	branch uartd_send
+
+
+//event opcode 0x0f
+module_hci_event_invalid_packet:
+	jam HCI_EVENT_INVALID_PACKET,mem_module_uart_opcode
+	hfetch 2,core_uart_rxitems
+	arg 0xff,temp
+	call not_greater_than
+	copy pdata,loopcnt
+	call module_hci_prepare_tx
+	call uartd_prepare_rx
+	call uart_copy_rx2tx
+	branch uartd_send
+
+
+//event opcode 0x10
+module_hci_event_passkey_entry_mode:
+	jam  HCI_EVENT_GET_PASSKEY,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x11
+module_hci_event_le_tk:
+	jam HCI_EVENT_LE_TK,mem_module_uart_opcode
+	setarg 4
+	call module_hci_prepare_tx
+	fetch 4,mem_le_tk
+	istore 4,contwu
+	branch uartd_send
+
+
+//event opcode 0x14
+module_hci_event_le_pairing_fail:
+	arg FLAG_BLE_PAIRING_FAIL,rega
+	branch module_hci_event_pairing_completed
+
+module_hci_event_le_pairing_success:
+	arg FLAG_BLE_PAIRING_SUCCESS,rega
+	branch module_hci_event_pairing_completed
+
+module_hci_event_bt_pairing_fail:
+	arg FLAG_BT_PAIRING_FAIL,rega
+	branch module_hci_event_pairing_completed
+
+module_hci_event_bt_pairing_success:
+	arg FLAG_BT_PAIRING_SUCCESS,rega
+
+module_hci_event_pairing_completed:
+	jam 0,mem_flag_mode_ssp_pin
+	jam HCI_EVENT_LE_PAIRING_STATE,mem_module_uart_opcode
+	setarg 2
+	call module_hci_prepare_tx
+	copy rega,pdata
+	istore 2,contwu
+	branch uartd_send
+
+
+//event opcode 0x15
+module_hci_event_pause_enc:
+	arg FLAG_EVENT_PAUSE_ENC,regc
+	branch module_hci_event_enc
+
+module_hci_event_start_enc:
+	arg FLAG_EVENT_START_ENC,regc
+
+module_hci_event_enc:
+	jam HCI_EVENT_LE_ENCRYPTION_STATE,mem_module_uart_opcode
+	setarg 1
+	call module_hci_prepare_tx
+	copy regc,pdata
+	istore 1,contwu
+	branch uartd_send
+
+
+//event opcode 0x1d
+module_hci_event_le_gkey:
+	jam HCI_EVENT_LE_GKEY,mem_module_uart_opcode
+	setarg 4
+	call module_hci_prepare_tx
+	fetch 4,mem_gkey
+	istore 4,contwu
+	branch uartd_send
+
+
+//****************************************************************//
+	//module_hci_prepare_tx
+	//function:write hci packet header
+	//input: pdata-----packet length  (1byte)
+	//input: mem_uart_opcode------opcode (1byte)
+	//output:contwu --- pointer to packet payload
+	//use reg: contwu,pdata
+//****************************************************************//	
+module_hci_prepare_tx:
+	jam 0x02,mem_module_uart_cmd
+	store 1,mem_module_uart_len
+	storet 8,mem_temp
+	bpatch patch1c_2,mem_patch1c
+	call module_set_mcu_wake_pin_high_delay
+	fetcht 8,mem_temp
+	call uartd_prepare_tx
+	fetch 3,mem_module_uart_cmd
+	istore 3,contwu
+	rtn
+
+
+module_set_mcu_wake_pin_high_delay:
+	call module_check_mcu_wake_pin_high
+	rtn true
+module_set_mcu_wake_pin_h_delay:
+	call module_set_mcu_wake_pin_high
+	fetch 4,mem_module_mcu_wake_delay_us
+	rshift2 pdata,pdata
+	rtn blank
+	branch delay
+
+module_set_mcu_wake_pin_high:
+	//call ice_break
+	fetcht 1,mem_module_mcu_wake_pin
+	branch gpio_out_active
+
+module_check_mcu_wake_pin_high:
+	fetcht 1,mem_module_mcu_wake_pin
+	branch gpio_check_active
+
+module_set_mcu_wake_pin_low:
+	fetcht 1,mem_module_mcu_wake_pin
+	branch gpio_out_inactive
+
+
+delay:
+	increase -1,pdata
+	nop 38
+	nbranch delay,blank
+	rtn
+
+/*********************hci command end*********************/
+
+/*********************hci ble receive data start*********************/
+
+//rega is le rx data address
+//regb is le rx data length
+//mem_le_att_handle is write handle
+module_le_receive_data:
+	call module_check_ble_encrypt_state
+	rtn user
+	copy rega,pdata
+	store 2,mem_module_le_rx_data_address
+	copy regb,pdata
+	store 1,mem_module_le_rx_data_len
+	fetch 2,mem_le_att_handle
+	fetcht 2,mem_module_data_write_handle
+	isub temp,null
+	branch module_le_receive_data_ok,zero
+	fetcht 2,mem_module_data_write_handle2
+	isub temp,null
+	nrtn zero
+module_le_receive_data_ok:	
+	store 2,mem_module_le_rx_data_handle
+	branch module_hci_event_receive_le_data
+
+
+/*********************hci ble receive data end*********************/
+
+module_exit_sniff:
+	fetch 1,mem_module_flag
+	rtnbit1 MOUDLE_TASK_UNSNIFF
+	call module_set_unsniff_task_flag	
+	branch app_bt_sniff_exit
+
+
+module_set_lpm_mult_2:
+	jam 2,mem_lpm_mult
+	rtn
+
+
+
+module_bb_event_timer:
+	branch module_read_vdd_timer
+
+module_read_vdd_timer:
+	fetch 1,mem_module_read_vdd_flag
+	rtn blank
+	fetch 1,mem_module_read_vdd_count
+	rtn blank
+	increase -1,pdata
+	store 1,mem_module_read_vdd_count
+	nrtn blank
+	jam FLAG_MODULE_READ_VDD_COUNT,mem_module_read_vdd_count
+	call adc_set_mode
+	call vdd_calculate_by_mode
+	div pdata,0x64
+	call wait_div_end
+	quotient pdata
+	remainder temp
+	store 1,mem_module_vdd_quotient
+	storet 1,mem_module_vdd_remainder
+	rtn	
+	
+
+module_control_air_flow:
+	call check_uart_tx_buff
+	branch app_l2cap_flow_control_enable,positive
+	branch app_l2cap_flow_control_disable
+
+
+/**************module state *******************/
+module_set_sniff_task_flag:
+	arg MOUDLE_TASK_SNIFF,queue
+	branch module_set_state
+
+module_clear_sniff_task_flag:
+	arg MOUDLE_TASK_SNIFF,queue
+	branch module_clr_state
+
+module_set_unsniff_task_flag:
+	arg MOUDLE_TASK_UNSNIFF,queue
+	branch module_set_state
+
+module_clear_unsniff_task_flag:
+	arg MOUDLE_TASK_UNSNIFF,queue
+	branch module_clr_state
+
+module_set_le_tx_data_flag:
+	arg MODULE_FLAG_BLE_DATA_FINISH,queue
+	branch module_set_state
+	
+module_clear_le_tx_data_flag:
+	arg MODULE_FLAG_BLE_DATA_FINISH,queue
+	branch module_clr_state
+
+module_clr_state:
+	fetch 1,mem_module_flag
+	qset0 pdata
+	store 1,mem_module_flag
+	rtn
+
+module_set_state:
+	fetch 1,mem_module_flag
+	qset1 pdata
+	store 1,mem_module_flag
+	rtn
+	
+/**************module state end*******************/
+
+
+
+
+//define FPGA_DEBUG
+
+
+mouse_init:
+	call mouse_setting_config
+	call spi_ncs_enable
+	call mouse_init_sunt
+	call mouse_dpi_config
+	call spi_ncs_disable
+	rtn wake
+	call mouse_cheak_enable_usb
+	call mouse_cb_fuction
+//	fetch 1,mem_wakup_from_power_flag
+//	isolate0 gpio_latch,pdata
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit1 MOUSE_ENABLE_USB
+	call mouse_wakeup_from_power//,true	// enter 
+	rtnmark1 mark_24g
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery
+	branch mouse_check_reconn_target
+
+
+mouse_delay_4s:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_INIT_DELAY
+	arg 20,loopcnt
+mouse_delay_20ms:
+	setarg 200000
+	call sleep
+	loop delay_10ms
+	rtn
+
+	
+mouse_cheak_enable_usb:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_USB
+	branch usb_init
+	
+
+mouse_cb_fuction:
+	setarg mouse_le
+	store 2,mem_cb_le_process
+	setarg mouse_send_process
+	store 2,mem_cb_bt_process
+	setarg mouse_process_lpm_before
+	store 2,mem_cb_before_lpm
+	setarg mouse_priority_bb_event
+	store 2,mem_cb_bb_event_process
+	setarg mouse_idle
+	store 2,mem_cb_idle_process
+	setarg mouse_before_hibernate
+	store 2,mem_cb_before_hibernate
+	setarg le_mouse_bb_event_connect_complete
+	store 2,mem_cb_att_write
+
+	call g24_head_ptr2regc
+	setarg mouse_g24_package_data
+	add regc,offset_24g_cb_data,contw
+	istore 2,contw
+	setarg mouse_g24_enter_lpm
+	add regc,offset_24g_cb_lpm_prepare,contw
+	istore 2,contw
+	setarg mouse_lpm_before_common
+	add regc,offset_24g_cb_lpm_before,contw
+	istore 2,contw
+	
+	setarg mouse_bb_event_timer
+	store 2,mem_cb_event_timer
+	setarg mouse_spi_write_flash_cb
+	store 2,mem_cb_spi_flash_write_complate
+	rtn
+mouse_spi_write_flash_cb:
+mouse_spi_init:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_SPI2,spid_init
+	branch spid_init2
+
+mouse_setting_config:
+	rtn wake
+	call g24_set_device_addr
+	call mouse_gpio_init
+	call mouse_param_init
+	call mouse_adc_init
+	call le_set_config_fixed_ltk
+	call le_set_justwork
+	call le_set_fixed_ltk
+	call le_set_config_read_authentication
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_EEPROM,mouse_init_iic
+	bbit1 MOUSE_ENABLE_FLASH,mouse_load_flash_info_cheak
+	rtn
+
+mouse_init_iic:
+	call iic_init_390k
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	isolate1 MOUSE_ENABLE_2K_EEPROM,pdata
+	ncall clear_eeprom_size_2k,true
+	call mouse_load_eeprom_dpi
+	call mouse_init_environment
+	call mouse_set_24g_addr_eeprom
+	branch iicd_read_eep_data
+
+mouse_wakeup_from_power:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_WAKEUP_FROM_POWER,mouse_wakeup_no_from_power
+	fetch 1,mem_wakup_from_power_flag
+	isolate0 gpio_latch,pdata
+	nrtn true
+mouse_wakeup_no_from_power:
+	fetch 1,mem_reconn_times_init
+	store 1,mem_reconn_times
+	fetch 1,mem_config_function_enable
+	rtnbit1 ENABLE_SELECT_DEVICE_BY_SWITCH
+mouse_start_24g_mode:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_24G
+	bbit1 MOUSE_ENABLE_AUTO_24G_PARING,g24_auto_pair_start
+	branch g24_check_51cmd_start_24g
+le_mouse_bb_event_connect_complete:
+	fetch 1,mem_le_att_handle
+	sub pdata,26,pdata
+	nrtn zero
+	jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp
+	call ui_ipc_send_cmd
+mouse_le_write_enable:	
+	arg WRITE_REQ_ENABLE_FLAG,queue
+	branch mouse_le_enable_connect_flag
+
+mouse_dpi_up:
+	fetch 1,mem_mouse_dpi_button_state
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_mouse_dpi_button_state
+	rtn
+mouse_dpi_config:
+	fetch 1,mem_config_sensor_motion
+	and pdata,0x0f,pdata
+	store 1,mem_mouse_dpi
+	branch mouse_seting_dpi+2
+
+
+mouse_dpi_cheak:
+	fetcht 1,mem_dpi_button_gpio
+	call gpio_get_bit
+	nbranch mouse_dpi_up,true
+mouse_dpi_down:
+	fetch 1,mem_mouse_dpi_button_state
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_mouse_dpi_button_state
+	fetch 1,mem_mouse_dpi
+	increase 1,pdata
+	and pdata,0x03,pdata
+	store 1,mem_mouse_dpi
+	call mouse_seting_dpi
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_EEPROM,mouse_store_eerpom_dpi
+	bbit1 MOUSE_ENABLE_FLASH,mouse_before_store_flash_cpi
+	rtn
+mouse_before_store_flash_cpi:
+	arg MOUSE_SPI2_CLK_GPIO,temp
+	call gpio_config_output				//hold high
+	arg MOUSE_SPI2_SDIO_GPIO,temp
+	call gpio_config_output 			//hold high 
+	branch mouse_store_flash_device_info
+
+mouse_seting_dpi:
+	bpatch patch1c_3,mem_patch1c
+	call mosue_dpi_led_blink_init
+	fetch 1,mem_config_sensor_type
+	beq P3610,mouse_seting_3610_dpi
+	beq P3212,mouse_seting_3212_dpi
+	fetch 1,mem_mouse_dpi
+	beq MOUSE_DPI_LEVEL1,mouse_set_cpi1
+	beq MOUSE_DPI_LEVEL2,mouse_set_cpi2
+	beq MOUSE_DPI_LEVEL3,mouse_set_cpi3
+	beq MOUSE_DPI_LEVEL4,mouse_set_cpi4
+mouse_set_cpi2:
+	fetch 1,mem_320x_dpi_2
+	branch mouse_p3205_dpi
+mouse_set_cpi1:
+	fetch 1,mem_320x_dpi_1
+	branch mouse_p3205_dpi
+mouse_set_cpi3:
+	fetch 1,mem_320x_dpi_3
+	branch mouse_p3205_dpi
+mouse_set_cpi4:
+	fetch 1,mem_320x_dpi_4
+	branch mouse_p3205_dpi
+moue_seting_cpi_count:
+	fetch 1,mem_config_sensor_type
+	rtneq P3065_XY
+	fetch 1 ,mem_mouse_cpi_count
+	increase 1,pdata
+	store 1,mem_mouse_cpi_count
+	rtn
+
+mouse_seting_3212_dpi:
+	fetch 1,mem_mouse_dpi
+	beq MOUSE_DPI_LEVEL1,mouse_set_p3212_cpi1
+	beq MOUSE_DPI_LEVEL2,mouse_set_p3212_cpi2
+	beq MOUSE_DPI_LEVEL3,mouse_set_p3212_cpi3
+	beq MOUSE_DPI_LEVEL4,mouse_set_p3212_cpi4
+mouse_set_p3212_cpi2:
+	fetch 1,mem_3212_dpi_2
+	branch mouse_p3212_dpi
+mouse_set_p3212_cpi1:
+	fetch 1,mem_3212_dpi_1
+	branch mouse_p3212_dpi
+mouse_set_p3212_cpi3:
+	fetch 1,mem_3212_dpi_3
+	branch mouse_p3212_dpi
+mouse_set_p3212_cpi4:
+	fetch 1,mem_3212_dpi_4
+mouse_p3212_dpi:
+	store 1,mem_mouse_cpi_count
+	lshift8 pdata,pdata
+	copy pdata,rega
+	add pdata,MOUSE_P3212_DPI_XADDRESS,pdata
+  	call twspi_write
+ 	copy rega,pdata
+  	add pdata,MOUSE_P3212_DPI_YADDRESS,pdata
+	branch twspi_write
+	
+mouse_seting_3610_dpi:
+	fetch 1,mem_mouse_dpi
+	beq MOUSE_DPI_LEVEL1,mouse_set_p3610_cpi1
+	beq MOUSE_DPI_LEVEL2,mouse_set_p3610_cpi2
+	beq MOUSE_DPI_LEVEL3,mouse_set_p3610_cpi3
+	beq MOUSE_DPI_LEVEL4,mouse_set_p3610_cpi4
+mouse_set_p3610_cpi2:
+	fetch 1,mem_3610_dpi_2
+	branch mouse_p3610_dpi
+mouse_set_p3610_cpi1:
+	fetch 1,mem_3610_dpi_1
+	branch mouse_p3610_dpi
+mouse_set_p3610_cpi3:
+	fetch 1,mem_3610_dpi_3
+	branch mouse_p3610_dpi
+mouse_set_p3610_cpi4:
+	fetch 1,mem_3610_dpi_4
+mouse_p3610_dpi:
+	store 1,mem_mouse_cpi_count
+	call mouse_spi_sdio_gpio_pollup
+	fetch 1,mem_mouse_cpi_count
+mouse_reset_p3610_dpi:
+	add pdata,0x80,pdata
+	lshift8 pdata,pdata
+	add pdata,MOUSE_P3610_DPI_ADDRESS,pdata
+	copy pdata,rega
+	branch mouse_set_sensor_reg
+	
+mouse_p3205_dpi:
+	store 1,mem_mouse_cpi_count
+	call moue_seting_cpi_count
+	fetch 1,mem_mouse_cpi_count
+	setarg MOUSE_DPI_ADDRESS
+	call twspi_read
+	and pdata,0xf8,temp
+	fetch 1,mem_mouse_cpi_count
+	iadd temp,pdata
+	lshift8 pdata,pdata
+	add pdata,MOUSE_DPI_ADDRESS,pdata
+	branch twspi_write
+	
+
+mouse_init_environment:
+	call app_initflag_check
+	branch mouse_eeprom_load_recon_info,zero
+	call mouse_ble_init_address
+	call mouse_store_eeprom_device_info
+	branch app_initflag_store
+
+
+mouse_24g_pairing_button:
+	fetch 2,mem_24g_pairing_timer_count
+	rtn blank
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_24G
+	rtnbit1 MOSUE_24G_PAIRING_FLAG
+	rtnmark1 mark_24g
+	call mouse_check_key_gpio
+	rtnne MOUSE_LMR_BUTTON
+	call mouse_devce_led_off
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	call mouse_enable_function_flag
+	setarg 0
+	store 2,mem_mouse_direct_timer
+	store 1,mem_mouse_send_blank_timer
+	call g24_set0_mem_check_dongle_times
+	
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_RECONNECT,mouse_cancel_reconnect
+	bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect
+	bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect
+	call mouse_stop_discovery
+	branch g24_start_pairing_sm1
+	
+
+mouse_idle:
+	call mouse_24g_pairing_button
+	call ui_check_paring_button
+	call mouse_dpi_cheak
+	call mouse_usb_isr
+	call mouse_wheel_check
+	branch mouse_usb_mode
+mouse_usb_isr:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_USB
+	call usb_isr	
+	branch usb_offline_state
+
+mouse_cheak_usb:
+	hfetch 1,core_usb_addr
+	bbit0 7,mouse_usb_no_exsit
+	bbit1 7,mouse_usb_exsit
+	rtn
+mouse_usb_no_exsit:
+	fetch 1,mem_usb_addr
+	rtnbit0 7
+	branch soft_reset_chip
+mouse_usb_exsit:
+	fetch 1,mem_usb_addr
+	rtnbit1 7
+	branch mouse_stop_bluetooth_mode
+	
+mouse_usb_mode:
+	call mouse_cheak_usb
+	hfetch 1,core_usb_addr
+	store 1,mem_usb_addr
+	rtnbit0 7
+	call mouse_clkn_check 
+	fetch 4,mem_btclk_sensor
+	fetcht 1,mem_wire_usb_interval
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	store 4,mem_btclk_sensor
+	call mouse_motion
+	nrtn user
+	jam 4,mem_usb_tx_enable
+	branch mouse_wired_to_usb
+
+mouse_clkn_check:
+	fetcht 4,mem_btclk_sensor
+	copy clkn_bt,pdata
+	isub temp,null
+	ncall mouse_clkn_timeout,positive
+	rtn
+mouse_clkn_timeout:
+	setarg 0
+	store 4,mem_btclk_sensor
+	rtn
+
+
+	
+mouse_wired_to_usb:
+	fetch 1,mem_usb_tx_enable
+	rtnbit0 2
+	branch mouse_data_push
+mouse_data_push:
+	hfetch 1,core_usb_addr
+	rtnbit0 7
+	jam USB_EP2_MS,mem_usb_ep2_data
+	setarg MS_REPORT_ID
+	store 1,mem_usb_mouse_data	
+	fetch 7,mem_mouse_key
+	istore 7,contw
+	rtn
+
+
+mouse_enable_clock_qdecoder:
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_QDECODER,pdata
+	hstore 2,core_clkoff
+	rtn
+
+mouse_param_init:
+	setarg 0x8c00				//bt sdp start address
+	store 2,mem_ui_uuid_table
+	setarg 0x8e7a				//ble attlist start address
+	store 2,mem_ui_le_uuid_table
+	setarg 0x2402
+	store 2,mem_fcomp_mul
+	setarg 0x2580
+	store 3,mem_class
+	jam 3,mem_lpm_mult_timeout
+	jam 8,mem_lpm_overhead
+	jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue
+	setarg 0x0200
+	store 2,mem_lpm_interval
+	jam 0x17,mem_le_local_mtu
+	jam 0x17,mem_le_remote_mtu
+//===========init spi param==============================
+	setarg 0x0a77
+	store 2,mem_spi_init_clk
+//===========default bt reconnect address===================	
+//	jam 1,mem_device_flag
+//	setarg 0x332211
+//	store 3,mem_device1_addr
+//	store 3,mem_device2_addr
+//	store 3,mem_device3_addr
+//	setarg 0x665544
+//	store 3,mem_device1_addr+3
+//	store 3,mem_device2_addr+3
+//	store 3,mem_device3_addr+3
+//	setarg 0x34
+//	store 1,mem_device1_type
+//	store 1,mem_device2_type
+//	store 1,mem_device3_type
+//===========all 16bit uuid==================================
+	setsect 0,0x306
+	setsect 1,0x4440
+	setsect 2,0x10000
+	setsect 3,0x4408
+	store 9,mem_all_uuid_16bits
+	setsect 0,0x1224
+	setsect 1,0x4000
+	setsect 2,0x0
+	istore 5,contw
+//===========features=====================================
+	setsect 0,0x3ffff
+	setsect 1,0x2fe23
+	setsect 2,0x199d9
+	setsect 3,0x20d
+	store 8,mem_features
+//======================================================	
+	setarg 0x012c  				//24g ban pairing timer init
+	store 2,mem_24g_pairing_timer_count
+	call le_modified_name
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag 
+	rtnbit0 MOUSE_ENABLE_GPIO_CONTROL_ADC_SENSOR
+	call mouse_sensor_set_angle
+	branch mouse_select_adc
+
+mouse_sensor_set_angle:
+	fetcht 1,mem_select_sensor_angle_gpio
+	call gpio_config_input
+	fetcht 1,mem_select_sensor_angle_gpio
+	call gpio_get_bit
+	jam MOUSE_3CLK_ANGLE,mem_config_sensor_angle
+	rtn true
+	jam MOUSE_12CLK_ANGLE,mem_config_sensor_angle
+	rtn
+
+mouse_select_adc:
+	fetcht 1,mem_select_adc_gpio
+	call gpio_config_input
+	fetcht 1,mem_select_adc_gpio
+	call gpio_get_bit
+	jam ADC_CONFIG_VINLPM,mem_adc_config_flag
+	rtn true
+	jam ADC_CONFIG_GPIO,mem_adc_config_flag
+	rtn
+	
+	
+mouse_adc_init:
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_VINLPM,mouse_adc_init_data_vinlpm
+	beq ADC_CONFIG_HVIN,mouse_adc_init_data_hvin
+	beq ADC_CONFIG_GPIO,mouse_adc_init_data_io
+	branch mouse_adc_init_data_vinlpm
+	
+mouse_adc_init_data_vinlpm:
+	fetcht 2,mem_2v_adc_vinlpm_data
+	fetch 2,mem_3v_adc_vinlpm_data
+	isub temp,pdata
+	mul32 pdata,20,pdata 
+	div pdata,100
+	call wait_div_end
+	quotient pdata
+	store 2,mem_adc_reference_voltage //vinlpm :2v2 low alter
+	rtn
+mouse_adc_init_data_hvin:
+	fetcht 2,mem_1v_adc_hvin_data
+	fetch 2,mem_5v_adc_hvin_data
+	isub temp,pdata
+	mul32 pdata,230,pdata 
+	div pdata,400
+	call wait_div_end
+	quotient pdata
+	store 2,mem_adc_reference_voltage //hvin :3v3 low alter
+	rtn
+mouse_adc_init_data_io:
+	fetch 2,mem_1v_adc_io_data
+	store 2,mem_adc_reference_voltage  //vio :1v low alter
+	rtn
+mouse_gpio_init:
+	fetcht 1,mem_eeprom_wp_gpio
+	call gpio_config_output
+	call usb_offline_check_init
+	fetcht 1,mem_lbutton_gpio
+	call gpio_config_input
+	fetcht 1,mem_rbutton_gpio
+	call gpio_config_input
+	fetcht 1,mem_mbutton_gpio
+	call gpio_config_input
+	fetcht 1,mem_sensor_data_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_sensor_reset_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_whee_a_data_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_whee_b_data_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_whee_ta_data_gpio
+	call gpio_config_input
+	fetcht 1,mem_whee_tb_data_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_bk_button_gpio
+	call gpio_config_input
+	fetcht 1,mem_fw_button_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_config_low_voltage_alarm_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_config_device1_led_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_config_device2_led_gpio
+	call gpio_config_output
+	
+	fetcht 1,mem_config_device3_led_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_dpi_led_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_config_input
+	
+	fetcht 1,mem_config_bt_button_gpio
+	call gpio_config_input	
+
+	fetcht 1,mem_dpi_button_gpio
+	branch gpio_config_input
+
+mouse_wheel_gpio_set_wake:
+	fetcht 1,mem_whee_a_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_b_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_ta_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_tb_data_gpio
+	branch gpio_set_wake_by_current_state
+	
+mouse_before_hibernate_wheel_gpio_set:
+	fetcht 1,mem_whee_a_data_gpio
+	call mouse_gpio_set_pupd_by_input
+	fetcht 1,mem_whee_b_data_gpio
+	call mouse_gpio_set_pupd_by_input
+	fetcht 1,mem_whee_ta_data_gpio
+	call mouse_gpio_set_pupd_by_input
+	fetcht 1,mem_whee_tb_data_gpio
+	branch mouse_gpio_set_pupd_by_input
+
+mouse_gpio_set_pupd_by_input:
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	and temp,0x7f,queue
+	hfetch 4,core_gpio_in
+	qisolate1 pdata
+	hfetch 4,core_gpio_pu0
+	qsetflag true,pdata
+	hstore 4,core_gpio_pu0
+	hfetch 4,core_gpio_pd0
+	nqsetflag true,pdata
+	hstore 4,core_gpio_pd0
+	rtn
+	
+mouse_before_hibernate:
+	enable user
+	hfetch 4,0x8138
+	setflag user,26,pdata
+	hstore 4,core_lpm_reg
+	call lpm_write_ctrl
+	call mouse_devce_led_off
+	call mouse_before_hibernate_wheel_gpio_set
+//	call gpio_set_before_lpm_common
+	branch mouse_lpm_before_common
+
+
+	
+mouse_process_lpm_before:
+	call mouse_lpm_before_common
+	fetch 1,mem_lpm_current_mult
+	nrtn blank					// 7.5ms, no gpio wakeup
+	branch gpio_clr_wake
+
+mouse_lpm_before_common:
+	call mouse_wheel_check
+	arg MOUSE_SPI1_CLK_GPIO,temp					// set sclk high
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	isolate1 MOUSE_ENABLE_SPI2,pdata
+	call mouse_spi_clk_gpio,true
+	call gpio_config_output
+	call twspi_disable
+
+
+
+	fetcht 1,mem_lbutton_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_rbutton_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_mbutton_gpio
+	call gpio_set_wake_by_current_state
+
+	fetcht 1,mem_bk_button_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_fw_button_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_dpi_button_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_a_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_b_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_ta_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_tb_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_sensor_data_gpio
+	branch gpio_set_wake
+	
+
+	
+mouse_spi_clk_gpio:
+	arg MOUSE_SPI2_CLK_GPIO,temp
+	rtn
+
+mouse_wheel_check:
+	bpatch patch1c_4,mem_patch1c
+	call mouse_t_wheel_scan
+	call mouse_wheel_scan
+	fetch 1,mem_wheel_tb_new_pinlevel
+	fetcht 1,mem_wheel_tb_old_pinlevel
+	store 1,mem_wheel_tb_old_pinlevel
+	isub temp,null
+	nbranch app_lpm_wake_auto_lock,zero
+	fetch 1,mem_mwheel_b_new_pinlevel
+	fetcht 1,mem_mwheel_b_old_pinlevel
+	store 1,mem_mwheel_b_old_pinlevel
+	isub temp,null
+	nbranch app_lpm_wake_auto_lock,zero
+	rtn
+mouse_t_wheel_scan:
+	fetch 1,mem_whee_ta_data_gpio
+	rtneq GPIO_DISABLE
+	arg 0,rega
+	fetcht 1,mem_whee_ta_data_gpio
+	call gpio_get_bit
+	setflag true,0,rega
+	fetcht 1,mem_whee_tb_data_gpio
+	call gpio_get_bit
+	setflag true,1,rega
+	copy rega,pdata
+	store 1,mem_wheel_tb_new_pinlevel
+	beq 0x01,mouse_t_wheel_scan_judge1
+	beq 0x02,mouse_t_wheel_scan_judge2
+	fetch 1,mem_wheel_tog
+	bbit1 7,mouse_t_wheel_scan_judge3
+	rtn
+
+mouse_t_wheel_scan_judge1:
+	fetch 1,mem_wheel_tb_old_pinlevel
+	beq 0,mouse_t_wheel_scan_judge11
+	beq 3,mouse_t_wheel_scan_judge12
+	rtn
+mouse_t_wheel_scan_judge2:
+	fetch 1,mem_wheel_tb_old_pinlevel
+	beq 0,mouse_t_wheel_scan_judge21
+	beq 3,mouse_t_wheel_scan_judge22
+	rtn
+mouse_t_wheel_scan_judge11:
+	jam 0x82,mem_wheel_tog
+	rtn
+mouse_t_wheel_scan_judge12:
+	jam 0x81,mem_wheel_tog
+	rtn
+mouse_t_wheel_scan_judge21:
+	jam 0x80,mem_wheel_tog
+	rtn
+mouse_t_wheel_scan_judge22:
+	jam 0x83,mem_wheel_tog
+	rtn
+mouse_t_wheel_scan_judge3:
+	fetch 1,mem_wheel_tog
+	set0 7,pdata
+	store 1,mem_wheel_tog
+	beq 0,mouse_t_wheel_scan_judge30
+	beq 1,mouse_t_wheel_scan_judge31
+	beq 2,mouse_t_wheel_scan_judge32
+	beq 3,mouse_t_wheel_scan_judge33
+	rtn
+mouse_t_wheel_scan_judge30:
+	fetch 1,mem_wheel_tb_new_pinlevel
+	beq 3,mouse_wheel_t_forward
+	rtn
+mouse_t_wheel_scan_judge31:
+	fetch 1,mem_wheel_tb_new_pinlevel
+	beq 0,mouse_wheel_t_forward
+	rtn
+mouse_t_wheel_scan_judge32:
+	fetch 1,mem_wheel_tb_new_pinlevel
+	beq 3,mouse_wheel_t_back
+	rtn
+mouse_t_wheel_scan_judge33:
+	fetch 1,mem_wheel_tb_new_pinlevel
+	beq 0,mouse_wheel_t_back
+	rtn
+mouse_wheel_t_forward:
+	fetch 1,mem_mouse_tz_data_count1
+	increase 1,pdata
+	store 1,mem_mouse_tz_data_count1
+	sub pdata,1,null
+	rtn positive
+	jam 0,mem_mouse_tz_data_count1
+	fetch 1,mem_mouse_tz_data
+	increase 1,pdata
+	store 1,mem_mouse_tz_data
+	rtn
+mouse_wheel_t_back:
+	fetch 1,mem_mouse_tz_data_count
+	increase 1,pdata
+	store 1,mem_mouse_tz_data_count
+	sub pdata,1,null
+	rtn positive
+	jam 0,mem_mouse_tz_data_count
+	fetch 1,mem_mouse_tz_data
+	increase -1,pdata
+	store 1,mem_mouse_tz_data
+	rtn
+
+
+mouse_wheel_scan:
+	fetch 1,mem_whee_a_data_gpio
+	rtneq GPIO_DISABLE
+	arg 0,rega
+	fetcht 1,mem_whee_a_data_gpio
+	call gpio_get_bit
+	setflag true,0,rega
+	fetcht 1,mem_whee_b_data_gpio
+	call gpio_get_bit
+	setflag true,1,rega
+	copy rega,pdata
+	store 1,mem_mwheel_b_new_pinlevel
+	beq 0x01,mouse_wheel_scan_judge1
+	beq 0x02,mouse_wheel_scan_judge2
+	fetch 1,mem_mwheel_tog
+	bbit1 7,mouse_wheel_scan_judge3
+	rtn
+
+mouse_wheel_scan_judge1:
+	fetch 1,mem_mwheel_b_old_pinlevel
+	beq 0,mouse_wheel_scan_judge11
+	beq 3,mouse_wheel_scan_judge12
+	rtn
+mouse_wheel_scan_judge2:
+	fetch 1,mem_mwheel_b_old_pinlevel
+	beq 0,mouse_wheel_scan_judge21
+	beq 3,mouse_wheel_scan_judge22
+	rtn
+mouse_wheel_scan_judge11:
+	jam 0x82,mem_mwheel_tog
+	rtn
+mouse_wheel_scan_judge12:
+	jam 0x81,mem_mwheel_tog
+	rtn
+mouse_wheel_scan_judge21:
+	jam 0x80,mem_mwheel_tog
+	rtn
+mouse_wheel_scan_judge22:
+	jam 0x83,mem_mwheel_tog
+	rtn
+mouse_wheel_scan_judge3:
+	fetch 1,mem_mwheel_tog
+	set0 7,pdata
+	store 1,mem_mwheel_tog
+	beq 0,mouse_wheel_scan_judge30
+	beq 1,mouse_wheel_scan_judge31
+	beq 2,mouse_wheel_scan_judge32
+	beq 3,mouse_wheel_scan_judge33
+	rtn
+mouse_wheel_scan_judge30:
+	fetch 1,mem_mwheel_b_new_pinlevel
+	beq 3,mouse_wheel_forward
+	rtn
+mouse_wheel_scan_judge31:
+	fetch 1,mem_mwheel_b_new_pinlevel
+	beq 0,mouse_wheel_forward
+	rtn
+mouse_wheel_scan_judge32:
+	fetch 1,mem_mwheel_b_new_pinlevel
+	beq 3,mouse_wheel_back
+	rtn
+mouse_wheel_scan_judge33:
+	fetch 1,mem_mwheel_b_new_pinlevel
+	beq 0,mouse_wheel_back
+	rtn
+mouse_wheel_forward:
+	jam 0,mem_mouse_z_data_count1
+	fetch 1,mem_mouse_z_data
+	increase 1,pdata
+	store 1,mem_mouse_z_data
+	rtn
+mouse_wheel_back:
+	jam 0,mem_mouse_z_data_count
+	fetch 1,mem_mouse_z_data
+	increase -1,pdata
+	store 1,mem_mouse_z_data
+	rtn
+	
+	
+mouse_hid_connected:
+	setarg HID_HANDSHAKE_TIMEOUT
+	store 1,mem_hid_handshake_timer_count
+	rtn
+	
+mouse_send_process:
+	fetch 1,mem_app_handshake_flag
+	rtn blank
+	call l2cap_malloc_is_fifo_nearly_full
+	nrtn blank
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOSUE_24G_PAIRING_FLAG,mouse_send_empty_data
+	bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_send_empty_data
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_send_empty_data
+	call mouse_motion
+	nrtn user
+mouse_send_data:
+	arg 9,rega
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_int_remote_cid
+	istore 2,contw
+	setarg 0x02a1
+	istore 2,contw
+	fetch 7,mem_mouse_key
+	istore 7,contw
+	rtn
+
+	
+mouse_send_empty_data:
+	setarg 0
+	store 7,mem_mouse_key
+	branch mouse_send_data
+
+
+mouse_no_data_timer_init:
+	fetch 2,mem_mouse_no_data_timeout
+	store 2,mem_mouse_no_data_timer
+	rtn
+
+	
+mouse_fill_data_le:
+	bpatch patch1c_5,mem_patch1c
+	arg 7,rega //len
+	fetcht 2,mem_le_notify_handle
+	call le_att_malloc_tx_notify
+	fetch 7,mem_mouse_key
+	istore 7,contw
+	rtn
+
+mouse_motion:
+	bpatch patch1c_6,mem_patch1c
+	disable user
+	setarg 0
+	store 6,mem_mouse_x
+	call mouse_cheak_sensor_data
+	call mouse_zwheel
+	call mouse_t_zwheel
+	call mouse_key
+	nrtn user
+	call mouse_no_data_timer_init
+	arg MOUSE_STATUE_UP_FLAG,queue
+	branch mouse_enable_function_flag
+	
+motion_6clk_direction_dispose:
+	fetch 2,mem_mouse_x
+	sub pdata,0,pdata
+	store 2,mem_mouse_x
+	branch enable_user
+motion_12clk_direction_dispose:
+	fetch 2,mem_mouse_y
+	sub pdata,0,pdata
+	store 2,mem_mouse_y
+	branch enable_user
+motion_9clk_direction_dispose:
+	fetch 2,mem_mouse_y
+	sub pdata,0,pdata
+	store 2,mem_mouse_y
+	fetch 2,mem_mouse_x
+	sub pdata,0,pdata
+	store 2,mem_mouse_x
+	call mouse_sensor_data_swap_places
+	branch enable_user
+motion_3clk_direction_dispose:
+	call mouse_sensor_data_swap_places
+	branch enable_user
+mouse_cheak_sensor_data:
+	fetch 1,mem_spi_write_flash_sm
+	rtnne FLASH_SM_NO_BUYS
+	fetch 1,mem_config_sensor_type
+	beq P3205,mouse_p32xx_sensor_motion
+	beq P3065,mouse_p32xx_sensor_motion
+	beq KA8,mouse_p32xx_sensor_motion
+	beq P3204,mouse_p32xx_sensor_motion
+	beq P3212,mouse_p3212_sensor_motion
+	beq P3610,mouse_p3610_sensor_motion
+	beq P3065_xy,mouse_p32xx_sensor_motion
+	branch mouse_p32xx_sensor_motion
+	
+mouse_clear_sensor_data:
+	fetch 1,mem_mouse_move_flag
+	call mouse_read_sensor_common,blank
+	jam 1,mem_mouse_move_flag
+	rtn
+
+
+mouse_p3212_sensor_motion:
+	call mouse_clear_sensor_data
+	fetcht 1,mem_sensor_data_gpio
+	call gpio_get_bit
+	nrtn true
+	setarg PAN_REG_PID_L
+	call twspi_read
+	bne P32XX_ID1,mouse_twspi_reset
+	setarg PAN_REG_MOTION_STAUS
+	call twspi_read
+	rtnbit0 7
+	call mouse_read_sensor_common
+	call mouse_read_3212sensor_xy_high
+	store 1,mem_mouse_xy_h
+	rshift4 pdata,pdata
+	call extsign_bit3
+	store 1,mem_mouse_x+1
+	fetch 1,mem_mouse_xy_h
+	and pdata,0x0f,pdata
+	call extsign_bit3
+	store 1,mem_mouse_y+1
+	fetch 1,mem_config_sensor_angle
+	beq MOUSE_6CLK_ANGLE,motion_6clk_direction_dispose
+	beq MOUSE_9CLK_ANGLE,motion_9clk_direction_dispose
+	beq MOUSE_12CLK_ANGLE,motion_12clk_direction_dispose
+	beq MOUSE_3CLK_ANGLE,motion_3clk_direction_dispose
+	rtn
+
+mouse_read_3212sensor_xy_high:
+	setarg 0x12
+	branch twspi_read
+	
+mouse_p3065_judge:
+	beq P3065_ID1,mouse_p32xx_sensor_motion_1
+	branch mouse_twspi_reset
+	
+mouse_p32xx_sensor_motion:
+	call mouse_clear_sensor_data
+	disable user
+	fetcht 1,mem_sensor_data_gpio
+	call gpio_get_bit
+	nrtn true
+	setarg PAN_REG_PID_L
+	call twspi_read
+	bne P32XX_ID1,mouse_p3065_judge   
+mouse_p32xx_sensor_motion_1:
+	setarg PAN_REG_MOTION_STAUS
+	call twspi_read
+	rtnbit0 7
+	call mouse_read_sensor_common
+	fetch 1,mem_mouse_x
+	call extsign
+	store 2,mem_mouse_x
+	fetch 1,mem_mouse_y
+	call extsign
+	store 2,mem_mouse_y
+	fetch 1,mem_config_sensor_angle
+	beq MOUSE_6CLK_ANGLE,motion32xx_6clk_direction_selection
+	beq MOUSE_9CLK_ANGLE,motion32xx_9clk_direction_selection
+	beq MOUSE_12CLK_ANGLE,motion32xx_12clk_direction_selection
+	beq MOUSE_3CLK_ANGLE,motion32xx_3clk_direction_selection
+	rtn
+	
+motion32xx_6clk_direction_selection:
+	call motion_6clk_direction_dispose
+	branch mouse_sensor_sdio_low
+motion32xx_9clk_direction_selection:
+	call motion_9clk_direction_dispose
+	branch mouse_sensor_sdio_low
+motion32xx_12clk_direction_selection:
+	call motion_12clk_direction_dispose
+	branch mouse_sensor_sdio_low
+motion32xx_3clk_direction_selection:
+	call motion_3clk_direction_dispose
+	branch mouse_sensor_sdio_low
+	
+mouse_sensor_data_swap_places:
+	fetch 2, mem_mouse_y
+	fetcht 2,mem_mouse_x
+	store 2,mem_mouse_x
+	storet 2,mem_mouse_y
+	rtn
+//input regb  output:pdata
+mouse_p3610sensor_read:
+	call spi_ncs_enable
+	nop 100
+	copy regb,pdata
+	call twspi_read
+	copy pdata,regb
+	call spi_ncs_disable
+	nop 100
+	copy regb,pdata
+	rtn	
+mouse_p3610_sensor_motion:
+	disable user
+	fetcht 1,mem_sensor_data_gpio
+	call gpio_get_bit
+	nrtn true
+	arg PAN_REG_MOTION_STAUS,regb
+	call mouse_p3610sensor_read
+	rtnbit0 7
+	arg PAN_REG_PID_L,regb
+	call mouse_p3610sensor_read
+	store 1,mem_sensor_id1
+	bne P3610_ID1,mouse_init_3610sensor_reset
+	fetch 1,mem_mouse_move_flag
+	call mouse_read_sensor3610_data,blank
+	jam 1,mem_mouse_move_flag
+	call mouse_read_sensor3610_data
+	fetch 1,mem_mouse_xy_h
+	rshift4 pdata,pdata
+	call extsign_bit3
+	store 1,mem_mouse_x+1
+	fetch 1,mem_mouse_xy_h
+	and pdata,0x0f,pdata
+	call extsign_bit3
+	store 1,mem_mouse_y+1
+	fetch 1,mem_config_sensor_angle
+	beq 0,motion3610_6clk_direction_selection
+	beq 1,motion3610_9clk_direction_selection
+	beq 2,motion3610_12clk_direction_selection
+	beq 3,motion3610_3clk_direction_selection
+	rtn
+
+mouse_3610_smart_select:
+	fetch 1,mem_sensor_smart_flag
+	beq P3610_SMART_ENABLE,mouse_3610_smart_disable
+	beq P3610_SMART_DISABLE,mouse_3610_smart_enable
+	rtn
+
+
+motion3610_6clk_direction_selection:
+	call motion_6clk_direction_dispose
+	branch mouse_3610_smart_select
+	
+motion3610_12clk_direction_selection:
+	call motion_12clk_direction_dispose
+	branch mouse_3610_smart_select
+	
+motion3610_9clk_direction_selection:
+	call motion_9clk_direction_dispose
+	branch mouse_3610_smart_select
+	
+motion3610_3clk_direction_selection:
+	call motion_3clk_direction_dispose
+	branch mouse_3610_smart_select
+	
+mouse_read_sensor3610_data:
+	call spi_ncs_enable
+	call mouse_read_sensor_common
+	arg 5,pdata
+	call twspi_read
+	store 1,mem_mouse_xy_h
+	arg 7,pdata
+	call twspi_read
+	store 1,mem_sensor_shutter_hi
+	arg 8,pdata
+	call twspi_read
+	store 1,mem_sensor_shutter_lo
+	branch spi_ncs_disable
+
+
+mouse_3610_smart_enable:
+	fetch 1,mem_sensor_shutter_hi
+	rtnne 0
+	fetch 1,mem_sensor_shutter_lo
+	sub pdata,45,null
+	rtn positive
+	jam P3610_SMART_ENABLE,mem_sensor_smart_flag
+	setarg 0xba41
+	call sensor_write
+	setarg 0x0032
+	call sensor_write
+	setarg 0xb541
+	branch sensor_write
+mouse_3610_smart_disable:
+	fetch 1,mem_sensor_shutter_hi
+	rtnne 0
+	fetch 1,mem_sensor_shutter_lo
+	sub pdata,45,null
+	nrtn positive
+	jam P3610_SMART_DISABLE,mem_sensor_smart_flag
+	setarg 0xba41
+	call sensor_write
+	setarg 0x8032
+	call sensor_write
+	setarg 0xb541
+	branch sensor_write
+
+
+
+mouse_read_sensor_common:
+	arg PAN_REG_DELTA_X,pdata
+	call twspi_read
+	store 2,mem_mouse_x
+	arg PAN_REG_DELTA_Y,pdata
+	call twspi_read
+	store 2,mem_mouse_y
+	rtn
+
+mouse_set_qdecoder_x:
+	arg MOUSE_DEFAULT_XA_GPIO,temp
+	call gpio_config_input
+	arg MOUSE_DEFAULT_XA_GPIO,temp
+	call gpio_get_bit
+	rtn true
+	hfetch 1,core_qdec_cntx
+	set1 4,pdata
+	hstore 1,core_qdec_cntx
+	rtn
+
+mouse_hardware_zwheel:
+	fetcht 1,mem_mouse_z_data
+	hfetch 1,core_qdec_cntx
+	iadd temp,pdata
+	rtn blank
+	store 1,mem_mouse_z
+	jam 0,mem_mouse_z_data
+	branch enable_user
+mouse_hardware_zwheel_beforelpm:
+	fetcht 1,mem_mouse_z_data
+	hfetch 1,core_qdec_cntx
+	iadd temp,pdata
+	store 1,mem_mouse_z_data
+	rtn
+mouse_zwheel:
+	fetch 1,mem_mouse_z_data
+	rtn blank	
+	store 1,mem_mouse_z
+	jam 0,mem_mouse_z_data
+	branch enable_user
+	
+mouse_t_zwheel:
+	fetch 1,mem_mouse_tz_data
+	rtn blank	
+	store 1,mem_mouse_tz
+	jam 0,mem_mouse_tz_data
+	branch enable_user
+	
+mouse_check_key_gpio:
+	arg 0,rega
+	fetcht 1,mem_lbutton_gpio
+	call gpio_get_bit
+	setflag true,0,rega
+	fetcht 1,mem_rbutton_gpio
+	call gpio_get_bit
+	setflag true,1,rega
+	fetcht 1,mem_mbutton_gpio
+	call gpio_get_bit
+	setflag true,2,rega
+	call mouse_check_s_key_gpio
+	copy rega,pdata
+	rtn
+mouse_check_s_key_gpio:
+	fetch 1,mem_bk_button_gpio
+	rtneq GPIO_DISABLE
+	fetcht 1,mem_bk_button_gpio
+	call gpio_get_bit
+	setflag true,3,rega
+	fetcht 1,mem_fw_button_gpio
+	call gpio_get_bit
+	setflag true,4,rega
+	rtn
+
+mouse_key:
+	call mouse_check_key_gpio
+	call mouse_set_mult
+	call mouse_24g_key
+	copy rega,pdata
+	fetcht 1,mem_mouse_key
+	store 1,mem_mouse_key	
+	ixor temp,pdata
+	sub pdata,0,null
+	rtn zero
+	branch enable_user
+
+mouse_24g_key:
+	rtnmark0 mark_24g
+	copy rega,pdata
+	rtn blank
+	store 1,mem_mouse_key
+	branch enable_user
+
+//short mult: no key 
+mouse_set_mult:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,mouse_set_ble_mult
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,mouse_set_bt_mult
+	rtn
+mouse_set_ble_mult:
+	copy rega,pdata
+	nbranch le_set_config_short_mult,blank
+	branch le_clr_config_short_mult
+mouse_set_bt_mult:
+	copy rega,pdata
+	nbranch classic_bt_set_mult_short_flag,blank
+	branch classic_bt_clr_mult_short_flag
+	
+	/* sdio high will cost extra 9mA */
+mouse_sensor_sdio_low:
+	bpatch patch1c_7,mem_patch1c
+	arg MOUSE_SPI1_SDIO_GPIO,temp
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	isolate1 MOUSE_ENABLE_SPI2,pdata
+	call mouse_sensor_sdio_low2,true
+	call gpio_get_bit
+	rtn true
+	setarg 0x0a
+	call twspi_read
+	nop 1000
+	branch mouse_sensor_sdio_low
+mouse_sensor_sdio_low2:
+	arg MOUSE_SPI2_SDIO_GPIO,temp
+	rtn
+
+mouse_spi_sdio_gpio_pollup:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_SPI2,mouse_spi2_sdio_gpio_pollup
+mouse_spi1_sdio_gpio_pollup:
+	arg MOUSE_SPI1_SDIO_GPIO,temp
+	branch gpio_config_input_without_wake
+mouse_spi2_sdio_gpio_pollup:
+	arg MOUSE_SPI2_SDIO_GPIO,temp
+	branch gpio_config_input_without_wake
+
+	
+mouse_init_sunt:
+	call mouse_spi_init
+	rtn wake
+	call mouse_spi_sdio_gpio_pollup
+	fetch 1,mem_config_sensor_type
+	beq P3610,mouse_init_3610sensor
+mouse_init_sensor:
+	call mouse_read_sensor_id
+	beq P32XX_ID1,mouse_init_p32xx_id2_judge
+	beq P3065_ID1,mouse_p3065_init_param
+	call mouse_twspi_reset
+	nop 1000
+	branch mouse_init_sensor
+mouse_twspi_reset:
+	bpatch patch1d_0,mem_patch1d
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_SPI2,twspi_reset2
+	branch twspi_reset
+
+mouse_init_3610sensor:
+	call mouse_read_sensor_id
+	beq P3610_ID1,mouse_init_p3610
+	call mouse_init_3610sensor_reset
+	branch mouse_init_3610sensor
+	
+mouse_read_sensor_id:
+	setarg PAN_REG_PID_H
+	call twspi_read
+	store 1,mem_sensor_id2
+	setarg PAN_REG_PID_L
+	call twspi_read
+	store 1,mem_sensor_id1
+	rtn
+mouse_init_p32xx_id2_judge:
+	fetch 1,mem_sensor_id2
+	beq P3205_TJ3T_ID2,mouse_3205_3t_init_param
+	beq P3204_TJ3L_ID2,mouse_3204_3l_init_param
+	beq P3212_ID2,mouse_3212_init_param
+	beq PKA8_ID2,mouse_ka8_init_param
+	rtn
+mouse_ka8_init_param:
+	jam KA8,mem_config_sensor_type
+	rtn
+mouse_p3065xy_init_param:
+	jam P3065_XY,mem_config_sensor_type
+	rtn
+mouse_p3065_init_param:
+	fetch 1,mem_sensor_id2
+	beq P3065_XY_ID2,mouse_p3065xy_init_param
+	jam P3065,mem_config_sensor_type
+	rtn
+mouse_3212_init_param:
+	jam P3212,mem_config_sensor_type
+	call mouse_sensor_disable_wp
+	setarg 0x3426
+	call twspi_write
+	setarg 0x0419
+	call twspi_write
+mouse_sensor_enable_wp:
+	setarg 0x0009
+	branch twspi_write
+mouse_sensor_disable_wp:
+	setarg 0x5a09
+	branch twspi_write
+
+mouse_3204_3l_init_param:
+	jam P3204,mem_config_sensor_type
+	call mouse_sensor_disable_wp
+	setarg 0x0f0d//
+	call twspi_write
+	setarg 0xe31d//
+	call twspi_write
+	setarg 0xd27d
+	call twspi_write
+	call mouse_32xx_init_param
+	branch mouse_32xx_init_param_1
+	
+mouse_32xx_init_param:
+	setarg 0x351b
+	call twspi_write
+	setarg 0xb428
+	call twspi_write
+	setarg 0x4629
+	call twspi_write
+	setarg 0x962a
+	call twspi_write
+	setarg 0x8c2b
+	call twspi_write
+	setarg 0x6e2c
+	call twspi_write
+	setarg 0x642d
+	call twspi_write
+	setarg 0x5f38
+	call twspi_write
+	setarg 0x0f39
+	call twspi_write
+	setarg 0x323a
+	call twspi_write
+	setarg 0x473b
+	call twspi_write
+	setarg 0x1042
+	branch twspi_write
+mouse_32xx_init_param_1:	
+	setarg 0x2e54
+	call twspi_write
+	setarg 0xf255
+	call twspi_write
+	setarg 0xf461
+	call twspi_write
+	setarg 0x7063
+	call twspi_write
+	setarg 0x5275
+	call twspi_write
+	setarg 0x4176
+	call twspi_write
+	setarg 0xed77
+	call twspi_write
+	setarg 0x2378
+	call twspi_write
+	setarg 0x4679
+	call twspi_write
+	setarg 0xe57a
+	call twspi_write
+	setarg 0x487c
+	call twspi_write
+	setarg 0x777e
+	call twspi_write
+	setarg 0x017f
+	call twspi_write
+	setarg 0x000b
+	call twspi_write
+	setarg 0x007f
+	call twspi_write
+	branch mouse_sensor_enable_wp
+	
+
+mouse_3205_3t_init_param:
+	jam P3205,mem_config_sensor_type
+	call mouse_sensor_disable_wp
+	setarg 0x100d//
+	call twspi_write
+	setarg 0xed1d//
+	call twspi_write
+	setarg 0x807d
+	call twspi_write
+	call mouse_32xx_init_param
+	setarg 0x0943
+	call twspi_write
+	branch mouse_32xx_init_param_1
+	
+	
+mouse_init_3610sensor_reset:
+	fetcht 1,mem_sensor_reset_gpio
+	call gpio_out_active
+	call delay_10ms
+	fetcht 1,mem_sensor_reset_gpio
+	call gpio_out_inactive
+	branch delay_10ms
+
+mouse_init_p3610:
+	jam P3610,mem_config_sensor_type
+	setarg 0xba41
+	call sensor_write
+	setarg 0x0d11
+	call sensor_write
+	setarg 0x041b
+	call sensor_write
+	setarg 0x041c
+	call sensor_write
+	setarg 0x0f1d
+	call sensor_write
+	setarg 0x0032
+	call sensor_write
+	setarg 0xb541
+	branch sensor_write
+	
+	
+//input-rega
+mouse_set_sensor_reg:
+	setarg 0xba41
+	call sensor_write
+	nop 4000
+	setarg 0xff7f
+	call sensor_write
+	copy rega,pdata
+	call sensor_write
+	setarg 0x007f
+	call sensor_write
+	setarg 0xb541
+	branch sensor_write
+
+extsign:
+	rtnbit0 7
+	arg 0xff00,temp
+	ior temp,pdata
+	rtn
+
+extsign_bit3:
+	rtnbit0 3
+	arg 0xf0,temp
+	ior temp,pdata
+	rtn
+
+
+mouse_le:
+	call le_fifo_check_nearly_full
+	nrtn blank
+	fetch 1,mem_le_connect_status_flag
+	and pdata,0x03,pdata
+	rtnne 0x03
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOSUE_24G_PAIRING_FLAG,mouse_le_send_empty_packet
+	bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_le_send_empty_packet
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_le_send_empty_packet
+	call mouse_motion
+	nrtn user
+	branch mouse_fill_data_le
+
+mouse_le_send_empty_packet:
+	setarg 0
+	store 7,mem_mouse_key
+	branch mouse_fill_data_le
+
+mouse_priority_bb_event:	
+	copy regc,pdata
+	beq BT_EVT_LE_CONNECTED,mouse_le_bb_event_connected
+	beq BT_EVT_BB_CONNECTED,mouse_stop_discovery
+	beq BT_EVT_LE_DISCONNECTED,mouse_bb_disconnected
+	beq BT_EVT_BB_DISCONNECTED,mouse_bb_disconnected
+	beq BT_EVT_SETUP_COMPLETE,mouse_bt_event_setup_complete
+	beq BT_EVT_BUTTON_LONG_PRESSED,mouse_bb_event_discovery_btn
+	beq BT_EVT_HID_HANDSHAKE,mouse_bt_hid_handshake
+	beq BT_EVT_HID_CONNECTED,mouse_bt_hid_connected
+	beq BT_EVT_RECONN_FAILED,mouse_bb_event_reconn_failed
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,mouse_bb_event_reconn_timeout
+	beq BT_EVT_PINCODE_REQ,mouse_bb_event_pincode
+	beq BT_EVT_REMOTE_UNSNIFF,app_start_auto_sniff
+	beq BT_EVT_LE_PAIRING_SUCCESS,mouse_le_pairing_success
+	beq BT_EVT_LE_START_ENC,mouse_le_ll_start_encryt
+	beq BT_EVT_LE_PAIRING_COMPLETE,mouse_le_pairing_complete
+	beq BT_EVT_VIRTUAL_CABLE_UNPLUG,mouse_irtual_cable_unplug
+	beq BT_EVT_24G_PAIRING_COMPLETE,mouse_24g_pairing_complete
+	beq BT_EVT_24G_ATTEMPT_FAIL,mouse_24g_attempt_fail
+	beq BT_EVT_24G_ATTEMPT_SUCCESS,mouse_24g_attempt_success
+	rtn
+
+
+mouse_le_pairing_complete:
+	branch app_ble_store_reconn_info
+
+mouse_24g_attempt_fail:
+	jam 1,mem_mouse_24g_enter_lpm_enable
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	fetch 1,mem_device_flag
+	fetcht 1,mem_24g_device_number
+	isub temp,null
+	branch app_enter_hibernate,zero
+	rtn
+mouse_24g_attempt_success:
+	jam 1,mem_mouse_24g_enter_lpm_enable
+	rtn
+mouse_24g_pairing_complete:
+	jam 1,mem_mouse_24g_enter_lpm_enable
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	call mouse_disable_function_flag
+	setarg 0
+	store 2,mem_24g_pairing_timer_count
+	jam 0,mem_mouse_move_flag
+	
+	fetch 1,mem_config_sensor_type
+	sub pdata,P3610,null
+	call mouse_read_sensor3610_data,zero
+	ncall mouse_read_sensor_common,zero
+
+	fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_FLASH,mouse_store_flash_24g_address
+	call mouse_set_24g_addr_eeprom	//store rx dongle addr to eeprom
+	branch iicd_write_protect_eep_data
+
+mouse_set_24g_addr_eeprom:
+	call g24_head_ptr2regc
+	add regc,offset_24g_addr,rega
+	arg MOUSE_G24_ADDR_EEPROM_OFFECT,regb
+	arg 4,temp
+	rtn
+
+mouse_store_flash_24g_address:
+	call g24_head_ptr2regc
+	add regc,offset_24g_addr,regb
+	ifetch 1,regb
+	store 1,mem_mouse_24g_addr
+	branch mouse_store_flash_device_info
+	
+
+mouse_le_pairing_success:
+	arg LL_PAIRING_SUCCESS_FLAG,queue
+	branch mouse_le_enable_connect_flag
+mouse_le_ll_start_encryt:
+	jam 2,mem_le_start_encrypt_timer
+	arg LL_START_ENC_FLAG,queue
+	branch mouse_le_enable_connect_flag
+
+	
+mouse_le_enable_connect_flag:
+	fetch 1,mem_le_connect_status_flag
+	qset1 pdata
+	store 1,mem_le_connect_status_flag
+	rtn
+
+mouse_le_disable_connect_flag:
+	fetch 1,mem_le_connect_status_flag
+	qset0 pdata
+	store 1,mem_le_connect_status_flag
+	rtn
+mouse_le_clean_connect_flag:
+	jam 0,mem_le_connect_status_flag
+	rtn
+
+mouse_le_bb_event_connected:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set0 APP_DISC_BY_BUTTON ,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	setarg 0
+	store 2,mem_mouse_direct_timer
+	call mouse_no_data_timer_init
+	branch mouse_stop_discovery
+
+mouse_bb_event_pincode:
+	call pincode_reinit
+	branch app_bt_set_pincode
+mouse_bb_event_reconn_timeout:
+mouse_bb_event_reconn_failed:
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_soft_reset
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_start_discovery
+	bbit1 MOSUE_24G_PAIRING_FLAG,g24_start_pairing_sm1
+	branch app_bb_hibernate
+
+	
+mouse_bt_hid_connected:
+	branch mouse_hid_connected
+
+mouse_bt_event_setup_complete:
+	rtn
+
+mouse_soft_reset:
+	call mouse_select_device_enable
+	branch soft_reset_chip
+
+mouse_bb_disconnected:
+	bpatch patch1d_1,mem_patch1d
+	call mouse_bb_discon_clear_stack
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_soft_reset
+	bbit1 MOSUE_24G_PAIRING_FLAG,g24_start_pairing_sm1
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	bbit1 APP_DISC_BLE,mouse4_0_event_bb_disconn
+	bbit1 APP_DISC_BY_BUTTON,app_disconn_reason_clear
+	bbit1 APP_DISC_AFTER_PAIRING,mouse_event_light_state_pairing
+	bbit1 APP_DISC_AFTER_RECONN,mouse_event_light_state_hibernate
+	bbit1 APP_DISC_AFTER_SNIFF,mouse_event_light_state_hibernate
+	branch mouse_start_discovery
+mouse_bb_discon_clear_stack:
+	setarg 0
+	store 8,mem_wheel_tb_old_pinlevel
+	istore 4,contw             //clean wheel statue
+	jam 0,mem_mouse_send_blank_timer
+	jam 0,mem_mouse_move_flag
+	jam APP_HANDSHAKE_NULL,mem_app_handshake_flag
+	jam 0,mem_ltk_exists
+	rtn
+
+mouse_event_light_state_pairing:
+	bbit1 APP_DISC_AFTER_HANDSHAKE,mouse_event_light_state_hibernate
+	bbit1 APP_DISC_AFTER_SNIFF,mouse_event_light_state_hibernate
+	branch mouse_start_discovery
+mouse_event_light_state_hibernate:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery
+	branch app_bb_hibernate
+
+mouse4_0_event_bb_disconn:
+	call mouse_le_clean_connect_flag
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	bbit1 APP_DISC_BY_BUTTON,app_disconn_reason_clear
+	branch app_bb_hibernate
+
+mouse_bb_event_timer:
+	call mouse_adc_read
+	call mouse_24g_delay_timer
+	call mouse_ban_24g_pairing_timer
+	call mouse_dpi_led_blink_delay_timer
+	call mouse_statue_up_timer
+	//poll
+	call mouse_statue_cheak_timer
+	call mouse_select_device
+	call mouse_bt_discovery_cheak
+	call mouse_low_voltage_led_timer
+	call mouse_sensor_led_contrl_timer
+	call mouse_check_hid_handshake_timer
+	call mouse_check_discovery_timeout_timer
+	call mouse_check_direct_timeout_timer
+	call mouse_check_no_data_timeout_timer
+	call mouse_check_mouse_state_timer
+	branch mouse_le_enable_att_list_timer
+
+
+
+mouse_sensor_led_contrl_timer:
+	fetch 1,mem_mouse_sensor_timer_count
+	rtn blank
+	increase -1,pdata
+	store 1,mem_mouse_sensor_timer_count
+	nrtn blank
+	branch mouse_sensor_led_contrl
+mouse_sensor_led_contrl:
+	fetch 1,mem_sensor_led_style
+	rtneq UI_LED_STATE_BLINK_STOP
+	beq UI_LED_STATE_BLINK_DARKING,mouse_sensor_led_blink_state_darking
+mouse_sensor_led_blink_state_lighting:
+	call mouse_sensor_led_on
+	jam UI_LED_STATE_BLINK_DARKING,mem_sensor_led_style
+	jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count
+	rtn
+mouse_sensor_led_blink_state_darking:
+	call mouse_sensor_led_off
+	jam UI_LED_STATE_BLINK_LIGHTING,mem_sensor_led_style
+	jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count
+	rtn
+	
+mouse_sensor_led_blink_stop:
+mouse_sensor_reset:
+	setarg 0x8006
+	call twspi_write
+    nop 1000
+	jam 0x00,mem_mouse_sensor_timer_count
+	jam UI_LED_STATE_BLINK_STOP,mem_sensor_led_style
+	branch mouse_init_p32xx_id2_judge
+	
+mouse_p3212sensor_led_on:
+	setarg 0xa006
+	call twspi_write
+	setarg 0xa005
+	branch twspi_write
+mouse_sensor_led_on_global:
+	jam 0,mem_mouse_sensor_timer_count
+mouse_sensor_led_on:
+	fetch 1,mem_config_sensor_type
+	beq P3212,mouse_p3212sensor_led_on
+	setarg 0x0106
+	call twspi_write
+	setarg 0xa105
+	branch twspi_write
+	
+mouse_sensor_led_off_global:
+	jam 0,mem_mouse_sensor_timer_count	
+mouse_sensor_led_off:
+	setarg 0x0906
+	branch twspi_write
+mouse_sensor_start_blink:
+	jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count
+	jam UI_LED_STATE_BLINK_START,mem_sensor_led_style
+	rtn
+	
+mouse_check_hid_handshake_timer:
+	arg mem_hid_handshake_timer_count,regc
+	arg mouse_bt_hid_handshake,regb
+	branch timer_single_step
+
+mouse_check_discovery_timeout_timer:	
+	arg mem_mouse_discovery_timer,regc
+	arg mouse_check_discovery_timeout,regb
+	branch timer_single_step_2B
+
+mouse_check_direct_timeout_timer:	
+	arg mem_mouse_direct_timer,regc
+	arg mouse_check_direct_timeout,regb
+	branch timer_single_step_2B
+	
+mouse_check_no_data_timeout_timer:	
+	arg mem_mouse_no_data_timer,regc
+	arg mouse_check_no_data_timeout,regb
+	branch timer_single_step_2B
+	
+mouse_check_mouse_state_timer:
+	arg mem_mouse_statue_led_timer,regc
+	arg mouse_statue_led_off,regb
+	branch timer_single_step
+
+
+
+mouse_le_enable_att_list_timer:
+	arg mem_le_start_encrypt_timer,regc
+	arg mouse_le_enable_att_list,regb
+	branch timer_single_step
+
+mouse_24g_delay_timer:
+	arg mem_24g_enter_lpm_timer,regc
+	arg mouse_24g_delay,regb
+	branch timer_single_step
+
+mouse_ban_24g_pairing_timer:
+	arg mem_24g_pairing_timer_count,regc
+	arg mouse_ban_24g_pairing,regb
+	branch timer_single_step_2B
+mouse_ban_24g_pairing:
+mouse_24g_delay:
+	rtn
+
+
+mosue_dpi_led_blink_init:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_DPI_LED_BLINK
+	jam 10,mem_mouse_dpi_led_delay_count  //delay 1s led blink
+	fetch 1,mem_dpi_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	rtn
+
+
+mouse_dpi_led_blink_delay_timer:
+	arg mem_mouse_dpi_led_delay_count,regc
+	arg mouse_dpi_led_setting,regb
+	branch timer_single_step	
+mouse_dpi_led_setting:
+	fetch 1,mem_dpi_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	setarg LED_DPI_BLINK
+	store 2,mem_mouse_on_time
+	store 2,mem_mouse_off_time
+	arg 0,rega
+	fetcht 1,mem_mouse_dpi
+	increase 1,temp
+	storet 1,mem_mouse_blink_count
+	jam UI_LED_STATE_BLINK_START,mem_mouse_led_type
+	rtn
+	
+mouse_le_enable_att_list:	
+	fetch 1,mem_le_connect_status_flag
+	rtnbit1 LL_PAIRING_SUCCESS_FLAG
+	jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp
+	call ui_ipc_send_cmd
+	arg WRITE_REQ_ENABLE_FLAG,queue
+	branch mouse_le_enable_connect_flag
+
+
+mouse_check_discovery_timeout:
+	call mouse_stop_discovery
+	branch app_enter_hibernate
+
+mouse_check_direct_timeout:
+	call app_ble_stop_direct_adv
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	branch app_enter_hibernate
+
+mouse_check_no_data_timeout:
+	bmark1 mark_24g,check_51cmd_hibernate
+	branch mouse_disconnect
+
+	
+
+mouse_bb_event_discovery_btn:
+	bpatch patch1d_2,mem_patch1d
+	jam 0,mem_mouse_send_blank_timer
+	call mouse_disconnect
+	call mouse_le_clean_connect_flag
+	branch mouse_start_discovery
+
+
+
+mouse3_0_check_reconn_target:
+	fetch 6,mem_hci_plap
+	branch app_bt_start_discovery_short,blank
+	call mouse_reconn_setting_led_gpio
+	jam 0x17,mem_connection_options  //ssp
+	fetch 1,mem_ssp_enable
+	nbranch app_bt_start_reconnect,blank
+	jam 0x04,mem_connection_options  //no ssp
+	branch app_bt_start_reconnect
+	
+mouse4_0_check_reconn_target:
+	fetch 2,mem_mouse_direct_timeout
+	store 2,mem_mouse_direct_timer
+	call mouse_reconn_setting_led_gpio
+	call app_lpm_mult_disable
+	branch check_51cmd_adv
+
+mouse_reconn_setting_led_gpio:
+	setarg LED_RECONNECT_BLINK
+	store 2,mem_mouse_on_time
+	store 2,mem_mouse_off_time
+	branch mouse_setting_led_gpio_comman
+	
+mouse_discover_setting_led_gpio:
+	setarg LED_DISCOVERY_BLINK
+	store 2,mem_mouse_on_time
+	store 2,mem_mouse_off_time	
+mouse_setting_led_gpio_comman:
+	fetch 1,mem_device_flag
+	beq MODE_BT_DEVICE1,mouse_device_led1
+	beq MODE_BT_DEVICE2,mouse_device_led2
+	beq MODE_BT_DEVICE3,mouse_device_led3
+	rtn
+mouse_device_led1:
+	fetch 1,mem_config_device1_led_gpio
+	branch mouse_led_blink
+mouse_device_led2:
+	fetch 1,mem_config_device2_led_gpio
+	branch mouse_led_blink
+mouse_device_led3:
+	fetch 1,mem_config_device3_led_gpio
+mouse_led_blink:
+	store 1,mem_temp
+	call mouse_devce_led_off
+	fetch 1,mem_temp
+	store 1,mem_mouse_struct_led_gpio
+	arg 0,rega
+	jam UI_LED_STATE_BLINK_START,mem_mouse_led_type
+	branch ui_led_blink_start_global
+
+mouse_led_off:
+	arg 0,rega
+	branch ui_led_off_global
+mouse_led_on:
+	arg 0,rega
+	branch ui_led_on_global
+
+mouse4_0_bb_event_discovery_btn:
+	branch mouse_le_clean_connect_flag
+	
+mouse_bt_hid_handshake:
+	jam APP_HANDSHAKE_DONE,mem_app_handshake_flag
+	call app_lpm_mult_enable
+	call app_bt_store_reconn_info
+	setarg 0
+	store 2,mem_discovery_timeout_timer_count
+	store 1,mem_hid_handshake_timer_count
+	branch app_bt_enter_sniff
+
+mouse_check_reconn_target:
+	call mouse_cheak_select_device_by_switch
+	fetch 1,mem_device_flag
+	fetcht 1,mem_24g_device_number
+	isub temp,null
+	branch mouse_connect_24g_mode,zero
+	fetch 1,mem_xrecord_mode
+	beq REC_3_MODE,mouse3_0_check_reconn_target
+	beq REC_4_MODE,mouse4_0_check_reconn_target
+	branch mouse_start_discovery
+mouse_connect_24g_mode:
+	call mouse_start_24g_mode
+	rtnmark1 mark_24g
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	rtn
+	
+mouse_start_discovery:
+	bpatch patch1d_3,mem_patch1d
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_ADV,mouse_start_discovery_norandom
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_BLE_RANDOM_ADDRE,mouse_start_discovery_norandom
+	random pdata					//random ble addr
+	store 1,mem_le_lap+1
+mouse_start_discovery_norandom:
+	call app_lpm_mult_disable
+	fetch 2,mem_discovery_timeout
+	store 2,mem_mouse_discovery_timer
+	jam 6,mem_connection_options
+	setarg 0
+	store 2,mem_mouse_no_data_timer
+	store 2,mem_mouse_direct_timer
+	arg MOUSE_STORE_EEPROM_FLAG,queue
+	call mouse_enable_function_flag
+	call mouse_bt_discovery_button_down_disable
+	fetch 1,mem_device_option
+	isolate1 MODE_4_MOUSE,pdata
+	call check_51cmd_adv,true
+	fetch 1,mem_device_option
+	isolate1 MODE_3_MOUSE,pdata
+	call check_51cmd_start_discovery,true
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_DISCOVERY_SENSOR_LED,mouse_sensor_start_blink
+	branch mouse_discover_setting_led_gpio
+
+mouse_stop_discovery:
+	bpatch patch1d_4,mem_patch1d
+	fetch 1,mem_device_option
+	isolate1 MODE_4_MOUSE,pdata
+	call mouse_stop_le_adv,true
+	fetch 1,mem_device_option
+	isolate1 MODE_3_MOUSE,pdata
+	call mouse_stop_bt3_discovery,true
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_DISCOVERY_SENSOR_LED,mouse_sensor_led_blink_stop
+	branch mouse_devce_led_off
+mouse_stop_le_adv:
+	setarg 0
+	store 2,mem_mouse_direct_timer
+	branch check_51cmd_stop_adv
+mouse_stop_bt3_discovery:
+	setarg 0
+	store 2,mem_mouse_discovery_timer
+	branch check_51cmd_stop_discovery
+
+	
+
+
+
+mouse_store_remote_bdaddr:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_STORE_EEPROM_FLAG
+	arg MOUSE_STORE_EEPROM_FLAG,queue
+	call mouse_disable_function_flag
+	call mouse_check_device_addr
+mouse_unplug_clean_bdaddr:
+	call mouse_before_store_reconn_info
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_FLASH,mouse_store_flash_device_info
+	bbit1 MOUSE_ENABLE_EEPROM,mouse_store_eeprom_device_info	
+	rtn
+mouse_store_eeprom_device_info:
+	arg 88,temp
+	arg mem_device_flag,rega
+	arg MOUSE_INFO_EEPROM_OFFECT,regb
+	branch iicd_write_protect_eep_data
+
+mouse_check_device_addr:
+	fetch 1,mem_record_bt_mode
+	beq REC_4_MODE,mouse_check_le_device_addr
+	beq REC_3_MODE,mouse_check_bt_device_addr
+	rtn
+mouse_check_le_device_addr:
+	store 1,mem_device_addr_temp
+	fetch 6,mem_le_plap
+	branch mouse_check_bt_device_addr_common
+mouse_check_bt_device_addr:
+	store 1,mem_device_addr_temp
+	fetch 6,mem_plap
+mouse_check_bt_device_addr_common:
+	store 6,mem_device_addr_temp+1
+	fetch 7,mem_device_addr_temp
+	arg mem_device1_type,contr
+	arg 3,loopcnt
+mouse_check_device_addr_end:
+	ifetcht 7,contr
+	isub temp,null
+	branch mouse_clean_addr,zero
+	increase 22,contr
+	loop mouse_check_device_addr_end
+	rtn
+mouse_before_store_reconn_info:
+	arg mem_device1_type,rega
+	fetch 1,mem_device_flag
+	increase -1,pdata
+	mul32 pdata,29,pdata
+	iadd rega,rega
+	fetch 1,mem_record_bt_mode
+	istore 1,rega
+	beq REC_4_MODE,mouse_store_le_device
+	beq REC_3_MODE,mouse_store_bt_device
+	rtn
+	
+mouse_store_le_device:
+	fetch 6,mem_le_plap
+	istore 6,contw
+	arg mem_le_ltk,contr
+	call memcpy16
+	fetch 6,mem_le_lap
+	istore 6,contw
+	rtn
+mouse_store_bt_device:
+	fetch 6,mem_plap
+	istore 6,contw
+	arg mem_link_key,contr
+	branch memcpy16
+
+mouse_clean_addr:
+	increase -6,contr
+	copy contr,contw
+	fetcht 6,mem_device_addr_temp+1
+	increase 3,temp
+	istoret 6,contw
+	rtn
+
+
+
+mouse_eeprom_load_recon_info:
+	arg 88,temp
+	arg mem_device_flag,rega
+	arg MOUSE_INFO_EEPROM_OFFECT,regb
+	call iicd_read_eep_data
+mouse_select_reconn_device:
+	arg mem_device1_type,rega
+	fetch 1,mem_device_flag
+	fetcht 1,mem_24g_device_number
+	isub temp,null
+	rtn zero
+	increase -1,pdata
+	mul32 pdata,29,pdata
+	iadd rega,rega
+	ifetch 1,rega
+	store 1,mem_xrecord_mode
+	beq REC_3_MODE,mouse_load_bt_device
+	beq REC_4_MODE,mouse_load_le_device
+	rtn
+
+mouse_load_bt_device:
+	ifetch 6,contr
+mouse_load_bt_device_end:
+	store 6,mem_hci_plap
+	arg mem_link_key,contw
+	call memcpy16
+	branch check_link_key_load
+
+mouse_load_le_device:
+	ifetch 6,contr
+mouse_load_le_device_end:
+	store 6,mem_hci_plap
+	arg mem_le_ltk,contw
+	call memcpy16
+	ifetch 6,contr
+	store 6,mem_le_lap
+	rtn
+
+
+mouse_select_device:
+	fetch 1,mem_config_function_enable
+	bbit1 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON,mouse_select_device_by_button
+	bbit1 ENABLE_SELECT_DEVICE_BY_SWITCH,mouse_select_device_by_switch
+	branch mouse_select_device_by_combination_key
+
+mouse_select_device_by_combination_key:
+	call mouse_check_key_gpio
+	beq MOUSE_RM_BUTTON,mouse_select_device_commbination_key_down
+mouse_select_device_commbination_key_up:
+	jam 30,mem_combination_select_device_count	//combination key timer init 
+	fetch 1,mem_select_device_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue	
+	rtn
+	
+mouse_select_device_commbination_key_down:
+	call mouse_combination_select_device_timer
+	fetch 1,mem_select_device_button_statue
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_select_device_button_statue
+	branch mouse_select_device_enable
+
+mouse_combination_select_device_timer:
+	fetch 1,mem_combination_select_device_count
+	rtn blank
+	pincrease -1
+	store 1,mem_combination_select_device_count
+	nrtn blank
+	branch mouse_ready_reconnection_by_button
+	
+mouse_select_device_by_button:
+	fetch 1,mem_config_select_device_button_gpio
+	rtneq GPIO_DISABLE
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_get_bit
+	branch mouse_select_device_button_down,true
+mouse_select_device_button_up:
+	fetch 1,mem_select_device_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue	
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit1 MOUSE_LONG_BT_BUTTON_FLAG
+	branch mouse_ready_reconnection_by_button
+
+mouse_select_device_button_down:
+	fetch 1,mem_select_device_button_statue
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_select_device_button_statue
+	arg MOUSE_LONG_BT_BUTTON_FLAG,queue
+	branch mouse_disable_function_flag
+
+
+
+mouse_select_device_by_switch:
+	fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 ENABLE_SELECT_DEVICE_BY_SWITCH
+	fetch 1,mem_device_flag
+	beq MODE_BT_DEVICE1,mouse_select1_device
+	beq MODE_24G_DEVICE,mouse_select2_device
+	rtn
+mouse_cheak_select_device_by_switch:
+	fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 ENABLE_SELECT_DEVICE_BY_SWITCH
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_get_bit
+	branch mouse_cheak_select_24gdevice,true
+mouse_select_btdevice:
+	jam MODE_BT_DEVICE1,mem_device_flag
+	rtn
+mouse_cheak_select_24gdevice:
+	fetch 1,mem_24g_device_number
+	store 1,mem_device_flag
+	rtn
+mouse_select1_device:
+	fetcht 1,mem_config_select_device_button_gpio
+	nbranch mouse_ready_reconnection_by_button,true
+	rtn
+mouse_select2_device:
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_get_bit
+	branch mouse_select_device_button_down,true
+	rtn
+
+
+	
+
+mouse_ready_reconnection_by_button:
+	fetcht 1,mem_device_flag
+	increase 1,temp
+	fetch 1,mem_device_number
+	isub temp,null
+	ncall mouse_select_device_count_clean,positive
+	storet 1,mem_device_flag
+	jam 0,mem_link_key_exists
+	call mouse_store_device_number2eeprom
+	call mouse_select_device_enable
+//	call p_select_reconn_device
+	branch mouse_set_reconnection
+
+mouse_store_device_number2eeprom:
+	arg 1,temp
+	arg mem_device_flag,rega
+	arg 0,regb
+	branch iicd_write_eep_data
+
+mouse_set_reconnection:
+	call mouse_stop_bluetooth_mode
+	call mouse_select_device_disable
+	branch mouse_soft_reset
+mouse_stop_bluetooth_mode:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_RECONNECT,mouse_cancel_reconnect
+	bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect
+	bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect
+	branch mouse_stop_discovery
+
+mouse_disconnect:
+	bpatch patch1d_5,mem_patch1d
+	setarg 0
+	store 2,mem_mouse_no_data_timer
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect
+	rtn
+
+mouse_irtual_cable_unplug:
+	setarg 0x01
+	store 6,mem_plap
+	jam REC_3_MODE,mem_record_bt_mode
+	branch mouse_unplug_clean_bdaddr
+
+	
+mouse_cancel_reconnect:
+	call mouse_bt_cannel_reconn_enable
+	branch check_51cmd_bb_reconn_cancel
+
+mouse_bt_discovery_by_button:
+	fetch 1,mem_config_bt_button_gpio
+	rtneq GPIO_DISABLE
+	fetcht 1,mem_config_bt_button_gpio
+	call gpio_get_bit
+	branch mouse_bt_discovery_button_down,true
+mouse_bt_discovery_button_up:
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_combination_ui_button_count	//combination key timer init 	
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_bt_discovey_button_statue	
+	branch mouse_bt_discovery_button_down_disable
+mouse_bt_discovery_button_down:
+	call mouse_bt_discovry_timer
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_bt_discovey_button_statue
+	call check_51cmd_bb_reconn_cancel
+	branch mouse_bt_discovery_button_down_enable
+
+	
+mouse_bt_discovery_cheak:
+	fetch 1,mem_config_function_enable
+	bbit1 ENABLE_BT_BUTTON,mouse_bt_discovery_by_button
+mouse_bt_discovery_commbination_key:
+	call mouse_check_key_gpio
+	beq MOUSE_LMR_BUTTON,mouse_bt_discovery_commbination_key_down
+mouse_bt_discovery_commbination_key_up:
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_combination_ui_button_count	//combination key timer init 
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_bt_discovey_button_statue	
+	branch mouse_bt_discovery_button_down_disable
+	
+	
+mouse_bt_discovery_commbination_key_down:
+	call mouse_bt_discovry_timer
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_bt_discovey_button_statue
+	call check_51cmd_bb_reconn_cancel
+	branch mouse_bt_discovery_button_down_enable
+
+mouse_bt_discovry_timer:
+	arg mem_combination_ui_button_count,regc
+	arg mouse_long_button_bt_discovry,regb
+	branch timer_single_step
+	
+mouse_long_button_bt_discovry:
+	arg MOUSE_LONG_BT_BUTTON_FLAG,queue
+	call mouse_enable_function_flag
+	call app_evt_button_long_pressed
+	branch mouse_bb_event_discovery_btn
+
+
+mouse_cpi_enable:
+	arg MOUSE_CPI_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_cpi_disable:
+	arg MOUSE_CPI_FLAG,queue
+	branch mouse_disable_function_flag
+mouse_select_device_enable:
+	arg MOUSE_SELECT_DEVICE_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_select_device_disable:
+	arg MOUSE_SELECT_DEVICE_FLAG,queue
+	branch mouse_disable_function_flag
+mouse_bt_cannel_reconn_enable:
+	arg MOUSE_BT_CANNEL_RECONN_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_bt_cannel_reconn_disable:
+	arg MOUSE_BT_CANNEL_RECONN_FLAG,queue
+	branch mouse_disable_function_flag
+mouse_bt_discovery_button_down_enable:
+	arg MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_bt_discovery_button_down_disable:
+	arg MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,queue
+	branch mouse_disable_function_flag
+
+
+
+mouse_select_device_count_clean:
+	arg 1,temp
+	rtn
+
+mouse_enable_function_flag:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	qset1 pdata
+	store MOUSE_FLAG_LEN,mem_mouse_flag
+	rtn
+
+mouse_disable_function_flag:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	qset0 pdata
+	store MOUSE_FLAG_LEN,mem_mouse_flag
+	rtn
+	
+mouse_adc_read:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_ADC
+	fetch 1,mem_adc_read_timer
+	increase 1,pdata
+	store 1,mem_adc_read_timer
+	sub pdata,10,null              //1s read adc
+	rtn positive
+	jam 0,mem_adc_read_timer
+	call adc_set_mode
+	call vdd_calculate_by_mode
+	store 2,mem_mouse_vdd_now_vol
+	arg mem_mouse_vdd_calculate_set,rega
+	call adc_bat_percent_lowpower_out
+	fetch 1,mem_adc_power_flag
+	bbit1 1,mouse_power_down
+	bbit0 0,mouse_adc_no_low_voltage
+	branch mouse_adc_low_voltage
+mouse_adc_low_voltage:
+	arg MOUSE_LOW_VOLTAGE_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_adc_no_low_voltage:
+	arg MOUSE_LOW_VOLTAGE_FLAG,queue
+	branch mouse_disable_function_flag
+
+mouse_low_voltage_led_timer:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_LOW_VOLTAGE_FLAG
+	fetch 1,mem_config_low_voltage_alarm_gpio
+	store 1,mem_mouse_struct_led_gpio
+	fetch 1,mem_adc_low_volatage_led_timer_count
+	pincrease 1
+	store 1,mem_adc_low_volatage_led_timer_count
+	sub pdata,20,null
+	ncall mouse_adc_low_volatage_led_timer_count_clean,positive
+	beq 2,mouse_low_voltage_led_on
+	beq 4,mouse_low_voltage_led_off
+	beq 6,mouse_low_voltage_led_on
+	beq 8,mouse_low_voltage_led_off
+	rtn
+mouse_adc_low_volatage_led_timer_count_clean:
+	jam 1,mem_adc_low_volatage_led_timer_count
+	branch mouse_low_voltage_led_off
+mouse_low_voltage_led_on:
+	arg 0,rega
+	jam UI_LED_STATE_LIGHTING,mem_mouse_led_type
+	branch ui_led_on_global
+mouse_low_voltage_led_off:
+	arg 0,rega
+	jam UI_LED_STATE_LIGHTING,mem_mouse_led_type
+	branch ui_led_off_global
+
+mouse_g24_package_data:
+	call mouse_motion
+	nrtn user
+	arg 7,rega	//length
+	arg mem_mouse_key,regb //tx buff
+	rtn
+	
+mouse_g24_enter_lpm:
+	fetch 1,mem_mouse_24g_enter_lpm_enable
+	rtn blank
+	//do not enter lpm when condition is unallowed
+	fetcht 1,mem_dpi_button_gpio
+	call gpio_get_bit
+	call mouse_24g_dpi_delay_init,true
+	fetch 1,mem_24g_enter_lpm_timer
+	nrtn blank
+	call mouse_check_key_gpio
+	nrtn blank
+	branch g24_lpm_long_sleep
+
+mouse_24g_dpi_delay_init:
+	fetch 1,mem_dpi_button_gpio
+	rtneq UI_BUTTON_GPIO_DISABLE
+	jam 10,mem_24g_enter_lpm_timer
+	rtn
+
+	
+mouse_load_flash_info_cheak:
+	call mouse_load_flash_flag
+	fetch 2,mem_store_flag
+	arg EEPROM_INIT_FLAG,temp
+	isub temp,null
+	branch mouse_load_flash_device_info,zero
+	storet 2,mem_store_flag
+	call mouse_ble_init_address
+	branch mouse_store_flash_device_info
+mouse_ble_init_address:
+	fetch 6,mem_le_lap
+	store 6,mem_device1_locall_addr
+	add pdata,0x0100,pdata
+	store 6,mem_device2_locall_addr
+	add pdata,0x0100,pdata
+	store 6,mem_device3_locall_addr
+	rtn
+	
+	
+mouse_load_flash_flag:
+	setarg mem_store_flag
+	arg mem_mouse_information_start,temp
+	isub temp,temp
+	fetch 3,mem_flash_base
+	iadd temp,pdata
+	arg 2,temp
+	arg mem_store_flag,rega
+	branch spid_read_flash
+
+	
+mouse_load_flash_device_info:
+	setarg mem_mouse_information_end
+	arg mem_mouse_information_start,temp
+	isub temp,temp
+	fetch 3,mem_flash_base
+	arg mem_mouse_information_start,rega
+	call spid_read_flash
+	call mouse_select_reconn_device
+	fetch 4,mem_mouse_24g_addr
+	call g24_head_ptr2regc
+	branch g24_store_mem_addr
+
+mouse_store_flash_device_info:	
+	setarg mem_mouse_information_end
+	arg mem_mouse_information_start,temp
+	isub temp,temp
+	arg mem_mouse_information_start,rega
+	fetch 3,mem_flash_base
+	branch flash_write
+
+mouse_store_eerpom_dpi:
+	arg 1,temp
+	arg mem_mouse_dpi,rega
+	arg MOUSE_DPI_EEPROM_OFFECT,regb
+	branch iicd_write_protect_eep_data
+
+mouse_load_eeprom_dpi:
+	arg 1,temp
+	arg mem_mouse_dpi,rega
+	arg MOUSE_DPI_EEPROM_OFFECT,regb
+	branch iicd_read_eep_data
+
+mouse_statue_cheak_timer:
+	rtnmark1 mark_24g
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_STATUE_UP
+	fetch 1,mem_mouse_1step_up_count
+	pincrease 1
+	and pdata,0x07,pdata
+	store 1,mem_mouse_1step_up_count
+	rtnne 0x07         //800ms read sensor
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,mouse_check_statue_up
+	bbit1 UI_STATE_BLE_CONNECTED,mouse_check_statue_up
+	rtn
+
+
+
+//mosue 
+mouse_check_statue_up:
+	bpatch patch1d_6,mem_patch1d
+	fetch 1,mem_mouse_2step_up_count
+	nrtn blank
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_STATUE_UP_FLAG
+	fetch 1,mem_sensor_squal_reg
+	call sensor_read
+	store 1,mem_sensor_iqc
+	sub pdata,0x10,null
+	branch mouse_statue_up_timer_init,positive
+	jam 0,mem_mouse_2step_up_count
+	rtn
+
+mouse_statue_up_timer_init:
+	jam 30,mem_mouse_2step_up_count
+	rtn
+mouse_statue_up_timer:
+	arg mem_mouse_2step_up_count,regc
+	arg mouse_statue_up,regb
+	branch timer_single_step
+
+mouse_statue_up:
+	fetch 1,mem_sensor_squal_reg
+	call twspi_read
+	sub pdata,0x10,null
+	nrtn positive
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_STATUE_UP_FLAG
+	arg MOUSE_STATUE_UP_FLAG,queue
+	call mouse_disable_function_flag
+	jam 0,mem_lpm_mult
+	jam 30,mem_mouse_statue_led_timer         // led on3s
+	call mouse_devce_led_off
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_STATUE_UP_THREE_LED,mouse_three_device_statue_up
+mouse_two_device_statue_up:
+	fetch 1,mem_device_flag
+	beq MODE_BT_DEVICE1,mouse_device1_led_on  		//device_1
+	beq MODE_BT_DEVICE2,mouse_device_blink_led_init		//device_2
+	rtn
+mouse_three_device_statue_up:
+	fetch 1,mem_device_flag
+	beq MODE_BT_DEVICE1,mouse_device1_led_on  		//device_1
+	beq MODE_BT_DEVICE2,mouse_device2_led_on		//device_2
+	beq MODE_BT_DEVICE3,mouse_device3_led_on		//device_3
+	rtn
+	
+mouse_device_blink_led_init:
+	fetch 1,mem_config_device1_led_gpio
+	branch mouse_led_blink
+
+
+
+mouse_statue_led_off:
+	jam 0x20,mem_lpm_mult
+	branch mouse_devce_led_off
+
+
+
+mouse_devce1_led_off:
+	fetch 1,mem_config_device1_led_gpio
+	rtneq GPIO_DISABLE
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_off
+
+mouse_devce2_led_off:
+	fetch 1,mem_config_device2_led_gpio
+	rtneq GPIO_DISABLE
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_off
+	
+mouse_devce_led_off:
+	call mouse_led_off
+	call mouse_devce1_led_off
+	call mouse_devce2_led_off
+mouse_devce3_led_off:
+	fetch 1,mem_config_device3_led_gpio
+	rtneq GPIO_DISABLE
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_off
+
+mouse_device1_led_on:
+	fetch 1,mem_config_device1_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_on
+mouse_device2_led_on:
+	fetch 1,mem_config_device2_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_on
+mouse_device3_led_on:
+	fetch 1,mem_config_device3_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_on
+
+
+
+mouse_polling_device:
+	bpatch patch1d_7,mem_patch1d
+	fetch 1,mem_reconn_times
+	increase -1,pdata
+	store 1,mem_reconn_times
+	fetcht 1,mem_device_flag
+	increase 1,temp
+	fetch 1,mem_device_number
+	isub temp,null
+	ncall mouse_select_device_count_clean,positive
+	storet 1,mem_device_flag
+	jam 0,mem_link_key_exists
+	call mouse_store_device_number2eeprom
+	call mouse_before_store_reconn_info
+	branch mouse_check_reconn_target
+	
+mouse_power_down:
+	call mouse_devce_led_off
+	setarg 0
+	store 8,mem_gpio_wakeup_low
+	branch lpm_hibernate
+
+
+
+
+
+
+
+
+
+
+remote_car_init:
+	rtn wake	
+	hfetch 1,core_gpio_sel1
+	and_into 0xf0,pdata
+	hstore 1,core_gpio_sel1
+	call keyscan_key_init
+	setarg remote_car_le_before_hibernate
+	store 2,mem_cb_before_hibernate
+	
+	setarg remote_car_process_lpm_before
+	store 2,mem_cb_before_lpm	
+	
+	setarg remote_car_scale_process_idle	
+	store 2,mem_cb_idle_process	
+	
+	setarg remote_car_scale_process_bb_event 
+	store 2,mem_cb_bb_event_process	
+	
+	setarg app_get_lpm_wake_lock
+	store 2,mem_cb_check_wakelock	
+
+	call g24_head_ptr2regc
+	setarg remote_car_g24_package_data
+	add regc,offset_24g_cb_data,contw
+	istore 2,contw
+	
+	setarg remote_car_g24_enter_lpm
+	add regc,offset_24g_cb_lpm_prepare,contw
+	istore 2,contw
+	
+	setarg remote_car_process_lpm_before
+	add regc,offset_24g_cb_lpm_before,contw
+	istore 2,contw
+
+	setarg remote_car_event_timer
+	store 2,mem_cb_event_timer
+	
+	setarg remote_car_power_off_signal
+	store 2,mem_remote_car_power_off_cb
+	
+	setarg remote_car_soft_switch_power_on_signal
+	store 2,mem_remote_car_power_standby_cb
+	
+	setarg remote_car_send_key_data
+	store 2,mem_cb_remote_car_keyscan
+	
+	bpatch patch1e_0,mem_patch1e
+	call remote_car_init_environment
+	call queue_init
+	jam 2,mem_lpm_mult
+	fetch 1,mem_remote_car_config_soft_switch_enable
+	store 1,mem_remote_car_hard_soft_switch
+	beq HARD_SWITCH, remote_car_hard_switch_power_on_signal
+	fetch 1,mem_remote_car_config_soft_switch_gpio
+	store 1,mem_ui_button_gpio
+remote_car_soft_switch_power_on_init:
+	call remote_car_ui_led_init
+	call ui_button_init
+	call ui_button_polling
+	jam POWER_STARTING,mem_remote_car_power_state
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+	branch app_enter_hibernate
+
+
+
+remote_car_hard_switch_power_on_signal:
+	jam POWER_STANDBY,mem_remote_car_power_state
+remote_car_soft_switch_power_on_signal:
+	call remote_car_ui_led_init
+//	fetch 1,mem_remote_car_led_map
+	arg 0,rega
+	call ui_led_blink_start_global
+remote_car_connect_24g_mode:
+	branch g24_auto_pair_start
+
+remote_car_power_off_signal:	
+	branch remote_car_ui_led_init
+	
+remote_car_ui_led_init:
+	bpatch patch1e_1,mem_patch1e
+	fetch 1,mem_remote_car_config_connect_led_gpio
+	bne INVALID_PIN_NUM,remote_car_pairing_led_gpio_set
+remote_car_ui_led_init_1:
+	fetcht 1, mem_remote_car_led_map
+	branch gpio_config_output
+remote_car_pairing_led_gpio_set:
+	store 1,mem_remote_car_led_map
+	branch remote_car_ui_led_init_1
+
+
+remote_car_init_environment:
+	call g24_set_device_addr
+	fetch 2,mem_remote_car_no_data_timeout
+	store 2,mem_remote_car_no_data_timer
+	branch remote_car_get_adc_default_data
+
+remote_car_le_before_hibernate:
+//	call keyscan_scan_key
+//	fetch 2, mem_key_value_temp
+//	branch remote_car_in_enter_hibernate,blank
+//	branch app_enter_hibernate
+remote_car_in_enter_hibernate:	
+	call gpio_set_before_lpm_common
+	call remote_car_process_lpm_before
+	branch app_enter_hibernate
+
+remote_car_process_lpm_before:
+	branch keyscan_process_lpm_before
+
+remote_car_g24_enter_lpm:
+	fetch 1,mem_remote_car_24g_enter_lpm_enable
+	rtn blank
+	//do not enter lpm when condition is unallowed
+	branch g24_lpm_long_sleep
+
+remote_car_process_auto_pair_exit:
+	rtn
+
+remote_car_key_scan_process:
+	branch keyscan_key_process
+
+remote_car_scale_process_idle:
+	call remote_car_rocker_process
+	call remote_car_24g_status_process
+	branch remote_car_key_scan_process
+
+remote_car_scale_process_bb_event:
+	copy regc,pdata
+	beq BT_EVT_BUTTON_UP,app_event_button_up
+	beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed
+	beq BT_EVT_24G_PAIRING_COMPLETE,remote_car_24g_pairing_complete
+	beq BT_EVT_24G_ATTEMPT_SUCCESS,remote_car_24g_attempt_success
+	beq BT_EVT_24G_ATTEMPT_FAIL,remote_car_24g_attempt_fail
+	rtn
+
+remote_car_24g_attempt_fail:
+	jam 1,mem_remote_car_24g_enter_lpm_enable
+	rtn
+
+remote_car_24g_pairing_complete:
+	jam 1,mem_remote_car_24g_enter_lpm_enable
+	jam WORK_PAIRED,mem_remote_car_24g_auto_work_step
+	jam WORK_PAIRED,mem_remote_car_24g_pair_success_flag
+	rtn
+
+remote_car_24g_attempt_success:
+	jam 1,mem_remote_car_24g_enter_lpm_enable
+	jam WORK_PAIRED,mem_remote_car_24g_auto_work_step
+	jam WORK_PAIRED,mem_remote_car_24g_pair_success_flag
+	rtn
+
+remote_car_24g_status_process:
+	fetch 1,mem_remote_car_24g_auto_work_step
+	rtneq POWER_ON
+	fetch 1,mem_remote_car_24g_status
+	rtneq WORK_PAIRED
+	jam WORK_PAIRED,mem_remote_car_24g_status
+remote_car_scale_process_paired:
+	arg 0,rega
+	branch ui_led_off_global
+remote_car_scale_process_shutdown:
+	arg 0,rega
+	call ui_led_off_global
+	call remote_car_ui_led_init
+	branch app_enter_hibernate
+	
+remote_car_event_timer:
+	call app_power_timer
+	branch remote_car_no_data_timer
+
+remote_car_no_data_timer:
+	fetch 1,mem_remote_car_config_timeout_shutdown_enable
+	rtn blank
+	arg mem_remote_car_no_data_timer,regc
+	arg remote_car_scale_process_shutdown,regb
+	branch timer_single_step_2B
+	
+////////////////////////////////////rocker/////////////////////////////
+remote_car_get_adc_default_data:
+	call remote_car_rocker_get_x
+	storet 2,mem_current_vdd_value_default_mid_x
+	call remote_car_rocker_get_y
+	storet 2,mem_current_vdd_value_default_mid_y
+	rtn
+remote_car_rocker_data_get:
+remote_car_rocker_get_x:
+	fetch 2,mem_current_vdd_value_default_mid_x
+	store 2,mem_current_vdd_value_default_mid_temp
+	call remote_car_get_adc_from_gpio6
+	call remote_car_rocker_get_value
+	store 1,mem_rocker_status
+remote_car_rocker_get_y:
+	fetch 2,mem_current_vdd_value_default_mid_y
+	store 2,mem_current_vdd_value_default_mid_temp
+	call remote_car_get_adc_from_gpio7
+	call remote_car_rocker_get_value
+	store 1,mem_rocker_status+1
+	rtn
+remote_car_rocker_get_value:
+	fetch 2,mem_current_vdd_default_range
+	copy pdata,rega
+	fetch 2,mem_current_vdd_value_default_mid_temp
+	call remote_car_rocker_mid_value_adjust
+	fetch 1,mem_rocker_work_status
+	nbranch remote_car_rocker_translate_key,blank
+	nrtn positive
+	fetcht 2,mem_current_vdd_value_default_mid_temp
+	rtn	
+remote_car_rocker_mid_value_adjust:
+	isub temp,pdata
+	branch remote_car_rocker_mid_adjust_positive,positive
+	sub pdata,0,pdata		//negative adjust
+	jam 1,mem_rocker_negative_flag
+	isub rega,null
+	rtn
+remote_car_rocker_mid_adjust_positive:
+	jam 0,mem_rocker_negative_flag
+	isub rega,null
+	rtn
+remote_car_rocker_translate_key:
+	nbranch remote_car_rocker_middle_key,positive
+	fetch 1,mem_rocker_negative_flag
+	nbranch remote_car_rocker_negative_key,blank
+remote_car_rocker_positive_key:	
+	setarg ROCKER_POSITIVE_KEY
+	rtn
+remote_car_rocker_negative_key:
+	setarg ROCKER_NEGATIVE_KEY
+	rtn
+remote_car_rocker_middle_key:
+	setarg ROCKER_MIDDLE_KEY
+	rtn
+remote_car_get_adc_from_gpio6:
+	jam 0x33,mem_adc_channel
+	branch adc_set_mode
+remote_car_get_adc_from_gpio7:
+	jam 0x34,mem_adc_channel
+	branch adc_set_mode
+
+
+remote_car_rocker_process:
+	fetch 1,mem_remote_car_config_check_way
+	rtnne CAR_REMOTE_CHECK_ROCKER	
+remote_car_read_rocker_check_start:
+	bpatch patch1e_2,mem_patch1e
+	jam 1,mem_rocker_work_status
+	call remote_car_rocker_data_get
+	fetch 2,mem_rocker_status
+	fetcht 2,mem_rocker_last_status
+	isub temp,null
+	rtn zero
+	store 2,mem_rocker_last_status
+	call remote_car_rocker_x_to_key
+	branch remote_car_rocker_y_to_key
+	
+remote_car_rocker_x_to_key:
+	fetch 1,mem_rocker_x_status
+	branch rocker_to_queue_set_0,blank
+	increase -1,pdata
+	branch remote_car_rocker_to_key
+remote_car_rocker_y_to_key:
+	fetch 1,mem_rocker_y_status
+	branch rocker_to_queue_set_2,blank
+	increase 1,pdata
+remote_car_rocker_to_key:
+	copy pdata,queue
+	arg 1,rega
+	branch remote_car_send_key_data
+	
+rocker_to_queue_set_0:
+	arg 0,queue
+	arg 0,rega
+	branch remote_car_send_key_data
+rocker_to_queue_set_2:
+	arg 2,queue
+	arg 0,rega
+	branch remote_car_send_key_data
+	
+remote_car_send_key_data:
+	copy rega,pdata
+	store 1,mem_remote_key_status
+	fetch 1,mem_remote_car_24g_auto_work_step
+	beq POWER_ON,g24_auto_pair_start
+	fetch 2,mem_remote_car_no_data_timeout
+	store 2,mem_remote_car_no_data_timer
+	fetch 1,mem_remote_key_status
+	branch remote_car_key_is_release,blank
+remote_car_key_is_press:
+	bpatch patch1e_3,mem_patch1e
+	arg 0,rega
+	call ui_led_on_global
+remote_car_attack_key_press:
+	copy queue,pdata
+	beq 4,remote_car_send_attack_key4_press
+	beq 5,remote_car_send_attack_key5_press
+	beq 6,remote_car_send_fire_key6_press
+//	fetch 1,mem_remote_car_config_check_way
+//	rtneq CAR_REMOTE_CHECK_ROCKER
+remote_car_motor_key_press:
+	call remote_car_device_layout_select
+	beq CONTROL_F_B_TEN,remote_car_single_motor_key_is_press
+	beq CONTROL_L_R_TEN,remote_car_double_motor_key_press
+	beq CONTROL_L_R_LR,remote_car_single_motor_key_is_press
+	rtn
+	
+remote_car_single_motor_key_is_press:
+	copy queue,pdata
+	beq 0,remote_car_send_motor1_key0_press
+	beq 1,remote_car_send_motor1_key1_press
+	beq 2,remote_car_send_motor2_key2_press
+	beq 3,remote_car_send_motor2_key3_press
+	rtn
+	
+remote_car_double_motor_key_press:
+	copy queue,pdata
+	beq 0,remote_car_send_double_motor_key0_press
+	beq 1,remote_car_send_double_motor_key1_press
+	beq 2,remote_car_send_double_motor_key2_press
+	beq 3,remote_car_send_double_motor_key3_press
+	rtn
+
+remote_car_key_is_release:
+	bpatch patch1e_4,mem_patch1e
+	arg 0,rega
+	call ui_led_off_global
+remote_car_attack_key_release:
+	copy queue,pdata
+	beq 4,remote_car_send_attack_key4_rel
+	beq 5,remote_car_send_attack_key5_rel
+//	fetch 1,mem_remote_car_config_check_way
+//	rtneq CAR_REMOTE_CHECK_ROCKER
+remote_car_motor_key_release:
+	call remote_car_device_layout_select
+	beq CONTROL_F_B_TEN,remote_car_single_motor_key_rel
+	beq CONTROL_L_R_TEN,remote_car_double_motor_key_rel
+	beq CONTROL_L_R_LR,remote_car_single_motor_key_rel
+	rtn
+
+remote_car_device_layout_select:
+	fetch 1,mem_remote_car_config_layout
+	fetcht 1,mem_remote_car_config_key_map
+	ior temp,pdata
+	rtn
+
+//cross key,control front-back motor layout
+remote_car_send_motor1_key0_press:	//front
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload
+	branch remote_car_send_key
+remote_car_send_motor1_key1_press:	//back
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload
+	branch remote_car_send_key
+remote_car_send_motor2_key2_press:	//left
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+remote_car_send_motor2_key3_press:	//right
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+
+//cross key,control left-right motor layout
+remote_car_send_double_motor_key0_press:	//front
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+remote_car_send_double_motor_key1_press:	//back
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+remote_car_send_double_motor_key2_press:	//left
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+remote_car_send_double_motor_key3_press:	//right
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+	
+//attack motor control
+remote_car_send_attack_key4_press:	//attack left
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor3_payload
+	branch remote_car_send_key
+remote_car_send_attack_key5_press:	//attack right
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor3_payload
+	branch remote_car_send_key
+
+remote_car_send_fire_key6_press:
+	jam 0x01,mem_remote_car_24g_fire_send_payload
+	branch remote_car_send_attack
+
+remote_car_single_motor_key_rel:
+	copy queue,pdata
+	beq 0,remote_car_send_motor1_key0_rel
+	beq 1,remote_car_send_motor1_key1_rel
+	beq 2,remote_car_send_motor2_key2_rel
+	beq 3,remote_car_send_motor2_key3_rel
+	rtn
+
+remote_car_double_motor_key_rel:
+	copy queue,pdata
+	beq 0,remote_car_send_double_motor_key0_rel
+	beq 1,remote_car_send_double_motor_key1_rel
+	beq 2,remote_car_send_double_motor_key2_rel
+	beq 3,remote_car_send_double_motor_key3_rel
+	rtn
+
+remote_car_send_motor1_key0_rel:
+remote_car_send_motor1_key1_rel:
+	jam MOTOR_STOP,mem_remote_car_24g_motor1_payload
+	branch remote_car_send_key
+remote_car_send_motor2_key2_rel:
+remote_car_send_motor2_key3_rel:
+	jam MOTOR_STOP,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+	
+remote_car_send_double_motor_key0_rel:
+remote_car_send_double_motor_key1_rel:
+remote_car_send_double_motor_key2_rel:
+remote_car_send_double_motor_key3_rel:
+	jam MOTOR_STOP,mem_remote_car_24g_motor1_payload
+	jam MOTOR_STOP,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+	
+remote_car_send_attack_key4_rel:
+remote_car_send_attack_key5_rel:
+	jam MOTOR_STOP,mem_remote_car_24g_motor3_payload
+	branch remote_car_send_key
+
+remote_car_send_key:
+	arg mem_remote_car_24g_motor_packet,rega
+	branch queue_push
+remote_car_send_attack:
+	arg mem_remote_car_24g_fire_packet,rega
+	branch queue_push
+
+remote_car_g24_package_data:
+	fetch 1,mem_remote_car_24g_pair_success_flag
+	beq WORK_PAIRED,remote_car_g24_send_empty
+	arg mem_remote_car_24g_tx_temp,rega
+	call queue_pop
+	nbranch remote_car_moto_data,user
+remote_car_g24_package_data_continue:
+	arg mem_remote_car_24g_tx_temp,contr
+	ifetch 1,contr
+	copy pdata,rega
+	arg mem_remote_car_24g_tx_temp+1,regb
+	//rega: length
+	//regb: tx buffer
+	rtn
+	
+remote_car_g24_send_empty:
+	jam 0,mem_remote_car_24g_pair_success_flag
+	enable user
+	arg 1,rega
+	arg mem_remote_car_empty_packet,regb
+	rtn
+	
+remote_car_moto_data:
+	fetch 1,mem_remote_car_24g_tx_temp+3	//cmd
+	beq CAR_CMD_L_R_MOTOR_CONTROL,remote_car_moto_data_next
+	beq CAR_CMD_F_B_MOTOR_CONTROL,remote_car_moto_data_next
+	rtn
+remote_car_moto_data_next:
+	fetch 1,mem_remote_car_24g_tx_temp+6	//data moto1
+	nbranch remote_car_moto_data_enable_user,blank
+	fetch 1,mem_remote_car_24g_tx_temp+8	//data moto2
+	nbranch remote_car_moto_data_enable_user,blank
+	fetch 1,mem_remote_car_24g_tx_temp+10	//data moto3
+	nbranch remote_car_moto_data_enable_user,blank
+	rtn
+remote_car_moto_data_enable_user:
+	enable user
+	branch remote_car_g24_package_data_continue
+
+
+
+
+
+
+
+shutter_init:
+	rtn wake	
+	hfetch 1,core_gpio_sel1
+	and_into 0xfc,pdata
+	hstore 1,core_gpio_sel1
+	setarg shutter_le_before_hibernate
+	store 2,mem_cb_before_hibernate
+
+	setarg shutter_process_lpm_before
+	store 2,mem_cb_before_lpm
+	
+	setarg app_enter_hibernate
+	store 2,mem_cb_discovry_timeout
+	
+	setarg shutter_process_idle
+	store 2,mem_cb_idle_process
+		
+	setarg shutter_process_bb_event 
+	store 2,mem_cb_bb_event_process
+
+	setarg shutter_le_scale_lpm_lock
+	store 2,mem_cb_check_wakelock
+	
+	setarg ble_shutter_receive_data
+	store 2,mem_cb_att_write
+
+	setarg shutter_le_bb_event_timer
+	store 2,mem_cb_event_timer
+
+	setarg shutter_key_change
+	store 2,mem_cb_shutter_keycan
+
+	setarg shutter_soft_swtich_power_on
+	store 2,mem_shutter_soft_switch_poweron_callback_function
+	setarg shutter_soft_swtich_power_off
+	store 2,mem_shutter_soft_switch_poweroff_callback_function
+
+	call le_modified_name
+	call shutter_load_bluetooth_config_by_user_config
+	call shutter_init_bluetooth_config
+	call shutter_init_param	
+	call keyscan_key_init
+	call shutter_load_buffer_config_form_DataRom
+	call queue_init
+	call ui_led_init_global
+	call shutter_load_bluetooth_config
+	call shutter_load_bluetooth_config_by_eeprom
+	
+	bpatch patch1e_5,mem_patch1e
+	call classic_shutter_load_reconn_info
+	fetch 1, mem_shutter_hard_soft_switch_case
+	beq HARD_SWITCH, shutter_hart_swtich_power_on
+	fetch 1,mem_shutter_soft_switch_button_gpio
+	store 1,mem_ui_button_gpio
+	branch ui_soft_swtich_init
+
+/**************hard swtich function**************/
+shutter_hart_swtich_power_on:
+	jam UI_BUTTON_GPIO_DISABLE,mem_ui_button_gpio
+	jam SS_STATE_POWER_ON,mem_shutter_soft_switch_power_state
+	branch shutter_start_reconnect
+/****************************/
+
+/**************lpm lock callback function**************/
+shutter_le_scale_lpm_lock:
+	fetch 1,mem_shutter_soft_switch_power_state
+	beq SS_STATE_POWER_OFF,app_get_lpm_wake_lock
+	call l2cap_malloc_get_full_map
+	fetch 1,mem_used_map
+	nbranch app_get_lpm_wake_lock,blank
+	branch app_put_lpm_wake_lock
+/****************************/
+
+/**************c512bt event callback function*************/
+shutter_process_bb_event:
+	copy regc,pdata
+/**************classic shutter event*****************/
+	beq BT_EVT_BB_CONNECTED,classic_shutter_process_baseband_connect
+	beq BT_EVT_BB_DISCONNECTED,classic_shutter_process_baseband_disconnect
+	beq BT_EVT_RECONN_FAILED,classic_shutter_process_reconnect_failed
+	beq BT_EVT_SETUP_COMPLETE,classic_shutter_process_setup_complete
+	beq BT_EVT_HID_CONNECTED,classic_shutter_process_hid_connect
+	beq BT_EVT_HID_DISCONNECTED,classic_shutter_process_hid_disconnect
+	beq BT_EVT_HID_HANDSHAKE,classic_shutter_process_hid_handshake
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,classic_shutter_process_reconnect_page_timeout
+	beq BT_EVT_VIRTUAL_CABLE_UNPLUG,classic_shutter_process_virtual_cable_unplug
+	beq BT_EVT_REMOTE_UNSNIFF,classic_shutter_process_remote_unsniff
+	beq BT_EVT_STORE_NVRAM,classic_shutter_process_store_reconnect_information
+/**************ble shutter event*****************/
+	beq BT_EVT_LE_CONNECTED,ble_shutter_process_baseband_connect
+	beq BT_EVT_LE_DISCONNECTED,ble_shutter_process_baseband_disconnect
+	beq BT_EVT_LE_RECONNECT_COMPLETE,ble_shutter_process_reconnect_complete
+	beq BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,ble_shutter_process_parse_connect_parameter_update_response
+/***************soft swtich event****************/
+	beq BT_EVT_BUTTON_LONG_PRESSED,shutter_process_soft_swtich_button_long_press
+	beq BT_EVT_BUTTON_DOWN,shutter_process_soft_swtich_button_down
+	beq BT_EVT_BUTTON_UP,shutter_process_soft_swtich_button_up
+	rtn
+/****************************/
+
+
+/******************classic shutter event**********************/
+classic_shutter_process_baseband_connect:
+	jam 0,mem_classic_shutter_hid_disconn_count
+	jam 0,mem_classic_shutter_cable_unplug_conut	
+	rtn
+
+
+classic_shutter_process_baseband_disconnect:
+	call classic_shutter_disconnect_clear_flag
+	branch classic_shutter_process_reconnect_failed
+
+classic_shutter_disconnect_clear_flag:
+	jam APP_HANDSHAKE_NULL,mem_app_handshake_flag
+	jam 0,mem_hid_handshake_timer_count
+	jam 0,mem_unsniff2sniff_timer_count
+	jam 0,mem_classic_shutter_cable_unplug_conut
+	jam 0,mem_classic_shutter_hid_disconn_count
+	branch queue_init
+
+
+classic_shutter_process_reconnect_failed:
+	call app_disconn_reason_clear
+	branch shutter_start_bluetooth_discovery
+
+
+classic_shutter_process_setup_complete:
+	call shutter_stop_bluetooth_discovery
+	branch app_led_stop_blink
+
+
+classic_shutter_process_hid_connect:
+	setarg HID_HANDSHAKE_TIMEOUT
+	store 1,mem_hid_handshake_timer_count
+	rtn	
+
+
+classic_shutter_process_hid_disconnect:
+	jam 0,mem_classic_shutter_cable_unplug_conut	
+	setarg FLAG_SHUTTER_HID_DISCONN_TIMEOUT
+	store 1,mem_classic_shutter_hid_disconn_count
+	rtn
+
+
+classic_shutter_process_hid_handshake:
+	fetch 1,mem_app_handshake_flag
+	rtneq APP_HANDSHAKE_DONE
+	jam APP_HANDSHAKE_DONE,mem_app_handshake_flag
+	call app_lpm_mult_enable
+	call app_store_reconn_info
+	call shutter_stop_bluetooth_discovery
+	call app_led_off
+	branch app_bt_enter_sniff
+
+
+classic_shutter_process_reconnect_page_timeout:
+	branch classic_shutter_process_reconnect_failed
+
+
+classic_shutter_process_virtual_cable_unplug:
+	setarg FLAG_SHUTTER_CABLE_UNPLUG_TIMEOUT
+	store 1,mem_classic_shutter_cable_unplug_conut
+	rtn
+
+
+classic_shutter_process_remote_unsniff:
+	branch app_start_auto_sniff
+
+
+/***************classic shutter store reconn info***********************/
+classic_shutter_process_store_reconnect_information:
+	arg NVRAM_EEPROM_OFFSET,regb
+	fetch 1,mem_nv_data_number
+	mul32 pdata,34,temp
+	fetch 2,mem_nv_data_ptr
+	copy pdata,rega
+	branch iicd_write_eep_data
+
+classic_shutter_load_reconn_info:
+	arg NVRAM_EEPROM_OFFSET,regb
+	fetch 1,mem_shutter_bluetooth_type
+	rtnbit0 CLASSIC_SHUTTER
+	fetch 1,mem_nv_data_number
+	rtn blank
+	mul32 pdata,34,temp
+	fetch 2,mem_nv_data_ptr
+	copy pdata,rega
+	branch iicd_read_eep_data
+/**************************************/
+
+/******************ble shutter event**********************/
+ble_shutter_process_baseband_connect:
+	call shutter_stop_bluetooth_discovery
+	setarg 0
+	store 2,mem_ble_shutter_reconn_timer
+	branch app_led_off
+
+
+ble_shutter_process_baseband_disconnect:
+	call queue_init
+	jam 0,mem_ble_shutter_enable_notify
+	branch shutter_start_reconnect
+
+
+ble_shutter_process_reconnect_complete:
+	call queue_init
+	jam 1,mem_ble_shutter_enable_notify
+	fetch 8,mem_ble_shutter_interval_min
+	store 8,mem_le_interval_min
+	call app_lpm_mult_enable
+	branch le_l2cap_tx_update_req
+
+
+ble_shutter_process_parse_connect_parameter_update_response:
+	fetch 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	rtneq BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_ACCEPTED
+	fetch 8,mem_ble_shutter_interval_min_new
+	rtn blank
+	store 8,mem_le_interval_min
+	branch le_l2cap_tx_update_req
+/**************************************/
+
+/******************soft swtich event**********************/
+shutter_process_soft_swtich_button_long_press:
+	branch ui_soft_switch_botton_long_press
+
+shutter_process_soft_swtich_button_down:
+	fetch 1,mem_shutter_hard_soft_switch_case
+	rtneq HARD_SWITCH
+	fetch 1,mem_shutter_soft_switch_power_state
+	rtnne SS_STATE_POWER_ON
+	call shutter_store_currenct_led_state
+	branch app_led_on
+	
+shutter_store_currenct_led_state:
+	jam 1,mem_shutter_soft_swtich_botton_down
+	arg 11,loopcnt
+	arg mem_shutter_soft_swtich_led_struct_temp,contw
+	arg mem_shutter_led_struct_app_led,contr
+	branch memcpy
+	
+shutter_process_soft_swtich_button_up:
+	fetch 1,mem_shutter_hard_soft_switch_case
+	rtneq HARD_SWITCH
+	fetch 1,mem_shutter_soft_switch_power_state
+	beq SS_STATE_POWER_ON,shutter_load_currenct_led_state
+	branch ui_soft_switch_botton_up
+
+shutter_load_currenct_led_state:
+	fetch 1,mem_shutter_soft_swtich_botton_down
+	rtnne 1
+	jam 0,mem_shutter_soft_swtich_botton_down
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,app_led_off
+	bbit1 UI_STATE_BLE_CONNECTED,app_led_off
+	arg 11,loopcnt
+	arg mem_shutter_soft_swtich_led_struct_temp,contr
+	arg mem_shutter_led_struct_app_led,contw
+	branch memcpy
+	
+/**************************************/
+
+
+shutter_le_bb_event_timer:
+/**************shutter check sleep timer**********************/
+	call shutter_check_sleep_timer
+/************************************/
+/**************soft reset power off timer**********************/
+	call shutter_check_power_off_timer
+/************************************/
+/**************classic shutter timer**********************/
+	call classic_shutter_check_unplug_timer
+	call classic_shutter_hid_handshake_timer
+	call classic_shutter_hid_disconn_timer
+/************************************/
+/**************ble shutter timer**********************/
+	branch ble_shutter_reconn_timer
+/************************************/
+
+/**************shutter check sleep timer**********************/
+shutter_check_sleep_timer:
+	arg mem_shutter_sleep_timer,regc
+	arg shutter_sleep_timeout,regb
+	branch timer_single_step_2B
+shutter_sleep_timeout:
+	jam SS_STATE_POWER_OFF,mem_shutter_soft_switch_power_state
+	call app_led_off
+	call shutter_disconnect_current_connection
+	branch shutter_wait_power_off
+
+/**************soft reset power off timer**********************/
+shutter_check_power_off_timer:
+	arg mem_shutter_power_off_timer,regc
+	arg shutter_check_power_off_timeout,regb
+	branch timer_single_step
+
+shutter_check_power_off_timeout:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,shutter_wait_power_off
+	bbit1 UI_STATE_BT_CONNECTED,shutter_wait_power_off
+	fetch 1,mem_shutter_led_struct_app_led_type
+	beq UI_LED_STATE_BLINK_START,shutter_wait_power_off
+	beq UI_LED_STATE_BLINK_LIGHTING,shutter_wait_power_off
+	beq UI_LED_STATE_BLINK_DARKING,shutter_wait_power_off
+	branch app_enter_hibernate
+/************************************/
+
+/**************classic shutter timer**********************/
+classic_shutter_check_unplug_timer:
+	arg mem_classic_shutter_cable_unplug_conut,regc
+	arg classic_shutter_unplug_timeout,regb
+	branch timer_single_step
+	
+classic_shutter_unplug_timeout:
+	fetch 1,mem_CONTROL_tasks
+	set1  L2CAP_DISCONNECT_INTERRUPT, pdata
+	set1  L2CAP_DISCONNECT_CONTROL, pdata
+	store 1,mem_CONTROL_tasks	
+	rtn
+
+classic_shutter_hid_handshake_timer:
+	arg mem_hid_handshake_timer_count,regc
+	arg classic_shutter_process_hid_handshake,regb
+	branch timer_single_step
+
+classic_shutter_hid_disconn_timer:
+	arg mem_classic_shutter_hid_disconn_count,regc
+	arg app_bt_disconnect,regb
+	branch timer_single_step
+
+/************************************/
+
+/**************ble shutter timer**********************/
+ble_shutter_reconn_timer:
+	fetch 1,mem_shutter_soft_switch_power_state
+	rtnne SS_STATE_POWER_ON
+	arg mem_ble_shutter_reconn_timer,regc
+	arg shutter_start_bluetooth_discovery,regb
+	branch timer_single_step_2B
+/************************************/
+
+shutter_process_idle:
+	call shutter_send_data_to_master
+	branch keyscan_key_process
+
+
+shutter_process_lpm_before:
+	branch keyscan_process_lpm_before
+
+shutter_le_before_hibernate:
+	call gpio_set_before_lpm_common
+	branch shutter_process_lpm_before
+
+//////////////////////////////////////////////////////////////////////////////////////////
+
+
+/****************shutter bluetooth control**********************/
+shutter_stop_bluetooth_discovery:
+	fetch 1,mem_shutter_bluetooth_type
+	bbit1 CLASSIC_SHUTTER,classic_shutter_stop_bluetooth_discovery
+	bbit1 BLE_SHUTTER,ble_shutter_stop_bluetooth_discovery
+	rtn
+
+ble_shutter_stop_bluetooth_discovery:
+	fetch 2,mem_ble_shutter_connect_timeout
+	store 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+	branch app_ble_stop_adv
+	
+classic_shutter_stop_bluetooth_discovery:
+	fetch 2,mem_classic_shutter_connect_timeout
+	store 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+	branch app_bt_stop_discovery
+
+shutter_start_bluetooth_discovery:
+	fetch 1,mem_shutter_soft_switch_power_state
+	rtnne SS_STATE_POWER_ON
+	fetch 1,mem_shutter_bluetooth_type
+	bbit1 CLASSIC_SHUTTER,classic_shutter_start_discovery
+	bbit1 BLE_SHUTTER,ble_shutter_start_discovery
+	rtn
+	
+classic_shutter_start_discovery:
+	fetch 2,mem_classic_shutter_discovery_timeout,
+	store 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+	branch app_bt_start_discovery_short
+
+ble_shutter_start_discovery:
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	fetch 2,mem_ble_shutter_discovery_timeout
+	store 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+	fetch 2,mem_ble_shutter_discovery_adv_interval
+	call shutter_ble_adv_interval_set
+	call app_led_start_blink
+	fetch 4,mem_ble_shutter_discovery_blink_on_time
+	store 4,mem_shutter_led_struct_app_led_on_time
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_ADV
+	branch app_ble_start_adv
+
+
+shutter_start_reconnect:
+	fetch 1,mem_shutter_soft_switch_power_state
+	rtnne SS_STATE_POWER_ON
+	fetch 1,mem_shutter_bluetooth_type
+	bbit1 CLASSIC_SHUTTER,classic_shutter_start_reconnect
+	bbit1 BLE_SHUTTER,ble_shutter_start_reconnect
+	rtn
+
+classic_shutter_start_reconnect:
+	call app_check_reconn_target
+	branch shutter_start_bluetooth_discovery,blank
+	call app_led_on	
+	call app_bt_stop_discovery
+	branch app_bt_start_reconnect	
+
+ble_shutter_start_reconnect:
+	fetch 2,mem_ble_shutter_reconn_timer
+	fetcht 2,mem_ble_shutter_reconn_timeout
+	storet 2,mem_ble_shutter_reconn_timer
+	nrtn blank
+	fetch 2,mem_ble_shutter_reconn_dav_interval
+	call shutter_ble_adv_interval_set
+	call app_led_start_blink
+	fetch 4,mem_ble_shutter_reconn_blink_on_time
+	store 4,mem_shutter_led_struct_app_led_on_time
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_ADV
+	branch app_ble_start_adv
+
+//pdata:adv interval value
+shutter_ble_adv_interval_set:
+	store 2,mem_lpm_interval
+	increase -4,pdata
+	store 2,mem_le_adv_interval
+	rtn
+
+
+shutter_disconnect_current_connection:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect
+	bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect
+	branch shutter_stop_bluetooth_discovery
+/**************************************/
+
+/******************classic shutter load reconnect*********************/
+app_check_reconn_target:
+	fetch 1,mem_nv_data_number
+	copy pdata,loopcnt
+	fetch 2,mem_nv_data_ptr
+	copy pdata,rega
+app_check_reconn_target_loop:
+	ifetch 2,rega
+	beq 0,found_reconn_device
+	increase NV_DATA_LEN,rega
+	loop app_check_reconn_target_loop
+	branch enable_blank
+
+found_reconn_device:
+	ifetch 6,contr
+	store 6,mem_hci_plap
+	increase 10,contr
+	arg mem_link_key,contw
+	call  memcpy16
+	call check_link_key_load
+	branch disable_blank
+	
+/**************************************/
+
+/////////////////////////////////////////////////////////////////////////
+//output:if user is enable,mean,can send data
+shutter_check_data_enable:
+	call disable_user
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,shutter_check_bt_data_enable
+	bbit1 UI_STATE_BLE_CONNECTED,shutter_check_ble_data_enable
+	rtn
+
+shutter_check_bt_data_enable:
+	fetch 1,mem_hid_interrupt_state
+	rtnne 0x3f	
+	branch enable_user
+
+shutter_check_ble_data_enable:
+	fetch 1,mem_ble_shutter_enable_notify
+	rtn blank
+	branch enable_user
+/////////////////////////////////////////////////////////////////////////
+
+/////////////////////////////////////////////////////////////////////////
+//output:if user is enable,mean,bluetooth disconnect
+shutter_check_bluetooth_conn:
+	call disable_user
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BT_CONNECTED
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	branch enable_user
+/////////////////////////////////////////////////////////////////////////
+
+/////////////////////////////////////////////////////////////////////////
+shutter_change_bluetooth_status_bt_disconn:
+	fetch 1,mem_shutter_bluetooth_type
+	bbit1 CLASSIC_SHUTTER,classic_shutter_change_bluetooth_status_bt_disconn
+	bbit1 BLE_SHUTTER,ble_shutter_change_bluetooth_status_bt_disconn
+	rtn
+	
+classic_shutter_change_bluetooth_status_bt_disconn:
+	fetch 1,mem_scan_mode
+	rtnne 0x03
+	branch shutter_start_reconnect
+	
+ble_shutter_change_bluetooth_status_bt_disconn:
+	branch shutter_start_reconnect
+
+/////////////////////////////////////////////////////////////////////////
+shutter_check_send_data:
+	disable user2
+	fetch 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+
+	call shutter_check_bluetooth_conn
+	branch shutter_change_bluetooth_status_bt_disconn,user
+	
+	call shutter_check_data_enable
+	nrtn user
+	enable user2
+	rtn
+
+//queue = key index
+//rega =1 press, =0 release
+shutter_key_change:
+	call shutter_check_send_data
+	nrtn user2
+	deposit rega
+	branch shutter_key_release,blank
+shutter_key_press:
+	call app_led_on
+	arg mem_key0_press,regc
+	branch push_queue_press_or_release
+
+shutter_key_release:
+	call app_led_off
+	arg mem_key0_release,regc
+
+push_queue_press_or_release:
+	arg MAX_QUEUE_NUM,pdata
+	imul32 queue,pdata
+	iadd regc,regc
+	
+//input:regc the address that want push to queue buffer
+push_buffer_in_queue:
+	ifetch 1,regc
+	rtn blank
+	call queue_push_one_byte
+	increase 1,regc
+	branch push_buffer_in_queue
+
+
+shutter_send_data_to_master:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,pop_queue_to_ble_data
+	bbit1 UI_STATE_BT_CONNECTED,pop_queue_to_classic_data
+	rtn
+
+pop_queue_to_ble_data:
+	call le_fifo_check_nearly_full
+	nrtn blank
+	call queue_pop_one_byte
+	nrtn user
+	pincrease -1
+	mul32 pdata,SHUTTER_BLE_DATA_BUFFER,pdata
+	arg mem_ble_data_buffer1,temp
+	iadd temp,contr
+le_send_notify_from_list:
+	ifetch 1,contr	//length 
+	copy pdata,rega
+	ifetcht 2,contr	//handle
+	call store_contr
+	call le_att_malloc_tx_notify
+	copy rega,loopcnt
+	call get_contr
+	branch memcpy
+
+
+pop_queue_to_classic_data:
+	call l2cap_malloc_is_fifo_nearly_full
+	nrtn blank
+	call queue_pop_one_byte
+	nrtn user
+	pincrease -1
+	mul32 pdata,SHUTTER_CLASSIC_DATA_BUFFER,pdata
+	arg mem_classic_data_buffer1,temp
+	iadd temp,contr
+	ifetch 5,contr
+	store 5,mem_classic_data_buffer
+classic_send_hid_data:
+	fetch 1,mem_classic_data_buffer
+	copy pdata,rega
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_int_remote_cid
+	istore 2,contw
+	setarg 0xa1
+	istore 1,contw
+	fetch 4,mem_classic_data_buffer + 1
+	istore 9,contw
+	rtn
+
+///////////queue function////////////
+//input:pdata is data that want push
+queue_push_one_byte:
+	store 1,mem_pdatatemp
+	arg mem_pdatatemp,rega
+	branch queue_push
+
+queue_pop_one_byte:
+	arg mem_pdatatemp,rega
+	call queue_pop
+	nrtn user
+	fetch 1,mem_pdatatemp
+	rtn
+
+///////////queue function ending////////////
+ble_shutter_receive_data:
+	fetch 2,mem_le_att_handle
+	beq GATT_KEYBOARD_WRITE_HANDLE,ble_shutter_process_reconnect_complete
+	rtn
+
+shutter_init_param:
+	setarg 0x02
+	store 1,mem_shutter_power_off_timeout
+/////////////ble connect interval//////////////
+	setarg 0x00200008
+	store 4,mem_ble_shutter_interval_min		//set min interval is 10ms,set max interval is 40ms
+	setarg 0x012c0005
+	istore 4,contw
+///////////////////////////////////////
+//////////////////MTU/////////////
+	jam 0x17,mem_le_local_mtu
+///////////////////////////////////////
+////////////////justwork/////////
+	setarg 0x1b
+ 	store 2,mem_le_pairing_handle
+ 	call le_set_config_fixed_ltk
+	call le_set_fixed_ltk
+	call le_set_justwork
+	branch le_set_config_read_authentication
+///////////////////////////////////////
+
+shutter_load_buffer_config_form_DataRom:
+///////load data Rom/////////
+	arg BLE_KEY_VALUE_LIST_SIZE,loopcnt
+	arg mem_ble_data_buffer1,contw
+	arg BLE_SHUTTER_KEY_VALUE_LIST,contr
+	call memcpy_fast
+	arg BT_KEY_VALUE_LIST_SIZE,loopcnt
+	arg mem_classic_data_buffer1,contw
+	arg CLASSIC_SHUTTER_KEY_VALUE_LIST,contr
+	branch memcpy_fast	
+
+
+shutter_load_ble_gatt_form_DataRom:
+	arg BLE_GATT_LIST_SIZE,loopcnt
+	arg BLE_SHUTTER_GATT_LIST,contr
+	branch memcpy_fast
+
+
+shutter_load_bt_sdp_form_DataRom:
+	arg BT_SDP_LIST_SIZE,loopcnt
+	arg CLASSIC_SHUTTER_SDP_LIST,contr
+	branch memcpy_fast
+	
+
+///////////////////////////////gpio config////////////////////////////////////
+shutter_init_bluetooth_config:
+	call shutter_check_load_config_flag
+	nrtn user
+	fetch 1,mem_shutter_config_select_gpio1
+	call shutter_init_bluetooth_config_gpio_input
+	fetch 1,mem_shutter_config_select_gpio2
+	call shutter_init_bluetooth_config_gpio_input
+	fetch 1,mem_shutter_config_select_gpio3
+	branch shutter_init_bluetooth_config_gpio_input
+	
+shutter_init_bluetooth_config_gpio_input:
+	rtn blank
+	or pdata,0x80,temp
+	branch gpio_config_input_nowake
+	
+
+shutter_load_bluetooth_config:
+	call shutter_check_load_config_flag
+	nrtn user
+	call shutter_load_bluetooth_config_label
+	branch shutter_load_bluetooth_config_by_otp
+
+shutter_load_bluetooth_config_label:
+	arg 0,rega
+	fetch 1,mem_shutter_config_select_gpio1
+	call shutter_load_bluetooth_config_read_gpio_input
+	nsetflag blank,0,rega
+	fetch 1,mem_shutter_config_select_gpio2
+	call shutter_load_bluetooth_config_read_gpio_input
+	nsetflag blank,1,rega
+	fetch 1,mem_shutter_config_select_gpio3
+	call shutter_load_bluetooth_config_read_gpio_input
+	nsetflag blank,2,rega
+	copy rega,pdata
+	store 1,mem_shutter_config_label
+	fetch 1,mem_shutter_config_size
+	imul32 rega,pdata
+	fetcht 2,mem_shutter_config_otp_base_address		//base address
+	iadd temp,pdata
+	store 2,mem_shutter_config_otp_addr
+	rtn
+
+shutter_load_bluetooth_config_read_gpio_input:
+	rtn blank
+	or pdata,0x80,temp
+	call gpio_get_bit
+	nbranch enable_blank,true
+	branch disable_blank
+	
+
+shutter_check_load_config_flag:
+	call disable_user
+	fetch 1,mem_shutter_config_user_size
+	nrtn blank
+	fetch 1,mem_shutter_config_enable
+	rtn blank
+	branch enable_user
+
+
+shutter_load_bluetooth_config_by_otp:
+	call otp_enable_chgpump
+	fetch 2,mem_shutter_config_otp_addr
+	arg mem_shutter_config_data_temp,rega
+	fetcht 1,mem_shutter_config_size
+	call otpd_read_data
+	call otp_disable_chgpump
+shutter_load_bluetooth_config_store_name:
+	fetch 1,mem_shutter_config_data_temp
+	copy pdata,loopcnt
+	store 1,mem_le_name_len
+	call memcpy_fast
+	fetch 1,mem_shutter_config_data_temp
+	copy pdata,loopcnt
+	store 1,mem_local_name_length
+	call memcpy_fast
+	ifetch 1,contr
+	store 1,mem_shutter_key_num
+	ifetch 1,contr
+	store 1,mem_shutter_hard_soft_switch_case
+	rtn
+
+
+shutter_load_bluetooth_config_by_eeprom:
+	fetch 1,mem_shutter_bluetooth_type
+	rtnbit0 CLASSIC_SHUTTER
+	arg 3,temp
+	fetch 2,mem_shutter_config_eeprom_offset_addr
+	copy pdata,regb
+	arg mem_shutter_config_eeprom_start_flag,rega
+	call iicd_read_eep_data
+	fetcht 2,mem_shutter_config_eeprom_start_flag
+	setarg SHUTTER_EEPROM_CONFIG_CRC
+	isub temp,null
+	nrtn zero
+	fetch 1,mem_shutter_config_user_size
+	rtn blank
+	copy pdata,temp
+	fetch 2,mem_shutter_config_eeprom_offset_addr
+	add pdata,3,regb
+	arg mem_shutter_config_data_temp,rega
+	call iicd_read_eep_data
+	branch shutter_store_config
+
+shutter_load_bluetooth_config_by_user_config:
+	fetch 2,mem_shutter_config_user_otp_address
+	rtn blank
+	call otp_enable_chgpump
+	arg 1,temp
+	arg mem_shutter_config_user_size,rega
+	call otpd_read_data
+	
+	fetch 1,mem_shutter_config_user_size
+	rtn blank
+	
+	fetch 2,mem_shutter_config_user_otp_address
+	pincrease 1
+	arg mem_shutter_config_data_temp,rega
+	fetcht 1,mem_shutter_config_user_size
+	call otpd_read_data
+	call otp_disable_chgpump
+shutter_store_config:
+	call shutter_load_bluetooth_config_store_name
+shutter_load_bluetooth_config_custom:
+	ifetch 2,contr
+	rtn blank
+	copy pdata,contw
+	ifetcht 1,contr
+	copy temp,loopcnt
+	call memcpy
+	branch shutter_load_bluetooth_config_custom
+///////////////////////////////////////////////////////////////////
+
+//////////////////////////random mac address//////////////////////////////
+shutter_random_mac_addr:
+	fetch 1,mem_shutter_bluetooth_type
+	rtnbit0 CLASSIC_SHUTTER
+	fetch 2,mem_classic_shutter_random_mac_offset_addr
+	copy pdata,regb
+	arg 4,temp
+	arg mem_shutter_random_mac_data_temp,rega
+	call iicd_read_eep_data
+	fetch 1,mem_shutter_random_mac_data_temp
+	bne 1,shutter_write_random_mac_addr_to_eeprom
+shutter_write_random_mac_addr_to_eeprom:
+	setarg 1
+	store 1,mem_shutter_random_mac_data_temp
+	force 3,loopcnt
+	call generate_random_loop
+	fetch 2,mem_classic_shutter_random_mac_offset_addr
+	copy pdata,regb
+	arg 4,temp
+	arg mem_shutter_random_mac_data_temp,rega
+	call iicd_write_eep_data
+shutter_write_random_mac_addr:
+	fetch 3,mem_shutter_random_mac_data_temp + 1
+	store 3,mem_lap
+	store 3,mem_le_lap
+	rtn
+	
+/////////////////////////////////////////////////////////////////
+shutter_soft_swtich_power_on:
+	branch shutter_start_reconnect
+
+
+shutter_soft_swtich_power_off:
+	arg 0,rega
+	arg mem_shutter_power_off_led_style,regc
+	call ui_led_set_style_global
+	call shutter_disconnect_current_connection
+shutter_wait_power_off:
+	fetch 1,mem_shutter_power_off_timeout
+	store 1,mem_shutter_power_off_timer
+	rtn
+	
+
+/*************soft swtich ui config*********************/
+ui_soft_swtich_init:
+	setarg SS_STATE_POWER_UP
+	call ui_soft_swtich_init_power_on_time
+	jam UI_BUTTON_STATE_UP,mem_ui_button_last_state
+	call ui_button_init
+	call ui_button_polling
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+	branch app_enter_hibernate
+
+ui_soft_swtich_init_power_on_time:
+	fetcht 2,mem_power_param_ptr
+	istore 1,temp		//init power state 
+	ifetch 1,contw		//power on time
+	store 1,mem_ui_button_timeout
+	rtn
+
+
+ui_soft_switch_botton_up:
+	fetch 2,mem_power_param_ptr
+	ifetch 1,pdata
+	rtnne SS_STATE_POWER_UP
+	branch app_enter_hibernate
+
+
+ui_soft_switch_botton_long_press:
+	fetcht 2,mem_power_param_ptr
+	ifetch 1,temp
+	beq SS_STATE_POWER_ON,ui_soft_switch_power_off
+ui_soft_switch_power_on:
+	setarg SS_STATE_POWER_ON
+	fetcht 2,mem_power_param_ptr
+	istore 1,temp		//init power state 
+	add temp,SS_POWER_OFF_TIME,contr
+	ifetch 1,contr
+	istore 1,mem_ui_button_timeout
+	ifetch 2,contr
+	branch callback_func
+
+ui_soft_switch_power_off:
+	setarg SS_STATE_POWER_OFF
+	call ui_soft_swtich_init_power_on_time
+	add temp,SS_POWER_OFF_CB,contr
+	ifetch 2,contr
+	branch app_enter_hibernate,blank		//no call back function , just enter hibernate
+	branch callback_func
+	
+/*************soft swtich ui config ending*********************/
+
+
+/*************unkown function*********************/
+shutter_byteswap:
+	store 6,mem_tmp_buffer
+	fetch 1,mem_tmp_buffer
+	store 1,mem_tmp_buffer+11
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+10
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+9
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+8
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+7
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+6
+	fetch 6,mem_tmp_buffer+6
+	rtn
+
+shutter_random_addr_by_otp:
+	call load_adc_init
+	fetch 1,mem_1v_adc_io_data
+	store 1,mem_le_lap
+	fetch 1,mem_5v_adc_hvin_data
+	istore 1,contw
+	fetch 1,mem_3v_adc_vinlpm_data
+	istore 1,contw
+	fetch 3,mem_le_lap
+	store 3,mem_lap
+	rtn
+
+
+
+//iic read function
+//function name:sim_iic_read_eep_data
+//input:
+//temp:the length that simulation iic want to read eeprom data
+//rega:the memmory point that simulation iic read data store
+//regb:the eeprom address offset
+//mark_eeprom_size:select 02 or other
+//output:nc
+sim_iic_read_eep_data:
+	fetch 2,mem_eeprom_base
+	iadd regb,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+	copy temp,regb
+	
+	call sim_iic_start
+	setarg 0xa0
+	call sim_iic_send_byte
+	fetch 1,mem_addr_mi
+	call sim_iic_send_byte
+	bmark1 mark_eeprom_size,sim_iic_read_eep_data_2k
+	fetch 1,mem_addr_mi + 1
+	call sim_iic_send_byte
+sim_iic_read_eep_data_2k:
+	call sim_iic_stop
+
+	call sim_iic_start
+	setarg 0xa1
+	call sim_iic_send_byte
+
+sim_iic_read_eep_data_loop:
+	call sim_iic_read_byte
+	istore 1,rega
+	increase 1,rega
+	increase -1,regb
+	nbranch sim_iic_read_eep_data_loop,zero
+	branch sim_iic_stop
+
+
+//iic write data function
+//function name:sim_iic_write_eep_data
+//input:
+//temp:the length that simulation iic want to write eeprom data
+//rega:the memmory point that simulation iic write data read
+//regb:the eeprom address
+//mark_eeprom_size:select 02 or other
+//output:nc
+sim_iic_write_eep_data:
+	byteswap regb,pdata
+	store 2,mem_addr_mi
+	copy temp,regb
+
+	call sim_iic_start
+	setarg 0xa0
+	call sim_iic_send_byte
+
+	fetch 1,mem_addr_mi
+	call sim_iic_send_byte
+	bmark1 mark_eeprom_size,sim_iic_write_eep_data_loop
+	fetch 1,mem_addr_mi + 1
+	call sim_iic_send_byte
+sim_iic_write_eep_data_loop:
+	ifetch 1,rega
+	call sim_iic_send_byte
+	increase 1,rega
+	increase -1,regb
+	nbranch sim_iic_write_eep_data_loop,zero
+	branch sim_iic_stop
+//	bmark1 mark_eeprom_size
+
+//use reg:pdata,contr,contw,loopcnt
+sim_iic_wait_ack:
+	arg 10,loopcnt
+	call sim_iic_release_sda
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+sim_iic_wait_ack_loop:
+	call sim_iic_read_sda_level
+	branch sim_iic_scl_output_low,blank	//scl = 0
+	loop sim_iic_wait_ack_loop
+	branch sim_iic_scl_output_low		//scl = 0	
+
+
+//use reg:pdata,contr,contw,rega,queue
+sim_iic_ack_slave:
+	call sim_iic_scl_output_low		//scl = 0	
+	call sim_iic_sda_output_low		//sda = 0
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	branch sim_iic_scl_output_low	//scl = 0	
+
+
+//output:pdata receive byte data
+//use reg:pdata,contr,contw,loopcnt,regc,rega
+sim_iic_read_byte:
+	arg 8,loopcnt
+	arg 0,regc
+	call sim_iic_release_sda
+sim_iic_read_byte_loop:
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	lshift regc,regc	
+	call sim_iic_read_sda_level
+	iadd regc,regc
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_scl_output_low		//scl = 0	
+	loop sim_iic_read_byte_loop
+	call sim_iic_ack_slave
+	copy regc,pdata
+	rtn
+
+//input:pdata send byte data
+//use reg:pdata,contr,contw,loopcnt,regc,rega
+sim_iic_send_byte:
+	arg 8,loopcnt
+	copy pdata,regc
+	call sim_iic_scl_output_low		//scl = 0	
+sim_iic_send_byte_loop:
+	isolate1 7,regc
+	call sim_iic_sda_output_high,true	//sda = 1
+	ncall sim_iic_sda_output_low,true	//sda = 0
+	lshift regc,regc
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_scl_output_low		//scl = 0	
+	call sim_iic_delay				//delay 2.5us
+	loop sim_iic_send_byte_loop
+	branch sim_iic_wait_ack
+
+
+//use reg:pdata,contr,contw,rega
+sim_iic_start:
+	call sim_iic_sda_output_high	//sda = 1
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_sda_output_low		//sda = 0
+	call sim_iic_delay				//delay 2.5us
+	branch sim_iic_scl_output_low		//scl = 0
+
+
+//use reg:pdata,contr,contw,rega
+sim_iic_stop:
+	call sim_iic_sda_output_low		//sda = 0
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_sda_output_high	//sda = 1
+	branch sim_iic_delay				//delay 2.5us
+
+
+//scl = 1
+sim_iic_scl_output_high:
+	enable user
+	fetch 1,SIM_IIC_SCL_GPIO_NUM
+	branch sim_iic_config_gpio
+
+//scl = 0
+sim_iic_scl_output_low:
+	disable user
+	fetch 1,SIM_IIC_SCL_GPIO_NUM
+	branch sim_iic_config_gpio
+
+//sda = 1
+sim_iic_sda_output_high:
+	enable user
+	fetch 1,SIM_IIC_SDA_GPIO_NUM
+	branch sim_iic_config_gpio
+
+//sda = 0
+sim_iic_sda_output_low:
+	disable user
+	fetch 1,SIM_IIC_SDA_GPIO_NUM
+	branch sim_iic_config_gpio
+
+//input:pdata the gpio number
+//input:user flag, if enable user,config gpio output high level; if disable user, config gpio output low level
+//use reg:pdata,contr,contw,queue,rega
+sim_iic_config_gpio:
+	and pdata,0x07,queue
+	rshift3 pdata,pdata
+	arg core_gpio_oe0,temp
+	iadd temp,temp
+	ifetch 1,temp
+	qset1 pdata
+	istore 1,temp
+	increase 4,temp
+	ifetch 1,temp
+	qsetflag user,pdata
+	istore 1,temp
+	rtn
+
+
+sim_iic_release_sda:
+	fetch 1,SIM_IIC_SDA_GPIO_NUM
+	and pdata,0x07,queue
+	rshift3 pdata,pdata
+	arg core_gpio_oe0,temp
+	iadd temp,temp
+	ifetch 1,temp
+	qset0 pdata
+	istore 1,temp
+	rtn	
+
+//get sda level
+//output:if sda high level ,pdata is 1;if sda low level ,pdata is 0
+//use reg:pdata,contr,contw,queue,rega,temp
+sim_iic_read_sda_level:
+	nop 4
+	fetch 1,SIM_IIC_SDA_GPIO_NUM
+	and pdata,0x07,queue
+	rshift3 pdata,pdata
+	arg core_gpio_in,temp
+	iadd temp,temp
+	setarg 0
+	ifetcht 1,temp
+	qisolate1 temp
+	setflag true,0,pdata
+	rtn	
+
+//delay 2.5us
+sim_iic_delay:
+//	nop 1
+	rtn
+
+/**********************************/
+
+
+
+usb_isr:
+	bpatch patch1e_6,mem_patch1e
+	hfetch 1,core_usb_status
+	isolate1 7,pdata
+	call usb_init,true
+	call usb_nak_state_judge
+	hfetch 1,core_usb_status
+	store 1,mem_usb_status
+	hfetch 1,core_usb_fifo_empty
+	store 1,mem_usb_fifo_empty
+	hstore 1,core_usb_fifo_empty
+	pinvert
+	fetcht 1,mem_usb_tx_wait
+	iand temp,pdata
+	store 1,mem_usb_tx_wait
+	jam 0xe0,core_usb_status
+	fetch 1,mem_usb_fifo_empty
+	compare 0x1,pdata,0x1
+	call usb0_fifo_empty,true
+	fetch 1,mem_usb_status	
+	compare 0x1,pdata,0x1  
+	call usb_status1,true
+	call usb_tx
+	branch usb_nak_state
+
+usb_init:
+	bpatch patch1e_7,mem_patch1e
+	call usb_init_param
+	jam 0x00,core_usb_config
+	nop 10000
+	jam 0xc0,core_usb_trig
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_USB,pdata
+	hstore 2,core_clkoff
+	jam 0x3c,core_usb_config
+	jam 0xff,core_usb_status
+	jam 0xff,core_usb_fifo_empty
+	jam 0,core_usb_addr
+	jam DEV_DEFAULT,mem_usb0_state
+	setarg mem_usb_clear_mem_end
+	arg mem_usb_clear_mem_start,contw
+	isub contw,loopcnt
+	branch clear_mem
+
+usb_offline_check_init:
+	fetcht 1,mem_usb_offline_check_gpio
+	branch gpio_config_input
+usb_offline_state:
+	fetch 1,mem_usb_device_enumeration_endflag
+	rtn blank
+	fetcht 1,mem_usb_offline_check_gpio
+	call gpio_get_bit
+	branch usb_init,true
+	rtn
+
+
+usb_nak_state:
+	arg TIMER_NAK,queue
+	call timer_check
+	nrtn blank
+	fetch 1 ,mem_usb_wakestate_onetime_flag
+	nrtn blank
+	fetch 1,mem_usb_device_enumeration_endflag
+	ncall usb_mac_wakeup_judge,blank
+	rtn
+
+usb_mem_devicedesc_init:
+	arg mem_devicedesc,contw
+	setsect 0,0x11212
+	setsect 1,0x8000
+	setsect 2,0x0
+	setsect 3,0x10000
+	istore 9,contw
+	setsect 0,0x22412
+	setsect 1,0x8604
+	setsect 2,0x1000
+	setsect 3,0x8
+	istore 9,contw
+	setsect 0,0x1
+	istore 1,contw
+	rtn
+	
+usb_init_param:
+	jam 2,mem_usb0_state
+	setarg 0x0
+	store 1,mem_remain
+	store 2,mem_usb_zero_packet
+	pincrease 1
+	store 2,mem_usb_ones_packet
+	pincrease 1
+	store 2,mem_usb_two_packet
+	setarg HID_KBDATA_ADDR
+	store 2,mem_hidreportdesc_kb
+	setarg HID_MSDATA_ADDR
+	store 2,mem_hidreportdesc_m
+	arg mem_confdesc,contw
+	arg HID_CONFDATA_ADDR,contr
+	call memcpy64
+	fetch 1,mem_usb_tx_interval
+	ncall usb_tx_interval_config,blank
+	branch usb_mem_devicedesc_init
+	
+usb_tx_interval_config:
+	store 1,mem_confdesc+34
+	store 1,mem_confdesc+59
+	rtn
+usb_nak_state_judge:
+	hfetch 1,core_usb_status
+	bbit1 USB_STATUS_NAK,usb_nak_state_timer_init
+	rtn
+	
+usb_nak_state_timer_init:
+	call usb0_attached_state_judge
+	call timer_reinit
+	setarg TIMER_NAK_DELAY
+	arg TIMER_NAK,queue
+	branch timer_init
+	
+usb0_attached_state_judge:
+	fetch 1,mem_usb_state
+	bne USB_CONNECTED,usb_clear_halt_dispose
+	jam 0,mem_usb_wakestate_onetime_flag
+	jam 0,mem_usb_mac_wakeup_trig
+	rtn
+usb_clear_halt_dispose:
+	fetch 1,mem_usb_clear_halt
+	rtn blank
+	jam 0,mem_usb_clear_halt
+	jam USB_CONNECTED,mem_usb_state
+	jam 1,mem_usb_device_enumeration_endflag
+	rtn
+    	
+usb0_fifo_empty:
+	jam 0x1,core_usb_fifo_empty
+	branch usb0_tx
+
+usb_rx_no_data:
+	fetch 1,mem_usb_status
+	bbit1 USB_STATUS_SETUP,usb_class_type
+	rtn
+
+usb_rx_read:
+	hfetch 1,core_usb_ep
+	istore 1,contw
+	loop usb_rx_read
+	rtn
+
+usb_status1:
+	bpatch patch1f_0,mem_patch1f
+	jam 0x11,core_usb_status
+	hfetch 1,core_usb_ep_len
+	store 1,mem_usb_read_len
+	copy pdata,loopcnt
+	branch usb_rx_no_data,blank
+	arg mem_usb_setup,contw
+	call usb_rx_read
+	fetch 1,mem_usb_read_len
+	sub pdata,7,null
+	rtn positive
+usb_class_type:
+	fetch 1,mem_usb_setup_bmRequestType
+	and_into 0x80,pdata
+	beq IN_DEVICE,usb_in_device
+	beq OUT_DEVICE,usb_out_device
+	branch assert
+
+usb_in_device:
+	fetch 1,mem_usb_setup_bmRequestType
+	rshift4 pdata,pdata
+	rshift pdata,pdata
+	and_into 0x03,pdata
+	beq STANDARD_REQ,usb_in_standard_req
+	beq CLASS_REQ,usb_in_class_req
+	beq MANUFACTURER_REQ,usb_in_manufacturer_req
+	branch assert
+
+usb_out_device:
+	fetch 1,mem_usb_setup_bmRequestType
+	rshift4 pdata,pdata
+	rshift pdata,pdata
+	and_into 0x03,pdata
+	beq STANDARD_REQ,usb_out_standard_req
+	beq CLASS_REQ,usb_out_class_req	
+	beq MANUFACTURER_REQ,usb_out_manufacturer_req
+	branch assert
+
+usb_in_standard_req:
+	fetch 1,mem_usb_setup_bRequest
+	beq GET_CONFIGURATION,usb0_request_get_configuration
+	beq GET_DESCRIPTOR,usb0_request_get_descriptor
+	beq GET_INTERFACE,usb0_request_get_interface
+	beq GET_STATUS,usb0_request_get_status
+	branch usb0_force_stall
+
+usb_in_class_req:
+	fetch 1,mem_usb_setup_bRequest
+	beq GET_IDLE,usb_get_idle
+	beq GET_REPORT,usb_get_report
+	beq GET_PROTOCOL,usb_get_protocol_req
+	branch usb0_force_stall
+
+usb_in_manufacturer_req:
+	branch usb0_force_stall
+
+usb_out_standard_req:
+	fetch 1,mem_usb_setup_bRequest
+	beq CLEAR_FEATURE,usb0_request_clear_feature
+	beq SET_FEATURE,usb0_request_set_feature
+	beq SET_ADDRESS,usb0_request_set_address
+	beq SET_CONFIGURATION,usb0_request_set_configuration
+	beq SET_INTERFACE,usb0_request_set_interface
+	beq SET_DESCRIPTOR,usb0_force_stall
+	branch usb0_force_stall
+
+usb_out_class_req:
+	fetch 1,mem_usb_setup_bRequest
+	beq SET_IDLE,usb_set_idle
+	beq SET_REPORT,usb_set_report
+	beq SET_PROTOCOL,usb_set_protocol_req
+	branch usb0_force_stall
+
+usb_out_manufacturer_req:
+	branch usb0_force_stall
+
+usb0_force_stall:
+	hfetch 1,core_usb_stall
+	set1 0,pdata
+	hstore 1,core_usb_stall
+	branch usb0_reply_zerolen
+	
+usb0_reply_zerolen:
+	jam 0x40,core_usb_clear
+	rtn
+
+usb0_request_get_configuration:
+	fetch 1,mem_usb_setup_bmRequestType
+	bne IN_DEVICE,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 1,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb0_state
+	beq DEV_CONFIGURED,usb0_request_get_cfg_dev_cfg
+	beq DEV_ADDRESS,usb0_request_get_cfg_dev_addr
+	branch usb0_force_stall
+//Return current config : 1
+usb0_request_get_cfg_dev_cfg:
+	arg 1,regb
+	branch usb_send_ones_packet
+//Config do not work, return default config : 0
+usb0_request_get_cfg_dev_addr:
+	arg 1,regb
+	branch usb_send_zero_packet
+
+usb0_request_get_descriptor:
+	bpatch patch1f_1,mem_patch1f
+	set0 mark_isstr,mark
+	fetch 1,mem_usb_setup_bValueH
+	beq DSC_DEVICE,dsc_device_info
+	beq DSC_CONFIG,dsc_config_info	
+	beq DSC_STRING,dsc_string_info
+	beq DSC_HID,dsc_hid_info
+	beq DSC_HID_REPORT,dsc_hid_report_info
+	branch usb0_force_stall
+
+dsc_hid_info:
+	jam 0,mem_usb_get_protocol_flag
+	fetch 1,mem_usb_setup_wIndex
+	beq 0,dsc_hid_info_interface0
+	beq 1,dsc_hid_info_interface1
+	branch usb0_force_stall
+//class_descriptor hid_descriptor--keyboard 
+dsc_hid_info_interface0:	
+	arg mem_confdesc+19,rega
+	ifetch 1,rega
+	iforce regb
+	branch usb0_respond
+//class_descriptor hid_descriptor--mouse 
+dsc_hid_info_interface1:	
+	arg mem_confdesc+44,rega
+	ifetch 1,rega
+	iforce regb
+	branch usb0_respond
+
+dsc_device_info:
+//input : pdata : data poniter 
+//input : temp: data len
+//sets the data pointer and len to correct descriptor
+	fetch 1,mem_usb_set_high_addr_flag
+	ncall usb_set_high_addr,blank
+	setarg mem_devicedesc
+	fetcht 1,mem_devicedesc
+dsc_info_set_data_len:
+	store 2,mem_dsc_info_data_pointer
+	storet 1,mem_dsc_info_len
+	fetch 1,mem_usb_setup_bLength
+	isub temp,null
+	nbranch dsc_info_set_current_data_len,positive
+dsc_info_set_initial_data_len:
+	fetch 1,mem_dsc_info_len
+dsc_info_set_data_size_completed:	
+	iforce regb
+	fetch 2,mem_dsc_info_data_pointer
+	add pdata,1,pdata
+	iforce rega
+	branch usb0_respond
+dsc_info_set_current_data_len:
+	fetch 1,mem_usb_setup_bLength
+	branch dsc_info_set_data_size_completed
+
+usb_set_high_addr:
+	hfetch 1,core_usb_addr
+	ncall usb0_set_addr,blank
+	jam 0,mem_usb_set_high_addr_flag
+	rtn
+usb0_set_addr:
+	hfetch 1,core_usb_addr
+   	set1 7,pdata
+	hstore 1,core_usb_addr
+	rtn
+
+dsc_config_info:
+	setarg mem_confdesc
+	fetcht 1,mem_confdesc
+	branch dsc_info_set_data_len
+
+dsc_string_info:
+	fetch 1,mem_usb_setup_bValue
+	sub pdata,3,null
+	nbranch usb0_force_stall,positive
+	fetch 1,mem_usb_setup_bValue
+	arg mem_string0,rega
+	beq 0,usb0_respond_length	
+	set1 mark_isstr,mark
+	arg mem_string1,rega
+	beq 1,usb0_respond_length
+	arg mem_string2,rega
+	beq 2,usb0_respond_length
+	arg mem_string3,rega
+	beq 3,usb0_respond_length
+	rtn
+
+dsc_hid_report_info:
+	fetch 2,mem_usb_setup_wIndex
+	beq 1,dsc_hid_report_info0
+	fetch 2,mem_hidreportdesc_kb
+	copy pdata,rega
+//	arg mem_hidreportdesc_kb,rega
+	branch usb0_respond_length
+dsc_hid_report_info0:
+	jam 1,mem_usb_device_enumeration_endflag
+	jam USB_GOT_REPORT_REQ,mem_usb_state
+	fetch 2,mem_hidreportdesc_m
+	copy pdata,rega
+//	arg mem_hidreportdesc_m,rega
+	branch usb0_respond_length
+
+
+usb0_request_get_interface:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall		
+	fetch 1,mem_usb_setup_bmRequestType
+	bne IN_INTERFACE,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 1,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	arg 1,regb
+	branch usb_send_zero_packet
+
+
+usb0_request_get_status:
+	fetch 1,mem_usb0_state
+	beq DEV_DEFAULT,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 2,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bmRequestType
+	beq IN_DEVICE,usb0_get_status_in_device
+	beq IN_INTERFACE,usb0_get_status_in_interface
+	beq IN_ENDPOINT,usb0_get_status_in_endpoint
+	branch usb0_force_stall
+
+usb0_get_status_in_device:
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	arg 2,regb
+	fetch 1,mem_usb_remote_wakeup
+	beq 0x01,usb_send_two_packet
+//regb:length
+usb_send_zero_packet:
+	arg mem_usb_zero_packet,rega
+	branch usb0_respond
+usb_send_ones_packet:
+	arg mem_usb_ones_packet,rega
+	branch usb0_respond
+usb_send_two_packet:
+	arg mem_usb_two_packet,rega
+	branch usb0_respond
+
+usb0_get_status_in_interface:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall
+	arg 2,regb
+	branch usb_send_zero_packet
+
+usb0_get_status_in_endpoint:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	beq IN_EP1,usb0_get_status_in_ep_in_ep1
+	beq IN_EP2,usb0_get_status_in_ep_in_ep2
+	beq IN_EP3,usb0_get_status_in_ep_in_ep3
+	and_into 0x7f,pdata
+	beq 0x00,usb0_get_status_in_ep_in_ep0
+	branch usb0_force_stall
+	
+usb0_get_status_in_ep_in_ep0:
+	fetch 1,mem_usb_ep0_stall_status
+usb0_get_status_in_ep_in_ack:
+	arg 2,regb
+	beq 1,usb_send_ones_packet
+	branch usb_send_zero_packet
+usb0_get_status_in_ep_in_ep1:
+	fetch 1,mem_usb_ep1_stall_status
+	branch usb0_get_status_in_ep_in_ack
+usb0_get_status_in_ep_in_ep2:
+	fetch 1,mem_usb_ep2_stall_status
+	branch usb0_get_status_in_ep_in_ack
+usb0_get_status_in_ep_in_ep3:
+	fetch 1,mem_usb_ep3_stall_status
+	branch usb0_get_status_in_ep_in_ack
+
+usb_get_idle:
+	jam 1,mem_usb_idle_flag
+	arg mem_usb_idle_rate,rega
+	arg 1,regb
+	branch usb0_respond
+
+usb_get_report:
+	fetch 2,mem_usb_setup_bValue
+	arg PC_GET_REPORT,temp
+	isub temp,null
+	nbranch usb0_force_stall,zero
+	set0 mark_isstr,mark
+usb_get_report_dispose:	
+	fetch 1,mem_usb0_data_ready_report
+	nbranch usb_get_report_data_success,blank
+	jam PC_GET_NONDATA,mem_usb0_get_report_data
+usb_get_report_send_data:
+	fetch 1,mem_usb_setup_bLength
+	iforce regb
+	arg mem_usb0_get_report_data,rega
+	call usb0_respond
+usb_get_report_data_release:	
+	arg mem_usb0_get_report_data,contw
+	arg 8,loopcnt
+	branch memset0
+usb_get_report_data_success:
+	jam 0,mem_usb0_data_ready_report
+	jam PC_GET_DATA,mem_usb0_get_report_data
+	branch usb_get_report_send_data
+
+usb_get_protocol_req:
+	fetch 1,mem_usb_setup_bLength
+	bne 1,usb0_force_stall
+	jam 1,mem_usb_get_protocol_flag
+	arg 1,regb //length
+	fetch 1,mem_usb_set_protocol_value
+	beq 0,usb_get_report_protocol
+	beq 1,usb_get_boot_protocol
+	branch usb_send_zero_packet
+usb_get_report_protocol:
+	branch usb_send_ones_packet
+usb_get_boot_protocol:
+	branch usb_send_zero_packet
+
+
+
+//in device
+usb0_request_clear_feature:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bmRequestType
+	beq OUT_DEVICE,usb0_request_clear_feature_out_device
+	beq OUT_INTERFACE,usb0_request_clear_feature_out_interface
+	beq OUT_ENDPOINT,usb0_request_clear_feature_out_endpoint
+	branch usb0_force_stall
+
+usb0_request_clear_feature_out_device:
+	fetch 1,mem_usb_setup_bValue
+	bne DEVICE_REMOTE_WAKEUP,usb0_force_stall
+	hfetch 1,core_usb_config
+	set0 7,pdata
+	hstore 1,core_usb_config
+	jam 0,mem_usb_remote_wakeup
+	jam 1,mem_usb_clear_remote_wakeup
+	branch usb0_reply_zerolen
+
+usb0_request_clear_feature_out_interface:
+	branch usb0_force_stall
+
+usb0_request_clear_feature_out_endpoint:
+	fetch 1,mem_usb_setup_bValue
+	bne ENDPOINT_HALT,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	beq IN_EP1,usb0_force_stall_ep1_in_off
+	beq IN_EP2,usb0_force_stall_ep2_in_off
+	beq IN_EP3,usb0_force_stall_ep3_in_off
+	and_into 0x7f,pdata
+	beq 0x00,usb0_force_stall_ep0_in_off
+	branch usb0_force_stall
+
+usb0_force_stall_ep0_in_off:
+	jam 0,mem_usb_ep0_stall_status
+	branch usb0_reply_zerolen
+usb0_force_stall_ep1_in_off:
+	jam 0,mem_usb_ep1_stall_status
+usb0_force_stall_ep1_in_off_reply:	
+	jam 1,mem_usb_clear_halt
+	branch usb0_reply_zerolen
+usb0_force_stall_ep2_in_off:
+	jam 0,mem_usb_ep2_stall_status
+	branch usb0_force_stall_ep1_in_off_reply
+usb0_force_stall_ep3_in_off:
+	jam 0,mem_usb_ep3_stall_status
+	branch usb0_force_stall_ep1_in_off_reply
+
+
+usb0_request_set_feature:
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bmRequestType
+	beq OUT_DEVICE,usb0_request_set_feature_out_device
+	beq OUT_INTERFACE,usb0_request_set_feature_out_interface
+	beq OUT_ENDPOINT,usb0_request_set_feature_out_endpoint
+	branch usb0_force_stall
+
+usb0_request_set_feature_out_device:
+	fetch 1,mem_usb_setup_bValue
+	bne DEVICE_REMOTE_WAKEUP,usb0_force_stall
+	hfetch 1,core_usb_config
+	set1 7,pdata
+	hstore 1,core_usb_config
+	jam 1,mem_usb_remote_wakeup
+	jam USB_SLEEP,mem_usb_state
+	jam 0,mem_usb_tx_win_enable
+	call usb0_reply_zerolen
+usb_wakeup_timer_reinit:
+	call timer_reinit
+	setarg TIMER_WAKEUP_DELAY
+	arg TIMER_WAKEUP,queue
+	branch timer_init
+	
+usb0_request_set_feature_out_interface:
+	branch usb0_force_stall
+
+usb0_request_set_feature_out_endpoint:
+	fetch 1,mem_usb_setup_bValue
+	bne ENDPOINT_HALT,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	beq IN_EP1,usb0_force_stall_ep1_in_on
+	beq IN_EP2,usb0_force_stall_ep2_in_on
+	beq IN_EP3,usb0_force_stall_ep3_in_on
+	and_into 0x7f,pdata
+	beq 0x00,usb0_force_stall_ep0_in_on
+	branch usb0_force_stall
+
+usb0_force_stall_ep0_in_on:
+	jam 1,mem_usb_ep0_stall_status
+	branch usb0_reply_zerolen
+usb0_force_stall_ep1_in_on:
+	jam 1,mem_usb_ep1_stall_status
+	branch usb0_reply_zerolen
+usb0_force_stall_ep2_in_on:
+	jam 1,mem_usb_ep2_stall_status
+	branch usb0_reply_zerolen
+usb0_force_stall_ep3_in_on:
+	jam 1,mem_usb_ep3_stall_status
+	branch usb0_reply_zerolen
+
+
+usb0_request_set_address:
+	fetch 1,mem_usb_setup_bmRequestType
+	bne OUT_DEVICE,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	and_into 0x80,pdata
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb_usb0_state_set_dev_addr
+usb_usb0_state_set_dev_default:	
+	jam DEV_DEFAULT,mem_usb0_state
+usb0_request_set_wait_address:
+	fetch 1,mem_usb_setup_bValue
+	hstore 1,core_usb_addr
+	call usb0_reply_zerolen
+	jam 1,mem_usb_set_high_addr_flag
+	rtn
+usb_usb0_state_set_dev_addr:
+	jam DEV_ADDRESS,mem_usb0_state
+	branch usb0_request_set_wait_address
+
+
+usb0_request_set_configuration:
+	fetch 1,mem_usb0_state
+	beq DEV_DEFAULT,usb0_force_stall
+	fetch 1,mem_usb_setup_bmRequestType
+	bne OUT_DEVICE,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	sub pdata,USB_MAX_NUM_CFG,null
+	nbranch usb0_force_stall,positive
+	fetch 1,mem_usb0_state
+	beq DEV_ADDRESS,usb0_request_set_cfg_addr_state
+	beq DEV_CONFIGURED,usb0_request_set_cfg_cfg_state
+	branch usb0_force_stall
+ // This software only supports config = 0,1
+usb0_request_set_cfg_addr_state:
+usb0_request_set_cfg_cfg_state:
+	fetch 1,mem_usb_setup_bValue	//1:Configured state   0:Address state
+	beq 0,usb0_request_set_cfg_stay_addr_state
+	jam DEV_CONFIGURED,mem_usb0_state
+	branch usb0_reply_zerolen
+usb0_request_set_cfg_stay_addr_state:
+	jam DEV_ADDRESS,mem_usb0_state
+	branch usb0_reply_zerolen
+
+
+usb0_request_set_interface:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall		
+	fetch 1,mem_usb_setup_bmRequestType
+	bne OUT_INTERFACE,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	branch usb0_reply_zerolen
+
+
+usb_set_idle:
+	jam 1,mem_usb_idle_flag
+	fetch 1,mem_usb_setup_bValueH
+	store 1,mem_usb_idle_rate
+	fetch 1,mem_usb_setup_wIndex
+	sub pdata,1,null
+	call usb_clear_remote_wakeup_set0,zero
+	fetch 1,mem_usb_state
+	bne USB_RESUME,usb0_reply_zerolen
+	jam USB_CONNECTED,mem_usb_state
+	call usb0_reply_zerolen
+	nop 30000
+	nop 30000
+	rtn
+usb_clear_remote_wakeup_set0:
+	jam 1,mem_usb_device_enumeration_endflag
+	jam 0,mem_usb_clear_remote_wakeup
+	jam USB_RESUME,mem_usb_state
+	rtn
+
+
+usb_set_report:
+	jam 1,mem_usb0_get_set_report
+	call usb_set_report_resume_judge
+	fetch 2,mem_usb_setup_bValue
+	store 2,mem_usb_setup_bValue_temp
+	fetch 1,mem_usb_setup_bLength	//max 0x40
+	iforce loopcnt
+	arg mem_usb0_setup,contr
+	arg mem_usb0_set_report_data,contw
+	call memcpy
+	branch usb0_reply_zerolen
+	
+usb_set_report_resume_judge:
+	fetch 2,mem_usb_setup_bValue
+	arg PC_SET_REPORT_bValue,temp
+	isub temp,null
+	nrtn zero
+	fetch 2,mem_usb_setup_wIndex
+	arg PC_SET_REPORT_wIndex,temp
+	isub temp,null
+	nrtn zero
+	fetch 2,mem_usb_setup_bLength
+	arg PC_SET_REPORT_bLength,temp
+	isub temp,null
+	nrtn zero
+	jam 1,mem_usb_tx_win_enable
+	rtn
+
+
+usb_set_protocol_req:
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	beq BOOT_PROTOCOL,usb_set_boot_protocol
+	beq REPORT_PROTOCOL,usb_set_report_protocol
+	branch usb0_force_stall
+usb_set_boot_protocol:
+	jam 0,mem_usb_set_protocol_status
+	jam 1,mem_usb_set_protocol_value
+	branch usb0_reply_zerolen
+usb_set_report_protocol:
+	jam 1,mem_usb_tx_mac_enable
+	jam 1,mem_usb_set_protocol_status
+	jam 0,mem_usb_set_protocol_value
+	branch usb0_reply_zerolen
+
+
+usb0_respond_length:
+	ifetch 1,rega
+	iforce regb
+	increase 1,rega
+//rega=*buff,reb=size	
+usb0_respond:
+	bpatch patch1f_2,mem_patch1f
+	bmark0 mark_isstr,usb0_respond0
+	add regb,1,pdata
+	lshift pdata,pdata
+	hstore 1,core_usb_dfifo0 
+	jam 3,core_usb_dfifo0
+	fetch 1,mem_usb_setup_bLength
+	increase -2,pdata
+	rshift pdata,pdata
+	store 1,mem_usb_setup_bLength
+	beq 0,usb_no_respond_data
+usb0_respond0:
+	fetch 2,mem_usb_setup_bLength
+	isub regb,null
+	branch usb0_respond1,positive
+	copy pdata,regb	
+usb0_respond1:
+	deposit rega
+	store 2,mem_bufptr
+	deposit regb
+	store 1,mem_remain
+	branch usb0_tx
+
+usb_no_respond_data:
+	arg 0,queue
+	branch usb_trig
+
+//mem_bufptr=*buff,mem_remain=size,loopcnt=i,rega=len
+usb0_tx:
+	bpatch patch1f_3,mem_patch1f
+	fetch 1,mem_remain
+	rtn blank
+	copy pdata,loopcnt
+	sub pdata,EP0_PACKET_SIZE,null
+	branch usb0_tx_info,positive
+	arg EP0_PACKET_SIZE,loopcnt	
+usb0_tx_info:
+	fetch 1,mem_remain
+	isub loopcnt,pdata
+	store 1,mem_remain//mem_remain -= len
+	fetch 2,mem_bufptr
+	copy pdata,contr	
+usb0_tx0:
+	ifetch 1,contr
+	hstore 1,core_usb_dfifo0
+	bmark0 mark_isstr,usb0_tx1
+	jam 0,core_usb_dfifo0
+usb0_tx1:
+	loop usb0_tx0
+	copy contr,pdata
+	store 2,mem_bufptr//mem_bufptr += len
+	arg 0,queue
+	call usb_trig
+	fetch 1,mem_remain
+	nrtn blank
+	fetch 1,mem_usb_state
+	rtnne USB_GOT_REPORT_REQ
+	jam USB_CONNECTED,mem_usb_state
+	rtn
+
+
+usb_tx_ep1:
+	arg core_usb_dfifo1,rega
+	arg 1,queue
+usb_tx_loop:
+	ifetch 1,contr
+	istore 1,rega
+	loop usb_tx_loop
+usb_trig:
+	setarg 0
+	qset1 pdata
+	hstore 1,core_usb_trig
+	fetcht 1,mem_usb_tx_wait
+	ior temp,pdata
+	store 1,mem_usb_tx_wait
+	rtn
+
+usb_tx_ep2:
+	arg 2,queue
+	arg core_usb_dfifo2,rega
+	branch usb_tx_loop
+
+usb_tx:
+	bpatch patch1f_4,mem_patch1f
+	fetch 1,mem_usb_tx_enable
+	rtn blank
+	fetch 1,mem_usb_tx_wait
+	nbranch usb_inwake_state_tx_dispose,blank
+	fetch 1,mem_usb_device_enumeration_endflag
+	branch usb_tx_fifo_release,blank
+	fetch 1,mem_usb_state
+	beq USB_SLEEP,usb_windows_wakeup
+	bne USB_CONNECTED,usb_tx_fifo_release
+	fetch 1,mem_usb_clear_remote_wakeup
+	nbranch usb_tx_fifo_release,blank
+	call usb_tx_data_ep1
+	branch usb_tx_data_ep2
+
+usb_tx_data_ep1:
+	fetch 1,mem_usb_tx_enable
+	rtnbit0 1
+	fetch 1,mem_usb_tx_wait
+	rtnbit1 1
+	fetch 1,mem_usb_tx_enable
+	set0 1,pdata
+	store 1,mem_usb_tx_enable
+	fetch 1,mem_usb_ep1_data
+	rtn blank
+	beq USB_EP1_KB,usb_tx_kb_normal_data
+	branch assert
+
+usb_tx_data_ep2:
+	fetch 1,mem_usb_tx_enable
+	rtnbit0 2
+	fetch 1,mem_usb_tx_wait
+	rtnbit1 2
+	fetch 1,mem_usb_tx_enable
+	set0 2,pdata
+	store 1,mem_usb_tx_enable
+	fetch 1,mem_usb_ep2_data
+	rtn blank
+	beq USB_EP2_MS,usb_tx_ms_data
+	beq USB_EP2_MULTIKEY,usb_tx_kb_multikey_data
+	branch assert
+
+usb_tx_fifo_release:
+	//clear mem_usb_mouse_data/mem_usb_kb_data/mem_usb_kb_multikey
+	arg mem_usb_mouse_data,contw
+	arg 6,loopcnt
+	branch memset0
+	
+usb_tx_ms_data:
+	fetch 1,mem_usb_idle_flag
+	fetcht 1,mem_usb_get_protocol_flag
+	iand temp,pdata
+	branch usb_tx_ms_data_normal_mode,blank
+	fetcht 1,mem_usb_set_protocol_status
+	iadd temp,pdata
+	beq MAC_BOOT_MODE,usb_tx_ms_data_mac_boot_mode
+	branch usb_tx_ms_data_normal_mode
+
+usb_tx_ms_data_mac_boot_mode:
+	jam 0,mem_usb_ep2_data
+usb_tx_ms_data_mac_boot_regroup:
+	fetch 1,mem_usb_mouse_data+1	//key
+	beq R_KEY,usb_tx_mac_boot_ms_regroup_r_or_lrkey
+	beq LR_KEY,usb_tx_mac_boot_ms_regroup_r_or_lrkey
+	fetch 1,mem_usb_mouse_data+1	//key
+	store 1,mem_usb_mouse_data
+	fetch 1,mem_usb_mouse_data+2	//x low
+	istore 1,contw
+	fetch 1,mem_usb_mouse_data+4	//y low
+	istore 1,contw
+	fetch 1,mem_usb_mouse_data+6	//wheel
+	istore 1,contw
+	arg 4,loopcnt
+	arg mem_usb_mouse_data,contr
+	branch usb_tx_ep2
+	
+usb_tx_ms_data_normal_mode:
+	jam 0,mem_usb_ep2_data
+usb_tx_mac_boot_ms_regroup_r_or_lrkey:	
+	arg 8,loopcnt		
+	arg mem_usb_mouse_data,contr
+	branch usb_tx_ep2
+
+usb_tx_kb_multikey_data:
+	jam 0,mem_usb_ep2_data
+	arg 3,loopcnt
+	arg mem_usb_kb_multikey,contr
+	branch usb_tx_ep2
+
+usb_tx_kb_normal_data:
+	jam 0,mem_usb_ep1_data
+	arg 8,loopcnt
+	arg mem_usb_kb_data,contr
+	branch usb_tx_ep1
+
+usb_inwake_state_tx_dispose:
+	fetch 1,mem_usb_state
+	beq USB_SLEEP,usb_clear_tx_wait
+	beq USB_CONNECTED, usb_mac_wakeup_trig
+	rtn
+usb_clear_tx_wait:
+	jam 0,mem_usb_tx_wait
+	rtn	
+usb_mac_wakeup_trig:
+	hfetch 1,core_usb_config
+	set1 7,pdata
+	hstore 1,core_usb_config
+	jam 1,mem_usb_mac_wakeup_trig
+	rtn
+
+usb_mac_wakeup_judge:
+	fetch 1,mem_usb_state
+	rtneq USB_SLEEP
+	beq USB_CONNECTED,usb_mac_wakeup
+	rtn
+usb_mac_wakeup:
+	fetch 1,mem_usb_mac_wakeup_trig
+	rtn blank
+	jam 1,mem_usb_wakestate_onetime_flag
+	branch usb_wakeup
+
+usb_windows_wakeup:
+	arg TIMER_WAKEUP,queue
+	call timer_check
+	nrtn blank
+usb_wakeup:
+	hfetch 1,core_usb_config
+	rtnbit0 7	//endpoint wakeup enable
+	jam 0xfc,core_usb_config
+	nop 30000
+	jam 0x3c,core_usb_config
+	rtn
+
+
+
+
+
+
+hci_rx_h4:
+	bpatch patch1f_5,mem_patch1f
+	fetch 1,mem_hci_cmd
+	nrtn blank
+hci_rx_h4_1:
+	call hci_h4_parse_packet
+	ncall h4_rx_discard_packet,user
+	rtn
+	
+hci_h4_parse_packet:
+	bpatch patch1f_6,mem_patch1f
+	copy contru,rega
+	arg 4,temp
+	ifetch 1,contru //type
+	beq HCI_H4_TYPE_CMD,hci_h4_parse_packet_wait_len
+	increase 1,temp //acl packet has 2 bytes for length
+	beq HCI_H4_TYPE_ACL,hci_h4_parse_packet_wait_len
+	copy contru,pdata
+	hstore 2,core_uart_rrptr
+	rtn
+hci_h4_parse_packet_wait_len:
+	hfetch 2,core_uart_rxitems
+	isub temp,null
+	nbranch hci_h4_parse_packet_wait_len,positive // while(rxitems >= 4 or 5);
+	//Make sure length has been recieved.
+	disable user
+	copy rega,contru
+	call h4_get_rx_payload_len
+	iadd temp,temp
+hci_h4_parse_packet_wait:
+	hfetch 2,core_uart_rxitems
+	isub temp,null
+	nbranch hci_h4_parse_packet_wait,positive//wait for rcv a complete packet
+	copy rega,contru
+	ifetch 1,contru //HCI packet type
+	beq  HCI_H4_TYPE_CMD,process_hci_cmd
+	branch assert
+	
+h4_rx_discard_packet:
+	bpatch patch1f_7,mem_patch1f
+	hfetch 2,core_uart_rrptr
+	iforce contru
+	call h4_get_rx_payload_len
+	iadd contru,contru
+	deposit contru
+	hstore 2,core_uart_rrptr
+	rtn
+
+
+//contru = pointer to packet start
+//return len via pdata
+h4_get_rx_payload_len:
+	ifetch 1,contru
+	increase 2,contru
+	beq HCI_H4_TYPE_ACL,h4_get_rx_payload_len_acl
+	ifetch 1,contru
+	rtn
+h4_get_rx_payload_len_acl:
+	ifetch 2,contru
+	rtn
+
+h4_get_tx_ptr:
+	hfetch 2,core_uart_twptr
+	increase -5,contwu
+	iadd contwu,contwu
+	rtn
+
+h4_send_packet_event:
+	arg HCI_H4_TYPE_EVENT,temp //type
+	branch h4_send_packet
+h4_send_packet_acl: //upgoing ACL
+	arg HCI_H4_TYPE_ACL,temp //type
+h4_send_packet:
+	bpatchx patch20_0,mem_patch20
+	increase 1,loopcnt
+	hfetch 2,core_uart_twptr
+	copy pdata,contwu
+	copy loopcnt,pdata //length
+	istoret 1,contwu //packet type in temp
+	increase -1,pdata
+	iadd contwu,contwu
+	copy contwu,pdata
+	store 2,mem_hci_acl_tx_trigger_wptr
+	copy temp,pdata
+	rtneq HCI_H4_TYPE_ACL //not send acl packet immediately
+	fetch 2,mem_hci_acl_tx_trigger_wptr
+	hstore 2,core_uart_twptr
+	branch h4_send_acl_trigger_clear
+	
+	
+h4_send_acl_trigger_clear:
+	setarg 0
+	store 2,mem_hci_acl_tx_trigger_wptr
+	rtn
+
+	
+/*********************************/
+/**********   HCI  *****************/
+/*********************************/
+
+hci_init:
+	rtn wake
+	setarg hci_idle_dispatch
+	store 2,mem_cb_idle_process
+
+	setarg uart_baud_115200
+	store uart_baud_len,mem_baud
+hci_lpm_init:
+	setarg mem_h5rx_buf
+	hstore 2,core_uart_rsaddr
+	setarg mem_h5rx_buf_end
+	hstore 2,core_uart_readdr
+	setarg mem_h5tx_buf
+	hstore 2,core_uart_tsaddr
+	call hci_sel_init
+hci_reinit:
+	jam 0x0,core_uart_ctrl
+ 	setarg mem_h5tx_buf
+	hstore 2,core_uart_twptr
+	hstore 2,core_uart_trptrp
+	setarg mem_h5rx_buf
+	hstore 2,core_uart_rrptr
+	store 2,mem_h5rx_rptr
+hci_init_common:
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_UART,pdata
+	hstore 2,core_clkoff
+	call uart_set_baud_by_mem
+	jam uartclk_dpll,core_uart_clksel
+	jam uart_ctrl_h4,core_uart_ctrl
+	rtn
+
+hci_sel_init:
+	setarg mem_h5tx_buf_end
+	hstore 2,core_uart_teaddr
+	hfetch 1,core_gpio_sel1
+	or_into 0x07,pdata
+	hstore 1,core_gpio_sel1
+	rtn
+	
+	
+hci_rx_packet:
+	bpatchx patch20_1,mem_patch20
+	hfetch 1,core_uart_status
+	iforce regb
+	bbit0 uart_status_rx_fifo_empty,hci_rx_packet_cont
+	hfetch 2,core_uart_rxitems
+	iforce regc
+	arg 0x44f,temp
+	isub temp,null
+	nrtn zero
+hci_rx_packet_cont:
+	hfetch 2,core_uart_rrptr
+	iforce contru
+	branch hci_rx_h4
+	
+uart_send_byte:
+	hfetcht 1,core_uart_status
+	isolate1 6,temp
+	branch uart_send_byte,true
+	hstore 1,core_uart_txd
+	rtn
+	
+process_hci_cmd:
+	bpatchx patch20_2,mem_patch20
+	fetch 1,mem_hci_cmd
+	branch process_hci_cmd_cont,blank
+	enable user					/* last command still there */
+	rtn
+process_hci_cmd_cont:
+	ifetch 2,contru
+	iforce alarm				/* alarm is used for sending */
+	iforce queue				/* queue is OCF */
+	ifetch 1,contru		/* skip hci length */
+	iforce temp			/* temp has the length */
+	rshift2 alarm,pdata
+	rshift8 pdata,pdata
+	beq HCI_OGF_VENDOR_SPECIFIC,phci_grp_vendor_specific
+	rtn
+
+
+phci_grp_vendor_specific:
+	bpatchx patch20_3,mem_patch20
+	deposit queue
+	beq HCI_VENDOR_CMD_RESET,hci_normal_reply
+	beq HCI_VENDOR_CMD_CHIPID,phci_grp_vendor_chipid
+	beq HCI_VENDOR_CMD_BAUD,phci_grp_vendor_baud
+	beq HCI_VENDOR_CMD_PATCH,phci_grp_vendor_patch
+	beq HCI_VENDOR_CMD_PATCH_DONE,phci_grp_vendor_done
+	beq HCI_VENDOR_CMD_ECHO,hci_normal_reply
+	beq HCI_VENDOR_CMD_BDADDR,phci_grp_vendor_bdaddr
+	beq HCI_VENDOR_CMD_ENTER_LPM,phci_grp_vendor_enter_lpm
+	
+	beq HCI_VENDOR_CMD_MEM,phci_grp_vendor_mem
+	beq HCI_VENDOR_CMD_EEP,phci_grp_vendor_eep
+	beq HCI_VENDOR_CMD_PATCH_SEC_INIT,phci_grp_vendor_patch_sec_init
+	beq HCI_VENDOR_CMD_PATCH_SEC,phci_grp_vendor_patch_sec
+	branch hci_normal_reply
+
+phci_grp_vendor_enter_lpm:
+	call hci_normal_reply
+	call wait_uarttx
+	call gpio_pu_uart_tx
+hci_enter_lpm:
+	call app_put_lpm_wake_lock
+	call app_l2cap_flow_control_enable
+	branch gpio_rx_config_input_with_pu
+
+hci_exit_lpm:
+	jam HCI_RX_READY,mem_hci_lt_rx_state
+	call app_get_lpm_wake_lock
+	call hci_lpm_init
+	branch app_l2cap_flow_control_disable
+	
+phci_grp_vendor_chipid:
+	call hci_get_cmd_complete_ptr
+	hfetch 2,core_chipid
+	istore 2,contwu
+	force 6,loopcnt
+	branch hci_command_complete
+	
+phci_grp_vendor_baud:
+	ifetch 2,contru
+	store 2,mem_baud
+	hstore 2,core_uart_baud
+	rtn
+
+
+phci_grp_vendor_patch_common:
+	//jam 0x80,core_ucode_ctrl
+	ifetch 1,contru
+	copy pdata,temp //check sum via temp
+	hstore 1,core_ucode_low
+	ifetch 1,contru
+	iadd temp,temp
+	set1 7,pdata
+	hstore 1,core_ucode_ctrl
+	ifetch 1,contru
+	iadd temp,temp
+	copy pdata,loopcnt
+	rtn
+	
+phci_grp_vendor_patch:
+	bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad
+	call phci_grp_vendor_patch_common
+phci_grp_vendor_patch_loop:
+	ifetch 1,contru
+	hstore 1,core_ucode_data
+	iadd temp,temp
+	loop phci_grp_vendor_patch_loop
+phci_grp_vendor_patch_check_sum:	
+	and temp,0xff,temp
+	ifetch 1,contru
+	isub temp,null
+	nbranch phci_grp_vendor_patch_bad,zero
+	branch hci_normal_reply
+
+	
+phci_grp_vendor_patch_sec:
+	bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad
+	call phci_grp_vendor_patch_common
+	store 8,mem_pdatatemp
+phci_grp_vendor_patch_sec_loop:
+	call do_aes_cbc	
+	arg 16,loopcnt
+	arg mem_temp_block0,contw
+	call load_uart_sum_loop
+	storet 8,mem_temp
+	arg mem_temp_block2,contw
+	call store_aes_result
+	arg mem_temp_block2,rega
+	arg mem_temp_block0,regb
+	arg mem_temp_block3,contw
+	call xor16	
+	arg 16,loopcnt
+	arg mem_temp_block3,contr
+	call load_ucode_only_loop
+	fetcht 8,mem_temp
+	fetch 8,mem_pdatatemp
+	increase -16,pdata
+	store 8,mem_pdatatemp
+	nbranch phci_grp_vendor_patch_sec_loop,blank
+	branch phci_grp_vendor_patch_check_sum	
+	
+load_ucode_only_loop:
+	ifetch 1,contr
+	hstore 1,core_ucode_data
+	loop load_ucode_only_loop
+	rtn
+
+load_uart_sum_loop:
+	ifetch 1,contru
+	istore 1,contw
+	iadd temp,temp
+	loop load_uart_sum_loop
+	rtn
+
+phci_grp_vendor_patch_sec_init:
+	bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad
+	arg 0,temp
+	arg 16,loopcnt
+	arg mem_temp_block0,contw
+	call load_uart_sum_loop
+	hfetch 1,core_gpio_key2
+	and_into 0xfd,pdata   // disable aes for iv
+	hstore 1,core_gpio_key2
+	arg mem_temp_block0,contr
+	arg 16,loopcnt
+	call aes_load_data
+	call aes_init
+	call aes_clear_data
+	branch phci_grp_vendor_patch_check_sum
+
+
+phci_grp_vendor_done:
+	arg 0x20,loopcnt    //patch switch length
+	arg mem_patch00,contw
+	arg 0,temp //checksum
+phci_grp_vendor_done_loop:
+	ifetch 1,contru
+	istore 1,contw
+	iadd temp,temp
+	loop phci_grp_vendor_done_loop
+	and temp,0xff,temp
+	ifetch 1,contru
+	isub temp,null
+	nbranch phci_grp_vendor_patch_bad,zero
+	jam 0,core_ucode_ctrl
+	call hci_normal_reply
+	call h4_rx_discard_packet
+	call clear_key_buf
+	call wait_uarttx
+	branch soft_reset
+
+phci_grp_vendor_patch_bad:
+	jam 0,core_ucode_ctrl
+	branch start
+	
+phci_grp_vendor_bdaddr:
+	ifetch 6,contru
+	store 6,mem_lap
+	branch hci_normal_reply
+
+
+phci_grp_vendor_mem:
+	ifetch 1,contru
+	store 1,mem_hci_curr_len
+	copy pdata,loopcnt
+	ifetch 2,contru
+	store 2,mem_hci_curr_target
+	copy pdata,contw
+	call uart_copy_rx_bytes
+	branch hci_normal_reply
+
+
+phci_grp_vendor_eep:
+	ifetch 1,contru
+	store 1,mem_hci_curr_len
+	copy pdata,loopcnt
+	ifetch 2,contru
+	store 2,mem_hci_curr_target
+	arg mem_l2cap_rxbuff1,contw
+	call uart_copy_rx_bytes
+	fetcht 1,mem_hci_curr_len
+	arg mem_l2cap_rxbuff1,rega
+	fetch 2,mem_hci_curr_target
+	branch iicd_write_ota_data
+	
+	
+
+	
+hci_normal_reply:
+	force 4,loopcnt
+hci_command_complete:	/* loopcnt is hci length */
+	call hci_get_payload_ptr
+	force 0x1,pdata
+	istore 1,contwu
+	deposit alarm
+	istore 3,contwu
+	force HCI_EVENT_COMMAND_COMPLETE,queue
+hci_send_event:		/* queue:event code, loopcnt: length */
+	bpatchx patch20_4,mem_patch20
+	call hci_get_packet_ptr
+	deposit queue
+	istore 1,contwu
+	deposit loopcnt
+	istore 1,contwu
+hci_send_event_raw:
+	force 5,queue
+	increase 2,loopcnt
+hci_send_packet:
+	branch h4_send_packet_event
+
+hci_send_commu_ready_event:
+	force HCI_EVENT_VENDOR_SPECIFIC,queue
+	call hci_get_payload_ptr
+	setarg HCI_VENDOR_EVENT_COMMU_READY
+	istore 1,contwu
+	force 1,loopcnt
+	branch hci_send_event
+
+hci_get_cmd_complete_ptr:
+	force 12,contwu
+	branch hci_get_tx_ptr
+
+hci_get_payload_ptr:
+	force 8,contwu
+	branch hci_get_tx_ptr
+
+hci_get_packet_ptr:
+	force 6,contwu
+hci_get_tx_ptr:
+	branch h4_get_tx_ptr
+
+	
+
+calc_tx_crc16:
+	pulse crc16
+	enable enable_crc
+crcloop:
+	ifetch 1,contwu
+	inject bucket,8
+	loop crcloop
+	enable enable_parity
+	inject bucket,16
+	disable enable_parity
+	disable enable_crc
+	disable crc16
+	byteswap pdata,pdata
+	rtn
+
+
+
+cmd_exit:
+	jam 0,mem_hci_cmd
+	rtn
+cmd_check_plap:
+	fetch 6,mem_hci_plap
+	fetcht 6,mem_plap
+	isub temp,null
+	rtn
+
+	
+	
+//enable ssp master sm
+cmd_pair:
+	fetch 1,mem_op
+	bbit1 op_inrand_req,cmd_pair_passive
+	call tid_initiate
+	jam LMP_IN_RAND,mem_lmo_opcode2
+	branch cmd_exit
+cmd_pair_passive:
+	set0 op_inrand_req,pdata
+	store 1,mem_op
+	call lmp_accept_inrand
+	setarg 0
+	setflag master,smap_lmptid,pdata		
+	store 1,mem_lmo_tid2
+	branch cmd_exit
+	rtn
+cmd_in_sniff:
+	jam LMP_SNIFF_REQ,mem_lmo_opcode2
+	arg mem_sniff_payload,contw
+	setarg 0
+	isolate1 27,clke_bt
+	setflag true,1,pdata		/* use init 2 if bit27 of clke is 1 */
+	istore 1,contw	
+	setarg 0	/* dsniff */
+	istore 2,contw
+	fetch 2,mem_sniff_param_interval	/* tsniff */
+	istore 2,contw
+	fetch 1,mem_sniff_param_attempt	/* attempt */
+	istore 2,contw
+	fetch 1,mem_sniff_param_timeout	/* timeout */
+	istore 2,contw
+	branch cmd_exit
+	
+cmd_exit_sniff:
+	jam LMP_UNSNIFF_REQ,mem_lmo_opcode2
+	branch cmd_exit
+
+hci_idle_dispatch:
+	call gpio_check_uart_state
+	rtn true
+	arg UART_WAKEUP_RX,temp
+	call gpio_get_bit
+	nbranch uart_wake_up,true
+	jam HCI_RX_WAKE,mem_hci_lt_rx_state
+	rtn
+uart_wake_up:
+	fetch 1,mem_hci_lt_rx_state
+	rtnne HCI_RX_WAKE
+	call hci_exit_lpm
+	branch hci_send_commu_ready_event
+	
+	
+/**
+* the following API is to send the HID data
+* 
+*/
+
+/**
+* the following API is to process the hid  rx data
+* 
+*/
+//handle the hid data
+
+hid_rx_process:
+	bpatchx patch20_5,mem_patch20
+	fetch 2,mem_l2cap_payload_ptr
+	copy pdata,contr
+	ifetch 1,contr
+	and pdata,0x0f,temp
+	rshift4 pdata,pdata //hidtype
+	beq hid_type_set_idle,hid_rx_process_handshake
+	beq hid_type_set_protocol,hid_rx_process_handshake
+	beq hid_type_data,hid_rx_process_data
+	beq HID_TYPE_SET_REPORT,hid_rx_process_set_report
+	beq HID_TYPE_CONTROL,hid_rx_process_hid_control
+	rtn
+
+hid_rx_process_hid_control:
+	copy temp,pdata
+	beq HID_CONTROL_P_VIRTUALCABLEUNPLUG,hid_rx_process_virtual_cable_unplug
+	beq HID_CONTROL_P_SUSPEND,hid_rx_process_suspend
+	rtn
+	
+hid_rx_process_virtual_cable_unplug:
+	jam BT_EVT_VIRTUAL_CABLE_UNPLUG,mem_fifo_temp
+	call ui_ipc_send_event
+	fetch 1,mem_device_option
+	rtnbit0 dvc_op_mouse
+	copy temp,pdata
+	beq HID_CONTROL_P_VIRTUALCABLEUNPLUG,mouse_irtual_cable_unplug
+	rtn
+hid_rx_process_suspend:
+	rtn
+
+hid_rx_process_set_report:
+	call hid_rx_process_data
+	arg 0x01,rega
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_ctrl_remote_cid
+	istore 2,contw
+	setarg 0x00
+	istore 1,contw
+	rtn
+
+hid_rx_process_handshake:
+	arg 1,regA//payload length
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_ctrl_remote_cid
+	istore 2,contw
+	setarg 0
+	istore 1,contw
+	jam 1,mem_ui_data_txbuff_length
+	fetch 1,mem_hid_control_state
+	set1 l2cap_channel_hid_handshake_done
+	store 1,mem_hid_control_state
+	jam BT_EVT_HID_HANDSHAKE,mem_fifo_temp
+	branch ui_ipc_send_event
+
+hid_rx_process_data:
+	ifetch 1,contr
+	beq HID_REPORT_ID_KB,hid_rx_process_data_hid_kb
+	rtn
+
+hid_rx_process_data_hid_kb:
+	rtn
+
+	
+hid_malloc_tx_buff:
+	call l2cap_malloc
+	copy rega,temp
+	storet 1,mem_ui_data_txbuff_length
+	copy pdata,contw
+	copy rega,pdata
+	istore 2,contw //hid payload length
+	rtn
+
+
+
+
+	
+	
+
+
+
+	
+    
+	
+
+/************************************/
+/*initialize L2CAP related variables*/
+/************************************/
+l2cap_init:
+	branch l2cap_init_wake,wake
+l2cap_init_work:
+	setarg mem_l2cap_xmem_end
+	arg mem_l2cap_xmem_start,contw
+	isub contw,loopcnt
+	call clear_mem
+l2cap_init_wake:	
+	bpatchx patch20_6,mem_patch20
+	setarg mem_sdp_mem_end
+	arg mem_sdp_mem_start,contw
+	isub contw,loopcnt
+	call clear_mem
+	setarg mem_l2cap_mem_end
+	arg mem_l2cap_mem_start,contw
+	isub contw,loopcnt
+	call clear_mem
+	branch l2cap_lpm_load_txbuf
+	
+process_rx_l2cap_pkt:
+	bpatchx patch20_7,mem_patch20
+	copy contr,temp
+	//call l2cap_malloc_is_fifo_full
+	//nrtn blank
+	copy temp,contr
+	ifetch 2,contr
+	store 2,mem_l2cap_rx_pkt_length
+	ifetch 2,contr
+	store 2,mem_l2cap_rx_cid
+	deposit contr
+	store 2,mem_l2cap_payload_ptr
+	fetch 1,memui_reconnect_mode
+	beq NO_RECONNECTION,l2cap_rx_multiplexing
+	branch ml2cap_rx_multiplexing
+
+l2cap_rx_multiplexing:
+	fetch 2, mem_l2cap_rx_pkt_length
+	branch l2cap_rx_reset_state,blank
+	bpatchx patch21_0,mem_patch21
+	fetch 1,mem_l2cap_rx_cid
+	beq L2CAP_signal_channel,l2cap_call_proc_signal
+l2cap_rx_multiplexing0:
+	beq L2CAP_SDP_channel,l2cap_call_proc_sdp
+	beq L2CAP_RFCOMM_channel,l2cap_call_proc_rfcomm
+	beq L2CAP_HID_Control_channel,l2cap_call_proc_hid
+	beq L2CAP_HID_Interrupt_channel,l2cap_call_proc_hid
+	branch l2cap_rx_reset_state
+
+l2cap_check_map:
+//	call l2cap_malloc_is_fifo_full
+//	nrtn blank
+	bpatchx patch21_1,mem_patch21
+	call l2cap_malloc_get_full_map
+	fetch 1,mem_used_map
+	beq 0,set_pdata_0
+	beq 1,set_pdata_0
+	beq 2,set_pdata_0
+	beq 3,set_pdata_0
+	beq 0x81,set_pdata_0
+	beq 0xc0,set_pdata_0
+	beq 0x80,set_pdata_0
+	beq 0x40,set_pdata_0
+	rtn
+
+set_pdata_0:
+	setarg 0
+	rtn
+
+
+l2cap_call_proc_signal:
+	call l2cap_check_map
+	nrtn blank
+l2cap_call_proc_signal0:
+	call l2cap_malloc_signal_channel
+	call l2cap_process_signal_pkt
+	fetcht 2,mem_l2cap_signal_tx_length
+	branch l2cap_call_proc_no_reply,blank
+	call l2cap_get_signal_tx_buff
+	fetch 2,mem_l2cap_signal_tx_length
+	istore 2,contw
+	force L2CAP_signal_channel,pdata
+	istore 2,contw
+	branch l2cap_rx_reset_state
+	
+l2cap_call_proc_sigal_pending:
+	fetch 1,mem_l2cap_pending_item
+	rtn blank
+	copy pdata,rega
+	bpatchx patch21_2,mem_patch21
+	fetch 4,mem_l2cap_sdpres_delay_time
+	arg 0x100,temp
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	jam 0,mem_l2cap_pending_item
+	copy rega,pdata
+	beq L2CAP_SDP_channel,l2cap_sdp_conn_succ
+	branch assert
+l2cap_sdp_conn_succ:
+	arg 0,debug
+	call l2cap_malloc_signal_channel
+	call restore_l2cap_req_param
+	call l2cap_get_signal_tx_payload
+	call save_cont_pointers
+	call send_connection_sdp_res
+	call l2cap_get_signal_tx_buff
+	//fetch 2,mem_l2cap_signal_tx_length
+	setarg 0x000c
+	istore 2,contw
+	force L2CAP_signal_channel,pdata
+	istore 2,contw
+	branch l2cap_rx_reset_state
+
+
+
+l2cap_reset_sdp_map:
+	bpatchx patch21_3,mem_patch21
+	fetch 2,mem_sdp_tx_pkt_length
+	increase 4,pdata
+	rshift4 pdata,pdata
+	rshift3 pdata,pdata
+	add pdata,1,temp ///temp: how many128
+	arg mem_tx_fifo3,contr
+	ifetch 3,contr
+	rtn blank
+	store 3,mem_tx_fifo_map_temp
+	fetch 1,mem_tx_fifo_map_temp
+	copy pdata,rega
+	call check_l2cap_map
+	copy regb,pdata
+	store 1,mem_tx_fifo3
+	rtn
+
+check_l2cap_map:
+	arg 0,queue
+	arg 0,regb
+
+check_l2cap_map_loop:
+	sub queue,7,null
+	nrtn positive
+	qisolate1 rega
+	branch check_l2cap_map_used,true
+	branch check_l2cap_map_used2
+
+check_l2cap_map_used:
+	copy temp,pdata
+	branch check_l2cap_map_used2,blank
+	qset1 regb
+	increase -1,temp
+
+check_l2cap_map_used2:
+	increase 1,queue
+	branch check_l2cap_map_loop
+
+l2cap_call_proc_sdp:
+	call l2cap_malloc_is_fifo_empty
+	nrtn blank// not process this packet until fifo empty
+	call l2cap_check_map
+	nrtn blank
+	call l2cap_malloc_sdp_channel
+	call sdp_process
+	call l2cap_reset_sdp_map
+	branch l2cap_call_proc_sdp_common
+
+	
+ml2cap_call_proc_sdp:
+	call l2cap_malloc_is_fifo_empty
+	nrtn blank// not process this packet until fifo empty
+	call l2cap_malloc_sdp_channel
+	call sdp_process
+l2cap_call_proc_sdp_common:
+	call l2cap_get_sdp_tx_buff
+	fetch 2,mem_sdp_tx_pkt_length
+	branch l2cap_call_proc_no_reply,blank
+	istore 2,contw
+	fetch 2,mem_sdp_remote_cid
+	istore 2,contw
+	branch l2cap_rx_reset_state
+
+l2cap_call_proc_hid:
+	call hid_rx_process
+	branch l2cap_rx_reset_state
+
+l2cap_call_proc_rfcomm:
+	bpatchx patch21_4,mem_patch21
+	jam RFCOMM_MALLOC_SUCCEED,mem_rfcomm_malloc_fail_flag
+	call rfcomm_rx_process
+	fetch 1,mem_rfcomm_malloc_fail_flag
+	rtneq RFCOMM_MALLOC_FAIL
+	branch l2cap_rx_reset_state
+l2cap_call_proc_no_reply:
+	call l2cap_malloc_discard
+	//fall through
+l2cap_rx_reset_state:
+	setarg 0
+	store 2,mem_l2cap_rx_pkt_length
+	store 2,mem_l2cap_rx_cid
+	jam L2CAP_RX_DONE,mem_l2cap_rx_done
+	rtn
+/* To process one L2CAP signalling pkt consisting of 1 or more signalling commands.	*/
+l2cap_process_signal_pkt:
+	bpatchx patch21_5,mem_patch21
+	call l2cap_get_signal_tx_payload
+	force 0,regB
+	fetch 2,mem_l2cap_rx_pkt_length
+	copy pdata,regC
+	fetch 2,mem_l2cap_payload_ptr
+	iforce contr
+l2cap_process_signal_pkt_loop:
+	call l2cap_process_one_signal
+	deposit regC
+	increase -4,regC
+	increase -4,pdata
+	nbranch l2cap_process_signal_pkt_loop,blank
+	copy regB,pdata
+	store 2,mem_l2cap_signal_tx_length
+	rtn
+
+l2cap_process_one_signal:
+	bpatchx patch21_6,mem_patch21
+	ifetch 1,contr
+	beq signal_cmd_reject,l2cap_proc_signal_cmd_reject
+	beq signal_connect_req,l2cap_proc_signal_connect_req
+	beq signal_connect_rsp,l2cap_proc_signal_connect_rsp
+	beq signal_config_req,l2cap_proc_signal_config_req
+	beq signal_config_rsp,l2cap_proc_signal_config_rsp
+	beq signal_disconnect_req,l2cap_proc_signal_disconnect_req
+	beq signal_disconnect_rsp,l2cap_proc_signal_disconnect_rsp
+	beq signal_echo_req,l2cap_proc_signal_echo_req
+	beq signal_echo_rsp,l2cap_proc_signal_echo_rsp
+	beq signal_info_req,l2cap_proc_signal_info_req
+	beq signal_info_rsp,l2cap_proc_signal_info_rsp
+	call l2cap_reject_command
+l2cap_process_one_signal_rtn:
+	rtn
+
+l2cap_proc_signal_info_req:
+	ifetch 1,contr //IDs
+	copy pdata,queue
+	ifetch 2,contr //length
+	copy pdata,rega
+	copy regc,pdata
+	isub rega,regc
+	setarg signal_info_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1, contw
+	ifetch 2,contr 
+l2cap_proc_signal_info_req_reply:
+	beq L2CAP_SIG_EXT_FEATRUE,l2cap_proc_signal_info_req_ext
+	beq L2CAP_SIG_FIX_FEATRUE,l2cap_proc_signal_info_req_fix
+	rtn
+l2cap_proc_signal_info_req_ext:
+	setarg 0x020008
+	istore 6, contw
+	setarg 0x0280
+	istore 4, contw
+	force 12,pdata
+	branch l2cap_proc_signal_info_req_common
+l2cap_proc_signal_info_req_fix:
+	setarg 0x3000c
+	istore 6, contw
+	setarg 0x0006
+	istore 8, contw
+	force 16,pdata
+l2cap_proc_signal_info_req_common:
+	iadd regb,regb
+	branch l2cap_process_one_signal_rtn
+	
+ml2cap_proc_signal_info_req:
+	ifetch 1,contr //IDs
+	copy pdata,queue
+	ifetch 2,contr //length
+	copy pdata,rega
+	ifetch 2,contr
+	store 2,mem_temp
+	copy regc,pdata
+	isub rega,regc 
+	call l2cap_get_signal_tx_payload
+	setarg signal_info_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw 
+	fetch 2,mem_temp
+	branch l2cap_proc_signal_info_req_reply
+
+
+/*  Respond to the command reject signal sent from the remote BD.   */
+l2cap_proc_signal_cmd_reject:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	iadd contr,contr
+	copy regC,pdata
+	isub regA,regC
+l2cap_proc_signal_cmd_reject_rtn:
+	branch l2cap_process_one_signal_rtn
+/* Respond to an L2CAP connection request from remote BD. (generate a connection_rsp)	*/
+l2cap_proc_signal_connect_req:
+	call save_cont_pointers
+	//fetch 6,mem_inquiry_bd_addr
+  	//store 6,mem_master_paged_bd_addr
+  	call load_cont_pointers
+	arg 0,debug
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	ifetch 2,contr
+	copy pdata,temp //PSM
+	ifetch 2,contr
+	copy pdata,timeup
+	bpatchx patch21_7,mem_patch21
+	copy temp,pdata
+	beq PSM_SDP,l2cap_proc_signal_connect_req_sdp
+	beq PSM_RFCOMM,l2cap_proc_signal_connect_req_rfcomm
+	beq PSM_HID_control,l2cap_proc_signal_connect_req_hid_ctrl
+	beq PSM_HID_interrupt,l2cap_proc_signal_connect_req_hid_int
+	call l2cap_reject_command
+	branch l2cap_proc_signal_connect_req_rtn
+
+l2cap_proc_signal_connect_req_sdp:
+	call save_cont_pointers
+	arg L2CAP_SDP_channel,temp
+	fetch 2,mem_sdp_remote_cid
+	nbranch already_connected,blank
+	copy timeup,pdata
+	store 2,mem_sdp_remote_cid
+	copy clkn_bt,pdata
+	store 4,mem_l2cap_sdpres_delay_time
+	call store_l2cap_req_param
+	branch  send_connection_pending
+
+store_l2cap_req_param:
+	storet 2,mem_psm
+	deposit timeup
+	store 2,mem_scid
+	deposit rega
+	store 2,mem_cmd_length
+	deposit regb
+	store 2,mem_tt2
+	deposit regc
+	store 2,mem_tt3
+	deposit queue
+	store 2,mem_id
+	rtn
+
+restore_l2cap_req_param:
+	fetcht 2,mem_psm
+	fetch 2,mem_scid
+	copy pdata,timeup
+	fetch 2,mem_cmd_length
+	copy pdata,rega
+	fetch 2,mem_tt2
+	copy pdata,regb
+	fetch 2,mem_tt3
+	copy pdata,regc
+	fetch 2,mem_id
+	copy pdata,queue
+	rtn
+
+l2cap_proc_signal_connect_req_rfcomm:
+	call save_cont_pointers
+	setarg L2CAP_RFCOMM_channel
+	arg L2CAP_RFCOMM_channel,temp
+	fetch 2,mem_RFCOMM_remote_CID
+	nbranch already_connected,blank
+	copy timeup,pdata
+	store 2,mem_RFCOMM_remote_CID
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_rfcomm_state
+	branch send_connection_res
+l2cap_proc_signal_connect_req_hid_ctrl:
+	call save_cont_pointers
+	arg L2CAP_HID_Control_channel,temp
+	fetch 2,mem_hid_ctrl_remote_cid
+	nbranch already_connected,blank
+	copy timeup,pdata
+	store 2,mem_hid_ctrl_remote_cid
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_hid_control_state
+	branch send_connection_res
+l2cap_proc_signal_connect_req_hid_int:
+	call save_cont_pointers
+	deposit clke
+	arg L2CAP_HID_Interrupt_channel,temp
+	fetch 2,mem_hid_int_remote_cid
+	nbranch already_connected,blank
+	copy timeup,pdata
+	store 2,mem_hid_int_remote_cid
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_hid_interrupt_state
+	branch send_connection_res
+
+send_connection_pending:
+	setarg L2CAP_connect_pending
+	store 2,memL2CAP_T1
+	jam L2CAP_SDP_channel,mem_l2cap_pending_item
+	branch send_connection_res0
+send_connection_sdp_res:
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_sdp_state
+send_connection_res:
+	setarg L2CAP_connect_successful
+	store 2,memL2CAP_T1
+send_connection_res0:
+	bpatchx patch22_0,mem_patch22
+	call load_cont_pointers
+	setarg signal_connect_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 0x0008
+	istore 2,contw
+	copy temp,pdata
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	fetch 2,memL2CAP_T1
+	beq L2CAP_connect_pending,connect_pending
+	isolate0 0,debug
+	branch connect_suc,true
+	setarg L2CAP_connect_refused_no_resources
+connect_suc:
+	istore 2,contw
+	force 0x0000,pdata
+	istore 2,contw
+	setarg 12
+	branch connect_req_update_byte_counts
+connect_pending:
+	istore 2,contw
+	force 0x0002,pdata
+	istore 2,contw
+	setarg 12
+	branch connect_req_update_byte_counts
+	
+already_connected:
+	set1 0,debug
+	branch send_connection_res
+connect_req_update_byte_counts:
+	iadd regB,regB
+	copy regC,pdata
+	isub regA,regC
+	branch l2cap_proc_signal_connect_req_rtn
+l2cap_proc_signal_connect_req_rtn:
+	branch l2cap_process_one_signal_rtn
+
+l2cap_proc_signal_connect_rsp:
+	ifetch 1,contr //identifier
+	copy pdata,queue
+	ifetch 2,contr //length
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr //remote cid
+	copy pdata,timeup
+	ifetch 2,contr //local cid
+	copy pdata,temp
+	bpatchx patch22_1,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch l2cap_proc_signal_connect_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch l2cap_proc_signal_connect_rsp_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch l2cap_proc_signal_connect_rsp_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch l2cap_proc_signal_connect_rsp_hid_int,zero
+	rtn
+
+l2cap_proc_signal_connect_rsp_sdp:
+	copy timeup,pdata
+	store 2,mem_sdp_remote_cid
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_sdp_state
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_connect_rsp_rfcomm:
+	copy timeup,pdata
+	store 2,mem_rfcomm_remote_CID
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_rfcomm_state
+	rtn
+l2cap_proc_signal_connect_rsp_hid_int:
+	copy timeup,pdata
+	store 2,mem_hid_ctrl_remote_cid
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_hid_interrupt_state
+	rtn
+l2cap_proc_signal_connect_rsp_hid_ctrl:
+	copy timeup,pdata
+	store 2,mem_hid_int_remote_cid
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_hid_control_state
+	rtn
+
+l2cap_proc_signal_config_req:
+	ifetch 1,contr//identifier
+	copy pdata,queue
+	ifetch 2,contr//length
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr//dest cid
+	copy pdata,temp
+	copy temp,regA
+	bpatchx patch22_2,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch l2cap_proc_signal_config_req_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch l2cap_proc_signal_config_req_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch l2cap_proc_signal_config_req_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch l2cap_proc_signal_config_req_hid_int,zero
+	branch l2cap_reject_command
+	//branch L2CAP_proc_signal_config_req_rtn
+l2cap_proc_signal_config_req_sdp:
+	copy contw, timeup
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	//set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_sdp_state
+	copy timeup,contw
+	arg L2CAP_SDP_channel,timeup
+	fetch 2,mem_sdp_remote_cid
+	copy pdata,temp
+	branch l2cap_send_config_rsp
+l2cap_proc_signal_config_req_hid_ctrl:
+	copy contw, timeup
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	//set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_hid_control_state
+	copy timeup,contw
+	arg L2CAP_HID_Control_channel,timeup
+	fetch 2,mem_hid_ctrl_remote_cid
+	copy pdata,temp
+	branch l2cap_send_config_rsp
+l2cap_proc_signal_config_req_hid_int:
+	copy contw, timeup
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	//set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_hid_interrupt_state
+	copy timeup,contw
+	arg L2CAP_HID_Interrupt_channel,timeup
+	fetch 2,mem_hid_int_remote_cid
+	copy pdata,temp
+	branch l2cap_send_config_rsp
+l2cap_proc_signal_config_req_rfcomm:
+	copy contw, timeup
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	//set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_rfcomm_state
+//	jam UPPERSM_RP_SDP_CONN,mem_upper_sm_remote_page
+	copy timeup,contw
+	arg L2CAP_RFCOMM_channel,timeup
+	fetch 2,mem_RFCOMM_remote_CID
+	copy pdata,temp
+l2cap_send_config_rsp:
+	bpatchx patch22_3,mem_patch22
+	setarg  signal_config_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 0x0006
+	istore 2,contw
+	copy temp,pdata
+	istore 2,contw
+	force 0x00,pdata
+	istore 2,contw
+	force L2CAP_config_success,pdata
+	istore 2,contw
+	force 10,pdata
+	iadd regB,regB
+	//copy temp,pdata
+	storet 2,mem_config_req_dest_CID
+	copy queue,pdata
+	store 1,mem_config_identifier
+	force L2CAP_SDP_channel,pdata
+	icompare 0xff,timeup
+	branch l2cap_send_config_rsp_is_sdp,true
+	increase 1,pdata
+l2cap_send_config_rsp_is_sdp:
+	//store 1,mem_send_config_req
+	rtn
+l2cap_check_channel_state:
+	disable user
+	rtnbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	copy contr,contw
+	increase -1,contw
+	istore 1,contw
+	enable user
+	rtn
+l2cap_send_config_req:
+l2cap_send_config_req_sdp:
+	fetch 1,mem_sdp_state
+	call l2cap_check_channel_state
+	nbranch l2cap_send_config_req_rfcomm,user
+	jam L2CAP_SDP_channel,mem_send_config_req
+	fetch 2,mem_sdp_remote_cid
+	store 2,mem_config_req_dest_CID
+	branch l2cap_generate_config_req
+l2cap_send_config_req_rfcomm:
+	fetch 1,mem_rfcomm_state
+	call l2cap_check_channel_state
+	nbranch l2cap_send_config_req_hid_ctrl,user
+	jam L2CAP_RFCOMM_channel,mem_send_config_req
+	fetch 2,mem_RFCOMM_remote_CID
+	store 2,mem_config_req_dest_CID
+	branch l2cap_generate_config_req
+l2cap_send_config_req_hid_ctrl:
+	fetch 1,mem_hid_control_state
+	call l2cap_check_channel_state
+	nbranch l2cap_send_config_req_hid_int,user
+	jam L2CAP_HID_Control_channel,mem_send_config_req
+	fetch 2,mem_hid_ctrl_remote_cid
+	store 2,mem_config_req_dest_CID
+	branch l2cap_generate_config_req
+l2cap_send_config_req_hid_int:
+	fetch 1,mem_hid_interrupt_state
+	call l2cap_check_channel_state
+	nrtn user//End of sending config req
+	jam L2CAP_HID_Interrupt_channel,mem_send_config_req
+	fetch 2,mem_hid_int_remote_cid
+	store 2,mem_config_req_dest_CID
+	//branch L2CAP_generate_config_req
+
+l2cap_generate_config_req:
+	bpatchx patch22_4,mem_patch22
+	call l2cap_get_req_id
+	call l2cap_malloc_signal_channel
+	force 0,regB
+	call l2cap_get_signal_tx_payload
+	force signal_config_req,pdata
+	istore 1,contw
+	fetch 1,mem_ML2CAP_comm_id
+	istore 1,contw
+	setarg 0x0008
+	istore 2,contw
+	fetch 2,mem_config_req_dest_CID
+	istore 2,contw
+	setarg 0x0000
+	istore 2,contw
+	force 1,pdata
+	istore 1,contw
+	force 2,pdata
+	istore 1,contw
+	fetch 1,mem_send_config_req
+	beq L2CAP_RFCOMM_channel,l2cap_generate_config_req_rfcomm
+	setarg L2CAP_config_MTU_SDP
+	istore 2,contw
+	branch l2cap_generate_config_req_done
+l2cap_generate_config_req_rfcomm:
+	setarg L2CAP_config_MTU_RFCOMM
+	istore 2,contw
+l2cap_generate_config_req_done:
+	arg 0x0c,temp
+	storet 2,mem_l2cap_signal_tx_length
+	call l2cap_get_signal_tx_buff
+	fetch 2,mem_l2cap_signal_tx_length
+	istore 2,contw
+	force L2CAP_signal_channel,pdata
+	istore 2,contw
+	jam 0,mem_send_config_req
+l2cap_proc_signal_config_req_rtn:
+	branch l2cap_process_one_signal_rtn
+
+l2cap_proc_signal_config_rsp:
+	increase 1,contr
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr //source cid
+	copy pdata,regA
+	bpatchx patch22_5,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub rega,null
+	branch l2cap_proc_signal_config_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub rega,null
+	branch l2cap_proc_signal_config_rsp_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub rega,null
+	branch l2cap_proc_signal_config_rsp_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub rega,null
+	branch l2cap_proc_signal_config_rsp_hid_int,zero
+	increase 2,contr
+	ifetch 2,contr
+	iforce null
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_config_rsp_sdp:
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata
+	store 1,mem_sdp_state
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_config_rsp_rfcomm:
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata
+	store 1,mem_rfcomm_state
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_config_rsp_hid_ctrl:
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata
+	store 1,mem_hid_control_state
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_config_rsp_hid_int:
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata
+	store 1,mem_hid_interrupt_state
+	jam BT_EVT_HID_CONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event
+	
+
+
+l2cap_proc_signal_disconnect_req:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr
+	copy pdata,regA
+	ifetch 2,contr
+	copy pdata,timeup
+	copy regA,temp
+	call save_cont_pointers
+	bpatchx patch22_6,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_req_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_req_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_req_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_req_hid_int,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+l2cap_proc_signal_disconnect_req_hid_ctrl:
+	copy timeup,temp
+	fetch 2,mem_hid_ctrl_remote_cid
+	isub temp,null
+	branch l2cap_disconnect_hid_control_now,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+l2cap_proc_signal_disconnect_req_hid_int:
+	copy timeup,temp
+	fetch 2,mem_hid_int_remote_cid
+	isub temp,null
+	branch l2cap_disconnect_hid_interrupt_now,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+
+l2cap_proc_signal_disconnect_req_sdp:
+	copy timeup,temp
+	fetch 2,mem_sdp_remote_cid
+	isub temp,null
+	branch l2cap_disconnect_sdp_now,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+l2cap_disconnect_hid_control_now:
+	call l2cap_reset_hid_ctrl_state
+	branch l2cap_send_disconnect_rsp_pkt
+l2cap_disconnect_hid_interrupt_now:
+	call l2cap_reset_hid_int_state
+	fetch 2, mem_hid_ctrl_remote_cid
+	branch l2cap_send_disconnect_rsp_pkt, blank
+	//set the flag,hid channel close
+	//should we set here?
+	//call HID_mem_lock
+	//fetch 1, mem_hid_cb1
+	//set1 HID_CB_APP_HID_DISCONNECTED,pdata
+	//store 1, mem_hid_cb1
+	//call HID_mem_unlock
+	branch l2cap_send_disconnect_rsp_pkt
+
+l2cap_disconnect_sdp_now:
+	call l2cap_reset_sdp_channel_state
+	fetch 1,mem_upper_sm_ss
+	nbranch l2cap_send_disconnect_rsp_pkt,blank
+	//jam LMP_ENCRYPTION_MODE_REQ,mem_lmo_opcode2
+	//jam UPPERSM_RP_SDP_CONN,mem_upper_sm_remote_page
+	branch l2cap_send_disconnect_rsp_pkt
+l2cap_proc_signal_disconnect_req_rfcomm:
+	copy timeup,temp
+	fetch 2, mem_RFCOMM_remote_CID
+	isub temp,null
+	branch l2cap_disconnect_rfcomm_now,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+l2cap_disconnect_rfcomm_now:
+	call l2cap_reset_rfcomm_channel_state
+	branch l2cap_send_disconnect_rsp_pkt
+l2cap_send_disconnect_rsp_pkt:
+	call load_cont_pointers
+	setarg signal_disconnect_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy regA,pdata
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	force 8,pdata
+	branch l2cap_proc_signal_disconnect_req_rtn
+l2cap_proc_signal_disconnect_req_err_rtn:
+	call load_cont_pointers
+	branch l2cap_proc_signal_disconnect_req_rtn
+l2cap_proc_signal_disconnect_req_rtn:
+	iadd regB,regB
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_disconnect_rsp:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr
+	copy pdata,timeup
+	ifetch 2,contr
+	copy pdata,temp
+	call save_cont_pointers
+	bpatchx patch22_7,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_rsp_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_rsp_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_rsp_hid_int,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_rsp_err_rtn
+l2cap_proc_signal_disconnect_rsp_sdp:
+	copy temp,regA
+	copy timeup,temp
+	fetch 2,mem_sdp_remote_cid
+	isub temp,null
+	call l2cap_reset_sdp_channel_state,zero
+	branch l2cap_proc_signal_disconnect_rsp_rtn
+l2cap_proc_signal_disconnect_rsp_rfcomm:
+	copy temp,regA
+	copy timeup,temp
+	fetch 2,mem_rfcomm_remote_CID
+	isub temp,null
+	call l2cap_reset_rfcomm_channel_state,zero
+	branch l2cap_proc_signal_disconnect_rsp_rtn
+l2cap_proc_signal_disconnect_rsp_hid_ctrl:
+	copy temp,regA
+	copy timeup,temp
+	fetch 2,mem_hid_ctrl_remote_cid
+	isub temp,null
+	call  l2cap_reset_hid_ctrl_state,zero
+	branch l2cap_proc_signal_disconnect_rsp_rtn
+l2cap_proc_signal_disconnect_rsp_hid_int:
+	copy temp,regA
+	copy timeup,temp
+	fetch 2,mem_hid_int_remote_cid
+	isub temp,null
+	call l2cap_reset_hid_int_state,zero
+	branch l2cap_proc_signal_disconnect_rsp_rtn
+l2cap_proc_signal_disconnect_rsp_rtn:
+	call load_cont_pointers
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_disconnect_rsp_err_rtn:
+	branch l2cap_process_one_signal_rtn
+
+/* received an echo request from remote BD.  Will echo the 1st 1 byte back,		*/
+l2cap_proc_signal_echo_req:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	iadd contr,contr
+	setarg 9
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	force 0x0000,pdata
+	istore 2,contw
+	force 4,pdata
+	iadd regB,regB
+	copy regC,pdata
+	isub regA,regC
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_echo_rsp:
+	branch l2cap_process_one_signal_rtn
+
+l2cap_proc_signal_info_rsp:
+	branch l2cap_process_one_signal_rtn
+l2cap_reject_command:
+	force 0,regB
+	call l2cap_get_signal_tx_payload
+	setarg signal_cmd_reject
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 2
+	istore 2,contw
+	setarg cmd_not_understood
+	istore 2,contw
+	increase 6,regB
+	arg 4,regC
+	branch l2cap_process_one_signal_rtn
+
+
+
+l2cap_reset_rfcomm_channel_state:
+	setarg 0
+	store 2,mem_RFCOMM_Tx_pkt_length
+	store 2,mem_RFCOMM_remote_CID
+	jam 0,mem_rfcomm_state
+	rtn
+l2cap_reset_sdp_channel_state:
+	setarg 0
+	store 2,mem_sdp_tx_pkt_length
+	store 2,mem_sdp_remote_cid
+	jam 0,mem_sdp_state
+	rtn
+l2cap_reset_hid_ctrl_state:
+	setarg 0
+	store 2,mem_hid_ctrl_remote_cid
+	jam 0,mem_hid_control_state
+	fetch 1,mem_hid_interrupt_state
+	beq 0,l2cap_reset_hid_disconnected
+	rtn
+
+l2cap_reset_hid_int_state:
+	setarg 0
+	store 2,mem_hid_int_remote_cid
+	jam 0,mem_hid_interrupt_state
+	fetch 1,mem_hid_control_state
+	beq 0,l2cap_reset_hid_disconnected
+	rtn
+	
+l2cap_reset_hid_disconnected:
+	jam BT_EVT_HID_DISCONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event	
+
+l2cap_disconnect_interrupt_req:
+	fetch 1,mem_CONTROL_tasks
+	set0  L2CAP_DISCONNECT_INTERRUPT, pdata
+	store 1,mem_CONTROL_tasks
+	fetch 2, mem_hid_int_remote_cid
+	rtn blank
+	call l2cap_malloc_signal_channel
+	fetch 2, mem_hid_int_remote_cid
+	copy pdata,regA
+	force L2CAP_HID_Interrupt_channel,regB
+	branch l2cap_generate_disconnect_req
+l2cap_disconnect_control_req:
+	fetch 1,mem_CONTROL_tasks
+	set0  L2CAP_DISCONNECT_CONTROL, pdata
+	store 1,mem_CONTROL_tasks
+	fetch 2, mem_hid_ctrl_remote_cid
+	rtn blank
+	call l2cap_malloc_signal_channel
+	fetch 2, mem_hid_ctrl_remote_cid
+	copy pdata,regA
+	force L2CAP_HID_Control_channel,regB
+l2cap_generate_disconnect_req:
+	call l2cap_get_req_id
+	call l2cap_get_signal_tx_payload
+	force signal_disconnect_req,pdata
+	istore 1,contw
+	fetch  1,mem_ML2CAP_comm_id
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy regA,pdata
+	istore 2,contw
+	copy regB,pdata
+	istore 2,contw
+	force 0x08,temp //signal tx length in temp
+	branch ml2cap_send_signal
+
+ml2cap_send_signal_connect_req:
+	bpatchx patch23_0,mem_patch23
+	call l2cap_get_req_id
+	call l2cap_get_signal_tx_payload
+	setarg signal_connect_req
+	istore 1,contw
+	fetch 1,mem_ML2CAP_comm_id
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy temp,pdata	 //PSM
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	arg 8,temp
+	branch ml2cap_send_signal
+ml2cap_send_signal_config_req:
+	bpatchx patch23_1,mem_patch23
+	call l2cap_get_req_id
+	call l2cap_get_signal_tx_payload
+	setarg signal_config_req
+	istore 1,contw
+	fetch 1,mem_ML2CAP_comm_id
+	istore 1,contw
+	setarg 0x0008
+	istore 2,contw
+	/****modigy for nokia*****/
+	copy temp,pdata
+	/*setarg 0x0040*/
+	istore 2,contw
+	setarg 0x0000
+	istore 2,contw
+	setarg 0x01
+	istore 1,contw
+	setarg 0x02
+	istore 1,contw
+	setarg L2CAP_config_MTU_RFCOMM
+	istore 2,contw
+	arg 0xc,temp
+	branch ml2cap_send_signal
+ml2cap_send_signal_disconn_req:
+	bpatchx patch23_2,mem_patch23
+	call l2cap_get_req_id
+	call l2cap_get_signal_tx_payload
+	setarg signal_disconnect_req
+	istore 1,contw
+	fetch 1,mem_ML2CAP_comm_id
+	increase 1,pdata
+	copy contw,regA
+	store 1,mem_ML2CAP_comm_id
+	copy regA,contw
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy temp,pdata
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	arg 0x8,temp
+	//branch ml2cap_send_signal
+	//Fall through
+ml2cap_send_signal:
+	storet 2,mem_l2cap_signal_tx_length
+	copy temp,pdata
+	branch l2cap_malloc_discard,blank
+	call l2cap_get_signal_tx_buff
+	fetch 2,mem_l2cap_signal_tx_length
+	istore 2,contw //make sure that length is still in temp!
+	force L2CAP_signal_channel,pdata
+	istore 2,contw
+	rtn
+
+msdp_send_req_done:
+	fetch 2,mem_sdp_tx_pkt_length
+	branch assert,blank
+	call l2cap_get_sdp_tx_buff
+	fetch 2,mem_sdp_tx_pkt_length
+	istore 2,contw
+	fetch 2,mem_sdp_remote_cid
+	istore 2,contw
+	rtn
+ml2cap_rx_multiplexing:
+	fetch 2, mem_l2cap_rx_pkt_length
+	branch l2cap_rx_reset_state,blank
+	bpatchx patch23_3,mem_patch23
+	fetch 1,mem_l2cap_rx_cid
+	beq L2CAP_signal_channel,ml2cap_call_proc_signal
+	beq L2CAP_SDP_channel,ml2cap_call_proc_sdp
+	beq L2CAP_RFCOMM_channel,l2cap_call_proc_rfcomm
+	beq L2CAP_HID_Control_channel,l2cap_call_proc_hid
+	beq L2CAP_HID_Interrupt_channel,l2cap_call_proc_hid
+	branch l2cap_rx_reset_state
+
+ml2cap_call_proc_signal:
+	bpatchx patch23_4,mem_patch23
+	call l2cap_malloc_signal_channel
+	force 0,regB
+	call l2cap_get_signal_tx_payload
+	copy pdata,contw
+	fetch 2,mem_l2cap_rx_pkt_length
+	copy pdata,regC
+	fetch 2,mem_l2cap_payload_ptr
+	iforce contr
+ml2cap_proc_one_comm_loop:
+	call ml2cap_proc_one_comm
+	increase -4,regC
+	nbranch ml2cap_proc_one_comm_loop,zero
+	copy regB,temp
+	call ml2cap_send_signal
+	branch l2cap_rx_reset_state
+	
+ml2cap_proc_one_comm:
+	ifetch 1,contr
+	beq signal_connect_req,ml2cap_proc_signal_connect_req
+	beq signal_cmd_reject,ml2cap_proc_signal_cmd_reject
+	beq signal_connect_rsp,ml2cap_proc_signal_connect_rsp
+	beq signal_config_rsp,ml2cap_proc_signal_config_rsp
+	beq signal_config_req,ml2cap_proc_signal_config_req
+	beq signal_disconnect_rsp,ml2cap_proc_signal_disconn_rsp
+	beq signal_disconnect_req,ml2cap_proc_signal_disconn_req
+	beq signal_echo_req,l2cap_proc_signal_echo_req
+	beq signal_info_req,ml2cap_proc_signal_info_req
+	branch ml2cap_proc_send_reject
+
+ml2cap_proc_signal_connect_req:
+	call save_cont_pointers
+	//jam NO_RECONNECTION,memui_reconnect_mode
+	call load_cont_pointers
+	branch l2cap_proc_signal_connect_req
+ml2cap_proc_signal_cmd_reject:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+mvptr:
+	ifetch 1,contr
+	increase -1,regA
+	nbranch mvptr,zero
+	rtn
+ml2cap_proc_signal_connect_rsp:
+	ifetch 1,contr //id
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA	//length
+	ifetch 2,contr
+	copy pdata,timeup	//destination	cid
+	ifetch 2,contr
+	copy pdata,temp	//source	cid
+	ifetch 2,contr 		// result
+	sub pdata,0,null
+	branch ml2cap_proc_signal_connect_rsp_sucessful,zero
+	beq L2CAP_connect_refused_PSM_unsupported,ml2cap_proc_signal_connect_refused_result
+	beq L2CAP_connect_refused_no_resources,ml2cap_proc_signal_connect_refused_result
+	branch ml2cap_proc_signal_connect_rsp_mnosucc
+ml2cap_proc_signal_connect_refused_result:
+	jam BT_EVT_ML2CAP_CONN_REFUSED,mem_fifo_temp
+	call ui_ipc_send_event
+ml2cap_proc_signal_connect_rsp_mnosucc:
+	ifetch 2,contr //reason
+	branch mnosucc
+ml2cap_proc_signal_connect_rsp_sucessful:
+	call save_cont_pointers
+	//fetch 1,mem_ML2CAP_comm_id
+	//icompare 0xff,queue
+	//nbranch mnosucc1,true
+	bpatchx patch23_5,mem_patch23
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch ml2cap_proc_signal_connect_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch ml2cap_proc_signal_connect_rsp_rfcomm,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch ml2cap_proc_signal_connect_rsp_hid_int,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch ml2cap_proc_signal_connect_rsp_hid_ctrl,zero
+	branch mnosucc
+ml2cap_proc_signal_connect_rsp_sdp:
+	copy timeup,pdata
+	store 2,mem_sdp_remote_cid
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES
+	store 1,mem_sdp_state
+	branch mnosucc1
+ml2cap_proc_signal_connect_rsp_rfcomm:
+	copy timeup,pdata
+	store 2,mem_RFCOMM_remote_CID
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES
+	store 1,mem_rfcomm_state
+	branch mnosucc1
+ml2cap_proc_signal_connect_rsp_hid_ctrl:
+	copy timeup,pdata
+	store 2,mem_hid_ctrl_remote_cid
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES
+	store 1,mem_hid_control_state
+	branch mnosucc1
+ml2cap_proc_signal_connect_rsp_hid_int:
+	copy timeup,pdata
+	store 2,mem_hid_int_remote_cid
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES
+	store 1,mem_hid_interrupt_state
+	//branch mnosucc1
+
+mnosucc1:
+	call load_cont_pointers
+mnosucc:
+	copy regC,pdata
+	isub regA,regC
+	rtn
+
+ml2cap_proc_signal_config_rsp:
+	ifetch 1,contr		//	Ident
+	copy pdata,queue
+	ifetch 2,contr		//	SigLen
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr		//	DestnCID
+	copy pdata,timeup
+	ifetch 2,contr
+	ifetch 2,contr		//	Get the result value, check success
+	nbranch mcrsdone1,blank
+	call save_cont_pointers
+	//fetch 1,mem_ML2CAP_comm_id
+	//icompare 0xff,queue
+	//nbranch mcfrsdone,true
+	copy timeup,temp
+	bpatchx patch23_6,mem_patch23
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_rsp_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_rsp_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_rsp_hid_int,zero
+ml2cap_proc_signal_config_rsp_sdp:
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+	store 1,mem_sdp_state
+	rtn
+ml2cap_proc_signal_config_rsp_rfcomm:
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+	store 1,mem_rfcomm_state
+	rtn
+ml2cap_proc_signal_config_rsp_hid_ctrl:
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+	store 1,mem_hid_control_state
+	rtn
+ml2cap_proc_signal_config_rsp_hid_int:
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+	store 1,mem_hid_interrupt_state
+	jam BT_EVT_HID_CONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+mcfrsdone:
+	call load_cont_pointers
+mcrsdone1:
+	increase -6,regA
+mloop2:
+	branch mcrsdone,zero
+	increase 1,contr
+	increase -1,regA
+	branch mloop2
+mcrsdone:
+	rtn
+ml2cap_proc_signal_config_req:
+	ifetch 1,contr		//	Ident
+	copy pdata,queue
+	ifetch 2,contr		//	SigLen
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr		//	DestnCID
+	increase 2,contr
+	copy pdata,temp
+	setarg  signal_config_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	increase 2,regA
+	copy regA,pdata
+	istore 2,contw
+	call save_cont_pointers
+	bpatchx patch23_7,mem_patch23
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_req_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_req_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_req_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_req_hid_int,zero
+	branch mcfgrq_done
+ml2cap_proc_signal_config_req_sdp:
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	store 1,mem_sdp_state
+	bbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,ml2cap_proc_signal_config_req_sdp_nsndreq
+	fetcht 1,mem_CONTROL_tasks
+	set1 L2CAP_init_Config_Req,temp
+	storet 1,mem_CONTROL_tasks
+	copy queue,pdata
+	increase 1,pdata
+	store 1,mem_config_identifier
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_sdp_state
+ml2cap_proc_signal_config_req_sdp_nsndreq:
+	fetch 2,mem_sdp_remote_cid
+	store 2,mem_config_req_dest_CID
+	branch mcfgrq_done
+ml2cap_proc_signal_config_req_rfcomm:
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	store 1,mem_rfcomm_state
+	fetch 2,mem_RFCOMM_remote_CID
+	branch mcfgrq_done
+ml2cap_proc_signal_config_req_hid_ctrl:
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	store 1,mem_hid_control_state
+	fetch 2,mem_hid_ctrl_remote_cid
+	branch mcfgrq_done
+ml2cap_proc_signal_config_req_hid_int:
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	store 1,mem_hid_interrupt_state
+	fetch 2,mem_hid_int_remote_cid
+	//branch mcfgrq_done
+
+mcfgrq_done:
+	copy pdata,timeup
+	call load_cont_pointers
+/*******for Nokia**************/
+	copy timeup,pdata
+	/*setarg 0x0040*/
+	istore 2,contw
+	force 0x0000,pdata
+	istore 2,contw
+	force 0x0000,pdata
+	istore 2,contw
+	force 10,pdata
+	iadd regB,regB
+	increase -6,regA
+mloop1:
+	branch mcrqdone,zero
+	ifetch 1,contr
+	istore 1,contw
+	increase 1,regB
+	increase -1,regA
+	branch mloop1
+mcrqdone:
+	rtn
+ml2cap_proc_signal_disconn_req:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+
+	ifetch 2,contr
+	copy pdata,regA
+	ifetch 2,contr
+	copy pdata,timeup
+	call save_cont_pointers
+	bpatchx patch24_0,mem_patch24
+	setarg L2CAP_SDP_channel
+	copy regA,temp
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_sdp,zero
+	setarg L2CAP_HID_Control_channel
+	copy regA,temp
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	copy regA,temp
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_hid_int,zero
+	branch mclsrfc
+ml2cap_proc_signal_disconn_sdp:
+	setarg 0x0000
+	store 2,mem_sdp_tx_pkt_length
+	store 2,mem_sdp_remote_cid
+	store 1,mem_sdp_state
+	branch mclssdp
+ml2cap_proc_signal_disconn_hid_ctrl:
+	call l2cap_reset_hid_ctrl_state
+	branch mclssdp
+ml2cap_proc_signal_disconn_hid_int:
+	call l2cap_reset_hid_int_state
+	//call HID_mem_lock
+	//fetch 1, mem_hid_cb1
+	//set1 HID_CB_APP_HID_DISCONNECTED,pdata
+	//store 1, mem_hid_cb1
+	//call HID_mem_unlock
+	branch mclssdp
+mclsrfc:
+	setarg 0x0000
+	store 2,mem_RFCOMM_Tx_pkt_length
+mclssdp:
+	call load_cont_pointers
+	setarg signal_disconnect_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy regA,pdata
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	force 8,pdata
+	iadd regB,regB
+	rtn
+
+ml2cap_proc_signal_disconn_rsp:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	ifetch 2,contr
+	copy pdata,timeup
+	ifetch 2,contr
+	copy pdata,temp
+	call save_cont_pointers
+	bpatchx patch24_1,mem_patch24
+	fetch 1,mem_ML2CAP_comm_id
+	icompare 0xff,queue
+	nbranch mdisdone,true
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_rsp_rfcomm,zero
+	branch mdisdone
+ml2cap_proc_signal_disconn_rsp_sdp:
+	jam 0,mem_sdp_remote_cid
+	jam 0,mem_sdp_state
+	branch mdisdone
+ml2cap_proc_signal_disconn_rsp_rfcomm:
+	//
+	//
+mdisdone:
+	call load_cont_pointers
+	copy regC,pdata
+	isub regA,regC
+	rtn
+
+ml2cap_proc_send_reject:
+	setarg signal_cmd_reject
+	istore 1,contw
+	ifetch 1,contr
+	istore 1,contw
+	setarg 0x0002
+	istore 2,contw
+	setarg 0x0000
+	istore 2,contw
+	setarg 0x0006
+	iadd regB,regB
+	force 4,regC
+	rtn
+	
+//l2cap command id, 0 is not allowed
+l2cap_get_req_id:
+	fetch 1,mem_ML2CAP_comm_id
+	increase 1,pdata
+	bne 0,l2cap_get_req_id_ok
+	increase 1,pdata
+l2cap_get_req_id_ok:
+	store 1,mem_ML2CAP_comm_id
+	rtn
+
+
+/*********************************************************/
+//char* malloc(short len)
+//input: regA -> len
+//rtn: regB -> pbuff;return from pdata
+//val: queue -> i
+//val: timeup -> buff_cnt
+/*********************************************************/
+l2cap_malloc:
+	bpatchx patch24_2,mem_patch24
+	arg 0,regb
+	call l2cap_malloc_is_fifo_full
+	nbranch assert,blank//assert when fifo full
+	call l2cap_malloc_get_full_map
+	arg mem_tx_buff0,regB//pbuff = buff0;
+	arg 0,queue // i = 0;
+l2cap_malloc_loop:
+	fetcht 1,mem_used_map
+	qisolate1 temp
+	branch l2cap_malloc_next,true//if(1 == (used_map & (1 << i)))goto next;
+	call l2cap_malloc_enough
+	sub timeup,0,null// (0 - timeup)
+	branch l2cap_malloc_next,positive//if(buff_cnt <= 0)goto next;
+	call l2cap_malloc_into_fifo
+	branch l2cap_malloc_rtn//return (pbuff);
+l2cap_malloc_next:
+	increase 128,regB//pbuff += BUFF_SIZE;//point to next buff
+	increase 1,queue
+	setarg 8//BUFF_MAX_COUNT
+	isub queue,null //BUFF_MAX_COUNT - i
+	branch l2cap_malloc_loop,positive//while(i < buff_max_count)
+	arg 0,regB//return NULL
+l2cap_malloc_rtn:
+	copy regB,pdata
+	branch assert,blank
+	rtn//return pointer via pdata
+	
+/*********************************************************/
+//void* l2cap_malloc_fifo_out(void)
+//output:len -> temp
+//output:ptr ->pdata
+//only get ptr,not free
+/*********************************************************/
+l2cap_malloc_fifo_out:
+	bpatchx patch24_3,mem_patch24
+	call l2cap_malloc_fifo_get_first_ptr
+	increase 1,contr
+	ifetch 2,contr //ptr ->pdata
+	rtn 
+
+/*********************************************************/
+//void free_first_buff_in_fifo(void)
+//only free the first one
+/*********************************************************/
+l2cap_malloc_free:
+	bpatchx patch24_4,mem_patch24
+	call l2cap_malloc_fifo_get_first_ptr
+	copy contr,contw
+	copy contr,temp
+	setarg 0
+	istore 3,contw
+	rtn
+/*********************************************************/
+//void l2cap_malloc_discard(void)
+//discard the latest malloc
+/*********************************************************/
+l2cap_malloc_discard:
+	bpatchx patch24_5,mem_patch24
+	call l2cap_malloc_is_fifo_empty
+	branch assert,blank
+	fetch 3,mem_tx_fifo2
+	store 3,mem_tx_fifo3
+	fetch 3,mem_tx_fifo1
+	store 3,mem_tx_fifo2
+	fetch 3,mem_tx_fifo0
+	store 3,mem_tx_fifo1
+	rtn
+/*********************************************************/
+//bool fifo_is_full(void)
+//blank == 1: not full
+//blank == 0: full
+/*********************************************************/
+l2cap_malloc_is_fifo_full:
+	bpatchx patch24_6,mem_patch24
+	fetch 3,mem_tx_fifo0
+	rtn
+/*********************************************************/
+//bool fifo_nearly_full(void)
+//blank == 1: nearly full
+//blank == 0: not nearly full
+/*********************************************************/
+l2cap_malloc_is_fifo_nearly_full:
+	bpatchx patch24_7,mem_patch24
+	fetch 3,mem_tx_fifo1
+	rtn
+/*********************************************************/
+//bool fifo_is_empty(void)
+//blank == 1: empty
+//blank == 0: not empty
+/*********************************************************/
+l2cap_malloc_is_fifo_empty:
+	bpatchx patch25_0,mem_patch25
+	fetch 3,mem_tx_fifo3
+	rtn
+/*********************************************************/
+//char* l2cap_malloc_fifo_get_first_ptr(void)
+//output:contr  -->ptr
+/*********************************************************/	
+l2cap_malloc_fifo_get_first_ptr:
+	call l2cap_malloc_is_fifo_empty
+	branch assert,blank // fifo is empty
+	arg mem_tx_fifo0,contr
+l2cap_malloc_free_loop:
+	ifetch 3,contr
+	branch l2cap_malloc_free_loop,blank
+	increase -3,contr
+	rtn
+
+/*********************************************************/
+//char* l2cap_malloc_get_full_map(void)
+//output:mem_used_map  -->full_map
+//add all maps into one
+/*********************************************************/	
+l2cap_malloc_get_full_map:
+	bpatchx patch25_1,mem_patch25
+	arg 4,loopcnt
+	arg mem_tx_fifo0_map,contr
+	arg 0,temp
+l2cap_malloc_get_full_map_loop:	
+	ifetch 3,contr
+	and pdata,0xff,pdata
+	ior temp,temp
+	loop l2cap_malloc_get_full_map_loop
+	storet 1,mem_used_map
+	rtn
+/*********************************************************/
+//void buff_into_fifo(char buff_index, char buff_cnt, short len)
+//input: regA -> len
+//input: regC -> buff_index
+//input: timeup -> buff_cnt
+//val:temp ->   (fifo->map)
+/*********************************************************/
+l2cap_malloc_into_fifo:
+	bpatchx patch25_2,mem_patch25
+	call l2cap_malloc_is_fifo_full
+	nbranch assert,blank //fifo full
+	call l2cap_malloc_is_fifo_empty
+	branch l2cap_malloc_into_fifo_no_push,blank//fifo empty, no need to push
+	fetch 3,mem_tx_fifo1
+	store 3,mem_tx_fifo0
+	ifetch 3,contr//mem_tx_fifo2
+	istore 3,contw//mem_tx_fifo1
+	ifetch 3,contr//mem_tx_fifo3
+	istore 3,contw//mem_tx_fifo2
+	setarg 0
+	istore 3,contw//mem_tx_fifo3
+l2cap_malloc_into_fifo_no_push:
+	arg 0,temp
+	copy timeup,pdata
+	iadd queue,pdata
+l2cap_malloc_into_fifo_loop:
+	qset1 temp//fifo->map |= 1 << i;
+	increase 1,queue
+	isub queue,null
+	nbranch l2cap_malloc_into_fifo_loop,zero
+	//map in temp
+	lshift8 regB,pdata
+	ior temp,pdata
+	store 3,mem_tx_fifo3
+	rtn
+
+/*********************************************************/
+//char is_size_enough(char buff_index, short len)
+//input: regA -> len
+//input: queue -> buff_index
+//rtn: timeup -> buff_cnt
+//val: max_size_fom_buff_index -> temp
+//val: i -> loopcnt
+/*********************************************************/
+l2cap_malloc_enough:
+	bpatchx patch25_3,mem_patch25
+	call l2cap_malloc_get_full_map
+	copy queue,regC//restore buff_index to regC
+	arg 0,temp
+	arg 0,timeup//default return val
+	//increase 1,queue
+l2cap_malloc_enough_loop:
+	copy queue,pdata
+	beq 8,l2cap_malloc_enough_end
+	fetch 1,mem_used_map
+	qisolate1 pdata
+	branch l2cap_malloc_enough_end,true
+	increase 128,temp
+	increase 1,queue
+	copy regA,pdata
+	isub temp,null
+	branch l2cap_malloc_enough_end,zero//(max_size_fom_buff_index ==  len)
+	branch l2cap_malloc_enough_loop,positive//(max_size_fom_buff_index <  len)
+l2cap_malloc_enough_end:
+	copy temp,pdata
+	isub regA,null
+	nbranch l2cap_malloc_enough_rtn,positive// max_size_fom_buff_index - len > 0
+	copy queue,pdata//i
+	copy regC,temp//buff_index
+	isub temp,timeup//return (i - buff_index)
+l2cap_malloc_enough_rtn:
+	copy regC,queue//restore buff_index to queue
+	rtn
+	
+
+l2cap_malloc_signal_channel:
+	bpatchx patch25_4,mem_patch25
+	arg L2CAP_SIGNAL_MALLOC_SIZE,regA
+	call l2cap_malloc
+	store 2,mem_l2cap_signal_tx_buff_ptr
+	increase 4,pdata
+	store 2,mem_l2cap_signal_tx_payload_ptr
+	setarg 0
+	store 2,mem_l2cap_signal_tx_length
+	rtn
+
+l2cap_get_signal_tx_buff:
+	fetch 2,mem_l2cap_signal_tx_buff_ptr
+	branch l2cap_util_pdata_to_contw
+
+l2cap_get_signal_tx_payload:
+	fetch 2,mem_l2cap_signal_tx_payload_ptr
+	branch l2cap_util_pdata_to_contw
+
+
+l2cap_malloc_sdp_channel:
+	bpatchx patch25_5,mem_patch25
+	arg SDP_MALLOC_SIZE,regA
+	call l2cap_malloc
+	store 2,mem_sdp_tx_buff_ptr
+	increase 4,pdata
+	store 2,mem_sdp_tx_payload_ptr
+	setarg 0
+	store 2,mem_sdp_tx_pkt_length
+	rtn
+
+l2cap_get_sdp_tx_buff:
+	fetch 2,mem_sdp_tx_buff_ptr
+	branch l2cap_util_pdata_to_contw
+
+l2cap_get_sdp_tx_payload:
+	fetch 2,mem_sdp_tx_payload_ptr
+	branch l2cap_util_pdata_to_contw
+
+
+l2cap_malloc_rfcomm_channel:
+	bpatchx patch25_6,mem_patch25
+	call push_stack
+	jam RFCOMM_MALLOC_FAIL,mem_rfcomm_malloc_fail_flag
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	arg RFCOMM_MALLOC_SIZE,regA
+	call l2cap_malloc
+	store 2,mem_rfcomm_tx_buff_ptr
+	increase 4,pdata
+	store 2,mem_rfcomm_tx_payload_ptr
+	setarg 0
+	store 2,mem_rfcomm_tx_pkt_length
+	jam RFCOMM_MALLOC_SUCCEED,mem_rfcomm_malloc_fail_flag
+	branch pop_stack
+
+l2cap_get_rfcomm_tx_buff:
+	fetch 2,mem_rfcomm_tx_buff_ptr
+	branch l2cap_util_pdata_to_contw
+	
+l2cap_util_pdata_to_contw:
+	branch assert,blank
+	copy pdata,contw
+	rtn
+	
+
+l2cap_lpm_save_calc_len:
+	bpatchx patch25_7,mem_patch25
+	arg 0,regb
+	arg mem_tx_fifo0_map,rega
+	increase -2,rega
+l2cap_lpm_save_calc_len_loop:
+	increase 2,rega
+	setarg mem_tx_fifo_end
+	isub rega,null
+	branch l2cap_lpm_save_calc_len_end,zero //end of 2lcap tx fifo
+	ifetch 1,rega
+	increase 1,rega
+	branch l2cap_lpm_save_calc_len_loop,blank
+	ifetcht 2,rega
+	ifetch 2,temp
+	iadd regb,regb
+	increase 4,regb //l2cap header len
+	branch l2cap_lpm_save_calc_len_loop
+l2cap_lpm_save_calc_len_end:
+	copy regb,pdata
+	rtn
+
+
+l2cap_lpm_get_wake_lock:
+	arg wake_lock_l2cap_tx,queue
+	branch lpm_get_wake_lock
+
+l2cap_lpm_put_wake_lock:
+	arg wake_lock_l2cap_tx,queue
+	branch lpm_put_wake_lock
+	
+l2cap_lpm_save_txbuf:
+	bpatchx patch26_0,mem_patch26
+	call l2cap_malloc_get_full_map
+	fetch 1,mem_used_map
+	rtn blank
+	call l2cap_lpm_save_calc_len
+	arg l2cap_lpm_txbuf_len,temp
+	isub temp,null
+	branch l2cap_lpm_get_wake_lock,positive //no enougth space to save l2cap tx data
+	call l2cap_lpm_put_wake_lock
+	arg mem_l2cap_lpm_txbuf,contw
+	arg mem_tx_fifo0,rega
+l2cap_lpm_save_txbuf_loop:
+	setarg mem_tx_fifo_end
+	isub rega,null
+	rtn zero //end of 2lcap tx fifo
+	ifetch 1,rega  //mem_tx_fifoX_map
+	increase 1,rega
+	nbranch l2cap_lpm_save_txbuf_nempty,blank
+	istore 2,contw // length = 0
+	increase 2,rega
+	branch l2cap_lpm_save_txbuf_loop
+l2cap_lpm_save_txbuf_nempty:
+	ifetch 2,rega //ptr
+	increase 2,rega
+	copy pdata,contr
+	ifetch 2,contr  //l2cap len
+	istore 2,contw
+	copy pdata,loopcnt
+	increase 2,loopcnt //add CID len
+	call memcpy
+	branch l2cap_lpm_save_txbuf_loop
+	
+l2cap_lpm_load_txbuf:
+	bpatchx patch26_1,mem_patch26
+	call l2cap_malloc_get_full_map
+	fetch 1,mem_used_map
+	rtn blank
+	arg mem_tx_fifo0_ptr,rega
+	increase -3,rega //mem_tx_fifo0_ptr -3
+	arg mem_l2cap_lpm_txbuf,contr
+l2cap_lpm_load_txbuf_loop:
+	increase 3,rega //mem_tx_fifoX_ptr
+	setarg mem_tx_fifo_end+1
+	isub rega,null
+	rtn zero //end of 2lcap tx fifo
+	ifetch 2,contr
+	branch l2cap_lpm_load_txbuf_loop,blank
+	increase 4,pdata //l2cap header len
+	copy pdata,loopcnt
+	copy contr,regb
+	ifetch 2,rega //ptr
+	copy pdata,contw
+	copy regb,contr
+	increase -2,contr
+	call memcpy
+	branch l2cap_lpm_load_txbuf_loop
+	
+
+
+	
+//******************************************//
+//*************LE INIT ****************//
+//******************************************//
+
+
+le_init_conn:
+	bpatchx patch26_2,mem_patch26
+	disable wake
+	jam 1,mem_le_conn_handle
+	jam 3,mem_le_state
+	jam 1,mem_le_arq
+	setarg -1
+	store 2,mem_le_event_count
+	force 0,pdata
+	store 1,mem_le_ch
+	store 1,mem_le_op
+	store 3,mem_sniff_rcv
+	store 3,mem_sniff_lost
+	store 5,mem_le_pcnt_tx
+	set1 39,pdata
+	store 5,mem_le_pcnt_rx
+	jam 1,mem_le_txheader
+	jam 0,mem_le_txlen
+	branch le_supervision_flush
+
+le_init_master:
+	bpatchx patch26_3,mem_patch26
+	enable master
+	jam lemode_master,mem_le_mode
+	jam 1,mem_le_att_handle
+	jam 1,mem_le_search_handle_start
+	setarg 0xffff
+	store 2,mem_le_search_handle_end
+	force 0,pdata
+	store 5,mem_le_pcnt_rx
+	set1 39,pdata
+	store 5,mem_le_pcnt_tx	
+	branch le_init_conn
+
+
+le_init_slave:
+	bpatchx patch26_4,mem_patch26
+	disable master
+ 	setarg 0x17
+ 	store 2,mem_le_remote_mtu
+	jam lemode_slave,mem_le_mode
+	jam 0,mem_le_adv_enable
+	jam 0,mem_lpm_current_mult
+	jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state
+	jam FLAG_LE_ENC_NULL,mem_le_enc_state
+	fetch 2,mem_le_superto
+	store 2,mem_le_init_superto
+	fetch 2,mem_le_tsniff
+	mul32 pdata,5,pdata
+	rshift4 pdata,pdata
+	store 2,mem_le_superto			// vol.6 part B 4.5.2 only 6*conninterval before establish
+	branch le_init_conn
+	
+
+//******************************************//
+//*************LE main process*********//
+//******************************************//
+le_dispatch:
+	call le_enable
+	call le_scan
+	call le_adv
+	branch le_disable
+
+le_conn_dispatch:
+	bpatchx patch26_5,mem_patch26
+	call le_enable
+	call app_process_ble
+	fetch 1,mem_le_mode
+	beq lemode_master,le_master_dispatch
+	branch le_slave_dispatch
+	
+//******************************************//
+//***********LE master process*********//
+//******************************************//
+	
+le_master_dispatch:
+	bpatchx patch26_6,mem_patch26
+	enable master
+	call le_supervision_update
+	branch le_master_disconn,positive
+	call check_ble_disabled
+	call le_setup
+	call le_prepare_tx
+	disable match
+	call le_transmit_receive_sifs
+	nrtn match
+	bpatchx patch26_7,mem_patch26
+	fetch 1,mem_le_conn_rcv
+	increase 1,pdata
+	store 1,mem_le_conn_rcv
+	call le_acknowledge
+	disable master
+	rtn
+	
+le_master_disconn:
+	call le_disconnect
+	disable master
+	rtn
+	
+//******************************************//
+//***********LE slave process***********//
+//******************************************//
+le_slave_dispatch:
+	bpatchx patch27_0,mem_patch27
+	jam 0,mem_le_md_count
+	call sp_calc_sequence_256
+	call le_secure_connect_sm
+	disable attempt
+	call le_supervision_update
+	branch le_slave_disconn,positive
+	call check_ble_disabled
+	call le_setup
+	call le_receive_slave
+	nbranch le_slave_unsync,sync	// vol.6 part B 4.5.1 respond even crc error
+	call le_got_first_packet
+	branch le_slave_match,match
+	branch le_slave_cont
+	
+
+le_slave_match:
+	bpatchx patch27_1,mem_patch27
+	fetch 1,mem_le_md_count
+	pincrease 1
+	store 1,mem_le_md_count
+	beq LE_MD_MAX_COUNT,le_slave_cont
+	call le_acknowledge
+	call le_prepare_tx
+	call le_transmit_norx
+	call le_parse
+	fetch 2,mem_cb_ble_transmit
+	call callback_func
+	call le_check_md
+	branch le_slave_more_data,user
+le_slave_cont:
+	bpatchx patch27_2,mem_patch27
+	call le_pairing_sm
+ 	call le_check_paring_time
+	call check_51cmd
+	fetch 1,mem_le_op
+	bbit1 op_disconn,le_slave_disconn
+le_slave_unsync:
+	bpatchx patch27_3,mem_patch27
+	call le_lpm_set_mult
+	call le_update_channel_map
+	call le_update_param
+	branch calc_clke_offset
+
+
+le_check_md:
+	disable user
+	bmark1 mark_ble_rx_md,enable_user
+	bmark1 mark_ble_tx_md,enable_user
+	rtn
+
+
+le_slave_more_data:
+	bpatchx patch27_4,mem_patch27
+	enable attempt
+	call le_transmit_receive_sifs_notx
+	branch le_slave_match,match
+	branch le_slave_cont
+
+le_slave_disconn:
+
+	//fall through
+le_disconnect:
+	bpatchx patch27_5,mem_patch27
+	call le_clear_connection_info
+	call app_disconn_reason_collect_ble
+	call sp_initialize_256
+	jam BT_EVT_LE_DISCONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event
+
+le_clear_connection_info:
+	setarg 0
+	store 9,mem_le_tx_buff_used
+	jam 0,mem_le_conn_handle
+	jam lemode_idle,mem_le_mode
+	jam 0,mem_le_state
+	jam FLAG_LE_ENC_NULL,mem_le_enc_state
+	jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state
+	rtn
+	
+le_got_first_packet:
+	bpatchx patch27_6,mem_patch27
+	fetch 1,mem_le_conn_rcv
+	increase 1,pdata
+	store 1,mem_le_conn_rcv
+	fetch 1,mem_le_state
+	rtnbit1 lestate_got_first_packet
+	set1 lestate_got_first_packet
+	store 1,mem_le_state
+	fetch 2,mem_le_init_superto
+	store 2,mem_le_superto
+	setarg 0
+	store 4,mem_le_transmit_window
+	rtn
+
+
+le_enable:
+	bpatchx patch27_7,mem_patch27
+	jam 0x36,rf_adc_goff        /*For BLE, tune AGC_gain_offset, Max added*/
+	jam 0x5f,rf_agc_nsat        //for BLE
+	enable le
+	jam 7,rfen_ulp			/* enable ulp */
+	call check_ble_disabled
+	fetch 1,mem_250k_freq_enable	//default: 0
+	rtn blank
+	jam 0xb8,rf_iq_gain
+	rtn
+	
+le_disable:
+	bpatchx patch28_0,mem_patch28
+	jam 0x2e,rf_adc_goff        /*For BR/EDR, tune AGC_gain_offset, Max added*/
+	jam 0xff,rf_agc_nsat         //for EDR&BR
+	disable le
+	jam 3,rfen_ulp
+	arg 0,stop_watch
+	rtn
+	
+le_prep:
+	disable enable_crc
+	disable enable_white
+	fetch 3,mem_le_crcinit
+	iforce crc24_init
+	fetch 1,mem_le_ch_mapped
+	reverse pdata,temp
+	set1 1,temp
+	rshift temp,white_init
+	rtn
+	
+
+lerx_setfreq:
+	call le_setfreq
+	call set_freq_rx
+	setarg param_pll_setup
+	call sleep
+	branch rf_rx_enable
+
+letx_setfreq:
+	branch txon,match
+letx_setfreq0:
+	call le_setfreq
+	branch set_freq_tx
+le_setfreq:
+	bpatchx patch28_1,mem_patch28
+	call set_sync_on
+	fetch 1, mem_le_testtype
+	nbranch le_ctf_test,blank
+	fetch 1,mem_le_ch_mapped
+	sub pdata,36,null
+	branch le_ctf_normal,positive
+	force 0,temp
+	rtneq 37
+	force 24,temp
+	rtneq 38
+	force 78,temp
+	rtn
+	
+le_ctf_normal:
+	sub pdata,10,null
+	branch le_ctf_low,positive
+	increase 1,pdata
+	
+le_ctf_low:	
+	lshift pdata,pdata
+	add pdata,2,temp
+	rtn
+	
+le_ctf_test:
+	fetch 1,mem_le_ch_mapped
+	lshift pdata,temp
+	rtn
+
+le_sca_map:
+	arg 500,temp
+	rtn blank
+	arg 250,temp
+	rtneq 1
+	arg 150,temp
+	rtneq 2
+	arg 100,temp
+	rtneq 3
+	arg 75,temp
+	rtneq 4
+	arg 50,temp
+	rtneq 5
+	arg 40,temp
+	rtneq 6
+	arg 20,temp
+	rtn
+
+
+	
+le_adv_access:
+	setarg 0x8e89be
+	lshift8 pdata,pdata
+	or_into 0xd6,pdata
+	iforce access
+	setarg 0x555555
+	store 3,mem_le_crcinit
+	rtn
+
+le_setup:
+	bpatchx patch28_2,mem_patch28
+	enable swfine
+	fetch 4,mem_le_access
+	iforce access
+	call le_map_channel
+	setarg 0x200
+	branch le_setup_master,master
+	fetch 2,mem_le_receive_window
+	rshift pdata,pdata
+le_setup_master:
+	arg param_pll_setup,temp
+	iadd temp,pdata
+	call ahead_window
+	deposit clke
+	store 6,mem_le_rxon_ts
+	rtn
+
+le_next_adv_channel:
+	bpatchx patch28_3,mem_patch28
+	fetch 1,mem_le_ch_mapped
+	beq 37,le_next_adv_channel_curr_channel_37
+	beq 38,le_next_adv_channel_curr_channel_38
+	beq 39,le_next_adv_channel_curr_channel_39
+	branch le_next_adv_channel_curr_channel_39
+
+le_next_adv_channel_curr_channel_37:
+	fetcht 1,mem_le_adv_channel_map
+	isolate1 BIT_ADV_CHANNEL_MAP_38,temp		//check 38 channel enable
+	branch set_le_next_adv_channel_38,true
+	isolate1 BIT_ADV_CHANNEL_MAP_39,temp		//check 39 channel enable
+	branch set_le_next_adv_channel_39,true
+	branch set_le_next_adv_channel_37
+
+
+le_next_adv_channel_curr_channel_38:
+	fetcht 1,mem_le_adv_channel_map
+	isolate1 BIT_ADV_CHANNEL_MAP_39,temp		//check 39 channel enable
+	branch set_le_next_adv_channel_39,true
+	isolate1 BIT_ADV_CHANNEL_MAP_37,temp		//check 37 channel enable
+	branch set_le_next_adv_channel_37,true
+	branch set_le_next_adv_channel_38
+
+
+le_next_adv_channel_curr_channel_39:
+	fetcht 1,mem_le_adv_channel_map
+	isolate1 BIT_ADV_CHANNEL_MAP_37,temp		//check 37 channel enable
+	branch set_le_next_adv_channel_37,true
+	isolate1 BIT_ADV_CHANNEL_MAP_38,temp		//check 38 channel enable
+	branch set_le_next_adv_channel_38,true
+	branch set_le_next_adv_channel_39
+
+
+
+set_le_next_adv_channel_37:
+	jam 37,mem_le_ch_mapped
+	fetch 1,mem_le_adv_channel_map_temp
+	set1 BIT_ADV_CHANNEL_MAP_37,pdata
+	store 1,mem_le_adv_channel_map_temp
+	rtn
+
+set_le_next_adv_channel_38:
+	jam 38,mem_le_ch_mapped
+	fetch 1,mem_le_adv_channel_map_temp
+	set1 BIT_ADV_CHANNEL_MAP_38,pdata
+	store 1,mem_le_adv_channel_map_temp
+	rtn
+
+set_le_next_adv_channel_39:
+	jam 39,mem_le_ch_mapped
+	fetch 1,mem_le_adv_channel_map_temp
+	set1 BIT_ADV_CHANNEL_MAP_39,pdata
+	store 1,mem_le_adv_channel_map_temp
+	rtn
+
+
+
+le_context_nexthop:
+	bpatchx patch28_4,mem_patch28
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	rtnbit0 mode_le
+	add rega,coffset_le_event_cnt,contw
+	ifetch 2,contw
+	increase 1,pdata
+	istore 2,contw
+	add rega,coffset_le_hop,contr
+	ifetch 1,contr
+	add rega,coffset_le_ch,contw
+	ifetcht 1,contw
+	iadd temp,pdata
+	sub pdata,36,null
+	branch le_nexthop_nowrap,positive
+	increase -37,pdata
+le_nexthop_nowrap:
+	istore 1,contw
+	rtn
+
+
+le_calc_channel_map:
+	bpatchx patch28_5,mem_patch28
+	fetch 5,mem_le_channel_map
+	force 0,temp
+	force 37,loopcnt
+le_count_channels_loop:
+	bbit0 0,le_count_channels_notused
+	increase 1,temp
+le_count_channels_notused:
+	rshift pdata,pdata
+	loop le_count_channels_loop
+	add temp,-1,pdata
+	store 1,mem_le_channels
+	rtn
+
+le_map_channel:
+	bpatchx patch28_6,mem_patch28
+	fetch 1,mem_le_ch
+	iforce queue
+	fetcht 5,mem_le_channel_map
+	qisolate1 temp
+	branch le_map_channel_end,true
+le_map_channel_next:
+	bpatchx patch28_7,mem_patch28
+	fetch 1,mem_le_channels
+	isub queue,pdata
+	branch le_map_channel_cont,positive
+	sub pdata,-1,queue
+	branch le_map_channel_next
+le_map_channel_cont:
+	copy queue,loopcnt
+	force 0,queue
+le_map_channel_loop:
+	qisolate1 temp
+	branch le_map_channel_skip,true
+	increase 1,loopcnt
+le_map_channel_skip:
+	deposit loopcnt
+	branch le_map_channel_end,blank
+	increase 1,queue
+	increase -1,loopcnt
+	branch le_map_channel_loop
+le_map_channel_end:
+	deposit queue
+	store 1,mem_le_ch_mapped
+	rtn
+
+
+le_wait_tx:
+	branch le_wait_master,master
+	until null,timeout
+	rtn
+	
+le_wait_master:
+	arg 0xea0,timeup
+	until clkn_rt,meet
+	rtn
+
+le_receive_adv:
+	disable swfine
+	fetch 2,mem_le_scan_window
+	copy pdata,timeup
+	branch le_receive_packet
+
+
+le_receive_slave:
+	bpatchx patch29_0,mem_patch29
+	enable swfine
+	fetch 2,mem_le_receive_window
+	fetcht 4,mem_le_transmit_window
+	iadd temp,timeup
+le_receive_packet:
+	call lerx_setfreq
+le_receive_rxon:
+	bpatchx patch29_1,mem_patch29
+	call le_prep
+	disable match
+	enable decode_fec0
+	enable is_rx
+	disable is_tx
+	copy timeup,stop_watch
+	correlate null,timeout
+	branch le_receive_on_attempt,attempt
+	copy clke,temp
+	storet 6,mem_sync_clke
+le_receive_on_attempt:
+	nbranch end_of_packet,sync
+	branch le_receive_skip,attempt
+	arg param_clke_cal_le,clke_rt
+	copy bt_clk,clke_bt
+	fetch 1,mem_le_state
+	bbit0 lestate_got_first_packet,le_receive_skip
+	call lpm_adjust_clk,wake
+le_receive_skip:
+	bpatchx patch29_2,mem_patch29
+	call save_rssi
+	enable enable_white
+	enable enable_crc
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	store 1,mem_le_rxbuf
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	and pdata,0x3f,loopcnt
+	branch lerx_nopayload,zero
+	
+lerx_loop:
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	loop lerx_loop
+	
+lerx_nopayload:
+	bpatchx patch29_3,mem_patch29
+	parse demod,bucket,24	
+	enable swfine
+	arg param_sifs,stop_watch		// start SIFS timer after last bit of crc
+	rshift32 pdata,pdata
+	rshift16 pdata,pdata
+	istore 3,contw
+	branch end_of_packet,crc_failed
+	enable match
+	fetch 1,mem_last_freq
+	add pdata,0,rega				// ble 2M Medium Frequency
+	call rf_write_freq				/* set frequency to tx mode freq */
+	disable decode_fec0
+	branch set_sync_on
+
+le_transmit_receive_sifs:
+	bpatchx patch29_4,mem_patch29
+	call le_transmit
+le_transmit_receive_sifs_notx:
+	fetcht 1,mem_last_freq
+	call set_freq_rx
+	call rf_rx_enable
+	enable swfine
+	arg 5500,timeup 
+	branch le_receive_rxon
+
+le_transmit_norx:
+	call le_transmit
+	branch end_of_packet
+	
+le_transmit:
+	bpatchx patch29_5,mem_patch29
+	call le_prep
+	call letx_setfreq
+	branch le_transmit0
+	
+le_transmit0:
+	set1 TXGFSK,radio_ctrl
+	enable encode_fec0
+	enable is_tx
+	disable is_rx
+	call le_wait_tx
+	rshift16 access,pdata
+	rshift8 pdata,pdata
+	rshift4 pdata,pdata
+	inject mod,40
+	enable enable_white
+	enable enable_crc
+	bpatchx patch29_6,mem_patch29
+	fetch 1,mem_le_txheader
+	inject mod,8
+	ifetch 1,contr
+	and pdata,0x3f,loopcnt
+	inject mod,8
+	branch letr_nopayload,zero
+letr_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop letr_loop
+	
+letr_nopayload:
+	enable enable_parity
+	inject mod,24
+	disable enable_parity
+	until null,tx_clear
+	nop 100          /* flush out the last bit */
+	disable encode_fec0
+	rtn
+	
+le_send_adv_ind:
+	bpatchx patch29_7,mem_patch29
+	fetch 1,mem_le_adv_type
+	beq ADV_DIRECT_IND,le_send_adv_direct_ind
+	fetch 1,mem_le_adv_own_addr_type
+	lshift4 pdata,pdata
+	lshift2 pdata,pdata
+	store 1,mem_le_txheader
+	fetcht 1,mem_le_adv_data_len
+	add temp,6,pdata
+	store 1,mem_le_txlen
+	fetch 6,mem_le_lap
+	store 6,mem_le_txpayload
+	copy temp,loopcnt
+	arg mem_le_adv_data,contr
+	call memcpy_fast
+	branch le_send_adv_transmit
+le_send_adv_direct_ind:
+	fetch 1,mem_le_adv_direct_addr_type
+	lshift4 pdata,pdata
+	lshift2 pdata,pdata
+	increase 1,pdata
+	store 1,mem_le_txheader
+	setarg 12
+	store 1,mem_le_txlen
+	fetch 6,mem_le_lap
+	store 6,mem_le_txpayload
+	fetch 6,mem_hci_plap
+	istore 6,contw
+le_send_adv_transmit:
+	bpatchx patch2a_0,mem_patch2a
+	fetch 1,mem_le_adv_transmit
+	increase 1,pdata
+	store 1,mem_le_adv_transmit
+	arg 1800,stop_watch
+	disable match
+	branch le_transmit_receive_sifs
+	
+le_send_scan_request:
+	bpatchx patch2a_1,mem_patch2a
+	fetch 1,mem_le_scan_type
+	rtnne LE_SCAN_TYPE_ACTIVE
+	fetch 1,mem_le_adv_transmit
+	increase 1,pdata
+	store 1,mem_le_adv_transmit
+	arg 0x0c03,temp// length + SCAN_REQ PDU
+	fetch 1,mem_le_scan_own_addr_type
+	nsetflag blank,LE_SENDER_ADDR_BIT,temp
+	copy regA,pdata
+	nsetflag blank,LE_RECEIVER_ADDR_BIT,temp	
+	storet 2,mem_le_txheader
+	fetch 6,mem_le_lap
+	istore 6,contw
+	fetch 6,mem_le_plap
+	istore 6,contw
+	branch le_transmit_receive_sifs
+
+
+le_send_scan_response:
+	bpatchx patch2a_2,mem_patch2a
+	arg SCAN_RSP,temp
+	fetch 1,mem_le_adv_own_addr_type
+	nsetflag blank,LE_SENDER_ADDR_BIT,temp
+	storet 1,mem_le_txheader
+	fetcht 1,mem_le_scan_data_len
+	add temp,6,pdata
+	store 1,mem_le_txlen
+	fetch 6,mem_le_lap
+	store 6,mem_le_txpayload
+	arg mem_le_scan_data,contr
+	copy temp,loopcnt
+	call memcpy_fast
+	call le_transmit_norx
+	branch le_adv_not_match
+
+le_connect_request:
+	bpatchx patch2a_3,mem_patch2a
+	force -1,pdata
+	setsect 2,1
+	store 5,mem_le_channel_map
+	call le_calc_channel_map	
+	force 4,loopcnt
+	arg mem_le_access,contw
+	call generate_random_loop	
+	fetch 2,mem_le_timeout
+	store 2,mem_le_superto
+le_con_req_hop_retry:
+	random pdata
+	and_into 0xf,pdata
+	sub pdata,4,null
+	branch le_con_req_hop_retry,positive
+	store 1,mem_le_hop
+	store 1,mem_tmp1
+	bpatchx patch2a_4,mem_patch2a
+	fetcht 2,mem_le_conn_interval
+	storet 2,mem_le_tsniff	
+	copy temp,regc			// tsniff in regc
+	add clkn_bt,7,pdata			// leave space for offset
+	idiv regc
+	call wait_div_end
+	remainder rega
+	isub rega,pdata
+	iadd regc,pdata
+	fetcht 2,mem_le_dsniff
+	iadd temp,pdata
+	store 4,mem_le_anchor
+	isub clkn_bt,rega
+	increase -6,rega			// window offset
+	arg 0x2205,regb			// length & CONN_REQ PDU
+	fetch 1,mem_le_conn_own_addr_type
+	nsetflag blank,LE_SENDER_ADDR_BIT,regb
+	fetch 1,mem_le_conn_peer_addr_type
+	nsetflag blank,LE_RECEIVER_ADDR_BIT,regb
+	copy regb,pdata
+	store 2,mem_le_txheader
+	fetch 6,mem_le_lap
+	istore 6,contw//own addr
+	fetch 6,mem_le_plap
+	istore 6,contw// peer addr
+	fetch 4,mem_le_access
+	istore 4,contw
+	random pdata
+	istore 2,contw				/* crc init */
+	random pdata
+	istore 1,contw
+	force 2,pdata				/* window size */	
+	istore 1,contw
+	rshift2 rega,pdata
+	istore 2,contw				/* window offset */
+	rshift2 regc,pdata			
+	istore 2,contw				/* conn Interval */
+	bpatchx patch2a_5,mem_patch2a
+	setarg 0					/* slave latency */
+	istore 2,contw
+	fetch 2,mem_le_timeout
+	istore 2,contw
+	fetch 5,mem_le_channel_map
+	istore 5,contw				/* channel map */
+	fetch 1,mem_le_hop
+	arg param_le_sca,temp
+	ior temp,pdata
+	istore 1,contw
+	call le_transmit_norx
+	setarg mem_le_txheader
+	add pdata,18,contr
+	ifetch 3,contr
+	store 3,mem_le_crcinit
+	rtn
+		
+le_init_adv:
+	bpatchx patch2a_6,mem_patch2a
+	disable master
+	branch le_adv_access
+	
+
+
+le_update_param:
+	fetch 1,mem_le_state
+	rtnbit0 lestate_update_param
+	fetch 2,mem_le_event_count
+	fetcht 2,mem_le_instant
+	isub temp,pdata
+	nrtn positive
+	store 2,mem_pdatatemp
+	bpatchx patch2a_7,mem_patch2a
+	fetch 1,mem_le_state
+	set0 lestate_update_param,pdata
+	set0 lestate_got_first_packet,pdata
+	store 1,mem_le_state
+	fetch 4,mem_le_anchor
+	fetcht 2,mem_le_tsniff
+	storet 2,mem_temp
+	isub temp,rega
+	bpatchx patch2b_0,mem_patch2b
+	fetch 1,mem_le_new_param
+	store 1,mem_le_window_size
+	ifetcht 2,contr
+	ifetch 2,contr
+	lshift2 pdata,pdata
+	store 2,mem_le_tsniff
+	lshift2 temp,temp
+	iadd temp,pdata
+	ifetcht 4,contr
+	storet 4,mem_le_slave_latency	// and superTO
+	iadd rega,pdata
+	copy pdata,regab
+	fetch 2,mem_le_tsniff
+	fetcht 2,mem_temp	//last sniff
+	isub temp,pdata		//last sniff - new sniff
+	fetcht 2,mem_pdatatemp
+	imul32 temp,pdata
+	iadd regab,pdata
+	store 4,mem_le_anchor
+	call le_receive_window_size
+	fetch 2,mem_le_superto
+	store 2,mem_le_init_superto
+	rtn
+
+
+le_update_channel_map:
+	bpatchx patch2b_1,mem_patch2b
+	fetch 1,mem_le_state
+	rtnbit0 lestate_update_map
+	fetch 2,mem_le_event_count
+	fetcht 2,mem_le_instant
+	isub temp,pdata
+	nrtn positive
+	fetch 1,mem_le_state
+	set0 lestate_update_map,pdata
+	store 1,mem_le_state
+ 	fetch 5,mem_le_new_map
+	store 5,mem_le_channel_map
+	branch le_calc_channel_map	
+	
+	
+le_acknowledge:
+	bpatchx patch2b_2,mem_patch2b
+	call le_supervision_flush
+	call le_check_wak
+	fetch 1,mem_le_rxbuf
+	isolate1 md,pdata
+	setflag true,mark_ble_rx_md,mark
+	rshift pdata,pdata
+	ixor temp,pdata
+	isolate1 nesn,pdata
+	setflag true,mark_old_packet,mark	/* retransmit */
+	rtnmark1 mark_old_packet
+	fetch 1,mem_le_rxbuf+1			
+	branch le_ack_unenc,blank		/* empty packet, no decryption */
+	fetch 1,mem_le_state
+	bbit0 lestate_encryption,le_ack_unenc
+	call load_sk
+	call le_decrypt
+	nrtn blank
+le_ack_unenc:
+	fetcht 1,mem_le_arq
+	setflip nesn,temp
+	storet 1,mem_le_arq
+	rtn
+
+	
+le_check_wak:
+	bpatchx patch2b_3,mem_patch2b
+	fetcht 1,mem_le_arq
+	isolate0 wak,temp
+	rtn true
+	fetch 1,mem_le_rxbuf
+	lshift pdata,pdata
+	ixor temp,pdata
+	rtnbit0 sn			/* received NESN is same as SN, NAK */
+	set0 wak,temp
+	setflip sn,temp
+	storet 1,mem_le_arq
+	compare 3,temp,3
+	nrtn true
+	fetch 1,mem_le_txpayload
+	beq LL_START_ENC_REQ,le_set_enc
+	fetch 1,mem_le_enc_state
+	beq FLAG_LE_ENC_PAUSE,le_clear_enc
+	rtn
+	
+
+le_set_enc:
+	fetch 1,mem_le_state
+	set1 lestate_encryption,pdata
+	store 1,mem_le_state
+	rtn	
+	
+le_clear_enc:
+	bpatchx patch2b_4,mem_patch2b
+	jam FLAG_LE_ENC_NULL,mem_le_enc_state
+	arg 0,pdata
+	store 4,mem_le_last_mic
+	store 5,mem_le_pcnt_tx
+	set1 39,pdata
+	store 5,mem_le_pcnt_rx
+	fetch 1,mem_le_state
+	set0 lestate_encryption,pdata
+	store 1,mem_le_state
+	rtn
+
+
+le_wait_adv:
+	bpatchx patch2b_5,mem_patch2b
+	call le_next_adv_channel
+	call le_receive_adv
+	fetch 1,mem_le_adv_waitcnt
+	increase 1,pdata
+	store 1,mem_le_adv_waitcnt
+	rtn
+
+
+le_scan:
+	bpatchx patch2b_6,mem_patch2b
+	fetch 1,mem_le_scan_enable
+	rtnne LE_SCAN_ENABLE
+	arg le_scan_interval_timer,queue
+	call timer_check
+	nrtn blank
+	fetch 2,mem_le_scan_interval
+	fetcht 2,mem_le_scan_window
+	isub temp,pdata
+	arg le_scan_interval_timer,queue
+	call timer_init
+	disable master
+	call le_init_adv
+	call le_wait_adv
+	nrtn match
+	bpatchx patch2b_7,mem_patch2b
+	fetch 6,mem_le_rxbuf+2
+	store 6,mem_le_plap
+//	call le_scan_dongle
+
+	fetch 1,mem_le_adv_rcv
+	increase 1,pdata
+	store 1,mem_le_adv_rcv
+	call le_create_conn
+	rtn master
+	call le_send_scan_request
+	nrtn match
+	bpatchx patch2c_0,mem_patch2c
+	fetch 1,mem_le_scanrsp_rcv
+	increase 1,pdata
+	store 1,mem_le_scanrsp_rcv
+	fetch 9,mem_le_rxbuf+8
+	store 9,mem_tmp_buffer
+	rtn
+	
+le_create_conn:
+	bpatchx patch2c_1,mem_patch2c
+	fetch 1,mem_cmd_le_create_conn
+	rtnne hci_cmd_le_create_conn
+	fetch 6,mem_le_plap
+	fetcht 6,mem_le_conn_peer_addr
+	isub temp,null
+	nrtn zero
+	call context_new
+	nrtn zero
+	call le_connect_request
+	call le_init_master
+	bpatchx patch2c_2,mem_patch2c
+	jam 0,mem_hci_cmd
+	jam 0,mem_le_peer_sca
+	jam 0,mem_le_scan_enable
+	jam 0,mem_cmd_le_create_conn
+	branch context_save
+	
+le_scan_check_sender_addr_type:
+	arg 1,rega// sender_addr_type
+	fetch 1,mem_le_rxbuf
+	rtnbit1 LE_SENDER_ADDR_BIT
+	arg 0,rega
+	rtn
+
+
+
+le_prepare_tx:
+	bpatchx patch2c_3,mem_patch2c
+	fetch 1,mem_le_arq
+	rtnbit1 wak
+	call le_check_tx_md
+	call le_fifo_get_first_tx_ptr	//no packet to send
+	branch le_send_empty,blank
+	ifetch 1,contr
+	ifetcht 1,contr
+	copy temp,rega
+	isub rega,pdata
+	arg LE_MAX_PAKET_LEN,temp
+	call not_greater_than
+	copy pdata,temp
+	ifetch 1,contr
+	copy pdata,type
+	copy rega,pdata
+	iadd contr,contr
+	arg mem_le_txpayload,contw
+	copy temp,loopcnt
+	call memcpy
+	call le_update_tx_type
+	call le_send_packet
+	
+	call le_fifo_get_first_tx_ptr
+	ifetch 1,contr
+	copy pdata,rega
+	copy contr,regc
+	ifetcht 1,contr
+	copy temp,regb
+	isub regb,pdata
+	arg LE_MAX_PAKET_LEN,temp
+	call not_greater_than
+	iadd regb,pdata
+	istore 1,regc
+	isub rega,null
+	nrtn zero
+	branch le_fifo_release_first_node
+
+	
+le_check_tx_md:
+	call le_check_continue
+	rtnmark1 mark_ble_tx_md
+	fetch 1,mem_le_configuration
+	bbit0 BIT_BLE_TRANSMIT_PACKET_BY_MD,le_clear_md
+	call le_fifo_get_second_tx_ptr	//no packet to send
+	branch le_clear_md,blank
+	branch le_set_md
+
+	
+le_check_continue:
+	call le_fifo_get_first_tx_ptr	//no packet to send
+	branch le_clear_md,blank
+	ifetch 1,contr				//pdata:length
+	ifetcht 1,contr				//temp:offest
+	isub temp,pdata			//pdata:length - offset
+	sub pdata,LE_MAX_PAKET_LEN,null	
+	branch le_clear_md,positive				//27 > length -offset
+le_set_md:
+	set1 mark_ble_tx_md,mark
+	rtn
+
+le_clear_md:
+	set0 mark_ble_tx_md,mark
+	rtn
+
+le_update_tx_type:
+	copy rega,pdata
+	rtn blank
+	arg LLID_CONTINUE,type
+	rtn
+
+
+le_att_check_notification_enable: // temp ->handle,output-> pdata,output :contr->rega
+	bpatchx patch2c_4,mem_patch2c
+	increase 1,temp
+	call le_att_get_handle_ptr
+	increase -2,contr
+	ifetch 2,contr
+	arg CLIENT_CHARACTERTIC_CONFIGURATION,temp
+	isub temp,null
+	nrtn zero
+	increase 1,contr
+	copy contr,rega
+	ifetch 1,contr
+	rtn
+	
+
+le_send_empty:
+	force 0,temp
+	force 1,type
+	
+le_send_packet:
+	bpatchx patch2c_5,mem_patch2c
+	storet 1,mem_le_txlen
+	fetcht 1,mem_le_arq
+	set1 wak,temp
+	and temp,0xfc,pdata
+	ior type,pdata
+	store 1,mem_le_arq
+	and_into 0x1f,pdata
+	isolate1 mark_ble_tx_md,mark
+	setflag true,md,pdata
+	store 1,mem_le_txheader
+
+	fetch 1,mem_le_txheader
+	compare 1,type,3
+	nbranch le_send_no_txlen,true
+	fetch 1,mem_le_txlen
+	rtn blank
+le_send_no_txlen:	
+	fetch 1,mem_le_state
+	rtnbit0 lestate_encryption
+	call load_sk
+	branch le_encrypt
+
+
+get_lpm_wake_ble_rx_lock:
+	arg wake_lock_ble_rx,queue
+	branch lpm_get_wake_lock
+
+put_lpm_wake_ble_rx_lock:
+	arg wake_lock_ble_rx,queue
+	branch lpm_put_wake_lock
+
+
+le_parse:
+	bpatchx patch2c_6,mem_patch2c
+	rtnmark1 mark_old_packet
+	call le_fifo_check_full
+	nrtn blank
+	fetch 1,mem_le_rxbuf
+	and pdata,0x3,pdata
+	store 1,mem_le_packet_llid
+	ifetch 1,contr
+	and pdata,0x1f,pdata
+	store 1,mem_le_packet_size
+	rtn blank							//empty rtn
+	copy contr,pdata
+	store 2,mem_le_payload_ptr
+	fetch 1,mem_le_packet_llid
+	beq LLID_LE_LL,le_parse_ll
+le_parse_l2cap:
+	call le_check_l2cap_complete
+	nbranch get_lpm_wake_ble_rx_lock,user
+	call put_lpm_wake_ble_rx_lock
+	fetch 2,mem_le_payload_ptr
+	copy pdata,contr
+	ifetch 2,contr	//l2cap len
+	store 2,mem_le_l2cap_size
+	bpatchx patch2c_7,mem_patch2c
+	ifetch 2,contr
+	beq LE_L2CAP_CID_ATT,le_parse_att
+	beq LE_L2CAP_CID_SMP,le_parse_smp
+	beq LE_L2CAP_CID_SIGNAL,le_parse_signaling
+	rtn
+
+
+le_check_l2cap_complete:
+	fetch 1,mem_le_packet_llid
+	beq LLID_START,le_check_l2cap_llid_start
+	beq LLID_CONTINUE,le_check_l2cap_llid_continue
+	rtn
+
+//input: pdata is CID number
+//output: 	if CID is legal ,enable user
+//		if ICD is illegal,disable user 
+le_check_l2cap_CID_legal:
+	call enable_user
+	arg LE_L2CAP_CID_ATT,temp
+	isub pdata,null
+	rtn zero
+	arg LE_L2CAP_CID_SIGNAL,temp
+	isub pdata,null
+	rtn zero
+	arg LE_L2CAP_CID_SMP,temp
+	isub pdata,null
+	rtn zero
+	branch disable_user
+
+	
+le_check_l2cap_llid_start:
+	fetch 2,mem_le_payload_ptr
+	copy pdata,contr
+	ifetch 2,contr
+	store 2,mem_le_l2cap_size
+	ifetch 2,contr			//CID
+	call le_check_l2cap_CID_legal
+	nrtn user
+	fetcht 1,mem_le_packet_size
+	storet 1,mem_le_packet_len_recved
+	fetch 2,mem_le_l2cap_size
+	increase 4,pdata
+	isub temp,null
+	branch enable_user,zero
+	fetch 1,mem_le_packet_size
+	copy pdata,loopcnt
+	arg mem_le_l2capbuf,contw
+	fetch 2,mem_le_payload_ptr
+	copy pdata,contr
+	call memcpy
+	branch disable_user
+
+//no input
+//output: 	if CID is legal ,enable user
+//		if ICD is illegal,disable user 
+le_check_l2cap_continue_legal:
+	call enable_user
+	fetch 1,mem_le_packet_len_recved
+	nrtn blank
+	branch disable_user
+
+le_check_l2cap_llid_continue:
+	call le_check_l2cap_continue_legal
+	nrtn user
+	fetch 1,mem_le_packet_len_recved
+	arg mem_le_l2capbuf,contw
+	iadd contw,rega
+	fetcht 1,mem_le_packet_size
+	iadd temp,pdata
+	store 1,mem_le_packet_len_recved
+	fetch 1,mem_le_packet_size
+	copy pdata,loopcnt
+	copy rega,contw
+	fetch 2,mem_le_payload_ptr
+	copy pdata,contr
+	call memcpy_fast
+	setarg mem_le_l2capbuf
+	store 2,mem_le_payload_ptr		//update ptr->mem_le_l2capbuff
+	fetch 2,mem_le_l2cap_size
+	increase 4,pdata
+	fetcht 1,mem_le_packet_len_recved
+	isub temp,null
+	branch enable_user,zero
+	branch disable_user
+
+
+
+
+	
+le_get_search_att_type:
+	call store_contr
+	arg mem_le_search_att_type_length,contw
+le_get_search_common:	
+	fetch 2,mem_le_l2cap_size
+	increase -5,pdata
+le_get_search_common2:		
+	istore 1,contw
+	copy pdata,loopcnt
+	call get_contr
+	branch memcpy_fast	
+	
+le_get_search_att_uuid:
+	call store_contr
+	arg mem_le_search_uuid_length,contw
+	branch le_get_search_common
+
+
+	/* rega pointers to data, regb is length */
+le_writeatt_cb:
+	fetch 2,mem_cb_att_write
+	branch callback_func
+	
+le_supervision_update:
+	fetcht 4,mem_le_supervision_timer
+	call get_clkbt
+	isub temp,timeup					/* and to 28 bits */
+	deposit timeup
+	fetcht 2,mem_le_superto
+	lshift4 temp,temp
+	lshift temp,temp
+	isub temp,pdata
+	rtn
+	
+le_supervision_flush:
+	call get_clkbt
+	store 4,mem_le_supervision_timer
+	rtn
+
+
+le_adv:
+	jam 36,mem_le_ch_mapped
+	jam 0,mem_le_adv_channel_map_temp
+le_adv_loop:
+	bpatchx patch2d_0,mem_patch2d
+	fetch 1,mem_le_adv_enable
+	rtn blank
+	arg le_adv_interval_timer,queue
+	call timer_check
+	nrtn blank
+	bpatchx patch2d_1,mem_patch2d
+le_adv_loop_tx:
+	disable master
+	enable swfine
+	call le_init_adv
+	call le_next_adv_channel
+	call le_send_adv_ind
+	nbranch le_adv_not_match,match
+	fetch 1,mem_le_req_rcv
+	increase 1,pdata
+	store 1,mem_le_req_rcv
+	fetch 1,mem_le_rxbuf
+	and pdata,0x0f,pdata
+	beq SCAN_REQ,le_send_scan_response
+	beq CONNECT_REQ,le_parse_connect_req
+le_adv_not_match:
+	bpatchx patch2d_2,mem_patch2d
+	random pdata 
+	arg 0x1ff,temp
+	iand temp,pdata
+	add pdata,250,pdata
+	call delay
+	fetch 1,mem_le_adv_channel_map_temp
+	fetcht 1,mem_le_adv_channel_map
+	isub temp,null
+	nbranch le_adv_loop,zero
+	arg le_adv_interval_timer,queue
+	fetch 2,mem_le_adv_interval
+	branch timer_init
+	
+
+le_receive_window_size:
+	bpatchx patch2d_3,mem_patch2d
+	fetch 1,mem_le_peer_sca
+	call le_sca_map
+	fetch 2,mem_le_tsniff
+	imul32 temp,pdata
+	arg 375,temp
+	imul32 temp,pdata
+	arg 100000,temp
+	idiv temp
+	fetch 1,mem_le_window_size
+	arg 20000,temp
+	imul32 temp,pdata
+	iadd temp,pdata
+	store 4,mem_le_transmit_window
+	bpatchx patch2d_4,mem_patch2d
+	fetch 2,mem_rx_window_sniff
+	call wait_div_end
+	quotient temp
+	iadd temp,pdata
+	store 2,mem_le_receive_window
+	rtn
+
+le_parse_connect_req:
+	bpatchx patch2d_5,mem_patch2d
+	fetch 6,mem_le_rxbuf+8
+	fetcht 6,mem_le_lap
+	isub temp,null
+	nrtn zero
+	call le_scan_check_sender_addr_type
+	copy rega,pdata
+	store 1,mem_le_conn_peer_addr_type
+	fetch 7,mem_le_rxbuf+21
+	store 7,mem_tmp_buffer
+	ifetch 8,contr
+	istore 8,contw
+	fetch 6,mem_le_rxbuf+2
+	store 6,mem_le_plap
+	increase 6,contr
+	ifetch 8,contr
+	store 8,mem_le_access 	// and crcinit & window size
+	ifetcht 2,contr				// transmit offset
+	bpatchx patch2d_6,mem_patch2d
+	lshift2 temp,temp			
+	ifetch 2,contr				// connInterval
+	lshift2 pdata,pdata
+	store 2,mem_le_tsniff
+	store 4,mem_le_anchor
+	isub temp,pdata
+	add pdata,-2,clke_bt
+	ifetch 9,contr
+	store 9,mem_le_slave_latency// and super to & channel map
+	bpatchx patch2d_7,mem_patch2d
+	ifetch 1,contr
+	rshift4 pdata,temp
+	rshift temp,temp
+	storet 1,mem_le_peer_sca
+	and_into 0x1f,pdata
+	store 1,mem_le_hop
+	call le_receive_window_size
+	call le_calc_channel_map
+	call le_init_slave
+	call context_new
+	nrtn zero
+	bpatchx patch2e_0,mem_patch2e
+	call calc_clke_offset
+	call le_l2cap_reset_signaling_identifier
+	jam BT_EVT_LE_CONNECTED,mem_fifo_temp
+	call ui_ipc_send_event
+	branch context_save
+	
+
+le_init_attlist_search:
+	bpatchx patch2e_1,mem_patch2e
+	fetch 2,mem_le_search_handle_start
+	iforce regb
+	fetch 2,mem_le_search_handle_end
+	iforce regc
+	fetch 2,mem_ui_le_uuid_table
+	iforce contr
+	enable user
+	rtn
+
+	/* return handle in pdata, blank:end of list, positive:in range */
+le_att_handle_inrange:
+	ifetch 2,contr
+	rtn blank
+	isub regb,null			/* less than start ? */
+	nrtn positive
+	isub regc,null			/* greater than end ? */
+	rtn zero
+	branch le_att_handle_blank,positive
+	force 1,null
+	rtn
+le_att_handle_blank:
+	force 0,pdata
+	rtn
+
+
+	/* handle in temp, return pointer in contr to length, blank not found */
+le_att_get_handle_ptr:
+	call le_att_get_handle_ptr2
+	branch le_att_get_handle_ptr_found,zero
+	rtn
+	
+le_att_get_handle_ptr2:
+	bpatchx patch2e_2,mem_patch2e
+	fetch 2,mem_ui_le_uuid_table
+	iforce contr
+le_att_get_handle_loop1:
+	ifetch 2,contr
+	rtn blank
+	isub temp,null
+	rtn zero
+	ifetch 1,contr
+	iadd contr,contr	
+	ifetch 1,contr			// length  
+	iadd contr,contr
+	branch le_att_get_handle_loop1
+le_att_get_handle_ptr_found:
+	ifetch 1,contr
+	iadd contr,contr	
+	rtn	
+
+
+
+le_att_get_short_uuid_ptr:
+	bpatchx patch2e_3,mem_patch2e
+	fetch 2,mem_ui_le_uuid_table
+	iforce contr
+le_att_get_short_uuid_loop:
+	ifetch 2,contr
+	rtn blank
+	ifetch 1,contr
+	iadd contr,contr
+	increase -2,contr
+	ifetch 2,contr
+	isub temp,null
+	rtn zero
+	ifetch 1,contr			 
+	iadd contr,contr
+	branch le_att_get_short_uuid_loop	
+
+
+
+le_att_get_handle_info_from_ptr:
+	fetch 2, mem_le_cur_attlist_start_ptr
+	branch le_att_get_handle_info_fast
+
+le_att_get_handle_info:
+	bpatchx patch2e_4,mem_patch2e
+	fetch 2,mem_ui_le_uuid_table
+le_att_get_handle_info_fast:
+	iforce contr
+	copy temp,rega
+le_att_get_handle_loop:
+	ifetch 2,contr
+	branch le_att_unfind_handle,blank
+	isub rega,null
+	branch le_att_finded_handle, zero
+	ifetch 1,contr			// length  
+	iadd contr,contr	
+	ifetch 1,contr			//length 
+	iadd contr,contr
+	branch le_att_get_handle_loop
+le_att_unfind_handle:
+	branch disable_blank
+
+le_att_finded_handle:
+	ifetch 1,contr
+	store 1,mem_le_cur_uuid_length
+	copy pdata,loopcnt
+	arg mem_le_cur_uuid,contw
+	call memcpy_fast
+	ifetch 1,contr
+	store 1,mem_le_curr_att_len
+	call store_contr
+	branch enable_blank
+
+	
+le_modified_name:
+	bpatchx patch2e_5,mem_patch2e
+	call le_modified_name_att_list
+	branch le_modified_name_adv
+
+le_modified_name_att_list:
+	arg UUID_CHRCTR_DEVICE_NAME,temp
+	call le_att_get_short_uuid_ptr
+	rtn blank
+	ifetch 1,contr						// attribute length
+	copy contr,contw
+	fetcht 1,mem_le_name_len
+	copy temp,loopcnt
+	isub temp,null
+	nbranch le_name_length_longer_than_att,positive
+	isub temp,temp
+	arg mem_le_name,contr
+	call memcpy
+	copy temp,loopcnt
+	ncall memcpy_empty,zero
+	rtn
+le_name_length_longer_than_att:
+	copy pdata,loopcnt
+	arg mem_le_name,contr
+	branch memcpy_fast
+
+
+le_modified_name_adv:
+	arg mem_le_adv_data_len+32,regc
+	arg mem_le_adv_data,rega
+	call le_modified_name_adv_and_scan
+	setarg 0
+	setflag user,0,pdata
+	store 1,mem_pdatatemp
+	arg mem_le_scan_data_len+32,regc
+	arg mem_le_scan_data,rega
+	call le_modified_name_adv_and_scan
+	rtn user
+	fetch 1,mem_pdatatemp
+	branch assert,blank
+	rtn
+
+
+le_modified_name_adv_and_scan:
+	bpatchx patch2e_6,mem_patch2e
+	call enable_user
+	call clear_temp_block
+	arg 0,regb	//current length
+	arg mem_le_data_temp,contw
+	call le_modified_name_adv_loop
+	fetch 1,mem_le_name_len
+	add pdata,1,temp
+	iadd regb,rega	
+	increase 2,rega
+	sub rega,0x1f,null
+	nbranch le_modified_name_adv_and_scan_name_overflow,positive
+	istoret 1,contw		//store ble name length
+	arg GAP_ADTYPE_LOCAL_NAME_COMPLETE,temp
+	istoret 1,contw		//store ble name type
+	iforce loopcnt
+	call memcpy_fast
+	copy rega,regb
+le_modified_name_adv_and_scan_store_data:
+	deposit regb
+	store 1,mem_le_data_len_temp
+	arg mem_le_data_len_temp,contr
+	setarg -32
+	iadd regc,contw
+	branch memcpy32
+
+le_modified_name_adv_and_scan_name_overflow:
+	call disable_user
+	branch le_modified_name_adv_and_scan_store_data
+	
+le_modified_name_adv_loop:
+	ifetch 1,rega		//pdata:length
+	rtn blank			//length is zero,ending find
+	pincrease 1		//length += 1
+	ifetcht 1,contr		//pdata:type
+	sub temp,GAP_ADTYPE_LOCAL_NAME_COMPLETE,null
+	branch le_modified_name_adv_found_name,zero
+	iadd regb,regb	
+	copy rega,contr
+	iforce loopcnt
+	call memcpy_fast
+	copy contr,rega
+le_modified_name_adv_loop2:
+	deposit rega
+	isub regc,null
+	rtn positive
+	branch le_modified_name_adv_loop
+
+le_modified_name_adv_found_name:
+	iadd rega,rega
+	branch le_modified_name_adv_loop2
+
+
+memcpy_empty:
+	setarg SPACE
+	istore 1,contw
+	loop memcpy_empty
+	rtn
+
+	
+le_lpm_set_mult:
+	bpatchx patch2e_7,mem_patch2e
+	disable wake
+	branch le_lpm_set_mult_attempt,attempt
+	nbranch le_lpm_lost,match
+le_lpm_set_mult_attempt:
+	call lpm_match
+	fetch 2,mem_rx_window_sniff
+	store 2,mem_le_receive_window
+
+	nbranch lpm_mult_short,match
+	bmark1 mark_old_packet,lpm_mult_short
+
+	fetch 1,mem_le_packet_size
+	nbranch lpm_mult_short,blank		// rx not empty, short interval
+	fetch 1,mem_le_txlen
+	nbranch lpm_mult_short,blank		// tx not empty, short interval
+	
+	fetch 1,mem_le_configuration
+	bbit1 BIT_BLE_SHORT_MULT,lpm_mult_short	//check flag,if flag is 1,always short mult
+	
+	fetch 1,mem_le_state
+	bbit1 lestate_update_param,lpm_mult_short
+	branch lpm_mult_wait_timeout
+	
+le_lpm_lost:
+	fetcht 2,mem_rx_window_sniff
+	rshift temp,temp
+	fetch 2,mem_le_receive_window
+	iadd temp,pdata
+	store 2,mem_le_receive_window
+	branch lpm_lost
+
+///////////////////////////////BLE CONFIG//////////////////////////////////////////
+le_set_config_fixed_tk:
+	arg BIT_BLE_PASSKEY_FIXED_KEY,queue
+	branch le_set_config
+
+le_clr_config_fixed_tk:
+	arg BIT_BLE_PASSKEY_FIXED_KEY,queue
+	branch le_clr_config
+
+le_set_config_fixed_ltk:
+	arg BIT_BLE_PAIRING_FIXED_LTK,queue
+	branch le_set_config
+
+le_clr_config_fixed_ltk:
+	arg BIT_BLE_PAIRING_FIXED_LTK,queue
+	branch le_clr_config
+
+le_set_config_more_data:
+	arg BIT_BLE_TRANSMIT_PACKET_BY_MD,queue
+	branch le_set_config
+
+le_clr_config_more_data:
+	arg BIT_BLE_TRANSMIT_PACKET_BY_MD,queue
+	branch le_clr_config
+
+le_set_config_read_authentication:
+	arg BIT_BLE_READ_AUTH,queue
+	branch le_set_config
+
+le_clr_config_read_authentication:
+	arg BIT_BLE_READ_AUTH,queue
+	branch le_clr_config
+
+le_set_config_write_authentication:
+	arg BIT_BLE_WRITE_AUTH,queue
+	branch le_set_config
+
+le_clr_config_write_authentication:
+	arg BIT_BLE_WRITE_AUTH,queue
+	branch le_clr_config
+
+le_set_config_short_mult:
+	arg BIT_BLE_SHORT_MULT,queue
+	branch le_set_config
+
+le_clr_config_short_mult:
+	arg BIT_BLE_SHORT_MULT,queue
+	branch le_clr_config
+
+
+le_set_config:
+	fetch 1,mem_le_configuration
+	qset1 pdata
+	store 1,mem_le_configuration
+	rtn
+
+le_clr_config:
+	fetch 1,mem_le_configuration
+	qset0 pdata
+	store 1,mem_le_configuration
+	rtn
+
+le_set_fixed_ltk:
+	setarg 0x112233
+	store 3,mem_le_fixed_ltk
+	setarg 0x445566
+	istore 3,contw
+	setarg 0x778899
+	istore 3,contw
+	setarg 0x001122
+	istore 3,contw
+	setarg 0x334455
+	istore 3,contw
+	setarg 0x66
+	istore 1,contw
+	rtn
+
+
+le_set_justwork:
+	setarg 0x01000302
+	store 4,mem_le_pres
+	setarg 0x010010
+	store 3,mem_le_pres_max_keysize
+	jam 1,mem_le_pairing_mode
+	rtn
+
+/////////////////////////////////////////////////////////////////////////
+
+le_fifo_malloc_tx_empty:
+	arg 0,rega
+	arg LLID_EMPTY,type
+	branch le_fifo_malloc_tx
+
+
+//rega:len regb:ll opcode
+le_fifo_malloc_tx_ll:
+	arg LLID_LE_LL,type
+	call le_fifo_malloc_tx
+	copy regb,pdata
+	istore 1,contw
+	rtn
+	
+
+//rega:len regb:cid
+le_fifo_malloc_tx_l2cap:
+	force LLID_L2CAP_START,type
+	increase 4,rega
+	call le_fifo_malloc_tx
+	increase -4,rega
+	copy rega,pdata
+	istore 2,contw
+	copy regb,pdata
+	istore 2,contw
+	rtn
+
+
+//rega:len type:llid
+le_fifo_malloc_tx:
+	sub rega,240,null			//check max len
+	nbranch assert,positive
+	fetch 1,mem_le_tx_buff_used
+	arg 1,temp
+	arg LE_TX_BUFF_COUNT,loopcnt
+le_fifo_malloc_tx_loop:
+	iand temp,null
+	branch le_fifo_malloc_tx_got_empty,zero
+	lshift temp,temp
+	loop le_fifo_malloc_tx_loop
+	branch assert				//no empty buff
+le_fifo_malloc_tx_got_empty:
+	ixor temp,pdata
+	store 1,mem_le_tx_buff_used
+	sub loopcnt,LE_TX_BUFF_COUNT,pdata
+	lshift4 pdata,pdata
+	lshift4 pdata,pdata
+	arg mem_le_tx_buffer0,temp
+	iadd temp,temp
+le_fifo_tx_find_empty_ptr:
+	arg 0,loopcnt
+	arg mem_le_tx_ptr0,contr
+le_fifo_tx_find_empty_ptr_loop:
+	ifetch 2,contr
+	branch le_fifo_tx_found_empty_ptr,blank
+	copy loopcnt,pdata
+	increase 1,loopcnt
+	bne LE_TX_BUFF_COUNT,le_fifo_tx_find_empty_ptr_loop
+	branch assert
+
+	
+le_fifo_tx_found_empty_ptr:
+	increase -2,contr
+	istoret 2,contr
+	copy temp,contw
+	copy rega,pdata
+	istore 1,contw				//lengh
+	setarg 0
+	istore 1,contw				//offset
+	copy type,pdata
+	istore 1,contw				//LLID
+	rtn
+
+
+
+le_fifo_get_first_tx_ptr:
+	fetch 2,mem_le_tx_ptr0
+	copy pdata,contr
+	rtn
+
+le_fifo_get_second_tx_ptr:
+	fetch 2,mem_le_tx_ptr1
+	copy pdata,contr
+	rtn
+
+le_fifo_get_last_tx_ptr:
+	call le_fifo_get_last_tx_ptr0
+	copy pdata,contr
+	rtn
+le_fifo_get_last_tx_ptr0:
+	fetch 2,mem_le_tx_ptr3
+	nrtn blank
+	fetch 2,mem_le_tx_ptr2
+	nrtn blank
+	fetch 2,mem_le_tx_ptr1
+	nrtn blank
+	fetch 2,mem_le_tx_ptr0
+	rtn
+
+le_fifo_get_first_l2cap_ptr:
+	call le_fifo_get_first_tx_ptr
+	increase 3,contr
+	rtn
+
+le_fifo_get_first_att_ptr:
+	call le_fifo_get_first_tx_ptr
+	increase 7,contr
+	rtn
+
+le_fifo_get_last_att_ptr:
+	call le_fifo_get_last_tx_ptr
+	increase 7,contr
+	rtn
+
+le_fifo_get_last_l2cap_ptr:
+	call le_fifo_get_last_tx_ptr
+	increase 3,contr
+	rtn
+
+	
+
+le_fifo_check_full:
+	fetch 2,mem_le_tx_ptr3
+	rtn
+
+
+le_fifo_check_nearly_full:
+	fetch 2,mem_le_tx_ptr2
+	rtn
+
+	
+le_fifo_check_empty:
+	fetch 2,mem_le_tx_ptr0
+	rtn
+
+
+le_fifo_release_first_node:
+	fetch 2,mem_le_tx_ptr0
+	arg mem_le_tx_buffer0,temp
+	isub temp,pdata
+	rshift4 pdata,pdata
+	rshift4 pdata,queue
+	fetch 1,mem_le_tx_buff_used
+	qset0 pdata
+	store 1,mem_le_tx_buff_used
+	arg 0,loopcnt
+le_fifo_release_first_node_loop:
+	lshift loopcnt,pdata
+	arg mem_le_tx_ptr1,temp
+	iadd temp,temp
+	ifetch 2,temp
+	increase -2,temp
+	istore 2,temp
+	copy loopcnt,pdata
+	increase 1,loopcnt
+	bne LE_TX_BUFF_UPDATE_LOOPCNT,le_fifo_release_first_node_loop
+	setarg 0
+	istore 2,temp
+	rtn
+
+
+
+
+
+le_parse_att:
+	ifetch 3,contr
+	store 3,mem_le_att_opcode
+	beq ATTOP_EXCHANGE_MTU_REQUEST,le_parse_att_exchange_mtu_request
+	beq ATTOP_EXCHANGE_MTU_RESPONSE,le_parse_att_exchange_mtu_response
+	beq ATTOP_FIND_INFORMATION_REQUEST,le_parse_att_find_information_request
+	beq ATTOP_FIND_BY_TYPE_VALUE_REQUEST,le_parse_att_find_by_type_value_request
+	beq ATTOP_READ_BY_TYPE_REQUEST,le_parse_att_read_by_type_request
+	beq ATTOP_READ_REQUEST,le_parse_att_read_request
+	beq ATTOP_READ_BLOB_REQUEST,le_parse_att_read_blob_request
+	beq ATTOP_READ_BY_GROUP_TYPE_REQUEST,le_parse_att_read_by_group_type_request
+	beq ATTOP_WRITE_REQUEST,le_parse_att_write_request
+	beq ATTOP_PREPARE_WRITE_REQUEST,le_parse_att_prepare_write_request
+	beq ATTOP_EXECUTE_WRITE_REQUEST,le_parse_att_execute_write_request
+	beq ATTOP_WRITE_COMMAND,le_parse_att_write_command
+	rtn
+
+
+le_send_att_exchange_mtu_requset:
+	force 3,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_EXCHANGE_MTU_REQUEST
+	istore 1,contw
+	fetch 2,mem_le_local_mtu
+	istore 2,contw
+	rtn
+
+
+le_parse_att_exchange_mtu_request:
+	call le_parse_att_exchange_mtu_response
+le_send_att_exchange_mtu_response:
+	force 3,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_EXCHANGE_MTU_RESPONSE
+	istore 1,contw
+	fetch 2,mem_le_local_mtu
+	istore 2,contw
+	rtn
+
+le_parse_att_exchange_mtu_response:
+	rshift8 pdata,pdata
+	store 2,mem_le_remote_mtu
+	rtn
+
+le_parse_att_find_information_request:
+	call le_get_search_handle_start_end_common
+	call enable_user
+	branch le_send_att_find_information_response
+	
+le_send_att_find_information_response:
+	arg 3,timeup
+	call le_init_attlist_search
+le_send_att_find_information_res_loop:
+	call le_att_handle_inrange
+	branch le_send_att_find_information_res_end,blank
+	nbranch le_send_att_find_information_res_next,positive
+	increase -2,contr
+	call store_contr
+	call get_contw
+	nbranch le_send_att_find_information_res_store_info,user
+	call push_stack_rega_b_c
+	call disable_user
+	force 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	call pop_stack_rega_b_c
+	setarg ATTOP_FIND_INFORMATION_RESPONSE
+	istore 1,contw
+	setarg UUID_SIZE_16BIT
+	istore 1,contw
+le_send_att_find_information_res_store_info:
+	call get_contr
+	ifetch 2,contr
+	istore 2,contw
+	ifetch 1,contr
+	copy pdata,loopcnt
+	call memcpy
+	call store_contw
+	increase -1,timeup
+	branch le_send_att_find_information_res_end,zero
+le_send_att_find_information_res_cont:
+	ifetch 1,contr
+	iadd contr,contr
+	branch le_send_att_find_information_res_loop
+le_send_att_find_information_res_next:
+	ifetch 1,contr
+	iadd contr,contr
+	branch le_send_att_find_information_res_cont
+le_send_att_find_information_res_end:
+	branch le_send_att_error_response_notfound,user
+	branch le_send_auto_len_by_mem
+
+
+le_parse_att_find_by_type_value_request:
+	call le_get_search_handle_start_end_common
+	ifetch 2,contr
+	store 2,mem_le_search_uuid
+	call store_contr
+	arg mem_le_search_att_type_length,contw
+	fetch 2,mem_le_l2cap_size
+	increase -7,pdata
+	call le_get_search_common2
+	branch le_send_att_find_by_type_value_response
+
+
+le_start_end_handle_check_1:
+	disable user
+	fetcht 2,mem_le_search_handle_start
+	fetch 2,mem_le_search_handle_end
+	isub temp,null
+	nbranch le_start_end_handle_check_1_fail,positive
+	deposit temp
+	rtnne 0
+le_start_end_handle_check_1_fail:
+	enable user
+	jam ATT_ERR_INVALID_HANDLE,mem_le_err_code
+	branch le_send_att_error_response
+
+
+le_send_att_find_by_type_value_response:
+	call le_start_end_handle_check_1
+	rtn user
+	fetcht 2,mem_le_search_uuid
+	setarg UUID_GATT_PRIMARY_SERVICE
+	isub temp,null
+	branch le_send_att_find_by_type_value_res_primary,zero
+	branch le_send_att_error_response_notfound
+	
+
+le_send_att_find_by_type_value_res_primary:
+	jam LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND,mem_le_search_res
+	fetcht 2,mem_le_search_handle_start
+	storet 2,mem_temp
+	call le_att_get_handle_info
+	nbranch le_send_att_error_response_notfound,blank
+le_send_att_find_primary_search_loop:
+	fetcht 2,mem_temp
+	call le_att_get_handle_info
+	nbranch le_send_att_error_response_notfound2,blank	
+	copy contr,rega
+	fetch 1,mem_le_curr_att_len
+	copy pdata,loopcnt
+	fetcht 1,mem_le_search_att_type_length
+	isub temp,null
+	nbranch le_send_att_find_primary_search_loop1,zero
+	arg mem_le_search_att_type,regb
+	call string_compare
+
+	branch le_send_att_find_primary_search_end_start_handle_found,zero
+
+	fetch 2,mem_le_cur_uuid
+	fetcht 2,mem_le_search_uuid
+	isub temp,null
+	branch le_send_att_find_primary_search_end_ending_handle_found,zero
+le_send_att_find_primary_search_loop1:
+	fetch 2,mem_temp
+	increase 1,pdata
+	store 2,mem_temp
+	branch le_send_att_find_primary_search_loop
+
+le_send_att_error_response_notfound2:
+	fetch 1,mem_le_search_res
+	beq LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE,le_send_att_find_primary_search_end_ending_handle_found
+	branch le_send_att_error_response_notfound
+
+	
+le_send_att_find_primary_search_end_start_handle_found:
+	fetch 2,mem_le_cur_uuid
+	fetcht 2,mem_le_search_uuid
+	isub temp,null
+	nbranch  le_send_att_find_primary_search_loop1,zero
+	jam LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE,mem_le_search_res
+//	copy rega,temp
+	fetcht 2,mem_temp
+	storet 2,mem_le_cur_handle_start
+	branch le_send_att_find_primary_search_loop1
+
+le_send_att_find_primary_search_end_ending_handle_found:
+	fetch 1,mem_le_search_res
+	beq LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND,le_send_att_find_primary_search_loop1
+	jam LE_FIND_BY_TYPE_VAL_RES_FOUND_ENDING_HANDLE,mem_le_search_res
+	fetcht 2,mem_temp
+	increase -1,temp
+	storet 2,mem_le_cur_handle_end
+	
+le_send_att_find_primary_search_end:
+	arg 5,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_FIND_BY_TYPE_VALUE_RESPONSE
+	istore 1,contw
+	fetch 2,mem_le_cur_handle_start
+	istore 2,contw
+	fetch 2,mem_le_cur_handle_end
+	istore 2,contw
+	rtn
+
+
+
+le_parse_att_read_by_type_request:
+	call le_get_search_handle_start_end_common
+	call le_get_search_att_uuid
+	branch le_send_att_read_by_type_response
+	
+le_send_att_read_by_type_response:
+	fetcht 2,mem_le_search_handle_start
+	storet 2,mem_temp
+	call le_init_attlist_search
+	call le_att_get_handle_ptr2
+	increase -2,contr
+	copy contr,pdata
+	store 2,mem_le_cur_attlist_start_ptr
+
+	fetcht 2,mem_le_search_uuid
+	setarg UUID_CHRCTR_DEVICE_NAME
+	isub temp,null
+	branch le_send_att_read_by_type_res_device_name,zero
+	setarg UUID_GATT_CHARACTERISTIC
+	isub temp,null
+	nbranch le_send_att_read_by_type_res_not_characteristic,zero
+	arg 2,timeup
+le_send_att_read_by_type_response_loop:
+	call le_att_check_handle_end
+	nbranch le_send_att_read_by_type_response_end,positive
+	fetcht 2,mem_temp
+	call le_att_get_handle_info_from_ptr
+	beq 1,le_send_att_read_by_type_response_end
+	call le_att_same_uuid
+	nbranch le_send_att_read_by_type_response_next_handle,zero
+	nbranch le_send_att_read_by_type_res_found_next,user
+	disable user
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BY_TYPE_RESPONSE
+	istore 1,contw
+	copy contw,alarm
+	increase 1,contw
+	
+	call le_send_att_read_by_type_write_properties
+	call le_att_next_handle
+	call le_att_get_handle_info_from_ptr
+	call le_send_att_read_by_type_write_uuid
+	fetch 1,mem_le_cur_uuid_length
+	increase 5,pdata
+	istore 1,alarm
+	fetch 1,mem_le_cur_uuid_length
+	beq 16,le_send_att_read_by_type_response_end
+	increase -1,timeup
+	branch le_send_att_read_by_type_response_end,zero
+le_send_att_read_by_type_response_next_handle:
+	call le_att_next_handle
+	branch le_send_att_read_by_type_response_loop
+le_send_att_read_by_type_response_end:
+	branch le_send_att_error_response_notfound,user
+	branch le_send_auto_len_by_mem
+
+le_send_att_read_by_type_res_found_next:
+	call le_store_att_record
+	call le_att_next_handle
+	call le_att_get_handle_info_from_ptr
+	fetch 1,mem_le_cur_uuid_length
+	beq 16,le_send_att_read_by_type_response_end
+	
+	call get_contw
+	fetch 2,mem_temp
+	increase -1,pdata
+	istore 2,contw
+	call le_write_att_record_common
+	call le_send_att_read_by_type_write_uuid
+	increase -1,timeup
+	branch le_send_att_read_by_type_response_end,zero
+	branch le_send_att_read_by_type_response_next_handle
+
+	
+le_send_att_read_by_type_write_properties:
+	fetch 2,mem_temp
+	istore 2,contw
+	
+	fetch 1,mem_le_curr_att_len
+	copy pdata,loopcnt
+	call get_contr
+	call memcpy_fast
+	branch store_contw
+le_send_att_read_by_type_write_uuid:
+	call get_contw
+	fetch 2,mem_temp
+	istore 2,contw
+	call store_contw
+	fetch 1,mem_le_cur_uuid_length
+	copy pdata,loopcnt
+	call get_contw	
+	call get_contr
+	isub loopcnt,contr
+	increase -1,contr
+	call memcpy_fast
+	branch store_contw
+
+
+
+le_send_att_read_by_type_res_not_characteristic:
+	fetcht 2,mem_le_search_handle_start
+	storet 2,mem_temp
+le_send_att_read_by_type_res_not_char_loop:
+	call le_att_check_handle_end
+	nbranch le_send_att_error_response_notfound,positive
+	call le_att_get_handle_info_from_ptr
+	beq 1,le_send_att_error_response_notfound
+	call le_att_same_uuid
+	nbranch le_send_att_read_by_type_res_not_char_next,zero
+
+le_send_att_read_by_type_res_not_char_common:
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BY_TYPE_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_curr_att_len
+	copy pdata,loopcnt
+	increase 2,pdata
+	istore 1,contw
+	fetch 2,mem_temp
+	istore 2,contw
+	call get_contr
+	call memcpy_fast
+	call store_contw
+	branch le_send_auto_len_by_mem
+	
+le_send_att_read_by_type_res_not_char_next:
+ 	call le_att_next_handle
+	branch le_send_att_read_by_type_res_not_char_loop
+
+
+le_send_att_read_by_type_res_device_name:
+	arg UUID_CHRCTR_DEVICE_NAME,temp
+	call le_att_get_short_uuid_ptr
+	rtn blank
+	increase -5,contr // point to handle
+	ifetch 2,contr		
+	store 2,mem_temp
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BY_TYPE_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_name_len
+	copy pdata,loopcnt
+	increase 2,pdata
+	istore 1,contw
+	fetch 2,mem_temp
+	istore 2,contw
+	arg mem_le_name,contr
+	call memcpy_fast
+	call store_contw
+	branch le_send_auto_len_by_mem
+
+
+
+le_parse_att_read_request:
+	fetcht 2,mem_le_att_handle
+	fetch 1,mem_le_configuration
+	bbit1 BIT_BLE_READ_AUTH,le_send_att_read_response_check_auth
+
+le_send_att_read_response:
+	call le_att_get_handle_ptr
+	branch le_send_att_error_response_notfound,blank
+	increase -2,contr
+	ifetch 2,contr
+	arg UUID_CHRCTR_DEVICE_NAME,temp
+	isub temp,null
+	branch le_send_device_name,zero
+	ifetch 1,contr
+	sub pdata,22,null
+	branch le_send_att_read_response_less,positive
+	force 22,pdata
+le_send_att_read_response_less:
+	copy pdata,regc
+	call store_contr
+	add regc,1,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_RESPONSE
+	istore 1,contw
+	copy regc,loopcnt
+	call get_contr
+	branch memcpy
+
+le_send_device_name:
+	call store_contr
+	fetch 1,mem_le_name_len
+	add pdata,1,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_name_len
+	copy pdata,loopcnt
+	arg mem_le_name,contr
+	branch memcpy
+	
+	
+le_send_att_read_response_check_auth:
+	fetch 2,mem_le_pairing_handle
+	isub temp,null
+	nbranch le_send_att_read_response,zero
+//le_send_att_read_response_error_insufficient_auth:
+	call le_check_encrypt_state
+	nbranch le_send_att_read_response,user
+	jam ATT_ERR_INSUFFICIENT_AUTHENTICATION,mem_le_err_code
+	branch le_send_att_error_response
+
+
+le_parse_att_read_blob_request:
+	ifetch 2,contr
+	store 2,mem_le_att_offset
+le_send_att_read_blob_response:
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BLOB_RESPONSE
+	istore 1,contw
+	fetch 2,mem_le_att_offset
+	iforce rega
+	fetcht 2,mem_le_att_handle
+	call le_att_get_handle_ptr 
+	branch le_send_att_error_response_notfound,blank
+	ifetch 1,contr
+	isub rega,loopcnt
+	nbranch le_send_att_error_response_notfound,positive
+	sub loopcnt,22,null
+	branch le_send_att_read_blob_response_less,positive
+	force 22,loopcnt
+le_send_att_read_blob_response_less:
+	deposit rega
+	iadd contr,contr
+	call memcpy_fast
+	call store_contw
+	branch le_send_auto_len_by_mem
+
+
+le_parse_att_read_by_group_type_request:
+	call le_get_search_handle_start_end_common
+ 	call le_get_search_att_type
+	branch le_send_att_read_by_group_type_response
+	
+//mem_le_search_att_type
+//mem_le_search_handle_start
+//mem_le_search_handle_end
+le_send_att_read_by_group_type_response:
+	arg 2,timeup
+	fetcht 2,mem_le_search_handle_start
+//	arg 23,pdata
+//	isub temp,null
+//	call ice_break,zero
+	storet 2,mem_temp
+	call le_init_attlist_search
+	call le_att_get_handle_ptr2
+	increase -2,contr
+	copy contr,pdata
+	store 2,mem_le_cur_attlist_start_ptr
+le_send_att_read_by_group_type_response_loop:
+	call le_att_check_handle_end
+	nbranch le_send_att_read_by_group_type_end0,positive
+	fetcht 2,mem_temp
+	call le_att_get_handle_info_from_ptr
+	beq 1,le_send_att_read_by_group_type_end1
+
+	call le_att_same_type
+	nbranch le_send_att_read_by_group_type_next_handle,zero
+	copy timeup,pdata
+	beq 0,le_send_att_read_by_group_type_end1
+	nbranch le_send_att_read_by_group_type_store_write_record,user		//un first
+	disable user
+	//first att uuid
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BY_GROUP_TYPE_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_curr_att_len
+	increase 4,pdata
+	istore 1,contw
+	call store_contw
+	branch le_send_att_read_by_group_type_store_record
+le_send_att_read_by_group_type_store_write_record:
+	fetch 1,mem_le_curr_att_len
+	beq 16,le_send_att_read_by_group_type_end1
+	fetch 2,mem_temp
+	increase -1,pdata
+	store 2,mem_le_cur_handle_end
+	call le_write_att_record
+le_send_att_read_by_group_type_store_record:
+	fetch 2,mem_temp
+	store 2,mem_le_cur_handle_start
+	call le_store_att_record
+	increase -1,timeup
+//	branch le_send_att_read_by_group_type_last_find,zero		
+le_send_att_read_by_group_type_next_handle:
+	call le_att_next_handle
+	branch le_send_att_read_by_group_type_response_loop
+
+le_send_att_read_by_group_type_end0:	//> att handle end
+	fetch 2,mem_temp
+	store 2,mem_le_cur_handle_end
+	branch le_send_att_read_by_group_type_end_common
+le_send_att_read_by_group_type_end1:	//>att max list handle or diff len 
+	fetch 2,mem_temp
+	increase -1,pdata
+	store 2,mem_le_cur_handle_end
+	branch le_send_att_read_by_group_type_end_common
+le_send_att_read_by_group_type_end_common:
+	branch le_send_att_error_response_notfound,user
+	call le_write_att_record
+	branch le_send_auto_len_by_mem
+
+
+
+
+le_parse_att_write_request:
+	copy contr,rega
+	fetch 2,mem_le_l2cap_size
+	add pdata,-3,regb
+	call le_writeatt_cb
+le_send_att_write_response_check_auth:
+	fetch 1,mem_le_configuration
+	bbit0 BIT_BLE_WRITE_AUTH,le_send_att_write_response
+	
+	fetcht 2,mem_le_att_handle
+	fetch 2,mem_le_pairing_handle
+	isub temp,null
+	nbranch le_send_att_write_response,zero
+	call le_check_encrypt_state
+	nbranch le_send_att_write_response,user
+	jam ATT_ERR_INSUFFICIENT_AUTHENTICATION,mem_le_err_code
+	branch le_send_att_error_response
+
+le_send_att_write_response:
+	force 1,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_WRITE_RESPONSE
+	istore 1,contw
+	rtn
+
+le_check_encrypt_state:
+	call disable_user
+	fetch 1,mem_le_pairing_mode
+	rtneq LE_PAIRING_MODE_NONE
+	fetch 1,mem_context
+	rtnbit1 lestate_encryption
+	branch enable_user
+
+
+le_parse_att_prepare_write_request:
+	add contr,2,rega
+	fetch 2,mem_le_l2cap_size
+	add pdata,-5,regb
+	call le_writeatt_cb
+	branch le_send_att_prepare_write_response
+
+
+le_send_att_prepare_write_response:
+	fetch 2,mem_le_l2cap_size
+	copy pdata,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_PREPARE_WRITE_RESPONSE
+	istore 1,contw
+	fetch 2,mem_le_att_handle
+	istore 2,contw
+	fetch 2,mem_le_l2cap_size
+	add pdata,-5,loopcnt	
+	fetch 2,mem_le_payload_ptr
+	add pdata,7,contr
+	ifetch 2,contr		//offset
+	istore 2,contw
+	branch memcpy_fast
+
+
+
+le_parse_att_execute_write_request:
+
+le_send_att_execute_write_response:
+	force 1,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_EXECUTE_WRITE_RESPONSE
+	istore 1,contw
+	rtn
+
+
+
+le_parse_att_write_command:
+	copy contr,rega
+	fetch 2,mem_le_l2cap_size
+	add pdata,-3,regb
+	branch le_writeatt_cb
+
+
+
+//rga:len temp:handle;rgea,regb,regc already used
+le_att_malloc_tx_notify:
+	copy temp,regc
+	increase 3,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	increase -3,rega
+	setarg ATTOP_HANDLE_VALUE_NOTIFICATION
+	istore 1,contw
+	copy regc,temp
+	istoret 2,contw
+	rtn
+
+//rga:len temp:handle;rgea,regb,regc already used
+le_att_malloc_tx_indication:
+	copy temp,regc
+	increase 3,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	increase -3,rega
+	setarg ATTOP_HANDLE_VALUE_INDICATION
+	istore 1,contw
+	copy regc,temp
+	istoret 2,contw
+	rtn
+
+
+///////////////////////////ATT common function////////////////////////////////////
+
+le_send_att_error_response_notfound:	
+	jam ATT_ERR_ATTRIBUTE_NOT_FOUND,mem_le_err_code
+le_send_att_error_response:	
+	force 5,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_ERROR_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_att_opcode
+	istore 1,contw
+	fetch 2,mem_le_att_handle
+	istore 2,contw
+	fetch 1,mem_le_err_code
+	istore 1,contw
+	rtn
+
+
+le_fifo_malloc_tx_l2cap_gatt:
+	force LE_L2CAP_CID_ATT,regb
+	branch le_fifo_malloc_tx_l2cap
+
+
+le_att_next_handle:
+	fetcht 2,mem_temp
+	increase 1,temp
+	storet 2,mem_temp
+	rtn
+
+le_att_check_handle_end:
+	fetcht 2,mem_temp
+	fetch 2,mem_le_search_handle_end
+	isub temp,null
+	rtn
+
+
+le_att_same_type:
+	fetcht 1,mem_le_search_att_type_length
+	arg mem_le_search_att_type,rega
+le_att_check_same_common:
+	fetch 1,mem_le_cur_uuid_length
+	copy pdata,loopcnt
+	isub temp,null
+	nrtn zero
+	arg mem_le_cur_uuid ,regb
+	branch string_compare
+
+le_att_same_uuid:
+	fetcht 1,mem_le_search_uuid_length
+	arg mem_le_search_uuid,rega
+	branch le_att_check_same_common
+
+
+le_store_att_record:
+	fetch 1,mem_le_curr_att_len
+	store 1, mem_tmp_buffer
+	copy pdata,loopcnt
+	call get_contr
+	branch memcpy_fast
+
+
+le_write_att_record:
+	call get_contw
+	fetch 2,mem_le_cur_handle_start
+	istore 2,contw
+	fetch 2,mem_le_cur_handle_end
+	istore 2,contw
+le_write_att_record_common:
+	fetch 1,mem_tmp_buffer
+	copy pdata,loopcnt
+	call memcpy_fast
+	branch store_contw
+
+
+
+le_send_auto_len_by_mem:
+	call get_contw
+	call le_fifo_get_last_att_ptr
+	copy contw,pdata
+	isub contr,rega
+	call le_fifo_get_last_l2cap_ptr
+	copy rega,pdata
+	istore 2,contr
+	increase 4,rega
+	call le_fifo_get_last_tx_ptr
+	copy rega,pdata
+	istore 1,contr
+	rtn
+
+
+le_get_search_handle_start_end_common:
+	rshift8 pdata,pdata
+	store 2,mem_le_search_handle_start
+	ifetch 2,contr
+	store 2,mem_le_search_handle_end
+	rtn
+
+
+
+
+le_parse_signaling:
+	ifetch 1,contr
+	ifetcht 1,contr //id
+	ifetcht 2,contr //length
+	beq L2CAP_CONNECTION_PARAMETER_UPDATE_RESPONSE,le_l2cap_parse_conn_parameter_update_rsp
+	rtn
+le_l2cap_parse_conn_parameter_update_rsp:
+	ifetch 2,contr	//result
+	store 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	jam BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+//mem_le_interval_min:the ptr that connection parameter,
+//include 	ConnIntervalMin,ConnIntervalMax,
+//		ConnSlaveLatency,ConnSupervisionTimeout
+le_l2cap_tx_update_req:
+	arg 0x0c,rega
+	arg L2CAP_CONNECTION_PARAMETER_UPDATE_REQUEST,regc
+	call le_fifo_malloc_tx_l2cap_signaling
+	setarg 0x08
+	istore 2,contw
+	fetch 8,mem_le_interval_min
+	istore 8,contw
+	rtn
+
+
+//rega:len regc:signaling opcode
+le_fifo_malloc_tx_l2cap_signaling:
+	call le_l2cap_update_signaling_identifier
+	arg LE_L2CAP_CID_SIGNAL,regb
+	call le_fifo_malloc_tx_l2cap
+	copy regc,pdata
+	istore 1,contw
+	fetch 1,mem_le_signaling_identifier
+	istore 1,contw
+	rtn
+
+
+le_l2cap_update_signaling_identifier:
+	fetch 1,mem_le_signaling_identifier
+	//beq 0xff,le_l2cap_signaling_identifier_set_1
+	pincrease 1
+	store 1,mem_le_signaling_identifier
+	rtnne 0
+	
+le_l2cap_reset_signaling_identifier:
+	jam 1,mem_le_signaling_identifier
+	rtn
+
+
+
+
+le_pairing_mode_init:
+	fetch  1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_NONE, le_set_no_pairing
+	beq LE_PAIRING_MODE_LAGACY_JUSTWORK,le_set_pairing_mode_lagacy_just_work
+	beq LE_PAIRING_MODE_LAGACY_PASSKEY,le_set_pairing_mode_lagacy_passkey
+	beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,le_set_pairing_mode_secure_justwork
+	beq LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC,le_set_pairing_mode_secure_numeric
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_set_pairing_mode_secure_passkey
+	rtn
+
+le_set_pairing_mode_secure_justwork:
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	branch le_set_noinputnooutput
+le_set_pairing_mode_secure_numeric:
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	jam FLAG_IOCAP_DISPLAYYESNO,mem_le_pres_iocap
+	rtn
+le_set_pairing_mode_secure_passkey:	
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	branch le_set_displayonly
+le_set_no_pairing:
+	jam FLAG_LE_NO_BONDING_NO_MITM,mem_le_pres_auth
+le_set_noinputnooutput:	
+	jam FLAG_IOCAP_NOINPUTNOOUTPUT,mem_le_pres_iocap
+	rtn
+le_set_pairing_mode_lagacy_just_work:
+	jam FLAG_LE_BONDING_MITM,mem_le_pres_auth
+	branch le_set_noinputnooutput
+le_set_pairing_mode_lagacy_passkey:
+	jam FLAG_LE_BONDING_MITM,mem_le_pres_auth
+le_set_displayonly:	
+	jam FLAG_IOCAP_DISPLAYONLY,mem_le_pres_iocap
+	rtn
+
+	
+le_secure_connection_enable:
+	fetch 1,mem_le_pres_auth
+	set1 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT,pdata
+	store 1,mem_le_pres_auth
+	rtn
+le_secure_connection_disable:
+	fetch 1,mem_le_pres_auth
+	set0 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT,pdata
+	store 1,mem_le_pres_auth
+	rtn
+
+le_parse_smp:
+	ifetch 1,contr
+	beq SMP_PAIRING_REQUEST,le_parse_smp_pairing_request
+//	beq SMP_PAIRING_RESPONSE,le_parse_smp_pairing_response
+	beq SMP_PAIRING_CONFIRM,le_parse_smp_pairing_confirm
+	beq SMP_PAIRING_RANDOM,le_parse_smp_pairing_random
+	beq SMP_PAIRING_FAILED,le_parse_smp_pairing_failed
+	beq SMP_ENCRYPTION_INFORMATION,le_parse_smp_encryption_information
+	beq SMP_MASTER_IDENTIFICATION,le_parse_smp_master_identification
+	beq SMP_IDENTITY_INFORMATION,le_parse_smp_identity_information
+	beq SMP_IDENTITY_ADDRESS_INFORMATION,le_parse_smp_identity_address_information
+	beq SMP_SIGNING_INFORMATION,le_parse_smp_signing_information
+	beq SMP_SECURITY_REQUEST,le_parse_smp_security_request
+	beq SMP_PAIRING_PUBLIC_KEY,le_parse_smp_public_key
+	beq SMP_PAIRING_DHKEY_CHECK,le_parse_smp_dhkey_check
+	rtn
+
+
+
+le_send_smp_security_request:
+	force 2,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_SECURITY_REQUEST
+	istore 1,contw
+	fetch 1,mem_le_pres_auth
+	istore 1,contw
+	rtn
+		
+le_parse_smp_pairing_request:
+	store 1,mem_le_preq
+	ifetch 6,contr
+	istore 6,contw
+	fetch 1,mem_le_pairing_mode
+	beq  LE_PAIRING_MODE_NONE,le_smp_pairing_fail_reason_not_support_pairing
+	call le_send_smp_pairing_response
+	call le_check_master_support_secure_connect
+	jam FLAG_LE_PAIRING_RCV_PAIRING_REQ,mem_le_pairing_state
+	fetch 1,mem_le_preq_iocap
+	beq  FLAG_IOCAP_DISPlAYONLY,le_set_tk_0
+	beq  FLAG_IOCAP_DISPLAYYESNO,le_set_tk_0
+	beq  FLAG_IOCAP_NOINPUTNOOUTPUT,le_set_tk_0
+	fetch 1,mem_le_pairing_mode	
+	beq LE_PAIRING_MODE_LAGACY_PASSKEY,le_parse_smp_pairing_req_passkey
+	rtneq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY
+le_set_tk_0:
+	arg 0,pdata
+	store 4,mem_le_tk
+	rtn
+
+le_parse_smp_pairing_req_passkey:
+	fetch 1,mem_le_configuration
+	bbit1 BIT_BLE_PASSKEY_FIXED_KEY,le_parse_smp_pairing_req_fixed_passkey
+le_genernate_tk:
+	arg mem_le_tk,rega
+	copy rega,contw
+	arg 3,loopcnt
+	call generate_random_loop
+	fetch 2,mem_le_tk + 2
+	and_into 0x7,pdata
+	store 2,mem_le_tk + 2
+le_parse_smp_pairing_req_fixed_passkey:
+	jam BT_EVT_LE_TK_GENERATE,mem_fifo_temp
+	branch ui_ipc_send_event
+
+le_check_master_support_secure_connect:
+	fetch 1,mem_le_preq_auth
+	rtnbit1  LE_AUTH_SECURE_CONNECTION_PAIRING_BIT
+	fetch 1,mem_le_pairing_mode
+	rtnbit0 LE_PAIRING_MODE_SECURE_CONNECT_BIT
+	branch app_ble_disconnect	
+
+le_send_smp_pairing_response:
+	force 7,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	fetch 7,mem_le_pres
+	istore 7,contw
+	rtn
+		
+
+le_parse_smp_pairing_confirm:
+	copy contr,rega
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_parse_smp_pairing_confirm_secure_passkey
+	copy rega,contr
+	arg mem_le_rconfirm,contw
+	call memcpy16
+	branch le_send_smp_pairing_confirm
+le_parse_smp_pairing_confirm_secure_passkey:
+	copy rega,contr
+	arg mem_le_rconfirm,contw
+	call memcpy16
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	jam LE_SC_STAT_PASSKEY_WAIT_CONFIRM,mem_le_secure_connect_state	
+	rtn
+
+
+le_send_smp_pairing_confirm:
+	fetch 1,mem_le_pairing_mode
+	bbit1 LE_PAIRING_MODE_SECURE_CONNECT_BIT,le_send_smp_pairing_confirm_sc
+	call generate_confirm
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_CONFIRM
+	istore 1,contw
+	branch  store_aes_result
+
+	
+le_send_smp_pairing_confirm_sc:
+	arg mem_le_srand,contw	
+	call generate_random
+	call function_f4_cb
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_CONFIRM
+	istore 1,contw
+	branch  load_inverse_result
+
+
+	
+le_parse_smp_pairing_random:	
+	copy contr,rega
+	fetch 1,mem_le_pairing_mode
+	bbit1 LE_PAIRING_MODE_SECURE_CONNECT_BIT,le_parse_smp_pairing_random_sc
+	copy rega,contr
+	call authenticate_rconfirm
+	branch le_parse_smp_pairing_random_success,zero
+le_send_pairing_confirm_value_failed:
+	jam PAIRING_FAILED_CONFIRM_VALUE_FAILED,mem_le_ll_pairing_fail_reason
+le_send_pairing_failed:
+	force 2,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_FAILED
+	istore 1,contw
+	fetch 1,mem_le_ll_pairing_fail_reason
+	istore 1,contw	
+le_parse_smp_pairing_failed:
+	force smp_pairing_timer,queue
+	call timer_stop
+	jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state
+	jam BT_EVT_LE_PAIRING_FAIL,mem_fifo_temp
+	branch ui_ipc_send_event
+
+le_smp_pairing_fail_reason_not_support_pairing:
+	jam PAIRING_FAILED_PAIRING_NOT_SUPPORTED,mem_le_ll_pairing_fail_reason
+	branch le_send_pairing_failed
+	
+	
+le_parse_smp_pairing_random_sc:
+	arg mem_le_mrand,contw
+	copy rega,contr
+	call memcpy16	
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_parse_smp_pairing_random_sc_passkey
+	call function_g2
+//	jam LE_SC_STAT_RECEIVE_RANDOM,mem_le_secure_connect_state
+//	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	call le_send_smp_pairing_random
+	fetch 1,mem_le_pairing_mode
+	rtnne LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC
+	jam BT_EVT_LE_GKEY_GENERATE,mem_fifo_temp
+	branch ui_ipc_send_event	
+	
+le_parse_smp_pairing_random_sc_passkey:
+	call function_f4_ca
+	arg mem_AES_CMAC_temp,contw
+	call load_inverse_result	
+	arg mem_AES_CMAC_temp,rega
+	arg mem_le_rconfirm ,regb
+	arg 16,loopcnt
+	call string_compare
+	nbranch le_send_pairing_confirm_value_failed,zero
+	branch le_send_smp_pairing_random
+	
+le_parse_smp_pairing_random_success:
+	call generate_stk
+	jam BT_EVT_LE_PAIRING_SUCCESS,mem_fifo_temp
+	call ui_ipc_send_event
+	jam 1,mem_ltk_exists
+	jam FLAG_LE_PAIRING_AFTER_AUTH,mem_le_pairing_state
+	
+le_send_smp_pairing_random:
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_RANDOM
+	istore 1,contw
+	arg mem_le_srand,contr
+	branch memcpy16
+	
+le_parse_smp_encryption_information:
+	arg mem_le_peer_ltk,contw
+	branch memcpy16
+
+le_send_smp_encryption_information:
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_ENCRYPTION_INFORMATION
+	istore 1,contw
+	fetch 1,mem_le_configuration
+	bbit1 BIT_BLE_PAIRING_FIXED_LTK,le_send_fixed_ltk
+	arg mem_le_ltk,contr
+	branch memcpy16
+
+le_send_fixed_ltk:
+	arg mem_le_fixed_ltk,contr
+	branch memcpy16
+
+
+le_send_smp_master_identification:
+	arg mem_le_ediv,contw
+	force 10,loopcnt
+	call generate_random_loop
+	force 11,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_MASTER_IDENTIFICATION
+	istore 1,contw
+	fetch 2,mem_le_ediv
+	istore 2,contw
+	fetch 8,mem_le_rand
+	istore 8,contw
+	rtn
+
+le_send_smp_identity_information:
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_IDENTITY_INFORMATION
+	istore 1,contw
+	setarg 0
+	istore 8,contw
+	istore 8,contw
+	rtn
+	
+
+le_send_smp_identity_address_information:
+	force 8,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_IDENTITY_ADDRESS_INFORMATION
+	istore 1,contw
+	fetch 1,mem_le_conn_own_addr_type
+	istore 1,contw
+	fetch 6,mem_le_lap	
+	istore 6,contw
+	rtn	
+
+
+le_send_pairing_fail_unspecified_reason:
+	jam PAIRING_FAILED_UNSPECIFIED_REASON,mem_le_ll_pairing_fail_reason
+	branch le_send_pairing_failed
+
+le_check_init_key_distribution:
+	fetch 1,mem_le_pres_init_key_distribution
+	fetcht 1,mem_le_pres_init_key_distribution
+	iand temp,pdata
+	rtn	
+
+le_parse_smp_identity_information:
+	arg mem_le_irk,contw
+	call memcpy16
+	call le_check_init_key_distribution
+	isolate0 LE_INITATOR_IRK_BIT,pdata
+	branch le_send_pairing_fail_unspecified_reason,true
+	fetch 1,mem_device_option
+	rtnne dvc_op_module
+	call le_check_master_addr_type
+	nrtn user
+	branch app_ble_store_reconn_info
+
+//output:user is enable ,random addr type
+le_check_master_addr_type:
+	call disable_user
+	fetch 1,mem_le_conn_peer_addr_type
+	rtneq MASTER_PUBLIC_ADDR
+	fetch 1,mem_le_plap+5
+	compare 0xc0,pdata,0xc0
+	rtn true
+	branch enable_user
+
+le_parse_smp_identity_address_information:
+	call le_check_init_key_distribution
+	isolate0 LE_INITATOR_IRK_BIT,pdata
+	branch le_send_pairing_fail_unspecified_reason,true
+	rtn
+
+le_parse_smp_master_identification:
+le_parse_smp_signing_information:	
+le_parse_smp_security_request:
+	rtn
+	
+le_parse_smp_public_key:
+	arg mem_le_pubkey_remote_x_256,contw	
+	call memcpy64
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	jam LE_SC_STAT_RECEIVE_PUBLIC_KEY,mem_le_secure_connect_state
+	rtn
+
+le_parse_smp_dhkey_check:
+	arg mem_sp_confirm_remote,contw
+	call memcpy16	
+	jam LE_SC_STAT_RECEIVE_DHKEY,mem_le_secure_connect_state
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	rtn	
+
+le_send_smp_pairing_public_key:
+	force 65,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_PUBLIC_KEY
+	istore 1,contw	
+	arg mem_le_pubkey_local_x_256,contr
+	branch memcpy64
+	
+le_send_smp_pairing_dhkey_check:
+	call function_f6_eb	
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_DHKEY_CHECK
+	istore 1,contw
+	branch load_inverse_result
+	
+
+le_check_paring_time:
+	fetch 1,mem_le_pairing_state
+	rtneq FLAG_LE_PAIRING_END
+	arg FLAG_LE_PAIRING_RCV_PAIRING_REQ,temp
+	isub temp,null
+	nrtn positive
+	arg smp_pairing_timer,queue
+	call timer_check
+	nrtn blank
+	branch le_send_pairing_fail_unspecified_reason
+
+le_pairing_sm:
+	bpatchx patch2f_0,mem_patch2f
+	fetch 1,mem_le_pairing_state
+	beq FLAG_LE_PAIRING_NULL,le_pairing_sm_null
+	beq FLAG_LE_PAIRING_START,le_pairing_sm_start
+	beq FLAG_LE_PAIRING_SEND_RECURITY_REQ,le_pairing_sm_send_sec_req
+	beq FLAG_LE_PAIRING_RCV_PAIRING_REQ,le_pairing_sm_rcv_pairing_req
+	beq FLAG_LE_PAIRING_AFTER_AUTH,le_pairing_sm_after_auth
+	beq FLAG_LE_PARING_SEND_ENC_INFORMATION,le_pairng_sm_send_enc_information
+	beq FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION,le_pairng_sm_send_master_indentification
+	beq FLAG_LE_PARING_SEND_INDENTITY_INFORMATION,le_pairng_sm_send_indentity_information
+	rtn
+
+le_pairing_sm_null:
+le_pairing_sm_send_sec_req:
+	fetch 1,mem_le_enc_state
+	rtnne FLAG_LE_SEND_START_ENC_RSP
+	jam FLAG_LE_ENC_END,mem_le_enc_state
+	jam FLAG_LE_PAIRING_END,mem_le_pairing_state
+	jam BT_EVT_LE_RECONNECT_COMPLETE ,mem_fifo_temp
+	branch ui_ipc_send_event	
+	
+	
+le_pairing_sm_start:
+	jam FLAG_LE_PAIRING_SEND_RECURITY_REQ,mem_le_pairing_state
+	branch le_send_smp_security_request
+
+le_pairing_sm_rcv_pairing_req:
+	jam FLAG_LE_PAIRING_AUTH,mem_le_pairing_state
+	setarg TIMER_SMP_PAIRING_TIMEOUT
+	arg smp_pairing_timer,queue
+	branch timer_init
+	
+le_pairing_sm_after_auth:
+	fetch 1,mem_le_enc_state
+	beq FLAG_LE_SEND_START_ENC_RSP,le_pairing_sm_after_auth_start_enc
+	rtn
+	
+le_pairing_sm_after_auth_start_enc:
+	jam FLAG_LE_PARING_SEND_ENC_INFORMATION,mem_le_pairing_state
+	jam BT_EVT_LE_ENC_INFO,mem_fifo_temp
+	call ui_ipc_send_event
+	call le_send_smp_encryption_information
+	fetch 1,mem_device_option
+	rtnne dvc_op_module
+	call le_check_master_addr_type
+	rtn user
+	branch app_ble_store_reconn_info
+
+
+le_pairng_sm_send_enc_information:	
+	jam FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION,mem_le_pairing_state
+	branch le_send_smp_master_identification
+
+le_pairng_sm_send_master_indentification:	
+	fetch 1,mem_le_preq_resp_key_distribution
+	fetcht 1,mem_le_pres_resp_key_distribution
+	iand temp,pdata
+	isolate0 LE_INITATOR_IRK_BIT,pdata
+	branch le_parse_start_enc_rsp_after_auth_end,true
+	jam FLAG_LE_PARING_SEND_INDENTITY_INFORMATION,mem_le_pairing_state
+	branch le_send_smp_identity_information
+
+le_pairng_sm_send_indentity_information:		
+	call le_send_smp_identity_address_information
+	branch le_parse_start_enc_rsp_after_auth_end
+
+
+le_parse_start_enc_rsp_after_auth_end:
+	force smp_pairing_timer,queue
+	call timer_stop
+	jam FLAG_LE_ENC_END,mem_le_enc_state
+	jam FLAG_LE_PAIRING_END,mem_le_pairing_state
+	jam BT_EVT_LE_PAIRING_COMPLETE ,mem_fifo_temp
+	branch ui_ipc_send_event	
+	
+
+
+le_secure_connect_sm:
+	bpatchx patch2f_1,mem_patch2f
+	fetch 1,mem_le_pairing_mode
+	rtnbit0 LE_PAIRING_MODE_SECURE_CONNECT_BIT
+	fetch 1,mem_le_secure_connect_flag
+	rtnne LE_SP_FLAG_COMMIT_256
+	jam SP_FLAG_STANDBY,mem_le_secure_connect_flag
+	fetch    1,mem_le_secure_connect_state
+	beq  LE_SC_STAT_RECEIVE_PUBLIC_KEY,le_sc_sm_receive_public_key
+	beq LE_SC_STAT_WAIT_SEND_PUBLIC_KEY,le_sc_sm_wait_send_public_key
+	beq LE_SC_STAT_SEND_PUBLIC_KEY,le_sc_sm_send_public_key
+	beq LE_SC_STAT_RECEIVE_DHKEY,le_sc_sm_receive_dhkey
+	beq LE_SC_STAT_WAIT_CONFIRM_GKEY,le_sc_sm_wait_confirm_gkey
+	beq  LE_SC_STAT_PASSKEY_WAIT_CONFIRM,le_sc_sm_passkey_wait_confirm
+	rtn	
+
+
+le_sc_sm_passkey_wait_confirm:
+	fetch 1,mem_authentication_passkey_times
+	copy pdata,queue
+	increase 1,pdata
+	store 1,mem_authentication_passkey_times
+	fetch 4,mem_le_tk
+	qisolate1 pdata
+	setarg 0x80
+	setflag true,0,pdata
+	store 1,mem_passkey_1bit
+	branch le_sc_sm_ready_send_pairing_confirm
+	
+le_sc_sm_wait_confirm_gkey:
+	fetch 1,mem_le_sc_confirm_gkey_flag
+	jam FLAG_LE_SC_CONFRIM_NULL,mem_le_sc_confirm_gkey_flag
+	beq FLAG_LE_SC_CONFRIM_GKEY_OK,le_sc_confirm_gkey_ok
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	rtn
+	
+le_sc_confirm_gkey_ok:
+	jam BT_EVT_LE_PAIRING_SUCCESS,mem_fifo_temp
+	call ui_ipc_send_event	
+	jam FLAG_LE_PAIRING_AFTER_AUTH,mem_le_pairing_state
+	branch le_send_smp_pairing_dhkey_check
+
+le_sc_sm_receive_dhkey:
+	fetch 1,mem_sp_dhkey_invalid
+	beq SP_KEY_VALID_256,le_dhkey_ready
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	rtn
+
+le_dhkey_ready:
+	call function_f5
+//	arg mem_le_r,contw
+//	force 2,loopcnt
+//	call memset0
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY ,le_dhkey_ready_common
+	call le_set_tk_0 
+le_dhkey_ready_common:
+	call function_f6_ea
+	arg mem_AES_CMAC_temp,rega
+	arg mem_sp_confirm_remote ,regb
+	arg 16,loopcnt
+	call string_compare
+	branch le_dhkey_check_ok,zero
+le_dhkey_check_fail:	
+	jam PAIRING_FAILED_DHKEY_CHECK_FAILED,mem_le_ll_pairing_fail_reason
+	branch le_send_pairing_failed
+
+	
+le_dhkey_check_ok:
+	call sp_calc_check_publickey_256
+	nbranch le_dhkey_check_fail,zero
+	jam 1,mem_ltk_exists
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,le_sc_confirm_gkey_ok
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY ,le_sc_confirm_gkey_ok	
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	jam LE_SC_STAT_WAIT_CONFIRM_GKEY,mem_le_secure_connect_state	
+	rtn	
+
+le_sc_sm_send_public_key:
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_sc_sm_send_public_key_passkey
+	jam 0,mem_passkey_1bit
+le_sc_sm_ready_send_pairing_confirm:
+	branch le_send_smp_pairing_confirm
+
+le_sc_sm_send_public_key_passkey:
+//	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+//	jam LE_SC_STAT_PASSKEY_WAIT_CONFIRM,mem_le_secure_connect_state	
+//	branch p_ng_event_le_get_passkey
+	jam 0,mem_authentication_passkey_times
+	branch le_parse_smp_pairing_req_passkey
+
+	
+le_sc_sm_receive_public_key:
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	fetch 1,mem_le_sc_local_key_invalid
+	beq SP_KEY_VALID_256,le_public_key_ready
+//	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	rtn
+	
+le_public_key_ready:
+	jam LE_SC_STAT_WAIT_SEND_PUBLIC_KEY,mem_le_secure_connect_state	
+	jam SP_KEY_INVALID,mem_sp_dhkey_invalid
+	branch sp_dhkey_calc_256	
+
+le_sc_sm_wait_send_public_key:
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	jam LE_SC_STAT_SEND_PUBLIC_KEY,mem_le_secure_connect_state
+	branch le_send_smp_pairing_public_key
+
+
+
+le_fifo_malloc_tx_l2cap_smp:
+	force LE_L2CAP_CID_SMP,regb
+	branch le_fifo_malloc_tx_l2cap
+
+
+
+le_parse_ll:
+	fetch 1,mem_le_rxbuf+2
+	beq LL_CONNECTION_UPDATE_REQ,le_parse_connection_update_req
+	beq LL_CHANNEL_MAP_REQ,le_parse_channel_map_req
+	beq LL_TERMINATE_IND,le_parse_terminate_ind
+	beq LL_ENC_REQ,le_parse_enc_req
+	beq LL_ENC_RSP,le_parse_enc_rsp
+	beq LL_START_ENC_REQ,le_parse_start_enc_req
+	beq LL_START_ENC_RSP,le_parse_start_enc_rsp
+	beq LL_UNKNOWN_RSP,le_parse_unknown_rsp
+	beq LL_FEATURE_REQ,le_parse_feature_req
+	beq LL_FEATURE_RSP,le_parse_feature_rsp
+	beq LL_PAUSE_ENC_REQ,le_parse_pause_enc_req
+	beq LL_PAUSE_ENC_RSP,le_parse_pause_enc_rsp
+	beq LL_VERSION_IND,le_parse_version_ind
+	beq LL_REJECT_IND,le_parse_reject_ind
+	beq LL_PING_REQ,le_parse_ping_req
+	beq LL_PING_RSP,le_parse_ping_rsp
+	arg 2,rega
+	arg LL_UNKNOWN_RSP,regb
+	call le_fifo_malloc_tx_ll
+	fetch 1,mem_le_rxbuf+2
+	istore 1,contw
+	rtn	
+
+
+le_parse_connection_update_req:
+	ifetch 9,contr
+	store 9,mem_le_new_param
+	ifetch 2,contr
+	store 2,mem_le_instant
+	fetch 1,mem_le_state
+	set1 lestate_update_param,pdata
+	store 1,mem_le_state
+	rtn
+
+le_parse_channel_map_req:
+	ifetch 5,contr
+	store 5,mem_le_new_map
+	ifetch 2,contr
+	store 2,mem_le_instant
+	fetcht 2,mem_le_event_count
+	isub temp,null
+	nbranch le_parse_terminate_ind,positive
+	fetch 1,mem_le_state
+	set1 lestate_update_map,pdata
+	store 1,mem_le_state
+	rtn
+
+
+le_parse_terminate_ind:
+	setarg 20 // 200ms
+	store 2,mem_le_superto
+	store 2,mem_le_init_superto
+	rtn
+
+le_send_terminate_ind_user_terminated:
+	arg ERROR_REMOTE_USER_TERMINATED_CONNECTION,regc
+
+//regc:The ErrorCode field shall be set to inform the remote device why the connection is about to be terminated.
+le_send_terminate_ind:
+	arg 2,rega
+	arg LL_TERMINATE_IND,regb
+	call le_fifo_malloc_tx_ll
+	copy regc,pdata
+	istore 1,contw
+	rtn
+
+le_parse_feature_req:
+
+le_send_feature_rsp:
+	arg 9,rega
+	arg LL_FEATURE_RSP,regb
+	call le_fifo_malloc_tx_ll
+	setarg param_le_features
+	istore 8,contw
+	rtn
+
+
+le_parse_version_ind:
+	rtn master
+le_send_version_ind:
+	arg 6,rega
+	arg LL_VERSION_IND,regb
+	call le_fifo_malloc_tx_ll
+	fetch 5,mem_lmp_version
+	istore 5,contw
+	rtn
+
+
+le_parse_ping_req:
+	arg LL_PING_RSP,regb
+	branch le_send_ll_one_lenth
+
+//regb:ll opcode
+le_send_ll_one_lenth:
+	arg 1,rega
+	branch le_fifo_malloc_tx_ll
+
+	
+le_parse_enc_req:
+	ifetch 8,contr
+	store 8,mem_le_rand
+	ifetch 2,contr
+	store 2,mem_le_ediv
+	ifetch 8,contr
+	store 8,mem_le_skdm
+	ifetch 4,contr
+	store 4,mem_le_ivm
+	call le_send_enc_rsp
+	bpatchx patch2f_2,mem_patch2f
+	fetch 1,mem_le_pairing_state
+	beq FLAG_LE_PAIRING_AFTER_AUTH,le_parse_enc_req_after_auth
+	fetch 1,mem_le_configuration
+	bbit1  BIT_BLE_PAIRING_FIXED_LTK,le_parse_enc_req_fixed_ltk
+	fetch 1,mem_nv_data_number
+	ncall load_device_list_mode_4,blank
+	fetch 1,mem_ltk_exists
+	beq 0,le_ltk_lost
+le_parse_enc_req_after_auth:
+	jam FLAG_LE_RCV_ENC_START,mem_le_enc_state
+	call  le_send_start_enc_req
+	branch generate_sk
+
+le_parse_enc_req_fixed_ltk:
+	jam 1,mem_ltk_exists
+	arg mem_le_fixed_ltk,contr
+	arg mem_le_ltk,contw
+	call memcpy16
+	branch le_parse_enc_req_after_auth
+
+
+le_ltk_lost:
+	bpatchx patch2f_3,mem_patch2f
+	jam FLAG_LE_ENC_NULL,mem_le_enc_state
+	jam FLAG_LE_ENC_NULL,mem_le_pairing_state
+	jam BT_EVT_LE_LTK_LOST,mem_fifo_temp
+	branch ui_ipc_send_event
+
+le_send_reject_ind:
+	arg 2,rega
+	arg LL_REJECT_IND,regb
+	call le_fifo_malloc_tx_ll
+	setarg LE_ERR_PIN_OR_KEY_MISSING
+	istore 1,contw
+	rtn		
+	
+le_send_enc_rsp:
+	arg mem_le_skds,contw
+	force 8,loopcnt
+	call generate_random_loop
+	arg mem_le_ivs,contw
+	force 4,loopcnt
+	call generate_random_loop
+	arg 13,rega
+	arg LL_ENC_RSP,regb
+	call le_fifo_malloc_tx_ll
+	fetch 8,mem_le_skds
+	istore 8,contw
+	fetch 4,mem_le_ivs
+	istore 4,contw
+	rtn
+
+le_send_start_enc_req:
+	arg LL_START_ENC_REQ,regb
+	branch le_send_ll_one_lenth
+
+le_send_start_enc_rsp:
+	arg LL_START_ENC_RSP,regb
+	branch le_send_ll_one_lenth
+	
+	
+le_parse_enc_rsp:
+	ifetch 8,contr
+	store 8,mem_le_skds
+	ifetch 4,contr
+	store 4,mem_le_ivs
+	branch generate_sk
+	
+le_parse_start_enc_req:
+	fetch 1,mem_le_state
+	set1 lestate_encryption,pdata
+	store 1,mem_le_state
+	rtn
+	
+le_parse_start_enc_rsp:
+	rtn master
+	jam BT_EVT_LE_START_ENC,mem_fifo_temp
+	call ui_ipc_send_event	
+	jam FLAG_LE_SEND_START_ENC_RSP,mem_le_enc_state
+	branch le_send_start_enc_rsp
+	
+le_parse_pause_enc_req:
+	jam FLAG_LE_ENC_PAUSE,mem_le_enc_state
+	call le_send_pause_enc_rsp	
+	jam BT_EVT_LE_PAUSE_ENC,mem_fifo_temp
+	branch ui_ipc_send_event	
+
+le_send_pause_enc_rsp:
+	arg LL_PAUSE_ENC_RSP,regb
+	branch le_send_ll_one_lenth	
+			
+
+le_parse_feature_rsp:
+le_parse_unknown_rsp:
+le_parse_pause_enc_rsp:
+le_parse_reject_ind:
+le_parse_ping_rsp:
+	rtn
+
+
+	
+/******************************************/
+/*************   LMP Parse   **************/
+/******************************************/
+init_lmp:
+	rtn wake
+init_lmp_work:
+	bpatchx patch2f_4,mem_patch2f
+	setarg 0
+	store 1,mem_lmp_to_send
+	store 1,mem_conn_sm
+	store 1,mem_lmo_opcode1
+	store 1,mem_lmo_opcode2
+	store 1,mem_esco_addr
+	store 1,mem_auth_enable
+	store 1,mem_connection_options
+	store 1,mem_pairing_auth
+	jam SWITCH_FLAG_INIT,mem_switch_flag
+	jam 0,mem_switch_fail_master_count
+	jam NULL_ENCRYP,mem_wait_encryption
+init_lmp_reinit:	
+	jam 0,mem_pairing_auth
+	jam 0,mem_sp_localsm
+	jam 0,mem_lmp_conn_state
+	//fall through
+parse_rx_done:
+	rtn
+
+parse_lmp:
+	bpatchx patch2f_5,mem_patch2f
+	call setlocalsm_master,master	//use this flag in hci
+	ncall setlocalsm_slave,master
+	call lmo_fifo_check
+	nrtn blank
+	fetch 1,mem_state_map
+	rtnbit0 smap_rxlmp
+	set0 smap_rxlmp,pdata
+	set0 mark_rxbuf_inuse,mark
+	store 1,mem_state_map
+	fetch 1,mem_rxbuf
+	fetcht 1,mem_state_map
+	isolate1 smap_lmptidinit,pdata
+	setflag true,smap_lmptid,temp
+	storet 1,mem_state_map
+	and_into 0x2,temp //smap_lmptid only
+	storet 1,mem_lmo_tid2
+	fetcht 1,mem_state_map
+	rshift pdata,pdata			/* align lmp_opcode */
+  	store 1,mem_lmi_opcode2
+	bpatchx patch2f_6,mem_patch2f
+  	fetch 1,mem_lmi_opcode2
+  	beq LMP_ESCAPE,parse_lmp_escape//multi
+  	beq LMP_ACCEPTED,parse_lmp_accepted//multi
+	beq LMP_NOT_ACCEPTED,parse_lmp_not_accepted//multi
+  	beq LMP_SET_AFH, parse_lmp_set_afh
+  	beq LMP_CLKOFFSET_REQ, parse_lmp_clkoffset_req
+ 	beq LMP_ENCRYPTION_MODE_REQ, parse_lmp_encryption_mode_req
+ 	beq LMP_ENCRYPTION_KEY_SIZE_REQ,parse_lmp_crypt_key
+	beq LMP_AUTO_RATE,parse_lmp_auto_rate
+	beq LMP_TEST_CONTROL,parse_lmp_test_control//multi
+	beq LMP_TEST_ACTIVATE,parse_lmp_test_activate
+	beq LMP_SETUP_COMPLETE,parse_lmp_setup_complete
+	beq LMP_SUPERVISION_TIMEOUT,parse_lmp_supervision_timeout
+	beq LMP_FEATURES_REQ,parse_lmp_features_req
+	beq LMP_HOST_CONNECTION_REQ,parse_lmp_conn_req
+	beq LMP_VERSION_REQ,parse_lmp_version_req
+	beq LMP_VERSION_RES,parse_lmp_version_res
+	beq LMP_DETACH,parse_lmp_detach
+	beq LMP_MAX_SLOT,parse_lmp_max_slot
+	beq LMP_MAX_SLOT_REQ,parse_lmp_max_slot_req
+	beq LMP_NAME_REQ,parse_lmp_name_req
+	beq LMP_NAME_RES,parse_lmp_name_res
+	beq LMP_FEATURES_RES,parse_lmp_features_res
+	beq LMP_COMB_KEY,parse_lmp_comb_key
+	beq LMP_AU_RAND, parse_lmp_au_rand
+	beq LMP_IN_RAND,parse_lmp_in_rand
+	beq LMP_SRES,parse_lmp_sres
+	beq LMP_INCR_POWER_REQ,parse_lmp_incr_power
+	beq LMP_DECR_POWER_REQ,parse_lmp_decr_power
+	beq LMP_MAX_POWER, parse_lmp_max_power
+	beq LMP_MIN_POWER, parse_lmp_min_power
+	beq LMP_PAGE_MODE_REQ, parse_lmp_page_mode_req
+	beq LMP_PAGE_SCAN_MODE_REQ, parse_lmp_page_scan_mode_req
+	beq LMP_PREFERRED_RATE, parse_lmp_preferred_rate
+	beq LMP_SLOT_OFFSET, parse_lmp_slot_offset
+	beq LMP_SNIFF_REQ, parse_lmp_sniff_req
+	beq LMP_START_ENCRYPTION_REQ, parse_lmp_start_encryption_req
+	beq LMP_STOP_ENCRYPTION_REQ, parse_lmp_stop_encryption_req
+	beq LMP_SWITCH_REQ, parse_lmp_switch_req
+	beq LMP_TEMP_RAND, parse_lmp_temp_rand
+	beq LMP_TEMP_KEY, parse_lmp_temp_key
+	beq LMP_TIMING_ACCURACY_REQ, parse_lmp_timing_accuracy_req
+	beq LMP_TIMING_ACCURACY_RES, parse_lmp_timing_accuracy_res
+	beq LMP_UNIT_KEY, parse_lmp_unit_key
+	beq LMP_UNSNIFF_REQ, parse_lmp_unsniff_req
+	beq LMP_USE_SEMI_PERMANENT_KEY, parse_lmp_use_semi_permanend_key
+	beq  LMP_ENCAPSULATED_HEADER,parse_lmp_encapsulated_header
+	beq  LMP_ENCAPSULATED_PAYLOAD,parse_lmp_encapsulated_payload
+	beq	LMP_SIMPLE_PAIRING_CONFIRM,parse_simple_pairing_confirm
+	beq  LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_simple_pairing_number
+	beq  LMP_DHKEY_CHECK,parse_dhkey_check
+	beq LMP_CLKOFFSET_RES, parse_lmp_clkoffset_res
+	beq LMP_ENC_KEY_SIZE_MASK_REQ,parse_enc_key_size_mask_req
+/* lmp is not recognized, check to see if we respond to all messages */ 
+/* rejecting the unrecognized message with PDU not recognized */
+reject_unknown_packet:
+	jam UNKNOWN_LMP_PDU,mem_lmo_reason2
+reject_lmp_packet:
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	rtn
+
+parse_lmp_clkoffset_req:
+	jam LMP_CLKOFFSET_RES,mem_lmo_opcode2
+	rtn	
+
+parse_enc_key_size_mask_req:
+	jam LMP_ENC_KEY_SIZE_MASK_RES,mem_lmo_opcode2
+	rtn
+	
+parse_lmp_set_afh:
+	fetch 4,mem_rxbuf+1
+	lshift pdata,pdata
+	store 4,mem_afh_instant
+	fetch 1,mem_rxbuf+5
+	store 1,mem_afh_new_mod
+	fetch 5,mem_rxbuf+6
+	store 5,mem_afh_map_new
+	fetch 5,mem_rxbuf+11
+	istore 5,contw
+	fetch 1,mem_mode
+	set1 afh_change,pdata
+	store 1,mem_mode
+	rtn
+parse_lmp_escape:
+	bpatchx patch2f_7,mem_patch2f
+	fetch 1,mem_rxbuf+1
+	set1 7,pdata
+	store 1,mem_lmi_opcode2
+	beq LMP_EXT_ACCEPTED,parse_lmpext_accepted
+	beq LMP_NOT_ACCEPTED_EXT,parse_lmpext_not_accepted
+	beq LMP_SNIFF_SUBRATING_REQ, parse_lmp_sniff_subrating_req
+	beq LMP_SNIFF_SUBRATING_RES, parse_lmp_sniff_subrating_res
+	beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_packet_type_table_req
+	beq LMP_EXT_FEATURES_REQ,parse_lmpext_features_req
+	beq LMP_EXT_FEATURES_RES,parse_lmpext_features_res
+	beq LMP_EXT_CHN_CLASSIFICATION_REQ,parse_lmpext_chn_classification_req
+	beq LMP_PAUSE_ENCRYPTION_REQ,parse_lmpext_pause_encrypt
+	beq LMP_RESUME_ENCRYPTION_REQ,parse_lmpext_resume_encrypt
+	beq LMP_IO_CAP_REQ,parse_lmpext_iocap_req
+	beq LMP_IO_CAP_RES,parse_lmpext_iocap_res
+	rtneq LMP_EXT_FEATURES_RES
+
+
+reject_unknown_ext_packet:
+	jam LMP_NOT_ACCEPTED_EXT,mem_lmo_opcode2
+	jam UNKNOWN_LMP_PDU,mem_lmo_reason2
+	
+	rtn
+parse_lmpext_chn_classification_req:
+	jam LMP_NOT_ACCEPTED_EXT,mem_lmo_opcode2
+	jam NOT_SUPPORT_CHN_CLASSIFICATION,mem_lmo_reason2
+	rtn
+	
+parse_lmpext_iocap_req:
+	call iocap_lmpext_load
+	jam LMP_IO_CAP_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmpext_iocap_res:
+	call iocap_lmpext_load
+	branch iocap_lmpext_common
+	
+iocap_lmpext_load:
+	arg      mem_sp_iocap_remote,contw
+	fetch 3, mem_rxbuf+2
+	istore    3,contw
+	rtn
+	
+iocap_lmpext_common:
+	branch master_set_mem_master_sp_flag,true//is un very ok to use master flag,but we have to add many codes if wo don't
+	rtn
+parse_lmpext_accepted:
+	fetch 1,mem_rxbuf+3
+	set1 7,pdata
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_accepted_ptt
+	rtn
+
+	
+parse_lmpext_not_accepted:
+	fetch 1,mem_rxbuf+3
+	set1 7,pdata
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_not_accepted_ptt
+	rtn
+
+parse_lmpext_accepted_ptt:
+	fetch 1,mem_ptt
+	fetcht 1,mem_state_map
+	nsetflag blank,smap_edr,temp
+	storet 1,mem_state_map
+parse_lmpext_not_accepted_ptt:
+	fetch 1,mem_state
+	rtnbit0 state_init_seq
+	set0 state_init_seq,pdata
+	store 1,mem_state
+	fetch 1,mem_auth_enable
+	nrtn blank
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	rtn
+
+parse_lmpext_pause_encrypt:
+	nbranch parse_lmpext_pause_encrypt_slave, master
+	jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2
+	branch tid_reply
+
+parse_lmpext_pause_encrypt_slave:	
+	jam LMP_PAUSE_ENCRYPTION_REQ, mem_lmo_opcode2
+	rtn
+
+parse_lmpext_resume_encrypt:
+//trans file to pc may cause pause/resume encrypt
+//if ms is conn_sm_wait_end the controllor won't send ack after recieved start_encypt_accept
+	call tid_reply
+	branch lmp_start_encryption
+
+parse_lmpext_features_req:
+	jam LMP_EXT_FEATURES_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmpext_features_res:
+	fetcht 1,mem_rxbuf+4
+	and temp,0x1,temp
+	storet 1,mem_remote_sppcap
+	fetch 1,mem_hci_cmd
+	bne hci_cmd_wait_remote_ext_feature,parse_lmpext_features_res_not_hci
+	jam 0,mem_hci_cmd
+parse_lmpext_features_res_not_hci:
+	fetch 1,mem_conn_sm
+	rtnne CONN_SM_WAIT_FEATURES_EXT
+	jam CONN_SM_SEND_CONN_REQ,mem_conn_sm
+	branch process_conn_sm
+
+parse_lmp_accepted:
+	bpatchx patch30_0,mem_patch30
+	fetch 1,mem_rxbuf+1
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_HOST_CONNECTION_REQ,parse_lmp_accepted_hostconn//ok
+	beq LMP_IN_RAND,parse_lmp_accepted_inrand//ok
+	beq LMP_ENCRYPTION_MODE_REQ,parse_lmp_accepted_enc_mode//ok
+	beq LMP_ENCRYPTION_KEY_SIZE_REQ,parse_lmp_accepted_enc_keysize//ok
+	beq LMP_START_ENCRYPTION_REQ,parse_lmp_accepted_start_enc//ok
+	beq LMP_STOP_ENCRYPTION_REQ,parse_lmp_accepted_stop_enc//ok
+	beq LMP_UNSNIFF_REQ,parse_lmp_accepted_unsniff_req//ok
+	beq LMP_SNIFF_REQ,parse_lmp_accepted_sniff_req//ok
+	beq LMP_SWITCH_REQ,parse_lmp_accepted_switch
+	// simple pairing 
+	beq LMP_ENCAPSULATED_HEADER,parse_lmp_accepted_encapsulated_header//ok
+	beq LMP_ENCAPSULATED_PAYLOAD,parse_lmp_accepted_encapsulated_payload//ok
+	beq LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_accepted_simple_pairing_number//ok
+	beq LMP_DHKEY_CHECK,parse_lmp_accepted_dhkey_check//ok
+	rtn
+	
+parse_lmp_not_accepted:
+	bpatchx patch30_1,mem_patch30
+	fetch 1,mem_rxbuf+1
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_NAME_REQ,parse_lmp_not_accepted_name_req//ok
+	beq LMP_HOST_CONNECTION_REQ,parse_lmp_not_accepted_hostconn//ok
+	beq LMP_AU_RAND,parse_lmp_not_accepted_aurand//ok
+	beq LMP_IN_RAND,parse_lmp_not_accepted_inrand//ok
+	beq LMP_SWITCH_REQ,parse_lmp_not_accepted_switch//ok
+	/* simple pairing support */
+	beq  LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_not_accepted_simple_pairing_number//ok
+	beq  LMP_DHKEY_CHECK,parse_lmp_not_accepted_dhkey_check//ok
+	beq LMP_UNSNIFF_REQ,parse_lmp_not_accepted_unsniff_req
+	beq LMP_SNIFF_REQ,parse_lmp_not_acdcept_sniff_req
+	rtn
+
+parse_lmp_accepted_switch:
+	jam BT_EVT_SWITCH_ACCEPT,mem_fifo_temp
+	call ui_ipc_send_event
+	branch role_switch_prepare0
+parse_lmp_not_accepted_switch:
+	jam BT_EVT_SWITCH_NOT_ACCEPT,mem_fifo_temp
+	call ui_ipc_send_event
+	jam SWITCH_FLAG_NOT_ACCEPT,mem_switch_flag
+	setarg TIMER_SWITCH_WAITE
+	arg switch_wait_timer,queue
+	branch timer_init
+
+
+parse_lmp_accepted_hostconn:
+	//fetch 1,mem_state
+	//rtnbit0 state_init_seq
+	fetch 1,mem_lmp_conn_state
+	set1 RECEIVED_CONN_REQ,pdata
+	store 1,mem_lmp_conn_state
+	jam BT_EVT_BB_CONNECTED,mem_fifo_temp
+	call ui_ipc_send_event
+	jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmo_opcode2
+	//nbranch parse_lmp_accepted_hostconn_ctn,master
+parse_lmp_accepted_hostconn_ctn:
+	/* checking to see if we requested host connection */
+	fetch 1,mem_conn_sm
+	bne CONN_SM_WAIT_CONN_ACCEPT, parse_rx_done
+	//branch parse_lmp_accepted_hostconn_master,master
+	/* continuing on with host connection state machine */
+	jam CONN_SM_AUTH_PAIR,mem_conn_sm
+	rtn
+	//branch host_create_conn_auth_pair
+
+	/* we need to move fast and send au_rand...jumping to next part of state machine for conn */
+//parse_lmp_accepted_hostconn_master:
+	//jam CONN_SM_AUTH_PAIR ,mem_conn_sm
+//	rtn
+
+parse_lmp_not_accepted_hostconn:
+	jam ACL_CONNECTION_ALREADY_EXISTS,mem_disconn_reason_send
+	jam LMP_DETACH,mem_lmo_opcode2
+	/* clearing connection state machine */
+	jam CONN_SM_STANDBY,mem_conn_sm
+	/* sending error message to host */
+	branch parse_rx_done,true
+	rtn
+
+parse_lmp_accepted_inrand:
+	fetch 1,mem_link_key_exists
+	nrtn blank
+	call clear_linkkey
+	call  lmp_generate_key
+	rtn master
+	set1 mark_slave_in_rand_accepted,mark
+	rtn
+
+parse_lmp_accepted_enc_mode:
+	nrtn master
+	jam LMP_ENCRYPTION_KEY_SIZE_REQ,mem_lmo_opcode2
+	fetch 1,mem_state_map
+	rtnbit0 smap_encryption
+	jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2
+	rtn
+
+parse_lmp_accepted_enc_keysize:
+	branch lmp_start_encryption
+	
+parse_lmp_accepted_start_enc:
+	call send_create_conn_start_l2cap_timer_sm
+	fetch 1,mem_state
+	rtnbit1 state_conn_comp
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	fetch 1,mem_conn_sm
+	rtnne CONN_SM_ENCRYPT_WAIT
+	jam CONN_SM_ENCRYPT_WAIT_CLEAR,mem_conn_sm
+	rtn
+	
+parse_lmp_accepted_stop_enc:
+	/* again this won't work with multipoint. keep track of anyone else encrypting */
+	//jam HOST_STOP_ENCRYPTION,message_queue_B0
+	//jam 1,message_queue_B1
+	//jam HOST_RETURN_SUCCESS,message_queue_B2
+	//fetch 1,mem_lmp_state2
+	//set1 MESSAGE_QUEUE,pdata
+	//store 1,mem_lmp_state2
+	rtn
+
+parse_lmp_not_accepted_aurand:	
+parse_lmp_not_accepted_aurand_send_detach:	
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam OTHER_END_TERMINATED,mem_disconn_reason_send
+	rtn
+/*in pair remote cancel the pair*/
+parse_lmp_not_accepted_inrand:
+	fetch 1,mem_rxbuf+2
+	beq KEY_MISSING,parse_lmp_inrand_key_missing
+	rtnne PAIRING_NOT_ALLOWED
+	jam PAIRING_NOT_ALLOWED,mem_disconn_reason_send
+	jam LMP_DETACH,mem_lmo_opcode2
+	rtn	
+parse_lmp_inrand_key_missing:
+	jam KEY_MISSING,mem_disconn_reason_send
+	jam LMP_DETACH,mem_lmo_opcode2
+	rtn
+	
+parse_lmp_not_accepted_name_req:
+	rtn
+	
+parse_lmp_not_accepted_simple_pairing_number:
+	jam      SP_STAT_NULL,mem_sp_state
+	jam LMP_DETACH,mem_lmo_opcode2
+	branch   parse_rx_done
+	
+parse_lmp_not_accepted_dhkey_check:
+	jam      SP_STAT_NULL,mem_sp_state
+	jam LMP_DETACH,mem_lmo_opcode2
+	branch   parse_rx_done
+parse_lmp_not_accepted_unsniff_req:
+	jam BT_EVT_UNSNIFF_NOT_ACCEPT,mem_fifo_temp
+	branch ui_ipc_send_event
+	
+parse_lmp_accepted_unsniff_req:
+	jam BT_EVT_UNSNIFF_ACCEPT,mem_fifo_temp
+	call ui_ipc_send_event
+	branch sniff_exit
+	
+parse_lmp_accepted_sniff_req:
+	jam BT_EVT_SNIFF_ACCEPT,mem_fifo_temp
+	call ui_ipc_send_event
+	setarg 0
+	store 2,mem_dsniff
+	fetch 2,mem_sniff_param_interval
+	lshift pdata,pdata
+	store 2,mem_tsniff
+	fetch 1,mem_sniff_param_attempt
+	store 1,mem_sniff_attempt
+	fetch 1,mem_sniff_param_timeout
+	store 1,mem_sniff_timeout
+	branch sniff_init
+	
+parse_lmp_not_acdcept_sniff_req:
+	jam BT_EVT_SNIFF_NOT_ACCEPT,mem_fifo_temp
+	branch ui_ipc_send_event
+	
+parse_lmp_crypt_key:
+	fetcht 1,mem_rxbuf+1
+	storet 1,mem_key_size
+	branch accept_lmp_msg
+	
+parse_lmp_setup_complete:
+	fetch 1,mem_lmp_conn_state
+	set1 RECEIVED_SETUP_COMPLETE,pdata
+	store 1,mem_lmp_conn_state
+	rtnbit1 SENT_SETUP_COMPLETE
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	branch parse_rx_done
+	
+parse_lmp_max_slot:
+	//jam LMP_MAX_SLOT,mem_lmi_opcode2
+	//branch accept_lmp_msg
+	rtn
+	
+parse_lmp_max_slot_req:
+	fetch 1,mem_max_slot
+	fetcht 1,mem_rxbuf+1
+	isub temp,null
+	//jam LMP_MAX_SLOT_REQ,mem_lmi_opcode2
+	branch accept_lmp_msg,positive
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	jam UNSPECIFIED_ERROR,mem_lmo_reason2
+	jam LMP_MAX_SLOT_REQ,mem_lmi_opcode2
+	rtn
+	
+parse_lmp_detach:
+	call prepare_disconnect
+	branch accept_lmp_msg
+	
+accept_lmp_msg:
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	rtn
+
+parse_lmp_incr_power:
+	jam LMP_MAX_POWER,mem_lmo_opcode2
+	rtn
+
+parse_lmp_decr_power:
+	jam LMP_MIN_POWER,mem_lmo_opcode2
+	rtn
+	
+parse_lmp_version_res:
+	fetch 1,mem_conn_sm
+	rtneq CONN_SM_WAIT_VERSION
+	/* continuing on with host connection state machine */
+	jam CONN_SM_SEND_FEATURES ,mem_conn_sm
+	/* we need to move fast and send au_rand...jumping to next part of state machine for conn */
+	rtn
+
+
+parse_lmp_auto_rate:
+	rtn	
+
+parse_lmp_in_rand:
+	call lmp_copy_rand
+	jam pincode_state_wait_pincode,mem_pincode_state
+	jam BT_EVT_PINCODE_REQ,mem_fifo_temp
+	call ui_ipc_send_event
+
+	call tid_check
+	nbranch lmp_accept_inrand,true
+	//fetch 1,mem_auth_enable
+	nbranch parse_lmp_inrand_res,master // ignore this because of not ssp temporary
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	jam LMP_IN_RAND,mem_lmi_opcode2
+	jam TRANSACTION_COLLISION,mem_lmo_reason2
+	rtn
+parse_lmp_inrand_res:
+	fetch 1,mem_op
+	set1 op_inrand_req,pdata
+	store 1,mem_op
+	rtn
+
+//store current tid
+pop_tid_follow:
+	fetcht 1,mem_state_map
+	nsetflag blank,smap_lmptid,temp
+	storet 1,mem_state_map
+	rtn
+	
+//restore current tid
+push_tid_follow:
+	fetch 1,mem_lmo_tid2
+	rshift pdata,pdata
+	and_into 1,pdata
+	rtn
+
+parse_lmp_au_rand_moudle:
+	fetch 1,mem_nv_data_number
+	rtn blank
+	fetch 1,mem_pairing_auth
+	call load_device_list,blank
+	rtn	
+
+parse_lmp_au_rand:
+	call parse_lmp_au_rand_moudle
+	call push_tid_follow
+	store 1,mem_sres_tid
+	call lmp_copy_rand
+	jam LMP_SRES,mem_lmo_opcode2
+	fetch 1,mem_link_key_exists
+	nrtn blank
+	fetch 1,mem_state
+	rtnbit1 state_combkey		/* we have comb key, but not verified */
+	jam KEY_MISSING,mem_lmo_reason2
+	branch reject_lmp_packet
+
+parse_lmp_sres:	
+	arg mem_plap,rega
+	call function_e1
+	fetch 4,mem_rxbuf+1
+	fetcht 4,mem_input_store
+	isub temp,null
+	branch authentication_ok,zero
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam AUTHENTICATION_FAILURE_ERROR,mem_disconn_reason_send	
+	rtn
+authentication_ok:
+	call authentication_ok_common
+	fetch 1,mem_ssp_enable
+	branch  pairing_success,blank
+	rtn
+
+	
+authentication_ok_common:
+	call copy_aco
+	call linkkey_ready///save link key
+	fetch 1,mem_op
+	isolate1 op_auth_req,pdata
+	set0 op_auth_req,pdata
+	store 1,mem_op
+	fetch 1,mem_conn_sm
+	beq CONN_SM_AUTH_WAIT,authentication_ok_conn_sm
+	beq CONN_SM_PAIRING_WAIT,authentication_ok_conn_sm
+	rtn
+authentication_ok_conn_sm:
+	fetch 1,mem_pairing_auth
+	rtnne DEFALT_PAIRING_AUTH
+	fetch 1,mem_state_map
+	rtnbit1 smap_encryption
+	branch host_create_conn_encrypt
+
+parse_lmp_comb_key:
+	arg mem_rxbuf+1,rega
+	arg mem_kinit,regb
+	arg mem_random_number,contw
+	call xor16
+	arg mem_plap,rega
+	call generate_linkkey
+	jam LMP_AU_RAND,mem_lmo_opcode2
+	fetch 1,mem_state
+	bbit0 state_combkey,lmp_generate_key
+	rtn
+	
+parse_lmp_name_res:
+	fetch 2,mem_len
+	add pdata,-3,loopcnt	//for remote name length error
+	fetcht 1,mem_rxbuf+1
+	setarg mem_tmp_buffer
+	iadd temp,contw
+	arg mem_rxbuf+3,contr
+	call memcpy
+	fetcht 1,mem_name_offset
+	fetch 1,mem_rxbuf+2
+	isub temp,pdata
+	sub pdata,14,null
+	branch parse_lmp_name_res_end,positive
+	add temp,14,pdata
+	store 1,mem_name_offset
+	jam LMP_NAME_REQ,mem_lmo_opcode2
+	rtn
+parse_lmp_name_res_end:
+	fetch 1,mem_state_map
+	set1 smap_name_res,pdata
+	store 1,mem_state_map
+	bbit1 smap_name_req,lmp_disconnect
+	rtn
+parse_lmp_name_req:
+	fetch 1,mem_rxbuf+1
+	store 1,mem_lmi_opcode2 //offset 
+	jam LMP_NAME_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmp_conn_req:
+	branch accept_lmp_msg
+
+parse_lmp_timing_accuracy_req:
+	jam LMP_TIMING_ACCURACY_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmp_features_req:
+	jam LMP_FEATURES_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmp_version_req:
+	jam LMP_VERSION_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmp_supervision_timeout:
+//	fetch 2,mem_rxbuf+1
+//	store 2,mem_supervision_to
+	rtn
+	
+
+
+parse_lmp_sniff_subrating_req:
+	fetch 2,mem_tsniff
+	iforce temp
+	fetch 1,mem_rxbuf+2
+	store 1,mem_subsniff_rate
+	imul32 temp,temp
+	fetch 2,mem_rxbuf+3
+	lshift pdata,pdata
+	store 2,mem_subsniff_tcmax
+	fetch 4,mem_rxbuf+5
+	lshift pdata,pdata
+ 	store 4,mem_subsniff_instant
+	//product pdata
+	deposit temp
+	store 2,mem_subsniff_tsniff
+	rtn
+parse_lmpext_packet_type_table_req:
+	fetcht 1,mem_ptt
+	fetch 1,mem_rxbuf+2
+	ixor temp,null
+	nbranch reject_unknown_ext_packet,zero
+	isolate1 0,pdata
+	fetch 1,mem_state_map
+	setflag true,smap_edr,pdata
+	store 1,mem_state_map
+	jam LMP_EXT_ACCEPTED,mem_lmo_opcode2
+	jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmi_opcode2
+	rtn
+
+	
+parse_lmp_sniff_subrating_res:
+parse_lmp_preferred_rate:
+parse_lmp_max_power:
+parse_lmp_min_power:
+	rtn
+parse_lmp_page_mode_req:
+	//jam LMP_PAGE_MODE_REQ,mem_lmi_opcode2
+	branch accept_lmp_msg
+parse_lmp_page_scan_mode_req:
+	//this can influence connection. need accepted
+	//jam LMP_PAGE_SCAN_MODE_REQ,mem_lmi_opcode2
+	branch accept_lmp_msg
+
+
+	
+parse_lmp_slot_offset:
+	fetch 2,mem_rxbuf+1
+	store 2,mem_slot_offset
+	rtn
+
+parse_lmp_sniff_req_check_sniff_para:
+	fetch 2,mem_rxbuf+4 /* tsniff */
+	fetcht 1,mem_lpm_mult
+	imul32 temp,pdata
+	arg 0x640,temp
+	isub temp,null
+//	branch lmp_reject_sniff,positive
+	rtn
+	
+parse_lmp_sniff_req:
+	fetch 2,mem_rxbuf+6
+	branch lmp_reject_sniff,blank
+	call parse_lmp_sniff_req_check_sniff_para
+	branch lmp_reject_sniff,positive
+	fetch 1,mem_device_option
+	sub pdata,dvc_op_module,null
+	call module_set_lpm_mult_2,zero
+	fetch 1,mem_state
+	bbit1 state_insniff,lmp_reject_sniff
+	fetch 2,mem_rxbuf+2 /* dsniff */
+	lshift pdata,pdata
+	store 2,mem_dsniff	
+	fetch 2,mem_rxbuf+4 /* tsniff */
+	lshift pdata,pdata
+	store 2,mem_tsniff
+	fetch 2,mem_rxbuf+6 /* sniff attempt */
+	store 1,mem_sniff_attempt
+	iforce temp
+	fetch 2,mem_rxbuf+8 /* sniff timeout */
+	store 1,mem_sniff_timeout
+	isub temp,null
+	nbranch set_big_value_to_attempt,positive
+	store 1,mem_sniff_attempt
+set_big_value_to_attempt:	
+	//call sniff_init
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_SNIFF_REQ,mem_lmi_opcode2
+	rtn
+
+lmp_reject_sniff:
+	jam PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch reject_lmp_packet
+
+parse_lmp_start_encryption_req:
+	call accept_lmp_msg
+	call lmp_copy_rand
+	call function_e3
+	branch start_encryption
+	
+parse_lmp_stop_encryption_req:
+	call accept_lmp_msg
+	branch stop_encryption
+	
+
+parse_lmp_switch_req:
+	fetch 4,mem_rxbuf+1
+	lshift pdata,pdata
+	//branch parse_lmp_switch_req_not_accept
+	branch parse_lmp_switch_accept,master
+	fetcht 1,mem_link_key_exists
+	nbranch parse_lmp_switch_req_clear_mark,blank
+parse_lmp_switch_req_not_accept:
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	jam LMP_SWITCH_REQ,mem_lmi_opcode2
+	jam PDU_NOT_ALLOWED,mem_lmo_reason2
+	rtn
+parse_lmp_switch_req_clear_mark:
+	jam LMP_SLOT_OFFSET,mem_lmo_opcode2
+	jam 0,mem_conn_sm
+	branch role_switch_prepare
+
+parse_lmp_switch_accept:
+	call role_switch_prepare
+	set1 mark_reconn_recieve_switch,mark
+	fetch 1,mem_connection_options
+	set0 CONNECTION_SWITCH,pdata
+	store 1,mem_connection_options
+	branch accept_lmp_msg
+
+	
+
+parse_lmp_temp_rand:
+parse_lmp_temp_key:
+parse_lmp_timing_accuracy_res:	
+parse_lmp_unit_key:	
+parse_lmp_use_semi_permanend_key:
+	rtn
+
+	
+parse_lmp_unsniff_req:
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_UNSNIFF_REQ,mem_lmi_opcode2
+	jam BT_EVT_REMOTE_UNSNIFF,mem_fifo_temp
+	call ui_ipc_send_event
+	branch sniff_exit
+	
+parse_lmp_encapsulated_header:
+	fetch 1,mem_rxbuf+1
+	bne ENCAPSULATED_MAJOR_TYPE_P192,parse_lmp_encapsulated_header_reject
+	fetch 1,mem_rxbuf+2
+	bne ENCAPSULATED_MINOR_TYPE_P192,parse_lmp_encapsulated_header_reject
+	fetch 1,mem_rxbuf+3
+	bne ENCAPSULATED_LEN_P192,parse_lmp_encapsulated_header_reject
+	call check_localsm
+	branch parse_lmp_encapsulated_header_master,true
+	jam SP_STAT_KEY_RECV,mem_sp_state
+parse_lmp_encapsulated_header_master:
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_ENCAPSULATED_HEADER,mem_lmi_opcode2
+	branch parse_rx_done
+	
+parse_lmp_encapsulated_header_reject:
+	jam      PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch   reject_lmp_packet
+	
+parse_lmp_accepted_encapsulated_header:
+	//jam LMP_ENCAPSULATED_PAYLOAD,mem_lmi_opcode2
+	//branch   accept_lmp_msg  	
+	jam LMP_ENCAPSULATED_PAYLOAD,mem_lmo_opcode2
+      //   branch   accept_lmp_msg  	
+         rtn
+parse_lmp_accepted_simple_pairing_number:
+	fetch 1,mem_ssp_mode_flag
+	beq SSP_MODE_SSP_PIN_FLAG,parse_lmp_accepted_simple_pairing_number_ssp_pin
+	beq SSP_MODE_PASSKEY_ENTRY_FLAG,parse_lmp_accepted_simple_pairing_number_passkey
+parse_lmp_accepted_simple_pairing_number_common:
+	call check_localsm
+	rtn true
+	jam SP_STAT_CONFIRM_RECV,mem_sp_state
+	rtn
+
+parse_lmp_accepted_simple_pairing_number_ssp_pin:
+	call g_noninit_number_confirm
+	jam BT_EVT_BT_GKEY_GENERATE,mem_fifo_temp
+	call ui_ipc_send_event
+	branch parse_lmp_accepted_simple_pairing_number_common
+
+
+parse_lmp_accepted_simple_pairing_number_passkey:
+	call check_localsm
+	rtn true
+	fetch 1,mem_authentication_passkey_times
+	beq 19,authentication_passkey_end
+	increase 1,pdata
+	store 1,mem_authentication_passkey_times
+//	branch p_authentication_passkey
+
+authentication_passkey:
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	jam      SP_STAT_COMMIT_CALC,mem_sp_state 
+	fetch 1,mem_authentication_passkey_times
+	copy pdata,queue
+	fetch 6,mem_pin
+	qisolate1 pdata
+	setarg 0x80
+	setflag true,0,pdata
+	store 1,mem_passkey_1bit
+	rtn
+
+authentication_passkey_end:	
+	jam SP_STAT_CONFIRM_RECV,mem_sp_state
+	rtn
+
+parse_lmp_accepted_dhkey_check:
+	call parse_lmp_accepted_dhkey_check_common
+pairing_success:
+	fetch 1,mem_flag_pairing_state
+	rtn blank
+	jam FLAG_PAIRING_STATE_NOT_PAIRING,mem_flag_pairing_state
+	jam BT_EVT_BT_PAIRING_SUCCESS,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+parse_lmp_accepted_dhkey_check_common:
+	//here must be change***  shyd
+	call check_localsm
+	ncall g_noninit,true	//when be master  call g_init
+	call g_init,true
+	call check_localsm
+	rtn true
+	jam SP_STAT_LINK_KEY_CALC,mem_sp_state
+	jam SP_FLAG_COMMIT,mem_sp_flag
+	rtn
+
+parse_simple_pairing_confirm:
+	arg mem_sp_confirm_remote,contw
+	arg mem_rxbuf+1,contr
+	call memcpy16
+	fetch 1,mem_ssp_mode_flag
+	rtneq  SSP_MODE_PASSKEY_ENTRY_FLAG
+	branch master_set_mem_master_sp_flag
+	
+parse_lmp_encapsulated_payload:
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_RANDOM_SEND,parse_encapsulated_payload_master
+	fetch    1,mem_sp_state
+	bne SP_STAT_KEY_RECV,parse_lmp_encapsulated_payload_reject
+parse_encapsulated_payload_master:
+	fetch    1,mem_sp_remote_key_recv_count
+	sub      pdata,0x20,contw
+	nbranch  parse_lmp_encapsulated_payload_reject,positive
+	arg      mem_sp_pubkey_remote,contw
+	iadd     contw,contw
+	fetch 8,mem_rxbuf+1
+	istore   8,contw
+	fetch 8,mem_rxbuf+9
+	istore   8,contw
+	fetch    1,mem_sp_remote_key_recv_count
+	increase 16,pdata
+	store    1,mem_sp_remote_key_recv_count
+	bne ENCAPSULATED_LEN_P192,accept_lmp_msg
+parse_lmp_encapsulated_payload_completed:
+	call check_localsm
+	branch accept_lmp_msg,true
+	jam      SP_KEY_VALID,mem_sp_remote_key_invalid
+	jam      SP_STAT_KEY_GENERATE,mem_sp_state
+	jam      SP_FLAG_COMMIT,mem_sp_flag  
+	branch   accept_lmp_msg
+parse_lmp_encapsulated_payload_reject:
+	jam      PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch   reject_lmp_packet	
+parse_lmp_accepted_encapsulated_payload: 
+	fetch 1,mem_sp_local_key_send_count
+	beq	ENCAPSULATED_LEN_P192,parse_lmp_encapsulated_payload_all_accepted
+	jam LMP_ENCAPSULATED_PAYLOAD,mem_lmo_opcode2
+	branch   parse_rx_done 
+	
+parse_lmp_encapsulated_payload_all_accepted:   
+	call check_localsm
+	branch parse_lmp_encapsulated_payload_all_accepted_master,true
+	fetch 1,mem_ssp_mode_flag
+	beq SSP_MODE_PASSKEY_ENTRY_FLAG,parse_lmp_encapsulated_payload_all_accepted_get_passkey
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	jam      SP_STAT_COMMIT_CALC,mem_sp_state 
+	branch   parse_rx_done
+
+parse_lmp_encapsulated_payload_all_accepted_get_passkey:
+	jam BT_EVT_BT_GET_PASSKEY,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+parse_lmp_encapsulated_payload_all_accepted_master:
+	//call sp_master_generate_local_key
+	branch   parse_rx_done   
+
+parse_lmp_simple_pairing_number:
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_RANDOM_SEND,parse_lmp_simple_pairing_number_master
+	fetch    1,mem_sp_state
+	bne SP_STAT_RANDOM_RECV,parse_lmp_simple_pairing_number_reject
+parse_lmp_simple_pairing_number_master:
+	arg      mem_sp_random_remote,contw
+	fetch 8,mem_rxbuf+1
+	istore   8,contw
+	fetch 8,mem_rxbuf+9
+	istore   8,contw
+	call check_localsm
+	branch parse_lmp_simple_pairing_number_master0,true
+	jam      SP_STAT_RANDOM_SEND,mem_sp_state
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	branch accept_lmp_msg  
+parse_lmp_simple_pairing_number_master0:
+	jam SP_STAT_COMMIT_CALC,mem_master_sp_state
+	branch master_set_mem_master_sp_flag
+	//jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2
+	//branch accept_lmp_msg  
+parse_lmp_simple_pairing_number_reject:
+	jam      PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch reject_lmp_packet
+	
+parse_dhkey_check:
+	fetch    1,mem_master_sp_state
+	beq SP_STAT_CONFIRM_SEND,parse_dhkey_check_master
+	fetch    1,mem_sp_state
+	bne SP_STAT_CONFIRM_RECV,parse_lmp_dhkey_check_reject
+parse_dhkey_check_master:
+	arg      mem_sp_check_result,contw
+	arg mem_rxbuf+1,contr
+	call memcpy16
+	call check_localsm
+	branch parse_dhkey_check_master0,true
+	fetch 1,mem_ssp_mode_flag
+	beq SSP_MODE_SSP_PIN_FLAG,number_comparison_mode
+number_comparison_successed:
+	jam 0,mem_flag_mode_ssp_pin
+	jam SP_STAT_CONFIRM_CHECK,mem_sp_state
+	jam SP_FLAG_COMMIT,mem_sp_flag
+	jam LMP_DHKey_Check,mem_lmi_opcode2
+	branch   parse_rx_done
+	
+parse_dhkey_check_master0:
+	jam      SP_STAT_CONFIRM_CHECK,mem_master_sp_state
+	jam      SP_FLAG_COMMIT,mem_master_sp_flag
+	branch   parse_rx_done
+parse_lmp_dhkey_check_reject:
+	jam      PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch reject_lmp_packet
+
+number_comparison_mode:
+	fetch 1,mem_flag_mode_ssp_pin
+	bbit1 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT ,comparison_result
+	set1 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT,pdata
+	store 1,mem_flag_mode_ssp_pin
+	rtn
+	
+comparison_result:
+	bbit1 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,number_comparison_successed
+	jam 0,mem_flag_mode_ssp_pin
+	branch parse_lmp_dhkey_check_reject
+
+	
+parse_lmp_clkoffset_res:
+	branch parse_rx_done
+		
+parse_lmp_encryption_mode_req:
+	fetch 1,mem_connection_options
+	set0 CONNECTION_ENCRYPT
+	store 1,mem_connection_options
+	call accept_lmp_msg
+	nrtn master					/* do sth only if we're master */
+	fetch 1,mem_rxbuf+1
+	fetcht 1,mem_op
+	setflag blank,op_stop_enc,temp
+	nsetflag blank,op_start_enc,temp
+	storet 1,mem_op
+	rtn 
+	
+parse_lmp_features_res:
+	fetcht 8,mem_rxbuf+1		/*fix bcp(baoshijie) err*/
+parse_lmp_features_res_not_hci:	
+	fetch 1,mem_conn_sm
+	rtnne CONN_SM_WAIT_FEATURES_RES
+
+	fetch 1,mem_connection_options
+	bbit0 CONNECTION_FEATURE_EXT,parse_lmp_send_conn
+
+	jam CONN_SM_SEND_FEATURES_EXT,mem_conn_sm
+	rtn
+parse_lmp_send_conn:
+	jam CONN_SM_SEND_CONN_REQ,mem_conn_sm
+	rtn
+parse_lmp_test_activate:
+	fetch 1,mem_debug_config
+	store 1,mem_test_mode_old_debug_config
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_TEST_ACTIVATE,mem_lmi_opcode2
+	rtn
+parse_lmp_test_control:
+	/* the 9 test control parameters are XORed with 0x55 */
+	/* doing the XOR here and storing in mem_temp_payload */
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_TEST_CONTROL,mem_lmi_opcode2
+	force 9,loopcnt
+	arg mem_rxbuf+1,contr
+	arg mem_temp_payload,contw
+parse_lmp_test_xor:
+	ifetch 1,contr
+	xor_into 0x55,pdata
+	istore 1,contw
+	loop parse_lmp_test_xor
+	fetch 1,test_mode_scenario
+	fetcht 1,mem_tester_emulate
+	set0 tester_no_whitening,temp
+	set0 tester_pattern_test,temp
+	beq EXIT_TEST_MODE,	 parse_lmp_test_control_exit
+	beq PAUSE_TEST_MODE,	 parse_lmp_test_control_pause
+	beq CLOSED_LOOP_BACK_ACL,	 parse_lmp_test_control_loopback
+	beq ACL_WITHOUT_WHITENING,	 parse_lmp_test_control_loopback_nowhite
+	beq CLOSED_LOOP_BACK_SCO,	 parse_lmp_test_control_loopback
+	beq SCO_WITHOUT_WHITENING,	 parse_lmp_test_control_loopback_nowhite
+	beq ZERO_PATTERN,	 parse_lmp_test_control_pattern
+	beq ONE_PATTERN,	 parse_lmp_test_control_pattern
+	beq ALT_PATTERN,	 parse_lmp_test_control_pattern
+	beq ALT2_PATTERN,	 parse_lmp_test_control_pattern
+	beq PSEUDORANDOM,	 parse_lmp_test_control_pattern
+	rtn
+parse_lmp_test_control_exit:
+	/* restoring old parameters */
+	fetch 1,mem_tester_emulate
+	set1 tester_exit,pdata
+	set1 tester_change,pdata
+	store 1,mem_tester_emulate
+	rtn
+parse_lmp_test_control_pattern:
+	set1 tester_pattern_test,temp
+	jam 5,mem_lch_code
+	fetch 2,test_mode_data_length
+	iforce loopcnt
+	store 2,mem_len
+	arg mem_rxbuf,contw
+	call pn9
+parse_lmp_test_control_loopback_nowhite:
+	set1 tester_no_whitening,temp
+parse_lmp_test_control_loopback:
+	set1 tester_change,temp
+	force 0,pdata
+	store 1,mem_slave_rcvcnt
+	store 2,mem_tst_pktcnt_crc
+	store 2,mem_tst_pktcnt_dmh
+	store 2,mem_tst_pktcnt_hec
+	store 2,mem_tst_pktcnt_sync
+	fetch 1,test_mode_hopping_mode
+	compare FIXED_FREQ,pdata,0xff
+	setflag true,tester_fixed_freq,temp
+	storet 1,mem_tester_emulate
+	rtn
+
+parse_lmp_test_control_pause:
+	set0 mark_testmode,mark
+	jam 0,mem_tester_emulate
+	fetch 1,mem_debug_config
+	set0 debug_tx_pattern,pdata
+	store 1,mem_debug_config
+	rtn
+
+
+	
+	
+
+lmp_copy_rand:	
+	arg mem_rxbuf+1,contr
+	arg mem_random_number,contw
+	branch memcpy16
+
+lmp_generate_key:
+	jam LMP_COMB_KEY,mem_lmo_opcode2
+	rtn
+
+lmp_start_encryption:
+	nrtn master
+	jam LMP_START_ENCRYPTION_REQ,mem_lmo_opcode2
+	rtn
+	
+lmp_accept_inrand:
+	arg mem_lap,rega
+	call generate_kinit
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_IN_RAND,mem_lmi_opcode2
+	rtn
+
+lmp_disconnect:
+	jam 10,mem_conn_timer
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam LOCAL_HOST,mem_disconn_reason_send	
+	rtn
+
+/*********************************/
+/*********lmp send*************/
+/********************************/
+	/* enable user if a lmp packet is to send */
+send_lmp:
+	bpatchx patch30_2,mem_patch30
+	disable user
+	call lmo_fifo_process
+	fetch 1,mem_lmp_to_send
+	rtn blank
+/* lmp message to be processed. this will either be because host??? */
+/* wants to send a lmp message or because one resulted from the LMP */
+/* processing section */
+/********* outgoing lmp lookup table *************/
+	bbit1 7,send_lmp_escape
+send_lmp0:
+	beq LMP_NAME_REQ,	 send_lmp_name_req
+	beq LMP_NAME_RES,	 send_lmp_name_res
+	beq LMP_ACCEPTED,	 send_lmp_accepted
+	beq LMP_NOT_ACCEPTED,	 send_lmp_not_accepted
+	beq LMP_FEATURES_REQ,	 send_lmp_features_req
+	beq LMP_FEATURES_RES,	 send_lmp_features_res
+	beq LMP_TIMING_ACCURACY_RES,	 send_lmp_timing_accuracy_res
+	beq LMP_VERSION_REQ,	 send_lmp_version_req
+	beq LMP_VERSION_RES,	 send_lmp_version_res
+	beq LMP_SETUP_COMPLETE,	 send_lmp_setup_complete
+	beq LMP_SUPERVISION_TIMEOUT,	 send_lmp_superto
+	beq LMP_HOST_CONNECTION_REQ,send_lmp_no_payload
+	beq LMP_IN_RAND,send_lmp_inrand
+	beq LMP_COMB_KEY,send_lmp_comb_key
+	beq LMP_AU_RAND,send_lmp_aurand
+	beq LMP_SRES,send_lmp_sres
+	beq LMP_ENCRYPTION_MODE_REQ,send_lmp_encryption_mode_req
+	beq LMP_ENCRYPTION_KEY_SIZE_REQ,send_lmp_encryption_key_size_req
+	beq LMP_START_ENCRYPTION_REQ,send_lmp_start_encryption
+	beq LMP_DETACH,send_lmp_detach
+	beq LMP_QUALITY_OF_SERVICE_REQ, send_lmp_quality_of_service_req
+	beq LMP_UNIT_KEY,send_lmp_unit_key
+	//Optional (O)
+	beq LMP_INCR_POWER_REQ,send_lmp_inc_power	
+	beq LMP_CLKOFFSET_RES, send_lmp_clkoffset_res	
+	beq LMP_MAX_POWER,send_lmp_nopayload_reply
+	beq LMP_MAX_SLOT, send_lmp_max_slot
+	beq LMP_MAX_SLOT_REQ, send_lmp_max_slot_req
+	beq LMP_MIN_POWER,send_lmp_nopayload_reply
+	beq LMP_SLOT_OFFSET, send_lmp_slot_offset
+	beq LMP_SWITCH_REQ, send_lmp_switch_req
+	beq LMP_SNIFF_REQ, send_lmp_sniff_req
+	beq LMP_STOP_ENCRYPTION_REQ, send_lmp_stop_encryption_req	
+	beq LMP_TIMING_ACCURACY_REQ, send_lmp_timing_accuracy_req
+	beq LMP_UNSNIFF_REQ, send_lmp_unsniff_req
+	beq LMP_ENCAPSULATED_HEADER,send_lmp_encapsulated_header
+	beq LMP_ENCAPSULATED_PAYLOAD,send_lmp_encapsulated_payload
+	beq LMP_SIMPLE_PAIRING_CONFIRM,send_lmp_simple_pairing_comfirm
+	beq LMP_SIMPLE_PAIRING_NUMBER,send_lmp_simple_pairing_number
+	beq LMP_DHKEY_CHECK,send_lmp_dhkey_check
+	beq LMP_AUTO_RATE,send_lmp_auto_rate
+	beq LMP_ENC_KEY_SIZE_MASK_RES,send_lmp_enc_key_size_mask_res
+	//master only must(M)
+	beq LMP_CLKOFFSET_REQ, send_lmp_clkoffset_req
+	beq LMP_QUALITY_OF_SERVICE, send_lmp_quality_of_service
+	beq LMP_TEST_ACTIVATE, send_lmp_test_activate
+	beq LMP_TEST_CONTROL, send_lmp_test_control
+send_lmp_error:
+	branch assert
+	rtn
+send_lmp_escape:
+	beq LMP_EXT_ACCEPTED,send_lmpext_accepted
+	beq LMP_EXT_FEATURES_RES,send_lmpext_features_res
+	beq LMP_NOT_ACCEPTED_EXT,send_lmpext_not_accepted
+	beq LMP_EXT_FEATURES_REQ,send_lmpext_features_req
+	beq LMP_PACKET_TYPE_TABLE_REQ,send_lmpext_packet_type_table_req
+	beq LMP_PAUSE_ENCRYPTION_REQ,send_lmpext_pause_encryption_req
+	beq LMP_IO_CAP_REQ,send_lmp_io_cap_req
+         beq LMP_IO_CAP_RES,send_lmpext_io_cap_res
+         beq LMP_SNIFF_SUBRATING_REQ,send_lmpext_sniff_subrating_req
+         beq LMP_SNIFF_SUBRATING_RES,send_lmpext_sniff_subrating_res
+	branch assert
+
+
+/******** LMP follow messages **********/
+/****** TID follow received packet  *******/
+
+send_lmp_accepted:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_lmi_opcode
+	istore 1,contw
+	call send_lmp_follow
+	bpatchx patch30_3,mem_patch30
+	fetch 1,mem_lmi_opcode
+	beq LMP_IN_RAND,send_lmp_accepted_inrand
+	beq LMP_ENCRYPTION_MODE_REQ,send_lmp_accepted_enc_mode
+	beq LMP_ENCRYPTION_KEY_SIZE_REQ,send_lmp_accepted_enc_key
+	beq LMP_SNIFF_REQ,send_lmp_accept_sniff_req
+	beq LMP_HOST_CONNECTION_REQ,send_lmp_accepted_connection
+	beq LMP_DHKEY_CHECK,send_lmp_accept_dhkey_check
+	beq LMP_START_ENCRYPTION_REQ,send_create_conn_start_l2cap_timer_sm  
+	rtn	
+	
+send_create_conn_start_l2cap_timer_sm:
+	fetch 1,mem_conn_sm
+	rtn blank
+	jam CONN_SM_WAIT_DONE,mem_conn_sm
+	setarg TIMER_ENPT_WAITE
+	arg enpt_delay_timer,queue
+	branch timer_init
+	
+send_lmp_accept_sniff_req:
+	branch sniff_init
+send_lmp_not_accepted:
+	force 3,pdata
+	call msg_send_lmp
+	fetch 1,mem_lmi_opcode
+	beq LMP_AU_RAND,send_not_accept_aurand
+	istore 1,contw
+	fetch 1,mem_lmo_reason
+	istore 1,contw
+	branch send_lmp_follow
+
+send_not_accept_aurand:
+	istore 1,contw
+	fetch 1,mem_lmo_reason
+	istore 1,contw
+	arg mem_sres_tid,temp
+	branch special_tid_store
+
+send_lmpext_accepted:	
+	force 4,queue
+	call send_lmpext
+	setarg LMP_ESCAPE
+	istore 1,contw
+	fetch 1,mem_lmi_opcode
+	set0 7,pdata
+	istore 1,contw
+	fetch 1,mem_lmi_opcode
+	branch send_lmp_follow
+
+send_lmpext_not_accepted:
+	force 5,queue
+	call send_lmpext
+	setarg LMP_ESCAPE
+	istore 1,contw
+	fetch 1,mem_lmi_opcode
+	set0 7,pdata
+	istore 1,contw
+	fetch 1,mem_lmo_reason
+	istore 1,contw
+	branch send_lmp_follow
+	
+
+send_lmp_accepted_inrand:
+	call clear_linkkey
+	call tid_check	
+	rtn true
+	branch lmp_generate_key
+
+send_lmp_accepted_enc_mode:
+	fetch 1,mem_op
+	bbit1 op_start_enc,send_lmp_accepted_enc_start
+	rtnbit0 op_stop_enc
+	jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2
+	set0 op_stop_enc,pdata
+	call tid_reply
+	branch send_lmp_accepted_enc_exit
+send_lmp_accepted_enc_start:
+	jam LMP_ENCRYPTION_KEY_SIZE_REQ,mem_lmo_opcode2
+	set0 op_start_enc,pdata
+send_lmp_accepted_enc_exit:
+	store 1,mem_op
+	rtn
+
+send_lmp_accepted_enc_key:
+	call check_localsm
+	branch lmp_start_encryption,true
+	rtn
+
+send_lmp_accepted_connection:
+	jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmo_opcode2
+	//jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	fetch 1,mem_lmp_conn_state
+	set1 RECEIVED_CONN_REQ,pdata
+	store 1,mem_lmp_conn_state
+	jam BT_EVT_BB_CONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+send_lmp_accept_dhkey_check:
+	rtn
+/******** LMP reply messages **********/
+/****** TID always set to remote  *******/
+
+send_lmpext_features_res:
+	force 12,queue
+	call send_lmpext
+	setarg 0x01
+	istore 1,contw
+	fetch 2,mem_lmpext_ssp_enable
+	istore 2,contw
+	setarg 0
+	istore 3,contw
+	setarg 0x00
+	istore 4,contw
+	branch send_lmp_reply
+send_lmpext_io_cap_res:     
+	force 5,queue
+         call send_lmpext
+       	fetch 3,mem_sp_iocap_local
+         istore 3,contw
+	call send_lmp_reply
+	jam FLAG_PAIRING_STATE_PAIRING,mem_flag_pairing_state
+	fetch 1,mem_sp_iocap_local
+	beq DISPLAY_YESNO,responder_iocap_display_yesno
+	beq KEYBOARD_ONLY,responder_iocap_keyboard_only
+	beq NO_INPUT_NO_OUTPUT,responder_iocap_no_input_no_output
+	rtn
+
+responder_iocap_keyboard_only:
+	fetch 1,mem_sp_iocap_remote
+	beq DISPLAY_ONLY,responder_iocap_keyboard_only_initiator_iocap_display_only
+	beq DISPLAY_YESNO,responder_iocap_keyboard_only_initiator_iocap_display_yesno
+	beq KEYBOARD_ONLY,responder_iocap_keyboard_only_initiator_iocap_keyboard_only
+	beq NO_INPUT_NO_OUTPUT,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output
+	rtn
+
+
+responder_iocap_display_yesno:
+	fetch 1,mem_sp_iocap_remote
+	beq DISPLAY_ONLY,responder_iocap_display_yesno_initiator_iocap_display_only
+	beq DISPLAY_YESNO,responder_iocap_display_yesno_initiator_iocap_display_yesno
+	beq KEYBOARD_ONLY,responder_iocap_display_yesno_initiator_iocap_keyboard_only
+	beq NO_INPUT_NO_OUTPUT,responder_iocap_display_yesno_initiator_iocap_no_input_no_output
+	rtn
+
+	
+responder_iocap_no_input_no_output:
+	fetch 1,mem_sp_iocap_remote
+	beq DISPLAY_ONLY,responder_iocap_no_input_no_output_initiator_iocap_display_only
+	beq DISPLAY_YESNO,responder_iocap_no_input_no_output_initiator_iocap_display_yesno
+	beq KEYBOARD_ONLY,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only
+	beq NO_INPUT_NO_OUTPUT,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output
+	rtn
+
+responder_iocap_keyboard_only_initiator_iocap_no_input_no_output:
+responder_iocap_display_yesno_initiator_iocap_no_input_no_output:
+responder_iocap_display_yesno_initiator_iocap_display_only:
+responder_iocap_no_input_no_output_initiator_iocap_display_only:
+responder_iocap_no_input_no_output_initiator_iocap_display_yesno:
+responder_iocap_no_input_no_output_initiator_iocap_keyboard_only:
+responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output:
+set_ssp_mode_justwork: 
+	jam SSP_MODE_JUST_WORK_FLAG,mem_ssp_mode_flag
+	fetch 1,mem_classic_bt_flag
+	bbit1 FLAG_SSP_REJECT_JUSTWORK,app_bt_disconnect
+	rtn
+
+responder_iocap_display_yesno_initiator_iocap_display_yesno:
+set_ssp_mode_numeric_comparison: 
+	jam SSP_MODE_SSP_PIN_FLAG,mem_ssp_mode_flag
+	rtn
+
+responder_iocap_keyboard_only_initiator_iocap_display_yesno:
+responder_iocap_keyboard_only_initiator_iocap_keyboard_only:	
+responder_iocap_keyboard_only_initiator_iocap_display_only:	
+responder_iocap_display_yesno_initiator_iocap_keyboard_only:
+set_ssp_mode_passkey: 
+	jam SSP_MODE_PASSKEY_ENTRY_FLAG,mem_ssp_mode_flag
+	rtn
+
+
+classic_bt_set_reject_justwork_flag:
+	arg FLAG_SSP_REJECT_JUSTWORK,queue
+	branch classic_bluetooth_set_flag
+
+classic_bt_clr_reject_justwork_flag:
+	arg FLAG_SSP_REJECT_JUSTWORK,queue
+	branch classic_bluetooth_clr_flag
+
+classic_bluetooth_set_flag:
+	fetch 1,mem_classic_bt_flag
+	qset1 pdata
+	store 1,mem_classic_bt_flag
+	rtn
+
+classic_bluetooth_clr_flag:
+	fetch 1,mem_classic_bt_flag
+	qset0 pdata
+	store 1,mem_classic_bt_flag
+	rtn
+
+         
+send_lmp_io_cap_req:
+	force 5,queue
+	call send_lmpext
+	fetch 3,mem_sp_iocap_local
+	istore 3,contw
+	branch send_lmp_request
+	
+
+send_lmpext_sniff_subrating_req: 
+
+	rtn
+send_lmpext_sniff_subrating_res: 
+         force 9,queue
+         call send_lmpext
+         fetch 1,mem_subsniff_rate
+         istore 1,contw
+         fetch 2,mem_subsniff_tcmax
+         istore 2,contw
+         fetch 4,mem_subsniff_instant
+         istore 4,contw
+	branch send_lmp_reply
+
+send_lmp_name_res:
+	force 17,pdata
+	call msg_send_lmp
+	fetch 1,mem_lmi_opcode  /* loading name offset */
+	copy pdata,temp
+	beq 0x00,send_lmp_name_res_offset_ok
+	beq 0x0e,send_lmp_name_res_offset_ok
+	beq 0x1c,send_lmp_name_res_offset_ok
+	rtn
+send_lmp_name_res_offset_ok:
+	istore 1,contw	/* writing name offset */
+	fetch 1,mem_local_name_length
+	istore 1,contw	/* writing name length */
+	arg 14,loopcnt
+	setarg mem_local_name
+	iadd temp,contr	/* setting read location */
+	call memcpy
+	branch send_lmp_reply
+
+
+send_lmp_timing_accuracy_res:
+	force 3,pdata
+	call msg_send_lmp
+	setarg 0x0114
+	istore 2,contw
+	branch send_lmp_reply
+
+send_lmp_clkoffset_res:
+	// dopod s505 must wait for this res
+	force 3,pdata
+	call msg_send_lmp
+	fetch 4,mem_clke_bt
+	isub clkn_bt,pdata
+	branch send_lmp_clkoffset_res_master,master
+	sub pdata,0,pdata		/* our role is slave */
+send_lmp_clkoffset_res_master:	
+	// bit 16-2 of clkslave-clkmaster
+	rshift2 pdata,pdata
+	set0 15,pdata
+	istore 2,contw
+	branch send_lmp_reply
+
+send_lmp_version_res:
+	force 6,pdata
+	call msg_send_lmp
+	fetch 5,mem_lmp_version
+	istore 5,contw
+	branch send_lmp_reply
+
+send_lmp_features_res:
+	force 9,pdata
+	call msg_send_lmp
+	fetch 8,mem_features
+	istore 8,contw
+	branch send_lmp_reply  
+
+
+/******** LMP request messages **********/
+/****** TID always set to local initiated *******/
+	
+
+send_lmpext_features_req:
+	force 12,queue
+	call send_lmpext
+	setarg 0x01
+	istore 1,contw
+	fetch 2,mem_lmpext_ssp_enable
+	istore 2,contw
+	setarg 0
+	istore 3,contw
+	setarg 0x00
+	istore 4,contw
+	branch send_lmp_request
+
+send_lmpext_packet_type_table_req:
+	force 3,queue
+	call send_lmpext
+	fetch 1,mem_ptt
+	istore 1,contw
+	disable user
+	call send_lmp_request
+	nrtn user
+	nrtn master
+	fetch 1,mem_afh_cfg
+	rtnbit0 AFH_CFG_ON
+	call afh_init
+	branch afh_open_all_channels
+	
+//default:featrue is enable,extfeature is disable
+ssp_enable:
+	bpatchx patch30_4,mem_patch30
+	fetch 1,mem_features+6
+	set1 param_featrue_ssp,pdata
+	store 1,mem_features+6
+	setarg param_lmpext_ssp_enable
+	store 2,mem_lmpext_ssp_enable
+	rtn
+
+ssp_disable:
+	bpatchx patch30_5,mem_patch30
+	fetch 1,mem_features+6
+	set0 param_featrue_ssp,pdata
+	store 1,mem_features+6
+	setarg 0
+	store 2,mem_lmpext_ssp_enable
+	rtn
+	
+afh_init:
+	jam 0x3,mem_afh_cfg
+	setarg 0
+	store 4,mem_afh_timer
+	arg mem_afh_map_lo,contw
+	call afh_reset_map
+	arg mem_afh_map_new,contw
+	call afh_reset_map
+	arg mem_afh_classify_channel_map,contw
+	call afh_reset_map
+	branch afh_clear_error_counter
+afh_open_all_channels:
+	arg mem_afh_map_new,contw
+	call afh_reset_map
+	call afh_clear_error_counter
+	branch afh_set_send_flag
+
+
+afh_reset_map:
+	setarg 0xffffff
+	istore 3,contw
+	istore 3,contw
+	istore 3,contw
+	setarg 0x7f
+	istore 1,contw
+	rtn
+afh_clear_error_counter:
+	setarg 0
+	store 2,mem_afh_error_total
+	rtn
+afh_set_send_flag:
+	fetch 1,mem_afh_cfg
+	set1 send_lmp_set_afh,pdata
+	store 1,mem_afh_cfg
+	rtn
+
+
+send_lmpext_pause_encryption_req:
+	force 2,queue
+	call send_lmpext
+	nbranch send_lmp_reply,master
+	// assume slave will not send pause req firstly???
+	branch send_lmp_request
+
+
+	
+send_lmp_detach:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_disconn_reason_send
+	istore 1,contw
+	call send_lmp_request
+prepare_disconnect:
+	fetch 1,mem_op
+	set1 op_disconn,pdata
+	store 1,mem_op
+	jam 50,mem_conn_timer
+	rtn
+	
+
+send_lmp_no_payload:
+	force 1,pdata
+	call msg_send_lmp
+	branch send_lmp_request
+send_lmp_nopayload_reply:
+	force 1,pdata
+	call msg_send_lmp
+	branch send_lmp_reply
+	
+	
+send_lmp_encryption_mode_req:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_state_map
+	isolate0 smap_encryption,pdata
+	setflag true,0,pdata
+	and_into 1,pdata
+	istore 1,contw
+	branch send_lmp_request
+
+
+send_lmp_superto:
+	force 3,pdata
+	call msg_send_lmp
+	fetch 2,mem_supervision_to
+	istore 2,contw
+	branch send_lmp_request
+
+send_lmp_name_req:
+	jam 250,mem_conn_timer
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_name_offset
+	istore 1,contw
+	branch send_lmp_request
+
+send_lmp_test_control:
+	force 10,pdata
+	call msg_send_lmp
+	arg mem_temp_payload,contr
+	force 9,loopcnt
+send_lmp_test_control_loop:	
+	ifetch 1,contr
+	xor_into 0x55,pdata
+	istore 1,contw
+	loop send_lmp_test_control_loop
+	branch send_lmp_request  
+
+send_lmp_quality_of_service_req:
+	branch send_lmp_request
+send_lmp_unit_key:
+	branch send_lmp_request
+
+send_lmp_slot_offset:
+	rtn master
+	call calc_slot_offset
+	force 9,pdata
+	call msg_send_lmp
+	fetch 2,mem_slot_offset
+	istore 2,contw
+	fetch 3,mem_lap
+	istore 3,contw
+	fetch 1,mem_uap
+	istore 1,contw
+	fetch 2,mem_nap
+	istore 2,contw
+	bmark0 mark_switch_initiated,send_lmp_slot_offset_reply
+	set0 mark_switch_initiated,mark
+	call send_lmp_request
+	jam LMP_SWITCH_REQ,mem_lmo_opcode2
+	rtn
+send_lmp_slot_offset_reply:
+	call send_lmp_reply
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_SWITCH_REQ,mem_lmi_opcode2
+	rtn
+	
+send_lmp_switch_req:
+	arg 0x200,temp
+	branch switch_on_native,master
+	deposit clke_bt
+	branch switch_slack
+switch_on_native:
+	deposit clkn_bt
+switch_slack:
+	deposit bt_clk
+	iadd temp,pdata
+	and_into 0x1fc,pdata
+	store 4,mem_sniff_anchor
+	force 5,pdata
+	call msg_send_lmp
+	fetch 4,mem_sniff_anchor		/* reused as switch instant */
+	rshift pdata,pdata
+	istore 4,contw
+	branch send_lmp_request
+	
+send_lmp_sniff_req:
+	force 10,pdata
+	call msg_send_lmp
+	arg mem_sniff_payload,contr
+	ifetch 9,contr
+	istore 9,contw
+	branch send_lmp_request
+
+	
+send_lmp_timing_accuracy_req:
+/* default to TID_NORM_SEND */
+	force 3,pdata
+	call msg_send_lmp
+	setarg 0x0114
+	istore 2,contw
+	branch send_lmp_request
+	
+send_lmp_unsniff_req:
+//--------------------need to completa
+	force 1,pdata
+	call msg_send_lmp
+	//fetch 1,mem_unsniff_pending
+	//nbranch send_msg_done,blank
+	//jam 1,mem_unsniff_pending
+	//fetch 2,mem_sniff_attempt
+	//fetch 2,mem_nsniff_attempt
+	//lshift3 pdata,pdata
+	//lshift pdata,pdata
+	//store 1,mem_unsniff_cnt
+	branch send_lmp_request
+
+	
+send_lmp_max_slot:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_max_slot
+	istore 1,contw
+	branch send_lmp_request
+	
+	
+send_lmp_max_slot_req:
+	force 2,pdata
+	call msg_send_lmp
+	setarg 0x05		/*5 slot*/
+	istore 1,contw
+	branch send_lmp_request
+
+
+send_lmp_inc_power:
+	force 2,pdata
+	call msg_send_lmp
+	setarg 0x00		/*5 slot*/
+	istore 1,contw
+	branch send_lmp_request
+
+
+send_lmp_setup_complete_by_module:
+	jam LMP_MAX_SLOT_REQ,mem_lmo_opcode2
+	rtn
+send_lmp_setup_complete:
+	fetch 1,mem_device_option
+	sub pdata,dvc_op_module,null
+	call send_lmp_setup_complete_by_module,zero
+	fetch 1,mem_state
+	set1 state_conn_comp,pdata
+	store 1,mem_state
+	copy clkn_bt,pdata
+	store 4,mem_aurand_send_delay_time
+	fetch 1,mem_lmp_conn_state
+	bbit1 SENT_SETUP_COMPLETE,send_lmp_setup_complete_has_sent
+	set1 SENT_SETUP_COMPLETE,pdata
+	store 1,mem_lmp_conn_state
+	jam BT_EVT_SETUP_COMPLETE,mem_fifo_temp
+	call ui_ipc_send_event
+	force 1,pdata
+	call msg_send_lmp
+	branch send_lmp_request
+send_lmp_setup_complete_has_sent:
+	jam 0,mem_lmp_to_send
+	rtn
+	
+send_lmp_version_req:
+	force 6,pdata
+	call msg_send_lmp
+	fetch 5,mem_lmp_version
+	istore 5,contw
+	branch send_lmp_request
+
+send_lmp_features_req:
+	force 9,pdata
+	call msg_send_lmp
+	fetch 8,mem_features
+	istore 8,contw
+	branch send_lmp_request  
+
+sp_master_send_io_cap_get:
+	jam SP_FLAG_COMMIT,mem_master_sp_flag
+	fetch 1,mem_sp_local_key_invalid
+	rtnne SP_KEY_VALID
+	jam SP_MASTER_STAT_START_DONE,mem_master_sp_state
+	rtn
+
+sp_master_send_io_cap_send:
+	call tid_initiate
+	jam LMP_IO_CAP_REQ,mem_lmo_opcode2
+	jam SP_STAT_KEY_SEND,mem_master_sp_state
+	rtn
+	
+	
+sp_master_send_LMP_ENCAPSULATED_HEADER:
+	call tid_initiate
+	jam      LMP_ENCAPSULATED_HEADER,mem_lmo_opcode2
+	jam SP_STAT_RANDOM_SEND,mem_master_sp_state
+	rtn
+	
+sp_master_commitment_compare:
+	arg mem_sp_calc_result_high,rega
+	arg mem_sp_confirm_remote,regb
+	arg 16,loopcnt
+	call string_compare
+	branch sp_master_commitment_compare_success,zero
+	jam SP_STAT_NULL,mem_master_sp_state
+	call master_clear_mem_master_sp_flag
+	jam   PDU_NOT_ALLOWED,mem_lmo_reason2
+	jam 	LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2 
+	branch reject_lmp_packet
+sp_master_commitment_compare_success:
+	jam 	SP_STAT_CONFIRM_CALC,mem_master_sp_state
+	call master_set_mem_master_sp_flag
+	jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2
+	branch accept_lmp_msg  
+	
+
+	
+sp_master_send_lmp_simple_pairing_number:
+	jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmo_opcode2
+	rtn
+	
+
+
+sp_send_lmp_encapsulated_header:
+	// calculate the private & public key here
+	//jam      LMP_ENCAPSULATED_HEADER,mem_lmp_to_send
+	jam      LMP_ENCAPSULATED_HEADER,mem_lmo_opcode2
+	//jam      TID_PAIRING,mem_lmp_tid
+	rtn
+	//fetch 1,mem_tid_table
+	//set1 TID_PAIRING,pdata
+	//store 1,mem_tid_table
+     
+    
+send_lmp_encapsulated_header: 
+	jam 0,mem_sp_local_key_send_count
+	force 4,pdata
+	call msg_send_lmp
+	force ENCAPSULATED_MAJOR_TYPE_P192,pdata
+	istore 1,contw
+	force ENCAPSULATED_MINOR_TYPE_P192,pdata
+	istore 1,contw  
+	force ENCAPSULATED_LEN_P192,pdata
+	istore 1,contw 
+	call check_localsm
+	branch send_lmp_request,true
+	branch send_lmp_reply
+
+send_lmp_encapsulated_payload:
+	//jam      TID_PAIRING,mem_lmp_tid
+	 force 17,pdata
+	call msg_send_lmp
+	fetch 1,mem_sp_local_key_send_count
+	arg mem_sp_pubkey_local,contr
+	iadd contr,contr    
+	ifetch   8,contr
+	istore   8,contw
+	ifetch   8,contr
+	istore   8,contw
+	fetch    1,mem_sp_local_key_send_count
+	increase 16,pdata
+	store    1,mem_sp_local_key_send_count
+	call check_localsm
+	branch send_lmp_request,true
+	branch send_lmp_reply
+	//branch send_lmp_request
+	
+sp_send_lmp_simple_pairing_comfirm:
+        jam      SP_STAT_RANDOM_RECV,mem_sp_state
+        jam      LMP_SIMPLE_PAIRING_CONFIRM,mem_lmo_opcode2
+        rtn
+send_lmp_simple_pairing_comfirm:
+        //jam      SP_STAT_RANDOM_RECV,mem_sp_state
+        //jam      TID_PAIRING,mem_lmp_tid
+        force    17,pdata
+        call msg_send_lmp   
+        arg      mem_sp_calc_result_high,contr
+        ifetch   8,contr
+        istore   8,contw
+        ifetch   8,contr
+        istore   8,contw 
+        branch send_lmp_reply
+
+sp_send_lmp_simple_pairing_number:
+	jam      LMP_SIMPLE_PAIRING_NUMBER,mem_lmo_opcode2
+	rtn
+
+send_lmp_simple_pairing_number:
+	//jam      TID_PAIRING,mem_lmp_tid
+	call check_localsm
+	call sp_local_random_key_generator,true
+	force    17,pdata
+	call msg_send_lmp
+	arg      mem_sp_random_local,contr
+	ifetch   8,contr
+	istore   8,contw
+	ifetch   8,contr
+	istore   8,contw
+	call check_localsm
+	nbranch send_lmp_reply,true
+	branch send_lmp_request,true
+
+master_sp_sm_end:
+	//jam DEFAULT_STATEMACHINE,mem_sp_localsm
+	jam SP_STAT_DONE,mem_master_sp_state
+sp_aurand_send:
+	call tid_initiate
+	jam LMP_AU_RAND,mem_lmo_opcode2
+	call check_localsm_master
+	branch sp_master_key_prarm_push,true
+	branch sp_link_key_prarm_push
+master_sp_send_lmp_dhkey_check:
+	call tid_reply
+sp_send_lmp_dhkey_check: 
+	jam      LMP_DHKEY_CHECK,mem_lmo_opcode2
+	rtn
+send_lmp_dhkey_check: 
+	//jam      TID_PAIRING,mem_lmp_tid
+	force    17,pdata
+	call     msg_send_lmp
+	arg      mem_sp_calc_result_high,contr
+	ifetch   8,contr
+	istore   8,contw
+	ifetch   8,contr
+	istore   8,contw 
+	call check_localsm
+	nbranch send_lmp_reply,true
+	branch send_lmp_request,true
+
+send_lmp_enc_key_size_mask_res:
+	force 3,pdata
+	call msg_send_lmp   
+	setarg 0xfffe //enc key size mask
+	istore 2,contw
+	branch send_lmp_reply
+
+send_lmp_auto_rate:
+	branch send_lmp_request
+send_lmp_clkoffset_req:
+	branch send_lmp_request
+send_lmp_quality_of_service:
+	branch send_lmp_request
+send_lmp_test_activate:
+	branch send_lmp_request
+
+/******** LMP request/reply messages **********/
+/****** TID transaction specific *******/
+
+send_lmp_comb_key:
+	call generate_random_number
+	arg mem_lap,rega
+	call generate_linkkey
+	force 17,pdata
+	call msg_send_lmp
+	arg mem_kinit,rega
+	arg mem_random_number,regb
+	call xor16
+	nbranch send_lmp_follow,master
+	branch send_lmp_tid
+
+send_lmp_inrand:
+	call generate_random_number
+	arg mem_plap,rega
+	call generate_kinit
+send_lmp_rand:	/* used by in_rand,au_rand,start_encrypt */
+	force 17,pdata
+	call msg_send_lmp
+	arg mem_random_number,contr
+	call memcpy16
+	fetch 1,mem_conn_sm 
+	beq CONN_SM_AUTH_WAIT,send_lmp_request
+	beq CONN_SM_PAIRING_WAIT,send_lmp_request
+	branch send_lmp_tid
+
+send_lmp_aurand:
+	fetch 1,mem_pairing_auth
+	branch send_lmp_aurand_notpairing,blank
+	call check_localsm
+	call tid_initiate,true
+	ncall tid_reply,true
+	branch send_lmp_aurand_common
+send_lmp_aurand_notpairing:
+	call tid_initiate
+send_lmp_aurand_common:
+	call generate_random_number
+	branch send_lmp_rand
+
+send_lmp_sres:
+	arg mem_lap,rega
+	call function_e1
+	force 5,pdata
+	call msg_send_lmp
+	fetch 4,mem_input_store
+	istore 4,contw
+	arg mem_sres_tid,temp
+	call special_tid_store
+	call copy_aco
+	call check_localsm
+	branch send_lmp_sres_master,true
+	jam DONE_ENCRYP,mem_wait_encryption
+	fetch 1,mem_pairing_auth
+	rtn blank
+	jam LMP_AU_RAND,mem_lmo_opcode2
+send_lmp_sres_master:
+	fetch 1,mem_link_key_exists
+	rtn blank
+send_lmp_sres_startenc:
+	call check_localsm
+	nbranch send_lmp_sres_startenc_slave,true
+	fetch 1,mem_auth_enable
+	rtn blank
+	jam LMP_ENCRYPTION_MODE_REQ, mem_lmo_opcode2
+	rtn
+send_lmp_sres_startenc_slave:
+	rtnmark0 mark_slave_in_rand_accepted
+	set0 mark_slave_in_rand_accepted,mark
+	jam LMP_ENCRYPTION_MODE_REQ, mem_lmo_opcode2
+	rtn
+	
+
+	
+send_lmp_start_encryption:
+	call generate_random_number
+	call function_e3
+	force 17,pdata
+	call msg_send_lmp
+	arg mem_random_number,contr
+	call memcpy16
+	branch send_lmp_tid
+
+send_lmp_stop_encryption_req:
+	force 1,pdata
+	call msg_send_lmp
+	branch send_lmp_tid
+
+send_lmp_encryption_key_size_req:
+	force 2,pdata
+	call msg_send_lmp
+	force 16,pdata
+	istore 1,contw
+	store 1,mem_key_size
+	branch send_lmp_tid
+
+msg_send_lmp:
+/* FLOW is set high and LMP is indicated */
+	lshift3 pdata,pdata
+	or_into 0x07,pdata
+	store 1,mem_lmo_header_length
+	arg 17,loopcnt
+	arg mem_lmo_payload,contw
+	call clear_mem
+	arg mem_lmo_payload,contw
+	rtn
+
+send_lmpext:
+	and pdata,0x7f,rega
+	jam LMP_ESCAPE,mem_lmp_to_send
+	deposit queue
+	call msg_send_lmp
+	deposit rega
+	istore 1,contw
+	rtn
+
+send_lmp_follow:
+	fetch 1,mem_lmp_to_send
+	lshift pdata,pdata
+	fetcht 1,mem_state_map
+	isolate1 smap_lmptid,temp
+	setflag true,0,pdata
+	branch send_lmp_exit
+
+
+send_lmp_tid:
+	fetcht 1,mem_state_map
+	and_into 1,temp
+	branch send_lmp_end
+
+send_lmp_reply:
+	force 0,temp
+	branch send_lmp_end
+	
+send_lmp_request:
+	force 1,temp
+send_lmp_end:
+	fetch 1,mem_lmp_to_send
+	lshift pdata,pdata
+	setflag master,0,pdata
+	ixor temp,pdata
+send_lmp_exit:
+	store 1,mem_lmo_header_opcode
+	jam 0,mem_lmp_to_send
+	call lmo_fifo_process_lmo0empty
+	enable user
+	rtn
+
+//blank : not full 
+lmo_fifo_check:
+	fetch 1,mem_lmo_opcode2
+	rtn blank
+	call lmo_fifo_process
+	fetch 1,mem_lmo_opcode2
+	rtn
+
+lmo_fifo_process:
+	bpatchx patch30_6,mem_patch30
+	fetch 1,mem_lmp_to_send
+	branch lmo_fifo_process_lmo0empty,blank
+	fetch 1,mem_lmo_opcode1
+	nrtn blank
+	branch lmo_fifo_process_lmo2to1
+lmo_fifo_process_lmo0empty:
+	fetch 1,mem_lmo_opcode1
+	branch lmo_fifo_process_lmo1_empty,blank
+	fetch 3,mem_lmo_opcode1
+	store 3,mem_lmp_to_send//1=>0
+	fetcht 1,mem_lmo_tid1
+	fetch 1,mem_state_map
+	set0 smap_lmptid,pdata
+	ior temp,pdata
+	store 1,mem_state_map
+	jam 0,mem_lmo_opcode1
+lmo_fifo_process_lmo2to1:
+	fetch 1,mem_lmo_opcode2
+	rtn blank
+	fetch 4,mem_lmo_opcode2
+	store 4,mem_lmo_opcode1//2=>1
+	jam 0,mem_lmo_opcode2
+	rtn
+lmo_fifo_process_lmo1_empty:
+	fetch 1,mem_lmo_opcode2
+	rtn blank
+	fetch 3,mem_lmo_opcode2
+	store 3,mem_lmp_to_send//2=>0	
+	fetcht 1,mem_lmo_tid2
+	fetch 1,mem_state_map
+	set0 smap_lmptid,pdata
+	ior temp,pdata
+	store 1,mem_state_map
+	jam 0,mem_lmo_opcode2
+	rtn
+	
+//input:temp
+special_tid_store:
+	bpatchx patch30_7,mem_patch30
+	fetch 1,mem_state_map
+	copy pdata,regc
+	ifetch 1,temp
+	call pop_tid_follow
+	call send_lmp_follow
+	copy regc,pdata
+	store 1,mem_state_map
+	rtn
+	
+tid_reply:
+	fetcht 1,mem_state_map
+	set0 smap_lmptidinit,temp
+	storet 1,mem_state_map
+	rtn
+	
+tid_initiate:
+	fetcht 1,mem_state_map
+	set1 smap_lmptidinit,temp
+	storet 1,mem_state_map
+	rtn
+	
+	/* true if transaction from remote */
+tid_check:
+	nsetflag master,smap_lmptid,pdata //it is ok
+	fetcht 1,mem_state_map
+	ixor temp,pdata
+	isolate1 smap_lmptid,pdata
+	rtn	
+
+	/* set to remote */
+tid_set_reply:
+	fetch 1,mem_state_map
+	setflag master,smap_lmptid,pdata //it is ok
+	store 1,mem_state_map
+	rtn
+
+	/*rtn true when we lead lmp*/
+check_localsm:
+	fetch 1,mem_sp_localsm
+	compare 	LOCAL_STATEMACHINE,pdata,0x7f
+	rtn
+setlocalsm_master:
+	fetch 1,mem_sp_localsm
+	set1 7,pdata
+	store 1,mem_sp_localsm
+	rtn
+setlocalsm_slave:
+	fetch 1,mem_sp_localsm
+	set0 7,pdata
+	store 1,mem_sp_localsm
+	rtn
+check_localsm_master:
+	fetch 1,mem_sp_localsm
+	isolate1 7,pdata
+	store 1,mem_sp_localsm
+	rtn
+	
+generate_random_number:
+	/* generating a 16 byte random number,storing in ape_random_number */
+	arg mem_random_number,contw
+generate_random:
+	force 16,loopcnt
+generate_random_another:
+generate_random_loop:
+	random pdata
+	istore 1,contw
+	loop generate_random_another
+	rtn
+
+generate_linkkey:
+	call function_e21
+	arg mem_link_key,rega
+	arg mem_input_store,regb
+	ifetch 8,rega					/* check if already got comb key */
+	fetcht 1,mem_state
+	nsetflag blank,state_combkey,temp
+	storet 1,mem_state
+	copy rega,contw
+	call  xor16
+	branch generate_linkkey_continue
+
+/*********************************/
+/*********lmp send*************/
+/********************************/
+
+process_conn_sm:
+	//nrtn master
+	bpatchx patch31_0,mem_patch31
+
+	call lmo_fifo_check
+	nrtn blank
+process_conn_sm_continue:
+	fetch 1,mem_conn_sm
+	rtn blank
+	/* state machine begins in standby */
+	//beq CONN_SM_STANDBY, host_create_conn_begin
+	//beq CONN_SM_WAIT_PAGE, host_create_conn_wait_page
+	beq CONN_SM_SEND_CONN_REQ, host_create_conn_send_conn_req
+	beq CONN_SM_WAIT_CONN_ACCEPT, host_create_conn_wait_accept
+	beq CONN_SM_SEND_FEATURES, host_create_conn_send_features
+	beq CONN_SM_WAIT_FEATURES_RES, host_create_conn_waiting
+	beq CONN_SM_SEND_SWITCH,host_create_conn_send_switch
+	beq CONN_SM_AUTH_PAIR, host_create_conn_auth_pair
+	beq CONN_SM_AUTH_PAIR_WAIT, host_create_conn_auth_pair_wait
+	beq CONN_SM_ENCRYPT, host_create_conn_encrypt
+	beq CONN_SM_ENCRYPT_WAIT, host_create_conn_encrypt_wait
+	beq CONN_SM_ENCRYPT_WAIT_CLEAR, host_create_conn_encrypt_wait_clear
+	beq CONN_SM_SEND_SETUP_COMPLETE, host_create_conn_send_setup_complete
+	beq CONN_SM_WAIT_SETUP_COMPLETE, host_create_conn_wait_setup_complete
+	beq CONN_SM_DETACH_DELAY,host_create_conn_master_detach
+	beq CONN_SM_SEND_VERSION, host_create_conn_send_version
+	beq CONN_SM_WAIT_VERSION, host_create_conn_waiting
+	beq CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION, host_creat_conn_wait_switch
+	beq CONN_SM_SEND_FEATURES_EXT,host_creat_conn_send_feat_ext
+	beq CONN_SM_WAIT_FEATURES_EXT,host_create_conn_waiting
+	beq CONN_SM_PAIRING,host_create_conn_pairing
+	beq CONN_SM_PAIRING_WAIT,host_create_conn_pairing_wait
+	beq CONN_SM_AUTH,host_create_conn_auth
+	beq CONN_SM_AUTH_WAIT,host_create_conn_auth_wait
+	beq CONN_SM_DONE,host_create_conn_done
+	beq CONN_SM_WAIT_DONE,host_create_conn_done_wait
+	jam CONN_SM_STANDBY,mem_conn_sm
+	/* sending error message to host */
+	rtn
+host_create_conn_done:
+	fetch 1,mem_lmp_conn_state		
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	rtnbit0 SENT_SETUP_COMPLETE
+	jam CONN_SM_STANDBY,mem_conn_sm
+	call host_conn_judge_encrypt
+	branch scheduler_start_upper_sm
+	
+host_conn_judge_encrypt:
+	fetch 1,mem_connection_options
+	rtnbit0 CONNECTION_ENCRYPT
+	jam CONN_SM_ENCRYPT_WAIT,mem_conn_sm
+	rtn
+
+host_create_conn_done_wait:
+	arg enpt_delay_timer,queue
+	call timer_check
+	nrtn blank
+	jam CONN_SM_DONE,mem_conn_sm
+	rtn
+	
+host_create_conn_auth:
+	fetch 1,mem_connection_options
+	set0 CONNECTION_AUTH,pdata
+	store 1,mem_connection_options
+	jam CONN_SM_AUTH_WAIT,mem_conn_sm
+	jam LMP_AU_RAND,mem_lmo_opcode2
+	rtn 
+host_create_conn_auth_wait:
+	rtn
+host_create_conn_pairing:
+	fetch 1,mem_pincode_state
+	rtnne pincode_state_pincode_ready //wait for pincode
+	call host_auth
+	jam CONN_SM_PAIRING_WAIT,mem_conn_sm
+	rtn
+
+host_create_conn_pairing_wait:
+	rtn
+host_creat_conn_send_feat_ext:
+	jam CONN_SM_WAIT_FEATURES_EXT,mem_conn_sm
+	jam LMP_EXT_FEATURES_REQ,mem_lmo_opcode2
+	rtn
+host_create_conn_send_version:
+	jam CONN_SM_WAIT_VERSION,mem_conn_sm
+	jam LMP_VERSION_REQ,mem_lmo_opcode2
+	rtn 
+	
+host_creat_conn_wait_switch:
+	fetch 1,mem_switch_flag
+	rtneq SWITCH_FLAG_INIT
+	beq SWITCH_FLAG_ACCEPT,host_create_conn_switch_accept
+	arg switch_wait_timer,queue
+	call timer_check
+	nrtn blank
+	jam SWITCH_FLAG_INIT,mem_switch_flag
+	branch host_create_conn_switch
+host_create_conn_switch_accept:
+	rtn master
+	branch host_create_conn_auth_pair
+
+host_create_conn_send_features:
+	jam CONN_SM_WAIT_FEATURES_RES,mem_conn_sm
+	jam LMP_FEATURES_REQ,mem_lmo_opcode2
+	rtn 
+host_create_conn_send_switch:
+	jam LMP_SWITCH_REQ,mem_lmo_opcode2
+	set1 mark_switch_initiated,mark
+	jam CONN_SM_WAIT_CONN_ACCEPT,mem_conn_sm
+	setarg 0x1ff
+	store 2, mem_soft_timer
+	rtn
+host_create_conn_send_conn_req:
+	jam CONN_SM_WAIT_CONN_ACCEPT,mem_conn_sm
+	jam 0xff,mem_soft_timer
+	set0 mark_reconn_recieve_switch,mark
+	jam LMP_HOST_CONNECTION_REQ,mem_lmo_opcode2
+	branch init_lmp_reinit
+host_create_conn_wait_accept:
+	rtnmark1 mark_reconn_recieve_switch
+	fetch 2,mem_soft_timer
+	sub pdata,1,pdata
+	branch host_create_conn_resend,zero
+	store 2, mem_soft_timer
+	rtn
+host_create_conn_resend:
+	jam CONN_SM_SEND_SWITCH,mem_conn_sm
+	rtn
+host_create_conn_waiting:
+	/* we will exit waiting for connection request accepted, features res, or other commands to finish */
+	rtn 
+
+host_create_conn_switch:
+	fetch 1,mem_lmp_conn_state
+	rtnbit0 SENT_SETUP_COMPLETE
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	fetch 1,mem_connection_options
+	set0 CONNECTION_SWITCH,pdata
+	store 1,mem_connection_options
+	jam LMP_SWITCH_REQ,mem_lmo_opcode2
+	jam CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION,mem_conn_sm
+	rtn 
+
+host_create_conn_send_setup_complete:
+	jam CONN_SM_WAIT_SETUP_COMPLETE,mem_conn_sm	
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	rtn 
+
+host_create_conn_wait_setup_complete:
+	fetch 1,mem_lmp_conn_state
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	jam CONN_SM_STANDBY,mem_conn_sm	
+
+	rtn
+host_create_conn_wait_setup_complete_rtn:	
+	jam CONN_SM_AUTH_PAIR ,mem_conn_sm
+	rtn
+
+host_create_conn_master_detach:
+	fetch 1, mem_soft_timer
+	increase -1,pdata
+	branch host_create_conn_send_detach,blank//detach
+	store 1, mem_soft_timer
+	rtn 
+host_create_conn_send_detach:
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam LOCAL_HOST,mem_disconn_reason_send
+	jam 0,mem_conn_sm
+	rtn
+host_create_conn_auth_pair:
+	/* checking whether or not to do m/s switch */
+	fetch 1,mem_connection_options
+	bbit1 CONNECTION_SWITCH,host_create_conn_switch
+	bbit1 CONNECTION_AUTH,host_create_conn_auth_pair_true
+host_create_conn_sm_done:
+	jam CONN_SM_DONE,mem_conn_sm
+	rtn
+host_create_conn_auth_pair_true:
+	fetch 1,mem_link_key_exists
+	branch host_create_conn_auth_pair_nokey,blank
+	fetch 1,mem_lmp_conn_state
+	rtnbit0 SENT_SETUP_COMPLETE
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	fetch 4,mem_aurand_send_delay_time
+	arg 100,temp
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	branch host_create_conn_auth
+
+
+
+host_create_conn_auth_pair_nokey:
+	jam CONN_SM_PAIRING,mem_conn_sm
+	jam 4,mem_pin_length
+	setarg 0x3030
+	store 2,mem_pin
+	istore 2,contw
+	jam pincode_state_pincode_ready,mem_pincode_state
+	branch host_create_conn_pairing
+
+host_create_conn_auth_pair_wait:
+	rtn
+host_create_conn_encrypt:
+	fetch 1,mem_connection_options
+	bbit1 CONNECTION_ENCRYPT,host_create_conn_encrypt_start
+	jam CONN_SM_DONE,mem_conn_sm
+	rtn 
+
+host_create_conn_encrypt_start:
+	fetch 1,mem_connection_options
+	set0 CONNECTION_ENCRYPT,pdata
+	store 1,mem_connection_options
+	jam LMP_ENCRYPTION_MODE_REQ,mem_lmo_opcode2  
+	rtn
+
+host_create_conn_encrypt_wait:
+	fetch 1, mem_wait_encryption
+	rtn blank
+	jam CONN_SM_STANDBY,mem_conn_sm
+	branch host_create_conn_encrypt_start 
+
+host_create_conn_encrypt_wait_clear:
+	jam CONN_SM_SEND_SETUP_COMPLETE,mem_conn_sm
+	rtn 
+
+host_auth:
+	fetch 1,mem_op
+	bbit1 op_inrand_req,remote_auth
+	call tid_initiate
+	jam LMP_IN_RAND,mem_lmo_opcode2
+	branch cmd_exit
+remote_auth:
+	fetch 1,mem_op
+	set0 op_inrand_req,pdata
+	store 1,mem_op
+	call lmp_accept_inrand
+	call tid_set_reply
+	branch cmd_exit
+
+pincode_reinit:
+	setarg 4
+	store 1,mem_pin_length
+	setarg 0x3030
+	istore 2,contw
+	istore 2,contw
+	rtn
+	
+
+
+/* ===================== two wire SPI gpio ======================= */
+
+twspi_reset:
+	bpatchx patch31_4,mem_patch31
+	hfetch 1,core_gpio_oe3
+	arg 0x06,temp
+	ior temp,pdata
+	hstore 1,core_gpio_oe3
+	hfetch 1,core_gpio_out3
+	ior temp,pdata
+	hstore 1,core_gpio_out3
+	call twspi_disable
+	hfetch 1,core_gpio_out3
+	set0 1,pdata
+	set0 2,pdata
+	hstore 1,core_gpio_out3	
+	nop 30  
+	branch twspi_enable
+
+twspi_reset2:
+	hfetch 1,core_gpio_oe3
+	arg 0xc0,temp
+	ior temp,pdata
+	hstore 1,core_gpio_oe3
+	hfetch 1,core_gpio_out3
+	ior temp,pdata
+	hstore 1,core_gpio_out3
+	call twspi_disable
+	hfetch 1,core_gpio_out3
+	set0 6,pdata
+	set0 7,pdata
+	hstore 1,core_gpio_out3	
+	nop 30  
+	branch twspi_enable2
+
+twspi_disable:
+	hfetch 1,core_gpio_sel1
+	and pdata,0xfc,pdata
+	hstore 1,core_gpio_sel1  //disable spi
+	rtn
+twspi_enable:
+	hfetch 1,core_gpio_sel1
+	or pdata,0x01,pdata
+	hstore 1,core_gpio_sel1  //enable spi
+	rtn
+twspi_enable2:
+	hfetch 1,core_gpio_sel1
+	or pdata,0x03,pdata
+	set0 4,pdata
+	hstore 1,core_gpio_sel1  //enable spi2
+	rtn
+
+// input read reg number: pdata 
+//output reg data: pdata
+sensor_read:
+	copy pdata,regb
+	call spi_ncs_enable
+	nop 100
+	copy regb,pdata
+	call twspi_read
+	copy pdata,regb
+	call spi_ncs_disable
+	nop 100
+	copy regb,pdata
+	rtn
+// input write reg number: pdata 
+sensor_write:
+	copy pdata,regb
+	call spi_ncs_enable
+	nop 100
+	copy regb,pdata
+	call twspi_write
+	call spi_ncs_disable
+	nop 100
+	rtn
+//spi gpio init .
+//0xff :disable spi ncs gpio init
+spi_ncs_gpio_init:
+	fetcht 1,mem_spi_ncs_gpio
+	branch gpio_config_output
+
+//nsc gpio ouput low
+spi_ncs_enable:
+	fetcht 1,mem_spi_ncs_gpio
+	branch gpio_out_active
+
+//ncs gpio output high
+spi_ncs_disable:
+	fetcht 1,mem_spi_ncs_gpio
+	branch gpio_out_inactive
+
+
+twspi_write:
+	branch spid_write_reg
+	
+twspi_read:
+	branch spid_read_reg
+
+
+
+/* ===================== code loading ======================= */
+
+
+read_function_aes:
+	nbranch read_function,user
+	hfetch 1,core_gpio_key2
+	or_into 0x2,pdata   	// enable aes 
+	hstore 1,core_gpio_key2
+read_function:
+	copy temp,null
+	branch read_fuction_zero,zero
+	copy regc,pc
+read_fuction_zero:
+	isolate0 0,null
+	branch set_ucode_status
+	
+/* return temp = block length */
+get_block_header:
+	force 4,temp
+get_block_header0:
+	arg mem_ucode_buf,rega
+	hfetch 1,core_gpio_key2
+	and_into 0xfd,pdata   	// disable aes for header
+	hstore 1,core_gpio_key2
+	call read_function
+	arg 0x55aa,rega
+	fetch 2,mem_ucode_buf
+	ifetcht 2,contr
+	isub rega,null
+	rtn	
+
+read_first_block:
+	arg 2,temp
+	arg mem_ucode_ptr,rega
+	call read_function
+	fetch 2,mem_ucode_ptr
+	store 2,mem_addr_mi
+	call get_iv,user
+	rtn
+	
+get_iv:
+	arg 16,temp
+	arg mem_ucode_keybuf,rega
+	hfetch 1,core_gpio_key2
+	and_into 0xfd,pdata   // disable aes for iv
+	hstore 1,core_gpio_key2
+	call read_function
+	arg mem_ucode_keybuf,contr
+	arg 16,loopcnt
+	call aes_load_data
+	call aes_init
+	call aes_clear_data
+	branch do_aes_cbc					/* generate first IV */
+
+load_storage:
+	disable match
+	call get_block_header
+	nrtn zero
+	enable match
+	jam 0x80, core_ucode_ctrl
+	jam 0,core_ucode_hi
+	jam 0,core_ucode_low
+	arg core_ucode_data,rega
+	call read_function_aes
+	jam 0x0, core_ucode_ctrl
+load_storage_loop:
+	arg 6,temp
+	call get_block_header0
+	nrtn zero
+	ifetch 2,contr
+	iforce rega
+	call read_function
+	branch load_storage_loop
+
+	
+	/* only load memory data from eeprom */
+reload_eeprom:
+	call clean_mem
+	setarg 0x1000
+	store 2,mem_addr_mi
+	arg iicd_read_eep,regc
+	arg 2,loopcnt
+reload_eeprom_loop:
+	call get_block_header
+	nrtn zero
+	fetch 2,mem_addr_mi
+	byteswap pdata,pdata
+	iadd temp,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+	loop reload_eeprom_loop
+	branch load_storage_loop
+	
+loadcode:
+	call clean_mem
+	disable user
+	call otp_enable_chgpump
+	setarg otp_ucode_flag
+	arg mem_otp_ucode_flag,rega
+	arg 2,temp
+	call otpd_read_data
+	fetch 2,mem_otp_ucode_flag
+	bbit0 otp_uflag_aes, loadcode_otp
+	jam 0x25,core_clkoff			// disable debug uart
+	setarg otp_ucode_aeskey
+	arg mem_ucode_keybuf,rega
+	arg 16,temp
+	call otpd_read_data
+	jam lock_otp,core_misc_ctrl	// disable further read/write of key
+	set1 mark_otp_encrypt,mark	
+	arg mem_ucode_keybuf,contr
+	call load_key
+	enable user					// set user for aes
+loadcode_otp:
+	jam 0,mem_loadcode_times
+loadcode_otp_2:
+	call loadcode_check_times
+	fetch 2,mem_otp_ucode_flag
+	byteswap pdata,pdata
+	arg 0x7ff,temp
+	iand temp,pdata
+	branch loadcode_iic, zero
+	call otp_set_addr
+	arg otpd_read_code,regc
+	call get_iv,user
+	call load_storage
+	fetch 1,mem_ucode_status
+	bbit0 0,loadcode_otp_2			// crc error, try again
+	
+loadcode_iic:
+	call otp_disable_chgpump
+	jam 0,mem_loadcode_times
+loadcode_iic_2:	
+	call loadcode_check_times
+	call clear_eeprom_size_2k
+	fetch 1,mem_otp_ucode_flag
+	bbit1 otp_uflag_skip_eep,loadcode_spi
+	call loadcode_iic_by_eeprom
+	nbranch loadcode_iic_eeprom_2k,match
+	fetch 1,mem_ucode_status
+	bbit0 0,loadcode_iic_2			// crc error, try again
+	branch loadcode_hci
+loadcode_iic_eeprom_2k:
+	call set_eeprom_size_2k
+	fetch 1,mem_otp_ucode_flag
+	bbit1 otp_uflag_skip_eep,loadcode_spi
+	call loadcode_iic_by_eeprom
+	nbranch loadcode_spi,match
+	fetch 1,mem_ucode_status
+	bbit0 0,loadcode_iic_2			// crc error, try again
+	branch loadcode_hci
+	
+loadcode_spi:
+	jam 0,mem_loadcode_times
+loadcode_spi_2:
+	call loadcode_check_times
+	fetch 1,mem_otp_ucode_flag
+	bbit1 otp_uflag_skip_flash, loadcode_hci
+	setarg 0x0
+	store 3,mem_addr_hi
+	call spid_init_flash
+	arg spid_load_flash,regc
+	call read_first_block
+	call load_storage
+	nbranch loadcode_hci,match
+	fetch 1,mem_ucode_status
+	bbit0 0,loadcode_spi_2			// crc error, try again
+
+loadcode_hci:
+	bmark1 mark_otp_encrypt,loadcode_hci_enc
+	call clear_key_buf
+loadcode_hci_enc:
+	fetch 1,mem_otp_ucode_flag
+	bbit0 otp_uflag_hci,clear_key_buf
+	jam 0x21,core_clkoff			// enable debug uart
+	call hci_init
+loadcode_hci_loop:
+	call hci_rx_packet
+	branch loadcode_hci_loop
+
+clear_key_buf:
+	setarg 0
+	store 8,mem_ucode_keybuf
+	store 8,mem_ucode_keybuf+8
+	force regidx_key,regext_index
+	call aes_clear
+	jam 0x21,core_clkoff		// enable debug uart
+	rtn
+	
+
+loadcode_iic_by_eeprom:
+	setarg 0x0
+	store 2,mem_addr_mi
+	arg iicd_read_eep,regc
+	call iicd_init_12m
+	call read_first_block
+	branch load_storage
+
+
+loadcode_check_times:
+	fetch 1,mem_loadcode_times
+	increase 1,pdata
+	sub pdata,3,null
+	nbranch loadcode_error,positive
+	store 1,mem_loadcode_times
+	rtn
+
+loadcode_error:
+	call clear_key_buf
+	call ice_break
+	rtn
+
+
+/* true flag is set into status */
+set_ucode_status:
+	fetch 1,mem_ucode_status
+	lshift pdata,pdata
+	setflag true,0,pdata
+	isolate0 15,rega
+	rtn true
+	store 1,mem_ucode_status
+	rtn
+
+	/* queue is bit position of hw done status */
+decrypt_code:
+	hfetch 1,core_gpio_key2
+	rtnbit0 1
+	branch decrypt_code_skip	/* skip to key generation at first for speed */
+decrypt_code_loop:
+	hfetch 1,core_dma_status
+	qisolate1 pdata
+	rtn true
+decrypt_code_skip:
+	hfetch 1,core_misc_status
+	bbit0 1,decrypt_code_loop
+	call do_aes_cbc
+	branch decrypt_code_loop
+
+
+
+load_ucode:
+	fetch 2,mem_patch_ptr
+	rtn blank
+	jam 0x80, core_ucode_ctrl
+	jam 0,core_ucode_hi
+	jam 0,core_ucode_low
+	fetcht 2,mem_patch_len
+	lshift2 temp,loopcnt
+	iforce contr
+load_ucode_loop:
+	ifetch 1,contr
+	hstore 1,core_ucode_data
+	loop load_ucode_loop
+	jam 0x0, core_ucode_ctrl
+	rtn
+
+
+/* ===================== SPI dma ======================= */
+
+spid_init:
+	bpatchx patch31_5,mem_patch31
+	call spid_init_common
+	branch twspi_enable
+
+spid_init2:
+	call spid_init_common
+	call twspi_disable
+	branch twspi_enable2
+	
+spid_init_common:
+	fetch 1,mem_spi_init_clk
+	hstore 1,core_spid_ctrl	// A7530 should at least 34, or write fail
+	fetch 1,mem_spi_init_delay_time
+	hstore 1,core_spid_delay	// 4us delay
+	setarg mem_spid_tbuf
+	hstore 2,core_spid_txaddr
+	setarg mem_spid_rbuf
+	hstore 2,core_spid_rxaddr
+	branch twspi_disable
+	
+spid_reset:
+	hfetch 1,core_spid_ctrl
+	set1 7,pdata
+	hstore 1,core_spid_ctrl
+	set0 7,pdata
+	hstore 1,core_spid_ctrl
+	rtn
+
+
+/* pdata 6:0 is reg address, 15:8 is data to write */
+spid_write_reg:
+	set1 7,pdata
+	store 2,mem_spid_tbuf
+	bpatchx patch31_6,mem_patch31
+	jam 2,core_spid_txlen
+	jam 0,core_spid_rxlen
+	jam spid_start,core_misc_ctrl
+	branch wait_spid_done
+
+/* pdata 6:0 is reg address */
+spid_read_reg:
+	force 1,temp
+/* pdata 6:0 is burst reg address, temp is bytes to read */
+spid_read_regs:
+//	nop 100
+	store 1,mem_spid_tbuf
+	bpatchx patch31_7,mem_patch31
+	jam 1,core_spid_txlen
+	hstoret 2,core_spid_rxlen
+	jam spid_start,core_misc_ctrl
+	call wait_spid_done
+	fetch 1,mem_spid_rbuf
+	rtn
+
+wait_spid_done:
+	fetch 2,mem_afh_error_total
+	increase 1,pdata
+	store 2,mem_afh_error_total
+	hfetch 1,core_dma_status
+	bbit0 spid_done,wait_spid_done
+	rtn
+
+spid_init_flash:
+	jam 0x40,core_spid_ctrl
+	jam 0x0,core_spid_delay
+	hfetch 1,core_gpio_sel1
+	set0 0,pdata
+	set1 1,pdata
+	hstore 1,core_gpio_sel1
+	setarg 0
+	store 4,mem_spid_tbuf
+	rtn
+
+
+spid_unlock_flash:
+	setarg 0
+	hstore 2,core_spid_rxlen
+	setarg 1
+	hstore 2,core_spid_txlen
+	setarg mem_spid_tbuf
+	hstore 2,core_spid_txaddr
+	jam 6,mem_spid_tbuf
+	jam spid_start,core_misc_ctrl
+	branch wait_spid_done
+
+
+/**
+ ******************************************************************************
+ ** \brief  write flash
+ **
+ ** \param [in]  rega: 2byte write ptr    
+ **			pdata:3byte flash address  
+ ** 			temp:2byte write data length
+ **
+ ** \retval user  0: flash buys 1:write flash setting complate
+ **
+ ******************************************************************************/
+
+flash_write:
+	disable user
+	copy pdata,regb
+	fetch 1,mem_spi_write_flash_sm
+	rtnne FLASH_SM_NO_BUYS
+	enable user
+	copy regb,pdata
+	branch flash_write_start
+
+
+flash_write_spi_sm_timer:
+	fetch 1,mem_spi_write_flash_sm 	
+	beq FLASH_SM_START,flash_write_start
+	beq FLASH_SM_ERASE_SECTOR,flash_erase_sector
+	beq FLASH_SM_WAIT_ERASE_SECTOR,flash_wait_erase_sector
+	beq FLASH_SM_WRITE_DATA,flash_write_data
+	beq FLASH_SM_WAIT_WRITE_DATA,flash_wait_write_data
+	rtn
+
+flash_write_start:
+	store 3,mem_spi_write_addr
+	copy rega,pdata
+	store 2,mem_spi_write_ptr
+	storet 2,mem_spi_write_len
+	jam FLASH_SM_ERASE_SECTOR,mem_spi_write_flash_sm
+	branch spid_init_flash
+flash_erase_sector:
+	call spid_init_flash
+	jam FLASH_SM_WAIT_ERASE_SECTOR,mem_spi_write_flash_sm
+	call spid_unlock_flash
+	arg mem_spid_tbuf,rega
+	fetch 3,mem_spi_write_addr
+	jam 4,core_spid_txlen
+	arg FLASH_COMMAND_SECTOR_ERASE,temp
+	branch spid_write_flash_common
+	
+flash_wait_erase_sector:
+	call spid_init_flash
+	call spid_unlock_flash
+	setarg FLASH_READ_SATUS
+	call spid_read_reg
+	rtnbit1 FLASH_STATUS_WIP
+	jam FLASH_SM_WRITE_DATA,mem_spi_write_flash_sm
+	rtn
+flash_write_data:
+	call spid_init_flash
+	jam FLASH_SM_WAIT_WRITE_DATA,mem_spi_write_flash_sm
+	call spid_unlock_flash
+	call flash_data_preserve
+	call spid_write_flash
+	branch flash_data_recover
+flash_wait_write_data:
+	call spid_init_flash
+	call spid_unlock_flash
+	setarg FLASH_READ_SATUS
+	call spid_read_reg
+	rtnbit1 FLASH_STATUS_WIP
+	jam FLASH_SM_NO_BUYS,mem_spi_write_flash_sm
+	fetch 2,mem_cb_spi_flash_write_complate
+	branch callback_func
+flash_data_recover:
+	fetch 4,mem_temp
+	fetcht 2,mem_spi_write_ptr
+	increase -4,temp
+	istore 4,temp
+	rtn
+flash_data_preserve:
+	fetcht 2,mem_spi_write_ptr
+	copy temp,rega
+	increase -4,temp
+	ifetch 4,temp
+	store 4,mem_temp
+	fetcht 2,mem_spi_write_len
+	fetch 3,mem_spi_write_addr
+	rtn
+
+
+/* pdata is flash address, rega pointers to txdata(4 ahead bytes should be left), temp is length */
+spid_write_flash:
+	increase 4,temp
+	hstoret 2,core_spid_txlen
+	arg FLASH_COMMAND_WRITE_DATA,temp
+	increase -4,rega
+spid_write_flash_common:
+
+	istoret 1,rega
+	rshift16 pdata,temp
+	istoret 1,contw
+	rshift8 pdata,temp
+	istoret 1,contw
+	istore 1,contw
+	deposit rega
+	hstore 2,core_spid_txaddr
+	setarg 0
+	hstore 2,core_spid_rxlen
+	jam spid_start,core_misc_ctrl
+	branch wait_spid_done
+
+
+/* temp is length, rega pointers to buf   */
+spid_read_flash:
+	hstoret 2,core_spid_rxlen
+	rshift16 pdata,temp
+	storet 1,mem_addr_hi
+	rshift8 pdata,temp
+	storet 1,mem_addr_mi
+	store 1,mem_addr_lo
+	setarg 4
+	hstore 2,core_spid_txlen
+	jam FLASH_COMMAND_READ_DATA,mem_spid_tbuf
+	setarg mem_spid_tbuf
+	hstore 2,core_spid_txaddr
+	deposit rega
+	hstore 2,core_spid_rxaddr
+	hfetch 1,core_spid_ctrl
+	isolate0 15,rega
+	setflag true,6,pdata
+	hstore 1,core_spid_ctrl
+	jam spid_start,core_misc_ctrl
+spi_read_flash_wait:
+	hfetch 1,core_dma_status
+	bbit1 7,spi_read_flash_wait			// waiting for spid write
+	arg spid_done,queue
+	branch wait_spid_done
+
+
+/* temp is length, rega pointers to buf  */
+spid_load_flash:
+	hstoret 2,core_spid_rxlen
+	setarg 4
+	hstore 2,core_spid_txlen
+	jam 3,mem_spid_tbuf
+	setarg mem_spid_tbuf
+	hstore 2,core_spid_txaddr
+	deposit rega
+	hstore 2,core_spid_rxaddr
+	hfetch 1,core_spid_ctrl
+	isolate0 15,rega
+	setflag true,6,pdata
+	hstore 1,core_spid_ctrl
+	jam spid_start,core_misc_ctrl
+spi_load_flash_wait:
+	hfetch 1,core_dma_status
+	bbit1 7,spi_load_flash_wait			// waiting for spid write
+	arg spid_done,queue
+	call decrypt_code
+	call wait_spid_done
+	isolate1 spid_crcok,pdata
+	call set_ucode_status
+	fetch 1,mem_addr_hi
+	lshift16 pdata,regb
+	fetch 1,mem_addr_mi
+	lshift8 pdata,pdata
+	ior regb,regb
+	fetch 1,mem_addr_lo
+	ior regb,pdata
+	iadd temp,pdata
+	store 1,mem_addr_lo
+	rshift8 pdata,pdata
+	store 1,mem_addr_mi
+	rshift8 pdata,pdata
+	store 1,mem_addr_hi
+	rtn
+
+/*****************************************************************************
+*soft reset chip
+*****************************************************************************/
+soft_reset_chip:
+	jam 1,core_reset
+	rtn
+
+
+
+/* ===================== I2C dma ======================= */
+
+iic_init_390k:	//390khz
+	jam 12,core_iicd_scl_low
+	jam 13,core_iicd_scl_high
+	jam 13,core_iicd_start_setup
+	jam 13,core_iicd_start_hold
+	jam 13,core_iicd_stop_setup
+	jam 12,core_iicd_data_setup
+  	branch iicd_init_gpio	
+
+
+iicd_init_12m:
+	jam 5,core_iicd_scl_low
+ 	jam 7,core_iicd_scl_high
+	jam 7,core_iicd_start_setup
+	jam 7,core_iicd_start_hold
+	jam 7,core_iicd_stop_setup
+	jam 5,core_iicd_data_setup
+iicd_init_gpio:	
+	hfetch 1,core_gpio_pu3
+	or_into 0xc0,pdata
+	hstore 1,core_gpio_pu3
+	hfetch 1,core_gpio_sel1
+	or_into 0x10,pdata
+	hstore 1,core_gpio_sel1
+	rtn
+
+
+
+wait_iicd_done:
+	hfetch 1,core_dma_status
+	bbit0 iicd_done,wait_iicd_done
+	rtn
+
+/*
+pdata is tx length
+rega is points to tx buffer
+regb is points to rx buffer
+temp is rx length
+*/
+iicd_read_data:
+	hstore 2,core_iicd_txlen
+	deposit rega
+	hstore 2,core_iicd_txaddr	
+	deposit regb
+	hstore 2,core_iicd_rxaddr
+	deposit temp	
+	hstore 2,core_iicd_rxlen
+	arg 1,temp
+	nsetflag blank,1,temp
+	hstore 1,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	branch wait_iicd_done
+
+
+set_eeprom_size_2k:
+	set1 mark_eeprom_size,mark
+	jam 0x08,mem_eeprom_block_size
+	rtn
+
+clear_eeprom_size_2k:
+	set0 mark_eeprom_size,mark
+	jam 0x20,mem_eeprom_block_size
+	rtn
+
+
+iicd_read_eep_data_size_2k:
+ 	fetch 1,mem_eeprom_base
+	iadd regb,pdata
+	store 1,mem_addr_mi
+	branch iicd_read_eep_size_2k
+
+iicd_read_eep_size_2k_lcadcode:
+	fetch 2,mem_addr_mi
+	byteswap pdata,pdata
+	store 1,mem_addr_mi
+	
+//length:temp 
+//mem ptr:rega
+//eeprom addr:pdata
+iicd_read_eep_size_2k:
+ 	setarg 3
+	hstore 2,core_iicd_txlen
+	jam 0xa0,mem_iicd_tbuf
+	jam 0xa1,mem_iicd_tbuf+2
+	branch iicd_read_eep_common
+
+
+//length:temp 
+//mem ptr:rega
+//eeprom addr:regb
+iicd_write_protect_eep_data:
+	storet 2,mem_temp
+	call iicd_eeprom_write_enable
+	fetcht 2,mem_temp
+	call iicd_write_eep_data
+	branch iicd_eeprom_write_disable
+	
+iicd_eeprom_write_enable:
+	fetch 1,mem_eeprom_wp_gpio
+	rtneq GPIO_DISABLE
+	bbit0 6,iicd_wp_gpio_output_low
+	setarg 150000
+	call sleep
+iicd_wp_gpio_output_low:
+	fetcht 1,mem_eeprom_wp_gpio
+	branch gpio_out_active
+	
+iicd_eeprom_write_disable:
+	fetcht 1,mem_eeprom_wp_gpio
+	branch gpio_out_inactive
+	
+//length:temp 
+//mem ptr:rega
+//eeprom addr offset:regb
+iicd_read_eep_data:
+	bpatchx patch32_0,mem_patch32
+	bmark1 mark_eeprom_size,iicd_read_eep_data_size_2k
+	fetch 2,mem_eeprom_base
+	iadd regb,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+
+/* rega pointers to buf, temp is length  */
+iicd_read_eep:
+	bpatchx patch32_1,mem_patch32
+	bmark1 mark_eeprom_size,iicd_read_eep_size_2k_lcadcode
+	setarg 4
+	hstore 2,core_iicd_txlen
+	jam 0xa0,mem_iicd_tbuf
+	jam 0xa1,mem_iicd_tbuf+3
+iicd_read_eep_common:	
+	setarg mem_iicd_tbuf
+	hstore 2,core_iicd_txaddr
+	hstoret 2,core_iicd_rxlen
+	deposit rega
+	hstore 2,core_iicd_rxaddr
+	setarg 2
+	isolate0 15,rega
+	setflag true,0,pdata
+	hstore 1,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	arg iicd_done,queue
+	call decrypt_code
+	call wait_iicd_done
+	isolate1 iicd_crcok,pdata
+	call set_ucode_status
+	bmark1 mark_eeprom_size,iicd_read_eep_load_code_size_2k
+	fetch 2,mem_addr_mi
+	byteswap pdata,pdata
+	iadd temp,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+	rtn
+
+iicd_read_eep_load_code_size_2k:
+	fetch 1,mem_addr_mi
+	iadd temp,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+	rtn
+	
+
+//length:temp 
+//mem ptr:rega
+//eeprom addr offset:regb
+iicd_write_eep_data:
+	fetch 2,mem_eeprom_base
+	iadd regb,pdata
+
+//cuur ptr:pdata length:temp buf:rega
+iicd_write_ota_data:
+	store 2,mem_pdatatemp //curr ptr
+	bpatchx patch32_2,mem_patch32
+	storet 2,mem_temp	//len
+	copy rega,pdata
+	store 2,mem_contr
+iicd_write_eep_loop:
+	call iicd_eep_transparency
+
+	fetcht 2,mem_regb
+	fetch 2,mem_contr
+	copy pdata,rega
+	fetch 2,mem_pdatatemp
+	
+	call iicd_write_eep
+	
+	fetch 2,mem_regb
+	fetcht 2,mem_contr
+	iadd temp,temp
+	storet 2,mem_contr
+	fetcht 2,mem_pdatatemp
+	iadd temp,temp
+	storet 2,mem_pdatatemp
+	fetch 2,mem_temp
+	nbranch iicd_write_eep_loop,blank
+	rtn
+	
+//in:
+//1.size 2.len 3.src 4.des
+//mem_regc page's area
+//mem_pdatatemp curr ptr
+//mem_temp all len      
+//mem_regb curr len
+iicd_eep_transparency:
+	bpatchx patch32_3,mem_patch32
+	fetch 1,mem_eeprom_block_size
+	increase -1,pdata
+	fetcht 2,mem_pdatatemp
+	ior temp,pdata
+	increase 1,pdata
+	store 3,mem_regc
+
+	fetch 2,mem_temp
+	iadd temp,pdata
+
+	fetcht 3,mem_regc
+	isub temp,pdata
+	nbranch iicd_eep_deal_short_packet,positive
+	store 2,mem_temp
+	fetch 3,mem_regc
+	fetcht 2,mem_pdatatemp
+	isub temp,pdata
+	store 2,mem_regb
+	rtn
+iicd_eep_deal_short_packet:
+	fetch 2,mem_temp
+	store 2,mem_regb
+	setarg 0
+	store 2,mem_temp
+	rtn
+
+iicd_write_eep_size_2k:
+	increase 2,temp
+	hstoret 2,core_iicd_txlen
+	increase -2,rega
+	ifetcht 3,rega
+	copy temp,regb
+	arg 0xa0,temp
+	istoret 1,rega
+//	byteswap pdata,pdata
+	istore 1,contw
+	branch iicd_write_eep_common
+
+	/* pdata is eeprom address, rega pointers to txdata(3 ahead bytes should be left), temp is length */
+iicd_write_eep:
+	copy pdata,regb
+	bpatchx patch32_4,mem_patch32
+	bmark1 mark_eeprom_size,iicd_write_eep_size_2k
+	copy regb,pdata
+	increase 3,temp
+	hstoret 2,core_iicd_txlen
+	increase -3,rega
+	ifetcht 3,rega
+	copy temp,regb
+	arg 0xa0,temp
+	istoret 1,rega
+	byteswap pdata,pdata
+	istore 2,contw
+iicd_write_eep_common:	
+	deposit rega
+	hstore 2,core_iicd_txaddr
+	setarg 0
+	hstore 2,core_iicd_rxlen
+	jam 1,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	call wait_iicd_done
+	copy regb,pdata
+	istore 3,rega
+	
+iic_check_eeprom_standby:
+	bpatchx patch32_5,mem_patch32
+	jam 0,mem_iicd_tbuf+3
+iic_check_eeprom_standby_wait:
+	setarg 1
+	hstore 2,core_iicd_txlen
+	jam 0xa0,mem_iicd_tbuf
+	setarg mem_iicd_tbuf
+	hstore 2,core_iicd_txaddr
+	setarg 0
+	hstore 2,core_iicd_rxlen
+	hstore 2,core_iicd_rxaddr
+	setarg 3
+	hstore 1,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	call wait_iicd_done
+	hfetch 1,core_dma_status
+	rtnbit0 iicd_ack
+	nop 1500
+	fetch 1,mem_iicd_tbuf+3
+	increase 1,pdata
+	store 1,mem_iicd_tbuf+3
+	sub pdata,40,null
+	nrtn positive//polling timeout 6ms
+	branch iic_check_eeprom_standby_wait
+
+/* ===================== OTP ======================= */
+
+otp_enable_chgpump:
+	jam 0x70,rfen_chgpump
+	nop param_chgpump_delay
+	rtn
+
+otp_disable_chgpump:
+	jam 0x30,rfen_chgpump
+	rtn
+	
+otp_set_addr:
+	lshift3 pdata,pdata
+	hstore 2,core_otp_addr
+	jam 0,core_otpd_ctrl
+	rtn	
+
+/* pdata = otp address, rega pointers data, loopcnt is count */
+otp_write:
+	call otp_set_addr
+	call otp_ce
+otp_program:
+	ifetcht 1,rega
+	increase 1,rega
+	force 0,queue
+otp_program_bit:
+	qisolate0 temp
+	branch otp_skip_0,true
+	hfetch 1,core_otp_din
+	set1 6,pdata				/* din */
+	set1 7,pdata				/* dle */
+	hstore 1,core_otp_din
+	jam 0x02,core_otp_ctrl	/* web */
+	jam 0x82,core_otp_ctrl
+	set0 7,pdata				/* dle */
+	hstore 1,core_otp_din
+	jam 0x8a,core_otp_ctrl	/* pgmen */
+	nop 11
+	jam 0xca,core_otp_ctrl	/* vppen */
+	nop 33
+	jam 0x4a,core_otp_ctrl	/* web 2nd */
+	nop 44
+	jam 0xca,core_otp_ctrl	/* release web */
+	nop 22
+	jam 0x8a,core_otp_ctrl	/* release vppen */
+	nop 33
+	jam 0x82,core_otp_ctrl	/* release pgmen */
+	nop 1
+	jam 0x92,core_otp_ctrl	/* pgmvfy */
+	nop 10
+	jam 0xb2,core_otp_ctrl	/* readen */
+	hfetch 1,core_otp_rdata
+	jam 0x92,core_otp_ctrl	/* release readen */
+	nop 1
+	jam 0x82,core_otp_ctrl	/* release pgmvfy */
+	qisolate0 pdata
+	branch otp_program_bit,true	/* program error */
+otp_skip_0:
+	hfetch 2,core_otp_addr
+	increase 1,pdata
+	hstore 2,core_otp_addr
+	increase 1,queue
+	compare 8,queue,0xf
+	nbranch otp_program_bit,true
+	loop otp_program
+	jam 0x83,core_otp_ctrl
+	rtn
+
+otp_ce:
+	jam 0x82,core_otp_ctrl	/* ceb */
+	nop 12
+	jam 0x80,core_otp_ctrl	/* rstn */
+	jam 0x82,core_otp_ctrl	/* release rstn */
+	nop 150					/* waiting for vdd25 stable */
+	rtn
+
+	/* rega points to data, temp is count */
+otpd_read_init:
+	call otp_ce
+	jam 0xa2,core_otp_ctrl	/* readen */
+	deposit rega
+	hstore 2,core_otpd_addr
+	set1 11,temp
+	isolate0 15,pdata
+	setflag true,15,temp
+	hstoret 2,core_otpd_len
+	jam otpd_start,core_misc_ctrl
+	rtn
+
+otpd_wait_end:
+	hfetch 1,core_dma_status
+	bbit0 otpd_done,otpd_wait_end
+	rtn
+	
+	/* pdata=otp address, rega points to data, temp is count */
+otpd_read_data:
+	call otp_set_addr
+	call otpd_read_init
+	call otpd_wait_end
+	jam 0x83,core_otp_ctrl	/* release ceb */
+	rtn
+
+
+
+/* rega pointers to buf, temp is length */
+otpd_read_code:	
+	hfetch 2,core_current_otp_addr
+	hstore 2,core_otp_addr
+	call otpd_read_init
+	arg otpd_done,queue
+	call decrypt_code
+	call otpd_wait_end
+	isolate1 otpd_crcok,pdata	
+	call set_ucode_status
+	jam 0x83,core_otp_ctrl	/* release ceb */
+	rtn
+
+/* ===================== uart dma ======================= */
+uartd_prepare_tx:
+	hfetch 2,core_uart_twptr
+	iforce contwu
+	rtn
+
+uartd_send:
+	deposit contwu
+	hstore 2,core_uart_twptr
+	rtn
+
+uartd_rxdone:
+	deposit contru
+	hstore 2,core_uart_rrptr
+	rtn
+
+uartd_prepare_rx:
+	hfetch 2,core_uart_rrptr
+	copy pdata,contru
+	rtn
+
+uart_set_baud_by_mem:
+	fetch uart_baud_len,mem_baud
+	hstore uart_baud_len,core_uart_baud
+	rtn
+
+uart_copy_tx_bytes_fast:
+	deposit loopcnt
+	rtn blank
+uart_copy_tx_bytes_fast_loop:
+	increase -8,loopcnt
+	call uart_tx_8_bytes,positive
+	rtn zero
+	branch uart_copy_tx_bytes_fast_loop,positive
+	increase 8,loopcnt
+uart_copy_tx_bytes_fast_loop_four:
+	increase -4,loopcnt
+	call uart_tx_4_bytes,positive
+	rtn zero
+	branch uart_copy_tx_bytes_fast_loop_four,positive
+	increase 4,loopcnt
+	branch uart_copy_tx_bytes
+
+uart_tx_8_bytes:
+	ifetch 8,contr
+	istore 8,contwu
+	rtn
+
+uart_tx_4_bytes:
+	ifetch 4,contr
+	istore 4,contwu
+	rtn
+
+uart_copy_tx_bytes:
+	deposit loopcnt
+	rtn blank
+uart_copy_tx_bytes_loop:
+	ifetch 1,contr
+	istore 1,contwu
+	loop uart_copy_tx_bytes_loop
+	rtn
+
+uart_copy_rx_bytes_fast:
+	deposit loopcnt
+	rtn blank
+uart_copy_rx_bytes_fast_loop:
+	increase -8,loopcnt
+	call uart_rx_8_bytes,positive
+	rtn zero
+	branch uart_copy_rx_bytes_fast_loop,positive
+	increase 8,loopcnt
+uart_copy_rx_bytes_fast_loop_four:
+	increase -4,loopcnt
+	call uart_rx_4_bytes,positive
+	rtn zero
+	branch uart_copy_rx_bytes_fast_loop_four,positive
+	increase 4,loopcnt
+	branch uart_copy_rx_bytes
+
+uart_rx_8_bytes:
+	ifetch 8,contru
+	istore 8,contw
+	rtn
+
+uart_rx_4_bytes:
+	ifetch 4,contru
+	istore 4,contw
+	rtn
+
+
+uart_copy_rx_bytes:
+	deposit loopcnt
+	rtn blank
+uart_copy_rx_bytes_loop:
+	ifetch 1,contru
+	istore 1,contw
+	loop uart_copy_rx_bytes_loop
+	rtn
+
+
+uart_copy_rx2tx:
+	deposit loopcnt
+	rtn blank
+uart_copy_rx2tx_loop:
+	ifetch 1,contru
+	istore 1,contwu
+	loop uart_copy_rx2tx_loop
+	rtn
+
+
+/* ===================== eeprom data ======================= */
+
+app_store_nvram_event:
+	jam BT_EVT_STORE_NVRAM,mem_fifo_temp
+	branch ui_ipc_send_event
+
+check_51cmd_store_reconn_info:
+check_51cmd_update_device_record:
+	bpatchx patch32_6,mem_patch32
+	fetch 1,mem_nv_data_number
+	rtn blank		// not nv data
+	call check_nvram
+	call init_device_list,zero
+	call nvram_find_addr_from_bd_list
+write_device_record:
+	fetch 1,mem_nv_data_number
+	icopy regc
+	fetcht 2,mem_nv_data_ptr
+	storet 2,mem_list_item_ptr
+write_device_loop_find:
+	copy regc,pdata
+	branch app_store_nvram_event,blank  //EEPROM
+	increase -1,regc
+	copy temp,rega
+	ifetch 1,rega
+	fetcht 1,mem_select_list_item
+	isub temp,null
+	call set_index_finded_device,zero
+	branch write_device_loop_find0,positive
+	ifetch 1,rega
+	increase 1,pdata
+	istore 1,rega
+write_device_loop_find0:
+	fetcht 2,mem_list_item_ptr
+	increase NV_DATA_LEN,temp
+	storet 2,mem_list_item_ptr
+	branch write_device_loop_find
+
+set_index_finded_device:
+	setarg 0
+	istore 1,rega
+	fetch 1,mem_temp_reconn_record
+	istore 1,contw	
+	bne REC_3_MODE,set_index_finded_device_ble_mode
+	arg mem_link_key,regb
+set_index_find_device_MASTER_ADDR:
+	ifetch 6,contr
+	istore 8,contw
+	setarg 0
+	istore 8,contw
+	copy regb,contr
+store_rec_data_common:
+	call memcpy16
+	force 1,null
+	rtn
+
+set_index_finded_device_ble_mode:
+	beq REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,set_index_finded_device_IRK
+	beq REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,set_index_finded_device_EDIV
+	arg mem_le_ltk,regb
+	branch set_index_find_device_MASTER_ADDR
+
+set_index_finded_device_IRK:
+	arg mem_le_irk,contr
+	call memcpy16
+store_ble_rec_data_common:
+	arg mem_le_ltk,contr
+	branch store_rec_data_common
+
+set_index_finded_device_EDIV:
+	arg mem_le_rand,contr
+	call memcpy16
+	branch store_ble_rec_data_common
+
+
+nvram_find_addr_from_bd_list:
+	call disable_user
+	fetch 1,mem_nv_data_number
+	rtn blank		// not nv data
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,find_addr_from_bd_list_SPP_mode
+find_addr_from_bd_list_ble_mode:
+	bpatchx patch32_7,mem_patch32
+	fetch 1,mem_le_conn_peer_addr_type
+	beq MASTER_PUBLIC_ADDR,find_addr_from_bd_list_static_addr
+	fetch 1,mem_le_plap+5
+	compare 0xc0,pdata,0xc0
+	branch find_addr_from_bd_list_static_addr,true
+	compare 0x40,pdata,0xc0
+	branch find_addr_from_bd_list_random_addr,true
+	compare 0x00,pdata,0xc0
+	branch find_addr_from_bd_list_random_non_resolvable_private_address,true
+find_addr_from_bd_list_static_addr:
+	jam REC_4_MODE_STATIC_ADDRESS,mem_temp_reconn_record
+	fetch 6,mem_le_plap
+	branch find_addr_from_bd_list_common
+	
+find_addr_from_bd_list_random_non_resolvable_private_address:	
+	jam REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,mem_temp_reconn_record
+	branch find_addr_from_bd_list_common
+
+//input :pdata EDIV and rands
+find_addr_from_bd_list_random_addr:
+	jam REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,mem_temp_reconn_record
+	branch find_addr_from_bd_list_common
+	
+//input :pdata EDIV and rands
+find_addr_from_bd_list_SPP_mode:
+	bpatchx patch33_0,mem_patch33
+	jam REC_3_MODE,mem_temp_reconn_record
+	fetch 6,mem_plap
+find_addr_from_bd_list_common:
+	store 6,mem_temp_reconn_record+1
+	fetch 2,mem_nv_data_ptr
+	ifetcht 1,pdata
+	pincrease 1
+	store 2,mem_list_item_ptr
+	storet 1,mem_select_list_item
+	fetch 1,mem_nv_data_number
+	icopy regc
+nvram_find_addr_from_list:
+	fetch 2,mem_list_item_ptr
+	copy pdata,rega
+	call nvram_find_addr_from_list_compare
+	rtn user
+	fetcht 2,mem_list_item_ptr
+	increase NV_DATA_LEN,temp
+	storet 2,mem_list_item_ptr
+	increase -1,temp
+	ifetch 1,temp
+	store 1,mem_select_list_item
+	increase -1,regc
+	nbranch nvram_find_addr_from_list,zero
+	fetch 1,mem_nv_data_number
+	pincrease DECREASED_ONE
+	store 1,mem_select_list_item
+	rtn
+nvram_find_addr_from_list_compare:
+	fetch 1,mem_temp_reconn_record
+	bne REC_3_MODE,find_addr_from_list_compare_ble_mode
+find_master_addr_from_list_compare:
+	arg mem_temp_reconn_record,regb
+	arg 7,loopcnt
+	call string_compare
+	branch enable_user,zero
+	rtn
+
+find_addr_from_list_compare_ble_mode:
+	beq REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,find_irk_form_list_compare
+	beq REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,find_ediv_form_list_compare
+	branch find_master_addr_from_list_compare
+
+find_irk_form_list_compare:
+	ifetcht 1,rega
+	isub temp,null
+	nrtn zero
+	arg mem_le_prand,contw
+	arg 16,loopcnt
+	call clear_mem
+	fetch 3,mem_le_plap+3
+	store 3,mem_le_prand
+	call genernate_master_MacAddress
+	fetch 2,mem_le_aes_128+13
+	byteswap pdata,pdata
+	lshift8 pdata,temp
+	ifetch 1,contr
+	iadd temp,pdata
+	fetcht 3,mem_le_plap
+	isub temp,null
+	branch enable_user,zero
+	rtn
+
+
+genernate_master_MacAddress:
+	arg mem_le_prand ,contr
+	call load_data128
+//	arg mem_le_irk,contr
+	ifetch 1,rega
+	call load_regext
+	force 0x38,aes_ctrl
+	force 0x0,aes_ctrl
+	call wait_aes
+	arg mem_le_aes_128,contw
+	branch store_aes_result
+
+find_ediv_form_list_compare:
+	ifetcht 1,rega
+	isub temp,null
+	nrtn zero
+	copy contr,rega
+	add contr,8,regc
+	arg mem_le_rand,regb
+	arg 8,loopcnt
+	call string_compare
+	branch enable_user,zero
+	copy regc,rega
+	arg mem_le_irk,regb
+	arg 8,loopcnt
+	call string_compare
+	branch enable_user,zero
+	rtn
+
+check_nvram:
+	fetch 2,mem_nv_data_ptr
+	ifetcht 1,pdata
+	pincrease NV_DATA_LEN
+	ifetch 1,pdata
+	isub temp,null
+	rtn
+
+init_device_list:
+	fetch 1,mem_nv_data_number
+	icopy loopcnt
+	fetcht 2,mem_nv_data_ptr
+	setarg 0
+init_device_list_loop:
+	istore 1,temp
+	increase NV_DATA_LEN,temp
+	pincrease 1
+	loop init_device_list_loop
+	rtn
+
+load_device_list:
+	bpatchx patch33_1,mem_patch33
+	call nvram_find_addr_from_bd_list
+	fetch 1,mem_state
+	setflag user,state_combkey,pdata	/* we have link key */
+	store 1,mem_state
+	nbranch clear_key_exists,user
+	add rega,10,contr
+//	copy rega,contr
+	arg mem_link_key,contw
+	call  memcpy16
+	branch check_link_key_load
+clear_key_exists:
+	jam 0,mem_link_key_exists
+	rtn
+
+load_device_list_mode_4:
+	fetch 9,mem_le_ediv
+	branch clear_ltk_exists,blank
+	call nvram_find_addr_from_bd_list
+	nbranch clear_ltk_exists,user
+	fetch 2,mem_list_item_ptr
+	add pdata,1,contr
+	arg mem_le_irk,contw
+	call  memcpy16
+	arg mem_le_ltk,contw
+	call  memcpy16
+	jam 1,mem_ltk_exists
+	rtn
+
+clear_ltk_exists:
+	jam 0,mem_ltk_exists
+	rtn
+
+
+eeprom_store_le_reconn_info:
+	fetch 6,mem_le_plap
+	store 6,mem_temp_lap
+	jam REC_4_MODE,mem_record_bt_mode
+	branch eeprom_store_reconn_info
+eeprom_store_bd_reconn_info:
+	fetch 6,mem_plap
+	store 6,mem_temp_lap
+	jam REC_3_MODE,mem_record_bt_mode
+eeprom_store_reconn_info:
+	fetch 1,mem_device_option
+	beq dvc_op_module,check_51cmd_update_device_record
+	bbit1 dvc_op_mouse,mouse_store_remote_bdaddr
+	rtn
+	
+
+check_link_key_load:
+	fetch 8,mem_link_key
+	fetcht 8,mem_link_key+8
+	ior temp,pdata
+	rtn blank
+	jam 1,mem_link_key_exists
+	rtn
+	
+
+/* =============== GPIO CONTROL ================= */
+
+
+	//temp [4:0]=GPIO number, 0-31, 
+gpio_set_wake_by_current_state:
+	bpatchx patch33_2,mem_patch33
+	set1 7,temp
+	call gpio_get_bit
+	nsetflag true,7,temp
+	//branch gpio_set_wake
+	//fall through
+	
+	//temp [4:0]=GPIO number, 0-31, [7]=0, low active
+gpio_set_wake:
+	bpatchx patch33_3,mem_patch33
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	isolate0 7,temp
+	and temp,0x1f,queue
+	fetch 4,mem_gpio_wakeup_low
+	qsetflag true,pdata
+	store 4,mem_gpio_wakeup_low
+	fetch 4,mem_gpio_wakeup_high
+	nqsetflag true,pdata
+	store 4,mem_gpio_wakeup_high
+	rtn
+	
+	//temp [4:0]=GPIO number, 0-31, [7]=0, low active
+gpio_clr_wake:
+	bpatchx patch33_4,mem_patch33
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	isolate0 7,temp
+	and temp,0x1f,queue
+	fetch 4,mem_gpio_wakeup_low
+	qset0 pdata
+	store 4,mem_gpio_wakeup_low
+	fetch 4,mem_gpio_wakeup_high
+	qset0 pdata
+	store 4,mem_gpio_wakeup_high
+	rtn
+
+
+gpio_config_input_nowake:
+	call gpio_clr_wake
+	branch gpio_config_input_without_wake
+
+	//temp [4:0]=GPIO number, 0-31, [7]=0, low active
+gpio_config_input:
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	ncall gpio_set_wake,wake
+
+gpio_config_input_without_wake:
+	arg core_gpio_pd0,contw
+	call gpio_set_bit
+	setflip gpio_active_bit,temp
+	arg core_gpio_pu0,contw
+	call gpio_set_bit
+	set0 gpio_active_bit,temp
+	arg core_gpio_oe0,contw
+	branch gpio_set_bit
+
+
+gpio_set_high_impedance:
+	arg core_gpio_pd0,contw
+	call gpio_set_bit
+	set0 gpio_active_bit,temp
+	arg core_gpio_pu0,contw
+	call gpio_set_bit
+	set0 gpio_active_bit,temp
+	arg core_gpio_oe0,contw
+	branch gpio_set_bit
+
+
+	//temp [4:0]=GPIO number, 0-31, [7]=0, low active. set gpio to inactive state
+gpio_config_output:	
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	setflip gpio_active_bit,temp
+	call gpio_out
+gpio_config_output0:
+	set1 gpio_active_bit,temp
+	arg core_gpio_oe0,contw
+	branch gpio_set_bit
+	
+gpio_common:
+	and temp,0x07,queue
+	rshift3 temp,pdata
+	and_into 3,pdata
+	iadd contw,contw
+	ifetch 1,contw
+	rtn
+
+gpio_check_active:
+	arg core_gpio_out0,contw
+	branch get_bit_common
+
+	
+	/* temp is gpio number, return true if gpio active */
+gpio_get_bit:
+	arg core_gpio_in,contw
+get_bit_common:
+	call gpio_common
+	isolate1 gpio_active_bit,temp
+	branch gpio_get_bit_reverse,true
+	qisolate0 pdata
+	rtn
+gpio_get_bit_reverse:
+	qisolate1 pdata
+	rtn
+
+gpio_out_inactive:
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	isolate1 7,null
+	branch gpio_out_flag
+
+gpio_out_active:
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	isolate0 7,null
+
+	/* temp is gpio number,  [7]=1,set out equa true flag if gpio active */
+gpio_out_flag:
+	setarg 0
+	nsetflag true,gpio_active_bit,pdata
+	ixor temp,temp
+	
+	/* temp is gpio number,0-31, [7]=out bit value */
+gpio_out:
+	arg core_gpio_out0,contw
+
+	//temp [4:0]=GPIO number, 0-31, [7]=bit value; contw is gpio reg base
+gpio_set_bit:
+	call gpio_common
+	isolate1 gpio_active_bit,temp
+	qsetflag true,pdata
+	istore 1,contw
+	rtn
+
+gpio_set_before_lpm_common:
+	arg -1,rega
+	hfetch 1,core_gpio_sel1
+	compare 0x02,pdata,0x03
+	call neglact4_from_23_pin,true	//spi
+
+	compare 0x01,pdata,0x03
+	call neglact2_form_25_pin,true	//two spi gpio25 26
+
+	compare 0x03,pdata,0x03
+	call neglact2_form_25_pin,true	//two spi gpio30 31
+	 	 
+	isolate1 2,pdata
+	call neglect2_from_6_pin,true	//uart
+	 
+	isolate1 3,pdata
+	call neglect4_from_9_pin,true	//spi
+
+	isolate1 4,pdata
+	call neglact2_form_30_pin,true	//IIC GPIO30 31
+
+	isolate1 6,pdata
+	nsetflag true,04,rega			//pwm0 gpio4
+
+	isolate1 7,pdata
+	nsetflag true,05,rega			//pwm1 gpio5
+
+	hfetch 1,core_gpio_sel2
+	isolate1 0,pdata
+	nsetflag true,27,rega			//pwm2 gpio27
+	isolate1 1,pdata
+	nsetflag true,28,rega			//pwm3 gpio28
+	isolate1 2,pdata
+	nsetflag true,03,rega			//pwm4 gpio03
+	isolate1 3,pdata
+	nsetflag true,08,rega			//pwm5 gpio08
+	isolate1 4,pdata
+	nsetflag true,20,rega			//pwm0 gpio20
+	isolate1 5,pdata
+	nsetflag true,21,rega			//pwm1 gpio21
+	isolate1 6,pdata
+	nsetflag true,22,rega			//pwm2 gpio22
+	isolate1 7,pdata
+	nsetflag true,23,rega			//pwm3 gpio23
+		
+	hfetch 1,core_gpio_sel
+	isolate1 0,pdata
+	nsetflag true,05,rega			//ADC GPIO05
+	isolate1 1,pdata
+	nsetflag true,06,rega			//ADC GPIO06
+	isolate1 2,pdata
+	nsetflag true,07,rega			//ADC GPIO07
+	isolate1 3,pdata
+	nsetflag true,18,rega			//ADC GPIO18
+	isolate1 4,pdata
+	nsetflag true,19,rega			//ADC GPIO19
+	isolate1 5,pdata
+	nsetflag true,20,rega			//ADC GPIO20
+	isolate1 6,pdata
+	nsetflag true,21,rega			//ADC GPIO21
+	isolate1 7,pdata
+	nsetflag true,22,rega			//ADC GPIO22
+	
+	hfetch 1,core_uart_ctrl
+	isolate1 4,pdata
+	call neglact2_form_2_pin,true
+	bpatchx patch33_5,mem_patch33
+
+	hfetch 4,core_gpio_pu0
+	hfetcht 4,core_gpio_pd0
+	ior temp,pdata
+	invert pdata,pdata
+	iand rega,pdata
+	//set0 4,pdata //revc
+	hstore 4,core_gpio_oe0
+	rtn
+	
+	
+neglect2_from_6_pin: //uart
+	 arg 6,queue
+	 branch neglect_2_pin
+neglect4_from_9_pin:
+	 arg 9,queue
+	 branch neglact_4_pin
+neglact4_from_23_pin:
+	 arg 23,queue
+	 branch neglact_4_pin
+neglact2_form_25_pin:
+	 arg 25,queue
+	 branch neglect_2_pin
+neglact2_form_30_pin:
+	 arg 30,queue
+	 branch neglect_2_pin
+neglact2_form_2_pin:
+	 arg 2,queue
+	 branch neglect_2_pin
+neglact_1_pin:
+	arg 1,loopcnt
+	branch neglect_pin_loop
+neglact_4_pin:
+	 arg 4,loopcnt
+	 branch neglect_pin_loop
+neglect_2_pin:
+	 arg 2,loopcnt
+neglect_pin_loop:
+	 qset0 rega
+	 increase 1,queue
+	 loop neglect_pin_loop
+	 rtn
+
+
+
+
+
+
+/* ===================== sniff GPIO CONTROL ======================= */
+gpio_cfg_uart_tx_output:
+	call gpio_uart2gpio
+	arg UART_WAKEUP_TX,temp
+	branch gpio_config_output
+
+gpio_pu_uart_tx:
+	call gpio_cfg_uart_tx_output
+	arg UART_WAKEUP_TX,temp
+	branch gpio_out_inactive
+
+
+
+gpio_rx_config_input_with_pu:
+	call gpio_uart2gpio
+	hfetch 1, core_gpio_pu0
+	set1 UART_WAKEUP_RX,pdata
+	hstore 1,core_gpio_pu0
+	arg UART_WAKEUP_RX,temp
+	branch gpio_config_input
+	
+gpio_uart2gpio:
+	hfetch 1,core_gpio_sel1
+	and_into 0xfb,pdata
+	hstore 1,core_gpio_sel1
+	rtn
+
+gpio_check_uart_state:
+	hfetch 1,core_gpio_sel1
+	isolate1 2,pdata
+	rtn
+
+load_chip_option:
+	call otp_enable_chgpump
+	setarg OTP_CHIP_FUNCTIONS
+	arg mem_chip_functions,rega
+	arg 0x02,temp
+	call otpd_read_data
+	branch otp_disable_chgpump
+
+
+load_adc_init:
+	call otp_enable_chgpump
+	setarg otp_adc_io_0_5V_addr
+	arg mem_0_5_adc_io_data,rega
+	arg 14,temp
+	call otpd_read_data
+	branch otp_disable_chgpump
+
+
+//mem_adc_config_flag 0:vinlpm 1:Hvin 2: GPIO
+adc_init_data:
+	bpatchx patch33_6,mem_patch33
+
+	call load_adc_init
+	
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_VINLPM,adc_init_data_vinlpm
+	beq ADC_CONFIG_HVIN,adc_init_data_hvin
+	beq ADC_CONFIG_GPIO,adc_init_data_io
+	rtn	
+
+adc_init_data_vinlpm:
+	fetcht 2,mem_otp_adc_flag
+	setarg OTP_ADC_FLAG
+	isub temp,null
+	branch adc_check_data_vinlpm,zero
+	setarg 0x4dfa
+	store 2,mem_3v_adc_vinlpm_data	
+	setarg 0x4894
+	store 2,mem_2v_adc_vinlpm_data
+	branch set_vdd_reference_voltage_1v
+
+adc_check_data_vinlpm:
+	fetch 2,mem_3v_adc_vinlpm_data
+	nbranch adc_check_2v_vinlpm,blank
+	setarg 0x4dfa
+	store 2,mem_3v_adc_vinlpm_data
+adc_check_2v_vinlpm:	
+	fetch 2,mem_2v_adc_vinlpm_data
+	nbranch set_vdd_reference_voltage_1v,blank
+	setarg 0x4894
+	store 2,mem_2v_adc_vinlpm_data
+set_vdd_reference_voltage_1v:
+	setarg 100
+	store 2,mem_reference_voltage //set reference voltage = 1V
+	rtn		
+
+adc_init_data_hvin:
+	fetcht 2,mem_otp_adc_flag
+	setarg OTP_ADC_FLAG
+	isub temp,null
+	branch adc_check_data_hvin,zero
+	setarg 0x5932
+	store 2,mem_5v_adc_hvin_data	
+	setarg 0x4323
+	store 2,mem_1v_adc_hvin_data
+	branch set_vdd_reference_voltage_4v
+
+adc_check_data_hvin:
+	fetch 2,mem_5v_adc_hvin_data
+	nbranch adc_check_1v_hvin,blank
+	setarg 0x5932
+	store 2,mem_5v_adc_hvin_data
+adc_check_1v_hvin:	
+	fetch 2,mem_1v_adc_hvin_data
+	nbranch set_vdd_reference_voltage_4v,blank
+	setarg 0x4323
+	store 2,mem_1v_adc_hvin_data
+set_vdd_reference_voltage_4v:
+	setarg 400
+	store 2,mem_reference_voltage //set reference voltage = 4V
+	rtn 	
+
+adc_init_data_io:
+	fetcht 2,mem_otp_adc_flag
+	setarg OTP_ADC_FLAG
+	isub temp,null
+	branch adc_check_data_io,zero
+	setarg 0x6946
+	store 2,mem_1v_adc_io_data	
+	setarg 0x5377
+	store 2,mem_0_5_adc_io_data
+	branch set_vdd_reference_voltage_0_5v
+
+adc_check_data_io:
+	fetch 2,mem_1v_adc_io_data
+	nbranch adc_check_0_5v_io,blank
+	setarg 0x6946
+	store 2,mem_1v_adc_io_data
+adc_check_0_5v_io:
+	fetch 2,mem_0_5_adc_io_data
+	nbranch set_vdd_reference_voltage_0_5v,blank
+	setarg 0x5377
+	store 2,mem_0_5_adc_io_data
+set_vdd_reference_voltage_0_5v:
+	setarg 50
+	store 2,mem_reference_voltage //set reference voltage = 0.5V
+	rtn	
+
+
+adc_set_mode:
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_VINLPM,adc_check_vinlpm
+	beq ADC_CONFIG_HVIN,adc_check_hvin
+	beq ADC_CONFIG_GPIO,adc_check_gpio
+	rtn
+adc_check_vinlpm:
+	jam 0xbf,rf_adc_mode	//read VINLPM voltage directly	
+	branch read_adc
+adc_check_hvin:
+	jam 0xaf,rf_adc_mode	//read HVIN voltage directly
+	branch read_adc
+adc_check_gpio:
+	jam 0x8f,rf_adc_mode
+	fetch 1,mem_adc_channel
+	hstore 1,rf_adc_ch
+	branch read_adc
+read_adc:
+	bpatchx patch33_7,mem_patch33
+	hfetch 1,core_uart_baud + 1
+	set1 7,pdata
+	hstore 1,core_uart_baud + 1 
+	hfetch 1,rf_adc_ch
+	or_into 0x30,pdata
+	hstore 1,rf_adc_ch
+	jam 0x7c,rfen_adc
+	jam 0xaa,rf_adc_gc
+	nop 5000
+	hfetcht 2,core_adc_sum
+	hfetch 1,core_uart_baud + 1
+	set0 7,pdata
+	hstore 1,core_uart_baud + 1
+	storet 2,mem_adc_current_value
+	rtn
+
+vdd_calculate_by_mode:
+	bpatchx patch34_0,mem_patch34
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_VINLPM,vdd_calculate_vinlpm
+	beq ADC_CONFIG_HVIN,vdd_calculate_hvin
+	beq ADC_CONFIG_GPIO,vdd_calculate_io
+	rtn
+
+vdd_calculate_vinlpm:
+	fetch 2,mem_3v_adc_vinlpm_data
+	fetcht 2,mem_2v_adc_vinlpm_data
+	arg 200,regc
+	branch vdd_calculate
+
+vdd_calculate_hvin:
+	fetch 2,mem_5v_adc_hvin_data
+	fetcht 2,mem_1v_adc_hvin_data
+	arg 100,regc
+	branch vdd_calculate
+
+vdd_calculate_io:
+	fetch 2,mem_1v_adc_io_data
+	fetcht 2,mem_0_5_adc_io_data
+	arg 50,regc
+	branch vdd_calculate
+	
+vdd_calculate:
+	isub temp,rega
+	fetch 2,mem_adc_current_value
+	isub temp,pdata
+	nbranch vdd_calculate1,positive
+	fetcht 2,mem_reference_voltage
+	imul32 temp,regb
+	copy regc,pdata
+	imul32 rega,pdata
+	iadd regb,pdata
+vdd_calculate2:
+	idiv rega
+	call wait_div_end
+	quotient pdata	
+	rtn
+
+vdd_calculate1:
+	copy temp,pdata
+	fetcht 2,mem_adc_current_value
+	isub temp,pdata
+	fetcht 2,mem_reference_voltage
+	imul32 temp,regb
+	copy regc,pdata
+	imul32 rega,pdata
+	isub regb,pdata
+	branch vdd_calculate2
+
+/*	typedef struct
+*	{
+*		uint16 full_vol
+*		uint16 empty_vol
+*		uint16 low_vol
+*		uint16 now_vol
+*	}bat_calculate;
+*/
+//out:	pdata->bat percent
+adc_bat_percent_lowpower_out:
+	ifetch 8,rega
+	store 8,mem_pdatatemp
+	fetch 2,mem_pdatatemp
+	fetcht 2,mem_pdatatemp+2
+	isub temp,rega
+	fetch 2,mem_pdatatemp+6
+	isub temp,regb
+	fetcht 2,mem_pdatatemp+4
+	isub temp,null
+	ncall adc_set_low_power_flag,positive
+	mul32 regb,100,pdata
+	idiv rega
+	call wait_div_end
+	quotient pdata
+	call adc_set_no_power_flag,blank
+	rtn
+adc_set_low_power_flag:
+	fetch 1,mem_adc_power_flag
+	set1 0,pdata
+	store 1,mem_adc_power_flag
+	rtn
+adc_set_no_power_flag:
+	fetcht 1,mem_adc_power_flag
+	set1 1,temp
+	storet 1,mem_adc_power_flag
+	rtn
+
+
+
+/****************************************key scan***************************************/
+keyscan_key_init:
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_key_init_next:
+	rtn blank
+	copy pdata,loopcnt
+//	copy contr,rega
+	fetch 2,mem_keyscan_ptr
+	increase 3,pdata	//mem_key_conf0_pin
+	copy pdata,rega
+keyscan_key_init_lp1:
+	ifetcht 1, rega
+	call gpio_config_input
+	increase KEY_CONF_STRUCT_LEN,rega
+	loop keyscan_key_init_lp1
+keyscan_key_init_end:
+	rtn
+	
+keyscan_scan_key:
+	fetch 2,mem_keyscan_ptr
+	increase 3,pdata	//mem_key_conf0_pin
+	copy pdata,rega
+//	arg mem_key_conf0_pin,rega
+	force 0,regb
+	jam 0,mem_key_value_temp
+keyscan_scan_key_lp1:
+	ifetcht 1, rega
+	call gpio_get_bit
+	bpatchx patch34_1,mem_patch34
+	fetch 2, mem_key_value_temp
+	copy regb,queue
+	qsetflag true,pdata
+	store 2, mem_key_value_temp
+	increase KEY_CONF_STRUCT_LEN,rega
+	increase 1,regb
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_scan_key_lp1_next:
+	ixor regb,null
+	nbranch keyscan_scan_key_lp1,zero
+	fetch 2,mem_key_value_temp
+	fetcht 2,mem_key_value
+	ixor temp,null
+	rtn zero
+	enable user
+	rtn
+
+keyscan_process_lpm_before:
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_process_lpm_before_next:
+	rtn blank
+	copy pdata,loopcnt
+	fetch 2,mem_keyscan_ptr 
+	increase 3,pdata	//mem_key_conf0_pin
+	copy pdata,rega
+keyscan_process_lpm_before_lp1:
+	ifetcht 1, rega
+	call gpio_set_wake_by_current_state
+	increase KEY_CONF_STRUCT_LEN,rega
+	loop keyscan_process_lpm_before_lp1
+keyscan_process_lpm_before_end:
+	rtn
+
+keyscan_key_process:
+	arg key_scan_timer,queue
+	call timer_check
+	nrtn blank
+	setarg 0x20
+	arg key_scan_timer,queue
+	call timer_init
+	disable user
+	call keyscan_process_lpm_before
+	bpatchx patch34_2,mem_patch34
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_key_process_next:
+	rtn blank
+	call keyscan_scan_key
+	nbranch lpm_button_clean_wake_lock,user
+	call lpm_button_get_wake_lock
+	disable user
+	fetch 2, mem_key_value_temp
+	store 2,mem_key_value_temp4
+	jam 0,mem_key_value_temp6
+	force 0,queue
+keyscan_key_lp1:
+	fetch 2, mem_key_value
+	rshift pdata,temp
+	storet 2,mem_key_value
+	and pdata,0x01,pdata
+	fetcht 2, mem_key_value_temp4
+	and temp,0x01,rega
+	rshift temp,temp
+	storet 2,mem_key_value_temp4
+	ixor rega,null
+	ncall keyscan_send_key_data,zero
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_key_lp1_next:
+	fetcht 1, mem_key_value_temp6
+	increase 1,temp
+	storet 1, mem_key_value_temp6
+	copy temp,queue
+	ixor queue,null
+	nbranch keyscan_key_lp1,zero
+	fetch 2,mem_key_value_temp
+	store 2, mem_key_value
+	rtn
+keyscan_send_key_data:
+	bpatchx patch34_3,mem_patch34
+	fetch 2,mem_keyscan_ptr
+	increase 1,pdata
+	ifetch 2,pdata
+	branch callback_func
+
+
+/*************************************pwm*************************************/
+
+//rega:clk select(0:system clk; 1:system clk undivied; 2:lpo)
+/*rega:clk select
+			0x00:select system clock 12M;
+			0x40:select undivied system clock 24M/48M;
+			0x80:select lpo clock:33K
+*/
+pwm_init:
+	hfetch 1,core_clksel
+	ior rega,pdata
+	hstore 1,core_clksel
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_PWM,pdata
+	hstore 2,core_clkoff
+	nop 100
+	rtn
+
+/*	typedef struct
+*	{
+*		uint8 gpio_num
+*		uint8 pwm_channel
+*		uint24 frequency
+*		uint8 duty_cycle   //0-100
+*	}PWM_Style;
+	addr: mem_pdatatemp
+*/
+pwm_out_set:
+	fetcht 3,mem_pdatatemp+2
+	setarg PWM_12MHZ
+	idiv temp
+	call wait_div_end
+	quotient temp
+	fetch 1,mem_pdatatemp+5
+	imul32 temp,pdata
+	div pdata,100
+	call wait_div_end
+	quotient rega
+	copy temp,pdata
+	isub rega,regb	
+	fetch 1,mem_pdatatemp+1
+	call pwm_duty_cycle_set
+	fetch 1,mem_pdatatemp
+	branch pwm_enable
+
+//rega:pcnt ;regb:ncnt ;pdata:pwm channel select
+pwm_duty_cycle_set:
+	beq 0,pwm_pwm0_duty_set
+	beq 1,pwm_pwm1_duty_set
+	beq 2,pwm_pwm2_duty_set
+	beq 3,pwm_pwm3_duty_set
+	beq 4,pwm_pwm4_duty_set
+	beq 5,pwm_pwm5_duty_set
+pwm_pwm0_duty_set:
+	arg core_pwm_pcnt0,contw
+	branch pwm_set_pncnt
+pwm_pwm1_duty_set:
+	arg core_pwm_pcnt1,contw
+	branch pwm_set_pncnt
+pwm_pwm2_duty_set:
+	arg core_pwm_pcnt2,contw
+	branch pwm_set_pncnt
+pwm_pwm3_duty_set:
+	arg core_pwm_pcnt3,contw
+	branch pwm_set_pncnt
+pwm_pwm4_duty_set:
+	arg core_pwm_pcnt4,contw
+	branch pwm_set_pncnt
+pwm_pwm5_duty_set:
+	arg core_pwm_pcnt5,contw
+	branch pwm_set_pncnt
+pwm_set_pncnt:
+	copy rega,pdata
+	istore 2,contw
+	copy regb,pdata
+	istore 2,contw
+	rtn
+
+
+//pdata:gpio select
+pwm_enable:
+	enable user
+	branch pwm_gpio_set
+pwm_disable:
+	disable user
+pwm_gpio_set:
+	beq 4,pwm_gpio4_set
+	beq 5,pwm_gpio5_set
+	beq 27,pwm_gpio27_set
+	beq 28,pwm_gpio28_set
+	beq 3,pwm_gpio3_set
+	beq 8,pwm_gpio8_set
+	beq 20,pwm_gpio20_set
+	beq 21,pwm_gpio21_set
+	beq 22,pwm_gpio22_set
+	beq 23,pwm_gpio23_set
+	rtn
+
+
+pwm_gpio4_set:	//pwm 0
+	arg 6,queue
+	branch pwm_one_set_select
+pwm_gpio5_set:	//pwm 1
+  	arg 7,queue
+	branch pwm_one_set_select
+pwm_gpio27_set:	//pwm 2
+  	arg 8,queue
+	branch pwm_one_set_select
+pwm_gpio28_set:	//pwm 3
+	arg 9,queue
+	branch pwm_one_set_select
+pwm_gpio3_set:	//pwm 4
+ 	arg 10,queue
+	branch pwm_one_set_select
+pwm_gpio8_set:	//pwm 5
+  	arg 11,queue
+	branch pwm_one_set_select
+pwm_gpio20_set:	//pwm 0
+  	arg 12,queue
+	branch pwm_tw0_set_select
+pwm_gpio21_set:	//pwm 1
+  	arg 13,queue
+	branch pwm_tw0_set_select
+pwm_gpio22_set:	//pwm 2
+   	arg 14,queue
+	branch pwm_tw0_set_select
+pwm_gpio23_set:	//pwm 3
+    	arg 15,queue
+	branch pwm_tw0_set_select
+
+pwm_set_select:
+	hfetch 2,core_gpio_sel1
+	qsetflag user,pdata
+	hstore 2,core_gpio_sel1
+	copy rega,queue
+	hfetch 1,core_gpio_key2
+   	qsetflag user,pdata
+   	hstore 1,core_gpio_key2
+	rtn
+
+pwm_one_set_select:
+	add queue,-4,rega
+	branch pwm_set_select
+
+pwm_tw0_set_select:
+	add queue,-10,rega
+	branch pwm_set_select
+
+
+	
+
+rfcomm_init:
+	rtn wake
+	jam 0,mem_rfcomm_send_more_pkt
+	jam BITS9600,memRemoteRPNBitRate        
+	jam DATABITS8,memRemotePRNDataBits      
+	jam 0x11,memRemotePRNXon
+	jam 0x13,memRemotePRNXoff
+	setarg 0
+	store 3,memRemotePRNStopBit
+	store 1,mem_spp_state                  
+	jam 0,memui_reconnect_mode
+	//branch rfcomm_init_spp
+rfcomm_init_spp:
+	bpatchx patch34_4,mem_patch34
+	setarg 0
+	store 1,mem_spp_state
+	store 1,mem_remote_spp_channel
+	store 1,mem_pn_dlci
+	fetch 1,mem_credit_flag
+	beq CREDIT_ENABLE,rfcomm_init_spp_with_credit
+	jam 0x50,mem_credit_given
+	rtn
+
+rfcomm_init_spp_with_credit:
+	jam 0x00,mem_credit_given
+	rtn
+
+set_CR_bit:
+	or_into 0x02,temp
+	rtn
+
+
+/*below added by koufan*/
+
+/*rfcomm_send */
+
+
+
+	/*rfcomm_calculate_FCS_sabm*/
+	/*input: address in temp*/
+	/*output: FCS in pdata  */
+rfcomm_calculate_FCS_sabm:
+	copy temp,pdata
+	reverse pdata,pdata //address
+	store 1,memFCStemp3
+	force INI_TX_SABM,pdata
+	reverse pdata,pdata
+	store 1,memFCStemp2
+	force 0x01,pdata                        
+	reverse pdata,pdata
+	store 1,memFCStemp1
+	call caculate_fcs
+	copy temp,pdata                        
+	rtn
+rfcomm_calculate_FCS_ua:
+	reverse pdata,pdata //address
+	store 1,memFCStemp3
+	force   RSP_TX_UA, pdata
+	reverse pdata, pdata
+	store   1, memFCStemp2
+	force   0x01, pdata
+	reverse pdata, pdata
+	store   1, memFCStemp1
+	branch caculate_fcs
+	/* FCS return from temp                */
+rfcomm_calculate_FCS_dlci0:
+	fetch 1,mem_rfcomm_initiator
+	branch rfcomm_calculate_FCS_dlci0_res,blank
+	setarg 0x70 //FCS of initiator
+	rtn
+rfcomm_calculate_FCS_dlci0_res:
+	setarg 0xaa//FCS of responder
+	rtn
+	
+rfcomm_save_FCS_uih:
+	reverse pdata, pdata //address 
+	store 1,memFCStemp3                     /* contw distroided                    */
+	force RSP_RX_UIH,pdata 
+	call caculate_UIHdata_fcs
+	fetcht 2,mem_contw_temp
+	copy temp,contw
+	istore 1,contw                      /* save FCS for later use              */
+	copy contw,temp
+	storet 2,mem_contw_temp
+	force RSP_RX_UIH_WDATA,pdata             /* P/F =1 + RSP_RX_UIH                 */
+	call caculate_UIHdata_fcs
+	fetcht 2,mem_contw_temp
+	copy temp,contw
+	istore 1,contw             /* save FCS for later use              */
+	rtn	
+/**********************************************************************/
+/* This subroutine caculates the FCS for UIH data                     */
+/* Input:                                                             */
+/*        the address byte at memFCStemp3(bit reversed), control byte */
+/*        at pdata (not bit reversed)                                 */
+/* Output:                                                            */
+/*        pdata: the FCS                                              */
+/**********************************************************************/  
+caculate_UIHdata_fcs:
+	reverse pdata,pdata
+	store   1,memFCStemp2
+	fetch   2, memFCStemp2                     
+	lshift8 pdata,pdata
+	store 3,mem_mod2div_temp
+	arg     0x107,regA
+	arg 0xf,regB
+	call mod2div
+	xor_into     0xd7, pdata
+	invert  pdata,pdata
+	reverse pdata,pdata
+	rtn
+	
+/**********************************************************************/
+/* This subroutine caculates the FCS                                  */
+/* Input:                                                             */
+/*        the address byte at memFCStemp3, control byte at memFCStemp2*/  
+/*        lenght at memFCStemp1 (all above data are bit reversed)     */
+/* Output:                                                            */
+/*        temp: the FCS                                               */
+/**********************************************************************/     
+caculate_fcs:
+	fetch 3, memFCStemp1                    /* load 3 bytes start at memFCStemp1   */
+	store 3,mem_mod2div_temp
+	arg 0x107,regA
+	arg 0xf,regB  //24bit(memFCStemp1+..+memFCStemp3) - 9bit(regA) = 15bit
+	call mod2div
+	lshift8 pdata,pdata 
+	arg 0x7, regB  //16bit(lshift8 pdata,pdata ) - 9bit(regA) = 7bit
+	call mod2div
+	xor_into     0x2b, pdata		//0x3d
+	invert  pdata, pdata                        
+	reverse pdata, pdata                      /* FCS at pdata                        */
+	copy    pdata, temp
+	rtn
+
+mod2div:
+	arg 0,regC
+	copy regB,loopcnt
+	call right_shift_n // right shift pdata (regB)bit
+	icopy temp
+mod2div_loop:
+	//jam 1,0x1fff
+//mod2div_loop1:
+	//fetch 1,0x1fff
+	//nbranch mod2div_loop1,blank
+	copy temp,pdata
+	lshift regC,regC//quotient
+	bbit0 8, mod2div_not_enough_reduction//the high bit of 0x107
+	ixor regA,temp// temp----remainer
+	increase 1,regC// quotient
+mod2div_not_enough_reduction: //Minuend smaller than Subtrahend
+	lshift temp,temp
+	fetch 3,mem_mod2div_temp
+	increase -1,regB
+	compare 0xff,regB,0xff
+	branch mod2div_end,true
+	copy regB,loopcnt
+	call right_shift_n // right shift pdata (regB)bit
+	isolate1 0,pdata
+	setflag true,0,temp //move a new bit from Dividend(queue) into Minuend(pdata)
+	branch mod2div_loop
+mod2div_end:
+	//output:remainer in pdata
+	rshift  temp,pdata
+	rtn
+
+get_rfcomm_snd_adss:
+	fetcht 1,mem_pn_dlci
+dlci_to_address_cmd:
+	//input DLCI from temp
+	lshift2 temp,temp
+	set1 RFCOMM_ADDRESS_EXT_LEN,temp
+	fetch 1,mem_rfcomm_initiator
+	ncall set_CR_bit,blank
+	storet 1,mem_rfcomm_send_adss
+	rtn
+
+channel_to_dlci:
+	//input channel from temp
+	lshift temp,temp
+	fetch 1,mem_rfcomm_initiator
+	setflag blank,0,temp //direction in dlci
+	//output dlci to temp
+	rtn
+rfcomm_rx_process_DLCI0_sabm:
+	fetcht 1,mem_current_channel //address
+	jam 0xd7,mem_current_fcs //FCS
+	call rfcomm_send_ua
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_RFCOMM_ONLY_SABM,pdata
+	set1 L2CAP_CHANNEL_RFCOMM_ONLY_UA,pdata
+	store 1,mem_rfcomm_state
+	jam 0,mem_rfcomm_initiator
+	branch rfcomm_rx_process_end
+rfcomm_rx_process_DLCI0_ua:
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_RFCOMM_ONLY_UA,pdata
+	store 1,mem_rfcomm_state
+	branch rfcomm_rx_process_end
+
+	
+rfcomm_rx_process:
+	bpatchx patch34_5,mem_patch34
+	fetch 1,memui_reconnect_mode
+	beq NO_RECONNECTION,rfcomm_rx_process_remote_page
+	branch rfcomm_rx_process_reconn
+
+rfcomm_rx_process_remote_page:
+	fetch 2,mem_l2cap_payload_ptr
+	copy pdata,contr
+	call get_rfcomm_head_struct
+	fetch 1,mem_current_channel
+	beq 0,parse_dlci0_rp
+	branch parse_uih_rp
+parse_dlci0_rp:
+	bpatchx patch34_6,mem_patch34
+	fetch 1,mem_current_frame_type
+	beq RFCOMM_FRAME_TYPE_SABM,rfcomm_rx_process_DLCI0_sabm
+	beq RFCOMM_FRAME_TYPE_UA,rfcomm_rx_process_DLCI0_ua
+	beq RFCOMM_FRAME_TYPE_UIH,parse_DLCI0_rp_uih
+	beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_rp_spp_disconn_send_event
+	rtn
+
+
+parse_DLCI0_rp_uih:
+	fetch 2,mem_rfcomm_uih_payload_ptr
+	copy pdata,contr
+	call get_rfcomm_uih_head_struct
+	fetch 1,mem_uih_cmd_type
+	beq UIH_PARAM_NEG_CMD,parse_DLCI0_rp_uih_pn_cmd
+	beq UIH_PARAM_NEG_RES,parse_DLCI0_rp_uih_pn_res
+	beq UIH_MODEM_STATUS_CMD,parse_DLCI0_rp_uih_ms_cmd
+	beq UIH_MODEM_STATUS_RES,parse_DLCI0_rp_uih_ms_res
+	beq UIH_PARAM_CMD_REMOVE_PORT,parse_DLCI0_rp_uih_cmd_port	
+	branch rfcomm_rx_process_end
+	
+parse_DLCI0_rp_uih_pn_cmd:
+	call parse_DLCI0_rp_uih_pn_res_common
+
+	branch parse_DLCI0_rp_uih_pn_cmd_spp
+
+parse_DLCI0_rp_uih_pn_cmd_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_PN_CMD,pdata
+	set1 RFCOMM_CHANNEL_STATE_PN_RES,pdata
+	store 1,mem_spp_state
+	call rfcomm_send_param_neg_res
+	branch rfcomm_rx_process_end
+	
+parse_DLCI0_rp_uih_pn_res:
+	call parse_DLCI0_rp_uih_pn_res_common
+	branch rfcomm_rx_process_end
+
+parse_DLCI0_rp_uih_pn_res_common:
+	call get_param_payload_ptr
+	branch  get_rfcomm_prarmer_negotiation
+
+get_rfcomm_param_modem_status:
+	call get_param_payload_ptr
+	ifetch 1,contr
+	rshift3 pdata,pdata
+	store 1,mem_ms_channel
+	ifetch 1,contr
+	store 1,mem_ms_param
+	rtn
+
+
+get_rfcomm_head_struct:
+	ifetch 1,contr
+	store 1,mem_current_adss
+	rshift3 pdata,pdata
+	store 1,mem_current_channel
+	ifetch 1,contr
+	store 1,mem_current_frame_type
+get_rfcomm_current_length:
+	call get_rfcomm_length_common
+	storet 2,mem_current_length
+	copy contr,pdata
+	store 2,mem_rfcomm_uih_payload_ptr
+	rtn
+
+get_rfcomm_uih_head_struct:
+	ifetch 1,contr
+	rshift pdata,pdata
+	store 1,mem_uih_cmd_type
+	call get_rfcomm_length_common
+	storet 2,mem_uih_length
+	copy contr,pdata
+	store 2,mem_param_payload_ptr
+	rtn
+
+
+get_param_payload_ptr:
+	fetch 2,mem_param_payload_ptr
+	copy pdata,contr
+	rtn
+
+get_rfcomm_length_common:
+	ifetch 1,contr
+	copy pdata,temp
+	rshift temp,temp
+	rtnbit1 0
+	ifetch 1,contr
+	lshift3 pdata,pdata
+	lshift4 pdata,pdata
+	iadd temp,temp
+	rtn
+
+get_rfcomm_prarmer_negotiation:
+	ifetch 1,contr
+	store 1,mem_pn_dlci
+	ifetch 1,contr
+	store 1,mem_pn_credit_flow_type_info
+	ifetch 1,contr
+	store 1,mem_pn_priority
+	ifetch 1,contr
+	store 1,mem_pn_acknowledg_timer
+	ifetch 2,contr
+	store 2,mem_pn_max_frame_size
+	ifetch 1,contr
+	store 1,mem_pn_max_retrans
+	ifetch 1,contr
+	store 1,mem_remote_credits
+	rtn
+
+
+parse_DLCI0_rp_uih_ms_cmd:
+	call get_rfcomm_param_modem_status
+
+	branch parse_DLCI0_rp_uih_ms_cmd_spp
+
+parse_DLCI0_rp_uih_ms_cmd_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_RCV_MS_CMD,pdata
+	set1 RFCOMM_CHANNEL_STATE_SND_MS_RES,pdata
+	store 1,mem_spp_state
+	fetcht 1,mem_pn_dlci
+	lshift2 temp,temp
+	or_into 3,temp
+	call rfcomm_send_modem_status_res
+	jam MORE_PKT_MSC_CMD_SPP,mem_rfcomm_send_more_pkt
+	branch rfcomm_rx_process_end
+	
+parse_DLCI0_rp_uih_ms_res:
+	jam BT_EVT_SPP_CONNECTED,mem_fifo_temp
+	call ui_ipc_send_event
+	call get_rfcomm_param_modem_status
+	fetch 1,mem_ms_channel
+	sub pdata,1,null
+	branch parse_DLCI0_rp_uih_MS_RES_spp,zero
+	branch assert
+parse_DLCI0_rp_uih_ms_res_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_RCV_MS_RES,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+
+parse_DLCI0_rp_uih_cmd_port:
+	call get_param_payload_ptr
+	ifetch 1,contr
+	store 1,mem_rpn_dlci
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x000e
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_rfcomm_initiator
+	//setarg 5
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch34_7,mem_patch34
+	setarg 0x15ef
+	istore 2,contw
+	setarg 0x1191
+	istore 2,contw
+	//fetch 1,mem_pn_dlci
+	//setarg 0x0b
+	fetch 1,mem_rpn_dlci
+	istore 1,contw //DLCI
+	setarg 0x000007
+	istore 5,contw
+//	setarg 0 //max frame size
+//	istore 2,contw 
+	setarg 0x01 //max retrans
+	istore 2,contw
+//	setarg 0x00
+//	istore 1,contw // init credits
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	rtn
+
+
+
+parse_uih_rp:
+	branch parse_uih_rp_spp
+
+parse_uih_rp_spp:
+	bpatchx patch35_0,mem_patch35
+	fetch 1,mem_current_frame_type
+	beq RFCOMM_FRAME_TYPE_UA,parse_uih_rp_spp_ua
+	beq RFCOMM_FRAME_TYPE_SABM,parse_uih_rp_spp_sabm
+	beq RFCOMM_FRAME_TYPE_UIH,parse_uih_spp_uih
+	beq RFCOMM_FRAME_TYPE_UIH_CREDITS,parse_uih_spp_uih_credits
+	beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_rp_spp_disconn
+	rtn
+parse_uih_rp_spp_ua:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_UA,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+parse_uih_rp_spp_sabm:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_UA,pdata
+	set1 RFCOMM_CHANNEL_STATE_SABM,pdata
+	store 1,mem_spp_state
+	fetch 1,mem_current_adss
+	call rfcomm_calculate_FCS_ua
+	store 1,mem_current_fcs
+	call rfcomm_send_ua
+	fetch 1,mem_current_adss
+	rshift2 pdata,pdata
+	store 1,mem_pn_dlci
+	lshift2 pdata,pdata
+	set0 RFCOMM_ADDRESS_CR,pdata
+	set1 RFCOMM_ADDRESS_EXT_LEN,pdata 
+	arg mem_HIUfcs_spp,temp // mem_HIUfcs_HF_WCredits in regB++
+	storet 2,mem_contw_temp
+	call rfcomm_save_FCS_uih
+	branch rfcomm_rx_process_end
+	
+parse_uih_spp_uih_credits:
+	fetch 2,mem_rfcomm_uih_payload_ptr
+	copy pdata,contr
+	increase 1,pdata
+	store 2,mem_rfcomm_uih_payload_ptr
+	ifetch 1,contr //remote credits
+	fetcht 1,mem_remote_credits
+	iadd temp,pdata
+	store 1,mem_remote_credits
+parse_uih_spp_uih:
+	call rfcomm_increase_credit_given
+parse_uih_spp_uih_cont:
+	call get_rfcomm_snd_adss
+	call rfcomm_send_uih_without_payload
+	call spp_process_rx_data
+	branch rfcomm_rx_process_end
+
+parse_uih_rp_spp_disconn_send_event:
+	jam BT_EVT_SPP_DISCONNECTED,mem_fifo_temp
+	call ui_ipc_send_event	
+parse_uih_rp_spp_disconn:
+	call rfcomm_init_spp
+	fetch 1,mem_current_adss
+	call rfcomm_calculate_FCS_ua
+	store 1,mem_current_fcs
+	call rfcomm_send_ua
+	branch rfcomm_rx_process_end
+	
+///////////////////////////////////////////
+///////////////////////////////////////////
+///////////////////////////////////////////
+rfcomm_rx_process_reconn:
+	fetch 2,mem_l2cap_payload_ptr
+	copy pdata,contr
+	call get_rfcomm_head_struct
+	fetch 1,mem_current_channel
+	beq 0,parse_DLCI0_reconn
+	branch parse_uih_reconn
+		
+parse_DLCI0_reconn:
+	bpatchx patch35_1,mem_patch35
+	fetch 1,mem_current_frame_type
+	beq RFCOMM_FRAME_TYPE_SABM,rfcomm_rx_process_DLCI0_sabm
+	beq RFCOMM_FRAME_TYPE_UA,rfcomm_rx_process_DLCI0_ua
+	beq RFCOMM_FRAME_TYPE_UIH,parse_DLCI0_reconn_uih
+	branch rfcomm_rx_process_end
+parse_DLCI0_reconn_uih:
+	fetch 2,mem_rfcomm_uih_payload_ptr
+	copy pdata,contr
+	call get_rfcomm_uih_head_struct
+	fetch 1,mem_uih_cmd_type
+	beq UIH_PARAM_NEG_CMD,parse_DLCI0_reconn_uih_pn_cmd
+	beq UIH_PARAM_NEG_RES,parse_DLCI0_reconn_uih_pn_cmd
+	beq UIH_MODEM_STATUS_CMD,parse_DLCI0_reconn_uih_ms_cmd
+	beq UIH_MODEM_STATUS_RES,parse_DLCI0_reconn_uih_ms_res
+	branch rfcomm_rx_process_end
+
+parse_DLCI0_reconn_uih_pn_cmd:
+	call parse_DLCI0_rp_uih_pn_res_common
+	fetch 1,mem_pn_dlci
+	rshift pdata,pdata
+	fetcht 1,mem_remote_spp_channel
+	isub temp,null
+	branch parse_DLCI0_reconn_uih_pn_cmd_spp,zero
+	branch assert
+parse_DLCI0_reconn_uih_pn_cmd_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_PN_RES,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+
+parse_DLCI0_reconn_uih_ms_cmd:
+	call get_rfcomm_param_modem_status
+	fetch 1,mem_ms_channel
+	fetcht 1,mem_remote_spp_channel
+	isub temp,null
+	branch parse_DLCI0_reconn_uih_ms_cmd_spp,zero
+	branch assert
+	branch rfcomm_rx_process_end
+parse_DLCI0_reconn_uih_ms_cmd_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_RCV_MS_CMD,pdata
+	set1 RFCOMM_CHANNEL_STATE_SND_MS_RES,pdata
+	store 1,mem_spp_state
+	fetcht 1,mem_pn_dlci
+	lshift2 temp,temp
+	or_into 3,temp
+	call rfcomm_send_modem_status_res
+	branch rfcomm_rx_process_end
+	
+parse_DLCI0_reconn_uih_ms_res:
+	call get_rfcomm_param_modem_status
+	fetch 1,mem_ms_channel
+	fetcht 1,mem_remote_spp_channel
+	isub temp,null
+	branch parse_DLCI0_reconn_uih_ms_res_spp,zero
+	branch assert
+parse_DLCI0_reconn_uih_ms_res_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_RCV_MS_RES,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+
+parse_uih_reconn:
+	fetch 1,mem_current_channel
+	fetcht 1,mem_remote_spp_channel
+	isub temp,null
+	branch parse_uih_reconn_spp,zero
+	branch assert
+	branch rfcomm_rx_process_end
+
+parse_uih_reconn_spp:
+	fetch 1,mem_current_frame_type
+	beq RFCOMM_FRAME_TYPE_UA,parse_uih_reconn_spp_ua
+	beq RFCOMM_FRAME_TYPE_UIH,parse_uih_spp_uih
+	beq RFCOMM_FRAME_TYPE_UIH_CREDITS,parse_uih_spp_uih_credits
+	beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_reconn_spp_disconn
+parse_uih_reconn_spp_ua:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_UA,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+parse_uih_reconn_spp_sabm:
+	branch parse_uih_reconn_spp_sabm//loop
+parse_uih_reconn_spp_disconn:
+	branch parse_uih_rp_spp_disconn
+rfcomm_rx_process_end:
+	rtn
+	
+rfcomm_send_more_pkt:
+	fetch 1,mem_rfcomm_send_more_pkt
+	rtn blank
+	beq MORE_PKT_MSC_CMD_SPP,rfcomm_send_more_pkt_msc_cmd_spp
+	branch assert
+	
+rfcomm_send_more_pkt_msc_cmd_spp:
+	jam 0,mem_rfcomm_send_more_pkt
+	call l2cap_malloc_rfcomm_channel
+	arg SPP_SLAVE_CHANNEL,temp
+	fetcht 1,mem_pn_dlci
+	lshift2 temp,temp
+rfcomm_send_more_pkt_msc_cmd_spp0:
+	or_into 0x03,temp
+	arg 0xaa,regA
+	call rfcomm_send_modem_status_cmd
+	call l2cap_get_rfcomm_tx_buff
+	copy contw,contr
+	ifetch 2, contr
+	branch assert,blank
+	rtn
+
+rfcomm_send_sabm:
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x0004
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_current_adss
+	istore 1,contw //address
+	bpatchx patch35_2,mem_patch35
+	setarg 0x013f
+	istore 2,contw
+	fetch 1,mem_current_fcs
+	istore 1,contw
+	rtn
+rfcomm_send_ua:
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x0004
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_current_adss
+	istore 1,contw //address
+	bpatchx patch35_3,mem_patch35
+	setarg 0x0173
+	istore 2,contw
+	fetch 1,mem_current_fcs
+	istore 1,contw
+	rtn
+rfcomm_send_param_neg_cmd:
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x000e
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_rfcomm_initiator
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch35_4,mem_patch35
+	setarg 0x15ef
+	istore 2,contw
+	setarg 0x1183
+	istore 2,contw
+	copy temp,pdata //DLCI in temp
+	istore 1,contw
+	setarg 0x0000f0
+	istore 3,contw
+	setarg RFCOMM_MAX_FRAME_SIZE
+	istore 2,contw
+	setarg 0
+	istore 1,contw
+	setarg 0x01		//change here later
+	istore 1,contw
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	jam 0x10,mem_credit_given
+	rtn
+rfcomm_send_param_neg_res:
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x000e
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_rfcomm_initiator
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch35_5,mem_patch35
+	setarg 0x15ef
+	istore 2,contw
+	setarg 0x1181
+	istore 2,contw
+	fetch 1,mem_pn_dlci
+	istore 1,contw //DLCI
+	setarg 0x0000e0
+	istore 3,contw
+	fetch 2,mem_rfcomm_max_frame_size
+	istore 2,contw 
+	setarg 0x00 //max retrans
+	istore 1,contw
+	fetch 1,mem_rfcomm_credit_init_data
+	istore 1,contw // init credits
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	rtn
+rfcomm_send_modem_status_cmd:
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x0008
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_rfcomm_initiator
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch35_6,mem_patch35
+	setarg 0x09ef
+	istore 2,contw
+	setarg 0x05e3
+	istore 2,contw
+	copy temp,pdata //DLCI adress
+	istore 1,contw
+	setarg 0x8d
+	istore 1,contw
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	rtn
+
+rfcomm_send_modem_status_res:
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x0008
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	copy temp,timeup
+	fetch 1,mem_rfcomm_initiator
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch35_7,mem_patch35
+	setarg 0x09ef
+	istore 2,contw
+	setarg 0x05e1
+	istore 2,contw
+	copy timeup,pdata //DLCI address in temp
+	istore 1,contw
+	setarg 0x8d
+	istore 1,contw
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	rtn
+
+rfcomm_send_uih_without_payload:
+	bpatchx patch36_0,mem_patch36
+	fetch 1,mem_credit_given
+	rtn blank
+	hfetch 2,core_uart_rxitems
+	nrtn blank
+	copy rega,pdata
+	store 1,mem_pdatatemp+1
+	storet 1,mem_pdatatemp
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x05
+	istore 2,contw
+	fetch 2,mem_RFCOMM_remote_CID
+	istore 2,contw
+	fetch 1,mem_rfcomm_send_adss
+	istore 1,contw
+	setarg 0x01ff
+	istore 2,contw
+	fetch 1,mem_credit_given
+	istore 1,contw
+	fetch 1,mem_HIUfcs_SPP_WCredits
+	istore 1,contw
+	jam 0,mem_credit_given
+	rtn
+	
+rfcomm_increase_credit_given:
+	bpatchx patch36_1,mem_patch36
+	fetch 1,mem_credit_flag
+	rtneq CREDIT_ENABLE
+	fetch 2,mem_current_length
+	rtn blank
+	fetch 1,mem_credit_given
+	increase 1,pdata
+	store 1,mem_credit_given
+	rtn
+
+spp_process_rx_data:
+	fetch 2,mem_cb_receive_spp_data
+	branch callback_func
+
+spp_tx_rfcomm_packet:
+	bpatchx patch36_2,mem_patch36
+	//credit
+	fetch 1,mem_remote_credits
+	rtn blank
+	increase -1,pdata
+	store 1,mem_remote_credits
+	fetch 2,mem_pn_max_frame_size
+	fetcht 2,mem_current_packet_length
+	isub temp,null
+	branch ssp_tx_rfcomm_from_uart,positive
+	store 2,mem_current_packet_length
+ssp_tx_rfcomm_from_uart:
+	fetch 1,mem_credit_given
+	branch ssp_tx_rfcomm_from_uart_without_credit,blank
+	jam 1,mem_rfcomm_send_offset
+	fetch 1,mem_HIUfcs_SPP_WCredits
+	store 1,mem_rfcomm_send_fcs
+	setarg RSP_RX_UIH_WDATA
+	store 1,mem_rfcomm_send_frame_type
+	branch ssp_tx_rfcomm_from_uart_common
+ssp_tx_rfcomm_from_uart_without_credit:
+	jam 0,mem_rfcomm_send_offset
+	fetch 1,mem_HIUfcs_SPP
+	store 1,mem_rfcomm_send_fcs
+	setarg RSP_TX_UIH
+	store 1,mem_rfcomm_send_frame_type
+ssp_tx_rfcomm_from_uart_common:
+	bpatchx patch36_3,mem_patch36
+	fetch 2,mem_current_packet_length
+	sub pdata,127,null
+	branch ssp_tx_rfcomm_from_uart_common0,positive
+	fetch 1,mem_rfcomm_send_offset
+	increase 1,pdata
+	store 1,mem_rfcomm_send_offset
+ssp_tx_rfcomm_from_uart_common0:
+	call get_rfcomm_snd_adss
+	fetch 2,mem_current_packet_length
+	increase 8,pdata	//fcs + rfcommhead + l2caphead == 8
+	fetcht 1,mem_rfcomm_send_offset
+	iadd temp,rega
+	//rfcomm payload
+	call l2cap_malloc
+	store 2,mem_rfcomm_tx_buff_ptr
+	increase 4,pdata
+	store 2,mem_rfcomm_tx_payload_ptr
+	copy pdata,contw
+	fetch 1,mem_rfcomm_send_adss
+	istore 1,contw
+	fetch 1,mem_rfcomm_send_frame_type
+	istore 1,contw
+	call ssp_tx_write_length
+	call ssp_tx_write_given_credit
+	bpatchx patch36_4,mem_patch36
+	fetch 2,mem_nl_rx_data_src		//src
+	copy pdata,contru
+	fetch 2,mem_current_packet_length
+	copy pdata,loopcnt
+	call uart_copy_rx_bytes_fast
+	copy contw,temp
+	copy contru,pdata
+	store 2,mem_nl_rx_data_src
+	copy temp,contw	
+	fetch 1,mem_rfcomm_send_fcs
+	istore 1,contw
+	fetch 2,mem_rfcomm_tx_buff_ptr
+	copy pdata,contw
+	fetch 2,mem_current_packet_length
+	fetcht 1,mem_rfcomm_send_offset
+	iadd temp,pdata
+	increase 4,pdata
+	istore 2,contw
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw
+	jam 0,mem_credit_given	//whatever mem_credit_given is set to 0
+	fetch 2,mem_nl_rx_len_all
+	beq 0,module_hci_command_tx_spp_tx_complete
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	rtn
+
+ssp_tx_write_length:
+	bpatchx patch36_5,mem_patch36
+	fetch 2,mem_current_packet_length
+	sub pdata,0x7f,null
+	nbranch ssp_tx_write_long_packet,positive
+	lshift pdata,pdata
+	set1 0,pdata
+	istore 1,contw
+	rtn
+ssp_tx_write_long_packet:
+	fetch 2,mem_current_packet_length
+	rshift3 pdata,pdata
+	rshift4 pdata,temp
+	and_into 0x7f,pdata
+	lshift pdata,pdata
+	set0 0,pdata
+	istore 1,contw
+	istoret 1,contw
+	rtn
+ssp_tx_write_given_credit:
+	fetch 1,mem_credit_given
+	rtn blank
+	istore 1,contw
+	rtn
+
+	
+
+
+scheduler_process:
+	bpatchx patch36_6,mem_patch36
+	call check_51cmd
+	call app_process_bb_event
+	call process_conn_sm
+/* check the connection state sequence byte */
+	bpatchx patch36_7,mem_patch36
+	call sp_calc_sequence
+	call simple_pairing_sequence
+	call master_simple_paring_sequence
+//return if it is hci mode. 'cause the following is host part.
+//notify BB to tx a l2cap packet
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	//for conn to MTK 
+	call l2cap_call_proc_sigal_pending
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	bpatchx patch37_0,mem_patch37
+//to generat a new l2cap packet
+	call process_upper_sm
+	call l2cap_send_config_req
+	call rfcomm_send_more_pkt//use this function to send msc_cmd after msc_rep sent
+scheduler_process0:
+	call scheduler_tx_disconnect_hid //may not used
+	bpatchx patch37_1,mem_patch37
+//	call l2cap_malloc_is_fifo_full
+//	nrtn blank
+	branch app_process_bt
+	
+scheduler_tx_disconnect_hid:
+	fetch 1,mem_CONTROL_tasks		
+	bbit1 L2CAP_DISCONNECT_INTERRUPT,L2CAP_disconnect_interrupt_req
+	bbit1 L2CAP_DISCONNECT_CONTROL,L2CAP_disconnect_control_req
+	rtn
+	
+scheduler_tx_l2cap_pkt:
+	bpatchx patch37_2,mem_patch37
+	call l2cap_malloc_is_fifo_empty
+	rtn blank //empty
+	fetch 1,mem_op
+	rtnbit1 op_txl2cap
+	call l2cap_malloc_fifo_out
+	store 2,mem_txptr
+	copy pdata,contr
+	ifetch 2,contr
+	increase 4,pdata
+	store 2,mem_tx_len
+	jam 6,mem_tx_lch//start pkt
+	bpatchx patch37_3,mem_patch37
+	fetch 2,mem_l2cap_tx_multi_offset
+	branch scheduler_tx_l2cap_start_pkt,blank
+	fetch 1,mem_op
+	rtnbit0 op_pkt_comp
+	set0 op_pkt_comp,pdata
+	store 1,mem_op
+	jam 5,mem_tx_lch//continue pkt
+	fetcht 2,mem_l2cap_tx_multi_offset
+	fetch 2,mem_txptr
+	iadd temp,pdata
+	store 2,mem_txptr
+	fetch 2,mem_tx_len
+	isub temp,pdata
+	store 2,mem_tx_len
+scheduler_tx_l2cap_start_pkt:
+	bpatchx patch37_4,mem_patch37
+	fetch 2,mem_tx_len
+	branch assert,blank
+	arg l2cap_max_pkt_len,temp //max len of dh3 pkt
+	isub temp,pdata
+	nbranch scheduler_Tx_l2cap_last_pkt,positive
+	bpatchx patch37_5,mem_patch37
+	storet 2,mem_tx_len //l2cap_max_pkt_len
+	fetch 2,mem_l2cap_tx_multi_offset
+	iadd temp,pdata
+	store 2,mem_l2cap_tx_multi_offset
+	branch scheduler_Tx_l2cap_pkt_end
+scheduler_Tx_l2cap_last_pkt:
+	setarg 0
+	store 2,mem_l2cap_tx_multi_offset
+scheduler_Tx_l2cap_pkt_end:
+	fetch 1,mem_op
+	set1 op_txl2cap,pdata
+	store 1,mem_op
+	rtn
+
+scheduler_start_upper_sm:
+	fetch 1,mem_UI_profile_supported
+	bbit1 support_HID,scheduler_start_upper_sm_hid
+	jam UPPERSM_RECONN_SDP_CONN,mem_upper_sm_reconn
+	rtn
+scheduler_start_upper_sm_hid:
+	jam UPPERSM_RECONN_HID_CTRL_CONN,mem_upper_sm_reconn
+	rtn
+	
+process_upper_sm:
+	fetch 1,memui_reconnect_mode
+	nbranch process_upper_sm_reconn,blank
+process_upper_sm_remote_page:
+	fetch 1,mem_upper_sm_remote_page
+	//beq UPPERSM_RP_IDLE,process_upper_sm_rp_idle
+	rtn blank
+	//nothing to do when remote page to create a connection.
+	jam 0,mem_upper_sm_remote_page
+process_upper_sm_rp_wait:
+	rtn
+
+
+process_upper_sm_reconn:
+	bpatchx patch37_6,mem_patch37
+	fetch 1,mem_upper_sm_reconn
+	rtn blank
+	beq UPPERSM_RECONN_SDP_CONN,process_upper_sm_reconn_sdp_conn
+	beq UPPERSM_RECONN_SDP_CONN_WAIT,process_upper_sm_reconn_sdp_conn_wait
+	beq UPPERSM_RECONN_SDP_CFG,process_upper_sm_reconn_sdp_cfg
+	beq UPPERSM_RECONN_SDP_CFG_WAIT,process_upper_sm_reconn_sdp_cfg_wait
+	beq UPPERSM_RECONN_SS_SPP,process_upper_sm_reconn_ss_spp
+	beq UPPERSM_RECONN_SS_SPP_WAIT,process_upper_sm_reconn_ss_spp_wait
+	beq UPPERSM_RECONN_SDP_DISCONN,process_upper_sm_reconn_sdp_disconn
+	beq UPPERSM_RECONN_SDP_DISCONN_WAIT,process_upper_sm_reconn_sdp_disconn_wait
+	beq UPPERSM_RECONN_HID_CTRL_CONN,process_upper_sm_reconn_hid_ctrl_conn
+	beq UPPERSM_RECONN_HID_CTRL_CONN_WAIT,process_upper_sm_reconn_hid_ctrl_conn_wait
+	beq UPPERSM_RECONN_HID_CTRL_CFG,process_upper_sm_reconn_hid_ctrl_cfg
+	beq UPPERSM_RECONN_HID_CTRL_CFG_WAIT,process_upper_sm_reconn_hid_ctrl_cfg_wait
+	beq UPPERSM_RECONN_HID_INT_CONN,process_upper_sm_reconn_hid_int_conn
+	beq UPPERSM_RECONN_HID_INT_CONN_WAIT,process_upper_sm_reconn_hid_int_conn_wait
+	beq UPPERSM_RECONN_HID_INT_CFG,process_upper_sm_reconn_hid_int_cfg
+	beq UPPERSM_RECONN_HID_INT_CFG_WAIT,process_upper_sm_reconn_hid_int_cfg_wait
+	beq UPPERSM_RECONN_RFCOMM_CONN,process_upper_sm_reconn_rfcomm_conn
+	beq UPPERSM_RECONN_RFCOMM_CONN_WAIT,process_upper_sm_reconn_rfcomm_conn_wait
+	beq UPPERSM_RECONN_RFCOMM_CFG,process_upper_sm_reconn_rfcomm_cfg
+	beq UPPERSM_RECONN_RFCOMM_CFG_WAIT,process_upper_sm_reconn_rfcomm_cfg_wait
+	beq UPPERSM_RECONN_RFCOMM_SABM,process_upper_sm_reconn_rfcomm_sabm
+	beq UPPERSM_RECONN_RFCOMM_SABM_WAIT,process_upper_sm_reconn_rfcomm_sabm_wait
+	beq UPPERSM_RECONN_SPP_CMD_PN,process_upper_sm_reconn_spp_cmd_pn
+	beq UPPERSM_RECONN_SPP_CMD_PN_WAIT,process_upper_sm_reconn_spp_cmd_pn_wait
+	beq UPPERSM_RECONN_SPP_SABM,process_upper_sm_reconn_spp_sabm
+	beq UPPERSM_RECONN_SPP_SABM_WAIT,process_upper_sm_reconn_spp_sabm_wait
+	beq UPPERSM_RECONN_SPP_CMD_MS,process_upper_sm_reconn_spp_cmd_ms
+	beq UPPERSM_RECONN_SPP_CMD_MS_WAIT,process_upper_sm_reconn_spp_cmd_ms_wait
+process_upper_sm_reconn_wait:
+	rtn
+process_upper_sm_reconn_sdp_conn:
+	call upper_sm_send_sdp_conn //return n-user if sending failed
+	jam UPPERSM_RECONN_SDP_CONN_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	store 1,mem_sdp_state
+	rtn
+process_upper_sm_reconn_sdp_cfg:
+	jam UPPERSM_RECONN_SDP_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_sdp_state
+	rtnbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ
+	jam UPPERSM_RECONN_SDP_CFG,mem_upper_sm_reconn
+	call upper_sm_send_sdp_cfg //return n-user if sending failed
+	jam UPPERSM_RECONN_SDP_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_sdp_state
+	rtn
+process_upper_sm_reconn_ss_spp:
+	call l2cap_malloc_is_fifo_empty
+	nrtn blank
+	call upper_sm_send_ss_spp
+	jam UPPERSM_RECONN_SS_SPP_WAIT,mem_upper_sm_reconn
+	rtn
+process_upper_sm_reconn_sdp_disconn:
+	call upper_sm_send_sdp_disconn
+	jam UPPERSM_RECONN_SDP_DISCONN_WAIT,mem_upper_sm_reconn
+	rtn
+process_upper_sm_reconn_hid_ctrl_conn:
+	call upper_sm_send_hid_ctrl_conn
+	jam UPPERSM_RECONN_HID_CTRL_CONN_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	store 1,mem_hid_control_state
+	rtn
+process_upper_sm_reconn_hid_ctrl_cfg:    
+	call upper_sm_send_hid_ctrl_cfg
+	jam UPPERSM_RECONN_HID_CTRL_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_hid_control_state
+	rtn
+process_upper_sm_reconn_hid_int_conn:
+	call upper_sm_send_hid_int_conn
+	jam UPPERSM_RECONN_HID_INT_CONN_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	store 1,mem_hid_interrupt_state
+	rtn
+process_upper_sm_reconn_hid_int_cfg:    
+	call upper_sm_send_hid_int_cfg
+	jam UPPERSM_RECONN_HID_INT_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_hid_interrupt_state
+	rtn
+process_upper_sm_reconn_rfcomm_conn:
+	call upper_sm_send_rfcomm_conn
+	jam UPPERSM_RECONN_RFCOMM_CONN_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	store 1,mem_rfcomm_state
+	rtn
+process_upper_sm_reconn_rfcomm_cfg: 
+	call upper_sm_send_rfcomm_cfg
+	jam UPPERSM_RECONN_RFCOMM_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_rfcomm_state
+	rtn
+process_upper_sm_reconn_rfcomm_sabm:
+	call upper_sm_send_rfcomm_sabm
+	jam UPPERSM_RECONN_RFCOMM_SABM_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_RFCOMM_ONLY_SABM,pdata
+	store 1,mem_rfcomm_state
+	rtn
+process_upper_sm_reconn_spp_cmd_pn: 
+	call upper_sm_send_spp_cmd_pn
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_PN_CMD
+	store 1,mem_spp_state
+	jam UPPERSM_RECONN_SPP_CMD_PN_WAIT,mem_upper_sm_reconn
+	rtn
+process_upper_sm_reconn_spp_sabm:   
+	call upper_sm_send_spp_sabm
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_SABM
+	store 1,mem_spp_state
+	jam UPPERSM_RECONN_SPP_SABM_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_remote_spp_channel //address in pdata
+	lshift3 pdata,pdata
+	or_into 3,pdata
+	arg mem_HIUfcs_SPP,temp // mem_HIUfcs_spp_WCredits in regB++
+	storet 2,mem_contw_temp
+	branch rfcomm_save_FCS_uih
+process_upper_sm_reconn_spp_cmd_ms: 
+	call upper_sm_send_spp_cmd_ms
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_SND_MS_CMD
+	store 1,mem_spp_state
+	jam UPPERSM_RECONN_SPP_CMD_MS_WAIT,mem_upper_sm_reconn
+	rtn
+
+process_upper_sm_reconn_sdp_conn_wait:
+	fetch 1,mem_sdp_state
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES
+	jam UPPERSM_RECONN_SDP_CFG,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_sdp_cfg_wait:
+	fetch 1,mem_sdp_state
+	rtnne L2CAP_CHANNEL_SETUP_COMPLETE
+	jam UPPERSM_RECONN_SS_SPP ,mem_upper_sm_reconn
+process_upper_sm_reconn_ss_spp_wait:
+	fetch 1,mem_message_to_uppersm
+	rtnne RECIEVE_SS_REASULT_HF
+	jam 0,mem_message_to_uppersm
+	jam UPPERSM_RECONN_SDP_DISCONN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_sdp_disconn_wait:
+	fetch 1,mem_sdp_state
+	nrtn blank
+	fetch 1,mem_UI_profile_supported
+	bbit1 support_HID,process_upper_sm_reconn_setup_hid
+	bbit1 support_SPP,process_upper_sm_reconn_setup_rfcomm
+	branch process_upper_sm_reconn_termination
+process_upper_sm_reconn_hid_ctrl_conn_wait:
+	fetch 1,mem_hid_control_state
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES
+	jam UPPERSM_RECONN_HID_CTRL_CFG,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_hid_ctrl_cfg_wait:
+	fetch 1,mem_hid_control_state
+	rtnne L2CAP_CHANNEL_SETUP_COMPLETE
+	jam UPPERSM_RECONN_HID_INT_CONN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_hid_int_conn_wait:  
+	fetch 1,mem_hid_interrupt_state
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES
+	jam UPPERSM_RECONN_HID_INT_CFG,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_hid_int_cfg_wait:  
+	fetch 1,mem_hid_interrupt_state
+	rtnne L2CAP_CHANNEL_SETUP_COMPLETE
+	fetch 1,mem_UI_profile_supported
+	bbit1 support_SPP,process_upper_sm_reconn_setup_rfcomm
+	branch process_upper_sm_reconn_termination
+process_upper_sm_reconn_rfcomm_conn_wait: 
+	fetch 1,mem_rfcomm_state
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES
+	jam UPPERSM_RECONN_RFCOMM_CFG,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_rfcomm_cfg_wait:
+	fetch 1,mem_rfcomm_state
+	rtnne L2CAP_CHANNEL_SETUP_COMPLETE
+	jam UPPERSM_RECONN_RFCOMM_SABM,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_rfcomm_sabm_wait:  
+	fetch 1,mem_rfcomm_state
+	rtnne L2CAP_CHANNEL_RFCOMM_DLCI0_OPENED
+	fetch 1,mem_UI_profile_supported
+	bbit1 support_SPP,process_upper_sm_reconn_setup_spp
+	branch process_upper_sm_reconn_termination
+process_upper_sm_reconn_spp_cmd_pn_wait:
+	fetch 1,mem_spp_state
+	rtnbit0 RFCOMM_CHANNEL_STATE_PN_RES
+	jam UPPERSM_RECONN_SPP_SABM,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_spp_sabm_wait:
+	fetch 1,mem_spp_state
+	rtnbit0 RFCOMM_CHANNEL_STATE_UA
+	jam UPPERSM_RECONN_SPP_CMD_MS ,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_spp_cmd_ms_wait: 
+	fetch 1,mem_spp_state
+	rtnne RFCOMM_CHANNEL_SETUP_COMPLETE
+	branch process_upper_sm_reconn_termination
+
+process_upper_sm_reconn_setup_hid:
+	jam UPPERSM_RECONN_HID_CTRL_CONN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+
+process_upper_sm_reconn_setup_rfcomm:
+	jam UPPERSM_RECONN_RFCOMM_CONN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_setup_spp:
+	jam UPPERSM_RECONN_SPP_CMD_PN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+
+
+
+process_upper_sm_reconn_termination:
+	jam 0,mem_upper_sm_reconn
+	rtn
+upper_sm_send_sdp_conn:
+	bpatchx patch37_7,mem_patch37
+	call l2cap_malloc_signal_channel
+	setarg PSM_SDP
+	copy pdata,temp
+	setarg L2CAP_SDP_channel
+	copy pdata,timeup
+	branch ML2CAP_send_signal_connect_req
+	
+upper_sm_send_sdp_cfg:
+	bpatchx patch38_0,mem_patch38
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_SDP_remote_CID
+	copy pdata,temp
+	branch ML2CAP_send_signal_config_req
+	
+upper_sm_send_sdp_disconn:
+	bpatchx patch38_1,mem_patch38
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_SDP_remote_CID
+	copy pdata,temp
+	arg L2CAP_SDP_channel,timeup
+	call ML2CAP_send_signal_disconn_req
+	fetch 1,mem_sdp_state
+	set0 L2CAP_CHANNEL_STATE_RCV_CFG_RES ,pdata
+	store 1,mem_sdp_state
+	rtn
+//service search
+upper_sm_send_ss_spp:
+	bpatchx patch38_2,mem_patch38
+	call l2cap_malloc_sdp_channel
+	call sdp_send_spp_request
+	branch MSDP_send_req_done
+
+upper_sm_send_rfcomm_conn:
+	bpatchx patch38_3,mem_patch38
+	call l2cap_malloc_signal_channel
+	setarg PSM_RFCOMM
+	copy pdata,temp
+	setarg L2CAP_RFCOMM_channel
+	copy pdata,timeup
+	branch ML2CAP_send_signal_connect_req
+
+upper_sm_send_rfcomm_cfg:
+	bpatchx patch38_4,mem_patch38
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_rfcomm_remote_cid
+	copy pdata,temp
+	branch ML2CAP_send_signal_config_req
+
+upper_sm_send_hid_ctrl_conn:
+	bpatchx patch38_5,mem_patch38
+	call l2cap_malloc_signal_channel
+	setarg PSM_HID_control
+	copy pdata,temp
+	setarg L2CAP_HID_Control_channel
+	copy pdata,timeup
+	branch ML2CAP_send_signal_connect_req
+
+upper_sm_send_hid_ctrl_cfg:
+	bpatchx patch38_6,mem_patch38
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_hid_ctrl_remote_cid
+	copy pdata,temp
+	branch ML2CAP_send_signal_config_req
+
+upper_sm_send_hid_int_conn:
+	bpatchx patch38_7,mem_patch38
+	call l2cap_malloc_signal_channel
+	setarg PSM_HID_interrupt
+	copy pdata,temp
+	setarg L2CAP_HID_interrupt_channel
+	copy pdata,timeup
+	branch ML2CAP_send_signal_connect_req
+	
+upper_sm_send_hid_int_cfg:
+	bpatchx patch39_0,mem_patch39
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_hid_int_remote_cid
+	copy pdata,temp
+	branch ML2CAP_send_signal_config_req
+
+upper_sm_send_rfcomm_sabm:
+	bpatchx patch39_1,mem_patch39
+	call l2cap_malloc_rfcomm_channel
+	//force 3,temp //address
+	jam 3,mem_current_adss
+	jam 0x1c,mem_current_fcs
+	call rfcomm_send_sabm
+	jam 1,mem_rfcomm_initiator
+	rtn
+
+upper_sm_send_spp_cmd_pn:
+	bpatchx patch39_2,mem_patch39
+	call l2cap_malloc_rfcomm_channel
+	fetcht 1,mem_remote_spp_channel
+	call channel_to_dlci
+	storet 1,mem_pn_dlci
+	branch rfcomm_send_param_neg_cmd
+
+upper_sm_send_spp_sabm:
+	bpatchx patch39_3,mem_patch39
+	call l2cap_malloc_rfcomm_channel
+	fetcht 1,mem_pn_dlci
+	call dlci_to_address_cmd
+	call rfcomm_calculate_FCS_sabm //sabm fcs use once only,not need to save
+	store 1,mem_current_fcs
+	fetcht 1,mem_pn_dlci
+	call dlci_to_address_cmd
+	storet 1,mem_current_adss
+	branch rfcomm_send_sabm
+
+upper_sm_send_spp_cmd_ms:
+	bpatchx patch39_4,mem_patch39
+	call l2cap_malloc_rfcomm_channel
+	fetcht 1,mem_pn_dlci
+	call dlci_to_address_cmd //address in temp
+	branch rfcomm_send_modem_status_cmd
+
+
+
+/**********************************************************************/
+/* Subroutine: sdp_process                                         */
+/* Process Service Discovery Request                                  */
+/* Called from L2CAP, check PDUID, branch to different req processings*/
+/*                                                                    */  
+/* Input:       mem_L2CAP_Rx_payload                                  */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length	      */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process:
+	bpatchx patch39_5,mem_patch39
+	fetch 2,mem_l2cap_payload_ptr
+	iforce contr
+//	ifetchr regb,1,contr				/* PDUID */
+//	storer regb,1,mem_sdp_pduid
+	ifetch 1,contr
+	copy pdata,regb
+	store 1,mem_sdp_pduid
+	ifetch 2,contr
+	store 2,mem_sdp_transactionid			/* save transaction id */
+	ifetch 1,contr				/* higher byte of parameter length */
+	lshift8 pdata,timeup				
+	ifetch 1,contr				/* lower byte of parameter length */
+	iadd timeup,timeup				/* parameter length stored in "timeup" */
+	bpatchx patch39_6,mem_patch39
+	copy contr,temp
+	arg 4,loopcnt
+	arg mem_sdp_handle_list,contw
+	call memset0
+	copy temp,contr 
+	deposit regb						/* PDUID  */
+	beq SDP_ERROR_RES,sdp_process_error_res
+	beq SDP_SEARCH_REQ,sdp_process_ss_req
+	beq SDP_SEARCH_RES,sdp_process_ss_res
+	beq SDP_ATTRIBUTE_REQ,sdp_process_sa_req
+	beq SDP_ATTRIBUTE_RES,sdp_process_sa_res
+	beq SDP_SEARCHATTRIB_REQ,sdp_process_ssa_req
+	beq SDP_SEARCHATTRIB_RES,sdp_process_ssa_res
+	branch sdp_insufficient_resource
+
+/**********************************************************************/
+/* ss_req			                              */
+/* Processing Service Search Request                                  */
+/* Call: ask_serviceclassid, empty_response                     */
+/*                                                                    */  
+/* Input:       mem_L2CAP_Rx_payload pointer in contr                 */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length	      */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process_ss_req:
+	bpatchx patch39_7,mem_patch39
+	call ask_serviceclassid
+	compare 1,temp,0xff
+	branch ss_empty_rsp,true
+	compare 0xff,temp,0xff
+	branch sdp_invalid_request_syntax,true
+
+	ifetch 2,contr				/* max aservice record count */
+	store 2,mem_sdp_record_maxcnt
+	increase -2,timeup
+
+	increase -1,timeup				/* continuation state 1 byte (0) */
+	nbranch sdp_invalid_pdu_size,zero		/* invalid pdu size */
+	arg mem_sdp_uuid_search_ptr,timeup
+	ifetch 2,timeup
+	rtn blank
+	call search_all_uuid
+	call l2cap_get_sdp_tx_payload			/* put the pointer to Tx buffer  */
+	force 3,pdata						/* PDUID 3, Service Search Response */
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid			/* write transaction id */
+	istore 2,contw
+	lshift2 queue,pdata
+	add pdata,5,pdata
+	add pdata,5,regc
+	byteswap pdata,pdata
+	istore 2,contw							/* write parLength */
+	deposit queue
+	byteswap pdata,pdata
+	istore 2,contw							/* write TotSrvRecCount */
+	istore 2,contw							/* write CurSrvRecCount */
+	arg mem_sdp_handle_list,contr
+	copy queue,loopcnt
+	branch ss_req_blank,zero
+ss_req_loop:	
+	ifetch 4,contr
+	istore 4,contw
+	loop ss_req_loop
+ss_req_blank:	
+	force 0,pdata
+	istore 1,contw							/* continuation state */
+	deposit regc
+	store 2,mem_sdp_tx_pkt_length
+//	branch assert,blank
+	rtn
+
+/**********************************************************************/
+/* sa_req			                              */
+/* Processing Service Attribute Request                               */
+/* Call: ask_attributeid, empty_response (if 3 stored attr.     */
+/* not asked) or answer_attributelist                              */  
+/* Input:       mem_L2CAP_Rx_payload pointer in contr                 */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length	      */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process_sa_req:
+	bpatchx patch3a_0,mem_patch3a
+	ifetch 4,contr				/* service record handle */
+	store 4,mem_sdp_record_handle	 
+	increase -4,timeup
+	call sdp_store_maxbyte
+	store 2,mem_sdp_attribute_maxbyte
+	increase -2,timeup
+	call dataelementtype6		/* result: data size stored in rega */
+	branch sdp_invalid_request_syntax,zero
+	compare 5,rega,0xff  // length
+	//branch sa_req_all,true
+	branch sa_judge_wholerange,true
+sa_isnot_wholerange:
+	arg mem_sdp_attrib_list,contw
+	force 0,queue
+	branch sa_req_loop
+sa_judge_wholerange:
+	ifetch 1,contr
+	bne SDP_ATTRIBUTE_RANGE,sdp_invalid_request_syntax
+	ifetch 2,contr
+	nbranch sa_judge_wholerange_false1,blank
+	ifetch 1,contr
+	bne 0xff,sa_judge_wholerange_false2
+	ifetch 1,contr
+	bne 0xff,sa_judge_wholerange_false3		//also exist potential bug because mem_sdp_attrib_list length is only 7f
+	branch sa_req_all
+sa_judge_wholerange_false3:
+	increase -5,contr
+	branch sa_isnot_wholerange
+sa_judge_wholerange_false2:
+	increase -4,contr
+	branch sa_isnot_wholerange
+sa_judge_wholerange_false1:
+	increase -3,contr
+	branch sa_isnot_wholerange
+sa_req_loop:	
+	ifetch 1,contr
+	beq SDP_ATTRIBUTE_ID, sa_req_one_id
+	beq SDP_ATTRIBUTE_RANGE, sa_req_range
+sa_req_range:
+	ifetch 2, contr
+	istore 2, contw
+	increase 1,queue
+	byteswap pdata,regb
+	ifetch 2, contr
+	byteswap pdata,pdata
+sa_req_range_id_increase:	
+	increase 1, regb
+	isub regb, null
+	nbranch sa_req_range_id_finish,positive
+	copy pdata, regc
+	byteswap regb,pdata
+	istore 2, contw
+	increase 1,queue
+	copy regc, pdata
+	branch sa_req_range_id_increase
+sa_req_range_id_finish:
+	increase -5,timeup
+	increase -5,rega
+	branch sa_req_check_next_id
+sa_req_one_id:
+	ifetch 2,contr
+	istore 2,contw //save the attribute id in mem_sdp_attrib_list
+	increase 1,queue
+	increase -3,timeup
+	increase -3,rega
+sa_req_check_next_id:	
+	nbranch sdp_invalid_request_syntax,positive
+	nbranch sa_req_loop,zero //another attribute 
+	increase -1,timeup
+	nbranch sdp_invalid_request_syntax,zero
+	
+	call l2cap_get_sdp_tx_payload
+	increase 10,contw
+	arg mem_sdp_attrib_list,rega
+sa_req_handle_attributelist_next:
+	copy queue,pdata
+	branch sa_req_handle_attributelist_end,blank
+	ifetch 2,rega
+	branch sa_req_handle_attributelist_end,blank
+	iforce regb /* regb is the attribute ID */
+	fetch 4,mem_sdp_record_handle	
+	iforce temp
+	call search_handle_attrib
+	copy contr,pdata
+	branch sa_req_handle_attributelist_notfound,blank
+	increase -3,contr
+	ifetch 3,contr
+	istore 3,contw
+	call sdp_data_len
+	iforce loopcnt	
+	call memcpy
+sa_req_handle_attributelist_notfound:
+	increase 2,rega
+	increase -1, queue
+	branch sa_req_handle_attributelist_next
+
+sa_req_handle_attributelist_end:	
+	arg SDP_ATTRIBUTE_RES,rega
+	call ssa_req_range_lastfreg_common
+	fetch 2,mem_sdp_tx_pkt_length	
+	beq 11,sa_empty_rsp
+	branch  ssa_req_range_attrbutes_length_no_continue
+
+
+sdp_store_continue_common:
+	ifetch 1, contr
+	beq 0, sdp_store_continue_0byte
+	beq 1,sdp_store_continue_1byte
+	beq 2, sdp_store_continue_2byte
+sdp_store_continue_0byte:	
+	increase -1,timeup				/* continuation state byte (0) */
+	branch sdp_store_continue_end
+sdp_store_continue_1byte:
+	ifetch 1, contr
+	increase -2,timeup				/* continuation state byte (1) */
+	branch sdp_store_continue_end
+sdp_store_continue_2byte:
+	ifetch 2, contr
+	byteswap pdata,pdata
+	increase -3,timeup				/* continuation state byte (2) */
+sdp_store_continue_end:
+	store 2, mem_sdp_continue_byte	
+	rtn
+	
+sa_req_all:	
+	increase -5,timeup
+	call sdp_store_continue_common
+	nbranch sdp_invalid_pdu_size,zero
+	fetcht 4,mem_sdp_record_handle		
+	call search_handle
+	nbranch sdp_invalid_service_record_handle,zero
+	copy contr,rega
+	call l2cap_get_sdp_tx_payload
+	copy rega,contr
+	increase 3,contw//arg mem_SDP_Tx_payload+3,contw
+	copy contr,timeup //sdp start pointer
+	call sdp_get_data
+	copy pdata, rega //sdp total length
+//	fetchr regb,2,mem_sdp_continue_byte
+	fetch 2,mem_sdp_continue_byte
+	copy pdata,regb
+	copy rega,pdata
+	isub regb,regb //total_length - continue_byte in regb
+	fetch 2, mem_sdp_attribute_maxbyte
+	isub regb, null
+	nbranch sa_req_all_fragment_sdp, positive
+	// the last fragment
+	disable user
+	fetch 2, mem_sdp_continue_byte
+	branch sa_req_all_fisrt_fragment,blank
+	iadd timeup, contr //set the read pointer
+	increase 3,regb //include the total length field, 3 bytes
+	copy regb, loopcnt
+	copy loopcnt, pdata
+	increase 3, pdata
+	byteswap pdata,pdata
+	istore 2, contw
+	copy loopcnt, pdata
+	byteswap pdata,pdata
+	istore 2, contw
+	branch sa_req_all_answer_attributelist_full_loop
+sa_req_all_fisrt_fragment:
+	add rega,6,loopcnt
+	branch sa_req_all_parlength_continue_byte, user
+	byteswap loopcnt,pdata
+	branch sa_req_all_parlength_continue_byte_end
+sa_req_all_parlength_continue_byte:
+	copy loopcnt, pdata
+	increase 2, pdata
+	byteswap pdata,pdata
+sa_req_all_parlength_continue_byte_end:
+	istore 2,contw				/* ParLength */
+	increase -3,loopcnt
+	byteswap loopcnt,pdata			
+	istore 2,contw				/* AttrListByteCount */
+	copy timeup,contr
+	branch sa_req_all_answer_attributelist_full_loop
+sa_req_all_fragment_sdp:
+	enable user
+//	fetchr rega,2,mem_sdp_attribute_maxbyte
+	fetch 2,mem_sdp_attribute_maxbyte
+	copy pdata,rega
+	copy rega,loopcnt
+	fetch 2, mem_sdp_continue_byte
+	branch sa_req_all_fisrt_fragment,blank
+	iadd timeup, contr
+	copy rega,pdata
+	increase 5,pdata
+	byteswap pdata,pdata	
+	istore 2, contw
+	copy rega,pdata
+	byteswap pdata,pdata
+	istore 2, contw
+sa_req_all_answer_attributelist_full_loop:
+	call memcpy
+	nbranch sa_req_all_last_frag_continue, user
+	force 2,pdata
+	istore 1,contw
+	copy contr, pdata
+	isub timeup, pdata
+	byteswap pdata,pdata
+	istore 2, contw   // continuation length
+	branch sa_req_all_frag_end
+sa_req_all_last_frag_continue:
+	force 0,pdata
+	istore 1,contw
+sa_req_all_frag_end:	
+	arg SDP_ATTRIBUTE_RES,rega
+	branch ssa_req_range_common	
+	
+/**********************************************************************/
+/* ssa_req                          		      */
+/* Processing Service Search Attribute Request                        */
+/* Call: ask_serviceclassid, ask_attributeid, empty_response */
+/*       or answer_attributelist                                   */  
+/* Input:       contr                                                 */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length             */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process_ssa_req:
+	bpatchx patch3a_1,mem_patch3a
+	call ask_serviceclassid
+	compare 0xff,temp,0xff
+	branch sdp_invalid_request_syntax,true
+	call sdp_store_maxbyte
+	store 2,mem_sdp_attribute_maxbyte
+	increase -2,timeup
+	call dataelementtype6
+	arg mem_sdp_attrib_list,contw
+	force 0,queue
+ssa_req_loop:	
+	ifetch 1,contr 
+	beq SDP_ATTRIBUTE_RANGE,ssa_req_range
+	ifetch 2,contr 
+	istore 2,contw //save the attribute id in mem_sdp_attrib_list
+	increase 1,queue
+	increase -3,timeup
+	increase -3,rega
+	nbranch sdp_invalid_request_syntax,positive
+	nbranch ssa_req_loop,zero
+	increase -1,timeup
+	nbranch sdp_invalid_request_syntax,zero
+	call l2cap_get_sdp_tx_payload
+	increase 13,contw//arg mem_SDP_Tx_payload+13,contw
+	fetch 2,mem_sdp_uuid_search_ptr
+	iforce regc
+	arg mem_sdp_attrib_list,rega
+ssa_req_attributelist_next:	
+	ifetch 2,rega
+	branch ssa_req_attributelist_end,blank
+	iforce regb						/* regb is the attribute ID */
+	call search_attrib
+	branch ssa_req_attributelist_notfound,blank
+	increase -3,contr
+	ifetch 3,contr
+	istore 3,contw
+	call sdp_data_len
+	iforce loopcnt	
+  	call memcpy
+ssa_req_attributelist_notfound:
+	increase 2,rega
+	branch ssa_req_attributelist_next
+
+ssa_req_attributelist_end:
+	call ssa_req_range_lastfreg
+	fetch 2,mem_sdp_tx_pkt_length	
+	beq 14,ssa_empty_rsp
+	call ssa_req_range_attrbutes_length_no_continue
+	branch ssa_req_range_attrbutes_length_no_continue
+
+
+sdp_store_maxbyte:	
+	ifetch 2,contr				 
+	byteswap pdata,pdata
+	increase -3,pdata	
+	arg 200,temp
+	isub temp,null
+	nrtn positive
+	setarg 200
+	rtn
+	
+
+ssa_req_range:
+	increase 4,contr
+	increase -5,timeup
+	increase -5,rega
+	nbranch sdp_invalid_request_syntax,zero
+	call 	sdp_store_continue_common
+	nbranch sdp_invalid_pdu_size,zero
+	arg mem_sdp_uuid_search_ptr,timeup
+	call search_all_uuid  
+	deposit queue
+	branch ssa_empty_rsp,blank
+	store 1,mem_handle_humber
+//	storer regb,2,mem_sdp_all_length
+	copy regb,pdata
+	store 2,mem_sdp_all_length
+	arg 0,queue
+	arg 0,rega
+	call l2cap_get_sdp_tx_payload
+	increase 10,contw 
+ssa_req_range_find_handle:
+	call ssa_req_range_get_length	
+	nbranch assert,user
+	copy contr,timeup
+	copy pdata,regc
+	iadd rega,rega
+//	copy pdata,rega 
+//	fetch 2,mem_sdp_all_length
+	fetch 2,mem_sdp_continue_byte
+	copy pdata,regb
+	branch ssa_req_range_first_freg,blank
+ssa_req_range_later_freg_with_continue:
+	copy rega,pdata
+	isub regb,regb //total_length - continue_byte in rega
+	branch ssa_req_range_next_handle,zero
+	nbranch ssa_req_range_next_handle,positive
+	fetch 2, mem_sdp_attribute_maxbyte
+	isub regb, null
+	branch ssa_req_range_maxbyte_with_continue,zero
+	nbranch ssa_req_range_maxbyte_with_continue, positive  
+	
+ // data length < =maxbyte 
+ssa_req_range_send_not_maxbyte:
+ 	copy regb,loopcnt
+	call ssa_req_range_maxbyte_with_continue_cpy
+ 	fetch 1,mem_handle_humber
+	increase 1,queue
+	isub queue,null
+	branch ssa_req_range_lastfreg,zero
+	branch ssa_req_range_freg_with_continue
+	
+ssa_req_range_maxbyte_with_continue:
+ 	copy pdata,loopcnt
+ 	call ssa_req_range_maxbyte_with_continue_cpy
+ 	branch ssa_req_range_freg_with_continue
+ 	
+ssa_req_range_maxbyte_with_continue_cpy:
+	increase -3,contw   
+	copy loopcnt,temp
+ 	copy regc,pdata
+	isub regb,pdata
+	iadd timeup,contr
+ 	branch memcpy
+
+ssa_req_range_next_handle:
+	fetch 1,mem_handle_humber
+	increase 1,queue
+	isub queue,null
+	rtn zero //
+	branch ssa_req_range_find_handle
+
+ssa_req_range_get_length:	
+	call disable_user
+	arg mem_sdp_handle_list,contr
+	lshift2 queue,pdata
+	iadd contr,contr
+	ifetcht 4, contr
+	call search_handle
+	nrtn zero
+	call sdp_data_len
+	branch enable_user
+
+ssa_req_range_first_freg:
+	fetch 2, mem_sdp_attribute_maxbyte
+	isub rega, null
+	nbranch ssa_req_range_firstfreg_maxbyte_with_continue,positive
+	copy rega,loopcnt
+	copy loopcnt,temp
+	copy timeup,contr
+	call memcpy
+	fetch 2,mem_sdp_all_length
+	isub rega,null
+	branch ssa_req_range_freg_no_continue,zero
+ssa_req_range_firstfreg_not_maxbyte_with_continue:
+	call ssa_req_range_freg_with_continue
+	branch ssa_req_range_attrbutes_length
+	
+ssa_req_range_freg_no_continue:
+	call ssa_req_range_lastfreg
+	branch ssa_req_range_attrbutes_length
+	
+ssa_req_range_lastfreg:
+	arg SDP_SEARCHATTRIB_RES,rega  //PUD ID
+ssa_req_range_lastfreg_common:
+	force 0,pdata
+	istore 1,contw
+	call ssa_req_range_common
+	fetcht 2,mem_sdp_tx_pkt_length
+	increase -5,temp
+	byteswap temp,pdata
+	istore 2, contw
+	increase -3,temp
+	byteswap temp,pdata
+	istore 2, contw  //attribute length
+	rtn
+
+ssa_req_range_firstfreg_maxbyte_with_continue:
+	copy pdata,loopcnt
+	copy loopcnt,temp
+	copy timeup,contr
+	call memcpy
+	call ssa_req_range_freg_with_continue
+ssa_req_range_attrbutes_length:	
+	setarg 0x36
+	istore 1,contw
+	fetch 2,mem_sdp_all_length
+	byteswap pdata,pdata
+	istore 2, contw 
+	rtn	
+
+ssa_req_range_attrbutes_length_no_continue:	
+	setarg 0x36
+	istore 1,contw
+	increase -3,temp
+	byteswap temp,pdata
+	istore 2, contw 
+	rtn	
+
+ssa_req_range_freg_with_continue:
+	arg SDP_SEARCHATTRIB_RES,rega  //PUD ID
+	setarg 2
+	istore 1,contw	
+	fetch 2,mem_sdp_continue_byte
+	iadd temp,temp
+	byteswap temp,pdata
+	istore 2,contw
+	call ssa_req_range_common
+	fetcht 2,mem_sdp_tx_pkt_length
+	increase -5,temp
+	byteswap temp,pdata
+	istore 2, contw
+	increase -5,temp
+	byteswap temp,pdata
+	istore 2, contw 
+	rtn	
+
+ssa_req_range_common:
+	fetch 2,mem_sdp_tx_payload_ptr
+	isub contw,pdata
+	sub pdata,0,pdata
+	store 2,mem_sdp_tx_pkt_length
+	call l2cap_get_sdp_tx_payload 
+	copy rega,pdata  //PUD ID
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid
+	istore 2,contw
+	rtn
+
+
+
+
+/**********************************************************************/
+/* ssa_res			                      */
+/* Processing Service Search Attribute Response                       */
+/* Call: dataelementtype6, attribute_reading                    */
+/* Input:       contr                                                 */
+/* Output:      mem_sdp_record_handle,mem_sdp_search_failed           */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process_ssa_res:
+sdp_process_ss_res:
+sdp_process_sa_res:
+sdp_process_error_res:
+	rtn
+/*
+sdp_process_ss_res:
+	bpatchx patch3a_2,mem_patch3a
+	ifetch 2,contr
+	ifetch 2,contr
+	byteswap pdata,pdata
+	bne 1,assert
+	ifetch 4,contr
+	store 4,mem_sdp_record_handle
+	fetchr regc,2,mem_sdp_l2capch_ptr
+	add regc,offset_lc_state,regc
+	ifetch 1,regc
+	set1 L2CAP_CHANNEL_STATE_RECV_SEARCH_RES,pdata
+	istore 1,regc
+	rtn
+	
+sdp_process_sa_res:
+	bpatchx patch3a_3,mem_patch3a
+	fetchr regc,2,mem_sdp_l2capch_ptr
+	add regc,offset_lc_state,regc
+	ifetch 1,regc
+	set1 L2CAP_CHANNEL_STATE_RECV_ATTRIB_RES,pdata
+	istore 1,regc
+	copy temp,contr
+	ifetch 2,contr
+	call search_rfcomm_cn
+	store 1,mem_profile_channel	
+	rtn
+*/
+
+				    
+
+sdp_invalid_service_record_handle:		
+	setarg 0x0200
+	store 2,mem_sdp_error_code
+	branch sdp_error_response
+sdp_invalid_pdu_size:				
+	setarg 0x0400
+	store 2,mem_sdp_error_code
+	branch sdp_error_response
+sdp_insufficient_resource:			
+	setarg 0x0600
+	store 2,mem_sdp_error_code
+	branch sdp_error_response
+sdp_invalid_request_syntax:			
+	setarg 0x0300
+	store 2,mem_sdp_error_code
+sdp_error_response:	
+	call l2cap_get_sdp_tx_payload
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid			
+	istore 2,contw
+	setarg 0x0200					
+	istore 2,contw
+	fetch 2,mem_sdp_error_code			
+	istore 2,contw
+	jam  7,mem_sdp_tx_pkt_length
+	rtn
+
+
+//store uuid in mem_sdp_uuid_search_ptr,
+//return temp 0xff if wrong 
+ask_serviceclassid:  
+	arg 0,regb
+	force 0,temp					/* use "temp" to mark syntax error or to mark 128 bit uuid */
+	arg mem_sdp_uuid_search_ptr,contw
+	call dataelementtype6
+	branch asksrv_error,zero
+classidloop:
+	increase 1,regb
+	ifetch 1,contr
+	increase -1,rega
+	increase -1,timeup
+	compare 0x18,pdata,0xf8			/* 5 MSB: b00011: uuid */
+	nbranch asksrv_error,true
+	compare 0x04,pdata,0x07			/* 3 LSB: b100 128 bits uuid */
+	nbranch cmp032,true
+	force 1,temp					/* mark it as 128 bit uuid */
+skip2bytes:
+	ifetch 1,contr
+	increase -1,rega	
+	increase -1,timeup
+	bne 0x00, frstbwrong
+	ifetch 1,contr
+	increase -1,rega	
+	increase -1,timeup
+	beq 0x00, cmpuuid
+	branch scndbwrong
+frstbwrong:  
+	increase 1,contr
+	increase -1,rega	
+	increase -1,timeup
+scndbwrong:  
+	increase 2,contr				/* skip 2 bytes, first 2 bytes already wrong */
+	increase -2,rega	
+	increase -2,timeup
+	compare 0x00,temp,0xff                        /* 128 bits or 32 bits ? */
+	branch loopornot,true
+	increase 12,contr				/* skip 12 bytes, first 2 bytes already wrong */
+	increase -12,rega	
+	increase -12,timeup
+	branch loopornot
+cmp032:
+	compare 0x02,pdata,0x07			/* 3 LSB: b010 32 bits uuid */
+	nbranch cmp016,true
+	branch skip2bytes			
+cmp016:
+	compare 0x01,pdata,0x07			/* 3 LSB: b001 16 bit uuid */
+	nbranch asksrv_error,true
+cmpuuid:
+	increase -2,rega
+	increase -2,timeup
+	ifetch 2,contr				/* higher order byte */
+	sub regb,4,null
+	branch uuidsize,zero //max store uuids =3 
+	istore 2,contw
+uuidsize:
+	compare 0x00,temp,0xff			/* is this 128 bits uuid */
+	branch loopornot,true
+	copy contr,temp
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x10, wrong12b
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x80, wrong12b
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x80, wrong12b
+	ifetch 1,contr
+	bne 0x5f, wrong12b
+	ifetch 1,contr
+	bne 0x9b, wrong12b
+	ifetch 1,contr
+	bne 0x34, wrong12b
+	ifetch 1,contr
+	beq 0xfb, chck12dn
+wrong12b:
+	copy temp,contr  
+wrong12b1:
+	increase 12,contr				/* skip 12 bytes */
+	force 0x00,queue
+	force 0x00,temp
+	branch chck12dn
+
+chck12dn:
+	increase -12,timeup
+	increase -12,rega
+loopornot:
+	force 0x00,temp
+	compare 0x00,rega,0xff
+	nbranch classidloop,true
+	force 0,pdata
+	istore 2,contw			/* end list with null */
+	rtn
+asksrv_error:
+	arg 0xff,temp
+	rtn
+
+/**********************************************************************/
+/* Subroutine: dataelementtype6                                    */
+/* Parse Data Element Sequence, obtain the data size                  */
+/* Input:  SDP Rx Buf Pointer in contr, parameter count in timeup     */
+/* Output: data length in rega, data pointer in contr             */
+/*         and  parameter count in timeup, return with zero flag set: */
+/*         syntax error                                               */
+/**********************************************************************/     
+dataelementtype6:
+	bpatchx patch3a_4,mem_patch3a
+	ifetch 1,contr
+	increase -1,timeup
+	compare 0x30,pdata,0xf8			/* 5 MSB: b00110: type 6 */
+	nbranch dsize_error,true
+	compare 0x07,pdata,0x07			/* 3 LSB: b111: 32 bits */
+	branch dsize32,true
+	compare 0x06,pdata,0x07			/* 3 LSB: b110: 16 bits */
+	branch dsize16,true
+	compare 0x05,pdata,0x07			/* 3 LSB: b101: 8 bits */
+	nbranch dsize_error,true
+//	ifetchr rega,1,contr				/* data length in reg A */
+	ifetch 1,contr
+	copy pdata,rega
+	increase -1,timeup
+	branch dsize
+dsize32:
+	increase 2,contr				 
+	increase -2,timeup
+dsize16:
+	ifetch 2,contr
+	byteswap pdata,rega
+	increase -2,timeup
+dsize:
+	force 0x01,pdata
+	rtn
+dsize_error:
+	force 0x00,pdata
+	rtn
+
+/**********************************************************************/
+/* Subroutine: sa_empty_rsp                                      */
+/* Send empty response                                                */
+/*                                                                    */
+/* Input:       mem_sdp_pduid, mem_sdp_transactionid                  */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length             */
+/*                                                                    */
+/**********************************************************************/     
+ss_empty_rsp:
+	setarg SDP_SEARCH_RES
+	store 1, mem_sdp_pduid
+	branch empty_response
+sa_empty_rsp:
+	setarg SDP_ATTRIBUTE_RES
+	store 1, mem_sdp_pduid
+	branch empty_response
+ssa_empty_rsp:
+	setarg SDP_SEARCHATTRIB_RES
+	store 1, mem_sdp_pduid
+empty_response:
+	call l2cap_get_sdp_tx_payload			/* empty attribute list */
+//	fetchr regb,1,mem_sdp_pduid				/* PDUID */
+//	istorer regb,1,contw
+	fetch 1,mem_sdp_pduid
+	copy pdata,regb
+	istore 1,contw 
+	fetch 2,mem_sdp_transactionid			/* copy back transaction id */
+	istore 2,contw
+	setarg 0x0500
+	istore 2, contw
+	compare SDP_ATTRIBUTE_RES,regb,0xff			 
+	branch fullsearch,true
+	compare SDP_SEARCHATTRIB_RES,regb,0xff			 
+	branch fullsearch,true
+	setarg 0x000000
+	istore 5,contw
+	branch outempty
+
+fullsearch:					/* pduid must be 5 or 7 */
+	setarg 0x350200
+	istore 5,contw
+outempty:
+	jam 10,mem_sdp_tx_pkt_length
+	rtn
+
+//return length in pdata(whole element ,include header and data ), contr not change
+sdp_data_len:
+	call store_contw
+	call store_contr
+	call sdp_get_data
+	call get_contw
+	call get_contr
+	copy temp,pdata
+	rtn
+
+//return data length in pdata, contr is data pionter,return length in temp(whole element ,include header and data )
+sdp_get_data:
+	ifetch 1,contr
+	and pdata,0x7,loopcnt
+	rshift3 pdata,pdata
+	bne 0,sdp_get_data_type_not0
+sdp_get_data_type0:	
+	force 1,pdata
+	force 1,temp
+	rtn
+	
+sdp_get_data_type_not0_sizeindex01234:
+	call left_shift_n
+	add pdata,1,temp  //add header length
+	rtn
+sdp_get_data_type_not0:
+	deposit loopcnt
+	sub pdata,4,null
+	branch sdp_get_data_type_not0_sizeindex01234,positive
+	beq 5,sdp_get_data_type_not0_sizeindex5
+	beq 6,sdp_get_data_type_not0_sizeindex6
+	beq 7,sdp_get_data_type_not0_sizeindex7
+	rtn
+	
+sdp_get_data_type_not0_sizeindex5:
+	ifetch 1,contr
+	add pdata,2,temp  //add header length
+	rtn
+sdp_get_data_type_not0_sizeindex6:
+	ifetch 2,contr
+	byteswap pdata,pdata
+	add pdata,3,temp  //add header length
+	rtn
+sdp_get_data_type_not0_sizeindex7:
+	ifetch 2,contr	
+	byteswap pdata,pdata
+	ifetcht 2,contr	
+	byteswap temp,temp
+	lshift16 temp,temp
+	iadd temp,pdata
+	add pdata,5,temp  //add header length
+	rtn
+
+/* find with uuids
+input uuids pionter in timeup
+return handles in mem_sdp_handle_list; handles number in queue if found 
+return regb all length*/
+search_all_uuid:
+	bpatchx patch3a_5,mem_patch3a
+	force 0,queue
+	arg 0,regb
+	arg mem_sdp_handle_list,contw
+search_all_uuid_llop:
+	ifetch 2,timeup
+ 	rtn blank
+	call search_uuid
+	copy queue,pdata
+	rtneq SDP_MAX_HANDLE_NUMBER 
+	increase 2,timeup
+ 	branch search_all_uuid_llop
+	
+search_uuid:
+//	arg 0,regb
+	iforce regc
+//	force 0,queue
+	fetch 2, mem_ui_uuid_table
+	iforce contr
+search_uuid_next:
+	copy queue,pdata
+	rtneq SDP_MAX_HANDLE_NUMBER   
+	disable user
+	ifetch 1,contr
+	rtn blank
+	iforce loopcnt
+search_uuid_loop:	
+	ifetch 2,contr
+	isub regc,null
+	nbranch search_uuid_not_found,zero
+	enable user					// uuid match
+search_uuid_not_found:
+	loop search_uuid_loop
+	ifetcht 4,contr					// get handle 
+	copy contr,rega
+	nbranch search_uuid_nomatch,user
+	arg mem_sdp_handle_list,contr
+	arg SDP_MAX_HANDLE_NUMBER,loopcnt 
+search_uuid_check_same_handle:
+	ifetch 4,contr
+	branch search_uuid_store_handle,blank
+	isub temp,null
+	branch search_uuid_nomatch,zero
+	loop search_uuid_check_same_handle
+	rtn 
+search_uuid_store_handle:
+	istoret 4,contw
+	increase 1,queue
+	copy rega,contr
+	call sdp_data_len
+	iadd regb,regb
+	iadd contr,contr		 
+	branch search_uuid_next
+search_uuid_nomatch:	
+	copy rega,contr
+	call sdp_get_data
+	iadd contr,contr			// next paragraph 
+	branch search_uuid_next
+
+/* temp is handle,
+return zero  if found
+return data pointer in contr 
+*/
+search_handle:
+	bpatchx patch3a_6,mem_patch3a
+	fetch 2,mem_ui_uuid_table
+	iforce contr
+search_handle_loop:	
+	ifetch 1,contr
+	branch disable_zero,blank
+	lshift pdata,pdata
+	iadd contr,contr
+	ifetch 4,contr
+	isub temp,null
+	rtn zero
+	deposit contw
+	store 2,mem_contw
+	storet 8,mem_temp
+	call sdp_get_data
+	iadd contr,contr
+	copy contr,pdata
+	fetcht 2,mem_contw
+	copy temp,contw
+	fetcht 8,mem_temp
+	copy pdata,contr
+	branch search_handle_loop
+
+/**
+* input regb and regc.regb is the attribute ID and regc is UUID.
+* set contr if find attribute or 0 if not
+*/
+search_attrib:
+	bpatchx patch3a_7,mem_patch3a
+	fetch 2,mem_ui_uuid_table
+	iforce contr
+search_attrib_next:
+	ifetch 1,contr
+	branch search_attrib_end, blank
+	iforce loopcnt
+search_attrib_loop:	
+	ifetch 2,contr
+	isub regc,null						/* regc is UUID, compare it */
+	branch search_attrib_found_uuid,zero
+	loop search_attrib_loop
+	increase 4,contr
+	call sdp_get_data
+	iadd contr,contr			/* next paragraph */
+	branch search_attrib_next	
+search_attrib_found_uuid:
+	increase -1,loopcnt
+	lshift loopcnt,pdata
+	iadd contr,contr
+	increase 4,contr
+	call sdp_get_data
+	iadd contr,timeup					/* attribute list end */
+search_attrib_loop_attribs:	
+	increase 1,contr
+	ifetch 2,contr
+	isub regb,null
+	//force 0x1,pdata,zero
+//	setflag zero, 0,pdata
+//	copy timeup, timeup
+	branch disable_blank,zero			/* attribute found */
+	call sdp_data_len
+	iadd contr,contr
+	deposit timeup
+	isub contr,null
+	branch search_attrib_end, zero /*attribute end, not found the attribute, return contr = 0*/
+	branch search_attrib_loop_attribs	
+search_attrib_end:
+	force 0,contr
+	force 0,pdata
+	rtn
+	
+
+//search the attribute according the record handle
+//record handle in temp, attribute in regb
+//set the contr to zero if not found
+search_handle_attrib:	
+	bpatchx patch3b_0,mem_patch3b
+	fetch 2,mem_ui_uuid_table
+	iforce contr
+search_handle_attrib_next:
+	ifetch 1,contr
+	branch search_handle_attrib_end, blank
+	lshift pdata,pdata
+	iadd contr, contr
+	ifetch 4,contr
+	isub temp,null						/* regc is UUID, compare it */
+	branch search_handl_attrib_found_handle,zero
+	call sdp_get_data
+	iadd contr,contr			/* next paragraph */
+	branch search_handle_attrib_next	
+search_handl_attrib_found_handle:
+	call sdp_get_data
+	iadd contr,timeup					/* attribute list end */
+search_handle_attrib_loop_attribs:	
+	increase 1,contr
+	ifetch 2,contr
+	isub regb,null
+	rtn zero							/* attribute found */
+	call sdp_data_len
+	iadd contr,contr
+	deposit timeup
+	isub contr,null
+	branch search_handle_attrib_end, zero /*attribute end, not found the attribute, return contr = 0*/
+	branch search_handle_attrib_loop_attribs
+search_handle_attrib_end:
+	force 0,contr
+	rtn	
+
+
+//enable user if find rfcomm channel number, pdata is channel number
+search_rfcomm_cn:
+	arg 0x0400,regb  // attribute protocol edscriptor list
+	call search_handl_attrib_found_handle
+	arg 0x0300,regb  // uuid rfcomm
+	call search_uuid_in_data
+	nrtn user
+	sub rega,3,null
+	branch disable_user,positive
+	ifetch 1,contr
+	bne 0x08,disable_user
+	ifetch 1,contr
+	rtn
+	
+ //input timeup is lenth
+ //input contr is data ptr
+ //return contr is end of uuid; enable user if found uuid
+search_uuid_in_data:
+	bpatchx patch3b_1,mem_patch3b
+	call sdp_get_data
+	copy pdata,rega
+search_uuid_in_data_loop:	
+	ifetch 1,contr
+	and pdata,0x7,loopcnt
+	rshift3 pdata,pdata
+	sub pdata,3,null
+	branch search_uuid_in_data_found_uuid,zero
+	copy loopcnt,pdata
+	beq 5,search_uuid_in_data_found_element_index5
+	beq 6,search_uuid_in_data_found_element_index6
+	beq 7,search_uuid_in_data_found_element_index7
+	increase -1,contr
+	call sdp_get_data
+	iadd contr,contr
+	copy rega,pdata
+	isub temp,rega
+	branch disable_user,zero
+	branch search_uuid_in_data_loop
+	
+search_uuid_in_data_found_element_index5:
+	increase -2,rega
+	increase 1,contr
+	branch search_uuid_in_data_loop
+search_uuid_in_data_found_element_index6:
+	increase -3,rega
+	increase 2,contr
+	branch search_uuid_in_data_loop
+search_uuid_in_data_found_element_index7:
+	increase -5,rega
+	increase 4,contr
+	branch search_uuid_in_data_loop		
+	
+search_uuid_in_data_found_uuid:
+	increase -1,rega
+	copy loopcnt,pdata
+	beq 1,search_uuid_in_data_type_uuid_16
+	beq 2,search_uuid_in_data_type_uuid_32
+	beq 4,search_uuid_in_data_type_uuid_128
+	branch disable_user 
+search_uuid_in_data_type_uuid_128:
+	increase -12,rega
+search_uuid_in_data_type_uuid_32:
+	ifetch 2,contr
+	increase -2,rega
+search_uuid_in_data_type_uuid_16:
+	ifetch 2,contr
+	isub regb,null
+	branch enable_user,zero
+	increase -2,rega
+	branch disable_user,zero
+	branch search_uuid_in_data_loop
+
+/*
+//rega:l2cap len ,mem_search_uuid:uuid to search
+sdp_send_search_req:
+	call l2cap_malloc_sdp_req
+	setarg SDP_SEARCH_REQ
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid_local
+	byteswap pdata,pdata
+	istore 2,contw
+	increase -5,rega
+	byteswap rega,rega
+	//istorer rega,2,contw
+	copy rega,pdata
+	istore 2,contw
+	setarg 0x0335
+	istore 2,contw
+	setarg 0x19
+	istore 1,contw
+	fetch 2,mem_search_uuid
+	istore 2,contw
+	setarg 0x0008
+	istore 2,contw
+	setarg 0
+	istore 1,contw
+	rtn
+
+//rega:l2cap len
+sdp_send_attribute_req:
+	call l2cap_malloc_sdp_req
+	setarg SDP_ATTRIBUTE_REQ
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid_local
+	byteswap pdata,pdata
+	istore 2,contw
+	increase -5,rega
+	byteswap rega,rega
+//	istorer rega,2,contw
+	copy rega,pdata
+	istore 2,contw
+	fetch 4,mem_sdp_record_handle
+	istore 4,contw
+	setarg 0x2c01
+	istore 2,contw
+	setarg 0x0535
+	istore 2,contw
+	setarg 0x0a
+	istore 1,contw
+	setarg 0
+	istore 2,contw
+	setarg -1
+	istore 2,contw
+	setarg 0
+	istore 1,contw
+	rtn
+*/	
+	
+
+sdp_send_spp_request:
+	call l2cap_get_sdp_tx_payload
+	copy pdata,contw
+	setarg 6//Search Attr Req
+	istore 1,contw
+	setarg sdp_tid_spp					
+	istore 2,contw
+	setarg 0x0f00 //length15
+	istore 2,contw
+	setarg 0x1a0535
+	istore 3,contw
+	setarg 0x0111
+	lshift16 pdata,pdata //UUID
+	istore 4,contw
+	setarg 0x2600 //max return len
+	istore 2,contw
+	setarg 0x0335
+	istore 2,contw
+	setarg 0x0009
+	istore 2,contw
+	setarg 0x0004
+	istore 2,contw
+	jam 0x14,mem_sdp_tx_pkt_length
+	rtn
+
+
+	
+function_g2:
+	bpatchx patch3b_2,mem_patch3b
+	jam 80,mem_AES_CMAC_data_length
+	arg memdat,contw
+	arg mem_le_srand,contr
+	call memcpy16
+	arg mem_le_pubkey_local_x_256,contr
+	call memcpy32
+	arg mem_le_pubkey_remote_x_256,contr
+	call memcpy32
+	call inverse_memdat	
+	arg mem_le_mrand,contr
+	call store_inverse_k	
+	call function_AES_CMAC	
+
+	arg mem_AES_CMAC_temp,contw
+	call load_inverse_result
+	setarg 1000000
+	copy pdata,rega
+	fetch 4,mem_AES_CMAC_temp
+	idiv rega
+	call wait_div_end
+	remainder pdata
+	store 4,mem_gkey
+//call ice_break
+	rtn
+
+function_f6_eb:
+	jam 65,mem_AES_CMAC_data_length
+	arg memdat,contw
+	call store_addr_common_a
+	call store_addr_common_b
+	fetch 3,mem_le_pres+1
+	istore 3,contw
+//	arg mem_le_r,contr
+//	call memcpy16	
+	call get_r
+	
+	arg mem_le_mrand,contr
+	call memcpy16
+	arg mem_le_srand,contr
+	call memcpy16
+	call inverse_memdat
+	arg mem_le_mackey ,contr
+	arg mem_AES_CMAC_k,contw
+	call memcpy16
+//	call p_store_inverse_k	
+	branch function_AES_CMAC
+//	arg mem_AES_CMAC_temp,contw
+//	branch p_load_inverse_result
+
+get_r:
+	fetch 4,mem_le_tk
+	istore 4,contw
+	call memset0_4
+	branch memset0_8
+
+function_f6_ea:
+	bpatchx patch3b_3,mem_patch3b
+	jam 65,mem_AES_CMAC_data_length
+	arg memdat,contw
+	call store_addr_common_b
+	call store_addr_common_a
+	fetch 3,mem_le_preq+1
+	istore 3,contw
+//	arg mem_le_r,contr
+//	call memcpy16	
+	call get_r
+	arg mem_le_srand,contr
+	call memcpy16
+	arg mem_le_mrand,contr
+	call memcpy16
+	call inverse_memdat
+	arg mem_le_mackey ,contr
+	arg mem_AES_CMAC_k,contw
+	call memcpy16
+//	call p_store_inverse_k	
+	call function_AES_CMAC
+	arg mem_AES_CMAC_temp,contw
+	branch load_inverse_result
+
+function_f5:
+	jam 32,mem_AES_CMAC_data_length
+	arg mem_le_dhkey_256 ,contr
+	arg memdat,contw
+	call memcpy32
+	call inverse_memdat
+	arg mem_le_slat,contr
+	call store_inverse_k	
+	call function_AES_CMAC
+	arg mem_AES_CMAC_k,contw
+	call store_aes_result
+	arg 1,temp
+	call function_f5_common
+	arg mem_le_ltk,contw
+	call load_inverse_result
+	arg 0,temp
+	call function_f5_common
+	arg mem_le_mackey,contw
+//	branch p_load_inverse_result
+	branch store_aes_result
+
+
+function_f5_common:
+	bpatchx patch3b_4,mem_patch3b
+	jam 53,mem_AES_CMAC_data_length
+	setarg 0x100
+	store 2,memdat
+	call store_addr_common_b
+	call store_addr_common_a
+	arg mem_le_srand,contr
+	call memcpy16
+	arg mem_le_mrand,contr
+	call memcpy16
+//	fetch 4,mem_le_keyid 0x62746c65
+	setarg 0x6c65
+	istore 2,contw
+	setarg 0x6274
+	istore 2,contw
+	istoret 1,contw   //counter
+	call inverse_memdat	
+	branch function_AES_CMAC
+
+store_addr_common_b:
+	fetch 6,mem_le_lap
+	istore 6,contw
+	fetch 1,mem_le_conn_own_addr_type
+	istore 1,contw
+	rtn
+
+store_addr_common_a:
+	fetch 6,mem_le_plap
+	istore 6,contw
+//	setarg 0x2dcfc1
+//	istore 3,contw
+//	setarg 0xa71370
+//	istore 3,contw
+	fetch 1,mem_le_conn_peer_addr_type
+	istore 1,contw
+	rtn
+
+function_f4_ca:
+	jam 65,mem_AES_CMAC_data_length
+	fetch 1,mem_passkey_1bit
+	store 1,memdat
+	arg mem_le_pubkey_local_x_256,contr
+	call memcpy32
+	arg mem_le_pubkey_remote_x_256,contr
+	call memcpy32
+	call inverse_memdat
+	arg mem_le_mrand,contr
+	call store_inverse_k	
+	branch function_AES_CMAC
+	
+
+function_f4_cb:
+	jam 65,mem_AES_CMAC_data_length
+	fetch 1,mem_passkey_1bit
+	store 1,memdat
+	arg mem_le_pubkey_remote_x_256,contr
+	call memcpy32
+	arg mem_le_pubkey_local_x_256,contr
+	call memcpy32
+	call inverse_memdat
+	arg mem_le_srand,contr
+	call store_inverse_k	
+	branch function_AES_CMAC
+
+function_AES_CMAC:
+	bpatchx patch3b_5,mem_patch3b
+	call function_AES_CMAC_Generate_Subkey
+//call ice_break
+//	jam 65,mem_AES_CMAC_data_length
+//call ice_break
+	fetch 1,mem_AES_CMAC_data_length
+	copy pdata,temp
+function_ceil16:
+	increase 15,pdata
+	rshift4 pdata,pdata
+	copy pdata,regb
+	branch function_AES_CMAC_set_flag_0_balnk,blank
+	and temp,0x0f,pdata
+	nbranch function_AES_CMAC_set_flag_0,blank
+//	flag =1;
+	arg mem_AES_CMAC_k1,regc
+	arg memdat,pdata
+	increase -16,pdata
+//	iadd temp,pdata
+//	isub rega,rega
+	iadd temp,rega	
+	arg mem_AES_CMAC_M_last,contw
+	arg 4,loopcnt	
+	call xor_loop
+//call ice_break
+//	arg mem_f4_k1,contr
+//	call load_key
+	branch function_AES_CMAC_aes
+
+function_AES_CMAC_set_flag_0_balnk:
+	arg 1,regb
+	arg 0,rega
+//	arg mem_f4_test_data,pdata
+	branch function_AES_CMAC_set_flag_0_common
+//call ice_break
+
+function_AES_CMAC_set_flag_0:
+//	flag = 0;
+	and temp,0x0f,rega
+function_AES_CMAC_set_flag_0_common:
+	arg memdat,pdata
+	iadd temp,pdata
+	isub rega,contr
+//call ice_break
+	arg mem_AES_CMAC_temp,contw
+	call function_AES_CMAC_padding
+//call ice_break
+	arg mem_AES_CMAC_k2,regc
+	arg mem_AES_CMAC_temp,rega
+	arg mem_AES_CMAC_M_last,contw
+	arg 4,loopcnt	
+	call xor_loop	
+//call ice_break
+
+//	arg mem_f4_k2,contr
+//	call load_key
+
+//	branch p_function_f4_aes
+function_AES_CMAC_aes:
+//	arg mem_f4_k,contr
+//	call load_key
+//	arg mem_AES_CMAC_xor,contr
+//	call load_data128
+	call aes_clear_data
+	call aes_init	
+//	arg mem_f4_k,contr
+//	call load_key
+	arg memdat,contr
+function_AES_CMAC_aes_loop:
+//generate_mic_loop:
+	increase -1,regb
+	deposit regb
+	branch function_AES_CMAC_aes_loop_end,blank
+	call load_data128
+	call do_aes_cbc
+	branch function_AES_CMAC_aes_loop
+//generate_mic_end:
+function_AES_CMAC_aes_loop_end:	
+	arg mem_AES_CMAC_temp,contw
+	call store_aes_result
+	arg mem_AES_CMAC_M_last,contr
+	call load_data128
+	call aes_init	
+	arg mem_AES_CMAC_temp,contr
+	call load_data128	
+	branch do_aes_cbc
+
+
+
+load_inverse_result:
+//	arg mem_AES_CMAC_temp,contw
+	copy contw,rega
+	call store_aes_result
+//	arg mem_AES_CMAC_temp,rega
+	arg 16,loopcnt
+	branch inverse_data
+	
+store_inverse_k:
+	arg mem_AES_CMAC_k,contw
+	call memcpy16
+inverse_k:	
+	arg 16,loopcnt
+	arg mem_AES_CMAC_k,rega	
+	branch inverse_data
+	
+inverse_memdat:
+	fetch 1,mem_AES_CMAC_data_length
+	copy pdata,loopcnt
+	arg memdat,rega
+	branch inverse_data
+
+bn_lshift_0_inverse:
+	ifetch 1,regA
+	lshift pdata,pdata
+	isolate1 0,regC
+	setflag true,0,pdata	
+	isolate1 8,pdata
+	setflag true,0,regC	
+	istore 1,rega
+         increase -1,rega
+	loop bn_lshift_0_inverse
+	rtn	
+
+function_AES_CMAC_k1_inverse:
+	arg mem_AES_CMAC_k1,regA
+function_AES_CMAC_inverse_common:
+	increase 15,rega
+	force 16,loopcnt
+	force 0,regC
+	branch  bn_lshift_0_inverse	
+
+function_AES_CMAC_k2_inverse:
+	arg mem_AES_CMAC_k2,regA
+	branch function_AES_CMAC_inverse_common
+	
+
+function_AES_CMAC_Generate_Subkey:
+	arg mem_AES_CMAC_k,contr
+	call load_key
+//	arg mem_AES_CMAC_xor,contr
+//	call aes_load_xor
+	force regidx_xor,regext_index
+	call aes_clear
+	call aes_clear_data
+	call do_aes_ocb
+	
+//	force 0x38,aes_ctrl
+//	force 0x0,aes_ctrl
+//	call wait_aes
+	arg mem_AES_CMAC_k1,contw
+	call store_aes_result
+function_AES_CMAC_k1:
+	bpatchx patch3b_6,mem_patch3b
+	fetch 1,mem_AES_CMAC_k1
+	isolate1 7,pdata
+	nbranch function_AES_CMAC_k1_0,true	
+	call function_AES_CMAC_k1_inverse
+	
+//p_function_f4_k1_xor:
+	arg mem_AES_CMAC_k1,regc
+//	arg mem_AES_CMAC_rb,rega
+	arg mem_AES_CMAC_k1,contw
+//	arg 3,loopcnt
+//	call xor_loop
+	call function_AES_CMAC_xor_rb
+	branch function_AES_CMAC_k2
+function_AES_CMAC_k1_0:	
+	call function_AES_CMAC_k1_inverse
+function_AES_CMAC_k2:
+//call ice_break
+	arg mem_AES_CMAC_k1,contr
+	arg mem_AES_CMAC_k2,contw
+	call memcpy16
+	fetch 1,mem_AES_CMAC_k2
+	isolate1 7,pdata
+	nbranch function_AES_CMAC_k2_inverse,true		
+	call function_AES_CMAC_k2_inverse
+//p_function_f4_k2_xor:
+	arg mem_AES_CMAC_k2,regc
+//	arg mem_AES_CMAC_rb,rega
+	arg mem_AES_CMAC_k2,contw
+//	arg 3,loopcnt
+//	branch xor_loop	
+
+
+//rb:00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 87 
+function_AES_CMAC_xor_rb:
+	arg 3,loopcnt
+function_AES_CMAC_xor_rb_loop:	
+	arg 0,temp
+	call function_AES_CMAC_xor_loop_common	
+	increase 4,regc
+	loop  function_AES_CMAC_xor_rb_loop
+	arg 0x8700,temp
+	lshift16 temp,temp
+function_AES_CMAC_xor_loop_common:	
+	ifetch   4,regc
+	ixor  temp,pdata
+	istore   4,contw	
+	rtn
+		
+
+
+
+//input rega :length <16	contr,contw
+function_AES_CMAC_padding:
+	bpatchx patch3b_7,mem_patch3b
+	arg 16,loopcnt
+	arg 0,pdata
+function_AES_CMAC_padding_loop:
+	isub rega,null
+	branch function_AES_CMAC_padding_beq_length,zero
+	branch function_AES_CMAC_padding_big_length,positive
+	ifetcht 1,contr
+	istoret 1,contw
+function_AES_CMAC_padding_loop2:	
+	increase 1,pdata
+	loop function_AES_CMAC_padding_loop
+	rtn
+function_AES_CMAC_padding_beq_length:	
+	arg 0x80,temp
+function_AES_CMAC_padding_common:
+	istoret 1,contw
+	branch  function_AES_CMAC_padding_loop2
+
+function_AES_CMAC_padding_big_length:
+	arg 0,temp
+	branch function_AES_CMAC_padding_common
+
+	
+generate_kinit:
+	call function_e22
+	arg mem_input_store,contr
+	arg mem_kinit,contw		/* Kinit is ready */
+	branch memcpy16
+
+
+function_e21:	/* rega pointers to bdaddr */
+	disable user
+	call function_expand
+	arg mem_random_number,contr
+	arg mem_x,contw
+	force 15,loopcnt
+	call memcpy			
+	ifetch 1,contr
+	xor_into 6,pdata
+	istore 1,contw
+	setarg mem_y
+	store 2,memp_ar_input
+	setarg mem_x
+	store 2,memp_ar_key
+	set1 mark_ar2,mark
+	branch function_ar
+
+
+	
+function_e22:		/* rega pointers to bdaddr */
+	fetcht 1,mem_pin_length
+	force 16,regb			/* total 16 bytes */
+	add temp,6,regc		/* regc is l' */
+	sub regc,16,null		
+	branch function_e22_pin_init,positive 
+	force 16,regc
+function_e22_pin_init:			/* generate x from pin and bdaddr */
+	arg mem_x,contw
+function_e22_genx_pin:
+	arg mem_pin,contr
+	copy temp,loopcnt
+	disable user
+function_e22_genx_loop:
+	ifetch 1,contr
+	istore 1,contw
+	increase -1,regb
+	branch function_e22_genx_end,zero
+	loop function_e22_genx_loop
+	branch function_e22_genx_pin,user
+	enable user
+	force 6,loopcnt
+	copy rega,contr
+	branch function_e22_genx_loop
+function_e22_genx_end:
+	arg mem_random_number,contr
+	arg mem_y,contw
+	call memcpy16
+	fetch 1,mem_y15
+	ixor regc,pdata
+	store 1,mem_y15	/* inpy[15] = rand_num[15]^l'; */
+	setarg mem_y
+	store 2,memp_ar_input
+	setarg mem_x
+	store 2,memp_ar_key
+	set1 mark_ar2,mark
+	branch function_ar
+
+
+
+
+function_e1:	/* rega pointers to bdaddr */
+	disable user
+	call function_expand
+	branch function_hash
+
+function_e3:
+	arg mem_aco,rega
+	enable user
+	call function_expand
+	call function_hash
+	arg mem_input_store,contr
+	arg mem_kc,contw
+	branch memcpy16
+
+	/* costs 41769 clocks */
+function_hash:
+	setarg mem_random_number
+	store 2,memp_ar_input
+	setarg mem_link_key
+	store 2,memp_ar_key
+	set0 mark_ar2,mark
+	call function_ar
+	arg mem_input_store,rega
+	arg mem_random_number,regb
+	arg mem_x,contw
+	call xor16
+	arg mem_x,rega
+	arg mem_y,regb
+	copy regb,contw
+	enable user
+	call add16
+	call key_offset
+	setarg mem_y
+	store 2,memp_ar_input
+	setarg mem_x
+	store 2,memp_ar_key
+	set1 mark_ar2,mark
+	branch function_ar
+	
+
+	/* totally costs 20700 clocks */
+function_ar:
+	jam 0,mem_ar_hround
+	fetch 2,memp_ar_key
+	iforce contr
+	arg mem_key_store,contw
+	call memcpy16
+	fetch 2,memp_ar_input
+	iforce contr
+	arg mem_input_store,contw
+	call memcpy16
+	
+function_ar_loop:
+	call key_scheduling
+	disable user
+	bmark0 mark_ar2,function_ar_original
+	fetch 1,mem_ar_hround
+	bne 4,function_ar_original
+	fetch 2,memp_ar_input
+	iforce regb
+	call xor_mod32_ar2
+function_ar_original:
+	call xor_mod32
+	call el_boxes
+	fetch 1,mem_ar_hround
+	increase 1,pdata
+	store 1,mem_ar_hround
+
+	call key_scheduling
+	enable user
+	call xor_mod32
+	call pht
+	call permute
+	call pht
+	call permute
+	call pht
+	call permute
+	call pht
+	fetch 1,mem_ar_hround
+	increase 1,pdata
+	store 1,mem_ar_hround
+	bne 16,function_ar_loop
+	call key_scheduling
+	disable user
+	branch xor_mod32
+	
+/* input round number and temp key in mem_key_store, and output the next temp key in mem_key_store */
+/* round key is generated and store in mem_round_key */
+key_scheduling:
+	fetch 1,mem_ar_hround
+	arg mem_key_store,contr
+	branch key_sched_zero,blank
+	iforce regb      			/* regb is half round */
+	force 17,loopcnt
+	copy contr,contw
+key_rotateloop:
+	ifetch 1,contr
+	lshift3 pdata,temp
+	rshift2 pdata,pdata
+	rshift3 pdata,pdata
+	ior temp,pdata
+	istore 1,contw
+	loop key_rotateloop
+	setarg mem_key_store
+	iadd regb,contr
+	force 16,loopcnt    
+	arg mem_round_key,contw
+key_select_octet_loop:
+	ifetch 1,contr
+	istore 1,contw
+	compare mem_key_store_end,contr,0xff
+	nbranch key_select_octet_nwrap,true
+	increase -17,contr
+key_select_octet_nwrap:
+	loop key_select_octet_loop
+	force 0,rega         /* rega is index of octet within row */
+	add regb,-1,regc    /* this is the row index, half_round#1 is 0 */
+	lshift2 regc,regc
+	lshift2 regc,regc
+	call enable_authrom
+	setarg mem_b_box
+	iadd regc,regc       /* regc hold the starting address of the row */
+	arg mem_round_key,contw
+	force 16,loopcnt
+bias_round_key_loop:
+	ifetcht 1,regc
+	ifetch 1,contw
+	iadd temp,pdata
+	istore 1,contw
+	increase 1,regc
+	loop bias_round_key_loop
+	branch disable_authrom
+
+key_sched_zero:    /* round 0, key1 */
+	force 16,loopcnt
+	force 0,temp
+create_byte_16_loop:
+	ifetch 1,contr
+	ixor temp,temp
+	loop create_byte_16_loop
+	deposit temp
+	istore 1,contr    	/* store the byte #16 */
+	arg mem_key_store,contr
+	arg mem_round_key,contw
+	branch memcpy16
+
+xor_mod32:     /* xor on 0,3, add on 1,2. if user is set, invert. x in rega and y in regb, out in contw */
+	arg mem_round_key,regb
+xor_mod32_ar2:
+	force 16,loopcnt
+	arg mem_input_store,rega
+	copy rega,contw
+xor_mod32_loop:	
+	ifetcht 1,rega
+	ifetch 1,regb
+	ixor temp,alarm
+	and loopcnt,3,regc
+	nbranch xor_mod32_invert,user
+	xor_into 3,regc
+xor_mod32_invert:
+	sub regc,1,regc
+	branch xor_even,positive
+	iadd temp,alarm
+xor_even:
+	deposit alarm
+	istore 1,contw
+	increase 1,rega
+	increase 1,regb
+	loop xor_mod32_loop
+	rtn
+
+el_boxes:
+	call enable_authrom
+	force 16,loopcnt
+	arg mem_input_store,rega
+el_box_loop:	
+	ifetch 1,rega
+	arg mem_e_box,contr
+	and loopcnt,3,regc
+	sub regc,1,null
+	branch e_boxes,positive
+	arg mem_l_box,contr
+e_boxes:
+	iadd contr,contr
+	ifetch 1,contr
+	istore 1,rega
+	increase 1,rega
+	loop el_box_loop
+	branch disable_authrom
+
+pht:				
+	force 8,loopcnt
+	arg mem_input_store,contr
+	copy contr,contw
+pht_loop:
+	ifetch 1,contr
+	iforce rega
+	ifetch 1,contr
+	iforce regb
+	lshift rega,pdata
+	iadd regb,pdata
+	istore 1,contw
+	deposit rega
+	iadd regb,pdata
+	istore 1,contw
+	loop pht_loop
+	rtn
+
+/* 8 11 12 15 2 1 6 5 10 9 14 13 0 7 4 3 */
+permute:			
+	setarg 0x8ae42c
+	iforce temp
+	force 7,loopcnt
+	call permute_exchange
+	setarg 0xd751b
+	iforce temp
+	force 5,loopcnt
+	call permute_exchange
+	fetch 1,mem_input_store+15
+	iforce rega
+	fetch 1,mem_input_store+3
+	store 1,mem_input_store+15
+	deposit rega
+	store 1,mem_input_store+3
+	rtn
+
+permute_exchange:
+	and temp,0xf,regb
+permute_loop:
+	and temp,0xf,pdata
+	arg mem_input_store,contw
+	iadd contw,contw
+	ifetch 1,contw
+	iforce regc
+	deposit rega
+	istore 1,contw
+	copy regc,rega
+	rshift4 temp,temp
+	loop permute_loop	
+	setarg mem_input_store
+	iadd regb,contw
+	deposit rega
+	istore 1,contw
+	rtn
+
+add16:
+	enable user
+	branch xor_add16
+
+xor16:
+	disable user
+xor_add16:	/* if user is set, do add, else do xor */
+	force 16,loopcnt	/* rega and regb pointers to src, contw is result */
+xoradd_loop:
+	ifetcht 1,rega
+	ifetch 1,regb
+	branch xoradd_add,user
+	ixor temp,pdata
+	branch xoradd_store
+xoradd_add:	
+	iadd temp,pdata
+xoradd_store:	
+	istore 1,contw
+	increase 1,rega
+	increase 1,regb
+	loop xoradd_loop
+	rtn
+
+	
+function_expand:		/* rega pointers to bdaddr, or aco and user is set */
+	arg mem_y,contw
+	ifetch 6,rega
+	istore 6,contw
+	branch expand_12,user
+	ifetch 6,rega
+	branch expand_cont
+expand_12:
+	ifetch 6,contr
+expand_cont:
+	istore 6,contw
+	ifetch 4,rega
+	istore 4,contw
+	rtn
+
+key_offset:
+	arg mem_link_key,contr
+	arg mem_x,contw
+	arg 0,temp
+	setarg 0x8395a7
+	call concatenate_temp24
+	setarg 0xb3c1df
+	call concatenate_temp24
+	setarg 0xe5e9
+	call concatenate_temp16
+	copy temp,regab
+	disable user
+	call key_addxor
+	copy regab,temp
+	enable user
+	branch key_addxor
+
+key_addxor:
+	force 8,loopcnt
+key_addxor_loop:	
+	ifetch 1,contr
+	compare 1,loopcnt,1
+	branch key_high,user
+	branch key_xor,true
+key_add:	
+	iadd temp,pdata
+	branch key_store
+key_high:
+	branch key_add,true
+key_xor:
+	ixor temp,pdata
+key_store:
+	istore 1,contw
+	rshift8 temp,temp
+	loop key_addxor_loop
+	rtn
+
+copy_aco:
+	fetch 6,mem_input_store+4
+	store 6,mem_aco
+	ifetch 6,contr
+	istore 6,contw
+	rtn
+	
+concatenate_temp24:
+	lshift8 temp,temp
+concatenate_temp16:
+	lshift16 temp,temp
+	ior temp,temp
+	rtn
+
+
+
+loop1:	
+	branch loop1
+
+/* ==================== LE security ================= */
+
+generate_stk:
+	bpatchx patch3c_0,mem_patch3c
+	call function_s1
+	arg mem_le_ltk,contw
+	branch store_aes_result
+
+	/* contr = rand pointer */
+authenticate_rconfirm:
+	arg mem_le_srand,contw
+	branch authenticate_mconfirm,master
+	arg mem_le_mrand,contw
+authenticate_mconfirm:
+	copy contr,rega
+	call memcpy16
+	call function_c1
+	arg mem_le_rconfirm,contr
+	branch compare_res
+
+generate_confirm:
+	arg mem_le_mrand,rega
+	branch generate_mrand,master
+	arg mem_le_srand,rega
+generate_mrand:
+	copy rega,contw
+	call generate_random
+	branch function_c1
+
+generate_sk:
+	arg mem_le_skdm,contr
+	call load_data128
+	arg mem_le_ltk,contr
+	call load_regext
+	force 0x38,aes_ctrl
+	force 0x0,aes_ctrl
+	call wait_aes
+	arg mem_le_sk,contw
+	branch store_aes_result
+
+	/* temp=packet counter, rega = length or block counter*/
+first_block_counter:
+	force 0x49,pdata
+	branch first_block
+first_block_data:
+	force 1,pdata
+first_block:
+	force regidx_data,regext_index			/* B0 */
+	lshift8 temp,regext
+	ior regext,regext
+	increase 1,regext_index
+	rshift8 temp,regext
+	rshift16 regext,regext
+	fetch 2,mem_le_ivm
+	lshift16,pdata,pdata
+	ior regext,regext				/* octet3&octet4 of counter and low 16 bit of IV */
+	increase 1,regext_index
+	ifetch 4,contr					/* IV2-IV5 */
+	iforce regext
+	increase 1,regext_index
+	ifetch 2,contr					/* IV6-IV7 */
+	byteswap rega,regext
+	lshift16 regext,regext
+	ior regext,regext
+	increase 1,regext_index
+	rtn
+
+
+	/* temp=packet counter, regc pointers to data */	
+generate_mic:
+	add regc,1,contr
+	ifetch 1,contr
+	iforce rega
+	call first_block_counter
+	call do_aes_ocb
+
+	force regidx_data,regext_index			/* B1 */
+	ifetch 1,regc
+	and_into 0x3,pdata
+	lshift16 pdata,regext
+	set1 8,regext
+	call clear_hidata
+	call do_aes_cbc
+
+	copy rega,loopcnt
+	add regc,2,contr
+	call padding_data
+generate_mic_loop:
+	call aes_load_data
+	call do_aes_cbc
+	deposit loopcnt
+	branch generate_mic_end,blank
+	branch generate_mic_loop
+generate_mic_end:
+	force regidx_result,regext_index
+	deposit regext
+	store 4,mem_le_mic
+	rtn
+
+aes_crypt_data:
+	increase 1,rega
+	call first_block_data
+	copy regc,contr
+	call aes_load_xor
+	call do_aes_ctr
+	call store_enc_data
+	increase 16,regc
+	increase -16,regb
+	branch aes_crypt_data,positive
+	rtn
+	
+le_encrypt:
+	bpatchx patch3c_1,mem_patch3c
+	arg mem_le_txheader,regc
+	fetcht 5,mem_le_pcnt_tx
+	call generate_mic
+	force regidx_xor,regext_index
+	iforce regext
+	force 0,rega					/* rega is block counter */
+	call first_block_data
+	call do_aes_ctr
+	arg mem_le_txpayload,regc
+	fetch 1,mem_le_txlen
+	add pdata,-1,regb
+	iadd regc,contw
+	force regidx_result,regext_index
+	deposit regext
+	istore 4,contw	
+	call aes_crypt_data
+	fetch 1,mem_le_txlen
+	increase 4,pdata
+	store 1,mem_le_txlen
+	fetcht 5,mem_le_pcnt_tx
+	increase 1,temp
+	storet 5,mem_le_pcnt_tx
+	rtn
+
+le_decrypt:
+	bpatchx patch3c_2,mem_patch3c
+	fetch 1,mem_le_rxbuf+1
+	sub pdata,20,null
+	branch le_dec_cont,positive
+le_dec_cont:
+	arg mem_le_rxbuf+2,regc
+	add pdata,-1,regb
+	increase -4,pdata				/* mic will be discarded */
+	store 1,mem_le_rxbuf+1
+	iadd regc,contr
+	ifetch 4,contr
+	force regidx_xor,regext_index
+	iforce regext
+	force 0,rega					/* rega is block counter */
+	fetcht 5,mem_le_pcnt_rx
+	call first_block_data
+	call do_aes_ctr
+	force regidx_result,regext_index
+	deposit regext
+	store 4,mem_le_peer_mic
+	call aes_crypt_data
+	arg mem_le_rxbuf,regc
+	call generate_mic
+	fetcht 4,mem_le_peer_mic
+	isub temp,pdata				/* MIC ok? */
+	nrtn blank
+	fetch 4,mem_le_last_mic			/* reduntdant packet? */
+	isub temp,pdata
+	rtn blank
+	storet 4,mem_le_last_mic
+	fetch 5,mem_le_pcnt_rx
+	increase 1,pdata
+	store 5,mem_le_pcnt_rx
+	force 0,pdata
+	rtn
+
+wait_aes:
+	nbranch wait_aes,aes_ready
+	rtn
+
+do_aes_ocb:
+	force 0x30,aes_ctrl
+	force 0x0,aes_ctrl
+	branch wait_aes
+
+do_aes_cbc:
+	force 0x32,aes_ctrl
+	force 0x2,aes_ctrl
+	branch wait_aes
+
+do_aes_ctr:
+	force 0x34,aes_ctrl
+	force 0x4,aes_ctrl
+	branch wait_aes
+
+	
+aes_init:
+	force 1,aes_ctrl
+	force 0,aes_ctrl
+	rtn
+function_s1:
+	force regidx_data,regext_index
+	fetch 4,mem_le_mrand
+	iforce regext
+	increase 1,regext_index
+	ifetch 4,contr
+	iforce regext
+	increase 1,regext_index
+	fetch 4,mem_le_srand
+	iforce regext
+	increase 1,regext_index
+	ifetch 4,contr
+	iforce regext
+	increase 1,regext_index
+	call aes_clear
+	increase -4,regext_index
+	fetch 4,mem_le_tk
+	copy pdata,regext
+	increase 4,regext_index
+	force 0x38,aes_ctrl
+	force 0x8,aes_ctrl
+	branch wait_aes
+
+	/* rega pointers to random number */
+function_c1:
+	bpatchx patch3c_3,mem_patch3c
+	fetch 6,mem_le_lap
+	fetcht 6,mem_le_plap
+	branch function_c1_master,master
+	fetch 6,mem_le_plap
+	fetcht 6,mem_le_lap
+function_c1_master:
+	force regidx_xor,regext_index
+	copy temp,regext
+	increase 1,regext_index
+	rshift32 temp,regext
+	lshift16 pdata,pdata
+	ior regext,regext
+	increase 1,regext_index
+	rshift32 pdata,regext
+	increase 1,regext_index
+	force 0,regext					/* p2 = ia || ra */
+	force 0,pdata
+	fetch 1,mem_le_conn_peer_addr_type
+	fetcht 1,mem_le_adv_own_addr_type
+	nbranch function_c1_irat,master
+	//conn as master
+	fetch 1,mem_le_conn_own_addr_type
+	fetcht 1,mem_le_conn_peer_addr_type
+function_c1_irat:
+	store 1,mem_le_iat
+	storet 1,mem_le_rat
+	force regidx_data,regext_index
+	arg mem_le_iat,regb
+	force 4,loopcnt
+function_c1_loop1:
+	ifetch 4,rega		
+	ifetcht 4,regb
+	ixor temp,regext
+	increase 1,regext_index
+	increase 4,rega
+	increase 4,regb
+	loop function_c1_loop1		/* p1 ^ r */
+	call aes_clear				/* k = 0 */
+	increase -4,regext_index
+	fetch 4,mem_le_tk
+	copy pdata,regext
+	increase 4,regext_index
+	force 0x38,aes_ctrl
+	force 0xc,aes_ctrl
+	call wait_aes
+
+	call aes_clear_data
+	force 0x3a,aes_ctrl
+	force 0x8,aes_ctrl
+	branch wait_aes
+
+padding_data:
+	compare 0,loopcnt,3
+	rtn true
+	deposit contr
+	iadd loopcnt,contw
+	force 0,pdata
+padding_loop:
+	istore 1,contw
+	increase 1,loopcnt
+	compare 0,loopcnt,3
+	rtn true
+	branch padding_loop
+
+aes_load_data:
+	force regidx_data,regext_index
+load_data_loop:
+	deposit loopcnt
+	branch load_data_padding,blank
+	ifetch 4,contr
+	increase -4,loopcnt
+load_data_padding:
+	iforce regext
+	increase 1,regext_index
+	compare regidx_key,regext_index,0xf
+	rtn true
+	branch load_data_loop
+
+aes_load_xor:
+	force regidx_xor,regext_index
+	branch load_regext
+load_key:
+	force regidx_key,regext_index
+	branch load_regext
+load_data128:
+	force regidx_data,regext_index
+load_regext:
+	force 4,loopcnt
+load_regext_loop:
+	ifetch 4,contr
+	iforce regext
+	increase 1,regext_index
+	loop load_regext_loop
+	rtn
+
+load_sk:
+	arg mem_le_sk,contr
+	branch load_key
+
+clear_hidata:
+	force 4,loopcnt
+	branch clear_data_rest
+
+aes_clear_data:
+	force regidx_data,regext_index
+aes_clear:
+	force 4,loopcnt
+clear_loop:
+	force 0,regext
+clear_data_rest:
+	increase 1,regext_index
+	loop clear_loop
+	rtn
+
+store_aes_result:
+	force regidx_result,regext_index
+	force 4,loopcnt
+send_aes_result_loop:
+	deposit regext
+	istore 4,contw
+	increase 1,regext_index
+	loop send_aes_result_loop
+	rtn
+
+store_enc_data:
+	force regidx_result,regext_index
+	copy regc,contw
+	add regb,1,loopcnt
+	sub loopcnt,15,null
+	branch store_enc_loop,positive
+	force 16,loopcnt
+store_enc_loop:
+	deposit regext
+	sub loopcnt,3,null
+	branch store_enc_byte,positive
+	istore 4,contw
+	increase -4,loopcnt
+	rtn zero
+	increase 1,regext_index
+	branch store_enc_loop
+store_enc_byte:
+	istore 1,contw
+	rshift8 pdata,pdata
+	loop store_enc_byte
+	rtn
+	
+	/* contr pointers to value to be compared */
+compare_res:
+	force regidx_result,regext_index
+	force 4,loopcnt
+compare_res_loop:
+	ifetch 4,contr
+	isub regext,null
+	nrtn zero
+	increase 1,regext_index
+	loop compare_res_loop
+	force 0,null
+	rtn
+
+enable_authrom:
+	hfetch 1,core_clkoff
+	set0 CLOCK_OFF_AUTH_ROM,pdata
+	hstore 1,core_clkoff
+	rtn
+
+disable_authrom:
+	hfetch 1,core_clkoff
+	set1 CLOCK_OFF_AUTH_ROM,pdata
+	hstore 1,core_clkoff
+	rtn
+
+init_memp:
+	arg mem_p,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3ffff
+	setsect 3,0x3fbff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3ffff
+	setsect 3,0x3ffff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3cfff
+	setsect 3,0x3ffff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3ffef
+	setsect 3,0x3ffff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3ffff
+	setsect 3,0x3ffff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x26c7f
+	setsect 2,0x146b
+	setsect 3,0x37bb3
+	istore 9,contw
+	setsect 0,0x1feb8
+	setsect 1,0x10c12
+	setsect 2,0x2b722
+	setsect 3,0x29fa6
+	istore 9,contw
+	setsect 0,0xe70f
+	setsect 1,0x16720
+	setsect 2,0x519e
+	setsect 3,0x19084
+	istore 9,contw
+	setsect 0,0x31012
+	setsect 1,0x360bf
+	setsect 2,0x3f0af
+	setsect 3,0x3d3
+	istore 9,contw
+	setsect 0,0x3a188
+	setsect 1,0x3ad0
+	setsect 2,0x3cbf2
+	setsect 3,0x243d9
+	istore 9,contw
+	setsect 0,0x2b030
+	setsect 1,0x36a03
+	setsect 2,0x11188
+	setsect 3,0x1e520
+	istore 9,contw
+	setsect 0,0x3a11e
+	setsect 1,0xfe5d
+	setsect 2,0xdd57
+	setsect 3,0x1ac93
+	istore 9,contw
+	setsect 0,0x11ed
+	setsect 1,0x218c4
+	setsect 2,0x8da7
+	setsect 3,0x257ff
+	istore 9,contw
+	setsect 0,0x3192b
+	setsect 1,0x34641
+	setsect 2,0x1be0c
+	setsect 3,0x366ad
+	istore 9,contw
+	setsect 0,0x1f83
+	setsect 1,0x15a23
+	setsect 2,0x3f9b0
+	setsect 3,0x3949
+	istore 9,contw
+	setsect 0,0x13a51
+	setsect 1,0x153fd
+	setsect 2,0x3372a
+	setsect 3,0xf1bb
+	istore 9,contw
+	setsect 0,0x3ae85
+	setsect 1,0x1eed9
+	setsect 2,0x9e66
+	setsect 3,0x1a8
+	istore 8,contw
+	rtn
+	
+
+
+init_memp_256:
+ 	arg mem_p_256,contw
+        setsect 0,0x3ffff
+        setsect 1,0x3ffff
+        setsect 2,0x3ffff
+        setsect 3,0x3ffff
+        istore 9,contw
+        setsect 0,0x3ffff
+        setsect 1,0x3f
+        setsect 2,0x0
+        setsect 3,0x0
+        istore 9,contw
+        setsect 0,0x0
+        setsect 1,0x0
+        setsect 2,0x1000
+        setsect 3,0x0
+        istore 9,contw
+        setsect 0,0x3ff00
+        setsect 1,0x3ffff
+        setsect 2,0x3ffcf
+        setsect 3,0x3ffff
+        istore 9,contw
+        setsect 0,0x3ffff
+        setsect 1,0x3ffff
+        setsect 2,0x3ffff
+        setsect 3,0x3ff
+        istore 9,contw
+        setsect 0,0x0
+        setsect 1,0x0
+        setsect 2,0x0
+        setsect 3,0x0
+        istore 9,contw
+        setsect 0,0x10000
+        setsect 1,0x0
+        setsect 2,0x3f000
+        setsect 3,0x3ffff
+        istore 9,contw
+        setsect 0,0x296ff
+        setsect 1,0x22630
+        setsect 2,0x3945d
+        setsect 3,0x3d284
+        istore 9,contw
+        setsect 0,0x333a0
+        setsect 1,0x4b7a
+        setsect 2,0x37d8
+        setsect 3,0x3c9dc
+        istore 9,contw
+        setsect 0,0x3a440
+        setsect 1,0x1b958
+        setsect 2,0x38bce
+        setsect 3,0x1091f
+        istore 9,contw
+        setsect 0,0x2e12c
+        setsect 1,0x1f47c
+        setsect 2,0x356b1
+        setsect 3,0x2fd47
+        istore 9,contw
+        setsect 0,0x6837
+        setsect 1,0x2ed90
+        setsect 2,0x1ecec
+        setsect 3,0x1acc5
+        istore 9,contw
+        setsect 0,0x23357
+        setsect 1,0x18af3
+        setsect 2,0xf9e1
+        setsect 3,0x129f0
+        istore 9,contw
+        setsect 0,0x2e7eb
+        setsect 1,0x3e6e3
+        setsect 2,0x3e1a7
+        setsect 3,0x10b8b
+        istore 9,contw
+        setsect 0,0x24fe3
+        setsect 1,0x20ef
+        setsect 2,0x1b5a6
+        setsect 3,0xdc2f
+        istore 9,contw
+        setsect 0,0x13860
+        setsect 1,0x2bd69
+        setsect 2,0x391a
+        setsect 3,0x1b222
+        istore 9,contw
+        rtn
+
+
+publickey_init:
+	fetch 1,mem_ssp_enable
+	nbranch sp_initialize,blank
+	branch sp_initialize_256
+
+sp_calc_sequence_256_check:
+	bpatchx patch3c_4,mem_patch3c
+	fetch 1,mem_ssp_enable
+	rtn blank
+	fetch 1,mem_sp_local_key_invalid
+	rtnne SP_KEY_VALID
+	fetch 1,mem_le_secure_connect_enable
+	rtn blank
+	fetch 1,mem_le_sc_local_key_invalid
+	rtneq SP_KEY_VALID_256
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,stop_publickey_calc_256
+	fetch 1,mem_le_sc_calc
+	beq SP_CALC_STANDBY,sp_initialize_256
+	rtn
+stop_publickey_calc_256:
+	jam SP_CALC_STANDBY,mem_le_sc_calc	
+	rtn
+	
+
+sp_initialize:
+	bpatchx patch3c_5,mem_patch3c
+	fetch 1,mem_ssp_enable 
+	branch ssp_disable, blank
+	call ssp_enable
+	call sp_clear_flags
+	branch sp_pubkey_calc 
+	
+sp_clear_flags:
+	setarg 0
+	store 8,mem_sp_state_start
+	store 4,mem_sp_flag_start
+	store 7,mem_sp_iocap_remote
+	rtn
+
+sp_generate_local_key:
+	jam SP_FLAG_COMMIT,mem_sp_flag  
+	branch sp_generate_local_key0
+sp_master_generate_local_key:
+	fetch 1,mem_sp_local_key_invalid
+	beq SP_KEY_VALID,sp_dhkey_calc
+	branch assert
+sp_generate_local_key0:
+	fetch 1,mem_sp_local_key_invalid
+	beq SP_KEY_VALID,sp_start_send_pubkey
+	branch sp_pubkey_calc
+    
+sp_start_send_pubkey:
+	call sp_dhkey_calc
+	fetch 1,mem_master_sp_state
+	nrtn blank
+	jam SP_STAT_KEY_SEND,mem_sp_state
+	rtn
+
+
+sp_calc_check_publickey_256:
+	call sp_calc_b256
+	arg mem_le_pubkey_remote_y_256,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod_256   
+	arg mem_le_pubkey_remote_x_256,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod_256   
+  	arg mem_t2_256,regA
+	arg mem_le_pubkey_remote_x_256,regB
+	arg mem_t2_256,contw
+	call bn_mulmod_256	
+  	arg mem_a_256,regA
+	arg mem_le_pubkey_remote_x_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256	
+  	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod_256	 
+  	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	call bn_addmod_256	 
+	arg 32,loopcnt
+  	arg mem_t7_256,regA
+	arg mem_t0_256,regB
+	branch  string_compare
+	
+sp_calc_b256:
+	arg mem_gy_256,regA
+	arg mem_t0_256,contw
+	call bn_sqrmod_256   
+	arg mem_gx_256,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod_256    
+  	arg mem_t2_256,regA
+	arg mem_gx_256,regB
+	arg mem_t2_256,contw
+	call bn_mulmod_256	
+  	arg mem_a_256,regA
+	arg mem_gx_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256	 
+  	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod_256	 
+  	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	branch  bn_submod_256	
+	
+sp_calc_check_publickey:
+	call sp_calc_b
+	arg mem_sp_pubkey_remote_y,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod 
+	arg mem_sp_pubkey_remote_x,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod
+  	arg mem_t2_256,regA
+	arg mem_sp_pubkey_remote_x,regB
+	arg mem_t2_256,contw
+	call bn_mulmod	
+  	arg mem_a,regA
+	arg mem_sp_pubkey_remote_x,regB
+	arg mem_t3_256,contw
+	call bn_mulmod	
+  	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod	 
+  	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	call bn_addmod	 
+ 	arg 24,loopcnt
+ 	arg mem_t7_256,regA
+	arg mem_t0_256,regB
+	branch  string_compare
+	
+sp_calc_b:
+	arg mem_gy,regA
+	arg mem_t0_256,contw
+	call bn_sqrmod   
+	arg mem_gx,regA
+	arg mem_t2_256,contw
+  	call bn_sqrmod
+  	arg mem_t2_256,regA
+	arg mem_gx,regB
+	arg mem_t2_256,contw
+	call bn_mulmod	
+	arg mem_a,regA
+	arg mem_gx,regB
+	arg mem_t3_256,contw
+	call bn_mulmod	 
+  	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod	 
+  	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	branch  bn_submod	
+
+   
+sp_calculate_commitment:
+	fetch 1,mem_sp_calc
+	bne SP_CALC_STANDBY,sp_calculate_commitment_wait_dhkey_calc
+	call sp_local_random_key_generator
+	arg mem_sp_prarm_stack,contw
+	setarg mem_sp_random_local_end
+	istore 2,contw
+	setarg mem_sp_pubkey_local_x_end
+	istore 2,contw
+	setarg mem_sp_pubkey_remote_x_end
+	istore 2,contw
+	branch sp_calculate_commitment0
+master_sp_calculate_commitment:
+	arg mem_sp_prarm_stack,contw
+	setarg mem_sp_random_remote_end
+	istore 2,contw
+	setarg mem_sp_pubkey_remote_x_end
+	istore 2,contw
+	setarg mem_sp_pubkey_local_x_end
+	istore 2,contw
+sp_calculate_commitment0:
+	call function_f1
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_COMMIT_CALC,master_sp_calculate_commitment0
+	jam SP_FLAG_COMMIT,mem_sp_flag
+	jam SP_STAT_COMMIT_SEND,mem_sp_state
+	rtn
+master_sp_calculate_commitment0:
+	jam SP_STAT_COMMITMENT_COMPARE,mem_master_sp_state
+	call sp_master_generate_local_key
+	branch master_set_mem_master_sp_flag 
+
+sp_local_random_key_generator:
+	arg mem_sp_random_local,contw
+	force 8,queue
+	branch random_generator
+  
+sp_calculate_commitment_wait_dhkey_calc:
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	rtn
+    
+sp_confirm_check:
+    /* calculate Ea here */
+	bpatchx patch3c_6,mem_patch3c
+	arg      mem_addr_value,contw
+	fetch    6,mem_lap
+	istore   6,contw
+	fetch    6,mem_plap
+	istore   6,contw
+	fetch    3,mem_sp_iocap_remote
+	istore   3,contw 
+
+	call     function_f3a
+
+	arg      mem_sp_calc_result_high,regA
+	arg      mem_sp_check_result,regB    
+	force    4,queue 
+	call     compare4
+	nbranch  sp_confirm_check_failed,true  
+
+	call sp_confirm_check_success
+	jam LMP_DHKey_Check,mem_lmi_opcode2
+	branch tid_set_reply
+    
+sp_confirm_check_success:
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_CONFIRM_CHECK,sp_confirm_check_success_master
+	jam SP_STAT_CONFIRM_CALC,mem_sp_state
+	jam SP_FLAG_COMMIT,mem_sp_flag  
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	rtn
+sp_confirm_check_success_master:
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam SP_STATE_END,mem_master_sp_state
+	branch master_set_mem_master_sp_flag
+	//accept opcode?
+	
+sp_confirm_check_failed:
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_CONFIRM_CHECK,sp_confirm_check_failed_master
+	jam SP_STAT_NULL,mem_sp_state
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	//accept opcode?
+	jam      AUTHENTICATION_FAILURE_ERROR,mem_lmo_reason2 
+	rtn
+sp_confirm_check_failed_master:
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	jam SP_STAT_NULL,mem_master_sp_state
+	rtn
+    
+sp_confirm_calc:
+	fetch 1,mem_sp_dh_ready
+	beq SP_FLAG_COMMIT, sp_confirm_calc_ready
+	jam 	SP_STAT_CONFIRM_CALC,mem_master_sp_state
+	branch master_set_mem_master_sp_flag
+sp_confirm_calc_ready:
+	arg      mem_addr_value,contw
+	fetch    6,mem_plap
+	istore   6,contw
+	fetch    6,mem_lap
+	istore   6,contw
+	fetch    3,mem_sp_iocap_local
+	istore   3,contw 
+
+	call     function_f3b
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_CONFIRM_CALC,sp_confirm_calc_master
+	jam      SP_STAT_CONFIRM_SEND,mem_sp_state
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	rtn
+sp_confirm_calc_master:
+	jam      SP_STAT_CONFIRM_SEND,mem_master_sp_state
+	jam      SP_FLAG_COMMIT,mem_master_sp_flag
+	rtn   
+
+sp_master_key_prarm_push:
+	arg mem_sp_prarm_stack,contw
+	fetch    6,mem_plap
+	istore   6,contw
+	fetch    6,mem_lap
+	istore   6,contw
+	setarg mem_sp_random_local_end
+	istore 2,contw
+	setarg mem_sp_random_remote_end
+	istore 2,contw
+	branch sp_link_key_calc
+sp_link_key_prarm_push:
+	jam      SP_STAT_DONE,mem_sp_state    
+	arg mem_sp_prarm_stack,contw
+	fetch    6,mem_lap
+	istore   6,contw
+	fetch    6,mem_plap
+	istore   6,contw
+	setarg mem_sp_random_remote_end
+	istore 2,contw
+	setarg mem_sp_random_local_end
+	istore 2,contw
+sp_link_key_calc:
+    /*calculate Link key here */
+	arg      mem_addr_value,contw
+	fetch    6,mem_sp_prarm_stack
+	istore   6,contw
+	fetch    6,mem_sp_prarm_stack+6
+	istore   6,contw
+	
+	call     function_f2    
+
+	/*handle linkkey  */
+	jam 1,mem_link_key_exists
+	arg mem_link_key,contw
+	arg mem_sp_calc_result_high,contr
+	call memcpy16
+	branch  generate_linkkey_continue
+
+    
+sp_pubkey_calc:
+	bpatchx patch3c_7,mem_patch3c
+	fetch    1,mem_sp_local_key_invalid
+	rtnne SP_KEY_INVALID
+	fetch    1,mem_sp_calc
+	rtnne  SP_CALC_STANDBY
+	arg      mem_sp_private_key,contw 
+	force    11,queue
+	call     random_generator
+	random   pdata
+	rshift   pdata,pdata
+	istore   2,contw 
+/* we don't need fixed private key,generate random key instead */ 
+	arg      mem_k,contw
+	arg      mem_sp_private_key,contr	
+	call     memcpy24 //mem_sp_private_key=>mem_k 24BYTES
+
+	arg      mem_ax,contw
+	arg      mem_gx,contr
+	call     memcpy48 //mem_gx=>mem_ax 48bytes
+
+	arg      mem_az,contw
+	call     bn_zero
+	jam      1,mem_az //0=>mem_az 24bytes
+
+	call     eckp_calc_init
+	jam SP_CALC_PUBKEY,mem_sp_calc
+	rtn    
+	
+sp_pubkey_generated:
+	arg      mem_sp_pubkey_local,contw
+	arg      mem_bx,contr
+	call     memcpy48   
+	jam      SP_KEY_VALID,mem_sp_local_key_invalid
+	jam      SP_CALC_STANDBY,mem_sp_calc
+	rtn
+
+sp_dhkey_calc:
+	bpatchx patch3d_0,mem_patch3d
+	fetch    1,mem_sp_dhkey_invalid
+	rtnne  SP_KEY_INVALID
+	fetch    1,mem_sp_calc
+	rtnne  SP_CALC_STANDBY
+
+	arg      mem_k,contw
+	arg      mem_sp_private_key,contr	
+	call     memcpy24
+
+	arg      mem_ax,contw
+	arg      mem_sp_pubkey_remote,contr
+	call     memcpy48
+
+	arg      mem_az,contw
+	call     bn_zero
+	jam      1,mem_az
+
+	call     eckp_calc_init
+	jam      SP_CALC_DHKEY,mem_sp_calc
+	rtn 	
+	
+sp_dhkey_generated:
+	jam SP_FLAG_COMMIT,mem_sp_dh_ready
+	arg mem_sp_dhkey,contw
+	arg mem_bx,contr
+	call memcpy24
+	jam SP_KEY_VALID,mem_sp_dhkey_invalid
+	jam SP_CALC_STANDBY,mem_sp_calc
+	rtn
+
+random_generator:
+	increase -1,queue
+	nrtn     positive
+	random   pdata
+	istore   2,contw  
+	branch   random_generator
+compare4:
+	increase -1,queue
+	nbranch  compare4_success,positive
+	ifetch   4,regA
+	copy     pdata,temp
+	ifetch   4,regB
+	iflip    temp,pdata
+	nbranch  compare4_failed,zero
+	increase 4,regA
+	increase 4,regB
+	branch   compare4
+compare4_failed:
+	disable  true
+	rtn
+compare4_success:
+	enable   true
+	rtn
+
+/*************************************************/
+/** Message state machine routines ***************/
+/*************************************************/
+// simple pairing support 
+
+simple_pairing_sequence:
+	bpatchx patch3d_1,mem_patch3d
+         fetch 1,mem_sp_flag
+         rtn blank
+	call lmo_fifo_check
+	nrtn blank
+	jam      SP_FLAG_STANDBY,mem_sp_flag
+	fetch    1,mem_sp_state
+	beq  SP_STAT_KEY_SEND,sp_send_LMP_ENCAPSULATED_HEADER
+	beq  SP_STAT_COMMIT_SEND,sp_send_LMP_SIMPLE_PAIRING_COMFIRM
+	beq  SP_STAT_RANDOM_SEND,sp_send_LMP_SIMPLE_PAIRING_NUMBER
+	beq  SP_STAT_CONFIRM_SEND,sp_send_LMP_DHKEY_CHECK
+	beq  SP_STAT_KEY_GENERATE,sp_generate_local_key
+	beq  SP_STAT_COMMIT_CALC,sp_calculate_commitment
+	beq  SP_STAT_CONFIRM_CHECK,sp_confirm_check
+	beq  SP_STAT_CONFIRM_CALC,sp_confirm_calc
+	beq  SP_STAT_LINK_KEY_CALC,sp_link_key_prarm_push
+	//beq  SP_STAT_FEATURE_EXT_SEND,send_LMP_FEATURES_REQ_EXT
+	rtn  
+
+master_simple_paring_sequence:
+	bpatchx patch3d_2,mem_patch3d
+	fetch 1,mem_master_sp_flag
+	rtn blank
+	call lmo_fifo_check
+	nrtn blank
+	jam SP_FLAG_STANDBY,mem_master_sp_flag
+	fetch 1,mem_master_sp_state
+	beq SP_MASTER_STAT_START_SKIP,sp_master_send_io_cap_get
+	beq SP_MASTER_STAT_START_DONE,sp_master_send_io_cap_send
+	beq SP_STAT_KEY_SEND,sp_master_send_LMP_ENCAPSULATED_HEADER
+	beq SP_STAT_COMMIT_CALC,master_sp_calculate_commitment
+	beq SP_STAT_COMMITMENT_COMPARE,sp_master_commitment_compare
+	beq SP_STAT_RANDOM_SEND,sp_master_send_LMP_SIMPLE_PAIRING_NUMBER
+	beq SP_STAT_CONFIRM_CALC,sp_confirm_calc
+	beq SP_STAT_CONFIRM_SEND,master_sp_send_lmp_dhkey_check
+	beq SP_STAT_CONFIRM_CHECK,sp_confirm_check
+	beq SP_STATE_END,master_sp_sm_end
+	rtn
+
+master_set_mem_master_sp_flag:
+	jam SP_FLAG_COMMIT,mem_master_sp_flag
+	rtn
+	
+master_clear_mem_master_sp_flag:
+	jam SP_FLAG_STANDBY,mem_master_sp_flag
+	rtn
+sp_calc_sequence:
+	bpatchx patch3d_3,mem_patch3d
+	fetch 1,mem_ssp_enable
+	rtn blank
+	fetch 1,mem_sp_calc
+	rtn blank
+	increase 0x80,pdata
+	store    1,mem_sp_calc
+	rtnbit1 7
+	fetch    1,mem_ec_loopc
+	branch   sp_calc_sequence_done,blank
+	branch   eckp_calc
+
+sp_calc_sequence_done:    
+	call ecunmapz
+	fetch 1,mem_sp_calc
+	beq  SP_CALC_PUBKEY,sp_pubkey_generated
+	beq  SP_CALC_DHKEY,sp_dhkey_generated
+	rtn
+
+
+bn_testbit:
+	and pdata,7,queue
+	rshift3 pdata,pdata
+	iadd contr,contr
+	ifetch 1,contr
+	qisolate0 pdata
+	rtn
+
+
+ec_copy:
+	call memcpy24
+	call memcpy24
+	branch memcpy24
+	
+	
+bn_eq_zero:
+	ifetch 8,contr
+	nrtn blank
+	ifetch 8,contr
+	nrtn blank
+	ifetch 8,contr
+	rtn
+	
+	
+	/* return zero if eq */
+
+bn_eq_0:	
+	ifetch 4,regA
+	iforce temp
+	ifetch 4,regB
+	isub temp,null
+	nrtn zero
+	increase 4,regA
+	increase 4,regB
+	loop bn_eq_0
+	rtn
+
+	/* return positive if A >= B */
+bn_bigeq:
+	force 6,loopcnt
+	increase 20,regA
+	increase 20,regB
+bn_bigeq_0:	
+	ifetch 4,regB
+	iforce temp
+	ifetch 4,regA
+	isub temp,pdata
+	nrtn positive
+	nrtn blank
+	increase -4,regA
+	increase -4,regB
+	loop bn_bigeq_0
+	rtn
+
+bn_add:
+	force 6,loopcnt
+	force 0,regC
+bn_add_0:	
+	ifetch 4,regA
+	iforce temp
+	ifetch 4,regB
+	iadd temp,pdata
+	iadd regC,pdata
+	istore 4,contw
+	isolate1 32,pdata
+	setflag true,0,regC
+	increase 4,regA
+	increase 4,regB
+	loop bn_add_0
+	rtn
+
+bn_sub:
+	force 6,loopcnt
+	force 0,regC
+bn_sub_0:	
+	ifetch 4,regB
+	iforce temp
+	ifetch 4,regA
+	isub temp,pdata
+	isub regC,pdata
+	istore 4,contw
+	isolate1 32,pdata
+	setflag true,0,regC
+	increase 4,regA
+	increase 4,regB
+	loop bn_sub_0
+	rtn
+
+bn_rshift6:
+	force 6,loopcnt
+	increase 20,regA
+bn_rshift:
+	force 0,regC
+bn_rshift_0:	
+	ifetch 4,regA
+	isolate1 0,pdata
+	setflag true,1,regC
+	rshift pdata,pdata
+	isolate1 0,regC
+	setflag true,31,pdata
+	istore 4,regA
+	increase -4,regA
+	rshift regC,regC
+	loop bn_rshift_0
+	rtn
+
+bn_lshift:
+	force 6,loopcnt
+	force 0,regC
+bn_lshift_0:	
+	ifetch 4,regA
+	isolate1 31,pdata
+	setflag true,1,regC
+	lshift pdata,pdata
+	isolate1 0,regC
+	setflag true,0,pdata
+	istore 4,regA
+	increase 4,regA
+	rshift regC,regC
+	loop bn_lshift_0
+	rtn
+	
+bn_lshiftmod:
+	call bn_lshift
+bn_lshiftmod_ismod:	
+	isolate1 0,regC
+	branch bn_lshiftmod_0,true
+	arg mem_p,regB
+	copy regA,regC
+	increase -24,regA
+	call bn_bigeq
+	nrtn positive
+	copy regC,regA
+bn_lshiftmod_0:
+	increase -24,regA
+	arg mem_p,regB
+	copy regA,contw
+	branch bn_sub
+	
+
+bn_addmod:
+	call bn_add
+	copy contw,regA
+	branch bn_lshiftmod_ismod
+	
+bn_submod:
+	call bn_sub
+	isolate0 0,regC
+	rtn true
+	arg mem_p,regB
+	add contw,-24,regA
+	copy regA,contw
+	branch bn_add
+	
+
+bn_p192mod:
+	copy contw,timeup				/* save result ptr */
+	copy regA,alarm				/* temp save regA */
+	arg mem_tmp2,regB
+	copy regB,contw
+	add regA,24,contr
+	ifetch 8,contr
+	istore 8,contw
+	istore 8,contw
+	force 0,pdata
+	istore 8,contw
+	copy timeup,contw
+	call bn_addmod
+	arg mem_tmp2,regB
+	copy regB,contw
+	force 0,pdata
+	istore 8,contw
+	add alarm,32,contr
+	ifetch 8,contr
+	istore 8,contw
+	istore 8,contw
+	copy timeup,regA
+	copy regA,contw
+	call bn_addmod
+	arg mem_tmp2,regB
+	copy regB,contw
+	add alarm,40,contr
+	ifetch 8,contr
+	istore 8,contw
+	istore 8,contw
+	istore 8,contw
+	copy timeup,regA
+	copy regA,contw
+	branch bn_addmod
+		
+
+bn_load:
+	force 6,loopcnt
+bn_load_0:	
+	ifetch 4,contr
+	iforce regext
+	increase 1,regext_index
+	loop bn_load_0
+	rtn
+
+
+	/* cost 1562 clks */	
+bn_mulmod:
+	copy contw,timeup					/* save result ptr */
+	arg mem_tmp1,contw
+	call bn_zero
+	arg mem_tmp1,contw
+	copy regA,contr
+	force 0,regext_index
+	call bn_load
+	copy regB,contr
+	call bn_load
+	force 0,regB
+bn_mulmod_1:	
+	force 0,temp
+	force 6,regC
+bn_mulmod_0:
+	ifetch 4,contw					/* d[i+j] */
+	iforce regA
+	copy regB,regext_index
+	deposit regext
+	copy regC,regext_index
+	imul32 regext,pdata
+	iadd regA,pdata					/* uv = a[i]*b[j] + d[i+j] */
+	iadd temp,pdata					/* uv += u */
+	istore 4,contw					/* ->d[i+j] */
+	rshift32 pdata,temp				/* temp = u = uv >> 32 */
+	increase 1,regC
+	compare 12,regC,0xff
+	nbranch bn_mulmod_0,true
+	deposit temp
+	istore 4,contw					/* d[i + 12] = u */
+	increase -24,contw
+	increase 1,regB
+	compare 6,regB,0xff
+	nbranch bn_mulmod_1,true
+	arg mem_tmp1,regA
+	copy timeup,contw
+	branch bn_p192mod
+
+	
+bn_sqrmod:
+	copy regA,regB
+	branch bn_mulmod
+
+bn_rshifteven:
+	copy regA,alarm
+bn_rshifteven_1:
+	copy alarm,regA
+	ifetch 1,regA
+	isolate1 0,pdata
+	rtn true
+	call bn_rshift6
+	ifetch 1,regB
+	isolate0 0,pdata
+	branch bn_rshifteven_0,true
+	arg mem_p,regA
+	copy regB,contw
+	call bn_add
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB						/* [6] */
+	increase -24,regB
+bn_rshifteven_0:
+	add regB,24,regA
+	force 7,loopcnt
+	call bn_rshift
+	branch bn_rshifteven_1
+
+	/* cost 141910 clks */
+bn_invmod:
+	copy contw,timeup					/* save result ptr */
+	arg mem_tmp0,contw				/* x */
+	call bn_zero
+	force 0,pdata
+	store 4,mem_tmp5
+	store 4,mem_t2
+	jam 1,mem_tmp0
+	arg mem_tmp1,contw				/* y */
+	call bn_zero
+	arg mem_p,contr
+	arg mem_tmp2,contw				/* a */
+	call memcpy24
+	copy regA,contr
+	arg mem_tmp3,contw				/* b */
+	call memcpy24
+bn_invmod_2:	
+	arg mem_tmp3,contr
+	call bn_eq_zero
+	branch bn_invmod_0,blank
+	arg mem_tmp3,regA
+	arg mem_tmp0,regB
+	call bn_rshifteven
+
+	arg mem_tmp2,regA
+	arg mem_tmp1,regB
+	call bn_rshifteven
+	arg mem_tmp3,regA
+	arg mem_tmp2,regB
+	call bn_bigeq
+	branch bn_invmod_1,positive
+	arg mem_tmp2,regA
+	arg mem_tmp3,regB
+	copy regA,contw
+	call bn_sub
+	arg mem_tmp0,regA
+	arg mem_tmp1,regB
+	copy regB,contw
+	call bn_add
+	ifetch 1,regA
+	iadd regC,regC
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB
+	branch bn_invmod_2
+bn_invmod_1:
+	arg mem_tmp3,regA
+	arg mem_tmp2,regB
+	copy regA,contw
+	call bn_sub
+	arg mem_tmp1,regA
+	arg mem_tmp0,regB
+	copy regB,contw
+	call bn_add
+	ifetch 1,regA
+	iadd regC,regC
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB
+	branch bn_invmod_2
+bn_invmod_0:
+	arg mem_tmp0,contw
+	call bn_zero
+	fetch 1,mem_tmp5
+	store 1,mem_tmp0
+	store 1,mem_tmp0a
+	arg mem_tmp0,regA
+	arg mem_tmp1,regB
+	copy regB,contw
+	call bn_addmod
+	arg mem_p,regA
+	arg mem_tmp1,regB
+	copy timeup,contw
+	branch bn_submod
+	
+
+
+	/* cost 64742 clks */
+ecdbl:
+	arg mem_cz,regA
+	arg mem_t2,contw
+	call bn_sqrmod
+	arg mem_t2,regA
+	arg mem_t3,contw
+	call bn_sqrmod
+	arg mem_a,regA
+	arg mem_t3,regB
+	arg mem_t3,contw
+	call bn_mulmod		/* t3=a*z4	*/
+	arg mem_cx,regA
+	arg mem_t2,contw
+	call bn_sqrmod
+	arg mem_t2,contr
+	arg mem_t1,contw
+	call memcpy24
+	arg mem_t1,regA
+	call bn_lshiftmod
+	arg mem_t2,regA
+	arg mem_t1,regB
+	arg mem_t2,contw
+	call bn_addmod
+	arg mem_t2,regA
+	arg mem_t3,regB
+	arg mem_t2,contw
+	call bn_addmod		/* t2=3*x2 + z*z4		D  */
+	arg mem_cx,contr
+	arg mem_t1,contw
+	call memcpy24
+	arg mem_cy,regA
+	arg mem_t3,contw
+	call bn_sqrmod
+	arg mem_t1,regA
+	call bn_lshiftmod
+	arg mem_t1,regA
+	call bn_lshiftmod
+	arg mem_t1,regA		
+	arg mem_t3,regB
+	arg mem_t1,contw
+	call bn_mulmod		/* t1=4x*y2	B	*/
+	arg mem_t3,regA
+	arg mem_t0,contw
+	call bn_sqrmod
+	arg mem_t0,regA
+	call bn_lshiftmod
+	arg mem_t0,regA
+	call bn_lshiftmod		
+	arg mem_t0,regA		
+	call bn_lshiftmod		/* t0=8*y4		C */
+	arg mem_cy,contr
+	arg mem_t3,contw
+	call memcpy24
+	arg mem_t3,regA
+	call bn_lshiftmod
+	arg mem_t3,regA
+	arg mem_cz,regB
+	arg mem_cz,contw
+	call bn_mulmod		
+	arg mem_t2,regA
+	arg mem_t3,contw
+	call bn_sqrmod
+	arg mem_t3,regA
+	arg mem_t1,regB
+	arg mem_t3,contw
+	call bn_submod
+	arg mem_t3,regA
+	arg mem_t1,regB
+	arg mem_cx,contw
+	call bn_submod
+	arg mem_t1,regA
+	arg mem_cx,regB
+	arg mem_t3,contw
+	call bn_submod
+	arg mem_t3,regA
+	arg mem_t2,regB
+	arg mem_t3,contw
+	call bn_mulmod		
+	arg mem_t3,regA
+	arg mem_t0,regB
+	arg mem_cy,contw
+	branch bn_submod
+	
+
+	/* cost 104904	clks */
+ecadd:
+	arg mem_az,regA
+	arg mem_t7,contw
+	call bn_sqrmod
+	arg mem_cx,regA
+	arg mem_t7,regB
+	arg mem_t0,contw
+	call bn_mulmod		/* n1=t0=xa*zb2  */
+	arg mem_az,regA
+	arg mem_t7,regB
+	arg mem_t7,contw
+	call bn_mulmod	
+	arg mem_cy,regA
+	arg mem_t7,regB
+	arg mem_t1,contw
+	call bn_mulmod		/* n2=t1=ya*zb3 */
+	arg mem_cz,regA
+	arg mem_t7,contw
+	call bn_sqrmod
+	arg mem_ax,regA
+	arg mem_t7,regB
+	arg mem_t2,contw
+	call bn_mulmod		/* n3=t2=xb*za2 */
+	arg mem_cz,regA
+	arg mem_t7,regB
+	arg mem_t7,contw
+	call bn_mulmod	
+	arg mem_ay,regA
+	arg mem_t7,regB
+	arg mem_t3,contw
+	call bn_mulmod		/* n4=t3=yb*za3 */
+	arg mem_t0,regA
+	arg mem_t2,regB
+	arg mem_t7,contw
+	call bn_submod		/* n5=t7=n1-n3=t0-t2 */
+	arg mem_t0,regA
+	arg mem_t2,regB
+	arg mem_t0,contw
+	call bn_addmod		/* n7=t0=n1+n3=t0+t2 */
+	arg mem_t1,regA
+	arg mem_t3,regB
+	arg mem_t2,contw
+	call bn_submod		/* n6=t2=n2-n4=t1-t3 */
+	arg mem_t1,regA
+	arg mem_t3,regB
+	arg mem_t1,contw
+	call bn_addmod		/* n8=t1=n2+n4=t1+t3 */
+	arg mem_t1,regA
+	arg mem_t7,regB
+	arg mem_t1,contw
+	call bn_mulmod		/* t1=n8*n5 */
+	arg mem_cz,regA
+	arg mem_az,regB
+	arg mem_t3,contw
+	call bn_mulmod	
+	arg mem_t3,regA
+	arg mem_t7,regB
+	arg mem_cz,contw
+	call bn_mulmod		/* z=za*zb*n5 */
+	arg mem_t7,regA
+	arg mem_t7,contw
+	call bn_sqrmod		/* t7=n5^2 */
+	arg mem_t7,regA
+	arg mem_t0,regB
+	arg mem_t3,contw
+	call bn_mulmod		/* t3=n5^2*n7 */
+	arg mem_t7,regA
+	arg mem_t1,regB
+	arg mem_t1,contw
+	call bn_mulmod		/* t1=n8*n5^3 */
+	arg mem_t2,regA
+	arg mem_cx,contw
+	call bn_sqrmod		
+	arg mem_cx,regA
+	arg mem_t3,regB
+	arg mem_cx,contw
+	call bn_submod		/* x=n6^2-n5^2*n7 */
+	arg mem_cx,contr
+	arg mem_t7,contw
+	call memcpy24
+	arg mem_t7,regA
+	call bn_lshiftmod		/* t7=2*x */
+	arg mem_t3,regA
+	arg mem_t7,regB
+	arg mem_t3,contw
+	call bn_submod		/* t3=n9 */
+	arg mem_t3,regA
+	arg mem_t2,regB
+	arg mem_t2,contw
+	call bn_mulmod		/* t2=n9*n6 */
+	arg mem_t2,regA
+	arg mem_t1,regB
+	arg mem_cy,contw
+	call bn_submod	
+	arg mem_cy,regA
+	arg mem_p,regB
+	arg mem_cy,contw
+	force 0,regC
+	fetch 1,mem_cy
+	isolate1 0,pdata
+	call bn_add,true
+	copy regC,alarm
+	arg mem_cy,regA
+	call bn_rshift6
+	fetch 1,mem_cy5
+	isolate1 0,alarm
+	setflag true,7,pdata
+	store 1,mem_cy5
+	rtn
+
+	/* cost 22276983 clks */
+
+eckp_0:	
+	fetch 1,mem_ec_loopc
+	increase -1,pdata
+	nrtn positive
+	store 1,mem_ec_loopc
+	fetch 1,mem_ec_infinite
+	call ecdbl,blank
+	fetch 1,mem_ec_loopc
+	arg mem_k,contr
+	call bn_testbit
+	branch eckp_0,true
+	fetch 1,mem_ec_infinite
+	nbranch eckp_1,blank
+	call ecadd
+	branch eckp_0
+eckp_1:
+	jam 0,mem_ec_infinite
+	arg mem_ax,contr
+	arg mem_cx,contw
+	call ec_copy
+	branch eckp_0
+
+	/* cost 162522 clks */
+ecunmapz:
+	arg mem_cz,regA
+	arg mem_t3,contw
+	call bn_invmod			/* t3 = 1/z */
+	arg mem_t3,regA
+	arg mem_t1,contw		
+	call bn_sqrmod			/* t1 = 1/z2 */
+	arg mem_cx,regA
+	arg mem_t1,regB
+	arg mem_bx,contw
+	call bn_mulmod
+	arg mem_t3,regA
+	arg mem_t1,regB
+	arg mem_t2,contw			
+	call bn_mulmod			/* t2 = 1/z3 */
+	arg mem_cy,regA
+	arg mem_t2,regB
+	arg mem_by,contw
+	branch bn_mulmod		
+	
+	
+
+sha_endian_swap2:	
+	ifetch 4,contr
+	force 4,regA
+	increase 3,contw
+sha_endian_loop:	
+	istore 1,contw
+	rshift8 pdata,pdata
+	increase -2,contw
+	increase -1,regA
+	nbranch sha_endian_loop,zero
+	increase 5,contw
+	loop sha_endian_swap2
+	rtn	
+
+
+sha_getw:
+	lshift2 queue,pdata
+	iadd timeup,contr
+	ifetch 4,contr
+	rtn
+	
+sha_r:
+	force 16,alarm
+	arg memdat,timeup
+sha_r_loop:	
+	add alarm,-7,queue
+	call sha_getw
+	iforce temp						/* W[t - 7] */
+	add alarm,-16,queue
+	call sha_getw
+	iadd temp,temp					/* W[t-7] + W[t-16] */
+	add alarm,-2,queue
+	call sha_getw
+	shasx pdata,1,pdata
+	iadd temp,temp					/* S1(W[t -  2]) + W[t-7] + W[t-16] */
+	add alarm,-15,queue
+	call sha_getw
+	shasx pdata,0,pdata
+	iadd temp,temp					/* S0(W[t - 15]) + S1(W[t -  2]) + W[t-7] + W[t-16] */
+	lshift2 alarm,pdata
+	iadd timeup,contw
+	istoret 4,contw
+	increase 1,alarm
+	compare 64,alarm,0xff
+	nbranch sha_r_loop,true
+	rtn
+	
+
+sha_init:
+	arg memh0,contr
+	force 7,regext_index
+sha_init_0:	
+	ifetch 4,contr
+	iforce regext
+	increase -1,regext_index
+	branch sha_init_0,positive
+	rtn
+
+sha:
+	bpatchx patch3d_4,mem_patch3d
+	call sha_r		/* preprocessing data into R() */
+	arg memahbak,contw
+	force 0,regext_index
+sha_0:	
+	deposit regext
+	istore 4,contw
+	increase 1,regext_index
+	compare 8,regext_index,0xff
+	nbranch sha_0,true
+	call enable_authrom
+	arg memk,timeup
+	arg memdat,alarm
+	force 64,loopcnt
+sha_loop:	
+	ifetcht 4,alarm
+	ifetch 4,timeup
+	increase 4,timeup
+	increase 4,alarm
+	iadd temp,pdata			/* x+K */
+	force 7,regext_index
+	iadd regext,temp			/* x+K+h */
+	force 4,regext_index
+	shasx regext,3,pdata
+	iadd temp,temp			/* temp = s3(e)+x+K+h */
+	force 5,regext_index
+	deposit regext
+	force 6,regext_index
+	ixor regext,pdata
+	force 4,regext_index
+	iand regext,pdata			/* (e & (f ^ g)) */
+	force 6,regext_index
+	ixor regext,pdata			/* F1(e, f, g) = g ^ (e & (f ^ g)) */
+	iadd temp,temp			/* temp1 = h + S3(e) + F1(e,f,g) + K + x */
+	force 7,regext_index
+	copy temp,regext			/* save to H */
+	force 3,regext_index
+	deposit regext
+	iadd temp,regext			/* save to D */
+	force 0,regext_index
+	deposit regext
+	force 1,regext_index
+	iand regext,temp			/* a & b */
+	ior regext,pdata			/* a | b */			
+	force 2,regext_index
+	iand regext,pdata			/* (c & (a | b)) */
+	ior temp,temp				/* F0:(a & b) | (c & (a | b)) */
+	force 0,regext_index
+	shasx regext,2,pdata
+	iadd temp,pdata			/* temp2 = S2(a) + F0(a,b,c) */
+	force 7,regext_index
+	iadd regext,regext			/* h = temp1 + temp2 */
+	regexrot					/* rotate move h,a-g => a-h */
+	loop sha_loop
+	arg memahbak,contr
+	force 0,regext_index
+sha_1:	
+	ifetch 4,contr
+	iadd regext,regext
+	increase 1,regext_index
+	compare 8,regext_index,0xff
+	nbranch sha_1,true
+	branch disable_authrom
+
+	
+sha_result:
+	arg   memresult,contw
+	force 7,regext_index
+sha_regext_save:
+	deposit regext
+	istore  4,contw 
+	increase -1,regext_index
+	branch   sha_regext_save,positive
+	rtn	
+
+pad_xor:
+//	arg memx_end,contr
+	arg      memdat,contw
+	increase -4,contr
+	sub      loopcnt,16,regA
+pad_xor_0:	    
+	ifetch   4,contr
+	ixor     temp,pdata
+	istore   4,contw	
+	increase -8,contr	
+	loop  pad_xor_0
+	copy     regA,loopcnt
+	deposit  temp
+pad_xor_1:	
+	istore 4,contw
+	loop pad_xor_1
+	rtn
+
+g_noninit_number_confirm:
+	call g_noninit0
+	call sha_result
+	branch g_common0
+
+g_noninit:
+	call g_noninit0
+	branch g_common0
+	
+g_noninit0:
+ 	arg      mem_sp_pubkey_remote_x_end,contr
+	arg      memdat,contw
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	arg      mem_sp_pubkey_local_x_end,contr
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	arg      mem_sp_random_remote_end,contr
+	call     memcpy_dword_swap4
+	call     sha_init
+	call     sha	
+ 	arg      mem_sp_random_local_end,contr
+	arg      memdat,contw
+	branch g_common
+	
+g_init:
+ 	arg      mem_sp_pubkey_local_x_end,contr
+	arg      memdat,contw
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	arg      mem_sp_pubkey_remote_x_end,contr
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	arg      mem_sp_random_local_end,contr
+	call     memcpy_dword_swap4
+	call     sha_init
+	call     sha	
+ 	arg      mem_sp_random_remote_end,contr
+	arg      memdat,contw
+	call g_common
+	branch g_common0
+	
+g_common:	
+	call     memcpy_dword_swap4
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	force    5,loopcnt
+	call memset0
+	setarg 640
+	istore 4,contw
+	branch sha
+g_common0:
+	fetch 4,memresult
+//	store 4,mem_gkey
+	arg 1000,rega
+	idiv rega
+	call wait_div_end
+	remainder pdata
+	store 4,mem_gkey
+	quotient pdata
+	arg 1000,rega
+	idiv rega
+	call wait_div_end
+	remainder pdata
+	arg 1000,rega
+	imul32 rega,pdata
+	fetcht 4,mem_gkey
+	iadd temp,pdata
+	store 4,mem_gkey
+	rtn
+
+function_f1_no_key:
+	jam 0,mem_passkey_1bit
+	branch function_f1_common
+	
+function_f1:
+	fetch 1,mem_ssp_mode_flag
+	bne  SSP_MODE_PASSKEY_ENTRY_FLAG,function_f1_no_key
+function_f1_common:
+	bpatchx patch3d_5,mem_patch3d
+	setarg   0x363636
+	lshift8  pdata,temp
+	or_into       0x36,temp
+	fetch 2,mem_sp_prarm_stack
+	copy pdata,contr
+	force    4,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	fetch 2,mem_sp_prarm_stack+2
+	copy pdata,contr
+	arg      memdat,contw
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	fetch 2,mem_sp_prarm_stack+4
+	copy pdata,contr
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	setarg   0x800000
+	istore   3,contw
+	
+	fetch 1,mem_passkey_1bit
+	
+	istore   1,contw
+	force    0,pdata
+	istore   8,contw
+	setarg   0x0388
+	istore   4,contw
+	call     sha
+	call     sha_result
+	arg      memresult,contr
+	arg      memahsave,contw 
+	call     memcpy32
+    
+	setarg   0x5c5c5c
+	lshift8  pdata,temp
+	or_into       0x5c,temp
+	fetch 2,mem_sp_prarm_stack
+	copy pdata,contr
+	force    4,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	arg      memahsave_end,contr
+	arg      memdat,contw
+	force    8,loopcnt
+	call     memcpy_dword_swap
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	call		bn_zero
+	setarg   0x0300
+	istore   4,contw
+	call     sha
+	branch     sha_result
+	
+	
+function_f2:
+	setarg   0x363636
+	lshift8  pdata,temp
+	or_into       0x36,temp
+	arg      mem_sp_dhkey_end,contr
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	fetch 2,mem_sp_prarm_stack+12
+	copy pdata,contr
+	arg      memdat,contw
+	call     memcpy_dword_swap4
+	fetch 2,mem_sp_prarm_stack+14
+	copy pdata,contr
+	call     memcpy_dword_swap4
+
+	setarg   0x62746c
+	lshift8  pdata,pdata
+	or_into       0x6b,pdata       
+	istore   4,contw
+	arg      mem_addr_value_end,contr
+	force    3,loopcnt
+	call     memcpy_dword_swap
+	
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	force    0,pdata
+	istore   8,contw
+	setarg   0x0380
+	istore   4,contw
+	call     sha
+
+	call     sha_result
+	arg      memresult,contr
+	arg      memahsave,contw 
+	call     memcpy32
+    
+	setarg   0x5c5c5c
+	lshift8  pdata,temp
+	or_into       0x5c,temp
+	arg      mem_sp_dhkey_end,contr 
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	arg      memahsave_end,contr
+	arg      memdat,contw
+	force    8,loopcnt
+	call     memcpy_dword_swap
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	call bn_zero
+	setarg   0x0300
+	istore   4,contw
+	call     sha
+	branch     sha_result
+	
+
+function_f3a:
+	fetch 1,mem_ssp_mode_flag
+	bne  SSP_MODE_PASSKEY_ENTRY_FLAG,function_f3a_no_pin
+function_f3a_common:
+	bpatchx patch3d_6,mem_patch3d
+	setarg   0x363636
+	lshift8  pdata,temp
+	or_into       0x36,temp
+	arg      mem_sp_dhkey_end,contr
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	arg      mem_sp_random_remote_end,contr
+	arg      memdat,contw
+	call     memcpy_dword_swap4
+	arg      mem_sp_random_local_end,contr
+	call     memcpy_dword_swap4
+	branch function_f3_common
+
+function_f3a_no_pin:
+	setarg 0
+	store 4,mem_pin
+	branch function_f3a_common
+
+function_f3b_no_pin:
+	setarg 0
+	store 4,mem_pin
+	branch function_f3b_common
+
+
+function_f3b:
+	fetch 1,mem_ssp_mode_flag
+	bne  SSP_MODE_PASSKEY_ENTRY_FLAG,function_f3b_no_pin
+function_f3b_common:
+	setarg   0x363636
+	lshift8  pdata,temp
+	or_into       0x36,temp
+	arg      mem_sp_dhkey_end,contr
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+
+	arg      mem_sp_random_local_end,contr
+	arg      memdat,contw
+	call     memcpy_dword_swap4
+	arg      mem_sp_random_remote_end,contr
+	call     memcpy_dword_swap4
+function_f3_common:    
+	setarg   0x0    
+	istore   8,contw
+	istore   4,contw
+	fetch 4,mem_pin
+	istore   4,contw
+	
+	copy     contw,temp
+	jam      0x80,mem_addr_padding
+	copy     temp,contw
+	arg      mem_addr_iocap_end,contr
+	call     memcpy_dword_swap4
+
+	call     sha
+    
+	arg      memdat,contw
+	force 7,loopcnt
+	call memset0
+	istore   4,contw
+	setarg   0x03F8
+	istore   4,contw
+	call     sha
+	call     sha_result
+	
+	arg      memresult,contr
+	arg      memahsave,contw 
+	call     memcpy32
+    
+	setarg   0x5c5c5c
+	lshift8  pdata,temp
+	or_into       0x5c,temp
+	arg      mem_sp_dhkey_end,contr 
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	arg      memahsave_end,contr
+	arg      memdat,contw
+	force    8,loopcnt
+	call     memcpy_dword_swap
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	call bn_zero
+	setarg   0x0300
+	istore   4,contw
+	call     sha	
+	branch     sha_result
+		
+/*
+eckp:
+	jam 192,mem_ec_loopc
+	jam 1,mem_ec_infinite
+*/
+eckp_calc_init:
+	jam      192,mem_ec_loopc
+eckp_calc_init_1:    
+	fetch    1,mem_ec_loopc
+	rtn      blank
+	increase -1,pdata
+	store    1,mem_ec_loopc 	
+	arg      mem_k,contr
+	call     bn_testbit
+	branch eckp_calc_init_1,true
+	arg      mem_ax,contr
+	arg      mem_cx,contw
+	branch     ec_copy	
+	
+eckp_calc:
+	call     ecdbl  
+	fetch    1,mem_ec_loopc
+	increase -1,pdata
+	store    1,mem_ec_loopc
+	arg      mem_k,contr
+	call     bn_testbit
+	rtn	true
+	branch     ecadd                
+	             
+memcpy_dword_swap4:
+	force 4,loopcnt
+memcpy_dword_swap:
+	increase -4,contr
+memcpy_dword_swap_loop:
+	ifetch   4,contr
+	istore   4,contw
+	increase -8,contr
+	loop   memcpy_dword_swap_loop 
+    	rtn
+
+	
+
+
+sp_initialize_256:	
+	bpatchx patch3d_7,mem_patch3d
+	fetch 1,mem_le_secure_connect_enable
+	branch  le_secure_connection_disable,blank
+	call le_secure_connection_enable
+	call sp_clear_flags
+//	jam SP_KEY_INVALID_256,mem_le_sc_local_key_invalid
+	branch sp_pubkey_calc_256
+    	
+
+
+
+sp_pubkey_calc_256:
+	fetch    1,mem_le_sc_local_key_invalid
+	rtnne SP_KEY_INVALID
+	fetch    1,mem_le_sc_calc
+	rtnne  SP_CALC_STANDBY
+	
+	arg      mem_le_private_key_256,contw 
+	force    15,queue
+	call     random_generator
+	random   pdata
+	rshift   pdata,pdata
+	istore   2,contw 
+
+	arg      mem_k_256,contw
+	arg      mem_le_private_key_256,contr	
+	call     memcpy32 //mem_sp_private_key=>mem_k 
+
+	arg      mem_ax_256,contw
+	arg      mem_gx_256,contr
+	call     memcpy64 //mem_gx=>mem_ax 
+	
+	arg      mem_az_256,contw
+	call      clear_mem_256
+	jam      1,mem_az_256 //0=>mem_az 
+
+	call     eckp_calc_init_256
+	jam SP_CALC_PUBKEY_256,mem_le_sc_calc
+	rtn    
+
+sp_pubkey_generated_256:
+	arg      mem_le_pubkey_local_x_256,contw
+	arg      mem_bx_256,contr
+	call     memcpy64   
+	jam      SP_KEY_VALID_256,mem_le_sc_local_key_invalid
+	jam      SP_CALC_STANDBY,mem_le_sc_calc
+	rtn
+	
+
+
+sp_dhkey_calc_256:
+	fetch    1,mem_sp_dhkey_invalid
+	rtnne  SP_KEY_INVALID
+	fetch    1,mem_le_sc_calc
+	rtnne  SP_CALC_STANDBY
+
+	arg      mem_k_256,contw
+	arg      mem_le_private_key_256,contr	
+	call     memcpy32
+
+	arg      mem_ax_256,contw
+	arg      mem_le_pubkey_remote_x_256,contr
+	call     memcpy64
+
+	arg      mem_az_256,contw
+	call     clear_mem_256
+	jam      1,mem_az_256 //0=>mem_az 
+
+	call     eckp_calc_init_256
+	jam     SP_CALC_DHKEY_256,mem_le_sc_calc
+	rtn 
+
+
+sp_dhkey_generated_256:
+//	jam SP_FLAG_COMMIT,mem_sp_dh_ready
+	arg mem_le_dhkey_256,contw
+	arg mem_bx_256,contr
+	call memcpy32
+	jam SP_KEY_VALID_256,mem_sp_dhkey_invalid
+	jam SP_CALC_STANDBY,mem_le_sc_calc
+	rtn
+
+
+
+sp_calc_sequence_256:
+	fetch 1,mem_le_secure_connect_enable
+	rtn blank
+	fetch 1,mem_le_sc_calc
+	rtn blank
+	increase 0x80,pdata
+	store    1,mem_le_sc_calc
+	rtnbit1 7
+	fetch    2,mem_ec_loopc
+	branch   sp_calc_sequence_done_256,blank
+	branch   eckp_calc_256
+
+sp_calc_sequence_done_256:    
+	bpatchx patch3e_0,mem_patch3e
+	call ecunmapz_256
+	fetch 1,mem_le_sc_calc
+	beq  SP_CALC_PUBKEY_256,sp_pubkey_generated_256
+	beq  SP_CALC_DHKEY_256,sp_dhkey_generated_256
+	rtn
+
+
+eckp_calc_256:
+	call     ecdbl_256  
+	fetch    2,mem_ec_loopc
+	increase -1,pdata
+	store    2,mem_ec_loopc
+	arg      mem_k_256,contr
+	call     bn_testbit
+	rtn	true
+	branch     ecadd_256   
+
+eckp_calc_init_256:
+	bpatchx patch3e_1,mem_patch3e
+	setarg 256,pdata
+	store 2,mem_ec_loopc
+eckp_calc_init_256_1:    
+	fetch    2,mem_ec_loopc
+	rtn      blank
+	increase -1,pdata
+	store    2,mem_ec_loopc
+	arg      mem_k_256,contr
+	call     bn_testbit
+	branch eckp_calc_init_256_1,true
+	arg      mem_ax_256,contr
+	arg      mem_cx_256,contw
+	branch     memcpy96	
+
+
+ecunmapz_256:
+	arg mem_cz_256,regA
+	arg mem_t3_256,contw
+	call bn_invmod_256			/* t3 = 1/z */
+	arg mem_t3_256,regA
+	arg mem_t1_256,contw		
+	call bn_sqrmod_256			/* t1 = 1/z2 */
+	arg mem_cx_256,regA
+	arg mem_t1_256,regB
+	arg mem_bx_256,contw
+	call bn_mulmod_256
+	arg mem_t3_256,regA
+	arg mem_t1_256,regB
+	arg mem_t2_256,contw			
+	call bn_mulmod_256			/* t2 = 1/z3 */
+	arg mem_cy_256,regA
+	arg mem_t2_256,regB
+	arg mem_by_256,contw
+	branch bn_mulmod_256	
+	
+ecdbl_256:
+	arg mem_cz_256,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod_256
+	arg mem_t2_256,regA
+	arg mem_t3_256,contw
+	call bn_sqrmod_256
+//call ice_break
+	arg mem_a_256,regA
+	arg mem_t3_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256		/* t3=a*z4	*/
+	arg mem_cx_256,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod_256
+//call ice_break
+	arg mem_t2_256,contr
+	arg mem_t1_256,contw
+	call memcpy32
+	arg mem_t1_256,regA
+	call bn_lshiftmod_256
+	arg mem_t2_256,regA
+	arg mem_t1_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod_256
+//call ice_break
+	arg mem_t2_256,regA
+	arg mem_t3_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod_256		/* t2=3*x2 + z*z4		D  */
+//call ice_break
+	arg mem_cx_256,contr
+	arg mem_t1_256,contw
+	call memcpy32
+	arg mem_cy_256,regA
+	arg mem_t3_256,contw
+	call bn_sqrmod_256
+	arg mem_t1_256,regA
+	call bn_lshiftmod_256
+	arg mem_t1_256,regA
+	call bn_lshiftmod_256
+	arg mem_t1_256,regA		
+	arg mem_t3_256,regB
+	arg mem_t1_256,contw
+	call bn_mulmod_256		//S = 4X1Y1^2/* t1=4x*y2	B	*/
+	arg mem_t3_256,regA
+	arg mem_t0_256,contw
+	call bn_sqrmod_256
+	arg mem_t0_256,regA
+	call bn_lshiftmod_256
+	arg mem_t0_256,regA
+	call bn_lshiftmod_256		
+	arg mem_t0_256,regA		
+	call bn_lshiftmod_256	//T = 8Y1^4	/* t0=8*y4		C */
+	arg mem_cy_256,contr
+	arg mem_t3_256,contw
+	call memcpy32
+	arg mem_t3_256,regA
+	call bn_lshiftmod_256
+	arg mem_t3_256,regA
+	arg mem_cz_256,regB
+	arg mem_cz_256,contw
+	call bn_mulmod_256		//z = 2Y1Z1
+
+
+	arg mem_t2_256,regA
+	arg mem_t3_256,contw
+	call bn_sqrmod_256   // M ^2
+//call ice_break
+	arg mem_t3_256,regA
+	arg mem_t1_256,regB
+	arg mem_t3_256,contw
+	call bn_submod_256  // t2^2 - 4*cx *cy^2 
+	arg mem_t3_256,regA
+	arg mem_t1_256,regB
+	arg mem_cx_256,contw
+	call bn_submod_256   //X2
+	arg mem_t1_256,regA
+	arg mem_cx_256,regB
+	arg mem_t3_256,contw
+	call bn_submod_256   //S-X2
+	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256	//M(S-X2)	
+	arg mem_t3_256,regA
+	arg mem_t0_256,regB
+	arg mem_cy_256,contw
+	branch bn_submod_256  //M(S-X2)-T Y2	
+
+ecadd_256:
+
+	arg mem_az_256,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod_256
+	arg mem_cx_256,regA
+	arg mem_t7_256,regB
+	arg mem_t0_256,contw
+	call bn_mulmod_256		/* n1=t0=xa*zb2 U1 = X1Z0^2*/
+
+
+	arg mem_az_256,regA
+	arg mem_t7_256,regB
+	arg mem_t7_256,contw
+	call bn_mulmod_256	
+	arg mem_cy_256,regA
+	arg mem_t7_256,regB
+	arg mem_t1_256,contw
+	call bn_mulmod_256		/* n2=t1=ya*zb3   S1 = Y1Z0^3*/
+
+
+	arg mem_cz_256,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod_256
+	arg mem_ax_256,regA
+	arg mem_t7_256,regB
+	arg mem_t2_256,contw
+	call bn_mulmod_256		/* n3=t2=xb*za2  U0 = X0Z1^2*/
+
+	arg mem_cz_256,regA
+	arg mem_t7_256,regB
+	arg mem_t7_256,contw
+	call bn_mulmod_256	
+	arg mem_ay_256,regA
+	arg mem_t7_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256		/* n4=t3=yb*za3 S0 = Y0Z1^3*/
+
+
+//	arg mem_t0_256,regA
+//	arg mem_t2_256,regB
+	arg mem_t0_256,regb
+	arg mem_t2_256,rega
+	arg mem_t7_256,contw
+	call bn_submod_256		/* n5=t7=n1-n3=t0-t2   W=U1-U0*/
+	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	call bn_addmod_256		/* n7=t0=n1+n3=t0+t2    T=U1+U0 */
+//	arg mem_t1_256,regA
+//	arg mem_t3_256,regB
+	arg mem_t1_256,regb
+	arg mem_t3_256,rega
+	arg mem_t2_256,contw
+	call bn_submod_256		/* n6=t2=n2-n4=t1-t3  S1-S0 */
+	arg mem_t1_256,regA
+	arg mem_t3_256,regB
+	arg mem_t1_256,contw
+	call bn_addmod_256		/* n8=t1=n2+n4=t1+t3 M=S1+S0*/
+	arg mem_t1_256,regA
+	arg mem_t7_256,regB
+	arg mem_t1_256,contw
+	call bn_mulmod_256		/* t1=n8*n5     MW */
+	arg mem_cz_256,regA
+	arg mem_az_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256	      //Z0Z1
+	arg mem_t3_256,regA
+	arg mem_t7_256,regB
+	arg mem_cz_256,contw
+	call bn_mulmod_256		/* z=za*zb*n5   Z0Z1W */
+
+	arg mem_t7_256,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod_256		/* t7=n5^2 */
+	arg mem_t7_256,regA
+	arg mem_t0_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256		/* t3=n5^2*n7 */
+	arg mem_t7_256,regA
+	arg mem_t1_256,regB
+	arg mem_t1_256,contw
+	call bn_mulmod_256		/* t1=n8*n5^3 */
+	arg mem_t2_256,regA
+	arg mem_cx_256,contw
+	call bn_sqrmod_256		
+	arg mem_cx_256,regA
+	arg mem_t3_256,regB
+	arg mem_cx_256,contw
+	call bn_submod_256		/* x=n6^2-n5^2*n7 */
+	arg mem_cx_256,contr
+	arg mem_t7_256,contw
+	call memcpy32
+	arg mem_t7_256,regA
+	call bn_lshiftmod_256		/* t7=2*x */
+	arg mem_t3_256,regA
+	arg mem_t7_256,regB
+	arg mem_t3_256,contw
+	call bn_submod_256		/* t3=n9 */
+	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_mulmod_256		/* t2=n9*n6 */
+	arg mem_t2_256,regA
+	arg mem_t1_256,regB
+	arg mem_cy_256,contw
+	call bn_submod_256	
+	arg mem_cy_256,regA
+	arg mem_p_256,regB
+	arg mem_cy_256,contw
+	force 0,regC
+	fetch 1,mem_cy_256
+	isolate1 0,pdata
+	call bn_add_256,true
+	copy regC,alarm
+	arg mem_cy_256,regA
+	call bn_rshift_256
+	fetch 1,mem_cy5_256
+	isolate1 0,alarm
+	setflag true,7,pdata
+	store 1,mem_cy5_256
+	rtn	
+
+bn_invmod_256:
+	copy contw,timeup					 
+	arg mem_tmp0_256,contw			 
+	call clear_mem_256
+	force 0,pdata
+//	store 4,mem_tmp52
+	store 4,mem_t2_256
+	jam 1,mem_tmp0_256      //y1
+	arg mem_tmp1_256,contw	//y2			 
+	call clear_mem_512      
+	arg mem_p_256,contr
+	arg mem_tmp2_256,contw		//j		 
+	call memcpy32
+	copy regA,contr
+	arg mem_tmp3_256,contw		//i		 
+	call memcpy32
+	
+//	arg mem_tmp22,regA
+//	arg mem_tmp32,regB
+//	call p_bn_bigeq_256
+//	branch assert,positive
+bn_invmod_256_2:	
+	arg mem_tmp3_256,contr
+	call bn_eq_zero_256
+	branch bn_invmod_256_0,blank
+//call ice_break    	
+//fetch 1,0x4ffe
+//increase 1,pdata
+//store 1,0x4ffe
+	arg mem_tmp3_256,regA
+	arg mem_tmp0_256,regB
+	call bn_rshifteven_256
+	arg mem_tmp2_256,regA
+	arg mem_tmp1_256,regB
+	call bn_rshifteven_256
+	
+	arg mem_tmp3_256,regA
+	arg mem_tmp2_256,regB
+	call bn_bigeq_256
+	branch bn_invmod_256_1,positive
+	arg mem_tmp2_256,regA
+	arg mem_tmp3_256,regB
+	copy regA,contw
+	call bn_sub_256
+	arg mem_tmp0_256,regA
+	arg mem_tmp1_256,regB
+	copy regB,contw
+	call bn_add_256
+	ifetch 1,regA
+	iadd regC,regC
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB
+	branch bn_invmod_256_2
+bn_invmod_256_1:
+	arg mem_tmp3_256,regA
+	arg mem_tmp2_256,regB
+	copy regA,contw
+	call bn_sub_256
+	arg mem_tmp1_256,regA
+	arg mem_tmp0_256,regB
+	copy regB,contw
+	call bn_add_256
+	ifetch 1,regA
+	iadd regC,regC
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB
+	branch bn_invmod_256_2
+bn_invmod_256_0:
+//call ice_break
+	arg mem_tmp1_256,regA
+	copy timeup,contw
+	call  bn_p256mod
+//call ice_break
+	arg mem_p_256,regA
+	copy timeup,regB
+	copy timeup,contw
+	branch bn_submod_256
+
+
+bn_mulmod_256:
+	copy contw,timeup					/* save result ptr */
+	
+	force 0,regext_index
+	
+	arg mem_tmp1_256,contw
+	call clear_mem_512
+	arg mem_regext,contw
+	call clear_mem_512
+//	jam 0,mem_regext_index
+
+//	arg mem_tmp12,contw
+	copy regA,contr
+//	force 0,regext_index
+	jam 0,mem_regext
+	setarg 0
+	call bn_load_mem
+	copy regB,contr
+	call bn_load_256
+//	force 0,regB
+//	jam 0,mem_regb
+	force 0,queue
+	arg mem_tmp1_256,contw	
+bn_mulmod_256_1:	
+//	copy regb,pdata
+//	store 1,
+	arg mem_regext,temp
+	copy queue,regb
+	lshift2 regb,pdata
+//	lshift4 pdata,pdata
+	iadd temp,regb	
+	force 0,temp
+	force 0,regC
+bn_mulmod_256_0:
+//	copy contw,pdata
+//	store 2,mem_contw
+//call ice_break
+//	copy pdata,contw
+	ifetch 4,contw					/* d[i+j] */
+	iforce regA
+//	copy regB,regext_index
+//	deposit regext
+	ifetch 4,regb
+	copy regC,regext_index
+	imul32 regext,pdata
+	iadd regA,pdata					/* uv = a[i]*b[j] + d[i+j] */
+	iadd temp,pdata					/* uv += u */
+	istore 4,contw					/* ->d[i+j] */
+	rshift32 pdata,temp				/* temp = u = uv >> 32 */
+	increase 1,regC
+	compare 8,regC,0xff
+	nbranch bn_mulmod_256_0,true
+//call ice_break
+	deposit temp
+	istore 4,contw					/* d[i + 12] = u */
+	increase -32,contw
+//	fetch 1,mem_regb
+//	copy pdata,regb
+	increase 1,queue
+	compare 8,queue,0xff
+	nbranch bn_mulmod_256_1,true
+	arg mem_tmp1_256,regA
+	copy timeup,contw
+	branch bn_p256mod
+
+bn_p256mod:
+	bpatchx patch3e_2,mem_patch3e
+	copy contw,timeup				/* save result ptr */
+	copy regA,alarm				/* temp save regA */
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	call memset0_4	
+	istore 8,contw
+	add regA,44,contr
+	call memcpy8
+	call memcpy12
+	copy regb,rega
+	call  bn_lshiftmod_256 //2S1
+	arg mem_tmp2_256,regB
+	copy alarm,rega   
+	copy timeup,contw
+	call bn_addmod_256 //T+2S1
+//call ice_break	
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	call memset0_4	
+	istore 8,contw
+	add alarm,48,contr
+	call memcpy16
+	call memset0_4	
+	copy regb,rega
+	call  bn_lshiftmod_256 //2S2
+//call ice_break	
+//	arg 0,regB
+
+	arg mem_tmp2_256,regB
+	copy timeup,rega   
+	copy regA,contw	
+	call bn_addmod_256  //+2S2
+//call ice_break	
+//	arg 0,regB
+		
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,32,contr
+	call memcpy12
+	call memset0_4	
+	istore 8,contw
+	add alarm,56,contr
+	call memcpy8
+	copy timeup,regA
+	copy regA,contw
+	call bn_addmod_256 //+S3
+//call ice_break	
+//	arg 0,regB
+
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,36,contr
+	call memcpy12
+	add alarm,52,contr	
+	call memcpy12
+	add alarm,52,contr
+	call memcpy4
+	add alarm,32,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	call bn_addmod_256 //+S4	
+//call ice_break	
+//	arg 1,regB
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,44,contr
+	call memcpy12
+	call memset0_4	
+	istore 8,contw
+	add alarm,32,contr
+	call memcpy4
+	add alarm,40,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	call bn_submod_256 //-D1	
+//call ice_break	
+//	arg 2,regB
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,48,contr
+	call memcpy8
+	call memcpy8
+	force 0,pdata
+	istore 8,contw
+	add alarm,36,contr
+	call memcpy4
+	add alarm,44,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	call bn_submod_256 //-D2	
+//call ice_break	
+//	arg 3,regB
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,52,contr
+	call memcpy12
+	add alarm,32,contr
+	call memcpy12
+	call memset0_4	
+	add alarm,48,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	call bn_submod_256 //-D3
+//call ice_break	
+//	arg 4,regB
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,56,contr
+	call memcpy8
+	call memset0_4	
+	add alarm,36,contr
+	call memcpy12
+	call memset0_4	
+	add alarm,52,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	branch  bn_submod_256 //-D4	
+
+
+bn_load_mem:
+	force 32,loopcnt
+	arg mem_regext,contw
+	iadd contw,contw
+	branch memcpy
+
+bn_load_256:
+	force 8,loopcnt
+	branch bn_load_0
+
+bn_sqrmod_256:
+	copy regA,regB
+	branch bn_mulmod_256
+
+bn_add_256:
+	force 8,loopcnt
+ 	branch bn_add+1
+
+bn_addmod_256:
+	call bn_add_256
+	copy contw,regA
+	branch bn_lshiftmod_ismod_256
+
+bn_lshiftmod_256:
+	call bn_lshift_256
+bn_lshiftmod_ismod_256:	
+	isolate1 0,regC
+	branch bn_lshiftmod_p_256,true
+	arg mem_p_256,regB
+	copy regA,regC
+	increase -32,regA
+	call bn_bigeq_256
+	nrtn positive
+	copy regC,regA
+	branch sub_p2_256
+	
+bn_lshiftmod_p_256:
+	call sub_p2_256
+//	nrtn true
+	copy regA,regC
+	increase -32,regA
+	arg mem_p_256,regB
+	call bn_bigeq_256
+	nrtn positive
+	copy regC,regA
+	branch sub_p2_256
+		
+	
+sub_p2_256:
+	increase -32,regA
+	arg mem_p_256,regB
+	copy regA,contw
+	branch bn_sub_256
+	
+
+
+	
+bn_submod_256:
+	call bn_sub_256
+//	isolate1 0,regC
+	branch  bn_submod_256_np,true
+//	copy regA,regC
+//	increase -32,regA
+	add contw,-32,regA
+	arg mem_p_256,regB
+	call bn_bigeq_256
+	nrtn positive
+	arg mem_p_256,regB
+	add contw,-32,regA
+//	copy regC,regA
+	copy rega,contw
+	branch  bn_sub_256
+bn_submod_256_np:	
+	add contw,-32,regA
+	arg mem_p_256,regB
+	copy regA,contw
+	call bn_add_256
+//	isolate1 0,regC
+	rtn true
+	add contw,-32,regA
+	arg mem_p_256,regB
+	copy regA,contw
+	branch bn_add_256	
+
+
+ 
+bn_sub_256:
+	force 8,loopcnt
+	branch bn_sub+1
+
+bn_rshift_256:
+	force 8,loopcnt
+	increase 28,regA
+	branch bn_rshift
+
+bn_lshift_256:
+	force 8,loopcnt
+	force 0,regC
+	branch bn_lshift_0
+
+bn_bigeq_256:
+	force 8,loopcnt
+	increase 28,regA
+	increase 28,regB
+	branch bn_bigeq_0
+
+
+bn_eq_zero_256:
+	ifetch 8,contr
+	nrtn blank
+	branch bn_eq_zero
+
+
+
+	
+bn_rshifteven_256:
+	copy regA,alarm
+bn_rshifteven_256_1:
+	copy alarm,regA
+	ifetch 1,regA
+	isolate1 0,pdata
+	rtn true
+	call bn_rshift_256
+	ifetch 1,regB
+	isolate0 0,pdata
+	branch bn_rshifteven_256_0,true
+	arg mem_p_256,regA
+	copy regB,contw
+	call bn_add_256
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB						 
+	increase -32,regB
+bn_rshifteven_256_0:
+	add regB,32,regA
+	force 9,loopcnt
+	call bn_rshift
+	branch bn_rshifteven_256_1		
+
+
+
+ui_init:
+	call lpm_disable_exen_output
+	rtn wake
+	call ui_button_init
+	call ui_timer_init
+	branch ui_led_init_global
+
+ui_dispatch:
+	call ui_led_dispatch
+	
+	branch ui_timer_check
+	
+ui_button_init:
+	fetch 1,mem_ui_button_gpio
+	rtneq UI_BUTTON_GPIO_DISABLE
+	iforce temp
+	call gpio_config_output
+	fetcht 1,mem_ui_button_gpio
+	call gpio_out_inactive
+	nop 100
+	fetcht 1,mem_ui_button_gpio
+	call gpio_config_input
+	branch ui_button_polling
+
+
+	
+ui_button_polling:
+	bpatchx patch3e_3,mem_patch3e
+	fetch 1,mem_ui_button_gpio
+	rtneq UI_BUTTON_GPIO_DISABLE
+	copy pdata,temp
+	call gpio_get_bit
+	nbranch ui_button_up,true
+	//fall through
+ui_button_down:
+	call ui_button_check_long_press
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BTN_DOWN
+	store 2,mem_ui_state_map
+	fetch 1,mem_ui_button_last_state
+	rtneq UI_BUTTON_STATE_DOWN
+	jam UI_BUTTON_STATE_DOWN,mem_ui_button_last_state
+	//Down Edge
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_ui_button_timer //start long press timer
+	call lpm_button_get_wake_lock
+	jam BT_EVT_BUTTON_DOWN,mem_fifo_temp
+	branch ui_ipc_send_event
+ui_button_up:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BTN_DOWN
+	store 2,mem_ui_state_map
+	fetch 1,mem_ui_button_last_state
+	rtneq UI_BUTTON_STATE_UP
+	jam UI_BUTTON_STATE_UP,mem_ui_button_last_state
+	//Up Edge
+	jam 0,mem_ui_button_timer//stop long press timer
+	call lpm_button_clean_wake_lock
+	jam BT_EVT_BUTTON_UP,mem_fifo_temp
+	branch ui_ipc_send_event
+
+ui_button_check_long_press:
+	fetch 1,mem_ui_button_timer
+	rtn blank
+	increase -1,pdata
+	store 1,mem_ui_button_timer
+	nrtn blank
+	//Long Press
+	jam BT_EVT_BUTTON_LONG_PRESSED,mem_fifo_temp
+	branch ui_ipc_send_event
+
+lpm_button_get_wake_lock:
+	arg wake_lock_button,queue
+	branch lpm_get_wake_lock
+	
+lpm_button_clean_wake_lock:
+	arg wake_lock_button,queue
+	branch lpm_put_wake_lock
+
+
+
+/***********************ui led function****************************/
+/******************
+led function
+
+ui_led_init_global
+ui_led_on_global
+
+ui_led_off_global
+//input:rega :struct number
+ui_led_blink_start_global
+
+//input:rega :struct number
+//contr: the point that want to set led style address
+ui_led_set_style_global
+
+******************/
+//input:rega :struct number
+//output:regb :current strutct starting pointer
+calc_curr_struct_prt:
+	fetch 2,mem_ui_led_struct_ptr
+	mul32 rega,LED_OFFSET_LENGTH,regb
+	iadd regb,regb
+	rtn
+
+
+ui_led_init_global:
+	fetch 1,mem_ui_led_struct_num
+	rtn blank
+	copy pdata,loopcnt
+	fetch 2,mem_ui_led_struct_ptr
+	copy pdata,regb
+ui_led_init_loop:
+	add regb,LED_OFFSET_LED_GPIO,regc
+	ifetcht 1,regc
+	call gpio_config_output
+	call ui_led_off_static
+	increase LED_OFFSET_LENGTH,regb
+	loop ui_led_init_loop
+	rtn
+
+	
+//input:rega :struct number
+ui_led_on_global:
+	call calc_curr_struct_prt
+	setarg UI_LED_STATE_LIGHTING
+	istore 1,regb
+	call ui_led_stop_timer
+	branch ui_led_on_static
+
+	
+//input:rega :struct number
+ui_led_blink_stop_global:
+ui_led_off_global:
+	call calc_curr_struct_prt
+	setarg UI_LED_STATE_DARKING
+	istore 1,regb
+	call ui_led_stop_timer
+	branch ui_led_off_static
+
+
+//input:rega :struct number
+ui_led_blink_start_global:
+	call calc_curr_struct_prt
+	setarg UI_LED_STATE_BLINK_START
+	istore 1,regb
+	setarg LED_INFINITE_FLASH_NUM
+	istore 1,contw
+	branch ui_led_off_static
+
+
+//input:rega :struct number
+//REGC: the point that want to set led style address
+ui_led_set_style_global:
+	call calc_curr_struct_prt
+	arg LED_OFFSET_LENGTH,loopcnt
+	copy regc,contr
+	copy regb,contw
+	branch memcpy_fast
+
+
+
+ui_led_dispatch:
+	fetch 1,mem_ui_led_struct_num
+	rtn blank
+	arg 0,rega
+ui_led_blink_polling:
+	call ui_led_change_style_by_type
+	increase 1,rega
+	fetch 1,mem_ui_led_struct_num
+	isub rega,null
+	rtn zero
+	branch ui_led_blink_polling
+
+
+ui_led_off_static:
+	add regb,LED_OFFSET_LED_GPIO,regc
+	ifetcht 1,regc
+	branch gpio_out_inactive
+
+
+ui_led_on_static:
+	add regb,LED_OFFSET_LED_GPIO,regc
+	ifetcht 1,regc
+	branch gpio_out_active
+
+
+//input:rega :struct number
+ui_led_change_style_by_type:
+	add rega,ui_led_blink,queue
+	call timer_check
+	nrtn blank			//timer out
+	
+	call calc_curr_struct_prt
+
+	ifetch 1,regb			//led type
+
+	beq UI_LED_STATE_LIGHTING,ui_led_on_static
+	beq UI_LED_STATE_DARKING,ui_led_off_static
+	beq UI_LED_STATE_BLINK_STOP,ui_led_off_static
+	beq UI_LED_STATE_BLINK_DARKING,ui_led_blink_state_darking
+ui_led_blink_state_lighting:
+	call ui_led_on_static
+	add regb,LED_OFFSET_CB_LEDON,regc
+	call push_stack
+	ifetch 2,regc
+	call callback_func
+	call pop_stack
+	setarg UI_LED_STATE_BLINK_DARKING
+	istore 1,regb
+	add regb,LED_OFFSET_ON_TIME,regc
+	ifetch 2,regc
+	branch ui_led_blink_timer_start
+	
+
+ui_led_blink_state_darking:
+	call ui_led_off_static
+	add regb,LED_OFFSET_CB_LEDOFF,regc
+	call push_stack
+	ifetch 2,regc
+	call callback_func
+	call pop_stack
+	
+	add regb,LED_OFFSET_BLINK_COUNT,regc
+	ifetch 1,regc
+	beq LED_INFINITE_FLASH_NUM,ui_led_blink_infinite
+	increase -1,pdata
+	istore 1,regc
+	branch ui_led_blink_stop_global,blank		//End of flicker
+ui_led_blink_infinite:
+	setarg UI_LED_STATE_BLINK_LIGHTING
+	istore 1,regb
+	add regb,LED_OFFSET_OFF_TIME,regc
+	ifetch 2,regc
+ui_led_blink_timer_start:
+	add rega,ui_led_blink,queue
+	branch timer_init
+
+ui_led_stop_timer:
+	setarg 0
+	branch ui_led_blink_timer_start
+
+/***********************ui led function ending****************************/
+
+
+
+ui_timer_timeout:
+	setarg 0x1000
+	lshift16 pdata,pdata
+	iadd regb,regb
+	rtn
+	
+ui_timer_check:
+	bpatchx patch3e_4,mem_patch3e
+	arg 0,rega
+	fetcht 4,mem_ui_timer_last_btclk
+	copy clkn_bt,regb
+	copy regb,pdata
+	isub temp,null
+	ncall ui_timer_timeout,positive
+	//call ice_break
+ui_timer_check_loop:
+	copy regb,pdata
+	increase 160,temp    //320btclk = 100ms
+	increase 160,temp
+	isub temp,null
+	nbranch ui_timer_check_end,positive
+	increase 1,rega   //increase 1 every 100ms count
+	and rega,0x0f,pdata
+	nbranch ui_timer_check_loop,blank
+	arg 0,rega  //reset timer if it's longer than 1.5s between 2 checks
+	call ui_timer_check_send_evt
+ui_timer_init:
+	copy clkn_bt,pdata
+	store 4,mem_ui_timer_last_btclk
+	rtn
+ui_timer_check_end:
+	bpatchx patch3e_5,mem_patch3e
+	copy rega,pdata
+	rtn blank
+	increase -160,temp    //320btclk = 100ms
+	increase -160,temp
+	set0 28,temp
+	storet 4,mem_ui_timer_last_btclk
+ui_timer_check_send_evt:
+	branch app_evt_timer
+
+	
+
+//**********************************************************//
+//************UI Inter-Processor Communication*******//
+//**********************************************************//
+ui_ipc_get_lock:
+	jam 1,mem_ipc_lock_bt
+ui_ipc_get_lock_wait:
+	fetch 1,mem_ipc_lock_c51
+	nbranch ui_ipc_get_lock_wait,blank
+	rtn
+	
+ui_ipc_put_lock:
+	jam 0,mem_ipc_lock_bt
+	rtn
+	
+
+	
+ui_ipc_send_event:
+	bpatchx patch3e_6,mem_patch3e
+	call ui_ipc_get_lock
+	copy rega,pdata
+	store 4,mem_ipc_rega_temp
+	arg mem_ipc_fifo_bt2c51,rega
+	call fifo_in
+	fetch 4,mem_ipc_rega_temp
+	copy pdata,rega
+	branch ui_ipc_put_lock
+
+ui_ipc_send_cmd:
+	bpatchx patch3e_7,mem_patch3e
+	call ui_ipc_get_lock
+	copy rega,pdata
+	store 4,mem_ipc_rega_temp	
+	arg mem_ipc_fifo_c512bt,rega
+	call fifo_in
+	fetch 4,mem_ipc_rega_temp
+	copy pdata,rega	
+	branch ui_ipc_put_lock
+
+ui_ipc_clean_all_fifo:
+	setarg 0
+	store UTIL_FIFO_LEN,mem_ipc_fifo_c512bt
+	store UTIL_FIFO_LEN,mem_ipc_fifo_bt2c51
+	rtn
+	
+check_51cmd:
+	bpatchx patch3f_0,mem_patch3f
+	fetch 1,mem_hci_cmd
+	nrtn blank
+	arg mem_ipc_fifo_c512bt,rega
+	call fifo_is_empty
+	rtn blank
+	jam IPC_CONTINUE_PROCESS,mem_ipc_skip_continue_proc
+	call check_51cmd_once
+	fetch 1,mem_ipc_skip_continue_proc
+	branch check_51cmd,blank
+	rtn
+
+check_51cmd_once:
+	call ui_ipc_get_lock
+	arg mem_ipc_fifo_c512bt,rega
+	call fifo_out
+	copy pdata,temp
+	call ui_ipc_put_lock
+	bpatchx patch3f_1,mem_patch3f
+	copy temp,pdata
+	rtn blank
+ 	beq BT_CMD_START_DISCOVERY,check_51cmd_start_discovery
+  	beq BT_CMD_STOP_DISCOVERY,check_51cmd_stop_discovery
+  	beq BT_CMD_RECONNECT,check_51cmd_reconnect
+  	beq BT_CMD_ENTER_SNIFF_SUBRATING,check_51cmd_enter_sniff_subrating
+  	beq BT_CMD_EXIT_SNIFF_SUBRATING,check_51cmd_exit_sniff_subrating
+  	beq BT_CMD_SNIFF_TEST,check_51cmd_sniff_test
+	beq BT_CMD_START_INQUIRY,check_51cmd_inq
+	beq BT_CMD_STOP_INQUIRY,check_51cmd_stop_inq
+	beq BT_CMD_START_ADV,check_51cmd_adv
+	beq BT_CMD_STOP_ADV,check_51cmd_stop_adv
+	beq BT_CMD_START_DIRECT_ADV,check_51cmd_direct_adv
+	beq BT_CMD_STOP_DIRECT_ADV,check_51cmd_stop_direct_adv
+	beq BT_CMD_LED_OFF,check_51cmd_led_off
+	beq BT_CMD_LED_ON,check_51cmd_led_on
+	beq BT_CMD_LED_BLINK,check_51cmd_led_start_blink
+	beq BT_CMD_LE_START_CONN,check_51cmd_le_start_con
+	beq BT_CMD_LE_START_SCAN,check_51cmd_start_scan
+	beq BT_CMD_LE_STOP_SCAN,check_51cmd_stop_scan
+	beq BT_CMD_ENTER_HIBERNATE,check_51cmd_hibernate
+	beq BT_CMD_LE_SMP_SECURITY_REQUEST,check_51cmd_le_smp_sec_req
+	beq BT_CMD_BB_RECONN_CANCEL,check_51cmd_bb_reconn_cancel
+	//context related, process in context
+	store 1,mem_fifo_temp
+	bpatchx patch3f_2,mem_patch3f
+	call lmo_fifo_check
+	nbranch check_51cmd_restore,blank  //process this cmd next time while lmo fifo is full
+check_51cmd_once_continue:
+	fetch 1,mem_fifo_temp
+	bmark0 mark_context,check_51cmd_check_idle
+	beq BT_CMD_DISCONNECT,check_51cmd_disconnect
+  	beq BT_CMD_ENTER_SNIFF,cmd_in_sniff
+  	beq BT_CMD_EXIT_SNIFF,cmd_exit_sniff
+  	beq BT_CMD_SET_PIN_CODE,check_51cmd_pincode
+	beq BT_CMD_LE_DISCONNECT,check_51cmd_le_disconnect
+	beq BT_CMD_LE_UPDATE_CONN,check_51cmd_ble_update_connect_param
+	beq BT_CMD_ROLE_SWITCH,check_51cmd_role_switch
+	beq BT_CMD_STORE_RECONN_INFO_LE,eeprom_store_le_reconn_info
+	beq BT_CMD_STORE_RECONN_INFO_BT,eeprom_store_bd_reconn_info
+	beq BT_CMD_DHKEY_NOT_ACCEPT,check_51cmd_dhkey_not_accept
+	beq BT_CMD_STORE_RECONN_INFO,check_51cmd_store_reconn_info
+	rtn
+
+check_51cmd_check_idle:
+	store 1,mem_fifo_temp
+  	call context_check_idle
+	branch check_51cmd_restore,zero
+	call context_search_plap
+	nrtn zero
+check_51cmd_restore:
+	jam IPC_SKIP_CONTINUE_PROCESS,mem_ipc_skip_continue_proc
+	branch ui_ipc_send_cmd
+  
+ /******************** 51COMMAND*********************/
+
+//command opcode 0x01	
+check_51cmd_start_discovery:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_DISCOVERY
+	store 2,mem_ui_state_map
+	jam 3,mem_scan_mode
+	rtn
+
+
+//command opcode 0x02	
+check_51cmd_stop_discovery:
+	jam 0,mem_hid_handshake_timer_count
+	jam 0,mem_scan_mode
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BT_DISCOVERY
+	store 2,mem_ui_state_map
+	rtn	
+
+
+//command opcode 0x03	
+check_51cmd_reconnect:	
+	jam hci_cmd_create_conn,mem_hci_cmd
+	rtn	
+
+
+//command opcode 0x04
+check_51cmd_disconnect:
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam OTHER_END_TERMINATED,mem_disconn_reason_send
+	rtn
+
+	
+//command opcode 0x07
+check_51cmd_enter_sniff_subrating:
+	rtn
+
+
+//command opcode 0x08
+check_51cmd_exit_sniff_subrating:
+	rtn	
+
+
+//command opcode 0x09
+check_51cmd_sniff_test:
+	rtn	
+
+
+//command opcode 0x10
+check_51cmd_pincode:
+	jam pincode_state_pincode_ready,mem_pincode_state
+	branch cmd_pair
+
+
+//command opcode 0x11
+check_51cmd_inq:
+	rtn
+
+
+//command opcode 0x12
+check_51cmd_stop_inq:
+	rtn
+
+
+//command opcode 0x13
+check_51cmd_adv:
+	jam ON,mem_le_adv_enable
+	jam ADV_IND,mem_le_adv_type
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BLE_ADV,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+
+//command opcode 0x14
+check_51cmd_stop_adv:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BLE_ADV,pdata
+	store 2,mem_ui_state_map
+	jam OFF,mem_le_adv_enable
+	rtn
+
+
+//command opcode 0x15
+check_51cmd_direct_adv:
+	jam ON,mem_le_adv_enable
+	jam ADV_DIRECT_IND,mem_le_adv_type
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BLE_ADV,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+
+//command opcode 0x16
+check_51cmd_stop_direct_adv:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BLE_ADV,pdata
+	store 2,mem_ui_state_map
+	jam OFF,mem_le_adv_enable
+	rtn
+
+
+//command opcode 0x17
+check_51cmd_le_disconnect:
+	setarg 20 // 100ms
+	store 2,mem_le_superto
+	store 2,mem_le_init_superto
+	branch le_send_terminate_ind_user_terminated
+
+
+//command opcode 0x18
+check_51cmd_ble_update_connect_param:
+	branch le_l2cap_tx_update_req
+
+
+//command opcode 19
+check_51cmd_led_off:
+	arg 0,rega
+	branch ui_led_off_global
+
+
+//command opcode 20
+check_51cmd_led_on:
+	arg 0,rega
+	branch ui_led_on_global
+
+
+//command opcode 21
+check_51cmd_led_start_blink:
+	arg 0,rega
+	branch ui_led_blink_start_global
+
+
+//command opcode 0x22
+check_51cmd_le_start_con:
+	jam ON,mem_le_scan_enable
+	jam hci_cmd_le_create_conn,mem_hci_cmd
+//	fetch 6,mem_app_peer_addr
+//	store 6,mem_le_conn_peer_addr
+	rtn
+
+
+//command opcode 0x23
+check_51cmd_start_scan:
+	jam ON,mem_le_scan_enable
+	rtn
+
+
+//command opcode 0x24
+check_51cmd_stop_scan:
+	jam OFF,mem_le_scan_enable
+	jam 0,mem_hci_cmd
+	rtn
+
+
+//command opcode 0x25
+check_51cmd_hibernate:
+	fetch 2,mem_cb_before_hibernate
+	call callback_func
+	fetch 1,mem_ui_button_gpio
+	beq UI_BUTTON_GPIO_DISABLE,check_51cmd_hibernate_btn_disabled
+	copy pdata,temp
+	call gpio_config_input
+check_51cmd_hibernate_btn_disabled:
+	call ui_ipc_clean_all_fifo
+	branch lpm_hibernate	
+
+
+//command opcode 0x27
+check_51cmd_le_smp_sec_req:
+	branch le_send_smp_security_request
+
+
+//command opcode 0x29
+check_51cmd_role_switch:
+  	jam LMP_SLOT_OFFSET,mem_lmo_opcode2
+	set1 mark_switch_initiated,mark
+	nrtn master
+	jam SWITCH_FLAG_INIT,mem_switch_flag
+	jam LMP_SWITCH_REQ ,mem_lmo_opcode2
+	fetch 1,mem_connection_options
+	set0 CONNECTION_SWITCH,pdata
+	store 1,mem_connection_options
+	rtn
+
+
+//command opcode 0x30
+check_51cmd_bb_reconn_cancel:
+	force page_length_timer,queue
+	branch timer_stop
+
+
+//command opcode 0x33
+check_51cmd_dhkey_not_accept:
+	call tid_set_reply
+	jam LMP_DHKey_Check,mem_lmi_opcode2
+	branch parse_lmp_dhkey_check_reject	
+
+
+ui_check_paring_button:
+	fetch 1,mem_ui_state_map
+	rtnbit0 UI_STATE_BTN_DOWN
+	rtnbit0 UI_STATE_BT_RECONNECT
+	branch check_51cmd_bb_reconn_cancel
+
+
+
+///////////queue function////////////
+queue_init:
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_CURR_NUM,contw
+	setarg 0
+	istore 3,contw
+	rtn
+	
+//input:rega:the address of the data to which you want to input queue
+//output:if user is disable,mean queue no have space
+queue_push:
+	call disable_user
+	call queue_full
+	rtn blank
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_CURR_NUM,regb
+	ifetcht 1,regb
+	increase 1,temp
+	istoret 1,regb	//number add 
+	
+	ifetcht 1,pdata	//temp:each length
+	copy temp,loopcnt
+	add pdata,QUEUE_OFFSET_WRITE_PTR,regb
+	ifetch 1,regb
+	imul32 temp,pdata	//offset
+	iadd contr,contw
+	copy rega,contr
+calc_queue_next_ptr:
+	call memcpy
+	call queue_get_size
+	pincrease -1
+	ifetcht 1,regb
+	increase 1,temp
+	iand temp,temp
+	istoret 1,regb
+	branch enable_user
+
+
+//input:rega:the address of the data to which you want to output queue
+//output:if user is disable,mean queue no have data
+queue_pop:
+	call disable_user
+	call queue_empty
+	rtn blank
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_CURR_NUM,regb
+	ifetcht 1,regb
+	increase -1,temp
+	istoret 1,regb
+	ifetcht 1,pdata		//each size
+	copy temp,loopcnt
+	add pdata,QUEUE_OFFSET_READ_PTR,regb
+	ifetch 1,regb
+	imul32 temp,pdata	//offset
+	iadd contr,contr
+	increase 1,contr
+	copy rega,contw
+	branch calc_queue_next_ptr
+
+
+//output:if blank is 1,mean queue is empty
+queue_empty:
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_CURR_NUM,contr
+	ifetch 1,contr
+	rtn
+
+//output:if blank is 1,mean queue is full
+queue_full:
+	call queue_get_size
+	ifetcht 1,contr
+	isub temp,pdata
+	rtn
+
+//output:pdata is queue size
+queue_get_size:
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_LENGTH,contr
+	ifetch 1,contr
+	rtn
+
+///////////queue function end////////////
+
+
+
+
+
+right_shift_n: //rshiftN pdata,pdata
+	sub loopcnt,0,null
+	rtn zero
+right_shift_n_loop: 
+	rshift pdata,pdata
+	loop right_shift_n_loop
+	rtn
+
+/* lshift. 0:1 byte; 1:2byte; 2:4byte; 3:8byte; 4:16byte*/
+left_shift_n:
+	force 1,pdata
+	sub loopcnt,0,null
+	rtn zero
+left_shift_n_loop:
+	lshift pdata,pdata
+	loop left_shift_n_loop
+	rtn
+push_stack:
+	deposit contw
+	store 2, mem_contw
+	storet 8,mem_temp
+	deposit timeup
+	store 4,mem_timeup
+	call push_stack_rega_b_c
+	deposit contr
+	store 2, mem_contr
+	rtn
+
+push_stack_rega_b_c:
+	deposit rega
+	store 4, mem_rega
+	deposit regb
+	store 4, mem_regb
+	deposit regc
+	store 3, mem_regc
+	rtn
+
+pop_stack:
+	fetcht 8,mem_temp
+	fetch 4,mem_timeup
+	iforce timeup
+	call pop_stack_rega_b_c
+	fetch 2, mem_contw
+	iforce contw
+	fetch 2, mem_contr
+	iforce contr
+	rtn
+
+pop_stack_rega_b_c:
+	fetch 4, mem_rega
+	iforce rega
+	fetch 4, mem_regb
+	iforce regb
+	fetch 3,mem_regc
+	iforce regc
+	rtn
+
+get_contw:
+	fetch 2,mem_contw
+	copy pdata,contw
+	rtn
+get_contr:
+	fetch 2,mem_contr
+	copy pdata,contr
+	rtn
+store_contw:
+	copy contw,pdata
+	store 2,mem_contw
+	rtn
+store_contr:
+	copy contr,pdata
+	store 2,mem_contr
+	rtn	
+	
+
+//
+save_cont_pointers:
+	copy contw,pdata
+	store 2,mem_hold_contw
+	copy contr,pdata
+	store 2,mem_hold_contr
+	rtn
+load_cont_pointers:
+	fetch 2,mem_hold_contw
+	copy pdata,contw
+	fetch 2,mem_hold_contr
+	copy pdata,contr
+	rtn
+
+memcpy96:
+	call memcpy32
+memcpy64:
+	call memcpy32
+	branch memcpy32
+memcpy12:
+	call memcpy8
+memcpy4:
+	ifetch 4,contr
+	istore 4,contw
+	rtn	
+memcpy8:
+	ifetch 8,contr
+	istore 8,contw
+	rtn	
+
+memcpy48:
+	call memcpy16
+memcpy32:
+	call memcpy8
+memcpy24:
+	call memcpy8
+memcpy16:
+	call memcpy8
+	branch memcpy8
+
+
+
+delay_10ms:
+	arg 10,loopcnt
+delay_ms_wait:
+	nop 12000
+	loop delay_ms_wait
+	rtn
+
+bn_zero:
+	force 3,loopcnt
+memset0:
+	force 0,pdata
+memset8:
+	istore   8,contw
+	loop   memset8
+	rtn
+
+memset0_8:
+	force 0,pdata
+	istore 8,contw
+	rtn
+memset0_4:
+	force 0,pdata
+	istore 4,contw
+	rtn	
+	
+clear_mem_256:
+	force 4,loopcnt
+	branch memset0 
+clear_mem_512:
+	force 8,loopcnt
+	branch memset0 
+
+clear_mem:
+	deposit loopcnt
+	rtn blank
+	setarg 0
+clear_mem_loop:
+	istore 1,contw
+	loop clear_mem_loop
+	rtn
+	
+
+clear_temp_block:
+	arg 32,loopcnt
+	arg mem_temp_block0,contw
+	branch clear_mem
+	
+xor_loop:
+	ifetch   4,regc
+	ifetcht 4,rega
+	ixor     temp,pdata
+	istore   4,contw	
+	increase 4,rega
+	increase 4,regc
+	loop  xor_loop
+	rtn
+	
+// 11 22 -> 22 11; 11 22 33 -> 33 22 11 
+// rega:data addr ;loopnct:length
+inverse_data:
+	bpatchx patch3f_3,mem_patch3f
+	copy loopcnt,pdata
+	sub pdata,1,null
+	rtn positive
+	iadd rega,regb	
+	increase -1,regb
+	rshift loopcnt,loopcnt
+inverse_loop:
+	ifetcht 1,rega
+	ifetch 1,regb
+	istore 1,rega
+	istoret 1,regb
+	increase -1,regb
+	increase 1,rega
+	loop inverse_loop
+	rtn
+
+
+memcpy_fast:
+	deposit loopcnt
+	rtn blank
+memcpy_fast_loop:
+	increase -8,loopcnt
+	call memcpy8,positive
+	rtn zero
+	branch memcpy_fast_loop,positive
+	increase 8,loopcnt
+memcpy_fast_loop_four:
+	increase -4,loopcnt
+	call memcpy4,positive
+	rtn zero
+	branch memcpy_fast_loop_four,positive
+	increase 4,loopcnt
+	branch memcpy
+ 
+memcpy:
+	deposit loopcnt
+	rtn blank
+memcpy_loop:
+	ifetch 1,contr
+	istore 1,contw
+	loop memcpy_loop
+	rtn
+
+timer_stop:
+	setarg 0
+timer_init:
+	rshift clkn_bt,temp
+	storet 4,mem_last_clkn
+	arg mem_timers,contw
+	iforce temp
+	lshift queue,pdata
+	iadd contw,contw
+	istoret 2,contw
+	bpatchx patch3f_4,mem_patch3f
+	rtn
+
+timer_check_timeout:
+	arg 0x800,timeup
+	lshift16 timeup,timeup
+	iadd timeup,pdata
+	rtn
+
+
+timer_reinit:
+	arg 0,queue
+timer_check:
+	bpatchx patch3f_5,mem_patch3f
+	fetcht 4,mem_last_clkn
+	rshift clkn_bt,pdata
+	store 4,mem_last_clkn	
+	isub temp,null
+	ncall timer_check_timeout,positive	
+	isub temp,timeup
+	copy timeup,temp
+	arg mem_timers,contr
+	copy contr,contw
+	arg 16,loopcnt
+timer_loop:
+	ifetch 2,contr
+	isub temp,pdata
+	branch timer_counting,positive
+	force 0,pdata
+timer_counting:
+	istore 2,contw
+	loop timer_loop	
+	arg mem_timers,contr
+	lshift queue,pdata
+	iadd contr,contr
+	ifetch 2,contr
+	rtn
+
+
+
+	/* pdata 28+16 bit add temp 26+16 bit, result in temp */
+clk_add:
+	iadd temp,temp
+	copy temp, loopcnt
+	setarg 3750
+	isub loopcnt,pdata
+	rtn positive
+	sub pdata,0,pdata
+	rshift16 temp,temp
+	increase 1,temp
+	lshift16 temp,temp
+	ior temp,temp
+	rtn
+
+clk_diff_rt:
+	call clk_diff
+	branch clk2rt
+
+/* pdata -temp -> pdata, all are 28+16 bits, set user if negative */
+clk_diff:
+	disable user
+	isub temp,pdata
+	branch clk_diff_pos,positive
+	enable user
+	sub pdata,0,pdata
+clk_diff_pos:
+	rtnbit0 15
+	arg -61786,temp
+	iadd temp,pdata
+	set0 64,pdata
+	rtn
+
+clk2rt:
+	iforce contr
+	rshift16 pdata,pdata
+	arg 3750,temp
+	imul32 temp,pdata
+	iadd contr,pdata
+	rtn
+
+	/* pdata = clks in, temp = lpo out */
+clk2lpo:
+	lshift8 pdata,pdata
+	lshift4 pdata,pdata
+	fetcht 3,mem_clks_per_lpo
+	idiv temp
+	call wait_div_end
+	quotient temp
+	rtn
+
+	/* rt clk -> bt+rt clk */
+clk2bt:
+	arg 3750,temp
+	idiv temp
+	call wait_div_end
+	quotient pdata
+	lshift16 pdata,pdata
+	remainder temp
+	ior temp,temp
+	rtn
+
+
+
+//input:contru 
+//output:temp
+//used register: temp regc
+string2dec_from_uart:
+	arg 0,temp
+string2dec_from_uart_done:
+         copy temp,regc
+	ifetch 1,contru
+	call uchar2dialog	
+	copy regc,temp
+	call swap
+	arg 10,regb
+	imul32 regb,pdata
+	iadd temp,pdata
+	copy pdata,temp
+	loop string2dec_from_uart_done
+	rtn
+	
+
+
+uchar2dialog:
+	arg 0x3a,temp
+	isub temp,null
+	nbranch uchar2dialog_number,positive
+	arg 0x61,temp
+	isub temp,null
+	branch uchar2dialog_a2f,positive
+	arg 0x37,temp
+	isub temp,pdata
+	rtn
+uchar2dialog_number:
+	arg 0x30,temp
+	isub temp,pdata
+	rtn
+uchar2dialog_a2f:
+	arg 0x57,temp
+	isub temp,pdata
+	rtn
+
+pn9:
+	copy temp,alarm
+	setarg 0x1ff
+	force 0,regb
+pn9_loop:	
+	rshift3 pdata,rega
+	rshift rega,rega
+	ixor rega,rega
+	isolate1 0,rega
+	setflag true,9,pdata
+	rshift temp,temp
+	isolate1 0,pdata
+	setflag true,7,temp
+	rshift pdata,pdata
+	increase 1,regb
+	compare 0,regb,0x7
+	nbranch pn9_loop,true
+	istoret 1,contw
+	loop pn9_loop
+	copy alarm,temp
+	rtn
+
+
+wait_div_end:	
+	rtn modone
+	branch wait_div_end
+
+
+
+//input:
+//	count:loopcnt str1:rega str2:regb
+//output:
+//	same:set falg true ,diff set falg false
+// using:
+//	reg:temp null flag:zero
+compare_loop:
+string_compare:
+	ifetch 1,rega
+	ifetcht 1,regb
+	isub temp,null
+	nrtn zero
+	increase 1,rega
+	increase 1,regb
+	loop string_compare
+	force 0,null
+	rtn
+
+	/* pdata = temp if pdata > temp */
+ceiling:
+	isub temp,null
+	nrtn positive
+	deposit temp
+	rtn
+	
+swap:
+	iadd temp,pdata
+	isub temp,temp
+	isub temp,pdata
+	rtn
+
+clean_mem:
+	arg 0x200,loopcnt
+	arg 0x4000,contw
+	branch memset0				// clear xram at boot
+
+	//cb function ptr in pdata
+callback_func:
+	rtn blank
+	copy pdata,pc	//rtn through cb functon.
+	//branch assert
+
+wait_uarttx:
+	hfetch 2,core_uart_txitems
+	nbranch wait_uarttx,blank
+	rtn
+
+ice_break:
+	jam 0x1,core_ice_ctrl
+	rtn
+
+ice_setbp:
+	hstore 2,core_ice_break0
+	hfetch 1,core_ice_ctrl
+	set1 4,pdata
+	hstore 1,core_ice_ctrl
+	rtn
+ice_setbp2:
+	hstore 2,core_ice_break1
+	hfetch 1,core_ice_ctrl
+	set1 6,pdata
+	hstore 1,core_ice_ctrl
+	rtn
+	
+ice_set_write_bp:
+	hstore 2,core_ice_break0
+	jam 0x30,core_ice_ctrl
+	rtn
+	
+
+
+test_enable_white:
+	hfetch 1,core_config
+	set0 whiteoff_bit,pdata
+	hstore 1,core_config			/* whitening on */
+	rtn
+
+check_uart_tx_buff:
+	hfetch 2,core_uart_txitems
+	arg UART_AIR_CONTROL_THRESHOLD,temp
+pdata_sub_temp:
+	isub temp,null
+	rtn
+
+	//fuction fifo_in
+	//rega pointer to fifo memory , *(rega+len) is the end of fifo
+	//mem_fifo_temp data into fifo
+	//assert if fifo was full
+fifo_in:
+	bpatchx patch3f_6,mem_patch3f
+	ifetcht UTIL_FIFO_LEN,rega
+	and temp,0xff,pdata
+	nbranch fifo_in_push,blank
+	rshift8 temp,pdata
+	istore UTIL_FIFO_LEN,rega
+fifo_in_push:
+	increase UTIL_FIFO_LEN+UTIL_FIFO_OFFSET,rega
+	ifetch 1,rega
+	nbranch assert,blank //fifo full
+	fetch 1,mem_fifo_temp
+	istore 1,rega
+	rtn
+	
+	//fuction fifo_out
+	//rega pointer to fifo memory
+	//pdata  data from fifo, blank mains fifo empty
+fifo_out:
+	bpatchx patch3f_7,mem_patch3f
+	arg UTIL_FIFO_LEN,loopcnt
+	ifetch UTIL_FIFO_LEN,rega
+	rtn blank
+fifo_out_loop:
+	ifetch 1,rega
+	nbranch fifo_out_end,blank
+	increase 1,rega
+	loop fifo_out_loop
+	branch assert
+fifo_out_end:
+	arg 0,temp
+	istoret 1,rega
+	rtn
+
+	//fuction fifo_is_empty
+	//rega pointer to fifo memory
+	//blank--- fifo is empty
+fifo_is_empty:
+	ifetch UTIL_FIFO_LEN,rega
+	rtn
+
+	//fuction fifo_is_full
+	//rega pointer to fifo memory
+	//blank--- fifo is NOT full
+fifo_is_full:
+	ifetch 1,rega
+	rtn
+	//rega pointer to fifo memory
+	//blank--- fifo is NOT near full
+fifo_is_near_full:
+	ifetch 2,rega
+	rtn
+
+	//rega pointer to fifo memory
+	//count output via pdata
+fifo_content_count:
+	arg 0,temp
+fifo_content_count_loop:
+	fetch 1,contr
+	loop fifo_content_count_loop,blank
+	increase 1,temp
+	loop fifo_content_count_loop
+	copy temp,pdata
+	rtn
+	
+not_greater_than:
+	isub temp,null
+	nrtn positive
+	copy temp,pdata
+	rtn
+
+
+disable_positive:
+	force -1,null
+	rtn
+enable_positive:
+disable_zero:
+	force 1,null
+	rtn
+enable_zero:
+	force 0,null
+	rtn
+
+enable_user:
+	enable user
+	rtn
+	
+disable_user:
+	disable user
+	rtn
+	
+enable_user2:
+	enable user2
+	rtn
+	
+disable_user2:
+	disable user2
+	rtn
+
+disable_blank:
+	setarg 1
+	rtn
+
+enable_blank:
+	setarg 0
+	rtn
+
+
+reverse_byte:
+	copy loopcnt,pdata
+	rtn blank
+	copy contr,pdata
+	iadd loopcnt,pdata
+	increase -1,pdata
+	copy pdata,contr	
+reverse_loop:
+	ifetch 1,contr
+	increase -2,contr
+	istore 1,contw
+	loop reverse_loop
+	rtn
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/bt_program23.rom
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/bt_program23.rom	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/bt_program23.rom	(working copy)
@@ -0,0 +1,32766 @@
+11000010100001000000000000010010
+11000000000000000000000000100111
+11000000000000001000000000101010
+11000000000000010000000000110010
+11000000010000101000010001110011
+11000000010001001000010001000100
+11000000010100001000000000111011
+11000000010110001000000001000000
+11000000010110010000000001001010
+11000000011000100000001011001110
+11000000011001001000001100101101
+11000000011001010000001100110001
+11000000011100011000001111000010
+11000000011100110000001111001110
+11000000011101010000001111010111
+11000000011101011000001111011100
+11000000011101100000001111101101
+00100000001000000010101010001110
+11000000000111111000000000010101
+11000000010001100000001111110001
+00100000001000000010101010001110
+01110000100010010000111100110110
+01110000100010010000101101011111
+01111000001110110111110000000000
+01110000100010010001010000000111
+01101000000000001100000111100000
+00100000011110100000000000000000
+01110000100010010000101010111000
+00100000011000000000000000000000
+00011111111000100010001000000000
+01101000000010001100110001110000
+01011000000000000100110001110111
+10011000010000001000101000000000
+00011010001000100111111000000000
+11100000101000001000000000000000
+00011000010000001000010000000001
+00011000010000010000010000000111
+01100000000010001100110001110000
+00100000011000000000000000000000
+01101000000100001000000100111011
+01100000000000001100101100100110
+00100000001000000010000000000010
+11011000101000000000100110101110
+11011111001000000000000000001100
+00100000010000000111111011010100
+00100000010000000110101000000011
+00100000010000000101110011110110
+00100100010101011010110001100101
+00100000010000000111110011001101
+00100000001000000010000000001100
+00100000010101011011001011100011
+00100000010000000111010101101010
+00100000010101011010101101000001
+00100000010000000111011011011100
+01101000000000001100011001011010
+00100000001110100010000000010010
+01101000000000001100010110110001
+00100000001110100000000000110101
+00100000001000000010000000010010
+01011000000000000000101000000110
+01100000000000011100010100010000
+01011000000000000001110110000111
+01100000000000010100010100010011
+00100000001000000010101010100010
+11000110000100110000000000000000
+01101000000000001100011110011100
+00100000001110100111111111101111
+01101000000000001100011111000100
+11000000000000001111111111101111
+01101000000000010100001001001000
+00100100001110100111111111101111
+01101000000000001100100000000110
+00100100001110100111111111101111
+00100000001000000111111111110001
+11000110100100110000000000000000
+01101000000000001100110011110101
+11000000000000001000000001011011
+00100000010000000000000011100100
+00100100001101000000000001110000
+00100000010000000000000011001011
+00100000010000000000000100000110
+01101000000000001100101111000101
+11000001111111111000000000000000
+00100000010000000000010000010111
+00100000010000000000000001110110
+00100100011101000000000000000000
+00100000010000000000001010111111
+01011000000000001110110001010100
+00100000010000000111111101001001
+01100000000010100100000101011011
+00100000001000000010101100101010
+00100000010000000000001010001011
+00100100011101000000000000000000
+00100000010000000000000001100111
+00100000001000000000000001001101
+01110000010011001111010100000000
+01110000010011001111011000000000
+01110000010010111111000000000000
+01101000000000001100101111011011
+01100000000000001100101111011010
+00100000011000000000000000000000
+01101000000000001100101111011100
+00100000001000000000000001100011
+01101000000000001100101111110000
+00011111111000001111111000000001
+01100000000000001100101111110000
+11000000000000100000000001100101
+11000000000000101000000001100001
+00100000011000000000000000000000
+01110000010011001111010100000001
+01110000010011001111011000000000
+00100000011000000000000000000000
+01101000000000001100101111100001
+00100000010110100000000001111111
+00100000010000000000000001110110
+00100100011101000000000000000000
+01101000000000011100101111100100
+00100000001000000000000001011000
+01111000001101000111110000000000
+00100000010000000010101011111010
+01101000000000011100000101101111
+00100000001110100111111111101001
+01101000000000001100000010010001
+00100000001110100111111111101001
+01101000000000001100110011110101
+11000000000000001111111111101001
+00100000001000000000001011000010
+01110000010010111110000100000001
+01110000010011001110101000000000
+00100000010000000000000010010011
+01100000000000001100101101010001
+01011000000000000000000000000000
+01100000000000111100101101010010
+01101000000000100100101111101100
+01100000000000100100101101011001
+01110000010010111011010100001100
+01101000000000001100101110110110
+01111001001000000111111000000011
+01100000000000001100101110110110
+00100000010000000000000011100111
+00100000001000000000000001010000
+00100000010000000110100010101000
+01101000000000100100000010100000
+01100000000000100100101111101100
+00100000011000000000000000000000
+01110000010011001110101100000001
+01110000010011001110110100000000
+01101000000000001100101110110110
+00011111111000010111111000000111
+01100000000000001100101110110110
+00100000011000000000000000000000
+01101000000000001100101110110110
+01111001001000000111111000000100
+01100000000000001100101110110110
+01100000000000001100101101110001
+00100000011000000000000000000000
+01101000000000001100101110110110
+01111001001111111111111000000100
+01100000000000001100101110110110
+00100000011000000000000000000000
+00100000010000000000010000001101
+01101000000000001100110011101100
+11000000000000001000000010100101
+11000000000000010000000010101001
+00100000011000000000000000000000
+01110000010011001110110100000010
+01110000010011001110100100000000
+01110000010011001110101100000000
+00100000001000000000000010010011
+01110000010011001110101000000000
+00100000001000000000000010100110
+01101000000000010100101110111011
+00011111111000001111111000000001
+01100000000000010100101110111011
+11000010100000110000000101001001
+01101000000000001100110011101010
+11000000000000001000000010110100
+01110000010011001110101000000001
+01101000000000001100110011101010
+11000000100000001000000010010011
+01101000000000001100110011101000
+00011111111000001111111000000001
+01100000000000001100110011101000
+11000000000000100000000010111011
+00100000010000000000001000000011
+01110000010010111111101000000010
+00100000001000000000000100000110
+00100000010000000000010000001101
+01110000010011001110100000000000
+00100000001000000000000010010011
+01110000010011001110110100000010
+01110000010011001110101100000001
+01110000010011001110101000000000
+00100000001000000000000010010011
+01101000000000001100110011101100
+11000000000000011000000010111111
+01101000000000001100101110110110
+00101111111011000000000000000100
+00100000001000001000000010010001
+01101000000000001100110011101100
+11000000000000001000000010111110
+11000000000000010000000010111111
+00100000011000000000000000000000
+01101000000000001100101111000101
+11000001111111111000000000000000
+00100000010000000000000011010000
+00100100010101100000000011011000
+00100000011000000000000000000000
+01111000010101100111110000000000
+01101000000000001100110011101011
+11000001100000001000000000000000
+01101000000000001100110011101101
+11000001100000000000000000000000
+01110000010011001110110000000001
+01110000010010111111101000000100
+00100000001000000111111111101011
+01101000000000001100110011101101
+00100000001110100000000011011111
+00011111111000001111111111111111
+01100000000000001100110011101101
+01110000010011001110110000000010
+01110000010010111111101000000100
+00100000001000000000001000000011
+01110000010011001110110000000011
+01101000000000001100110011101010
+00100100001110100000000010110010
+01110000010010111111101000000010
+00100000001000000000001000000011
+01101000000000001100101111000101
+11000000111111111000000101011101
+00100000010000000000000011101010
+00100000010000000000000111110001
+01110000010010111011101000000001
+00100000011000000000000000000000
+01101000000000010100110011100110
+00100000010000000111111110011100
+00100000001101000000000011110000
+01101000000000111100101101010010
+00100000011110100000000000000000
+00100000001000000111111111100111
+01110000010010111110000100000000
+00011010001000001111111000000001
+01100000000000001100101110110101
+00100000010000000000000010010011
+01100000000000001100101101010001
+11101000101010001000000000000000
+11101010010000001000000000000000
+10011000010000011111111000000000
+11100000101000001000000000000000
+00011010010000001010010000000001
+11101010010000100000000000000000
+11100000101000100000000000000000
+00011010010000001010010000000100
+11011000101000000100101101010111
+11011111001000000000000000000010
+11101010010000001000000000000000
+11101000101010001000000000000000
+10011000010000001111111000000000
+11100000101000001000000000000000
+00011010010000001010010000000001
+11000010000000000000000011111111
+00100000011000000000000000000000
+01110000010010111011111000000000
+11011001011000000000110100000000
+00110100011100110000001000000000
+00100000010000000000000100100010
+01101000000000001100101111110001
+11000001000000001000000000000000
+00100100001011000000000100110001
+00100100001101111000000100110001
+00100000010000000000000100011101
+00100000010000000000000101001101
+00100000010000000000010000001001
+01101000000000001100101110110100
+00011111111000001111111000000001
+01100000000000001100101110110100
+01101000000000001100101111000101
+11000000111111111000000100100000
+00100000010000000000000011000010
+01011000000000000000000000000000
+01100000000000010100101110111011
+01100000000000001100101110111101
+01100000000000001100110011101001
+01110000010010111011101000000000
+00100000011000000000000000000000
+11011111001000000000000000000100
+11011000101000000100101101010001
+00100000001000000111111011000110
+00100000010000000000010000000110
+00100000001000000000000101110111
+01111000010101111111110000000000
+00100000010000000000001001101010
+01101000000000001100101111110001
+11000000000000001000000100101111
+00011000000000000010101000000000
+01101000000000100100101111011101
+10011000000000000001001000000000
+01101000000010001000000000010111
+00100000010000000010100100011111
+00100000010000000010100100100100
+00100000010000000000001000100110
+00100000010101111000001001100010
+00100000011000000000000000000000
+00100000010000000000001001100010
+00100000001000000000000100010001
+01101000000000001100101110111101
+00011111111000001111111000000001
+01100000000000001100101110111101
+01101000000000001100101111000101
+11000000111111111000000101000101
+01101000000010001100101110111110
+00011000010000001000010000000001
+01100000000010001100101110111110
+01101000000000001100101111111010
+10011000010001100111111000000000
+00100100001110100000000100000111
+01101000000000001100110011101100
+11000000000000011000000010101011
+01101000000000001100110011101001
+00011111111000001111111000000001
+01100000000000001100110011101001
+11000000000000010000000010100000
+00100000010000000000000010010111
+01110000010010111111101000000001
+00100000001000000000000100000110
+01101000000000001100101110111101
+11000001111111111000000000000000
+01110000010010111011110100000000
+00100000001000000000000101001011
+01011000000000000000000000000000
+01100000000000010100101110111011
+01110000000010101001100100111010
+00100000001000000111110110000110
+00100000010000000000000111010110
+01101000000000001100101110110011
+00100000011110100000000000000000
+10011000000000000111001000000000
+11011000110000000100101100110001
+11011000101000000100101110010011
+00100000001000000111111100000001
+01111001001000000000000000100110
+00100000010000000000000101011000
+01110000010010111100010100000001
+00100000011000000000000000000000
+01110000010000011101111000100000
+01110000010010111011010000000000
+01110000010010111011111101001110
+01101000000000100100101111000001
+00100000001000000000000111100011
+01101000000000001100101110111010
+11000000000000001111111111100111
+01101000000000001100101111000101
+11000000000000001000000101100100
+11000000000000010000000101100111
+11000000000000011000000101101010
+00100000001000000010101010001100
+01110000010010111100010100010001
+01110000000100011001111010101010
+00100000001000000000000101101100
+01110000010010111100010100010010
+01110000000100011001111001010101
+00100000001000000000000101101100
+01110000010010111100010100010011
+01110000000100011001111000100010
+01101000000000001100101110110110
+00011111111000010111111000000111
+01100000000000001001000110011111
+01101000000000100100101111101100
+01100000000000100001000110100000
+01110000000100011010010000000000
+11011010001000000001000110011110
+11011000010000000000000000000111
+00100000010000000000000111010001
+00100000010000000000000011100111
+00100000001000000111111111100111
+01101000000000001100101111000101
+11000001011111111000000000000000
+11000000000010001000000101111101
+11000000000010010000000101111111
+11000000000010011000000110000001
+00100000011000000000000000000000
+01110000010010111100010100000010
+00100000001000000000000100010111
+01110000010010111100010100000011
+00100000001000000000000100010111
+01110000010010111100010111111111
+01110000000010101001100100111001
+00100000010000000111110110000110
+01101000000000100100101110010101
+00100000010000000000000111100011
+00100000001000000000000100010111
+01111001001111111000000000100110
+00100000010000000000000111000111
+01101000000000001100101111000101
+11000001111111111000000000000000
+00100000010000000000000110011100
+01011000000000000000000000000000
+01100000000000010100101111100010
+00100000010000000010101011111010
+00100000000000000000011111010000
+01101000000000001100101111100010
+11000000011111111000000101001011
+00100000010000000000000100100010
+00100100001011000000000110100101
+00100100001101111000000110100101
+01111001001000000000000000100110
+01011000000000000000000000000000
+01100000000000010100101111100010
+01110000000010101001100100111100
+00100000010000000111110110000110
+00100000010000000000000100011101
+00100000001000000000000001101101
+01110000000100011001111011111111
+01101000000000001100101110110110
+01100000000000001001000110011111
+01101000000000100100101111101100
+01100000000000100001000110100000
+11011000010000000000000000000110
+11011010001000000001000110011110
+00100000010000000000000111010001
+00100000001000000000000111110001
+01101000000000010100101111100010
+00011111111000001111111000000001
+01100000000000010100101111100010
+00100000010000000000001000000011
+00100000001000000000000110001110
+01111001001111111000000000100110
+00100000010000000000000111000101
+00100000010000000000000110011100
+01110000010010111110001000000000
+00100000010000000010101011111010
+00100000000000000000011111010000
+01101000000000001100101111100010
+11000000011111111000000101001011
+00100000010000000000000100100010
+00100100001011000000000110111011
+00100100001101111000000110111011
+00100000010000000000000101001101
+01101000000000100100101111011101
+01101000000010100100101111000001
+10011000010001100111110000000000
+00100000001000101000000101010100
+00100000001000000000000110010101
+01101000000000001100101111100010
+00011111111000001111111000000001
+01100000000000001100101111100010
+01101000000000001100110011110011
+00011111111000001111111000000001
+00011111111000010111111000000001
+01100000000000001100110011110011
+11000000000000000000000111001001
+11000000000000001000000111001011
+00100000011000000000000000000000
+01110000010000011101111000100000
+00100000010000000000001100101000
+00100000010000000000000111100100
+00100000001000000000001000000011
+00100000010000000000000111000101
+00100000001000000000000110101110
+00100000010000000000000101011000
+00100000001000000000000110101110
+01111001001111111000000000100110
+00100000010000000101001111001110
+11011000111000000000000000000011
+00100000001000000100001111010010
+01100000000010001100101110110101
+00011000010000100111001000000000
+11011000101000000100101101010001
+00011010001000100000110000000000
+00100000001000000111111100000001
+01101000000000001100101100110000
+00011111111010010111111000000000
+01100000000000001100101110110011
+00011111111000001111111000000001
+11011000110000000100101100110000
+10011000110000001000110000000000
+11101000110000011000000000000000
+01100000000000011100101111110010
+01101000000000001100101100110000
+00011111111000110111111000000000
+00011111111000010111111000000011
+01100000000000001100101111111000
+00100000011000000000000000000000
+01100000000000100100101111011101
+11011010001000000000000000000000
+11011111001000000000000000000100
+11011000110000000100101111011101
+11101000110000001000000000000000
+10011010001000001010001000000000
+11000010000000000000000111100111
+00011010001000100111111000000000
+01100000000000010100110001100110
+01101000000000001100110001100110
+01101000000010001100110001100111
+10011000010000001111111000000000
+01100000000000001100110001101000
+00100000011000000000000000000000
+01101000000000001100101110110101
+00011111111000001111111000000010
+01100000000000001100101110110111
+01101000000000001100101110110110
+01100000000000001100101101110001
+01101000000000001100101110110101
+00011111111010011111111000000000
+01101000000010001100101110110100
+00011000010000010000010000000011
+00011000010000111000010000000000
+10011000010000011111111000000000
+01101000000010001100101111110001
+10011000010000001111111000000000
+11100000101000001000000000000000
+01101000000000001100101110110101
+10011000000000000111001000000000
+11011000110000000100101101010001
+00100000001000000111111100000001
+01101000000010001100101111000000
+00100000010000000000001000000111
+01100000000010001100101111000000
+00100000011000000000000000000000
+00100000010000000000001000001011
+00011000010000001000010000000001
+00011000010000010000010000000011
+00100000011000000000000000000000
+01101000000000001100101111011101
+00011111111000010111111000000011
+00011111111011111010001000000100
+01011000000000000100101111000110
+10011010001000001111111000000000
+10011000010000001000110000000000
+11101000110000001000000000000000
+01100000000000001100101110111111
+00100000011000000000000000000000
+01111000010001001111110000000000
+01111000010000111111110000000000
+01011000010101010101010101010101
+10011000000000000001111000000000
+01101000000000001100101110111111
+00011111111011011000010000000000
+01111001001000000000010000000001
+00011000010000110001110000000000
+00100000011000000000000000000000
+00100000010000000101001111000100
+01101000000000100100101111011101
+10011000000000000001001000000000
+00100000010000000010100100011000
+01101000000010001100101110111111
+00100000010000000010100100011111
+01011000000000000000010100000000
+00100000010000000010101010001111
+00100000010000000010100100100100
+00100000010000000000001000010100
+01111000010101111111110000000000
+01111000001001101111110000000000
+01111000001100001111110000000000
+01111000010100000111110000000000
+01111000001010000111110000000000
+01101000000000010100101110111000
+10011000000000000011011000000000
+00110111110000011000010000000000
+00100100001011000000001001100110
+01111000010001101111110000000000
+01111000001001011111110000000000
+01111000001000111111110000000000
+01111000001001001111110000000000
+00100000010000000000001001011111
+01100000000000001100110001101001
+01101000000010001100110001101000
+10011000010001100111110000000000
+00100100001000101000001001100010
+00100000010000000000001001011111
+01100000000000001100101100101111
+01101000000000001100101111111011
+00011111111001100111110000000010
+00100000001000101000001001000010
+01101000000000001100101100101111
+01101000000010001100101110110110
+10101000010000000000111000000000
+00100100001000001000001001100010
+00100000010000000000001001011111
+11100000101000001000000000000000
+00011111111010010111111000000000
+00011111111000010111001000011111
+00100000001000101000001001001010
+00100000010000000000001001011111
+11100000101000001000000000000000
+11000010000000000000001001000111
+00011000101000100010001000000000
+00100000010000000000001001011111
+01100000000000001100110011110000
+00011010001000100000101000000000
+00001001100000000000000000011000
+01111000001010000111110000000000
+11011011011000000000011001100100
+00011111111011110111111000000000
+00011111111100010111111000000000
+11100000101000011000000000000000
+01111000010001011111110000000000
+00100000001000110000001001100010
+01111000001101111111110000000000
+01101000000000001000000000010111
+00011111111000001010001000000000
+00100000010000000010100110000001
+01111000010001101111110000000000
+00100000010000000010100100011000
+01101000000000001100110011110000
+00100000010000000000000000011101
+00100000011000000000000000000000
+00001001100000000000000000001000
+00011001100010010111111000000000
+00100000011000000000000000000000
+01111000010011011111110000000000
+01111000010001011111110000000000
+00100000010000000010011001001101
+00100000011000000000000000000000
+00100000001000000000001001100010
+00100000010000000010100100011000
+01101000000010001100101110111111
+00100000001000000010100100110011
+00100000010000000101001111000100
+01101000000000100100101111011101
+10011000000000000001001000000000
+00100000010000000000001000010100
+00100000010000000000001001100111
+01111001001000000010101000000000
+01111000001011101111110000000000
+01111000001100000111110000000000
+01111000010100001111110000000000
+00011001001100010111111000000000
+00011111111011001111111000000000
+00011111111100011111111000000000
+00001000000000001000011000101000
+01111000010011101111110000000000
+01111000001011011111110000000000
+01111000001000111111110000000000
+01111000001001001111110000000000
+01101000000000001100110001101000
+00001000000000001000011000001000
+01101000000000001100101110110111
+10011000000000000111001000000000
+11011000110000000100101101110001
+11101000110000001000000000000000
+00001000000000001000011000001000
+11000010000000000000001010000000
+01111000001001000111110000000000
+00001000000000001000011000011000
+01111000010001000111110000000000
+00110111110100111000001000000000
+00100000000000000000000001100100
+01111000010011101111110000000000
+01111000010011011111110000000000
+00100000011000000000000000000000
+00100000010000000111111111101001
+01101000000010100100101111010110
+00011100010000100111111000000000
+10011000010001100111110000000000
+00100100010000010010110100011000
+00011111111000100010010000000000
+01101000000000100100101111010110
+01101000000010001100101111011010
+10011000010000001000010000000000
+00011010010000100111111000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+01111001001111111111111000011100
+01100000000000100100101111010110
+00100000001000000111111111100111
+00100000010000000010100110111011
+00100000011110100000000000000000
+01101000000010001100110001101111
+11011010001000000000110110011110
+00100000010000000000001010100001
+01100000000010001100110001101111
+00100000011000000000000000000000
+00011010001000100111111000000000
+10011000010000001000101000000000
+01101000000000001000000000011000
+11100000101000001000000000000000
+00011000010000001000010000000001
+00011000010000010000010000000111
+00100000011000000000000000000000
+11011000010000000000000000000000
+11011111001000000000000000001000
+00011010001000100000110000000000
+11101000110000001000000000000000
+10011000010000001000010000000000
+11000010000000000000001010101011
+00011000010010010111111000000000
+00011111111000100000010000000000
+11000110100100110000000000000000
+00011111111001101111110000001010
+00100000010000000111111110000110
+00011000000001111111111000000000
+00011111111100100111111000000000
+00011000000001110000010000000000
+10011000010000011000010000000000
+00100000011000000000000000000000
+00100000011000000000000000000000
+11000110000100110000000000000000
+00100000010000000000001011000010
+01101000000000001100000001000000
+11000011000000000000001010111111
+01101000000000001000000010100000
+00100100011110100000000000000000
+01011000000000000000000000000000
+01100000000001000000000010100001
+00100000011000000000000000000000
+00100000010000000000001011001011
+00100000010000000000001010111111
+00100000010000000011111010111111
+01101000000100100000000001110000
+01101000000110100000000001111000
+10011000010000011000010000000000
+00011000010001000000010000000000
+01100000000110100000000001111100
+00100000011000000000000000000000
+01101000000000001100101011111110
+00100000011110100000000000000000
+00100000001000000000001111000011
+00100000010000000011010000010110
+00100000001101011000001011010110
+01101000000000001100000111011110
+01100000000000001100110001101100
+00100000010000000000010000000110
+01101000000000001100011010000101
+01100000000000001100011011011010
+00100000010000000100001111001010
+00100000010000000000001011011011
+00100000001000000111010010111001
+01101000000000001100110001101100
+01100000000000001100000111011110
+00100000011000000000000000000000
+00100100010101011000001100011010
+00100000010000000000001011111001
+00100000011101011000000000000000
+00100000010000000000001101001101
+01101000000000001100101100100110
+11000010100000010000001011100011
+00100000010000000100000010000011
+11000000000000101000001011100111
+00100000001000000000001100110101
+00100000010000000000001011011000
+01101000000000001100001000010000
+00100000011000000000000000000000
+01101000000000100100011011010011
+11000100000010001000000000000000
+11000011100000011000000000000000
+11000110000100110000000000000000
+00100000010000000100010010000010
+11011000111000000000000000000011
+00100000010000000100001111001110
+01011000000000000000000000000000
+01100000000000010100011010101110
+01100000000000001100011010110100
+01100000000000010100101111100010
+00100000010000000100001011001010
+00100000001000000000000101010100
+01101000000000100100011011010011
+11000011000010100011110101100110
+01101000000000001100011101111010
+11000000011111111011110101100110
+00100000001000000011110110000000
+01110000010000100001001001110110
+00100000001000000011110100110110
+00100000010000000000001011111001
+00100000010000000100000011000000
+01101000000000001100011011100000
+11000000000000101100000011010101
+00100000010000000100000011011001
+11000000000110000000001100001001
+11000000000110001000001100001011
+00100000010000000100000011010001
+00100000000000000000001111101000
+00100000001000000000001011111111
+01110000010010101111111000000001
+00100000010000000110010000001111
+00100000010000000000001011111011
+00100000001000000110010000010001
+00100000010000000000001100010000
+00100000001000000100000011100000
+00100000010000000000001100010000
+01101000000000001100011011011110
+11000000001110000100000011101000
+01110000010001101110000000000001
+00100000011000000000000000000000
+01011000000000001000000000000110
+00100000010000000110010000010011
+00100000000000000010111011100000
+00100000001000000000001011110100
+01011000000000000000000000000110
+00100000010000000110010000010100
+00011111111000011111111000001000
+00011111111011010111111000000000
+00011111111000001111111000000110
+00100000001000000110010000010011
+00100000010000000000000010001101
+01101000000100001000101000000000
+01111001001111111111111000000100
+01100000000100001000101000000000
+00100000010000000011111000011110
+01011000000000000000000000000000
+01100000000000010100000101010100
+00100000010000000011111001010100
+00100000010000000110010110011100
+01101000000000100100011011010011
+00101111111011111111111000011001
+00100100010000001110010111000010
+00100000010000000100010000111111
+00100000010000000000001100101010
+00100000010000000000001101110011
+00100000001000000110010111011111
+00100000010000000011001111000100
+00100000001000101100001100010110
+00100000001000000011110111001011
+11011000010000000000000000000010
+11011010001000000000101010101010
+11011010010000000000000001100010
+00100000001000000110010111010001
+11011000010000000000000000000010
+11011010001000000000101010011010
+11011010010000000000000001100010
+00100000001000000011001111001000
+00100000001000000000000110101010
+01101000000000100100011011010011
+11000011000011110000001100111101
+01101000000000001000101010111101
+00101111111011000000000000000011
+00100100001000001000001100111101
+00100000010000000000001011111011
+00100000010000000000001100010100
+01101000000000001100011100011111
+01100000000000001100011100011110
+01101000000000100100011011010011
+11000100000010001000000000000000
+00100000010000000000001101000100
+00100000001101000000000110101010
+00100000001000000000000110000111
+11011111001000000000000000000010
+11011000110000000100101111011101
+00100000010000000111111111100111
+01011000000000001111111111111111
+11101000110010010000000000000000
+10011000010001100111110000000000
+00100100010000101111111111101001
+11000010000000000000001101001000
+00100000011000000000000000000000
+01011000000000000000001101100100
+01100000000000010100000111110101
+01011000000000000000001101010010
+01100000000000010100110011100110
+00100000011000000000000000000000
+00100000001000000000001101010111
+00100000010000000100010000000001
+01101000000000010100011010011111
+00100000011110100000000000000000
+00100000001000000000000001101101
+00100000010000000000010001110101
+00100000001000000000001101010100
+01101000000000010100011010011111
+00100000011110100000000000000000
+01110000010010000000011000000001
+01110000010010000000011100000010
+00100000011000000000000000000000
+00100000010000000101100000010100
+01110000010001111001110000000001
+00100000001000000000001100010000
+00100000010000000111111000110100
+00100000010000000011110101101010
+00100000001000000011111011100000
+00011010011000100111111000000000
+11000000000111001000001101101001
+11000000000111010000001101110111
+11000000000111100000001110000010
+00100000001000000100000101111101
+01110000010001111000101100000001
+11011000111000000000000000000011
+00100000010000000100001111010010
+01011000000000000000000000000000
+01100000000000010100011100000111
+01110000010001101010011100000000
+00100000010000000100000001011101
+00100000010000000000000001101101
+00100000010000000000001101110011
+00100000001000000110010111010001
+11011010001000000100101111011101
+11011010010000000000000001011011
+11011000010000000000000000000100
+00100000011000000000000000000000
+01110000010011001111010100000000
+00100000010000000000001011011000
+00100000010000000000000111001101
+00100000001000000110010110011010
+01110000010000011011110100000000
+00100000010000000100001100010110
+11011111001000000000000000000011
+11011000110000000100011100100010
+00100000010000000000001101000110
+00100000001101000000001110111111
+00100000001000000000001011100100
+00100000001000000011111110001101
+01111000001101000111110000000000
+01101000000100100000000100111000
+01111001001101000111111000011010
+01100000000100100000000001001100
+00100000010000000010110000100001
+00100000010000000000001110001101
+00100000010000000111010010111101
+00100000010000000100010010000010
+00100000010000000011111010011111
+00100000001000000000001011000100
+01101000000000001100101011111110
+00100000011110100000000000000000
+01110000010010101111111000000000
+00100000001000000000001100010100
+00100000010000000000001110010110
+00100000010000000000001110110110
+00100000010000000000001110011011
+00100000010000000100001000110100
+00100000001000000100001000111010
+11011010011000000100100000000111
+11011010010000000000001110011001
+00100000001000000011001101101101
+01110000010010000000011000000000
+00100000011000000000000000000000
+01101000000000001100011011110101
+11000010100000100100001110010100
+00100000010000000100000010000011
+11000000000000111000001110100111
+01101000000000001100011010000101
+01100000000000001100011011011010
+01101000000000001100011011011011
+11000001000000001000000000000000
+01110000010001101101101100000001
+11011000111000000000000000001001
+00100000010000000100001111010010
+00100000001000000100001111001010
+01110000010001111001111000101000
+00100000010000000000001110101010
+00100000001000000100001110110000
+11011010011000000100011011011010
+11011010010000000000001110101101
+00100000001000000011001101101101
+01101000000000010100011010000010
+00101111111011111111111000001011
+00100000010000001100001011010100
+01101000000000010100011010000010
+00101111111011111111111000000111
+00100000010000001100001110010010
+11011000111000000000000000001001
+00100000010000000100001111001110
+00100000001000000100001110111000
+01101000000000001100011110011101
+00100000011110100000000000000000
+01101000000000001100011110011110
+00100000001110100000001110111101
+00011111111000001111111111111111
+01100000000000001100011110011110
+00100000011000000000000000000000
+01110000010001111001110100000000
+00100000001000000011010000001010
+01110000010001111001110100000001
+01110000010001111001111000101000
+00100000011000000000000000000000
+00100000010000000100001001001010
+01101000000000001100011011100000
+11000000000000110000001111000110
+00100000001000000011110110000001
+01101000000000001100011101111010
+00100000010110100000001111001100
+01101000000000001100011101111010
+11000000000000001011110110001010
+11000000000000011011110110001110
+00100000001000000011110110001100
+01110000010001110111101000000001
+00100000011000000000000000000000
+01111000010101000111110000000000
+01011000000000000000000000000000
+01100000000000110100011010011011
+00100000010000000011111110110101
+00100000010000000100000001111001
+00100000010000000100000001111110
+00100000010000000100000010011001
+00100100011101000000000000000000
+00100000001000000011111110100000
+01110000010001111001110100000000
+01110000010001111001111000000000
+00101000000011111111111000100110
+00100000010000001000000111001101
+00100000001000000100001001101101
+00100000010000000000001011011000
+01110000010001111001110000000000
+01101000000000010100011010000010
+11000010100001011000001111100010
+01101000000000100100011011010011
+11000011000011000000001111100010
+00100000010000000011010000011000
+01101000000000010100011010000111
+01100000000000010100011010101100
+01110000000000010110110100000110
+01011000000000000000000000000000
+01100000000000010100011010110000
+01100000000000010100011010101110
+11011000111000000000000000000111
+00100000010000000100001111001110
+00100000010000000100001111001010
+00100000001000000100001011000100
+01011000000000000000000000000000
+01100000000000010100011010101100
+00100000010000000000001100010000
+00100000001000000100001011001011
+01101000000100001000000001110111
+00011111111000010111111011111101
+01100000000100001000000001110111
+01101000000110001000000001110011
+00011000010000011000010000000010
+01100000000110001000000001110011
+00100000010000000110001111101110
+00011000010000010000010011111101
+00100000000000000000000000001101
+00100000010000000110001111110010
+01100000000110001000000001110011
+00100000011000000000000000000000
+00100000010000000110001010111100
+00100100001110100111110111011011
+01101000000000001000101010011001
+11000101100001001111110111010110
+11000000000010010000010000000011
+00100000001000000111110111001010
+00100000010000000101100010010000
+00100100011110100000000000000000
+00100000001000000101101010111111
+01110000010011001111000100000001
+01110000010011001110111000000000
+00100000011000000000000000000000
+01101000000000001100110011101110
+00011111111000001111111000000001
+01100000000000001100110011101110
+00100000011000000000000000000000
+01101000000000001100110011101110
+00011111111001100111110000000010
+00100100010000010000010000010101
+01101000000000001100110011101110
+11000001000000000000000000000000
+00011111111000001111111111111111
+01100000000000001100110011101110
+00100000011000000000000000000000
+01110000010011001110111000000011
+00100000011000000000000000000000
+00100000011000000000000000000000
+01101000000000010100011010000010
+11000011100001011000000000000000
+11000011100000111000000000000000
+11000011100000110000000000000000
+11011010001000000100110001110111
+00100000010000000000001010101000
+01100000000010001100110011101111
+01011000000000000000000010000010
+11000101000100110000010000100010
+01011000000000000000000010000000
+10011000010001100111110000000000
+00100100001000010000010000111010
+01101000000000001100110011101110
+00011111111001100111110000000010
+00100100001000010000010000101010
+01101000000000001100110011101110
+11000000000000000000010000111011
+00100000011000000000000000000000
+01101000000000001100110011101110
+11000001100100000000000000000000
+01110000010011001110111000000000
+01101000000010001100110011101111
+01011000000000000000000001110111
+11000101000100110000010000110001
+01011000000000000000000001110101
+10011000010001100111110000000000
+00100100011000010000000000000000
+01101000000000001100110011110001
+11000000000000000000010001000010
+00011111111000001111111111111111
+01100000000000001100110011110001
+11000000000000000000010001000010
+01110000010000011101111000000000
+00100000011000000000000000000000
+01110000010011001110111000000000
+01101000000000001100110011110001
+11000000000000010000010001000000
+00011111111000001111111000000001
+01100000000000001100110011110001
+11000000000000001000010000111000
+01110000010000011101111000000010
+00100000011000000000000000000000
+01110000010000011101111000000100
+00100000011000000000000000000000
+01100000000010001000000000010111
+00011000010000001010001000000000
+00100000010000000010100110000001
+01011000000000000000010100000000
+00100000010000000010101010001111
+01110000100010010000011000000001
+01110000100010010000000000111100
+01110000100010010000000111100000
+00100000000000000000000000001010
+01110000100010010000001000000001
+01110000100010010000001000111101
+00100000000000000000000000001010
+01110000100010010000001110110111
+00100000000000000000000000001010
+01110000100010010000001001111101
+01101000000000001100000111011110
+11000000000000010000010001011100
+11000000000000100000010001100001
+11000000000100000000010001110000
+00100000010000000000010001100110
+01110000100010010101010111010000
+01110000100010010101011011100000
+01110000100010010101100001101100
+00100000001000000010100101001011
+00100000010000000000010001101011
+01110000100010010101010111010000
+01110000100010010101011011100000
+01110000100010010101100000111100
+00100000001000000010100101010011
+00100000010000000000010001100110
+01110000100010010101010111010000
+01110000100010010101011011000000
+01110000100010010101100001101100
+00100000001000000010100101011011
+01110000100010010100110001011011
+01110000100010010100110110010110
+01110000100010010100111000101100
+01110000100010010100111101000110
+00100000011000000000000000000000
+01110000100010010100110011111011
+01110000100010010100110111101111
+01110000100010010100111011101100
+01110000100010010100111101011110
+00100000011000000000000000000000
+01110000100010010101011011000101
+01110000100010010101010111010000
+00100000011000000000000000000000
+00011000000000000010101000001000
+00100000001000000010100011111010
+01101000000000001100101100101110
+00011111111000001111111000000001
+01100000000000001100101100101110
+00011111111001100111110000110010
+00100000001000010000010010000001
+00011111111001100111110001100100
+00100000001000010000010010001100
+00011111111001100111110010010110
+00100000001000010000010010010100
+00011111111001100111110011001000
+00100000001000010000010010011100
+00100000011000000000000000000000
+01011000000000000000000000000101
+01100000000000010100101100101000
+01011000000000000000000000000000
+01100000000000010100101100101010
+01100000000000001100101100101100
+01100000000000001100101100100111
+01100000000000001100101100101101
+01111000001101000111110000000000
+11011010001000000000000000000111
+11011010010000000100101100100111
+00100000011000000000000000000000
+01011000000000000000000000000101
+01100000000000010100101100101010
+01011000000000000000000000000000
+01100000000000010100101100101000
+01100000000000001100101100101100
+01100000000000001100101100100111
+01100000000000001100101100101101
+00100000001000000000010010001000
+01011000000000001111111111111011
+01100000000000010100101100101000
+01011000000000000000000000000000
+01100000000000010100101100101010
+01100000000000001100101100101100
+01100000000000001100101100100111
+01100000000000001100101100101101
+00100000001000000000010010001000
+01101000000000001100101100101110
+11000000011001000000010010100110
+01011000000000001111111111111011
+01100000000000010100101100101010
+01011000000000000000000000000000
+01100000000000010100101100101000
+01100000000000001100101100101100
+01100000000000001100101100100111
+01100000000000001100101100101101
+00100000001000000000010010001000
+01110000010010110010111000000000
+00100000001000000000010010011110
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+                                
+00100000010000000010101010111100
+01000100100000000100000000000000
+00100000100000000000000000000000
+00100000010000000110010000001101
+00100000010000000010100101101100
+00100000010000000110010110100011
+00100000010000000010101010010110
+00100000010000000100110101101010
+01000100100000001100000000000000
+00100000010000000110101000000011
+00100000010000000101110011110110
+00100000010000000111110011001100
+00100000010000000011001011011000
+00100100010101011110100010011100
+01000100100000010100000000000000
+00100000010101011011001011100011
+00100000010000000111010101101010
+00100000010101011010101101000001
+01000100100000011100000000000000
+00100000010000000111011011011100
+00100000010000000111101010101111
+00100000010000000111010101101101
+00100000010000000101001101011100
+01000100100000100100000000000000
+00100000010000000010000000111000
+00100000010000000011001011101101
+00100000010000000010000010001111
+00100000010000000010001011111000
+00100000010000000010001101101010
+00100000010000000010000000100001
+00100000010000000010101101101010
+00100000010000000010110001110010
+00100000001000000010000000010010
+00100000010000000010000000100110
+11000110100001001000000000000000
+01111001001111111000000000001001
+00100000010000000010001000100011
+00100000001000000101001111001110
+01000100100000101100000000000000
+00100000010000000010001001011110
+00100100001000101010000000101111
+00100000010000000010001000001010
+00011010001000001000110000000001
+11101000110000001000000000000000
+11000010100000000101001101100000
+11000010100000001010000101100110
+00100000001000000010001111001111
+00100000010000000010001000101011
+00011111001000100111110000000000
+00100000011000101000000000000000
+00100000010000000010001000001010
+01101000000000001000000000110000
+11000010100000011010000011010011
+01101000000000001000000000110001
+11000010100000001010000101100110
+00100000001000000010001111001111
+01101000000000001100000111001110
+00100000011110100000000000000000
+11000000000000001010000001001000
+11000000000000010010000001001101
+11000000000000011010000001010000
+11000000000000101010000001010101
+11000000000011011010000001000101
+00100000010000000010001001010111
+00100000011000101000000000000000
+00100000010000000010001001011010
+00100000011000101000000000000000
+01110000010000011100111000000000
+00100000011000000000000000000000
+01110000000001001001101100011011
+01110000010000011100111000000000
+00100000011000000000000000000000
+01111001001000000000000000011100
+01111001001111111000000000011110
+01110000000000001000111111111111
+01110000000000001000110100011111
+00100000001000000010000001000011
+01111001001111111000000000011100
+00011000000000000011011000000000
+00100000001000000010000001000011
+00100000010000000010001001011010
+00100000011000101000000000000000
+00011000000000000000010000000001
+01110000000000010110111000000101
+00100000001000000010000001011100
+01000100100000110100000000000000
+01101000000000110100000111010000
+00100000001110100010000001000011
+01110000010001101000000100000001
+01110000000000000101010100000011
+00100000001000000010000001011011
+00011000000000000000010000100101
+01000100100000111100000000000000
+01101000000000001000000011110001
+00100000001110100010000001100010
+00011111111010011111111000000000
+00011111111100100111111000000000
+00011111111000001111111111111111
+01100000000000001100000010100110
+01100000000000001000000011110000
+01110000000000001000111000011111
+01111001001111111000000000001100
+00100000010000000010001000111011
+00100100001000101010000010000011
+00100000010000000010101001101111
+01100000000000001000000001110111
+01100000000010001000000001111100
+01101000000000110100000111010000
+01100000000000110000000001000000
+01000100100001000100000000000001
+00100000010000000111111100010101
+00011000000000000111111000000000
+00101000010000011111111000000001
+01111101001000001111111000000101
+01111001001000000111111000000011
+01100000000000001000000000110000
+01110000000010101001100100000011
+00100000010000000111110110000110
+00011000000000000111111000000000
+01111001001000001111111000000100
+01100000000000001000000001001100
+01011000000000000000000000000000
+01111001001000000111111000000001
+01100000000000001000000000110001
+01111000001101001111110000000000
+00100000010000000010001000100011
+01111000010101001111110000000000
+00011000000000000000111000000011
+01101000000000010100000010111001
+00100000010000000111111100001000
+00100000001000000010000001000011
+01000100100001001100000000000001
+01101000000000110100000111010000
+01100000000000110000000001000000
+00101000010000011111111000000001
+00100000001000001010000010001001
+00100000001000000010000001000011
+11011000101000000000000100000001
+11011111001000000000000000001000
+00100000010000000111111011000110
+01110000000010101001100100000100
+00100000010000000111110110000110
+00100000001000000010000001000011
+11000110100011100000000000000000
+00011000000000000000111000000001
+00100000010000000111111100010110
+01111101001110100000000000011100
+00100100001110100010000010010101
+00100000011000000000000000000000
+01000100100001010100000000000001
+01101000000010010100000010111011
+00011000000000000000111000000100
+00100000010000000010011100011100
+00100000011101000000000000000000
+00100000010000000010100010100100
+00011000000000000100100000000000
+00100000011000011000000000000000
+01111001001111111000000000001011
+01111001001111111000000000000000
+00011100010000001100001000000001
+00101000000011111111111000011110
+01111001001000001100100000000010
+00101100001000000000010000000000
+00100100001000001010000010111110
+01000100100001011100000000000001
+01101000000000001000000000010010
+00011111111000001111111000000001
+01100000000000001000000000010010
+00100000010000000010100011011000
+00100000010000000010100011010010
+00100000010000000010100011110010
+00100000010000000010101001010001
+00100000010000000010101001010110
+00100000010000000010101001100100
+00100000010000000010011001001101
+00100000010000000010000010110001
+00100000001000000010000010011100
+01000100100001100100000000000001
+01101000000000001000000010001101
+00011111111000001111111111111111
+01100000000000001000000010001101
+00100000011000010000000000000000
+01110000000000001000110100011111
+01101000000000001000000010001111
+00011111111000001111111111111111
+01100000000000001000000010001111
+00100000011000010000000000000000
+01111001010000000000000000011110
+01110000000000001000111111111111
+00100000011000000000000000000000
+01000100100001101100000000000001
+00100000010000000010100011011000
+00100000010000000010100011001100
+00100000010000000010100011110010
+00100000010000000010101001011011
+00100000010000000010100111101011
+00100000010000000010101000001101
+00100000001011000010000011001000
+00100000010000000010000010110001
+00100000001000000010000010011111
+01000100100001110100000000000001
+00100000010000000010100110111011
+00100000010000000010101001101011
+00100000010000000010010100011110
+01111001001111111000000000000001
+11000110100001011000000000000000
+01000100100001111100000000000001
+01101000000000001000000000010011
+00011111111000001111111000000001
+01100000000000001000000000010011
+00100000011000000000000000000000
+01000100100010000100000000000010
+01111000001101001111110000000000
+01111000001110000111110000000000
+01101000000000010100000010110101
+00100000001110100010000011011011
+00011000000000000000111000001000
+00100000010000000111111100010110
+00100100011110100000000000000000
+01000100100010001100000000000010
+01101000000010010100000010110111
+00011000000000000000111000101000
+00100000010000000010011100011100
+00100000001101000010000100010100
+00011000000000000000111000000011
+00100000010000000111111100010110
+00100100001110100010000011110000
+01101000000000001000000001001100
+11000010100000100010000011100110
+00100000001000000010000011101001
+11011000101000000000000100000001
+11011111001000000000000000001000
+00100000010000000111111011000110
+01000100100010010100000000000010
+01110000000000000011000000000000
+00100000010000000101110011110111
+01110000010001101000000100000000
+01110000000010101001100100010011
+00100000010000000111110110000110
+00100000001000000010000100010100
+01000100100010011100000000000010
+00011000000000000001011000000000
+00110100011100110000001000000000
+01101000000000001000000011110010
+00011111111000001111111111111111
+10011100010000101111111000000000
+00101111111000000000011000000000
+00100100001000001010000011110000
+00011000100000100111111000000000
+01100000000000001000000110000001
+00011000000000000100110000000000
+00011000000000000100100000000000
+01000100100010100100000000000010
+00100000001000011010000100010100
+00100000010000000010100011011100
+11011001011000000000011000000000
+00110100011100110000001000000000
+01000100100010101100000000000010
+01101000000000100000000011110010
+10011000000000000100001000000000
+00011111111000001111111000000001
+01100000000000100000000011110010
+00101000000011111111111000001100
+01111001001000001100100000000010
+00101100001000000000010000000000
+00100100001000001010000100101000
+01101000000000001000000000001100
+00011111111000001111111000000001
+01100000000000001000000000001100
+00100000010000000010100011010010
+00100000010000000010101001010001
+00100000010000000010101001010110
+00100000010000000010101001100100
+00100000010000000010011001001101
+00100000010000000010000100011010
+00100000001000000010000011111100
+01000100100010110100000000000010
+01111000010101001111110000000000
+01101000000000010100000010110101
+00100000011110100000000000000000
+00011000000000000000111000001000
+00100000001000000111111100001000
+01000100100010111100000000000010
+01101000000000001000000010001110
+00011111111000001111111111111111
+01100000000000001000000010001110
+00100000011000010000000000000000
+01110000000000001000111000011111
+01101000000000001000000011110000
+00011111111000001111111111111111
+01100000000000001000000011110000
+00100000011000010000000000000000
+01111001010000000000000000001100
+01101000000000001100000010100110
+01100000000000001000000011110000
+00100000011000000000000000000000
+01000100100011000100000000000011
+00100000010000000010100011001100
+00100000010000000010101001011011
+00100000010000000010100111101011
+00100000010000000010101000001101
+00100000001011000010000100110000
+00100000010000000010000100011010
+00100000001000000010000100000001
+00100000010000000010011001001101
+01101000000000001000000000001101
+00011111111000001111111000000001
+01100000000000001000000000001101
+00011000000000000011011000000000
+01101000000000100000000011110010
+01000100100011001100000000000011
+00100000010000000010101001001111
+00100000010000000010100011011100
+00011100110000001100110000000001
+00011100001000010100001111111101
+00011100100000010100100111111100
+00100000010000000010100011010010
+00100000010000000010101001010001
+00100000010000000010101001010110
+00100000010000000010101001100100
+00011100010000100111111000000000
+01100000000000100000000101100001
+00011000000000000000100000000000
+00011000000000000000001000000010
+00100000010000000010101001101011
+00100000010000000010011101100110
+01000100100011010100000000000011
+00100000010000000010101001001101
+00011100001000011100001000000010
+00011100100000010100100111111100
+00100000010000000010100011001100
+00100000010000000010101001011011
+00100000010000000010100111101011
+00100000010000000010101000001101
+00100000010011000010011001001101
+00100000001011000010000101010101
+01101000000000001000000000010000
+00100000001110100010000011111100
+00011111111000001111111111111111
+01100000000000001000000000010000
+00100000001000000010000100110110
+01000100100011011100000000000011
+01101000000000001000000000001110
+00011111111000001111111000000001
+01100000000000001000000000001110
+00100000010000000010010000110101
+00100000010000000010001011110010
+00100000001011000010000101011111
+00100000010000000010010001010101
+00100100001110100010000101011010
+00100000001000000010000011111100
+01000100100011100100000000000011
+01101000000000001000000000110000
+01111001001111111111111000000011
+01100000000000001000000000110000
+00100000010000000010010001000000
+01111000010101001111110000000000
+00100000011000000000000000000000
+01000100100011101100000000000011
+01111000001101001111110000000000
+01111000001110000111110000000000
+00100000010000000010000111100001
+00100000011101000000000000000000
+00100000010000000010110001101001
+00100000010000000010101001001111
+00011100010000001100001000000001
+00100000010000000010100011100010
+00011000000000000100100000000011
+00100000010000000110110011000010
+00100000010000000010010010001001
+00100000010000000010100011010010
+00100000010000000010101001010001
+00100000010000000010101001010110
+00100000010000000010101001100100
+00100000010000000010011101100010
+01000100100011110100000000000011
+00100000010000000101110100001000
+00100000010000000010001011100100
+00100100001101101010000110000000
+00100000010000000010101010001000
+00100000010000000010011100101000
+01101000000000001000000000001111
+00011111111000001111111000000001
+01100000000000001000000000001111
+01000100100011111100000000000011
+00100000010000000110110010101010
+00100000010000000010000110001011
+00100100011101001000000000000000
+00100000010000000010011011110011
+00100100001110100010000110001000
+01111000010101001111110000000000
+00100000011000000000000000000000
+00100000010000000010010010001001
+00100000010000000010001011011010
+00100000001000000010000101110111
+00100000001101101010000110001110
+00100000010000000010101001111111
+00100000001000010010000110011100
+00100000010000000010000110100111
+00100100001101000010000110011100
+01101000000000001000000001001100
+11000100000000100000000000000000
+11000011100000011000000000000000
+01101000000000001000000001001011
+11000011100000011000000000000000
+00100000010000000010000110101110
+00100100011110100000000000000000
+01101000000000001000000101101110
+00011111111000001111111111111111
+01100000000000001000000101101110
+00100100011110100000000000000000
+00100000001000000110000000000110
+01000100100100000100000000000100
+00100000010000000010010001011101
+01111000010101001111110000000000
+01101000000000001000000001001100
+11000010100000100010000110100010
+00100000011000000000000000000000
+01101000000000001000000001001100
+11000011100000011000000000000000
+11011000101000000000000100000001
+11011111001000000000000000001000
+00100000001000000111111011000110
+01000100100100001100000000000100
+01111000001101000111110000000000
+01101000000000001000000001001011
+11000100000000011000000000000000
+00100000010000000010000110101110
+00100100011110100000000000000000
+00100000001000000111111111101001
+01101000000000001000000001110010
+00011111111000001111111111111111
+01100000000000001000000001110010
+00100000011000000000000000000000
+01000100100100010100000000000100
+01101000000000001000000000110000
+11000010100000111010000110111011
+01101000000000001000100110110101
+00100000001110100010000110111011
+01110000000010011011010100000000
+01110000000010101001100100011000
+00100000010000000111110110000110
+00100000001000000010000110111011
+01000100100100011100000000000100
+00100000010000000010001001010100
+01101000000000001000000000110000
+01111001001000000111111000000111
+01100000000000001000000000110000
+01110000010000011011110100000001
+01101000000000001000000001010101
+11000000100010110010000111000011
+00100000011000000000000000000000
+01110000000010011011010100000001
+01101000000000001000000000110000
+01111001001111111111111000000111
+01100000000000001000000000110000
+00100000011000000000000000000000
+01000100100100100100000000000100
+01111000010101000111110000000000
+01101000000000010000000000110010
+11011000010000001111111111111111
+10011000010001100111110000000000
+00100100011000101000000000000000
+01101000000000100000000000110100
+00100000001110000010000111010011
+10011101000001100111111000000000
+00100000001000000010000111010100
+10011100010001100111111000000000
+00011111111001100111110000000100
+00100100011000010000000000000000
+00011000000000000111111000000000
+01100000000000010000000000110010
+00100000001000000111111111100111
+00011111111000100000010000000000
+01000100100100101100000000000100
+01100000000010100000000000110100
+01110000010001010101101100000001
+01011000000000001111111111111111
+01100000000000010000000000110010
+01110000000000000111001100000001
+00100000011000000000000000000000
+01000100100100110100000000000100
+00100000010000000010000111001001
+00100100011101000000000000000000
+01111000010101000111110000000000
+01110000000000000001000100100000
+01111001001111111000000000001011
+00100000010000000010101001001111
+00100000010000000010001011100110
+11000101000001011010000111110100
+00100000010000000010010001010101
+00100100001110100010000111100111
+01000100100100111100000000000100
+01111000010101000111110000000000
+00011100010000100111111000000000
+01100000000000100100000011001010
+01111000001110000111110000000000
+01111000001101001111110000000000
+01110000000010101001100100101010
+00100000001000000111110110000110
+01000100100101000100000000000101
+00100000010000000010101001001101
+11011000001000000000000000010000
+00100000010000000010001011011100
+01111000010110000111110000000000
+01111000010101001111110000000000
+00100000010000000010100000011000
+00100000010000000010010000110101
+01000100100101001100000000000101
+00100000010000000010010001111100
+00100000001101101010001000000010
+00100000010000000010010001010101
+00100100001110100010000111111100
+00100000001000000010000111101100
+01101000000000001000000000110001
+01111001001111111111111000000001
+01100000000000001000000000110001
+00100000010000000010101010001000
+00100000010000000010100001000001
+01111000001101000111110000000000
+01110000000010101001100100101011
+00100000001000000111110110000110
+01000100100101010100000000000101
+01111001001000000000000000001001
+00011010001000100111111000000000
+01100000000000010000000000011110
+00011000000000000111001001010000
+11011000101000000000010000111111
+00011010001000001000110000000001
+11101000110000001000000000000000
+00011010001000100000110000000000
+11000010100000000111111100000001
+11011000101000000000000000110000
+00100000010000000111111100000001
+01111000010101110111110000000000
+01101000000000001000000001110111
+10011000000000000000100000000000
+01110000000000001000101000000001
+00100000001101001010001000011100
+01110000000000001000101000000001
+01101000000000001000000000110000
+11000100000000001000000000000000
+01101000000000001000000001110011
+01100000000000001000000010001010
+01101000000000001000000001110100
+01100000000000001000000010001011
+00100000011000000000000000000000
+01000100100101011100000000000101
+01101000000000010000000000011110
+10011000000000000000101000000000
+00011000000000000111001001010000
+11011000110000000000010000111111
+00100000001110110111111100000001
+11011000110000000000000000110000
+00100000001000000111111100000001
+11011111001000000000000000000001
+01101000000010001000000000010101
+00011000010000001000010000000001
+00101000010000011111111000000001
+00100100001000001010001000110001
+11011000010000000000000000000000
+01100000000010001000000000010101
+00011000010011111111111001010000
+11011010001000000100000001000000
+10011010001000001010001000000000
+11101010001000001000000000000000
+11000010100000001010001000111001
+11000011100000000000000000000000
+11000011100000011000000000000000
+11000010000000000010001000101101
+00100000011000000000000000000000
+01000100100101100100000000000101
+11011010011000000010001001101010
+00100000010000000010001001100001
+00100100011000101000000000000000
+00011010001000100111111000000000
+01100000000000010000000000011110
+00011000000000000111110000000000
+00100000011000000000000000000000
+00100000010000000010011100100101
+00100000001000001010001001001011
+01101000000000010000000000011110
+00011111111000001000101000010111
+01101000000000001000000001000111
+11100000101000001000000000000000
+11011010011000000010001010101010
+00100000001000000010001001100001
+01101000000000001000000001000111
+00101111111011111111111000000011
+00100000001000001010001001010000
+00011000000000000111110000000001
+00100000011000000000000000000000
+00011000000000000111110000000000
+00100000011000000000000000000000
+11011010011000000010001010100111
+00100000001000000010001001100001
+01101000000010010000000000011110
+11011010011000000010001011001111
+00100000001000000010001001100001
+01101000000010001100000111001111
+11011010011000000010001001110101
+00100000001000000010001001100001
+01000100100101101100000000000101
+01101000000010110100000111010000
+11011010011000000010001001101110
+00100000001000000010001001100001
+11011010011000000010001001111011
+00100000001000000010001001100001
+11011010011000000010001011000110
+01000100100101110100000000000101
+11011010001000000100000001000000
+11011111001000000000000000000001
+11101010001000001000000000000000
+00011010011000100111101000000000
+00011010001000001010001001010000
+11000010000000000010001001100100
+00011000000000000111110000000001
+00100000011000000000000000000000
+11000010100000000010001001100110
+11000010100000011010001001100110
+00011000000000000111110000000000
+00100000011000000000000000000000
+11000010100000011010001001110000
+11000011000000000010001001100110
+00011010001000001000110000010000
+11101000110000110000000000000000
+10011000010001100111110000000000
+00100000011000101000000000000000
+00100000001000000010001001100110
+11000011000000000010001001100110
+00011010001000001000110000010110
+11101000110000001000000000000000
+10011000010001100111110000000000
+00100000011000101000000000000000
+00100000001000000010001001100110
+11000011000000001010001001100110
+00100000010000000010001010110011
+00100000010000000010001010010111
+10011000010001100111111000000000
+00011111111000001111111000000001
+00100000001000010010001010010001
+00011000110000100010010000000000
+01100000000001001000101010100010
+01101000000000001100010011000000
+00100100001110100010001010001001
+01101000000001001000101010100010
+00011010010000100000110000000000
+00011111111000001111111000000101
+00100000001000000010001010001100
+01101000000001001000101010100010
+00011010010000100000110000000000
+00011111111000001111111000010100
+00100100001000010010001001100110
+00011000010000100100001000000000
+00100000010000000010001010111111
+00011000000000000111110000000000
+00100000011000000000000000000000
+10011000000000000010010000000000
+00011010001000001000110000000010
+11101000110000010000000000000000
+00100000001110100010001010001101
+00100000010000000010001010111111
+00100000001000000010001001111100
+00011111111100010001011000000000
+00011001011011001001011000000000
+00100000001000101010001010100001
+00101001011000000001111000001111
+00100100011000001000000000000000
+00011000010100010001011000000000
+00011001011011001001011000000000
+00100100011000101000000000000000
+01111001001000000000010000011100
+00100000011000000000000000000000
+00011000010100010001011000000000
+00011001011011001001011000000000
+00101001011000000001111000001111
+00100100011000001000000000000000
+01111001001000000111111000011100
+00100000011000000000000000000000
+11000011000000000010001001100110
+00011000000000000111110000000000
+00100000011000000000000000000000
+11000011000000000010001001100110
+00011010001000001000110000000001
+11101000110000001000000000000000
+11000010100000000010001001100110
+00011010001000001000110000010111
+11101000110000001000000000000000
+11000011000000011010001001100110
+00011000000000000111110000000000
+00100000011000000000000000000000
+00011010001000001000110000000001
+11101000110010001000000000000000
+00011100010000100111111000000000
+00101000010011111111111000000001
+00011010001000001000110000000100
+11101000110010100000000000000000
+00100000011000001000000000000000
+00011010001000001000110000001000
+11101000110000110000000000000000
+00100000010000000010100001010100
+00011101000000100111111000000000
+00100000011000000000000000000000
+00011010001000001000110000000010
+00011010001000001000101000000100
+11101000110000010000000000000000
+10011000010000001001011000000000
+00011001011000100111111000000000
+11100000101000100000000000000000
+00100000001000000101010001001001
+11000011000000001010001001100110
+00100000010000000010001010110011
+10011011011000001111111000000000
+10011011011000001111111000000000
+10011000111000001111111000000000
+10011000010001100111110000000000
+00100100001000010010001001100110
+00011000000000000111110000000000
+00100000011000000000000000000000
+11000011000000000010001001100110
+00011000010000100111111000000000
+10011010001001100111110000000000
+00100000001111110010001001100110
+00011010001000001000110000000001
+11101000110000001000000000000000
+11000010100000000010001001100110
+11101010001000001000000000000000
+01111001001111111111111000000111
+11100010001000001000000000000000
+00100000001000000010001001100110
+01000100100101111100000000000101
+00100000010000000010101001001111
+00011100010000001100001000000001
+00100000010000000010100011100010
+00011000000000000100100000000011
+00100000010000000010100011010010
+00100000010000000010101001010001
+00100000010000000010101001010110
+00100000010000000010101001100100
+00100000001000000010011101100010
+01000100100110000100000000000110
+00100000010000000010101001001101
+00011100010000001100001000000001
+00100000010000000010100011100010
+00011000000000000100100000000011
+00100000010000000010100011001100
+00100000010000000010010000101010
+00100000010000000010100111110001
+00100000010000000010101001011011
+00100000010000000010100111101011
+00100000010000000010101000001101
+00100100011011000000000000000000
+00100000010000000010100110111011
+00100000001000000010010100011100
+01000100100110001100000000000110
+01101000000000001000000110000001
+10011000000000000000100000000000
+00011000000000000000001000000001
+00100000010000000010001011011010
+00100000001000000010001011100100
+01101000000000001100000010010011
+11000100000000000000000000000000
+00011000000000000000111000000100
+00100000010000000111111100010110
+00100100011110100000000000000000
+01101000000010010100000010101101
+00011000000000000000111000000100
+00100000010000000010011100011100
+00100000011101000000000000000000
+00100000010000000010001100001000
+00011000000000000000111000000100
+01101000000000010100000010101111
+00100100001011000111111100001000
+00011000000010100111111000000000
+10011110101000010111111000000000
+00100000001000000111111100001000
+01000100100110010100000000000110
+01110000000000011000000100000000
+01111000010110000111110000000000
+01111000010101110111110000000000
+00100000010000000010100010100100
+00011100010000010100001111111100
+00011000000000000100100000000001
+00100000010000000010100011011000
+00100000010000000010100011001100
+01111001010000000000000000011101
+01101000000000001000000000000110
+00011111111000001111111000000001
+01100000000000001000000000000110
+00100000010000000010100011110010
+00100000010000000010100111101011
+00100000010000000010101000010100
+00100100011011000000000000000000
+01000100100110011100000000000110
+00011000000000000011011000000000
+00100000010000000010100011111001
+01101000000000001000000000000111
+00011111111000001111111000000001
+01100000000000001000000000000111
+00100000010000000010100011011000
+00100000010000000010101001001101
+00011100001000011100001000000010
+00011000000000000100100000000001
+00100000010000000010100011010010
+00100000010000000010100011110010
+00100000010000000010101001010001
+00100000010000000010101001011111
+00011100010000100111111000000000
+01100000000000100000000101100001
+00100000010000000010101001100100
+00011000000000000000001000000010
+00011000000000000000100000000000
+00100000010000000010101001101011
+00100000010000000010011101100110
+00100000010000000010001100110010
+00011100001000010100001111111101
+00011100110000001100110000000001
+00100000011000000000000000000000
+01000100100110100100000000000110
+01101000000000001100000011010001
+00100000011110100000000000000000
+11011000101000000000000110001110
+01101000000000001100010100010101
+00011111111000100111001000000000
+00011111111000001111111000000001
+11100000101000001000000000000000
+00011000101000100000010000000000
+00011111111000001111111000000001
+01100000000000010100000111011100
+00011000010000100000101000000000
+01011000000000000000000000001001
+11100000101000001000000000000000
+11011000110000000100010100010110
+00100000010000000111111100000001
+11011010011000000100010110001101
+11011111001000000000000000000100
+00100000010000000010001101010100
+11011010011000000100010101110111
+11011111001000000000000000000001
+00100000010000000010001101010100
+00011000000000000000001000001010
+01110000010000011101101100000010
+01011000000000000000000110001110
+01100000000000010000000101101111
+00100000010000000010101001001101
+00100000010000000010100011010010
+00100000010000000010101001010001
+00100000010000000010101001011111
+00100000010000000010101001100100
+00100000010000000010101001101011
+00100000010000000010011101100110
+00100000011000000000000000000000
+00011000101000100000010000000000
+00011010011000100000110000000000
+11101000110000001000000000000000
+00100000011110100000000000000000
+00011111111000111111111000000000
+11000010000000000010001101011000
+00011111111000100010001000000000
+00011111111000001111111000000010
+00011111111000100000111000000000
+01101000000000010100000111011100
+10011000111000001111111000000000
+01100000000000010100000111011100
+00011000010000100000101000000000
+00011010001000100111111000000000
+00011111111000001111111000000001
+11100000101000001000000000000000
+00011010011000100000110000000000
+11101000110000001000000000000000
+11101000110000001000000000000000
+11100000101000001000000000000000
+00011010001000100111001000000000
+00100000001000000111111100000001
+01101000000000001100000010010011
+11000100000000001000000000000000
+00011000000000000000111000000101
+00100000010000000111111100010110
+00100100011110100000000000000000
+01101000000010010100000010110001
+00011000000000000000111000101000
+00100000010000000010011100011100
+00100000011101000000000000000000
+00011000000000000000100000000000
+01110000000000000001000000001000
+01111001001111111000000000001011
+00100000010000000010001101111010
+00011000000000000000111000000101
+01101000000000010100000010110011
+00100000001000000111111100001000
+01000100100110101100000000000110
+01111000010110000111110000000000
+00100000010000000010100010100100
+01101000000000001000000000001000
+00011111111000001111111000000001
+01100000000000001000000000001000
+00011000000000000100110000000000
+00100000010000000010100011100010
+00011100010000001100001000000001
+00011000000000000100100000000010
+01000100100110110100000000000110
+00100000010000000010100011001100
+00100000010000000010100111101011
+00100000010000000010101000010100
+00100100011011000000000000000000
+00100000010000000010100011111001
+01101000000000001000000000001001
+00011111111000001111111000000001
+01100000000000001000000000001001
+00011000000000000011011000000000
+00100000010000000010101001001101
+00011100001000011100001000000010
+00011000000000000100100000000001
+00100000010000000010100011010010
+00100000010000000010101001010001
+00100000010000000010101001011111
+00100000010000000010101001100100
+00100000010000000010011001001101
+00011000000000000000100000000000
+11011001011000000000011000000000
+00110101001100110000001000000000
+00011101000000011101000000000011
+00011100001000010100001111111101
+01000100100110111100000000000110
+00011100110000001100110000000001
+00100000010000000010100011001100
+00100000010000000010100111101011
+00100000010000000010101000000111
+00100100001011000010001110100100
+00100000010000000010101001101011
+00100000010000000010010100011110
+11000101000001011010001110101011
+01000100100111000100000000000111
+01101000000000001000000000010000
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000001000000000010000
+00100000010000000010101001001111
+00100000001000000010001110011011
+01000100100111001100000000000111
+01111001001111111101000000000001
+01111001001000000101000000000000
+01101000000000001000000000001010
+00011111111000001111111000000001
+01100000000000001000000000001010
+00100000010000000010101001001101
+00011100001000011100001000000010
+00100000010000000010100011010010
+00100000010000000010101001010001
+00100000010000000010101001011111
+00100000010000000010101001100100
+00100000010000000010011001001101
+00101101000000000000011000000011
+00100000001000001010001110111100
+00110111110010111000001000000000
+00100000001000000010001110111000
+01101000000000100000000101100101
+00011111111000011111111000000011
+00011111111000100101000000000000
+01000100100111010100000000000111
+01101000000000110000000101111000
+01100000000000110000000001000000
+00100000010000000010010000110101
+00100000010000000010010001111100
+00100000001101101010001111001000
+00100000010000000010010001010101
+00100100001110100010001111000011
+00100000011000000000000000000000
+01000100100111011100000000000111
+00100000010000000010010001000000
+00100000010000000010001000111011
+00100100011000101000000000000000
+01110000000000000011000100000000
+00100000010000000010100001000001
+00100000001000000010001000100011
+01000100100111100100000000000111
+00100000010000000010100001010000
+00100000010000000010001111110011
+00100000011101000000000000000000
+01000100100111101100000000000111
+00100000010000000010110001101001
+00100000010000000110110010101010
+00100000010000000010010100010100
+00100100001101101010001111100010
+00100000010000000010101010001000
+00100000010000000110110011000010
+00100000010000000010010010001001
+00100000010000000010011101010111
+00100000010000000010011100101000
+00100000010000000101110100001000
+01101000000000001000000000001011
+00011111111000001111111000000001
+01100000000000001000000000001011
+00100000010000000010100001000001
+01000100100111110100000000000111
+00100000010000000010101110110001
+00100000010000000010101001111111
+00100000001000010010001111101011
+00100000010000000010000110100111
+00100100001101000010001111101011
+00100000010000000010011011110011
+00100100001110100010001111010011
+00100000011000000000000000000000
+01000100100111111100000000000111
+01110000000000010101000100000000
+01110000000000010111111100000000
+00100000010000000010010001011101
+01111001001111111000000000010001
+00100000010000000111111110110000
+01101000000000001000000000110000
+00100000011000000000000000000000
+01000100101000000100000000001000
+00100000010000000010000111001001
+00100100011101000000000000000000
+00011000100000100000010000000000
+00100000010000000010101001101111
+01100000000000001000000110000001
+00011000010000100000100000000000
+01110000000000000001000100100000
+01000100101000001100000000001000
+00100000010000000010101001001111
+00011000000000000000001000000010
+00100000010000000010011101001111
+00011100010000100111111000000000
+01100000000000100000000101100001
+00100000010000000010011101100010
+00100000010000000010101001001101
+01111000001101111111110000000000
+00100000010000000010010011110110
+00100000001011000010010000001101
+00100000010000000010100011111001
+00100000010000000010010001010101
+00100100001110100010001111111011
+11000110100000100000000000000000
+01110000000000000111110000110100
+01111001001000000000000000000011
+00100000011000000000000000000000
+01111000001110000111110000000000
+00100000010000000010010000110101
+00100000010000000010100010100100
+01000100101000010100000000001000
+00100000010000000010001011110010
+00100000001011000010010000011001
+00100000010000000010010001010101
+00100100001110100010010000010000
+01111000010110000111110000000000
+00011101000000100111111000000000
+01100000000000100100000011001010
+00100000011000000000000000000000
+01111000001101001111110000000000
+11000101100000100010010000011111
+01111001001111111000000000000100
+01110000000000000111110000000011
+01110000000000000111110100110011
+00100000010000000110001011111000
+00011000100000100111111000000000
+01100000000000001000000001110111
+00011000000000000111111000000000
+01100000000000110000000000111000
+01101000000000001000000000110001
+01111001001000000111111000000001
+01100000000000001000000000110001
+00100000010000000010101010001000
+01111000010101001111110000000000
+01111000001101000111110000000000
+00100000011000000000000000000000
+01000100101000011100000000001000
+01111000010101101111110000000000
+01111001001111111000000000000101
+01111001001111111000000000001010
+01111001001111111000000000010000
+01111001001111111000000000001111
+01101000000000001000000001000111
+01111001001111111111111000000101
+01111001001000000111111000000100
+01100000000000001000000001000111
+00100000011000000000000000000000
+01000100101000100100000000001000
+01110000000000000001000100100000
+01110000000000000100011101010000
+01101000000000010100000010111111
+01100000000000010000000000111110
+00011100010000100111111000000000
+01100000000000100100000011001010
+00100000011110000000000000000000
+00011101000000100111111000000000
+01100000000000100100000011001010
+00100000011000000000000000000000
+01000100101000101100000000001000
+00100000010000000101110100000100
+00100000010000000010010001011001
+01100000000000001000000001000110
+01011000000000000000000000000000
+01100000000000010000001001011101
+01011000000000000001110010000000
+01100000000000010000000001010001
+01101000000000001000000000110000
+01111001001000000111111000000000
+01100000000000001000000000110000
+01110000000000000100101100000000
+01110000000000000100110000000000
+01110000000000001010000000000000
+00100000001000000010101010001000
+01000100101000110100000000001000
+00011000000000000111111000000000
+01100000000001000100000110111110
+11100000101001000000000000000000
+00100000010000000010000111000101
+00100000001000000010001001010100
+01101000000000001000000000010001
+00011111111000001111111111111111
+01100000000000001000000000010001
+00100000011000000000000000000000
+01101000000000001100000011001111
+00011111111000001111111000000001
+01100000000000001100000011001111
+00100000011000000000000000000000
+01000100101000111100000000001000
+01101000000000001100000111001110
+11000000000000011010010001100010
+01101000000000001000000001001000
+11000000100000001010010001100110
+00100000010000000100110100000110
+00100100001000101010010001100110
+00100000010000000010000110100100
+01110000010000011100111000000000
+01000100101001000100000000001001
+00100000010000000011001110101111
+00100000010000000010011011101001
+01110000000010101001100100000010
+00100000010000000111110110000110
+00100000010000000101110011110111
+00100000010000000100110101101011
+00100000010000000111010101111101
+01101000000000001000000000110000
+01111001001111111111111000000000
+01100000000000001000000000110000
+01110000010001101000000100000000
+01101000000000001000000001001100
+00101111111000011000000000000000
+00100000001000001010010001110110
+01111001001111111000000000000001
+01101000000000001000000001000111
+11000011000000011010010001111000
+01101000000000001000000001001011
+11000100000000110000000000000000
+01111001001111111000000000000010
+00100000011000000000000000000000
+01000100101001001100000000001001
+01101000000000001000000101110100
+00100000011110100000000000000000
+00011111111000100000100000000000
+00100000010000000010010100010100
+00100100011101101000000000000000
+00011000000000000000001000000000
+00100000010000000010011101010111
+00011000100000100111111000000000
+01100000000000001000000001110111
+00011000000000000111111000000000
+01100000000000001000000101110100
+00100000011000000000000000000000
+01000100101001010100000000001001
+01101000000000001000000000110000
+11000011000000010010010010010110
+00011000000000000000001000000111
+11000101100000111010010010010101
+00100000010000000010011100100101
+00100100001000001010010010010110
+00100000001101110010010010010110
+00100000010000000010010011000001
+01011000000000000000000000000010
+01100000000000010100000011001000
+00100000011000000000000000000000
+00100100011101110000000000000000
+01000100101001011100000000001001
+00100000010000000010001001000011
+00100100001000101010010010100111
+01101000000000001000000001000111
+11000011000000011010010010110000
+11000101000000101010010010110100
+01101000000000001000000101111111
+11000010100000110010010010111010
+01101000000000010100000011001000
+00011111111000001111111111111111
+01100000000000010100000011001000
+00100000001110100010010010100101
+01101000000000001100000011000101
+10011000000000000000001000000000
+00100000011000000000000000000000
+01000100101001100100000000001001
+00100000010000000010011010000111
+00100000010000000010011100100101
+00100000001000001010010010110000
+00100000010000000110000000001010
+00100000001101000010010010111110
+01101000000000001000000001001011
+11000010100000110010010011000000
+11000101000000101010010010110100
+01101000000000001000000101111111
+11000010100000110010010010111010
+00011000000000000000001000000001
+00100000011101001000000000000000
+00011000000000000000001000000000
+00100000011000000000000000000000
+01000100101001101100000000001001
+01101000000000001000000000011001
+10011000000000000000001000000000
+11000001100000001000000000000000
+00011000000000000000001000000000
+00100000011000000000000000000000
+01101000000000001000000101011000
+00011111111000010000001000001111
+01111001001000000000000000000101
+00100000011000000000000000000000
+00011000000000000000001000010011
+00100000001000000010010011000001
+00100000010000000010010011001010
+01000100101001110100000000001001
+01101000000010001000000001000111
+01111001001000000000010000000011
+01100000000010001000000001000111
+00011000001000100111111000000000
+01100000000000001100000011000101
+01011000000000001111111111111111
+01100000000000010100000011001000
+00100000011000000000000000000000
+01000100101001111100000000001001
+01101000000000001000000001001100
+00101111111011111111111000000101
+01101000000000010100000111011100
+00100000001000001010010011100000
+00011000000000000000001000000011
+00011111111001100111110000010001
+00100000011000010000000000000000
+00011000000000000000001000000100
+00011111111001100111110000011011
+00100000011000010000000000000000
+00011000000000000000001000001010
+00011111111001100111110001111001
+00100000011000010000000000000000
+00011000000000000000001000001011
+00011111111001100111110010110111
+00100000011000010000000000000000
+00011000000000000000001000001110
+00011111111001100111110011100000
+00100000011000010000000000000000
+00011000000000000000001000001111
+00100000011000000000000000000000
+00011000000000000000001000000011
+00011111111001100111110000010001
+00100000011000010000000000000000
+00011000000000000000001000000100
+00011111111001100111110000110110
+00100000011000010000000000000000
+00011000000000000000001000001010
+11011000010000000000000101101111
+10011000010001100111110000000000
+00100100011000010000000000000000
+00011000000000000000001000001110
+11011000010000000000001010100111
+10011000010001100111110000000000
+00100100011000010000000000000000
+00011000000000000000001000001111
+00100000011000000000000000000000
+01101000000000001000000000110000
+11000011000000001010010011110101
+01101000000000010000000000110010
+00100000001110100010010011110101
+00100100001101110010010011110111
+00100000010000000010101001001111
+00011101000000001100001000000001
+01111000001010000111110000000000
+01101000000000010000000000111110
+00011111111000110111111000000000
+11011000010000000000010100000000
+10011000010000001111111000000000
+00100000010000000010101000100100
+00100000010000000010100011101010
+00011000000000000100100000000011
+00100000010000000010100011001100
+00100000010000000010010000101010
+00100000010000000010100111110001
+01000100101010000100000000001010
+01101000000000010000000000111110
+00011111111000110111111000000000
+00100000010000000010101000100100
+00100000010000000010100111101011
+01111000001001101111110000000000
+01101000000000010000000000111110
+11011000010000000000001110111011
+10011000010000001011011000000000
+00110111110000011000010000000000
+00011011010000100000010000000000
+01100000000010110000000010011010
+01111000010001101111110000000000
+00100100011011000000000000000000
+11011101001000000000001110111011
+00011100001000100101000000000000
+00100000001101011010101100000101
+00100000011000000000000000000000
+01000100101010001100000000001010
+00100000010000000010010011110000
+00100100001011000010100011111001
+00100000010000000010100110111011
+11000101100010001010010100011100
+01101000000000010000000011110110
+00011111111000001111111000000001
+01100000000000010000000011110110
+00011100001000110000010000000000
+00011000010000011001110001000000
+01000100101010010100000000001010
+01111000001000111111110000000000
+01111000001001010111110000000000
+01111000001001011111110000000000
+00001001100000000000000000000011
+00011001100011001111111000000000
+01100000000000001000000101011101
+00001001100000000000000000000100
+00001000000000001000000000000111
+00011001100000100111111000000000
+01100000000000001000000000011001
+00001001100000000000000000000011
+00011001100011001111111000000000
+01100000000000001000000101011110
+01101000000000001000000000011001
+00011111111001100111110000000011
+00100000001000010010010100110011
+11000000000000111010010100110011
+01101000000000001000000001001100
+00101111111011111111111000000101
+01111001001000001010101000000001
+01000100101010011100000000001010
+00001001100000000000000000001000
+01111000010001011111110000000000
+01111000010001010111110000000000
+00100000001000110010011000110001
+11000101100010001010010100111100
+01101000000000010000000011111000
+00011111111000001111111000000001
+01100000000000010000000011111000
+01000100101010100100000000001010
+01101000000000001000000101011101
+00101111111000000000111000000000
+01111001001000001000000000001010
+00100000001000001010010101001100
+10101000100000000000111000000000
+00100000001000001010010101001011
+11000101100000111010011001001101
+01101000000010001000000010110000
+10101000010000000000111000000000
+00100100001000001010011001001101
+01101000000000001000000001000111
+01111001001111111111111000000101
+01111001001000000111111000000100
+01100000000000001000000001000111
+01111000001101101111110000000000
+01000100101010101100000000001010
+01101000000000001000000000011001
+00011111111000100000001000000000
+11000101000001010010010101011011
+01101000000010001000000101011110
+01101000000000001000000001000111
+01111001001111111111111000000000
+00101000010011111111111000000000
+01111001001000001111111000000000
+00101000010011111111111000000001
+01111001001000001111111000000001
+01100000000000001000000001000111
+00101000010011000000000000000001
+00100000001000001010010101011011
+00100000010000000010011010000111
+01000100101010110100000000001010
+11011000010000000000000000000000
+00100000010000000010101000011100
+00011000001000010111111000001111
+11000000000000001010010110000111
+11000000000000000010011001001101
+11000000000000010010011001011001
+01101000000010001000000101011110
+01101000000000001000000001000111
+10101000010000000000100000000000
+00100100001000001010010101101001
+11000101100001010010010101101000
+11000011000000111010010101101001
+01111001001000000000000000001111
+01000100101010111100000000001010
+00011000001000100111111000000000
+11000000000000011010010110001001
+11000000000000100010010110001101
+11000000000000111010010101111000
+11000000000001000010010110001100
+11011000010000000000000000000100
+00100000010000000010101000011100
+11000000000001010010010110001000
+11000000000001011010010110001011
+11011000010000000000000000001000
+00100000010000000010101000011100
+11000000000001110010010110001000
+11000000000001111010010110001011
+00100000011000000000000000000000
+01000100101011000100000000001011
+01111000001001101111110000000000
+01111000001001001111110000000000
+01111000001001110111110000000000
+11011000101000000000000011010001
+00011000000000000111001000011110
+00001001100000000000000000001000
+00011001100010010111111000000000
+11100000101000001000000000000000
+11000010000000000010010101111110
+11000101100000111010011001001101
+00001001100000000000000000010000
+01111101001000110000000000001000
+00100000001000110010011000111101
+00100000001000000010011000100000
+00100000001000000010011001001101
+01111001001000000000000000010000
+01111000001001100111110000000000
+00100000001000000010010110001110
+01111001001000000000000000010000
+01111001001000000010101000000010
+01111000001001101111110000000000
+01000100101011001100000000001011
+11000101000000001010011001001101
+00101010101011000000000000000001
+00100000001000001010010110011010
+01111000010000111111110000000000
+01111000001001101111110000000000
+01111000010001100111110000000000
+00011100010000001001011000000010
+00110100010100110000010000000000
+00100100001011000010011000111101
+01111001001000000000000000010000
+01111000001000111111110000000000
+01000100101011010100000000001011
+01111000001001110111110000000000
+01111000001001001111110000000000
+00001001100000000000000000000011
+00011001100011001111111000000000
+01100000000000001000000110000000
+00001001100000000000000000000101
+11000101000010000010010110100101
+00011001100010010111001000000000
+00011111001010010111001000000000
+00100000001000000010010110101000
+00001001100000000000000000000101
+00011001100000110111001000000000
+00001001100000000000000000000011
+01000100101011011100000000001011
+00011111001000100111111000000000
+01100000000000010000000101011111
+00100000001110100010010111101000
+10011110101001100111110000000000
+00100000001000010010011000111101
+01000100101011100100000000001011
+01111001001111111000000000000000
+01101000000000001000000110000000
+00011111111000010111111000000011
+11011000101000000000010101010001
+11000000000000011010010110111010
+11000101000010001010010111100100
+01101000000000001000000110000000
+00011111111000010111111000000011
+11000000000000010010010110111111
+11000000000000001010010111010011
+00100000001000000010011000111101
+01101000000000010000000101011111
+00011111111001100111110001110000
+00100100001000010010011000111101
+11000101000001111010011000100000
+00100000001000000010010111100100
+01000100101011101100000000001011
+11000101000001111010011000100000
+01101000000000010000000101011111
+11011000010000000000001011100000
+10011000010001100111110000000000
+00100000001000010010011000111101
+01101000000000001000001001100011
+11000011000000000010010111001001
+11000011000000001010010111001110
+00100000001000000010011001001101
+01110000000000100110000100000001
+01101000000000010000001001011101
+11000000100000000010011001001101
+11011000101000000001000000000000
+00100000001000000010010111100100
+01110000000000100110000100000010
+01101000000000010000001001011111
+11000000100000000010011001001101
+11011000101000000001010000000000
+00100000001000000010010111100100
+01000100101011110100000000001011
+11000101000001111010011000100000
+01101000000000010000000101011111
+11011000010000000000001011100000
+10011000010001100111110000000000
+00100000001000010010011000111101
+01101000000000001000001001100001
+11000000000000001010010111011101
+11000000000000010010010111100001
+00100000001000000010011001001101
+11011000101000000001000000000000
+01101000000000010000001001011101
+10011000101000001000101000000000
+00100000001000000010010111100100
+11011000101000000001010000000000
+01101000000000010000001001011111
+10011000101000001000101000000000
+00001001100000000000000000001000
+00011001100010010111111000000000
+11100000101000001000000000000000
+11000010000000000010010111100100
+01000100101011111100000000001011
+00001001100000000000000000010000
+00100000001000110010011000110111
+01101000000000001100001101100011
+11000000000000001010011001001101
+11000101000010001010011000001101
+11000101000001111010011001001010
+01101000000000001000000110000000
+00101111111000000000011000000011
+00100000001000001010011000001101
+01101000000000010000000101011111
+00100000001110100010011000001101
+01000100101100000100000000001100
+01101000000000001000001001100001
+11000000000000001010010111111001
+11000000000000010010011000000011
+00100000001000000010101010001100
+01101000000000010000001001011101
+01101000000010010000000101011111
+10011000010000001111111000000000
+01100000000000010000001001011101
+11000000000000000010101010001100
+01101000000010010001000000000000
+00011000010000001000010000000100
+10011000010001100111110000000000
+00100000010000101010011101000111
+00100000001000000010011000001101
+01101000000000010000001001011111
+01101000000010010000000101011111
+10011000010000001111111000000000
+01100000000000010000001001011111
+11000000000000000010101010001100
+01101000000010010001010000000000
+00011000010000001000010000000100
+10011000010001100111110000000000
+00100000010000101010011101001011
+00100000001000000010011000001101
+01000100101100001100000000001100
+01101000000010001000000001001100
+01101000000000001000000110000000
+00101111111000000000011000000011
+01111001001000001000010000000110
+01111101001000001000010000000111
+01100000000010001000000001001100
+00100100001000001010011000010110
+01111001001000000000000000000001
+11000101100010001010011000100000
+00101000010011111111111000000110
+00100000001000001010011000100000
+01101000000000010000000011111010
+00011111111000001111111000000001
+01100000000000010000000011111010
+01111001001000000000000000000101
+01111001001111111000010000000111
+01111001001111111000000000000001
+01100000000010001000000001001100
+01000100101100010100000000001100
+01101000000010001000000101011110
+01101000000000001000000001000111
+01111001001000000111111000000101
+00101000010011111111111000000010
+01111001001000001111111000000010
+00101000000011111111111000001010
+01111001001000001111111000000111
+01100000000000001000000001000111
+01101000000000010000000101011111
+00100100001110100010011001001101
+01101000000000001000000001001100
+01111001001111111111111000000111
+01100000000000001000000001001100
+01101000000000001000000110000000
+00101111111000000000111000000001
+00100000001000000010011001001101
+01000100101100011100000000001100
+01111000010101101111110000000000
+01101000000000010000000000011010
+00011111111000001111111000000001
+01100000000000010000000000011010
+00100000001000000010011001001101
+01101000000000010000000000011100
+00011111111000001111111000000001
+01100000000000010000000000011100
+00100000010000000010011000111110
+11000101100010001010011000111101
+01111001001000000000000000000101
+00100000001000000010011001001101
+01000100101100100100000000001100
+01101000000000001000000110000000
+00101111111000000000011000000011
+00100100001000001010011001000110
+01101000000010001000000001001100
+01111001001111111000010000000110
+01100000000010001000000001001100
+00100000011000000000000000000000
+01101000000010001000000001001100
+01111001001111111000010000000111
+01100000000010001000000001001100
+00100000001000000100110000001011
+01101000000000001000000001000111
+01111001001000000111111000000101
+01100000000000001000000001000111
+01000100101100101100000000001100
+01111000010011101111110000000000
+01111000010011100111110000000000
+01111000010001101111110000000000
+01111000010001100111110000000000
+01111000010001001111110000000000
+01111000010001110111110000000000
+01111000010000111111110000000000
+00100000001100001010100011111001
+00110111110100111000001000000000
+00100000000000000000000001100100
+00100000001000000010100011111001
+01000100101100110100000000001100
+01111000001001001111110000000000
+01111000001001100111110000000000
+00001001100000000000000001001000
+00101111111011111111111000111010
+01111001001000001000000000000000
+00011100000000100000010000000000
+01010111111000000100000000000000
+01010111111000000011110000000000
+01111000001010101111110000000000
+00111000000010111111111111111111
+00111000000011001111111111111111
+00100000000000000000000000100000
+00101001101010000000000000000000
+00011101100000100111111000000000
+01100000000000011000000101111000
+00011101101000100111111000000000
+01100000000000001000000101111011
+00011000010000100100000000000000
+00100000001000001010011001101110
+00100000001000000010011000111101
+01000100101100111100000000001100
+00001001100000000000000001001000
+01010111111000000011111000000000
+01010111111000000000100000000000
+01010111111000000101110000000000
+01010111111000000010010000000000
+00011000000000000111111000000000
+00001001100000000000000000010000
+00100000001000110010011000111101
+01011111111111111111111111111100
+10011010010000010111111000000000
+01100000000000100000000101100101
+00011011101000100111111000000000
+01100000000000011000000101110101
+00011011100000100111111000000000
+01100000000000001000000101110011
+00011000100000100111111000000000
+01100000000000001000000101110100
+00011101110000100111111000000000
+01100000000000010000000101111100
+00011100001000100111111000000000
+00001000000000001000001000100000
+00101000001000000001111000000010
+01111001001000001000000000001011
+00100000001000000010011001001101
+01000100101101000100000000001101
+01101000000000001000000001000111
+11000100000000011000000000000000
+01111001001111111111111000000011
+01111001010000000111111000000110
+01100000000000001000000001000111
+01101000000000001100000011000101
+11000000000010011010011010011100
+11000001000000111000000000000000
+01101000000000001000000001001011
+11000100000000110000000000000000
+01111001001111111111111000000110
+01111001001000000111111000000111
+01100000000000001000000001001011
+01111001001111111000000000000010
+01101000000000010100001001000110
+00100100011110100000000000000000
+01101000000000001000000001001011
+01111001001111111111111000000111
+01100000000000001000000001001011
+00100000001000000101001001011101
+01000100101101001100000000001101
+01101000000000001000010010110111
+00011111111000110111111000000000
+11000000000010001010011010111000
+11000000000010010010011011000000
+11000000000011000010011011101001
+11000000001111111010011010101000
+11000001100000011000000000000000
+01101000000000001000010010111000
+11000000000101011010011010110000
+11000000000010001010011010101011
+00100000011000000000000000000000
+01101000000000001000010010111000
+01111001001000000111111000000111
+00100000011000000000000000000000
+00100000011101001000000000000000
+01101000000000001000000000110000
+11000011100000100000000000000000
+01110000000000000111110000110001
+00100000011000000000000000000000
+00100000011101001000000000000000
+01101000000000001000000000110001
+00101111111011111111111000000100
+00100000001000001010011010110101
+00100000011000000000000000000000
+01111001001111111111111000000100
+01100000000000001000000000110001
+00100000011000000000000000000000
+01000100101101010100000000001101
+01101000000000001000000001001100
+01111001001000000111111000000010
+01100000000000001000000001001100
+01110000100000000001000100000001
+01101000000000001000000000110000
+00101111111011111111111000000100
+00100000011000000000000000000000
+01000100101101011100000000001101
+01101000000000001000000001001100
+01111001001111111111111000000010
+01100000000000001000000001001100
+01110000100000000001000100000000
+00100000011000000000000000000000
+01000100101101100100000000001101
+00011100010000100111111000000000
+01100000000000100100001000001100
+00011100010000001010001000000011
+00100000001101001010011011001100
+00011101000000001010001000000011
+01101000000010010000000000110010
+00011010001000100111111000000000
+01111001001111111111111000011011
+10011000010001101111110000000000
+01101000000000010000000001110101
+00100000010000000111111110000110
+00011000000001110010011000000000
+10011010011001100111111000000000
+00100000001000010010011011010110
+10011000010000001111111000000000
+10011010001000001111111000000000
+01100000000000100000000000110100
+01110000010001010101101100000000
+01101000000000001000000000110000
+01111001001000000111111000000001
+01100000000000001000000000110000
+01101000000000001000000001110011
+01100000000000001000000010001010
+01011000000000000000000000000000
+01100000000000011100000101101001
+01100000000000011100000101101100
+01100000000000001100000101011001
+01110000000010101001100100001011
+00100000010000000111110110000110
+01101000000000010100000011000001
+01100000000000010000000000111110
+00100100011101001000000000000000
+00011000100000001000111111111111
+00100000011000000000000000000000
+01000100101101101100000000001101
+01101000000000001000000000110000
+11000100000000001000000000000000
+01111001001111111111111000000001
+01100000000000001000000000110000
+01101000000000010100000010111111
+01100000000000010000000000111110
+01111000010101011111110000000000
+01110000000010101001100100001100
+00100000001000000111110110000110
+01000100101101110100000000001101
+01111000001101110111110000000000
+01101000000000001000000000110000
+11000010100000001010011100000000
+11000110000010001000000000000000
+01101000000000001000000001000111
+11000011100000011000000000000000
+01101000000000001000000001001000
+00100100011110100000000000000000
+01101000000000001000000001001011
+11000011100000110000000000000000
+00011000000000000111111000000000
+00100000011000000000000000000000
+11000011000000010010011100001111
+01101000000000001000000010001010
+11000000000000010010011100000110
+01101000000000001000000001000111
+11000010100000011010011100011000
+11000101100001000010011100011000
+00100100001101001010011100011000
+01101000000000001000000001001000
+00100100001110100010011100011000
+01101000000000001000000011101111
+00011111111000001111111111111111
+01100000000000001000000011101111
+00100100001110100010011011111110
+01110000000000001110111100010000
+00100000001000000010011100011000
+01101000000000001000000010001010
+11000000100000001010011100011000
+01101000000000001000000010001011
+00100000001110100010011100011000
+00011111111000001111111111111111
+01100000000000001000000010001011
+01101000000000001000000001000111
+11000011100000011000000000000000
+00100100011101101000000000000000
+01101000000000001000000010001010
+00011111111000001111111111111111
+01100000000000001000000010001010
+00100000011000000000000000000000
+01000100101101111100000000001101
+01111000010010000111110000000000
+00011000010000100011011000000000
+00100000010000000010001001100000
+01111000010101000111110000000000
+00100100011000101000000000000000
+00011000000000000011011000000000
+01111000001101000111110000000000
+00100000011000000000000000000000
+01101000000000001100000101011000
+10101000100000011111111000000000
+00100000011000000000000000000000
+01000100101110000100000000001110
+01111001001111111000000000000001
+01110000000000100110101000000000
+01101000000000001000001001100011
+00100000011110100000000000000000
+00101111111011111111111000000000
+11011000110000000001000000000000
+00100000010000001100110101111001
+01000100101110001100000000001110
+01101000000000001000001001101010
+11000000000000001010011100111011
+01110000000000100110101000000000
+01101000000000001000001001100011
+11000100000000001000000000000000
+11011000110000000001010000000000
+00100000010000000100110101111001
+01101000000000001000001001101010
+11000000000000001010011101000001
+00100000011000000000000000000000
+01101000000000001000001001100011
+01111001001111111111111000000000
+01100000000000001000001001100011
+01011000000000000000000000000000
+01100000000000010000001001011101
+00100000011000000000000000000000
+01101000000000001000001001100011
+01111001001111111111111000000001
+01100000000000001000001001100011
+01011000000000000000000000000000
+01100000000000010000001001011111
+00100000011000000000000000000000
+01101000000000001000001001100011
+01111001001000000111111000000000
+01100000000000001000001001100011
+00100000011000000000000000000000
+01101000000000001000001001100011
+01111001001000000111111000000001
+01100000000000001000001001100011
+00100000011000000000000000000000
+01000100101110010100000000001110
+00011101000000001100001000000001
+00100000010000000010100011101010
+00011000000000000100100000000011
+00100000010000000010100011010010
+00100000010000000010101001010001
+00100000010000000010101001011111
+00100000001000000010101001100100
+01000100101110011100000000001110
+00100000010000000010101001001101
+00011101000000100111111000000000
+01101000000010100100000011001010
+10011000010001100111111000000000
+11000001100000001000000000000000
+00101000001000000011111000000000
+00100100001000001010011101100001
+01101000000000001000000000011001
+00100000011110100000000000000000
+00100000010000000010011101001111
+00101000001000000011111000010000
+00100000001000001010011001001101
+00011100001000110000010000000000
+00011000010000011001110001000000
+01000100101110100100000000001110
+01111000001000111111110000000000
+01111000001001010111110000000000
+01111000001011011111110000000000
+01111001001111111000000000010000
+00011000100000100111111000000000
+00001000000000001000011000000011
+00011000001000100111111000000000
+00001000000000001000011000000100
+01101000000000001000000001000111
+00001000000000001000000000000100
+00001000000000001000011000000011
+01111000001001000111110000000000
+00001000000000001000011000001000
+01111000010011011111110000000000
+01111000010001000111110000000000
+01111000010001010111110000000000
+01111001001111111010101000000010
+11011000010000000000000000000000
+00100000010000000010101000011100
+01000100101110101100000000001110
+00011000001000010111111000011111
+11000000000010011010011110110100
+11000000000000000010011001001101
+11000000000000001010011001001101
+11000000000000010010011110010111
+11000000000000011010011111000101
+11000000000000100010011111001011
+11000000000000111010011110001100
+11000000000001000010011111001010
+11011000010000000000000000000100
+00100000010000000010101000011100
+11000000000001010010011111000111
+11000000000001011010011111001101
+11011000010000000000000000001000
+00100000010000000010101000011100
+11000000000001111010011111001101
+00100000001000000010011111000111
+01000100101110110100000000001110
+01111000001011101111110000000000
+01111000001001001111110000000000
+01111000001001110111110000000000
+00011000000000000111001000011110
+11011000110000000000000010110011
+11101000110000001000000000000000
+00001000000000001000011000001000
+11000010000000000010011110010010
+11000101000000111010011111110111
+00100000001000000010011001001101
+01000100101110111100000000001110
+01101000000000001000000110000001
+00011111111000100000100000000000
+01101000000000001000000010010000
+00011111111000100011100000000000
+01101000000000011100000010101010
+00011111111000100011101000000000
+01101000000000010100000010100100
+00011111111000100101110000000000
+01111000001001001111110000000000
+01111000001011100111110000000000
+00011100000000100010001000000000
+00100000010000000010100011100010
+01111000001010101111110000000000
+00100000000000000000000000100000
+00011100001000100001011000000000
+01101000000000100000000101100001
+00011111111000100100001000000000
+01010011110000000111111000000000
+01111001001000000111111000111010
+00001000000000001000011001001000
+01010011111000000111111000000000
+00001000000000001000011001001000
+00011001011000100100001000000000
+00011010001000100100000000000000
+01111000001001000111110000000000
+00001000000000001000011000010000
+01111000010001000111110000000000
+00100000001000000010011001001101
+01000100101111000100000000001111
+01111000001001110111110000000000
+01111000001001001111110000000000
+01111000001011100111110000000000
+01101000000000001000010010110110
+00011111111000010000010111111000
+11011000110000000000010010110110
+00011000010000001000010000001000
+00011000010000001010011110111000
+00100100001000010010011111000010
+11101000110001001000000000000000
+00001000000000001000011001001000
+00011010011000100000010000000000
+00100000001000000010011110111100
+11101000110001001000000000000000
+00001000010000011000011000000000
+00100000001000000010011111110111
+01111000001011100111110000000000
+00100000001000000010011111010000
+01111000001011100111110000000000
+01111001001000000000000000010000
+00100000001000000010011111010000
+01111001001000000010101000000010
+01111000001011101111110000000000
+00100000001000000010011111010000
+01111001001000000010101000000010
+01111000001011101111110000000000
+01111001001000000000000000010000
+01000100101111001100000000001111
+01101000000000001000000001001100
+11000011000000101010011111100101
+00011000001001100111110000000011
+00100000001000010010011111100101
+01111000010001110111110000000000
+01111000010011100111110000000000
+01111000001011101111110000000000
+01111000010000111111110000000000
+01111001001000000010101000000001
+00101010101011111111111000000010
+00100000001000001010011111011111
+01011000000010101011111011101110
+00001000000000001000011000010100
+00100000001000000010011111100011
+01011000010111111010111010111010
+00001000000000001000011000011000
+01011000000000000000000000010010
+00001000000000001000011000000110
+01111000001000111111110000000000
+01111001001000000000000000010000
+01111000001001110111110000000000
+01111000001001001111110000000000
+11000101000000101010100000000000
+01101000000000001100000111011011
+00001000000000001000011000000011
+01101000000000010100000111011100
+10011000000000000111001000000000
+11000101000010000010011111101111
+00001000000000001000011000000101
+00100000001000000010011111110000
+00001000000000001000011000001101
+00011111001000100111111000000000
+00100000001110100010011111110111
+01101000000000010000000101101111
+10011000000000000000110000000000
+11101000110000001000000000000000
+00001000000000001000011000001000
+11000010000000000010011111110100
+01111000001001000111110000000000
+00001000000000001000011000010000
+01111000010001000111110000000000
+00100000010000000010010011000001
+01101000000000001000000001001100
+11000011000000101010011001001101
+00011000000000000111111000000000
+00001000000000001000011000000110
+00100000001000000010011001001101
+01000100101111010100000000001111
+11000101000010000010100000001000
+01101000000000001000000110000000
+00001000000000001000011000000011
+01101000000000001000000101011111
+10011000000000000010011000000000
+00001000000000001000011000000101
+00100000001000000010100000001101
+01101000000000001000000110000000
+00001000000000001000011000000011
+01101000000000010000000101011111
+10011000000000000010011000000000
+00001000000000001000011000001101
+11011000110000000000010101010001
+00011010011000100111110000000000
+00100000001000101010100000010100
+11101000110000001000000000000000
+00001000000000001000011000001000
+00011010011000001010011111111111
+00100000001000000010100000001110
+01101000000000010000000011111100
+00011111111000001111111000000001
+01100000000000010000000011111100
+00100000001000000010011111110111
+01101000000000100000000101100101
+00011111111000001010001000000111
+01101000000000010000000101110001
+00100100001110100010100000011110
+00011010001000001010001111111101
+00100000001000000010100000100110
+00011111111011111111111000001100
+01101000000110010000000001000000
+00011000010000001000010000000001
+10011000010001100111111000000000
+00100100001000010010100000100101
+00011010001000001010001111111111
+00100000001000000010100000100001
+00011111111001100111111000000000
+00110111110100011000001000000000
+00101100010000000000011000000000
+00100100001000001010100000100110
+10011000000000000101001000000000
+00011010001000100101000000000000
+10011000000000000101001000000000
+00100000011000000000000000000000
+01000100101111011100000000001111
+00110111110100010000001000000000
+00011011010000100111111000000000
+10011000000000000000110000000000
+00011111111100010111111000000000
+10011100010001100111001000000000
+00011111001000010111001000000011
+00100100001000101010100000110111
+00011000000000000111111000000000
+00100000001000000010100000111011
+11011000010000000000111010100110
+00011000000000000111111000000000
+10011000010000001111111000000000
+11000010000000000010100000111001
+10011000110000001111111000000000
+00011111111001101111110000001100
+00100000010000000111111110000110
+00011000000001111111111000000000
+01100000000000010000000101110001
+00100000011000000000000000000000
+01000100101111100100000000001111
+00011011010000100111111000000000
+00011011001000100000010000000000
+10011000010001100111110000000000
+01111101001000010111111000101100
+10011000010001100000010000000000
+01011000000000000000111010100110
+00101000010011000000000000001111
+00100000001000001010100001001100
+01011111111111110000111010100110
+10011000010000001000010000000000
+01100000000010110000010001000111
+00100000011110110000000000000000
+01100000000010110000000000111000
+00100000011000000000000000000000
+01111000010110000111110000000000
+01101000000000110000010001000111
+00100000001110110010100001010100
+01101000000000110000000000111000
+10011011001000001110000000000000
+00011110000000001110000000001010
+01011000000000000000111010100110
+10011110000001100111111000000000
+00101111111011000000000000001111
+00100000001000001010100001011110
+01011000000000001111000101011010
+10011110000000001110000000000000
+00011110000000100011010000000000
+00100000011000000000000000000000
+00011000000000000111110000000000
+00100000001000000010100001011100
+01000100101111101100000000001111
+00100000010000000010100100011000
+00011100001000100111111000000000
+00011111111000010111111110000000
+00101100100000000000111000000011
+00100100001000001010100001101001
+00011111111010010111111000000000
+10011010111000001111111000000000
+00100000001000000010100001101010
+00011010111000100111111000000000
+00011111111001101111110001001111
+01111000001010101111110000000000
+00100000010000000111111110000110
+00011000000001110010001000000000
+00011010001000001000010111011000
+00100000001000010010100001110010
+00011010001000111000010000000000
+00100000001000000010100001110100
+00011000010000111000010000000000
+00011000010000001000010000000001
+01000100101111110100000000001111
+01101000000000001000000000110001
+11000011000000011010100010000101
+01101000000000100100000011010010
+10011100001001100111110000000000
+00100000001000010010100010000101
+00100000010000000010100010100100
+01101000000000001100000011011001
+00100000011110100000000000000000
+01101000000000001000000000110001
+01111001001000000111111000000010
+01100000000000001000000000110001
+01101000000000101100000011100111
+01100000000000101100000011011010
+11101000110000101000000000000000
+01100000000000101100000011011111
+00100000010000000010100010101001
+01101000000000001000000000110001
+11000100000000010000000000000000
+00101100001011111111111000000001
+00100000001000001010100010100001
+00011000010010010010001000000000
+00011000010000010000111000000111
+01011000000000000100000011011010
+10011010001000001010001000000000
+11101010001000001000000000000000
+10101111111011000000000000000000
+00100000001000001010100010010010
+00011000010000100111111000000000
+00100000001000000010100010011110
+01101000000000001100000011100100
+10011000000000000010010000000000
+00011100001000100111111000000000
+00011111111000010111111110000000
+00011111111010010111111000000000
+10011010111000001111111000000000
+10011010010001101111110000000000
+01011000000000000100000011110010
+00100000010000000111111110000110
+00011000000001110010001000000000
+10011010001000001000110000000000
+11101000110000001000000000000000
+01100000000000001100000011100101
+10011000000000000000010000000000
+00100000011000000000000000000000
+01101000000000001100000011100101
+10011000000000000000010000000000
+00100000011000000000000000000000
+01101000000000001000000000110001
+01111001001111111111111000000010
+01111001001111111111111000000011
+01100000000000001000000000110001
+00100000011000000000000000000000
+01000100101111111100000000001111
+11011000101000000100000011110010
+00011000000000000111001000001010
+00100000010000000111111011000110
+11011000101000000100000011110010
+00011000000000000010011000000000
+00011000000000000000111000000010
+01101000000000101100000011011010
+10011000000000000000010000000000
+00101000111000011111111000000010
+00100000001000001010100010110101
+00011000010000110000010000000000
+00101000010011000000000000000000
+00100000001000001010100010111001
+00011010011000100111111000000000
+11100000101000001000000000000000
+00011000010010110000010000000000
+00011010011000001010011000000010
+00101010011000011111110000101000
+00100100001000001010100011000010
+01101000000000101100000011011111
+10011000000000000000010000000000
+00101000111000011111111000000010
+00100000001000001010100011000010
+00011000010000110000010000000000
+00011010011001100111110001001110
+00100000001000010010100010110101
+00011000000000000010011000000001
+00011000111000001000111111111111
+00100100001000101010100010110000
+11011010001000000100000011110010
+00011000101000100111111000000000
+10011010001001100111111000000000
+01100000000000001100000011100100
+00100000011000000000000000000000
+01000100110000000100000000010000
+00100000010000000010100001100000
+01101000000000001000000101111111
+11000011000000101010100011010001
+01101000000010001000010011001100
+00100000001000000010100100011111
+01000100110000001100000000010000
+00100000010000000010100001100000
+01101000000000001000000101111111
+11000011000000100010100011010111
+01101000000010001000010011001011
+00100000001000000010100100110011
+00011000000000000101101000000000
+01101000000000011100000010100111
+10011000000000000101100000000000
+00100000011000000000000000000000
+01000100110000010100000000010000
+01101000000000001100000111010011
+00011111111000100101101000000000
+01101000000000011100000111010000
+00011111111000100101100000000000
+00100000011000000000000000000000
+01000100110000011100000000010000
+01101000000000010100000010100100
+00011111111000100101110000000000
+01101000000000001100000010100011
+00011111111000100101101000000000
+01101000000000011100000010100000
+00011111111000100101100000000000
+00100000011000000000000000000000
+01000100110000100100000000010000
+01101000000000010000000001000100
+00011111111000100101110000000000
+01101000000000001000000001000011
+00011111111000100101101000000000
+01101000000000011000000001000000
+00011111111000100101100000000000
+00100000011000000000000000000000
+11000101000100000010100011110101
+11000110100011101000000000000000
+11000110100011111000000000000000
+00011101100000010101100100000000
+01111000001010101111110000000000
+00100000000000000000000000100000
+00100000011000000000000000000000
+01000100110000101100000000010000
+00100000001100001010100100001010
+01110000100010010101010111010100
+00100000000000000000000000000100
+01110000100010010101010111010010
+00100000000000000000000000000100
+01110000100010010101010111010001
+00100000000000000000000000000100
+01101000000000001100000111011110
+11000000000000000010100100001000
+11000000000000001010100100010101
+11000000000000010010100100001000
+11000000000000011010100100010101
+11000000000000100010100100010101
+11000000000100000010100100010101
+01110000100010010101010111010000
+01110000100010010101011011100000
+00011000000000000010101000000000
+01111000010100001111110000000000
+01111000010100000111110000000000
+01111000001011110111110000000000
+01110000100010010000001000000000
+01110000100010010000000100000000
+01110000100010010000000000000000
+01110000100010010000001100000000
+01110000100010010000010001110000
+01110000100010010000011000000000
+00100000011000000000000000000000
+01110000100010010101010111010000
+01110000100010010101011011000000
+00100000001000000010100100001010
+01000100110000110100000000010000
+01110000100010010000001000000000
+01110000100010010000000100000000
+01110000100010010000000000011000
+01110000100010010000001110100111
+01110000100010010000010001111111
+00100000011000000000000000000000
+01000100110000111100000000010000
+01100000000010001000000000010111
+00011000010000001010001000000100
+01110000100010010110110100000111
+00100000001000000010100110000001
+01000100110001000100000000010001
+01110000100010010000000111001111
+00100000000000000000000000001010
+01110000100010010000000011111111
+01110000100010010000001110101111
+01110000100010010000010011111111
+00100000000000000000000000001010
+01110000100010010000001010100000
+00100000011000000000000000000000
+01101000000000001100000111100000
+00100000001110100010100100110001
+00011000010000001010001000000010
+00100000011000000000000000000000
+00011000010000001010001000000000
+00100000011000000000000000000000
+01000100110001001100000000010001
+01100000000010001000000000010111
+00100000010000000010100100101101
+00100000010000000010100110000001
+01011000000000000000010100000000
+00100000010000000010101010001111
+01110000100010010000011000000001
+01110000100010010000000000111100
+01110000100010010000000111100000
+01110000100010010110110100010010
+00100000000000000000000000001010
+01110000100010010000001000000001
+01110000100010010000001000111101
+00100000000000000000000000001010
+01110000100010010000001110110111
+00100000000000000000000000001010
+01110000100010010000001001111111
+01101000000000001100000111011110
+11000000000000000010100101001011
+11000000000000001010100101001111
+11000000000000010010100101010011
+11000000000000011010100101010111
+11000000000000100010100101011011
+11000000000100000010100101011111
+01110000100010010101011011110000
+00100000010000000010100101100101
+01110000100010010101010111011000
+00100000011000000000000000000000
+01110000100010010101011011011111
+00100000010000000010100101100101
+01110000100010010101010111011111
+00100000011000000000000000000000
+01110000100010010101011011111111
+00100000010000000010100101100101
+01110000100010010101010111011111
+00100000011000000000000000000000
+01110000100010010101011011001110
+00100000010000000010100101100101
+01110000100010010101010111011000
+00100000011000000000000000000000
+01110000100010010101011011001011
+00100000010000000010100101100101
+01110000100010010101010111011000
+00100000011000000000000000000000
+01110000100010010101010111010000
+01110000100010010101011011000000
+01110000100010010101011101001100
+01110000100010010101100001101100
+01110000100010010101100101010000
+00100000011000000000000000000000
+00100000000000000000000000000100
+01110000100010010101010111010001
+00100000000000000000000000000100
+01110000100010010101010111010010
+00100000000000000000000000000100
+01110000100010010101010111010100
+00100000011000000000000000000000
+01110000100000000100001000000110
+01101000000000010100000011000011
+11000011000001110010100101101101
+10011000000000000000110000000000
+11011000010000001000100100000000
+11101000110000001000000000000000
+11000000011111111010100101110111
+10011000010000011000101000000000
+11101000110000001000000000000000
+11100000101000001000000000000000
+00100000001000000010100101110001
+01000100110001010100000000010001
+00100000010000000010101111100101
+00100000010000000010100111001001
+01011000000000000000011111010000
+10011100010000001111111000000000
+01100000000000100000000101101001
+01111001001000000010101000000011
+00011000000000000010101000000000
+00100100010101011010100110011000
+00100000001000000010100110101011
+01000100110001011100000000010001
+01011000000000000000100101100000
+10011010001000001000010000000000
+01101000000000001100000010111101
+01110000100010010101111100000100
+10011000010011111111111000000000
+01101000000010001100000010111110
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111010001000000000
+00011000000001110111111000000000
+00011111111100000111111000000000
+00011111111100100111111000000000
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111111111000000000
+00011111111011010111111000000000
+00011111111000111111111000000000
+10011010001000011111111000000000
+01100000000100100000100101100000
+01110000100010010101111101000100
+01110000100010010101111111000100
+00100000011000000000000000000000
+01000100110001100100000000010001
+01110000100010010000011000000010
+01011000000000111101000010010000
+00100000010000000010101010001111
+01110000100010010000000001111111
+00100000000000000000000010000010
+01110000100010010101001000110000
+01110000100010010000000111010000
+01110000100010010101001001110000
+01110000100010010101001011110000
+00011000000000000111001000110010
+01101000000100001000100110000000
+11000010100000101010100110100110
+11000010000000000010100110100011
+01100000000000001100000011001110
+01110000100010010000000100000000
+01110000100010010000000000000000
+01110000100010010000011000000000
+00100000011000000000000000000000
+01000100110001101100000000010001
+01101000000000001100000011001110
+01111001001000000111111000000101
+01100000000100001000100101010010
+01101000000110001000100101010000
+00011000010000010000010000000111
+00011111111010011111111000000000
+10011000010000011111111000000000
+01100000000100001000100101010000
+01101000000100001000100101010001
+01111001001111111111111000000000
+01100000000100001000100101010001
+01101000000100001000100101010010
+01111001001111111111111000000101
+01100000000100001000100101010010
+00100000011000000000000000000000
+01000100110001110100000000010001
+01101000000100010000100110000001
+00011111111100011111111000000000
+00011111111010010111111000000000
+00011111111001100111111000000000
+00011111111000010111111011111111
+00011111111001101111110000001010
+00100000010000000111111110000110
+00011000000001111111111000000000
+00011111111100100111111000000000
+00011000000001110000010000000000
+10011000010000011111111000000000
+01100000000000001000000000011000
+00100000011000000000000000000000
+01110000100000000100001000000110
+01101000000100001000100101101011
+01111001001111111111111000000100
+01111001001111111111111000000101
+01100000000100001000100101101011
+01110000100010010000010100000000
+01110000100010010000010000000000
+01110000100010010000010001110000
+01110000100010010000010111111111
+01101000000100001000100101101011
+01111001001000000111111000000100
+01111001001000000111111000000101
+01100000000100001000100101101011
+00100000010000000010100111101001
+01101000000100001000100101101000
+01111001001000000111111000000111
+01100000000100001000100101101000
+01111001001111111111111000000111
+01100000000100001000100101101000
+01111001001000000111111000000111
+01100000000100001000100101101000
+01110000100000000100001000000101
+00100000000000000000000000000001
+01110000100000000100001000000100
+01101000000100001000100101101011
+00011111111000010111111011001111
+01100000000100001000100101101011
+00011111111000011111111000110000
+01100000000100001000100101101011
+00100000011000000000000000000000
+01011000000000000000111100001111
+00100000001000000010110000011000
+01011000000000000000100000001111
+00100000001000000010110000011000
+01000100110001111100000000010001
+00100000010000000010100100100100
+01111000010100000111110000000000
+01111000001100001111110000000000
+01111000001010110111110000000000
+00100000011000000000000000000000
+01000100110010000100000000010010
+01101000000000001000000001001100
+00101111111011111111111000000010
+01111001001000001111111000000000
+01100000000100001000000000010001
+11011000110000000000000001100010
+11101000110001001000000000000000
+10011000000000000110010000000000
+11101000110000111000000000000000
+10011000000000000110011000000000
+01101000000000001000000001010100
+00011111111000001110100111111111
+01111000001011010111110000000000
+00100000011000000000000000000000
+00011011010000100111111000000000
+01100000000000110000000010011010
+01111000010001101111110000000000
+00100100001011000010100011111001
+11011101001000000000001110111011
+00011101000000001101000000000001
+00011101000000010101000111111100
+00100000011000000000000000000000
+01111000001001101111110000000000
+00110111110010111000010000000000
+00100000001011000010100111111111
+00101101000000000000010000000010
+00100100001000001010101000001000
+00100000001000000010100111111111
+01000100110010001100000000010010
+11011001011000000000011000000000
+01111000001001101111110000000000
+00110100011100110000010000000000
+01111000010001101111110000000000
+00100100001011000010100011111001
+00100000011000000000000000000000
+01000100110010010100000000010010
+01111000001001101111110000000000
+00110111110000011000010000000000
+01111000010001101111110000000000
+00100100001011000010100011111001
+11011101001000000000001110111011
+00011101000000010101000111111100
+00100000011000000000000000000000
+01000100110010011100000000010010
+10011000000000000010001000000000
+00011100001000100111111000000000
+10011000010000001001011000000000
+00011001011000100111111000000000
+01100000000000100100000011001010
+00011010001000100111111000000000
+00100000011000000000000000000000
+00011111111000100000010000000000
+01000100110010100100000000010010
+00011000010000100111111000000000
+00100000010000000111111101010000
+00011100001100000111111000000000
+01111001001000000111111000101100
+00100000010000000111111100111001
+01111001001111111111111000101100
+00100000010000000010101001110111
+00100000010000000111111100111001
+00100000011101000000000000000000
+00100000010000000111111101000011
+10011000000000000011011000000000
+00110111110000011000001000000000
+00100000011000000000000000000000
+01000100110010101100000000010010
+00100000001110000010101000111000
+00110101001100110000001000000000
+00011101000000100000010000000000
+00100000001000000010101000111011
+00100000001101110010101000111010
+00110100011100110000001000000000
+00011100010000100000010000000000
+00100000001101000010101001000111
+00101000010000000000011000000001
+00100100001000001010101000110011
+01000100110010110100000000010010
+01101000000000001000000000110000
+11000100000000000000000000000000
+01101000000000100100000011001010
+10011000010001100111111000000000
+00100100011000010000000000000000
+00011111111001100111110011111111
+00100000001000010010101000110011
+00100000011000000000000000000000
+00101000010000000000011000000011
+00100100001000001010101000110011
+00100000001000000010101000111110
+01000100110010111100000000010010
+11011001011000000000011000000000
+00100000001000000010101000110011
+01111000010101000111110000000000
+00100000001000000010101001001010
+01111000001101000111110000000000
+00100000001000000010101001001010
+01000100110011000100000000010011
+00100000010000000010100111110001
+01111000010100001111110000000000
+01111000001100000111110000000000
+00100000011000000000000000000000
+01000100110011001100000000010011
+11011001011000000000111001000011
+00110100011100110000001000000000
+01111000001010110111110000000000
+00100000011000000000000000000000
+01000100110011010100000000010011
+11011001011000000000110100000000
+00110100011100110000001000000000
+00100000011000000000000000000000
+01000100110011011100000000010011
+11011001011000000000111001000011
+00110101001100110000001000000000
+01111000001010110111110000000000
+00100000011000000000000000000000
+01000100110011100100000000010011
+01010001001000000111111000000000
+01111000001011101111110000000000
+01111001001000000010101000000000
+00001000000000001000011001001000
+01111000010011101111110000000000
+00100000011000000000000000000000
+00011100101000100000010000000000
+00011000010000011000010001100000
+00011000010000100001110000000000
+00100000011000000000000000000000
+01000100110011101100000000010011
+01101000000000001100000010010000
+00011111111000001111111000000001
+11000000100000111010101001110100
+00011000000000000111111000000001
+01100000000000001100000010010000
+10011000000000000000100000000000
+00100000011000000000000000000000
+00011011001000100000010000000000
+00100000011101001000000000000000
+00011011010000100000010000000000
+00100000011000000000000000000000
+00011100010000100111111000000000
+00100000011101001000000000000000
+00011101000000100111111000000000
+00100000011000000000000000000000
+01000100110011110100000000010011
+01101000000010100000000001001101
+00100000010000000010101001111011
+10011000010001100001011000000000
+00011001011000100111111000000000
+01101000000010010000000001010001
+00011000010000111000010000000000
+10011000010001100111111000000000
+00100000011000000000000000000000
+01000100110011111100000000010011
+00100000010000000010101001111011
+01100000000000100000000001001101
+00100000011000000000000000000000
+01000100110100000100000000010100
+00100000001000000010101010001100
+00100000001000000010101010001110
+00100000011110100000000000000000
+00011111111000110111111000000000
+00011111111000001111111111111101
+00011111111000001111111111111111
+00100100001000101010101010010010
+00011000000000000111111000000000
+00100000011000000000000000000000
+11011111001000000000000000010000
+11011000101000000000000000000000
+00100000010000000111111011000110
+11011000101000000000010000111111
+11011111001000000000000000001010
+00100000010000000111111011000110
+01110000000010011011001000000000
+01110000000010101001100100000000
+01110000000001001000110000000000
+01110000000000010111111100000000
+01110000000001001101000100000000
+01000100110100001100000000010100
+01110000000000010110110100000000
+01110000000000010101000100000000
+01110000000000010101110000000000
+01011000100111101000101100110011
+01100000000000011100000010100111
+01011000000000000000000101010011
+01100000000000010000000010000011
+01110000000000001000010100011110
+01110000000000001000011000000001
+01110000000000001000100000000111
+01011000000100101110100100000100
+01100000000000011000000010000000
+01110000000000001001000001100000
+01110000010000001101000000000101
+01110000000000000001010000000010
+01101000000000001100011001011010
+00100100010110100111010011000001
+01101000000000001100010010111110
+00100100010110100111010100011000
+01000100110100010100000000010100
+00100000011101011000000000000000
+01011000000000000000000000000000
+01100000000000010100000111011100
+00011100010000110111111000000000
+01100000000000100100000010010100
+00100000011000000000000000000000
+01011000000000001110111000100001
+01100000000100010000000001010000
+01101000000100100000000100011100
+01100000000000100000101010111110
+01101000000100001000000100111110
+01100000000000001000101010111101
+11000011000000011110010001011011
+01111000001101011111110000000000
+11000011000000111010101011001100
+01111000010101011111110000000000
+00011100111000100111111000000000
+00100100001110100010101011001100
+01101000000100001000000100111011
+11000010100000010010101011001100
+11011000010111111111111111111111
+00100000001000000010101100111100
+01101000000100011000000100111100
+01100000000100011000000001001100
+11101000110000001000000000000000
+00011111111000011111111011101111
+11100000101000001000000000000000
+00100000010000000010110000100011
+01101000000100001000000001001111
+01111001001000000111111000000100
+01100000000100001000000001001111
+00100000010000000010110000100011
+00100000010101011010101011011111
+01101000000100001000000001001110
+01111001001111111111111000000011
+01100000000100001000000001001110
+00100000010000000010110000100011
+00100100001101011110010001011011
+11000110100101011000000000000000
+01110000100000000000011000001000
+00100000011000000000000000000000
+01101000000000001100000110011000
+01100000000100001000000010000110
+01101000000000011100000110001101
+01100000000100011000000010000000
+01101000000000100100000110000001
+01100000000100100000000001110100
+01101000000000100100000101111101
+01100000000100100000000001110000
+01101000000001000100000110000101
+01100000000101000000000001111000
+01101000000001000100000110010000
+10011000000000000000000000000000
+01101000000101000000000101000000
+01100000000001000000000010100001
+00100000010000000110010011001010
+00100000011000000000000000000000
+00011000000000100111111000000000
+01100000000001000100000110010000
+01101000000101000000000001110000
+01100000000001000100000101111101
+11101000110001000000000000000000
+11100000101001000000000000000000
+01101000000100011000000010000000
+01100000000000011100000110001101
+01101000000100001000000010000110
+01100000000000001100000110011000
+00100000001000000010110000101001
+01101000000100001000000001100011
+00100100001110100010101100000000
+01101000000000011100000101101111
+00100100011110100000000000000000
+01110000100000000110001111000000
+01110000100000000000011010000000
+01101000000100001000000100101101
+11000100000000001000000000000000
+01101000000100011000000101001001
+01100000000000011100000101101111
+00100000011000000000000000000000
+01000100110100011100000000010100
+00011011010000100111111000000000
+00100000010000000111111100110111
+01101000000010100100000101011111
+00011000010001100111110011111111
+00100000011000010000000000000000
+00011111111011010111111000000000
+00011111111100100111111000000000
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111111111000000000
+11011000010000000000000011001000
+00100000010000000111111110010001
+01100000000000001000000010011001
+00100100001101000010101100010101
+00011111111001100111111000000000
+01101000000010011100000101101111
+10011000010000001111111000000000
+01100000000000011100000101101111
+01011000000000000000000000000000
+01100000000000100100000101011111
+00100000011000000000000000000000
+01101000000000001100000101110111
+01111001001000000111111000000010
+01100000000000001100000101110111
+00100000001000000010101100100011
+11011000010111111111111111111111
+01101000000000001100000101110110
+01111001001111111111111000000111
+01100000000000001100000101110110
+01000100110100100100000000010100
+00100000010000000010110000101001
+01101000000000001100000101010111
+01100000000000001100000101111100
+01101000000000001100000101111010
+01111001001000000111111000000111
+01100000000000001100000101111010
+01000100110100101100000000010100
+00100000010000000010100111100111
+01101000000000100100000101011111
+10011000010000001111111000000000
+01100000000000100100000101011111
+00100000010000000010101011101111
+01101000000000101100000101111000
+01100000000100100000000001001100
+00011111111011110010001000000000
+00110111110110011000001000000000
+00011011001000100111111000000000
+01100000000000110100000101100011
+01110000100000000000010100000010
+00110111110110011000001000000000
+00110111110110011000001000000000
+00011010001000100111111000000000
+01100000000100001000000001001111
+01110000100000000000010100000010
+00110111110110011000001000000000
+00110111110110011000001000000000
+01100000000110100000000001001100
+01110000100000000000010100010000
+00110111110111111000001000000000
+01000100110100110100000000010100
+01011000000000000000000000000000
+00011100111000100111110000000000
+00100000001000101010101101001100
+01101000000100001000000100111100
+01101000000110001000000100111101
+10011000010001100111110000000000
+00100000001000010010101101001010
+00011000010000100111111000000000
+10011100111001100111111000000000
+00011111111000001111111000000001
+00011111111000001111111000001000
+00110111110110011000001000000000
+10011110001000001111111000000000
+01101000000010100100000101011011
+10011000010000001111111000000000
+01101000000010011100000101101111
+10011000010011111111111000000000
+00011111111011001111111000000000
+00011111111100011111111000000000
+00011111111000001111111001101110
+11011000010000000000111010100110
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111111111000000000
+00011111111100000111111000000000
+00011000000001110000010000000000
+10011000010000011111111000000000
+01101000000010110100000101100011
+00100000010000000111111100101100
+00011000010000100011001000000000
+01101000000000110100000001001000
+00100000010000000010100001010100
+00011011010000100111111000000000
+01100000000000110000101010011010
+00011100111000100111111000000000
+11100000101000001000000000000000
+01101000000100001000000100011101
+00011111111000011111111011110000
+11100000101000001000000000000000
+00100000011000000000000000000000
+01000100110100111100000000010100
+00100000010000000010101011111010
+01101000000000011100000101101111
+00100000011110100000000000000000
+01101000000000001100000010010001
+00100000011110100000000000000000
+01101000000000001100011001011010
+00100000001110100010101101110100
+01101000000000001100010110110001
+00100000011110100000000000000000
+01101000000000001100010011000000
+00100100011110100000000000000000
+00100000010000000010110000111010
+00100100011110100000000000000000
+01101000000000001100000001000000
+00101111111000000000111000000011
+00100100001000001010101110011101
+01101000000000010100000001000010
+00100000011110100000000000000000
+00100000011101011000000000000000
+01000100110101000100000000010101
+01101000000010001000000010100000
+01101000000000010100000001000010
+10011000010011111111111000000000
+00011000010100011000010000000000
+00011000010010110000010000000000
+10011000010001100111111000000000
+01101000000010100100000001000100
+10011000010000001111111000000000
+01101000000010001100000101010110
+10011000010001100111111000000000
+00011111111100000110000000000000
+01000100110101001100000000010101
+01101000000000010100000001001110
+00011111111000110111111000000000
+00100000010000000111111101010000
+00011110000000100111111000000000
+00100000010000000111111100111001
+00011011010000100000010000000000
+00100000010000000111111100110111
+00100000011101000000000000000000
+00100000010000000111111101001001
+01000100110101010100000000010101
+01101000000000001100000101111000
+10011000010001100111110000000000
+00100000001000010010101100011000
+01100000000010100100000101011011
+00100000010000000011001100101000
+00100000010000000101001011111011
+01101000000010100100000101011011
+00100000001000000010101100101010
+01000100110101011100000000010101
+01101000000000001100000001000000
+11000011100000000000000000000000
+11000011100000011000000000000000
+01101000000000001100011001011010
+00100000001110100010101110100101
+01101000000000001100010110110001
+00100000011110100000000000000000
+01000100110101100100000000010101
+01101000000000001100001101101110
+00100100001110100010101110101010
+01101000000000001100000010010011
+00100000011110100000000000000000
+01101000000000010100000101010100
+00100000011110100000000000000000
+01101000000010001100000101010110
+10011000010001100111111000000000
+11011000010000000001110101001100
+10011000010011111111111000000000
+00100000001000000010101110010011
+01000100110101101100000000010101
+01111000010101011111110000000000
+01101000000000001000000000110000
+11000100000000001000000000000000
+00100100001101101010101111010000
+00100000010000000010101111001011
+01101000000000010100000011000001
+01100000000000010000000000111110
+01101000000000001000000001000111
+11000010100000011010101111011110
+11000101100001101010101111011110
+00100000010000000101001001110100
+00100100001110100010101111011110
+01101000000000001100010101011100
+11000010100000001010101111011110
+01110000000000001010000000000000
+11000101100001101010101111011110
+01101000000000001100000101110100
+00100000001110100010101111100010
+00011111111000001111111111111111
+01100000000000001100000101110100
+00100000011000000000000000000000
+11011000111000000000000000000001
+00100000001000000110000011001101
+11011000111000000000000000000001
+00100000001000000110000011010001
+01110000010000010101100100000000
+01101000000000011100000101101001
+00011111111000001111111000000001
+01100000000000011100000101101001
+00100000011000000000000000000000
+01000100110101110100000000010101
+01101000000010010100000011000001
+00011000010000110000010000000000
+01101000000000010000000000111110
+10011000010000001111111000000000
+01100000000000010000000000111110
+01110000000000001010000000000000
+01101000000000011100000101101100
+00011111111000001111111000000001
+01100000000000011100000101101100
+01101000000000001100000101011001
+00011111111000001111111000000001
+01100000000000001100000101011001
+00100000011000000000000000000000
+01110000000000001010000000000000
+01101000000000001100000101110011
+01100000000000001100000101110100
+00100000011000000000000000000000
+01101000000010001100000101110010
+01100000000010001000000010100000
+00100000011000000000000000000000
+01000100110101111100000000010101
+01101000000000001100000101111000
+00100100011110100000000000000000
+01110000100000000100001000000110
+01011000000000000000111100001100
+00100000010000000010110000011000
+01011000000000110000110101000000
+00100000010000000010101010001111
+00110111110110011000001000000000
+00011110001000100110000000000000
+00100000010000000010100111100111
+01110000100000000100001000000100
+00100000000000000000000000001010
+00110111110110011000001000000000
+00011110001000100111111000000000
+10011110000001100111111000000000
+00011111111000001111111000110000
+11011000010000000000000011111111
+00100000010000000111111110010001
+01100000000000001100000101111000
+00100000000000000111010100110000
+00100000000000000111010100110000
+00100000000000000111010100110000
+00100000011000000000000000000000
+01101000000000001100000101111000
+00100100011110100000000000000000
+01110000100000000100010011111111
+01110000100000000100001000000110
+00100000010000000010100111100111
+01011000000000000000001111101000
+10011110001000001110000000000000
+00000111111000000000000000000000
+00011110001000100111111000000000
+00100000000000000010111011100000
+00100000000000000010111011100000
+00100000000000000010111011100000
+00100000000000000010111011100000
+00100000000000000010111011100000
+00100000000000000010111011100000
+00100000000000000010111011100000
+00100000000000000010111011100000
+00100000000000000010111011100000
+10011110000001100111111000000000
+00011111111000001111111000110000
+11011000010000000000000011111111
+00100000010000000111111110010001
+01100000000000001100000101111000
+00100000000000000111010100110000
+00100000000000000111010100110000
+00100000000000000111010100110000
+00100000011000000000000000000000
+11011000101000000000111111111111
+10011000101000010000101000000000
+01101000000000001100000101110101
+00011111111000010111111011110000
+00011111111011010111111000000000
+10011000101000011111111000000000
+01100000000100010000000001001100
+11101000110000010000000000000000
+11100000101000010000000000000000
+01011000000000000000000000000001
+00100000001000000010110000100100
+01011000000000000000000000000010
+00110111110110011000001000000000
+01100000000100001000000000000101
+00110111110110011000001000000000
+00110111110110011000001000000000
+00100000011000000000000000000000
+01000100110110000100000000010110
+01101000000000100000000010100001
+01100000000100100000000001001100
+01011000000000000000000000000100
+00100000010000000010110000100100
+01101000000000100000000010100101
+01100000000100100000000001001100
+01011000000000000000000000001000
+00100000001000000010110000100100
+01101000000000010100000101010010
+11111001001000000111111000000000
+01100000000000010100000101010010
+00100000011000000000000000000000
+01101000000000010100000101010010
+11111001001111111111111000000000
+01100000000000010100000101010010
+00100000011000000000000000000000
+01000100110110001100000000010110
+00100000010000000011001100100110
+01101000000000010100000101010010
+00011111111000100010001000000000
+01101000000000001000000001001100
+00101111111011111111111000000110
+01111001001000001010001000001011
+01101000000000001000000001111000
+01101000000010001000000001111100
+10011000010000001111111000000000
+01101000000010001000000001001000
+10011000010000001111111000000000
+01111101001110100010001000001010
+01101000000000001100010011111111
+01111101001110100010001000000001
+01101000000000010000001001011101
+01101000000010010000001001011111
+10011000010000001111111000000000
+01111101001110100010001000001101
+01101000000001000100011001101000
+01111101001110100010001000001111
+01101000000001000100011001110000
+01111101001110100010001000001110
+01101000000000001100000111001110
+01111101001110100010001000001000
+01101000000000001100000010010010
+00101111111000011111111000001010
+00100000010000001010110001011011
+01011111111111111111111111111000
+10011010001000010010001000000000
+00011010001000100111111000000000
+01100000000000010100000101010010
+00100000011000000000000000000000
+01101000000100010000000100010010
+01111101001110100010001000000110
+01101000000100010000000100001110
+01111101001110100010001000000101
+00100000011000000000000000000000
+01101000000100100000000100111000
+01111001001111111111111000011011
+01100000000100100000000001001100
+00100000010000000010110000100001
+00100000001000000010101010001100
+01101000000100100000000100111100
+01111001001111111111111000010100
+01100000000100100000000001001100
+00100000001000000010110000100011
+01101000000000010100000101010000
+11000010100000000010101010001100
+00100000011000000000000000000000
+01101000000000010100000101010000
+11000010100000001010101010001100
+00100000011000000000000000000000
+01101000000000010100000101010000
+11000010100000010010101010001100
+00100000011000000000000000000000
+01000100110110010100000000010110
+00100000010000000010110001111010
+00011010011000001010010011001101
+11101010010000001000000000000000
+11000001000000000000000000000000
+11000000000000001010110100000110
+11000000000000010010110001111111
+00100000011000000000000000000000
+01101000000010010100001001000001
+00011000010000100010011000000000
+00100000011000000000000000000000
+00100000010000000010111100111101
+00100000001000000011000001111101
+00100000010000000011000010000100
+00100000010000000011000001011010
+00100000010000000011000001011110
+00100000001000000011000010100010
+00100000010000000011001000110001
+01011000000000000000000001001110
+00100000010000000011001000101111
+00100000010000000011001010111010
+00011010011000001010001010010010
+11101010001000100000000000000000
+00100000001000000011001000101100
+00100000010000000010110001111010
+00011010011000001010010010010001
+11101010010010001000000000000000
+00100000010000000010110010010000
+00011010011000001000101010010001
+00100000001000000010111001010110
+00100000010000000010110010010100
+00011000010000001000010000000001
+00011000010000010000010000000011
+00100000011000000000000000000000
+00011010011000001010010010101110
+11101010010000001000000000000000
+00011111111000010111111000000011
+00011111111011111010001000000100
+00011010011000001111111010010111
+10011010001000001111111000000000
+10011000010000001000110000000000
+11101000110000001000000000000000
+00100000001000000011001000101111
+00100000010000000011001001101100
+00100000010000000110011001101010
+01011000000000000000011111100010
+11011010001000000000101010100010
+11011000010000000000000000000100
+00100000010000000110011010110011
+00100000010000000110011001101101
+01101000000000100000101010100010
+00100000010000000011001000100111
+00100100011110100000000000000000
+01101000000000100100000010100000
+00100000001000000011001000100111
+00100000010000000011001001000001
+01011000000000000000000000000000
+00100000010000000011001000111111
+00100000010000000011001000111010
+00011111111000010111111000000111
+00100000001000000011001000111100
+00100000010000000011001000111010
+01111001001000000111111000000100
+00100000010000000011001000111100
+00100000001000000011001000110101
+00100000010000000011001001011101
+11000000000000001010110010110111
+11000000000000010010110010111100
+00100000011000000000000000000000
+00100000010000000011001000111110
+00011010011000001000101011010001
+00100000010000000011001011010110
+00100000010000000011001001000010
+00100000001000000010110010101100
+00100000010000000011001001011010
+00100000001000000010110010111000
+00011010011000001010001010001100
+11101010001000001000000000000000
+00011111111000001111111000000001
+00011010011000001000101010001100
+11100000101000001000000000000000
+11000000000100000010110111010010
+00100000010000000011001001011000
+11000000000000001010110011001010
+01011000000000000000000000000001
+00100000010000000011001001011011
+00100000010000000011001001011000
+11000000100000001010110010101100
+00011010011000001010001011010011
+11101010001000001000000000000000
+00011111111000001111111000000001
+00100000010000000010110011010101
+11000000000000100010110011010010
+00100000010000000010110010001010
+00100000010000000010110100000100
+00100000001000000010110110001111
+00100000010000000010110011010100
+00100000001000000010110010101100
+01011000000000000000000000000000
+00011010011000001000101011010011
+00100000001000000011001010110100
+00100000010000000011001000111110
+00100000010000000011001001011010
+00100000010000000011001001000001
+00100000001000000010110010101100
+00100000010000000011001001011101
+11000000000000011010110011011000
+00100000010000000011001000111010
+00101111111011000000000000000100
+00100000001000001010110010101001
+00100000010000000011001001011101
+11000000000000001010110011010111
+11000000000000010010110011011000
+00100000011000000000000000000000
+00100000010000000011001001010011
+11000001111111111000000000000000
+00100000010000000010110011101001
+00100100010101100010110011110100
+00100000011000000000000000000000
+01111000010101100111110000000000
+00011010011000001010001011001110
+11101010001000001000000000000000
+11000001100000001000000000000000
+00011010011000001010001011010000
+11101010001000001000000000000000
+11000001100000000000000000000000
+01011000000000000000000000000001
+00100000010000000010110011111101
+00100000010000000011001000110111
+00100000001000000111111111101011
+00011010011000001010001011010000
+11101010001000001000000000000000
+00100000001110100010110011111111
+00011111111000001111111111111111
+00100000010000000011001000111111
+01011000000000000000000000000010
+00100000010000000010110011111101
+00100000010000000010110010001010
+00100000001000000011001000110111
+00011010011000001000101011010010
+00100000001000000011001010110100
+01011000000000000000000000000011
+00100000010000000010110011111101
+00100000010000000011001001011000
+00100100001110100010110011001000
+00100000010000000010110010001010
+01011000000000000000000000000010
+00100000001000000011001000111000
+11000110100100110000000000000000
+01111001001000000000000000100111
+01000100110110011100000000010110
+00011010011000001010001010001110
+11101010001000001000000000000000
+11000000000000001010110100001111
+00100000010000000011000001101010
+00100100001101000010110100010110
+00100000010000000010110100011011
+00011010011000001000101010001110
+00100000010000000011001011010110
+00100000010000000010110100101100
+00100100001101000010110101111101
+00100000010000000010110011100100
+00100000010000000010110110001111
+00100000010000000010111001111010
+01111001001111111000000000100111
+00100000011000000000000000000000
+00100000011000101000000000000000
+01111001001000000111111000011100
+00100000011000000000000000000000
+00011010011000001010001011000010
+11101010001000001000000000000000
+00011111111000001111111000000001
+00011010011000001000101011000010
+11100000101000001000000000000000
+11000000000000100010110100100011
+11000000000000101010110100100111
+00100000011000000000000000000000
+00011010011000001010001010101101
+11101010001000001000000000000000
+00011010011000001000101010101011
+00100000001000000011001010110100
+00011010011000001000101011000010
+00100000010000000011001011010110
+00011010011000001010001010101100
+11101010001000001000000000000000
+00100000001000000010110100100101
+00100000010000000011001001010011
+11000000111111111010111010110001
+01000100110110100100000000010110
+00100000010000000010110100111010
+00100100001101000010110100110110
+00100000010000000010110101010011
+00100000010000000010111001110001
+01011000000000000000000000000001
+00011010011000001000101010001011
+00100000001000000011001010110100
+00011010011000001010001010001011
+11101010001000001000000000000000
+11000000000000001111111111100111
+00100000011000000000000000000000
+00011010011000001000010011011000
+11101000010000010000000000000000
+00100000010000000111111110011100
+00100100011101000000000000000000
+00011010001000100111111000000000
+01100000000000001000101010101110
+00011010011000001000101010110010
+00100000010000000011001011010110
+00100000010000000010110010101100
+01100000000000001001000110011110
+01101000000000001000101010101110
+00011111111000100010001000000000
+00011010001000001000010000000001
+11011000101000000001000110011111
+00011010001000100111001000000000
+00011010010000100000110000000000
+00100000010000000111111100000001
+11011010001000000001000110011110
+11000110100100111000000000000000
+00011010011000001000101010000110
+11100000101010001000000000000000
+00011000010000100111001000000000
+00011010011000001000101000100010
+00011010001000100000110000000000
+00100000001000000111111100000001
+00011010011000001010001010000110
+11101010001000001000000000000000
+00011111111000001111111000000010
+00011010011000001000101010001000
+11100000101000001000000000000000
+00100000010000000011001000111010
+00100000010000000011001000110101
+00011010011000001010001010000110
+11101010001000001000000000000000
+00011111111010011111111000000000
+00011010011000001010001010000101
+11101010001010001000000000000000
+00011000010000010000010000000011
+00011000010000111000010000000000
+10011000010000011111111000000000
+00011010011000001010001011000011
+11101010001010001000000000000000
+10011000010000001111111000000000
+11100000101000001000000000000000
+00011010011000001010001010000110
+11101010001000001000000000000000
+10011000000000000111001000000000
+00011010011000001000110000100010
+00100000001000000111111100000001
+00100000010000000011001001001111
+00100000010000000011001001011010
+00100000010000000010111001101101
+00100000010000000010110010101100
+01100000000000001001000110011110
+00100000010000000010110101110111
+00100000010000000011001000111010
+01111001001000000111111000000011
+00100000010000000011001000111100
+00100000010000000010110101010011
+00100000010000000010110100110011
+00100000001000000010110100010100
+01100000000000001001000110011111
+00100000010000000011001000100100
+01100000000000100001000110100000
+11011000010000000000000000000110
+11011010001000000001000110011110
+00100000001000000010110101001100
+00011010011000001010001010110010
+11101010001000001000000000000000
+00100000001110100010110101101011
+00011010011000001010001011011010
+11101010001000010000000000000000
+00100000001000000111111110011100
+00100000010000000010110001111010
+00100000010000000010101011111010
+01101000000000011100000101101111
+00100000011110100000000000000000
+00011010011000001000010011011100
+11101000010000010000000000000000
+00100000010000000111111110011100
+00011010011000001000010010110110
+11101000010001000000000000000000
+00100000010000000111111101001001
+01100000000010100100000101011011
+00100000001000000010101100101010
+00100000010000000010110001111010
+00011010011000001000101010001111
+00100000010000000011001011010110
+00100000010000000010110110100100
+00100100001011000010110110101110
+00100100001101111010110110101110
+00100000010000000010110111010110
+00100000010000000010111001110101
+00100000010000000010110001111010
+00011010011000001010001010000101
+11101010001000001000000000000000
+00011111111000001111111000000001
+00100000010000000011001000110010
+00100000010000000011001001010011
+11000000111111111010111011010000
+00100000010000000010110011011011
+01011000000000000000000000000000
+00011010011000001000101010001100
+11100000101000010000000000000000
+01011000000000000000000000000000
+00100000001000000010110100110100
+01111000010101111111110000000000
+00100000010000000010110111110111
+00100000010000000010110001111010
+00011010011000001010001011000011
+11101010001000001000000000000000
+11000000000000001010110110101100
+00100000010000000010111000010001
+00100000001000000010111001000101
+00100000010000000010111001000101
+00100000001000000010110110010111
+01000100110110101100000000010110
+00011010011000001010001010001101
+11101010001000001000000000000000
+00011111111000001111111000000001
+00011010011000001000101010001101
+11100000101000001000000000000000
+00100000010000000011001001010011
+11000000111111111010110111001100
+00011010011000001010001010001111
+11101010001010001000000000000000
+00011000010000001000010000000001
+00011010011000001000101010001111
+11100000101010001000000000000000
+00011010011000001010001011001100
+11101010001000001000000000000000
+10011000010001100111111000000000
+00100100001110100010110110010010
+01000100110110110100000000010110
+00100000010000000011001001011101
+11000000000000011010110010111110
+00011010011000001010001011010001
+11101010001000001000000000000000
+00011111111000001111111000000001
+00011010011000001000101011010001
+11100000101000001000000000000000
+11000000000000010010110010110011
+00100000010000000010110010101111
+01011000000000000000000000000001
+00100000010000000011001000111000
+00100000001000000010110110001111
+00011010011000001010001010001101
+11101010001000001000000000000000
+11000001111111111000000000000000
+00011010011000001000101010001101
+00100000010000000011001011010110
+00100000001000000010110111010100
+00011010011000001000101010001100
+00100000010000000011001011010110
+01110000000010101001100100111010
+00100000001000000111110110000110
+00100000010000000010110111011110
+00011010011000001010001010000100
+11101010001000001000000000000000
+00100000011110100000000000000000
+10011000000000000111001000000000
+00011010011000001000110000000010
+00011010011000001000101001100100
+00100000001000000111111100000001
+00100000010000000011001001011111
+00011111111010010111111000000000
+00011010011000001000101010000100
+11100000101000001000000000000000
+00011111111000001111111000000001
+00011010011000001000110000000001
+10011000110000001000110000000000
+11101000110000011000000000000000
+00011010011000001000101011000100
+11100000101000011000000000000000
+00100000010000000011001001011111
+00011111111000110111111000000000
+00011111111000010111111000000011
+00011010011000001000101011001010
+11100000101000001000000000000000
+00100000011000000000000000000000
+01111000010001001111110000000000
+01111000010000111111110000000000
+01011000010101010101010101010101
+10011000000000000001111000000000
+00100000011000000000000000000000
+00100000010000000010100100011000
+00011010011000001010001010010000
+11101010001010001000000000000000
+00100000001000000010100100110011
+00100000010000000010110111101110
+00100000010000000010110111110011
+01111001001000000010101000000000
+01111000001011101111110000000000
+01111000001100000111110000000000
+01111000010100001111110000000000
+00100000010000000101001111000100
+00100000010000000011001000101010
+10011000000000000001001000000000
+00001000000000001000011000100000
+01111000001001001111110000000000
+00011010011000001010001010001000
+11101010001000001000000000000000
+10011000000000000111001000000000
+00011010011000001000110001000010
+11101000110000001000000000000000
+00001000000000001000011000001000
+11000010000000000010111000000110
+01111000001001000111110000000000
+00001000000000001000011000011000
+01111000010001000111110000000000
+00110111110100111000001000000000
+01000100110110111100000000010110
+00100000000000000000000001100100
+01111000010011101111110000000000
+00100000011000000000000000000000
+01111000010101111111110000000000
+00011000000000000010101000000000
+00011010011000001010001010010000
+11101010001010001000000000000000
+00100000010000000010100100011111
+00100000010000000010100100100100
+00100000010000000010110111101110
+01111000001001101111110000000000
+01111000001100001111110000000000
+01111000010100000111110000000000
+00100000010000000101001111000100
+00100000010000000011001000101010
+10011000000000000001001000000000
+01111000001010000111110000000000
+00011010011000001010001010001001
+11101010001000010000000000000000
+10011000000000000011011000000000
+00110111110000011000010000000000
+00100100001011000010111001001101
+01111000001001001111110000000000
+00001001100000000000000000001000
+00011001100010010111111000000000
+00011010011000001000101000000000
+11100000101000001000000000000000
+00011010011000001010001011001101
+11101010001000001000000000000000
+11000000000000010010111000110011
+01000100110111000100000000010111
+00011010011000001010001000000000
+11101010001000001000000000000000
+00011010011000001010001010000111
+11101010001010001000000000000000
+10101000010000000000111000000000
+00100100001000001010111001000101
+00001001100000000000000000001000
+00011001100010010111111000000000
+11100000101000001000000000000000
+00011111111010010111111000000000
+00011111111000010111001000011111
+00100000001000101010111000111101
+00001001100000000000000000001000
+00011001100010010111111000000000
+11100000101000001000000000000000
+11000010000000000010111000111001
+00001001100000000000000000011000
+00011111111011110111111000000000
+00011111111100010111111000000000
+11100000101000011000000000000000
+00100000001000110010111001000101
+01111000001101111111110000000000
+01111000010001101111110000000000
+00100000011000000000000000000000
+01111000010011101111110000000000
+01111000010001101111110000000000
+01111000010001001111110000000000
+01111000010000111111110000000000
+00100000001100001010100011111001
+00110111110100111000001000000000
+00100000000000000000000001100100
+00100000001000000010100011111001
+00100000010000000010111001001111
+00100000001000000010111001000101
+00100000010000000010100110111011
+00100000011110100000000000000000
+00011010011000001010001011101010
+11101010001010001000000000000000
+11011010001000000000110110011110
+00100000010000000010111001011000
+00011010011000001000101011101010
+11100000101010001000000000000000
+00100000011000000000000000000000
+11011010010000000000000011111111
+00100000001000000010111001011010
+00011010001000100111111000000000
+10011000010000001000101000000000
+01101000000000001000000000011000
+11100000101000001000000000000000
+00011000010000001000010000000001
+00011010010000100111111000000000
+10011000010000010000010000000000
+00100000011000000000000000000000
+11011000010000000000000000000000
+00011010001000100000110000000000
+11101000110000001000000000000000
+10011000010000001000010000000000
+11000010000000000010111001100100
+00011000010011001000010000000000
+00100000011000000000000000000000
+00100000010000000010110001111010
+00100000010000000010111010011111
+01011000000000000000000000000001
+00100000010000000011001001110010
+01011000000000000000000000000000
+00100000010000000010111001110011
+11100000101000001000000000000000
+00100000011000000000000000000000
+00100000010000000011001001110000
+00011111111000001111111000000001
+00011010011000001000101011111100
+00100000001000000011001010110100
+00011010011000001010001011111101
+11101010001000001000000000000000
+00011111111000001111111000000001
+00011010011000001000101011111101
+00100000001000000011001010110100
+01000100110111001100000000010111
+00100000010000000011001001110000
+00011111111001100111110001111100
+00100000011000010000000000000000
+00011010011000001010001011111101
+11101010001010001000000000000000
+10011000010001100000010000000000
+00100000010000000010111001101101
+01011000000000000000000100000010
+10011010011000001010001000000000
+11101010001000001000000000000000
+10011000010001100111110000000000
+00100100001000010010111010001101
+01011000000000000000000100000011
+10011010011000001010001000000000
+11101010001000001000000000000000
+10011000010001100111110000000000
+00100000001000010010111010011001
+00100000011000000000000000000000
+00011010011000001010001011111110
+11101010001000001000000000000000
+11000000000000010010111010010011
+00011111111000001111111000000001
+00100000010000000011001001110010
+11000000000000001010111010011111
+01011000000000000000000000001010
+00100000010000000011001010110000
+01011000000000000000000000000000
+00100000010000000011001010110010
+00011010011000001010001011111111
+00100000001000000010111010100101
+00011010011000001010001011111110
+11101010001000001000000000000000
+11000000000000000010111010100111
+00011111111000001111111111111111
+00100000010000000011001001110010
+11000000000000000010111010100111
+01011000000000000000000000000101
+00100000010000000011001010110000
+01011000000000000000000000000000
+00100000010000000011001010110010
+01011000000000000000000100000000
+10011010011000001010001000000000
+11101010001000001000000000000000
+00100000001000000011001001101010
+01011000000000000000000000000010
+00100000010000000011001010110000
+01011000000000000000000000000000
+00100000010000000011001010110010
+01011000000000000000000100000001
+00100000001000000010111010100100
+01111001001000000000000000100110
+00100000010000000010110010000011
+01011000000000000000000000000001
+00100000001000000011001001010110
+00011010011000001010001010001011
+11101010001000001000000000000000
+11000000000000001111111111100111
+00100000010000000011001001010011
+11000000000000001010111010111001
+11000000000000010010111010111101
+11000000000000011010111011000001
+00100000001000000010101010001100
+01011000000000000000000000010001
+00100000010000000011001001010110
+01110000000100011001111010101010
+00100000001000000010111011000100
+01011000000000000000000000010010
+00100000010000000011001001010110
+01110000000100011001111001010101
+00100000001000000010111011000100
+01011000000000000000000000010011
+00100000010000000011001001010110
+01110000000100011001111000100010
+00100000010000000011001000111010
+00011111111000010111111000000111
+01100000000000001001000110011111
+00100000010000000011001000100100
+01100000000000100001000110100000
+01110000000100011010010000000000
+11011010001000000001000110011110
+11011000010000000000000000000111
+00100000010000000010110101001100
+00100000010000000010110101010011
+00100000010000000010110100110011
+00100000001000000111111111100111
+00100000010000000011001001010011
+11000001011111111000000000000000
+11000000000010001010111011010110
+11000000000010010010111011011001
+11000000000010011010111011011100
+00100000011000000000000000000000
+01011000000000000000000000000010
+00100000010000000011001001010110
+00100000001000000010110110011111
+01011000000000000000000000000011
+00100000010000000011001001010110
+00100000001000000010110110011111
+01011000000000000000000011111111
+00100000010000000011001001010110
+01110000000010101001100100111001
+00100000010000000111110110000110
+00011010011000001010001001100110
+11101010001000100000000000000000
+00100000010000000011001000101100
+00100000001000000010110110011111
+01111001001111111000000000100110
+00100000010000000010111100001000
+00100000010000000010111100100010
+00100000010000000011001001100011
+00100000000000000000011111010000
+00100000010000000011001001100001
+11000000011111111010110111010100
+00100000010000000010110110100100
+00100100001011000010111011111010
+00100100001101111010111011111010
+00100000010000000010110111010110
+00100000010000000010110001111010
+00011010011000001010001010010010
+11101010001010100000000000000000
+00100000010000000011000010111110
+00100000001000101010111010101101
+00100000010000000010110001111010
+00011010011000001010001001100110
+11101010001000100000000000000000
+11000000000000000010111011100111
+00100000010000000011001000101100
+00100000001000000010111100011100
+00100000010000000011001001100001
+00011111111000001111111000000001
+00100000010000000011001001100100
+00100000010000000010111100000100
+00011111111000001111111000000001
+00011111111000010111111000000001
+00100000010000000010111100000110
+11000000000000000010111100001100
+11000000000000001010111100001110
+00100000011000000000000000000000
+01011000000000000000000110001011
+00100000001000000011001011010000
+11011010001000000000000110001011
+00100000001000000011001010110011
+00100000010000000011001001100111
+00100000010000000011001000100100
+00100000010000000011001000101100
+00100000001000000010110010001010
+00100000010000000010111100001000
+00100000001000000010111011101000
+00100000010000000010110010000011
+00100000001000000010111011101000
+01111001001111111000000000100110
+00100000010000000010110010001010
+00100000010000000011001001010011
+11000001111111111000000000000000
+00100000010000000010111100100010
+00100000010000000011001001100011
+00100000000000000000011111010000
+00100000010000000011001001100001
+11000000011111111010110111010100
+00100000010000000010110110100100
+00100100001011000010111100100111
+00100100001101111010111100100111
+01111001001000000000000000100110
+00100000010000000011001001100011
+01011000000000000000000011111111
+00100000010000000011001001010110
+01110000000010101001100100111100
+00100000001000000111110110000110
+01111001001000000000000000100111
+01110000000100011001111011111111
+00100000010000000011001000111010
+00100000010000000010110101110111
+00100000001000000010110101010011
+00100000010000000011001001100001
+00011111111000001111111000000001
+00100000010000000011001001100100
+00100000010000000010110010001010
+00100000001000000010111100010110
+00100000010000000011001001100111
+01011000000000000000000011111111
+00100000010000000011001001010110
+00100000001000000010111100010000
+01000100110111010100000000010111
+00100000010000000010110001111010
+01011000000000000011000110110000
+00011010011000001000101011011110
+11100000101000010000000000000000
+00100000010000000010111100111101
+00100000010000000100100011101010
+00100000010000000011001010110110
+01000100110111011100000000010111
+11000000000000000011000001010101
+11000000000000001010111101000101
+11000000000001111010111101000001
+00100000001000000010101010001100
+00100000010000000011001001101100
+11011111001000000000000010000000
+11011000101000000000110110011110
+00100000001000000111111011000110
+00100000010000000010111101001100
+00100000010000000010111101001111
+00100000010000000100100011010011
+00100000001000000010111101000010
+01000100110111100100000000010111
+00100000010000000010111101001100
+00100000010000000010111101001111
+00100000010000000010111110111101
+00100000010000000100100011010011
+00100000010000000011000000011001
+00100000001000000010111101000111
+00100000010000000011001010010001
+00100000010000000011001010010110
+00100000001000000011001010011001
+00100000010000000011001010001111
+11000001100000000000000000000000
+00100000010000000010111101010101
+00100000010000000010111101100101
+00100000010000000011000101101011
+00100000001000000010111110010110
+00100000010000000011001010010100
+11000011100000000000000000000000
+01111001001000000111111000000000
+00100000010000000011001010010111
+00100000010000000011001001100111
+00100000010000000011001010011001
+01110000000011010011100000000000
+00100000010000000011001001001111
+00100000010000000010111101100001
+00011010011000001000101000000000
+11011111001000000000000001000010
+00100000001000000111111011010100
+00100000010000000011001000110001
+00100000010000000011001001111101
+00100000010000000011001000101100
+00100000001000000010110010001010
+01000100110111101100000000010111
+00100000010000000011001001001100
+11000000000000001010111110001101
+00100000010000000011001001000101
+11000000000000001010110010001010
+01011000000000000000000100110110
+10011010011000001010001000000000
+11101010001010100000000000000000
+00011100010000100111111000000000
+10011000010001100111110000000000
+00100100010000010010110100011000
+00011111111000100010010000000000
+01011000000000000000000100110110
+10011010011000001010001000000000
+11101010001000100000000000000000
+00011111111000100000010000000000
+01011000000000000000000100111010
+10011010011000001010001000000000
+00011000010000100111111000000000
+11101010001010001000000000000000
+10011000010000001000010000000000
+00011010010000100111111000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+01111001001111111111111000011100
+01011000000000000000000100110110
+10011010011000001000101000000000
+11100000101000100000000000000000
+00100000010000000010110010001010
+00100000010000000011001001111000
+00011111111000001111111000000001
+00100000010000000011001001111011
+11000001100000010000000000000000
+00100000010000000011001001111010
+00100000001000000011001001001111
+00011100010000100111111000000000
+11011010001000000000000100110110
+00100000010000000011001010111111
+11100000101000100000000000000000
+00100000001000000011001001111010
+11011010001000000000110110011110
+00100000010000000010111110010100
+00011010011000001000101011101011
+11100000101010001000000000000000
+00011000010001100111110001010000
+00100100011000010000000000000000
+00100000001000000010110010001010
+11011111001000000000000100000000
+00100000001000000010111001100010
+00100000010000000010111110011001
+00100000010000000010111110100101
+00100000001000000010111110110001
+01011000000000000000000110000000
+00100000010000000011001011010000
+00100000011110100000000000000000
+11011000111000000000000000001011
+00100000010000000111111100010110
+00100100011110100000000000000000
+00100000010000000011001010100111
+01011000000000000000000000000001
+01100000000000001000110101010100
+01011000000000000000000000000000
+11100000101000111000000000000000
+00100000001000000011000110111000
+01011000000000000000000101111110
+00100000010000000011001011010000
+00100000011110100000000000000000
+11011000111000000000000000001110
+00100000010000000111111100010110
+00100100011110100000000000000000
+00100000010000000011001010101010
+11011000101000000000110101100100
+11011111001000000000000000000010
+00100000010000000111111011000110
+01110000000011010110010000000000
+00100000001000000011000111101101
+01011000000000000000000101111111
+00100000010000000011001011010000
+00100000011110100000000000000000
+11011000111000000000000000001100
+00100000010000000111111100010110
+00100100011110100000000000000000
+00100000010000000011001010101101
+11011000101000000000110101110100
+11011111001000000000000000000010
+00100000010000000111111011000110
+01110000000011010111010000000011
+00100000001000000011001000000111
+00100000010000000011001010001111
+11000001100000001000000000000000
+00100000010000000010111111000001
+00100000001000000010111111001011
+00100000010000000011001010010100
+11000011100000001000000000000000
+01111001001000000111111000000001
+00100000010000000011001010010111
+00100000010000000011001010011100
+00100000010000000010110010000011
+01011000000000000000000000000000
+11011010001000000000000100000110
+00100000010000000011001010111111
+00100000001000000011001011000101
+00100000010000000011000101101110
+00100100001101111010111101011110
+00011010011000001000110000000000
+01011000000000000000000100001001
+10011010011000001000101000000000
+11011111001000000000000000001000
+00100000010000000111111100000001
+01011000000000000000000100001011
+00100000010000000011001011010000
+11000000010101010010111111011001
+11000000001010101010111111101101
+11000000000100010011000000000001
+11000000011111111011001000010010
+00100000001000000010111101011110
+00100000010000000011001010111101
+11000000000000001010111111011101
+11000000000000010010111111101000
+00100000011000000000000000000000
+01011000000000000000000000000001
+00100000010000000010111111110111
+01011000000000000000000000000001
+00100000010000000011001010001001
+01011000000000000000000010000000
+11011010001000000000000100110000
+00100000010000000011001010110011
+00100000010000000011001001111101
+11011010001000000000000100110001
+00100000010000000011001010111111
+00100000001000000011001000101101
+01011000000000000000000000000001
+00100000010000000010111111111111
+01011000000000000000000000000010
+00100000010000000011001010001001
+00100000001000000010111111100001
+00100000010000000011001010111101
+11000000000000001010111111110001
+11000000000000010010111111111001
+00100000011000000000000000000000
+00100000010000000010111111011111
+01011000000000000000000100000110
+00100000010000000011001011010000
+11000000000000001010111111110110
+00100000011000000000000000000000
+01011000000000000000000000000010
+11011010001000000000000100000110
+00100000001000000011001010110011
+00100000010000000010111111101010
+01011000000000000000000100000111
+00100000010000000011001011010000
+11000000000000001010111111111110
+00100000011000000000000000000000
+01011000000000000000000000000010
+11011010001000000000000100000111
+00100000001000000011001010110011
+00100000010000000011001010111101
+11000000000000001011000000000101
+11000000000000010011000000010001
+00100000011000000000000000000000
+01011000000000000000000100000110
+00100000010000000011001011010000
+11000000000000010011000000001001
+00100000011000000000000000000000
+00100000010000000011001010001011
+00011111111000011111111000000001
+00100000010000000011001010001101
+01011000000000000000000000000000
+01011000000000000000000100000110
+10011010011000001000101000000000
+11100000101000010000000000000000
+00100000001000000010111101011110
+01011000000000000000000100000111
+00100000010000000011001011010000
+11000000100000000011000000010101
+00100000011000000000000000000000
+00100000010000000011001010001011
+00011111111000011111111000000010
+00100000010000000011001010001101
+00100000001000000011000000001100
+01101000000000001000110101010000
+00100000011110100000000000000000
+01110000000011010101000000000000
+01101000000000010000110101001110
+11011000010000000000001010111010
+10011000010001100111110000000000
+00100100011000101000000000000000
+01101000000000001000110010110110
+11000001110111010000000000000000
+01101000000000001000110010110111
+01000100110111110100000000010111
+11000000010100000011000000111011
+11000000010100001011000000101100
+11000000010100110011000001000001
+11000000010100111011000001000011
+11000000010101001011000001001001
+11000000010110000011000001001101
+01110000000011010100001000000000
+00100000011000000000000000000000
+01101000000000001000110010111000
+11000000000000001011000000110001
+11000000010000100011000000110100
+11000000010100111011000000111001
+00100000001000000011000000101010
+00100000010000000011001010001011
+01100000000000001000110011110111
+00100000001000000011000000111111
+00100000010000000011001010010001
+00100000010000000011001010010110
+00100000010000000011001010001011
+01100000000000001000110011110111
+00100000001000000011000000111111
+01110000000011001111011110100001
+00100000001000000011000000111111
+01101000000000001000110010111000
+11000000010000001011000000111110
+00100000001000000011000000101010
+00100000010000000011000010010000
+01110000000011010100001000000001
+00100000011000000000000000000000
+01110000000011001111011100010101
+00100000001000000011000000111111
+00100000010000000011001010001111
+11000000000000000011000001000111
+11000000000000001011000000111001
+00100000011000000000000000000000
+01110000000011001111011110100000
+00100000001000000011000000111111
+01110000000011001111011100000000
+01110000000011001111100000000000
+01110000000011001111100100000001
+00100000001000000011000000111111
+00100000010000000011001010011100
+01101000000000001000110010111000
+00011111111000001111111000000010
+00011111111000100111001000000000
+11011000110000000000110010110110
+01011000000000000000000100111100
+10011010011000001000101000000000
+00100000001000000111111100000001
+01000100110111111100000000010111
+00100000010000000011000001111101
+00100000010000000010110001111111
+00100000010000000100100011010011
+00100000001000000011000001010111
+00100000010000000011001010001111
+11000001100000000000000000000000
+00100000010000000010111101010001
+00100000001000000011000010011000
+00100000010000000011001010001111
+11000001100000001000000000000000
+00100000010000000010111111000001
+00100000010000000010111111001011
+00100000010000000011001010001011
+00100000011110100000000000000000
+00100000010000000011001010000110
+00100000010000000010111101001100
+00100000010000000011000010010011
+01011000000000000000000000000000
+00011010011000001000101010100111
+00100000001000000011001000101101
+00100000010000000111111111101001
+00011010011000001010001010100111
+11101010001010100000000000000000
+00011100010000100111111000000000
+10011000010001100111110000000000
+00100100010000010010110100011000
+00011111111000100010010000000000
+00011010011000001010001010100111
+11101010001000100000000000000000
+00011010011000001010001010101011
+11101010001010001000000000000000
+10011000010000001000010000000000
+00011010010000100111111000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+01111001001111111111111000011100
+00011010011000001000101010100111
+11100000101000100000000000000000
+00100000001000000111111111100111
+01011000000000000000000000000001
+00100000010000000011001010000111
+00100000010000000011001010000011
+01011000000000000000000011111111
+00011010011000001000101010101011
+11100000101000001000000000000000
+00100000001000000011000001100111
+01011000000000000000000101011100
+00100000010000000011001011010000
+00100000011110100000000000000000
+00100000010000000011000001101010
+00100100011101000000000000000000
+00100000010000000011001010000001
+00011111111000001111111000000001
+00011111111000010111111000000001
+00100000010000000011001010000100
+11000000000000000010111101001100
+11000000000000001011000010010000
+00100000011000000000000000000000
+01011000000000000000000000000001
+00100000010000000011001010010010
+00100000001000000011001010010110
+01011000000000000000000000000001
+00100000010000000011001010100101
+01011000000000000000001010000000
+11011000111000000000000000001000
+00100000001000000111111100001000
+00100000010000000011001010100010
+00100000011110100000000000000000
+11011000111000000000000000001000
+00100000010000000111111100010110
+00100100011110100000000000000000
+00100000010000000011001010100100
+01011000000000000000000000000111
+00100000010000000011001010010010
+00100000010000000011001010010110
+00100000001000000010111101011110
+01000100111000000100000000011000
+00100000010000000011001010001111
+11000001100000111000000000000000
+00100000010000000011000011001011
+00100000010000000011000011100000
+00100000010000000011000101101110
+00100100001101111010111101011110
+00100000010000000011000010111100
+00100000010000101011000101110010
+00100000010000000010111101001100
+00100000010000000011001010010100
+01111001001000000111111000000000
+00100000010000000011001010010111
+00100000010000000010111101011110
+00100000010000000011000010010011
+00100000010000000011000010111100
+00100000001000101011000011000001
+01011000000000000000000101100100
+00100000010000000011001011010011
+00100000010000000011000010111110
+00100000001000101011000011000101
+01011000000000000000000101100000
+00100000010000000011001011010011
+00100000010000000011000010111110
+00100000001000101011000011001000
+00100000011000000000000000000000
+01011000000000000000000100101011
+00100000010000000011001011010011
+00100000010000000011001000101010
+10011000010001100111110000000000
+00100000011000000000000000000000
+01011000000000000000000110000010
+00100000010000000011001011010000
+00011010011000001000101010010001
+00100000001000000011001010110100
+01011000000000000000000110000101
+00100000010000000011001011010000
+00100000001000000011000011000011
+01011000000000000000000110001000
+00100000010000000011001011010000
+00100000001000000011000011000011
+00100000010000000011001010010100
+11000011100000111000000000000000
+01111001001000000111111000000111
+00100000010000000011001010010111
+00100000010000000011001010000011
+00100000010000000011001010011100
+01011000000000000000000000000000
+00011010011000001000101011110101
+11100000101000011000000000000000
+11011010001000000000000110000011
+00100000010000000011001010111111
+11100000101000111000000000000000
+00100000010000000011000010111100
+00100100011000101000000000000000
+00011010011000001010001010010001
+11101010001000001000000000000000
+11011010001000000000000110000010
+00100000010000000011001010110011
+00011010011000001010001010010000
+11101010001000001000000000000000
+00100000001000000011000101001010
+01000100111000001100000000011000
+00100000010000000011001010000001
+00011111111000001111111000000001
+00011111111000010111111000000011
+00100000010000000011001010000100
+11000000000000000011000100001110
+11000000000000001011000100110010
+11000000000000010011000011101010
+11000000000000011011000100110010
+00100000011000000000000000000000
+00100000010000000010111111011111
+01011000000000000000000101100000
+00100000010000000011001001111110
+00100000001110100011000011100000
+00100000010000000011001000101100
+01011000000000000000000110001001
+00100000010000000011001011010000
+00100000010110100011000100001000
+01011000000000000000000110000111
+00100000010000000011001011010000
+00100000010000000011001000101111
+00011010011000001010001011110111
+11101010001010001000000000000000
+11011010001000000000111110011110
+00100000010000000010111001011000
+00011010011000001000101011110111
+11100000101010001000000000000000
+00100000010000000010111110010100
+00011010011000001000101011111010
+11100000101010001000000000000000
+00011000010001100111110001010000
+00100100011000010000000000000000
+01011000000000000000000110001000
+00100000010000000011001001110101
+00100000010000000010110010010000
+11011010001000000000000110001000
+00100000010000000011001011001000
+11100000101010001000000000000000
+11011010001000000000000110000111
+00100000001000000011001010110011
+01011000000000000000000000000001
+11011010001000000000000110001001
+00100000010000000011001010110011
+11011000010000000000000000000000
+00100000010000000010110010010100
+00100000001000000011000100000110
+00100000010000000010111111101010
+01011000000000000000000101100100
+00100000010000000011001001111110
+00100000001110100011000011100000
+00100000010000000011001000101100
+01011000000000000000000110000110
+00100000010000000011001011010000
+00100000010110100011000100101100
+01011000000000000000000110000100
+00100000010000000011001011010000
+00100000010000000011001000101111
+00011010011000001010001011110110
+11101010001010001000000000000000
+11011010001000000001000010011110
+00100000010000000010111001011000
+00011010011000001000101011110110
+11100000101010001000000000000000
+00100000010000000010111110010100
+00011010011000001000101011111001
+11100000101010001000000000000000
+00011000010001100111110001010000
+00100100011000010000000000000000
+01011000000000000000000110000101
+00100000010000000011001001110101
+00100000010000000010110010010000
+11011010001000000000000110000101
+00100000010000000011001011001000
+11100000101010001000000000000000
+11011010001000000000000110000100
+00100000001000000011001010110011
+01011000000000000000000000000001
+11011010001000000000000110000110
+00100000010000000011001010110011
+11011000010000000000000000000000
+00100000010000000010110010010100
+00100000001000000011000100101010
+00100000010000000010111111011111
+00100000010000000011001001111101
+00100000010000000011001000101100
+01011000000000000000000110000011
+00100000010000000011001011010000
+00100000010110100011000101001100
+00100000010000000011000101001111
+00011010011000001010001011110101
+11101010001010001000000000000000
+11011010001000000000111010011110
+00100000010000000010111001011000
+00011010011000001000101011110101
+11100000101010001000000000000000
+00100000010000000010111110010100
+00011010011000001000101011111000
+11100000101010001000000000000000
+00011000010001100111110001010000
+00100100011000010000000000000000
+01011000000000000000000110000010
+00100000010000000011001001110101
+00100000010000000010110010010000
+11011010001000000000000110000010
+00100000010000000011001011001000
+11100000101010001000000000000000
+11011010001000000000000110000001
+00100000001000000011001010110011
+01011000000000000000000000000001
+11011010001000000000000110000011
+00100000010000000011001010110011
+01011000000000000000000110000001
+00100000010000000011001011010000
+00100000001000000011001000101111
+00011010011000001010001000000000
+11101010001000001000000000000000
+00100000010000000011001000111100
+00100000010000000010110111011110
+00100000010000000011001001011111
+00101111111011111111111000000000
+00100000001000001011000101011100
+00100000010000000011000101011101
+00100000010000000010110101010011
+00100000010000000010110111110111
+00100000001000000010111001000101
+01000100111000010100000000011000
+00011010011000001000101010000110
+00100000010000000011001011010110
+01011000000000000000000100111011
+00100000010000000011001011010000
+00100000011110100000000000000000
+01011000000000000000000000000110
+00011010011000001000101010000110
+11100000101000001000000000000000
+11011111001000000000000000000110
+01011000000000000000000100101111
+10011010011000001000110000000000
+00011010011000001000101000100010
+00100000001000000111111100000001
+00100000010000000011000101101110
+00100100001101111010111101011110
+00100000001000000011000101110010
+00100000010000000010111101011110
+00100000010000000010111000010001
+00100100011101111000000000000000
+00100000001000000011000101010010
+01000100111000011100000000011000
+00100000010000000011000110001000
+00100100001101000010111101011110
+00011010011000001010001010000100
+11101010001000001000000000000000
+00100000001110100010111101011110
+00011111111000001111111000000010
+10011000000000000111001000000000
+00011010011000001000110000000000
+01011000000000000000000100001001
+10011010011000001000101000000000
+00100000010000000111111100000001
+00100000010000000011001010000110
+00100000010000000011001010110110
+00100000010110100011000010010011
+01011000000000000000000100001011
+00100000010000000011001011010000
+11000000000000001011000110011110
+11000000000000010011000111000110
+11000000000000011011000111110010
+11000000011111111011001000010010
+00100000001000000010111101011110
+00100000010000000010110001111010
+00100000010000000111111111101001
+00011010011000001010001011001010
+11101010001000001000000000000000
+00011010011000001010001011001011
+11101010001010001000000000000000
+10011000010001100111110000000000
+00100100010000101111111111100111
+00011010011000001010001011001010
+11101010001000001000000000000000
+00011010011000001000101011001011
+11100000101000001000000000000000
+00011010011000001010001011000100
+11101010001000011000000000000000
+00011010011000001010001011000111
+11101010001010011000000000000000
+10011000010001100111110000000000
+00100100010000101111111111100111
+00011010011000001010001011000100
+11101010001000011000000000000000
+00011010011000001000101011000111
+00100000001000000011001011000101
+00100000010000000010111110001000
+00100000010000000011001001001100
+01100000000000001000101010100010
+00100000010000000011001001110100
+01101000000000001000101010100010
+00101000010011111111111000000011
+01111001001000001111111000000000
+00011010011000001000101010110010
+11100000101000001000000000000000
+11000000000000001011001000010110
+00100000010000000011001001000101
+00100000010000000011001001110100
+00101000010011111111111000000100
+01111001001000001111111000000000
+00100000010000000011001001001001
+00011010011000001010001011011110
+11101010001000010000000000000000
+00100000001000000111111110011100
+01011000000000000000000000000001
+01100000000000001000110101010100
+00100000010000000011001010011110
+11100000101000111000000000000000
+00100000010000000011001010011110
+00100100010110100011000110111101
+00100000010000000011001010011110
+00100000010110100011000111000010
+01110000000011010101001000100000
+01101000000000001000110100111000
+01111001001000000111111000000010
+01100000000000001000110100111000
+00100000011000000000000000000000
+01011000000000000000000000000001
+00100000010000000011001010101000
+01011000000000000000000101000000
+11011000111000000000000000001011
+00100000001000000111111100001000
+00100000010000000011001010100111
+01011000000000000000000000000000
+11011000111000000000000000001011
+00100000001000000111111100001000
+00100000010000000011001001110100
+00101000010011111111111000000011
+00100000001000001011001000011011
+11011000101000000000110101100100
+00100000010000000011000111100000
+01101000000001000000110101100100
+00100100010110100011000111100100
+01101000000001000000110101100100
+00100000010110100011000111101001
+00100000010000000010110001111010
+01101000000001000000110101100100
+11011010001000000000000101101000
+00100000010000000011001010111111
+11100000101001000000000000000000
+01011000000000000000000101110000
+10011010011000001010001000000000
+11101010001011000000000000000000
+10011000010001100111110000000000
+00100100010000101011000111101101
+01011000000000000000000101101000
+10011010011000001010001000000000
+11101010001001000000000000000000
+11011010001000000000000101110000
+00100000010000000011001010111111
+11100000101001000000000000000000
+00100000001000000010111101011110
+01011000000000000000000100001011
+10011010011000001000110000000000
+11011111001000000000000000001001
+00100000001000000111111111110011
+01011000000000000000000000000001
+00100000010000000011001010101011
+01011000000000000000000101000000
+11011000111000000000000000001110
+00100000001000000111111100001000
+00100000010000000011001010101010
+01011000000000000000000000000000
+11011000111000000000000000001110
+00100000001000000111111100001000
+01110000000011010101000100010000
+01101000000000001000110100111000
+01111001001000000111111000000001
+01100000000000001000110100111000
+00100000011000000000000000000000
+11011000101000000000110101110100
+00100000010000000011000111100000
+01101000000000010000110101110101
+00100100010110100011001000001001
+01101000000000010000110101110101
+00100000010110100011001000001110
+00100000010000000010110001111010
+01101000000000011000110101110100
+11011010001000000000000101111000
+00100000010000000011001011000100
+01011000000000000000000101111011
+10011010011000001010001000000000
+11101010001010011000000000000000
+10011000010001100111110000000000
+00100100010000101011001000000111
+01011000000000000000000101111000
+10011010011000001010001000000000
+11101010001000011000000000000000
+11011010001000000000000101111011
+00100000010000000011001011000100
+00100000001000000010111101011110
+01110000000011010101001000100001
+00100000001000000011000110111001
+01011000000000000000000000000001
+00100000010000000011001010101110
+01011000000000000000000101000000
+11011000111000000000000000001100
+00100000001000000111111100001000
+00100000010000000011001010101101
+01011000000000000000000000000000
+11011000111000000000000000001100
+00100000001000000111111100001000
+00100000010000000011001010111101
+11000000000000001011001000010110
+11000000000000010011001000011011
+00100000011000000000000000000000
+01011000000000000000000100001101
+00100000010000000011001001111110
+11011010001000000000000101100000
+00100000010000000011001010111111
+00100000001000000011001000101101
+01011000000000000000000100001101
+00100000010000000011001001111110
+11011010001000000000000101100100
+00100000010000000011001010111111
+00100000001000000011001000101101
+00100000010000000010110001111010
+00011010011000001000101011001101
+11100000101000001000000000000000
+00100000011000000000000000000000
+00100000010000000010110001111010
+00011010011000001010001010111110
+00100000001000000011001001111111
+00100000010000000010110001111010
+00011010011000001000101010111110
+00100000001000000011001000101101
+00011010011000001010001010101110
+00100000001000000011001001111111
+00011010011000001000101010101110
+11100000101000100000000000000000
+00100000011000000000000000000000
+00011010011000001000101010010000
+00100000001000000011001010110100
+01011000000000000000000000000000
+00100000010000000010110001111010
+00011010011000001000101010000101
+00100000001000000011001010110100
+00011010011000001000101001000010
+00100000001000000011001010110100
+01011000000000000000000000000100
+00011010011000001000101011001100
+00100000001000000011001010110100
+00011010011000001010001010000111
+00100000001000000011001011010001
+00011010011000001000101010000111
+00100000001000000011001010110100
+01011000000000000000000000000010
+00011010011000001000101011010000
+00100000001000000011001010110100
+01011000000000000000000000000001
+00100000010000000010110001111010
+00011010011000001000101011001110
+00100000001000000011001010110100
+00100000010000000010110001111010
+00011010011000001010001010110100
+00100000001000000011001011010001
+01011000000000000000000000000001
+00100000010000000010110001111010
+00011010011000001000101010110100
+00100000001000000011001010110100
+00100000010000000010110001111010
+00011010011000001010001010110010
+00100000001000000011001011010001
+01011000000000000000000000000001
+00100000010000000010110001111010
+00011010011000001000101010110010
+00100000001000000011001010110100
+00100000010000000010110001111010
+00011010011000001010001010010110
+00100000001000000011001011010001
+00011010011000001000101010010110
+00100000001000000011001010110100
+00011010011000001010001011001111
+00100000001000000011001011010001
+01011000000000000000000000000000
+00011010011000001000101011001111
+00100000001000000011001010110100
+00011010011000001010001011010010
+00100000001000000011001011010001
+00011010011000001010001000000001
+00100000001000000011001011010001
+00011010011000001010001010110101
+00100000001000000011001011010001
+01011000000000000000000000000000
+00100000010000000010110001111010
+00011010011000001000101010110101
+00100000001000000011001010110100
+00100000010000000010110001111010
+00011010011000001010001011111011
+11101010001000001000000000000000
+01100000000000001100000111011110
+00100000011000000000000000000000
+00100000010000000010110001111010
+01101000000000001100000111011110
+00011010011000001000101011111011
+00100000001000000011001010110100
+00011010011000001010001011111100
+00100000001000000011001011010001
+00011010011000001000101011111110
+00100000001000000011001010110100
+01011000000000000000000100001001
+10011010011000001010001000000000
+11101010001010001000000000000000
+00100000011000000000000000000000
+01011000000000000000000100110101
+00100000001000000011001011010000
+01011000000000000000000000000000
+11011010001000000000000100110101
+00100000001000000011001010110011
+01011000000000000000000100101011
+00100000010000000011001011001101
+11101010001000100000000000000000
+00100000011000000000000000000000
+01011000000000000000000101011111
+00100000001000000011001011010000
+01011000000000000000000000000000
+11011010001000000000000101011111
+00100000001000000011001010110011
+01011000000000000000000000000000
+11011010001000000000000101011100
+00100000001000000011001010110011
+11011010001000000000000100101111
+00100000001000000011001010110011
+01011000000000000000000100001000
+00100000001000000011001011010000
+11011010001000000000000100001000
+00100000001000000011001010110011
+01011000000000000000000100000101
+00100000001000000011001011010000
+01011000000000000000000000000000
+11011010001000000000000100000101
+00100000001000000011001010110011
+01011000000000000000000100000100
+00100000001000000011001011010000
+01011000000000000000000000000000
+11011010001000000000000100000100
+00100000001000000011001010110011
+01011000000000000000000000000000
+11011010001000000000000100111011
+00100000001000000011001010110011
+01011000000000000000000000000001
+00100000001000000011001010011010
+01011000000000000000000100001100
+00100000010000000011001011001101
+11101010001000111000000000000000
+00100000011000000000000000000000
+01011000000000000000000101011110
+00100000001000000011001011010000
+01011000000000000000000000000000
+11011010001000000000000101011110
+00100000001000000011001010110011
+01011000000000000000000000000000
+11011010001000000000000110000000
+00100000001000000011001010110011
+01011000000000000000000000000000
+11011010001000000000000101111110
+00100000001000000011001010110011
+01011000000000000000000000000000
+11011010001000000000000101111111
+00100000001000000011001010110011
+11011010001000000000000100000010
+00100000001000000011001010110011
+11011010001000000000000100000011
+00100000010000000011001011000111
+11100000101000001000000000000000
+00100000011000000000000000000000
+01011000000000000000000101011101
+00100000001000000011001011010000
+11011010001000000000000101011101
+00100000001000000011001010110011
+01011000000000000000000110001010
+00100000010000000011001011010000
+00100000001000000011001001101010
+01011000000000000000000100001100
+00100000001000000011001011010000
+00011111111000100000010000000000
+00011010001000100111111000000000
+10011010011000001000101000000000
+00011000010000100111111000000000
+00100000011000000000000000000000
+00100000010000000011001010111111
+11100000101000011000000000000000
+00100000011000000000000000000000
+00100000010000000010110001111010
+00011111111000100010010000000000
+00011010001000100111111000000000
+10011010011000001000101000000000
+00011010010000100111111000000000
+00100000011000000000000000000000
+00100000010000000010110001111010
+10011010011000001010001000000000
+00100000011000000000000000000000
+00100000010000000011001011001101
+11101010001000001000000000000000
+00100000011000000000000000000000
+00100000010000000011001011001101
+11101010001010100000000000000000
+00100000011000000000000000000000
+01011000000000000000000000000000
+00100000001000000011001010110100
+01000100111000100100000000011000
+01101000000000001100000010010010
+00100000001110100011001011011000
+11000000000000100010111100110000
+11000000000001111011010000110110
+11000000000001001100010111011110
+11000000000001010011100100101010
+11000000000001110011010110111111
+11000000000010000100010010100100
+11000010100000110011110100000000
+00100000011000000000000000000000
+01000100111000101100000000011000
+01110000000000010101000100000000
+01110000000000010111111100000000
+01110000000000011000000000000000
+01011000000000000000000000000000
+01100000000000101000100110101110
+01101000000000001100000010010010
+00100000001110100011001011100011
+11000000000001010011100101100010
+00100000011000000000000000000000
+00100000010000000111110011010001
+00100000010000000111110110011100
+00100000010000000011001011110110
+01101000000000010100000111110011
+00100000001000000111111110011100
+01101000000000010100000111110001
+00100000001000000111111110011100
+01101000000000010100000111101111
+00100000001000000111111110011100
+01000100111000110100000000011000
+11011010001000000100011001101000
+00100000010000000111111111000100
+00100000011110100000000000000000
+00011111111000100010011000000000
+00100000010000000011001011111111
+00100000001000000011001100100100
+11011010011000000000000000000000
+00100000011000000000000000000000
+11000000000000001011001100010001
+11000000000010000011001101010111
+11000000000000101011001100110101
+11000000000010010011001100111100
+11000000000000110011001101010011
+11000000000000100011001110010100
+11000000000000010011001110011001
+11000000000010011011001110010100
+11000000000010100011001101001011
+11000000000010101011001101001111
+11000000000000011011001100101110
+11000000000001011011001101000000
+11000000000001100011001101000111
+11000000000010110011001101011011
+11000000000011000011001100101010
+11000000000101010011001100011010
+11000000000101011011001100011000
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001000000111111000000000
+01100000000000010100011010000010
+01101000000000010100001000001010
+01111001001111111111111000000000
+01100000000000010100001000001010
+00100000011000000000000000000000
+01110000000000100010100100000000
+00100000011000000000000000000000
+01101000000000001000001000101001
+00011111111000001111111000000001
+01100000000000001000001000101001
+00011111111001100111110000000001
+00100000001000010011001111011111
+01110000000000100010100100000000
+01101000000000010100001000001010
+01111001001000000111111000001001
+01100000000000010100001000001010
+00100000001000000011001111101001
+01101000000000010100000111110101
+00100000001000000111111110011100
+01101000000000010100000111101001
+00100000001000000111111110011100
+01101000000000010100000111101101
+00100000001000000111111110011100
+01101000000000010100001000001010
+01111001001000000111111000000001
+01100000000000010100001000001010
+00100000001000000011010000010010
+01101000000000010100011010000010
+01111001001000000111111000000111
+01100000000000010100011010000010
+01101000000000010100001000001010
+01111001001000000111111000000010
+01100000000000010100001000001010
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001000000111111000000001
+01100000000000010100011010000010
+01101000000000010100001000001010
+01111001001000000111111000000100
+01100000000000010100001000001010
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001000000111111000000011
+01100000000000010100011010000010
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001000000111111000000101
+01100000000000010100011010000010
+01101000000000010100001000001010
+01111001001000000111111000000011
+01100000000000010100001000001010
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001111111111111000000101
+01100000000000010100011010000010
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001000000111111000001001
+01100000000000010100011010000010
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001111111111111000001001
+01100000000000010100011010000010
+00100000001000000011010000011000
+01101000000000010100011010000010
+01111001001000000111111000000010
+01100000000000010100011010000010
+00100000011000000000000000000000
+01101000000000010100001000001010
+01111001001000000111111000000000
+01100000000000010100001000001010
+00100000011000000000000000000000
+01101000000000010100001000001010
+01111001001000000111111000001000
+01100000000000010100001000001010
+00100000001000000011001111101001
+01000100111000111100000000011000
+01100000000000001000001000101010
+01101000000000001000001000101010
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000001000001000101010
+00100000010000000111110011011101
+00100000010000000011001111010110
+00100000010000000011001110000111
+00100000010000000011001110001101
+00100000010000000110010100011011
+01101000000000010100000111111101
+00100000010000000111111110011100
+00100000001000000011001101100001
+11101010011000001000000000000000
+00100000011110100000000000000000
+00011111111000001111111111111111
+11100010011000001000000000000000
+00100100011110100000000000000000
+00011010010000100111111000000000
+00100000001000000111111110011100
+11101010011000010000000000000000
+00100000011110100000000000000000
+00011111111000001111111111111111
+11100010011000010000000000000000
+00100100011110100000000000000000
+00011010010000100111111000000000
+00100000001000000111111110011100
+01101000000010010100001000111111
+00011000010000001010011000000001
+11011010010000000011001101111111
+00100000001000000011001101101101
+00100000010000000011010000101101
+11000000000000001011001110000010
+00100000001000000011010000001010
+01011000000000000000000000000010
+11100010011000001000000000000000
+00011000010000001010010000001000
+11101010010000010000000000000000
+00100000001000000111111110011100
+11011010011000000100001000000101
+11011010010000000011001110001010
+00100000001000000011001101101101
+00100000010000000010001001010010
+00100000001000101011010000001110
+00100000011000000000000000000000
+11011010011000000100011001111110
+11011010010000000011001110010000
+00100000001000000011001101110100
+00100000010000000011001111110000
+00100000010000000011010000001000
+01101000000000010100000111110111
+00100000001000000111111110011100
+00100000010000000011001110101100
+01101000000000010100011010000010
+01111001001111111111111000000111
+01100000000000010100011010000010
+00100000011000000000000000000000
+01110000010000100000010100000000
+01101000000000010100011010000010
+11000010100000111011001110011110
+00101111111011000000000000000001
+00100000010000001011001011111101
+01000100111001000100000000011001
+01101000000000010100011010000010
+01111001001111111111111000000000
+01111001001111111111111000000001
+01111001001111111111111000000010
+01111001001111111111111000000011
+01111001001111111111111000000111
+01100000000000010100011010000010
+00100000001000000011010000011000
+00100000010000000011001110101001
+00100000001000000011010000001010
+01011000000000000000000000000000
+01100000000000010100001000001000
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000010100001000001010
+00100000011000000000000000000000
+01101000000000010100001000001010
+01100000000000010100001000001000
+01011000000000000000000000000000
+01100000000000010100001000001010
+00100000011000000000000000000000
+01101000000000010100001000001010
+01111001001000000111111000000111
+01100000000000010100001000001000
+01011000000000000000000000000000
+01100000000000010100001000001010
+00100000011000000000000000000000
+01101000000000001100011010000010
+00101111111011111111111000000101
+00100000011000000000000000000000
+01011000000000001010101001010101
+01100000000000010000101010101010
+01000100111001001100000000011001
+11011000010000000000000000000010
+11011010001000000000101010101010
+11011010010000000000000011000011
+00100000001000000110011000000110
+01000100111001010100000000011001
+11011000010000000000000000000010
+11011010001000000000101010011010
+11011010010000000000000011000011
+00100000010000000110010111011111
+01101000000000010000101010011010
+11011000010000001010101001010101
+10011000010001100111110000000000
+00100000011000000000000000000000
+01101000000000001100010101011010
+01100000000000001100001000000101
+00100000011000000000000000000000
+11011000111000000000000000001001
+00100000001000000010110000110010
+11011000111000000000000000001001
+00100000001000000010110000110110
+01110000010000100000011000000101
+00100000001000000011001111010000
+11011010011000000100001000000110
+11011010010000000011001111010010
+00100000001000000011001101101101
+01110000010000110110001100000001
+00100000011000000000000000000000
+01110000010000110110001100000000
+00100000011000000000000000000000
+01110000000010101001100100001010
+00100000001000000111110110001111
+01110000000010101001100100011101
+00100000001000000111110110001111
+01000100111001011100000000011001
+01101000000000001100001000000111
+01100000000000001000000101101101
+01110000000000100010100000000001
+01110000000010101001100100000011
+00100000001000000111110110001111
+01110000000010101001100100011110
+00100000001000000111110110001111
+01110000000010101001100100000100
+00100000001000000111110110001111
+01101000000000010100011010000111
+01100000000000010100011001111110
+00100000010000000011010000000100
+01110000000010101001100100000001
+00100000001000000111110110001111
+01011000000000000000000000000000
+01100000000000010100011001111110
+01110000000010101001100100000010
+00100000001000000111110110001111
+01110000000010101001100100001111
+00100000001000000111110110001111
+01110000000010101001100100010000
+00100000001000000111110110001111
+01110000000010101001100100001110
+00100000001000000111110110001111
+01110000000010101001100100001101
+00100000001000000111110110001111
+01110000000010101001100100010111
+00100000001000000111110110001111
+01110000000010101001100100011000
+00100000001000000111110110001111
+01110000000010101001100100010110
+00100000001000000111110110001111
+01110000000010101001100100010001
+00100000001000000111110110001111
+01110000000010101001100100010101
+00100000001000000111110110001111
+01110000000010101001100100010100
+00100000001000000111110110001111
+01110000000010101001100100010011
+00100000001000000111110110001111
+01110000000010101001100100011001
+00100000001000000111110110001111
+01110000000010101001100100000110
+00100000001000000111110110001111
+01110000000010101001100100000101
+00100000001000000111110110001111
+01110000000010101001100100011111
+00100000001000000111110110001111
+01110000000010101001100100100000
+00100000001000000111110110001111
+01110000000010101001100100100101
+00100000001000000111110110001111
+01111001001000000000000000001101
+00100000011000000000000000000000
+01111001001111111000000000001101
+00100000011000000000000000000000
+00100000010000000011010000101101
+11000000000000010011010000100100
+01011000000000000000000000000001
+11100010011000001000000000000000
+00011000010000001010001000000011
+00011000010000001010010000000110
+11101010001010001000000000000000
+00011010011000001010011000000001
+11100010011010001000000000000000
+00100000001000000011001110000101
+01011000000000000000000000000000
+11100010011000001000000000000000
+01101000000000010100011010000010
+11000011000001001011010000101001
+00100000010000000011010000000010
+01101000000010010100001000111111
+00011000010000001010001000000010
+00011000010000001010010000000100
+00100000001000000011010000100000
+01101000000010010100001000111111
+00011000010000001010011000000000
+11101010011000001000000000000000
+00100000011000000000000000000000
+00100000010000000011010000101101
+11000000100000000011010000110100
+00100000001000000011010000001010
+00011000010000001010010000001010
+00100000001000000011001110000101
+00100000011101011000000000000000
+01110000100000001000000100000000
+01011000000000000011010001100011
+01100000000000010100000111101011
+01011000000000000110100101101100
+01100000000000010100000111101101
+01011000000000000011010011110101
+01100000000000010100000111110011
+01011000000000000011010011110100
+01100000000000010100000111101111
+01011000000000000011010001111110
+01100000000000010100000111110101
+01011000000000000011010010110010
+01100000000000010100000111111101
+01011000000000000011010001100101
+01100000000000010100000111111011
+01011000000000000011010001110000
+01100000000000010100000111101001
+01011000000000000011010100000001
+01100000000000010100000111111001
+01000100111001100100000000011001
+00100000010000000011010110011011
+00100000010000000110100101001000
+00100000010000000011010110101101
+00100000010000000111110100001000
+00100000010000000111110011010011
+01011000000000000011010100001011
+01100000000000010100011101100110
+01011000000000000011010011111100
+01100000000000010100011101011101
+01011000000000000011010011111000
+01100000000000010100011101011111
+01011000000000000011010001101100
+01100000000000010100011101100001
+01011000000000000011010110100010
+01100000000000010100011010101001
+01011000000000000011010110100100
+01100000000000010100011010101011
+01011000000000000011010110101001
+01100000000000010100011010110100
+01011000000000000011010110100110
+01100000000000010100011010110110
+01101000000000010100011010000010
+11000011100001100000000000000000
+00100000001000000011010000001010
+00100000010000000011010110000110
+00100000001000000011010000001010
+00100000010000000101100010010010
+00100100011110100000000000000000
+11011010001000000000101100000110
+00100000010000000111111001010100
+00100100011101000000000000000000
+11011000110000000000101100000110
+00100000001000000100011101000110
+01101000000000010100011110010111
+01100000000000010100011110010001
+01110000010001110101001100000001
+00100000001000000011010110001111
+01101000000000001100011110011101
+11000000000000001011010001111001
+01101000000000010100011010000010
+11000011000001001011010001111001
+01101000000000001100011110011110
+11000000000000001011001111010000
+01101000000000001100011100000000
+00100100001110100011001111010000
+00100000001000000011001111010010
+01101000000000001100011110011011
+01101000000010001100011110011100
+10011000010000011111111000000000
+11000000000000001011001111010000
+00100000001000000011001111010010
+00011010011000100111111000000000
+11000000000101101011010000110001
+11000000000010000011010000011010
+11000000000010100011010011011111
+11000000000010101011010011101000
+11000000001000000011010010000101
+00100000011000000000000000000000
+01101000000000010100010100001001
+11000000000000001011010010001100
+01101000000000010100001111011000
+00100000001110100011010010100010
+01110000010001111000101000000010
+01110000010001111000111100111100
+00100000011000000000000000000000
+01101000000000010100010010011010
+00100000001110100011010010100000
+01110000010001111000101000000001
+01101000000010010100011110110100
+01101000000000010100010010010110
+10011000010000001111111000000000
+01100000000000010100010010010110
+00011111111000100010001000000000
+01101000000000010100010010011000
+10011000010000001111111000000000
+01100000000000010100010010011000
+10011010001000001111111000000000
+00011111111000110000010000000000
+01101000000000010100011111000000
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111111111000000000
+01100000000000010100010010011010
+01110000010001111001000000000001
+00100000011000000000000000000000
+01110000010001111000101000000011
+00100000011000000000000000000000
+01110000010000010111001000000000
+01110000010001111001000000000000
+01101000000000010100001111010110
+01101000000010010100011110111110
+10011000010001100111110000000000
+01111001001000010010001000000000
+01101000000000010100011111000000
+01101000000010010100001111010110
+10011000010001100111111000000000
+01111001001000010010001000000001
+00101010001000000000011000000011
+00100000011000001000000000000000
+01101000000001000100011110111110
+01100000000001000100010010010110
+01110000010001111001000000000001
+00100000011000000000000000000000
+00100000010000000011001101111011
+00100000010000000011010010111001
+00100000010000000011010010111110
+00100000010000000011010011010101
+00100000010000000011010011001010
+00100000010000000011010011000100
+00100000001000000011010011011001
+11011010011000000100011110011001
+11011010010000000011010010111100
+00100000001000000011001101101101
+01110000010001111001101000000000
+00100000011000000000000000000000
+11011010011000000100011110010011
+11011010010000000011010011000001
+00100000001000000011001101110100
+11011010011000000100011010111111
+11011010010000000100011010011110
+00100000001000000011010110010001
+11011010011000000100011110001111
+11011010010000000011010011000111
+00100000001000000011001101101101
+01101000000000010100010010011010
+01100000000000001100000101110010
+00100000011000000000000000000000
+11011010011000000100011110010000
+11011010010000000011010011001101
+00100000001000000011001101101101
+01101000000000001000010000111111
+00101111111000001100000000000000
+00100100001000001011010011010011
+01110000010001111000101000000001
+00100000010000000011010000010110
+00100000001000000101101010111111
+01110000010001111001000000000001
+00100000011000000000000000000000
+11011010011000000100011110010001
+11011010010000000011010011011000
+00100000001000000011001101110100
+00100000001000000011010000011010
+11011010011000000100011110001101
+11011010010000000011010011011100
+00100000001000000011001101110100
+01101000000000010100011110100111
+01100000000000010100011110001101
+00100000001000000011010110101111
+01101000000000010100011110100111
+01100000000000010100011110001101
+01011000000000000000000000000000
+01100000000000010100011110010011
+01100000000000010100011110010001
+00100000010000000011010101011100
+00100000010000000011010110000110
+01110000010000010111001000000000
+00100000001000000011001111111000
+01011000000000000000000000000000
+01100000000000100100011110001101
+01100000000000011100011110001010
+01100000000000010100010100001001
+01110000010001111010000000000001
+01101000000000010100011110010111
+01100000000000010100011110010001
+00100000010000000111111000111000
+01101000000000001100011101011001
+11000001000000000000000000000000
+00100000010000000011010110001111
+00100000001000000011010101101110
+00100000001000000011010100001000
+01101000000000001100011101011001
+11000001100000010000000000000000
+00100000001000000011010100001000
+11011010011000000100011011001101
+00100000010000000011010110000010
+11011010011000000100011011000110
+00100000001000000011010110000100
+01110000010000110110111000000000
+11011010011000000100011011011011
+00100000010000000011010110000010
+11011010011000000100011011010100
+00100000001000000011010011111011
+01101000000000001000010001110111
+11000000000010010011010100000100
+00100000011000000000000000000000
+01101000000000010000010001111000
+11000000000001101011010100110110
+11000000000001011011010101110001
+00100000011000000000000000000000
+01101000000000001100011101010011
+00100000011110100000000000000000
+00100000001000000110100101111000
+00011010001000100111111000000000
+00100000001110100011010100010000
+00011000111000100111111000000000
+11000000000000000011010100010011
+00100000011000000000000000000000
+00011000111000100111111000000000
+11000000000000000011010100011011
+00100000011000000000000000000000
+01110000010001111001110100000001
+11011010011000000100011011110111
+00100000010000000011010110000010
+11011010011000000100011011110000
+00100000010000000011010110000100
+01101000000000010100011010000010
+11000011000001001011010100110010
+00100000001000000011010100100001
+01110000010001111001110100000000
+00100000001000000011010100011101
+01101000000000001100011110011010
+11000001100000001000000000000000
+01110000010001111001100100000101
+00100000011000000000000000000000
+01101000000000001100011110011010
+00011111111000001111111000000001
+01100000000000001100011110011010
+11000000000000001011010100100111
+11000000000000010011010100101011
+00100000011000000000000000000000
+00100000010000000011010101011100
+01110000010001110111000100000001
+11011010011000000100011101101100
+00100000001000000011010101000100
+01110000010001111001101000000000
+01110000010001110111000100000010
+11011010011000000100011101101100
+00100000010000000011010101000100
+01101000000000001100011110011110
+11000000000000001011010101010001
+00100000011000000000000000000000
+01101000000000010100011110010111
+01100000000000010100011110010001
+00100000010000000011010101011100
+00100000001000000011010110001111
+01000100111001101100000000011001
+00100000010000000011011011111100
+11101010001000001000000000000000
+11000000000000011011010100111100
+11000000000000111011010101000000
+00100000011000000000000000000000
+01101000000000001100011110011110
+11000000000000000011010101010001
+11000000000000001011010101011100
+00100000011000000000000000000000
+11101010010000001000000000000000
+11000000000000001011010101100100
+11000000000000000011010101101001
+00100000011000000000000000000000
+01000100111001110100000000011001
+01101000000000001100011110001011
+00101111111011111111111000000000
+00100100011000001000000000000000
+00011010011000001000110000000110
+11101000110000010000000000000000
+00011111111100001111111000000000
+00011111111000001111001000000101
+00011010011000001000110000000011
+00100000010000000011011011110000
+11100000110000001000000000000000
+00011010011000100010001000000000
+00100000001000000111111000111101
+01101000000000001100011101011001
+00100000011110100000000000000000
+01110000010001111001111000000001
+11011010011000000100011011101001
+00100000010000000011010110000010
+11011010011000000100011011100010
+00100000010000000011010110000100
+01110000010001111000000000000100
+01110000010001111000001100000001
+11011010011000000100011101111011
+00100000001000000011010101000100
+01101000000000001100011110011110
+00100000011110100000000000000000
+01110000010001111001111000000000
+00100000010000000011010110000110
+01110000010001111000000000000100
+01110000010001111000001100000000
+11011010011000000100011101111011
+00100000001000000011010101000100
+01110000010001111001111100000001
+01110000010001111000000000000111
+01110000010001111000001100000001
+11011010011000000100011101111011
+00100000001000000011010101000100
+01110000010001111001111100000000
+01110000010001111000000000000111
+01110000010001111000001100000000
+11011010011000000100011101111011
+00100000001000000011010101000100
+01101000000000001100011110011111
+00100000011110100000000000000000
+00100000001000000011010101010001
+11101010001000010000000000000000
+01100000000000010100011110001011
+00101111111011111111111000000000
+00100100011000001000000000000000
+01101000000000001100011110100000
+00100000011110100000000000000000
+01110000010001111010000000000000
+01101000000001000100011110110110
+01100000000001000100010010010110
+01110000010001111001000000000010
+00100000010000000011010110101111
+00100000010000000011010110111001
+01110000010001111000000000000111
+01101000000000001100011110011111
+01100000000000001100011110000011
+11011010011000000100011101111011
+00100000001000000011010101000100
+11011010001000000000000000000001
+00100000001000000011010110000101
+11011010001000000000000000000000
+00100000001000000011010110001100
+11011010001000000000000000000000
+00100000010000000111110100011001
+11011010001000000000000000000001
+00100000010000000111110100011001
+01101000000000001100011110100001
+00100000001000000110100111010111
+00100000010000000111110100000100
+11011111001000000000000000000111
+00100000001000000111110100100110
+11011010011000000100011010111000
+11011010010000000100011010011010
+00100000010000000011010110010110
+00100000010000000011010110000100
+01101000000000010100011110010101
+01100000000000010100011110010011
+00100000001000000011001111111010
+11101010010000010000000000000000
+01100000000000010100000101010100
+11101000110000010000000000000000
+01100000000000010100010010000010
+00100000011000000000000000000000
+11011010001000000000000000000000
+00100000010000000110100110100110
+01101000000000110100011110100001
+01100000000000110000101010011010
+00100000010000000110100110101110
+01101000000000001100011110100001
+00100000001000000110100111010111
+01110000010001111001101100000001
+00100000011000000000000000000000
+01110000010001111001101100000000
+00100000011000000000000000000000
+01110000010001111001110000000000
+01101000000000001100011110100001
+00100000001000000110100111010111
+01110000010001111001110000000001
+01101000000000110100011110100001
+01100000000000110000101010011010
+00100000001000000110100110101110
+01110000010000100010110100000000
+00100000001000000110100010101000
+00100000010000000110100011101011
+00100000010000000110100100001000
+01100000000000010100011110110000
+11011010001000000100011110101010
+00100000010000000110100100110000
+01100000000000001100011110101001
+11000000000000000011010110111110
+00011111111001100111110001100100
+00100100001000010011010110111100
+01100000000000001100011110000011
+01110000010001111000000000000101
+11011010011000000100011101111011
+00100000001000000011010101000100
+01110000010001111000001101100100
+00100000001000000011010110111001
+00100000001000000011010000011010
+00100000011101011000000000000000
+01101000000100001000000010000001
+00011111111000010111111011110000
+01100000000100001000000010000001
+01011000000000000011011000110001
+01100000000000010100000111101011
+01011000000000000011011000110011
+01100000000000010100000111101101
+01011000000000000011010000001010
+01100000000000010100000111110111
+01011000000000000011011000110101
+01100000000000010100000111110011
+01011000000000000011011001001011
+01100000000000010100000111110101
+01011000000000000011001111010000
+01100000000000010100000111101001
+01011000000000000011011011110110
+01100000000000010100000111111001
+01011000000000000011011001111010
+01100000000000010100000111111101
+00100000010000000010110001111010
+01011000000000000011011100100010
+00011010011000001000101011011110
+11100000101000010000000000000000
+01011000000000000011010111101101
+01100000000000010100011101011011
+01011000000000000011010111101111
+01100000000000010100011101011111
+01000100111001111100000000011001
+00100000010000000011011000101000
+00100000010000000111111000111000
+01110000010000010111001000000010
+01110000010010011111011000000000
+01101000000000001100011111001011
+01100000000000001100011010011010
+11000000000000000011010111101110
+01101000000000001100011111001100
+01100000000000001100011010000110
+01110000010000110110111000000000
+00100000010000000011011000001111
+00100000010000000111110011010011
+00100000010000000111110011011101
+01110000010001111111001100000001
+01101000000000010100011010000010
+11000011100001100000000000000000
+00100000001000000011010000001010
+00100000001000000011011000001111
+01110000010001111111001100000010
+01110000010000110110111000000001
+00100000010000000011011000001111
+11011010001000000000000000000000
+00100000010000000111110100011110
+01011000000000000000000000100000
+00100000010000000100011011110000
+11011000101000000100001110110111
+01101000000000001100010010100000
+00011111111000010000010011110000
+00011000010100011000010000000000
+00100000010000000011011000001001
+11100000101010001000000000000000
+00011111111000010000010000001111
+00100000010000000011011000001001
+11100000101010001000000000000000
+00100000010000000101011110100110
+01101000000010001100001110101111
+00011000010000100111001000000000
+11011000101000000100001101110010
+11011000110000000100001110110000
+00100000010000000111111100000001
+01101000000010001100001110101111
+00011000010000100111001000000000
+11011000101000000100001110010010
+11011000110000000100001110110000
+00100000001000000111111100000001
+00011000010001100111110000001001
+00100000001000010011011000001101
+00011000010000001000010000110111
+00100000011000000000000000000000
+00011000010000001000010000110000
+00100000011000000000000000000000
+01101000000000001100011111000000
+11000000111111111011011000100001
+01101000000000001100011110111110
+11000000111111111011011000100100
+01101000000000001100011111001001
+11000000111111111011011000100110
+01101000000000001100011100101100
+00011111111000100111001000000000
+01011000000000000100011100101101
+00011111111000100010001000000000
+00011010001000100000110000000000
+11101000110000001000000000000000
+00011000110000100010001000000000
+11000000011111111011011000011111
+00011111111000100000010000000000
+00100000010000000110100000001110
+11000010000000000011011000011001
+00100000011000000000000000000000
+01101000000001000100011111000000
+01100000000001000100011100101111
+00100000001000000011011000010001
+01100000000000001100011100101101
+00100000001000000011011000010011
+01100000000000001100011100101110
+00100000001000000011011000010101
+11011010001000000000000000000000
+00100000010000000110100110100110
+00100000010000000011011111100100
+00100000010000000010110001111101
+00100000001000000011011000101101
+01110000010001111100111101100100
+01101000000000001100011111001001
+01100000000000001100011101000100
+00100000001000000110100010101000
+00100000010000000110100000110101
+00100000001000000110100101101100
+00100000001000000110100101101100
+00100000001000000110100101111000
+00100000010000000011011001000010
+00100000010000000011011111101110
+00100000010000000011011000111001
+00100000001000000011011000110100
+01101000000000010100011010000010
+11000011100001001000000000000000
+01101000000000001100100111110110
+11000000000000001011011000111110
+00100000011000000000000000000000
+01101000000000001100011111101010
+11000001000000001000000000000000
+01110000010001111110101000000001
+00100000001000000011011001010100
+01101000000000010100011010000010
+11000100000001001000000000000000
+00100000010000000101100010010010
+00100100011110100000000000000000
+11011010001000000100011100011000
+00100000010000000111111001010100
+00100100011101000000000000000000
+11011000110000000100011100011000
+00100000001000000100011101000110
+00011010011000100111111000000000
+11000000000101101011010000110001
+11000000000010000011010000011010
+11000000000010100011011001010001
+11000000000010101011011001100000
+00100000011000000000000000000000
+01011000000000000000000000000000
+00100000010000000011001000100000
+00100000001000000011011001010110
+01101000000000010100011111101011
+01100000000000010100011111101101
+01110000010001111100111000010100
+01110000010000001001000100000000
+00100000010000000011001111111000
+00100000010000000011010000010110
+01101000000000001100011110111101
+11000000000000001011011001011110
+11011010001000000000000000000000
+00100000001000000111110100010100
+11011010001000000000000000000000
+00100000001000000111110100011001
+01011000000000000000000000000010
+00100000010000000011001000100000
+01011000000000000000000000000000
+01100000000000101100011110011100
+01011000000000000000000000000100
+00100000010000000110100111010111
+01011000000000000000000000000101
+00100000010000000110100111010111
+01011000000000000000000000010100
+00100000010000000110100111010111
+01011000000000000000000000010101
+00100000010000000110100111010111
+01011000000000000000000000010110
+00100000010000000110100111010111
+01011000000000000000000000000111
+00100000010000000110100111010111
+00100000010000000111111000111000
+01110000010001110101111000001010
+01110000010001110110000000001010
+01110000010001110110001000001010
+01110000010000010111001000000010
+11011010001000000000000000000000
+00100000010000000111110100011110
+01011000000000000000000000100000
+00100000010000000100011011110000
+00100000001000000011001111111010
+00100000010000000011011100111011
+00100000010000000011011100111110
+00100000010000000011011101000001
+00100000010000000011001101111011
+00100000010000000011011011001000
+00100000010000000011011010100001
+00100000010000000011011010001010
+00100000010000000011011010000011
+00100000001000000011011010001111
+11011010011000000100011110011010
+11011010010000000011011010000110
+00100000001000000011001101101101
+00100000010000000011100001000111
+00100100011000001000000000000000
+01110000010001111001101100000001
+00100000011000000000000000000000
+11011010011000000100011111101101
+11011010010000000011011010001101
+00100000001000000011001101110100
+01110000010001111110101000000010
+00100000001000000011011001100010
+11011010011000000100011111110001
+11011010010000000011011010010010
+00100000001000000011001101101101
+01101000000000001100011111110010
+00100000001110100011011010011110
+01110000010001111111000100000010
+01110000010001111111001000000000
+01011000000000000000101000000010
+01100000000000010100011101010010
+01101000000000001100011110111001
+11000000000000011011011010011011
+00100000001000000011011101100010
+01011000000000000000101000000010
+01100000000000010100011101010100
+00100000001000000011011101100010
+01011000000000000000000000000000
+01100000000000100100011101010010
+00100000001000000011011101100010
+01101000000000001100011111001000
+00100000011110100000000000000000
+01101000000000010100011010000010
+11000011000001001011011011000110
+11011010011000000100011111001110
+11011010010000000011011010101000
+00100000001000000011001101101101
+01101000000000001100011111001101
+01100000000000001100011111001110
+01101000000000001100011111010001
+00100100011110100000000000000000
+00100000010000000110100011101011
+00100000010000000110100100001000
+01100000000000010100011111101000
+11011010001000000100011111100010
+00100000010000000110100100110000
+01101000000010001100011111001111
+10011000010001100111110000000000
+00100000001000010011011010110110
+01100000000000001100011111001111
+00011111111000100000010000000000
+01100000000010001100011111010000
+01101000000000001100011111001010
+10011000010001100111110000000000
+00100000010000010011011011000001
+01100000000010001100011111011011
+11011111001000000000000000000110
+11011000110000000100011111010110
+00100000010000000011011011110000
+01100000000000001100011111011100
+11011010001000000100011111010011
+00100000001000000111111000111101
+01101000000000001100011111010010
+00100100011110100000000000000000
+01110000010001111101001000000001
+11011010001000000000000000000001
+00100000001000000111110100011110
+11011010001000000000000000000001
+00100000001000000111110100011001
+11011010011000000100011110100100
+11011010010000000011011011001011
+00100000001000000011001101101101
+01110000010001111010010000000101
+01110000010001111010011000000000
+01101000000000001100011110100101
+11000000000000001011011011101110
+11000000000000000011011011101100
+11011000110000000100011110011100
+00011000110000100010001000000000
+11011111001000000000000000001000
+00011010001000100000110000000000
+11101000110000001000000000000000
+00011000110000100010001000000000
+11000000000000000011011011100011
+11000000000000001011011011100110
+11000000000000010011011011101001
+01101000000000001100011110100110
+00011111111000001111111000000001
+01100000000000001100011110100110
+11000010000000000011011011010011
+00100000011000000000000000000000
+01101000000000001100011110100110
+11011010010000000100011111000000
+10011010010000001010010000000000
+11101010010010001000000000000000
+00100000011000000000000000000000
+00100000010000000011011011011110
+00100000010000000110100000100101
+00100000001000000011011011011001
+00100000010000000011011011011110
+00100000010000000110100000101001
+00100000001000000011011011011001
+01101000000000001100011110100101
+11000000000000001011011011100011
+00100000001000000011011011100110
+01110000010001111010010100000001
+00100000001000000011011011010000
+01110000010001111010010100000000
+00100000001000000011011011010000
+11011010001000000000000000000000
+11101000110000001000000000000000
+10011010001000001010001000000000
+11000010000000000011011011110001
+00011010001000010111111011111111
+00100000011000000000000000000000
+01101000000000001000010001110111
+11000000000010010011011011111001
+00100000011000000000000000000000
+01101000000000010000010001111000
+11000000000010100011011100010000
+00100000011000000000000000000000
+01000100111010000100000000011010
+11101010001000101000000000000000
+01100000000000101000101100010010
+01101000000000010000101100010010
+11011000010000000110101101011010
+10011000010001100111110000000000
+00100100011000101000000000000000
+01101000000000010000101100010101
+00011111111100001111111000000000
+01100000000000010000101100010101
+00011111111000100111001000000000
+00011010001000001010001000000101
+00011010001000100000110000000000
+11011000101000000000101100010111
+00100000010000000111111100000001
+11101000110000001000000000000000
+01100000000000001000101100100001
+11011010001000000000101100010100
+11011010010000000000101100010111
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000101100011101010010
+01100000000000101100011101010111
+00100000010000000011011011111100
+00011010010000100000110000000000
+11011000101000000100011101010010
+11011111001000000000000000001010
+00100000010000000111111100000001
+01000100111010001100000000011010
+11101010001000001000000000000000
+11000000000000010011011101001010
+11000000000000011011011101011100
+11000000000000100011011101100010
+11000000000000101011011101100010
+11000000000000110011011110110001
+11000000000000111011100001001001
+11000000000001000011100001001100
+00100000011000000000000000000000
+01101000000000010100011010000010
+11000011100001001000000000000000
+01101000000000010100011111101011
+01100000000000010100011111101101
+01110000010010011111011000000001
+01011000000000000000000100001100
+00100000010000000011001011001101
+00100000010000000011011100010000
+01101000000000001000101100010100
+11000000000000100011011100101110
+11000000000000101011011100101110
+00100000011000000000000000000000
+01101000000000001100011101010010
+00100100010110100011011100110101
+01101000000000001100011101010100
+00100100010110100011011100110111
+01101000000000001100011101010110
+00100100010110100011011100111001
+00100000011000000000000000000000
+01110000010010011111001100000101
+00100000011000000000000000000000
+01110000010010011111010000000101
+00100000011000000000000000000000
+01110000010010011111010100000101
+00100000011000000000000000000000
+11011010011000000100100111110011
+11011010010000000011011101000100
+00100000001000000011001101101101
+11011010011000000100100111110100
+11011010010000000011011101000110
+00100000001000000011001101101101
+11011010011000000100100111110101
+11011010010000000011011101001000
+00100000001000000011001101101101
+01110000010001110101001000000000
+00100000001000000011011101100010
+01110000010001110101010000000000
+00100000001000000011011101100010
+01110000010001110101011000000000
+00100000001000000011011101100010
+00100000010000000011011101001100
+00100000001000000011011101001111
+01101000000000001100011101010010
+01100000000000001100011101011111
+00100000001000000011011101110011
+01101000000000001100011101011110
+00100000010000000011011101010100
+01101000000000001100011101010011
+01100000000000001100011101011101
+00100000001000000011011101110000
+11000000000000010011011101011000
+11000000000000011011011101011010
+01100000000000001100011101011110
+00100000011000000000000000000000
+01110000010001110101111000000101
+00100000011000000000000000000000
+01110000010001110101111000001010
+00100000011000000000000000000000
+01101000000000001100011101010010
+00100000010000000011011101010100
+01101000000000001100011101011110
+00100000010000000011011110011110
+00100000010000000011011110100001
+00100000001000000110100111000100
+01101000000000001100011111110000
+00100100011110100000000000000000
+01101000000000110100011101010010
+01100000000000110100011101011101
+01101000000000001100011101011110
+01101000000010001100011101100000
+10011000010000010111111000000000
+01101000000010001100011101100010
+10011000010000010111111000000000
+00100000010110100011011101111001
+01000100111010010100000000011010
+00100000010000000011011101110000
+00100000010000000011011101110011
+00100000001000000011011101110110
+11011010010000000100011101100011
+11011000110000000100011101011101
+00100000001000000011011101111011
+11011010010000000100011101101011
+11011000110000000100011101011111
+00100000001000000011011101111011
+11011010010000000100011101110011
+11011000110000000100011101100001
+00100000001000000011011101111011
+01110000010001111101000100000000
+00100000011000000000000000000000
+11101000110000001000000000000000
+11000000000000000011011110000111
+11000000000000001011011110000000
+11000000000000010011011110000010
+00100000011000000000000000000000
+01110000010001110111101100000000
+00100000001000000011011110000011
+01110000010001110111101100000001
+11101000110000001000000000000000
+01100000000000001100011101111101
+11101010010001000000000000000000
+00100000001000000011011110001100
+11101010010000001000000000000000
+00100000010000000110100111010111
+00011010010000001010010000000001
+11101010010000001000000000000000
+00100000001000000110100111010111
+01100000000001000100011101111110
+01110000010001111101000100000001
+01101000000000001100011101111011
+11000000000000000011011110011010
+01101000000000001100011101111111
+01100000000000001100011110000000
+01101000000000001100011101111110
+00100000010000000110100111010111
+01101000000000001100011101111101
+00100000010000000011011110011110
+01100000000000001100011110000101
+01101000000000110100011110000000
+01100000000000110000101010011010
+00100000001000000110100110101110
+01101000000000001100011101111110
+01100000000000001100011110000000
+01101000000000001100011101111111
+00100000001000000011011110010011
+00011111111011111111111000000101
+00011111111000001111111000110010
+00100000011000000000000000000000
+11011000010000000010111011100000
+10011000010011111111111000000000
+00011111111001101111110001100100
+00100000010000000111111110000110
+00011000000001111000010000000000
+00011000010000100010001000000000
+01011000000000000010111011100000
+10011000010001100010010000000000
+00100000011000000000000000000000
+01101000000100001000000010000010
+01111001001000000111111000000010
+01100000000100001000000010000010
+01011000000000000000000010011110
+01100000000100010000000001101000
+01100000000100010000000001101010
+00100000011000000000000000000000
+01101000000000001100011111110000
+00100100011110100000000000000000
+01101000000000010100011101010010
+01100000000000010100011110000111
+01101000000000001100011111101010
+11000000100000001011011110111001
+01101000000000010100010010100000
+01100000000000010100011110000111
+01000100111010011100000000011010
+00100000010000000011011110101010
+00100000010000000011011111011100
+01011000000000001011101110000000
+00100000010000000010101010001111
+00100000010000000011011111100000
+01011000000000000001110000100000
+00100000010000000010101010001111
+11011111001000000000000000010000
+00100000010000000011011111011100
+01101000000000010100011110000111
+11000010100000000011011111001001
+01011000000000000001110000100000
+00100000010000000010101010001111
+00100000010000000011011111100000
+00100000001000000011011111001100
+01011000000000000011100001000000
+00100000010000000010101010001111
+00100000010000000011011111100000
+01011000000000000001110000100000
+00100000010000000010101010001111
+01101000000000010100011110000111
+00011111111000110111111000000000
+01100000000000010100011110000111
+11000010000000000011011111000010
+01110000010001111111000100000010
+01110000010001111111001000000001
+01011000000000000000101000000001
+01100000000000010100011101010010
+01101000000000001100011110111001
+11000000000000011011011111011001
+00100000001000000011011101100010
+01011000000000000000101000000001
+01100000000000010100011101010100
+00100000001000000011011101100010
+01101000000100001000000010000101
+00011111111000011111111001000000
+01100000000100001000000010000101
+00100000011000000000000000000000
+01101000000100001000000010000101
+00011111111000010111111010111111
+01100000000100001000000010000101
+00100000011000000000000000000000
+01101000000000001100011110111011
+11000001000000000000000000000000
+00100000010000000010110001100101
+01101000000010001100011110111100
+01100000000010001100011110000110
+00100000010000000110011111111011
+00100000010000000011100001000111
+00100100011000001000000000000000
+01110000010001111001101000000001
+00100000011000000000000000000000
+01101000000000001100011110111011
+11000001000000000000000000000000
+01101000000000001100011110011011
+00100100011110100000000000000000
+01101000000000010100011010000010
+11000010100001001011011111110110
+01101000000000001100011111101010
+11000001100000001000000000000000
+01000100111010100100000000011010
+00100000010000000011100001000111
+00100100011000001000000000000000
+01011000000000001000110010100000
+00100000010000000010101010001111
+00100000010000000011100001000111
+00100100011000001000000000000000
+00100000010000000011100000111111
+00100000010000000011100001000010
+00100100011000010000000000000000
+00100000010000000011100001000111
+00100000001000001011011111111110
+11011010001000000000000000000000
+11011111001000000000000000010000
+00100000010000000011100000111111
+00100000010000000011100001000010
+00100100011000010000000000000000
+00100000010000000011100001000111
+00100100001000001011100000000101
+01011000000000000010101000110000
+00100000010000000010101010001111
+00100000010000000011100001000111
+00100000001000001011100000010010
+01011000000000000000000000000000
+00011010001000110010001000000000
+10011010001000011010001000000000
+11000010000000000011100000000101
+00100000001000000011100000011011
+01011000000000001000000000000000
+00011010001000110010001000000000
+10011010001000011010001000000000
+00100000010000000011100000111111
+00100000010000000011100001000010
+00100100011000010000000000000000
+00100000010000000011100001000111
+00100000001000001011100000010110
+11000010000000000011100000000101
+01000100111010101100000000011010
+00011010001000100111111000000000
+01100000000000010100011110001001
+01100000000000010100011110010111
+01101000000000001100011111101010
+11000000000000001011100000100111
+11011111001000000000000000000111
+11011000110000000100011110010010
+00100000010000000011011011110000
+01100000000000001100011110011001
+11011010001000000100011110001111
+00100000001000000111111000111101
+01101000000000001100011111101111
+00011111111000001111111000000001
+01100000000000001100011111101111
+00011111111001101111110000000010
+00100000010000000111111110000110
+00011000000001111000010000000000
+00011000000001110111111000000000
+00100100001110100011100000111000
+01101000000000001100011110111111
+10011000010001100111110000000000
+00100000010000101011100000111101
+11011111111000000100011110011100
+00011000010000001000010111111111
+10011000010000001010001000000000
+11011111111000000000000000000000
+11100010001000001000000000000000
+00100000011000000000000000000000
+11011111111000000100011110011100
+10011000010000001010001000000000
+11011111111000000000000000000010
+11100010001000001000000000000000
+00100000011000000000000000000000
+01110000010001111111000000000001
+00100000011000000000000000000000
+00011100010000100111111000000000
+01100000000000100100011110001011
+00100000011000000000000000000000
+00011100010000100111111000000000
+01101000000010100100011110001011
+10011000010001100111111000000000
+00011111111001100111110011001000
+00100000011000000000000000000000
+01101000000010001100011110000110
+00100000001000000110100000011101
+01101000000001000100011101010010
+01100000000001000100011110011100
+00100000011000000000000000000000
+01101000000000001100011110111001
+01100000000000001100011110101111
+01101000000000001100011110111010
+01100000000000001100011110110000
+01101000000000001100011110111011
+01100000000000001100011110110001
+11011111001000000000000000001101
+11011000110000000100011110101010
+00100000010000000011011011110000
+01100000000000001100011110110111
+11011010001000000100011110100111
+00100000001000000111111000111101
+00100000010000000110010111000010
+01110000010001101111011001111010
+00100000010000000011100001101101
+00100000010000000011100001100111
+01011000000000000011100001100000
+01100000000000010100000111111101
+11011010001000000000000000000000
+00100000001000000110100110100110
+01101000000000010100011010100001
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000010100011010100001
+11000001100000000000000000000000
+01110000010001101010000000000000
+00100000011000000000000000000000
+01000100111010110100000000011010
+01101000000000001100011010100100
+00011111111001100111110000101000
+00100000011000010000000000000000
+01110000010001101010010000000000
+00100000011000000000000000000000
+11011010001000000100011010100100
+11011010010000000000000000000000
+11011000010000000000000001010001
+00100000001000000110010111011111
+01111000010101000111110000000000
+01101000000000001100011010100011
+00011111111000100111001000000000
+11011010001000000100011010100101
+00011010011000100010010000000000
+01000100111010111100000000011010
+00100000010000000011100001111100
+00100000001000101111111111100111
+00011010001000001010001000000100
+11000010000000000011100001110110
+00100000011000000000000000000000
+01000100111011000100000000011011
+11101010001000011000000000000000
+11101010010010011000000000000000
+10011000010001100111110000000000
+00100000011000000000000000000000
+01000100111011001100000000011011
+11101010001000011000000000000000
+11101010010010011000000000000000
+10011000010001100111110000000000
+00100100011000101000000000000000
+11101000110000001000000000000000
+00011111111001100111110000000000
+00100000011000101000000000000000
+00011010001000001000110000000011
+11101000110010001000000000000000
+10011000010001100111110000000000
+00100000011000000000000000000000
+01000100111011010100000000011011
+01111000010101000111110000000000
+01101000000000001100011010100011
+00011111111000100111001000000000
+11011010001000000100011010100101
+00011010011000100010010000000000
+00100000010000000011100010000001
+00100000001000101111111111100111
+00011010001000001010001000000100
+11000010000000000011100010010011
+00100000011000000000000000000000
+01101000000000001000000000000100
+00011111111000001111111000000001
+01100000000000001000000000000100
+11011010011000000000001011100101
+11101010011000010000000000000000
+11011000010000000101010110101010
+10011000010001100111110000000000
+00100100011000101000000000000000
+00011000110000100010011000000000
+11101010011010011000000000000000
+01011000111111111111111111111111
+10011000010001100111110000000000
+00100000001000101011100010101000
+00100000010000000011100010001101
+00100000001101000011100010101000
+00100000011000000000000000000000
+01000100111011011100000000011011
+00011010011000001010011000000100
+11101010011000001000000000000000
+01101000000010001100011011110110
+10011000010001100111110000000000
+00100000011000101000000000000000
+01100000000000001100011011110110
+01101000000000001000000000000011
+00011111111000001111111000000001
+01100000000000001000000000000011
+00011010011000001010011000000001
+11101010011000001000000000000000
+01100000000000001100011011110101
+00011111111000100111001000000000
+00100000011110100000000000000000
+11101000110000001000000000000000
+11000000000000000011100011000010
+11000000000000001011100011001111
+11000000000000010011100011010100
+11000000000000011011100011011001
+11000000000000100011100011011110
+11000000000000101011100011100011
+11000000000000110011100011101000
+11000000011111111011100011101010
+11000010000000000011100010110111
+00100000011000000000000000000000
+00011000110000100010011000000000
+01101000000000001100011010011010
+01100000000000001000101010011010
+11011000010000000000000000000000
+01100000000010001000101010011011
+01011000000000000010011100010000
+01100000000000011000101010011100
+11101010011000001000000000000000
+01100000000000001000101010011111
+00100000010000000110100110101110
+00011010011000010000110000000001
+11000010000000000011100010110111
+00100000011000000000000000000000
+00011010011000100000110000000000
+01101000000000001100011010011011
+01100000000000001000101010011010
+11011000010000000000000000000001
+00100000001000000011100011000110
+00011010011000100000110000000000
+01101000000000001100011010011100
+01100000000000001000101010011010
+11011000010000000000000000000010
+00100000001000000011100011000110
+00011010011000100000110000000000
+01101000000000001100011010011101
+01100000000000001000101010011010
+11011000010000000000000000000011
+00100000001000000011100011000110
+00011010011000100000110000000000
+01101000000000001100011010011110
+01100000000000001000101010011010
+11011000010000000000000000000100
+00100000001000000011100011000110
+00011010011000100000110000000000
+01101000000000001100011010011111
+01100000000000001000101010011010
+11011000010000000000000000000101
+00100000001000000011100011000110
+11101000110000001000000000000000
+00100000011000000000000000000000
+00011000110000100010011000000000
+01101000000000001100011010100000
+11000000100000001011100011101110
+00100000010000000011100011110000
+00011010011000010000110000000100
+00100000011000000000000000000000
+01000100111011100100000000011011
+00100000010000000011100001110001
+00100000001101000011100011111110
+01101000000000001100011010100100
+00011111111000100000010000000000
+00011111111000001111111000000001
+01100000000000001100011010100100
+00100000010000000011100001100111
+00011000010010111000010000000000
+01011000000000000100011010100101
+10011000010000001000101000000000
+11101010011000100000000000000000
+11100000101000100000000000000000
+00100000001000000011100100000011
+00011010011000001000110000000011
+11101000110000001000000000000000
+00100000011110100000000000000000
+11101010011000100000000000000000
+11100010001000100000000000000000
+11011010001000000100011010100100
+11011010010000000000000000000000
+11011000010000000000000001010001
+00100000001000000110011000000110
+01101000000010001100011010011010
+00100000010000000110100000100101
+00100000011000000000000000000000
+01101000000010001100011010011010
+00100000010000000110100000101001
+01101000000010001100011010011010
+00100000010000000110100000100101
+00100000010000000011100100011101
+01101000000000001100011010100111
+00100100011110100000000000000000
+00100000010000000010110000101001
+01101000000100100000000100111000
+01111001001111111111111000001111
+01100000000100100000000001001100
+00100000010000000010110000100001
+11011000010111111111111111111111
+00100000001000000010101100101010
+01101000000000001100011010100111
+00100000001110100101011011111001
+00011111111000001111111111111111
+01100000000000001100011010100111
+00100000001000000101011011111001
+00011111111011111111111000010100
+11011000110000000100011010101000
+10011000110000001000110000000000
+11101000110000001000000000000000
+00100000011110100000000000000000
+00011111111000100010001000000000
+00011010001000100111001000000000
+11011000101000000100001101110010
+00100000010000000111111100000001
+00011010001000100111111000000000
+00011111111000001111111000000010
+01100000000000001100001101101111
+00100000011000000000000000000000
+00100000011101011000000000000000
+00100000010000000101011110100011
+00100000010000000110100010101000
+01011000000000000011100110000010
+01100000000000010100000111110011
+01011000000000000011100101101110
+01100000000000010100000111110001
+01011000000000000011100110000110
+01100000000000010100000111110101
+01011000000000000011100101101101
+01100000000000010100000111101111
+01011000000000000011100101101001
+01100000000000010100000111101001
+01011000000000000011101010110111
+01100000000000010100000111111011
+01011000000000000011110000110010
+01100000000000010100010101101111
+01011000000000000011110011000010
+01100000000000010100000111111001
+01011000000000000011110011010111
+01100000000000010100000111111101
+00100000010000000011100101111111
+01000100111011101100000000011011
+00100000010000000011100101000101
+00100000010000000011100101100100
+00100000010000000010110001101111
+00100000001000000011110001001000
+01101000000000100100011010101010
+01100000000100100000000001010100
+01101000000000100100011010101110
+01100000000100100000000001011010
+01101000000100001000000010000001
+00011111111000011111111000000100
+00011111111000010111111011111100
+01100000000100001000000010000001
+01110000100000000110001000000000
+01101000000000010100011010101010
+01100000000100010000000001011000
+01101000000000010100011010101110
+01100000000100010000000001011110
+01100000000100010000000001100000
+01101000000100100000000001111000
+01111001001000000111111000000111
+01100000000100100000000001111000
+01101000000100010000000001010000
+01111001001111111111111000001111
+01100000000100010000000001010000
+00100000010000000110011011001110
+01110000100000000100001100000000
+01110000100000000110001010000001
+01101000000000001100011010111111
+00101111111011111111111000000000
+01101000000110001000000001100010
+01111001001000001000010000000100
+01100000000110001000000001100010
+00100000011000000000000000000000
+00100000010000000011100101111111
+00100000001000000011100101000101
+01101000000010001100011010011110
+00100000010000000110100000001110
+00100000010000000011100111100110
+01101000000010001100011010011100
+00100000001000000110011111111011
+01101000000010001100011010011100
+00100000010000000110100000011101
+00100100001000001011001111010010
+00100000001000000011001111010000
+00100000011000000000000000000000
+00100000010000000011100101110000
+00100000001000000011110011101001
+01101000000000001100011010000010
+11000011000000100011100101111111
+01000100111011110100000000011011
+01011000000000000011111011111111
+01101000000010100100011011000101
+10011000010000001000010000000000
+00011100010000100111111000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+01101000000000010100011010000010
+11000010100000101011100101111111
+01101000000000001100011010111111
+11000011100000110000000000000000
+00100000010000000011110011101100
+00100000010000000011010000001110
+00011100010000100111111000000000
+01100000000000100100011011000101
+00100000011000000000000000000000
+00100000010000000011110011101001
+00100000010000000101001001101110
+00100100011110100000000000000000
+00100000001000000011100111101011
+00011010011000100111111000000000
+11000000000000001011100111010100
+11000000000000010011100110100011
+11000000000000100011100111010111
+11000000000000101011100111000100
+11000000000001000011100110101010
+11000000000001001011100110110001
+11000000000001010011100111001001
+11000000000001011011100110110110
+11000000000001100011100111000010
+11000000000010011011100111010111
+11000000000010100011100111001111
+11000000000010101011100111000110
+11000000000100001011100111001010
+11000000000100011011100111001011
+11000000000100100011100111001110
+11000000000110000011110010001010
+11000000000110001011110010001100
+11000000000110010011110010011010
+11000000000110011011110010011000
+11000000000110100011110010000100
+11000000000110101011110001110011
+11000000000110110011110010000010
+11000000000110111011110010001110
+11000000000111000011110010010000
+11000000000111011011110010100001
+11000000000111101011110001101010
+11000000001000001011100111011001
+00100000011000000000000000000000
+00100000010000000011100101111111
+01101000000000001100011001100101
+00100100010110100011110010001110
+00100000010000000011100111010111
+01101000000000010100011010000010
+11000100000000100000000000000000
+00100000001000000011100110110001
+01101000000000010100011010000010
+01111001001000000111111000000100
+01100000000000010100011010000010
+01101000000000001100011010100111
+01100000000000001100000101110010
+00100000010000000011100111100110
+00100000001000000011110000011101
+01101000000000010100011010000010
+11000100000000100000000000000000
+01111001001111111111111000000100
+01100000000000010100011010000010
+00100000001000000011110000100001
+00100000010000000011100101111111
+01101000000000010100000001000010
+00011111111000110111111000000000
+01101000000010010100000111100011
+10011000010001100111110000000000
+00100100001000101011100110111101
+00100000001000000011010000010110
+01101000000000001100011010111111
+11000011100000101000000000000000
+01101000000100010000000100010010
+00100100010110100011110011110000
+00100000001000000011010000001100
+00100000010000000011110011101110
+00100000001000000011010000011000
+00100000010000000011100101111111
+00100000001000000011100111011101
+00100000010000000101100000010110
+00100000010000000011100111010111
+00100000001000000011110000100011
+00100000001000000011001111011101
+00100000001000000011110011101110
+01101000000000001100011010111111
+11000011000000101011010000001110
+00100000001000000011110011110010
+00100000001000000011110011110010
+00100000010000000101100010111010
+00100000010000000011100111011101
+01101000000000001100011010101000
+01100000000000001100000101110010
+00100000001000000011110000011111
+01110000010001100110000100000000
+00100000010000000011110011101110
+00100000001000000011110011110010
+00100000010000000011101001010010
+00100000001000000011100111011011
+00100000010000000101110011001001
+00100000001000000101101100000010
+01101000000010001100011010011110
+00100000001000000110100000101001
+00100000010000000011100111011111
+00100000001000000011100111100110
+01101000000000001100011010100001
+00101111111011111111111000000000
+00100000010000001011001111110000
+01101000000000001100011010100001
+00101111111011111111111000000001
+00100000010000001011001111111000
+00100000011000000000000000000000
+01101000000010001100011010011110
+00100000001000000110100000100101
+01101000000000001100010101101011
+11000001000000000000000000000000
+00100000001000000110110000101000
+01101000000100001000000100001100
+11000010100000011011100111101000
+00100000010000000110011011001011
+11101000011000001000000000000000
+11000000100000001011101000000001
+01101000000100010000000100010010
+00011111111001100111110000000010
+00100000011000010000000000000000
+11101000011000001000000000000000
+01100000000000001000101100000011
+11101000011010001000000000000000
+00011000011000100010001000000000
+01100000000010001000101100000100
+00011000010000001000010000000011
+01101000000100010000000100010010
+10011000010001100000010000000000
+00100100011000010000000000000000
+01110000000010110000010100000001
+00100000010000000011101000010111
+01101000000000001000101100000101
+11000001000000000000000000000000
+00100000001000000011101000010010
+00100000010000000111111011000001
+00100000010000000011110001111001
+00100000001000000011101000000100
+01000100111011111100000000011011
+01101000000100010000000100010010
+00100000011110100000000000000000
+00100000010000000110011011001011
+11101000011000001000000000000000
+00011111111001100111110000000001
+00100100010000101011101000010110
+00100100001000101011101000000100
+11101000011000001000000000000000
+11000001000000101000000000000000
+11000001000101001000000000000000
+00011000011000001000011111111111
+00100000010000000011101000010110
+00100000001000000011101000000100
+00100000010000000110011011001011
+00011000011000001000011000000010
+11101000011000001000000000000000
+10011000011000001000011000000000
+00100000001000000110011011001000
+01000100111100000100000000011100
+01101000000000001000101100000011
+11000000000000000011101000111111
+11000000000000001011101001000100
+11000000000000010011101001001001
+11000000000000011011101001011111
+11000000000000100011101001101011
+11000000000000101011101001110101
+11000000000001001011101010011010
+11000000000001011011101011010111
+11000000000001100011101011011000
+11000000000001101011101011101100
+11000000000001110011101011110100
+11000000000001111011101011111010
+11000000000010000011101100000110
+11000000000010001011101100001110
+11000000000010010011101100010010
+11000000000100110011101100010110
+11000000000101000011101100011101
+11000000000101001011101100101101
+11000000000101010011101100110110
+11000000000101011011101101101001
+11000000000101100011101101101111
+11000000000110000011101101110110
+11000000000110001011101101111100
+11000000000110010011101110010000
+11000000000110011011101110011000
+11000000000110100011101110111011
+11000000000110101011101111000100
+11000000000110110011101111001101
+11000000000110111011101111010111
+11000000000111000011101111011010
+11000000001000000011101111100010
+11000000001000010011101111101100
+11000000001001000011101111110001
+11000000001001001011101111111100
+11000000001010001011110000000010
+11000000001100001011110000000110
+11000000011111111011110000010101
+00100000001000000011110000010111
+01101000000000001000101100000100
+11000000100000110011110000010111
+11101000011000110000000000000000
+01100000000000110100000010100000
+00100000001000000011110000011010
+01101000000000001000101100000100
+11000000100000110011110000010111
+11101000011000110000000000000000
+01100000000000110100010010100000
+00100000001000000011110000011010
+01101000000000001000101100000100
+11000000100000001011110000010111
+00011010001000100000011000000000
+00100000010000000011110000011010
+11101000011010001000000000000000
+01100000000010001100011010101001
+01101000000000010100011010000010
+11000011100001001000000000000000
+11000011100000000000000000000000
+01101000000000001100011010100001
+00101111111011111111111000000000
+00100100001000001011101001011000
+01101000000010001100011010101001
+00011000010000010111111000000011
+01100000000000001100000010010011
+01101000000000001100011010100001
+00101111111011111111111000000001
+00100100011000001000000000000000
+01101000000010001100011010101001
+00101000010011111111111000000010
+00100000001000001011001111111010
+00100000001000000011001111111000
+01101000000000001000101100000100
+00011111111001100111110001000011
+00100100001000010011110000010111
+01100000000000001100010100010101
+11011111001000000000000000001000
+00100000010000000111111011000110
+01101000000000001000101100000100
+00011111111000100111001000000000
+00011010001000100000011000000000
+11011000101000000100010100010110
+00100000010000000110011011101010
+00100000001000000011110000011010
+01101000000000001000101100000100
+00011111111001100111110000011101
+00100100001000010011110000010111
+01100000000000001100001110101111
+00011111111000100111001000000000
+00011010001000100000011000000000
+11011000101000000100001110110000
+00100000010000000110011011101010
+00100000010000000101011110100011
+00100000001000000011110000011010
+01101000000000001100011010000010
+11000011000000100011110000010111
+00100000010000000011001110111010
+00100000001000001011101010000110
+01110000000010110000010100000000
+00100000010000000011100101111111
+01101000000000001100010101101000
+00100000011110100000000000000000
+01101000000000010100010101110011
+11000000100000000011101010000100
+01101000000000001000101100000100
+01100000000000010100010101110011
+00011010001000100000011000000000
+00011000011000100111111000000000
+01100000000000010100010101110001
+00100000010000000011101010001000
+00100000001000000110110001001101
+01110000000010110000010100000000
+00100000001000000011110011010001
+00100000010000000011101010001110
+01101000000000010100010101110011
+01101000000010010100011010011111
+10011000010001100111111000000000
+01100000000000010100010101110011
+00100000011000000000000000000000
+01101000000000010100010101110011
+11011000010000000000000001101110
+00100000010000000111111111011101
+01101000000010010100010101101100
+00100000010000000111111111011101
+01101000000010010100010101011110
+00100000010000000111111111011101
+01100000000000010100011010011111
+00100000011000000000000000000000
+01110000000010110000010100000001
+01110000000010110000001100000101
+00100000001000000011110000011010
+01101000000000010100011010000010
+11000011000001001011110000010111
+00100000010000000011101011010100
+00100000001101000011110000010111
+01110000000010110000010100000000
+01101000000000001100011010111111
+11000010100000100011101010110100
+01101000000000001100011011000000
+00100100011110100000000000000000
+01110000000010110000010100000001
+11101000011000010000000000000000
+01100000000000010100011011000001
+00011000011000100111111000000000
+01100000000000010100011011000011
+01101000000000001000101100000100
+00011111111000001111111111111110
+00100100001000010011110000010111
+00100000001000101011110000010111
+01100000000000001100011011000000
+01110000000010110000010100000000
+00100000010000000101100000010100
+00100000010000000011101010110111
+00100000010000000011101010110111
+00100000010000000011101010110111
+01101000000000001100011010111111
+11000100000000100000000000000000
+01110000000010110000010100000001
+00100000010000000011110011110110
+00100000001000000011110000011010
+01101000000000001100011011000000
+00100000011110100000000000000000
+00100000010000000101100010010010
+00100100011110100000000000000000
+00100000010000000011101011001111
+01000100111100001100000000011100
+00011000010000001111111111111101
+01101000000010001100011011000000
+00100000010000000111111111011101
+00011111111000100010001000000000
+00011000010000100111111000000000
+10011010001001100111111000000000
+01100000000000001100011011000000
+01101000000010010100011011000001
+00100000010000000101101001100100
+01101000000000010100011011000011
+00011111111000100000011000000000
+00011010001000100111001000000000
+00100000010000000110011011101010
+00011000011000100111111000000000
+01100000000000010100011011000011
+01101000000000001100011011000000
+00100100011110100000000000000000
+00100000001000000011110011110100
+11011000010000000000000000010111
+01101000000000001100011010111111
+11000011100000001000000000000000
+01101000000010010100010010101000
+00100000011000000000000000000000
+01101000000000001100011010111111
+11000010100000010101101001000010
+00100000001000000111111111101001
+00100000001000000011110001001100
+00011010001000100000011000000000
+11101000011000001000000000000000
+11000000000000000011101011011111
+11000000000000001011101011100010
+11000000000000010011101011101000
+11000000000000011011101011101010
+00100000001000000011110000010111
+00100000010000000110000100101011
+01110000010001100101101000000000
+00100000001000000011110000011010
+01011000000001000000000000000011
+01100000000000011100011001011011
+01100000000000001100011001100010
+00100000010000000110000100100100
+01110000010001100101101000000001
+00100000001000000011110000011010
+01011000000001000000000000000010
+00100000001000000011101011100011
+01011000000001000000000000000001
+00100000001000000011101011100011
+01101000000000001000101100000100
+00011111111001100111110000010000
+00100100001000010011110000010111
+01100000000000001100011010001001
+00011111111000100111001000000000
+11011000101000000100011010001010
+00100000010000000110011011111101
+00100000001000000011110000011010
+00011010001000100000011000000000
+11101000011000001000000000000000
+01101000000110001000000001100010
+01111101001110100000010000000100
+01100000000110001000000001100010
+00100000001000000011110000011010
+01101000000000001000101100000100
+00011111111000100111001000000000
+00011010001000100000011000000000
+00100000010000000111111101011000
+01011001011011100011011000000000
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111111111000000000
+01100000000000010100001001000011
+00100000010000000011110000011010
+00100000010000000111111110011110
+00100000001000000110011011001110
+11011010001000000000000000000010
+11011010010000000100011010011010
+11011000010000000000000000000000
+00100000001000000011110000100101
+01100000000000010000101011000010
+11011010010000000000101011000010
+11011000010000000000000000000000
+00100000001000000011110000100101
+01101000000000010100011010000010
+11000011000000000011110000010111
+00100000010000000011110000011010
+00100000001000000011001111101001
+01101000000000010100011010000010
+11000011000001001011110000010111
+00100000010000000011110000011010
+00100000001000000011010000000010
+01101000000000001000101100000100
+00011111111000100111001000000000
+00011010001000100000011000000000
+01101000000000010100001000010101
+00011111111000100000101000000000
+00100000010000000110011011101010
+00100000001000000011110000011010
+01101000000000001100011010000010
+11000011000000000011110000010111
+11101000011000001000000000000000
+01101000000010001100011001100001
+01111001001110100000010000000000
+01111001001000000000010000000111
+01100000000010001100011001100001
+00100000010000000011110000011010
+01101000000000001100011001100001
+11000010100000110011101100101011
+00100000011000000000000000000000
+01110000010001100110000100000000
+01110000000010101001100100100001
+00100000001000000111110110001111
+11000010100000000101111110010101
+00100000001000000011101100101000
+01101000000000001100011010000010
+11000100000000100000000000000000
+01101000000000001100010101101011
+11000001000000000000000000000000
+11101000011000001000000000000000
+01101000000010001100010101101001
+10011000010000001000010000000000
+01100000000010001100010101101001
+00100000011000000000000000000000
+11011111001000000000000001000000
+11011000101000000100001101101111
+00100000010000000111111011010100
+01011000000000000000000000000000
+01100000000000001000101010110010
+00011010001000100000011000000000
+00011000011000100111111000000000
+01100000000000010000101010110110
+00100000010000000011101101100100
+01101000000000001000101010110010
+01101000000010001000101010100010
+00011000010000001000010000000001
+10011000010000001111111000000000
+01100000000000001000101010110010
+00011111111001100111110000011111
+00100100001000010011101101010000
+01101000000010001100001101101111
+01011000000000000100001101110000
+10011000010000001111111000000000
+01100000000000010000101010111011
+01101000000010001000101010100010
+00011000010000001000010000000001
+01101000000000001100001101101111
+10011000010000001111111000000000
+01100000000000001100001101101111
+00100000001000000011101101011001
+01101000000010001100001110001111
+01011000000000000100001110010000
+10011000010000001111111000000000
+01100000000000010000101010111011
+01101000000010001000101010100010
+00011000010000001000010000000001
+01101000000000001100001110001111
+10011000010000001111111000000000
+01100000000000001100001110001111
+01101000000000010000101010111011
+00011111111000100000101000000000
+01101000000000010000101010110110
+00011111111000100000011000000000
+00011000010000100111001000000000
+00100000010000000110011011101010
+01101000000000001000101100000100
+01101000000010001000101010110010
+10011000010001100111110000000000
+00100100001000101011101100111100
+00100000001000000011110000011010
+11101000011000001000000000000000
+01100000000000001000101010100010
+11101000011000001000000000000000
+01100000000000001000101010101110
+00100000011000000000000000000000
+11011000010000000000000000000000
+11011010001000000000000000000010
+01101000000000010100011010110100
+01100000000000010000101011000010
+11011010010000000000101011000010
+00100000001000000011110000100101
+01101000000000001000101100000100
+11000000100000001011110000010111
+11101000011000001000000000000000
+01100000000000001100011010110010
+01011000000000000000000000000000
+01100000000000010100011010110100
+00100000001000000011110000011010
+11101000011000100000000000000000
+01100000000000100100011010001010
+01110000010001101000100100000100
+01110000010001100110001100000000
+00100000010000000011110000011010
+00100000001000000101111100110001
+01101000000000001000101100000100
+11000000100000011011110000010111
+11101000011000001000000000000000
+11000000000000000011101110000010
+11000000000000001011101110001010
+00100000001000000011110000010111
+11101000011010001000000000000000
+11101000011000001000000000000000
+11000000000000010011101110001000
+01111101001110100000010000000111
+00100000010000000110011111111011
+00100000001000000011110000011010
+00100000010000000110100000000110
+00100000001000000011110000011010
+11101000011010001000000000000000
+00100000010000000110100000010010
+11101000011000001000000000000000
+00101111111011111111111000000000
+00100000010000000110100000101100
+00100000001000000011110000011010
+01101000000000001000101100000100
+11000000100000001011110000010111
+11101000011010001000000000000000
+00100000010000000110100000011101
+01011000000000000000000000000000
+01111101001000001111111000000000
+11011010001000000000000000000001
+00100000001000000011101100001010
+00011010001000100000011000000000
+11101000011000001000000000000000
+00011111111000100000010000000000
+11000000010000001011101110100011
+11000000010000010011101110101000
+11000000010000011011101110101110
+01100000000000001100010011000110
+11000000000000000011101110110011
+11000000000000001011101110110110
+11000000000000010011101110111000
+00100000001000000011110000010111
+01101000000000001100010010111110
+00100000001110100011110000010111
+01100000000010001100010011000110
+01110000010001000101011000001101
+00100000001000000011101110110100
+01101000000000001100010010111110
+00100000001110100011110000010111
+01100000000010001100010011000110
+01110000010001000101011000001101
+01110000010001000101010000000001
+00100000001000000011110000011010
+01101000000000001100010010111110
+00100000001110100011110000010111
+01100000000010001100010011000110
+01110000010001000101011000001101
+00100000001000000011101110111001
+01110000010001000101011000000000
+01110000010001000101010000000011
+00100000001000000011110000011010
+01110000010001000101011000000101
+00100000001000000011101110110100
+01110000010001000101011000000101
+01110000010001000101010000000000
+00100000001000000011110000011010
+01101000000000001000101100000100
+00011111111001100111110000011111
+00100100001000010011110000010111
+01100000000000001100001101101111
+00011111111000100111001000000000
+00011010001000100000011000000000
+11011000101000000100001101110000
+00100000010000000110011011101010
+00100000001000000011110000011010
+01101000000000001000101100000100
+00011111111001100111110000011111
+00100100001000010011110000010111
+01100000000000001100001110001111
+00011111111000100111001000000000
+00011010001000100000011000000000
+11011000101000000100001110010000
+00100000010000000110011011101010
+00100000001000000011110000011010
+01101000000000010100011010000010
+11000011000001001011110000010111
+01101000000000001000101100000100
+11000000100001000011110000010111
+00011010001000100000011000000000
+11101000011001000000000000000000
+01100000000001000100010010010110
+01110000000010101001100100010010
+00100000010000000111110110001111
+00100000001000000011110000011010
+11101000011000010000000000000000
+01100000000000010100010010000010
+00100000001000000011110000011010
+01101000000000001100010011000110
+00100000001110100011110000010111
+01101000000000001100010011000100
+11000000100000000011110000010111
+01101000000000001100010011000101
+11000000100000000011110000010111
+00100000010000000111111000100101
+00100000001000000011110000011010
+01101000000000001000101100000100
+11000000100000101011110000010111
+11101000011000001000000000000000
+01100000000000001100011010100010
+11101000011000100000000000000000
+01100000000000100100011010100011
+01101000000010001100011010100010
+00100000010000000110100000001110
+00100000010000000011110010111100
+00100000001000000011110000011010
+01101000000000001000101100000100
+11000000100000001011110000010111
+11101000011000001000000000000000
+01100000000000001100000111011110
+00100000001000000011110000011010
+11101000011000001000000000000000
+11000000000000001011101111111010
+01101000000000001100010011000001
+11000000000000011011101111111000
+11000000000000110011101111111000
+11000000000000111011101111111000
+00100000001000000011110000010111
+01110000010001001100001000000001
+00100000001000000011110000011010
+00100000010000000101101101010011
+00100000001000000011110000011010
+01101000000000001000101100000100
+11000000100000001011110000010111
+00100000010000000011110000011010
+11101000011000001000000000000000
+00100000001110100110000011001011
+00100000001000000110000011001001
+00100000010000000011110000011010
+00100000010000000111111110011110
+01110000100000000001000000000001
+00100000001000000010101010001110
+01101000000000001000101100000100
+11000000000000000011110000010111
+11101000011000001000000000000000
+00100000001110100011110000010011
+01101000000000001000101100000100
+11000000100000101011110000010111
+11101000011000100000000000000000
+11011000010011110100001001000000
+10011000010001100111110000000000
+00100000001000010011110000010111
+01100000000000100100010011000111
+00100000010000000101100000001100
+00100000001000000011110000011010
+00100000010000000101100000001110
+00100000001000000011110000011010
+01110000010000001001000100000000
+00100000001000000011110000011010
+11011000010000000000000000000001
+11011010001000000000000000000000
+00100000001000000011110000100101
+11011000010000000000000000000000
+11011010001000000000000000000000
+00100000001000000011110000100101
+01110000000010110000001100000000
+00100000001000000011110001001001
+01110000000010110000001100000010
+00100000001000000011110001001001
+01110000000010110000001100000011
+00100000001000000011110001001001
+01110000000010110000001100000101
+00100000001000000011110001001001
+01101000000000001000101100000011
+00011111111000100010011000000000
+01110000000010110000001100000110
+01011000000000000000000000000010
+10011010001000001111111000000000
+00100000010000000011110010100111
+00011010011000100111111000000000
+11100001010000001000000000000000
+11100001010010001000000000000000
+00011010001000100111001000000000
+00011010010000100000110000000000
+00100000010000000110011011100100
+00100000001000000110011011000101
+00100000010000000011100101111111
+01110000000010110000001100000111
+01101000000000001000010011111111
+00100000011110100000000000000000
+00100000010000000011110010100111
+01101000000000001000010011111111
+00011111111000100111001000000000
+01101000000000010000010100000001
+00011111111000100000110000000000
+00100000010000000110011011010001
+00100000001000000110011011000101
+01110000000010110000001100001000
+01101000000000001100011010110110
+00011111111000100111001000000000
+00011111111000001111111000000010
+00100000010000000011110010100111
+01101000000000010100011010111001
+11100001010000010000000000000000
+01101000000000010100011010110111
+00011111111000100000110000000000
+00100000010000000110011011010001
+00100000001000000110011011000101
+01110000000010110000001100001001
+01011000000000000000000000000000
+00100000010000000011110010100111
+00100000001000000110011011000101
+01110000000010110000001100001010
+01011000000000000000000000000001
+00100000010000000011110010100111
+00100000010000000011110001011101
+01101000000000010100011010000010
+11011000111000000000000000000010
+10101111111011111111111111111111
+01111001001000001000010000000011
+11011000111000000000000000001001
+10101111111011111111111111111111
+01111001001000001000010000000101
+01101000000000001100011010000010
+11011000111000000000000000000100
+10101111111011111111111111111111
+01111001001000001000010000000100
+11100001010010001000000000000000
+00100000001000000110011011000101
+11011000010000000000000000000000
+01101000000000001100000010010011
+11011000111000000000000000000000
+10101111111011111111111111111111
+01111001001000001000010000000000
+11011000111000000000000000000001
+10101111111011111111111111111111
+01111001001000001000010000000001
+01101000000000001100001101101110
+11011000111000000000000000000000
+10101111111011111111111111111111
+01111001001000001000010000000010
+00100000011000000000000000000000
+01110000000010110000001100001101
+01101000000000001100001000010111
+00011111111011111111111000100010
+00011111111000100111001000000000
+00100000010000000011110010100111
+01101000000000010100001000010101
+00011111111000100000110000000000
+00100000010000000110011011010001
+00100000001000000110011011000101
+01110000000010110000001100001110
+01011000000000000000000000000100
+00100000010000000011110010100111
+01101000000000100000100110111010
+11100001010000100000000000000000
+00100000001000000110011011000101
+01110000000010110000001100001111
+01101000000100010000000100010010
+11011000010000000000000011111111
+00100000010000000111111111011101
+00011111111000100111001000000000
+00100000010000000011110010100111
+00100000010000000110011011001011
+00100000010000000110011100000011
+00100000001000000110011011000101
+01110000000010110000001100010000
+00100000001000000011110001001001
+01110000000010110000001100010001
+01011000000000000000000000000100
+00100000010000000011110010100111
+01101000000000100100010011000111
+11100001010000100000000000000000
+00100000001000000110011011000101
+11011010001000000000000110000000
+00100000001000000011110010010001
+11011010001000000000000010000000
+00100000001000000011110010010001
+11011010001000000000000100000001
+00100000001000000011110010010001
+11011010001000000000000000000001
+01110000010001100110000100000000
+01110000000010110000001100010100
+01011000000000000000000000000010
+00100000010000000011110010100111
+00011010001000100111111000000000
+11100001010000010000000000000000
+00100000001000000110011011000101
+11011010011000000000000000000000
+00100000001000000011110010011011
+11011010011000000000000000000001
+01110000000010110000001100010101
+01011000000000000000000000000001
+00100000010000000011110010100111
+00011010011000100111111000000000
+11100001010000001000000000000000
+00100000001000000110011011000101
+01110000000010110000001100011101
+01011000000000000000000000000100
+00100000010000000011110010100111
+01101000000000100000100110111010
+11100001010000100000000000000000
+00100000001000000110011011000101
+01110000000010110000001000000010
+01100000000000001000101100000100
+01100000000011000000101010100010
+01000100111100010100000000011100
+00100000010000000011110010110001
+01101000000011000000101010100010
+00100000010000000110011011000010
+01101000000000011000101100000010
+11100001010000011000000000000000
+00100000011000000000000000000000
+00100000010000000011110010111010
+00100000011000001000000000000000
+00100000010000000011110010111000
+01101000000000100100011010100011
+00011111111010110111111000000000
+00100000011110100000000000000000
+00100000001000000011110010111110
+01101000000010001100011010100010
+00100000001000000110100000101001
+01101000000010001100011010100010
+00100000001000000110100000011011
+01101000000010001100011010100010
+00100000001000000110100000100101
+00011111111000001111111111111111
+00100000000000000000000000100110
+00100100001110100011110010111110
+00100000011000000000000000000000
+00100000010000000011101011010100
+00100000011101000000000000000000
+00011010001000100111111000000000
+01100000000000010100011010110111
+00011010010000100111111000000000
+01100000000000001100011010110110
+01101000000000010000010001111000
+01101000000010010100011010111011
+10011000010001100111110000000000
+00100000001000101011110011001111
+01101000000010010100011010111101
+10011000010001100111110000000000
+00100100011000101000000000000000
+01100000000000010100011010111001
+00100000001000000011110000111101
+01101000000000001100011010111111
+11000011100000101000000000000000
+00100000010000000011110011110000
+00100000001000000011010000001100
+01110000010000010111001000000010
+00100000011000000000000000000000
+00100000001000000011110011011000
+01101000000000001100011010110010
+00100000011110100000000000000000
+01101000000000001100011010110011
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000001100011010110011
+00100100011110100000000000000000
+01110000010001101011001100001010
+00100000010000000110100011101011
+00100000010000000110100100001000
+00011111111001101111110001100100
+00100000010000000111111110000110
+00011000000001111111111000000000
+00011000000001110000010000000000
+01100000000000001100011010110100
+01100000000010001100011010110101
+00100000011000000000000000000000
+00100000010000000111111110110100
+00100000001000010011001111011001
+00100000001000000011001111011011
+11011000111000000000000000000110
+00100000001000000011110011111100
+11011000111000000000000000000110
+00100000001000000011110011111000
+11011000111000000000000000000101
+00100000001000000011110011111100
+11011000111000000000000000000101
+00100000001000000011110011111000
+11011000111000000000000000000100
+00100000001000000011110011111100
+11011000111000000000000000000100
+00100000001000000011110011111000
+01101000000000001100011010111111
+11111001001111111111111000000000
+01100000000000001100011010111111
+00100000011000000000000000000000
+01101000000000001100011010111111
+11111001001000000111111000000000
+01100000000000001100011010111111
+00100000011000000000000000000000
+00100000010000000011110100111001
+00100000010000000110010000001111
+00100000010000000100000011000110
+00100000010000000011110101100110
+00100000010000000110010000010001
+00100000011101011000000000000000
+00100000010000000011110100010110
+00100000010000000011110100011001
+01101000000000100100011011010011
+11000011100010000000000000000000
+00100000010000000011110101001110
+11000110000100110000000000000000
+01101000000000010100011010000010
+11000010100001100100001010110000
+00100000001000000100001010100010
+01101000000000100100011011010011
+11000100000011011000000000000000
+11011111001000000000000000010100
+01011000000000110000110101000000
+00100000010000000010101010001111
+11000010000000000111111011000001
+00100000011000000000000000000000
+01101000000000100100011011010011
+11000100000010000000000000000000
+00100000001000000100100011101010
+01011000000000000100000101101101
+01100000000000010100000111101111
+01011000000000000011111101110111
+01100000000000010100000111110001
+01011000000000000011111010111011
+01100000000000010100000111101101
+01011000000000000100000101111100
+01100000000000010100000111110101
+01011000000000000011110111100011
+01100000000000010100000111110011
+01011000000000000011111010110011
+01100000000000010100000111101011
+01011000000000000011110101011011
+01100000000000010100000111111001
+00100000010000000010110001111010
+01011000000000000100010000000001
+00011010011000001000101011011000
+11100000101000010000000000000000
+01011000000000000100010000000110
+00011010011000001000101011011010
+11100000101000010000000000000000
+01011000000000000011111010111111
+00011010011000001000101011011100
+11100000101000010000000000000000
+01011000000000000100000111111001
+01100000000000010100000111111101
+01011000000000000011110100110110
+01100000000000010100001000000001
+00100000011000000000000000000000
+01101000000000100100011011010011
+11000011000010010110010011010111
+00100000001000000110010011011010
+00100000011101011000000000000000
+00100000010000000010110010011101
+00100000010000000011111001101110
+00100000010000000011111000011110
+00100000010000000011111001010100
+00100000010000000101100000010000
+00100000010000000101100000111001
+00100000010000000101100000101100
+00100000010000000101100000011000
+01101000000000100100011011010011
+11000010100010100011110101000110
+11000010100010011100010000010100
+00100000011000000000000000000000
+00100000010000000110010110011100
+01101000000000100100011011010011
+00101111111011111111111000011001
+00100100010000001110010111000010
+00100000010000000100010000111111
+00100000010000000011110111001001
+00100000010000000100000110101010
+00100000001000000110010111011111
+01101000000000100100011011010011
+11000011000011110011110101010011
+01101000000000001000101010111101
+00101111111011000000000000000011
+00100100011000001000000000000000
+01101000000000001100011100011111
+01100000000000001100011100011110
+01101000000000001100011011110101
+11000011100000110000000000000000
+01101000000000100100011011010011
+11000100000010001000000000000000
+11000010100011101010111011100100
+00100000001000000010111100101100
+01101000000000001000010001111000
+00011111111001100111111000011010
+00100100011000101000000000000000
+01110000000010101001100100010010
+00100000010000000111110110001111
+11011000111000000000000000000000
+00100000001000000100000110111001
+01101000000000001100011010110110
+11000001000000001000000000000000
+01110000010001101011011000000001
+00100000011000000000000000000000
+01101000000000001100011011100001
+00011111111000010111111000001111
+01100000000000001100011101111010
+00100000001000000011110110000000
+01101000000010001100011011100111
+00100000010000000110100000011101
+00100100001000001011110101100010
+01101000000000001100011010110110
+11000001000000000000000000000000
+01110000010001101011011000000000
+01101000000000001100011101111010
+00011111111000001111111000000001
+00011111111000010111111000000011
+01100000000000001100011101111010
+00100000010000000011110101111110
+01101000000000100100011011010011
+11000010100010100100010000111011
+11000010100010011011110101111001
+00100000011000000000000000000000
+11011000010000000000000000011110
+00100000010000000110100000001110
+11011000010000000000000000011111
+00100000010000000110100000001110
+00100000001000000100010000110101
+01000100111100011100000000011100
+00100000010000000100001001001010
+01101000000000001100011011100000
+11000000000000101011110110101010
+11000000000000100011110110010110
+01101000000000001100011101111010
+11000000000000000011110110001010
+11000000000000001011110110001000
+11000000000000010011110110001100
+11000000000000011011110110001110
+01101000000000001100011110000000
+00100000001000000011110110111110
+01101000000000001100011101111111
+00100000001000000011110110111110
+01101000000000001100011110000001
+00100000001000000011110110111110
+01101000000000001100011110000010
+00100000001000000011110110111110
+01101000000000001100011011100000
+11000001000000110000000000000000
+01101000000000001100011010110101
+00011111111000001111111000000001
+01100000000000001100011010110101
+00100000011000000000000000000000
+01101000000000001100011101111010
+11000000000000000011110110011101
+11000000000000001011110110011011
+11000000000000010011110110011111
+11000000000000011011110110100001
+01101000000000001100011110000100
+00100000001000000011110110100010
+01101000000000001100011110000011
+00100000001000000011110110100010
+01101000000000001100011110000101
+00100000001000000011110110100010
+01101000000000001100011110000110
+01100000000000001100011010110101
+00011111111011010111111000000000
+00011111111000100010001000000000
+00011111111000001111111000001101
+00100000010000000110010000010011
+00011010001000100111111000000000
+00011111111000001111111000001110
+00100000001000000110010000010011
+01101000000000001100011101111010
+11000000000000000011110110110001
+11000000000000001011110110101111
+11000000000000010011110110110011
+11000000000000011011110110110101
+01101000000000001100011110001000
+00100000001000000011110110110110
+01101000000000001100011110000111
+00100000001000000011110110110110
+01101000000000001100011110001001
+00100000001000000011110110110110
+01101000000000001100011110001010
+01100000000000001100011010110101
+00100000010000000100000011000000
+01101000000000001100011010110101
+00011111111000001111111010000000
+00011111111011010111111000000000
+00011111111000001111111000000101
+00011111111000100010001000000000
+00100000001000000100000101011010
+01100000000000001100011010110101
+00100000010000000011110110010000
+01101000000000001100011010110101
+01011000000000000000000000000110
+00100000010000000110010000010100
+00011111111000010000010011111000
+01101000000000001100011010110101
+10011000010000001111111000000000
+00011111111011010111111000000000
+00011111111000001111111000000110
+00100000001000000110010000010011
+00100000010000000011001111000100
+00100000001000101100001100010110
+00100000010000000100010000011100
+00100000010000000100001011100100
+00100000001000000011001110111101
+01101000000000010100011100000111
+00100000011110100000000000000000
+01101000000000100100011011010011
+11000100000010001000000000000000
+11000011100000011000000000000000
+11000110000100110000000000000000
+00100000010000000100000010000011
+11000001100000111000000000000000
+00100000010000000100010010000010
+11011000111000000000000000000011
+00100000010000000100001111001110
+01011000000000000000000000000000
+01100000000000010100011010101110
+01100000000000001100011010110100
+00100000010000000011001001100011
+01101000000000010100011010000010
+11000010100000111100001110010010
+11000010100001001011010000000010
+11000010100000000011001111101001
+00100000010000000100001011001010
+00100000001000000010111010101101
+00100000010000000011110111001110
+00100000010000000111111000110100
+00100000010000000011110101101010
+00100000010000000011110111101001
+00100000010000000011111011100000
+00100000001000000011110111110111
+01101000000000100100011011010011
+11000100000010000000000000000000
+00100000010000000100100011010011
+00100000001000000100100011111101
+01101000000100001000101000000100
+11000011000000111011110111110001
+11000010100000111011110111110100
+00100000011000000000000000000000
+01101000000000001100011011111111
+11000100000000111000000000000000
+00100000001000000110010110011010
+01101000000000001100011011111111
+11000011100000111000000000000000
+00100000001000000100001110000001
+00100000010000000011110111101101
+01101000000100001000101000000100
+01100000000000001100011011111111
+11000100000000111000000000000000
+00100000010000000011111000000111
+01101000000000100100011011111001
+01101000000010001100011011111101
+10011000010000001000010000000000
+00011100010000100111111000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+01100000000000100100011011111001
+00100000010000000011111110010111
+00100100011101000000000000000000
+01110000000011010011100000000100
+00100000001000000011111000001111
+01101000000010100100011011111001
+00011100010000100111111000000000
+10011000010001100111110000000000
+00100100010000010011111000001100
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000100100011011111001
+00100000011000000000000000000000
+01101000000000001000110100111000
+11000100000000010000000000000000
+00100000001000000011111000010010
+01101000000100001000101000000100
+11000100000000111000000000000000
+01110000000011010101001000100000
+01011000000000000000000000000001
+01100000000000001000110101010100
+01101000000000111100011010011010
+11100000101000111000000000000000
+00100000011000000000000000000000
+01101000000100010000000001010000
+01111001001111111111111000001011
+01100000000100010000000001010000
+00100000011000000000000000000000
+01011000000000001000110000000000
+01100000000000010100010101110101
+01011000000000001000111001111010
+01100000000000010100010010111100
+01011000000000000010010000000010
+01100000000000010100000010111101
+01011000000000000010010110000000
+01100000000000011100000010101010
+01110000010000010111001100000011
+01110000010000010101011000001000
+01110000010001101101100100000001
+01011000000000000000001000000000
+01100000000000010100000101010100
+01110000010001001010011000010111
+01110000010001001010100000010111
+01011000000000000000101001110111
+01100000000000010100001000010010
+00111000000000000000001100000110
+00111000000001000100010001000000
+00111000000010010000000000000000
+00111000000011000100010000001000
+01100000000001001100010101110111
+00111000000000000001001000100100
+00111000000001000100000000000000
+00111000000010000000000000000000
+11100000101000101000000000000000
+00111000000000111111111111111111
+00111000000001101111111000100011
+00111000000010011001100111011001
+00111000000011000000001000001101
+01100000000001000100000010011000
+01011000000000000000000100101100
+01100000000000010100011100000111
+00100000010000000101011110100011
+01101000000000100100011011010011
+11000100000011111000000000000000
+00100000010000000011111001000100
+00100000001000000011111001001100
+01101000000010001100011011110111
+00100000010000000110011111111011
+01101000000010001100011011110111
+00100000010000000110100000011101
+01110000010001101111011000000011
+00100000011000001000000000000000
+01110000010001101111011000000010
+00100000011000000000000000000000
+01101000000010001100011011111000
+00100000010000000110011111111011
+01101000000010001100011011111000
+00100000010000000110100000011101
+01110000010000100010110100000000
+00100000011000001000000000000000
+01110000010000100010110100000010
+00100000011000000000000000000000
+01101000000000001100001000101101
+11000000000000000011111001011001
+11000000000000001011111001100010
+11000000000000010011111001101011
+00100000001000000011111001011001
+01101000000010010100001000100001
+01101000000000010100001000100111
+10011000010001100111111000000000
+00011111111011111111111000010100
+00011111111001101111110001100100
+00100000010000000111111110000110
+00011000000001111111111000000000
+01100000000000010100011011010000
+00100000011000000000000000000000
+01101000000010010100001000011111
+01101000000000010100001000100101
+10011000010001100111111000000000
+00011111111011111111111011100110
+00011111111001101111110110010000
+00100000010000000111111110000110
+00011000000001111111111000000000
+01100000000000010100011011010000
+00100000011000000000000000000000
+01101000000000010100001000100011
+01100000000000010100011011010000
+00100000011000000000000000000000
+01101000000010001100001000111010
+00100000010000000110100000001110
+00100000010000000100100011111011
+01101000000010001100011011100010
+00100000010000000110011111111011
+01101000000010001100011011100011
+00100000010000000110011111111011
+01101000000010001100011011100100
+00100000010000000110011111111011
+01101000000010001100011011110011
+00100000010000000110011111111011
+01101000000010001100011011011100
+00100000010000000110100000001110
+01101000000010001100011011101000
+00100000010000000110011111111011
+01101000000010001100011011101001
+00100000010000000110011111111011
+01101000000010001100011011101010
+00100000010000000110011111111011
+01101000000010001100011011101011
+00100000010000000110011111111011
+01101000000010001100011011100101
+00100000010000000110011111111011
+01101000000010001100011011100110
+00100000010000000110011111111011
+01101000000010001100011011101111
+00100000010000000110100000001110
+01101000000010001100011011110000
+00100000010000000110100000001110
+01101000000010001100011011110001
+00100000010000000110100000001110
+01101000000010001100011011110010
+00100000010000000110100000001110
+01101000000010001100011011110100
+00100000010000000110100000001110
+01101000000010001100011011101101
+00100000010000000110011111111011
+01101000000010001100011011101100
+00100000010000000110011111111011
+01101000000010001100011011100111
+00100000001000000110011111111011
+01101000000010001100011011101000
+00100000010000000110011111011101
+01101000000010001100011011101001
+00100000010000000110011111011101
+01101000000010001100011011101010
+00100000010000000110011111011101
+01101000000010001100011011101011
+00100000001000000110011111011101
+01101000000010001100011011101000
+00100000010000000011111010100111
+01101000000010001100011011101001
+00100000010000000011111010100111
+01101000000010001100011011101010
+00100000010000000011111010100111
+01101000000010001100011011101011
+00100000001000000011111010100111
+00011000010001100111110011111111
+00100000011000101000000000000000
+00011000010000010000111001111111
+01101000000100100000000100011100
+10101111111011111111111111111111
+01101000000100100000000001111000
+11111001001000001111111000000000
+01100000000100100000000001111000
+01101000000100100000000001111100
+11111101001000001111111000000000
+01100000000100100000000001111100
+00100000011000000000000000000000
+01111000001101000111110000000000
+01101000000100100000000100111000
+01111001001101000111111000011010
+01100000000100100000000001001100
+00100000010000000010110000100001
+00100000010000000100010010000010
+00100000010000000011111010011111
+00100000001000000011111010111111
+00100000010000000011111010111111
+01101000000000001000000010100000
+00100100011110100000000000000000
+00100000001000000110011111101101
+00100000010000000011111011100000
+11011000010000000000000000011001
+01101000000000100100011011010011
+00101111111011111111111000010010
+00100000010000001011111011011110
+00100000010000000110100000001110
+00100000010000000110001111101110
+01101000000010001100011011100010
+00100000010000000110011111011101
+01101000000010001100011011100011
+00100000010000000110011111011101
+01101000000010001100011011100100
+00100000010000000110011111011101
+01101000000010001100011011100101
+00100000010000000110011111011101
+01101000000010001100011011100110
+00100000010000000110011111011101
+01101000000010001100011011100111
+00100000010000000110011111011101
+01101000000010001100011011101101
+00100000010000000110011111011101
+01101000000010001100011011101000
+00100000010000000110011111011101
+01101000000010001100011011101001
+00100000010000000110011111011101
+01101000000010001100011011101010
+00100000010000000110011111011101
+01101000000010001100011011101011
+00100000010000000110011111011101
+01101000000010001100011011110011
+00100000001000000110011111100001
+11011000010000000000000000011110
+00100000011000000000000000000000
+01000100111100100100000000011100
+00100000010000000011111011101110
+00100000010000000011111100110110
+01101000000000001100011010111000
+01101000000010001100011010110111
+01100000000000001100011010110111
+10011000010001100111110000000000
+00100100001000101011001111010100
+01101000000000001100011010111110
+01101000000010001100011010111101
+01100000000000001100011010111101
+10011000010001100111110000000000
+00100100001000101011001111010100
+00100000011000000000000000000000
+01101000000000001100011011101010
+11000001011111111000000000000000
+11011010001000000000000000000000
+01101000000010001100011011101010
+00100000010000000110100000011101
+01111001001000001010001000000000
+01101000000010001100011011101011
+00100000010000000110100000011101
+01111001001000001010001000000001
+00011010001000100111111000000000
+01100000000000001100011010111000
+11000000000000001011111011111110
+11000000000000010011111100000010
+01101000000000001100011010111001
+11000010100000111011111100001110
+00100000011000000000000000000000
+01101000000000001100011010110111
+11000000000000000011111100000110
+11000000000000011011111100001000
+00100000011000000000000000000000
+01101000000000001100011010110111
+11000000000000000011111100001010
+11000000000000011011111100001100
+00100000011000000000000000000000
+01110000010001101011100110000010
+00100000011000000000000000000000
+01110000010001101011100110000001
+00100000011000000000000000000000
+01110000010001101011100110000000
+00100000011000000000000000000000
+01110000010001101011100110000011
+00100000011000000000000000000000
+01101000000000001100011010111001
+01111001001111111111111000000111
+01100000000000001100011010111001
+11000000000000000011111100010110
+11000000000000001011111100011001
+11000000000000010011111100011100
+11000000000000011011111100011111
+00100000011000000000000000000000
+01101000000000001100011010111000
+11000000000000011011111100100010
+00100000011000000000000000000000
+01101000000000001100011010111000
+11000000000000000011111100100010
+00100000011000000000000000000000
+01101000000000001100011010111000
+11000000000000011011111100101100
+00100000011000000000000000000000
+01101000000000001100011010111000
+11000000000000000011111100101100
+00100000011000000000000000000000
+01101000000000001100011010111100
+00011111111000001111111000000001
+01100000000000001100011010111100
+00011111111001100111110000000001
+00100000011000010000000000000000
+01110000010001101011110000000000
+01101000000000001100011010111010
+00011111111000001111111000000001
+01100000000000001100011010111010
+00100000011000000000000000000000
+01101000000000001100011010111011
+00011111111000001111111000000001
+01100000000000001100011010111011
+00011111111001100111110000000001
+00100000011000010000000000000000
+01110000010001101011101100000000
+01101000000000001100011010111010
+00011111111000001111111111111111
+01100000000000001100011010111010
+00100000011000000000000000000000
+01101000000000001100011011101000
+11000001011111111000000000000000
+11011010001000000000000000000000
+01101000000010001100011011101000
+00100000010000000110100000011101
+01111001001000001010001000000000
+01101000000010001100011011101001
+00100000010000000110100000011101
+01111001001000001010001000000001
+00011010001000100111111000000000
+01100000000000001100011010111110
+11000000000000001011111101000110
+11000000000000010011111101001010
+01101000000000001100011010111111
+11000010100000111011111101010110
+00100000011000000000000000000000
+01101000000000001100011010111101
+11000000000000000011111101001110
+11000000000000011011111101010000
+00100000011000000000000000000000
+01101000000000001100011010111101
+11000000000000000011111101010010
+11000000000000011011111101010100
+00100000011000000000000000000000
+01110000010001101011111110000010
+00100000011000000000000000000000
+01110000010001101011111110000001
+00100000011000000000000000000000
+01110000010001101011111110000000
+00100000011000000000000000000000
+01110000010001101011111110000011
+00100000011000000000000000000000
+01101000000000001100011010111111
+01111001001111111111111000000111
+01100000000000001100011010111111
+11000000000000000011111101011110
+11000000000000001011111101100001
+11000000000000010011111101100100
+11000000000000011011111101100111
+00100000011000000000000000000000
+01101000000000001100011010111110
+11000000000000011011111101101010
+00100000011000000000000000000000
+01101000000000001100011010111110
+11000000000000000011111101101010
+00100000011000000000000000000000
+01101000000000001100011010111110
+11000000000000011011111101101111
+00100000011000000000000000000000
+01101000000000001100011010111110
+11000000000000000011111101101111
+00100000011000000000000000000000
+01110000010001101100001000000000
+01101000000000001100011011000000
+00011111111000001111111000000001
+01100000000000001100011011000000
+00100000011000000000000000000000
+01110000010001101100000100000000
+01101000000000001100011011000000
+00011111111000001111111111111111
+01100000000000001100011011000000
+00100000011000000000000000000000
+01011000000000000000000000000010
+01100000000000001100011010000000
+00100000011000000000000000000000
+01101000000000001100000111100010
+00100000011110100000000000000000
+00100000010000000101001001110001
+00100100011110100000000000000000
+01101000000000100100011011010011
+11000010100000011011111110001010
+11000010100000000011111110001010
+11000010100000101011111110001010
+00100000010000000011111110010111
+00100100011101000000000000000000
+11011010001000000000000000001001
+00100000010000000100110101100011
+01101000000000010100001001001110
+11100000101000010000000000000000
+01011000000000000000001010100001
+11100000101000010000000000000000
+01101000000000111100011010011010
+11100000101000111000000000000000
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000111100011010011010
+00100000001000000011111110000001
+01101000000000010100011010101010
+01100000000000010100011010110000
+00100000011000000000000000000000
+01000100111100101100000000011100
+11011010001000000000000000000111
+01101000000010010100010001101111
+00100000010000000101101001100100
+01101000000000111100011010011010
+11100000101000111000000000000000
+00100000011000000000000000000000
+01000100111100110100000000011100
+01111000010101000111110000000000
+01011000000000000000000000000000
+01100000000000110100011010011011
+00100000010000000011111110110101
+00100000010000000100000001111001
+00100000010000000100000001111110
+00100000010000000100000010011001
+00100100011101000000000000000000
+00100000010000000011111110001101
+11011000111000000000000000001000
+00100000001000000100001111001110
+01101000000000010100011010011011
+00011111111001100111111000000000
+01100000000000010100011010011011
+00100000001000000111111111100111
+01101000000000010100011010011101
+00011111111001100111111000000000
+01100000000000010100011010011101
+00100000001000000111111111100111
+01101000000000010100011010011101
+00011111111001100111111000000000
+01100000000000010100011010011101
+01101000000000010100011010011011
+00011111111001100111111000000000
+01100000000000010100011010011011
+00100000010000000100000000000010
+00100000001000000111111111100111
+00100000010000000100000000000010
+00100000001000000111111111100111
+01101000000000001100001000111001
+11000001100000000000000000000000
+01101000000000001100011011100000
+11000000000000000011111111100010
+11000000000000001011111111100010
+11000000000000010011111111100010
+11000000000000011011111111100010
+11000000000000100011111111000100
+11000000000000101100000000010000
+11000000000000110011111111100010
+00100000001000000011111111100010
+01101000000000001100011010100111
+00100000010110100100000001011101
+01110000010001101010011100000001
+00100000011000000000000000000000
+00100000010000000011111111000000
+01101000000010001100011011110011
+00100000010000000110100000011101
+00100100011000001000000000000000
+01011000000000000000000000000000
+00100000010000000110010000010100
+11000000100110000100000011010001
+01011000000000000000000000000010
+00100000010000000110010000010100
+11000100000000111000000000000000
+00100000010000000100000001011101
+00100000010000000011111111011110
+01100000000000001100011010100001
+00011111111100011111111000000000
+00100000010000000100000101101001
+01100000000000001100011010011100
+01101000000000001100011010100001
+00011111111000010111111000001111
+00100000010000000100000101101001
+01100000000000001100011010011110
+01101000000000001100011011110110
+11000000000000000011111110100011
+11000000000000001011111110101011
+11000000000000010011111110100111
+11000000000000011011111110110011
+00100000011000000000000000000000
+01011000000000000000000000010010
+00100000001000000110010000010100
+11000000000110001011111111101010
+00100000001000000100000011010001
+00100000010000000011111111000000
+01111000010101000111110000000000
+01101000000010001100011011110011
+00100000010000000110100000011101
+00100100011000001000000000000000
+01011000000000000000000000000000
+00100000010000000110010000010100
+11000000100110000011111111100000
+01011000000000000000000000000010
+00100000010000000110010000010100
+11000100000000111000000000000000
+00100000010000000100000001011101
+01101000000000001100011010011011
+00100000010000000100000101100101
+01100000000000010100011010011011
+01101000000000001100011010011101
+00100000010000000100000101100101
+01100000000000010100011010011101
+01101000000000001100011011110110
+11000000000000000011111111111010
+11000000000000001011111111111100
+11000000000000010011111111111110
+11000000000000011100000000000000
+00100000011000000000000000000000
+00100000010000000011111110100011
+00100000001000000100000010110011
+00100000010000000011111110101011
+00100000001000000100000010110011
+00100000010000000011111110100111
+00100000001000000100000010110011
+00100000010000000011111110110011
+00100000001000000100000010110011
+01101000000000010100011010011101
+01101000000010010100011010011011
+01100000000000010100011010011011
+01100000000010010100011010011101
+00100000011000000000000000000000
+00100000010000000110010000001111
+00100000000000000000000001100100
+00011010010000100111111000000000
+00100000010000000110010000010100
+00011111111000100010010000000000
+00100000010000000110010000010001
+00100000000000000000000001100100
+00011010010000100111111000000000
+00100000011000000000000000000000
+01111000010101000111110000000000
+01101000000010001100011011110011
+00100000010000000110100000011101
+00100100011000001000000000000000
+11011010010000000000000000000010
+00100000010000000100000000000111
+11000100000000111000000000000000
+11011010010000000000000000000000
+00100000010000000100000000000111
+01100000000000001100011011011101
+11000000100111110100000101000101
+01101000000000001100011010100111
+00100000010110100100000000111001
+01110000010001101010011100000001
+00100000010000000100000000111001
+01101000000000001100011010100001
+00011111111100011111111000000000
+00100000010000000100000101101001
+01100000000000001100011010011100
+01101000000000001100011010100001
+00011111111000010111111000001111
+00100000010000000100000101101001
+01100000000000001100011010011110
+01101000000000001100011011110110
+11000000000000000100000000110001
+11000000000000001100000000110101
+11000000000000010100000000110011
+11000000000000011100000000110111
+00100000011000000000000000000000
+01101000000000001100011010100100
+11000000000000000100000001010001
+11000000000000001100000001000101
+00100000011000000000000000000000
+00100000010000000011111110100011
+00100000001000000100000000101101
+00100000010000000011111110100111
+00100000001000000100000000101101
+00100000010000000011111110101011
+00100000001000000100000000101101
+00100000010000000011111110110011
+00100000001000000100000000101101
+00100000010000000110010000001111
+00100000010000000100000001011101
+11011111111000000000000000000101
+00100000010000000110010000010100
+01100000000000001100011010100001
+11011111111000000000000000000111
+00100000010000000110010000010100
+01100000000000001100011010100010
+11011111111000000000000000001000
+00100000010000000110010000010100
+01100000000000001100011010100011
+00100000001000000110010000010001
+01101000000000001100011010100010
+11000001100000000000000000000000
+01101000000000001100011010100011
+00011111111001100111110000101101
+00100000011000010000000000000000
+01110000010001101010010000000000
+01011000000000001011101001000001
+00100000010000000110010000000101
+01011000000000000000000000110010
+00100000010000000110010000000101
+01011000000000001011010101000001
+00100000001000000110010000000101
+01101000000000001100011010100010
+11000001100000000000000000000000
+01101000000000001100011010100011
+00011111111001100111110000101101
+00100100011000010000000000000000
+01110000010001101010010000000001
+01011000000000001011101001000001
+00100000010000000110010000000101
+01011000000000001000000000110010
+00100000010000000110010000000101
+01011000000000001011010101000001
+00100000001000000110010000000101
+11011111111000000000000000000011
+00100000010000000110010000010100
+01100000000000010100011010011011
+11011111111000000000000000000100
+00100000010000000110010000010100
+01100000000000010100011010011101
+00100000011000000000000000000000
+11011000010000000000000000011011
+00100000010000000110011111111011
+11011000010000000000000000011011
+00100000010000000110100000011101
+00100000011000001000000000000000
+01101000000100001000000100001001
+01111001001000000111111000000100
+01100000000100001000000100001001
+00100000011000000000000000000000
+01101000000010001100011011000000
+01101000000100001000000100001001
+10011000010000001111111000000000
+00100000011110100000000000000000
+01100000000000001100011010011111
+01110000010001101100000000000000
+00100000001000000111111111100111
+01101000000010001100011011000000
+01101000000100001000000100001001
+10011000010000001111111000000000
+01100000000000001100011011000000
+00100000011000000000000000000000
+01101000000000001100011011000000
+00100000011110100000000000000000
+01100000000000001100011010011111
+01110000010001101100000000000000
+00100000001000000111111111100111
+01101000000000001100011010111010
+00100000011110100000000000000000
+01100000000000001100011010100000
+01110000010001101011101000000000
+00100000001000000111111111100111
+11011010001000000000000000000000
+01101000000010001100011011100010
+00100000010000000110100000011101
+01111001001000001010001000000000
+01101000000010001100011011100011
+00100000010000000110100000011101
+01111001001000001010001000000001
+01101000000010001100011011100100
+00100000010000000110100000011101
+01111001001000001010001000000010
+00100000010000000100000010010000
+00011010001000100111111000000000
+00100000011000000000000000000000
+01101000000000001100011011100101
+11000001011111111000000000000000
+01101000000010001100011011100101
+00100000010000000110100000011101
+01111001001000001010001000000011
+01101000000010001100011011100110
+00100000010000000110100000011101
+01111001001000001010001000000100
+00100000011000000000000000000000
+00100000010000000100000010000011
+00100000010000000100000010101000
+00100000010000000100000010100011
+00011010001000100111111000000000
+01101000000010001100011010011010
+01100000000000001100011010011010
+10011000010000101111111000000000
+00011111111001100111110000000000
+00100000011000101000000000000000
+00100000001000000111111111100111
+11000110100100110000000000000000
+00011010001000100111111000000000
+00100000011110100000000000000000
+01100000000000001100011010011010
+00100000001000000111111111100111
+01101000000000010100011010000010
+11000010100001001100000010101101
+01101000000000010100011010000010
+11000010100000000100000010110000
+00100000011000000000000000000000
+00011010001000100111111000000000
+00100100001110100101100000100000
+00100000001000000101100000100010
+00011010001000100111111000000000
+00100100001110100010101111000111
+00100000001000000010101111001001
+01000100111100111100000000011100
+11011000010000000000000000011010
+01101000000000100100011011010011
+00101111111011111111111000010010
+00100000010000001100000010111110
+00100000010000000110100000011101
+00100000011000001000000000000000
+01011000000000000000000000001010
+00100000010000000110010000010100
+00100000000000000000001111101000
+00100000001000000100000010110011
+11011000010000000000000000011111
+00100000011000000000000000000000
+01101000000000100100011011010011
+11000010100010010100000011000100
+11011000010000000000000000011010
+00100000001000000110011111111110
+11011000010000000000000000011111
+00100000001000000110011111111110
+00100000010000000011110100110110
+00100000011101011000000000000000
+00100000010000000100000011000000
+01101000000000001100011011100000
+11000000000000101100000011010101
+00100000010000000100000011011001
+11000000000110000100000011100000
+11000000000110001100000011101010
+00100000010000000100000011010001
+00100000000000000000001111101000
+00100000001000000100000011001011
+01000100111101000100000000011101
+01101000000000100100011011010011
+11000010100010010110001111100000
+00100000001000000110001111010001
+00100000010000000100000011011001
+11000000000111110100000101001011
+00100000010000000100000101000101
+00100000001000000100000011010101
+01011000000000000000000000000001
+00100000010000000110010000010100
+01100000000000001100011011011110
+01011000000000000000000000000000
+00100000010000000110010000010100
+01100000000000001100011011011101
+00100000011000000000000000000000
+01101000000000001100011011011110
+11000000011010001100000100111001
+11000000011010010100000011111000
+11000000000000010100000011101110
+11000000001010100100000011100110
+00100000011000000000000000000000
+01110000010001101110000000000010
+00100000011000000000000000000000
+01110000010001101110000000000110
+00100000011000000000000000000000
+01101000000000001100011011011110
+11000000001110000100000011101000
+01110000010001101110000000000001
+00100000011000000000000000000000
+01110000010001101110000000000100
+00100000010000000100000011110110
+01011000000000000011010000100110
+00100000010000000110010000010011
+01011000000000000000010000011001
+00100000010000000110010000010011
+01011000000000000000000000001001
+00100000001000000110010000010011
+01011000000000000101101000001001
+00100000001000000110010000010011
+01110000010001101110000000000011
+00100000010000000100000011110110
+01011000000000000000111100001101
+00100000010000000110010000010011
+01011000000000001110001100011101
+00100000010000000110010000010011
+01011000000000001101001001111101
+00100000010000000110010000010011
+00100000010000000100000100000010
+00100000001000000100000100011010
+01011000000000000011010100011011
+00100000010000000110010000010011
+01011000000000001011010000101000
+00100000010000000110010000010011
+01011000000000000100011000101001
+00100000010000000110010000010011
+01011000000000001001011000101010
+00100000010000000110010000010011
+01011000000000001000110000101011
+00100000010000000110010000010011
+01011000000000000110111000101100
+00100000010000000110010000010011
+01011000000000000110010000101101
+00100000010000000110010000010011
+01011000000000000101111100111000
+00100000010000000110010000010011
+01011000000000000000111100111001
+00100000010000000110010000010011
+01011000000000000011001000111010
+00100000010000000110010000010011
+01011000000000000100011100111011
+00100000010000000110010000010011
+01011000000000000001000001000010
+00100000001000000110010000010011
+01011000000000000010111001010100
+00100000010000000110010000010011
+01011000000000001111001001010101
+00100000010000000110010000010011
+01011000000000001111010001100001
+00100000010000000110010000010011
+01011000000000000111000001100011
+00100000010000000110010000010011
+01011000000000000101001001110101
+00100000010000000110010000010011
+01011000000000000100000101110110
+00100000010000000110010000010011
+01011000000000001110110101110111
+00100000010000000110010000010011
+01011000000000000010001101111000
+00100000010000000110010000010011
+01011000000000000100011001111001
+00100000010000000110010000010011
+01011000000000001110010101111010
+00100000010000000110010000010011
+01011000000000000100100001111100
+00100000010000000110010000010011
+01011000000000000111011101111110
+00100000010000000110010000010011
+01011000000000000000000101111111
+00100000010000000110010000010011
+01011000000000000000000000001011
+00100000010000000110010000010011
+01011000000000000000000001111111
+00100000010000000110010000010011
+00100000001000000100000011110100
+01110000010001101110000000000000
+00100000010000000100000011110110
+01011000000000000001000000001101
+00100000010000000110010000010011
+01011000000000001110110100011101
+00100000010000000110010000010011
+01011000000000001000000001111101
+00100000010000000110010000010011
+00100000010000000100000100000010
+01011000000000000000100101000011
+00100000010000000110010000010011
+00100000001000000100000100011010
+01101000000010001100011011011100
+00100000010000000110100000101001
+00100000010000000111111011000001
+01101000000010001100011011011100
+00100000010000000110100000100101
+00100000001000000111111011000001
+01110000010001101110000000000101
+01011000000000001011101001000001
+00100000010000000110010000000101
+01011000000000000000110100010001
+00100000010000000110010000000101
+01011000000000000000010000011011
+00100000010000000110010000000101
+01011000000000000000010000011100
+00100000010000000110010000000101
+01011000000000000000111100011101
+00100000010000000110010000000101
+01011000000000000000000000110010
+00100000010000000110010000000101
+01011000000000001011010101000001
+00100000001000000110010000000101
+01011000000000001011101001000001
+00100000010000000110010000000101
+00100000000000000000111110100000
+01011000000000001111111101111111
+00100000010000000110010000000101
+00011010001000100111111000000000
+00100000010000000110010000000101
+01011000000000000000000001111111
+00100000010000000110010000000101
+01011000000000001011010101000001
+00100000001000000110010000000101
+11000100000000111000000000000000
+11011000010000001111111100000000
+10011000010000011111111000000000
+00100000011000000000000000000000
+11000100000000011000000000000000
+11011000010000000000000011110000
+10011000010000011111111000000000
+00100000011000000000000000000000
+00100000010000000101100010010010
+00100100011110100000000000000000
+01101000000000001100011011000101
+00011111111000010111111000000011
+11000001100000011000000000000000
+01101000000000100100011011010011
+11000010100000011100000101111001
+11000010100000000100000101111001
+11000010100000101100000101111001
+00100000010000000011111110010111
+00100100011101000000000000000000
+00100000001000000011111110010000
+01011000000000000000000000000000
+01100000000000111100011010011010
+00100000001000000011111110010000
+00011010011000100111111000000000
+11000000000010100100000111000011
+11000000000000001100001011001010
+11000000000010101100000111011001
+11000000000000010100000111011001
+11000000000000101100000111010110
+11000000000010000100001001101100
+11000000000010010100001010011011
+11000000000000110100000111010101
+11000000000000100100000111001100
+11000000000010011100000111001100
+11000000000001010100000111001010
+11000000000101110011001111001101
+11000000000110001100000110110100
+11000000000110010100000110110110
+11000000000111110100000110010001
+11000000000100111100001110001110
+11000000000111001100000110011100
+11000000000111010100000110010010
+11000000000111100100000110011010
+00100000011000000000000000000000
+00100000001000000011010000010000
+01110000010001111000101100000001
+01101000000000001100011100011110
+00100100001110100100010010010010
+01101000000000001100011100100000
+01101000000010001100011100000011
+10011000010001100111110000000000
+00100000001000101011010000001010
+00100000011000000000000000000000
+01110000010001111000101100000001
+00100000011000000000000000000000
+01110000010001111000101100000001
+11011000111000000000000000000011
+00100000010000000100001111010010
+01011000000000000000000000000000
+01100000000000010100011100000111
+01110000010001101010011100000000
+01101000000000001100011011100000
+00011111111001100111110000000101
+00100000010000101100000000111001
+00100100010000101100000001011101
+01101000000000001000000000000100
+11000010100010011100000110101111
+00100000010000000100000110101010
+00100000001000000110010111010001
+00100000010000000010110001111010
+00011010011000001010001010101110
+11011010010000000000000001011011
+11011000010000000000000000000100
+00100000011000000000000000000000
+00100000010000000010110001111010
+00011010011000001010010010101110
+11101010010000001000000000000000
+01100000000000001100011101111011
+00100000001000000100010000110101
+11011000111000000000000000000010
+00100000001000000100000110111001
+01110000010001101100011000000010
+11011000111000000000000000000001
+00100000001000000100000110111001
+01101000000000001100011011000101
+11111001001000000111111000000000
+01100000000000001100011011000101
+00100000011000000000000000000000
+01101000000000001100011011000101
+11111001001111111111111000000000
+01100000000000001100011011000101
+00100000011000000000000000000000
+01110000010001101100010100000000
+00100000011000000000000000000000
+01101000000000010100001000001010
+01111001001111111111111000000000
+01100000000000010100001000001010
+01011000000000000000000000000000
+01100000000000010100011010101110
+00100000010000000011111110001101
+00100000001000000100001011001010
+00100000010000000110001111001011
+00100000001000000011001111011101
+01101000000000001100011100011110
+00100100001110100100010010010010
+01101000000000010100011010000010
+11000010100001100100001010110000
+01101000000000100100011011010011
+11000010100000000100000111010111
+11000010100000101100001010110000
+11000010100000011010111010101101
+00100000001000000011001110100111
+00100000001000000011111101110100
+00100000011000000000000000000000
+00100000010000000100001111000000
+00100000001000000110010110011010
+01000100111101001100000000011101
+00100000010000000100000111100111
+01101000000000100100011011010011
+11000010100000000100000111010111
+11000010100000011010111010101101
+01101000000000001100011100011110
+00100100001110100100010010010010
+01101000000000010100001000001000
+11000010100000111100000111110101
+11000010100000000011001110101001
+11000010100000001100000111101111
+11000010100000010100000111110010
+11000010100000011100000111110010
+00100000001000000100001010110000
+01011000000000000000000000000000
+01100000000001000100011010110111
+11100000101000100000000000000000
+01110000010001101011010000000000
+01110000010001101010011100000000
+01110000010000011110001000000000
+01110000010001000010100100000000
+00100000011000000000000000000000
+11000010100000101100000111110010
+11000010100000011100000111110010
+00100000001000000100001010110000
+01101000000000010100011010000010
+11000010100001100100001010110000
+00100000001000000011001110100111
+00100000010000000100000111000001
+01101000000000010100001000001000
+11000010100000000011001110101001
+00100000001000000011001110100111
+00100000010000000100001111010110
+00100000010000000100001001000011
+00100000010000000100001001000110
+00100000010000000100001001010000
+00100000010000000100010001011101
+00100000010000000100010001000011
+00100000010000000100001100110011
+00100000010000000100001110100101
+00100000010000000100001111101011
+00100000010000000100001000001001
+00100000010000000100001000110001
+00100000010000000100001000110100
+00100000010000000100001000110111
+00100000010000000100001000111010
+00100000010000000100001000111101
+00100000001000000100001001000000
+01101000000000001100011100010001
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000001100011100010001
+00100100011110100000000000000000
+00100000001000000100001000001111
+01101000000000001100011100010010
+11000001000000000000000000000000
+11000000000000101100001000010110
+00100000010000000100001000100101
+01110000010001110001001000000101
+01110000010001110001000100000101
+00100000011000000000000000000000
+00100000010000000100001000101100
+01110000010001110001001000000100
+01110000010001110001000100000101
+00100000011000000000000000000000
+01011000000000001000000000000110
+00100000010000000110010000010011
+00100000000000000000001111101000
+01110000010001110001000100000000
+01110000010001110001001000000000
+00100000001000000100000011100000
+01011000000000001010000000000110
+00100000010000000110010000010011
+01011000000000001010000000000101
+00100000001000000110010000010011
+01110000010001110001000100000000
+01101000000000001100011011100000
+11000000000000100100001000100000
+01011000000000000000000100000110
+00100000010000000110010000010011
+01011000000000001010000100000101
+00100000001000000110010000010011
+01110000010001110001000100000000
+01011000000000000000100100000110
+00100000001000000110010000010011
+01110000010001110001000100000101
+01110000010001110001001000000001
+00100000011000000000000000000000
+11011010011000000100011010000000
+11011010010000000100001010011011
+00100000001000000011001101101101
+11011010011000000100011010101100
+11011010010000000100001001100100
+00100000001000000011001101110100
+11011010011000000100011010101110
+11011010010000000100001001100110
+00100000001000000011001101110100
+11011010011000000100011010110000
+11011010010000000100001001101010
+00100000001000000011001101110100
+11011010011000000100011011000100
+11011010010000000100010001111000
+00100000001000000011001101101101
+11011010011000000100011011000110
+11011010010000000100001001011110
+00100000001000000011001101101101
+11011010011000000100011100000100
+11011010010000000100001001001001
+00100000001000000011001101101101
+11011010011000000100011100000111
+11011010010000000100001001001001
+00100000001000000011001101110100
+00100000011000000000000000000000
+01101000000000100100011011010011
+11000100000010111000000000000000
+01110000010001101101111100001010
+01101000000000001100011011110100
+01100000000000001100011100010101
+00100000011000000000000000000000
+11011010011000000100011011011111
+11011010010000000100001001010011
+00100000001000000011001101101101
+01101000000000001100011011110100
+01100000000000001100011100010101
+01011000000000000000000110010000
+01100000000000010100011100010110
+01100000000000010100011100011000
+11011010001000000000000000000000
+01101000000010001100011101111010
+00011000010000001000010000000001
+01100000000010001100011100010100
+01110000010001110001001100000001
+00100000011000000000000000000000
+01101000000000001100011011000101
+11000011100000010000000000000000
+01110000000010101001100100010010
+00100000010000000111110110001111
+11011000111000000000000000000000
+00100000001000000100000110111001
+00100000010000000100001011001010
+00100000001000000011010000001010
+00100000010000000011001111110110
+01101000000000001100011100011110
+00100100001110100100010010010010
+00100000001000000011010000001010
+11000101000100110111111000011101
+00100000001000000100001110000110
+01000100111101010100000000011101
+01110000010001101011010000000000
+00100000010000000100001110000110
+00100000010000000100000111000001
+00100000001000000100001010110000
+01101000000000110100000111010000
+00100000001110100011001111101011
+00100000010000000100001001111110
+01110000000000010110110100010111
+01101000000000001100011001011010
+00100100001110100011001111100001
+01110000000000010110110100000100
+00100000001000000011001111100001
+01101000000000010100011010101000
+01100000000000010100011010101110
+00100000010000000100001001111110
+00100000010000000011010000011000
+00100000001000000111110111110100
+01011000000000000000000011001000
+01100000000000010100011100010110
+01100000000000010100011100011000
+00100000001000000100001010000101
+01011000000000000000001111101000
+01100000000000010100011100010110
+01100000000000010100011100011000
+01101000000000001100011100100000
+11000000000000001100001010001010
+11000000000000010100001010001100
+11000000000000011100001010001110
+00100000011000000000000000000000
+01101000000000001100011011110000
+00100000001000000100001010001111
+01101000000000001100011011110001
+00100000001000000100001010001111
+01101000000000001100011011110010
+01100000000000001000101010100010
+00100000010000000100010010000010
+01101000000000001000101010100010
+01100000000000001100011100010101
+11011010001000000000000000000000
+01110000010001110001001100000001
+00100000001000000111110100011110
+11011010001000000000000000000000
+00100000001000000111110100011001
+11011010001000000000000000000000
+00100000001000000111110100010100
+00100000001000000100000111000001
+01110000010000011110001000000001
+00100000010000000011010000010110
+00100000010000000011010000010010
+01011000000000000000000000000000
+01100000000000010100011001111110
+01100000000000001100011010000000
+00100000001000000011010000001110
+00100000010000000100001101011111
+01101000000000001100011100100000
+01101000000010001100011100000011
+10011000010001100111110000000000
+00100000001000101100001010101011
+01101000000000001100001000010000
+11000000000110011100001001110001
+11000000000110100100001001111001
+00100000001000000100001010110000
+00100000010000000011110101010111
+11000110000100110000000000000000
+01101000000000001100011100011110
+00100100001110100100010010010010
+00100000011000000000000000000000
+01000100111101011100000000011101
+01101000000000010100011010000010
+11000010100001011100001010110111
+01101000000000100100011011010011
+11000011000011000100001010110111
+00011000000010100111111000000000
+01100000000000001100010010100001
+00100000010000000011010000011000
+01101000000000010100011010000111
+01100000000000010100011010101100
+01110000000000010110110100000110
+01011000000000000000000000000000
+01100000000000010100011010110000
+01100000000000010100011010101110
+11011000111000000000000000000111
+00100000010000000100001111001110
+00100000010000000100001111001010
+01101000000000001100000010010010
+00101111111011111111111000000001
+00100000010000001111110111110100
+01101000000000001100000010010010
+00101111111011111111111000000000
+00100000010000001111110111011101
+01101000000000100100011011010011
+11000010100011100100001000101110
+00100000001000000100001010000010
+01000100111101100100000000011101
+01101000000000001100000010010010
+00101111111011111111111000000001
+00100000010000001100001011010100
+01101000000000001100000010010010
+00101111111011111111111000000000
+00100000010000001100001011010111
+01101000000000100100011011010011
+11000010100011100100001000011010
+00100000001000000100010010000010
+01011000000000000000000000000000
+01100000000000010100011010101110
+00100000001000000111110111111010
+01011000000000000000000000000000
+01100000000000010100011010101100
+00100000001000000111110111100010
+01101000000000100100011011010011
+11000100000000111000000000000000
+11011000111000000000000000000111
+00100000010000000100001111010010
+00100000010000000100001011101000
+00100000010000000100001011111011
+01101000000000100100011011010011
+11000010100010011100010000110101
+11000010100010100100001011100100
+00100000011000000000000000000000
+11011000010000000000000001011000
+11011010001000000100011100100000
+11011010010000000000000000000000
+00100000001000000110010111010001
+01101000000000001000000110000101
+11000000000110100100001011101100
+11000000000110011100001011101111
+00100000011000000000000000000000
+01100000000000001100011011000111
+01101000000000110000010001001111
+00100000001000000100001011110001
+01100000000000001100011011000111
+01101000000000110000000001000000
+01100000000000110100011011001000
+01101000000000111100011011000111
+11011000110000000100011100100001
+11011111001000000000000000000011
+11101000110010111000000000000000
+10011000010001100111110000000000
+00100000001000101100001100010000
+00011000110000001000110000010110
+11000010000000000100001011110101
+00100000011000000000000000000000
+11011010001000000100011100100001
+01101000000000001100011100100000
+00011111111000001111111111111111
+00011111111011111111111000011101
+10011010001000001010001000000000
+01101000000000001000000110000101
+11100010001000001000000000000000
+11000000000110100100001100000101
+11000000000110011100001100001100
+00100000011000000000000000000000
+01101000000000110000010001001111
+11100000101000110000000000000000
+11011000110000000100010000011001
+00100000010000000111111010111111
+01101000000000110100010010100000
+11100000101000110000000000000000
+00100000011000000000000000000000
+01101000000000110000000001000000
+11100000101000110000000000000000
+11011000110000000100000110111110
+00100000001000000111111010111111
+00011000110000001000110111111010
+00011000110000100000101000000000
+01101000000010110100011011001000
+00011000010000001000010000000011
+11100000101010110000000000000000
+00100000011000000000000000000000
+11011000010000000000000001011000
+11011010001000000100011100100000
+11011010010000000000000000000000
+00100000010000000110010111011111
+11011010001000000100011100100001
+01101000000000001100011100100000
+01101000000010001100011100000011
+10011000010001100111110000000000
+00100000011000101000000000000000
+00011111111000001111111111111111
+00011111111011111111111000011101
+10011010001000001010001000000000
+11101010001000001000000000000000
+01100000000000001100001000010000
+11000000000110011100001100100111
+11000000000110100100001100101100
+00100000011000000000000000000000
+11101000110000110000000000000000
+01100000000000110100000111010000
+11011000101000000100000110111110
+00100000010000000111111010111111
+00100000001000000110011111010111
+11101000110000110000000000000000
+01100000000000110100000111010000
+11011000101000000100010000011001
+00100000010000000111111010111111
+11101000110000110000000000000000
+01100000000000110100010010100000
+00100000011000000000000000000000
+01101000000000001100011011110101
+11000010100000101100001101001001
+11000010100000110100001101011001
+00100000001000000100001100110111
+00100000010000000100000010000011
+11000000000000110100001100111110
+01110000010001101101100000011110
+01101000000000001100011011011001
+11000001000000001000000000000000
+01110000010001101101100100000001
+00100000011000000000000000000000
+00100000010000000100001101000011
+01101000000000001100011011011001
+11000001000000000000000000000000
+01110000010001101101100100000000
+00100000001000000100001111000000
+01101000000000001100011011011000
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000001100011011011000
+00100100011110100000000000000000
+00100000001000000100001101110000
+01101000000000001100011011101101
+11000001011111111000000000000000
+01101000000010001100011011101101
+00100000010000000110100000011101
+00100000001000001100001101010100
+01101000000000001100011011011001
+11000001000000001000000000000000
+01110000010001101101100100000001
+01101000000000100100011011010011
+11000011100000110000000000000000
+00100000001000000100001101110000
+01101000000000001100011011011001
+11000001000000000000000000000000
+01110000010001101101100100000000
+11011000111000000000000000000110
+00100000001000000100001111010010
+01101000000000001000000000000100
+11000100000000110000000000000000
+01101000000000001100011100100000
+11000000000000001100001101101001
+11000000000000010100001101101100
+00100000011000000000000000000000
+01101000000000001000000000000100
+11000100000000110000000000000000
+01101000000010001100011011101101
+00100000010000000110100000011101
+00100000001000001100001101100110
+01110000010001110010000000000001
+00100000011000000000000000000000
+01101000000000001100011100000011
+01100000000000001100011100100000
+00100000011000000000000000000000
+01101000000010001100011011101101
+00100100001000001100001101110000
+00100000011000000000000000000000
+01101000000010001100011011101101
+00100000010000000110100000011101
+00100000001000001100001101010100
+00100000011000000000000000000000
+01101000000010001100011100100000
+00011000010000001000010000000001
+01101000000000001100011011010010
+10011000010001100111110000000000
+00100100010000010100001111001100
+01100000000010001100011100100000
+01110000010000011011110100000000
+00100000010000000100001101111010
+00100000010000000100001111000000
+00100000001000000100001101111110
+11011000010000000000000000000001
+11011010001000000100011100100000
+11011010010000000000000000000000
+00100000001000000110011000000110
+00100000010000000100001110000001
+00100000010000000100001111000010
+00100000001000000100000111010111
+01101000000000010100011010000010
+11000010100000111100001110010010
+11000010100001001011010000000010
+11000010100000000011001111101001
+00100000001000000100001011001010
+01000100111101101100000000011101
+01011000000000000000000000000000
+01100000000000010100011010110000
+01101000000000010100011010000010
+11000010100001001011010000000010
+01101000000000010100011010000010
+11000010100000000011001111101001
+00100000011000000000000000000000
+01011000000000000000000000000001
+01100000000000110000000001000000
+01110000000000011000010100110011
+00100000001000000100001011011111
+00100000010000000100001111000100
+00100000001000000111111000101111
+01101000000000001100011011101100
+11000001011111111000000000000000
+01101000000010001100011011101100
+00100000010000000110100000011101
+00100000001000001100001110011111
+01101000000000001100011010000101
+01100000000000001100011011011010
+01101000000000001100011011011011
+11000001000000001000000000000000
+01110000010001101101101100000001
+00100000001000000100001111001010
+00100000010000000100001110110101
+01101000000000001100011011011011
+11000001000000000000000000000000
+01110000010001101101101100000000
+00100000010000000111111000101111
+00100000001000000100001111001000
+01101000000000001100011011110101
+11000010100000100100001110010100
+00100000010000000100000010000011
+11000000000000111100001110101111
+01101000000000001100011010000101
+01100000000000001100011011011010
+01101000000000001100011011011011
+11000001000000001000000000000000
+01110000010001101101101100000001
+00100000001000000100001111001010
+00100000010000000100001110110101
+01101000000000001100011011011011
+11000001000000000000000000000000
+01110000010001101101101100000000
+00100000010000000111111000101111
+00100000001000000100001111001000
+11011010011000000100011011011010
+11011010010000000100001110111000
+00100000001000000011001101101101
+11011000111000000000000000000110
+00100000010000000100001111001110
+00100000010000000011001101010111
+00100000001000000100001001101100
+11011000111000000000000000000001
+00100000001000000100001111001110
+11011000111000000000000000000001
+00100000001000000100001111010010
+11011000111000000000000000000000
+00100000001000000100001111001110
+11011000111000000000000000000000
+00100000001000000100001111010010
+11011000111000000000000000000010
+00100000001000000100001111001110
+11011000111000000000000000000010
+00100000001000000100001111010010
+11011000111000000000000000000101
+00100000001000000100001111001110
+11011000111000000000000000000101
+00100000001000000100001111010010
+11011000010000000000000000000001
+00100000011000000000000000000000
+01101000000000100100011011010011
+11111001001000000111111000000000
+01100000000000100100011011010011
+00100000011000000000000000000000
+01101000000000100100011011010011
+11111001001111111111111000000000
+01100000000000100100011011010011
+00100000011000000000000000000000
+01101000000000100100011011010011
+11000100000011010000000000000000
+01101000000000001100011011001110
+00011111111000001111111000000001
+01100000000000001100011011001110
+00011111111001100111110000001010
+00100000011000010000000000000000
+01110000010001101100111000000000
+00100000010000000110100011101011
+00100000010000000110100100001000
+01100000000000010100011100001111
+11011010001000000100011100001001
+00100000010000000110100100110000
+01101000000000001100001000110001
+11000010100000001100010010100000
+11000011000000000100001111101001
+00100000001000000100001111100111
+11011000111000000000000000000100
+00100000001000000100001111001110
+11011000111000000000000000000100
+00100000001000000100001111010010
+01101000000000100100011011010011
+11000100000000100000000000000000
+01101000000000001100011011101111
+01100000000000001100011100010101
+01101000000000001100011011001111
+00011111111000001111111000000001
+01100000000000001100011011001111
+00011111111001100111110000010100
+00100100010000010100001111111001
+11000000000000010100001111111011
+11000000000000100100001111111110
+11000000000000110100001111111011
+11000000000001000100001111111110
+00100000011000000000000000000000
+01110000010001101100111100000001
+00100000001000000100001111111110
+11011010001000000000000000000000
+01110000010001110001001100000010
+00100000001000000111110100010100
+11011010001000000000000000000000
+01110000010001110001001100000010
+00100000001000000111110100011001
+00100000010000000011111110010111
+00100100011101000000000000000000
+11011010001000000000000000000111
+11011010010000000100011010011010
+00100000011000000000000000000000
+01101000000000001100011110001011
+00100000011110100000000000000000
+01101000000010001100011011100111
+00100000010000000110100000011101
+00100000010000001100010000010000
+01101000000000001100011100000100
+00100100011110100000000000000000
+00100000010000000100000010000011
+00100100011110100000000000000000
+00100000001000000010110110000011
+01101000000000001100011011100111
+11000001011111111000000000000000
+01110000010001110000010000001010
+00100000011000000000000000000000
+00100000010000000100010000100011
+01101000000000010100011101111000
+11011000010000001010101001010101
+10011000010001100111110000000000
+00100000001000101100010000101011
+01100000000010010100011101111000
+00100000010000000100010000011100
+00100000001000000100010000110101
+01101000000000110100010010100000
+01100000000000110100011100111000
+00011111111000001111111100000000
+01100000000000110100011101010101
+00011111111000001111111100000000
+01100000000000110100011101110010
+00100000011000000000000000000000
+01011000000000000100011101111000
+11011000010000000100011100100000
+10011000010001100000010000000000
+01101000000000011100011100000000
+10011000010000001111111000000000
+11011000010000000000000000000010
+11011010001000000100011101111000
+00100000001000000110010101100010
+01011000000000000100011101111111
+11011000010000000100011100100000
+10011000010001100000010000000000
+01101000000000011100011100000000
+11011010001000000100011100100000
+00100000010000000110010101100010
+00100000010000000100001100011010
+01101000000000100100011101111011
+00100000010000000010110001111010
+00100000001000000011001000101100
+01011000000000000100011101111111
+11011000010000000100011100100000
+10011000010001100000010000000000
+11011010001000000100011100100000
+01101000000000011100011100000000
+00100000001000000110010100010100
+11011000010000000000000000000001
+11011010001000000100011101111010
+11011010010000000000000001011010
+00100000001000000110010111010001
+11011000010000000000000000000001
+11011010001000000100011101111010
+11011010010000000000000001011010
+00100000001000000110010111011111
+11000110000100110000000000000000
+01101000000000100100011011010011
+11000100000010110000000000000000
+01101000000000001100011100000101
+00011111111000001111111000000001
+00011111111000010111111000000111
+01100000000000001100011100000101
+11000001100000111000000000000000
+01101000000000010100011010000010
+11000010100000000100010001001111
+11000010100001001100010001001111
+00100000011000000000000000000000
+01000100111101110100000000011101
+01101000000000001100011100000110
+00100100011110100000000000000000
+01101000000000100100011011010011
+11000100000001000000000000000000
+01101000000000001100011010100101
+00100000010000000110001111111011
+01100000000000001100011010100110
+00011111111001100111110000010000
+00100000001000010100010001011011
+01110000010001110000011000000000
+00100000011000000000000000000000
+01110000010001110000011000011110
+00100000011000000000000000000000
+11011010011000000100011100000110
+11011010010000000100010001100000
+00100000001000000011001101101101
+01101000000000001100011010100101
+00100000010000000110010000010100
+00011111111001100111110000010000
+00100100011000010000000000000000
+01101000000000100100011011010011
+11000100000001000000000000000000
+11011000111000000000000000001000
+00100000010000000100001111010010
+01110000010000010111001000000000
+01110000010001101100010000011110
+00100000010000000100010010000010
+01101000000000100100011011010011
+11000010100010101100010001110001
+01101000000000001100011100100000
+11000000000000001100010010001001
+11000000000000010100010001110110
+00100000011000000000000000000000
+01101000000000001100011100100000
+11000000000000001100010010001001
+11000000000000010100010010001100
+11000000000000011100010010001111
+00100000011000000000000000000000
+01101000000000001100011011110000
+00100000001000000100001010001111
+01110000010000010111001000100000
+00100000001000000100010010000010
+01101000000000001100011011110000
+11000001011111111000000000000000
+01100000000000001100011100010101
+00100000001000000100001010010110
+01101000000000001100011011110001
+11000001011111111000000000000000
+01100000000000001100011100010101
+00100000001000000100001010010110
+00100000010000000100001010010110
+00100000010000000100010001111010
+00100000010000000100010001111110
+01101000000000001100011011110010
+11000001011111111000000000000000
+01100000000000001100011100010101
+00100000001000000100001010010110
+01101000000000001100011011110000
+01100000000000001100011100010101
+00100000001000000100001010011000
+01101000000000001100011011110001
+01100000000000001100011100010101
+00100000001000000100001010011000
+01101000000000001100011011110010
+01100000000000001100011100010101
+00100000001000000100001010011000
+01000100111101111100000000011101
+01101000000000001100011100011110
+00011111111000001111111111111111
+01100000000000001100011100011110
+01101000000010001100011100100000
+00011000010000001000010000000001
+01101000000000001100011011010010
+10011000010001100111110000000000
+00100100010000010100001111001100
+01100000000010001100011100100000
+01110000010000011011110100000000
+00100000010000000100001101111010
+00100000010000000100001011111011
+00100000001000000100001010100010
+00100000010000000100010010000010
+01011000000000000000000000000000
+01100000000001000000000010100001
+00100000001000000010101100011111
+00100000011101011000000000000000
+01101000000100001000000010000001
+00011111111000010111111011110000
+01100000000100001000000010000001
+00100000010000000110100101001000
+01011000000000000100010011100110
+01100000000000010100000111101011
+01011000000000000100010011101001
+01100000000000010100000111101101
+01011000000000000100010011101111
+01100000000000010100000111110011
+01011000000000000100010011110010
+01100000000000010100000111110101
+01011000000000000011001111010000
+01100000000000010100000111101001
+00100000010000000010110001111010
+01011000000000000100010111000010
+00011010011000001000101011011000
+11100000101000010000000000000000
+01011000000000000100010011101010
+00011010011000001000101011011010
+11100000101000010000000000000000
+01011000000000000100010011101001
+00011010011000001000101011011100
+11100000101000010000000000000000
+01011000000000000100010100001110
+01100000000000010100000111111101
+01011000000000000100010011011010
+01100000000000010100011101011011
+01011000000000000100010011010110
+01100000000000010100011101011111
+01011000000000000100010101100000
+01100000000000010100011100001111
+01000100111110000100000000011110
+00100000010000000100010011100010
+00100000010000000111111000111000
+01110000010000010111001000000010
+01101000000000001100011100101011
+01100000000000001100011010011010
+11000000000000000100010011010101
+01101000000000001100011100101100
+01100000000000001100011010000110
+00100000010000000100010011011011
+00100000010000000111110011010011
+00100000010000000111110011011101
+01110000010001110101011100000001
+01101000000000010100011010000010
+11000011100001100000000000000000
+00100000001000000011010000001010
+01110000010001110101011100000010
+00100000010000000100010011011011
+11011010001000000000000000000000
+00100000010000000111110100011110
+00100000001000000010111011100100
+00100000001000000100010011011011
+01000100111110001100000000011110
+01101000000000001100011100101001
+11000000111111111100010011100000
+01101000000010001100011100000110
+00100000001000000110100000001110
+01100000000000001100011100000110
+00100000001000000100010011011110
+00100000010000000010110010011101
+01101000000000010100011101010011
+01100000000000010100011101010101
+00100000001000000100010100010101
+00100000010000000110100000110101
+00100000010000000100010011101001
+00100000001000000011010000001010
+00100000001000000110100101101100
+01101000000000001100011101100101
+00100000011110100000000000000000
+00100000001000000010110110000011
+00100000011000000000000000000000
+00100000001000000110100101111000
+00100000010000000100010101000100
+00100000010000000100010100000011
+00100000001000000100010011101110
+00011010011000100111111000000000
+11000000000101101011010000110001
+11000000000010000011010000011010
+11000000000111001100010011111011
+11000000000111100100010011111111
+11000000000111010100010011111001
+00100000011000000000000000000000
+01110000010001110110010100000001
+00100000011000000000000000000000
+01110000010001110110010100000001
+01110000010001110110001100000001
+01110000010001110110010000000001
+00100000011000000000000000000000
+01110000010001110110010100000001
+01110000010001110110001100000001
+01110000010001110110010000000001
+00100000011000000000000000000000
+01101000000000001100011101100011
+11000001000000000000000000000000
+01101000000000001100011101100010
+11000001000000001000000000000000
+01110000010001110110001000000001
+11011010001000000000000000000000
+00100000001000000111110100011001
+11011010001000000000000000000000
+00100000010000000111110100011001
+00100000010000000100010011011011
+00100000001000000011010000001010
+00100000010000000011001101111011
+00100000001000000100010100010000
+01101000000000001100011100101101
+00100000011110100000000000000000
+11011010011000000100011101010101
+11011010010000000100010100001010
+00100000001000000011001101110100
+00100000010000000100010100011010
+01100000000010010100011100011010
+00100000010000000100010100011111
+01100000000010010100011100011100
+00100000011000000000000000000000
+01101000000000010100011100011010
+01100000000000010100011100011110
+00100000010000000100010101000000
+00100000010000000100010100100101
+01100000000000001100011100100100
+01101000000000010100011100011100
+01100000000000010100011100011110
+00100000010000000100010101000010
+00100000010000000100010100100101
+01100000000000001100011100100101
+00100000011000000000000000000000
+01101000000000010100011100100000
+00011111111000100010001000000000
+01101000000000010100011100011110
+00100000010000000100010100101110
+01101000000000001100011100011001
+00100100001110100100010100110111
+00100100011000010000000000000000
+01101000000010010100011100011110
+00100000011000000000000000000000
+10011000010001100111111000000000
+00100000001000010100010100110100
+00011111111001100111111000000000
+01110000010001110001100000000001
+10011010001001100111110000000000
+00100000011000000000000000000000
+01110000010001110001100000000000
+10011010001001100111110000000000
+00100000011000000000000000000000
+00100100001000010100010100111110
+01101000000000001100011100011000
+00100100001110100100010100111100
+01011000000000000000000000000001
+00100000011000000000000000000000
+01011000000000000000000000000010
+00100000011000000000000000000000
+01011000000000000000000000000000
+00100000011000000000000000000000
+01110000010000100010111000110011
+00100000001000000110100011101011
+01110000010000100010111000110100
+00100000001000000110100011101011
+01101000000000001100011100101010
+11000001100000001000000000000000
+01000100111110010100000000011110
+01110000010001110001100100000001
+00100000010000000100010100011010
+01101000000000010100011100100100
+01101000000010010100011100100010
+10011000010001100111110000000000
+00100000011000101000000000000000
+01100000000000010100011100100010
+00100000010000000100010101010000
+00100000001000000100010101010100
+01101000000000001100011100100100
+00100000001110100100010101011010
+00011111111000001111111111111111
+00100000001000000100010101010111
+01101000000000001100011100100101
+00100000001110100100010101011101
+00011111111000001111111000000001
+00011111111000100000111000000000
+11011010001000000000000000000001
+00100000001000000100010101100000
+11011000111000000000000000000000
+11011010001000000000000000000000
+00100000001000000100010101100000
+11011000111000000000000000000010
+11011010001000000000000000000000
+00100000001000000100010101100000
+00011010001000100111111000000000
+01100000000000001100011101100001
+01101000000000001100011101100011
+11000000000000000010111011100100
+01101000000000010100011101010011
+01100000000000010100011101010101
+01101000000000001100011101100001
+00100000001110100100010110000000
+01000100111110011100000000011110
+11011010001000000000000000000000
+00100000010000000111110100010100
+00011000111000100111111000000000
+11000000000000100100010110100011
+11000000000000101100010110100101
+11000000000000110100010110100111
+00100000010000000100010110001011
+11000000000000000100010101110100
+11000000000000010100010101111010
+11000000000000011100010101110100
+00100000011000000000000000000000
+00011000111000100111111000000000
+11000000000000000100010110001111
+11000000000000001100010110010001
+11000000000000010100010110010011
+11000000000000011100010110010101
+00100000011000000000000000000000
+00011000111000100111111000000000
+11000000000000000100010110010111
+11000000000000001100010110011010
+11000000000000010100010110011101
+11000000000000011100010110100000
+00100000011000000000000000000000
+01000100111110100100000000011110
+11011010001000000000000000000000
+00100000010000000111110100011001
+00011000111000100111111000000000
+11000000000000100100010110111100
+11000000000000101100010110111100
+00100000010000000100010110001011
+11000000000000000100010110101001
+11000000000000010100010110101111
+11000000000000011100010110101001
+00100000011000000000000000000000
+01101000000000001100011100101000
+01101000000010001100011100100111
+10011000010000011111111000000000
+00100000011000000000000000000000
+01110000010001110011010000000001
+00100000001000000100010110111110
+01110000010001110011010000000010
+00100000001000000100010110111110
+01110000010001110011011000000001
+00100000001000000100010110111110
+01110000010001110011011000000010
+00100000001000000100010110111110
+01110000010001110011010000000001
+01110000010001110011011000000001
+00100000001000000100010110111110
+01110000010001110011010000000010
+01110000010001110011011000000010
+00100000001000000100010110111110
+01110000010001110011010000000010
+01110000010001110011011000000001
+00100000001000000100010110111110
+01110000010001110011010000000001
+01110000010001110011011000000010
+00100000001000000100010110111110
+01110000010001110011100000000001
+00100000001000000100010110111110
+01110000010001110011100000000010
+00100000001000000100010110111110
+01110000010001110100000100000001
+00100000001000000100010111000000
+00011000111000100111111000000000
+11000000000000000100010110110101
+11000000000000001100010110110101
+11000000000000010100010110110111
+11000000000000011100010110110111
+00100000011000000000000000000000
+00011000111000100111111000000000
+11000000000000000100010110111001
+11000000000000001100010110111001
+11000000000000010100010110111001
+11000000000000011100010110111001
+00100000011000000000000000000000
+01110000010001110011010000000000
+00100000001000000100010110111110
+01110000010001110011011000000000
+00100000001000000100010110111110
+01110000010001110011010000000000
+01110000010001110011011000000000
+00100000001000000100010110111110
+01110000010001110011100000000000
+00100000001000000100010110111110
+11011010001000000100011100101110
+00100000001000000111111000111101
+11011010001000000100011100111011
+00100000001000000111111000111101
+01101000000000001100011101100100
+11000000000000001100010111001100
+11011010001000000100011101000100
+00100000010000000111111001010100
+00100100001101000100010111010001
+11011000110000000100011101000100
+11101000110000001000000000000000
+00011111111000100010001000000000
+11011010010000000100011101000101
+00100000011000000000000000000000
+01110000010001110110010000000000
+01111000001101000111110000000000
+11011010001000000000000000000001
+11011010010000000100011101100110
+00100000011000000000000000000000
+01101000000000001100011101000111
+11000000000000100100010111010101
+11000000000000101100010111010101
+00100000011000000000000000000000
+01101000000000001100011101001010
+00100100001110100100010111011100
+01101000000000001100011101001100
+00100100001110100100010111011100
+01101000000000001100011101001110
+00100100001110100100010111011100
+00100000011000000000000000000000
+01111000001101000111110000000000
+00100000001000000100010111000111
+00100000011101011000000000000000
+01101000000100001000000010000001
+00011111111000010111111011111100
+01100000000100001000000010000001
+01011000000000000100011010110100
+01100000000000010100000111101011
+01011000000000000100011010110011
+01100000000000010100000111101101
+01011000000000000011010000001010
+01100000000000010100000111110111
+01011000000000000100011010110001
+01100000000000010100000111110011
+01011000000000000100011000010010
+01100000000000010100000111110101
+01011000000000000100011000001100
+01100000000000010100000111101001
+01011000000000000100011101101010
+01100000000000010100000111111001
+01011000000000000100011010000110
+01100000000000010100000111111101
+01011000000000000100011100101001
+01100000000000010100011011100111
+01011000000000000100100000000110
+01100000000000010100011011100010
+01011000000000000100100000000111
+01100000000000010100011011100100
+00100000010000000101011110100011
+00100000010000000100011111011010
+00100000010000000100011110001000
+00100000010000000100011101101101
+00100000010000000110100101001000
+00100000010000000100011101111010
+00100000010000000111111000111000
+00100000010000000111110100001000
+00100000010000000100011110010011
+00100000010000000100011111000111
+01000100111110101100000000011110
+00100000010000000100011001001111
+01101000000000001100011011011101
+11000000000000000100011000001001
+01101000000000001100011011011110
+01100000000000001100011010000110
+00100000001000000100100000001110
+01110000010001101000011011111111
+01110000010001101101111100000001
+00100000001000000100011011011001
+01101000000000001100011011011111
+11000000000000010011001111010000
+00100000010000000101001001111110
+01101000000000001100001001010110
+00100100001110100011001111010000
+00100000001000000011001111010010
+00011010011000100111111000000000
+11000000000000001100011000100110
+11000000000000010100011000101001
+11000000000000100100011000110001
+11000000000000101100011000110011
+11000000000000110100011000110101
+11000000000000111100011000111000
+11000000000010010100011000111100
+11000000000010011100011001000100
+11000000000100111100011001000101
+11000000000101110100011001001000
+11000000000111101100011001001001
+11000000000010100100011001011000
+11000000000010101100011001011100
+11000000000111111100011001011111
+11000000001000000100011001100101
+11000000000010000100011001101011
+11000000000101100100011001101100
+11000000000101101100011001110111
+00100000011000000000000000000000
+01110000010001101010110100000000
+01110000010001101010110000000000
+00100000011000000000000000000000
+00100000010000000100011000101011
+00100000001000000100011000110001
+01110000010000011110001000000000
+01110000010001101000000000000000
+01110000010000100000010100000000
+01110000010001101010110000000000
+01110000010001101010110100000000
+00100000001000000111111000111000
+00100000010000000011001110101001
+00100000001000000100011011000010
+00100000010000000100011010110110
+00100000001000000011010000001000
+01011000000000000000000000000010
+01100000000000001100011010000000
+00100000011000000000000000000000
+01110000010001101010110000000000
+01011000000000000000000000000001
+01100000000000001100011010101101
+00100000011000000000000000000000
+01101000000000001100000111100010
+11000001000000001000000000000000
+01110000010000011110001000000001
+00100000010000000011010000010110
+00100000010000000011010000010100
+00100000010000000100011010110110
+00100000010000000011010000001000
+00100000001000000011010000001110
+00100000001000000100011000110001
+01011000000000000000000000000101
+01100000000000001100011010101100
+00100000011000000000000000000000
+00100000001000000011001111001101
+11011010010000000000000000000000
+01101000000000001100001000010111
+00011111111011111000010000100010
+01101000000000010100001000010101
+00011111111000100010001000000000
+00100000001000000110011000000110
+11011010010000000000000000000000
+01101000000000001100011010011010
+11000100000000001000000000000000
+01101000000000001100001000010111
+00100000011110100000000000000000
+00011111111011111000010000100010
+01101000000000010100001000010101
+00011111111000100010001000000000
+00100000001000000110010111011111
+00100000010000000100011010110110
+01011000000000000000000000000000
+01100000000000010100011010110111
+00100000001000000011010000001000
+00100000010000000111111000111000
+01110000010001101011000000000000
+00100000001000000100011011011001
+00100000010000000111111000111000
+01110000010001101011000000000001
+01101000000001000100011011000001
+01100000000001000100010010010110
+00100000010000000011010000010110
+00100000001000000101101010111111
+01101000000000010100010100001001
+11000001000000000000000000000000
+01101000000001000100011011001001
+00100000011110100000000000000000
+01100000000001000100010010010110
+00100000001000000101101010111111
+00100000001000000100100000011111
+01101000000000001100011011011101
+11000001000000000000000000000000
+01101000000000001100011011011111
+11000001100000001000000000000000
+00100000010000000100011001110010
+00100000001000000011010000000110
+01110000010010001101111100000001
+11011111001000000000000000001011
+11011000101000000100100011100000
+11011000110000000100100011001001
+00100000001000000111111100000001
+01101000000000001100011011011101
+11000001000000000000000000000000
+01101000000000001100011011011111
+11000000000000001100011001111100
+00100000001000000100100000011011
+01101000000000001100100011011111
+11000001100000001000000000000000
+01110000010010001101111100000000
+01101000000000010100011010000010
+11000010100000000011010000001000
+11000010100001001011010000001000
+11011111001000000000000000001011
+11011000110000000100100011100000
+11011000101000000100100011001001
+00100000001000000111111100000001
+00100000010000000100011010001100
+00100000010000000100011010010011
+00100000010000000100011010011110
+00100000010000000100011010100110
+00100000010000000100011010101001
+00100000001000000100011010101100
+11011010011000000100011011011011
+11011010010000000100011010001111
+00100000001000000011001101110100
+01110000010001101101111100000010
+00100000010000000011010000001000
+00100000010000000100011011110100
+00100000001000000100100000001011
+11011010011000000100100011101100
+11011010010000000100011010010110
+00100000001000000011001101101101
+01101000000000010100011010000010
+11000010100001001100100000001011
+11000010100000000100100000001011
+01101000000000001100100011001001
+11000000000000001100100000001011
+11000000000000100100100000001011
+11000000000000101100100000001011
+00100000001000000011010000001010
+11011010011000000100011010101100
+11011010010000000100011010100001
+00100000001000000011001101101101
+01101000000000001000001001111111
+01111001001000000111111000000000
+01111001001000000111111000000111
+01100000000000001000001001111111
+00100000011000000000000000000000
+11011010011000000100011010000000
+11011010010000000100011000111100
+00100000001000000011001101101101
+11011010011000000100011010101101
+11011010010000000011001111101001
+00100000001000000011001101101101
+01101000000000001100011011011111
+11000001100000001000000000000000
+11011010011000000100011010110111
+11011010010000000100011011000010
+00100000001000000011001101110100
+00100000010000000100011100111010
+00100000001000000110100101111000
+00100000001000000110100101101100
+00100000010000000110100000110101
+00100000001000000100011010110011
+01101000000000001100011010011010
+11000010100000001100011010111110
+11000010100000000100011010111010
+00100000011000000000000000000000
+01101000000000010100011011010111
+01100000000000010100011011011001
+01100000000000010100011011011011
+00100000001000000011001111111000
+01101000000000010100011011010011
+01100000000000010100011011011001
+01100000000000010100011011011011
+00100000001000000011001111110000
+01101000000000001100011011011111
+11000001100000001000000000000000
+01101000000000001100011010011010
+11000010100000001100011011001000
+11000010100000000100011011001100
+00100000011000000000000000000000
+01101000000000010100011011010001
+01100000000000010100011011011001
+01100000000000010100011011011011
+00100000001000000011001111101011
+01101000000000010100011010000010
+11000011100001001000000000000000
+01101000000000010100011011010101
+01100000000000010100011011011001
+01100000000000010100011011011011
+01101000000000010100011010110011
+00100000010000000100011011110000
+00100000010000000011010000000100
+01101000000000100100011010111101
+01100000000000100100100011001100
+01101000000000010100011010000010
+11000011100001011000000000000000
+00100000001000000011001111111010
+01101000000000001100011011011111
+11000001100000001000000000000000
+01101000000000001100011010011010
+11000010100000001100011011011111
+11000010100000000100011011100100
+00100000011000000000000000000000
+00100000010000000100011011111000
+00100000001110100100011011000010
+00100000010000000011010000000110
+00100000010000000011001111110000
+00100000001000000011001111100001
+01101000000000010100011010110111
+01101000000010010100011010110101
+01100000000010010100011010110111
+00100100011110100000000000000000
+01101000000000010100011010110001
+00100000010000000100011011110000
+00100000010000000011010000000100
+01101000000000100100011010111001
+01100000000000100100100011001100
+01101000000000010100011010000010
+11000011100001011000000000000000
+00100000001000000011001111111010
+01100000000000010100000101010100
+00011111111000001111111111111100
+01100000000000010100010010000010
+00100000011000000000000000000000
+01101000000000010100011010000010
+11000010100001001011010000000010
+11000010100000000011001111101001
+00100000001000000100011010110110
+01101000000000001100001000010111
+00011111111000100111001000000000
+01101000000000010100001000010101
+00011111111000100010001000000000
+11101010001000010000000000000000
+11000000000000000100011100000001
+00011010001000001010001000100010
+11000010000000000100011011111100
+00100000001000000111111111110001
+11101000110000110000000000000000
+01100000000000110100000111010000
+00011000110000001000110000001010
+11011000101000000100000110111110
+00100000010000000111111010111111
+00100000010000000110011111010111
+00100000001000000111111111101111
+00100000010000000111111111101001
+01101000000000010100011010000010
+11000010100000000100011100001101
+11000010100001001100011100010000
+00100000011000000000000000000000
+01101000000000001100001001010011
+11000001100111111000000000000000
+00100000001000000111111111100111
+01101000000000001100011010110000
+00100000011110100000000000000000
+00100000001000000111111111100111
+00100000010000000111111111101001
+01101000000000010100011010000010
+11000011100000000000000000000000
+11000011100001001000000000000000
+00100000001000000111111111100111
+01101000000000001100011010011010
+11000010100000001100011100011100
+11000010100000000100011100011111
+00100000011000000000000000000000
+01101000000000001100000010010011
+11000001100000011000000000000000
+00100000001000000100011011011001
+00100000001000000100011011011001
+01111000010101100111110000000000
+01101000000000010100011011011001
+01100000000000010100011011011011
+00100000010000000100011100010011
+00100000001101000100011100011000
+00100000010000000100011100001000
+00100100011101000000000000000000
+01111000001101100111110000000000
+00100000011000000000000000000000
+00100000010000000100011100100000
+00100100011101100000000000000000
+00011010001000100111111000000000
+00100000001110100100011100110000
+00100000010000000011010000000110
+11011010011000000100011011110001
+00100000001000000100011100110010
+00100000010000000011010000001000
+11011010011000000100011100011001
+11011111111000000000000000000101
+10011000111011111111111000000000
+10011010011000001010011000000000
+11101010011000001000000000000000
+00100000011110100000000000000000
+00100000010000000100011101100010
+00011010011000001010011000000001
+00100000001000000100011100110101
+01101000000000010100011010000010
+11000010100001001100011100111110
+11000010100000000100011101001110
+00100000011000000000000000000000
+00100000010000000101100010010010
+00100100011110100000000000000000
+00100000010000000100011101100101
+00100100011101000000000000000000
+00011111111000001111111111111111
+00011111111011111111111000000101
+11011000010000000100011101000001
+10011000010000001000110000000000
+11101000110000001000000000000000
+00011111111000100010001000000000
+11101000110010010000000000000000
+00100000010000000111111010100101
+00100000010000000101101001100100
+00011010001000100111001000000000
+00100000010000000111111010011111
+00100000001000000111111100000001
+00100000010000000101001001110001
+00100100011110100000000000000000
+00100000010000000100011101100101
+00100100011101000000000000000000
+00011111111000001111111111111111
+00011111111011111111111000000101
+11011000010000000100011110100000
+10011000010000001000110000000000
+11101000110000101000000000000000
+01100000000000101100011110011011
+01101000000000001100011110011011
+00011111111000100010001000000000
+00100000010000000100110101100011
+01101000000000010100001001001110
+11100000101000010000000000000000
+01011000000000000000000010100001
+11100000101000001000000000000000
+01101000000000100100011110011100
+11100000101001001000000000000000
+00100000011000000000000000000000
+01100000000000001000101010011010
+11011010001000000000101010011010
+00100000001000000111111000111101
+11011010001000000000101010011010
+00100000010000000111111001010100
+00100100011101000000000000000000
+01101000000000001000101010011010
+00100000011000000000000000000000
+01101000000000010000010001111000
+11000000000011000100011001011111
+00100000011000000000000000000000
+01011000000000000000000000000010
+01100000000000001100100011101011
+01011000001000000000000000001000
+01100000000000100100011011000001
+01011001001011000000000000000101
+11100000101000100000000000000000
+01110000010001001010011000010111
+01011000000000000000000000011011
+01100000000000010100010011111010
+00100000010000000101100000010000
+00100000010000000101100000101100
+00100000010000000101100000111001
+00100000001000000101100000011000
+11011111001000000000000000101000
+11011000101000000100011101000001
+11011000110000001001010010011111
+00100000010000000111111011110100
+11011111001000000000000000101000
+11011000101000000100011110100000
+11011000110000001001010011000111
+00100000001000000111111011110100
+11011111001000000000000101111110
+11011000110000001001000100111010
+00100000001000000111111011110100
+11011111001000000000000111100111
+11011000110000001001001010111000
+00100000001000000111111011110100
+00100000010000000100011110101110
+00100100011101000000000000000000
+01101000000000001100011010011111
+00100000010000000100011110010000
+01101000000000001100011010100000
+00100000010000000100011110010000
+01101000000000001100011010100001
+00100000001000000100011110010000
+00100000011110100000000000000000
+00011111111000011000010010000000
+00100000001000000110011111111001
+00100000010000000100011110101110
+00100100011101000000000000000000
+00100000010000000100011110010111
+00100000001000000100011110110100
+11011010001000000000000000000000
+01101000000000001100011010011111
+00100000010000000100011110101001
+01111101001110100010001000000000
+01101000000000001100011010100000
+00100000010000000100011110101001
+01111101001110100010001000000001
+01101000000000001100011010100001
+00100000010000000100011110101001
+01111101001110100010001000000010
+00011010001000100111111000000000
+01100000000000001100011010101001
+01101000000000001100011010011110
+10011010001011111111111000000000
+01101000000010010100011010011100
+10011000010000001111111000000000
+01100000000000010100011010101010
+00100000011000000000000000000000
+00100000011110100000000000000000
+00011111111000011000010010000000
+00100000010000000110100000011101
+00100100001000001111111111110001
+00100000001000000111111111101111
+00100000010000000111111111101001
+01101000000000001100011010101000
+00100100011110100000000000000000
+01101000000000001100011010011011
+00100000011110100000000000000000
+00100000001000000111111111100111
+00100000010000000110011001101010
+01101000000000010100011010101010
+11011010001000000000101011000010
+01101000000010001100011010011110
+00100000010000000110011010110011
+00100000010000000110011001101101
+01101000000000001000101011000010
+00011111111000100111001000000000
+01100000000000001100001110101111
+00100000010000000111111011110100
+01101000000000001000101011000010
+00011111111000100111001000000000
+01100000000000001100010100010101
+00100000010000000111111011110100
+11101000110000001000000000000000
+01100000000000001100011011100110
+11101000110000001000000000000000
+01100000000000001100011011011101
+00100000011000000000000000000000
+01101000000000001100011010011010
+11000100000000001000000000000000
+11011000010000000000000000000011
+01101000000000010100011010100100
+00011111111000100010010000000000
+11011010001000000100011010100110
+00100000010000000110010111011111
+01101000000010010100011010100110
+01011000000000000001101100111010
+10011000010001100111110000000000
+00100100011000101000000000000000
+01101000000000001100011010101000
+00100000011110100000000000000000
+00011111111000100000010000000000
+01101000000000010100011010100100
+00011111111000001010010000000011
+11011010001000000000101011000010
+00100000010000000110010111011111
+00100000001000000100011111101000
+01101000000000010100011010100010
+00100000011110100000000000000000
+00100000010000000110011001101010
+11011000010000000000000000000001
+11011010001000000100011010101000
+00100000010000000110011010110011
+01101000000000001100011010101000
+00100000011110100000000000000000
+01101000000000010100011010100010
+00011111111000001111111000000001
+11011010001000000000101011000010
+01101000000010001100011010101000
+00100000010000000110011010110011
+00100000010000000110011001101101
+00100000010000000100011110111010
+11101000110000010000000000000000
+00100000011110100000000000000000
+00011111111000100000101000000000
+11101000110010001000000000000000
+00011000010000100111001000000000
+00100000010000000111111100000001
+00100000001000000100011111101001
+01101000000000001100011010011010
+11000100000000001000000000000000
+01101000000000010100011010101110
+00011111111000100010010000000000
+11011000010000000000000000000100
+11011010001000000000101011000010
+00100000010000000110010111011111
+01101000000000001000101011000010
+11000000100000001100011111111001
+01011000000000000000000000000001
+01100000000000001000101011000010
+00011000000000000111001000000011
+00100000010000000110001100001101
+01101000000000010100011010101110
+00011111111000100010010000000000
+11011000010000000000000000000100
+11011010001000000000101011000010
+00100000010000000110011000000110
+01101000000000011000101011000011
+01100000000000011100000010100000
+01100000000000011100010010100000
+00100000011000000000000000000000
+00100000001000000100011011011001
+11011010001000000000000000000000
+11011010011000000100100011010100
+00100000010000000111110100100100
+00100000010000000100011011110100
+01101000000000001100100011101011
+01100000000000001100100011101100
+00100000011000000000000000000000
+01011000000000000000000000000000
+00100000010000000100100000010110
+01110000010001100111100100000001
+00100000010000000111110011010011
+00100000010000000111110011011101
+01101000000000010100011010000010
+11000011100001100000000000000000
+00100000001000000011010000001010
+01101000000010010100001000111111
+11100000010000001000000000000000
+11101000101000001000000000000000
+01100000000000001100011010000101
+00100000011000000000000000000000
+01101000000000010100001000111111
+11101111111000001000000000000000
+11000001100000000000000000000000
+00100000001000000011010000001010
+01101000000010010100001000111111
+11101000010000001000000000000000
+11000000000000001100100000101010
+01011000000000000000000000000001
+01101000000010010100001000111111
+11100000010000001000000000000000
+00011000010000001000110000000010
+11101000110000001000000000000000
+11100000101000001000000000000000
+11101000110000010000000000000000
+00100000001000000111111110011100
+01011000000000000000000000000010
+00100000010000000100100000010110
+00011000010000001000110000000101
+11101000110000010000000000000000
+00100000001110100011010000001010
+00100000001000000111111110011100
+01100000000000110000000100000001
+01101000000000001000000100000001
+01100000000000001000000100001100
+11101000110000001000000000000000
+01100000000000001000000100001011
+11101000110000001000000000000000
+01100000000000001000000100001010
+11101000110000001000000000000000
+01100000000000001000000100001001
+11101000110000001000000000000000
+01100000000000001000000100001000
+11101000110000001000000000000000
+01100000000000001000000100000111
+01101000000000110000000100000111
+00100000011000000000000000000000
+00100000010000000110100010100010
+01101000000000001100001000100011
+01100000000000001100010010100000
+01101000000000001100001000100101
+11100000101000001000000000000000
+01101000000000001100001000100111
+11100000101000001000000000000000
+01101000000000011100010010100000
+01100000000000011100000010100000
+00100000011000000000000000000000
+01101000000000010100001000000011
+10011010010000001111111000000000
+00011111111100001111111000000000
+01100000000000010000000111110111
+00011000010000100010010000000000
+00100000010000000100100010011011
+01011000000000000000000010100000
+00100000010000000100100010001101
+01101000000000001000000111110111
+00100000010000000100100010001101
+11000101000101000100100001010110
+01101000000000001000000111111000
+00100000010000000100100010001101
+00100000010000000100100010100001
+00100000010000000100100010011011
+01011000000000000000000010100001
+00100000010000000100100010001101
+00100000010000000100100001111111
+11100010001000001000000000000000
+00011010001000001010001000000001
+00011010010000001010010111111111
+00100100001000101100100001011010
+00100000001000000100100010100001
+00011010010100001111111000000000
+01100000000000010000000111110111
+00011000010000100010010000000000
+00100000010000000100100010011011
+01011000000000000000000010100000
+00100000010000000100100010001101
+01101000000000001000000111110111
+00100000010000000100100010001101
+11000101000101000100100001101011
+01101000000000001000000111111000
+00100000010000000100100010001101
+11101010001000001000000000000000
+00100000010000000100100010001101
+00011010001000001010001000000001
+00011010010000001010010111111111
+00100100001000101100100001101011
+00100000001000000100100010100001
+11011111001000000000000000001010
+00100000010000000100100010111110
+00100000010000000100100010100110
+00100000010000000100100011010010
+00100000010000000100100011000111
+00100000001110100100100010101001
+11000010000000000100100001110101
+00100000001000000100100010101001
+00100000010000000100100010101001
+00100000010000000100100010101111
+00100000010000000100100011010010
+00100000010000000100100010100110
+00100000010000000100100011010010
+00100000001000000100100010101001
+11011111001000000000000000001000
+11011010011000000000000000000000
+00100000010000000100100010111110
+00100000010000000100100010100110
+00100000010000000100100011010010
+00011010011000111010011000000000
+00100000010000000100100011000111
+10011010011000001010011000000000
+00100000010000000100100011010010
+00100000010000000100100010101001
+11000010000000000100100010000010
+00100000010000000100100001111001
+00011010011000100111111000000000
+00100000011000000000000000000000
+11011111001000000000000000001000
+00011111111000100010011000000000
+00100000010000000100100010101001
+00101010011011111111111000000111
+00100000010000001100100010101100
+00100100010000001100100010101111
+00011010011000111010011000000000
+00100000010000000100100011010010
+00100000010000000100100010100110
+00100000010000000100100011010010
+00100000010000000100100010101001
+00100000010000000100100011010010
+11000010000000000100100010010000
+00100000001000000100100001110001
+00100000010000000100100010101100
+00100000010000000100100010100110
+00100000010000000100100011010010
+00100000010000000100100010101111
+00100000010000000100100011010010
+00100000001000000100100010101001
+00100000010000000100100010101111
+00100000010000000100100010100110
+00100000010000000100100011010010
+00100000010000000100100010101100
+00100000001000000100100011010010
+01111000001101000111110000000000
+01101000000000001100111111111110
+00100000001000000100100010110010
+01111000010101000111110000000000
+01101000000000001100111111111110
+00100000001000000100100010110010
+01111000001101000111110000000000
+01101000000000001100111111111111
+00100000001000000100100010110010
+01111000010101000111110000000000
+01101000000000001100111111111111
+00100000001000000100100010110010
+00011111111000010000111000000111
+00011111111010010111111000000000
+11011000010000001000000001110000
+10011000010000001000010000000000
+11101000010000001000000000000000
+11111001001000000111111000000000
+11100000010000001000000000000000
+00011000010000001000010000000100
+11101000010000001000000000000000
+11111001001101000111111000000000
+11100000010000001000000000000000
+00100000011000000000000000000000
+01101000000000001100111111111111
+00011111111000010000111000000111
+00011111111010010111111000000000
+11011000010000001000000001110000
+10011000010000001000010000000000
+11101000010000001000000000000000
+11111001001111111111111000000000
+11100000010000001000000000000000
+00100000011000000000000000000000
+00100000000000000000000000000100
+01101000000000001100111111111111
+00011111111000010000111000000111
+00011111111010010111111000000000
+11011000010000001000000100011100
+10011000010000001000010000000000
+01011000000000000000000000000000
+11101000010010001000000000000000
+10101000010011111111111111111111
+01111001001000001111111000000000
+00100000011000000000000000000000
+00100000011000000000000000000000
+01000100111110110100000000011110
+01101000000100001000101000100110
+00101111111011111111111000000111
+00100000010000001100100011101010
+00100000010000000100100100101110
+01101000000100001000101000100110
+01100000000000001000101100100010
+01101000000100001000101000100111
+01100000000000001000101100100011
+01100000000100001000101000100111
+00011111111001000111111000000000
+01101000000010001000110100110111
+10011000010000010111111000000000
+01100000000000001000110100110111
+01110000100010100010011011100000
+01101000000000001000101100100011
+00101111111000000000001000000001
+00100000010000001100100101000001
+01101000000000001000101100100010
+00101111111000000000001000000001
+00100000010000001100100101001010
+00100000010000000100101101100001
+00100000001000000100100100000011
+01000100111110111100000000011110
+00100000010000000100100100011001
+01110000100010100000000000000000
+00100000000000000010011100010000
+01110000100010100001000011000000
+01101000000100010000000001010000
+01111001001111111111111000001010
+01100000000100010000000001010000
+01110000100010100000000000111100
+01110000100010100010011011111111
+01110000100010100010011111111111
+01110000100010100000010000000000
+01110000000011000110101100000010
+01011000000000000000110110011101
+11011000101000000000110001101110
+10011000101001100111001000000000
+00100000001000000111111011010100
+01101000000010001000110001101100
+00100000001000000110011111111011
+01101000000000001000110101000101
+00100000011110100000000000000000
+01101000000010001000110001101100
+00100000010000000110100000011101
+00100000001000001100100011101010
+00100000011000000000000000000000
+11011000111000000000000000000000
+00100000010000000111111100010110
+00100100011110100000000000000000
+01101000000000001000110101000110
+00100100011110100000000000000000
+01101000000000001000110101000101
+00100100010110100100101110110111
+00100000011000000000000000000000
+11011000101000000000101101101000
+00111000000000010001001000010010
+00111000000001001000000000000000
+00111000000010000000000000000000
+00111000000011010000000000000000
+11100000101001001000000000000000
+00111000000000100010010000010010
+00111000000001001000011000000100
+00111000000010000001000000000000
+00111000000011000000000000001000
+11100000101001001000000000000000
+00111000000000000000000000000001
+11100000101000001000000000000000
+00100000011000000000000000000000
+01110000000011000110101100000010
+01011000000000000000000000000000
+01100000000000001000101101100111
+01100000000000010000110001100101
+00011111111000001111111000000001
+01100000000000010000110001100111
+00011111111000001111111000000001
+01100000000000010000110001101001
+01011000000000001000111111111010
+01100000000000010000101101111100
+01011000000000001001000000111010
+01100000000000010000101101111110
+11011000101000000000101110000000
+11011000110000001001000011111110
+00100000010000000111111010110011
+01101000000000001000110001101101
+00100100010110100100100100101011
+00100000001000000100100100001011
+01100000000000001000101110100010
+01100000000000001000101110111011
+00100000011000000000000000000000
+01101000000100001000101000100110
+11000010100000110100100100110001
+00100000011000000000000000000000
+00100000010000000100100100110110
+00100000010000000111111100010101
+01011000000000000000001010000000
+11011000111000000000000000000000
+00100000001000000111111100001000
+01101000000000001000110100110110
+11000000100000010100100100111011
+01110000000011010100011000000000
+01110000000011010100011100000000
+00100000011000000000000000000000
+01101000000000001000110101010011
+00100000011110100000000000000000
+01110000000011010101001100000000
+01110000000011010011011000000010
+01110000000011010100010100000001
+00100000011000000000000000000000
+01110000100010100010011100000001
+00100000001000000100101100110111
+01101000000000001000101100100010
+11000010100000100100100101010101
+00100000011000000000000000000000
+01101000000100001000101000011000
+11100000101000001000000000000000
+11000010000000000100100101000110
+00100000011000000000000000000000
+01000100111111000100000000011111
+01110000100010100010011000010001
+01101000000100001000101000100000
+01100000000000001000101100100100
+00011111111000100111001000000000
+00100000001110100100100101000011
+11011000101000000000110001101110
+00100000010000000100100101000110
+01101000000000001000101100100100
+00011111111001100111110000000111
+00100000011000010000000000000000
+01101000000000001000110001101110
+00011111111000010111111010000000
+11000000010000000100100101011010
+11000000000000000100100101100010
+00100000001000000010101010001100
+01101000000000001000110001101110
+00011111111100011111111000000000
+00011111111000110111111000000000
+00011111111000010111111000000011
+11000000000000000100100101101010
+11000000000000001100100101110000
+11000000000000010100100101110101
+00100000001000000010101010001100
+01101000000000001000110001101110
+00011111111100011111111000000000
+00011111111000110111111000000000
+00011111111000010111111000000011
+11000000000000000100100101110110
+11000000000000001100100101111110
+11000000000000010100100110000011
+00100000001000000010101010001100
+01101000000000001000110001101111
+11000000000001000100100110001010
+11000000000000110100100110100000
+11000000000001010100100111101010
+11000000000000000100100111111100
+00100000001000000100100110000100
+01101000000000001000110001101111
+11000000000000010100101000101111
+11000000000000001100101000110011
+11000000000000011100101001000101
+00100000001000000100100110000100
+00100000001000000100100110000100
+01101000000000001000110001101111
+11000000000000001100101001001111
+11000000000000011100101001111001
+11000000000000101100101010100011
+11000000000001001100101010111100
+11000000000001011100101011010111
+11000000000000111100100110000100
+00100000001000000100100110000100
+01101000000000001000110001101111
+11000000000001010100101011101000
+11000000000001001100101011111001
+11000000000001011100101100010001
+00100000001000000100100110000100
+00100000001000000100100110000100
+01101000000100001000101000010001
+01111001001000000111111000000000
+01100000000100001000101000010001
+00100000001000000100100110001000
+01110000100010100001001001000000
+00100000011000000000000000000000
+01101000000000001000110001101110
+11000000110000000100100110000100
+01101000000000001000110001110010
+11000000100000000100100110000100
+01101000000000001000110001110011
+11000000100000000100100110000100
+01101000000000001000110001110100
+11000000100000001100100110000100
+01101000000000001000110001110101
+11000000100000000100100110000100
+01101000000000001000110001110000
+11000000100000000100100110000100
+01101000000000001000110001110001
+11000000100000000100100110000100
+01101000000000001000110001101011
+11000000000000100100100110011100
+11000000000000011100100110011110
+00100000001000000100100110000100
+11011010010000000000000000000001
+00100000001000000100101000010100
+11011010010000000000000000000001
+00100000001000000100101000010010
+01000100111111001100000000011111
+01111001001111111000000000100011
+01101000000000001000110001110001
+11000000000000001100100110110110
+11000000000000010100100111001111
+11000000000000011100100111010010
+11000000000100001100100110101001
+11000000000100010100100111100000
+00100000001000000100100110000100
+01110000000011010100101100000000
+01101000000000001000110001110010
+11000000000000000100100110101110
+11000000000000001100100110110010
+00100000001000000100100110000100
+11011010001000000000101110010011
+11101010001000001000000000000000
+10011000000000000010010000000000
+00100000001000000100101100100001
+11011010001000000000101110101100
+11101010001000001000000000000000
+10011000000000000010010000000000
+00100000001000000100101100100001
+01101000000000001000110101001000
+00100100010110100100100111000111
+01011000000000000000101101101000
+01101000000010001000101101101000
+01100000000000010000110100111111
+01100000000010001000110101000001
+01101000000000001000110001110100
+10011000010001100111110000000000
+00100100001000010100100111000101
+01101000000000001000110101000001
+10011000000000000010010000000000
+01101000000000010000110100111111
+00011111111000001111111000000001
+10011000000000000010001000000000
+00100000001000000100101100100001
+01101000000000001000110001110100
+00100000001000000100100111000000
+01101000000100001000101000000100
+00100100010110100100100111001011
+01110000000011010100100000000000
+00100000011000000000000000000000
+01101000000100001000101000000100
+01111001001000000111111000000111
+01100000000100001000101000000100
+00100000011000000000000000000000
+01011000000000000000101110000000
+01101000000010001000101110000000
+00100000001000000100100110111010
+01101000000000001000110001110000
+00011111111001100111110000000011
+00100100001000010100100110000100
+01101000000000001000110001110000
+11011010001000000000101111100100
+11000000000000000100101100011110
+01111001001000000000000000100011
+11011010001000000000101111101001
+11000000000000001100101100011110
+11011010001000000000110000000111
+11000000000000010100101100011110
+11011010001000000000110001000111
+11000000000000011100101100011110
+00100000011000000000000000000000
+01101000000000010000110001110010
+11000000000000001100100111100101
+01101000000000010000101101111100
+00011111111000100010001000000000
+00100000001000000100101100011110
+01110000000011010100010100000001
+01110000000011010011011000000001
+01101000000000010000101101111110
+00011111111000100010001000000000
+00100000001000000100101100011110
+01101000000000001000110001101011
+11000000100000100100100110000100
+01101000000000001000110001101110
+11000000110000001100100110000100
+01101000000000001000110001110000
+11000000100000000100100110000100
+01101000000000001000110001110001
+11000000100000000100100110000100
+01101000000000001000110001110100
+11000000100000001100100110000100
+01101000000000001000110001110101
+11000000100000000100100110000100
+01101000000000001000110001110010
+11000000100000000100100110000100
+01101000000000001000110001110011
+11000000100000000100100110000100
+11011010010000000000000000000001
+00100000001000000100101000010010
+01101000000000001000110001101011
+11000000000000010100100110000100
+01101000000000001000110001110000
+11000000100000000100100110000100
+01101000000000001000110001110001
+11000000100000000100100110000100
+01101000000000001000110001110100
+11000000100000010100100110000100
+01101000000000001000110001110101
+11000000100000000100100110000100
+01101000000000001000110001110011
+11000000100000000100100110000100
+01101000000000001000110001101110
+11000000010000000100101000001101
+11000000010000001100101000011000
+11000000010000010100101000011100
+00100000001000000100100110000100
+01101000000000001000110001110010
+11000000100000000100100110000100
+11011010010000000000000000000010
+01101000000000001000110100111001
+11000000000000001100101000010110
+11011010001000000000110001100101
+00100000001000000100101100100001
+11011010001000000000110001100111
+00100000001000000100101100100001
+11011010001000000000110001101001
+00100000001000000100101100100001
+01101000000000001000110001101011
+11000000100000100100100110000100
+11011010010000000000000000000010
+00100000001000000100101000010010
+01101000000000001000110001101011
+11000000100000100100100110000100
+01101000000000001000110001110010
+11000000010000001100101000101001
+11000000010000010100101000101011
+11000000010000011100101000101101
+00011111111000010111111001111111
+11000000000000000100101000100101
+00100000001000000100100110000100
+01101000000000001000110100111011
+11011010010000000000000000000010
+11000000000000001100101000010100
+00100000001000000100101000010010
+01101000000000001000110100111100
+00100000001000000100101000100110
+01101000000000001000110100111101
+00100000001000000100101000100110
+01101000000000001000110100111110
+00100000001000000100101000100110
+01110000000011010100110000000001
+11011010001000000000110101001101
+11011010010000000000000000000001
+00100000001000000100101100100001
+01101000000000010000110001110000
+11011000010000000000000110111010
+10011000010001100111110000000000
+00100100001000101100100110000100
+01111001001111111000000000100011
+01101000000000001000110101000010
+00100100001110100100101001000010
+01110000000011001111011000000000
+01101000000000001000110001110100
+10011000000000000010010000000000
+11011010001000000000110011110110
+00100000010000000100101100100001
+11011000101000000000110011110110
+11011111001000000000000000001000
+00100000001000000111111011000110
+01110000000011010100001000000000
+01110000000011001111011000000001
+00100000001000000100101000111011
+01101000000000001000110001110100
+11000000100000001100100110000100
+01110000000011010100101100000001
+11011010010000000000000000000001
+01101000000000001000110101001001
+11000000000000000100101001001101
+11000000000000001100101001001110
+00100000001000000100101000010010
+00100000001000000100101000010100
+00100000001000000100101000010010
+01101000000000001000110001101011
+11000000100000100100100110000100
+01101000000000001000110001110100
+11000000100000000100100110000100
+01101000000000001000110001110101
+11000000100000000100100110000100
+01101000000000001000110001110001
+11000000100000000100100110000100
+01101000000000001000110001110011
+11000000100000000100100110000100
+01101000000000001000110001101110
+11000000000000000100101001011110
+11000000000000001100101001100110
+11000000000000010100101001100111
+00100000001000000100100110000100
+01101000000000001000110001110000
+11000000100000001100100110000100
+01101000000100001000101000000000
+01111001001111111111111000000111
+01100000000100001000101000000000
+01110000000011010011100100000000
+01110000000011010011101000000001
+00100000001000000100100110001000
+00100000001000000100100110000100
+01101000000000001000110001110000
+11000000100000000100100110000100
+01101000000000001000110001110010
+11000000010000001100101001110010
+11000000010000010100101001110101
+11000000010000011100101001110111
+00011111111000010111111001111111
+11000000000000000100101001110000
+00100000001000000100100110000100
+01110000000011010011101100000000
+00100000001000000100100110001000
+01110000000011010011110000000000
+01110000000011010101001100000001
+00100000001000000100100110001000
+01110000000011010011110100000000
+00100000001000000100101001110011
+01110000000011010011111000000000
+00100000001000000100101001110011
+01101000000000001000110001110100
+11000000100000000100100110000100
+01101000000000001000110001110101
+11000000100000000100100110000100
+01101000000000001000110001101110
+11000000000000000100101010000010
+11000000000000001100101010001111
+11000000000000010100101010010000
+00100000001000000100100110000100
+01101000000000001000110001110000
+11000000100000001100100110000100
+01101000000100001000101000000000
+01111001001000000111111000000111
+01100000000100001000101000000000
+01110000000011010011100100000001
+01110000000011010011011000000011
+01110000000011010100001100000000
+00100000010000000100100110001000
+00100000010000000111111100010101
+01011000000000000001001110001000
+11011000111000000000000000001111
+00100000001000000111111100001000
+00100000001000000100100110000100
+01101000000000001000110001110000
+11000000100000000100100110000100
+01101000000000001000110001110001
+11000000100000000100100110000100
+01101000000000001000110001110010
+11000000010000001100101010011101
+11000000010000010100101010011111
+11000000010000011100101010100001
+00011111111000010111111001111111
+11000000000000000100101010011011
+00100000001000000100100110000100
+01110000000011010011101100000001
+00100000001000000100100110001000
+01110000000011010011110000000001
+00100000001000000100100110001000
+01110000000011010011110100000001
+00100000001000000100100110001000
+01110000000011010011111000000001
+00100000001000000100100110001000
+01101000000000001000110001101110
+11000000100000000100100110000100
+01101000000000001000110001110010
+11000000100000000100100110000100
+01101000000000001000110001110011
+11000000100000000100100110000100
+01101000000000001000110001110100
+11000000100000000100100110000100
+01101000000000001000110001110101
+11000000100000000100100110000100
+01101000000000001000110001110001
+11000000100000000100100110000100
+01101000000000001000110001110000
+00011111111000010111111010000000
+11000000100000000100100110000100
+01101000000000001000110001110000
+11000000100000000100101010111010
+01110000000011000110101100000010
+01101000000000001000110001110000
+01100000000100001000101000000100
+00100000010000000100100110001000
+01110000000011010100100000000001
+00100000011000000000000000000000
+01110000000011000110101100000011
+00100000001000000100101010110101
+01101000000000001000110001101011
+11000000000000010100100110000100
+01101000000000001000110001101110
+11000000100000000100100110000100
+01101000000000001000110001110010
+11000000100000000100100110000100
+01101000000000001000110001110011
+11000000100000000100100110000100
+01101000000000001000110001110100
+11000000100000000100100110000100
+01101000000000001000110001110101
+11000000100000000100100110000100
+01101000000000001000110001110001
+11000000100000000100100110000100
+01101000000000001000110001110000
+00011111111001100111110000000001
+00100100001000010100100110000100
+01101000000000001000110001101011
+11000000000000011100101011010001
+11000000000000100100101011010001
+00100000001000000100100110000100
+01101000000000001000110001110000
+11000000000000000100101011010101
+01110000000011000110101100000100
+00100000001000000100100110001000
+01110000000011000110101100000011
+00100000001000000100100110001000
+01101000000000001000110001101011
+11000000100000100100100110000100
+01101000000000001000110001101110
+11000000100000001100100110000100
+01101000000000001000110001110000
+11000000100000000100100110000100
+01101000000000001000110001110001
+11000000100000000100100110000100
+01101000000000001000110001110100
+11000000100000000100100110000100
+01101000000000001000110001110101
+11000000100000000100100110000100
+01101000000000001000110001110010
+11000000100000000100100110000100
+01101000000000001000110001110011
+11000000100000000100100110000100
+00100000001000000100100110001000
+01110000000011010100110000000001
+01101000000000001000110001110001
+01100000000000001000110101001101
+01101000000000001000110001110010
+00011111111001100111110000000001
+00100000010000101100101011110101
+01101000000000001000110100110110
+11000000100000100100100110001000
+01110000000011010011011000000010
+00100000010000000100100110001000
+00100000000000000111010100110000
+00100000000000000111010100110000
+00100000011000000000000000000000
+01110000000011010100010100000001
+01110000000011010011101000000000
+01110000000011010011011000000100
+00100000011000000000000000000000
+01110000000011010101000000000001
+00100000010000000100101100000011
+01101000000000010000110001110000
+01100000000000010000110101001110
+01101000000000001000110001110100
+10011000000000000111001000000000
+11011000110000000000110001110110
+11011000101000000000110010110110
+00100000010000000111111100000001
+00100000001000000100100110001000
+01101000000000010000110001110000
+11011000010000000000001000000000
+10011000010001100111110000000000
+00100100011000101000000000000000
+01101000000000010000110001110010
+11011000010000000000000000000000
+10011000010001100111110000000000
+00100100011000101000000000000000
+01101000000000010000110001110100
+11011000010000000000000000000001
+10011000010001100111110000000000
+00100100011000101000000000000000
+01110000000011010100001100000001
+00100000011000000000000000000000
+01101000000000001000110001110100
+11000000100000000100100110000100
+01101000000000001000110001110000
+11000000000000000100101100010111
+11000000000000001100101100011010
+00100000001000000100100110000100
+01110000000011010100101000000000
+01110000000011010100100100000001
+00100000001000000100100110001000
+01110000000011010100010000000001
+01110000000011010100101000000001
+01110000000011010100100100000000
+00100000001000000100100110001000
+11101010001000001000000000000000
+10011000000000000010010000000000
+00011010001000001010001000000001
+01000100111111010100000000011111
+11000101100100011100101100101100
+00011010010000001111111000000001
+00011111111000111111111000000000
+01100000000100001000101000011000
+01110000100010100001100000000011
+01101000000000001000110001110100
+00011111111000001111111111111110
+00011111111000110111111000000000
+01100000000000001000110001110100
+11000000000000000100101100110101
+01101000000000010000110001110100
+10011010010001100111110000000000
+00100000001000010100101100110000
+00011111111000100010010000000000
+00011010001000100111111000000000
+01100000000000010000101101100101
+00011010010000100111111000000000
+01100000000000001000101101100111
+00100000001000000100101100110111
+11011000111000000000000000000000
+00100000001000000100101101010111
+01000100111111011100000000011111
+01101000000000001000101101100111
+00100000011110100000000000000000
+00011111111000100111001000000000
+00011111111001100111110001000000
+00100000001000010100101100111110
+11011111001000000000000001000000
+01101000000000001000101101100111
+10011111001001100111111000000000
+01100000000000001000101101100111
+01101000000000010000101101100101
+00011111111000100000110000000000
+11101000110000001000000000000000
+01100000000100001000101000011000
+11000101100100011100101101000111
+01110000100010100001100000000000
+11000010000000000100101101000011
+00011000110000100111111000000000
+01100000000000010000101101100101
+11011000111000000000000000000000
+00100000010000000100101101010111
+01101000000000001000101101100111
+00100100011110100000000000000000
+01101000000000001000110100110110
+11000001100000001000000000000000
+01110000000011010011011000000010
+00100000011000000000000000000000
+11011010001000001000101000011001
+11011000111000000000000000000001
+11101000110000001000000000000000
+11100010001000001000000000000000
+11000010000000000100101101010100
+01011000000000000000000000000000
+11111001001000000111111000000000
+01100000000100001000101000010000
+01101000000010001000110100110111
+10011000010000011111111000000000
+01100000000000001000110100110111
+00100000011000000000000000000000
+11011000111000000000000000000010
+11011010001000001000101000011010
+00100000001000000100101101010100
+01000100111111100100000000011111
+01101000000000001000110100111000
+00100000011110100000000000000000
+01101000000000001000110100110111
+00100100001110100100101110101100
+01101000000000001000110101000101
+00100000001110100100101110000110
+01101000000000001000110100110110
+11000000000000011100101110111111
+11000000100000010100101110000110
+01101000000000001000110100111010
+00100100001110100100101110000110
+00100000010000000100101101101111
+00100000001000000100101101111010
+01101000000000001000110100111000
+11000100000000001000000000000000
+01101000000000001000110100110111
+11000011100000001000000000000000
+01101000000000001000110100111000
+01111001001111111111111000000001
+01100000000000001000110100111000
+01101000000000001000110101010001
+00100000011110100000000000000000
+11000000000010000100101110101000
+00100000001000000010101010001100
+01101000000000001000110100111000
+11000100000000010000000000000000
+01101000000000001000110100110111
+11000011100000010000000000000000
+01101000000000001000110100111000
+01111001001111111111111000000010
+01100000000000001000110100111000
+01101000000000001000110101010010
+00100000011110100000000000000000
+11000000000100000100101110001001
+11000000000100001100101110100100
+00100000001000000010101010001100
+11011000101000000000110101010100
+11011111001000000000000000000110
+00100000001000000111111011000110
+01101000000000001000110101001100
+01101000000010001000110101001011
+10011000010000010111111000000000
+00100000001110100100101110100000
+01101000000010001000110101001010
+10011000010000001111111000000000
+11000000000000001100101110010001
+00100000001000000100101110100000
+01110000000011010101001000000000
+01101000000000001000110101010101
+11000000000000010100101110100001
+11000000000000011100101110100001
+01101000000000001000110101010101
+01100000000000001000110101010100
+01101000000000001000110101010110
+11100000101000001000000000000000
+01101000000000001000110101011000
+11100000101000001000000000000000
+01101000000000001000110101011010
+11100000101000001000000000000000
+11011111001000000000000000000100
+11011000110000000000110101010100
+00100000001000000100101101011110
+01110000000011010101001000000000
+11011111001000000000000000001000
+11011000110000000000110101010100
+00100000001000000100101101011110
+01110000000011010101001000000000
+11011111001000000000000000000011
+11011000110000000000110101110100
+00100000001000000100101101011110
+01110000000011010101000100000000
+11011111001000000000000000001000
+11011000110000000000110101100100
+00100000001000000100101101010010
+01101000000000001000110100110110
+11000000000000011100101110110000
+11000000000000010100101110110010
+00100000011000000000000000000000
+01110000000011010011011100000000
+00100000011000000000000000000000
+01101000000100001000101000000000
+01111001001000000111111000000111
+01100000000100001000101000000000
+01110000000011010100011100000001
+00100000011000000000000000000000
+01101000000000001000110100110110
+11000001000000011000000000000000
+11000000000000010100101110111011
+00100000011000000000000000000000
+01101000000000001000110101000111
+00100000011110100000000000000000
+01110000000011010100011000000001
+00100000001000000100101111000010
+11011000111000000000000000001111
+00100000010000000111111100010110
+00100100011110100000000000000000
+01101000000100001000101000000000
+11000100000000111000000000000000
+01110000100010100000000011111100
+00100000000000000111010100110000
+01110000100010100000000000111100
+00100000011000000000000000000000
+01000100111111101100000000011111
+01101000000000001100000111001110
+00100100011110100000000000000000
+00100000010000000100101111001110
+00100100010101000100101111100110
+00100000011000000000000000000000
+01000100111111110100000000011111
+00011000011000100010001000000000
+11011000010000000000000000000100
+11101000011000001000000000000000
+11000000000000001100101111011000
+00011000010000001000010000000001
+11000000000000010100101111011000
+00011000011000100111111000000000
+01100000000100010000000001011000
+00100000011000000000000000000000
+01101000000100010000000100010010
+10011000010001100111110000000000
+00100100001000010100101111011000
+01111000010101000111110000000000
+00011010001000100000011000000000
+00100000010000000100101111101110
+10011000010000001000010000000000
+01101000000100010000000100010010
+10011000010001100111110000000000
+00100100001000010100101111011111
+00011010001000100000011000000000
+11101000011000001000000000000000
+11000000000000001100110000111111
+00100000001000000010101010001100
+01000100111111111100000000011111
+01101000000100010000000001011000
+10011000000000000000011000000000
+00100000010000000100101111101110
+10011000011000001000011000000000
+00011000011000100111111000000000
+01100000000100010000000001011000
+00100000011000000000000000000000
+11101000011000001000000000000000
+00011000011000001000011000000010
+11000000000000010100101111110011
+11101000011000001000000000000000
+00100000011000000000000000000000
+11101000011000010000000000000000
+00100000011000000000000000000000
+01101000000100010000000001011110
+00011001010000001001010111111011
+10011001010000001001010000000000
+00100000011000000000000000000000
+11011000010000000000000000000100
+00100000001000000100101111111100
+11011000010000000000000000000010
+01000111000000000100000000100000
+00011111001000001111001000000001
+01101000000100010000000001011110
+00011111111000100001010000000000
+00011111001000100111111000000000
+11100001010010001000000000000000
+00011111111000001111111111111111
+10011001010000001001010000000000
+00011001010000100111111000000000
+01100000000000010000001001011000
+00011000010000100111111000000000
+11000001000000010000000000000000
+01101000000000010000001001011000
+01100000000100010000000001011110
+00100000001000000100110000001011
+01011000000000000000000000000000
+01100000000000010000001001011000
+00100000011000000000000000000000
+00100000011101011000000000000000
+01011000000000000100110100101000
+01100000000000010100000111110011
+01011000000000000000000110100000
+01100000000000010100001001000011
+01011000000000000001100000000000
+01100000000100010000000001010100
+01011000000000000001101111111111
+01100000000100010000000001010110
+01011000000000000001110000000000
+01100000000100010000000001011010
+00100000010000000100110000101000
+01110000100000000110001000000000
+01011000000000000001110000000000
+01100000000100010000000001011110
+01100000000100010000000001100000
+01011000000000000001100000000000
+01100000000100010000000001011000
+01100000000000010000001001000100
+01101000000100010000000001010000
+01111001001111111111111000001111
+01100000000100010000000001010000
+00100000010000000110011011001110
+01110000100000000100001100000001
+01110000100000000110001010000001
+00100000011000000000000000000000
+01011000000000000001111111111111
+01100000000100010000000001011100
+01101000000100001000000010000001
+00011111111000011111111000000111
+01100000000100001000000010000001
+00100000011000000000000000000000
+01000111000000001100000000100000
+01101000000100001000000100001100
+10011000000000000010010000000000
+11000011000000011100110000110111
+01101000000100010000000100010010
+10011000000000000010011000000000
+11011000010000000000010001001111
+10011000010001100111110000000000
+00100100011000101000000000000000
+01101000000100010000000001011000
+10011000000000000000011000000000
+00100000001000000100101111001000
+01101000000110001000000100001100
+00101000010011111111111000000110
+00100000001000001100110000111010
+01100000000100001000000000010101
+00100000011000000000000000000000
+01000111000000010100000000100000
+01101000000000001100000111001110
+00100000001110100100110001000100
+01111000001101000111110000000000
+00100000011000000000000000000000
+11101000011000010000000000000000
+10011000000000000110000000000000
+10011000000000000000111000000000
+11101000011000001000000000000000
+10011000000000000000010000000000
+00011110000010110111111000000000
+00011111111011001111111000000000
+11000000000111111100110001001101
+00100000011000000000000000000000
+01000111000000011100000000100000
+00011000111000100111111000000000
+11000000000000000100110011011100
+11000000000000001100110001100110
+11000000000000010100110001101011
+11000000000000011100110001111010
+11000000000000100100110010110011
+11000000000000101100110011011100
+11000000000000110100110011000110
+11000000000000111100110001011100
+11000000000010000100110011001001
+11000000000010001100110011010001
+11000000000010010100110010100101
+11000000000010011100110010000101
+00100000001000000100110011011100
+00100000010000000100110011011100
+00100000010000000111111110011110
+00100000010000000110100010001100
+00100000010000000011001111010010
+00100000010000000011001111011001
+00100000001000000110100010001111
+01110000010000100100010100000000
+00100000010000000011001111010000
+00100000010000000100110000010011
+00100000001000000011001111011011
+00100000010000000100110011110010
+01101000000100010000000000000000
+11100001010000010000000000000000
+00011000000000000111001000000110
+00100000001000000100110011011101
+11101000011000010000000000000000
+01100000000000010100001001000011
+01100000000100010000000001010010
+00100000011000000000000000000000
+11101000011000001000000000000000
+00011111111000100000010000000000
+01100000000100001000000000100100
+11101000011000001000000000000000
+10011000010000001000010000000000
+01111001001000000111111000000111
+01100000000100001000000000100011
+11101000011000001000000000000000
+10011000010000001000010000000000
+00011111111000100111001000000000
+00100000011000000000000000000000
+11000101000101011100110011000100
+00100000010000000100110001101111
+11101000011000001000000000000000
+01100000000100001000000000100101
+10011000010000001000010000000000
+11000010000000000100110001111100
+00011000010000010000010011111111
+11101000011000001000000000000000
+10011000010001100111110000000000
+00100100001000101100110011000100
+00100000001000000100110011011100
+11000101100101011100110011000100
+00100000010000000100110001101111
+01100000000001000000101010011010
+00100000010000000111010000100010
+11011111001000000000000000010000
+11011000101000000000101011000010
+00100000010000000100110010100000
+01100000000011000000101010100010
+11011000101000000000101011010010
+00100000010000000111010010010111
+11011010001000000000101011010010
+11011010010000000000101011000010
+11011000101000000000101011100010
+00100000010000000111001101010010
+11011111001000000000000000010000
+11011000110000000000101011100010
+00100000010000000100110010011100
+01101000000011000000101010100010
+01101000000001000000101010011010
+00011111111000001111111111110000
+01100000000001000000101010011010
+00100100001110100100110010001000
+00100000001000000100110010000000
+11101000110000001000000000000000
+01100000000100001000000000100101
+11000010000000000100110010011100
+00100000011000000000000000000000
+11101000011000001000000000000000
+11100000101000001000000000000000
+10011000010000001000010000000000
+11000010000000000100110010100000
+00100000011000000000000000000000
+11000101100101011100110011000100
+11011000010000000000000000000000
+11011111001000000000000000010000
+11011000101000000000101011000010
+00100000010000000100110010100000
+01101000000100001000000010000101
+00011111111000010111111011111101
+01100000000100001000000010000101
+11011000110000000000101011000010
+11011111001000000000000000010000
+00100000010000000111010001111000
+00100000010000000111010000101000
+00100000010000000111010010010001
+00100000001000000100110010000000
+11011111001000000000000000100000
+11011000101000000100000000000000
+11011000010000000000000000000000
+11101000011000001000000000000000
+11100000101000001000000000000000
+10011000010000001000010000000000
+11000010000000000100110010110110
+00011000010000010000010011111111
+11101000011000001000000000000000
+10011000010001100111110000000000
+00100100001000101100110011000100
+01110000100000000010001100000000
+00100000010000000100110011011100
+00100000010000000100101111100110
+00100000010000000110010010100011
+00100000010000000111111110011110
+00100000001000000010000000000001
+01110000100000000010001100000000
+00100000001000000010000000000000
+11101000011000110000000000000000
+01100000000000110100000010100000
+00100000001000000100110011011100
+11101000011000001000000000000000
+01100000000000001000001001011010
+00011111111000100111001000000000
+11101000011000010000000000000000
+01100000000000010000001001011011
+00011111111000100000101000000000
+00100000010000000110011011111101
+00100000001000000100110011011100
+11101000011000001000000000000000
+01100000000000001000001001011010
+00011111111000100111001000000000
+11101000011000010000000000000000
+01100000000000010000001001011011
+11011000101000000001000000000000
+00100000010000000110011011111101
+01101000000010001000001001011010
+11011010001000000001000000000000
+01101000000000010000001001011011
+00100000001000000110011000001000
+00011000000000000111001000000100
+00100000010000000100110011110100
+00011000000000000111111000000001
+11100001010000001000000000000000
+00011110000000100111111000000000
+11100001010000011000000000000000
+00011000000000000000111000001110
+01000111000000100100000000100000
+00100000010000000100110011110110
+00011000111000100111111000000000
+11100001010000001000000000000000
+00011111001000100111111000000000
+11100001010000001000000000000000
+00011000000000000000111000000101
+00011111001000001111001000000010
+00100000001000000100101111111001
+00011000000000000000111011111111
+00100000010000000100110011110100
+01011000000000000000000000000001
+11100001010000001000000000000000
+00011000000000000111001000000001
+00100000001000000100110011100011
+00011000000000000001010000001100
+00100000001000000100110011110111
+00011000000000000001010000001000
+00100000001000000100110011110111
+00011000000000000001010000000110
+00100000001000000100101111110101
+01111000001001111111110000000000
+01111000001001001111110000000000
+11101001010000001000000000000000
+00001000000000001000000000001000
+11000010000000000100110011111010
+01111000001001000111110000000000
+00001000000000001000000000010000
+01111000010001000111110000000000
+01111000010001001111110000000000
+01111000010001111111110000000000
+00011111111100001111111000000000
+00100000011000000000000000000000
+01110000010000011100111000000000
+00100000011000000000000000000000
+01101000000000110100000111010000
+01101000000010110000000001000000
+10011000010001100111110000000000
+00100000011000000000000000000000
+01101000000000001000000001001011
+11000010100000010100110100001111
+00100000010000000110001011101111
+01110000000000000111110000001000
+00100000001000000100110100000100
+01111001001111111111111000000010
+01100000000000001000000001001011
+00100000010000000110000000000001
+01011000000000000000000000000000
+01111001001101001111111000000001
+01100000000000001000000001111111
+00100000001000000100110100000100
+00100000011000000000000000000000
+01110000000000000111110000010111
+11011000101000000000010011011001
+01011000000000000000000000000000
+00101101000011111111111000011011
+01111001001000001111111000000001
+11100000101000001000000000000000
+01011000000000000000000000000000
+11100000101000010000000000000000
+01101000000000010100000111100011
+11100000101000010000000000000000
+01101000000000001100000111100101
+11100000101000010000000000000000
+01101000000000001100000111100111
+11100000101000010000000000000000
+00100000001000000100110100000100
+01110000000000000111110000011000
+00100000001000000100110100000100
+00100000010000000110100010011001
+00100000011000001000000000000000
+11011000010000000000000000000111
+00100000010000000110100000011101
+00100100001000001100110100101111
+01110000010000100100010100000001
+00100000011000000000000000000000
+01101000000000001100001001000101
+11000001100000001000000000000000
+00100000010000000100110001100010
+00100000001000000100110011101100
+01000111000000101100000000100000
+01101000000000010000001001100100
+00011111111000100000110000000000
+11101000110000001000000000000000
+00011111111000010000010000001111
+00011111111100011111111000000000
+11000000000001001100110101010011
+11000000000000111100110101010011
+11000000000001010100110101011111
+11000000000000101100110101001011
+11000000000000001100110100111111
+00100000011000000000000000000000
+00011000010000100111111000000000
+11000000000000101100110101000011
+11000000000000011100110101001010
+00100000011000000000000000000000
+01110000000010101001100100100111
+00100000010000000111110110000110
+01101000000000001100000010010010
+11000100000000110000000000000000
+00011000010000100111111000000000
+11000000000000101100001110001110
+00100000011000000000000000000000
+00100000011000000000000000000000
+00100000010000000100110101011111
+11011010001000000000000000000001
+00100000010000000100110101100011
+01101000000000010100001001001100
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+11011010001000000000000000000001
+00100000010000000100110101100011
+01101000000000010100001001001100
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000001000000000000000
+01110000000010101000111000000001
+01101000000000001100001001010010
+01111001001000000111111000000110
+01100000000000001100001001010010
+01110000000010101001100100010010
+00100000001000000111110110000110
+11101000110000001000000000000000
+11000000000000001100110101100010
+00100000011000000000000000000000
+00100000011000000000000000000000
+00100000010000000101001001000000
+00011010001000100000010000000000
+01100000000010001000101010001110
+00011111111000100000101000000000
+00011010001000100111111000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+00100000001101011100110101101111
+01011000000000000100001101100101
+11011000101000000100001001000110
+10011000101001100111001000000000
+00100000010000000111111011010100
+01000111000000110100000000100000
+01011000000000000000010101010001
+11011000101000000000010100010001
+10011000101001100111001000000000
+00100000010000000111111011010100
+01011000000000000000001011001001
+11011000101000000000001001011101
+10011000101001100111001000000000
+00100000010000000111111011010100
+00100000001000000101001100011000
+01000111000000111100000000100000
+00011000110000100000010000000000
+00011000010000100000110000000000
+11101000110000010000000000000000
+01100000000000010000001001100110
+11101000110000010000000000000000
+01100000000000010000001001101000
+00011000110000100111111000000000
+01100000000000010000001001100100
+01101000000000001100011010000001
+11000000000000000100110110000101
+00100000001000000101000011101111
+01101000000000010000001001100110
+00100000001110100100110111111100
+01000111000001000100000000100001
+01101000000000001000001001101000
+11000000000000001100110110011101
+11000000001010000100110111100000
+11000000001010001100110111110101
+11000000001010010100110111110011
+11000000001010011100110111110011
+00100000001000000100110111111100
+01000111000001001100000000100001
+00100000010000000101001001111110
+01101000000000001100001001010110
+11000000000000000100110110011011
+11000000000000001100110110011011
+11000000000000010100110110011011
+11000000000000011100110110011011
+11000000010000001100110110011011
+11000000011000000100110110011011
+11000000010000000100110110011011
+11000000001000000100110110011011
+00100000011000000000000000000000
+01011000000000000000000000000000
+00100000011000000000000000000000
+00100000010000000100110110001111
+00100100011110100000000000000000
+00100000010000000101001010111000
+00100000010000000100111000000001
+01101000000010010000001001101111
+00100000001110100100110111111011
+00100000010000000101001011000001
+01101000000000010000001001101111
+11100000101000010000000000000000
+00011000000000000111111000000001
+11100000101000010000000000000000
+00100000001000000100110111111100
+01101000000000001100001101100100
+00100000011110100000000000000000
+00011111111000100010001000000000
+01000111000001010100000000100001
+01101000000000100000001011010101
+11011000010000000000000100000000
+10011000010000001000010000000000
+00011100010000100111111000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+01110000010000110110010000000000
+00011010001000100111111000000000
+11000000001010000100110110110111
+00100000001000000010101010001100
+11011001000000000000000000000000
+00100000010000000101001010111000
+00100000010000000100111001111010
+00100000010000000101001011000011
+00100000010000000111111010101000
+00100000010000000100111010101101
+00100000010000000101001011000001
+01011000000000000000000000001100
+11100000101000010000000000000000
+00011000000000000111111000000001
+11100000101000010000000000000000
+00100000001000000100110111111100
+01000111000001011100000000100001
+01101000000000010000001001110101
+00011111111000001111111000000100
+00011111111100011111111000000000
+00011111111010010111111000000000
+00011111111000001000010000000001
+11011000110000000100001001100000
+11101000110000011000000000000000
+00100000011110100000000000000000
+01100000000000011000101011000010
+01101000000000001000101011000010
+00011111111000100010001000000000
+00100000010000000100110111010011
+00011010010000100111111000000000
+01100000000000001100001001100000
+00100000011000000000000000000000
+11011000111000000000000000000000
+11011010010000000000000000000000
+00011000111001100111110000000111
+00100100011000010000000000000000
+10101010001011111111111111111111
+00100000001000001100110111011010
+00100000001000000100110111011110
+00011000010000100111111000000000
+00100000001110100100110111011110
+11111001001000000010010000000000
+00011000010000001000010111111111
+00011000111000001000111000000001
+00100000001000000100110111010101
+00100000010000000101001001110100
+00100100011110100000000000000000
+00100000010000000100110110001111
+00100100011110100000000000000000
+00100000010000000101001011000101
+00100000010000000110111000010001
+00100000010000000100110111000011
+00100000001000000100110111101100
+00100000010000000101001001110100
+00100100011110100000000000000000
+00100000010000000101001011000101
+00100000010000000110111000010001
+00100000010000000101001011001110
+01101000000000010000001001110101
+00100000001110100100110111111011
+11100000101000010000000000000000
+01101000000000010100001001001000
+11100000101000010000000000000000
+00100000001000000100110111111100
+00100000010000000100110100110011
+00100000001000000100110111111100
+01000111000001100100000000100001
+01110000000000101000010000000000
+00100000010000000110101010001010
+01101000000000001000001010000100
+11000001000000001000000000000000
+00100000001000000100110111111100
+00100000010000000101001001100100
+01011000000000000000000000000000
+01100000000000010000001001100110
+01100000000000010000001001101000
+01110000000000100110101000000001
+00100000011000000000000000000000
+01000111000001101100000000100001
+00100000010000000101001011000011
+00011000000000000010010000000000
+01101000000000010000001001100110
+00011111111000100010011000000000
+01101000000000010000001001100100
+10011000000000000000110000000000
+00100000010000000100111000010000
+00011010011000100111111000000000
+00011010011000001010011111111100
+00011111111000001111111111111100
+00100100001110100100111000001000
+00011010010000100111111000000000
+01100000000000010000001001101111
+00100000011000000000000000000000
+01000111000001110100000000100001
+11101000110000001000000000000000
+11000000000000001100111001001001
+11000000000000010100111001010001
+11000000000000011100111011010101
+11000000000000100100111100000101
+11000000000000101100111110100010
+11000000000000110100111111001011
+11000000000000111101000000011011
+11000000000001000101000001010000
+11000000000001001101000001100000
+11000000000001010100111000011111
+11000000000001011101000001100001
+00100000010000000101000001100010
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+01011000000000000000000000001011
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+11101000110000010000000000000000
+11000000000000010100111000101101
+11000000000000011100111000110011
+00100000011000000000000000000000
+01011000000000100000000000001000
+11100000101000110000000000000000
+01011000000000000000001010000000
+11100000101000100000000000000000
+00011000000000000111111000001100
+00100000001000000100111000111000
+01011000000000110000000000001100
+11100000101000110000000000000000
+01011000000000000000000000000110
+11100000101001000000000000000000
+00011000000000000111111000010000
+10011010010000001010010000000000
+00100000001000000100111000011110
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+11101000110000010000000000000000
+01100000000000010000101010100010
+00011010011000100111111000000000
+10011010001001100010011000000000
+00100000010000000101001011000011
+01011000000000000000000000001011
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+01101000000000010000101010100010
+00100000001000000100111000101010
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+10011000110000001000110000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+00100000001000000100111000011110
+00100000010000000111111010101000
+00100000010000000111111010101101
+11011001000000000000000000000000
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+11101000110000010000000000000000
+00011111111000100000010000000000
+11101000110000010000000000000000
+00011111111000100001011000000000
+01000111000001111100000000100001
+00011000010000100111111000000000
+11000000000000001100111001100100
+11000000000000011100111010000110
+11000000000010001100111010010010
+11000000000010011100111010011101
+00100000010000000101000001100010
+00100000001000000100111011010100
+00100000010000000111111010101000
+11011000010000000000000001010000
+01101000000000010100001001001000
+00100100001110100100111011001110
+00011001011000100111111000000000
+01100000000000010100001001001000
+00011100010000100111111000000000
+01100000000000100000001011010101
+00100000010000000100111001101110
+00100000001000000100111010101001
+01100000000010010000001011010011
+00011001011000100111111000000000
+01100000000000010000001011001001
+00011010001000100111111000000000
+01100000000000010000001011001011
+00011010010000100111111000000000
+01100000000000010000001011001101
+00011010011000100111111000000000
+01100000000000010000001011001111
+00011000111000100111111000000000
+01100000000000010000001011010001
+00100000011000000000000000000000
+01101000000010010000001011010011
+01101000000000010000001011001001
+00011111111000100001011000000000
+01101000000000010000001011001011
+00011111111000100010001000000000
+01101000000000010000001011001101
+00011111111000100010010000000000
+01101000000000010000001011001111
+00011111111000100010011000000000
+01101000000000010000001011010001
+00011111111000100000111000000000
+00100000011000000000000000000000
+00100000010000000111111010101000
+01011000000000000000000001010001
+11011000010000000000000001010001
+01101000000000010100001001001010
+00100100001110100100111011001110
+00011001011000100111111000000000
+01100000000000010100001001001010
+01101000000000001100001001010001
+01111001001000000111111000000000
+01111001001000000111111000000001
+01100000000000001100001001010001
+00100000001000000100111010110001
+00100000010000000111111010101000
+11011000010000000000000001010010
+01101000000000010100001001001100
+00100100001110100100111011001110
+00011001011000100111111000000000
+01100000000000010100001001001100
+01101000000000001100001001010010
+01111001001000000111111000000000
+01111001001000000111111000000001
+01100000000000001100001001010010
+00100000001000000100111010110001
+00100000010000000111111010101000
+00011011010000100111111000000000
+11011000010000000000000001010011
+01101000000000010100001001001110
+00100100001110100100111011001110
+00011001011000100111111000000000
+01100000000000010100001001001110
+01101000000000001100001001010011
+01111001001000000111111000000000
+01111001001000000111111000000001
+01100000000000001100001001010011
+00100000001000000100111010110001
+01011000000000000000000000000001
+01100000000000010000001001111101
+01110000010000110110010001010000
+00100000001000000100111010110011
+01101000000000001100001001010000
+01111001001000000111111000000000
+01111001001000000111111000000001
+01100000000000001100001001010000
+01011000000000000000000000000000
+01100000000000010000001001111101
+01000111000010000100000000100010
+00100000010000000111111010101101
+01011000000000000000000000000011
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000000001000
+11100000101000010000000000000000
+00011000010000100111111000000000
+11100000101000010000000000000000
+00011001011000100111111000000000
+11100000101000010000000000000000
+01101000000000010000001001111101
+11000000000000001100111011001001
+00101001000011000000000000000000
+00100000001000001100111011000100
+01011000000000000000000000000100
+11100000101000010000000000000000
+00011000000000000111111000000000
+11100000101000010000000000000000
+01011000000000000000000000001100
+00100000001000000100111011010000
+11100000101000010000000000000000
+00011000000000000111111000000010
+11100000101000010000000000000000
+01011000000000000000000000001100
+00100000001000000100111011010000
+01111001001000000001000000000000
+00100000001000000100111010110001
+10011010010000001010010000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+00100000001000000100111011010100
+00100000001000000100111000011110
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000010000000000000000
+00011111111000100001011000000000
+11101000110000010000000000000000
+00011111111000100000010000000000
+01000111000010001100000000100010
+01011000000000000000000001010000
+10011000010001100111110000000000
+00100000001000101100111011101101
+01011000000000000000000001010001
+10011000010001100111110000000000
+00100000001000101100111011110011
+01011000000000000000000001010010
+10011000010001100111110000000000
+00100000001000101100111011111111
+01011000000000000000000001010011
+10011000010001100111110000000000
+00100000001000101100111011111001
+00100000011000000000000000000000
+00011001011000100111111000000000
+01100000000000010100001001001000
+01101000000000001100001001010000
+01111001001000000111111000000001
+01100000000000001100001001010000
+00100000001000000100111000011110
+00011001011000100111111000000000
+01100000000000010100001001001010
+01101000000000001100001001010001
+01111001001000000111111000000001
+01100000000000001100001001010001
+00100000011000000000000000000000
+00011001011000100111111000000000
+01100000000000010100001001001100
+01101000000000001100001001010011
+01111001001000000111111000000001
+01100000000000001100001001010011
+00100000011000000000000000000000
+00011001011000100111111000000000
+01100000000000010100001001001110
+01101000000000001100001001010010
+01111001001000000111111000000001
+01100000000000001100001001010010
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000010000000000000000
+00011111111000100000010000000000
+00011000010000100010001000000000
+01000111000010010100000000100010
+01011000000000000000000001010000
+10011000010001100111110000000000
+00100000001000101100111100011100
+01011000000000000000000001010001
+10011000010001100111110000000000
+00100000001000101100111100111010
+01011000000000000000000001010010
+10011000010001100111110000000000
+00100000001000101100111100100110
+01011000000000000000000001010011
+10011000010001100111110000000000
+00100000001000101100111100110000
+00100000001000000101000001100010
+00011000101000100001011000000000
+01101000000000001100001001010000
+01111001001000000111111000000100
+01111001001000000111111000000011
+01100000000000001100001001010000
+00011001011000100000101000000000
+11011001011000000000000001010000
+01101000000000010100001001001000
+00011111111000100000010000000000
+00100000001000000100111101000011
+00011000101000100001011000000000
+01101000000000001100001001010010
+01111001001000000111111000000100
+01111001001000000111111000000011
+01100000000000001100001001010010
+00011001011000100000101000000000
+11011001011000000000000001010010
+01101000000000010100001001001100
+00011111111000100000010000000000
+00100000001000000100111101000011
+00011000101000100001011000000000
+01101000000000001100001001010011
+01111001001000000111111000000100
+01111001001000000111111000000011
+01100000000000001100001001010011
+00011001011000100000101000000000
+11011001011000000000000001010011
+01101000000000010100001001001110
+00011111111000100000010000000000
+00100000001000000100111101000011
+00011000101000100001011000000000
+01101000000000001100001001010001
+01111001001000000111111000000100
+01111001001000000111111000000011
+01100000000000001100001001010001
+00011001011000100000101000000000
+11011001011000000000000001010001
+01101000000000010100001001001010
+00011111111000100000010000000000
+01000111000010011100000000100010
+01011000000000000000000000000101
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000000000110
+11100000101000010000000000000000
+00011000010000100111111000000000
+11100000101000010000000000000000
+00011000000000000111111000000000
+11100000101000010000000000000000
+00011000000000000111111000000000
+11100000101000010000000000000000
+00011000000000000111111000001010
+10011010010000001010010000000000
+01100000000010010000001010000010
+00011000111000100111111000000000
+01100000000000001000001010000001
+00011000000000000111111001010000
+10101001011000011111111000000000
+00100000001000001100111101011001
+00011111111000001111111000000001
+00100000011000000000000000000000
+01111000010101000111110000000000
+11000011100000010000000000000000
+11000100000000000000000000000000
+11000100000000001000000000000000
+01111001001000000111111000000010
+00011000110000100000101000000000
+00011000101000001000101111111111
+11100000101000001000000000000000
+01111000001101000111110000000000
+00100000011000000000000000000000
+01101000000000001100001001010000
+00100000010000000100111101011010
+00100100001101000100111101101011
+01110000000000101000000001010000
+01101000000000010100001001001000
+01100000000000010000001010000010
+00100000001000000100111101111111
+01101000000000001100001001010001
+00100000010000000100111101011010
+00100100001101000100111101110010
+01110000000000101000000001010001
+01101000000000010100001001001010
+01100000000000010000001010000010
+00100000001000000100111101111111
+01101000000000001100001001010010
+00100000010000000100111101011010
+00100100001101000100111101111001
+01110000000000101000000001010010
+01101000000000010100001001001100
+01100000000000010000001010000010
+00100000001000000100111101111111
+01101000000000001100001001010011
+00100000010000000100111101011010
+00100100011101000000000000000000
+01110000000000101000000001010011
+01101000000000010100001001001110
+01100000000000010000001010000010
+01000111000010100100000000100010
+00100000010000000101001000111010
+00100000010000000101001010111000
+00011000000000000010010000000000
+00100000010000000101001011000011
+00011000000000000111111000000100
+11100000101000001000000000000000
+01101000000000001100001001010101
+11100000101000001000000000000000
+01011000000000000000000000001000
+11100000101000010000000000000000
+01101000000000010000001010000010
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000010000000000000000
+00011000000000000111111000000001
+11100000101000001000000000000000
+00011000000000000111111000000010
+11100000101000001000000000000000
+01101000000000001000001010000000
+11000000001010001100111110010111
+01011000000000000000000000110000
+11100000101000010000000000000000
+00100000001000000100111110011001
+01011000000000000000001111100011
+11100000101000010000000000000000
+11011000010000000000000000001100
+01100000000010010000001001101111
+00100000010000000101001011000001
+01101000000000010000001001101111
+11100000101000010000000000000000
+00011000000000000111111000000001
+11100000101000010000000000000000
+01110000000000101000000000000000
+00100000001000000100111000011110
+00011000110000001000110000000001
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+01000111000010101100000000100010
+01011000000000000000000001010000
+10011010001001100111110000000000
+00100000001000101100111110111010
+01011000000000000000000001010001
+10011010001001100111110000000000
+00100000001000101100111110111110
+01011000000000000000000001010010
+10011010001001100111110000000000
+00100000001000101100111111000010
+01011000000000000000000001010011
+10011010001001100111110000000000
+00100000001000101100111111000110
+00011000110000001000110000000010
+11101000110000010000000000000000
+10011000000000000111110000000000
+00100000001000000100111000011110
+01101000000000001100001001010000
+01111001001000000111111000000101
+01100000000000001100001001010000
+00100000001000000100111000011110
+01101000000000001100001001010001
+01111001001000000111111000000101
+01100000000000001100001001010001
+00100000001000000100111000011110
+01101000000000001100001001010010
+01111001001000000111111000000101
+01100000000000001100001001010010
+00100000001000000100111000011110
+01101000000000001100001001010011
+01111001001000000111111000000101
+01100000000000001100001001010011
+01110000000010101001100100000110
+00100000001000000111110110000110
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+11101000110000010000000000000000
+00011111111000100001011000000000
+00011010001000100000010000000000
+00100000010000000111111010101000
+01000111000010110100000000100010
+01011000000000000000000001010000
+10011000010001100111110000000000
+00100000001000101100111111110010
+01011000000000000000000001010001
+10011000010001100111110000000000
+00100000001000101101000000000010
+01011000000000000000000001010010
+10011000010001100111110000000000
+00100000001000101100111111100110
+01011000000000000000000001010011
+10011000010001100111110000000000
+00100000001000101100111111101100
+00100000010000000101000001100010
+00100000001000000101000000010111
+00011001011000100000010000000000
+01101000000000010100001001001100
+10011000010001100111110000000000
+00100000001000101100111111111000
+00100000010000000101000001100010
+00100000001000000101000000010111
+00011001011000100000010000000000
+01101000000000010100001001001110
+10011000010001100111110000000000
+00100000001000101100111111111010
+00100000010000000101000001100010
+00100000001000000101000000010111
+00011001011000100000010000000000
+01101000000000010100001001001000
+10011000010001100111110000000000
+00100000001000101100111111111110
+00100000010000000101000001100010
+00100000001000000101000000010111
+00100000010000000101000001111001
+00100000001000000101000000001010
+00100000010000000101000001111111
+01101000000000010100001001001100
+00100000001110100101000000001010
+00100000001000000101000000001010
+00100000010000000101000001110100
+01101000000000001000001010001000
+00100100001110100101000000001010
+00100000001000000101000000001010
+00011001011000100000010000000000
+01101000000000010100001001001010
+10011000010001100111110000000000
+00100000001000101101000000001000
+00100000010000000101000001100010
+00100000001000000101000000010111
+00100000010000000101000001101111
+00100000001000000101000000001010
+00100000010000000111111010101101
+01011000000000000000000000000111
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000000000100
+11100000101000010000000000000000
+00011010001000100111111000000000
+11100000101000010000000000000000
+00011001011000100111111000000000
+11100000101000010000000000000000
+00011000000000000111111000001000
+00100000001000000101000000011001
+00100000010000000111111010101101
+00100000001000000101000000011001
+10011010010000001010010000000000
+00100000001000000100111000011110
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000010000000000000000
+00011111111000100001011000000000
+11101000110000010000000000000000
+00011111111000100000010000000000
+00100000010000000111111010101000
+01000111000010111100000000100010
+01011000000000000000000001010000
+10011000010001100111110000000000
+00100000001000101101000000110101
+01011000000000000000000001010001
+10011000010001100111110000000000
+00100000001000101101000000111011
+01011000000000000000000001010010
+10011000010001100111110000000000
+00100000001000101101000001000001
+01011000000000000000000001010011
+10011000010001100111110000000000
+00100000001000101101000001000111
+00100000010000000101000001100010
+00100000001000000101000001001111
+00011000010000100010001000000000
+00011001011000100000010000000000
+01101000000000010100001001001000
+10011000010001100111110000000000
+00100000010000101101000001110100
+00100000001000000101000001001101
+00011000010000100010001000000000
+00011001011000100000010000000000
+01101000000000010100001001001010
+10011000010001100111110000000000
+00100000010000101101000001101111
+00100000001000000101000001001101
+00011000010000100010001000000000
+00011001011000100000010000000000
+01101000000000010100001001001100
+10011000010001100111110000000000
+00100000010000101101000001111001
+00100000001000000101000001001101
+00011000010000100010001000000000
+00011001011000100000010000000000
+01101000000000010100001001001110
+10011000010001100111110000000000
+00100000010000101101000001111111
+00100000001000000101000001001101
+00100000010000000111111010101101
+00100000001000000100111000011110
+00100000001000000100111000011110
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+10011000110000001000110000000000
+01011000000000000000000000001001
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+00011000000000000111111000000000
+11100000101000010000000000000000
+00011000000000000111111000000100
+10011010010000001010010000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+00100000001000000100111000011110
+00100000001000000100111000011110
+00100000001000000100111000011110
+00011000000000000010010000000000
+00100000010000000101001011000011
+01011000000000000000000000000001
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000000000010
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000010000000000000000
+00011010010000001010010000000110
+11011010011000000000000000000100
+00100000001000000100111000011110
+01011000000000000000000000000000
+01100000000000010000001001111011
+01100000000000010100001001001010
+01110000010000100101000100000000
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000010000001001110101
+01100000000000010100001001001000
+01110000010000100101000000000000
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000010100001001001100
+01110000010000100101001000000000
+01101000000000001100001001010011
+11000000000000000101000010000101
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000010100001001001110
+01110000010000100101001100000000
+01101000000000001100001001010010
+11000000000000000101000010000101
+00100000011000000000000000000000
+01110000000010101001100100000111
+00100000001000000111110110000110
+01101000000000001000001001111111
+01111001001111111111111000000000
+01100000000000001000001001111111
+01101000000000010100001001001110
+00100000011110100000000000000000
+00100000010000000101001010111000
+01101000000000010100001001001110
+00011111111000100010001000000000
+00011000000000000010010001010011
+00100000001000000101000010011010
+01101000000000001000001001111111
+01111001001111111111111000000111
+01100000000000001000001001111111
+01101000000000010100001001001100
+00100000011110100000000000000000
+00100000010000000101001010111000
+01101000000000010100001001001100
+00011111111000100010001000000000
+00011000000000000010010001010010
+00100000010000000101001000111010
+00100000010000000101001011000011
+00011000000000000111111000000110
+11100000101000001000000000000000
+01101000000000001100001001010101
+11100000101000001000000000000000
+01011000000000000000000000000100
+11100000101000010000000000000000
+00011010001000100111111000000000
+11100000101000010000000000000000
+00011010010000100111111000000000
+11100000101000010000000000000000
+00011000000000000000010000001000
+00100000001000000101000011011110
+01000111000011000100000000100011
+00100000010000000101001000111010
+00100000010000000101001011000011
+01011000000000000000000000000010
+11100000101000001000000000000000
+01101000000000001100001001010101
+11100000101000001000000000000000
+01011000000000000000000000000100
+11100000101000010000000000000000
+00011000010000100111111000000000
+11100000101000010000000000000000
+00011001011000100111111000000000
+11100000101000010000000000000000
+11011000010000000000000000001000
+00100000001000000101000011011110
+01000111000011001100000000100011
+00100000010000000101001000111010
+00100000010000000101001011000011
+01011000000000000000000000000100
+11100000101000001000000000000000
+01101000000000001100001001010101
+11100000101000001000000000000000
+01011000000000000000000000001000
+11100000101000010000000000000000
+00011000010000100111111000000000
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000010000000000000000
+01011000000000000000000000000001
+11100000101000001000000000000000
+01011000000000000000000000000010
+11100000101000001000000000000000
+01011000000000000000001111100011
+11100000101000010000000000000000
+11011000010000000000000000001100
+00100000001000000101000011011110
+01000111000011010100000000100011
+00100000010000000101001000111010
+00100000010000000101001011000011
+01011000000000000000000000000110
+11100000101000001000000000000000
+01101000000000001100001001010101
+00011111111000001111111000000001
+00011000101000100010001000000000
+01100000000000001100001001010101
+00011010001000100000101000000000
+11100000101000001000000000000000
+01011000000000000000000000000100
+11100000101000010000000000000000
+00011000010000100111111000000000
+11100000101000010000000000000000
+00011001011000100111111000000000
+11100000101000010000000000000000
+11011000010000000000000000001000
+01100000000010010000001001101111
+00011000010000100111111000000000
+00100000001110100101001001100100
+00100000010000000101001011000001
+01101000000000010000001001101111
+11100000101000010000000000000000
+00011000000000000111111000000001
+11100000101000010000000000000000
+00100000011000000000000000000000
+01101000000000010000001001110101
+00100000001110100010101010001100
+00100000010000000101001011001110
+01101000000000010000001001110101
+11100000101000010000000000000000
+01101000000000010100001001001000
+11100000101000010000000000000000
+00100000011000000000000000000000
+01101000000000010000001001100110
+00100000001110100100110111111100
+01000111000011011100000000100011
+01101000000000001000001001101000
+11000000000000001101000011111001
+11000000001010000100110111101000
+11000000001010001100110111110101
+11000000001010010100110111110011
+11000000001010011100110111110011
+00100000001000000100110111111100
+01000111000011100100000000100011
+00100000010000000101001010111000
+00011000000000000010010000000000
+00100000010000000101001011000011
+00011111111000100000101000000000
+01101000000000010000001001100110
+00011111111000100010011000000000
+01101000000000010000001001100100
+10011000000000000000110000000000
+00100000010000000101000100001000
+00011010011000001010011111111100
+00100100001000101101000100000010
+00011010010000100000010000000000
+00100000010000000101000011011110
+00100000001000000100110111111100
+11101000110000001000000000000000
+11000000000000010101000100010011
+11000000000000001101000100010110
+11000000000000011101000100100000
+11000000000000101101000101011100
+11000000000000100101000110001110
+11000000000000111101001000010011
+11000000000000110101000111100001
+11000000000001000101000001010000
+11000000000001010100111000111010
+00100000001000000101001000101110
+00100000010000000111111010101000
+00100000010000000111111010101101
+00100000001000000100111001010001
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000001000000000000000
+00011010001000001010001111111111
+00100100001000101101000100011100
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+11101000110000010000000000000000
+00011111111000100001011000000000
+11101000110000010000000000000000
+00011111111000100000010000000000
+11101000110000010000000000000000
+00011111111001100111110000000000
+00100000001000101101000100110010
+11000000000000010101000100101110
+11000000000000100101000100101110
+00100000001000000101000100110000
+01110000000010101001100100010110
+00100000010000000111110110000110
+11101000110000010000000000000000
+00100000001000000101000101011001
+00100000010000000111111010101000
+01000111000011101100000000100011
+01011000000000000000000001010000
+10011000010001100111110000000000
+00100000001000101101000101000001
+01011000000000000000000001010001
+10011000010001100111110000000000
+00100000001000101101000101000111
+01011000000000000000000001010011
+10011000010001100111110000000000
+00100000001000101101000101010011
+01011000000000000000000001010010
+10011000010001100111110000000000
+00100000001000101101000101001101
+00100000001000000101000101011001
+00011001011000100111111000000000
+01100000000000010100001001001000
+01101000000000001100001001010000
+01111001001000000111111000000001
+01100000000000001100001001010000
+00100000001000000101000101011000
+00011001011000100111111000000000
+01100000000000010100001001001010
+01101000000000001100001001010001
+01111001001000000111111000000001
+01100000000000001100001001010001
+00100000001000000101000101011000
+00011001011000100111111000000000
+01100000000000010100001001001100
+01101000000000001100001001010010
+01111001001000000111111000000001
+01100000000000001100001001010010
+00100000001000000101000101011000
+00011001011000100111111000000000
+01100000000000010100001001001110
+01101000000000001100001001010011
+01111001001000000111111000000001
+01100000000000001100001001010011
+00100000010000000111111010101101
+00011010011000100111111000000000
+10011010001001100010011000000000
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000010000000000000000
+00011111111000100001011000000000
+11101000110000010000000000000000
+11101000110000010000000000000000
+00100100001110100101000110001000
+00100000010000000111111010101000
+00011001011000100000010000000000
+01000111000011110100000000100011
+01011000000000000000000001010000
+10011000010001100111110000000000
+00100000001000101101000101110110
+01011000000000000000000001010001
+10011000010001100111110000000000
+00100000001000101101000101111010
+01011000000000000000000001010010
+10011000010001100111110000000000
+00100000001000101101000101111110
+01011000000000000000000001010011
+10011000010001100111110000000000
+00100000001000101101000110000010
+01101000000000001100001001010000
+01111001001000000111111000000101
+01100000000000001100001001010000
+00100000011000000000000000000000
+01101000000000001100001001010001
+01111001001000000111111000000101
+01100000000000001100001001010001
+00100000011000000000000000000000
+01101000000000001100001001010010
+01111001001000000111111000000101
+01100000000000001100001001010010
+00100000011000000000000000000000
+01101000000000001100001001010011
+01111001001000000111111000000101
+01100000000000001100001001010011
+01110000000010101001100100000110
+00100000001000000111110110000110
+00100000010000000111111010101101
+00011010001000001010001111111010
+00100000001000101101000110001101
+00011000110000001000110000000001
+00011010001000001010001111111111
+00100000001000000101000110001001
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000010000000000000000
+00011000110000001000110000000010
+00011111111000100000010000000000
+01011000000000000000000000000101
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+00011010001000001010001000000010
+00011010001000100111111000000000
+11100000101000010000000000000000
+00100000010000000111111010101000
+01000111000011111100000000100011
+01011000000000000000000001010000
+10011000010001100111110000000000
+00100000001000101101000110101101
+01011000000000000000000001010001
+10011000010001100111110000000000
+00100000001000101101000110111110
+01011000000000000000000001010010
+10011000010001100111110000000000
+00100000001000101101000111000100
+01011000000000000000000001010011
+10011000010001100111110000000000
+00100000001000101101000111001010
+00100000001000000101000111001111
+01101000000000001100001001010000
+01111001001000000111111000000100
+01111001001000000111111000000011
+01100000000000001100001001010000
+11000010100000010101000110111011
+01101000000010001000001001111111
+01111001001000000000010000000110
+01100000000010001000001001111111
+00011000111000100111111000000000
+00011111111000001111111000000001
+01100000000000001000001010000001
+01101000000000001100001001010000
+01111001001000000111111000000010
+01100000000000001100001001010000
+01101000000000010100001001001000
+01100000000000010000001010000010
+00100000001000000101000111001111
+01101000000000001100001001010001
+01111001001000000111111000000100
+01111001001000000111111000000011
+01100000000000001100001001010001
+01101000000000010100001001001010
+00100000001000000101000111001111
+01101000000000001100001001010010
+01111001001000000111111000000100
+01111001001000000111111000000011
+01100000000000001100001001010010
+01101000000000010100001001001100
+00100000001000000101000111001111
+01101000000000001100001001010011
+01111001001000000111111000000100
+01111001001000000111111000000011
+01100000000000001100001001010011
+01101000000000010100001001001110
+00011111111000100001011000000000
+00100000010000000111111010101101
+00011001011000100111111000000000
+11100000101000010000000000000000
+00011000000000000111111000000000
+11100000101000010000000000000000
+00011000000000000111111000000000
+11100000101000010000000000000000
+00011000000000000111111000001010
+10011010010000001010010000000000
+00011010001000001010001111111010
+00100000001000101101000111100000
+11101000110000001000000000000000
+11100000101000001000000000000000
+00011010010000001010010000000001
+00011010001000001010001111111111
+00100000001000000101000111011010
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+00011010011000100111111000000000
+10011010001001100010011000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+11101000110000010000000000000000
+00011111111000100001011000000000
+00100000010000000111111010101000
+01000111000100000100000000100100
+01011000000000000000000001010000
+00011010001000100000010000000000
+10011000010001100111110000000000
+00100000001000101101000111111010
+01011000000000000000000001010010
+00011010001000100000010000000000
+10011000010001100111110000000000
+00100000001000101101000111111111
+01011000000000000000000001010011
+00011010001000100000010000000000
+10011000010001100111110000000000
+00100000001000101101001000000001
+00100000001000000101001000000011
+01011000000000000000000000000000
+01100000000000010000001001110101
+01100000000000010100001001001000
+01100000000000001100001001010000
+00100000001000000101001000000101
+00100000010000000101000001111001
+00100000001000000101001000000101
+00100000010000000101000001111111
+00100000001000000101001000000101
+01011000000000000000000000000000
+01100000000000010000001001111011
+00100000010000000111111010101101
+01011000000000000000000000000111
+11100000101000001000000000000000
+00011000111000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000000000100
+11100000101000010000000000000000
+00011010001000100111111000000000
+11100000101000010000000000000000
+00011001011000100111111000000000
+11100000101000010000000000000000
+00011000000000000111111000001000
+10011010010000001010010000000000
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000100000111000000000
+11101000110000010000000000000000
+00011111111000100010001000000000
+11101000110000010000000000000000
+00011111111000100001011000000000
+11101000110000010000000000000000
+00011111111000100000010000000000
+00100000010000000111111010101000
+01000111000100001100000000100100
+01101000000000001100001001010101
+10101000111000011111111000000000
+00100100001000001101001000101010
+01011000000000000000000001010000
+10011000010001100111110000000000
+00100000001000101101001000100111
+01011000000000000000000001010001
+10011000010001100111110000000000
+00100000001000101101001000101010
+00100000001000000101001000101010
+01110000010000100100100000000000
+01110000010000100101000000000000
+00100000001000000101001000101010
+00100000010000000111111010101101
+00011010011000100111111000000000
+10011010001001100010011000000000
+00100000011000000000000000000000
+01011000000000000000000000000001
+11100000101000001000000000000000
+11101000110000001000000000000000
+11100000101000001000000000000000
+01011000000000000000000000000010
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000010000000000000000
+01011000000000000000000000000110
+10011010010000001010010000000000
+00011000000000000010011000000100
+00100000011000000000000000000000
+01101000000000001100001001010101
+00011111111000001111111000000001
+11000000100000000101001000111110
+00011111111000001111111000000001
+01100000000000001100001001010101
+00100000011000000000000000000000
+01000111000100010100000000100100
+11011010010000000000000000000000
+00100000010000000101001001101110
+00100100001110100010101010001100
+00100000010000000101001001111110
+11011010010000000001100000000000
+11011000111000000000000000000000
+01101000000010001100001001010110
+10101000010011111111111111111111
+00100000001000001101001001001111
+00100000010000000101001010100000
+00011001011001100111110000000000
+00100000001000010101001001001111
+00100000010000000101001010001000
+00100000001000000101001001010101
+00011010010000001010010010000000
+00011000111000001000111000000001
+01011000000000000000000000001000
+10011000111001100111110000000000
+00100000001000010101001001000111
+11011010010000000000000000000000
+00011010010000100111111000000000
+00100000001110100010101010001100
+00100000011000000000000000000000
+01000111000100011100000000100100
+00100000010000000101001001110111
+00011000110000001000110000000001
+11101000110000010000000000000000
+00100000011000000000000000000000
+01000111000100100100000000100100
+00100000010000000101001001110111
+00011000110000100000101000000000
+00011000110000100000010000000000
+01011000000000000000000000000000
+11100000101000011000000000000000
+00100000011000000000000000000000
+01000111000100101100000000100100
+00100000010000000101001001110100
+00100000001110100010101010001100
+01101000000000011100001001011101
+01100000000000011100001001100000
+01101000000000011100001001011010
+01100000000000011100001001011101
+01101000000000011100001001010111
+01100000000000011100001001011010
+00100000011000000000000000000000
+01000111000100110100000000100100
+01101000000000011100001001010111
+00100000011000000000000000000000
+01000111000100111100000000100100
+01101000000000011100001001011010
+00100000011000000000000000000000
+01000111000101000100000000100101
+01101000000000011100001001100000
+00100000011000000000000000000000
+00100000010000000101001001110100
+00100000001110100010101010001100
+11011000110000000100001001010111
+11101000110000011000000000000000
+00100000001110100101001001111010
+00011000110000001000110111111101
+00100000011000000000000000000000
+01000111000101001100000000100101
+11011111001000000000000000000100
+11011000110000000100001001010111
+11011000010000000000000000000000
+11101000110000011000000000000000
+00011111111000010111111011111111
+10011000010000011000010000000000
+11000010000000000101001010000010
+01100000000010001100001001010110
+00100000011000000000000000000000
+01000111000101010100000000100101
+00100000010000000101001001101110
+00100100001110100010101010001100
+00100000010000000101001001110100
+00100000001110100101001010010101
+01101000000000011100001001011010
+01100000000000011100001001010111
+11101000110000011000000000000000
+11100000101000011000000000000000
+11101000110000011000000000000000
+11100000101000011000000000000000
+01011000000000000000000000000000
+11100000101000011000000000000000
+11011000010000000000000000000000
+00011001011000100111111000000000
+10011000111000001111111000000000
+11111001001000000000010000000000
+00011000111000001000111000000001
+10011000111001100111110000000000
+00100100001000101101001010011000
+00011010010011010111111000000000
+10011000010000011111111000000000
+01100000000000011100001001100000
+00100000011000000000000000000000
+01000111000101011100000000100101
+00100000010000000101001001111110
+00011000111000100010011000000000
+11011000010000000000000000000000
+11011001011000000000000000000000
+00011000111000100111111000000000
+11000000000001000101001010110000
+01101000000000001100001001010110
+10101111111011111111111111111111
+00100000001000001101001010110000
+00011000010000001000010010000000
+00011000111000001000111000000001
+00011010001000100111111000000000
+10011000010001100111110000000000
+00100000001000101101001010110000
+00100000001000010101001010100101
+00011000010000100111111000000000
+10011010001001100111110000000000
+00100100001000010101001010110110
+00011000111000100111111000000000
+00011010011000100000010000000000
+10011000010001100001011000000000
+00011010011000100000111000000000
+00100000011000000000000000000000
+01000111000101100100000000100101
+11011010001000000000000001111111
+00100000010000000101001001000000
+01100000000000010000001001101011
+00011111111000001111111000000100
+01100000000000010000001001101101
+01011000000000000000000000000000
+01100000000000010000001001101111
+00100000011000000000000000000000
+01101000000000010000001001101011
+00100000001000000101001011100010
+01101000000000010000001001101101
+00100000001000000101001011100010
+01000111000101101100000000100101
+11011010001000000000000011111010
+00100000010000000101001001000000
+01100000000000010000001001110001
+00011111111000001111111000000100
+01100000000000010000001001110011
+01011000000000000000000000000000
+01100000000000010000001001110101
+00100000011000000000000000000000
+01101000000000010000001001110001
+00100000001000000101001011100010
+01101000000000010000001001110011
+00100000001000000101001011100010
+01000111000101110100000000100101
+00100000010000000111111001111100
+01110000000000101000010000000001
+00100000010000000101001001101110
+00100100011110100000000000000000
+11011010001000000000000001111111
+00100000010000000101001001000000
+01100000000000010000001001110111
+00011111111000001111111000000100
+01100000000000010000001001111001
+01011000000000000000000000000000
+01100000000000010000001001111011
+01110000000000101000010000000000
+00100000001000000111111010001100
+01101000000000010000001001110111
+00100000001000000101001011100010
+00100000001110100010101010001100
+00011111111000100000101000000000
+00100000011000000000000000000000
+01000111000101111100000000100101
+11011010010000000000000000000000
+11011010001000000100001001010111
+00011010001000001010001111111110
+00011010001000001010001000000010
+01011000000000000100001001100011
+10011010001001100111110000000000
+00100000001000101101001011110101
+11101010001000001000000000000000
+00011010001000001010001000000001
+00100000001110100101001011101001
+11101010001010010000000000000000
+11101000010000010000000000000000
+10011010010000001010010000000000
+00011010010000001010010000000100
+00100000001000000101001011101001
+00011010010000100111111000000000
+00100000011000000000000000000000
+11011000111000000000000000001100
+00100000001000000010110000110010
+11011000111000000000000000001100
+00100000001000000010110000110110
+01000111000110000100000000100110
+00100000010000000101001001111110
+01101000000000001100001001010110
+00100000011110100000000000000000
+00100000010000000101001011100101
+11011000010000000000000100000000
+10011000010001100111110000000000
+00100000001000010101001011110111
+00100000010000000101001011111001
+11011000101000000100001001100011
+11011010001000000100001001010111
+01011000000000000100001001100011
+10011010001001100111110000000000
+00100000011000101000000000000000
+11101010001000001000000000000000
+00011010001000001010001000000001
+00100100001110100101001100001111
+11100000101000010000000000000000
+00011010001000001010001000000010
+00100000001000000101001100000110
+11101010001000010000000000000000
+00011010001000001010001000000010
+00011111111000100000110000000000
+11101000110000010000000000000000
+11100000101000010000000000000000
+00011111111000100111001000000000
+00011111001000001111001000000010
+00100000010000000111111100000001
+00100000001000000101001100000110
+01000111000110001100000000100110
+00100000010000000101001001111110
+01101000000000001100001001010110
+00100000011110100000000000000000
+11011010001000000100001001011000
+00011010001000001010001111111101
+11011000110000000100001001100011
+00011010001000001010001000000011
+01011000000000000100001001100100
+10011010001001100111110000000000
+00100000011000101000000000000000
+11101000110000010000000000000000
+00100000001110100101001100011111
+00011111111000001111111000000100
+00011111111000100111001000000000
+00011000110000100010010000000000
+11101010001000010000000000000000
+00011111111000100000101000000000
+00011010010000100000110000000000
+00011000110000001000110111111110
+00100000010000000111111100000001
+00100000001000000101001100011111
+01000111000110010100000000100110
+01111000010101011111110000000000
+01110000000001000101010100000001
+01110000000001000011111100000011
+01110000000001000101011000000001
+01011111111111111111111111111111
+01100000000000010000010001011001
+00011000000000000111111000000000
+01100000000000001000010001010111
+01100000000000001000010001100010
+01100000000000011100000101101001
+01100000000000011100000101101100
+01100000000000101100010000000011
+01111001001000000111111000100111
+01100000000000101100010000001000
+01110000010000111101110000000001
+01110000010000111101110100000000
+00100000001000000101011011101101
+01000111000110011100000000100110
+01111000001101001111110000000000
+01110000000001000100000000000011
+01110000000001000111100000000001
+01110000010001000101101000000001
+01011000000000001111111111111111
+01100000000000010100010001011100
+00011000000000000111111000000000
+01100000000000101100010000001000
+01111001001000000111111000100111
+01100000000000101100010000000011
+00100000001000000101001100101110
+01000111000110100100000000100110
+01111000010101001111110000000000
+01011000000000000000000000010111
+01100000000000010100010010101000
+01110000000001000100000000000001
+01110000010000110110111000000000
+01110000000000001010000000000000
+01110000010001001100010000000000
+01110000010001001100010100000000
+01101000000000010000010001101101
+01100000000000010100010010111010
+01101000000000010000010001000001
+00011111111011111111111000000101
+00011111111100011111111000000000
+01100000000000010000010001101101
+00100000001000000101001100101110
+00100000010000000101001111000100
+00100000010000000101010111101000
+00100000010000000101011011110000
+00100000001000000101001111001110
+01000111000110101100000000100110
+00100000010000000101001111000100
+00100000010000000011001011110100
+01101000000000001000010001000000
+11000000000000011101001101100110
+00100000001000000101001101111010
+01000111000110110100000000100110
+01111000001101001111110000000000
+00100000010000000101011011100100
+00100000001000010101001101110111
+00100000010000000010110001101100
+00100000010000000101010000010011
+00100000010000000101011000011110
+01111000010101101111110000000000
+00100000010000000101010010111111
+00100100011101101000000000000000
+01000111000110111100000000100110
+01101000000000001000000000000101
+00011111111000001111111000000001
+01100000000000001000000000000101
+00100000010000000101010110101010
+01111000010101001111110000000000
+00100000011000000000000000000000
+00100000010000000101001110101001
+01111000010101001111110000000000
+00100000011000000000000000000000
+01000111000111000100000000100111
+01110000010001010000111100000000
+00100000010000000111101010101111
+00100000010000000101110000011000
+01111000010101110111110000000000
+00100000010000000101011011100100
+00100000001000010101001110101001
+00100000010000000010110001101100
+00100000010000000101010000010011
+00100000010000000101010010001001
+00100100001011000101001110011011
+00100000010000000101001110110111
+00100000001101101101001110001000
+00100000001000000101001110010101
+01000111000111001100000000100111
+01101000000000001100010100001111
+00011111111000001111111000000001
+01100000000000001100010100001111
+11000000000001100101001110010101
+00100000010000000101010110101010
+00100000010000000101011000011110
+00100000010000000101010011000111
+00100000010000000101011001111110
+01101000000000010100000111111011
+00100000010000000111111110011100
+00100000010000000101001110100000
+00100000001101000101001110100100
+01000111000111010100000000100111
+00100000010000000101101111100100
+00100000010000000101101111011011
+00100000010000000111110110011100
+01101000000000001000010001100010
+11000010100000011101001110101001
+01000111000111011100000000100111
+00100000010000000101011111110100
+00100000010000000101010110011101
+00100000010000000101010101110101
+00100000001000000010100001000001
+01111000010101000111110000000000
+11000101000101010111111111100111
+11000101000101001111111111100111
+00100000011000000000000000000000
+01000111000111100100000000100111
+01111000001101110111110000000000
+00100000010000000101010011000001
+00100000001101101101001110001000
+00100000001000000101001110010101
+01000111000111101100000000100111
+00100000010000000101001110101111
+00100000010000000011001110110100
+00100000010000000111101001110111
+01110000000010101001100100010101
+00100000001000000111110110000110
+01011000000000000000000000000000
+01100000000001001100010011111111
+01110000000001000101010100000000
+01110000000001000100000000000000
+01110000000001000011111100000000
+01110000010001001100010100000000
+01110000010001001100010000000000
+00100000011000000000000000000000
+01000111000111110100000000100111
+01101000000000001000000000000101
+00011111111000001111111000000001
+01100000000000001000000000000101
+01101000000000001000010000111111
+11000011100000011000000000000000
+01111001001000000111111000000011
+01100000000000001000010000111111
+01101000000000010100010010111010
+01100000000000010000010001101101
+01011000000000000000000000000000
+01100000000000100100010011100101
+00100000011000000000000000000000
+01000111000111111100000000100111
+01110000100010010000111100110110
+01110000100010010000101101011111
+01111000001110110111110000000000
+01110000100010010001010000000111
+00100000010000000010110001101100
+01101000000000001100000111100000
+00100000011110100000000000000000
+01110000100010010000101010111000
+00100000011000000000000000000000
+01000111001000000100000000101000
+01110000100010010000111100101110
+01110000100010010000101111111111
+01111000010110110111110000000000
+01110000100010010001010000000011
+11011011011000000000000000000000
+00100000011000000000000000000000
+01111000010001001111110000000000
+01111000010000111111110000000000
+01101000000000011000010001100111
+10011000000000000001111000000000
+01101000000000001000000000010110
+00011111111011011000010000000000
+01111001001000000000010000000001
+00011000010000110001110000000000
+00100000011000000000000000000000
+00100000010000000101001111100110
+00100000010000000010100100011111
+01011000000000000000010100000000
+00100000010000000010101010001111
+00100000001000000010100100100100
+00100000001101101010100100111001
+00100000010000000101001111100110
+00100000001000000010100100110011
+01000111001000001100000000101000
+00100000010000000010100100011000
+01101000000000001000010010001100
+00100100001110100101001111111001
+01101000000000001000000000010110
+00011111111001100111110000100100
+00100000001000010101001111110011
+00011000000000000000010000000000
+11000001000100101000000000000000
+00011000000000000000010000011000
+11000001000100110000000000000000
+00011000000000000000010001001110
+00100000011000000000000000000000
+00011111111001100111110000001010
+00100000001000010101001111110110
+00011111111000001111111000000001
+00011111111000111111111000000000
+00011111111000001000010000000010
+00100000011000000000000000000000
+01101000000000001000000000010110
+00011111111000111000010000000000
+00100000011000000000000000000000
+11011000010000000000000111110100
+00100000011110100000000000000000
+11011000010000000000000011111010
+11000001000000001000000000000000
+11011000010000000000000010010110
+11000001000000010000000000000000
+11011000010000000000000001100100
+11000001000000011000000000000000
+11011000010000000000000001001011
+11000001000000100000000000000000
+11011000010000000000000000110010
+11000001000000101000000000000000
+11011000010000000000000000101000
+11000001000000110000000000000000
+11011000010000000000000000010100
+00100000011000000000000000000000
+01011000100011101000100110111110
+00011111111011010111111000000000
+00011111111000011111111011010110
+10011000000000000001001000000000
+01011000010101010101010101010101
+01100000000000011000010001100111
+00100000011000000000000000000000
+01000111001000010100000000101000
+01111000001010000111110000000000
+01101000000000100000010001100011
+10011000000000000001001000000000
+00100000010000000101010001100110
+01011000000000000000001000000000
+00100000001101001101010000011100
+01101000000000010000010001001101
+00011111111000110111111000000000
+11011000010000000000010100000000
+10011000010000001111111000000000
+00100000010000000010101000100100
+00011011010000100111111000000000
+01100000000000110000010010010001
+00100000011000000000000000000000
+01000111001000011100000000101000
+01101000000000001000000000010110
+11000000000100101101010000101000
+11000000000100110101010000101110
+11000000000100111101010000110100
+00100000001000000101010000110100
+01101000000010001100010010001101
+00101000010011111111111000000001
+00100000001000001101010000111111
+00101000010011111111111000000010
+00100000001000001101010001000100
+00100000001000000101010000111010
+01101000000010001100010010001101
+00101000010011111111111000000010
+00100000001000001101010001000100
+00101000010011111111111000000000
+00100000001000001101010000111010
+00100000001000000101010000111111
+01101000000010001100010010001101
+00101000010011111111111000000000
+00100000001000001101010000111010
+00101000010011111111111000000001
+00100000001000001101010000111111
+00100000001000000101010001000100
+01110000000000000001011000100101
+01101000000000001000101011000010
+01111001001000000111111000000000
+01100000000000001000101011000010
+00100000011000000000000000000000
+01110000000000000001011000100110
+01101000000000001000101011000010
+01111001001000000111111000000001
+01100000000000001000101011000010
+00100000011000000000000000000000
+01110000000000000001011000100111
+01101000000000001000101011000010
+01111001001000000111111000000010
+01100000000000001000101011000010
+00100000011000000000000000000000
+01000111001000100100000000101000
+00011010001000001000110000000001
+11101000110000001000000000000000
+11000100000000000000000000000000
+00011010001000001000101000011010
+11101000101000010000000000000000
+00011111111000001111111000000001
+11100000101000010000000000000000
+00011010001000001000110000011001
+11101000110000001000000000000000
+00011010001000001000101000011000
+11101000101010001000000000000000
+10011000010000001111111000000000
+00011111111001100111110000100100
+00100000001000010101010001011001
+00011111111000001111111111011011
+11100000101000001000000000000000
+00100000011000000000000000000000
+01000111001000101100000000101000
+01101000000000101000010001101111
+00011000000000000000010000000000
+00011000000000000111001000100101
+11000011000000000101010001100001
+00011000010000001000010000000001
+00011111111000110111111000000000
+11000010000000000101010001011111
+00011000010000001111111111111111
+01100000000000001000010001100001
+00100000011000000000000000000000
+01000111001000110100000000101000
+01101000000000001000010001010111
+10011000000000000000111000000000
+01101000000010101000010001101111
+10101000010011111111111111111111
+00100000001000001101010001111100
+01000111001000111100000000101000
+01101000000000001000010001100001
+10011000111001100111111000000000
+00100000001000010101010001110010
+00011111111001100000111111111111
+00100000001000000101010001101100
+00011000111000100111001000000000
+00011000000000000000111000000000
+10101000010011111111111111111111
+00100000001000001101010001110111
+00011111001000001111001000000001
+00011111001000100111111000000000
+00100000001110100101010001111100
+00011000111000001000111000000001
+00011111001000001111001111111111
+00100000001000000101010001110100
+00011000111000100111111000000000
+01100000000000001000000000010110
+00100000011000000000000000000000
+00100000001101001101010010000010
+00110111110000011000001000000000
+00100000011000000000000000000000
+11011001011000000000111010100000
+00110100011100110000001000000000
+00100000011000000000000000000000
+01111000010010000111110000000000
+01101000000000010100001101101100
+00011111111000100001011000000000
+00100000001000000101010010001110
+01000111001001000100000000101001
+01111000001010000111110000000000
+01101000000000010000010001001101
+01101000000010100100010011100101
+10011000010000001001011000000000
+00100000010000000101001111011110
+01000111001001001100000000101001
+00100000010000000101001111010101
+01111000010101101111110000000000
+01111000001001101111110000000000
+01111000001100001111110000000000
+01111000010100000111110000000000
+00011001011000100011011000000000
+00110111110000011000010000000000
+00100000001101110101010010011010
+00011011010000100000010000000000
+01100000000010110000000010011010
+00100100001011000010011001001101
+00100000001101110101010010100001
+11011101001000000000000111100000
+00011100001000100101000000000000
+01101000000000001000010000111111
+11000011000000011101010010100001
+00100000010101011010101100000101
+01000111001001010100000000101001
+00100000010000000010100110111011
+01111000001000111111110000000000
+01111000001001001111110000000000
+00001001100000000000000000001000
+00011001100010010111111000000000
+01100000000000001000001011011001
+00001001100000000000000000001000
+00011001100010010111111000000000
+11100000101000001000000000000000
+00011111111000010111001000111111
+00100000001000101101010010110001
+00001001100000000000000000001000
+00011001100010010111111000000000
+11100000101000001000000000000000
+11000010000000000101010010101101
+01000111001001011100000000101001
+00001001100000000000000000011000
+01111000001010000111110000000000
+11011011011000000000011001100100
+00011111111011110111111000000000
+00011111111100010111111000000000
+11100000101000011000000000000000
+00100000001000110010011001001101
+01111000001101101111110000000000
+01101000000000001000000000010111
+00011111111000001010001000000000
+00100000010000000010100110000001
+01111000010001101111110000000000
+00100000001000000010100100011000
+01000111001001100100000000101001
+00100000010000000101010011001001
+01101000000010001000000000010111
+00100000010000000010100100011111
+00100000010000000010100100100100
+01111000001010000111110000000000
+11011001011000000001010101111100
+00100000001000000101010010001111
+00100000010000000101010011001001
+00100000001000000010011001001101
+01000111001001101100000000101001
+00100000010000000101001111010101
+00100000010000000101001111100011
+00100000001000000101010011001101
+01111001001000000010101000000000
+01111000001011101111110000000000
+01111000001100000111110000000000
+01111000010100001111110000000000
+00100000010000000101010001111111
+00011001001100010111111000000000
+00011111111011001111111000000000
+00011111111100011111111000000000
+00001000000000001000011000101000
+01111000001000111111110000000000
+01111000001001001111110000000000
+01000111001001110100000000101001
+01101000000000001100001111011100
+00001000000000001000011000001000
+11101000110000001000000000000000
+00011111111000010111001000111111
+00001000000000001000011000001000
+00100000001000101101010011100010
+11101000110000001000000000000000
+00001000000000001000011000001000
+11000010000000000101010011011111
+01111000001001000111110000000000
+00001000000000001000011000011000
+01111000010001000111110000000000
+00110111110100111000001000000000
+00100000000000000000000001100100
+01111000010011101111110000000000
+00100000011000000000000000000000
+01000111001001111100000000101001
+01101000000000001100010010000100
+11000000000000001101010011111001
+01101000000000001100010010000101
+00011111111100100111111000000000
+00011111111010111111111000000000
+01100000000000001100001111011100
+01101000000010001100001101101111
+00011000010000001111111000000110
+01100000000000001100001111011101
+01101000000000110100010010100000
+01100000000000110100001111011110
+00011000010000100111001000000000
+11011000110000000100001101110000
+00100000010000000111111011110100
+00100000001000000101010100000100
+01101000000000001100010010000110
+00011111111100100111111000000000
+00011111111010111111111000000000
+00011111111000001111111000000001
+01100000000000001100001111011100
+01011000000000000000000000001100
+01100000000000001100001111011101
+01101000000000110100010010100000
+01100000000000110100001111011110
+01101000000000110100000111010000
+11100000101000110000000000000000
+01000111001010000100000000101010
+01101000000000001000000000000000
+00011111111000001111111000000001
+01100000000000001000000000000000
+11011011011000000000011100001000
+01111000010101101111110000000000
+00100000001000000101010010111111
+01000111001010001100000000101010
+01101000000000001100010010011110
+11000001100000001000000000000000
+01101000000000001000000000000000
+00011111111000001111111000000001
+01100000000000001000000000000000
+11011000010000000000110000000011
+01101000000000001100010010011111
+01111101001110100000010000000110
+00011010001000100111111000000000
+01111101001110100000010000000111
+01100000000010010100001111011100
+01101000000000110100010010100000
+11100000101000110000000000000000
+01101000000000110000010001001111
+11100000101000110000000000000000
+00100000001000000101010010111111
+01000111001010010100000000101010
+11011000010000000000000000000100
+01101000000000001100010010000101
+01111101001110100000010000000110
+01100000000010001100001111011100
+01101000000010001100001110001111
+00011000010000001111111000000110
+01100000000000001100001111011101
+01101000000000110100010010100000
+01100000000000110100001111011110
+11011000110000000100001110010000
+00011000010000100111001000000000
+00100000010000000111111011110100
+00100000010000000101010011000111
+00100000001000000101011100000110
+01000111001010011100000000101010
+00011000000000000111111111111111
+00111000000010000000000000000001
+01100000000000101000010001101111
+00100000010000000101010001011011
+00011000000000000111001000000100
+11011000101000000000010001100011
+00100000010000000110001100001101
+01101000000000010100010010011100
+01100000000000010000010001101101
+00011000000010100111111000000000
+00011111111000010111111000001111
+00011111111001100111110000000100
+00100000001000010101010100110101
+01100000000000001000010001011000
+01100000000000001000011011100110
+01000111001010100100000000101010
+01101000000010010100001101100111
+01100000000010010000010001000001
+00011000010000100010011000000000
+00011100010000001111111000000111
+10011010011001101111110000000000
+00100000010000000111111110000110
+00011000000001110010001000000000
+10011010001001100111111000000000
+10011010011000001111111000000000
+01101000000010010100001101100101
+10011000010000001111111000000000
+01100000000000100000010001000011
+10011100010001100010001000000000
+00011010001000001010001111111010
+11011010010000000010001000000101
+01101000000000001100010010010101
+01111101001110100010010000000110
+01101000000000001100010010001110
+01111101001110100010010000000111
+00011010010000100111111000000000
+01100000000000010100001111011100
+01101000000000110100010010100000
+11100000101000110000000000000000
+01101000000000110000010001001111
+11100000101000110000000000000000
+01101000000000100000010001100011
+11100000101000100000000000000000
+00011000000010100111111000000000
+11100000101000010000000000000000
+00011000000010100111111000000000
+11100000101000001000000000000000
+00011000000000000111111000000010
+11100000101000001000000000000000
+00011010001010110111111000000000
+11100000101000010000000000000000
+00011010011010110111111000000000
+11100000101000010000000000000000
+01000111001010101100000000101010
+01011000000000000000000000000000
+11100000101000010000000000000000
+01101000000000010100010010011100
+11100000101000010000000000000000
+01101000000000101000010001101111
+11100000101000101000000000000000
+01101000000000001000010001011000
+11011000010000000000000010100000
+10011000010000011111111000000000
+11100000101000001000000000000000
+00100000010000000101010011000111
+01011000000000000100001111011100
+00011111111000001000110000010010
+11101000110000011000000000000000
+01100000000000011000010001100111
+00100000011000000000000000000000
+01000111001010110100000000101010
+01111000010101001111110000000000
+00100000001000000101010000001100
+01101000000000001000010000111111
+11000100000000101000000000000000
+01101000000000010000010001011001
+01101000000010010000010001011111
+10011000010001100111111000000000
+00100100011000010000000000000000
+01100000000000010000101010011010
+01000111001010111100000000101010
+01101000000000001000010000111111
+01111001001111111111111000000101
+01111001001111111111111000000011
+01100000000000001000010000111111
+01101000000000100000010001000011
+01101000000010010000010001000001
+01100000000010010000101010100010
+10011000010001100010001000000000
+01000111001011000100000000101011
+01101000000000001100001111010011
+01100000000000001000010001101010
+11101000110010010000000000000000
+11101000110000010000000000000000
+00011111111010111111111000000000
+01100000000000010000010001000001
+00011000010010111000010000000000
+10011000010000001111111000000000
+11101000110010100000000000000000
+01100000000010100000010001101011
+10011010001000001111111000000000
+00011111111000100010100000000000
+01101000000000010000010001000001
+01101000000010010000101010100010
+10011000010001100111111000000000
+01101000000010010000101010011010
+10011000010011111111111000000000
+10011010100000001111111000000000
+01100000000000100000010001000011
+00100000010000000101011100010011
+01101000000000010000010001101101
+01100000000000010100010010111010
+00100000011000000000000000000000
+01000111001011001100000000101011
+01101000000000001000010000111111
+11000100000000110000000000000000
+01101000000000010000010001011001
+01101000000010010000010001011111
+10011000010001100111111000000000
+00100100011000010000000000000000
+01101000000000001000010000111111
+01111001001111111111111000000110
+01100000000000001000010000111111
+01101000000000101100001111001110
+01100000000000101000010001101111
+00100000001000000101010001011011
+01000111001011010100000000101011
+00100000010000000101011011101101
+00100000010000000101010111000000
+01101000000000001000001011011001
+00101111111011111111111000000100
+01111001001000001000000000101010
+00011111111000110111111000000000
+10011000010000101111111000000000
+00101111111011111111111000000010
+01111001001000001000000000001111
+11000110000001111000000000000000
+01101000000000001000001011011010
+00100000001110100101010110111100
+01101000000000001000010000111111
+11000011000000100101010110111100
+00100000010000000111010010001101
+00100000010000000111001111111011
+00100100011110100000000000000000
+01101000000010001000010001010110
+01111001010000000000010000000010
+01100000000010001000010001010110
+00100000011000000000000000000000
+01000111001011011100000000101011
+01101000000010001000010001010110
+00101000010011000000000000000101
+00100000011000001000000000000000
+01101000000000001000001011011001
+00011111111000111111111000000000
+10011000010000101111111000000000
+11000100000000011000000000000000
+01111001001111111000010000000101
+01111001010000000000010000000011
+01100000000010001000010001010110
+00101000010000000000011000000011
+00100100011000001000000000000000
+01101000000000001100001111011110
+11000000000000101101010111010010
+01101000000000001100010011000101
+11000000000000010101010111010110
+00100000011000000000000000000000
+01101000000000001000010000111111
+01111001001000000111111000000100
+01100000000000001000010000111111
+00100000011000000000000000000000
+01000111001011100100000000101011
+01110000010001001100010100000000
+11011111111000000000000000000000
+01100000000000100100010000001101
+01100000000000101100010000000011
+01111001001000000111111000100111
+01100000000000101100010000001000
+01101000000000001000010000111111
+01111001001111111111111000000100
+01100000000000001000010000111111
+00100000011000000000000000000000
+01000111001011101100000000101011
+00100000010000000101010000100010
+00100000010000000101010010000101
+01101000000000001000000000000001
+00011111111000001111111000000001
+01100000000000001000000000000001
+00100000011000000000000000000000
+01000111001011110100000000101011
+01101000000000001100001101101001
+11000001100000001000000000000000
+11011000111000000000000000000010
+00100000010000000111111100010110
+00100100011110100000000000000000
+01101000000000010100001101101010
+01101000000010010100001101101100
+10011000010001100111111000000000
+11011000111000000000000000000010
+00100000010000000111111100001000
+01111000010101001111110000000000
+00100000010000000101010101110010
+00100000010000000101010111100001
+00100100011101101000000000000000
+01000111001011111100000000101011
+01101000000000110000001011011011
+01100000000000110000010001001111
+01101000000000001000000000000010
+00011111111000001111111000000001
+01100000000000001000000000000010
+00100000010000000101011000001000
+00100000011101001000000000000000
+00100000010000000101010100001011
+00100100011101101000000000000000
+01000111001100000100000000101100
+01101000000000001000000000000100
+00011111111000001111111000000001
+01100000000000001000000000000100
+01101000000001001000001011100001
+01100000000001001000000100000001
+00100000011000000000000000000000
+01000111001100001100000000101100
+01101000000000001000010010011011
+11000001100011011000000000000000
+01101000000000110000010001001111
+01101000000010110100010010001111
+10011000010001100111110000000000
+00100100011000101000000000000000
+00100000010000000010001000111011
+00100100011000101000000000000000
+00100000010000000101010100101011
+00100000010000000101001101000000
+01000111001100010100000000101100
+01110000010000011100111000000000
+01110000000001000111011000000000
+01110000010000110110100100000000
+01110000000001001001101100000000
+00100000001000000010001000100011
+11011010001000000000000000000001
+01101000000000001000001011011001
+11000011100000110000000000000000
+11011010001000000000000000000000
+00100000011000000000000000000000
+01000111001100011100000000101100
+01101000000000001000010001010110
+11000011100000101000000000000000
+00100000010000000101011001000010
+00100000010000000101100001110011
+00100000001110100101011001100100
+11101000110000001000000000000000
+11101000110010001000000000000000
+00011000010000100010001000000000
+10011010001001100111111000000000
+11011000010000000000000000011011
+00100000010000000111111111011101
+00011111111000100000010000000000
+11101000110000001000000000000000
+00011111111000100000001000000000
+00011010001000100111111000000000
+10011000110000001000110000000000
+11011000101000000100001111011110
+00011000010000100111001000000000
+00100000010000000111111100000001
+00100000010000000101011001010100
+00100000010000000101011001100110
+00100000010000000101100001110011
+11101000110000001000000000000000
+00011111111000100010001000000000
+00011000110000100010011000000000
+11101000110010001000000000000000
+00011000010000100010010000000000
+10011010010001100111111000000000
+11011000010000000000000000011011
+00100000010000000111111111011101
+10011010010000001111111000000000
+11100010011000001000000000000000
+10011010001001100111110000000000
+00100100011000101000000000000000
+00100000001000000101100010010110
+00100000010000000101011001001001
+11000110000101001000000000000000
+01101000000000001100010011101001
+11000011000000010101011001010010
+00100000010000000101100001110110
+00100000001110100101011001010010
+00100000001000000101011001010000
+00100000010000000101100001110011
+00100000001110100101011001010010
+11101000110000001000000000000000
+11101000110010001000000000000000
+10011000010001100111111000000000
+00011111111001100111110000011011
+00100000001000010101011001010010
+01111001001000000000000000101001
+00100000011000000000000000000000
+01111001001111111000000000101001
+00100000011000000000000000000000
+00011010001000100111111000000000
+00100000011110100000000000000000
+11011000001000000000000000000001
+00100000011000000000000000000000
+01000111001100100100000000101100
+00011000010000001000010000000001
+00100000010000000101011101101010
+00011000110000001000110111111110
+11101000110000010000000000000000
+11011000010000000010100100000010
+10011000010001100111110000000000
+00100100011000101000000000000000
+00011000110000001000110000000001
+00011000110000100010001000000000
+11101000110000001000000000000000
+00100000011000000000000000000000
+00011000000000000000010000000000
+00011000000000000000001000000001
+01000111001100101100000000101100
+01100000000010001100001111011101
+01101000000010001000010001010110
+01111001001000000000010000000101
+00011000010000010111111011111100
+10011000001000011111111000000000
+01100000000000001000010001010110
+00011111111000010111111000011111
+00101000000011111111111000101001
+01111001001000001111111000000100
+01100000000000001100001111011100
+01101000000000001100001111011100
+00101000001000000000011000000001
+00100100001000001101011001110110
+01101000000000001100001111011101
+00100000011110100000000000000000
+01101000000000001000010000111111
+11000100000000100000000000000000
+00100000010000000111010010001101
+00100000001000000111001111100011
+11011000111000000000000000000000
+00100000001000000010110000110010
+11011000111000000000000000000000
+00100000001000000010110000110110
+01000111001100110100000000101100
+11000110000001111000000000000000
+00100000010000000101100010010000
+00100100011110100000000000000000
+01101000000000001000001011011001
+00011111111000010111111000000011
+01100000000000001100010100001100
+11101000110000001000000000000000
+00011111111000010111111000011111
+01100000000000001100010100001011
+00100000011110100000000000000000
+00011000110000100111111000000000
+01100000000000010100010100001101
+01101000000000001100010100001100
+11000000000000011101110001100100
+00100000010000000101011010011010
+00100100001101000101011001111010
+00100000010000000101011001111100
+01101000000000010100010100001101
+00011111111000100000110000000000
+11101000110000010000000000000000
+01100000000000010100010011111100
+01000111001100111100000000101100
+11101000110000010000000000000000
+11000000000000100101100010101011
+11000000000000110101101011110100
+11000000000000101101101010110110
+00100000011000000000000000000000
+01101000000000001100010100001100
+11000000000000010101011010101001
+11000000000000001101011011000001
+00100000011000000000000000000000
+00100000010000000111111111100111
+11011000010000000000000000000100
+10011111111001100111110000000000
+00100000011000101000000000000000
+11011000010000000000000000000101
+10011111111001100111110000000000
+00100000011000101000000000000000
+11011000010000000000000000000110
+10011111111001100111110000000000
+00100000011000101000000000000000
+00100000001000000111111111101001
+01101000000000010100010100001101
+00011111111000100000110000000000
+11101000110000010000000000000000
+01100000000000010100010011111100
+11101000110000010000000000000000
+00100000010000000101011010011110
+00100100011101000000000000000000
+01101000000010001100010100001011
+01100000000010001100010011111110
+01101000000000010100010011111100
+00011111111000001111111000000100
+10011000010001100111110000000000
+00100000001000101111111111100111
+01101000000000001100010100001011
+00011111111000100111001000000000
+11011000101000000000001100010001
+01101000000000010100010100001101
+00011111111000100000110000000000
+00100000010000000111111100000001
+00100000001000000111111111101001
+00100000010000000111111111100111
+01101000000000001100010011111110
+00100100011110100000000000000000
+00100000001000000111111111101001
+00100000010000000101011010111101
+00100100011101000000000000000000
+01101000000000001100010011111110
+11011000101000000000001100010001
+10011000101000001010001000000000
+01101000000010001100010100001011
+10011000010000001111111000000000
+01100000000000001100010011111110
+01101000000000001100010100001011
+00011111111000100111001000000000
+00011010001000100000101000000000
+01101000000000010100010100001101
+00011111111000100000110000000000
+00100000010000000111111011110100
+01011000000000000000001100010001
+01100000000000010100010100001101
+01101000000000010100010011111100
+00011111111000001111111000000100
+01101000000010001100010011111110
+10011000010001100111110000000000
+00100000001000101111111111100111
+00100000001000000111111111101001
+00100000010000000111111010100101
+11011000101000000100010001011110
+01101000000000010100010011111100
+00011111111000001111111111111011
+11100000101000001000000000000000
+00011111111000100111001000000000
+00100000010000000111111010011111
+00100000001000000111111011110100
+00100000010000000111111010100101
+11011000101000000100010001110001
+00100000001000000101011011011001
+01101000000000010100000111111001
+00100000001000000111111110011100
+01101000000010100000010001011011
+00100000010000000010101001111011
+10011000010001100001011000000000
+00011001011000100111111000000000
+01101000000010010000010001101101
+00011000010100100000010000000000
+00011000010000111000010000000000
+10011000010001100111111000000000
+00100000011000000000000000000000
+00100000010000000010101001111011
+01100000000000100000010001011011
+00100000011000000000000000000000
+01110000000000000001011000100100
+01110000000010101100001000000000
+01000111001101000100000000101101
+01101000000000001100001101101110
+00100000011110100000000000000000
+11011000111000000000000000000000
+00100000010000000111111100010110
+00100100011110100000000000000000
+01000111001101001100000000101101
+01111000010101001111110000000000
+01111000001010000111110000000000
+00100000010000000101010101110010
+00100000010000000101010000100010
+00100000010000000101010011101001
+00100100001101101101011100000110
+01101000000000001000000000000011
+00011111111000001111111000000001
+01100000000000001000000000000011
+01101000000000001000001011011001
+00011111111000010111111000001111
+11000000000000011101010100011100
+11000000000000101101011100101000
+01000111001101010100000000101101
+00011000000010100111111000000000
+11011000010000000000000111111111
+10011000010000010111111000000000
+00011111111000001111111011111010
+00100000010000000011110010111110
+01101000000000001000101011000010
+01101000000010001100010010001101
+10011000010001100111110000000000
+00100100001000101101011011110010
+11011000111000000000000000000000
+01101000000000010100010010000010
+00100000001000000111111100001000
+01000111001101011100000000101101
+01101000000000001000010001110110
+00100000010000000101001111111100
+01101000000000010000010001000001
+10011000010011111111111000000000
+11011000010000000000000101110111
+10011000010011111111111000000000
+11011000010000011000011010100000
+10011000010001101111110000000000
+01101000000000001000010001101010
+11011000010000000100111000100000
+10011000010011111111111000000000
+10011000010000001111111000000000
+01100000000000100100010011100101
+01000111001101100100000000101101
+01101000000000010100000011000001
+00100000010000000111111110000110
+00011000000001111000010000000000
+10011000010000001111111000000000
+01100000000000010000010001001101
+00100000011000000000000000000000
+01000111001101101100000000101101
+01101000000000110000001011100001
+01101000000010110100010010100000
+10011000010001100111110000000000
+00100100011000101000000000000000
+00100000010000000101011000011001
+00011010001000100111111000000000
+01100000000000001100010010001110
+01101000000000111000001011101110
+01100000000000111000000100000001
+11101000110001000000000000000000
+11100000101001000000000000000000
+01101000000000110000001011011011
+01100000000000110000010001001111
+00011000110000001000110000000110
+11101000110001000000000000000000
+01100000000001000000010001100011
+11101000110010010000000000000000
+01000111001101110100000000101101
+00011000010010111000010000000000
+11101000110000010000000000000000
+00011111111010111111111000000000
+01100000000000010000010001000001
+01100000000000100000010001000011
+10011000010001100111111000000000
+00011111111000001101000111111110
+11101000110001001000000000000000
+01100000000001001000010001101011
+01000111001101111100000000101101
+11101000110000001000000000000000
+00011111111100011000010000000000
+00011000010000110000010000000000
+01100000000010001000010001110110
+00011111111000010111111000011111
+01100000000000001000010001011000
+00100000010000000101011100010011
+00100000010000000101010001011011
+00100000010000000101001101001100
+00100000010000000010001000111011
+00100100011000101000000000000000
+01000111001110000100000000101110
+00100000010000000010100001000001
+00100000010000000101101011010011
+01110000000010101001100100010100
+00100000010000000111110110000110
+00100000001000000010001000100011
+01000111001110001100000000101110
+01101000000000010100010001011010
+10011000000000000010010000000000
+01101000000000010100010001011100
+10011000000000000010011000000000
+01101000000000010100010010111100
+10011000000000000000110000000000
+01111000001101000111110000000000
+00100000011000000000000000000000
+11101000110000010000000000000000
+00100000011110100000000000000000
+10011010010001100111110000000000
+00100100011000010000000000000000
+10011010011001100111110000000000
+00100000011000101000000000000000
+00100000001000010101011101101000
+00011000000000000111110000000001
+00100000011000000000000000000000
+00011000000000000111111000000000
+00100000011000000000000000000000
+00100000010000000101011101101101
+00100000001000101101011101111001
+00100000011000000000000000000000
+01000111001110010100000000101110
+01101000000000010100010010111100
+10011000000000000000110000000000
+11101000110000010000000000000000
+00100000011110100000000000000000
+10011000010001100111110000000000
+00100000011000101000000000000000
+11101000110000001000000000000000
+10011000110000001000110000000000
+11101000110000001000000000000000
+10011000110000001000110000000000
+00100000001000000101011101110000
+11101000110000001000000000000000
+10011000110000001000110000000000
+00100000011000000000000000000000
+01000111001110011100000000101110
+01101000000000010100010010111100
+10011000000000000000110000000000
+11101000110000010000000000000000
+00100000011110100000000000000000
+11101000110000001000000000000000
+10011000110000001000110000000000
+00011000110000001000110111111110
+11101000110000010000000000000000
+10011000010001100111110000000000
+00100000011000101000000000000000
+11101000110000001000000000000000
+10011000110000001000110000000000
+00100000001000000101011101111111
+01101000000000010000010010011100
+00100000001000000101011110001110
+01000111001110100100000000101110
+01101000000000010100010010111100
+10011000000000000000110000000000
+00011000010000100010001000000000
+11101000110000010000000000000000
+00100000001110100101011110011001
+10011010001001100111110000000000
+00100000001000101101011110011010
+11101000110000001000000000000000
+10011000110000001000110000000000
+11101000110000001000000000000000
+10011000110000001000110000000000
+00100000001000000101011110010000
+00100000001000000111111111101111
+11101000110000001000000000000000
+01100000000000001000010010100010
+00011111111000100111001000000000
+11011000101000000000010010100011
+00100000010000000111111011110100
+11101000110000001000000000000000
+01100000000000001000010010110011
+00100000010000000111111010100101
+00100000001000000111111111110001
+01000111001110101100000000101110
+00100000010000000101011110100110
+00100000001000000101011110111000
+11011000010000000010101000000000
+00100000010000000101011101111100
+00100000011110100000000000000000
+11101000110000001000000000000000
+00011000110000100000101000000000
+01101000000010001100001110101111
+00011000010000100111001000000000
+10011000010001100111110000000000
+00100100001000010101011110110101
+10011000010001100000010000000000
+11011000110000000100001110110000
+00100000010000000111111100000001
+00011000010000100111001000000000
+00100100010000101101011111110000
+00100000011000000000000000000000
+00011111111000100111001000000000
+11011000110000000100001110110000
+00100000001000000111111011110100
+11011010011000000100001110001111
+11011010001000000100001101110000
+00100000010000000101011111000101
+01011000000000000000000000000000
+01111001001101000111111000000000
+01100000000000001000101010011010
+11011010011000000100001110101111
+11011010001000000100001110010000
+00100000010000000101011111000101
+00100000011101000000000000000000
+01101000000000001000101010011010
+00100000001110100010101010001100
+00100000011000000000000000000000
+01000111001110110100000000101110
+00100000010000000111111111100111
+00100000010000000111111011011010
+11011010010000000000000000000000
+11011000101000000000101011000011
+00100000010000000101011111011111
+01101000000000001100001110101111
+00011111111000001000010000000001
+10011010010000001010001000000000
+00011010001000001010001000000010
+00011010001001100111110000011111
+00100100001000010101011111011101
+11100000101010001000000000000000
+11011000010000000000000000001001
+11100000101010001000000000000000
+10011000000000000111001000000000
+00100000010000000111111011110100
+00011010001000100010010000000000
+00011010010000100111111000000000
+01100000000000001000101011000010
+11011000110000000000101011000010
+01011111111111111111111111100000
+10011010011000001000101000000000
+00100000001000000111111010111101
+00100000010000000111111111101001
+00100000001000000101011111010111
+11101010001000001000000000000000
+00100000011110100000000000000000
+00011111111000001111111000000001
+11101000110010001000000000000000
+00011000010001100111110000001001
+00100000001000101101011111101110
+10011010010000001010010000000000
+00011010001000100000110000000000
+10011000000000000111001000000000
+00100000010000000111111011110100
+00011000110000100010001000000000
+00011010001000100111111000000000
+10011010011001100111110000000000
+00100000011000010000000000000000
+00100000001000000101011111011111
+10011010001000001010001000000000
+00100000001000000101011111101010
+01011000000000000000000000100000
+11100000101000001000000000000000
+11000010000000000101011111110000
+00100000011000000000000000000000
+01000111001110111100000000101110
+01111000010101011111110000000000
+00100000001101110101011111111000
+00100100001101101101100000000110
+00100000010000000010101111001011
+01101000000000010100000011000001
+01100000000000010000010001001101
+00100100001101101010101111011110
+11000101000001111010101111011110
+01101000000000001100010100001011
+00100100001110100010101111011110
+01101000000000001100001111011101
+00100100001110100010101111011110
+01101000000000001100010011101001
+11000010100000101010101111011110
+01101000000000001000010000111111
+11000010100000101010101111011110
+00100000001000000010101111000000
+01101000000010010100000011000001
+00011000010000110000010000000000
+01101000000000010000010001001101
+10011000010000001111111000000000
+01100000000000010000010001001101
+00100000001000000010101111010110
+11011000111000000000000000000000
+00100000001000000101100000100100
+11011000111000000000000000000000
+00100000001000000101100000101000
+11011000111000000000000000000001
+00100000001000000101100000100100
+11011000111000000000000000000001
+00100000001000000101100000101000
+11011000111000000000000000000010
+00100000001000000101100000100100
+11011000111000000000000000000010
+00100000001000000101100000101000
+11011000111000000000000000000011
+00100000001000000101100000100100
+11011000111000000000000000000011
+00100000001000000101100000101000
+11011000111000000000000000000100
+00100000001000000101100000100100
+11011000111000000000000000000100
+00100000001000000101100000101000
+11011000111000000000000000000101
+00100000001000000101100000100100
+11011000111000000000000000000101
+00100000001000000101100000101000
+01101000000000001100010011101001
+11111001001000000111111000000000
+01100000000000001100010011101001
+00100000011000000000000000000000
+01101000000000001100010011101001
+11111001001111111111111000000000
+01100000000000001100010011101001
+00100000011000000000000000000000
+01011000000100010010001000110011
+01100000000000011100010011101010
+01011000010001000101010101100110
+11100000101000011000000000000000
+01011000011101111000100010011001
+11100000101000011000000000000000
+01011000000000000001000100100010
+11100000101000011000000000000000
+01011000001100110100010001010101
+11100000101000011000000000000000
+01011000000000000000000001100110
+11100000101000001000000000000000
+00100000011000000000000000000000
+01011001000000000000001100000010
+01100000000000100100010001010011
+01011000000000010000000000010000
+01100000000000011100010001010111
+01110000010001001100011000000001
+00100000011000000000000000000000
+11011010001000000000000000000000
+11011000001000000000000000000001
+00100000001000000101100001010000
+11011000001000000000000000000011
+00100000010000000101100001010000
+00011010010000100111111000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+00011000000000000000001000000010
+00011010001000001010001000000100
+00100000010000000101100001010000
+00011010001000001010001111111100
+00011010001000100111111000000000
+11100000101000010000000000000000
+00011010010000100111111000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+00011010001001100111110011110000
+00100100001000010010101010001100
+01101000000000001100010011111111
+11011000010000000000000000000001
+11011111001000000000000000000100
+10011000010000010111110000000000
+00100000001000101101100001011010
+00011000010000111000010000000000
+11000010000000000101100001010101
+00100000001000000010101010001100
+10011000010000101111111000000000
+01100000000000001100010011111111
+00011111001001100111111000000100
+00011111111100100111111000000000
+00011111111100100111111000000000
+11011000010000000001100000000000
+10011000010000001000010000000000
+11011111001000000000000000000000
+11011000110000000100010100000000
+11101000110000010000000000000000
+00100000001110100101100001101001
+00011111001000100111111000000000
+00011111001000001111001000000001
+11000000100000100101100001100011
+00100000001000000010101010001100
+00011000110000001000110111111110
+11100000110010010000000000000000
+00011000010000100000101000000000
+00011010001000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000000000000
+11100000101000001000000000000000
+00011000001000100111111000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+01101000000000010100010100000000
+00011111111000100000110000000000
+00100000011000000000000000000000
+01101000000000010100010100000010
+00011111111000100000110000000000
+00100000011000000000000000000000
+00100000010000000101100001111100
+00011111111000100000110000000000
+00100000011000000000000000000000
+01101000000000010100010100000110
+00100100011110100000000000000000
+01101000000000010100010100000100
+00100100011110100000000000000000
+01101000000000010100010100000010
+00100100011110100000000000000000
+01101000000000010100010100000000
+00100000011000000000000000000000
+00100000010000000101100001110011
+00011000110000001000110000000011
+00100000011000000000000000000000
+00100000010000000101100001110011
+00011000110000001000110000000111
+00100000011000000000000000000000
+00100000010000000101100001111001
+00011000110000001000110000000111
+00100000011000000000000000000000
+00100000010000000101100001111001
+00011000110000001000110000000011
+00100000011000000000000000000000
+01101000000000010100010100000110
+00100000011000000000000000000000
+01101000000000010100010100000100
+00100000011000000000000000000000
+01101000000000010100010100000000
+00100000011000000000000000000000
+01101000000000010100010100000000
+11011000010000000001100000000000
+10011000010001100111111000000000
+00011111111100011111111000000000
+00011111111100011000111000000000
+01101000000000001100010011111111
+11111001001111111111111000000000
+01100000000000001100010011111111
+11011111001000000000000000000000
+00011111001000111111111000000000
+11011000010000000100010100000010
+10011000010000001000010000000000
+11101000010000010000000000000000
+00011000010000001000010111111110
+11100000010000010000000000000000
+00011111001000100111111000000000
+00011111001000001111001000000001
+11000000100000011101100010011111
+01011000000000000000000000000000
+11100000010000010000000000000000
+00100000011000000000000000000000
+11101000110000011000000000000000
+01100000000000011000010001110111
+11000000000000010101100011000001
+11000000000000011101100011001001
+11000000000000100101100011001100
+11000000000000110101100011110010
+11000000000001000101100100111111
+11000000000001010101100110111100
+11000000000001100101100111100100
+11000000000010000101100111111010
+11000000000010010101101000101111
+11000000000010110101101001001000
+11000000000011000101101001011011
+11000000001010010101101001100000
+00100000011000000000000000000000
+00011000000000000010001000000011
+00100000010000000101101010000010
+01011000000000000000000000000010
+11100000101000001000000000000000
+01101000000000010100010010100110
+11100000101000010000000000000000
+00100000011000000000000000000000
+00100000010000000101100011001001
+00011000000000000010001000000011
+00100000010000000101101010000010
+01011000000000000000000000000011
+11100000101000001000000000000000
+01101000000000010100010010100110
+11100000101000010000000000000000
+00100000011000000000000000000000
+00011111111011001111111000000000
+01100000000000010100010010101000
+00100000011000000000000000000000
+00100000010000000101101010110001
+00100000010000000111111111100111
+00100000001000000101100011001111
+11011001011000000000000000000011
+00100000010000000101011101010110
+00100000010000000101011101011111
+00100000001110100101100011110000
+00100100001000010101100011101101
+00011000110000001000110111111110
+00100000010000000111111010100101
+00100000010000000111111010011100
+00100100001101000101100011100001
+00100000010000000111111010000101
+00100000010000000111111111101001
+00011000000000000010001000010100
+00100000010000000101101010000010
+00100000010000000111111010010101
+01011000000000000000000000000101
+11100000101000001000000000000000
+01011000000000000000000000000001
+11100000101000001000000000000000
+00100000010000000111111010011111
+11101000110000010000000000000000
+11100000101000010000000000000000
+11101000110000001000000000000000
+00011111111000100111001000000000
+00100000010000000111111100000001
+00100000010000000111111010100010
+00011001011000001001011111111111
+00100000001000101101100011110000
+11101000110000001000000000000000
+10011000110000001000110000000000
+00100000001000000101100011010001
+11101000110000001000000000000000
+10011000110000001000110000000000
+00100000001000000101100011101010
+00100000001101000101101001110110
+00100000001000000101101010100101
+00100000010000000101101010110001
+11101000110000010000000000000000
+01100000000000010100010001110010
+00100000010000000111111010100101
+11011000101000000100010001011110
+01101000000000010100010011111100
+00011111111000001111111111111001
+00100000010000000101011011011011
+00100000001000000101100100000101
+01111000010101000111110000000000
+01101000000010010100010001011010
+01101000000000010100010001011100
+10011000010001100111110000000000
+00100100001000010101100100000010
+00011000010000100111111000000000
+11000001100000000000000000000000
+01111000001101000111110000000000
+01110000000001000111101000000001
+00100000001000000101101001110111
+00100000010000000101100011111011
+00100000011101000000000000000000
+01101000000010010100010001110010
+01011000000000000010100000000000
+10011000010001100111110000000000
+00100000001000101101100100001100
+00100000001000000101101001110110
+01110000000001001011010000000000
+01101000000010010100010001011010
+01100000000010010000101010100010
+00100000010000000101011110001100
+00100100001110100101101001110110
+01101000000010010000101010100010
+00100000010000000101011110001100
+00100100001110100101100100100101
+00011000110000100010001000000000
+01101000000000001000010010110011
+00011111111000100111001000000000
+01101000000010001100010001011110
+10011000010001100111110000000000
+00100100001000101101100100100001
+11011010010000000100010001011111
+00100000010000000111111110001000
+00100000001000101101100100101000
+01101000000000010000010010100011
+01101000000010010100010001110010
+10011000010001100111110000000000
+00100000001000101101100100110000
+01101000000000010000101010100010
+00011111111000001111111000000001
+01100000000000010000101010100010
+00100000001000000101100100010001
+01101000000000001000010010110100
+11000000000000001101100100110000
+00100000001000000101101001110110
+01101000000000010000010010100011
+01101000000010010100010001110010
+10011000010001100111110000000000
+00100100001000101101100100100001
+01110000000001001011010000000001
+01101000000010010000101010100010
+01100000000010010000010010011110
+00100000001000000101100100100001
+01101000000000001000010010110100
+11000000000000000101100100100001
+01110000000001001011010000000010
+01101000000010010000101010100010
+00011000010000001000010111111111
+01100000000010010000010010100000
+11011010001000000000000000000101
+00100000010000000101101010000010
+01011000000000000000000000000111
+11100000101000001000000000000000
+01101000000000010000010010011110
+11100000101000010000000000000000
+01101000000000010000010010100000
+11100000101000010000000000000000
+00100000011000000000000000000000
+00100000010000000101101010110001
+00100000010000000101011011011111
+00100000001000000101100101000010
+01101000000010010100010001011010
+01100000000010010000101010100010
+00100000010000000101011101010110
+00100000010000000101011101101101
+00011000110000001000110111111110
+00011000110000100111111000000000
+01100000000000010000010010011100
+01101000000010010100010001110010
+01011000000000000010101000000000
+10011000010001100111110000000000
+00100000001000101101100110101000
+01011000000000000010100000000011
+10011000010001100111110000000000
+00100100001000101101100110010000
+11011001011000000000000000000010
+00100000010000000101101010001000
+00100100001000010101100101101101
+01101000000010010000101010100010
+00100000010000000101011110001010
+11000000000000001101100101101101
+00100000010000000101101010010100
+00100100001000101101100101101011
+00100100001101000101100101101111
+01111000010101000111110000000000
+11011010001000000000000000010100
+00100000010000000101101010000010
+01011000000000000000000000001001
+11100000101000001000000000000000
+00011000101000100110000000000000
+00011000101000001000101000000001
+00100000010000000101100101111101
+00100000010000000101101010000100
+00100000010000000101011110001010
+00100000010000000101100110000100
+01101000000000001000010010100010
+00011111111000001111111000000101
+11100110000000001000000000000000
+01101000000000001000010010100010
+11000000000010000101100101101101
+00011001011000001001011111111111
+00100000001000101101100101101101
+00100000010000000101101010000100
+00100000001000000101100101010001
+00100000001101000101101001110110
+00100000001000000101101010100101
+00100000010000000101101010010111
+00100000010000000101101010000100
+00100000010000000101011110001010
+01101000000000001000010010100010
+11000000000010000101100101101101
+00100000010000000111111010011100
+01101000000000010000101010100010
+00011111111000001111111111111111
+11100000101000010000000000000000
+00100000010000000101101010100001
+00100000010000000101100110000100
+00011001011000001001011111111111
+00100000001000101101100101101101
+00100000001000000101100101101011
+01101000000000010000101010100010
+11100000101000010000000000000000
+01101000000000001000010010110011
+00011111111000100111001000000000
+00100000010000000111111010011111
+00100000010000000111111011110100
+00100000001000000111111010100010
+00100000010000000111111010011100
+01101000000000010000101010100010
+11100000101000010000000000000000
+00100000010000000111111010100010
+01101000000000001000010010100010
+00011111111000100111001000000000
+00100000010000000111111010011100
+00100000010000000111111010011111
+10011111001001100000110000000000
+00011000110000001000110111111111
+00100000010000000111111011110100
+00100000001000000111111010100010
+01101000000010010100010001011010
+01100000000010010000101010100010
+00100000010000000101101010001000
+00100100001000010101101001110110
+00100000010000000101011110001010
+11000000000000001101101001110110
+00100000010000000101101010010100
+00100100001000101101100110100110
+11011010001000000000000000010100
+00100000010000000101101010000010
+01011000000000000000000000001001
+11100000101000001000000000000000
+01101000000000001000010010110011
+00011111111000100111001000000000
+00011111111000001111111000000010
+11100000101000001000000000000000
+01101000000000010000101010100010
+11100000101000010000000000000000
+00100000010000000111111010011111
+00100000010000000111111011110100
+00100000010000000111111010100010
+00100000001000000101101010100101
+00100000010000000101101010000100
+00100000001000000101100110010010
+11011000010000000010101000000000
+00100000010000000101011101111100
+00100000011110100000000000000000
+00011000110000001000110111111011
+11101000110000010000000000000000
+01100000000000010000101010100010
+11011010001000000000000000010100
+00100000010000000101101010000010
+01011000000000000000000000001001
+11100000101000001000000000000000
+01101000000000001100001110101111
+00011111111000100111001000000000
+00011111111000001111111000000010
+11100000101000001000000000000000
+01101000000000010000101010100010
+11100000101000010000000000000000
+11011000110000000100001110110000
+00100000010000000111111011110100
+00100000010000000111111010100010
+00100000001000000101101010100101
+01101000000010010000010001111000
+01101000000000001100010011101001
+11000010100000011101100111011101
+00100000010000000101011101101010
+00100000001110100101101001110110
+00011000110000001000110111111110
+11101000110000010000000000000000
+11011000010000000010101000000000
+10011000010001100111110000000000
+00100000001000101101100111010011
+11101000110000001000000000000000
+00011111111001100111110000010110
+00100000001000010101100111001010
+00011000000000000111111000010110
+00011111111000100010011000000000
+00100000010000000111111010100101
+00011010011000001010001000000001
+00100000010000000101101010000010
+01011000000000000000000000001011
+11100000101000001000000000000000
+00011010011000100111001000000000
+00100000010000000111111010011111
+00100000001000000111111100000001
+00100000010000000111111010100101
+01101000000000001100001110101111
+00011111111000001010001000000001
+00100000010000000101101010000010
+01011000000000000000000000001011
+11100000101000001000000000000000
+01101000000000001100001110101111
+00011111111000100111001000000000
+11011000110000000100001110110000
+00100000001000000111111100000001
+01101000000000010100010011111010
+10011000010001100111110000000000
+00100100001000101101100110111111
+00100000010000000101101001000010
+00100100001101000101100110111111
+01110000000001000111101000000101
+00100000001000000101101001110111
+11101000110000010000000000000000
+01100000000000010100010001011110
+11011010001000000000000000010100
+00100000010000000101101010000010
+01011000000000000000000000001101
+11100000101000001000000000000000
+01101000000000010100010001011110
+10011000000000000010001000000000
+01101000000010010000010001111000
+00100000010000000101011101101010
+00100000001110100101101001110110
+11101000110000001000000000000000
+10011010001001100111001000000000
+00100100001000010101101001110110
+00011111001001100111110000010110
+00100000001000010101100111110101
+00011000000000000111001000010110
+00011010001000100111111000000000
+10011000110000001000110000000000
+00100000010000000111111011110100
+00100000010000000111111010100010
+00100000001000000101101010100101
+00100000010000000101101010110001
+00100000010000000101011011010111
+00100000001000000101100111111101
+11011001011000000000000000000010
+01101000000010010100010001011010
+01100000000010010000101010100010
+00100000010000000101011101010110
+00100000010000000101011101101101
+00011000110000001000110111111110
+00011000110000100111111000000000
+01100000000000010000010010011100
+00100000010000000101101010001000
+00100100001000010101101000100101
+01101000000010010000101010100010
+00100000010000000101011110001010
+11000000000000001101101000101000
+00100000010000000101101010001100
+00100100001000101101101000100011
+00011001011000100111111000000000
+11000000000000000101101000101000
+00100100001101000101101000011001
+01111000010101000111110000000000
+11011010001000000000000000010100
+00100000010000000101101010000010
+01011000000000000000000000010001
+11100000101000001000000000000000
+01101000000000001000010010110011
+00011111111000001111111000000100
+11100000101000001000000000000000
+00100000010000000111111010100010
+00100000001000000101101000011111
+01101000000000001000010010110011
+11000000000010000101101000101000
+01101000000000010000101010100010
+00011111111000001111111111111111
+01100000000000010000010010100000
+00100000010000000101101010011100
+01101000000000010000101010100010
+01100000000000010000010010011110
+00100000010000000101101010010111
+00011001011000001001011111111111
+00100000010000000101101010000100
+00100000001000000101101000000101
+01101000000000010000101010100010
+01100000000000010000010010100000
+00100000001000000101101000101100
+01101000000000010000101010100010
+00011111111000001111111111111111
+01100000000000010000010010100000
+00100000001000000101101000101100
+00100000001101000101101001110110
+00100000010000000101101010011100
+00100000001000000101101010100101
+00011000110000100010001000000000
+01101000000000010100010011111100
+00011111111000001010010111111101
+00100000010000000101011011100010
+01101000000000001100010011101001
+11000011000000100101101000111101
+01101000000010010000010001111000
+01101000000000010100010011111010
+10011000010001100111110000000000
+00100100001000101101101000111101
+00100000010000000101101001000010
+00100100001101000101101000111101
+01110000000001000111101000000101
+00100000001000000101101001110111
+00011000000000000010001000000001
+00100000010000000101101010000010
+01011000000000000000000000010011
+11100000101000001000000000000000
+00100000011000000000000000000000
+00100000010000000111111111101001
+01101000000000001100010011000110
+11000001000000000000000000000000
+01101000000000001100000001000000
+11000011100000100000000000000000
+00100000001000000111111111100111
+00011000110000001010001000000010
+01101000000000010100010011111100
+00011111111000001010010111111011
+00100000010000000101011011100010
+00100000001000000101101001001101
+01101000000000010100010011111100
+00011111111000100010001000000000
+00100000010000000101101010000010
+01011000000000000000000000010111
+11100000101000001000000000000000
+01101000000000010000010001111000
+11100000101000010000000000000000
+01101000000000010100010011111100
+00011111111000001111001111111011
+01101000000000010100010100001101
+00011111111000001000110000000111
+11101000110000010000000000000000
+11100000101000010000000000000000
+00100000001000000111111011110100
+00011000000000000010001000000001
+00100000010000000101101010000010
+01011000000000000000000000011001
+11100000101000001000000000000000
+00100000011000000000000000000000
+00011000110000100010001000000000
+01101000000000010100010011111100
+00011111111000001010010111111101
+00100000001000000101011011100010
+00011000010000100010011000000000
+00011010001000001010001000000011
+00100000010000000101101010000010
+00011010001000001010001111111101
+01011000000000000000000000011011
+11100000101000001000000000000000
+00011010011000100000010000000000
+11100000101010010000000000000000
+00100000011000000000000000000000
+00011000010000100010011000000000
+00011010001000001010001000000011
+00100000010000000101101010000010
+00011010001000001010001111111101
+01011000000000000000000000011101
+11100000101000001000000000000000
+00011010011000100000010000000000
+11100000101010010000000000000000
+00100000011000000000000000000000
+01110000000001000111101000001010
+00011000000000000010001000000101
+00100000010000000101101010000010
+01011000000000000000000000000001
+11100000101000001000000000000000
+01101000000000001000010001110111
+11100000101000001000000000000000
+01101000000000010000010001111000
+11100000101000010000000000000000
+01101000000000001000010001111010
+11100000101000001000000000000000
+00100000011000000000000000000000
+00011000000000000010010000000100
+00100000001000000101100001000111
+01101000000010010000101010100010
+00011000010000001000010000000001
+01100000000010010000101010100010
+00100000011000000000000000000000
+01101000000010010000101010100010
+01101000000000010100010001011100
+10011000010001100111110000000000
+00100000011000000000000000000000
+01101000000010001100010001011110
+11011010001000000100010001011111
+01101000000000001000010010100010
+00011111111000100111001000000000
+10011000010001100111110000000000
+00100100011000101000000000000000
+11011010010000000000010010100011
+00100000001000000111111110001000
+01101000000010001100010001110001
+11011010001000000100010001110010
+00100000001000000101101010001110
+01101000000000001000010010110011
+01100000000000001000000100000001
+00011111111000100111001000000000
+00100000010000000111111010011111
+00100000001000000111111011110100
+00100000010000000111111010011100
+01101000000000010000010010011110
+11100000101000010000000000000000
+01101000000000010000010010100000
+11100000101000010000000000000000
+01101000000000001000000100000001
+00011111111000100111001000000000
+00100000010000000111111011110100
+00100000001000000111111010100010
+00100000010000000111111010011100
+00100000010000000101100010001010
+00011000101000100111111000000000
+10011000110001100010001000000000
+00100000010000000101100010001101
+00011010001000100111111000000000
+11100000110000010000000000000000
+00011010001000001010001000000100
+00100000010000000101100001111001
+00011010001000100111111000000000
+11100000110000001000000000000000
+00100000011000000000000000000000
+00011111111011001111111000000000
+01100000000000010100010001011010
+11101000110000010000000000000000
+01100000000000010100010001011100
+00100000011000000000000000000000
+11101000110000001000000000000000
+11101000110010001000000000000000
+11101000110010010000000000000000
+11000000000010011101101010111011
+00100000011000000000000000000000
+11101000110000010000000000000000
+01100000000000010100010100001001
+01110000000010101001100101000000
+00100000001000000111110110000110
+11011010001000000000000000001100
+11011010011000000000000000010010
+00100000010000000101101011000111
+01011000000000000000000000001000
+11100000101000010000000000000000
+01101000000001000100010010010110
+11100000101001000000000000000000
+00100000011000000000000000000000
+00100000010000000101101011001111
+11011010010000000000000000000101
+00100000010000000101100001000111
+00011010011000100111111000000000
+11100000101000001000000000000000
+01101000000000001100010100001000
+11100000101000001000000000000000
+00100000011000000000000000000000
+01101000000000001100010100001000
+00011111111000001111111000000001
+01100000000000001100010100001000
+11000001100000000000000000000000
+01110000010001010000100000000001
+00100000011000000000000000000000
+01101000000000001100010011000110
+11000000000000000101101011100100
+11000000000000001101101011100111
+11000000000000010101101011101001
+11000000010000001101101011011101
+11000000010000010101101011011111
+11000000010000011101101011100010
+00100000011000000000000000000000
+01110000010001000101011000001101
+00100000001000000101101011100101
+01110000010001000101011000001101
+01110000010001000101010000000001
+00100000011000000000000000000000
+01110000010001000101011000001101
+00100000001000000101101011101010
+01110000010001000101011000000000
+01110000010001000101010000000011
+00100000011000000000000000000000
+01110000010001000101011000000101
+00100000001000000101101011100101
+01110000010001000101011000000101
+01110000010001000101010000000000
+00100000011000000000000000000000
+01101000000000001100010001010110
+01111001001000000111111000000011
+01100000000000001100010001010110
+00100000011000000000000000000000
+01101000000000001100010001010110
+01111001001111111111111000000011
+01100000000000001100010001010110
+00100000011000000000000000000000
+11101000110000001000000000000000
+11000000000000001101101100001001
+11000000000000011101101100110000
+11000000000000100101101101001101
+11000000000000101101101101011010
+11000000000000110101101110000000
+11000000000000111101101111000100
+11000000000001000101101110101111
+11000000000001001101101111000000
+11000000000001010101101111000100
+11000000000001011101101111000100
+11000000000001100101101111000101
+11000000000001101101101111001010
+00100000011000000000000000000000
+00011000000000000010001000000010
+00100000010000000101110001100010
+01011000000000000000000000001011
+11100000101000001000000000000000
+01101000000000001100010001010110
+11100000101000001000000000000000
+00100000011000000000000000000000
+01100000000000001100010001001100
+11101000110000110000000000000000
+11100000101000110000000000000000
+01101000000000001100010011000110
+11000000000000000101101101011111
+00100000010000000101101100101011
+00100000010000000101101100100110
+01110000010001001100010000000011
+01101000000000001100010001001101
+11000000000000000101101100011000
+11000000000000001101101100011000
+11000000000000011101101100011000
+01101000000000001100010011000110
+11000000000000010101101100011011
+11000001010000011000000000000000
+11011111111000000000000000000000
+01100000000000100100010011000111
+00100000011000000000000000000000
+01101000000000001100010011101001
+11000010100000000101101100100100
+11011010001000000100010011000111
+00011010001000100000101000000000
+11011111001000000000000000000011
+00100000010000000110001100001101
+01101000000000010100010011001001
+00011111111000010111111000000111
+01100000000000010100010011001001
+01110000000010101001100100110100
+00100000001000000111110110000110
+01101000000000001100010001001111
+11000011100000011000000000000000
+01101000000000001100010011000110
+11000100000000111000000000000000
+00100000001000000011010000000010
+00011000000000000010001000000111
+00100000010000000101110001100010
+01101000000000111100010001010011
+11100000101000111000000000000000
+00100000011000000000000000000000
+00011000110000100010001000000000
+01101000000000001100010011000110
+11000000010000011101101100110111
+00011010001000100000110000000000
+11011000101000000100010000101010
+00100000010000000111111010111111
+00100000001000000101101100111101
+00011010001000100000110000000000
+11011000101000000100010000101010
+00100000010000000111111010111111
+01110000010001001011111100000010
+01110000010001001100000100001000
+00100000011000000000000000000000
+01101000000000001100010011000110
+11000010100000111101101101000101
+00100000010000000111001110011100
+00011000000000000010001000010001
+00100000010000000101110001100010
+01011000000000000000000000000011
+11100000101000001000000000000000
+00100000001000000111010010010111
+11011000101000000100010000111010
+00100000010000000110001100001100
+00100000010000000111000111000101
+00011000000000000010001000010001
+00100000010000000101110001100010
+01011000000000000000000000000011
+11100000101000001000000000000000
+00100000001000000111001000000001
+00011000110000100010001000000000
+01101000000000001100010011000110
+11000010100000111101101101100001
+00011010001000100000110000000000
+00100000010000000111001110010100
+00100000001000101101101101110101
+01110000000001000111101100000100
+00011000000000000010001000000010
+00100000010000000101110001100010
+01011000000000000000000000000101
+11100000101000001000000000000000
+01101000000000001000010001111011
+11100000101000001000000000000000
+00011000000000000000111000001010
+00100000010000000111111100000111
+01110000010001001100010000000000
+01110000000010101001100100110000
+00100000001000000111110110000110
+01110000000001000111101100000101
+00100000001000000101101101010100
+11011000101000000000010000101111
+00011010001000100000110000000000
+00100000010000000111111010111111
+01101000000000001100010011000110
+11000000010000011101101101101100
+00100000010000000111000101001111
+00100000010000000101101101111010
+01101000000000001100010011000110
+11000001110000010000000000000000
+01110000000010101001100100111011
+00100000001000000111110110000110
+00100000010000000111000110111010
+11011000101000000000101011110010
+00100000010000000111001000000001
+11011010001000000000101011110010
+11011010010000000100010000101010
+11011111001000000000000000010000
+00100000010000000111111110001000
+00100100001000101101101101010011
+00100000001000000101101101111010
+00100000010000000111001110010000
+01110000000010101001100100110001
+00100000010000000111110110000110
+01110000010001000010100100000001
+01110000010001001100010000000101
+00011000000000000010001000010001
+00100000010000000101110001100010
+01011000000000000000000000000100
+11100000101000001000000000000000
+11011000110000000100010000111010
+00100000001000000111111010111111
+11011000101000000000010000011111
+00100000001000000111111010111111
+00011000000000000010001000010001
+00100000010000000101110001100010
+01011000000000000000000000000110
+11100000101000001000000000000000
+01101000000000001100010011101001
+11000010100000001101101110001010
+11011000110000000100010000011001
+00100000001000000111111010111111
+11011000110000000100010011101010
+00100000001000000111111010111111
+11011000101000000100010011001011
+00011000000000000111001000001010
+00100000010000000110001100001101
+00011000000000000010001000001011
+00100000010000000101110001100010
+01011000000000000000000000000111
+11100000101000001000000000000000
+01101000000000010100010011001011
+11100000101000010000000000000000
+01101000000001000100010011001101
+11100000101001000000000000000000
+00100000011000000000000000000000
+00011000000000000010001000010001
+00100000010000000101110001100010
+01011000000000000000000000001000
+11100000101000001000000000000000
+01011000000000000000000000000000
+11100000101001000000000000000000
+11100000101001000000000000000000
+00100000011000000000000000000000
+00011000000000000010001000001000
+00100000010000000101110001100010
+01011000000000000000000000001001
+11100000101000001000000000000000
+01101000000000001100010010010101
+11100000101000001000000000000000
+01101000000000110100010010100000
+11100000101000110000000000000000
+00100000011000000000000000000000
+01110000000001000111101100001000
+00100000001000000101101101010100
+01101000000000001100010001011000
+01101000000010001100010001011000
+10011000010000010111111000000000
+00100000011000000000000000000000
+11011000101000000100010011010101
+00100000010000000111111010111111
+00100000010000000101101110101011
+00101111111011000000000000000001
+00100000001000001101101110101001
+01101000000000001100000010010010
+11000001100001010000000000000000
+00100000010000000101101110111001
+00100100011101000000000000000000
+00100000001000000011010000010000
+00100000010000000111111111101001
+01101000000000001100010010001110
+11000001000000000000000000000000
+01101000000000001000010001010100
+00101111111000011000000011000000
+00100000011000001000000000000000
+00100000001000000111111111100111
+00100000010000000101101110101011
+00101111111011000000000000000001
+00100000001000001101101110101001
+00100000011000000000000000000000
+00100000011000000000000000000000
+11011000101000000000100110111110
+00100000010000000111111010110011
+01110000010001001011111100000010
+01110000010001001100000100000001
+00100000011000000000000000000000
+11011000101000000000101001101110
+00100000010000000111111010111111
+01110000010001001100000100000110
+01110000010001001011111100000010
+00100000011000000000000000000000
+00011000000000000010001001000001
+00100000010000000101110001100010
+01011000000000000000000000001100
+11100000101000001000000000000000
+11011000110000000100010111010010
+00100000001000000111111010110011
+00100000010000000111000101100110
+00011000000000000010001000010001
+00100000010000000101110001100010
+01011000000000000000000000001101
+11100000101000001000000000000000
+00100000001000000111001000000001
+01101000000000001100010011000100
+11000001011111111000000000000000
+11011000010000000000000000000011
+10011000010001100111110000000000
+00100100011000010000000000000000
+11011000111000000000000000001010
+00100000010000000111111100010110
+00100100011110100000000000000000
+00100000001000000101101110101001
+01000111001111000100000000101111
+01101000000000001100010011000100
+11000000000000000101101111101111
+11000000000000001101101111110101
+11000000000000010101101111101111
+11000000000000011101101111110111
+11000000000000101101101111111011
+11000000000000111101110000000111
+11000000000001000101110000001001
+11000000000001001101110000010000
+00100000011000000000000000000000
+01101000000000001100010011000101
+11000001100000100000000000000000
+01110000010001001100010111111111
+01110000010001001100010011111111
+01110000000010101001100100111111
+00100000001000000111110110000110
+01110000010001001100010000000010
+00100000001000000101101100000010
+01110000010001001100010000000100
+01011000000000010111011100000000
+11011000111000000000000000001010
+00100000001000000111111100001000
+01101000000000001100010011000101
+11000000000000100101101111111110
+00100000011000000000000000000000
+01110000010001001100010000000111
+01110000000010101001100100101001
+00100000010000000111110110000110
+00100000010000000101101110000010
+01101000000000001100000010010010
+11000001100001010000000000000000
+00100000010000000101101110111001
+00100000011101000000000000000000
+00100000001000000011010000010000
+01110000010001001100010000001000
+00100000001000000101101110001100
+01101000000000001100010001010010
+01101000000010001100010001011001
+10011000010000010111111000000000
+00101111111011000000000000000001
+00100000001000001101110000010010
+01110000010001001100010000001001
+00100000001000000101101110011000
+00100000010000000101101110100000
+00100000001000000101110000010010
+00011000000000000000111000001010
+00100000010000000111111100000111
+01110000010001001100010111111111
+01110000010001001100010011111111
+01110000000010101001100100111110
+00100000001000000111110110000110
+01000111001111001100000000101111
+01101000000000001100010011000110
+11000100000000111000000000000000
+01101000000000001100010010111111
+11000001100000010000000000000000
+01110000010001001011111100000000
+01101000000000001100010011000001
+11000000000000001101110001011000
+11000000000000010101110001011111
+11000000000000011101110001010010
+11000000000000110101110000111001
+11000000000000111101110000110000
+11000000000001000101110000100110
+00100000011000000000000000000000
+01101000000000001100011001100011
+00011111111000100000111000000000
+00011111111000001111111000000001
+01100000000000001100011001100011
+01101000000000100100010011000111
+10101111111011111111111111111111
+01011000000000000000000010000000
+01111001001000001111111000000000
+01100000000000001100011001100100
+00100000001000000101110001010101
+01101000000000001100010011000010
+01110000010001001100001000000000
+11000000000000001101110000110101
+01110000010001001011111100000010
+00100000011000000000000000000000
+01110000000010101001100100110001
+00100000010000000111110110000110
+01110000010001001100010000000101
+00100000001000000101101111010101
+01101000000000001000100110111001
+11000000000000011101110000111101
+01110000010001001011111100000010
+00100000011000000000000000000000
+00100000010000000111000110001101
+01101000000000001100010011000110
+11000000010000011101110001000001
+00100000010000000101101100011000
+00100000010000000111000101111010
+11011010001000000000101011110010
+11011010010000000000101001101110
+11011111001000000000000000010000
+00100000010000000111111110001000
+00100000001000101101110001001001
+01110000000001000111101100001011
+00100000001000000101101101010100
+00100000010000000111010110010101
+00100100001000101101110001000111
+01110000010001000010100100000001
+01101000000000001100010011000110
+11000000010000001101110000110101
+11000000010000011101110000110101
+01110000010001001011111100000010
+01110000010001001100000100000111
+00100000011000000000000000000000
+01101000000000001100010011000110
+11000000010000011101110001010110
+01110000010001100110010000000000
+00100000001000000101101100111101
+01110000010001100110001100000000
+00100000001000000101101100011011
+01110000010001001011111100000010
+01101000000000001100010011000011
+11000000000000011101110001011100
+00100000011000000000000000000000
+01110000010001001100000100000010
+01110000000010011011100100000000
+00100000001000000111101010011001
+01110000010001001011111100000010
+01110000010001001100000100000011
+00100000001000000101101111001111
+00011000000000000010010000000110
+00100000001000000101100001000111
+01101000000000001000001011011011
+11000000000000000101110001111011
+11000000000000001101110010000011
+11000000000000010101110010001110
+11000000000000011101110010101010
+11000000000000100101110011100001
+11000000000000101101110011100110
+11000000000000110101110011101010
+11000000000000111101110011110101
+11000000000001000101110010011001
+11000000000001001101110011110101
+11000000000001010101110011101111
+11000000000001011101110011110101
+11000000000001100101110010011111
+11000000000001101101110011110101
+11000000000010010101110010100110
+11000000000010011101110011110101
+11011010001000000000000000000010
+11011010010000000000000000000111
+00100000010000000101100001000010
+01101000000000001000001011011011
+11100000101000001000000000000000
+00100000011000000000000000000000
+11101000110001001000000000000000
+01100000000001001100001111010011
+11101000110000010000000000000000
+01100000000000010000010001011111
+01101000000000001000010000111111
+01111001001000000111111000000101
+01100000000000001000010000111111
+00100000011000000000000000000000
+11101000110000101000000000000000
+01100000000000101100001111001110
+11101000110000010000000000000000
+01100000000000010000010001011111
+01101000000010010000010001011001
+10011000010001100111110000000000
+00100100001000010101110010001110
+01101000000000001000010000111111
+01111001001000000111111000000110
+01100000000000001000010000111111
+00100000011000000000000000000000
+01011000000000000000000000010100
+01100000000000010000010001101101
+01100000000000010100010010111010
+00100000011000000000000000000000
+11011010011000000000000000010011
+11011010001000000000000000000010
+11011010010000000000000000000010
+00100000010000000101100001000010
+00011010011000100111111000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+11011010001000000000000000001001
+11011010010000000000000000001001
+00100000010000000101100001000010
+01011000000000000000000000000001
+11100000101001000000000000000000
+00100000011000000000000000000000
+00100000011101001000000000000000
+11011010001000000000000000000110
+11011010010000000000000000001100
+00100000010000000101100001000010
+01101000000000101100010100010000
+11100000101000101000000000000000
+00100000011000000000000000000000
+11011010010000000000000000010011
+00100000001000000101110010101000
+11011010001000000000000000000001
+00100000001000000101100001000010
+11101000110001000000000000000000
+01100000000001000100010011001101
+11101000110000010000000000000000
+01100000000000010100010011001011
+11101000110001000000000000000000
+01100000000001000100010010101010
+11101000110000100000000000000000
+01100000000000100100010000010001
+00100000010000000101110011001111
+01000111001111010100000000101111
+01101000000000001100010011000100
+11000000000000101101110010111100
+01101000000000001100010011101001
+11000010100000001101110010111111
+01101000000000001100001000010111
+00100100010110100110011110111110
+01101000000000001100010000101001
+11000000000000000101110011000100
+01110000010001001100010100000001
+00100000010000000101110011011101
+00100000001000000111001110100010
+01110000010001000010100100000001
+11011000110000000100010011101010
+11011000101000000100010000011001
+00100000010000000111111010111111
+00100000001000000101110010111100
+01000111001111011100000000101111
+01110000010001001100010100000000
+01110000010001001100010000000000
+01110000000010101001100101000001
+00100000001000000111110110000110
+11011010001000000000000000000010
+11011010010000000000000000001101
+00100000010000000101100001000010
+01011000000000000000000000000110
+11100000101000001000000000000000
+00100000011000000000000000000000
+11011000101000000100010010110010
+00011000000000000111001000001000
+00100000010000000110001100001101
+11011000101000000100010000010101
+00011000000000000111001000000100
+00100000010000000110001100001101
+11011010001000000000000000001101
+11011010010000000000000000000100
+00100000010000000101100001000010
+01101000000001000100010010110010
+11100000101001000000000000000000
+01101000000000100100010000010101
+11100000101000100000000000000000
+00100000011000000000000000000000
+11011010010000000000000000000101
+00100000001000000101110010101000
+11011010010000000000000000000110
+00100000001000000101110010101000
+11101000110001000000000000000000
+01100000000001000100010010110010
+11101000110000100000000000000000
+01100000000000100100010000010101
+00100000001000000111001110100010
+01101000000000001000010000111111
+01111001001000000111111000000100
+01100000000000001000010000111111
+00100000011000000000000000000000
+00100000011101001000000000000000
+01110000000010101001100100110010
+00100000010000000111110110000110
+01110000010001001100010100000100
+00100000001000000101110011011111
+01110000010001001100010100000010
+00100000010000000101110011110011
+01110000000010101001100100110011
+00100000001000000111110110000110
+11011010010000000000000000001011
+00100000001000000101110010101000
+00100000011000000000000000000000
+00100000011101011000000000000000
+01000111001111100100000000101111
+01011000000000000000000000000000
+01100000000000001000000001001000
+01100000000000001000000001010101
+01100000000000001000000001111000
+01100000000000001000000001111100
+01100000000000001100000101011000
+01100000000000001000010011010111
+01100000000000001000000101101101
+01100000000000001000100110110101
+01110000010001010101101100000000
+01110000000000100010100100000000
+01110000000001001101100000000000
+01110000000010011011010100000000
+01110000000010011011010000000000
+01110000000001001101000100000000
+00100000011000000000000000000000
+01000111001111101100000000101111
+00100000010101001110001011111111
+00100100010101001110001100000011
+00100000010000000110001010111100
+00100100011110100000000000000000
+01101000000000001000000001001100
+11000100000000110000000000000000
+01111001001111111111111000000110
+01111001001111111000000000000001
+01100000000000001000000001001100
+01101000000000001000010101010001
+01101000000010001000000001001100
+00101111111011111111111000000000
+01111001001000001000010000000001
+01100000000010001000000001001100
+00011000010000010000010000000010
+01100000000010001000000001111111
+01101000000010001000000001001100
+00011111111000110111111000000000
+01100000000000001000000001111101
+01000111001111110100000000101111
+01101000000000001000000001111101
+11000000001111111101110101100110
+11000000000000011101110110110001
+11000000000000100101110111000010
+11000000000111100101110101011001
+11000000000000101101110101010101
+11000000000001111101111110101000
+11000000000010000101111000100100
+11000000000100011101111001000010
+11000000000111001101111111000001
+11000000000111000101111110111100
+11000000000110001101111000100111
+11000000000110111101111010110000
+11000000000100111101111010101100
+11000000000110011101111010101001
+11000000000100101101111010101110
+11000000000100110101111000111110
+11000000000000111101111000110110
+11000000000101101101111000101101
+11000000000101110101111000101110
+11000000000000001101111010100101
+11000000000000010101111010010000
+11000000000101000101111110110011
+11000000000001001101111010000110
+11000000000001011101111001011111
+11000000000001000101111001000011
+11000000000001100101111001101010
+11000000000011111101111000111010
+11000000000100000101111000111100
+11000000000100001101111011001010
+11000000000100010101111011001010
+11000000000110101101111011001011
+11000000000110110101111011001100
+11000000000100100101111011001010
+11000000000110100101111011001101
+11000000000010111101111011010110
+11000000000010001101111011110010
+11000000000010010101111011110110
+11000000000010011101111011111000
+11000000000001101101111100001010
+11000000000001110101111100001010
+11000000000101111101111010101010
+11000000000110000101111100001010
+11000000000001010101111100001010
+11000000000011000101111100001011
+11000000000110010101111100001010
+11000000000111101101111100010000
+11000000000111110101111101010001
+11000000000111111101111101001011
+11000000001000000101111101111000
+11000000001000001101111110001010
+11000000000000110101111110100111
+11000000000111010101110101010111
+01110000000000000111111000011001
+01110000000000000111110000000100
+00100000011000000000000000000000
+01110000000000000111110000000110
+00100000011000000000000000000000
+01110000000000000111110000111011
+00100000011000000000000000000000
+01101000000000100000010101010010
+00011111111000111111111000000000
+01100000000000100100000011010010
+01101000000000001000010101010110
+01100000000000001100000011011001
+01101000000000101000010101010111
+01100000000000101100000011100111
+01101000000000101000010101011100
+11100000101000101000000000000000
+01101000000000001000000000110001
+01111001001000000111111000000011
+01100000000000001000000000110001
+00100000011000000000000000000000
+01000111001111111100000000101111
+01101000000000001000010101010010
+01111001001000000111111000000111
+01100000000000001000000001111101
+11000000010000001101110110001000
+11000000010000010101110110001101
+11000000010010101101111010110001
+11000000010010110101111011001010
+11000000010001011101111010111111
+11000000010000011101110110100101
+11000000010000100101110110100111
+11000000010010000101110101111010
+11000000010010111101110110011110
+11000000010011000101110110100011
+11000000010011001101110101111101
+11000000010011010101110110000000
+11000001010000100000000000000000
+01110000000000000111110010000010
+01110000000000000111111000011001
+00100000011000000000000000000000
+01110000000000000111110010000010
+01110000000000000111111000101110
+00100000011000000000000000000000
+00100000010000000101110110000010
+01110000000000000111110010011010
+00100000011000000000000000000000
+00100000010000000101110110000010
+00100000001000000101110110000110
+11011000101000000100011001011110
+01101000000000011000010101010011
+11100000101000011000000000000000
+00100000011000000000000000000000
+00100000001000001111011011011000
+00100000011000000000000000000000
+01101000000000001000010101010100
+01111001001000000111111000000111
+01100000000000001000010011001001
+11000000010001011101110110010010
+00100000011000000000000000000000
+01101000000000001000010101010100
+01111001001000000111111000000111
+01100000000000001000010011001001
+11000000010001011101110110010110
+00100000011000000000000000000000
+01101000000000001100000101011010
+01101000000010001000000001001100
+01111101001110100000010000000101
+01100000000010001000000001001100
+01101000000000001000000000110000
+11000100000000101000000000000000
+01111001001111111111111000000101
+01100000000000001000000000110000
+01101000000000001000010011010111
+00100100011110100000000000000000
+01110000000000000111110000110001
+00100000011000000000000000000000
+00100100001101001101110110100001
+01110000000000000111110000010010
+00100000001000000110001011101011
+01110000000000000111110010010111
+00100000011000000000000000000000
+00100000010000000110001011101011
+00100000001000000101111111111110
+01110000000000000111110010000100
+00100000011000000000000000000000
+01101000000010001000010101010101
+00011000010000010000010000000001
+01100000000010001000010011010000
+01101000000000001100000111001110
+11000000101010001101110110101101
+01110000010000011100111000000000
+01101000000000001000000001010101
+11000001100010101000000000000000
+01110000000000000101010100000100
+00100000001000000110001100011011
+01000111010000000100000000110000
+01101000000000001000010101010010
+01100000000000001000010011001001
+11000000000110011101110111011000
+11000000000001000101110111100111
+11000000000001111101110111101110
+11000000000010000101110111110100
+11000000000010001101110111110101
+11000000000010010101110111111101
+11000000000011000101111000010011
+11000000000010111101111000010110
+11000000000010011101110111001111
+11000000000111101101111100011110
+11000000000111110101111101101010
+11000000001000000101111100100000
+11000000001000001101111100111101
+00100000011000000000000000000000
+01000111010000001100000000110000
+01101000000000001000010101010010
+01100000000000001000010011001001
+11000000000000001101111000001010
+11000000000110011101110111100010
+11000000000001011101110111111110
+11000000000001000101111000000001
+11000000000010011101110111010010
+11000000001000000101111000001011
+11000000001000001101111000001110
+11000000000011000101111000010001
+11000000000010111101111000100010
+00100000011000000000000000000000
+01110000000010101001100100100000
+00100000010000000111110110000110
+00100000001000000010000111011100
+01110000000010101001100100011001
+00100000010000000111110110000110
+01110000010001010101101100000010
+01011000000000000000000001010000
+11011000111000000000000000000110
+00100000001000000111111100001000
+01101000000000001000010011010001
+01111001001000000111111000000000
+01100000000000001000010011010001
+01110000000010101001100100000001
+00100000010000000111110110000110
+01110000000000000111110010001011
+01101000000000001000000001010101
+11000000100000101101110100000111
+01110000000000000101010100000110
+00100000011000000000000000000000
+01110000000001001100101000001011
+01110000000000000111110000000111
+01110000000000000101010100000000
+00100000001000001101110100000111
+00100000011000000000000000000000
+01101000000000001100000110111101
+00100100011110100000000000000000
+00100000010000000010010001001111
+00100000010000000101111111111100
+00100000011101001000000000000000
+01111001001000000000000000100001
+00100000011000000000000000000000
+00100100011101001000000000000000
+01110000000000000111110000010000
+01101000000000001000000001001100
+11000100000000010000000000000000
+01110000000000000111110000010010
+00100000011000000000000000000000
+00100000001000000101111111111110
+00100000010000000110000001011001
+01101000000000001000000000110000
+11000011100000100000000000000000
+01110000000000000111110000110001
+01101000000000001000000001010101
+11000001100001010000000000000000
+01110000000000000101010100001011
+00100000011000000000000000000000
+00100000011000000000000000000000
+01110000000000000111110000000111
+01110000000001001100101000010011
+00100000011000000000000000000000
+01101000000000001000010101010011
+11000000000000110101111000000111
+11000001100011000000000000000000
+01110000000001001100101000011000
+01110000000000000111110000000111
+00100000011000000000000000000000
+01110000000001001100101000000110
+01110000000000000111110000000111
+00100000011000000000000000000000
+00100000011000000000000000000000
+01110000000010011010111000000000
+01110000000000000111110000000111
+00100000001000000101110100000111
+01110000000010011010111000000000
+01110000000000000111110000000111
+00100000001000000101110100000111
+01110000000010101001100100100100
+00100000001000000111110110000110
+01110000000010101001100100100011
+00100000010000000111110110000110
+00100000001000000010011011101001
+01110000000010101001100100100010
+00100000010000000111110110000110
+01011000000000000000000000000000
+01100000000000010000000001110101
+01101000000000010100000111100011
+00011111111000111111111000000000
+01100000000000010000000000110010
+01101000000000001100000111100101
+01100000000000001000000001110011
+01101000000000001100000111100111
+01100000000000001000000001110100
+00100000001000000010011011000110
+01110000000010101001100100100001
+00100000001000000111110110000110
+01101000000010001000010101010010
+01100000000010001000000001010100
+00100000001000000101111000111000
+01101000000000001000010011010001
+01111001001000000111111000000010
+01100000000000001000010011010001
+11000011100000011000000000000000
+01110000000000000111110000110001
+00100000001000000101110100000111
+00100000011000000000000000000000
+01101000000000001100000011010000
+01101000000010001000010101010010
+10011000010001100111110000000000
+00100000001000010101111000111000
+01110000000000000111110000000100
+01110000000000000111111000011111
+01110000000000000111110100101110
+00100000011000000000000000000000
+00100000010000000110000101010111
+00100000001000000101111000111000
+01110000000000000111110000000011
+00100000011000000000000000000000
+01110000000000000111110000100001
+00100000011000000000000000000000
+01110000000000000111110000100010
+00100000011000000000000000000000
+01101000000000001000000001010101
+11000001000010011000000000000000
+01110000000000000101010100000010
+00100000011000000000000000000000
+00100000011000000000000000000000
+00100000010000000101111111111001
+01110000000001001101010000000001
+01110000000010101001100100001010
+00100000010000000111110110000110
+00100000010000000110001011110011
+00100100001000001110000000000001
+00100100001101001101111001001110
+01110000000000000111110000000100
+01110000000000000111110100001000
+01110000000000000111111000100011
+00100000011000000000000000000000
+01101000000000001000000001001011
+01111001001000000111111000000010
+01100000000000001000000001001011
+00100000011000000000000000000000
+01101000000010001000000001001100
+01111101001110100000010000000001
+01100000000010001000000001001100
+00100000011000000000000000000000
+01101000000000001000000001111111
+00011111111000110111111000000000
+00011111111000010111111000000001
+00100000011000000000000000000000
+01101000000000001100001000010111
+00100000011110100000000000000000
+01101000000000001000100110110101
+00100000010110100110011110110010
+00100000011000000000000000000000
+00100000010000000101111001011010
+00100000010000000101111001010110
+01100000000000001000010011010101
+00100000010000000101111111111001
+01110000000000000111110000001100
+01101000000000001100000110111101
+00100100011110100000000000000000
+01101000000000001000000000110000
+11000011100000110000000000000000
+01110000000000000111111000000110
+00100000001000000101110101010011
+11011010001000000000000001000000
+00100000010000000111001010001000
+01101000000000100000010101010010
+01101000000010100000010110010010
+10011000010001100111110000000000
+00100000001000101101111001110011
+01110000000000000111110000000111
+01110000000001001100101000000101
+00100000011000000000000000000000
+00100000010000000101111001110111
+01101000000000001100011001011010
+00100000001110100101111100111110
+00100000011000000000000000000000
+00100000010000000111001110000110
+00100000010000000010000110110010
+01101000000000001000000001001011
+00101111111011111111111000000001
+01111001001111111111111000000001
+01100000000000001000000001001011
+01101000000000001000000001010101
+11000000000011001101111010000001
+11000000000011000101111010000001
+00100000011000000000000000000000
+01101000000000001000100110110101
+11000001100000000000000000000000
+01101000000000001000000001001100
+11000011100000010000000000000000
+00100000001000000110001110110001
+11011010001000000000010101010010
+11011010010000000000010110000010
+11011000101000000000010101100010
+00100000010000000111001101010010
+11011010001000000000000001000000
+00100000010000000110001100010001
+01110000000000000111110000001011
+01101000000000001000000000110000
+11000011000000110101111111111100
+00100000011000000000000000000000
+01101000000000010000000101011111
+00011111111000001111001111111101
+01101000000010001000010101010010
+01011000000000000000000100000001
+10011000010000001000101000000000
+11011000110000000000010101010100
+00100000010000000111111100000001
+01101000000010001000000001010011
+01101000000000001000010101010011
+10011000010001100111111000000000
+00011111111001100111110000001110
+00100000001000010101111010100000
+00011000010000001111111000001110
+01100000000000001000000001010011
+01110000000000000111110000000001
+00100000011000000000000000000000
+01101000000000001000000001001100
+01111001001000000111111000000011
+01100000000000001000000001001100
+11000010100000100110000000000110
+00100000011000000000000000000000
+01101000000000001000010101010010
+01100000000000001000000001111101
+01110000000000000111110000000010
+00100000011000000000000000000000
+00100000001000000101111000111000
+01110000000000000111110000110000
+00100000011000000000000000000000
+01110000000000000111110000101000
+00100000011000000000000000000000
+01110000000000000111110000100110
+00100000011000000000000000000000
+00100000011000000000000000000000
+01101000000000010000000000110010
+10011000000000000000010000000000
+01101000000000001000010101010011
+01100000000000001000000010010101
+10011000010011111000010000000000
+01101000000000010000010101010100
+00011111111000111111111000000000
+01100000000000010000000010010110
+01101000000000100000010101010110
+00011111111000111111111000000000
+01100000000000100000000010010001
+00011000010000100111111000000000
+01100000000000010000000010011000
+00100000011000000000000000000000
+01101000000010001100000101011010
+01101000000000001000010101010011
+10011000010000101111110000000000
+00100100001000101101110101110111
+00101111111011111111111000000000
+01101000000000001000000001001100
+01111001001000001111111000000101
+01100000000000001000000001001100
+01110000000000000111110010000001
+01110000000000000111110110001011
+00100000011000000000000000000000
+00100000011000000000000000000000
+00100000001000000101111000111000
+00100000001000000101111000111000
+01101000000000010000010101010010
+01100000000000010000000101110001
+00100000011000000000000000000000
+01101000000000010000010101010101
+01101000000010001100000101110010
+10011000010011111111111000000000
+11011000010000000000011001000000
+10011000010001100111110000000000
+00100000011000000000000000000000
+01101000000000010000010101010111
+00100000001110100101111011110000
+00100000010000000101111011010000
+00100000001000010101111011110000
+01101000000000001100000010010010
+00011111111001100111110000001010
+00100000010000101011110011010101
+01101000000000001000000000110000
+11000010100000001101111011110000
+01101000000000010000010101010011
+00011111111000111111111000000000
+01100000000000010000000001110101
+01101000000000010000010101010101
+00011111111000111111111000000000
+01100000000000010000000000110010
+01101000000000010000010101010111
+01100000000000001000000001110011
+10011000000000000000010000000000
+01101000000000010000010101011001
+01100000000000001000000001110100
+10011000010001100111110000000000
+00100100001000010101111011101101
+01100000000000001000000001110011
+01110000000000000111110000000011
+01110000000000000111110100010111
+00100000011000000000000000000000
+01110000000000000111111000100100
+00100000001000000101110101010011
+00100000010000000101111000111000
+00100000010000000101111111111001
+00100000010000000111001010001011
+00100000001000000010011010111000
+00100000010000000101111000111000
+00100000001000000010011011000000
+01101000000000100000010101010010
+00011111111000111111111000000000
+00100000001101001101111100000100
+01101000000010001100000110111101
+00100100001110100101111100000001
+01110000000000000111110000000100
+01110000000000000111110100010011
+01110000000000000111111000100100
+00100000011000000000000000000000
+01110000000000000111110000110100
+01110000000000000101010100000000
+00100000001000000010000111011001
+00100000010000000010000111011001
+01111001001000000000000000100010
+01101000000000001000000101101101
+01111001001111111111111000000010
+01100000000000001000000101101101
+00100000001000000101111000111000
+00100000011000000000000000000000
+01110000000000000111110000000011
+01110000000000000111110100011000
+01110000000010101001100100101110
+00100000010000000111110110000110
+00100000001000000010011011101001
+01101000000000001000010101010010
+11000000100000001101111100011100
+01101000000000001000010101010011
+11000000100000001101111100011100
+01101000000000001000010101010100
+11000000100110000101111100011100
+00100000010000000110001011111100
+00100000001000001101111100011001
+01110000000010011010111000000001
+01110000000000000111110000000011
+01110000000000000111110100111101
+00100000001000000101110100000111
+01110000000000000111111000100100
+00100000001000000101110101010011
+01110000000000000111110000111110
+00100000011000000000000000000000
+01101000000000001100011001100010
+11000000000000001101111100100111
+11000000000000010101111100101011
+00100000010000000110001011111100
+00100000011000001000000000000000
+01110000000010011010111000001000
+00100000011000000000000000000000
+00100000010000000111100101100010
+01110000000010101001100100110101
+00100000010000000111110110000110
+00100000001000000101111100100011
+00100000010000000110001011111100
+00100000011000001000000000000000
+01101000000000001100011001100011
+11000000000010011101111100111011
+00011111111000001111111000000001
+01100000000000001100011001100011
+01110000000010011011000000000001
+01110000000010011010111000000100
+01101000000000001100011001100011
+00011111111000100000111000000000
+01101000000000110100011010001010
+10101111111011111111111111111111
+01011000000000000000000010000000
+01111001001000001111111000000000
+01100000000000001100011001100100
+00100000011000000000000000000000
+01110000000010011010111000001000
+00100000011000000000000000000000
+00100000010000000101111101000011
+01101000000000001100011001100101
+00100000011110100000000000000000
+01110000010001100110010100000000
+01110000000010101001100100111000
+00100000001000000111110110000110
+00100000010000000110001011111100
+00100100010000001111100101100101
+00100000010000001111100101110101
+00100000010000000110001011111100
+00100000011000001000000000000000
+01110000000010011010111000001100
+01110000000010011011000000000001
+00100000011000000000000000000000
+11011000101000000000101001101110
+11011000110000000000010101010010
+00100000010000000111111010111111
+01101000000000001100011001100010
+11000001000000010000000000000000
+00100000001000000111011011011000
+01101000000000001000100110101111
+11000000000000111101111101010101
+01101000000000001000100110101110
+11000000100000001101111101101000
+01101000000000001000100110110111
+00011111111001100000101000100000
+00100100001000010101111101101000
+11011000101000000000100111000110
+10011000101000001000101000000000
+01101000000001000000010101010010
+11100000101001000000000000000000
+01101000000001000000010101011010
+11100000101001000000000000000000
+01101000000000001000100110110111
+00011111111000001111111000010000
+01100000000000001000100110110111
+11000000100110000101111000111000
+00100000010000000110001011111100
+00100000001000001101111000111000
+01110000000010011011100000000001
+01110000000010011010111000000010
+01110000000010011011000000000001
+00100000001000000101111000111000
+01110000000000000111111000100100
+00100000001000000101110101010011
+01101000000000001000100110110110
+11000000000110000101111101101110
+01110000000000000111110000111110
+00100000001000000101110100000111
+00100000010000000110001011111100
+00100000001000001101111101110111
+01101000000000001100011001100010
+11000000000000010101111101110101
+01110000000010011011000000000001
+01110000000010011010111000000100
+00100000001000000101110100000111
+01110000000010101001100100110110
+00100000001000000111110110000110
+00100000001000000101110100000111
+01101000000000001000100110101111
+11000000000000111101111101111100
+01101000000000001000100110101110
+11000000100000110101111110001000
+11011000101000000000101000101110
+01101000000001000000010101010010
+11100000101001000000000000000000
+01101000000001000000010101011010
+11100000101001000000000000000000
+00100000010000000110001011111100
+00100000001000001101111110000110
+01110000000010011010111000000111
+01110000000010011011000000000001
+00100000001000000101111000111000
+01110000000010011010111100000100
+00100000001000000111011011011000
+01110000000000000111111000100100
+00100000001000000101110101010011
+01101000000000001000100110101111
+11000000000001011101111110001110
+01101000000000001000100110101110
+11000000100001000101111110011101
+11011000101000000000101001011110
+11011000110000000000010101010010
+00100000010000000111111010111111
+00100000010000000110001011111100
+00100000001000001101111110011010
+01101000000000001100011001100010
+11000000000000001101111110011111
+01110000010001100110000100000000
+01110000000010011010111000001001
+01110000000010011011000000000001
+01110000000000000111110101000001
+00100000001000000101110100000111
+01110000000010011010111100001001
+01110000000010011011000100000001
+00100000001000000101110100000111
+01110000000000000111111000100100
+00100000001000000101110101010011
+01101000000000001100011001100001
+11000010100000111101111110100100
+01111001001000000111111000000110
+01100000000000001100011001100001
+00100000011000000000000000000000
+11000010100000000101111110010101
+01110000010001100110000100000000
+00100000001000000101111110011101
+00100000001000000101110100000111
+01101000000000001000000101101101
+01111001001111111111111000000001
+01100000000000001000000101101101
+00100000010000000101111000111000
+00100100011101001000000000000000
+01101000000000001000010101010010
+01101000000010001000000001001011
+01111001001110100000010000000100
+01111101001110100000010000000101
+01100000000010001000000001001011
+00100000011000000000000000000000
+01101000000011000000010101010010
+01101000000000001000000001010101
+11000001100000011000000000000000
+01101000000000001000000101101101
+11000011000000100101111110111010
+01110000000000000101010100010100
+00100000011000000000000000000000
+01110000000000000101010100000100
+00100000011000000000000000000000
+01101000000000001000000101111111
+01100000000000001000000101011011
+01110000000000000111110000000011
+01110000000000000111110100111000
+00100000011000000000000000000000
+01110000000000000111110000000011
+01110000000000000111110100111001
+00011000000000000111001000001001
+11011000110000000000010101010010
+11011000101000000000000101010010
+11101000110000001000000000000000
+00011111111000101111111001010101
+11100000101000001000000000000000
+11000010000000000101111111000110
+01101000000000001000000101010010
+01101000000010001000000101010001
+01111001001111111000010000000111
+01111001001111111000010000000100
+11000000011111111101111111011010
+11000000000000000101111111110011
+11000000000000101101111111100111
+11000000000000111101111111100110
+11000000000000110101111111100111
+11000000000001000101111111100110
+11000000000000001101111111011111
+11000000000000010101111111011111
+11000000000000011101111111011111
+11000000000001001101111111011111
+11000000000000100101111111011111
+00100000011000000000000000000000
+01101000000000001000000101010001
+01111001001000000111111000000011
+01111001001000000111111000000010
+01100000000000001000000101010001
+00100000011000000000000000000000
+01111001001000000000010000000100
+01110000000000011000000000000101
+01101000000000010000000101011001
+10011000000000000111001000000000
+01100000000000010000000101011111
+11011000101000000000010101010001
+00100000010000000111111101110011
+01111001001000000000010000000111
+01111001001000000000010000000010
+00011000000000000111111000000000
+01100000000000001000000000001011
+01100000000000010000000011111010
+01100000000000010000000011111100
+01100000000000010000000011111000
+01100000000000010000000011110110
+01101000000000001000000101010011
+00101111111000011111111000000000
+01111001001000001000010000000110
+01100000000010001000000101010001
+00100000011000000000000000000000
+01111001001111111000000000010001
+01110000000000010101000100000000
+01101000000000001000000101111111
+01111001001111111111111000000110
+01100000000000001000000101111111
+00100000011000000000000000000000
+11011000110000000000010101010010
+11011000101000000000010101100010
+00100000001000000111111010111111
+01110000000000000111110000001001
+00100000011000000000000000000000
+00100100011101001000000000000000
+01110000000000000111110000010001
+00100000011000000000000000000000
+11011010001000000100000010100000
+00100000010000000111001001010101
+01110000000000000111110000000011
+01110000000000000111110100001000
+00100000011000000000000000000000
+01110000000000000111001000001010
+01110000000000000111110000000111
+01110000000001001100101000010110
+00100000011000000000000000000000
+01000111010000010100000000110000
+01111000010101000111110000000000
+00100000010000000110001011000001
+01101000000000001000000001001000
+00100000011110100000000000000000
+11000010100000111110000000111111
+11000000000000001110000101101111
+11000000000000010110000011100100
+11000000000000011110000001001010
+11000000000000100110000001100000
+11000000000100111110000111011011
+11000000000101000110000100001000
+11000000000110000110000011110100
+11000000000100101110000111010110
+11000000000100110110000100000011
+11000000000110001110000111000011
+11000000000110111110000101101010
+11000000000110011110000101011100
+11000000000001000110001001011001
+11000000000001001110001001001111
+11000000000001011110001001100100
+11000000000001100110001001101101
+11000000000001111110000101100010
+11000000000010000110001010010010
+11000000000010001110001010001000
+11000000000000111110000101010010
+11000000000101010110000101111110
+11000000000001010110000101111111
+11000000000011111110000110111100
+11000000000000110110000011111001
+11000000000100001110000101011111
+11000000000101101110000110110010
+11000000000101110110000110110111
+11000000000100010110000101011111
+11000000000110100110000110000000
+11000000000010011110000110010101
+11000000000010111110000110100100
+11000000000010010110001010001111
+11000000000101111110000110101010
+11000000000011000110000110101111
+11000000000111101110000111111111
+11000000000111110110001000001011
+11000000000111111110001000011101
+11000000001000000110001000100111
+11000000001000001110001000111100
+11000000000100011110001001001011
+11000000000111011110001001000110
+11000000000000101110001001001100
+11000000000101001110001001001101
+11000000000111000110001001001110
+11000000000111001110000101110101
+00100000001000000010101010001100
+00100000011000000000000000000000
+11000000010000001110000001101101
+11000000010000100110000010011001
+11000000010000010110000001110110
+11000000010000011110000100001101
+11000000010001011110000100011000
+11000000010010111110000101001110
+11000000010011001110000011010101
+11000000010011010110000010100100
+11000000010010101110000011011010
+11000000010010110110000011011011
+00100000001000000010101010001100
+00011000000000000111111000000010
+00100000010000000110001010011000
+01101000000000001000000001001001
+11100000101000001000000000000000
+00100000010000000110001010100111
+01000111010000011100000000110000
+01101000000000001000000001001001
+11000000000001000110000010000000
+11000000000001111110000010000100
+11000000000010000110000010001111
+11000000000010111110000001011111
+11000000000110011110000010010010
+11000000001000001110000010011000
+11000000000010001110000001011001
+00100000011000000000000000000000
+01101000000000001000000001010101
+00100000011110100000000000000000
+01110000000000000101010100011011
+01011000000000000000000000001100
+11011000111000000000000000000111
+00100000001000000111111100001000
+00100000001000000010011011000110
+00011000000000000111111000000011
+00100000010000000110001010011000
+01101000000000001000000001001001
+11000000000001011110000001101000
+11100000101000001000000000000000
+01101000000000001000000001001010
+11100000101000001000000000000000
+00100000001000000110001010100111
+11100000101000001000000000000000
+01101000000000001000000001001010
+11100000101000001000000000000000
+11011000010000000000010011010101
+00100000001000000110001011100010
+00011000000000000000111000000100
+00100000010000000110001010100000
+01011000000000000000000001111111
+11100000101000001000000000000000
+01101000000000001000000001001001
+01111001001111111111111000000111
+11100000101000001000000000000000
+01101000000000001000000001001001
+00100000001000000110001010100111
+00011000000000000000111000000101
+00100000010000000110001010100000
+01011000000000000000000001111111
+11100000101000001000000000000000
+01101000000000001000000001001001
+01111001001111111111111000000111
+11100000101000001000000000000000
+01101000000000001000000001001010
+11100000101000001000000000000000
+00100000001000000110001010100111
+00100000010000000010010001001111
+00100000010000000110001011110011
+00100000011000001000000000000000
+00100000001000000101111111111100
+01101000000000001000000001001011
+11000010100000101110000010001011
+11000100000000100000000000000000
+01110000000000000111110000010010
+01111001001111111111111000000100
+00100000010000000110001011101011
+00100000001000000110000010001101
+01110000000000000111110000010000
+01111001001111111111111000000101
+01100000000000001000000001001011
+00100000011000000000000000000000
+00100000010000000110001011111100
+00100000001000001101111111111110
+00100000011000000000000000000000
+01110000000000000111110010001011
+01101000000000001000010011010001
+01111001001000000111111000000000
+01100000000000001000010011010001
+01110000000010101001100100000001
+00100000001000000111110110000110
+00100000011000000000000000000000
+00011000000000000000111000001100
+00100000010000000110001010100000
+01011000000000000000000000000001
+11100000101000001000000000000000
+01101000000000010000010011001110
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000011000000000000000
+01011000000000000000000000000000
+11100000101000100000000000000000
+00100000001000000110001010110000
+00011000000000000000111000000101
+00100000010000000110001010100000
+01101000000000011100011001011011
+11100000101000011000000000000000
+00100000010000000110001010110000
+01110000010001100110010100000001
+01101000000000001100011001011011
+11000000000000001110000010110101
+11000000000000010110000010101111
+11000000000000011110000010111011
+00100000011000000000000000000000
+01101000000000001100011001011110
+11000000000000000110000011000111
+11000000000000001110000011000111
+11000000000000010110000011000111
+11000000000000011110000011000001
+00100000011000000000000000000000
+01101000000000001100011001011110
+11000000000000000110000011000001
+11000000000000001110000011000101
+11000000000000010110000011000111
+11000000000000011110000011000001
+00100000011000000000000000000000
+01101000000000001100011001011110
+11000000000000000110000011000001
+11000000000000001110000011000001
+11000000000000010110000011000001
+11000000000000011110000011000001
+00100000011000000000000000000000
+01110000010001100110001000000011
+01101000000000001100010101011100
+11000010100000000011001111101001
+00100000011000000000000000000000
+01110000010001100110001000000001
+00100000011000000000000000000000
+01110000010001100110001000000010
+00100000011000000000000000000000
+11011000111000000000000000000000
+00100000001000000110000011001101
+11011000111000000000000000000000
+00100000001000000110000011010001
+01101000000000001100010101011100
+11111001001000000111111000000000
+01100000000000001100010101011100
+00100000011000000000000000000000
+01101000000000001100010101011100
+11111001001111111111111000000000
+01100000000000001100010101011100
+00100000011000000000000000000000
+00011000000000000000111000000101
+00100000010000000110001010100000
+01101000000000011100011001011011
+11100000101000011000000000000000
+00100000001000000110001010110010
+00100000011000000000000000000000
+00011000000000000000111000001001
+00100000010000000110001010100000
+01101000000000001000000010010101
+11100000101000001000000000000000
+01101000000000010000000010010110
+11100000101000010000000000000000
+01101000000000100000000010010001
+11100000101000100000000000000000
+00100000001000000110001010110000
+00011000000000000111111000010001
+00100000010000000110001010011000
+01101000000000001000000001001001
+00011111111000100000010000000000
+11000000000000000110000011101100
+11000000000001110110000011101100
+11000000000011100110000011101100
+00100000011000000000000000000000
+11100000101000001000000000000000
+01101000000000001100010100010101
+11100000101000001000000000000000
+11011111001000000000000000001110
+01011000000000000100010100010110
+10011000010000001000110000000000
+00100000010000000111111100000001
+00100000001000000110001010110000
+00011000000000000111111000000011
+00100000010000000110001010011000
+01011000000000000000000100010100
+11100000101000010000000000000000
+00100000001000000110001010110000
+00011000000000000111111000000011
+00100000010000000110001010011000
+01101000000000100000000101100101
+10011100010001100111111000000000
+00100000001101001110000011111111
+00011111111001100111111000000000
+00011111111010110111111000000000
+01111001001111111111111000001111
+11100000101000010000000000000000
+00100000001000000110001010110000
+00011000000000000111111000000110
+00100000010000000110001010011000
+01101000000000101100010100010000
+11100000101000101000000000000000
+00100000001000000110001010110000
+00011000000000000111111000001001
+00100000010000000110001010011000
+01101000000001000100000010011000
+11100000101001000000000000000000
+00100000001000000110001010110000
+00011000000000000000111000001100
+00100000010000000110001010100000
+01011000000000000000000000000001
+11100000101000001000000000000000
+01101000000000010000010011001110
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000011000000000000000
+01011000000000000000000000000000
+11100000101000100000000000000000
+00100000001000000110001010110010
+00011000000000000000111000000011
+00100000010000000110001010100000
+01101000000000001100000101011010
+11100000101000001000000000000000
+01111000010101000111110000000000
+00100000010000000110001010110010
+00100100011101000000000000000000
+00100100011101001000000000000000
+01101000000000001100000011011000
+11000100000000000000000000000000
+00100000010000000110000100110010
+00100000001000000110000100111100
+01000111010000100100000000110000
+01101000000000001100000010011110
+01111001001000000111111000000011
+01100000000000001100000010011110
+01011000000000000000000100000001
+01100000000000010000010011001110
+00100000011000000000000000000000
+01000111010000101100000000110000
+01101000000000001100000010011110
+01111001001111111111111000000011
+01100000000000001100000010011110
+01011000000000000000000000000000
+01100000000000010000010011001110
+00100000011000000000000000000000
+01110000010000001101100000000011
+01011000000000000000000000000000
+01100000000000100100000101000010
+11011000101000000100000011011010
+00100000010000000110000101000000
+11011000101000000100000011100111
+00100000010000000110000101000000
+11011000101000000100000101000110
+00100000010000000110000101000000
+00100000001000000110000101000111
+11011000101000000100000011100111
+00100000010000000110000101000000
+00100000010000000110000101000111
+00100000001000000110000101001010
+01011000111111111111111111111111
+11100000101000011000000000000000
+11100000101000011000000000000000
+11100000101000011000000000000000
+01011000000000000000000001111111
+11100000101000001000000000000000
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000010100000011010110
+00100000011000000000000000000000
+01101000000000001100000011011000
+01111001001000000111111000000010
+01100000000000001100000011011000
+00100000011000000000000000000000
+00011000000000000000111000000010
+00100000010000000110001010100000
+00100100001101001110001010110000
+00100000001000000110001010110010
+00011000000000000111111000000010
+00100000010000000110001010011000
+01101000000000001000010011001010
+11100000101000001000000000000000
+00100000010000000110001010110010
+01101000000000001000000001001011
+01111001001000000111111000000011
+01100000000000001000000001001011
+01110000000000000111001000110010
+00100000011000000000000000000000
+00011000000000000111111000000001
+00100000010000000110001010011000
+00100000001000000110001010110010
+00011000000000000111111000000001
+00100000010000000110001010011000
+00100000001000000110001010110000
+00011000000000000111111000000010
+00100000010000000110001010011000
+01101000000000001000000001001100
+00101111111011000000000000000010
+01111001001000001111111000000000
+00011111111000010111111000000001
+11100000101000001000000000000000
+00100000001000000110001010110010
+00011000000000000111111000000011
+00100000010000000110001010011000
+01101000000000010000000001010001
+11100000101000010000000000000000
+00100000001000000110001010110010
+01110000000000000111001011111010
+00011000000000000111111000000010
+00100000010000000110001010011000
+01101000000000001000000001010011
+11100000101000001000000000000000
+00100000001000000110001010110010
+00011000000000000111111000001010
+00100000010000000110001010011000
+11011000110000000000000101010010
+00011000000000000111001000001001
+11101000110000001000000000000000
+00011111111000101111111001010101
+11100000101000001000000000000000
+11000010000000000110000101111001
+00100000001000000110001010110010
+00100000001000000110001010110010
+00100000001000000110001010110010
+00100000011101001000000000000000
+00100000010000000010100000101101
+00011000000000000111111000001001
+00100000010000000110001010011000
+01101000000000010000000101110001
+11100000101000010000000000000000
+01101000000000011100000010100000
+11100000101000011000000000000000
+01101000000000001100000010100011
+11100000101000001000000000000000
+01101000000000010100000010100100
+11100000101000010000000000000000
+11000101100000011110000110010001
+01111001001111111000000000000011
+00100000010000000110001010110010
+01110000000000000111110000010011
+00100000011000000000000000000000
+00100000010000000110001010110000
+01110000000000000111110000000011
+01110000000000000111110100010011
+00100000011000000000000000000000
+11011000010000000000001000000000
+00100000001101001110000110011001
+00011101000000100111111000000000
+00100000001000000110000110011010
+00011100010000100111111000000000
+00011100001000100111111000000000
+10011000010000001111111000000000
+00011111111000010111111111111100
+01100000000000100000000000110100
+00011000000000000111111000000101
+00100000010000000110001010011000
+01101000000000100000000000110100
+00011111111000110111111000000000
+11100000101000100000000000000000
+00100000001000000110001010110010
+00011000000000000111111000001010
+00100000010000000110001010011000
+11011000110000000000010011011001
+11101000110001001000000000000000
+11100000101001001000000000000000
+00100000001000000110001010110010
+00011000000000000111111000000011
+00100000010000000110001010011000
+01011000000000000000000100010100
+11100000101000010000000000000000
+00100000001000000110001010110010
+00011000000000000111111000000001
+00100000010000000110001010011000
+00100000001000000110001010110010
+00011000000000000111111000000010
+00100000010000000110001010011000
+01101000000000001100000011010000
+11100000101000001000000000000000
+00100000001000000110001010110010
+00011000000000000111111000000010
+00100000010000000110001010011000
+01011000000000000000000000000101
+11100000101000001000000000000000
+00100000001000000110001010110010
+00011000000000000111111000000010
+00100000010000000110001010011000
+01011000000000000000000000000000
+11100000101000001000000000000000
+00100000001000000110001010110010
+01110000000000000111110000101110
+00100000011000000000000000000000
+01101000000000001100000010010010
+00011111111001100111110000001010
+00100000010000101110000111000001
+01101000000000001000000000110000
+01111001001000000111111000000100
+01100000000000001000000000110000
+00011100010000100111111000000000
+01100000000000100000010011101001
+01101000000000001000010011010001
+11000010100000011110000111010100
+01111001001000000111111000000011
+01100000000000001000010011010001
+01110000000010101001100100000101
+00100000010000000111110110000110
+00011000000000000111111000000001
+00100000010000000110001010011000
+00100000001000000110001010110010
+01110000000000000100100000000000
+00100000011000000000000000000000
+00011000000000000111111000000110
+00100000010000000110001010011000
+01101000000000101100010100010000
+11100000101000101000000000000000
+00100000001000000110001010110010
+00011000000000000111111000001001
+00100000010000000110001010011000
+01101000000001000100000010011000
+11100000101001000000000000000000
+00100000001000000110001010110010
+01110000000010011011000100000001
+01101000000000001100010110110001
+11000001100000001000000000000000
+01110000000010011010111100010011
+00100000011000000000000000000000
+00100000010000000110001011101111
+01110000000000000111110010011001
+01110000000010011010111100000011
+00100000011000000000000000000000
+00100000010000000110001011101111
+01110000000000000111110000111101
+01110000000010011010111100000111
+00100000011000000000000000000000
+11011010001000000000101001001110
+11011010010000000000101001101110
+11011111001000000000000000010000
+00100000010000000111111110001000
+00100000001000101110000111110111
+01110000000010011010111100000000
+00100000010000000111011011011010
+01110000000000000111111000100100
+01110000000000000111110101000000
+00100000001000000101110101010011
+01110000000010011010111100001010
+00100000010000000111011011011000
+01110000000000000111110101000000
+00100000001000000101111000111000
+01110000000000000111110001000000
+00100000011000000000000000000000
+01110000000000000111110000111101
+00100000011000000000000000000000
+01110000000010011011011000000000
+00011000000000000111111000000100
+00100000010000000110001010011000
+00011000000000000111111000000001
+11100000101000001000000000000000
+00011000000000000111111000000001
+11100000101000001000000000000000
+00011000000000000111111000110000
+11100000101000001000000000000000
+00100000010000000110001011111100
+00100000001000001110001010110010
+00100000001000000110001010110000
+00011000000000000111111000010001
+00100000010000000110001010011000
+01101000000000001000100110110110
+11011000110000000100011000101010
+10011000110000001000110000000000
+11101000110001000000000000000000
+11100000101001000000000000000000
+11101000110001000000000000000000
+11100000101001000000000000000000
+01101000000000001000100110110110
+00011111111000001111111000010000
+01100000000000001000100110110110
+00100000010000000110001011111100
+00100000001000001110001010110010
+00100000001000000110001010110000
+01110000000010011010111000000110
+01110000000000000111110000111111
+00100000011000000000000000000000
+00011000000000000111111000010001
+00100000010000000110001010011000
+11011000110000000000101001001110
+11101000110001000000000000000000
+11100000101001000000000000000000
+11101000110001000000000000000000
+11100000101001000000000000000000
+00100000001000000110001010110000
+01110000000000000111110001000000
+00100000011000000000000000000000
+00100000010000000110001011111100
+00100000010000001111011000010010
+00011000000000000111111000010001
+00100000010000000110001010011000
+11011000110000000000101000011110
+11101000110001000000000000000000
+11100000101001000000000000000000
+11101000110001000000000000000000
+11100000101001000000000000000000
+00100000010000000110001011111100
+00100100001000001110001010110000
+00100000001000001110001010110010
+01110000000010011010111100001111
+00100000010000000110001011101111
+01110000000000000111110000001011
+00100000010000000110001100000111
+00100000001000001111011001001110
+00100000001000000111011001011000
+00100000010000000110001011101011
+01110000000000000111110001000001
+00100000011000000000000000000000
+00011000000000000111111000010001
+00100000010000000110001010011000
+11011000110000000000101001001110
+11101000110001000000000000000000
+11100000101001000000000000000000
+11101000110001000000000000000000
+11100000101001000000000000000000
+00100000010000000110001011111100
+00100100001000001110001010110000
+00100000001000001110001010110010
+00011000000000000111111000000011
+00100000010000000110001010011000
+01011000000000001111111111111110
+11100000101000010000000000000000
+00100000001000000110001010110000
+00100000001000000110001010110010
+00100000001000000110001010110010
+00100000001000000110001010110010
+00100000001000000110001010110010
+00100000010000000110001100001011
+11011010001000000100000010100000
+00100000010000000110001100010001
+00011000000000000111111000010001
+00100000010000000110001010011000
+11011010001000000000010110000010
+11011010010000000000010101100010
+00100000010000000111001101010010
+00100100001101001110001010100111
+00100000001000000110001010101101
+00100000010000000110001100001011
+11011010001000000000000001000000
+00100000010000000111001001010101
+00011000000000000111111000010001
+00100000010000000110001010011000
+11011000110000000000010101100010
+00100000010000000111111010111111
+01101000000000001000000001010101
+11000000000011001110001010110010
+11000000000011000110001010110010
+00100000001000000110001010101101
+01101000000000001000100110110101
+00100000001110100110001001101010
+00100000010000000110001011111100
+00100000010000001110001011101111
+00100100010000001110001011101011
+00100000001000000110001001101011
+00100000010000000110001011101111
+00100000010000000110001100001011
+00100000001000000110001001011100
+11011010001000000100000010100000
+00100000010000000111001010001000
+00011000000000000111111000000101
+00100000010000000110001010011000
+01101000000000100000010110010010
+11100000101000100000000000000000
+11011000010000000000010011010101
+00100000010000000110001011100010
+00100000010000000111001110000110
+00100000010000000110001011111100
+00100000001000001110001001111100
+01110000000001001101100000000001
+01101000000000001000100110110101
+00100000011110100000000000000000
+01110000000000000111110000001011
+01101000000000001100000110111101
+00100000011110100000000000000000
+00100000010000000110001011111100
+00100100001000001110001010000100
+01101000000000001000010011010111
+00100000011110100000000000000000
+01110000000000000111110000001111
+00100000011000000000000000000000
+11000110100100001000000000000000
+01111001001111111000000000100001
+01110000000000000111110000001111
+00100000011000000000000000000000
+00100000010000000110001100001011
+00100000010000000111001010001011
+00011000000000000111111000010001
+00100000010000000110001010011000
+11011000110000000000010101100010
+00100000010000000111111010111111
+00100000001000000110001010101101
+00011000000000000111111000000001
+00100000010000000110001010011000
+00100000001000000110001010101101
+00011000000000000111111000000010
+00100000010000000110001010011000
+00011000000000000111111000010000
+11100000101000001000000000000000
+01100000000000001000000001010100
+00100000001000000110001010101101
+00011111111010011111111000000000
+00011111111000011111111000000111
+01100000000000001000010010110110
+11011111001000000000000000010001
+11011000101000000000010010111000
+00100000010000000111111011010100
+11011000101000000000010010111000
+00100000011000000000000000000000
+00011111111000010010001001111111
+01110000000000000100100001111111
+00011000111000100111111000000000
+00100000010000000110001010011000
+00011010001000100111111000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+01101000000000001000000001001000
+00011111111000111111111000000000
+01101000000010001000000001001100
+00101000010011111111111000000001
+01111001001000001111111000000000
+00100000001000000110001010110111
+01101000000010001000000001001100
+00011000010000010000010000000001
+00100000001000000110001010110011
+00011000000000000000010000000000
+00100000001000000110001010110011
+00011000000000000000010000000001
+01101000000000001000000001001000
+00011111111000111111111000000000
+01111001001101001111111000000000
+10011000010000101111111000000000
+01100000000000001000010010110111
+01110000000000000100100000000000
+00100000010000000110001011000111
+01111000001101000111110000000000
+00100000011000000000000000000000
+01101000000000001000000001111100
+00100000011110100000000000000000
+00100000010000000110001011000001
+01101000000000001000000001111100
+00100000011000000000000000000000
+01000111010000110100000000110000
+01101000000000001000000001001000
+00100000001110100110001011000111
+01101000000000001000000001111000
+00100100011110100000000000000000
+00100000001000000110001011010001
+01101000000000001000000001111000
+00100000001110100110001011010111
+01101000000000011000000001111000
+01100000000000011000000001001000
+01101000000010001000000001111011
+01101000000000001000000001001100
+01111001001111111111111000000001
+10011000010000011111111000000000
+01100000000000001000000001001100
+01110000000000000111100000000000
+01101000000000001000000001111100
+00100000011110100000000000000000
+01101000000000100000000001111100
+01100000000000100000000001111000
+01110000000000000111110000000000
+00100000011000000000000000000000
+01101000000000001000000001111100
+00100000011110100000000000000000
+01101000000000011000000001111100
+01100000000000011000000001001000
+01101000000010001000000001111111
+01101000000000001000000001001100
+01111001001111111111111000000001
+10011000010000011111111000000000
+01100000000000001000000001001100
+01110000000000000111110000000000
+00100000011000000000000000000000
+01000111010000111100000000110000
+01101000000000001000000001001100
+00011111111000100010011000000000
+11101000010000001000000000000000
+00100000010000000101111001010010
+00100000010000000110001010100111
+00011010011000100111111000000000
+01100000000000001000000001001100
+00100000011000000000000000000000
+01101000000010001000000001001100
+01111001001111111000010000000000
+01100000000010001000000001001100
+00100000011000000000000000000000
+01101000000010001000000001001100
+01111001001000000000010000000000
+01100000000010001000000001001100
+00100000011000000000000000000000
+01111101001101001111111000000001
+01101000000010001000000001001100
+10011000010000101111111000000000
+00101111111011111111111000000001
+00100000011000000000000000000000
+01101000000000001000000001001100
+01111001001101001111111000000001
+01100000000000001000000001001100
+00100000011000000000000000000000
+01101000000000001000100110110100
+00101111111000001111111000000001
+00100000011000000000000000000000
+01101000000000001000100110110100
+01111001001000000111111000000111
+01100000000000001000100110110100
+00100000011000000000000000000000
+01101000000000001000100110110100
+01111001001111111111111000000111
+01100000000000001000100110110100
+00100000011000000000000000000000
+01101000000000001000100110110100
+00101111111011111111111000000111
+01100000000000001000100110110100
+00100000011000000000000000000000
+11011000101000000000010101100010
+00011000000000000111001000010000
+00011000000010100111111000000000
+11100000101000001000000000000000
+11000010000000000110001100001101
+00100000011000000000000000000000
+00100000010000000111001001011001
+11011010001000000100000110111110
+11011010010000000000010110010010
+11101010001001000000000000000000
+01101000000010001000000000110000
+01111101001110100000010000000110
+01100000000010001000000000110000
+00011010001000100000101000000000
+00100000010000000111001101010010
+00100000001000000010000111000100
+01000111010001000100000000110001
+00100000010000000110001010111100
+00100100011110100000000000000000
+01101000000000001000000001010101
+00100000011110100000000000000000
+11000000000000100110001101101111
+11000000000000101110001101110100
+11000000000000010110001101100110
+11000000000000011110001101111100
+11000000000001110110001101101001
+11000000000000110110001110011000
+11000000000000111110001110110000
+11000000000001001110001110110001
+11000000000001010110001110111010
+11000000000001011110001110111110
+11000000000001100110001110000110
+11000000000001101110001110001001
+11000000000001111110001110001111
+11000000000010010110001101011001
+11000000000010011110001101111100
+11000000000010000110001101011100
+11000000000010100110001101010110
+11000000000010101110001101111100
+11000000000010110110001101010000
+11000000000011000110001101010101
+11000000000010111110001101001001
+11000000000011001110001101001111
+11000000000011010110001100111010
+11000000000011011110001101000100
+01110000000000000101010100000000
+00100000011000000000000000000000
+01101000000000001000010011010001
+11000100000000010000000000000000
+11000100000000011000000000000000
+01110000000000000101010100000000
+00100000010000000110001101000000
+00100000001000000110110011101111
+01101000000000001000000101101101
+11000100000000001000000000000000
+01110000000000000101010100001010
+00100000011000000000000000000000
+11011000111000000000000000000111
+00100000010000000111111100010110
+00100100011110100000000000000000
+01110000000000000101010100011010
+00100000011000000000000000000000
+01101000000000001000000101101101
+01111001001111111111111000000000
+01100000000000001000000101101101
+01110000000000000101010100011001
+01110000000000000111110000001011
+00100000011000000000000000000000
+00100000011000000000000000000000
+01101000000000001000010011010100
+11000001100000010000000000000000
+00100000010000000110001111000000
+01110000000000000101010100011000
+00100000011000000000000000000000
+00100000011000000000000000000000
+01110000000000000101010100010101
+01110000000000000111110010000011
+00100000011000000000000000000000
+01110000000000000101010100010011
+01110000000000000111110000100101
+00100000011000000000000000000000
+01101000000000001100010101011011
+11000001000000000000000000000000
+11000000000000001110001101100100
+11011000111000000000000000000110
+00100000010000000111111100010110
+00100100011110100000000000000000
+01110000010001010101101100000000
+00100000001000000110001101111101
+00100000011101001000000000000000
+00100000001000000110001110011000
+01110000000000000101010100000011
+01110000000000000111110000100111
+00100000011000000000000000000000
+01110000000000000111110000010011
+01111001001000000000000000000011
+01110000000000000101010100000101
+01011000000000000000000111111111
+01100000000000010000010011010010
+00100000011000000000000000000000
+01110000000000000101010100000101
+01110000000001001101001011111111
+01111001001111111000000000100010
+01110000000000000111110000110011
+00100000001000000101110100000100
+11000110000100010000000000000000
+01101000000000010000010011010010
+00011111111001100111111000000001
+00100000001000101110001101111010
+01100000000000010000010011010010
+00100000011000000000000000000000
+01110000000000000101010100001110
+00100000011000000000000000000000
+00100000011000000000000000000000
+01101000000000001000010011010001
+11000100000000011000000000000000
+11000100000000010000000000000000
+01101000000000001000000101101101
+01111001001111111111111000000010
+01100000000000001000000101101101
+01110000000000000111110000010011
+01110000000000000101010100010000
+00100000011000000000000000000000
+01110000000000000101010100001101
+01110000000000000111110000110001
+00100000011000000000000000000000
+01101000000000001000010011010001
+11000100000000010000000000000000
+01110000000000000101010100000000
+00100000011000000000000000000000
+01110000000000000101010100000110
+00100000011000000000000000000000
+01101000000000001000010011010010
+00011111111000001111111111111111
+00100000001110100110001110010100
+01100000000000001000010011010010
+00100000011000000000000000000000
+01110000000000000111110000000111
+01110000000001001100101000010110
+01110000000000000101010100000000
+00100000011000000000000000000000
+01101000000000001000000101101101
+11000010100000010110001101111101
+11000010100000000110001110011101
+01110000000000000101010100011010
+00100000011000000000000000000000
+01101000000000001100000110111101
+00100000001110100110001110101001
+01101000000000001000010011010001
+11000100000000011000000000000000
+11000100000000010000000000000000
+01101000000000100000010011101001
+11011000010000000000000001100100
+10011000010000001000010000000000
+00011100010000100111111000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+00100000001000000110001101001001
+01110000000000000101010100010110
+01110000010001101000100100000100
+01011000000000000011000000110000
+01100000000000010100011010001010
+11100000101000010000000000000000
+01110000000001001101010000000010
+00100000001000000110001101010000
+00100000011000000000000000000000
+01101000000000001000000101101101
+11000010100000001110001110110101
+01110000000000000101010100011010
+00100000011000000000000000000000
+01101000000000001000000101101101
+01111001001111111111111000000001
+01100000000000001000000101101101
+01110000000000000111110000001111
+00100000011000000000000000000000
+01101000000000001000010011011000
+00100000011110100000000000000000
+01110000000000000101010100000000
+00100000001000000110001110110101
+01110000000000000101010100001100
+00100000011000000000000000000000
+01101000000000001000000001001011
+11000010100000010110001111000101
+00100000010000000110001011101111
+01110000000000000111110000001000
+00100000001000000100110100000100
+01101000000000001000000001001011
+01111001001111111111111000000010
+01100000000000001000000001001011
+00100000010000000110000000000001
+00100000010000000110001011111000
+00100000001000000100110100000100
+01011000000000000000000000000100
+01100000000000001100011010001001
+01011000000000000011000000110000
+11100000101000010000000000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+01000111010001100100000000110001
+01101000000100001000000001110011
+11011000010000000000000000000110
+10011000010000011111111000000000
+01100000000100001000000001110011
+01101000000100001000000001110111
+10011000010000011111111000000000
+01100000000100001000000001110111
+00100000010000000110001111101110
+01101000000100001000000001110111
+01111001001111111111111000000001
+01111001001111111111111000000010
+01100000000100001000000001110111
+00100000000000000000000000011110
+00100000001000000110001111110010
+01101000000100001000000001110011
+11011000010000000000000011000000
+10011000010000011111111000000000
+01100000000100001000000001110011
+01101000000100001000000001110111
+10011000010000011111111000000000
+01100000000100001000000001110111
+00100000010000000110001111101110
+01101000000100001000000001110111
+01111001001111111111111000000110
+01111001001111111111111000000111
+01100000000100001000000001110111
+00100000000000000000000000011110
+00100000001000000110001111110110
+01101000000100001000000010000001
+00011111111000010111111011111100
+01100000000100001000000010000001
+00100000011000000000000000000000
+01101000000100001000000010000001
+00011111111000011111111000000001
+01100000000100001000000010000001
+00100000011000000000000000000000
+01101000000100001000000010000001
+00011111111000011111111000000011
+01111001001111111111111000000100
+01100000000100001000000010000001
+00100000011000000000000000000000
+00011111111000100010010000000000
+00100000010000000110010000001111
+00100000000000000000000001100100
+00011010010000100111111000000000
+00100000010000000110010000010100
+00011111111000100010010000000000
+00100000010000000110010000010001
+00100000000000000000000001100100
+00011010010000100111111000000000
+00100000011000000000000000000000
+00011111111000100010010000000000
+00100000010000000110010000001111
+00100000000000000000000001100100
+00011010010000100111111000000000
+00100000010000000110010000010011
+00100000010000000110010000010001
+00100000000000000000000001100100
+00100000011000000000000000000000
+01101000000010001100001000010100
+00100000001000000110100000001110
+01101000000010001100001000010100
+00100000001000000110100000101001
+01101000000010001100001000010100
+00100000001000000110100000100101
+00100000001000000110010011101100
+00100000001000000110010011110011
+00100100001101000110010000011001
+01101000000100001000000010000101
+00011111111000011111111000000010
+01100000000100001000000010000101
+00011000010000100111110000000000
+00100000001000101110010000011100
+00011010011000100111101000000000
+00101111110011000000000000000000
+00100000001000000110010010111001
+00011000000000000000010000000100
+11011010001000000000000111111110
+01101000000100001000000010000101
+00011111111000010111111011111101
+01100000000100001000000010000101
+00100000010000000110010000011001
+11011010001000000101010110101010
+01101000000000010000000111111110
+11101000110010010000000000000000
+10011010001001100111110000000000
+00100000011000000000000000000000
+11011000010000000000000000000010
+11011010001000000000001000000100
+00100000010000000110010000011001
+01101000000000010000001000000100
+01100000000000010000000111110111
+00100000010101000110010000110000
+00100000011000000000000000000000
+11011000010000000000000000010000
+11011010001000000000001000000110
+01101000000100001000000010000101
+00011111111000010111111011111101
+01100000000100001000000010000101
+00100000010000000110010000011001
+11011000110000000000001000000110
+11011111001000000000000000010000
+00100000010000000111010001111000
+00100000010000000111010000101000
+00100000010000000111010010010001
+00100000001000000111010000100010
+01111000010101101111110000000000
+00100000010000000110010000011110
+00100100011000101000000000000000
+01111000001101101111110000000000
+01110000100000000010001110000000
+01110000100000000010001000000000
+01110000100000000010010000000000
+11011010001000001000000000100101
+00100000010000000110010000010101
+01110000100000000010001100000000
+11011000010000000000000000000110
+00100000010000000110010000011111
+00100100011000101000000000000000
+11101000110000010000000000000000
+10011000000000000010001000000000
+00100000010000000110010000011001
+00100000001000000110010001000110
+00100000010000000111111110011001
+01011000000000000001000000000000
+01100000000000010000000111110111
+11011010011000000110010111100101
+11011111001000000000000000000010
+00100000010000000110010000011110
+00100100011000101000000000000000
+01101000000000010000000111110111
+00011111111100001111111000000000
+10011000010000001111111000000000
+00011111111100001111111000000000
+01100000000000010000000111110111
+11000010000000000110010001010010
+00100000001000000110010001000110
+00100000010000000111111110011001
+01111000010101000111110000000000
+00100000010000000110011001101010
+01011000000000000000000000000000
+11011010001000000000000111110011
+11011000010000000000000000000010
+00100000010000000110011010110011
+01101000000000010000000111110011
+11000011000000111110010001101110
+01110000100000000101000000100101
+01011000000000000000011111110000
+11011010001000000000001000000110
+11011000010000000000000000010000
+00100000010000000110011010110011
+01110000100000000000011000001000
+01111001001000000000000000101011
+11011000110000000000001000000110
+00100000010000000111010010000100
+01111000001101000111110000000000
+01110000010000011101101000000000
+00100000010000000110010010110000
+01101000000000010000000111110011
+00011111111100001111111000000000
+11011000010000000000011111111111
+10011000010000010111111000000000
+00100000001000101110010001111011
+00100000010000000110011001101111
+11011010011000000110011010111000
+00100000010101000110010000110000
+00100000010000000110010000111100
+01101000000000001000000111110010
+11000011000000000110010001101111
+00100000010000000110011001101101
+01110000010000011101101000000000
+00100000010000000110010010110000
+00100000010000000110010111000010
+01101000000000001000000111110011
+11000010100000110110010010001110
+00100000010000000110010010101010
+00100100001101101110010010000110
+01101000000000001000000111110010
+11000011000000000110010001111101
+00100000001000000110010010011011
+00100000010000000110010110111111
+01101000000000001000000111110011
+11000010100000110110010010001110
+00100000010000000110010010101010
+00100100001101101110010010001110
+01101000000000001000000111110010
+11000011000000000110010001111101
+00100000001000000110010010011011
+01110000010000011101101000000000
+00100000010000000110010010110000
+01101000000000001000000111110011
+11000010100000101110010010011011
+01011000000000000000000000000000
+01100000000000011000000111110110
+00100000010000000110010100000010
+11011010011000000110010101111000
+00100000010000000110010000101001
+00100000010000000110010000111100
+00100100001101101110010010011011
+01101000000000001000000111110010
+11000011000000000110010010001111
+11000101000101011110010010011101
+00100000010000000110010010100011
+01101000000000001000000111110011
+11000011000000100110010010100011
+01110000100000000101000000100001
+00100000010000000100110000001110
+00100000010000000100110000101110
+00100000001000000110010010100001
+01011000000000000000000000000000
+01100000000001000000001000000110
+01100000000001000000001000001110
+00011000000000000111000000000100
+00100000010000000111010010010010
+01110000100000000101000000100001
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000000010000000111110111
+11011010011000000110010111100101
+00100000010000000110010110100011
+00100000010000000110010000101001
+00100000001000000110010000111100
+01101000000000001100000111011010
+00011111111000001111111000000001
+00011111111001100111110000000011
+00100100001000010110010010110110
+01100000000000001100000111011010
+00100000011000000000000000000000
+00100000010000000110010010100011
+00100000010000000111111110100001
+00100000011000000000000000000000
+01101000000000001000000111110010
+00011111111000111111111000000000
+01111001001000001111111000000000
+00101010001011000000000000001111
+00100000011000001000000000000000
+01100000000000001000000111110010
+00100000011000000000000000000000
+01101000000100001000000010000101
+11000100000000001000000000000000
+00100000001000000110010011000110
+01101000000100001000000100101100
+10101111111011111111111111111111
+00100000011000001000000000000000
+01101000000100001000000100001000
+11000011000000001110010011000011
+00100000010000000111010000100010
+00100000001000000110010011000011
+01101000000000010100000110011001
+00100000011110100000000000000000
+01110000100000000010001110000000
+01110000100000000010001000000000
+01110000100000000010010000000000
+01101000000010010100000110011011
+00011000010010111111001000000000
+10011000000000000000110000000000
+11101000110000001000000000000000
+01100000000100001000000000100101
+11000010000000000110010011010010
+01110000100000000010001100000000
+00100000011000000000000000000000
+01000111010001101100000000110001
+00100000010000000110010011011101
+00100000001000000110001111110010
+00100000010000000110010011011101
+00100000010000000110001111101110
+00100000001000000110001111110110
+01101000000000001100001000010010
+01100000000100001000000010000110
+01101000000000001100001000010011
+01100000000100001000000010000111
+01011000000000000000000111110101
+01100000000100010000000010001010
+01011000000000000000000111111010
+01100000000100010000000010001100
+00100000001000000110001111101110
+01101000000100001000000010000110
+01111001001000000111111000000111
+01100000000100001000000010000110
+01111001001111111111111000000111
+01100000000100001000000010000110
+00100000011000000000000000000000
+01111001001000000111111000000111
+01100000000000010000000111110101
+01000111010001110100000000110001
+01110000100000001000100000000010
+01110000100000001000111000000000
+01110000100000000000011000000010
+00100000001000000110010011111100
+00011000000000000000010000000001
+01100000000000001000000111110101
+01000111010001111100000000110001
+01110000100000001000100000000001
+01100000000110010000000010001110
+01110000100000000000011000000010
+00100000010000000110010011111100
+01101000000000001000000111111010
+00100000011000000000000000000000
+01101000000000010100000011010110
+00011111111000001111111000000001
+01100000000000010100000011010110
+01101000000100001000000100101100
+11000011000000011110010011111100
+00100000011000000000000000000000
+01110000100000001000011001000000
+01110000100000001000011100000000
+01101000000100001000000010000001
+01111001001111111111111000000000
+01111001001000000111111000000001
+01100000000100001000000010000001
+01011000000000000000000000000000
+01100000000000100000000111110101
+00100000011000000000000000000000
+01011000000000000000000000000000
+01100000000100010000000010001110
+01011000000000000000000000000001
+01100000000100010000000010001000
+01011000000000000000000111110101
+01100000000100010000000010001010
+01110000000000011111010100000110
+01110000100000000000011000000010
+00100000001000000110010011111100
+01111000010101000111110000000000
+00011111111000100010010000000000
+01101000000000001100001000111001
+11000001100000000000000000000000
+01111000001101000111110000000000
+00011010010000100111111000000000
+00100000001000000110010100100010
+01101000000000001100001000111001
+11000000000000001110010100100010
+11000000000000010110010100101000
+11000000000000011110010100110000
+11000000000000100110010100110111
+11000000000000101110010100111101
+00100000011000000000000000000000
+01100000000000011100001000110010
+00011010001000100111111000000000
+01100000000000010100001000110101
+01100000000010010100001000110111
+01110000010000100011100100000010
+00100000001000000110010100000010
+00100000010000000110010100000010
+01110000010000100011100100000011
+00100000010000000110010100001011
+11011010001000000000000111110101
+01101000000000011100001000110010
+01110000100000001000100000000100
+11011000010000000000000000100000
+00100000001000000110010101010110
+00100000010000000110010100000010
+00100000010000000110010100001011
+01011000000000000000000000000101
+00100000010000000110010011110011
+11000011100000000000000000000000
+01110000010000100011100100000100
+00100000011000000000000000000000
+00100000010000000110010100000010
+01110000010000100011100100000101
+00100000010000000110010100001011
+00100000010000000110010101001010
+00100000010000000110010101010010
+00100000001000000110010101000101
+00100000010000000110010100000010
+00100000010000000110010100001011
+01011000000000000000000000000101
+00100000010000000110010011110011
+11000011100000000000000000000000
+01110000010000100011100100000000
+01101000000000010100001000000001
+00100000001000000111111110011100
+01101000000000100000101010100010
+01101000000010010100001000110101
+00011000010000001000010111111100
+11100000010000100000000000000000
+00100000011000000000000000000000
+01101000000010010100001000110101
+00011000010000100010001000000000
+00011000010000001000010111111100
+11101000010000100000000000000000
+01100000000000100000101010100010
+01101000000010010100001000110111
+01101000000000011100001000110010
+00100000011000000000000000000000
+00011000010000001000010000000100
+01100000000110010000000010001000
+11011000010000000000000000000010
+00011010001000001010001111111100
+11100010001010001000000000000000
+00011111111100010000010000000000
+11100000101010001000000000000000
+00011111111011001000010000000000
+11100000101010001000000000000000
+11100000101000001000000000000000
+00011010001000100111111000000000
+01100000000100010000000010001010
+01011000000000000000000000000000
+01100000000100010000000010001110
+01110000100000000000011000000010
+00100000001000000110010011111100
+01100000000110010000000010001110
+00011111111100010000010000000000
+01100000000010001000000111110110
+00011111111011001000010000000000
+01100000000010001000000111110111
+01100000000000001000000111111000
+01011000000000000000000000000100
+01100000000100010000000010001000
+01110000000000011111010100000011
+01011000000000000000000111110101
+01100000000100010000000010001010
+00011010001000100111111000000000
+01100000000100010000000010001100
+01101000000100001000000010000110
+00101010001011000000000000001111
+01111001001000001111111000000110
+01100000000100001000000010000110
+01110000100000000000011000000010
+01101000000100001000000100101100
+11000010100000111110010101110100
+11011000111000000000000000000011
+00100000001000000110010011111100
+01100000000110010000000010001110
+01011000000000000000000000000100
+01100000000100010000000010001000
+01110000000000011111010100000011
+01011000000000000000000111110101
+01100000000100010000000010001010
+00011010001000100111111000000000
+01100000000100010000000010001100
+01101000000100001000000010000110
+00101010001011000000000000001111
+01111001001000001111111000000110
+01100000000100001000000010000110
+01110000100000000000011000000010
+01101000000100001000000100101100
+11000010100000111110010110000101
+11011000111000000000000000000011
+00100000010000000110010011000000
+00100000010000000110010011111100
+00101111111011111111111000000010
+00100000010000000110010010111001
+01101000000000001000000111110110
+00011111111100000010010000000000
+01101000000000001000000111110111
+00011111111011010111111000000000
+10011010010000011010010000000000
+01101000000000001000000111111000
+10011010010000011111111000000000
+10011000010000001111111000000000
+01100000000000001000000111111000
+00011111111011001111111000000000
+01100000000000001000000111110111
+00011111111011001111111000000000
+01100000000000001000000111110110
+00100000011000000000000000000000
+01110000100000000001000000000001
+00100000011000000000000000000000
+01110000100000001001000100001100
+01110000100000001001001000001101
+01110000100000001001001100001101
+01110000100000001001010000001101
+01110000100000001001010100001101
+01110000100000001001011000001100
+00100000001000000110010110101001
+01110000100000001001000100000101
+01110000100000001001001000000111
+01110000100000001001001100000111
+01110000100000001001010000000111
+01110000100000001001010100000111
+01110000100000001001011000000101
+01101000000100001000000001111011
+00011111111000011111111011000000
+01100000000100001000000001111011
+01101000000100001000000010000001
+00011111111000011111111000010000
+01100000000100001000000010000001
+00100000011000000000000000000000
+01101000000100001000000100101100
+11000011000000101110010110110000
+00100000011000000000000000000000
+01100000000100010000000010011000
+00011010001000100111111000000000
+01100000000100010000000010011010
+00011010010000100111111000000000
+01100000000100010000000010011100
+00011000010000100111111000000000
+01100000000100010000000010011110
+11011000010000000000000000000001
+01111101001110100000010000000001
+01100000000100001000000010010000
+01110000100000000000011000000100
+00100000001000000110010110110000
+01111001001000000000000000101000
+01110000010000100001000100001000
+00100000011000000000000000000000
+01111001001111111000000000101000
+01110000010000100001000100100000
+00100000011000000000000000000000
+01101000000000001100001000000011
+10011010010000001111111000000000
+01100000000000001000000111110111
+00100000001000000110010111001100
+01101000000000010000000111110111
+00011111111100001111111000000000
+01100000000000001000000111110111
+01011000000000000000000000000011
+01100000000100010000000010011000
+01110000000000011111011010100000
+01110000000000011111100010100001
+00100000001000000110010111101011
+01100000000010010000101010100010
+00100000010000000110010111010110
+01101000000010010000101010100010
+00100000010000000110011000000110
+00100000001000000110010111011101
+01101000000000001100001000111010
+11000001011111111000000000000000
+11000011000000110110010111011011
+01011000000000100100100111110000
+00100000010000000010101010001111
+01101000000010001100001000111010
+00100000001000000110100000101001
+01101000000010001100001000111010
+00100000001000000110100000100101
+01000111010010000100000000110010
+11000101000101000110010111000101
+01101000000000010100001000000011
+10011010010000001111111000000000
+00011111111100001111111000000000
+01100000000000010000000111110111
+01000111010010001100000000110010
+11000101000101000110010111001001
+01011000000000000000000000000100
+01100000000100010000000010011000
+01110000000000011111011010100000
+01110000000000011111100110100001
+01011000000000000000000111110110
+01100000000100010000000010011010
+01100000000110010000000010011110
+00011010001000100111111000000000
+01100000000100010000000010011100
+01011000000000000000000000000010
+00101010001011000000000000001111
+01111001001000001111111000000000
+01100000000100001000000010010000
+01110000100000000000011000000100
+11011000111000000000000000000101
+00100000010000000110010011000000
+00100000010000000110010110110000
+00101111111011111111111000000100
+00100000010000000110010010111001
+11000101000101000110011000000001
+01101000000000010000000111110111
+00011111111100001111111000000000
+10011000010000001111111000000000
+00011111111100001111111000000000
+01100000000000010000000111110111
+00100000011000000000000000000000
+01101000000000001000000111110111
+10011000010000001111111000000000
+00011111111100001111111000000000
+01100000000000010000000111110111
+00100000011000000000000000000000
+01101000000000010100001000000011
+10011010010000001111111000000000
+01100000000000010000101010011010
+01000111010010010100000000110010
+01100000000010010000101010100010
+00011010001000100111111000000000
+01100000000000010000101010111001
+00100000010000000110011000011101
+01101000000010010000101010110010
+01101000000000010000101010111001
+00011111111000100010001000000000
+01101000000000010000101010011010
+00100000010000000110011000111101
+01101000000000010000101010110010
+01101000000010010000101010111001
+10011000010000001000010000000000
+01100000000010010000101010111001
+01101000000010010000101010011010
+10011000010000001000010000000000
+01100000000010010000101010011010
+01101000000000010000101010100010
+00100100001110100110011000001101
+00100000011000000000000000000000
+01000111010010011100000000110010
+01101000000000001100001000010001
+00011111111000001111111111111111
+01101000000010010000101010011010
+10011000010000011111111000000000
+00011111111000001111111000000001
+01100000000000011000101010110110
+01101000000000010000101010100010
+10011000010000001111111000000000
+01101000000010011000101010110110
+10011000010001100111111000000000
+00100100001000010110011000101111
+01100000000000010000101010100010
+01101000000000011000101010110110
+01101000000010010000101010011010
+10011000010001100111111000000000
+01100000000000010000101010110010
+00100000011000000000000000000000
+01101000000000010000101010100010
+01100000000000010000101010110010
+01011000000000000000000000000000
+01100000000000010000101010100010
+00100000011000000000000000000000
+00011000010000001000010000000010
+01100000000110010000000010011000
+00011010001000001010001111111110
+11101010001010011000000000000000
+00011000010000100010010000000000
+11011000010000000000000010100000
+11100010001010001000000000000000
+11100000101000001000000000000000
+00100000001000000110011001001010
+00011111111000100010010000000000
+01000111010010100100000000110010
+11000101000101000110011000110100
+00011010010000100111111000000000
+00011000010000001000010000000011
+01100000000110010000000010011000
+00011010001000001010001111111101
+11101010001010011000000000000000
+00011000010000100010010000000000
+11011000010000000000000010100000
+11100010001010001000000000000000
+00011111111100001111111000000000
+11100000101000010000000000000000
+00011010001000100111111000000000
+01100000000100010000000010011010
+01011000000000000000000000000000
+01100000000100010000000010011110
+01110000100000001001000000000001
+01110000100000000000011000000100
+00100000010000000110010110110000
+00011010010000100111111000000000
+11100010001000011000000000000000
+01000111010010101100000000110010
+01110000000000011111100100000000
+01011000000000000000000000000001
+01100000000100010000000010011000
+01110000000000011111011010100000
+01011000000000000000000111110110
+01100000000100010000000010011010
+01011000000000000000000000000000
+01100000000100010000000010011110
+01100000000100010000000010011100
+01011000000000000000000000000011
+01100000000100001000000010010000
+01110000100000000000011000000100
+00100000010000000110010110110000
+01101000000100001000000100101100
+11000100000000110000000000000000
+00100000000000000000010111011100
+01101000000000001000000111111001
+00011111111000001111111000000001
+01100000000000001000000111111001
+00011111111001100111110000101000
+00100100011000010000000000000000
+00100000001000000110011001010101
+01110000100010010111001101110000
+00100000000000000000101110111000
+00100000011000000000000000000000
+01110000100010010111001100110000
+00100000011000000000000000000000
+00011111111010011111111000000000
+01100000000100010000000001000101
+01110000100000000100101100000000
+00100000011000000000000000000000
+00100000010000000110011001101111
+00100000010000000110011010100000
+11101010001010001000000000000000
+00011010001000001010001000000001
+00011000000000000000111000000000
+10101000010011000000000000000000
+00100000001000001110011010010111
+01101000000100001000000001000110
+01111001001000000111111000000110
+01111001001000000111111000000111
+01100000000100001000000001000110
+01110000100000000100011100000010
+01110000100000000100011110000010
+01111001001111111111111000000111
+01100000000100001000000001000110
+01110000100000000100011110001010
+00100000000000000000000000001011
+01110000100000000100011111001010
+00100000000000000000000000100001
+01110000100000000100011101001010
+00100000000000000000000000101100
+01110000100000000100011111001010
+00100000000000000000000000010110
+01110000100000000100011110001010
+00100000000000000000000000100001
+01110000100000000100011110000010
+00100000000000000000000000000001
+01110000100000000100011110010010
+00100000000000000000000000001010
+01110000100000000100011110110010
+01101000000100001000000000000111
+01110000100000000100011110010010
+00100000000000000000000000000001
+01110000100000000100011110000010
+10101111111011000000000000000000
+00100000001000001110011001111000
+01101000000100010000000001000101
+00011111111000001111111000000001
+01100000000100010000000001000101
+00011000111000001000111000000001
+00101000111000000001111000001000
+00100100001000001110011001111000
+11000010000000000110011001110101
+01110000100000000100011110000011
+00100000011000000000000000000000
+01110000100000000100011110000010
+00100000000000000000000000001100
+01110000100000000100011110000000
+01110000100000000100011110000010
+00100000000000000000000010010110
+00100000011000000000000000000000
+00100000010000000110011010100000
+01110000100000000100011110100010
+00011010001000100111111000000000
+01100000000100010000000001001000
+01111001001000000000010000001011
+00101111111011000000000000001111
+01111001001000001000010000001111
+01100000000110010000000001001010
+01110000100000000000011000000001
+00100000011000000000000000000000
+01101000000100001000000100101100
+11000011000000001110011010110000
+00100000011000000000000000000000
+00100000010000000110011001101111
+00100000010000000110011010100110
+00100000010000000110011010110000
+01110000100000000100011110000011
+00100000011000000000000000000000
+01101000000100010000000100100100
+01100000000100010000000001000101
+00100000010000000110011010100110
+11011000111000000000000000000001
+00100000010000000110010011000000
+00100000010000000110011010110000
+00101111111011111111111000000000
+00100000010000000110010010111001
+01110000100000000100011110000011
+00100000011000000000000000000000
+01101000000100010000000001011110
+10011000000000000001010000000000
+00100000011000000000000000000000
+00011001010000100111111000000000
+01100000000100010000000001011110
+00100000011000000000000000000000
+00011000011000100111111000000000
+01100000000100010000000001011000
+00100000011000000000000000000000
+01101000000100010000000001011000
+00011111111000100000011000000000
+00100000011000000000000000000000
+01101000000000010100001001000011
+01100000000100010000000001010010
+00100000011000000000000000000000
+00011111001000100111111000000000
+00100000011110100000000000000000
+00011111001000001111001111111000
+00100000010000010110011011011110
+00100000011000101000000000000000
+00100000001000010110011011010011
+00011111001000001111001000001000
+00011111001000001111001111111100
+00100000010000010110011011100001
+00100000011000101000000000000000
+00100000001000010110011011011000
+00011111001000001111001000000100
+00100000001000000110011011100100
+11101000110001000000000000000000
+11100001010001000000000000000000
+00100000011000000000000000000000
+11101000110000100000000000000000
+11100001010000100000000000000000
+00100000011000000000000000000000
+00011111001000100111111000000000
+00100000011110100000000000000000
+11101000110000001000000000000000
+11100001010000001000000000000000
+11000010000000000110011011100110
+00100000011000000000000000000000
+00011111001000100111111000000000
+00100000011110100000000000000000
+00011111001000001111001111111000
+00100000010000010110011011110111
+00100000011000101000000000000000
+00100000001000010110011011101100
+00011111001000001111001000001000
+00011111001000001111001111111100
+00100000010000010110011011111010
+00100000011000101000000000000000
+00100000001000010110011011110001
+00011111001000001111001000000100
+00100000001000000110011011111101
+11101000011001000000000000000000
+11100000101001000000000000000000
+00100000011000000000000000000000
+11101000011000100000000000000000
+11100000101000100000000000000000
+00100000011000000000000000000000
+00011111001000100111111000000000
+00100000011110100000000000000000
+11101000011000001000000000000000
+11100000101000001000000000000000
+11000010000000000110011011111111
+00100000011000000000000000000000
+00011111001000100111111000000000
+00100000011110100000000000000000
+11101000011000001000000000000000
+11100001010000001000000000000000
+11000010000000000110011100000101
+00100000011000000000000000000000
+01110000000010101001100100111101
+00100000001000000111110110000110
+01000111010010110100000000110010
+01101000000000001100001000010111
+00100000011110100000000000000000
+00100000010000000110011110100011
+00100000010000101110011110101001
+00100000010000000110011100111110
+01101000000000001100001000010111
+00011111111000100010011000000000
+01101000000010010100001000010101
+01100000000010010000000110001100
+00011010011000100111111000000000
+00100000001110100110011100001001
+00011010011000001010011111111111
+00011000010000100010001000000000
+11101010001000001000000000000000
+01101000000010001000000110000100
+10011000010001100111110000000000
+00100000010000101110011100100101
+00100000001000010110011100100001
+11101010001000001000000000000000
+00011111111000001111111000000001
+11100010001000001000000000000000
+01101000000010010000000110001100
+00011000010000001000010000100010
+01100000000010010000000110001100
+00100000001000000110011100010101
+01011000000000000000000000000000
+11100010001000001000000000000000
+01101000000000001000000110000101
+11100000101000001000000000000000
+11000000100110011110011100110011
+11011010010000000100000110111110
+11101000110000110000000000000000
+11100000101001000000000000000000
+01011000000000000000000000000000
+11100000101001000000000000000000
+00011010010000100000110000000000
+00100000010000000111111010111111
+00011000000000000111110000000001
+00100000011000000000000000000000
+11000000000110110110011100110111
+11000000000110111110011100111011
+11011010010000000100010000011001
+00100000001000000110011100101011
+11011000110000000100010011010101
+00100000010000000111111010111111
+11011000110000000100010000011001
+00100000001000000110011100110000
+11011000110000000100010011001101
+00100000010000000111111010111111
+00100000001000000110011100111001
+00100000010000000111111111101001
+01101000000000001100001000010111
+00100000011110100000000000000000
+01101000000000010100011010000010
+11000010100000000110011101010100
+01000111010010111100000000110010
+01101000000000001100010010001110
+11000000000000000110011101001101
+01101000000000001000010001010100
+00101111111000011000000011000000
+00100000001000001110011101001101
+00101111111000011000000001000000
+00100000001000001110011101010010
+00101111111000011000000000000000
+00100000001000001110011101010000
+01110000000000011000010100110101
+01101000000000110000010001001111
+00100000001000000110011101010111
+01110000000000011000010100110111
+00100000001000000110011101010111
+01110000000000011000010100110110
+00100000001000000110011101010111
+01000111010011000100000000110011
+01110000000000011000010100110011
+01101000000000110000000001000000
+01100000000000110000000110000110
+01101000000000010100001000010101
+11101111111010001000000000000000
+00011111111000001111111000000001
+01100000000000010000000110001100
+01100000000010001000000110000100
+01101000000000001100001000010111
+00011111111000100010011000000000
+01101000000000010000000110001100
+00011111111000100010001000000000
+00100000010000000110011101101111
+00100000011101000000000000000000
+01101000000010010000000110001100
+00011000010000001000010000100010
+01100000000010010000000110001100
+00011000010000001000010111111111
+11101000010000001000000000000000
+01100000000000001000000110000100
+00011010011000001010011111111111
+00100100001000101110011101011111
+01101000000000001100001000010111
+00011111111000001111111111111111
+01100000000000001000000110000100
+00100000011000000000000000000000
+01101000000000001000000110000101
+11000000100110011110011101110110
+11011010010000000000000110000101
+11011111001000000000000000000111
+00100000010000000111111110001000
+00100000001000101111111111100111
+00100000011000000000000000000000
+11000000000110110110011101111001
+11000000000110111110011110010100
+00100000001000000110011101110001
+11101010001010001000000000000000
+10011000010001100111110000000000
+00100100011000101000000000000000
+11011000101000000000101011000010
+11011111001000000000000000010000
+00100000010000000111111011010100
+01101000000000011000010001010010
+01100000000000011000101011000010
+00100000010000000110011110001011
+01101000000000010000101011011111
+00011111111100001111111000000000
+00011111111011010000010000000000
+11101000110000001000000000000000
+10011000010000001111111000000000
+01101000000010011000010001001111
+10011000010001100111110000000000
+00100000001000101111111111100111
+00100000011000000000000000000000
+11011000110000000000101011000010
+00100000010000000111010010000110
+11101010001000001000000000000000
+00100000010000000111010010000111
+00011000000000000110110000111000
+00011000000000000110110000000000
+00100000010000000111010000011101
+11011000101000000000101011010010
+00100000001000000111010010010111
+11101010001010001000000000000000
+10011000010001100111110000000000
+00100100011000101000000000000000
+00011000110000100010001000000000
+00011000110000001010011000001000
+11011010010000000100010011001101
+11011111001000000000000000001000
+00100000010000000111111110001000
+00100000001000101111111111100111
+00011010011000100010001000000000
+11011010010000000100010011010101
+11011111001000000000000000001000
+00100000010000000111111110001000
+00100000001000101111111111100111
+00100000011000000000000000000000
+01101000000000010100001000010101
+11101111111010001000000000000000
+00011111111000001111111000100010
+11101111111000001000000000000000
+10011000010001100111110000000000
+00100000011000000000000000000000
+01101000000000001100001000010111
+00011111111000100111001000000000
+01101000000010010100001000010101
+01011000000000000000000000000000
+11100000010000001000000000000000
+00011000010000001000010000100010
+00011111111000001111111000000001
+11000010000000000110011110101101
+00100000011000000000000000000000
+01000111010011001100000000110011
+00100000010000000110011100111110
+01101000000000001000000000110000
+01111001001101000111111000000110
+01100000000000001000000000110000
+00100100001101000110011110111100
+00011010001000001000110000001010
+11011000101000000100000110111110
+00100000010000000111111010111111
+00100000001000000110011111010111
+01110000010000011011110100000000
+00100000011000000000000000000000
+01101000000001001100010011001011
+00100000001110100110011111001010
+00100000010000000110011100111110
+00100100001101000110011111001010
+01101000000000010000000110001100
+00011111111000001000110000000001
+11011000101000000100010011010101
+00100000010000000111111010111111
+11011000101000000100010000011001
+00100000010000000111111010111111
+01110000010001000010100100000001
+00100000011000000000000000000000
+01110000010001000010100100000000
+00100000011000000000000000000000
+01101000000000110000010001001111
+01100000000000110000000110000110
+01110000000000011000010100110100
+00100000001000000110011111010011
+01101000000000110000000001000000
+01100000000000110000000110000110
+01110000000000011000010100110011
+01101000000000001100000010010010
+11000000000001010110011100001011
+11000010100000110100001011011010
+00100000011000000000000000000000
+01101000000001000100000110111110
+01101000000011000100000111000110
+10011000010000011111111000000000
+00100000011110100000000000000000
+01110000010000011011110100000001
+00100000011000000000000000000000
+01000111010011010100000000110011
+01111001001000000000010000000111
+00100000010000000110100000011101
+01111101001000001000010000000111
+01000111010011011100000000110011
+00011000010001100111110011111111
+00100000011000101000000000000000
+00101000010011000000000000000111
+00011000010000010000111000011111
+01101000000000100000000010100001
+11111001001000001111111000000000
+01100000000000100000000010100001
+01101000000000100000000010100101
+11111101001000001111111000000000
+01100000000000100000000010100101
+00100000011000000000000000000000
+01000111010011100100000000110011
+00011000010001100111110011111111
+00100000011000101000000000000000
+00101000010011000000000000000111
+00011000010000010000111000011111
+01101000000000100000000010100001
+11111001001111111111111000000000
+01100000000000100000000010100001
+01101000000000100000000010100101
+11111001001111111111111000000000
+01100000000000100000000010100101
+00100000011000000000000000000000
+00100000010000000110011111101101
+00100000001000000110011111111110
+00011000010001100111110011111111
+00100000011000101000000000000000
+00100100010101011110011111100001
+11011000101000001000000001111100
+00100000010000000110100000110000
+01111001010000000000010000000111
+11011000101000001000000001111000
+00100000010000000110100000110000
+01111001001111111000010000000111
+11011000101000001000000001110000
+00100000001000000110100000110000
+11011000101000001000000001111100
+00100000010000000110100000110000
+01111001001111111000010000000111
+11011000101000001000000001111000
+00100000010000000110100000110000
+01111001001111111000010000000111
+11011000101000001000000001110000
+00100000001000000110100000110000
+00011000010001100111110011111111
+00100000011000101000000000000000
+01111001010000000000010000000111
+00100000010000000110100000101111
+01111001001000000000010000000111
+11011000101000001000000001110000
+00100000001000000110100000110000
+00011000010000010000111000000111
+00011000010010010111111000000000
+00011111111000010111111000000011
+10011000101000001000101000000000
+11101000101000001000000000000000
+00100000011000000000000000000000
+11011000101000001000000001110100
+00100000001000000110100000011110
+11011000101000001000000100011100
+00100000010000000110100000010101
+00101000010011111111111000000111
+00100000001000001110100000100011
+10101111111011000000000000000000
+00100000011000000000000000000000
+10101111111011111111111111111111
+00100000011000000000000000000000
+00011000010001100111110011111111
+00100000011000101000000000000000
+00101111110011111111111000000111
+00100000001000000110100000101100
+00011000010001100111110011111111
+00100000011000101000000000000000
+00101111110011000000000000000111
+01011000000000000000000000000000
+01111101001000001111111000000111
+10011000010000101000010000000000
+11011000101000001000000001110100
+00100000010000000110100000010101
+00101000010011111111111000000111
+11111001001000001111111000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+11011010001111111111111111111111
+01101000000100001000000010000001
+00101111111000000000011000000010
+00100000010000001110100001111000
+00101111111000000000011000000001
+00100000010000001110100001111010
+00101111111000000000011000000011
+00100000010000001110100001111010
+00101111111011111111111000000010
+00100000010000001110100001110100
+00101111111011111111111000000011
+00100000010000001110100001110110
+00101111111011111111111000000100
+00100000010000001110100001111100
+00101111111011111111111000000110
+01111101001000001010001000000100
+00101111111011111111111000000111
+01111101001000001010001000000101
+01101000000100001000000010000010
+00101111111011111111111000000000
+01111101001000001010001000011011
+00101111111011111111111000000001
+01111101001000001010001000011100
+00101111111011111111111000000010
+01111101001000001010001000000011
+00101111111011111111111000000011
+01111101001000001010001000001000
+00101111111011111111111000000100
+01111101001000001010001000010100
+00101111111011111111111000000101
+01111101001000001010001000010101
+00101111111011111111111000000110
+01111101001000001010001000010110
+00101111111011111111111000000111
+01111101001000001010001000010111
+01101000000100001000000010000000
+00101111111011111111111000000000
+01111101001000001010001000000101
+00101111111011111111111000000001
+01111101001000001010001000000110
+00101111111011111111111000000010
+01111101001000001010001000000111
+00101111111011111111111000000011
+01111101001000001010001000010010
+00101111111011111111111000000100
+01111101001000001010001000010011
+00101111111011111111111000000101
+01111101001000001010001000010100
+00101111111011111111111000000110
+01111101001000001010001000010101
+00101111111011111111111000000111
+01111101001000001010001000010110
+01101000000100001000000001100010
+00101111111011111111111000000100
+00100000010000001110100001111110
+01000111010011101100000000110011
+01101000000100100000000001111000
+01101000000110100000000001111100
+10011000010000011111111000000000
+00011111111001000111111000000000
+10011010001000010111111000000000
+01100000000100100000000001110000
+00100000011000000000000000000000
+11011000111000000000000000000110
+00100000001000000110100010000100
+11011000111000000000000000001001
+00100000001000000110100010000010
+11011000111000000000000000010111
+00100000001000000110100010000010
+11011000111000000000000000011001
+00100000001000000110100010000100
+11011000111000000000000000011110
+00100000001000000110100010000100
+11011000111000000000000000000010
+00100000001000000110100010000100
+11011111001000000000000000000001
+00100000001000000110100010000101
+11011111001000000000000000000100
+00100000001000000110100010000101
+11011111001000000000000000000010
+11111001001111111010001000000000
+00011000111000001000111000000001
+11000010000000000110100010000101
+00100000011000000000000000000000
+00100000010000000110100010010101
+11011000010000000000000000000110
+00100000001000000110100000001110
+00100000010000000110100010001001
+11011000010000000000000000000110
+00100000001000000110100000100101
+00100000010000000110100010010101
+01101000000100001000000001111000
+01111001001000000111111000000111
+01100000000100001000000001111000
+11011000010000000000000000000111
+00100000001000000110011111111011
+01101000000100001000000010000001
+00011111111000010111111011111011
+01100000000100001000000010000001
+00100000011000000000000000000000
+01101000000100001000000010000001
+00101111111011111111111000000010
+00100000011000000000000000000000
+00100000010000000110011001101010
+01011000000000000000011111100000
+11011010001000000100000101010000
+11011000010000000000000000000010
+00100000010000000110011010110011
+00100000001000000110011001101101
+00100000010000000110011001101010
+01011000000000000000011111100010
+11011010001000000100001000011101
+11011000010000000000000000001110
+00100000010000000110011010110011
+00100000001000000110011001101101
+01000111010011110100000000110011
+00100000010000000110100010100010
+01101000000000001100001000101101
+11000000000000000110100010101111
+11000000000000001110100011000011
+11000000000000010110100011010111
+00100000011000000000000000000000
+01101000000010010100001000101001
+01011000000000001010101001010101
+10011000010001100111110000000000
+00100000001000101110100010111000
+01011000000000000100110111111010
+01100000000000010100001000100111
+01011000000000000100100010010100
+01100000000000010100001000100001
+00100000001000000110100011000000
+01101000000000010100001000100111
+00100100001110100110100010111100
+01011000000000000100110111111010
+01100000000000010100001000100111
+01101000000000010100001000100001
+00100100001110100110100011000000
+01011000000000000100100010010100
+01100000000000010100001000100001
+01011000000000000000000001100100
+01100000000000010100001000101011
+00100000011000000000000000000000
+01101000000010010100001000101001
+01011000000000001010101001010101
+10011000010001100111110000000000
+00100000001000101110100011001100
+01011000000000000101100100110010
+01100000000000010100001000100101
+01011000000000000100001100100011
+01100000000000010100001000011111
+00100000001000000110100011010100
+01101000000000010100001000100101
+00100100001110100110100011010000
+01011000000000000101100100110010
+01100000000000010100001000100101
+01101000000000010100001000011111
+00100100001110100110100011010100
+01011000000000000100001100100011
+01100000000000010100001000011111
+01011000000000000000000110010000
+01100000000000010100001000101011
+00100000011000000000000000000000
+01101000000010010100001000101001
+01011000000000001010101001010101
+10011000010001100111110000000000
+00100000001000101110100011100000
+01011000000000000110100101000110
+01100000000000010100001000100011
+01011000000000000101001101110111
+01100000000000010100001000011101
+00100000001000000110100011101000
+01101000000000010100001000100011
+00100100001110100110100011100100
+01011000000000000110100101000110
+01100000000000010100001000100011
+01101000000000010100001000011101
+00100100001110100110100011101000
+01011000000000000101001101110111
+01100000000000010100001000011101
+01011000000000000000000000110010
+01100000000000010100001000101011
+00100000011000000000000000000000
+01101000000000001100001000101101
+11000000000000000110100011110000
+11000000000000001110100011110010
+11000000000000010110100011110100
+00100000011000000000000000000000
+01110000100010010111000110111111
+00100000001000000110100011111000
+01110000100010010111000110101111
+00100000001000000110100011111000
+01110000100010010111000110001111
+01101000000000001100001000101110
+01100000000100001000100101110011
+00100000001000000110100011111000
+01000111010011111100000000110011
+01101000000100001000000001010011
+01111001001000000111111000000111
+01100000000100001000000001010011
+01101000000100001000100101110011
+00011111111000011111111000110000
+01100000000100001000100101110011
+01110000100010010000011001111100
+01110000100010010111001010101010
+00100000000000000001001110001000
+01101000000110010000000101010000
+01101000000100001000000001010011
+01111001001111111111111000000111
+01100000000100001000000001010011
+01100000000010010100001000101111
+00100000011000000000000000000000
+01000111010100000100000000110100
+01101000000000001100001000101101
+11000000000000000110100100001110
+11000000000000001110100100010010
+11000000000000010110100100010110
+00100000011000000000000000000000
+01101000000000010100001000100111
+01101000000010010100001000100001
+11011010011000000000000011001000
+00100000001000000110100100011010
+01101000000000010100001000100101
+01101000000010010100001000011111
+11011010011000000000000001100100
+00100000001000000110100100011010
+01101000000000010100001000100011
+01101000000010010100001000011101
+11011010011000000000000000110010
+00100000001000000110100100011010
+10011000010001100010001000000000
+01101000000000010100001000101111
+10011000010001100111111000000000
+00100100001000010110100100100111
+01101000000010010100001000101011
+10011000010011111010010000000000
+00011010011000100111111000000000
+10011010001011111111111000000000
+10011010010000001111111000000000
+10011010001001101111110000000000
+00100000010000000111111110000110
+00011000000001111111111000000000
+00100000011000000000000000000000
+00011000010000100111111000000000
+01101000000010010100001000101111
+10011000010001100111111000000000
+01101000000010010100001000101011
+10011000010011111010010000000000
+00011010011000100111111000000000
+10011010001011111111111000000000
+10011010010001100111111000000000
+00100000001000000110100100100011
+11101010001001000000000000000000
+01100000000001000000101010011010
+01101000000000010000101010011010
+01101000000010010000101010011100
+10011000010001100010001000000000
+01101000000000010000101010100000
+10011000010001100010010000000000
+01101000000010010000101010011110
+10011000010001100111110000000000
+00100100010000010110100101000000
+00011010010011111111111001100100
+10011010001001101111110000000000
+00100000010000000111111110000110
+00011000000001111111111000000000
+00100000010110100110100101000100
+00100000011000000000000000000000
+01101000000000001100001000110001
+01111001001000000111111000000000
+01100000000000001100001000110001
+00100000011000000000000000000000
+01101000000010001100001000110001
+01111001001000000000010000000001
+01100000000010001100001000110001
+00100000011000000000000000000000
+01101000000000010100001000111101
+11101111111000001000000000000000
+00100000011110100000000000000000
+00011111111000100111001000000000
+01101000000000010100001000111101
+00011111111000001111111000000011
+00011111111000100010001000000000
+11101010001010001000000000000000
+00100000010000000110011111111011
+00011010001000001010001000000001
+11000010000000000110100101001111
+00100000011000000000000000000000
+01101000000000010100001000111101
+00011111111000001111111000000011
+00011111111000100010001000000000
+00011000000000000010010000000000
+01110000000010110001001000000000
+11101010001010001000000000000000
+00100000010000000110100000011101
+01000111010100001100000000110100
+01101000000000010000101100010010
+00011010010000100000111000000000
+11111001001000001111111000000000
+01100000000000010000101100010010
+00011010001000001010001000000001
+00011010010000001010010000000001
+01101000000000010100001000111101
+11101111111000001000000000000000
+10011010010000101111110000000000
+00100100001000101110100101011001
+01101000000000010000101100010010
+01101000000010010000101100010100
+10011000010000101111110000000000
+00100000011000101000000000000000
+01111000001101000111110000000000
+00100000011000000000000000000000
+01101000000000010100001000111101
+11101111111000001000000000000000
+00100000011110100000000000000000
+00011111111000100111001000000000
+01101000000000010100001000111101
+00011111111000001111111000000011
+00011111111000100010001000000000
+11101010001010001000000000000000
+00100000010000000110011111011101
+00011010001000001010001000000001
+11000010000000000110100101110011
+00100000011000000000000000000000
+11011000111000000000000000001001
+00100000010000000111111100010110
+00100100011110100000000000000000
+01011000000000000000000000100000
+11011000111000000000000000001001
+00100000010000000111111100001000
+01111000010101000111110000000000
+00100000010000000110100101101100
+01000111010100010100000000110100
+01101000000000010100001000111101
+11101111111000001000000000000000
+00100000011110100000000000000000
+00100000010000000110100101010100
+00100100001101000111110100000010
+00100000010000000111110100000000
+01111000010101000111110000000000
+01101000000000010000101100010010
+01100000000000010000101100011001
+01110000000010110001101100000000
+00011000000000000000111000000000
+01101000000000010000101100010100
+00011111111000110000010000000000
+01100000000010010000101100010100
+00011111111000010111111000000001
+01101000000010010000101100011001
+00011000010000010010001000000001
+00011000010000110000010000000000
+01100000000010010000101100011001
+10011010001000101111110000000000
+00100100010000101110100110100001
+01101000000000010100001000111101
+11101111111000001000000000000000
+01101000000010001000101100011011
+00011000010000001000010000000001
+01100000000010001000101100011011
+00011000010000100000111000000000
+10011000111000101111110000000000
+00100100001000101110100110001100
+01101000000000010000101100010010
+01100000000000010000101100010100
+00100000011000000000000000000000
+01000111010100011100000000110100
+01101000000000010100001000111101
+00011111111000001111111000000001
+11101111111000010000000000000000
+00100000001000000111111110011100
+01101000000100001000000001000010
+10011010001000011111111000000000
+01100000000100001000000001000010
+01101000000100010000000001010000
+01111001001111111111111000001101
+01100000000100010000000001010000
+00100000000000000000000001100100
+00100000011000000000000000000000
+01101000000010011000101010011100
+01011000101101110001101100000000
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111000010000000000
+01101000000000001000101010011111
+10011000010011111111111000000000
+00011111111001101111110001100100
+00100000010000000111111110000110
+00011000000001111010001000000000
+00011000010000100111111000000000
+10011010001001100010010000000000
+01101000000000001000101010011011
+00100000010000000110100110111110
+01101000000000001000101010011010
+00100000001000000110100111010101
+11000000000000000110100111000100
+11000000000000001110100111000110
+11000000000000010110100111001000
+11000000000000011110100111001010
+11000000000000100110100111001100
+11000000000000101110100111001110
+11011000101000001000000010100000
+00100000001000000110100111010000
+11011000101000001000000010100100
+00100000001000000110100111010000
+11011000101000001000000010101000
+00100000001000000110100111010000
+11011000101000001000000001100100
+00100000001000000110100111010000
+11011000101000001000000001101000
+00100000001000000110100111010000
+11011000101000001000000001101100
+00100000001000000110100111010000
+00011010001000100111111000000000
+11100000101000010000000000000000
+00011010010000100111111000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+01111000001101000111110000000000
+00100000001000000110100111011000
+01111000010101000111110000000000
+11000000000000100110100111100011
+11000000000000101110100111100101
+11000000000011011110100111100111
+11000000000011100110100111101001
+11000000000000011110100111101011
+11000000000001000110100111101101
+11000000000010100110100111101111
+11000000000010101110100111110001
+11000000000010110110100111110011
+11000000000010111110100111110101
+00100000011000000000000000000000
+11011000111000000000000000000110
+00100000001000000110100111111111
+11011000111000000000000000000111
+00100000001000000110100111111111
+11011000111000000000000000001000
+00100000001000000110100111111111
+11011000111000000000000000001001
+00100000001000000110100111111111
+11011000111000000000000000001010
+00100000001000000110100111111111
+11011000111000000000000000001011
+00100000001000000110100111111111
+11011000111000000000000000001100
+00100000001000000110101000000001
+11011000111000000000000000001101
+00100000001000000110101000000001
+11011000111000000000000000001110
+00100000001000000110101000000001
+11011000111000000000000000001111
+00100000001000000110101000000001
+01101000000100010000000010000001
+11111001001101000111111000000000
+01100000000100010000000010000001
+00011010001000100000111000000000
+01101000000100001000000010000101
+11111001001101000111111000000000
+01100000000100001000000010000101
+00100000011000000000000000000000
+00011000111000001010001111111100
+00100000001000000110100111110111
+00011000111000001010001111110110
+00100000001000000110100111110111
+00100000011101011000000000000000
+01110000010001010110011100000000
+01110000000001001110110100000011
+01110000000001001110111000000011
+01110000000001001111001000010001
+01110000000001001111001100010011
+01011000000000000000000000000000
+01100000000000011000010011101111
+01100000000000001100001001010100
+01110000010001101000000100000000
+01000111010100100100000000110100
+01011000000000000000000000000000
+01100000000000001100001001010100
+01100000000000001100010101100100
+01100000000000001100010101011101
+01101000000000001100010101101011
+11000000000000001110101000010110
+01110000010001010110100101010000
+00100000011000000000000000000000
+01110000010001010110100100000000
+00100000011000000000000000000000
+00011000010000011000010000000010
+00100000011000000000000000000000
+00011000010000100111111000000000
+00011111111011011111111000000000
+01100000000000001100010101100010
+00011000000000000111111000111111
+00011111111011011111111000000000
+01100000000000001100010101100001
+00011000000000000111111000000001
+00011111111011011111111000000000
+01100000000000001100010101100000
+00100000010000000110101001010000
+00011000010000100111111000000000
+00100000011000000000000000000000
+00011111111011011111111000000000
+01100000000000001100010101100010
+00011000000000000111111001110011
+00011111111011011111111000000000
+01100000000000001100010101100001
+00011000000000000111111000000001
+00011111111011011111111000000000
+01100000000000001100010101100000
+00100000001000000110101001010000
+01101000000000001100010101100011
+00100000001110100110101000110011
+01011000000000000000000001110000
+00100000011000000000000000000000
+01011000000000000000000010101010
+00100000011000000000000000000000
+00011111111011011111111000000000
+01100000000000001100010101100010
+00011000000000000111111011101111
+00100000010000000110101001000100
+01101000000010010000010011110111
+00011000010000100000101000000000
+11100000101000001000000000000000
+00011000101000100000010000000000
+01100000000010010000010011110111
+00011000000000000111111011111111
+00100000010000000110101001000100
+01101000000010010000010011110111
+00011000010000100000101000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+00011111111011011111111000000000
+01100000000000001100010101100001
+01101000000000010100010101100001
+00011111111011010111111000000000
+01100000000000011000010011110100
+11011010001000000000000100000111
+11011010010000000000000000001111
+00100000010000000110101001011101
+00011111111000101111111011010111
+00011111111001000111111000000000
+00011111111011011111111000000000
+00100000011000000000000000000000
+01101000000000011100010101100000
+01100000000000011000010011110100
+11011010001000000000000100000111
+11011010010000000000000000001111
+00100000010000000110101001011101
+00011111111011010111111000000000
+11011010010000000000000000000111
+00100000010000000110101001011101
+00011111111000101111111000101011
+00011111111001000111111000000000
+00011111111011011111111000000000
+00011111111000100000010000000000
+00100000011000000000000000000000
+11011010011000000000000000000000
+00011010010000100111001000000000
+00100000010000000111111001110001
+00011111111000100000010000000000
+00011000010000100111111000000000
+00011010011000111010011000000000
+11000011000001000110101001100110
+10011010001000101000010000000000
+00011010011000001010011000000001
+00011000010000111000010000000000
+01101000000000011000010011110100
+00011010010000001010010111111111
+00101010010000011111111011111111
+00100000001000001110101001110000
+00011010010000100111001000000000
+00100000010000000111111001110001
+00101111111011111111111000000000
+01111001001000001000010000000000
+00100000001000000110101001100001
+00011000010000110111111000000000
+00100000011000000000000000000000
+01101000000010001100010101011101
+00011000010010111000010000000000
+01111001001000000000010000000000
+01101000000000001100010101100011
+00100100010110100110101000011000
+01100000000010001000010100001101
+00100000011000000000000000000000
+00011000010000111000010000000000
+01101000000000001100010101100011
+01111001001110100000010000000000
+00100000011000000000000000000000
+01101000000010001000010011111100
+01110000000001001111111011010111
+00100000010000000110101110110110
+01101000000000001100001001010001
+01111001001000000111111000000110
+01111001001000000111111000000111
+01100000000000001100001001010001
+01110000010001010110001100000000
+00100000001000000110101110010111
+01101000000000001100001001010001
+01111001001000000111111000000111
+01100000000000001100001001010001
+00100000001000000110101110010111
+01000111010100101100000000110100
+01101000000000001100011010000001
+11000000000000000110101010001110
+00100000001000000110101101001100
+01101000000000010000001001100100
+00011111111000100000110000000000
+00100000010000000110101010111000
+01101000000000001000010011111100
+11000000000000000110101010010100
+00100000001000000110101100011000
+01000111010100110100000000110100
+01101000000000001000010011111101
+11000000000111111110101001111101
+11000000001110011110101010000110
+11000000011101111110101010011011
+11000000001010011110101101000100
+00100000011000000000000000000000
+01101000000000010000010100000001
+00011111111000100000110000000000
+00100000010000000110101011000011
+01101000000000001000010100000011
+11000000001000001110101010100101
+11000000001000000110101010101101
+11000000001110001110101011100110
+11000000001110000110101011110010
+11000000001001001110101011111101
+00100000001000000110101110010111
+00100000010000000110101010101111
+00100000001000000110101010100111
+01101000000000001100001001010100
+01111001001000000111111000000000
+01111001001000000111111000000001
+01100000000000001100001001010100
+00100000010000000110101111100000
+00100000001000000110101110010111
+00100000010000000110101010101111
+00100000001000000110101110010111
+00100000010000000110101011001011
+00100000001000000110101011010111
+00100000010000000110101011001011
+11101000110000001000000000000000
+00011111111010010111111000000000
+01100000000000001100010101101010
+11101000110000001000000000000000
+01100000000000001000010100001000
+00100000011000000000000000000000
+11101000110000001000000000000000
+01100000000000001000010011111011
+00011111111010010111111000000000
+01100000000000001000010011111100
+11101000110000001000000000000000
+01100000000000001000010011111101
+00100000010000000110101011001110
+01100000000010010000010011111111
+00011000110000100111111000000000
+01100000000000010000010100000001
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000110111111000000000
+01100000000000001000010100000011
+00100000010000000110101011001110
+01100000000010010000010100000100
+00011000110000100111111000000000
+01100000000000010000010100000110
+00100000011000000000000000000000
+01101000000000010000010100000110
+00011111111000100000110000000000
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000100000010000000000
+00011000010000110000010000000000
+11000011100000000000000000000000
+11101000110000001000000000000000
+00011111111010011111111000000000
+00011111111100100111111000000000
+10011000010000001000010000000000
+00100000011000000000000000000000
+11101000110000001000000000000000
+01100000000000001100010101011101
+11101000110000001000000000000000
+01100000000000001000010100001001
+11101000110000001000000000000000
+01100000000000001000010100001010
+11101000110000001000000000000000
+01100000000000001000010100001011
+11101000110000010000000000000000
+01100000000000010100010101011110
+11101000110000001000000000000000
+01100000000000001000010100001100
+11101000110000001000000000000000
+01100000000000001100010101101000
+00100000011000000000000000000000
+00100000010000000110101010110001
+00100000001000000110101011101000
+01101000000000001100001001010100
+01111001001000000111111000000101
+01111001001000000111111000000110
+01100000000000001100001001010100
+01101000000010001100010101011101
+00011000010010111000010000000000
+00011000010000011000010000000011
+00100000010000000110110000010001
+01110000010001010110011100000011
+00100000001000000110101110010111
+01110000000010101001100100001000
+00100000010000000111110110000110
+00100000010000000110101010110001
+01101000000000001100010101101010
+00011111111001100111110000000001
+00100000001000101110101011111001
+00100000001000000010101010001100
+01101000000000001100001001010100
+01111001001000000111111000000111
+01100000000000001100001001010100
+00100000001000000110101110010111
+00100000010000000110101011001011
+11101000110000001000000000000000
+01100000000000001000101011000010
+00100000010000000101001011010010
+00100000010000000101001011100000
+01011000000000000000000000001110
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+01101000000000001100010101100011
+00011111111000111111111000000000
+01111001001000000111111000000000
+11100000101000001000000000000000
+01000111010100111100000000110100
+01011000000000000001010111101111
+11100000101000010000000000000000
+01011000000000000001000110010001
+11100000101000010000000000000000
+01101000000000001000101011000010
+11100000101000001000000000000000
+01011000000000000000000000000111
+11100000101000101000000000000000
+01011000000000000000000000000001
+11100000101000010000000000000000
+00100000010000000110101000101111
+11100000101000001000000000000000
+00100000011000000000000000000000
+00100000001000000110101100011001
+01000111010101000100000000110101
+01101000000000001000010011111101
+11000000001110011110101100100001
+11000000000111111110101100100101
+11000000011101111110101100111111
+11000000011111111110101100110111
+11000000001010011110101101000110
+00100000011000000000000000000000
+01101000000000001100001001010100
+01111001001000000111111000000011
+01100000000000001100001001010100
+00100000001000000110101110010111
+01101000000000001100001001010100
+01111001001000000111111000000011
+01111001001000000111111000000010
+01100000000000001100001001010100
+01101000000000001000010011111011
+00100000010000000110101000100110
+01100000000000001000010011111110
+00100000010000000110101110110110
+01101000000000001000010011111011
+00011111111010110111111000000000
+01100000000000001100010101011101
+00011111111010111111111000000000
+01111001001111111111111000000001
+01111001001000000111111000000000
+11011000010000000100010101100101
+01100000000010010000010011110111
+00100000010000000110101000110101
+00100000001000000110101110010111
+01101000000000010000010100000001
+00011111111000100000110000000000
+00011111111000001111111000000001
+01100000000000010000010100000001
+11101000110000001000000000000000
+01101000000010001100010101101000
+10011000010000001111111000000000
+01100000000000001100010101101000
+00100000010000000110110001000010
+00100000010000000110101001110010
+00100000010000000110110000101000
+00100000010000000110110001001011
+00100000001000000110101110010111
+01110000000010101001100100001001
+00100000010000000111110110000110
+00100000010000000110101000001101
+01101000000000001000010011111011
+00100000010000000110101000100110
+01100000000000001000010011111110
+00100000010000000110101110110110
+00100000001000000110101110010111
+01101000000000010000001001100100
+00011111111000100000110000000000
+00100000010000000110101010111000
+01101000000000001000010011111100
+11000000000000000110101101010010
+00100000001000000110101110000110
+01000111010101001100000000110101
+01101000000000001000010011111101
+11000000000111111110101001111101
+11000000001110011110101010000110
+11000000011101111110101101011000
+00100000001000000110101110010111
+01101000000000010000010100000001
+00011111111000100000110000000000
+00100000010000000110101011000011
+01101000000000001000010100000011
+11000000001000001110101101100001
+11000000001000000110101101100001
+11000000001110001110101101101100
+11000000001110000110101101111100
+00100000001000000110101110010111
+00100000010000000110101010101111
+01101000000000001100010101011101
+00011111111000110111111000000000
+01101000000010001100010101100100
+10011000010001100111110000000000
+00100000001000101110101101101000
+00100000001000000010101010001100
+01101000000000001100001001010100
+01111001001000000111111000000001
+01100000000000001100001001010100
+00100000001000000110101110010111
+00100000010000000110101010110001
+01101000000000001100010101101010
+01101000000010001100010101100100
+10011000010001100111110000000000
+00100000001000101110101101110011
+00100000001000000010101010001100
+00100000001000000110101110010111
+01101000000000001100001001010100
+01111001001000000111111000000101
+01111001001000000111111000000110
+01100000000000001100001001010100
+01101000000010001100010101011101
+00011000010010111000010000000000
+00011000010000011000010000000011
+00100000010000000110110000010001
+00100000001000000110101110010111
+00100000010000000110101010110001
+01101000000000001100010101101010
+01101000000010001100010101100100
+10011000010001100111110000000000
+00100000001000101110101110000010
+00100000001000000010101010001100
+01101000000000001100001001010100
+01111001001000000111111000000111
+01100000000000001100001001010100
+00100000001000000110101110010111
+01101000000000001000010011111100
+01101000000010001100010101100100
+10011000010001100111110000000000
+00100000001000101110101110001100
+00100000001000000010101010001100
+00100000001000000110101110010111
+01101000000000001000010011111101
+11000000001110011110101110010001
+11000000011101111110101100111111
+11000000011111111110101100110111
+11000000001010011110101110010110
+01101000000000001100001001010100
+01111001001000000111111000000011
+01100000000000001100001001010100
+00100000001000000110101110010111
+00100000001000000110101110010101
+00100000001000000110101101000110
+00100000011000000000000000000000
+01101000000000001100010101100111
+00100000011110100000000000000000
+11000000000000011110101110011100
+00100000001000000010101010001100
+01110000010001010110011100000000
+00100000010000000101001011010010
+11011000010000000000000000000001
+01101000000010001100010101011101
+00011000010010111000010000000000
+00011000010000011000010000000011
+11011010001000000000000010101010
+00100000010000000110101111111100
+00100000010000000101001011100000
+00011000101000100000110000000000
+11101000110000010000000000000000
+00100000001110100010101010001100
+00100000011000000000000000000000
+00100000010000000101001011100000
+01011000000000000000000000000100
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+01101000000000001000010011111011
+11100000101000001000000000000000
+01000111010101010100000000110101
+01011000000000000000000100111111
+11100000101000010000000000000000
+01101000000000001000010011111110
+11100000101000001000000000000000
+00100000011000000000000000000000
+00100000010000000101001011010010
+00100000010000000101001011100000
+01011000000000000000000000000100
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+01101000000000001000010011111011
+11100000101000001000000000000000
+01000111010101011100000000110101
+01011000000000000000000101110011
+11100000101000010000000000000000
+01101000000000001000010011111110
+11100000101000001000000000000000
+00100000011000000000000000000000
+00100000010000000101001011100000
+01011000000000000000000000001110
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+01101000000000001100010101100011
+00011111111000111111111000000000
+01111001001000000111111000000000
+11100000101000001000000000000000
+01000111010101100100000000110101
+01011000000000000001010111101111
+11100000101000010000000000000000
+01011000000000000001000110000011
+11100000101000010000000000000000
+00011000010000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000011110000
+11100000101000011000000000000000
+01011000000000000000000001111111
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000001000000000000000
+01011000000000000000000000000001
+11100000101000001000000000000000
+00100000010000000110101000101111
+11100000101000001000000000000000
+01110000010001010110100100010000
+00100000011000000000000000000000
+00100000010000000101001011010010
+00100000010000000101001011100000
+01011000000000000000000000001110
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+01101000000000001100010101100011
+00011111111000111111111000000000
+01111001001000000111111000000000
+11100000101000001000000000000000
+01000111010101101100000000110101
+01011000000000000001010111101111
+11100000101000010000000000000000
+01011000000000000001000110000001
+11100000101000010000000000000000
+01101000000000001100010101011101
+11100000101000001000000000000000
+01011000000000000000000011100000
+11100000101000011000000000000000
+01101000000000010100010101101100
+11100000101000010000000000000000
+01011000000000000000000000000000
+11100000101000001000000000000000
+01101000000000001100010101101110
+11100000101000001000000000000000
+00100000010000000110101000101111
+11100000101000001000000000000000
+00100000011000000000000000000000
+00100000010000000101001011100000
+01011000000000000000000000001000
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+01101000000000001100010101100011
+00011111111000111111111000000000
+01111001001000000111111000000000
+11100000101000001000000000000000
+01000111010101110100000000110101
+01011000000000000000100111101111
+11100000101000010000000000000000
+01011000000000000000010111100011
+11100000101000010000000000000000
+00011000010000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000010001101
+11100000101000001000000000000000
+00100000010000000110101000101111
+11100000101000001000000000000000
+00100000011000000000000000000000
+00100000010000000101001011010010
+00100000010000000101001011100000
+01011000000000000000000000001000
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+00011000010000100001011000000000
+01101000000000001100010101100011
+00011111111000111111111000000000
+01111001001000000111111000000000
+11100000101000001000000000000000
+01000111010101111100000000110101
+01011000000000000000100111101111
+11100000101000010000000000000000
+01011000000000000000010111100001
+11100000101000010000000000000000
+00011001011000100111111000000000
+11100000101000001000000000000000
+01011000000000000000000010001101
+11100000101000001000000000000000
+00100000010000000110101000101111
+11100000101000001000000000000000
+00100000011000000000000000000000
+01000111010110000100000000110110
+01101000000000001100010101101001
+00100000011110100000000000000000
+01101000000100010000000100010010
+00100100011110100000000000000000
+00011010001000100111111000000000
+01100000000000001000101010011011
+01100000000010001000101010011010
+00100000010000000101001001101110
+00100100011110100000000000000000
+00100000010000000101001011010010
+00100000010000000101001011100000
+01011000000000000000000000000101
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+01101000000000001000010100001101
+11100000101000001000000000000000
+01011000000000000000000111111111
+11100000101000010000000000000000
+01101000000000001100010101101001
+11100000101000001000000000000000
+01101000000000001100010101100110
+11100000101000001000000000000000
+01110000010001010110100100000000
+00100000011000000000000000000000
+01000111010110001100000000110110
+01101000000000001100010101101011
+11000001000000001000000000000000
+01101000000000010000010011111111
+00100000011110100000000000000000
+01101000000000001100010101101001
+00011111111000001111111000000001
+01100000000000001100010101101001
+00100000011000000000000000000000
+01101000000000010100010101101111
+00100000001000000111111110011100
+01000111010110010100000000110110
+01101000000000001100010101101000
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000001100010101101000
+01101000000000010100010101011110
+01101000000010010100011010011111
+10011000010001100111110000000000
+00100000001000010110110001010111
+01100000000000010100011010011111
+01101000000000001100010101101001
+00100000001110100110110001011111
+01110000000001010001000000000001
+01101000000000001100010101100110
+01100000000000001000010100001111
+01011000000000000000000011111111
+01100000000000001000010100001110
+00100000001000000110110001100100
+01110000000001010001000000000000
+01101000000000001100010101100101
+01100000000000001000010100001111
+01011000000000000000000011101111
+01100000000000001000010100001110
+01000111010110011100000000110110
+01101000000000010100011010011111
+00011111111001100111110001111111
+00100000001000010110110001101011
+01101000000000001000010100010000
+00011111111000001111111000000001
+01100000000000001000010100010000
+00100000010000000110101001110010
+01101000000000010100011010011111
+00011111111000001111111000001000
+01101000000010001000010100010000
+10011000010000001010001000000000
+00100000010000000101001001000000
+01100000000000010000001001110111
+00011111111000001111111000000100
+01100000000000010000001001111001
+00011111111000100000101000000000
+01101000000000001000010100001101
+11100000101000001000000000000000
+01101000000000001000010100001110
+11100000101000001000000000000000
+00100000010000000110110010010101
+00100000010000000110110010100110
+01000111010110100100000000110110
+01101000000000010100010101110001
+00011111111000100000011000000000
+01101000000000010100011010011111
+00011111111000100111001000000000
+00100000010000000110011011101010
+00011000101000100000010000000000
+00011000011000100111111000000000
+01100000000000010100010101110001
+00011000010000100000101000000000
+01101000000000001000010100001111
+11100000101000001000000000000000
+01101000000000010000001001110111
+00011111111000100000101000000000
+01101000000000010100011010011111
+01101000000010001000010100010000
+10011000010000001111111000000000
+00011111111000001111111000000100
+11100000101000010000000000000000
+01101000000000010100001001001010
+11100000101000010000000000000000
+01110000010001010110100100000000
+01101000000000010100010101110011
+11000000000000000011101010010111
+01110000000010110000010100000000
+00100000011000000000000000000000
+01000111010110101100000000110110
+01101000000000010100011010011111
+00011111111001100111110001111111
+00100100001000010110110010011101
+00011111111000111111111000000000
+01111001001000000111111000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+01101000000000010100011010011111
+00011111111010010111111000000000
+00011111111100011000010000000000
+00011111111000010111111001111111
+00011111111000111111111000000000
+01111001001111111111111000000000
+11100000101000001000000000000000
+11100000101010001000000000000000
+00100000011000000000000000000000
+01101000000000001100010101101001
+00100000011110100000000000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+01000111010110110100000000110110
+00100000010000000111110110011100
+00100000010000000011001011110110
+00100000010000000110001100011011
+01000111010110111100000000110110
+00100000010000000111011011011100
+00100000010000000111011010110101
+00100000010000000111011011000110
+00100000010000000101001001101110
+00100100011110100000000000000000
+00100000010000000100110110101001
+00100000010000000101001001101110
+00100100011110100000000000000000
+01000111010111000100000000110111
+00100000010000000110110011110101
+00100000010000000100111101100100
+00100000010000000110101110011000
+00100000010000000110110010111110
+01000111010111001100000000110111
+00100000001000000011001011110010
+01101000000000001000001001111111
+11000010100000000101000010000111
+11000010100000111101000010010001
+00100000011000000000000000000000
+01000111010111010100000000110111
+00100000010000000101001001110100
+00100000011110100000000000000000
+01101000000000001000000001001011
+11000011100000110000000000000000
+00100000010000000101001001011000
+01100000000000010000000101101111
+00011111111000100000110000000000
+11101000110000010000000000000000
+00011111111000001111111000000100
+01100000000000010100000111011100
+01110000010000011101101100000110
+01000111010111011100000000110111
+01101000000000010100001001000110
+00100000001110100110110011011101
+01101000000000001000000001001011
+11000100000000111000000000000000
+01111001001111111111111000000111
+01100000000000001000000001001011
+01110000010000011101101100000101
+01101000000010010100001001000110
+01101000000000010000000101101111
+10011000010000001111111000000000
+01100000000000010000000101101111
+01101000000000010100000111011100
+10011000010001100111111000000000
+01100000000000010100000111011100
+01000111010111100100000000110111
+01101000000000010100000111011100
+00100000001110100010101010001100
+11011000010000000000000100000100
+10011000010001100111111000000000
+00100100001000010110110011101001
+01000111010111101100000000110111
+01100000000010010100000111011100
+01101000000000010100001001000110
+10011000010000001111111000000000
+01100000000000010100001001000110
+00100000001000000110110011101011
+01011000000000000000000000000000
+01100000000000010100001001000110
+01101000000000001000000001001011
+01111001001000000111111000000110
+01100000000000001000000001001011
+00100000011000000000000000000000
+01101000000000001100011010000100
+11000010100000000110110011110011
+01110000000000101000011100000001
+00100000011000000000000000000000
+01110000000000101000011100001111
+00100000011000000000000000000000
+01101000000000001100011010000001
+00100100001110100110110011111011
+01101000000000001000001010000110
+00100000011110100000000000000000
+01110000000000101000011000000000
+00100000011000000000000000000000
+01000111010111110100000000110111
+01101000000000001000001010000111
+00100000011110100000000000000000
+11000000000000001110110100011011
+11000000000000010110110101110100
+11000000000000011110110100100001
+11000000000000100110110101111000
+11000000000111011110110100101011
+11000000000111100110110101111011
+11000000000001101110110100110000
+11000000000001110110110110000000
+11000000000001111110110100110011
+11000000000010000110110110000110
+11000000000010001110110100111001
+11000000000010010110110110001010
+11000000000010011110110100111111
+11000000000010100110110110001110
+11000000000010101110110101000101
+11000000000010110110110110010010
+11000000000010111110110101001011
+11000000000011000110110110010111
+11000000000011001110110101010001
+11000000000011010110110110011011
+11000000000011011110110101010111
+11000000000011100110110110011111
+11000000000011101110110101011101
+11000000000011110110110110100100
+11000000000011111110110101100011
+11000000000100000110110110101000
+11000000000100001110110101101110
+11000000000100010110110110101100
+00100000011000000000000000000000
+00100000010000000110110110110111
+01110000000000101000011100000010
+01101000000000001100001001010000
+01111001001000000111111000000000
+01100000000000001100001001010000
+00100000011000000000000000000000
+01110000000000101000011100000100
+01101000000000001100001001010000
+11000011100000010000000000000000
+01110000000000101000011100000011
+00100000010000000110110110111110
+01110000000000101000011100000100
+01101000000000001100001001010000
+01111001001000000111111000000010
+01100000000000001100001001010000
+00100000011000000000000000000000
+00100000010000000101001001110100
+00100100011110100000000000000000
+00100000010000000110110111001101
+01110000000000101000011100111100
+00100000011000000000000000000000
+00100000010000000110110111000011
+01110000000000101000011100001110
+00100000011000000000000000000000
+00100000010000000110110111011101
+01110000000000101000011100010000
+01101000000000001100001001010010
+01111001001000000111111000000000
+01100000000000001100001001010010
+00100000011000000000000000000000
+00100000010000000110110111100100
+01110000000000101000011100010010
+01101000000000001100001001010010
+01111001001000000111111000000010
+01100000000000001100001001010010
+00100000011000000000000000000000
+00100000010000000110110111101001
+01110000000000101000011100010100
+01101000000000001100001001010011
+01111001001000000111111000000000
+01100000000000001100001001010011
+00100000011000000000000000000000
+00100000010000000110110111110000
+01110000000000101000011100010110
+01101000000000001100001001010011
+01111001001000000111111000000010
+01100000000000001100001001010011
+00100000011000000000000000000000
+00100000010000000110110111010001
+01110000000000101000011100011000
+01101000000000001100001001010001
+01111001001000000111111000000000
+01100000000000001100001001010001
+00100000011000000000000000000000
+00100000010000000110110111011000
+01110000000000101000011100011010
+01101000000000001100001001010001
+01111001001000000111111000000010
+01100000000000001100001001010001
+00100000011000000000000000000000
+00100000010000000110110111110101
+01110000000000101000011100011100
+01101000000000001100001001010001
+01111001001000000111111000000110
+01100000000000001100001001010001
+00100000011000000000000000000000
+00100000010000000110110111111100
+01101000000000001100001001010100
+01111001001000000111111000000000
+01100000000000001100001001010100
+01110000000000101000011100011110
+00100000011000000000000000000000
+00100000010000000110111000000010
+01101000000000001100001001010100
+01111001001000000111111000000010
+01100000000000001100001001010100
+01110000000000101000011100100000
+01101000000000001100010101100100
+00011111111010011111111000000000
+00011111111000011111111000000011
+11011000010000000100010101100101
+01100000000010010000010011110111
+00100000001000000110101000110101
+00100000010000000110111000001100
+01101000000000001100001001010100
+01111001001000000111111000000100
+01100000000000001100001001010100
+01110000000000101000011100100010
+00100000011000000000000000000000
+01101000000000001100001001010000
+11000100000000001000000000000000
+01110000000000101000011100000011
+00100000001000000110110011111011
+01101000000000001100001001010000
+11000001100111111000000000000000
+01110000000000101000011100111011
+01101000000000001000001010000101
+11000001100010111000000000000000
+01110000000000101000010100000000
+01110000000000101000011100001101
+00100000001000000110110011111011
+01101000000000001100001001010000
+00100100011110100000000000000000
+01101000000000001100011010000100
+11000010100000000110110110101111
+11000010100000110110110110110001
+00100000001000000110110110110101
+01101000000000001100001001010010
+11000100000000001000000000000000
+01110000000000101000011100010001
+00100000001000000110110011111011
+01101000000000001100001001010010
+11000001100111111000000000000000
+01110000000000101000011100010011
+00100000001000000110110011111011
+01101000000000001100001001010011
+11000100000000001000000000000000
+01110000000000101000011100010101
+00100000001000000110110011111011
+01101000000000001100001001010011
+11000001100111111000000000000000
+01101000000000001100011010000100
+11000010100000110110110110110001
+00100000001000000110110110110101
+01101000000000001100001001010001
+11000100000000001000000000000000
+01110000000000101000011100011001
+00100000001000000110110011111011
+01101000000000001100001001010001
+11000001100111111000000000000000
+01110000000000101000011100011011
+00100000001000000110110011111011
+01101000000000001100001001010001
+11000001111111111000000000000000
+01101000000000001100011010000100
+11000010100000110110110110110011
+00100000001000000110110110110101
+01101000000000001100001001010100
+11000100000000001000000000000000
+01110000000000101000011100011111
+00100000001000000110110011111011
+01101000000000001100001001010100
+11000100000000011000000000000000
+01110000000000101000011100100001
+00100000001000000110110011111011
+01101000000000001100001001010100
+11000001111111111000000000000000
+00100000001000000110110110110101
+01110000000000101000011100001111
+00100000001000000110110011111011
+01110000000000101000011100010111
+00100000001000000110110011111011
+01110000000000101000011100011101
+00100000001000000110110011111011
+01110000000000101000011100000000
+00100000011000000000000000000000
+01000111010111111100000000110111
+00100000010000000101001010111000
+01011000000000000000000000000001
+00011111111000100000010000000000
+01011000000000000000000001010000
+00011111111000100001011000000000
+00100000001000000101000010101000
+01000111011000000100000000111000
+00100000010000000101001010111000
+01101000000000010100001001001000
+00011111111000100000010000000000
+00100000001000000101000010110111
+01000111011000001100000000111000
+00100000010000000101001010111000
+01101000000000010100001001001000
+00011111111000100000010000000000
+11011001011000000000000001010000
+00100000010000000101000011001100
+01101000000000001100001001010000
+01111001001111111111111000000101
+01100000000000001100001001010000
+00100000011000000000000000000000
+01000111011000010100000000111000
+00100000010000000101001011000101
+00100000010000000111000100111000
+00100000001000000101000011100111
+01000111011000011100000000111000
+00100000010000000101001010111000
+01011000000000000000000000000011
+00011111111000100000010000000000
+01011000000000000000000001010001
+00011111111000100001011000000000
+00100000001000000101000010101000
+01000111011000100100000000111000
+00100000010000000101001010111000
+01101000000000010100001001001010
+00011111111000100000010000000000
+00100000001000000101000010110111
+01000111011000101100000000111000
+00100000010000000101001010111000
+01011000000000000000000000010001
+00011111111000100000010000000000
+01011000000000000000000001010010
+00011111111000100001011000000000
+00100000001000000101000010101000
+01000111011000110100000000111000
+00100000010000000101001010111000
+01101000000000010100001001001100
+00011111111000100000010000000000
+00100000001000000101000010110111
+01000111011000111100000000111000
+00100000010000000101001010111000
+01011000000000000000000000010011
+00011111111000100000010000000000
+01011000000000000000000001010011
+00011111111000100001011000000000
+00100000001000000101000010101000
+01000111011001000100000000111001
+00100000010000000101001010111000
+01101000000000010100001001001110
+00011111111000100000010000000000
+00100000001000000101000010110111
+01000111011001001100000000111001
+00100000010000000101001011010010
+01110000000001001111101100000011
+01110000000001001111111000011100
+00100000010000000110101110101001
+01110000010001010110001100000001
+00100000011000000000000000000000
+01000111011001010100000000111001
+00100000010000000101001011010010
+01101000000010001100010101100100
+00100000010000000110101001111001
+01100000000010001100010101011101
+00100000001000000110101111000100
+01000111011001011100000000111001
+00100000010000000101001011010010
+01101000000010001100010101011101
+00100000010000000110101001110011
+00100000010000000110101000011010
+01100000000000001000010011111110
+01101000000010001100010101011101
+00100000010000000110101001110011
+01100000000010001000010011111011
+00100000001000000110101110101001
+01000111011001100100000000111001
+00100000010000000101001011010010
+01101000000010001100010101011101
+00100000010000000110101001110011
+00100000001000000110101111111100
+01000111011001101100000000111001
+01101000000000010000001001100100
+10011000000000000000110000000000
+11101000110000001000000000000000
+00011111111000100010010000000000
+01100000000000001000010100011011
+11101000110000010000000000000000
+01100000000000010000010100011100
+11101000110000001000000000000000
+00011111111011010001011000000000
+11101000110000001000000000000000
+10011001011000001001011000000000
+01000111011001110100000000111001
+00011000110000100000010000000000
+11011111001000000000000000000100
+11011000101000000000010100101010
+00100000010000000111111011000110
+00011000010000100000110000000000
+00011010010000100111111000000000
+11000000000000001110111110111010
+11000000000000010110111000101100
+11000000000000011110111110111010
+11000000000000100110111001010100
+11000000000000101110111110111010
+11000000000000110110111100000010
+11000000000000111110111110111010
+00100000001000000110111111000001
+01000111011001111100000000111001
+00100000010000000110111111010000
+00101000010000011111111000000001
+00100000001000001111000001000000
+00101000010000011111111011111111
+00100000001000001110111111000100
+11101000110000010000000000000000
+01100000000000010000010100100010
+00011001011000001001011111111110
+00011001011000001001011111111111
+00100100001000101110111110111110
+11011001011000000000010100010001
+11101001011000010000000000000000
+00100000011110100000000000000000
+00100000010000000111000010000010
+00100000010000000101001011010000
+00011000000000000111111000000011
+11100000101000001000000000000000
+01101000000000010000010100011100
+11100000101000010000000000000000
+00011000111010111111111000000000
+00011111111000001111111000000101
+00011111111000001010011000000101
+00011111111100001111111000000000
+11100000101000010000000000000000
+00011000111000100111111000000000
+00011111111100001111111000000000
+11100000101000010000000000000000
+11100000101000010000000000000000
+11011000110000000000010100101010
+00011000111000100111001000000000
+00100000001000101110111001001111
+11101000110000100000000000000000
+11100000101000100000000000000000
+11000010000000000110111001001100
+00011000000000000111111000000000
+11100000101000001000000000000000
+00011010011000100111111000000000
+01100000000000010000001001110101
+00100000011000000000000000000000
+01000111011010000100000000111010
+11101000110000100000000000000000
+01100000000000100000010100100100
+00011001011000001001011111111100
+00100000010000000110111100101110
+01100000000000010000010100100000
+00011001011000001001011111111110
+00100000010000000111000000101000
+00100000001000101110111111000100
+00101010001000011111111000000101
+00100000001000001110111001100010
+11011000101000000000010100101010
+00011000000000000000111000000000
+00100000001000000110111001110001
+11101000110000001000000000000000
+11000000100001010110111111000100
+11101000110000010000000000000000
+00100100001110100110111001101111
+11101000110000001000000000000000
+11000000111111111110111001101101
+11101000110000001000000000000000
+11000000111111111110111001101011
+00100000001000000110111010111000
+00011000110000001000110111111011
+00100000001000000110111001011111
+00011000110000001000110111111100
+00100000001000000110111001011111
+00011000110000001000110111111101
+00100000001000000110111001011111
+11101000110000001000000000000000
+11000000000001001110111010000110
+11000000000001010110111001110100
+11101000110000010000000000000000
+11100000101000010000000000000000
+00011000111000001000111000000001
+00011111111100001010010000000000
+11101000110000010000000000000000
+00011111111100001111111000000000
+00011010010000001010010000000001
+10011010010001100111110000000000
+00100100001000010110111010000011
+00011111111000100010011000000000
+00011010010100001111111000000000
+11100000101000010000000000000000
+00011000111000001000111000000001
+00011010011000100111111000000000
+00100000001000000110111001111010
+00011001011000001001011111111011
+00011010001000001010001111111011
+00100000001000000110111010001011
+11101000110000010000000000000000
+11100000101000010000000000000000
+00011000111000001000111000000001
+00011001011000001001011111111101
+00011010001000001010001111111101
+00100100001000010110111111000100
+00100100001000101110111001110001
+00011001011000001001011111111111
+00100100001000101110111111000100
+00100000010000000101001011010000
+00011000101000001000101000001010
+11011010001000000000010100101010
+00011000111000100111111000000000
+00100000001110100110111010100101
+11101010001000010000000000000000
+00100000001110100110111010100101
+10011000000000000010010000000000
+01101000000000100000010100100100
+10011000000000000000010000000000
+00100000010000000111000011100111
+00011000110000100111111000000000
+00100000001110100110111010100010
+00011000110000001000110111111101
+11101000110000011000000000000000
+11100000101000011000000000000000
+00100000010000000111000001011011
+10011000000000000111001000000000
+00100000010000000111111100000001
+00011010001000001010001000000010
+00011000111000001000111111111111
+00100000001000000110111010010010
+11011010001000000000000000000101
+00100000010000000110111110000100
+01101000000000010000001001110101
+11000000000001011111000001000011
+00100000001000000110111110011010
+11101000110000001000000000000000
+11000000000000000110111010101110
+11000000000000001110111010110000
+11000000000000010110111010110011
+00011001011000001001011111111111
+00100000001000000110111010110110
+11101000110000001000000000000000
+00011001011000001001011111111110
+00100000001000000110111010110110
+11101000110000010000000000000000
+00011111111100001111111000000000
+00011001011000001001011111111101
+01100000000000010000010100011001
+00100000011000000000000000000000
+00011001011000001001011111111011
+00100000010000000110111010101010
+00100100001000101110111110111110
+01101000000010100000010100100100
+00100000010000000111000010110001
+00100100001000101110111110111011
+00011000110000100010001000000000
+00100000010000000101001011010000
+00011010001000100000110000000000
+00011000101000001000101000000011
+00011000110000100001011000000000
+00100000010000000111000001100010
+00011111111000100010001000000000
+01101000000000010000010100011001
+00011111111000100010010000000000
+00011010001000100111111000000000
+10011010010001100010010000000000
+01101000000000010000010100100000
+10011010010001100111110000000000
+00100100001000010110111011100111
+01111000010101000111110000000000
+01101000000000010000010100011001
+00100000001110100110111011011010
+10011001011000001000110000000000
+00011010010000001010010000000011
+00011010010000100111001000000000
+00011111001000100111111000000000
+00011111111000001111111000000011
+00011111111100001111111000000000
+11100000101000010000000000000000
+00011111001000100111111000000000
+00011111111100001111111000000000
+11100000101000010000000000000000
+00100000001000000110111011110101
+00011010001000001111001000000110
+00100000001101000110111011011110
+00011111001100001111111000000000
+00100000001000000110111011100001
+00011111001000100111111000000000
+00011111111000001111111000000010
+00011111111100001111111000000000
+11100000101000010000000000000000
+00011111001000001111001111111101
+00011111001100001111111000000000
+11100000101000010000000000000000
+00011001011000100000110000000000
+00100000001000000110111011110101
+01111000001101000111110000000000
+01101000000000010000010100100000
+00011111111000100010001000000000
+00011010001000100111001000000000
+01101000000000010000010100011001
+00100000001110100110111011011010
+10011001011000001000110000000000
+00011010001000100111111000000000
+00011111111000001111111000000101
+00011111111100001111111000000000
+11100000101000010000000000000000
+00011010001000100111111000000000
+00011111111100001111111000000000
+11100000101000010000000000000000
+00100000010000000111111100000001
+00100100001101000110111011111110
+00011000000000000111111000000010
+11100000101000001000000000000000
+00011000110000100111111000000000
+10011001011001100111111000000000
+00011111111100001111111000000000
+11100000101000010000000000000000
+00100000001000000110111100000000
+00011000000000000111111000000000
+11100000101000001000000000000000
+11011010001000000000000000000101
+00100000001000000110111110110000
+01000111011010001100000000111010
+00100000010000000110111111010000
+00101000010000011111111011111111
+00100000001000001110111111000100
+00100000010000000110111100101110
+01100000000000010000010100100000
+00011001011000001001011111111110
+00100000010000000111000000101000
+11011000101000000000010100101010
+00011000000000000000111000000000
+11101000110000001000000000000000
+11000000000001010110111100110110
+11101000110000010000000000000000
+11100000101000010000000000000000
+00011000111000001000111000000001
+00011001011000001001011111111101
+00011010001000001010001111111101
+00100100001000010110111111000100
+00100100001000101110111100001100
+00011001011000001001011111111111
+00100100001000101110111111000100
+00100000010000000101001011010000
+00011000101000001000101000001101
+01101000000000010000010100010001
+10011000000000000010011000000000
+11011010001000000000010100101010
+11101010001000010000000000000000
+00100000001110100110111100101001
+10011000000000000010010000000000
+00100000010000000111000011000110
+00100000001110100110111100100111
+00011000110000001000110111111101
+11101000110000011000000000000000
+11100000101000011000000000000000
+00100000010000000111000001011011
+10011000000000000111001000000000
+00100000010000000111111100000001
+00011010001000001010001000000010
+00100000001000000110111100011100
+00100000010000000110111110000011
+01101000000000010000001001110101
+11000000000001110111000001000110
+00100000010000000110111110011010
+00100000001000000110111110011010
+11101000110000010000000000000000
+00011111111100001111111000000000
+00011111111000001111111111111101
+11011000010000000000000011001000
+10011000010001100111110000000000
+00100100011000010000000000000000
+01011000000000000000000011001000
+00100000011000000000000000000000
+00011000110000001000110000000100
+00011001011000001001011111111011
+00011010001000001010001111111011
+00100100001000101110111111000100
+00100000010000000110111010101010
+00100100001000101110111110111110
+11011001011000000000010100010001
+00100000010000000111000010000010
+00011000111000100111111000000000
+00100000001110100111000001000110
+01100000000000001000010101001110
+00011010010000100111111000000000
+01100000000000010000010101001100
+11011000111000000000000000000000
+11011010001000000000000000000000
+00100000010000000101001011010000
+00011000101000001000101000001010
+00100000010000000110111101101100
+00100100001101000010101010001100
+00011000110000100001011000000000
+00011111111000100010011000000000
+10011010001000001010001000000000
+01101000000000010000010100011001
+00011111111000100010010000000000
+00100000001110100110111101110101
+00011010001000100111111000000000
+10011010010001100010010000000000
+00100000001000101110111101100111
+00100100001000010110111101100111
+01101000000000010000010100100000
+10011010010001100111110000000000
+00100000001000101110111101011110
+00100100001000010110111101011110
+00011010010000100111001000000000
+00100000010000000110111101100001
+01101000000000001000010101001110
+00011000111000001000111000000001
+10011000111001100111110000000000
+00100000001000101110111110000011
+00100000001000000110111110100000
+00011111111000100111001000000000
+00100000010000000110111101100001
+00100000001000000110111110100000
+00011000101000001000101111111101
+00011111001000100000010000000000
+00011010011000100111111000000000
+10011010010001100111111000000000
+10011001011000001000110000000000
+00100000001000000111111100000001
+01101000000000001000010101001110
+00011000111000001000111000000001
+10011000111001100111110000000000
+00100000011000101000000000000000
+00100000001000000110111101000111
+00100000010000000111111111101001
+11011000110000000000010100101010
+00011000111010111111111000000000
+10011000110000001000110000000000
+11101000110010100000000000000000
+00100000010000000111000010110001
+00100100011000101000000000000000
+00100000010000000111000001011011
+00100000001000000111111111100111
+01101000000000010000010100100000
+10011010001001100111110000000000
+00100100001000010110111110001111
+00011010001000100111001000000000
+00011111001000100000010000000000
+00011001011000100000110000000000
+00100000010000000111111100000001
+01101000000000010000010101001100
+10011010001001100111110000000000
+00100000001000101110111110000001
+00100000010000000110111110100000
+00100000001000000110111110010100
+00100000010000000110111110000011
+00100000001000000110111110010100
+11011010001000000000000000000111
+00011000000000000111111000000000
+11100000101000001000000000000000
+00100000010000000110111110110000
+01101000000010010000001001110101
+00011000010000001000010111111011
+00011000010100001111111000000000
+11100000101000010000000000000000
+00011000010000001000010111111101
+00011000010100001111111000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+00011111111000100111001000000000
+00011111001000100000010000000000
+00011001011000100000110000000000
+00100000010000000111111100000001
+00100000010000000110111110100000
+01011000000000000000000000110110
+11100000101000001000000000000000
+01101000000000010000010101001100
+00011111111100001111111000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+01011000000000000000000000110110
+11100000101000001000000000000000
+00011000010000001000010111111101
+00011000010100001111111000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+11011010001000000000000000000111
+01011000000000000000000000000010
+11100000101000001000000000000000
+01101000000000010000010100011001
+10011000010000001000010000000000
+00011000010100001111111000000000
+11100000101000010000000000000000
+00100000010000000110111110110000
+01101000000010010000001001110101
+00011000010000001000010111111011
+00011000010100001111111000000000
+11100000101000010000000000000000
+00011000010000001000010111111011
+00011000010100001111111000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+01101000000000010000001001110011
+10011000101001100111111000000000
+00011111111001100111111000000000
+01100000000000010000001001110101
+00100000010000000101001011010000
+00011010001000100111111000000000
+11100000101000001000000000000000
+01101000000000010000010100011100
+11100000101000010000000000000000
+00100000011000000000000000000000
+00100000011000000000000000000000
+01011000000000000000001000000000
+01100000000000010000010101001010
+00100000001000000110111111000110
+01011000000000000000010000000000
+01100000000000010000010101001010
+00100000001000000110111111000110
+01011000000000000000011000000000
+01100000000000010000010101001010
+00100000001000000110111111000110
+01011000000000000000001100000000
+01100000000000010000010101001010
+00100000010000000101001011010000
+11100000101000001000000000000000
+01101000000000010000010100011100
+11100000101000010000000000000000
+01011000000000000000001000000000
+11100000101000010000000000000000
+01101000000000010000010101001010
+11100000101000010000000000000000
+01110000000000100111010100000111
+00100000011000000000000000000000
+11011010010000000000000000000000
+00011000000000000000010000000000
+11011000101000000000010100010001
+00100000010000000111000000101000
+00100000001000101111000000100110
+00011010010000001010010000000001
+11101000110000001000000000000000
+00011010001000001010001111111111
+00011001011000001001011111111111
+00101111111000011111000000011000
+00100100001000001111000000100110
+00101111111000000000111000000100
+00100100001000001110111111110011
+00011000000000000000010000000001
+11101000110000001000000000000000
+00011010001000001010001111111111
+00011001011000001001011111111111
+11000000100000000110111111100111
+11101000110000001000000000000000
+00011010001000001010001111111111
+00011001011000001001011111111111
+11000000000000000110111111111000
+00100000001000000110111111101010
+00011000110000001000110000000001
+00011010001000001010001111111111
+00011001011000001001011111111111
+00011000110000001000110000000010
+00011010001000001010001111111110
+00011001011000001001011111111110
+00101000010000011111111000000000
+00100000001000001111000000100000
+00011000110000001000110000001100
+00011010001000001010001111110100
+00011001011000001001011111110100
+00100000001000000111000000100000
+00101111111000000000111000000010
+00100100001000001110111111110110
+00100000001000000110111111011110
+00101111111000000000111000000001
+00100100001000001111000000100110
+00011010001000001010001111111110
+00011001011000001001011111111110
+11101000110000010000000000000000
+00011010010001100111110000000100
+00100000001000101110111111111110
+11100000101000010000000000000000
+00101000010000011111111000000000
+00100000001000001111000000100000
+00011000110000100000010000000000
+11101000110000001000000000000000
+11000000100000000111000000011001
+11101000110000001000000000000000
+11000000100000000111000000011001
+11101000110000001000000000000000
+11000000100010000111000000011001
+11101000110000001000000000000000
+11000000100000000111000000011001
+11101000110000001000000000000000
+11000000110000000111000000011001
+11101000110000001000000000000000
+11000000100000000111000000011001
+11101000110000001000000000000000
+11000000100000000111000000011001
+11101000110000001000000000000000
+11000000110000000111000000011001
+11101000110000001000000000000000
+11000000101011111111000000011001
+11101000110000001000000000000000
+11000000110011011111000000011001
+11101000110000001000000000000000
+11000000100110100111000000011001
+11101000110000001000000000000000
+11000000011111011111000000011110
+00011000010000100000110000000000
+00011000110000001000110000001100
+00011000000000000000111000000000
+00011000000000000000010000000000
+00100000001000000111000000011110
+00011001011000001001011111110100
+00011010001000001010001111110100
+00011000000000000000010000000000
+00101010001000011111111000000000
+00100100001000001110111111010101
+00011000000000000111111000000000
+11100000101000010000000000000000
+00100000011000000000000000000000
+11011000010000000000000011111111
+00100000011000000000000000000000
+01000111011010100100000000111010
+11101000110000001000000000000000
+00011001011000001001011111111111
+00101111111000011111000000110000
+00100100001000001111000000111110
+00101111111000000000111000000111
+00100000001000001111000000110111
+00101111111000000000111000000110
+00100000001000001111000000111001
+00101111111000000000111000000101
+00100100001000001111000000111110
+11101000110000001000000000000000
+00011111111000100010001000000000
+00011001011000001001011111111111
+00100000001000000111000000111100
+00011000110000001000110000000010
+00011001011000001001011111111110
+11101000110000010000000000000000
+00011111111100001010001000000000
+00011001011000001001011111111110
+00011000000000000111111000000001
+00100000011000000000000000000000
+00011000000000000111111000000000
+00100000011000000000000000000000
+01011000000000000000000000000011
+01100000000000001000010100011011
+00100000001000000111000001001000
+01011000000000000000000000000101
+01100000000000001000010100011011
+00100000001000000111000001001000
+01011000000000000000000000000111
+01100000000000001000010100011011
+00100000010000000101001011010000
+01101000000000001000010100011011
+00011111111000100010010000000000
+11100000101000001000000000000000
+01101000000000010000010100011100
+11100000101000010000000000000000
+01011000000000000000010100000000
+11100000101000010000000000000000
+00101010010000011111111000000101
+00100000001000001111000001010111
+00101010010000011111111000000111
+00100000001000001111000001010111
+01011000000000000000000000000000
+11100000101000101000000000000000
+00100000001000000111000001011001
+01011000001101010000001000000000
+11100000101000101000000000000000
+01110000000000100111010100001010
+00100000011000000000000000000000
+00100000010000000111111010100010
+00100000010000000111111010100101
+00100000010000000111000001100010
+00100000010000000111111010011100
+00100000010000000111111010011111
+00011000010000100111111000000000
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000010111001000000111
+00011111111010010111111000000000
+11000000100000000111000001101100
+00011000000000000111111000000001
+00011000000000000000010000000001
+00100000011000000000000000000000
+00100000010000000111111001110110
+00011111111000001000010000000001
+00100000011000000000000000000000
+00011111001000100111111000000000
+00011111111001100111110000000100
+00100000001000010111000001101001
+11000000000000101111000001110011
+11000000000000110111000001110110
+11000000000000111111000001111010
+00100000011000000000000000000000
+11101000110000001000000000000000
+00011111111000001000010000000010
+00100000011000000000000000000000
+11101000110000010000000000000000
+00011111111100001111111000000000
+00011111111000001000010000000011
+00100000011000000000000000000000
+11101000110000010000000000000000
+00011111111100001111111000000000
+11101000110010010000000000000000
+00011000010100001000010000000000
+00011000010100000000010000000000
+10011000010000001111111000000000
+00011111111000001000010000000101
+00100000011000000000000000000000
+01000111011010101100000000111010
+00011000000000000000111000000000
+11011010010000000000000000000000
+11011000101000000000010100101010
+11101001011000010000000000000000
+00100000011110100000000000000000
+00100000010000000111000010001101
+00011000111000100111111000000000
+11000001000000111000000000000000
+00011001011000001001011000000010
+00100000001000000111000010000110
+10011000000000000010011000000000
+01101000000000010100010101110101
+10011000000000000000110000000000
+00011000111000100111111000000000
+11000001000000111000000000000000
+01111000010101000111110000000000
+11101000110000001000000000000000
+00100000011110100000000000000000
+10011000000000000111001000000000
+11101000110000010000000000000000
+10011010011001100111110000000000
+00100100001000101111000010011010
+01111000001101000111110000000000
+11000010000000000111000010010110
+11101000110010100000000000000000
+00011000110000100010001000000000
+00100100001101000111000010101101
+11011000110000000000010100101010
+11011111001000000000000000000111
+11101000110000100000000000000000
+00100000001110100111000010100110
+10011000010001100111110000000000
+00100000001000101111000010101101
+11000010000000000111000010100000
+00100000011000000000000000000000
+11100000101010100000000000000000
+00011000111000001000111000000001
+00011010001000100000110000000000
+00100000010000000111000001011011
+10011010010000001010010000000000
+10011000110000001000110000000000
+00100000001000000111000010010000
+00011010001000100000110000000000
+00100000010000000111000001100010
+10011000110000001000110000000000
+00100000001000000111000010010000
+01000111011010110100000000111010
+01101000000000010100010101110101
+10011000000000000000110000000000
+11101000110000001000000000000000
+00100000001110100111111111100011
+00011111111000111111111000000000
+10011000110000001000110000000000
+11101000110000100000000000000000
+10011000010001100111110000000000
+00100000011000101000000000000000
+00011000101000100111111000000000
+01100000000000010000101010111011
+01100000000011000000101010100010
+00100000010000000111000001100010
+10011000110000001000110000000000
+00011000110000100111111000000000
+01101000000010010000101010111011
+00011000010000100000101000000000
+01101000000011000000101010100010
+00011111111000100000110000000000
+00100000001000000111000010110100
+01000111011010111100000000111010
+01101000000000010100010101110101
+10011000000000000000110000000000
+11101000110000001000000000000000
+00100000001110100111000011100100
+10011000000000000111001000000000
+11101000110000010000000000000000
+10011010011001100111110000000000
+00100000001000101111000011010100
+11000010000000000111000011001100
+00011000110000001000110000000100
+00100000010000000111000001100010
+10011000110000001000110000000000
+00100000001000000111000011001001
+00011111001000001111001111111111
+00011111001000111111111000000000
+10011000110000001000110000000000
+00011000110000001000110000000100
+00100000010000000111000001100010
+10011000110000001001011000000000
+00011000110000001000110000000001
+11101000110000010000000000000000
+10011010010001100111110000000000
+00100000001000101111111111101111
+00100000010000000111000001011011
+10011000110000001000110000000000
+00011001011000100111111000000000
+10011000110001100111110000000000
+00100000001000101111000011100100
+00100000001000000111000011011010
+00011000000000000000110000000000
+00011000000000000111111000000000
+00100000011000000000000000000000
+01000111011011000100000000111011
+01101000000000010100010101110101
+10011000000000000000110000000000
+11101000110000001000000000000000
+00100000001110100111000100000000
+00011111111000111111111000000000
+10011000110000001000110000000000
+11101000110000100000000000000000
+10011000010001100111110000000000
+00100000001000101111000011110100
+00100000010000000111000001100010
+10011000110000001000110000000000
+00100000001000000111000011101010
+00100000010000000111000001100010
+10011000110000001001011000000000
+00011000110000001000110000000001
+11101000110000010000000000000000
+10011010010001100111110000000000
+00100000011000101000000000000000
+00100000010000000111000001011011
+10011000110000001000110000000000
+00011001011000100111111000000000
+10011000110001100111110000000000
+00100000001000101111000100000000
+00100000001000000111000011110110
+00011000000000000000110000000000
+00100000011000000000000000000000
+11011010010000000000010000000000
+00100000010000000111000011110100
+11011010010000000000001100000000
+00100000010000000111000100001101
+00100100011101000000000000000000
+00011010001001100111110000000011
+00100000001000010111111111101001
+11101000110000001000000000000000
+11000000100001000111111111101001
+11101000110000001000000000000000
+00100000011000000000000000000000
+01000111011011001100000000111011
+00100000010000000111000001100010
+00011111111000100010001000000000
+11101000110000001000000000000000
+00011111111000010111001000000111
+00011111111010010111111000000000
+00011111111001100111110000000011
+00100000001000101111000100101001
+00011111001000100111111000000000
+11000000000000101111000100100000
+11000000000000110111000100100011
+11000000000000111111000100100110
+00011000110000001000110111111111
+00100000010000000111000001100010
+10011000110000001000110000000000
+00011010001000100111111000000000
+10011000010001100010001000000000
+00100000001000101111111111101001
+00100000001000000111000100010000
+00011010001000001010001111111110
+00011000110000001000110000000001
+00100000001000000111000100010000
+00011010001000001010001111111101
+00011000110000001000110000000010
+00100000001000000111000100010000
+00011010001000001010001111111011
+00011000110000001000110000000100
+00100000001000000111000100010000
+00011010001000001010001111111111
+00011111001000100111111000000000
+11000000000000001111000100110010
+11000000000000010111000100110000
+11000000000000100111000100101111
+00100000001000000111111111101001
+00011010001000001010001111110100
+11101000110000010000000000000000
+00011010001000001010001111111110
+11101000110000010000000000000000
+10011010010001100111110000000000
+00100000001000101111111111100111
+00011010001000001010001111111110
+00100000001000101111111111101001
+00100000001000000111000100010000
+00100000010000000101001011010000
+00011111111000100000101000000000
+01011000000000000000000000000110
+11100000101000001000000000000000
+01011000000000000000000001101110
+11100000101000010000000000000000
+01011000000000000000111100000000
+11100000101000010000000000000000
+01011000000110100000010100110101
+11100000101000011000000000000000
+01011000000000000000000100010001
+00011111111100000111111000000000
+11100000101000100000000000000000
+01011000000000000010011000000000
+11100000101000010000000000000000
+01011000000000000000001100110101
+11100000101000010000000000000000
+01011000000000000000000000001001
+11100000101000010000000000000000
+01011000000000000000000000000100
+11100000101000010000000000000000
+01110000000000100111010100010100
+00100000011000000000000000000000
+01000111011011010100000000111011
+01110000000001011110010101010000
+11011000101000000000010111100110
+11011000110000000100010000111010
+00100000010000000111111010111111
+11011000110000000100010111010010
+00100000010000000111111010111101
+11011000110000000000100110111110
+00100000010000000111111010111101
+00100000010000000111001000001010
+11011000110000000000010000101111
+00100000010000000111001000000101
+00100000010000000111000111010000
+11011000101000000000101011110010
+00100000010000000111001000000001
+01011000000011110100001001000000
+00011111111000100010001000000000
+01101000000000100000101011110010
+10011010001001101111110000000000
+00100000010000000111111110000110
+00011000000001110111111000000000
+01100000000000100000100110111010
+00100000011000000000000000000000
+01110000000001011110010101000001
+11011000101000000000010111100110
+00100000010000000111000110110101
+00100000010000000111000110110000
+01101000000000011100010001010100
+11100000101000011000000000000000
+00100000010000000111000101110110
+11011000110000000000010000101111
+00100000010000000111111010111111
+11011000110000000100010000111010
+00100000010000000111111010111111
+00100000010000000111001000001010
+11011000110000000000101100010010
+11011000101000000000101011000010
+00100000010000000111111010111111
+00100000001000000111000111010000
+01101000000000100100010011000111
+11100000101000100000000000000000
+00100000010000000111111011001101
+00100000001000000111111011001010
+01000111011011011100000000111011
+01110000000001011110010101000001
+11011000101000000000010111100110
+00100000010000000111000110110000
+00100000010000000111000110110101
+01101000000000011100010001001101
+11100000101000011000000000000000
+00100000010000000111000101110110
+11011000110000000100010000111010
+00100000010000000111111010111111
+11011000110000000000010000101111
+00100000010000000111111010111111
+00100000010000000111001000001010
+11011000110000000000101100010010
+11011000101000000000101011000010
+00100000010000000111111010111111
+00100000010000000111000111010000
+11011000101000000000101011110010
+00100000001000000111001000000001
+01110000000001011110010100100000
+11011000110000000000100111111110
+11011000101000000000010111100110
+00100000010000000111111010111101
+00100000010000000111001000001010
+11011000110000000000100110011110
+00100000010000000111001000000101
+00100000010000000111000111010000
+11011000101000000000101011000010
+00100000010000000111010010010111
+11011000010000000000000000000001
+00100000010000000111000110011111
+11011000101000000100010000011001
+00100000010000000111001000000001
+11011000010000000000000000000000
+00100000010000000111000110011111
+11011000101000000000101100010010
+00100000001000000111010010010111
+01000111011011100100000000111011
+01110000000001011110010100110101
+01011000000000000000000100000000
+01100000000000010000010111100110
+00100000010000000111000110110000
+00100000010000000111000110110101
+11011000110000000100010000111010
+00100000010000000111111010111111
+11011000110000000000010000101111
+00100000010000000111111010111111
+01011000000000000110110001100101
+11100000101000010000000000000000
+01011000000000000110001001110100
+11100000101000010000000000000000
+11100000101010001000000000000000
+00100000010000000111001000001010
+00100000001000000111000111010000
+01101000000000110100010010100000
+11100000101000110000000000000000
+01101000000000001100010010010101
+11100000101000001000000000000000
+00100000011000000000000000000000
+01101000000000110000010001001111
+11100000101000110000000000000000
+01101000000000001100010010001110
+11100000101000001000000000000000
+00100000011000000000000000000000
+01110000000001011110010101000001
+01101000000000001100011001100100
+01100000000000001000010111100110
+11011000110000000100010111010010
+00100000010000000111111010111101
+11011000110000000000100110111110
+00100000010000000111111010111101
+00100000010000000111001000001010
+11011000110000000000010000101111
+00100000010000000111001000000101
+00100000001000000111000111010000
+01110000000001011110010101000001
+01101000000000001100011001100100
+01100000000000001000010111100110
+11011000110000000000100110111110
+00100000010000000111111010111101
+11011000110000000100010111010010
+00100000010000000111111010111101
+00100000010000000111001000001010
+11011000110000000100010000111010
+00100000010000000111001000000101
+00100000001000000111000111010000
+01000111011011101100000000111011
+00100000010000000111001000011111
+01101000000000001000010111100101
+00011111111000100000010000000000
+00011111111000001111111000001111
+00011111111100011111111000000000
+00011111111000100010010000000000
+00100000001110100111000111100010
+00011000010000010111111000001111
+00100100001110100111000111100101
+11011010011000000000101011010010
+11011111111000000000010111100110
+00011111111000001111111111110000
+10011000010000001010001000000000
+11011000101000000000101100000010
+11011111001000000000000000000100
+00100000010000000111111011011101
+00100000001000000111000111110000
+11011010010000000000000000000001
+11011010001000000000000000000000
+00100000001000000111000111100110
+00011000010000010010001000001111
+11011111111000000000010111100110
+10011000010000001111111000000000
+10011010001001100000110000000000
+11011000101000000000101011110010
+00100000010000000111001001000101
+11011010011000000000101011100010
+11011010001000000000101011110010
+11011000101000000000101100000010
+11011111001000000000000000000100
+00100000010000000111111011011101
+00100000010000000111010010010001
+00100000010000000111010000101000
+11011000110000000000010111100110
+00011010010000001010010111111111
+00011010010000100111111000000000
+00100000001110100111000111111001
+00100000010000000111010010000110
+00100000010000000111010000100010
+00100000001000000111000111110011
+11011000101000000000101011110010
+00100000010000000111010010010111
+11011000110000000000101100000010
+00100000010000000111010010000110
+00100000010000000111010000101000
+11011000110000000000101011110010
+00100000010000000111010010000110
+00100000001000000111010000100010
+00011000101000100010001000000000
+00100000010000000111010010010111
+11011111001000000000000000010000
+00100000001000000111111011100101
+11011000101000000000101011000010
+00100000010000000111111010111111
+11011111001000000000000000010000
+11011010001000000000101011000010
+00100000001000000111111011100101
+01101000000000001000010111100101
+00011111111000100111001000000000
+11011010001000000000010111100110
+00100000001000000111111011100101
+11101010001000001000000000000000
+00011111111000111111111000000000
+00101010011011111111111000000000
+01111001001000001111111000000000
+00101111111011111111111000001000
+01111001001000001010011000000000
+11100010001000001000000000000000
+00011010001000001010001111111111
+11000010000000000111001000001110
+00100000011000000000000000000000
+11011010001000000000101011010010
+00011010001000001010001000001111
+00011000000000000111001000010000
+00011000000000000010011000000000
+00100000001000000111001000001110
+11011010001000000000101011100010
+00100000001000000111001000011001
+11011000110000000000101011000010
+00100000010000000111010010000100
+00011000000000000111000000001000
+00100000010000000111010010010010
+00100000010000000111010010010001
+00100000010000000111010000011111
+11011000101000000000101011010010
+00100000010000000111010010010111
+01000111011011110100000000111011
+01101000000000001000101011010010
+00101111111011111111111000000111
+00100100001000001111001000110000
+00100000010000000111001000011000
+11011010011000000000101011010010
+11011000101000000000101011010010
+00100000010000000111001000111010
+00100000001000000111001000110001
+00100000010000000111001000011000
+11011000110000000000101011010010
+11011000101000000000101011100010
+00100000010000000111111010111111
+01101000000000001000101011100010
+00101111111011111111111000000111
+00100100001000001111001000011101
+00100000010000000111001000011101
+11011010011000000000101011100010
+11011000101000000000101011100010
+11011111001000000000000000000011
+11011000010000000000000000000000
+00100000010000000111001001000001
+00011010011000001010011000000100
+11000010000000000111001000111011
+11011000010000001000011100000000
+00011000010100000000010000000000
+11101010011000100000000000000000
+10011000010000101111111000000000
+11100000101000100000000000000000
+00100000011000000000000000000000
+01000111011011111100000000111011
+11011111001000000000000000010000
+11011111111000000000000000000000
+10011010001001100111110000000000
+00100000001000101111001001010000
+00100000001000010111001001010011
+11101000110010001000000000000000
+11100000101010001000000000000000
+00011111111000001111111000000001
+11000010000000000111001001001000
+00100000011000000000000000000000
+11011000010000000000000010000000
+11100000101010001000000000000000
+00100000001000000111001001001101
+11011000010000000000000000000000
+00100000001000000111001001010001
+00100000010000000111001001101000
+11011000110000000000010110010010
+11011000101000000000010110000010
+00100000001000000111111010111111
+01111000010101000111110000000000
+00100000010000000111001101011111
+11011000110000000000010101100010
+11011000101000000000010110100010
+00011000000000000111001000001111
+00100000010000000111111100000001
+11101000110000001000000000000000
+00011111111000101111111000000110
+11100000101000001000000000000000
+01011000000000000000010110110010
+01100000000000010000010111010110
+01011000000000000000010110100010
+01100000000000010000010111010100
+01111001001000000000000000010010
+00100000001000000111001010101000
+01101000000010001100011010001001
+00011000000000000010010000010000
+00011000010000001010011000000110
+00011010011001100111110000010000
+00100000001000010111001001101110
+00011000000000000010011000010000
+11011000101000000000010110100010
+11011000110000000100011010001010
+00011000010000100111001000000000
+01111000010101000111110000000000
+11101000110000001000000000000000
+11100000101000001000000000000000
+00011010010000001010010111111111
+00100000001000101111001001111100
+11000010000000000111001001110010
+00100000001101000111001001101111
+01111000001101000111110000000000
+00011000000000000111001000000110
+00011010001000100000110000000000
+00100000001000000111001001110010
+11011000110000000000010101100010
+11011000101000000000010110110010
+00100000010000000111111010111111
+01101000000000001000010111000001
+10011010011000101111111000000000
+01100000000000001000010111000001
+01011000000000000000010110110010
+01100000000000010000010111010110
+01011000000000000000010110100010
+01100000000000010000010111010100
+01111001001000000000000000010010
+00100000001000000111001010101000
+01111000010101000111110000000000
+00100000010000000111001101011111
+00100000001000000111001010010010
+11011010001000000000000001010110
+01111000001101000111110000000000
+00100000010000000111001101011111
+00100000010000000111001010010010
+11011000110000000000010110010010
+11011000101000000000000001100010
+00100000001000000111111010111111
+01011000000000000000010101100010
+01100000000000010000010111010110
+01011000000000000100000110111110
+01100000000000010000010111010100
+01111001001111111000000000010010
+00100000010000000111001010101000
+11011010001000000000010110010010
+11011010010000000000010101100010
+11011000101000000000010110100010
+00100000010000000111001101010010
+11011010001000000000010110100010
+11011010010000000000010110110010
+00011010010000100000101000000000
+01111000001101000111110000000000
+00100000010000000111001101010000
+00100000010000000111001101101010
+01011000000000000000010110110010
+01100000000000010000010111010110
+01011000000000000000010110100010
+01100000000000010000010111010100
+01111001001000000000000000010010
+00100000001000000111001010101000
+01110000000001011101100000000000
+01101000000000010000010111010100
+10011000000000000000110000000000
+11011000101000000000010111000010
+00100000010000000111111010111111
+01101000000000010000010111010110
+10011000000000000000110000000000
+11011000101000000000010110010010
+00100000010000000111111010111111
+00100000010000000111001011001111
+01111000010101000111110000000000
+11000101100010010111001010111001
+01101000000000001000010111011000
+11000000100000100111001010111001
+01101000000000010000010111010110
+10011000000000000010010000000000
+00100000010000000111001100000001
+00100000010000000111001100000000
+00100000010000000111001100010011
+01101000000000001000010111011000
+00011111111000001111111000000001
+01100000000000001000010111011000
+00100000010000000111001011001111
+01111000001101000111110000000000
+00100000010000000111001100000000
+00100000010000000111001100100010
+00100000010000000111001100110001
+00100000010000000111001100100010
+00100000010000000111001100110001
+00100000010000000111001100100010
+00100000010000000111001100110001
+00100000010000000111001100100010
+01101000000000001000010111011000
+00011111111000001111111000000001
+01100000000000001000010111011000
+11000000100010000111001010110001
+00100000010000000111001011001111
+01111000010101000111110000000000
+00100000001000000111001100000000
+01101000000000001000010111011000
+11011000110000000000010111000010
+00100000001110100111001011110110
+10011000000000000010010000000000
+00011000000000000111001000010001
+00011000110000100000101000000000
+11101000110000001000000000000000
+00011111111010011000010000000000
+00011111111010110111111000000000
+00011111111010010111111000000000
+10011000010000011111111000000000
+11100000101000001000000000000000
+11000010000000000111001011010101
+01011000000000000000010111000010
+10011010010000001000110000000000
+00011000000000000111001000010000
+11011000101000000000010101110010
+11101000110000001000000000000000
+11100000101000001000000000000000
+00101000110000011111111111010011
+00100100001000001111001011100101
+00011000110000001000110111101111
+11000010000000000111001011100000
+00011000000000000010001000000000
+00011010010000001010011111111111
+00011010011010111010011000000000
+00011010011010111010011000000000
+00100000010000000111010010111001
+01011000000000001000010000000000
+10011010011000001010011000000000
+11011000101000000000010101110010
+00011000000000000111001000010000
+11101010011010001000000000000000
+11101000101000001000000000000000
+10011000010000001111111000000000
+11100000101000001000000000000000
+00011010011000001010011000000001
+11000010000000000111001011101111
+00100000001000000111010010111101
+00011000000000000111001000010000
+00011000000000000000010000000000
+11101000110000001000000000000000
+10011000010000101000010000000000
+11000010000000000111001011111000
+00011000010000100111111000000000
+11100000110000001000000000000000
+11011000110000000000010111000010
+11011000101000000000010101110010
+00100000001000000111111010111111
+11011010010000000000010101110010
+00011000000000000111001000010000
+11011010001000000000010110010010
+00011010001000100000101000000000
+11101010001010001000000000000000
+11101010010000001000000000000000
+10011000010000101110000000000000
+00011111001000010010011000000011
+00100100001101000111001100001010
+00011010011000101010011000000011
+00011010011001100010011000000001
+00100000001000010111001100001101
+10011000010000001110000000000000
+00011110000000100111111000000000
+11100000101000001000000000000000
+00011010001000001010001000000001
+00011010010000001010010000000001
+11000010000000000111001100000100
+00100000011000000000000000000000
+00100000010000000111010010111001
+00011000000000000111001000010000
+11011010001000000000010110010010
+11101010001000001000000000000000
+11011000110000001000010100000000
+00011111001000010010011000000011
+00011010011001100111110000000001
+00100000001000010111001100011100
+11011000110000001000011000000000
+10011000110000001000110000000000
+11101000110000001000000000000000
+11100010001000001000000000000000
+00011010001000001010001000000001
+11000010000000000111001100010110
+00100000001000000111010010111101
+00011000000000000111001000001000
+11011000110000000000010110010010
+00011000110000100000101000000000
+11101000110000001000000000000000
+10011000000000000010001000000000
+11101000110000001000000000000000
+10011000000000000010010000000000
+00011010001000111111111000000000
+10011010010000001111111000000000
+11100000101000001000000000000000
+00011010001000100111111000000000
+10011010010000001111111000000000
+11100000101000001000000000000000
+11000010000000000111001100100101
+00100000011000000000000000000000
+01011000100010101110010000101100
+10011000000000000000010000000000
+00011000000000000111001000000111
+00100000010000000111001101000000
+01011000000011010111010100011011
+10011000000000000000010000000000
+00011000000000000111001000000101
+00100000010000000111001101000000
+01101000000000001000010110100001
+10011000000000000010001000000000
+01101000000000001000010110010101
+01100000000000001000010110100001
+00011010001000100111111000000000
+01100000000000001000010110010101
+00100000011000000000000000000000
+00011000010000010010010000001111
+00011000010000010111111000001111
+11011000101000000000010110010010
+10011000101000001000101000000000
+11101000101000001000000000000000
+10011000000000000010011000000000
+00011010001000100111111000000000
+11100000101000001000000000000000
+00011010011000100010001000000000
+00011000010100011000010000000000
+11000010000000000111001101000001
+01011000000000000000010110010010
+10011010010000001000101000000000
+00011010001000100111111000000000
+11100000101000001000000000000000
+00100000011000000000000000000000
+01111000001101000111110000000000
+00100000001000000111001101010011
+01111000010101000111110000000000
+00011000000000000111001000010000
+11101010001010001000000000000000
+11101010010000001000000000000000
+00100000001101000111001101011001
+10011000010000101111111000000000
+00100000001000000111001101011010
+10011000010000001111111000000000
+11100000101000001000000000000000
+00011010001000001010001000000001
+00011010010000001010010000000001
+11000010000000000111001101010100
+00100000011000000000000000000000
+11011000101000000000010110110010
+11101010001000110000000000000000
+11100000101000110000000000000000
+00100000001101000111001101100101
+11101010001000110000000000000000
+00100000001000000111001101100110
+11101000110000110000000000000000
+11100000101000110000000000000000
+11101010001000100000000000000000
+11100000101000100000000000000000
+00100000011000000000000000000000
+11011000110000000100000110111110
+11011000101000000000010110100010
+11011000010000000000000000000000
+01011000100000111001010110100111
+00100000010000000111001110001011
+01011000101100111100000111011111
+00100000010000000111001110001011
+01011000000000001110010111101001
+00100000010000000111001110001100
+00011000010000100010100000000000
+01111000010101000111110000000000
+00100000010000000111001101111001
+00011010100000100000010000000000
+01111000001101000111110000000000
+00100000001000000111001101111001
+00011000000000000111001000001000
+11101000110000001000000000000000
+00101111001000000000001000000001
+00100000001101000111001110000000
+00100000001000001111001110000001
+10011000010000001111111000000000
+00100000001000000111001110000010
+00100000001000001111001101111110
+10011000010000101111111000000000
+11100000101000001000000000000000
+00011000010011001000010000000000
+11000010000000000111001101111010
+00100000011000000000000000000000
+01101000000000110000010110010110
+01100000000000110000000001010110
+11101000110000110000000000000000
+11100000101000110000000000000000
+00100000011000000000000000000000
+00011000010011010000010000000000
+00011000010100000000010000000000
+10011000010000011000010000000000
+00100000011000000000000000000000
+00100000001000000111001110001111
+01000111011100000100000000111100
+00100000010000000111010000101011
+11011000101000000100010000011001
+00100000001000000111010010010111
+11011000101000000100010000111010
+00100000001101001111001110010111
+11011000101000000000010000101111
+00011000110000100010001000000000
+00100000010000000111111010111111
+00100000010000000111010001000000
+11011000110000000100010000101010
+00100000001000000111010010110000
+11011010001000000000010000101111
+00100000001101001111001110011111
+11011010001000000100010000111010
+00011010001000100000101000000000
+00100000010000000110001100001100
+00100000001000000111010001000000
+11011000110000000100010010101010
+00100000010000000111010010000110
+11011000110000000100010000011001
+00100000010000000111010010000111
+00011000000000000110110000111000
+00011000000000000110110000000000
+00100000010000000111010000011101
+11011000101000000000010001111100
+00100000001000000111010010010111
+00011000000000000111111001001001
+00100000001000000111001110101110
+00011000000000000111111000000001
+00011000000000000111000000000000
+00011000010011010101111000000000
+10011101111000011101111000000000
+00011111000000001111000000000001
+00011000010011001101111000000000
+00011101111100010101111000000000
+01101000000000010100010000010001
+00011111111100000111111000000000
+10011101111000011101111000000000
+00011111000000001111000000000001
+11101000110000100000000000000000
+10011000000000000101111000000000
+00011111000000001111000000000001
+11101000110000010000000000000000
+00011010001100001101111000000000
+00011101111100000101111000000000
+10011101111000011101111000000000
+00011111000000001111000000000001
+00100000011000000000000000000000
+00011010011000001000110000000001
+11101000110000001000000000000000
+10011000000000000010001000000000
+00100000010000000111001110101011
+00100000010000000111010000011111
+00011000000000000111000000000000
+11101010011000001000000000000000
+00011111111000010111111000000011
+00011111111100000101111000000000
+01111001001000000101111000001000
+00100000010000000111010010001111
+00100000010000000111010000100010
+00011010001000100111001000000000
+00011010011000001000110000000010
+00100000010000000111010001101110
+00100000010000000111010001111000
+00100000010000000111010000100010
+00011111001000100111111000000000
+00100000001110100111001111010101
+00100000001000000111001111010000
+00011000000000000111000000001100
+00011101111000100111111000000000
+01100000000000100000010000010111
+00100000011000000000000000000000
+00011010001000001010001000000001
+00100000010000000111001110101101
+00011010011000100000110000000000
+00100000010000000111010010000010
+00100000010000000111010000100101
+00100000010000000111010010011110
+00011010011000001010011000010000
+00011010010000001010010111110000
+00100000001000010111001111011001
+00100000011000000000000000000000
+01000111011100001100000000111100
+11011010011000000100001111011100
+01101000000010101100010000000011
+00100000010000000111001111000001
+00011000000000000111000000001000
+10011000000000000101111000000000
+00011000000000000010001000000000
+00100000010000000111001110101101
+00100000010000000111010000100101
+11011010011000000100001111011110
+01101000000000001100001111011101
+00011111111000001010010111111111
+10011010011000001000101000000000
+00011000000000000111000000001100
+00011101111000100111111000000000
+11100000101000100000000000000000
+00100000010000000111001111011001
+01101000000000001100001111011101
+00011111111000001111111000000100
+01100000000000001100001111011101
+01101000000010101100010000000011
+00011000010000001000010000000001
+01100000000010101100010000000011
+00100000011000000000000000000000
+01000111011100010100000000111100
+01101000000000001000001011011010
+00011111111001100111110000010100
+00100000001000010111001111111111
+11011010011000000000001011011011
+00011111111000001010010111111111
+00011111111000001111111111111100
+01100000000000001000001011011010
+10011010011000001000110000000000
+11101000110000100000000000000000
+00011000000000000111000000001000
+10011000000000000101111000000000
+00011000000000000010001000000000
+01101000000010101100010000001000
+00100000010000000111001110101101
+00100000010000000111010000100101
+00011000000000000111000000001100
+00011101111000100111111000000000
+01100000000000100000010000011011
+00100000010000000111001111011001
+11011010011000000000001011011001
+00100000010000000111001111000001
+01101000000010100000010000011011
+10011000010001100111111000000000
+00100100011110100000000000000000
+01101000000000100100010000001101
+10011000010001100111111000000000
+00100000011110100000000000000000
+01100000000010100100010000001101
+01101000000000101100010000001000
+00011111111000001111111000000001
+01100000000000101100010000001000
+00011000000000000111111000000000
+00100000011000000000000000000000
+00100100001110111111010000011101
+00100000011000000000000000000000
+00011000000000000110110000110000
+00011000000000000110110000000000
+00100000001000000111010000011101
+00011000000000000110110000110010
+00011000000000000110110000000010
+00100000001000000111010000011101
+00011000000000000110110000110100
+00011000000000000110110000000100
+00100000001000000111010000011101
+00011000000000000110110000000001
+00011000000000000110110000000000
+00100000011000000000000000000000
+00011000000000000111000000000000
+01101000000000100000010000101111
+10011000000000000101111000000000
+00011111000000001111000000000001
+11101000110000100000000000000000
+10011000000000000101111000000000
+00011111000000001111000000000001
+01101000000000100100010000111010
+10011000000000000101111000000000
+00011111000000001111000000000001
+11101000110000100000000000000000
+10011000000000000101111000000000
+00011111000000001111000000000001
+00100000010000000111010010010010
+00011111000000001111000111111100
+01101000000000100100010011000111
+00011111111000100101111000000000
+00011111000000001111000000000100
+00011000000000000110110000111000
+00011000000000000110110000001000
+00100000001000000111010000011101
+01000111011100011100000000111100
+01101000000000110100010010100000
+01101000000010110000010001001111
+00100000001101001111010001000110
+01101000000000110000010001001111
+01101000000010110100010010100000
+00011000000000000111000000001000
+00011000010000100101111000000000
+00011111000000001111000000000001
+00011000010011110101111000000000
+00011111111100000111111000000000
+10011101111000011101111000000000
+00011111000000001111000000000001
+00011111111011110101111000000000
+00011111000000001111000000000001
+00011000000000000101111000000000
+00011000000000000111111000000000
+01101000000000001100010010001110
+01101000000010001100010010000101
+00100100001101001111010001010110
+01101000000000001100010010010101
+01101000000010001100010010001110
+01100000000000001100010001001010
+01100000000010001100010001001011
+00011000000000000111000000000000
+11011010010000000100010001001010
+00011000000000000111001000000100
+11101010001000100000000000000000
+11101010010010100000000000000000
+10011000010000101101111000000000
+00011111000000001111000000000001
+00011010001000001010001000000100
+00011010010000001010010000000100
+11000010000000000111010001011011
+00100000010000000111010010010010
+00011111000000001111000111111100
+01101000000000100100010011000111
+00011111111000100101111000000000
+00011111000000001111000000000100
+00011000000000000110110000111000
+00011000000000000110110000001100
+00100000010000000111010000011101
+00100000010000000111010010010001
+00011000000000000110110000111010
+00011000000000000110110000001000
+00100000001000000111010000011101
+00101111001000000000011000000000
+00100000011000001000000000000000
+00011000110000100111111000000000
+10011111001000001000101000000000
+00011000000000000111111000000000
+11100000101000001000000000000000
+00011111001000001111001000000001
+00101111001000000000011000000000
+00100000011000001000000000000000
+00100000001000000111010001110011
+00011000000000000111000000000000
+00011111001000100111111000000000
+00100000001110100111010001111101
+11101000110000100000000000000000
+00011111001000001111001111111100
+10011000000000000101111000000000
+00011111000000001111000000000001
+00101111000000000001111000000100
+00100000011000001000000000000000
+00100000001000000111010001111001
+00011000000000000111000000001000
+00100000001000000111010010000111
+00011000000000000111000000000100
+00100000001000000111010010000111
+00011000000000000111000000000000
+00011000000000000111001000000100
+11101000110000100000000000000000
+10011000000000000101111000000000
+00011111000000001111000000000001
+11000010000000000111010010001000
+00100000011000000000000000000000
+11011000110000000000010001111100
+00100000001000000111010010000100
+00011000000000000111001000000100
+00100000001000000111010010010100
+00011000000000000111000000000000
+00011000000000000111001000000100
+00011000000000000101111000000000
+00011111000000001111000000000001
+11000010000000000111010010010011
+00100000011000000000000000000000
+00011000000000000111000000001100
+00011000000000000111001000000100
+00011101111000100111111000000000
+11100000101000100000000000000000
+00011111000000001111000000000001
+11000010000000000111010010011001
+00100000011000000000000000000000
+00011000000000000111000000001100
+00011010011000100000101000000000
+00011010010000001111001000000001
+00011111001001100111110000001111
+00100000001000010111010010100100
+00011000000000000111001000010000
+00011101111000100111111000000000
+00011111001001100111110000000011
+00100000001000010111010010101100
+11100000101000100000000000000000
+00011111001000001111001111111100
+00100000011000101000000000000000
+00011111000000001111000000000001
+00100000001000000111010010100100
+11100000101000001000000000000000
+00011111111011001111111000000000
+11000010000000000111010010101100
+00100000011000000000000000000000
+00011000000000000111000000001100
+00011000000000000111001000000100
+11101000110000100000000000000000
+10011101111001100111110000000000
+00100100011000101000000000000000
+00011111000000001111000000000001
+11000010000000000111010010110010
+00011000000000000111110000000000
+00100000011000000000000000000000
+01101000000100001000000001010000
+01111001001111111111111000000000
+01100000000100001000000001010000
+00100000011000000000000000000000
+01101000000100001000000001010000
+01111001001000000111111000000000
+01100000000100001000000001010000
+00100000011000000000000000000000
+11011000101000000000100010000110
+00111000000000111111111111111111
+00111000000001111111111111111111
+00111000000010111111111111111111
+00111000000011111111101111111111
+11100000101001001000000000000000
+00111000000000111111111111111111
+00111000000001111111111111111111
+00111000000010111111111111111111
+00111000000011111111111111111111
+11100000101001001000000000000000
+00111000000000111111111111111111
+00111000000001111111111111111111
+00111000000010111100111111111111
+00111000000011111111111111111111
+11100000101001001000000000000000
+00111000000000111111111111111111
+00111000000001111111111111111111
+00111000000010111111111111101111
+00111000000011111111111111111111
+11100000101001001000000000000000
+00111000000000111111111111111111
+00111000000001111111111111111111
+00111000000010111111111111111111
+00111000000011111111111111111111
+11100000101001001000000000000000
+00111000000000111111111111111111
+00111000000001100110110001111111
+00111000000010000001010001101011
+00111000000011110111101110110011
+11100000101001001000000000000000
+00111000000000011111111010111000
+00111000000001010000110000010010
+00111000000010101011011100100010
+00111000000011101001111110100110
+11100000101001001000000000000000
+00111000000000001110011100001111
+00111000000001010110011100100000
+00111000000010000101000110011110
+00111000000011011001000010000100
+11100000101001001000000000000000
+00111000000000110001000000010010
+00111000000001110110000010111111
+00111000000010111111000010101111
+00111000000011000000001111010011
+11100000101001001000000000000000
+00111000000000111010000110001000
+00111000000001000011101011010000
+00111000000010111100101111110010
+00111000000011100100001111011001
+11100000101001001000000000000000
+00111000000000101011000000110000
+00111000000001110110101000000011
+00111000000010010001000110001000
+00111000000011011110010100100000
+11100000101001001000000000000000
+00111000000000111010000100011110
+00111000000001001111111001011101
+00111000000010001101110101010111
+00111000000011011010110010010011
+11100000101001001000000000000000
+00111000000000000001000111101101
+00111000000001100001100011000100
+00111000000010001000110110100111
+00111000000011100101011111111111
+11100000101001001000000000000000
+00111000000000110001100100101011
+00111000000001110100011001000001
+00111000000010011011111000001100
+00111000000011110110011010101101
+11100000101001001000000000000000
+00111000000000000001111110000011
+00111000000001010101101000100011
+00111000000010111111100110110000
+00111000000011000011100101001001
+11100000101001001000000000000000
+00111000000000010011101001010001
+00111000000001010101001111111101
+00111000000010110011011100101010
+00111000000011001111000110111011
+11100000101001001000000000000000
+00111000000000111010111010000101
+00111000000001011110111011011001
+00111000000010001001111001100110
+00111000000011000000000110101000
+11100000101001000000000000000000
+00100000011000000000000000000000
+11011000101000000000100100011110
+00111000000000111111111111111111
+00111000000001111111111111111111
+00111000000010111111111111111111
+00111000000011111111111111111111
+11100000101001001000000000000000
+00111000000000111111111111111111
+00111000000001000000000000111111
+00111000000010000000000000000000
+00111000000011000000000000000000
+11100000101001001000000000000000
+00111000000000000000000000000000
+00111000000001000000000000000000
+00111000000010000001000000000000
+00111000000011000000000000000000
+11100000101001001000000000000000
+00111000000000111111111100000000
+00111000000001111111111111111111
+00111000000010111111111111001111
+00111000000011111111111111111111
+11100000101001001000000000000000
+00111000000000111111111111111111
+00111000000001111111111111111111
+00111000000010111111111111111111
+00111000000011000000001111111111
+11100000101001001000000000000000
+00111000000000000000000000000000
+00111000000001000000000000000000
+00111000000010000000000000000000
+00111000000011000000000000000000
+11100000101001001000000000000000
+00111000000000010000000000000000
+00111000000001000000000000000000
+00111000000010111111000000000000
+00111000000011111111111111111111
+11100000101001001000000000000000
+00111000000000101001011011111111
+00111000000001100010011000110000
+00111000000010111001010001011101
+00111000000011111101001010000100
+11100000101001001000000000000000
+00111000000000110011001110100000
+00111000000001000100101101111010
+00111000000010000011011111011000
+00111000000011111100100111011100
+11100000101001001000000000000000
+00111000000000111010010001000000
+00111000000001011011100101011000
+00111000000010111000101111001110
+00111000000011010000100100011111
+11100000101001001000000000000000
+00111000000000101110000100101100
+00111000000001011111010001111100
+00111000000010110101011010110001
+00111000000011101111110101000111
+11100000101001001000000000000000
+00111000000000000110100000110111
+00111000000001101110110110010000
+00111000000010011110110011101100
+00111000000011011010110011000101
+11100000101001001000000000000000
+00111000000000100011001101010111
+00111000000001011000101011110011
+00111000000010001111100111100001
+00111000000011010010100111110000
+11100000101001001000000000000000
+00111000000000101110011111101011
+00111000000001111110011011100011
+00111000000010111110000110100111
+00111000000011010000101110001011
+11100000101001001000000000000000
+00111000000000100100111111100011
+00111000000001000010000011101111
+00111000000010011011010110100110
+00111000000011001101110000101111
+11100000101001001000000000000000
+00111000000000010011100001100000
+00111000000001101011110101101001
+00111000000010000011100100011010
+00111000000011011011001000100010
+11100000101001001000000000000000
+00100000011000000000000000000000
+01101000000000001100011001011010
+00100100001110100111010101111101
+00100000001000000111101001110111
+01000111011100100100000000111100
+01101000000000001100011001011010
+00100000011110100000000000000000
+01101000000000001100010110110001
+11000001100000001000000000000000
+01101000000000001100010010111110
+00100000011110100000000000000000
+01101000000000001100010011000011
+11000001000000011000000000000000
+01101000000000010100011010000010
+11000010100000000111010101111011
+01101000000000001100010011000000
+11000000000000000111101001110111
+00100000011000000000000000000000
+01110000010001001100000000000000
+00100000011000000000000000000000
+01000111011100101100000000111100
+01101000000000001100011001011010
+00100000001110100110000100101011
+00100000010000000110000100100100
+00100000010000000111010110000011
+00100000001000000111011001101101
+01011000000000000000000000000000
+01100000000001000000100110101110
+01100000000000100000100110110110
+01100000000000111100011001011110
+00100000011000000000000000000000
+01110000000010011011000000000001
+00100000001000000111010110001101
+01101000000000001100010110110001
+11000000000000001111011010001010
+00100000001000000010101010001100
+01101000000000001100010110110001
+11000000000000001111010110010000
+00100000001000000111011001101101
+00100000010000000111011010001010
+01101000000000001000100110101111
+00100100011110100000000000000000
+01110000000010011010111000000011
+00100000011000000000000000000000
+00100000010000000111010110110000
+11011010001000000000100111011110
+11011000101000000000100001100110
+00100000010000000111110001111001
+11011010001000000000100110111110
+11011000101000000000100000100110
+00100000010000000111110001111001
+11011010001000000000100000100110
+11011010010000000000100110111110
+11011000101000000000100000100110
+00100000010000000111101111100001
+11011010001000000000100100111110
+11011010010000000000100110111110
+11011000101000000000100001000110
+00100000010000000111101111100001
+11011010001000000000100001000110
+11011010010000000000100000100110
+11011000101000000000100000100110
+00100000010000000111110001111101
+11011010001000000000100000000110
+11011010010000000000100000100110
+11011000101000000000100000000110
+00100000010000000111110001111101
+11011111001000000000000000100000
+11011010001000000000100001100110
+11011010010000000000100000000110
+00100000001000000111111110001000
+11011010001000000000100101111110
+11011000101000000000100000000110
+00100000010000000111110001111001
+11011010001000000000100101011110
+11011000101000000000100000100110
+00100000010000000111110001111001
+11011010001000000000100000100110
+11011010010000000000100101011110
+11011000101000000000100000100110
+00100000010000000111101111100001
+11011010001000000000100100111110
+11011010010000000000100101011110
+11011000101000000000100001000110
+00100000010000000111101111100001
+11011010001000000000100001000110
+11011010010000000000100000100110
+11011000101000000000100000100110
+00100000010000000111110001111101
+11011010001000000000100000000110
+11011010010000000000100000100110
+11011000101000000000100000000110
+00100000001000000111110010010110
+00100000010000000111010111100001
+11011010001000000000100111100110
+11011000101000000000100001100110
+00100000010000000111011110101000
+11011010001000000000100111000110
+11011000101000000000100000100110
+00100000010000000111011110101000
+11011010001000000000100000100110
+11011010010000000000100111000110
+11011000101000000000100000100110
+00100000010000000111011110000110
+11011010001000000000100010011110
+11011010010000000000100111000110
+11011000101000000000100001000110
+00100000010000000111011110000110
+11011010001000000000100001000110
+11011010010000000000100000100110
+11011000101000000000100000100110
+00100000010000000111011101010101
+11011010001000000000100000000110
+11011010010000000000100000100110
+11011000101000000000100000000110
+00100000010000000111011101010101
+11011111001000000000000000011000
+11011010001000000000100001100110
+11011010010000000000100000000110
+00100000001000000111111110001000
+11011010001000000000100011100110
+11011000101000000000100000000110
+00100000010000000111011110101000
+11011010001000000000100011001110
+11011000101000000000100000100110
+00100000010000000111011110101000
+11011010001000000000100000100110
+11011010010000000000100011001110
+11011000101000000000100000100110
+00100000010000000111011110000110
+11011010001000000000100010011110
+11011010010000000000100011001110
+11011000101000000000100001000110
+00100000010000000111011110000110
+11011010001000000000100001000110
+11011010010000000000100000100110
+11011000101000000000100000100110
+00100000010000000111011101010101
+11011010001000000000100000000110
+11011010010000000000100000100110
+11011000101000000000100000000110
+00100000001000000111011101011000
+01101000000000001000100110110010
+11000000100000000111011000010101
+00100000010000000111011000010010
+11011000101000000000101001111110
+01011000000000000000101000101110
+11100000101000010000000000000000
+01011000000000000100011001000010
+11100000101000010000000000000000
+01011000000000000000100111011110
+11100000101000010000000000000000
+00100000001000000111011000001001
+11011000101000000000101001111110
+01011000000000000000101000111110
+11100000101000010000000000000000
+01011000000000000000100111011110
+11100000101000010000000000000000
+01011000000000000100011001000010
+11100000101000010000000000000000
+00100000010000000111100110100000
+01101000000000001000100110101111
+11000000000000100111011000001111
+01110000000010011011000000000001
+01110000000010011010111000000101
+00100000011000000000000000000000
+01110000000010011010111100010100
+00100000010000000111010110001010
+00100000001000000111011011011000
+11011000101000000000101000011110
+00011000000000000000111000001000
+00100000001000000111011010100010
+01110000000010011011000000000001
+00100000011000000000000000000000
+01000111011100110100000000111100
+11011000101000000000011100100111
+01101000000000110100000010100000
+11100000101000110000000000000000
+01101000000000110000000001000000
+11100000101000110000000000000000
+01101000000000011100011001011110
+11100000101000011000000000000000
+00100000010000000111101000001101
+11011010001000000000101001001110
+11011010010000000000101001011110
+00011000000000000000111000000100
+00100000010000000111011010100111
+00100100001000001111011000110001
+00100000010000000111011000101000
+01110000000000000111110101000001
+00100000001000000110001011111000
+01101000000000001000100110101111
+11000000000001001111011000101110
+01110000000010011010111000001010
+01110000000010011011000000000001
+01110000000000000111110000000011
+00100000011000000000000000000000
+01110000000000000111110000000011
+01110000000010011010111100010101
+00100000001000000111011011011000
+01101000000000001000100110101111
+11000000000001001111011000110111
+01110000000010011010111000000000
+01110000000000000111110000000100
+01110000000000000111111000000101
+00100000011000000000000000000000
+01110000000000000111110000000100
+01110000000010011010111100000000
+00100000011000000000000000000000
+01101000000000001000100110110011
+11000000000000001111011000111110
+01110000000010011010111100001010
+00100000001000000111011011011000
+11011000101000000000011100100111
+01101000000000110000000001000000
+11100000101000110000000000000000
+01101000000000110100000010100000
+11100000101000110000000000000000
+01101000000000011100011001011011
+11100000101000011000000000000000
+00100000010000000111101000100100
+01101000000000001000100110101111
+11000000000001010111011001001011
+01110000000010011010111000001011
+01110000000010011011000000000001
+00100000011000000000000000000000
+01110000000010011010111100001011
+01110000000010011011000100000001
+00100000011000000000000000000000
+11011000101000000000101001111110
+01101000000000110000000001000000
+11100000101000110000000000000000
+01101000000000110100000010100000
+11100000101000110000000000000000
+01011000000000000000101000101110
+11100000101000010000000000000000
+01011000000000000000101000111110
+11100000101000010000000000000000
+00100000001000000111011001100010
+01110000000010011010111000001111
+11011000101000000000101001111110
+01101000000000110100000010100000
+11100000101000110000000000000000
+01101000000000110000000001000000
+11100000101000110000000000000000
+01011000000000000000101000111110
+11100000101000010000000000000000
+01011000000000000000101000101110
+11100000101000010000000000000000
+11011000101000000000011100100111
+01101000000000110000101001111110
+11100000101000110000000000000000
+01101000000000110000101010000100
+11100000101000110000000000000000
+00100000010000000111100111010111
+01110000010000011011110100000001
+11011000101000000100000110111110
+11011000110000000000101001001110
+00100000010000000111111010111111
+00100000001000000010000111000100
+01000111011100111100000000111100
+01101000000000001100010110110001
+11000001100000000000000000000000
+01101000000000001000100110110010
+11000001100000000000000000000000
+11011000101000000100011000010010
+00011000000000000000111000001011
+00100000010000000111011010100010
+00011000000010100111111000000000
+00011111111000110111111000000000
+11100000101000010000000000000000
+11011000101000000000011010111110
+11011000110000000100011000010010
+00100000010000000111111010111110
+11011000101000000000010111100110
+11011000110000000000100011001110
+00100000010000000111111010111100
+11011000101000000000011000010110
+00100000010000000111111011000101
+01110000000001100001011000000001
+00100000010000000111101001011101
+01110000000010011011001000000001
+00100000011000000000000000000000
+11011000101000000100011000101010
+11011000110000000000011000101110
+00100000010000000111111010111100
+01110000010001011011000100000001
+01110000000010011011001000000000
+00100000011000000000000000000000
+01000111011101000100000000111101
+01101000000000001000100110111001
+11000001100000000000000000000000
+01101000000000001000100110110010
+11000001100000000000000000000000
+11011000101000000000011010111110
+11011000110000000100011000010010
+00100000010000000111111010111110
+11011000101000000000010111100110
+11011000110000000000100111000110
+00100000010000000111111010111100
+11011000101000000000011000010110
+00100000010000000111111011000101
+01110000000001100001011000000001
+00100000010000000111101001011101
+01110000000010011011001000000010
+00100000011000000000000000000000
+01110000000010011011001100000001
+11011000101000000000101000000110
+11011000110000000000011000101110
+00100000010000000111111010111110
+01110000000010011011100100000001
+01110000000010011011001000000000
+00100000011000000000000000000000
+00011000111000001000111111111111
+00100100011000010000000000000000
+00011000000010100111111000000000
+11100000101000010000000000000000
+00100000001000000111011010100010
+00011000111000001000111111111111
+00100100001000010111011010110011
+11101010001000100000000000000000
+00011111111000100000010000000000
+11101010010000100000000000000000
+10011000010000101111111000000000
+00100100001000101111011010110001
+00011010001000001010001000000100
+00011010010000001010010000000100
+00100000001000000111011010100111
+01111000010000001111110000000000
+00100000011000000000000000000000
+01111000001000001111110000000000
+00100000011000000000000000000000
+01000111011101001100000000111101
+01101000000000001000100110110000
+00100000011110100000000000000000
+00100000010000000110001010111100
+00100100011110100000000000000000
+01110000000010011011000000000000
+01101000000000001000100110101110
+11000000000000011110000111111101
+11000000000000101110001000011010
+11000000000000111110001000100101
+11000000000001011110001000111010
+11000000000000010111010110001000
+11000000000000100111010111110111
+11000000000001001111011000010111
+11000000000001010111011000111010
+11000000000001100111011001011000
+00100000011000000000000000000000
+01000111011101010100000000111101
+01101000000000001000100110110001
+00100000011110100000000000000000
+00100000010000000110001010111100
+00100100011110100000000000000000
+01110000000010011011000100000000
+01101000000000001000100110101111
+11000000000010010110000111100000
+11000000000010011110000111100101
+11000000000000011110000111101001
+11000000000000100111011000000010
+11000000000010100110000111101101
+11000000000000111110000111111011
+11000000000001010111011000111010
+11000000000001011110001000111001
+11000000000001001111011000010111
+11000000000010101110001000110011
+00100000011000000000000000000000
+01110000000010011011000100000001
+00100000011000000000000000000000
+01110000000010011011000100000000
+00100000011000000000000000000000
+01000111011101011100000000111101
+01101000000000001100011001011010
+00100000011110100000000000000000
+01101000000000001000100110110010
+00100000011110100000000000000000
+00011111111000001111111010000000
+01100000000000001000100110110010
+11000011100000111000000000000000
+01101000000000001000010111100011
+00100000001110100111011011100111
+00100000001000000111101001101000
+00100000010000000111100011010011
+01101000000000001000100110110010
+11000000000000001111011010000100
+11000000000000010111011010011011
+00100000011000000000000000000000
+00011111111000010000111000000111
+00011111111010010111111000000000
+10011000110000001000110000000000
+11101000110000001000000000000000
+10101111111011000000000000000000
+00100000011000000000000000000000
+00100000010000000111111010111110
+00100000010000000111111010111110
+00100000001000000111111010111110
+11101000110001000000000000000000
+00100100011110100000000000000000
+11101000110001000000000000000000
+00100100011110100000000000000000
+11101000110001000000000000000000
+00100000011000000000000000000000
+11101010001000100000000000000000
+10011000000000000000010000000000
+11101010010000100000000000000000
+10011000010001100111110000000000
+00100100011000101000000000000000
+00011010001000001010001000000100
+00011010010000001010010000000100
+11000010000000000111011011111011
+00100000011000000000000000000000
+00011000000000000111001000000110
+00011010001000001010001000010100
+00011010010000001010010000010100
+11101010010000100000000000000000
+10011000000000000000010000000000
+11101010001000100000000000000000
+10011000010001100111111000000000
+00100100011000010000000000000000
+00100100011110100000000000000000
+00011010001000001010001111111100
+00011010010000001010010111111100
+11000010000000000111011100000111
+00100000011000000000000000000000
+00011000000000000111001000000110
+00011000000000000010011000000000
+11101010001000100000000000000000
+10011000000000000000010000000000
+11101010010000100000000000000000
+10011000010000001111111000000000
+10011010011000001111111000000000
+11100000101000100000000000000000
+00101111111011111111111000100000
+01111001001000001010011000000000
+00011010001000001010001000000100
+00011010010000001010010000000100
+11000010000000000111011100010011
+00100000011000000000000000000000
+00011000000000000111001000000110
+00011000000000000010011000000000
+11101010010000100000000000000000
+10011000000000000000010000000000
+11101010001000100000000000000000
+10011000010001100111111000000000
+10011010011001100111111000000000
+11100000101000100000000000000000
+00101111111011111111111000100000
+01111001001000001010011000000000
+00011010001000001010001000000100
+00011010010000001010010000000100
+11000010000000000111011100100001
+00100000011000000000000000000000
+00011000000000000111001000000110
+00011010001000001010001000010100
+00011000000000000010011000000000
+11101010001000100000000000000000
+00101111111011111111111000000000
+01111001001000001010011000000001
+00011111111000110111111000000000
+00101010011011111111111000000000
+01111001001000001111111000011111
+11100010001000100000000000000000
+00011010001000001010001111111100
+00011010011000110010011000000000
+11000010000000000111011100110000
+00100000011000000000000000000000
+00011000000000000111001000000110
+00011000000000000010011000000000
+11101010001000100000000000000000
+00101111111011111111111000011111
+01111001001000001010011000000001
+00011111111000111111111000000000
+00101010011011111111111000000000
+01111001001000001111111000000000
+11100010001000100000000000000000
+00011010001000001010001000000100
+00011010011000110010011000000000
+11000010000000000111011100111101
+00100000011000000000000000000000
+00100000010000000111011100111011
+00101010011011111111111000000000
+00100000001000001111011101010001
+11011010010000000000100010000110
+00011010001000100010011000000000
+00011010001000001010001111101000
+00100000010000000111011100000100
+00100100011000010000000000000000
+00011010011000100010001000000000
+00011010001000001010001111101000
+11011010010000000000100010000110
+00011010001000100000101000000000
+00100000001000000111011100011111
+00100000010000000111011100010001
+00011000101000100010001000000000
+00100000001000000111011101001001
+00100000010000000111011100011111
+00101010011011000000000000000000
+00100000011000001000000000000000
+11011010010000000000100010000110
+00011000101000001010001111101000
+00011010001000100000101000000000
+00100000001000000111011100010001
+00011000101000100001011000000000
+00011010001000100110000000000000
+11011010010000000000011100010110
+00011010010000100000101000000000
+00011010001000001000110000011000
+11101000110001000000000000000000
+11100000101001000000000000000000
+11100000101001000000000000000000
+00011000000000000111111000000000
+11100000101001000000000000000000
+00011001011000100000101000000000
+00100000010000000111011101010101
+11011010010000000000011100010110
+00011010010000100000101000000000
+00011000000000000111111000000000
+11100000101001000000000000000000
+00011110000000001000110000100000
+11101000110001000000000000000000
+11100000101001000000000000000000
+11100000101001000000000000000000
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000010000000111011101010101
+11011010010000000000011100010110
+00011010010000100000101000000000
+00011110000000001000110000101000
+11101000110001000000000000000000
+11100000101001000000000000000000
+11100000101001000000000000000000
+11100000101001000000000000000000
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000001000000111011101010101
+00011000000000000111001000000110
+11101000110000100000000000000000
+10011000000000000101111000000000
+00011111000000001111000000000001
+11000010000000000111011110000001
+00100000011000000000000000000000
+00011000101000100001011000000000
+11011000101000000000011011100110
+00100000010000000111111011000101
+11011000101000000000011011100110
+00011010001000100000110000000000
+00011000000000000111000000000000
+00100000010000000111011110000000
+00011010010000100000110000000000
+00100000010000000111011110000000
+00011000000000000010010000000000
+00011000000000000000010000000000
+00011000000000000010011000000110
+11101000101000100000000000000000
+10011000000000000010001000000000
+00011010010000100111000000000000
+00011101111000100111111000000000
+00011010011000100111000000000000
+10011101111011111111111000000000
+10011010001000001111111000000000
+10011000010000001111111000000000
+11100000101000100000000000000000
+00011111111011110000010000000000
+00011010011000001010011000000001
+00101010011000011111111000001100
+00100100001000001111011110010010
+00011000010000100111111000000000
+11100000101000100000000000000000
+00011000101000001000101111101000
+00011010010000001010010000000001
+00101010010000011111111000000110
+00100100001000001111011110010000
+11011010001000000000011011100110
+00011001011000100000101000000000
+00100000001000000111011101011111
+00011010001000100010010000000000
+00100000001000000111011110000110
+00011010001000100110000000000000
+00011110000000100010001000000000
+11101010001000001000000000000000
+00101111111011111111111000000000
+00100000011000001000000000000000
+00100000010000000111011100101101
+11101010010000001000000000000000
+00101111111011000000000000000000
+00100000001000001111011110111010
+11011010001000000000100010000110
+00011010010000100000101000000000
+00100000010000000111011100010001
+11101010010000001000000000000000
+10011010011000001111111000000000
+11100010010000001000000000000000
+00011010010000001010010111101000
+00011010010000001010001000011000
+00011000000000000111001000000111
+00100000010000000111011100101111
+00100000001000000111011110101011
+00011000101000100001011000000000
+11011000101000000000011101000110
+00100000010000000111111011000101
+00011000000000000111111000000000
+01100000000000100000011011111110
+01100000000000100000011101011110
+01110000000001110100011000000001
+11011000101000000000011011100110
+00100000010000000111111011000101
+11011000110000000000100010000110
+11011000101000000000011100010110
+00100000010000000111111010111110
+00011010001000100000110000000000
+11011000101000000000011100101110
+00100000010000000111111010111110
+11011000110000000000011100101110
+00100000010000000111011011110101
+00100000001110100111011111110110
+11011010001000000000011100101110
+11011010010000000000011101000110
+00100000010000000111011110101010
+11011010001000000000011100010110
+11011010010000000000011011100110
+00100000010000000111011110101010
+11011010001000000000011100101110
+11011010010000000000011100010110
+00100000010000000111011100000100
+00100000001000010111011111101000
+11011010001000000000011100010110
+11011010010000000000011100101110
+00011010001000100000101000000000
+00100000010000000111011100011111
+11011010001000000000011101000110
+11011010010000000000011011100110
+00011010010000100000101000000000
+00100000010000000111011100010001
+11101010001000001000000000000000
+10011010011000001010011000000000
+11101010010000001000000000000000
+10011010011000001111111000000000
+11100010010000001000000000000000
+00100000001000000111011111001101
+11011010001000000000011100101110
+11011010010000000000011100010110
+00011010001000100000101000000000
+00100000010000000111011100011111
+11011010001000000000011011100110
+11011010010000000000011101000110
+00011010010000100000101000000000
+00100000010000000111011100010001
+11101010001000001000000000000000
+10011010011000001010011000000000
+11101010010000001000000000000000
+10011010011000001111111000000000
+11100010010000001000000000000000
+00100000001000000111011111001101
+11011000101000000000011101000110
+00100000010000000111111011000101
+01101000000000001000011011111110
+01100000000000001000011101000110
+01100000000000001000011101001110
+11011010001000000000011101000110
+11011010010000000000011011100110
+00011010010000100000101000000000
+00100000010000000111011101010101
+11011010001000000000100010000110
+11011010010000000000011011100110
+00011001011000100000101000000000
+00100000001000000111011101011000
+11011010001000000000011010100110
+11011000101000000000011101011110
+00100000010000000111011110101000
+11011010001000000000011101011110
+11011000101000000000011101110110
+00100000010000000111011110101000
+11011010001000000000100010011110
+11011010010000000000011101110110
+11011000101000000000011101110110
+00100000010000000111011110000110
+11011010001000000000011001110110
+11011000101000000000011101011110
+00100000010000000111011110101000
+11011000110000000000011101011110
+11011000101000000000011100101110
+00100000010000000111111010111110
+11011010001000000000011100101110
+00100000010000000111011101001000
+11011010001000000000011101011110
+11011010010000000000011100101110
+11011000101000000000011101011110
+00100000010000000111011101010101
+11011010001000000000011101011110
+11011010010000000000011101110110
+11011000101000000000011101011110
+00100000010000000111011101010101
+11011000110000000000011001110110
+11011000101000000000011100101110
+00100000010000000111111010111110
+11011010001000000000011010001110
+11011000101000000000011101110110
+00100000010000000111011110101000
+11011010001000000000011100101110
+00100000010000000111011101001000
+11011010001000000000011100101110
+00100000010000000111011101001000
+11011010001000000000011100101110
+11011010010000000000011101110110
+11011000101000000000011100101110
+00100000010000000111011110000110
+11011010001000000000011101110110
+11011000101000000000011101000110
+00100000010000000111011110101000
+11011010001000000000011101000110
+00100000010000000111011101001000
+11011010001000000000011101000110
+00100000010000000111011101001000
+11011010001000000000011101000110
+00100000010000000111011101001000
+11011000110000000000011010001110
+11011000101000000000011101110110
+00100000010000000111111010111110
+11011010001000000000011101110110
+00100000010000000111011101001000
+11011010001000000000011101110110
+11011010010000000000011010100110
+11011000101000000000011010100110
+00100000010000000111011110000110
+11011010001000000000011101011110
+11011000101000000000011101110110
+00100000010000000111011110101000
+11011010001000000000011101110110
+11011010010000000000011100101110
+11011000101000000000011101110110
+00100000010000000111011101011000
+11011010001000000000011101110110
+11011010010000000000011100101110
+11011000101000000000011001110110
+00100000010000000111011101011000
+11011010001000000000011100101110
+11011010010000000000011001110110
+11011000101000000000011101110110
+00100000010000000111011101011000
+11011010001000000000011101110110
+11011010010000000000011101011110
+11011000101000000000011101110110
+00100000010000000111011110000110
+11011010001000000000011101110110
+11011010010000000000011101000110
+11011000101000000000011010001110
+00100000001000000111011101011000
+11011010001000000000011000010110
+11011000101000000000011110001110
+00100000010000000111011110101000
+11011010001000000000011001110110
+11011010010000000000011110001110
+11011000101000000000011101000110
+00100000010000000111011110000110
+11011010001000000000011000010110
+11011010010000000000011110001110
+11011000101000000000011110001110
+00100000010000000111011110000110
+11011010001000000000011010001110
+11011010010000000000011110001110
+11011000101000000000011100101110
+00100000010000000111011110000110
+11011010001000000000011010100110
+11011000101000000000011110001110
+00100000010000000111011110101000
+11011010001000000000010111100110
+11011010010000000000011110001110
+11011000101000000000011101011110
+00100000010000000111011110000110
+11011010001000000000011010100110
+11011010010000000000011110001110
+11011000101000000000011110001110
+00100000010000000111011110000110
+11011010001000000000010111111110
+11011010010000000000011110001110
+11011000101000000000011101110110
+00100000010000000111011110000110
+11011010001000000000011101000110
+11011010010000000000011101011110
+11011000101000000000011110001110
+00100000010000000111011101011000
+11011010001000000000011101000110
+11011010010000000000011101011110
+11011000101000000000011101000110
+00100000010000000111011101010101
+11011010001000000000011100101110
+11011010010000000000011101110110
+11011000101000000000011101011110
+00100000010000000111011101011000
+11011010001000000000011100101110
+11011010010000000000011101110110
+11011000101000000000011100101110
+00100000010000000111011101010101
+11011010001000000000011100101110
+11011010010000000000011110001110
+11011000101000000000011100101110
+00100000010000000111011110000110
+11011010001000000000011010100110
+11011010010000000000011000010110
+11011000101000000000011101110110
+00100000010000000111011110000110
+11011010001000000000011101110110
+11011010010000000000011110001110
+11011000101000000000011010100110
+00100000010000000111011110000110
+11011010001000000000011110001110
+11011000101000000000011110001110
+00100000010000000111011110101000
+11011010001000000000011110001110
+11011010010000000000011101000110
+11011000101000000000011101110110
+00100000010000000111011110000110
+11011010001000000000011110001110
+11011010010000000000011100101110
+11011000101000000000011100101110
+00100000010000000111011110000110
+11011010001000000000011101011110
+11011000101000000000011001110110
+00100000010000000111011110101000
+11011010001000000000011001110110
+11011010010000000000011101110110
+11011000101000000000011001110110
+00100000010000000111011101011000
+11011000110000000000011001110110
+11011000101000000000011110001110
+00100000010000000111111010111110
+11011010001000000000011110001110
+00100000010000000111011101001000
+11011010001000000000011101110110
+11011010010000000000011110001110
+11011000101000000000011101110110
+00100000010000000111011101011000
+11011010001000000000011101110110
+11011010010000000000011101011110
+11011000101000000000011101011110
+00100000010000000111011110000110
+11011010001000000000011101011110
+11011010010000000000011100101110
+11011000101000000000011010001110
+00100000010000000111011101011000
+11011010001000000000011010001110
+11011010010000000000100010000110
+11011000101000000000011010001110
+00011000000000000010011000000000
+01101000000000001000011010001110
+00101111111011111111111000000000
+00100000010000001111011100010001
+00011010011000100110000000000000
+11011010001000000000011010001110
+00100000010000000111011100101101
+01101000000000001000011010100101
+00101110000011111111111000000000
+01111001001000001111111000000111
+01100000000000001000011010100101
+00100000011000000000000000000000
+01101000000000001000010111100011
+00011111111000001111111111111111
+00100100011000010000000000000000
+01100000000000001000010111100011
+01101000000000001000010111100010
+00100000010110100111100000000011
+01101000000000001000010111100011
+11011000110000000000011010111110
+00100000010000000111011011101100
+00100000001000001111100011000000
+01101000000000001000010111100010
+00100100001110100111100011001110
+00100000010000000111100001010100
+00100000001000000111100011000000
+01110000000001011110001000000000
+11011000110000000000010111100110
+11011000101000000000011001110110
+00100000010000000111011011110010
+00100000001000000111100011000000
+11011010001000000000011010100110
+11011000101000000000011101110110
+00100000010000000111011110111110
+11011010001000000000011101110110
+11011000101000000000011100101110
+00100000010000000111011110101000
+11011010001000000000011001110110
+11011010010000000000011100101110
+11011000101000000000011000101110
+00100000010000000111011110000110
+11011010001000000000011101110110
+11011010010000000000011100101110
+11011000101000000000011101011110
+00100000010000000111011110000110
+11011010001000000000011010001110
+11011010010000000000011101011110
+11011000101000000000011001000110
+00100000001000000111011110000110
+11101000110000100000000000000000
+00011000000000000010001000000100
+00011000101000001000101000000011
+11100000101000001000000000000000
+00011111111011001111111000000000
+00011000101000001000101111111110
+00011010001000001010001111111111
+00100100001000101111100011101000
+00011000101000001000101000000101
+11000010000000000111100011100101
+00100000011000000000000000000000
+00011000111010111111111000000000
+10011001011000001000110000000000
+11101000110000100000000000000000
+00100000011000000000000000000000
+00011000000000000110000000010000
+11011001011000000000010111100110
+00011110000000001000111111111001
+00100000010000000111100011110000
+10011000000000000000010000000000
+00011110000000001000111111110000
+00100000010000000111100011110000
+10011000010000001000010000000000
+00011110000000001000111111111110
+00100000010000000111100011110000
+00011111111011100111111000000001
+10011000010000001000010000000000
+00011110000000001000111111110001
+00100000010000000111100011110000
+00011111111011100111111000000000
+10011000010000001000010000000000
+00011110000010111111111000000000
+10011001011000001000101000000000
+11100000101010100000000000000000
+00011110000000001110000000000001
+00101110000000011111111001000000
+00100100001000001111100011110110
+00100000011000000000000000000000
+11011000110000000000100011111110
+00011000000000000111000000000111
+11101000110000100000000000000000
+10011000000000000101111000000000
+00011111000000001111000111111111
+00100000001000010111100100001101
+00100000011000000000000000000000
+01000111011101100100000000111101
+00100000010000000111100011110100
+11011000101000000000011011100110
+00011000000000000111000000000000
+00011101111000100111111000000000
+11100000101000100000000000000000
+00011111000000001111000000000001
+00101111000000011111111000001000
+00100100001000001111100100010110
+00100000010000000111010010111001
+11011001011000001000011100000000
+11011110000000000000010111100110
+00011000000000000111001001000000
+11101110000010100000000000000000
+11101001011000100000000000000000
+00011001011000001001011000000100
+00011110000000001110000000000100
+10011000010000001111111000000000
+00011000000000000111000000000111
+10011101111000001000010000000000
+00011000000000000111000000000100
+00011101111011100111111000000011
+10011000010000001000010000000000
+00011000000000000111000000000101
+00011101111000100111111000000000
+00011000000000000111000000000110
+10011101111000101111111000000000
+00011000000000000111000000000100
+10011101111000010111111000000000
+00011000000000000111000000000110
+10011101111000101111111000000000
+10011000010000001000010000000000
+00011000000000000111000000000111
+00011000010000100101111000000000
+00011000000000000111000000000011
+00011101111000100111111000000000
+10011000010000001101111000000000
+00011000000000000111000000000000
+00011101111000100111111000000000
+00011000000000000111000000000001
+10011101111000010000010000000000
+10011101111000011111111000000000
+00011000000000000111000000000010
+10011101111000010111111000000000
+10011000010000011000010000000000
+00011000000000000111000000000000
+00011101111011100111111000000010
+10011000010000001111111000000000
+00011000000000000111000000000111
+10011101111000001101111000000000
+10011000000011101111110000000000
+11000010000000000111100100011111
+11011000110000000000011011100110
+00011000000000000111000000000000
+11101000110000100000000000000000
+10011101111000001101111000000000
+00011111000000001111000000000001
+00101111000000011111111000001000
+00100100001000001111100101001000
+00100000001000000111010010111101
+11011000101000000000101000111110
+00011000000000000111000000000111
+00011101111000100111111000000000
+11100000101000100000000000000000
+00011111000000001111000111111111
+00100000001000010111100101010000
+00100000011000000000000000000000
+11011000101000000000010111100110
+00011000110000001000110111111100
+00011111001001100010001000010000
+11101000110000100000000000000000
+10011000010000101111111000000000
+11100000101000100000000000000000
+00011000110000001000110111111000
+11000010000000000111100101011000
+00011010001000100111001000000000
+00011000010000100111111000000000
+11100000101000100000000000000000
+11000010000000000111100101011111
+00100000011000000000000000000000
+00100000010000000111100101100111
+00100000010000000111100101001110
+00100000001000000111100110001101
+00100000010000000111100101100111
+00100000001000000111100110001101
+11011000110000000000100111011110
+11011000101000000000010111100110
+00011000000000000111001000000110
+00100000010000000111101001110001
+11011000110000000100011001000010
+00011000000000000111001000000110
+00100000010000000111101001110001
+11011000110000000000101000111110
+00100000010000000111101001110000
+00100000010000000111100100001011
+00100000010000000111100100010010
+11011000110000000000101000101110
+11011000101000000000010111100110
+00100000001000000111100110000100
+11011000110000000100011001000010
+11011000101000000000010111100110
+00011000000000000111001000000110
+00100000010000000111101001110001
+11011000110000000000100111011110
+00011000000000000111001000000110
+00100000010000000111101001110001
+11011000110000000000101000101110
+00100000010000000111101001110000
+00100000010000000111100100001011
+00100000010000000111100100010010
+11011000110000000000101000111110
+11011000101000000000010111100110
+00100000010000000111100110000100
+00100000001000000111100110001101
+00100000010000000111101001110000
+01011000100000000000000000000000
+00011111111011010111111000000000
+11100000101000100000000000000000
+00011000000000000111001000000101
+00100000010000000111111011000110
+01011000000000000000001010000000
+11100000101000100000000000000000
+00100000001000000111100100010010
+01101000000000100000101000111110
+11011010001000000000001111101000
+10011010001001101111110000000000
+00100000010000000111111110000110
+00011000000001110111111000000000
+01100000000000100000100110111010
+00011000000001111111111000000000
+11011010001000000000001111101000
+10011010001001101111110000000000
+00100000010000000111111110000110
+00011000000001110111111000000000
+11011010001000000000001111101000
+10011010001011111111111000000000
+01101000000010100000100110111010
+10011000010000001111111000000000
+01100000000000100000100110111010
+00100000011000000000000000000000
+01110000010001100110010000000000
+00100000001000000111100110100010
+01101000000000001100011001100010
+11000000100000010111100110011110
+01000111011101101100000000111101
+01011000001101100011011000110110
+00011111111011010000010000000000
+00011000010000011000010000110110
+01101000000000010000101001111110
+00011111111000100000110000000000
+00011000000000000111001000000100
+00100000010000000111100101010101
+00100000010000000111100100001011
+00100000010000000111100100010010
+01101000000000010000101010000000
+00011111111000100000110000000000
+11011000101000000000010111100110
+00011000000000000111001000000110
+00100000010000000111101001110001
+01101000000000010000101010000010
+00011111111000100000110000000000
+00011000000000000111001000000110
+00100000010000000111101001110001
+01011000100000000000000000000000
+11100000101000011000000000000000
+01101000000000001100011001100100
+11100000101000001000000000000000
+00011000000000000111111000000000
+11100000101001000000000000000000
+01011000000000000000001110001000
+11100000101000100000000000000000
+00100000010000000111100100010010
+00100000010000000111100101001110
+11011000110000000000101000111110
+11011000101000000000011100000110
+00100000010000000111111010111101
+01011000010111000101110001011100
+00011111111011010000010000000000
+00011000010000011000010001011100
+01101000000000010000101001111110
+00011111111000100000110000000000
+00011000000000000111001000000100
+00100000010000000111100101010101
+00100000010000000111100100001011
+00100000010000000111100100010010
+11011000110000000000011100100110
+11011000101000000000010111100110
+00011000000000000111001000001000
+00100000010000000111101001110001
+01011000100000000000000000000000
+00011111111011010111111000000000
+11100000101000100000000000000000
+00100000010000000111111011000101
+01011000000000000000001100000000
+11100000101000100000000000000000
+00100000010000000111100100010010
+00100000001000000111100101001110
+01011000001101100011011000110110
+00011111111011010000010000000000
+00011000010000011000010000110110
+11011000110000000000101000011110
+00011000000000000111001000000110
+00100000010000000111100101010101
+00100000010000000111100100001011
+00100000010000000111100100010010
+01101000000000010000101010001010
+00011111111000100000110000000000
+11011000101000000000010111100110
+00100000010000000111101001110000
+01101000000000010000101010001100
+00011111111000100000110000000000
+00100000010000000111101001110000
+01011000011000100111010001101100
+00011111111011010111111000000000
+00011111111000011111111001101011
+11100000101000100000000000000000
+11011000110000000000011100110011
+00011000000000000111001000000011
+00100000010000000111101001110001
+01011000100000000000000000000000
+00011111111011010111111000000000
+11100000101000100000000000000000
+00011000000000000111111000000000
+11100000101001000000000000000000
+01011000000000000000001110000000
+11100000101000100000000000000000
+00100000010000000111100100010010
+00100000010000000111100101001110
+11011000110000000000101000111110
+11011000101000000000011100000110
+00100000010000000111111010111101
+01011000010111000101110001011100
+00011111111011010000010000000000
+00011000010000011000010001011100
+11011000110000000000101000011110
+00011000000000000111001000000110
+00100000010000000111100101010101
+00100000010000000111100100001011
+00100000010000000111100100010010
+11011000110000000000011100100110
+11011000101000000000010111100110
+00011000000000000111001000001000
+00100000010000000111101001110001
+01011000100000000000000000000000
+00011111111011010111111000000000
+11100000101000100000000000000000
+00100000010000000111111011000101
+01011000000000000000001100000000
+11100000101000100000000000000000
+00100000010000000111100100010010
+00100000001000000111100101001110
+01101000000000001100011001100010
+11000000100000010111101000011110
+01000111011101110100000000111101
+01011000001101100011011000110110
+00011111111011010000010000000000
+00011000010000011000010000110110
+11011000110000000000101000011110
+00011000000000000111001000000110
+00100000010000000111100101010101
+00100000010000000111100100001011
+00100000010000000111100100010010
+11011000110000000000101000111110
+11011000101000000000010111100110
+00100000010000000111101001110000
+11011000110000000000101000101110
+00100000010000000111101001110000
+00100000001000000111101000110011
+01011000000000000000000000000000
+01100000000000100100011010001010
+00100000001000000111101000001111
+01011000000000000000000000000000
+01100000000000100100011010001010
+00100000001000000111101000100110
+01101000000000001100011001100010
+11000000100000010111101000100001
+01011000001101100011011000110110
+00011111111011010000010000000000
+00011000010000011000010000110110
+11011000110000000000101000011110
+00011000000000000111001000000110
+00100000010000000111100101010101
+00100000010000000111100100001011
+00100000010000000111100100010010
+11011000110000000000101000101110
+11011000101000000000010111100110
+00100000010000000111101001110000
+11011000110000000000101000111110
+00100000010000000111101001110000
+01011000000000000000000000000000
+11100000101001000000000000000000
+11100000101000100000000000000000
+01101000000000100100011010001010
+11100000101000100000000000000000
+00011000101000100000010000000000
+01110000000001110010011010000000
+00011000010000100000101000000000
+11011000110000000000011100110110
+00100000010000000111101001110000
+00100000010000000111100100010010
+11011000101000000000010111100110
+00011000000000000111001000000111
+00100000010000000111111011000110
+11100000101000100000000000000000
+01011000000000000000001111111000
+11100000101000100000000000000000
+00100000010000000111100100010010
+00100000010000000111100101001110
+11011000110000000000101000111110
+11011000101000000000011100000110
+00100000010000000111111010111101
+01011000010111000101110001011100
+00011111111011010000010000000000
+00011000010000011000010001011100
+11011000110000000000101000011110
+00011000000000000111001000000110
+00100000010000000111100101010101
+00100000010000000111100100001011
+00100000010000000111100100010010
+11011000110000000000011100100110
+11011000101000000000010111100110
+00011000000000000111001000001000
+00100000010000000111101001110001
+01011000100000000000000000000000
+00011111111011010111111000000000
+11100000101000100000000000000000
+00100000010000000111111011000101
+01011000000000000000001100000000
+11100000101000100000000000000000
+00100000010000000111100100010010
+00100000001000000111100101001110
+01110000000001011110001111000000
+01101000000000001000010111100011
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000001000010111100011
+11011000110000000000011010111110
+00100000010000000111011011101100
+00100000001000001111101001011110
+11011000110000000000010111100110
+11011000101000000000011001110110
+00100000001000000111011011110010
+00100000010000000111100000000011
+01101000000000001000010111100011
+00011111111000001111111111111111
+01100000000000001000010111100011
+11011000110000000000011010111110
+00100000010000000111011011101100
+00100000011000001000000000000000
+00100000001000000111100001010100
+00011000000000000111001000000100
+00011000110000001000110111111100
+11101000110000100000000000000000
+11100000101000100000000000000000
+00011000110000001000110111111000
+11000010000000000111101001110010
+00100000011000000000000000000000
+01000111011101111100000000111101
+01101000000000001100010010111110
+00100000001110100101101011110000
+00100000010000000101101011101100
+00100000010000000111010110000011
+00100000001000000111101001111101
+01101000000000001100010011000011
+11000001100000000000000000000000
+01101000000000001100010011000000
+11000001100000000000000000000000
+11011000101000000100010110110010
+00011000000000000000111000001111
+00100000010000000111011010100010
+00011000000010100111111000000000
+00011111111000110111111000000000
+11100000101000010000000000000000
+11011000101000000000011101100110
+11011000110000000100010110110010
+00100000010000000111111010111101
+11011000101000000000011001000110
+11011000110000000000100101011110
+00100000010000000111111010110011
+11011000101000000000011010000110
+00100000010000000111111011010000
+01110000000001101000011000000001
+00100000010000000111101011000111
+01110000010001001100000000000011
+00100000011000000000000000000000
+11011000101000000100010111010010
+11011000110000000000011010100110
+00100000010000000111111010110011
+01110000010001001100001100000011
+01110000010001001100000000000000
+00100000011000000000000000000000
+01101000000000001000100110111001
+11000001100000000000000000000000
+01101000000000001100010011000000
+11000001100000000000000000000000
+11011000101000000000011101100110
+11011000110000000100010110110010
+00100000010000000111111010111101
+11011000101000000000011001000110
+11011000110000000000100110111110
+00100000010000000111111010110011
+11011000101000000000011010000110
+00100000010000000111111011010000
+01110000000001101000011000000001
+00100000010000000111101011000111
+01110000010001001100000000000100
+00100000011000000000000000000000
+11011000101000000000100111111110
+11011000110000000000011010100110
+00100000010000000111111010111101
+01110000000010011011100100000011
+01110000010001001100000000000000
+00100000011000000000000000000000
+01101000000000001100010010111110
+00100000011110100000000000000000
+01101000000000001100010011000000
+00100000011110100000000000000000
+00011111111000001111111010000000
+01100000000000001100010011000000
+11000011100000111000000000000000
+01101000000000010000010111100011
+00100000001110100111101010111001
+00100000001000000111101010111111
+01000111011110000100000000111110
+00100000010000000111101011010100
+01101000000000001100010011000000
+11000000000000011111101010010011
+11000000000000100111101010101001
+00100000011000000000000000000000
+00100000010000000111101011100110
+01101000000000010000010111100011
+00011111111000001111111111111111
+01100000000000010000010111100011
+11011000110000000000011101100110
+00100000010000000111011011101100
+00100000011000001000000000000000
+00100000001000000111101100110111
+01000111011110001100000000111110
+01011000000000000000000100000000
+01100000000000010000010111100011
+01101000000000010000010111100011
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000010000010111100011
+11011000110000000000011101100110
+00100000010000000111011011101100
+00100000001000001111101011001010
+11011000110000000000011001000110
+11011000101000000000011100000110
+00100000001000000111111010110010
+11011010001000000000011101000110
+11011000101000000000100001000110
+00100000010000000111101110100011
+11011010001000000000100001000110
+11011000101000000000011111100110
+00100000010000000111110001111001
+11011010001000000000011100000110
+11011010010000000000011111100110
+11011000101000000000011010100110
+00100000010000000111101111100001
+11011010001000000000100001000110
+11011010010000000000011111100110
+11011000101000000000100000100110
+00100000010000000111101111100001
+11011010001000000000011100100110
+11011010010000000000100000100110
+11011000101000000000011011000110
+00100000001000000111101111100001
+11011010001000000000011101000110
+11011000101000000000100000100110
+00100000010000000111110001111001
+11011010001000000000100000100110
+11011000101000000000100001000110
+00100000010000000111110001111001
+11011010001000000000100100111110
+11011010010000000000100001000110
+11011000101000000000100001000110
+00100000010000000111101111100001
+11011010001000000000011100000110
+11011000101000000000100000100110
+00100000010000000111110001111001
+11011000110000000000100000100110
+11011000101000000000011111100110
+00100000010000000111111010111101
+11011010001000000000011111100110
+00100000010000000111110010000000
+11011010001000000000100000100110
+11011010010000000000011111100110
+11011000101000000000100000100110
+00100000010000000111110001111101
+11011010001000000000100000100110
+11011010010000000000100001000110
+11011000101000000000100000100110
+00100000010000000111110001111101
+11011000110000000000011100000110
+11011000101000000000011111100110
+00100000010000000111111010111101
+11011010001000000000011100100110
+11011000101000000000100001000110
+00100000010000000111110001111001
+11011010001000000000011111100110
+00100000010000000111110010000000
+11011010001000000000011111100110
+00100000010000000111110010000000
+11011010001000000000011111100110
+11011010010000000000100001000110
+11011000101000000000011111100110
+00100000010000000111101111100001
+11011010001000000000100001000110
+11011000101000000000100000000110
+00100000010000000111110001111001
+11011010001000000000100000000110
+00100000010000000111110010000000
+11011010001000000000100000000110
+00100000010000000111110010000000
+11011010001000000000100000000110
+00100000010000000111110010000000
+11011000110000000000011100100110
+11011000101000000000100001000110
+00100000010000000111111010111101
+11011010001000000000100001000110
+00100000010000000111110010000000
+11011010001000000000100001000110
+11011010010000000000011101000110
+11011000101000000000011101000110
+00100000010000000111101111100001
+11011010001000000000100000100110
+11011000101000000000100001000110
+00100000010000000111110001111001
+11011010001000000000100001000110
+11011010010000000000011111100110
+11011000101000000000100001000110
+00100000010000000111110010010110
+11011010001000000000100001000110
+11011010010000000000011111100110
+11011000101000000000011100000110
+00100000010000000111110010010110
+11011010001000000000011111100110
+11011010010000000000011100000110
+11011000101000000000100001000110
+00100000010000000111110010010110
+11011010001000000000100001000110
+11011010010000000000100000100110
+11011000101000000000100001000110
+00100000010000000111101111100001
+11011010001000000000100001000110
+11011010010000000000100000000110
+11011000101000000000011100100110
+00100000001000000111110010010110
+11011010001000000000011010000110
+11011000101000000000100001100110
+00100000010000000111110001111001
+11011010001000000000011100000110
+11011010010000000000100001100110
+11011000101000000000100000000110
+00100000010000000111101111100001
+11011010001000000000011010000110
+11011010010000000000100001100110
+11011000101000000000100001100110
+00100000010000000111101111100001
+11011010001000000000011100100110
+11011010010000000000100001100110
+11011000101000000000011111100110
+00100000010000000111101111100001
+11011010001000000000011101000110
+11011000101000000000100001100110
+00100000010000000111110001111001
+11011010001000000000011001000110
+11011010010000000000100001100110
+11011000101000000000100000100110
+00100000010000000111101111100001
+11011010001000000000011101000110
+11011010010000000000100001100110
+11011000101000000000100001100110
+00100000010000000111101111100001
+11011010001000000000011001100110
+11011010010000000000100001100110
+11011000101000000000100001000110
+00100000010000000111101111100001
+11011010010000000000100000000110
+11011010001000000000100000100110
+11011000101000000000100001100110
+00100000010000000111110010010110
+11011010001000000000100000000110
+11011010010000000000100000100110
+11011000101000000000100000000110
+00100000010000000111110001111101
+11011010010000000000011111100110
+11011010001000000000100001000110
+11011000101000000000100000100110
+00100000010000000111110010010110
+11011010001000000000011111100110
+11011010010000000000100001000110
+11011000101000000000011111100110
+00100000010000000111110001111101
+11011010001000000000011111100110
+11011010010000000000100001100110
+11011000101000000000011111100110
+00100000010000000111101111100001
+11011010001000000000011101000110
+11011010010000000000011010000110
+11011000101000000000100001000110
+00100000010000000111101111100001
+11011010001000000000100001000110
+11011010010000000000100001100110
+11011000101000000000011101000110
+00100000010000000111101111100001
+11011010001000000000100001100110
+11011000101000000000100001100110
+00100000010000000111110001111001
+11011010001000000000100001100110
+11011010010000000000100000000110
+11011000101000000000100001000110
+00100000010000000111101111100001
+11011010001000000000100001100110
+11011010010000000000011111100110
+11011000101000000000011111100110
+00100000010000000111101111100001
+11011010001000000000100000100110
+11011000101000000000011100000110
+00100000010000000111110001111001
+11011010001000000000011100000110
+11011010010000000000100001000110
+11011000101000000000011100000110
+00100000010000000111110010010110
+11011000110000000000011100000110
+11011000101000000000100001100110
+00100000010000000111111010111101
+11011010001000000000100001100110
+00100000010000000111110010000000
+11011010001000000000100001000110
+11011010010000000000100001100110
+11011000101000000000100001000110
+00100000010000000111110010010110
+11011010001000000000100001000110
+11011010010000000000100000100110
+11011000101000000000100000100110
+00100000010000000111101111100001
+11011010001000000000100000100110
+11011010010000000000011111100110
+11011000101000000000011100100110
+00100000010000000111110010010110
+11011010001000000000011100100110
+11011010010000000000100100011110
+11011000101000000000011100100110
+00011000000000000010011000000000
+01101000000000001000011100100110
+00101111111011111111111000000000
+00100000010000001111110001111011
+00011010011000100110000000000000
+11011010001000000000011100100110
+00100000010000000111110010101011
+01101000000000001000011101000101
+00101110000011111111111000000000
+01111001001000001111111000000111
+01100000000000001000011101000101
+00100000011000000000000000000000
+00011000101000100001011000000000
+11011000101000000000100000000110
+00100000010000000111111011010000
+00011000000000000111111000000000
+01100000000000100000100000100110
+01110000000010000000011000000001
+11011000101000000000011110000110
+00100000010000000111111011010010
+11011000110000000000100100011110
+11011000101000000000011111000110
+00100000010000000111111010111101
+00011010001000100000110000000000
+11011000101000000000011111100110
+00100000010000000111111010111101
+11011000110000000000011111100110
+00100000010000000111110010110101
+00100000001110100111101111011010
+11011010001000000000011111100110
+11011010010000000000100000000110
+00100000010000000111110010111000
+11011010001000000000011111000110
+11011010010000000000011110000110
+00100000010000000111110010111000
+11011010001000000000011111100110
+11011010010000000000011111000110
+00100000010000000111110010110001
+00100000001000010111101111001100
+11011010001000000000011111000110
+11011010010000000000011111100110
+00011010001000100000101000000000
+00100000010000000111110010101001
+11011010001000000000100000000110
+11011010010000000000011110000110
+00011010010000100000101000000000
+00100000010000000111110001111011
+11101010001000001000000000000000
+10011010011000001010011000000000
+11101010010000001000000000000000
+10011010011000001111111000000000
+11100010010000001000000000000000
+00100000001000000111101110110001
+11011010001000000000011111100110
+11011010010000000000011111000110
+00011010001000100000101000000000
+00100000010000000111110010101001
+11011010001000000000011110000110
+11011010010000000000100000000110
+00011010010000100000101000000000
+00100000010000000111110001111011
+11101010001000001000000000000000
+10011010011000001010011000000000
+11101010010000001000000000000000
+10011010011000001111111000000000
+11100010010000001000000000000000
+00100000001000000111101110110001
+11011010001000000000011110000110
+00011001011000100000101000000000
+00100000010000000111110000001010
+11011010001000000000100100011110
+00011001011000100010010000000000
+00011001011000100000101000000000
+00100000001000000111110010010110
+00011000101000100001011000000000
+00011000000000000111000000000000
+11011000101000000000011110000110
+00100000010000000111111011010010
+11011000101000000000101011010010
+00100000010000000111111011010010
+00011010001000100000110000000000
+01110000000010101101001000000000
+01011000000000000000000000000000
+00100000010000000111110001110011
+00011010010000100000110000000000
+00100000010000000111110001110111
+00011000000000000000111000000000
+11011000101000000000011110000110
+11011000010000000000101011010010
+00011000111000100010010000000000
+00011010010010111111111000000000
+10011000010000001010010000000000
+00011000000000000000010000000000
+00011000000000000010011000000000
+11101000101000100000000000000000
+10011000000000000010001000000000
+11101010010000100000000000000000
+00011010011000100111000000000000
+10011101111011111111111000000000
+10011010001000001111111000000000
+10011000010000001111111000000000
+11100000101000100000000000000000
+00011111111011110000010000000000
+00011010011000001010011000000001
+00101010011000011111111000001000
+00100100001000001111101111110101
+00011000010000100111111000000000
+11100000101000100000000000000000
+00011000101000001000101111100000
+00011000111000001000111000000001
+00101000111000011111111000001000
+00100100001000001111101111101111
+11011010001000000000011110000110
+00011001011000100000101000000000
+00100000001000000111110000001010
+01000111011110010100000000111110
+00011000101000100001011000000000
+00011010001000100110000000000000
+11011010010000000000011111000110
+00011010010000100000101000000000
+00100000010000000111111011001101
+11100000101001000000000000000000
+00011010001000001000110000101100
+00100000010000000111111010111001
+00100000010000000111111010110101
+00011010010000100010001000000000
+00100000010000000111110010000000
+11011010010000000000011111000110
+00011110000000100010001000000000
+00011001011000100000101000000000
+00100000010000000111110001111101
+11011010010000000000011111000110
+00011010010000100000101000000000
+00100000010000000111111011001101
+11100000101001000000000000000000
+00011110000000001000110000110000
+00100000010000000111111010111111
+00100000010000000111111011001101
+00011010010000100010001000000000
+00100000010000000111110010000000
+11011010010000000000011111000110
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000010000000111110001111101
+11011010010000000000011111000110
+00011010010000100000101000000000
+00011110000000001000110000100000
+00100000010000000111111010110101
+00100000010000000111111011001101
+11100000101001000000000000000000
+00011110000000001000110000111000
+00100000010000000111111010111001
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000010000000111110001111101
+11011010010000000000011111000110
+00011010010000100000101000000000
+00011110000000001000110000100100
+00100000010000000111111010110101
+00011110000000001000110000110100
+00100000010000000111111010110101
+00011110000000001000110000110100
+00100000010000000111111010110110
+00011110000000001000110000100000
+00100000010000000111111010110110
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000010000000111110001111101
+11011010010000000000011111000110
+00011010010000100000101000000000
+00011110000000001000110000101100
+00100000010000000111111010110101
+00100000010000000111111011001101
+11100000101001000000000000000000
+00011110000000001000110000100000
+00100000010000000111111010110110
+00011110000000001000110000101000
+00100000010000000111111010110110
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000010000000111110010010110
+11011010010000000000011111000110
+00011010010000100000101000000000
+00011110000000001000110000110000
+00100000010000000111111010111001
+00100000010000000111111010111001
+00011000000000000111111000000000
+11100000101001000000000000000000
+00011110000000001000110000100100
+00100000010000000111111010110110
+00011110000000001000110000101100
+00100000010000000111111010110110
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000010000000111110010010110
+11011010010000000000011111000110
+00011010010000100000101000000000
+00011110000000001000110000110100
+00100000010000000111111010110101
+00011110000000001000110000100000
+00100000010000000111111010110101
+00100000010000000111111011001101
+00011110000000001000110000110000
+00100000010000000111111010110110
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000010000000111110010010110
+11011010010000000000011111000110
+00011010010000100000101000000000
+00011110000000001000110000111000
+00100000010000000111111010111001
+00100000010000000111111011001101
+00011110000000001000110000100100
+00100000010000000111111010110101
+00100000010000000111111011001101
+00011110000000001000110000110100
+00100000010000000111111010110110
+00011001011000100010001000000000
+00011010001000100000101000000000
+00100000001000000111110010010110
+00011000000000000111001000100000
+11011000101000000000101011010010
+10011000101000001000101000000000
+00100000001000000111111100000001
+00011000000000000111001000001000
+00100000001000000111011110000001
+00011010001000100010010000000000
+00100000001000000111101111100001
+00011000000000000111001000001000
+00100000001000000111011100010010
+00100000010000000111110001111011
+00011000101000100010001000000000
+00100000001000000111110010000001
+00100000010000000111110010101110
+00101010011011111111111000000000
+00100000001000001111110010001010
+11011010010000000000100100011110
+00011010001000100010011000000000
+00011010001000001010001111100000
+00100000010000000111110010110001
+00100100011000010000000000000000
+00011010011000100010001000000000
+00100000001000000111110010010010
+00100000010000000111110010010010
+00011010001000100010011000000000
+00011010001000001010001111100000
+11011010010000000000100100011110
+00100000010000000111110010110001
+00100100011000010000000000000000
+00011010011000100010001000000000
+00100000001000000111110010010010
+00011010001000001010001111100000
+11011010010000000000100100011110
+00011010001000100000101000000000
+00100000001000000111110010101001
+00100000010000000111110010101001
+00100000001000001111110010100000
+00011000101000001010001111100000
+11011010010000000000100100011110
+00100000010000000111110010110001
+00100100011000010000000000000000
+11011010010000000000100100011110
+00011000101000001010001111100000
+00011010001000100000101000000000
+00100000001000000111110010101001
+00011000101000001010001111100000
+11011010010000000000100100011110
+00011010001000100000101000000000
+00100000010000000111110001111011
+00100000011000001000000000000000
+00011000101000001010001111100000
+11011010010000000000100100011110
+00011010001000100000101000000000
+00100000001000000111110001111011
+00011000000000000111001000001000
+00100000001000000111011100100000
+00011000000000000111001000001000
+00011010001000001010001000011100
+00100000001000000111011100101111
+00011000000000000111001000001000
+00011000000000000010011000000000
+00100000001000000111011100111101
+00011000000000000111001000001000
+00011010001000001010001000011100
+00011010010000001010010000011100
+00100000001000000111011100000111
+11101000110001000000000000000000
+00100100011110100000000000000000
+00100000001000000111011011110101
+00011010001000100110000000000000
+00011110000000100010001000000000
+11101010001000001000000000000000
+00101111111011111111111000000000
+00100000011000001000000000000000
+00100000010000000111110010101011
+11101010010000001000000000000000
+00101111111011000000000000000000
+00100000001000001111110011001000
+11011010001000000000100100011110
+00011010010000100000101000000000
+00100000010000000111110001111011
+11101010010000001000000000000000
+10011010011000001111111000000000
+11100010010000001000000000000000
+00011010010000001010010111100000
+00011010010000001010001000100000
+00011000000000000111001000001001
+00100000010000000111011100101111
+00100000001000000111110010111001
+00100000010000000010110001100101
+00100000011101011000000000000000
+00100000010000000111110011010011
+00100000010000000111110101110101
+00100000001000000111110100001000
+00100000010000000111110100101001
+00100000001000000111110101100100
+01101000000000001100011010000110
+11000001011111111000000000000000
+10011000000000000000010000000000
+00100000010000000110100000001110
+01101000000010001100011010000110
+00100000010000000110100000100101
+00100000000000000000000001100100
+01101000000010001100011010000110
+00100000010000000110011111111011
+00100000001000000111110011011101
+01000111011110011100000000111110
+01101000000000001100011010000110
+11000001011111111000000000000000
+00011111111000100000010000000000
+00100000010000000110100000011101
+00100100001000001111110011101111
+00100000010000000111110011111001
+01101000000000010100011010000010
+01111001001000000111111000001100
+01100000000000010100011010000010
+01101000000000001100011001111001
+11000001000000000000000000000000
+01110000010001100111100100000000
+01101000000000001100011010000101
+01100000000000001100011001111000
+00100000010000000111110100000000
+01110000000010101001100100101100
+00100000001000000111110110000110
+01101000000000010100011010000010
+01111001001111111111111000001100
+01100000000000010100011010000010
+01101000000000001100011001111001
+11000001000000001000000000000000
+01110000010001100111100100000001
+01110000010001100111100000000000
+00100000010000000111110100000010
+01110000000010101001100100101101
+00100000001000000111110110000110
+01101000000000001100011001111000
+00100000011110100000000000000000
+00011111111000001111111111111111
+01100000000000001100011001111000
+00100100011110100000000000000000
+01110000000010101001100100010000
+00100000001000000111110110000110
+11011000111000000000000000000111
+00100000001000000010110000110010
+11011000111000000000000000000111
+00100000001000000010110000110110
+01101000000000010100001000011011
+00011010001011111010010000001011
+10011010010000001010010000000000
+00100000011000000000000000000000
+01101000000000001100001000011010
+00100000011110100000000000000000
+00011111111000100111001000000000
+01101000000000010100001000011011
+00011111111000100010010000000000
+00011010010000001010011000000010
+11101010011010001000000000000000
+00100000010000000110100000001110
+00100000010000000111110100110010
+00011010010000001010010000001011
+11000010000000000111110100001101
+00100000011000000000000000000000
+00100000010000000111110100000100
+01011000000000000000000000000010
+11100010010000001000000000000000
+00100000010000000111110101011110
+00100000001000000111110100110101
+00100000010000000111110100000100
+01011000000000000000000000000011
+11100010010000001000000000000000
+00100000010000000111110101011110
+00100000001000000111110100110010
+00100000010000000111110100000100
+01011000000000000000000000000001
+11100010010000001000000000000000
+01011000000000000000000011111111
+11100000101000001000000000000000
+00100000001000000111110100110010
+00100000010000000111110100000100
+11011111001000000000000000001011
+00011010011000100000110000000000
+00011010010000100000101000000000
+00100000001000000111111011110100
+01101000000000001100001000011010
+00100000011110100000000000000000
+11011010001000000000000000000000
+00100000010000000111110100111000
+00011010001000001010001000000001
+01101000000000001100001000011010
+10011010001001100111110000000000
+00100000011000101000000000000000
+00100000001000000111110100101100
+00011010010000001010011000000010
+11101010011010001000000000000000
+00100000001000000110100000100101
+00011010010000001010011000000010
+11101010011010001000000000000000
+00100000001000000110100000101001
+00011010001000001000111000001011
+00100000010000000111111100010110
+00100100011110100000000000000000
+00100000010000000111110100000100
+11101010010000001000000000000000
+11000000000000010111110100110101
+11000000000000011111110100110010
+11000000000000000111110100110010
+11000000000000101111110101001100
+00100000010000000111110100110101
+00011010010000001010011000000111
+00100000010000000111111001111100
+11101010011000010000000000000000
+00100000010000000111111110011100
+00100000010000000111111010001100
+01011000000000000000000000000101
+11100010010000001000000000000000
+00011010010000001010011000000011
+11101010011000010000000000000000
+00100000001000000111110101011100
+00100000010000000111110100110010
+00011010010000001010011000001001
+00100000010000000111111001111100
+11101010011000010000000000000000
+00100000010000000111111110011100
+00100000010000000111111010001100
+00011010010000001010011000000001
+11101010011000001000000000000000
+11000000011111111111110101011000
+00011111111000001111111111111111
+11100010011000001000000000000000
+00100000001110100111110100011001
+01011000000000000000000000000100
+11100010010000001000000000000000
+00011010010000001010011000000101
+11101010011000010000000000000000
+00011010001000001000111000001011
+00100000001000000111111100001000
+01011000000000000000000000000000
+00100000001000000111110101011100
+01011000000000000001000000000000
+00011111111100000111111000000000
+10011010010000001010010000000000
+00100000011000000000000000000000
+01000111011110100100000000111110
+11011010001000000000000000000000
+01101000000010100100011001111010
+00011100010000100010010000000000
+00011010010000100111111000000000
+10011000010001100111110000000000
+00100100010000010111110101100000
+00011010010000100111111000000000
+00011000010000001000010010100000
+00011000010000001000010010100000
+10011000010001100111110000000000
+00100100001000010111110101111000
+00011010001000001010001000000001
+00011010001000010111111000001111
+00100100001110100111110101101011
+11011010001000000000000000000000
+00100000010000000111110101111111
+00011100010000100111111000000000
+01100000000000100100011001111010
+00100000011000000000000000000000
+01000111011110101100000000111110
+00011010001000100111111000000000
+00100000011110100000000000000000
+00011000010000001000010101100000
+00011000010000001000010101100000
+01111001001111111000010000011100
+01100000000010100100011001111010
+00100000001000000011001101011111
+01110000010001100110011000000001
+01101000000000001100011001100111
+00100100001110100111110110000001
+00100000011000000000000000000000
+01110000010001100110011000000000
+00100000011000000000000000000000
+01000111011110110100000000111110
+00100000010000000111110110000000
+00011010001000100111111000000000
+01100000000000100000101010010001
+11011010001000000100011001101000
+00100000010000000111111110111000
+01101000000000100000101010010001
+00011111111000100010001000000000
+00100000001000000111110110000100
+01000111011110111100000000111110
+00100000010000000111110110000000
+00011010001000100111111000000000
+01100000000000100000101010010001
+11011010001000000100011001110000
+00100000010000000111111110111000
+01101000000000100000101010010001
+00011111111000100010001000000000
+00100000001000000111110110000100
+01011000000000000000000000000000
+01100000000001000100011001110000
+01100000000001000100011001101000
+00100000011000000000000000000000
+01000111011111000100000000111111
+01101000000000001100000111001110
+00100100011110100000000000000000
+11011010001000000100011001110000
+00100000010000000111111111010000
+00100000011110100000000000000000
+01110000000010101001000000000000
+00100000010000000111110110100111
+01101000000000001000101010010000
+00100000001110100111110110011100
+00100000011000000000000000000000
+00100000010000000111110110000000
+11011010001000000100011001110000
+00100000010000000111111111000100
+00011111111000100000010000000000
+00100000010000000111110110000100
+01000111011111001100000000111111
+00011000010000100111111000000000
+00100000011110100000000000000000
+11000000000000001111110111011101
+11000000000000010111110111100010
+11000000000000011111110111101000
+11000000000000111111110111101101
+11000000000001000111110111101110
+11000000000001001111110111101111
+11000000000001011111110111110010
+11000000000001100111110111110011
+11000000000001101111110111110100
+11000000000001110111110111111010
+11000000000001111111110111111111
+11000000000010000111111000000101
+11000000000010011111111000001111
+11000000000010100111111000010001
+11000000000010101111111000010011
+11000000000010110111111000010101
+11000000000010111111111000011000
+11000000000011000111111000011010
+11000000000011001111111000011101
+11000000000011011111111000100101
+11000000000011110111111000101111
+01100000000000001000101010011001
+01000111011111010100000000111111
+00100000010000000110001010111100
+00100100001110100111110111011011
+01101000000000001000101010011001
+11000101100001001111110111010110
+11000000000000100111110111101010
+11000000000000101100110100010111
+11000000000000110100110100100110
+11000000000001010111110111110000
+11000000000010001111111000001010
+11000000000010010111111000001110
+11000000000011101111111000100110
+11000000000011111110011111001100
+11000000000100000110011111010000
+11000000000100001111111000110001
+11000000000100101110011100001011
+00100000011000000000000000000000
+01100000000000001000101010011001
+00100000010000000010001001010010
+00100000001000101111110111011011
+00100000010000000010001001011010
+00100100011000101000000000000000
+01110000000010101001000000000001
+00100000001000000111110110001111
+01101000000000010100011010000010
+01111001001000000111111000000110
+01100000000000010100011010000010
+01110000010000001001001100000011
+00100000011000000000000000000000
+01110000010001101000000000000000
+01110000010000001001001100000000
+01101000000000010100011010000010
+01111001001111111111111000000110
+01100000000000010100011010000010
+00100000011000000000000000000000
+01110000010000011100111000000101
+00100000011000000000000000000000
+01110000000000000111110000000111
+01110000000001001100101000010011
+00100000011000000000000000000000
+00100000011000000000000000000000
+00100000011000000000000000000000
+00100000011000000000000000000000
+01110000000001001101010000000010
+00100000001000000100110100001010
+00100000011000000000000000000000
+00100000011000000000000000000000
+01110000010000110110111000000001
+01110000010001001000010000000000
+01101000000000010100011010000010
+01111001001000000111111000001011
+01100000000000010100011010000010
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001111111111111000001011
+01100000000000010100011010000010
+01110000010000110110111000000000
+00100000011000000000000000000000
+01110000010000110110111000000001
+01110000010001001000010000000001
+01101000000000010100011010000010
+01111001001000000111111000001011
+01100000000000010100011010000010
+00100000011000000000000000000000
+01101000000000010100011010000010
+01111001001111111111111000001011
+01100000000000010100011010000010
+01110000010000110110111000000000
+00100000011000000000000000000000
+01011000000000000000000000010100
+01100000000000010000010001101101
+01100000000000010100010010111010
+00100000001000000101110010010010
+00100000001000000101101010111111
+11011010001000000000000000000000
+00100000001000000111110100011001
+11011010001000000000000000000000
+00100000001000000111110100010100
+11011010001000000000000000000000
+00100000001000000111110100011110
+01110000010000110110100100000001
+01110000010000011100111000011011
+00100000011000000000000000000000
+01110000010000110110100100000001
+00100000011000000000000000000000
+01110000010000110110100100000000
+01110000010000011100111000000000
+00100000011000000000000000000000
+01101000000000010100000111101011
+00100000010000000111111110011100
+01101000000000001100011010000110
+11000000011111111111111000100011
+00011111111000100000010000000000
+00100000010000000110011111111011
+00100000010000000111110110011000
+00100000001000000010101100011111
+00100000001000000101101100000010
+01110000000000000111110000110100
+01111001001000000000000000000011
+00100100011101001000000000000000
+01110000010001010101101100000000
+01110000000000000111110000010011
+01101000000000001000000101101101
+01111001001111111111111000000010
+01100000000000001000000101101101
+00100000011000000000000000000000
+00011000000000000000111000000011
+00100000001000000111111100000111
+00100000010000000110001011111000
+01110000000000000111110101000001
+00100000001000000101111110011101
+01101000000000001100011010000010
+11000100000001100000000000000000
+11000100000000111000000000000000
+00100000001000000111111000101111
+01101000000000010100001000011000
+00011111111000001000101000000010
+01011000000000000000000000000000
+11100000101000011000000000000000
+00100000011000000000000000000000
+00100000010000000111111111101001
+00100000010000000111111001101001
+00100000011110100000000000000000
+01101000000000010100001000011000
+00011111111000001010010000000010
+11101010010010001000000000000000
+00011000010000001000010000000001
+11100010010010001000000000000000
+11101111111010001000000000000000
+00011000010000100111001000000000
+00011111111000001010010000000100
+11101010010000001000000000000000
+10011000010011111111111000000000
+10011000110000001000101000000000
+00011010001000100000110000000000
+00100000010000000111111100000001
+00100000010000000111111001101101
+00011111111000001111111111111111
+11101010010010001000000000000000
+00011000010000001000010000000001
+10011000010000010000010000000000
+11100010010010001000000000000000
+00100000001000000111111111100111
+00100000010000000111111111101001
+00100000010000000111111001100101
+00100000011110100000000000000000
+01101000000000010100001000011000
+00011111111000001010010000000010
+11101010010010001000000000000000
+00011000010000001000010111111111
+11100010010010001000000000000000
+11101111111010001000000000000000
+00011000010000100111001000000000
+00011111111000001010010000000011
+11101010010000001000000000000000
+10011000010011111111111000000000
+10011000110000001000110000000000
+00011000110000001000110000000001
+00011010001000100000101000000000
+00100000001000000111111001001100
+01101000000000010100001000011000
+00011111111000001000110000000010
+11101000110000001000000000000000
+00100000011000000000000000000000
+00100000010000000111111001101101
+11101000110010001000000000000000
+10011000010001100111111000000000
+00100000011000000000000000000000
+01101000000000010100001000011000
+00011111111000001000110000000001
+11101000110000001000000000000000
+00100000011000000000000000000000
+00011111001001100111110000000000
+00100000011000101000000000000000
+00011111111000110111111000000000
+11000010000000000111111001110011
+00100000011000000000000000000000
+00011000000000000111111000000001
+00011111001001100111110000000000
+00100000011000101000000000000000
+00011111111000111111111000000000
+11000010000000000111111001111001
+00100000011000000000000000000000
+00011000101000100111111000000000
+01100000000000010000101010111011
+01100000000011000000101010100010
+00011001011000100111111000000000
+01100000000000100000101010101010
+00100000010000000111111010000101
+00011000110000100111111000000000
+01100000000000010000101010111001
+00100000011000000000000000000000
+00011010001000100111111000000000
+01100000000000100000101010101110
+00011010010000100111111000000000
+01100000000000100000101010110010
+00011010011000100111111000000000
+01100000000000011000101010110110
+00100000011000000000000000000000
+01101000000011000000101010100010
+01101000000000100000101010101010
+10011000000000000001011000000000
+00100000010000000111111010010101
+01101000000000010000101010111011
+10011000000000000000101000000000
+01101000000000010000101010111001
+10011000000000000000110000000000
+00100000011000000000000000000000
+01101000000000100000101010101110
+10011000000000000010001000000000
+01101000000000100000101010110010
+10011000000000000010010000000000
+01101000000000011000101010110110
+10011000000000000010011000000000
+00100000011000000000000000000000
+01101000000000010000101010111011
+00011111111000100000101000000000
+00100000011000000000000000000000
+01101000000000010000101010111001
+00011111111000100000110000000000
+00100000011000000000000000000000
+00011000101000100111111000000000
+01100000000000010000101010111011
+00100000011000000000000000000000
+00011000110000100111111000000000
+01100000000000010000101010111001
+00100000011000000000000000000000
+00011000101000100111111000000000
+01100000000000010000101010010111
+00011000110000100111111000000000
+01100000000000010000101010010101
+00100000011000000000000000000000
+01101000000000010000101010010111
+00011111111000100000101000000000
+01101000000000010000101010010101
+00011111111000100000110000000000
+00100000011000000000000000000000
+00100000010000000111111010111101
+00100000010000000111111010111101
+00100000001000000111111010111101
+00100000010000000111111010111001
+11101000110000100000000000000000
+11100000101000100000000000000000
+00100000011000000000000000000000
+11101000110001000000000000000000
+11100000101001000000000000000000
+00100000011000000000000000000000
+00100000010000000111111010111111
+00100000010000000111111010111001
+00100000010000000111111010111001
+00100000010000000111111010111001
+00100000001000000111111010111001
+11011111001000000000000000001010
+00100000000000000010111011100000
+11000010000000000111111011000010
+00100000011000000000000000000000
+00011000000000000111001000000011
+00011000000000000111111000000000
+11100000101001000000000000000000
+11000010000000000111111011000111
+00100000011000000000000000000000
+00011000000000000111111000000000
+11100000101001000000000000000000
+00100000011000000000000000000000
+00011000000000000111111000000000
+11100000101000100000000000000000
+00100000011000000000000000000000
+00011000000000000111001000000100
+00100000001000000111111011000110
+00011000000000000111001000001000
+00100000001000000111111011000110
+00011111001000100111111000000000
+00100000011110100000000000000000
+01011000000000000000000000000000
+11100000101000001000000000000000
+11000010000000000111111011010111
+00100000011000000000000000000000
+11011111001000000000000000100000
+11011000101000000000101011000010
+00100000001000000111111011010100
+11101010011000100000000000000000
+11101010001010100000000000000000
+10011000010000101111111000000000
+11100000101000100000000000000000
+00011010001000001010001000000100
+00011010011000001010011000000100
+11000010000000000111111011011101
+00100000011000000000000000000000
+01000111011111011100000000111111
+00011111001000100111111000000000
+00011111111001100111110000000001
+00100000011000010000000000000000
+10011010001000001010010000000000
+00011010010000001010010111111111
+00011111001000110111001000000000
+11101010001010001000000000000000
+11101010010000001000000000000000
+11100010001000001000000000000000
+11100010010010001000000000000000
+00011010010000001010010111111111
+00011010001000001010001000000001
+11000010000000000111111011101100
+00100000011000000000000000000000
+00011111001000100111111000000000
+00100000011110100000000000000000
+00011111001000001111001111111000
+00100000010000010111111010111001
+00100000011000101000000000000000
+00100000001000010111111011110110
+00011111001000001111001000001000
+00011111001000001111001111111100
+00100000010000010111111010110110
+00100000011000101000000000000000
+00100000001000010111111011111011
+00011111001000001111001000000100
+00100000001000000111111100000001
+00011111001000100111111000000000
+00100000011110100000000000000000
+11101000110000001000000000000000
+11100000101000001000000000000000
+11000010000000000111111100000011
+00100000011000000000000000000000
+01011000000000000000000000000000
+00011100010000110000010000000000
+01100000000010100100000010010100
+11011000101000000100000110011101
+10011000000000000000010000000000
+00011000111000111111111000000000
+10011000101000001000101000000000
+11100000101010010000000000000000
+01000111011111100100000000111111
+00100000011000000000000000000000
+11011001011000000000100000000000
+00011001011100000001011000000000
+10011001011000001111111000000000
+00100000011000000000000000000000
+11011000111000000000000000000000
+01000111011111101100000000111111
+01101000000010100100000010010100
+00011100010000110111111000000000
+01100000000000100100000010010100
+10011000010001100111110000000000
+00100100010000010111111100010001
+10011000010001100001011000000000
+00011001011000100000010000000000
+11011000110000000100000110011101
+00011000110000100000101000000000
+11011111001000000000000000010000
+11101000110000010000000000000000
+10011000010001100111111000000000
+00100000001000010111111100100101
+00011000000000000111111000000000
+11100000101000010000000000000000
+11000010000000000111111100100001
+11011000110000000100000110011101
+00011000111000111111111000000000
+10011000110000001000110000000000
+11101000110000010000000000000000
+00100000011000000000000000000000
+10011000010000001000010000000000
+00011000010000100111001000000000
+01011000000000000000111010100110
+10011111001001100111111000000000
+00100000011000010000000000000000
+00011111111001100111111000000000
+00011000010100010000010000000000
+00011000010000001000010000000001
+00011000010100000000010000000000
+10011000010000011000010000000000
+00100000011000000000000000000000
+00100000010000000111111100111001
+00100000001000000111111101000011
+01111000010101000111110000000000
+10011000010001100111111000000000
+00100000001000010111111100111110
+01111000001101000111110000000000
+00011111111001100111111000000000
+11000100000001111000000000000000
+11011000010111110000111010100110
+10011000010000001111111000000000
+01111001001111111111111001000000
+00100000011000000000000000000000
+10011000000000000000110000000000
+00011111111100010111111000000000
+11011000010000000000111010100110
+10011000010011111111111000000000
+10011000110000001111111000000000
+00100000011000000000000000000000
+00011111111011010111111000000000
+00011111111100100111111000000000
+01101000000010011100000101101111
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111000010000000000
+00100000011000000000000000000000
+11011000010000000000111010100110
+10011000010001101111110000000000
+00100000010000000111111110000110
+00011000000001111111111000000000
+00011111111100000111111000000000
+00011000000001110000010000000000
+10011000010000011000010000000000
+00100000011000000000000000000000
+11011000010000000000000000000000
+00011000010000100010011000000000
+11101000011000001000000000000000
+00100000010000000111111101100100
+00011010011000100000010000000000
+00100000010000000111111110010101
+11011010010000000000000000001010
+10011010010011111111111000000000
+10011000010000001111111000000000
+00011111111000100000010000000000
+11000010000000000111111101011001
+00100000011000000000000000000000
+11011000010000000000000000111010
+10011000010001100111110000000000
+00100100001000010111111101101101
+11011000010000000000000001100001
+10011000010001100111110000000000
+00100000001000010111111101110000
+11011000010000000000000000110111
+10011000010001100111111000000000
+00100000011000000000000000000000
+11011000010000000000000000110000
+10011000010001100111111000000000
+00100000011000000000000000000000
+11011000010000000000000001010111
+10011000010001100111111000000000
+00100000011000000000000000000000
+00011000010000100110000000000000
+01011000000000000000000111111111
+00011000000000000010010000000000
+00011111111010010010001000000000
+00011010001000110010001000000000
+10011010001000101010001000000000
+00101010001011111111111000000000
+01111001001000001111111000001001
+00011000010000110000010000000000
+00101111111011111111111000000000
+01111001001000001000010000000111
+00011111111000110111111000000000
+00011010010000001010010000000001
+00101010010000000000111000000000
+00100100001000001111111101110110
+11100000101010001000000000000000
+11000010000000000111111101110110
+00011110000000100000010000000000
+00100000011000000000000000000000
+00100000011110101000000000000000
+00100000001000000111111110000110
+11101010001000001000000000000000
+11101010010010001000000000000000
+10011000010001100111110000000000
+00100100011000101000000000000000
+00011010001000001010001000000001
+00011010010000001010010000000001
+11000010000000000111111110001000
+00011000000000000111110000000000
+00100000011000000000000000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+00011000010000100111111000000000
+00100000011000000000000000000000
+10011000010000001111111000000000
+10011000010001100000010000000000
+10011000010001100111111000000000
+00100000011000000000000000000000
+11011111001000000000001000000000
+11011000101000000100000000000000
+00100000001000000111111011000110
+00100000011110100000000000000000
+00011111111000100111101000000000
+01101000000100010000000100001110
+00100100001110100111111110011110
+00100000011000000000000000000000
+01110000100000100000001100000001
+00100000011000000000000000000000
+01100000000100010000001000000101
+01101000000100001000001000000011
+01111001001000000111111000000100
+01100000000100001000001000000011
+00100000011000000000000000000000
+01100000000100010000001000000111
+01101000000100001000001000000011
+01111001001000000111111000000110
+01100000000100001000001000000011
+00100000011000000000000000000000
+01100000000100010000001000000101
+01110000100000100000001100110000
+00100000011000000000000000000000
+01101000000100001000000001000011
+01111001001111111111111000000100
+01100000000100001000000001000011
+00100000011000000000000000000000
+01101000000100010000000100001110
+11011000010000000000001000000000
+10011000010001100111110000000000
+00100000011000000000000000000000
+01000111011111110100000000111111
+11101010001011000000000000000000
+00011000010000010111111011111111
+00100100001110100111111110111110
+00011000010011001111111000000000
+11100010001001000000000000000000
+00011010001000001010001000000111
+11101010001000001000000000000000
+00100100001110100010101010001100
+01101000000000001000101010011001
+11100010001000001000000000000000
+00100000011000000000000000000000
+01000111011111111100000000111111
+11011111001000000000000000001000
+11101010001001000000000000000000
+00100000011110100000000000000000
+11101010001000001000000000000000
+00100100001110100111111111001101
+00011010001000001010001000000001
+11000010000000000111111111001000
+00100000001000000010101010001100
+11011000010000000000000000000000
+11100010001010001000000000000000
+00100000011000000000000000000000
+11101010001001000000000000000000
+00100000011000000000000000000000
+11101010001000001000000000000000
+00100000011000000000000000000000
+11101010001000010000000000000000
+00100000011000000000000000000000
+11011000010000000000000000000000
+01101000000000001000000000000110
+11000010000000000111111111010111
+00011000010000001000010000000001
+11000010000000000111111111010111
+00011000010000100111111000000000
+00100000011000000000000000000000
+10011000010001100111110000000000
+00100100011000010000000000000000
+00011000010000100111111000000000
+00100000011000000000000000000000
+00011000000000000111110111111111
+00100000011000000000000000000000
+00011000000000000111110000000001
+00100000011000000000000000000000
+00011000000000000111110000000000
+00100000011000000000000000000000
+01111000001101000111110000000000
+00100000011000000000000000000000
+01111000010101000111110000000000
+00100000011000000000000000000000
+01111000001101100111110000000000
+00100000011000000000000000000000
+01111000010101100111110000000000
+00100000011000000000000000000000
+01011000000000000000000000000001
+00100000011000000000000000000000
+01011000000000000000000000000000
+00100000011000000000000000000000
+00011111001000100111111000000000
+00100000011110100000000000000000
+00011000110000100111111000000000
+10011111001000001111111000000000
+00011111111000001111111111111111
+00011111111000100000110000000000
+11101000110000001000000000000000
+00011000110000001000110111111110
+11100000101000001000000000000000
+11000010000000000111111111111001
+00100000011000000000000000000000
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/eeprom.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/eeprom.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/eeprom.dat	(working copy)
@@ -0,0 +1,5422 @@
+00
+02
+aa
+55
+a2
+12
+c2
+84
+00
+12
+c0
+00
+00
+27
+c0
+00
+80
+2a
+c0
+01
+00
+32
+c0
+42
+84
+73
+c0
+44
+84
+44
+c0
+50
+80
+3b
+c0
+58
+80
+40
+c0
+59
+00
+4a
+c0
+62
+02
+ce
+c0
+64
+83
+2d
+c0
+65
+03
+31
+c0
+71
+83
+c2
+c0
+73
+03
+ce
+c0
+75
+03
+d7
+c0
+75
+83
+dc
+c0
+76
+03
+ed
+20
+20
+2a
+8e
+c0
+1f
+80
+15
+c0
+46
+03
+f1
+20
+20
+2a
+8e
+70
+89
+0f
+36
+70
+89
+0b
+5f
+78
+3b
+7c
+00
+70
+89
+14
+07
+68
+00
+c1
+e0
+20
+7a
+00
+00
+70
+89
+0a
+b8
+20
+60
+00
+00
+1f
+e2
+22
+00
+68
+08
+cc
+70
+58
+00
+4c
+77
+98
+40
+8a
+00
+1a
+22
+7e
+00
+e0
+a0
+80
+00
+18
+40
+84
+01
+18
+41
+04
+07
+60
+08
+cc
+70
+20
+60
+00
+00
+68
+10
+81
+3b
+60
+00
+cb
+26
+20
+20
+20
+02
+d8
+a0
+09
+ae
+df
+20
+00
+0c
+20
+40
+7e
+d4
+20
+40
+6a
+03
+20
+40
+5c
+f6
+24
+55
+ac
+65
+20
+40
+7c
+cd
+20
+20
+20
+0c
+20
+55
+b2
+e3
+20
+40
+75
+6a
+20
+55
+ab
+41
+20
+40
+76
+dc
+68
+00
+c6
+5a
+20
+3a
+20
+12
+68
+00
+c5
+b1
+20
+3a
+00
+35
+20
+20
+20
+12
+58
+00
+0a
+06
+60
+01
+c5
+10
+58
+00
+1d
+87
+60
+01
+45
+13
+20
+20
+2a
+a2
+c6
+13
+00
+00
+68
+00
+c7
+9c
+20
+3a
+7f
+ef
+68
+00
+c7
+c4
+c0
+00
+ff
+ef
+68
+01
+42
+48
+24
+3a
+7f
+ef
+68
+00
+c8
+06
+24
+3a
+7f
+ef
+20
+20
+7f
+f1
+c6
+93
+00
+00
+68
+00
+cc
+f5
+c0
+00
+80
+5b
+20
+40
+00
+e4
+24
+34
+00
+70
+20
+40
+00
+cb
+20
+40
+01
+06
+68
+00
+cb
+c5
+c1
+ff
+80
+00
+20
+40
+04
+17
+20
+40
+00
+76
+24
+74
+00
+00
+20
+40
+02
+bf
+58
+00
+ec
+54
+20
+40
+7f
+49
+60
+0a
+41
+5b
+20
+20
+2b
+2a
+20
+40
+02
+8b
+24
+74
+00
+00
+20
+40
+00
+67
+20
+20
+00
+4d
+70
+4c
+f5
+00
+70
+4c
+f6
+00
+70
+4b
+f0
+00
+68
+00
+cb
+db
+60
+00
+cb
+da
+20
+60
+00
+00
+68
+00
+cb
+dc
+20
+20
+00
+63
+68
+00
+cb
+f0
+1f
+e0
+fe
+01
+60
+00
+cb
+f0
+c0
+02
+00
+65
+c0
+02
+80
+61
+20
+60
+00
+00
+70
+4c
+f5
+01
+70
+4c
+f6
+00
+20
+60
+00
+00
+68
+00
+cb
+e1
+20
+5a
+00
+7f
+20
+40
+00
+76
+24
+74
+00
+00
+68
+01
+cb
+e4
+20
+20
+00
+58
+78
+34
+7c
+00
+20
+40
+2a
+fa
+68
+01
+c1
+6f
+20
+3a
+7f
+e9
+68
+00
+c0
+91
+20
+3a
+7f
+e9
+68
+00
+cc
+f5
+c0
+00
+ff
+e9
+20
+20
+02
+c2
+70
+4b
+e1
+01
+70
+4c
+ea
+00
+20
+40
+00
+93
+60
+00
+cb
+51
+58
+00
+00
+00
+60
+03
+cb
+52
+68
+02
+4b
+ec
+60
+02
+4b
+59
+70
+4b
+b5
+0c
+68
+00
+cb
+b6
+79
+20
+7e
+03
+60
+00
+cb
+b6
+20
+40
+00
+e7
+20
+20
+00
+50
+20
+40
+68
+a8
+68
+02
+40
+a0
+60
+02
+4b
+ec
+20
+60
+00
+00
+70
+4c
+eb
+01
+70
+4c
+ed
+00
+68
+00
+cb
+b6
+1f
+e1
+7e
+07
+60
+00
+cb
+b6
+20
+60
+00
+00
+68
+00
+cb
+b6
+79
+20
+7e
+04
+60
+00
+cb
+b6
+60
+00
+cb
+71
+20
+60
+00
+00
+68
+00
+cb
+b6
+79
+3f
+fe
+04
+60
+00
+cb
+b6
+20
+60
+00
+00
+20
+40
+04
+0d
+68
+00
+cc
+ec
+c0
+00
+80
+a5
+c0
+01
+00
+a9
+20
+60
+00
+00
+70
+4c
+ed
+02
+70
+4c
+e9
+00
+70
+4c
+eb
+00
+20
+20
+00
+93
+70
+4c
+ea
+00
+20
+20
+00
+a6
+68
+01
+4b
+bb
+1f
+e0
+fe
+01
+60
+01
+4b
+bb
+c2
+83
+01
+49
+68
+00
+cc
+ea
+c0
+00
+80
+b4
+70
+4c
+ea
+01
+68
+00
+cc
+ea
+c0
+80
+80
+93
+68
+00
+cc
+e8
+1f
+e0
+fe
+01
+60
+00
+cc
+e8
+c0
+02
+00
+bb
+20
+40
+02
+03
+70
+4b
+fa
+02
+20
+20
+01
+06
+20
+40
+04
+0d
+70
+4c
+e8
+00
+20
+20
+00
+93
+70
+4c
+ed
+02
+70
+4c
+eb
+01
+70
+4c
+ea
+00
+20
+20
+00
+93
+68
+00
+cc
+ec
+c0
+01
+80
+bf
+68
+00
+cb
+b6
+2f
+ec
+00
+04
+20
+20
+80
+91
+68
+00
+cc
+ec
+c0
+00
+80
+be
+c0
+01
+00
+bf
+20
+60
+00
+00
+68
+00
+cb
+c5
+c1
+ff
+80
+00
+20
+40
+00
+d0
+24
+56
+00
+d8
+20
+60
+00
+00
+78
+56
+7c
+00
+68
+00
+cc
+eb
+c1
+80
+80
+00
+68
+00
+cc
+ed
+c1
+80
+00
+00
+70
+4c
+ec
+01
+70
+4b
+fa
+04
+20
+20
+7f
+eb
+68
+00
+cc
+ed
+20
+3a
+00
+df
+1f
+e0
+ff
+ff
+60
+00
+cc
+ed
+70
+4c
+ec
+02
+70
+4b
+fa
+04
+20
+20
+02
+03
+70
+4c
+ec
+03
+68
+00
+cc
+ea
+24
+3a
+00
+b2
+70
+4b
+fa
+02
+20
+20
+02
+03
+68
+00
+cb
+c5
+c0
+ff
+81
+5d
+20
+40
+00
+ea
+20
+40
+01
+f1
+70
+4b
+ba
+01
+20
+60
+00
+00
+68
+01
+4c
+e6
+20
+40
+7f
+9c
+20
+34
+00
+f0
+68
+03
+cb
+52
+20
+7a
+00
+00
+20
+20
+7f
+e7
+70
+4b
+e1
+00
+1a
+20
+fe
+01
+60
+00
+cb
+b5
+20
+40
+00
+93
+60
+00
+cb
+51
+e8
+a8
+80
+00
+ea
+40
+80
+00
+98
+41
+fe
+00
+e0
+a0
+80
+00
+1a
+40
+a4
+01
+ea
+42
+00
+00
+e0
+a2
+00
+00
+1a
+40
+a4
+04
+d8
+a0
+4b
+57
+df
+20
+00
+02
+ea
+40
+80
+00
+e8
+a8
+80
+00
+98
+40
+fe
+00
+e0
+a0
+80
+00
+1a
+40
+a4
+01
+c2
+00
+00
+ff
+20
+60
+00
+00
+70
+4b
+be
+00
+d9
+60
+0d
+00
+34
+73
+02
+00
+20
+40
+01
+22
+68
+00
+cb
+f1
+c1
+00
+80
+00
+24
+2c
+01
+31
+24
+37
+81
+31
+20
+40
+01
+1d
+20
+40
+01
+4d
+20
+40
+04
+09
+68
+00
+cb
+b4
+1f
+e0
+fe
+01
+60
+00
+cb
+b4
+68
+00
+cb
+c5
+c0
+ff
+81
+20
+20
+40
+00
+c2
+58
+00
+00
+00
+60
+01
+4b
+bb
+60
+00
+cb
+bd
+60
+00
+cc
+e9
+70
+4b
+ba
+00
+20
+60
+00
+00
+df
+20
+00
+04
+d8
+a0
+4b
+51
+20
+20
+7e
+c6
+20
+40
+04
+06
+20
+20
+01
+77
+78
+57
+fc
+00
+20
+40
+02
+6a
+68
+00
+cb
+f1
+c0
+00
+81
+2f
+18
+00
+2a
+00
+68
+02
+4b
+dd
+98
+00
+12
+00
+68
+08
+80
+17
+20
+40
+29
+1f
+20
+40
+29
+24
+20
+40
+02
+26
+20
+57
+82
+62
+20
+60
+00
+00
+20
+40
+02
+62
+20
+20
+01
+11
+68
+00
+cb
+bd
+1f
+e0
+fe
+01
+60
+00
+cb
+bd
+68
+00
+cb
+c5
+c0
+ff
+81
+45
+68
+08
+cb
+be
+18
+40
+84
+01
+60
+08
+cb
+be
+68
+00
+cb
+fa
+98
+46
+7e
+00
+24
+3a
+01
+07
+68
+00
+cc
+ec
+c0
+01
+80
+ab
+68
+00
+cc
+e9
+1f
+e0
+fe
+01
+60
+00
+cc
+e9
+c0
+01
+00
+a0
+20
+40
+00
+97
+70
+4b
+fa
+01
+20
+20
+01
+06
+68
+00
+cb
+bd
+c1
+ff
+80
+00
+70
+4b
+bd
+00
+20
+20
+01
+4b
+58
+00
+00
+00
+60
+01
+4b
+bb
+70
+0a
+99
+3a
+20
+20
+7d
+86
+20
+40
+01
+d6
+68
+00
+cb
+b3
+20
+7a
+00
+00
+98
+00
+72
+00
+d8
+c0
+4b
+31
+d8
+a0
+4b
+93
+20
+20
+7f
+01
+79
+20
+00
+26
+20
+40
+01
+58
+70
+4b
+c5
+01
+20
+60
+00
+00
+70
+41
+de
+20
+70
+4b
+b4
+00
+70
+4b
+bf
+4e
+68
+02
+4b
+c1
+20
+20
+01
+e3
+68
+00
+cb
+ba
+c0
+00
+ff
+e7
+68
+00
+cb
+c5
+c0
+00
+81
+64
+c0
+01
+01
+67
+c0
+01
+81
+6a
+20
+20
+2a
+8c
+70
+4b
+c5
+11
+70
+11
+9e
+aa
+20
+20
+01
+6c
+70
+4b
+c5
+12
+70
+11
+9e
+55
+20
+20
+01
+6c
+70
+4b
+c5
+13
+70
+11
+9e
+22
+68
+00
+cb
+b6
+1f
+e1
+7e
+07
+60
+00
+91
+9f
+68
+02
+4b
+ec
+60
+02
+11
+a0
+70
+11
+a4
+00
+da
+20
+11
+9e
+d8
+40
+00
+07
+20
+40
+01
+d1
+20
+40
+00
+e7
+20
+20
+7f
+e7
+68
+00
+cb
+c5
+c1
+7f
+80
+00
+c0
+08
+81
+7d
+c0
+09
+01
+7f
+c0
+09
+81
+81
+20
+60
+00
+00
+70
+4b
+c5
+02
+20
+20
+01
+17
+70
+4b
+c5
+03
+20
+20
+01
+17
+70
+4b
+c5
+ff
+70
+0a
+99
+39
+20
+40
+7d
+86
+68
+02
+4b
+95
+20
+40
+01
+e3
+20
+20
+01
+17
+79
+3f
+80
+26
+20
+40
+01
+c7
+68
+00
+cb
+c5
+c1
+ff
+80
+00
+20
+40
+01
+9c
+58
+00
+00
+00
+60
+01
+4b
+e2
+20
+40
+2a
+fa
+20
+00
+07
+d0
+68
+00
+cb
+e2
+c0
+7f
+81
+4b
+20
+40
+01
+22
+24
+2c
+01
+a5
+24
+37
+81
+a5
+79
+20
+00
+26
+58
+00
+00
+00
+60
+01
+4b
+e2
+70
+0a
+99
+3c
+20
+40
+7d
+86
+20
+40
+01
+1d
+20
+20
+00
+6d
+70
+11
+9e
+ff
+68
+00
+cb
+b6
+60
+00
+91
+9f
+68
+02
+4b
+ec
+60
+02
+11
+a0
+d8
+40
+00
+06
+da
+20
+11
+9e
+20
+40
+01
+d1
+20
+20
+01
+f1
+68
+01
+4b
+e2
+1f
+e0
+fe
+01
+60
+01
+4b
+e2
+20
+40
+02
+03
+20
+20
+01
+8e
+79
+3f
+80
+26
+20
+40
+01
+c5
+20
+40
+01
+9c
+70
+4b
+e2
+00
+20
+40
+2a
+fa
+20
+00
+07
+d0
+68
+00
+cb
+e2
+c0
+7f
+81
+4b
+20
+40
+01
+22
+24
+2c
+01
+bb
+24
+37
+81
+bb
+20
+40
+01
+4d
+68
+02
+4b
+dd
+68
+0a
+4b
+c1
+98
+46
+7c
+00
+20
+22
+81
+54
+20
+20
+01
+95
+68
+00
+cb
+e2
+1f
+e0
+fe
+01
+60
+00
+cb
+e2
+68
+00
+cc
+f3
+1f
+e0
+fe
+01
+1f
+e1
+7e
+01
+60
+00
+cc
+f3
+c0
+00
+01
+c9
+c0
+00
+81
+cb
+20
+60
+00
+00
+70
+41
+de
+20
+20
+40
+03
+28
+20
+40
+01
+e4
+20
+20
+02
+03
+20
+40
+01
+c5
+20
+20
+01
+ae
+20
+40
+01
+58
+20
+20
+01
+ae
+79
+3f
+80
+26
+20
+40
+53
+ce
+d8
+e0
+00
+03
+20
+20
+43
+d2
+60
+08
+cb
+b5
+18
+42
+72
+00
+d8
+a0
+4b
+51
+1a
+22
+0c
+00
+20
+20
+7f
+01
+68
+00
+cb
+30
+1f
+e9
+7e
+00
+60
+00
+cb
+b3
+1f
+e0
+fe
+01
+d8
+c0
+4b
+30
+98
+c0
+8c
+00
+e8
+c1
+80
+00
+60
+01
+cb
+f2
+68
+00
+cb
+30
+1f
+e3
+7e
+00
+1f
+e1
+7e
+03
+60
+00
+cb
+f8
+20
+60
+00
+00
+60
+02
+4b
+dd
+da
+20
+00
+00
+df
+20
+00
+04
+d8
+c0
+4b
+dd
+e8
+c0
+80
+00
+9a
+20
+a2
+00
+c2
+00
+01
+e7
+1a
+22
+7e
+00
+60
+01
+4c
+66
+68
+00
+cc
+66
+68
+08
+cc
+67
+98
+40
+fe
+00
+60
+00
+cc
+68
+20
+60
+00
+00
+68
+00
+cb
+b5
+1f
+e0
+fe
+02
+60
+00
+cb
+b7
+68
+00
+cb
+b6
+60
+00
+cb
+71
+68
+00
+cb
+b5
+1f
+e9
+fe
+00
+68
+08
+cb
+b4
+18
+41
+04
+03
+18
+43
+84
+00
+98
+41
+fe
+00
+68
+08
+cb
+f1
+98
+40
+fe
+00
+e0
+a0
+80
+00
+68
+00
+cb
+b5
+98
+00
+72
+00
+d8
+c0
+4b
+51
+20
+20
+7f
+01
+68
+08
+cb
+c0
+20
+40
+02
+07
+60
+08
+cb
+c0
+20
+60
+00
+00
+20
+40
+02
+0b
+18
+40
+84
+01
+18
+41
+04
+03
+20
+60
+00
+00
+68
+00
+cb
+dd
+1f
+e1
+7e
+03
+1f
+ef
+a2
+04
+58
+00
+4b
+c6
+9a
+20
+fe
+00
+98
+40
+8c
+00
+e8
+c0
+80
+00
+60
+00
+cb
+bf
+20
+60
+00
+00
+78
+44
+fc
+00
+78
+43
+fc
+00
+58
+55
+55
+55
+98
+00
+1e
+00
+68
+00
+cb
+bf
+1f
+ed
+84
+00
+79
+20
+04
+01
+18
+43
+1c
+00
+20
+60
+00
+00
+20
+40
+53
+c4
+68
+02
+4b
+dd
+98
+00
+12
+00
+20
+40
+29
+18
+68
+08
+cb
+bf
+20
+40
+29
+1f
+58
+00
+05
+00
+20
+40
+2a
+8f
+20
+40
+29
+24
+20
+40
+02
+14
+78
+57
+fc
+00
+78
+26
+fc
+00
+78
+30
+fc
+00
+78
+50
+7c
+00
+78
+28
+7c
+00
+68
+01
+4b
+b8
+98
+00
+36
+00
+37
+c1
+84
+00
+24
+2c
+02
+66
+78
+46
+fc
+00
+78
+25
+fc
+00
+78
+23
+fc
+00
+78
+24
+fc
+00
+20
+40
+02
+5f
+60
+00
+cc
+69
+68
+08
+cc
+68
+98
+46
+7c
+00
+24
+22
+82
+62
+20
+40
+02
+5f
+60
+00
+cb
+2f
+68
+00
+cb
+fb
+1f
+e6
+7c
+02
+20
+22
+82
+42
+68
+00
+cb
+2f
+68
+08
+cb
+b6
+a8
+40
+0e
+00
+24
+20
+82
+62
+20
+40
+02
+5f
+e0
+a0
+80
+00
+1f
+e9
+7e
+00
+1f
+e1
+72
+1f
+20
+22
+82
+4a
+20
+40
+02
+5f
+e0
+a0
+80
+00
+c2
+00
+02
+47
+18
+a2
+22
+00
+20
+40
+02
+5f
+60
+00
+cc
+f0
+1a
+22
+0a
+00
+09
+80
+00
+18
+78
+28
+7c
+00
+db
+60
+06
+64
+1f
+ef
+7e
+00
+1f
+f1
+7e
+00
+e0
+a1
+80
+00
+78
+45
+fc
+00
+20
+23
+02
+62
+78
+37
+fc
+00
+68
+00
+80
+17
+1f
+e0
+a2
+00
+20
+40
+29
+81
+78
+46
+fc
+00
+20
+40
+29
+18
+68
+00
+cc
+f0
+20
+40
+00
+1d
+20
+60
+00
+00
+09
+80
+00
+08
+19
+89
+7e
+00
+20
+60
+00
+00
+78
+4d
+fc
+00
+78
+45
+fc
+00
+20
+40
+26
+4d
+20
+60
+00
+00
+20
+20
+02
+62
+20
+40
+29
+18
+68
+08
+cb
+bf
+20
+20
+29
+33
+20
+40
+53
+c4
+68
+02
+4b
+dd
+98
+00
+12
+00
+20
+40
+02
+14
+20
+40
+02
+67
+79
+20
+2a
+00
+78
+2e
+fc
+00
+78
+30
+7c
+00
+78
+50
+fc
+00
+19
+31
+7e
+00
+1f
+ec
+fe
+00
+1f
+f1
+fe
+00
+08
+00
+86
+28
+78
+4e
+fc
+00
+78
+2d
+fc
+00
+78
+23
+fc
+00
+78
+24
+fc
+00
+68
+00
+cc
+68
+08
+00
+86
+08
+68
+00
+cb
+b7
+98
+00
+72
+00
+d8
+c0
+4b
+71
+e8
+c0
+80
+00
+08
+00
+86
+08
+c2
+00
+02
+80
+78
+24
+7c
+00
+08
+00
+86
+18
+78
+44
+7c
+00
+37
+d3
+82
+00
+20
+00
+00
+64
+78
+4e
+fc
+00
+78
+4d
+fc
+00
+20
+60
+00
+00
+20
+40
+7f
+e9
+68
+0a
+4b
+d6
+1c
+42
+7e
+00
+98
+46
+7c
+00
+24
+41
+2d
+18
+1f
+e2
+24
+00
+68
+02
+4b
+d6
+68
+08
+cb
+da
+98
+40
+84
+00
+1a
+42
+7e
+00
+98
+46
+7c
+00
+24
+61
+00
+00
+79
+3f
+fe
+1c
+60
+02
+4b
+d6
+20
+20
+7f
+e7
+20
+40
+29
+bb
+20
+7a
+00
+00
+68
+08
+cc
+6f
+da
+20
+0d
+9e
+20
+40
+02
+a1
+60
+08
+cc
+6f
+20
+60
+00
+00
+1a
+22
+7e
+00
+98
+40
+8a
+00
+68
+00
+80
+18
+e0
+a0
+80
+00
+18
+40
+84
+01
+18
+41
+04
+07
+20
+60
+00
+00
+d8
+40
+00
+00
+df
+20
+00
+08
+1a
+22
+0c
+00
+e8
+c0
+80
+00
+98
+40
+84
+00
+c2
+00
+02
+ab
+18
+49
+7e
+00
+1f
+e2
+04
+00
+c6
+93
+00
+00
+1f
+e6
+fc
+0a
+20
+40
+7f
+86
+18
+07
+fe
+00
+1f
+f2
+7e
+00
+18
+07
+04
+00
+98
+41
+84
+00
+20
+60
+00
+00
+20
+60
+00
+00
+c6
+13
+00
+00
+20
+40
+02
+c2
+68
+00
+c0
+40
+c3
+00
+02
+bf
+68
+00
+80
+a0
+24
+7a
+00
+00
+58
+00
+00
+00
+60
+04
+00
+a1
+20
+60
+00
+00
+20
+40
+02
+cb
+20
+40
+02
+bf
+20
+40
+3e
+bf
+68
+12
+00
+70
+68
+1a
+00
+78
+98
+41
+84
+00
+18
+44
+04
+00
+60
+1a
+00
+7c
+20
+60
+00
+00
+68
+00
+ca
+fe
+20
+7a
+00
+00
+20
+20
+03
+c3
+20
+40
+34
+16
+20
+35
+82
+d6
+68
+00
+c1
+de
+60
+00
+cc
+6c
+20
+40
+04
+06
+68
+00
+c6
+85
+60
+00
+c6
+da
+20
+40
+43
+ca
+20
+40
+02
+db
+20
+20
+74
+b9
+68
+00
+cc
+6c
+60
+00
+c1
+de
+20
+60
+00
+00
+24
+55
+83
+1a
+20
+40
+02
+f9
+20
+75
+80
+00
+20
+40
+03
+4d
+68
+00
+cb
+26
+c2
+81
+02
+e3
+20
+40
+40
+83
+c0
+02
+82
+e7
+20
+20
+03
+35
+20
+40
+02
+d8
+68
+00
+c2
+10
+20
+60
+00
+00
+68
+02
+46
+d3
+c4
+08
+80
+00
+c3
+81
+80
+00
+c6
+13
+00
+00
+20
+40
+44
+82
+d8
+e0
+00
+03
+20
+40
+43
+ce
+58
+00
+00
+00
+60
+01
+46
+ae
+60
+00
+c6
+b4
+60
+01
+4b
+e2
+20
+40
+42
+ca
+20
+20
+01
+54
+68
+02
+46
+d3
+c3
+0a
+3d
+66
+68
+00
+c7
+7a
+c0
+7f
+bd
+66
+20
+20
+3d
+80
+70
+42
+12
+76
+20
+20
+3d
+36
+20
+40
+02
+f9
+20
+40
+40
+c0
+68
+00
+c6
+e0
+c0
+02
+c0
+d5
+20
+40
+40
+d9
+c0
+18
+03
+09
+c0
+18
+83
+0b
+20
+40
+40
+d1
+20
+00
+03
+e8
+20
+20
+02
+ff
+70
+4a
+fe
+01
+20
+40
+64
+0f
+20
+40
+02
+fb
+20
+20
+64
+11
+20
+40
+03
+10
+20
+20
+40
+e0
+20
+40
+03
+10
+68
+00
+c6
+de
+c0
+38
+40
+e8
+70
+46
+e0
+01
+20
+60
+00
+00
+58
+00
+80
+06
+20
+40
+64
+13
+20
+00
+2e
+e0
+20
+20
+02
+f4
+58
+00
+00
+06
+20
+40
+64
+14
+1f
+e1
+fe
+08
+1f
+ed
+7e
+00
+1f
+e0
+fe
+06
+20
+20
+64
+13
+20
+40
+00
+8d
+68
+10
+8a
+00
+79
+3f
+fe
+04
+60
+10
+8a
+00
+20
+40
+3e
+1e
+58
+00
+00
+00
+60
+01
+41
+54
+20
+40
+3e
+54
+20
+40
+65
+9c
+68
+02
+46
+d3
+2f
+ef
+fe
+19
+24
+40
+e5
+c2
+20
+40
+44
+3f
+20
+40
+03
+2a
+20
+40
+03
+73
+20
+20
+65
+df
+20
+40
+33
+c4
+20
+22
+c3
+16
+20
+20
+3d
+cb
+d8
+40
+00
+02
+da
+20
+0a
+aa
+da
+40
+00
+62
+20
+20
+65
+d1
+d8
+40
+00
+02
+da
+20
+0a
+9a
+da
+40
+00
+62
+20
+20
+33
+c8
+20
+20
+01
+aa
+68
+02
+46
+d3
+c3
+0f
+03
+3d
+68
+00
+8a
+bd
+2f
+ec
+00
+03
+24
+20
+83
+3d
+20
+40
+02
+fb
+20
+40
+03
+14
+68
+00
+c7
+1f
+60
+00
+c7
+1e
+68
+02
+46
+d3
+c4
+08
+80
+00
+20
+40
+03
+44
+20
+34
+01
+aa
+20
+20
+01
+87
+df
+20
+00
+02
+d8
+c0
+4b
+dd
+20
+40
+7f
+e7
+58
+00
+ff
+ff
+e8
+c9
+00
+00
+98
+46
+7c
+00
+24
+42
+ff
+e9
+c2
+00
+03
+48
+20
+60
+00
+00
+58
+00
+03
+64
+60
+01
+41
+f5
+58
+00
+03
+52
+60
+01
+4c
+e6
+20
+60
+00
+00
+20
+20
+03
+57
+20
+40
+44
+01
+68
+01
+46
+9f
+20
+7a
+00
+00
+20
+20
+00
+6d
+20
+40
+04
+75
+20
+20
+03
+54
+68
+01
+46
+9f
+20
+7a
+00
+00
+70
+48
+06
+01
+70
+48
+07
+02
+20
+60
+00
+00
+20
+40
+58
+14
+70
+47
+9c
+01
+20
+20
+03
+10
+20
+40
+7e
+34
+20
+40
+3d
+6a
+20
+20
+3e
+e0
+1a
+62
+7e
+00
+c0
+1c
+83
+69
+c0
+1d
+03
+77
+c0
+1e
+03
+82
+20
+20
+41
+7d
+70
+47
+8b
+01
+d8
+e0
+00
+03
+20
+40
+43
+d2
+58
+00
+00
+00
+60
+01
+47
+07
+70
+46
+a7
+00
+20
+40
+40
+5d
+20
+40
+00
+6d
+20
+40
+03
+73
+20
+20
+65
+d1
+da
+20
+4b
+dd
+da
+40
+00
+5b
+d8
+40
+00
+04
+20
+60
+00
+00
+70
+4c
+f5
+00
+20
+40
+02
+d8
+20
+40
+01
+cd
+20
+20
+65
+9a
+70
+41
+bd
+00
+20
+40
+43
+16
+df
+20
+00
+03
+d8
+c0
+47
+22
+20
+40
+03
+46
+20
+34
+03
+bf
+20
+20
+02
+e4
+20
+20
+3f
+8d
+78
+34
+7c
+00
+68
+12
+01
+38
+79
+34
+7e
+1a
+60
+12
+00
+4c
+20
+40
+2c
+21
+20
+40
+03
+8d
+20
+40
+74
+bd
+20
+40
+44
+82
+20
+40
+3e
+9f
+20
+20
+02
+c4
+68
+00
+ca
+fe
+20
+7a
+00
+00
+70
+4a
+fe
+00
+20
+20
+03
+14
+20
+40
+03
+96
+20
+40
+03
+b6
+20
+40
+03
+9b
+20
+40
+42
+34
+20
+20
+42
+3a
+da
+60
+48
+07
+da
+40
+03
+99
+20
+20
+33
+6d
+70
+48
+06
+00
+20
+60
+00
+00
+68
+00
+c6
+f5
+c2
+82
+43
+94
+20
+40
+40
+83
+c0
+03
+83
+a7
+68
+00
+c6
+85
+60
+00
+c6
+da
+68
+00
+c6
+db
+c1
+00
+80
+00
+70
+46
+db
+01
+d8
+e0
+00
+09
+20
+40
+43
+d2
+20
+20
+43
+ca
+70
+47
+9e
+28
+20
+40
+03
+aa
+20
+20
+43
+b0
+da
+60
+46
+da
+da
+40
+03
+ad
+20
+20
+33
+6d
+68
+01
+46
+82
+2f
+ef
+fe
+0b
+20
+40
+c2
+d4
+68
+01
+46
+82
+2f
+ef
+fe
+07
+20
+40
+c3
+92
+d8
+e0
+00
+09
+20
+40
+43
+ce
+20
+20
+43
+b8
+68
+00
+c7
+9d
+20
+7a
+00
+00
+68
+00
+c7
+9e
+20
+3a
+03
+bd
+1f
+e0
+ff
+ff
+60
+00
+c7
+9e
+20
+60
+00
+00
+70
+47
+9d
+00
+20
+20
+34
+0a
+70
+47
+9d
+01
+70
+47
+9e
+28
+20
+60
+00
+00
+20
+40
+42
+4a
+68
+00
+c6
+e0
+c0
+03
+03
+c6
+20
+20
+3d
+81
+68
+00
+c7
+7a
+20
+5a
+03
+cc
+68
+00
+c7
+7a
+c0
+00
+bd
+8a
+c0
+01
+bd
+8e
+20
+20
+3d
+8c
+70
+47
+7a
+01
+20
+60
+00
+00
+78
+54
+7c
+00
+58
+00
+00
+00
+60
+03
+46
+9b
+20
+40
+3f
+b5
+20
+40
+40
+79
+20
+40
+40
+7e
+20
+40
+40
+99
+24
+74
+00
+00
+20
+20
+3f
+a0
+70
+47
+9d
+00
+70
+47
+9e
+00
+28
+0f
+fe
+26
+20
+40
+81
+cd
+20
+20
+42
+6d
+20
+40
+02
+d8
+70
+47
+9c
+00
+68
+01
+46
+82
+c2
+85
+83
+e2
+68
+02
+46
+d3
+c3
+0c
+03
+e2
+20
+40
+34
+18
+68
+01
+46
+87
+60
+01
+46
+ac
+70
+01
+6d
+06
+58
+00
+00
+00
+60
+01
+46
+b0
+60
+01
+46
+ae
+d8
+e0
+00
+07
+20
+40
+43
+ce
+20
+40
+43
+ca
+20
+20
+42
+c4
+58
+00
+00
+00
+60
+01
+46
+ac
+20
+40
+03
+10
+20
+20
+42
+cb
+68
+10
+80
+77
+1f
+e1
+7e
+fd
+60
+10
+80
+77
+68
+18
+80
+73
+18
+41
+84
+02
+60
+18
+80
+73
+20
+40
+63
+ee
+18
+41
+04
+fd
+20
+00
+00
+0d
+20
+40
+63
+f2
+60
+18
+80
+73
+20
+60
+00
+00
+20
+40
+62
+bc
+24
+3a
+7d
+db
+68
+00
+8a
+99
+c5
+84
+fd
+d6
+c0
+09
+04
+03
+20
+20
+7d
+ca
+20
+40
+58
+90
+24
+7a
+00
+00
+20
+20
+5a
+bf
+70
+4c
+f1
+01
+70
+4c
+ee
+00
+20
+60
+00
+00
+68
+00
+cc
+ee
+1f
+e0
+fe
+01
+60
+00
+cc
+ee
+20
+60
+00
+00
+68
+00
+cc
+ee
+1f
+e6
+7c
+02
+24
+41
+04
+15
+68
+00
+cc
+ee
+c1
+00
+00
+00
+1f
+e0
+ff
+ff
+60
+00
+cc
+ee
+20
+60
+00
+00
+70
+4c
+ee
+03
+20
+60
+00
+00
+20
+60
+00
+00
+68
+01
+46
+82
+c3
+85
+80
+00
+c3
+83
+80
+00
+c3
+83
+00
+00
+da
+20
+4c
+77
+20
+40
+02
+a8
+60
+08
+cc
+ef
+58
+00
+00
+82
+c5
+13
+04
+22
+58
+00
+00
+80
+98
+46
+7c
+00
+24
+21
+04
+3a
+68
+00
+cc
+ee
+1f
+e6
+7c
+02
+24
+21
+04
+2a
+68
+00
+cc
+ee
+c0
+00
+04
+3b
+20
+60
+00
+00
+68
+00
+cc
+ee
+c1
+90
+00
+00
+70
+4c
+ee
+00
+68
+08
+cc
+ef
+58
+00
+00
+77
+c5
+13
+04
+31
+58
+00
+00
+75
+98
+46
+7c
+00
+24
+61
+00
+00
+68
+00
+cc
+f1
+c0
+00
+04
+42
+1f
+e0
+ff
+ff
+60
+00
+cc
+f1
+c0
+00
+04
+42
+70
+41
+de
+00
+20
+60
+00
+00
+70
+4c
+ee
+00
+68
+00
+cc
+f1
+c0
+01
+04
+40
+1f
+e0
+fe
+01
+60
+00
+cc
+f1
+c0
+00
+84
+38
+70
+41
+de
+02
+20
+60
+00
+00
+70
+41
+de
+04
+20
+60
+00
+00
+60
+08
+80
+17
+18
+40
+a2
+00
+20
+40
+29
+81
+58
+00
+05
+00
+20
+40
+2a
+8f
+70
+89
+06
+01
+70
+89
+00
+3c
+70
+89
+01
+e0
+20
+00
+00
+0a
+70
+89
+02
+01
+70
+89
+02
+3d
+20
+00
+00
+0a
+70
+89
+03
+b7
+20
+00
+00
+0a
+70
+89
+02
+7d
+68
+00
+c1
+de
+c0
+01
+04
+5c
+c0
+02
+04
+61
+c0
+10
+04
+70
+20
+40
+04
+66
+70
+89
+55
+d0
+70
+89
+56
+e0
+70
+89
+58
+6c
+20
+20
+29
+4b
+20
+40
+04
+6b
+70
+89
+55
+d0
+70
+89
+56
+e0
+70
+89
+58
+3c
+20
+20
+29
+53
+20
+40
+04
+66
+70
+89
+55
+d0
+70
+89
+56
+c0
+70
+89
+58
+6c
+20
+20
+29
+5b
+70
+89
+4c
+5b
+70
+89
+4d
+96
+70
+89
+4e
+2c
+70
+89
+4f
+46
+20
+60
+00
+00
+70
+89
+4c
+fb
+70
+89
+4d
+ef
+70
+89
+4e
+ec
+70
+89
+4f
+5e
+20
+60
+00
+00
+70
+89
+56
+c5
+70
+89
+55
+d0
+20
+60
+00
+00
+18
+00
+2a
+08
+20
+20
+28
+fa
+68
+00
+cb
+2e
+1f
+e0
+fe
+01
+60
+00
+cb
+2e
+1f
+e6
+7c
+32
+20
+21
+04
+81
+1f
+e6
+7c
+64
+20
+21
+04
+8c
+1f
+e6
+7c
+96
+20
+21
+04
+94
+1f
+e6
+7c
+c8
+20
+21
+04
+9c
+20
+60
+00
+00
+58
+00
+00
+05
+60
+01
+4b
+28
+58
+00
+00
+00
+60
+01
+4b
+2a
+60
+00
+cb
+2c
+60
+00
+cb
+27
+60
+00
+cb
+2d
+78
+34
+7c
+00
+da
+20
+00
+07
+da
+40
+4b
+27
+20
+60
+00
+00
+58
+00
+00
+05
+60
+01
+4b
+2a
+58
+00
+00
+00
+60
+01
+4b
+28
+60
+00
+cb
+2c
+60
+00
+cb
+27
+60
+00
+cb
+2d
+20
+20
+04
+88
+58
+00
+ff
+fb
+60
+01
+4b
+28
+58
+00
+00
+00
+60
+01
+4b
+2a
+60
+00
+cb
+2c
+60
+00
+cb
+27
+60
+00
+cb
+2d
+20
+20
+04
+88
+68
+00
+cb
+2e
+c0
+64
+04
+a6
+58
+00
+ff
+fb
+60
+01
+4b
+2a
+58
+00
+00
+00
+60
+01
+4b
+28
+60
+00
+cb
+2c
+60
+00
+cb
+27
+60
+00
+cb
+2d
+20
+20
+04
+88
+70
+4b
+2e
+00
+20
+20
+04
+9e
+76
+d3
+aa
+55
+08
+00
+a1
+00
+00
+00
+00
+00
+00
+00
+00
+00
+aa
+55
+01
+00
+6c
+0c
+ff
+aa
+55
+0a
+00
+9e
+11
+00
+00
+00
+00
+00
+00
+00
+00
+00
+00
+aa
+55
+01
+00
+00
+40
+07
+aa
+55
+0e
+00
+10
+40
+20
+02
+00
+00
+02
+00
+06
+00
+10
+06
+00
+00
+48
+1c
+aa
+55
+01
+00
+27
+40
+80
+aa
+55
+01
+00
+31
+40
+10
+aa
+55
+02
+00
+91
+40
+01
+40
+aa
+55
+06
+00
+a0
+40
+20
+51
+17
+01
+20
+20
+aa
+55
+18
+00
+ad
+40
+12
+00
+00
+02
+12
+00
+00
+02
+00
+00
+20
+00
+00
+40
+20
+00
+00
+00
+80
+04
+00
+08
+8f
+47
+aa
+55
+01
+00
+d1
+40
+01
+aa
+55
+0b
+00
+72
+41
+20
+00
+00
+8f
+1b
+ce
+00
+0a
+0b
+ef
+07
+aa
+55
+05
+00
+e3
+41
+0e
+00
+01
+00
+02
+aa
+55
+05
+00
+03
+42
+90
+1f
+00
+00
+06
+aa
+55
+04
+00
+11
+42
+80
+00
+00
+ff
+aa
+55
+03
+00
+1a
+42
+01
+13
+47
+aa
+55
+01
+00
+3a
+42
+14
+aa
+55
+02
+00
+41
+42
+00
+84
+aa
+55
+0c
+00
+6f
+43
+1f
+02
+01
+05
+03
+03
+12
+18
+03
+19
+c2
+03
+aa
+55
+0e
+00
+8f
+43
+1f
+0c
+09
+42
+54
+35
+2e
+30
+20
+4d
+6f
+75
+73
+65
+aa
+55
+0c
+00
+af
+43
+0b
+42
+54
+35
+2e
+30
+20
+4d
+6f
+75
+73
+65
+aa
+55
+02
+00
+6f
+44
+19
+00
+aa
+55
+01
+00
+8d
+44
+07
+aa
+55
+08
+00
+96
+44
+07
+00
+07
+00
+20
+00
+2c
+01
+aa
+55
+06
+00
+a0
+44
+8e
+b1
+3a
+0e
+8e
+ed
+aa
+55
+01
+00
+e5
+44
+50
+aa
+55
+02
+00
+fa
+44
+22
+00
+aa
+55
+0c
+00
+15
+45
+0b
+42
+54
+33
+2e
+30
+20
+4d
+6f
+75
+73
+65
+aa
+55
+01
+00
+5a
+45
+0a
+aa
+55
+04
+00
+5a
+46
+01
+03
+00
+04
+aa
+55
+01
+00
+62
+46
+03
+aa
+55
+05
+00
+84
+46
+01
+1e
+ff
+08
+07
+aa
+55
+07
+00
+a5
+46
+07
+00
+00
+50
+00
+70
+17
+aa
+55
+05
+00
+d2
+46
+02
+00
+00
+12
+41
+aa
+55
+1e
+00
+db
+46
+01
+ff
+00
+00
+00
+00
+02
+06
+08
+04
+ff
+ff
+ff
+1b
+1c
+ff
+ff
+ff
+ff
+ff
+ff
+05
+ff
+ff
+03
+ff
+00
+00
+ff
+ff
+aa
+55
+01
+00
+03
+47
+02
+aa
+55
+08
+00
+20
+47
+01
+ff
+ff
+ff
+ff
+ff
+ff
+ff
+aa
+55
+04
+00
+7f
+47
+00
+01
+02
+03
+aa
+55
+0e
+00
+8e
+47
+03
+4b
+ba
+55
+d0
+56
+e0
+57
+88
+58
+6c
+59
+10
+ff
+aa
+55
+41
+00
+c5
+47
+20
+25
+00
+02
+03
+28
+01
+12
+26
+00
+02
+4d
+2a
+07
+00
+00
+00
+00
+00
+00
+00
+27
+00
+02
+02
+29
+02
+00
+00
+28
+00
+02
+08
+29
+02
+11
+01
+29
+00
+02
+03
+28
+01
+0e
+2a
+00
+02
+4d
+2a
+07
+00
+00
+00
+00
+00
+00
+00
+2b
+00
+02
+08
+29
+02
+11
+02
+aa
+55
+14
+00
+10
+4b
+06
+ff
+06
+00
+03
+00
+80
+0c
+09
+42
+54
+35
+2e
+30
+20
+4d
+6f
+75
+73
+65
+aa
+55
+04
+00
+b6
+4b
+01
+00
+c0
+12
+aa
+55
+15
+00
+c1
+4b
+20
+15
+10
+05
+ff
+00
+13
+2c
+42
+06
+15
+36
+48
+0f
+1a
+3a
+4c
+11
+23
+31
+4d
+aa
+55
+03
+00
+da
+4b
+19
+19
+1c
+aa
+55
+03
+00
+e4
+4b
+00
+48
+60
+aa
+55
+02
+00
+fa
+4b
+04
+01
+80
+fc
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/memmap.format
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/memmap.format	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/memmap.format	(working copy)
@@ -0,0 +1,1895 @@
+0x0000 mem_le_adv_transmit
+0x0001 mem_le_adv_waitcnt
+0x0002 mem_le_adv_rcv
+0x0003 mem_le_req_rcv
+0x0004 mem_le_scanrsp_rcv
+0x0005 mem_le_conn_rcv
+0x0006 mem_inquiryscan_waitcnt
+0x0007 mem_inquiryscan_rcvcnt
+0x0008 mem_pagescan_waitcnt
+0x0009 mem_pagescan_rcvcnt
+0x000a mem_pagescan_rcvfhscnt
+0x000b mem_slave_rcvcnt
+0x000c mem_page_transmit
+0x000d mem_page_rcv
+0x000e mem_page_rcv_fhs
+0x000f mem_master_rcvcnt
+0x0010 mem_fhs_wait_counter
+0x0011 mem_newconnto_counter
+0x0012 mem_inquiry_transmit
+0x0013 mem_inquiry_rcv
+0x0014 mem_fw_ver
+0x0015 mem_current_context
+0x0016 mem_le_ch_mapped
+0x0017 mem_last_freq
+0x0018 mem_rssi
+0x0019 mem_rx_type
+0x001a mem_rx_hec_err
+0x001c mem_rx_crc_err
+0x001e mem_context_ptr
+0x0020 mem_display
+0x0028 mem_bcd
+0x0030 mem_state
+0x0031 mem_mode
+0x0032 mem_tsniff
+0x0034 mem_sniff_anchor
+0x0038 mem_clk_offset
+0x003e mem_rx_window
+0x0040 mem_plap
+0x0043 mem_puap
+0x0044 mem_pnap
+0x0046 mem_conn_handle
+0x0047 mem_arq
+0x0048 mem_lmp_to_send
+0x0049 mem_lmi_opcode
+0x004a mem_lmo_reason
+0x004b mem_op
+0x004c mem_state_map
+0x004d mem_supervision_timer
+0x0051 mem_supervision_to
+0x0053 mem_name_offset
+0x0054 mem_key_size
+0x0055 mem_conn_sm
+0x0056 mem_aco
+0x0062 mem_kc
+0x0072 mem_conn_timer
+0x0073 mem_sniff_attempt
+0x0074 mem_sniff_timeout
+0x0075 mem_dsniff
+0x0077 mem_amaddr
+0x0078 mem_lmo_opcode1
+0x0079 mem_lmi_opcode1
+0x007a mem_lmo_reason1
+0x007b mem_lmo_tid1
+0x007c mem_lmo_opcode2
+0x007d mem_lmi_opcode2
+0x007e mem_lmo_reason2
+0x007f mem_lmo_tid2
+0x0080 mem_hci_version
+0x0083 mem_acl_pktlen
+0x0085 mem_sco_pktlen
+0x0086 mem_acl_pktcnt
+0x0088 mem_sco_pktcnt
+0x008a mem_current_sniff_attempt
+0x008b mem_current_sniff_timeout
+0x008c mem_sniff_timeout_temp
+0x008d mem_nfreq_index_inq
+0x008e mem_nfreq_index_page
+0x008f mem_ninqy_index
+0x0090 mem_fhs_misc
+0x0091 mem_subsniff_instant
+0x0095 mem_subsniff_rate
+0x0096 mem_subsniff_tcmax
+0x0098 mem_subsniff_tsniff
+0x0099 mem_lpm_adjust
+0x009a mem_sync_clke
+0x00a0 mem_lpm_current_mult
+0x00a1 mem_gpio_wakeup_low
+0x00a5 mem_gpio_wakeup_high
+0x00a9 mem_air_mode
+0x00aa mem_sco_asso_handle
+0x00ab mem_sco_handle
+0x00ad mem_esco_desco
+0x00ae mem_esco_type
+0x00af mem_neogotiation_state
+0x00b0 mem_saved_amaddr
+0x00b1 mem_esco_arq
+0x00b2 mem_esco_saved_arq
+0x00b3 mem_sco_obuf
+0x00d1 mem_sco_ibuf
+0x00ef mem_sco_poll
+0x00f0 mem_npage_index
+0x00f1 mem_page_mode
+0x00f2 mem_page_clk
+0x00f6 mem_tst_pktcnt_sync
+0x00f8 mem_tst_pktcnt_hec
+0x00fa mem_tst_pktcnt_crc
+0x00fc mem_tst_pktcnt_dmh
+0x00fe mem_tmp_buffer_head
+0x0101 mem_tmp_buffer
+0x0151 mem_tester_emulate
+0x0152 mem_temp_payload
+0x0152 test_mode_scenario
+0x0153 test_mode_hopping_mode
+0x0154 test_mode_tx_freq
+0x0155 test_mode_rx_freq
+0x0156 test_mode_power_mode
+0x0157 test_mode_poll_period
+0x0158 test_mode_packet_type
+0x0159 test_mode_data_length
+0x015b mem_test_mode_old_debug_config
+0x015c mem_tester_cnt
+0x015d mem_temp_am_addr
+0x015e mem_temp_arq
+0x015f mem_len
+0x0161 mem_clkn_bt
+0x0165 mem_clke_bt
+0x0169 mem_dpll_clkn
+0x016d mem_connection_options
+0x016e mem_nameres_cnt
+0x016f mem_txptr
+0x0171 mem_slot_offset
+0x0173 extm_fhs_misc
+0x0174 extm_newconn_am_addr
+0x0175 extm_class
+0x0178 extm_lap
+0x017b extm_uap
+0x017c extm_nap
+0x017f mem_debug_config
+0x0180 mem_lch_code
+0x0181 mem_fhs_am_addr
+0x0182 mem_dpll_error
+0x0184 mem_select_list_item
+0x0185 mem_temp_reconn_record
+0x0185 mem_record_bt_mode
+0x0186 mem_temp_lap
+0x018c mem_list_item_ptr
+0x018e mem_eir
+0x01f2 mem_ucode_status
+0x01f3 mem_otp_ucode_flag
+0x01f5 mem_spid_tbuf/* spid buf: 03 addr[23:16] addr[15:8] addr[7:0] */
+0x01f6 mem_iicd_tbuf/* iicd buf: iic_adr addr[15:8] addr[7:0] iic_adr */
+0x01f6 mem_addr_hi
+0x01f7 mem_addr_mi
+0x01f8 mem_addr_lo
+0x01f9 mem_iicd_addr
+0x01fa mem_spid_rbuf
+0x01fe mem_ucode_buf
+0x0200 mem_ucode_len
+0x0202 mem_sched_addr
+0x0204 mem_ucode_ptr
+0x0206 mem_ucode_keybuf
+0x0216 mem_check_plap_temp
+0x0228 mem_reconnect_flag
+0x0229 mem_switch_fail_master_count
+0x022a mem_app_evt_timer_count
+0x022b mem_init_cnt
+0x022d mem_h5rx_ackcnt
+0x022e mem_check_err_acl_cont
+0x022f mem_rp_packets
+0x0230 mem_packet_type
+0x0232 mem_hci_sniff_conn_handle
+0x0234 mem_hci_sniff_max_interval
+0x0236 mem_hci_sniff_min_interval
+0x0238 mem_hci_sniff_attempt
+0x023a mem_hci_sniff_timeout
+0x023c mem_voice_setting
+0x023e mem_retransmission_effort
+0x023f mem_sco_ptype
+0x0241 mem_extm_uap_restore
+0x0244 mem_h5rx_rptr
+0x0246 mem_h5rx_ack
+0x0247 mem_h5tx_ack
+0x0248 mem_h5tx_rptr
+0x024a mem_h5tx_wptr
+0x024c mem_h5tx_free
+0x024e mem_h5rx_tmp
+0x024f mem_h5tx_seq
+0x0250 mem_hci_acl_queue_wptr
+0x0252 mem_hci_acl_queue_rptr
+0x0254 mem_hci_acl_queue_end
+0x0256 mem_hci_acl_queue_wcnt
+0x0257 mem_hci_acl_cnt
+0x0258 mem_hci_acl_tx_trigger_wptr//tx via uart
+0x025a mem_hci_curr_len
+0x025b mem_hci_curr_target
+0x025d mem_l2cap_mem_start
+0x025d mem_l2cap_rxbuff1_len
+0x025f mem_l2cap_rxbuff2_len
+0x0261 mem_l2cap_rxbuff_new
+0x0263 mem_l2cap_rxbuff_inuse
+0x0264 mem_l2cap_payload_ptr
+0x0266 mem_l2cap_rx_pkt_length
+0x0268 mem_l2cap_rx_cid
+0x026a mem_l2cap_rx_done
+0x026b mem_l2cap_signal_tx_buff_ptr
+0x026d mem_l2cap_signal_tx_payload_ptr
+0x026f mem_l2cap_signal_tx_length
+0x0271 mem_sdp_tx_buff_ptr
+0x0273 mem_sdp_tx_payload_ptr
+0x0275 mem_sdp_tx_pkt_length
+0x0277 mem_rfcomm_tx_buff_ptr
+0x0279 mem_rfcomm_tx_payload_ptr
+0x027b mem_rfcomm_tx_pkt_length
+0x027d memL2CAP_T1
+0x027f mem_CONTROL_tasks
+0x0280 mem_send_config_req
+0x0281 mem_config_identifier
+0x0282 mem_config_req_dest_CID
+0x0284 mem_rfcomm_malloc_fail_flag
+0x0285 mem_message_to_uppersm
+0x0286 mem_upper_sm_remote_page
+0x0287 mem_upper_sm_reconn
+0x0288 mem_upper_sm_ss
+0x0289 mem_tx_malloc_log
+0x02c9 mem_l2cap_mem_end
+0x02c9 mem_scid
+0x02cb mem_cmd_length
+0x02cd mem_tt2
+0x02cf mem_tt3
+0x02d1 mem_id
+0x02d3 mem_psm
+0x02d5 mem_l2cap_sdpres_delay_time
+0x02d9 mem_le_rxbuf
+0x0311 mem_le_l2capbuf
+0x0417 mem_le_mic
+0x041b mem_le_peer_mic
+0x041f mem_le_peer_ltk
+0x042f mem_le_mrand
+0x043f mem_le_state
+0x0440 mem_le_mode
+0x0441 mem_le_tsniff
+0x0443 mem_le_anchor
+0x0447 mem_le_clk_offset
+0x044d mem_le_receive_window
+0x044f mem_le_plap
+0x0455 mem_le_conn_handle
+0x0456 mem_le_arq
+0x0457 mem_le_ch
+0x0458 mem_le_hop
+0x0459 mem_le_event_count
+0x045b mem_le_supervision_timer
+0x045f mem_le_instant
+0x0461 mem_le_channels
+0x0462 mem_le_op
+0x0463 mem_le_access
+0x0467 mem_le_crcinit
+0x046a mem_le_window_size
+0x046b mem_le_slave_latency
+0x046d mem_le_superto
+0x046f mem_le_channel_map
+0x0474 mem_le_no_using
+0x0476 mem_le_peer_sca
+0x0477 mem_le_att_opcode
+0x0478 mem_le_att_handle
+0x047a mem_le_err_code
+0x047b mem_le_ll_pairing_fail_reason
+0x047c mem_le_sk
+0x048c mem_le_testtype
+0x048d mem_le_test_sync
+0x048f mem_le_test_pcnt
+0x0491 mem_le_rxon_ts
+0x0497 mem_le_rx_ll_opcode
+0x0498 mem_le_notify_attr_start
+0x049a mem_le_notify_len
+0x049b mem_cmd_le_create_conn
+0x049c mem_le_cur_attlist_start_ptr
+0x049e mem_le_cur_handle_start
+0x04a0 mem_le_cur_handle_end
+0x04a2 mem_le_cur_uuid_length
+0x04a3 mem_le_cur_uuid
+0x04b3 mem_le_curr_att_len
+0x04b4 mem_le_search_res
+0x04b5 mem_le_continue_type
+0x04b6 mem_lmo_header_length
+0x04b7 mem_lmo_header_opcode
+0x04b8 mem_lmo_payload
+0x04c9 mem_lmi_accepted_opcode
+0x04ca mem_disconn_reason_send
+0x04cb mem_tx_fixed_freq
+0x04cc mem_rx_fixed_freq
+0x04cd mem_ext_features_page
+0x04ce mem_lmpext_ssp_enable
+0x04d0 mem_remote_sppcap
+0x04d1 mem_lmp_conn_state
+0x04d2 mem_soft_timer
+0x04d4 mem_pincode_state
+0x04d5 mem_sres_tid
+0x04d6 mem_accptsco_tid
+0x04d7 mem_auth_enable
+0x04d8 mem_wait_encryption
+0x04d9 mem_sniff_payload
+0x04e9 mem_aurand_send_delay_time
+0x04ed memRemoteRPNBitRate
+0x04ee memRemotePRNDataBits
+0x04ef memRemotePRNStopBit
+0x04f0 memRemotePRNParity
+0x04f1 memRemotePRNFlowControl
+0x04f2 memRemotePRNXon
+0x04f3 memRemotePRNXoff
+0x04f4 mem_mod2div_temp
+0x04f7 mem_contw_temp
+0x04f9 mem_attrib_list
+0x04fb mem_current_adss
+0x04fc mem_current_channel
+0x04fd mem_current_frame_type
+0x04fe mem_current_fcs
+0x04ff mem_current_length
+0x0501 mem_rfcomm_uih_payload_ptr
+0x0503 mem_uih_cmd_type
+0x0504 mem_uih_length
+0x0506 mem_param_payload_ptr
+0x0508 mem_ms_param
+0x0509 mem_pn_credit_flow_type_info
+0x050a mem_pn_priority
+0x050b mem_pn_acknowledg_timer
+0x050c mem_pn_max_retrans
+0x050d mem_rfcomm_send_adss
+0x050e mem_rfcomm_send_frame_type
+0x050f mem_rfcomm_send_fcs
+0x0510 mem_rfcomm_send_offset
+0x0511 mem_sdp_mem_start
+0x0511 mem_sdp_uuid_search_ptr
+0x0519 mem_sdp_continue_byte
+0x051b mem_sdp_pduid
+0x051c mem_sdp_transactionid
+0x051e mem_sdp_transactionid_local
+0x0520 mem_sdp_attribute_maxbyte
+0x0522 mem_sdp_record_maxcnt
+0x0524 mem_sdp_record_handle
+0x0528 mem_sdp_LACAP_found
+0x0529 mem_sdp_RFCOMM_found
+0x052a mem_sdp_handle_list
+0x052a mem_sdp_attrib_list
+0x054a mem_sdp_error_code
+0x054c mem_sdp_all_length
+0x054e mem_handle_humber
+0x054f mem_search_uuid
+0x0551 mem_sdp_mem_end
+0x0551 mem_rxbuf
+0x0562 mem_random_number
+0x0572 mem_round_key
+0x0582 mem_kinit
+0x0592 mem_input_store
+0x05a2 mem_x
+0x05b2 mem_y
+0x05c1 mem_y15
+0x05c2 mem_key_store
+0x05d3 mem_key_store_end
+0x05d4 memp_ar_key
+0x05d6 memp_ar_input
+0x05d8 mem_ar_hround
+0x05e2 mem_ec_infinite
+0x05e3 mem_ec_loopc
+0x05e5 mem_aes_cmac_data_length
+0x05e6 memdat
+0x05e6 mem_ax
+0x05fe mem_ay
+0x0616 mem_az
+0x062e mem_bx
+0x0646 mem_ax_256//32 bytes
+0x0646 mem_by
+0x065e mem_bz
+0x0666 mem_ay_256// 32 bytes
+0x0676 mem_cx
+0x0686 mem_az_256// 32 bytes
+0x068e mem_cy
+0x06a5 mem_cy5
+0x06a6 mem_bx_256// 32 bytes
+0x06a6 mem_cz
+0x06be mem_k
+0x06c6 mem_by_256// 31 bytes
+0x06d6 mem_align
+0x06e6 mem_bz_256//32 bytes
+0x06e6 mem_tmp1
+0x06e6 memahbak
+0x06fe mem_tmp5
+0x0706 mem_cx_256//32 bytes
+0x0706 memahsave
+0x0716 mem_tmp2
+0x0726 mem_cy_256// 32 bytes
+0x0726 memahsave_end
+0x0726 mem_addr_padding
+0x0727 mem_addr_value/* 12 bytes     */ 
+0x072e mem_tmp3
+0x072e mem_t1
+0x0733 mem_addr_value_end
+0x0736 mem_addr_iocap_end
+0x0745 mem_cy5_256// 1 byte
+0x0746 mem_cz_256// 32 bytes
+0x0746 mem_tmp0
+0x0746 mem_t0
+0x074e mem_tmp0a
+0x075e mem_t2
+0x0766 mem_k_256//32 bytes
+0x0776 mem_t3
+0x0786 mem_tmp1_256//32 bytes
+0x078e mem_t7
+0x07a6 mem_tmp5_256
+0x07c6 mem_tmp2_256
+0x07e6 mem_tmp3_256
+0x07e6 mem_t1_256
+0x0806 mem_tmp0_256
+0x0806 mem_t0_256
+0x0826 mem_t2_256
+0x0846 mem_t3_256
+0x0866 mem_t7_256
+0x0886 mem_p
+0x089e mem_a
+0x08b6 mem_b
+0x08ce mem_gx
+0x08e6 mem_gy
+0x08fe memh0
+0x091e mem_p_256
+0x093e mem_a_256
+0x095e mem_gx_256
+0x097e mem_gy_256
+0x099e mem_le_slat
+0x09ae mem_sp_state_start
+0x09ae mem_sp_state
+0x09af mem_master_sp_state
+0x09b0 mem_sp_flag
+0x09b1 mem_master_sp_flag
+0x09b2 mem_sp_calc
+0x09b3 mem_sp_dh_ready
+0x09b4 mem_sp_localsm
+0x09b5 mem_pairing_auth
+0x09b6 mem_sp_flag_start
+0x09b6 mem_sp_local_key_send_count
+0x09b7 mem_sp_remote_key_recv_count
+0x09b8 mem_sp_remote_key_invalid
+0x09b9 mem_sp_dhkey_invalid
+0x09ba mem_gkey
+0x09be mem_le_pubkey_remote_x_256
+0x09c6 mem_sp_pubkey_remote
+0x09c6 mem_sp_pubkey_remote_x
+0x09de mem_sp_pubkey_remote_x_end
+0x09de mem_le_pubkey_remote_y_256
+0x09e6 mem_sp_pubkey_remote_y
+0x09fe mem_le_dhkey_256
+0x0a06 mem_sp_dhkey
+0x0a1e mem_sp_dhkey_end
+0x0a1e mem_sp_random_local
+0x0a2e mem_sp_random_local_end
+0x0a2e mem_sp_random_remote
+0x0a3e mem_sp_random_remote_end
+0x0a3e memresult
+0x0a3e mem_sp_calc_result
+0x0a3e memh
+0x0a42 memg
+0x0a46 memf
+0x0a4a meme
+0x0a4e mem_sp_calc_result_high
+0x0a4e memd
+0x0a52 memc
+0x0a56 memb
+0x0a5a mema
+0x0a5e mem_sp_check_result
+0x0a6e mem_sp_confirm_remote
+0x0a7e mem_sp_prarm_stack
+0x0a8e mem_UI_data_txbuff_length
+0x0a90 mem_ipc_skip_continue_proc
+0x0a91 mem_ui_timer_temp//length 4
+0x0a91 mem_ipc_rega_temp
+0x0a95 mem_hold_contr
+0x0a97 mem_hold_contw
+0x0a99 mem_fifo_temp
+0x0a9a mem_pdatatemp
+0x0aa2 mem_temp//8 bytes
+0x0aaa mem_timeup// 4 bytes
+0x0aae mem_rega//4 bytes
+0x0ab2 mem_regb//4 bytes
+0x0ab6 mem_regc//3 bytes
+0x0ab9 mem_contr//2 bytes
+0x0abb mem_contw//2 bytes
+0x0abd mem_wakup_from_power_flag
+0x0abe mem_saved_gpio_in
+0x0ac2 mem_shutter_random_mac_data_temp
+0x0ac2 mem_shutter_config_data_temp
+0x0ac2 mem_le_adv_channel_map_temp
+0x0ac2 mem_le_data_len_temp//1byte
+0x0ac2 mem_tx_fifo_map_temp
+0x0ac2 mem_rpn_dlci//1byte
+0x0ac2 mem_event_cmd_response_content//2byte
+0x0ac2 mem_le_prand//16byte
+0x0ac2 mem_AES_CMAC_k//16 bytes
+0x0ac2 mem_regext_index//1 bytes
+0x0ac2 mem_temp_block0
+0x0ac3 mem_le_data_temp//15bytes
+0x0ac3 mem_temp_block1
+0x0ad2 mem_le_aes_128//16byte
+0x0ad2 mem_regext//64 bytes
+0x0ad2 mem_AES_CMAC_k1//16 bytes
+0x0ad2 mem_temp_block2
+0x0ae2 mem_AES_CMAC_k2//16 bytes
+0x0ae2 mem_temp_block3
+0x0af2 mem_AES_CMAC_temp// 16 bytes
+0x0af2 mem_temp_block4
+0x0b02 mem_AES_CMAC_M_last// 16 bytes
+0x0b02 mem_module_uart_cmd
+0x0b03 mem_module_uart_opcode
+0x0b04 mem_module_uart_len
+0x0b05 mem_module_temp_nl_discard_packet
+0x0b06 mem_temp_block5
+0x0b12 mem_le_mackey//16 bytes
+0x0b12 mem_app_receive_temp
+0x0b12 mem_key_value_temp
+0x0b14 mem_key_value
+0x0b16 mem_key_value_temp1
+0x0b17 mem_key_value_temp2
+0x0b18 mem_key_value_temp3
+0x0b19 mem_key_value_temp4
+0x0b1a mem_key_value_temp5
+0x0b1b mem_key_value_temp6
+0x0b1c mem_temp_block6
+0x0b22 mem_usb_status
+0x0b23 mem_usb_fifo_empty
+0x0b24 mem_usb_read_len
+0x0b25 mem_usb_rxbuf
+0x0b65 mem_bufptr
+0x0b67 mem_remain
+0x0b68 mem_devicedesc
+0x0b7c mem_hidreportdesc_kb
+0x0b7e mem_hidreportdesc_m
+0x0b80 mem_confdesc
+0x0be4 mem_string0
+0x0be9 mem_string1
+0x0c07 mem_string2
+0x0c47 mem_string3
+0x0c65 mem_usb_zero_packet
+0x0c67 mem_usb_ones_packet
+0x0c69 mem_usb_two_packet
+0x0c6b mem_usb0_state
+0x0c6c mem_usb_offline_check_gpio
+0x0c6d mem_usb_tx_interval
+0x0c6e mem_usb_clear_mem_start
+0x0c6e mem_usb_setup
+0x0c6e mem_usb_setup_bmRequestType
+0x0c6f mem_usb_setup_bRequest
+0x0c70 mem_usb_setup_bValue
+0x0c71 mem_usb_setup_bValueH
+0x0c72 mem_usb_setup_wIndex
+0x0c74 mem_usb_setup_bLength
+0x0c75 mem_usb_setup_bLengthH
+0x0c76 mem_usb0_setup
+0x0cb6 mem_usb0_set_report_data
+0x0cf6 mem_usb0_get_report_data
+0x0d36 mem_usb_state
+0x0d37 mem_usb_tx_wait
+0x0d38 mem_usb_tx_enable
+0x0d39 mem_usb_remote_wakeup
+0x0d3a mem_usb_clear_remote_wakeup
+0x0d3b mem_usb_ep0_stall_status
+0x0d3c mem_usb_ep1_stall_status
+0x0d3d mem_usb_ep2_stall_status
+0x0d3e mem_usb_ep3_stall_status
+0x0d3f mem_dsc_info_data_pointer
+0x0d41 mem_dsc_info_len
+0x0d42 mem_usb0_data_ready_report
+0x0d43 mem_usb_tx_win_enable
+0x0d44 mem_usb_tx_mac_enable
+0x0d45 mem_usb_device_enumeration_endflag
+0x0d46 mem_usb_wakestate_onetime_flag
+0x0d47 mem_usb_mac_wakeup_trig
+0x0d48 mem_usb_set_high_addr_flag
+0x0d49 mem_usb_set_protocol_value
+0x0d4a mem_usb_set_protocol_status
+0x0d4b mem_usb_get_protocol_flag
+0x0d4c mem_usb_idle_flag
+0x0d4d mem_usb_idle_rate
+0x0d4e mem_usb_setup_bValue_temp
+0x0d50 mem_usb0_get_set_report
+0x0d51 mem_usb_ep1_data
+0x0d52 mem_usb_ep2_data
+0x0d53 mem_usb_clear_halt
+0x0d54 mem_usb_mouse_data
+0x0d64 mem_usb_kb_data
+0x0d74 mem_usb_kb_multikey
+0x0d84 mem_usb_kb_data_sta_data
+0x0d8c mem_usb_kb_data_last_data
+0x0d94 mem_usb_kb_multikey_sta_data
+0x0d97 mem_usb_kb_multikey_last_data
+0x0d9a mem_usb_kb_blank_data_enable
+0x0d9b mem_usb_kb_mul_blank_data_enable
+0x0d9c mem_usb_test_cnt
+0x0d9d mem_usb_clear_mem_end
+0x0d9d mem_usb_test_kb
+0x0d9e mem_rssi_noise_buffer
+0x0e9e mem_rssi_noise_dg_buffer
+0x0f9e mem_rssi_noise_ms_buffer
+0x109e mem_rssi_noise_kb_buffer
+0x119e mem_24g_common_temp
+0x11be mem_data_pre
+0x11c0 mem_data_current
+0x11c2 mem_data_sum
+0x4000 mem_patch00
+0x4001 mem_patch01
+0x4002 mem_patch02
+0x4003 mem_patch03
+0x4004 mem_patch04
+0x4005 mem_patch05
+0x4006 mem_patch06
+0x4007 mem_patch07
+0x4008 mem_patch08
+0x4009 mem_patch09
+0x400a mem_patch0a
+0x400b mem_patch0b
+0x400c mem_patch0c
+0x400d mem_patch0d
+0x400e mem_patch0e
+0x400f mem_patch0f
+0x4010 mem_patch10
+0x4011 mem_patch11
+0x4012 mem_patch12
+0x4013 mem_patch13
+0x4014 mem_patch14
+0x4015 mem_patch15
+0x4016 mem_patch16
+0x4017 mem_patch17
+0x4018 mem_patch18
+0x4019 mem_patch19
+0x401a mem_patch1a
+0x401b mem_patch1b
+0x401c mem_patch1c
+0x401d mem_patch1d
+0x401e mem_patch1e
+0x401f mem_patch1f
+0x4020 mem_patch20
+0x4021 mem_patch21
+0x4022 mem_patch22
+0x4023 mem_patch23
+0x4024 mem_patch24
+0x4025 mem_patch25
+0x4026 mem_patch26
+0x4027 mem_patch27
+0x4028 mem_patch28
+0x4029 mem_patch29
+0x402a mem_patch2a
+0x402b mem_patch2b
+0x402c mem_patch2c
+0x402d mem_patch2d
+0x402e mem_patch2e
+0x402f mem_patch2f
+0x4030 mem_patch30
+0x4031 mem_patch31
+0x4032 mem_patch32
+0x4033 mem_patch33
+0x4034 mem_patch34
+0x4035 mem_patch35
+0x4036 mem_patch36
+0x4037 mem_patch37
+0x4038 mem_patch38
+0x4039 mem_patch39
+0x403a mem_patch3a
+0x403b mem_patch3b
+0x403c mem_patch3c
+0x403d mem_patch3d
+0x403e mem_patch3e
+0x403f mem_patch3f
+0x4040 mem_context
+0x4090 mem_current_amaddr
+0x4091 mem_lpm_mode
+0x4092 mem_device_option
+0x4093 mem_scan_mode
+0x4094 mem_last_clkn
+0x4098 mem_features
+0x40a0 mem_lap
+0x40a3 mem_uap
+0x40a4 mem_nap
+0x40a6 mem_npage
+0x40a7 mem_glap
+0x40aa mem_class
+0x40ad mem_iscan_window
+0x40af mem_iscan_interval
+0x40b1 mem_pscan_window
+0x40b3 mem_pscan_interval
+0x40b5 mem_page_interval
+0x40b7 mem_page_window
+0x40b9 mem_page_to
+0x40bb mem_inq_window
+0x40bd mem_fcomp_mul
+0x40be mem_fcomp_div
+0x40bf mem_rx_window_init
+0x40c1 mem_rx_window_sniff
+0x40c3 mem_rf_init_ptr
+0x40c5 mem_last_type
+0x40c6 mem_last_type_esco
+0x40c7 mem_last_type_saved
+0x40c8 mem_retransmission_cnt
+0x40ca mem_next_btclk
+0x40ce mem_rf_rccal
+0x40cf mem_handle_num
+0x40d0 mem_max_slot
+0x40d1 mem_eir_enable
+0x40d2 mem_afh_instant
+0x40d6 mem_afh_error_total
+0x40d8 mem_afh_cfg
+0x40d9 mem_afh_new_mod
+0x40da mem_afh_map_lo
+0x40df mem_afh_map_hi
+0x40e4 mem_afh_used
+0x40e5 mem_afh_index
+0x40e7 mem_afh_map_new
+0x40f2 mem_afh_map
+0x4142 mem_afh_timer
+0x4146 mem_afh_classify_channel_map
+0x4150 mem_chip_functions
+0x4152 mem_lpm_wake_lock
+0x4154 mem_lpm_interval
+0x4156 mem_lpm_overhead
+0x4157 mem_lpm_hibernate_switch
+0x4158 mem_esco_addr
+0x4159 mem_sniff_unint_lost
+0x415a mem_ptt
+0x415b mem_sleep_counter//should be 0x41fc in REVC
+0x415f mem_sleep_counter_all
+0x4163 mem_sleep_clkn
+0x4169 mem_sniff_rcv
+0x416c mem_sniff_lost
+0x416f mem_clks_per_lpo
+0x4172 mem_lpm_mult
+0x4173 mem_lpm_mult_timeout
+0x4174 mem_lpm_mult_cnt
+0x4175 mem_lpm_config
+0x4178 mem_lpm_xtalcnt
+0x4179 mem_lpm_buckcnt
+0x417a mem_lpm_ldocnt
+0x417b mem_lpm_isogate
+0x417c mem_lpm_isogate_final
+0x417d mem_saved_gpio// should be 0x421e in REVC
+0x418d mem_saved_gsel
+0x4190 mem_saved_mark
+0x4198 mem_saved_spidctrl
+0x4199 mem_patch_ptr
+0x419b mem_patch_len
+0x419d mem_timers
+0x41bd mem_link_key_exists
+0x41be mem_link_key
+0x41ce mem_hci_cmd
+0x41cf mem_hci_conn_handle
+0x41d0 mem_hci_plap
+0x41d3 mem_hci_puap
+0x41d4 mem_hci_pnap
+0x41d6 mem_uartd_rxitems_got_data
+0x41d7 mem_uartd_rxitems_threshold
+0x41d8 mem_uartd_rx_timeout
+0x41da mem_loadcode_times
+0x41db mem_tx_lch
+0x41dc mem_tx_len
+0x41de mem_tx_power
+0x41df mem_context_number
+0x41e0 mem_250k_freq_enable
+0x41e1 mem_rf_init_data
+0x41e2 mem_app_handshake_flag
+0x41e3 mem_sniff_param_interval
+0x41e5 mem_sniff_param_attempt
+0x41e7 mem_sniff_param_timeout
+0x41e9 mem_cb_check_wakelock
+0x41eb mem_cb_before_hibernate
+0x41ed mem_cb_before_lpm
+0x41ef mem_cb_le_process
+0x41f1 mem_cb_bt_process
+0x41f3 mem_cb_idle_process
+0x41f5 mem_cb_bb_event_process
+0x41f7 mem_cb_discovry_timeout
+0x41f9 mem_cb_att_write
+0x41fb mem_cb_ble_transmit
+0x41fd mem_cb_event_timer
+0x41ff mem_cb_bt_set_mult
+0x4201 mem_cb_spi_flash_write_complate
+0x4203 mem_eeprom_base
+0x4205 mem_unsniff2sniff_timer_count
+0x4206 mem_wake_up_delay_timer
+0x4207 mem_app_connection_options
+0x4208 mem_app_disconn_reason
+0x420a mem_app_disconn_reason_flag
+0x420c mem_lpm_delay_after_sniff
+0x4210 mem_xrecord_mode
+0x4211 mem_eeprom_block_size
+0x4212 mem_spi_init_clk
+0x4213 mem_spi_init_delay_time
+0x4214 mem_spi_ncs_gpio
+0x4215 mem_nv_data_ptr
+0x4217 mem_nv_data_number
+0x4218 mem_queue_ptr
+0x421a mem_ui_led_struct_num
+0x421b mem_ui_led_struct_ptr
+0x421d mem_0_5_adc_io_data
+0x421f mem_1v_adc_hvin_data
+0x4221 mem_2v_adc_vinlpm_data
+0x4223 mem_1v_adc_io_data
+0x4225 mem_5v_adc_hvin_data
+0x4227 mem_3v_adc_vinlpm_data
+0x4229 mem_otp_adc_flag
+0x422b mem_reference_voltage
+0x422d mem_adc_config_flag
+0x422e mem_adc_channel
+0x422f mem_adc_current_value
+0x4231 mem_adc_power_flag//bit0:low power falg ; bit1:no power flag
+0x4232 mem_spi_write_addr
+0x4235 mem_spi_write_ptr
+0x4237 mem_spi_write_len
+0x4239 mem_spi_write_flash_sm
+0x423a mem_eeprom_wp_gpio
+0x423b mem_kscan_ptr
+0x423d mem_key_num_ptr
+0x423d mem_keyscan_ptr
+0x423f mem_power_param_ptr
+0x4241 mem_24g_head_ptr
+0x4243 mem_baud
+0x4245 mem_hci_lt_rx_state
+0x4246 mem_l2cap_xmem_start
+0x4246 mem_l2cap_tx_multi_offset//0 means single packet
+0x4248 mem_sdp_remote_cid
+0x424a mem_rfcomm_remote_cid
+0x424c mem_hid_ctrl_remote_cid
+0x424e mem_hid_int_remote_cid
+0x4250 mem_sdp_state
+0x4251 mem_rfcomm_state
+0x4252 mem_hid_control_state
+0x4253 mem_hid_interrupt_state
+0x4254 mem_spp_state
+0x4255 mem_ML2CAP_comm_id
+0x4256 mem_used_map
+0x4257 mem_tx_fifo0
+0x4257 mem_tx_fifo0_map
+0x4258 mem_tx_fifo0_ptr
+0x425a mem_tx_fifo1
+0x425a mem_tx_fifo1_map
+0x425b mem_tx_fifo1_ptr
+0x425d mem_tx_fifo2
+0x425d mem_tx_fifo2_map
+0x425e mem_tx_fifo2_ptr
+0x4260 mem_tx_fifo3
+0x4260 mem_tx_fifo3_map
+0x4261 mem_tx_fifo3_ptr
+0x4263 mem_tx_fifo_end
+0x4263 mem_l2cap_lpm_txbuf
+0x4363 mem_l2cap_flow_ctrl_flag
+0x4364 mem_l2cap_pending_item
+0x4365 mem_l2cap_xmem_end
+0x4365 mem_le_dsniff
+0x4367 mem_le_conn_interval
+0x4369 mem_le_scan_enable
+0x436a mem_le_scan_interval
+0x436c mem_le_scan_window
+0x436e mem_le_adv_enable
+0x436f mem_le_adv_data_len
+0x4370 mem_le_adv_data
+0x438f mem_le_scan_data_len
+0x4390 mem_le_scan_data
+0x43af mem_le_name_len
+0x43b0 mem_le_name
+0x43ce mem_le_new_map
+0x43d3 mem_le_new_param
+0x43d3 mem_le_new_transmitwindowsize
+0x43d4 mem_le_new_transmitwindowoffset
+0x43d6 mem_le_new_conninterval
+0x43d8 mem_le_new_connslavelatency
+0x43da mem_le_new_connsupervisiontimeout
+0x43dc mem_le_txheader
+0x43dd mem_le_txlen
+0x43de mem_le_txpayload
+0x43e0 mem_le_txcid
+0x43e2 mem_le_l2cap
+0x43e3 mem_le_l2cap_response
+0x43e4 mem_le_txbdy
+0x4403 mem_le_pcnt_tx
+0x4408 mem_le_pcnt_rx
+0x440d mem_le_last_mic
+0x4411 mem_le_ivm
+0x4415 mem_le_ivs
+0x4419 mem_le_ltk
+0x4429 mem_ltk_exists
+0x442a mem_le_rconfirm
+0x443a mem_le_srand
+0x444a mem_le_iat
+0x444b mem_le_rat
+0x444c mem_le_preq
+0x444d mem_le_preq_iocap
+0x444e mem_le_preq_oob
+0x444f mem_le_preq_auth
+0x4450 mem_le_preq_max_keysize
+0x4451 mem_le_preq_init_key_distribution
+0x4452 mem_le_preq_resp_key_distribution
+0x4453 mem_le_pres
+0x4454 mem_le_pres_iocap
+0x4455 mem_le_pres_oob
+0x4456 mem_le_pres_auth
+0x4457 mem_le_pres_max_keysize
+0x4458 mem_le_pres_init_key_distribution
+0x4459 mem_le_pres_resp_key_distribution
+0x445a mem_le_search_handle_start
+0x445c mem_le_search_handle_end
+0x445e mem_le_att_offset
+0x445e mem_le_search_att_type_length
+0x445f mem_le_search_att_type
+0x446f mem_le_notify_handle
+0x4471 mem_le_search_uuid_length
+0x4472 mem_le_search_uuid
+0x4482 mem_le_adv_param
+0x4482 mem_le_adv_interval
+0x4484 mem_le_adv_type
+0x4485 mem_le_adv_own_addr_type
+0x4486 mem_le_adv_direct_addr_type
+0x4487 mem_le_adv_direct_addr
+0x448d mem_le_adv_channel_map
+0x448e mem_le_conn_param
+0x448e mem_le_conn_peer_addr_type
+0x448f mem_le_conn_peer_addr
+0x4495 mem_le_conn_own_addr_type
+0x4496 mem_le_interval_min
+0x4498 mem_le_interval_max
+0x449a mem_le_latency
+0x449c mem_le_timeout
+0x449e mem_le_scan_params
+0x449e mem_le_scan_type
+0x449f mem_le_scan_own_addr_type
+0x44a0 mem_le_lap
+0x44a3 mem_le_uap
+0x44a4 mem_le_nap
+0x44a6 mem_le_local_mtu
+0x44a8 mem_le_remote_mtu
+0x44aa mem_le_skdm
+0x44b2 mem_le_skds
+0x44ba mem_le_init_superto
+0x44bc mem_ui_le_uuid_table
+0x44be mem_le_secure_connect_enable
+0x44bf mem_le_secure_connect_flag
+0x44c0 mem_le_sc_calc
+0x44c1 mem_le_secure_connect_state
+0x44c2 mem_le_sc_confirm_gkey_flag
+0x44c3 mem_le_sc_local_key_invalid
+0x44c4 mem_le_pairing_state
+0x44c5 mem_le_enc_state
+0x44c6 mem_le_pairing_mode
+0x44c7 mem_le_tk
+0x44cb mem_le_ediv
+0x44cd mem_le_rand
+0x44d5 mem_le_irk
+0x44e5 mem_le_transmit_window
+0x44e9 mem_le_configuration
+0x44ea mem_le_fixed_ltk
+0x44fa mem_le_pairing_handle
+0x44fc mem_le_l2cap_size
+0x44fe mem_le_packet_len_recved
+0x44ff mem_le_tx_buff_used
+0x4500 mem_le_tx_ptr0
+0x4502 mem_le_tx_ptr1
+0x4504 mem_le_tx_ptr2
+0x4506 mem_le_tx_ptr3
+0x4508 mem_le_signaling_identifier
+0x4509 mem_le_l2cap_signaling_conn_param_update_rsp_result
+0x450b mem_le_packet_size
+0x450c mem_le_packet_llid
+0x450d mem_le_payload_ptr
+0x450f mem_le_md_count
+0x4510 mem_lmp_version
+0x4513 mem_lmp_subversion
+0x4515 mem_local_name_length
+0x4516 mem_local_name
+0x4519 mem_local_name2
+0x4559 mem_local_name_end
+0x455a mem_unsniff2sniff_timer
+0x455b mem_switch_flag
+0x455c mem_classic_bt_flag
+0x455d mem_pn_dlci
+0x455e mem_pn_max_frame_size
+0x4560 memFCStemp1
+0x4561 memFCStemp2
+0x4562 memFCStemp3
+0x4563 mem_rfcomm_initiator
+0x4564 mem_remote_spp_channel
+0x4565 mem_HIUfcs_SPP
+0x4566 mem_HIUfcs_SPP_WCredits
+0x4567 mem_rfcomm_send_more_pkt
+0x4568 mem_remote_credits
+0x4569 mem_credit_given
+0x456a mem_ms_channel
+0x456b mem_credit_flag
+0x456c mem_rfcomm_max_frame_size
+0x456e mem_rfcomm_credit_init_data
+0x456f mem_cb_receive_spp_data
+0x4571 mem_nl_rx_data_src
+0x4573 mem_nl_rx_len_all
+0x4575 mem_ui_uuid_table
+0x4577 mem_all_uuid_16bits
+0x458d mem_all_uuid_128bits
+0x45af mem_sdp_l2capch_ptr
+0x45b1 mem_sp_local_key_invalid
+0x45b2 mem_le_private_key_256
+0x45d2 mem_le_pubkey_local_x_256
+0x45f2 mem_le_pubkey_local_y_256
+0x4612 mem_sp_private_key
+0x462a mem_sp_pubkey_local
+0x462a mem_sp_pubkey_local_x
+0x4642 mem_sp_pubkey_local_x_end
+0x4642 mem_sp_pubkey_local_y
+0x465a mem_ssp_enable
+0x465b mem_sp_iocap_local
+0x465e mem_sp_iocap_remote
+0x4661 mem_flag_mode_ssp_pin
+0x4662 mem_ssp_mode_flag
+0x4663 mem_authentication_passkey_times
+0x4664 mem_passkey_1bit
+0x4665 mem_flag_pairing_state
+0x4666 mem_ipc_lock_bt
+0x4667 mem_ipc_lock_c51
+0x4668 mem_ipc_fifo_bt2c51
+0x4670 mem_ipc_fifo_c512bt
+0x4678 mem_ui_button_timer
+0x4679 mem_ui_button_last_state
+0x467a mem_ui_timer_last_btclk
+0x467e mem_discovery_timeout_timer_count
+0x4680 mem_hid_handshake_timer_count
+0x4681 memui_reconnect_mode
+0x4682 mem_ui_state_map
+0x4684 mem_ui_profile_supported
+0x4685 mem_ui_button_timeout
+0x4686 mem_ui_button_gpio
+0x4687 mem_discovery_timeout
+0x4689 mem_pin_length
+0x468a mem_pin
+0x469a mem_antl_lpm_interval
+0x469c mem_antl_adv_interval
+0x469e mem_antl_slow_adv_lpm_interval
+0x46a0 mem_antl_slow_adv_adv_interval
+0x46a2 mem_antl_led_style
+0x46a2 mem_antl_led_type
+0x46a3 mem_antl_led_blink_count
+0x46a4 mem_antl_led_gpio
+0x46a5 mem_antl_led_on_time
+0x46a7 mem_antl_led_off_time
+0x46a9 mem_antl_led_cb_on
+0x46ab mem_antl_led_cb_off
+0x46ad mem_antl_buzzer_style
+0x46ad mem_antl_buzzer_type
+0x46ae mem_antl_buzzer_blink_count
+0x46af mem_antl_buzzer_gpio
+0x46b0 mem_antl_buzzer_on_time
+0x46b2 mem_antl_buzzer_off_time
+0x46b4 mem_antl_buzzer_cb_on
+0x46b6 mem_antl_buzzer_cb_off
+0x46b8 mem_antl_fast_adv_led_style
+0x46b8 mem_antl_fast_adv_led_type
+0x46b9 mem_antl_fast_adv_led_blink_count
+0x46ba mem_antl_fast_adv_led_gpio
+0x46bb mem_antl_fast_adv_led_on_time
+0x46bd mem_antl_fast_adv_led_off_time
+0x46bf mem_antl_slow_adv_led_style
+0x46bf mem_antl_slow_adv_led_type
+0x46c0 mem_antl_slow_adv_led_blink_count
+0x46c1 mem_antl_slow_adv_led_gpio
+0x46c2 mem_antl_slow_adv_led_on_time
+0x46c4 mem_antl_slow_adv_led_off_time
+0x46c6 mem_antl_power_starting_led_style
+0x46c6 mem_antl_power_starting_led_type
+0x46c7 mem_antl_power_starting_led_blink_count
+0x46c8 mem_antl_power_starting_led_gpio
+0x46c9 mem_antl_power_starting_led_on_time
+0x46cb mem_antl_power_starting_led_off_time
+0x46cd mem_antl_power_starting_buzzer_style
+0x46d4 mem_antl_power_off_led_style
+0x46d4 mem_antl_power_off_led_type
+0x46d5 mem_antl_power_off_led_link_count
+0x46d6 mem_antl_power_off_led_gpio
+0x46d7 mem_antl_power_off_led_on_time
+0x46d9 mem_antl_power_off_led_off_time
+0x46db mem_antl_power_off_buzzer_style
+0x46db mem_antl_power_off_buzzer_type
+0x46dc mem_antl_power_off_buzzer_link_count
+0x46dd mem_antl_power_off_buzzer_gpio
+0x46de mem_antl_power_off_buzzer_on_time
+0x46e0 mem_antl_power_off_buzzer_off_time
+0x46e2 mem_antl_alert_led_stlye
+0x46e9 mem_antl_alert_buzzer_stlye
+0x46e9 mem_antl_alert_buzzer_type
+0x46ea mem_antl_alert_buzzer_blink_count
+0x46eb mem_antl_alert_buzzer_gpio
+0x46ec mem_antl_alert_buzzer_on_time
+0x46ee mem_antl_alert_buzzer_off_time
+0x46f0 mem_antl_key_led_style
+0x46f0 mem_antl_key_led_type
+0x46f1 mem_antl_key_led_blink_count
+0x46f2 mem_antl_key_led_gpio
+0x46f3 mem_antl_key_led_on_time
+0x46f5 mem_antl_key_led_off_time
+0x46f7 mem_antl_key_buzzer_style
+0x46fe mem_antl_queue_width
+0x46ff mem_antl_queue_depth
+0x4700 mem_antl_queue_curr_num
+0x4701 mem_antl_queue_read_ptr
+0x4702 mem_antl_queue_write_ptr
+0x4703 mem_antl_queue_buff
+0x4753 mem_antl_key_scan_enable
+0x4754 mem_antl_led_num
+0x4755 mem_antl_led_gpio_map
+0x4759 mem_antl_power_param
+0x4759 mem_antl_power_state
+0x475a mem_antl_power_timer
+0x475b mem_antl_power_off_timeout
+0x475c mem_antl_power_starting_timeout
+0x475d mem_antl_power_off_cb
+0x475f mem_antl_power_starting_cb
+0x4761 mem_antl_power_standby_cb
+0x4763 mem_event_button_up_cb
+0x4765 mem_antl_key_num
+0x4766 mem_cb_antl_key
+0x4768 mem_antl_key_conf0
+0x476c mem_antl_key0_press
+0x477b mem_antl_key0_release
+0x478a mem_antl_conn_updata_procedure_state
+0x478b mem_client_characteristic_configuration_descriptor
+0x478d mem_adc_timer
+0x478f mem_antl_conn_update_timer
+0x4790 mem_antl_send_updata_le_param_timer
+0x4791 mem_antl_le_sleep_timer
+0x4793 mem_antl_fast_adv_timer
+0x4795 mem_antl_fast_adv_timeout
+0x4797 mem_antl_le_sleep_timeout
+0x4799 mem_double_click_timer
+0x479a mem_butten_click_cnt
+0x479b mem_antl_led_state
+0x479c mem_antl_buzzer_state
+0x479d mem_antl_key_state
+0x479e mem_antl_lost_mode
+0x479f mem_alarm_config
+0x47a0 mem_alarm_config_notfy_cnt
+0x47a1 mem_buzzer_pwm_conf
+0x47a7 mem_adc_timeout
+0x47a9 mem_voltage_remain_percent
+0x47aa mem_battery_calculate_set
+0x47aa mem_battery_full_voltage
+0x47ac mem_battery_empty_voltage
+0x47ae mem_battery_low_voltage
+0x47b0 mem_battery_current_voltage
+0x47b2 mem_rx_window_sniff_inc
+0x47b4 mem_interval_increment
+0x47b6 mem_antl_le_interval_min
+0x47b8 mem_antl_le_interval_max
+0x47ba mem_antl_le_latency
+0x47bc mem_antl_le_timeout
+0x47be mem_antl_le_unnormal_interval_min
+0x47c0 mem_antl_le_unnormal_interval_max
+0x47c2 mem_antl_le_unnormal_latency
+0x47c4 mem_antl_le_unnormal_timeout
+0x47c6 mem_AntiLost_le_att_list
+0x469a mem_car_hard_soft_switch
+0x469b mem_car_queue_each_size
+0x469c mem_car__queue_length
+0x469d mem_car_queue_curr_num
+0x469e mem_car_queue_read_ptr
+0x469f mem_car_queue_write_ptr
+0x46a0 mem_car_queue_ele
+0x4718 mem_car_pop_queue_buff
+0x472c mem_car_led_num
+0x472d mem_car_led_map
+0x4737 mem_car_style1_led_type
+0x4738 mem_car_style1_blink_count
+0x4739 mem_car_style1_struct_led_gpio
+0x473a mem_car_style1_on_time
+0x473c mem_car_style1_off_time
+0x473e mem_car_style1_cb_ledon
+0x4740 mem_car_style1_cb_ledoff
+0x4742 mem_car_style2_led_type
+0x4743 mem_car_style2_blink_count
+0x4744 mem_car_style2_struct_led_gpio
+0x4745 mem_car_style2_on_time
+0x4747 mem_car_style2_off_time
+0x4749 mem_car_style2_cb_ledon
+0x474b mem_car_style2_cb_ledoff
+0x474d mem_le_receive_data
+0x474d mem_le_receive_packet_head
+0x474f mem_le_receive_cmd
+0x4750 mem_le_receive_length
+0x4752 mem_le_receive_payload
+0x475c mem_le_receive_checksum
+0x475d mem_motor1_status
+0x475e mem_motor1_speed
+0x475f mem_motor2_status
+0x4760 mem_motor2_speed
+0x4761 mem_motor3_status
+0x4762 mem_motor3_speed
+0x4763 mem_motor1_pwm_set
+0x4763 mem_motor1_pwm_pin1_set
+0x4764 mem_motor1_pwm_pin2_set
+0x4765 mem_motor1_pwm_pin_set
+0x4766 mem_motor1_pwm_channel_set
+0x4767 mem_motor1_pwm_freq_set
+0x476a mem_motor1_pwm_dute_set
+0x476b mem_motor2_pwm_set
+0x476b mem_motor2_pwm_pin1_set
+0x476c mem_motor2_pwm_pin2_set
+0x476d mem_motor2_pwm_pin_set
+0x476e mem_motor2_pwm_channel_set
+0x476f mem_motor2_pwm_freq_set
+0x4772 mem_motor2_pwm_dute_set
+0x4773 mem_motor3_pwm_set
+0x4773 mem_motor3_pwm_pin1_set
+0x4774 mem_motor3_pwm_pin2_set
+0x4775 mem_motor3_pwm_pin_set
+0x4776 mem_motor3_pwm_channel_set
+0x4777 mem_motor3_pwm_freq_set
+0x477a mem_motor3_pwm_dute_set
+0x477b mem_motor_select_p_n
+0x477c mem_car_motor_status
+0x477d mem_car_motor_speed
+0x477e mem_motor_pwm_set
+0x477e mem_motor_pwm_pin1_set
+0x477f mem_motor_pwm_pin2_set
+0x4780 mem_motor_pwm_pin_set
+0x4781 mem_motor_pwm_channel_set
+0x4782 mem_motor_pwm_freq_set
+0x4785 mem_motor_pwm_dute_set
+0x4786 mem_ir_rx_gpio
+0x4787 mem_ir_data
+0x4789 mem_ir_rx_buf
+0x478b mem_ir_receive_clkn
+0x478f mem_ir_notify_data
+0x4792 mem_ir_notify_data_head
+0x4797 mem_ir_notify_data_payload
+0x4799 mem_ir_notify_data_check_sum
+0x479a mem_car_ir_breakdown_check_timer
+0x479b mem_car_ir_breakdown_flag
+0x479c mem_car_led_control
+0x479c mem_car_led1_status
+0x479d mem_car_led2_status
+0x479e mem_car_led3_status
+0x479f mem_car_led4_status
+0x47a0 mem_car_led5_status
+0x47a1 mem_car_led6_status
+0x47a2 mem_car_led7_status
+0x47a3 mem_car_led8_status
+0x47a4 mem_car_led_control_timer
+0x47a5 mem_car_led_blink_status
+0x47a6 mem_car_led_no
+0x47a7 mem_car_info_request
+0x47aa mem_car_info_request_head
+0x47af mem_car_info_request_payload
+0x47b7 mem_car_info_request_checksum
+0x47b8 mem_car_config_param
+0x47b8 mem_car_config_setting_flag
+0x47b9 mem_car_config_device_select
+0x47ba mem_car_config_motor_layout
+0x47bb mem_car_config_ir_enable
+0x47bc mem_car_config_ir_rx_gpio
+0x47bd mem_car_config_pairing_led_conn_status
+0x47be mem_car_config_pairing_led_gpio
+0x47bf mem_car_config_led_num
+0x47c0 mem_car_config_blood_led_gpio
+0x47c0 mem_car_config_blood_led1_gpio
+0x47c1 mem_car_config_blood_led2_gpio
+0x47c2 mem_car_config_blood_led3_gpio
+0x47c3 mem_car_config_blood_led4_gpio
+0x47c4 mem_car_config_blood_led5_gpio
+0x47c5 mem_car_config_blood_led6_gpio
+0x47c6 mem_car_config_blood_led7_gpio
+0x47c7 mem_car_config_blood_led8_gpio
+0x47c8 mem_car_config_bat_notify_enable
+0x47c9 mem_car_config_low_voltage_led_gpio
+0x47ca mem_car_config_low_voltage_percent
+0x47cb mem_car_config_soft_switch_enable
+0x47cc mem_car_config_soft_switch_gpio
+0x47cd mem_car_notify_vdd_count
+0x47ce mem_car_notify_vdd_timer
+0x47cf mem_car_notify_vdd_value_last
+0x47d0 mem_car_notify_vdd_percent
+0x47d1 mem_car_working_flag
+0x47d2 mem_low_bat_flag
+0x47d3 mem_notify_bat_packet
+0x47d6 mem_notify_bat_head
+0x47db mem_notify_bat_payload
+0x47dc mem_notify_bat_check_sum
+0x47dd mem_vdd_notify_flag
+0x47de mem_car_current_vdd_value_temp
+0x47e0 mem_car_last_vdd_value
+0x47e2 mem_vdd_calculate_set
+0x47e2 mem_vdd_full_vol
+0x47e4 mem_vdd_empty_vol
+0x47e6 mem_vdd_low_vol
+0x47e8 mem_vdd_now_vol
+0x47ea mem_car_24g_status
+0x47eb mem_car_24g_no_data_timeout_count
+0x47ed mem_car_24g_no_data_timeout_timer
+0x47ef mem_car_24g_ir_receive_attack_count
+0x47f0 mem_car_24g_go_die_flag
+0x47f1 mem_car_attack_shake_timer
+0x47f2 mem_car_attack_shake_flag
+0x47f3 mem_car_soft_power
+0x47f3 mem_car_power_state
+0x47f4 mem_car_power_timer
+0x47f5 mem_car_power_off_timeout
+0x47f6 mem_car_power_starting_timeout
+0x47f7 mem_car_power_off_cb
+0x47f9 mem_car_power_starting_cb
+0x47fb mem_car_power_standby_cb
+0x47fd mem_car_ui_button_up_cb
+0x47ff mem_car_le_att_list
+0x49f3 mem_car_moto1_blank_timer
+0x49f4 mem_car_moto2_blank_timer
+0x49f5 mem_car_moto3_blank_timer
+0x49f6 mem_car_24g_received_pac
+0x49f7 mem_24g_car_head_ptr
+0x469a mem_light_pwm0
+0x469b mem_light_pwm1
+0x469c mem_light_pwm2
+0x469d mem_light_pwm3
+0x469e mem_light_pwm4
+0x469f mem_light_pwm5
+0x46a0 mem_light_pairing_enable
+0x46a1 mem_light_pairing_timer
+0x46a3 mem_light_cnum
+0x46a4 mem_light_next_record
+0x46a5 mem_light_clist
+0x46f5 mem_light_crr_cmd_count
+0x46f6 mem_curr_packet_num
+0x469a mem_lightc_led_gpio
+0x469b mem_lightc_row
+0x46a1 mem_lightc_col
+0x46a7 mem_adv_time
+0x46a8 mem_cmd0_string
+0x46bc mem_cmd1_string
+0x46d0 mem_cmd2_string
+0x46e4 mem_cmd3_string
+0x46f8 mem_cmd4_string
+0x470c mem_cmd5_string
+0x4720 mem_cmd6_string
+0x4734 mem_cmd7_string
+0x4748 mem_cmd8_string
+0x475c mem_cmd9_string
+0x4770 mem_cmd10_string
+0x4784 mem_cmd11_string
+0x4798 mem_cmd12_string
+0x47ac mem_cmd13_string
+0x47c0 mem_cmd14_string
+0x47d4 mem_cmd15_string
+0x47e8 mem_cmd16_string
+0x47fc mem_cmd17_string
+0x4810 mem_cmd18_string
+0x4824 mem_cmd19_string
+0x4838 mem_cmd20_string
+0x469a mem_soft_version_num
+0x469c mem_module_wake_up_gpio
+0x469d mem_module_state_gpio
+0x469e mem_module_connect_state_gpio
+0x469f mem_current_packet_length
+0x46a1 mem_module_state
+0x46a2 mem_module_mcu_wake_pin
+0x46a3 mem_module_mcu_wake_delay_us
+0x46a7 mem_module_spp_lpm_mult
+0x46a8 mem_module_le_lpm_mult
+0x46a9 mem_module_bluetooth_stauts_by_command
+0x46aa mem_module_uart_rx_buffer
+0x46ac mem_module_uart_rx_buffer_end
+0x46ae mem_module_uart_tx_buffer
+0x46b0 mem_module_uart_tx_buffer_end
+0x46b2 mem_module_read_vdd_flag
+0x46b3 mem_module_read_vdd_count
+0x46b4 mem_module_vdd_quotient
+0x46b5 mem_module_vdd_remainder
+0x46b6 mem_module_le_rx_data_len
+0x46b7 mem_module_le_rx_data_address
+0x46b9 mem_module_le_rx_data_handle
+0x46bb mem_module_data_write_handle
+0x46bd mem_module_data_write_handle2
+0x46bf mem_module_flag
+0x46c0 mem_module_hci_notify_len
+0x46c1 mem_module_hci_notify_handle
+0x46c3 mem_module_hci_nofiy_addr
+0x46c5 mem_last_transmite_clock
+0x46c9 mem_module_uuid_list
+0x47f5 mem_module_uuid_list_end
+0x47f5 mem_module_le_att_list
+0x4a4d mem_module_le_att_list_end
+0x4a4d mem_module_nv_data
+0x4a4d mem_module_nv_data0
+0x4a6f mem_module_nv_data1
+0x4a91 mem_module_nv_data2
+0x4ab3 mem_module_nv_data3
+0x4ad5 mem_module_nv_data4
+0x469a mem_remote_car_hard_soft_switch
+0x469b mem_remote_car_queue_each_size
+0x469c mem_remote_car_queue_length
+0x469d mem_remote_car_queue_curr_num
+0x469e mem_remote_car_queue_read_ptr
+0x469f mem_remote_car_queue_write_ptr
+0x46a0 mem_remote_car_queue_ele
+0x46fa mem_remote_style_led_type
+0x46fb mem_remote_style_blink_count
+0x46fc mem_remote_style_struct_led_gpio
+0x46fd mem_remote_style_on_time
+0x46ff mem_remote_style_off_time
+0x4701 mem_remote_style_cb_ledon
+0x4703 mem_remote_style_cb_ledoff
+0x4705 mem_remote_car_led_num
+0x4706 mem_remote_car_led_map
+0x470e mem_remote_car_keyscan
+0x470e mem_remote_car_key_num
+0x470f mem_cb_remote_car_keyscan
+0x4711 mem_remote_car_key_conf0
+0x4711 mem_remote_car_key_conf0_pin
+0x4712 mem_remote_car_key_conf1
+0x4712 mem_remote_car_key_conf1_pin
+0x4713 mem_remote_car_key_conf2
+0x4713 mem_remote_car_key_conf2_pin
+0x4714 mem_remote_car_key_conf3
+0x4714 mem_remote_car_key_conf3_pin
+0x4715 mem_remote_car_key_conf4
+0x4715 mem_remote_car_key_conf4_pin
+0x4716 mem_remote_car_key_conf5
+0x4716 mem_remote_car_key_conf5_pin
+0x4717 mem_remote_car_key_conf6
+0x4717 mem_remote_car_key_conf6_pin
+0x4718 mem_rocker_negative_flag
+0x4719 mem_rocker_work_status
+0x471a mem_current_vdd_value_default_mid_x
+0x471c mem_current_vdd_value_default_mid_y
+0x471e mem_current_vdd_value_default_mid_temp
+0x4720 mem_current_vdd_default_range
+0x4722 mem_rocker_last_status
+0x4724 mem_rocker_status
+0x4724 mem_rocker_x_status
+0x4725 mem_rocker_y_status
+0x4726 mem_remote_car_config_param
+0x4726 mem_remote_car_config_setting_flag
+0x4727 mem_remote_car_config_key_map
+0x4728 mem_remote_car_config_layout
+0x4729 mem_remote_car_config_connect_led_gpio
+0x472a mem_remote_car_config_check_way
+0x472b mem_remote_car_config_soft_switch_enable
+0x472c mem_remote_car_config_soft_switch_gpio
+0x472d mem_remote_car_config_timeout_shutdown_enable
+0x472e mem_remote_car_24g_motor_packet
+0x472e mem_remote_car_24g_motor_packet_lenght
+0x472f mem_remote_car_24g_motor_send_packet_head
+0x4731 mem_remote_car_24g_motor_send_cmd
+0x4732 mem_remote_car_24g_motor_send_length
+0x4734 mem_remote_car_24g_motor_send_payload
+0x4734 mem_remote_car_24g_motor1_payload
+0x4736 mem_remote_car_24g_motor2_payload
+0x4738 mem_remote_car_24g_motor3_payload
+0x473a mem_remote_car_24g_motor_send_checksum
+0x473b mem_remote_car_24g_fire_packet
+0x473b mem_remote_car_24g_fire_packet_lenght
+0x473c mem_remote_car_24g_fire_send_packet_head
+0x473e mem_remote_car_24g_fire_send_cmd
+0x473f mem_remote_car_24g_fire_send_length
+0x4741 mem_remote_car_24g_fire_send_payload
+0x4743 mem_remote_car_24g_fire_send_checksum
+0x4744 mem_remote_car_24g_tx_temp
+0x4753 mem_remote_car_no_data_timeout
+0x4755 mem_remote_car_no_data_timer
+0x4757 mem_remote_car_soft_power
+0x4757 mem_remote_car_power_state
+0x4758 mem_remote_car_power_timer
+0x4759 mem_remote_car_power_off_timeout
+0x475a mem_remote_car_power_starting_timeout
+0x475b mem_remote_car_power_off_cb
+0x475d mem_remote_car_power_starting_cb
+0x475f mem_remote_car_power_standby_cb
+0x4761 mem_remote_key_status
+0x4762 mem_remote_car_24g_status
+0x4763 mem_remote_car_24g_auto_work_step
+0x4764 mem_remote_car_24g_pair_success_flag
+0x4765 mem_remote_car_24g_enter_lpm_enable
+0x4766 mem_remote_car_empty_packet
+0x4767 mem_24g_RC_head_ptr
+0x469a mem_shutter_bluetooth_type
+0x469b mem_shutter_config_enable
+0x469c mem_shutter_config_otp_base_address
+0x469e mem_shutter_config_size
+0x469f mem_shutter_config_select_gpio1
+0x46a0 mem_shutter_config_select_gpio2
+0x46a1 mem_shutter_config_select_gpio3
+0x46a2 mem_shutter_config_user_otp_address
+0x46a4 mem_shutter_config_eeprom_offset_addr
+0x46a6 mem_shutter_config_eeprom_start_flag
+0x46a8 mem_shutter_config_user_size
+0x46a9 mem_shutter_config_label
+0x46aa mem_shutter_config_otp_addr
+0x46ac mem_classic_shutter_cable_unplug_conut
+0x46ad mem_classic_shutter_hid_disconn_count
+0x46ae mem_classic_shutter_random_mac_offset_addr
+0x46b0 mem_ble_shutter_enable_notify
+0x46b1 mem_ble_shutter_reconn_dav_interval
+0x46b3 mem_ble_shutter_discovery_adv_interval
+0x46b5 mem_ble_shutter_reconn_timeout
+0x46b7 mem_ble_shutter_reconn_timer
+0x46b9 mem_ble_shutter_reconn_blink_on_time
+0x46bb mem_ble_shutter_reconn_blink_off_time
+0x46bd mem_ble_shutter_discovery_blink_on_time
+0x46bf mem_ble_shutter_discovery_blink_off_time
+0x46c1 mem_ble_shutter_interval_min
+0x46c3 mem_ble_shutter_interval_max
+0x46c5 mem_ble_shutter_latency
+0x46c7 mem_ble_shutter_timeout
+0x46c9 mem_ble_shutter_interval_min_new
+0x46cb mem_ble_shutter_interval_max_new
+0x46cd mem_ble_shutter_latency_new
+0x46cf mem_ble_shutter_timeout_new
+0x46d1 mem_classic_shutter_discovery_timeout
+0x46d3 mem_classic_shutter_connect_timeout
+0x46d5 mem_ble_shutter_discovery_timeout
+0x46d7 mem_ble_shutter_connect_timeout
+0x46d9 mem_shutter_sleep_timeout
+0x46db mem_shutter_sleep_timer
+0x46dd mem_shutter_hard_soft_switch_case
+0x46de mem_shutter_soft_switch_button_gpio
+0x46df mem_shutter_soft_switch_power_state
+0x46e0 mem_shutter_soft_switch_poweron_time
+0x46e1 mem_shutter_soft_switch_poweroff_time
+0x46e2 mem_shutter_soft_switch_poweron_callback_function
+0x46e4 mem_shutter_soft_switch_poweroff_callback_function
+0x46e6 mem_shutter_keyscan
+0x46e6 mem_shutter_key_num
+0x46e7 mem_cb_shutter_keycan
+0x46e9 mem_shutter_key_conf0
+0x46ea mem_shutter_key_conf1
+0x46eb mem_shutter_key_conf2
+0x46ec mem_shutter_key_conf3
+0x46ed mem_shutter_key_conf4
+0x46ee mem_shutter_key_conf5
+0x46ef mem_shutter_key_conf6
+0x46f0 mem_shutter_key_conf7
+0x46f1 mem_key0_press
+0x46f6 mem_key1_press
+0x46fb mem_key2_press
+0x4700 mem_key3_press
+0x4705 mem_key4_press
+0x470a mem_key5_press
+0x470f mem_key6_press
+0x4714 mem_key7_press
+0x4719 mem_key0_release
+0x471e mem_key1_release
+0x4723 mem_key2_release
+0x4728 mem_key3_release
+0x472d mem_key4_release
+0x4732 mem_key5_release
+0x4737 mem_key6_release
+0x473c mem_key7_release
+0x4741 mem_ble_data_buffer1
+0x4746 mem_ble_data_buffer2
+0x474b mem_ble_data_buffer3
+0x4750 mem_ble_data_buffer4
+0x4755 mem_ble_data_buffer5
+0x475a mem_ble_data_buffer6
+0x475f mem_ble_data_buffer7
+0x4764 mem_ble_data_buffer8
+0x4769 mem_ble_data_buffer9_58
+0x479b mem_classic_data_buffer
+0x47a0 mem_classic_data_buffer1
+0x47a5 mem_classic_data_buffer2
+0x47aa mem_classic_data_buffer3
+0x47af mem_classic_data_buffer4
+0x47b4 mem_classic_data_buffer5
+0x47b9 mem_classic_data_buffer6
+0x47be mem_classic_data_buffer7
+0x47c3 mem_classic_data_buffer8
+0x47c8 mem_classic_data_buffer9_58
+0x47fa mem_queue_each_size
+0x47fb mem_queue_length
+0x47fc mem_queue_curr_num
+0x47fd mem_queue_read_ptr
+0x47fe mem_queue_write_ptr
+0x47ff mem_queue_ele
+0x481f mem_shutter_nv_data
+0x48c9 mem_shutter_led_struct_app_led
+0x48c9 mem_shutter_led_struct_app_led_type
+0x48ca mem_shutter_led_struct_app_led_blink_count
+0x48cb mem_shutter_led_struct_app_led_gpio
+0x48cc mem_shutter_led_struct_app_led_on_time
+0x48ce mem_shutter_led_struct_app_led_off_time
+0x48d0 mem_shutter_led_struct_app_led_on_callback
+0x48d2 mem_shutter_led_struct_app_led_off_callback
+0x48d4 mem_shutter_power_off_led_style
+0x48d4 mem_shutter_power_off_led_style_type
+0x48d5 mem_shutter_power_off_led_style_blink_count
+0x48d6 mem_shutter_power_off_led_style_gpio
+0x48d7 mem_shutter_power_off_led_style_on_time
+0x48d9 mem_shutter_power_off_led_style_off_time
+0x48db mem_shutter_power_off_led_style_on_callback
+0x48dd mem_shutter_power_off_led_style_off_callback
+0x48df mem_shutter_soft_swtich_botton_down
+0x48e0 mem_shutter_soft_swtich_led_struct_temp
+0x48eb mem_shutter_power_off_timeout
+0x48ec mem_shutter_power_off_timer
+0x469a mem_mouse_key
+0x469b mem_mouse_x
+0x469d mem_mouse_y
+0x469f mem_mouse_z
+0x46a0 mem_mouse_tz
+0x46a1 mem_mouse_xy_h
+0x46a2 mem_sensor_shutter_hi
+0x46a3 mem_sensor_shutter_lo
+0x46a4 mem_sensor_smart_flag
+0x46a5 mem_sensor_squal_reg
+0x46a6 mem_sensor_iqc
+0x46a7 mem_mouse_move_flag
+0x46a8 mem_mouse_direct_timeout
+0x46aa mem_mouse_no_data_timeout
+0x46ac mem_mouse_discovery_timer
+0x46ae mem_mouse_direct_timer
+0x46b0 mem_mouse_no_data_timer
+0x46b2 mem_mouse_blank_data_timer
+0x46b4 mem_mouse_send_blank_timer
+0x46b5 mem_mouse_cpi_count
+0x46b6 mem_mouse_dpi_button_state
+0x46b7 mem_wheel_tb_old_pinlevel
+0x46b8 mem_wheel_tb_new_pinlevel
+0x46b9 mem_wheel_tog
+0x46ba mem_mouse_tz_data
+0x46bb mem_mouse_tz_data_count
+0x46bc mem_mouse_tz_data_count1
+0x46bd mem_mwheel_b_old_pinlevel
+0x46be mem_mwheel_b_new_pinlevel
+0x46bf mem_mwheel_tog
+0x46c0 mem_mouse_z_data
+0x46c1 mem_mouse_z_data_count
+0x46c2 mem_mouse_z_data_count1
+0x46c3 mem_reconn_mode
+0x46c4 mem_mouse_statue_led_timer
+0x46c5 mem_le_connect_status_flag
+0x46c6 mem_le_start_encrypt_timer
+0x46c7 mem_device_addr_temp
+0x46ce mem_adc_read_timer
+0x46cf mem_adc_low_volatage_led_timer_count
+0x46d0 mem_adc_reference_voltage
+0x46d2 mem_device_number
+0x46d3 mem_mouse_flag
+0x46d5 mem_mouse_function_enable
+0x46d7 mem_combination_select_device_timer_init
+0x46d8 mem_combination_select_device_count
+0x46d9 mem_select_device_button_statue
+0x46da mem_combination_ui_button_count
+0x46db mem_bt_discovey_button_statue
+0x46dc mem_sensor_reset_gpio
+0x46dd mem_sensor_id1
+0x46de mem_sensor_id2
+0x46df mem_mouse_dpi_led_delay_count
+0x46e0 mem_config_sensor_type
+0x46e1 mem_config_sensor_motion
+0x46e2 mem_lbutton_gpio
+0x46e3 mem_rbutton_gpio
+0x46e4 mem_mbutton_gpio
+0x46e5 mem_bk_button_gpio
+0x46e6 mem_fw_button_gpio
+0x46e7 mem_dpi_button_gpio
+0x46e8 mem_whee_a_data_gpio
+0x46e9 mem_whee_b_data_gpio
+0x46ea mem_whee_ta_data_gpio
+0x46eb mem_whee_tb_data_gpio
+0x46ec mem_config_bt_button_gpio
+0x46ed mem_config_select_device_button_gpio
+0x46ee mem_config_paraing_led_gpio
+0x46ef mem_config_low_voltage_alarm_gpio
+0x46f0 mem_config_device1_led_gpio
+0x46f1 mem_config_device2_led_gpio
+0x46f2 mem_config_device3_led_gpio
+0x46f3 mem_sensor_data_gpio
+0x46f4 mem_dpi_led_gpio
+0x46f5 mem_config_function_enable
+0x46f6 mem_config_sensor_angle
+0x46f7 mem_select_sensor_angle_gpio
+0x46f8 mem_select_adc_gpio
+0x46f9 mem_config_end
+0x46f9 mem_btclk_sensor
+0x46fd mem_wire_usb_interval
+0x46fe mem_mouse_mode_flag
+0x46ff mem_usb_addr
+0x4700 mem_flash_base
+0x4703 mem_24g_device_number
+0x4704 mem_24g_enter_lpm_timer
+0x4705 mem_mouse_1step_up_count
+0x4706 mem_mouse_2step_up_count
+0x4707 mem_24g_pairing_timer_count
+0x4709 mem_mouse_vdd_calculate_set
+0x4709 mem_mouse_vdd_full_vol
+0x470b mem_mouse_vdd_empty_vol
+0x470d mem_mouse_vdd_low_vol
+0x470f mem_mouse_vdd_now_vol
+0x4711 mem_mouse_sensor_timer_count
+0x4712 mem_sensor_led_style
+0x4713 mem_mouse_led_type
+0x4714 mem_mouse_blink_count
+0x4715 mem_mouse_struct_led_gpio
+0x4716 mem_mouse_on_time
+0x4718 mem_mouse_off_time
+0x471a mem_mouse_cb_ledon
+0x471c mem_mouse_cb_ledoff
+0x471e mem_reconn_times
+0x471f mem_reconn_times_init
+0x4720 mem_mouse_information_start
+0x4720 mem_device_flag
+0x4721 mem_device1_type
+0x4722 mem_device1_addr
+0x4728 mem_device1_link_key
+0x4738 mem_device1_locall_addr
+0x473e mem_device2_type
+0x473f mem_device2_addr
+0x4745 mem_device2_link_key
+0x4755 mem_device2_locall_addr
+0x475b mem_device3_type
+0x475c mem_device3_addr
+0x4762 mem_device3_link_key
+0x4772 mem_device3_locall_addr
+0x4778 mem_store_flag
+0x477a mem_mouse_dpi
+0x477b mem_mouse_24g_addr
+0x477f mem_mouse_information_end
+0x477f mem_mouse_dpi_seting
+0x477f mem_320x_dpi_1
+0x4780 mem_320x_dpi_2
+0x4781 mem_320x_dpi_3
+0x4782 mem_320x_dpi_4
+0x4783 mem_3212_dpi_1
+0x4784 mem_3212_dpi_2
+0x4785 mem_3212_dpi_3
+0x4786 mem_3212_dpi_4
+0x4787 mem_3610_dpi_1
+0x4788 mem_3610_dpi_2
+0x4789 mem_3610_dpi_3
+0x478a mem_3610_dpi_4
+0x478b mem_mouse_24g_enter_lpm_enable
+0x478c mem_le_rx_window_inc
+0x478e mem_empty_count
+0x478f mem_rf_init_data_new
+0x479c mem_mouse_clear_sensor_data_flag
+0x479d mem_mouse_null_enter_hibernate_flag
+0x479e mem_mouse_null_enter_hibernate_timer
+0x479f mem_mouse_le_reconnect_flag
+0x47a0 mem_mouse_data_queue
+0x47c1 mem_mouse_data_queue_num
+0x47c2 mem_random_addr_increase_count
+0x47c4 mem_mouse_le_conn_param_reject
+0x47c5 mem_lpm_mult_init
+0x47c6 mem_mouse_le_uuid_sup
+0x4806 mem_mouse_wheel_trigger
+0x4807 mem_mouse_wheel_trigger_timer
+0x4808 mem_mouse_enter_sniff_count
+0x4809 mem_mouse_send_switch_req_timer
+0x480a mem_le_tx_buffer0_omemalloc
+0x4825 mem_le_tx_buffer1_omemalloc
+0x4840 mem_le_tx_buffer2_omemalloc
+0x485b mem_le_tx_buffer3_omemalloc
+0x4876 mem_mouse_uuid_list
+0x4afc mem_lmi_opcode_temp
+0x4afd mem_mouse_adc_last_low_voltage_flag
+0x4afe mem_mouse_init_sensor_reset_flag
+0x4aff mem_bt_rcvd_switch_req_accept
+0x4b00 mem_bt_send_max_slot_req_accept_after_switch
+0x4b01 mem_bt_send_lmp_setup_complete
+0x4b02 mem_l2cap_rcv
+0x4b03 mem_mouse_bt_boot_mode
+0x4b04 mem_mouse_bt_boot_data
+0x4b09 mem_mouse_bt_send_first_package_timer
+0x4b0a mem_mouse_bt_send_first_package_flag
+0x4b0b mem_mouse_asm_flag
+0x4b0c mem_mouse_x_pre
+0x4b0e mem_mouse_y_pre
+0x4b10 mem_le_adv_swift_pair
+0x4b23 mem_bt_125hz_cnt
+0x4b24 mem_mouse_send_secutiry_request_timer
+0x4b25 mem_le_send_security_request_flag
+0x4b26 mem_power_on_flag
+0x4b27 mem_m_key
+0x4b28 mem_m_x
+0x4b2a mem_m_y
+0x4b2c mem_m_z
+0x4b2d mem_m_tz
+0x4b2e mem_24g_matrix_cnt
+0x4b2f mem_24g_rxbuf
+0x4b51 mem_24g_txbuf
+0x4b71 mem_24g_txpayload
+0x4b93 mem_24g_rxpayload
+0x4bb3 mem_24g_rxdata_length
+0x4bb4 mem_24g_pid
+0x4bb5 mem_24g_datalen
+0x4bb6 mem_24g_data_type
+0x4bb7 mem_24g_txlen
+0x4bb8 mem_24g_rx_window
+0x4bba mem_24g_ensure
+0x4bbb mem_24g_txfail_cnt
+0x4bbd mem_24g_get_ack_fail
+0x4bbe mem_24g_retry
+0x4bbf mem_24g_ch
+0x4bc0 mem_24g_current_ch_number
+0x4bc1 mem_24g_paring_addr
+0x4bc5 mem_24g_pairing_sm
+0x4bc6 mem_24g_ch_map1
+0x4bca mem_24g_ch_map2
+0x4bce mem_24g_ch_map3
+0x4bd2 mem_24g_ch_map4
+0x4bd6 mem_24g_tx_btclk
+0x4bda mem_24g_interval
+0x4bdb mem_24g_interval_min
+0x4bdc mem_24g_interval_max
+0x4bdd mem_24g_addr
+0x4be1 mem_24g_abort_pac
+0x4be2 mem_24g_check_dongle_times
+0x4be4 mem_24g_enter_hibernate
+0x4bec mem_24g_device_addr
+0x4bf0 mem_24g_pac_index
+0x4bf1 mem_24g_no_ack
+0x4bf2 mem_24g_sta_crc
+0x4bf5 mem_24g_last_crc
+0x4bf8 mem_24g_sta_pid
+0x4bf9 mem_24g_last_pid
+0x4bfa mem_24g_max_retry
+0x4bfb mem_24g_mode
+0x4bfc mem_24g_rxdata_temp
+0x4c1e mem_24g_rx_addr
+0x4c22 mem_dongle_mode_init
+0x4c23 mem_dongle_work_mode
+0x4c24 mem_dongle_ms_bind_step
+0x4c25 mem_dongle_kb_bind_step
+0x4c26 mem_dongle_bind_device_status
+0x4c27 mem_24g_bind_payload
+0x4c2f mem_24g_abort_packet
+0x4c30 mem_24g_rf_laststa
+0x4c31 mem_24g_hop_btclk
+0x4c35 mem_24g_hop_interval
+0x4c36 mem_24g_mode_switch
+0x4c37 mem_24g_ackpayload_enable
+0x4c38 mem_24g_hop_packet
+0x4c39 mem_24g_pair_mode
+0x4c3a mem_24g_nodata_timer_enable
+0x4c3b mem_24g_time_slice
+0x4c3c mem_24g_kb_data_sta_data
+0x4c44 mem_24g_kb_data_last_data
+0x4c4c mem_24g_kb_multikey_sta_data
+0x4c4f mem_24g_kb_multikey_last_data
+0x4c52 mem_24g_kb_blank_data_enable
+0x4c53 mem_24g_kb_mul_blank_data_enable
+0x4c54 mem_24g_ms_blank_data_enable
+0x4c55 mem_24g_kb_addr
+0x4c59 mem_24g_ms_addr
+0x4c5d mem_24g_dg_last_ch
+0x4c5e mem_24g_dg_ch_number
+0x4c5f mem_24g_dg_config_ch_once
+0x4c60 mem_24g_kb_last_ch
+0x4c61 mem_24g_kb_ch_number
+0x4c62 mem_24g_kb_config_ch_once
+0x4c63 mem_24g_ms_last_ch
+0x4c64 mem_24g_ms_ch_number
+0x4c65 mem_24g_ms_config_ch_once
+0x4c66 mem_24g_syncword
+0x4c68 mem_24g_syncword_crc8
+0x4c69 mem_24g_get_syncword_crc8
+0x4c6a mem_24g_ota_sta_pid
+0x4c6c mem_tx_power_temp
+0x4c6d mem_rssi_hex
+0x4c6e mem_rssi_noise_avg
+0x4c6f mem_rssi_noise_index
+0x4c70 mem_rssi_signal_index
+0x4c71 mem_rssi_noise_dg_avg
+0x4c72 mem_rssi_noise_kb_avg
+0x4c73 mem_rssi_noise_ms_avg
+0x4c74 mem_rssi_noise_dg_index
+0x4c75 mem_rssi_noise_kb_index
+0x4c76 mem_rssi_noise_ms_index
+0x4c77 mem_rssi_signal_buf
+0x4c7f mem_queue_ele_num
+0x4c80 mem_queue_read
+0x4c82 mem_queue_write
+0x4c84 mem_queue_start
+0x4c84 mem_data_ele0
+0x4ca4 mem_data_ele1
+0x4cc4 mem_data_ele2
+0x4ce4 mem_queue_end
+0x4ce4 mem_queue_temp
+0x4ce6 mem_cb_24g_data
+0x4ce8 mem_24g_hop_fastly_cnt
+0x4ce9 mem_24g_hop_pac_retry
+0x4cea mem_24g_rf_hop_ch
+0x4ceb mem_24g_rf_last_sta
+0x4cec mem_24g_rf_work_stage
+0x4ced mem_24g_sync_cnt
+0x4cee mem_power_ctrl_pac_succ_cnt
+0x4cef mem_rssi_avg_received
+0x4cf0 mem_rssi_hex_received
+0x4cf1 mem_power_ctrl_level
+0x4cf2 mem_seqi
+0x4cf3 mem_24g_auto_paring_switch
+0x4cf4 mem_24g_paccnt
+0x4cf5 mem_24g_transmit_by_interrupt
+0x4cf6 mem_24g_transmit_by_interrupt_exit_count
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/otp.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/otp.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/otp.dat	(working copy)
@@ -0,0 +1,8 @@
+00
+02
+aa
+55
+00
+00
+b3
+23
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/program.lis
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/program.lis	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/program.lis	(working copy)
@@ -0,0 +1,34242 @@
+include "bt_format "
+org 0x0000
+0000 c2840012 bbit1 8 ,pf_patch_ext 
+0001 c0000027 beq patch00_0 ,p_soft_reset 
+0002 c000802a beq patch00_1 ,p_soft_reset_1 
+0003 c0010032 beq patch00_2 ,p_soft_reset_2 
+0004 c0428473 beq patch10_5 ,p_shutdown_radio 
+0005 c0448444 beq patch11_1 ,p_set_freq_tx 
+0006 c050803b beq patch14_1 ,p_init_param 
+0007 c0588040 beq patch16_1 ,p_lpm_check_wake_lock 
+0008 c059004a beq patch16_2 ,p_g24_dispatch 
+0009 c06202ce beq patch18_4 ,p_device_init 
+000a c064832d beq patch19_1 ,p_app_flag_store 
+000b c0650331 beq patch19_2 ,p_app_initflag_check 
+000c c07183c2 beq patch1c_3 ,p_mouse_seting_dpi 
+000d c07303ce beq patch1c_6 ,p_mouse_motion 
+000e c07503d7 beq patch1d_2 ,p_mouse_bb_event_discovery_btn 
+000f c07583dc beq patch1d_3 ,p_mouse_start_discovery 
+0010 c07603ed beq patch1d_4 ,p_mouse_stop_discovery 
+0011 20202a8e branch loop 
+
+pf_patch_ext:
+0012 c01f8015 beq patch27_7 ,p_le_enable 
+0013 c04603f1 beq patch31_4 ,p_twspi_reset 
+0014 20202a8e branch loop 
+
+p_le_enable:
+0015 70890f36 jam 0x36 ,rf_adc_goff 
+0016 70890b5f jam 0x5f ,rf_agc_nsat 
+0017 783b7c00 enable le 
+0018 70891407 jam 7 ,rfen_ulp 
+0019 6800c1e0 fetch 1 ,mem_250k_freq_enable 
+001a 207a0000 rtn blank 
+001b 70890ab8 jam 0xb8 ,rf_iq_gain 
+001c 20600000 rtn 
+
+p_rssi_signal:
+001d 1fe22200 copy pdata ,rega 
+001e 6808cc70 fetcht 1 ,mem_rssi_signal_index 
+001f 58004c77 setarg mem_rssi_signal_buf 
+0020 98408a00 iadd temp ,contw 
+0021 1a227e00 copy rega ,pdata 
+0022 e0a08000 istore 1 ,contw 
+0023 18408401 increase 1 ,temp 
+0024 18410407 and_into rssi_buf_len_signal ,temp 
+0025 6008cc70 storet 1 ,mem_rssi_signal_index 
+0026 20600000 rtn 
+
+p_soft_reset:
+0027 6810813b hfetch 1 ,0x813b 
+0028 6000cb26 store 1 ,mem_power_on_flag 
+0029 20202002 branch soft_reset + 1 
+
+p_soft_reset_1:
+002a d8a009ae arg mem_sp_state ,contw 
+002b df20000c arg 12 ,loopcnt 
+002c 20407ed4 call clear_mem 
+002d 20406a03 call rfcomm_init 
+002e 20405cf6 call init_lmp 
+002f 2455ac65 ncall lpm_disable_exen_output ,wake 
+0030 20407ccd call ui_init + 1 
+0031 2020200c branch soft_reset + 11 
+
+p_soft_reset_2:
+0032 2055b2e3 call app_lpm_init ,wake 
+0033 2040756a call publickey_init 
+0034 2055ab41 call lpm_recover_clk ,wake 
+
+p_sp_cal_loop:
+0035 204076dc call sp_calc_sequence 
+0036 6800c65a fetch 1 ,mem_ssp_enable 
+0037 203a2012 branch main_loop ,blank 
+0038 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 
+0039 203a0035 branch p_sp_cal_loop ,blank 
+003a 20202012 branch main_loop 
+
+p_init_param:
+003b 58000a06 setarg param_le_version 
+003c 6001c510 store 3 ,mem_lmp_version 
+003d 58001d87 setarg param_le_subversion 
+003e 60014513 store 2 ,mem_lmp_version + 3 
+003f 20202aa2 branch init_param + 12 
+
+p_lpm_check_wake_lock:
+0040 c6130000 rtnmark1 mark_24g 
+0041 6800c79c fetch 1 ,mem_mouse_clear_sensor_data_flag 
+0042 203a7fef branch disable_blank ,blank 
+0043 6800c7c4 fetch 1 ,mem_mouse_le_conn_param_reject 
+0044 c000ffef beq le_lpm_disable ,disable_blank 
+0045 68014248 fetch 2 ,mem_sdp_remote_cid 
+0046 243a7fef nbranch disable_blank ,blank 
+0047 6800c806 fetch 1 ,mem_mouse_wheel_trigger 
+0048 243a7fef nbranch disable_blank ,blank 
+0049 20207ff1 branch enable_blank 
+
+p_g24_dispatch:
+004a c6930000 rtnmark0 mark_24g 
+004b 6800ccf5 fetch 1 ,mem_24g_transmit_by_interrupt 
+004c c000805b beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt 
+
+p_g24_transmit_process:
+004d 204000e4 call p_g24_txdata_prep 
+004e 24340070 nbranch p_g24_nodata_transmit ,user 
+004f 204000cb call p_g24_rf_sta_check 
+
+p_g24_transmit_start:
+0050 20400106 call p_g24_transmit_packet 
+0051 6800cbc5 fetch 1 ,mem_24g_pairing_sm 
+0052 c1ff8000 rtnne state_24g_pairing_success 
+0053 20400417 call power_ctrl_start 
+
+p_g24_short_sleep:
+0054 20400076 call p_g24_lpm_wait 
+0055 24740000 nrtn user 
+0056 204002bf call p_clear_wake 
+0057 5800ec54 setarg 60500 
+
+p_g24_enter_sleep:
+0058 20407f49 call clk2lpo 
+0059 600a415b storet 4 ,mem_sleep_counter 
+005a 20202b2a branch lpm_sleep 
+
+p_g24_transmit_by_interrupt:
+005b 2040028b call p_g24_timer_check 
+005c 24740000 nrtn user 
+005d 20400067 call p_g24_interval_calibrate 
+005e 2020004d branch p_g24_transmit_process 
+
+p_g24_transmit_by_interrupt_exit:
+005f 704cf500 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt 
+0060 704cf600 jam 0 ,mem_24g_transmit_by_interrupt_exit_count 
+
+p_g24_interval_min:
+0061 704bf000 jam 0 ,mem_24g_pac_index 
+0062 6800cbdb fetch 1 ,mem_24g_interval_min 
+
+p_g24_current_interval_store:
+0063 6000cbda store 1 ,mem_24g_interval 
+0064 20600000 rtn 
+
+p_g24_interval_max:
+0065 6800cbdc fetch 1 ,mem_24g_interval_max 
+0066 20200063 branch p_g24_current_interval_store 
+
+p_g24_interval_calibrate:
+0067 6800cbf0 fetch 1 ,mem_24g_pac_index 
+0068 1fe0fe01 increase 1 ,pdata 
+0069 6000cbf0 store 1 ,mem_24g_pac_index 
+006a c0020065 beq 4 ,p_g24_interval_max 
+006b c0028061 beq 5 ,p_g24_interval_min 
+006c 20600000 rtn 
+
+p_g24_transmit_by_interrupt_enable:
+006d 704cf501 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt 
+006e 704cf600 jam 0 ,mem_24g_transmit_by_interrupt_exit_count 
+006f 20600000 rtn 
+
+p_g24_nodata_transmit:
+0070 6800cbe1 fetch 1 ,mem_24g_abort_pac 
+0071 205a007f call p_g24_send_abort_packet ,blank 
+
+p_g24_long_sleep:
+0072 20400076 call p_g24_lpm_wait 
+0073 24740000 nrtn user 
+0074 6801cbe4 fetch 3 ,mem_24g_enter_hibernate 
+0075 20200058 branch p_g24_enter_sleep 
+
+p_g24_lpm_wait:
+0076 78347c00 enable user 
+0077 20402afa call lpo_calibration 
+0078 6801c16f fetch 3 ,mem_clks_per_lpo 
+0079 203a7fe9 branch disable_user ,blank 
+007a 6800c091 fetch 1 ,mem_lpm_mode 
+007b 203a7fe9 branch disable_user ,blank 
+007c 6800ccf5 fetch 1 ,mem_24g_transmit_by_interrupt 
+007d c000ffe9 beq g24_tx_timer_int_enable ,disable_user 
+007e 202002c2 branch p_mouse_setgpio_lpm 
+
+p_g24_send_abort_packet:
+007f 704be101 jam 1 ,mem_24g_abort_pac 
+0080 704cea00 jam 0 ,mem_24g_rf_hop_ch 
+0081 20400093 call p_g24_transmit_rf_ctrl_clear 
+0082 6000cb51 store 1 ,mem_24g_txbuf 
+0083 58000000 setarg 0 
+0084 6003cb52 store 7 ,mem_24g_txbuf + 1 
+0085 68024bec fetch 4 ,mem_24g_device_addr 
+0086 60024b59 store 4 ,mem_24g_txbuf + 8 
+0087 704bb50c jam 12 ,mem_24g_datalen 
+0088 6800cbb6 fetch 1 ,mem_24g_data_type 
+0089 79207e03 set1 bit_abort ,pdata 
+008a 6000cbb6 store 1 ,mem_24g_data_type 
+008b 204000e7 call p_g24_txdata_enable_tx 
+008c 20200050 branch p_g24_transmit_start 
+
+p_g24_set_device_addr:
+008d 204068a8 call adc_init_data 
+008e 680240a0 fetch 4 ,mem_lap 
+008f 60024bec store 4 ,mem_24g_device_addr 
+0090 20600000 rtn 
+
+p_g24_transmit_rf_sta_init:
+0091 704ceb01 jam 1 ,mem_24g_rf_last_sta 
+0092 704ced00 jam 0 ,mem_24g_sync_cnt 
+
+p_g24_transmit_rf_ctrl_clear:
+0093 6800cbb6 fetch 1 ,mem_24g_data_type 
+0094 1fe17e07 and_into bits_data ,pdata 
+0095 6000cbb6 store 1 ,mem_24g_data_type 
+0096 20600000 rtn 
+
+p_g24_hop_ch_enable:
+0097 6800cbb6 fetch 1 ,mem_24g_data_type 
+0098 79207e04 set1 bit_hop ,pdata 
+0099 6000cbb6 store 1 ,mem_24g_data_type 
+009a 6000cb71 store 1 ,mem_24g_txpayload 
+009b 20600000 rtn 
+
+p_g24_hop_ch_disable:
+009c 6800cbb6 fetch 1 ,mem_24g_data_type 
+009d 793ffe04 set0 bit_hop ,pdata 
+009e 6000cbb6 store 1 ,mem_24g_data_type 
+009f 20600000 rtn 
+
+p_g24_transmit_hop_pac_fail:
+00a0 2040040d call power_ctrl_pac_succ_decrs 
+00a1 6800ccec fetch 1 ,mem_24g_rf_work_stage 
+00a2 c00080a5 beq 1 ,p_g24_transmit_hop_pac_fail_wo_hop 
+00a3 c00100a9 beq 2 ,p_g24_transmit_hop_pac_fail_hop_stage2 
+00a4 20600000 rtn 
+
+p_g24_transmit_hop_pac_fail_wo_hop:
+00a5 704ced02 jam 2 ,mem_24g_sync_cnt 
+
+p_g24_transmit_hop_pac_fail_stage1:
+00a6 704ce900 jam 0 ,mem_24g_hop_pac_retry 
+00a7 704ceb00 jam 0 ,mem_24g_rf_last_sta 
+00a8 20200093 branch p_g24_transmit_rf_ctrl_clear 
+
+p_g24_transmit_hop_pac_fail_hop_stage2:
+00a9 704cea00 jam 0 ,mem_24g_rf_hop_ch 
+00aa 202000a6 branch p_g24_transmit_hop_pac_fail_stage1 
+
+p_g24_transmit_pac_fail_hop_stage3:
+00ab 68014bbb fetch 2 ,mem_24g_txfail_cnt 
+00ac 1fe0fe01 increase 1 ,pdata 
+00ad 60014bbb store 2 ,mem_24g_txfail_cnt 
+00ae c2830149 bbit1 6 ,p_g24_tx_attempt_fail 
+00af 6800ccea fetch 1 ,mem_24g_rf_hop_ch 
+00b0 c00080b4 beq 1 ,p_g24_rf_hop_fastly 
+00b1 704cea01 jam 1 ,mem_24g_rf_hop_ch 
+
+p_g24_rf_hop_attemp_again:
+00b2 6800ccea fetch 1 ,mem_24g_rf_hop_ch 
+00b3 c0808093 bne 1 ,p_g24_transmit_rf_ctrl_clear 
+
+p_g24_rf_hop_fastly:
+00b4 6800cce8 fetch 1 ,mem_24g_hop_fastly_cnt 
+00b5 1fe0fe01 increase 1 ,pdata 
+00b6 6000cce8 store 1 ,mem_24g_hop_fastly_cnt 
+00b7 c00200bb beq 4 ,p_g24_rf_hop_fastly_exit 
+00b8 20400203 call p_g24_ch 
+00b9 704bfa02 jam 2 ,mem_24g_max_retry 
+00ba 20200106 branch p_g24_transmit_packet 
+
+p_g24_rf_hop_fastly_exit:
+00bb 2040040d call power_ctrl_pac_succ_decrs 
+00bc 704ce800 jam 0 ,mem_24g_hop_fastly_cnt 
+00bd 20200093 branch p_g24_transmit_rf_ctrl_clear 
+
+p_g24_transmit_hop_pac_succ_wo_hop:
+00be 704ced02 jam 2 ,mem_24g_sync_cnt 
+
+p_g24_transmit_hop_pac_succ:
+00bf 704ceb01 jam 1 ,mem_24g_rf_last_sta 
+00c0 704cea00 jam 0 ,mem_24g_rf_hop_ch 
+00c1 20200093 branch p_g24_transmit_rf_ctrl_clear 
+
+p_g24_transmit_succ_rf_config:
+00c2 6800ccec fetch 1 ,mem_24g_rf_work_stage 
+00c3 c00180bf beq 3 ,p_g24_transmit_hop_pac_succ 
+00c4 6800cbb6 fetch 1 ,mem_24g_data_type 
+00c5 2fec0004 isolate0 bit_hop ,pdata 
+00c6 20208091 branch p_g24_transmit_rf_sta_init ,true 
+00c7 6800ccec fetch 1 ,mem_24g_rf_work_stage 
+00c8 c00080be beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop 
+00c9 c00100bf beq 2 ,p_g24_transmit_hop_pac_succ 
+00ca 20600000 rtn 
+
+p_g24_rf_sta_check:
+00cb 6800cbc5 fetch 1 ,mem_24g_pairing_sm 
+00cc c1ff8000 rtnne state_24g_pairing_success 
+00cd 204000d0 call p_g24_rf_laststa_synccnt_check 
+00ce 245600d8 ncall p_g24_rf_sync_cnt_check ,user2 
+00cf 20600000 rtn 
+
+p_g24_rf_laststa_synccnt_check:
+00d0 78567c00 disable user2 
+00d1 6800cceb fetch 1 ,mem_24g_rf_last_sta 
+00d2 c1808000 rtnne 1 
+00d3 6800cced fetch 1 ,mem_24g_sync_cnt 
+00d4 c1800000 rtnne 0 
+00d5 704cec01 jam 1 ,mem_24g_rf_work_stage 
+00d6 704bfa04 jam 4 ,mem_24g_max_retry 
+00d7 20207feb branch enable_user2 
+
+p_g24_rf_sync_cnt_check:
+00d8 6800cced fetch 1 ,mem_24g_sync_cnt 
+00d9 203a00df branch p_g24_rf_hop_attemp ,blank 
+00da 1fe0ffff increase -1 ,pdata 
+00db 6000cced store 1 ,mem_24g_sync_cnt 
+00dc 704cec02 jam 2 ,mem_24g_rf_work_stage 
+00dd 704bfa04 jam 4 ,mem_24g_max_retry 
+00de 20200203 branch p_g24_ch 
+
+p_g24_rf_hop_attemp:
+00df 704cec03 jam 3 ,mem_24g_rf_work_stage 
+00e0 6800ccea fetch 1 ,mem_24g_rf_hop_ch 
+00e1 243a00b2 nbranch p_g24_rf_hop_attemp_again ,blank 
+00e2 704bfa02 jam 2 ,mem_24g_max_retry 
+00e3 20200203 branch p_g24_ch 
+
+p_g24_txdata_prep:
+00e4 6800cbc5 fetch 1 ,mem_24g_pairing_sm 
+00e5 c0ff815d bne state_24g_pairing_success ,p_g24_pairing_sm 
+
+p_g24_txdata_prep_packeage_data:
+00e6 204000ea call p_g24_package_data 
+
+p_g24_txdata_enable_tx:
+00e7 204001f1 call p_g24_transmit_prep 
+00e8 704bba01 jam ensure_on_24g ,mem_24g_ensure 
+00e9 20600000 rtn 
+
+p_g24_package_data:
+00ea 68014ce6 fetch 2 ,mem_cb_24g_data 
+00eb 20407f9c call callback_func 
+00ec 203400f0 branch p_g24_accumulate_mouse_data ,user 
+00ed 6803cb52 fetch 7 ,mem_24g_txbuf + 1 
+00ee 207a0000 rtn blank 
+00ef 20207fe7 branch enable_user 
+
+p_g24_accumulate_mouse_data:
+00f0 704be100 jam 0 ,mem_24g_abort_pac 
+00f1 1a20fe01 add rega ,1 ,pdata 
+00f2 6000cbb5 store 1 ,mem_24g_datalen 
+00f3 20400093 call p_g24_transmit_rf_ctrl_clear 
+00f4 6000cb51 store 1 ,mem_24g_txbuf 
+00f5 e8a88000 ifetcht 1 ,contw 
+00f6 ea408000 ifetch 1 ,regb 
+00f7 9841fe00 ior temp ,pdata 
+00f8 e0a08000 istore 1 ,contw 
+00f9 1a40a401 increase 1 ,regb 
+00fa ea420000 ifetch 4 ,regb 
+00fb e0a20000 istore 4 ,contw 
+00fc 1a40a404 increase 4 ,regb 
+00fd d8a04b57 arg mem_24g_txbuf + 6 ,contw 
+00fe df200002 arg 2 ,loopcnt 
+
+p_g24_accumulation_loop:
+00ff ea408000 ifetch 1 ,regb 
+0100 e8a88000 ifetcht 1 ,contw 
+0101 9840fe00 iadd temp ,pdata 
+0102 e0a08000 istore 1 ,contw 
+0103 1a40a401 increase 1 ,regb 
+0104 c20000ff loop p_g24_accumulation_loop 
+0105 20600000 rtn 
+
+p_g24_transmit_packet:
+0106 704bbe00 jam 0 ,mem_24g_retry 
+
+p_g24_transmit_loop:
+0107 d9600d00 arg param_rx_setup ,timeup 
+0108 34730200 until clkn_rt ,meet 
+0109 20400122 call p_g24_transmit_receive_ack 
+010a 6800cbf1 fetch 1 ,mem_24g_no_ack 
+010b c1008000 rtneq no_ack_24g 
+010c 242c0131 nbranch p_g24_retransmit ,sync 
+010d 24378131 nbranch p_g24_retransmit ,user3 
+010e 2040011d call p_g24_txbuf_clear 
+010f 2040014d call p_g24_ackpayload_parse 
+0110 20400409 call power_ctrl_pac_succ_incrs 
+
+p_g24_transmit_next_packet:
+0111 6800cbb4 fetch 1 ,mem_24g_pid 
+0112 1fe0fe01 increase 1 ,pdata 
+0113 6000cbb4 store 1 ,mem_24g_pid 
+0114 6800cbc5 fetch 1 ,mem_24g_pairing_sm 
+0115 c0ff8120 bne state_24g_pairing_success ,p_g24_paring_mode_start 
+0116 204000c2 call p_g24_transmit_succ_rf_config 
+
+p_g24_transmit_abandon:
+0117 58000000 setarg 0 
+0118 60014bbb store 2 ,mem_24g_txfail_cnt 
+0119 6000cbbd store 1 ,mem_24g_get_ack_fail 
+011a 6000cce9 store 1 ,mem_24g_hop_pac_retry 
+011b 704bba00 jam ensure_off_24g ,mem_24g_ensure 
+011c 20600000 rtn 
+
+p_g24_txbuf_clear:
+011d df200004 arg 4 ,loopcnt 
+011e d8a04b51 arg mem_24g_txbuf ,contw 
+011f 20207ec6 branch memset0 
+
+p_g24_paring_mode_start:
+0120 20400406 call power_ctrl_pac_succ_cnt_init 
+0121 20200177 branch p_g24_paring_mode 
+
+p_g24_transmit_receive_ack:
+0122 7857fc00 disable user3 
+0123 2040026a call p_g24_transmit 
+0124 6800cbf1 fetch 1 ,mem_24g_no_ack 
+0125 c000812f beq no_ack_24g ,p_g24_transmit_no_ack 
+0126 18002a00 force 0 ,radio_ctrl 
+0127 68024bdd fetch 4 ,mem_24g_addr 
+0128 98001200 iforce access 
+0129 68088017 fetcht 1 ,mem_last_freq 
+012a 2040291f call set_freq_rx 
+012b 20402924 call rf_rx_enable 
+012c 20400226 call p_g24_receive_rxon 
+012d 20578262 call p_g24_end_of_packet ,user3 
+012e 20600000 rtn 
+
+p_g24_transmit_no_ack:
+012f 20400262 call p_g24_end_of_packet 
+0130 20200111 branch p_g24_transmit_next_packet 
+
+p_g24_retransmit:
+0131 6800cbbd fetch 1 ,mem_24g_get_ack_fail 
+0132 1fe0fe01 increase 1 ,pdata 
+0133 6000cbbd store 1 ,mem_24g_get_ack_fail 
+0134 6800cbc5 fetch 1 ,mem_24g_pairing_sm 
+0135 c0ff8145 bne state_24g_pairing_success ,p_g24_tx_paring_retry 
+0136 6808cbbe fetcht 1 ,mem_24g_retry 
+0137 18408401 increase 1 ,temp 
+0138 6008cbbe storet 1 ,mem_24g_retry 
+0139 6800cbfa fetch 1 ,mem_24g_max_retry 
+013a 98467e00 isub temp ,pdata 
+013b 243a0107 nbranch p_g24_transmit_loop ,blank 
+013c 6800ccec fetch 1 ,mem_24g_rf_work_stage 
+013d c00180ab beq 3 ,p_g24_transmit_pac_fail_hop_stage3 
+013e 6800cce9 fetch 1 ,mem_24g_hop_pac_retry 
+013f 1fe0fe01 increase 1 ,pdata 
+0140 6000cce9 store 1 ,mem_24g_hop_pac_retry 
+0141 c00100a0 beq 2 ,p_g24_transmit_hop_pac_fail 
+0142 20400097 call p_g24_hop_ch_enable 
+0143 704bfa01 jam 1 ,mem_24g_max_retry 
+0144 20200106 branch p_g24_transmit_packet 
+
+p_g24_tx_paring_retry:
+0145 6800cbbd fetch 1 ,mem_24g_get_ack_fail 
+0146 c1ff8000 rtnne 0xff 
+0147 704bbd00 jam 0 ,mem_24g_get_ack_fail 
+0148 2020014b branch p_g24_stop_g24_mode 
+
+p_g24_tx_attempt_fail:
+0149 58000000 setarg 0 
+014a 60014bbb store 2 ,mem_24g_txfail_cnt 
+
+p_g24_stop_g24_mode:
+014b 700a993a jam bt_evt_24g_attempt_fail ,mem_fifo_temp 
+014c 20207d86 branch ui_ipc_send_event 
+
+p_g24_ackpayload_parse:
+014d 204001d6 call p_g24_read_len_pid_crc 
+014e 6800cbb3 fetch 1 ,mem_24g_rxdata_length 
+014f 207a0000 rtn blank 
+0150 98007200 iforce loopcnt 
+0151 d8c04b31 arg mem_24g_rxbuf + 2 ,contr 
+0152 d8a04b93 arg mem_24g_rxpayload ,contw 
+0153 20207f01 branch memcpy 
+
+p_g24_start_pairing_sm1:
+0154 79200026 set1 mark_24g ,mark 
+0155 20400158 call p_g24_pair_init 
+
+p_g24_set_pairing_sm_1:
+0156 704bc501 jam state_24g_pairing_1 ,mem_24g_pairing_sm 
+0157 20600000 rtn 
+
+p_g24_pair_init:
+0158 7041de20 jam tx_power_pair ,mem_tx_power 
+0159 704bb400 jam 0 ,mem_24g_pid 
+015a 704bbf4e jam g24_pair_ch ,mem_24g_ch 
+015b 68024bc1 fetch 4 ,mem_24g_paring_addr 
+015c 202001e3 branch p_g24_update_addr_and_synccrc8 
+
+p_g24_pairing_sm:
+015d 6800cbba fetch 1 ,mem_24g_ensure 
+015e c000ffe7 beq ensure_on_24g ,enable_user 
+015f 6800cbc5 fetch 1 ,mem_24g_pairing_sm 
+0160 c0008164 beq state_24g_pairing_1 ,p_g24_pairing_sm_1 
+0161 c0010167 beq state_24g_pairing_2 ,p_g24_pairing_sm_2 
+0162 c001816a beq state_24g_pairing_3 ,p_g24_pairing_sm_3 
+0163 20202a8c branch assert 
+
+p_g24_pairing_sm_1:
+0164 704bc511 jam state_24g_pairing_1_waiting_ack ,mem_24g_pairing_sm 
+0165 70119eaa jam 0xaa ,mem_24g_common_temp 
+0166 2020016c branch p_g24_pairing_sm_common 
+
+p_g24_pairing_sm_2:
+0167 704bc512 jam state_24g_pairing_2_waiting_ack ,mem_24g_pairing_sm 
+0168 70119e55 jam 0x55 ,mem_24g_common_temp 
+0169 2020016c branch p_g24_pairing_sm_common 
+
+p_g24_pairing_sm_3:
+016a 704bc513 jam state_24g_pairing_3_waiting_ack ,mem_24g_pairing_sm 
+016b 70119e22 jam 0x22 ,mem_24g_common_temp 
+
+p_g24_pairing_sm_common:
+016c 6800cbb6 fetch 1 ,mem_24g_data_type 
+016d 1fe17e07 and_into bits_data ,pdata 
+016e 6000919f store 1 ,mem_24g_common_temp + 1 
+016f 68024bec fetch 4 ,mem_24g_device_addr 
+0170 600211a0 store 4 ,mem_24g_common_temp + 2 
+
+p_g24_put_pairing_data_in_buff:
+0171 7011a400 jam 0 ,mem_24g_common_temp + 6 
+0172 da20119e arg mem_24g_common_temp ,rega 
+0173 d8400007 arg 7 ,temp 
+0174 204001d1 call p_g24_put_data_in_buff 
+0175 204000e7 call p_g24_txdata_enable_tx 
+0176 20207fe7 branch enable_user 
+
+p_g24_paring_mode:
+0177 6800cbc5 fetch 1 ,mem_24g_pairing_sm 
+0178 c17f8000 rtneq state_24g_pairing_success 
+0179 c008817d beq state_24g_pairing_1_waiting_ack ,p_g24_pairing_sm_1_waiting_ack 
+017a c009017f beq state_24g_pairing_2_waiting_ack ,p_g24_pairing_sm_2_waiting_ack 
+017b c0098181 beq state_24g_pairing_3_waiting_ack ,p_g24_pairing_sm_3_waiting_ack 
+017c 20600000 rtn 
+
+p_g24_pairing_sm_1_waiting_ack:
+017d 704bc502 jam state_24g_pairing_2 ,mem_24g_pairing_sm 
+017e 20200117 branch p_g24_transmit_abandon 
+
+p_g24_pairing_sm_2_waiting_ack:
+017f 704bc503 jam state_24g_pairing_3 ,mem_24g_pairing_sm 
+0180 20200117 branch p_g24_transmit_abandon 
+
+p_g24_pairing_sm_3_waiting_ack:
+0181 704bc5ff jam state_24g_pairing_success ,mem_24g_pairing_sm 
+0182 700a9939 jam bt_evt_24g_pairing_complete ,mem_fifo_temp 
+0183 20407d86 call ui_ipc_send_event 
+0184 68024b95 fetch 4 ,mem_24g_rxpayload + 2 
+0185 204001e3 call p_g24_update_addr_and_synccrc8 
+0186 20200117 branch p_g24_transmit_abandon 
+
+p_g24_start_24g_mode:
+0187 793f8026 set0 mark_24g ,mark 
+0188 204001c7 call p_g24_ch_syncword_crc8_init 
+0189 6800cbc5 fetch 1 ,mem_24g_pairing_sm 
+018a c1ff8000 rtnne state_24g_pairing_success 
+018b 2040019c call p_g24_tx_attemp_data_prep 
+
+p_g24_tx_attemp_dongle:
+018c 58000000 setarg 0 
+018d 60014be2 store 2 ,mem_24g_check_dongle_times 
+
+p_g24_tx_attemp_dongle_loop:
+018e 20402afa call lpo_calibration 
+018f 200007d0 nop 2000 
+0190 6800cbe2 fetch 1 ,mem_24g_check_dongle_times 
+0191 c07f814b beq 0xff ,p_g24_stop_g24_mode 
+0192 20400122 call p_g24_transmit_receive_ack 
+0193 242c01a5 nbranch p_g24_attemp_txdata_retry ,sync 
+0194 243781a5 nbranch p_g24_attemp_txdata_retry ,user3 
+
+p_g24_tx_attemp_dongle_succ:
+0195 79200026 set1 mark_24g ,mark 
+0196 58000000 setarg 0 
+0197 60014be2 store 2 ,mem_24g_check_dongle_times 
+0198 700a993c jam bt_evt_24g_attempt_success ,mem_fifo_temp 
+0199 20407d86 call ui_ipc_send_event 
+019a 2040011d call p_g24_txbuf_clear 
+019b 2020006d branch p_g24_transmit_by_interrupt_enable 
+
+p_g24_tx_attemp_data_prep:
+019c 70119eff jam 0xff ,mem_24g_common_temp 
+019d 6800cbb6 fetch 1 ,mem_24g_data_type 
+019e 6000919f store 1 ,mem_24g_common_temp + 1 
+019f 68024bec fetch 4 ,mem_24g_device_addr 
+01a0 600211a0 store 4 ,mem_24g_common_temp + 2 
+01a1 d8400006 arg 6 ,temp 
+01a2 da20119e arg mem_24g_common_temp ,rega 
+01a3 204001d1 call p_g24_put_data_in_buff 
+01a4 202001f1 branch p_g24_transmit_prep 
+
+p_g24_attemp_txdata_retry:
+01a5 68014be2 fetch 2 ,mem_24g_check_dongle_times 
+01a6 1fe0fe01 increase 1 ,pdata 
+01a7 60014be2 store 2 ,mem_24g_check_dongle_times 
+01a8 20400203 call p_g24_ch 
+01a9 2020018e branch p_g24_tx_attemp_dongle_loop 
+
+p_g24_auto_pair_start:
+01aa 793f8026 set0 mark_24g ,mark 
+01ab 204001c5 call p_g24_auto_pair_all_powerful 
+01ac 2040019c call p_g24_tx_attemp_data_prep 
+
+p_g24_auto_pair_restart:
+01ad 704be200 jam 0 ,mem_24g_check_dongle_times 
+
+p_g24_auto_pair_start_loop:
+01ae 20402afa call lpo_calibration 
+01af 200007d0 nop 2000 
+01b0 6800cbe2 fetch 1 ,mem_24g_check_dongle_times 
+01b1 c07f814b beq 0xff ,p_g24_stop_g24_mode 
+01b2 20400122 call p_g24_transmit_receive_ack 
+01b3 242c01bb nbranch p_g24_auto_pair_retry ,sync 
+01b4 243781bb nbranch p_g24_auto_pair_retry ,user3 
+01b5 2040014d call p_g24_ackpayload_parse 
+01b6 68024bdd fetch 4 ,mem_24g_addr 
+01b7 680a4bc1 fetcht 4 ,mem_24g_paring_addr 
+01b8 98467c00 isub temp ,null 
+01b9 20228154 branch p_g24_start_pairing_sm1 ,zero 
+01ba 20200195 branch p_g24_tx_attemp_dongle_succ 
+
+p_g24_auto_pair_retry:
+01bb 6800cbe2 fetch 1 ,mem_24g_check_dongle_times 
+01bc 1fe0fe01 increase 1 ,pdata 
+01bd 6000cbe2 store 1 ,mem_24g_check_dongle_times 
+01be 6800ccf3 fetch 1 ,mem_24g_auto_paring_switch 
+01bf 1fe0fe01 increase 1 ,pdata 
+01c0 1fe17e01 and_into 1 ,pdata 
+01c1 6000ccf3 store 1 ,mem_24g_auto_paring_switch 
+01c2 c00001c9 beq 0 ,p_g24_auto_pair_device_attemp 
+01c3 c00081cb beq 1 ,p_g24_auto_pair_pair_attemp 
+01c4 20600000 rtn 
+
+p_g24_auto_pair_all_powerful:
+01c5 7041de20 jam tx_power_pair ,mem_tx_power 
+01c6 20400328 call p_mouse_read_24g_addr 
+
+p_g24_ch_syncword_crc8_init:
+01c7 204001e4 call p_g24_syncword_crc8 
+01c8 20200203 branch p_g24_ch 
+
+p_g24_auto_pair_device_attemp:
+01c9 204001c5 call p_g24_auto_pair_all_powerful 
+01ca 202001ae branch p_g24_auto_pair_start_loop 
+
+p_g24_auto_pair_pair_attemp:
+01cb 20400158 call p_g24_pair_init 
+01cc 202001ae branch p_g24_auto_pair_start_loop 
+
+p_g24_check_51cmd_stop_24g:
+01cd 793f8026 set0 mark_24g ,mark 
+01ce 204053ce call le_disable 
+
+p_mouse_disable_g24_pairing_flag:
+01cf d8e00003 arg mosue_24g_pairing_flag ,queue 
+01d0 202043d2 branch mouse_disable_function_flag 
+
+p_g24_put_data_in_buff:
+01d1 6008cbb5 storet 1 ,mem_24g_datalen 
+01d2 18427200 copy temp ,loopcnt 
+01d3 d8a04b51 arg mem_24g_txbuf ,contw 
+01d4 1a220c00 copy rega ,contr 
+01d5 20207f01 branch memcpy 
+
+p_g24_read_len_pid_crc:
+01d6 6800cb30 fetch 1 ,mem_24g_rxbuf + 1 
+01d7 1fe97e00 rshift3 pdata ,pdata 
+01d8 6000cbb3 store 1 ,mem_24g_rxdata_length 
+01d9 1fe0fe01 increase 1 ,pdata 
+01da d8c04b30 arg mem_24g_rxbuf + 1 ,contr 
+01db 98c08c00 iadd contr ,contr 
+01dc e8c18000 ifetch 3 ,contr 
+01dd 6001cbf2 store 3 ,mem_24g_sta_crc 
+01de 6800cb30 fetch 1 ,mem_24g_rxbuf + 1 
+01df 1fe37e00 rshift pdata ,pdata 
+01e0 1fe17e03 and pdata ,0x03 ,pdata 
+01e1 6000cbf8 store 1 ,mem_24g_sta_pid 
+01e2 20600000 rtn 
+
+p_g24_update_addr_and_synccrc8:
+01e3 60024bdd store 4 ,mem_24g_addr 
+
+p_g24_syncword_crc8:
+01e4 da200000 arg 0 ,rega 
+01e5 df200004 arg 4 ,loopcnt 
+01e6 d8c04bdd arg mem_24g_addr ,contr 
+
+p_g24_syncword_crc8_loop:
+01e7 e8c08000 ifetch 1 ,contr 
+01e8 9a20a200 iadd rega ,rega 
+01e9 c20001e7 loop p_g24_syncword_crc8_loop 
+01ea 1a227e00 copy rega ,pdata 
+01eb 60014c66 store 2 ,mem_24g_syncword 
+01ec 6800cc66 fetch 1 ,mem_24g_syncword 
+01ed 6808cc67 fetcht 1 ,mem_24g_syncword + 1 
+01ee 9840fe00 iadd temp ,pdata 
+01ef 6000cc68 store 1 ,mem_24g_syncword_crc8 
+01f0 20600000 rtn 
+
+p_g24_transmit_prep:
+01f1 6800cbb5 fetch 1 ,mem_24g_datalen 
+01f2 1fe0fe02 increase 2 ,pdata 
+01f3 6000cbb7 store 1 ,mem_24g_txlen 
+01f4 6800cbb6 fetch 1 ,mem_24g_data_type 
+01f5 6000cb71 store 1 ,mem_24g_txpayload 
+01f6 6800cbb5 fetch 1 ,mem_24g_datalen 
+01f7 1fe9fe00 lshift3 pdata ,pdata 
+01f8 6808cbb4 fetcht 1 ,mem_24g_pid 
+01f9 18410403 and temp ,0x03 ,temp 
+01fa 18438400 lshift temp ,temp 
+01fb 9841fe00 ior temp ,pdata 
+01fc 6808cbf1 fetcht 1 ,mem_24g_no_ack 
+01fd 9840fe00 iadd temp ,pdata 
+01fe e0a08000 istore 1 ,contw 
+01ff 6800cbb5 fetch 1 ,mem_24g_datalen 
+0200 98007200 iforce loopcnt 
+0201 d8c04b51 arg mem_24g_txbuf ,contr 
+0202 20207f01 branch memcpy 
+
+p_g24_ch:
+0203 6808cbc0 fetcht 1 ,mem_24g_current_ch_number 
+0204 20400207 call p_g24_ch_map_size 
+0205 6008cbc0 storet 1 ,mem_24g_current_ch_number 
+0206 20600000 rtn 
+
+p_g24_ch_map_size:
+0207 2040020b call p_g24_ch_calc 
+0208 18408401 increase 1 ,temp 
+0209 18410403 and_into 3 ,temp 
+020a 20600000 rtn 
+
+p_g24_ch_calc:
+020b 6800cbdd fetch 1 ,mem_24g_addr 
+020c 1fe17e03 and_into 0x03 ,pdata 
+020d 1fefa204 mul32 pdata ,4 ,rega 
+020e 58004bc6 setarg mem_24g_ch_map1 
+020f 9a20fe00 iadd rega ,pdata 
+0210 98408c00 iadd temp ,contr 
+0211 e8c08000 ifetch 1 ,contr 
+0212 6000cbbf store 1 ,mem_24g_ch 
+0213 20600000 rtn 
+
+p_g24_prep:
+0214 7844fc00 disable enable_crc 
+0215 7843fc00 disable enable_white 
+0216 58555555 setarg 0x555555 
+0217 98001e00 iforce crc24_init 
+0218 6800cbbf fetch 1 ,mem_24g_ch 
+0219 1fed8400 reverse pdata ,temp 
+021a 79200401 set1 1 ,temp 
+021b 18431c00 rshift temp ,white_init 
+021c 20600000 rtn 
+
+p_g24_receive_packet:
+021d 204053c4 call le_enable 
+021e 68024bdd fetch 4 ,mem_24g_addr 
+021f 98001200 iforce access 
+0220 20402918 call set_sync_on 
+0221 6808cbbf fetcht 1 ,mem_24g_ch 
+0222 2040291f call set_freq_rx 
+0223 58000500 setarg param_pll_setup 
+0224 20402a8f call sleep 
+0225 20402924 call rf_rx_enable 
+
+p_g24_receive_rxon:
+0226 20400214 call p_g24_prep 
+0227 7857fc00 disable user3 
+0228 7826fc00 enable decode_fec0 
+0229 7830fc00 enable is_rx 
+022a 78507c00 disable is_tx 
+022b 78287c00 enable swfine 
+022c 68014bb8 fetch 2 ,mem_24g_rx_window 
+022d 98003600 iforce stop_watch 
+022e 37c18400 correlate null ,timeout 
+022f 242c0266 nbranch p_g24_sync_timeout ,sync 
+0230 7846fc00 disable decode_fec0 
+0231 7825fc00 enable decode_fec1 
+0232 7823fc00 enable enable_white 
+0233 7824fc00 enable enable_crc 
+0234 2040025f call p_g24_receive_byte 
+0235 6000cc69 store 1 ,mem_24g_get_syncword_crc8 
+0236 6808cc68 fetcht 1 ,mem_24g_syncword_crc8 
+0237 98467c00 isub temp ,null 
+0238 24228262 nbranch p_g24_end_of_packet ,zero 
+0239 2040025f call p_g24_receive_byte 
+023a 6000cb2f store 1 ,mem_24g_rxbuf 
+023b 6800cbfb fetch 1 ,mem_24g_mode 
+023c 1fe67c02 sub pdata ,rx_24g ,null 
+023d 20228242 branch p_g24_receive_skip ,zero 
+023e 6800cb2f fetch 1 ,mem_24g_rxbuf 
+023f 6808cbb6 fetcht 1 ,mem_24g_data_type 
+0240 a8400e00 icompare bits_data ,temp 
+0241 24208262 nbranch p_g24_end_of_packet ,true 
+
+p_g24_receive_skip:
+0242 2040025f call p_g24_receive_byte 
+0243 e0a08000 istore 1 ,contw 
+0244 1fe97e00 rshift3 pdata ,pdata 
+0245 1fe1721f and pdata ,0x1f ,loopcnt 
+0246 2022824a branch p_g24rx_nopayload ,zero 
+
+p_g24rx_loop:
+0247 2040025f call p_g24_receive_byte 
+0248 e0a08000 istore 1 ,contw 
+0249 c2000247 loop p_g24rx_loop 
+
+p_g24rx_nopayload:
+024a 18a22200 copy contw ,rega 
+024b 2040025f call p_g24_receive_byte 
+024c 6000ccf0 store 1 ,mem_rssi_hex_received 
+024d 1a220a00 copy rega ,contw 
+024e 09800018 parse demod ,bucket ,24 
+024f 78287c00 enable swfine 
+0250 db600664 arg param_sifs ,stop_watch 
+0251 1fef7e00 rshift32 pdata ,pdata 
+0252 1ff17e00 rshift16 pdata ,pdata 
+0253 e0a18000 istore 3 ,contw 
+0254 7845fc00 disable decode_fec1 
+0255 20230262 branch p_g24_end_of_packet ,crc_failed 
+0256 7837fc00 enable user3 
+0257 68008017 fetch 1 ,mem_last_freq 
+0258 1fe0a200 add pdata ,0 ,rega 
+0259 20402981 call rf_write_freq 
+025a 7846fc00 disable decode_fec0 
+025b 20402918 call set_sync_on 
+025c 6800ccf0 fetch 1 ,mem_rssi_hex_received 
+025d 2040001d call p_rssi_signal 
+025e 20600000 rtn 
+
+p_g24_receive_byte:
+025f 09800008 parse demod ,bucket ,8 
+0260 19897e00 rshift3 pwindow ,pdata 
+0261 20600000 rtn 
+
+p_g24_end_of_packet:
+0262 784dfc00 disable encode_fec1 
+0263 7845fc00 disable decode_fec1 
+0264 2040264d call end_of_packet 
+0265 20600000 rtn 
+
+p_g24_sync_timeout:
+0266 20200262 branch p_g24_end_of_packet 
+
+p_g24_set_freq_tx:
+0267 20402918 call set_sync_on 
+0268 6808cbbf fetcht 1 ,mem_24g_ch 
+0269 20202933 branch set_freq_tx 
+
+p_g24_transmit:
+026a 204053c4 call le_enable 
+026b 68024bdd fetch 4 ,mem_24g_addr 
+026c 98001200 iforce access 
+026d 20400214 call p_g24_prep 
+026e 20400267 call p_g24_set_freq_tx 
+026f 79202a00 set1 txgfsk ,radio_ctrl 
+0270 782efc00 enable encode_fec0 
+0271 78307c00 enable is_tx 
+0272 7850fc00 disable is_rx 
+0273 19317e00 rshift16 access ,pdata 
+0274 1fecfe00 rshift8 pdata ,pdata 
+0275 1ff1fe00 rshift4 pdata ,pdata 
+0276 08008628 inject mod ,40 
+0277 784efc00 disable encode_fec0 
+0278 782dfc00 enable encode_fec1 
+0279 7823fc00 enable enable_white 
+027a 7824fc00 enable enable_crc 
+027b 6800cc68 fetch 1 ,mem_24g_syncword_crc8 
+027c 08008608 inject mod ,8 
+027d 6800cbb7 fetch 1 ,mem_24g_txlen 
+027e 98007200 iforce loopcnt 
+027f d8c04b71 arg mem_24g_txpayload ,contr 
+
+p_g24tr_loop:
+0280 e8c08000 ifetch 1 ,contr 
+0281 08008608 inject mod ,8 
+0282 c2000280 loop p_g24tr_loop 
+0283 78247c00 enable enable_parity 
+0284 08008618 inject mod ,24 
+0285 78447c00 disable enable_parity 
+0286 37d38200 until null ,tx_clear 
+0287 20000064 nop 100 
+0288 784efc00 disable encode_fec0 
+0289 784dfc00 disable encode_fec1 
+028a 20600000 rtn 
+
+p_g24_timer_check:
+028b 20407fe9 call disable_user 
+028c 680a4bd6 fetcht 4 ,mem_24g_tx_btclk 
+028d 1c427e00 copy clkn_bt ,pdata 
+028e 98467c00 isub temp ,null 
+028f 24412d18 ncall g24_timer_timeout ,positive 
+0290 1fe22400 copy pdata ,regb 
+0291 68024bd6 fetch 4 ,mem_24g_tx_btclk 
+0292 6808cbda fetcht 1 ,mem_24g_interval 
+0293 98408400 iadd temp ,temp 
+0294 1a427e00 copy regb ,pdata 
+0295 98467c00 isub temp ,null 
+0296 24610000 nrtn positive 
+0297 793ffe1c set0 28 ,pdata 
+0298 60024bd6 store 4 ,mem_24g_tx_btclk 
+0299 20207fe7 branch enable_user 
+
+p_rssi_noise:
+029a 204029bb call save_rssi 
+029b 207a0000 rtn blank 
+029c 6808cc6f fetcht 1 ,mem_rssi_noise_index 
+029d da200d9e arg mem_rssi_noise_buffer ,rega 
+029e 204002a1 call p_rssi_store 
+029f 6008cc6f storet 1 ,mem_rssi_noise_index 
+02a0 20600000 rtn 
+
+p_rssi_store:
+02a1 1a227e00 copy rega ,pdata 
+02a2 98408a00 iadd temp ,contw 
+02a3 68008018 fetch 1 ,mem_rssi 
+02a4 e0a08000 istore 1 ,contw 
+02a5 18408401 increase 1 ,temp 
+02a6 18410407 and_into rssi_buf_len_signal ,temp 
+02a7 20600000 rtn 
+
+p_rssi_average:
+02a8 d8400000 arg 0 ,temp 
+02a9 df200008 arg rssi_buf_len_signal + 1 ,loopcnt 
+02aa 1a220c00 copy rega ,contr 
+
+p_rssi_average_loop:
+02ab e8c08000 ifetch 1 ,contr 
+02ac 98408400 iadd temp ,temp 
+02ad c20002ab loop p_rssi_average_loop 
+02ae 18497e00 rshift3 temp ,pdata 
+02af 1fe20400 copy pdata ,temp 
+02b0 c6930000 rtnmark0 mark_24g 
+02b1 1fe6fc0a div pdata ,10 
+02b2 20407f86 call wait_div_end 
+02b3 1807fe00 quotient pdata 
+02b4 1ff27e00 lshift4 pdata ,pdata 
+02b5 18070400 remainder temp 
+02b6 98418400 ior temp ,temp 
+02b7 20600000 rtn 
+02b8 20600000 rtn 
+
+p_mouse_before_lpm:
+02b9 c6130000 rtnmark1 mark_24g 
+02ba 204002c2 call p_mouse_setgpio_lpm 
+02bb 6800c040 fetch 1 ,mem_context 
+02bc c30002bf bbit0 state_inconn ,p_clear_wake 
+02bd 680080a0 fetch 1 ,mem_lpm_current_mult 
+02be 247a0000 nrtn blank 
+
+p_clear_wake:
+02bf 58000000 setarg 0 
+02c0 600400a1 store 8 ,mem_gpio_wakeup_low 
+02c1 20600000 rtn 
+
+p_mouse_setgpio_lpm:
+02c2 204002cb call p_mouse_set_sdio_high 
+02c3 204002bf call p_clear_wake 
+
+p_mouse_setgpio_lpm_before:
+02c4 20403ebf call mouse_lpm_before_common 
+02c5 68120070 hfetch 4 ,core_gpio_oe0 
+02c6 681a0078 hfetcht 4 ,core_gpio_pu0 
+02c7 98418400 ior temp ,temp 
+02c8 18440400 invert temp ,temp 
+02c9 601a007c hstoret 4 ,core_gpio_pd0 
+02ca 20600000 rtn 
+
+p_mouse_set_sdio_high:
+02cb 6800cafe fetch 1 ,mem_mouse_init_sensor_reset_flag 
+02cc 207a0000 rtn blank 
+02cd 202003c3 branch p_mouse_seting_dpi_diff 
+
+p_device_init:
+02ce 20403416 call app_lpm_mult_enable 
+02cf 203582d6 branch p_device_init_common ,wake 
+02d0 6800c1de fetch 1 ,mem_tx_power 
+02d1 6000cc6c store 1 ,mem_tx_power_temp 
+02d2 20400406 call power_ctrl_pac_succ_cnt_init 
+02d3 6800c685 fetch 1 ,mem_ui_button_timeout 
+02d4 6000c6da store 1 ,mem_combination_ui_button_count 
+02d5 204043ca call mouse_bt_discovery_button_down_disable 
+
+p_device_init_common:
+02d6 204002db call p_mouse_init 
+02d7 202074b9 branch enable_authrom 
+
+p_mouse_tx_power_init:
+02d8 6800cc6c fetch 1 ,mem_tx_power_temp 
+02d9 6000c1de store 1 ,mem_tx_power 
+02da 20600000 rtn 
+
+p_mouse_init:
+02db 2455831a ncall p_mouse_setting_config ,wake 
+02dc 204002f9 call p_mouse_spi_init 
+02dd 20758000 rtn wake 
+02de 2040034d call p_mouse_cb_fuction 
+02df 6800cb26 fetch 1 ,mem_power_on_flag 
+02e0 c28102e3 bbit1 2 ,p_mouse_skip_24g_pair 
+02e1 20404083 call mouse_check_key_gpio 
+02e2 c00282e7 beq mouse_lm_button ,p_mouse_24g_pairing_button 
+
+p_mouse_skip_24g_pair:
+02e3 20200335 branch p_mouse_wakeup_from_power 
+
+p_mouse_check_reconn_target:
+02e4 204002d8 call p_mouse_tx_power_init 
+02e5 6800c210 fetch 1 ,mem_xrecord_mode 
+02e6 20600000 rtn 
+
+p_mouse_24g_pairing_button:
+02e7 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+02e8 c4088000 rtnbit0 mouse_enable_24g 
+02e9 c3818000 rtnbit1 mosue_24g_pairing_flag 
+02ea c6130000 rtnmark1 mark_24g 
+02eb 20404482 call mouse_devce_led_off 
+02ec d8e00003 arg mosue_24g_pairing_flag ,queue 
+02ed 204043ce call mouse_enable_function_flag 
+02ee 58000000 setarg 0 
+02ef 600146ae store 2 ,mem_mouse_direct_timer 
+02f0 6000c6b4 store 1 ,mem_mouse_send_blank_timer 
+02f1 60014be2 store 2 ,mem_24g_check_dongle_times 
+02f2 204042ca call mouse_stop_discovery 
+02f3 20200154 branch p_g24_start_pairing_sm1 
+
+p_mouse_dpi_config:
+02f4 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+02f5 c30a3d66 bbit0 mouse_enable_eeprom ,mouse_dpi_config 
+02f6 6800c77a fetch 1 ,mem_mouse_dpi 
+02f7 c07fbd66 beq 0xff ,mouse_dpi_config 
+02f8 20203d80 branch mouse_seting_dpi + 2 
+
+p_mouse_spi_init:
+02f9 70421276 jam 0x76 ,mem_spi_init_clk 
+02fa 20203d36 branch mouse_spi_init 
+
+p_mouse_init_sunt:
+02fb 204002f9 call p_mouse_spi_init 
+02fc 204040c0 call mouse_spi_sdio_gpio_pollup 
+02fd 6800c6e0 fetch 1 ,mem_config_sensor_type 
+02fe c002c0d5 beq p3610 ,mouse_init_3610sensor 
+
+p_mouse_init_sensor:
+02ff 204040d9 call mouse_read_sensor_id 
+0300 c0180309 beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge 
+0301 c018830b beq p3065_id1 ,p_mouse_p3065_init_param 
+0302 204040d1 call mouse_twspi_reset 
+0303 200003e8 nop 1000 
+0304 202002ff branch p_mouse_init_sensor 
+
+p_mouse_init_sensor_reset:
+0305 704afe01 jam 1 ,mem_mouse_init_sensor_reset_flag 
+0306 2040640f call spi_ncs_enable 
+0307 204002fb call p_mouse_init_sunt 
+0308 20206411 branch spi_ncs_disable 
+
+p_mouse_init_p32xx_id2_judge:
+0309 20400310 call p_mouse_sensor_poweron 
+030a 202040e0 branch mouse_init_p32xx_id2_judge 
+
+p_mouse_p3065_init_param:
+030b 20400310 call p_mouse_sensor_poweron 
+030c 6800c6de fetch 1 ,mem_sensor_id2 
+030d c03840e8 beq p3065_xy_id2 ,mouse_p3065xy_init_param 
+030e 7046e001 jam p3065 ,mem_config_sensor_type 
+030f 20600000 rtn 
+
+p_mouse_sensor_poweron:
+0310 58008006 setarg 0x8006 
+0311 20406413 call twspi_write 
+0312 20002ee0 nop 12000 
+0313 202002f4 branch p_mouse_dpi_config 
+
+p_mouse_sensor_powerdown:
+0314 58000006 setarg 0x06 
+0315 20406414 call twspi_read 
+0316 1fe1fe08 or pdata ,0x08 ,pdata 
+0317 1fed7e00 lshift8 pdata ,pdata 
+0318 1fe0fe06 add pdata ,0x06 ,pdata 
+0319 20206413 branch twspi_write 
+
+p_mouse_setting_config:
+031a 2040008d call p_g24_set_device_addr 
+031b 68108a00 hfetch 1 ,core_usb_config 
+031c 793ffe04 set0 4 ,pdata 
+031d 60108a00 hstore 1 ,core_usb_config 
+031e 20403e1e call mouse_param_init 
+031f 58000000 setarg 0 
+0320 60014154 store 2 ,mem_lpm_interval 
+0321 20403e54 call mouse_adc_init 
+
+p_mouse_init_iic:
+0322 2040659c call iic_init_390k 
+0323 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+0324 2feffe19 isolate1 mouse_enable_2k_eeprom ,pdata 
+0325 2440e5c2 ncall clear_eeprom_size_2k ,true 
+0326 2040443f call mouse_load_eeprom_dpi 
+0327 2040032a call p_mouse_init_environment 
+
+p_mouse_read_24g_addr:
+0328 20400373 call p_mouse_set_24g_addr_eeprom 
+0329 202065df branch iicd_read_eep_data 
+
+p_mouse_init_environment:
+032a 204033c4 call app_initflag_check 
+032b 2022c316 branch mouse_eeprom_load_recon_info ,zero 
+032c 20203dcb branch mouse_init_environment + 2 
+
+p_app_flag_store:
+032d d8400002 arg 2 ,temp 
+032e da200aaa arg mem_timeup ,rega 
+032f da400062 arg mouse_eeprom_module_init_flag ,regb 
+0330 202065d1 branch iicd_write_protect_eep_data 
+
+p_app_initflag_check:
+0331 d8400002 arg 2 ,temp 
+0332 da200a9a arg mem_pdatatemp ,rega 
+0333 da400062 arg mouse_eeprom_module_init_flag ,regb 
+0334 202033c8 branch app_initflag_check + 4 
+
+p_mouse_wakeup_from_power:
+0335 202001aa branch p_g24_auto_pair_start 
+0336 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+0337 c30f033d bbit0 mouse_enable_wakeup_from_power ,p_mouse_wakeup_no_from_power 
+0338 68008abd fetch 1 ,mem_wakup_from_power_flag 
+0339 2fec0003 isolate0 gpio_latch ,pdata 
+033a 2420833d nbranch p_mouse_wakeup_no_from_power ,true 
+033b 204002fb call p_mouse_init_sunt 
+033c 20400314 call p_mouse_sensor_powerdown 
+
+p_mouse_wakeup_no_from_power:
+033d 6800c71f fetch 1 ,mem_reconn_times_init 
+033e 6000c71e store 1 ,mem_reconn_times 
+
+p_mouse_start_24g_mode:
+033f 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+0340 c4088000 rtnbit0 mouse_enable_24g 
+0341 20400344 call p_g24_factory_check 
+0342 203401aa branch p_g24_auto_pair_start ,user 
+0343 20200187 branch p_g24_start_24g_mode 
+
+p_g24_factory_check:
+0344 df200002 arg 2 ,loopcnt 
+0345 d8c04bdd arg mem_24g_addr ,contr 
+
+p_pdata_0xff_check:
+0346 20407fe7 call enable_user 
+0347 5800ffff setarg 0xffff 
+
+p_pdata_0xff_check_loop:
+0348 e8c90000 ifetcht 2 ,contr 
+0349 98467c00 isub temp ,null 
+034a 2442ffe9 ncall disable_user ,zero 
+034b c2000348 loop p_pdata_0xff_check_loop 
+034c 20600000 rtn 
+
+p_mouse_cb_fuction:
+034d 58000364 setarg p_mouse_priority_bb_event 
+034e 600141f5 store 2 ,mem_cb_bb_event_process 
+034f 58000352 setarg p_mouse_g24_package_data 
+0350 60014ce6 store 2 ,mem_cb_24g_data 
+0351 20600000 rtn 
+
+p_mouse_g24_package_data:
+0352 20200357 branch p_mouse_g24_package_data_allpower 
+
+p_mouse_g24_package_data_normal:
+0353 20404401 call mouse_g24_package_data 
+0354 6801469f fetch 2 ,mem_mouse_z 
+0355 207a0000 rtn blank 
+0356 2020006d branch p_g24_transmit_by_interrupt_enable 
+
+p_mouse_g24_package_data_allpower:
+0357 20400475 call p_g24_matrix_data 
+0358 20200354 branch p_mouse_g24_package_data_normal + 1 
+
+p_mouse_wheel_trigger:
+0359 6801469f fetch 2 ,mem_mouse_z 
+035a 207a0000 rtn blank 
+035b 70480601 jam 1 ,mem_mouse_wheel_trigger 
+035c 70480702 jam 2 ,mem_mouse_wheel_trigger_timer 
+035d 20600000 rtn 
+
+p_mouse_clear_sensor_data:
+035e 20405814 call le_set_config_more_data 
+035f 70479c01 jam 1 ,mem_mouse_clear_sensor_data_flag 
+0360 20200310 branch p_mouse_sensor_poweron 
+
+p_mouse_idle:
+0361 20407e34 call ui_check_paring_button 
+0362 20403d6a call mouse_dpi_cheak 
+0363 20203ee0 branch mouse_wheel_check 
+
+p_mouse_priority_bb_event:
+0364 1a627e00 copy regc ,pdata 
+0365 c01c8369 beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete 
+0366 c01d0377 beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail 
+0367 c01e0382 beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success 
+0368 2020417d branch mouse_priority_bb_event + 1 
+
+p_mouse_24g_pairing_complete:
+0369 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable 
+036a d8e00003 arg mosue_24g_pairing_flag ,queue 
+036b 204043d2 call mouse_disable_function_flag 
+036c 58000000 setarg 0 
+036d 60014707 store 2 ,mem_24g_pairing_timer_count 
+036e 7046a700 jam 0 ,mem_mouse_move_flag 
+036f 2040405d call mouse_read_sensor_common 
+0370 2040006d call p_g24_transmit_by_interrupt_enable 
+0371 20400373 call p_mouse_set_24g_addr_eeprom 
+0372 202065d1 branch iicd_write_protect_eep_data 
+
+p_mouse_set_24g_addr_eeprom:
+0373 da204bdd arg mem_24g_addr ,rega 
+0374 da40005b arg mouse_g24_addr_eeprom_offect ,regb 
+0375 d8400004 arg 4 ,temp 
+0376 20600000 rtn 
+
+p_mouse_24g_attempt_fail:
+0377 704cf500 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt 
+0378 204002d8 call p_mouse_tx_power_init 
+0379 204001cd call p_g24_check_51cmd_stop_24g 
+037a 2020659a branch soft_reset_chip 
+037b 7041bd00 jam 0 ,mem_link_key_exists 
+037c 20404316 call mouse_eeprom_load_recon_info 
+037d df200003 arg 3 ,loopcnt 
+037e d8c04722 arg mem_device1_addr ,contr 
+037f 20400346 call p_pdata_0xff_check 
+0380 203403bf branch p_mouse_null_enter_hibernate_count ,user 
+0381 202002e4 branch p_mouse_check_reconn_target 
+
+p_mouse_24g_attempt_success:
+0382 20203f8d branch mouse_no_data_timer_init 
+
+p_mouse_before_hibernate:
+0383 78347c00 enable user 
+0384 68120138 hfetch 4 ,0x8138 
+0385 79347e1a setflag user ,26 ,pdata 
+0386 6012004c hstore 4 ,core_lpm_reg 
+0387 20402c21 call lpm_write_ctrl 
+0388 2040038d call p_mouse_sensor_powerdown_check 
+0389 204074bd call disable_authrom 
+038a 20404482 call mouse_devce_led_off 
+038b 20403e9f call mouse_before_hibernate_wheel_gpio_set 
+038c 202002c4 branch p_mouse_setgpio_lpm_before 
+
+p_mouse_sensor_powerdown_check:
+038d 6800cafe fetch 1 ,mem_mouse_init_sensor_reset_flag 
+038e 207a0000 rtn blank 
+038f 704afe00 jam 0 ,mem_mouse_init_sensor_reset_flag 
+0390 20200314 branch p_mouse_sensor_powerdown 
+
+p_mouse_bb_event_timer:
+0391 20400396 call p_mouse_wheel_trigger_timer 
+0392 204003b6 call p_mouse_null_enter_hibernate_check 
+0393 2040039b call p_mouse_bt_discovery_check 
+0394 20404234 call mouse_check_discovery_timeout_timer 
+0395 2020423a branch mouse_check_no_data_timeout_timer 
+
+p_mouse_wheel_trigger_timer:
+0396 da604807 arg mem_mouse_wheel_trigger_timer ,regc 
+0397 da400399 arg p_mouse_wheel_trigger_disable ,regb 
+0398 2020336d branch timer_single_step 
+
+p_mouse_wheel_trigger_disable:
+0399 70480600 jam 0 ,mem_mouse_wheel_trigger 
+039a 20600000 rtn 
+
+p_mouse_bt_discovery_check:
+039b 6800c6f5 fetch 1 ,mem_config_function_enable 
+039c c2824394 bbit1 enable_bt_button ,mouse_bt_discovery_by_button 
+
+p_mouse_bt_discovery_commbination_key:
+039d 20404083 call mouse_check_key_gpio 
+039e c00383a7 beq mouse_lmr_button ,p_mouse_bt_discovery_commbination_key_down 
+
+p_mouse_bt_discovery_commbination_key_up:
+039f 6800c685 fetch 1 ,mem_ui_button_timeout 
+03a0 6000c6da store 1 ,mem_combination_ui_button_count 
+03a1 6800c6db fetch 1 ,mem_bt_discovey_button_statue 
+03a2 c1008000 rtneq dpi_button_state_up 
+03a3 7046db01 jam dpi_button_state_up ,mem_bt_discovey_button_statue 
+03a4 d8e00009 arg mouse_bt_discovery_button_long_down_flag ,queue 
+03a5 204043d2 call mouse_disable_function_flag 
+03a6 202043ca branch mouse_bt_discovery_button_down_disable 
+
+p_mouse_bt_discovery_commbination_key_down:
+03a7 70479e28 jam 40 ,mem_mouse_null_enter_hibernate_timer 
+03a8 204003aa call p_mouse_bt_discovery_timer 
+03a9 202043b0 branch mouse_bt_discovery_commbination_key_down + 1 
+
+p_mouse_bt_discovery_timer:
+03aa da6046da arg mem_combination_ui_button_count ,regc 
+03ab da4003ad arg p_mouse_long_button_bt_discovery ,regb 
+03ac 2020336d branch timer_single_step 
+
+p_mouse_long_button_bt_discovery:
+03ad 68014682 fetch 2 ,mem_ui_state_map 
+03ae 2feffe0b isolate1 ui_state_ble_adv ,pdata 
+03af 2040c2d4 call mouse_stop_le_adv ,true 
+03b0 68014682 fetch 2 ,mem_ui_state_map 
+03b1 2feffe07 isolate1 ui_state_bt_reconnect ,pdata 
+03b2 2040c392 call mouse_cancel_reconnect ,true 
+03b3 d8e00009 arg mouse_bt_discovery_button_long_down_flag ,queue 
+03b4 204043ce call mouse_enable_function_flag 
+03b5 202043b8 branch mouse_long_button_bt_discovry 
+
+p_mouse_null_enter_hibernate_check:
+03b6 6800c79d fetch 1 ,mem_mouse_null_enter_hibernate_flag 
+03b7 207a0000 rtn blank 
+03b8 6800c79e fetch 1 ,mem_mouse_null_enter_hibernate_timer 
+03b9 203a03bd branch p_mouse_null_enter_hibernate ,blank 
+03ba 1fe0ffff increase -1 ,pdata 
+03bb 6000c79e store 1 ,mem_mouse_null_enter_hibernate_timer 
+03bc 20600000 rtn 
+
+p_mouse_null_enter_hibernate:
+03bd 70479d00 jam 0 ,mem_mouse_null_enter_hibernate_flag 
+03be 2020340a branch app_enter_hibernate 
+
+p_mouse_null_enter_hibernate_count:
+03bf 70479d01 jam 1 ,mem_mouse_null_enter_hibernate_flag 
+03c0 70479e28 jam 40 ,mem_mouse_null_enter_hibernate_timer 
+03c1 20600000 rtn 
+
+p_mouse_seting_dpi:
+03c2 2040424a call mosue_dpi_led_blink_init 
+
+p_mouse_seting_dpi_diff:
+03c3 6800c6e0 fetch 1 ,mem_config_sensor_type 
+03c4 c00303c6 beq p3065_xy ,p_mouse_seting_3065xy_dpi 
+03c5 20203d81 branch mouse_seting_dpi + 3 
+
+p_mouse_seting_3065xy_dpi:
+03c6 6800c77a fetch 1 ,mem_mouse_dpi 
+03c7 205a03cc call p_mouse_3065xy_dpi_recount ,blank 
+03c8 6800c77a fetch 1 ,mem_mouse_dpi 
+03c9 c000bd8a beq mouse_dpi_level2 ,mouse_set_cpi1 
+03ca c001bd8e beq mouse_dpi_level4 ,mouse_set_cpi4 
+03cb 20203d8c branch mouse_set_cpi3 
+
+p_mouse_3065xy_dpi_recount:
+03cc 70477a01 jam 1 ,mem_mouse_dpi 
+03cd 20600000 rtn 
+
+p_mouse_motion:
+03ce 78547c00 disable user 
+03cf 58000000 setarg 0 
+03d0 6003469b store 6 ,mem_mouse_x 
+03d1 20403fb5 call mouse_cheak_sensor_data 
+03d2 20404079 call mouse_zwheel 
+03d3 2040407e call mouse_t_zwheel 
+03d4 20404099 call mouse_key 
+03d5 24740000 nrtn user 
+03d6 20203fa0 branch mouse_motion + 9 
+
+p_mouse_bb_event_discovery_btn:
+03d7 70479d00 jam 0 ,mem_mouse_null_enter_hibernate_flag 
+03d8 70479e00 jam 0 ,mem_mouse_null_enter_hibernate_timer 
+03d9 280ffe26 isolate1 mark_24g ,mark 
+03da 204081cd call p_g24_check_51cmd_stop_24g ,true 
+03db 2020426d branch mouse_bb_event_discovery_btn + 1 
+
+p_mouse_start_discovery:
+03dc 204002d8 call p_mouse_tx_power_init 
+03dd 70479c00 jam 0 ,mem_mouse_clear_sensor_data_flag 
+03de 68014682 fetch 2 ,mem_ui_state_map 
+03df c28583e2 bbit1 ui_state_ble_adv ,p_mouse_start_discovery_norandom 
+03e0 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+03e1 c30c03e2 bbit0 mouse_enable_ble_random_addre ,p_mouse_start_discovery_norandom 
+
+p_mouse_start_discovery_norandom:
+03e2 20403418 call app_lpm_mult_disable 
+03e3 68014687 fetch 2 ,mem_discovery_timeout 
+03e4 600146ac store 2 ,mem_mouse_discovery_timer 
+03e5 70016d06 jam 6 ,mem_connection_options 
+03e6 58000000 setarg 0 
+03e7 600146b0 store 2 ,mem_mouse_no_data_timer 
+03e8 600146ae store 2 ,mem_mouse_direct_timer 
+03e9 d8e00007 arg mouse_store_eeprom_flag ,queue 
+03ea 204043ce call mouse_enable_function_flag 
+03eb 204043ca call mouse_bt_discovery_button_down_disable 
+03ec 202042c4 branch mouse_start_discovery_norandom + 13 
+
+p_mouse_stop_discovery:
+03ed 58000000 setarg 0 
+03ee 600146ac store 2 ,mem_mouse_discovery_timer 
+03ef 20400310 call p_mouse_sensor_poweron 
+03f0 202042cb branch mouse_stop_discovery + 1 
+
+p_twspi_reset:
+03f1 68108077 hfetch 1 ,core_gpio_out3 
+03f2 1fe17efd and_into 0xfd ,pdata 
+03f3 60108077 hstore 1 ,core_gpio_out3 
+03f4 68188073 hfetcht 1 ,core_gpio_oe3 
+03f5 18418402 or_into 0x2 ,temp 
+03f6 60188073 hstoret 1 ,core_gpio_oe3 
+03f7 204063ee call twspi_disable 
+03f8 184104fd and_into 0xfd ,temp 
+03f9 2000000d nop 13 
+03fa 204063f2 call twspi_enable 
+03fb 60188073 hstoret 1 ,core_gpio_oe3 
+03fc 20600000 rtn 
+
+p_check_51cmd_once_continue:
+03fd 204062bc call lmo_fifo_check 
+03fe 243a7ddb nbranch check_51cmd_restore ,blank 
+03ff 68008a99 fetch 1 ,mem_fifo_temp 
+0400 c584fdd6 bmark0 mark_context ,check_51cmd_check_idle 
+0401 c0090403 beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param 
+0402 20207dca branch check_51cmd_once_continue + 2 
+
+p_check_51cmd_ble_update_connect_param:
+0403 20405890 call le_fifo_check_full 
+0404 247a0000 nrtn blank 
+0405 20205abf branch le_l2cap_tx_update_req 
+
+power_ctrl_pac_succ_cnt_init:
+0406 704cf101 jam 1 ,mem_power_ctrl_level 
+0407 704cee00 jam 0 ,mem_power_ctrl_pac_succ_cnt 
+0408 20600000 rtn 
+
+power_ctrl_pac_succ_incrs:
+0409 6800ccee fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+040a 1fe0fe01 increase 1 ,pdata 
+040b 6000ccee store 1 ,mem_power_ctrl_pac_succ_cnt 
+040c 20600000 rtn 
+
+power_ctrl_pac_succ_decrs:
+040d 6800ccee fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+040e 1fe67c02 sub pdata ,2 ,null 
+040f 24410415 ncall power_ctrl_pac_succ_cnt_reinit ,positive 
+0410 6800ccee fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0411 c1000000 rtneq 0 
+0412 1fe0ffff increase -1 ,pdata 
+0413 6000ccee store 1 ,mem_power_ctrl_pac_succ_cnt 
+0414 20600000 rtn 
+
+power_ctrl_pac_succ_cnt_reinit:
+0415 704cee03 jam 3 ,mem_power_ctrl_pac_succ_cnt 
+0416 20600000 rtn 
+
+power_ctrl_start:
+0417 20600000 rtn 
+0418 68014682 fetch 2 ,mem_ui_state_map 
+0419 c3858000 rtnbit1 ui_state_ble_adv 
+041a c3838000 rtnbit1 ui_state_bt_reconnect 
+041b c3830000 rtnbit1 ui_state_bt_discovery 
+041c da204c77 arg mem_rssi_signal_buf ,rega 
+041d 204002a8 call p_rssi_average 
+041e 6008ccef storet 1 ,mem_rssi_avg_received 
+041f 58000082 setarg rssi_dis_max_24g 
+0420 c5130422 bmark1 mark_24g ,power_ctrl_start_next 
+0421 58000080 setarg rssi_dis_max_ble 
+
+power_ctrl_start_next:
+0422 98467c00 isub temp ,null 
+0423 2421043a nbranch power_ctrl_txpower_incrs_force ,positive 
+0424 6800ccee fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0425 1fe67c02 sub pdata ,2 ,null 
+0426 2421042a nbranch power_ctrl_txpower_decrs_check ,positive 
+0427 6800ccee fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+0428 c000043b beq 0 ,power_ctrl_txpower_incrs 
+0429 20600000 rtn 
+
+power_ctrl_txpower_decrs_check:
+042a 6800ccee fetch 1 ,mem_power_ctrl_pac_succ_cnt 
+042b c1900000 rtnne 32 
+042c 704cee00 jam 0 ,mem_power_ctrl_pac_succ_cnt 
+
+power_ctrl_txpower_decrs:
+042d 6808ccef fetcht 1 ,mem_rssi_avg_received 
+042e 58000077 setarg rssi_dis_min_24g 
+042f c5130431 bmark1 mark_24g ,power_ctrl_txpower_decrs_next 
+0430 58000075 setarg rssi_dis_min_ble 
+
+power_ctrl_txpower_decrs_next:
+0431 98467c00 isub temp ,null 
+0432 24610000 nrtn positive 
+0433 6800ccf1 fetch 1 ,mem_power_ctrl_level 
+0434 c0000442 beq 0 ,power_ctrl_decrs_level0 
+0435 1fe0ffff increase -1 ,pdata 
+0436 6000ccf1 store 1 ,mem_power_ctrl_level 
+0437 c0000442 beq 0 ,power_ctrl_decrs_level0 
+
+power_ctrl_decrs_level1:
+
+power_ctrl_incrs_level1:
+0438 7041de00 jam tx_power_0db ,mem_tx_power 
+0439 20600000 rtn 
+
+power_ctrl_txpower_incrs_force:
+043a 704cee00 jam 0 ,mem_power_ctrl_pac_succ_cnt 
+
+power_ctrl_txpower_incrs:
+043b 6800ccf1 fetch 1 ,mem_power_ctrl_level 
+043c c0010440 beq 2 ,power_ctrl_incrs_level2 
+043d 1fe0fe01 increase 1 ,pdata 
+043e 6000ccf1 store 1 ,mem_power_ctrl_level 
+043f c0008438 beq 1 ,power_ctrl_incrs_level1 
+
+power_ctrl_incrs_level2:
+0440 7041de02 jam tx_power_5db ,mem_tx_power 
+0441 20600000 rtn 
+
+power_ctrl_decrs_level0:
+0442 7041de04 jam tx_power_f5db ,mem_tx_power 
+0443 20600000 rtn 
+
+p_set_freq_tx:
+0444 60088017 storet 1 ,mem_last_freq 
+0445 1840a200 add temp ,0 ,rega 
+0446 20402981 call rf_write_freq 
+0447 58000500 setarg param_pll_setup 
+0448 20402a8f call sleep 
+
+p_rf_tx_enable:
+0449 70890601 jam 0x1 ,rfen_adc 
+044a 7089003c jam 0x3c ,rfen_rx 
+044b 708901e0 jam 0xe0 ,rfen_tx 
+044c 2000000a nop 10 
+044d 70890201 jam 0x01 ,rfen_mdm 
+044e 7089023d jam 0x3d ,rfen_mdm 
+044f 2000000a nop 10 
+0450 708903b7 jam 0xb7 ,rfen_sn 
+0451 2000000a nop 10 
+0452 7089027d jam 0x7d ,rfen_mdm 
+0453 6800c1de fetch 1 ,mem_tx_power 
+0454 c001045c beq tx_power_5db ,p_set_tx_power_5db 
+0455 c0020461 beq tx_power_f5db ,p_set_tx_power_f5db 
+0456 c0100470 beq tx_power_pair ,p_set_tx_power_pair 
+
+p_set_tx_power_0db:
+0457 20400466 call p_rx_low_sens 
+0458 708955d0 jam 0xd0 ,0x8955 
+0459 708956e0 jam 0xe0 ,0x8956 
+045a 7089586c jam 0x6c ,0x8958 
+045b 2020294b branch set_tx_power_0db 
+
+p_set_tx_power_5db:
+045c 2040046b call p_rx_high_sens 
+045d 708955d0 jam 0xd0 ,0x8955 
+045e 708956e0 jam 0xe0 ,0x8956 
+045f 7089583c jam 0x3c ,0x8958 
+0460 20202953 branch set_tx_power_5db 
+
+p_set_tx_power_f5db:
+0461 20400466 call p_rx_low_sens 
+0462 708955d0 jam 0xd0 ,0x8955 
+0463 708956c0 jam 0xc0 ,0x8956 
+0464 7089586c jam 0x6c ,0x8958 
+0465 2020295b branch set_tx_power_f5db 
+
+p_rx_low_sens:
+0466 70894c5b jam 0x5b ,0x894c 
+0467 70894d96 jam 0x96 ,0x894d 
+0468 70894e2c jam 0x2c ,0x894e 
+0469 70894f46 jam 0x46 ,0x894f 
+046a 20600000 rtn 
+
+p_rx_high_sens:
+046b 70894cfb jam 0xfb ,0x894c 
+046c 70894def jam 0xef ,0x894d 
+046d 70894eec jam 0xec ,0x894e 
+046e 70894f5e jam 0x5e ,0x894f 
+046f 20600000 rtn 
+
+p_set_tx_power_pair:
+0470 708956c5 jam 0xc5 ,0x8956 
+0471 708955d0 jam 0xd0 ,0x8955 
+0472 20600000 rtn 
+
+p_shutdown_radio:
+0473 18002a08 force 8 ,radio_ctrl 
+0474 202028fa branch shutdown_radio + 1 
+
+p_g24_matrix_data:
+0475 6800cb2e fetch 1 ,mem_24g_matrix_cnt 
+0476 1fe0fe01 increase 1 ,pdata 
+0477 6000cb2e store 1 ,mem_24g_matrix_cnt 
+0478 1fe67c32 sub pdata ,50 ,null 
+0479 20210481 branch p_ms_x_right ,positive 
+047a 1fe67c64 sub pdata ,100 ,null 
+047b 2021048c branch p_ms_y_up ,positive 
+047c 1fe67c96 sub pdata ,150 ,null 
+047d 20210494 branch p_ms_x_left ,positive 
+047e 1fe67cc8 sub pdata ,200 ,null 
+047f 2021049c branch p_ms_y_down ,positive 
+0480 20600000 rtn 
+
+p_ms_x_right:
+0481 58000005 setarg 0x05 
+0482 60014b28 store 2 ,mem_m_x 
+0483 58000000 setarg 0 
+0484 60014b2a store 2 ,mem_m_y 
+0485 6000cb2c store 1 ,mem_m_z 
+0486 6000cb27 store 1 ,mem_m_key 
+0487 6000cb2d store 1 ,mem_m_tz 
+
+p_data:
+0488 78347c00 enable user 
+0489 da200007 arg 7 ,rega 
+048a da404b27 arg mem_m_key ,regb 
+048b 20600000 rtn 
+
+p_ms_y_up:
+048c 58000005 setarg 0x05 
+048d 60014b2a store 2 ,mem_m_y 
+048e 58000000 setarg 0 
+048f 60014b28 store 2 ,mem_m_x 
+0490 6000cb2c store 1 ,mem_m_z 
+0491 6000cb27 store 1 ,mem_m_key 
+0492 6000cb2d store 1 ,mem_m_tz 
+0493 20200488 branch p_data 
+
+p_ms_x_left:
+0494 5800fffb setarg 0xfffb 
+0495 60014b28 store 2 ,mem_m_x 
+0496 58000000 setarg 0 
+0497 60014b2a store 2 ,mem_m_y 
+0498 6000cb2c store 1 ,mem_m_z 
+0499 6000cb27 store 1 ,mem_m_key 
+049a 6000cb2d store 1 ,mem_m_tz 
+049b 20200488 branch p_data 
+
+p_ms_y_down:
+049c 6800cb2e fetch 1 ,mem_24g_matrix_cnt 
+049d c06404a6 beq 200 ,p_mem_usb_data_square_cnt_set0 
+049e 5800fffb setarg 0xfffb 
+049f 60014b2a store 2 ,mem_m_y 
+04a0 58000000 setarg 0 
+04a1 60014b28 store 2 ,mem_m_x 
+04a2 6000cb2c store 1 ,mem_m_z 
+04a3 6000cb27 store 1 ,mem_m_key 
+04a4 6000cb2d store 1 ,mem_m_tz 
+04a5 20200488 branch p_data 
+
+p_mem_usb_data_square_cnt_set0:
+04a6 704b2e00 jam 0 ,mem_24g_matrix_cnt 
+04a7 2020049e branch p_ms_y_down + 2 
+org 0x2000
+
+start:
+2000 20402abc call lpmstate 
+
+soft_reset:
+2001 44804000 bpatch patch00_0 ,mem_patch00 
+2002 20800000 clear_stack 
+2003 2040640d call spi_ncs_gpio_init 
+2004 2040296c call initialize_radio 
+2005 204065a3 call iicd_init_12m 
+2006 20402a96 call init_param 
+2007 20404d6a call l2cap_init 
+2008 4480c000 bpatch patch00_1 ,mem_patch00 
+2009 20406a03 call rfcomm_init 
+200a 20405cf6 call init_lmp 
+200b 20407ccc call ui_init 
+200c 204032d8 call app_init 
+200d 2455e89c ncall load_chip_option ,wake 
+200e 44814000 bpatch patch00_2 ,mem_patch00 
+200f 2055b2e3 call app_lpm_init ,wake 
+2010 2040756a call publickey_init 
+
+soft_reset_2:
+2011 2055ab41 call lpm_recover_clk ,wake 
+
+main_loop:
+2012 4481c000 bpatch patch00_3 ,mem_patch00 
+2013 204076dc call sp_calc_sequence 
+2014 20407aaf call sp_calc_sequence_256 
+2015 2040756d call sp_calc_sequence_256_check 
+2016 2040535c call le_dispatch 
+2017 44824000 bpatch patch00_4 ,mem_patch00 
+2018 20402038 call idle_dispatch 
+2019 204032ed call app_process_idle 
+201a 2040208f call inquiry_dispatch 
+201b 204022f8 call inquiry_scan_dispatch 
+201c 2040236a call page_scan_dispatch 
+201d 20402021 call connection_dispatch 
+201e 20402b6a call lpm_dispatch 
+201f 20402c72 call g24_dispatch 
+2020 20202012 branch main_loop 
+
+connection_dispatch:
+2021 20402026 call connection_incontext 
+2022 c6848000 rtnmark0 mark_context 
+2023 793f8009 set0 mark_context ,mark 
+2024 20402223 call context_save 
+2025 202053ce branch le_disable 
+
+connection_incontext:
+2026 4482c000 bpatch patch00_5 ,mem_patch00 
+2027 2040225e call context_search_insniff 
+2028 2422a02f nbranch connection_nosniff ,zero 
+2029 2040220a call context_load 
+202a 1a208c01 add rega ,coffset_mode ,contr 
+202b e8c08000 ifetch 1 ,contr 
+202c c2805360 bbit1 mode_le ,le_conn_dispatch 
+202d c280a166 bbit1 mode_master ,master_dispatch 
+202e 202023cf branch slave_dispatch 
+
+connection_nosniff:
+202f 2040222b call context_get_next 
+2030 1f227c00 copy loopcnt ,null 
+2031 20628000 rtn zero 
+2032 2040220a call context_load 
+2033 68008030 fetch 1 ,mem_state 
+2034 c281a0d3 bbit1 state_inpage ,master_page 
+2035 68008031 fetch 1 ,mem_mode 
+2036 c280a166 bbit1 mode_master ,master_dispatch 
+2037 202023cf branch slave_dispatch 
+
+idle_dispatch:
+2038 6800c1ce fetch 1 ,mem_hci_cmd 
+2039 207a0000 rtn blank 
+203a c000a048 beq hci_cmd_inquiry ,idle_inquiry 
+203b c001204d beq hci_cmd_inquiry_cancel ,idle_inquiry_cancel 
+203c c001a050 beq hci_cmd_remote_name_req ,idle_remote_name_req 
+203d c002a055 beq hci_cmd_create_conn ,idle_create_conn 
+203e c00da045 beq hci_cmd_le_create_conn ,idle_le_create_conn 
+203f 20402257 call context_search_conn_handle 
+2040 20628000 rtn zero 
+2041 2040225a call context_search_plap 
+2042 20628000 rtn zero 
+
+idle_exit:
+2043 7041ce00 jam 0 ,mem_hci_cmd 
+2044 20600000 rtn 
+
+idle_le_create_conn:
+2045 70049b1b jam hci_cmd_le_create_conn ,mem_cmd_le_create_conn 
+2046 7041ce00 jam 0 ,mem_hci_cmd 
+2047 20600000 rtn 
+
+idle_inquiry:
+2048 7920001c set1 mark_inquiry_on ,mark 
+2049 793f801e set0 mark_inquiry_trainb ,mark 
+204a 70008fff jam param_ninquiry ,mem_ninqy_index 
+204b 70008d1f jam 31 ,mem_nfreq_index_inq 
+204c 20202043 branch idle_exit 
+
+idle_inquiry_cancel:
+204d 793f801c set0 mark_inquiry_on ,mark 
+204e 18003600 force 0 ,stop_watch 
+204f 20202043 branch idle_exit 
+
+idle_remote_name_req:
+2050 2040225a call context_search_plap 
+2051 20628000 rtn zero 
+2052 18000401 force lmp_name_req ,temp 
+2053 70016e05 jam 5 ,mem_nameres_cnt 
+2054 2020205c branch idle_start_page 
+
+idle_create_conn:
+2055 44834000 bpatch patch00_6 ,mem_patch00 
+
+idle_create_conn_device:
+2056 680341d0 fetch 6 ,mem_hci_plap 
+2057 203a2043 branch idle_exit ,blank 
+2058 70468101 jam reconnect_hid ,memui_reconnect_mode 
+2059 70005503 jam conn_sm_wait_features_res ,mem_conn_sm 
+205a 2020205b branch idle_create_conn_cont 
+
+idle_create_conn_cont:
+205b 18000425 force lmp_version_req ,temp 
+
+idle_start_page:
+205c 4483c000 bpatch patch00_7 ,mem_patch00 
+205d 680080f1 fetch 1 ,mem_page_mode 
+205e 203a2062 branch idle_page_mode_r0 ,blank 
+205f 1fe9fe00 lshift3 pdata ,pdata 
+2060 1ff27e00 lshift4 pdata ,pdata 
+2061 1fe0ffff increase -1 ,pdata 
+
+idle_page_mode_r0:
+2062 6000c0a6 store 1 ,mem_npage 
+2063 600080f0 store 1 ,mem_npage_index 
+2064 70008e1f jam 31 ,mem_nfreq_index_page 
+2065 793f800c set0 mark_page_trainb ,mark 
+2066 2040223b call context_new 
+2067 2422a083 nbranch idle_page_fail ,zero 
+2068 20402a6f call get_free_amaddr 
+2069 60008077 store 1 ,mem_amaddr 
+206a 6008807c storet 1 ,mem_lmo_opcode2 
+206b 680341d0 fetch 6 ,mem_hci_plap 
+206c 60030040 store 6 ,mem_plap 
+206d 44844001 bpatch patch01_0 ,mem_patch01 
+206e 20407f15 call timer_reinit 
+206f 18007e00 force 0 ,pdata 
+2070 2841fe01 compare lmp_name_req ,temp ,0xff 
+2071 7d20fe05 nsetflag true ,state_init_seq ,pdata 
+2072 79207e03 set1 state_inpage ,pdata 
+2073 60008030 store 1 ,mem_state 
+2074 700a9903 jam bt_evt_reconn_started ,mem_fifo_temp 
+2075 20407d86 call ui_ipc_send_event 
+2076 18007e00 force 0 ,pdata 
+2077 7920fe04 setflag true ,smap_name_req ,pdata 
+2078 6000804c store 1 ,mem_state_map 
+2079 58000000 setarg 0 
+207a 79207e01 set1 mode_master ,pdata 
+207b 60008031 store 1 ,mem_mode 
+207c 7834fc00 enable master 
+207d 20402223 call context_save 
+207e 7854fc00 disable master 
+207f 18000e03 force page_length_timer ,queue 
+2080 680140b9 fetch 2 ,mem_page_to 
+2081 20407f08 call timer_init 
+2082 20202043 branch idle_exit 
+
+idle_page_fail:
+2083 4484c001 bpatch patch01_1 ,mem_patch01 
+2084 680341d0 fetch 6 ,mem_hci_plap 
+2085 60030040 store 6 ,mem_plap 
+2086 2841fe01 compare lmp_name_req ,temp ,0xff 
+2087 2020a089 branch idle_name_fail ,true 
+2088 20202043 branch idle_exit 
+
+idle_name_fail:
+2089 d8a00101 arg mem_tmp_buffer ,contw 
+208a df200008 arg 8 ,loopcnt 
+208b 20407ec6 call memset0 
+208c 700a9904 jam bt_evt_reconn_failed ,mem_fifo_temp 
+208d 20407d86 call ui_ipc_send_event 
+208e 20202043 branch idle_exit 
+
+inquiry_dispatch:
+208f c68e0000 rtnmark0 mark_inquiry_on 
+2090 18000e01 force inquiry_length_timer ,queue 
+2091 20407f16 call timer_check 
+2092 7d3a001c nsetflag blank ,mark_inquiry_on ,mark 
+2093 243a2095 nbranch inquiry_start ,blank 
+2094 20600000 rtn 
+
+inquiry_start:
+2095 44854001 bpatch patch01_2 ,mem_patch01 
+2096 680940bb fetcht 2 ,mem_inq_window 
+2097 18000e04 force 4 ,queue 
+2098 2040271c call sniff_check_window 
+2099 20740000 rtn user 
+209a 204028a4 call afh_clear 
+209b 18004800 force 0 ,freq_mode 
+
+inquiry_restart:
+209c 20618000 rtn timeout 
+209d 793f800b set0 mark_fhs_already_good ,mark 
+209e 793f8000 set0 mark_fhs_eir ,mark 
+
+inquiry_rx_restart:
+209f 1c40c201 add clkn_bt ,1 ,bt_clk 
+20a0 280ffe1e isolate1 mark_inquiry_trainb ,mark 
+20a1 7920c802 setflag true ,2 ,freq_mode 
+20a2 2c200400 compare 0x00 ,bt_clk ,0x02 
+20a3 2420a0be nbranch inquiry_receive ,true 
+
+inquiry_transmit:
+20a4 4485c001 bpatch patch01_3 ,mem_patch01 
+20a5 68008012 fetch 1 ,mem_inquiry_transmit 
+20a6 1fe0fe01 increase 1 ,pdata 
+20a7 60008012 store 1 ,mem_inquiry_transmit 
+20a8 204028d8 call fetch_giac 
+20a9 204028d2 call tx_radio_freq 
+20aa 204028f2 call fetch_diac 
+20ab 20402a51 call start_transmitter 
+20ac 20402a56 call start_tx_native 
+20ad 20402a64 call send_access_word 
+20ae 2040264d call end_of_packet 
+20af 204020b1 call inquiry_check_train 
+20b0 2020209c branch inquiry_restart 
+
+inquiry_check_train:
+20b1 44864001 bpatch patch01_4 ,mem_patch01 
+20b2 6800808d fetch 1 ,mem_nfreq_index_inq 
+20b3 1fe0ffff increase -1 ,pdata 
+20b4 6000808d store 1 ,mem_nfreq_index_inq 
+20b5 20610000 rtn positive 
+20b6 70008d1f jam 31 ,mem_nfreq_index_inq 
+20b7 6800808f fetch 1 ,mem_ninqy_index 
+20b8 1fe0ffff increase -1 ,pdata 
+20b9 6000808f store 1 ,mem_ninqy_index 
+20ba 20610000 rtn positive 
+20bb 7940001e setflip mark_inquiry_trainb ,mark 
+20bc 70008fff jam param_ninquiry ,mem_ninqy_index 
+20bd 20600000 rtn 
+
+inquiry_receive:
+20be 4486c001 bpatch patch01_5 ,mem_patch01 
+20bf 204028d8 call fetch_giac 
+20c0 204028cc call rx_radio_freq 
+20c1 204028f2 call fetch_diac 
+20c2 20402a5b call start_rx_native 
+20c3 204029eb call start_receiver 
+20c4 20402a0d call wait_access_clkn_rt 
+20c5 202c20c8 branch inquiry_sync ,sync 
+20c6 204020b1 call inquiry_check_train 
+20c7 2020209f branch inquiry_rx_restart 
+
+inquiry_sync:
+20c8 44874001 bpatch patch01_6 ,mem_patch01 
+20c9 204029bb call save_rssi 
+20ca 20402a6b call scan_mode_whiten 
+20cb 2040251e call receive_packet_whitened 
+20cc 793f8001 set0 mark_rxbuf_inuse ,mark 
+20cd c6858000 rtnmark0 mark_fhs_already_good 
+
+inquiry_receive_rtn:
+20ce 4487c001 bpatch patch01_7 ,mem_patch01 
+
+inquiry_receive_eir_rtn:
+20cf 68008013 fetch 1 ,mem_inquiry_rcv 
+20d0 1fe0fe01 increase 1 ,pdata 
+20d1 60008013 store 1 ,mem_inquiry_rcv 
+20d2 20600000 rtn 
+
+master_page:
+20d3 44884002 bpatch patch02_0 ,mem_patch02 
+20d4 7834fc00 enable master 
+20d5 78387c00 enable clknt 
+20d6 680140b5 fetch 2 ,mem_page_interval 
+20d7 203a20db branch master_page_no_interval ,blank 
+20d8 18000e08 force page_interval_timer ,queue 
+20d9 20407f16 call timer_check 
+20da 247a0000 nrtn blank 
+
+master_page_no_interval:
+20db 4488c002 bpatch patch02_1 ,mem_patch02 
+20dc 680940b7 fetcht 2 ,mem_page_window 
+20dd 18000e28 force 40 ,queue 
+20de 2040271c call sniff_check_window 
+20df 20342114 branch page_exit ,user 
+20e0 18000e03 force page_length_timer ,queue 
+20e1 20407f16 call timer_check 
+20e2 243a20f0 nbranch page_start ,blank 
+20e3 6800804c fetch 1 ,mem_state_map 
+20e4 c28220e6 bbit1 smap_name_req ,master_npage_timeout 
+20e5 202020e9 branch master_page_timeout 
+
+master_npage_timeout:
+20e6 d8a00101 arg mem_tmp_buffer ,contw 
+20e7 df200008 arg 8 ,loopcnt 
+20e8 20407ec6 call memset0 
+
+master_page_timeout:
+20e9 44894002 bpatch patch02_2 ,mem_patch02 
+20ea 70003000 jam 0 ,mem_state 
+20eb 20405cf7 call init_lmp_work 
+20ec 70468100 jam 0 ,memui_reconnect_mode 
+20ed 700a9913 jam bt_evt_reconn_page_timeout ,mem_fifo_temp 
+20ee 20407d86 call ui_ipc_send_event 
+20ef 20202114 branch page_exit 
+
+page_start:
+20f0 4489c002 bpatch patch02_3 ,mem_patch02 
+20f1 18001600 force 0 ,timeup 
+20f2 34730200 until clkn_rt ,meet 
+20f3 680080f2 fetch 1 ,mem_page_clk 
+20f4 1fe0ffff increase -1 ,pdata 
+20f5 9c42fe00 ixor clkn_bt ,pdata 
+20f6 2fe00600 compare 0 ,pdata ,3 
+20f7 2420a0f0 nbranch page_start ,true 
+20f8 18827e00 deposit am_addr 
+20f9 60008181 store 1 ,mem_fhs_am_addr 
+20fa 18004c00 force 0 ,n_tx_slot 
+20fb 18004800 force 0 ,freq_mode 
+
+page_restart:
+20fc 448a4002 bpatch patch02_4 ,mem_patch02 
+20fd 2021a114 branch page_exit ,timeout 
+20fe 204028dc call fetch_page_bt_adr 
+20ff d9600600 arg param_rf_setup ,timeup 
+2100 34730200 until clkn_rt ,meet 
+
+page_rx_restart:
+2101 448ac002 bpatch patch02_5 ,mem_patch02 
+2102 680200f2 fetch 4 ,mem_page_clk 
+2103 98004200 iforce bt_clk 
+2104 1fe0fe01 increase 1 ,pdata 
+2105 600200f2 store 4 ,mem_page_clk 
+2106 280ffe0c isolate1 mark_page_trainb ,mark 
+2107 7920c802 setflag true ,2 ,freq_mode 
+2108 2c200400 compare 0x00 ,bt_clk ,0x02 
+2109 2420a128 nbranch page_receive ,true 
+210a 6800800c fetch 1 ,mem_page_transmit 
+210b 1fe0fe01 increase 1 ,pdata 
+210c 6000800c store 1 ,mem_page_transmit 
+210d 204028d2 call tx_radio_freq 
+210e 20402a51 call start_transmitter 
+210f 20402a56 call start_tx_native 
+2110 20402a64 call send_access_word 
+2111 2040264d call end_of_packet 
+2112 2040211a call page_check_train 
+2113 202020fc branch page_restart 
+
+page_exit:
+2114 448b4002 bpatch patch02_6 ,mem_patch02 
+2115 7854fc00 disable master 
+2116 680140b5 fetch 2 ,mem_page_interval 
+2117 207a0000 rtn blank 
+2118 18000e08 force page_interval_timer ,queue 
+2119 20207f08 branch timer_init 
+
+page_check_train:
+211a 448bc002 bpatch patch02_7 ,mem_patch02 
+211b 6800808e fetch 1 ,mem_nfreq_index_page 
+211c 1fe0ffff increase -1 ,pdata 
+211d 6000808e store 1 ,mem_nfreq_index_page 
+211e 20610000 rtn positive 
+211f 70008e1f jam 31 ,mem_nfreq_index_page 
+2120 680080f0 fetch 1 ,mem_npage_index 
+2121 1fe0ffff increase -1 ,pdata 
+2122 600080f0 store 1 ,mem_npage_index 
+2123 20610000 rtn positive 
+2124 7940000c setflip mark_page_trainb ,mark 
+2125 6800c0a6 fetch 1 ,mem_npage 
+2126 600080f0 store 1 ,mem_npage_index 
+2127 20600000 rtn 
+
+page_receive:
+2128 448c4003 bpatch patch03_0 ,mem_patch03 
+2129 204028cc call rx_radio_freq 
+212a 20402a5b call start_rx_native 
+212b 204029eb call start_receiver 
+212c 20402a0d call wait_access_clkn_rt 
+212d 202c2130 branch page_sync ,sync 
+212e 2040211a call page_check_train 
+212f 20202101 branch page_rx_restart 
+
+page_sync:
+2130 2040264d call end_of_packet 
+2131 6800800d fetch 1 ,mem_page_rcv 
+2132 1fe0fe01 increase 1 ,pdata 
+2133 6000800d store 1 ,mem_page_rcv 
+2134 18003600 force 0 ,stop_watch 
+2135 680200f2 fetch 4 ,mem_page_clk 
+
+page_send_fhs:
+2136 448cc003 bpatch patch03_1 ,mem_patch03 
+2137 20402a4f call rf_setup_time_master_slot 
+2138 204028dc call fetch_page_bt_adr 
+2139 1cc0cc01 increase 1 ,n_tx_slot 
+
+page_send_fhs_continue:
+213a 1c2143fd and_into 0x1fd ,bt_clk 
+213b 1c8149fc and_into 0x1fc ,freq_mode 
+213c 204028d2 call tx_radio_freq 
+213d 20402a51 call start_transmitter 
+213e 20402a56 call start_tx_native 
+213f 20402a64 call send_access_word 
+2140 1c427e00 deposit clkn_bt 
+2141 60020161 store 4 ,mem_clkn_bt 
+2142 18000800 force 0 ,am_addr 
+2143 18000202 force type_fhs ,type 
+2144 20402a6b call scan_mode_whiten 
+2145 20402766 call transmit_packet_whitened 
+
+page_wait_fhs_reply:
+2146 448d4003 bpatch patch03_2 ,mem_patch03 
+2147 20402a4d call rf_setup_time_slave_slot 
+2148 1c21c202 or_into 0x02 ,bt_clk 
+2149 1c8149fc and_into 0x1fc ,freq_mode 
+214a 204028cc call rx_radio_freq 
+214b 20402a5b call start_rx_native 
+214c 204029eb call start_receiver 
+214d 20402a0d call wait_access_clkn_rt 
+214e 204c264d call end_of_packet ,sync 
+214f 202c2155 branch page_wait_fhs_reply_ok ,sync 
+2150 68008010 fetch 1 ,mem_fhs_wait_counter 
+2151 203a20fc branch page_restart ,blank 
+2152 1fe0ffff increase -1 ,pdata 
+2153 60008010 store 1 ,mem_fhs_wait_counter 
+2154 20202136 branch page_send_fhs 
+
+page_wait_fhs_reply_ok:
+2155 448dc003 bpatch patch03_3 ,mem_patch03 
+2156 6800800e fetch 1 ,mem_page_rcv_fhs 
+2157 1fe0fe01 increase 1 ,pdata 
+2158 6000800e store 1 ,mem_page_rcv_fhs 
+2159 20402435 call prepare_newconn 
+
+master_newconn_loop:
+215a 204022f2 call master_newconn_once 
+215b 202c215f branch newconn_poll_responded ,sync 
+215c 20402455 call new_conn_timeout 
+215d 243a215a nbranch master_newconn_loop ,blank 
+215e 202020fc branch page_restart 
+
+newconn_poll_responded:
+215f 448e4003 bpatch patch03_4 ,mem_patch03 
+2160 68008030 fetch 1 ,mem_state 
+2161 793ffe03 set0 state_inpage ,pdata 
+2162 60008030 store 1 ,mem_state 
+2163 20402440 call newconn_init 
+2164 7854fc00 disable master 
+2165 20600000 rtn 
+
+master_dispatch:
+2166 448ec003 bpatch patch03_5 ,mem_patch03 
+2167 7834fc00 enable master 
+2168 78387c00 enable clknt 
+2169 204021e1 call role_switch_master 
+216a 20740000 rtn user 
+216b 20402c69 call check_bt_disabled 
+216c 20402a4f call rf_setup_time_master_slot 
+216d 1c40c201 add clkn_bt ,1 ,bt_clk 
+216e 204028e2 call fetch_self_bt_adr 
+216f 18004803 force 0x03 ,freq_mode 
+2170 20406cc2 call scheduler_tx_l2cap_pkt 
+2171 20402489 call prepare_tx 
+2172 204028d2 call tx_radio_freq 
+2173 20402a51 call start_transmitter 
+2174 20402a56 call start_tx_native 
+2175 20402a64 call send_access_word 
+2176 20402762 call transmit_packet 
+
+master_loop:
+2177 448f4003 bpatch patch03_6 ,mem_patch03 
+2178 20405d08 call parse_lmp 
+2179 204022e4 call master_conn_recv_packet 
+217a 2436a180 nbranch master_notmatch ,match 
+217b 20402a88 call supervision_flush 
+217c 20402728 call parse_l2cap 
+217d 6800800f fetch 1 ,mem_master_rcvcnt 
+217e 1fe0fe01 increase 1 ,pdata 
+217f 6000800f store 1 ,mem_master_rcvcnt 
+
+master_notmatch:
+2180 448fc003 bpatch patch03_7 ,mem_patch03 
+2181 20406caa call scheduler_process 
+2182 2040218b call check_master_disconnect 
+2183 24748000 nrtn master 
+2184 204026f3 call check_attempt 
+2185 243a2188 nbranch master_attempt ,blank 
+
+master_exit:
+2186 7854fc00 disable master 
+2187 20600000 rtn 
+
+master_attempt:
+2188 20402489 call prepare_tx 
+2189 204022da call master_conn_send_packet 
+218a 20202177 branch master_loop 
+
+check_master_disconnect:
+218b 2036a18e branch check_master_match ,match 
+218c 20402a7f call supervision_update 
+218d 2021219c branch master_disconnect ,positive 
+
+check_master_match:
+218e 204021a7 call check_disconnect_timeout 
+218f 2434219c nbranch master_disconnect ,user 
+2190 6800804c fetch 1 ,mem_state_map 
+2191 c4020000 rtnbit0 smap_name_req 
+2192 c3818000 rtnbit1 smap_name_res 
+2193 6800804b fetch 1 ,mem_op 
+2194 c3818000 rtnbit1 op_disconn 
+2195 204021ae call conn_timer_expired 
+2196 247a0000 nrtn blank 
+2197 6800816e fetch 1 ,mem_nameres_cnt 
+2198 1fe0ffff increase -1 ,pdata 
+2199 6000816e store 1 ,mem_nameres_cnt 
+219a 247a0000 nrtn blank 
+219b 20206006 branch lmp_disconnect 
+
+master_disconnect:
+219c 44904004 bpatch patch04_0 ,mem_patch04 
+219d 2040245d call quit_connection 
+219e 7854fc00 disable master 
+219f 6800804c fetch 1 ,mem_state_map 
+21a0 c28221a2 bbit1 smap_name_req ,master_name_disconnect 
+21a1 20600000 rtn 
+
+master_name_disconnect:
+21a2 6800804c fetch 1 ,mem_state_map 
+21a3 c3818000 rtnbit1 smap_name_res 
+
+master_name_error:
+21a4 d8a00101 arg mem_tmp_buffer ,contw 
+21a5 df200008 arg 8 ,loopcnt 
+21a6 20207ec6 branch memset0 
+
+check_disconnect_timeout:
+21a7 4490c004 bpatch patch04_1 ,mem_patch04 
+21a8 78347c00 enable user 
+21a9 6800804b fetch 1 ,mem_op 
+21aa c4018000 rtnbit0 op_disconn 
+21ab 204021ae call conn_timer_expired 
+21ac 247a0000 nrtn blank 
+21ad 20207fe9 branch disable_user 
+
+conn_timer_expired:
+21ae 68008072 fetch 1 ,mem_conn_timer 
+21af 1fe0ffff increase -1 ,pdata 
+21b0 60008072 store 1 ,mem_conn_timer 
+21b1 20600000 rtn 
+
+linkkey_ready:
+21b2 44914004 bpatch patch04_2 ,mem_patch04 
+21b3 68008030 fetch 1 ,mem_state 
+21b4 c283a1bb bbit1 state_linkkey ,linkkey_set 
+21b5 680089b5 fetch 1 ,mem_pairing_auth 
+21b6 203a21bb branch linkkey_set ,blank 
+21b7 7009b500 jam defalt_pairing_auth ,mem_pairing_auth 
+21b8 700a9918 jam bt_evt_linkkey_generate ,mem_fifo_temp 
+21b9 20407d86 call ui_ipc_send_event 
+21ba 202021bb branch linkkey_set 
+
+linkkey_set:
+21bb 4491c004 bpatch patch04_3 ,mem_patch04 
+21bc 20402254 call context_traverse_linkkey 
+21bd 68008030 fetch 1 ,mem_state 
+21be 79207e07 set1 state_linkkey ,pdata 
+21bf 60008030 store 1 ,mem_state 
+21c0 7041bd01 jam 1 ,mem_link_key_exists 
+21c1 68008055 fetch 1 ,mem_conn_sm 
+21c2 c08b21c3 bne conn_sm_pairing ,linkkey_set_continue 
+
+linkkey_set_continue:
+21c3 20600000 rtn 
+
+generate_linkkey_continue:
+21c4 7009b501 jam pairing_auth ,mem_pairing_auth 
+
+clear_linkstate:
+21c5 68008030 fetch 1 ,mem_state 
+21c6 793ffe07 set0 state_linkkey ,pdata 
+21c7 60008030 store 1 ,mem_state 
+21c8 20600000 rtn 
+
+role_switch_check:
+21c9 44924004 bpatch patch04_4 ,mem_patch04 
+21ca 78547c00 disable user 
+21cb 68010032 fetch 2 ,mem_tsniff 
+21cc d840ffff arg 0xffff ,temp 
+21cd 98467c00 isub temp ,null 
+21ce 24628000 nrtn zero 
+21cf 68020034 fetch 4 ,mem_sniff_anchor 
+21d0 203821d3 branch role_switch_clkn ,clknt 
+21d1 9d067e00 isub clke_bt ,pdata 
+21d2 202021d4 branch role_switch_clke 
+
+role_switch_clkn:
+21d3 9c467e00 isub clkn_bt ,pdata 
+
+role_switch_clke:
+21d4 1fe67c04 sub pdata ,4 ,null 
+21d5 24610000 nrtn positive 
+21d6 18007e00 force 0 ,pdata 
+21d7 60010032 store 2 ,mem_tsniff 
+21d8 20207fe7 branch enable_user 
+
+role_switch_prepare:
+21d9 1fe20400 copy pdata ,temp 
+21da 4492c004 bpatch patch04_5 ,mem_patch04 
+21db 600a0034 storet 4 ,mem_sniff_anchor 
+
+role_switch_prepare0:
+21dc 70455b01 jam switch_flag_accept ,mem_switch_flag 
+21dd 5800ffff setarg 0xffff 
+21de 60010032 store 2 ,mem_tsniff 
+21df 70007301 jam 1 ,mem_sniff_attempt 
+21e0 20600000 rtn 
+
+role_switch_master:
+21e1 44934004 bpatch patch04_6 ,mem_patch04 
+21e2 204021c9 call role_switch_check 
+21e3 24740000 nrtn user 
+21e4 78547c00 disable user 
+21e5 70001120 jam param_newconnto ,mem_newconnto_counter 
+21e6 793f800b set0 mark_fhs_already_good ,mark 
+
+roles_waitfhs_loop:
+21e7 20402a4f call rf_setup_time_master_slot 
+21e8 204022e6 call master_recv_packet 
+21e9 c505a1f4 bmark1 mark_fhs_already_good ,roles_replyto_fhs 
+21ea 20402455 call new_conn_timeout 
+21eb 243a21e7 nbranch roles_waitfhs_loop ,blank 
+
+role_switch_fail_master:
+21ec 4493c004 bpatch patch04_7 ,mem_patch04 
+21ed 78547c00 disable user 
+21ee 1c427e00 deposit clkn_bt 
+21ef 600240ca store 4 ,mem_next_btclk 
+21f0 78387c00 enable clknt 
+21f1 7834fc00 enable master 
+21f2 700a992a jam bt_evt_switch_fail_master ,mem_fifo_temp 
+21f3 20207d86 branch ui_ipc_send_event 
+
+roles_replyto_fhs:
+21f4 44944005 bpatch patch05_0 ,mem_patch05 
+21f5 20402a4d call rf_setup_time_slave_slot 
+21f6 d8200010 arg type_id ,type 
+21f7 204022dc call master_send_packet 
+21f8 78587c00 disable clknt 
+21f9 7854fc00 disable master 
+21fa 20402818 call apply_switch_clke 
+21fb 20402435 call prepare_newconn 
+
+roles_newconns_loop:
+21fc 4494c005 bpatch patch05_1 ,mem_patch05 
+21fd 2040247c call slave_newconn_once 
+21fe 2036a202 branch roles_newconns_responded ,match 
+21ff 20402455 call new_conn_timeout 
+2200 243a21fc nbranch roles_newconns_loop ,blank 
+2201 202021ec branch role_switch_fail_master 
+
+roles_newconns_responded:
+2202 68008031 fetch 1 ,mem_mode 
+2203 793ffe01 set0 mode_master ,pdata 
+2204 60008031 store 1 ,mem_mode 
+2205 20402a88 call supervision_flush 
+2206 20402841 call calc_clke_offset 
+2207 78347c00 enable user 
+2208 700a992b jam bt_evt_switch_success_master ,mem_fifo_temp 
+2209 20207d86 branch ui_ipc_send_event 
+
+context_load:
+220a 44954005 bpatch patch05_2 ,mem_patch05 
+220b 79200009 set1 mark_context ,mark 
+220c 1a227e00 deposit rega 
+220d 6001001e store 2 ,mem_context_ptr 
+220e 18007250 force context_size ,loopcnt 
+220f d8a0043f arg mem_le_state ,contw 
+2210 1a208c01 add rega ,coffset_mode ,contr 
+2211 e8c08000 ifetch 1 ,contr 
+2212 1a220c00 copy rega ,contr 
+2213 c2807f01 bbit1 mode_le ,memcpy 
+2214 d8a00030 arg mem_state ,contw 
+2215 20407f01 call memcpy 
+2216 78577c00 disable attempt 
+2217 68008077 fetch 1 ,mem_amaddr 
+2218 98000800 iforce am_addr 
+2219 70008a01 jam 1 ,mem_current_sniff_attempt 
+221a 2034a21c branch context_load_master ,master 
+221b 70008a01 jam 1 ,mem_current_sniff_attempt 
+
+context_load_master:
+221c 68008030 fetch 1 ,mem_state 
+221d c4008000 rtnbit0 state_insniff 
+221e 68008073 fetch 1 ,mem_sniff_attempt 
+221f 6000808a store 1 ,mem_current_sniff_attempt 
+2220 68008074 fetch 1 ,mem_sniff_timeout 
+2221 6000808b store 1 ,mem_current_sniff_timeout 
+2222 20600000 rtn 
+
+context_save:
+2223 4495c005 bpatch patch05_3 ,mem_patch05 
+2224 6801001e fetch 2 ,mem_context_ptr 
+2225 98000a00 iforce contw 
+2226 18007250 force context_size ,loopcnt 
+2227 d8c0043f arg mem_le_state ,contr 
+2228 203b7f01 branch memcpy ,le 
+2229 d8c00030 arg mem_state ,contr 
+222a 20207f01 branch memcpy 
+
+context_get_next:
+222b df200001 arg context_num ,loopcnt 
+222c 68088015 fetcht 1 ,mem_current_context 
+
+context_get_next_loop:
+222d 18408401 increase 1 ,temp 
+222e 2841fe01 compare context_num ,temp ,0xff 
+222f 2420a231 nbranch context_get_next_cont ,true 
+2230 d8400000 arg 0 ,temp 
+
+context_get_next_cont:
+2231 60088015 storet 1 ,mem_current_context 
+2232 184ffe50 mul32 temp ,context_size ,pdata 
+2233 da204040 arg mem_context ,rega 
+2234 9a20a200 iadd rega ,rega 
+2235 ea208000 ifetch 1 ,rega 
+2236 c280a239 bbit1 state_insniff ,context_get_next_sniff 
+2237 c3800000 rtnbit1 state_inconn 
+2238 c3818000 rtnbit1 state_inpage 
+
+context_get_next_sniff:
+2239 c200222d loop context_get_next_loop 
+223a 20600000 rtn 
+
+context_new:
+223b 44964005 bpatch patch05_4 ,mem_patch05 
+223c da60226a arg context_search_empty ,regc 
+223d 20402261 call context_search 
+223e 24628000 nrtn zero 
+223f 1a227e00 deposit rega 
+2240 6001001e store 2 ,mem_context_ptr 
+2241 18007c00 force 0 ,null 
+2242 20600000 rtn 
+
+context_check_all_wack:
+2243 20402725 call check_esco_amaddr 
+2244 2020a24b branch context_check_esco_wack ,true 
+2245 6801001e fetch 2 ,mem_context_ptr 
+2246 1fe08a17 add pdata ,coffset_arq ,contw 
+2247 68008047 fetch 1 ,mem_arq 
+2248 e0a08000 istore 1 ,contw 
+2249 da6022aa arg context_check_a_wack ,regc 
+224a 20202261 branch context_search 
+
+context_check_esco_wack:
+224b 68008047 fetch 1 ,mem_arq 
+224c 2feffe03 isolate1 wack ,pdata 
+224d 2020a250 branch context_esco_wack ,true 
+224e 18007c01 force 1 ,null 
+224f 20600000 rtn 
+
+context_esco_wack:
+2250 18007c00 force 0 ,null 
+2251 20600000 rtn 
+
+context_check_idle:
+2252 da6022a7 arg context_check_inconn ,regc 
+2253 20202261 branch context_search 
+
+context_traverse_linkkey:
+2254 6809001e fetcht 2 ,mem_context_ptr 
+2255 da6022cf arg context_traverse_clearkey ,regc 
+2256 20202261 branch context_search 
+
+context_search_conn_handle:
+2257 6808c1cf fetcht 1 ,mem_hci_conn_handle 
+
+context_search_conn_handle2:
+2258 da602275 arg context_search_handle ,regc 
+2259 20202261 branch context_search 
+
+context_search_plap:
+225a 4496c005 bpatch patch05_5 ,mem_patch05 
+225b 680b41d0 fetcht 6 ,mem_hci_plap 
+
+context_search_plap2:
+225c da60226e arg context_search_lap ,regc 
+225d 20202261 branch context_search 
+
+context_search_insniff:
+225e da60227b arg context_search_sniff ,regc 
+225f 20202261 branch context_search 
+
+context_search_sniff_window:
+2260 da6022c6 arg context_search_window ,regc 
+
+context_search:
+2261 44974005 bpatch patch05_6 ,mem_patch05 
+2262 da204040 arg mem_context ,rega 
+2263 df200001 arg context_num ,loopcnt 
+
+context_search_loop:
+2264 ea208000 ifetch 1 ,rega 
+2265 1a627a00 copy regc ,pc 
+
+context_search_next:
+2266 1a20a250 increase context_size ,rega 
+2267 c2002264 loop context_search_loop 
+2268 18007c01 force 1 ,null 
+2269 20600000 rtn 
+
+context_search_empty:
+226a c2802266 bbit1 state_inconn ,context_search_next 
+226b c281a266 bbit1 state_inpage ,context_search_next 
+226c 18007c00 force 0 ,null 
+226d 20600000 rtn 
+
+context_search_lap:
+226e c281a270 bbit1 state_inpage ,context_search_lap_cont 
+226f c3002266 bbit0 state_inconn ,context_search_next 
+
+context_search_lap_cont:
+2270 1a208c10 add rega ,coffset_plap ,contr 
+2271 e8c30000 ifetch 6 ,contr 
+2272 98467c00 isub temp ,null 
+2273 20628000 rtn zero 
+2274 20202266 branch context_search_next 
+
+context_search_handle:
+2275 c3002266 bbit0 state_inconn ,context_search_next 
+2276 1a208c16 add rega ,coffset_conn_handle ,contr 
+2277 e8c08000 ifetch 1 ,contr 
+2278 98467c00 isub temp ,null 
+2279 20628000 rtn zero 
+227a 20202266 branch context_search_next 
+
+context_search_sniff:
+227b c300a266 bbit0 state_insniff ,context_search_next 
+
+context_search_sniff_loop:
+227c 204022b3 call context_get_anchor 
+227d 20402297 call sign_pdata_temp 
+227e 98467e00 isub temp ,pdata 
+227f 1fe0fe01 increase 1 ,pdata 
+2280 20212291 branch context_search_sniff_miss ,positive 
+2281 18c22400 copy contr ,regb 
+2282 60048aa2 store 9 ,mem_temp 
+2283 6800c4c0 fetch 1 ,mem_le_sc_calc 
+2284 243a2289 nbranch context_search_sniff_sc ,blank 
+2285 68048aa2 fetch 9 ,mem_temp 
+2286 1a420c00 copy regb ,contr 
+2287 1fe0fe05 increase 5 ,pdata 
+2288 2020228c branch context_search_meet1 
+
+context_search_sniff_sc:
+2289 68048aa2 fetch 9 ,mem_temp 
+228a 1a420c00 copy regb ,contr 
+228b 1fe0fe14 increase 20 ,pdata 
+
+context_search_meet1:
+228c 24212266 nbranch context_search_next ,positive 
+
+context_search_meet:
+228d 18424200 copy temp ,bt_clk 
+228e 204022bf call context_next_anchor 
+228f 18007c00 force 0 ,null 
+2290 20600000 rtn 
+
+context_search_sniff_miss:
+2291 98002400 iforce regb 
+2292 1a208c02 add rega ,coffset_tsniff ,contr 
+2293 e8c10000 ifetch 2 ,contr 
+2294 203a228d branch context_search_meet ,blank 
+2295 204022bf call context_next_anchor 
+2296 2020227c branch context_search_sniff_loop 
+
+sign_pdata_temp:
+2297 1ff11600 rshift16 pdata ,timeup 
+2298 196c9600 rshift8 timeup ,timeup 
+2299 2022a2a1 branch sign_pdata_temp_p0 ,zero 
+229a 29601e0f compare 0xf ,timeup ,0xf 
+229b 24608000 nrtn true 
+229c 18511600 rshift16 temp ,timeup 
+229d 196c9600 rshift8 timeup ,timeup 
+229e 24628000 nrtn zero 
+229f 7920041c set1 28 ,temp 
+22a0 20600000 rtn 
+
+sign_pdata_temp_p0:
+22a1 18511600 rshift16 temp ,timeup 
+22a2 196c9600 rshift8 timeup ,timeup 
+22a3 29601e0f compare 0xf ,timeup ,0xf 
+22a4 24608000 nrtn true 
+22a5 79207e1c set1 28 ,pdata 
+22a6 20600000 rtn 
+
+context_check_inconn:
+22a7 c3002266 bbit0 state_inconn ,context_search_next 
+22a8 18007c00 force 0 ,null 
+22a9 20600000 rtn 
+
+context_check_a_wack:
+22aa c3002266 bbit0 state_inconn ,context_search_next 
+22ab 1a208c01 add rega ,coffset_mode ,contr 
+22ac e8c08000 ifetch 1 ,contr 
+22ad c2802266 bbit1 mode_le ,context_search_next 
+22ae 1a208c17 add rega ,coffset_arq ,contr 
+22af e8c08000 ifetch 1 ,contr 
+22b0 c301a266 bbit0 wack ,context_search_next 
+22b1 18007c00 force 0 ,null 
+22b2 20600000 rtn 
+
+context_get_anchor:
+22b3 1a208c01 add rega ,coffset_mode ,contr 
+22b4 e8c88000 ifetcht 1 ,contr 
+22b5 1c427e00 deposit clkn_bt 
+22b6 284ffe01 isolate1 mode_master ,temp 
+22b7 1a208c04 add rega ,coffset_sniff_anchor ,contr 
+22b8 e8ca0000 ifetcht 4 ,contr 
+22b9 20608000 rtn true 
+22ba 1a208c08 add rega ,coffset_clk_offset ,contr 
+22bb e8c30000 ifetch 6 ,contr 
+22bc 20402854 call calc_clke2 
+22bd 1d027e00 deposit clke_bt 
+22be 20600000 rtn 
+
+context_next_anchor:
+22bf 1a208c02 add rega ,coffset_tsniff ,contr 
+22c0 1a208a04 add rega ,coffset_sniff_anchor ,contw 
+22c1 e8c10000 ifetch 2 ,contr 
+22c2 98409600 iadd temp ,timeup 
+22c3 19627e00 deposit timeup 
+22c4 e0a20000 istore 4 ,contw 
+22c5 20205449 branch le_context_nexthop 
+
+context_search_window:
+22c6 c300a266 bbit0 state_insniff ,context_search_next 
+22c7 204022b3 call context_get_anchor 
+22c8 9b60fe00 iadd stop_watch ,pdata 
+22c9 9b60fe00 iadd stop_watch ,pdata 
+22ca 98e0fe00 iadd queue ,pdata 
+22cb 98467c00 isub temp ,null 
+22cc 24212266 nbranch context_search_next ,positive 
+22cd 18007c00 force 0 ,null 
+22ce 20600000 rtn 
+
+context_traverse_clearkey:
+22cf c3002266 bbit0 state_inconn ,context_search_next 
+22d0 18427e00 deposit temp 
+22d1 9a267c00 isub rega ,null 
+22d2 203f2266 branch context_search_next ,null 
+22d3 1a208c01 add rega ,coffset_mode ,contr 
+22d4 e8c08000 ifetch 1 ,contr 
+22d5 c2802266 bbit1 mode_le ,context_search_next 
+22d6 ea208000 ifetch 1 ,rega 
+22d7 793ffe07 set0 state_linkkey ,pdata 
+22d8 e2208000 istore 1 ,rega 
+22d9 20202266 branch context_search_next 
+
+master_conn_send_packet:
+22da 4497c005 bpatch patch05_7 ,mem_patch05 
+22db 20402a4f call rf_setup_time_master_slot 
+
+master_send_packet:
+22dc 1c40c201 add clkn_bt ,1 ,bt_clk 
+22dd 204028e2 call fetch_self_bt_adr 
+22de 18004803 force 0x03 ,freq_mode 
+22df 204028d2 call tx_radio_freq 
+22e0 20402a51 call start_transmitter 
+22e1 20402a56 call start_tx_native 
+22e2 20402a64 call send_access_word 
+22e3 20202762 branch transmit_packet 
+
+master_conn_recv_packet:
+22e4 44984006 bpatch patch06_0 ,mem_patch06 
+22e5 20402a4d call rf_setup_time_slave_slot 
+
+master_recv_packet:
+22e6 1c40c201 add clkn_bt ,1 ,bt_clk 
+22e7 204028e2 call fetch_self_bt_adr 
+22e8 18004803 force 0x03 ,freq_mode 
+22e9 204028cc call rx_radio_freq 
+22ea 2040242a call init_rx_packet_flags 
+22eb 204029f1 call prep_crypt 
+22ec 20402a5b call start_rx_native 
+22ed 204029eb call start_receiver 
+
+master_rx_conn_finish_packet:
+22ee 20402a0d call wait_access_clkn_rt 
+22ef 246c0000 nrtn sync 
+22f0 204029bb call save_rssi 
+22f1 2020251c branch receive_packet 
+
+master_newconn_once:
+22f2 4498c006 bpatch patch06_1 ,mem_patch06 
+22f3 68008181 fetch 1 ,mem_fhs_am_addr 
+22f4 98000800 iforce am_addr 
+22f5 18000201 force type_poll ,type 
+22f6 204022da call master_conn_send_packet 
+22f7 202022e4 branch master_conn_recv_packet 
+
+inquiry_scan_dispatch:
+22f8 6800c093 fetch 1 ,mem_scan_mode 
+22f9 c4000000 rtnbit0 inq_scan_mode 
+22fa 18000e04 force iscan_interval_timer ,queue 
+22fb 20407f16 call timer_check 
+22fc 247a0000 nrtn blank 
+22fd 680940ad fetcht 2 ,mem_iscan_window 
+22fe 18000e04 force 4 ,queue 
+22ff 2040271c call sniff_check_window 
+2300 20740000 rtn user 
+2301 20402308 call inquiry_scan_start 
+2302 18000e04 force iscan_interval_timer ,queue 
+2303 680140af fetch 2 ,mem_iscan_interval 
+2304 242c7f08 nbranch timer_init ,sync 
+2305 180a7e00 random pdata 
+2306 9ea17e00 iand mask3ff ,pdata 
+2307 20207f08 branch timer_init 
+
+inquiry_scan_start:
+2308 44994006 bpatch patch06_2 ,mem_patch06 
+2309 70018100 jam 0 ,mem_fhs_am_addr 
+230a 78587c00 disable clknt 
+230b 78577c00 disable attempt 
+230c 204028a4 call afh_clear 
+230d 1c4143fc and clkn_bt ,0x1fc ,bt_clk 
+230e 18004801 force 0x01 ,freq_mode 
+230f 204028d8 call fetch_giac 
+2310 204028cc call rx_radio_freq 
+2311 7940001d setflip mark_inquiry_state ,mark 
+2312 68008006 fetch 1 ,mem_inquiryscan_waitcnt 
+2313 1fe0fe01 increase 1 ,pdata 
+2314 60008006 store 1 ,mem_inquiryscan_waitcnt 
+2315 204028f2 call fetch_diac 
+2316 204029eb call start_receiver 
+2317 20402a14 call wait_access_forever 
+2318 246c0000 nrtn sync 
+2319 4499c006 bpatch patch06_3 ,mem_patch06 
+231a 18003600 force 0 ,stop_watch 
+231b 204028f9 call shutdown_radio 
+231c 68008007 fetch 1 ,mem_inquiryscan_rcvcnt 
+231d 1fe0fe01 increase 1 ,pdata 
+231e 60008007 store 1 ,mem_inquiryscan_rcvcnt 
+231f 204028d8 call fetch_giac 
+2320 20402a4d call rf_setup_time_slave_slot 
+2321 1c21c202 or_into 0x002 ,bt_clk 
+2322 18004801 force 0x01 ,freq_mode 
+2323 204028d2 call tx_radio_freq 
+2324 204028f2 call fetch_diac 
+2325 20402a51 call start_transmitter 
+2326 20402a5f call start_tx_external 
+2327 1c427e00 deposit clkn_bt 
+2328 60020161 store 4 ,mem_clkn_bt 
+2329 20402a64 call send_access_word 
+232a 18000202 force type_fhs ,type 
+232b 18000800 force 0 ,am_addr 
+232c 20402a6b call scan_mode_whiten 
+232d 20402766 call transmit_packet_whitened 
+232e 20402332 call send_eir 
+232f 1c2143fd and_into 0x1fd ,bt_clk 
+2330 1cc0cc01 increase 1 ,n_tx_slot 
+2331 20600000 rtn 
+
+send_eir:
+2332 449a4006 bpatch patch06_4 ,mem_patch06 
+2333 6800c0d1 fetch 1 ,mem_eir_enable 
+2334 207a0000 rtn blank 
+2335 d8a0018e arg mem_eir ,contw 
+2336 6800c515 fetch 1 ,mem_local_name_length 
+2337 1fe27200 copy pdata ,loopcnt 
+2338 1fe0fe01 increase 1 ,pdata 
+2339 e0a08000 istore 1 ,contw 
+233a 18a20400 copy contw ,temp 
+233b 1fe0fe01 increase 1 ,pdata 
+233c 600141dc store 2 ,mem_tx_len 
+233d 18420a00 copy temp ,contw 
+233e 58000009 setarg 0x09 
+233f e0a08000 istore 1 ,contw 
+2340 d8c04516 arg mem_local_name ,contr 
+2341 20407f01 call memcpy 
+2342 da60458d arg mem_all_uuid_128bits ,regc 
+2343 df200004 arg 4 ,loopcnt 
+2344 20402354 call get_all_uuid 
+2345 da604577 arg mem_all_uuid_16bits ,regc 
+2346 df200001 arg 1 ,loopcnt 
+2347 20402354 call get_all_uuid 
+2348 1800020a force type_dm3 ,type 
+2349 7041db02 jam 2 ,mem_tx_lch 
+234a 5800018e setarg mem_eir 
+234b 6001016f store 2 ,mem_txptr 
+234c 20402a4d call rf_setup_time_slave_slot 
+234d 204028d2 call tx_radio_freq 
+234e 20402a51 call start_transmitter 
+234f 20402a5f call start_tx_external 
+2350 20402a64 call send_access_word 
+2351 20402a6b call scan_mode_whiten 
+2352 20402766 call transmit_packet_whitened 
+2353 20600000 rtn 
+
+get_all_uuid:
+2354 18a20400 copy contw ,temp 
+2355 1a620c00 copy regc ,contr 
+2356 e8c08000 ifetch 1 ,contr 
+2357 207a0000 rtn blank 
+
+lshift_loop:
+2358 1fe3fe00 lshift pdata ,pdata 
+2359 c2002358 loop lshift_loop 
+235a 1fe22200 copy pdata ,rega 
+235b 1fe0fe02 increase 2 ,pdata 
+235c 1fe20e00 copy pdata ,queue 
+235d 680141dc fetch 2 ,mem_tx_len 
+235e 98e0fe00 iadd queue ,pdata 
+235f 600141dc store 2 ,mem_tx_len 
+2360 18420a00 copy temp ,contw 
+2361 1a227e00 copy rega ,pdata 
+2362 1fe0fe01 increase 1 ,pdata 
+2363 e0a08000 istore 1 ,contw 
+2364 1a620c00 copy regc ,contr 
+2365 e8c08000 ifetch 1 ,contr 
+2366 e8c08000 ifetch 1 ,contr 
+2367 e0a08000 istore 1 ,contw 
+2368 1a227200 copy rega ,loopcnt 
+2369 20207f01 branch memcpy 
+
+page_scan_dispatch:
+236a 6800c093 fetch 1 ,mem_scan_mode 
+236b c4008000 rtnbit0 page_scan_mode 
+236c 18000e05 force pscan_interval_timer ,queue 
+236d 20407f16 call timer_check 
+236e 247a0000 nrtn blank 
+236f 680940b1 fetcht 2 ,mem_pscan_window 
+2370 18000e28 force 40 ,queue 
+2371 2040271c call sniff_check_window 
+2372 20740000 rtn user 
+2373 18000800 force 0 ,am_addr 
+2374 70001008 jam param_pagerespto ,mem_fhs_wait_counter 
+2375 793f800b set0 mark_fhs_already_good ,mark 
+2376 2040237a call page_scan_start 
+2377 18000e05 force pscan_interval_timer ,queue 
+2378 680140b3 fetch 2 ,mem_pscan_interval 
+2379 20207f08 branch timer_init 
+
+page_scan_start:
+237a 449ac006 bpatch patch06_5 ,mem_patch06 
+237b 78587c00 disable clknt 
+237c 204028a4 call afh_clear 
+237d 68008008 fetch 1 ,mem_pagescan_waitcnt 
+237e 1fe0fe01 increase 1 ,pdata 
+237f 60008008 store 1 ,mem_pagescan_waitcnt 
+2380 18004c00 force 0 ,n_tx_slot 
+2381 204028e2 call fetch_self_bt_adr 
+2382 1c40c201 add clkn_bt ,1 ,bt_clk 
+2383 18004802 force 0x02 ,freq_mode 
+2384 449b4006 bpatch patch06_6 ,mem_patch06 
+2385 204028cc call rx_radio_freq 
+2386 204029eb call start_receiver 
+2387 20402a14 call wait_access_forever 
+2388 246c0000 nrtn sync 
+2389 204028f9 call shutdown_radio 
+238a 68008009 fetch 1 ,mem_pagescan_rcvcnt 
+238b 1fe0fe01 increase 1 ,pdata 
+238c 60008009 store 1 ,mem_pagescan_rcvcnt 
+238d 18003600 force 0 ,stop_watch 
+238e 20402a4d call rf_setup_time_slave_slot 
+238f 1c21c202 or_into 0x002 ,bt_clk 
+2390 18004801 force 0x01 ,freq_mode 
+2391 204028d2 call tx_radio_freq 
+2392 20402a51 call start_transmitter 
+2393 20402a5f call start_tx_external 
+2394 20402a64 call send_access_word 
+2395 2040264d call end_of_packet 
+2396 18000800 force 0 ,am_addr 
+2397 d9600600 arg param_rf_setup ,timeup 
+2398 35330200 until clke_rt ,meet 
+2399 1d01d003 or_into 0x03 ,clke_bt 
+239a 1c2143fd and_into 0x1fd ,bt_clk 
+
+page_scan_wait_fhs_restart:
+239b 449bc006 bpatch patch06_7 ,mem_patch06 
+239c 1cc0cc01 increase 1 ,n_tx_slot 
+239d 204028cc call rx_radio_freq 
+239e 204029eb call start_receiver 
+239f 20402a07 call wait_access_mhalfbnd 
+23a0 242c23a4 nbranch page_scan_wait_fhs_again ,sync 
+23a1 20402a6b call scan_mode_whiten 
+23a2 2040251e call receive_packet_whitened 
+23a3 c505a3ab bmark1 mark_fhs_already_good ,page_scan_reply_to_fhs 
+
+page_scan_wait_fhs_again:
+23a4 449c4007 bpatch patch07_0 ,mem_patch07 
+23a5 68008010 fetch 1 ,mem_fhs_wait_counter 
+23a6 207a0000 rtn blank 
+23a7 1fe0ffff increase -1 ,pdata 
+23a8 60008010 store 1 ,mem_fhs_wait_counter 
+23a9 20402a4f call rf_setup_time_master_slot 
+23aa 2020239b branch page_scan_wait_fhs_restart 
+
+page_scan_reply_to_fhs:
+23ab 449cc007 bpatch patch07_1 ,mem_patch07 
+23ac 793fd001 set0 1 ,clke_bt 
+23ad 79205000 set1 0 ,clke_bt 
+23ae 6800800a fetch 1 ,mem_pagescan_rcvfhscnt 
+23af 1fe0fe01 increase 1 ,pdata 
+23b0 6000800a store 1 ,mem_pagescan_rcvfhscnt 
+23b1 20402a4d call rf_setup_time_slave_slot 
+23b2 1c21c202 or_into 0x02 ,bt_clk 
+23b3 204028d2 call tx_radio_freq 
+23b4 20402a51 call start_transmitter 
+23b5 20402a5f call start_tx_external 
+23b6 20402a64 call send_access_word 
+23b7 2040264d call end_of_packet 
+
+slave_apply_clke_bt:
+23b8 2d000603 compare 0x03 ,clke_bt ,0x03 
+23b9 2020a3bc branch slave_apply_clke_bt_now ,true 
+23ba 37cb8200 until null ,mhalfbnd 
+23bb 202023b8 branch slave_apply_clke_bt 
+
+slave_apply_clke_bt_now:
+23bc 68020165 fetch 4 ,mem_clke_bt 
+23bd 1fe1fe03 or_into 0x03 ,pdata 
+23be 1fe25000 icopy clke_bt 
+
+start_slave_connection:
+23bf 449d4007 bpatch patch07_2 ,mem_patch07 
+23c0 68030178 fetch 6 ,extm_lap 
+23c1 60030040 store 6 ,mem_plap 
+23c2 20402435 call prepare_newconn 
+
+slave_newconn_loop:
+23c3 2040247c call slave_newconn_once 
+23c4 2036a3c8 branch sconn_successful ,match 
+23c5 20402455 call new_conn_timeout 
+23c6 243a23c3 nbranch slave_newconn_loop ,blank 
+23c7 20600000 rtn 
+
+sconn_successful:
+23c8 449dc007 bpatch patch07_3 ,mem_patch07 
+23c9 20402440 call newconn_init 
+23ca 2040223b call context_new 
+23cb 24628000 nrtn zero 
+23cc 70003100 jam 0 ,mem_mode 
+23cd 20402841 call calc_clke_offset 
+23ce 20202223 branch context_save 
+
+slave_dispatch:
+23cf 449e4007 bpatch patch07_4 ,mem_patch07 
+23d0 20402850 call calc_clke 
+23d1 204023f3 call role_switch_slave 
+23d2 20740000 rtn user 
+
+slave_loop:
+23d3 449ec007 bpatch patch07_5 ,mem_patch07 
+23d4 20402c69 call check_bt_disabled 
+23d5 20406caa call scheduler_process 
+23d6 20402514 call slave_conn_recv_packet 
+23d7 2436a3e2 nbranch slave_notmatch ,match 
+23d8 20402a88 call supervision_flush 
+23d9 20406cc2 call scheduler_tx_l2cap_pkt 
+23da 20402489 call prepare_tx 
+23db 20402757 call slave_conn_send_packet 
+23dc 20402728 call parse_l2cap 
+23dd 20405d08 call parse_lmp 
+23de 6800800b fetch 1 ,mem_slave_rcvcnt 
+23df 1fe0fe01 increase 1 ,pdata 
+23e0 6000800b store 1 ,mem_slave_rcvcnt 
+23e1 20402841 call calc_clke_offset 
+
+slave_notmatch:
+23e2 449f4007 bpatch patch07_6 ,mem_patch07 
+23e3 20402bb1 call lpm_set_mult 
+23e4 20402a7f call supervision_update 
+23e5 202123eb branch slave_disconnect ,positive 
+23e6 204021a7 call check_disconnect_timeout 
+23e7 243423eb nbranch slave_disconnect ,user 
+23e8 204026f3 call check_attempt 
+23e9 243a23d3 nbranch slave_loop ,blank 
+23ea 20600000 rtn 
+
+slave_disconnect:
+23eb 449fc007 bpatch patch07_7 ,mem_patch07 
+23ec 70015100 jam 0 ,mem_tester_emulate 
+23ed 70017f00 jam 0 ,mem_debug_config 
+23ee 2040245d call quit_connection 
+23ef 793f8011 set0 mark_testmode ,mark 
+23f0 20407fb0 call test_enable_white 
+23f1 68008030 fetch 1 ,mem_state 
+23f2 20600000 rtn 
+
+role_switch_slave:
+23f3 44a04008 bpatch patch08_0 ,mem_patch08 
+23f4 204021c9 call role_switch_check 
+23f5 24740000 nrtn user 
+23f6 18820400 copy am_addr ,temp 
+23f7 20402a6f call get_free_amaddr 
+23f8 60008181 store 1 ,mem_fhs_am_addr 
+23f9 18420800 copy temp ,am_addr 
+23fa 70001120 jam param_newconnto ,mem_newconnto_counter 
+
+roles_sendfhs_loop:
+23fb 44a0c008 bpatch patch08_1 ,mem_patch08 
+23fc 20402a4f call rf_setup_time_master_slot 
+23fd 18000202 force type_fhs ,type 
+23fe 2040274f call slave_send_access 
+23ff 1c427e00 deposit clkn_bt 
+2400 60020161 store 4 ,mem_clkn_bt 
+2401 20402762 call transmit_packet 
+2402 20402a4d call rf_setup_time_slave_slot 
+2403 7837fc00 enable user3 
+2404 204024f6 call slave_receive_access 
+2405 202c240d branch roles_got_fhs_reply ,sync 
+2406 204028f9 call shutdown_radio 
+2407 20402455 call new_conn_timeout 
+2408 243a23fb nbranch roles_sendfhs_loop ,blank 
+2409 c6820000 rtnmark0 mark_accept_switch 
+240a 70007c34 jam lmp_slot_offset ,mem_lmo_opcode2 
+240b 79200003 set1 mark_switch_initiated ,mark 
+240c 20600000 rtn 
+
+roles_got_fhs_reply:
+240d 78387c00 enable clknt 
+240e 20402435 call prepare_newconn 
+240f 204028a4 call afh_clear 
+
+roles_newconn_loop:
+2410 44a14008 bpatch patch08_2 ,mem_patch08 
+2411 204022f2 call master_newconn_once 
+2412 202c2419 branch roles_newconn_responded ,sync 
+2413 20402455 call new_conn_timeout 
+2414 243a2410 nbranch roles_newconn_loop ,blank 
+2415 78587c00 disable clknt 
+2416 1d027e00 deposit clke_bt 
+2417 600240ca store 4 ,mem_next_btclk 
+2418 20600000 rtn 
+
+roles_newconn_responded:
+2419 7834fc00 enable master 
+241a c582241f bmark0 mark_accept_switch ,roles_newconn_nolmp 
+241b 793f8004 set0 mark_accept_switch ,mark 
+241c 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+241d 70007d33 jam lmp_host_connection_req ,mem_lmi_opcode2 
+241e 204062f8 call tid_set_reply 
+
+roles_newconn_nolmp:
+241f 18827e00 deposit am_addr 
+2420 60008077 store 1 ,mem_amaddr 
+2421 18007e00 force 0 ,pdata 
+2422 60030038 store 6 ,mem_clk_offset 
+2423 68008031 fetch 1 ,mem_mode 
+2424 79207e01 set1 mode_master ,pdata 
+2425 60008031 store 1 ,mem_mode 
+2426 20402a88 call supervision_flush 
+2427 7854fc00 disable master 
+2428 78347c00 enable user 
+2429 20600000 rtn 
+
+init_rx_packet_flags:
+242a 44a1c008 bpatch patch08_3 ,mem_patch08 
+242b 7856fc00 disable match 
+242c 793f8005 set0 mark_loopback ,mark 
+242d 793f800a set0 mark_am_addr_broadcast ,mark 
+242e 793f8010 set0 mark_longpacket ,mark 
+242f 793f800f set0 mark_old_packet ,mark 
+2430 68008047 fetch 1 ,mem_arq 
+2431 793ffe05 set0 arqnx ,pdata 
+2432 79207e04 set1 flowx ,pdata 
+2433 60008047 store 1 ,mem_arq 
+2434 20600000 rtn 
+
+prepare_newconn:
+2435 44a24008 bpatch patch08_4 ,mem_patch08 
+2436 70001120 jam param_newconnto ,mem_newconnto_counter 
+2437 70004750 jam param_newconn_arq ,mem_arq 
+2438 680140bf fetch 2 ,mem_rx_window_init 
+2439 6001003e store 2 ,mem_rx_window 
+243a 1c427e00 deposit clkn_bt 
+243b 600240ca store 4 ,mem_next_btclk 
+243c 20780000 rtn clknt 
+243d 1d027e00 deposit clke_bt 
+243e 600240ca store 4 ,mem_next_btclk 
+243f 20600000 rtn 
+
+newconn_init:
+2440 44a2c008 bpatch patch08_5 ,mem_patch08 
+2441 20405d04 call init_lmp_reinit 
+2442 20402459 call new_conn_handle 
+2443 60008046 store 1 ,mem_conn_handle 
+2444 58000000 setarg 0 
+2445 6001025d store 2 ,mem_l2cap_rxbuff1_len 
+2446 58001c80 setarg param_supervision_to 
+2447 60010051 store 2 ,mem_supervision_to 
+2448 68008030 fetch 1 ,mem_state 
+2449 79207e00 set1 state_inconn ,pdata 
+244a 60008030 store 1 ,mem_state 
+244b 70004b00 jam 0 ,mem_op 
+244c 70004c00 jam 0 ,mem_state_map 
+244d 7000a000 jam 0 ,mem_lpm_current_mult 
+244e 20202a88 branch supervision_flush 
+
+clear_linkkey:
+244f 44a34008 bpatch patch08_6 ,mem_patch08 
+2450 18007e00 force 0 ,pdata 
+2451 600441be store 8 ,mem_link_key 
+2452 e0a40000 istore 8 ,contw 
+2453 204021c5 call clear_linkstate 
+2454 20202254 branch context_traverse_linkkey 
+
+new_conn_timeout:
+2455 68008011 fetch 1 ,mem_newconnto_counter 
+2456 1fe0ffff increase -1 ,pdata 
+2457 60008011 store 1 ,mem_newconnto_counter 
+2458 20600000 rtn 
+
+new_conn_handle:
+2459 6800c0cf fetch 1 ,mem_handle_num 
+245a 1fe0fe01 increase 1 ,pdata 
+245b 6000c0cf store 1 ,mem_handle_num 
+245c 20600000 rtn 
+
+quit_connection:
+245d 44a3c008 bpatch patch08_7 ,mem_patch08 
+245e 6800c1ce fetch 1 ,mem_hci_cmd 
+245f c001a462 beq hci_cmd_remote_name_req ,quit_connection_name 
+2460 68008048 fetch 1 ,mem_lmp_to_send 
+2461 c080a466 bne lmp_name_req ,quit_connection_cont 
+
+quit_connection_name:
+2462 20404d06 call cmd_check_plap 
+2463 2422a466 nbranch quit_connection_cont ,zero 
+2464 204021a4 call master_name_error 
+2465 7041ce00 jam 0 ,mem_hci_cmd 
+
+quit_connection_cont:
+2466 44a44009 bpatch patch09_0 ,mem_patch09 
+2467 204033af call app_disconn_reason_collect_bt 
+2468 204026e9 call sniff_exit 
+2469 700a9902 jam bt_evt_bb_disconnected ,mem_fifo_temp 
+246a 20407d86 call ui_ipc_send_event 
+246b 20405cf7 call init_lmp_work 
+246c 20404d6b call l2cap_init_work 
+246d 2040757d call sp_initialize 
+246e 68008030 fetch 1 ,mem_state 
+246f 793ffe00 set0 state_inconn 
+2470 60008030 store 1 ,mem_state 
+2471 70468100 jam 0 ,memui_reconnect_mode 
+2472 6800804c fetch 1 ,mem_state_map 
+2473 2fe18000 compare 0x0 ,pdata ,0xc0 
+2474 2020a476 branch quit_connection_not_clear_mark ,true 
+2475 793f8001 set0 mark_rxbuf_inuse ,mark 
+
+quit_connection_not_clear_mark:
+2476 68008047 fetch 1 ,mem_arq 
+2477 c301a478 bbit0 wack ,quit_connection_not_clear_tx 
+
+quit_connection_not_clear_tx:
+2478 6800804b fetch 1 ,mem_op 
+2479 c4030000 rtnbit0 op_txl2cap 
+247a 793f8002 set0 mark_tx_l2cap ,mark 
+247b 20600000 rtn 
+
+slave_newconn_once:
+247c 44a4c009 bpatch patch09_1 ,mem_patch09 
+247d 68008174 fetch 1 ,extm_newconn_am_addr 
+247e 207a0000 rtn blank 
+247f 1fe20800 icopy am_addr 
+2480 20402514 call slave_conn_recv_packet 
+2481 24768000 nrtn match 
+2482 18000200 force type_null ,type 
+2483 20402757 call slave_conn_send_packet 
+2484 18827e00 deposit am_addr 
+2485 60008077 store 1 ,mem_amaddr 
+2486 18007e00 force 0 ,pdata 
+2487 60008174 store 1 ,extm_newconn_am_addr 
+2488 20600000 rtn 
+
+prepare_tx:
+2489 44a54009 bpatch patch09_2 ,mem_patch09 
+248a 68008030 fetch 1 ,mem_state 
+248b c3012496 bbit0 state_insco ,prepare_tx_not_sco 
+248c 18000207 force type_hv3 ,type 
+248d c583a495 bmark0 mark_esco ,prepare_tx_not_esco 
+248e 20402725 call check_esco_amaddr 
+248f 2420a496 nbranch prepare_tx_not_sco ,true 
+2490 20372496 branch prepare_tx_not_sco ,attempt 
+2491 204024c1 call set_wait_ack 
+2492 58000002 setarg 2 
+2493 600140c8 store 2 ,mem_retransmission_cnt 
+2494 20600000 rtn 
+
+prepare_tx_not_esco:
+2495 24770000 nrtn attempt 
+
+prepare_tx_not_sco:
+2496 44a5c009 bpatch patch09_3 ,mem_patch09 
+2497 20402243 call context_check_all_wack 
+2498 2422a4a7 nbranch prepare_tx_no_retransmit ,zero 
+2499 68008047 fetch 1 ,mem_arq 
+249a c301a4b0 bbit0 wack ,prepare_tx_pollnull 
+
+prepare_tx_retransmit:
+249b c502a4b4 bmark1 mark_loopback ,prepare_tx_loopback 
+249c 6800817f fetch 1 ,mem_debug_config 
+249d c28324ba bbit1 debug_tx_pattern ,prepare_tx_txpat 
+249e 680140c8 fetch 2 ,mem_retransmission_cnt 
+249f 1fe0ffff increase -1 ,pdata 
+24a0 600140c8 store 2 ,mem_retransmission_cnt 
+24a1 203a24a5 branch prepare_tx_nomore_retransmit ,blank 
+24a2 6800c0c5 fetch 1 ,mem_last_type 
+24a3 98000200 iforce type 
+24a4 20600000 rtn 
+
+prepare_tx_nomore_retransmit:
+24a5 44a64009 bpatch patch09_4 ,mem_patch09 
+24a6 20402687 call clear_got_tx 
+
+prepare_tx_no_retransmit:
+24a7 20402725 call check_esco_amaddr 
+24a8 2020a4b0 branch prepare_tx_pollnull ,true 
+24a9 2040600a call send_lmp 
+24aa 203424be branch prepare_tx_sendlmp ,user 
+24ab 6800804b fetch 1 ,mem_op 
+24ac c28324c0 bbit1 op_txl2cap ,prepare_tx_sendl2cap 
+24ad c502a4b4 bmark1 mark_loopback ,prepare_tx_loopback 
+24ae 6800817f fetch 1 ,mem_debug_config 
+24af c28324ba bbit1 debug_tx_pattern ,prepare_tx_txpat 
+
+prepare_tx_pollnull:
+24b0 18000201 force type_poll ,type 
+24b1 20748000 rtn master 
+24b2 18000200 force type_null ,type 
+24b3 20600000 rtn 
+
+prepare_tx_loopback:
+24b4 44a6c009 bpatch patch09_5 ,mem_patch09 
+24b5 68008019 fetch 1 ,mem_rx_type 
+24b6 98000200 iforce type 
+24b7 c1808000 rtnne 1 
+24b8 18000200 force type_null ,type 
+24b9 20600000 rtn 
+
+prepare_tx_txpat:
+24ba 68008158 fetch 1 ,test_mode_packet_type 
+24bb 1fe1020f and pdata ,0xf ,type 
+24bc 79200005 set1 mark_loopback ,mark 
+24bd 20600000 rtn 
+
+prepare_tx_sendlmp:
+24be 18000213 force type_lmp ,type 
+24bf 202024c1 branch set_wait_ack 
+
+prepare_tx_sendl2cap:
+24c0 204024ca call tx_l2cap_type 
+
+set_wait_ack:
+24c1 44a74009 bpatch patch09_6 ,mem_patch09 
+24c2 68088047 fetcht 1 ,mem_arq 
+24c3 79200403 set1 wack ,temp 
+24c4 60088047 storet 1 ,mem_arq 
+24c5 18227e00 deposit type 
+24c6 6000c0c5 store 1 ,mem_last_type 
+24c7 5800ffff setarg 0xffff 
+24c8 600140c8 store 2 ,mem_retransmission_cnt 
+24c9 20600000 rtn 
+
+tx_l2cap_type:
+24ca 44a7c009 bpatch patch09_7 ,mem_patch09 
+24cb 6800804c fetch 1 ,mem_state_map 
+24cc 2feffe05 isolate1 smap_edr ,pdata 
+24cd 680141dc fetch 2 ,mem_tx_len 
+24ce 2020a4e0 branch tx_l2cap_type_edr ,true 
+24cf 18000203 force type_dm1 ,type 
+24d0 1fe67c11 sub pdata ,17 ,null 
+24d1 20610000 rtn positive 
+24d2 18000204 force type_dh1 ,type 
+24d3 1fe67c1b sub pdata ,27 ,null 
+24d4 20610000 rtn positive 
+24d5 1800020a force type_dm3 ,type 
+24d6 1fe67c79 sub pdata ,121 ,null 
+24d7 20610000 rtn positive 
+24d8 1800020b force type_dh3 ,type 
+24d9 1fe67cb7 sub pdata ,183 ,null 
+24da 20610000 rtn positive 
+24db 1800020e force type_dm5 ,type 
+24dc 1fe67ce0 sub pdata ,224 ,null 
+24dd 20610000 rtn positive 
+24de 1800020f force type_dh5 ,type 
+24df 20600000 rtn 
+
+tx_l2cap_type_edr:
+24e0 18000203 force type_dm1 ,type 
+24e1 1fe67c11 sub pdata ,17 ,null 
+24e2 20610000 rtn positive 
+24e3 18000204 force type_dh1 ,type 
+24e4 1fe67c36 sub pdata ,54 ,null 
+24e5 20610000 rtn positive 
+24e6 1800020a force type_dm3 ,type 
+24e7 d840016f arg 367 ,temp 
+24e8 98467c00 isub temp ,null 
+24e9 24610000 nrtn positive 
+24ea 1800020e force type_dm5 ,type 
+24eb d84002a7 arg 679 ,temp 
+24ec 98467c00 isub temp ,null 
+24ed 24610000 nrtn positive 
+24ee 1800020f force type_dh5 ,type 
+24ef 20600000 rtn 
+
+slave_receive_master_slot:
+24f0 68008030 fetch 1 ,mem_state 
+24f1 c300a4f5 bbit0 state_insniff ,slave_receive_notsniff 
+24f2 68010032 fetch 2 ,mem_tsniff 
+24f3 203a24f5 branch slave_receive_notsniff ,blank 
+24f4 243724f7 nbranch slave_receive_sniff ,attempt 
+
+slave_receive_notsniff:
+24f5 20402a4f call rf_setup_time_master_slot 
+
+slave_receive_access:
+24f6 1d00c201 add clke_bt ,1 ,bt_clk 
+
+slave_receive_sniff:
+24f7 78287c00 enable swfine 
+24f8 6801003e fetch 2 ,mem_rx_window 
+24f9 1fe37e00 rshift pdata ,pdata 
+24fa d8400500 arg param_pll_setup ,temp 
+24fb 9840fe00 iadd temp ,pdata 
+24fc 20402a24 call ahead_window 
+24fd 204028ea call fetch_extm_bt_adr 
+24fe 18004803 force 0x03 ,freq_mode 
+24ff 204028cc call rx_radio_freq 
+2500 2040242a call init_rx_packet_flags 
+2501 204029f1 call prep_crypt 
+2502 44a8400a bpatch patch0a_0 ,mem_patch0a 
+2503 6801003e fetch 2 ,mem_rx_window 
+2504 1fe37e00 rshift pdata ,pdata 
+2505 20402a24 call ahead_window 
+2506 204029eb call start_receiver 
+2507 7826fc00 enable decode_fec0 
+2508 6801003e fetch 2 ,mem_rx_window 
+2509 d84003bb arg param_clke_cal ,temp 
+250a 9840b600 iadd temp ,stop_watch 
+250b 37c18400 correlate null ,timeout 
+250c 1b420400 copy clke ,temp 
+250d 600b009a storet 6 ,mem_sync_clke 
+250e 7846fc00 disable decode_fec0 
+250f 246c0000 nrtn sync 
+2510 dd2003bb arg param_clke_cal ,clke_rt 
+2511 1c225000 copy bt_clk ,clke_bt 
+2512 2035ab05 branch lpm_adjust_clk ,wake 
+2513 20600000 rtn 
+
+slave_conn_recv_packet:
+2514 44a8c00a bpatch patch0a_1 ,mem_patch0a 
+2515 204024f0 call slave_receive_master_slot 
+2516 242c28f9 nbranch shutdown_radio ,sync 
+2517 204029bb call save_rssi 
+2518 c588a51c bmark0 mark_testmode ,receive_packet 
+2519 680100f6 fetch 2 ,mem_tst_pktcnt_sync 
+251a 1fe0fe01 increase 1 ,pdata 
+251b 600100f6 store 2 ,mem_tst_pktcnt_sync 
+
+receive_packet:
+251c 1c230400 rshift bt_clk ,temp 
+251d 18419c40 or temp ,0x40 ,white_init 
+
+receive_packet_whitened:
+251e 44a9400a bpatch patch0a_2 ,mem_patch0a 
+251f 7823fc00 enable enable_white 
+2520 78257c00 enable enable_hec 
+2521 7825fc00 enable decode_fec1 
+2522 09800003 parse demod ,bucket ,3 
+2523 198cfe00 rshift8 pwindow ,pdata 
+2524 6000815d store 1 ,mem_temp_am_addr 
+2525 09800004 parse demod ,bucket ,4 
+2526 08008007 inject bucket ,7 
+2527 19827e00 copy pwindow ,pdata 
+2528 60008019 store 1 ,mem_rx_type 
+2529 09800003 parse demod ,bucket ,3 
+252a 198cfe00 rshift8 pwindow ,pdata 
+252b 6000815e store 1 ,mem_temp_arq 
+252c 68008019 fetch 1 ,mem_rx_type 
+252d 1fe67c03 sub pdata ,3 ,null 
+252e 20212533 branch receive_packet_noedr ,positive 
+252f c003a533 beq 7 ,receive_packet_noedr 
+2530 6800804c fetch 1 ,mem_state_map 
+2531 2feffe05 isolate1 smap_edr ,pdata 
+2532 7920aa01 setflag true ,psk ,radio_ctrl 
+
+receive_packet_noedr:
+2533 44a9c00a bpatch patch0a_3 ,mem_patch0a 
+2534 09800008 parse demod ,bucket ,8 
+2535 7845fc00 disable decode_fec1 
+2536 78457c00 disable enable_hec 
+2537 20232631 branch error_header ,crc_failed 
+2538 c588a53c bmark0 mark_testmode ,receive_packet_amchk 
+2539 680100f8 fetch 2 ,mem_tst_pktcnt_hec 
+253a 1fe0fe01 increase 1 ,pdata 
+253b 600100f8 store 2 ,mem_tst_pktcnt_hec 
+
+receive_packet_amchk:
+253c 44aa400a bpatch patch0a_4 ,mem_patch0a 
+253d 6800815d fetch 1 ,mem_temp_am_addr 
+253e 2fe00e00 compare 0 ,pdata ,0x07 
+253f 7920800a setflag true ,mark_am_addr_broadcast ,mark 
+2540 2020a54c branch am_addr_ok ,true 
+2541 a8800e00 icompare 0x07 ,am_addr 
+2542 2020a54b branch am_addr_match ,true 
+2543 c583a64d bmark0 mark_esco ,end_of_packet 
+2544 680880b0 fetcht 1 ,mem_saved_amaddr 
+2545 a8400e00 icompare 0x7 ,temp 
+2546 2420a64d nbranch end_of_packet ,true 
+2547 68008047 fetch 1 ,mem_arq 
+2548 793ffe05 set0 arqnx ,pdata 
+2549 79207e04 set1 flowx ,pdata 
+254a 60008047 store 1 ,mem_arq 
+
+am_addr_match:
+254b 7836fc00 enable match 
+
+am_addr_ok:
+254c 44aac00a bpatch patch0a_5 ,mem_patch0a 
+254d 68008019 fetch 1 ,mem_rx_type 
+254e 1fe20200 icopy type 
+254f c505255b bmark1 mark_am_addr_broadcast ,arqn_bypass 
+2550 6808815e fetcht 1 ,mem_temp_arq 
+2551 68008047 fetch 1 ,mem_arq 
+2552 793ffe00 set0 flow ,pdata 
+2553 284ffe00 isolate1 flow ,temp 
+2554 7920fe00 setflag true ,flow ,pdata 
+2555 284ffe01 isolate1 arqn ,temp 
+2556 7920fe01 setflag true ,arqn ,pdata 
+2557 60008047 store 1 ,mem_arq 
+2558 284c0001 isolate0 arqn ,temp 
+2559 2020a55b branch arqn_bypass ,true 
+255a 20402687 call clear_got_tx 
+
+arqn_bypass:
+255b 44ab400a bpatch patch0a_6 ,mem_patch0a 
+255c d8400000 arg 0 ,temp 
+255d 20402a1c call reserve_slot 
+255e 18217e0f and type ,0xf ,pdata 
+255f c000a587 beq type_poll ,process_poll 
+2560 c000264d beq type_null ,end_of_packet 
+2561 c0012659 beq type_fhs ,process_fhs 
+2562 6808815e fetcht 1 ,mem_temp_arq 
+2563 68008047 fetch 1 ,mem_arq 
+2564 a8400800 icompare 0x04 ,temp 
+2565 2420a569 nbranch rx_type_dispatch ,true 
+2566 c5852568 bmark0 mark_am_addr_broadcast ,failed_seqn 
+2567 c303a569 bbit0 bcast1 ,rx_type_dispatch 
+
+failed_seqn:
+2568 7920000f set1 mark_old_packet ,mark 
+
+rx_type_dispatch:
+2569 44abc00a bpatch patch0a_7 ,mem_patch0a 
+256a 18227e00 deposit type 
+256b c001a589 beq type_dm1 ,process_dm1 
+256c c002258d beq type_dh1 ,process_dh1 
+256d c003a578 beq type_hv3 ,process_hev 
+256e c004258c beq type_3dh1 ,process_3dh1 
+256f d8400004 arg 4 ,temp 
+2570 20402a1c call reserve_slot 
+2571 c0052588 beq type_dm3 ,process_dm3 
+2572 c005a58b beq type_dh3 ,process_dh3 
+2573 d8400008 arg 8 ,temp 
+2574 20402a1c call reserve_slot 
+2575 c0072588 beq type_dm5 ,process_dm5 
+2576 c007a58b beq type_dh5 ,process_dh5 
+2577 20600000 rtn 
+
+process_hev:
+2578 44ac400b bpatch patch0b_0 ,mem_patch0b 
+2579 7826fc00 enable decode_fec0 
+257a 7824fc00 enable enable_crc 
+257b 78277c00 enable encrypt 
+257c d8a000d1 arg mem_sco_ibuf ,contw 
+257d 1800721e force 30 ,loopcnt 
+
+process_hev_loop:
+257e 09800008 parse demod ,bucket ,8 
+257f 19897e00 rshift3 pwindow ,pdata 
+2580 e0a08000 istore 1 ,contw 
+2581 c200257e loop process_hev_loop 
+2582 c583a64d bmark0 mark_esco ,end_of_packet 
+2583 09800010 parse demod ,bucket ,16 
+2584 7d230008 nsetflag crc_failed ,mark_esco_rxok ,mark 
+2585 2023263d branch error_payload ,crc_failed 
+2586 20202620 branch ack_payload 
+
+process_poll:
+2587 2020264d branch end_of_packet 
+
+process_dm3:
+
+process_dm5:
+2588 79200010 set1 mark_longpacket ,mark 
+
+process_dm1:
+2589 78267c00 enable decode_fec2 
+258a 2020258e branch process_dmh 
+
+process_dh3:
+
+process_dh5:
+258b 79200010 set1 mark_longpacket ,mark 
+
+process_3dh1:
+258c 79202a02 set1 psk3m ,radio_ctrl 
+
+process_dh1:
+258d 7826fc00 enable decode_fec0 
+
+process_dmh:
+258e 44acc00b bpatch patch0b_1 ,mem_patch0b 
+258f c500a64d bmark1 mark_rxbuf_inuse ,end_of_packet 
+2590 2aac0001 isolate0 psk ,radio_ctrl 
+2591 2020a59a branch process_dmh_noedr ,true 
+2592 7843fc00 disable enable_white 
+2593 7826fc00 enable decode_fec0 
+2594 78467c00 disable decode_fec2 
+2595 1c409602 add clkn_bt ,2 ,timeup 
+2596 34530400 correlate clkn_bt ,meet 
+2597 242c263d nbranch error_payload ,sync 
+2598 79200010 set1 mark_longpacket ,mark 
+2599 7823fc00 enable enable_white 
+
+process_dmh_noedr:
+259a 44ad400b bpatch patch0b_2 ,mem_patch0b 
+259b 78277c00 enable encrypt 
+259c 7824fc00 enable enable_crc 
+259d 09800003 parse demod ,bucket ,3 
+259e 198cfe00 rshift8 pwindow ,pdata 
+259f 60008180 store 1 ,mem_lch_code 
+25a0 09800005 parse demod ,bucket ,5 
+25a1 c50825a5 bmark1 mark_longpacket ,process_dmh_long 
+25a2 19897200 rshift3 pwindow ,loopcnt 
+25a3 1f297200 rshift3 loopcnt ,loopcnt 
+25a4 202025a8 branch process_dmh_common 
+
+process_dmh_long:
+25a5 09800005 parse demod ,bucket ,5 
+25a6 19837200 rshift pwindow ,loopcnt 
+25a7 09800003 parse demod ,bucket ,3 
+
+process_dmh_common:
+25a8 44adc00b bpatch patch0b_3 ,mem_patch0b 
+25a9 1f227e00 deposit loopcnt 
+25aa 6001015f store 2 ,mem_len 
+25ab 203a25e8 branch process_dmh_data_end ,blank 
+25ac 9ea67c00 isub mask3ff ,null 
+25ad 2021263d branch error_payload ,positive 
+25ae 44ae400b bpatch patch0b_4 ,mem_patch0b 
+25af 793f8000 set0 mark_fhs_eir ,mark 
+25b0 68008180 fetch 1 ,mem_lch_code 
+25b1 1fe17e03 and_into 0x03 ,pdata 
+25b2 d8a00551 arg mem_rxbuf ,contw 
+25b3 c001a5ba beq llid_lmp ,process_lmp 
+25b4 c508a5e4 bmark1 mark_testmode ,process_dmh_data 
+25b5 68008180 fetch 1 ,mem_lch_code 
+25b6 1fe17e03 and_into 0x03 ,pdata 
+25b7 c00125bf beq llid_l2cap_start ,process_dmh_data_l2cap_start_pkt 
+25b8 c000a5d3 beq llid_l2cap_cont ,process_dmh_data_l2cap_continue_pkt 
+25b9 2020263d branch error_payload 
+
+process_lmp:
+25ba 6801015f fetch 2 ,mem_len 
+25bb 1fe67c70 sub pdata ,0x70 ,null 
+25bc 2421263d nbranch error_payload ,positive 
+25bd c507a620 bmark1 mark_old_packet ,ack_payload 
+25be 202025e4 branch process_dmh_data 
+
+process_dmh_data_l2cap_start_pkt:
+25bf 44aec00b bpatch patch0b_5 ,mem_patch0b 
+25c0 c507a620 bmark1 mark_old_packet ,ack_payload 
+25c1 6801015f fetch 2 ,mem_len 
+25c2 d84002e0 arg 0x2e0 ,temp 
+25c3 98467c00 isub temp ,null 
+25c4 2021263d branch error_payload ,positive 
+25c5 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 
+25c6 c30025c9 bbit0 l2cap_inuse_buff1 ,process_dmh_data_into_buff1 
+25c7 c300a5ce bbit0 l2cap_inuse_buff2 ,process_dmh_data_into_buff2 
+25c8 2020264d branch end_of_packet 
+
+process_dmh_data_into_buff1:
+25c9 70026101 jam 1 ,mem_l2cap_rxbuff_new 
+25ca 6801025d fetch 2 ,mem_l2cap_rxbuff1_len 
+25cb c080264d bne 0 ,end_of_packet 
+25cc d8a01000 arg mem_l2cap_rxbuff1 ,contw 
+25cd 202025e4 branch process_dmh_data 
+
+process_dmh_data_into_buff2:
+25ce 70026102 jam 2 ,mem_l2cap_rxbuff_new 
+25cf 6801025f fetch 2 ,mem_l2cap_rxbuff2_len 
+25d0 c080264d bne 0 ,end_of_packet 
+25d1 d8a01400 arg mem_l2cap_rxbuff2 ,contw 
+25d2 202025e4 branch process_dmh_data 
+
+process_dmh_data_l2cap_continue_pkt:
+25d3 44af400b bpatch patch0b_6 ,mem_patch0b 
+25d4 c507a620 bmark1 mark_old_packet ,ack_payload 
+25d5 6801015f fetch 2 ,mem_len 
+25d6 d84002e0 arg 0x2e0 ,temp 
+25d7 98467c00 isub temp ,null 
+25d8 2021263d branch error_payload ,positive 
+25d9 68008261 fetch 1 ,mem_l2cap_rxbuff_new 
+25da c000a5dd beq 1 ,process_dmh_data_l2cap_continue_pkt1 
+25db c00125e1 beq 2 ,process_dmh_data_l2cap_continue_pkt2 
+25dc 2020264d branch end_of_packet 
+
+process_dmh_data_l2cap_continue_pkt1:
+25dd d8a01000 arg mem_l2cap_rxbuff1 ,contw 
+25de 6801025d fetch 2 ,mem_l2cap_rxbuff1_len 
+25df 98a08a00 iadd contw ,contw 
+25e0 202025e4 branch process_dmh_data 
+
+process_dmh_data_l2cap_continue_pkt2:
+25e1 d8a01400 arg mem_l2cap_rxbuff2 ,contw 
+25e2 6801025f fetch 2 ,mem_l2cap_rxbuff2_len 
+25e3 98a08a00 iadd contw ,contw 
+
+process_dmh_data:
+25e4 09800008 parse demod ,bucket ,8 
+25e5 19897e00 rshift3 pwindow ,pdata 
+25e6 e0a08000 istore 1 ,contw 
+25e7 c20025e4 loop process_dmh_data 
+
+process_dmh_data_end:
+25e8 44afc00b bpatch patch0b_7 ,mem_patch0b 
+25e9 09800010 parse demod ,bucket ,16 
+25ea 20232637 branch error_payload_crc ,crc_failed 
+25eb 6800c363 fetch 1 ,mem_l2cap_flow_ctrl_flag 
+25ec c000a64d beq l2cap_flow_ctrl_enable ,end_of_packet 
+25ed c508a60d bmark1 mark_testmode ,process_dmh_cont 
+25ee c507a64a bmark1 mark_old_packet ,redundant_payload 
+25ef 68008180 fetch 1 ,mem_lch_code 
+25f0 2fe00603 compare 3 ,pdata ,3 
+25f1 2020a60d branch process_dmh_cont ,true 
+25f2 6801015f fetch 2 ,mem_len 
+25f3 203a260d branch process_dmh_cont ,blank 
+25f4 44b0400c bpatch patch0c_0 ,mem_patch0c 
+25f5 68008261 fetch 1 ,mem_l2cap_rxbuff_new 
+25f6 c000a5f9 beq 1 ,process_l2cap_pass_crc_buff1 
+25f7 c0012603 beq 2 ,process_l2cap_pass_crc_buff2 
+25f8 20202a8c branch assert 
+
+process_l2cap_pass_crc_buff1:
+25f9 6801025d fetch 2 ,mem_l2cap_rxbuff1_len 
+25fa 6809015f fetcht 2 ,mem_len 
+25fb 9840fe00 iadd temp ,pdata 
+25fc 6001025d store 2 ,mem_l2cap_rxbuff1_len 
+25fd c0002a8c beq 0 ,assert 
+25fe 68091000 fetcht 2 ,mem_l2cap_rxbuff1 
+25ff 18408404 increase 4 ,temp 
+2600 98467c00 isub temp ,null 
+2601 2042a747 call l2cap_buff1_inuse ,zero 
+2602 2020260d branch process_dmh_cont 
+
+process_l2cap_pass_crc_buff2:
+2603 6801025f fetch 2 ,mem_l2cap_rxbuff2_len 
+2604 6809015f fetcht 2 ,mem_len 
+2605 9840fe00 iadd temp ,pdata 
+2606 6001025f store 2 ,mem_l2cap_rxbuff2_len 
+2607 c0002a8c beq 0 ,assert 
+2608 68091400 fetcht 2 ,mem_l2cap_rxbuff2 
+2609 18408404 add temp ,4 ,temp 
+260a 98467c00 isub temp ,null 
+260b 2042a74b call l2cap_buff2_inuse ,zero 
+260c 2020260d branch process_dmh_cont 
+
+process_dmh_cont:
+260d 44b0c00c bpatch patch0c_1 ,mem_patch0c 
+260e 6808804c fetcht 1 ,mem_state_map 
+260f 68008180 fetch 1 ,mem_lch_code 
+2610 2fe00603 compare 3 ,pdata ,0x03 
+2611 79208406 setflag true ,smap_rxlmp ,temp 
+2612 7d208407 nsetflag true ,smap_rxl2cap ,temp 
+2613 6008804c storet 1 ,mem_state_map 
+2614 2420a616 nbranch process_dmh_cont_rxbuf_not_use ,true 
+2615 79200001 set1 mark_rxbuf_inuse ,mark 
+
+process_dmh_cont_rxbuf_not_use:
+2616 c588a620 bmark0 mark_testmode ,ack_payload 
+2617 284ffe06 isolate1 smap_rxlmp ,temp 
+2618 2020a620 branch ack_payload ,true 
+2619 680100fa fetch 2 ,mem_tst_pktcnt_crc 
+261a 1fe0fe01 increase 1 ,pdata 
+261b 600100fa store 2 ,mem_tst_pktcnt_crc 
+261c 79200005 set1 mark_loopback ,mark 
+261d 793f8407 set0 smap_rxl2cap ,temp 
+261e 793f8001 set0 mark_rxbuf_inuse ,mark 
+261f 6008804c storet 1 ,mem_state_map 
+
+ack_payload:
+2620 44b1400c bpatch patch0c_2 ,mem_patch0c 
+2621 6808815e fetcht 1 ,mem_temp_arq 
+2622 68008047 fetch 1 ,mem_arq 
+2623 79207e05 set1 arqnx ,pdata 
+2624 284ffe02 isolate1 seqn ,temp 
+2625 7920fe02 setflag true ,seqn ,pdata 
+2626 280ffe0a isolate1 mark_am_addr_broadcast ,mark 
+2627 7920fe07 setflag true ,bcast1 ,pdata 
+2628 60008047 store 1 ,mem_arq 
+2629 6801015f fetch 2 ,mem_len 
+262a 243a264d nbranch end_of_packet ,blank 
+262b 6800804c fetch 1 ,mem_state_map 
+262c 793ffe07 set0 smap_rxl2cap ,pdata 
+262d 6000804c store 1 ,mem_state_map 
+262e 68008180 fetch 1 ,mem_lch_code 
+262f 2fe00e01 compare 0x01 ,pdata ,0x07 
+2630 2020264d branch end_of_packet 
+
+error_header:
+2631 44b1c00c bpatch patch0c_3 ,mem_patch0c 
+2632 7856fc00 disable match 
+2633 6801001a fetch 2 ,mem_rx_hec_err 
+2634 1fe0fe01 increase 1 ,pdata 
+2635 6001001a store 2 ,mem_rx_hec_err 
+2636 2020264d branch end_of_packet 
+
+error_payload_crc:
+2637 6801001c fetch 2 ,mem_rx_crc_err 
+2638 1fe0fe01 increase 1 ,pdata 
+2639 6001001c store 2 ,mem_rx_crc_err 
+263a 2040263e call discard_pkt 
+263b c588a63d bmark0 mark_testmode ,error_payload 
+263c 79200005 set1 mark_loopback ,mark 
+
+error_payload:
+263d 2020264d branch end_of_packet 
+
+discard_pkt:
+263e 44b2400c bpatch patch0c_4 ,mem_patch0c 
+263f 68008180 fetch 1 ,mem_lch_code 
+2640 2fe00603 compare 3 ,pdata ,0x03 
+2641 2420a646 nbranch discard_pkt_l2cap ,true 
+
+discard_pkt_lmp:
+2642 6808804c fetcht 1 ,mem_state_map 
+2643 793f8406 set0 smap_rxlmp ,temp 
+2644 6008804c storet 1 ,mem_state_map 
+2645 20600000 rtn 
+
+discard_pkt_l2cap:
+2646 6808804c fetcht 1 ,mem_state_map 
+2647 793f8407 set0 smap_rxl2cap ,temp 
+2648 6008804c storet 1 ,mem_state_map 
+2649 20204c0b branch h4_send_acl_trigger_clear 
+
+redundant_payload:
+264a 68008047 fetch 1 ,mem_arq 
+264b 79207e05 set1 arqnx ,pdata 
+264c 60008047 store 1 ,mem_arq 
+
+end_of_packet:
+264d 44b2c00c bpatch patch0c_5 ,mem_patch0c 
+264e 784efc00 disable encode_fec0 
+264f 784e7c00 disable encode_fec2 
+2650 7846fc00 disable decode_fec0 
+2651 78467c00 disable decode_fec2 
+2652 7844fc00 disable enable_crc 
+2653 78477c00 disable encrypt 
+2654 7843fc00 disable enable_white 
+2655 2030a8f9 branch shutdown_radio ,is_rx 
+2656 37d38200 until null ,tx_clear 
+2657 20000064 nop 100 
+2658 202028f9 branch shutdown_radio 
+
+process_fhs:
+2659 44b3400c bpatch patch0c_6 ,mem_patch0c 
+265a 7824fc00 enable enable_crc 
+265b 78267c00 enable decode_fec2 
+265c 09800048 parse demod ,bucket ,72 
+265d 2feffe3a isolate1 58 ,pdata 
+265e 79208000 setflag true ,mark_fhs_eir ,mark 
+265f 1c020400 copy bt_adr ,temp 
+2660 57e04000 ialigned bt_adr 
+2661 57e03c00 ialigned fhs0 
+2662 782afc00 pulse recalc 
+2663 380bffff setsect 2 ,0xfffff 
+2664 380cffff setsect 3 ,0x0ffff 
+2665 20000020 nop 32 
+2666 29a80000 iverify fhs_parity 
+2667 1d827e00 deposit lap 
+2668 60018178 store 3 ,extm_lap 
+2669 1da27e00 deposit uap 
+266a 6000817b store 1 ,extm_uap 
+266b 18424000 copy temp ,bt_adr 
+266c 2020a66e branch fhs_parity_ok ,true 
+266d 2020263d branch error_payload 
+
+fhs_parity_ok:
+266e 44b3c00c bpatch patch0c_7 ,mem_patch0c 
+266f 09800048 parse demod ,bucket ,72 
+2670 57e03e00 ialigned fhs1 
+2671 57e00800 ialigned am_addr 
+2672 57e05c00 ialigned nap 
+2673 57e02400 ialigned regb 
+2674 18007e00 force 0 ,pdata 
+2675 09800010 parse demod ,bucket ,16 
+2676 2023263d branch error_payload ,crc_failed 
+2677 5ffffffc setarg 0x0ffffffc 
+2678 9a417e00 iand regb ,pdata 
+2679 60020165 store 4 ,mem_clke_bt 
+267a 1ba27e00 deposit fhs_class 
+267b 60018175 store 3 ,extm_class 
+267c 1b827e00 deposit fhs_misc 
+267d 60008173 store 1 ,extm_fhs_misc 
+267e 18827e00 deposit am_addr 
+267f 60008174 store 1 ,extm_newconn_am_addr 
+2680 1dc27e00 deposit nap 
+2681 6001017c store 2 ,extm_nap 
+2682 1c227e00 deposit bt_clk 
+2683 08008220 inject rxf ,32 
+2684 28201e02 compare type_fhs ,type ,0x0f 
+2685 7920800b setflag true ,mark_fhs_already_good ,mark 
+2686 2020264d branch end_of_packet 
+
+clear_got_tx:
+2687 44b4400d bpatch patch0d_0 ,mem_patch0d 
+2688 68008047 fetch 1 ,mem_arq 
+2689 c4018000 rtnbit0 wack 
+268a 793ffe03 set0 wack ,pdata 
+268b 79407e06 setflip seqnx ,pdata 
+268c 60008047 store 1 ,mem_arq 
+268d 6800c0c5 fetch 1 ,mem_last_type 
+268e c009a69c beq type_lmp ,clear_got_txlmp 
+268f c1038000 rtneq type_hv3 
+2690 6800804b fetch 1 ,mem_op 
+2691 c4030000 rtnbit0 op_txl2cap ,pdata 
+2692 793ffe06 set0 op_txl2cap ,pdata 
+2693 79207e07 set1 op_pkt_comp ,pdata 
+2694 6000804b store 1 ,mem_op 
+2695 793f8002 set0 mark_tx_l2cap ,mark 
+2696 68014246 fetch 2 ,mem_l2cap_tx_multi_offset 
+2697 247a0000 nrtn blank 
+2698 6800804b fetch 1 ,mem_op 
+2699 793ffe07 set0 op_pkt_comp ,pdata 
+269a 6000804b store 1 ,mem_op 
+269b 2020525d branch l2cap_malloc_free 
+
+clear_got_txlmp:
+269c 44b4c00d bpatch patch0d_1 ,mem_patch0d 
+269d 680084b7 fetch 1 ,mem_lmo_header_opcode 
+269e 1fe37e00 rshift pdata ,pdata 
+269f c008a6b8 beq lmp_start_encryption_req ,start_encryption 
+26a0 c00926c0 beq lmp_stop_encryption_req ,stop_encryption 
+26a1 c00c26e9 beq lmp_unsniff_req ,sniff_exit 
+26a2 c03fa6a8 beq lmp_escape ,clear_lmp_escape 
+26a3 c1818000 rtnne lmp_accepted 
+26a4 680084b8 fetch 1 ,mem_lmo_payload 
+26a5 c015a6b0 beq lmp_sco_link_req ,sco_link_req_by_slave 
+26a6 c008a6ab beq lmp_start_encryption_req ,clear_send_setup_complete 
+26a7 20600000 rtn 
+
+clear_lmp_escape:
+26a8 680084b8 fetch 1 ,mem_lmo_payload 
+26a9 79207e07 set1 7 ,pdata 
+26aa 20600000 rtn 
+
+clear_send_setup_complete:
+26ab 20748000 rtn master 
+26ac 68008030 fetch 1 ,mem_state 
+26ad c3820000 rtnbit1 state_conn_comp 
+26ae 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 
+26af 20600000 rtn 
+
+sco_link_req_by_slave:
+26b0 20748000 rtn master 
+26b1 68008031 fetch 1 ,mem_mode 
+26b2 2feffe04 isolate1 send_sco_when_slave ,pdata 
+26b3 2020a6b5 branch clean_mem_mode ,true 
+26b4 20600000 rtn 
+
+clean_mem_mode:
+26b5 793ffe04 set0 send_sco_when_slave ,pdata 
+26b6 60008031 store 1 ,mem_mode 
+26b7 20600000 rtn 
+
+start_encryption:
+26b8 44b5400d bpatch patch0d_2 ,mem_patch0d 
+26b9 6800804c fetch 1 ,mem_state_map 
+26ba 79207e02 set1 smap_encryption ,pdata 
+26bb 6000804c store 1 ,mem_state_map 
+26bc 70801101 jam 1 ,core_encrypt 
+26bd 68008030 fetch 1 ,mem_state 
+26be 2feffe04 isolate1 state_conn_comp ,pdata 
+26bf 20600000 rtn 
+
+stop_encryption:
+26c0 44b5c00d bpatch patch0d_3 ,mem_patch0d 
+26c1 6800804c fetch 1 ,mem_state_map 
+26c2 793ffe02 set0 smap_encryption ,pdata 
+26c3 6000804c store 1 ,mem_state_map 
+26c4 70801100 jam 0 ,core_encrypt 
+26c5 20600000 rtn 
+
+sniff_init:
+26c6 44b6400d bpatch patch0d_4 ,mem_patch0d 
+26c7 1c427e00 copy clkn_bt ,pdata 
+26c8 6002420c store 4 ,mem_lpm_delay_after_sniff 
+26c9 1c40a203 add clkn_bt ,3 ,rega 
+26ca 2034a6cc branch sniff_init_master ,master 
+26cb 1d00a203 add clke_bt ,3 ,rega 
+
+sniff_init_master:
+26cc 68090032 fetcht 2 ,mem_tsniff 
+26cd 1a227e00 deposit rega 
+26ce 793ffe1b set0 27 ,pdata 
+26cf 9846fc00 idiv temp 
+26d0 68010075 fetch 2 ,mem_dsniff 
+26d1 20407f86 call wait_div_end 
+26d2 18072600 remainder regc 
+26d3 9a667e00 isub regc ,pdata 
+26d4 202126d6 branch sniff_init_nowrap ,positive 
+26d5 9840fe00 iadd temp ,pdata 
+
+sniff_init_nowrap:
+26d6 9a20fe00 iadd rega ,pdata 
+26d7 60020034 store 4 ,mem_sniff_anchor 
+26d8 70455b00 jam switch_flag_init ,mem_switch_flag 
+26d9 68008030 fetch 1 ,mem_state 
+26da 79207e01 set1 state_insniff ,pdata 
+26db 60008030 store 1 ,mem_state 
+26dc 68008073 fetch 1 ,mem_sniff_attempt 
+26dd 6000808a store 1 ,mem_current_sniff_attempt 
+26de 58000000 setarg 0 
+26df 6001c169 store 3 ,mem_sniff_rcv 
+26e0 6001c16c store 3 ,mem_sniff_lost 
+26e1 6000c159 store 1 ,mem_sniff_unint_lost 
+26e2 700a990b jam bt_evt_enter_sniff ,mem_fifo_temp 
+26e3 20407d86 call ui_ipc_send_event 
+26e4 680140c1 fetch 2 ,mem_rx_window_sniff 
+26e5 6001003e store 2 ,mem_rx_window 
+26e6 24748000 nrtn master 
+26e7 18808fff add am_addr ,-1 ,queue 
+26e8 20600000 rtn 
+
+sniff_exit:
+26e9 44b6c00d bpatch patch0d_5 ,mem_patch0d 
+26ea 68008030 fetch 1 ,mem_state 
+26eb c4008000 rtnbit0 state_insniff 
+26ec 793ffe01 set0 state_insniff ,pdata 
+26ed 60008030 store 1 ,mem_state 
+26ee 680140bf fetch 2 ,mem_rx_window_init 
+26ef 6001003e store 2 ,mem_rx_window 
+26f0 7855fc00 disable wake 
+26f1 700a990c jam bt_evt_exit_sniff ,mem_fifo_temp 
+26f2 20207d86 branch ui_ipc_send_event 
+
+check_attempt:
+26f3 44b7400d bpatch patch0d_6 ,mem_patch0d 
+26f4 78377c00 enable attempt 
+26f5 68008030 fetch 1 ,mem_state 
+26f6 c280a700 bbit1 state_insniff ,check_attempt_sniff 
+26f7 c6088000 rtnmark1 mark_testmode 
+26f8 68008047 fetch 1 ,mem_arq 
+26f9 c3818000 rtnbit1 wack 
+26fa 68008048 fetch 1 ,mem_lmp_to_send 
+26fb 247a0000 nrtn blank 
+26fc 6800804b fetch 1 ,mem_op 
+26fd c3830000 rtnbit1 op_txl2cap 
+
+check_attempt_nomore:
+26fe 18007e00 force 0 ,pdata 
+26ff 20600000 rtn 
+
+check_attempt_sniff:
+2700 c301270f bbit0 state_insco ,check_attempt_not_sco 
+2701 6800808a fetch 1 ,mem_current_sniff_attempt 
+2702 c0012706 beq 2 ,check_attempt_sniff_restore_sco 
+2703 68008047 fetch 1 ,mem_arq 
+2704 c281a718 bbit1 wack ,check_attempt_notimeout 
+2705 c5842718 bmark0 mark_esco_rxok ,check_attempt_notimeout 
+
+check_attempt_sniff_restore_sco:
+2706 2434a718 nbranch check_attempt_notimeout ,master 
+2707 68008048 fetch 1 ,mem_lmp_to_send 
+2708 243a2718 nbranch check_attempt_notimeout ,blank 
+
+check_attempt_sco_master:
+2709 680080ef fetch 1 ,mem_sco_poll 
+270a 1fe0ffff increase -1 ,pdata 
+270b 600080ef store 1 ,mem_sco_poll 
+270c 243a26fe nbranch check_attempt_nomore ,blank 
+270d 7000ef10 jam param_sco_poll ,mem_sco_poll 
+270e 20202718 branch check_attempt_notimeout 
+
+check_attempt_not_sco:
+270f 6800808a fetch 1 ,mem_current_sniff_attempt 
+2710 c080a718 bne 1 ,check_attempt_notimeout 
+2711 6800808b fetch 1 ,mem_current_sniff_timeout 
+2712 203a2718 branch check_attempt_notimeout ,blank 
+2713 1fe0ffff increase -1 ,pdata 
+2714 6000808b store 1 ,mem_current_sniff_timeout 
+2715 68008047 fetch 1 ,mem_arq 
+2716 c3818000 rtnbit1 wack 
+2717 24768000 nrtn match 
+
+check_attempt_notimeout:
+2718 6800808a fetch 1 ,mem_current_sniff_attempt 
+2719 1fe0ffff increase -1 ,pdata 
+271a 6000808a store 1 ,mem_current_sniff_attempt 
+271b 20600000 rtn 
+
+sniff_check_window:
+271c 44b7c00d bpatch patch0d_7 ,mem_patch0d 
+271d 78487c00 disable swfine 
+271e 18423600 copy temp ,stop_watch 
+271f 20402260 call context_search_sniff_window 
+2720 78547c00 disable user 
+2721 24628000 nrtn zero 
+2722 18003600 force 0 ,stop_watch 
+2723 78347c00 enable user 
+2724 20600000 rtn 
+
+check_esco_amaddr:
+2725 6800c158 fetch 1 ,mem_esco_addr 
+2726 a881fe00 icompare 0xff ,am_addr 
+2727 20600000 rtn 
+
+parse_l2cap:
+2728 44b8400e bpatch patch0e_0 ,mem_patch0e 
+2729 793f8001 set0 mark_rxbuf_inuse ,mark 
+
+parse_l2cap_cont:
+272a 70026a00 jam l2cap_rx_clear ,mem_l2cap_rx_done 
+272b 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 
+272c 207a0000 rtn blank 
+272d 2feffe00 isolate1 l2cap_inuse_buff1 ,pdata 
+272e d8c01000 arg mem_l2cap_rxbuff1 ,contr 
+272f 2040cd79 call process_rx_l2cap_pkt ,true 
+2730 44b8c00e bpatch patch0e_1 ,mem_patch0e 
+2731 6800826a fetch 1 ,mem_l2cap_rx_done 
+2732 c000a73b beq l2cap_rx_done ,parse_l2cap_release_buff1 
+2733 70026a00 jam l2cap_rx_clear ,mem_l2cap_rx_done 
+2734 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 
+2735 c4008000 rtnbit0 l2cap_inuse_buff2 
+2736 d8c01400 arg mem_l2cap_rxbuff2 ,contr 
+2737 20404d79 call process_rx_l2cap_pkt 
+2738 6800826a fetch 1 ,mem_l2cap_rx_done 
+2739 c000a741 beq l2cap_rx_done ,parse_l2cap_release_buff2 
+273a 20600000 rtn 
+
+parse_l2cap_release_buff1:
+273b 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 
+273c 793ffe00 set0 l2cap_inuse_buff1 ,pdata 
+273d 60008263 store 1 ,mem_l2cap_rxbuff_inuse 
+273e 58000000 setarg 0 
+273f 6001025d store 2 ,mem_l2cap_rxbuff1_len 
+2740 20600000 rtn 
+
+parse_l2cap_release_buff2:
+2741 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 
+2742 793ffe01 set0 l2cap_inuse_buff2 ,pdata 
+2743 60008263 store 1 ,mem_l2cap_rxbuff_inuse 
+2744 58000000 setarg 0 
+2745 6001025f store 2 ,mem_l2cap_rxbuff2_len 
+2746 20600000 rtn 
+
+l2cap_buff1_inuse:
+2747 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 
+2748 79207e00 set1 l2cap_inuse_buff1 ,pdata 
+2749 60008263 store 1 ,mem_l2cap_rxbuff_inuse 
+274a 20600000 rtn 
+
+l2cap_buff2_inuse:
+274b 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse 
+274c 79207e01 set1 l2cap_inuse_buff2 ,pdata 
+274d 60008263 store 1 ,mem_l2cap_rxbuff_inuse 
+274e 20600000 rtn 
+
+slave_send_access:
+274f 44b9400e bpatch patch0e_2 ,mem_patch0e 
+2750 1d00c201 add clke_bt ,1 ,bt_clk 
+2751 204028ea call fetch_extm_bt_adr 
+2752 18004803 force 0x03 ,freq_mode 
+2753 204028d2 call tx_radio_freq 
+2754 20402a51 call start_transmitter 
+2755 20402a5f call start_tx_external 
+2756 20202a64 branch send_access_word 
+
+slave_conn_send_packet:
+2757 44b9c00e bpatch patch0e_3 ,mem_patch0e 
+2758 20402a4d call rf_setup_time_slave_slot 
+2759 1d027e00 deposit clke_bt 
+275a 680a40ca fetcht 4 ,mem_next_btclk 
+275b 98467e00 isub temp ,pdata 
+275c c1808000 rtnne 1 
+275d 28203e00 compare type_null ,type ,0x1f 
+275e 2420a761 nbranch slave_conn_send_access ,true 
+275f 68008019 fetch 1 ,mem_rx_type 
+2760 207a0000 rtn blank 
+
+slave_conn_send_access:
+2761 2040274f call slave_send_access 
+
+transmit_packet:
+2762 28203e10 compare type_id ,type ,0x1f 
+2763 2020a64d branch end_of_packet ,true 
+2764 1c230400 rshift bt_clk ,temp 
+2765 18419c40 or temp ,0x40 ,white_init 
+
+transmit_packet_whitened:
+2766 44ba400e bpatch patch0e_4 ,mem_patch0e 
+2767 7823fc00 enable enable_white 
+2768 78257c00 enable enable_hec 
+2769 782dfc00 enable encode_fec1 
+276a 793f8010 set0 mark_longpacket ,mark 
+276b 18827e00 deposit am_addr 
+276c 08008603 inject mod ,3 
+276d 18227e00 deposit type 
+276e 08008604 inject mod ,4 
+276f 68008047 fetch 1 ,mem_arq 
+2770 08008004 inject bucket ,4 
+2771 08008603 inject mod ,3 
+2772 78247c00 enable enable_parity 
+2773 08008608 inject mod ,8 
+2774 784dfc00 disable encode_fec1 
+2775 78447c00 disable enable_parity 
+2776 78457c00 disable enable_hec 
+2777 793faa02 set0 psk3m ,radio_ctrl 
+2778 d8400000 arg 0 ,temp 
+2779 20402a1c call reserve_slot 
+277a 44bac00e bpatch patch0e_5 ,mem_patch0e 
+277b 18217e1f and type ,0x1f ,pdata 
+277c c009a7b4 beq type_lmp ,transmit_lmp 
+277d c000264d beq type_null ,end_of_packet 
+277e c000a64d beq type_poll ,end_of_packet 
+277f c0012797 beq type_fhs ,transmit_fhs 
+2780 c001a7c5 beq type_dm1 ,transmit_dm1 
+2781 c00227cb beq type_dh1 ,transmit_dh1 
+2782 c003a78c beq type_hv3 ,transmit_hev 
+2783 c00427ca beq type_3dh1 ,transmit_3dh1 
+2784 d8400004 arg 4 ,temp 
+2785 20402a1c call reserve_slot 
+2786 c00527c7 beq type_dm3 ,transmit_dm3 
+2787 c005a7cd beq type_dh3 ,transmit_dh3 
+2788 d8400008 arg 8 ,temp 
+2789 20402a1c call reserve_slot 
+278a c007a7cd beq type_dh5 ,transmit_dh5 
+278b 202027c7 branch transmit_dm5 
+
+transmit_hev:
+278c 44bb400e bpatch patch0e_6 ,mem_patch0e 
+278d 782efc00 enable encode_fec0 
+278e 7824fc00 enable enable_crc 
+278f 78277c00 enable encrypt 
+2790 1800721e force 30 ,loopcnt 
+2791 d8c000b3 arg mem_sco_obuf ,contr 
+
+transmit_ev_loop:
+2792 e8c08000 ifetch 1 ,contr 
+2793 08008608 inject mod ,8 
+2794 c2002792 loop transmit_ev_loop 
+2795 c503a7f7 bmark1 mark_esco ,transmit_end 
+2796 2020264d branch end_of_packet 
+
+transmit_fhs:
+2797 44bbc00e bpatch patch0e_7 ,mem_patch0e 
+2798 68008181 fetch 1 ,mem_fhs_am_addr 
+2799 1fe20800 icopy am_addr 
+279a 68008090 fetch 1 ,mem_fhs_misc 
+279b 1fe23800 icopy fhs_misc 
+279c 6801c0aa fetch 3 ,mem_class 
+279d 1fe23a00 icopy fhs_class 
+279e 680140a4 fetch 2 ,mem_nap 
+279f 1fe25c00 icopy nap 
+27a0 7824fc00 enable enable_crc 
+27a1 782e7c00 enable encode_fec2 
+27a2 1c022200 copy bt_adr ,rega 
+27a3 204028e2 call fetch_self_bt_adr 
+27a4 782afc00 pulse recalc 
+27a5 20000020 nop 32 
+27a6 1c221600 copy bt_clk ,timeup 
+27a7 68020161 fetch 4 ,mem_clkn_bt 
+27a8 1fe24200 icopy bt_clk 
+27a9 53c07e00 preload fhs0 
+27aa 79207e3a set1 58 ,pdata 
+27ab 08008648 inject mod ,72 
+27ac 53e07e00 preload fhs1 
+27ad 08008648 inject mod ,72 
+27ae 19624200 copy timeup ,bt_clk 
+27af 1a224000 copy rega ,bt_adr 
+27b0 78247c00 enable enable_parity 
+27b1 08008610 inject mod ,16 
+27b2 78447c00 disable enable_parity 
+27b3 2020264d branch end_of_packet 
+
+transmit_lmp:
+27b4 44bc400f bpatch patch0f_0 ,mem_patch0f 
+27b5 78277c00 enable encrypt 
+27b6 7824fc00 enable enable_crc 
+27b7 782e7c00 enable encode_fec2 
+27b8 680084b6 fetch 1 ,mem_lmo_header_length 
+27b9 1fe105f8 and pdata ,0x1f8 ,temp 
+27ba d8c004b6 arg mem_lmo_header_length ,contr 
+27bb 18408408 increase 8 ,temp 
+
+transmit_lmp_loop:
+27bc 1840a7b8 add temp ,-72 ,regc 
+27bd 242127c2 nbranch transmit_lmp_finish ,positive 
+27be e8c48000 ifetch 9 ,contr 
+27bf 08008648 inject mod ,72 
+27c0 1a620400 copy regc ,temp 
+27c1 202027bc branch transmit_lmp_loop 
+
+transmit_lmp_finish:
+27c2 e8c48000 ifetch 9 ,contr 
+27c3 08418600 iinject mod ,temp 
+27c4 202027f7 branch transmit_end 
+
+transmit_dm1:
+27c5 782e7c00 enable encode_fec2 
+27c6 202027d0 branch transmit_dmh 
+
+transmit_dm3:
+
+transmit_dm5:
+27c7 782e7c00 enable encode_fec2 
+27c8 79200010 set1 mark_longpacket ,mark 
+27c9 202027d0 branch transmit_dmh 
+
+transmit_3dh1:
+27ca 79202a02 set1 psk3m ,radio_ctrl 
+
+transmit_dh1:
+27cb 782efc00 enable encode_fec0 
+27cc 202027d0 branch transmit_dmh 
+
+transmit_dh3:
+
+transmit_dh5:
+27cd 79202a02 set1 psk3m ,radio_ctrl 
+27ce 782efc00 enable encode_fec0 
+27cf 79200010 set1 mark_longpacket ,mark 
+
+transmit_dmh:
+27d0 44bcc00f bpatch patch0f_1 ,mem_patch0f 
+27d1 6800804c fetch 1 ,mem_state_map 
+27d2 c302a7e5 bbit0 smap_edr ,transmit_noedr 
+27d3 18267c03 sub type ,3 ,null 
+27d4 202127e5 branch transmit_noedr ,positive 
+27d5 78477c00 disable encrypt 
+27d6 784e7c00 disable encode_fec2 
+27d7 782efc00 enable encode_fec0 
+27d8 7843fc00 disable enable_white 
+27d9 79202a01 set1 psk ,radio_ctrl 
+27da 2aaffe02 isolate1 psk3m ,radio_ctrl 
+27db 2020a7df branch transmit_edr3m ,true 
+27dc 580abeee setarg 0xabeee 
+27dd 08008614 inject mod ,20 
+27de 202027e3 branch transmit_edr_sync_end 
+
+transmit_edr3m:
+27df 585faeba setarg 0x5faeba 
+27e0 08008618 inject mod ,24 
+27e1 58000012 setarg 0x12 
+27e2 08008606 inject mod ,6 
+
+transmit_edr_sync_end:
+27e3 7823fc00 enable enable_white 
+27e4 79200010 set1 mark_longpacket ,mark 
+
+transmit_noedr:
+27e5 78277c00 enable encrypt 
+27e6 7824fc00 enable enable_crc 
+27e7 c502a800 bmark1 mark_loopback ,transmit_loopback 
+27e8 6800c1db fetch 1 ,mem_tx_lch 
+27e9 08008603 inject mod ,3 
+27ea 680141dc fetch 2 ,mem_tx_len 
+27eb 98007200 iforce loopcnt 
+27ec c50827ef bmark1 mark_longpacket ,transmit_long 
+27ed 08008605 inject mod ,5 
+27ee 202027f0 branch transmit_stuff 
+
+transmit_long:
+27ef 0800860d inject mod ,13 
+
+transmit_stuff:
+27f0 1f227e00 deposit loopcnt 
+27f1 203a27f7 branch transmit_end ,blank 
+27f2 6801016f fetch 2 ,mem_txptr 
+27f3 98000c00 iforce contr 
+
+transmit_stuff_loop:
+27f4 e8c08000 ifetch 1 ,contr 
+27f5 08008608 inject mod ,8 
+27f6 c20027f4 loop transmit_stuff_loop 
+
+transmit_end:
+27f7 78247c00 enable enable_parity 
+27f8 08008610 inject mod ,16 
+27f9 78447c00 disable enable_parity 
+27fa 204024c1 call set_wait_ack 
+27fb 6800804c fetch 1 ,mem_state_map 
+27fc c302a64d bbit0 smap_edr ,end_of_packet 
+27fd 18007e00 force 0 ,pdata 
+27fe 08008606 inject mod ,6 
+27ff 2020264d branch end_of_packet 
+
+transmit_loopback:
+2800 44bd400f bpatch patch0f_2 ,mem_patch0f 
+2801 c5082808 bmark1 mark_longpacket ,transmit_loopback_long 
+
+transmit_loopback_short:
+2802 68008180 fetch 1 ,mem_lch_code 
+2803 08008603 inject mod ,3 
+2804 6800815f fetch 1 ,mem_len 
+2805 98002600 iforce regc 
+2806 08008605 inject mod ,5 
+2807 2020280d branch transmit_loopback_cont 
+
+transmit_loopback_long:
+2808 68008180 fetch 1 ,mem_lch_code 
+2809 08008603 inject mod ,3 
+280a 6801015f fetch 2 ,mem_len 
+280b 98002600 iforce regc 
+280c 0800860d inject mod ,13 
+
+transmit_loopback_cont:
+280d d8c00551 arg mem_rxbuf ,contr 
+
+transmit_loopback_loop:
+280e 1a627c00 copy regc ,null 
+280f 2022a814 branch transmit_loopback_end ,zero 
+2810 e8c08000 ifetch 1 ,contr 
+2811 08008608 inject mod ,8 
+2812 1a60a7ff increase -1 ,regc 
+2813 2020280e branch transmit_loopback_loop 
+
+transmit_loopback_end:
+2814 680100fc fetch 2 ,mem_tst_pktcnt_dmh 
+2815 1fe0fe01 increase 1 ,pdata 
+2816 600100fc store 2 ,mem_tst_pktcnt_dmh 
+2817 202027f7 branch transmit_end 
+
+apply_switch_clke:
+2818 68020165 fetch 4 ,mem_clke_bt 
+2819 1fe0a207 add pdata ,7 ,rega 
+281a 68010171 fetch 2 ,mem_slot_offset 
+281b 243a281e nbranch apply_switch_nozero ,blank 
+281c 1a20a3fd increase -3 ,rega 
+281d 20202826 branch apply_switch_wait_loop 
+
+apply_switch_nozero:
+281e 1feffe0c mul32 pdata ,12 ,pdata 
+281f 68190040 hfetcht 2 ,core_halfslot 
+2820 18408401 increase 1 ,temp 
+
+apply_switch_loop:
+2821 98467e00 isub temp ,pdata 
+2822 24212825 nbranch apply_switch_bt ,positive 
+2823 1a20a3ff increase -1 ,rega 
+2824 20202821 branch apply_switch_loop 
+
+apply_switch_bt:
+2825 1fe67e00 sub pdata ,0 ,pdata 
+
+apply_switch_wait_loop:
+2826 37d18200 until null ,oneslot 
+2827 2c400600 compare 0 ,clkn_bt ,3 
+2828 2420a826 nbranch apply_switch_wait_loop ,true 
+2829 98005200 iforce clke_rt 
+282a 1a225000 copy rega ,clke_bt 
+282b 98005200 iforce clke_rt 
+282c 20600000 rtn 
+
+calc_slot_offset:
+282d 44bdc00f bpatch patch0f_3 ,mem_patch0f 
+282e 37d10200 until null ,halfslot 
+282f 1b427e00 deposit clke 
+2830 98000c00 iforce contr 
+2831 1ff17e00 rshift16 ,pdata ,pdata 
+2832 9c467200 isub clkn_bt ,loopcnt 
+2833 1f217203 and_into 3 ,loopcnt 
+2834 2422a837 nbranch calc_bt_portion ,zero 
+2835 18007e00 force 0 ,pdata 
+2836 2020283b branch calc_skip_bt 
+
+calc_bt_portion:
+2837 d8400ea6 arg 3750 ,temp 
+2838 18007e00 force 0 ,pdata 
+
+calc_slot_offset_loop:
+2839 9840fe00 iadd temp ,pdata 
+283a c2002839 loop calc_slot_offset_loop 
+
+calc_skip_bt:
+283b 98c0fe00 iadd contr ,pdata 
+283c 1fe6fc0c div pdata ,12 
+283d 20407f86 call wait_div_end 
+283e 1807fe00 quotient pdata 
+283f 60010171 store 2 ,mem_slot_offset 
+2840 20600000 rtn 
+
+calc_clke_offset:
+2841 44be400f bpatch patch0f_4 ,mem_patch0f 
+2842 1b427e00 deposit clke 
+2843 1b220400 copy clkn ,temp 
+2844 98467c00 isub temp ,null 
+2845 7d217e2c nsetflag positive ,44 ,pdata 
+2846 98460400 isub temp ,temp 
+2847 58000ea6 setarg 3750 
+2848 284c000f isolate0 15 ,temp 
+2849 2020a84c branch calc_clke_pos ,true 
+284a 5fff0ea6 setarg -61786 
+284b 98408400 iadd temp ,temp 
+
+calc_clke_pos:
+284c 600b0447 storet 6 ,mem_le_clk_offset 
+284d 207b0000 rtn le 
+284e 600b0038 storet 6 ,mem_clk_offset 
+284f 20600000 rtn 
+
+calc_clke:
+2850 78587c00 disable clknt 
+2851 68030447 fetch 6 ,mem_le_clk_offset 
+2852 203b2854 branch calc_clke2 ,le 
+2853 68030038 fetch 6 ,mem_clk_offset 
+
+calc_clke2:
+2854 9b20e000 iadd clkn ,alarm 
+2855 1e00e00a increase 10 ,alarm 
+2856 58000ea6 setarg 3750 
+2857 9e067e00 isub alarm ,pdata 
+2858 2fec000f isolate0 15 ,pdata 
+2859 2020a85e branch calc_clke_pos_adj ,true 
+285a 5800f15a setarg 0xf15a 
+285b 9e00e000 iadd alarm ,alarm 
+
+calc_clke_pos2:
+285c 1e023400 copy alarm ,clke 
+285d 20600000 rtn 
+
+calc_clke_pos_adj:
+285e 18007c00 force 0 ,null 
+285f 2020285c branch calc_clke_pos2 
+
+calc_radio_freq:
+2860 44bec00f bpatch patch0f_5 ,mem_patch0f 
+2861 20402918 call set_sync_on 
+2862 1c227e00 copy bt_clk ,pdata 
+2863 1fe17f80 and_into 0x180 ,pdata 
+2864 2c800e03 compare 3 ,freq_mode ,0x07 
+2865 2420a869 nbranch freq_not_connection ,true 
+2866 1fe97e00 rshift3 pdata ,pdata 
+2867 9ae0fe00 iadd freq_index ,pdata 
+2868 2020286a branch do_hop_mod_now 
+
+freq_not_connection:
+2869 1ae27e00 copy freq_index ,pdata 
+
+do_hop_mod_now:
+286a 1fe6fc4f div pdata ,79 
+286b 782afc00 pulse recalc 
+286c 20407f86 call wait_div_end 
+286d 18072200 remainder rega 
+286e 1a2085d8 add rega ,-40 ,temp 
+286f 20212872 branch odd_half ,positive 
+2870 1a238400 lshift rega ,temp 
+2871 20202874 branch freq_result 
+
+odd_half:
+2872 18438400 lshift temp ,temp 
+2873 18408401 increase 1 ,temp 
+
+freq_result:
+2874 44bf400f bpatch patch0f_6 ,mem_patch0f 
+2875 68008031 fetch 1 ,mem_mode 
+2876 c301a885 bbit0 afh_change ,afh_process_con 
+
+afh_process_0:
+2877 680240d2 fetch 4 ,mem_afh_instant 
+2878 9c267c00 isub bt_clk ,null 
+2879 20212885 branch afh_process_con ,positive 
+287a 204028a4 call afh_clear 
+287b 6800c0d9 fetch 1 ,mem_afh_new_mod 
+287c 207a0000 rtn blank 
+287d 68008031 fetch 1 ,mem_mode 
+287e 79207e02 set1 afh_enable ,pdata 
+287f 60008031 store 1 ,mem_mode 
+2880 6802c0e7 fetch 5 ,mem_afh_map_new 
+2881 6002c0da store 5 ,mem_afh_map_lo 
+2882 e8c28000 ifetch 5 ,contr 
+2883 6002c0df store 5 ,mem_afh_map_hi 
+2884 204028a9 call afh_process_freq_map 
+
+afh_process_con:
+2885 68008031 fetch 1 ,mem_mode 
+2886 c4010000 rtnbit0 afh_enable 
+2887 2c2ffe01 isolate1 1 ,bt_clk 
+2888 2020a8a1 branch afh_same_channel ,true 
+2889 18492200 rshift3 temp ,rega 
+288a 18410e07 and temp ,7 ,queue 
+288b 580040da setarg mem_afh_map_lo 
+288c 9a20a200 iadd rega ,rega 
+288d ea208000 ifetch 1 ,rega 
+288e afec0000 qisolate0 pdata 
+288f 2020a892 branch afh_process_1 ,true 
+2890 18427e00 deposit temp 
+2891 2020289e branch afh_process_end 
+
+afh_process_1:
+2892 6800c0e4 fetch 1 ,mem_afh_used 
+2893 98002400 iforce regb 
+2894 1c227e00 deposit bt_clk 
+2895 1fe17f80 and_into 0x180 ,pdata 
+2896 1fe97e00 rshift3 pdata ,pdata 
+2897 9ae0fe00 iadd freq_index ,pdata 
+2898 9a46fc00 idiv regb 
+2899 580040f2 setarg mem_afh_map 
+289a 20407f86 call wait_div_end 
+289b 18072200 remainder rega 
+289c 9a208c00 iadd rega ,contr 
+289d e8c08000 ifetch 1 ,contr 
+
+afh_process_end:
+289e 6000c0e5 store 1 ,mem_afh_index 
+289f 98000400 iforce temp 
+28a0 20600000 rtn 
+
+afh_same_channel:
+28a1 6800c0e5 fetch 1 ,mem_afh_index 
+28a2 98000400 iforce temp 
+28a3 20600000 rtn 
+
+afh_clear:
+28a4 68008031 fetch 1 ,mem_mode 
+28a5 793ffe02 set0 afh_enable ,pdata 
+28a6 793ffe03 set0 afh_change ,pdata 
+28a7 60008031 store 1 ,mem_mode 
+28a8 20600000 rtn 
+
+afh_process_freq_map:
+28a9 44bfc00f bpatch patch0f_7 ,mem_patch0f 
+28aa d8a040f2 arg mem_afh_map ,contw 
+28ab 1800720a force 10 ,loopcnt 
+28ac 20407ec6 call memset0 
+28ad d8a040f2 arg mem_afh_map ,contw 
+28ae 18002600 force 0 ,regc 
+28af 18000e02 force 2 ,queue 
+
+process_freq_3:
+28b0 6802c0da fetch 5 ,mem_afh_map_lo 
+28b1 98000400 iforce temp 
+28b2 28e1fe02 compare 2 ,queue ,0xff 
+28b3 2020a8b5 branch process_freq_1 ,true 
+28b4 18430400 rshift temp ,temp 
+
+process_freq_1:
+28b5 284c0000 isolate0 0 ,temp 
+28b6 2020a8b9 branch process_freq_0 ,true 
+28b7 1a627e00 deposit regc 
+28b8 e0a08000 istore 1 ,contw 
+
+process_freq_0:
+28b9 184b0400 rshift2 temp ,temp 
+28ba 1a60a602 increase 2 ,regc 
+28bb 2a61fc28 compare 40 ,regc ,0xfe 
+28bc 2420a8c2 nbranch process_freq_2 ,true 
+28bd 6802c0df fetch 5 ,mem_afh_map_hi 
+28be 98000400 iforce temp 
+28bf 28e1fe02 compare 2 ,queue ,0xff 
+28c0 2020a8c2 branch process_freq_2 ,true 
+28c1 18430400 rshift temp ,temp 
+
+process_freq_2:
+28c2 1a667c4e sub regc ,78 ,null 
+28c3 202128b5 branch process_freq_1 ,positive 
+28c4 18002601 force 1 ,regc 
+28c5 18e08fff increase -1 ,queue 
+28c6 2422a8b0 nbranch process_freq_3 ,zero 
+28c7 da2040f2 arg mem_afh_map ,rega 
+28c8 18a27e00 deposit contw 
+28c9 9a267e00 isub rega ,pdata 
+28ca 6000c0e4 store 1 ,mem_afh_used 
+28cb 20600000 rtn 
+
+rx_radio_freq:
+28cc 44c04010 bpatch patch10_0 ,mem_patch10 
+28cd 20402860 call calc_radio_freq 
+28ce 6800817f fetch 1 ,mem_debug_config 
+28cf c302a8d1 bbit0 debug_rx_fixed_freq ,rx_radio_freq_now 
+28d0 680884cc fetcht 1 ,mem_rx_fixed_freq 
+
+rx_radio_freq_now:
+28d1 2020291f branch set_freq_rx 
+
+tx_radio_freq:
+28d2 44c0c010 bpatch patch10_1 ,mem_patch10 
+28d3 20402860 call calc_radio_freq 
+28d4 6800817f fetch 1 ,mem_debug_config 
+28d5 c30228d7 bbit0 debug_tx_fixed_freq ,tx_radio_freq_now 
+28d6 680884cb fetcht 1 ,mem_tx_fixed_freq 
+
+tx_radio_freq_now:
+28d7 20202933 branch set_freq_tx 
+
+fetch_giac:
+28d8 18005a00 force 0 ,uap 
+28d9 6801c0a7 fetch 3 ,mem_glap 
+28da 98005800 iforce lap 
+28db 20600000 rtn 
+
+fetch_page_bt_adr:
+28dc 44c14010 bpatch patch10_2 ,mem_patch10 
+28dd 6800c1d3 fetch 1 ,mem_hci_puap 
+28de 1fe25a00 icopy uap 
+28df 6801c1d0 fetch 3 ,mem_hci_plap 
+28e0 1fe25800 icopy lap 
+28e1 20600000 rtn 
+
+fetch_self_bt_adr:
+28e2 44c1c010 bpatch patch10_3 ,mem_patch10 
+28e3 680140a4 fetch 2 ,mem_nap 
+28e4 1fe25c00 icopy nap 
+28e5 6800c0a3 fetch 1 ,mem_uap 
+28e6 1fe25a00 icopy uap 
+28e7 6801c0a0 fetch 3 ,mem_lap 
+28e8 1fe25800 icopy lap 
+28e9 20600000 rtn 
+
+fetch_extm_bt_adr:
+28ea 44c24010 bpatch patch10_4 ,mem_patch10 
+28eb 68010044 fetch 2 ,mem_pnap 
+28ec 1fe25c00 icopy nap 
+28ed 68008043 fetch 1 ,mem_puap 
+28ee 1fe25a00 icopy uap 
+28ef 68018040 fetch 3 ,mem_plap 
+28f0 1fe25800 icopy lap 
+28f1 20600000 rtn 
+
+fetch_diac:
+28f2 c51028f5 bmark1 mark_all_diac ,fetch_diac_do 
+28f3 c68e8000 rtnmark0 mark_inquiry_state 
+28f4 c68f8000 rtnmark0 mark_periodical_diac 
+
+fetch_diac_do:
+28f5 1d815900 and_into -256 ,lap 
+28f6 782afc00 pulse recalc 
+28f7 20000020 nop 32 
+28f8 20600000 rtn 
+
+shutdown_radio:
+28f9 44c2c010 bpatch patch10_5 ,mem_patch10 
+28fa 2030a90a branch shutdown_radio0 ,is_rx 
+28fb 708955d4 jam 0xd4 ,rf_tx_pa_ib 
+28fc 20000004 nop 4 
+28fd 708955d2 jam 0xd2 ,rf_tx_pa_ib 
+28fe 20000004 nop 4 
+28ff 708955d1 jam 0xd1 ,rf_tx_pa_ib 
+2900 20000004 nop 4 
+2901 6800c1de fetch 1 ,mem_tx_power 
+2902 c0002908 beq tx_power_0db ,shutdown_radio_0db 
+2903 c000a915 beq tx_power_3db ,shutdown_radio_3db 
+2904 c0012908 beq tx_power_5db ,shutdown_radio_5db 
+2905 c001a915 beq tx_power_f3db ,shutdown_radio_f3db 
+2906 c0022915 beq tx_power_f5db ,shutdown_radio_f5db 
+2907 c0102915 beq tx_power_pair ,shutdown_radio_pair 
+
+shutdown_radio_5db:
+
+shutdown_radio_0db:
+2908 708955d0 jam 0xd0 ,rf_tx_pa_ib 
+2909 708956e0 jam 0xe0 ,rf_tx_pa_gc 
+
+shutdown_radio0:
+290a 18002a00 force 0 ,radio_ctrl 
+290b 7850fc00 disable is_rx 
+290c 78507c00 disable is_tx 
+290d 782f7c00 pulse packet_end 
+290e 70890200 jam 0x0 ,rfen_mdm 
+290f 70890100 jam 0x0 ,rfen_tx 
+2910 70890000 jam 0x0 ,rfen_rx 
+2911 70890300 jam 0 ,rfen_sn 
+2912 70890470 jam 0x70 ,rfen_msc 
+2913 70890600 jam 0x0 ,rfen_adc 
+2914 20600000 rtn 
+
+shutdown_radio_pair:
+
+shutdown_radio_f5db:
+
+shutdown_radio_f3db:
+
+shutdown_radio_3db:
+2915 708955d0 jam 0xd0 ,rf_tx_pa_ib 
+2916 708956c0 jam 0xc0 ,rf_tx_pa_gc 
+2917 2020290a branch shutdown_radio0 
+
+set_sync_on:
+2918 44c34010 bpatch patch10_6 ,mem_patch10 
+2919 70890200 jam 0x0 ,rfen_mdm 
+291a 70890100 jam 0x0 ,rfen_tx 
+291b 70890018 jam 0x18 ,rfen_rx 
+291c 708903a7 jam 0xa7 ,rfen_sn 
+291d 7089047f jam 0x7f ,rfen_msc 
+291e 20600000 rtn 
+
+set_freq_rx:
+291f 44c3c010 bpatch patch10_7 ,mem_patch10 
+2920 60088017 storet 1 ,mem_last_freq 
+2921 1840a204 add temp ,rx_freq_offset ,rega 
+2922 70896d07 jam 0x07 ,rf_balun_ctrim 
+2923 20202981 branch rf_write_freq 
+
+rf_rx_enable:
+2924 44c44011 bpatch patch11_0 ,mem_patch11 
+2925 708901cf jam 0xcf ,rfen_tx 
+2926 2000000a nop 10 
+2927 708900ff jam 0xff ,rfen_rx 
+2928 708903af jam 0xaf ,rfen_sn 
+2929 708904ff jam 0xff ,rfen_msc 
+292a 2000000a nop 10 
+292b 708902a0 jam 0xa0 ,rfen_mdm 
+292c 20600000 rtn 
+
+set_freq_tx_offset:
+292d 6800c1e0 fetch 1 ,mem_250k_freq_enable 
+292e 203a2931 branch set_freq_tx_2m_offset ,blank 
+
+set_freq_tx_0m_offset:
+292f 1840a202 add temp ,2 ,rega 
+2930 20600000 rtn 
+
+set_freq_tx_2m_offset:
+2931 1840a200 add temp ,0 ,rega 
+2932 20600000 rtn 
+
+set_freq_tx:
+2933 44c4c011 bpatch patch11_1 ,mem_patch11 
+2934 60088017 storet 1 ,mem_last_freq 
+2935 2040292d call set_freq_tx_offset 
+2936 20402981 call rf_write_freq 
+2937 58000500 setarg param_pll_setup 
+2938 20402a8f call sleep 
+
+txon:
+2939 70890601 jam 0x1 ,rfen_adc 
+293a 7089003c jam 0x3c ,rfen_rx 
+293b 708901e0 jam 0xe0 ,rfen_tx 
+293c 70896d12 jam 0x12 ,rf_balun_ctrim 
+293d 2000000a nop 10 
+293e 70890201 jam 0x01 ,rfen_mdm 
+293f 7089023d jam 0x3d ,rfen_mdm 
+2940 2000000a nop 10 
+2941 708903b7 jam 0xb7 ,rfen_sn 
+2942 2000000a nop 10 
+2943 7089027f jam 0x7f ,rfen_mdm 
+
+txon_power_select:
+2944 6800c1de fetch 1 ,mem_tx_power 
+2945 c000294b beq tx_power_0db ,set_tx_power_0db 
+2946 c000a94f beq tx_power_3db ,set_tx_power_3db 
+2947 c0012953 beq tx_power_5db ,set_tx_power_5db 
+2948 c001a957 beq tx_power_f3db ,set_tx_power_f3db 
+2949 c002295b beq tx_power_f5db ,set_tx_power_f5db 
+294a c010295f beq tx_power_pair ,set_tx_power_pair 
+
+set_tx_power_0db:
+294b 708956f0 jam 0xf0 ,rf_tx_pa_gc 
+294c 20402965 call txon_common 
+294d 708955d8 jam 0xd8 ,rf_tx_pa_ib 
+294e 20600000 rtn 
+
+set_tx_power_3db:
+294f 708956df jam 0xdf ,rf_tx_pa_gc 
+2950 20402965 call txon_common 
+2951 708955df jam 0xdf ,rf_tx_pa_ib 
+2952 20600000 rtn 
+
+set_tx_power_5db:
+2953 708956ff jam 0xff ,rf_tx_pa_gc 
+2954 20402965 call txon_common 
+2955 708955df jam 0xdf ,rf_tx_pa_ib 
+2956 20600000 rtn 
+
+set_tx_power_f3db:
+2957 708956ce jam 0xce ,rf_tx_pa_gc 
+2958 20402965 call txon_common 
+2959 708955d8 jam 0xd8 ,rf_tx_pa_ib 
+295a 20600000 rtn 
+
+set_tx_power_f5db:
+295b 708956cb jam 0xcb ,rf_tx_pa_gc 
+295c 20402965 call txon_common 
+295d 708955d8 jam 0xd8 ,rf_tx_pa_ib 
+295e 20600000 rtn 
+
+set_tx_power_pair:
+295f 708955d0 jam 0xd0 ,rf_tx_pa_ib 
+2960 708956c0 jam 0xc0 ,rf_tx_pa_gc 
+2961 7089574c jam 0x4c ,0x8957 
+2962 7089586c jam 0x6c ,0x8958 
+2963 70895950 jam 0x50 ,0x8959 
+2964 20600000 rtn 
+
+txon_common:
+2965 20000004 nop 4 
+2966 708955d1 jam 0xd1 ,rf_tx_pa_ib 
+2967 20000004 nop 4 
+2968 708955d2 jam 0xd2 ,rf_tx_pa_ib 
+2969 20000004 nop 4 
+296a 708955d4 jam 0xd4 ,rf_tx_pa_ib 
+296b 20600000 rtn 
+
+initialize_radio:
+296c 70804206 jam clksel_rc ,core_clksel 
+
+initialize_radio_wait:
+296d 680140c3 fetch 2 ,mem_rf_init_ptr 
+296e c307296d bbit0 14 ,initialize_radio_wait 
+296f 98000c00 iforce contr 
+2970 d8408900 arg 0x8900 ,temp 
+
+initialize_radio_loop:
+2971 e8c08000 ifetch 1 ,contr 
+2972 c07fa977 beq 0xff ,initialize_radio_cont 
+2973 98418a00 ior temp ,contw 
+2974 e8c08000 ifetch 1 ,contr 
+2975 e0a08000 istore 1 ,contw 
+2976 20202971 branch initialize_radio_loop 
+
+initialize_radio_cont:
+2977 44c54011 bpatch patch11_2 ,mem_patch11 
+2978 20402be5 call lpm_cal_xtal_startup 
+2979 204029c9 call switchto_dpllclk 
+297a 580007d0 setarg param_dpll_start_delay 
+297b 9c40fe00 iadd clkn_bt ,pdata 
+297c 60020169 store 4 ,mem_dpll_clkn 
+297d 79202a03 set1 reset ,radio_ctrl 
+297e 18002a00 force 0 ,radio_ctrl 
+297f 2455a998 ncall do_rccal ,wake 
+2980 202029ab branch set_rccal 
+
+rf_write_freq:
+2981 44c5c011 bpatch patch11_3 ,mem_patch11 
+2982 58000960 setarg 2400 
+2983 9a208400 iadd rega ,temp 
+2984 6800c0bd fetch 1 ,mem_fcomp_mul 
+2985 70895f04 jam 0x04 ,rf_pll_rstn 
+2986 984ffe00 imul32 temp ,pdata 
+2987 6808c0be fetcht 1 ,mem_fcomp_div 
+2988 9846fc00 idiv temp 
+2989 20407f86 call wait_div_end 
+298a 1807a200 quotient rega 
+298b 18077e00 remainder pdata 
+298c 1ff07e00 lshift16 pdata ,pdata 
+298d 1ff27e00 lshift4 pdata ,pdata 
+298e 9846fc00 idiv temp 
+298f 20407f86 call wait_div_end 
+2990 1807fe00 quotient pdata 
+2991 1fed7e00 lshift8 pdata ,pdata 
+2992 1fe3fe00 lshift pdata ,pdata 
+2993 9a21fe00 ior rega ,pdata 
+2994 60120960 hstore 4 ,rf_pll_intg 
+2995 70895f44 jam 0x44 ,rf_pll_rstn 
+2996 70895fc4 jam 0xc4 ,rf_pll_rstn 
+2997 20600000 rtn 
+
+do_rccal:
+2998 44c64011 bpatch patch11_4 ,mem_patch11 
+2999 70890602 jam 0x02 ,rfen_adc 
+299a 5803d090 setarg 250000 
+299b 20402a8f call sleep 
+299c 7089007f jam 0x7f ,rfen_rx 
+299d 20000082 nop 130 
+299e 70895230 jam 0x30 ,rf_rccal_ctrl 
+299f 708901d0 jam 0xd0 ,rfen_tx 
+29a0 70895270 jam 0x70 ,rf_rccal_ctrl 
+29a1 708952f0 jam 0xf0 ,rf_rccal_ctrl 
+29a2 18007232 force 50 ,loopcnt 
+
+do_rccal_loop:
+29a3 68108980 hfetch 1 ,rf_rccal_result 
+29a4 c282a9a6 bbit1 5 ,do_rccal_end 
+29a5 c20029a3 loop do_rccal_loop 
+
+do_rccal_end:
+29a6 6000c0ce store 1 ,mem_rf_rccal 
+29a7 70890100 jam 0 ,rfen_tx 
+29a8 70890000 jam 0 ,rfen_rx 
+29a9 70890600 jam 0x00 ,rfen_adc 
+29aa 20600000 rtn 
+
+set_rccal:
+29ab 44c6c011 bpatch patch11_5 ,mem_patch11 
+29ac 6800c0ce fetch 1 ,mem_rf_rccal 
+29ad 79207e05 set1 5 ,pdata 
+29ae 60108952 hstore 1 ,rf_rccal_ctrl 
+29af 68188950 hfetcht 1 ,rf_bpf_ctrim 
+29b0 18410407 and_into 7 ,temp 
+29b1 1fe9fe00 lshift3 pdata ,pdata 
+29b2 9841fe00 ior temp ,pdata 
+29b3 60108950 hstore 1 ,rf_bpf_ctrim 
+29b4 68108951 hfetch 1 ,rf_bpf_ib 
+29b5 793ffe00 set0 bpf_rccal ,pdata 
+29b6 60108951 hstore 1 ,rf_bpf_ib 
+29b7 68108952 hfetch 1 ,rf_adc_rccal 
+29b8 793ffe05 set0 adc_rccal ,pdata 
+29b9 60108952 hstore 1 ,rf_adc_rccal 
+29ba 20600000 rtn 
+
+save_rssi:
+29bb 44c74011 bpatch patch11_6 ,mem_patch11 
+29bc 68110981 hfetch 2 ,rf_afc_d2a 
+29bd 1ff1fe00 rshift4 pdata ,pdata 
+29be 1fe97e00 rshift3 pdata ,pdata 
+29bf 1fe67e00 sub pdata ,0 ,pdata 
+
+bcd:
+29c0 1fe17eff and_into 0xff ,pdata 
+29c1 1fe6fc0a div pdata ,10 
+29c2 20407f86 call wait_div_end 
+29c3 1807fe00 quotient pdata 
+29c4 1ff27e00 lshift4 pdata ,pdata 
+29c5 18070400 remainder temp 
+29c6 9841fe00 ior temp ,pdata 
+29c7 60008018 store 1 ,mem_rssi 
+29c8 20600000 rtn 
+
+switchto_dpllclk:
+29c9 70804206 jam clksel_rc ,core_clksel 
+29ca 6810896b hfetch 1 ,rf_clkpll_frac + 2 
+29cb 793ffe04 set0 4 ,pdata 
+29cc 793ffe05 set0 5 ,pdata 
+29cd 6010896b hstore 1 ,rf_clkpll_frac + 2 
+29ce 70890500 jam 0x00 ,rfen_ck 
+29cf 70890400 jam 0x00 ,rfen_msc 
+29d0 70890470 jam 0x70 ,rfen_msc 
+29d1 708905ff jam 0xff ,rfen_ck 
+29d2 6810896b hfetch 1 ,rf_clkpll_frac + 2 
+29d3 79207e04 set1 4 ,pdata 
+29d4 79207e05 set1 5 ,pdata 
+29d5 6010896b hstore 1 ,rf_clkpll_frac + 2 
+29d6 204029e9 call init_lpm_ctrl 
+29d7 68108968 hfetch 1 ,rf_clkpll_int 
+29d8 79207e07 set1 7 ,pdata 
+29d9 60108968 hstore 1 ,rf_clkpll_int 
+29da 793ffe07 set0 7 ,pdata 
+29db 60108968 hstore 1 ,rf_clkpll_int 
+29dc 79207e07 set1 7 ,pdata 
+29dd 60108968 hstore 1 ,rf_clkpll_int 
+29de 70804205 jam clksel_dpll ,core_clksel 
+29df 20000001 nop 1 
+29e0 70804204 jam clksel_xtal ,core_clksel 
+29e1 6810896b hfetch 1 ,rf_clkpll_frac + 2 
+29e2 1fe17ecf and_into 0xcf ,pdata 
+29e3 6010896b hstore 1 ,rf_clkpll_frac + 2 
+29e4 1fe1fe30 or_into 0x30 ,pdata 
+29e5 6010896b hstore 1 ,rf_clkpll_frac + 2 
+29e6 20600000 rtn 
+
+xtal_fast_wake:
+29e7 58000f0f setarg 0xf0f 
+29e8 20202c18 branch lpm_write_config 
+
+init_lpm_ctrl:
+29e9 5800080f setarg 0x80f 
+29ea 20202c18 branch lpm_write_config 
+
+start_receiver:
+29eb 44c7c011 bpatch patch11_7 ,mem_patch11 
+29ec 20402924 call rf_rx_enable 
+29ed 78507c00 disable is_tx 
+29ee 7830fc00 enable is_rx 
+29ef 782b7c00 pulse init_encrypt 
+29f0 20600000 rtn 
+
+prep_crypt:
+29f1 44c84012 bpatch patch12_0 ,mem_patch12 
+29f2 6800804c fetch 1 ,mem_state_map 
+29f3 2feffe02 isolate1 smap_encryption ,pdata 
+29f4 7920fe00 setflag true ,0 ,pdata 
+29f5 60108011 hstore 1 ,core_encrypt 
+29f6 d8c00062 arg mem_kc ,contr 
+29f7 e8c48000 ifetch 9 ,contr 
+29f8 98006400 iforce kc_ls 
+29f9 e8c38000 ifetch 7 ,contr 
+29fa 98006600 iforce kc_ms 
+29fb 68008054 fetch 1 ,mem_key_size 
+29fc 1fe0e9ff add pdata ,-1 ,g1l 
+29fd 782d7c00 pulse kc_p_activate 
+29fe 20600000 rtn 
+
+wait_access_end:
+29ff 1b427e00 deposit clke 
+2a00 6003009a store 6 ,mem_sync_clke 
+2a01 7846fc00 disable decode_fec0 
+2a02 242c28f9 nbranch shutdown_radio ,sync 
+2a03 dd2003bb arg param_clke_cal ,clke_rt 
+2a04 1d00d001 increase 1 ,clke_bt 
+2a05 1d0151fc and_into 0x1fc ,clke_bt 
+2a06 20600000 rtn 
+
+wait_access_mhalfbnd:
+2a07 7826fc00 enable decode_fec0 
+
+wait_access_mhalfbnd_correlate:
+2a08 37cb8400 correlate null ,mhalfbnd 
+2a09 202c29ff branch wait_access_end ,sync 
+2a0a 2d000402 compare 0x02 ,clke_bt ,0x02 
+2a0b 2420aa08 nbranch wait_access_mhalfbnd_correlate ,true 
+2a0c 202029ff branch wait_access_end 
+
+wait_access_clkn_rt:
+2a0d 44c8c012 bpatch patch12_1 ,mem_patch12 
+2a0e d9600600 arg param_conn_access ,timeup 
+2a0f 7826fc00 enable decode_fec0 
+2a10 34730400 correlate clkn_rt ,meet 
+2a11 7846fc00 disable decode_fec0 
+2a12 242c28f9 nbranch shutdown_radio ,sync 
+2a13 20600000 rtn 
+
+wait_access_forever:
+2a14 44c94012 bpatch patch12_2 ,mem_patch12 
+2a15 7826fc00 enable decode_fec0 
+2a16 37c18400 correlate null ,timeout 
+2a17 7846fc00 disable decode_fec0 
+2a18 242c28f9 nbranch shutdown_radio ,sync 
+2a19 dd2003bb arg param_clke_cal ,clke_rt 
+2a1a 1d0151fc and_into 0x1fc ,clke_bt 
+2a1b 20600000 rtn 
+
+reserve_slot:
+2a1c 44c9c012 bpatch patch12_3 ,mem_patch12 
+2a1d 98002200 iforce rega 
+2a1e 1c227e00 deposit bt_clk 
+2a1f 98409600 iadd temp ,timeup 
+2a20 19627e00 copy timeup ,pdata 
+2a21 600240ca store 4 ,mem_next_btclk 
+2a22 1a227e00 deposit rega 
+2a23 20600000 rtn 
+
+ahead_window:
+2a24 1fe20400 copy pdata ,temp 
+2a25 44ca4012 bpatch patch12_4 ,mem_patch12 
+2a26 18427e00 copy temp ,pdata 
+2a27 20407f50 call clk2bt 
+2a28 1c307e00 lshift16 bt_clk ,pdata 
+2a29 79207e2c set1 44 ,pdata 
+2a2a 20407f39 call clk_diff 
+2a2b 793ffe2c set0 44 ,pdata 
+2a2c 20402a77 call get_clk 
+2a2d 20407f39 call clk_diff 
+2a2e 20740000 rtn user 
+2a2f 20407f43 call clk2rt 
+2a30 98003600 iforce stop_watch 
+2a31 37c18200 until null ,timeout 
+2a32 20600000 rtn 
+
+setup_clk:
+2a33 44cac012 bpatch patch12_5 ,mem_patch12 
+2a34 20382a38 branch setup_clkn ,clknt 
+2a35 35330200 until clke_rt ,meet 
+
+skip_setup_clke:
+2a36 1d020400 copy clke_bt ,temp 
+2a37 20202a3b branch setup_clknbt 
+
+setup_clkn:
+2a38 20372a3a branch skip_setup_clkn ,attempt 
+2a39 34730200 until clkn_rt ,meet 
+
+skip_setup_clkn:
+2a3a 1c420400 copy clkn_bt ,temp 
+
+setup_clknbt:
+2a3b 20342a47 branch setup_clk11 ,user 
+2a3c 28400601 compare 1 ,temp ,3 
+2a3d 2420aa33 nbranch setup_clk ,true 
+
+setup_complete:
+2a3e 44cb4012 bpatch patch12_6 ,mem_patch12 
+2a3f 68008030 fetch 1 ,mem_state 
+2a40 c4000000 rtnbit0 state_inconn 
+2a41 680240ca fetch 4 ,mem_next_btclk 
+2a42 98467e00 isub temp ,pdata 
+2a43 24610000 nrtn positive 
+2a44 1fe67cff sub pdata ,0xff ,null 
+2a45 20212a33 branch setup_clk ,positive 
+2a46 20600000 rtn 
+
+setup_clk11:
+2a47 28400603 compare 3 ,temp ,3 
+2a48 2420aa33 nbranch setup_clk ,true 
+2a49 20202a3e branch setup_complete 
+
+rf_setup_time:
+2a4a 44cbc012 bpatch patch12_7 ,mem_patch12 
+2a4b d9600600 arg param_rf_setup ,timeup 
+2a4c 20202a33 branch setup_clk 
+
+rf_setup_time_slave_slot:
+2a4d 78547c00 disable user 
+2a4e 20202a4a branch rf_setup_time 
+
+rf_setup_time_master_slot:
+2a4f 78347c00 enable user 
+2a50 20202a4a branch rf_setup_time 
+
+start_transmitter:
+2a51 44cc4013 bpatch patch13_0 ,mem_patch13 
+2a52 204029f1 call prep_crypt 
+2a53 7850fc00 disable is_rx 
+2a54 78307c00 enable is_tx 
+2a55 20600000 rtn 
+
+start_tx_native:
+2a56 44ccc013 bpatch patch13_1 ,mem_patch13 
+2a57 d9600e43 arg param_tx_setup ,timeup 
+2a58 34730200 until clkn_rt ,meet 
+2a59 782b7c00 pulse init_encrypt 
+2a5a 20600000 rtn 
+
+start_rx_native:
+2a5b 44cd4013 bpatch patch13_2 ,mem_patch13 
+2a5c d9600d00 arg param_rx_setup ,timeup 
+2a5d 34730200 until clkn_rt ,meet 
+2a5e 20600000 rtn 
+
+start_tx_external:
+2a5f 44cdc013 bpatch patch13_3 ,mem_patch13 
+2a60 d9600e43 arg param_tx_setup ,timeup 
+2a61 35330200 until clke_rt ,meet 
+2a62 782b7c00 pulse init_encrypt 
+2a63 20600000 rtn 
+
+send_access_word:
+2a64 44ce4013 bpatch patch13_4 ,mem_patch13 
+2a65 51207e00 preload access 
+2a66 782efc00 enable encode_fec0 
+2a67 79202a00 set1 txgfsk ,radio_ctrl 
+2a68 08008648 inject mod ,72 
+2a69 784efc00 disable encode_fec0 
+2a6a 20600000 rtn 
+
+scan_mode_whiten:
+2a6b 1ca20400 copy xin ,temp 
+2a6c 18418460 or_into 0x60 ,temp 
+2a6d 18421c00 copy temp ,white_init 
+2a6e 20600000 rtn 
+
+get_free_amaddr:
+2a6f 44cec013 bpatch patch13_5 ,mem_patch13 
+2a70 6800c090 fetch 1 ,mem_current_amaddr 
+2a71 1fe0fe01 increase 1 ,pdata 
+2a72 c083aa74 bne param_esco_addr ,get_free_amaddr_cont 
+2a73 18007e01 force 1 ,pdata 
+
+get_free_amaddr_cont:
+2a74 6000c090 store 1 ,mem_current_amaddr 
+2a75 98000800 iforce am_addr 
+2a76 20600000 rtn 
+
+get_clk:
+2a77 1b220400 copy clkn ,temp 
+2a78 20748000 rtn master 
+2a79 1b420400 copy clke ,temp 
+2a7a 20600000 rtn 
+
+get_clkbt:
+2a7b 1c427e00 deposit clkn_bt 
+2a7c 20748000 rtn master 
+2a7d 1d027e00 deposit clke_bt 
+2a7e 20600000 rtn 
+
+supervision_update:
+2a7f 44cf4013 bpatch patch13_6 ,mem_patch13 
+2a80 680a004d fetcht 4 ,mem_supervision_timer 
+2a81 20402a7b call get_clkbt 
+2a82 98461600 isub temp ,timeup 
+2a83 19627e00 deposit timeup 
+2a84 68090051 fetcht 2 ,mem_supervision_to 
+2a85 18438400 lshift temp ,temp 
+2a86 98467e00 isub temp ,pdata 
+2a87 20600000 rtn 
+
+supervision_flush:
+2a88 44cfc013 bpatch patch13_7 ,mem_patch13 
+2a89 20402a7b call get_clkbt 
+2a8a 6002004d store 4 ,mem_supervision_timer 
+2a8b 20600000 rtn 
+
+assert:
+2a8c 44d04014 bpatch patch14_0 ,mem_patch14 
+2a8d 20202a8c branch assert 
+
+loop:
+2a8e 20202a8e branch loop 
+
+sleep:
+2a8f 207a0000 rtn blank 
+2a90 1fe37e00 rshift pdata ,pdata 
+2a91 1fe0fffd increase -3 ,pdata 
+
+sleep_loop:
+2a92 1fe0ffff increase -1 ,pdata 
+2a93 2422aa92 nbranch sleep_loop ,zero 
+2a94 18007e00 force 0 ,pdata 
+2a95 20600000 rtn 
+
+init_param:
+2a96 df200010 arg 0x10 ,loopcnt 
+2a97 d8a00000 arg 0 ,contw 
+2a98 20407ec6 call memset0 
+2a99 d8a0043f arg mem_le_state ,contw 
+2a9a df20000a arg 10 ,loopcnt 
+2a9b 20407ec6 call memset0 
+2a9c 7009b200 jam 0 ,mem_sp_calc 
+2a9d 700a9900 jam 0 ,mem_fifo_temp 
+2a9e 70048c00 jam 0 ,mem_le_testtype 
+2a9f 70017f00 jam 0 ,mem_debug_config 
+2aa0 7004d100 jam 0 ,mem_lmp_conn_state 
+2aa1 44d0c014 bpatch patch14_1 ,mem_patch14 
+2aa2 70016d00 jam 0 ,mem_connection_options 
+2aa3 70015100 jam 0 ,mem_tester_emulate 
+2aa4 70015c00 jam 0 ,mem_tester_cnt 
+2aa5 589e8b33 setarg param_glap 
+2aa6 6001c0a7 store 3 ,mem_glap 
+2aa7 58000153 setarg param_acl_pktlen 
+2aa8 60010083 store 2 ,mem_acl_pktlen 
+2aa9 7000851e jam param_sco_pktlen ,mem_sco_pktlen 
+2aaa 70008601 jam param_acl_pktcnt ,mem_acl_pktcnt 
+2aab 70008807 jam param_sco_pktcnt ,mem_sco_pktcnt 
+2aac 5812e904 setarg param_hci_version 
+2aad 60018080 store 3 ,mem_hci_version 
+2aae 70009060 jam 0x60 ,mem_fhs_misc 
+2aaf 7040d005 jam param_max_slot ,mem_max_slot 
+2ab0 70001402 jam 0x02 ,mem_fw_ver 
+2ab1 6800c65a fetch 1 ,mem_ssp_enable 
+2ab2 245a74c1 ncall init_memp ,blank 
+2ab3 6800c4be fetch 1 ,mem_le_secure_connect_enable 
+2ab4 245a7518 ncall init_memp_256 ,blank 
+2ab5 44d14014 bpatch patch14_2 ,mem_patch14 
+2ab6 20758000 rtn wake 
+2ab7 58000000 setarg 0 
+2ab8 600141dc store 2 ,mem_tx_len 
+2ab9 1c437e00 rshift clkn_bt ,pdata 
+2aba 60024094 store 4 ,mem_last_clkn 
+2abb 20600000 rtn 
+
+lpmstate:
+2abc 5800ee21 setarg 0xee21 
+2abd 60110050 hstore 2 ,core_clkoff 
+2abe 6812011c hfetch 4 ,core_gpio_in 
+2abf 60020abe store 4 ,mem_saved_gpio_in 
+2ac0 6810813e hfetch 1 ,core_lpm_ldocnt 
+2ac1 60008abd store 1 ,mem_wakup_from_power_flag 
+2ac2 c301e45b bbit0 gpio_latch ,loadcode 
+2ac3 7835fc00 enable wake 
+2ac4 c303aacc bbit0 cold_wake ,lpmwake 
+2ac5 7855fc00 disable wake 
+2ac6 1ce27e00 deposit auxcnt 
+2ac7 243a2acc nbranch lpmwake ,blank 
+2ac8 6810813b hfetch 1 ,core_lpm_ctrl + 3 
+2ac9 c2812acc bbit1 reload_code ,lpmwake 
+2aca d85fffff arg param_hibernate_clks ,temp 
+2acb 20202b3c branch lpm_enter_sleep 
+
+lpmwake:
+2acc 6811813c hfetch 3 ,core_lpm_xtalcnt 
+2acd 6011804c hstore 3 ,core_lpm_reg 
+2ace e8c08000 ifetch 1 ,contr 
+2acf 1fe1feef or_into isogate_mask ,pdata 
+2ad0 e0a08000 istore 1 ,contw 
+2ad1 20402c23 call lpm_write_ctrl2 
+2ad2 6810804f hfetch 1 ,core_lpm_isogate 
+2ad3 79207e04 set1 enable_retmem ,pdata 
+2ad4 6010804f hstore 1 ,core_lpm_isogate 
+2ad5 20402c23 call lpm_write_ctrl2 
+2ad6 2055aadf call lpm_load_context ,wake 
+2ad7 6810804e hfetch 1 ,core_lpm_reg + 2 
+2ad8 793ffe03 set0 gpio_latch ,pdata 
+2ad9 6010804e hstore 1 ,core_lpm_reg + 2 
+2ada 20402c23 call lpm_write_ctrl2 
+2adb 2435e45b nbranch loadcode ,wake 
+2adc c6958000 rtnmark0 mark_otp_encrypt 
+2add 70800608 jam lock_otp ,core_misc_ctrl 
+2ade 20600000 rtn 
+
+lpm_load_context:
+2adf 6800c198 fetch 1 ,mem_saved_spidctrl 
+2ae0 60108086 hstore 1 ,core_spid_ctrl 
+2ae1 6801c18d fetch 3 ,mem_saved_gsel 
+2ae2 60118080 hstore 3 ,core_gpio_sel 
+2ae3 68024181 fetch 4 ,mem_saved_gpio + 4 
+2ae4 60120074 hstore 4 ,core_gpio_out0 
+2ae5 6802417d fetch 4 ,mem_saved_gpio 
+2ae6 60120070 hstore 4 ,core_gpio_oe0 
+2ae7 68044185 fetch 8 ,mem_saved_gpio + 8 
+2ae8 60140078 hstore 8 ,core_gpio_pu0 
+2ae9 68044190 fetch 8 ,mem_saved_mark 
+2aea 98000000 iforce mark 
+2aeb 68140140 hfetch 8 ,core_gpio_wakeup_low 
+2aec 600400a1 store 8 ,mem_gpio_wakeup_low 
+2aed 204064ca call load_ucode 
+2aee 20600000 rtn 
+
+lpm_save_context:
+2aef 18027e00 deposit mark 
+2af0 60044190 store 8 ,mem_saved_mark 
+2af1 68140070 hfetch 8 ,core_gpio_oe0 
+2af2 6004417d store 8 ,mem_saved_gpio 
+2af3 e8c40000 ifetch 8 ,contr 
+2af4 e0a40000 istore 8 ,contw 
+2af5 68118080 hfetch 3 ,core_gpio_sel 
+2af6 6001c18d store 3 ,mem_saved_gsel 
+2af7 68108086 hfetch 1 ,core_spid_ctrl 
+2af8 6000c198 store 1 ,mem_saved_spidctrl 
+2af9 20202c29 branch lpm_write_gpio_wakeup 
+
+lpo_calibration:
+2afa 68108063 hfetch 1 ,core_bist_ctrl 
+2afb 243a2b00 nbranch lpo_cal_inited ,blank 
+2afc 6801c16f fetch 3 ,mem_clks_per_lpo 
+2afd 247a0000 nrtn blank 
+2afe 708063c0 jam 0xc0 ,core_bist_ctrl 
+2aff 70800680 jam ccnt_start ,core_misc_ctrl 
+
+lpo_cal_inited:
+2b00 6810812d hfetch 1 ,core_perf_status 
+2b01 c4008000 rtnbit0 1 
+2b02 68118149 hfetch 3 ,core_clk_counter 
+2b03 6001c16f store 3 ,mem_clks_per_lpo 
+2b04 20600000 rtn 
+
+lpm_adjust_clk:
+2b05 44d1c014 bpatch patch14_3 ,mem_patch14 
+2b06 1b427e00 deposit clke 
+2b07 20407f37 call clk_diff_rt 
+2b08 680a415f fetcht 4 ,mem_sleep_counter_all 
+2b09 18467cff sub temp ,0xff ,null 
+2b0a 20610000 rtn positive 
+2b0b 1fed7e00 lshift8 pdata ,pdata 
+2b0c 1ff27e00 lshift4 pdata ,pdata 
+2b0d 9846fc00 idiv temp 
+2b0e 20407f86 call wait_div_end 
+2b0f 1807fe00 quotient pdata 
+2b10 d84000c8 arg param_lpm_adjmax ,temp 
+2b11 20407f91 call ceiling 
+2b12 60008099 store 1 ,mem_lpm_adjust 
+2b13 24342b15 nbranch lpm_adjust_positive ,user 
+2b14 1fe67e00 sub pdata ,0 ,pdata 
+
+lpm_adjust_positive:
+2b15 6809c16f fetcht 3 ,mem_clks_per_lpo 
+2b16 9840fe00 iadd temp ,pdata 
+2b17 6001c16f store 3 ,mem_clks_per_lpo 
+
+lpm_clear_counter:
+2b18 58000000 setarg 0 
+2b19 6002415f store 4 ,mem_sleep_counter_all 
+2b1a 20600000 rtn 
+
+lpm_doze:
+2b1b 6800c177 fetch 1 ,mem_lpm_config + 2 
+2b1c 79207e02 set1 reload_code ,pdata 
+2b1d 6000c177 store 1 ,mem_lpm_config + 2 
+2b1e 20202b23 branch lpm_hibernate_normal 
+
+lpm_hibernate:
+2b1f d85fffff arg param_hibernate_clks ,temp 
+2b20 6800c176 fetch 1 ,mem_lpm_config + 1 
+2b21 793ffe07 set0 7 ,pdata 
+2b22 6000c176 store 1 ,mem_lpm_config + 1 
+
+lpm_hibernate_normal:
+2b23 44d24014 bpatch patch14_4 ,mem_patch14 
+2b24 20402c29 call lpm_write_gpio_wakeup 
+2b25 6800c157 fetch 1 ,mem_lpm_hibernate_switch 
+2b26 6000c17c store 1 ,mem_lpm_xtalcnt + 4 
+2b27 6800c17a fetch 1 ,mem_lpm_xtalcnt + 2 
+2b28 79207e07 set1 cold_wake ,pdata 
+2b29 6000c17a store 1 ,mem_lpm_xtalcnt + 2 
+
+lpm_sleep:
+2b2a 44d2c014 bpatch patch14_5 ,mem_patch14 
+2b2b 204029e7 call xtal_fast_wake 
+2b2c 6802415f fetch 4 ,mem_sleep_counter_all 
+2b2d 9840fe00 iadd temp ,pdata 
+2b2e 6002415f store 4 ,mem_sleep_counter_all 
+2b2f 20402aef call lpm_save_context 
+2b30 6802c178 fetch 5 ,mem_lpm_xtalcnt 
+2b31 6012004c hstore 4 ,core_lpm_reg 
+2b32 1fef2200 rshift32 pdata ,rega 
+2b33 37d98200 until null ,lpo_edge 
+2b34 1b227e00 deposit clkn 
+2b35 60034163 store 6 ,mem_sleep_clkn 
+2b36 70800502 jam lpmreg_sel_ctrl2 ,core_lpm_wr 
+2b37 37d98200 until null ,lpo_edge 
+2b38 37d98200 until null ,lpo_edge 
+2b39 1a227e00 deposit rega 
+2b3a 6010804f hstore 1 ,core_lpm_isogate 
+2b3b 70800502 jam lpmreg_sel_ctrl2 ,core_lpm_wr 
+
+lpm_enter_sleep:
+2b3c 37d98200 until null ,lpo_edge 
+2b3d 37d98200 until null ,lpo_edge 
+2b3e 601a004c hstoret 4 ,core_lpm_reg 
+2b3f 70800510 jam lpmreg_sel_counter ,core_lpm_wr 
+2b40 37df8200 until null ,never 
+
+lpm_recover_clk:
+2b41 44d34014 bpatch patch14_6 ,mem_patch14 
+2b42 58000000 setarg 0 
+2b43 1ce27c00 copy auxcnt ,null 
+2b44 2022ab4c branch lpm_recover_timeout ,zero 
+2b45 6810813c hfetch 1 ,core_lpm_xtalcnt 
+2b46 6818813d hfetcht 1 ,core_lpm_buckcnt 
+2b47 98467c00 isub temp ,null 
+2b48 20212b4a branch lpm_recover_xtal ,positive 
+2b49 18427e00 deposit temp 
+
+lpm_recover_xtal:
+2b4a 9ce67e00 isub auxcnt ,pdata 
+2b4b 1fe0fe01 increase 1 ,pdata 
+
+lpm_recover_timeout:
+2b4c 1fe0fe08 increase 8 ,pdata 
+2b4d 37d98200 until null ,lpo_edge 
+2b4e 9e20fe00 iadd lpo_time ,pdata 
+2b4f 680a415b fetcht 4 ,mem_sleep_counter 
+2b50 9840fe00 iadd temp ,pdata 
+2b51 6809c16f fetcht 3 ,mem_clks_per_lpo 
+2b52 984ffe00 imul32 temp ,pdata 
+2b53 1fecfe00 rshift8 pdata ,pdata 
+2b54 1ff1fe00 rshift4 pdata ,pdata 
+2b55 1fe0fe6e increase param_lpm_fix ,pdata 
+2b56 d8400ea6 arg 3750 ,temp 
+2b57 9846fc00 idiv temp 
+2b58 20407f86 call wait_div_end 
+2b59 1807fe00 quotient pdata 
+2b5a 1ff07e00 lshift16 pdata ,pdata 
+2b5b 18070400 remainder temp 
+2b5c 9841fe00 ior temp ,pdata 
+2b5d 680b4163 fetcht 6 ,mem_sleep_clkn 
+2b5e 20407f2c call clk_add 
+2b5f 18423200 copy temp ,clkn 
+2b60 68034048 fetch 6 ,mem_context + coffset_clk_offset 
+2b61 20402854 call calc_clke2 
+2b62 1b427e00 deposit clke 
+2b63 60030a9a store 6 ,mem_pdatatemp 
+2b64 1ce27e00 deposit auxcnt 
+2b65 e0a08000 istore 1 ,contw 
+2b66 6810811d hfetch 1 ,core_gpio_in1 
+2b67 1fe1fef0 or_into 0xf0 ,pdata 
+2b68 e0a08000 istore 1 ,contw 
+2b69 20600000 rtn 
+
+lpm_dispatch:
+2b6a 44d3c014 bpatch patch14_7 ,mem_patch14 
+2b6b 20402afa call lpo_calibration 
+2b6c 6801c16f fetch 3 ,mem_clks_per_lpo 
+2b6d 207a0000 rtn blank 
+2b6e 6800c091 fetch 1 ,mem_lpm_mode 
+2b6f 207a0000 rtn blank 
+2b70 6800c65a fetch 1 ,mem_ssp_enable 
+2b71 203a2b74 branch lpm_dispatch_next ,blank 
+2b72 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 
+2b73 207a0000 rtn blank 
+
+lpm_dispatch_next:
+2b74 6800c4c0 fetch 1 ,mem_le_sc_calc 
+2b75 247a0000 nrtn blank 
+2b76 20402c3a call lpm_check_wake_lock 
+2b77 247a0000 nrtn blank 
+2b78 6800c040 fetch 1 ,mem_context 
+2b79 2fe00e03 compare 3 ,pdata ,0x7 
+2b7a 2420ab9d nbranch lpm_dispatch_unconn ,true 
+2b7b 68014042 fetch 2 ,mem_context + coffset_tsniff 
+2b7c 207a0000 rtn blank 
+2b7d 20758000 rtn wake 
+2b7e 44d44015 bpatch patch15_0 ,mem_patch15 
+
+lpm_dispatch_next2:
+2b7f 680880a0 fetcht 1 ,mem_lpm_current_mult 
+2b80 68014042 fetch 2 ,mem_context + coffset_tsniff 
+2b81 984ffe00 imul32 temp ,pdata 
+2b82 18518400 rshift4 temp ,temp 
+2b83 184b0400 rshift2 temp ,temp 
+2b84 98467e00 isub temp ,pdata 
+2b85 680a4044 fetcht 4 ,mem_context + coffset_sniff_anchor 
+2b86 9840fe00 iadd temp ,pdata 
+2b87 6808c156 fetcht 1 ,mem_lpm_overhead 
+2b88 98467e00 isub temp ,pdata 
+2b89 1ff06000 lshift16 pdata ,alarm 
+2b8a 44d4c015 bpatch patch15_1 ,mem_patch15 
+2b8b 6801404e fetch 2 ,mem_context + coffset_rx_window 
+2b8c 1fe37e00 rshift pdata ,pdata 
+2b8d 20407f50 call clk2bt 
+2b8e 1e027e00 deposit alarm 
+2b8f 20407f39 call clk_diff 
+2b90 1b420400 copy clke ,temp 
+2b91 20407f37 call clk_diff_rt 
+2b92 20740000 rtn user 
+
+lpm_dispatch_sleep:
+2b93 20407f49 call clk2lpo 
+
+lpm_dispatch_lpo:
+2b94 44d54015 bpatch patch15_2 ,mem_patch15 
+2b95 6800c178 fetch 1 ,mem_lpm_xtalcnt 
+2b96 98467c00 isub temp ,null 
+2b97 20212b18 branch lpm_clear_counter ,positive 
+2b98 600a415b storet 4 ,mem_sleep_counter 
+2b99 20403328 call app_will_enter_lpm 
+2b9a 204052fb call l2cap_lpm_save_txbuf 
+2b9b 680a415b fetcht 4 ,mem_sleep_counter 
+2b9c 20202b2a branch lpm_sleep 
+
+lpm_dispatch_unconn:
+2b9d 44d5c015 bpatch patch15_3 ,mem_patch15 
+2b9e 6800c040 fetch 1 ,mem_context 
+2b9f c3800000 rtnbit1 state_inconn 
+2ba0 c3818000 rtnbit1 state_inpage 
+2ba1 6800c65a fetch 1 ,mem_ssp_enable 
+2ba2 203a2ba5 branch lpm_unconn_nossp ,blank 
+2ba3 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 
+2ba4 207a0000 rtn blank 
+
+lpm_unconn_nossp:
+2ba5 44d64015 bpatch patch15_4 ,mem_patch15 
+2ba6 6800c36e fetch 1 ,mem_le_adv_enable 
+2ba7 243a2baa nbranch lpm_unconn_cont ,blank 
+2ba8 6800c093 fetch 1 ,mem_scan_mode 
+2ba9 207a0000 rtn blank 
+
+lpm_unconn_cont:
+2baa 68014154 fetch 2 ,mem_lpm_interval 
+2bab 207a0000 rtn blank 
+
+lpm_sleep_btclk:
+2bac 6808c156 fetcht 1 ,mem_lpm_overhead 
+2bad 98467e00 isub temp ,pdata 
+2bae d8401d4c arg 7500 ,temp 
+2baf 984ffe00 imul32 temp ,pdata 
+2bb0 20202b93 branch lpm_dispatch_sleep 
+
+lpm_set_mult:
+2bb1 44d6c015 bpatch patch15_5 ,mem_patch15 
+2bb2 7855fc00 disable wake 
+2bb3 68008030 fetch 1 ,mem_state 
+2bb4 c4008000 rtnbit0 state_insniff 
+2bb5 2436abd0 nbranch lpm_not_match ,match 
+2bb6 20402bcb call lpm_match 
+2bb7 680140c1 fetch 2 ,mem_rx_window_sniff 
+2bb8 6001003e store 2 ,mem_rx_window 
+2bb9 68008047 fetch 1 ,mem_arq 
+2bba c281abde bbit1 wack ,lpm_mult_short 
+2bbb c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short 
+2bbc 20405274 call l2cap_malloc_is_fifo_empty 
+2bbd 243a2bde nbranch lpm_mult_short ,blank 
+2bbe 6800c55c fetch 1 ,mem_classic_bt_flag 
+2bbf c280abde bbit1 short_mult_flag ,lpm_mult_short 
+
+lpm_mult_wait_timeout:
+2bc0 7000a000 jam 0 ,mem_lpm_current_mult 
+2bc1 c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short 
+2bc2 6800c174 fetch 1 ,mem_lpm_mult_cnt 
+2bc3 203a2be2 branch lpm_mult_long ,blank 
+2bc4 1fe0ffff increase -1 ,pdata 
+2bc5 6000c174 store 1 ,mem_lpm_mult_cnt 
+2bc6 20600000 rtn 
+
+classic_bt_set_mult_short_flag:
+2bc7 d8e00001 arg short_mult_flag ,queue 
+2bc8 202060cd branch classic_bluetooth_set_flag 
+
+classic_bt_clr_mult_short_flag:
+2bc9 d8e00001 arg short_mult_flag ,queue 
+2bca 202060d1 branch classic_bluetooth_clr_flag 
+
+lpm_match:
+2bcb 70415900 jam 0 ,mem_sniff_unint_lost 
+2bcc 6801c169 fetch 3 ,mem_sniff_rcv 
+2bcd 1fe0fe01 increase 1 ,pdata 
+2bce 6001c169 store 3 ,mem_sniff_rcv 
+2bcf 20600000 rtn 
+
+lpm_not_match:
+2bd0 44d74015 bpatch patch15_6 ,mem_patch15 
+2bd1 680940c1 fetcht 2 ,mem_rx_window_sniff 
+2bd2 18430400 rshift temp ,temp 
+2bd3 6801003e fetch 2 ,mem_rx_window 
+2bd4 9840fe00 iadd temp ,pdata 
+2bd5 6001003e store 2 ,mem_rx_window 
+
+lpm_lost:
+2bd6 7000a000 jam 0 ,mem_lpm_current_mult 
+2bd7 6801c16c fetch 3 ,mem_sniff_lost 
+2bd8 1fe0fe01 increase 1 ,pdata 
+2bd9 6001c16c store 3 ,mem_sniff_lost 
+2bda 6800c159 fetch 1 ,mem_sniff_unint_lost 
+2bdb 1fe0fe01 increase 1 ,pdata 
+2bdc 6000c159 store 1 ,mem_sniff_unint_lost 
+2bdd 20600000 rtn 
+
+lpm_mult_short:
+2bde 7000a000 jam 0 ,mem_lpm_current_mult 
+2bdf 6800c173 fetch 1 ,mem_lpm_mult_timeout 
+2be0 6000c174 store 1 ,mem_lpm_mult_cnt 
+2be1 20600000 rtn 
+
+lpm_mult_long:
+2be2 6808c172 fetcht 1 ,mem_lpm_mult 
+2be3 600880a0 storet 1 ,mem_lpm_current_mult 
+2be4 20600000 rtn 
+
+lpm_cal_xtal_startup:
+2be5 44d7c015 bpatch patch15_7 ,mem_patch15 
+2be6 6800c178 fetch 1 ,mem_lpm_xtalcnt 
+2be7 247a0000 nrtn blank 
+2be8 70804206 jam clksel_rc ,core_clksel 
+2be9 58000f0c setarg 0xf0c 
+2bea 20402c18 call lpm_write_config 
+2beb 58030d40 setarg 200000 
+2bec 20402a8f call sleep 
+2bed 37d98200 until null ,lpo_edge 
+2bee 1e226000 copy lpo_time ,alarm 
+2bef 204029e7 call xtal_fast_wake 
+2bf0 70804204 jam clksel_xtal ,core_clksel 
+2bf1 2000000a nop 10 
+2bf2 37d98200 until null ,lpo_edge 
+2bf3 1e227e00 deposit lpo_time 
+2bf4 9e067e00 isub alarm ,pdata 
+2bf5 1fe0fe30 increase 0x30 ,pdata 
+2bf6 d84000ff arg 0xff ,temp 
+2bf7 20407f91 call ceiling 
+2bf8 6000c178 store 1 ,mem_lpm_xtalcnt 
+2bf9 20007530 nop 30000 
+2bfa 20007530 nop 30000 
+2bfb 20007530 nop 30000 
+2bfc 20600000 rtn 
+
+lpm_cal_xtal_startup_by_snooze:
+2bfd 6800c178 fetch 1 ,mem_lpm_xtalcnt 
+2bfe 247a0000 nrtn blank 
+2bff 708044ff jam 0xff ,core_xtal_stable_time 
+2c00 70804206 jam clksel_rc ,core_clksel 
+2c01 204029e7 call xtal_fast_wake 
+2c02 580003e8 setarg 1000 
+2c03 9e20e000 iadd lpo_time ,alarm 
+2c04 07e00000 snooze 
+2c05 1e227e00 deposit lpo_time 
+2c06 20002ee0 nop 12000 
+2c07 20002ee0 nop 12000 
+2c08 20002ee0 nop 12000 
+2c09 20002ee0 nop 12000 
+2c0a 20002ee0 nop 12000 
+2c0b 20002ee0 nop 12000 
+2c0c 20002ee0 nop 12000 
+2c0d 20002ee0 nop 12000 
+2c0e 20002ee0 nop 12000 
+2c0f 9e067e00 isub alarm ,pdata 
+2c10 1fe0fe30 add pdata ,0x30 ,pdata 
+2c11 d84000ff arg 0xff ,temp 
+2c12 20407f91 call ceiling 
+2c13 6000c178 store 1 ,mem_lpm_xtalcnt 
+2c14 20007530 nop 30000 
+2c15 20007530 nop 30000 
+2c16 20007530 nop 30000 
+2c17 20600000 rtn 
+
+lpm_write_config:
+2c18 d8a00fff arg 0xfff ,contw 
+2c19 98a10a00 iand contw ,contw 
+2c1a 6800c175 fetch 1 ,mem_lpm_config 
+2c1b 1fe17ef0 and_into 0xf0 ,pdata 
+2c1c 1fed7e00 lshift8 pdata ,pdata 
+2c1d 98a1fe00 ior contw ,pdata 
+2c1e 6011004c hstore 2 ,core_lpm_reg 
+2c1f e8c10000 ifetch 2 ,contr 
+2c20 e0a10000 istore 2 ,contw 
+
+lpm_write_ctrl:
+2c21 58000001 setarg lpmreg_sel_ctrl 
+2c22 20202c24 branch lpm_write 
+
+lpm_write_ctrl2:
+2c23 58000002 setarg lpmreg_sel_ctrl2 
+
+lpm_write:
+2c24 37d98200 until null ,lpo_edge 
+2c25 60108005 hstore 1 ,core_lpm_wr 
+2c26 37d98200 until null ,lpo_edge 
+2c27 37d98200 until null ,lpo_edge 
+2c28 20600000 rtn 
+
+lpm_write_gpio_wakeup:
+2c29 44d84016 bpatch patch16_0 ,mem_patch16 
+2c2a 680200a1 fetch 4 ,mem_gpio_wakeup_low 
+2c2b 6012004c hstore 4 ,core_lpm_reg 
+2c2c 58000004 setarg lpmreg_sel_gpiolow 
+2c2d 20402c24 call lpm_write 
+2c2e 680200a5 fetch 4 ,mem_gpio_wakeup_high 
+2c2f 6012004c hstore 4 ,core_lpm_reg 
+2c30 58000008 setarg lpmreg_sel_gpiohigh 
+2c31 20202c24 branch lpm_write 
+
+lpm_get_wake_lock:
+2c32 68014152 fetch 2 ,mem_lpm_wake_lock 
+2c33 f9207e00 qset1 pdata 
+2c34 60014152 store 2 ,mem_lpm_wake_lock 
+2c35 20600000 rtn 
+
+lpm_put_wake_lock:
+2c36 68014152 fetch 2 ,mem_lpm_wake_lock 
+2c37 f93ffe00 qset0 pdata 
+2c38 60014152 store 2 ,mem_lpm_wake_lock 
+2c39 20600000 rtn 
+
+lpm_check_wake_lock:
+2c3a 44d8c016 bpatch patch16_1 ,mem_patch16 
+2c3b 20403326 call app_check_wake_lock 
+2c3c 68014152 fetch 2 ,mem_lpm_wake_lock 
+2c3d 1fe22200 copy pdata ,rega 
+2c3e 6800804c fetch 1 ,mem_state_map 
+2c3f 2feffe06 isolate1 smap_rxlmp ,pdata 
+2c40 7920a20b setflag true ,wake_lock_lmp_rx ,rega 
+2c41 68008078 fetch 1 ,mem_lmo_opcode1 
+2c42 6808807c fetcht 1 ,mem_lmo_opcode2 
+2c43 9840fe00 iadd temp ,pdata 
+2c44 68088048 fetcht 1 ,mem_lmp_to_send 
+2c45 9840fe00 iadd temp ,pdata 
+2c46 7d3a220a nsetflag blank ,wake_lock_lmp_tx ,rega 
+2c47 6800c4ff fetch 1 ,mem_le_tx_buff_used 
+2c48 7d3a2201 nsetflag blank ,wake_lock_ble_tx ,rega 
+2c49 6801025d fetch 2 ,mem_l2cap_rxbuff1_len 
+2c4a 6809025f fetcht 2 ,mem_l2cap_rxbuff2_len 
+2c4b 9840fe00 iadd temp ,pdata 
+2c4c 7d3a220d nsetflag blank ,wake_lock_l2cap_rx ,rega 
+2c4d 68044668 fetch util_fifo_len ,mem_ipc_fifo_bt2c51 
+2c4e 7d3a220f nsetflag blank ,wake_lock_ipc_bt2c51 ,rega 
+2c4f 68044670 fetch util_fifo_len ,mem_ipc_fifo_c512bt 
+2c50 7d3a220e nsetflag blank ,wake_lock_ipc_c512bt ,rega 
+2c51 6800c1ce fetch 1 ,mem_hci_cmd 
+2c52 7d3a2208 nsetflag blank ,wake_lock_cmd ,rega 
+2c53 6800c092 fetch 1 ,mem_device_option 
+2c54 2fe1fe0a compare dvc_op_module ,pdata ,0xff 
+2c55 2040ac5b call lpm_uart_wake_lock ,true 
+2c56 5ffffff8 setarg -8 
+2c57 9a212200 iand rega ,rega 
+2c58 1a227e00 copy rega ,pdata 
+2c59 60014152 store 2 ,mem_lpm_wake_lock 
+2c5a 20600000 rtn 
+
+lpm_uart_wake_lock:
+2c5b 68110112 hfetch 2 ,core_uart_rxitems 
+2c5c 7d3a2206 nsetflag blank ,wake_lock_uart_rx ,rega 
+2c5d 6811010e hfetch 2 ,core_uart_txitems 
+2c5e 7d3a2205 nsetflag blank ,wake_lock_uart_tx ,rega 
+2c5f 20600000 rtn 
+
+lpm_shut_down:
+2c60 68120138 hfetch 4 ,core_lpm_ctrl 
+2c61 793ffe1b set0 27 ,pdata 
+2c62 6012004c hstore 4 ,core_lpm_reg 
+2c63 20402c21 call lpm_write_ctrl 
+2c64 20202a8c branch assert 
+
+lpm_disable_exen_output:
+2c65 6812013c hfetch 4 ,core_lpm_xtalcnt 
+2c66 793ffe14 set0 20 ,pdata 
+2c67 6012004c hstore 4 ,core_lpm_reg 
+2c68 20202c23 branch lpm_write_ctrl2 
+
+check_bt_disabled:
+2c69 68014150 fetch 2 ,mem_chip_functions 
+2c6a c2802a8c bbit1 bt_disabled ,assert 
+2c6b 20600000 rtn 
+
+check_ble_disabled:
+2c6c 68014150 fetch 2 ,mem_chip_functions 
+2c6d c280aa8c bbit1 ble_disabled ,assert 
+2c6e 20600000 rtn 
+
+check_module_disabled:
+2c6f 68014150 fetch 2 ,mem_chip_functions 
+2c70 c2812a8c bbit1 module_disable ,assert 
+2c71 20600000 rtn 
+
+g24_dispatch:
+2c72 44d94016 bpatch patch16_2 ,mem_patch16 
+2c73 20402c7a call g24_head_ptr2regc 
+2c74 1a60a4cd add regc ,offset_24g_mode ,regb 
+2c75 ea408000 ifetch 1 ,regb 
+2c76 c1000000 rtneq disable_24g 
+2c77 c000ad06 beq tx_24g ,g24_transmit_process 
+2c78 c0012c7f beq rx_24g ,g24_receive_process 
+2c79 20600000 rtn 
+
+g24_head_ptr2regc:
+2c7a 68094241 fetcht 2 ,mem_24g_head_ptr 
+2c7b 18422600 copy temp ,regc 
+2c7c 20600000 rtn 
+
+g24_receive_process_init:
+2c7d 20402f3d call g24_receive_init 
+2c7e 2020307d branch g24_mode_switch_init 
+
+g24_receive_process:
+2c7f 20403084 call g24_mode_switch 
+2c80 2040305a call g24_dongle_work_mode_auto 
+2c81 2040305e call g24_dongle_bind_mode_auto 
+2c82 202030a2 branch g24_dongle_search_mode_auto 
+
+g24_pair_init:
+2c83 20403231 call g24_set0_mem_pid 
+2c84 5800004e setarg g24_pair_ch 
+2c85 2040322f call g24_store_mem_ch 
+2c86 204032ba call g24_store_mem_pair_txpower 
+2c87 1a60a292 add regc ,offset_24g_paring_addr ,rega 
+2c88 ea220000 ifetch 4 ,rega 
+2c89 2020322c branch g24_store_mem_addr 
+
+g24_ch:
+2c8a 20402c7a call g24_head_ptr2regc 
+2c8b 1a60a491 add regc ,offset_24g_current_ch_number ,regb 
+2c8c ea488000 ifetcht 1 ,regb 
+2c8d 20402c90 call g24_ch_temp_incre_size4 
+2c8e 1a608a91 add regc ,offset_24g_current_ch_number ,contw 
+2c8f 20202e56 branch g24_contw_istoret_1byte 
+
+g24_ch_temp_incre_size4:
+2c90 20402c94 call g24_ch_calc 
+2c91 18408401 increase 1 ,temp 
+2c92 18410403 and_into 3 ,temp 
+2c93 20600000 rtn 
+
+g24_ch_calc:
+2c94 1a60a4ae add regc ,offset_24g_addr ,regb 
+2c95 ea408000 ifetch 1 ,regb 
+2c96 1fe17e03 and_into 0x03 ,pdata 
+2c97 1fefa204 mul32 pdata ,4 ,rega 
+2c98 1a60fe97 add regc ,offset_24g_ch_map1 ,pdata 
+2c99 9a20fe00 iadd rega ,pdata 
+2c9a 98408c00 iadd temp ,contr 
+2c9b e8c08000 ifetch 1 ,contr 
+2c9c 2020322f branch g24_store_mem_ch 
+
+g24_set_device_addr:
+2c9d 2040326c call g24_store_mem_tx_power_temp 
+2c9e 2040666a call otp_enable_chgpump 
+2c9f 580007e2 setarg 0x7e2 
+2ca0 da200aa2 arg mem_temp ,rega 
+2ca1 d8400004 arg 4 ,temp 
+2ca2 204066b3 call otpd_read_data 
+2ca3 2040666d call otp_disable_chgpump 
+2ca4 68020aa2 fetch 4 ,mem_temp 
+2ca5 20403227 call g24_store_mem_device_addr 
+2ca6 247a0000 nrtn blank 
+2ca7 680240a0 fetch 4 ,mem_lap 
+2ca8 20203227 branch g24_store_mem_device_addr 
+
+g24_transmit_rf_sta_init:
+2ca9 20403241 call g24_set1_mem_rf_last_sta 
+2caa 58000000 setarg 0 
+2cab 2040323f call g24_store_mem_sync_cnt 
+
+g24_transmit_rf_ctrl_clear:
+2cac 2040323a call g24_fetch_mem_data_type 
+2cad 1fe17e07 and_into bits_data ,pdata 
+2cae 2020323c branch g24_store_mem_data_type 
+
+g24_hop_ch_enable:
+2caf 2040323a call g24_fetch_mem_data_type 
+2cb0 79207e04 set1 bit_hop ,pdata 
+2cb1 2040323c call g24_store_mem_data_type 
+2cb2 20203235 branch g24_store_mem_txpayload 
+
+g24_transmit_hop_pac_fail:
+2cb3 2040325d call g24_fetch_mem_rf_work_stage 
+2cb4 c000acb7 beq 1 ,g24_transmit_hop_pac_fail_wo_hop 
+2cb5 c0012cbc beq 2 ,g24_transmit_hop_pac_fail_hop_stage2 
+2cb6 20600000 rtn 
+
+g24_transmit_hop_pac_fail_wo_hop:
+2cb7 2040323e call g24_set2_mem_sync_cnt 
+
+g24_transmit_hop_pac_fail_stage1:
+2cb8 1a608ad1 add regc ,offset_24g_hop_pac_retry ,contw 
+2cb9 204032d6 call g24_mem_set0 
+2cba 20403242 call g24_store_mem_rf_last_sta 
+2cbb 20202cac branch g24_transmit_rf_ctrl_clear 
+
+g24_transmit_hop_pac_fail_hop_stage2:
+2cbc 2040325a call g24_set0_mem_rf_hop_ch 
+2cbd 20202cb8 branch g24_transmit_hop_pac_fail_stage1 
+
+g24_transmit_pac_fail_hop_stage3:
+2cbe 1a60a28c add regc ,offset_24g_txfail_cnt ,rega 
+2cbf ea208000 ifetch 1 ,rega 
+2cc0 1fe0fe01 increase 1 ,pdata 
+2cc1 1a608a8c add regc ,offset_24g_txfail_cnt ,contw 
+2cc2 e0a08000 istore 1 ,contw 
+2cc3 c0102dd2 beq 0x20 ,g24_tx_attempt_fail 
+2cc4 20403258 call g24_fetch_mem_rf_hop_ch 
+2cc5 c000acca beq 1 ,g24_rf_hop_fastly 
+2cc6 58000001 setarg 1 
+2cc7 2040325b call g24_store_mem_rf_hop_ch 
+
+g24_rf_hop_attemp_again:
+2cc8 20403258 call g24_fetch_mem_rf_hop_ch 
+2cc9 c080acac bne 1 ,g24_transmit_rf_ctrl_clear 
+
+g24_rf_hop_fastly:
+2cca 1a60a2d3 add regc ,offset_24g_hop_fastly_cnt ,rega 
+2ccb ea208000 ifetch 1 ,rega 
+2ccc 1fe0fe01 increase 1 ,pdata 
+2ccd 20402cd5 call g24_store_mem_hop_fastly_cnt 
+2cce c0022cd2 beq 4 ,g24_rf_hop_fastly_exit 
+2ccf 20402c8a call g24_ch 
+2cd0 20402d04 call g24_set2_mem_max_retry 
+2cd1 20202d8f branch g24_transmit_packet 
+
+g24_rf_hop_fastly_exit:
+2cd2 20402cd4 call g24_set0_mem_hop_fastly_cnt 
+2cd3 20202cac branch g24_transmit_rf_ctrl_clear 
+
+g24_set0_mem_hop_fastly_cnt:
+2cd4 58000000 setarg 0 
+
+g24_store_mem_hop_fastly_cnt:
+2cd5 1a608ad3 add regc ,offset_24g_hop_fastly_cnt ,contw 
+2cd6 202032b4 branch g24_contw_istore_1byte 
+
+g24_transmit_hop_pac_succ_wo_hop:
+2cd7 2040323e call g24_set2_mem_sync_cnt 
+
+g24_transmit_hop_pac_succ:
+2cd8 2040325a call g24_set0_mem_rf_hop_ch 
+2cd9 20403241 call g24_set1_mem_rf_last_sta 
+2cda 20202cac branch g24_transmit_rf_ctrl_clear 
+
+g24_transmit_succ_rf_config:
+2cdb 2040325d call g24_fetch_mem_rf_work_stage 
+2cdc c001acd8 beq 3 ,g24_transmit_hop_pac_succ 
+2cdd 2040323a call g24_fetch_mem_data_type 
+2cde 2fec0004 isolate0 bit_hop ,pdata 
+2cdf 2020aca9 branch g24_transmit_rf_sta_init ,true 
+2ce0 2040325d call g24_fetch_mem_rf_work_stage 
+2ce1 c000acd7 beq 1 ,g24_transmit_hop_pac_succ_wo_hop 
+2ce2 c0012cd8 beq 2 ,g24_transmit_hop_pac_succ 
+2ce3 20600000 rtn 
+
+g24_rf_sta_check:
+2ce4 20403253 call g24_fetch_mem_pairing_sm 
+2ce5 c1ff8000 rtnne state_24g_pairing_success 
+2ce6 20402ce9 call g24_rf_laststa_synccnt_check 
+2ce7 24562cf4 ncall g24_rf_sync_cnt_check ,user2 
+2ce8 20600000 rtn 
+
+g24_rf_laststa_synccnt_check:
+2ce9 78567c00 disable user2 
+2cea 1a60a2ce add regc ,offset_24g_rf_last_sta ,rega 
+2ceb ea208000 ifetch 1 ,rega 
+2cec c1808000 rtnne 1 
+2ced 1a60a2d0 add regc ,offset_24g_sync_cnt ,rega 
+2cee ea208000 ifetch 1 ,rega 
+2cef c1800000 rtnne 0 
+2cf0 58000001 setarg 1 
+2cf1 20402cfd call g24_store_mem_rf_work_stage 
+2cf2 20403237 call g24_set4_mem_max_retry 
+2cf3 20207feb branch enable_user2 
+
+g24_rf_sync_cnt_check:
+2cf4 1a60a2d0 add regc ,offset_24g_sync_cnt ,rega 
+2cf5 ea208000 ifetch 1 ,rega 
+2cf6 203a2cff branch g24_rf_hop_attemp ,blank 
+2cf7 1fe0ffff increase -1 ,pdata 
+2cf8 2040323f call g24_store_mem_sync_cnt 
+2cf9 58000002 setarg 2 
+2cfa 20402cfd call g24_store_mem_rf_work_stage 
+2cfb 20402c8a call g24_ch 
+2cfc 20203237 branch g24_set4_mem_max_retry 
+
+g24_store_mem_rf_work_stage:
+2cfd 1a608ad2 add regc ,offset_24g_rf_work_stage ,contw 
+2cfe 202032b4 branch g24_contw_istore_1byte 
+
+g24_rf_hop_attemp:
+2cff 58000003 setarg 3 
+2d00 20402cfd call g24_store_mem_rf_work_stage 
+2d01 20403258 call g24_fetch_mem_rf_hop_ch 
+2d02 243a2cc8 nbranch g24_rf_hop_attemp_again ,blank 
+2d03 20402c8a call g24_ch 
+
+g24_set2_mem_max_retry:
+2d04 58000002 setarg 2 
+2d05 20203238 branch g24_store_mem_max_retry 
+
+g24_transmit_process:
+2d06 c6930000 rtnmark0 mark_24g 
+2d07 79200027 set1 mark_24g_conext ,mark 
+2d08 44d9c016 bpatch patch16_3 ,mem_patch16 
+2d09 1a60a28e add regc ,offset_24g_tx_without_int ,rega 
+2d0a ea208000 ifetch 1 ,rega 
+2d0b c000ad0f beq 1 ,g24_transmit_without_int 
+2d0c 2040306a call g24_timer_check 
+2d0d 24342d16 nbranch g24_transmit_exit ,user 
+2d0e 20402d1b call g24_interval_calibrate 
+
+g24_transmit_without_int:
+2d0f 1a608a8e add regc ,offset_24g_tx_without_int ,contw 
+2d10 204032d6 call g24_mem_set0 
+2d11 20402d2c call g24_txdata_prep 
+2d12 24342d7d nbranch g24_enter_lpm ,user 
+2d13 20402ce4 call g24_rf_sta_check 
+
+g24_transmit_start:
+2d14 20402d8f call g24_transmit_packet 
+2d15 20402e7a call g24_power_ctrl 
+
+g24_transmit_exit:
+2d16 793f8027 set0 mark_24g_conext ,mark 
+2d17 20600000 rtn 
+
+g24_timer_timeout:
+2d18 20628000 rtn zero 
+2d19 79207e1c set1 28 ,pdata 
+2d1a 20600000 rtn 
+
+g24_interval_calibrate:
+2d1b 1a60a2c2 add regc ,offset_24g_pac_index ,rega 
+2d1c ea208000 ifetch 1 ,rega 
+2d1d 1fe0fe01 increase 1 ,pdata 
+2d1e 1a608ac2 add regc ,offset_24g_pac_index ,contw 
+2d1f e0a08000 istore 1 ,contw 
+2d20 c0022d23 beq 4 ,g24_interval_max 
+2d21 c002ad27 beq 5 ,g24_interval_min 
+2d22 20600000 rtn 
+
+g24_interval_max:
+2d23 1a60a2ad add regc ,offset_24g_interval_max ,rega 
+2d24 ea208000 ifetch 1 ,rega 
+
+g24_interval_update:
+2d25 1a608aab add regc ,offset_24g_interval ,contw 
+2d26 202032b4 branch g24_contw_istore_1byte 
+
+g24_interval_min:
+2d27 1a608ac2 add regc ,offset_24g_pac_index ,contw 
+2d28 204032d6 call g24_mem_set0 
+2d29 1a60a2ac add regc ,offset_24g_interval_min ,rega 
+2d2a ea208000 ifetch 1 ,rega 
+2d2b 20202d25 branch g24_interval_update 
+
+g24_txdata_prep:
+2d2c 20403253 call g24_fetch_mem_pairing_sm 
+2d2d c0ffaeb1 bne state_24g_pairing_success ,g24_pairing_sm 
+2d2e 44da4016 bpatch patch16_4 ,mem_patch16 
+2d2f 20402d3a call g24_package_data 
+2d30 24342d36 nbranch g24_txdata_last_pac ,user 
+2d31 20402d53 call g24_transmit_prep 
+2d32 20402e71 call g24_power_ctrl_pac_incrs 
+
+g24_txdata_enable_tx:
+2d33 58000001 setarg ensure_on_24g 
+
+g24_store_mem_ensure:
+2d34 1a608a8b add regc ,offset_24g_ensure ,contw 
+2d35 202032b4 branch g24_contw_istore_1byte 
+
+g24_txdata_last_pac:
+2d36 1a60a28b add regc ,offset_24g_ensure ,rega 
+2d37 ea208000 ifetch 1 ,rega 
+2d38 c000ffe7 beq ensure_on_24g ,enable_user 
+2d39 20600000 rtn 
+
+g24_package_data:
+2d3a 1a6084d8 add regc ,offset_24g_cb_data ,temp 
+2d3b e8410000 ifetch 2 ,temp 
+2d3c 20407f9c call callback_func 
+2d3d 24740000 nrtn user 
+2d3e 1a227e00 copy rega ,pdata 
+2d3f 60008aae store 1 ,mem_rega 
+2d40 1a608ab2 add regc ,offset_24g_abort_pac ,contw 
+2d41 204032d6 call g24_mem_set0 
+2d42 20402cac call g24_transmit_rf_ctrl_clear 
+2d43 6000919e store 1 ,mem_24g_common_temp 
+2d44 68008aae fetch 1 ,mem_rega 
+2d45 1fe22200 copy pdata ,rega 
+2d46 1a208401 add rega ,1 ,temp 
+2d47 d8a0119f arg mem_24g_common_temp + 1 ,contw 
+2d48 1a227200 copy rega ,loopcnt 
+2d49 1a420c00 copy regb ,contr 
+2d4a 20407f01 call memcpy 
+2d4b da20119e arg mem_24g_common_temp ,rega 
+
+g24_put_data_in_buff:
+2d4c c6938000 rtnmark0 mark_24g_conext 
+2d4d 1a608a86 add regc ,offset_24g_datalen ,contw 
+2d4e e0a88000 istoret 1 ,contw 
+2d4f 18427200 copy temp ,loopcnt 
+2d50 1a608a22 add regc ,offset_24g_txbuf ,contw 
+2d51 1a220c00 copy rega ,contr 
+2d52 20207f01 branch memcpy 
+
+g24_transmit_prep:
+2d53 1a60a286 add regc ,offset_24g_datalen ,rega 
+2d54 ea208000 ifetch 1 ,rega 
+2d55 1fe0fe02 increase 2 ,pdata 
+2d56 1a608a88 add regc ,offset_24g_txlen ,contw 
+2d57 e0a08000 istore 1 ,contw 
+2d58 2040323a call g24_fetch_mem_data_type 
+2d59 20403235 call g24_store_mem_txpayload 
+2d5a 1a60a286 add regc ,offset_24g_datalen ,rega 
+2d5b ea208000 ifetch 1 ,rega 
+2d5c 1fe9fe00 lshift3 pdata ,pdata 
+2d5d 1a60a285 add regc ,offset_24g_pid ,rega 
+2d5e ea288000 ifetcht 1 ,rega 
+2d5f 18410403 and temp ,0x03 ,temp 
+2d60 18438400 lshift temp ,temp 
+2d61 9841fe00 ior temp ,pdata 
+2d62 1a60a2c3 add regc ,offset_24g_no_ack ,rega 
+2d63 ea288000 ifetcht 1 ,rega 
+2d64 9840fe00 iadd temp ,pdata 
+2d65 e0a08000 istore 1 ,contw 
+2d66 1a60a286 add regc ,offset_24g_datalen ,rega 
+2d67 ea208000 ifetch 1 ,rega 
+2d68 98007200 iforce loopcnt 
+2d69 1a608c22 add regc ,offset_24g_txbuf ,contr 
+2d6a 20207f01 branch memcpy 
+
+g24_send_abort_packet:
+2d6b 2040324f call g24_set1_mem_abort_pac 
+2d6c 2040325a call g24_set0_mem_rf_hop_ch 
+2d6d 20402e6d call g24_power_ctrl_reinit 
+2d6e 20402cac call g24_transmit_rf_ctrl_clear 
+2d6f 6000919e store 1 ,mem_24g_common_temp 
+2d70 20402d77 call g24_put_data_in_buff_pre 
+2d71 2040323a call g24_fetch_mem_data_type 
+2d72 79207e03 set1 bit_abort ,pdata 
+2d73 2040323c call g24_store_mem_data_type 
+2d74 20402d53 call g24_transmit_prep 
+2d75 20402d33 call g24_txdata_enable_tx 
+2d76 20202d14 branch g24_transmit_start 
+
+g24_put_data_in_buff_pre:
+2d77 6000919f store 1 ,mem_24g_common_temp + 1 
+2d78 20403224 call g24_fetch_mem_device_addr 
+2d79 600211a0 store 4 ,mem_24g_common_temp + 2 
+2d7a d8400006 arg 6 ,temp 
+2d7b da20119e arg mem_24g_common_temp ,rega 
+2d7c 20202d4c branch g24_put_data_in_buff 
+
+g24_enter_lpm:
+2d7d 1a60a2b2 add regc ,offset_24g_abort_pac ,rega 
+2d7e ea208000 ifetch 1 ,rega 
+2d7f 203a2d6b branch g24_send_abort_packet ,blank 
+
+g24_enter_lpm_prepare:
+2d80 1a60a2da add regc ,offset_24g_cb_lpm_prepare ,rega 
+2d81 ea210000 ifetch 2 ,rega 
+2d82 20207f9c branch callback_func 
+
+g24_lpm_long_sleep:
+2d83 20402c7a call g24_head_ptr2regc 
+2d84 20402afa call lpo_calibration 
+2d85 6801c16f fetch 3 ,mem_clks_per_lpo 
+2d86 207a0000 rtn blank 
+2d87 1a6084dc add regc ,offset_24g_cb_lpm_before ,temp 
+2d88 e8410000 ifetch 2 ,temp 
+2d89 20407f9c call callback_func 
+2d8a 1a6084b6 add regc ,offset_24g_enter_hibernate ,temp 
+2d8b e8440000 ifetch 8 ,temp 
+2d8c 20407f49 call clk2lpo 
+2d8d 600a415b storet 4 ,mem_sleep_counter 
+2d8e 20202b2a branch lpm_sleep 
+
+g24_transmit_packet:
+2d8f 20402c7a call g24_head_ptr2regc 
+2d90 1a608a8f add regc ,offset_24g_retry ,contw 
+2d91 204032d6 call g24_mem_set0 
+
+g24_transmit_loop:
+2d92 20402da4 call g24_transmit_receive_ack 
+2d93 242c2dae nbranch g24_retransmit ,sync 
+2d94 2437adae nbranch g24_retransmit ,user3 
+2d95 20402dd6 call g24_ackpayload_parse 
+2d96 20402e75 call g24_power_ctrl_ack_incrs 
+
+g24_transmit_next_packet:
+2d97 20402c7a call g24_head_ptr2regc 
+2d98 1a60a285 add regc ,offset_24g_pid ,rega 
+2d99 ea208000 ifetch 1 ,rega 
+2d9a 1fe0fe01 increase 1 ,pdata 
+2d9b 20403232 call g24_store_mem_pid 
+2d9c 20403253 call g24_fetch_mem_pairing_sm 
+2d9d c0ffaed0 bne state_24g_pairing_success ,g24_paring_mode 
+2d9e 20402cdb call g24_transmit_succ_rf_config 
+
+g24_transmit_abandon:
+2d9f 58000000 setarg 0 
+2da0 1a608a8c add regc ,offset_24g_txfail_cnt ,contw 
+2da1 e0a10000 istore 2 ,contw 
+2da2 58000000 setarg ensure_off_24g 
+2da3 20202d34 branch g24_store_mem_ensure 
+
+g24_transmit_receive_ack:
+2da4 7857fc00 disable user3 
+2da5 20402df7 call g24_transmit 
+2da6 20402c7a call g24_head_ptr2regc 
+2da7 1a60a2c3 add regc ,offset_24g_no_ack ,rega 
+2da8 ea208000 ifetch 1 ,rega 
+2da9 c000adac beq no_ack_24g ,g24_transmit_no_ack 
+2daa 20402e11 call g24_receive_packet 
+2dab 20202e45 branch g24_end_of_packet 
+
+g24_transmit_no_ack:
+2dac 20402e45 call g24_end_of_packet 
+2dad 20202d97 branch g24_transmit_next_packet 
+
+g24_retransmit:
+2dae 44dac016 bpatch patch16_5 ,mem_patch16 
+2daf 1a60a28d add regc ,offset_24g_get_ack_fail ,rega 
+2db0 ea208000 ifetch 1 ,rega 
+2db1 1fe0fe01 increase 1 ,pdata 
+2db2 1a608a8d add regc ,offset_24g_get_ack_fail ,contw 
+2db3 e0a08000 istore 1 ,contw 
+2db4 20403253 call g24_fetch_mem_pairing_sm 
+2db5 c0ffadcc bne state_24g_pairing_success ,g24_tx_paring_retry 
+2db6 1a60a28f add regc ,offset_24g_retry ,rega 
+2db7 ea288000 ifetcht 1 ,rega 
+2db8 18408401 increase 1 ,temp 
+2db9 1a608a8f add regc ,offset_24g_retry ,contw 
+2dba e0a88000 istoret 1 ,contw 
+2dbb 1a60a2cc add regc ,offset_24g_max_retry ,rega 
+2dbc ea208000 ifetch 1 ,rega 
+2dbd 98467e00 isub temp ,pdata 
+2dbe 243a2d92 nbranch g24_transmit_loop ,blank 
+2dbf 44db4016 bpatch patch16_6 ,mem_patch16 
+2dc0 2040325d call g24_fetch_mem_rf_work_stage 
+2dc1 c001acbe beq 3 ,g24_transmit_pac_fail_hop_stage3 
+2dc2 1a60a2d1 add regc ,offset_24g_hop_pac_retry ,rega 
+2dc3 ea208000 ifetch 1 ,rega 
+2dc4 1fe0fe01 increase 1 ,pdata 
+2dc5 1a608ad1 add regc ,offset_24g_hop_pac_retry ,contw 
+2dc6 e0a08000 istore 1 ,contw 
+2dc7 c0012cb3 beq 2 ,g24_transmit_hop_pac_fail 
+2dc8 20402caf call g24_hop_ch_enable 
+2dc9 58000001 setarg 1 
+2dca 20403238 call g24_store_mem_max_retry 
+2dcb 20202d8f branch g24_transmit_packet 
+
+g24_tx_paring_retry:
+2dcc 1a60a28d add regc ,offset_24g_get_ack_fail ,rega 
+2dcd ea208000 ifetch 1 ,rega 
+2dce c1ff8000 rtnne 0xff 
+2dcf 1a608a8d add regc ,offset_24g_get_ack_fail ,contw 
+2dd0 204032d6 call g24_mem_set0 
+2dd1 20202dd4 branch g24_stop_24g_mode 
+
+g24_tx_attempt_fail:
+2dd2 1a608a8c add regc ,offset_24g_txfail_cnt ,contw 
+2dd3 204032d6 call g24_mem_set0 
+
+g24_stop_24g_mode:
+2dd4 700a993a jam bt_evt_24g_attempt_fail ,mem_fifo_temp 
+2dd5 20207d86 branch ui_ipc_send_event 
+
+g24_ackpayload_parse:
+2dd6 20402dde call g24_read_len_pid_crc 
+2dd7 1a60a284 add regc ,offset_24g_rxdata_length ,rega 
+2dd8 ea208000 ifetch 1 ,rega 
+2dd9 207a0000 rtn blank 
+2dda 98007200 iforce loopcnt 
+2ddb 1a608c02 add regc ,offset_24g_rxbuf_add2 ,contr 
+2ddc 1a608a64 add regc ,offset_24g_rxpayload ,contw 
+2ddd 20207f01 branch memcpy 
+
+g24_read_len_pid_crc:
+2dde 2040325f call g24_fetch_mem_rxbuf_add1 
+2ddf 1fe97e00 rshift3 pdata ,pdata 
+2de0 1a608a84 add regc ,offset_24g_rxdata_length ,contw 
+2de1 e0a08000 istore 1 ,contw 
+2de2 1fe0fe01 increase 1 ,pdata 
+2de3 1a608c01 add regc ,offset_24g_rxbuf_add1 ,contr 
+2de4 98c08c00 iadd contr ,contr 
+2de5 e8c18000 ifetch 3 ,contr 
+2de6 1a608ac4 add regc ,offset_24g_sta_crc ,contw 
+2de7 e0a18000 istore 3 ,contw 
+2de8 2040325f call g24_fetch_mem_rxbuf_add1 
+2de9 1fe37e00 rshift pdata ,pdata 
+2dea 1fe17e03 and pdata ,0x03 ,pdata 
+2deb 1a608aca add regc ,offset_24g_sta_pid ,contw 
+2dec e0a08000 istore 1 ,contw 
+2ded 20600000 rtn 
+
+g24_prep:
+2dee 7844fc00 disable enable_crc 
+2def 7843fc00 disable enable_white 
+2df0 58555555 setarg 0x555555 
+2df1 98001e00 iforce crc24_init 
+2df2 20600000 rtn 
+
+g24_set_freq_tx:
+2df3 20402918 call set_sync_on 
+2df4 1a60a290 add regc ,offset_24g_ch ,rega 
+2df5 ea288000 ifetcht 1 ,rega 
+2df6 20202933 branch set_freq_tx 
+
+g24_transmit:
+2df7 20402dee call g24_prep 
+2df8 20402df3 call g24_set_freq_tx 
+2df9 79202a00 set1 txgfsk ,radio_ctrl 
+2dfa 782efc00 enable encode_fec0 
+2dfb 78307c00 enable is_tx 
+2dfc 7850fc00 disable is_rx 
+2dfd 204053c4 call le_enable 
+2dfe 2040322a call g24_fetch_mem_addr 
+2dff 98001200 iforce access 
+2e00 08008620 inject mod ,32 
+2e01 7824fc00 enable enable_crc 
+2e02 1a60a288 add regc ,offset_24g_txlen ,rega 
+2e03 ea208000 ifetch 1 ,rega 
+2e04 98007200 iforce loopcnt 
+2e05 1a608c42 add regc ,offset_24g_txpayload ,contr 
+
+g24tr_loop:
+2e06 e8c08000 ifetch 1 ,contr 
+2e07 08008608 inject mod ,8 
+2e08 c2002e06 loop g24tr_loop 
+2e09 78247c00 enable enable_parity 
+2e0a 08008618 inject mod ,24 
+2e0b 78447c00 disable enable_parity 
+2e0c 37d38200 until null ,tx_clear 
+2e0d 44dbc016 bpatch patch16_7 ,mem_patch16 
+2e0e 20000064 nop 100 
+2e0f 784efc00 disable encode_fec0 
+2e10 20600000 rtn 
+
+g24_receive_packet:
+2e11 7857fc00 disable user3 
+2e12 18002a00 force 0 ,radio_ctrl 
+2e13 1a60a290 add regc ,offset_24g_ch ,rega 
+2e14 ea288000 ifetcht 1 ,rega 
+2e15 2040291f call set_freq_rx 
+2e16 20402924 call rf_rx_enable 
+
+g24_receive_rxon:
+2e17 20402dee call g24_prep 
+2e18 7826fc00 enable decode_fec0 
+2e19 7830fc00 enable is_rx 
+2e1a 78507c00 disable is_tx 
+2e1b 204053c4 call le_enable 
+2e1c 2040322a call g24_fetch_mem_addr 
+2e1d 98001200 iforce access 
+2e1e 78287c00 enable swfine 
+2e1f 1a60a289 add regc ,offset_24g_rx_window ,rega 
+2e20 ea210000 ifetch 2 ,rega 
+2e21 98003600 iforce stop_watch 
+2e22 37c18400 correlate null ,timeout 
+2e23 242c2e4d nbranch g24_sync_timeout ,sync 
+2e24 7824fc00 enable enable_crc 
+2e25 09800008 parse demod ,bucket ,8 
+2e26 19897e00 rshift3 pwindow ,pdata 
+2e27 1a608a00 add regc ,offset_24g_rxbuf ,contw 
+2e28 e0a08000 istore 1 ,contw 
+2e29 1a60a2cd add regc ,offset_24g_mode ,rega 
+2e2a ea208000 ifetch 1 ,rega 
+2e2b c0012e33 beq rx_24g ,g24_receive_skip 
+2e2c 44dc4017 bpatch patch17_0 ,mem_patch17 
+2e2d 1a60a200 add regc ,offset_24g_rxbuf ,rega 
+2e2e ea208000 ifetch 1 ,rega 
+2e2f 1a60a287 add regc ,offset_24g_data_type ,rega 
+2e30 ea288000 ifetcht 1 ,rega 
+2e31 a8400e00 icompare bits_data ,temp 
+2e32 2420ae45 nbranch g24_end_of_packet ,true 
+
+g24_receive_skip:
+2e33 09800008 parse demod ,bucket ,8 
+2e34 19897e00 rshift3 pwindow ,pdata 
+2e35 e0a08000 istore 1 ,contw 
+2e36 1fe97e00 rshift3 pdata ,pdata 
+2e37 1fe1721f and pdata ,0x1f ,loopcnt 
+2e38 2022ae3d branch g24rx_nopayload ,zero 
+
+g24rx_loop:
+2e39 09800008 parse demod ,bucket ,8 
+2e3a 19897e00 rshift3 pwindow ,pdata 
+2e3b e0a08000 istore 1 ,contw 
+2e3c c2002e39 loop g24rx_loop 
+
+g24rx_nopayload:
+2e3d 09800018 parse demod ,bucket ,24 
+2e3e 1fef7e00 rshift32 pdata ,pdata 
+2e3f 1ff17e00 rshift16 pdata ,pdata 
+2e40 e0a18000 istore 3 ,contw 
+2e41 20232e45 branch g24_end_of_packet ,crc_failed 
+2e42 7837fc00 enable user3 
+2e43 7846fc00 disable decode_fec0 
+2e44 20600000 rtn 
+
+g24_end_of_packet:
+2e45 784efc00 disable encode_fec0 
+2e46 7846fc00 disable decode_fec0 
+2e47 7844fc00 disable enable_crc 
+2e48 7843fc00 disable enable_white 
+2e49 2030a8f9 branch shutdown_radio ,is_rx 
+2e4a 37d38200 until null ,tx_clear 
+2e4b 20000064 nop 100 
+2e4c 202028f9 branch shutdown_radio 
+
+g24_sync_timeout:
+2e4d 20402e4f call rssi_noise 
+2e4e 20202e45 branch g24_end_of_packet 
+
+rssi_noise:
+2e4f 204029bb call save_rssi 
+2e50 207a0000 rtn blank 
+2e51 1a60a2ea add regc ,offset_rssi_noise_index ,rega 
+2e52 ea288000 ifetcht 1 ,rega 
+2e53 da200d9e arg mem_rssi_noise_buffer ,rega 
+2e54 20402e58 call rssi_noise_store 
+2e55 1a608aea add regc ,offset_rssi_noise_index ,contw 
+
+g24_contw_istoret_1byte:
+2e56 e0a88000 istoret 1 ,contw 
+2e57 20600000 rtn 
+
+rssi_noise_store:
+2e58 da4000ff arg rssi_buf_len_noise ,regb 
+2e59 20202e5a branch rssi_store 
+
+rssi_store:
+2e5a 1a227e00 copy rega ,pdata 
+2e5b 98408a00 iadd temp ,contw 
+2e5c 68008018 fetch 1 ,mem_rssi 
+2e5d e0a08000 istore 1 ,contw 
+2e5e 18408401 increase 1 ,temp 
+2e5f 1a427e00 copy regb ,pdata 
+2e60 98410400 iand_into temp 
+2e61 20600000 rtn 
+
+rssi_average:
+2e62 d8400000 arg 0 ,temp 
+2e63 1a220c00 copy rega ,contr 
+
+rssi_average_loop:
+2e64 e8c08000 ifetch 1 ,contr 
+2e65 98408400 iadd temp ,temp 
+2e66 c2002e64 loop rssi_average_loop 
+2e67 184c8400 rshift8 temp ,temp 
+2e68 20600000 rtn 
+
+g24_power_ctrl_init:
+2e69 20402c7a call g24_head_ptr2regc 
+2e6a 20402e9f call g24_power_ctrl_incrs_level1 
+2e6b 58000001 setarg 1 
+2e6c 20403272 call g24_store_mem_power_ctrl_level 
+
+g24_power_ctrl_reinit:
+2e6d 58000000 setarg 0 
+2e6e 20402e73 call g24_store_mem_power_ctrl_pac 
+2e6f e0a08000 istore 1 ,contw 
+2e70 20600000 rtn 
+
+g24_power_ctrl_pac_incrs:
+2e71 20403270 call g24_fetch_mem_power_ctrl_pac 
+2e72 1fe0fe01 increase 1 ,pdata 
+
+g24_store_mem_power_ctrl_pac:
+2e73 1a608afc add regc ,offset_power_ctrl_packet_cnt ,contw 
+2e74 202032b4 branch g24_contw_istore_1byte 
+
+g24_power_ctrl_ack_incrs:
+2e75 1a60a2fd add regc ,offset_power_ctrl_ack_cnt ,rega 
+2e76 ea208000 ifetch 1 ,rega 
+2e77 1fe0fe01 increase 1 ,pdata 
+2e78 1a608afd add regc ,offset_power_ctrl_ack_cnt ,contw 
+2e79 202032b4 branch g24_contw_istore_1byte 
+
+g24_power_ctrl:
+2e7a 44dcc017 bpatch patch17_1 ,mem_patch17 
+2e7b 20403270 call g24_fetch_mem_power_ctrl_pac 
+2e7c 1fe67c7c sub pdata ,power_ctrl_max_packet_cnt ,null 
+2e7d 20610000 rtn positive 
+2e7e 1a60a2fd add regc ,offset_power_ctrl_ack_cnt ,rega 
+2e7f ea288000 ifetcht 1 ,rega 
+2e80 98460400 isub temp ,temp 
+2e81 20402e6d call g24_power_ctrl_reinit 
+2e82 58000102 setarg offset_power_ctrl_threshold_up 
+2e83 9a60a200 iadd regc ,rega 
+2e84 ea208000 ifetch 1 ,rega 
+2e85 98467c00 isub temp ,null 
+2e86 24212e8d nbranch g24_power_ctrl_incrs ,positive 
+2e87 58000103 setarg offset_power_ctrl_threshold_down 
+2e88 9a60a200 iadd regc ,rega 
+2e89 ea208000 ifetch 1 ,rega 
+2e8a 98467c00 isub temp ,null 
+2e8b 20212e99 branch g24_power_ctrl_decrs ,positive 
+2e8c 20600000 rtn 
+
+g24_power_ctrl_incrs:
+2e8d 1a60a2fe add regc ,offset_power_ctrl_level ,rega 
+2e8e ea208000 ifetch 1 ,rega 
+2e8f c0012e93 beq 2 ,g24_power_ctrl_incrs_level2 
+2e90 1fe0fe01 increase 1 ,pdata 
+2e91 20403272 call g24_store_mem_power_ctrl_level 
+2e92 c000ae9f beq 1 ,g24_power_ctrl_incrs_level1 
+
+g24_power_ctrl_incrs_level2:
+2e93 5800000a setarg power_ctrl_losspac_thresh_up2 
+2e94 204032b0 call g24_store_mem_power_ctrl_threshold_up 
+2e95 58000000 setarg power_ctrl_losspac_thresh_down2 
+2e96 204032b2 call g24_store_mem_power_ctrl_threshold_down 
+2e97 1a60a2ff add regc ,offset_power_ctrl_txpwr_level2 ,rega 
+2e98 20202ea5 branch g24_ifetch_rega_store_mem_txpower 
+
+g24_power_ctrl_decrs:
+2e99 1a60a2fe add regc ,offset_power_ctrl_level ,rega 
+2e9a ea208000 ifetch 1 ,rega 
+2e9b c0002ea7 beq 0 ,g24_power_ctrl_decrs_level0 
+2e9c 1fe0ffff increase -1 ,pdata 
+2e9d 20403272 call g24_store_mem_power_ctrl_level 
+2e9e c0002ea7 beq 0 ,g24_power_ctrl_decrs_level0 
+
+g24_power_ctrl_decrs_level1:
+
+g24_power_ctrl_incrs_level1:
+2e9f 58000005 setarg power_ctrl_losspac_thresh_up1 
+2ea0 204032b0 call g24_store_mem_power_ctrl_threshold_up 
+2ea1 58000000 setarg power_ctrl_losspac_thresh_down1 
+2ea2 204032b2 call g24_store_mem_power_ctrl_threshold_down 
+2ea3 58000100 setarg offset_power_ctrl_txpwr_level1 
+
+g24_iadd_offset_mem_txpower:
+2ea4 9a60a200 iadd regc ,rega 
+
+g24_ifetch_rega_store_mem_txpower:
+2ea5 ea208000 ifetch 1 ,rega 
+2ea6 2020326a branch g24_store_mem_txpower 
+
+g24_power_ctrl_decrs_level0:
+2ea7 58000002 setarg power_ctrl_losspac_thresh_up0 
+2ea8 204032b0 call g24_store_mem_power_ctrl_threshold_up 
+2ea9 58000000 setarg power_ctrl_losspac_thresh_down0 
+2eaa 204032b2 call g24_store_mem_power_ctrl_threshold_down 
+2eab 58000101 setarg offset_power_ctrl_txpwr_level0 
+2eac 20202ea4 branch g24_iadd_offset_mem_txpower 
+
+g24_start_pairing_sm1:
+2ead 79200026 set1 mark_24g ,mark 
+2eae 20402c83 call g24_pair_init 
+
+g24_set_pairing_sm_1:
+2eaf 58000001 setarg state_24g_pairing_1 
+2eb0 20203256 branch g24_store_mem_pairing_sm 
+
+g24_pairing_sm:
+2eb1 1a60a28b add regc ,offset_24g_ensure ,rega 
+2eb2 ea208000 ifetch 1 ,rega 
+2eb3 c000ffe7 beq ensure_on_24g ,enable_user 
+2eb4 20403253 call g24_fetch_mem_pairing_sm 
+2eb5 c000aeb9 beq state_24g_pairing_1 ,g24_pairing_sm_1 
+2eb6 c0012ebd beq state_24g_pairing_2 ,g24_pairing_sm_2 
+2eb7 c001aec1 beq state_24g_pairing_3 ,g24_pairing_sm_3 
+2eb8 20202a8c branch assert 
+
+g24_pairing_sm_1:
+2eb9 58000011 setarg state_24g_pairing_1_waiting_ack 
+2eba 20403256 call g24_store_mem_pairing_sm 
+2ebb 70119eaa jam 0xaa ,mem_24g_common_temp 
+2ebc 20202ec4 branch g24_pairing_sm_common 
+
+g24_pairing_sm_2:
+2ebd 58000012 setarg state_24g_pairing_2_waiting_ack 
+2ebe 20403256 call g24_store_mem_pairing_sm 
+2ebf 70119e55 jam 0x55 ,mem_24g_common_temp 
+2ec0 20202ec4 branch g24_pairing_sm_common 
+
+g24_pairing_sm_3:
+2ec1 58000013 setarg state_24g_pairing_3_waiting_ack 
+2ec2 20403256 call g24_store_mem_pairing_sm 
+2ec3 70119e22 jam 0x22 ,mem_24g_common_temp 
+
+g24_pairing_sm_common:
+2ec4 2040323a call g24_fetch_mem_data_type 
+2ec5 1fe17e07 and_into bits_data ,pdata 
+2ec6 6000919f store 1 ,mem_24g_common_temp + 1 
+2ec7 20403224 call g24_fetch_mem_device_addr 
+2ec8 600211a0 store 4 ,mem_24g_common_temp + 2 
+
+g24_put_pairing_data_in_buff:
+2ec9 7011a400 jam 0 ,mem_24g_common_temp + 6 
+2eca da20119e arg mem_24g_common_temp ,rega 
+2ecb d8400007 arg 7 ,temp 
+2ecc 20402d4c call g24_put_data_in_buff 
+2ecd 20402d53 call g24_transmit_prep 
+2ece 20402d33 call g24_txdata_enable_tx 
+2ecf 20207fe7 branch enable_user 
+
+g24_paring_mode:
+2ed0 20403253 call g24_fetch_mem_pairing_sm 
+2ed1 c17f8000 rtneq state_24g_pairing_success 
+2ed2 c008aed6 beq state_24g_pairing_1_waiting_ack ,g24_pairing_sm_1_waiting_ack 
+2ed3 c0092ed9 beq state_24g_pairing_2_waiting_ack ,g24_pairing_sm_2_waiting_ack 
+2ed4 c009aedc beq state_24g_pairing_3_waiting_ack ,g24_pairing_sm_3_waiting_ack 
+2ed5 20600000 rtn 
+
+g24_pairing_sm_1_waiting_ack:
+2ed6 58000002 setarg state_24g_pairing_2 
+2ed7 20403256 call g24_store_mem_pairing_sm 
+2ed8 20202d9f branch g24_transmit_abandon 
+
+g24_pairing_sm_2_waiting_ack:
+2ed9 58000003 setarg state_24g_pairing_3 
+2eda 20403256 call g24_store_mem_pairing_sm 
+2edb 20202d9f branch g24_transmit_abandon 
+
+g24_pairing_sm_3_waiting_ack:
+2edc 580000ff setarg state_24g_pairing_success 
+2edd 20403256 call g24_store_mem_pairing_sm 
+2ede 700a9939 jam bt_evt_24g_pairing_complete ,mem_fifo_temp 
+2edf 20407d86 call ui_ipc_send_event 
+2ee0 1a60a266 add regc ,offset_24g_rxpayload_add2 ,rega 
+2ee1 ea220000 ifetch 4 ,rega 
+2ee2 2040322c call g24_store_mem_addr 
+2ee3 20202d9f branch g24_transmit_abandon 
+
+g24_auto_pair_start:
+2ee4 793f8026 set0 mark_24g ,mark 
+2ee5 20402f08 call g24_auto_pair_set_device_info 
+2ee6 20402f22 call g24_tx_attemp_data_prep 
+
+g24_auto_pair_restart:
+2ee7 20403263 call g24_set0_mem_check_dongle_times 
+
+g24_auto_pair_start_loop:
+2ee8 200007d0 nop 2000 
+2ee9 20403261 call g24_fetch_mem_check_dongle_times 
+2eea c07fadd4 beq 0xff ,g24_stop_24g_mode 
+2eeb 20402da4 call g24_transmit_receive_ack 
+2eec 242c2efa nbranch g24_auto_pair_retry ,sync 
+2eed 2437aefa nbranch g24_auto_pair_retry ,user3 
+2eee 20402dd6 call g24_ackpayload_parse 
+2eef 20402c7a call g24_head_ptr2regc 
+2ef0 1a60a292 add regc ,offset_24g_paring_addr ,rega 
+2ef1 ea2a0000 ifetcht 4 ,rega 
+2ef2 204030be call g24_fetch_mem_addr_isub_temp 
+2ef3 2022aead branch g24_start_pairing_sm1 ,zero 
+2ef4 20402c7a call g24_head_ptr2regc 
+2ef5 1a60a266 add regc ,offset_24g_rxpayload_add2 ,rega 
+2ef6 ea220000 ifetch 4 ,rega 
+2ef7 c0002ee7 beq 0 ,g24_auto_pair_restart 
+2ef8 2040322c call g24_store_mem_addr 
+2ef9 20202f1c branch g24_tx_attemp_dongle_succ 
+
+g24_auto_pair_retry:
+2efa 20403261 call g24_fetch_mem_check_dongle_times 
+2efb 1fe0fe01 increase 1 ,pdata 
+2efc 20403264 call g24_store_mem_check_dongle_times 
+2efd 20402f04 call g24_fetch_mem_auto_paring_switch 
+2efe 1fe0fe01 increase 1 ,pdata 
+2eff 1fe17e01 and_into 1 ,pdata 
+2f00 20402f06 call g24_store_mem_auto_paring_switch 
+2f01 c0002f0c beq 0 ,g24_auto_pair_device_attemp 
+2f02 c000af0e beq 1 ,g24_auto_pair_pair_attemp 
+2f03 20600000 rtn 
+
+g24_fetch_mem_auto_paring_switch:
+2f04 5800018b setarg offset_24g_auto_pair_switch 
+2f05 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_store_mem_auto_paring_switch:
+2f06 da20018b arg offset_24g_auto_pair_switch ,rega 
+2f07 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_auto_pair_set_device_info:
+2f08 20403267 call g24_store_mem_tx_power 
+2f09 20403224 call g24_fetch_mem_device_addr 
+2f0a 2040322c call g24_store_mem_addr 
+2f0b 20202c8a branch g24_ch 
+
+g24_auto_pair_device_attemp:
+2f0c 20402f08 call g24_auto_pair_set_device_info 
+2f0d 20202ee8 branch g24_auto_pair_start_loop 
+
+g24_auto_pair_pair_attemp:
+2f0e 20402c83 call g24_pair_init 
+2f0f 20202ee8 branch g24_auto_pair_start_loop 
+
+g24_start_24g_mode:
+2f10 793f8026 set0 mark_24g ,mark 
+2f11 20402c8a call g24_ch 
+2f12 20403253 call g24_fetch_mem_pairing_sm 
+2f13 c1ff8000 rtnne state_24g_pairing_success 
+2f14 20402f22 call g24_tx_attemp_data_prep 
+2f15 20403263 call g24_set0_mem_check_dongle_times 
+
+g24_tx_attemp_dongle_loop:
+2f16 200007d0 nop 2000 
+2f17 20403261 call g24_fetch_mem_check_dongle_times 
+2f18 c07fadd4 beq 0xff ,g24_stop_24g_mode 
+2f19 20402da4 call g24_transmit_receive_ack 
+2f1a 242c2f27 nbranch g24_attemp_txdata_retry ,sync 
+2f1b 2437af27 nbranch g24_attemp_txdata_retry ,user3 
+
+g24_tx_attemp_dongle_succ:
+2f1c 79200026 set1 mark_24g ,mark 
+2f1d 20403263 call g24_set0_mem_check_dongle_times 
+2f1e 580000ff setarg state_24g_pairing_success 
+2f1f 20403256 call g24_store_mem_pairing_sm 
+2f20 700a993c jam bt_evt_24g_attempt_success ,mem_fifo_temp 
+2f21 20207d86 branch ui_ipc_send_event 
+
+g24_tx_attemp_data_prep:
+2f22 79200027 set1 mark_24g_conext ,mark 
+2f23 70119eff jam 0xff ,mem_24g_common_temp 
+2f24 2040323a call g24_fetch_mem_data_type 
+2f25 20402d77 call g24_put_data_in_buff_pre 
+2f26 20202d53 branch g24_transmit_prep 
+
+g24_attemp_txdata_retry:
+2f27 20403261 call g24_fetch_mem_check_dongle_times 
+2f28 1fe0fe01 increase 1 ,pdata 
+2f29 20403264 call g24_store_mem_check_dongle_times 
+2f2a 20402c8a call g24_ch 
+2f2b 20202f16 branch g24_tx_attemp_dongle_loop 
+
+g24_check_51cmd_start_24g:
+2f2c 20403267 call g24_store_mem_tx_power 
+2f2d 580000ff setarg state_24g_pairing_success 
+2f2e 20403256 call g24_store_mem_pairing_sm 
+2f2f 20202f10 branch g24_start_24g_mode 
+
+dongle_init:
+2f30 44dd4017 bpatch patch17_2 ,mem_patch17 
+2f31 20402c7a call g24_head_ptr2regc 
+2f32 580031b0 setarg dongle_rxdata_type1 
+2f33 1a608ade add regc ,offset_24g_cb_rxdata_type1 ,contw 
+2f34 e0a10000 istore 2 ,contw 
+2f35 20402f3d call g24_receive_init 
+2f36 204048ea call usb_init 
+2f37 204032b6 call g24_fetch_mem_pair_mode 
+2f38 44ddc017 bpatch patch17_3 ,mem_patch17 
+2f39 c0003055 beq 0x00 ,dongle_auto_bind 
+2f3a c000af45 beq 0x01 ,dongle_pc_bind 
+2f3b c007af41 beq 0x0f ,dongle_all_powerful 
+2f3c 20202a8c branch assert 
+
+g24_receive_init:
+2f3d 2040326c call g24_store_mem_tx_power_temp 
+2f3e df200080 arg 0x80 ,loopcnt 
+2f3f d8a00d9e arg mem_rssi_noise_buffer ,contw 
+2f40 20207ec6 branch memset0 
+
+dongle_all_powerful:
+2f41 20402f4c call dongle_check_mode 
+
+dongle_all_powerful_loop:
+2f42 20402f4f call g24_dongle_work_mode 
+2f43 204048d3 call usb_isr 
+2f44 20202f42 branch dongle_all_powerful_loop 
+
+dongle_pc_bind:
+2f45 44de4017 bpatch patch17_4 ,mem_patch17 
+2f46 20402f4c call dongle_check_mode 
+
+dongle_pc_bind_loop:
+2f47 20402f4f call g24_dongle_work_mode 
+2f48 20402fbd call g24_dongle_bind_mode 
+2f49 204048d3 call usb_isr 
+2f4a 20403019 call dongle_usb_dispatch 
+2f4b 20202f47 branch dongle_pc_bind_loop 
+
+dongle_check_mode:
+2f4c 20403291 call g24_set_work_mem_dongle_work_mode 
+2f4d 20403296 call g24_set0_mem_dongle_mode_init 
+2f4e 20203299 branch g24_set0_mem_ackpayload_enable 
+
+g24_dongle_work_mode:
+2f4f 2040328f call g24_fetch_mem_dongle_work_mode 
+2f50 c1800000 rtnne dongle_work 
+
+g24_dongle_work_mode_start:
+2f51 20402f55 call g24_dongle_work_init 
+2f52 20402f65 call g24_ch_process 
+2f53 2040316b call g24_receive_packet_start 
+2f54 20202f96 branch g24_blank_data_process 
+
+g24_dongle_work_init:
+2f55 20403294 call g24_fetch_mem_dongle_mode_init 
+2f56 c3800000 rtnbit1 dongle_work 
+2f57 79207e00 set1 dongle_work ,pdata 
+2f58 20403297 call g24_store_mem_dongle_mode_init 
+2f59 20403267 call g24_store_mem_tx_power 
+2f5a 20403299 call g24_set0_mem_ackpayload_enable 
+2f5b 700d3800 jam 0 ,mem_usb_tx_enable 
+2f5c 2040324f call g24_set1_mem_abort_pac 
+2f5d 20402f61 call g24_dongle_init 
+
+g24_rx_interrupt_clear:
+2f5e 1a608a00 add regc ,offset_24g_rxbuf ,contw 
+2f5f df200042 arg 66 ,loopcnt 
+2f60 20207ed4 branch clear_mem 
+
+g24_dongle_init:
+2f61 20403231 call g24_set0_mem_pid 
+2f62 2040327d call g24_fetch_mem_rx_addr 
+2f63 2040322c call g24_store_mem_addr 
+2f64 20202c8a branch g24_ch 
+
+g24_ch_process:
+2f65 44dec017 bpatch patch17_5 ,mem_patch17 
+2f66 2040324c call g24_fetch_mem_abort_pac 
+2f67 c000af8d beq 1 ,g24_noise_rssi 
+2f68 20403245 call g24_fetch_mem_hop_pac 
+2f69 c000ac8a beq 1 ,g24_ch 
+2f6a 58000136 setarg offset_24g_hop_btclk 
+2f6b 9a60a200 iadd regc ,rega 
+2f6c ea2a0000 ifetcht 4 ,rega 
+2f6d 1c427e00 copy clkn_bt ,pdata 
+2f6e 98467c00 isub temp ,null 
+2f6f 24412d18 ncall g24_timer_timeout ,positive 
+2f70 1fe22400 copy pdata ,regb 
+2f71 58000136 setarg offset_24g_hop_btclk 
+2f72 9a60a200 iadd regc ,rega 
+2f73 ea220000 ifetch 4 ,rega 
+2f74 1fe20400 copy pdata ,temp 
+2f75 5800013a setarg offset_24g_hop_interval 
+2f76 9a60a200 iadd regc ,rega 
+2f77 18427e00 copy temp ,pdata 
+2f78 ea288000 ifetcht 1 ,rega 
+2f79 98408400 iadd temp ,temp 
+2f7a 1a427e00 copy regb ,pdata 
+2f7b 98467c00 isub temp ,null 
+2f7c 24610000 nrtn positive 
+2f7d 793ffe1c set0 28 ,pdata 
+2f7e 58000136 setarg offset_24g_hop_btclk 
+2f7f 9a608a00 iadd regc ,contw 
+2f80 e0a20000 istore 4 ,contw 
+
+g24_ch_update:
+2f81 20402c8a call g24_ch 
+2f82 20403278 call g24_fetch_mem_rf_laststa 
+2f83 1fe0fe01 increase 1 ,pdata 
+2f84 2040327b call g24_store_mem_rf_laststa 
+2f85 c1810000 rtnne 2 
+2f86 2040327a call g24_set0_mem_rf_laststa 
+2f87 2020324f branch g24_set1_mem_abort_pac 
+
+g24_ch_timer_reinit:
+2f88 1c427e00 copy clkn_bt ,pdata 
+2f89 da200136 arg offset_24g_hop_btclk ,rega 
+2f8a 204032bf call g24_set_contw_with_temp 
+2f8b e0a20000 istore 4 ,contw 
+2f8c 2020327a branch g24_set0_mem_rf_laststa 
+
+g24_noise_rssi:
+2f8d da200d9e arg mem_rssi_noise_buffer ,rega 
+2f8e 20402f94 call g24_noise_rssi_average 
+2f8f 1a608aeb add regc ,offset_rssi_noise_avg ,contw 
+2f90 e0a88000 istoret 1 ,contw 
+2f91 18467c50 sub temp ,rssi_thresh_noise ,null 
+2f92 24610000 nrtn positive 
+2f93 20202c8a branch g24_ch 
+
+g24_noise_rssi_average:
+2f94 df200100 arg rssi_buf_len_noise + 1 ,loopcnt 
+2f95 20202e62 branch rssi_average 
+
+g24_blank_data_process:
+2f96 20402f99 call g24_ms_blank_data 
+2f97 20402fa5 call g24_kb_blank_data 
+2f98 20202fb1 branch g24_kb_mul_blank_data 
+
+g24_ms_blank_data:
+2f99 58000180 setarg offset_24g_ms_blank_data_enable 
+2f9a 204032d0 call g24_set_rega_ifetch_1byte 
+2f9b 207a0000 rtn blank 
+2f9c d8e0000b arg timer_ms_blank ,queue 
+2f9d 20407f16 call timer_check 
+2f9e 247a0000 nrtn blank 
+2f9f 204032a7 call g24_set0_mem_ms_blank_data_enable 
+
+g24_ms_blank_data_2usb:
+2fa0 58000001 setarg ms_report_id 
+2fa1 60008d54 store 1 ,mem_usb_mouse_data 
+2fa2 58000000 setarg 0 
+2fa3 e0a38000 istore 7 ,contw 
+2fa4 202031b8 branch g24_data_type1_usbtx_enable 
+
+g24_kb_blank_data:
+2fa5 5800017e setarg offset_24g_kb_blank_data_enable 
+2fa6 204032d0 call g24_set_rega_ifetch_1byte 
+2fa7 207a0000 rtn blank 
+2fa8 d8e0000e arg timer_kb_blank ,queue 
+2fa9 20407f16 call timer_check 
+2faa 247a0000 nrtn blank 
+2fab 204032aa call g24_set0_mem_kb_blank_data_enable 
+
+g24_kb_blank_data_2usb:
+2fac d8a00d64 arg mem_usb_kb_data ,contw 
+2fad df200002 arg 2 ,loopcnt 
+2fae 20407ec6 call memset0 
+2faf 700d6400 jam kb_normal_report_id ,mem_usb_kb_data 
+2fb0 202031ed branch g24_kb_data_into_ep1_fifo 
+
+g24_kb_mul_blank_data:
+2fb1 5800017f setarg offset_24g_kb_mul_blank_data_enable 
+2fb2 204032d0 call g24_set_rega_ifetch_1byte 
+2fb3 207a0000 rtn blank 
+2fb4 d8e0000c arg timer_kb_mul_blank ,queue 
+2fb5 20407f16 call timer_check 
+2fb6 247a0000 nrtn blank 
+2fb7 204032ad call g24_set0_mem_kb_mul_blank_data_enable 
+
+g24_kb_mul_blank_data_2usb:
+2fb8 d8a00d74 arg mem_usb_kb_multikey ,contw 
+2fb9 df200002 arg 2 ,loopcnt 
+2fba 20407ec6 call memset0 
+2fbb 700d7403 jam kb_multikey_report_id ,mem_usb_kb_multikey 
+2fbc 20203207 branch g24_kb_mul_data_into_ep2_fifo 
+
+g24_dongle_bind_mode:
+2fbd 2040328f call g24_fetch_mem_dongle_work_mode 
+2fbe c1808000 rtnne dongle_bind 
+2fbf 20402fc1 call g24_dongle_bind_init 
+2fc0 20202fcb branch g24_dongle_bind_data_process 
+
+g24_dongle_bind_init:
+2fc1 20403294 call g24_fetch_mem_dongle_mode_init 
+2fc2 c3808000 rtnbit1 dongle_bind 
+2fc3 79207e01 set1 dongle_bind ,pdata 
+2fc4 20403297 call g24_store_mem_dongle_mode_init 
+2fc5 2040329c call g24_set1_mem_ackpayload_enable 
+2fc6 20402c83 call g24_pair_init 
+2fc7 58000000 setarg 0 
+2fc8 da200106 arg offset_dongle_ms_bind_step ,rega 
+2fc9 204032bf call g24_set_contw_with_temp 
+2fca 202032c5 branch g24_contw_istore_3byte 
+
+g24_dongle_bind_data_process:
+2fcb 2040316e call g24_receive_transmit_ack 
+2fcc 2437af5e nbranch g24_rx_interrupt_clear ,user3 
+2fcd 1a608c00 add regc ,offset_24g_rxbuf ,contr 
+2fce 58000109 setarg offset_24g_rxdata_temp 
+2fcf 9a608a00 iadd regc ,contw 
+2fd0 df200008 arg 8 ,loopcnt 
+2fd1 20407f01 call memcpy 
+2fd2 5800010b setarg offset_24g_rxdata_temp_add2 
+2fd3 204032d0 call g24_set_rega_ifetch_1byte 
+2fd4 c0552fd9 beq datatype_bind ,g24_dongle_bind_first_step 
+2fd5 c02aafed beq datatype_config ,g24_dongle_bind_second_step 
+2fd6 c0113001 beq datatype_ok ,g24_dongle_bind_third_step 
+2fd7 c07fb212 beq 0xff ,g24_data_attemp 
+2fd8 20202f5e branch g24_rx_interrupt_clear 
+
+g24_dongle_bind_first_step:
+2fd9 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte 
+2fda c000afdd beq bind_mouse ,g24_dongle_bind_first_step_mouse 
+2fdb c0012fe8 beq bind_keyboard ,g24_dongle_bind_first_step_keyboard 
+2fdc 20600000 rtn 
+
+g24_dongle_bind_first_step_mouse:
+2fdd 58000001 setarg 1 
+2fde 20402ff7 call g24_store_mem_ms_bind_step 
+
+g24_dongle_bind_ms_payload_cfg:
+2fdf 58000001 setarg datatype_mouse 
+2fe0 20403289 call g24_store_mem_bind_payload 
+
+g24_dongle_bind_payload_cfg:
+2fe1 58000080 setarg 0x80 
+2fe2 da200130 arg offset_24g_bind_payload_add1 ,rega 
+2fe3 204032b3 call g24_set_contw_with_regb_store_1byte 
+2fe4 2040327d call g24_fetch_mem_rx_addr 
+2fe5 da200131 arg offset_24g_bind_payload_add2 ,rega 
+2fe6 204032bf call g24_set_contw_with_temp 
+2fe7 2020322d branch g24_contw_istore_4byte 
+
+g24_dongle_bind_first_step_keyboard:
+2fe8 58000001 setarg 1 
+2fe9 20402fff call g24_store_mem_kb_bind_step 
+
+g24_dongle_bind_kb_payload_cfg:
+2fea 58000002 setarg datatype_keyboard 
+2feb 20403289 call g24_store_mem_bind_payload 
+2fec 20202fe1 branch g24_dongle_bind_payload_cfg 
+
+g24_dongle_bind_second_step:
+2fed 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte 
+2fee c000aff1 beq bind_mouse ,g24_dongle_bind_second_step_mouse 
+2fef c0012ff9 beq bind_keyboard ,g24_dongle_bind_second_step_keyboard 
+2ff0 20600000 rtn 
+
+g24_dongle_bind_second_step_mouse:
+2ff1 20402fdf call g24_dongle_bind_ms_payload_cfg 
+2ff2 58000106 setarg offset_dongle_ms_bind_step 
+2ff3 204032d0 call g24_set_rega_ifetch_1byte 
+2ff4 c000aff6 beq 1 ,g24_dongle_ms_bind_step_set2 
+2ff5 20600000 rtn 
+
+g24_dongle_ms_bind_step_set2:
+2ff6 58000002 setarg 2 
+
+g24_store_mem_ms_bind_step:
+2ff7 da200106 arg offset_dongle_ms_bind_step ,rega 
+2ff8 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_dongle_bind_second_step_keyboard:
+2ff9 20402fea call g24_dongle_bind_kb_payload_cfg 
+2ffa 58000107 setarg offset_dongle_kb_bind_step 
+2ffb 204032d0 call g24_set_rega_ifetch_1byte 
+2ffc c000affe beq 1 ,g24_dongle_kb_bind_step_set2 
+2ffd 20600000 rtn 
+
+g24_dongle_kb_bind_step_set2:
+2ffe 58000002 setarg 2 
+
+g24_store_mem_kb_bind_step:
+2fff da200107 arg offset_dongle_kb_bind_step ,rega 
+3000 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_dongle_bind_third_step:
+3001 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte 
+3002 c000b005 beq bind_mouse ,g24_dongle_bind_third_step_mouse 
+3003 c0013011 beq bind_keyboard ,g24_dongle_bind_third_step_keyboard 
+3004 20600000 rtn 
+
+g24_dongle_bind_third_step_mouse:
+3005 58000106 setarg offset_dongle_ms_bind_step 
+3006 204032d0 call g24_set_rega_ifetch_1byte 
+3007 c0013009 beq 2 ,g24_dongle_ms_bind_step_success 
+3008 20600000 rtn 
+
+g24_dongle_ms_bind_step_success:
+3009 2040328b call g24_fetch_mem_bind_device_status 
+300a 1fe1fe01 or_into 0x01 ,pdata 
+300b 2040328d call g24_store_mem_bind_device_status 
+
+g24_dongle_bind_exit:
+300c 58000000 setarg 0 
+300d 58000106 setarg offset_dongle_ms_bind_step 
+300e 9a608a00 iadd regc ,contw 
+300f e0a10000 istore 2 ,contw 
+3010 20202f5e branch g24_rx_interrupt_clear 
+
+g24_dongle_bind_third_step_keyboard:
+3011 58000107 setarg offset_dongle_kb_bind_step 
+3012 204032d0 call g24_set_rega_ifetch_1byte 
+3013 c0803015 bne 0 ,g24_dongle_kb_bind_step_success 
+3014 20600000 rtn 
+
+g24_dongle_kb_bind_step_success:
+3015 2040328b call g24_fetch_mem_bind_device_status 
+3016 1fe1fe02 or_into 0x02 ,pdata 
+3017 2040328d call g24_store_mem_bind_device_status 
+3018 2020300c branch g24_dongle_bind_exit 
+
+dongle_usb_dispatch:
+3019 68008d50 fetch 1 ,mem_usb0_get_set_report 
+301a 207a0000 rtn blank 
+301b 700d5000 jam 0 ,mem_usb0_get_set_report 
+301c 68010d4e fetch 2 ,mem_usb_setup_bvalue_temp 
+301d d84002ba arg pc_set_report ,temp 
+301e 98467c00 isub temp ,null 
+301f 24628000 nrtn zero 
+3020 68008cb6 fetch 1 ,mem_usb0_set_report_data 
+3021 c1dd0000 rtnne pc_report_id 
+3022 68008cb7 fetch 1 ,mem_usb0_set_report_data + 1 
+3023 44df4017 bpatch patch17_6 ,mem_patch17 
+3024 c050303b beq command_mode ,dongle_dispose_cmd_mode 
+3025 c050b02c beq command_bind ,dongle_dispose_cmd_bind 
+3026 c0533041 beq command_current_project ,dongle_dispose_cmd_current_project 
+3027 c053b043 beq command_current_mode ,dongle_dispose_cmd_current_mode 
+3028 c054b049 beq command_current_fw_version ,dongle_dispose_cmd_current_fw_version 
+3029 c058304d beq command_user_defined ,dongle_dispose_cmd_user_defined 
+
+usb0_data_ready_report_set0:
+302a 700d4200 jam 0 ,mem_usb0_data_ready_report 
+302b 20600000 rtn 
+
+dongle_dispose_cmd_bind:
+302c 68008cb8 fetch 1 ,mem_usb0_set_report_data + 2 
+302d c000b031 beq com_bind_get ,dongle_dispose_cmd_get_bind 
+302e c0423034 beq com_bind_exit ,dongle_dispose_cmd_exit_bind 
+302f c053b039 beq com_read_mode ,dongle_dispose_cmd_read_mode 
+3030 2020302a branch usb0_data_ready_report_set0 
+
+dongle_dispose_cmd_get_bind:
+3031 2040328b call g24_fetch_mem_bind_device_status 
+3032 60008cf7 store 1 ,mem_usb0_get_report_data + 1 
+3033 2020303f branch usb0_data_ready_report_set1 
+
+dongle_dispose_cmd_exit_bind:
+3034 20403291 call g24_set_work_mem_dongle_work_mode 
+3035 20403296 call g24_set0_mem_dongle_mode_init 
+3036 2040328b call g24_fetch_mem_bind_device_status 
+3037 60008cf7 store 1 ,mem_usb0_get_report_data + 1 
+3038 2020303f branch usb0_data_ready_report_set1 
+
+dongle_dispose_cmd_read_mode:
+
+dongle_dispose_in_bind_mode:
+3039 700cf7a1 jam command_bind ,mem_usb0_get_report_data + 1 
+303a 2020303f branch usb0_data_ready_report_set1 
+
+dongle_dispose_cmd_mode:
+303b 68008cb8 fetch 1 ,mem_usb0_set_report_data + 2 
+303c c040b03e beq com_mode_bind ,dongle_enter_bind_mode 
+303d 2020302a branch usb0_data_ready_report_set0 
+
+dongle_enter_bind_mode:
+303e 20403090 call g24_bind_mode_enable 
+
+usb0_data_ready_report_set1:
+303f 700d4201 jam 1 ,mem_usb0_data_ready_report 
+3040 20600000 rtn 
+
+dongle_dispose_cmd_current_project:
+3041 700cf715 jam product_id ,mem_usb0_get_report_data + 1 
+3042 2020303f branch usb0_data_ready_report_set1 
+
+dongle_dispose_cmd_current_mode:
+3043 2040328f call g24_fetch_mem_dongle_work_mode 
+3044 c0003047 beq dongle_work ,dongle_dispose_in_work_mode 
+3045 c000b039 beq dongle_bind ,dongle_dispose_in_bind_mode 
+3046 20600000 rtn 
+
+dongle_dispose_in_work_mode:
+3047 700cf7a0 jam command_mode ,mem_usb0_get_report_data + 1 
+3048 2020303f branch usb0_data_ready_report_set1 
+
+dongle_dispose_cmd_current_fw_version:
+3049 700cf700 jam fw_version0 ,mem_usb0_get_report_data + 1 
+304a 700cf800 jam fw_version1 ,mem_usb0_get_report_data + 2 
+304b 700cf901 jam fw_version2 ,mem_usb0_get_report_data + 3 
+304c 2020303f branch usb0_data_ready_report_set1 
+
+dongle_dispose_cmd_user_defined:
+304d 2040329c call g24_set1_mem_ackpayload_enable 
+304e 68008cb8 fetch 1 ,mem_usb0_set_report_data + 2 
+304f 1fe0fe02 increase 2 ,pdata 
+3050 1fe27200 copy pdata ,loopcnt 
+3051 d8c00cb6 arg mem_usb0_set_report_data ,contr 
+3052 5800013c setarg offset_24g_ackpayload 
+3053 9a608a00 iadd regc ,contw 
+3054 20207f01 branch memcpy 
+
+dongle_auto_bind:
+3055 44dfc017 bpatch patch17_7 ,mem_patch17 
+3056 2040307d call g24_mode_switch_init 
+
+dongle_auto_bind_loop:
+3057 20402c7f call g24_receive_process 
+3058 204048d3 call usb_isr 
+3059 20203057 branch dongle_auto_bind_loop 
+
+g24_dongle_work_mode_auto:
+305a 2040328f call g24_fetch_mem_dongle_work_mode 
+305b c1800000 rtnne dongle_work 
+305c 20402f51 call g24_dongle_work_mode_start 
+305d 20203098 branch g24_rx_nodata_process 
+
+g24_dongle_bind_mode_auto:
+305e 2040328f call g24_fetch_mem_dongle_work_mode 
+305f c1808000 rtnne dongle_bind 
+3060 20402fc1 call g24_dongle_bind_init 
+3061 20402fcb call g24_dongle_bind_data_process 
+3062 2040328b call g24_fetch_mem_bind_device_status 
+3063 207a0000 rtn blank 
+3064 20403286 call g24_set0_mem_mode_switch 
+3065 20402f4c call dongle_check_mode 
+3066 20403093 call g24_enable_nodata_timer 
+
+g24_timer_init:
+3067 58000000 setarg 0 
+3068 1a608aa7 add regc ,offset_24g_tx_btclk ,contw 
+3069 2020322d branch g24_contw_istore_4byte 
+
+g24_timer_check:
+306a 20407fe9 call disable_user 
+306b 1a60a2a7 add regc ,offset_24g_tx_btclk ,rega 
+306c ea2a0000 ifetcht 4 ,rega 
+306d 1c427e00 copy clkn_bt ,pdata 
+306e 98467c00 isub temp ,null 
+306f 24412d18 ncall g24_timer_timeout ,positive 
+3070 1fe22400 copy pdata ,regb 
+3071 1a60a2a7 add regc ,offset_24g_tx_btclk ,rega 
+3072 ea220000 ifetch 4 ,rega 
+3073 1a60a2ab add regc ,offset_24g_interval ,rega 
+3074 ea288000 ifetcht 1 ,rega 
+3075 98408400 iadd temp ,temp 
+3076 1a427e00 copy regb ,pdata 
+3077 98467c00 isub temp ,null 
+3078 24610000 nrtn positive 
+3079 793ffe1c set0 28 ,pdata 
+307a 1a608aa7 add regc ,offset_24g_tx_btclk ,contw 
+307b e0a20000 istore 4 ,contw 
+307c 20207fe7 branch enable_user 
+
+g24_mode_switch_init:
+307d 58000001 setarg 1 
+307e 20403287 call g24_store_mem_mode_switch 
+307f 20403283 call g24_set0_mem_time_slice 
+3080 580000ff setarg 0xff 
+3081 1a608aab add regc ,offset_24g_interval ,contw 
+3082 e0a08000 istore 1 ,contw 
+3083 20203067 branch g24_timer_init 
+
+g24_mode_switch:
+3084 5800015c setarg offset_24g_mode_switch 
+3085 204032d0 call g24_set_rega_ifetch_1byte 
+3086 207a0000 rtn blank 
+3087 2040306a call g24_timer_check 
+3088 24740000 nrtn user 
+3089 20403281 call g24_fetch_mem_time_slice 
+308a 1fe0fe01 increase 1 ,pdata 
+308b 1fe17e01 and_into 1 ,pdata 
+308c 20403284 call g24_store_mem_time_slice 
+308d c0002f4c beq 0 ,dongle_check_mode 
+308e c000b090 beq 1 ,g24_bind_mode_enable 
+308f 20600000 rtn 
+
+g24_bind_mode_enable:
+3090 58000001 setarg dongle_bind 
+3091 20403292 call g24_store_mem_dongle_work_mode 
+3092 20203296 branch g24_set0_mem_dongle_mode_init 
+
+g24_enable_nodata_timer:
+3093 58000001 setarg 1 
+3094 204032a5 call g24_store_mem_nodata_timer_enable 
+
+g24_enable_nodata_timer_init:
+3095 58000280 setarg timer_nodata_delay 
+3096 d8e00008 arg timer_nodata ,queue 
+3097 20207f08 branch timer_init 
+
+g24_rx_nodata_process:
+3098 204032a2 call g24_fetch_mem_nodata_timer_enable 
+3099 207a0000 rtn blank 
+309a d8e00008 arg timer_nodata ,queue 
+309b 20407f16 call timer_check 
+309c 247a0000 nrtn blank 
+309d 204032a4 call g24_set0_mem_nodata_timer_enable 
+309e 58000007 setarg dongle_search 
+309f 20403292 call g24_store_mem_dongle_work_mode 
+30a0 20403296 call g24_set0_mem_dongle_mode_init 
+30a1 20202f5e branch g24_rx_interrupt_clear 
+
+g24_dongle_search_mode_auto:
+30a2 44e04018 bpatch patch18_0 ,mem_patch18 
+30a3 2040328f call g24_fetch_mem_dongle_work_mode 
+30a4 c1838000 rtnne dongle_search 
+30a5 204030cb call g24_dongle_search_mode_init 
+30a6 204030e0 call g24_rx_auto_addr_ch_search 
+30a7 2040316e call g24_receive_transmit_ack 
+30a8 2437af5e nbranch g24_rx_interrupt_clear ,user3 
+30a9 204030bc call g24_dongle_search_addr_check 
+30aa 2042b172 call g24_receive_packet_parse ,zero 
+30ab 20402f4c call dongle_check_mode 
+30ac 20403294 call g24_fetch_mem_dongle_mode_init 
+30ad 79207e00 set1 dongle_work ,pdata 
+30ae 20403297 call g24_store_mem_dongle_mode_init 
+30af 20402f5e call g24_rx_interrupt_clear 
+30b0 20403093 call g24_enable_nodata_timer 
+30b1 204030bc call g24_dongle_search_addr_check 
+30b2 2022b0c1 branch g24_dg_ch_num_reinit ,zero 
+30b3 58000164 setarg offset_24g_kb_addr 
+30b4 204032d3 call g24_set_rega_ifetcht_4byte 
+30b5 204030be call g24_fetch_mem_addr_isub_temp 
+30b6 2022b0c5 branch g24_kb_ch_num_reinit ,zero 
+30b7 58000160 setarg offset_24g_mouse_addr 
+30b8 204032d3 call g24_set_rega_ifetcht_4byte 
+30b9 204030be call g24_fetch_mem_addr_isub_temp 
+30ba 2022b0c8 branch g24_ms_ch_num_reinit ,zero 
+30bb 20600000 rtn 
+
+g24_dongle_search_addr_check:
+30bc 5800012b setarg offset_24g_rx_addr 
+30bd 204032d3 call g24_set_rega_ifetcht_4byte 
+
+g24_fetch_mem_addr_isub_temp:
+30be 2040322a call g24_fetch_mem_addr 
+30bf 98467c00 isub temp ,null 
+30c0 20600000 rtn 
+
+g24_dg_ch_num_reinit:
+30c1 58000182 setarg offset_24g_dg_ch_number 
+30c2 204032d0 call g24_set_rega_ifetch_1byte 
+
+g24_current_ch_num_reinit:
+30c3 1a608a91 add regc ,offset_24g_current_ch_number ,contw 
+30c4 202032b4 branch g24_contw_istore_1byte 
+
+g24_kb_ch_num_reinit:
+30c5 58000185 setarg offset_24g_kb_ch_number 
+30c6 204032d0 call g24_set_rega_ifetch_1byte 
+30c7 202030c3 branch g24_current_ch_num_reinit 
+
+g24_ms_ch_num_reinit:
+30c8 58000188 setarg offset_24g_ms_ch_number 
+30c9 204032d0 call g24_set_rega_ifetch_1byte 
+30ca 202030c3 branch g24_current_ch_num_reinit 
+
+g24_dongle_search_mode_init:
+30cb 20403294 call g24_fetch_mem_dongle_mode_init 
+30cc c3838000 rtnbit1 dongle_search 
+30cd 79207e07 set1 dongle_search ,pdata 
+30ce 20403297 call g24_store_mem_dongle_mode_init 
+30cf 20403283 call g24_set0_mem_time_slice 
+30d0 2040329c call g24_set1_mem_ackpayload_enable 
+30d1 58000000 setarg 0 
+30d2 1a608af5 add regc ,offset_rssi_noise_dg_index ,contw 
+30d3 e0a18000 istore 3 ,contw 
+30d4 da200183 arg offset_24g_dg_config_ch_once ,rega 
+30d5 204032bf call g24_set_contw_with_temp 
+30d6 e0a38000 istore 7 ,contw 
+30d7 204030bc call g24_dongle_search_addr_check 
+30d8 24628000 nrtn zero 
+30d9 1a60a291 add regc ,offset_24g_current_ch_number ,rega 
+30da ea208000 ifetch 1 ,rega 
+30db da200182 arg offset_24g_dg_ch_number ,rega 
+30dc 204032b3 call g24_set_contw_with_regb_store_1byte 
+30dd 1a60a290 add regc ,offset_24g_ch ,rega 
+30de ea208000 ifetch 1 ,rega 
+30df 2020314a branch g24_store_mem_dg_last_ch 
+
+g24_rx_auto_addr_ch_search:
+30e0 44e0c018 bpatch patch18_1 ,mem_patch18 
+30e1 20403281 call g24_fetch_mem_time_slice 
+30e2 1fe0fe01 increase 1 ,pdata 
+30e3 1fe17e03 and_into 3 ,pdata 
+30e4 20403284 call g24_store_mem_time_slice 
+30e5 c000310e beq 0 ,g24_rx_auto_bind_config_kb 
+30e6 c000b132 beq 1 ,g24_rx_auto_bind_config_dongle 
+30e7 c00130ea beq 2 ,g24_rx_auto_bind_config_mouse 
+30e8 c001b132 beq 3 ,g24_rx_auto_bind_config_dongle 
+30e9 20600000 rtn 
+
+g24_rx_auto_bind_config_mouse:
+30ea 20402fdf call g24_dongle_bind_ms_payload_cfg 
+30eb 58000160 setarg offset_24g_mouse_addr 
+30ec 2040327e call g24_set_rega_ifetch_4byte 
+30ed 203a30e0 branch g24_rx_auto_addr_ch_search ,blank 
+30ee 2040322c call g24_store_mem_addr 
+30ef 58000189 setarg offset_24g_ms_config_ch_once 
+30f0 204032d0 call g24_set_rega_ifetch_1byte 
+30f1 205a3108 call g24_ms_config_ch_once ,blank 
+30f2 58000187 setarg offset_24g_ms_last_ch 
+30f3 204032d0 call g24_set_rega_ifetch_1byte 
+30f4 2040322f call g24_store_mem_ch 
+30f5 1a60a2f7 add regc ,offset_rssi_noise_ms_index ,rega 
+30f6 ea288000 ifetcht 1 ,rega 
+30f7 da200f9e arg mem_rssi_noise_ms_buffer ,rega 
+30f8 20402e58 call rssi_noise_store 
+30f9 1a608af7 add regc ,offset_rssi_noise_ms_index ,contw 
+30fa e0a88000 istoret 1 ,contw 
+30fb 20402f94 call g24_noise_rssi_average 
+30fc 1a608afa add regc ,offset_rssi_noise_ms_avg ,contw 
+30fd e0a88000 istoret 1 ,contw 
+30fe 18467c50 sub temp ,rssi_thresh_noise ,null 
+30ff 24610000 nrtn positive 
+3100 58000188 setarg offset_24g_ms_ch_number 
+3101 20403275 call g24_set_rega_ifetcht_1byte 
+3102 20402c90 call g24_ch_temp_incre_size4 
+3103 da200188 arg offset_24g_ms_ch_number ,rega 
+3104 204032c8 call g24_set_contw_with_regb2 
+3105 e0a88000 istoret 1 ,contw 
+
+g24_store_mem_ms_last_ch:
+3106 da200187 arg offset_24g_ms_last_ch ,rega 
+3107 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_ms_config_ch_once:
+3108 58000001 setarg 1 
+3109 da200189 arg offset_24g_ms_config_ch_once ,rega 
+310a 204032b3 call g24_set_contw_with_regb_store_1byte 
+310b d8400000 arg 0 ,temp 
+310c 20402c94 call g24_ch_calc 
+310d 20203106 branch g24_store_mem_ms_last_ch 
+
+g24_rx_auto_bind_config_kb:
+310e 20402fea call g24_dongle_bind_kb_payload_cfg 
+310f 58000164 setarg offset_24g_kb_addr 
+3110 2040327e call g24_set_rega_ifetch_4byte 
+3111 203a30e0 branch g24_rx_auto_addr_ch_search ,blank 
+3112 2040322c call g24_store_mem_addr 
+3113 58000186 setarg offset_24g_kb_config_ch_once 
+3114 204032d0 call g24_set_rega_ifetch_1byte 
+3115 205a312c call g24_kb_config_ch_once ,blank 
+3116 58000184 setarg offset_24g_kb_last_ch 
+3117 204032d0 call g24_set_rega_ifetch_1byte 
+3118 2040322f call g24_store_mem_ch 
+3119 1a60a2f6 add regc ,offset_rssi_noise_kb_index ,rega 
+311a ea288000 ifetcht 1 ,rega 
+311b da20109e arg mem_rssi_noise_kb_buffer ,rega 
+311c 20402e58 call rssi_noise_store 
+311d 1a608af6 add regc ,offset_rssi_noise_kb_index ,contw 
+311e e0a88000 istoret 1 ,contw 
+311f 20402f94 call g24_noise_rssi_average 
+3120 1a608af9 add regc ,offset_rssi_noise_kb_avg ,contw 
+3121 e0a88000 istoret 1 ,contw 
+3122 18467c50 sub temp ,rssi_thresh_noise ,null 
+3123 24610000 nrtn positive 
+3124 58000185 setarg offset_24g_kb_ch_number 
+3125 20403275 call g24_set_rega_ifetcht_1byte 
+3126 20402c90 call g24_ch_temp_incre_size4 
+3127 da200185 arg offset_24g_kb_ch_number ,rega 
+3128 204032c8 call g24_set_contw_with_regb2 
+3129 e0a88000 istoret 1 ,contw 
+
+g24_store_mem_kb_last_ch:
+312a da200184 arg offset_24g_kb_last_ch ,rega 
+312b 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_kb_config_ch_once:
+312c 58000001 setarg 1 
+312d da200186 arg offset_24g_kb_config_ch_once ,rega 
+312e 204032b3 call g24_set_contw_with_regb_store_1byte 
+312f d8400000 arg 0 ,temp 
+3130 20402c94 call g24_ch_calc 
+3131 2020312a branch g24_store_mem_kb_last_ch 
+
+g24_rx_auto_bind_config_dongle:
+3132 20402fdf call g24_dongle_bind_ms_payload_cfg 
+3133 2040327d call g24_fetch_mem_rx_addr 
+3134 2040322c call g24_store_mem_addr 
+3135 58000183 setarg offset_24g_dg_config_ch_once 
+3136 204032d0 call g24_set_rega_ifetch_1byte 
+3137 205a314c call g24_dg_config_ch_once ,blank 
+3138 2040314f call g24_dg_store_config_ch 
+3139 1a60a2f5 add regc ,offset_rssi_noise_dg_index ,rega 
+313a ea288000 ifetcht 1 ,rega 
+313b da200e9e arg mem_rssi_noise_dg_buffer ,rega 
+313c 20402e58 call rssi_noise_store 
+313d 1a608af5 add regc ,offset_rssi_noise_dg_index ,contw 
+313e e0a88000 istoret 1 ,contw 
+313f 20402f94 call g24_noise_rssi_average 
+3140 1a608af8 add regc ,offset_rssi_noise_dg_avg ,contw 
+3141 e0a88000 istoret 1 ,contw 
+3142 18467c50 sub temp ,rssi_thresh_noise ,null 
+3143 24610000 nrtn positive 
+3144 58000182 setarg offset_24g_dg_ch_number 
+3145 20403275 call g24_set_rega_ifetcht_1byte 
+3146 20402c90 call g24_ch_temp_incre_size4 
+3147 da200182 arg offset_24g_dg_ch_number ,rega 
+3148 204032c8 call g24_set_contw_with_regb2 
+3149 e0a88000 istoret 1 ,contw 
+
+g24_store_mem_dg_last_ch:
+314a da200181 arg offset_24g_dg_last_ch ,rega 
+314b 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_dg_config_ch_once:
+314c 58000001 setarg 1 
+314d da200183 arg offset_24g_dg_config_ch_once ,rega 
+314e 204032b3 call g24_set_contw_with_regb_store_1byte 
+
+g24_dg_store_config_ch:
+314f 58000181 setarg offset_24g_dg_last_ch 
+3150 204032d0 call g24_set_rega_ifetch_1byte 
+3151 2020322f branch g24_store_mem_ch 
+
+g24_transmit_ack:
+3152 1a60a200 add regc ,offset_24g_rxbuf ,rega 
+3153 ea208000 ifetch 1 ,rega 
+3154 2040323c call g24_store_mem_data_type 
+3155 20402dde call g24_read_len_pid_crc 
+3156 2040325f call g24_fetch_mem_rxbuf_add1 
+3157 2feffe00 isolate1 bit_ack_24g ,pdata 
+3158 2020b15c branch g24tx_no_ack ,true 
+
+g24tx_with_ack:
+3159 2040315d call g24_ackpayload_prep 
+315a 20402d53 call g24_transmit_prep 
+315b 20402df7 call g24_transmit 
+
+g24tx_no_ack:
+315c 20202e45 branch g24_end_of_packet 
+
+g24_ackpayload_prep:
+315d 44e14018 bpatch patch18_2 ,mem_patch18 
+315e 1a608a86 add regc ,offset_24g_datalen ,contw 
+315f 204032d6 call g24_mem_set0 
+3160 5800013b setarg offset_24g_ackpayload_enable 
+3161 204032d0 call g24_set_rega_ifetch_1byte 
+3162 207a0000 rtn blank 
+3163 58000006 setarg 0x06 
+3164 1a608a86 add regc ,offset_24g_datalen ,contw 
+3165 e0a08000 istore 1 ,contw 
+3166 df200006 arg 0x06 ,loopcnt 
+3167 5800012f setarg offset_24g_bind_payload 
+3168 9a608c00 iadd regc ,contr 
+3169 1a608a22 add regc ,offset_24g_txbuf ,contw 
+316a 20207f01 branch memcpy 
+
+g24_receive_packet_start:
+316b 2040316e call g24_receive_transmit_ack 
+316c 2437af5e nbranch g24_rx_interrupt_clear ,user3 
+316d 20203172 branch g24_receive_packet_parse 
+
+g24_receive_transmit_ack:
+316e 20402f5e call g24_rx_interrupt_clear 
+316f 20402e11 call g24_receive_packet 
+3170 24778000 nrtn user3 
+3171 20203152 branch g24_transmit_ack 
+
+g24_receive_packet_parse:
+3172 44e1c018 bpatch patch18_3 ,mem_patch18 
+3173 20403188 call g24_receive_packet_parse_pid_crc 
+3174 24342f5e nbranch g24_rx_interrupt_clear ,user 
+3175 1a60a284 add regc ,offset_24g_rxdata_length ,rega 
+3176 ea208000 ifetch 1 ,rega 
+3177 203a2f5e branch g24_rx_interrupt_clear ,blank 
+3178 1fe0fe02 increase 2 ,pdata 
+3179 98007200 iforce loopcnt 
+317a 1a608c00 add regc ,offset_24g_rxbuf ,contr 
+317b 58000109 setarg offset_24g_rxdata_temp 
+317c 9a608a00 iadd regc ,contw 
+317d 20407f01 call memcpy 
+317e 20403286 call g24_set0_mem_mode_switch 
+317f 204032b6 call g24_fetch_mem_pair_mode 
+3180 205a3093 call g24_enable_nodata_timer ,blank 
+3181 5800010b setarg offset_24g_rxdata_temp_add2 
+3182 204032d0 call g24_set_rega_ifetch_1byte 
+3183 c000b19e beq 0x01 ,g24_data_type1 
+3184 c00131c6 beq 0x02 ,g24_data_type2 
+3185 c001b1f2 beq 0x03 ,g24_data_type3 
+3186 c07fb212 beq 0xff ,g24_data_attemp 
+3187 20202f5e branch g24_rx_interrupt_clear 
+
+g24_receive_packet_parse_pid_crc:
+3188 20402c7a call g24_head_ptr2regc 
+3189 20407fe9 call disable_user 
+318a 1a60a2ca add regc ,offset_24g_sta_pid ,rega 
+318b ea208000 ifetch 1 ,rega 
+318c 1a60a2cb add regc ,offset_24g_last_pid ,rega 
+318d ea288000 ifetcht 1 ,rega 
+318e 98467c00 isub temp ,null 
+318f 2442ffe7 ncall enable_user ,zero 
+3190 1a60a2ca add regc ,offset_24g_sta_pid ,rega 
+3191 ea208000 ifetch 1 ,rega 
+3192 1a608acb add regc ,offset_24g_last_pid ,contw 
+3193 e0a08000 istore 1 ,contw 
+3194 1a60a2c4 add regc ,offset_24g_sta_crc ,rega 
+3195 ea218000 ifetch 3 ,rega 
+3196 1a60a2c7 add regc ,offset_24g_last_crc ,rega 
+3197 ea298000 ifetcht 3 ,rega 
+3198 98467c00 isub temp ,null 
+3199 2442ffe7 ncall enable_user ,zero 
+319a 1a60a2c4 add regc ,offset_24g_sta_crc ,rega 
+319b ea218000 ifetch 3 ,rega 
+319c 1a608ac7 add regc ,offset_24g_last_crc ,contw 
+319d 202032c5 branch g24_contw_istore_3byte 
+
+g24_data_type1:
+319e 20402f88 call g24_ch_timer_reinit 
+319f 2040324c call g24_fetch_mem_abort_pac 
+31a0 60008aa2 store 1 ,mem_temp 
+31a1 20403274 call g24_fetcht_mem_rxdata_temp 
+31a2 68008aa2 fetch 1 ,mem_temp 
+31a3 284ffe03 isolate1 bit_abort ,temp 
+31a4 7920fe00 setflag true ,0 ,pdata 
+31a5 1a608ab2 add regc ,offset_24g_abort_pac ,contw 
+31a6 e0a08000 istore 1 ,contw 
+31a7 c000b216 beq 1 ,g24_data_attemp_mouse 
+31a8 20403245 call g24_fetch_mem_hop_pac 
+31a9 20403274 call g24_fetcht_mem_rxdata_temp 
+31aa 284ffe04 isolate1 bit_hop ,temp 
+31ab 7920fe00 setflag true ,0 ,pdata 
+31ac 20403249 call g24_store_mem_hop_pac 
+31ad 1a60a2de add regc ,offset_24g_cb_rxdata_type1 ,rega 
+31ae ea210000 ifetch 2 ,rega 
+31af 20207f9c branch callback_func 
+
+dongle_rxdata_type1:
+31b0 58000001 setarg ms_report_id 
+31b1 60008d54 store 1 ,mem_usb_mouse_data 
+31b2 2040329e call g24_fetch_mem_rxdata_temp_add3_7byte 
+31b3 e0a38000 istore 7 ,contw 
+31b4 2040329e call g24_fetch_mem_rxdata_temp_add3_7byte 
+31b5 245a31bd ncall g24_ms_enable_blank_data_forcibly ,blank 
+31b6 2040329e call g24_fetch_mem_rxdata_temp_add3_7byte 
+31b7 205a31c2 call g24_ms_disable_blank_data_forcibly ,blank 
+
+g24_data_type1_usbtx_enable:
+31b8 700d5220 jam usb_ep2_ms ,mem_usb_ep2_data 
+
+g24_data_type1_usbtx_enable_ep2:
+31b9 68008d38 fetch 1 ,mem_usb_tx_enable 
+31ba 79207e02 set1 2 ,pdata 
+31bb 60008d38 store 1 ,mem_usb_tx_enable 
+31bc 20600000 rtn 
+
+g24_ms_enable_blank_data_forcibly:
+31bd 58000001 setarg 1 
+31be 204032a8 call g24_store_mem_ms_blank_data_enable 
+
+g24_ms_enable_blank_data_timer:
+31bf 58000140 setarg timer_ms_blank_delay 
+31c0 d8e0000b arg timer_ms_blank ,queue 
+31c1 20207f08 branch timer_init 
+
+g24_ms_disable_blank_data_forcibly:
+31c2 204032a7 call g24_set0_mem_ms_blank_data_enable 
+
+g24_ms_disable_blank_data_timer:
+31c3 58000000 setarg 0 
+31c4 d8e0000b arg timer_ms_blank ,queue 
+31c5 20207f08 branch timer_init 
+
+g24_data_type2:
+31c6 20403274 call g24_fetcht_mem_rxdata_temp 
+31c7 284ffe03 isolate1 bit_abort ,temp 
+31c8 2020b21b branch g24_data_attemp_kbd ,true 
+31c9 d8a00d64 arg mem_usb_kb_data ,contw 
+31ca 204031e0 call g24_data_type2_reverse_data 
+31cb 68040d64 fetch 8 ,mem_usb_kb_data 
+31cc 245a31e4 ncall g24_kb_enable_blank_data_forcibly ,blank 
+31cd 68040d64 fetch 8 ,mem_usb_kb_data 
+31ce 205a31e9 call g24_kb_disable_blank_data_forcibly ,blank 
+31cf 20402c7a call g24_head_ptr2regc 
+31d0 68040d64 fetch 8 ,mem_usb_kb_data 
+31d1 da200168 arg offset_24g_kb_data_sta_data ,rega 
+31d2 204032bf call g24_set_contw_with_temp 
+31d3 e0a40000 istore 8 ,contw 
+31d4 58000170 setarg offset_24g_kb_data_last_data 
+31d5 9a60a200 iadd regc ,rega 
+31d6 ea2c0000 ifetcht 8 ,rega 
+31d7 98467c00 isub temp ,null 
+31d8 2442b1ed ncall g24_kb_data_dispose ,zero 
+31d9 58000168 setarg offset_24g_kb_data_sta_data 
+31da 9a60a200 iadd regc ,rega 
+31db ea240000 ifetch 8 ,rega 
+31dc da200170 arg offset_24g_kb_data_last_data ,rega 
+31dd 204032bf call g24_set_contw_with_temp 
+31de e0a40000 istore 8 ,contw 
+31df 20202f5e branch g24_rx_interrupt_clear 
+
+g24_data_type2_reverse_data:
+31e0 5800010b setarg offset_24g_rxdata_temp_add2 
+31e1 9a608c00 iadd regc ,contr 
+31e2 df200009 arg 9 ,loopcnt 
+31e3 20207ff3 branch reverse_byte 
+
+g24_kb_enable_blank_data_forcibly:
+31e4 58000001 setarg 1 
+31e5 204032ab call g24_store_mem_kb_blank_data_enable 
+
+g24_kb_enable_blank_data_timer:
+31e6 58000140 setarg timer_kb_blank_delay 
+31e7 d8e0000e arg timer_kb_blank ,queue 
+31e8 20207f08 branch timer_init 
+
+g24_kb_disable_blank_data_forcibly:
+31e9 204032aa call g24_set0_mem_kb_blank_data_enable 
+
+g24_kb_disable_blank_data_timer:
+31ea 58000000 setarg 0 
+31eb d8e0000e arg timer_kb_blank ,queue 
+31ec 20207f08 branch timer_init 
+
+g24_kb_data_dispose:
+
+g24_kb_data_into_ep1_fifo:
+31ed 700d5110 jam usb_ep1_kb ,mem_usb_ep1_data 
+31ee 68008d38 fetch 1 ,mem_usb_tx_enable 
+31ef 79207e01 set1 1 ,pdata 
+31f0 60008d38 store 1 ,mem_usb_tx_enable 
+31f1 20600000 rtn 
+
+g24_data_type3:
+31f2 d8a00d74 arg mem_usb_kb_multikey ,contw 
+31f3 204031e0 call g24_data_type2_reverse_data 
+31f4 68010d75 fetch 2 ,mem_usb_kb_multikey + 1 
+31f5 245a3209 ncall g24_kb_mul_enable_blank_data_forcibly ,blank 
+31f6 68010d75 fetch 2 ,mem_usb_kb_multikey + 1 
+31f7 205a320e call g24_kb_mul_disable_blank_data_forcibly ,blank 
+31f8 20402c7a call g24_head_ptr2regc 
+31f9 68018d74 fetch 3 ,mem_usb_kb_multikey 
+31fa da200178 arg offset_24g_kb_multikey_sta_data ,rega 
+31fb 204032c4 call g24_set_contw_with_temp_store_3byte 
+31fc 5800017b setarg offset_24g_kb_multikey_last_data 
+31fd 9a60a200 iadd regc ,rega 
+31fe ea298000 ifetcht 3 ,rega 
+31ff 98467c00 isub temp ,null 
+3200 2442b207 ncall g24_kb_mul_data_into_ep2_fifo ,zero 
+3201 58000178 setarg offset_24g_kb_multikey_sta_data 
+3202 9a60a200 iadd regc ,rega 
+3203 ea218000 ifetch 3 ,rega 
+3204 da20017b arg offset_24g_kb_multikey_last_data ,rega 
+3205 204032c4 call g24_set_contw_with_temp_store_3byte 
+3206 20202f5e branch g24_rx_interrupt_clear 
+
+g24_kb_mul_data_into_ep2_fifo:
+3207 700d5221 jam usb_ep2_multikey ,mem_usb_ep2_data 
+3208 202031b9 branch g24_data_type1_usbtx_enable_ep2 
+
+g24_kb_mul_enable_blank_data_forcibly:
+3209 58000001 setarg 1 
+320a 204032ae call g24_store_mem_kb_mul_blank_data_enable 
+
+g24_kb_mul_enable_blank_data_timer:
+320b 58000140 setarg timer_kb_mul_blank_delay 
+320c d8e0000c arg timer_kb_mul_blank ,queue 
+320d 20207f08 branch timer_init 
+
+g24_kb_mul_disable_blank_data_forcibly:
+320e 204032ad call g24_set0_mem_kb_mul_blank_data_enable 
+
+g24_kb_mul_disable_blank_data_timer:
+320f 58000000 setarg 0 
+3210 d8e0000c arg timer_kb_mul_blank ,queue 
+3211 20207f08 branch timer_init 
+
+g24_data_attemp:
+3212 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte 
+3213 c000b216 beq datatype_mouse ,g24_data_attemp_mouse 
+3214 c001321b beq datatype_keyboard ,g24_data_attemp_kbd 
+3215 20600000 rtn 
+
+g24_data_attemp_mouse:
+3216 5800010d setarg offset_24g_rxdata_temp_add4 
+3217 2040327e call g24_set_rega_ifetch_4byte 
+3218 da200160 arg offset_24g_mouse_addr ,rega 
+3219 204032bf call g24_set_contw_with_temp 
+321a 2020322d branch g24_contw_istore_4byte 
+
+g24_data_attemp_kbd:
+321b 5800010d setarg offset_24g_rxdata_temp_add4 
+321c 2040327e call g24_set_rega_ifetch_4byte 
+321d da200164 arg offset_24g_kb_addr ,rega 
+321e 204032bf call g24_set_contw_with_temp 
+321f 2020322d branch g24_contw_istore_4byte 
+
+g24_store_mem_24g_mode:
+3220 20402c7a call g24_head_ptr2regc 
+3221 1a608acd add regc ,offset_24g_mode ,contw 
+3222 e0a08000 istore 1 ,contw 
+3223 20600000 rtn 
+
+g24_fetch_mem_device_addr:
+3224 20402c7a call g24_head_ptr2regc 
+3225 1a60a2be add regc ,offset_24g_device_addr ,rega 
+3226 2020327f branch g24_rega_ifetch_4byte 
+
+g24_store_mem_device_addr:
+3227 20402c7a call g24_head_ptr2regc 
+3228 1a608abe add regc ,offset_24g_device_addr ,contw 
+3229 2020322d branch g24_contw_istore_4byte 
+
+g24_fetch_mem_addr:
+322a 1a60a2ae add regc ,offset_24g_addr ,rega 
+322b 2020327f branch g24_rega_ifetch_4byte 
+
+g24_store_mem_addr:
+322c 1a608aae add regc ,offset_24g_addr ,contw 
+
+g24_contw_istore_4byte:
+322d e0a20000 istore 4 ,contw 
+322e 20600000 rtn 
+
+g24_store_mem_ch:
+322f 1a608a90 add regc ,offset_24g_ch ,contw 
+3230 202032b4 branch g24_contw_istore_1byte 
+
+g24_set0_mem_pid:
+3231 58000000 setarg 0 
+
+g24_store_mem_pid:
+3232 20402c7a call g24_head_ptr2regc 
+3233 1a608a85 add regc ,offset_24g_pid ,contw 
+3234 202032b4 branch g24_contw_istore_1byte 
+
+g24_store_mem_txpayload:
+3235 1a608a42 add regc ,offset_24g_txpayload ,contw 
+3236 202032b4 branch g24_contw_istore_1byte 
+
+g24_set4_mem_max_retry:
+3237 58000004 setarg 4 
+
+g24_store_mem_max_retry:
+3238 1a608acc add regc ,offset_24g_max_retry ,contw 
+3239 202032b4 branch g24_contw_istore_1byte 
+
+g24_fetch_mem_data_type:
+323a 1a60a287 add regc ,offset_24g_data_type ,rega 
+323b 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_store_mem_data_type:
+323c 1a608a87 add regc ,offset_24g_data_type ,contw 
+323d 202032b4 branch g24_contw_istore_1byte 
+
+g24_set2_mem_sync_cnt:
+323e 58000002 setarg 2 
+
+g24_store_mem_sync_cnt:
+323f 1a608ad0 add regc ,offset_24g_sync_cnt ,contw 
+3240 202032b4 branch g24_contw_istore_1byte 
+
+g24_set1_mem_rf_last_sta:
+3241 58000001 setarg 1 
+
+g24_store_mem_rf_last_sta:
+3242 20402c7a call g24_head_ptr2regc 
+3243 1a608ace add regc ,offset_24g_rf_last_sta ,contw 
+3244 202032b4 branch g24_contw_istore_1byte 
+
+g24_fetch_mem_hop_pac:
+3245 20402c7a call g24_head_ptr2regc 
+3246 1a60a2b4 add regc ,offset_24g_hop_pac ,rega 
+3247 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_set1_mem_hop_pac:
+3248 58000001 setarg 1 
+
+g24_store_mem_hop_pac:
+3249 20402c7a call g24_head_ptr2regc 
+324a 1a608ab4 add regc ,offset_24g_hop_pac ,contw 
+324b 202032b4 branch g24_contw_istore_1byte 
+
+g24_fetch_mem_abort_pac:
+324c 20402c7a call g24_head_ptr2regc 
+324d 1a60a2b2 add regc ,offset_24g_abort_pac ,rega 
+324e 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_set1_mem_abort_pac:
+324f 58000001 setarg 1 
+
+g24_store_mem_abort_pac:
+3250 20402c7a call g24_head_ptr2regc 
+3251 1a608ab2 add regc ,offset_24g_abort_pac ,contw 
+3252 202032b4 branch g24_contw_istore_1byte 
+
+g24_fetch_mem_pairing_sm:
+3253 20402c7a call g24_head_ptr2regc 
+3254 1a60a296 add regc ,offset_24g_pairing_sm ,rega 
+3255 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_store_mem_pairing_sm:
+3256 1a608a96 add regc ,offset_24g_pairing_sm ,contw 
+3257 202032b4 branch g24_contw_istore_1byte 
+
+g24_fetch_mem_rf_hop_ch:
+3258 1a60a2cf add regc ,offset_24g_rf_hop_ch ,rega 
+3259 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_set0_mem_rf_hop_ch:
+325a 58000000 setarg 0 
+
+g24_store_mem_rf_hop_ch:
+325b 1a608acf add regc ,offset_24g_rf_hop_ch ,contw 
+325c 202032b4 branch g24_contw_istore_1byte 
+
+g24_fetch_mem_rf_work_stage:
+325d 1a60a2d2 add regc ,offset_24g_rf_work_stage ,rega 
+325e 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_fetch_mem_rxbuf_add1:
+325f 1a60a201 add regc ,offset_24g_rxbuf_add1 ,rega 
+3260 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_fetch_mem_check_dongle_times:
+3261 1a60a2b5 add regc ,offset_24g_check_dongle_times ,rega 
+3262 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_set0_mem_check_dongle_times:
+3263 58000000 setarg 0 
+
+g24_store_mem_check_dongle_times:
+3264 20402c7a call g24_head_ptr2regc 
+3265 1a608ab5 add regc ,offset_24g_check_dongle_times ,contw 
+3266 202032b4 branch g24_contw_istore_1byte 
+
+g24_store_mem_tx_power:
+3267 20402c7a call g24_head_ptr2regc 
+3268 1a60a2fb add regc ,offset_tx_power_temp ,rega 
+3269 ea208000 ifetch 1 ,rega 
+
+g24_store_mem_txpower:
+326a 6000c1de store 1 ,mem_tx_power 
+326b 20600000 rtn 
+
+g24_store_mem_tx_power_temp:
+326c 20402c7a call g24_head_ptr2regc 
+326d 6800c1de fetch 1 ,mem_tx_power 
+326e 1a608afb add regc ,offset_tx_power_temp ,contw 
+326f 202032b4 branch g24_contw_istore_1byte 
+
+g24_fetch_mem_power_ctrl_pac:
+3270 1a60a2fc add regc ,offset_power_ctrl_packet_cnt ,rega 
+3271 202032d1 branch g24_rega_ifetch_1byte 
+
+g24_store_mem_power_ctrl_level:
+3272 1a608afe add regc ,offset_power_ctrl_level ,contw 
+3273 202032b4 branch g24_contw_istore_1byte 
+
+g24_fetcht_mem_rxdata_temp:
+3274 58000109 setarg offset_24g_rxdata_temp 
+
+g24_set_rega_ifetcht_1byte:
+3275 9a60a200 iadd regc ,rega 
+3276 ea288000 ifetcht 1 ,rega 
+3277 20600000 rtn 
+
+g24_fetch_mem_rf_laststa:
+3278 58000135 setarg offset_24g_rf_laststa 
+3279 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_set0_mem_rf_laststa:
+327a 58000000 setarg 0 
+
+g24_store_mem_rf_laststa:
+327b da200135 arg offset_24g_rf_laststa ,rega 
+327c 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_fetch_mem_rx_addr:
+327d 5800012b setarg offset_24g_rx_addr 
+
+g24_set_rega_ifetch_4byte:
+327e 204032cd call g24_set_rega 
+
+g24_rega_ifetch_4byte:
+327f ea220000 ifetch 4 ,rega 
+3280 20600000 rtn 
+
+g24_fetch_mem_time_slice:
+3281 5800015f setarg offset_24g_time_slice 
+3282 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_set0_mem_time_slice:
+3283 58000000 setarg 0 
+
+g24_store_mem_time_slice:
+3284 da20015f arg offset_24g_time_slice ,rega 
+3285 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_set0_mem_mode_switch:
+3286 58000000 setarg 0 
+
+g24_store_mem_mode_switch:
+3287 da20015c arg offset_24g_mode_switch ,rega 
+3288 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_store_mem_bind_payload:
+3289 da20012f arg offset_24g_bind_payload ,rega 
+328a 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_fetch_mem_bind_device_status:
+328b 58000108 setarg offset_dongle_bind_device_status 
+328c 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_store_mem_bind_device_status:
+328d da200108 arg offset_dongle_bind_device_status ,rega 
+328e 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_fetch_mem_dongle_work_mode:
+328f 58000105 setarg offset_dongle_work_mode 
+3290 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_set_work_mem_dongle_work_mode:
+3291 58000000 setarg dongle_work 
+
+g24_store_mem_dongle_work_mode:
+3292 da200105 arg offset_dongle_work_mode ,rega 
+3293 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_fetch_mem_dongle_mode_init:
+3294 58000104 setarg offset_dongle_mode_init 
+3295 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_set0_mem_dongle_mode_init:
+3296 58000000 setarg clear_init 
+
+g24_store_mem_dongle_mode_init:
+3297 da200104 arg offset_dongle_mode_init ,rega 
+3298 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_set0_mem_ackpayload_enable:
+3299 58000000 setarg 0 
+
+g24_store_mem_ackpayload_enable:
+329a da20013b arg offset_24g_ackpayload_enable ,rega 
+329b 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_set1_mem_ackpayload_enable:
+329c 58000001 setarg 1 
+329d 2020329a branch g24_store_mem_ackpayload_enable 
+
+g24_fetch_mem_rxdata_temp_add3_7byte:
+329e 5800010c setarg offset_24g_rxdata_temp_add3 
+329f 204032cd call g24_set_rega 
+32a0 ea238000 ifetch 7 ,rega 
+32a1 20600000 rtn 
+
+g24_fetch_mem_nodata_timer_enable:
+32a2 5800015e setarg offset_24g_nodata_timer_enable 
+32a3 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_set0_mem_nodata_timer_enable:
+32a4 58000000 setarg 0 
+
+g24_store_mem_nodata_timer_enable:
+32a5 da20015e arg offset_24g_nodata_timer_enable ,rega 
+32a6 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_set0_mem_ms_blank_data_enable:
+32a7 58000000 setarg 0 
+
+g24_store_mem_ms_blank_data_enable:
+32a8 da200180 arg offset_24g_ms_blank_data_enable ,rega 
+32a9 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_set0_mem_kb_blank_data_enable:
+32aa 58000000 setarg 0 
+
+g24_store_mem_kb_blank_data_enable:
+32ab da20017e arg offset_24g_kb_blank_data_enable ,rega 
+32ac 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_set0_mem_kb_mul_blank_data_enable:
+32ad 58000000 setarg 0 
+
+g24_store_mem_kb_mul_blank_data_enable:
+32ae da20017f arg offset_24g_kb_mul_blank_data_enable ,rega 
+32af 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_store_mem_power_ctrl_threshold_up:
+32b0 da200102 arg offset_power_ctrl_threshold_up ,rega 
+32b1 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_store_mem_power_ctrl_threshold_down:
+32b2 da200103 arg offset_power_ctrl_threshold_down ,rega 
+
+g24_set_contw_with_regb_store_1byte:
+32b3 204032c7 call g24_set_contw_with_regb 
+
+g24_contw_istore_1byte:
+32b4 e0a08000 istore 1 ,contw 
+32b5 20600000 rtn 
+
+g24_fetch_mem_pair_mode:
+32b6 5800015d setarg offset_24g_pair_mode 
+32b7 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_store_mem_pair_mode:
+32b8 da20015d arg offset_24g_pair_mode ,rega 
+32b9 202032b3 branch g24_set_contw_with_regb_store_1byte 
+
+g24_store_mem_pair_txpower:
+32ba 5800018a setarg offset_24g_pair_txpower 
+32bb 204032d0 call g24_set_rega_ifetch_1byte 
+32bc 2020326a branch g24_store_mem_txpower 
+
+g24_fetch_mem_rxdata_temp_add3_1byte:
+32bd 5800010c setarg offset_24g_rxdata_temp_add3 
+32be 202032d0 branch g24_set_rega_ifetch_1byte 
+
+g24_set_contw_with_temp:
+32bf 1fe20400 copy pdata ,temp 
+32c0 1a227e00 copy rega ,pdata 
+32c1 9a608a00 iadd regc ,contw 
+32c2 18427e00 copy temp ,pdata 
+32c3 20600000 rtn 
+
+g24_set_contw_with_temp_store_3byte:
+32c4 204032bf call g24_set_contw_with_temp 
+
+g24_contw_istore_3byte:
+32c5 e0a18000 istore 3 ,contw 
+32c6 20600000 rtn 
+
+g24_set_contw_with_regb:
+32c7 20402c7a call g24_head_ptr2regc 
+
+g24_set_contw_with_regb2:
+32c8 1fe22400 copy pdata ,regb 
+32c9 1a227e00 copy rega ,pdata 
+32ca 9a608a00 iadd regc ,contw 
+32cb 1a427e00 copy regb ,pdata 
+32cc 20600000 rtn 
+
+g24_set_rega:
+32cd 20402c7a call g24_head_ptr2regc 
+32ce 9a60a200 iadd regc ,rega 
+32cf 20600000 rtn 
+
+g24_set_rega_ifetch_1byte:
+32d0 204032cd call g24_set_rega 
+
+g24_rega_ifetch_1byte:
+32d1 ea208000 ifetch 1 ,rega 
+32d2 20600000 rtn 
+
+g24_set_rega_ifetcht_4byte:
+32d3 204032cd call g24_set_rega 
+32d4 ea2a0000 ifetcht 4 ,rega 
+32d5 20600000 rtn 
+
+g24_mem_set0:
+32d6 58000000 setarg 0 
+32d7 202032b4 branch g24_contw_istore_1byte 
+
+app_init:
+32d8 44e24018 bpatch patch18_4 ,mem_patch18 
+32d9 6800c092 fetch 1 ,mem_device_option 
+32da 203a32d8 branch app_init ,blank 
+32db c0022f30 beq dvc_op_dongle ,dongle_init 
+32dc c007b436 beq dvc_op_antilost ,antilost_init 
+32dd c004c5de beq dvc_op_shutter ,shutter_init 
+32de c005392a beq dvc_op_module ,module_init 
+32df c00735bf beq dvc_op_car ,car_init 
+32e0 c00844a4 beq dvc_op_remote_car ,remote_car_init 
+32e1 c2833d00 bbit1 dvc_op_mouse ,mouse_init 
+32e2 20600000 rtn 
+
+app_lpm_init:
+32e3 44e2c018 bpatch patch18_5 ,mem_patch18 
+32e4 70015100 jam 0 ,mem_tester_emulate 
+32e5 70017f00 jam 0 ,mem_debug_config 
+32e6 70018000 jam 0 ,mem_lch_code 
+32e7 58000000 setarg 0 
+32e8 600289ae store 5 ,mem_sp_state_start 
+32e9 6800c092 fetch 1 ,mem_device_option 
+32ea 203a32e3 branch app_lpm_init ,blank 
+32eb c0053962 beq dvc_op_module ,module_lpm_init 
+
+app_lpm_init0:
+32ec 20600000 rtn 
+
+app_process_idle:
+32ed 20407cd1 call ui_dispatch 
+32ee 20407d9c call check_51cmd 
+32ef 204032f6 call app_process_bb_event 
+32f0 680141f3 fetch 2 ,mem_cb_idle_process 
+32f1 20207f9c branch callback_func 
+
+app_process_bt:
+32f2 680141f1 fetch 2 ,mem_cb_bt_process 
+32f3 20207f9c branch callback_func 
+
+app_process_ble:
+32f4 680141ef fetch 2 ,mem_cb_le_process 
+32f5 20207f9c branch callback_func 
+
+app_process_bb_event:
+32f6 44e34018 bpatch patch18_6 ,mem_patch18 
+32f7 da204668 arg mem_ipc_fifo_bt2c51 ,rega 
+32f8 20407fc4 call fifo_out 
+32f9 207a0000 rtn blank 
+32fa 1fe22600 copy pdata ,regc 
+32fb 204032ff call app_event_normal_process 
+32fc 20203324 branch app_process_bb_event_priority 
+
+app_discard_event:
+32fd da600000 arg 0 ,regc 
+32fe 20600000 rtn 
+
+app_event_normal_process:
+32ff c000b311 beq bt_evt_bb_connected ,app_evt_bt_conn 
+3300 c0083357 beq bt_evt_button_long_pressed ,app_evt_button_long_pressed 
+3301 c002b335 beq bt_evt_setup_complete ,app_evt_setup_complete 
+3302 c009333c beq bt_evt_hid_handshake ,app_evt_hid_handshake 
+3303 c0033353 beq bt_evt_hid_connected ,app_bb_event_hid_connected 
+3304 c0023394 beq bt_evt_reconn_failed ,app_bb_event_reconn_failed 
+3305 c0013399 beq bt_evt_bb_disconnected ,app_bb_event_bb_disconn 
+3306 c009b394 beq bt_evt_reconn_page_timeout ,app_bb_event_reconn_failed 
+3307 c00a334b beq bt_evt_le_connected ,app_le_event_bb_connected 
+3308 c00ab34f beq bt_evt_le_disconnected ,app_le_event_bb_disconn 
+3309 c001b32e beq bt_evt_reconn_started ,app_event_reconn_start 
+330a c005b340 beq bt_evt_enter_sniff ,app_event_enter_sniff 
+330b c0063347 beq bt_evt_exit_sniff ,app_event_exit_sniff 
+330c c00b335b beq bt_evt_ml2cap_conn_refused ,app_event_ml2cap_conn_refused 
+330d c00c332a beq bt_evt_linkkey_generate ,app_event_linkkey_generate 
+330e c015331a beq bt_evt_switch_fail_master ,app_event_switch_fail_master 
+330f c015b318 beq bt_evt_switch_success_master ,app_event_switch_success 
+3310 20600000 rtn 
+
+app_evt_bt_conn:
+3311 68014682 fetch 2 ,mem_ui_state_map 
+3312 79207e00 set1 ui_state_bt_connected ,pdata 
+3313 60014682 store 2 ,mem_ui_state_map 
+3314 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3315 793ffe00 set0 app_disc_by_button ,pdata 
+3316 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3317 20600000 rtn 
+
+app_event_switch_success:
+3318 70022900 jam 0 ,mem_switch_fail_master_count 
+3319 20600000 rtn 
+
+app_event_switch_fail_master:
+331a 68008229 fetch 1 ,mem_switch_fail_master_count 
+331b 1fe0fe01 increase 1 ,pdata 
+331c 60008229 store 1 ,mem_switch_fail_master_count 
+331d 1fe67c01 sub pdata ,1 ,null 
+331e 202133df branch app_bt_role_switch ,positive 
+331f 70022900 jam 0 ,mem_switch_fail_master_count 
+3320 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3321 79207e09 set1 app_disc_switch_fail ,pdata 
+3322 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3323 202033e9 branch app_bt_disconnect 
+
+app_process_bb_event_priority:
+3324 680141f5 fetch 2 ,mem_cb_bb_event_process 
+3325 20207f9c branch callback_func 
+
+app_check_wake_lock:
+3326 680141e9 fetch 2 ,mem_cb_check_wakelock 
+3327 20207f9c branch callback_func 
+
+app_will_enter_lpm:
+3328 680141ed fetch 2 ,mem_cb_before_lpm 
+3329 20207f9c branch callback_func 
+
+app_event_linkkey_generate:
+332a 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+332b 79207e01 set1 app_disc_after_pairing ,pdata 
+332c 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+332d 20203412 branch app_bt_store_reconn_info 
+
+app_event_reconn_start:
+332e 68014682 fetch 2 ,mem_ui_state_map 
+332f 79207e07 set1 ui_state_bt_reconnect ,pdata 
+3330 60014682 store 2 ,mem_ui_state_map 
+3331 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3332 79207e02 set1 app_disc_after_reconn ,pdata 
+3333 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3334 20600000 rtn 
+
+app_evt_setup_complete:
+3335 68014682 fetch 2 ,mem_ui_state_map 
+3336 79207e01 set1 ui_state_bt_setup_complete ,pdata 
+3337 60014682 store 2 ,mem_ui_state_map 
+3338 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3339 79207e04 set1 app_disc_after_setup_done ,pdata 
+333a 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+333b 20600000 rtn 
+
+app_evt_hid_handshake:
+333c 68014682 fetch 2 ,mem_ui_state_map 
+333d 79207e03 set1 ui_state_bt_hid_handshake ,pdata 
+333e 60014682 store 2 ,mem_ui_state_map 
+333f 20600000 rtn 
+
+app_event_enter_sniff:
+3340 68014682 fetch 2 ,mem_ui_state_map 
+3341 79207e05 set1 ui_state_bt_sniff ,pdata 
+3342 60014682 store 2 ,mem_ui_state_map 
+3343 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3344 79207e03 set1 app_disc_after_sniff ,pdata 
+3345 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3346 20600000 rtn 
+
+app_event_exit_sniff:
+3347 68014682 fetch 2 ,mem_ui_state_map 
+3348 793ffe05 set0 ui_state_bt_sniff ,pdata 
+3349 60014682 store 2 ,mem_ui_state_map 
+334a 20600000 rtn 
+
+app_le_event_bb_connected:
+334b 68014682 fetch 2 ,mem_ui_state_map 
+334c 79207e09 set1 ui_state_ble_connected ,pdata 
+334d 60014682 store 2 ,mem_ui_state_map 
+334e 20600000 rtn 
+
+app_le_event_bb_disconn:
+334f 68014682 fetch 2 ,mem_ui_state_map 
+3350 793ffe09 set0 ui_state_ble_connected ,pdata 
+3351 60014682 store 2 ,mem_ui_state_map 
+3352 20203418 branch app_lpm_mult_disable 
+
+app_bb_event_hid_connected:
+3353 68014682 fetch 2 ,mem_ui_state_map 
+3354 79207e02 set1 ui_state_bt_hid_conn ,pdata 
+3355 60014682 store 2 ,mem_ui_state_map 
+3356 20600000 rtn 
+
+app_evt_button_long_pressed:
+3357 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+3358 79207e00 set1 app_disc_by_button ,pdata 
+3359 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+335a 20600000 rtn 
+
+app_event_ml2cap_conn_refused:
+335b 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+335c 79207e08 set1 app_disc_l2cap_refused ,pdata 
+335d 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+335e 202033e9 branch app_bt_disconnect 
+
+app_evt_timer:
+335f 44e3c018 bpatch patch18_7 ,mem_patch18 
+3360 6000822a store 1 ,mem_app_evt_timer_count 
+
+app_evt_100ms_loop:
+3361 6800822a fetch 1 ,mem_app_evt_timer_count 
+3362 207a0000 rtn blank 
+3363 1fe0ffff increase -1 ,pdata 
+3364 6000822a store 1 ,mem_app_evt_timer_count 
+3365 20407cdd call ui_button_polling 
+3366 204033d6 call app_lpm_wake_auto_lock_timer 
+3367 20403387 call app_unsniff_delay_timer 
+3368 2040338d call app_discovery_timer 
+3369 2040651b call flash_write_spi_sm_timer 
+336a 680141fd fetch 2 ,mem_cb_event_timer 
+336b 20407f9c call callback_func 
+336c 20203361 branch app_evt_100ms_loop 
+
+timer_single_step:
+336d ea608000 ifetch 1 ,regc 
+336e 207a0000 rtn blank 
+336f 1fe0ffff pincrease -1 
+3370 e2608000 istore 1 ,regc 
+3371 247a0000 nrtn blank 
+3372 1a427e00 copy regb ,pdata 
+3373 20207f9c branch callback_func 
+
+timer_single_step_2b:
+3374 ea610000 ifetch 2 ,regc 
+3375 207a0000 rtn blank 
+3376 1fe0ffff pincrease -1 
+3377 e2610000 istore 2 ,regc 
+3378 247a0000 nrtn blank 
+3379 1a427e00 copy regb ,pdata 
+337a 20207f9c branch callback_func 
+
+app_power_timer:
+337b 6809423f fetcht 2 ,mem_power_param_ptr 
+337c 1840a601 add temp ,power_timer_offset ,regc 
+337d da40337f arg app_power_timer_timeout ,regb 
+337e 2020336d branch timer_single_step 
+
+app_power_timer_timeout:
+337f 2040342d call app_got_power_state_common 
+3380 c000b382 beq power_starting ,app_enter_power_stanby_state 
+
+app_enter_power_off_state:
+3381 2020340a branch app_enter_hibernate 
+
+app_enter_power_stanby_state:
+3382 58000002 setarg power_standby 
+3383 e2608000 istore 1 ,regc 
+3384 1840a408 add temp ,power_standby_cb_offset ,regb 
+
+app_power_cb_common:
+3385 ea410000 ifetch 2 ,regb 
+3386 20207f9c branch callback_func 
+
+app_unsniff_delay_timer:
+3387 da604205 arg mem_unsniff2sniff_timer_count ,regc 
+3388 da40338a arg app_unsniff_delay_timeout ,regb 
+3389 2020336d branch timer_single_step 
+
+app_unsniff_delay_timeout:
+338a 20402252 call context_check_idle 
+338b 2022b40e branch app_bt_enter_sniff ,zero 
+338c 20600000 rtn 
+
+app_discovery_timer:
+338d da60467e arg mem_discovery_timeout_timer_count ,regc 
+338e da403390 arg app_discovery_timeout ,regb 
+338f 20203374 branch timer_single_step_2b 
+
+app_discovery_timeout:
+3390 204033f0 call app_bt_stop_discovery 
+3391 20403408 call app_led_off 
+3392 680141f7 fetch 2 ,mem_cb_discovry_timeout 
+3393 20207f9c branch callback_func 
+
+app_bb_event_reconn_failed:
+3394 204033ac call app_disconn_reason_flag_clear 
+
+app_clear_reconnect_flag:
+3395 68014682 fetch 2 ,mem_ui_state_map 
+3396 793ffe07 set0 ui_state_bt_reconnect ,pdata 
+3397 60014682 store 2 ,mem_ui_state_map 
+3398 20600000 rtn 
+
+app_bb_event_bb_disconn:
+3399 70420500 jam 0 ,mem_unsniff2sniff_timer_count 
+339a 68014682 fetch 2 ,mem_ui_state_map 
+339b c283b39e bbit1 ui_state_bt_reconnect ,app_bb_event_bb_reconn_disconn 
+339c 2fec0001 isolate0 ui_state_bt_setup_complete ,pdata 
+339d 2040b2fd call app_discard_event ,true 
+
+app_bb_event_bb_reconn_disconn:
+339e 44e44019 bpatch patch19_0 ,mem_patch19 
+339f 68014682 fetch 2 ,mem_ui_state_map 
+33a0 793ffe00 set0 ui_state_bt_connected ,pdata 
+33a1 793ffe01 set0 ui_state_bt_setup_complete ,pdata 
+33a2 793ffe02 set0 ui_state_bt_hid_conn ,pdata 
+33a3 793ffe03 set0 ui_state_bt_hid_handshake ,pdata 
+33a4 793ffe07 set0 ui_state_bt_reconnect ,pdata 
+33a5 60014682 store 2 ,mem_ui_state_map 
+33a6 20203418 branch app_lpm_mult_disable 
+
+app_bb_hibernate:
+33a7 204033a9 call app_disconn_reason_clear 
+33a8 2020340a branch app_enter_hibernate 
+
+app_disconn_reason_clear:
+33a9 58000000 setarg 0 
+33aa 60014208 store app_disc_rsn_size ,mem_app_disconn_reason 
+33ab 20600000 rtn 
+
+app_disconn_reason_flag_clear:
+33ac 58000000 setarg 0 
+33ad 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+33ae 20600000 rtn 
+
+app_disconn_reason_collect_bt:
+33af 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+33b0 60014208 store app_disc_rsn_size ,mem_app_disconn_reason 
+33b1 58000000 setarg 0 
+33b2 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+33b3 20600000 rtn 
+
+app_disconn_reason_collect_ble:
+33b4 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+33b5 79207e07 set1 app_disc_ble ,pdata 
+33b6 60014208 store app_disc_rsn_size ,mem_app_disconn_reason 
+33b7 58000000 setarg 0 
+33b8 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+33b9 20600000 rtn 
+
+app_check_sniff:
+33ba 6800c682 fetch 1 ,mem_ui_state_map 
+33bb 2feffe05 isolate1 ui_state_bt_sniff ,pdata 
+33bc 20600000 rtn 
+
+app_initflag_store:
+33bd 5800aa55 setarg eeprom_init_flag 
+
+app_flag_store:
+33be 60010aaa store 2 ,mem_timeup 
+33bf 44e4c019 bpatch patch19_1 ,mem_patch19 
+33c0 d8400002 arg 2 ,temp 
+33c1 da200aaa arg mem_timeup ,rega 
+33c2 da4000c3 arg eeprom_module_init_flag ,regb 
+33c3 20206606 branch iicd_write_eep_data 
+
+app_initflag_check:
+33c4 44e54019 bpatch patch19_2 ,mem_patch19 
+33c5 d8400002 arg 2 ,temp 
+33c6 da200a9a arg mem_pdatatemp ,rega 
+33c7 da4000c3 arg eeprom_module_init_flag ,regb 
+33c8 204065df call iicd_read_eep_data 
+33c9 68010a9a fetch 2 ,mem_pdatatemp 
+33ca d840aa55 arg eeprom_init_flag ,temp 
+33cb 98467c00 isub temp ,null 
+33cc 20600000 rtn 
+
+app_start_auto_sniff:
+33cd 6800c55a fetch 1 ,mem_unsniff2sniff_timer 
+33ce 6000c205 store 1 ,mem_unsniff2sniff_timer_count 
+33cf 20600000 rtn 
+
+app_get_lpm_wake_lock:
+33d0 d8e00009 arg wake_lock_app ,queue 
+33d1 20202c32 branch lpm_get_wake_lock 
+
+app_put_lpm_wake_lock:
+33d2 d8e00009 arg wake_lock_app ,queue 
+33d3 20202c36 branch lpm_put_wake_lock 
+
+app_lpm_wake_auto_lock:
+33d4 70420605 jam lpm_wake_up_delay_timer ,mem_wake_up_delay_timer 
+33d5 202033d0 branch app_get_lpm_wake_lock 
+
+app_lpm_wake_auto_lock_timer:
+33d6 da604206 arg mem_wake_up_delay_timer ,regc 
+33d7 da4033d2 arg app_put_lpm_wake_lock ,regb 
+33d8 2020336d branch timer_single_step 
+
+app_l2cap_flow_control_enable:
+33d9 70436301 jam l2cap_flow_ctrl_enable ,mem_l2cap_flow_ctrl_flag 
+33da 20600000 rtn 
+
+app_l2cap_flow_control_disable:
+33db 70436300 jam l2cap_flow_ctrl_disable ,mem_l2cap_flow_ctrl_flag 
+33dc 20600000 rtn 
+
+app_bt_set_pincode:
+33dd 700a990a jam bt_cmd_set_pin_code ,mem_fifo_temp 
+33de 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_role_switch:
+33df 700a991d jam bt_cmd_role_switch ,mem_fifo_temp 
+33e0 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_start_reconnect:
+33e1 44e5c019 bpatch patch19_3 ,mem_patch19 
+33e2 6800c207 fetch 1 ,mem_app_connection_options 
+33e3 6000816d store 1 ,mem_connection_options 
+33e4 70022801 jam app_flag_reconnect ,mem_reconnect_flag 
+33e5 700a9903 jam bt_cmd_reconnect ,mem_fifo_temp 
+33e6 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_reconnect_cancel:
+33e7 700a991e jam bt_cmd_bb_reconn_cancel ,mem_fifo_temp 
+33e8 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_disconnect:
+33e9 700a9904 jam bt_cmd_disconnect ,mem_fifo_temp 
+33ea 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_start_discovery_short:
+33eb 68014687 fetch 2 ,mem_discovery_timeout 
+33ec 6001467e store 2 ,mem_discovery_timeout_timer_count 
+
+app_bt_start_discovery_led_blink:
+33ed 20403404 call app_led_start_blink 
+
+app_bt_start_discovery:
+33ee 700a9901 jam bt_cmd_start_discovery ,mem_fifo_temp 
+33ef 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_stop_discovery:
+33f0 58000000 setarg 0 
+33f1 6001467e store 2 ,mem_discovery_timeout_timer_count 
+33f2 700a9902 jam bt_cmd_stop_discovery ,mem_fifo_temp 
+33f3 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_start_direct_adv:
+33f4 700a990f jam bt_cmd_start_direct_adv ,mem_fifo_temp 
+33f5 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_stop_direct_adv:
+33f6 700a9910 jam bt_cmd_stop_direct_adv ,mem_fifo_temp 
+33f7 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_stop_adv:
+33f8 700a990e jam bt_cmd_stop_adv ,mem_fifo_temp 
+33f9 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_start_adv:
+33fa 700a990d jam bt_cmd_start_adv ,mem_fifo_temp 
+33fb 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_start_scan:
+33fc 700a9917 jam bt_cmd_le_start_scan ,mem_fifo_temp 
+33fd 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_stop_scan:
+33fe 700a9918 jam bt_cmd_le_stop_scan ,mem_fifo_temp 
+33ff 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_start_conn:
+3400 700a9916 jam bt_cmd_le_start_conn ,mem_fifo_temp 
+3401 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_disconnect:
+3402 700a9911 jam bt_cmd_le_disconnect ,mem_fifo_temp 
+3403 20207d8f branch ui_ipc_send_cmd 
+
+app_led_start_blink:
+3404 700a9915 jam bt_cmd_led_blink ,mem_fifo_temp 
+3405 20207d8f branch ui_ipc_send_cmd 
+
+app_led_on:
+3406 700a9914 jam bt_cmd_led_on ,mem_fifo_temp 
+3407 20207d8f branch ui_ipc_send_cmd 
+
+app_led_stop_blink:
+
+app_led_off:
+3408 700a9913 jam bt_cmd_led_off ,mem_fifo_temp 
+3409 20207d8f branch ui_ipc_send_cmd 
+
+app_enter_hibernate:
+340a 700a9919 jam bt_cmd_enter_hibernate ,mem_fifo_temp 
+340b 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_sniff_exit:
+340c 700a9906 jam bt_cmd_exit_sniff ,mem_fifo_temp 
+340d 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_enter_sniff:
+340e 700a9905 jam bt_cmd_enter_sniff ,mem_fifo_temp 
+340f 20207d8f branch ui_ipc_send_cmd 
+
+app_ble_store_reconn_info:
+3410 700a991f jam bt_cmd_store_reconn_info_le ,mem_fifo_temp 
+3411 20207d8f branch ui_ipc_send_cmd 
+
+app_bt_store_reconn_info:
+3412 700a9920 jam bt_cmd_store_reconn_info_bt ,mem_fifo_temp 
+3413 20207d8f branch ui_ipc_send_cmd 
+
+app_store_reconn_info:
+3414 700a9925 jam bt_cmd_store_reconn_info ,mem_fifo_temp 
+3415 20207d8f branch ui_ipc_send_cmd 
+
+app_lpm_mult_enable:
+3416 7920000d set1 mark_lpm_mult_enable ,mark 
+3417 20600000 rtn 
+
+app_lpm_mult_disable:
+3418 793f800d set0 mark_lpm_mult_enable ,mark 
+3419 20600000 rtn 
+
+app_button_long_pressed:
+341a 2040342d call app_got_power_state_common 
+341b c0013424 beq power_standby ,app_power_shutting_down 
+
+app_power_starting:
+341c 58000001 setarg power_starting 
+341d e2608000 istore 1 ,regc 
+341e 1840a203 add temp ,power_starting_timeout_offset ,rega 
+341f 1840a406 add temp ,power_starting_cb_offset ,regb 
+
+app_power_common:
+3420 ea288000 ifetcht 1 ,rega 
+3421 1a60a601 increase 1 ,regc 
+3422 e2688000 istoret 1 ,regc 
+3423 20203385 branch app_power_cb_common 
+
+app_power_shutting_down:
+3424 58000000 setarg power_off 
+3425 e2608000 istore 1 ,regc 
+3426 68014682 fetch 2 ,mem_ui_state_map 
+3427 c304b429 bbit0 ui_state_ble_connected ,app_power_off_end 
+3428 20403402 call app_ble_disconnect 
+
+app_power_off_end:
+3429 6809423f fetcht 2 ,mem_power_param_ptr 
+342a 1840a202 add temp ,power_off_timeout_offset ,rega 
+342b 1840a404 add temp ,power_off_cb_offset ,regb 
+342c 20203420 branch app_power_common 
+
+app_got_power_state_common:
+342d 6809423f fetcht 2 ,mem_power_param_ptr 
+342e 1840a600 add temp ,power_state_offset ,regc 
+342f ea608000 ifetch 1 ,regc 
+3430 20600000 rtn 
+
+app_event_button_up:
+3431 2040342d call app_got_power_state_common 
+3432 c0803434 bne power_off ,app_power_release 
+3433 2020340a branch app_enter_hibernate 
+
+app_power_release:
+3434 1840a40a add temp ,ui_butten_up_cb_offset ,regb 
+3435 20203385 branch app_power_cb_common 
+
+antilost_init:
+3436 20758000 rtn wake 
+3437 70808100 jam 0x00 ,core_gpio_sel1 
+3438 58003463 setarg antilost_le_before_hibernate 
+3439 600141eb store 2 ,mem_cb_before_hibernate 
+343a 5800696c setarg keyscan_process_lpm_before 
+343b 600141ed store 2 ,mem_cb_before_lpm 
+343c 580034f5 setarg antilost_idle_process 
+343d 600141f3 store 2 ,mem_cb_idle_process 
+343e 580034f4 setarg antilost_le_conn_process 
+343f 600141ef store 2 ,mem_cb_le_process 
+3440 5800347e setarg antilost_bb_event_process 
+3441 600141f5 store 2 ,mem_cb_bb_event_process 
+3442 580034b2 setarg antilost_le_bb_event_timer 
+3443 600141fd store 2 ,mem_cb_event_timer 
+3444 58003465 setarg antilost_le_notification 
+3445 600141fb store 2 ,mem_cb_ble_transmit 
+3446 58003470 setarg antilost_lpm_lock_process 
+3447 600141e9 store 2 ,mem_cb_check_wakelock 
+3448 58003501 setarg antilost_le_receive_data_process 
+3449 600141f9 store 2 ,mem_cb_att_write 
+344a 44e64019 bpatch patch19_4 ,mem_patch19 
+344b 2040359b call antilost_buzzer_pwm_init 
+344c 20406948 call keyscan_key_init 
+344d 204035ad call antilost_adc_init 
+344e 20407d08 call ui_led_init_global 
+344f 20407cd3 call ui_button_init 
+3450 5800350b setarg antilost_key_up_down 
+3451 60014766 store 2 ,mem_cb_antl_key 
+3452 580034fc setarg antilost_power_off_cb 
+3453 6001475d store 2 ,mem_antl_power_off_cb 
+3454 580034f8 setarg antilost_power_starting_cb 
+3455 6001475f store 2 ,mem_antl_power_starting_cb 
+3456 5800346c setarg antilost_power_standby_cb 
+3457 60014761 store 2 ,mem_antl_power_standby_cb 
+3458 580035a2 setarg antilost_led_on_cb 
+3459 600146a9 store 2 ,mem_antl_led_cb_on 
+345a 580035a4 setarg antilost_led_off_cb 
+345b 600146ab store 2 ,mem_antl_led_cb_off 
+345c 580035a9 setarg antilost_buzzer_on 
+345d 600146b4 store 2 ,mem_antl_buzzer_cb_on 
+345e 580035a6 setarg antilost_buzzer_off 
+345f 600146b6 store 2 ,mem_antl_buzzer_cb_off 
+3460 68014682 fetch 2 ,mem_ui_state_map 
+3461 c3860000 rtnbit1 ui_state_btn_down 
+3462 2020340a branch app_enter_hibernate 
+
+antilost_le_before_hibernate:
+3463 20403586 call antilost_led_buzzer_stop_blink 
+3464 2020340a branch app_enter_hibernate 
+
+antilost_le_notification:
+3465 20405892 call le_fifo_check_nearly_full 
+3466 247a0000 nrtn blank 
+3467 da200b06 arg mem_temp_block5 ,rega 
+3468 20407e54 call queue_pop 
+3469 24740000 nrtn user 
+346a d8c00b06 arg mem_temp_block5 ,contr 
+346b 20204746 branch le_send_notify_from_list 
+
+antilost_power_standby_cb:
+346c 68014797 fetch 2 ,mem_antl_le_sleep_timeout 
+346d 60014791 store 2 ,mem_antl_le_sleep_timer 
+346e 70475301 jam 1 ,mem_antl_key_scan_enable 
+346f 2020358f branch antilost_fast_adv_start 
+
+antilost_lpm_lock_process:
+3470 6800c79d fetch 1 ,mem_antl_key_state 
+3471 c000b479 beq 1 ,antilost_lpm_ctrl_for_led_buzzer 
+3472 68014682 fetch 2 ,mem_ui_state_map 
+3473 c304b479 bbit0 ui_state_ble_connected ,antilost_lpm_ctrl_for_led_buzzer 
+3474 6800c79e fetch 1 ,mem_antl_lost_mode 
+3475 c000b3d0 beq 1 ,app_get_lpm_wake_lock 
+3476 6800c700 fetch 1 ,mem_antl_queue_curr_num 
+3477 243a33d0 nbranch app_get_lpm_wake_lock ,blank 
+3478 202033d2 branch app_put_lpm_wake_lock 
+
+antilost_lpm_ctrl_for_led_buzzer:
+3479 6800c79b fetch 1 ,mem_antl_led_state 
+347a 6808c79c fetcht 1 ,mem_antl_buzzer_state 
+347b 9841fe00 ior temp ,pdata 
+347c c000b3d0 beq 1 ,app_get_lpm_wake_lock 
+347d 202033d2 branch app_put_lpm_wake_lock 
+
+antilost_bb_event_process:
+347e 1a627e00 copy regc ,pdata 
+347f c016b431 beq bt_evt_button_up ,app_event_button_up 
+3480 c008341a beq bt_evt_button_long_pressed ,app_button_long_pressed 
+3481 c00a34df beq bt_evt_le_connected ,antilost_le_process_conn 
+3482 c00ab4e8 beq bt_evt_le_disconnected ,antilost_le_process_discon 
+3483 c0203485 beq bt_evt_le_parse_conn_papa_update_rsp ,antilost_le_conn_param_update_rsp_recieved 
+3484 20600000 rtn 
+
+antilost_le_conn_param_update_rsp_recieved:
+3485 68014509 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 
+3486 c000b48c beq ble_signaling_connect_parameter_update_rejected ,antilost_le_conn_param_rejected 
+
+antilost_le_conn_param_accepted:
+3487 680143d8 fetch 2 ,mem_le_new_connslavelatency 
+3488 203a34a2 branch antilost_master_nonsupport_latency ,blank 
+
+antilost_le_conn_param_updata_procedure_sucsess:
+3489 70478a02 jam conn_param_updata_procedure_complete ,mem_antl_conn_updata_procedure_state 
+348a 70478f3c jam 60 ,mem_antl_conn_update_timer 
+348b 20600000 rtn 
+
+antilost_le_conn_param_rejected:
+348c 6801449a fetch 2 ,mem_le_latency 
+348d 203a34a0 branch antilost_conn_param_updata_procedure_faild ,blank 
+
+antilost_conn_param_retransimiting:
+348e 70478a01 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state 
+348f 680947b4 fetcht 2 ,mem_interval_increment 
+3490 68014496 fetch 2 ,mem_le_interval_min 
+3491 9840fe00 iadd temp ,pdata 
+3492 60014496 store 2 ,mem_le_interval_min 
+3493 1fe22200 copy pdata ,rega 
+3494 68014498 fetch 2 ,mem_le_interval_max 
+3495 9840fe00 iadd temp ,pdata 
+3496 60014498 store 2 ,mem_le_interval_max 
+3497 9a20fe00 iadd rega ,pdata 
+3498 1fe30400 rshift pdata ,temp 
+3499 680147c0 fetch 2 ,mem_antl_le_unnormal_interval_max 
+349a 9846fc00 idiv temp 
+349b 20407f86 call wait_div_end 
+349c 1807fe00 quotient pdata 
+349d 6001449a store 2 ,mem_le_latency 
+349e 70479001 jam 1 ,mem_antl_send_updata_le_param_timer 
+349f 20600000 rtn 
+
+antilost_conn_param_updata_procedure_faild:
+34a0 70478a03 jam conn_param_updata_procedure_faild ,mem_antl_conn_updata_procedure_state 
+34a1 20600000 rtn 
+
+antilost_master_nonsupport_latency:
+34a2 70417200 jam 0 ,mem_lpm_mult 
+34a3 70479000 jam 0 ,mem_antl_send_updata_le_param_timer 
+34a4 680143d6 fetch 2 ,mem_le_new_conninterval 
+34a5 680947be fetcht 2 ,mem_antl_le_unnormal_interval_min 
+34a6 98467c00 isub temp ,null 
+34a7 79212200 setflag positive ,0 ,rega 
+34a8 680147c0 fetch 2 ,mem_antl_le_unnormal_interval_max 
+34a9 680943d6 fetcht 2 ,mem_le_new_conninterval 
+34aa 98467e00 isub temp ,pdata 
+34ab 79212201 setflag positive ,1 ,rega 
+34ac 2a200603 compare 0x03 ,rega ,0x03 
+34ad 20608000 rtn true 
+34ae 680447be fetch 8 ,mem_antl_le_unnormal_interval_min 
+34af 60044496 store 8 ,mem_le_interval_min 
+34b0 70479001 jam 1 ,mem_antl_send_updata_le_param_timer 
+34b1 20600000 rtn 
+
+antilost_le_bb_event_timer:
+34b2 2040337b call app_power_timer 
+34b3 204034b9 call antilost_double_click_timer 
+34b4 204034be call antilost_le_fast_adv_timer 
+34b5 204034d5 call antilost_le_sleep_timer 
+34b6 204034ca call antilost_app_updata_le_param_timer 
+34b7 204034c4 call antilost_conn_update_timer 
+34b8 202034d9 branch antilost_adc_check_timer 
+
+antilost_double_click_timer:
+34b9 da604799 arg mem_double_click_timer ,regc 
+34ba da4034bc arg antilost_double_click_timeout ,regb 
+34bb 2020336d branch timer_single_step 
+
+antilost_double_click_timeout:
+34bc 70479a00 jam 0 ,mem_butten_click_cnt 
+34bd 20600000 rtn 
+
+antilost_le_fast_adv_timer:
+34be da604793 arg mem_antl_fast_adv_timer ,regc 
+34bf da4034c1 arg antilost_le_fast_adv_timeout ,regb 
+34c0 20203374 branch timer_single_step_2b 
+
+antilost_le_fast_adv_timeout:
+34c1 da6046bf arg mem_antl_slow_adv_led_style ,regc 
+34c2 da40469e arg mem_antl_slow_adv_lpm_interval ,regb 
+34c3 20203591 branch antilost_adv_start_common 
+
+antilost_conn_update_timer:
+34c4 da60478f arg mem_antl_conn_update_timer ,regc 
+34c5 da4034c7 arg antilost_conn_update_timer_time_out ,regb 
+34c6 2020336d branch timer_single_step 
+
+antilost_conn_update_timer_time_out:
+34c7 6801449a fetch 2 ,mem_le_latency 
+34c8 6000c172 store 1 ,mem_lpm_mult 
+34c9 20600000 rtn 
+
+antilost_app_updata_le_param_timer:
+34ca da604790 arg mem_antl_send_updata_le_param_timer ,regc 
+34cb da4034cd arg antilost_app_updata_le_param_timeout ,regb 
+34cc 2020336d branch timer_single_step 
+
+antilost_app_updata_le_param_timeout:
+34cd 6800843f fetch 1 ,mem_le_state 
+34ce 2fe0c000 compare 0 ,pdata ,0x60 
+34cf 2420b4d3 nbranch antilost_wait_for_updata_param_instant_expire ,true 
+34d0 70478a01 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state 
+34d1 20403416 call app_lpm_mult_enable 
+34d2 20205abf branch le_l2cap_tx_update_req 
+
+antilost_wait_for_updata_param_instant_expire:
+34d3 70479001 jam 1 ,mem_antl_send_updata_le_param_timer 
+34d4 20600000 rtn 
+
+antilost_le_sleep_timer:
+34d5 da604791 arg mem_antl_le_sleep_timer ,regc 
+34d6 da4034d8 arg antilost_le_sleep_timer_timeout ,regb 
+34d7 20203374 branch timer_single_step_2b 
+
+antilost_le_sleep_timer_timeout:
+34d8 2020341a branch app_button_long_pressed 
+
+antilost_adc_check_timer:
+34d9 da60478d arg mem_adc_timer ,regc 
+34da da4034dc arg antilost_adc_check_timer_timeout ,regb 
+34db 20203374 branch timer_single_step_2b 
+
+antilost_adc_check_timer_timeout:
+34dc 680147a7 fetch 2 ,mem_adc_timeout 
+34dd 6001478d store 2 ,mem_adc_timer 
+34de 202035af branch antilost_battery_process 
+
+antilost_le_process_conn:
+34df 680147a7 fetch 2 ,mem_adc_timeout 
+34e0 6001478d store 2 ,mem_adc_timer 
+34e1 58000000 setarg 0 
+34e2 60014793 store 2 ,mem_antl_fast_adv_timer 
+34e3 60014791 store 2 ,mem_antl_le_sleep_timer 
+34e4 2040355c call antilost_alert_off 
+34e5 20403586 call antilost_led_buzzer_stop_blink 
+34e6 70417200 jam 0 ,mem_lpm_mult 
+34e7 202033f8 branch app_ble_stop_adv 
+
+antilost_le_process_discon:
+34e8 58000000 setarg 0 
+34e9 6002478d store 4 ,mem_adc_timer 
+34ea 6001c78a store 3 ,mem_antl_conn_updata_procedure_state 
+34eb 60014509 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 
+34ec 7047a001 jam 1 ,mem_alarm_config_notfy_cnt 
+34ed 68014797 fetch 2 ,mem_antl_le_sleep_timeout 
+34ee 60014791 store 2 ,mem_antl_le_sleep_timer 
+34ef 20407e38 call queue_init 
+34f0 6800c759 fetch 1 ,mem_antl_power_state 
+34f1 c1000000 rtneq power_off 
+34f2 2040358f call antilost_fast_adv_start 
+34f3 2020356e branch antilost_on_off_alarm_after_disconn 
+
+antilost_le_conn_process:
+34f4 20203508 branch antilost_key_process 
+
+antilost_idle_process:
+34f5 6800c759 fetch 1 ,mem_antl_power_state 
+34f6 c1810000 rtnne power_standby 
+34f7 20203508 branch antilost_key_process 
+
+antilost_power_starting_cb:
+34f8 da6046cd arg mem_antl_power_starting_buzzer_style ,regc 
+34f9 20403582 call antilost_buzzer_configuration 
+34fa da6046c6 arg mem_antl_power_starting_led_style ,regc 
+
+antilost_power_common:
+34fb 20203584 branch antilost_led_configuration 
+
+antilost_power_off_cb:
+34fc 70436e00 jam off ,mem_le_adv_enable 
+34fd da6046db arg mem_antl_power_off_buzzer_style ,regc 
+34fe 20403582 call antilost_buzzer_configuration 
+34ff da6046d4 arg mem_antl_power_off_led_style ,regc 
+3500 202034fb branch antilost_power_common 
+
+antilost_le_receive_data_process:
+3501 68008477 fetch 1 ,mem_le_att_opcode 
+3502 c0093504 beq attop_write_request ,antilost_le_parse_att_write_request 
+3503 20600000 rtn 
+
+antilost_le_parse_att_write_request:
+3504 68010478 fetch 2 ,mem_le_att_handle 
+3505 c006b536 beq new_spec_write_handle ,antilost_cmd_parse_for_application 
+3506 c005b571 beq new_spec_notification_enable_handle ,antilost_notify_alarm_config_first_time 
+3507 20600000 rtn 
+
+antilost_key_process:
+3508 6800c753 fetch 1 ,mem_antl_key_scan_enable 
+3509 207a0000 rtn blank 
+350a 20206978 branch keyscan_key_process 
+
+antilost_key_up_down:
+350b 1a227e00 copy rega ,pdata 
+350c 203a3510 branch antilost_key_is_up ,blank 
+
+antilost_key_is_down:
+350d 18e27e00 copy queue ,pdata 
+350e c0003513 beq 0 ,antilost_key0_down 
+350f 20600000 rtn 
+
+antilost_key_is_up:
+3510 18e27e00 copy queue ,pdata 
+3511 c000351b beq 0 ,antilost_key0_up 
+3512 20600000 rtn 
+
+antilost_key0_down:
+3513 70479d01 jam 1 ,mem_antl_key_state 
+3514 da6046f7 arg mem_antl_key_buzzer_style ,regc 
+3515 20403582 call antilost_buzzer_configuration 
+3516 da6046f0 arg mem_antl_key_led_style ,regc 
+3517 20403584 call antilost_led_configuration 
+3518 68014682 fetch 2 ,mem_ui_state_map 
+3519 c304b532 bbit0 ui_state_ble_connected ,antilost_butten_down_while_disconn 
+351a 20203521 branch antilost_butten_down_after_conn 
+
+antilost_key0_up:
+351b 70479d00 jam 0 ,mem_antl_key_state 
+351c 2020351d branch antilost_double_click_timer_init 
+
+antilost_double_click_timer_init:
+351d 6800c79a fetch 1 ,mem_butten_click_cnt 
+351e c1808000 rtnne 1 
+351f 70479905 jam 5 ,mem_double_click_timer 
+3520 20600000 rtn 
+
+antilost_butten_down_after_conn:
+3521 6800c79a fetch 1 ,mem_butten_click_cnt 
+3522 1fe0fe01 pincrease 1 
+3523 6000c79a store 1 ,mem_butten_click_cnt 
+3524 c000b527 beq 1 ,antilost_click_once 
+3525 c001352b beq 2 ,antilost_click_twice 
+3526 20600000 rtn 
+
+antilost_click_once:
+3527 2040355c call antilost_alert_off 
+3528 70477101 jam opcode1_butten_click_once ,mem_antl_key0_press + 5 
+3529 da60476c arg mem_antl_key0_press ,regc 
+352a 20203544 branch antilost_prepare_data_and_send 
+
+antilost_click_twice:
+352b 70479a00 jam 0 ,mem_butten_click_cnt 
+352c 70477102 jam opcode2_butten_double_click ,mem_antl_key0_press + 5 
+352d da60476c arg mem_antl_key0_press ,regc 
+352e 20403544 call antilost_prepare_data_and_send 
+352f 6800c79e fetch 1 ,mem_antl_lost_mode 
+3530 c000b551 beq 1 ,antilost_alert_on 
+3531 20600000 rtn 
+
+antilost_butten_down_while_disconn:
+3532 68014797 fetch 2 ,mem_antl_le_sleep_timeout 
+3533 60014791 store 2 ,mem_antl_le_sleep_timer 
+3534 2040355c call antilost_alert_off 
+3535 2020358f branch antilost_fast_adv_start 
+
+antilost_cmd_parse_for_application:
+3536 44e6c019 bpatch patch19_5 ,mem_patch19 
+3537 204036fc call le_app_receive_data 
+3538 ea208000 ifetch 1 ,rega 
+3539 c001b53c beq opcode3_antl_start_alram ,antilost_on_of_alram 
+353a c003b540 beq opcode7_antl_config_alram ,antilost_configuration_for_alram 
+353b 20600000 rtn 
+
+antilost_on_of_alram:
+353c 6800c79e fetch 1 ,mem_antl_lost_mode 
+353d c0003551 beq anti_le_alarm_off ,antilost_alert_on 
+353e c000b55c beq anti_le_alarm_on ,antilost_alert_off 
+353f 20600000 rtn 
+
+antilost_configuration_for_alram:
+3540 ea408000 ifetch 1 ,regb 
+3541 c000b564 beq 1 ,antilost_set_start_alarm_after_disconn 
+3542 c0003569 beq 0 ,antilost_set_no_alarm_after_disconn 
+3543 20600000 rtn 
+
+antilost_prepare_data_and_send:
+3544 44e74019 bpatch patch19_6 ,mem_patch19 
+3545 6800c78b fetch 1 ,mem_client_characteristic_configuration_descriptor 
+3546 2feffe00 isolate1 notification_enable_bit ,pdata 
+3547 24608000 nrtn true 
+3548 1a608c06 add regc ,6 ,contr 
+3549 e8c10000 ifetch 2 ,contr 
+354a 1ff0fe00 byteswap pdata ,pdata 
+354b 1fe0f205 add pdata ,5 ,loopcnt 
+354c 1a608c03 add regc ,3 ,contr 
+354d 204036f0 call calc_check_sum_start 
+354e e0c08000 istore 1 ,contr 
+354f 1a622200 copy regc ,rega 
+3550 20207e3d branch queue_push 
+
+antilost_alert_on:
+3551 6800c759 fetch 1 ,mem_antl_power_state 
+3552 207a0000 rtn blank 
+3553 70479e01 jam 1 ,mem_antl_lost_mode 
+3554 da6046e9 arg mem_antl_alert_buzzer_stlye ,regc 
+3555 20403582 call antilost_buzzer_configuration 
+3556 da6046e2 arg mem_antl_alert_led_stlye ,regc 
+3557 20403584 call antilost_led_configuration 
+3558 70478004 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 
+3559 70478301 jam 1 ,mem_antl_key0_release + 8 
+355a da60477b arg mem_antl_key0_release ,regc 
+355b 20203544 branch antilost_prepare_data_and_send 
+
+antilost_alert_off:
+355c 6800c79e fetch 1 ,mem_antl_lost_mode 
+355d 207a0000 rtn blank 
+355e 70479e00 jam 0 ,mem_antl_lost_mode 
+355f 20403586 call antilost_led_buzzer_stop_blink 
+3560 70478004 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 
+3561 70478300 jam 0 ,mem_antl_key0_release + 8 
+3562 da60477b arg mem_antl_key0_release ,regc 
+3563 20203544 branch antilost_prepare_data_and_send 
+
+antilost_set_start_alarm_after_disconn:
+3564 70479f01 jam 1 ,mem_alarm_config 
+3565 70478007 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 
+3566 70478301 jam 1 ,mem_antl_key0_release + 8 
+3567 da60477b arg mem_antl_key0_release ,regc 
+3568 20203544 branch antilost_prepare_data_and_send 
+
+antilost_set_no_alarm_after_disconn:
+3569 70479f00 jam 0 ,mem_alarm_config 
+356a 70478007 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 
+356b 70478300 jam 0 ,mem_antl_key0_release + 8 
+356c da60477b arg mem_antl_key0_release ,regc 
+356d 20203544 branch antilost_prepare_data_and_send 
+
+antilost_on_off_alarm_after_disconn:
+356e 6800c79f fetch 1 ,mem_alarm_config 
+356f 207a0000 rtn blank 
+3570 20203551 branch antilost_alert_on 
+
+antilost_notify_alarm_config_first_time:
+3571 ea210000 ifetch 2 ,rega 
+3572 6001478b store 2 ,mem_client_characteristic_configuration_descriptor 
+3573 2feffe00 isolate1 notification_enable_bit ,pdata 
+3574 24608000 nrtn true 
+3575 6800c7a0 fetch 1 ,mem_alarm_config_notfy_cnt 
+3576 207a0000 rtn blank 
+3577 7047a000 jam 0 ,mem_alarm_config_notfy_cnt 
+3578 680447b6 fetch 8 ,mem_antl_le_interval_min 
+3579 60044496 store 8 ,mem_le_interval_min 
+357a 70479002 jam 2 ,mem_antl_send_updata_le_param_timer 
+357b 204035af call antilost_battery_process 
+357c 204035b9 call antilost_battery_calculate_end 
+357d 70478007 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 
+357e 6800c79f fetch 1 ,mem_alarm_config 
+357f 6000c783 store 1 ,mem_antl_key0_release + 8 
+3580 da60477b arg mem_antl_key0_release ,regc 
+3581 20203544 branch antilost_prepare_data_and_send 
+
+antilost_buzzer_configuration:
+3582 da200001 arg 1 ,rega 
+3583 20203585 branch antilost_configuration_common 
+
+antilost_led_configuration:
+3584 da200000 arg 0 ,rega 
+
+antilost_configuration_common:
+3585 2020358c branch antilost_led_buzzer_style_configuration 
+
+antilost_led_buzzer_stop_blink:
+3586 da200000 arg 0 ,rega 
+3587 20407d19 call ui_led_blink_stop_global 
+3588 da200001 arg 1 ,rega 
+3589 20407d19 call ui_led_blink_stop_global 
+358a 6800c7a1 fetch 1 ,mem_buzzer_pwm_conf 
+358b 202069d7 branch pwm_disable 
+
+antilost_led_buzzer_style_configuration:
+358c 20407d04 call calc_curr_struct_prt 
+358d df200007 arg 7 ,loopcnt 
+358e 20207d26 branch ui_led_set_style_global + 2 
+
+antilost_fast_adv_start:
+358f da6046b8 arg mem_antl_fast_adv_led_style ,regc 
+3590 da40469a arg mem_antl_lpm_interval ,regb 
+
+antilost_adv_start_common:
+3591 20403596 call antilost_adv_interval_lpm_interval_set 
+3592 20403584 call antilost_led_configuration 
+3593 68014795 fetch 2 ,mem_antl_fast_adv_timeout 
+3594 60014793 store 2 ,mem_antl_fast_adv_timer 
+3595 202033fa branch app_ble_start_adv 
+
+antilost_adv_interval_lpm_interval_set:
+3596 ea410000 ifetch 2 ,regb 
+3597 60014154 store 2 ,mem_lpm_interval 
+3598 e8c10000 ifetch 2 ,contr 
+3599 60014482 store 2 ,mem_le_adv_interval 
+359a 20600000 rtn 
+
+antilost_buzzer_pwm_init:
+359b da200000 arg 0 ,rega 
+359c 204069a6 call pwm_init 
+359d 680347a1 fetch 6 ,mem_buzzer_pwm_conf 
+359e 60030a9a store 6 ,mem_pdatatemp 
+359f 204069ae call pwm_out_set 
+35a0 6800c7a1 fetch 1 ,mem_buzzer_pwm_conf 
+35a1 202069d7 branch pwm_disable 
+
+antilost_led_on_cb:
+35a2 70479b01 jam 1 ,mem_antl_led_state 
+35a3 20600000 rtn 
+
+antilost_led_off_cb:
+35a4 70479b00 jam 0 ,mem_antl_led_state 
+35a5 20600000 rtn 
+
+antilost_buzzer_off:
+35a6 70479c00 jam 0 ,mem_antl_buzzer_state 
+35a7 6800c7a1 fetch 1 ,mem_buzzer_pwm_conf 
+35a8 202069d7 branch pwm_disable 
+
+antilost_buzzer_on:
+35a9 70479c01 jam 1 ,mem_antl_buzzer_state 
+35aa 680347a1 fetch 6 ,mem_buzzer_pwm_conf 
+35ab 60030a9a store 6 ,mem_pdatatemp 
+35ac 202069ae branch pwm_out_set 
+
+antilost_adc_init:
+35ad 70422d00 jam 0 ,mem_adc_config_flag 
+35ae 202068a8 branch adc_init_data 
+
+antilost_battery_process:
+35af 204068eb call adc_set_mode 
+35b0 20406908 call vdd_calculate_by_mode 
+35b1 600147b0 store 2 ,mem_battery_current_voltage 
+35b2 da2047aa arg mem_battery_calculate_set ,rega 
+35b3 20406930 call adc_bat_percent_lowpower_out 
+35b4 6000c7a9 store 1 ,mem_voltage_remain_percent 
+35b5 c00035be beq 0 ,antilost_low_battery 
+35b6 1fe67c64 sub pdata ,0x64 ,null 
+35b7 242135bc nbranch antilost_full_battery ,positive 
+35b8 6000c783 store 1 ,mem_antl_key0_release + 8 
+
+antilost_battery_calculate_end:
+35b9 70478005 jam opcode5_batter_information ,mem_antl_key0_release + 5 
+35ba da60477b arg mem_antl_key0_release ,regc 
+35bb 20203544 branch antilost_prepare_data_and_send 
+
+antilost_full_battery:
+35bc 70478364 jam 100 ,mem_antl_key0_release + 8 
+35bd 202035b9 branch antilost_battery_calculate_end 
+
+antilost_low_battery:
+35be 2020341a branch app_button_long_pressed 
+
+car_init:
+35bf 20758000 rtn wake 
+35c0 68108081 hfetch 1 ,core_gpio_sel1 
+35c1 1fe17ef0 and_into 0xf0 ,pdata 
+35c2 60108081 hstore 1 ,core_gpio_sel1 
+35c3 58003631 setarg car_le_before_hibernate 
+35c4 600141eb store 2 ,mem_cb_before_hibernate 
+35c5 58003633 setarg car_le_process_lpm_before 
+35c6 600141ed store 2 ,mem_cb_before_lpm 
+35c7 5800340a setarg app_enter_hibernate 
+35c8 600141f7 store 2 ,mem_cb_discovry_timeout 
+35c9 58003635 setarg car_scale_process_idle 
+35ca 600141f3 store 2 ,mem_cb_idle_process 
+35cb 5800364b setarg car_scale_process_bb_event 
+35cc 600141f5 store 2 ,mem_cb_bb_event_process 
+35cd 580033d0 setarg app_get_lpm_wake_lock 
+35ce 600141e9 store 2 ,mem_cb_check_wakelock 
+35cf 580036f6 setarg car_le_receive_data 
+35d0 600141f9 store 2 ,mem_cb_att_write 
+35d1 5800367a setarg car_le_bb_event_timer 
+35d2 600141fd store 2 ,mem_cb_event_timer 
+35d3 20402c7a call g24_head_ptr2regc 
+35d4 58003722 setarg car_24g_receive_data 
+35d5 1a608ade add regc ,offset_24g_cb_rxdata_type1 ,contw 
+35d6 e0a10000 istore 2 ,contw 
+35d7 580035ed setarg car_power_off_signal 
+35d8 6001475b store 2 ,mem_remote_car_power_off_cb 
+35d9 580035ef setarg car_soft_switch_power_on_signal 
+35da 6001475f store 2 ,mem_remote_car_power_standby_cb 
+35db 44e7c019 bpatch patch19_7 ,mem_patch19 
+35dc 20403628 call car_init_environment 
+35dd 20407e38 call queue_init 
+35de 70417202 jam 2 ,mem_lpm_mult 
+35df 7049f600 jam power_on ,mem_car_24g_received_pac 
+35e0 6800c7cb fetch 1 ,mem_car_config_soft_switch_enable 
+35e1 6000c69a store 1 ,mem_car_hard_soft_switch 
+35e2 c00035ee beq hard_switch ,car_hard_switch_power_on_signal 
+35e3 6800c7cc fetch 1 ,mem_car_config_soft_switch_gpio 
+35e4 6000c686 store 1 ,mem_ui_button_gpio 
+35e5 70436e00 jam off ,mem_le_adv_enable 
+
+car_soft_switch_power_on_init:
+35e6 2040360f call car_ui_led_init 
+35e7 20407cd3 call ui_button_init 
+35e8 20407cdd call ui_button_polling 
+35e9 7047f301 jam power_starting ,mem_car_power_state 
+35ea 68014682 fetch 2 ,mem_ui_state_map 
+35eb c3860000 rtnbit1 ui_state_btn_down 
+35ec 2020340a branch app_enter_hibernate 
+
+car_power_off_signal:
+35ed 2020360f branch car_ui_led_init 
+
+car_hard_switch_power_on_signal:
+35ee 7047f302 jam power_standby ,mem_car_power_state 
+
+car_soft_switch_power_on_signal:
+35ef 70436e01 jam on ,mem_le_adv_enable 
+35f0 2040360f call car_ui_led_init 
+35f1 da200000 arg 0 ,rega 
+35f2 20407d1e call ui_led_blink_start_global 
+35f3 58000020 setarg fast_adv_interval_value_car 
+35f4 204046f0 call shutter_ble_adv_interval_set 
+
+car_le_modified_name_adv:
+35f5 d8a043b7 arg mem_le_name + 7 ,contw 
+35f6 6800c4a0 fetch 1 ,mem_le_lap 
+
+car_name_loop:
+35f7 1fe104f0 and pdata ,0xF0 ,temp 
+35f8 18518400 rshift4 temp ,temp 
+35f9 20403609 call car_hex_to_ascii 
+35fa e0a88000 istoret 1 ,contw 
+35fb 1fe1040f and pdata ,0x0F ,temp 
+35fc 20403609 call car_hex_to_ascii 
+35fd e0a88000 istoret 1 ,contw 
+35fe 204057a6 call le_modified_name_att_list 
+35ff 6808c3af fetcht 1 ,mem_le_name_len 
+3600 18427200 copy temp ,loopcnt 
+3601 d8a04372 arg mem_le_adv_data + 2 ,contw 
+3602 d8c043b0 arg mem_le_name ,contr 
+3603 20407f01 call memcpy 
+
+car_le_modified_name_scan:
+3604 6808c3af fetcht 1 ,mem_le_name_len 
+3605 18427200 copy temp ,loopcnt 
+3606 d8a04392 arg mem_le_scan_data + 2 ,contw 
+3607 d8c043b0 arg mem_le_name ,contr 
+3608 20207f01 branch memcpy 
+
+car_hex_to_ascii:
+3609 18467c09 sub temp ,9 ,null 
+360a 2021360d branch car_hex_num ,positive 
+360b 18408437 add temp ,55 ,temp 
+360c 20600000 rtn 
+
+car_hex_num:
+360d 18408430 add temp ,48 ,temp 
+360e 20600000 rtn 
+
+car_ui_led_init:
+360f 6800c7c0 fetch 1 ,mem_car_config_blood_led1_gpio 
+3610 c0ffb621 bne invalid_pin_num ,car_blood_led_gpio_set 
+
+car_ui_led_init_1:
+3611 6800c7be fetch 1 ,mem_car_config_pairing_led_gpio 
+3612 c0ffb624 bne invalid_pin_num ,car_pairing_led_gpio_set 
+
+car_ui_led_init_2:
+3613 6800c7c9 fetch 1 ,mem_car_config_low_voltage_led_gpio 
+3614 c0ffb626 bne invalid_pin_num ,car_low_voltage_led_gpio_set 
+
+car_ui_led_init_3:
+3615 6800c72c fetch 1 ,mem_car_led_num 
+3616 1fe27200 copy pdata ,loopcnt 
+3617 5800472d setarg mem_car_led_map 
+3618 1fe22200 copy pdata ,rega 
+
+car_in_lp1:
+3619 1a220c00 copy rega ,contr 
+361a e8c08000 ifetch 1 ,contr 
+361b 18c22200 copy contr ,rega 
+361c c07fb61f beq invalid_pin_num ,car_in_lp1_end 
+361d 1fe20400 copy pdata ,temp 
+361e 2040680e call gpio_config_output 
+
+car_in_lp1_end:
+361f c2003619 loop car_in_lp1 
+
+car_ui_led_init_end:
+3620 20600000 rtn 
+
+car_blood_led_gpio_set:
+3621 680447c0 fetch 8 ,mem_car_config_blood_led1_gpio 
+3622 6004472f store 8 ,mem_car_led_map + 2 
+3623 20203611 branch car_ui_led_init_1 
+
+car_pairing_led_gpio_set:
+3624 6000c72d store 1 ,mem_car_led_map 
+3625 20203613 branch car_ui_led_init_2 
+
+car_low_voltage_led_gpio_set:
+3626 6000c72e store 1 ,mem_car_led_map + 1 
+3627 20203615 branch car_ui_led_init_3 
+
+car_init_environment:
+3628 da200000 arg 0 ,rega 
+3629 204069a6 call pwm_init 
+362a 204037e4 call car_ir_rx_init 
+362b 20402c7d call g24_receive_process_init 
+362c 2020362d branch car_init_adc_hvin 
+
+car_init_adc_hvin:
+362d 7047cf64 jam 100 ,mem_car_notify_vdd_value_last 
+362e 6800c7c9 fetch 1 ,mem_car_config_low_voltage_led_gpio 
+362f 6000c744 store 1 ,mem_car_style2_struct_led_gpio 
+3630 202068a8 branch adc_init_data 
+
+car_le_before_hibernate:
+3631 20406835 call gpio_set_before_lpm_common 
+3632 2020696c branch keyscan_process_lpm_before 
+
+car_le_process_lpm_before:
+3633 2020696c branch keyscan_process_lpm_before 
+
+car_key_scan_process:
+3634 20206978 branch keyscan_key_process 
+
+car_scale_process_idle:
+3635 20403642 call car_le_send_packet 
+3636 204037ee call car_ir_receive_process 
+3637 20403639 call car_g24_status_process 
+3638 20203634 branch car_key_scan_process 
+
+car_g24_status_process:
+3639 68014682 fetch 2 ,mem_ui_state_map 
+363a c3848000 rtnbit1 ui_state_ble_connected 
+363b 6800c9f6 fetch 1 ,mem_car_24g_received_pac 
+363c c000b63e beq work_paired ,car_g24_connected_event 
+363d 20600000 rtn 
+
+car_g24_connected_event:
+363e 6800c7ea fetch 1 ,mem_car_24g_status 
+363f c1008000 rtneq work_paired 
+3640 7047ea01 jam work_paired ,mem_car_24g_status 
+3641 20203654 branch car_g24_connected 
+
+car_le_send_packet:
+3642 68014682 fetch 2 ,mem_ui_state_map 
+3643 c4048000 rtnbit0 ui_state_ble_connected 
+3644 20405892 call le_fifo_check_nearly_full 
+3645 247a0000 nrtn blank 
+3646 da204718 arg mem_car_pop_queue_buff ,rega 
+3647 20407e54 call queue_pop 
+3648 24740000 nrtn user 
+3649 d8c04718 arg mem_car_pop_queue_buff ,contr 
+364a 20204746 branch le_send_notify_from_list 
+
+car_scale_process_bb_event:
+364b 1a627e00 copy regc ,pdata 
+364c c016b431 beq bt_evt_button_up ,app_event_button_up 
+364d c008341a beq bt_evt_button_long_pressed ,app_button_long_pressed 
+364e c00a3651 beq bt_evt_le_connected ,car_scale_event_le_conn 
+364f c00ab660 beq bt_evt_le_disconnected ,car_scale_event_le_discon 
+3650 20600000 rtn 
+
+car_scale_event_le_conn:
+3651 58000000 setarg disable_24g 
+3652 20403220 call g24_store_mem_24g_mode 
+3653 20203656 branch car_scale_process_conn 
+
+car_g24_connected:
+3654 680147eb fetch 2 ,mem_car_24g_no_data_timeout_count 
+3655 600147ed store 2 ,mem_car_24g_no_data_timeout_timer 
+
+car_scale_process_conn:
+3656 7047ce14 jam 0x14 ,mem_car_notify_vdd_timer 
+3657 70409100 jam 0 ,mem_lpm_mode 
+3658 204033f8 call app_ble_stop_adv 
+3659 20403416 call app_lpm_mult_enable 
+365a 6800c7bd fetch 1 ,mem_car_config_pairing_led_conn_status 
+365b c000b65e beq 0x01 ,car_pairing_led_conn_status_setting 
+
+car_scale_process_conn_next:
+365c da200000 arg 0 ,rega 
+365d 20207d14 branch ui_led_on_global 
+
+car_pairing_led_conn_status_setting:
+365e da200000 arg 0 ,rega 
+365f 20207d19 branch ui_led_blink_stop_global 
+
+car_scale_event_le_discon:
+3660 58000002 setarg rx_24g 
+3661 20403220 call g24_store_mem_24g_mode 
+
+car_g24_disconnect:
+3662 58000000 setarg 0 
+3663 6002c79c store 5 ,mem_car_led_control 
+3664 58000004 setarg 4 
+3665 204069d7 call pwm_disable 
+3666 58000005 setarg 5 
+3667 204069d7 call pwm_disable 
+3668 58000014 setarg 20 
+3669 204069d7 call pwm_disable 
+366a 58000015 setarg 21 
+366b 204069d7 call pwm_disable 
+366c 58000016 setarg 22 
+366d 204069d7 call pwm_disable 
+366e 58000007 setarg 7 
+366f 204069d7 call pwm_disable 
+3670 20407e38 call queue_init 
+3671 70475e0a jam 10 ,mem_motor1_speed 
+3672 7047600a jam 10 ,mem_motor2_speed 
+3673 7047620a jam 10 ,mem_motor3_speed 
+3674 70417202 jam 2 ,mem_lpm_mult 
+3675 da200000 arg 0 ,rega 
+3676 20407d1e call ui_led_blink_start_global 
+3677 58000020 setarg fast_adv_interval_value_car 
+3678 204046f0 call shutter_ble_adv_interval_set 
+3679 202033fa branch app_ble_start_adv 
+
+car_le_bb_event_timer:
+367a 2040373b call car_moto1_blank_data_timer 
+367b 2040373e call car_moto2_blank_data_timer 
+367c 20403741 call car_moto3_blank_data_timer 
+367d 2040337b call app_power_timer 
+367e 204036c8 call car_led_control_timer 
+367f 204036a1 call car_notify_vdd_timer 
+3680 2040368a call car_24g_no_data_timeout_timer 
+3681 20403683 call car_ir_breakdown_timer 
+3682 2020368f branch car_attack_shake_timer 
+
+car_ir_breakdown_timer:
+3683 da60479a arg mem_car_ir_breakdown_check_timer ,regc 
+3684 da403686 arg car_ir_breakdown_timeout ,regb 
+3685 2020336d branch timer_single_step 
+
+car_ir_breakdown_timeout:
+3686 20403847 call car_ir_gpio_get_status 
+3687 24608000 nrtn true 
+3688 70479b01 jam 1 ,mem_car_ir_breakdown_flag 
+3689 20600000 rtn 
+
+car_24g_no_data_timeout_timer:
+368a da6047ed arg mem_car_24g_no_data_timeout_timer ,regc 
+368b da40368d arg car_24g_no_data_timer_timeout ,regb 
+368c 20203374 branch timer_single_step_2b 
+
+car_24g_no_data_timer_timeout:
+368d 7047ea02 jam work_search ,mem_car_24g_status 
+368e 20203662 branch car_g24_disconnect 
+
+car_attack_shake_timer:
+368f da6047f1 arg mem_car_attack_shake_timer ,regc 
+3690 da403692 arg car_attack_shake ,regb 
+3691 2020336d branch timer_single_step 
+
+car_attack_shake:
+3692 6800c7f2 fetch 1 ,mem_car_attack_shake_flag 
+3693 203a369e branch car_attack_shake_stop ,blank 
+3694 7047f102 jam 2 ,mem_car_attack_shake_timer 
+3695 7047f200 jam 0 ,mem_car_attack_shake_flag 
+3696 58000a02 setarg 0x0a02 
+3697 60014752 store 2 ,mem_le_receive_payload 
+3698 6800c7b9 fetch 1 ,mem_car_config_device_select 
+3699 c001b69b beq device_battle_tank ,car_attack_shake_front_battle_tank 
+
+car_attack_shake_front_battle_car:
+369a 20203762 branch car_motor_control 
+
+car_attack_shake_front_battle_tank:
+369b 58000a02 setarg 0x0a02 
+369c 60014754 store 2 ,mem_le_receive_payload + 2 
+369d 20203762 branch car_motor_control 
+
+car_attack_shake_stop:
+369e 58000000 setarg 0 
+369f 60024752 store 4 ,mem_le_receive_payload 
+36a0 20203762 branch car_motor_control 
+
+car_notify_vdd_timer:
+36a1 6800c7c8 fetch 1 ,mem_car_config_bat_notify_enable 
+36a2 207a0000 rtn blank 
+36a3 68014682 fetch 2 ,mem_ui_state_map 
+36a4 c304b6c6 bbit0 ui_state_ble_connected ,car_low_bat_led_off 
+36a5 da6047ce arg mem_car_notify_vdd_timer ,regc 
+36a6 da4036a8 arg car_notify_vdd ,regb 
+36a7 2020336d branch timer_single_step 
+
+car_notify_vdd:
+36a8 6800c7cd fetch 1 ,mem_car_notify_vdd_count 
+36a9 6000c7ce store 1 ,mem_car_notify_vdd_timer 
+36aa 6800c7d1 fetch 1 ,mem_car_working_flag 
+36ab 247a0000 nrtn blank 
+
+car_read_hvin:
+36ac 204068eb call adc_set_mode 
+36ad 20406908 call vdd_calculate_by_mode 
+36ae 600147e8 store 2 ,mem_vdd_now_vol 
+36af da2047e2 arg mem_vdd_calculate_set ,rega 
+36b0 20406930 call adc_bat_percent_lowpower_out 
+36b1 6808c7cf fetcht 1 ,mem_car_notify_vdd_value_last 
+36b2 98467c00 isub temp ,null 
+36b3 202136b6 branch car_notify_vdd_next2 ,positive 
+36b4 6000c7cf store 1 ,mem_car_notify_vdd_value_last 
+36b5 1fe20400 copy pdata ,temp 
+
+car_notify_vdd_next2:
+36b6 6008c7d0 storet 1 ,mem_car_notify_vdd_percent 
+36b7 6800c7ca fetch 1 ,mem_car_config_low_voltage_percent 
+36b8 98467c00 isub temp ,null 
+36b9 204136c1 call car_enter_low_bat ,positive 
+36ba 6008c7db storet 1 ,mem_notify_bat_payload 
+36bb df200006 arg 6 ,loopcnt 
+36bc d8c047d6 arg mem_notify_bat_head ,contr 
+36bd 204036f0 call calc_check_sum_start 
+36be 6000c7dc store 1 ,mem_notify_bat_check_sum 
+36bf da2047d3 arg mem_notify_bat_packet ,rega 
+36c0 20207e3d branch queue_push 
+
+car_enter_low_bat:
+36c1 6800c7d2 fetch 1 ,mem_low_bat_flag 
+36c2 247a0000 nrtn blank 
+36c3 7047d201 jam 1 ,mem_low_bat_flag 
+36c4 da200001 arg 1 ,rega 
+36c5 20207d1e branch ui_led_blink_start_global 
+
+car_low_bat_led_off:
+36c6 da200001 arg 1 ,rega 
+36c7 20207d19 branch ui_led_blink_stop_global 
+
+car_led_control_timer:
+36c8 da6047a4 arg mem_car_led_control_timer ,regc 
+36c9 da4036cb arg car_led_control ,regb 
+36ca 2020336d branch timer_single_step 
+
+car_led_control:
+36cb 7047a405 jam 5 ,mem_car_led_control_timer 
+36cc 7047a600 jam 0 ,mem_car_led_no 
+36cd 6800c7a5 fetch 1 ,mem_car_led_blink_status 
+36ce c000b6ee beq led_on ,car_led_control_blink_off 
+36cf c00036ec beq led_off ,car_led_control_blink_on 
+
+car_led_control_set:
+36d0 d8c0479c arg mem_car_led_control ,contr 
+36d1 18c22200 copy contr ,rega 
+36d2 df200008 arg 8 ,loopcnt 
+
+car_led_control_timer_next:
+36d3 1a220c00 copy rega ,contr 
+36d4 e8c08000 ifetch 1 ,contr 
+36d5 18c22200 copy contr ,rega 
+36d6 c00036e3 beq led_off ,car_led_control_off 
+36d7 c000b6e6 beq led_on ,car_led_control_on 
+36d8 c00136e9 beq led_blink ,car_led_control_blink 
+
+car_led_control_timer_next_2:
+36d9 6800c7a6 fetch 1 ,mem_car_led_no 
+36da 1fe0fe01 increase 1 ,pdata 
+36db 6000c7a6 store 1 ,mem_car_led_no 
+36dc c20036d3 loop car_led_control_timer_next 
+36dd 20600000 rtn 
+
+car_led_switch:
+36de 6800c7a6 fetch 1 ,mem_car_led_no 
+36df da4047c0 arg mem_car_config_blood_led_gpio ,regb 
+36e0 9a40a400 iadd regb ,regb 
+36e1 ea488000 ifetcht 1 ,regb 
+36e2 20600000 rtn 
+
+car_led_control_off:
+36e3 204036de call car_led_switch 
+36e4 20406825 call gpio_out_inactive 
+36e5 202036d9 branch car_led_control_timer_next_2 
+
+car_led_control_on:
+36e6 204036de call car_led_switch 
+36e7 20406829 call gpio_out_active 
+36e8 202036d9 branch car_led_control_timer_next_2 
+
+car_led_control_blink:
+36e9 6800c7a5 fetch 1 ,mem_car_led_blink_status 
+36ea c000b6e3 beq led_on ,car_led_control_off 
+36eb 202036e6 branch car_led_control_on 
+
+car_led_control_blink_on:
+36ec 7047a501 jam led_on ,mem_car_led_blink_status 
+36ed 202036d0 branch car_led_control_set 
+
+car_led_control_blink_off:
+36ee 7047a500 jam led_off ,mem_car_led_blink_status 
+36ef 202036d0 branch car_led_control_set 
+
+calc_check_sum_start:
+36f0 da200000 arg 0 ,rega 
+
+calc_check_sum_loop:
+36f1 e8c08000 ifetch 1 ,contr 
+36f2 9a20a200 iadd rega ,rega 
+36f3 c20036f1 loop calc_check_sum_loop 
+
+calc_check_sum_and:
+36f4 1a217eff and rega ,0xff ,pdata 
+36f5 20600000 rtn 
+
+car_le_receive_data:
+36f6 68008477 fetch 1 ,mem_le_att_opcode 
+36f7 c00936f9 beq attop_write_request ,car_le_parse_att_write_request 
+36f8 20600000 rtn 
+
+car_le_parse_att_write_request:
+36f9 68010478 fetch 2 ,mem_le_att_handle 
+36fa c00a3710 beq att_car_control_handle ,car_control_le_receive 
+36fb 20600000 rtn 
+
+le_app_receive_data:
+36fc 44e8401a bpatch patch1a_0 ,mem_patch1a 
+36fd ea228000 ifetch 5 ,rega 
+36fe 60028b12 store 5 ,mem_app_receive_temp 
+36ff 68010b12 fetch 2 ,mem_app_receive_temp 
+3700 d8406b5a arg le_receive_packet_head ,temp 
+3701 98467c00 isub temp ,null 
+3702 24628000 nrtn zero 
+3703 68010b15 fetch 2 ,mem_app_receive_temp + 3 
+3704 1ff0fe00 byteswap pdata ,pdata 
+3705 60010b15 store 2 ,mem_app_receive_temp + 3 
+3706 1fe27200 copy pdata ,loopcnt 
+3707 1a20a205 increase 5 ,rega 
+3708 1a220c00 copy rega ,contr 
+3709 d8a00b17 arg mem_app_receive_temp + 5 ,contw 
+370a 20407f01 call memcpy 
+370b e8c08000 ifetch 1 ,contr 
+370c 60008b21 store 1 ,mem_app_receive_temp + 15 
+370d da200b14 arg mem_app_receive_temp + 2 ,rega 
+370e da400b17 arg mem_app_receive_temp + 5 ,regb 
+370f 20600000 rtn 
+
+car_control_le_receive:
+3710 58000000 setarg 0 
+3711 6002c752 store 5 ,mem_le_receive_payload 
+3712 6002c757 store 5 ,mem_le_receive_payload + 5 
+3713 204036fc call le_app_receive_data 
+3714 1a420c00 copy regb ,contr 
+3715 d8a04752 arg mem_le_receive_payload ,contw 
+3716 df20000a arg 10 ,loopcnt 
+3717 20407f01 call memcpy 
+
+car_receive_cmd_select:
+3718 44e8c01a bpatch patch1a_1 ,mem_patch1a 
+3719 ea208000 ifetch 1 ,rega 
+371a c001374a beq car_cmd_old_car_control ,car_drive_old 
+371b c001b75c beq car_cmd_old_speed_control ,car_speed_set_old 
+371c c0023762 beq car_cmd_l_r_motor_control ,car_motor_control 
+371d c002b762 beq car_cmd_f_b_motor_control ,car_motor_control 
+371e c00337b1 beq car_cmd_ir_control ,car_ir_data_rx_from_app 
+371f c003b849 beq car_cmd_led_control ,car_led_control_receive 
+3720 c004384c beq car_cmd_device_info ,car_info_request 
+3721 20600000 rtn 
+
+car_24g_receive_data:
+3722 68014682 fetch 2 ,mem_ui_state_map 
+3723 c3848000 rtnbit1 ui_state_ble_connected 
+3724 680147eb fetch 2 ,mem_car_24g_no_data_timeout_count 
+3725 600147ed store 2 ,mem_car_24g_no_data_timeout_timer 
+3726 7049f601 jam work_paired ,mem_car_24g_received_pac 
+3727 5800010c setarg offset_24g_rxdata_temp_add3 
+3728 204032cd call g24_set_rega 
+3729 20403710 call car_control_le_receive 
+372a 68008b14 fetch 1 ,mem_app_receive_temp + 2 
+372b c002372e beq car_cmd_l_r_motor_control ,car_24g_receive_data_next 
+372c c002b72e beq car_cmd_f_b_motor_control ,car_24g_receive_data_next 
+372d 20600000 rtn 
+
+car_24g_receive_data_next:
+372e 6800c752 fetch 1 ,mem_le_receive_payload 
+372f 245a3735 ncall car_moto1_enable_blank_data_timer ,blank 
+3730 6800c754 fetch 1 ,mem_le_receive_payload + 2 
+3731 245a3737 ncall car_moto2_enable_blank_data_timer ,blank 
+3732 6800c756 fetch 1 ,mem_le_receive_payload + 4 
+3733 245a3739 ncall car_moto3_enable_blank_data_timer ,blank 
+3734 20600000 rtn 
+
+car_moto1_enable_blank_data_timer:
+3735 7049f305 jam 5 ,mem_car_moto1_blank_timer 
+3736 20600000 rtn 
+
+car_moto2_enable_blank_data_timer:
+3737 7049f405 jam 5 ,mem_car_moto2_blank_timer 
+3738 20600000 rtn 
+
+car_moto3_enable_blank_data_timer:
+3739 7049f505 jam 5 ,mem_car_moto3_blank_timer 
+373a 20600000 rtn 
+
+car_moto1_blank_data_timer:
+373b da6049f3 arg mem_car_moto1_blank_timer ,regc 
+373c da403744 arg car_moto1_blank_data ,regb 
+373d 2020336d branch timer_single_step 
+
+car_moto2_blank_data_timer:
+373e da6049f4 arg mem_car_moto2_blank_timer ,regc 
+373f da403746 arg car_moto2_blank_data ,regb 
+3740 2020336d branch timer_single_step 
+
+car_moto3_blank_data_timer:
+3741 da6049f5 arg mem_car_moto3_blank_timer ,regc 
+3742 da403748 arg car_moto3_blank_data ,regb 
+3743 2020336d branch timer_single_step 
+
+car_moto1_blank_data:
+3744 70475200 jam 0 ,mem_le_receive_payload 
+3745 20203762 branch car_motor_control 
+
+car_moto2_blank_data:
+3746 70475400 jam 0 ,mem_le_receive_payload + 2 
+3747 20203762 branch car_motor_control 
+
+car_moto3_blank_data:
+3748 70475600 jam 0 ,mem_le_receive_payload + 4 
+3749 20203762 branch car_motor_control 
+
+car_drive_old:
+374a 2040374c call car_left_right_control_old 
+374b 2020374f branch car_front_back_control_old 
+
+car_left_right_control_old:
+374c 6800c752 fetch 1 ,mem_le_receive_payload 
+374d 6000c75f store 1 ,mem_motor2_status 
+374e 20203773 branch car_motor2_control 
+
+car_front_back_control_old:
+374f 6800c75e fetch 1 ,mem_motor1_speed 
+3750 20403754 call car_reset_old_speed 
+3751 6800c753 fetch 1 ,mem_le_receive_payload + 1 
+3752 6000c75d store 1 ,mem_motor1_status 
+3753 20203770 branch car_motor1_control 
+
+car_reset_old_speed:
+3754 c0013758 beq speed_level_2 ,car_reset_old_speed2 
+3755 c001b75a beq speed_level_3 ,car_reset_old_speed3 
+3756 6000c75e store 1 ,mem_motor1_speed 
+3757 20600000 rtn 
+
+car_reset_old_speed2:
+3758 70475e05 jam speed_level_5 ,mem_motor1_speed 
+3759 20600000 rtn 
+
+car_reset_old_speed3:
+375a 70475e0a jam speed_level_10 ,mem_motor1_speed 
+375b 20600000 rtn 
+
+car_speed_set_old:
+375c 6800c752 fetch 1 ,mem_le_receive_payload 
+375d 20403754 call car_reset_old_speed 
+375e 6800c75e fetch 1 ,mem_motor1_speed 
+375f 2040379e call car_motor_speed_duty_setting 
+3760 204037a1 call car_motor_speed_duty_transform 
+3761 202069c4 branch pwm_pwm0_duty_set 
+
+car_motor_control:
+3762 6800c7f0 fetch 1 ,mem_car_24g_go_die_flag 
+3763 247a0000 nrtn blank 
+3764 68034752 fetch 6 ,mem_le_receive_payload 
+3765 6003475d store 6 ,mem_motor1_status 
+3766 6800c75e fetch 1 ,mem_motor1_speed 
+3767 6808c760 fetcht 1 ,mem_motor2_speed 
+3768 98417e00 iand temp ,pdata 
+3769 6808c762 fetcht 1 ,mem_motor3_speed 
+376a 98417e00 iand temp ,pdata 
+376b 205a3779 call car_motor_working_flag ,blank 
+376c 44e9401a bpatch patch1a_2 ,mem_patch1a 
+376d 20403770 call car_motor1_control 
+376e 20403773 call car_motor2_control 
+376f 20203776 branch car_motor3_control 
+
+car_motor1_control:
+3770 da404763 arg mem_motor1_pwm_set ,regb 
+3771 d8c0475d arg mem_motor1_status ,contr 
+3772 2020377b branch car_motor_status_select 
+
+car_motor2_control:
+3773 da40476b arg mem_motor2_pwm_set ,regb 
+3774 d8c0475f arg mem_motor2_status ,contr 
+3775 2020377b branch car_motor_status_select 
+
+car_motor3_control:
+3776 da404773 arg mem_motor3_pwm_set ,regb 
+3777 d8c04761 arg mem_motor3_status ,contr 
+3778 2020377b branch car_motor_status_select 
+
+car_motor_working_flag:
+3779 7047d100 jam 0 ,mem_car_working_flag 
+377a 20600000 rtn 
+
+car_motor_status_select:
+377b e8c08000 ifetch 1 ,contr 
+377c c0003787 beq motor_stop ,car_motor_stop 
+377d c000b780 beq go_front ,car_motor_positive 
+377e c0013782 beq go_back ,car_motor_negative 
+377f 20600000 rtn 
+
+car_motor_positive:
+3780 70477b00 jam 0 ,mem_motor_select_p_n 
+3781 20203783 branch car_motor_negative + 1 
+
+car_motor_negative:
+3782 70477b01 jam 1 ,mem_motor_select_p_n 
+3783 e8c08000 ifetch 1 ,contr 
+3784 6000c77d store 1 ,mem_car_motor_speed 
+3785 ea440000 ifetch 8 ,regb 
+3786 2020378c branch car_motor_work 
+
+car_motor_stop:
+3787 ea408000 ifetch 1 ,regb 
+3788 204069d7 call pwm_disable 
+3789 1a40a401 increase 1 ,regb 
+378a ea408000 ifetch 1 ,regb 
+378b 202069d7 branch pwm_disable 
+
+car_motor_work:
+378c 6004477e store 8 ,mem_motor_pwm_pin1_set 
+378d 7047d101 jam 1 ,mem_car_working_flag 
+378e 6800c77b fetch 1 ,mem_motor_select_p_n 
+378f c000379a beq 0 ,car_motor_select_positive 
+
+car_motor_select_negative:
+3790 6800c77f fetch 1 ,mem_motor_pwm_pin2_set 
+3791 6000c780 store 1 ,mem_motor_pwm_pin_set 
+3792 6800c77e fetch 1 ,mem_motor_pwm_pin1_set 
+
+car_motor_work_next:
+3793 204069d7 call pwm_disable 
+3794 6800c77d fetch 1 ,mem_car_motor_speed 
+3795 2040379e call car_motor_speed_duty_setting 
+3796 6000c785 store 1 ,mem_motor_pwm_dute_set 
+3797 68034780 fetch 6 ,mem_motor_pwm_pin_set 
+3798 60030a9a store 6 ,mem_pdatatemp 
+3799 202069ae branch pwm_out_set 
+
+car_motor_select_positive:
+379a 6800c77e fetch 1 ,mem_motor_pwm_pin1_set 
+379b 6000c780 store 1 ,mem_motor_pwm_pin_set 
+379c 6800c77f fetch 1 ,mem_motor_pwm_pin2_set 
+379d 20203793 branch car_motor_work_next 
+
+car_motor_speed_duty_setting:
+379e 1feffe05 mul32 pdata ,5 ,pdata 
+379f 1fe0fe32 add pdata ,50 ,pdata 
+37a0 20600000 rtn 
+
+car_motor_speed_duty_transform:
+37a1 d8402ee0 arg 12000 ,temp 
+37a2 984ffe00 imul32 temp ,pdata 
+37a3 1fe6fc64 div pdata ,100 
+37a4 20407f86 call wait_div_end 
+37a5 18078400 quotient temp 
+37a6 18422200 copy temp ,rega 
+37a7 58002ee0 setarg 12000 
+37a8 98462400 isub temp ,regb 
+37a9 20600000 rtn 
+
+car_ir_init:
+37aa 68108082 hfetch 1 ,core_gpio_sel2 
+37ab 79207e02 set1 2 ,pdata 
+37ac 60108082 hstore 1 ,core_gpio_sel2 
+37ad 5800009e setarg 158 
+37ae 60110068 hstore 2 ,core_pwm_pcnt4 
+37af 6011006a hstore 2 ,core_pwm_ncnt4 
+37b0 20600000 rtn 
+
+car_ir_data_rx_from_app:
+37b1 6800c7f0 fetch 1 ,mem_car_24g_go_die_flag 
+37b2 247a0000 nrtn blank 
+37b3 68014752 fetch 2 ,mem_le_receive_payload 
+37b4 60014787 store 2 ,mem_ir_data 
+37b5 6800c7ea fetch 1 ,mem_car_24g_status 
+37b6 c080b7b9 bne work_paired ,car_ir_data_tx 
+37b7 680144a0 fetch 2 ,mem_le_lap 
+37b8 60014787 store 2 ,mem_ir_data 
+
+car_ir_data_tx:
+37b9 44e9c01a bpatch patch1a_3 ,mem_patch1a 
+37ba 204037aa call car_ir_init 
+37bb 204037dc call car_ir_enable 
+37bc 5800bb80 setarg 48000 
+37bd 20402a8f call sleep 
+37be 204037e0 call car_ir_disable 
+37bf 58001c20 setarg 7200 
+37c0 20402a8f call sleep 
+37c1 df200010 arg 16 ,loopcnt 
+
+car_ir_send_loop:
+37c2 204037dc call car_ir_enable 
+37c3 68014787 fetch 2 ,mem_ir_data 
+37c4 c28037c9 bbit1 0 ,car_ir_is_bit1 
+37c5 58001c20 setarg 7200 
+37c6 20402a8f call sleep 
+37c7 204037e0 call car_ir_disable 
+37c8 202037cc branch car_ir_wait_finish 
+
+car_ir_is_bit1:
+37c9 58003840 setarg 14400 
+37ca 20402a8f call sleep 
+37cb 204037e0 call car_ir_disable 
+
+car_ir_wait_finish:
+37cc 58001c20 setarg 7200 
+37cd 20402a8f call sleep 
+37ce 68014787 fetch 2 ,mem_ir_data 
+37cf 1fe37e00 rshift pdata ,pdata 
+37d0 60014787 store 2 ,mem_ir_data 
+37d1 c20037c2 loop car_ir_send_loop 
+37d2 7047f102 jam 2 ,mem_car_attack_shake_timer 
+37d3 7047f201 jam 1 ,mem_car_attack_shake_flag 
+37d4 58000a01 setarg 0x0a01 
+37d5 60014752 store 2 ,mem_le_receive_payload 
+37d6 6800c7b9 fetch 1 ,mem_car_config_device_select 
+37d7 c001b7d9 beq device_battle_tank ,car_attack_shake_back_battle_tank 
+
+car_attack_shake_back_battle_car:
+37d8 20203762 branch car_motor_control 
+
+car_attack_shake_back_battle_tank:
+37d9 58000a01 setarg 0x0a01 
+37da 60014754 store 2 ,mem_le_receive_payload + 2 
+37db 20203762 branch car_motor_control 
+
+car_ir_enable:
+37dc 68108085 hfetch 1 ,core_gpio_key2 
+37dd 1fe1fe40 or_into 0x40 ,pdata 
+37de 60108085 hstore 1 ,core_gpio_key2 
+37df 20600000 rtn 
+
+car_ir_disable:
+37e0 68108085 hfetch 1 ,core_gpio_key2 
+37e1 1fe17ebf and_into 0xbf ,pdata 
+37e2 60108085 hstore 1 ,core_gpio_key2 
+37e3 20600000 rtn 
+
+car_ir_rx_init:
+37e4 6800c7bb fetch 1 ,mem_car_config_ir_enable 
+37e5 c1000000 rtneq 0x00 
+37e6 20402c65 call lpm_disable_exen_output 
+37e7 6808c7bc fetcht 1 ,mem_car_config_ir_rx_gpio 
+37e8 6008c786 storet 1 ,mem_ir_rx_gpio 
+37e9 204067fb call gpio_config_input 
+37ea 20403847 call car_ir_gpio_get_status 
+37eb 24608000 nrtn true 
+37ec 70479a01 jam 1 ,mem_car_ir_breakdown_check_timer 
+37ed 20600000 rtn 
+
+car_ir_receive_process:
+37ee 6800c7bb fetch 1 ,mem_car_config_ir_enable 
+37ef c1000000 rtneq flag_ir_disable 
+37f0 6800c79b fetch 1 ,mem_car_ir_breakdown_flag 
+37f1 247a0000 nrtn blank 
+37f2 68014682 fetch 2 ,mem_ui_state_map 
+37f3 c284b7f6 bbit1 ui_state_ble_connected ,car_ir_receive_process_next 
+37f4 6800c7ea fetch 1 ,mem_car_24g_status 
+37f5 c1808000 rtnne work_paired 
+
+car_ir_receive_process_next:
+37f6 44ea401a bpatch patch1a_4 ,mem_patch1a 
+37f7 20403847 call car_ir_gpio_get_status 
+37f8 24608000 nrtn true 
+37f9 58008ca0 setarg 36000 
+37fa 20402a8f call sleep 
+37fb 20403847 call car_ir_gpio_get_status 
+37fc 24608000 nrtn true 
+37fd 2040383f call car_ir_clk_get 
+
+car_ir_packet_head_wait_end:
+37fe 20403842 call car_ir_clk_check 
+37ff 24610000 nrtn positive 
+3800 20403847 call car_ir_gpio_get_status 
+3801 2020b7fe branch car_ir_packet_head_wait_end ,true 
+3802 da200000 arg 0 ,rega 
+3803 df200010 arg 16 ,loopcnt 
+3804 2040383f call car_ir_clk_get 
+
+car_ir_receive_process_loop:
+3805 20403842 call car_ir_clk_check 
+3806 24610000 nrtn positive 
+3807 20403847 call car_ir_gpio_get_status 
+3808 2420b805 nbranch car_ir_receive_process_loop ,true 
+3809 58002a30 setarg 10800 
+380a 20402a8f call sleep 
+380b 20403847 call car_ir_gpio_get_status 
+380c 2020b812 branch car_ir_get_bit1 ,true 
+
+car_ir_get_bit0:
+380d 58000000 setarg 0 
+380e 1a232200 rshift rega ,rega 
+380f 9a21a200 ior rega ,rega 
+3810 c2003805 loop car_ir_receive_process_loop 
+3811 2020381b branch car_ir_receive_process_end 
+
+car_ir_get_bit1:
+3812 58008000 setarg 0x8000 
+3813 1a232200 rshift rega ,rega 
+3814 9a21a200 ior rega ,rega 
+3815 2040383f call car_ir_clk_get 
+
+car_ir_get_bit1_wait_low_end:
+3816 20403842 call car_ir_clk_check 
+3817 24610000 nrtn positive 
+3818 20403847 call car_ir_gpio_get_status 
+3819 2020b816 branch car_ir_get_bit1_wait_low_end ,true 
+381a c2003805 loop car_ir_receive_process_loop 
+
+car_ir_receive_process_end:
+381b 44eac01a bpatch patch1a_5 ,mem_patch1a 
+381c 1a227e00 copy rega ,pdata 
+381d 60014789 store 2 ,mem_ir_rx_buf 
+381e 60014797 store 2 ,mem_ir_notify_data + 8 
+381f 6800c7ea fetch 1 ,mem_car_24g_status 
+3820 c000b827 beq work_paired ,car_ir_24g_receive_attack 
+
+car_ir_data_notify:
+3821 df200007 arg 0x07 ,loopcnt 
+3822 d8c04792 arg mem_ir_notify_data_head ,contr 
+3823 204036f0 call calc_check_sum_start 
+3824 6000c799 store 1 ,mem_ir_notify_data_check_sum 
+3825 da20478f arg mem_ir_notify_data ,rega 
+3826 20207e3d branch queue_push 
+
+car_ir_24g_receive_attack:
+3827 6800c7ef fetch 1 ,mem_car_24g_ir_receive_attack_count 
+3828 1fe0fe01 increase 1 ,pdata 
+3829 6000c7ef store 1 ,mem_car_24g_ir_receive_attack_count 
+382a 1fe6fc02 div pdata ,2 
+382b 20407f86 call wait_div_end 
+382c 18078400 quotient temp 
+382d 18077e00 remainder pdata 
+382e 243a3838 nbranch car_ir_24g_receive_attack_blink ,blank 
+
+car_ir_24g_receive_attack_off:
+382f 6800c7bf fetch 1 ,mem_car_config_led_num 
+3830 98467c00 isub temp ,null 
+3831 2042b83d call car_ir_24g_go_die ,zero 
+3832 dfe0479c arg mem_car_led_control ,pdata 
+3833 184085ff increase -1 ,temp 
+3834 9840a200 iadd temp ,rega 
+3835 dfe00000 arg 0 ,pdata 
+3836 e2208000 istore 1 ,rega 
+3837 20600000 rtn 
+
+car_ir_24g_receive_attack_blink:
+3838 dfe0479c arg mem_car_led_control ,pdata 
+3839 9840a200 iadd temp ,rega 
+383a dfe00002 arg 2 ,pdata 
+383b e2208000 istore 1 ,rega 
+383c 20600000 rtn 
+
+car_ir_24g_go_die:
+383d 7047f001 jam 1 ,mem_car_24g_go_die_flag 
+383e 20600000 rtn 
+
+car_ir_clk_get:
+383f 1c427e00 copy clkn_bt ,pdata 
+3840 6002478b store 4 ,mem_ir_receive_clkn 
+3841 20600000 rtn 
+
+car_ir_clk_check:
+3842 1c427e00 copy clkn_bt ,pdata 
+3843 680a478b fetcht 4 ,mem_ir_receive_clkn 
+3844 98467e00 isub temp ,pdata 
+3845 1fe67cc8 sub pdata ,200 ,null 
+3846 20600000 rtn 
+
+car_ir_gpio_get_status:
+3847 6808c786 fetcht 1 ,mem_ir_rx_gpio 
+3848 2020681d branch gpio_get_bit 
+
+car_led_control_receive:
+3849 68044752 fetch 8 ,mem_le_receive_payload 
+384a 6004479c store 8 ,mem_car_led_control 
+384b 20600000 rtn 
+
+car_info_request:
+384c 6800c7b9 fetch 1 ,mem_car_config_device_select 
+384d 6000c7af store 1 ,mem_car_info_request_payload 
+384e 6800c7ba fetch 1 ,mem_car_config_motor_layout 
+384f 6000c7b0 store 1 ,mem_car_info_request_payload + 1 
+3850 6800c7bb fetch 1 ,mem_car_config_ir_enable 
+3851 6000c7b1 store 1 ,mem_car_info_request_payload + 2 
+3852 df20000d arg 13 ,loopcnt 
+3853 d8c047aa arg mem_car_info_request_head ,contr 
+3854 204036f0 call calc_check_sum_start 
+3855 6000c7b7 store 1 ,mem_car_info_request_checksum 
+3856 da2047a7 arg mem_car_info_request ,rega 
+3857 20207e3d branch queue_push 
+
+light_init:
+3858 204065c2 call clear_eeprom_size_2k 
+3859 7046f67a jam 0x7a ,mem_curr_packet_num 
+385a 2040386d call light_load_controler_list 
+385b 20403867 call light_init_crr_cmd_count 
+385c 58003860 setarg light_pairing_timer 
+385d 600141fd store 2 ,mem_cb_event_timer 
+385e da200000 arg 0 ,rega 
+385f 202069a6 branch pwm_init 
+
+light_pairing_timer:
+3860 680146a1 fetch 2 ,mem_light_pairing_timer 
+3861 207a0000 rtn blank 
+3862 1fe0ffff increase -1 ,pdata 
+3863 600146a1 store 2 ,mem_light_pairing_timer 
+3864 c1800000 rtnne 0 
+3865 7046a000 jam 0 ,mem_light_pairing_enable 
+3866 20600000 rtn 
+
+light_init_crr_cmd_count:
+3867 44eb401a bpatch patch1a_6 ,mem_patch1a 
+3868 6800c6a4 fetch 1 ,mem_light_next_record 
+3869 1fe67c28 sub pdata ,40 ,null 
+386a 20610000 rtn positive 
+386b 7046a400 jam 0 ,mem_light_next_record 
+386c 20600000 rtn 
+
+light_load_controler_list:
+386d da2046a4 arg mem_light_next_record ,rega 
+386e da400000 arg 0 ,regb 
+386f d8400051 arg 81 ,temp 
+3870 202065df branch iicd_read_eep_data 
+
+light_find_controler_pairing:
+3871 78547c00 disable user 
+3872 6800c6a3 fetch 1 ,mem_light_cnum 
+3873 1fe27200 copy pdata ,loopcnt 
+3874 da2046a5 arg mem_light_clist ,rega 
+3875 1a622400 copy regc ,regb 
+
+light_find_controler_pairing_loop:
+3876 44ebc01a bpatch patch1a_7 ,mem_patch1a 
+3877 2040387c call light_compare_addr_record 
+3878 2022ffe7 branch enable_user ,zero 
+
+light_find_single_pairing_diff:
+3879 1a20a204 increase 4 ,rega 
+387a c2003876 loop light_find_controler_pairing_loop 
+387b 20600000 rtn 
+
+light_compare_addr_record:
+387c 44ec401b bpatch patch1b_0 ,mem_patch1b 
+387d ea218000 ifetch 3 ,rega 
+387e ea498000 ifetcht 3 ,regb 
+387f 98467c00 isub temp ,null 
+3880 20600000 rtn 
+
+light_compare_single_record:
+3881 44ecc01b bpatch patch1b_1 ,mem_patch1b 
+3882 ea218000 ifetch 3 ,rega 
+3883 ea498000 ifetcht 3 ,regb 
+3884 98467c00 isub temp ,null 
+3885 24628000 nrtn zero 
+3886 e8c08000 ifetch 1 ,contr 
+3887 1fe67c00 sub pdata ,0 ,null 
+3888 20628000 rtn zero 
+3889 1a208c03 add rega ,3 ,contr 
+388a e8c88000 ifetcht 1 ,contr 
+388b 98467c00 isub temp ,null 
+388c 20600000 rtn 
+
+light_find_controler_cmd:
+388d 44ed401b bpatch patch1b_2 ,mem_patch1b 
+388e 78547c00 disable user 
+388f 6800c6a3 fetch 1 ,mem_light_cnum 
+3890 1fe27200 copy pdata ,loopcnt 
+3891 da2046a5 arg mem_light_clist ,rega 
+3892 1a622400 copy regc ,regb 
+
+light_find_controler_cmd_loop:
+3893 20403881 call light_compare_single_record 
+3894 2022ffe7 branch enable_user ,zero 
+3895 1a20a204 increase 4 ,rega 
+3896 c2003893 loop light_find_controler_cmd_loop 
+3897 20600000 rtn 
+
+light_recv_adv:
+3898 68008004 fetch 1 ,mem_le_scanrsp_rcv 
+3899 1fe0fe01 increase 1 ,pdata 
+389a 60008004 store 1 ,mem_le_scanrsp_rcv 
+389b da6002e5 arg mem_le_rxbuf + 12 ,regc 
+
+light_anylize_command:
+389c ea610000 ifetch 2 ,regc 
+389d d84055aa arg 0x55aa ,temp 
+389e 98467c00 isub temp ,null 
+389f 24628000 nrtn zero 
+38a0 18c22600 copy contr ,regc 
+38a1 ea698000 ifetcht 3 ,regc 
+38a2 58ffffff setarg 0xffffff 
+38a3 98467c00 isub temp ,null 
+38a4 2022b8a8 branch light_parse_cmd ,zero 
+38a5 2040388d call light_find_controler_cmd 
+38a6 203438a8 branch light_parse_cmd ,user 
+38a7 20600000 rtn 
+
+light_parse_cmd:
+38a8 44edc01b bpatch patch1b_3 ,mem_patch1b 
+38a9 1a60a604 increase 4 ,regc 
+38aa ea608000 ifetch 1 ,regc 
+38ab 6808c6f6 fetcht 1 ,mem_curr_packet_num 
+38ac 98467c00 isub temp ,null 
+38ad 20628000 rtn zero 
+38ae 6000c6f6 store 1 ,mem_curr_packet_num 
+38af 68008003 fetch 1 ,mem_le_req_rcv 
+38b0 1fe0fe01 increase 1 ,pdata 
+38b1 60008003 store 1 ,mem_le_req_rcv 
+38b2 1a60a601 increase 1 ,regc 
+38b3 ea608000 ifetch 1 ,regc 
+38b4 6000c6f5 store 1 ,mem_light_crr_cmd_count 
+38b5 1fe27200 copy pdata ,loopcnt 
+38b6 207a0000 rtn blank 
+
+light_parse_cmd_loop:
+38b7 e8c08000 ifetch 1 ,contr 
+38b8 c00038c2 beq light_cmd_pwm0 ,light_parse_cmd_pwm0 
+38b9 c000b8cf beq light_cmd_pwm1 ,light_parse_cmd_pwm1 
+38ba c00138d4 beq light_cmd_pwm2 ,light_parse_cmd_pwm2 
+38bb c001b8d9 beq light_cmd_pwm3 ,light_parse_cmd_pwm3 
+38bc c00238de beq light_cmd_pwm4 ,light_parse_cmd_pwm4 
+38bd c002b8e3 beq light_cmd_pwm5 ,light_parse_cmd_pwm5 
+38be c00338e8 beq light_cmd_auto_mode ,light_parse_auto_mode 
+38bf c07fb8ea beq light_cmd_pairing ,light_parse_pairing 
+38c0 c20038b7 loop light_parse_cmd_loop 
+38c1 20600000 rtn 
+
+light_parse_cmd_pwm0:
+38c2 18c22600 copy contr ,regc 
+38c3 6800c69a fetch 1 ,mem_light_pwm0 
+38c4 60008a9a store 1 ,mem_pdatatemp 
+38c5 d8400000 arg 0 ,temp 
+
+light_parse_cmd_pwm_common:
+38c6 60088a9b storet 1 ,mem_pdatatemp + 1 
+38c7 58002710 setarg 10000 
+38c8 60018a9c store 3 ,mem_pdatatemp + 2 
+38c9 ea608000 ifetch 1 ,regc 
+38ca 60008a9f store 1 ,mem_pdatatemp + 5 
+38cb 204069ae call pwm_out_set 
+38cc 1a610c01 and regc ,1 ,contr 
+38cd c20038b7 loop light_parse_cmd_loop 
+38ce 20600000 rtn 
+
+light_parse_cmd_pwm1:
+38cf 1a620c00 copy regc ,contr 
+38d0 6800c69b fetch 1 ,mem_light_pwm1 
+38d1 60008a9a store 1 ,mem_pdatatemp 
+38d2 d8400001 arg 1 ,temp 
+38d3 202038c6 branch light_parse_cmd_pwm_common 
+
+light_parse_cmd_pwm2:
+38d4 1a620c00 copy regc ,contr 
+38d5 6800c69c fetch 1 ,mem_light_pwm2 
+38d6 60008a9a store 1 ,mem_pdatatemp 
+38d7 d8400002 arg 2 ,temp 
+38d8 202038c6 branch light_parse_cmd_pwm_common 
+
+light_parse_cmd_pwm3:
+38d9 1a620c00 copy regc ,contr 
+38da 6800c69d fetch 1 ,mem_light_pwm3 
+38db 60008a9a store 1 ,mem_pdatatemp 
+38dc d8400003 arg 3 ,temp 
+38dd 202038c6 branch light_parse_cmd_pwm_common 
+
+light_parse_cmd_pwm4:
+38de 1a620c00 copy regc ,contr 
+38df 6800c69e fetch 1 ,mem_light_pwm4 
+38e0 60008a9a store 1 ,mem_pdatatemp 
+38e1 d8400004 arg 4 ,temp 
+38e2 202038c6 branch light_parse_cmd_pwm_common 
+
+light_parse_cmd_pwm5:
+38e3 1a620c00 copy regc ,contr 
+38e4 6800c69f fetch 1 ,mem_light_pwm5 
+38e5 60008a9a store 1 ,mem_pdatatemp 
+38e6 d8400005 arg 5 ,temp 
+38e7 202038c6 branch light_parse_cmd_pwm_common 
+
+light_parse_auto_mode:
+38e8 e8c08000 ifetch 1 ,contr 
+38e9 20600000 rtn 
+
+light_parse_pairing:
+38ea 18c22600 copy contr ,regc 
+38eb 6800c6a0 fetch 1 ,mem_light_pairing_enable 
+38ec c080b8ee bne 1 ,light_parse_pairing_abandon 
+38ed 204038f0 call update_controler_list 
+
+light_parse_pairing_abandon:
+38ee 1a610c04 and regc ,4 ,contr 
+38ef 20600000 rtn 
+
+update_controler_list:
+38f0 44ee401b bpatch patch1b_4 ,mem_patch1b 
+38f1 20403871 call light_find_controler_pairing 
+38f2 203438fe branch update_conrtoler_list_found ,user 
+38f3 6800c6a4 fetch 1 ,mem_light_next_record 
+38f4 1fe20400 copy pdata ,temp 
+38f5 1fe0fe01 increase 1 ,pdata 
+38f6 6000c6a4 store 1 ,mem_light_next_record 
+38f7 20403867 call light_init_crr_cmd_count 
+38f8 184b8400 lshift2 temp ,temp 
+38f9 580046a5 setarg mem_light_clist 
+38fa 98408a00 iadd temp ,contw 
+38fb ea620000 ifetch 4 ,regc 
+38fc e0a20000 istore 4 ,contw 
+38fd 20203903 branch update_conrtoler_store_list 
+
+update_conrtoler_list_found:
+38fe 1a608c03 add regc ,3 ,contr 
+38ff e8c08000 ifetch 1 ,contr 
+3900 207a0000 rtn blank 
+3901 ea620000 ifetch 4 ,regc 
+3902 e2220000 istore 4 ,rega 
+
+update_conrtoler_store_list:
+3903 da2046a4 arg mem_light_next_record ,rega 
+3904 da400000 arg 0 ,regb 
+3905 d8400051 arg 81 ,temp 
+3906 20206606 branch iicd_write_eep_data 
+
+lightc_init:
+3907 6808c69a fetcht 1 ,mem_lightc_led_gpio 
+3908 20406825 call gpio_out_inactive 
+3909 20600000 rtn 
+
+lightc_dispatch:
+390a 6808c69a fetcht 1 ,mem_lightc_led_gpio 
+390b 20406829 call gpio_out_active 
+390c 6808c69a fetcht 1 ,mem_lightc_led_gpio 
+390d 20406825 call gpio_out_inactive 
+390e 2040391d call lightc_start_adv 
+390f 6800c6a7 fetch 1 ,mem_adv_time 
+3910 247a0000 nrtn blank 
+3911 20402c29 call lpm_write_gpio_wakeup 
+3912 68120138 hfetch 4 ,core_lpm_ctrl 
+3913 793ffe0f set0 15 ,pdata 
+3914 6012004c hstore 4 ,core_lpm_reg 
+3915 20402c21 call lpm_write_ctrl 
+3916 d85fffff arg param_hibernate_clks ,temp 
+3917 20202b2a branch lpm_sleep 
+
+lightc_adv:
+3918 6800c6a7 fetch 1 ,mem_adv_time 
+3919 203a56f9 branch le_adv_loop_tx ,blank 
+391a 1fe0ffff increase -1 ,pdata 
+391b 6000c6a7 store 1 ,mem_adv_time 
+391c 202056f9 branch le_adv_loop_tx 
+
+lightc_start_adv:
+391d 1feffe14 mul32 pdata ,20 ,pdata 
+391e d8c046a8 arg mem_cmd0_string ,contr 
+391f 98c08c00 iadd contr ,contr 
+3920 e8c08000 ifetch 1 ,contr 
+3921 207a0000 rtn blank 
+3922 1fe22200 copy pdata ,rega 
+3923 1a227200 copy rega ,loopcnt 
+3924 d8a04372 arg mem_le_adv_data + 2 ,contw 
+3925 20407f01 call memcpy 
+3926 1a227e00 copy rega ,pdata 
+3927 1fe0fe02 increase 2 ,pdata 
+3928 6000c36f store 1 ,mem_le_adv_data_len 
+3929 20600000 rtn 
+
+module_init:
+392a 20758000 rtn wake 
+392b 204057a3 call le_modified_name 
+392c 204068a8 call adc_init_data 
+392d 58003982 setarg module_process_idle 
+392e 600141f3 store 2 ,mem_cb_idle_process 
+392f 5800396e setarg module_bt_conn_process 
+3930 600141f1 store 2 ,mem_cb_bt_process 
+3931 58003986 setarg module_process_bb_event 
+3932 600141f5 store 2 ,mem_cb_bb_event_process 
+3933 5800396d setarg module_le_conn_process 
+3934 600141ef store 2 ,mem_cb_le_process 
+3935 58003969 setarg module_lpm_lock 
+3936 600141e9 store 2 ,mem_cb_check_wakelock 
+3937 58003ab7 setarg module_hci_cmd_transmit_le_notify 
+3938 600141fb store 2 ,mem_cb_ble_transmit 
+3939 58003c32 setarg module_hci_event_receive_spp_data 
+393a 6001456f store 2 ,mem_cb_receive_spp_data 
+393b 58003cc2 setarg module_le_receive_data 
+393c 600141f9 store 2 ,mem_cb_att_write 
+393d 58003cd7 setarg module_bb_event_timer 
+393e 600141fd store 2 ,mem_cb_event_timer 
+393f 2040397f call module_spp_clear_last_transmite_clock 
+3940 44eec01b bpatch patch1b_5 ,mem_patch1b 
+3941 20403945 call module_lpm_uart_init 
+3942 20403964 call module_gpio_init 
+3943 20402c6f call check_module_disabled 
+3944 20203c48 branch module_hci_event_enter_standby_mode 
+
+module_lpm_uart_init:
+3945 680246aa fetch 4 ,mem_module_uart_rx_buffer 
+3946 60120054 hstore 4 ,core_uart_rsaddr 
+3947 680246ae fetch 4 ,mem_module_uart_tx_buffer 
+3948 6012005a hstore 4 ,core_uart_tsaddr 
+3949 68108081 hfetch 1 ,core_gpio_sel1 
+394a 1fe1fe04 or_into 0x04 ,pdata 
+394b 1fe17efc and_into 0xfc ,pdata 
+394c 60108081 hstore 1 ,core_gpio_sel1 
+394d 70806200 jam 0x00 ,core_uart_ctrl 
+394e 680146aa fetch 2 ,mem_module_uart_rx_buffer 
+394f 60110058 hstore 2 ,core_uart_rrptr 
+3950 680146ae fetch 2 ,mem_module_uart_tx_buffer 
+3951 6011005e hstore 2 ,core_uart_twptr 
+3952 60110060 hstore 2 ,core_uart_trptrp 
+3953 68120078 hfetch 4 ,core_gpio_pu0 
+3954 79207e07 set1 7 ,pdata 
+3955 60120078 hstore 4 ,core_gpio_pu0 
+3956 68110050 hfetch 2 ,core_clkoff 
+3957 793ffe0f set0 clock_off_uart ,pdata 
+3958 60110050 hstore 2 ,core_clkoff 
+3959 204066ce call uart_set_baud_by_mem 
+395a 70804300 jam uartclk_crystal ,core_uart_clksel 
+395b 70806281 jam uart_ctrl_h4 ,core_uart_ctrl 
+395c 6800c6bf fetch 1 ,mem_module_flag 
+395d 2feffe00 isolate1 module_flag_uart_flow_control ,pdata 
+395e 68188062 hfetcht 1 ,core_uart_ctrl 
+395f 79208404 setflag true ,4 ,temp 
+3960 60188062 hstoret 1 ,core_uart_ctrl 
+3961 20600000 rtn 
+
+module_lpm_init:
+3962 2040397f call module_spp_clear_last_transmite_clock 
+3963 20203945 branch module_lpm_uart_init 
+
+module_gpio_init:
+3964 6808c69e fetcht 1 ,mem_module_connect_state_gpio 
+3965 2040680e call gpio_config_output 
+3966 204039e6 call module_set_conn_pin_low 
+3967 6808c69c fetcht 1 ,mem_module_wake_up_gpio 
+3968 202067fb branch gpio_config_input 
+
+module_lpm_lock:
+3969 6808c69c fetcht 1 ,mem_module_wake_up_gpio 
+396a 2040681d call gpio_get_bit 
+396b 2420b3d2 nbranch app_put_lpm_wake_lock ,true 
+396c 202033d0 branch app_get_lpm_wake_lock 
+
+module_le_conn_process:
+396d 20600000 rtn 
+
+module_bt_conn_process:
+396e 20403970 call module_spp_enter_sniff 
+396f 20203ce9 branch module_control_air_flow 
+
+module_spp_enter_sniff:
+3970 6800c682 fetch 1 ,mem_ui_state_map 
+3971 c302397f bbit0 ui_state_bt_spp_conn ,module_spp_clear_last_transmite_clock 
+3972 44ef401b bpatch patch1b_6 ,mem_patch1b 
+3973 58003eff setarg 0x3eff 
+3974 680a46c5 fetcht 4 ,mem_last_transmite_clock 
+3975 98408400 iadd temp ,temp 
+3976 1c427e00 copy clkn_bt ,pdata 
+3977 98467c00 isub temp ,null 
+3978 24610000 nrtn positive 
+3979 68014682 fetch 2 ,mem_ui_state_map 
+397a c282b97f bbit1 ui_state_bt_sniff ,module_spp_clear_last_transmite_clock 
+397b 6800c6bf fetch 1 ,mem_module_flag 
+397c c3830000 rtnbit1 moudle_task_sniff 
+397d 20403cec call module_set_sniff_task_flag 
+397e 2040340e call app_bt_enter_sniff 
+
+module_spp_clear_last_transmite_clock:
+397f 1c427e00 copy clkn_bt ,pdata 
+3980 600246c5 store 4 ,mem_last_transmite_clock 
+3981 20600000 rtn 
+
+module_process_idle:
+3982 20403ce9 call module_control_air_flow 
+3983 2040526e call l2cap_malloc_is_fifo_full 
+3984 247a0000 nrtn blank 
+3985 202039eb branch module_process 
+
+module_process_bb_event:
+3986 1a627e00 copy regc ,pdata 
+3987 c000b9d4 beq bt_evt_bb_connected ,module_process_bb_conn 
+3988 c00139a3 beq bt_evt_bb_disconnected ,module_process_bb_event_disconned 
+3989 c00239d7 beq bt_evt_reconn_failed ,module_process_reconn_fail 
+398a c002b9c4 beq bt_evt_setup_complete ,module_process_setup_complete 
+398b c00439aa beq bt_evt_spp_connected ,module_process_spp_connected 
+398c c004b9b1 beq bt_evt_spp_disconnected ,module_process_spp_disconnected 
+398d c00539c9 beq bt_evt_pincode_req ,module_process_evt_pincode_req 
+398e c005b9b6 beq bt_evt_enter_sniff ,module_process_enter_sniff 
+398f c00639c2 beq bt_evt_exit_sniff ,module_process_exit_sniff 
+3990 c009b9d7 beq bt_evt_reconn_page_timeout ,module_process_page_time_out 
+3991 c00a39cf beq bt_evt_le_connected ,module_process_le_conn 
+3992 c00ab9c6 beq bt_evt_le_disconnected ,module_process_bb_even_le_disconn 
+3993 c010b9ca beq bt_evt_sniff_not_accept ,module_process_sniff_not_accept 
+3994 c011b9cb beq bt_evt_unsniff_accept ,module_process_unsniff_accept 
+3995 c01239ce beq bt_evt_unsniff_not_accept ,module_process_unsniff_not_accept 
+3996 c0183c8a beq bt_evt_le_pairing_fail ,module_hci_event_le_pairing_fail 
+3997 c018bc8c beq bt_evt_le_pairing_success ,module_hci_event_le_pairing_success 
+3998 c0193c9a beq bt_evt_le_start_enc ,module_hci_event_start_enc 
+3999 c019bc98 beq bt_evt_le_pause_enc ,module_hci_event_pause_enc 
+399a c01a3c84 beq bt_evt_le_tk_generate ,module_hci_event_le_tk 
+399b c01abc73 beq bt_evt_bt_gkey_generate ,module_hci_event_gkey_generate 
+399c c01b3c82 beq bt_evt_bt_get_passkey ,module_hci_event_passkey_entry_mode 
+399d c01bbc8e beq bt_evt_bt_pairing_fail ,module_hci_event_bt_pairing_fail 
+399e c01c3c90 beq bt_evt_bt_pairing_success ,module_hci_event_bt_pairing_success 
+399f c01dbca1 beq bt_evt_le_gkey_generate ,module_hci_event_le_gkey 
+39a0 c01ebc6a beq bt_evt_store_nvram ,module_hci_event_store_device 
+39a1 c020b9d9 beq bt_evt_le_ltk_lost ,module_process_ble_ltk_lost 
+39a2 20600000 rtn 
+
+module_process_bb_event_disconned:
+39a3 2040397f call module_spp_clear_last_transmite_clock 
+39a4 6800c665 fetch 1 ,mem_flag_pairing_state 
+39a5 245a3c8e ncall module_hci_event_bt_pairing_fail ,blank 
+39a6 204039d7 call module_disconn_start 
+39a7 68014682 fetch 2 ,mem_ui_state_map 
+39a8 c4020000 rtnbit0 ui_state_bt_spp_conn 
+39a9 202039b1 branch module_spp_disconnected 
+
+module_process_spp_connected:
+39aa 68014682 fetch 2 ,mem_ui_state_map 
+39ab 79207e04 set1 ui_state_bt_spp_conn ,pdata 
+39ac 60014682 store 2 ,mem_ui_state_map 
+39ad 6800c6a7 fetch 1 ,mem_module_spp_lpm_mult 
+39ae 6000c172 store 1 ,mem_lpm_mult 
+39af 204039e6 call module_set_conn_pin_low 
+39b0 20203c1d branch module_hci_event_spp_connect 
+
+module_process_spp_disconnected:
+
+module_spp_disconnected:
+39b1 68014682 fetch 2 ,mem_ui_state_map 
+39b2 c4020000 rtnbit0 ui_state_bt_spp_conn 
+39b3 793ffe04 set0 ui_state_bt_spp_conn ,pdata 
+39b4 60014682 store 2 ,mem_ui_state_map 
+39b5 20203c21 branch module_hci_event_spp_disconnect 
+
+module_process_enter_sniff:
+
+module_sniff_param_check:
+39b6 2040397f call module_spp_clear_last_transmite_clock 
+39b7 68014042 fetch 2 ,mem_context + coffset_tsniff 
+39b8 1fe37e00 rshift pdata ,pdata 
+39b9 680941e3 fetcht 2 ,mem_sniff_param_interval 
+39ba 98467c00 isub temp ,null 
+39bb 2422b9bd nbranch module_sniff_param_check_unsniff ,zero 
+39bc 20203416 branch app_lpm_mult_enable 
+
+module_sniff_param_check_unsniff:
+39bd 6800c6bf fetch 1 ,mem_module_flag 
+39be c3828000 rtnbit1 moudle_task_unsniff 
+39bf 68110112 hfetch 2 ,core_uart_rxitems 
+39c0 245a3cf0 ncall module_set_unsniff_task_flag ,blank 
+39c1 2020340c branch app_bt_sniff_exit 
+
+module_process_exit_sniff:
+39c2 20403cee call module_clear_sniff_task_flag 
+39c3 20203418 branch app_lpm_mult_disable 
+
+module_process_setup_complete:
+39c4 2040397f call module_spp_clear_last_transmite_clock 
+39c5 202039dd branch module_conn_start 
+
+module_process_bb_even_le_disconn:
+39c6 20405816 call le_clr_config_more_data 
+39c7 204039d7 call module_disconn_start 
+39c8 20203c23 branch module_hci_event_le_disconnect 
+
+module_process_evt_pincode_req:
+39c9 202033dd branch app_bt_set_pincode 
+
+module_process_sniff_not_accept:
+39ca 20203cee branch module_clear_sniff_task_flag 
+
+module_process_unsniff_accept:
+39cb 6800c6bf fetch 1 ,mem_module_flag 
+39cc c302b40e bbit0 moudle_task_unsniff ,app_bt_enter_sniff 
+39cd 20203cf2 branch module_clear_unsniff_task_flag 
+
+module_process_unsniff_not_accept:
+39ce 20203cf2 branch module_clear_unsniff_task_flag 
+
+module_process_le_conn:
+39cf 204058ba call le_send_att_exchange_mtu_requset 
+39d0 204039dd call module_conn_start 
+39d1 6800c6a8 fetch 1 ,mem_module_le_lpm_mult 
+39d2 6000c172 store 1 ,mem_lpm_mult 
+39d3 20203c1f branch module_hci_event_le_connect 
+
+module_process_bb_conn:
+39d4 70466100 jam 0 ,mem_flag_mode_ssp_pin 
+39d5 20403cee call module_clear_sniff_task_flag 
+39d6 20203cf2 branch module_clear_unsniff_task_flag 
+
+module_process_page_time_out:
+
+module_process_reconn_fail:
+
+module_disconn_start:
+39d7 20403a52 call module_start_adv_discovery_by_command 
+39d8 202039db branch module_set_conn_pin_high 
+
+module_process_ble_ltk_lost:
+39d9 20405cc9 call le_send_reject_ind 
+39da 20205b02 branch le_send_smp_security_request 
+
+module_set_conn_pin_high:
+39db 6808c69e fetcht 1 ,mem_module_connect_state_gpio 
+39dc 20206829 branch gpio_out_active 
+
+module_conn_start:
+39dd 204039df call module_stop_adv_discovery 
+39de 202039e6 branch module_set_conn_pin_low 
+
+module_stop_adv_discovery:
+39df 6800c6a1 fetch 1 ,mem_module_state 
+39e0 2feffe00 isolate1 moudle_state_bt_bit ,pdata 
+39e1 2040b3f0 call app_bt_stop_discovery ,true 
+39e2 6800c6a1 fetch 1 ,mem_module_state 
+39e3 2feffe01 isolate1 moudle_state_ble_bit ,pdata 
+39e4 2040b3f8 call app_ble_stop_adv ,true 
+39e5 20600000 rtn 
+
+module_set_conn_pin_low:
+39e6 6808c69e fetcht 1 ,mem_module_connect_state_gpio 
+39e7 20206825 branch gpio_out_inactive 
+
+module_process_with_credit:
+39e8 6800c56b fetch 1 ,mem_credit_flag 
+39e9 c1000000 rtneq credit_disable 
+39ea 20206c28 branch rfcomm_send_uih_without_payload 
+
+module_process:
+39eb 6810810c hfetch 1 ,core_uart_status 
+39ec c281b9e8 bbit1 uart_status_rx_fifo_empty ,module_process_with_credit 
+39ed 204066cb call uartd_prepare_rx 
+39ee e8608000 ifetch 1 ,contru 
+39ef c080ba01 bne 0x01 ,module_hci_in_excp 
+39f0 68110112 hfetch 2 ,core_uart_rxitems 
+39f1 1fe67c02 sub pdata ,2 ,null 
+39f2 20610000 rtn positive 
+39f3 e8608000 ifetch 1 ,contru 
+39f4 60008b03 store 1 ,mem_module_uart_opcode 
+39f5 e8688000 ifetcht 1 ,contru 
+39f6 18622200 copy contru ,rega 
+39f7 60088b04 storet 1 ,mem_module_uart_len 
+39f8 18408403 add temp ,3 ,temp 
+39f9 68110112 hfetch 2 ,core_uart_rxitems 
+39fa 98460400 isub temp ,temp 
+39fb 24610000 nrtn positive 
+39fc 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 
+39fd 20403a17 call module_hci_cmd_control 
+39fe 68008b05 fetch 1 ,mem_module_temp_nl_discard_packet 
+39ff c1000000 rtneq hci_not_discard_packet 
+3a00 20203a12 branch module_hci_dicard_packet 
+
+module_hci_in_excp:
+3a01 20407ec1 call delay_10ms 
+3a02 20403c79 call module_hci_event_invalid_packet 
+3a03 20203a04 branch module_hci_release_except 
+
+module_hci_release_except:
+3a04 44efc01b bpatch patch1b_7 ,mem_patch1b 
+3a05 68110112 hfetch 2 ,core_uart_rxitems 
+3a06 207a0000 rtn blank 
+3a07 204066cb call uartd_prepare_rx 
+3a08 e8608000 ifetch 1 ,contru 
+3a09 1fe67c01 sub pdata ,0x01 ,null 
+3a0a 2442ba16 ncall module_hci_dicard_bytes ,zero 
+3a0b 2422ba04 nbranch module_hci_release_except ,zero 
+3a0c e8608000 ifetch 1 ,contru 
+3a0d c1028000 rtneq hci_cmd_spp_data_req 
+3a0e c1148000 rtneq hci_cmd_set_credit_given 
+3a0f 186087ff increase -1 ,contru 
+3a10 20403a16 call module_hci_dicard_bytes 
+3a11 20203a04 branch module_hci_release_except 
+
+module_hci_dicard_packet:
+3a12 204066cb call uartd_prepare_rx 
+3a13 18608602 increase 2 ,contru 
+3a14 e8608000 ifetch 1 ,contru 
+3a15 98608600 iadd contru ,contru 
+
+module_hci_dicard_bytes:
+3a16 202066c8 branch uartd_rxdone 
+
+module_hci_cmd_control:
+3a17 44f0401c bpatch patch1c_0 ,mem_patch1c 
+3a18 68008b03 fetch 1 ,mem_module_uart_opcode 
+3a19 c0003a3f beq hci_cmd_set_bt_addr_req ,module_hci_cmd_set_bt_addr 
+3a1a c000ba44 beq hci_cmd_set_le_addr_req ,module_hci_cmd_set_le_addr 
+3a1b c0013a49 beq hci_cmd_set_visibility_req ,module_hci_cmd_set_visibility 
+3a1c c001ba5f beq hci_cmd_set_bt_name_req ,module_hci_cmd_set_bt_name 
+3a1d c0023a6b beq hci_cmd_set_le_name_req ,module_hci_cmd_set_le_name 
+3a1e c002ba75 beq hci_cmd_spp_data_req ,module_hci_cmd_receive_spp_data 
+3a1f c004ba9a beq hci_cmd_le_data_req ,module_hci_cmd_receive_le_data 
+3a20 c005bad7 beq hci_cmd_status_irq ,module_hci_cmd_inquire_status 
+3a21 c0063ad8 beq hci_cmd_set_pairing_req ,module_hci_cmd_set_pairing_mode 
+3a22 c006baec beq hci_cmd_set_pincode_req ,module_hci_cmd_set_pincode 
+3a23 c0073af4 beq hci_cmd_set_uartcontrol_req ,module_hci_cmd_set_uart_control_mode 
+3a24 c007bafa beq hci_cmd_set_uart_baud_req ,module_hci_cmd_set_uart_baud 
+3a25 c0083b06 beq hci_cmd_version_req ,module_hci_cmd_version_request 
+3a26 c008bb0e beq hci_cmd_bt_disconnect ,module_hci_cmd_bt_disconnect 
+3a27 c0093b12 beq hci_cmd_ble_disconnect ,module_hci_cmd_ble_disconnect 
+3a28 c0133b16 beq hci_cmd_set_nvram_req ,module_hci_cmd_set_nvram 
+3a29 c0143b1d beq hci_cmd_confirm_gkey ,module_hci_cmd_confirm_gkey 
+3a2a c014bb2d beq hci_cmd_set_credit_given ,module_hci_cmd_set_credit_given 
+3a2b c0153b36 beq hci_cmd_auto_adv_scan ,module_hci_cmd_auto_adv 
+3a2c c015bb69 beq hci_cmd_power_req ,module_hci_cmd_power_request 
+3a2d c0163b6f beq hci_cmd_power_set ,module_hci_cmd_power_set 
+3a2e c0183b76 beq hci_cmd_passkey_entry ,module_hci_cmd_passkey_entry 
+3a2f c018bb7c beq hci_cmd_set_gpio ,module_hci_cmd_set_gpio 
+3a30 c0193b90 beq hci_cmd_read_gpio ,module_hci_cmd_read_gpio 
+3a31 c019bb98 beq hci_cmd_le_set_pairing ,module_hci_cmd_le_set_pairing_mode 
+3a32 c01a3bbb beq hci_cmd_le_set_adv_data ,module_hci_cmd_le_set_adv_data 
+3a33 c01abbc4 beq hci_cmd_le_set_scan_data ,module_hci_cmd_le_set_scan_data 
+3a34 c01b3bcd beq hci_cmd_le_send_conn_update_req ,module_hci_cmd_le_send_conn_update_req 
+3a35 c01bbbd7 beq hci_cmd_le_set_adv_parm ,module_hci_cmd_set_le_adv_parameter 
+3a36 c01c3bda beq hci_cmd_le_start_pairing ,module_hci_cmd_le_start_pairing 
+3a37 c0203be2 beq hci_cmd_set_wake_gpio ,module_hci_cmd_set_wake_gpio 
+3a38 c0213bec beq hci_cmd_set_tx_power ,module_hci_cmd_set_tx_power 
+3a39 c0243bf1 beq hci_cmd_le_confirm_gkey ,module_hci_cmd_le_confirm_gkey 
+3a3a c024bbfc beq hci_cmd_reject_justwork ,module_hci_cmd_set_reject_justwork_flag 
+3a3b c028bc02 beq hci_cmd_reset_chip_req ,module_hci_cmd_reset_chip 
+3a3c c030bc06 beq hci_cmd_le_set_fixed_passkey ,module_hci_cmd_le_set_fixed_passkey 
+3a3d c07fbc15 beq hci_test_cmd_close_lpm ,module_hci_test_cmde_close_lpm 
+3a3e 20203c17 branch module_hci_event_receive_invalid_cmd 
+
+module_hci_cmd_set_bt_addr:
+3a3f 68008b04 fetch 1 ,mem_module_uart_len 
+3a40 c0833c17 bne 6 ,module_hci_event_receive_invalid_cmd 
+3a41 e8630000 ifetch 6 ,contru 
+3a42 600340a0 store 6 ,mem_lap 
+3a43 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_le_addr:
+3a44 68008b04 fetch 1 ,mem_module_uart_len 
+3a45 c0833c17 bne 6 ,module_hci_event_receive_invalid_cmd 
+3a46 e8630000 ifetch 6 ,contru 
+3a47 600344a0 store 6 ,mem_le_lap 
+3a48 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_visibility:
+3a49 68008b04 fetch 1 ,mem_module_uart_len 
+3a4a c080bc17 bne 1 ,module_hci_event_receive_invalid_cmd 
+3a4b 1a220600 copy rega ,contru 
+3a4c 20403c1a call module_hci_event_receive_valid_cmd 
+3a4d e8688000 ifetcht 1 ,contru 
+3a4e 6008c6a9 storet 1 ,mem_module_bluetooth_stauts_by_command 
+3a4f 68014682 fetch 2 ,mem_ui_state_map 
+3a50 c3848000 rtnbit1 ui_state_ble_connected 
+3a51 c3800000 rtnbit1 ui_state_bt_connected 
+
+module_start_adv_discovery_by_command:
+3a52 6800c6a1 fetch 1 ,mem_module_state 
+3a53 2feffe00 isolate1 moudle_state_bt_bit ,pdata 
+3a54 2420ba58 nbranch moudle_start_adv_by_command ,true 
+3a55 6808c6a9 fetcht 1 ,mem_module_bluetooth_stauts_by_command 
+3a56 18417e03 and temp ,0x03 ,pdata 
+3a57 6000c093 store 1 ,mem_scan_mode 
+
+moudle_start_adv_by_command:
+3a58 6800c6a1 fetch 1 ,mem_module_state 
+3a59 2feffe01 isolate1 moudle_state_ble_bit ,pdata 
+3a5a 24608000 nrtn true 
+3a5b 6808c6a9 fetcht 1 ,mem_module_bluetooth_stauts_by_command 
+3a5c 284ffe02 isolate1 2 ,temp 
+3a5d 2020b3fa branch app_ble_start_adv ,true 
+3a5e 202033f8 branch app_ble_stop_adv 
+
+module_hci_cmd_set_bt_name:
+3a5f 68008b04 fetch 1 ,mem_module_uart_len 
+3a60 1fe67c43 sub pdata ,67 ,null 
+3a61 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 
+3a62 6000c515 store 1 ,mem_local_name_length 
+3a63 df200008 arg 8 ,loopcnt 
+3a64 20407ec6 call memset0 
+3a65 68008b04 fetch 1 ,mem_module_uart_len 
+3a66 1fe27200 copy pdata ,loopcnt 
+3a67 1a220600 copy rega ,contru 
+3a68 d8a04516 arg mem_local_name ,contw 
+3a69 204066ea call uart_copy_rx_bytes_fast 
+3a6a 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_le_name:
+3a6b 68008b04 fetch 1 ,mem_module_uart_len 
+3a6c 1fe67c1d sub pdata ,29 ,null 
+3a6d 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 
+3a6e 6000c3af store 1 ,mem_le_name_len 
+3a6f 1fe27200 copy pdata ,loopcnt 
+3a70 1a220600 copy rega ,contru 
+3a71 d8a043b0 arg mem_le_name ,contw 
+3a72 204066ea call uart_copy_rx_bytes_fast 
+3a73 204057a3 call le_modified_name 
+3a74 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_receive_spp_data:
+3a75 6800c682 fetch 1 ,mem_ui_state_map 
+3a76 c3023c17 bbit0 ui_state_bt_spp_conn ,module_hci_event_receive_invalid_cmd 
+3a77 204033ba call app_check_sniff 
+3a78 2020ba86 branch module_hci_cmd_spp_exit_sniff ,true 
+3a79 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+3a7a 2040397f call module_spp_clear_last_transmite_clock 
+3a7b 6800c568 fetch 1 ,mem_remote_credits 
+3a7c 207a0000 rtn blank 
+3a7d 68014573 fetch 2 ,mem_nl_rx_len_all 
+3a7e c0803a84 bne 0 ,module_hci_cmd_pass_init_ng_rx_len_all 
+3a7f 68008b04 fetch 1 ,mem_module_uart_len 
+3a80 60014573 store 2 ,mem_nl_rx_len_all 
+3a81 1a220600 copy rega ,contru 
+3a82 18627e00 copy contru ,pdata 
+3a83 60014571 store 2 ,mem_nl_rx_data_src 
+
+module_hci_cmd_pass_init_ng_rx_len_all:
+3a84 20403a88 call module_hci_cmd_get_current_packet_len_and_remain_len 
+3a85 20206c4d branch spp_tx_rfcomm_packet 
+
+module_hci_cmd_spp_exit_sniff:
+3a86 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+3a87 20203cd1 branch module_exit_sniff 
+
+module_hci_cmd_get_current_packet_len_and_remain_len:
+3a88 20403a8e call module_hci_cmd_get_current_patcket_len 
+3a89 68014573 fetch 2 ,mem_nl_rx_len_all 
+3a8a 6809469f fetcht 2 ,mem_current_packet_length 
+3a8b 98467e00 isub temp ,pdata 
+3a8c 60014573 store 2 ,mem_nl_rx_len_all 
+3a8d 20600000 rtn 
+
+module_hci_cmd_get_current_patcket_len:
+3a8e 68014573 fetch 2 ,mem_nl_rx_len_all 
+3a8f d840006e arg dm_refcom_buff_len ,temp 
+3a90 20407fdd call not_greater_than 
+3a91 6809456c fetcht 2 ,mem_rfcomm_max_frame_size 
+3a92 20407fdd call not_greater_than 
+3a93 6809455e fetcht 2 ,mem_pn_max_frame_size 
+3a94 20407fdd call not_greater_than 
+3a95 6001469f store 2 ,mem_current_packet_length 
+3a96 20600000 rtn 
+
+module_hci_command_tx_spp_tx_complete:
+3a97 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 
+3a98 700b0305 jam hci_cmd_spp_data_req ,mem_module_uart_opcode 
+3a99 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_receive_le_data:
+3a9a 68014682 fetch 2 ,mem_ui_state_map 
+3a9b c304bc17 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd 
+3a9c 20403ad4 call module_check_ble_encrypt_state 
+3a9d 20343c17 branch module_hci_event_receive_invalid_cmd ,user 
+3a9e 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+3a9f 6800c6bf fetch 1 ,mem_module_flag 
+3aa0 c2823ab4 bbit1 module_flag_ble_data_finish ,module_hci_cmd_receive_le_data_finish 
+3aa1 6800c6c0 fetch 1 ,mem_module_hci_notify_len 
+3aa2 247a0000 nrtn blank 
+3aa3 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 
+3aa4 e8610000 ifetch 2 ,contru 
+3aa5 600146c1 store 2 ,mem_module_hci_notify_handle 
+3aa6 18627e00 copy contru ,pdata 
+3aa7 600146c3 store 2 ,mem_module_hci_nofiy_addr 
+3aa8 68008b04 fetch 1 ,mem_module_uart_len 
+3aa9 1fe0fffe pincrease -2 
+3aaa 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 
+3aab 2022bc17 branch module_hci_event_receive_invalid_cmd ,zero 
+3aac 6000c6c0 store 1 ,mem_module_hci_notify_len 
+3aad 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+3aae 20405814 call le_set_config_more_data 
+3aaf 20403ab7 call module_hci_cmd_transmit_le_notify 
+3ab0 20403ab7 call module_hci_cmd_transmit_le_notify 
+3ab1 20403ab7 call module_hci_cmd_transmit_le_notify 
+3ab2 6800c6bf fetch 1 ,mem_module_flag 
+3ab3 c4020000 rtnbit0 module_flag_ble_data_finish 
+
+module_hci_cmd_receive_le_data_finish:
+3ab4 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet 
+3ab5 20403cf6 call module_clear_le_tx_data_flag 
+3ab6 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_transmit_le_notify:
+3ab7 6800c6c0 fetch 1 ,mem_module_hci_notify_len 
+3ab8 207a0000 rtn blank 
+3ab9 20405892 call le_fifo_check_nearly_full 
+3aba 247a0000 nrtn blank 
+3abb 20403acf call module_get_le_remote_mtu 
+3abc 44f0c01c bpatch patch1c_1 ,mem_patch1c 
+3abd 1840fffd add temp ,-3 ,pdata 
+3abe 6808c6c0 fetcht 1 ,mem_module_hci_notify_len 
+3abf 20407fdd call not_greater_than 
+3ac0 1fe22200 copy pdata ,rega 
+3ac1 18427e00 copy temp ,pdata 
+3ac2 9a267e00 isub rega ,pdata 
+3ac3 6000c6c0 store 1 ,mem_module_hci_notify_len 
+3ac4 680946c1 fetcht 2 ,mem_module_hci_notify_handle 
+3ac5 20405a64 call le_att_malloc_tx_notify 
+3ac6 680146c3 fetch 2 ,mem_module_hci_nofiy_addr 
+3ac7 1fe20600 copy pdata ,contru 
+3ac8 1a227200 copy rega ,loopcnt 
+3ac9 204066ea call uart_copy_rx_bytes_fast 
+3aca 18627e00 copy contru ,pdata 
+3acb 600146c3 store 2 ,mem_module_hci_nofiy_addr 
+3acc 6800c6c0 fetch 1 ,mem_module_hci_notify_len 
+3acd 247a0000 nrtn blank 
+3ace 20203cf4 branch module_set_le_tx_data_flag 
+
+module_get_le_remote_mtu:
+3acf d8400017 arg 0x17 ,temp 
+3ad0 6800c6bf fetch 1 ,mem_module_flag 
+3ad1 c3808000 rtnbit1 module_flag_ble_send_mtu23 
+3ad2 680944a8 fetcht 2 ,mem_le_remote_mtu 
+3ad3 20600000 rtn 
+
+module_check_ble_encrypt_state:
+3ad4 6800c6bf fetch 1 ,mem_module_flag 
+3ad5 c2815a42 bbit1 module_flag_ble_data_encrypt ,le_check_encrypt_state 
+3ad6 20207fe9 branch disable_user 
+
+module_hci_cmd_inquire_status:
+3ad7 20203c4c branch module_hci_event_status_res 
+
+module_hci_cmd_set_pairing_mode:
+3ad8 1a220600 copy rega ,contru 
+3ad9 e8608000 ifetch 1 ,contru 
+3ada c0003adf beq pairing_pincode ,module_hci_pairing_pincode_mode 
+3adb c000bae2 beq pairing_justwork ,module_hci_pairing_just_work_mode 
+3adc c0013ae8 beq pairing_passkey ,module_hci_pairing_passkey 
+3add c001baea beq pairing_confirm ,module_hci_pairing_numeric_comparison 
+3ade 20203c17 branch module_hci_event_receive_invalid_cmd 
+
+module_hci_pairing_pincode_mode:
+3adf 2040612b call ssp_disable 
+3ae0 70465a00 jam 0 ,mem_ssp_enable 
+3ae1 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_pairing_just_work_mode:
+3ae2 58040003 setarg ssp_mode_just_work_io_cap_data 
+
+module_hci_sspairing_mode:
+3ae3 6001c65b store 3 ,mem_sp_iocap_local 
+3ae4 6000c662 store 1 ,mem_ssp_mode_flag 
+3ae5 20406124 call ssp_enable 
+3ae6 70465a01 jam 1 ,mem_ssp_enable 
+3ae7 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_pairing_passkey:
+3ae8 58040002 setarg ssp_mode_passkey_io_cap_data 
+3ae9 20203ae3 branch module_hci_sspairing_mode 
+
+module_hci_pairing_numeric_comparison:
+3aea 58040001 setarg ssp_mode_ssp_pin_io_cap_data 
+3aeb 20203ae3 branch module_hci_sspairing_mode 
+
+module_hci_cmd_set_pincode:
+3aec 68008b04 fetch 1 ,mem_module_uart_len 
+3aed 1fe67c10 sub pdata ,16 ,null 
+3aee 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 
+3aef 6000c689 store 1 ,mem_pin_length 
+3af0 1fe27200 copy pdata ,loopcnt 
+3af1 d8a0468a arg mem_pin ,contw 
+3af2 204066fd call uart_copy_rx_bytes 
+3af3 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_uart_control_mode:
+3af4 1a220600 copy rega ,contru 
+3af5 e8608000 ifetch 1 ,contru 
+3af6 68188062 hfetcht 1 ,core_uart_ctrl 
+3af7 7d3a0404 nsetflag blank ,4 ,temp 
+3af8 60188062 hstoret 1 ,core_uart_ctrl 
+3af9 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_uart_baud:
+3afa 68008b04 fetch 1 ,mem_module_uart_len 
+3afb 1fe27200 copy pdata ,loopcnt 
+3afc 1a220600 copy rega ,contru 
+3afd 20407f58 call string2dec_from_uart 
+3afe 596e3600 setarg uart_clk_24 
+3aff 9846fc00 idiv temp 
+3b00 20407f86 call wait_div_end 
+3b01 1807fe00 quotient pdata 
+
+module_hci_cmd_set_uart_baud_ok:
+3b02 60014243 store uart_baud_len ,mem_baud 
+3b03 20403c1a call module_hci_event_receive_valid_cmd 
+3b04 20407f9e call wait_uarttx 
+3b05 202066ce branch uart_set_baud_by_mem 
+
+module_hci_cmd_version_request:
+3b06 da200002 arg 2 ,rega 
+3b07 da40469a arg mem_soft_version_num ,regb 
+3b08 d8400000 arg 0 ,temp 
+3b09 20203c25 branch module_hci_event_set_cmd 
+
+module_hci_event_set_cmd_send_response:
+3b0a 60010ac2 store 2 ,mem_event_cmd_response_content 
+3b0b da400ac2 arg mem_event_cmd_response_content ,regb 
+3b0c d8400000 arg 0 ,temp 
+3b0d 20203c25 branch module_hci_event_set_cmd 
+
+module_hci_cmd_bt_disconnect:
+3b0e 68014682 fetch 2 ,mem_ui_state_map 
+3b0f c3003c17 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd 
+
+module_hci_cmd_bt_disconnect_doing:
+3b10 20403c1a call module_hci_event_receive_valid_cmd 
+3b11 202033e9 branch app_bt_disconnect 
+
+module_hci_cmd_ble_disconnect:
+3b12 68014682 fetch 2 ,mem_ui_state_map 
+3b13 c304bc17 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd 
+
+module_hci_cmd_ble_disconnect_doing:
+3b14 20403c1a call module_hci_event_receive_valid_cmd 
+3b15 20203402 branch app_ble_disconnect 
+
+module_hci_cmd_set_nvram:
+3b16 68008b04 fetch 1 ,mem_module_uart_len 
+3b17 1fe27200 copy pdata ,loopcnt 
+3b18 1a220600 copy rega ,contru 
+3b19 68014215 fetch 2 ,mem_nv_data_ptr 
+3b1a 1fe20a00 icopy contw 
+3b1b 204066ea call uart_copy_rx_bytes_fast 
+3b1c 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_confirm_gkey:
+3b1d 6800c682 fetch 1 ,mem_ui_state_map 
+3b1e c3003c17 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd 
+3b1f e8608000 ifetch 1 ,contru 
+3b20 6808c661 fetcht 1 ,mem_flag_mode_ssp_pin 
+3b21 793a0400 setflag blank ,flag_mode_ssp_pin_comparison_result_bit ,temp 
+3b22 79200407 set1 flag_mode_ssp_pin_reviceve_comparison_bit ,temp 
+3b23 6008c661 storet 1 ,mem_flag_mode_ssp_pin 
+3b24 20403c1a call module_hci_event_receive_valid_cmd 
+3b25 6800c661 fetch 1 ,mem_flag_mode_ssp_pin 
+3b26 c2833b2b bbit1 flag_mode_ssp_pin_recieve_dhkey_bit ,module_hci_cmd_spp_number_comparison_result_is1 
+3b27 20600000 rtn 
+
+dhkey_not_accept:
+3b28 70466100 jam 0 ,mem_flag_mode_ssp_pin 
+3b29 700a9921 jam bt_cmd_dhkey_not_accept ,mem_fifo_temp 
+3b2a 20207d8f branch ui_ipc_send_cmd 
+
+module_hci_cmd_spp_number_comparison_result_is1:
+3b2b c2805f95 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed 
+3b2c 20203b28 branch dhkey_not_accept 
+
+module_hci_cmd_set_credit_given:
+3b2d 6800c682 fetch 1 ,mem_ui_state_map 
+3b2e c4020000 rtnbit0 ui_state_bt_spp_conn 
+3b2f 6800c56b fetch 1 ,mem_credit_flag 
+3b30 c1000000 rtneq credit_disable 
+3b31 e8608000 ifetch 1 ,contru 
+3b32 6808c569 fetcht 1 ,mem_credit_given 
+3b33 98408400 iadd temp ,temp 
+3b34 6008c569 storet 1 ,mem_credit_given 
+3b35 20600000 rtn 
+
+module_hci_cmd_auto_adv:
+3b36 df200040 arg 0x40 ,loopcnt 
+3b37 d8a0436f arg mem_le_adv_data_len ,contw 
+3b38 20407ed4 call clear_mem 
+3b39 58000000 setarg 0 
+3b3a 60008ab2 store 1 ,mem_regb 
+3b3b 1a220600 copy rega ,contru 
+
+module_hci_cmd_auto_adv_loop:
+3b3c 18627e00 copy contru ,pdata 
+3b3d 60010ab6 store 2 ,mem_regc 
+3b3e 20403b64 call module_hci_cmd_auto_adv_adv_analys 
+3b3f 68008ab2 fetch 1 ,mem_regb 
+3b40 68088aa2 fetcht 1 ,mem_temp 
+3b41 18408401 increase 1 ,temp 
+3b42 9840fe00 iadd temp ,pdata 
+3b43 60008ab2 store 1 ,mem_regb 
+3b44 1fe67c1f sub pdata ,31 ,null 
+3b45 24213b50 nbranch module_hci_cmd_auto_adv_store_scan ,positive 
+
+module_hci_cmd_auto_adv_store_adv:
+3b46 6808c36f fetcht 1 ,mem_le_adv_data_len 
+3b47 58004370 setarg mem_le_adv_data 
+3b48 9840fe00 iadd temp ,pdata 
+3b49 60010abb store 2 ,mem_contw 
+3b4a 68088aa2 fetcht 1 ,mem_temp 
+3b4b 18408401 increase 1 ,temp 
+3b4c 6800c36f fetch 1 ,mem_le_adv_data_len 
+3b4d 9840fe00 iadd temp ,pdata 
+3b4e 6000c36f store 1 ,mem_le_adv_data_len 
+3b4f 20203b59 branch module_hci_cmd_auto_adv_store_common 
+
+module_hci_cmd_auto_adv_store_scan:
+3b50 6808c38f fetcht 1 ,mem_le_scan_data_len 
+3b51 58004390 setarg mem_le_scan_data 
+3b52 9840fe00 iadd temp ,pdata 
+3b53 60010abb store 2 ,mem_contw 
+3b54 68088aa2 fetcht 1 ,mem_temp 
+3b55 18408401 increase 1 ,temp 
+3b56 6800c38f fetch 1 ,mem_le_scan_data_len 
+3b57 9840fe00 iadd temp ,pdata 
+3b58 6000c38f store 1 ,mem_le_scan_data_len 
+
+module_hci_cmd_auto_adv_store_common:
+3b59 68010abb fetch 2 ,mem_contw 
+3b5a 1fe20a00 copy pdata ,contw 
+3b5b 68010ab6 fetch 2 ,mem_regc 
+3b5c 1fe20600 copy pdata ,contru 
+3b5d 18427200 copy temp ,loopcnt 
+3b5e 204066ea call uart_copy_rx_bytes_fast 
+3b5f 68008b04 fetch 1 ,mem_module_uart_len 
+3b60 68088ab2 fetcht 1 ,mem_regb 
+3b61 98467c00 isub temp ,null 
+3b62 2422bb3c nbranch module_hci_cmd_auto_adv_loop ,zero 
+3b63 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_auto_adv_adv_analys:
+3b64 e8608000 ifetch 1 ,contru 
+3b65 60008aa2 store 1 ,mem_temp 
+3b66 e8608000 ifetch 1 ,contru 
+3b67 60008aae store 1 ,mem_rega 
+3b68 20600000 rtn 
+
+module_hci_cmd_power_request:
+3b69 d8400000 arg 0 ,temp 
+3b6a da200002 arg 2 ,rega 
+3b6b 680146b4 fetch 2 ,mem_module_vdd_quotient 
+3b6c 60010ac2 store 2 ,mem_event_cmd_response_content 
+3b6d da400ac2 arg mem_event_cmd_response_content ,regb 
+3b6e 20203c25 branch module_hci_event_set_cmd 
+
+module_hci_cmd_power_set:
+3b6f 68008b04 fetch 1 ,mem_module_uart_len 
+3b70 c080bc17 bne 1 ,module_hci_event_receive_invalid_cmd 
+3b71 e8608000 ifetch 1 ,contru 
+3b72 6000c6b2 store 1 ,mem_module_read_vdd_flag 
+3b73 58000000 setarg 0x00 
+3b74 600146b4 store 2 ,mem_module_vdd_quotient 
+3b75 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_passkey_entry:
+3b76 e8620000 ifetch 4 ,contru 
+3b77 6002468a store 4 ,mem_pin 
+3b78 70468904 jam 4 ,mem_pin_length 
+3b79 70466300 jam 0 ,mem_authentication_passkey_times 
+3b7a 20403c1a call module_hci_event_receive_valid_cmd 
+3b7b 20205f31 branch authentication_passkey 
+
+module_hci_cmd_set_gpio:
+3b7c 68008b04 fetch 1 ,mem_module_uart_len 
+3b7d c081bc17 bne 3 ,module_hci_event_receive_invalid_cmd 
+3b7e e8608000 ifetch 1 ,contru 
+3b7f c0003b82 beq hci_cmd_config_gpio_input ,module_set_gpio_input 
+3b80 c000bb8a beq hci_cmd_config_gpio_output ,module_set_gpio_output 
+3b81 20203c17 branch module_hci_event_receive_invalid_cmd 
+
+module_set_gpio_input:
+3b82 e8688000 ifetcht 1 ,contru 
+3b83 e8608000 ifetch 1 ,contru 
+3b84 c0013b88 beq gpio_input_high_impedance ,module_set_gpio_high_impedance 
+3b85 7d3a0407 nsetflag blank ,7 ,temp 
+3b86 204067fb call gpio_config_input 
+3b87 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_set_gpio_high_impedance:
+3b88 20406806 call gpio_set_high_impedance 
+3b89 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_set_gpio_output:
+3b8a e8688000 ifetcht 1 ,contru 
+3b8b 20406812 call gpio_config_output0 
+3b8c e8608000 ifetch 1 ,contru 
+3b8d 2feffe00 isolate1 0 ,pdata 
+3b8e 2040682c call gpio_out_flag 
+3b8f 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_read_gpio:
+3b90 68008b04 fetch 1 ,mem_module_uart_len 
+3b91 c080bc17 bne 1 ,module_hci_event_receive_invalid_cmd 
+3b92 e8688000 ifetcht 1 ,contru 
+3b93 2040681d call gpio_get_bit 
+3b94 58000000 setarg 0x0 
+3b95 7d20fe00 nsetflag true ,0 ,pdata 
+3b96 da200001 arg 1 ,rega 
+3b97 20203b0a branch module_hci_event_set_cmd_send_response 
+
+module_hci_cmd_le_set_pairing_mode:
+3b98 1a220600 copy rega ,contru 
+3b99 e8608000 ifetch 1 ,contru 
+3b9a 1fe20400 copy pdata ,temp 
+3b9b c040bba3 beq le_pairing_mode_secure_connect_justwork ,module_le_set_pairing_mode_secure_justwork 
+3b9c c0413ba8 beq le_pairing_mode_secure_connect_numeric ,module_le_set_pairing_mode_secure_numeric 
+3b9d c041bbae beq le_pairing_mode_secure_connect_passkey ,module_le_set_pairing_mode_secure_passkey 
+3b9e 6000c4c6 store 1 ,mem_le_pairing_mode 
+3b9f c0003bb3 beq le_pairing_mode_none ,module_le_set_no_pairing 
+3ba0 c000bbb6 beq le_pairing_mode_lagacy_justwork ,module_le_set_pairing_mode_lagacy_just_work 
+3ba1 c0013bb8 beq le_pairing_mode_lagacy_passkey ,module_le_set_pairing_mode_lagacy_passkey 
+3ba2 20203c17 branch module_hci_event_receive_invalid_cmd 
+
+module_le_set_pairing_mode_secure_justwork:
+3ba3 6800c4be fetch 1 ,mem_le_secure_connect_enable 
+3ba4 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank 
+3ba5 6008c4c6 storet 1 ,mem_le_pairing_mode 
+3ba6 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+3ba7 20203bb4 branch module_le_set_noinputnooutput 
+
+module_le_set_pairing_mode_secure_numeric:
+3ba8 6800c4be fetch 1 ,mem_le_secure_connect_enable 
+3ba9 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank 
+3baa 6008c4c6 storet 1 ,mem_le_pairing_mode 
+3bab 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+3bac 70445401 jam flag_iocap_displayyesno ,mem_le_pres_iocap 
+3bad 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_le_set_pairing_mode_secure_passkey:
+3bae 6800c4be fetch 1 ,mem_le_secure_connect_enable 
+3baf 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank 
+3bb0 6008c4c6 storet 1 ,mem_le_pairing_mode 
+3bb1 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+3bb2 20203bb9 branch module_le_set_displayonly 
+
+module_le_set_no_pairing:
+3bb3 70445600 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth 
+
+module_le_set_noinputnooutput:
+3bb4 70445403 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap 
+3bb5 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_le_set_pairing_mode_lagacy_just_work:
+3bb6 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth 
+3bb7 20203bb4 branch module_le_set_noinputnooutput 
+
+module_le_set_pairing_mode_lagacy_passkey:
+3bb8 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth 
+
+module_le_set_displayonly:
+3bb9 70445400 jam flag_iocap_displayonly ,mem_le_pres_iocap 
+3bba 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_le_set_adv_data:
+3bbb 68008b04 fetch 1 ,mem_module_uart_len 
+3bbc 1fe67c1f sub pdata ,31 ,null 
+3bbd 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 
+3bbe 6000c36f store 1 ,mem_le_adv_data_len 
+3bbf 1fe27200 copy pdata ,loopcnt 
+3bc0 1a220600 copy rega ,contru 
+3bc1 d8a04370 arg mem_le_adv_data ,contw 
+3bc2 204066ea call uart_copy_rx_bytes_fast 
+3bc3 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_le_set_scan_data:
+3bc4 68008b04 fetch 1 ,mem_module_uart_len 
+3bc5 1fe67c1f sub pdata ,31 ,null 
+3bc6 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive 
+3bc7 6000c38f store 1 ,mem_le_scan_data_len 
+3bc8 1fe27200 copy pdata ,loopcnt 
+3bc9 1a220600 copy rega ,contru 
+3bca d8a04390 arg mem_le_scan_data ,contw 
+3bcb 204066ea call uart_copy_rx_bytes_fast 
+3bcc 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_le_send_conn_update_req:
+3bcd 68014682 fetch 2 ,mem_ui_state_map 
+3bce c304bc17 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd 
+3bcf 68008b04 fetch 1 ,mem_module_uart_len 
+3bd0 c0843c17 bne 0x08 ,module_hci_event_receive_invalid_cmd 
+3bd1 1a220600 copy rega ,contru 
+3bd2 e8640000 ifetch 8 ,contru 
+3bd3 60044496 store 8 ,mem_le_interval_min 
+3bd4 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp 
+3bd5 20407d8f call ui_ipc_send_cmd 
+3bd6 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_le_adv_parameter:
+3bd7 e8610000 ifetch 2 ,contru 
+3bd8 60014482 store 2 ,mem_le_adv_interval 
+3bd9 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_le_start_pairing:
+3bda 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+3bdb 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank 
+3bdc 6800c4c4 fetch 1 ,mem_le_pairing_state 
+3bdd c0803c17 bne flag_le_pairing_null ,module_hci_event_receive_invalid_cmd 
+3bde 6800c4c5 fetch 1 ,mem_le_enc_state 
+3bdf c0803c17 bne flag_le_enc_null ,module_hci_event_receive_invalid_cmd 
+3be0 20407e25 call check_51cmd_le_smp_sec_req 
+3be1 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_wake_gpio:
+3be2 68008b04 fetch 1 ,mem_module_uart_len 
+3be3 c082bc17 bne 5 ,module_hci_event_receive_invalid_cmd 
+3be4 e8608000 ifetch 1 ,contru 
+3be5 6000c6a2 store 1 ,mem_module_mcu_wake_pin 
+3be6 e8620000 ifetch 4 ,contru 
+3be7 600246a3 store 4 ,mem_module_mcu_wake_delay_us 
+3be8 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin 
+3be9 2040680e call gpio_config_output 
+3bea 20403cbc call module_set_mcu_wake_pin_low 
+3beb 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_tx_power:
+3bec 68008b04 fetch 1 ,mem_module_uart_len 
+3bed c080bc17 bne 0x01 ,module_hci_event_receive_invalid_cmd 
+3bee e8608000 ifetch 1 ,contru 
+3bef 6000c1de store 1 ,mem_tx_power 
+3bf0 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_le_confirm_gkey:
+3bf1 e8608000 ifetch 1 ,contru 
+3bf2 c000bbfa beq 0x01 ,module_hci_cmd_le_confirm_gkey_fail 
+3bf3 6800c4c1 fetch 1 ,mem_le_secure_connect_state 
+3bf4 c001bbf8 beq le_sc_stat_send_public_key ,module_hci_cmd_le_confirm_gkey_ok 
+3bf5 c0033bf8 beq le_sc_stat_receive_dhkey ,module_hci_cmd_le_confirm_gkey_ok 
+3bf6 c003bbf8 beq le_sc_stat_wait_confirm_gkey ,module_hci_cmd_le_confirm_gkey_ok 
+3bf7 20203c17 branch module_hci_event_receive_invalid_cmd 
+
+module_hci_cmd_le_confirm_gkey_ok:
+3bf8 7044c201 jam flag_le_sc_confrim_gkey_ok ,mem_le_sc_confirm_gkey_flag 
+3bf9 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_le_confirm_gkey_fail:
+3bfa 20405b53 call le_send_pairing_confirm_value_failed 
+3bfb 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_set_reject_justwork_flag:
+3bfc 68008b04 fetch 1 ,mem_module_uart_len 
+3bfd c080bc17 bne 0x01 ,module_hci_event_receive_invalid_cmd 
+3bfe 20403c1a call module_hci_event_receive_valid_cmd 
+3bff e8608000 ifetch 1 ,contru 
+3c00 203a60cb branch classic_bt_clr_reject_justwork_flag ,blank 
+3c01 202060c9 branch classic_bt_set_reject_justwork_flag 
+
+module_hci_cmd_reset_chip:
+3c02 20403c1a call module_hci_event_receive_valid_cmd 
+3c03 20407f9e call wait_uarttx 
+3c04 70801001 jam 0x01 ,core_reset 
+3c05 20202a8e branch loop 
+
+module_hci_cmd_le_set_fixed_passkey:
+3c06 68008b04 fetch 1 ,mem_module_uart_len 
+3c07 c0003c17 beq 0 ,module_hci_event_receive_invalid_cmd 
+3c08 e8608000 ifetch 1 ,contru 
+3c09 203a3c13 branch module_hci_cmd_le_set_random_passkey ,blank 
+3c0a 68008b04 fetch 1 ,mem_module_uart_len 
+3c0b c082bc17 bne 5 ,module_hci_event_receive_invalid_cmd 
+3c0c e8620000 ifetch 4 ,contru 
+3c0d d84f4240 arg 1000000 ,temp 
+3c0e 98467c00 isub temp ,null 
+3c0f 20213c17 branch module_hci_event_receive_invalid_cmd ,positive 
+3c10 600244c7 store 4 ,mem_le_tk 
+3c11 2040580c call le_set_config_fixed_tk 
+3c12 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_cmd_le_set_random_passkey:
+3c13 2040580e call le_clr_config_fixed_tk 
+3c14 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_test_cmde_close_lpm:
+3c15 70409100 jam 0 ,mem_lpm_mode 
+3c16 20203c1a branch module_hci_event_receive_valid_cmd 
+
+module_hci_event_receive_invalid_cmd:
+3c17 d8400001 arg 1 ,temp 
+3c18 da200000 arg 0 ,rega 
+3c19 20203c25 branch module_hci_event_set_cmd 
+
+module_hci_event_receive_valid_cmd:
+3c1a d8400000 arg 0 ,temp 
+3c1b da200000 arg 0 ,rega 
+3c1c 20203c25 branch module_hci_event_set_cmd 
+
+module_hci_event_spp_connect:
+3c1d 700b0300 jam hci_event_spp_conn_rep ,mem_module_uart_opcode 
+3c1e 20203c49 branch module_hci_event_enter_standby_mode_len0 
+
+module_hci_event_le_connect:
+3c1f 700b0302 jam hci_event_le_conn_rep ,mem_module_uart_opcode 
+3c20 20203c49 branch module_hci_event_enter_standby_mode_len0 
+
+module_hci_event_spp_disconnect:
+3c21 700b0303 jam hci_event_spp_dis_rep ,mem_module_uart_opcode 
+3c22 20203c49 branch module_hci_event_enter_standby_mode_len0 
+
+module_hci_event_le_disconnect:
+3c23 700b0305 jam hci_event_le_dis_rep ,mem_module_uart_opcode 
+3c24 20203c49 branch module_hci_event_enter_standby_mode_len0 
+
+module_hci_event_set_cmd:
+3c25 68008b03 fetch 1 ,mem_module_uart_opcode 
+3c26 1fe22600 copy pdata ,regc 
+3c27 700b0306 jam hci_event_cmd_res ,mem_module_uart_opcode 
+3c28 58000002 setarg 2 
+3c29 9a20fe00 iadd rega ,pdata 
+3c2a 20403ca7 call module_hci_prepare_tx 
+3c2b 1a627e00 copy regc ,pdata 
+3c2c e1408000 istore 1 ,contwu 
+3c2d e1488000 istoret 1 ,contwu 
+3c2e 1a227200 copy rega ,loopcnt 
+3c2f 1a420c00 copy regb ,contr 
+3c30 204066e4 call uart_copy_tx_bytes 
+3c31 202066c5 branch uartd_send 
+
+module_hci_event_receive_spp_data:
+3c32 2040397f call module_spp_clear_last_transmite_clock 
+3c33 700b0307 jam hci_event_spp_data_rep ,mem_module_uart_opcode 
+3c34 680084ff fetch 1 ,mem_current_length 
+3c35 207a0000 rtn blank 
+3c36 20403ca7 call module_hci_prepare_tx 
+3c37 680084ff fetch 1 ,mem_current_length 
+3c38 1fe27200 copy pdata ,loopcnt 
+3c39 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr 
+3c3a 1fe20c00 copy pdata ,contr 
+3c3b 204066d1 call uart_copy_tx_bytes_fast 
+3c3c 202066c5 branch uartd_send 
+
+module_hci_event_receive_le_data:
+3c3d 700b0308 jam hci_event_le_data_rep ,mem_module_uart_opcode 
+3c3e 6800c6b6 fetch 1 ,mem_module_le_rx_data_len 
+3c3f 1fe27200 icopy loopcnt 
+3c40 1fe0fe02 increase 2 ,pdata 
+3c41 20403ca7 call module_hci_prepare_tx 
+3c42 680146b9 fetch 2 ,mem_module_le_rx_data_handle 
+3c43 e1410000 istore 2 ,contwu 
+3c44 680146b7 fetch 2 ,mem_module_le_rx_data_address 
+3c45 1fe20c00 icopy contr 
+3c46 204066d1 call uart_copy_tx_bytes_fast 
+3c47 202066c5 branch uartd_send 
+
+module_hci_event_enter_standby_mode:
+3c48 700b0309 jam hci_event_standby_rep ,mem_module_uart_opcode 
+
+module_hci_event_enter_standby_mode_len0:
+3c49 58000000 setarg 0 
+3c4a 20403ca7 call module_hci_prepare_tx 
+3c4b 202066c5 branch uartd_send 
+
+module_hci_event_status_res:
+3c4c 700b030a jam hci_event_status_res ,mem_module_uart_opcode 
+3c4d 58000001 setarg 1 
+3c4e 20403ca7 call module_hci_prepare_tx 
+3c4f 20403c5d call module_hci_read_bt_status 
+3c50 68014682 fetch 2 ,mem_ui_state_map 
+3c51 d8e00002 arg ui_state_bt_hid_conn ,queue 
+3c52 afefffff qisolate1 pdata 
+3c53 79208403 setflag true ,3 ,temp 
+3c54 d8e00009 arg ui_state_ble_connected ,queue 
+3c55 afefffff qisolate1 pdata 
+3c56 79208405 setflag true ,5 ,temp 
+3c57 6800c682 fetch 1 ,mem_ui_state_map 
+3c58 d8e00004 arg ui_state_bt_spp_conn ,queue 
+3c59 afefffff qisolate1 pdata 
+3c5a 79208404 setflag true ,4 ,temp 
+3c5b e1488000 istoret 1 ,contwu 
+3c5c 202066c5 branch uartd_send 
+
+module_hci_read_bt_status:
+3c5d d8400000 arg 0 ,temp 
+3c5e 6800c093 fetch 1 ,mem_scan_mode 
+3c5f d8e00000 arg inq_scan_mode ,queue 
+3c60 afefffff qisolate1 pdata 
+3c61 79208400 setflag true ,0 ,temp 
+3c62 d8e00001 arg page_scan_mode ,queue 
+3c63 afefffff qisolate1 pdata 
+3c64 79208401 setflag true ,1 ,temp 
+3c65 6800c36e fetch 1 ,mem_le_adv_enable 
+3c66 d8e00000 arg 0 ,queue 
+3c67 afefffff qisolate1 pdata 
+3c68 79208402 setflag true ,2 ,temp 
+3c69 20600000 rtn 
+
+module_hci_event_store_device:
+3c6a 700b030d jam hci_event_nvram_rep ,mem_module_uart_opcode 
+3c6b 6800c217 fetch 1 ,mem_nv_data_number 
+3c6c 1feffe22 mul32 pdata ,34 ,pdata 
+3c6d 1fe27200 icopy loopcnt 
+3c6e 20403ca7 call module_hci_prepare_tx 
+3c6f 68014215 fetch 2 ,mem_nv_data_ptr 
+3c70 1fe20c00 icopy contr 
+3c71 204066d1 call uart_copy_tx_bytes_fast 
+3c72 202066c5 branch uartd_send 
+
+module_hci_event_gkey_generate:
+3c73 700b030e jam hci_event_gkey ,mem_module_uart_opcode 
+3c74 58000004 setarg 4 
+3c75 20403ca7 call module_hci_prepare_tx 
+3c76 680209ba fetch 4 ,mem_gkey 
+3c77 e1420000 istore 4 ,contwu 
+3c78 202066c5 branch uartd_send 
+
+module_hci_event_invalid_packet:
+3c79 700b030f jam hci_event_invalid_packet ,mem_module_uart_opcode 
+3c7a 68110112 hfetch 2 ,core_uart_rxitems 
+3c7b d84000ff arg 0xff ,temp 
+3c7c 20407fdd call not_greater_than 
+3c7d 1fe27200 copy pdata ,loopcnt 
+3c7e 20403ca7 call module_hci_prepare_tx 
+3c7f 204066cb call uartd_prepare_rx 
+3c80 20406703 call uart_copy_rx2tx 
+3c81 202066c5 branch uartd_send 
+
+module_hci_event_passkey_entry_mode:
+3c82 700b0310 jam hci_event_get_passkey ,mem_module_uart_opcode 
+3c83 20203c49 branch module_hci_event_enter_standby_mode_len0 
+
+module_hci_event_le_tk:
+3c84 700b0311 jam hci_event_le_tk ,mem_module_uart_opcode 
+3c85 58000004 setarg 4 
+3c86 20403ca7 call module_hci_prepare_tx 
+3c87 680244c7 fetch 4 ,mem_le_tk 
+3c88 e1420000 istore 4 ,contwu 
+3c89 202066c5 branch uartd_send 
+
+module_hci_event_le_pairing_fail:
+3c8a da200180 arg flag_ble_pairing_fail ,rega 
+3c8b 20203c91 branch module_hci_event_pairing_completed 
+
+module_hci_event_le_pairing_success:
+3c8c da200080 arg flag_ble_pairing_success ,rega 
+3c8d 20203c91 branch module_hci_event_pairing_completed 
+
+module_hci_event_bt_pairing_fail:
+3c8e da200101 arg flag_bt_pairing_fail ,rega 
+3c8f 20203c91 branch module_hci_event_pairing_completed 
+
+module_hci_event_bt_pairing_success:
+3c90 da200001 arg flag_bt_pairing_success ,rega 
+
+module_hci_event_pairing_completed:
+3c91 70466100 jam 0 ,mem_flag_mode_ssp_pin 
+3c92 700b0314 jam hci_event_le_pairing_state ,mem_module_uart_opcode 
+3c93 58000002 setarg 2 
+3c94 20403ca7 call module_hci_prepare_tx 
+3c95 1a227e00 copy rega ,pdata 
+3c96 e1410000 istore 2 ,contwu 
+3c97 202066c5 branch uartd_send 
+
+module_hci_event_pause_enc:
+3c98 da600000 arg flag_event_pause_enc ,regc 
+3c99 20203c9b branch module_hci_event_enc 
+
+module_hci_event_start_enc:
+3c9a da600001 arg flag_event_start_enc ,regc 
+
+module_hci_event_enc:
+3c9b 700b0315 jam hci_event_le_encryption_state ,mem_module_uart_opcode 
+3c9c 58000001 setarg 1 
+3c9d 20403ca7 call module_hci_prepare_tx 
+3c9e 1a627e00 copy regc ,pdata 
+3c9f e1408000 istore 1 ,contwu 
+3ca0 202066c5 branch uartd_send 
+
+module_hci_event_le_gkey:
+3ca1 700b031d jam hci_event_le_gkey ,mem_module_uart_opcode 
+3ca2 58000004 setarg 4 
+3ca3 20403ca7 call module_hci_prepare_tx 
+3ca4 680209ba fetch 4 ,mem_gkey 
+3ca5 e1420000 istore 4 ,contwu 
+3ca6 202066c5 branch uartd_send 
+
+module_hci_prepare_tx:
+3ca7 700b0202 jam 0x02 ,mem_module_uart_cmd 
+3ca8 60008b04 store 1 ,mem_module_uart_len 
+3ca9 600c0aa2 storet 8 ,mem_temp 
+3caa 44f1401c bpatch patch1c_2 ,mem_patch1c 
+3cab 20403cb1 call module_set_mcu_wake_pin_high_delay 
+3cac 680c0aa2 fetcht 8 ,mem_temp 
+3cad 204066c2 call uartd_prepare_tx 
+3cae 68018b02 fetch 3 ,mem_module_uart_cmd 
+3caf e1418000 istore 3 ,contwu 
+3cb0 20600000 rtn 
+
+module_set_mcu_wake_pin_high_delay:
+3cb1 20403cba call module_check_mcu_wake_pin_high 
+3cb2 20608000 rtn true 
+
+module_set_mcu_wake_pin_h_delay:
+3cb3 20403cb8 call module_set_mcu_wake_pin_high 
+3cb4 680246a3 fetch 4 ,mem_module_mcu_wake_delay_us 
+3cb5 1feb7e00 rshift2 pdata ,pdata 
+3cb6 207a0000 rtn blank 
+3cb7 20203cbe branch delay 
+
+module_set_mcu_wake_pin_high:
+3cb8 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin 
+3cb9 20206829 branch gpio_out_active 
+
+module_check_mcu_wake_pin_high:
+3cba 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin 
+3cbb 2020681b branch gpio_check_active 
+
+module_set_mcu_wake_pin_low:
+3cbc 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin 
+3cbd 20206825 branch gpio_out_inactive 
+
+delay:
+3cbe 1fe0ffff increase -1 ,pdata 
+3cbf 20000026 nop 38 
+3cc0 243a3cbe nbranch delay ,blank 
+3cc1 20600000 rtn 
+
+module_le_receive_data:
+3cc2 20403ad4 call module_check_ble_encrypt_state 
+3cc3 20740000 rtn user 
+3cc4 1a227e00 copy rega ,pdata 
+3cc5 600146b7 store 2 ,mem_module_le_rx_data_address 
+3cc6 1a427e00 copy regb ,pdata 
+3cc7 6000c6b6 store 1 ,mem_module_le_rx_data_len 
+3cc8 68010478 fetch 2 ,mem_le_att_handle 
+3cc9 680946bb fetcht 2 ,mem_module_data_write_handle 
+3cca 98467c00 isub temp ,null 
+3ccb 2022bccf branch module_le_receive_data_ok ,zero 
+3ccc 680946bd fetcht 2 ,mem_module_data_write_handle2 
+3ccd 98467c00 isub temp ,null 
+3cce 24628000 nrtn zero 
+
+module_le_receive_data_ok:
+3ccf 600146b9 store 2 ,mem_module_le_rx_data_handle 
+3cd0 20203c3d branch module_hci_event_receive_le_data 
+
+module_exit_sniff:
+3cd1 6800c6bf fetch 1 ,mem_module_flag 
+3cd2 c3828000 rtnbit1 moudle_task_unsniff 
+3cd3 20403cf0 call module_set_unsniff_task_flag 
+3cd4 2020340c branch app_bt_sniff_exit 
+
+module_set_lpm_mult_2:
+3cd5 70417202 jam 2 ,mem_lpm_mult 
+3cd6 20600000 rtn 
+
+module_bb_event_timer:
+3cd7 20203cd8 branch module_read_vdd_timer 
+
+module_read_vdd_timer:
+3cd8 6800c6b2 fetch 1 ,mem_module_read_vdd_flag 
+3cd9 207a0000 rtn blank 
+3cda 6800c6b3 fetch 1 ,mem_module_read_vdd_count 
+3cdb 207a0000 rtn blank 
+3cdc 1fe0ffff increase -1 ,pdata 
+3cdd 6000c6b3 store 1 ,mem_module_read_vdd_count 
+3cde 247a0000 nrtn blank 
+3cdf 7046b30a jam flag_module_read_vdd_count ,mem_module_read_vdd_count 
+3ce0 204068eb call adc_set_mode 
+3ce1 20406908 call vdd_calculate_by_mode 
+3ce2 1fe6fc64 div pdata ,0x64 
+3ce3 20407f86 call wait_div_end 
+3ce4 1807fe00 quotient pdata 
+3ce5 18070400 remainder temp 
+3ce6 6000c6b4 store 1 ,mem_module_vdd_quotient 
+3ce7 6008c6b5 storet 1 ,mem_module_vdd_remainder 
+3ce8 20600000 rtn 
+
+module_control_air_flow:
+3ce9 20407fb4 call check_uart_tx_buff 
+3cea 202133d9 branch app_l2cap_flow_control_enable ,positive 
+3ceb 202033db branch app_l2cap_flow_control_disable 
+
+module_set_sniff_task_flag:
+3cec d8e00006 arg moudle_task_sniff ,queue 
+3ced 20203cfc branch module_set_state 
+
+module_clear_sniff_task_flag:
+3cee d8e00006 arg moudle_task_sniff ,queue 
+3cef 20203cf8 branch module_clr_state 
+
+module_set_unsniff_task_flag:
+3cf0 d8e00005 arg moudle_task_unsniff ,queue 
+3cf1 20203cfc branch module_set_state 
+
+module_clear_unsniff_task_flag:
+3cf2 d8e00005 arg moudle_task_unsniff ,queue 
+3cf3 20203cf8 branch module_clr_state 
+
+module_set_le_tx_data_flag:
+3cf4 d8e00004 arg module_flag_ble_data_finish ,queue 
+3cf5 20203cfc branch module_set_state 
+
+module_clear_le_tx_data_flag:
+3cf6 d8e00004 arg module_flag_ble_data_finish ,queue 
+3cf7 20203cf8 branch module_clr_state 
+
+module_clr_state:
+3cf8 6800c6bf fetch 1 ,mem_module_flag 
+3cf9 f93ffe00 qset0 pdata 
+3cfa 6000c6bf store 1 ,mem_module_flag 
+3cfb 20600000 rtn 
+
+module_set_state:
+3cfc 6800c6bf fetch 1 ,mem_module_flag 
+3cfd f9207e00 qset1 pdata 
+3cfe 6000c6bf store 1 ,mem_module_flag 
+3cff 20600000 rtn 
+
+mouse_init:
+3d00 20403d39 call mouse_setting_config 
+3d01 2040640f call spi_ncs_enable 
+3d02 204040c6 call mouse_init_sunt 
+3d03 20403d66 call mouse_dpi_config 
+3d04 20406411 call spi_ncs_disable 
+3d05 20758000 rtn wake 
+3d06 20403d16 call mouse_cheak_enable_usb 
+3d07 20403d19 call mouse_cb_fuction 
+3d08 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d09 c3880000 rtnbit1 mouse_enable_usb 
+3d0a 20403d4e call mouse_wakeup_from_power 
+3d0b c6130000 rtnmark1 mark_24g 
+3d0c 68014682 fetch 2 ,mem_ui_state_map 
+3d0d c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery 
+3d0e 202042a2 branch mouse_check_reconn_target 
+
+mouse_delay_4s:
+3d0f 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d10 c40d8000 rtnbit0 mouse_enable_init_delay 
+3d11 df200014 arg 20 ,loopcnt 
+
+mouse_delay_20ms:
+3d12 58030d40 setarg 200000 
+3d13 20402a8f call sleep 
+3d14 c2007ec1 loop delay_10ms 
+3d15 20600000 rtn 
+
+mouse_cheak_enable_usb:
+3d16 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d17 c4080000 rtnbit0 mouse_enable_usb 
+3d18 202048ea branch usb_init 
+
+mouse_cb_fuction:
+3d19 5800416d setarg mouse_le 
+3d1a 600141ef store 2 ,mem_cb_le_process 
+3d1b 58003f77 setarg mouse_send_process 
+3d1c 600141f1 store 2 ,mem_cb_bt_process 
+3d1d 58003ebb setarg mouse_process_lpm_before 
+3d1e 600141ed store 2 ,mem_cb_before_lpm 
+3d1f 5800417c setarg mouse_priority_bb_event 
+3d20 600141f5 store 2 ,mem_cb_bb_event_process 
+3d21 58003de3 setarg mouse_idle 
+3d22 600141f3 store 2 ,mem_cb_idle_process 
+3d23 58003eb3 setarg mouse_before_hibernate 
+3d24 600141eb store 2 ,mem_cb_before_hibernate 
+3d25 58003d5b setarg le_mouse_bb_event_connect_complete 
+3d26 600141f9 store 2 ,mem_cb_att_write 
+3d27 20402c7a call g24_head_ptr2regc 
+3d28 58004401 setarg mouse_g24_package_data 
+3d29 1a608ad8 add regc ,offset_24g_cb_data ,contw 
+3d2a e0a10000 istore 2 ,contw 
+3d2b 58004406 setarg mouse_g24_enter_lpm 
+3d2c 1a608ada add regc ,offset_24g_cb_lpm_prepare ,contw 
+3d2d e0a10000 istore 2 ,contw 
+3d2e 58003ebf setarg mouse_lpm_before_common 
+3d2f 1a608adc add regc ,offset_24g_cb_lpm_before ,contw 
+3d30 e0a10000 istore 2 ,contw 
+3d31 580041f9 setarg mouse_bb_event_timer 
+3d32 600141fd store 2 ,mem_cb_event_timer 
+3d33 58003d36 setarg mouse_spi_write_flash_cb 
+3d34 60014201 store 2 ,mem_cb_spi_flash_write_complate 
+3d35 20600000 rtn 
+
+mouse_spi_write_flash_cb:
+
+mouse_spi_init:
+3d36 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d37 c30964d7 bbit0 mouse_enable_spi2 ,spid_init 
+3d38 202064da branch spid_init2 
+
+mouse_setting_config:
+3d39 20758000 rtn wake 
+3d3a 20402c9d call g24_set_device_addr 
+3d3b 20403e6e call mouse_gpio_init 
+3d3c 20403e1e call mouse_param_init 
+3d3d 20403e54 call mouse_adc_init 
+3d3e 20405810 call le_set_config_fixed_ltk 
+3d3f 20405839 call le_set_justwork 
+3d40 2040582c call le_set_fixed_ltk 
+3d41 20405818 call le_set_config_read_authentication 
+3d42 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d43 c28a3d46 bbit1 mouse_enable_eeprom ,mouse_init_iic 
+3d44 c289c414 bbit1 mouse_enable_flash ,mouse_load_flash_info_cheak 
+3d45 20600000 rtn 
+
+mouse_init_iic:
+3d46 2040659c call iic_init_390k 
+3d47 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d48 2feffe19 isolate1 mouse_enable_2k_eeprom ,pdata 
+3d49 2440e5c2 ncall clear_eeprom_size_2k ,true 
+3d4a 2040443f call mouse_load_eeprom_dpi 
+3d4b 20403dc9 call mouse_init_environment 
+3d4c 204041aa call mouse_set_24g_addr_eeprom 
+3d4d 202065df branch iicd_read_eep_data 
+
+mouse_wakeup_from_power:
+3d4e 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d4f c30f3d53 bbit0 mouse_enable_wakeup_from_power ,mouse_wakeup_no_from_power 
+3d50 68008abd fetch 1 ,mem_wakup_from_power_flag 
+3d51 2fec0003 isolate0 gpio_latch ,pdata 
+3d52 24608000 nrtn true 
+
+mouse_wakeup_no_from_power:
+3d53 6800c71f fetch 1 ,mem_reconn_times_init 
+3d54 6000c71e store 1 ,mem_reconn_times 
+3d55 6800c6f5 fetch 1 ,mem_config_function_enable 
+3d56 c3830000 rtnbit1 enable_select_device_by_switch 
+
+mouse_start_24g_mode:
+3d57 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d58 c4088000 rtnbit0 mouse_enable_24g 
+3d59 c28eaee4 bbit1 mouse_enable_auto_24g_paring ,g24_auto_pair_start 
+3d5a 20202f2c branch g24_check_51cmd_start_24g 
+
+le_mouse_bb_event_connect_complete:
+3d5b 68008478 fetch 1 ,mem_le_att_handle 
+3d5c 1fe67e1a sub pdata ,26 ,pdata 
+3d5d 24628000 nrtn zero 
+3d5e 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp 
+3d5f 20407d8f call ui_ipc_send_cmd 
+
+mouse_le_write_enable:
+3d60 d8e00000 arg write_req_enable_flag ,queue 
+3d61 202041b9 branch mouse_le_enable_connect_flag 
+
+mouse_dpi_up:
+3d62 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state 
+3d63 c1008000 rtneq dpi_button_state_up 
+3d64 7046b601 jam dpi_button_state_up ,mem_mouse_dpi_button_state 
+3d65 20600000 rtn 
+
+mouse_dpi_config:
+3d66 6800c6e1 fetch 1 ,mem_config_sensor_motion 
+3d67 1fe17e0f and pdata ,0x0f ,pdata 
+3d68 6000c77a store 1 ,mem_mouse_dpi 
+3d69 20203d80 branch mouse_seting_dpi + 2 
+
+mouse_dpi_cheak:
+3d6a 6808c6e7 fetcht 1 ,mem_dpi_button_gpio 
+3d6b 2040681d call gpio_get_bit 
+3d6c 2420bd62 nbranch mouse_dpi_up ,true 
+
+mouse_dpi_down:
+3d6d 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state 
+3d6e c1000000 rtneq dpi_button_state_down 
+3d6f 7046b600 jam dpi_button_state_down ,mem_mouse_dpi_button_state 
+3d70 6800c77a fetch 1 ,mem_mouse_dpi 
+3d71 1fe0fe01 increase 1 ,pdata 
+3d72 1fe17e03 and pdata ,0x03 ,pdata 
+3d73 6000c77a store 1 ,mem_mouse_dpi 
+3d74 20403d7e call mouse_seting_dpi 
+3d75 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3d76 c28a443b bbit1 mouse_enable_eeprom ,mouse_store_eerpom_dpi 
+3d77 c289bd79 bbit1 mouse_enable_flash ,mouse_before_store_flash_cpi 
+3d78 20600000 rtn 
+
+mouse_before_store_flash_cpi:
+3d79 d840001e arg mouse_spi2_clk_gpio ,temp 
+3d7a 2040680e call gpio_config_output 
+3d7b d840001f arg mouse_spi2_sdio_gpio ,temp 
+3d7c 2040680e call gpio_config_output 
+3d7d 20204435 branch mouse_store_flash_device_info 
+
+mouse_seting_dpi:
+3d7e 44f1c01c bpatch patch1c_3 ,mem_patch1c 
+3d7f 2040424a call mosue_dpi_led_blink_init 
+3d80 6800c6e0 fetch 1 ,mem_config_sensor_type 
+3d81 c002bdaa beq p3610 ,mouse_seting_3610_dpi 
+3d82 c0023d96 beq p3212 ,mouse_seting_3212_dpi 
+3d83 6800c77a fetch 1 ,mem_mouse_dpi 
+3d84 c0003d8a beq mouse_dpi_level1 ,mouse_set_cpi1 
+3d85 c000bd88 beq mouse_dpi_level2 ,mouse_set_cpi2 
+3d86 c0013d8c beq mouse_dpi_level3 ,mouse_set_cpi3 
+3d87 c001bd8e beq mouse_dpi_level4 ,mouse_set_cpi4 
+
+mouse_set_cpi2:
+3d88 6800c780 fetch 1 ,mem_320x_dpi_2 
+3d89 20203dbe branch mouse_p3205_dpi 
+
+mouse_set_cpi1:
+3d8a 6800c77f fetch 1 ,mem_320x_dpi_1 
+3d8b 20203dbe branch mouse_p3205_dpi 
+
+mouse_set_cpi3:
+3d8c 6800c781 fetch 1 ,mem_320x_dpi_3 
+3d8d 20203dbe branch mouse_p3205_dpi 
+
+mouse_set_cpi4:
+3d8e 6800c782 fetch 1 ,mem_320x_dpi_4 
+3d8f 20203dbe branch mouse_p3205_dpi 
+
+moue_seting_cpi_count:
+3d90 6800c6e0 fetch 1 ,mem_config_sensor_type 
+3d91 c1030000 rtneq p3065_xy 
+3d92 6800c6b5 fetch 1 ,mem_mouse_cpi_count 
+3d93 1fe0fe01 increase 1 ,pdata 
+3d94 6000c6b5 store 1 ,mem_mouse_cpi_count 
+3d95 20600000 rtn 
+
+mouse_seting_3212_dpi:
+3d96 6800c77a fetch 1 ,mem_mouse_dpi 
+3d97 c0003d9d beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 
+3d98 c000bd9b beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 
+3d99 c0013d9f beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 
+3d9a c001bda1 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 
+
+mouse_set_p3212_cpi2:
+3d9b 6800c784 fetch 1 ,mem_3212_dpi_2 
+3d9c 20203da2 branch mouse_p3212_dpi 
+
+mouse_set_p3212_cpi1:
+3d9d 6800c783 fetch 1 ,mem_3212_dpi_1 
+3d9e 20203da2 branch mouse_p3212_dpi 
+
+mouse_set_p3212_cpi3:
+3d9f 6800c785 fetch 1 ,mem_3212_dpi_3 
+3da0 20203da2 branch mouse_p3212_dpi 
+
+mouse_set_p3212_cpi4:
+3da1 6800c786 fetch 1 ,mem_3212_dpi_4 
+
+mouse_p3212_dpi:
+3da2 6000c6b5 store 1 ,mem_mouse_cpi_count 
+3da3 1fed7e00 lshift8 pdata ,pdata 
+3da4 1fe22200 copy pdata ,rega 
+3da5 1fe0fe0d add pdata ,mouse_p3212_dpi_xaddress ,pdata 
+3da6 20406413 call twspi_write 
+3da7 1a227e00 copy rega ,pdata 
+3da8 1fe0fe0e add pdata ,mouse_p3212_dpi_yaddress ,pdata 
+3da9 20206413 branch twspi_write 
+
+mouse_seting_3610_dpi:
+3daa 6800c77a fetch 1 ,mem_mouse_dpi 
+3dab c0003db1 beq mouse_dpi_level1 ,mouse_set_p3610_cpi1 
+3dac c000bdaf beq mouse_dpi_level2 ,mouse_set_p3610_cpi2 
+3dad c0013db3 beq mouse_dpi_level3 ,mouse_set_p3610_cpi3 
+3dae c001bdb5 beq mouse_dpi_level4 ,mouse_set_p3610_cpi4 
+
+mouse_set_p3610_cpi2:
+3daf 6800c788 fetch 1 ,mem_3610_dpi_2 
+3db0 20203db6 branch mouse_p3610_dpi 
+
+mouse_set_p3610_cpi1:
+3db1 6800c787 fetch 1 ,mem_3610_dpi_1 
+3db2 20203db6 branch mouse_p3610_dpi 
+
+mouse_set_p3610_cpi3:
+3db3 6800c789 fetch 1 ,mem_3610_dpi_3 
+3db4 20203db6 branch mouse_p3610_dpi 
+
+mouse_set_p3610_cpi4:
+3db5 6800c78a fetch 1 ,mem_3610_dpi_4 
+
+mouse_p3610_dpi:
+3db6 6000c6b5 store 1 ,mem_mouse_cpi_count 
+3db7 204040c0 call mouse_spi_sdio_gpio_pollup 
+3db8 6800c6b5 fetch 1 ,mem_mouse_cpi_count 
+
+mouse_reset_p3610_dpi:
+3db9 1fe0fe80 add pdata ,0x80 ,pdata 
+3dba 1fed7e00 lshift8 pdata ,pdata 
+3dbb 1fe0fe05 add pdata ,mouse_p3610_dpi_address ,pdata 
+3dbc 1fe22200 copy pdata ,rega 
+3dbd 2020415a branch mouse_set_sensor_reg 
+
+mouse_p3205_dpi:
+3dbe 6000c6b5 store 1 ,mem_mouse_cpi_count 
+3dbf 20403d90 call moue_seting_cpi_count 
+3dc0 6800c6b5 fetch 1 ,mem_mouse_cpi_count 
+3dc1 58000006 setarg mouse_dpi_address 
+3dc2 20406414 call twspi_read 
+3dc3 1fe104f8 and pdata ,0xf8 ,temp 
+3dc4 6800c6b5 fetch 1 ,mem_mouse_cpi_count 
+3dc5 9840fe00 iadd temp ,pdata 
+3dc6 1fed7e00 lshift8 pdata ,pdata 
+3dc7 1fe0fe06 add pdata ,mouse_dpi_address ,pdata 
+3dc8 20206413 branch twspi_write 
+
+mouse_init_environment:
+3dc9 204033c4 call app_initflag_check 
+3dca 2022c316 branch mouse_eeprom_load_recon_info ,zero 
+3dcb 2040441c call mouse_ble_init_address 
+3dcc 204042e4 call mouse_store_eeprom_device_info 
+3dcd 202033bd branch app_initflag_store 
+
+mouse_24g_pairing_button:
+3dce 68014707 fetch 2 ,mem_24g_pairing_timer_count 
+3dcf 207a0000 rtn blank 
+3dd0 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3dd1 c4088000 rtnbit0 mouse_enable_24g 
+3dd2 c3818000 rtnbit1 mosue_24g_pairing_flag 
+3dd3 c6130000 rtnmark1 mark_24g 
+3dd4 20404083 call mouse_check_key_gpio 
+3dd5 c1838000 rtnne mouse_lmr_button 
+3dd6 20404482 call mouse_devce_led_off 
+3dd7 d8e00003 arg mosue_24g_pairing_flag ,queue 
+3dd8 204043ce call mouse_enable_function_flag 
+3dd9 58000000 setarg 0 
+3dda 600146ae store 2 ,mem_mouse_direct_timer 
+3ddb 6000c6b4 store 1 ,mem_mouse_send_blank_timer 
+3ddc 20403263 call g24_set0_mem_check_dongle_times 
+3ddd 68014682 fetch 2 ,mem_ui_state_map 
+3dde c283c392 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect 
+3ddf c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect 
+3de0 c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect 
+3de1 204042ca call mouse_stop_discovery 
+3de2 20202ead branch g24_start_pairing_sm1 
+
+mouse_idle:
+3de3 20403dce call mouse_24g_pairing_button 
+3de4 20407e34 call ui_check_paring_button 
+3de5 20403d6a call mouse_dpi_cheak 
+3de6 20403de9 call mouse_usb_isr 
+3de7 20403ee0 call mouse_wheel_check 
+3de8 20203df7 branch mouse_usb_mode 
+
+mouse_usb_isr:
+3de9 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3dea c4080000 rtnbit0 mouse_enable_usb 
+3deb 204048d3 call usb_isr 
+3dec 202048fd branch usb_offline_state 
+
+mouse_cheak_usb:
+3ded 68108a04 hfetch 1 ,core_usb_addr 
+3dee c303bdf1 bbit0 7 ,mouse_usb_no_exsit 
+3def c283bdf4 bbit1 7 ,mouse_usb_exsit 
+3df0 20600000 rtn 
+
+mouse_usb_no_exsit:
+3df1 6800c6ff fetch 1 ,mem_usb_addr 
+3df2 c4038000 rtnbit0 7 
+3df3 2020659a branch soft_reset_chip 
+
+mouse_usb_exsit:
+3df4 6800c6ff fetch 1 ,mem_usb_addr 
+3df5 c3838000 rtnbit1 7 
+3df6 20204381 branch mouse_stop_bluetooth_mode 
+
+mouse_usb_mode:
+3df7 20403ded call mouse_cheak_usb 
+3df8 68108a04 hfetch 1 ,core_usb_addr 
+3df9 6000c6ff store 1 ,mem_usb_addr 
+3dfa c4038000 rtnbit0 7 
+3dfb 20403e07 call mouse_clkn_check 
+3dfc 680246f9 fetch 4 ,mem_btclk_sensor 
+3dfd 6808c6fd fetcht 1 ,mem_wire_usb_interval 
+3dfe 98408400 iadd temp ,temp 
+3dff 1c427e00 copy clkn_bt ,pdata 
+3e00 98467c00 isub temp ,null 
+3e01 24610000 nrtn positive 
+3e02 600246f9 store 4 ,mem_btclk_sensor 
+3e03 20403f97 call mouse_motion 
+3e04 24740000 nrtn user 
+3e05 700d3804 jam 4 ,mem_usb_tx_enable 
+3e06 20203e0f branch mouse_wired_to_usb 
+
+mouse_clkn_check:
+3e07 680a46f9 fetcht 4 ,mem_btclk_sensor 
+3e08 1c427e00 copy clkn_bt ,pdata 
+3e09 98467c00 isub temp ,null 
+3e0a 24413e0c ncall mouse_clkn_timeout ,positive 
+3e0b 20600000 rtn 
+
+mouse_clkn_timeout:
+3e0c 58000000 setarg 0 
+3e0d 600246f9 store 4 ,mem_btclk_sensor 
+3e0e 20600000 rtn 
+
+mouse_wired_to_usb:
+3e0f 68008d38 fetch 1 ,mem_usb_tx_enable 
+3e10 c4010000 rtnbit0 2 
+3e11 20203e12 branch mouse_data_push 
+
+mouse_data_push:
+3e12 68108a04 hfetch 1 ,core_usb_addr 
+3e13 c4038000 rtnbit0 7 
+3e14 700d5220 jam usb_ep2_ms ,mem_usb_ep2_data 
+3e15 58000001 setarg ms_report_id 
+3e16 60008d54 store 1 ,mem_usb_mouse_data 
+3e17 6803c69a fetch 7 ,mem_mouse_key 
+3e18 e0a38000 istore 7 ,contw 
+3e19 20600000 rtn 
+
+mouse_enable_clock_qdecoder:
+3e1a 68110050 hfetch 2 ,core_clkoff 
+3e1b 793ffe0b set0 clock_off_qdecoder ,pdata 
+3e1c 60110050 hstore 2 ,core_clkoff 
+3e1d 20600000 rtn 
+
+mouse_param_init:
+3e1e 58008c00 setarg 0x8c00 
+3e1f 60014575 store 2 ,mem_ui_uuid_table 
+3e20 58008e7a setarg 0x8e7a 
+3e21 600144bc store 2 ,mem_ui_le_uuid_table 
+3e22 58002402 setarg 0x2402 
+3e23 600140bd store 2 ,mem_fcomp_mul 
+3e24 58002580 setarg 0x2580 
+3e25 6001c0aa store 3 ,mem_class 
+3e26 70417303 jam 3 ,mem_lpm_mult_timeout 
+3e27 70415608 jam 8 ,mem_lpm_overhead 
+3e28 7046d901 jam dpi_button_state_up ,mem_select_device_button_statue 
+3e29 58000200 setarg 0x0200 
+3e2a 60014154 store 2 ,mem_lpm_interval 
+3e2b 7044a617 jam 0x17 ,mem_le_local_mtu 
+3e2c 7044a817 jam 0x17 ,mem_le_remote_mtu 
+3e2d 58000a77 setarg 0x0a77 
+3e2e 60014212 store 2 ,mem_spi_init_clk 
+3e2f 38000306 setsect 0 ,0x306 
+3e30 38044440 setsect 1 ,0x4440 
+3e31 38090000 setsect 2 ,0x10000 
+3e32 380c4408 setsect 3 ,0x4408 
+3e33 6004c577 store 9 ,mem_all_uuid_16bits 
+3e34 38001224 setsect 0 ,0x1224 
+3e35 38044000 setsect 1 ,0x4000 
+3e36 38080000 setsect 2 ,0x0 
+3e37 e0a28000 istore 5 ,contw 
+3e38 3803ffff setsect 0 ,0x3ffff 
+3e39 3806fe23 setsect 1 ,0x2fe23 
+3e3a 380999d9 setsect 2 ,0x199d9 
+3e3b 380c020d setsect 3 ,0x20d 
+3e3c 60044098 store 8 ,mem_features 
+3e3d 5800012c setarg 0x012c 
+3e3e 60014707 store 2 ,mem_24g_pairing_timer_count 
+3e3f 204057a3 call le_modified_name 
+3e40 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3e41 c40f8000 rtnbit0 mouse_enable_gpio_control_adc_sensor 
+3e42 20403e44 call mouse_sensor_set_angle 
+3e43 20203e4c branch mouse_select_adc 
+
+mouse_sensor_set_angle:
+3e44 6808c6f7 fetcht 1 ,mem_select_sensor_angle_gpio 
+3e45 204067fb call gpio_config_input 
+3e46 6808c6f7 fetcht 1 ,mem_select_sensor_angle_gpio 
+3e47 2040681d call gpio_get_bit 
+3e48 7046f603 jam mouse_3clk_angle ,mem_config_sensor_angle 
+3e49 20608000 rtn true 
+3e4a 7046f602 jam mouse_12clk_angle ,mem_config_sensor_angle 
+3e4b 20600000 rtn 
+
+mouse_select_adc:
+3e4c 6808c6f8 fetcht 1 ,mem_select_adc_gpio 
+3e4d 204067fb call gpio_config_input 
+3e4e 6808c6f8 fetcht 1 ,mem_select_adc_gpio 
+3e4f 2040681d call gpio_get_bit 
+3e50 70422d00 jam adc_config_vinlpm ,mem_adc_config_flag 
+3e51 20608000 rtn true 
+3e52 70422d02 jam adc_config_gpio ,mem_adc_config_flag 
+3e53 20600000 rtn 
+
+mouse_adc_init:
+3e54 6800c22d fetch 1 ,mem_adc_config_flag 
+3e55 c0003e59 beq adc_config_vinlpm ,mouse_adc_init_data_vinlpm 
+3e56 c000be62 beq adc_config_hvin ,mouse_adc_init_data_hvin 
+3e57 c0013e6b beq adc_config_gpio ,mouse_adc_init_data_io 
+3e58 20203e59 branch mouse_adc_init_data_vinlpm 
+
+mouse_adc_init_data_vinlpm:
+3e59 68094221 fetcht 2 ,mem_2v_adc_vinlpm_data 
+3e5a 68014227 fetch 2 ,mem_3v_adc_vinlpm_data 
+3e5b 98467e00 isub temp ,pdata 
+3e5c 1feffe14 mul32 pdata ,20 ,pdata 
+3e5d 1fe6fc64 div pdata ,100 
+3e5e 20407f86 call wait_div_end 
+3e5f 1807fe00 quotient pdata 
+3e60 600146d0 store 2 ,mem_adc_reference_voltage 
+3e61 20600000 rtn 
+
+mouse_adc_init_data_hvin:
+3e62 6809421f fetcht 2 ,mem_1v_adc_hvin_data 
+3e63 68014225 fetch 2 ,mem_5v_adc_hvin_data 
+3e64 98467e00 isub temp ,pdata 
+3e65 1feffee6 mul32 pdata ,230 ,pdata 
+3e66 1fe6fd90 div pdata ,400 
+3e67 20407f86 call wait_div_end 
+3e68 1807fe00 quotient pdata 
+3e69 600146d0 store 2 ,mem_adc_reference_voltage 
+3e6a 20600000 rtn 
+
+mouse_adc_init_data_io:
+3e6b 68014223 fetch 2 ,mem_1v_adc_io_data 
+3e6c 600146d0 store 2 ,mem_adc_reference_voltage 
+3e6d 20600000 rtn 
+
+mouse_gpio_init:
+3e6e 6808c23a fetcht 1 ,mem_eeprom_wp_gpio 
+3e6f 2040680e call gpio_config_output 
+3e70 204048fb call usb_offline_check_init 
+3e71 6808c6e2 fetcht 1 ,mem_lbutton_gpio 
+3e72 204067fb call gpio_config_input 
+3e73 6808c6e3 fetcht 1 ,mem_rbutton_gpio 
+3e74 204067fb call gpio_config_input 
+3e75 6808c6e4 fetcht 1 ,mem_mbutton_gpio 
+3e76 204067fb call gpio_config_input 
+3e77 6808c6f3 fetcht 1 ,mem_sensor_data_gpio 
+3e78 204067fb call gpio_config_input 
+3e79 6808c6dc fetcht 1 ,mem_sensor_reset_gpio 
+3e7a 2040680e call gpio_config_output 
+3e7b 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio 
+3e7c 204067fb call gpio_config_input 
+3e7d 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio 
+3e7e 204067fb call gpio_config_input 
+3e7f 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio 
+3e80 204067fb call gpio_config_input 
+3e81 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio 
+3e82 204067fb call gpio_config_input 
+3e83 6808c6e5 fetcht 1 ,mem_bk_button_gpio 
+3e84 204067fb call gpio_config_input 
+3e85 6808c6e6 fetcht 1 ,mem_fw_button_gpio 
+3e86 204067fb call gpio_config_input 
+3e87 6808c6ef fetcht 1 ,mem_config_low_voltage_alarm_gpio 
+3e88 2040680e call gpio_config_output 
+3e89 6808c6f0 fetcht 1 ,mem_config_device1_led_gpio 
+3e8a 2040680e call gpio_config_output 
+3e8b 6808c6f1 fetcht 1 ,mem_config_device2_led_gpio 
+3e8c 2040680e call gpio_config_output 
+3e8d 6808c6f2 fetcht 1 ,mem_config_device3_led_gpio 
+3e8e 2040680e call gpio_config_output 
+3e8f 6808c6f4 fetcht 1 ,mem_dpi_led_gpio 
+3e90 2040680e call gpio_config_output 
+3e91 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 
+3e92 204067fb call gpio_config_input 
+3e93 6808c6ec fetcht 1 ,mem_config_bt_button_gpio 
+3e94 204067fb call gpio_config_input 
+3e95 6808c6e7 fetcht 1 ,mem_dpi_button_gpio 
+3e96 202067fb branch gpio_config_input 
+
+mouse_wheel_gpio_set_wake:
+3e97 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio 
+3e98 204067dd call gpio_set_wake_by_current_state 
+3e99 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio 
+3e9a 204067dd call gpio_set_wake_by_current_state 
+3e9b 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio 
+3e9c 204067dd call gpio_set_wake_by_current_state 
+3e9d 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio 
+3e9e 202067dd branch gpio_set_wake_by_current_state 
+
+mouse_before_hibernate_wheel_gpio_set:
+3e9f 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio 
+3ea0 20403ea7 call mouse_gpio_set_pupd_by_input 
+3ea1 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio 
+3ea2 20403ea7 call mouse_gpio_set_pupd_by_input 
+3ea3 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio 
+3ea4 20403ea7 call mouse_gpio_set_pupd_by_input 
+3ea5 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio 
+3ea6 20203ea7 branch mouse_gpio_set_pupd_by_input 
+
+mouse_gpio_set_pupd_by_input:
+3ea7 18467cff sub temp ,ui_button_gpio_disable ,null 
+3ea8 20628000 rtn zero 
+3ea9 18410e7f and temp ,0x7f ,queue 
+3eaa 6812011c hfetch 4 ,core_gpio_in 
+3eab afefffff qisolate1 pdata 
+3eac 68120078 hfetch 4 ,core_gpio_pu0 
+3ead f920fe00 qsetflag true ,pdata 
+3eae 60120078 hstore 4 ,core_gpio_pu0 
+3eaf 6812007c hfetch 4 ,core_gpio_pd0 
+3eb0 fd20fe00 nqsetflag true ,pdata 
+3eb1 6012007c hstore 4 ,core_gpio_pd0 
+3eb2 20600000 rtn 
+
+mouse_before_hibernate:
+3eb3 78347c00 enable user 
+3eb4 68120138 hfetch 4 ,0x8138 
+3eb5 79347e1a setflag user ,26 ,pdata 
+3eb6 6012004c hstore 4 ,core_lpm_reg 
+3eb7 20402c21 call lpm_write_ctrl 
+3eb8 20404482 call mouse_devce_led_off 
+3eb9 20403e9f call mouse_before_hibernate_wheel_gpio_set 
+3eba 20203ebf branch mouse_lpm_before_common 
+
+mouse_process_lpm_before:
+3ebb 20403ebf call mouse_lpm_before_common 
+3ebc 680080a0 fetch 1 ,mem_lpm_current_mult 
+3ebd 247a0000 nrtn blank 
+3ebe 202067ed branch gpio_clr_wake 
+
+mouse_lpm_before_common:
+3ebf 20403ee0 call mouse_wheel_check 
+3ec0 d8400019 arg mouse_spi1_clk_gpio ,temp 
+3ec1 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3ec2 2feffe12 isolate1 mouse_enable_spi2 ,pdata 
+3ec3 2040bede call mouse_spi_clk_gpio ,true 
+3ec4 2040680e call gpio_config_output 
+3ec5 204063ee call twspi_disable 
+3ec6 6808c6e2 fetcht 1 ,mem_lbutton_gpio 
+3ec7 204067dd call gpio_set_wake_by_current_state 
+3ec8 6808c6e3 fetcht 1 ,mem_rbutton_gpio 
+3ec9 204067dd call gpio_set_wake_by_current_state 
+3eca 6808c6e4 fetcht 1 ,mem_mbutton_gpio 
+3ecb 204067dd call gpio_set_wake_by_current_state 
+3ecc 6808c6e5 fetcht 1 ,mem_bk_button_gpio 
+3ecd 204067dd call gpio_set_wake_by_current_state 
+3ece 6808c6e6 fetcht 1 ,mem_fw_button_gpio 
+3ecf 204067dd call gpio_set_wake_by_current_state 
+3ed0 6808c6e7 fetcht 1 ,mem_dpi_button_gpio 
+3ed1 204067dd call gpio_set_wake_by_current_state 
+3ed2 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 
+3ed3 204067dd call gpio_set_wake_by_current_state 
+3ed4 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio 
+3ed5 204067dd call gpio_set_wake_by_current_state 
+3ed6 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio 
+3ed7 204067dd call gpio_set_wake_by_current_state 
+3ed8 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio 
+3ed9 204067dd call gpio_set_wake_by_current_state 
+3eda 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio 
+3edb 204067dd call gpio_set_wake_by_current_state 
+3edc 6808c6f3 fetcht 1 ,mem_sensor_data_gpio 
+3edd 202067e1 branch gpio_set_wake 
+
+mouse_spi_clk_gpio:
+3ede d840001e arg mouse_spi2_clk_gpio ,temp 
+3edf 20600000 rtn 
+
+mouse_wheel_check:
+3ee0 44f2401c bpatch patch1c_4 ,mem_patch1c 
+3ee1 20403eee call mouse_t_wheel_scan 
+3ee2 20403f36 call mouse_wheel_scan 
+3ee3 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel 
+3ee4 6808c6b7 fetcht 1 ,mem_wheel_tb_old_pinlevel 
+3ee5 6000c6b7 store 1 ,mem_wheel_tb_old_pinlevel 
+3ee6 98467c00 isub temp ,null 
+3ee7 2422b3d4 nbranch app_lpm_wake_auto_lock ,zero 
+3ee8 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel 
+3ee9 6808c6bd fetcht 1 ,mem_mwheel_b_old_pinlevel 
+3eea 6000c6bd store 1 ,mem_mwheel_b_old_pinlevel 
+3eeb 98467c00 isub temp ,null 
+3eec 2422b3d4 nbranch app_lpm_wake_auto_lock ,zero 
+3eed 20600000 rtn 
+
+mouse_t_wheel_scan:
+3eee 6800c6ea fetch 1 ,mem_whee_ta_data_gpio 
+3eef c17f8000 rtneq gpio_disable 
+3ef0 da200000 arg 0 ,rega 
+3ef1 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio 
+3ef2 2040681d call gpio_get_bit 
+3ef3 7920a200 setflag true ,0 ,rega 
+3ef4 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio 
+3ef5 2040681d call gpio_get_bit 
+3ef6 7920a201 setflag true ,1 ,rega 
+3ef7 1a227e00 copy rega ,pdata 
+3ef8 6000c6b8 store 1 ,mem_wheel_tb_new_pinlevel 
+3ef9 c000befe beq 0x01 ,mouse_t_wheel_scan_judge1 
+3efa c0013f02 beq 0x02 ,mouse_t_wheel_scan_judge2 
+3efb 6800c6b9 fetch 1 ,mem_wheel_tog 
+3efc c283bf0e bbit1 7 ,mouse_t_wheel_scan_judge3 
+3efd 20600000 rtn 
+
+mouse_t_wheel_scan_judge1:
+3efe 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel 
+3eff c0003f06 beq 0 ,mouse_t_wheel_scan_judge11 
+3f00 c001bf08 beq 3 ,mouse_t_wheel_scan_judge12 
+3f01 20600000 rtn 
+
+mouse_t_wheel_scan_judge2:
+3f02 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel 
+3f03 c0003f0a beq 0 ,mouse_t_wheel_scan_judge21 
+3f04 c001bf0c beq 3 ,mouse_t_wheel_scan_judge22 
+3f05 20600000 rtn 
+
+mouse_t_wheel_scan_judge11:
+3f06 7046b982 jam 0x82 ,mem_wheel_tog 
+3f07 20600000 rtn 
+
+mouse_t_wheel_scan_judge12:
+3f08 7046b981 jam 0x81 ,mem_wheel_tog 
+3f09 20600000 rtn 
+
+mouse_t_wheel_scan_judge21:
+3f0a 7046b980 jam 0x80 ,mem_wheel_tog 
+3f0b 20600000 rtn 
+
+mouse_t_wheel_scan_judge22:
+3f0c 7046b983 jam 0x83 ,mem_wheel_tog 
+3f0d 20600000 rtn 
+
+mouse_t_wheel_scan_judge3:
+3f0e 6800c6b9 fetch 1 ,mem_wheel_tog 
+3f0f 793ffe07 set0 7 ,pdata 
+3f10 6000c6b9 store 1 ,mem_wheel_tog 
+3f11 c0003f16 beq 0 ,mouse_t_wheel_scan_judge30 
+3f12 c000bf19 beq 1 ,mouse_t_wheel_scan_judge31 
+3f13 c0013f1c beq 2 ,mouse_t_wheel_scan_judge32 
+3f14 c001bf1f beq 3 ,mouse_t_wheel_scan_judge33 
+3f15 20600000 rtn 
+
+mouse_t_wheel_scan_judge30:
+3f16 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel 
+3f17 c001bf22 beq 3 ,mouse_wheel_t_forward 
+3f18 20600000 rtn 
+
+mouse_t_wheel_scan_judge31:
+3f19 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel 
+3f1a c0003f22 beq 0 ,mouse_wheel_t_forward 
+3f1b 20600000 rtn 
+
+mouse_t_wheel_scan_judge32:
+3f1c 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel 
+3f1d c001bf2c beq 3 ,mouse_wheel_t_back 
+3f1e 20600000 rtn 
+
+mouse_t_wheel_scan_judge33:
+3f1f 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel 
+3f20 c0003f2c beq 0 ,mouse_wheel_t_back 
+3f21 20600000 rtn 
+
+mouse_wheel_t_forward:
+3f22 6800c6bc fetch 1 ,mem_mouse_tz_data_count1 
+3f23 1fe0fe01 increase 1 ,pdata 
+3f24 6000c6bc store 1 ,mem_mouse_tz_data_count1 
+3f25 1fe67c01 sub pdata ,1 ,null 
+3f26 20610000 rtn positive 
+3f27 7046bc00 jam 0 ,mem_mouse_tz_data_count1 
+3f28 6800c6ba fetch 1 ,mem_mouse_tz_data 
+3f29 1fe0fe01 increase 1 ,pdata 
+3f2a 6000c6ba store 1 ,mem_mouse_tz_data 
+3f2b 20600000 rtn 
+
+mouse_wheel_t_back:
+3f2c 6800c6bb fetch 1 ,mem_mouse_tz_data_count 
+3f2d 1fe0fe01 increase 1 ,pdata 
+3f2e 6000c6bb store 1 ,mem_mouse_tz_data_count 
+3f2f 1fe67c01 sub pdata ,1 ,null 
+3f30 20610000 rtn positive 
+3f31 7046bb00 jam 0 ,mem_mouse_tz_data_count 
+3f32 6800c6ba fetch 1 ,mem_mouse_tz_data 
+3f33 1fe0ffff increase -1 ,pdata 
+3f34 6000c6ba store 1 ,mem_mouse_tz_data 
+3f35 20600000 rtn 
+
+mouse_wheel_scan:
+3f36 6800c6e8 fetch 1 ,mem_whee_a_data_gpio 
+3f37 c17f8000 rtneq gpio_disable 
+3f38 da200000 arg 0 ,rega 
+3f39 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio 
+3f3a 2040681d call gpio_get_bit 
+3f3b 7920a200 setflag true ,0 ,rega 
+3f3c 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio 
+3f3d 2040681d call gpio_get_bit 
+3f3e 7920a201 setflag true ,1 ,rega 
+3f3f 1a227e00 copy rega ,pdata 
+3f40 6000c6be store 1 ,mem_mwheel_b_new_pinlevel 
+3f41 c000bf46 beq 0x01 ,mouse_wheel_scan_judge1 
+3f42 c0013f4a beq 0x02 ,mouse_wheel_scan_judge2 
+3f43 6800c6bf fetch 1 ,mem_mwheel_tog 
+3f44 c283bf56 bbit1 7 ,mouse_wheel_scan_judge3 
+3f45 20600000 rtn 
+
+mouse_wheel_scan_judge1:
+3f46 6800c6bd fetch 1 ,mem_mwheel_b_old_pinlevel 
+3f47 c0003f4e beq 0 ,mouse_wheel_scan_judge11 
+3f48 c001bf50 beq 3 ,mouse_wheel_scan_judge12 
+3f49 20600000 rtn 
+
+mouse_wheel_scan_judge2:
+3f4a 6800c6bd fetch 1 ,mem_mwheel_b_old_pinlevel 
+3f4b c0003f52 beq 0 ,mouse_wheel_scan_judge21 
+3f4c c001bf54 beq 3 ,mouse_wheel_scan_judge22 
+3f4d 20600000 rtn 
+
+mouse_wheel_scan_judge11:
+3f4e 7046bf82 jam 0x82 ,mem_mwheel_tog 
+3f4f 20600000 rtn 
+
+mouse_wheel_scan_judge12:
+3f50 7046bf81 jam 0x81 ,mem_mwheel_tog 
+3f51 20600000 rtn 
+
+mouse_wheel_scan_judge21:
+3f52 7046bf80 jam 0x80 ,mem_mwheel_tog 
+3f53 20600000 rtn 
+
+mouse_wheel_scan_judge22:
+3f54 7046bf83 jam 0x83 ,mem_mwheel_tog 
+3f55 20600000 rtn 
+
+mouse_wheel_scan_judge3:
+3f56 6800c6bf fetch 1 ,mem_mwheel_tog 
+3f57 793ffe07 set0 7 ,pdata 
+3f58 6000c6bf store 1 ,mem_mwheel_tog 
+3f59 c0003f5e beq 0 ,mouse_wheel_scan_judge30 
+3f5a c000bf61 beq 1 ,mouse_wheel_scan_judge31 
+3f5b c0013f64 beq 2 ,mouse_wheel_scan_judge32 
+3f5c c001bf67 beq 3 ,mouse_wheel_scan_judge33 
+3f5d 20600000 rtn 
+
+mouse_wheel_scan_judge30:
+3f5e 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel 
+3f5f c001bf6a beq 3 ,mouse_wheel_forward 
+3f60 20600000 rtn 
+
+mouse_wheel_scan_judge31:
+3f61 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel 
+3f62 c0003f6a beq 0 ,mouse_wheel_forward 
+3f63 20600000 rtn 
+
+mouse_wheel_scan_judge32:
+3f64 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel 
+3f65 c001bf6f beq 3 ,mouse_wheel_back 
+3f66 20600000 rtn 
+
+mouse_wheel_scan_judge33:
+3f67 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel 
+3f68 c0003f6f beq 0 ,mouse_wheel_back 
+3f69 20600000 rtn 
+
+mouse_wheel_forward:
+3f6a 7046c200 jam 0 ,mem_mouse_z_data_count1 
+3f6b 6800c6c0 fetch 1 ,mem_mouse_z_data 
+3f6c 1fe0fe01 increase 1 ,pdata 
+3f6d 6000c6c0 store 1 ,mem_mouse_z_data 
+3f6e 20600000 rtn 
+
+mouse_wheel_back:
+3f6f 7046c100 jam 0 ,mem_mouse_z_data_count 
+3f70 6800c6c0 fetch 1 ,mem_mouse_z_data 
+3f71 1fe0ffff increase -1 ,pdata 
+3f72 6000c6c0 store 1 ,mem_mouse_z_data 
+3f73 20600000 rtn 
+
+mouse_hid_connected:
+3f74 58000002 setarg hid_handshake_timeout 
+3f75 6000c680 store 1 ,mem_hid_handshake_timer_count 
+3f76 20600000 rtn 
+
+mouse_send_process:
+3f77 6800c1e2 fetch 1 ,mem_app_handshake_flag 
+3f78 207a0000 rtn blank 
+3f79 20405271 call l2cap_malloc_is_fifo_nearly_full 
+3f7a 247a0000 nrtn blank 
+3f7b 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+3f7c c281bf8a bbit1 mosue_24g_pairing_flag ,mouse_send_empty_data 
+3f7d c2803f8a bbit1 mouse_select_device_flag ,mouse_send_empty_data 
+3f7e c282bf8a bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data 
+3f7f 20403f97 call mouse_motion 
+3f80 24740000 nrtn user 
+
+mouse_send_data:
+3f81 da200009 arg 9 ,rega 
+3f82 20404d63 call hid_malloc_tx_buff 
+3f83 6801424e fetch 2 ,mem_hid_int_remote_cid 
+3f84 e0a10000 istore 2 ,contw 
+3f85 580002a1 setarg 0x02a1 
+3f86 e0a10000 istore 2 ,contw 
+3f87 6803c69a fetch 7 ,mem_mouse_key 
+3f88 e0a38000 istore 7 ,contw 
+3f89 20600000 rtn 
+
+mouse_send_empty_data:
+3f8a 58000000 setarg 0 
+3f8b 6003c69a store 7 ,mem_mouse_key 
+3f8c 20203f81 branch mouse_send_data 
+
+mouse_no_data_timer_init:
+3f8d 680146aa fetch 2 ,mem_mouse_no_data_timeout 
+3f8e 600146b0 store 2 ,mem_mouse_no_data_timer 
+3f8f 20600000 rtn 
+
+mouse_fill_data_le:
+3f90 44f2c01c bpatch patch1c_5 ,mem_patch1c 
+3f91 da200007 arg 7 ,rega 
+3f92 6809446f fetcht 2 ,mem_le_notify_handle 
+3f93 20405a64 call le_att_malloc_tx_notify 
+3f94 6803c69a fetch 7 ,mem_mouse_key 
+3f95 e0a38000 istore 7 ,contw 
+3f96 20600000 rtn 
+
+mouse_motion:
+3f97 44f3401c bpatch patch1c_6 ,mem_patch1c 
+3f98 78547c00 disable user 
+3f99 58000000 setarg 0 
+3f9a 6003469b store 6 ,mem_mouse_x 
+3f9b 20403fb5 call mouse_cheak_sensor_data 
+3f9c 20404079 call mouse_zwheel 
+3f9d 2040407e call mouse_t_zwheel 
+3f9e 20404099 call mouse_key 
+3f9f 24740000 nrtn user 
+3fa0 20403f8d call mouse_no_data_timer_init 
+3fa1 d8e00008 arg mouse_statue_up_flag ,queue 
+3fa2 202043ce branch mouse_enable_function_flag 
+
+motion_6clk_direction_dispose:
+3fa3 6801469b fetch 2 ,mem_mouse_x 
+3fa4 1fe67e00 sub pdata ,0 ,pdata 
+3fa5 6001469b store 2 ,mem_mouse_x 
+3fa6 20207fe7 branch enable_user 
+
+motion_12clk_direction_dispose:
+3fa7 6801469d fetch 2 ,mem_mouse_y 
+3fa8 1fe67e00 sub pdata ,0 ,pdata 
+3fa9 6001469d store 2 ,mem_mouse_y 
+3faa 20207fe7 branch enable_user 
+
+motion_9clk_direction_dispose:
+3fab 6801469d fetch 2 ,mem_mouse_y 
+3fac 1fe67e00 sub pdata ,0 ,pdata 
+3fad 6001469d store 2 ,mem_mouse_y 
+3fae 6801469b fetch 2 ,mem_mouse_x 
+3faf 1fe67e00 sub pdata ,0 ,pdata 
+3fb0 6001469b store 2 ,mem_mouse_x 
+3fb1 20404002 call mouse_sensor_data_swap_places 
+3fb2 20207fe7 branch enable_user 
+
+motion_3clk_direction_dispose:
+3fb3 20404002 call mouse_sensor_data_swap_places 
+3fb4 20207fe7 branch enable_user 
+
+mouse_cheak_sensor_data:
+3fb5 6800c239 fetch 1 ,mem_spi_write_flash_sm 
+3fb6 c1800000 rtnne flash_sm_no_buys 
+3fb7 6800c6e0 fetch 1 ,mem_config_sensor_type 
+3fb8 c0003fe2 beq p3205 ,mouse_p32xx_sensor_motion 
+3fb9 c000bfe2 beq p3065 ,mouse_p32xx_sensor_motion 
+3fba c0013fe2 beq ka8 ,mouse_p32xx_sensor_motion 
+3fbb c001bfe2 beq p3204 ,mouse_p32xx_sensor_motion 
+3fbc c0023fc4 beq p3212 ,mouse_p3212_sensor_motion 
+3fbd c002c010 beq p3610 ,mouse_p3610_sensor_motion 
+3fbe c0033fe2 beq p3065_xy ,mouse_p32xx_sensor_motion 
+3fbf 20203fe2 branch mouse_p32xx_sensor_motion 
+
+mouse_clear_sensor_data:
+3fc0 6800c6a7 fetch 1 ,mem_mouse_move_flag 
+3fc1 205a405d call mouse_read_sensor_common ,blank 
+3fc2 7046a701 jam 1 ,mem_mouse_move_flag 
+3fc3 20600000 rtn 
+
+mouse_p3212_sensor_motion:
+3fc4 20403fc0 call mouse_clear_sensor_data 
+3fc5 6808c6f3 fetcht 1 ,mem_sensor_data_gpio 
+3fc6 2040681d call gpio_get_bit 
+3fc7 24608000 nrtn true 
+3fc8 58000000 setarg pan_reg_pid_l 
+3fc9 20406414 call twspi_read 
+3fca c09840d1 bne p32xx_id1 ,mouse_twspi_reset 
+3fcb 58000002 setarg pan_reg_motion_staus 
+3fcc 20406414 call twspi_read 
+3fcd c4038000 rtnbit0 7 
+3fce 2040405d call mouse_read_sensor_common 
+3fcf 20403fde call mouse_read_3212sensor_xy_high 
+3fd0 6000c6a1 store 1 ,mem_mouse_xy_h 
+3fd1 1ff1fe00 rshift4 pdata ,pdata 
+3fd2 20404169 call extsign_bit3 
+3fd3 6000c69c store 1 ,mem_mouse_x + 1 
+3fd4 6800c6a1 fetch 1 ,mem_mouse_xy_h 
+3fd5 1fe17e0f and pdata ,0x0f ,pdata 
+3fd6 20404169 call extsign_bit3 
+3fd7 6000c69e store 1 ,mem_mouse_y + 1 
+3fd8 6800c6f6 fetch 1 ,mem_config_sensor_angle 
+3fd9 c0003fa3 beq mouse_6clk_angle ,motion_6clk_direction_dispose 
+3fda c000bfab beq mouse_9clk_angle ,motion_9clk_direction_dispose 
+3fdb c0013fa7 beq mouse_12clk_angle ,motion_12clk_direction_dispose 
+3fdc c001bfb3 beq mouse_3clk_angle ,motion_3clk_direction_dispose 
+3fdd 20600000 rtn 
+
+mouse_read_3212sensor_xy_high:
+3fde 58000012 setarg 0x12 
+3fdf 20206414 branch twspi_read 
+
+mouse_p3065_judge:
+3fe0 c018bfea beq p3065_id1 ,mouse_p32xx_sensor_motion_1 
+3fe1 202040d1 branch mouse_twspi_reset 
+
+mouse_p32xx_sensor_motion:
+3fe2 20403fc0 call mouse_clear_sensor_data 
+3fe3 78547c00 disable user 
+3fe4 6808c6f3 fetcht 1 ,mem_sensor_data_gpio 
+3fe5 2040681d call gpio_get_bit 
+3fe6 24608000 nrtn true 
+3fe7 58000000 setarg pan_reg_pid_l 
+3fe8 20406414 call twspi_read 
+3fe9 c0983fe0 bne p32xx_id1 ,mouse_p3065_judge 
+
+mouse_p32xx_sensor_motion_1:
+3fea 58000002 setarg pan_reg_motion_staus 
+3feb 20406414 call twspi_read 
+3fec c4038000 rtnbit0 7 
+3fed 2040405d call mouse_read_sensor_common 
+3fee 6800c69b fetch 1 ,mem_mouse_x 
+3fef 20404165 call extsign 
+3ff0 6001469b store 2 ,mem_mouse_x 
+3ff1 6800c69d fetch 1 ,mem_mouse_y 
+3ff2 20404165 call extsign 
+3ff3 6001469d store 2 ,mem_mouse_y 
+3ff4 6800c6f6 fetch 1 ,mem_config_sensor_angle 
+3ff5 c0003ffa beq mouse_6clk_angle ,motion32xx_6clk_direction_selection 
+3ff6 c000bffc beq mouse_9clk_angle ,motion32xx_9clk_direction_selection 
+3ff7 c0013ffe beq mouse_12clk_angle ,motion32xx_12clk_direction_selection 
+3ff8 c001c000 beq mouse_3clk_angle ,motion32xx_3clk_direction_selection 
+3ff9 20600000 rtn 
+
+motion32xx_6clk_direction_selection:
+3ffa 20403fa3 call motion_6clk_direction_dispose 
+3ffb 202040b3 branch mouse_sensor_sdio_low 
+
+motion32xx_9clk_direction_selection:
+3ffc 20403fab call motion_9clk_direction_dispose 
+3ffd 202040b3 branch mouse_sensor_sdio_low 
+
+motion32xx_12clk_direction_selection:
+3ffe 20403fa7 call motion_12clk_direction_dispose 
+3fff 202040b3 branch mouse_sensor_sdio_low 
+
+motion32xx_3clk_direction_selection:
+4000 20403fb3 call motion_3clk_direction_dispose 
+4001 202040b3 branch mouse_sensor_sdio_low 
+
+mouse_sensor_data_swap_places:
+4002 6801469d fetch 2 ,mem_mouse_y 
+4003 6809469b fetcht 2 ,mem_mouse_x 
+4004 6001469b store 2 ,mem_mouse_x 
+4005 6009469d storet 2 ,mem_mouse_y 
+4006 20600000 rtn 
+
+mouse_p3610sensor_read:
+4007 2040640f call spi_ncs_enable 
+4008 20000064 nop 100 
+4009 1a427e00 copy regb ,pdata 
+400a 20406414 call twspi_read 
+400b 1fe22400 copy pdata ,regb 
+400c 20406411 call spi_ncs_disable 
+400d 20000064 nop 100 
+400e 1a427e00 copy regb ,pdata 
+400f 20600000 rtn 
+
+mouse_p3610_sensor_motion:
+4010 78547c00 disable user 
+4011 6808c6f3 fetcht 1 ,mem_sensor_data_gpio 
+4012 2040681d call gpio_get_bit 
+4013 24608000 nrtn true 
+4014 da400002 arg pan_reg_motion_staus ,regb 
+4015 20404007 call mouse_p3610sensor_read 
+4016 c4038000 rtnbit0 7 
+4017 da400000 arg pan_reg_pid_l ,regb 
+4018 20404007 call mouse_p3610sensor_read 
+4019 6000c6dd store 1 ,mem_sensor_id1 
+401a c09f4145 bne p3610_id1 ,mouse_init_3610sensor_reset 
+401b 6800c6a7 fetch 1 ,mem_mouse_move_flag 
+401c 205a4039 call mouse_read_sensor3610_data ,blank 
+401d 7046a701 jam 1 ,mem_mouse_move_flag 
+401e 20404039 call mouse_read_sensor3610_data 
+401f 6800c6a1 fetch 1 ,mem_mouse_xy_h 
+4020 1ff1fe00 rshift4 pdata ,pdata 
+4021 20404169 call extsign_bit3 
+4022 6000c69c store 1 ,mem_mouse_x + 1 
+4023 6800c6a1 fetch 1 ,mem_mouse_xy_h 
+4024 1fe17e0f and pdata ,0x0f ,pdata 
+4025 20404169 call extsign_bit3 
+4026 6000c69e store 1 ,mem_mouse_y + 1 
+4027 6800c6f6 fetch 1 ,mem_config_sensor_angle 
+4028 c0004031 beq 0 ,motion3610_6clk_direction_selection 
+4029 c000c035 beq 1 ,motion3610_9clk_direction_selection 
+402a c0014033 beq 2 ,motion3610_12clk_direction_selection 
+402b c001c037 beq 3 ,motion3610_3clk_direction_selection 
+402c 20600000 rtn 
+
+mouse_3610_smart_select:
+402d 6800c6a4 fetch 1 ,mem_sensor_smart_flag 
+402e c0004051 beq p3610_smart_enable ,mouse_3610_smart_disable 
+402f c000c045 beq p3610_smart_disable ,mouse_3610_smart_enable 
+4030 20600000 rtn 
+
+motion3610_6clk_direction_selection:
+4031 20403fa3 call motion_6clk_direction_dispose 
+4032 2020402d branch mouse_3610_smart_select 
+
+motion3610_12clk_direction_selection:
+4033 20403fa7 call motion_12clk_direction_dispose 
+4034 2020402d branch mouse_3610_smart_select 
+
+motion3610_9clk_direction_selection:
+4035 20403fab call motion_9clk_direction_dispose 
+4036 2020402d branch mouse_3610_smart_select 
+
+motion3610_3clk_direction_selection:
+4037 20403fb3 call motion_3clk_direction_dispose 
+4038 2020402d branch mouse_3610_smart_select 
+
+mouse_read_sensor3610_data:
+4039 2040640f call spi_ncs_enable 
+403a 2040405d call mouse_read_sensor_common 
+403b dfe00005 arg 5 ,pdata 
+403c 20406414 call twspi_read 
+403d 6000c6a1 store 1 ,mem_mouse_xy_h 
+403e dfe00007 arg 7 ,pdata 
+403f 20406414 call twspi_read 
+4040 6000c6a2 store 1 ,mem_sensor_shutter_hi 
+4041 dfe00008 arg 8 ,pdata 
+4042 20406414 call twspi_read 
+4043 6000c6a3 store 1 ,mem_sensor_shutter_lo 
+4044 20206411 branch spi_ncs_disable 
+
+mouse_3610_smart_enable:
+4045 6800c6a2 fetch 1 ,mem_sensor_shutter_hi 
+4046 c1800000 rtnne 0 
+4047 6800c6a3 fetch 1 ,mem_sensor_shutter_lo 
+4048 1fe67c2d sub pdata ,45 ,null 
+4049 20610000 rtn positive 
+404a 7046a400 jam p3610_smart_enable ,mem_sensor_smart_flag 
+404b 5800ba41 setarg 0xba41 
+404c 20406405 call sensor_write 
+404d 58000032 setarg 0x0032 
+404e 20406405 call sensor_write 
+404f 5800b541 setarg 0xb541 
+4050 20206405 branch sensor_write 
+
+mouse_3610_smart_disable:
+4051 6800c6a2 fetch 1 ,mem_sensor_shutter_hi 
+4052 c1800000 rtnne 0 
+4053 6800c6a3 fetch 1 ,mem_sensor_shutter_lo 
+4054 1fe67c2d sub pdata ,45 ,null 
+4055 24610000 nrtn positive 
+4056 7046a401 jam p3610_smart_disable ,mem_sensor_smart_flag 
+4057 5800ba41 setarg 0xba41 
+4058 20406405 call sensor_write 
+4059 58008032 setarg 0x8032 
+405a 20406405 call sensor_write 
+405b 5800b541 setarg 0xb541 
+405c 20206405 branch sensor_write 
+
+mouse_read_sensor_common:
+405d dfe00003 arg pan_reg_delta_x ,pdata 
+405e 20406414 call twspi_read 
+405f 6001469b store 2 ,mem_mouse_x 
+4060 dfe00004 arg pan_reg_delta_y ,pdata 
+4061 20406414 call twspi_read 
+4062 6001469d store 2 ,mem_mouse_y 
+4063 20600000 rtn 
+
+mouse_set_qdecoder_x:
+4064 d840001b arg mouse_default_xa_gpio ,temp 
+4065 204067fb call gpio_config_input 
+4066 d840001b arg mouse_default_xa_gpio ,temp 
+4067 2040681d call gpio_get_bit 
+4068 20608000 rtn true 
+4069 68108109 hfetch 1 ,core_qdec_cntx 
+406a 79207e04 set1 4 ,pdata 
+406b 60108109 hstore 1 ,core_qdec_cntx 
+406c 20600000 rtn 
+
+mouse_hardware_zwheel:
+406d 6808c6c0 fetcht 1 ,mem_mouse_z_data 
+406e 68108109 hfetch 1 ,core_qdec_cntx 
+406f 9840fe00 iadd temp ,pdata 
+4070 207a0000 rtn blank 
+4071 6000c69f store 1 ,mem_mouse_z 
+4072 7046c000 jam 0 ,mem_mouse_z_data 
+4073 20207fe7 branch enable_user 
+
+mouse_hardware_zwheel_beforelpm:
+4074 6808c6c0 fetcht 1 ,mem_mouse_z_data 
+4075 68108109 hfetch 1 ,core_qdec_cntx 
+4076 9840fe00 iadd temp ,pdata 
+4077 6000c6c0 store 1 ,mem_mouse_z_data 
+4078 20600000 rtn 
+
+mouse_zwheel:
+4079 6800c6c0 fetch 1 ,mem_mouse_z_data 
+407a 207a0000 rtn blank 
+407b 6000c69f store 1 ,mem_mouse_z 
+407c 7046c000 jam 0 ,mem_mouse_z_data 
+407d 20207fe7 branch enable_user 
+
+mouse_t_zwheel:
+407e 6800c6ba fetch 1 ,mem_mouse_tz_data 
+407f 207a0000 rtn blank 
+4080 6000c6a0 store 1 ,mem_mouse_tz 
+4081 7046ba00 jam 0 ,mem_mouse_tz_data 
+4082 20207fe7 branch enable_user 
+
+mouse_check_key_gpio:
+4083 da200000 arg 0 ,rega 
+4084 6808c6e2 fetcht 1 ,mem_lbutton_gpio 
+4085 2040681d call gpio_get_bit 
+4086 7920a200 setflag true ,0 ,rega 
+4087 6808c6e3 fetcht 1 ,mem_rbutton_gpio 
+4088 2040681d call gpio_get_bit 
+4089 7920a201 setflag true ,1 ,rega 
+408a 6808c6e4 fetcht 1 ,mem_mbutton_gpio 
+408b 2040681d call gpio_get_bit 
+408c 7920a202 setflag true ,2 ,rega 
+408d 20404090 call mouse_check_s_key_gpio 
+408e 1a227e00 copy rega ,pdata 
+408f 20600000 rtn 
+
+mouse_check_s_key_gpio:
+4090 6800c6e5 fetch 1 ,mem_bk_button_gpio 
+4091 c17f8000 rtneq gpio_disable 
+4092 6808c6e5 fetcht 1 ,mem_bk_button_gpio 
+4093 2040681d call gpio_get_bit 
+4094 7920a203 setflag true ,3 ,rega 
+4095 6808c6e6 fetcht 1 ,mem_fw_button_gpio 
+4096 2040681d call gpio_get_bit 
+4097 7920a204 setflag true ,4 ,rega 
+4098 20600000 rtn 
+
+mouse_key:
+4099 20404083 call mouse_check_key_gpio 
+409a 204040a8 call mouse_set_mult 
+409b 204040a3 call mouse_24g_key 
+409c 1a227e00 copy rega ,pdata 
+409d 6808c69a fetcht 1 ,mem_mouse_key 
+409e 6000c69a store 1 ,mem_mouse_key 
+409f 9842fe00 ixor temp ,pdata 
+40a0 1fe67c00 sub pdata ,0 ,null 
+40a1 20628000 rtn zero 
+40a2 20207fe7 branch enable_user 
+
+mouse_24g_key:
+40a3 c6930000 rtnmark0 mark_24g 
+40a4 1a227e00 copy rega ,pdata 
+40a5 207a0000 rtn blank 
+40a6 6000c69a store 1 ,mem_mouse_key 
+40a7 20207fe7 branch enable_user 
+
+mouse_set_mult:
+40a8 68014682 fetch 2 ,mem_ui_state_map 
+40a9 c284c0ad bbit1 ui_state_ble_connected ,mouse_set_ble_mult 
+40aa 68014682 fetch 2 ,mem_ui_state_map 
+40ab c28040b0 bbit1 ui_state_bt_connected ,mouse_set_bt_mult 
+40ac 20600000 rtn 
+
+mouse_set_ble_mult:
+40ad 1a227e00 copy rega ,pdata 
+40ae 243a5820 nbranch le_set_config_short_mult ,blank 
+40af 20205822 branch le_clr_config_short_mult 
+
+mouse_set_bt_mult:
+40b0 1a227e00 copy rega ,pdata 
+40b1 243a2bc7 nbranch classic_bt_set_mult_short_flag ,blank 
+40b2 20202bc9 branch classic_bt_clr_mult_short_flag 
+
+mouse_sensor_sdio_low:
+40b3 44f3c01c bpatch patch1c_7 ,mem_patch1c 
+40b4 d840001a arg mouse_spi1_sdio_gpio ,temp 
+40b5 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+40b6 2feffe12 isolate1 mouse_enable_spi2 ,pdata 
+40b7 2040c0be call mouse_sensor_sdio_low2 ,true 
+40b8 2040681d call gpio_get_bit 
+40b9 20608000 rtn true 
+40ba 5800000a setarg 0x0a 
+40bb 20406414 call twspi_read 
+40bc 200003e8 nop 1000 
+40bd 202040b3 branch mouse_sensor_sdio_low 
+
+mouse_sensor_sdio_low2:
+40be d840001f arg mouse_spi2_sdio_gpio ,temp 
+40bf 20600000 rtn 
+
+mouse_spi_sdio_gpio_pollup:
+40c0 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+40c1 c28940c4 bbit1 mouse_enable_spi2 ,mouse_spi2_sdio_gpio_pollup 
+
+mouse_spi1_sdio_gpio_pollup:
+40c2 d840001a arg mouse_spi1_sdio_gpio ,temp 
+40c3 202067fe branch gpio_config_input_without_wake 
+
+mouse_spi2_sdio_gpio_pollup:
+40c4 d840001f arg mouse_spi2_sdio_gpio ,temp 
+40c5 202067fe branch gpio_config_input_without_wake 
+
+mouse_init_sunt:
+40c6 20403d36 call mouse_spi_init 
+40c7 20758000 rtn wake 
+40c8 204040c0 call mouse_spi_sdio_gpio_pollup 
+40c9 6800c6e0 fetch 1 ,mem_config_sensor_type 
+40ca c002c0d5 beq p3610 ,mouse_init_3610sensor 
+
+mouse_init_sensor:
+40cb 204040d9 call mouse_read_sensor_id 
+40cc c01840e0 beq p32xx_id1 ,mouse_init_p32xx_id2_judge 
+40cd c018c0ea beq p3065_id1 ,mouse_p3065_init_param 
+40ce 204040d1 call mouse_twspi_reset 
+40cf 200003e8 nop 1000 
+40d0 202040cb branch mouse_init_sensor 
+
+mouse_twspi_reset:
+40d1 44f4401d bpatch patch1d_0 ,mem_patch1d 
+40d2 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+40d3 c28963e0 bbit1 mouse_enable_spi2 ,twspi_reset2 
+40d4 202063d1 branch twspi_reset 
+
+mouse_init_3610sensor:
+40d5 204040d9 call mouse_read_sensor_id 
+40d6 c01f414b beq p3610_id1 ,mouse_init_p3610 
+40d7 20404145 call mouse_init_3610sensor_reset 
+40d8 202040d5 branch mouse_init_3610sensor 
+
+mouse_read_sensor_id:
+40d9 58000001 setarg pan_reg_pid_h 
+40da 20406414 call twspi_read 
+40db 6000c6de store 1 ,mem_sensor_id2 
+40dc 58000000 setarg pan_reg_pid_l 
+40dd 20406414 call twspi_read 
+40de 6000c6dd store 1 ,mem_sensor_id1 
+40df 20600000 rtn 
+
+mouse_init_p32xx_id2_judge:
+40e0 6800c6de fetch 1 ,mem_sensor_id2 
+40e1 c068c139 beq p3205_tj3t_id2 ,mouse_3205_3t_init_param 
+40e2 c06940f8 beq p3204_tj3l_id2 ,mouse_3204_3l_init_param 
+40e3 c00140ee beq p3212_id2 ,mouse_3212_init_param 
+40e4 c02a40e6 beq pka8_id2 ,mouse_ka8_init_param 
+40e5 20600000 rtn 
+
+mouse_ka8_init_param:
+40e6 7046e002 jam ka8 ,mem_config_sensor_type 
+40e7 20600000 rtn 
+
+mouse_p3065xy_init_param:
+40e8 7046e006 jam p3065_xy ,mem_config_sensor_type 
+40e9 20600000 rtn 
+
+mouse_p3065_init_param:
+40ea 6800c6de fetch 1 ,mem_sensor_id2 
+40eb c03840e8 beq p3065_xy_id2 ,mouse_p3065xy_init_param 
+40ec 7046e001 jam p3065 ,mem_config_sensor_type 
+40ed 20600000 rtn 
+
+mouse_3212_init_param:
+40ee 7046e004 jam p3212 ,mem_config_sensor_type 
+40ef 204040f6 call mouse_sensor_disable_wp 
+40f0 58003426 setarg 0x3426 
+40f1 20406413 call twspi_write 
+40f2 58000419 setarg 0x0419 
+40f3 20406413 call twspi_write 
+
+mouse_sensor_enable_wp:
+40f4 58000009 setarg 0x0009 
+40f5 20206413 branch twspi_write 
+
+mouse_sensor_disable_wp:
+40f6 58005a09 setarg 0x5a09 
+40f7 20206413 branch twspi_write 
+
+mouse_3204_3l_init_param:
+40f8 7046e003 jam p3204 ,mem_config_sensor_type 
+40f9 204040f6 call mouse_sensor_disable_wp 
+40fa 58000f0d setarg 0x0f0d 
+40fb 20406413 call twspi_write 
+40fc 5800e31d setarg 0xe31d 
+40fd 20406413 call twspi_write 
+40fe 5800d27d setarg 0xd27d 
+40ff 20406413 call twspi_write 
+4100 20404102 call mouse_32xx_init_param 
+4101 2020411a branch mouse_32xx_init_param_1 
+
+mouse_32xx_init_param:
+4102 5800351b setarg 0x351b 
+4103 20406413 call twspi_write 
+4104 5800b428 setarg 0xb428 
+4105 20406413 call twspi_write 
+4106 58004629 setarg 0x4629 
+4107 20406413 call twspi_write 
+4108 5800962a setarg 0x962a 
+4109 20406413 call twspi_write 
+410a 58008c2b setarg 0x8c2b 
+410b 20406413 call twspi_write 
+410c 58006e2c setarg 0x6e2c 
+410d 20406413 call twspi_write 
+410e 5800642d setarg 0x642d 
+410f 20406413 call twspi_write 
+4110 58005f38 setarg 0x5f38 
+4111 20406413 call twspi_write 
+4112 58000f39 setarg 0x0f39 
+4113 20406413 call twspi_write 
+4114 5800323a setarg 0x323a 
+4115 20406413 call twspi_write 
+4116 5800473b setarg 0x473b 
+4117 20406413 call twspi_write 
+4118 58001042 setarg 0x1042 
+4119 20206413 branch twspi_write 
+
+mouse_32xx_init_param_1:
+411a 58002e54 setarg 0x2e54 
+411b 20406413 call twspi_write 
+411c 5800f255 setarg 0xf255 
+411d 20406413 call twspi_write 
+411e 5800f461 setarg 0xf461 
+411f 20406413 call twspi_write 
+4120 58007063 setarg 0x7063 
+4121 20406413 call twspi_write 
+4122 58005275 setarg 0x5275 
+4123 20406413 call twspi_write 
+4124 58004176 setarg 0x4176 
+4125 20406413 call twspi_write 
+4126 5800ed77 setarg 0xed77 
+4127 20406413 call twspi_write 
+4128 58002378 setarg 0x2378 
+4129 20406413 call twspi_write 
+412a 58004679 setarg 0x4679 
+412b 20406413 call twspi_write 
+412c 5800e57a setarg 0xe57a 
+412d 20406413 call twspi_write 
+412e 5800487c setarg 0x487c 
+412f 20406413 call twspi_write 
+4130 5800777e setarg 0x777e 
+4131 20406413 call twspi_write 
+4132 5800017f setarg 0x017f 
+4133 20406413 call twspi_write 
+4134 5800000b setarg 0x000b 
+4135 20406413 call twspi_write 
+4136 5800007f setarg 0x007f 
+4137 20406413 call twspi_write 
+4138 202040f4 branch mouse_sensor_enable_wp 
+
+mouse_3205_3t_init_param:
+4139 7046e000 jam p3205 ,mem_config_sensor_type 
+413a 204040f6 call mouse_sensor_disable_wp 
+413b 5800100d setarg 0x100d 
+413c 20406413 call twspi_write 
+413d 5800ed1d setarg 0xed1d 
+413e 20406413 call twspi_write 
+413f 5800807d setarg 0x807d 
+4140 20406413 call twspi_write 
+4141 20404102 call mouse_32xx_init_param 
+4142 58000943 setarg 0x0943 
+4143 20406413 call twspi_write 
+4144 2020411a branch mouse_32xx_init_param_1 
+
+mouse_init_3610sensor_reset:
+4145 6808c6dc fetcht 1 ,mem_sensor_reset_gpio 
+4146 20406829 call gpio_out_active 
+4147 20407ec1 call delay_10ms 
+4148 6808c6dc fetcht 1 ,mem_sensor_reset_gpio 
+4149 20406825 call gpio_out_inactive 
+414a 20207ec1 branch delay_10ms 
+
+mouse_init_p3610:
+414b 7046e005 jam p3610 ,mem_config_sensor_type 
+414c 5800ba41 setarg 0xba41 
+414d 20406405 call sensor_write 
+414e 58000d11 setarg 0x0d11 
+414f 20406405 call sensor_write 
+4150 5800041b setarg 0x041b 
+4151 20406405 call sensor_write 
+4152 5800041c setarg 0x041c 
+4153 20406405 call sensor_write 
+4154 58000f1d setarg 0x0f1d 
+4155 20406405 call sensor_write 
+4156 58000032 setarg 0x0032 
+4157 20406405 call sensor_write 
+4158 5800b541 setarg 0xb541 
+4159 20206405 branch sensor_write 
+
+mouse_set_sensor_reg:
+415a 5800ba41 setarg 0xba41 
+415b 20406405 call sensor_write 
+415c 20000fa0 nop 4000 
+415d 5800ff7f setarg 0xff7f 
+415e 20406405 call sensor_write 
+415f 1a227e00 copy rega ,pdata 
+4160 20406405 call sensor_write 
+4161 5800007f setarg 0x007f 
+4162 20406405 call sensor_write 
+4163 5800b541 setarg 0xb541 
+4164 20206405 branch sensor_write 
+
+extsign:
+4165 c4038000 rtnbit0 7 
+4166 d840ff00 arg 0xff00 ,temp 
+4167 9841fe00 ior temp ,pdata 
+4168 20600000 rtn 
+
+extsign_bit3:
+4169 c4018000 rtnbit0 3 
+416a d84000f0 arg 0xf0 ,temp 
+416b 9841fe00 ior temp ,pdata 
+416c 20600000 rtn 
+
+mouse_le:
+416d 20405892 call le_fifo_check_nearly_full 
+416e 247a0000 nrtn blank 
+416f 6800c6c5 fetch 1 ,mem_le_connect_status_flag 
+4170 1fe17e03 and pdata ,0x03 ,pdata 
+4171 c1818000 rtnne 0x03 
+4172 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+4173 c281c179 bbit1 mosue_24g_pairing_flag ,mouse_le_send_empty_packet 
+4174 c2804179 bbit1 mouse_select_device_flag ,mouse_le_send_empty_packet 
+4175 c282c179 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet 
+4176 20403f97 call mouse_motion 
+4177 24740000 nrtn user 
+4178 20203f90 branch mouse_fill_data_le 
+
+mouse_le_send_empty_packet:
+4179 58000000 setarg 0 
+417a 6003c69a store 7 ,mem_mouse_key 
+417b 20203f90 branch mouse_fill_data_le 
+
+mouse_priority_bb_event:
+417c 1a627e00 copy regc ,pdata 
+417d c00a41c3 beq bt_evt_le_connected ,mouse_le_bb_event_connected 
+417e c000c2ca beq bt_evt_bb_connected ,mouse_stop_discovery 
+417f c00ac1d9 beq bt_evt_le_disconnected ,mouse_bb_disconnected 
+4180 c00141d9 beq bt_evt_bb_disconnected ,mouse_bb_disconnected 
+4181 c002c1d6 beq bt_evt_setup_complete ,mouse_bt_event_setup_complete 
+4182 c008426c beq bt_evt_button_long_pressed ,mouse_bb_event_discovery_btn 
+4183 c009429b beq bt_evt_hid_handshake ,mouse_bt_hid_handshake 
+4184 c00341d5 beq bt_evt_hid_connected ,mouse_bt_hid_connected 
+4185 c00241cc beq bt_evt_reconn_failed ,mouse_bb_event_reconn_failed 
+4186 c009c1cc beq bt_evt_reconn_page_timeout ,mouse_bb_event_reconn_timeout 
+4187 c00541ca beq bt_evt_pincode_req ,mouse_bb_event_pincode 
+4188 c01733cd beq bt_evt_remote_unsniff ,app_start_auto_sniff 
+4189 c018c1b4 beq bt_evt_le_pairing_success ,mouse_le_pairing_success 
+418a c01941b6 beq bt_evt_le_start_enc ,mouse_le_ll_start_encryt 
+418b c01f4191 beq bt_evt_le_pairing_complete ,mouse_le_pairing_complete 
+418c c013c38e beq bt_evt_virtual_cable_unplug ,mouse_irtual_cable_unplug 
+418d c01cc19c beq bt_evt_24g_pairing_complete ,mouse_24g_pairing_complete 
+418e c01d4192 beq bt_evt_24g_attempt_fail ,mouse_24g_attempt_fail 
+418f c01e419a beq bt_evt_24g_attempt_success ,mouse_24g_attempt_success 
+4190 20600000 rtn 
+
+mouse_le_pairing_complete:
+4191 20203410 branch app_ble_store_reconn_info 
+
+mouse_24g_attempt_fail:
+4192 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable 
+4193 6800c71e fetch 1 ,mem_reconn_times 
+4194 243a4492 nbranch mouse_polling_device ,blank 
+4195 6800c720 fetch 1 ,mem_device_flag 
+4196 6808c703 fetcht 1 ,mem_24g_device_number 
+4197 98467c00 isub temp ,null 
+4198 2022b40a branch app_enter_hibernate ,zero 
+4199 20600000 rtn 
+
+mouse_24g_attempt_success:
+419a 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable 
+419b 20600000 rtn 
+
+mouse_24g_pairing_complete:
+419c 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable 
+419d d8e00003 arg mosue_24g_pairing_flag ,queue 
+419e 204043d2 call mouse_disable_function_flag 
+419f 58000000 setarg 0 
+41a0 60014707 store 2 ,mem_24g_pairing_timer_count 
+41a1 7046a700 jam 0 ,mem_mouse_move_flag 
+41a2 6800c6e0 fetch 1 ,mem_config_sensor_type 
+41a3 1fe67c05 sub pdata ,p3610 ,null 
+41a4 2042c039 call mouse_read_sensor3610_data ,zero 
+41a5 2442c05d ncall mouse_read_sensor_common ,zero 
+41a6 68008004 fetch 1 ,mouse_flag_len ,mem_mouse_flag 
+41a7 c289c1af bbit1 mouse_enable_flash ,mouse_store_flash_24g_address 
+41a8 204041aa call mouse_set_24g_addr_eeprom 
+41a9 202065d1 branch iicd_write_protect_eep_data 
+
+mouse_set_24g_addr_eeprom:
+41aa 20402c7a call g24_head_ptr2regc 
+41ab 1a60a2ae add regc ,offset_24g_addr ,rega 
+41ac da40005b arg mouse_g24_addr_eeprom_offect ,regb 
+41ad d8400004 arg 4 ,temp 
+41ae 20600000 rtn 
+
+mouse_store_flash_24g_address:
+41af 20402c7a call g24_head_ptr2regc 
+41b0 1a60a4ae add regc ,offset_24g_addr ,regb 
+41b1 ea408000 ifetch 1 ,regb 
+41b2 6000c77b store 1 ,mem_mouse_24g_addr 
+41b3 20204435 branch mouse_store_flash_device_info 
+
+mouse_le_pairing_success:
+41b4 d8e00002 arg ll_pairing_success_flag ,queue 
+41b5 202041b9 branch mouse_le_enable_connect_flag 
+
+mouse_le_ll_start_encryt:
+41b6 7046c602 jam 2 ,mem_le_start_encrypt_timer 
+41b7 d8e00001 arg ll_start_enc_flag ,queue 
+41b8 202041b9 branch mouse_le_enable_connect_flag 
+
+mouse_le_enable_connect_flag:
+41b9 6800c6c5 fetch 1 ,mem_le_connect_status_flag 
+41ba f9207e00 qset1 pdata 
+41bb 6000c6c5 store 1 ,mem_le_connect_status_flag 
+41bc 20600000 rtn 
+
+mouse_le_disable_connect_flag:
+41bd 6800c6c5 fetch 1 ,mem_le_connect_status_flag 
+41be f93ffe00 qset0 pdata 
+41bf 6000c6c5 store 1 ,mem_le_connect_status_flag 
+41c0 20600000 rtn 
+
+mouse_le_clean_connect_flag:
+41c1 7046c500 jam 0 ,mem_le_connect_status_flag 
+41c2 20600000 rtn 
+
+mouse_le_bb_event_connected:
+41c3 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 
+41c4 793ffe00 set0 app_disc_by_button ,pdata 
+41c5 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag 
+41c6 58000000 setarg 0 
+41c7 600146ae store 2 ,mem_mouse_direct_timer 
+41c8 20403f8d call mouse_no_data_timer_init 
+41c9 202042ca branch mouse_stop_discovery 
+
+mouse_bb_event_pincode:
+41ca 204063cb call pincode_reinit 
+41cb 202033dd branch app_bt_set_pincode 
+
+mouse_bb_event_reconn_timeout:
+
+mouse_bb_event_reconn_failed:
+41cc 6800c71e fetch 1 ,mem_reconn_times 
+41cd 243a4492 nbranch mouse_polling_device ,blank 
+41ce 68014682 fetch 2 ,mem_ui_state_map 
+41cf c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery 
+41d0 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+41d1 c28041d7 bbit1 mouse_select_device_flag ,mouse_soft_reset 
+41d2 c282c2b0 bbit1 mouse_bt_discovery_button_down_flag ,mouse_start_discovery 
+41d3 c281aead bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 
+41d4 202033a7 branch app_bb_hibernate 
+
+mouse_bt_hid_connected:
+41d5 20203f74 branch mouse_hid_connected 
+
+mouse_bt_event_setup_complete:
+41d6 20600000 rtn 
+
+mouse_soft_reset:
+41d7 204043c0 call mouse_select_device_enable 
+41d8 2020659a branch soft_reset_chip 
+
+mouse_bb_disconnected:
+41d9 44f4c01d bpatch patch1d_1 ,mem_patch1d 
+41da 204041e7 call mouse_bb_discon_clear_stack 
+41db 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+41dc c28041d7 bbit1 mouse_select_device_flag ,mouse_soft_reset 
+41dd c281aead bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 
+41de 6800c71e fetch 1 ,mem_reconn_times 
+41df 243a4492 nbranch mouse_polling_device ,blank 
+41e0 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason 
+41e1 c283c1f5 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn 
+41e2 c28033a9 bbit1 app_disc_by_button ,app_disconn_reason_clear 
+41e3 c280c1ef bbit1 app_disc_after_pairing ,mouse_event_light_state_pairing 
+41e4 c28141f2 bbit1 app_disc_after_reconn ,mouse_event_light_state_hibernate 
+41e5 c281c1f2 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate 
+41e6 202042b0 branch mouse_start_discovery 
+
+mouse_bb_discon_clear_stack:
+41e7 58000000 setarg 0 
+41e8 600446b7 store 8 ,mem_wheel_tb_old_pinlevel 
+41e9 e0a20000 istore 4 ,contw 
+41ea 7046b400 jam 0 ,mem_mouse_send_blank_timer 
+41eb 7046a700 jam 0 ,mem_mouse_move_flag 
+41ec 7041e200 jam app_handshake_null ,mem_app_handshake_flag 
+41ed 70442900 jam 0 ,mem_ltk_exists 
+41ee 20600000 rtn 
+
+mouse_event_light_state_pairing:
+41ef c282c1f2 bbit1 app_disc_after_handshake ,mouse_event_light_state_hibernate 
+41f0 c281c1f2 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate 
+41f1 202042b0 branch mouse_start_discovery 
+
+mouse_event_light_state_hibernate:
+41f2 68014682 fetch 2 ,mem_ui_state_map 
+41f3 c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery 
+41f4 202033a7 branch app_bb_hibernate 
+
+mouse4_0_event_bb_disconn:
+41f5 204041c1 call mouse_le_clean_connect_flag 
+41f6 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason 
+41f7 c28033a9 bbit1 app_disc_by_button ,app_disconn_reason_clear 
+41f8 202033a7 branch app_bb_hibernate 
+
+mouse_bb_event_timer:
+41f9 204043d6 call mouse_adc_read 
+41fa 20404243 call mouse_24g_delay_timer 
+41fb 20404246 call mouse_ban_24g_pairing_timer 
+41fc 20404250 call mouse_dpi_led_blink_delay_timer 
+41fd 2040445d call mouse_statue_up_timer 
+41fe 20404443 call mouse_statue_cheak_timer 
+41ff 20404333 call mouse_select_device 
+4200 204043a5 call mouse_bt_discovery_cheak 
+4201 204043eb call mouse_low_voltage_led_timer 
+4202 20404209 call mouse_sensor_led_contrl_timer 
+4203 20404231 call mouse_check_hid_handshake_timer 
+4204 20404234 call mouse_check_discovery_timeout_timer 
+4205 20404237 call mouse_check_direct_timeout_timer 
+4206 2040423a call mouse_check_no_data_timeout_timer 
+4207 2040423d call mouse_check_mouse_state_timer 
+4208 20204240 branch mouse_le_enable_att_list_timer 
+
+mouse_sensor_led_contrl_timer:
+4209 6800c711 fetch 1 ,mem_mouse_sensor_timer_count 
+420a 207a0000 rtn blank 
+420b 1fe0ffff increase -1 ,pdata 
+420c 6000c711 store 1 ,mem_mouse_sensor_timer_count 
+420d 247a0000 nrtn blank 
+420e 2020420f branch mouse_sensor_led_contrl 
+
+mouse_sensor_led_contrl:
+420f 6800c712 fetch 1 ,mem_sensor_led_style 
+4210 c1000000 rtneq ui_led_state_blink_stop 
+4211 c002c216 beq ui_led_state_blink_darking ,mouse_sensor_led_blink_state_darking 
+
+mouse_sensor_led_blink_state_lighting:
+4212 20404225 call mouse_sensor_led_on 
+4213 70471205 jam ui_led_state_blink_darking ,mem_sensor_led_style 
+4214 70471105 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count 
+4215 20600000 rtn 
+
+mouse_sensor_led_blink_state_darking:
+4216 2040422c call mouse_sensor_led_off 
+4217 70471204 jam ui_led_state_blink_lighting ,mem_sensor_led_style 
+4218 70471105 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count 
+4219 20600000 rtn 
+
+mouse_sensor_led_blink_stop:
+
+mouse_sensor_reset:
+421a 58008006 setarg 0x8006 
+421b 20406413 call twspi_write 
+421c 200003e8 nop 1000 
+421d 70471100 jam 0x00 ,mem_mouse_sensor_timer_count 
+421e 70471200 jam ui_led_state_blink_stop ,mem_sensor_led_style 
+421f 202040e0 branch mouse_init_p32xx_id2_judge 
+
+mouse_p3212sensor_led_on:
+4220 5800a006 setarg 0xa006 
+4221 20406413 call twspi_write 
+4222 5800a005 setarg 0xa005 
+4223 20206413 branch twspi_write 
+
+mouse_sensor_led_on_global:
+4224 70471100 jam 0 ,mem_mouse_sensor_timer_count 
+
+mouse_sensor_led_on:
+4225 6800c6e0 fetch 1 ,mem_config_sensor_type 
+4226 c0024220 beq p3212 ,mouse_p3212sensor_led_on 
+4227 58000106 setarg 0x0106 
+4228 20406413 call twspi_write 
+4229 5800a105 setarg 0xa105 
+422a 20206413 branch twspi_write 
+
+mouse_sensor_led_off_global:
+422b 70471100 jam 0 ,mem_mouse_sensor_timer_count 
+
+mouse_sensor_led_off:
+422c 58000906 setarg 0x0906 
+422d 20206413 branch twspi_write 
+
+mouse_sensor_start_blink:
+422e 70471105 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count 
+422f 70471201 jam ui_led_state_blink_start ,mem_sensor_led_style 
+4230 20600000 rtn 
+
+mouse_check_hid_handshake_timer:
+4231 da604680 arg mem_hid_handshake_timer_count ,regc 
+4232 da40429b arg mouse_bt_hid_handshake ,regb 
+4233 2020336d branch timer_single_step 
+
+mouse_check_discovery_timeout_timer:
+4234 da6046ac arg mem_mouse_discovery_timer ,regc 
+4235 da404264 arg mouse_check_discovery_timeout ,regb 
+4236 20203374 branch timer_single_step_2b 
+
+mouse_check_direct_timeout_timer:
+4237 da6046ae arg mem_mouse_direct_timer ,regc 
+4238 da404266 arg mouse_check_direct_timeout ,regb 
+4239 20203374 branch timer_single_step_2b 
+
+mouse_check_no_data_timeout_timer:
+423a da6046b0 arg mem_mouse_no_data_timer ,regc 
+423b da40426a arg mouse_check_no_data_timeout ,regb 
+423c 20203374 branch timer_single_step_2b 
+
+mouse_check_mouse_state_timer:
+423d da6046c4 arg mem_mouse_statue_led_timer ,regc 
+423e da404478 arg mouse_statue_led_off ,regb 
+423f 2020336d branch timer_single_step 
+
+mouse_le_enable_att_list_timer:
+4240 da6046c6 arg mem_le_start_encrypt_timer ,regc 
+4241 da40425e arg mouse_le_enable_att_list ,regb 
+4242 2020336d branch timer_single_step 
+
+mouse_24g_delay_timer:
+4243 da604704 arg mem_24g_enter_lpm_timer ,regc 
+4244 da404249 arg mouse_24g_delay ,regb 
+4245 2020336d branch timer_single_step 
+
+mouse_ban_24g_pairing_timer:
+4246 da604707 arg mem_24g_pairing_timer_count ,regc 
+4247 da404249 arg mouse_ban_24g_pairing ,regb 
+4248 20203374 branch timer_single_step_2b 
+
+mouse_ban_24g_pairing:
+
+mouse_24g_delay:
+4249 20600000 rtn 
+
+mosue_dpi_led_blink_init:
+424a 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+424b c40b8000 rtnbit0 mouse_enable_dpi_led_blink 
+424c 7046df0a jam 10 ,mem_mouse_dpi_led_delay_count 
+424d 6800c6f4 fetch 1 ,mem_dpi_led_gpio 
+424e 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+424f 20600000 rtn 
+
+mouse_dpi_led_blink_delay_timer:
+4250 da6046df arg mem_mouse_dpi_led_delay_count ,regc 
+4251 da404253 arg mouse_dpi_led_setting ,regb 
+4252 2020336d branch timer_single_step 
+
+mouse_dpi_led_setting:
+4253 6800c6f4 fetch 1 ,mem_dpi_led_gpio 
+4254 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+4255 58000190 setarg led_dpi_blink 
+4256 60014716 store 2 ,mem_mouse_on_time 
+4257 60014718 store 2 ,mem_mouse_off_time 
+4258 da200000 arg 0 ,rega 
+4259 6808c77a fetcht 1 ,mem_mouse_dpi 
+425a 18408401 increase 1 ,temp 
+425b 6008c714 storet 1 ,mem_mouse_blink_count 
+425c 70471301 jam ui_led_state_blink_start ,mem_mouse_led_type 
+425d 20600000 rtn 
+
+mouse_le_enable_att_list:
+425e 6800c6c5 fetch 1 ,mem_le_connect_status_flag 
+425f c3810000 rtnbit1 ll_pairing_success_flag 
+4260 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp 
+4261 20407d8f call ui_ipc_send_cmd 
+4262 d8e00000 arg write_req_enable_flag ,queue 
+4263 202041b9 branch mouse_le_enable_connect_flag 
+
+mouse_check_discovery_timeout:
+4264 204042ca call mouse_stop_discovery 
+4265 2020340a branch app_enter_hibernate 
+
+mouse_check_direct_timeout:
+4266 204033f6 call app_ble_stop_direct_adv 
+4267 6800c71e fetch 1 ,mem_reconn_times 
+4268 243a4492 nbranch mouse_polling_device ,blank 
+4269 2020340a branch app_enter_hibernate 
+
+mouse_check_no_data_timeout:
+426a c5137e1d bmark1 mark_24g ,check_51cmd_hibernate 
+426b 20204386 branch mouse_disconnect 
+
+mouse_bb_event_discovery_btn:
+426c 44f5401d bpatch patch1d_2 ,mem_patch1d 
+426d 7046b400 jam 0 ,mem_mouse_send_blank_timer 
+426e 20404386 call mouse_disconnect 
+426f 204041c1 call mouse_le_clean_connect_flag 
+4270 202042b0 branch mouse_start_discovery 
+
+mouse3_0_check_reconn_target:
+4271 680341d0 fetch 6 ,mem_hci_plap 
+4272 203a33eb branch app_bt_start_discovery_short ,blank 
+4273 2040427e call mouse_reconn_setting_led_gpio 
+4274 70016d17 jam 0x17 ,mem_connection_options 
+4275 6800c65a fetch 1 ,mem_ssp_enable 
+4276 243a33e1 nbranch app_bt_start_reconnect ,blank 
+4277 70016d04 jam 0x04 ,mem_connection_options 
+4278 202033e1 branch app_bt_start_reconnect 
+
+mouse4_0_check_reconn_target:
+4279 680146a8 fetch 2 ,mem_mouse_direct_timeout 
+427a 600146ae store 2 ,mem_mouse_direct_timer 
+427b 2040427e call mouse_reconn_setting_led_gpio 
+427c 20403418 call app_lpm_mult_disable 
+427d 20207df4 branch check_51cmd_adv 
+
+mouse_reconn_setting_led_gpio:
+427e 580000c8 setarg led_reconnect_blink 
+427f 60014716 store 2 ,mem_mouse_on_time 
+4280 60014718 store 2 ,mem_mouse_off_time 
+4281 20204285 branch mouse_setting_led_gpio_comman 
+
+mouse_discover_setting_led_gpio:
+4282 580003e8 setarg led_discovery_blink 
+4283 60014716 store 2 ,mem_mouse_on_time 
+4284 60014718 store 2 ,mem_mouse_off_time 
+
+mouse_setting_led_gpio_comman:
+4285 6800c720 fetch 1 ,mem_device_flag 
+4286 c000c28a beq mode_bt_device1 ,mouse_device_led1 
+4287 c001428c beq mode_bt_device2 ,mouse_device_led2 
+4288 c001c28e beq mode_bt_device3 ,mouse_device_led3 
+4289 20600000 rtn 
+
+mouse_device_led1:
+428a 6800c6f0 fetch 1 ,mem_config_device1_led_gpio 
+428b 2020428f branch mouse_led_blink 
+
+mouse_device_led2:
+428c 6800c6f1 fetch 1 ,mem_config_device2_led_gpio 
+428d 2020428f branch mouse_led_blink 
+
+mouse_device_led3:
+428e 6800c6f2 fetch 1 ,mem_config_device3_led_gpio 
+
+mouse_led_blink:
+428f 60008aa2 store 1 ,mem_temp 
+4290 20404482 call mouse_devce_led_off 
+4291 68008aa2 fetch 1 ,mem_temp 
+4292 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+4293 da200000 arg 0 ,rega 
+4294 70471301 jam ui_led_state_blink_start ,mem_mouse_led_type 
+4295 20207d1e branch ui_led_blink_start_global 
+
+mouse_led_off:
+4296 da200000 arg 0 ,rega 
+4297 20207d19 branch ui_led_off_global 
+
+mouse_led_on:
+4298 da200000 arg 0 ,rega 
+4299 20207d14 branch ui_led_on_global 
+
+mouse4_0_bb_event_discovery_btn:
+429a 202041c1 branch mouse_le_clean_connect_flag 
+
+mouse_bt_hid_handshake:
+429b 7041e201 jam app_handshake_done ,mem_app_handshake_flag 
+429c 20403416 call app_lpm_mult_enable 
+429d 20403412 call app_bt_store_reconn_info 
+429e 58000000 setarg 0 
+429f 6001467e store 2 ,mem_discovery_timeout_timer_count 
+42a0 6000c680 store 1 ,mem_hid_handshake_timer_count 
+42a1 2020340e branch app_bt_enter_sniff 
+
+mouse_check_reconn_target:
+42a2 2040435f call mouse_cheak_select_device_by_switch 
+42a3 6800c720 fetch 1 ,mem_device_flag 
+42a4 6808c703 fetcht 1 ,mem_24g_device_number 
+42a5 98467c00 isub temp ,null 
+42a6 2022c2ab branch mouse_connect_24g_mode ,zero 
+42a7 6800c210 fetch 1 ,mem_xrecord_mode 
+42a8 c019c271 beq rec_3_mode ,mouse3_0_check_reconn_target 
+42a9 c01a4279 beq rec_4_mode ,mouse4_0_check_reconn_target 
+42aa 202042b0 branch mouse_start_discovery 
+
+mouse_connect_24g_mode:
+42ab 20403d57 call mouse_start_24g_mode 
+42ac c6130000 rtnmark1 mark_24g 
+42ad 6800c71e fetch 1 ,mem_reconn_times 
+42ae 243a4492 nbranch mouse_polling_device ,blank 
+42af 20600000 rtn 
+
+mouse_start_discovery:
+42b0 44f5c01d bpatch patch1d_3 ,mem_patch1d 
+42b1 68014682 fetch 2 ,mem_ui_state_map 
+42b2 c285c2b7 bbit1 ui_state_ble_adv ,mouse_start_discovery_norandom 
+42b3 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+42b4 c30c42b7 bbit0 mouse_enable_ble_random_addre ,mouse_start_discovery_norandom 
+42b5 180a7e00 random pdata 
+42b6 6000c4a1 store 1 ,mem_le_lap + 1 
+
+mouse_start_discovery_norandom:
+42b7 20403418 call app_lpm_mult_disable 
+42b8 68014687 fetch 2 ,mem_discovery_timeout 
+42b9 600146ac store 2 ,mem_mouse_discovery_timer 
+42ba 70016d06 jam 6 ,mem_connection_options 
+42bb 58000000 setarg 0 
+42bc 600146b0 store 2 ,mem_mouse_no_data_timer 
+42bd 600146ae store 2 ,mem_mouse_direct_timer 
+42be d8e00007 arg mouse_store_eeprom_flag ,queue 
+42bf 204043ce call mouse_enable_function_flag 
+42c0 204043ca call mouse_bt_discovery_button_down_disable 
+42c1 6800c092 fetch 1 ,mem_device_option 
+42c2 2feffe01 isolate1 mode_4_mouse ,pdata 
+42c3 2040fdf4 call check_51cmd_adv ,true 
+42c4 6800c092 fetch 1 ,mem_device_option 
+42c5 2feffe00 isolate1 mode_3_mouse ,pdata 
+42c6 2040fddd call check_51cmd_start_discovery ,true 
+42c7 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+42c8 c28e422e bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_start_blink 
+42c9 20204282 branch mouse_discover_setting_led_gpio 
+
+mouse_stop_discovery:
+42ca 44f6401d bpatch patch1d_4 ,mem_patch1d 
+42cb 6800c092 fetch 1 ,mem_device_option 
+42cc 2feffe01 isolate1 mode_4_mouse ,pdata 
+42cd 2040c2d4 call mouse_stop_le_adv ,true 
+42ce 6800c092 fetch 1 ,mem_device_option 
+42cf 2feffe00 isolate1 mode_3_mouse ,pdata 
+42d0 2040c2d7 call mouse_stop_bt3_discovery ,true 
+42d1 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+42d2 c28e421a bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_led_blink_stop 
+42d3 20204482 branch mouse_devce_led_off 
+
+mouse_stop_le_adv:
+42d4 58000000 setarg 0 
+42d5 600146ae store 2 ,mem_mouse_direct_timer 
+42d6 20207dfa branch check_51cmd_stop_adv 
+
+mouse_stop_bt3_discovery:
+42d7 58000000 setarg 0 
+42d8 600146ac store 2 ,mem_mouse_discovery_timer 
+42d9 20207de2 branch check_51cmd_stop_discovery 
+
+mouse_store_remote_bdaddr:
+42da 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+42db c4038000 rtnbit0 mouse_store_eeprom_flag 
+42dc d8e00007 arg mouse_store_eeprom_flag ,queue 
+42dd 204043d2 call mouse_disable_function_flag 
+42de 204042e8 call mouse_check_device_addr 
+
+mouse_unplug_clean_bdaddr:
+42df 204042fb call mouse_before_store_reconn_info 
+42e0 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+42e1 c289c435 bbit1 mouse_enable_flash ,mouse_store_flash_device_info 
+42e2 c28a42e4 bbit1 mouse_enable_eeprom ,mouse_store_eeprom_device_info 
+42e3 20600000 rtn 
+
+mouse_store_eeprom_device_info:
+42e4 d8400058 arg 88 ,temp 
+42e5 da204720 arg mem_device_flag ,rega 
+42e6 da400000 arg mouse_info_eeprom_offect ,regb 
+42e7 202065d1 branch iicd_write_protect_eep_data 
+
+mouse_check_device_addr:
+42e8 68008185 fetch 1 ,mem_record_bt_mode 
+42e9 c01a42ec beq rec_4_mode ,mouse_check_le_device_addr 
+42ea c019c2ef beq rec_3_mode ,mouse_check_bt_device_addr 
+42eb 20600000 rtn 
+
+mouse_check_le_device_addr:
+42ec 6000c6c7 store 1 ,mem_device_addr_temp 
+42ed 6803044f fetch 6 ,mem_le_plap 
+42ee 202042f1 branch mouse_check_bt_device_addr_common 
+
+mouse_check_bt_device_addr:
+42ef 6000c6c7 store 1 ,mem_device_addr_temp 
+42f0 68030040 fetch 6 ,mem_plap 
+
+mouse_check_bt_device_addr_common:
+42f1 600346c8 store 6 ,mem_device_addr_temp + 1 
+42f2 6803c6c7 fetch 7 ,mem_device_addr_temp 
+42f3 d8c04721 arg mem_device1_type ,contr 
+42f4 df200003 arg 3 ,loopcnt 
+
+mouse_check_device_addr_end:
+42f5 e8cb8000 ifetcht 7 ,contr 
+42f6 98467c00 isub temp ,null 
+42f7 2022c310 branch mouse_clean_addr ,zero 
+42f8 18c08c16 increase 22 ,contr 
+42f9 c20042f5 loop mouse_check_device_addr_end 
+42fa 20600000 rtn 
+
+mouse_before_store_reconn_info:
+42fb da204721 arg mem_device1_type ,rega 
+42fc 6800c720 fetch 1 ,mem_device_flag 
+42fd 1fe0ffff increase -1 ,pdata 
+42fe 1feffe1d mul32 pdata ,29 ,pdata 
+42ff 9a20a200 iadd rega ,rega 
+4300 68008185 fetch 1 ,mem_record_bt_mode 
+4301 e2208000 istore 1 ,rega 
+4302 c01a4305 beq rec_4_mode ,mouse_store_le_device 
+4303 c019c30c beq rec_3_mode ,mouse_store_bt_device 
+4304 20600000 rtn 
+
+mouse_store_le_device:
+4305 6803044f fetch 6 ,mem_le_plap 
+4306 e0a30000 istore 6 ,contw 
+4307 d8c04419 arg mem_le_ltk ,contr 
+4308 20407ebf call memcpy16 
+4309 680344a0 fetch 6 ,mem_le_lap 
+430a e0a30000 istore 6 ,contw 
+430b 20600000 rtn 
+
+mouse_store_bt_device:
+430c 68030040 fetch 6 ,mem_plap 
+430d e0a30000 istore 6 ,contw 
+430e d8c041be arg mem_link_key ,contr 
+430f 20207ebf branch memcpy16 
+
+mouse_clean_addr:
+4310 18c08dfa increase -6 ,contr 
+4311 18c20a00 copy contr ,contw 
+4312 680b46c8 fetcht 6 ,mem_device_addr_temp + 1 
+4313 18408403 increase 3 ,temp 
+4314 e0ab0000 istoret 6 ,contw 
+4315 20600000 rtn 
+
+mouse_eeprom_load_recon_info:
+4316 d8400058 arg 88 ,temp 
+4317 da204720 arg mem_device_flag ,rega 
+4318 da400000 arg mouse_info_eeprom_offect ,regb 
+4319 204065df call iicd_read_eep_data 
+
+mouse_select_reconn_device:
+431a da204721 arg mem_device1_type ,rega 
+431b 6800c720 fetch 1 ,mem_device_flag 
+431c 6808c703 fetcht 1 ,mem_24g_device_number 
+431d 98467c00 isub temp ,null 
+431e 20628000 rtn zero 
+431f 1fe0ffff increase -1 ,pdata 
+4320 1feffe1d mul32 pdata ,29 ,pdata 
+4321 9a20a200 iadd rega ,rega 
+4322 ea208000 ifetch 1 ,rega 
+4323 6000c210 store 1 ,mem_xrecord_mode 
+4324 c019c327 beq rec_3_mode ,mouse_load_bt_device 
+4325 c01a432c beq rec_4_mode ,mouse_load_le_device 
+4326 20600000 rtn 
+
+mouse_load_bt_device:
+4327 e8c30000 ifetch 6 ,contr 
+
+mouse_load_bt_device_end:
+4328 600341d0 store 6 ,mem_hci_plap 
+4329 d8a041be arg mem_link_key ,contw 
+432a 20407ebf call memcpy16 
+432b 202067d7 branch check_link_key_load 
+
+mouse_load_le_device:
+432c e8c30000 ifetch 6 ,contr 
+
+mouse_load_le_device_end:
+432d 600341d0 store 6 ,mem_hci_plap 
+432e d8a04419 arg mem_le_ltk ,contw 
+432f 20407ebf call memcpy16 
+4330 e8c30000 ifetch 6 ,contr 
+4331 600344a0 store 6 ,mem_le_lap 
+4332 20600000 rtn 
+
+mouse_select_device:
+4333 6800c6f5 fetch 1 ,mem_config_function_enable 
+4334 c282c349 bbit1 enable_select_device_by_gpio_button ,mouse_select_device_by_button 
+4335 c2834359 bbit1 enable_select_device_by_switch ,mouse_select_device_by_switch 
+4336 20204337 branch mouse_select_device_by_combination_key 
+
+mouse_select_device_by_combination_key:
+4337 20404083 call mouse_check_key_gpio 
+4338 c003433e beq mouse_rm_button ,mouse_select_device_commbination_key_down 
+
+mouse_select_device_commbination_key_up:
+4339 7046d81e jam 30 ,mem_combination_select_device_count 
+433a 6800c6d9 fetch 1 ,mem_select_device_button_statue 
+433b c1008000 rtneq dpi_button_state_up 
+433c 7046d901 jam dpi_button_state_up ,mem_select_device_button_statue 
+433d 20600000 rtn 
+
+mouse_select_device_commbination_key_down:
+433e 20404343 call mouse_combination_select_device_timer 
+433f 6800c6d9 fetch 1 ,mem_select_device_button_statue 
+4340 c1000000 rtneq dpi_button_state_down 
+4341 7046d900 jam dpi_button_state_down ,mem_select_device_button_statue 
+4342 202043c0 branch mouse_select_device_enable 
+
+mouse_combination_select_device_timer:
+4343 6800c6d8 fetch 1 ,mem_combination_select_device_count 
+4344 207a0000 rtn blank 
+4345 1fe0ffff pincrease -1 
+4346 6000c6d8 store 1 ,mem_combination_select_device_count 
+4347 247a0000 nrtn blank 
+4348 20204370 branch mouse_ready_reconnection_by_button 
+
+mouse_select_device_by_button:
+4349 6800c6ed fetch 1 ,mem_config_select_device_button_gpio 
+434a c17f8000 rtneq gpio_disable 
+434b 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 
+434c 2040681d call gpio_get_bit 
+434d 2020c354 branch mouse_select_device_button_down ,true 
+
+mouse_select_device_button_up:
+434e 6800c6d9 fetch 1 ,mem_select_device_button_statue 
+434f c1008000 rtneq dpi_button_state_up 
+4350 7046d901 jam dpi_button_state_up ,mem_select_device_button_statue 
+4351 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+4352 c3830000 rtnbit1 mouse_long_bt_button_flag 
+4353 20204370 branch mouse_ready_reconnection_by_button 
+
+mouse_select_device_button_down:
+4354 6800c6d9 fetch 1 ,mem_select_device_button_statue 
+4355 c1000000 rtneq dpi_button_state_down 
+4356 7046d900 jam dpi_button_state_down ,mem_select_device_button_statue 
+4357 d8e00006 arg mouse_long_bt_button_flag ,queue 
+4358 202043d2 branch mouse_disable_function_flag 
+
+mouse_select_device_by_switch:
+4359 68008004 fetch 1 ,mouse_flag_len ,mem_mouse_flag 
+435a c4030000 rtnbit0 enable_select_device_by_switch 
+435b 6800c720 fetch 1 ,mem_device_flag 
+435c c000c369 beq mode_bt_device1 ,mouse_select1_device 
+435d c001436c beq mode_24g_device ,mouse_select2_device 
+435e 20600000 rtn 
+
+mouse_cheak_select_device_by_switch:
+435f 68008004 fetch 1 ,mouse_flag_len ,mem_mouse_flag 
+4360 c4030000 rtnbit0 enable_select_device_by_switch 
+4361 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 
+4362 2040681d call gpio_get_bit 
+4363 2020c366 branch mouse_cheak_select_24gdevice ,true 
+
+mouse_select_btdevice:
+4364 70472001 jam mode_bt_device1 ,mem_device_flag 
+4365 20600000 rtn 
+
+mouse_cheak_select_24gdevice:
+4366 6800c703 fetch 1 ,mem_24g_device_number 
+4367 6000c720 store 1 ,mem_device_flag 
+4368 20600000 rtn 
+
+mouse_select1_device:
+4369 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 
+436a 2420c370 nbranch mouse_ready_reconnection_by_button ,true 
+436b 20600000 rtn 
+
+mouse_select2_device:
+436c 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio 
+436d 2040681d call gpio_get_bit 
+436e 2020c354 branch mouse_select_device_button_down ,true 
+436f 20600000 rtn 
+
+mouse_ready_reconnection_by_button:
+4370 6808c720 fetcht 1 ,mem_device_flag 
+4371 18408401 increase 1 ,temp 
+4372 6800c6d2 fetch 1 ,mem_device_number 
+4373 98467c00 isub temp ,null 
+4374 244143cc ncall mouse_select_device_count_clean ,positive 
+4375 6008c720 storet 1 ,mem_device_flag 
+4376 7041bd00 jam 0 ,mem_link_key_exists 
+4377 2040437a call mouse_store_device_number2eeprom 
+4378 204043c0 call mouse_select_device_enable 
+4379 2020437e branch mouse_set_reconnection 
+
+mouse_store_device_number2eeprom:
+437a d8400001 arg 1 ,temp 
+437b da204720 arg mem_device_flag ,rega 
+437c da400000 arg 0 ,regb 
+437d 20206606 branch iicd_write_eep_data 
+
+mouse_set_reconnection:
+437e 20404381 call mouse_stop_bluetooth_mode 
+437f 204043c2 call mouse_select_device_disable 
+4380 202041d7 branch mouse_soft_reset 
+
+mouse_stop_bluetooth_mode:
+4381 68014682 fetch 2 ,mem_ui_state_map 
+4382 c283c392 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect 
+4383 c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect 
+4384 c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect 
+4385 202042ca branch mouse_stop_discovery 
+
+mouse_disconnect:
+4386 44f6c01d bpatch patch1d_5 ,mem_patch1d 
+4387 58000000 setarg 0 
+4388 600146b0 store 2 ,mem_mouse_no_data_timer 
+4389 68014682 fetch 2 ,mem_ui_state_map 
+438a c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect 
+438b 68014682 fetch 2 ,mem_ui_state_map 
+438c c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect 
+438d 20600000 rtn 
+
+mouse_irtual_cable_unplug:
+438e 58000001 setarg 0x01 
+438f 60030040 store 6 ,mem_plap 
+4390 70018533 jam rec_3_mode ,mem_record_bt_mode 
+4391 202042df branch mouse_unplug_clean_bdaddr 
+
+mouse_cancel_reconnect:
+4392 204043c4 call mouse_bt_cannel_reconn_enable 
+4393 20207e2f branch check_51cmd_bb_reconn_cancel 
+
+mouse_bt_discovery_by_button:
+4394 6800c6ec fetch 1 ,mem_config_bt_button_gpio 
+4395 c17f8000 rtneq gpio_disable 
+4396 6808c6ec fetcht 1 ,mem_config_bt_button_gpio 
+4397 2040681d call gpio_get_bit 
+4398 2020c39f branch mouse_bt_discovery_button_down ,true 
+
+mouse_bt_discovery_button_up:
+4399 6800c685 fetch 1 ,mem_ui_button_timeout 
+439a 6000c6da store 1 ,mem_combination_ui_button_count 
+439b 6800c6db fetch 1 ,mem_bt_discovey_button_statue 
+439c c1008000 rtneq dpi_button_state_up 
+439d 7046db01 jam dpi_button_state_up ,mem_bt_discovey_button_statue 
+439e 202043ca branch mouse_bt_discovery_button_down_disable 
+
+mouse_bt_discovery_button_down:
+439f 204043b5 call mouse_bt_discovry_timer 
+43a0 6800c6db fetch 1 ,mem_bt_discovey_button_statue 
+43a1 c1000000 rtneq dpi_button_state_down 
+43a2 7046db00 jam dpi_button_state_down ,mem_bt_discovey_button_statue 
+43a3 20407e2f call check_51cmd_bb_reconn_cancel 
+43a4 202043c8 branch mouse_bt_discovery_button_down_enable 
+
+mouse_bt_discovery_cheak:
+43a5 6800c6f5 fetch 1 ,mem_config_function_enable 
+43a6 c2824394 bbit1 enable_bt_button ,mouse_bt_discovery_by_button 
+
+mouse_bt_discovery_commbination_key:
+43a7 20404083 call mouse_check_key_gpio 
+43a8 c003c3af beq mouse_lmr_button ,mouse_bt_discovery_commbination_key_down 
+
+mouse_bt_discovery_commbination_key_up:
+43a9 6800c685 fetch 1 ,mem_ui_button_timeout 
+43aa 6000c6da store 1 ,mem_combination_ui_button_count 
+43ab 6800c6db fetch 1 ,mem_bt_discovey_button_statue 
+43ac c1008000 rtneq dpi_button_state_up 
+43ad 7046db01 jam dpi_button_state_up ,mem_bt_discovey_button_statue 
+43ae 202043ca branch mouse_bt_discovery_button_down_disable 
+
+mouse_bt_discovery_commbination_key_down:
+43af 204043b5 call mouse_bt_discovry_timer 
+43b0 6800c6db fetch 1 ,mem_bt_discovey_button_statue 
+43b1 c1000000 rtneq dpi_button_state_down 
+43b2 7046db00 jam dpi_button_state_down ,mem_bt_discovey_button_statue 
+43b3 20407e2f call check_51cmd_bb_reconn_cancel 
+43b4 202043c8 branch mouse_bt_discovery_button_down_enable 
+
+mouse_bt_discovry_timer:
+43b5 da6046da arg mem_combination_ui_button_count ,regc 
+43b6 da4043b8 arg mouse_long_button_bt_discovry ,regb 
+43b7 2020336d branch timer_single_step 
+
+mouse_long_button_bt_discovry:
+43b8 d8e00006 arg mouse_long_bt_button_flag ,queue 
+43b9 204043ce call mouse_enable_function_flag 
+43ba 20403357 call app_evt_button_long_pressed 
+43bb 2020426c branch mouse_bb_event_discovery_btn 
+
+mouse_cpi_enable:
+43bc d8e00001 arg mouse_cpi_flag ,queue 
+43bd 202043ce branch mouse_enable_function_flag 
+
+mouse_cpi_disable:
+43be d8e00001 arg mouse_cpi_flag ,queue 
+43bf 202043d2 branch mouse_disable_function_flag 
+
+mouse_select_device_enable:
+43c0 d8e00000 arg mouse_select_device_flag ,queue 
+43c1 202043ce branch mouse_enable_function_flag 
+
+mouse_select_device_disable:
+43c2 d8e00000 arg mouse_select_device_flag ,queue 
+43c3 202043d2 branch mouse_disable_function_flag 
+
+mouse_bt_cannel_reconn_enable:
+43c4 d8e00002 arg mouse_bt_cannel_reconn_flag ,queue 
+43c5 202043ce branch mouse_enable_function_flag 
+
+mouse_bt_cannel_reconn_disable:
+43c6 d8e00002 arg mouse_bt_cannel_reconn_flag ,queue 
+43c7 202043d2 branch mouse_disable_function_flag 
+
+mouse_bt_discovery_button_down_enable:
+43c8 d8e00005 arg mouse_bt_discovery_button_down_flag ,queue 
+43c9 202043ce branch mouse_enable_function_flag 
+
+mouse_bt_discovery_button_down_disable:
+43ca d8e00005 arg mouse_bt_discovery_button_down_flag ,queue 
+43cb 202043d2 branch mouse_disable_function_flag 
+
+mouse_select_device_count_clean:
+43cc d8400001 arg 1 ,temp 
+43cd 20600000 rtn 
+
+mouse_enable_function_flag:
+43ce 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+43cf f9207e00 qset1 pdata 
+43d0 600246d3 store mouse_flag_len ,mem_mouse_flag 
+43d1 20600000 rtn 
+
+mouse_disable_function_flag:
+43d2 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+43d3 f93ffe00 qset0 pdata 
+43d4 600246d3 store mouse_flag_len ,mem_mouse_flag 
+43d5 20600000 rtn 
+
+mouse_adc_read:
+43d6 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+43d7 c40d0000 rtnbit0 mouse_enable_adc 
+43d8 6800c6ce fetch 1 ,mem_adc_read_timer 
+43d9 1fe0fe01 increase 1 ,pdata 
+43da 6000c6ce store 1 ,mem_adc_read_timer 
+43db 1fe67c0a sub pdata ,10 ,null 
+43dc 20610000 rtn positive 
+43dd 7046ce00 jam 0 ,mem_adc_read_timer 
+43de 204068eb call adc_set_mode 
+43df 20406908 call vdd_calculate_by_mode 
+43e0 6001470f store 2 ,mem_mouse_vdd_now_vol 
+43e1 da204709 arg mem_mouse_vdd_calculate_set ,rega 
+43e2 20406930 call adc_bat_percent_lowpower_out 
+43e3 6800c231 fetch 1 ,mem_adc_power_flag 
+43e4 c280c4a0 bbit1 1 ,mouse_power_down 
+43e5 c30043e9 bbit0 0 ,mouse_adc_no_low_voltage 
+43e6 202043e7 branch mouse_adc_low_voltage 
+
+mouse_adc_low_voltage:
+43e7 d8e00004 arg mouse_low_voltage_flag ,queue 
+43e8 202043ce branch mouse_enable_function_flag 
+
+mouse_adc_no_low_voltage:
+43e9 d8e00004 arg mouse_low_voltage_flag ,queue 
+43ea 202043d2 branch mouse_disable_function_flag 
+
+mouse_low_voltage_led_timer:
+43eb 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+43ec c4020000 rtnbit0 mouse_low_voltage_flag 
+43ed 6800c6ef fetch 1 ,mem_config_low_voltage_alarm_gpio 
+43ee 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+43ef 6800c6cf fetch 1 ,mem_adc_low_volatage_led_timer_count 
+43f0 1fe0fe01 pincrease 1 
+43f1 6000c6cf store 1 ,mem_adc_low_volatage_led_timer_count 
+43f2 1fe67c14 sub pdata ,20 ,null 
+43f3 244143f9 ncall mouse_adc_low_volatage_led_timer_count_clean ,positive 
+43f4 c00143fb beq 2 ,mouse_low_voltage_led_on 
+43f5 c00243fe beq 4 ,mouse_low_voltage_led_off 
+43f6 c00343fb beq 6 ,mouse_low_voltage_led_on 
+43f7 c00443fe beq 8 ,mouse_low_voltage_led_off 
+43f8 20600000 rtn 
+
+mouse_adc_low_volatage_led_timer_count_clean:
+43f9 7046cf01 jam 1 ,mem_adc_low_volatage_led_timer_count 
+43fa 202043fe branch mouse_low_voltage_led_off 
+
+mouse_low_voltage_led_on:
+43fb da200000 arg 0 ,rega 
+43fc 70471302 jam ui_led_state_lighting ,mem_mouse_led_type 
+43fd 20207d14 branch ui_led_on_global 
+
+mouse_low_voltage_led_off:
+43fe da200000 arg 0 ,rega 
+43ff 70471302 jam ui_led_state_lighting ,mem_mouse_led_type 
+4400 20207d19 branch ui_led_off_global 
+
+mouse_g24_package_data:
+4401 20403f97 call mouse_motion 
+4402 24740000 nrtn user 
+4403 da200007 arg 7 ,rega 
+4404 da40469a arg mem_mouse_key ,regb 
+4405 20600000 rtn 
+
+mouse_g24_enter_lpm:
+4406 6800c78b fetch 1 ,mem_mouse_24g_enter_lpm_enable 
+4407 207a0000 rtn blank 
+4408 6808c6e7 fetcht 1 ,mem_dpi_button_gpio 
+4409 2040681d call gpio_get_bit 
+440a 2040c410 call mouse_24g_dpi_delay_init ,true 
+440b 6800c704 fetch 1 ,mem_24g_enter_lpm_timer 
+440c 247a0000 nrtn blank 
+440d 20404083 call mouse_check_key_gpio 
+440e 247a0000 nrtn blank 
+440f 20202d83 branch g24_lpm_long_sleep 
+
+mouse_24g_dpi_delay_init:
+4410 6800c6e7 fetch 1 ,mem_dpi_button_gpio 
+4411 c17f8000 rtneq ui_button_gpio_disable 
+4412 7047040a jam 10 ,mem_24g_enter_lpm_timer 
+4413 20600000 rtn 
+
+mouse_load_flash_info_cheak:
+4414 20404423 call mouse_load_flash_flag 
+4415 68014778 fetch 2 ,mem_store_flag 
+4416 d840aa55 arg eeprom_init_flag ,temp 
+4417 98467c00 isub temp ,null 
+4418 2022c42b branch mouse_load_flash_device_info ,zero 
+4419 60094778 storet 2 ,mem_store_flag 
+441a 2040441c call mouse_ble_init_address 
+441b 20204435 branch mouse_store_flash_device_info 
+
+mouse_ble_init_address:
+441c 680344a0 fetch 6 ,mem_le_lap 
+441d 60034738 store 6 ,mem_device1_locall_addr 
+441e 1fe0ff00 add pdata ,0x0100 ,pdata 
+441f 60034755 store 6 ,mem_device2_locall_addr 
+4420 1fe0ff00 add pdata ,0x0100 ,pdata 
+4421 60034772 store 6 ,mem_device3_locall_addr 
+4422 20600000 rtn 
+
+mouse_load_flash_flag:
+4423 58004778 setarg mem_store_flag 
+4424 d8404720 arg mem_mouse_information_start ,temp 
+4425 98460400 isub temp ,temp 
+4426 6801c700 fetch 3 ,mem_flash_base 
+4427 9840fe00 iadd temp ,pdata 
+4428 d8400002 arg 2 ,temp 
+4429 da204778 arg mem_store_flag ,rega 
+442a 20206562 branch spid_read_flash 
+
+mouse_load_flash_device_info:
+442b 5800477f setarg mem_mouse_information_end 
+442c d8404720 arg mem_mouse_information_start ,temp 
+442d 98460400 isub temp ,temp 
+442e 6801c700 fetch 3 ,mem_flash_base 
+442f da204720 arg mem_mouse_information_start ,rega 
+4430 20406562 call spid_read_flash 
+4431 2040431a call mouse_select_reconn_device 
+4432 6802477b fetch 4 ,mem_mouse_24g_addr 
+4433 20402c7a call g24_head_ptr2regc 
+4434 2020322c branch g24_store_mem_addr 
+
+mouse_store_flash_device_info:
+4435 5800477f setarg mem_mouse_information_end 
+4436 d8404720 arg mem_mouse_information_start ,temp 
+4437 98460400 isub temp ,temp 
+4438 da204720 arg mem_mouse_information_start ,rega 
+4439 6801c700 fetch 3 ,mem_flash_base 
+443a 20206514 branch flash_write 
+
+mouse_store_eerpom_dpi:
+443b d8400001 arg 1 ,temp 
+443c da20477a arg mem_mouse_dpi ,rega 
+443d da40005a arg mouse_dpi_eeprom_offect ,regb 
+443e 202065d1 branch iicd_write_protect_eep_data 
+
+mouse_load_eeprom_dpi:
+443f d8400001 arg 1 ,temp 
+4440 da20477a arg mem_mouse_dpi ,rega 
+4441 da40005a arg mouse_dpi_eeprom_offect ,regb 
+4442 202065df branch iicd_read_eep_data 
+
+mouse_statue_cheak_timer:
+4443 c6130000 rtnmark1 mark_24g 
+4444 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+4445 c40b0000 rtnbit0 mouse_enable_statue_up 
+4446 6800c705 fetch 1 ,mem_mouse_1step_up_count 
+4447 1fe0fe01 pincrease 1 
+4448 1fe17e07 and pdata ,0x07 ,pdata 
+4449 6000c705 store 1 ,mem_mouse_1step_up_count 
+444a c1838000 rtnne 0x07 
+444b 68014682 fetch 2 ,mem_ui_state_map 
+444c c280444f bbit1 ui_state_bt_connected ,mouse_check_statue_up 
+444d c284c44f bbit1 ui_state_ble_connected ,mouse_check_statue_up 
+444e 20600000 rtn 
+
+mouse_check_statue_up:
+444f 44f7401d bpatch patch1d_6 ,mem_patch1d 
+4450 6800c706 fetch 1 ,mem_mouse_2step_up_count 
+4451 247a0000 nrtn blank 
+4452 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+4453 c4040000 rtnbit0 mouse_statue_up_flag 
+4454 6800c6a5 fetch 1 ,mem_sensor_squal_reg 
+4455 204063fb call sensor_read 
+4456 6000c6a6 store 1 ,mem_sensor_iqc 
+4457 1fe67c10 sub pdata ,0x10 ,null 
+4458 2021445b branch mouse_statue_up_timer_init ,positive 
+4459 70470600 jam 0 ,mem_mouse_2step_up_count 
+445a 20600000 rtn 
+
+mouse_statue_up_timer_init:
+445b 7047061e jam 30 ,mem_mouse_2step_up_count 
+445c 20600000 rtn 
+
+mouse_statue_up_timer:
+445d da604706 arg mem_mouse_2step_up_count ,regc 
+445e da404460 arg mouse_statue_up ,regb 
+445f 2020336d branch timer_single_step 
+
+mouse_statue_up:
+4460 6800c6a5 fetch 1 ,mem_sensor_squal_reg 
+4461 20406414 call twspi_read 
+4462 1fe67c10 sub pdata ,0x10 ,null 
+4463 24610000 nrtn positive 
+4464 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+4465 c4040000 rtnbit0 mouse_statue_up_flag 
+4466 d8e00008 arg mouse_statue_up_flag ,queue 
+4467 204043d2 call mouse_disable_function_flag 
+4468 70417200 jam 0 ,mem_lpm_mult 
+4469 7046c41e jam 30 ,mem_mouse_statue_led_timer 
+446a 20404482 call mouse_devce_led_off 
+446b 680246d3 fetch mouse_flag_len ,mem_mouse_flag 
+446c c28ac471 bbit1 mouse_enable_statue_up_three_led ,mouse_three_device_statue_up 
+
+mouse_two_device_statue_up:
+446d 6800c720 fetch 1 ,mem_device_flag 
+446e c000c489 beq mode_bt_device1 ,mouse_device1_led_on 
+446f c0014476 beq mode_bt_device2 ,mouse_device_blink_led_init 
+4470 20600000 rtn 
+
+mouse_three_device_statue_up:
+4471 6800c720 fetch 1 ,mem_device_flag 
+4472 c000c489 beq mode_bt_device1 ,mouse_device1_led_on 
+4473 c001448c beq mode_bt_device2 ,mouse_device2_led_on 
+4474 c001c48f beq mode_bt_device3 ,mouse_device3_led_on 
+4475 20600000 rtn 
+
+mouse_device_blink_led_init:
+4476 6800c6f0 fetch 1 ,mem_config_device1_led_gpio 
+4477 2020428f branch mouse_led_blink 
+
+mouse_statue_led_off:
+4478 70417220 jam 0x20 ,mem_lpm_mult 
+4479 20204482 branch mouse_devce_led_off 
+
+mouse_devce1_led_off:
+447a 6800c6f0 fetch 1 ,mem_config_device1_led_gpio 
+447b c17f8000 rtneq gpio_disable 
+447c 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+447d 20204296 branch mouse_led_off 
+
+mouse_devce2_led_off:
+447e 6800c6f1 fetch 1 ,mem_config_device2_led_gpio 
+447f c17f8000 rtneq gpio_disable 
+4480 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+4481 20204296 branch mouse_led_off 
+
+mouse_devce_led_off:
+4482 20404296 call mouse_led_off 
+4483 2040447a call mouse_devce1_led_off 
+4484 2040447e call mouse_devce2_led_off 
+
+mouse_devce3_led_off:
+4485 6800c6f2 fetch 1 ,mem_config_device3_led_gpio 
+4486 c17f8000 rtneq gpio_disable 
+4487 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+4488 20204296 branch mouse_led_off 
+
+mouse_device1_led_on:
+4489 6800c6f0 fetch 1 ,mem_config_device1_led_gpio 
+448a 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+448b 20204298 branch mouse_led_on 
+
+mouse_device2_led_on:
+448c 6800c6f1 fetch 1 ,mem_config_device2_led_gpio 
+448d 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+448e 20204298 branch mouse_led_on 
+
+mouse_device3_led_on:
+448f 6800c6f2 fetch 1 ,mem_config_device3_led_gpio 
+4490 6000c715 store 1 ,mem_mouse_struct_led_gpio 
+4491 20204298 branch mouse_led_on 
+
+mouse_polling_device:
+4492 44f7c01d bpatch patch1d_7 ,mem_patch1d 
+4493 6800c71e fetch 1 ,mem_reconn_times 
+4494 1fe0ffff increase -1 ,pdata 
+4495 6000c71e store 1 ,mem_reconn_times 
+4496 6808c720 fetcht 1 ,mem_device_flag 
+4497 18408401 increase 1 ,temp 
+4498 6800c6d2 fetch 1 ,mem_device_number 
+4499 98467c00 isub temp ,null 
+449a 244143cc ncall mouse_select_device_count_clean ,positive 
+449b 6008c720 storet 1 ,mem_device_flag 
+449c 7041bd00 jam 0 ,mem_link_key_exists 
+449d 2040437a call mouse_store_device_number2eeprom 
+449e 204042fb call mouse_before_store_reconn_info 
+449f 202042a2 branch mouse_check_reconn_target 
+
+mouse_power_down:
+44a0 20404482 call mouse_devce_led_off 
+44a1 58000000 setarg 0 
+44a2 600400a1 store 8 ,mem_gpio_wakeup_low 
+44a3 20202b1f branch lpm_hibernate 
+
+remote_car_init:
+44a4 20758000 rtn wake 
+44a5 68108081 hfetch 1 ,core_gpio_sel1 
+44a6 1fe17ef0 and_into 0xf0 ,pdata 
+44a7 60108081 hstore 1 ,core_gpio_sel1 
+44a8 20406948 call keyscan_key_init 
+44a9 580044e6 setarg remote_car_le_before_hibernate 
+44aa 600141eb store 2 ,mem_cb_before_hibernate 
+44ab 580044e9 setarg remote_car_process_lpm_before 
+44ac 600141ed store 2 ,mem_cb_before_lpm 
+44ad 580044ef setarg remote_car_scale_process_idle 
+44ae 600141f3 store 2 ,mem_cb_idle_process 
+44af 580044f2 setarg remote_car_scale_process_bb_event 
+44b0 600141f5 store 2 ,mem_cb_bb_event_process 
+44b1 580033d0 setarg app_get_lpm_wake_lock 
+44b2 600141e9 store 2 ,mem_cb_check_wakelock 
+44b3 20402c7a call g24_head_ptr2regc 
+44b4 580045c2 setarg remote_car_g24_package_data 
+44b5 1a608ad8 add regc ,offset_24g_cb_data ,contw 
+44b6 e0a10000 istore 2 ,contw 
+44b7 580044ea setarg remote_car_g24_enter_lpm 
+44b8 1a608ada add regc ,offset_24g_cb_lpm_prepare ,contw 
+44b9 e0a10000 istore 2 ,contw 
+44ba 580044e9 setarg remote_car_process_lpm_before 
+44bb 1a608adc add regc ,offset_24g_cb_lpm_before ,contw 
+44bc e0a10000 istore 2 ,contw 
+44bd 5800450e setarg remote_car_event_timer 
+44be 600141fd store 2 ,mem_cb_event_timer 
+44bf 580044da setarg remote_car_power_off_signal 
+44c0 6001475b store 2 ,mem_remote_car_power_off_cb 
+44c1 580044d6 setarg remote_car_soft_switch_power_on_signal 
+44c2 6001475f store 2 ,mem_remote_car_power_standby_cb 
+44c3 58004560 setarg remote_car_send_key_data 
+44c4 6001470f store 2 ,mem_cb_remote_car_keyscan 
+44c5 44f8401e bpatch patch1e_0 ,mem_patch1e 
+44c6 204044e2 call remote_car_init_environment 
+44c7 20407e38 call queue_init 
+44c8 70417202 jam 2 ,mem_lpm_mult 
+44c9 6800c72b fetch 1 ,mem_remote_car_config_soft_switch_enable 
+44ca 6000c69a store 1 ,mem_remote_car_hard_soft_switch 
+44cb c00044d5 beq hard_switch ,remote_car_hard_switch_power_on_signal 
+44cc 6800c72c fetch 1 ,mem_remote_car_config_soft_switch_gpio 
+44cd 6000c686 store 1 ,mem_ui_button_gpio 
+
+remote_car_soft_switch_power_on_init:
+44ce 204044db call remote_car_ui_led_init 
+44cf 20407cd3 call ui_button_init 
+44d0 20407cdd call ui_button_polling 
+44d1 70475701 jam power_starting ,mem_remote_car_power_state 
+44d2 68014682 fetch 2 ,mem_ui_state_map 
+44d3 c3860000 rtnbit1 ui_state_btn_down 
+44d4 2020340a branch app_enter_hibernate 
+
+remote_car_hard_switch_power_on_signal:
+44d5 70475702 jam power_standby ,mem_remote_car_power_state 
+
+remote_car_soft_switch_power_on_signal:
+44d6 204044db call remote_car_ui_led_init 
+44d7 da200000 arg 0 ,rega 
+44d8 20407d1e call ui_led_blink_start_global 
+
+remote_car_connect_24g_mode:
+44d9 20202ee4 branch g24_auto_pair_start 
+
+remote_car_power_off_signal:
+44da 202044db branch remote_car_ui_led_init 
+
+remote_car_ui_led_init:
+44db 44f8c01e bpatch patch1e_1 ,mem_patch1e 
+44dc 6800c729 fetch 1 ,mem_remote_car_config_connect_led_gpio 
+44dd c0ffc4e0 bne invalid_pin_num ,remote_car_pairing_led_gpio_set 
+
+remote_car_ui_led_init_1:
+44de 6808c706 fetcht 1 ,mem_remote_car_led_map 
+44df 2020680e branch gpio_config_output 
+
+remote_car_pairing_led_gpio_set:
+44e0 6000c706 store 1 ,mem_remote_car_led_map 
+44e1 202044de branch remote_car_ui_led_init_1 
+
+remote_car_init_environment:
+44e2 20402c9d call g24_set_device_addr 
+44e3 68014753 fetch 2 ,mem_remote_car_no_data_timeout 
+44e4 60014755 store 2 ,mem_remote_car_no_data_timer 
+44e5 20204515 branch remote_car_get_adc_default_data 
+
+remote_car_le_before_hibernate:
+
+remote_car_in_enter_hibernate:
+44e6 20406835 call gpio_set_before_lpm_common 
+44e7 204044e9 call remote_car_process_lpm_before 
+44e8 2020340a branch app_enter_hibernate 
+
+remote_car_process_lpm_before:
+44e9 2020696c branch keyscan_process_lpm_before 
+
+remote_car_g24_enter_lpm:
+44ea 6800c765 fetch 1 ,mem_remote_car_24g_enter_lpm_enable 
+44eb 207a0000 rtn blank 
+44ec 20202d83 branch g24_lpm_long_sleep 
+
+remote_car_process_auto_pair_exit:
+44ed 20600000 rtn 
+
+remote_car_key_scan_process:
+44ee 20206978 branch keyscan_key_process 
+
+remote_car_scale_process_idle:
+44ef 20404544 call remote_car_rocker_process 
+44f0 20404503 call remote_car_24g_status_process 
+44f1 202044ee branch remote_car_key_scan_process 
+
+remote_car_scale_process_bb_event:
+44f2 1a627e00 copy regc ,pdata 
+44f3 c016b431 beq bt_evt_button_up ,app_event_button_up 
+44f4 c008341a beq bt_evt_button_long_pressed ,app_button_long_pressed 
+44f5 c01cc4fb beq bt_evt_24g_pairing_complete ,remote_car_24g_pairing_complete 
+44f6 c01e44ff beq bt_evt_24g_attempt_success ,remote_car_24g_attempt_success 
+44f7 c01d44f9 beq bt_evt_24g_attempt_fail ,remote_car_24g_attempt_fail 
+44f8 20600000 rtn 
+
+remote_car_24g_attempt_fail:
+44f9 70476501 jam 1 ,mem_remote_car_24g_enter_lpm_enable 
+44fa 20600000 rtn 
+
+remote_car_24g_pairing_complete:
+44fb 70476501 jam 1 ,mem_remote_car_24g_enter_lpm_enable 
+44fc 70476301 jam work_paired ,mem_remote_car_24g_auto_work_step 
+44fd 70476401 jam work_paired ,mem_remote_car_24g_pair_success_flag 
+44fe 20600000 rtn 
+
+remote_car_24g_attempt_success:
+44ff 70476501 jam 1 ,mem_remote_car_24g_enter_lpm_enable 
+4500 70476301 jam work_paired ,mem_remote_car_24g_auto_work_step 
+4501 70476401 jam work_paired ,mem_remote_car_24g_pair_success_flag 
+4502 20600000 rtn 
+
+remote_car_24g_status_process:
+4503 6800c763 fetch 1 ,mem_remote_car_24g_auto_work_step 
+4504 c1000000 rtneq power_on 
+4505 6800c762 fetch 1 ,mem_remote_car_24g_status 
+4506 c1008000 rtneq work_paired 
+4507 70476201 jam work_paired ,mem_remote_car_24g_status 
+
+remote_car_scale_process_paired:
+4508 da200000 arg 0 ,rega 
+4509 20207d19 branch ui_led_off_global 
+
+remote_car_scale_process_shutdown:
+450a da200000 arg 0 ,rega 
+450b 20407d19 call ui_led_off_global 
+450c 204044db call remote_car_ui_led_init 
+450d 2020340a branch app_enter_hibernate 
+
+remote_car_event_timer:
+450e 2040337b call app_power_timer 
+450f 20204510 branch remote_car_no_data_timer 
+
+remote_car_no_data_timer:
+4510 6800c72d fetch 1 ,mem_remote_car_config_timeout_shutdown_enable 
+4511 207a0000 rtn blank 
+4512 da604755 arg mem_remote_car_no_data_timer ,regc 
+4513 da40450a arg remote_car_scale_process_shutdown ,regb 
+4514 20203374 branch timer_single_step_2b 
+
+remote_car_get_adc_default_data:
+4515 2040451a call remote_car_rocker_get_x 
+4516 6009471a storet 2 ,mem_current_vdd_value_default_mid_x 
+4517 2040451f call remote_car_rocker_get_y 
+4518 6009471c storet 2 ,mem_current_vdd_value_default_mid_y 
+4519 20600000 rtn 
+
+remote_car_rocker_data_get:
+
+remote_car_rocker_get_x:
+451a 6801471a fetch 2 ,mem_current_vdd_value_default_mid_x 
+451b 6001471e store 2 ,mem_current_vdd_value_default_mid_temp 
+451c 20404540 call remote_car_get_adc_from_gpio6 
+451d 20404525 call remote_car_rocker_get_value 
+451e 6000c724 store 1 ,mem_rocker_status 
+
+remote_car_rocker_get_y:
+451f 6801471c fetch 2 ,mem_current_vdd_value_default_mid_y 
+4520 6001471e store 2 ,mem_current_vdd_value_default_mid_temp 
+4521 20404542 call remote_car_get_adc_from_gpio7 
+4522 20404525 call remote_car_rocker_get_value 
+4523 6000c725 store 1 ,mem_rocker_status + 1 
+4524 20600000 rtn 
+
+remote_car_rocker_get_value:
+4525 68014720 fetch 2 ,mem_current_vdd_default_range 
+4526 1fe22200 copy pdata ,rega 
+4527 6801471e fetch 2 ,mem_current_vdd_value_default_mid_temp 
+4528 2040452e call remote_car_rocker_mid_value_adjust 
+4529 6800c719 fetch 1 ,mem_rocker_work_status 
+452a 243a4537 nbranch remote_car_rocker_translate_key ,blank 
+452b 24610000 nrtn positive 
+452c 6809471e fetcht 2 ,mem_current_vdd_value_default_mid_temp 
+452d 20600000 rtn 
+
+remote_car_rocker_mid_value_adjust:
+452e 98467e00 isub temp ,pdata 
+452f 20214534 branch remote_car_rocker_mid_adjust_positive ,positive 
+4530 1fe67e00 sub pdata ,0 ,pdata 
+4531 70471801 jam 1 ,mem_rocker_negative_flag 
+4532 9a267c00 isub rega ,null 
+4533 20600000 rtn 
+
+remote_car_rocker_mid_adjust_positive:
+4534 70471800 jam 0 ,mem_rocker_negative_flag 
+4535 9a267c00 isub rega ,null 
+4536 20600000 rtn 
+
+remote_car_rocker_translate_key:
+4537 2421453e nbranch remote_car_rocker_middle_key ,positive 
+4538 6800c718 fetch 1 ,mem_rocker_negative_flag 
+4539 243a453c nbranch remote_car_rocker_negative_key ,blank 
+
+remote_car_rocker_positive_key:
+453a 58000001 setarg rocker_positive_key 
+453b 20600000 rtn 
+
+remote_car_rocker_negative_key:
+453c 58000002 setarg rocker_negative_key 
+453d 20600000 rtn 
+
+remote_car_rocker_middle_key:
+453e 58000000 setarg rocker_middle_key 
+453f 20600000 rtn 
+
+remote_car_get_adc_from_gpio6:
+4540 70422e33 jam 0x33 ,mem_adc_channel 
+4541 202068eb branch adc_set_mode 
+
+remote_car_get_adc_from_gpio7:
+4542 70422e34 jam 0x34 ,mem_adc_channel 
+4543 202068eb branch adc_set_mode 
+
+remote_car_rocker_process:
+4544 6800c72a fetch 1 ,mem_remote_car_config_check_way 
+4545 c1808000 rtnne car_remote_check_rocker 
+
+remote_car_read_rocker_check_start:
+4546 44f9401e bpatch patch1e_2 ,mem_patch1e 
+4547 70471901 jam 1 ,mem_rocker_work_status 
+4548 2040451a call remote_car_rocker_data_get 
+4549 68014724 fetch 2 ,mem_rocker_status 
+454a 68094722 fetcht 2 ,mem_rocker_last_status 
+454b 98467c00 isub temp ,null 
+454c 20628000 rtn zero 
+454d 60014722 store 2 ,mem_rocker_last_status 
+454e 20404550 call remote_car_rocker_x_to_key 
+454f 20204554 branch remote_car_rocker_y_to_key 
+
+remote_car_rocker_x_to_key:
+4550 6800c724 fetch 1 ,mem_rocker_x_status 
+4551 203a455a branch rocker_to_queue_set_0 ,blank 
+4552 1fe0ffff increase -1 ,pdata 
+4553 20204557 branch remote_car_rocker_to_key 
+
+remote_car_rocker_y_to_key:
+4554 6800c725 fetch 1 ,mem_rocker_y_status 
+4555 203a455d branch rocker_to_queue_set_2 ,blank 
+4556 1fe0fe01 increase 1 ,pdata 
+
+remote_car_rocker_to_key:
+4557 1fe20e00 copy pdata ,queue 
+4558 da200001 arg 1 ,rega 
+4559 20204560 branch remote_car_send_key_data 
+
+rocker_to_queue_set_0:
+455a d8e00000 arg 0 ,queue 
+455b da200000 arg 0 ,rega 
+455c 20204560 branch remote_car_send_key_data 
+
+rocker_to_queue_set_2:
+455d d8e00002 arg 2 ,queue 
+455e da200000 arg 0 ,rega 
+455f 20204560 branch remote_car_send_key_data 
+
+remote_car_send_key_data:
+4560 1a227e00 copy rega ,pdata 
+4561 6000c761 store 1 ,mem_remote_key_status 
+4562 6800c763 fetch 1 ,mem_remote_car_24g_auto_work_step 
+4563 c0002ee4 beq power_on ,g24_auto_pair_start 
+4564 68014753 fetch 2 ,mem_remote_car_no_data_timeout 
+4565 60014755 store 2 ,mem_remote_car_no_data_timer 
+4566 6800c761 fetch 1 ,mem_remote_key_status 
+4567 203a4580 branch remote_car_key_is_release ,blank 
+
+remote_car_key_is_press:
+4568 44f9c01e bpatch patch1e_3 ,mem_patch1e 
+4569 da200000 arg 0 ,rega 
+456a 20407d14 call ui_led_on_global 
+
+remote_car_attack_key_press:
+456b 18e27e00 copy queue ,pdata 
+456c c00245a3 beq 4 ,remote_car_send_attack_key4_press 
+456d c002c5a5 beq 5 ,remote_car_send_attack_key5_press 
+456e c00345a7 beq 6 ,remote_car_send_fire_key6_press 
+
+remote_car_motor_key_press:
+456f 2040458b call remote_car_device_layout_select 
+4570 c0004574 beq control_f_b_ten ,remote_car_single_motor_key_is_press 
+4571 c001457a beq control_l_r_ten ,remote_car_double_motor_key_press 
+4572 c001c574 beq control_l_r_lr ,remote_car_single_motor_key_is_press 
+4573 20600000 rtn 
+
+remote_car_single_motor_key_is_press:
+4574 18e27e00 copy queue ,pdata 
+4575 c000458f beq 0 ,remote_car_send_motor1_key0_press 
+4576 c000c591 beq 1 ,remote_car_send_motor1_key1_press 
+4577 c0014593 beq 2 ,remote_car_send_motor2_key2_press 
+4578 c001c595 beq 3 ,remote_car_send_motor2_key3_press 
+4579 20600000 rtn 
+
+remote_car_double_motor_key_press:
+457a 18e27e00 copy queue ,pdata 
+457b c0004597 beq 0 ,remote_car_send_double_motor_key0_press 
+457c c000c59a beq 1 ,remote_car_send_double_motor_key1_press 
+457d c001459d beq 2 ,remote_car_send_double_motor_key2_press 
+457e c001c5a0 beq 3 ,remote_car_send_double_motor_key3_press 
+457f 20600000 rtn 
+
+remote_car_key_is_release:
+4580 44fa401e bpatch patch1e_4 ,mem_patch1e 
+4581 da200000 arg 0 ,rega 
+4582 20407d19 call ui_led_off_global 
+
+remote_car_attack_key_release:
+4583 18e27e00 copy queue ,pdata 
+4584 c00245bc beq 4 ,remote_car_send_attack_key4_rel 
+4585 c002c5bc beq 5 ,remote_car_send_attack_key5_rel 
+
+remote_car_motor_key_release:
+4586 2040458b call remote_car_device_layout_select 
+4587 c00045a9 beq control_f_b_ten ,remote_car_single_motor_key_rel 
+4588 c00145af beq control_l_r_ten ,remote_car_double_motor_key_rel 
+4589 c001c5a9 beq control_l_r_lr ,remote_car_single_motor_key_rel 
+458a 20600000 rtn 
+
+remote_car_device_layout_select:
+458b 6800c728 fetch 1 ,mem_remote_car_config_layout 
+458c 6808c727 fetcht 1 ,mem_remote_car_config_key_map 
+458d 9841fe00 ior temp ,pdata 
+458e 20600000 rtn 
+
+remote_car_send_motor1_key0_press:
+458f 70473401 jam motor_positive ,mem_remote_car_24g_motor1_payload 
+4590 202045be branch remote_car_send_key 
+
+remote_car_send_motor1_key1_press:
+4591 70473402 jam motor_negative ,mem_remote_car_24g_motor1_payload 
+4592 202045be branch remote_car_send_key 
+
+remote_car_send_motor2_key2_press:
+4593 70473601 jam motor_positive ,mem_remote_car_24g_motor2_payload 
+4594 202045be branch remote_car_send_key 
+
+remote_car_send_motor2_key3_press:
+4595 70473602 jam motor_negative ,mem_remote_car_24g_motor2_payload 
+4596 202045be branch remote_car_send_key 
+
+remote_car_send_double_motor_key0_press:
+4597 70473401 jam motor_positive ,mem_remote_car_24g_motor1_payload 
+4598 70473601 jam motor_positive ,mem_remote_car_24g_motor2_payload 
+4599 202045be branch remote_car_send_key 
+
+remote_car_send_double_motor_key1_press:
+459a 70473402 jam motor_negative ,mem_remote_car_24g_motor1_payload 
+459b 70473602 jam motor_negative ,mem_remote_car_24g_motor2_payload 
+459c 202045be branch remote_car_send_key 
+
+remote_car_send_double_motor_key2_press:
+459d 70473402 jam motor_negative ,mem_remote_car_24g_motor1_payload 
+459e 70473601 jam motor_positive ,mem_remote_car_24g_motor2_payload 
+459f 202045be branch remote_car_send_key 
+
+remote_car_send_double_motor_key3_press:
+45a0 70473401 jam motor_positive ,mem_remote_car_24g_motor1_payload 
+45a1 70473602 jam motor_negative ,mem_remote_car_24g_motor2_payload 
+45a2 202045be branch remote_car_send_key 
+
+remote_car_send_attack_key4_press:
+45a3 70473801 jam motor_positive ,mem_remote_car_24g_motor3_payload 
+45a4 202045be branch remote_car_send_key 
+
+remote_car_send_attack_key5_press:
+45a5 70473802 jam motor_negative ,mem_remote_car_24g_motor3_payload 
+45a6 202045be branch remote_car_send_key 
+
+remote_car_send_fire_key6_press:
+45a7 70474101 jam 0x01 ,mem_remote_car_24g_fire_send_payload 
+45a8 202045c0 branch remote_car_send_attack 
+
+remote_car_single_motor_key_rel:
+45a9 18e27e00 copy queue ,pdata 
+45aa c00045b5 beq 0 ,remote_car_send_motor1_key0_rel 
+45ab c000c5b5 beq 1 ,remote_car_send_motor1_key1_rel 
+45ac c00145b7 beq 2 ,remote_car_send_motor2_key2_rel 
+45ad c001c5b7 beq 3 ,remote_car_send_motor2_key3_rel 
+45ae 20600000 rtn 
+
+remote_car_double_motor_key_rel:
+45af 18e27e00 copy queue ,pdata 
+45b0 c00045b9 beq 0 ,remote_car_send_double_motor_key0_rel 
+45b1 c000c5b9 beq 1 ,remote_car_send_double_motor_key1_rel 
+45b2 c00145b9 beq 2 ,remote_car_send_double_motor_key2_rel 
+45b3 c001c5b9 beq 3 ,remote_car_send_double_motor_key3_rel 
+45b4 20600000 rtn 
+
+remote_car_send_motor1_key0_rel:
+
+remote_car_send_motor1_key1_rel:
+45b5 70473400 jam motor_stop ,mem_remote_car_24g_motor1_payload 
+45b6 202045be branch remote_car_send_key 
+
+remote_car_send_motor2_key2_rel:
+
+remote_car_send_motor2_key3_rel:
+45b7 70473600 jam motor_stop ,mem_remote_car_24g_motor2_payload 
+45b8 202045be branch remote_car_send_key 
+
+remote_car_send_double_motor_key0_rel:
+
+remote_car_send_double_motor_key1_rel:
+
+remote_car_send_double_motor_key2_rel:
+
+remote_car_send_double_motor_key3_rel:
+45b9 70473400 jam motor_stop ,mem_remote_car_24g_motor1_payload 
+45ba 70473600 jam motor_stop ,mem_remote_car_24g_motor2_payload 
+45bb 202045be branch remote_car_send_key 
+
+remote_car_send_attack_key4_rel:
+
+remote_car_send_attack_key5_rel:
+45bc 70473800 jam motor_stop ,mem_remote_car_24g_motor3_payload 
+45bd 202045be branch remote_car_send_key 
+
+remote_car_send_key:
+45be da20472e arg mem_remote_car_24g_motor_packet ,rega 
+45bf 20207e3d branch queue_push 
+
+remote_car_send_attack:
+45c0 da20473b arg mem_remote_car_24g_fire_packet ,rega 
+45c1 20207e3d branch queue_push 
+
+remote_car_g24_package_data:
+45c2 6800c764 fetch 1 ,mem_remote_car_24g_pair_success_flag 
+45c3 c000c5cc beq work_paired ,remote_car_g24_send_empty 
+45c4 da204744 arg mem_remote_car_24g_tx_temp ,rega 
+45c5 20407e54 call queue_pop 
+45c6 243445d1 nbranch remote_car_moto_data ,user 
+
+remote_car_g24_package_data_continue:
+45c7 d8c04744 arg mem_remote_car_24g_tx_temp ,contr 
+45c8 e8c08000 ifetch 1 ,contr 
+45c9 1fe22200 copy pdata ,rega 
+45ca da404745 arg mem_remote_car_24g_tx_temp + 1 ,regb 
+45cb 20600000 rtn 
+
+remote_car_g24_send_empty:
+45cc 70476400 jam 0 ,mem_remote_car_24g_pair_success_flag 
+45cd 78347c00 enable user 
+45ce da200001 arg 1 ,rega 
+45cf da404766 arg mem_remote_car_empty_packet ,regb 
+45d0 20600000 rtn 
+
+remote_car_moto_data:
+45d1 6800c747 fetch 1 ,mem_remote_car_24g_tx_temp + 3 
+45d2 c00245d5 beq car_cmd_l_r_motor_control ,remote_car_moto_data_next 
+45d3 c002c5d5 beq car_cmd_f_b_motor_control ,remote_car_moto_data_next 
+45d4 20600000 rtn 
+
+remote_car_moto_data_next:
+45d5 6800c74a fetch 1 ,mem_remote_car_24g_tx_temp + 6 
+45d6 243a45dc nbranch remote_car_moto_data_enable_user ,blank 
+45d7 6800c74c fetch 1 ,mem_remote_car_24g_tx_temp + 8 
+45d8 243a45dc nbranch remote_car_moto_data_enable_user ,blank 
+45d9 6800c74e fetch 1 ,mem_remote_car_24g_tx_temp + 10 
+45da 243a45dc nbranch remote_car_moto_data_enable_user ,blank 
+45db 20600000 rtn 
+
+remote_car_moto_data_enable_user:
+45dc 78347c00 enable user 
+45dd 202045c7 branch remote_car_g24_package_data_continue 
+
+shutter_init:
+45de 20758000 rtn wake 
+45df 68108081 hfetch 1 ,core_gpio_sel1 
+45e0 1fe17efc and_into 0xfc ,pdata 
+45e1 60108081 hstore 1 ,core_gpio_sel1 
+45e2 580046b4 setarg shutter_le_before_hibernate 
+45e3 600141eb store 2 ,mem_cb_before_hibernate 
+45e4 580046b3 setarg shutter_process_lpm_before 
+45e5 600141ed store 2 ,mem_cb_before_lpm 
+45e6 5800340a setarg app_enter_hibernate 
+45e7 600141f7 store 2 ,mem_cb_discovry_timeout 
+45e8 580046b1 setarg shutter_process_idle 
+45e9 600141f3 store 2 ,mem_cb_idle_process 
+45ea 58004612 setarg shutter_process_bb_event 
+45eb 600141f5 store 2 ,mem_cb_bb_event_process 
+45ec 5800460c setarg shutter_le_scale_lpm_lock 
+45ed 600141e9 store 2 ,mem_cb_check_wakelock 
+45ee 5800476a setarg ble_shutter_receive_data 
+45ef 600141f9 store 2 ,mem_cb_att_write 
+45f0 58004686 setarg shutter_le_bb_event_timer 
+45f1 600141fd store 2 ,mem_cb_event_timer 
+45f2 58004729 setarg shutter_key_change 
+45f3 600146e7 store 2 ,mem_cb_shutter_keycan 
+45f4 58004806 setarg shutter_soft_swtich_power_on 
+45f5 600146e2 store 2 ,mem_shutter_soft_switch_poweron_callback_function 
+45f6 58004807 setarg shutter_soft_swtich_power_off 
+45f7 600146e4 store 2 ,mem_shutter_soft_switch_poweroff_callback_function 
+45f8 204057a3 call le_modified_name 
+45f9 204047da call shutter_load_bluetooth_config_by_user_config 
+45fa 20404788 call shutter_init_bluetooth_config 
+45fb 2040476d call shutter_init_param 
+45fc 20406948 call keyscan_key_init 
+45fd 2040477a call shutter_load_buffer_config_form_datarom 
+45fe 20407e38 call queue_init 
+45ff 20407d08 call ui_led_init_global 
+4600 20404793 call shutter_load_bluetooth_config 
+4601 204047c7 call shutter_load_bluetooth_config_by_eeprom 
+4602 44fac01e bpatch patch1e_5 ,mem_patch1e 
+4603 2040464f call classic_shutter_load_reconn_info 
+4604 6800c6dd fetch 1 ,mem_shutter_hard_soft_switch_case 
+4605 c0004609 beq hard_switch ,shutter_hart_swtich_power_on 
+4606 6800c6de fetch 1 ,mem_shutter_soft_switch_button_gpio 
+4607 6000c686 store 1 ,mem_ui_button_gpio 
+4608 2020480e branch ui_soft_swtich_init 
+
+shutter_hart_swtich_power_on:
+4609 704686ff jam ui_button_gpio_disable ,mem_ui_button_gpio 
+460a 7046df01 jam ss_state_power_on ,mem_shutter_soft_switch_power_state 
+460b 202046d9 branch shutter_start_reconnect 
+
+shutter_le_scale_lpm_lock:
+460c 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 
+460d c00133d0 beq ss_state_power_off ,app_get_lpm_wake_lock 
+460e 2040527e call l2cap_malloc_get_full_map 
+460f 6800c256 fetch 1 ,mem_used_map 
+4610 243a33d0 nbranch app_get_lpm_wake_lock ,blank 
+4611 202033d2 branch app_put_lpm_wake_lock 
+
+shutter_process_bb_event:
+4612 1a627e00 copy regc ,pdata 
+4613 c000c626 beq bt_evt_bb_connected ,classic_shutter_process_baseband_connect 
+4614 c0014629 beq bt_evt_bb_disconnected ,classic_shutter_process_baseband_disconnect 
+4615 c0024631 beq bt_evt_reconn_failed ,classic_shutter_process_reconnect_failed 
+4616 c002c633 beq bt_evt_setup_complete ,classic_shutter_process_setup_complete 
+4617 c0034635 beq bt_evt_hid_connected ,classic_shutter_process_hid_connect 
+4618 c003c638 beq bt_evt_hid_disconnected ,classic_shutter_process_hid_disconnect 
+4619 c009463c beq bt_evt_hid_handshake ,classic_shutter_process_hid_handshake 
+461a c009c644 beq bt_evt_reconn_page_timeout ,classic_shutter_process_reconnect_page_timeout 
+461b c013c645 beq bt_evt_virtual_cable_unplug ,classic_shutter_process_virtual_cable_unplug 
+461c c0174648 beq bt_evt_remote_unsniff ,classic_shutter_process_remote_unsniff 
+461d c01ec649 beq bt_evt_store_nvram ,classic_shutter_process_store_reconnect_information 
+461e c00a4658 beq bt_evt_le_connected ,ble_shutter_process_baseband_connect 
+461f c00ac65c beq bt_evt_le_disconnected ,ble_shutter_process_baseband_disconnect 
+4620 c01fc65f beq bt_evt_le_reconnect_complete ,ble_shutter_process_reconnect_complete 
+4621 c0204665 beq bt_evt_le_parse_conn_papa_update_rsp ,ble_shutter_process_parse_connect_parameter_update_response 
+4622 c008466b beq bt_evt_button_long_pressed ,shutter_process_soft_swtich_button_long_press 
+4623 c016466c beq bt_evt_button_down ,shutter_process_soft_swtich_button_down 
+4624 c016c677 beq bt_evt_button_up ,shutter_process_soft_swtich_button_up 
+4625 20600000 rtn 
+
+classic_shutter_process_baseband_connect:
+4626 7046ad00 jam 0 ,mem_classic_shutter_hid_disconn_count 
+4627 7046ac00 jam 0 ,mem_classic_shutter_cable_unplug_conut 
+4628 20600000 rtn 
+
+classic_shutter_process_baseband_disconnect:
+4629 2040462b call classic_shutter_disconnect_clear_flag 
+462a 20204631 branch classic_shutter_process_reconnect_failed 
+
+classic_shutter_disconnect_clear_flag:
+462b 7041e200 jam app_handshake_null ,mem_app_handshake_flag 
+462c 70468000 jam 0 ,mem_hid_handshake_timer_count 
+462d 70420500 jam 0 ,mem_unsniff2sniff_timer_count 
+462e 7046ac00 jam 0 ,mem_classic_shutter_cable_unplug_conut 
+462f 7046ad00 jam 0 ,mem_classic_shutter_hid_disconn_count 
+4630 20207e38 branch queue_init 
+
+classic_shutter_process_reconnect_failed:
+4631 204033a9 call app_disconn_reason_clear 
+4632 202046c2 branch shutter_start_bluetooth_discovery 
+
+classic_shutter_process_setup_complete:
+4633 204046b6 call shutter_stop_bluetooth_discovery 
+4634 20203408 branch app_led_stop_blink 
+
+classic_shutter_process_hid_connect:
+4635 58000002 setarg hid_handshake_timeout 
+4636 6000c680 store 1 ,mem_hid_handshake_timer_count 
+4637 20600000 rtn 
+
+classic_shutter_process_hid_disconnect:
+4638 7046ac00 jam 0 ,mem_classic_shutter_cable_unplug_conut 
+4639 58000001 setarg flag_shutter_hid_disconn_timeout 
+463a 6000c6ad store 1 ,mem_classic_shutter_hid_disconn_count 
+463b 20600000 rtn 
+
+classic_shutter_process_hid_handshake:
+463c 6800c1e2 fetch 1 ,mem_app_handshake_flag 
+463d c1008000 rtneq app_handshake_done 
+463e 7041e201 jam app_handshake_done ,mem_app_handshake_flag 
+463f 20403416 call app_lpm_mult_enable 
+4640 20403414 call app_store_reconn_info 
+4641 204046b6 call shutter_stop_bluetooth_discovery 
+4642 20403408 call app_led_off 
+4643 2020340e branch app_bt_enter_sniff 
+
+classic_shutter_process_reconnect_page_timeout:
+4644 20204631 branch classic_shutter_process_reconnect_failed 
+
+classic_shutter_process_virtual_cable_unplug:
+4645 58000005 setarg flag_shutter_cable_unplug_timeout 
+4646 6000c6ac store 1 ,mem_classic_shutter_cable_unplug_conut 
+4647 20600000 rtn 
+
+classic_shutter_process_remote_unsniff:
+4648 202033cd branch app_start_auto_sniff 
+
+classic_shutter_process_store_reconnect_information:
+4649 da400000 arg nvram_eeprom_offset ,regb 
+464a 6800c217 fetch 1 ,mem_nv_data_number 
+464b 1fef8422 mul32 pdata ,34 ,temp 
+464c 68014215 fetch 2 ,mem_nv_data_ptr 
+464d 1fe22200 copy pdata ,rega 
+464e 20206606 branch iicd_write_eep_data 
+
+classic_shutter_load_reconn_info:
+464f da400000 arg nvram_eeprom_offset ,regb 
+4650 6800c69a fetch 1 ,mem_shutter_bluetooth_type 
+4651 c4008000 rtnbit0 classic_shutter 
+4652 6800c217 fetch 1 ,mem_nv_data_number 
+4653 207a0000 rtn blank 
+4654 1fef8422 mul32 pdata ,34 ,temp 
+4655 68014215 fetch 2 ,mem_nv_data_ptr 
+4656 1fe22200 copy pdata ,rega 
+4657 202065df branch iicd_read_eep_data 
+
+ble_shutter_process_baseband_connect:
+4658 204046b6 call shutter_stop_bluetooth_discovery 
+4659 58000000 setarg 0 
+465a 600146b7 store 2 ,mem_ble_shutter_reconn_timer 
+465b 20203408 branch app_led_off 
+
+ble_shutter_process_baseband_disconnect:
+465c 20407e38 call queue_init 
+465d 7046b000 jam 0 ,mem_ble_shutter_enable_notify 
+465e 202046d9 branch shutter_start_reconnect 
+
+ble_shutter_process_reconnect_complete:
+465f 20407e38 call queue_init 
+4660 7046b001 jam 1 ,mem_ble_shutter_enable_notify 
+4661 680446c1 fetch 8 ,mem_ble_shutter_interval_min 
+4662 60044496 store 8 ,mem_le_interval_min 
+4663 20403416 call app_lpm_mult_enable 
+4664 20205abf branch le_l2cap_tx_update_req 
+
+ble_shutter_process_parse_connect_parameter_update_response:
+4665 68014509 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 
+4666 c1000000 rtneq ble_signaling_connect_parameter_update_accepted 
+4667 680446c9 fetch 8 ,mem_ble_shutter_interval_min_new 
+4668 207a0000 rtn blank 
+4669 60044496 store 8 ,mem_le_interval_min 
+466a 20205abf branch le_l2cap_tx_update_req 
+
+shutter_process_soft_swtich_button_long_press:
+466b 2020481f branch ui_soft_switch_botton_long_press 
+
+shutter_process_soft_swtich_button_down:
+466c 6800c6dd fetch 1 ,mem_shutter_hard_soft_switch_case 
+466d c1000000 rtneq hard_switch 
+466e 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 
+466f c1808000 rtnne ss_state_power_on 
+4670 20404672 call shutter_store_currenct_led_state 
+4671 20203406 branch app_led_on 
+
+shutter_store_currenct_led_state:
+4672 7048df01 jam 1 ,mem_shutter_soft_swtich_botton_down 
+4673 df20000b arg 11 ,loopcnt 
+4674 d8a048e0 arg mem_shutter_soft_swtich_led_struct_temp ,contw 
+4675 d8c048c9 arg mem_shutter_led_struct_app_led ,contr 
+4676 20207f01 branch memcpy 
+
+shutter_process_soft_swtich_button_up:
+4677 6800c6dd fetch 1 ,mem_shutter_hard_soft_switch_case 
+4678 c1000000 rtneq hard_switch 
+4679 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 
+467a c000c67c beq ss_state_power_on ,shutter_load_currenct_led_state 
+467b 2020481b branch ui_soft_switch_botton_up 
+
+shutter_load_currenct_led_state:
+467c 6800c8df fetch 1 ,mem_shutter_soft_swtich_botton_down 
+467d c1808000 rtnne 1 
+467e 7048df00 jam 0 ,mem_shutter_soft_swtich_botton_down 
+467f 68014682 fetch 2 ,mem_ui_state_map 
+4680 c2803408 bbit1 ui_state_bt_connected ,app_led_off 
+4681 c284b408 bbit1 ui_state_ble_connected ,app_led_off 
+4682 df20000b arg 11 ,loopcnt 
+4683 d8c048e0 arg mem_shutter_soft_swtich_led_struct_temp ,contr 
+4684 d8a048c9 arg mem_shutter_led_struct_app_led ,contw 
+4685 20207f01 branch memcpy 
+
+shutter_le_bb_event_timer:
+4686 2040468c call shutter_check_sleep_timer 
+4687 20404693 call shutter_check_power_off_timer 
+4688 2040469e call classic_shutter_check_unplug_timer 
+4689 204046a6 call classic_shutter_hid_handshake_timer 
+468a 204046a9 call classic_shutter_hid_disconn_timer 
+468b 202046ac branch ble_shutter_reconn_timer 
+
+shutter_check_sleep_timer:
+468c da6046db arg mem_shutter_sleep_timer ,regc 
+468d da40468f arg shutter_sleep_timeout ,regb 
+468e 20203374 branch timer_single_step_2b 
+
+shutter_sleep_timeout:
+468f 7046df02 jam ss_state_power_off ,mem_shutter_soft_switch_power_state 
+4690 20403408 call app_led_off 
+4691 204046f4 call shutter_disconnect_current_connection 
+4692 2020480b branch shutter_wait_power_off 
+
+shutter_check_power_off_timer:
+4693 da6048ec arg mem_shutter_power_off_timer ,regc 
+4694 da404696 arg shutter_check_power_off_timeout ,regb 
+4695 2020336d branch timer_single_step 
+
+shutter_check_power_off_timeout:
+4696 68014682 fetch 2 ,mem_ui_state_map 
+4697 c284c80b bbit1 ui_state_ble_connected ,shutter_wait_power_off 
+4698 c280480b bbit1 ui_state_bt_connected ,shutter_wait_power_off 
+4699 6800c8c9 fetch 1 ,mem_shutter_led_struct_app_led_type 
+469a c000c80b beq ui_led_state_blink_start ,shutter_wait_power_off 
+469b c002480b beq ui_led_state_blink_lighting ,shutter_wait_power_off 
+469c c002c80b beq ui_led_state_blink_darking ,shutter_wait_power_off 
+469d 2020340a branch app_enter_hibernate 
+
+classic_shutter_check_unplug_timer:
+469e da6046ac arg mem_classic_shutter_cable_unplug_conut ,regc 
+469f da4046a1 arg classic_shutter_unplug_timeout ,regb 
+46a0 2020336d branch timer_single_step 
+
+classic_shutter_unplug_timeout:
+46a1 6800827f fetch 1 ,mem_control_tasks 
+46a2 79207e00 set1 l2cap_disconnect_interrupt ,pdata 
+46a3 79207e07 set1 l2cap_disconnect_control ,pdata 
+46a4 6000827f store 1 ,mem_control_tasks 
+46a5 20600000 rtn 
+
+classic_shutter_hid_handshake_timer:
+46a6 da604680 arg mem_hid_handshake_timer_count ,regc 
+46a7 da40463c arg classic_shutter_process_hid_handshake ,regb 
+46a8 2020336d branch timer_single_step 
+
+classic_shutter_hid_disconn_timer:
+46a9 da6046ad arg mem_classic_shutter_hid_disconn_count ,regc 
+46aa da4033e9 arg app_bt_disconnect ,regb 
+46ab 2020336d branch timer_single_step 
+
+ble_shutter_reconn_timer:
+46ac 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 
+46ad c1808000 rtnne ss_state_power_on 
+46ae da6046b7 arg mem_ble_shutter_reconn_timer ,regc 
+46af da4046c2 arg shutter_start_bluetooth_discovery ,regb 
+46b0 20203374 branch timer_single_step_2b 
+
+shutter_process_idle:
+46b1 2040473a call shutter_send_data_to_master 
+46b2 20206978 branch keyscan_key_process 
+
+shutter_process_lpm_before:
+46b3 2020696c branch keyscan_process_lpm_before 
+
+shutter_le_before_hibernate:
+46b4 20406835 call gpio_set_before_lpm_common 
+46b5 202046b3 branch shutter_process_lpm_before 
+
+shutter_stop_bluetooth_discovery:
+46b6 6800c69a fetch 1 ,mem_shutter_bluetooth_type 
+46b7 c280c6be bbit1 classic_shutter ,classic_shutter_stop_bluetooth_discovery 
+46b8 c28046ba bbit1 ble_shutter ,ble_shutter_stop_bluetooth_discovery 
+46b9 20600000 rtn 
+
+ble_shutter_stop_bluetooth_discovery:
+46ba 680146d7 fetch 2 ,mem_ble_shutter_connect_timeout 
+46bb 600146d9 store 2 ,mem_shutter_sleep_timeout 
+46bc 600146db store 2 ,mem_shutter_sleep_timer 
+46bd 202033f8 branch app_ble_stop_adv 
+
+classic_shutter_stop_bluetooth_discovery:
+46be 680146d3 fetch 2 ,mem_classic_shutter_connect_timeout 
+46bf 600146d9 store 2 ,mem_shutter_sleep_timeout 
+46c0 600146db store 2 ,mem_shutter_sleep_timer 
+46c1 202033f0 branch app_bt_stop_discovery 
+
+shutter_start_bluetooth_discovery:
+46c2 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 
+46c3 c1808000 rtnne ss_state_power_on 
+46c4 6800c69a fetch 1 ,mem_shutter_bluetooth_type 
+46c5 c280c6c8 bbit1 classic_shutter ,classic_shutter_start_discovery 
+46c6 c28046cc bbit1 ble_shutter ,ble_shutter_start_discovery 
+46c7 20600000 rtn 
+
+classic_shutter_start_discovery:
+46c8 680146d1 fetch 2 ,mem_classic_shutter_discovery_timeout ,
+46c9 600146d9 store 2 ,mem_shutter_sleep_timeout 
+46ca 600146db store 2 ,mem_shutter_sleep_timer 
+46cb 202033eb branch app_bt_start_discovery_short 
+
+ble_shutter_start_discovery:
+46cc 68014682 fetch 2 ,mem_ui_state_map 
+46cd c3848000 rtnbit1 ui_state_ble_connected 
+46ce 680146d5 fetch 2 ,mem_ble_shutter_discovery_timeout 
+46cf 600146d9 store 2 ,mem_shutter_sleep_timeout 
+46d0 600146db store 2 ,mem_shutter_sleep_timer 
+46d1 680146b3 fetch 2 ,mem_ble_shutter_discovery_adv_interval 
+46d2 204046f0 call shutter_ble_adv_interval_set 
+46d3 20403404 call app_led_start_blink 
+46d4 680246bd fetch 4 ,mem_ble_shutter_discovery_blink_on_time 
+46d5 600248cc store 4 ,mem_shutter_led_struct_app_led_on_time 
+46d6 68014682 fetch 2 ,mem_ui_state_map 
+46d7 c3858000 rtnbit1 ui_state_ble_adv 
+46d8 202033fa branch app_ble_start_adv 
+
+shutter_start_reconnect:
+46d9 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state 
+46da c1808000 rtnne ss_state_power_on 
+46db 6800c69a fetch 1 ,mem_shutter_bluetooth_type 
+46dc c280c6df bbit1 classic_shutter ,classic_shutter_start_reconnect 
+46dd c28046e4 bbit1 ble_shutter ,ble_shutter_start_reconnect 
+46de 20600000 rtn 
+
+classic_shutter_start_reconnect:
+46df 204046f8 call app_check_reconn_target 
+46e0 203a46c2 branch shutter_start_bluetooth_discovery ,blank 
+46e1 20403406 call app_led_on 
+46e2 204033f0 call app_bt_stop_discovery 
+46e3 202033e1 branch app_bt_start_reconnect 
+
+ble_shutter_start_reconnect:
+46e4 680146b7 fetch 2 ,mem_ble_shutter_reconn_timer 
+46e5 680946b5 fetcht 2 ,mem_ble_shutter_reconn_timeout 
+46e6 600946b7 storet 2 ,mem_ble_shutter_reconn_timer 
+46e7 247a0000 nrtn blank 
+46e8 680146b1 fetch 2 ,mem_ble_shutter_reconn_dav_interval 
+46e9 204046f0 call shutter_ble_adv_interval_set 
+46ea 20403404 call app_led_start_blink 
+46eb 680246b9 fetch 4 ,mem_ble_shutter_reconn_blink_on_time 
+46ec 600248cc store 4 ,mem_shutter_led_struct_app_led_on_time 
+46ed 68014682 fetch 2 ,mem_ui_state_map 
+46ee c3858000 rtnbit1 ui_state_ble_adv 
+46ef 202033fa branch app_ble_start_adv 
+
+shutter_ble_adv_interval_set:
+46f0 60014154 store 2 ,mem_lpm_interval 
+46f1 1fe0fffc increase -4 ,pdata 
+46f2 60014482 store 2 ,mem_le_adv_interval 
+46f3 20600000 rtn 
+
+shutter_disconnect_current_connection:
+46f4 68014682 fetch 2 ,mem_ui_state_map 
+46f5 c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect 
+46f6 c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect 
+46f7 202046b6 branch shutter_stop_bluetooth_discovery 
+
+app_check_reconn_target:
+46f8 6800c217 fetch 1 ,mem_nv_data_number 
+46f9 1fe27200 copy pdata ,loopcnt 
+46fa 68014215 fetch 2 ,mem_nv_data_ptr 
+46fb 1fe22200 copy pdata ,rega 
+
+app_check_reconn_target_loop:
+46fc ea210000 ifetch 2 ,rega 
+46fd c0004701 beq 0 ,found_reconn_device 
+46fe 1a20a222 increase nv_data_len ,rega 
+46ff c20046fc loop app_check_reconn_target_loop 
+4700 20207ff1 branch enable_blank 
+
+found_reconn_device:
+4701 e8c30000 ifetch 6 ,contr 
+4702 600341d0 store 6 ,mem_hci_plap 
+4703 18c08c0a increase 10 ,contr 
+4704 d8a041be arg mem_link_key ,contw 
+4705 20407ebf call memcpy16 
+4706 204067d7 call check_link_key_load 
+4707 20207fef branch disable_blank 
+
+shutter_check_data_enable:
+4708 20407fe9 call disable_user 
+4709 68014682 fetch 2 ,mem_ui_state_map 
+470a c280470d bbit1 ui_state_bt_connected ,shutter_check_bt_data_enable 
+470b c284c710 bbit1 ui_state_ble_connected ,shutter_check_ble_data_enable 
+470c 20600000 rtn 
+
+shutter_check_bt_data_enable:
+470d 6800c253 fetch 1 ,mem_hid_interrupt_state 
+470e c19f8000 rtnne 0x3f 
+470f 20207fe7 branch enable_user 
+
+shutter_check_ble_data_enable:
+4710 6800c6b0 fetch 1 ,mem_ble_shutter_enable_notify 
+4711 207a0000 rtn blank 
+4712 20207fe7 branch enable_user 
+
+shutter_check_bluetooth_conn:
+4713 20407fe9 call disable_user 
+4714 68014682 fetch 2 ,mem_ui_state_map 
+4715 c3800000 rtnbit1 ui_state_bt_connected 
+4716 c3848000 rtnbit1 ui_state_ble_connected 
+4717 20207fe7 branch enable_user 
+
+shutter_change_bluetooth_status_bt_disconn:
+4718 6800c69a fetch 1 ,mem_shutter_bluetooth_type 
+4719 c280c71c bbit1 classic_shutter ,classic_shutter_change_bluetooth_status_bt_disconn 
+471a c280471f bbit1 ble_shutter ,ble_shutter_change_bluetooth_status_bt_disconn 
+471b 20600000 rtn 
+
+classic_shutter_change_bluetooth_status_bt_disconn:
+471c 6800c093 fetch 1 ,mem_scan_mode 
+471d c1818000 rtnne 0x03 
+471e 202046d9 branch shutter_start_reconnect 
+
+ble_shutter_change_bluetooth_status_bt_disconn:
+471f 202046d9 branch shutter_start_reconnect 
+
+shutter_check_send_data:
+4720 78567c00 disable user2 
+4721 680146d9 fetch 2 ,mem_shutter_sleep_timeout 
+4722 600146db store 2 ,mem_shutter_sleep_timer 
+4723 20404713 call shutter_check_bluetooth_conn 
+4724 20344718 branch shutter_change_bluetooth_status_bt_disconn ,user 
+4725 20404708 call shutter_check_data_enable 
+4726 24740000 nrtn user 
+4727 78367c00 enable user2 
+4728 20600000 rtn 
+
+shutter_key_change:
+4729 20404720 call shutter_check_send_data 
+472a 24760000 nrtn user2 
+472b 1a227e00 deposit rega 
+472c 203a4730 branch shutter_key_release ,blank 
+
+shutter_key_press:
+472d 20403406 call app_led_on 
+472e da6046f1 arg mem_key0_press ,regc 
+472f 20204732 branch push_queue_press_or_release 
+
+shutter_key_release:
+4730 20403408 call app_led_off 
+4731 da604719 arg mem_key0_release ,regc 
+
+push_queue_press_or_release:
+4732 dfe00005 arg max_queue_num ,pdata 
+4733 98effe00 imul32 queue ,pdata 
+4734 9a60a600 iadd regc ,regc 
+
+push_buffer_in_queue:
+4735 ea608000 ifetch 1 ,regc 
+4736 207a0000 rtn blank 
+4737 20404762 call queue_push_one_byte 
+4738 1a60a601 increase 1 ,regc 
+4739 20204735 branch push_buffer_in_queue 
+
+shutter_send_data_to_master:
+473a 68014682 fetch 2 ,mem_ui_state_map 
+473b c284c73e bbit1 ui_state_ble_connected ,pop_queue_to_ble_data 
+473c c280474e bbit1 ui_state_bt_connected ,pop_queue_to_classic_data 
+473d 20600000 rtn 
+
+pop_queue_to_ble_data:
+473e 20405892 call le_fifo_check_nearly_full 
+473f 247a0000 nrtn blank 
+4740 20404765 call queue_pop_one_byte 
+4741 24740000 nrtn user 
+4742 1fe0ffff pincrease -1 
+4743 1feffe05 mul32 pdata ,shutter_ble_data_buffer ,pdata 
+4744 d8404741 arg mem_ble_data_buffer1 ,temp 
+4745 98408c00 iadd temp ,contr 
+
+le_send_notify_from_list:
+4746 e8c08000 ifetch 1 ,contr 
+4747 1fe22200 copy pdata ,rega 
+4748 e8c90000 ifetcht 2 ,contr 
+4749 20407ea5 call store_contr 
+474a 20405a64 call le_att_malloc_tx_notify 
+474b 1a227200 copy rega ,loopcnt 
+474c 20407e9f call get_contr 
+474d 20207f01 branch memcpy 
+
+pop_queue_to_classic_data:
+474e 20405271 call l2cap_malloc_is_fifo_nearly_full 
+474f 247a0000 nrtn blank 
+4750 20404765 call queue_pop_one_byte 
+4751 24740000 nrtn user 
+4752 1fe0ffff pincrease -1 
+4753 1feffe05 mul32 pdata ,shutter_classic_data_buffer ,pdata 
+4754 d84047a0 arg mem_classic_data_buffer1 ,temp 
+4755 98408c00 iadd temp ,contr 
+4756 e8c28000 ifetch 5 ,contr 
+4757 6002c79b store 5 ,mem_classic_data_buffer 
+
+classic_send_hid_data:
+4758 6800c79b fetch 1 ,mem_classic_data_buffer 
+4759 1fe22200 copy pdata ,rega 
+475a 20404d63 call hid_malloc_tx_buff 
+475b 6801424e fetch 2 ,mem_hid_int_remote_cid 
+475c e0a10000 istore 2 ,contw 
+475d 580000a1 setarg 0xa1 
+475e e0a08000 istore 1 ,contw 
+475f 6802479c fetch 4 ,mem_classic_data_buffer + 1 
+4760 e0a48000 istore 9 ,contw 
+4761 20600000 rtn 
+
+queue_push_one_byte:
+4762 60008a9a store 1 ,mem_pdatatemp 
+4763 da200a9a arg mem_pdatatemp ,rega 
+4764 20207e3d branch queue_push 
+
+queue_pop_one_byte:
+4765 da200a9a arg mem_pdatatemp ,rega 
+4766 20407e54 call queue_pop 
+4767 24740000 nrtn user 
+4768 68008a9a fetch 1 ,mem_pdatatemp 
+4769 20600000 rtn 
+
+ble_shutter_receive_data:
+476a 68010478 fetch 2 ,mem_le_att_handle 
+476b c00c465f beq gatt_keyboard_write_handle ,ble_shutter_process_reconnect_complete 
+476c 20600000 rtn 
+
+shutter_init_param:
+476d 58000002 setarg 0x02 
+476e 6000c8eb store 1 ,mem_shutter_power_off_timeout 
+476f 58200008 setarg 0x00200008 
+4770 600246c1 store 4 ,mem_ble_shutter_interval_min 
+4771 592c0005 setarg 0x012c0005 
+4772 e0a20000 istore 4 ,contw 
+4773 7044a617 jam 0x17 ,mem_le_local_mtu 
+4774 5800001b setarg 0x1b 
+4775 600144fa store 2 ,mem_le_pairing_handle 
+4776 20405810 call le_set_config_fixed_ltk 
+4777 2040582c call le_set_fixed_ltk 
+4778 20405839 call le_set_justwork 
+4779 20205818 branch le_set_config_read_authentication 
+
+shutter_load_buffer_config_form_datarom:
+477a df200028 arg ble_key_value_list_size ,loopcnt 
+477b d8a04741 arg mem_ble_data_buffer1 ,contw 
+477c d8c0949f arg ble_shutter_key_value_list ,contr 
+477d 20407ef4 call memcpy_fast 
+477e df200028 arg bt_key_value_list_size ,loopcnt 
+477f d8a047a0 arg mem_classic_data_buffer1 ,contw 
+4780 d8c094c7 arg classic_shutter_key_value_list ,contr 
+4781 20207ef4 branch memcpy_fast 
+
+shutter_load_ble_gatt_form_datarom:
+4782 df20017e arg ble_gatt_list_size ,loopcnt 
+4783 d8c0913a arg ble_shutter_gatt_list ,contr 
+4784 20207ef4 branch memcpy_fast 
+
+shutter_load_bt_sdp_form_datarom:
+4785 df2001e7 arg bt_sdp_list_size ,loopcnt 
+4786 d8c092b8 arg classic_shutter_sdp_list ,contr 
+4787 20207ef4 branch memcpy_fast 
+
+shutter_init_bluetooth_config:
+4788 204047ae call shutter_check_load_config_flag 
+4789 24740000 nrtn user 
+478a 6800c69f fetch 1 ,mem_shutter_config_select_gpio1 
+478b 20404790 call shutter_init_bluetooth_config_gpio_input 
+478c 6800c6a0 fetch 1 ,mem_shutter_config_select_gpio2 
+478d 20404790 call shutter_init_bluetooth_config_gpio_input 
+478e 6800c6a1 fetch 1 ,mem_shutter_config_select_gpio3 
+478f 20204790 branch shutter_init_bluetooth_config_gpio_input 
+
+shutter_init_bluetooth_config_gpio_input:
+4790 207a0000 rtn blank 
+4791 1fe18480 or pdata ,0x80 ,temp 
+4792 202067f9 branch gpio_config_input_nowake 
+
+shutter_load_bluetooth_config:
+4793 204047ae call shutter_check_load_config_flag 
+4794 24740000 nrtn user 
+4795 20404797 call shutter_load_bluetooth_config_label 
+4796 202047b4 branch shutter_load_bluetooth_config_by_otp 
+
+shutter_load_bluetooth_config_label:
+4797 da200000 arg 0 ,rega 
+4798 6800c69f fetch 1 ,mem_shutter_config_select_gpio1 
+4799 204047a9 call shutter_load_bluetooth_config_read_gpio_input 
+479a 7d3a2200 nsetflag blank ,0 ,rega 
+479b 6800c6a0 fetch 1 ,mem_shutter_config_select_gpio2 
+479c 204047a9 call shutter_load_bluetooth_config_read_gpio_input 
+479d 7d3a2201 nsetflag blank ,1 ,rega 
+479e 6800c6a1 fetch 1 ,mem_shutter_config_select_gpio3 
+479f 204047a9 call shutter_load_bluetooth_config_read_gpio_input 
+47a0 7d3a2202 nsetflag blank ,2 ,rega 
+47a1 1a227e00 copy rega ,pdata 
+47a2 6000c6a9 store 1 ,mem_shutter_config_label 
+47a3 6800c69e fetch 1 ,mem_shutter_config_size 
+47a4 9a2ffe00 imul32 rega ,pdata 
+47a5 6809469c fetcht 2 ,mem_shutter_config_otp_base_address 
+47a6 9840fe00 iadd temp ,pdata 
+47a7 600146aa store 2 ,mem_shutter_config_otp_addr 
+47a8 20600000 rtn 
+
+shutter_load_bluetooth_config_read_gpio_input:
+47a9 207a0000 rtn blank 
+47aa 1fe18480 or pdata ,0x80 ,temp 
+47ab 2040681d call gpio_get_bit 
+47ac 2420fff1 nbranch enable_blank ,true 
+47ad 20207fef branch disable_blank 
+
+shutter_check_load_config_flag:
+47ae 20407fe9 call disable_user 
+47af 6800c6a8 fetch 1 ,mem_shutter_config_user_size 
+47b0 247a0000 nrtn blank 
+47b1 6800c69b fetch 1 ,mem_shutter_config_enable 
+47b2 207a0000 rtn blank 
+47b3 20207fe7 branch enable_user 
+
+shutter_load_bluetooth_config_by_otp:
+47b4 2040666a call otp_enable_chgpump 
+47b5 680146aa fetch 2 ,mem_shutter_config_otp_addr 
+47b6 da200ac2 arg mem_shutter_config_data_temp ,rega 
+47b7 6808c69e fetcht 1 ,mem_shutter_config_size 
+47b8 204066b3 call otpd_read_data 
+47b9 2040666d call otp_disable_chgpump 
+
+shutter_load_bluetooth_config_store_name:
+47ba 68008ac2 fetch 1 ,mem_shutter_config_data_temp 
+47bb 1fe27200 copy pdata ,loopcnt 
+47bc 6000c3af store 1 ,mem_le_name_len 
+47bd 20407ef4 call memcpy_fast 
+47be 68008ac2 fetch 1 ,mem_shutter_config_data_temp 
+47bf 1fe27200 copy pdata ,loopcnt 
+47c0 6000c515 store 1 ,mem_local_name_length 
+47c1 20407ef4 call memcpy_fast 
+47c2 e8c08000 ifetch 1 ,contr 
+47c3 6000c6e6 store 1 ,mem_shutter_key_num 
+47c4 e8c08000 ifetch 1 ,contr 
+47c5 6000c6dd store 1 ,mem_shutter_hard_soft_switch_case 
+47c6 20600000 rtn 
+
+shutter_load_bluetooth_config_by_eeprom:
+47c7 6800c69a fetch 1 ,mem_shutter_bluetooth_type 
+47c8 c4008000 rtnbit0 classic_shutter 
+47c9 d8400003 arg 3 ,temp 
+47ca 680146a4 fetch 2 ,mem_shutter_config_eeprom_offset_addr 
+47cb 1fe22400 copy pdata ,regb 
+47cc da2046a6 arg mem_shutter_config_eeprom_start_flag ,rega 
+47cd 204065df call iicd_read_eep_data 
+47ce 680946a6 fetcht 2 ,mem_shutter_config_eeprom_start_flag 
+47cf 58001b3a setarg shutter_eeprom_config_crc 
+47d0 98467c00 isub temp ,null 
+47d1 24628000 nrtn zero 
+47d2 6800c6a8 fetch 1 ,mem_shutter_config_user_size 
+47d3 207a0000 rtn blank 
+47d4 1fe20400 copy pdata ,temp 
+47d5 680146a4 fetch 2 ,mem_shutter_config_eeprom_offset_addr 
+47d6 1fe0a403 add pdata ,3 ,regb 
+47d7 da200ac2 arg mem_shutter_config_data_temp ,rega 
+47d8 204065df call iicd_read_eep_data 
+47d9 202047e8 branch shutter_store_config 
+
+shutter_load_bluetooth_config_by_user_config:
+47da 680146a2 fetch 2 ,mem_shutter_config_user_otp_address 
+47db 207a0000 rtn blank 
+47dc 2040666a call otp_enable_chgpump 
+47dd d8400001 arg 1 ,temp 
+47de da2046a8 arg mem_shutter_config_user_size ,rega 
+47df 204066b3 call otpd_read_data 
+47e0 6800c6a8 fetch 1 ,mem_shutter_config_user_size 
+47e1 207a0000 rtn blank 
+47e2 680146a2 fetch 2 ,mem_shutter_config_user_otp_address 
+47e3 1fe0fe01 pincrease 1 
+47e4 da200ac2 arg mem_shutter_config_data_temp ,rega 
+47e5 6808c6a8 fetcht 1 ,mem_shutter_config_user_size 
+47e6 204066b3 call otpd_read_data 
+47e7 2040666d call otp_disable_chgpump 
+
+shutter_store_config:
+47e8 204047ba call shutter_load_bluetooth_config_store_name 
+
+shutter_load_bluetooth_config_custom:
+47e9 e8c10000 ifetch 2 ,contr 
+47ea 207a0000 rtn blank 
+47eb 1fe20a00 copy pdata ,contw 
+47ec e8c88000 ifetcht 1 ,contr 
+47ed 18427200 copy temp ,loopcnt 
+47ee 20407f01 call memcpy 
+47ef 202047e9 branch shutter_load_bluetooth_config_custom 
+
+shutter_random_mac_addr:
+47f0 6800c69a fetch 1 ,mem_shutter_bluetooth_type 
+47f1 c4008000 rtnbit0 classic_shutter 
+47f2 680146ae fetch 2 ,mem_classic_shutter_random_mac_offset_addr 
+47f3 1fe22400 copy pdata ,regb 
+47f4 d8400004 arg 4 ,temp 
+47f5 da200ac2 arg mem_shutter_random_mac_data_temp ,rega 
+47f6 204065df call iicd_read_eep_data 
+47f7 68008ac2 fetch 1 ,mem_shutter_random_mac_data_temp 
+47f8 c080c7f9 bne 1 ,shutter_write_random_mac_addr_to_eeprom 
+
+shutter_write_random_mac_addr_to_eeprom:
+47f9 58000001 setarg 1 
+47fa 60008ac2 store 1 ,mem_shutter_random_mac_data_temp 
+47fb 18007203 force 3 ,loopcnt 
+47fc 2040630d call generate_random_loop 
+47fd 680146ae fetch 2 ,mem_classic_shutter_random_mac_offset_addr 
+47fe 1fe22400 copy pdata ,regb 
+47ff d8400004 arg 4 ,temp 
+4800 da200ac2 arg mem_shutter_random_mac_data_temp ,rega 
+4801 20406606 call iicd_write_eep_data 
+
+shutter_write_random_mac_addr:
+4802 68018ac3 fetch 3 ,mem_shutter_random_mac_data_temp + 1 
+4803 6001c0a0 store 3 ,mem_lap 
+4804 6001c4a0 store 3 ,mem_le_lap 
+4805 20600000 rtn 
+
+shutter_soft_swtich_power_on:
+4806 202046d9 branch shutter_start_reconnect 
+
+shutter_soft_swtich_power_off:
+4807 da200000 arg 0 ,rega 
+4808 da6048d4 arg mem_shutter_power_off_led_style ,regc 
+4809 20407d24 call ui_led_set_style_global 
+480a 204046f4 call shutter_disconnect_current_connection 
+
+shutter_wait_power_off:
+480b 6800c8eb fetch 1 ,mem_shutter_power_off_timeout 
+480c 6000c8ec store 1 ,mem_shutter_power_off_timer 
+480d 20600000 rtn 
+
+ui_soft_swtich_init:
+480e 58000000 setarg ss_state_power_up 
+480f 20404816 call ui_soft_swtich_init_power_on_time 
+4810 70467901 jam ui_button_state_up ,mem_ui_button_last_state 
+4811 20407cd3 call ui_button_init 
+4812 20407cdd call ui_button_polling 
+4813 68014682 fetch 2 ,mem_ui_state_map 
+4814 c3860000 rtnbit1 ui_state_btn_down 
+4815 2020340a branch app_enter_hibernate 
+
+ui_soft_swtich_init_power_on_time:
+4816 6809423f fetcht 2 ,mem_power_param_ptr 
+4817 e0408000 istore 1 ,temp 
+4818 e8a08000 ifetch 1 ,contw 
+4819 6000c685 store 1 ,mem_ui_button_timeout 
+481a 20600000 rtn 
+
+ui_soft_switch_botton_up:
+481b 6801423f fetch 2 ,mem_power_param_ptr 
+481c efe08000 ifetch 1 ,pdata 
+481d c1800000 rtnne ss_state_power_up 
+481e 2020340a branch app_enter_hibernate 
+
+ui_soft_switch_botton_long_press:
+481f 6809423f fetcht 2 ,mem_power_param_ptr 
+4820 e8408000 ifetch 1 ,temp 
+4821 c000c82a beq ss_state_power_on ,ui_soft_switch_power_off 
+
+ui_soft_switch_power_on:
+4822 58000001 setarg ss_state_power_on 
+4823 6809423f fetcht 2 ,mem_power_param_ptr 
+4824 e0408000 istore 1 ,temp 
+4825 18408c02 add temp ,ss_power_off_time ,contr 
+4826 e8c08000 ifetch 1 ,contr 
+4827 e0a08000 istore 1 ,mem_ui_button_timeout 
+4828 e8c10000 ifetch 2 ,contr 
+4829 20207f9c branch callback_func 
+
+ui_soft_switch_power_off:
+482a 58000002 setarg ss_state_power_off 
+482b 20404816 call ui_soft_swtich_init_power_on_time 
+482c 18408c05 add temp ,ss_power_off_cb ,contr 
+482d e8c10000 ifetch 2 ,contr 
+482e 203a340a branch app_enter_hibernate ,blank 
+482f 20207f9c branch callback_func 
+
+shutter_byteswap:
+4830 60030101 store 6 ,mem_tmp_buffer 
+4831 68008101 fetch 1 ,mem_tmp_buffer 
+4832 6000810c store 1 ,mem_tmp_buffer + 11 
+4833 e8c08000 ifetch 1 ,contr 
+4834 6000810b store 1 ,mem_tmp_buffer + 10 
+4835 e8c08000 ifetch 1 ,contr 
+4836 6000810a store 1 ,mem_tmp_buffer + 9 
+4837 e8c08000 ifetch 1 ,contr 
+4838 60008109 store 1 ,mem_tmp_buffer + 8 
+4839 e8c08000 ifetch 1 ,contr 
+483a 60008108 store 1 ,mem_tmp_buffer + 7 
+483b e8c08000 ifetch 1 ,contr 
+483c 60008107 store 1 ,mem_tmp_buffer + 6 
+483d 68030107 fetch 6 ,mem_tmp_buffer + 6 
+483e 20600000 rtn 
+
+shutter_random_addr_by_otp:
+483f 204068a2 call load_adc_init 
+4840 6800c223 fetch 1 ,mem_1v_adc_io_data 
+4841 6000c4a0 store 1 ,mem_le_lap 
+4842 6800c225 fetch 1 ,mem_5v_adc_hvin_data 
+4843 e0a08000 istore 1 ,contw 
+4844 6800c227 fetch 1 ,mem_3v_adc_vinlpm_data 
+4845 e0a08000 istore 1 ,contw 
+4846 6801c4a0 fetch 3 ,mem_le_lap 
+4847 6001c0a0 store 3 ,mem_lap 
+4848 20600000 rtn 
+
+sim_iic_read_eep_data:
+4849 68014203 fetch 2 ,mem_eeprom_base 
+484a 9a40fe00 iadd regb ,pdata 
+484b 1ff0fe00 byteswap pdata ,pdata 
+484c 600101f7 store 2 ,mem_addr_mi 
+484d 18422400 copy temp ,regb 
+484e 2040489b call sim_iic_start 
+484f 580000a0 setarg 0xa0 
+4850 2040488d call sim_iic_send_byte 
+4851 680081f7 fetch 1 ,mem_addr_mi 
+4852 2040488d call sim_iic_send_byte 
+4853 c5144856 bmark1 mark_eeprom_size ,sim_iic_read_eep_data_2k 
+4854 680081f8 fetch 1 ,mem_addr_mi + 1 
+4855 2040488d call sim_iic_send_byte 
+
+sim_iic_read_eep_data_2k:
+4856 204048a1 call sim_iic_stop 
+4857 2040489b call sim_iic_start 
+4858 580000a1 setarg 0xa1 
+4859 2040488d call sim_iic_send_byte 
+
+sim_iic_read_eep_data_loop:
+485a 2040487f call sim_iic_read_byte 
+485b e2208000 istore 1 ,rega 
+485c 1a20a201 increase 1 ,rega 
+485d 1a40a5ff increase -1 ,regb 
+485e 2422c85a nbranch sim_iic_read_eep_data_loop ,zero 
+485f 202048a1 branch sim_iic_stop 
+
+sim_iic_write_eep_data:
+4860 1a50fe00 byteswap regb ,pdata 
+4861 600101f7 store 2 ,mem_addr_mi 
+4862 18422400 copy temp ,regb 
+4863 2040489b call sim_iic_start 
+4864 580000a0 setarg 0xa0 
+4865 2040488d call sim_iic_send_byte 
+4866 680081f7 fetch 1 ,mem_addr_mi 
+4867 2040488d call sim_iic_send_byte 
+4868 c514486b bmark1 mark_eeprom_size ,sim_iic_write_eep_data_loop 
+4869 680081f8 fetch 1 ,mem_addr_mi + 1 
+486a 2040488d call sim_iic_send_byte 
+
+sim_iic_write_eep_data_loop:
+486b ea208000 ifetch 1 ,rega 
+486c 2040488d call sim_iic_send_byte 
+486d 1a20a201 increase 1 ,rega 
+486e 1a40a5ff increase -1 ,regb 
+486f 2422c86b nbranch sim_iic_write_eep_data_loop ,zero 
+4870 202048a1 branch sim_iic_stop 
+
+sim_iic_wait_ack:
+4871 df20000a arg 10 ,loopcnt 
+4872 204048be call sim_iic_release_sda 
+4873 204048a6 call sim_iic_scl_output_high 
+4874 204048d2 call sim_iic_delay 
+
+sim_iic_wait_ack_loop:
+4875 204048c7 call sim_iic_read_sda_level 
+4876 203a48a9 branch sim_iic_scl_output_low ,blank 
+4877 c2004875 loop sim_iic_wait_ack_loop 
+4878 202048a9 branch sim_iic_scl_output_low 
+
+sim_iic_ack_slave:
+4879 204048a9 call sim_iic_scl_output_low 
+487a 204048af call sim_iic_sda_output_low 
+487b 204048d2 call sim_iic_delay 
+487c 204048a6 call sim_iic_scl_output_high 
+487d 204048d2 call sim_iic_delay 
+487e 202048a9 branch sim_iic_scl_output_low 
+
+sim_iic_read_byte:
+487f df200008 arg 8 ,loopcnt 
+4880 da600000 arg 0 ,regc 
+4881 204048be call sim_iic_release_sda 
+
+sim_iic_read_byte_loop:
+4882 204048a6 call sim_iic_scl_output_high 
+4883 204048d2 call sim_iic_delay 
+4884 1a63a600 lshift regc ,regc 
+4885 204048c7 call sim_iic_read_sda_level 
+4886 9a60a600 iadd regc ,regc 
+4887 204048d2 call sim_iic_delay 
+4888 204048a9 call sim_iic_scl_output_low 
+4889 c2004882 loop sim_iic_read_byte_loop 
+488a 20404879 call sim_iic_ack_slave 
+488b 1a627e00 copy regc ,pdata 
+488c 20600000 rtn 
+
+sim_iic_send_byte:
+488d df200008 arg 8 ,loopcnt 
+488e 1fe22600 copy pdata ,regc 
+488f 204048a9 call sim_iic_scl_output_low 
+
+sim_iic_send_byte_loop:
+4890 2a6ffe07 isolate1 7 ,regc 
+4891 2040c8ac call sim_iic_sda_output_high ,true 
+4892 2440c8af ncall sim_iic_sda_output_low ,true 
+4893 1a63a600 lshift regc ,regc 
+4894 204048d2 call sim_iic_delay 
+4895 204048a6 call sim_iic_scl_output_high 
+4896 204048d2 call sim_iic_delay 
+4897 204048a9 call sim_iic_scl_output_low 
+4898 204048d2 call sim_iic_delay 
+4899 c2004890 loop sim_iic_send_byte_loop 
+489a 20204871 branch sim_iic_wait_ack 
+
+sim_iic_start:
+489b 204048ac call sim_iic_sda_output_high 
+489c 204048a6 call sim_iic_scl_output_high 
+489d 204048d2 call sim_iic_delay 
+489e 204048af call sim_iic_sda_output_low 
+489f 204048d2 call sim_iic_delay 
+48a0 202048a9 branch sim_iic_scl_output_low 
+
+sim_iic_stop:
+48a1 204048af call sim_iic_sda_output_low 
+48a2 204048a6 call sim_iic_scl_output_high 
+48a3 204048d2 call sim_iic_delay 
+48a4 204048ac call sim_iic_sda_output_high 
+48a5 202048d2 branch sim_iic_delay 
+
+sim_iic_scl_output_high:
+48a6 78347c00 enable user 
+48a7 6800cffe fetch 1 ,sim_iic_scl_gpio_num 
+48a8 202048b2 branch sim_iic_config_gpio 
+
+sim_iic_scl_output_low:
+48a9 78547c00 disable user 
+48aa 6800cffe fetch 1 ,sim_iic_scl_gpio_num 
+48ab 202048b2 branch sim_iic_config_gpio 
+
+sim_iic_sda_output_high:
+48ac 78347c00 enable user 
+48ad 6800cfff fetch 1 ,sim_iic_sda_gpio_num 
+48ae 202048b2 branch sim_iic_config_gpio 
+
+sim_iic_sda_output_low:
+48af 78547c00 disable user 
+48b0 6800cfff fetch 1 ,sim_iic_sda_gpio_num 
+48b1 202048b2 branch sim_iic_config_gpio 
+
+sim_iic_config_gpio:
+48b2 1fe10e07 and pdata ,0x07 ,queue 
+48b3 1fe97e00 rshift3 pdata ,pdata 
+48b4 d8408070 arg core_gpio_oe0 ,temp 
+48b5 98408400 iadd temp ,temp 
+48b6 e8408000 ifetch 1 ,temp 
+48b7 f9207e00 qset1 pdata 
+48b8 e0408000 istore 1 ,temp 
+48b9 18408404 increase 4 ,temp 
+48ba e8408000 ifetch 1 ,temp 
+48bb f9347e00 qsetflag user ,pdata 
+48bc e0408000 istore 1 ,temp 
+48bd 20600000 rtn 
+
+sim_iic_release_sda:
+48be 6800cfff fetch 1 ,sim_iic_sda_gpio_num 
+48bf 1fe10e07 and pdata ,0x07 ,queue 
+48c0 1fe97e00 rshift3 pdata ,pdata 
+48c1 d8408070 arg core_gpio_oe0 ,temp 
+48c2 98408400 iadd temp ,temp 
+48c3 e8408000 ifetch 1 ,temp 
+48c4 f93ffe00 qset0 pdata 
+48c5 e0408000 istore 1 ,temp 
+48c6 20600000 rtn 
+
+sim_iic_read_sda_level:
+48c7 20000004 nop 4 
+48c8 6800cfff fetch 1 ,sim_iic_sda_gpio_num 
+48c9 1fe10e07 and pdata ,0x07 ,queue 
+48ca 1fe97e00 rshift3 pdata ,pdata 
+48cb d840811c arg core_gpio_in ,temp 
+48cc 98408400 iadd temp ,temp 
+48cd 58000000 setarg 0 
+48ce e8488000 ifetcht 1 ,temp 
+48cf a84fffff qisolate1 temp 
+48d0 7920fe00 setflag true ,0 ,pdata 
+48d1 20600000 rtn 
+
+sim_iic_delay:
+48d2 20600000 rtn 
+
+usb_isr:
+48d3 44fb401e bpatch patch1e_6 ,mem_patch1e 
+48d4 68108a26 hfetch 1 ,core_usb_status 
+48d5 2feffe07 isolate1 7 ,pdata 
+48d6 2040c8ea call usb_init ,true 
+48d7 2040492e call usb_nak_state_judge 
+48d8 68108a26 hfetch 1 ,core_usb_status 
+48d9 60008b22 store 1 ,mem_usb_status 
+48da 68108a27 hfetch 1 ,core_usb_fifo_empty 
+48db 60008b23 store 1 ,mem_usb_fifo_empty 
+48dc 60108a27 hstore 1 ,core_usb_fifo_empty 
+48dd 1fe47e00 pinvert 
+48de 68088d37 fetcht 1 ,mem_usb_tx_wait 
+48df 98417e00 iand temp ,pdata 
+48e0 60008d37 store 1 ,mem_usb_tx_wait 
+48e1 708a26e0 jam 0xe0 ,core_usb_status 
+48e2 68008b23 fetch 1 ,mem_usb_fifo_empty 
+48e3 2fe00201 compare 0x1 ,pdata ,0x1 
+48e4 2040c941 call usb0_fifo_empty ,true 
+48e5 68008b22 fetch 1 ,mem_usb_status 
+48e6 2fe00201 compare 0x1 ,pdata ,0x1 
+48e7 2040c94a call usb_status1 ,true 
+48e8 20404b61 call usb_tx 
+48e9 20204903 branch usb_nak_state 
+
+usb_init:
+48ea 44fbc01e bpatch patch1e_7 ,mem_patch1e 
+48eb 20404919 call usb_init_param 
+48ec 708a0000 jam 0x00 ,core_usb_config 
+48ed 20002710 nop 10000 
+48ee 708a10c0 jam 0xc0 ,core_usb_trig 
+48ef 68110050 hfetch 2 ,core_clkoff 
+48f0 793ffe0a set0 clock_off_usb ,pdata 
+48f1 60110050 hstore 2 ,core_clkoff 
+48f2 708a003c jam 0x3c ,core_usb_config 
+48f3 708a26ff jam 0xff ,core_usb_status 
+48f4 708a27ff jam 0xff ,core_usb_fifo_empty 
+48f5 708a0400 jam 0 ,core_usb_addr 
+48f6 700c6b02 jam dev_default ,mem_usb0_state 
+48f7 58000d9d setarg mem_usb_clear_mem_end 
+48f8 d8a00c6e arg mem_usb_clear_mem_start ,contw 
+48f9 98a67200 isub contw ,loopcnt 
+48fa 20207ed4 branch clear_mem 
+
+usb_offline_check_init:
+48fb 68088c6c fetcht 1 ,mem_usb_offline_check_gpio 
+48fc 202067fb branch gpio_config_input 
+
+usb_offline_state:
+48fd 68008d45 fetch 1 ,mem_usb_device_enumeration_endflag 
+48fe 207a0000 rtn blank 
+48ff 68088c6c fetcht 1 ,mem_usb_offline_check_gpio 
+4900 2040681d call gpio_get_bit 
+4901 2020c8ea branch usb_init ,true 
+4902 20600000 rtn 
+
+usb_nak_state:
+4903 d8e00000 arg timer_nak ,queue 
+4904 20407f16 call timer_check 
+4905 247a0000 nrtn blank 
+4906 68008d46 fetch 1 ,mem_usb_wakestate_onetime_flag 
+4907 247a0000 nrtn blank 
+4908 68008d45 fetch 1 ,mem_usb_device_enumeration_endflag 
+4909 245a4bb7 ncall usb_mac_wakeup_judge ,blank 
+490a 20600000 rtn 
+
+usb_mem_devicedesc_init:
+490b d8a00b68 arg mem_devicedesc ,contw 
+490c 38011212 setsect 0 ,0x11212 
+490d 38048000 setsect 1 ,0x8000 
+490e 38080000 setsect 2 ,0x0 
+490f 380d0000 setsect 3 ,0x10000 
+4910 e0a48000 istore 9 ,contw 
+4911 38022412 setsect 0 ,0x22412 
+4912 38048604 setsect 1 ,0x8604 
+4913 38081000 setsect 2 ,0x1000 
+4914 380c0008 setsect 3 ,0x8 
+4915 e0a48000 istore 9 ,contw 
+4916 38000001 setsect 0 ,0x1 
+4917 e0a08000 istore 1 ,contw 
+4918 20600000 rtn 
+
+usb_init_param:
+4919 700c6b02 jam 2 ,mem_usb0_state 
+491a 58000000 setarg 0x0 
+491b 60008b67 store 1 ,mem_remain 
+491c 60010c65 store 2 ,mem_usb_zero_packet 
+491d 1fe0fe01 pincrease 1 
+491e 60010c67 store 2 ,mem_usb_ones_packet 
+491f 1fe0fe01 pincrease 1 
+4920 60010c69 store 2 ,mem_usb_two_packet 
+4921 58008ffa setarg hid_kbdata_addr 
+4922 60010b7c store 2 ,mem_hidreportdesc_kb 
+4923 5800903a setarg hid_msdata_addr 
+4924 60010b7e store 2 ,mem_hidreportdesc_m 
+4925 d8a00b80 arg mem_confdesc ,contw 
+4926 d8c090fe arg hid_confdata_addr ,contr 
+4927 20407eb3 call memcpy64 
+4928 68008c6d fetch 1 ,mem_usb_tx_interval 
+4929 245a492b ncall usb_tx_interval_config ,blank 
+492a 2020490b branch usb_mem_devicedesc_init 
+
+usb_tx_interval_config:
+492b 60008ba2 store 1 ,mem_confdesc + 34 
+492c 60008bbb store 1 ,mem_confdesc + 59 
+492d 20600000 rtn 
+
+usb_nak_state_judge:
+492e 68108a26 hfetch 1 ,core_usb_status 
+492f c2834931 bbit1 usb_status_nak ,usb_nak_state_timer_init 
+4930 20600000 rtn 
+
+usb_nak_state_timer_init:
+4931 20404936 call usb0_attached_state_judge 
+4932 20407f15 call timer_reinit 
+4933 58000280 setarg timer_nak_delay 
+4934 d8e00000 arg timer_nak ,queue 
+4935 20207f08 branch timer_init 
+
+usb0_attached_state_judge:
+4936 68008d36 fetch 1 ,mem_usb_state 
+4937 c081493b bne usb_connected ,usb_clear_halt_dispose 
+4938 700d4600 jam 0 ,mem_usb_wakestate_onetime_flag 
+4939 700d4700 jam 0 ,mem_usb_mac_wakeup_trig 
+493a 20600000 rtn 
+
+usb_clear_halt_dispose:
+493b 68008d53 fetch 1 ,mem_usb_clear_halt 
+493c 207a0000 rtn blank 
+493d 700d5300 jam 0 ,mem_usb_clear_halt 
+493e 700d3602 jam usb_connected ,mem_usb_state 
+493f 700d4501 jam 1 ,mem_usb_device_enumeration_endflag 
+4940 20600000 rtn 
+
+usb0_fifo_empty:
+4941 708a2701 jam 0x1 ,core_usb_fifo_empty 
+4942 20204b37 branch usb0_tx 
+
+usb_rx_no_data:
+4943 68008b22 fetch 1 ,mem_usb_status 
+4944 c2824955 bbit1 usb_status_setup ,usb_class_type 
+4945 20600000 rtn 
+
+usb_rx_read:
+4946 68108a18 hfetch 1 ,core_usb_ep 
+4947 e0a08000 istore 1 ,contw 
+4948 c2004946 loop usb_rx_read 
+4949 20600000 rtn 
+
+usb_status1:
+494a 44fc401f bpatch patch1f_0 ,mem_patch1f 
+494b 708a2611 jam 0x11 ,core_usb_status 
+494c 68108a20 hfetch 1 ,core_usb_ep_len 
+494d 60008b24 store 1 ,mem_usb_read_len 
+494e 1fe27200 copy pdata ,loopcnt 
+494f 203a4943 branch usb_rx_no_data ,blank 
+4950 d8a00c6e arg mem_usb_setup ,contw 
+4951 20404946 call usb_rx_read 
+4952 68008b24 fetch 1 ,mem_usb_read_len 
+4953 1fe67c07 sub pdata ,7 ,null 
+4954 20610000 rtn positive 
+
+usb_class_type:
+4955 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+4956 1fe17e80 and_into 0x80 ,pdata 
+4957 c040495a beq in_device ,usb_in_device 
+4958 c0004962 beq out_device ,usb_out_device 
+4959 20202a8c branch assert 
+
+usb_in_device:
+495a 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+495b 1ff1fe00 rshift4 pdata ,pdata 
+495c 1fe37e00 rshift pdata ,pdata 
+495d 1fe17e03 and_into 0x03 ,pdata 
+495e c000496a beq standard_req ,usb_in_standard_req 
+495f c000c970 beq class_req ,usb_in_class_req 
+4960 c0014975 beq manufacturer_req ,usb_in_manufacturer_req 
+4961 20202a8c branch assert 
+
+usb_out_device:
+4962 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+4963 1ff1fe00 rshift4 pdata ,pdata 
+4964 1fe37e00 rshift pdata ,pdata 
+4965 1fe17e03 and_into 0x03 ,pdata 
+4966 c0004976 beq standard_req ,usb_out_standard_req 
+4967 c000c97e beq class_req ,usb_out_class_req 
+4968 c0014983 beq manufacturer_req ,usb_out_manufacturer_req 
+4969 20202a8c branch assert 
+
+usb_in_standard_req:
+496a 68008c6f fetch 1 ,mem_usb_setup_brequest 
+496b c004498a beq get_configuration ,usb0_request_get_configuration 
+496c c00349a0 beq get_descriptor ,usb0_request_get_descriptor 
+496d c00549ea beq get_interface ,usb0_request_get_interface 
+496e c00049fc beq get_status ,usb0_request_get_status 
+496f 20204984 branch usb0_force_stall 
+
+usb_in_class_req:
+4970 68008c6f fetch 1 ,mem_usb_setup_brequest 
+4971 c0014a2f beq get_idle ,usb_get_idle 
+4972 c000ca33 beq get_report ,usb_get_report 
+4973 c001ca45 beq get_protocol ,usb_get_protocol_req 
+4974 20204984 branch usb0_force_stall 
+
+usb_in_manufacturer_req:
+4975 20204984 branch usb0_force_stall 
+
+usb_out_standard_req:
+4976 68008c6f fetch 1 ,mem_usb_setup_brequest 
+4977 c000ca4f beq clear_feature ,usb0_request_clear_feature 
+4978 c001ca79 beq set_feature ,usb0_request_set_feature 
+4979 c002caa3 beq set_address ,usb0_request_set_address 
+497a c004cabc beq set_configuration ,usb0_request_set_configuration 
+497b c005cad7 beq set_interface ,usb0_request_set_interface 
+497c c003c984 beq set_descriptor ,usb0_force_stall 
+497d 20204984 branch usb0_force_stall 
+
+usb_out_class_req:
+497e 68008c6f fetch 1 ,mem_usb_setup_brequest 
+497f c0054ae8 beq set_idle ,usb_set_idle 
+4980 c004caf9 beq set_report ,usb_set_report 
+4981 c005cb11 beq set_protocol ,usb_set_protocol_req 
+4982 20204984 branch usb0_force_stall 
+
+usb_out_manufacturer_req:
+4983 20204984 branch usb0_force_stall 
+
+usb0_force_stall:
+4984 68108a11 hfetch 1 ,core_usb_stall 
+4985 79207e00 set1 0 ,pdata 
+4986 60108a11 hstore 1 ,core_usb_stall 
+4987 20204988 branch usb0_reply_zerolen 
+
+usb0_reply_zerolen:
+4988 708a1240 jam 0x40 ,core_usb_clear 
+4989 20600000 rtn 
+
+usb0_request_get_configuration:
+498a 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+498b c0c04984 bne in_device ,usb0_force_stall 
+498c 68008c72 fetch 1 ,mem_usb_setup_windex 
+498d c0804984 bne 0 ,usb0_force_stall 
+498e 68008c73 fetch 1 ,mem_usb_setup_windex + 1 
+498f c0804984 bne 0 ,usb0_force_stall 
+4990 68008c74 fetch 1 ,mem_usb_setup_blength 
+4991 c080c984 bne 1 ,usb0_force_stall 
+4992 68008c75 fetch 1 ,mem_usb_setup_blengthh 
+4993 c0804984 bne 0 ,usb0_force_stall 
+4994 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4995 c0804984 bne 0 ,usb0_force_stall 
+4996 68008c71 fetch 1 ,mem_usb_setup_bvalue + 1 
+4997 c0804984 bne 0 ,usb0_force_stall 
+4998 68008c6b fetch 1 ,mem_usb0_state 
+4999 c002499c beq dev_configured ,usb0_request_get_cfg_dev_cfg 
+499a c001c99e beq dev_address ,usb0_request_get_cfg_dev_addr 
+499b 20204984 branch usb0_force_stall 
+
+usb0_request_get_cfg_dev_cfg:
+499c da400001 arg 1 ,regb 
+499d 20204a14 branch usb_send_ones_packet 
+
+usb0_request_get_cfg_dev_addr:
+499e da400001 arg 1 ,regb 
+499f 20204a12 branch usb_send_zero_packet 
+
+usb0_request_get_descriptor:
+49a0 44fcc01f bpatch patch1f_1 ,mem_patch1f 
+49a1 793f8023 set0 mark_isstr ,mark 
+49a2 68008c71 fetch 1 ,mem_usb_setup_bvalueh 
+49a3 c000c9b6 beq dsc_device ,dsc_device_info 
+49a4 c00149cf beq dsc_config ,dsc_config_info 
+49a5 c001c9d2 beq dsc_string ,dsc_string_info 
+49a6 c010c9a9 beq dsc_hid ,dsc_hid_info 
+49a7 c01149e0 beq dsc_hid_report ,dsc_hid_report_info 
+49a8 20204984 branch usb0_force_stall 
+
+dsc_hid_info:
+49a9 700d4b00 jam 0 ,mem_usb_get_protocol_flag 
+49aa 68008c72 fetch 1 ,mem_usb_setup_windex 
+49ab c00049ae beq 0 ,dsc_hid_info_interface0 
+49ac c000c9b2 beq 1 ,dsc_hid_info_interface1 
+49ad 20204984 branch usb0_force_stall 
+
+dsc_hid_info_interface0:
+49ae da200b93 arg mem_confdesc + 19 ,rega 
+49af ea208000 ifetch 1 ,rega 
+49b0 98002400 iforce regb 
+49b1 20204b21 branch usb0_respond 
+
+dsc_hid_info_interface1:
+49b2 da200bac arg mem_confdesc + 44 ,rega 
+49b3 ea208000 ifetch 1 ,rega 
+49b4 98002400 iforce regb 
+49b5 20204b21 branch usb0_respond 
+
+dsc_device_info:
+49b6 68008d48 fetch 1 ,mem_usb_set_high_addr_flag 
+49b7 245a49c7 ncall usb_set_high_addr ,blank 
+49b8 58000b68 setarg mem_devicedesc 
+49b9 68088b68 fetcht 1 ,mem_devicedesc 
+
+dsc_info_set_data_len:
+49ba 60010d3f store 2 ,mem_dsc_info_data_pointer 
+49bb 60088d41 storet 1 ,mem_dsc_info_len 
+49bc 68008c74 fetch 1 ,mem_usb_setup_blength 
+49bd 98467c00 isub temp ,null 
+49be 242149c5 nbranch dsc_info_set_current_data_len ,positive 
+
+dsc_info_set_initial_data_len:
+49bf 68008d41 fetch 1 ,mem_dsc_info_len 
+
+dsc_info_set_data_size_completed:
+49c0 98002400 iforce regb 
+49c1 68010d3f fetch 2 ,mem_dsc_info_data_pointer 
+49c2 1fe0fe01 add pdata ,1 ,pdata 
+49c3 98002200 iforce rega 
+49c4 20204b21 branch usb0_respond 
+
+dsc_info_set_current_data_len:
+49c5 68008c74 fetch 1 ,mem_usb_setup_blength 
+49c6 202049c0 branch dsc_info_set_data_size_completed 
+
+usb_set_high_addr:
+49c7 68108a04 hfetch 1 ,core_usb_addr 
+49c8 245a49cb ncall usb0_set_addr ,blank 
+49c9 700d4800 jam 0 ,mem_usb_set_high_addr_flag 
+49ca 20600000 rtn 
+
+usb0_set_addr:
+49cb 68108a04 hfetch 1 ,core_usb_addr 
+49cc 79207e07 set1 7 ,pdata 
+49cd 60108a04 hstore 1 ,core_usb_addr 
+49ce 20600000 rtn 
+
+dsc_config_info:
+49cf 58000b80 setarg mem_confdesc 
+49d0 68088b80 fetcht 1 ,mem_confdesc 
+49d1 202049ba branch dsc_info_set_data_len 
+
+dsc_string_info:
+49d2 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+49d3 1fe67c03 sub pdata ,3 ,null 
+49d4 24214984 nbranch usb0_force_stall ,positive 
+49d5 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+49d6 da200be4 arg mem_string0 ,rega 
+49d7 c0004b1e beq 0 ,usb0_respond_length 
+49d8 79200023 set1 mark_isstr ,mark 
+49d9 da200be9 arg mem_string1 ,rega 
+49da c000cb1e beq 1 ,usb0_respond_length 
+49db da200c07 arg mem_string2 ,rega 
+49dc c0014b1e beq 2 ,usb0_respond_length 
+49dd da200c47 arg mem_string3 ,rega 
+49de c001cb1e beq 3 ,usb0_respond_length 
+49df 20600000 rtn 
+
+dsc_hid_report_info:
+49e0 68010c72 fetch 2 ,mem_usb_setup_windex 
+49e1 c000c9e5 beq 1 ,dsc_hid_report_info0 
+49e2 68010b7c fetch 2 ,mem_hidreportdesc_kb 
+49e3 1fe22200 copy pdata ,rega 
+49e4 20204b1e branch usb0_respond_length 
+
+dsc_hid_report_info0:
+49e5 700d4501 jam 1 ,mem_usb_device_enumeration_endflag 
+49e6 700d3601 jam usb_got_report_req ,mem_usb_state 
+49e7 68010b7e fetch 2 ,mem_hidreportdesc_m 
+49e8 1fe22200 copy pdata ,rega 
+49e9 20204b1e branch usb0_respond_length 
+
+usb0_request_get_interface:
+49ea 68008c6b fetch 1 ,mem_usb0_state 
+49eb c0824984 bne dev_configured ,usb0_force_stall 
+49ec 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+49ed c0c0c984 bne in_interface ,usb0_force_stall 
+49ee 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+49ef c0804984 bne 0 ,usb0_force_stall 
+49f0 68008c71 fetch 1 ,mem_usb_setup_bvalueh 
+49f1 c0804984 bne 0 ,usb0_force_stall 
+49f2 68008c74 fetch 1 ,mem_usb_setup_blength 
+49f3 c080c984 bne 1 ,usb0_force_stall 
+49f4 68008c75 fetch 1 ,mem_usb_setup_blengthh 
+49f5 c0804984 bne 0 ,usb0_force_stall 
+49f6 68008c72 fetch 1 ,mem_usb_setup_windex 
+49f7 c0804984 bne 0 ,usb0_force_stall 
+49f8 68008c73 fetch 1 ,mem_usb_setup_windex + 1 
+49f9 c0804984 bne 0 ,usb0_force_stall 
+49fa da400001 arg 1 ,regb 
+49fb 20204a12 branch usb_send_zero_packet 
+
+usb0_request_get_status:
+49fc 68008c6b fetch 1 ,mem_usb0_state 
+49fd c0014984 beq dev_default ,usb0_force_stall 
+49fe 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+49ff c0804984 bne 0 ,usb0_force_stall 
+4a00 68008c71 fetch 1 ,mem_usb_setup_bvalueh 
+4a01 c0804984 bne 0 ,usb0_force_stall 
+4a02 68008c74 fetch 1 ,mem_usb_setup_blength 
+4a03 c0814984 bne 2 ,usb0_force_stall 
+4a04 68008c75 fetch 1 ,mem_usb_setup_blengthh 
+4a05 c0804984 bne 0 ,usb0_force_stall 
+4a06 68008c73 fetch 1 ,mem_usb_setup_windex + 1 
+4a07 c0804984 bne 0 ,usb0_force_stall 
+4a08 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+4a09 c0404a0d beq in_device ,usb0_get_status_in_device 
+4a0a c040ca18 beq in_interface ,usb0_get_status_in_interface 
+4a0b c0414a1c beq in_endpoint ,usb0_get_status_in_endpoint 
+4a0c 20204984 branch usb0_force_stall 
+
+usb0_get_status_in_device:
+4a0d 68008c72 fetch 1 ,mem_usb_setup_windex 
+4a0e c0804984 bne 0 ,usb0_force_stall 
+4a0f da400002 arg 2 ,regb 
+4a10 68008d39 fetch 1 ,mem_usb_remote_wakeup 
+4a11 c000ca16 beq 0x01 ,usb_send_two_packet 
+
+usb_send_zero_packet:
+4a12 da200c65 arg mem_usb_zero_packet ,rega 
+4a13 20204b21 branch usb0_respond 
+
+usb_send_ones_packet:
+4a14 da200c67 arg mem_usb_ones_packet ,rega 
+4a15 20204b21 branch usb0_respond 
+
+usb_send_two_packet:
+4a16 da200c69 arg mem_usb_two_packet ,rega 
+4a17 20204b21 branch usb0_respond 
+
+usb0_get_status_in_interface:
+4a18 68008c6b fetch 1 ,mem_usb0_state 
+4a19 c0824984 bne dev_configured ,usb0_force_stall 
+4a1a da400002 arg 2 ,regb 
+4a1b 20204a12 branch usb_send_zero_packet 
+
+usb0_get_status_in_endpoint:
+4a1c 68008c6b fetch 1 ,mem_usb0_state 
+4a1d c0824984 bne dev_configured ,usb0_force_stall 
+4a1e 68008c72 fetch 1 ,mem_usb_setup_windex 
+4a1f c040ca29 beq in_ep1 ,usb0_get_status_in_ep_in_ep1 
+4a20 c0414a2b beq in_ep2 ,usb0_get_status_in_ep_in_ep2 
+4a21 c041ca2d beq in_ep3 ,usb0_get_status_in_ep_in_ep3 
+4a22 1fe17e7f and_into 0x7f ,pdata 
+4a23 c0004a25 beq 0x00 ,usb0_get_status_in_ep_in_ep0 
+4a24 20204984 branch usb0_force_stall 
+
+usb0_get_status_in_ep_in_ep0:
+4a25 68008d3b fetch 1 ,mem_usb_ep0_stall_status 
+
+usb0_get_status_in_ep_in_ack:
+4a26 da400002 arg 2 ,regb 
+4a27 c000ca14 beq 1 ,usb_send_ones_packet 
+4a28 20204a12 branch usb_send_zero_packet 
+
+usb0_get_status_in_ep_in_ep1:
+4a29 68008d3c fetch 1 ,mem_usb_ep1_stall_status 
+4a2a 20204a26 branch usb0_get_status_in_ep_in_ack 
+
+usb0_get_status_in_ep_in_ep2:
+4a2b 68008d3d fetch 1 ,mem_usb_ep2_stall_status 
+4a2c 20204a26 branch usb0_get_status_in_ep_in_ack 
+
+usb0_get_status_in_ep_in_ep3:
+4a2d 68008d3e fetch 1 ,mem_usb_ep3_stall_status 
+4a2e 20204a26 branch usb0_get_status_in_ep_in_ack 
+
+usb_get_idle:
+4a2f 700d4c01 jam 1 ,mem_usb_idle_flag 
+4a30 da200d4d arg mem_usb_idle_rate ,rega 
+4a31 da400001 arg 1 ,regb 
+4a32 20204b21 branch usb0_respond 
+
+usb_get_report:
+4a33 68010c70 fetch 2 ,mem_usb_setup_bvalue 
+4a34 d84001ba arg pc_get_report ,temp 
+4a35 98467c00 isub temp ,null 
+4a36 2422c984 nbranch usb0_force_stall ,zero 
+4a37 793f8023 set0 mark_isstr ,mark 
+
+usb_get_report_dispose:
+4a38 68008d42 fetch 1 ,mem_usb0_data_ready_report 
+4a39 243a4a42 nbranch usb_get_report_data_success ,blank 
+4a3a 700cf600 jam pc_get_nondata ,mem_usb0_get_report_data 
+
+usb_get_report_send_data:
+4a3b 68008c74 fetch 1 ,mem_usb_setup_blength 
+4a3c 98002400 iforce regb 
+4a3d da200cf6 arg mem_usb0_get_report_data ,rega 
+4a3e 20404b21 call usb0_respond 
+
+usb_get_report_data_release:
+4a3f d8a00cf6 arg mem_usb0_get_report_data ,contw 
+4a40 df200008 arg 8 ,loopcnt 
+4a41 20207ec6 branch memset0 
+
+usb_get_report_data_success:
+4a42 700d4200 jam 0 ,mem_usb0_data_ready_report 
+4a43 700cf601 jam pc_get_data ,mem_usb0_get_report_data 
+4a44 20204a3b branch usb_get_report_send_data 
+
+usb_get_protocol_req:
+4a45 68008c74 fetch 1 ,mem_usb_setup_blength 
+4a46 c080c984 bne 1 ,usb0_force_stall 
+4a47 700d4b01 jam 1 ,mem_usb_get_protocol_flag 
+4a48 da400001 arg 1 ,regb 
+4a49 68008d49 fetch 1 ,mem_usb_set_protocol_value 
+4a4a c0004a4d beq 0 ,usb_get_report_protocol 
+4a4b c000ca4e beq 1 ,usb_get_boot_protocol 
+4a4c 20204a12 branch usb_send_zero_packet 
+
+usb_get_report_protocol:
+4a4d 20204a14 branch usb_send_ones_packet 
+
+usb_get_boot_protocol:
+4a4e 20204a12 branch usb_send_zero_packet 
+
+usb0_request_clear_feature:
+4a4f 68008c6b fetch 1 ,mem_usb0_state 
+4a50 c0824984 bne dev_configured ,usb0_force_stall 
+4a51 68008c74 fetch 1 ,mem_usb_setup_blength 
+4a52 c0804984 bne 0 ,usb0_force_stall 
+4a53 68008c75 fetch 1 ,mem_usb_setup_blengthh 
+4a54 c0804984 bne 0 ,usb0_force_stall 
+4a55 68008c71 fetch 1 ,mem_usb_setup_bvalueh 
+4a56 c0804984 bne 0 ,usb0_force_stall 
+4a57 68008c73 fetch 1 ,mem_usb_setup_windex + 1 
+4a58 c0804984 bne 0 ,usb0_force_stall 
+4a59 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+4a5a c0004a5e beq out_device ,usb0_request_clear_feature_out_device 
+4a5b c000ca66 beq out_interface ,usb0_request_clear_feature_out_interface 
+4a5c c0014a67 beq out_endpoint ,usb0_request_clear_feature_out_endpoint 
+4a5d 20204984 branch usb0_force_stall 
+
+usb0_request_clear_feature_out_device:
+4a5e 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4a5f c080c984 bne device_remote_wakeup ,usb0_force_stall 
+4a60 68108a00 hfetch 1 ,core_usb_config 
+4a61 793ffe07 set0 7 ,pdata 
+4a62 60108a00 hstore 1 ,core_usb_config 
+4a63 700d3900 jam 0 ,mem_usb_remote_wakeup 
+4a64 700d3a01 jam 1 ,mem_usb_clear_remote_wakeup 
+4a65 20204988 branch usb0_reply_zerolen 
+
+usb0_request_clear_feature_out_interface:
+4a66 20204984 branch usb0_force_stall 
+
+usb0_request_clear_feature_out_endpoint:
+4a67 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4a68 c0804984 bne endpoint_halt ,usb0_force_stall 
+4a69 68008c72 fetch 1 ,mem_usb_setup_windex 
+4a6a c040ca72 beq in_ep1 ,usb0_force_stall_ep1_in_off 
+4a6b c0414a75 beq in_ep2 ,usb0_force_stall_ep2_in_off 
+4a6c c041ca77 beq in_ep3 ,usb0_force_stall_ep3_in_off 
+4a6d 1fe17e7f and_into 0x7f ,pdata 
+4a6e c0004a70 beq 0x00 ,usb0_force_stall_ep0_in_off 
+4a6f 20204984 branch usb0_force_stall 
+
+usb0_force_stall_ep0_in_off:
+4a70 700d3b00 jam 0 ,mem_usb_ep0_stall_status 
+4a71 20204988 branch usb0_reply_zerolen 
+
+usb0_force_stall_ep1_in_off:
+4a72 700d3c00 jam 0 ,mem_usb_ep1_stall_status 
+
+usb0_force_stall_ep1_in_off_reply:
+4a73 700d5301 jam 1 ,mem_usb_clear_halt 
+4a74 20204988 branch usb0_reply_zerolen 
+
+usb0_force_stall_ep2_in_off:
+4a75 700d3d00 jam 0 ,mem_usb_ep2_stall_status 
+4a76 20204a73 branch usb0_force_stall_ep1_in_off_reply 
+
+usb0_force_stall_ep3_in_off:
+4a77 700d3e00 jam 0 ,mem_usb_ep3_stall_status 
+4a78 20204a73 branch usb0_force_stall_ep1_in_off_reply 
+
+usb0_request_set_feature:
+4a79 68008c74 fetch 1 ,mem_usb_setup_blength 
+4a7a c0804984 bne 0 ,usb0_force_stall 
+4a7b 68008c75 fetch 1 ,mem_usb_setup_blengthh 
+4a7c c0804984 bne 0 ,usb0_force_stall 
+4a7d 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+4a7e c0004a82 beq out_device ,usb0_request_set_feature_out_device 
+4a7f c000ca8f beq out_interface ,usb0_request_set_feature_out_interface 
+4a80 c0014a90 beq out_endpoint ,usb0_request_set_feature_out_endpoint 
+4a81 20204984 branch usb0_force_stall 
+
+usb0_request_set_feature_out_device:
+4a82 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4a83 c080c984 bne device_remote_wakeup ,usb0_force_stall 
+4a84 68108a00 hfetch 1 ,core_usb_config 
+4a85 79207e07 set1 7 ,pdata 
+4a86 60108a00 hstore 1 ,core_usb_config 
+4a87 700d3901 jam 1 ,mem_usb_remote_wakeup 
+4a88 700d3603 jam usb_sleep ,mem_usb_state 
+4a89 700d4300 jam 0 ,mem_usb_tx_win_enable 
+4a8a 20404988 call usb0_reply_zerolen 
+
+usb_wakeup_timer_reinit:
+4a8b 20407f15 call timer_reinit 
+4a8c 58001388 setarg timer_wakeup_delay 
+4a8d d8e0000f arg timer_wakeup ,queue 
+4a8e 20207f08 branch timer_init 
+
+usb0_request_set_feature_out_interface:
+4a8f 20204984 branch usb0_force_stall 
+
+usb0_request_set_feature_out_endpoint:
+4a90 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4a91 c0804984 bne endpoint_halt ,usb0_force_stall 
+4a92 68008c71 fetch 1 ,mem_usb_setup_bvalueh 
+4a93 c0804984 bne 0 ,usb0_force_stall 
+4a94 68008c72 fetch 1 ,mem_usb_setup_windex 
+4a95 c040ca9d beq in_ep1 ,usb0_force_stall_ep1_in_on 
+4a96 c0414a9f beq in_ep2 ,usb0_force_stall_ep2_in_on 
+4a97 c041caa1 beq in_ep3 ,usb0_force_stall_ep3_in_on 
+4a98 1fe17e7f and_into 0x7f ,pdata 
+4a99 c0004a9b beq 0x00 ,usb0_force_stall_ep0_in_on 
+4a9a 20204984 branch usb0_force_stall 
+
+usb0_force_stall_ep0_in_on:
+4a9b 700d3b01 jam 1 ,mem_usb_ep0_stall_status 
+4a9c 20204988 branch usb0_reply_zerolen 
+
+usb0_force_stall_ep1_in_on:
+4a9d 700d3c01 jam 1 ,mem_usb_ep1_stall_status 
+4a9e 20204988 branch usb0_reply_zerolen 
+
+usb0_force_stall_ep2_in_on:
+4a9f 700d3d01 jam 1 ,mem_usb_ep2_stall_status 
+4aa0 20204988 branch usb0_reply_zerolen 
+
+usb0_force_stall_ep3_in_on:
+4aa1 700d3e01 jam 1 ,mem_usb_ep3_stall_status 
+4aa2 20204988 branch usb0_reply_zerolen 
+
+usb0_request_set_address:
+4aa3 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+4aa4 c0804984 bne out_device ,usb0_force_stall 
+4aa5 68008c72 fetch 1 ,mem_usb_setup_windex 
+4aa6 c0804984 bne 0 ,usb0_force_stall 
+4aa7 68008c73 fetch 1 ,mem_usb_setup_windex + 1 
+4aa8 c0804984 bne 0 ,usb0_force_stall 
+4aa9 68008c74 fetch 1 ,mem_usb_setup_blength 
+4aaa c0804984 bne 0 ,usb0_force_stall 
+4aab 68008c75 fetch 1 ,mem_usb_setup_blengthh 
+4aac c0804984 bne 0 ,usb0_force_stall 
+4aad 68008c71 fetch 1 ,mem_usb_setup_bvalueh 
+4aae c0804984 bne 0 ,usb0_force_stall 
+4aaf 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4ab0 1fe17e80 and_into 0x80 ,pdata 
+4ab1 c0804984 bne 0 ,usb0_force_stall 
+4ab2 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4ab3 c0804aba bne 0 ,usb_usb0_state_set_dev_addr 
+
+usb_usb0_state_set_dev_default:
+4ab4 700c6b02 jam dev_default ,mem_usb0_state 
+
+usb0_request_set_wait_address:
+4ab5 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4ab6 60108a04 hstore 1 ,core_usb_addr 
+4ab7 20404988 call usb0_reply_zerolen 
+4ab8 700d4801 jam 1 ,mem_usb_set_high_addr_flag 
+4ab9 20600000 rtn 
+
+usb_usb0_state_set_dev_addr:
+4aba 700c6b03 jam dev_address ,mem_usb0_state 
+4abb 20204ab5 branch usb0_request_set_wait_address 
+
+usb0_request_set_configuration:
+4abc 68008c6b fetch 1 ,mem_usb0_state 
+4abd c0014984 beq dev_default ,usb0_force_stall 
+4abe 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+4abf c0804984 bne out_device ,usb0_force_stall 
+4ac0 68008c72 fetch 1 ,mem_usb_setup_windex 
+4ac1 c0804984 bne 0 ,usb0_force_stall 
+4ac2 68008c73 fetch 1 ,mem_usb_setup_windex + 1 
+4ac3 c0804984 bne 0 ,usb0_force_stall 
+4ac4 68008c74 fetch 1 ,mem_usb_setup_blength 
+4ac5 c0804984 bne 0 ,usb0_force_stall 
+4ac6 68008c75 fetch 1 ,mem_usb_setup_blengthh 
+4ac7 c0804984 bne 0 ,usb0_force_stall 
+4ac8 68008c71 fetch 1 ,mem_usb_setup_bvalue + 1 
+4ac9 c0804984 bne 0 ,usb0_force_stall 
+4aca 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4acb 1fe67c01 sub pdata ,usb_max_num_cfg ,null 
+4acc 24214984 nbranch usb0_force_stall ,positive 
+4acd 68008c6b fetch 1 ,mem_usb0_state 
+4ace c001cad1 beq dev_address ,usb0_request_set_cfg_addr_state 
+4acf c0024ad1 beq dev_configured ,usb0_request_set_cfg_cfg_state 
+4ad0 20204984 branch usb0_force_stall 
+
+usb0_request_set_cfg_addr_state:
+
+usb0_request_set_cfg_cfg_state:
+4ad1 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4ad2 c0004ad5 beq 0 ,usb0_request_set_cfg_stay_addr_state 
+4ad3 700c6b04 jam dev_configured ,mem_usb0_state 
+4ad4 20204988 branch usb0_reply_zerolen 
+
+usb0_request_set_cfg_stay_addr_state:
+4ad5 700c6b03 jam dev_address ,mem_usb0_state 
+4ad6 20204988 branch usb0_reply_zerolen 
+
+usb0_request_set_interface:
+4ad7 68008c6b fetch 1 ,mem_usb0_state 
+4ad8 c0824984 bne dev_configured ,usb0_force_stall 
+4ad9 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype 
+4ada c080c984 bne out_interface ,usb0_force_stall 
+4adb 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4adc c0804984 bne 0 ,usb0_force_stall 
+4add 68008c71 fetch 1 ,mem_usb_setup_bvalueh 
+4ade c0804984 bne 0 ,usb0_force_stall 
+4adf 68008c74 fetch 1 ,mem_usb_setup_blength 
+4ae0 c0804984 bne 0 ,usb0_force_stall 
+4ae1 68008c75 fetch 1 ,mem_usb_setup_blengthh 
+4ae2 c0804984 bne 0 ,usb0_force_stall 
+4ae3 68008c72 fetch 1 ,mem_usb_setup_windex 
+4ae4 c0804984 bne 0 ,usb0_force_stall 
+4ae5 68008c73 fetch 1 ,mem_usb_setup_windex + 1 
+4ae6 c0804984 bne 0 ,usb0_force_stall 
+4ae7 20204988 branch usb0_reply_zerolen 
+
+usb_set_idle:
+4ae8 700d4c01 jam 1 ,mem_usb_idle_flag 
+4ae9 68008c71 fetch 1 ,mem_usb_setup_bvalueh 
+4aea 60008d4d store 1 ,mem_usb_idle_rate 
+4aeb 68008c72 fetch 1 ,mem_usb_setup_windex 
+4aec 1fe67c01 sub pdata ,1 ,null 
+4aed 2042caf5 call usb_clear_remote_wakeup_set0 ,zero 
+4aee 68008d36 fetch 1 ,mem_usb_state 
+4aef c0824988 bne usb_resume ,usb0_reply_zerolen 
+4af0 700d3602 jam usb_connected ,mem_usb_state 
+4af1 20404988 call usb0_reply_zerolen 
+4af2 20007530 nop 30000 
+4af3 20007530 nop 30000 
+4af4 20600000 rtn 
+
+usb_clear_remote_wakeup_set0:
+4af5 700d4501 jam 1 ,mem_usb_device_enumeration_endflag 
+4af6 700d3a00 jam 0 ,mem_usb_clear_remote_wakeup 
+4af7 700d3604 jam usb_resume ,mem_usb_state 
+4af8 20600000 rtn 
+
+usb_set_report:
+4af9 700d5001 jam 1 ,mem_usb0_get_set_report 
+4afa 20404b03 call usb_set_report_resume_judge 
+4afb 68010c70 fetch 2 ,mem_usb_setup_bvalue 
+4afc 60010d4e store 2 ,mem_usb_setup_bvalue_temp 
+4afd 68008c74 fetch 1 ,mem_usb_setup_blength 
+4afe 98007200 iforce loopcnt 
+4aff d8c00c76 arg mem_usb0_setup ,contr 
+4b00 d8a00cb6 arg mem_usb0_set_report_data ,contw 
+4b01 20407f01 call memcpy 
+4b02 20204988 branch usb0_reply_zerolen 
+
+usb_set_report_resume_judge:
+4b03 68010c70 fetch 2 ,mem_usb_setup_bvalue 
+4b04 d8400200 arg pc_set_report_bvalue ,temp 
+4b05 98467c00 isub temp ,null 
+4b06 24628000 nrtn zero 
+4b07 68010c72 fetch 2 ,mem_usb_setup_windex 
+4b08 d8400000 arg pc_set_report_windex ,temp 
+4b09 98467c00 isub temp ,null 
+4b0a 24628000 nrtn zero 
+4b0b 68010c74 fetch 2 ,mem_usb_setup_blength 
+4b0c d8400001 arg pc_set_report_blength ,temp 
+4b0d 98467c00 isub temp ,null 
+4b0e 24628000 nrtn zero 
+4b0f 700d4301 jam 1 ,mem_usb_tx_win_enable 
+4b10 20600000 rtn 
+
+usb_set_protocol_req:
+4b11 68008c74 fetch 1 ,mem_usb_setup_blength 
+4b12 c0804984 bne 0 ,usb0_force_stall 
+4b13 68008c70 fetch 1 ,mem_usb_setup_bvalue 
+4b14 c0004b17 beq boot_protocol ,usb_set_boot_protocol 
+4b15 c000cb1a beq report_protocol ,usb_set_report_protocol 
+4b16 20204984 branch usb0_force_stall 
+
+usb_set_boot_protocol:
+4b17 700d4a00 jam 0 ,mem_usb_set_protocol_status 
+4b18 700d4901 jam 1 ,mem_usb_set_protocol_value 
+4b19 20204988 branch usb0_reply_zerolen 
+
+usb_set_report_protocol:
+4b1a 700d4401 jam 1 ,mem_usb_tx_mac_enable 
+4b1b 700d4a01 jam 1 ,mem_usb_set_protocol_status 
+4b1c 700d4900 jam 0 ,mem_usb_set_protocol_value 
+4b1d 20204988 branch usb0_reply_zerolen 
+
+usb0_respond_length:
+4b1e ea208000 ifetch 1 ,rega 
+4b1f 98002400 iforce regb 
+4b20 1a20a201 increase 1 ,rega 
+
+usb0_respond:
+4b21 44fd401f bpatch patch1f_2 ,mem_patch1f 
+4b22 c591cb2c bmark0 mark_isstr ,usb0_respond0 
+4b23 1a40fe01 add regb ,1 ,pdata 
+4b24 1fe3fe00 lshift pdata ,pdata 
+4b25 60108a18 hstore 1 ,core_usb_dfifo0 
+4b26 708a1803 jam 3 ,core_usb_dfifo0 
+4b27 68008c74 fetch 1 ,mem_usb_setup_blength 
+4b28 1fe0fffe increase -2 ,pdata 
+4b29 1fe37e00 rshift pdata ,pdata 
+4b2a 60008c74 store 1 ,mem_usb_setup_blength 
+4b2b c0004b35 beq 0 ,usb_no_respond_data 
+
+usb0_respond0:
+4b2c 68010c74 fetch 2 ,mem_usb_setup_blength 
+4b2d 9a467c00 isub regb ,null 
+4b2e 20214b30 branch usb0_respond1 ,positive 
+4b2f 1fe22400 copy pdata ,regb 
+
+usb0_respond1:
+4b30 1a227e00 deposit rega 
+4b31 60010b65 store 2 ,mem_bufptr 
+4b32 1a427e00 deposit regb 
+4b33 60008b67 store 1 ,mem_remain 
+4b34 20204b37 branch usb0_tx 
+
+usb_no_respond_data:
+4b35 d8e00000 arg 0 ,queue 
+4b36 20204b57 branch usb_trig 
+
+usb0_tx:
+4b37 44fdc01f bpatch patch1f_3 ,mem_patch1f 
+4b38 68008b67 fetch 1 ,mem_remain 
+4b39 207a0000 rtn blank 
+4b3a 1fe27200 copy pdata ,loopcnt 
+4b3b 1fe67c40 sub pdata ,ep0_packet_size ,null 
+4b3c 20214b3e branch usb0_tx_info ,positive 
+4b3d df200040 arg ep0_packet_size ,loopcnt 
+
+usb0_tx_info:
+4b3e 68008b67 fetch 1 ,mem_remain 
+4b3f 9f267e00 isub loopcnt ,pdata 
+4b40 60008b67 store 1 ,mem_remain 
+4b41 68010b65 fetch 2 ,mem_bufptr 
+4b42 1fe20c00 copy pdata ,contr 
+
+usb0_tx0:
+4b43 e8c08000 ifetch 1 ,contr 
+4b44 60108a18 hstore 1 ,core_usb_dfifo0 
+4b45 c591cb47 bmark0 mark_isstr ,usb0_tx1 
+4b46 708a1800 jam 0 ,core_usb_dfifo0 
+
+usb0_tx1:
+4b47 c2004b43 loop usb0_tx0 
+4b48 18c27e00 copy contr ,pdata 
+4b49 60010b65 store 2 ,mem_bufptr 
+4b4a d8e00000 arg 0 ,queue 
+4b4b 20404b57 call usb_trig 
+4b4c 68008b67 fetch 1 ,mem_remain 
+4b4d 247a0000 nrtn blank 
+4b4e 68008d36 fetch 1 ,mem_usb_state 
+4b4f c1808000 rtnne usb_got_report_req 
+4b50 700d3602 jam usb_connected ,mem_usb_state 
+4b51 20600000 rtn 
+
+usb_tx_ep1:
+4b52 da208a19 arg core_usb_dfifo1 ,rega 
+4b53 d8e00001 arg 1 ,queue 
+
+usb_tx_loop:
+4b54 e8c08000 ifetch 1 ,contr 
+4b55 e2208000 istore 1 ,rega 
+4b56 c2004b54 loop usb_tx_loop 
+
+usb_trig:
+4b57 58000000 setarg 0 
+4b58 f9207e00 qset1 pdata 
+4b59 60108a10 hstore 1 ,core_usb_trig 
+4b5a 68088d37 fetcht 1 ,mem_usb_tx_wait 
+4b5b 9841fe00 ior temp ,pdata 
+4b5c 60008d37 store 1 ,mem_usb_tx_wait 
+4b5d 20600000 rtn 
+
+usb_tx_ep2:
+4b5e d8e00002 arg 2 ,queue 
+4b5f da208a1a arg core_usb_dfifo2 ,rega 
+4b60 20204b54 branch usb_tx_loop 
+
+usb_tx:
+4b61 44fe401f bpatch patch1f_4 ,mem_patch1f 
+4b62 68008d38 fetch 1 ,mem_usb_tx_enable 
+4b63 207a0000 rtn blank 
+4b64 68008d37 fetch 1 ,mem_usb_tx_wait 
+4b65 243a4bac nbranch usb_inwake_state_tx_dispose ,blank 
+4b66 68008d45 fetch 1 ,mem_usb_device_enumeration_endflag 
+4b67 203a4b86 branch usb_tx_fifo_release ,blank 
+4b68 68008d36 fetch 1 ,mem_usb_state 
+4b69 c001cbbf beq usb_sleep ,usb_windows_wakeup 
+4b6a c0814b86 bne usb_connected ,usb_tx_fifo_release 
+4b6b 68008d3a fetch 1 ,mem_usb_clear_remote_wakeup 
+4b6c 243a4b86 nbranch usb_tx_fifo_release ,blank 
+4b6d 20404b6f call usb_tx_data_ep1 
+4b6e 20204b7a branch usb_tx_data_ep2 
+
+usb_tx_data_ep1:
+4b6f 68008d38 fetch 1 ,mem_usb_tx_enable 
+4b70 c4008000 rtnbit0 1 
+4b71 68008d37 fetch 1 ,mem_usb_tx_wait 
+4b72 c3808000 rtnbit1 1 
+4b73 68008d38 fetch 1 ,mem_usb_tx_enable 
+4b74 793ffe01 set0 1 ,pdata 
+4b75 60008d38 store 1 ,mem_usb_tx_enable 
+4b76 68008d51 fetch 1 ,mem_usb_ep1_data 
+4b77 207a0000 rtn blank 
+4b78 c0084ba8 beq usb_ep1_kb ,usb_tx_kb_normal_data 
+4b79 20202a8c branch assert 
+
+usb_tx_data_ep2:
+4b7a 68008d38 fetch 1 ,mem_usb_tx_enable 
+4b7b c4010000 rtnbit0 2 
+4b7c 68008d37 fetch 1 ,mem_usb_tx_wait 
+4b7d c3810000 rtnbit1 2 
+4b7e 68008d38 fetch 1 ,mem_usb_tx_enable 
+4b7f 793ffe02 set0 2 ,pdata 
+4b80 60008d38 store 1 ,mem_usb_tx_enable 
+4b81 68008d52 fetch 1 ,mem_usb_ep2_data 
+4b82 207a0000 rtn blank 
+4b83 c0104b89 beq usb_ep2_ms ,usb_tx_ms_data 
+4b84 c010cba4 beq usb_ep2_multikey ,usb_tx_kb_multikey_data 
+4b85 20202a8c branch assert 
+
+usb_tx_fifo_release:
+4b86 d8a00d54 arg mem_usb_mouse_data ,contw 
+4b87 df200006 arg 6 ,loopcnt 
+4b88 20207ec6 branch memset0 
+
+usb_tx_ms_data:
+4b89 68008d4c fetch 1 ,mem_usb_idle_flag 
+4b8a 68088d4b fetcht 1 ,mem_usb_get_protocol_flag 
+4b8b 98417e00 iand temp ,pdata 
+4b8c 203a4ba0 branch usb_tx_ms_data_normal_mode ,blank 
+4b8d 68088d4a fetcht 1 ,mem_usb_set_protocol_status 
+4b8e 9840fe00 iadd temp ,pdata 
+4b8f c000cb91 beq mac_boot_mode ,usb_tx_ms_data_mac_boot_mode 
+4b90 20204ba0 branch usb_tx_ms_data_normal_mode 
+
+usb_tx_ms_data_mac_boot_mode:
+4b91 700d5200 jam 0 ,mem_usb_ep2_data 
+
+usb_tx_ms_data_mac_boot_regroup:
+4b92 68008d55 fetch 1 ,mem_usb_mouse_data + 1 
+4b93 c0014ba1 beq r_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey 
+4b94 c001cba1 beq lr_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey 
+4b95 68008d55 fetch 1 ,mem_usb_mouse_data + 1 
+4b96 60008d54 store 1 ,mem_usb_mouse_data 
+4b97 68008d56 fetch 1 ,mem_usb_mouse_data + 2 
+4b98 e0a08000 istore 1 ,contw 
+4b99 68008d58 fetch 1 ,mem_usb_mouse_data + 4 
+4b9a e0a08000 istore 1 ,contw 
+4b9b 68008d5a fetch 1 ,mem_usb_mouse_data + 6 
+4b9c e0a08000 istore 1 ,contw 
+4b9d df200004 arg 4 ,loopcnt 
+4b9e d8c00d54 arg mem_usb_mouse_data ,contr 
+4b9f 20204b5e branch usb_tx_ep2 
+
+usb_tx_ms_data_normal_mode:
+4ba0 700d5200 jam 0 ,mem_usb_ep2_data 
+
+usb_tx_mac_boot_ms_regroup_r_or_lrkey:
+4ba1 df200008 arg 8 ,loopcnt 
+4ba2 d8c00d54 arg mem_usb_mouse_data ,contr 
+4ba3 20204b5e branch usb_tx_ep2 
+
+usb_tx_kb_multikey_data:
+4ba4 700d5200 jam 0 ,mem_usb_ep2_data 
+4ba5 df200003 arg 3 ,loopcnt 
+4ba6 d8c00d74 arg mem_usb_kb_multikey ,contr 
+4ba7 20204b5e branch usb_tx_ep2 
+
+usb_tx_kb_normal_data:
+4ba8 700d5100 jam 0 ,mem_usb_ep1_data 
+4ba9 df200008 arg 8 ,loopcnt 
+4baa d8c00d64 arg mem_usb_kb_data ,contr 
+4bab 20204b52 branch usb_tx_ep1 
+
+usb_inwake_state_tx_dispose:
+4bac 68008d36 fetch 1 ,mem_usb_state 
+4bad c001cbb0 beq usb_sleep ,usb_clear_tx_wait 
+4bae c0014bb2 beq usb_connected ,usb_mac_wakeup_trig 
+4baf 20600000 rtn 
+
+usb_clear_tx_wait:
+4bb0 700d3700 jam 0 ,mem_usb_tx_wait 
+4bb1 20600000 rtn 
+
+usb_mac_wakeup_trig:
+4bb2 68108a00 hfetch 1 ,core_usb_config 
+4bb3 79207e07 set1 7 ,pdata 
+4bb4 60108a00 hstore 1 ,core_usb_config 
+4bb5 700d4701 jam 1 ,mem_usb_mac_wakeup_trig 
+4bb6 20600000 rtn 
+
+usb_mac_wakeup_judge:
+4bb7 68008d36 fetch 1 ,mem_usb_state 
+4bb8 c1018000 rtneq usb_sleep 
+4bb9 c0014bbb beq usb_connected ,usb_mac_wakeup 
+4bba 20600000 rtn 
+
+usb_mac_wakeup:
+4bbb 68008d47 fetch 1 ,mem_usb_mac_wakeup_trig 
+4bbc 207a0000 rtn blank 
+4bbd 700d4601 jam 1 ,mem_usb_wakestate_onetime_flag 
+4bbe 20204bc2 branch usb_wakeup 
+
+usb_windows_wakeup:
+4bbf d8e0000f arg timer_wakeup ,queue 
+4bc0 20407f16 call timer_check 
+4bc1 247a0000 nrtn blank 
+
+usb_wakeup:
+4bc2 68108a00 hfetch 1 ,core_usb_config 
+4bc3 c4038000 rtnbit0 7 
+4bc4 708a00fc jam 0xfc ,core_usb_config 
+4bc5 20007530 nop 30000 
+4bc6 708a003c jam 0x3c ,core_usb_config 
+4bc7 20600000 rtn 
+
+hci_rx_h4:
+4bc8 44fec01f bpatch patch1f_5 ,mem_patch1f 
+4bc9 6800c1ce fetch 1 ,mem_hci_cmd 
+4bca 247a0000 nrtn blank 
+
+hci_rx_h4_1:
+4bcb 20404bce call hci_h4_parse_packet 
+4bcc 24544be6 ncall h4_rx_discard_packet ,user 
+4bcd 20600000 rtn 
+
+hci_h4_parse_packet:
+4bce 44ff401f bpatch patch1f_6 ,mem_patch1f 
+4bcf 18622200 copy contru ,rega 
+4bd0 d8400004 arg 4 ,temp 
+4bd1 e8608000 ifetch 1 ,contru 
+4bd2 c000cbd8 beq hci_h4_type_cmd ,hci_h4_parse_packet_wait_len 
+4bd3 18408401 increase 1 ,temp 
+4bd4 c0014bd8 beq hci_h4_type_acl ,hci_h4_parse_packet_wait_len 
+4bd5 18627e00 copy contru ,pdata 
+4bd6 60110058 hstore 2 ,core_uart_rrptr 
+4bd7 20600000 rtn 
+
+hci_h4_parse_packet_wait_len:
+4bd8 68110112 hfetch 2 ,core_uart_rxitems 
+4bd9 98467c00 isub temp ,null 
+4bda 24214bd8 nbranch hci_h4_parse_packet_wait_len ,positive 
+4bdb 78547c00 disable user 
+4bdc 1a220600 copy rega ,contru 
+4bdd 20404bee call h4_get_rx_payload_len 
+4bde 98408400 iadd temp ,temp 
+
+hci_h4_parse_packet_wait:
+4bdf 68110112 hfetch 2 ,core_uart_rxitems 
+4be0 98467c00 isub temp ,null 
+4be1 24214bdf nbranch hci_h4_parse_packet_wait ,positive 
+4be2 1a220600 copy rega ,contru 
+4be3 e8608000 ifetch 1 ,contru 
+4be4 c000cc3f beq hci_h4_type_cmd ,process_hci_cmd 
+4be5 20202a8c branch assert 
+
+h4_rx_discard_packet:
+4be6 44ffc01f bpatch patch1f_7 ,mem_patch1f 
+4be7 68110058 hfetch 2 ,core_uart_rrptr 
+4be8 98000600 iforce contru 
+4be9 20404bee call h4_get_rx_payload_len 
+4bea 98608600 iadd contru ,contru 
+4beb 18627e00 deposit contru 
+4bec 60110058 hstore 2 ,core_uart_rrptr 
+4bed 20600000 rtn 
+
+h4_get_rx_payload_len:
+4bee e8608000 ifetch 1 ,contru 
+4bef 18608602 increase 2 ,contru 
+4bf0 c0014bf3 beq hci_h4_type_acl ,h4_get_rx_payload_len_acl 
+4bf1 e8608000 ifetch 1 ,contru 
+4bf2 20600000 rtn 
+
+h4_get_rx_payload_len_acl:
+4bf3 e8610000 ifetch 2 ,contru 
+4bf4 20600000 rtn 
+
+h4_get_tx_ptr:
+4bf5 6811005e hfetch 2 ,core_uart_twptr 
+4bf6 194095fb increase -5 ,contwu 
+4bf7 99409400 iadd contwu ,contwu 
+4bf8 20600000 rtn 
+
+h4_send_packet_event:
+4bf9 d8400004 arg hci_h4_type_event ,temp 
+4bfa 20204bfc branch h4_send_packet 
+
+h4_send_packet_acl:
+4bfb d8400002 arg hci_h4_type_acl ,temp 
+
+h4_send_packet:
+4bfc 47004020 bpatchx patch20_0 ,mem_patch20 
+4bfd 1f20f201 increase 1 ,loopcnt 
+4bfe 6811005e hfetch 2 ,core_uart_twptr 
+4bff 1fe21400 copy pdata ,contwu 
+4c00 1f227e00 copy loopcnt ,pdata 
+4c01 e1488000 istoret 1 ,contwu 
+4c02 1fe0ffff increase -1 ,pdata 
+4c03 99409400 iadd contwu ,contwu 
+4c04 19427e00 copy contwu ,pdata 
+4c05 60010258 store 2 ,mem_hci_acl_tx_trigger_wptr 
+4c06 18427e00 copy temp ,pdata 
+4c07 c1010000 rtneq hci_h4_type_acl 
+4c08 68010258 fetch 2 ,mem_hci_acl_tx_trigger_wptr 
+4c09 6011005e hstore 2 ,core_uart_twptr 
+4c0a 20204c0b branch h4_send_acl_trigger_clear 
+
+h4_send_acl_trigger_clear:
+4c0b 58000000 setarg 0 
+4c0c 60010258 store 2 ,mem_hci_acl_tx_trigger_wptr 
+4c0d 20600000 rtn 
+
+hci_init:
+4c0e 20758000 rtn wake 
+4c0f 58004d28 setarg hci_idle_dispatch 
+4c10 600141f3 store 2 ,mem_cb_idle_process 
+4c11 580001a0 setarg uart_baud_115200 
+4c12 60014243 store uart_baud_len ,mem_baud 
+
+hci_lpm_init:
+4c13 58001800 setarg mem_h5rx_buf 
+4c14 60110054 hstore 2 ,core_uart_rsaddr 
+4c15 58001bff setarg mem_h5rx_buf_end 
+4c16 60110056 hstore 2 ,core_uart_readdr 
+4c17 58001c00 setarg mem_h5tx_buf 
+4c18 6011005a hstore 2 ,core_uart_tsaddr 
+4c19 20404c28 call hci_sel_init 
+
+hci_reinit:
+4c1a 70806200 jam 0x0 ,core_uart_ctrl 
+4c1b 58001c00 setarg mem_h5tx_buf 
+4c1c 6011005e hstore 2 ,core_uart_twptr 
+4c1d 60110060 hstore 2 ,core_uart_trptrp 
+4c1e 58001800 setarg mem_h5rx_buf 
+4c1f 60110058 hstore 2 ,core_uart_rrptr 
+4c20 60010244 store 2 ,mem_h5rx_rptr 
+
+hci_init_common:
+4c21 68110050 hfetch 2 ,core_clkoff 
+4c22 793ffe0f set0 clock_off_uart ,pdata 
+4c23 60110050 hstore 2 ,core_clkoff 
+4c24 204066ce call uart_set_baud_by_mem 
+4c25 70804301 jam uartclk_dpll ,core_uart_clksel 
+4c26 70806281 jam uart_ctrl_h4 ,core_uart_ctrl 
+4c27 20600000 rtn 
+
+hci_sel_init:
+4c28 58001fff setarg mem_h5tx_buf_end 
+4c29 6011005c hstore 2 ,core_uart_teaddr 
+4c2a 68108081 hfetch 1 ,core_gpio_sel1 
+4c2b 1fe1fe07 or_into 0x07 ,pdata 
+4c2c 60108081 hstore 1 ,core_gpio_sel1 
+4c2d 20600000 rtn 
+
+hci_rx_packet:
+4c2e 4700c020 bpatchx patch20_1 ,mem_patch20 
+4c2f 6810810c hfetch 1 ,core_uart_status 
+4c30 98002400 iforce regb 
+4c31 c301cc37 bbit0 uart_status_rx_fifo_empty ,hci_rx_packet_cont 
+4c32 68110112 hfetch 2 ,core_uart_rxitems 
+4c33 98002600 iforce regc 
+4c34 d840044f arg 0x44f ,temp 
+4c35 98467c00 isub temp ,null 
+4c36 24628000 nrtn zero 
+
+hci_rx_packet_cont:
+4c37 68110058 hfetch 2 ,core_uart_rrptr 
+4c38 98000600 iforce contru 
+4c39 20204bc8 branch hci_rx_h4 
+
+uart_send_byte:
+4c3a 6818810c hfetcht 1 ,core_uart_status 
+4c3b 284ffe06 isolate1 6 ,temp 
+4c3c 2020cc3a branch uart_send_byte ,true 
+4c3d 60108015 hstore 1 ,core_uart_txd 
+4c3e 20600000 rtn 
+
+process_hci_cmd:
+4c3f 47014020 bpatchx patch20_2 ,mem_patch20 
+4c40 6800c1ce fetch 1 ,mem_hci_cmd 
+4c41 203a4c44 branch process_hci_cmd_cont ,blank 
+4c42 78347c00 enable user 
+4c43 20600000 rtn 
+
+process_hci_cmd_cont:
+4c44 e8610000 ifetch 2 ,contru 
+4c45 98006000 iforce alarm 
+4c46 98000e00 iforce queue 
+4c47 e8608000 ifetch 1 ,contru 
+4c48 98000400 iforce temp 
+4c49 1e0b7e00 rshift2 alarm ,pdata 
+4c4a 1fecfe00 rshift8 pdata ,pdata 
+4c4b c01fcc4d beq hci_ogf_vendor_specific ,phci_grp_vendor_specific 
+4c4c 20600000 rtn 
+
+phci_grp_vendor_specific:
+4c4d 4701c020 bpatchx patch20_3 ,mem_patch20 
+4c4e 18e27e00 deposit queue 
+4c4f c0004cdc beq hci_vendor_cmd_reset ,hci_normal_reply 
+4c50 c000cc66 beq hci_vendor_cmd_chipid ,phci_grp_vendor_chipid 
+4c51 c0014c6b beq hci_vendor_cmd_baud ,phci_grp_vendor_baud 
+4c52 c001cc7a beq hci_vendor_cmd_patch ,phci_grp_vendor_patch 
+4c53 c0024cb3 beq hci_vendor_cmd_patch_done ,phci_grp_vendor_done 
+4c54 c002ccdc beq hci_vendor_cmd_echo ,hci_normal_reply 
+4c55 c0034cc6 beq hci_vendor_cmd_bdaddr ,phci_grp_vendor_bdaddr 
+4c56 c003cc5c beq hci_vendor_cmd_enter_lpm ,phci_grp_vendor_enter_lpm 
+4c57 c0084cc9 beq hci_vendor_cmd_mem ,phci_grp_vendor_mem 
+4c58 c008ccd1 beq hci_vendor_cmd_eep ,phci_grp_vendor_eep 
+4c59 c0094ca5 beq hci_vendor_cmd_patch_sec_init ,phci_grp_vendor_patch_sec_init 
+4c5a c009cc85 beq hci_vendor_cmd_patch_sec ,phci_grp_vendor_patch_sec 
+4c5b 20204cdc branch hci_normal_reply 
+
+phci_grp_vendor_enter_lpm:
+4c5c 20404cdc call hci_normal_reply 
+4c5d 20407f9e call wait_uarttx 
+4c5e 2040688c call gpio_pu_uart_tx 
+
+hci_enter_lpm:
+4c5f 204033d2 call app_put_lpm_wake_lock 
+4c60 204033d9 call app_l2cap_flow_control_enable 
+4c61 2020688f branch gpio_rx_config_input_with_pu 
+
+hci_exit_lpm:
+4c62 70424500 jam hci_rx_ready ,mem_hci_lt_rx_state 
+4c63 204033d0 call app_get_lpm_wake_lock 
+4c64 20404c13 call hci_lpm_init 
+4c65 202033db branch app_l2cap_flow_control_disable 
+
+phci_grp_vendor_chipid:
+4c66 20404cf2 call hci_get_cmd_complete_ptr 
+4c67 68110000 hfetch 2 ,core_chipid 
+4c68 e1410000 istore 2 ,contwu 
+4c69 18007206 force 6 ,loopcnt 
+4c6a 20204cdd branch hci_command_complete 
+
+phci_grp_vendor_baud:
+4c6b e8610000 ifetch 2 ,contru 
+4c6c 60014243 store 2 ,mem_baud 
+4c6d 60110052 hstore 2 ,core_uart_baud 
+4c6e 20600000 rtn 
+
+phci_grp_vendor_patch_common:
+4c6f e8608000 ifetch 1 ,contru 
+4c70 1fe20400 copy pdata ,temp 
+4c71 60108024 hstore 1 ,core_ucode_low 
+4c72 e8608000 ifetch 1 ,contru 
+4c73 98408400 iadd temp ,temp 
+4c74 79207e07 set1 7 ,pdata 
+4c75 60108023 hstore 1 ,core_ucode_ctrl 
+4c76 e8608000 ifetch 1 ,contru 
+4c77 98408400 iadd temp ,temp 
+4c78 1fe27200 copy pdata ,loopcnt 
+4c79 20600000 rtn 
+
+phci_grp_vendor_patch:
+4c7a c515ccc4 bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad 
+4c7b 20404c6f call phci_grp_vendor_patch_common 
+
+phci_grp_vendor_patch_loop:
+4c7c e8608000 ifetch 1 ,contru 
+4c7d 60108025 hstore 1 ,core_ucode_data 
+4c7e 98408400 iadd temp ,temp 
+4c7f c2004c7c loop phci_grp_vendor_patch_loop 
+
+phci_grp_vendor_patch_check_sum:
+4c80 184104ff and temp ,0xff ,temp 
+4c81 e8608000 ifetch 1 ,contru 
+4c82 98467c00 isub temp ,null 
+4c83 2422ccc4 nbranch phci_grp_vendor_patch_bad ,zero 
+4c84 20204cdc branch hci_normal_reply 
+
+phci_grp_vendor_patch_sec:
+4c85 c595ccc4 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad 
+4c86 20404c6f call phci_grp_vendor_patch_common 
+4c87 60040a9a store 8 ,mem_pdatatemp 
+
+phci_grp_vendor_patch_sec_loop:
+4c88 20407422 call do_aes_cbc 
+4c89 df200010 arg 16 ,loopcnt 
+4c8a d8a00ac2 arg mem_temp_block0 ,contw 
+4c8b 20404ca0 call load_uart_sum_loop 
+4c8c 600c0aa2 storet 8 ,mem_temp 
+4c8d d8a00ad2 arg mem_temp_block2 ,contw 
+4c8e 20407497 call store_aes_result 
+4c8f da200ad2 arg mem_temp_block2 ,rega 
+4c90 da400ac2 arg mem_temp_block0 ,regb 
+4c91 d8a00ae2 arg mem_temp_block3 ,contw 
+4c92 20407352 call xor16 
+4c93 df200010 arg 16 ,loopcnt 
+4c94 d8c00ae2 arg mem_temp_block3 ,contr 
+4c95 20404c9c call load_ucode_only_loop 
+4c96 680c0aa2 fetcht 8 ,mem_temp 
+4c97 68040a9a fetch 8 ,mem_pdatatemp 
+4c98 1fe0fff0 increase -16 ,pdata 
+4c99 60040a9a store 8 ,mem_pdatatemp 
+4c9a 243a4c88 nbranch phci_grp_vendor_patch_sec_loop ,blank 
+4c9b 20204c80 branch phci_grp_vendor_patch_check_sum 
+
+load_ucode_only_loop:
+4c9c e8c08000 ifetch 1 ,contr 
+4c9d 60108025 hstore 1 ,core_ucode_data 
+4c9e c2004c9c loop load_ucode_only_loop 
+4c9f 20600000 rtn 
+
+load_uart_sum_loop:
+4ca0 e8608000 ifetch 1 ,contru 
+4ca1 e0a08000 istore 1 ,contw 
+4ca2 98408400 iadd temp ,temp 
+4ca3 c2004ca0 loop load_uart_sum_loop 
+4ca4 20600000 rtn 
+
+phci_grp_vendor_patch_sec_init:
+4ca5 c595ccc4 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad 
+4ca6 d8400000 arg 0 ,temp 
+4ca7 df200010 arg 16 ,loopcnt 
+4ca8 d8a00ac2 arg mem_temp_block0 ,contw 
+4ca9 20404ca0 call load_uart_sum_loop 
+4caa 68108085 hfetch 1 ,core_gpio_key2 
+4cab 1fe17efd and_into 0xfd ,pdata 
+4cac 60108085 hstore 1 ,core_gpio_key2 
+4cad d8c00ac2 arg mem_temp_block0 ,contr 
+4cae df200010 arg 16 ,loopcnt 
+4caf 20407478 call aes_load_data 
+4cb0 20407428 call aes_init 
+4cb1 20407491 call aes_clear_data 
+4cb2 20204c80 branch phci_grp_vendor_patch_check_sum 
+
+phci_grp_vendor_done:
+4cb3 df200020 arg 0x20 ,loopcnt 
+4cb4 d8a04000 arg mem_patch00 ,contw 
+4cb5 d8400000 arg 0 ,temp 
+
+phci_grp_vendor_done_loop:
+4cb6 e8608000 ifetch 1 ,contru 
+4cb7 e0a08000 istore 1 ,contw 
+4cb8 98408400 iadd temp ,temp 
+4cb9 c2004cb6 loop phci_grp_vendor_done_loop 
+4cba 184104ff and temp ,0xff ,temp 
+4cbb e8608000 ifetch 1 ,contru 
+4cbc 98467c00 isub temp ,null 
+4cbd 2422ccc4 nbranch phci_grp_vendor_patch_bad ,zero 
+4cbe 70802300 jam 0 ,core_ucode_ctrl 
+4cbf 20404cdc call hci_normal_reply 
+4cc0 20404be6 call h4_rx_discard_packet 
+4cc1 204064a3 call clear_key_buf 
+4cc2 20407f9e call wait_uarttx 
+4cc3 20202001 branch soft_reset 
+
+phci_grp_vendor_patch_bad:
+4cc4 70802300 jam 0 ,core_ucode_ctrl 
+4cc5 20202000 branch start 
+
+phci_grp_vendor_bdaddr:
+4cc6 e8630000 ifetch 6 ,contru 
+4cc7 600340a0 store 6 ,mem_lap 
+4cc8 20204cdc branch hci_normal_reply 
+
+phci_grp_vendor_mem:
+4cc9 e8608000 ifetch 1 ,contru 
+4cca 6000825a store 1 ,mem_hci_curr_len 
+4ccb 1fe27200 copy pdata ,loopcnt 
+4ccc e8610000 ifetch 2 ,contru 
+4ccd 6001025b store 2 ,mem_hci_curr_target 
+4cce 1fe20a00 copy pdata ,contw 
+4ccf 204066fd call uart_copy_rx_bytes 
+4cd0 20204cdc branch hci_normal_reply 
+
+phci_grp_vendor_eep:
+4cd1 e8608000 ifetch 1 ,contru 
+4cd2 6000825a store 1 ,mem_hci_curr_len 
+4cd3 1fe27200 copy pdata ,loopcnt 
+4cd4 e8610000 ifetch 2 ,contru 
+4cd5 6001025b store 2 ,mem_hci_curr_target 
+4cd6 d8a01000 arg mem_l2cap_rxbuff1 ,contw 
+4cd7 204066fd call uart_copy_rx_bytes 
+4cd8 6808825a fetcht 1 ,mem_hci_curr_len 
+4cd9 da201000 arg mem_l2cap_rxbuff1 ,rega 
+4cda 6801025b fetch 2 ,mem_hci_curr_target 
+4cdb 20206608 branch iicd_write_ota_data 
+
+hci_normal_reply:
+4cdc 18007204 force 4 ,loopcnt 
+
+hci_command_complete:
+4cdd 20404cf4 call hci_get_payload_ptr 
+4cde 18007e01 force 0x1 ,pdata 
+4cdf e1408000 istore 1 ,contwu 
+4ce0 1e027e00 deposit alarm 
+4ce1 e1418000 istore 3 ,contwu 
+4ce2 18000e0e force hci_event_command_complete ,queue 
+
+hci_send_event:
+4ce3 47024020 bpatchx patch20_4 ,mem_patch20 
+4ce4 20404cf6 call hci_get_packet_ptr 
+4ce5 18e27e00 deposit queue 
+4ce6 e1408000 istore 1 ,contwu 
+4ce7 1f227e00 deposit loopcnt 
+4ce8 e1408000 istore 1 ,contwu 
+
+hci_send_event_raw:
+4ce9 18000e05 force 5 ,queue 
+4cea 1f20f202 increase 2 ,loopcnt 
+
+hci_send_packet:
+4ceb 20204bf9 branch h4_send_packet_event 
+
+hci_send_commu_ready_event:
+4cec 18000eff force hci_event_vendor_specific ,queue 
+4ced 20404cf4 call hci_get_payload_ptr 
+4cee 58000001 setarg hci_vendor_event_commu_ready 
+4cef e1408000 istore 1 ,contwu 
+4cf0 18007201 force 1 ,loopcnt 
+4cf1 20204ce3 branch hci_send_event 
+
+hci_get_cmd_complete_ptr:
+4cf2 1800140c force 12 ,contwu 
+4cf3 20204cf7 branch hci_get_tx_ptr 
+
+hci_get_payload_ptr:
+4cf4 18001408 force 8 ,contwu 
+4cf5 20204cf7 branch hci_get_tx_ptr 
+
+hci_get_packet_ptr:
+4cf6 18001406 force 6 ,contwu 
+
+hci_get_tx_ptr:
+4cf7 20204bf5 branch h4_get_tx_ptr 
+
+calc_tx_crc16:
+4cf8 7827fc00 pulse crc16 
+4cf9 7824fc00 enable enable_crc 
+
+crcloop:
+4cfa e9408000 ifetch 1 ,contwu 
+4cfb 08008008 inject bucket ,8 
+4cfc c2004cfa loop crcloop 
+4cfd 78247c00 enable enable_parity 
+4cfe 08008010 inject bucket ,16 
+4cff 78447c00 disable enable_parity 
+4d00 7844fc00 disable enable_crc 
+4d01 7847fc00 disable crc16 
+4d02 1ff0fe00 byteswap pdata ,pdata 
+4d03 20600000 rtn 
+
+cmd_exit:
+4d04 7041ce00 jam 0 ,mem_hci_cmd 
+4d05 20600000 rtn 
+
+cmd_check_plap:
+4d06 680341d0 fetch 6 ,mem_hci_plap 
+4d07 680b0040 fetcht 6 ,mem_plap 
+4d08 98467c00 isub temp ,null 
+4d09 20600000 rtn 
+
+cmd_pair:
+4d0a 6800804b fetch 1 ,mem_op 
+4d0b c2814d0f bbit1 op_inrand_req ,cmd_pair_passive 
+4d0c 204062ef call tid_initiate 
+4d0d 70007c08 jam lmp_in_rand ,mem_lmo_opcode2 
+4d0e 20204d04 branch cmd_exit 
+
+cmd_pair_passive:
+4d0f 793ffe02 set0 op_inrand_req ,pdata 
+4d10 6000804b store 1 ,mem_op 
+4d11 20406001 call lmp_accept_inrand 
+4d12 58000000 setarg 0 
+4d13 7934fe01 setflag master ,smap_lmptid ,pdata 
+4d14 6000807f store 1 ,mem_lmo_tid2 
+4d15 20204d04 branch cmd_exit 
+4d16 20600000 rtn 
+
+cmd_in_sniff:
+4d17 70007c17 jam lmp_sniff_req ,mem_lmo_opcode2 
+4d18 d8a004d9 arg mem_sniff_payload ,contw 
+4d19 58000000 setarg 0 
+4d1a 2d0ffe1b isolate1 27 ,clke_bt 
+4d1b 7920fe01 setflag true ,1 ,pdata 
+4d1c e0a08000 istore 1 ,contw 
+4d1d 58000000 setarg 0 
+4d1e e0a10000 istore 2 ,contw 
+4d1f 680141e3 fetch 2 ,mem_sniff_param_interval 
+4d20 e0a10000 istore 2 ,contw 
+4d21 6800c1e5 fetch 1 ,mem_sniff_param_attempt 
+4d22 e0a10000 istore 2 ,contw 
+4d23 6800c1e7 fetch 1 ,mem_sniff_param_timeout 
+4d24 e0a10000 istore 2 ,contw 
+4d25 20204d04 branch cmd_exit 
+
+cmd_exit_sniff:
+4d26 70007c18 jam lmp_unsniff_req ,mem_lmo_opcode2 
+4d27 20204d04 branch cmd_exit 
+
+hci_idle_dispatch:
+4d28 20406899 call gpio_check_uart_state 
+4d29 20608000 rtn true 
+4d2a d8400007 arg uart_wakeup_rx ,temp 
+4d2b 2040681d call gpio_get_bit 
+4d2c 2420cd2f nbranch uart_wake_up ,true 
+4d2d 70424501 jam hci_rx_wake ,mem_hci_lt_rx_state 
+4d2e 20600000 rtn 
+
+uart_wake_up:
+4d2f 6800c245 fetch 1 ,mem_hci_lt_rx_state 
+4d30 c1808000 rtnne hci_rx_wake 
+4d31 20404c62 call hci_exit_lpm 
+4d32 20204cec branch hci_send_commu_ready_event 
+
+hid_rx_process:
+4d33 4702c020 bpatchx patch20_5 ,mem_patch20 
+4d34 68010264 fetch 2 ,mem_l2cap_payload_ptr 
+4d35 1fe20c00 copy pdata ,contr 
+4d36 e8c08000 ifetch 1 ,contr 
+4d37 1fe1040f and pdata ,0x0f ,temp 
+4d38 1ff1fe00 rshift4 pdata ,pdata 
+4d39 c004cd53 beq hid_type_set_idle ,hid_rx_process_handshake 
+4d3a c003cd53 beq hid_type_set_protocol ,hid_rx_process_handshake 
+4d3b c0054d5f beq hid_type_data ,hid_rx_process_data 
+4d3c c002cd4b beq hid_type_set_report ,hid_rx_process_set_report 
+4d3d c000cd3f beq hid_type_control ,hid_rx_process_hid_control 
+4d3e 20600000 rtn 
+
+hid_rx_process_hid_control:
+4d3f 18427e00 copy temp ,pdata 
+4d40 c002cd43 beq hid_control_p_virtualcableunplug ,hid_rx_process_virtual_cable_unplug 
+4d41 c001cd4a beq hid_control_p_suspend ,hid_rx_process_suspend 
+4d42 20600000 rtn 
+
+hid_rx_process_virtual_cable_unplug:
+4d43 700a9927 jam bt_evt_virtual_cable_unplug ,mem_fifo_temp 
+4d44 20407d86 call ui_ipc_send_event 
+4d45 6800c092 fetch 1 ,mem_device_option 
+4d46 c4030000 rtnbit0 dvc_op_mouse 
+4d47 18427e00 copy temp ,pdata 
+4d48 c002c38e beq hid_control_p_virtualcableunplug ,mouse_irtual_cable_unplug 
+4d49 20600000 rtn 
+
+hid_rx_process_suspend:
+4d4a 20600000 rtn 
+
+hid_rx_process_set_report:
+4d4b 20404d5f call hid_rx_process_data 
+4d4c da200001 arg 0x01 ,rega 
+4d4d 20404d63 call hid_malloc_tx_buff 
+4d4e 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+4d4f e0a10000 istore 2 ,contw 
+4d50 58000000 setarg 0x00 
+4d51 e0a08000 istore 1 ,contw 
+4d52 20600000 rtn 
+
+hid_rx_process_handshake:
+4d53 da200001 arg 1 ,rega 
+4d54 20404d63 call hid_malloc_tx_buff 
+4d55 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+4d56 e0a10000 istore 2 ,contw 
+4d57 58000000 setarg 0 
+4d58 e0a08000 istore 1 ,contw 
+4d59 700a8e01 jam 1 ,mem_ui_data_txbuff_length 
+4d5a 6800c252 fetch 1 ,mem_hid_control_state 
+4d5b 79207e06 set1 l2cap_channel_hid_handshake_done 
+4d5c 6000c252 store 1 ,mem_hid_control_state 
+4d5d 700a9912 jam bt_evt_hid_handshake ,mem_fifo_temp 
+4d5e 20207d86 branch ui_ipc_send_event 
+
+hid_rx_process_data:
+4d5f e8c08000 ifetch 1 ,contr 
+4d60 c000cd62 beq hid_report_id_kb ,hid_rx_process_data_hid_kb 
+4d61 20600000 rtn 
+
+hid_rx_process_data_hid_kb:
+4d62 20600000 rtn 
+
+hid_malloc_tx_buff:
+4d63 20405240 call l2cap_malloc 
+4d64 1a220400 copy rega ,temp 
+4d65 60088a8e storet 1 ,mem_ui_data_txbuff_length 
+4d66 1fe20a00 copy pdata ,contw 
+4d67 1a227e00 copy rega ,pdata 
+4d68 e0a10000 istore 2 ,contw 
+4d69 20600000 rtn 
+
+l2cap_init:
+4d6a 2035cd6f branch l2cap_init_wake ,wake 
+
+l2cap_init_work:
+4d6b 58004365 setarg mem_l2cap_xmem_end 
+4d6c d8a04246 arg mem_l2cap_xmem_start ,contw 
+4d6d 98a67200 isub contw ,loopcnt 
+4d6e 20407ed4 call clear_mem 
+
+l2cap_init_wake:
+4d6f 47034020 bpatchx patch20_6 ,mem_patch20 
+4d70 58000551 setarg mem_sdp_mem_end 
+4d71 d8a00511 arg mem_sdp_mem_start ,contw 
+4d72 98a67200 isub contw ,loopcnt 
+4d73 20407ed4 call clear_mem 
+4d74 580002c9 setarg mem_l2cap_mem_end 
+4d75 d8a0025d arg mem_l2cap_mem_start ,contw 
+4d76 98a67200 isub contw ,loopcnt 
+4d77 20407ed4 call clear_mem 
+4d78 20205318 branch l2cap_lpm_load_txbuf 
+
+process_rx_l2cap_pkt:
+4d79 4703c020 bpatchx patch20_7 ,mem_patch20 
+4d7a 18c20400 copy contr ,temp 
+4d7b 18420c00 copy temp ,contr 
+4d7c e8c10000 ifetch 2 ,contr 
+4d7d 60010266 store 2 ,mem_l2cap_rx_pkt_length 
+4d7e e8c10000 ifetch 2 ,contr 
+4d7f 60010268 store 2 ,mem_l2cap_rx_cid 
+4d80 18c27e00 deposit contr 
+4d81 60010264 store 2 ,mem_l2cap_payload_ptr 
+4d82 6800c681 fetch 1 ,memui_reconnect_mode 
+4d83 c0004d85 beq no_reconnection ,l2cap_rx_multiplexing 
+4d84 202050ef branch ml2cap_rx_multiplexing 
+
+l2cap_rx_multiplexing:
+4d85 68010266 fetch 2 ,mem_l2cap_rx_pkt_length 
+4d86 203a4dfc branch l2cap_rx_reset_state ,blank 
+4d87 47044021 bpatchx patch21_0 ,mem_patch21 
+4d88 68008268 fetch 1 ,mem_l2cap_rx_cid 
+4d89 c000cd9d beq l2cap_signal_channel ,l2cap_call_proc_signal 
+
+l2cap_rx_multiplexing0:
+4d8a c0284de0 beq l2cap_sdp_channel ,l2cap_call_proc_sdp 
+4d8b c028cdf5 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm 
+4d8c c0294df3 beq l2cap_hid_control_channel ,l2cap_call_proc_hid 
+4d8d c029cdf3 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid 
+4d8e 20204dfc branch l2cap_rx_reset_state 
+
+l2cap_check_map:
+4d8f 4704c021 bpatchx patch21_1 ,mem_patch21 
+4d90 2040527e call l2cap_malloc_get_full_map 
+4d91 6800c256 fetch 1 ,mem_used_map 
+4d92 c0004d9b beq 0 ,set_pdata_0 
+4d93 c000cd9b beq 1 ,set_pdata_0 
+4d94 c0014d9b beq 2 ,set_pdata_0 
+4d95 c001cd9b beq 3 ,set_pdata_0 
+4d96 c040cd9b beq 0x81 ,set_pdata_0 
+4d97 c0604d9b beq 0xc0 ,set_pdata_0 
+4d98 c0404d9b beq 0x80 ,set_pdata_0 
+4d99 c0204d9b beq 0x40 ,set_pdata_0 
+4d9a 20600000 rtn 
+
+set_pdata_0:
+4d9b 58000000 setarg 0 
+4d9c 20600000 rtn 
+
+l2cap_call_proc_signal:
+4d9d 20404d8f call l2cap_check_map 
+4d9e 247a0000 nrtn blank 
+
+l2cap_call_proc_signal0:
+4d9f 204052b8 call l2cap_malloc_signal_channel 
+4da0 20404e01 call l2cap_process_signal_pkt 
+4da1 6809026f fetcht 2 ,mem_l2cap_signal_tx_length 
+4da2 203a4dfb branch l2cap_call_proc_no_reply ,blank 
+4da3 204052c1 call l2cap_get_signal_tx_buff 
+4da4 6801026f fetch 2 ,mem_l2cap_signal_tx_length 
+4da5 e0a10000 istore 2 ,contw 
+4da6 18007e01 force l2cap_signal_channel ,pdata 
+4da7 e0a10000 istore 2 ,contw 
+4da8 20204dfc branch l2cap_rx_reset_state 
+
+l2cap_call_proc_sigal_pending:
+4da9 6800c364 fetch 1 ,mem_l2cap_pending_item 
+4daa 207a0000 rtn blank 
+4dab 1fe22200 copy pdata ,rega 
+4dac 47054021 bpatchx patch21_2 ,mem_patch21 
+4dad 680202d5 fetch 4 ,mem_l2cap_sdpres_delay_time 
+4dae d8400100 arg 0x100 ,temp 
+4daf 98408400 iadd temp ,temp 
+4db0 1c427e00 copy clkn_bt ,pdata 
+4db1 98467c00 isub temp ,null 
+4db2 24610000 nrtn positive 
+4db3 70436400 jam 0 ,mem_l2cap_pending_item 
+4db4 1a227e00 copy rega ,pdata 
+4db5 c0284db7 beq l2cap_sdp_channel ,l2cap_sdp_conn_succ 
+4db6 20202a8c branch assert 
+
+l2cap_sdp_conn_succ:
+4db7 d9000000 arg 0 ,debug 
+4db8 204052b8 call l2cap_malloc_signal_channel 
+4db9 20404e7a call restore_l2cap_req_param 
+4dba 204052c3 call l2cap_get_signal_tx_payload 
+4dbb 20407ea8 call save_cont_pointers 
+4dbc 20404ead call send_connection_sdp_res 
+4dbd 204052c1 call l2cap_get_signal_tx_buff 
+4dbe 5800000c setarg 0x000c 
+4dbf e0a10000 istore 2 ,contw 
+4dc0 18007e01 force l2cap_signal_channel ,pdata 
+4dc1 e0a10000 istore 2 ,contw 
+4dc2 20204dfc branch l2cap_rx_reset_state 
+
+l2cap_reset_sdp_map:
+4dc3 4705c021 bpatchx patch21_3 ,mem_patch21 
+4dc4 68010275 fetch 2 ,mem_sdp_tx_pkt_length 
+4dc5 1fe0fe04 increase 4 ,pdata 
+4dc6 1ff1fe00 rshift4 pdata ,pdata 
+4dc7 1fe97e00 rshift3 pdata ,pdata 
+4dc8 1fe08401 add pdata ,1 ,temp 
+4dc9 d8c04260 arg mem_tx_fifo3 ,contr 
+4dca e8c18000 ifetch 3 ,contr 
+4dcb 207a0000 rtn blank 
+4dcc 60018ac2 store 3 ,mem_tx_fifo_map_temp 
+4dcd 68008ac2 fetch 1 ,mem_tx_fifo_map_temp 
+4dce 1fe22200 copy pdata ,rega 
+4dcf 20404dd3 call check_l2cap_map 
+4dd0 1a427e00 copy regb ,pdata 
+4dd1 6000c260 store 1 ,mem_tx_fifo3 
+4dd2 20600000 rtn 
+
+check_l2cap_map:
+4dd3 d8e00000 arg 0 ,queue 
+4dd4 da400000 arg 0 ,regb 
+
+check_l2cap_map_loop:
+4dd5 18e67c07 sub queue ,7 ,null 
+4dd6 24610000 nrtn positive 
+4dd7 aa2fffff qisolate1 rega 
+4dd8 2020cdda branch check_l2cap_map_used ,true 
+4dd9 20204dde branch check_l2cap_map_used2 
+
+check_l2cap_map_used:
+4dda 18427e00 copy temp ,pdata 
+4ddb 203a4dde branch check_l2cap_map_used2 ,blank 
+4ddc f9202400 qset1 regb 
+4ddd 184085ff increase -1 ,temp 
+
+check_l2cap_map_used2:
+4dde 18e08e01 increase 1 ,queue 
+4ddf 20204dd5 branch check_l2cap_map_loop 
+
+l2cap_call_proc_sdp:
+4de0 20405274 call l2cap_malloc_is_fifo_empty 
+4de1 247a0000 nrtn blank 
+4de2 20404d8f call l2cap_check_map 
+4de3 247a0000 nrtn blank 
+4de4 204052c5 call l2cap_malloc_sdp_channel 
+4de5 20406e11 call sdp_process 
+4de6 20404dc3 call l2cap_reset_sdp_map 
+4de7 20204dec branch l2cap_call_proc_sdp_common 
+
+ml2cap_call_proc_sdp:
+4de8 20405274 call l2cap_malloc_is_fifo_empty 
+4de9 247a0000 nrtn blank 
+4dea 204052c5 call l2cap_malloc_sdp_channel 
+4deb 20406e11 call sdp_process 
+
+l2cap_call_proc_sdp_common:
+4dec 204052ce call l2cap_get_sdp_tx_buff 
+4ded 68010275 fetch 2 ,mem_sdp_tx_pkt_length 
+4dee 203a4dfb branch l2cap_call_proc_no_reply ,blank 
+4def e0a10000 istore 2 ,contw 
+4df0 68014248 fetch 2 ,mem_sdp_remote_cid 
+4df1 e0a10000 istore 2 ,contw 
+4df2 20204dfc branch l2cap_rx_reset_state 
+
+l2cap_call_proc_hid:
+4df3 20404d33 call hid_rx_process 
+4df4 20204dfc branch l2cap_rx_reset_state 
+
+l2cap_call_proc_rfcomm:
+4df5 47064021 bpatchx patch21_4 ,mem_patch21 
+4df6 70028400 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag 
+4df7 20406a8a call rfcomm_rx_process 
+4df8 68008284 fetch 1 ,mem_rfcomm_malloc_fail_flag 
+4df9 c1008000 rtneq rfcomm_malloc_fail 
+4dfa 20204dfc branch l2cap_rx_reset_state 
+
+l2cap_call_proc_no_reply:
+4dfb 20405264 call l2cap_malloc_discard 
+
+l2cap_rx_reset_state:
+4dfc 58000000 setarg 0 
+4dfd 60010266 store 2 ,mem_l2cap_rx_pkt_length 
+4dfe 60010268 store 2 ,mem_l2cap_rx_cid 
+4dff 70026a01 jam l2cap_rx_done ,mem_l2cap_rx_done 
+4e00 20600000 rtn 
+
+l2cap_process_signal_pkt:
+4e01 4706c021 bpatchx patch21_5 ,mem_patch21 
+4e02 204052c3 call l2cap_get_signal_tx_payload 
+4e03 18002400 force 0 ,regb 
+4e04 68010266 fetch 2 ,mem_l2cap_rx_pkt_length 
+4e05 1fe22600 copy pdata ,regc 
+4e06 68010264 fetch 2 ,mem_l2cap_payload_ptr 
+4e07 98000c00 iforce contr 
+
+l2cap_process_signal_pkt_loop:
+4e08 20404e10 call l2cap_process_one_signal 
+4e09 1a627e00 deposit regc 
+4e0a 1a60a7fc increase -4 ,regc 
+4e0b 1fe0fffc increase -4 ,pdata 
+4e0c 243a4e08 nbranch l2cap_process_signal_pkt_loop ,blank 
+4e0d 1a427e00 copy regb ,pdata 
+4e0e 6001026f store 2 ,mem_l2cap_signal_tx_length 
+4e0f 20600000 rtn 
+
+l2cap_process_one_signal:
+4e10 47074021 bpatchx patch21_6 ,mem_patch21 
+4e11 e8c08000 ifetch 1 ,contr 
+4e12 c000ce49 beq signal_cmd_reject ,l2cap_proc_signal_cmd_reject 
+4e13 c0014e51 beq signal_connect_req ,l2cap_proc_signal_connect_req 
+4e14 c001ced5 beq signal_connect_rsp ,l2cap_proc_signal_connect_rsp 
+4e15 c0024f05 beq signal_config_req ,l2cap_proc_signal_config_req 
+4e16 c002cfa2 beq signal_config_rsp ,l2cap_proc_signal_config_rsp 
+4e17 c0034fcb beq signal_disconnect_req ,l2cap_proc_signal_disconnect_req 
+4e18 c003d01b beq signal_disconnect_rsp ,l2cap_proc_signal_disconnect_rsp 
+4e19 c0045050 beq signal_echo_req ,l2cap_proc_signal_echo_req 
+4e1a c004d060 beq signal_echo_rsp ,l2cap_proc_signal_echo_rsp 
+4e1b c0054e1f beq signal_info_req ,l2cap_proc_signal_info_req 
+4e1c c005d061 beq signal_info_rsp ,l2cap_proc_signal_info_rsp 
+4e1d 20405062 call l2cap_reject_command 
+
+l2cap_process_one_signal_rtn:
+4e1e 20600000 rtn 
+
+l2cap_proc_signal_info_req:
+4e1f e8c08000 ifetch 1 ,contr 
+4e20 1fe20e00 copy pdata ,queue 
+4e21 e8c10000 ifetch 2 ,contr 
+4e22 1fe22200 copy pdata ,rega 
+4e23 1a627e00 copy regc ,pdata 
+4e24 9a262600 isub rega ,regc 
+4e25 5800000b setarg signal_info_rsp 
+4e26 e0a08000 istore 1 ,contw 
+4e27 18e27e00 copy queue ,pdata 
+4e28 e0a08000 istore 1 ,contw 
+4e29 e8c10000 ifetch 2 ,contr 
+
+l2cap_proc_signal_info_req_reply:
+4e2a c0014e2d beq l2cap_sig_ext_featrue ,l2cap_proc_signal_info_req_ext 
+4e2b c001ce33 beq l2cap_sig_fix_featrue ,l2cap_proc_signal_info_req_fix 
+4e2c 20600000 rtn 
+
+l2cap_proc_signal_info_req_ext:
+4e2d 58020008 setarg 0x020008 
+4e2e e0a30000 istore 6 ,contw 
+4e2f 58000280 setarg 0x0280 
+4e30 e0a20000 istore 4 ,contw 
+4e31 18007e0c force 12 ,pdata 
+4e32 20204e38 branch l2cap_proc_signal_info_req_common 
+
+l2cap_proc_signal_info_req_fix:
+4e33 5803000c setarg 0x3000c 
+4e34 e0a30000 istore 6 ,contw 
+4e35 58000006 setarg 0x0006 
+4e36 e0a40000 istore 8 ,contw 
+4e37 18007e10 force 16 ,pdata 
+
+l2cap_proc_signal_info_req_common:
+4e38 9a40a400 iadd regb ,regb 
+4e39 20204e1e branch l2cap_process_one_signal_rtn 
+
+ml2cap_proc_signal_info_req:
+4e3a e8c08000 ifetch 1 ,contr 
+4e3b 1fe20e00 copy pdata ,queue 
+4e3c e8c10000 ifetch 2 ,contr 
+4e3d 1fe22200 copy pdata ,rega 
+4e3e e8c10000 ifetch 2 ,contr 
+4e3f 60010aa2 store 2 ,mem_temp 
+4e40 1a627e00 copy regc ,pdata 
+4e41 9a262600 isub rega ,regc 
+4e42 204052c3 call l2cap_get_signal_tx_payload 
+4e43 5800000b setarg signal_info_rsp 
+4e44 e0a08000 istore 1 ,contw 
+4e45 18e27e00 copy queue ,pdata 
+4e46 e0a08000 istore 1 ,contw 
+4e47 68010aa2 fetch 2 ,mem_temp 
+4e48 20204e2a branch l2cap_proc_signal_info_req_reply 
+
+l2cap_proc_signal_cmd_reject:
+4e49 e8c08000 ifetch 1 ,contr 
+4e4a 1fe20e00 copy pdata ,queue 
+4e4b e8c10000 ifetch 2 ,contr 
+4e4c 1fe22200 copy pdata ,rega 
+4e4d 98c08c00 iadd contr ,contr 
+4e4e 1a627e00 copy regc ,pdata 
+4e4f 9a262600 isub rega ,regc 
+
+l2cap_proc_signal_cmd_reject_rtn:
+4e50 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_connect_req:
+4e51 20407ea8 call save_cont_pointers 
+4e52 20407ead call load_cont_pointers 
+4e53 d9000000 arg 0 ,debug 
+4e54 e8c08000 ifetch 1 ,contr 
+4e55 1fe20e00 copy pdata ,queue 
+4e56 e8c10000 ifetch 2 ,contr 
+4e57 1fe22200 copy pdata ,rega 
+4e58 e8c10000 ifetch 2 ,contr 
+4e59 1fe20400 copy pdata ,temp 
+4e5a e8c10000 ifetch 2 ,contr 
+4e5b 1fe21600 copy pdata ,timeup 
+4e5c 4707c021 bpatchx patch21_7 ,mem_patch21 
+4e5d 18427e00 copy temp ,pdata 
+4e5e c000ce64 beq psm_sdp ,l2cap_proc_signal_connect_req_sdp 
+4e5f c001ce86 beq psm_rfcomm ,l2cap_proc_signal_connect_req_rfcomm 
+4e60 c008ce92 beq psm_hid_control ,l2cap_proc_signal_connect_req_hid_ctrl 
+4e61 c009ce9d beq psm_hid_interrupt ,l2cap_proc_signal_connect_req_hid_int 
+4e62 20405062 call l2cap_reject_command 
+4e63 20204ed4 branch l2cap_proc_signal_connect_req_rtn 
+
+l2cap_proc_signal_connect_req_sdp:
+4e64 20407ea8 call save_cont_pointers 
+4e65 d8400050 arg l2cap_sdp_channel ,temp 
+4e66 68014248 fetch 2 ,mem_sdp_remote_cid 
+4e67 243a4ece nbranch already_connected ,blank 
+4e68 19627e00 copy timeup ,pdata 
+4e69 60014248 store 2 ,mem_sdp_remote_cid 
+4e6a 1c427e00 copy clkn_bt ,pdata 
+4e6b 600202d5 store 4 ,mem_l2cap_sdpres_delay_time 
+4e6c 20404e6e call store_l2cap_req_param 
+4e6d 20204ea9 branch send_connection_pending 
+
+store_l2cap_req_param:
+4e6e 600902d3 storet 2 ,mem_psm 
+4e6f 19627e00 deposit timeup 
+4e70 600102c9 store 2 ,mem_scid 
+4e71 1a227e00 deposit rega 
+4e72 600102cb store 2 ,mem_cmd_length 
+4e73 1a427e00 deposit regb 
+4e74 600102cd store 2 ,mem_tt2 
+4e75 1a627e00 deposit regc 
+4e76 600102cf store 2 ,mem_tt3 
+4e77 18e27e00 deposit queue 
+4e78 600102d1 store 2 ,mem_id 
+4e79 20600000 rtn 
+
+restore_l2cap_req_param:
+4e7a 680902d3 fetcht 2 ,mem_psm 
+4e7b 680102c9 fetch 2 ,mem_scid 
+4e7c 1fe21600 copy pdata ,timeup 
+4e7d 680102cb fetch 2 ,mem_cmd_length 
+4e7e 1fe22200 copy pdata ,rega 
+4e7f 680102cd fetch 2 ,mem_tt2 
+4e80 1fe22400 copy pdata ,regb 
+4e81 680102cf fetch 2 ,mem_tt3 
+4e82 1fe22600 copy pdata ,regc 
+4e83 680102d1 fetch 2 ,mem_id 
+4e84 1fe20e00 copy pdata ,queue 
+4e85 20600000 rtn 
+
+l2cap_proc_signal_connect_req_rfcomm:
+4e86 20407ea8 call save_cont_pointers 
+4e87 58000051 setarg l2cap_rfcomm_channel 
+4e88 d8400051 arg l2cap_rfcomm_channel ,temp 
+4e89 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+4e8a 243a4ece nbranch already_connected ,blank 
+4e8b 19627e00 copy timeup ,pdata 
+4e8c 6001424a store 2 ,mem_rfcomm_remote_cid 
+4e8d 6800c251 fetch 1 ,mem_rfcomm_state 
+4e8e 79207e00 set1 l2cap_channel_state_conn_req ,pdata 
+4e8f 79207e01 set1 l2cap_channel_state_conn_res ,pdata 
+4e90 6000c251 store 1 ,mem_rfcomm_state 
+4e91 20204eb1 branch send_connection_res 
+
+l2cap_proc_signal_connect_req_hid_ctrl:
+4e92 20407ea8 call save_cont_pointers 
+4e93 d8400052 arg l2cap_hid_control_channel ,temp 
+4e94 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+4e95 243a4ece nbranch already_connected ,blank 
+4e96 19627e00 copy timeup ,pdata 
+4e97 6001424c store 2 ,mem_hid_ctrl_remote_cid 
+4e98 6800c252 fetch 1 ,mem_hid_control_state 
+4e99 79207e00 set1 l2cap_channel_state_conn_req ,pdata 
+4e9a 79207e01 set1 l2cap_channel_state_conn_res ,pdata 
+4e9b 6000c252 store 1 ,mem_hid_control_state 
+4e9c 20204eb1 branch send_connection_res 
+
+l2cap_proc_signal_connect_req_hid_int:
+4e9d 20407ea8 call save_cont_pointers 
+4e9e 1b427e00 deposit clke 
+4e9f d8400053 arg l2cap_hid_interrupt_channel ,temp 
+4ea0 6801424e fetch 2 ,mem_hid_int_remote_cid 
+4ea1 243a4ece nbranch already_connected ,blank 
+4ea2 19627e00 copy timeup ,pdata 
+4ea3 6001424e store 2 ,mem_hid_int_remote_cid 
+4ea4 6800c253 fetch 1 ,mem_hid_interrupt_state 
+4ea5 79207e00 set1 l2cap_channel_state_conn_req ,pdata 
+4ea6 79207e01 set1 l2cap_channel_state_conn_res ,pdata 
+4ea7 6000c253 store 1 ,mem_hid_interrupt_state 
+4ea8 20204eb1 branch send_connection_res 
+
+send_connection_pending:
+4ea9 58000001 setarg l2cap_connect_pending 
+4eaa 6001027d store 2 ,meml2cap_t1 
+4eab 70436450 jam l2cap_sdp_channel ,mem_l2cap_pending_item 
+4eac 20204eb3 branch send_connection_res0 
+
+send_connection_sdp_res:
+4ead 6800c250 fetch 1 ,mem_sdp_state 
+4eae 79207e00 set1 l2cap_channel_state_conn_req ,pdata 
+4eaf 79207e01 set1 l2cap_channel_state_conn_res ,pdata 
+4eb0 6000c250 store 1 ,mem_sdp_state 
+
+send_connection_res:
+4eb1 58000000 setarg l2cap_connect_successful 
+4eb2 6001027d store 2 ,meml2cap_t1 
+
+send_connection_res0:
+4eb3 47084022 bpatchx patch22_0 ,mem_patch22 
+4eb4 20407ead call load_cont_pointers 
+4eb5 58000003 setarg signal_connect_rsp 
+4eb6 e0a08000 istore 1 ,contw 
+4eb7 18e27e00 copy queue ,pdata 
+4eb8 e0a08000 istore 1 ,contw 
+4eb9 58000008 setarg 0x0008 
+4eba e0a10000 istore 2 ,contw 
+4ebb 18427e00 copy temp ,pdata 
+4ebc e0a10000 istore 2 ,contw 
+4ebd 19627e00 copy timeup ,pdata 
+4ebe e0a10000 istore 2 ,contw 
+4ebf 6801027d fetch 2 ,meml2cap_t1 
+4ec0 c000cec9 beq l2cap_connect_pending ,connect_pending 
+4ec1 290c0000 isolate0 0 ,debug 
+4ec2 2020cec4 branch connect_suc ,true 
+4ec3 58000004 setarg l2cap_connect_refused_no_resources 
+
+connect_suc:
+4ec4 e0a10000 istore 2 ,contw 
+4ec5 18007e00 force 0x0000 ,pdata 
+4ec6 e0a10000 istore 2 ,contw 
+4ec7 5800000c setarg 12 
+4ec8 20204ed0 branch connect_req_update_byte_counts 
+
+connect_pending:
+4ec9 e0a10000 istore 2 ,contw 
+4eca 18007e02 force 0x0002 ,pdata 
+4ecb e0a10000 istore 2 ,contw 
+4ecc 5800000c setarg 12 
+4ecd 20204ed0 branch connect_req_update_byte_counts 
+
+already_connected:
+4ece 79201000 set1 0 ,debug 
+4ecf 20204eb1 branch send_connection_res 
+
+connect_req_update_byte_counts:
+4ed0 9a40a400 iadd regb ,regb 
+4ed1 1a627e00 copy regc ,pdata 
+4ed2 9a262600 isub rega ,regc 
+4ed3 20204ed4 branch l2cap_proc_signal_connect_req_rtn 
+
+l2cap_proc_signal_connect_req_rtn:
+4ed4 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_connect_rsp:
+4ed5 e8c08000 ifetch 1 ,contr 
+4ed6 1fe20e00 copy pdata ,queue 
+4ed7 e8c10000 ifetch 2 ,contr 
+4ed8 1fe22200 copy pdata ,rega 
+4ed9 1a627e00 copy regc ,pdata 
+4eda 9a262600 isub rega ,regc 
+4edb e8c10000 ifetch 2 ,contr 
+4edc 1fe21600 copy pdata ,timeup 
+4edd e8c10000 ifetch 2 ,contr 
+4ede 1fe20400 copy pdata ,temp 
+4edf 4708c022 bpatchx patch22_1 ,mem_patch22 
+4ee0 58000050 setarg l2cap_sdp_channel 
+4ee1 98467c00 isub temp ,null 
+4ee2 2022ceed branch l2cap_proc_signal_connect_rsp_sdp ,zero 
+4ee3 58000051 setarg l2cap_rfcomm_channel 
+4ee4 98467c00 isub temp ,null 
+4ee5 2022cef3 branch l2cap_proc_signal_connect_rsp_rfcomm ,zero 
+4ee6 58000052 setarg l2cap_hid_control_channel 
+4ee7 98467c00 isub temp ,null 
+4ee8 2022ceff branch l2cap_proc_signal_connect_rsp_hid_ctrl ,zero 
+4ee9 58000053 setarg l2cap_hid_interrupt_channel 
+4eea 98467c00 isub temp ,null 
+4eeb 2022cef9 branch l2cap_proc_signal_connect_rsp_hid_int ,zero 
+4eec 20600000 rtn 
+
+l2cap_proc_signal_connect_rsp_sdp:
+4eed 19627e00 copy timeup ,pdata 
+4eee 60014248 store 2 ,mem_sdp_remote_cid 
+4eef 6800c250 fetch 1 ,mem_sdp_state 
+4ef0 79207e01 set1 l2cap_channel_state_conn_res ,pdata 
+4ef1 6000c250 store 1 ,mem_sdp_state 
+4ef2 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_connect_rsp_rfcomm:
+4ef3 19627e00 copy timeup ,pdata 
+4ef4 6001424a store 2 ,mem_rfcomm_remote_cid 
+4ef5 6800c251 fetch 1 ,mem_rfcomm_state 
+4ef6 79207e01 set1 l2cap_channel_state_conn_res ,pdata 
+4ef7 6000c251 store 1 ,mem_rfcomm_state 
+4ef8 20600000 rtn 
+
+l2cap_proc_signal_connect_rsp_hid_int:
+4ef9 19627e00 copy timeup ,pdata 
+4efa 6001424c store 2 ,mem_hid_ctrl_remote_cid 
+4efb 6800c253 fetch 1 ,mem_hid_interrupt_state 
+4efc 79207e01 set1 l2cap_channel_state_conn_res ,pdata 
+4efd 6000c253 store 1 ,mem_hid_interrupt_state 
+4efe 20600000 rtn 
+
+l2cap_proc_signal_connect_rsp_hid_ctrl:
+4eff 19627e00 copy timeup ,pdata 
+4f00 6001424e store 2 ,mem_hid_int_remote_cid 
+4f01 6800c252 fetch 1 ,mem_hid_control_state 
+4f02 79207e01 set1 l2cap_channel_state_conn_res ,pdata 
+4f03 6000c252 store 1 ,mem_hid_control_state 
+4f04 20600000 rtn 
+
+l2cap_proc_signal_config_req:
+4f05 e8c08000 ifetch 1 ,contr 
+4f06 1fe20e00 copy pdata ,queue 
+4f07 e8c10000 ifetch 2 ,contr 
+4f08 1fe22200 copy pdata ,rega 
+4f09 1a627e00 copy regc ,pdata 
+4f0a 9a262600 isub rega ,regc 
+4f0b e8c10000 ifetch 2 ,contr 
+4f0c 1fe20400 copy pdata ,temp 
+4f0d 18422200 copy temp ,rega 
+4f0e 47094022 bpatchx patch22_2 ,mem_patch22 
+4f0f 58000050 setarg l2cap_sdp_channel 
+4f10 98467c00 isub temp ,null 
+4f11 2022cf1c branch l2cap_proc_signal_config_req_sdp ,zero 
+4f12 58000051 setarg l2cap_rfcomm_channel 
+4f13 98467c00 isub temp ,null 
+4f14 2022cf3a branch l2cap_proc_signal_config_req_rfcomm ,zero 
+4f15 58000052 setarg l2cap_hid_control_channel 
+4f16 98467c00 isub temp ,null 
+4f17 2022cf26 branch l2cap_proc_signal_config_req_hid_ctrl ,zero 
+4f18 58000053 setarg l2cap_hid_interrupt_channel 
+4f19 98467c00 isub temp ,null 
+4f1a 2022cf30 branch l2cap_proc_signal_config_req_hid_int ,zero 
+4f1b 20205062 branch l2cap_reject_command 
+
+l2cap_proc_signal_config_req_sdp:
+4f1c 18a21600 copy contw ,timeup 
+4f1d 6800c250 fetch 1 ,mem_sdp_state 
+4f1e 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+4f1f 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+4f20 6000c250 store 1 ,mem_sdp_state 
+4f21 19620a00 copy timeup ,contw 
+4f22 d9600050 arg l2cap_sdp_channel ,timeup 
+4f23 68014248 fetch 2 ,mem_sdp_remote_cid 
+4f24 1fe20400 copy pdata ,temp 
+4f25 20204f43 branch l2cap_send_config_rsp 
+
+l2cap_proc_signal_config_req_hid_ctrl:
+4f26 18a21600 copy contw ,timeup 
+4f27 6800c252 fetch 1 ,mem_hid_control_state 
+4f28 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+4f29 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+4f2a 6000c252 store 1 ,mem_hid_control_state 
+4f2b 19620a00 copy timeup ,contw 
+4f2c d9600052 arg l2cap_hid_control_channel ,timeup 
+4f2d 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+4f2e 1fe20400 copy pdata ,temp 
+4f2f 20204f43 branch l2cap_send_config_rsp 
+
+l2cap_proc_signal_config_req_hid_int:
+4f30 18a21600 copy contw ,timeup 
+4f31 6800c253 fetch 1 ,mem_hid_interrupt_state 
+4f32 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+4f33 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+4f34 6000c253 store 1 ,mem_hid_interrupt_state 
+4f35 19620a00 copy timeup ,contw 
+4f36 d9600053 arg l2cap_hid_interrupt_channel ,timeup 
+4f37 6801424e fetch 2 ,mem_hid_int_remote_cid 
+4f38 1fe20400 copy pdata ,temp 
+4f39 20204f43 branch l2cap_send_config_rsp 
+
+l2cap_proc_signal_config_req_rfcomm:
+4f3a 18a21600 copy contw ,timeup 
+4f3b 6800c251 fetch 1 ,mem_rfcomm_state 
+4f3c 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+4f3d 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+4f3e 6000c251 store 1 ,mem_rfcomm_state 
+4f3f 19620a00 copy timeup ,contw 
+4f40 d9600051 arg l2cap_rfcomm_channel ,timeup 
+4f41 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+4f42 1fe20400 copy pdata ,temp 
+
+l2cap_send_config_rsp:
+4f43 4709c022 bpatchx patch22_3 ,mem_patch22 
+4f44 58000005 setarg signal_config_rsp 
+4f45 e0a08000 istore 1 ,contw 
+4f46 18e27e00 copy queue ,pdata 
+4f47 e0a08000 istore 1 ,contw 
+4f48 58000006 setarg 0x0006 
+4f49 e0a10000 istore 2 ,contw 
+4f4a 18427e00 copy temp ,pdata 
+4f4b e0a10000 istore 2 ,contw 
+4f4c 18007e00 force 0x00 ,pdata 
+4f4d e0a10000 istore 2 ,contw 
+4f4e 18007e00 force l2cap_config_success ,pdata 
+4f4f e0a10000 istore 2 ,contw 
+4f50 18007e0a force 10 ,pdata 
+4f51 9a40a400 iadd regb ,regb 
+4f52 60090282 storet 2 ,mem_config_req_dest_cid 
+4f53 18e27e00 copy queue ,pdata 
+4f54 60008281 store 1 ,mem_config_identifier 
+4f55 18007e50 force l2cap_sdp_channel ,pdata 
+4f56 a961fe00 icompare 0xff ,timeup 
+4f57 2020cf59 branch l2cap_send_config_rsp_is_sdp ,true 
+4f58 1fe0fe01 increase 1 ,pdata 
+
+l2cap_send_config_rsp_is_sdp:
+4f59 20600000 rtn 
+
+l2cap_check_channel_state:
+4f5a 78547c00 disable user 
+4f5b c3810000 rtnbit1 l2cap_channel_state_snd_cfg_req ,pdata 
+4f5c c4000000 rtnbit0 l2cap_channel_state_conn_req ,pdata 
+4f5d c4008000 rtnbit0 l2cap_channel_state_conn_res ,pdata 
+4f5e 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+4f5f 18c20a00 copy contr ,contw 
+4f60 18a08bff increase -1 ,contw 
+4f61 e0a08000 istore 1 ,contw 
+4f62 78347c00 enable user 
+4f63 20600000 rtn 
+
+l2cap_send_config_req:
+
+l2cap_send_config_req_sdp:
+4f64 6800c250 fetch 1 ,mem_sdp_state 
+4f65 20404f5a call l2cap_check_channel_state 
+4f66 24344f6b nbranch l2cap_send_config_req_rfcomm ,user 
+4f67 70028050 jam l2cap_sdp_channel ,mem_send_config_req 
+4f68 68014248 fetch 2 ,mem_sdp_remote_cid 
+4f69 60010282 store 2 ,mem_config_req_dest_cid 
+4f6a 20204f7f branch l2cap_generate_config_req 
+
+l2cap_send_config_req_rfcomm:
+4f6b 6800c251 fetch 1 ,mem_rfcomm_state 
+4f6c 20404f5a call l2cap_check_channel_state 
+4f6d 24344f72 nbranch l2cap_send_config_req_hid_ctrl ,user 
+4f6e 70028051 jam l2cap_rfcomm_channel ,mem_send_config_req 
+4f6f 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+4f70 60010282 store 2 ,mem_config_req_dest_cid 
+4f71 20204f7f branch l2cap_generate_config_req 
+
+l2cap_send_config_req_hid_ctrl:
+4f72 6800c252 fetch 1 ,mem_hid_control_state 
+4f73 20404f5a call l2cap_check_channel_state 
+4f74 24344f79 nbranch l2cap_send_config_req_hid_int ,user 
+4f75 70028052 jam l2cap_hid_control_channel ,mem_send_config_req 
+4f76 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+4f77 60010282 store 2 ,mem_config_req_dest_cid 
+4f78 20204f7f branch l2cap_generate_config_req 
+
+l2cap_send_config_req_hid_int:
+4f79 6800c253 fetch 1 ,mem_hid_interrupt_state 
+4f7a 20404f5a call l2cap_check_channel_state 
+4f7b 24740000 nrtn user 
+4f7c 70028053 jam l2cap_hid_interrupt_channel ,mem_send_config_req 
+4f7d 6801424e fetch 2 ,mem_hid_int_remote_cid 
+4f7e 60010282 store 2 ,mem_config_req_dest_cid 
+
+l2cap_generate_config_req:
+4f7f 470a4022 bpatchx patch22_4 ,mem_patch22 
+4f80 2040523a call l2cap_get_req_id 
+4f81 204052b8 call l2cap_malloc_signal_channel 
+4f82 18002400 force 0 ,regb 
+4f83 204052c3 call l2cap_get_signal_tx_payload 
+4f84 18007e04 force signal_config_req ,pdata 
+4f85 e0a08000 istore 1 ,contw 
+4f86 6800c255 fetch 1 ,mem_ml2cap_comm_id 
+4f87 e0a08000 istore 1 ,contw 
+4f88 58000008 setarg 0x0008 
+4f89 e0a10000 istore 2 ,contw 
+4f8a 68010282 fetch 2 ,mem_config_req_dest_cid 
+4f8b e0a10000 istore 2 ,contw 
+4f8c 58000000 setarg 0x0000 
+4f8d e0a10000 istore 2 ,contw 
+4f8e 18007e01 force 1 ,pdata 
+4f8f e0a08000 istore 1 ,contw 
+4f90 18007e02 force 2 ,pdata 
+4f91 e0a08000 istore 1 ,contw 
+4f92 68008280 fetch 1 ,mem_send_config_req 
+4f93 c028cf97 beq l2cap_rfcomm_channel ,l2cap_generate_config_req_rfcomm 
+4f94 58000030 setarg l2cap_config_mtu_sdp 
+4f95 e0a10000 istore 2 ,contw 
+4f96 20204f99 branch l2cap_generate_config_req_done 
+
+l2cap_generate_config_req_rfcomm:
+4f97 580003e3 setarg l2cap_config_mtu_rfcomm 
+4f98 e0a10000 istore 2 ,contw 
+
+l2cap_generate_config_req_done:
+4f99 d840000c arg 0x0c ,temp 
+4f9a 6009026f storet 2 ,mem_l2cap_signal_tx_length 
+4f9b 204052c1 call l2cap_get_signal_tx_buff 
+4f9c 6801026f fetch 2 ,mem_l2cap_signal_tx_length 
+4f9d e0a10000 istore 2 ,contw 
+4f9e 18007e01 force l2cap_signal_channel ,pdata 
+4f9f e0a10000 istore 2 ,contw 
+4fa0 70028000 jam 0 ,mem_send_config_req 
+
+l2cap_proc_signal_config_req_rtn:
+4fa1 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_config_rsp:
+4fa2 18c08c01 increase 1 ,contr 
+4fa3 e8c10000 ifetch 2 ,contr 
+4fa4 1fe22200 copy pdata ,rega 
+4fa5 1a627e00 copy regc ,pdata 
+4fa6 9a262600 isub rega ,regc 
+4fa7 e8c10000 ifetch 2 ,contr 
+4fa8 1fe22200 copy pdata ,rega 
+4fa9 470ac022 bpatchx patch22_5 ,mem_patch22 
+4faa 58000050 setarg l2cap_sdp_channel 
+4fab 9a267c00 isub rega ,null 
+4fac 2022cfba branch l2cap_proc_signal_config_rsp_sdp ,zero 
+4fad 58000051 setarg l2cap_rfcomm_channel 
+4fae 9a267c00 isub rega ,null 
+4faf 2022cfbe branch l2cap_proc_signal_config_rsp_rfcomm ,zero 
+4fb0 58000052 setarg l2cap_hid_control_channel 
+4fb1 9a267c00 isub rega ,null 
+4fb2 2022cfc2 branch l2cap_proc_signal_config_rsp_hid_ctrl ,zero 
+4fb3 58000053 setarg l2cap_hid_interrupt_channel 
+4fb4 9a267c00 isub rega ,null 
+4fb5 2022cfc6 branch l2cap_proc_signal_config_rsp_hid_int ,zero 
+4fb6 18c08c02 increase 2 ,contr 
+4fb7 e8c10000 ifetch 2 ,contr 
+4fb8 98007c00 iforce null 
+4fb9 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_config_rsp_sdp:
+4fba 6800c250 fetch 1 ,mem_sdp_state 
+4fbb 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata 
+4fbc 6000c250 store 1 ,mem_sdp_state 
+4fbd 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_config_rsp_rfcomm:
+4fbe 6800c251 fetch 1 ,mem_rfcomm_state 
+4fbf 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata 
+4fc0 6000c251 store 1 ,mem_rfcomm_state 
+4fc1 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_config_rsp_hid_ctrl:
+4fc2 6800c252 fetch 1 ,mem_hid_control_state 
+4fc3 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata 
+4fc4 6000c252 store 1 ,mem_hid_control_state 
+4fc5 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_config_rsp_hid_int:
+4fc6 6800c253 fetch 1 ,mem_hid_interrupt_state 
+4fc7 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata 
+4fc8 6000c253 store 1 ,mem_hid_interrupt_state 
+4fc9 700a9906 jam bt_evt_hid_connected ,mem_fifo_temp 
+4fca 20207d86 branch ui_ipc_send_event 
+
+l2cap_proc_signal_disconnect_req:
+4fcb e8c08000 ifetch 1 ,contr 
+4fcc 1fe20e00 copy pdata ,queue 
+4fcd e8c10000 ifetch 2 ,contr 
+4fce 1fe22200 copy pdata ,rega 
+4fcf 1a627e00 copy regc ,pdata 
+4fd0 9a262600 isub rega ,regc 
+4fd1 e8c10000 ifetch 2 ,contr 
+4fd2 1fe22200 copy pdata ,rega 
+4fd3 e8c10000 ifetch 2 ,contr 
+4fd4 1fe21600 copy pdata ,timeup 
+4fd5 1a220400 copy rega ,temp 
+4fd6 20407ea8 call save_cont_pointers 
+4fd7 470b4022 bpatchx patch22_6 ,mem_patch22 
+4fd8 58000050 setarg l2cap_sdp_channel 
+4fd9 98467c00 isub temp ,null 
+4fda 2022cff2 branch l2cap_proc_signal_disconnect_req_sdp ,zero 
+4fdb 58000051 setarg l2cap_rfcomm_channel 
+4fdc 98467c00 isub temp ,null 
+4fdd 2022d002 branch l2cap_proc_signal_disconnect_req_rfcomm ,zero 
+4fde 58000052 setarg l2cap_hid_control_channel 
+4fdf 98467c00 isub temp ,null 
+4fe0 2022cfe6 branch l2cap_proc_signal_disconnect_req_hid_ctrl ,zero 
+4fe1 58000053 setarg l2cap_hid_interrupt_channel 
+4fe2 98467c00 isub temp ,null 
+4fe3 2022cfec branch l2cap_proc_signal_disconnect_req_hid_int ,zero 
+4fe4 20405062 call l2cap_reject_command 
+4fe5 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn 
+
+l2cap_proc_signal_disconnect_req_hid_ctrl:
+4fe6 19620400 copy timeup ,temp 
+4fe7 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+4fe8 98467c00 isub temp ,null 
+4fe9 2022cff8 branch l2cap_disconnect_hid_control_now ,zero 
+4fea 20405062 call l2cap_reject_command 
+4feb 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn 
+
+l2cap_proc_signal_disconnect_req_hid_int:
+4fec 19620400 copy timeup ,temp 
+4fed 6801424e fetch 2 ,mem_hid_int_remote_cid 
+4fee 98467c00 isub temp ,null 
+4fef 2022cffa branch l2cap_disconnect_hid_interrupt_now ,zero 
+4ff0 20405062 call l2cap_reject_command 
+4ff1 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn 
+
+l2cap_proc_signal_disconnect_req_sdp:
+4ff2 19620400 copy timeup ,temp 
+4ff3 68014248 fetch 2 ,mem_sdp_remote_cid 
+4ff4 98467c00 isub temp ,null 
+4ff5 2022cffe branch l2cap_disconnect_sdp_now ,zero 
+4ff6 20405062 call l2cap_reject_command 
+4ff7 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn 
+
+l2cap_disconnect_hid_control_now:
+4ff8 20405079 call l2cap_reset_hid_ctrl_state 
+4ff9 2020500a branch l2cap_send_disconnect_rsp_pkt 
+
+l2cap_disconnect_hid_interrupt_now:
+4ffa 2040507f call l2cap_reset_hid_int_state 
+4ffb 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+4ffc 203a500a branch l2cap_send_disconnect_rsp_pkt ,blank 
+4ffd 2020500a branch l2cap_send_disconnect_rsp_pkt 
+
+l2cap_disconnect_sdp_now:
+4ffe 20405074 call l2cap_reset_sdp_channel_state 
+4fff 68008288 fetch 1 ,mem_upper_sm_ss 
+5000 243a500a nbranch l2cap_send_disconnect_rsp_pkt ,blank 
+5001 2020500a branch l2cap_send_disconnect_rsp_pkt 
+
+l2cap_proc_signal_disconnect_req_rfcomm:
+5002 19620400 copy timeup ,temp 
+5003 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+5004 98467c00 isub temp ,null 
+5005 2022d008 branch l2cap_disconnect_rfcomm_now ,zero 
+5006 20405062 call l2cap_reject_command 
+5007 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn 
+
+l2cap_disconnect_rfcomm_now:
+5008 2040506f call l2cap_reset_rfcomm_channel_state 
+5009 2020500a branch l2cap_send_disconnect_rsp_pkt 
+
+l2cap_send_disconnect_rsp_pkt:
+500a 20407ead call load_cont_pointers 
+500b 58000007 setarg signal_disconnect_rsp 
+500c e0a08000 istore 1 ,contw 
+500d 18e27e00 copy queue ,pdata 
+500e e0a08000 istore 1 ,contw 
+500f 58000004 setarg 0x0004 
+5010 e0a10000 istore 2 ,contw 
+5011 1a227e00 copy rega ,pdata 
+5012 e0a10000 istore 2 ,contw 
+5013 19627e00 copy timeup ,pdata 
+5014 e0a10000 istore 2 ,contw 
+5015 18007e08 force 8 ,pdata 
+5016 20205019 branch l2cap_proc_signal_disconnect_req_rtn 
+
+l2cap_proc_signal_disconnect_req_err_rtn:
+5017 20407ead call load_cont_pointers 
+5018 20205019 branch l2cap_proc_signal_disconnect_req_rtn 
+
+l2cap_proc_signal_disconnect_req_rtn:
+5019 9a40a400 iadd regb ,regb 
+501a 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_disconnect_rsp:
+501b e8c08000 ifetch 1 ,contr 
+501c 1fe20e00 copy pdata ,queue 
+501d e8c10000 ifetch 2 ,contr 
+501e 1fe22200 copy pdata ,rega 
+501f 1a627e00 copy regc ,pdata 
+5020 9a262600 isub rega ,regc 
+5021 e8c10000 ifetch 2 ,contr 
+5022 1fe21600 copy pdata ,timeup 
+5023 e8c10000 ifetch 2 ,contr 
+5024 1fe20400 copy pdata ,temp 
+5025 20407ea8 call save_cont_pointers 
+5026 470bc022 bpatchx patch22_7 ,mem_patch22 
+5027 58000050 setarg l2cap_sdp_channel 
+5028 98467c00 isub temp ,null 
+5029 2022d035 branch l2cap_proc_signal_disconnect_rsp_sdp ,zero 
+502a 58000051 setarg l2cap_rfcomm_channel 
+502b 98467c00 isub temp ,null 
+502c 2022d03b branch l2cap_proc_signal_disconnect_rsp_rfcomm ,zero 
+502d 58000052 setarg l2cap_hid_control_channel 
+502e 98467c00 isub temp ,null 
+502f 2022d041 branch l2cap_proc_signal_disconnect_rsp_hid_ctrl ,zero 
+5030 58000053 setarg l2cap_hid_interrupt_channel 
+5031 98467c00 isub temp ,null 
+5032 2022d047 branch l2cap_proc_signal_disconnect_rsp_hid_int ,zero 
+5033 20405062 call l2cap_reject_command 
+5034 2020504f branch l2cap_proc_signal_disconnect_rsp_err_rtn 
+
+l2cap_proc_signal_disconnect_rsp_sdp:
+5035 18422200 copy temp ,rega 
+5036 19620400 copy timeup ,temp 
+5037 68014248 fetch 2 ,mem_sdp_remote_cid 
+5038 98467c00 isub temp ,null 
+5039 2042d074 call l2cap_reset_sdp_channel_state ,zero 
+503a 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn 
+
+l2cap_proc_signal_disconnect_rsp_rfcomm:
+503b 18422200 copy temp ,rega 
+503c 19620400 copy timeup ,temp 
+503d 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+503e 98467c00 isub temp ,null 
+503f 2042d06f call l2cap_reset_rfcomm_channel_state ,zero 
+5040 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn 
+
+l2cap_proc_signal_disconnect_rsp_hid_ctrl:
+5041 18422200 copy temp ,rega 
+5042 19620400 copy timeup ,temp 
+5043 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+5044 98467c00 isub temp ,null 
+5045 2042d079 call l2cap_reset_hid_ctrl_state ,zero 
+5046 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn 
+
+l2cap_proc_signal_disconnect_rsp_hid_int:
+5047 18422200 copy temp ,rega 
+5048 19620400 copy timeup ,temp 
+5049 6801424e fetch 2 ,mem_hid_int_remote_cid 
+504a 98467c00 isub temp ,null 
+504b 2042d07f call l2cap_reset_hid_int_state ,zero 
+504c 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn 
+
+l2cap_proc_signal_disconnect_rsp_rtn:
+504d 20407ead call load_cont_pointers 
+504e 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_disconnect_rsp_err_rtn:
+504f 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_echo_req:
+5050 e8c08000 ifetch 1 ,contr 
+5051 1fe20e00 copy pdata ,queue 
+5052 e8c10000 ifetch 2 ,contr 
+5053 1fe22200 copy pdata ,rega 
+5054 98c08c00 iadd contr ,contr 
+5055 58000009 setarg 9 
+5056 e0a08000 istore 1 ,contw 
+5057 18e27e00 copy queue ,pdata 
+5058 e0a08000 istore 1 ,contw 
+5059 18007e00 force 0x0000 ,pdata 
+505a e0a10000 istore 2 ,contw 
+505b 18007e04 force 4 ,pdata 
+505c 9a40a400 iadd regb ,regb 
+505d 1a627e00 copy regc ,pdata 
+505e 9a262600 isub rega ,regc 
+505f 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_echo_rsp:
+5060 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_proc_signal_info_rsp:
+5061 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_reject_command:
+5062 18002400 force 0 ,regb 
+5063 204052c3 call l2cap_get_signal_tx_payload 
+5064 58000001 setarg signal_cmd_reject 
+5065 e0a08000 istore 1 ,contw 
+5066 18e27e00 copy queue ,pdata 
+5067 e0a08000 istore 1 ,contw 
+5068 58000002 setarg 2 
+5069 e0a10000 istore 2 ,contw 
+506a 58000000 setarg cmd_not_understood 
+506b e0a10000 istore 2 ,contw 
+506c 1a40a406 increase 6 ,regb 
+506d da600004 arg 4 ,regc 
+506e 20204e1e branch l2cap_process_one_signal_rtn 
+
+l2cap_reset_rfcomm_channel_state:
+506f 58000000 setarg 0 
+5070 6001027b store 2 ,mem_rfcomm_tx_pkt_length 
+5071 6001424a store 2 ,mem_rfcomm_remote_cid 
+5072 70425100 jam 0 ,mem_rfcomm_state 
+5073 20600000 rtn 
+
+l2cap_reset_sdp_channel_state:
+5074 58000000 setarg 0 
+5075 60010275 store 2 ,mem_sdp_tx_pkt_length 
+5076 60014248 store 2 ,mem_sdp_remote_cid 
+5077 70425000 jam 0 ,mem_sdp_state 
+5078 20600000 rtn 
+
+l2cap_reset_hid_ctrl_state:
+5079 58000000 setarg 0 
+507a 6001424c store 2 ,mem_hid_ctrl_remote_cid 
+507b 70425200 jam 0 ,mem_hid_control_state 
+507c 6800c253 fetch 1 ,mem_hid_interrupt_state 
+507d c0005085 beq 0 ,l2cap_reset_hid_disconnected 
+507e 20600000 rtn 
+
+l2cap_reset_hid_int_state:
+507f 58000000 setarg 0 
+5080 6001424e store 2 ,mem_hid_int_remote_cid 
+5081 70425300 jam 0 ,mem_hid_interrupt_state 
+5082 6800c252 fetch 1 ,mem_hid_control_state 
+5083 c0005085 beq 0 ,l2cap_reset_hid_disconnected 
+5084 20600000 rtn 
+
+l2cap_reset_hid_disconnected:
+5085 700a9907 jam bt_evt_hid_disconnected ,mem_fifo_temp 
+5086 20207d86 branch ui_ipc_send_event 
+
+l2cap_disconnect_interrupt_req:
+5087 6800827f fetch 1 ,mem_control_tasks 
+5088 793ffe00 set0 l2cap_disconnect_interrupt ,pdata 
+5089 6000827f store 1 ,mem_control_tasks 
+508a 6801424e fetch 2 ,mem_hid_int_remote_cid 
+508b 207a0000 rtn blank 
+508c 204052b8 call l2cap_malloc_signal_channel 
+508d 6801424e fetch 2 ,mem_hid_int_remote_cid 
+508e 1fe22200 copy pdata ,rega 
+508f 18002453 force l2cap_hid_interrupt_channel ,regb 
+5090 2020509a branch l2cap_generate_disconnect_req 
+
+l2cap_disconnect_control_req:
+5091 6800827f fetch 1 ,mem_control_tasks 
+5092 793ffe07 set0 l2cap_disconnect_control ,pdata 
+5093 6000827f store 1 ,mem_control_tasks 
+5094 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+5095 207a0000 rtn blank 
+5096 204052b8 call l2cap_malloc_signal_channel 
+5097 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+5098 1fe22200 copy pdata ,rega 
+5099 18002452 force l2cap_hid_control_channel ,regb 
+
+l2cap_generate_disconnect_req:
+509a 2040523a call l2cap_get_req_id 
+509b 204052c3 call l2cap_get_signal_tx_payload 
+509c 18007e06 force signal_disconnect_req ,pdata 
+509d e0a08000 istore 1 ,contw 
+509e 6800c255 fetch 1 ,mem_ml2cap_comm_id 
+509f e0a08000 istore 1 ,contw 
+50a0 58000004 setarg 0x0004 
+50a1 e0a10000 istore 2 ,contw 
+50a2 1a227e00 copy rega ,pdata 
+50a3 e0a10000 istore 2 ,contw 
+50a4 1a427e00 copy regb ,pdata 
+50a5 e0a10000 istore 2 ,contw 
+50a6 18000408 force 0x08 ,temp 
+50a7 202050de branch ml2cap_send_signal 
+
+ml2cap_send_signal_connect_req:
+50a8 470c4023 bpatchx patch23_0 ,mem_patch23 
+50a9 2040523a call l2cap_get_req_id 
+50aa 204052c3 call l2cap_get_signal_tx_payload 
+50ab 58000002 setarg signal_connect_req 
+50ac e0a08000 istore 1 ,contw 
+50ad 6800c255 fetch 1 ,mem_ml2cap_comm_id 
+50ae e0a08000 istore 1 ,contw 
+50af 58000004 setarg 0x0004 
+50b0 e0a10000 istore 2 ,contw 
+50b1 18427e00 copy temp ,pdata 
+50b2 e0a10000 istore 2 ,contw 
+50b3 19627e00 copy timeup ,pdata 
+50b4 e0a10000 istore 2 ,contw 
+50b5 d8400008 arg 8 ,temp 
+50b6 202050de branch ml2cap_send_signal 
+
+ml2cap_send_signal_config_req:
+50b7 470cc023 bpatchx patch23_1 ,mem_patch23 
+50b8 2040523a call l2cap_get_req_id 
+50b9 204052c3 call l2cap_get_signal_tx_payload 
+50ba 58000004 setarg signal_config_req 
+50bb e0a08000 istore 1 ,contw 
+50bc 6800c255 fetch 1 ,mem_ml2cap_comm_id 
+50bd e0a08000 istore 1 ,contw 
+50be 58000008 setarg 0x0008 
+50bf e0a10000 istore 2 ,contw 
+50c0 18427e00 copy temp ,pdata 
+50c1 e0a10000 istore 2 ,contw 
+50c2 58000000 setarg 0x0000 
+50c3 e0a10000 istore 2 ,contw 
+50c4 58000001 setarg 0x01 
+50c5 e0a08000 istore 1 ,contw 
+50c6 58000002 setarg 0x02 
+50c7 e0a08000 istore 1 ,contw 
+50c8 580003e3 setarg l2cap_config_mtu_rfcomm 
+50c9 e0a10000 istore 2 ,contw 
+50ca d840000c arg 0xc ,temp 
+50cb 202050de branch ml2cap_send_signal 
+
+ml2cap_send_signal_disconn_req:
+50cc 470d4023 bpatchx patch23_2 ,mem_patch23 
+50cd 2040523a call l2cap_get_req_id 
+50ce 204052c3 call l2cap_get_signal_tx_payload 
+50cf 58000006 setarg signal_disconnect_req 
+50d0 e0a08000 istore 1 ,contw 
+50d1 6800c255 fetch 1 ,mem_ml2cap_comm_id 
+50d2 1fe0fe01 increase 1 ,pdata 
+50d3 18a22200 copy contw ,rega 
+50d4 6000c255 store 1 ,mem_ml2cap_comm_id 
+50d5 1a220a00 copy rega ,contw 
+50d6 e0a08000 istore 1 ,contw 
+50d7 58000004 setarg 0x0004 
+50d8 e0a10000 istore 2 ,contw 
+50d9 18427e00 copy temp ,pdata 
+50da e0a10000 istore 2 ,contw 
+50db 19627e00 copy timeup ,pdata 
+50dc e0a10000 istore 2 ,contw 
+50dd d8400008 arg 0x8 ,temp 
+
+ml2cap_send_signal:
+50de 6009026f storet 2 ,mem_l2cap_signal_tx_length 
+50df 18427e00 copy temp ,pdata 
+50e0 203a5264 branch l2cap_malloc_discard ,blank 
+50e1 204052c1 call l2cap_get_signal_tx_buff 
+50e2 6801026f fetch 2 ,mem_l2cap_signal_tx_length 
+50e3 e0a10000 istore 2 ,contw 
+50e4 18007e01 force l2cap_signal_channel ,pdata 
+50e5 e0a10000 istore 2 ,contw 
+50e6 20600000 rtn 
+
+msdp_send_req_done:
+50e7 68010275 fetch 2 ,mem_sdp_tx_pkt_length 
+50e8 203a2a8c branch assert ,blank 
+50e9 204052ce call l2cap_get_sdp_tx_buff 
+50ea 68010275 fetch 2 ,mem_sdp_tx_pkt_length 
+50eb e0a10000 istore 2 ,contw 
+50ec 68014248 fetch 2 ,mem_sdp_remote_cid 
+50ed e0a10000 istore 2 ,contw 
+50ee 20600000 rtn 
+
+ml2cap_rx_multiplexing:
+50ef 68010266 fetch 2 ,mem_l2cap_rx_pkt_length 
+50f0 203a4dfc branch l2cap_rx_reset_state ,blank 
+50f1 470dc023 bpatchx patch23_3 ,mem_patch23 
+50f2 68008268 fetch 1 ,mem_l2cap_rx_cid 
+50f3 c000d0f9 beq l2cap_signal_channel ,ml2cap_call_proc_signal 
+50f4 c0284de8 beq l2cap_sdp_channel ,ml2cap_call_proc_sdp 
+50f5 c028cdf5 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm 
+50f6 c0294df3 beq l2cap_hid_control_channel ,l2cap_call_proc_hid 
+50f7 c029cdf3 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid 
+50f8 20204dfc branch l2cap_rx_reset_state 
+
+ml2cap_call_proc_signal:
+50f9 470e4023 bpatchx patch23_4 ,mem_patch23 
+50fa 204052b8 call l2cap_malloc_signal_channel 
+50fb 18002400 force 0 ,regb 
+50fc 204052c3 call l2cap_get_signal_tx_payload 
+50fd 1fe20a00 copy pdata ,contw 
+50fe 68010266 fetch 2 ,mem_l2cap_rx_pkt_length 
+50ff 1fe22600 copy pdata ,regc 
+5100 68010264 fetch 2 ,mem_l2cap_payload_ptr 
+5101 98000c00 iforce contr 
+
+ml2cap_proc_one_comm_loop:
+5102 20405108 call ml2cap_proc_one_comm 
+5103 1a60a7fc increase -4 ,regc 
+5104 2422d102 nbranch ml2cap_proc_one_comm_loop ,zero 
+5105 1a420400 copy regb ,temp 
+5106 204050de call ml2cap_send_signal 
+5107 20204dfc branch l2cap_rx_reset_state 
+
+ml2cap_proc_one_comm:
+5108 e8c08000 ifetch 1 ,contr 
+5109 c0015113 beq signal_connect_req ,ml2cap_proc_signal_connect_req 
+510a c000d116 beq signal_cmd_reject ,ml2cap_proc_signal_cmd_reject 
+510b c001d120 beq signal_connect_rsp ,ml2cap_proc_signal_connect_rsp 
+510c c002d15c beq signal_config_rsp ,ml2cap_proc_signal_config_rsp 
+510d c002518e beq signal_config_req ,ml2cap_proc_signal_config_req 
+510e c003d213 beq signal_disconnect_rsp ,ml2cap_proc_signal_disconn_rsp 
+510f c00351e1 beq signal_disconnect_req ,ml2cap_proc_signal_disconn_req 
+5110 c0045050 beq signal_echo_req ,l2cap_proc_signal_echo_req 
+5111 c0054e3a beq signal_info_req ,ml2cap_proc_signal_info_req 
+5112 2020522e branch ml2cap_proc_send_reject 
+
+ml2cap_proc_signal_connect_req:
+5113 20407ea8 call save_cont_pointers 
+5114 20407ead call load_cont_pointers 
+5115 20204e51 branch l2cap_proc_signal_connect_req 
+
+ml2cap_proc_signal_cmd_reject:
+5116 e8c08000 ifetch 1 ,contr 
+5117 1fe20e00 copy pdata ,queue 
+5118 e8c10000 ifetch 2 ,contr 
+5119 1fe22200 copy pdata ,rega 
+511a 1a627e00 copy regc ,pdata 
+511b 9a262600 isub rega ,regc 
+
+mvptr:
+511c e8c08000 ifetch 1 ,contr 
+511d 1a20a3ff increase -1 ,rega 
+511e 2422d11c nbranch mvptr ,zero 
+511f 20600000 rtn 
+
+ml2cap_proc_signal_connect_rsp:
+5120 e8c08000 ifetch 1 ,contr 
+5121 1fe20e00 copy pdata ,queue 
+5122 e8c10000 ifetch 2 ,contr 
+5123 1fe22200 copy pdata ,rega 
+5124 e8c10000 ifetch 2 ,contr 
+5125 1fe21600 copy pdata ,timeup 
+5126 e8c10000 ifetch 2 ,contr 
+5127 1fe20400 copy pdata ,temp 
+5128 e8c10000 ifetch 2 ,contr 
+5129 1fe67c00 sub pdata ,0 ,null 
+512a 2022d132 branch ml2cap_proc_signal_connect_rsp_sucessful ,zero 
+512b c001512e beq l2cap_connect_refused_psm_unsupported ,ml2cap_proc_signal_connect_refused_result 
+512c c002512e beq l2cap_connect_refused_no_resources ,ml2cap_proc_signal_connect_refused_result 
+512d 20205130 branch ml2cap_proc_signal_connect_rsp_mnosucc 
+
+ml2cap_proc_signal_connect_refused_result:
+512e 700a9916 jam bt_evt_ml2cap_conn_refused ,mem_fifo_temp 
+512f 20407d86 call ui_ipc_send_event 
+
+ml2cap_proc_signal_connect_rsp_mnosucc:
+5130 e8c10000 ifetch 2 ,contr 
+5131 20205159 branch mnosucc 
+
+ml2cap_proc_signal_connect_rsp_sucessful:
+5132 20407ea8 call save_cont_pointers 
+5133 470ec023 bpatchx patch23_5 ,mem_patch23 
+5134 58000050 setarg l2cap_sdp_channel 
+5135 98467c00 isub temp ,null 
+5136 2022d141 branch ml2cap_proc_signal_connect_rsp_sdp ,zero 
+5137 58000051 setarg l2cap_rfcomm_channel 
+5138 98467c00 isub temp ,null 
+5139 2022d147 branch ml2cap_proc_signal_connect_rsp_rfcomm ,zero 
+513a 58000053 setarg l2cap_hid_interrupt_channel 
+513b 98467c00 isub temp ,null 
+513c 2022d153 branch ml2cap_proc_signal_connect_rsp_hid_int ,zero 
+513d 58000052 setarg l2cap_hid_control_channel 
+513e 98467c00 isub temp ,null 
+513f 2022d14d branch ml2cap_proc_signal_connect_rsp_hid_ctrl ,zero 
+5140 20205159 branch mnosucc 
+
+ml2cap_proc_signal_connect_rsp_sdp:
+5141 19627e00 copy timeup ,pdata 
+5142 60014248 store 2 ,mem_sdp_remote_cid 
+5143 6800c250 fetch 1 ,mem_sdp_state 
+5144 79207e01 set1 l2cap_channel_state_conn_res 
+5145 6000c250 store 1 ,mem_sdp_state 
+5146 20205158 branch mnosucc1 
+
+ml2cap_proc_signal_connect_rsp_rfcomm:
+5147 19627e00 copy timeup ,pdata 
+5148 6001424a store 2 ,mem_rfcomm_remote_cid 
+5149 6800c251 fetch 1 ,mem_rfcomm_state 
+514a 79207e01 set1 l2cap_channel_state_conn_res 
+514b 6000c251 store 1 ,mem_rfcomm_state 
+514c 20205158 branch mnosucc1 
+
+ml2cap_proc_signal_connect_rsp_hid_ctrl:
+514d 19627e00 copy timeup ,pdata 
+514e 6001424c store 2 ,mem_hid_ctrl_remote_cid 
+514f 6800c252 fetch 1 ,mem_hid_control_state 
+5150 79207e01 set1 l2cap_channel_state_conn_res 
+5151 6000c252 store 1 ,mem_hid_control_state 
+5152 20205158 branch mnosucc1 
+
+ml2cap_proc_signal_connect_rsp_hid_int:
+5153 19627e00 copy timeup ,pdata 
+5154 6001424e store 2 ,mem_hid_int_remote_cid 
+5155 6800c253 fetch 1 ,mem_hid_interrupt_state 
+5156 79207e01 set1 l2cap_channel_state_conn_res 
+5157 6000c253 store 1 ,mem_hid_interrupt_state 
+
+mnosucc1:
+5158 20407ead call load_cont_pointers 
+
+mnosucc:
+5159 1a627e00 copy regc ,pdata 
+515a 9a262600 isub rega ,regc 
+515b 20600000 rtn 
+
+ml2cap_proc_signal_config_rsp:
+515c e8c08000 ifetch 1 ,contr 
+515d 1fe20e00 copy pdata ,queue 
+515e e8c10000 ifetch 2 ,contr 
+515f 1fe22200 copy pdata ,rega 
+5160 1a627e00 copy regc ,pdata 
+5161 9a262600 isub rega ,regc 
+5162 e8c10000 ifetch 2 ,contr 
+5163 1fe21600 copy pdata ,timeup 
+5164 e8c10000 ifetch 2 ,contr 
+5165 e8c10000 ifetch 2 ,contr 
+5166 243a5188 nbranch mcrsdone1 ,blank 
+5167 20407ea8 call save_cont_pointers 
+5168 19620400 copy timeup ,temp 
+5169 470f4023 bpatchx patch23_6 ,mem_patch23 
+516a 58000050 setarg l2cap_sdp_channel 
+516b 98467c00 isub temp ,null 
+516c 2022d176 branch ml2cap_proc_signal_config_rsp_sdp ,zero 
+516d 58000051 setarg l2cap_rfcomm_channel 
+516e 98467c00 isub temp ,null 
+516f 2022d17a branch ml2cap_proc_signal_config_rsp_rfcomm ,zero 
+5170 58000052 setarg l2cap_hid_control_channel 
+5171 98467c00 isub temp ,null 
+5172 2022d17e branch ml2cap_proc_signal_config_rsp_hid_ctrl ,zero 
+5173 58000053 setarg l2cap_hid_interrupt_channel 
+5174 98467c00 isub temp ,null 
+5175 2022d182 branch ml2cap_proc_signal_config_rsp_hid_int ,zero 
+
+ml2cap_proc_signal_config_rsp_sdp:
+5176 6800c250 fetch 1 ,mem_sdp_state 
+5177 79207e05 set1 l2cap_channel_state_rcv_cfg_res 
+5178 6000c250 store 1 ,mem_sdp_state 
+5179 20600000 rtn 
+
+ml2cap_proc_signal_config_rsp_rfcomm:
+517a 6800c251 fetch 1 ,mem_rfcomm_state 
+517b 79207e05 set1 l2cap_channel_state_rcv_cfg_res 
+517c 6000c251 store 1 ,mem_rfcomm_state 
+517d 20600000 rtn 
+
+ml2cap_proc_signal_config_rsp_hid_ctrl:
+517e 6800c252 fetch 1 ,mem_hid_control_state 
+517f 79207e05 set1 l2cap_channel_state_rcv_cfg_res 
+5180 6000c252 store 1 ,mem_hid_control_state 
+5181 20600000 rtn 
+
+ml2cap_proc_signal_config_rsp_hid_int:
+5182 6800c253 fetch 1 ,mem_hid_interrupt_state 
+5183 79207e05 set1 l2cap_channel_state_rcv_cfg_res 
+5184 6000c253 store 1 ,mem_hid_interrupt_state 
+5185 700a9906 jam bt_evt_hid_connected ,mem_fifo_temp 
+5186 20207d86 branch ui_ipc_send_event 
+
+mcfrsdone:
+5187 20407ead call load_cont_pointers 
+
+mcrsdone1:
+5188 1a20a3fa increase -6 ,rega 
+
+mloop2:
+5189 2022d18d branch mcrsdone ,zero 
+518a 18c08c01 increase 1 ,contr 
+518b 1a20a3ff increase -1 ,rega 
+518c 20205189 branch mloop2 
+
+mcrsdone:
+518d 20600000 rtn 
+
+ml2cap_proc_signal_config_req:
+518e e8c08000 ifetch 1 ,contr 
+518f 1fe20e00 copy pdata ,queue 
+5190 e8c10000 ifetch 2 ,contr 
+5191 1fe22200 copy pdata ,rega 
+5192 1a627e00 copy regc ,pdata 
+5193 9a262600 isub rega ,regc 
+5194 e8c10000 ifetch 2 ,contr 
+5195 18c08c02 increase 2 ,contr 
+5196 1fe20400 copy pdata ,temp 
+5197 58000005 setarg signal_config_rsp 
+5198 e0a08000 istore 1 ,contw 
+5199 18e27e00 copy queue ,pdata 
+519a e0a08000 istore 1 ,contw 
+519b 1a20a202 increase 2 ,rega 
+519c 1a227e00 copy rega ,pdata 
+519d e0a10000 istore 2 ,contw 
+519e 20407ea8 call save_cont_pointers 
+519f 470fc023 bpatchx patch23_7 ,mem_patch23 
+51a0 58000050 setarg l2cap_sdp_channel 
+51a1 98467c00 isub temp ,null 
+51a2 2022d1ad branch ml2cap_proc_signal_config_req_sdp ,zero 
+51a3 58000051 setarg l2cap_rfcomm_channel 
+51a4 98467c00 isub temp ,null 
+51a5 2022d1be branch ml2cap_proc_signal_config_req_rfcomm ,zero 
+51a6 58000052 setarg l2cap_hid_control_channel 
+51a7 98467c00 isub temp ,null 
+51a8 2022d1c4 branch ml2cap_proc_signal_config_req_hid_ctrl ,zero 
+51a9 58000053 setarg l2cap_hid_interrupt_channel 
+51aa 98467c00 isub temp ,null 
+51ab 2022d1ca branch ml2cap_proc_signal_config_req_hid_int ,zero 
+51ac 202051cf branch mcfgrq_done 
+
+ml2cap_proc_signal_config_req_sdp:
+51ad 6800c250 fetch 1 ,mem_sdp_state 
+51ae 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+51af 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+51b0 6000c250 store 1 ,mem_sdp_state 
+51b1 c28151bb bbit1 l2cap_channel_state_snd_cfg_req ,ml2cap_proc_signal_config_req_sdp_nsndreq 
+51b2 6808827f fetcht 1 ,mem_control_tasks 
+51b3 79200406 set1 l2cap_init_config_req ,temp 
+51b4 6008827f storet 1 ,mem_control_tasks 
+51b5 18e27e00 copy queue ,pdata 
+51b6 1fe0fe01 increase 1 ,pdata 
+51b7 60008281 store 1 ,mem_config_identifier 
+51b8 6800c250 fetch 1 ,mem_sdp_state 
+51b9 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+51ba 6000c250 store 1 ,mem_sdp_state 
+
+ml2cap_proc_signal_config_req_sdp_nsndreq:
+51bb 68014248 fetch 2 ,mem_sdp_remote_cid 
+51bc 60010282 store 2 ,mem_config_req_dest_cid 
+51bd 202051cf branch mcfgrq_done 
+
+ml2cap_proc_signal_config_req_rfcomm:
+51be 6800c251 fetch 1 ,mem_rfcomm_state 
+51bf 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+51c0 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+51c1 6000c251 store 1 ,mem_rfcomm_state 
+51c2 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+51c3 202051cf branch mcfgrq_done 
+
+ml2cap_proc_signal_config_req_hid_ctrl:
+51c4 6800c252 fetch 1 ,mem_hid_control_state 
+51c5 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+51c6 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+51c7 6000c252 store 1 ,mem_hid_control_state 
+51c8 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+51c9 202051cf branch mcfgrq_done 
+
+ml2cap_proc_signal_config_req_hid_int:
+51ca 6800c253 fetch 1 ,mem_hid_interrupt_state 
+51cb 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata 
+51cc 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata 
+51cd 6000c253 store 1 ,mem_hid_interrupt_state 
+51ce 6801424e fetch 2 ,mem_hid_int_remote_cid 
+
+mcfgrq_done:
+51cf 1fe21600 copy pdata ,timeup 
+51d0 20407ead call load_cont_pointers 
+51d1 19627e00 copy timeup ,pdata 
+51d2 e0a10000 istore 2 ,contw 
+51d3 18007e00 force 0x0000 ,pdata 
+51d4 e0a10000 istore 2 ,contw 
+51d5 18007e00 force 0x0000 ,pdata 
+51d6 e0a10000 istore 2 ,contw 
+51d7 18007e0a force 10 ,pdata 
+51d8 9a40a400 iadd regb ,regb 
+51d9 1a20a3fa increase -6 ,rega 
+
+mloop1:
+51da 2022d1e0 branch mcrqdone ,zero 
+51db e8c08000 ifetch 1 ,contr 
+51dc e0a08000 istore 1 ,contw 
+51dd 1a40a401 increase 1 ,regb 
+51de 1a20a3ff increase -1 ,rega 
+51df 202051da branch mloop1 
+
+mcrqdone:
+51e0 20600000 rtn 
+
+ml2cap_proc_signal_disconn_req:
+51e1 e8c08000 ifetch 1 ,contr 
+51e2 1fe20e00 copy pdata ,queue 
+51e3 e8c10000 ifetch 2 ,contr 
+51e4 1fe22200 copy pdata ,rega 
+51e5 1a627e00 copy regc ,pdata 
+51e6 9a262600 isub rega ,regc 
+51e7 e8c10000 ifetch 2 ,contr 
+51e8 1fe22200 copy pdata ,rega 
+51e9 e8c10000 ifetch 2 ,contr 
+51ea 1fe21600 copy pdata ,timeup 
+51eb 20407ea8 call save_cont_pointers 
+51ec 47104024 bpatchx patch24_0 ,mem_patch24 
+51ed 58000050 setarg l2cap_sdp_channel 
+51ee 1a220400 copy rega ,temp 
+51ef 98467c00 isub temp ,null 
+51f0 2022d1fa branch ml2cap_proc_signal_disconn_sdp ,zero 
+51f1 58000052 setarg l2cap_hid_control_channel 
+51f2 1a220400 copy rega ,temp 
+51f3 98467c00 isub temp ,null 
+51f4 2022d1ff branch ml2cap_proc_signal_disconn_hid_ctrl ,zero 
+51f5 58000053 setarg l2cap_hid_interrupt_channel 
+51f6 1a220400 copy rega ,temp 
+51f7 98467c00 isub temp ,null 
+51f8 2022d201 branch ml2cap_proc_signal_disconn_hid_int ,zero 
+51f9 20205203 branch mclsrfc 
+
+ml2cap_proc_signal_disconn_sdp:
+51fa 58000000 setarg 0x0000 
+51fb 60010275 store 2 ,mem_sdp_tx_pkt_length 
+51fc 60014248 store 2 ,mem_sdp_remote_cid 
+51fd 6000c250 store 1 ,mem_sdp_state 
+51fe 20205205 branch mclssdp 
+
+ml2cap_proc_signal_disconn_hid_ctrl:
+51ff 20405079 call l2cap_reset_hid_ctrl_state 
+5200 20205205 branch mclssdp 
+
+ml2cap_proc_signal_disconn_hid_int:
+5201 2040507f call l2cap_reset_hid_int_state 
+5202 20205205 branch mclssdp 
+
+mclsrfc:
+5203 58000000 setarg 0x0000 
+5204 6001027b store 2 ,mem_rfcomm_tx_pkt_length 
+
+mclssdp:
+5205 20407ead call load_cont_pointers 
+5206 58000007 setarg signal_disconnect_rsp 
+5207 e0a08000 istore 1 ,contw 
+5208 18e27e00 copy queue ,pdata 
+5209 e0a08000 istore 1 ,contw 
+520a 58000004 setarg 0x0004 
+520b e0a10000 istore 2 ,contw 
+520c 1a227e00 copy rega ,pdata 
+520d e0a10000 istore 2 ,contw 
+520e 19627e00 copy timeup ,pdata 
+520f e0a10000 istore 2 ,contw 
+5210 18007e08 force 8 ,pdata 
+5211 9a40a400 iadd regb ,regb 
+5212 20600000 rtn 
+
+ml2cap_proc_signal_disconn_rsp:
+5213 e8c08000 ifetch 1 ,contr 
+5214 1fe20e00 copy pdata ,queue 
+5215 e8c10000 ifetch 2 ,contr 
+5216 1fe22200 copy pdata ,rega 
+5217 e8c10000 ifetch 2 ,contr 
+5218 1fe21600 copy pdata ,timeup 
+5219 e8c10000 ifetch 2 ,contr 
+521a 1fe20400 copy pdata ,temp 
+521b 20407ea8 call save_cont_pointers 
+521c 4710c024 bpatchx patch24_1 ,mem_patch24 
+521d 6800c255 fetch 1 ,mem_ml2cap_comm_id 
+521e a8e1fe00 icompare 0xff ,queue 
+521f 2420d22a nbranch mdisdone ,true 
+5220 58000050 setarg l2cap_sdp_channel 
+5221 98467c00 isub temp ,null 
+5222 2022d227 branch ml2cap_proc_signal_disconn_rsp_sdp ,zero 
+5223 58000051 setarg l2cap_rfcomm_channel 
+5224 98467c00 isub temp ,null 
+5225 2022d22a branch ml2cap_proc_signal_disconn_rsp_rfcomm ,zero 
+5226 2020522a branch mdisdone 
+
+ml2cap_proc_signal_disconn_rsp_sdp:
+5227 70424800 jam 0 ,mem_sdp_remote_cid 
+5228 70425000 jam 0 ,mem_sdp_state 
+5229 2020522a branch mdisdone 
+
+ml2cap_proc_signal_disconn_rsp_rfcomm:
+
+mdisdone:
+522a 20407ead call load_cont_pointers 
+522b 1a627e00 copy regc ,pdata 
+522c 9a262600 isub rega ,regc 
+522d 20600000 rtn 
+
+ml2cap_proc_send_reject:
+522e 58000001 setarg signal_cmd_reject 
+522f e0a08000 istore 1 ,contw 
+5230 e8c08000 ifetch 1 ,contr 
+5231 e0a08000 istore 1 ,contw 
+5232 58000002 setarg 0x0002 
+5233 e0a10000 istore 2 ,contw 
+5234 58000000 setarg 0x0000 
+5235 e0a10000 istore 2 ,contw 
+5236 58000006 setarg 0x0006 
+5237 9a40a400 iadd regb ,regb 
+5238 18002604 force 4 ,regc 
+5239 20600000 rtn 
+
+l2cap_get_req_id:
+523a 6800c255 fetch 1 ,mem_ml2cap_comm_id 
+523b 1fe0fe01 increase 1 ,pdata 
+523c c080523e bne 0 ,l2cap_get_req_id_ok 
+523d 1fe0fe01 increase 1 ,pdata 
+
+l2cap_get_req_id_ok:
+523e 6000c255 store 1 ,mem_ml2cap_comm_id 
+523f 20600000 rtn 
+
+l2cap_malloc:
+5240 47114024 bpatchx patch24_2 ,mem_patch24 
+5241 da400000 arg 0 ,regb 
+5242 2040526e call l2cap_malloc_is_fifo_full 
+5243 243a2a8c nbranch assert ,blank 
+5244 2040527e call l2cap_malloc_get_full_map 
+5245 da401800 arg mem_tx_buff0 ,regb 
+5246 d8e00000 arg 0 ,queue 
+
+l2cap_malloc_loop:
+5247 6808c256 fetcht 1 ,mem_used_map 
+5248 a84fffff qisolate1 temp 
+5249 2020d24f branch l2cap_malloc_next ,true 
+524a 204052a0 call l2cap_malloc_enough 
+524b 19667c00 sub timeup ,0 ,null 
+524c 2021524f branch l2cap_malloc_next ,positive 
+524d 20405288 call l2cap_malloc_into_fifo 
+524e 20205255 branch l2cap_malloc_rtn 
+
+l2cap_malloc_next:
+524f 1a40a480 increase 128 ,regb 
+5250 18e08e01 increase 1 ,queue 
+5251 58000008 setarg 8 
+5252 98e67c00 isub queue ,null 
+5253 20215247 branch l2cap_malloc_loop ,positive 
+5254 da400000 arg 0 ,regb 
+
+l2cap_malloc_rtn:
+5255 1a427e00 copy regb ,pdata 
+5256 203a2a8c branch assert ,blank 
+5257 20600000 rtn 
+
+l2cap_malloc_fifo_out:
+5258 4711c024 bpatchx patch24_3 ,mem_patch24 
+5259 20405277 call l2cap_malloc_fifo_get_first_ptr 
+525a 18c08c01 increase 1 ,contr 
+525b e8c10000 ifetch 2 ,contr 
+525c 20600000 rtn 
+
+l2cap_malloc_free:
+525d 47124024 bpatchx patch24_4 ,mem_patch24 
+525e 20405277 call l2cap_malloc_fifo_get_first_ptr 
+525f 18c20a00 copy contr ,contw 
+5260 18c20400 copy contr ,temp 
+5261 58000000 setarg 0 
+5262 e0a18000 istore 3 ,contw 
+5263 20600000 rtn 
+
+l2cap_malloc_discard:
+5264 4712c024 bpatchx patch24_5 ,mem_patch24 
+5265 20405274 call l2cap_malloc_is_fifo_empty 
+5266 203a2a8c branch assert ,blank 
+5267 6801c25d fetch 3 ,mem_tx_fifo2 
+5268 6001c260 store 3 ,mem_tx_fifo3 
+5269 6801c25a fetch 3 ,mem_tx_fifo1 
+526a 6001c25d store 3 ,mem_tx_fifo2 
+526b 6801c257 fetch 3 ,mem_tx_fifo0 
+526c 6001c25a store 3 ,mem_tx_fifo1 
+526d 20600000 rtn 
+
+l2cap_malloc_is_fifo_full:
+526e 47134024 bpatchx patch24_6 ,mem_patch24 
+526f 6801c257 fetch 3 ,mem_tx_fifo0 
+5270 20600000 rtn 
+
+l2cap_malloc_is_fifo_nearly_full:
+5271 4713c024 bpatchx patch24_7 ,mem_patch24 
+5272 6801c25a fetch 3 ,mem_tx_fifo1 
+5273 20600000 rtn 
+
+l2cap_malloc_is_fifo_empty:
+5274 47144025 bpatchx patch25_0 ,mem_patch25 
+5275 6801c260 fetch 3 ,mem_tx_fifo3 
+5276 20600000 rtn 
+
+l2cap_malloc_fifo_get_first_ptr:
+5277 20405274 call l2cap_malloc_is_fifo_empty 
+5278 203a2a8c branch assert ,blank 
+5279 d8c04257 arg mem_tx_fifo0 ,contr 
+
+l2cap_malloc_free_loop:
+527a e8c18000 ifetch 3 ,contr 
+527b 203a527a branch l2cap_malloc_free_loop ,blank 
+527c 18c08dfd increase -3 ,contr 
+527d 20600000 rtn 
+
+l2cap_malloc_get_full_map:
+527e 4714c025 bpatchx patch25_1 ,mem_patch25 
+527f df200004 arg 4 ,loopcnt 
+5280 d8c04257 arg mem_tx_fifo0_map ,contr 
+5281 d8400000 arg 0 ,temp 
+
+l2cap_malloc_get_full_map_loop:
+5282 e8c18000 ifetch 3 ,contr 
+5283 1fe17eff and pdata ,0xff ,pdata 
+5284 98418400 ior temp ,temp 
+5285 c2005282 loop l2cap_malloc_get_full_map_loop 
+5286 6008c256 storet 1 ,mem_used_map 
+5287 20600000 rtn 
+
+l2cap_malloc_into_fifo:
+5288 47154025 bpatchx patch25_2 ,mem_patch25 
+5289 2040526e call l2cap_malloc_is_fifo_full 
+528a 243a2a8c nbranch assert ,blank 
+528b 20405274 call l2cap_malloc_is_fifo_empty 
+528c 203a5295 branch l2cap_malloc_into_fifo_no_push ,blank 
+528d 6801c25a fetch 3 ,mem_tx_fifo1 
+528e 6001c257 store 3 ,mem_tx_fifo0 
+528f e8c18000 ifetch 3 ,contr 
+5290 e0a18000 istore 3 ,contw 
+5291 e8c18000 ifetch 3 ,contr 
+5292 e0a18000 istore 3 ,contw 
+5293 58000000 setarg 0 
+5294 e0a18000 istore 3 ,contw 
+
+l2cap_malloc_into_fifo_no_push:
+5295 d8400000 arg 0 ,temp 
+5296 19627e00 copy timeup ,pdata 
+5297 98e0fe00 iadd queue ,pdata 
+
+l2cap_malloc_into_fifo_loop:
+5298 f9200400 qset1 temp 
+5299 18e08e01 increase 1 ,queue 
+529a 98e67c00 isub queue ,null 
+529b 2422d298 nbranch l2cap_malloc_into_fifo_loop ,zero 
+529c 1a4d7e00 lshift8 regb ,pdata 
+529d 9841fe00 ior temp ,pdata 
+529e 6001c260 store 3 ,mem_tx_fifo3 
+529f 20600000 rtn 
+
+l2cap_malloc_enough:
+52a0 4715c025 bpatchx patch25_3 ,mem_patch25 
+52a1 2040527e call l2cap_malloc_get_full_map 
+52a2 18e22600 copy queue ,regc 
+52a3 d8400000 arg 0 ,temp 
+52a4 d9600000 arg 0 ,timeup 
+
+l2cap_malloc_enough_loop:
+52a5 18e27e00 copy queue ,pdata 
+52a6 c00452b0 beq 8 ,l2cap_malloc_enough_end 
+52a7 6800c256 fetch 1 ,mem_used_map 
+52a8 afefffff qisolate1 pdata 
+52a9 2020d2b0 branch l2cap_malloc_enough_end ,true 
+52aa 18408480 increase 128 ,temp 
+52ab 18e08e01 increase 1 ,queue 
+52ac 1a227e00 copy rega ,pdata 
+52ad 98467c00 isub temp ,null 
+52ae 2022d2b0 branch l2cap_malloc_enough_end ,zero 
+52af 202152a5 branch l2cap_malloc_enough_loop ,positive 
+
+l2cap_malloc_enough_end:
+52b0 18427e00 copy temp ,pdata 
+52b1 9a267c00 isub rega ,null 
+52b2 242152b6 nbranch l2cap_malloc_enough_rtn ,positive 
+52b3 18e27e00 copy queue ,pdata 
+52b4 1a620400 copy regc ,temp 
+52b5 98461600 isub temp ,timeup 
+
+l2cap_malloc_enough_rtn:
+52b6 1a620e00 copy regc ,queue 
+52b7 20600000 rtn 
+
+l2cap_malloc_signal_channel:
+52b8 47164025 bpatchx patch25_4 ,mem_patch25 
+52b9 da20007f arg l2cap_signal_malloc_size ,rega 
+52ba 20405240 call l2cap_malloc 
+52bb 6001026b store 2 ,mem_l2cap_signal_tx_buff_ptr 
+52bc 1fe0fe04 increase 4 ,pdata 
+52bd 6001026d store 2 ,mem_l2cap_signal_tx_payload_ptr 
+52be 58000000 setarg 0 
+52bf 6001026f store 2 ,mem_l2cap_signal_tx_length 
+52c0 20600000 rtn 
+
+l2cap_get_signal_tx_buff:
+52c1 6801026b fetch 2 ,mem_l2cap_signal_tx_buff_ptr 
+52c2 202052e2 branch l2cap_util_pdata_to_contw 
+
+l2cap_get_signal_tx_payload:
+52c3 6801026d fetch 2 ,mem_l2cap_signal_tx_payload_ptr 
+52c4 202052e2 branch l2cap_util_pdata_to_contw 
+
+l2cap_malloc_sdp_channel:
+52c5 4716c025 bpatchx patch25_5 ,mem_patch25 
+52c6 da2000fa arg sdp_malloc_size ,rega 
+52c7 20405240 call l2cap_malloc 
+52c8 60010271 store 2 ,mem_sdp_tx_buff_ptr 
+52c9 1fe0fe04 increase 4 ,pdata 
+52ca 60010273 store 2 ,mem_sdp_tx_payload_ptr 
+52cb 58000000 setarg 0 
+52cc 60010275 store 2 ,mem_sdp_tx_pkt_length 
+52cd 20600000 rtn 
+
+l2cap_get_sdp_tx_buff:
+52ce 68010271 fetch 2 ,mem_sdp_tx_buff_ptr 
+52cf 202052e2 branch l2cap_util_pdata_to_contw 
+
+l2cap_get_sdp_tx_payload:
+52d0 68010273 fetch 2 ,mem_sdp_tx_payload_ptr 
+52d1 202052e2 branch l2cap_util_pdata_to_contw 
+
+l2cap_malloc_rfcomm_channel:
+52d2 47174025 bpatchx patch25_6 ,mem_patch25 
+52d3 20407e7c call push_stack 
+52d4 70028401 jam rfcomm_malloc_fail ,mem_rfcomm_malloc_fail_flag 
+52d5 2040526e call l2cap_malloc_is_fifo_full 
+52d6 247a0000 nrtn blank 
+52d7 da20007f arg rfcomm_malloc_size ,rega 
+52d8 20405240 call l2cap_malloc 
+52d9 60010277 store 2 ,mem_rfcomm_tx_buff_ptr 
+52da 1fe0fe04 increase 4 ,pdata 
+52db 60010279 store 2 ,mem_rfcomm_tx_payload_ptr 
+52dc 58000000 setarg 0 
+52dd 6001027b store 2 ,mem_rfcomm_tx_pkt_length 
+52de 70028400 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag 
+52df 20207e8c branch pop_stack 
+
+l2cap_get_rfcomm_tx_buff:
+52e0 68010277 fetch 2 ,mem_rfcomm_tx_buff_ptr 
+52e1 202052e2 branch l2cap_util_pdata_to_contw 
+
+l2cap_util_pdata_to_contw:
+52e2 203a2a8c branch assert ,blank 
+52e3 1fe20a00 copy pdata ,contw 
+52e4 20600000 rtn 
+
+l2cap_lpm_save_calc_len:
+52e5 4717c025 bpatchx patch25_7 ,mem_patch25 
+52e6 da400000 arg 0 ,regb 
+52e7 da204257 arg mem_tx_fifo0_map ,rega 
+52e8 1a20a3fe increase -2 ,rega 
+
+l2cap_lpm_save_calc_len_loop:
+52e9 1a20a202 increase 2 ,rega 
+52ea 58004263 setarg mem_tx_fifo_end 
+52eb 9a267c00 isub rega ,null 
+52ec 2022d2f5 branch l2cap_lpm_save_calc_len_end ,zero 
+52ed ea208000 ifetch 1 ,rega 
+52ee 1a20a201 increase 1 ,rega 
+52ef 203a52e9 branch l2cap_lpm_save_calc_len_loop ,blank 
+52f0 ea290000 ifetcht 2 ,rega 
+52f1 e8410000 ifetch 2 ,temp 
+52f2 9a40a400 iadd regb ,regb 
+52f3 1a40a404 increase 4 ,regb 
+52f4 202052e9 branch l2cap_lpm_save_calc_len_loop 
+
+l2cap_lpm_save_calc_len_end:
+52f5 1a427e00 copy regb ,pdata 
+52f6 20600000 rtn 
+
+l2cap_lpm_get_wake_lock:
+52f7 d8e0000c arg wake_lock_l2cap_tx ,queue 
+52f8 20202c32 branch lpm_get_wake_lock 
+
+l2cap_lpm_put_wake_lock:
+52f9 d8e0000c arg wake_lock_l2cap_tx ,queue 
+52fa 20202c36 branch lpm_put_wake_lock 
+
+l2cap_lpm_save_txbuf:
+52fb 47184026 bpatchx patch26_0 ,mem_patch26 
+52fc 2040527e call l2cap_malloc_get_full_map 
+52fd 6800c256 fetch 1 ,mem_used_map 
+52fe 207a0000 rtn blank 
+52ff 204052e5 call l2cap_lpm_save_calc_len 
+5300 d8400100 arg l2cap_lpm_txbuf_len ,temp 
+5301 98467c00 isub temp ,null 
+5302 202152f7 branch l2cap_lpm_get_wake_lock ,positive 
+5303 204052f9 call l2cap_lpm_put_wake_lock 
+5304 d8a04263 arg mem_l2cap_lpm_txbuf ,contw 
+5305 da204257 arg mem_tx_fifo0 ,rega 
+
+l2cap_lpm_save_txbuf_loop:
+5306 58004263 setarg mem_tx_fifo_end 
+5307 9a267c00 isub rega ,null 
+5308 20628000 rtn zero 
+5309 ea208000 ifetch 1 ,rega 
+530a 1a20a201 increase 1 ,rega 
+530b 243a530f nbranch l2cap_lpm_save_txbuf_nempty ,blank 
+530c e0a10000 istore 2 ,contw 
+530d 1a20a202 increase 2 ,rega 
+530e 20205306 branch l2cap_lpm_save_txbuf_loop 
+
+l2cap_lpm_save_txbuf_nempty:
+530f ea210000 ifetch 2 ,rega 
+5310 1a20a202 increase 2 ,rega 
+5311 1fe20c00 copy pdata ,contr 
+5312 e8c10000 ifetch 2 ,contr 
+5313 e0a10000 istore 2 ,contw 
+5314 1fe27200 copy pdata ,loopcnt 
+5315 1f20f202 increase 2 ,loopcnt 
+5316 20407f01 call memcpy 
+5317 20205306 branch l2cap_lpm_save_txbuf_loop 
+
+l2cap_lpm_load_txbuf:
+5318 4718c026 bpatchx patch26_1 ,mem_patch26 
+5319 2040527e call l2cap_malloc_get_full_map 
+531a 6800c256 fetch 1 ,mem_used_map 
+531b 207a0000 rtn blank 
+531c da204258 arg mem_tx_fifo0_ptr ,rega 
+531d 1a20a3fd increase -3 ,rega 
+531e d8c04263 arg mem_l2cap_lpm_txbuf ,contr 
+
+l2cap_lpm_load_txbuf_loop:
+531f 1a20a203 increase 3 ,rega 
+5320 58004264 setarg mem_tx_fifo_end + 1 
+5321 9a267c00 isub rega ,null 
+5322 20628000 rtn zero 
+5323 e8c10000 ifetch 2 ,contr 
+5324 203a531f branch l2cap_lpm_load_txbuf_loop ,blank 
+5325 1fe0fe04 increase 4 ,pdata 
+5326 1fe27200 copy pdata ,loopcnt 
+5327 18c22400 copy contr ,regb 
+5328 ea210000 ifetch 2 ,rega 
+5329 1fe20a00 copy pdata ,contw 
+532a 1a420c00 copy regb ,contr 
+532b 18c08dfe increase -2 ,contr 
+532c 20407f01 call memcpy 
+532d 2020531f branch l2cap_lpm_load_txbuf_loop 
+
+le_init_conn:
+532e 47194026 bpatchx patch26_2 ,mem_patch26 
+532f 7855fc00 disable wake 
+5330 70045501 jam 1 ,mem_le_conn_handle 
+5331 70043f03 jam 3 ,mem_le_state 
+5332 70045601 jam 1 ,mem_le_arq 
+5333 5fffffff setarg -1 
+5334 60010459 store 2 ,mem_le_event_count 
+5335 18007e00 force 0 ,pdata 
+5336 60008457 store 1 ,mem_le_ch 
+5337 60008462 store 1 ,mem_le_op 
+5338 6001c169 store 3 ,mem_sniff_rcv 
+5339 6001c16c store 3 ,mem_sniff_lost 
+533a 6002c403 store 5 ,mem_le_pcnt_tx 
+533b 79207e27 set1 39 ,pdata 
+533c 6002c408 store 5 ,mem_le_pcnt_rx 
+533d 7043dc01 jam 1 ,mem_le_txheader 
+533e 7043dd00 jam 0 ,mem_le_txlen 
+533f 202056ed branch le_supervision_flush 
+
+le_init_master:
+5340 4719c026 bpatchx patch26_3 ,mem_patch26 
+5341 7834fc00 enable master 
+5342 70044003 jam lemode_master ,mem_le_mode 
+5343 70047801 jam 1 ,mem_le_att_handle 
+5344 70445a01 jam 1 ,mem_le_search_handle_start 
+5345 5800ffff setarg 0xffff 
+5346 6001445c store 2 ,mem_le_search_handle_end 
+5347 18007e00 force 0 ,pdata 
+5348 6002c408 store 5 ,mem_le_pcnt_rx 
+5349 79207e27 set1 39 ,pdata 
+534a 6002c403 store 5 ,mem_le_pcnt_tx 
+534b 2020532e branch le_init_conn 
+
+le_init_slave:
+534c 471a4026 bpatchx patch26_4 ,mem_patch26 
+534d 7854fc00 disable master 
+534e 58000017 setarg 0x17 
+534f 600144a8 store 2 ,mem_le_remote_mtu 
+5350 70044001 jam lemode_slave ,mem_le_mode 
+5351 70436e00 jam 0 ,mem_le_adv_enable 
+5352 7000a000 jam 0 ,mem_lpm_current_mult 
+5353 7044c400 jam flag_le_pairing_null ,mem_le_pairing_state 
+5354 7044c500 jam flag_le_enc_null ,mem_le_enc_state 
+5355 6801046d fetch 2 ,mem_le_superto 
+5356 600144ba store 2 ,mem_le_init_superto 
+5357 68010441 fetch 2 ,mem_le_tsniff 
+5358 1feffe05 mul32 pdata ,5 ,pdata 
+5359 1ff1fe00 rshift4 pdata ,pdata 
+535a 6001046d store 2 ,mem_le_superto 
+535b 2020532e branch le_init_conn 
+
+le_dispatch:
+535c 204053c4 call le_enable 
+535d 204055e8 call le_scan 
+535e 204056f0 call le_adv 
+535f 202053ce branch le_disable 
+
+le_conn_dispatch:
+5360 471ac026 bpatchx patch26_5 ,mem_patch26 
+5361 204053c4 call le_enable 
+5362 204032f4 call app_process_ble 
+5363 68008440 fetch 1 ,mem_le_mode 
+5364 c001d366 beq lemode_master ,le_master_dispatch 
+5365 2020537a branch le_slave_dispatch 
+
+le_master_dispatch:
+5366 471b4026 bpatchx patch26_6 ,mem_patch26 
+5367 7834fc00 enable master 
+5368 204056e4 call le_supervision_update 
+5369 20215377 branch le_master_disconn ,positive 
+536a 20402c6c call check_ble_disabled 
+536b 20405413 call le_setup 
+536c 2040561e call le_prepare_tx 
+536d 7856fc00 disable match 
+536e 204054bf call le_transmit_receive_sifs 
+536f 24768000 nrtn match 
+5370 471bc026 bpatchx patch26_7 ,mem_patch26 
+5371 68008005 fetch 1 ,mem_le_conn_rcv 
+5372 1fe0fe01 increase 1 ,pdata 
+5373 60008005 store 1 ,mem_le_conn_rcv 
+5374 204055aa call le_acknowledge 
+5375 7854fc00 disable master 
+5376 20600000 rtn 
+
+le_master_disconn:
+5377 204053a9 call le_disconnect 
+5378 7854fc00 disable master 
+5379 20600000 rtn 
+
+le_slave_dispatch:
+537a 471c4027 bpatchx patch27_0 ,mem_patch27 
+537b 70450f00 jam 0 ,mem_le_md_count 
+537c 20407aaf call sp_calc_sequence_256 
+537d 20405c18 call le_secure_connect_sm 
+537e 78577c00 disable attempt 
+537f 204056e4 call le_supervision_update 
+5380 202153a9 branch le_slave_disconn ,positive 
+5381 20402c6c call check_ble_disabled 
+5382 20405413 call le_setup 
+5383 20405489 call le_receive_slave 
+5384 242c539b nbranch le_slave_unsync ,sync 
+5385 204053b7 call le_got_first_packet 
+5386 2036d388 branch le_slave_match ,match 
+5387 20205395 branch le_slave_cont 
+
+le_slave_match:
+5388 471cc027 bpatchx patch27_1 ,mem_patch27 
+5389 6800c50f fetch 1 ,mem_le_md_count 
+538a 1fe0fe01 pincrease 1 
+538b 6000c50f store 1 ,mem_le_md_count 
+538c c0065395 beq le_md_max_count ,le_slave_cont 
+538d 204055aa call le_acknowledge 
+538e 2040561e call le_prepare_tx 
+538f 204054c7 call le_transmit_norx 
+5390 2040567e call le_parse 
+5391 680141fb fetch 2 ,mem_cb_ble_transmit 
+5392 20407f9c call callback_func 
+5393 204053a0 call le_check_md 
+5394 203453a4 branch le_slave_more_data ,user 
+
+le_slave_cont:
+5395 471d4027 bpatchx patch27_2 ,mem_patch27 
+5396 20405be4 call le_pairing_sm 
+5397 20405bdb call le_check_paring_time 
+5398 20407d9c call check_51cmd 
+5399 68008462 fetch 1 ,mem_le_op 
+539a c281d3a9 bbit1 op_disconn ,le_slave_disconn 
+
+le_slave_unsync:
+539b 471dc027 bpatchx patch27_3 ,mem_patch27 
+539c 204057f4 call le_lpm_set_mult 
+539d 2040559d call le_update_channel_map 
+539e 20405575 call le_update_param 
+539f 20202841 branch calc_clke_offset 
+
+le_check_md:
+53a0 78547c00 disable user 
+53a1 c5157fe7 bmark1 mark_ble_rx_md ,enable_user 
+53a2 c514ffe7 bmark1 mark_ble_tx_md ,enable_user 
+53a3 20600000 rtn 
+
+le_slave_more_data:
+53a4 471e4027 bpatchx patch27_4 ,mem_patch27 
+53a5 78377c00 enable attempt 
+53a6 204054c1 call le_transmit_receive_sifs_notx 
+53a7 2036d388 branch le_slave_match ,match 
+53a8 20205395 branch le_slave_cont 
+
+le_slave_disconn:
+
+le_disconnect:
+53a9 471ec027 bpatchx patch27_5 ,mem_patch27 
+53aa 204053af call le_clear_connection_info 
+53ab 204033b4 call app_disconn_reason_collect_ble 
+53ac 20407a77 call sp_initialize_256 
+53ad 700a9915 jam bt_evt_le_disconnected ,mem_fifo_temp 
+53ae 20207d86 branch ui_ipc_send_event 
+
+le_clear_connection_info:
+53af 58000000 setarg 0 
+53b0 6004c4ff store 9 ,mem_le_tx_buff_used 
+53b1 70045500 jam 0 ,mem_le_conn_handle 
+53b2 70044000 jam lemode_idle ,mem_le_mode 
+53b3 70043f00 jam 0 ,mem_le_state 
+53b4 7044c500 jam flag_le_enc_null ,mem_le_enc_state 
+53b5 7044c400 jam flag_le_pairing_null ,mem_le_pairing_state 
+53b6 20600000 rtn 
+
+le_got_first_packet:
+53b7 471f4027 bpatchx patch27_6 ,mem_patch27 
+53b8 68008005 fetch 1 ,mem_le_conn_rcv 
+53b9 1fe0fe01 increase 1 ,pdata 
+53ba 60008005 store 1 ,mem_le_conn_rcv 
+53bb 6800843f fetch 1 ,mem_le_state 
+53bc c3818000 rtnbit1 lestate_got_first_packet 
+53bd 79207e03 set1 lestate_got_first_packet 
+53be 6000843f store 1 ,mem_le_state 
+53bf 680144ba fetch 2 ,mem_le_init_superto 
+53c0 6001046d store 2 ,mem_le_superto 
+53c1 58000000 setarg 0 
+53c2 600244e5 store 4 ,mem_le_transmit_window 
+53c3 20600000 rtn 
+
+le_enable:
+53c4 471fc027 bpatchx patch27_7 ,mem_patch27 
+53c5 70890f36 jam 0x36 ,rf_adc_goff 
+53c6 70890b5f jam 0x5f ,rf_agc_nsat 
+53c7 783b7c00 enable le 
+53c8 70891407 jam 7 ,rfen_ulp 
+53c9 20402c6c call check_ble_disabled 
+53ca 6800c1e0 fetch 1 ,mem_250k_freq_enable 
+53cb 207a0000 rtn blank 
+53cc 70890ab8 jam 0xb8 ,rf_iq_gain 
+53cd 20600000 rtn 
+
+le_disable:
+53ce 47204028 bpatchx patch28_0 ,mem_patch28 
+53cf 70890f2e jam 0x2e ,rf_adc_goff 
+53d0 70890bff jam 0xff ,rf_agc_nsat 
+53d1 785b7c00 disable le 
+53d2 70891403 jam 3 ,rfen_ulp 
+53d3 db600000 arg 0 ,stop_watch 
+53d4 20600000 rtn 
+
+le_prep:
+53d5 7844fc00 disable enable_crc 
+53d6 7843fc00 disable enable_white 
+53d7 68018467 fetch 3 ,mem_le_crcinit 
+53d8 98001e00 iforce crc24_init 
+53d9 68008016 fetch 1 ,mem_le_ch_mapped 
+53da 1fed8400 reverse pdata ,temp 
+53db 79200401 set1 1 ,temp 
+53dc 18431c00 rshift temp ,white_init 
+53dd 20600000 rtn 
+
+lerx_setfreq:
+53de 204053e6 call le_setfreq 
+53df 2040291f call set_freq_rx 
+53e0 58000500 setarg param_pll_setup 
+53e1 20402a8f call sleep 
+53e2 20202924 branch rf_rx_enable 
+
+letx_setfreq:
+53e3 2036a939 branch txon ,match 
+
+letx_setfreq0:
+53e4 204053e6 call le_setfreq 
+53e5 20202933 branch set_freq_tx 
+
+le_setfreq:
+53e6 4720c028 bpatchx patch28_1 ,mem_patch28 
+53e7 20402918 call set_sync_on 
+53e8 6800848c fetch 1 ,mem_le_testtype 
+53e9 243a53f9 nbranch le_ctf_test ,blank 
+53ea 68008016 fetch 1 ,mem_le_ch_mapped 
+53eb 1fe67c24 sub pdata ,36 ,null 
+53ec 202153f3 branch le_ctf_normal ,positive 
+53ed 18000400 force 0 ,temp 
+53ee c1128000 rtneq 37 
+53ef 18000418 force 24 ,temp 
+53f0 c1130000 rtneq 38 
+53f1 1800044e force 78 ,temp 
+53f2 20600000 rtn 
+
+le_ctf_normal:
+53f3 1fe67c0a sub pdata ,10 ,null 
+53f4 202153f6 branch le_ctf_low ,positive 
+53f5 1fe0fe01 increase 1 ,pdata 
+
+le_ctf_low:
+53f6 1fe3fe00 lshift pdata ,pdata 
+53f7 1fe08402 add pdata ,2 ,temp 
+53f8 20600000 rtn 
+
+le_ctf_test:
+53f9 68008016 fetch 1 ,mem_le_ch_mapped 
+53fa 1fe38400 lshift pdata ,temp 
+53fb 20600000 rtn 
+
+le_sca_map:
+53fc d84001f4 arg 500 ,temp 
+53fd 207a0000 rtn blank 
+53fe d84000fa arg 250 ,temp 
+53ff c1008000 rtneq 1 
+5400 d8400096 arg 150 ,temp 
+5401 c1010000 rtneq 2 
+5402 d8400064 arg 100 ,temp 
+5403 c1018000 rtneq 3 
+5404 d840004b arg 75 ,temp 
+5405 c1020000 rtneq 4 
+5406 d8400032 arg 50 ,temp 
+5407 c1028000 rtneq 5 
+5408 d8400028 arg 40 ,temp 
+5409 c1030000 rtneq 6 
+540a d8400014 arg 20 ,temp 
+540b 20600000 rtn 
+
+le_adv_access:
+540c 588e89be setarg 0x8e89be 
+540d 1fed7e00 lshift8 pdata ,pdata 
+540e 1fe1fed6 or_into 0xd6 ,pdata 
+540f 98001200 iforce access 
+5410 58555555 setarg 0x555555 
+5411 60018467 store 3 ,mem_le_crcinit 
+5412 20600000 rtn 
+
+le_setup:
+5413 47214028 bpatchx patch28_2 ,mem_patch28 
+5414 78287c00 enable swfine 
+5415 68020463 fetch 4 ,mem_le_access 
+5416 98001200 iforce access 
+5417 20405466 call le_map_channel 
+5418 58000200 setarg 0x200 
+5419 2034d41c branch le_setup_master ,master 
+541a 6801044d fetch 2 ,mem_le_receive_window 
+541b 1fe37e00 rshift pdata ,pdata 
+
+le_setup_master:
+541c d8400500 arg param_pll_setup ,temp 
+541d 9840fe00 iadd temp ,pdata 
+541e 20402a24 call ahead_window 
+541f 1b427e00 deposit clke 
+5420 60030491 store 6 ,mem_le_rxon_ts 
+5421 20600000 rtn 
+
+le_next_adv_channel:
+5422 4721c028 bpatchx patch28_3 ,mem_patch28 
+5423 68008016 fetch 1 ,mem_le_ch_mapped 
+5424 c012d428 beq 37 ,le_next_adv_channel_curr_channel_37 
+5425 c013542e beq 38 ,le_next_adv_channel_curr_channel_38 
+5426 c013d434 beq 39 ,le_next_adv_channel_curr_channel_39 
+5427 20205434 branch le_next_adv_channel_curr_channel_39 
+
+le_next_adv_channel_curr_channel_37:
+5428 6808c48d fetcht 1 ,mem_le_adv_channel_map 
+5429 284ffe01 isolate1 bit_adv_channel_map_38 ,temp 
+542a 2020d43f branch set_le_next_adv_channel_38 ,true 
+542b 284ffe02 isolate1 bit_adv_channel_map_39 ,temp 
+542c 2020d444 branch set_le_next_adv_channel_39 ,true 
+542d 2020543a branch set_le_next_adv_channel_37 
+
+le_next_adv_channel_curr_channel_38:
+542e 6808c48d fetcht 1 ,mem_le_adv_channel_map 
+542f 284ffe02 isolate1 bit_adv_channel_map_39 ,temp 
+5430 2020d444 branch set_le_next_adv_channel_39 ,true 
+5431 284ffe00 isolate1 bit_adv_channel_map_37 ,temp 
+5432 2020d43a branch set_le_next_adv_channel_37 ,true 
+5433 2020543f branch set_le_next_adv_channel_38 
+
+le_next_adv_channel_curr_channel_39:
+5434 6808c48d fetcht 1 ,mem_le_adv_channel_map 
+5435 284ffe00 isolate1 bit_adv_channel_map_37 ,temp 
+5436 2020d43a branch set_le_next_adv_channel_37 ,true 
+5437 284ffe01 isolate1 bit_adv_channel_map_38 ,temp 
+5438 2020d43f branch set_le_next_adv_channel_38 ,true 
+5439 20205444 branch set_le_next_adv_channel_39 
+
+set_le_next_adv_channel_37:
+543a 70001625 jam 37 ,mem_le_ch_mapped 
+543b 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp 
+543c 79207e00 set1 bit_adv_channel_map_37 ,pdata 
+543d 60008ac2 store 1 ,mem_le_adv_channel_map_temp 
+543e 20600000 rtn 
+
+set_le_next_adv_channel_38:
+543f 70001626 jam 38 ,mem_le_ch_mapped 
+5440 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp 
+5441 79207e01 set1 bit_adv_channel_map_38 ,pdata 
+5442 60008ac2 store 1 ,mem_le_adv_channel_map_temp 
+5443 20600000 rtn 
+
+set_le_next_adv_channel_39:
+5444 70001627 jam 39 ,mem_le_ch_mapped 
+5445 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp 
+5446 79207e02 set1 bit_adv_channel_map_39 ,pdata 
+5447 60008ac2 store 1 ,mem_le_adv_channel_map_temp 
+5448 20600000 rtn 
+
+le_context_nexthop:
+5449 47224028 bpatchx patch28_4 ,mem_patch28 
+544a 1a208c01 add rega ,coffset_mode ,contr 
+544b e8c08000 ifetch 1 ,contr 
+544c c4000000 rtnbit0 mode_le 
+544d 1a208a1a add rega ,coffset_le_event_cnt ,contw 
+544e e8a10000 ifetch 2 ,contw 
+544f 1fe0fe01 increase 1 ,pdata 
+5450 e0a10000 istore 2 ,contw 
+5451 1a208c19 add rega ,coffset_le_hop ,contr 
+5452 e8c08000 ifetch 1 ,contr 
+5453 1a208a18 add rega ,coffset_le_ch ,contw 
+5454 e8a88000 ifetcht 1 ,contw 
+5455 9840fe00 iadd temp ,pdata 
+5456 1fe67c24 sub pdata ,36 ,null 
+5457 20215459 branch le_nexthop_nowrap ,positive 
+5458 1fe0ffdb increase -37 ,pdata 
+
+le_nexthop_nowrap:
+5459 e0a08000 istore 1 ,contw 
+545a 20600000 rtn 
+
+le_calc_channel_map:
+545b 4722c028 bpatchx patch28_5 ,mem_patch28 
+545c 6802846f fetch 5 ,mem_le_channel_map 
+545d 18000400 force 0 ,temp 
+545e 18007225 force 37 ,loopcnt 
+
+le_count_channels_loop:
+545f c3005461 bbit0 0 ,le_count_channels_notused 
+5460 18408401 increase 1 ,temp 
+
+le_count_channels_notused:
+5461 1fe37e00 rshift pdata ,pdata 
+5462 c200545f loop le_count_channels_loop 
+5463 1840ffff add temp ,-1 ,pdata 
+5464 60008461 store 1 ,mem_le_channels 
+5465 20600000 rtn 
+
+le_map_channel:
+5466 47234028 bpatchx patch28_6 ,mem_patch28 
+5467 68008457 fetch 1 ,mem_le_ch 
+5468 98000e00 iforce queue 
+5469 680a846f fetcht 5 ,mem_le_channel_map 
+546a a84fffff qisolate1 temp 
+546b 2020d47c branch le_map_channel_end ,true 
+
+le_map_channel_next:
+546c 4723c028 bpatchx patch28_7 ,mem_patch28 
+546d 68008461 fetch 1 ,mem_le_channels 
+546e 98e67e00 isub queue ,pdata 
+546f 20215472 branch le_map_channel_cont ,positive 
+5470 1fe60fff sub pdata ,-1 ,queue 
+5471 2020546c branch le_map_channel_next 
+
+le_map_channel_cont:
+5472 18e27200 copy queue ,loopcnt 
+5473 18000e00 force 0 ,queue 
+
+le_map_channel_loop:
+5474 a84fffff qisolate1 temp 
+5475 2020d477 branch le_map_channel_skip ,true 
+5476 1f20f201 increase 1 ,loopcnt 
+
+le_map_channel_skip:
+5477 1f227e00 deposit loopcnt 
+5478 203a547c branch le_map_channel_end ,blank 
+5479 18e08e01 increase 1 ,queue 
+547a 1f20f3ff increase -1 ,loopcnt 
+547b 20205474 branch le_map_channel_loop 
+
+le_map_channel_end:
+547c 18e27e00 deposit queue 
+547d 60008016 store 1 ,mem_le_ch_mapped 
+547e 20600000 rtn 
+
+le_wait_tx:
+547f 2034d482 branch le_wait_master ,master 
+5480 37c18200 until null ,timeout 
+5481 20600000 rtn 
+
+le_wait_master:
+5482 d9600ea0 arg 0xea0 ,timeup 
+5483 34730200 until clkn_rt ,meet 
+5484 20600000 rtn 
+
+le_receive_adv:
+5485 78487c00 disable swfine 
+5486 6801436c fetch 2 ,mem_le_scan_window 
+5487 1fe21600 copy pdata ,timeup 
+5488 2020548e branch le_receive_packet 
+
+le_receive_slave:
+5489 47244029 bpatchx patch29_0 ,mem_patch29 
+548a 78287c00 enable swfine 
+548b 6801044d fetch 2 ,mem_le_receive_window 
+548c 680a44e5 fetcht 4 ,mem_le_transmit_window 
+548d 98409600 iadd temp ,timeup 
+
+le_receive_packet:
+548e 204053de call lerx_setfreq 
+
+le_receive_rxon:
+548f 4724c029 bpatchx patch29_1 ,mem_patch29 
+5490 204053d5 call le_prep 
+5491 7856fc00 disable match 
+5492 7826fc00 enable decode_fec0 
+5493 7830fc00 enable is_rx 
+5494 78507c00 disable is_tx 
+5495 19623600 copy timeup ,stop_watch 
+5496 37c18400 correlate null ,timeout 
+5497 2037549a branch le_receive_on_attempt ,attempt 
+5498 1b420400 copy clke ,temp 
+5499 600b009a storet 6 ,mem_sync_clke 
+
+le_receive_on_attempt:
+549a 242c264d nbranch end_of_packet ,sync 
+549b 203754a1 branch le_receive_skip ,attempt 
+549c dd2001e0 arg param_clke_cal_le ,clke_rt 
+549d 1c225000 copy bt_clk ,clke_bt 
+549e 6800843f fetch 1 ,mem_le_state 
+549f c301d4a1 bbit0 lestate_got_first_packet ,le_receive_skip 
+54a0 2055ab05 call lpm_adjust_clk ,wake 
+
+le_receive_skip:
+54a1 47254029 bpatchx patch29_2 ,mem_patch29 
+54a2 204029bb call save_rssi 
+54a3 7823fc00 enable enable_white 
+54a4 7824fc00 enable enable_crc 
+54a5 09800008 parse demod ,bucket ,8 
+54a6 19897e00 rshift3 pwindow ,pdata 
+54a7 600082d9 store 1 ,mem_le_rxbuf 
+54a8 09800008 parse demod ,bucket ,8 
+54a9 19897e00 rshift3 pwindow ,pdata 
+54aa e0a08000 istore 1 ,contw 
+54ab 1fe1723f and pdata ,0x3f ,loopcnt 
+54ac 2022d4b1 branch lerx_nopayload ,zero 
+
+lerx_loop:
+54ad 09800008 parse demod ,bucket ,8 
+54ae 19897e00 rshift3 pwindow ,pdata 
+54af e0a08000 istore 1 ,contw 
+54b0 c20054ad loop lerx_loop 
+
+lerx_nopayload:
+54b1 4725c029 bpatchx patch29_3 ,mem_patch29 
+54b2 09800018 parse demod ,bucket ,24 
+54b3 78287c00 enable swfine 
+54b4 db600664 arg param_sifs ,stop_watch 
+54b5 1fef7e00 rshift32 pdata ,pdata 
+54b6 1ff17e00 rshift16 pdata ,pdata 
+54b7 e0a18000 istore 3 ,contw 
+54b8 2023264d branch end_of_packet ,crc_failed 
+54b9 7836fc00 enable match 
+54ba 68008017 fetch 1 ,mem_last_freq 
+54bb 1fe0a200 add pdata ,0 ,rega 
+54bc 20402981 call rf_write_freq 
+54bd 7846fc00 disable decode_fec0 
+54be 20202918 branch set_sync_on 
+
+le_transmit_receive_sifs:
+54bf 47264029 bpatchx patch29_4 ,mem_patch29 
+54c0 204054c9 call le_transmit 
+
+le_transmit_receive_sifs_notx:
+54c1 68088017 fetcht 1 ,mem_last_freq 
+54c2 2040291f call set_freq_rx 
+54c3 20402924 call rf_rx_enable 
+54c4 78287c00 enable swfine 
+54c5 d960157c arg 5500 ,timeup 
+54c6 2020548f branch le_receive_rxon 
+
+le_transmit_norx:
+54c7 204054c9 call le_transmit 
+54c8 2020264d branch end_of_packet 
+
+le_transmit:
+54c9 4726c029 bpatchx patch29_5 ,mem_patch29 
+54ca 204053d5 call le_prep 
+54cb 204053e3 call letx_setfreq 
+54cc 202054cd branch le_transmit0 
+
+le_transmit0:
+54cd 79202a00 set1 txgfsk ,radio_ctrl 
+54ce 782efc00 enable encode_fec0 
+54cf 78307c00 enable is_tx 
+54d0 7850fc00 disable is_rx 
+54d1 2040547f call le_wait_tx 
+54d2 19317e00 rshift16 access ,pdata 
+54d3 1fecfe00 rshift8 pdata ,pdata 
+54d4 1ff1fe00 rshift4 pdata ,pdata 
+54d5 08008628 inject mod ,40 
+54d6 7823fc00 enable enable_white 
+54d7 7824fc00 enable enable_crc 
+54d8 47274029 bpatchx patch29_6 ,mem_patch29 
+54d9 6800c3dc fetch 1 ,mem_le_txheader 
+54da 08008608 inject mod ,8 
+54db e8c08000 ifetch 1 ,contr 
+54dc 1fe1723f and pdata ,0x3f ,loopcnt 
+54dd 08008608 inject mod ,8 
+54de 2022d4e2 branch letr_nopayload ,zero 
+
+letr_loop:
+54df e8c08000 ifetch 1 ,contr 
+54e0 08008608 inject mod ,8 
+54e1 c20054df loop letr_loop 
+
+letr_nopayload:
+54e2 78247c00 enable enable_parity 
+54e3 08008618 inject mod ,24 
+54e4 78447c00 disable enable_parity 
+54e5 37d38200 until null ,tx_clear 
+54e6 20000064 nop 100 
+54e7 784efc00 disable encode_fec0 
+54e8 20600000 rtn 
+
+le_send_adv_ind:
+54e9 4727c029 bpatchx patch29_7 ,mem_patch29 
+54ea 6800c484 fetch 1 ,mem_le_adv_type 
+54eb c000d4f9 beq adv_direct_ind ,le_send_adv_direct_ind 
+54ec 6800c485 fetch 1 ,mem_le_adv_own_addr_type 
+54ed 1ff27e00 lshift4 pdata ,pdata 
+54ee 1febfe00 lshift2 pdata ,pdata 
+54ef 6000c3dc store 1 ,mem_le_txheader 
+54f0 6808c36f fetcht 1 ,mem_le_adv_data_len 
+54f1 1840fe06 add temp ,6 ,pdata 
+54f2 6000c3dd store 1 ,mem_le_txlen 
+54f3 680344a0 fetch 6 ,mem_le_lap 
+54f4 600343de store 6 ,mem_le_txpayload 
+54f5 18427200 copy temp ,loopcnt 
+54f6 d8c04370 arg mem_le_adv_data ,contr 
+54f7 20407ef4 call memcpy_fast 
+54f8 20205504 branch le_send_adv_transmit 
+
+le_send_adv_direct_ind:
+54f9 6800c486 fetch 1 ,mem_le_adv_direct_addr_type 
+54fa 1ff27e00 lshift4 pdata ,pdata 
+54fb 1febfe00 lshift2 pdata ,pdata 
+54fc 1fe0fe01 increase 1 ,pdata 
+54fd 6000c3dc store 1 ,mem_le_txheader 
+54fe 5800000c setarg 12 
+54ff 6000c3dd store 1 ,mem_le_txlen 
+5500 680344a0 fetch 6 ,mem_le_lap 
+5501 600343de store 6 ,mem_le_txpayload 
+5502 680341d0 fetch 6 ,mem_hci_plap 
+5503 e0a30000 istore 6 ,contw 
+
+le_send_adv_transmit:
+5504 4728402a bpatchx patch2a_0 ,mem_patch2a 
+5505 68008000 fetch 1 ,mem_le_adv_transmit 
+5506 1fe0fe01 increase 1 ,pdata 
+5507 60008000 store 1 ,mem_le_adv_transmit 
+5508 db600708 arg 1800 ,stop_watch 
+5509 7856fc00 disable match 
+550a 202054bf branch le_transmit_receive_sifs 
+
+le_send_scan_request:
+550b 4728c02a bpatchx patch2a_1 ,mem_patch2a 
+550c 6800c49e fetch 1 ,mem_le_scan_type 
+550d c1808000 rtnne le_scan_type_active 
+550e 68008000 fetch 1 ,mem_le_adv_transmit 
+550f 1fe0fe01 increase 1 ,pdata 
+5510 60008000 store 1 ,mem_le_adv_transmit 
+5511 d8400c03 arg 0x0c03 ,temp 
+5512 6800c49f fetch 1 ,mem_le_scan_own_addr_type 
+5513 7d3a0406 nsetflag blank ,le_sender_addr_bit ,temp 
+5514 1a227e00 copy rega ,pdata 
+5515 7d3a0407 nsetflag blank ,le_receiver_addr_bit ,temp 
+5516 600943dc storet 2 ,mem_le_txheader 
+5517 680344a0 fetch 6 ,mem_le_lap 
+5518 e0a30000 istore 6 ,contw 
+5519 6803044f fetch 6 ,mem_le_plap 
+551a e0a30000 istore 6 ,contw 
+551b 202054bf branch le_transmit_receive_sifs 
+
+le_send_scan_response:
+551c 4729402a bpatchx patch2a_2 ,mem_patch2a 
+551d d8400004 arg scan_rsp ,temp 
+551e 6800c485 fetch 1 ,mem_le_adv_own_addr_type 
+551f 7d3a0406 nsetflag blank ,le_sender_addr_bit ,temp 
+5520 6008c3dc storet 1 ,mem_le_txheader 
+5521 6808c38f fetcht 1 ,mem_le_scan_data_len 
+5522 1840fe06 add temp ,6 ,pdata 
+5523 6000c3dd store 1 ,mem_le_txlen 
+5524 680344a0 fetch 6 ,mem_le_lap 
+5525 600343de store 6 ,mem_le_txpayload 
+5526 d8c04390 arg mem_le_scan_data ,contr 
+5527 18427200 copy temp ,loopcnt 
+5528 20407ef4 call memcpy_fast 
+5529 204054c7 call le_transmit_norx 
+552a 20205706 branch le_adv_not_match 
+
+le_connect_request:
+552b 4729c02a bpatchx patch2a_3 ,mem_patch2a 
+552c 18007fff force -1 ,pdata 
+552d 38080001 setsect 2 ,1 
+552e 6002846f store 5 ,mem_le_channel_map 
+552f 2040545b call le_calc_channel_map 
+5530 18007204 force 4 ,loopcnt 
+5531 d8a00463 arg mem_le_access ,contw 
+5532 2040630d call generate_random_loop 
+5533 6801449c fetch 2 ,mem_le_timeout 
+5534 6001046d store 2 ,mem_le_superto 
+
+le_con_req_hop_retry:
+5535 180a7e00 random pdata 
+5536 1fe17e0f and_into 0xf ,pdata 
+5537 1fe67c04 sub pdata ,4 ,null 
+5538 20215535 branch le_con_req_hop_retry ,positive 
+5539 60008458 store 1 ,mem_le_hop 
+553a 600086e6 store 1 ,mem_tmp1 
+553b 472a402a bpatchx patch2a_4 ,mem_patch2a 
+553c 68094367 fetcht 2 ,mem_le_conn_interval 
+553d 60090441 storet 2 ,mem_le_tsniff 
+553e 18422600 copy temp ,regc 
+553f 1c40fe07 add clkn_bt ,7 ,pdata 
+5540 9a66fc00 idiv regc 
+5541 20407f86 call wait_div_end 
+5542 18072200 remainder rega 
+5543 9a267e00 isub rega ,pdata 
+5544 9a60fe00 iadd regc ,pdata 
+5545 68094365 fetcht 2 ,mem_le_dsniff 
+5546 9840fe00 iadd temp ,pdata 
+5547 60020443 store 4 ,mem_le_anchor 
+5548 9c462200 isub clkn_bt ,rega 
+5549 1a20a3fa increase -6 ,rega 
+554a da402205 arg 0x2205 ,regb 
+554b 6800c495 fetch 1 ,mem_le_conn_own_addr_type 
+554c 7d3a2406 nsetflag blank ,le_sender_addr_bit ,regb 
+554d 6800c48e fetch 1 ,mem_le_conn_peer_addr_type 
+554e 7d3a2407 nsetflag blank ,le_receiver_addr_bit ,regb 
+554f 1a427e00 copy regb ,pdata 
+5550 600143dc store 2 ,mem_le_txheader 
+5551 680344a0 fetch 6 ,mem_le_lap 
+5552 e0a30000 istore 6 ,contw 
+5553 6803044f fetch 6 ,mem_le_plap 
+5554 e0a30000 istore 6 ,contw 
+5555 68020463 fetch 4 ,mem_le_access 
+5556 e0a20000 istore 4 ,contw 
+5557 180a7e00 random pdata 
+5558 e0a10000 istore 2 ,contw 
+5559 180a7e00 random pdata 
+555a e0a08000 istore 1 ,contw 
+555b 18007e02 force 2 ,pdata 
+555c e0a08000 istore 1 ,contw 
+555d 1a2b7e00 rshift2 rega ,pdata 
+555e e0a10000 istore 2 ,contw 
+555f 1a6b7e00 rshift2 regc ,pdata 
+5560 e0a10000 istore 2 ,contw 
+5561 472ac02a bpatchx patch2a_5 ,mem_patch2a 
+5562 58000000 setarg 0 
+5563 e0a10000 istore 2 ,contw 
+5564 6801449c fetch 2 ,mem_le_timeout 
+5565 e0a10000 istore 2 ,contw 
+5566 6802846f fetch 5 ,mem_le_channel_map 
+5567 e0a28000 istore 5 ,contw 
+5568 68008458 fetch 1 ,mem_le_hop 
+5569 d84000a0 arg param_le_sca ,temp 
+556a 9841fe00 ior temp ,pdata 
+556b e0a08000 istore 1 ,contw 
+556c 204054c7 call le_transmit_norx 
+556d 580043dc setarg mem_le_txheader 
+556e 1fe08c12 add pdata ,18 ,contr 
+556f e8c18000 ifetch 3 ,contr 
+5570 60018467 store 3 ,mem_le_crcinit 
+5571 20600000 rtn 
+
+le_init_adv:
+5572 472b402a bpatchx patch2a_6 ,mem_patch2a 
+5573 7854fc00 disable master 
+5574 2020540c branch le_adv_access 
+
+le_update_param:
+5575 6800843f fetch 1 ,mem_le_state 
+5576 c4028000 rtnbit0 lestate_update_param 
+5577 68010459 fetch 2 ,mem_le_event_count 
+5578 6809045f fetcht 2 ,mem_le_instant 
+5579 98467e00 isub temp ,pdata 
+557a 24610000 nrtn positive 
+557b 60010a9a store 2 ,mem_pdatatemp 
+557c 472bc02a bpatchx patch2a_7 ,mem_patch2a 
+557d 6800843f fetch 1 ,mem_le_state 
+557e 793ffe05 set0 lestate_update_param ,pdata 
+557f 793ffe03 set0 lestate_got_first_packet ,pdata 
+5580 6000843f store 1 ,mem_le_state 
+5581 68020443 fetch 4 ,mem_le_anchor 
+5582 68090441 fetcht 2 ,mem_le_tsniff 
+5583 60090aa2 storet 2 ,mem_temp 
+5584 98462200 isub temp ,rega 
+5585 472c402b bpatchx patch2b_0 ,mem_patch2b 
+5586 6800c3d3 fetch 1 ,mem_le_new_param 
+5587 6000846a store 1 ,mem_le_window_size 
+5588 e8c90000 ifetcht 2 ,contr 
+5589 e8c10000 ifetch 2 ,contr 
+558a 1febfe00 lshift2 pdata ,pdata 
+558b 60010441 store 2 ,mem_le_tsniff 
+558c 184b8400 lshift2 temp ,temp 
+558d 9840fe00 iadd temp ,pdata 
+558e e8ca0000 ifetcht 4 ,contr 
+558f 600a046b storet 4 ,mem_le_slave_latency 
+5590 9a20fe00 iadd rega ,pdata 
+5591 1fe22800 copy pdata ,regab 
+5592 68010441 fetch 2 ,mem_le_tsniff 
+5593 68090aa2 fetcht 2 ,mem_temp 
+5594 98467e00 isub temp ,pdata 
+5595 68090a9a fetcht 2 ,mem_pdatatemp 
+5596 984ffe00 imul32 temp ,pdata 
+5597 9a80fe00 iadd regab ,pdata 
+5598 60020443 store 4 ,mem_le_anchor 
+5599 20405713 call le_receive_window_size 
+559a 6801046d fetch 2 ,mem_le_superto 
+559b 600144ba store 2 ,mem_le_init_superto 
+559c 20600000 rtn 
+
+le_update_channel_map:
+559d 472cc02b bpatchx patch2b_1 ,mem_patch2b 
+559e 6800843f fetch 1 ,mem_le_state 
+559f c4030000 rtnbit0 lestate_update_map 
+55a0 68010459 fetch 2 ,mem_le_event_count 
+55a1 6809045f fetcht 2 ,mem_le_instant 
+55a2 98467e00 isub temp ,pdata 
+55a3 24610000 nrtn positive 
+55a4 6800843f fetch 1 ,mem_le_state 
+55a5 793ffe06 set0 lestate_update_map ,pdata 
+55a6 6000843f store 1 ,mem_le_state 
+55a7 6802c3ce fetch 5 ,mem_le_new_map 
+55a8 6002846f store 5 ,mem_le_channel_map 
+55a9 2020545b branch le_calc_channel_map 
+
+le_acknowledge:
+55aa 472d402b bpatchx patch2b_2 ,mem_patch2b 
+55ab 204056ed call le_supervision_flush 
+55ac 204055c0 call le_check_wak 
+55ad 680082d9 fetch 1 ,mem_le_rxbuf 
+55ae 2feffe04 isolate1 md ,pdata 
+55af 7920802a setflag true ,mark_ble_rx_md ,mark 
+55b0 1fe37e00 rshift pdata ,pdata 
+55b1 9842fe00 ixor temp ,pdata 
+55b2 2feffe02 isolate1 nesn ,pdata 
+55b3 7920800f setflag true ,mark_old_packet ,mark 
+55b4 c6078000 rtnmark1 mark_old_packet 
+55b5 680082da fetch 1 ,mem_le_rxbuf + 1 
+55b6 203a55bc branch le_ack_unenc ,blank 
+55b7 6800843f fetch 1 ,mem_le_state 
+55b8 c30255bc bbit0 lestate_encryption ,le_ack_unenc 
+55b9 2040748d call load_sk 
+55ba 204073fb call le_decrypt 
+55bb 247a0000 nrtn blank 
+
+le_ack_unenc:
+55bc 68088456 fetcht 1 ,mem_le_arq 
+55bd 79400402 setflip nesn ,temp 
+55be 60088456 storet 1 ,mem_le_arq 
+55bf 20600000 rtn 
+
+le_check_wak:
+55c0 472dc02b bpatchx patch2b_3 ,mem_patch2b 
+55c1 68088456 fetcht 1 ,mem_le_arq 
+55c2 284c0005 isolate0 wak ,temp 
+55c3 20608000 rtn true 
+55c4 680082d9 fetch 1 ,mem_le_rxbuf 
+55c5 1fe3fe00 lshift pdata ,pdata 
+55c6 9842fe00 ixor temp ,pdata 
+55c7 c4018000 rtnbit0 sn 
+55c8 793f8405 set0 wak ,temp 
+55c9 79400403 setflip sn ,temp 
+55ca 60088456 storet 1 ,mem_le_arq 
+55cb 28400603 compare 3 ,temp ,3 
+55cc 24608000 nrtn true 
+55cd 6800c3de fetch 1 ,mem_le_txpayload 
+55ce c002d5d2 beq ll_start_enc_req ,le_set_enc 
+55cf 6800c4c5 fetch 1 ,mem_le_enc_state 
+55d0 c00155d6 beq flag_le_enc_pause ,le_clear_enc 
+55d1 20600000 rtn 
+
+le_set_enc:
+55d2 6800843f fetch 1 ,mem_le_state 
+55d3 79207e04 set1 lestate_encryption ,pdata 
+55d4 6000843f store 1 ,mem_le_state 
+55d5 20600000 rtn 
+
+le_clear_enc:
+55d6 472e402b bpatchx patch2b_4 ,mem_patch2b 
+55d7 7044c500 jam flag_le_enc_null ,mem_le_enc_state 
+55d8 dfe00000 arg 0 ,pdata 
+55d9 6002440d store 4 ,mem_le_last_mic 
+55da 6002c403 store 5 ,mem_le_pcnt_tx 
+55db 79207e27 set1 39 ,pdata 
+55dc 6002c408 store 5 ,mem_le_pcnt_rx 
+55dd 6800843f fetch 1 ,mem_le_state 
+55de 793ffe04 set0 lestate_encryption ,pdata 
+55df 6000843f store 1 ,mem_le_state 
+55e0 20600000 rtn 
+
+le_wait_adv:
+55e1 472ec02b bpatchx patch2b_5 ,mem_patch2b 
+55e2 20405422 call le_next_adv_channel 
+55e3 20405485 call le_receive_adv 
+55e4 68008001 fetch 1 ,mem_le_adv_waitcnt 
+55e5 1fe0fe01 increase 1 ,pdata 
+55e6 60008001 store 1 ,mem_le_adv_waitcnt 
+55e7 20600000 rtn 
+
+le_scan:
+55e8 472f402b bpatchx patch2b_6 ,mem_patch2b 
+55e9 6800c369 fetch 1 ,mem_le_scan_enable 
+55ea c1808000 rtnne le_scan_enable 
+55eb d8e00002 arg le_scan_interval_timer ,queue 
+55ec 20407f16 call timer_check 
+55ed 247a0000 nrtn blank 
+55ee 6801436a fetch 2 ,mem_le_scan_interval 
+55ef 6809436c fetcht 2 ,mem_le_scan_window 
+55f0 98467e00 isub temp ,pdata 
+55f1 d8e00002 arg le_scan_interval_timer ,queue 
+55f2 20407f08 call timer_init 
+55f3 7854fc00 disable master 
+55f4 20405572 call le_init_adv 
+55f5 204055e1 call le_wait_adv 
+55f6 24768000 nrtn match 
+55f7 472fc02b bpatchx patch2b_7 ,mem_patch2b 
+55f8 680302db fetch 6 ,mem_le_rxbuf + 2 
+55f9 6003044f store 6 ,mem_le_plap 
+55fa 68008002 fetch 1 ,mem_le_adv_rcv 
+55fb 1fe0fe01 increase 1 ,pdata 
+55fc 60008002 store 1 ,mem_le_adv_rcv 
+55fd 20405608 call le_create_conn 
+55fe 20748000 rtn master 
+55ff 2040550b call le_send_scan_request 
+5600 24768000 nrtn match 
+5601 4730402c bpatchx patch2c_0 ,mem_patch2c 
+5602 68008004 fetch 1 ,mem_le_scanrsp_rcv 
+5603 1fe0fe01 increase 1 ,pdata 
+5604 60008004 store 1 ,mem_le_scanrsp_rcv 
+5605 680482e1 fetch 9 ,mem_le_rxbuf + 8 
+5606 60048101 store 9 ,mem_tmp_buffer 
+5607 20600000 rtn 
+
+le_create_conn:
+5608 4730c02c bpatchx patch2c_1 ,mem_patch2c 
+5609 6800849b fetch 1 ,mem_cmd_le_create_conn 
+560a c18d8000 rtnne hci_cmd_le_create_conn 
+560b 6803044f fetch 6 ,mem_le_plap 
+560c 680b448f fetcht 6 ,mem_le_conn_peer_addr 
+560d 98467c00 isub temp ,null 
+560e 24628000 nrtn zero 
+560f 2040223b call context_new 
+5610 24628000 nrtn zero 
+5611 2040552b call le_connect_request 
+5612 20405340 call le_init_master 
+5613 4731402c bpatchx patch2c_2 ,mem_patch2c 
+5614 7041ce00 jam 0 ,mem_hci_cmd 
+5615 70047600 jam 0 ,mem_le_peer_sca 
+5616 70436900 jam 0 ,mem_le_scan_enable 
+5617 70049b00 jam 0 ,mem_cmd_le_create_conn 
+5618 20202223 branch context_save 
+
+le_scan_check_sender_addr_type:
+5619 da200001 arg 1 ,rega 
+561a 680082d9 fetch 1 ,mem_le_rxbuf 
+561b c3830000 rtnbit1 le_sender_addr_bit 
+561c da200000 arg 0 ,rega 
+561d 20600000 rtn 
+
+le_prepare_tx:
+561e 4731c02c bpatchx patch2c_3 ,mem_patch2c 
+561f 68008456 fetch 1 ,mem_le_arq 
+5620 c3828000 rtnbit1 wak 
+5621 20405642 call le_check_tx_md 
+5622 20405873 call le_fifo_get_first_tx_ptr 
+5623 203a5664 branch le_send_empty ,blank 
+5624 e8c08000 ifetch 1 ,contr 
+5625 e8c88000 ifetcht 1 ,contr 
+5626 18422200 copy temp ,rega 
+5627 9a267e00 isub rega ,pdata 
+5628 d840001b arg le_max_paket_len ,temp 
+5629 20407fdd call not_greater_than 
+562a 1fe20400 copy pdata ,temp 
+562b e8c08000 ifetch 1 ,contr 
+562c 1fe20200 copy pdata ,type 
+562d 1a227e00 copy rega ,pdata 
+562e 98c08c00 iadd contr ,contr 
+562f d8a043de arg mem_le_txpayload ,contw 
+5630 18427200 copy temp ,loopcnt 
+5631 20407f01 call memcpy 
+5632 20405654 call le_update_tx_type 
+5633 20405666 call le_send_packet 
+5634 20405873 call le_fifo_get_first_tx_ptr 
+5635 e8c08000 ifetch 1 ,contr 
+5636 1fe22200 copy pdata ,rega 
+5637 18c22600 copy contr ,regc 
+5638 e8c88000 ifetcht 1 ,contr 
+5639 18422400 copy temp ,regb 
+563a 9a467e00 isub regb ,pdata 
+563b d840001b arg le_max_paket_len ,temp 
+563c 20407fdd call not_greater_than 
+563d 9a40fe00 iadd regb ,pdata 
+563e e2608000 istore 1 ,regc 
+563f 9a267c00 isub rega ,null 
+5640 24628000 nrtn zero 
+5641 20205896 branch le_fifo_release_first_node 
+
+le_check_tx_md:
+5642 20405649 call le_check_continue 
+5643 c6148000 rtnmark1 mark_ble_tx_md 
+5644 6800c4e9 fetch 1 ,mem_le_configuration 
+5645 c3015652 bbit0 bit_ble_transmit_packet_by_md ,le_clear_md 
+5646 20405876 call le_fifo_get_second_tx_ptr 
+5647 203a5652 branch le_clear_md ,blank 
+5648 20205650 branch le_set_md 
+
+le_check_continue:
+5649 20405873 call le_fifo_get_first_tx_ptr 
+564a 203a5652 branch le_clear_md ,blank 
+564b e8c08000 ifetch 1 ,contr 
+564c e8c88000 ifetcht 1 ,contr 
+564d 98467e00 isub temp ,pdata 
+564e 1fe67c1b sub pdata ,le_max_paket_len ,null 
+564f 20215652 branch le_clear_md ,positive 
+
+le_set_md:
+5650 79200029 set1 mark_ble_tx_md ,mark 
+5651 20600000 rtn 
+
+le_clear_md:
+5652 793f8029 set0 mark_ble_tx_md ,mark 
+5653 20600000 rtn 
+
+le_update_tx_type:
+5654 1a227e00 copy rega ,pdata 
+5655 207a0000 rtn blank 
+5656 d8200001 arg llid_continue ,type 
+5657 20600000 rtn 
+
+le_att_check_notification_enable:
+5658 4732402c bpatchx patch2c_4 ,mem_patch2c 
+5659 18408401 increase 1 ,temp 
+565a 2040576a call le_att_get_handle_ptr 
+565b 18c08dfe increase -2 ,contr 
+565c e8c10000 ifetch 2 ,contr 
+565d d8402902 arg client_charactertic_configuration ,temp 
+565e 98467c00 isub temp ,null 
+565f 24628000 nrtn zero 
+5660 18c08c01 increase 1 ,contr 
+5661 18c22200 copy contr ,rega 
+5662 e8c08000 ifetch 1 ,contr 
+5663 20600000 rtn 
+
+le_send_empty:
+5664 18000400 force 0 ,temp 
+5665 18000201 force 1 ,type 
+
+le_send_packet:
+5666 4732c02c bpatchx patch2c_5 ,mem_patch2c 
+5667 6008c3dd storet 1 ,mem_le_txlen 
+5668 68088456 fetcht 1 ,mem_le_arq 
+5669 79200405 set1 wak ,temp 
+566a 18417efc and temp ,0xfc ,pdata 
+566b 9821fe00 ior type ,pdata 
+566c 60008456 store 1 ,mem_le_arq 
+566d 1fe17e1f and_into 0x1f ,pdata 
+566e 280ffe29 isolate1 mark_ble_tx_md ,mark 
+566f 7920fe04 setflag true ,md ,pdata 
+5670 6000c3dc store 1 ,mem_le_txheader 
+5671 6800c3dc fetch 1 ,mem_le_txheader 
+5672 28200601 compare 1 ,type ,3 
+5673 2420d676 nbranch le_send_no_txlen ,true 
+5674 6800c3dd fetch 1 ,mem_le_txlen 
+5675 207a0000 rtn blank 
+
+le_send_no_txlen:
+5676 6800843f fetch 1 ,mem_le_state 
+5677 c4020000 rtnbit0 lestate_encryption 
+5678 2040748d call load_sk 
+5679 202073e3 branch le_encrypt 
+
+get_lpm_wake_ble_rx_lock:
+567a d8e00000 arg wake_lock_ble_rx ,queue 
+567b 20202c32 branch lpm_get_wake_lock 
+
+put_lpm_wake_ble_rx_lock:
+567c d8e00000 arg wake_lock_ble_rx ,queue 
+567d 20202c36 branch lpm_put_wake_lock 
+
+le_parse:
+567e 4733402c bpatchx patch2c_6 ,mem_patch2c 
+567f c6078000 rtnmark1 mark_old_packet 
+5680 20405890 call le_fifo_check_full 
+5681 247a0000 nrtn blank 
+5682 680082d9 fetch 1 ,mem_le_rxbuf 
+5683 1fe17e03 and pdata ,0x3 ,pdata 
+5684 6000c50c store 1 ,mem_le_packet_llid 
+5685 e8c08000 ifetch 1 ,contr 
+5686 1fe17e1f and pdata ,0x1f ,pdata 
+5687 6000c50b store 1 ,mem_le_packet_size 
+5688 207a0000 rtn blank 
+5689 18c27e00 copy contr ,pdata 
+568a 6001450d store 2 ,mem_le_payload_ptr 
+568b 6800c50c fetch 1 ,mem_le_packet_llid 
+568c c001dc64 beq llid_le_ll ,le_parse_ll 
+
+le_parse_l2cap:
+568d 2040569a call le_check_l2cap_complete 
+568e 2434567a nbranch get_lpm_wake_ble_rx_lock ,user 
+568f 2040567c call put_lpm_wake_ble_rx_lock 
+5690 6801450d fetch 2 ,mem_le_payload_ptr 
+5691 1fe20c00 copy pdata ,contr 
+5692 e8c10000 ifetch 2 ,contr 
+5693 600144fc store 2 ,mem_le_l2cap_size 
+5694 4733c02c bpatchx patch2c_7 ,mem_patch2c 
+5695 e8c10000 ifetch 2 ,contr 
+5696 c00258ab beq le_l2cap_cid_att ,le_parse_att 
+5697 c0035af4 beq le_l2cap_cid_smp ,le_parse_smp 
+5698 c002dab6 beq le_l2cap_cid_signal ,le_parse_signaling 
+5699 20600000 rtn 
+
+le_check_l2cap_complete:
+569a 6800c50c fetch 1 ,mem_le_packet_llid 
+569b c00156a9 beq llid_start ,le_check_l2cap_llid_start 
+569c c000d6c1 beq llid_continue ,le_check_l2cap_llid_continue 
+569d 20600000 rtn 
+
+le_check_l2cap_cid_legal:
+569e 20407fe7 call enable_user 
+569f d8400004 arg le_l2cap_cid_att ,temp 
+56a0 9fe67c00 isub pdata ,null 
+56a1 20628000 rtn zero 
+56a2 d8400005 arg le_l2cap_cid_signal ,temp 
+56a3 9fe67c00 isub pdata ,null 
+56a4 20628000 rtn zero 
+56a5 d8400006 arg le_l2cap_cid_smp ,temp 
+56a6 9fe67c00 isub pdata ,null 
+56a7 20628000 rtn zero 
+56a8 20207fe9 branch disable_user 
+
+le_check_l2cap_llid_start:
+56a9 6801450d fetch 2 ,mem_le_payload_ptr 
+56aa 1fe20c00 copy pdata ,contr 
+56ab e8c10000 ifetch 2 ,contr 
+56ac 600144fc store 2 ,mem_le_l2cap_size 
+56ad e8c10000 ifetch 2 ,contr 
+56ae 2040569e call le_check_l2cap_cid_legal 
+56af 24740000 nrtn user 
+56b0 6808c50b fetcht 1 ,mem_le_packet_size 
+56b1 6008c4fe storet 1 ,mem_le_packet_len_recved 
+56b2 680144fc fetch 2 ,mem_le_l2cap_size 
+56b3 1fe0fe04 increase 4 ,pdata 
+56b4 98467c00 isub temp ,null 
+56b5 2022ffe7 branch enable_user ,zero 
+56b6 6800c50b fetch 1 ,mem_le_packet_size 
+56b7 1fe27200 copy pdata ,loopcnt 
+56b8 d8a00311 arg mem_le_l2capbuf ,contw 
+56b9 6801450d fetch 2 ,mem_le_payload_ptr 
+56ba 1fe20c00 copy pdata ,contr 
+56bb 20407f01 call memcpy 
+56bc 20207fe9 branch disable_user 
+
+le_check_l2cap_continue_legal:
+56bd 20407fe7 call enable_user 
+56be 6800c4fe fetch 1 ,mem_le_packet_len_recved 
+56bf 247a0000 nrtn blank 
+56c0 20207fe9 branch disable_user 
+
+le_check_l2cap_llid_continue:
+56c1 204056bd call le_check_l2cap_continue_legal 
+56c2 24740000 nrtn user 
+56c3 6800c4fe fetch 1 ,mem_le_packet_len_recved 
+56c4 d8a00311 arg mem_le_l2capbuf ,contw 
+56c5 98a0a200 iadd contw ,rega 
+56c6 6808c50b fetcht 1 ,mem_le_packet_size 
+56c7 9840fe00 iadd temp ,pdata 
+56c8 6000c4fe store 1 ,mem_le_packet_len_recved 
+56c9 6800c50b fetch 1 ,mem_le_packet_size 
+56ca 1fe27200 copy pdata ,loopcnt 
+56cb 1a220a00 copy rega ,contw 
+56cc 6801450d fetch 2 ,mem_le_payload_ptr 
+56cd 1fe20c00 copy pdata ,contr 
+56ce 20407ef4 call memcpy_fast 
+56cf 58000311 setarg mem_le_l2capbuf 
+56d0 6001450d store 2 ,mem_le_payload_ptr 
+56d1 680144fc fetch 2 ,mem_le_l2cap_size 
+56d2 1fe0fe04 increase 4 ,pdata 
+56d3 6808c4fe fetcht 1 ,mem_le_packet_len_recved 
+56d4 98467c00 isub temp ,null 
+56d5 2022ffe7 branch enable_user ,zero 
+56d6 20207fe9 branch disable_user 
+
+le_get_search_att_type:
+56d7 20407ea5 call store_contr 
+56d8 d8a0445e arg mem_le_search_att_type_length ,contw 
+
+le_get_search_common:
+56d9 680144fc fetch 2 ,mem_le_l2cap_size 
+56da 1fe0fffb increase -5 ,pdata 
+
+le_get_search_common2:
+56db e0a08000 istore 1 ,contw 
+56dc 1fe27200 copy pdata ,loopcnt 
+56dd 20407e9f call get_contr 
+56de 20207ef4 branch memcpy_fast 
+
+le_get_search_att_uuid:
+56df 20407ea5 call store_contr 
+56e0 d8a04471 arg mem_le_search_uuid_length ,contw 
+56e1 202056d9 branch le_get_search_common 
+
+le_writeatt_cb:
+56e2 680141f9 fetch 2 ,mem_cb_att_write 
+56e3 20207f9c branch callback_func 
+
+le_supervision_update:
+56e4 680a045b fetcht 4 ,mem_le_supervision_timer 
+56e5 20402a7b call get_clkbt 
+56e6 98461600 isub temp ,timeup 
+56e7 19627e00 deposit timeup 
+56e8 6809046d fetcht 2 ,mem_le_superto 
+56e9 18520400 lshift4 temp ,temp 
+56ea 18438400 lshift temp ,temp 
+56eb 98467e00 isub temp ,pdata 
+56ec 20600000 rtn 
+
+le_supervision_flush:
+56ed 20402a7b call get_clkbt 
+56ee 6002045b store 4 ,mem_le_supervision_timer 
+56ef 20600000 rtn 
+
+le_adv:
+56f0 70001624 jam 36 ,mem_le_ch_mapped 
+56f1 700ac200 jam 0 ,mem_le_adv_channel_map_temp 
+
+le_adv_loop:
+56f2 4734402d bpatchx patch2d_0 ,mem_patch2d 
+56f3 6800c36e fetch 1 ,mem_le_adv_enable 
+56f4 207a0000 rtn blank 
+56f5 d8e00000 arg le_adv_interval_timer ,queue 
+56f6 20407f16 call timer_check 
+56f7 247a0000 nrtn blank 
+56f8 4734c02d bpatchx patch2d_1 ,mem_patch2d 
+
+le_adv_loop_tx:
+56f9 7854fc00 disable master 
+56fa 78287c00 enable swfine 
+56fb 20405572 call le_init_adv 
+56fc 20405422 call le_next_adv_channel 
+56fd 204054e9 call le_send_adv_ind 
+56fe 2436d706 nbranch le_adv_not_match ,match 
+56ff 68008003 fetch 1 ,mem_le_req_rcv 
+5700 1fe0fe01 increase 1 ,pdata 
+5701 60008003 store 1 ,mem_le_req_rcv 
+5702 680082d9 fetch 1 ,mem_le_rxbuf 
+5703 1fe17e0f and pdata ,0x0f ,pdata 
+5704 c001d51c beq scan_req ,le_send_scan_response 
+5705 c002d728 beq connect_req ,le_parse_connect_req 
+
+le_adv_not_match:
+5706 4735402d bpatchx patch2d_2 ,mem_patch2d 
+5707 180a7e00 random pdata 
+5708 d84001ff arg 0x1ff ,temp 
+5709 98417e00 iand temp ,pdata 
+570a 1fe0fefa add pdata ,250 ,pdata 
+570b 20403cbe call delay 
+570c 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp 
+570d 6808c48d fetcht 1 ,mem_le_adv_channel_map 
+570e 98467c00 isub temp ,null 
+570f 2422d6f2 nbranch le_adv_loop ,zero 
+5710 d8e00000 arg le_adv_interval_timer ,queue 
+5711 68014482 fetch 2 ,mem_le_adv_interval 
+5712 20207f08 branch timer_init 
+
+le_receive_window_size:
+5713 4735c02d bpatchx patch2d_3 ,mem_patch2d 
+5714 68008476 fetch 1 ,mem_le_peer_sca 
+5715 204053fc call le_sca_map 
+5716 68010441 fetch 2 ,mem_le_tsniff 
+5717 984ffe00 imul32 temp ,pdata 
+5718 d8400177 arg 375 ,temp 
+5719 984ffe00 imul32 temp ,pdata 
+571a d84186a0 arg 100000 ,temp 
+571b 9846fc00 idiv temp 
+571c 6800846a fetch 1 ,mem_le_window_size 
+571d d8404e20 arg 20000 ,temp 
+571e 984ffe00 imul32 temp ,pdata 
+571f 9840fe00 iadd temp ,pdata 
+5720 600244e5 store 4 ,mem_le_transmit_window 
+5721 4736402d bpatchx patch2d_4 ,mem_patch2d 
+5722 680140c1 fetch 2 ,mem_rx_window_sniff 
+5723 20407f86 call wait_div_end 
+5724 18078400 quotient temp 
+5725 9840fe00 iadd temp ,pdata 
+5726 6001044d store 2 ,mem_le_receive_window 
+5727 20600000 rtn 
+
+le_parse_connect_req:
+5728 4736c02d bpatchx patch2d_5 ,mem_patch2d 
+5729 680302e1 fetch 6 ,mem_le_rxbuf + 8 
+572a 680b44a0 fetcht 6 ,mem_le_lap 
+572b 98467c00 isub temp ,null 
+572c 24628000 nrtn zero 
+572d 20405619 call le_scan_check_sender_addr_type 
+572e 1a227e00 copy rega ,pdata 
+572f 6000c48e store 1 ,mem_le_conn_peer_addr_type 
+5730 680382ee fetch 7 ,mem_le_rxbuf + 21 
+5731 60038101 store 7 ,mem_tmp_buffer 
+5732 e8c40000 ifetch 8 ,contr 
+5733 e0a40000 istore 8 ,contw 
+5734 680302db fetch 6 ,mem_le_rxbuf + 2 
+5735 6003044f store 6 ,mem_le_plap 
+5736 18c08c06 increase 6 ,contr 
+5737 e8c40000 ifetch 8 ,contr 
+5738 60040463 store 8 ,mem_le_access 
+5739 e8c90000 ifetcht 2 ,contr 
+573a 4737402d bpatchx patch2d_6 ,mem_patch2d 
+573b 184b8400 lshift2 temp ,temp 
+573c e8c10000 ifetch 2 ,contr 
+573d 1febfe00 lshift2 pdata ,pdata 
+573e 60010441 store 2 ,mem_le_tsniff 
+573f 60020443 store 4 ,mem_le_anchor 
+5740 98467e00 isub temp ,pdata 
+5741 1fe0d1fe add pdata ,-2 ,clke_bt 
+5742 e8c48000 ifetch 9 ,contr 
+5743 6004846b store 9 ,mem_le_slave_latency 
+5744 4737c02d bpatchx patch2d_7 ,mem_patch2d 
+5745 e8c08000 ifetch 1 ,contr 
+5746 1ff18400 rshift4 pdata ,temp 
+5747 18430400 rshift temp ,temp 
+5748 60088476 storet 1 ,mem_le_peer_sca 
+5749 1fe17e1f and_into 0x1f ,pdata 
+574a 60008458 store 1 ,mem_le_hop 
+574b 20405713 call le_receive_window_size 
+574c 2040545b call le_calc_channel_map 
+574d 2040534c call le_init_slave 
+574e 2040223b call context_new 
+574f 24628000 nrtn zero 
+5750 4738402e bpatchx patch2e_0 ,mem_patch2e 
+5751 20402841 call calc_clke_offset 
+5752 20405ad3 call le_l2cap_reset_signaling_identifier 
+5753 700a9914 jam bt_evt_le_connected ,mem_fifo_temp 
+5754 20407d86 call ui_ipc_send_event 
+5755 20202223 branch context_save 
+
+le_init_attlist_search:
+5756 4738c02e bpatchx patch2e_1 ,mem_patch2e 
+5757 6801445a fetch 2 ,mem_le_search_handle_start 
+5758 98002400 iforce regb 
+5759 6801445c fetch 2 ,mem_le_search_handle_end 
+575a 98002600 iforce regc 
+575b 680144bc fetch 2 ,mem_ui_le_uuid_table 
+575c 98000c00 iforce contr 
+575d 78347c00 enable user 
+575e 20600000 rtn 
+
+le_att_handle_inrange:
+575f e8c10000 ifetch 2 ,contr 
+5760 207a0000 rtn blank 
+5761 9a467c00 isub regb ,null 
+5762 24610000 nrtn positive 
+5763 9a667c00 isub regc ,null 
+5764 20628000 rtn zero 
+5765 20215768 branch le_att_handle_blank ,positive 
+5766 18007c01 force 1 ,null 
+5767 20600000 rtn 
+
+le_att_handle_blank:
+5768 18007e00 force 0 ,pdata 
+5769 20600000 rtn 
+
+le_att_get_handle_ptr:
+576a 2040576d call le_att_get_handle_ptr2 
+576b 2022d779 branch le_att_get_handle_ptr_found ,zero 
+576c 20600000 rtn 
+
+le_att_get_handle_ptr2:
+576d 4739402e bpatchx patch2e_2 ,mem_patch2e 
+576e 680144bc fetch 2 ,mem_ui_le_uuid_table 
+576f 98000c00 iforce contr 
+
+le_att_get_handle_loop1:
+5770 e8c10000 ifetch 2 ,contr 
+5771 207a0000 rtn blank 
+5772 98467c00 isub temp ,null 
+5773 20628000 rtn zero 
+5774 e8c08000 ifetch 1 ,contr 
+5775 98c08c00 iadd contr ,contr 
+5776 e8c08000 ifetch 1 ,contr 
+5777 98c08c00 iadd contr ,contr 
+5778 20205770 branch le_att_get_handle_loop1 
+
+le_att_get_handle_ptr_found:
+5779 e8c08000 ifetch 1 ,contr 
+577a 98c08c00 iadd contr ,contr 
+577b 20600000 rtn 
+
+le_att_get_short_uuid_ptr:
+577c 4739c02e bpatchx patch2e_3 ,mem_patch2e 
+577d 680144bc fetch 2 ,mem_ui_le_uuid_table 
+577e 98000c00 iforce contr 
+
+le_att_get_short_uuid_loop:
+577f e8c10000 ifetch 2 ,contr 
+5780 207a0000 rtn blank 
+5781 e8c08000 ifetch 1 ,contr 
+5782 98c08c00 iadd contr ,contr 
+5783 18c08dfe increase -2 ,contr 
+5784 e8c10000 ifetch 2 ,contr 
+5785 98467c00 isub temp ,null 
+5786 20628000 rtn zero 
+5787 e8c08000 ifetch 1 ,contr 
+5788 98c08c00 iadd contr ,contr 
+5789 2020577f branch le_att_get_short_uuid_loop 
+
+le_att_get_handle_info_from_ptr:
+578a 6801049c fetch 2 ,mem_le_cur_attlist_start_ptr 
+578b 2020578e branch le_att_get_handle_info_fast 
+
+le_att_get_handle_info:
+578c 473a402e bpatchx patch2e_4 ,mem_patch2e 
+578d 680144bc fetch 2 ,mem_ui_le_uuid_table 
+
+le_att_get_handle_info_fast:
+578e 98000c00 iforce contr 
+578f 18422200 copy temp ,rega 
+
+le_att_get_handle_loop:
+5790 e8c10000 ifetch 2 ,contr 
+5791 203a5799 branch le_att_unfind_handle ,blank 
+5792 9a267c00 isub rega ,null 
+5793 2022d79a branch le_att_finded_handle ,zero 
+5794 e8c08000 ifetch 1 ,contr 
+5795 98c08c00 iadd contr ,contr 
+5796 e8c08000 ifetch 1 ,contr 
+5797 98c08c00 iadd contr ,contr 
+5798 20205790 branch le_att_get_handle_loop 
+
+le_att_unfind_handle:
+5799 20207fef branch disable_blank 
+
+le_att_finded_handle:
+579a e8c08000 ifetch 1 ,contr 
+579b 600084a2 store 1 ,mem_le_cur_uuid_length 
+579c 1fe27200 copy pdata ,loopcnt 
+579d d8a004a3 arg mem_le_cur_uuid ,contw 
+579e 20407ef4 call memcpy_fast 
+579f e8c08000 ifetch 1 ,contr 
+57a0 600084b3 store 1 ,mem_le_curr_att_len 
+57a1 20407ea5 call store_contr 
+57a2 20207ff1 branch enable_blank 
+
+le_modified_name:
+57a3 473ac02e bpatchx patch2e_5 ,mem_patch2e 
+57a4 204057a6 call le_modified_name_att_list 
+57a5 202057b8 branch le_modified_name_adv 
+
+le_modified_name_att_list:
+57a6 d8402a00 arg uuid_chrctr_device_name ,temp 
+57a7 2040577c call le_att_get_short_uuid_ptr 
+57a8 207a0000 rtn blank 
+57a9 e8c08000 ifetch 1 ,contr 
+57aa 18c20a00 copy contr ,contw 
+57ab 6808c3af fetcht 1 ,mem_le_name_len 
+57ac 18427200 copy temp ,loopcnt 
+57ad 98467c00 isub temp ,null 
+57ae 242157b5 nbranch le_name_length_longer_than_att ,positive 
+57af 98460400 isub temp ,temp 
+57b0 d8c043b0 arg mem_le_name ,contr 
+57b1 20407f01 call memcpy 
+57b2 18427200 copy temp ,loopcnt 
+57b3 2442d7f0 ncall memcpy_empty ,zero 
+57b4 20600000 rtn 
+
+le_name_length_longer_than_att:
+57b5 1fe27200 copy pdata ,loopcnt 
+57b6 d8c043b0 arg mem_le_name ,contr 
+57b7 20207ef4 branch memcpy_fast 
+
+le_modified_name_adv:
+57b8 da60438f arg mem_le_adv_data_len + 32 ,regc 
+57b9 da204370 arg mem_le_adv_data ,rega 
+57ba 204057c5 call le_modified_name_adv_and_scan 
+57bb 58000000 setarg 0 
+57bc 79347e00 setflag user ,0 ,pdata 
+57bd 60008a9a store 1 ,mem_pdatatemp 
+57be da6043af arg mem_le_scan_data_len + 32 ,regc 
+57bf da204390 arg mem_le_scan_data ,rega 
+57c0 204057c5 call le_modified_name_adv_and_scan 
+57c1 20740000 rtn user 
+57c2 68008a9a fetch 1 ,mem_pdatatemp 
+57c3 203a2a8c branch assert ,blank 
+57c4 20600000 rtn 
+
+le_modified_name_adv_and_scan:
+57c5 473b402e bpatchx patch2e_6 ,mem_patch2e 
+57c6 20407fe7 call enable_user 
+57c7 20407eda call clear_temp_block 
+57c8 da400000 arg 0 ,regb 
+57c9 d8a00ac3 arg mem_le_data_temp ,contw 
+57ca 204057df call le_modified_name_adv_loop 
+57cb 6800c3af fetch 1 ,mem_le_name_len 
+57cc 1fe08401 add pdata ,1 ,temp 
+57cd 9a40a200 iadd regb ,rega 
+57ce 1a20a202 increase 2 ,rega 
+57cf 1a267c1f sub rega ,0x1f ,null 
+57d0 242157dd nbranch le_modified_name_adv_and_scan_name_overflow ,positive 
+57d1 e0a88000 istoret 1 ,contw 
+57d2 d8400009 arg gap_adtype_local_name_complete ,temp 
+57d3 e0a88000 istoret 1 ,contw 
+57d4 98007200 iforce loopcnt 
+57d5 20407ef4 call memcpy_fast 
+57d6 1a222400 copy rega ,regb 
+
+le_modified_name_adv_and_scan_store_data:
+57d7 1a427e00 deposit regb 
+57d8 60008ac2 store 1 ,mem_le_data_len_temp 
+57d9 d8c00ac2 arg mem_le_data_len_temp ,contr 
+57da 5fffffe0 setarg -32 
+57db 9a608a00 iadd regc ,contw 
+57dc 20207ebd branch memcpy32 
+
+le_modified_name_adv_and_scan_name_overflow:
+57dd 20407fe9 call disable_user 
+57de 202057d7 branch le_modified_name_adv_and_scan_store_data 
+
+le_modified_name_adv_loop:
+57df ea208000 ifetch 1 ,rega 
+57e0 207a0000 rtn blank 
+57e1 1fe0fe01 pincrease 1 
+57e2 e8c88000 ifetcht 1 ,contr 
+57e3 18467c09 sub temp ,gap_adtype_local_name_complete ,null 
+57e4 2022d7ee branch le_modified_name_adv_found_name ,zero 
+57e5 9a40a400 iadd regb ,regb 
+57e6 1a220c00 copy rega ,contr 
+57e7 98007200 iforce loopcnt 
+57e8 20407ef4 call memcpy_fast 
+57e9 18c22200 copy contr ,rega 
+
+le_modified_name_adv_loop2:
+57ea 1a227e00 deposit rega 
+57eb 9a667c00 isub regc ,null 
+57ec 20610000 rtn positive 
+57ed 202057df branch le_modified_name_adv_loop 
+
+le_modified_name_adv_found_name:
+57ee 9a20a200 iadd rega ,rega 
+57ef 202057ea branch le_modified_name_adv_loop2 
+
+memcpy_empty:
+57f0 58000020 setarg space 
+57f1 e0a08000 istore 1 ,contw 
+57f2 c20057f0 loop memcpy_empty 
+57f3 20600000 rtn 
+
+le_lpm_set_mult:
+57f4 473bc02e bpatchx patch2e_7 ,mem_patch2e 
+57f5 7855fc00 disable wake 
+57f6 203757f8 branch le_lpm_set_mult_attempt ,attempt 
+57f7 2436d806 nbranch le_lpm_lost ,match 
+
+le_lpm_set_mult_attempt:
+57f8 20402bcb call lpm_match 
+57f9 680140c1 fetch 2 ,mem_rx_window_sniff 
+57fa 6001044d store 2 ,mem_le_receive_window 
+57fb 2436abde nbranch lpm_mult_short ,match 
+57fc c507abde bmark1 mark_old_packet ,lpm_mult_short 
+57fd 6800c50b fetch 1 ,mem_le_packet_size 
+57fe 243a2bde nbranch lpm_mult_short ,blank 
+57ff 6800c3dd fetch 1 ,mem_le_txlen 
+5800 243a2bde nbranch lpm_mult_short ,blank 
+5801 6800c4e9 fetch 1 ,mem_le_configuration 
+5802 c282abde bbit1 bit_ble_short_mult ,lpm_mult_short 
+5803 6800843f fetch 1 ,mem_le_state 
+5804 c282abde bbit1 lestate_update_param ,lpm_mult_short 
+5805 20202bc0 branch lpm_mult_wait_timeout 
+
+le_lpm_lost:
+5806 680940c1 fetcht 2 ,mem_rx_window_sniff 
+5807 18430400 rshift temp ,temp 
+5808 6801044d fetch 2 ,mem_le_receive_window 
+5809 9840fe00 iadd temp ,pdata 
+580a 6001044d store 2 ,mem_le_receive_window 
+580b 20202bd6 branch lpm_lost 
+
+le_set_config_fixed_tk:
+580c d8e00000 arg bit_ble_passkey_fixed_key ,queue 
+580d 20205824 branch le_set_config 
+
+le_clr_config_fixed_tk:
+580e d8e00000 arg bit_ble_passkey_fixed_key ,queue 
+580f 20205828 branch le_clr_config 
+
+le_set_config_fixed_ltk:
+5810 d8e00001 arg bit_ble_pairing_fixed_ltk ,queue 
+5811 20205824 branch le_set_config 
+
+le_clr_config_fixed_ltk:
+5812 d8e00001 arg bit_ble_pairing_fixed_ltk ,queue 
+5813 20205828 branch le_clr_config 
+
+le_set_config_more_data:
+5814 d8e00002 arg bit_ble_transmit_packet_by_md ,queue 
+5815 20205824 branch le_set_config 
+
+le_clr_config_more_data:
+5816 d8e00002 arg bit_ble_transmit_packet_by_md ,queue 
+5817 20205828 branch le_clr_config 
+
+le_set_config_read_authentication:
+5818 d8e00003 arg bit_ble_read_auth ,queue 
+5819 20205824 branch le_set_config 
+
+le_clr_config_read_authentication:
+581a d8e00003 arg bit_ble_read_auth ,queue 
+581b 20205828 branch le_clr_config 
+
+le_set_config_write_authentication:
+581c d8e00004 arg bit_ble_write_auth ,queue 
+581d 20205824 branch le_set_config 
+
+le_clr_config_write_authentication:
+581e d8e00004 arg bit_ble_write_auth ,queue 
+581f 20205828 branch le_clr_config 
+
+le_set_config_short_mult:
+5820 d8e00005 arg bit_ble_short_mult ,queue 
+5821 20205824 branch le_set_config 
+
+le_clr_config_short_mult:
+5822 d8e00005 arg bit_ble_short_mult ,queue 
+5823 20205828 branch le_clr_config 
+
+le_set_config:
+5824 6800c4e9 fetch 1 ,mem_le_configuration 
+5825 f9207e00 qset1 pdata 
+5826 6000c4e9 store 1 ,mem_le_configuration 
+5827 20600000 rtn 
+
+le_clr_config:
+5828 6800c4e9 fetch 1 ,mem_le_configuration 
+5829 f93ffe00 qset0 pdata 
+582a 6000c4e9 store 1 ,mem_le_configuration 
+582b 20600000 rtn 
+
+le_set_fixed_ltk:
+582c 58112233 setarg 0x112233 
+582d 6001c4ea store 3 ,mem_le_fixed_ltk 
+582e 58445566 setarg 0x445566 
+582f e0a18000 istore 3 ,contw 
+5830 58778899 setarg 0x778899 
+5831 e0a18000 istore 3 ,contw 
+5832 58001122 setarg 0x001122 
+5833 e0a18000 istore 3 ,contw 
+5834 58334455 setarg 0x334455 
+5835 e0a18000 istore 3 ,contw 
+5836 58000066 setarg 0x66 
+5837 e0a08000 istore 1 ,contw 
+5838 20600000 rtn 
+
+le_set_justwork:
+5839 59000302 setarg 0x01000302 
+583a 60024453 store 4 ,mem_le_pres 
+583b 58010010 setarg 0x010010 
+583c 6001c457 store 3 ,mem_le_pres_max_keysize 
+583d 7044c601 jam 1 ,mem_le_pairing_mode 
+583e 20600000 rtn 
+
+le_fifo_malloc_tx_empty:
+583f da200000 arg 0 ,rega 
+5840 d8200001 arg llid_empty ,type 
+5841 20205850 branch le_fifo_malloc_tx 
+
+le_fifo_malloc_tx_ll:
+5842 d8200003 arg llid_le_ll ,type 
+5843 20405850 call le_fifo_malloc_tx 
+5844 1a427e00 copy regb ,pdata 
+5845 e0a08000 istore 1 ,contw 
+5846 20600000 rtn 
+
+le_fifo_malloc_tx_l2cap:
+5847 18000202 force llid_l2cap_start ,type 
+5848 1a20a204 increase 4 ,rega 
+5849 20405850 call le_fifo_malloc_tx 
+584a 1a20a3fc increase -4 ,rega 
+584b 1a227e00 copy rega ,pdata 
+584c e0a10000 istore 2 ,contw 
+584d 1a427e00 copy regb ,pdata 
+584e e0a10000 istore 2 ,contw 
+584f 20600000 rtn 
+
+le_fifo_malloc_tx:
+5850 1a267cf0 sub rega ,240 ,null 
+5851 24212a8c nbranch assert ,positive 
+5852 6800c4ff fetch 1 ,mem_le_tx_buff_used 
+5853 d8400001 arg 1 ,temp 
+5854 df200004 arg le_tx_buff_count ,loopcnt 
+
+le_fifo_malloc_tx_loop:
+5855 98417c00 iand temp ,null 
+5856 2022d85a branch le_fifo_malloc_tx_got_empty ,zero 
+5857 18438400 lshift temp ,temp 
+5858 c2005855 loop le_fifo_malloc_tx_loop 
+5859 20202a8c branch assert 
+
+le_fifo_malloc_tx_got_empty:
+585a 9842fe00 ixor temp ,pdata 
+585b 6000c4ff store 1 ,mem_le_tx_buff_used 
+585c 1f267e04 sub loopcnt ,le_tx_buff_count ,pdata 
+585d 1ff27e00 lshift4 pdata ,pdata 
+585e 1ff27e00 lshift4 pdata ,pdata 
+585f d8401800 arg mem_le_tx_buffer0 ,temp 
+5860 98408400 iadd temp ,temp 
+
+le_fifo_tx_find_empty_ptr:
+5861 df200000 arg 0 ,loopcnt 
+5862 d8c04500 arg mem_le_tx_ptr0 ,contr 
+
+le_fifo_tx_find_empty_ptr_loop:
+5863 e8c10000 ifetch 2 ,contr 
+5864 203a5869 branch le_fifo_tx_found_empty_ptr ,blank 
+5865 1f227e00 copy loopcnt ,pdata 
+5866 1f20f201 increase 1 ,loopcnt 
+5867 c0825863 bne le_tx_buff_count ,le_fifo_tx_find_empty_ptr_loop 
+5868 20202a8c branch assert 
+
+le_fifo_tx_found_empty_ptr:
+5869 18c08dfe increase -2 ,contr 
+586a e0c90000 istoret 2 ,contr 
+586b 18420a00 copy temp ,contw 
+586c 1a227e00 copy rega ,pdata 
+586d e0a08000 istore 1 ,contw 
+586e 58000000 setarg 0 
+586f e0a08000 istore 1 ,contw 
+5870 18227e00 copy type ,pdata 
+5871 e0a08000 istore 1 ,contw 
+5872 20600000 rtn 
+
+le_fifo_get_first_tx_ptr:
+5873 68014500 fetch 2 ,mem_le_tx_ptr0 
+5874 1fe20c00 copy pdata ,contr 
+5875 20600000 rtn 
+
+le_fifo_get_second_tx_ptr:
+5876 68014502 fetch 2 ,mem_le_tx_ptr1 
+5877 1fe20c00 copy pdata ,contr 
+5878 20600000 rtn 
+
+le_fifo_get_last_tx_ptr:
+5879 2040587c call le_fifo_get_last_tx_ptr0 
+587a 1fe20c00 copy pdata ,contr 
+587b 20600000 rtn 
+
+le_fifo_get_last_tx_ptr0:
+587c 68014506 fetch 2 ,mem_le_tx_ptr3 
+587d 247a0000 nrtn blank 
+587e 68014504 fetch 2 ,mem_le_tx_ptr2 
+587f 247a0000 nrtn blank 
+5880 68014502 fetch 2 ,mem_le_tx_ptr1 
+5881 247a0000 nrtn blank 
+5882 68014500 fetch 2 ,mem_le_tx_ptr0 
+5883 20600000 rtn 
+
+le_fifo_get_first_l2cap_ptr:
+5884 20405873 call le_fifo_get_first_tx_ptr 
+5885 18c08c03 increase 3 ,contr 
+5886 20600000 rtn 
+
+le_fifo_get_first_att_ptr:
+5887 20405873 call le_fifo_get_first_tx_ptr 
+5888 18c08c07 increase 7 ,contr 
+5889 20600000 rtn 
+
+le_fifo_get_last_att_ptr:
+588a 20405879 call le_fifo_get_last_tx_ptr 
+588b 18c08c07 increase 7 ,contr 
+588c 20600000 rtn 
+
+le_fifo_get_last_l2cap_ptr:
+588d 20405879 call le_fifo_get_last_tx_ptr 
+588e 18c08c03 increase 3 ,contr 
+588f 20600000 rtn 
+
+le_fifo_check_full:
+5890 68014506 fetch 2 ,mem_le_tx_ptr3 
+5891 20600000 rtn 
+
+le_fifo_check_nearly_full:
+5892 68014504 fetch 2 ,mem_le_tx_ptr2 
+5893 20600000 rtn 
+
+le_fifo_check_empty:
+5894 68014500 fetch 2 ,mem_le_tx_ptr0 
+5895 20600000 rtn 
+
+le_fifo_release_first_node:
+5896 68014500 fetch 2 ,mem_le_tx_ptr0 
+5897 d8401800 arg mem_le_tx_buffer0 ,temp 
+5898 98467e00 isub temp ,pdata 
+5899 1ff1fe00 rshift4 pdata ,pdata 
+589a 1ff18e00 rshift4 pdata ,queue 
+589b 6800c4ff fetch 1 ,mem_le_tx_buff_used 
+589c f93ffe00 qset0 pdata 
+589d 6000c4ff store 1 ,mem_le_tx_buff_used 
+589e df200000 arg 0 ,loopcnt 
+
+le_fifo_release_first_node_loop:
+589f 1f23fe00 lshift loopcnt ,pdata 
+58a0 d8404502 arg mem_le_tx_ptr1 ,temp 
+58a1 98408400 iadd temp ,temp 
+58a2 e8410000 ifetch 2 ,temp 
+58a3 184085fe increase -2 ,temp 
+58a4 e0410000 istore 2 ,temp 
+58a5 1f227e00 copy loopcnt ,pdata 
+58a6 1f20f201 increase 1 ,loopcnt 
+58a7 c081d89f bne le_tx_buff_update_loopcnt ,le_fifo_release_first_node_loop 
+58a8 58000000 setarg 0 
+58a9 e0410000 istore 2 ,temp 
+58aa 20600000 rtn 
+
+le_parse_att:
+58ab e8c18000 ifetch 3 ,contr 
+58ac 60018477 store 3 ,mem_le_att_opcode 
+58ad c00158c1 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request 
+58ae c001d8c9 beq attop_exchange_mtu_response ,le_parse_att_exchange_mtu_response 
+58af c00258cc beq attop_find_information_request ,le_parse_att_find_information_request 
+58b0 c00358f2 beq attop_find_by_type_value_request ,le_parse_att_find_by_type_value_request 
+58b1 c004593f beq attop_read_by_type_request ,le_parse_att_read_by_type_request 
+58b2 c00559bc beq attop_read_request ,le_parse_att_read_request 
+58b3 c00659e4 beq attop_read_blob_request ,le_parse_att_read_blob_request 
+58b4 c00859fa beq attop_read_by_group_type_request ,le_parse_att_read_by_group_type_request 
+58b5 c0095a2f beq attop_write_request ,le_parse_att_write_request 
+58b6 c00b5a48 beq attop_prepare_write_request ,le_parse_att_prepare_write_request 
+58b7 c00c5a5b beq attop_execute_write_request ,le_parse_att_execute_write_request 
+58b8 c0295a60 beq attop_write_command ,le_parse_att_write_command 
+58b9 20600000 rtn 
+
+le_send_att_exchange_mtu_requset:
+58ba 18002203 force 3 ,rega 
+58bb 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+58bc 58000002 setarg attop_exchange_mtu_request 
+58bd e0a08000 istore 1 ,contw 
+58be 680144a6 fetch 2 ,mem_le_local_mtu 
+58bf e0a10000 istore 2 ,contw 
+58c0 20600000 rtn 
+
+le_parse_att_exchange_mtu_request:
+58c1 204058c9 call le_parse_att_exchange_mtu_response 
+
+le_send_att_exchange_mtu_response:
+58c2 18002203 force 3 ,rega 
+58c3 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+58c4 58000003 setarg attop_exchange_mtu_response 
+58c5 e0a08000 istore 1 ,contw 
+58c6 680144a6 fetch 2 ,mem_le_local_mtu 
+58c7 e0a10000 istore 2 ,contw 
+58c8 20600000 rtn 
+
+le_parse_att_exchange_mtu_response:
+58c9 1fecfe00 rshift8 pdata ,pdata 
+58ca 600144a8 store 2 ,mem_le_remote_mtu 
+58cb 20600000 rtn 
+
+le_parse_att_find_information_request:
+58cc 20405ab1 call le_get_search_handle_start_end_common 
+58cd 20407fe7 call enable_user 
+58ce 202058cf branch le_send_att_find_information_response 
+
+le_send_att_find_information_response:
+58cf d9600003 arg 3 ,timeup 
+58d0 20405756 call le_init_attlist_search 
+
+le_send_att_find_information_res_loop:
+58d1 2040575f call le_att_handle_inrange 
+58d2 203a58f0 branch le_send_att_find_information_res_end ,blank 
+58d3 242158ed nbranch le_send_att_find_information_res_next ,positive 
+58d4 18c08dfe increase -2 ,contr 
+58d5 20407ea5 call store_contr 
+58d6 20407e9c call get_contw 
+58d7 243458e1 nbranch le_send_att_find_information_res_store_info ,user 
+58d8 20407e85 call push_stack_rega_b_c 
+58d9 20407fe9 call disable_user 
+58da 18002214 force 20 ,rega 
+58db 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+58dc 20407e95 call pop_stack_rega_b_c 
+58dd 58000005 setarg attop_find_information_response 
+58de e0a08000 istore 1 ,contw 
+58df 58000001 setarg uuid_size_16bit 
+58e0 e0a08000 istore 1 ,contw 
+
+le_send_att_find_information_res_store_info:
+58e1 20407e9f call get_contr 
+58e2 e8c10000 ifetch 2 ,contr 
+58e3 e0a10000 istore 2 ,contw 
+58e4 e8c08000 ifetch 1 ,contr 
+58e5 1fe27200 copy pdata ,loopcnt 
+58e6 20407f01 call memcpy 
+58e7 20407ea2 call store_contw 
+58e8 196097ff increase -1 ,timeup 
+58e9 2022d8f0 branch le_send_att_find_information_res_end ,zero 
+
+le_send_att_find_information_res_cont:
+58ea e8c08000 ifetch 1 ,contr 
+58eb 98c08c00 iadd contr ,contr 
+58ec 202058d1 branch le_send_att_find_information_res_loop 
+
+le_send_att_find_information_res_next:
+58ed e8c08000 ifetch 1 ,contr 
+58ee 98c08c00 iadd contr ,contr 
+58ef 202058ea branch le_send_att_find_information_res_cont 
+
+le_send_att_find_information_res_end:
+58f0 20345a76 branch le_send_att_error_response_notfound ,user 
+58f1 20205aa5 branch le_send_auto_len_by_mem 
+
+le_parse_att_find_by_type_value_request:
+58f2 20405ab1 call le_get_search_handle_start_end_common 
+58f3 e8c10000 ifetch 2 ,contr 
+58f4 60014472 store 2 ,mem_le_search_uuid 
+58f5 20407ea5 call store_contr 
+58f6 d8a0445e arg mem_le_search_att_type_length ,contw 
+58f7 680144fc fetch 2 ,mem_le_l2cap_size 
+58f8 1fe0fff9 increase -7 ,pdata 
+58f9 204056db call le_get_search_common2 
+58fa 20205905 branch le_send_att_find_by_type_value_response 
+
+le_start_end_handle_check_1:
+58fb 78547c00 disable user 
+58fc 6809445a fetcht 2 ,mem_le_search_handle_start 
+58fd 6801445c fetch 2 ,mem_le_search_handle_end 
+58fe 98467c00 isub temp ,null 
+58ff 24215902 nbranch le_start_end_handle_check_1_fail ,positive 
+5900 18427e00 deposit temp 
+5901 c1800000 rtnne 0 
+
+le_start_end_handle_check_1_fail:
+5902 78347c00 enable user 
+5903 70047a01 jam att_err_invalid_handle ,mem_le_err_code 
+5904 20205a77 branch le_send_att_error_response 
+
+le_send_att_find_by_type_value_response:
+5905 204058fb call le_start_end_handle_check_1 
+5906 20740000 rtn user 
+5907 68094472 fetcht 2 ,mem_le_search_uuid 
+5908 58002800 setarg uuid_gatt_primary_service 
+5909 98467c00 isub temp ,null 
+590a 2022d90c branch le_send_att_find_by_type_value_res_primary ,zero 
+590b 20205a76 branch le_send_att_error_response_notfound 
+
+le_send_att_find_by_type_value_res_primary:
+590c 7004b400 jam le_find_by_type_val_res_not_found ,mem_le_search_res 
+590d 6809445a fetcht 2 ,mem_le_search_handle_start 
+590e 60090aa2 storet 2 ,mem_temp 
+590f 2040578c call le_att_get_handle_info 
+5910 243a5a76 nbranch le_send_att_error_response_notfound ,blank 
+
+le_send_att_find_primary_search_loop:
+5911 68090aa2 fetcht 2 ,mem_temp 
+5912 2040578c call le_att_get_handle_info 
+5913 243a5925 nbranch le_send_att_error_response_notfound2 ,blank 
+5914 18c22200 copy contr ,rega 
+5915 680084b3 fetch 1 ,mem_le_curr_att_len 
+5916 1fe27200 copy pdata ,loopcnt 
+5917 6808c45e fetcht 1 ,mem_le_search_att_type_length 
+5918 98467c00 isub temp ,null 
+5919 2422d921 nbranch le_send_att_find_primary_search_loop1 ,zero 
+591a da40445f arg mem_le_search_att_type ,regb 
+591b 20407f88 call string_compare 
+591c 2022d928 branch le_send_att_find_primary_search_end_start_handle_found ,zero 
+591d 680104a3 fetch 2 ,mem_le_cur_uuid 
+591e 68094472 fetcht 2 ,mem_le_search_uuid 
+591f 98467c00 isub temp ,null 
+5920 2022d930 branch le_send_att_find_primary_search_end_ending_handle_found ,zero 
+
+le_send_att_find_primary_search_loop1:
+5921 68010aa2 fetch 2 ,mem_temp 
+5922 1fe0fe01 increase 1 ,pdata 
+5923 60010aa2 store 2 ,mem_temp 
+5924 20205911 branch le_send_att_find_primary_search_loop 
+
+le_send_att_error_response_notfound2:
+5925 680084b4 fetch 1 ,mem_le_search_res 
+5926 c000d930 beq le_find_by_type_val_res_found_starting_handle ,le_send_att_find_primary_search_end_ending_handle_found 
+5927 20205a76 branch le_send_att_error_response_notfound 
+
+le_send_att_find_primary_search_end_start_handle_found:
+5928 680104a3 fetch 2 ,mem_le_cur_uuid 
+5929 68094472 fetcht 2 ,mem_le_search_uuid 
+592a 98467c00 isub temp ,null 
+592b 2422d921 nbranch le_send_att_find_primary_search_loop1 ,zero 
+592c 7004b401 jam le_find_by_type_val_res_found_starting_handle ,mem_le_search_res 
+592d 68090aa2 fetcht 2 ,mem_temp 
+592e 6009049e storet 2 ,mem_le_cur_handle_start 
+592f 20205921 branch le_send_att_find_primary_search_loop1 
+
+le_send_att_find_primary_search_end_ending_handle_found:
+5930 680084b4 fetch 1 ,mem_le_search_res 
+5931 c0005921 beq le_find_by_type_val_res_not_found ,le_send_att_find_primary_search_loop1 
+5932 7004b402 jam le_find_by_type_val_res_found_ending_handle ,mem_le_search_res 
+5933 68090aa2 fetcht 2 ,mem_temp 
+5934 184085ff increase -1 ,temp 
+5935 600904a0 storet 2 ,mem_le_cur_handle_end 
+
+le_send_att_find_primary_search_end:
+5936 da200005 arg 5 ,rega 
+5937 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+5938 58000007 setarg attop_find_by_type_value_response 
+5939 e0a08000 istore 1 ,contw 
+593a 6801049e fetch 2 ,mem_le_cur_handle_start 
+593b e0a10000 istore 2 ,contw 
+593c 680104a0 fetch 2 ,mem_le_cur_handle_end 
+593d e0a10000 istore 2 ,contw 
+593e 20600000 rtn 
+
+le_parse_att_read_by_type_request:
+593f 20405ab1 call le_get_search_handle_start_end_common 
+5940 204056df call le_get_search_att_uuid 
+5941 20205942 branch le_send_att_read_by_type_response 
+
+le_send_att_read_by_type_response:
+5942 6809445a fetcht 2 ,mem_le_search_handle_start 
+5943 60090aa2 storet 2 ,mem_temp 
+5944 20405756 call le_init_attlist_search 
+5945 2040576d call le_att_get_handle_ptr2 
+5946 18c08dfe increase -2 ,contr 
+5947 18c27e00 copy contr ,pdata 
+5948 6001049c store 2 ,mem_le_cur_attlist_start_ptr 
+5949 68094472 fetcht 2 ,mem_le_search_uuid 
+594a 58002a00 setarg uuid_chrctr_device_name 
+594b 98467c00 isub temp ,null 
+594c 2022d9a8 branch le_send_att_read_by_type_res_device_name ,zero 
+594d 58002803 setarg uuid_gatt_characteristic 
+594e 98467c00 isub temp ,null 
+594f 2422d990 nbranch le_send_att_read_by_type_res_not_characteristic ,zero 
+5950 d9600002 arg 2 ,timeup 
+
+le_send_att_read_by_type_response_loop:
+5951 20405a88 call le_att_check_handle_end 
+5952 2421596d nbranch le_send_att_read_by_type_response_end ,positive 
+5953 68090aa2 fetcht 2 ,mem_temp 
+5954 2040578a call le_att_get_handle_info_from_ptr 
+5955 c000d96d beq 1 ,le_send_att_read_by_type_response_end 
+5956 20405a94 call le_att_same_uuid 
+5957 2422d96b nbranch le_send_att_read_by_type_response_next_handle ,zero 
+5958 2434596f nbranch le_send_att_read_by_type_res_found_next ,user 
+5959 78547c00 disable user 
+595a da200014 arg 20 ,rega 
+595b 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+595c 58000009 setarg attop_read_by_type_response 
+595d e0a08000 istore 1 ,contw 
+595e 18a26000 copy contw ,alarm 
+595f 18a08a01 increase 1 ,contw 
+5960 2040597d call le_send_att_read_by_type_write_properties 
+5961 20405a84 call le_att_next_handle 
+5962 2040578a call le_att_get_handle_info_from_ptr 
+5963 20405984 call le_send_att_read_by_type_write_uuid 
+5964 680084a2 fetch 1 ,mem_le_cur_uuid_length 
+5965 1fe0fe05 increase 5 ,pdata 
+5966 e6008000 istore 1 ,alarm 
+5967 680084a2 fetch 1 ,mem_le_cur_uuid_length 
+5968 c008596d beq 16 ,le_send_att_read_by_type_response_end 
+5969 196097ff increase -1 ,timeup 
+596a 2022d96d branch le_send_att_read_by_type_response_end ,zero 
+
+le_send_att_read_by_type_response_next_handle:
+596b 20405a84 call le_att_next_handle 
+596c 20205951 branch le_send_att_read_by_type_response_loop 
+
+le_send_att_read_by_type_response_end:
+596d 20345a76 branch le_send_att_error_response_notfound ,user 
+596e 20205aa5 branch le_send_auto_len_by_mem 
+
+le_send_att_read_by_type_res_found_next:
+596f 20405a97 call le_store_att_record 
+5970 20405a84 call le_att_next_handle 
+5971 2040578a call le_att_get_handle_info_from_ptr 
+5972 680084a2 fetch 1 ,mem_le_cur_uuid_length 
+5973 c008596d beq 16 ,le_send_att_read_by_type_response_end 
+5974 20407e9c call get_contw 
+5975 68010aa2 fetch 2 ,mem_temp 
+5976 1fe0ffff increase -1 ,pdata 
+5977 e0a10000 istore 2 ,contw 
+5978 20405aa1 call le_write_att_record_common 
+5979 20405984 call le_send_att_read_by_type_write_uuid 
+597a 196097ff increase -1 ,timeup 
+597b 2022d96d branch le_send_att_read_by_type_response_end ,zero 
+597c 2020596b branch le_send_att_read_by_type_response_next_handle 
+
+le_send_att_read_by_type_write_properties:
+597d 68010aa2 fetch 2 ,mem_temp 
+597e e0a10000 istore 2 ,contw 
+597f 680084b3 fetch 1 ,mem_le_curr_att_len 
+5980 1fe27200 copy pdata ,loopcnt 
+5981 20407e9f call get_contr 
+5982 20407ef4 call memcpy_fast 
+5983 20207ea2 branch store_contw 
+
+le_send_att_read_by_type_write_uuid:
+5984 20407e9c call get_contw 
+5985 68010aa2 fetch 2 ,mem_temp 
+5986 e0a10000 istore 2 ,contw 
+5987 20407ea2 call store_contw 
+5988 680084a2 fetch 1 ,mem_le_cur_uuid_length 
+5989 1fe27200 copy pdata ,loopcnt 
+598a 20407e9c call get_contw 
+598b 20407e9f call get_contr 
+598c 9f260c00 isub loopcnt ,contr 
+598d 18c08dff increase -1 ,contr 
+598e 20407ef4 call memcpy_fast 
+598f 20207ea2 branch store_contw 
+
+le_send_att_read_by_type_res_not_characteristic:
+5990 6809445a fetcht 2 ,mem_le_search_handle_start 
+5991 60090aa2 storet 2 ,mem_temp 
+
+le_send_att_read_by_type_res_not_char_loop:
+5992 20405a88 call le_att_check_handle_end 
+5993 24215a76 nbranch le_send_att_error_response_notfound ,positive 
+5994 2040578a call le_att_get_handle_info_from_ptr 
+5995 c000da76 beq 1 ,le_send_att_error_response_notfound 
+5996 20405a94 call le_att_same_uuid 
+5997 2422d9a6 nbranch le_send_att_read_by_type_res_not_char_next ,zero 
+
+le_send_att_read_by_type_res_not_char_common:
+5998 da200014 arg 20 ,rega 
+5999 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+599a 58000009 setarg attop_read_by_type_response 
+599b e0a08000 istore 1 ,contw 
+599c 680084b3 fetch 1 ,mem_le_curr_att_len 
+599d 1fe27200 copy pdata ,loopcnt 
+599e 1fe0fe02 increase 2 ,pdata 
+599f e0a08000 istore 1 ,contw 
+59a0 68010aa2 fetch 2 ,mem_temp 
+59a1 e0a10000 istore 2 ,contw 
+59a2 20407e9f call get_contr 
+59a3 20407ef4 call memcpy_fast 
+59a4 20407ea2 call store_contw 
+59a5 20205aa5 branch le_send_auto_len_by_mem 
+
+le_send_att_read_by_type_res_not_char_next:
+59a6 20405a84 call le_att_next_handle 
+59a7 20205992 branch le_send_att_read_by_type_res_not_char_loop 
+
+le_send_att_read_by_type_res_device_name:
+59a8 d8402a00 arg uuid_chrctr_device_name ,temp 
+59a9 2040577c call le_att_get_short_uuid_ptr 
+59aa 207a0000 rtn blank 
+59ab 18c08dfb increase -5 ,contr 
+59ac e8c10000 ifetch 2 ,contr 
+59ad 60010aa2 store 2 ,mem_temp 
+59ae da200014 arg 20 ,rega 
+59af 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+59b0 58000009 setarg attop_read_by_type_response 
+59b1 e0a08000 istore 1 ,contw 
+59b2 6800c3af fetch 1 ,mem_le_name_len 
+59b3 1fe27200 copy pdata ,loopcnt 
+59b4 1fe0fe02 increase 2 ,pdata 
+59b5 e0a08000 istore 1 ,contw 
+59b6 68010aa2 fetch 2 ,mem_temp 
+59b7 e0a10000 istore 2 ,contw 
+59b8 d8c043b0 arg mem_le_name ,contr 
+59b9 20407ef4 call memcpy_fast 
+59ba 20407ea2 call store_contw 
+59bb 20205aa5 branch le_send_auto_len_by_mem 
+
+le_parse_att_read_request:
+59bc 68090478 fetcht 2 ,mem_le_att_handle 
+59bd 6800c4e9 fetch 1 ,mem_le_configuration 
+59be c281d9dd bbit1 bit_ble_read_auth ,le_send_att_read_response_check_auth 
+
+le_send_att_read_response:
+59bf 2040576a call le_att_get_handle_ptr 
+59c0 203a5a76 branch le_send_att_error_response_notfound ,blank 
+59c1 18c08dfe increase -2 ,contr 
+59c2 e8c10000 ifetch 2 ,contr 
+59c3 d8402a00 arg uuid_chrctr_device_name ,temp 
+59c4 98467c00 isub temp ,null 
+59c5 2022d9d3 branch le_send_device_name ,zero 
+59c6 e8c08000 ifetch 1 ,contr 
+59c7 1fe67c16 sub pdata ,22 ,null 
+59c8 202159ca branch le_send_att_read_response_less ,positive 
+59c9 18007e16 force 22 ,pdata 
+
+le_send_att_read_response_less:
+59ca 1fe22600 copy pdata ,regc 
+59cb 20407ea5 call store_contr 
+59cc 1a60a201 add regc ,1 ,rega 
+59cd 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+59ce 5800000b setarg attop_read_response 
+59cf e0a08000 istore 1 ,contw 
+59d0 1a627200 copy regc ,loopcnt 
+59d1 20407e9f call get_contr 
+59d2 20207f01 branch memcpy 
+
+le_send_device_name:
+59d3 20407ea5 call store_contr 
+59d4 6800c3af fetch 1 ,mem_le_name_len 
+59d5 1fe0a201 add pdata ,1 ,rega 
+59d6 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+59d7 5800000b setarg attop_read_response 
+59d8 e0a08000 istore 1 ,contw 
+59d9 6800c3af fetch 1 ,mem_le_name_len 
+59da 1fe27200 copy pdata ,loopcnt 
+59db d8c043b0 arg mem_le_name ,contr 
+59dc 20207f01 branch memcpy 
+
+le_send_att_read_response_check_auth:
+59dd 680144fa fetch 2 ,mem_le_pairing_handle 
+59de 98467c00 isub temp ,null 
+59df 2422d9bf nbranch le_send_att_read_response ,zero 
+59e0 20405a42 call le_check_encrypt_state 
+59e1 243459bf nbranch le_send_att_read_response ,user 
+59e2 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code 
+59e3 20205a77 branch le_send_att_error_response 
+
+le_parse_att_read_blob_request:
+59e4 e8c10000 ifetch 2 ,contr 
+59e5 6001445e store 2 ,mem_le_att_offset 
+
+le_send_att_read_blob_response:
+59e6 da200014 arg 20 ,rega 
+59e7 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+59e8 5800000d setarg attop_read_blob_response 
+59e9 e0a08000 istore 1 ,contw 
+59ea 6801445e fetch 2 ,mem_le_att_offset 
+59eb 98002200 iforce rega 
+59ec 68090478 fetcht 2 ,mem_le_att_handle 
+59ed 2040576a call le_att_get_handle_ptr 
+59ee 203a5a76 branch le_send_att_error_response_notfound ,blank 
+59ef e8c08000 ifetch 1 ,contr 
+59f0 9a267200 isub rega ,loopcnt 
+59f1 24215a76 nbranch le_send_att_error_response_notfound ,positive 
+59f2 1f267c16 sub loopcnt ,22 ,null 
+59f3 202159f5 branch le_send_att_read_blob_response_less ,positive 
+59f4 18007216 force 22 ,loopcnt 
+
+le_send_att_read_blob_response_less:
+59f5 1a227e00 deposit rega 
+59f6 98c08c00 iadd contr ,contr 
+59f7 20407ef4 call memcpy_fast 
+59f8 20407ea2 call store_contw 
+59f9 20205aa5 branch le_send_auto_len_by_mem 
+
+le_parse_att_read_by_group_type_request:
+59fa 20405ab1 call le_get_search_handle_start_end_common 
+59fb 204056d7 call le_get_search_att_type 
+59fc 202059fd branch le_send_att_read_by_group_type_response 
+
+le_send_att_read_by_group_type_response:
+59fd d9600002 arg 2 ,timeup 
+59fe 6809445a fetcht 2 ,mem_le_search_handle_start 
+59ff 60090aa2 storet 2 ,mem_temp 
+5a00 20405756 call le_init_attlist_search 
+5a01 2040576d call le_att_get_handle_ptr2 
+5a02 18c08dfe increase -2 ,contr 
+5a03 18c27e00 copy contr ,pdata 
+5a04 6001049c store 2 ,mem_le_cur_attlist_start_ptr 
+
+le_send_att_read_by_group_type_response_loop:
+5a05 20405a88 call le_att_check_handle_end 
+5a06 24215a25 nbranch le_send_att_read_by_group_type_end0 ,positive 
+5a07 68090aa2 fetcht 2 ,mem_temp 
+5a08 2040578a call le_att_get_handle_info_from_ptr 
+5a09 c000da28 beq 1 ,le_send_att_read_by_group_type_end1 
+5a0a 20405a8c call le_att_same_type 
+5a0b 2422da23 nbranch le_send_att_read_by_group_type_next_handle ,zero 
+5a0c 19627e00 copy timeup ,pdata 
+5a0d c0005a28 beq 0 ,le_send_att_read_by_group_type_end1 
+5a0e 24345a19 nbranch le_send_att_read_by_group_type_store_write_record ,user 
+5a0f 78547c00 disable user 
+5a10 da200014 arg 20 ,rega 
+5a11 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+5a12 58000011 setarg attop_read_by_group_type_response 
+5a13 e0a08000 istore 1 ,contw 
+5a14 680084b3 fetch 1 ,mem_le_curr_att_len 
+5a15 1fe0fe04 increase 4 ,pdata 
+5a16 e0a08000 istore 1 ,contw 
+5a17 20407ea2 call store_contw 
+5a18 20205a1f branch le_send_att_read_by_group_type_store_record 
+
+le_send_att_read_by_group_type_store_write_record:
+5a19 680084b3 fetch 1 ,mem_le_curr_att_len 
+5a1a c0085a28 beq 16 ,le_send_att_read_by_group_type_end1 
+5a1b 68010aa2 fetch 2 ,mem_temp 
+5a1c 1fe0ffff increase -1 ,pdata 
+5a1d 600104a0 store 2 ,mem_le_cur_handle_end 
+5a1e 20405a9c call le_write_att_record 
+
+le_send_att_read_by_group_type_store_record:
+5a1f 68010aa2 fetch 2 ,mem_temp 
+5a20 6001049e store 2 ,mem_le_cur_handle_start 
+5a21 20405a97 call le_store_att_record 
+5a22 196097ff increase -1 ,timeup 
+
+le_send_att_read_by_group_type_next_handle:
+5a23 20405a84 call le_att_next_handle 
+5a24 20205a05 branch le_send_att_read_by_group_type_response_loop 
+
+le_send_att_read_by_group_type_end0:
+5a25 68010aa2 fetch 2 ,mem_temp 
+5a26 600104a0 store 2 ,mem_le_cur_handle_end 
+5a27 20205a2c branch le_send_att_read_by_group_type_end_common 
+
+le_send_att_read_by_group_type_end1:
+5a28 68010aa2 fetch 2 ,mem_temp 
+5a29 1fe0ffff increase -1 ,pdata 
+5a2a 600104a0 store 2 ,mem_le_cur_handle_end 
+5a2b 20205a2c branch le_send_att_read_by_group_type_end_common 
+
+le_send_att_read_by_group_type_end_common:
+5a2c 20345a76 branch le_send_att_error_response_notfound ,user 
+5a2d 20405a9c call le_write_att_record 
+5a2e 20205aa5 branch le_send_auto_len_by_mem 
+
+le_parse_att_write_request:
+5a2f 18c22200 copy contr ,rega 
+5a30 680144fc fetch 2 ,mem_le_l2cap_size 
+5a31 1fe0a5fd add pdata ,-3 ,regb 
+5a32 204056e2 call le_writeatt_cb 
+
+le_send_att_write_response_check_auth:
+5a33 6800c4e9 fetch 1 ,mem_le_configuration 
+5a34 c3025a3d bbit0 bit_ble_write_auth ,le_send_att_write_response 
+5a35 68090478 fetcht 2 ,mem_le_att_handle 
+5a36 680144fa fetch 2 ,mem_le_pairing_handle 
+5a37 98467c00 isub temp ,null 
+5a38 2422da3d nbranch le_send_att_write_response ,zero 
+5a39 20405a42 call le_check_encrypt_state 
+5a3a 24345a3d nbranch le_send_att_write_response ,user 
+5a3b 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code 
+5a3c 20205a77 branch le_send_att_error_response 
+
+le_send_att_write_response:
+5a3d 18002201 force 1 ,rega 
+5a3e 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+5a3f 58000013 setarg attop_write_response 
+5a40 e0a08000 istore 1 ,contw 
+5a41 20600000 rtn 
+
+le_check_encrypt_state:
+5a42 20407fe9 call disable_user 
+5a43 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5a44 c1000000 rtneq le_pairing_mode_none 
+5a45 6800c040 fetch 1 ,mem_context 
+5a46 c3820000 rtnbit1 lestate_encryption 
+5a47 20207fe7 branch enable_user 
+
+le_parse_att_prepare_write_request:
+5a48 18c0a202 add contr ,2 ,rega 
+5a49 680144fc fetch 2 ,mem_le_l2cap_size 
+5a4a 1fe0a5fb add pdata ,-5 ,regb 
+5a4b 204056e2 call le_writeatt_cb 
+5a4c 20205a4d branch le_send_att_prepare_write_response 
+
+le_send_att_prepare_write_response:
+5a4d 680144fc fetch 2 ,mem_le_l2cap_size 
+5a4e 1fe22200 copy pdata ,rega 
+5a4f 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+5a50 58000017 setarg attop_prepare_write_response 
+5a51 e0a08000 istore 1 ,contw 
+5a52 68010478 fetch 2 ,mem_le_att_handle 
+5a53 e0a10000 istore 2 ,contw 
+5a54 680144fc fetch 2 ,mem_le_l2cap_size 
+5a55 1fe0f3fb add pdata ,-5 ,loopcnt 
+5a56 6801450d fetch 2 ,mem_le_payload_ptr 
+5a57 1fe08c07 add pdata ,7 ,contr 
+5a58 e8c10000 ifetch 2 ,contr 
+5a59 e0a10000 istore 2 ,contw 
+5a5a 20207ef4 branch memcpy_fast 
+
+le_parse_att_execute_write_request:
+
+le_send_att_execute_write_response:
+5a5b 18002201 force 1 ,rega 
+5a5c 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+5a5d 58000019 setarg attop_execute_write_response 
+5a5e e0a08000 istore 1 ,contw 
+5a5f 20600000 rtn 
+
+le_parse_att_write_command:
+5a60 18c22200 copy contr ,rega 
+5a61 680144fc fetch 2 ,mem_le_l2cap_size 
+5a62 1fe0a5fd add pdata ,-3 ,regb 
+5a63 202056e2 branch le_writeatt_cb 
+
+le_att_malloc_tx_notify:
+5a64 18422600 copy temp ,regc 
+5a65 1a20a203 increase 3 ,rega 
+5a66 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+5a67 1a20a3fd increase -3 ,rega 
+5a68 5800001b setarg attop_handle_value_notification 
+5a69 e0a08000 istore 1 ,contw 
+5a6a 1a620400 copy regc ,temp 
+5a6b e0a90000 istoret 2 ,contw 
+5a6c 20600000 rtn 
+
+le_att_malloc_tx_indication:
+5a6d 18422600 copy temp ,regc 
+5a6e 1a20a203 increase 3 ,rega 
+5a6f 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+5a70 1a20a3fd increase -3 ,rega 
+5a71 5800001d setarg attop_handle_value_indication 
+5a72 e0a08000 istore 1 ,contw 
+5a73 1a620400 copy regc ,temp 
+5a74 e0a90000 istoret 2 ,contw 
+5a75 20600000 rtn 
+
+le_send_att_error_response_notfound:
+5a76 70047a0a jam att_err_attribute_not_found ,mem_le_err_code 
+
+le_send_att_error_response:
+5a77 18002205 force 5 ,rega 
+5a78 20405a82 call le_fifo_malloc_tx_l2cap_gatt 
+5a79 58000001 setarg attop_error_response 
+5a7a e0a08000 istore 1 ,contw 
+5a7b 68008477 fetch 1 ,mem_le_att_opcode 
+5a7c e0a08000 istore 1 ,contw 
+5a7d 68010478 fetch 2 ,mem_le_att_handle 
+5a7e e0a10000 istore 2 ,contw 
+5a7f 6800847a fetch 1 ,mem_le_err_code 
+5a80 e0a08000 istore 1 ,contw 
+5a81 20600000 rtn 
+
+le_fifo_malloc_tx_l2cap_gatt:
+5a82 18002404 force le_l2cap_cid_att ,regb 
+5a83 20205847 branch le_fifo_malloc_tx_l2cap 
+
+le_att_next_handle:
+5a84 68090aa2 fetcht 2 ,mem_temp 
+5a85 18408401 increase 1 ,temp 
+5a86 60090aa2 storet 2 ,mem_temp 
+5a87 20600000 rtn 
+
+le_att_check_handle_end:
+5a88 68090aa2 fetcht 2 ,mem_temp 
+5a89 6801445c fetch 2 ,mem_le_search_handle_end 
+5a8a 98467c00 isub temp ,null 
+5a8b 20600000 rtn 
+
+le_att_same_type:
+5a8c 6808c45e fetcht 1 ,mem_le_search_att_type_length 
+5a8d da20445f arg mem_le_search_att_type ,rega 
+
+le_att_check_same_common:
+5a8e 680084a2 fetch 1 ,mem_le_cur_uuid_length 
+5a8f 1fe27200 copy pdata ,loopcnt 
+5a90 98467c00 isub temp ,null 
+5a91 24628000 nrtn zero 
+5a92 da4004a3 arg mem_le_cur_uuid ,regb 
+5a93 20207f88 branch string_compare 
+
+le_att_same_uuid:
+5a94 6808c471 fetcht 1 ,mem_le_search_uuid_length 
+5a95 da204472 arg mem_le_search_uuid ,rega 
+5a96 20205a8e branch le_att_check_same_common 
+
+le_store_att_record:
+5a97 680084b3 fetch 1 ,mem_le_curr_att_len 
+5a98 60008101 store 1 ,mem_tmp_buffer 
+5a99 1fe27200 copy pdata ,loopcnt 
+5a9a 20407e9f call get_contr 
+5a9b 20207ef4 branch memcpy_fast 
+
+le_write_att_record:
+5a9c 20407e9c call get_contw 
+5a9d 6801049e fetch 2 ,mem_le_cur_handle_start 
+5a9e e0a10000 istore 2 ,contw 
+5a9f 680104a0 fetch 2 ,mem_le_cur_handle_end 
+5aa0 e0a10000 istore 2 ,contw 
+
+le_write_att_record_common:
+5aa1 68008101 fetch 1 ,mem_tmp_buffer 
+5aa2 1fe27200 copy pdata ,loopcnt 
+5aa3 20407ef4 call memcpy_fast 
+5aa4 20207ea2 branch store_contw 
+
+le_send_auto_len_by_mem:
+5aa5 20407e9c call get_contw 
+5aa6 2040588a call le_fifo_get_last_att_ptr 
+5aa7 18a27e00 copy contw ,pdata 
+5aa8 98c62200 isub contr ,rega 
+5aa9 2040588d call le_fifo_get_last_l2cap_ptr 
+5aaa 1a227e00 copy rega ,pdata 
+5aab e0c10000 istore 2 ,contr 
+5aac 1a20a204 increase 4 ,rega 
+5aad 20405879 call le_fifo_get_last_tx_ptr 
+5aae 1a227e00 copy rega ,pdata 
+5aaf e0c08000 istore 1 ,contr 
+5ab0 20600000 rtn 
+
+le_get_search_handle_start_end_common:
+5ab1 1fecfe00 rshift8 pdata ,pdata 
+5ab2 6001445a store 2 ,mem_le_search_handle_start 
+5ab3 e8c10000 ifetch 2 ,contr 
+5ab4 6001445c store 2 ,mem_le_search_handle_end 
+5ab5 20600000 rtn 
+
+le_parse_signaling:
+5ab6 e8c08000 ifetch 1 ,contr 
+5ab7 e8c88000 ifetcht 1 ,contr 
+5ab8 e8c90000 ifetcht 2 ,contr 
+5ab9 c009dabb beq l2cap_connection_parameter_update_response ,le_l2cap_parse_conn_parameter_update_rsp 
+5aba 20600000 rtn 
+
+le_l2cap_parse_conn_parameter_update_rsp:
+5abb e8c10000 ifetch 2 ,contr 
+5abc 60014509 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result 
+5abd 700a9940 jam bt_evt_le_parse_conn_papa_update_rsp ,mem_fifo_temp 
+5abe 20207d86 branch ui_ipc_send_event 
+
+le_l2cap_tx_update_req:
+5abf da20000c arg 0x0c ,rega 
+5ac0 da600012 arg l2cap_connection_parameter_update_request ,regc 
+5ac1 20405ac7 call le_fifo_malloc_tx_l2cap_signaling 
+5ac2 58000008 setarg 0x08 
+5ac3 e0a10000 istore 2 ,contw 
+5ac4 68044496 fetch 8 ,mem_le_interval_min 
+5ac5 e0a40000 istore 8 ,contw 
+5ac6 20600000 rtn 
+
+le_fifo_malloc_tx_l2cap_signaling:
+5ac7 20405acf call le_l2cap_update_signaling_identifier 
+5ac8 da400005 arg le_l2cap_cid_signal ,regb 
+5ac9 20405847 call le_fifo_malloc_tx_l2cap 
+5aca 1a627e00 copy regc ,pdata 
+5acb e0a08000 istore 1 ,contw 
+5acc 6800c508 fetch 1 ,mem_le_signaling_identifier 
+5acd e0a08000 istore 1 ,contw 
+5ace 20600000 rtn 
+
+le_l2cap_update_signaling_identifier:
+5acf 6800c508 fetch 1 ,mem_le_signaling_identifier 
+5ad0 1fe0fe01 pincrease 1 
+5ad1 6000c508 store 1 ,mem_le_signaling_identifier 
+5ad2 c1800000 rtnne 0 
+
+le_l2cap_reset_signaling_identifier:
+5ad3 70450801 jam 1 ,mem_le_signaling_identifier 
+5ad4 20600000 rtn 
+
+le_pairing_mode_init:
+5ad5 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5ad6 c0005ae4 beq le_pairing_mode_none ,le_set_no_pairing 
+5ad7 c000dae7 beq le_pairing_mode_lagacy_justwork ,le_set_pairing_mode_lagacy_just_work 
+5ad8 c0015ae9 beq le_pairing_mode_lagacy_passkey ,le_set_pairing_mode_lagacy_passkey 
+5ad9 c040dadd beq le_pairing_mode_secure_connect_justwork ,le_set_pairing_mode_secure_justwork 
+5ada c0415adf beq le_pairing_mode_secure_connect_numeric ,le_set_pairing_mode_secure_numeric 
+5adb c041dae2 beq le_pairing_mode_secure_connect_passkey ,le_set_pairing_mode_secure_passkey 
+5adc 20600000 rtn 
+
+le_set_pairing_mode_secure_justwork:
+5add 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+5ade 20205ae5 branch le_set_noinputnooutput 
+
+le_set_pairing_mode_secure_numeric:
+5adf 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+5ae0 70445401 jam flag_iocap_displayyesno ,mem_le_pres_iocap 
+5ae1 20600000 rtn 
+
+le_set_pairing_mode_secure_passkey:
+5ae2 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth 
+5ae3 20205aea branch le_set_displayonly 
+
+le_set_no_pairing:
+5ae4 70445600 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth 
+
+le_set_noinputnooutput:
+5ae5 70445403 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap 
+5ae6 20600000 rtn 
+
+le_set_pairing_mode_lagacy_just_work:
+5ae7 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth 
+5ae8 20205ae5 branch le_set_noinputnooutput 
+
+le_set_pairing_mode_lagacy_passkey:
+5ae9 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth 
+
+le_set_displayonly:
+5aea 70445400 jam flag_iocap_displayonly ,mem_le_pres_iocap 
+5aeb 20600000 rtn 
+
+le_secure_connection_enable:
+5aec 6800c456 fetch 1 ,mem_le_pres_auth 
+5aed 79207e03 set1 le_auth_secure_connection_pairing_bit ,pdata 
+5aee 6000c456 store 1 ,mem_le_pres_auth 
+5aef 20600000 rtn 
+
+le_secure_connection_disable:
+5af0 6800c456 fetch 1 ,mem_le_pres_auth 
+5af1 793ffe03 set0 le_auth_secure_connection_pairing_bit ,pdata 
+5af2 6000c456 store 1 ,mem_le_pres_auth 
+5af3 20600000 rtn 
+
+le_parse_smp:
+5af4 e8c08000 ifetch 1 ,contr 
+5af5 c000db09 beq smp_pairing_request ,le_parse_smp_pairing_request 
+5af6 c001db30 beq smp_pairing_confirm ,le_parse_smp_pairing_confirm 
+5af7 c0025b4d beq smp_pairing_random ,le_parse_smp_pairing_random 
+5af8 c002db5a beq smp_pairing_failed ,le_parse_smp_pairing_failed 
+5af9 c0035b80 beq smp_encryption_information ,le_parse_smp_encryption_information 
+5afa c003dbc4 beq smp_master_identification ,le_parse_smp_master_identification 
+5afb c0045baf beq smp_identity_information ,le_parse_smp_identity_information 
+5afc c004dbc0 beq smp_identity_address_information ,le_parse_smp_identity_address_information 
+5afd c0055bc4 beq smp_signing_information ,le_parse_smp_signing_information 
+5afe c005dbc4 beq smp_security_request ,le_parse_smp_security_request 
+5aff c0065bc5 beq smp_pairing_public_key ,le_parse_smp_public_key 
+5b00 c006dbca beq smp_pairing_dhkey_check ,le_parse_smp_dhkey_check 
+5b01 20600000 rtn 
+
+le_send_smp_security_request:
+5b02 18002202 force 2 ,rega 
+5b03 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b04 5800000b setarg smp_security_request 
+5b05 e0a08000 istore 1 ,contw 
+5b06 6800c456 fetch 1 ,mem_le_pres_auth 
+5b07 e0a08000 istore 1 ,contw 
+5b08 20600000 rtn 
+
+le_parse_smp_pairing_request:
+5b09 6000c44c store 1 ,mem_le_preq 
+5b0a e8c30000 ifetch 6 ,contr 
+5b0b e0a30000 istore 6 ,contw 
+5b0c 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5b0d c0005b5f beq le_pairing_mode_none ,le_smp_pairing_fail_reason_not_support_pairing 
+5b0e 20405b2b call le_send_smp_pairing_response 
+5b0f 20405b26 call le_check_master_support_secure_connect 
+5b10 7044c403 jam flag_le_pairing_rcv_pairing_req ,mem_le_pairing_state 
+5b11 6800c44d fetch 1 ,mem_le_preq_iocap 
+5b12 c0005b18 beq flag_iocap_displayonly ,le_set_tk_0 
+5b13 c000db18 beq flag_iocap_displayyesno ,le_set_tk_0 
+5b14 c001db18 beq flag_iocap_noinputnooutput ,le_set_tk_0 
+5b15 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5b16 c0015b1b beq le_pairing_mode_lagacy_passkey ,le_parse_smp_pairing_req_passkey 
+5b17 c1418000 rtneq le_pairing_mode_secure_connect_passkey 
+
+le_set_tk_0:
+5b18 dfe00000 arg 0 ,pdata 
+5b19 600244c7 store 4 ,mem_le_tk 
+5b1a 20600000 rtn 
+
+le_parse_smp_pairing_req_passkey:
+5b1b 6800c4e9 fetch 1 ,mem_le_configuration 
+5b1c c2805b24 bbit1 bit_ble_passkey_fixed_key ,le_parse_smp_pairing_req_fixed_passkey 
+
+le_genernate_tk:
+5b1d da2044c7 arg mem_le_tk ,rega 
+5b1e 1a220a00 copy rega ,contw 
+5b1f df200003 arg 3 ,loopcnt 
+5b20 2040630d call generate_random_loop 
+5b21 680144c9 fetch 2 ,mem_le_tk + 2 
+5b22 1fe17e07 and_into 0x7 ,pdata 
+5b23 600144c9 store 2 ,mem_le_tk + 2 
+
+le_parse_smp_pairing_req_fixed_passkey:
+5b24 700a9934 jam bt_evt_le_tk_generate ,mem_fifo_temp 
+5b25 20207d86 branch ui_ipc_send_event 
+
+le_check_master_support_secure_connect:
+5b26 6800c44f fetch 1 ,mem_le_preq_auth 
+5b27 c3818000 rtnbit1 le_auth_secure_connection_pairing_bit 
+5b28 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5b29 c4038000 rtnbit0 le_pairing_mode_secure_connect_bit 
+5b2a 20203402 branch app_ble_disconnect 
+
+le_send_smp_pairing_response:
+5b2b 18002207 force 7 ,rega 
+5b2c 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b2d 6803c453 fetch 7 ,mem_le_pres 
+5b2e e0a38000 istore 7 ,contw 
+5b2f 20600000 rtn 
+
+le_parse_smp_pairing_confirm:
+5b30 18c22200 copy contr ,rega 
+5b31 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5b32 c041db37 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_confirm_secure_passkey 
+5b33 1a220c00 copy rega ,contr 
+5b34 d8a0442a arg mem_le_rconfirm ,contw 
+5b35 20407ebf call memcpy16 
+5b36 20205b3d branch le_send_smp_pairing_confirm 
+
+le_parse_smp_pairing_confirm_secure_passkey:
+5b37 1a220c00 copy rega ,contr 
+5b38 d8a0442a arg mem_le_rconfirm ,contw 
+5b39 20407ebf call memcpy16 
+5b3a 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+5b3b 7044c108 jam le_sc_stat_passkey_wait_confirm ,mem_le_secure_connect_state 
+5b3c 20600000 rtn 
+
+le_send_smp_pairing_confirm:
+5b3d 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5b3e c283db45 bbit1 le_pairing_mode_secure_connect_bit ,le_send_smp_pairing_confirm_sc 
+5b3f 2040739c call generate_confirm 
+5b40 18002211 force 17 ,rega 
+5b41 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b42 58000003 setarg smp_pairing_confirm 
+5b43 e0a08000 istore 1 ,contw 
+5b44 20207497 branch store_aes_result 
+
+le_send_smp_pairing_confirm_sc:
+5b45 d8a0443a arg mem_le_srand ,contw 
+5b46 2040630c call generate_random 
+5b47 204071c5 call function_f4_cb 
+5b48 18002211 force 17 ,rega 
+5b49 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b4a 58000003 setarg smp_pairing_confirm 
+5b4b e0a08000 istore 1 ,contw 
+5b4c 20207201 branch load_inverse_result 
+
+le_parse_smp_pairing_random:
+5b4d 18c22200 copy contr ,rega 
+5b4e 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5b4f c283db61 bbit1 le_pairing_mode_secure_connect_bit ,le_parse_smp_pairing_random_sc 
+5b50 1a220c00 copy rega ,contr 
+5b51 20407394 call authenticate_rconfirm 
+5b52 2022db75 branch le_parse_smp_pairing_random_success ,zero 
+
+le_send_pairing_confirm_value_failed:
+5b53 70047b04 jam pairing_failed_confirm_value_failed ,mem_le_ll_pairing_fail_reason 
+
+le_send_pairing_failed:
+5b54 18002202 force 2 ,rega 
+5b55 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b56 58000005 setarg smp_pairing_failed 
+5b57 e0a08000 istore 1 ,contw 
+5b58 6800847b fetch 1 ,mem_le_ll_pairing_fail_reason 
+5b59 e0a08000 istore 1 ,contw 
+
+le_parse_smp_pairing_failed:
+5b5a 18000e0a force smp_pairing_timer ,queue 
+5b5b 20407f07 call timer_stop 
+5b5c 7044c400 jam flag_le_pairing_null ,mem_le_pairing_state 
+5b5d 700a9930 jam bt_evt_le_pairing_fail ,mem_fifo_temp 
+5b5e 20207d86 branch ui_ipc_send_event 
+
+le_smp_pairing_fail_reason_not_support_pairing:
+5b5f 70047b05 jam pairing_failed_pairing_not_supported ,mem_le_ll_pairing_fail_reason 
+5b60 20205b54 branch le_send_pairing_failed 
+
+le_parse_smp_pairing_random_sc:
+5b61 d8a0042f arg mem_le_mrand ,contw 
+5b62 1a220c00 copy rega ,contr 
+5b63 20407ebf call memcpy16 
+5b64 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5b65 c041db6c beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_random_sc_passkey 
+5b66 2040714f call function_g2 
+5b67 20405b7a call le_send_smp_pairing_random 
+5b68 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5b69 c1c10000 rtnne le_pairing_mode_secure_connect_numeric 
+5b6a 700a993b jam bt_evt_le_gkey_generate ,mem_fifo_temp 
+5b6b 20207d86 branch ui_ipc_send_event 
+
+le_parse_smp_pairing_random_sc_passkey:
+5b6c 204071ba call function_f4_ca 
+5b6d d8a00af2 arg mem_aes_cmac_temp ,contw 
+5b6e 20407201 call load_inverse_result 
+5b6f da200af2 arg mem_aes_cmac_temp ,rega 
+5b70 da40442a arg mem_le_rconfirm ,regb 
+5b71 df200010 arg 16 ,loopcnt 
+5b72 20407f88 call string_compare 
+5b73 2422db53 nbranch le_send_pairing_confirm_value_failed ,zero 
+5b74 20205b7a branch le_send_smp_pairing_random 
+
+le_parse_smp_pairing_random_success:
+5b75 20407390 call generate_stk 
+5b76 700a9931 jam bt_evt_le_pairing_success ,mem_fifo_temp 
+5b77 20407d86 call ui_ipc_send_event 
+5b78 70442901 jam 1 ,mem_ltk_exists 
+5b79 7044c405 jam flag_le_pairing_after_auth ,mem_le_pairing_state 
+
+le_send_smp_pairing_random:
+5b7a 18002211 force 17 ,rega 
+5b7b 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b7c 58000004 setarg smp_pairing_random 
+5b7d e0a08000 istore 1 ,contw 
+5b7e d8c0443a arg mem_le_srand ,contr 
+5b7f 20207ebf branch memcpy16 
+
+le_parse_smp_encryption_information:
+5b80 d8a0041f arg mem_le_peer_ltk ,contw 
+5b81 20207ebf branch memcpy16 
+
+le_send_smp_encryption_information:
+5b82 18002211 force 17 ,rega 
+5b83 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b84 58000006 setarg smp_encryption_information 
+5b85 e0a08000 istore 1 ,contw 
+5b86 6800c4e9 fetch 1 ,mem_le_configuration 
+5b87 c280db8a bbit1 bit_ble_pairing_fixed_ltk ,le_send_fixed_ltk 
+5b88 d8c04419 arg mem_le_ltk ,contr 
+5b89 20207ebf branch memcpy16 
+
+le_send_fixed_ltk:
+5b8a d8c044ea arg mem_le_fixed_ltk ,contr 
+5b8b 20207ebf branch memcpy16 
+
+le_send_smp_master_identification:
+5b8c d8a044cb arg mem_le_ediv ,contw 
+5b8d 1800720a force 10 ,loopcnt 
+5b8e 2040630d call generate_random_loop 
+5b8f 1800220b force 11 ,rega 
+5b90 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b91 58000007 setarg smp_master_identification 
+5b92 e0a08000 istore 1 ,contw 
+5b93 680144cb fetch 2 ,mem_le_ediv 
+5b94 e0a10000 istore 2 ,contw 
+5b95 680444cd fetch 8 ,mem_le_rand 
+5b96 e0a40000 istore 8 ,contw 
+5b97 20600000 rtn 
+
+le_send_smp_identity_information:
+5b98 18002211 force 17 ,rega 
+5b99 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5b9a 58000008 setarg smp_identity_information 
+5b9b e0a08000 istore 1 ,contw 
+5b9c 58000000 setarg 0 
+5b9d e0a40000 istore 8 ,contw 
+5b9e e0a40000 istore 8 ,contw 
+5b9f 20600000 rtn 
+
+le_send_smp_identity_address_information:
+5ba0 18002208 force 8 ,rega 
+5ba1 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5ba2 58000009 setarg smp_identity_address_information 
+5ba3 e0a08000 istore 1 ,contw 
+5ba4 6800c495 fetch 1 ,mem_le_conn_own_addr_type 
+5ba5 e0a08000 istore 1 ,contw 
+5ba6 680344a0 fetch 6 ,mem_le_lap 
+5ba7 e0a30000 istore 6 ,contw 
+5ba8 20600000 rtn 
+
+le_send_pairing_fail_unspecified_reason:
+5ba9 70047b08 jam pairing_failed_unspecified_reason ,mem_le_ll_pairing_fail_reason 
+5baa 20205b54 branch le_send_pairing_failed 
+
+le_check_init_key_distribution:
+5bab 6800c458 fetch 1 ,mem_le_pres_init_key_distribution 
+5bac 6808c458 fetcht 1 ,mem_le_pres_init_key_distribution 
+5bad 98417e00 iand temp ,pdata 
+5bae 20600000 rtn 
+
+le_parse_smp_identity_information:
+5baf d8a044d5 arg mem_le_irk ,contw 
+5bb0 20407ebf call memcpy16 
+5bb1 20405bab call le_check_init_key_distribution 
+5bb2 2fec0001 isolate0 le_initator_irk_bit ,pdata 
+5bb3 2020dba9 branch le_send_pairing_fail_unspecified_reason ,true 
+5bb4 6800c092 fetch 1 ,mem_device_option 
+5bb5 c1850000 rtnne dvc_op_module 
+5bb6 20405bb9 call le_check_master_addr_type 
+5bb7 24740000 nrtn user 
+5bb8 20203410 branch app_ble_store_reconn_info 
+
+le_check_master_addr_type:
+5bb9 20407fe9 call disable_user 
+5bba 6800c48e fetch 1 ,mem_le_conn_peer_addr_type 
+5bbb c1000000 rtneq master_public_addr 
+5bbc 68008454 fetch 1 ,mem_le_plap + 5 
+5bbd 2fe180c0 compare 0xc0 ,pdata ,0xc0 
+5bbe 20608000 rtn true 
+5bbf 20207fe7 branch enable_user 
+
+le_parse_smp_identity_address_information:
+5bc0 20405bab call le_check_init_key_distribution 
+5bc1 2fec0001 isolate0 le_initator_irk_bit ,pdata 
+5bc2 2020dba9 branch le_send_pairing_fail_unspecified_reason ,true 
+5bc3 20600000 rtn 
+
+le_parse_smp_master_identification:
+
+le_parse_smp_signing_information:
+
+le_parse_smp_security_request:
+5bc4 20600000 rtn 
+
+le_parse_smp_public_key:
+5bc5 d8a009be arg mem_le_pubkey_remote_x_256 ,contw 
+5bc6 20407eb3 call memcpy64 
+5bc7 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+5bc8 7044c101 jam le_sc_stat_receive_public_key ,mem_le_secure_connect_state 
+5bc9 20600000 rtn 
+
+le_parse_smp_dhkey_check:
+5bca d8a00a6e arg mem_sp_confirm_remote ,contw 
+5bcb 20407ebf call memcpy16 
+5bcc 7044c106 jam le_sc_stat_receive_dhkey ,mem_le_secure_connect_state 
+5bcd 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+5bce 20600000 rtn 
+
+le_send_smp_pairing_public_key:
+5bcf 18002241 force 65 ,rega 
+5bd0 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5bd1 5800000c setarg smp_pairing_public_key 
+5bd2 e0a08000 istore 1 ,contw 
+5bd3 d8c045d2 arg mem_le_pubkey_local_x_256 ,contr 
+5bd4 20207eb3 branch memcpy64 
+
+le_send_smp_pairing_dhkey_check:
+5bd5 20407166 call function_f6_eb 
+5bd6 18002211 force 17 ,rega 
+5bd7 20405c62 call le_fifo_malloc_tx_l2cap_smp 
+5bd8 5800000d setarg smp_pairing_dhkey_check 
+5bd9 e0a08000 istore 1 ,contw 
+5bda 20207201 branch load_inverse_result 
+
+le_check_paring_time:
+5bdb 6800c4c4 fetch 1 ,mem_le_pairing_state 
+5bdc c17f8000 rtneq flag_le_pairing_end 
+5bdd d8400003 arg flag_le_pairing_rcv_pairing_req ,temp 
+5bde 98467c00 isub temp ,null 
+5bdf 24610000 nrtn positive 
+5be0 d8e0000a arg smp_pairing_timer ,queue 
+5be1 20407f16 call timer_check 
+5be2 247a0000 nrtn blank 
+5be3 20205ba9 branch le_send_pairing_fail_unspecified_reason 
+
+le_pairing_sm:
+5be4 473c402f bpatchx patch2f_0 ,mem_patch2f 
+5be5 6800c4c4 fetch 1 ,mem_le_pairing_state 
+5be6 c0005bef beq flag_le_pairing_null ,le_pairing_sm_null 
+5be7 c000dbf5 beq flag_le_pairing_start ,le_pairing_sm_start 
+5be8 c0015bef beq flag_le_pairing_send_recurity_req ,le_pairing_sm_send_sec_req 
+5be9 c001dbf7 beq flag_le_pairing_rcv_pairing_req ,le_pairing_sm_rcv_pairing_req 
+5bea c002dbfb beq flag_le_pairing_after_auth ,le_pairing_sm_after_auth 
+5beb c003dc07 beq flag_le_paring_send_enc_information ,le_pairng_sm_send_enc_information 
+5bec c0045c09 beq flag_le_paring_send_master_identification ,le_pairng_sm_send_master_indentification 
+5bed c004dc10 beq flag_le_paring_send_indentity_information ,le_pairng_sm_send_indentity_information 
+5bee 20600000 rtn 
+
+le_pairing_sm_null:
+
+le_pairing_sm_send_sec_req:
+5bef 6800c4c5 fetch 1 ,mem_le_enc_state 
+5bf0 c1820000 rtnne flag_le_send_start_enc_rsp 
+5bf1 7044c5ff jam flag_le_enc_end ,mem_le_enc_state 
+5bf2 7044c4ff jam flag_le_pairing_end ,mem_le_pairing_state 
+5bf3 700a993f jam bt_evt_le_reconnect_complete ,mem_fifo_temp 
+5bf4 20207d86 branch ui_ipc_send_event 
+
+le_pairing_sm_start:
+5bf5 7044c402 jam flag_le_pairing_send_recurity_req ,mem_le_pairing_state 
+5bf6 20205b02 branch le_send_smp_security_request 
+
+le_pairing_sm_rcv_pairing_req:
+5bf7 7044c404 jam flag_le_pairing_auth ,mem_le_pairing_state 
+5bf8 58017700 setarg timer_smp_pairing_timeout 
+5bf9 d8e0000a arg smp_pairing_timer ,queue 
+5bfa 20207f08 branch timer_init 
+
+le_pairing_sm_after_auth:
+5bfb 6800c4c5 fetch 1 ,mem_le_enc_state 
+5bfc c0025bfe beq flag_le_send_start_enc_rsp ,le_pairing_sm_after_auth_start_enc 
+5bfd 20600000 rtn 
+
+le_pairing_sm_after_auth_start_enc:
+5bfe 7044c407 jam flag_le_paring_send_enc_information ,mem_le_pairing_state 
+5bff 700a9929 jam bt_evt_le_enc_info ,mem_fifo_temp 
+5c00 20407d86 call ui_ipc_send_event 
+5c01 20405b82 call le_send_smp_encryption_information 
+5c02 6800c092 fetch 1 ,mem_device_option 
+5c03 c1850000 rtnne dvc_op_module 
+5c04 20405bb9 call le_check_master_addr_type 
+5c05 20740000 rtn user 
+5c06 20203410 branch app_ble_store_reconn_info 
+
+le_pairng_sm_send_enc_information:
+5c07 7044c408 jam flag_le_paring_send_master_identification ,mem_le_pairing_state 
+5c08 20205b8c branch le_send_smp_master_identification 
+
+le_pairng_sm_send_master_indentification:
+5c09 6800c452 fetch 1 ,mem_le_preq_resp_key_distribution 
+5c0a 6808c459 fetcht 1 ,mem_le_pres_resp_key_distribution 
+5c0b 98417e00 iand temp ,pdata 
+5c0c 2fec0001 isolate0 le_initator_irk_bit ,pdata 
+5c0d 2020dc12 branch le_parse_start_enc_rsp_after_auth_end ,true 
+5c0e 7044c409 jam flag_le_paring_send_indentity_information ,mem_le_pairing_state 
+5c0f 20205b98 branch le_send_smp_identity_information 
+
+le_pairng_sm_send_indentity_information:
+5c10 20405ba0 call le_send_smp_identity_address_information 
+5c11 20205c12 branch le_parse_start_enc_rsp_after_auth_end 
+
+le_parse_start_enc_rsp_after_auth_end:
+5c12 18000e0a force smp_pairing_timer ,queue 
+5c13 20407f07 call timer_stop 
+5c14 7044c5ff jam flag_le_enc_end ,mem_le_enc_state 
+5c15 7044c4ff jam flag_le_pairing_end ,mem_le_pairing_state 
+5c16 700a993e jam bt_evt_le_pairing_complete ,mem_fifo_temp 
+5c17 20207d86 branch ui_ipc_send_event 
+
+le_secure_connect_sm:
+5c18 473cc02f bpatchx patch2f_1 ,mem_patch2f 
+5c19 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5c1a c4038000 rtnbit0 le_pairing_mode_secure_connect_bit 
+5c1b 6800c4bf fetch 1 ,mem_le_secure_connect_flag 
+5c1c c1810000 rtnne le_sp_flag_commit_256 
+5c1d 7044bf00 jam sp_flag_standby ,mem_le_secure_connect_flag 
+5c1e 6800c4c1 fetch 1 ,mem_le_secure_connect_state 
+5c1f c000dc58 beq le_sc_stat_receive_public_key ,le_sc_sm_receive_public_key 
+5c20 c0015c5f beq le_sc_stat_wait_send_public_key ,le_sc_sm_wait_send_public_key 
+5c21 c001dc52 beq le_sc_stat_send_public_key ,le_sc_sm_send_public_key 
+5c22 c0035c39 beq le_sc_stat_receive_dhkey ,le_sc_sm_receive_dhkey 
+5c23 c003dc30 beq le_sc_stat_wait_confirm_gkey ,le_sc_sm_wait_confirm_gkey 
+5c24 c0045c26 beq le_sc_stat_passkey_wait_confirm ,le_sc_sm_passkey_wait_confirm 
+5c25 20600000 rtn 
+
+le_sc_sm_passkey_wait_confirm:
+5c26 6800c663 fetch 1 ,mem_authentication_passkey_times 
+5c27 1fe20e00 copy pdata ,queue 
+5c28 1fe0fe01 increase 1 ,pdata 
+5c29 6000c663 store 1 ,mem_authentication_passkey_times 
+5c2a 680244c7 fetch 4 ,mem_le_tk 
+5c2b afefffff qisolate1 pdata 
+5c2c 58000080 setarg 0x80 
+5c2d 7920fe00 setflag true ,0 ,pdata 
+5c2e 6000c664 store 1 ,mem_passkey_1bit 
+5c2f 20205c55 branch le_sc_sm_ready_send_pairing_confirm 
+
+le_sc_sm_wait_confirm_gkey:
+5c30 6800c4c2 fetch 1 ,mem_le_sc_confirm_gkey_flag 
+5c31 7044c200 jam flag_le_sc_confrim_null ,mem_le_sc_confirm_gkey_flag 
+5c32 c000dc35 beq flag_le_sc_confrim_gkey_ok ,le_sc_confirm_gkey_ok 
+5c33 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+5c34 20600000 rtn 
+
+le_sc_confirm_gkey_ok:
+5c35 700a9931 jam bt_evt_le_pairing_success ,mem_fifo_temp 
+5c36 20407d86 call ui_ipc_send_event 
+5c37 7044c405 jam flag_le_pairing_after_auth ,mem_le_pairing_state 
+5c38 20205bd5 branch le_send_smp_pairing_dhkey_check 
+
+le_sc_sm_receive_dhkey:
+5c39 680089b9 fetch 1 ,mem_sp_dhkey_invalid 
+5c3a c001dc3d beq sp_key_valid_256 ,le_dhkey_ready 
+5c3b 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+5c3c 20600000 rtn 
+
+le_dhkey_ready:
+5c3d 2040718d call function_f5 
+5c3e 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5c3f c041dc41 beq le_pairing_mode_secure_connect_passkey ,le_dhkey_ready_common 
+5c40 20405b18 call le_set_tk_0 
+
+le_dhkey_ready_common:
+5c41 2040717a call function_f6_ea 
+5c42 da200af2 arg mem_aes_cmac_temp ,rega 
+5c43 da400a6e arg mem_sp_confirm_remote ,regb 
+5c44 df200010 arg 16 ,loopcnt 
+5c45 20407f88 call string_compare 
+5c46 2022dc49 branch le_dhkey_check_ok ,zero 
+
+le_dhkey_check_fail:
+5c47 70047b0b jam pairing_failed_dhkey_check_failed ,mem_le_ll_pairing_fail_reason 
+5c48 20205b54 branch le_send_pairing_failed 
+
+le_dhkey_check_ok:
+5c49 20407595 call sp_calc_check_publickey_256 
+5c4a 2422dc47 nbranch le_dhkey_check_fail ,zero 
+5c4b 70442901 jam 1 ,mem_ltk_exists 
+5c4c 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5c4d c040dc35 beq le_pairing_mode_secure_connect_justwork ,le_sc_confirm_gkey_ok 
+5c4e c041dc35 beq le_pairing_mode_secure_connect_passkey ,le_sc_confirm_gkey_ok 
+5c4f 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+5c50 7044c107 jam le_sc_stat_wait_confirm_gkey ,mem_le_secure_connect_state 
+5c51 20600000 rtn 
+
+le_sc_sm_send_public_key:
+5c52 6800c4c6 fetch 1 ,mem_le_pairing_mode 
+5c53 c041dc56 beq le_pairing_mode_secure_connect_passkey ,le_sc_sm_send_public_key_passkey 
+5c54 70466400 jam 0 ,mem_passkey_1bit 
+
+le_sc_sm_ready_send_pairing_confirm:
+5c55 20205b3d branch le_send_smp_pairing_confirm 
+
+le_sc_sm_send_public_key_passkey:
+5c56 70466300 jam 0 ,mem_authentication_passkey_times 
+5c57 20205b1b branch le_parse_smp_pairing_req_passkey 
+
+le_sc_sm_receive_public_key:
+5c58 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+5c59 6800c4c3 fetch 1 ,mem_le_sc_local_key_invalid 
+5c5a c001dc5c beq sp_key_valid_256 ,le_public_key_ready 
+5c5b 20600000 rtn 
+
+le_public_key_ready:
+5c5c 7044c102 jam le_sc_stat_wait_send_public_key ,mem_le_secure_connect_state 
+5c5d 7009b900 jam sp_key_invalid ,mem_sp_dhkey_invalid 
+5c5e 20207a99 branch sp_dhkey_calc_256 
+
+le_sc_sm_wait_send_public_key:
+5c5f 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag 
+5c60 7044c103 jam le_sc_stat_send_public_key ,mem_le_secure_connect_state 
+5c61 20205bcf branch le_send_smp_pairing_public_key 
+
+le_fifo_malloc_tx_l2cap_smp:
+5c62 18002406 force le_l2cap_cid_smp ,regb 
+5c63 20205847 branch le_fifo_malloc_tx_l2cap 
+
+le_parse_ll:
+5c64 680082db fetch 1 ,mem_le_rxbuf + 2 
+5c65 c0005c7b beq ll_connection_update_req ,le_parse_connection_update_req 
+5c66 c000dc83 beq ll_channel_map_req ,le_parse_channel_map_req 
+5c67 c0015c8e beq ll_terminate_ind ,le_parse_terminate_ind 
+5c68 c001dcaa beq ll_enc_req ,le_parse_enc_req 
+5c69 c0025ce1 beq ll_enc_rsp ,le_parse_enc_rsp 
+5c6a c002dce6 beq ll_start_enc_req ,le_parse_start_enc_req 
+5c6b c0035cea beq ll_start_enc_rsp ,le_parse_start_enc_rsp 
+5c6c c003dcf5 beq ll_unknown_rsp ,le_parse_unknown_rsp 
+5c6d c0045c99 beq ll_feature_req ,le_parse_feature_req 
+5c6e c004dcf5 beq ll_feature_rsp ,le_parse_feature_rsp 
+5c6f c0055cef beq ll_pause_enc_req ,le_parse_pause_enc_req 
+5c70 c005dcf5 beq ll_pause_enc_rsp ,le_parse_pause_enc_rsp 
+5c71 c0065c9f beq ll_version_ind ,le_parse_version_ind 
+5c72 c006dcf5 beq ll_reject_ind ,le_parse_reject_ind 
+5c73 c0095ca6 beq ll_ping_req ,le_parse_ping_req 
+5c74 c009dcf5 beq ll_ping_rsp ,le_parse_ping_rsp 
+5c75 da200002 arg 2 ,rega 
+5c76 da400007 arg ll_unknown_rsp ,regb 
+5c77 20405842 call le_fifo_malloc_tx_ll 
+5c78 680082db fetch 1 ,mem_le_rxbuf + 2 
+5c79 e0a08000 istore 1 ,contw 
+5c7a 20600000 rtn 
+
+le_parse_connection_update_req:
+5c7b e8c48000 ifetch 9 ,contr 
+5c7c 6004c3d3 store 9 ,mem_le_new_param 
+5c7d e8c10000 ifetch 2 ,contr 
+5c7e 6001045f store 2 ,mem_le_instant 
+5c7f 6800843f fetch 1 ,mem_le_state 
+5c80 79207e05 set1 lestate_update_param ,pdata 
+5c81 6000843f store 1 ,mem_le_state 
+5c82 20600000 rtn 
+
+le_parse_channel_map_req:
+5c83 e8c28000 ifetch 5 ,contr 
+5c84 6002c3ce store 5 ,mem_le_new_map 
+5c85 e8c10000 ifetch 2 ,contr 
+5c86 6001045f store 2 ,mem_le_instant 
+5c87 68090459 fetcht 2 ,mem_le_event_count 
+5c88 98467c00 isub temp ,null 
+5c89 24215c8e nbranch le_parse_terminate_ind ,positive 
+5c8a 6800843f fetch 1 ,mem_le_state 
+5c8b 79207e06 set1 lestate_update_map ,pdata 
+5c8c 6000843f store 1 ,mem_le_state 
+5c8d 20600000 rtn 
+
+le_parse_terminate_ind:
+5c8e 58000014 setarg 20 
+5c8f 6001046d store 2 ,mem_le_superto 
+5c90 600144ba store 2 ,mem_le_init_superto 
+5c91 20600000 rtn 
+
+le_send_terminate_ind_user_terminated:
+5c92 da600013 arg error_remote_user_terminated_connection ,regc 
+
+le_send_terminate_ind:
+5c93 da200002 arg 2 ,rega 
+5c94 da400002 arg ll_terminate_ind ,regb 
+5c95 20405842 call le_fifo_malloc_tx_ll 
+5c96 1a627e00 copy regc ,pdata 
+5c97 e0a08000 istore 1 ,contw 
+5c98 20600000 rtn 
+
+le_parse_feature_req:
+
+le_send_feature_rsp:
+5c99 da200009 arg 9 ,rega 
+5c9a da400009 arg ll_feature_rsp ,regb 
+5c9b 20405842 call le_fifo_malloc_tx_ll 
+5c9c 58000001 setarg param_le_features 
+5c9d e0a40000 istore 8 ,contw 
+5c9e 20600000 rtn 
+
+le_parse_version_ind:
+5c9f 20748000 rtn master 
+
+le_send_version_ind:
+5ca0 da200006 arg 6 ,rega 
+5ca1 da40000c arg ll_version_ind ,regb 
+5ca2 20405842 call le_fifo_malloc_tx_ll 
+5ca3 6802c510 fetch 5 ,mem_lmp_version 
+5ca4 e0a28000 istore 5 ,contw 
+5ca5 20600000 rtn 
+
+le_parse_ping_req:
+5ca6 da400013 arg ll_ping_rsp ,regb 
+5ca7 20205ca8 branch le_send_ll_one_lenth 
+
+le_send_ll_one_lenth:
+5ca8 da200001 arg 1 ,rega 
+5ca9 20205842 branch le_fifo_malloc_tx_ll 
+
+le_parse_enc_req:
+5caa e8c40000 ifetch 8 ,contr 
+5cab 600444cd store 8 ,mem_le_rand 
+5cac e8c10000 ifetch 2 ,contr 
+5cad 600144cb store 2 ,mem_le_ediv 
+5cae e8c40000 ifetch 8 ,contr 
+5caf 600444aa store 8 ,mem_le_skdm 
+5cb0 e8c20000 ifetch 4 ,contr 
+5cb1 60024411 store 4 ,mem_le_ivm 
+5cb2 20405ccf call le_send_enc_rsp 
+5cb3 473d402f bpatchx patch2f_2 ,mem_patch2f 
+5cb4 6800c4c4 fetch 1 ,mem_le_pairing_state 
+5cb5 c002dcbc beq flag_le_pairing_after_auth ,le_parse_enc_req_after_auth 
+5cb6 6800c4e9 fetch 1 ,mem_le_configuration 
+5cb7 c280dcbf bbit1 bit_ble_pairing_fixed_ltk ,le_parse_enc_req_fixed_ltk 
+5cb8 6800c217 fetch 1 ,mem_nv_data_number 
+5cb9 245a67be ncall load_device_list_mode_4 ,blank 
+5cba 6800c429 fetch 1 ,mem_ltk_exists 
+5cbb c0005cc4 beq 0 ,le_ltk_lost 
+
+le_parse_enc_req_after_auth:
+5cbc 7044c501 jam flag_le_rcv_enc_start ,mem_le_enc_state 
+5cbd 20405cdd call le_send_start_enc_req 
+5cbe 202073a2 branch generate_sk 
+
+le_parse_enc_req_fixed_ltk:
+5cbf 70442901 jam 1 ,mem_ltk_exists 
+5cc0 d8c044ea arg mem_le_fixed_ltk ,contr 
+5cc1 d8a04419 arg mem_le_ltk ,contw 
+5cc2 20407ebf call memcpy16 
+5cc3 20205cbc branch le_parse_enc_req_after_auth 
+
+le_ltk_lost:
+5cc4 473dc02f bpatchx patch2f_3 ,mem_patch2f 
+5cc5 7044c500 jam flag_le_enc_null ,mem_le_enc_state 
+5cc6 7044c400 jam flag_le_enc_null ,mem_le_pairing_state 
+5cc7 700a9941 jam bt_evt_le_ltk_lost ,mem_fifo_temp 
+5cc8 20207d86 branch ui_ipc_send_event 
+
+le_send_reject_ind:
+5cc9 da200002 arg 2 ,rega 
+5cca da40000d arg ll_reject_ind ,regb 
+5ccb 20405842 call le_fifo_malloc_tx_ll 
+5ccc 58000006 setarg le_err_pin_or_key_missing 
+5ccd e0a08000 istore 1 ,contw 
+5cce 20600000 rtn 
+
+le_send_enc_rsp:
+5ccf d8a044b2 arg mem_le_skds ,contw 
+5cd0 18007208 force 8 ,loopcnt 
+5cd1 2040630d call generate_random_loop 
+5cd2 d8a04415 arg mem_le_ivs ,contw 
+5cd3 18007204 force 4 ,loopcnt 
+5cd4 2040630d call generate_random_loop 
+5cd5 da20000d arg 13 ,rega 
+5cd6 da400004 arg ll_enc_rsp ,regb 
+5cd7 20405842 call le_fifo_malloc_tx_ll 
+5cd8 680444b2 fetch 8 ,mem_le_skds 
+5cd9 e0a40000 istore 8 ,contw 
+5cda 68024415 fetch 4 ,mem_le_ivs 
+5cdb e0a20000 istore 4 ,contw 
+5cdc 20600000 rtn 
+
+le_send_start_enc_req:
+5cdd da400005 arg ll_start_enc_req ,regb 
+5cde 20205ca8 branch le_send_ll_one_lenth 
+
+le_send_start_enc_rsp:
+5cdf da400006 arg ll_start_enc_rsp ,regb 
+5ce0 20205ca8 branch le_send_ll_one_lenth 
+
+le_parse_enc_rsp:
+5ce1 e8c40000 ifetch 8 ,contr 
+5ce2 600444b2 store 8 ,mem_le_skds 
+5ce3 e8c20000 ifetch 4 ,contr 
+5ce4 60024415 store 4 ,mem_le_ivs 
+5ce5 202073a2 branch generate_sk 
+
+le_parse_start_enc_req:
+5ce6 6800843f fetch 1 ,mem_le_state 
+5ce7 79207e04 set1 lestate_encryption ,pdata 
+5ce8 6000843f store 1 ,mem_le_state 
+5ce9 20600000 rtn 
+
+le_parse_start_enc_rsp:
+5cea 20748000 rtn master 
+5ceb 700a9932 jam bt_evt_le_start_enc ,mem_fifo_temp 
+5cec 20407d86 call ui_ipc_send_event 
+5ced 7044c504 jam flag_le_send_start_enc_rsp ,mem_le_enc_state 
+5cee 20205cdf branch le_send_start_enc_rsp 
+
+le_parse_pause_enc_req:
+5cef 7044c502 jam flag_le_enc_pause ,mem_le_enc_state 
+5cf0 20405cf3 call le_send_pause_enc_rsp 
+5cf1 700a9933 jam bt_evt_le_pause_enc ,mem_fifo_temp 
+5cf2 20207d86 branch ui_ipc_send_event 
+
+le_send_pause_enc_rsp:
+5cf3 da40000b arg ll_pause_enc_rsp ,regb 
+5cf4 20205ca8 branch le_send_ll_one_lenth 
+
+le_parse_feature_rsp:
+
+le_parse_unknown_rsp:
+
+le_parse_pause_enc_rsp:
+
+le_parse_reject_ind:
+
+le_parse_ping_rsp:
+5cf5 20600000 rtn 
+
+init_lmp:
+5cf6 20758000 rtn wake 
+
+init_lmp_work:
+5cf7 473e402f bpatchx patch2f_4 ,mem_patch2f 
+5cf8 58000000 setarg 0 
+5cf9 60008048 store 1 ,mem_lmp_to_send 
+5cfa 60008055 store 1 ,mem_conn_sm 
+5cfb 60008078 store 1 ,mem_lmo_opcode1 
+5cfc 6000807c store 1 ,mem_lmo_opcode2 
+5cfd 6000c158 store 1 ,mem_esco_addr 
+5cfe 600084d7 store 1 ,mem_auth_enable 
+5cff 6000816d store 1 ,mem_connection_options 
+5d00 600089b5 store 1 ,mem_pairing_auth 
+5d01 70455b00 jam switch_flag_init ,mem_switch_flag 
+5d02 70022900 jam 0 ,mem_switch_fail_master_count 
+5d03 7004d800 jam null_encryp ,mem_wait_encryption 
+
+init_lmp_reinit:
+5d04 7009b500 jam 0 ,mem_pairing_auth 
+5d05 7009b400 jam 0 ,mem_sp_localsm 
+5d06 7004d100 jam 0 ,mem_lmp_conn_state 
+
+parse_rx_done:
+5d07 20600000 rtn 
+
+parse_lmp:
+5d08 473ec02f bpatchx patch2f_5 ,mem_patch2f 
+5d09 2054e2ff call setlocalsm_master ,master 
+5d0a 2454e303 ncall setlocalsm_slave ,master 
+5d0b 204062bc call lmo_fifo_check 
+5d0c 247a0000 nrtn blank 
+5d0d 6800804c fetch 1 ,mem_state_map 
+5d0e c4030000 rtnbit0 smap_rxlmp 
+5d0f 793ffe06 set0 smap_rxlmp ,pdata 
+5d10 793f8001 set0 mark_rxbuf_inuse ,mark 
+5d11 6000804c store 1 ,mem_state_map 
+5d12 68008551 fetch 1 ,mem_rxbuf 
+5d13 6808804c fetcht 1 ,mem_state_map 
+5d14 2feffe00 isolate1 smap_lmptidinit ,pdata 
+5d15 79208401 setflag true ,smap_lmptid ,temp 
+5d16 6008804c storet 1 ,mem_state_map 
+5d17 18410402 and_into 0x2 ,temp 
+5d18 6008807f storet 1 ,mem_lmo_tid2 
+5d19 6808804c fetcht 1 ,mem_state_map 
+5d1a 1fe37e00 rshift pdata ,pdata 
+5d1b 6000807d store 1 ,mem_lmi_opcode2 
+5d1c 473f402f bpatchx patch2f_6 ,mem_patch2f 
+5d1d 6800807d fetch 1 ,mem_lmi_opcode2 
+5d1e c03fdd66 beq lmp_escape ,parse_lmp_escape 
+5d1f c001ddb1 beq lmp_accepted ,parse_lmp_accepted 
+5d20 c0025dc2 beq lmp_not_accepted ,parse_lmp_not_accepted 
+5d21 c01e5d59 beq lmp_set_afh ,parse_lmp_set_afh 
+5d22 c002dd55 beq lmp_clkoffset_req ,parse_lmp_clkoffset_req 
+5d23 c007dfa8 beq lmp_encryption_mode_req ,parse_lmp_encryption_mode_req 
+5d24 c0085e24 beq lmp_encryption_key_size_req ,parse_lmp_crypt_key 
+5d25 c011de42 beq lmp_auto_rate ,parse_lmp_auto_rate 
+5d26 c01cdfc1 beq lmp_test_control ,parse_lmp_test_control 
+5d27 c01c5fbc beq lmp_test_activate ,parse_lmp_test_activate 
+5d28 c018de27 beq lmp_setup_complete ,parse_lmp_setup_complete 
+5d29 c01bdeb0 beq lmp_supervision_timeout ,parse_lmp_supervision_timeout 
+5d2a c013deac beq lmp_features_req ,parse_lmp_features_req 
+5d2b c019dea9 beq lmp_host_connection_req ,parse_lmp_conn_req 
+5d2c c012deae beq lmp_version_req ,parse_lmp_version_req 
+5d2d c0135e3e beq lmp_version_res ,parse_lmp_version_res 
+5d2e c003de36 beq lmp_detach ,parse_lmp_detach 
+5d2f c016de2d beq lmp_max_slot ,parse_lmp_max_slot 
+5d30 c0175e2e beq lmp_max_slot_req ,parse_lmp_max_slot_req 
+5d31 c000dea5 beq lmp_name_req ,parse_lmp_name_req 
+5d32 c0015e90 beq lmp_name_res ,parse_lmp_name_res 
+5d33 c0145fb3 beq lmp_features_res ,parse_lmp_features_res 
+5d34 c004de86 beq lmp_comb_key ,parse_lmp_comb_key 
+5d35 c005de5f beq lmp_au_rand ,parse_lmp_au_rand 
+5d36 c0045e43 beq lmp_in_rand ,parse_lmp_in_rand 
+5d37 c0065e6a beq lmp_sres ,parse_lmp_sres 
+5d38 c00fde3a beq lmp_incr_power_req ,parse_lmp_incr_power 
+5d39 c0105e3c beq lmp_decr_power_req ,parse_lmp_decr_power 
+5d3a c010deca beq lmp_max_power ,parse_lmp_max_power 
+5d3b c0115eca beq lmp_min_power ,parse_lmp_min_power 
+5d3c c01adecb beq lmp_page_mode_req ,parse_lmp_page_mode_req 
+5d3d c01b5ecc beq lmp_page_scan_mode_req ,parse_lmp_page_scan_mode_req 
+5d3e c0125eca beq lmp_preferred_rate ,parse_lmp_preferred_rate 
+5d3f c01a5ecd beq lmp_slot_offset ,parse_lmp_slot_offset 
+5d40 c00bded6 beq lmp_sniff_req ,parse_lmp_sniff_req 
+5d41 c008def2 beq lmp_start_encryption_req ,parse_lmp_start_encryption_req 
+5d42 c0095ef6 beq lmp_stop_encryption_req ,parse_lmp_stop_encryption_req 
+5d43 c009def8 beq lmp_switch_req ,parse_lmp_switch_req 
+5d44 c006df0a beq lmp_temp_rand ,parse_lmp_temp_rand 
+5d45 c0075f0a beq lmp_temp_key ,parse_lmp_temp_key 
+5d46 c017deaa beq lmp_timing_accuracy_req ,parse_lmp_timing_accuracy_req 
+5d47 c0185f0a beq lmp_timing_accuracy_res ,parse_lmp_timing_accuracy_res 
+5d48 c0055f0a beq lmp_unit_key ,parse_lmp_unit_key 
+5d49 c00c5f0b beq lmp_unsniff_req ,parse_lmp_unsniff_req 
+5d4a c0195f0a beq lmp_use_semi_permanent_key ,parse_lmp_use_semi_permanend_key 
+5d4b c01edf10 beq lmp_encapsulated_header ,parse_lmp_encapsulated_header 
+5d4c c01f5f51 beq lmp_encapsulated_payload ,parse_lmp_encapsulated_payload 
+5d4d c01fdf4b beq lmp_simple_pairing_confirm ,parse_simple_pairing_confirm 
+5d4e c0205f78 beq lmp_simple_pairing_number ,parse_lmp_simple_pairing_number 
+5d4f c020df8a beq lmp_dhkey_check ,parse_dhkey_check 
+5d50 c0035fa7 beq lmp_clkoffset_res ,parse_lmp_clkoffset_res 
+5d51 c01d5d57 beq lmp_enc_key_size_mask_req ,parse_enc_key_size_mask_req 
+
+reject_unknown_packet:
+5d52 70007e19 jam unknown_lmp_pdu ,mem_lmo_reason2 
+
+reject_lmp_packet:
+5d53 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 
+5d54 20600000 rtn 
+
+parse_lmp_clkoffset_req:
+5d55 70007c06 jam lmp_clkoffset_res ,mem_lmo_opcode2 
+5d56 20600000 rtn 
+
+parse_enc_key_size_mask_req:
+5d57 70007c3b jam lmp_enc_key_size_mask_res ,mem_lmo_opcode2 
+5d58 20600000 rtn 
+
+parse_lmp_set_afh:
+5d59 68020552 fetch 4 ,mem_rxbuf + 1 
+5d5a 1fe3fe00 lshift pdata ,pdata 
+5d5b 600240d2 store 4 ,mem_afh_instant 
+5d5c 68008556 fetch 1 ,mem_rxbuf + 5 
+5d5d 6000c0d9 store 1 ,mem_afh_new_mod 
+5d5e 68028557 fetch 5 ,mem_rxbuf + 6 
+5d5f 6002c0e7 store 5 ,mem_afh_map_new 
+5d60 6802855c fetch 5 ,mem_rxbuf + 11 
+5d61 e0a28000 istore 5 ,contw 
+5d62 68008031 fetch 1 ,mem_mode 
+5d63 79207e03 set1 afh_change ,pdata 
+5d64 60008031 store 1 ,mem_mode 
+5d65 20600000 rtn 
+
+parse_lmp_escape:
+5d66 473fc02f bpatchx patch2f_7 ,mem_patch2f 
+5d67 68008552 fetch 1 ,mem_rxbuf + 1 
+5d68 79207e07 set1 7 ,pdata 
+5d69 6000807d store 1 ,mem_lmi_opcode2 
+5d6a c040dd88 beq lmp_ext_accepted ,parse_lmpext_accepted 
+5d6b c0415d8d beq lmp_not_accepted_ext ,parse_lmpext_not_accepted 
+5d6c c04adeb1 beq lmp_sniff_subrating_req ,parse_lmp_sniff_subrating_req 
+5d6d c04b5eca beq lmp_sniff_subrating_res ,parse_lmp_sniff_subrating_res 
+5d6e c045debf beq lmp_packet_type_table_req ,parse_lmpext_packet_type_table_req 
+5d6f c041dda5 beq lmp_ext_features_req ,parse_lmpext_features_req 
+5d70 c0425da7 beq lmp_ext_features_res ,parse_lmpext_features_res 
+5d71 c0485d7a beq lmp_ext_chn_classification_req ,parse_lmpext_chn_classification_req 
+5d72 c04bdd9e beq lmp_pause_encryption_req ,parse_lmpext_pause_encrypt 
+5d73 c04c5da3 beq lmp_resume_encryption_req ,parse_lmpext_resume_encrypt 
+5d74 c04cdd7d beq lmp_io_cap_req ,parse_lmpext_iocap_req 
+5d75 c04d5d80 beq lmp_io_cap_res ,parse_lmpext_iocap_res 
+5d76 c1420000 rtneq lmp_ext_features_res 
+
+reject_unknown_ext_packet:
+5d77 70007c82 jam lmp_not_accepted_ext ,mem_lmo_opcode2 
+5d78 70007e19 jam unknown_lmp_pdu ,mem_lmo_reason2 
+5d79 20600000 rtn 
+
+parse_lmpext_chn_classification_req:
+5d7a 70007c82 jam lmp_not_accepted_ext ,mem_lmo_opcode2 
+5d7b 70007e2e jam not_support_chn_classification ,mem_lmo_reason2 
+5d7c 20600000 rtn 
+
+parse_lmpext_iocap_req:
+5d7d 20405d82 call iocap_lmpext_load 
+5d7e 70007c9a jam lmp_io_cap_res ,mem_lmo_opcode2 
+5d7f 20600000 rtn 
+
+parse_lmpext_iocap_res:
+5d80 20405d82 call iocap_lmpext_load 
+5d81 20205d86 branch iocap_lmpext_common 
+
+iocap_lmpext_load:
+5d82 d8a0465e arg mem_sp_iocap_remote ,contw 
+5d83 68018553 fetch 3 ,mem_rxbuf + 2 
+5d84 e0a18000 istore 3 ,contw 
+5d85 20600000 rtn 
+
+iocap_lmpext_common:
+5d86 2020f6d8 branch master_set_mem_master_sp_flag ,true 
+5d87 20600000 rtn 
+
+parse_lmpext_accepted:
+5d88 68008554 fetch 1 ,mem_rxbuf + 3 
+5d89 79207e07 set1 7 ,pdata 
+5d8a 600084c9 store 1 ,mem_lmi_accepted_opcode 
+5d8b c045dd92 beq lmp_packet_type_table_req ,parse_lmpext_accepted_ptt 
+5d8c 20600000 rtn 
+
+parse_lmpext_not_accepted:
+5d8d 68008554 fetch 1 ,mem_rxbuf + 3 
+5d8e 79207e07 set1 7 ,pdata 
+5d8f 600084c9 store 1 ,mem_lmi_accepted_opcode 
+5d90 c045dd96 beq lmp_packet_type_table_req ,parse_lmpext_not_accepted_ptt 
+5d91 20600000 rtn 
+
+parse_lmpext_accepted_ptt:
+5d92 6800c15a fetch 1 ,mem_ptt 
+5d93 6808804c fetcht 1 ,mem_state_map 
+5d94 7d3a0405 nsetflag blank ,smap_edr ,temp 
+5d95 6008804c storet 1 ,mem_state_map 
+
+parse_lmpext_not_accepted_ptt:
+5d96 68008030 fetch 1 ,mem_state 
+5d97 c4028000 rtnbit0 state_init_seq 
+5d98 793ffe05 set0 state_init_seq ,pdata 
+5d99 60008030 store 1 ,mem_state 
+5d9a 680084d7 fetch 1 ,mem_auth_enable 
+5d9b 247a0000 nrtn blank 
+5d9c 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 
+5d9d 20600000 rtn 
+
+parse_lmpext_pause_encrypt:
+5d9e 2434dda1 nbranch parse_lmpext_pause_encrypt_slave ,master 
+5d9f 70007c12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 
+5da0 202062eb branch tid_reply 
+
+parse_lmpext_pause_encrypt_slave:
+5da1 70007c97 jam lmp_pause_encryption_req ,mem_lmo_opcode2 
+5da2 20600000 rtn 
+
+parse_lmpext_resume_encrypt:
+5da3 204062eb call tid_reply 
+5da4 20205ffe branch lmp_start_encryption 
+
+parse_lmpext_features_req:
+5da5 70007c84 jam lmp_ext_features_res ,mem_lmo_opcode2 
+5da6 20600000 rtn 
+
+parse_lmpext_features_res:
+5da7 68088555 fetcht 1 ,mem_rxbuf + 4 
+5da8 18410401 and temp ,0x1 ,temp 
+5da9 600884d0 storet 1 ,mem_remote_sppcap 
+5daa 6800c1ce fetch 1 ,mem_hci_cmd 
+5dab c0a8ddad bne hci_cmd_wait_remote_ext_feature ,parse_lmpext_features_res_not_hci 
+5dac 7041ce00 jam 0 ,mem_hci_cmd 
+
+parse_lmpext_features_res_not_hci:
+5dad 68008055 fetch 1 ,mem_conn_sm 
+5dae c18a8000 rtnne conn_sm_wait_features_ext 
+5daf 70005504 jam conn_sm_send_conn_req ,mem_conn_sm 
+5db0 2020631b branch process_conn_sm 
+
+parse_lmp_accepted:
+5db1 47404030 bpatchx patch30_0 ,mem_patch30 
+5db2 68008552 fetch 1 ,mem_rxbuf + 1 
+5db3 600084c9 store 1 ,mem_lmi_accepted_opcode 
+5db4 c019ddd8 beq lmp_host_connection_req ,parse_lmp_accepted_hostconn 
+5db5 c0045de7 beq lmp_in_rand ,parse_lmp_accepted_inrand 
+5db6 c007ddee beq lmp_encryption_mode_req ,parse_lmp_accepted_enc_mode 
+5db7 c0085df4 beq lmp_encryption_key_size_req ,parse_lmp_accepted_enc_keysize 
+5db8 c008ddf5 beq lmp_start_encryption_req ,parse_lmp_accepted_start_enc 
+5db9 c0095dfd beq lmp_stop_encryption_req ,parse_lmp_accepted_stop_enc 
+5dba c00c5e13 beq lmp_unsniff_req ,parse_lmp_accepted_unsniff_req 
+5dbb c00bde16 beq lmp_sniff_req ,parse_lmp_accepted_sniff_req 
+5dbc c009ddcf beq lmp_switch_req ,parse_lmp_accepted_switch 
+5dbd c01edf1e beq lmp_encapsulated_header ,parse_lmp_accepted_encapsulated_header 
+5dbe c01f5f6a beq lmp_encapsulated_payload ,parse_lmp_accepted_encapsulated_payload 
+5dbf c0205f20 beq lmp_simple_pairing_number ,parse_lmp_accepted_simple_pairing_number 
+5dc0 c020df3d beq lmp_dhkey_check ,parse_lmp_accepted_dhkey_check 
+5dc1 20600000 rtn 
+
+parse_lmp_not_accepted:
+5dc2 4740c030 bpatchx patch30_1 ,mem_patch30 
+5dc3 68008552 fetch 1 ,mem_rxbuf + 1 
+5dc4 600084c9 store 1 ,mem_lmi_accepted_opcode 
+5dc5 c000de0a beq lmp_name_req ,parse_lmp_not_accepted_name_req 
+5dc6 c019dde2 beq lmp_host_connection_req ,parse_lmp_not_accepted_hostconn 
+5dc7 c005ddfe beq lmp_au_rand ,parse_lmp_not_accepted_aurand 
+5dc8 c0045e01 beq lmp_in_rand ,parse_lmp_not_accepted_inrand 
+5dc9 c009ddd2 beq lmp_switch_req ,parse_lmp_not_accepted_switch 
+5dca c0205e0b beq lmp_simple_pairing_number ,parse_lmp_not_accepted_simple_pairing_number 
+5dcb c020de0e beq lmp_dhkey_check ,parse_lmp_not_accepted_dhkey_check 
+5dcc c00c5e11 beq lmp_unsniff_req ,parse_lmp_not_accepted_unsniff_req 
+5dcd c00bde22 beq lmp_sniff_req ,parse_lmp_not_acdcept_sniff_req 
+5dce 20600000 rtn 
+
+parse_lmp_accepted_switch:
+5dcf 700a9920 jam bt_evt_switch_accept ,mem_fifo_temp 
+5dd0 20407d86 call ui_ipc_send_event 
+5dd1 202021dc branch role_switch_prepare0 
+
+parse_lmp_not_accepted_switch:
+5dd2 700a9919 jam bt_evt_switch_not_accept ,mem_fifo_temp 
+5dd3 20407d86 call ui_ipc_send_event 
+5dd4 70455b02 jam switch_flag_not_accept ,mem_switch_flag 
+5dd5 58000050 setarg timer_switch_waite 
+5dd6 d8e00006 arg switch_wait_timer ,queue 
+5dd7 20207f08 branch timer_init 
+
+parse_lmp_accepted_hostconn:
+5dd8 680084d1 fetch 1 ,mem_lmp_conn_state 
+5dd9 79207e00 set1 received_conn_req ,pdata 
+5dda 600084d1 store 1 ,mem_lmp_conn_state 
+5ddb 700a9901 jam bt_evt_bb_connected ,mem_fifo_temp 
+5ddc 20407d86 call ui_ipc_send_event 
+5ddd 70007c8b jam lmp_packet_type_table_req ,mem_lmo_opcode2 
+
+parse_lmp_accepted_hostconn_ctn:
+5dde 68008055 fetch 1 ,mem_conn_sm 
+5ddf c082dd07 bne conn_sm_wait_conn_accept ,parse_rx_done 
+5de0 70005506 jam conn_sm_auth_pair ,mem_conn_sm 
+5de1 20600000 rtn 
+
+parse_lmp_not_accepted_hostconn:
+5de2 7004ca0b jam acl_connection_already_exists ,mem_disconn_reason_send 
+5de3 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+5de4 70005500 jam conn_sm_standby ,mem_conn_sm 
+5de5 2020dd07 branch parse_rx_done ,true 
+5de6 20600000 rtn 
+
+parse_lmp_accepted_inrand:
+5de7 6800c1bd fetch 1 ,mem_link_key_exists 
+5de8 247a0000 nrtn blank 
+5de9 2040244f call clear_linkkey 
+5dea 20405ffc call lmp_generate_key 
+5deb 20748000 rtn master 
+5dec 79200021 set1 mark_slave_in_rand_accepted ,mark 
+5ded 20600000 rtn 
+
+parse_lmp_accepted_enc_mode:
+5dee 24748000 nrtn master 
+5def 70007c10 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 
+5df0 6800804c fetch 1 ,mem_state_map 
+5df1 c4010000 rtnbit0 smap_encryption 
+5df2 70007c12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 
+5df3 20600000 rtn 
+
+parse_lmp_accepted_enc_keysize:
+5df4 20205ffe branch lmp_start_encryption 
+
+parse_lmp_accepted_start_enc:
+5df5 20406059 call send_create_conn_start_l2cap_timer_sm 
+5df6 68008030 fetch 1 ,mem_state 
+5df7 c3820000 rtnbit1 state_conn_comp 
+5df8 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 
+5df9 68008055 fetch 1 ,mem_conn_sm 
+5dfa c1850000 rtnne conn_sm_encrypt_wait 
+5dfb 7000550b jam conn_sm_encrypt_wait_clear ,mem_conn_sm 
+5dfc 20600000 rtn 
+
+parse_lmp_accepted_stop_enc:
+5dfd 20600000 rtn 
+
+parse_lmp_not_accepted_aurand:
+
+parse_lmp_not_accepted_aurand_send_detach:
+5dfe 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+5dff 7004ca13 jam other_end_terminated ,mem_disconn_reason_send 
+5e00 20600000 rtn 
+
+parse_lmp_not_accepted_inrand:
+5e01 68008553 fetch 1 ,mem_rxbuf + 2 
+5e02 c0035e07 beq key_missing ,parse_lmp_inrand_key_missing 
+5e03 c18c0000 rtnne pairing_not_allowed 
+5e04 7004ca18 jam pairing_not_allowed ,mem_disconn_reason_send 
+5e05 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+5e06 20600000 rtn 
+
+parse_lmp_inrand_key_missing:
+5e07 7004ca06 jam key_missing ,mem_disconn_reason_send 
+5e08 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+5e09 20600000 rtn 
+
+parse_lmp_not_accepted_name_req:
+5e0a 20600000 rtn 
+
+parse_lmp_not_accepted_simple_pairing_number:
+5e0b 7009ae00 jam sp_stat_null ,mem_sp_state 
+5e0c 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+5e0d 20205d07 branch parse_rx_done 
+
+parse_lmp_not_accepted_dhkey_check:
+5e0e 7009ae00 jam sp_stat_null ,mem_sp_state 
+5e0f 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+5e10 20205d07 branch parse_rx_done 
+
+parse_lmp_not_accepted_unsniff_req:
+5e11 700a9924 jam bt_evt_unsniff_not_accept ,mem_fifo_temp 
+5e12 20207d86 branch ui_ipc_send_event 
+
+parse_lmp_accepted_unsniff_req:
+5e13 700a9923 jam bt_evt_unsniff_accept ,mem_fifo_temp 
+5e14 20407d86 call ui_ipc_send_event 
+5e15 202026e9 branch sniff_exit 
+
+parse_lmp_accepted_sniff_req:
+5e16 700a9922 jam bt_evt_sniff_accept ,mem_fifo_temp 
+5e17 20407d86 call ui_ipc_send_event 
+5e18 58000000 setarg 0 
+5e19 60010075 store 2 ,mem_dsniff 
+5e1a 680141e3 fetch 2 ,mem_sniff_param_interval 
+5e1b 1fe3fe00 lshift pdata ,pdata 
+5e1c 60010032 store 2 ,mem_tsniff 
+5e1d 6800c1e5 fetch 1 ,mem_sniff_param_attempt 
+5e1e 60008073 store 1 ,mem_sniff_attempt 
+5e1f 6800c1e7 fetch 1 ,mem_sniff_param_timeout 
+5e20 60008074 store 1 ,mem_sniff_timeout 
+5e21 202026c6 branch sniff_init 
+
+parse_lmp_not_acdcept_sniff_req:
+5e22 700a9921 jam bt_evt_sniff_not_accept ,mem_fifo_temp 
+5e23 20207d86 branch ui_ipc_send_event 
+
+parse_lmp_crypt_key:
+5e24 68088552 fetcht 1 ,mem_rxbuf + 1 
+5e25 60088054 storet 1 ,mem_key_size 
+5e26 20205e38 branch accept_lmp_msg 
+
+parse_lmp_setup_complete:
+5e27 680084d1 fetch 1 ,mem_lmp_conn_state 
+5e28 79207e02 set1 received_setup_complete ,pdata 
+5e29 600084d1 store 1 ,mem_lmp_conn_state 
+5e2a c3818000 rtnbit1 sent_setup_complete 
+5e2b 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 
+5e2c 20205d07 branch parse_rx_done 
+
+parse_lmp_max_slot:
+5e2d 20600000 rtn 
+
+parse_lmp_max_slot_req:
+5e2e 6800c0d0 fetch 1 ,mem_max_slot 
+5e2f 68088552 fetcht 1 ,mem_rxbuf + 1 
+5e30 98467c00 isub temp ,null 
+5e31 20215e38 branch accept_lmp_msg ,positive 
+5e32 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 
+5e33 70007e1f jam unspecified_error ,mem_lmo_reason2 
+5e34 70007d2e jam lmp_max_slot_req ,mem_lmi_opcode2 
+5e35 20600000 rtn 
+
+parse_lmp_detach:
+5e36 20406157 call prepare_disconnect 
+5e37 20205e38 branch accept_lmp_msg 
+
+accept_lmp_msg:
+5e38 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+5e39 20600000 rtn 
+
+parse_lmp_incr_power:
+5e3a 70007c21 jam lmp_max_power ,mem_lmo_opcode2 
+5e3b 20600000 rtn 
+
+parse_lmp_decr_power:
+5e3c 70007c22 jam lmp_min_power ,mem_lmo_opcode2 
+5e3d 20600000 rtn 
+
+parse_lmp_version_res:
+5e3e 68008055 fetch 1 ,mem_conn_sm 
+5e3f c1098000 rtneq conn_sm_wait_version 
+5e40 70005502 jam conn_sm_send_features ,mem_conn_sm 
+5e41 20600000 rtn 
+
+parse_lmp_auto_rate:
+5e42 20600000 rtn 
+
+parse_lmp_in_rand:
+5e43 20405ff9 call lmp_copy_rand 
+5e44 7004d401 jam pincode_state_wait_pincode ,mem_pincode_state 
+5e45 700a990a jam bt_evt_pincode_req ,mem_fifo_temp 
+5e46 20407d86 call ui_ipc_send_event 
+5e47 204062f3 call tid_check 
+5e48 2420e001 nbranch lmp_accept_inrand ,true 
+5e49 2434de4e nbranch parse_lmp_inrand_res ,master 
+5e4a 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 
+5e4b 70007d08 jam lmp_in_rand ,mem_lmi_opcode2 
+5e4c 70007e23 jam transaction_collision ,mem_lmo_reason2 
+5e4d 20600000 rtn 
+
+parse_lmp_inrand_res:
+5e4e 6800804b fetch 1 ,mem_op 
+5e4f 79207e02 set1 op_inrand_req ,pdata 
+5e50 6000804b store 1 ,mem_op 
+5e51 20600000 rtn 
+
+pop_tid_follow:
+5e52 6808804c fetcht 1 ,mem_state_map 
+5e53 7d3a0401 nsetflag blank ,smap_lmptid ,temp 
+5e54 6008804c storet 1 ,mem_state_map 
+5e55 20600000 rtn 
+
+push_tid_follow:
+5e56 6800807f fetch 1 ,mem_lmo_tid2 
+5e57 1fe37e00 rshift pdata ,pdata 
+5e58 1fe17e01 and_into 1 ,pdata 
+5e59 20600000 rtn 
+
+parse_lmp_au_rand_moudle:
+5e5a 6800c217 fetch 1 ,mem_nv_data_number 
+5e5b 207a0000 rtn blank 
+5e5c 680089b5 fetch 1 ,mem_pairing_auth 
+5e5d 205a67b2 call load_device_list ,blank 
+5e5e 20600000 rtn 
+
+parse_lmp_au_rand:
+5e5f 20405e5a call parse_lmp_au_rand_moudle 
+5e60 20405e56 call push_tid_follow 
+5e61 600084d5 store 1 ,mem_sres_tid 
+5e62 20405ff9 call lmp_copy_rand 
+5e63 70007c0c jam lmp_sres ,mem_lmo_opcode2 
+5e64 6800c1bd fetch 1 ,mem_link_key_exists 
+5e65 247a0000 nrtn blank 
+5e66 68008030 fetch 1 ,mem_state 
+5e67 c3830000 rtnbit1 state_combkey 
+5e68 70007e06 jam key_missing ,mem_lmo_reason2 
+5e69 20205d53 branch reject_lmp_packet 
+
+parse_lmp_sres:
+5e6a da200040 arg mem_plap ,rega 
+5e6b 20407288 call function_e1 
+5e6c 68020552 fetch 4 ,mem_rxbuf + 1 
+5e6d 680a0592 fetcht 4 ,mem_input_store 
+5e6e 98467c00 isub temp ,null 
+5e6f 2022de73 branch authentication_ok ,zero 
+5e70 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+5e71 7004ca05 jam authentication_failure_error ,mem_disconn_reason_send 
+5e72 20600000 rtn 
+
+authentication_ok:
+5e73 20405e77 call authentication_ok_common 
+5e74 6800c65a fetch 1 ,mem_ssp_enable 
+5e75 203a5f3e branch pairing_success ,blank 
+5e76 20600000 rtn 
+
+authentication_ok_common:
+5e77 20407386 call copy_aco 
+5e78 204021b2 call linkkey_ready 
+5e79 6800804b fetch 1 ,mem_op 
+5e7a 2feffe01 isolate1 op_auth_req ,pdata 
+5e7b 793ffe01 set0 op_auth_req ,pdata 
+5e7c 6000804b store 1 ,mem_op 
+5e7d 68008055 fetch 1 ,mem_conn_sm 
+5e7e c00cde81 beq conn_sm_auth_wait ,authentication_ok_conn_sm 
+5e7f c00c5e81 beq conn_sm_pairing_wait ,authentication_ok_conn_sm 
+5e80 20600000 rtn 
+
+authentication_ok_conn_sm:
+5e81 680089b5 fetch 1 ,mem_pairing_auth 
+5e82 c1800000 rtnne defalt_pairing_auth 
+5e83 6800804c fetch 1 ,mem_state_map 
+5e84 c3810000 rtnbit1 smap_encryption 
+5e85 202063b1 branch host_create_conn_encrypt 
+
+parse_lmp_comb_key:
+5e86 da200552 arg mem_rxbuf + 1 ,rega 
+5e87 da400582 arg mem_kinit ,regb 
+5e88 d8a00562 arg mem_random_number ,contw 
+5e89 20407352 call xor16 
+5e8a da200040 arg mem_plap ,rega 
+5e8b 20406311 call generate_linkkey 
+5e8c 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 
+5e8d 68008030 fetch 1 ,mem_state 
+5e8e c3035ffc bbit0 state_combkey ,lmp_generate_key 
+5e8f 20600000 rtn 
+
+parse_lmp_name_res:
+5e90 6801015f fetch 2 ,mem_len 
+5e91 1fe0f3fd add pdata ,-3 ,loopcnt 
+5e92 68088552 fetcht 1 ,mem_rxbuf + 1 
+5e93 58000101 setarg mem_tmp_buffer 
+5e94 98408a00 iadd temp ,contw 
+5e95 d8c00554 arg mem_rxbuf + 3 ,contr 
+5e96 20407f01 call memcpy 
+5e97 68088053 fetcht 1 ,mem_name_offset 
+5e98 68008553 fetch 1 ,mem_rxbuf + 2 
+5e99 98467e00 isub temp ,pdata 
+5e9a 1fe67c0e sub pdata ,14 ,null 
+5e9b 20215ea0 branch parse_lmp_name_res_end ,positive 
+5e9c 1840fe0e add temp ,14 ,pdata 
+5e9d 60008053 store 1 ,mem_name_offset 
+5e9e 70007c01 jam lmp_name_req ,mem_lmo_opcode2 
+5e9f 20600000 rtn 
+
+parse_lmp_name_res_end:
+5ea0 6800804c fetch 1 ,mem_state_map 
+5ea1 79207e03 set1 smap_name_res ,pdata 
+5ea2 6000804c store 1 ,mem_state_map 
+5ea3 c2826006 bbit1 smap_name_req ,lmp_disconnect 
+5ea4 20600000 rtn 
+
+parse_lmp_name_req:
+5ea5 68008552 fetch 1 ,mem_rxbuf + 1 
+5ea6 6000807d store 1 ,mem_lmi_opcode2 
+5ea7 70007c02 jam lmp_name_res ,mem_lmo_opcode2 
+5ea8 20600000 rtn 
+
+parse_lmp_conn_req:
+5ea9 20205e38 branch accept_lmp_msg 
+
+parse_lmp_timing_accuracy_req:
+5eaa 70007c30 jam lmp_timing_accuracy_res ,mem_lmo_opcode2 
+5eab 20600000 rtn 
+
+parse_lmp_features_req:
+5eac 70007c28 jam lmp_features_res ,mem_lmo_opcode2 
+5ead 20600000 rtn 
+
+parse_lmp_version_req:
+5eae 70007c26 jam lmp_version_res ,mem_lmo_opcode2 
+5eaf 20600000 rtn 
+
+parse_lmp_supervision_timeout:
+5eb0 20600000 rtn 
+
+parse_lmp_sniff_subrating_req:
+5eb1 68010032 fetch 2 ,mem_tsniff 
+5eb2 98000400 iforce temp 
+5eb3 68008553 fetch 1 ,mem_rxbuf + 2 
+5eb4 60008095 store 1 ,mem_subsniff_rate 
+5eb5 984f8400 imul32 temp ,temp 
+5eb6 68010554 fetch 2 ,mem_rxbuf + 3 
+5eb7 1fe3fe00 lshift pdata ,pdata 
+5eb8 60010096 store 2 ,mem_subsniff_tcmax 
+5eb9 68020556 fetch 4 ,mem_rxbuf + 5 
+5eba 1fe3fe00 lshift pdata ,pdata 
+5ebb 60020091 store 4 ,mem_subsniff_instant 
+5ebc 18427e00 deposit temp 
+5ebd 60010098 store 2 ,mem_subsniff_tsniff 
+5ebe 20600000 rtn 
+
+parse_lmpext_packet_type_table_req:
+5ebf 6808c15a fetcht 1 ,mem_ptt 
+5ec0 68008553 fetch 1 ,mem_rxbuf + 2 
+5ec1 9842fc00 ixor temp ,null 
+5ec2 2422dd77 nbranch reject_unknown_ext_packet ,zero 
+5ec3 2feffe00 isolate1 0 ,pdata 
+5ec4 6800804c fetch 1 ,mem_state_map 
+5ec5 7920fe05 setflag true ,smap_edr ,pdata 
+5ec6 6000804c store 1 ,mem_state_map 
+5ec7 70007c81 jam lmp_ext_accepted ,mem_lmo_opcode2 
+5ec8 70007d8b jam lmp_packet_type_table_req ,mem_lmi_opcode2 
+5ec9 20600000 rtn 
+
+parse_lmp_sniff_subrating_res:
+
+parse_lmp_preferred_rate:
+
+parse_lmp_max_power:
+
+parse_lmp_min_power:
+5eca 20600000 rtn 
+
+parse_lmp_page_mode_req:
+5ecb 20205e38 branch accept_lmp_msg 
+
+parse_lmp_page_scan_mode_req:
+5ecc 20205e38 branch accept_lmp_msg 
+
+parse_lmp_slot_offset:
+5ecd 68010552 fetch 2 ,mem_rxbuf + 1 
+5ece 60010171 store 2 ,mem_slot_offset 
+5ecf 20600000 rtn 
+
+parse_lmp_sniff_req_check_sniff_para:
+5ed0 68010555 fetch 2 ,mem_rxbuf + 4 
+5ed1 6808c172 fetcht 1 ,mem_lpm_mult 
+5ed2 984ffe00 imul32 temp ,pdata 
+5ed3 d8400640 arg 0x640 ,temp 
+5ed4 98467c00 isub temp ,null 
+5ed5 20600000 rtn 
+
+parse_lmp_sniff_req:
+5ed6 68010557 fetch 2 ,mem_rxbuf + 6 
+5ed7 203a5ef0 branch lmp_reject_sniff ,blank 
+5ed8 20405ed0 call parse_lmp_sniff_req_check_sniff_para 
+5ed9 20215ef0 branch lmp_reject_sniff ,positive 
+5eda 6800c092 fetch 1 ,mem_device_option 
+5edb 1fe67c0a sub pdata ,dvc_op_module ,null 
+5edc 2042bcd5 call module_set_lpm_mult_2 ,zero 
+5edd 68008030 fetch 1 ,mem_state 
+5ede c280def0 bbit1 state_insniff ,lmp_reject_sniff 
+5edf 68010553 fetch 2 ,mem_rxbuf + 2 
+5ee0 1fe3fe00 lshift pdata ,pdata 
+5ee1 60010075 store 2 ,mem_dsniff 
+5ee2 68010555 fetch 2 ,mem_rxbuf + 4 
+5ee3 1fe3fe00 lshift pdata ,pdata 
+5ee4 60010032 store 2 ,mem_tsniff 
+5ee5 68010557 fetch 2 ,mem_rxbuf + 6 
+5ee6 60008073 store 1 ,mem_sniff_attempt 
+5ee7 98000400 iforce temp 
+5ee8 68010559 fetch 2 ,mem_rxbuf + 8 
+5ee9 60008074 store 1 ,mem_sniff_timeout 
+5eea 98467c00 isub temp ,null 
+5eeb 24215eed nbranch set_big_value_to_attempt ,positive 
+5eec 60008073 store 1 ,mem_sniff_attempt 
+
+set_big_value_to_attempt:
+5eed 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+5eee 70007d17 jam lmp_sniff_req ,mem_lmi_opcode2 
+5eef 20600000 rtn 
+
+lmp_reject_sniff:
+5ef0 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 
+5ef1 20205d53 branch reject_lmp_packet 
+
+parse_lmp_start_encryption_req:
+5ef2 20405e38 call accept_lmp_msg 
+5ef3 20405ff9 call lmp_copy_rand 
+5ef4 2040728b call function_e3 
+5ef5 202026b8 branch start_encryption 
+
+parse_lmp_stop_encryption_req:
+5ef6 20405e38 call accept_lmp_msg 
+5ef7 202026c0 branch stop_encryption 
+
+parse_lmp_switch_req:
+5ef8 68020552 fetch 4 ,mem_rxbuf + 1 
+5ef9 1fe3fe00 lshift pdata ,pdata 
+5efa 2034df04 branch parse_lmp_switch_accept ,master 
+5efb 6808c1bd fetcht 1 ,mem_link_key_exists 
+5efc 243a5f01 nbranch parse_lmp_switch_req_clear_mark ,blank 
+
+parse_lmp_switch_req_not_accept:
+5efd 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 
+5efe 70007d13 jam lmp_switch_req ,mem_lmi_opcode2 
+5eff 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 
+5f00 20600000 rtn 
+
+parse_lmp_switch_req_clear_mark:
+5f01 70007c34 jam lmp_slot_offset ,mem_lmo_opcode2 
+5f02 70005500 jam 0 ,mem_conn_sm 
+5f03 202021d9 branch role_switch_prepare 
+
+parse_lmp_switch_accept:
+5f04 204021d9 call role_switch_prepare 
+5f05 79200022 set1 mark_reconn_recieve_switch ,mark 
+5f06 6800816d fetch 1 ,mem_connection_options 
+5f07 793ffe02 set0 connection_switch ,pdata 
+5f08 6000816d store 1 ,mem_connection_options 
+5f09 20205e38 branch accept_lmp_msg 
+
+parse_lmp_temp_rand:
+
+parse_lmp_temp_key:
+
+parse_lmp_timing_accuracy_res:
+
+parse_lmp_unit_key:
+
+parse_lmp_use_semi_permanend_key:
+5f0a 20600000 rtn 
+
+parse_lmp_unsniff_req:
+5f0b 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+5f0c 70007d18 jam lmp_unsniff_req ,mem_lmi_opcode2 
+5f0d 700a992e jam bt_evt_remote_unsniff ,mem_fifo_temp 
+5f0e 20407d86 call ui_ipc_send_event 
+5f0f 202026e9 branch sniff_exit 
+
+parse_lmp_encapsulated_header:
+5f10 68008552 fetch 1 ,mem_rxbuf + 1 
+5f11 c080df1c bne encapsulated_major_type_p192 ,parse_lmp_encapsulated_header_reject 
+5f12 68008553 fetch 1 ,mem_rxbuf + 2 
+5f13 c080df1c bne encapsulated_minor_type_p192 ,parse_lmp_encapsulated_header_reject 
+5f14 68008554 fetch 1 ,mem_rxbuf + 3 
+5f15 c0985f1c bne encapsulated_len_p192 ,parse_lmp_encapsulated_header_reject 
+5f16 204062fc call check_localsm 
+5f17 2020df19 branch parse_lmp_encapsulated_header_master ,true 
+5f18 7009ae01 jam sp_stat_key_recv ,mem_sp_state 
+
+parse_lmp_encapsulated_header_master:
+5f19 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+5f1a 70007d3d jam lmp_encapsulated_header ,mem_lmi_opcode2 
+5f1b 20205d07 branch parse_rx_done 
+
+parse_lmp_encapsulated_header_reject:
+5f1c 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 
+5f1d 20205d53 branch reject_lmp_packet 
+
+parse_lmp_accepted_encapsulated_header:
+5f1e 70007c3e jam lmp_encapsulated_payload ,mem_lmo_opcode2 
+5f1f 20600000 rtn 
+
+parse_lmp_accepted_simple_pairing_number:
+5f20 6800c662 fetch 1 ,mem_ssp_mode_flag 
+5f21 c000df27 beq ssp_mode_ssp_pin_flag ,parse_lmp_accepted_simple_pairing_number_ssp_pin 
+5f22 c0015f2b beq ssp_mode_passkey_entry_flag ,parse_lmp_accepted_simple_pairing_number_passkey 
+
+parse_lmp_accepted_simple_pairing_number_common:
+5f23 204062fc call check_localsm 
+5f24 20608000 rtn true 
+5f25 7009ae08 jam sp_stat_confirm_recv ,mem_sp_state 
+5f26 20600000 rtn 
+
+parse_lmp_accepted_simple_pairing_number_ssp_pin:
+5f27 20407962 call g_noninit_number_confirm 
+5f28 700a9935 jam bt_evt_bt_gkey_generate ,mem_fifo_temp 
+5f29 20407d86 call ui_ipc_send_event 
+5f2a 20205f23 branch parse_lmp_accepted_simple_pairing_number_common 
+
+parse_lmp_accepted_simple_pairing_number_passkey:
+5f2b 204062fc call check_localsm 
+5f2c 20608000 rtn true 
+5f2d 6800c663 fetch 1 ,mem_authentication_passkey_times 
+5f2e c009df3b beq 19 ,authentication_passkey_end 
+5f2f 1fe0fe01 increase 1 ,pdata 
+5f30 6000c663 store 1 ,mem_authentication_passkey_times 
+
+authentication_passkey:
+5f31 7009b001 jam sp_flag_commit ,mem_sp_flag 
+5f32 7009ae04 jam sp_stat_commit_calc ,mem_sp_state 
+5f33 6800c663 fetch 1 ,mem_authentication_passkey_times 
+5f34 1fe20e00 copy pdata ,queue 
+5f35 6803468a fetch 6 ,mem_pin 
+5f36 afefffff qisolate1 pdata 
+5f37 58000080 setarg 0x80 
+5f38 7920fe00 setflag true ,0 ,pdata 
+5f39 6000c664 store 1 ,mem_passkey_1bit 
+5f3a 20600000 rtn 
+
+authentication_passkey_end:
+5f3b 7009ae08 jam sp_stat_confirm_recv ,mem_sp_state 
+5f3c 20600000 rtn 
+
+parse_lmp_accepted_dhkey_check:
+5f3d 20405f43 call parse_lmp_accepted_dhkey_check_common 
+
+pairing_success:
+5f3e 6800c665 fetch 1 ,mem_flag_pairing_state 
+5f3f 207a0000 rtn blank 
+5f40 70466500 jam flag_pairing_state_not_pairing ,mem_flag_pairing_state 
+5f41 700a9938 jam bt_evt_bt_pairing_success ,mem_fifo_temp 
+5f42 20207d86 branch ui_ipc_send_event 
+
+parse_lmp_accepted_dhkey_check_common:
+5f43 204062fc call check_localsm 
+5f44 2440f965 ncall g_noninit ,true 
+5f45 2040f975 call g_init ,true 
+5f46 204062fc call check_localsm 
+5f47 20608000 rtn true 
+5f48 7009ae0c jam sp_stat_link_key_calc ,mem_sp_state 
+5f49 7009b001 jam sp_flag_commit ,mem_sp_flag 
+5f4a 20600000 rtn 
+
+parse_simple_pairing_confirm:
+5f4b d8a00a6e arg mem_sp_confirm_remote ,contw 
+5f4c d8c00552 arg mem_rxbuf + 1 ,contr 
+5f4d 20407ebf call memcpy16 
+5f4e 6800c662 fetch 1 ,mem_ssp_mode_flag 
+5f4f c1010000 rtneq ssp_mode_passkey_entry_flag 
+5f50 202076d8 branch master_set_mem_master_sp_flag 
+
+parse_lmp_encapsulated_payload:
+5f51 680089af fetch 1 ,mem_master_sp_state 
+5f52 c003df55 beq sp_stat_random_send ,parse_encapsulated_payload_master 
+5f53 680089ae fetch 1 ,mem_sp_state 
+5f54 c080df68 bne sp_stat_key_recv ,parse_lmp_encapsulated_payload_reject 
+
+parse_encapsulated_payload_master:
+5f55 680089b7 fetch 1 ,mem_sp_remote_key_recv_count 
+5f56 1fe60a20 sub pdata ,0x20 ,contw 
+5f57 24215f68 nbranch parse_lmp_encapsulated_payload_reject ,positive 
+5f58 d8a009c6 arg mem_sp_pubkey_remote ,contw 
+5f59 98a08a00 iadd contw ,contw 
+5f5a 68040552 fetch 8 ,mem_rxbuf + 1 
+5f5b e0a40000 istore 8 ,contw 
+5f5c 6804055a fetch 8 ,mem_rxbuf + 9 
+5f5d e0a40000 istore 8 ,contw 
+5f5e 680089b7 fetch 1 ,mem_sp_remote_key_recv_count 
+5f5f 1fe0fe10 increase 16 ,pdata 
+5f60 600089b7 store 1 ,mem_sp_remote_key_recv_count 
+5f61 c0985e38 bne encapsulated_len_p192 ,accept_lmp_msg 
+
+parse_lmp_encapsulated_payload_completed:
+5f62 204062fc call check_localsm 
+5f63 2020de38 branch accept_lmp_msg ,true 
+5f64 7009b801 jam sp_key_valid ,mem_sp_remote_key_invalid 
+5f65 7009ae02 jam sp_stat_key_generate ,mem_sp_state 
+5f66 7009b001 jam sp_flag_commit ,mem_sp_flag 
+5f67 20205e38 branch accept_lmp_msg 
+
+parse_lmp_encapsulated_payload_reject:
+5f68 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 
+5f69 20205d53 branch reject_lmp_packet 
+
+parse_lmp_accepted_encapsulated_payload:
+5f6a 680089b6 fetch 1 ,mem_sp_local_key_send_count 
+5f6b c0185f6e beq encapsulated_len_p192 ,parse_lmp_encapsulated_payload_all_accepted 
+5f6c 70007c3e jam lmp_encapsulated_payload ,mem_lmo_opcode2 
+5f6d 20205d07 branch parse_rx_done 
+
+parse_lmp_encapsulated_payload_all_accepted:
+5f6e 204062fc call check_localsm 
+5f6f 2020df77 branch parse_lmp_encapsulated_payload_all_accepted_master ,true 
+5f70 6800c662 fetch 1 ,mem_ssp_mode_flag 
+5f71 c0015f75 beq ssp_mode_passkey_entry_flag ,parse_lmp_encapsulated_payload_all_accepted_get_passkey 
+5f72 7009b001 jam sp_flag_commit ,mem_sp_flag 
+5f73 7009ae04 jam sp_stat_commit_calc ,mem_sp_state 
+5f74 20205d07 branch parse_rx_done 
+
+parse_lmp_encapsulated_payload_all_accepted_get_passkey:
+5f75 700a9936 jam bt_evt_bt_get_passkey ,mem_fifo_temp 
+5f76 20207d86 branch ui_ipc_send_event 
+
+parse_lmp_encapsulated_payload_all_accepted_master:
+5f77 20205d07 branch parse_rx_done 
+
+parse_lmp_simple_pairing_number:
+5f78 680089af fetch 1 ,mem_master_sp_state 
+5f79 c003df7c beq sp_stat_random_send ,parse_lmp_simple_pairing_number_master 
+5f7a 680089ae fetch 1 ,mem_sp_state 
+5f7b c0835f88 bne sp_stat_random_recv ,parse_lmp_simple_pairing_number_reject 
+
+parse_lmp_simple_pairing_number_master:
+5f7c d8a00a2e arg mem_sp_random_remote ,contw 
+5f7d 68040552 fetch 8 ,mem_rxbuf + 1 
+5f7e e0a40000 istore 8 ,contw 
+5f7f 6804055a fetch 8 ,mem_rxbuf + 9 
+5f80 e0a40000 istore 8 ,contw 
+5f81 204062fc call check_localsm 
+5f82 2020df86 branch parse_lmp_simple_pairing_number_master0 ,true 
+5f83 7009ae07 jam sp_stat_random_send ,mem_sp_state 
+5f84 7009b001 jam sp_flag_commit ,mem_sp_flag 
+5f85 20205e38 branch accept_lmp_msg 
+
+parse_lmp_simple_pairing_number_master0:
+5f86 7009af04 jam sp_stat_commit_calc ,mem_master_sp_state 
+5f87 202076d8 branch master_set_mem_master_sp_flag 
+
+parse_lmp_simple_pairing_number_reject:
+5f88 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 
+5f89 20205d53 branch reject_lmp_packet 
+
+parse_dhkey_check:
+5f8a 680089af fetch 1 ,mem_master_sp_state 
+5f8b c005df8e beq sp_stat_confirm_send ,parse_dhkey_check_master 
+5f8c 680089ae fetch 1 ,mem_sp_state 
+5f8d c0845f9d bne sp_stat_confirm_recv ,parse_lmp_dhkey_check_reject 
+
+parse_dhkey_check_master:
+5f8e d8a00a5e arg mem_sp_check_result ,contw 
+5f8f d8c00552 arg mem_rxbuf + 1 ,contr 
+5f90 20407ebf call memcpy16 
+5f91 204062fc call check_localsm 
+5f92 2020df9a branch parse_dhkey_check_master0 ,true 
+5f93 6800c662 fetch 1 ,mem_ssp_mode_flag 
+5f94 c000df9f beq ssp_mode_ssp_pin_flag ,number_comparison_mode 
+
+number_comparison_successed:
+5f95 70466100 jam 0 ,mem_flag_mode_ssp_pin 
+5f96 7009ae09 jam sp_stat_confirm_check ,mem_sp_state 
+5f97 7009b001 jam sp_flag_commit ,mem_sp_flag 
+5f98 70007d41 jam lmp_dhkey_check ,mem_lmi_opcode2 
+5f99 20205d07 branch parse_rx_done 
+
+parse_dhkey_check_master0:
+5f9a 7009af09 jam sp_stat_confirm_check ,mem_master_sp_state 
+5f9b 7009b101 jam sp_flag_commit ,mem_master_sp_flag 
+5f9c 20205d07 branch parse_rx_done 
+
+parse_lmp_dhkey_check_reject:
+5f9d 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 
+5f9e 20205d53 branch reject_lmp_packet 
+
+number_comparison_mode:
+5f9f 6800c661 fetch 1 ,mem_flag_mode_ssp_pin 
+5fa0 c283dfa4 bbit1 flag_mode_ssp_pin_reviceve_comparison_bit ,comparison_result 
+5fa1 79207e06 set1 flag_mode_ssp_pin_recieve_dhkey_bit ,pdata 
+5fa2 6000c661 store 1 ,mem_flag_mode_ssp_pin 
+5fa3 20600000 rtn 
+
+comparison_result:
+5fa4 c2805f95 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed 
+5fa5 70466100 jam 0 ,mem_flag_mode_ssp_pin 
+5fa6 20205f9d branch parse_lmp_dhkey_check_reject 
+
+parse_lmp_clkoffset_res:
+5fa7 20205d07 branch parse_rx_done 
+
+parse_lmp_encryption_mode_req:
+5fa8 6800816d fetch 1 ,mem_connection_options 
+5fa9 793ffe01 set0 connection_encrypt 
+5faa 6000816d store 1 ,mem_connection_options 
+5fab 20405e38 call accept_lmp_msg 
+5fac 24748000 nrtn master 
+5fad 68008552 fetch 1 ,mem_rxbuf + 1 
+5fae 6808804b fetcht 1 ,mem_op 
+5faf 793a0404 setflag blank ,op_stop_enc ,temp 
+5fb0 7d3a0405 nsetflag blank ,op_start_enc ,temp 
+5fb1 6008804b storet 1 ,mem_op 
+5fb2 20600000 rtn 
+
+parse_lmp_features_res:
+5fb3 680c0552 fetcht 8 ,mem_rxbuf + 1 
+
+parse_lmp_features_res_not_hci:
+5fb4 68008055 fetch 1 ,mem_conn_sm 
+5fb5 c1818000 rtnne conn_sm_wait_features_res 
+5fb6 6800816d fetch 1 ,mem_connection_options 
+5fb7 c3025fba bbit0 connection_feature_ext ,parse_lmp_send_conn 
+5fb8 70005514 jam conn_sm_send_features_ext ,mem_conn_sm 
+5fb9 20600000 rtn 
+
+parse_lmp_send_conn:
+5fba 70005504 jam conn_sm_send_conn_req ,mem_conn_sm 
+5fbb 20600000 rtn 
+
+parse_lmp_test_activate:
+5fbc 6800817f fetch 1 ,mem_debug_config 
+5fbd 6000815b store 1 ,mem_test_mode_old_debug_config 
+5fbe 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+5fbf 70007d38 jam lmp_test_activate ,mem_lmi_opcode2 
+5fc0 20600000 rtn 
+
+parse_lmp_test_control:
+5fc1 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+5fc2 70007d39 jam lmp_test_control ,mem_lmi_opcode2 
+5fc3 18007209 force 9 ,loopcnt 
+5fc4 d8c00552 arg mem_rxbuf + 1 ,contr 
+5fc5 d8a00152 arg mem_temp_payload ,contw 
+
+parse_lmp_test_xor:
+5fc6 e8c08000 ifetch 1 ,contr 
+5fc7 1fe2fe55 xor_into 0x55 ,pdata 
+5fc8 e0a08000 istore 1 ,contw 
+5fc9 c2005fc6 loop parse_lmp_test_xor 
+5fca 68008152 fetch 1 ,test_mode_scenario 
+5fcb 68088151 fetcht 1 ,mem_tester_emulate 
+5fcc 793f8407 set0 tester_no_whitening ,temp 
+5fcd 793f8404 set0 tester_pattern_test ,temp 
+5fce c07fdfda beq exit_test_mode ,parse_lmp_test_control_exit 
+5fcf c0005ff3 beq pause_test_mode ,parse_lmp_test_control_pause 
+5fd0 c002dfe7 beq closed_loop_back_acl ,parse_lmp_test_control_loopback 
+5fd1 c003dfe6 beq acl_without_whitening ,parse_lmp_test_control_loopback_nowhite 
+5fd2 c0035fe7 beq closed_loop_back_sco ,parse_lmp_test_control_loopback 
+5fd3 c0045fe6 beq sco_without_whitening ,parse_lmp_test_control_loopback_nowhite 
+5fd4 c000dfdf beq zero_pattern ,parse_lmp_test_control_pattern 
+5fd5 c0015fdf beq one_pattern ,parse_lmp_test_control_pattern 
+5fd6 c001dfdf beq alt_pattern ,parse_lmp_test_control_pattern 
+5fd7 c004dfdf beq alt2_pattern ,parse_lmp_test_control_pattern 
+5fd8 c0025fdf beq pseudorandom ,parse_lmp_test_control_pattern 
+5fd9 20600000 rtn 
+
+parse_lmp_test_control_exit:
+5fda 68008151 fetch 1 ,mem_tester_emulate 
+5fdb 79207e03 set1 tester_exit ,pdata 
+5fdc 79207e02 set1 tester_change ,pdata 
+5fdd 60008151 store 1 ,mem_tester_emulate 
+5fde 20600000 rtn 
+
+parse_lmp_test_control_pattern:
+5fdf 79200404 set1 tester_pattern_test ,temp 
+5fe0 70018005 jam 5 ,mem_lch_code 
+5fe1 68010159 fetch 2 ,test_mode_data_length 
+5fe2 98007200 iforce loopcnt 
+5fe3 6001015f store 2 ,mem_len 
+5fe4 d8a00551 arg mem_rxbuf ,contw 
+5fe5 20407f73 call pn9 
+
+parse_lmp_test_control_loopback_nowhite:
+5fe6 79200407 set1 tester_no_whitening ,temp 
+
+parse_lmp_test_control_loopback:
+5fe7 79200402 set1 tester_change ,temp 
+5fe8 18007e00 force 0 ,pdata 
+5fe9 6000800b store 1 ,mem_slave_rcvcnt 
+5fea 600100fa store 2 ,mem_tst_pktcnt_crc 
+5feb 600100fc store 2 ,mem_tst_pktcnt_dmh 
+5fec 600100f8 store 2 ,mem_tst_pktcnt_hec 
+5fed 600100f6 store 2 ,mem_tst_pktcnt_sync 
+5fee 68008153 fetch 1 ,test_mode_hopping_mode 
+5fef 2fe1fe00 compare fixed_freq ,pdata ,0xff 
+5ff0 79208406 setflag true ,tester_fixed_freq ,temp 
+5ff1 60088151 storet 1 ,mem_tester_emulate 
+5ff2 20600000 rtn 
+
+parse_lmp_test_control_pause:
+5ff3 793f8011 set0 mark_testmode ,mark 
+5ff4 70015100 jam 0 ,mem_tester_emulate 
+5ff5 6800817f fetch 1 ,mem_debug_config 
+5ff6 793ffe06 set0 debug_tx_pattern ,pdata 
+5ff7 6000817f store 1 ,mem_debug_config 
+5ff8 20600000 rtn 
+
+lmp_copy_rand:
+5ff9 d8c00552 arg mem_rxbuf + 1 ,contr 
+5ffa d8a00562 arg mem_random_number ,contw 
+5ffb 20207ebf branch memcpy16 
+
+lmp_generate_key:
+5ffc 70007c09 jam lmp_comb_key ,mem_lmo_opcode2 
+5ffd 20600000 rtn 
+
+lmp_start_encryption:
+5ffe 24748000 nrtn master 
+5fff 70007c11 jam lmp_start_encryption_req ,mem_lmo_opcode2 
+6000 20600000 rtn 
+
+lmp_accept_inrand:
+6001 da2040a0 arg mem_lap ,rega 
+6002 20407255 call generate_kinit 
+6003 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+6004 70007d08 jam lmp_in_rand ,mem_lmi_opcode2 
+6005 20600000 rtn 
+
+lmp_disconnect:
+6006 7000720a jam 10 ,mem_conn_timer 
+6007 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+6008 7004ca16 jam local_host ,mem_disconn_reason_send 
+6009 20600000 rtn 
+
+send_lmp:
+600a 47414030 bpatchx patch30_2 ,mem_patch30 
+600b 78547c00 disable user 
+600c 204062c1 call lmo_fifo_process 
+600d 68008048 fetch 1 ,mem_lmp_to_send 
+600e 207a0000 rtn blank 
+600f c283e03f bbit1 7 ,send_lmp_escape 
+
+send_lmp0:
+6010 c000e16f beq lmp_name_req ,send_lmp_name_req 
+6011 c00160e4 beq lmp_name_res ,send_lmp_name_res 
+6012 c001e04a beq lmp_accepted ,send_lmp_accepted 
+6013 c0026060 beq lmp_not_accepted ,send_lmp_not_accepted 
+6014 c013e1db beq lmp_features_req ,send_lmp_features_req 
+6015 c0146108 beq lmp_features_res ,send_lmp_features_res 
+6016 c01860f4 beq lmp_timing_accuracy_res ,send_lmp_timing_accuracy_res 
+6017 c012e1d6 beq lmp_version_req ,send_lmp_version_req 
+6018 c0136103 beq lmp_version_res ,send_lmp_version_res 
+6019 c018e1c3 beq lmp_setup_complete ,send_lmp_setup_complete 
+601a c01be16a beq lmp_supervision_timeout ,send_lmp_superto 
+601b c019e15c beq lmp_host_connection_req ,send_lmp_no_payload 
+601c c0046259 beq lmp_in_rand ,send_lmp_inrand 
+601d c004e24f beq lmp_comb_key ,send_lmp_comb_key 
+601e c005e264 beq lmp_au_rand ,send_lmp_aurand 
+601f c006626d beq lmp_sres ,send_lmp_sres 
+6020 c007e162 beq lmp_encryption_mode_req ,send_lmp_encryption_mode_req 
+6021 c0086292 beq lmp_encryption_key_size_req ,send_lmp_encryption_key_size_req 
+6022 c008e288 beq lmp_start_encryption_req ,send_lmp_start_encryption 
+6023 c003e152 beq lmp_detach ,send_lmp_detach 
+6024 c015617e beq lmp_quality_of_service_req ,send_lmp_quality_of_service_req 
+6025 c005617f beq lmp_unit_key ,send_lmp_unit_key 
+6026 c00fe1bc beq lmp_incr_power_req ,send_lmp_inc_power 
+6027 c00360f9 beq lmp_clkoffset_res ,send_lmp_clkoffset_res 
+6028 c010e15f beq lmp_max_power ,send_lmp_nopayload_reply 
+6029 c016e1b2 beq lmp_max_slot ,send_lmp_max_slot 
+602a c01761b7 beq lmp_max_slot_req ,send_lmp_max_slot_req 
+602b c011615f beq lmp_min_power ,send_lmp_nopayload_reply 
+602c c01a6180 beq lmp_slot_offset ,send_lmp_slot_offset 
+602d c009e195 beq lmp_switch_req ,send_lmp_switch_req 
+602e c00be1a4 beq lmp_sniff_req ,send_lmp_sniff_req 
+602f c009628f beq lmp_stop_encryption_req ,send_lmp_stop_encryption_req 
+6030 c017e1aa beq lmp_timing_accuracy_req ,send_lmp_timing_accuracy_req 
+6031 c00c61af beq lmp_unsniff_req ,send_lmp_unsniff_req 
+6032 c01ee1ff beq lmp_encapsulated_header ,send_lmp_encapsulated_header 
+6033 c01f620b beq lmp_encapsulated_payload ,send_lmp_encapsulated_payload 
+6034 c01fe21d beq lmp_simple_pairing_confirm ,send_lmp_simple_pairing_comfirm 
+6035 c0206227 beq lmp_simple_pairing_number ,send_lmp_simple_pairing_number 
+6036 c020e23c beq lmp_dhkey_check ,send_lmp_dhkey_check 
+6037 c011e24b beq lmp_auto_rate ,send_lmp_auto_rate 
+6038 c01de246 beq lmp_enc_key_size_mask_res ,send_lmp_enc_key_size_mask_res 
+6039 c002e24c beq lmp_clkoffset_req ,send_lmp_clkoffset_req 
+603a c014e24d beq lmp_quality_of_service ,send_lmp_quality_of_service 
+603b c01c624e beq lmp_test_activate ,send_lmp_test_activate 
+603c c01ce175 beq lmp_test_control ,send_lmp_test_control 
+
+send_lmp_error:
+603d 20202a8c branch assert 
+603e 20600000 rtn 
+
+send_lmp_escape:
+603f c040e06d beq lmp_ext_accepted ,send_lmpext_accepted 
+6040 c0426099 beq lmp_ext_features_res ,send_lmpext_features_res 
+6041 c0416076 beq lmp_not_accepted_ext ,send_lmpext_not_accepted 
+6042 c041e10d beq lmp_ext_features_req ,send_lmpext_features_req 
+6043 c045e118 beq lmp_packet_type_table_req ,send_lmpext_packet_type_table_req 
+6044 c04be14e beq lmp_pause_encryption_req ,send_lmpext_pause_encryption_req 
+6045 c04ce0d5 beq lmp_io_cap_req ,send_lmp_io_cap_req 
+6046 c04d60a4 beq lmp_io_cap_res ,send_lmpext_io_cap_res 
+6047 c04ae0da beq lmp_sniff_subrating_req ,send_lmpext_sniff_subrating_req 
+6048 c04b60db beq lmp_sniff_subrating_res ,send_lmpext_sniff_subrating_res 
+6049 20202a8c branch assert 
+
+send_lmp_accepted:
+604a 18007e02 force 2 ,pdata 
+604b 20406298 call msg_send_lmp 
+604c 68008049 fetch 1 ,mem_lmi_opcode 
+604d e0a08000 istore 1 ,contw 
+604e 204062a7 call send_lmp_follow 
+604f 4741c030 bpatchx patch30_3 ,mem_patch30 
+6050 68008049 fetch 1 ,mem_lmi_opcode 
+6051 c0046080 beq lmp_in_rand ,send_lmp_accepted_inrand 
+6052 c007e084 beq lmp_encryption_mode_req ,send_lmp_accepted_enc_mode 
+6053 c008608f beq lmp_encryption_key_size_req ,send_lmp_accepted_enc_key 
+6054 c00be05f beq lmp_sniff_req ,send_lmp_accept_sniff_req 
+6055 c019e092 beq lmp_host_connection_req ,send_lmp_accepted_connection 
+6056 c020e098 beq lmp_dhkey_check ,send_lmp_accept_dhkey_check 
+6057 c008e059 beq lmp_start_encryption_req ,send_create_conn_start_l2cap_timer_sm 
+6058 20600000 rtn 
+
+send_create_conn_start_l2cap_timer_sm:
+6059 68008055 fetch 1 ,mem_conn_sm 
+605a 207a0000 rtn blank 
+605b 7000551b jam conn_sm_wait_done ,mem_conn_sm 
+605c 5800000c setarg timer_enpt_waite 
+605d d8e00007 arg enpt_delay_timer ,queue 
+605e 20207f08 branch timer_init 
+
+send_lmp_accept_sniff_req:
+605f 202026c6 branch sniff_init 
+
+send_lmp_not_accepted:
+6060 18007e03 force 3 ,pdata 
+6061 20406298 call msg_send_lmp 
+6062 68008049 fetch 1 ,mem_lmi_opcode 
+6063 c005e068 beq lmp_au_rand ,send_not_accept_aurand 
+6064 e0a08000 istore 1 ,contw 
+6065 6800804a fetch 1 ,mem_lmo_reason 
+6066 e0a08000 istore 1 ,contw 
+6067 202062a7 branch send_lmp_follow 
+
+send_not_accept_aurand:
+6068 e0a08000 istore 1 ,contw 
+6069 6800804a fetch 1 ,mem_lmo_reason 
+606a e0a08000 istore 1 ,contw 
+606b d84004d5 arg mem_sres_tid ,temp 
+606c 202062e2 branch special_tid_store 
+
+send_lmpext_accepted:
+606d 18000e04 force 4 ,queue 
+606e 204062a0 call send_lmpext 
+606f 5800007f setarg lmp_escape 
+6070 e0a08000 istore 1 ,contw 
+6071 68008049 fetch 1 ,mem_lmi_opcode 
+6072 793ffe07 set0 7 ,pdata 
+6073 e0a08000 istore 1 ,contw 
+6074 68008049 fetch 1 ,mem_lmi_opcode 
+6075 202062a7 branch send_lmp_follow 
+
+send_lmpext_not_accepted:
+6076 18000e05 force 5 ,queue 
+6077 204062a0 call send_lmpext 
+6078 5800007f setarg lmp_escape 
+6079 e0a08000 istore 1 ,contw 
+607a 68008049 fetch 1 ,mem_lmi_opcode 
+607b 793ffe07 set0 7 ,pdata 
+607c e0a08000 istore 1 ,contw 
+607d 6800804a fetch 1 ,mem_lmo_reason 
+607e e0a08000 istore 1 ,contw 
+607f 202062a7 branch send_lmp_follow 
+
+send_lmp_accepted_inrand:
+6080 2040244f call clear_linkkey 
+6081 204062f3 call tid_check 
+6082 20608000 rtn true 
+6083 20205ffc branch lmp_generate_key 
+
+send_lmp_accepted_enc_mode:
+6084 6800804b fetch 1 ,mem_op 
+6085 c282e08b bbit1 op_start_enc ,send_lmp_accepted_enc_start 
+6086 c4020000 rtnbit0 op_stop_enc 
+6087 70007c12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 
+6088 793ffe04 set0 op_stop_enc ,pdata 
+6089 204062eb call tid_reply 
+608a 2020608d branch send_lmp_accepted_enc_exit 
+
+send_lmp_accepted_enc_start:
+608b 70007c10 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 
+608c 793ffe05 set0 op_start_enc ,pdata 
+
+send_lmp_accepted_enc_exit:
+608d 6000804b store 1 ,mem_op 
+608e 20600000 rtn 
+
+send_lmp_accepted_enc_key:
+608f 204062fc call check_localsm 
+6090 2020dffe branch lmp_start_encryption ,true 
+6091 20600000 rtn 
+
+send_lmp_accepted_connection:
+6092 70007c8b jam lmp_packet_type_table_req ,mem_lmo_opcode2 
+6093 680084d1 fetch 1 ,mem_lmp_conn_state 
+6094 79207e00 set1 received_conn_req ,pdata 
+6095 600084d1 store 1 ,mem_lmp_conn_state 
+6096 700a9901 jam bt_evt_bb_connected ,mem_fifo_temp 
+6097 20207d86 branch ui_ipc_send_event 
+
+send_lmp_accept_dhkey_check:
+6098 20600000 rtn 
+
+send_lmpext_features_res:
+6099 18000e0c force 12 ,queue 
+609a 204062a0 call send_lmpext 
+609b 58000001 setarg 0x01 
+609c e0a08000 istore 1 ,contw 
+609d 680104ce fetch 2 ,mem_lmpext_ssp_enable 
+609e e0a10000 istore 2 ,contw 
+609f 58000000 setarg 0 
+60a0 e0a18000 istore 3 ,contw 
+60a1 58000000 setarg 0x00 
+60a2 e0a20000 istore 4 ,contw 
+60a3 202062b0 branch send_lmp_reply 
+
+send_lmpext_io_cap_res:
+60a4 18000e05 force 5 ,queue 
+60a5 204062a0 call send_lmpext 
+60a6 6801c65b fetch 3 ,mem_sp_iocap_local 
+60a7 e0a18000 istore 3 ,contw 
+60a8 204062b0 call send_lmp_reply 
+60a9 70466501 jam flag_pairing_state_pairing ,mem_flag_pairing_state 
+60aa 6800c65b fetch 1 ,mem_sp_iocap_local 
+60ab c000e0b5 beq display_yesno ,responder_iocap_display_yesno 
+60ac c00160af beq keyboard_only ,responder_iocap_keyboard_only 
+60ad c001e0bb beq no_input_no_output ,responder_iocap_no_input_no_output 
+60ae 20600000 rtn 
+
+responder_iocap_keyboard_only:
+60af 6800c65e fetch 1 ,mem_sp_iocap_remote 
+60b0 c00060c7 beq display_only ,responder_iocap_keyboard_only_initiator_iocap_display_only 
+60b1 c000e0c7 beq display_yesno ,responder_iocap_keyboard_only_initiator_iocap_display_yesno 
+60b2 c00160c7 beq keyboard_only ,responder_iocap_keyboard_only_initiator_iocap_keyboard_only 
+60b3 c001e0c1 beq no_input_no_output ,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output 
+60b4 20600000 rtn 
+
+responder_iocap_display_yesno:
+60b5 6800c65e fetch 1 ,mem_sp_iocap_remote 
+60b6 c00060c1 beq display_only ,responder_iocap_display_yesno_initiator_iocap_display_only 
+60b7 c000e0c5 beq display_yesno ,responder_iocap_display_yesno_initiator_iocap_display_yesno 
+60b8 c00160c7 beq keyboard_only ,responder_iocap_display_yesno_initiator_iocap_keyboard_only 
+60b9 c001e0c1 beq no_input_no_output ,responder_iocap_display_yesno_initiator_iocap_no_input_no_output 
+60ba 20600000 rtn 
+
+responder_iocap_no_input_no_output:
+60bb 6800c65e fetch 1 ,mem_sp_iocap_remote 
+60bc c00060c1 beq display_only ,responder_iocap_no_input_no_output_initiator_iocap_display_only 
+60bd c000e0c1 beq display_yesno ,responder_iocap_no_input_no_output_initiator_iocap_display_yesno 
+60be c00160c1 beq keyboard_only ,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only 
+60bf c001e0c1 beq no_input_no_output ,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output 
+60c0 20600000 rtn 
+
+responder_iocap_keyboard_only_initiator_iocap_no_input_no_output:
+
+responder_iocap_display_yesno_initiator_iocap_no_input_no_output:
+
+responder_iocap_display_yesno_initiator_iocap_display_only:
+
+responder_iocap_no_input_no_output_initiator_iocap_display_only:
+
+responder_iocap_no_input_no_output_initiator_iocap_display_yesno:
+
+responder_iocap_no_input_no_output_initiator_iocap_keyboard_only:
+
+responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output:
+
+set_ssp_mode_justwork:
+60c1 70466203 jam ssp_mode_just_work_flag ,mem_ssp_mode_flag 
+60c2 6800c55c fetch 1 ,mem_classic_bt_flag 
+60c3 c28033e9 bbit1 flag_ssp_reject_justwork ,app_bt_disconnect 
+60c4 20600000 rtn 
+
+responder_iocap_display_yesno_initiator_iocap_display_yesno:
+
+set_ssp_mode_numeric_comparison:
+60c5 70466201 jam ssp_mode_ssp_pin_flag ,mem_ssp_mode_flag 
+60c6 20600000 rtn 
+
+responder_iocap_keyboard_only_initiator_iocap_display_yesno:
+
+responder_iocap_keyboard_only_initiator_iocap_keyboard_only:
+
+responder_iocap_keyboard_only_initiator_iocap_display_only:
+
+responder_iocap_display_yesno_initiator_iocap_keyboard_only:
+
+set_ssp_mode_passkey:
+60c7 70466202 jam ssp_mode_passkey_entry_flag ,mem_ssp_mode_flag 
+60c8 20600000 rtn 
+
+classic_bt_set_reject_justwork_flag:
+60c9 d8e00000 arg flag_ssp_reject_justwork ,queue 
+60ca 202060cd branch classic_bluetooth_set_flag 
+
+classic_bt_clr_reject_justwork_flag:
+60cb d8e00000 arg flag_ssp_reject_justwork ,queue 
+60cc 202060d1 branch classic_bluetooth_clr_flag 
+
+classic_bluetooth_set_flag:
+60cd 6800c55c fetch 1 ,mem_classic_bt_flag 
+60ce f9207e00 qset1 pdata 
+60cf 6000c55c store 1 ,mem_classic_bt_flag 
+60d0 20600000 rtn 
+
+classic_bluetooth_clr_flag:
+60d1 6800c55c fetch 1 ,mem_classic_bt_flag 
+60d2 f93ffe00 qset0 pdata 
+60d3 6000c55c store 1 ,mem_classic_bt_flag 
+60d4 20600000 rtn 
+
+send_lmp_io_cap_req:
+60d5 18000e05 force 5 ,queue 
+60d6 204062a0 call send_lmpext 
+60d7 6801c65b fetch 3 ,mem_sp_iocap_local 
+60d8 e0a18000 istore 3 ,contw 
+60d9 202062b2 branch send_lmp_request 
+
+send_lmpext_sniff_subrating_req:
+60da 20600000 rtn 
+
+send_lmpext_sniff_subrating_res:
+60db 18000e09 force 9 ,queue 
+60dc 204062a0 call send_lmpext 
+60dd 68008095 fetch 1 ,mem_subsniff_rate 
+60de e0a08000 istore 1 ,contw 
+60df 68010096 fetch 2 ,mem_subsniff_tcmax 
+60e0 e0a10000 istore 2 ,contw 
+60e1 68020091 fetch 4 ,mem_subsniff_instant 
+60e2 e0a20000 istore 4 ,contw 
+60e3 202062b0 branch send_lmp_reply 
+
+send_lmp_name_res:
+60e4 18007e11 force 17 ,pdata 
+60e5 20406298 call msg_send_lmp 
+60e6 68008049 fetch 1 ,mem_lmi_opcode 
+60e7 1fe20400 copy pdata ,temp 
+60e8 c00060ec beq 0x00 ,send_lmp_name_res_offset_ok 
+60e9 c00760ec beq 0x0e ,send_lmp_name_res_offset_ok 
+60ea c00e60ec beq 0x1c ,send_lmp_name_res_offset_ok 
+60eb 20600000 rtn 
+
+send_lmp_name_res_offset_ok:
+60ec e0a08000 istore 1 ,contw 
+60ed 6800c515 fetch 1 ,mem_local_name_length 
+60ee e0a08000 istore 1 ,contw 
+60ef df20000e arg 14 ,loopcnt 
+60f0 58004516 setarg mem_local_name 
+60f1 98408c00 iadd temp ,contr 
+60f2 20407f01 call memcpy 
+60f3 202062b0 branch send_lmp_reply 
+
+send_lmp_timing_accuracy_res:
+60f4 18007e03 force 3 ,pdata 
+60f5 20406298 call msg_send_lmp 
+60f6 58000114 setarg 0x0114 
+60f7 e0a10000 istore 2 ,contw 
+60f8 202062b0 branch send_lmp_reply 
+
+send_lmp_clkoffset_res:
+60f9 18007e03 force 3 ,pdata 
+60fa 20406298 call msg_send_lmp 
+60fb 68020165 fetch 4 ,mem_clke_bt 
+60fc 9c467e00 isub clkn_bt ,pdata 
+60fd 2034e0ff branch send_lmp_clkoffset_res_master ,master 
+60fe 1fe67e00 sub pdata ,0 ,pdata 
+
+send_lmp_clkoffset_res_master:
+60ff 1feb7e00 rshift2 pdata ,pdata 
+6100 793ffe0f set0 15 ,pdata 
+6101 e0a10000 istore 2 ,contw 
+6102 202062b0 branch send_lmp_reply 
+
+send_lmp_version_res:
+6103 18007e06 force 6 ,pdata 
+6104 20406298 call msg_send_lmp 
+6105 6802c510 fetch 5 ,mem_lmp_version 
+6106 e0a28000 istore 5 ,contw 
+6107 202062b0 branch send_lmp_reply 
+
+send_lmp_features_res:
+6108 18007e09 force 9 ,pdata 
+6109 20406298 call msg_send_lmp 
+610a 68044098 fetch 8 ,mem_features 
+610b e0a40000 istore 8 ,contw 
+610c 202062b0 branch send_lmp_reply 
+
+send_lmpext_features_req:
+610d 18000e0c force 12 ,queue 
+610e 204062a0 call send_lmpext 
+610f 58000001 setarg 0x01 
+6110 e0a08000 istore 1 ,contw 
+6111 680104ce fetch 2 ,mem_lmpext_ssp_enable 
+6112 e0a10000 istore 2 ,contw 
+6113 58000000 setarg 0 
+6114 e0a18000 istore 3 ,contw 
+6115 58000000 setarg 0x00 
+6116 e0a20000 istore 4 ,contw 
+6117 202062b2 branch send_lmp_request 
+
+send_lmpext_packet_type_table_req:
+6118 18000e03 force 3 ,queue 
+6119 204062a0 call send_lmpext 
+611a 6800c15a fetch 1 ,mem_ptt 
+611b e0a08000 istore 1 ,contw 
+611c 78547c00 disable user 
+611d 204062b2 call send_lmp_request 
+611e 24740000 nrtn user 
+611f 24748000 nrtn master 
+6120 6800c0d8 fetch 1 ,mem_afh_cfg 
+6121 c4000000 rtnbit0 afh_cfg_on 
+6122 20406132 call afh_init 
+6123 2020613c branch afh_open_all_channels 
+
+ssp_enable:
+6124 47424030 bpatchx patch30_4 ,mem_patch30 
+6125 6800c09e fetch 1 ,mem_features + 6 
+6126 79207e03 set1 param_featrue_ssp ,pdata 
+6127 6000c09e store 1 ,mem_features + 6 
+6128 58000101 setarg param_lmpext_ssp_enable 
+6129 600104ce store 2 ,mem_lmpext_ssp_enable 
+612a 20600000 rtn 
+
+ssp_disable:
+612b 4742c030 bpatchx patch30_5 ,mem_patch30 
+612c 6800c09e fetch 1 ,mem_features + 6 
+612d 793ffe03 set0 param_featrue_ssp ,pdata 
+612e 6000c09e store 1 ,mem_features + 6 
+612f 58000000 setarg 0 
+6130 600104ce store 2 ,mem_lmpext_ssp_enable 
+6131 20600000 rtn 
+
+afh_init:
+6132 7040d803 jam 0x3 ,mem_afh_cfg 
+6133 58000000 setarg 0 
+6134 60024142 store 4 ,mem_afh_timer 
+6135 d8a040da arg mem_afh_map_lo ,contw 
+6136 20406140 call afh_reset_map 
+6137 d8a040e7 arg mem_afh_map_new ,contw 
+6138 20406140 call afh_reset_map 
+6139 d8a04146 arg mem_afh_classify_channel_map ,contw 
+613a 20406140 call afh_reset_map 
+613b 20206147 branch afh_clear_error_counter 
+
+afh_open_all_channels:
+613c d8a040e7 arg mem_afh_map_new ,contw 
+613d 20406140 call afh_reset_map 
+613e 20406147 call afh_clear_error_counter 
+613f 2020614a branch afh_set_send_flag 
+
+afh_reset_map:
+6140 58ffffff setarg 0xffffff 
+6141 e0a18000 istore 3 ,contw 
+6142 e0a18000 istore 3 ,contw 
+6143 e0a18000 istore 3 ,contw 
+6144 5800007f setarg 0x7f 
+6145 e0a08000 istore 1 ,contw 
+6146 20600000 rtn 
+
+afh_clear_error_counter:
+6147 58000000 setarg 0 
+6148 600140d6 store 2 ,mem_afh_error_total 
+6149 20600000 rtn 
+
+afh_set_send_flag:
+614a 6800c0d8 fetch 1 ,mem_afh_cfg 
+614b 79207e02 set1 send_lmp_set_afh ,pdata 
+614c 6000c0d8 store 1 ,mem_afh_cfg 
+614d 20600000 rtn 
+
+send_lmpext_pause_encryption_req:
+614e 18000e02 force 2 ,queue 
+614f 204062a0 call send_lmpext 
+6150 2434e2b0 nbranch send_lmp_reply ,master 
+6151 202062b2 branch send_lmp_request 
+
+send_lmp_detach:
+6152 18007e02 force 2 ,pdata 
+6153 20406298 call msg_send_lmp 
+6154 680084ca fetch 1 ,mem_disconn_reason_send 
+6155 e0a08000 istore 1 ,contw 
+6156 204062b2 call send_lmp_request 
+
+prepare_disconnect:
+6157 6800804b fetch 1 ,mem_op 
+6158 79207e03 set1 op_disconn ,pdata 
+6159 6000804b store 1 ,mem_op 
+615a 70007232 jam 50 ,mem_conn_timer 
+615b 20600000 rtn 
+
+send_lmp_no_payload:
+615c 18007e01 force 1 ,pdata 
+615d 20406298 call msg_send_lmp 
+615e 202062b2 branch send_lmp_request 
+
+send_lmp_nopayload_reply:
+615f 18007e01 force 1 ,pdata 
+6160 20406298 call msg_send_lmp 
+6161 202062b0 branch send_lmp_reply 
+
+send_lmp_encryption_mode_req:
+6162 18007e02 force 2 ,pdata 
+6163 20406298 call msg_send_lmp 
+6164 6800804c fetch 1 ,mem_state_map 
+6165 2fec0002 isolate0 smap_encryption ,pdata 
+6166 7920fe00 setflag true ,0 ,pdata 
+6167 1fe17e01 and_into 1 ,pdata 
+6168 e0a08000 istore 1 ,contw 
+6169 202062b2 branch send_lmp_request 
+
+send_lmp_superto:
+616a 18007e03 force 3 ,pdata 
+616b 20406298 call msg_send_lmp 
+616c 68010051 fetch 2 ,mem_supervision_to 
+616d e0a10000 istore 2 ,contw 
+616e 202062b2 branch send_lmp_request 
+
+send_lmp_name_req:
+616f 700072fa jam 250 ,mem_conn_timer 
+6170 18007e02 force 2 ,pdata 
+6171 20406298 call msg_send_lmp 
+6172 68008053 fetch 1 ,mem_name_offset 
+6173 e0a08000 istore 1 ,contw 
+6174 202062b2 branch send_lmp_request 
+
+send_lmp_test_control:
+6175 18007e0a force 10 ,pdata 
+6176 20406298 call msg_send_lmp 
+6177 d8c00152 arg mem_temp_payload ,contr 
+6178 18007209 force 9 ,loopcnt 
+
+send_lmp_test_control_loop:
+6179 e8c08000 ifetch 1 ,contr 
+617a 1fe2fe55 xor_into 0x55 ,pdata 
+617b e0a08000 istore 1 ,contw 
+617c c2006179 loop send_lmp_test_control_loop 
+617d 202062b2 branch send_lmp_request 
+
+send_lmp_quality_of_service_req:
+617e 202062b2 branch send_lmp_request 
+
+send_lmp_unit_key:
+617f 202062b2 branch send_lmp_request 
+
+send_lmp_slot_offset:
+6180 20748000 rtn master 
+6181 2040282d call calc_slot_offset 
+6182 18007e09 force 9 ,pdata 
+6183 20406298 call msg_send_lmp 
+6184 68010171 fetch 2 ,mem_slot_offset 
+6185 e0a10000 istore 2 ,contw 
+6186 6801c0a0 fetch 3 ,mem_lap 
+6187 e0a18000 istore 3 ,contw 
+6188 6800c0a3 fetch 1 ,mem_uap 
+6189 e0a08000 istore 1 ,contw 
+618a 680140a4 fetch 2 ,mem_nap 
+618b e0a10000 istore 2 ,contw 
+618c c581e191 bmark0 mark_switch_initiated ,send_lmp_slot_offset_reply 
+618d 793f8003 set0 mark_switch_initiated ,mark 
+618e 204062b2 call send_lmp_request 
+618f 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 
+6190 20600000 rtn 
+
+send_lmp_slot_offset_reply:
+6191 204062b0 call send_lmp_reply 
+6192 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+6193 70007d13 jam lmp_switch_req ,mem_lmi_opcode2 
+6194 20600000 rtn 
+
+send_lmp_switch_req:
+6195 d8400200 arg 0x200 ,temp 
+6196 2034e199 branch switch_on_native ,master 
+6197 1d027e00 deposit clke_bt 
+6198 2020619a branch switch_slack 
+
+switch_on_native:
+6199 1c427e00 deposit clkn_bt 
+
+switch_slack:
+619a 1c227e00 deposit bt_clk 
+619b 9840fe00 iadd temp ,pdata 
+619c 1fe17ffc and_into 0x1fc ,pdata 
+619d 60020034 store 4 ,mem_sniff_anchor 
+619e 18007e05 force 5 ,pdata 
+619f 20406298 call msg_send_lmp 
+61a0 68020034 fetch 4 ,mem_sniff_anchor 
+61a1 1fe37e00 rshift pdata ,pdata 
+61a2 e0a20000 istore 4 ,contw 
+61a3 202062b2 branch send_lmp_request 
+
+send_lmp_sniff_req:
+61a4 18007e0a force 10 ,pdata 
+61a5 20406298 call msg_send_lmp 
+61a6 d8c004d9 arg mem_sniff_payload ,contr 
+61a7 e8c48000 ifetch 9 ,contr 
+61a8 e0a48000 istore 9 ,contw 
+61a9 202062b2 branch send_lmp_request 
+
+send_lmp_timing_accuracy_req:
+61aa 18007e03 force 3 ,pdata 
+61ab 20406298 call msg_send_lmp 
+61ac 58000114 setarg 0x0114 
+61ad e0a10000 istore 2 ,contw 
+61ae 202062b2 branch send_lmp_request 
+
+send_lmp_unsniff_req:
+61af 18007e01 force 1 ,pdata 
+61b0 20406298 call msg_send_lmp 
+61b1 202062b2 branch send_lmp_request 
+
+send_lmp_max_slot:
+61b2 18007e02 force 2 ,pdata 
+61b3 20406298 call msg_send_lmp 
+61b4 6800c0d0 fetch 1 ,mem_max_slot 
+61b5 e0a08000 istore 1 ,contw 
+61b6 202062b2 branch send_lmp_request 
+
+send_lmp_max_slot_req:
+61b7 18007e02 force 2 ,pdata 
+61b8 20406298 call msg_send_lmp 
+61b9 58000005 setarg 0x05 
+61ba e0a08000 istore 1 ,contw 
+61bb 202062b2 branch send_lmp_request 
+
+send_lmp_inc_power:
+61bc 18007e02 force 2 ,pdata 
+61bd 20406298 call msg_send_lmp 
+61be 58000000 setarg 0x00 
+61bf e0a08000 istore 1 ,contw 
+61c0 202062b2 branch send_lmp_request 
+
+send_lmp_setup_complete_by_module:
+61c1 70007c2e jam lmp_max_slot_req ,mem_lmo_opcode2 
+61c2 20600000 rtn 
+
+send_lmp_setup_complete:
+61c3 6800c092 fetch 1 ,mem_device_option 
+61c4 1fe67c0a sub pdata ,dvc_op_module ,null 
+61c5 2042e1c1 call send_lmp_setup_complete_by_module ,zero 
+61c6 68008030 fetch 1 ,mem_state 
+61c7 79207e04 set1 state_conn_comp ,pdata 
+61c8 60008030 store 1 ,mem_state 
+61c9 1c427e00 copy clkn_bt ,pdata 
+61ca 600204e9 store 4 ,mem_aurand_send_delay_time 
+61cb 680084d1 fetch 1 ,mem_lmp_conn_state 
+61cc c281e1d4 bbit1 sent_setup_complete ,send_lmp_setup_complete_has_sent 
+61cd 79207e03 set1 sent_setup_complete ,pdata 
+61ce 600084d1 store 1 ,mem_lmp_conn_state 
+61cf 700a9905 jam bt_evt_setup_complete ,mem_fifo_temp 
+61d0 20407d86 call ui_ipc_send_event 
+61d1 18007e01 force 1 ,pdata 
+61d2 20406298 call msg_send_lmp 
+61d3 202062b2 branch send_lmp_request 
+
+send_lmp_setup_complete_has_sent:
+61d4 70004800 jam 0 ,mem_lmp_to_send 
+61d5 20600000 rtn 
+
+send_lmp_version_req:
+61d6 18007e06 force 6 ,pdata 
+61d7 20406298 call msg_send_lmp 
+61d8 6802c510 fetch 5 ,mem_lmp_version 
+61d9 e0a28000 istore 5 ,contw 
+61da 202062b2 branch send_lmp_request 
+
+send_lmp_features_req:
+61db 18007e09 force 9 ,pdata 
+61dc 20406298 call msg_send_lmp 
+61dd 68044098 fetch 8 ,mem_features 
+61de e0a40000 istore 8 ,contw 
+61df 202062b2 branch send_lmp_request 
+
+sp_master_send_io_cap_get:
+61e0 7009b101 jam sp_flag_commit ,mem_master_sp_flag 
+61e1 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 
+61e2 c1808000 rtnne sp_key_valid 
+61e3 7009af13 jam sp_master_stat_start_done ,mem_master_sp_state 
+61e4 20600000 rtn 
+
+sp_master_send_io_cap_send:
+61e5 204062ef call tid_initiate 
+61e6 70007c99 jam lmp_io_cap_req ,mem_lmo_opcode2 
+61e7 7009af03 jam sp_stat_key_send ,mem_master_sp_state 
+61e8 20600000 rtn 
+
+sp_master_send_lmp_encapsulated_header:
+61e9 204062ef call tid_initiate 
+61ea 70007c3d jam lmp_encapsulated_header ,mem_lmo_opcode2 
+61eb 7009af07 jam sp_stat_random_send ,mem_master_sp_state 
+61ec 20600000 rtn 
+
+sp_master_commitment_compare:
+61ed da200a4e arg mem_sp_calc_result_high ,rega 
+61ee da400a6e arg mem_sp_confirm_remote ,regb 
+61ef df200010 arg 16 ,loopcnt 
+61f0 20407f88 call string_compare 
+61f1 2022e1f7 branch sp_master_commitment_compare_success ,zero 
+61f2 7009af00 jam sp_stat_null ,mem_master_sp_state 
+61f3 204076da call master_clear_mem_master_sp_flag 
+61f4 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 
+61f5 70007d40 jam lmp_simple_pairing_number ,mem_lmi_opcode2 
+61f6 20205d53 branch reject_lmp_packet 
+
+sp_master_commitment_compare_success:
+61f7 7009af0a jam sp_stat_confirm_calc ,mem_master_sp_state 
+61f8 204076d8 call master_set_mem_master_sp_flag 
+61f9 70007d40 jam lmp_simple_pairing_number ,mem_lmi_opcode2 
+61fa 20205e38 branch accept_lmp_msg 
+
+sp_master_send_lmp_simple_pairing_number:
+61fb 70007c40 jam lmp_simple_pairing_number ,mem_lmo_opcode2 
+61fc 20600000 rtn 
+
+sp_send_lmp_encapsulated_header:
+61fd 70007c3d jam lmp_encapsulated_header ,mem_lmo_opcode2 
+61fe 20600000 rtn 
+
+send_lmp_encapsulated_header:
+61ff 7009b600 jam 0 ,mem_sp_local_key_send_count 
+6200 18007e04 force 4 ,pdata 
+6201 20406298 call msg_send_lmp 
+6202 18007e01 force encapsulated_major_type_p192 ,pdata 
+6203 e0a08000 istore 1 ,contw 
+6204 18007e01 force encapsulated_minor_type_p192 ,pdata 
+6205 e0a08000 istore 1 ,contw 
+6206 18007e30 force encapsulated_len_p192 ,pdata 
+6207 e0a08000 istore 1 ,contw 
+6208 204062fc call check_localsm 
+6209 2020e2b2 branch send_lmp_request ,true 
+620a 202062b0 branch send_lmp_reply 
+
+send_lmp_encapsulated_payload:
+620b 18007e11 force 17 ,pdata 
+620c 20406298 call msg_send_lmp 
+620d 680089b6 fetch 1 ,mem_sp_local_key_send_count 
+620e d8c0462a arg mem_sp_pubkey_local ,contr 
+620f 98c08c00 iadd contr ,contr 
+6210 e8c40000 ifetch 8 ,contr 
+6211 e0a40000 istore 8 ,contw 
+6212 e8c40000 ifetch 8 ,contr 
+6213 e0a40000 istore 8 ,contw 
+6214 680089b6 fetch 1 ,mem_sp_local_key_send_count 
+6215 1fe0fe10 increase 16 ,pdata 
+6216 600089b6 store 1 ,mem_sp_local_key_send_count 
+6217 204062fc call check_localsm 
+6218 2020e2b2 branch send_lmp_request ,true 
+6219 202062b0 branch send_lmp_reply 
+
+sp_send_lmp_simple_pairing_comfirm:
+621a 7009ae06 jam sp_stat_random_recv ,mem_sp_state 
+621b 70007c3f jam lmp_simple_pairing_confirm ,mem_lmo_opcode2 
+621c 20600000 rtn 
+
+send_lmp_simple_pairing_comfirm:
+621d 18007e11 force 17 ,pdata 
+621e 20406298 call msg_send_lmp 
+621f d8c00a4e arg mem_sp_calc_result_high ,contr 
+6220 e8c40000 ifetch 8 ,contr 
+6221 e0a40000 istore 8 ,contw 
+6222 e8c40000 ifetch 8 ,contr 
+6223 e0a40000 istore 8 ,contw 
+6224 202062b0 branch send_lmp_reply 
+
+sp_send_lmp_simple_pairing_number:
+6225 70007c40 jam lmp_simple_pairing_number ,mem_lmo_opcode2 
+6226 20600000 rtn 
+
+send_lmp_simple_pairing_number:
+6227 204062fc call check_localsm 
+6228 2040f612 call sp_local_random_key_generator ,true 
+6229 18007e11 force 17 ,pdata 
+622a 20406298 call msg_send_lmp 
+622b d8c00a1e arg mem_sp_random_local ,contr 
+622c e8c40000 ifetch 8 ,contr 
+622d e0a40000 istore 8 ,contw 
+622e e8c40000 ifetch 8 ,contr 
+622f e0a40000 istore 8 ,contw 
+6230 204062fc call check_localsm 
+6231 2420e2b0 nbranch send_lmp_reply ,true 
+6232 2020e2b2 branch send_lmp_request ,true 
+
+master_sp_sm_end:
+6233 7009af0f jam sp_stat_done ,mem_master_sp_state 
+
+sp_aurand_send:
+6234 204062ef call tid_initiate 
+6235 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 
+6236 20406307 call check_localsm_master 
+6237 2020f64e branch sp_master_key_prarm_push ,true 
+6238 20207658 branch sp_link_key_prarm_push 
+
+master_sp_send_lmp_dhkey_check:
+6239 204062eb call tid_reply 
+
+sp_send_lmp_dhkey_check:
+623a 70007c41 jam lmp_dhkey_check ,mem_lmo_opcode2 
+623b 20600000 rtn 
+
+send_lmp_dhkey_check:
+623c 18007e11 force 17 ,pdata 
+623d 20406298 call msg_send_lmp 
+623e d8c00a4e arg mem_sp_calc_result_high ,contr 
+623f e8c40000 ifetch 8 ,contr 
+6240 e0a40000 istore 8 ,contw 
+6241 e8c40000 ifetch 8 ,contr 
+6242 e0a40000 istore 8 ,contw 
+6243 204062fc call check_localsm 
+6244 2420e2b0 nbranch send_lmp_reply ,true 
+6245 2020e2b2 branch send_lmp_request ,true 
+
+send_lmp_enc_key_size_mask_res:
+6246 18007e03 force 3 ,pdata 
+6247 20406298 call msg_send_lmp 
+6248 5800fffe setarg 0xfffe 
+6249 e0a10000 istore 2 ,contw 
+624a 202062b0 branch send_lmp_reply 
+
+send_lmp_auto_rate:
+624b 202062b2 branch send_lmp_request 
+
+send_lmp_clkoffset_req:
+624c 202062b2 branch send_lmp_request 
+
+send_lmp_quality_of_service:
+624d 202062b2 branch send_lmp_request 
+
+send_lmp_test_activate:
+624e 202062b2 branch send_lmp_request 
+
+send_lmp_comb_key:
+624f 2040630b call generate_random_number 
+6250 da2040a0 arg mem_lap ,rega 
+6251 20406311 call generate_linkkey 
+6252 18007e11 force 17 ,pdata 
+6253 20406298 call msg_send_lmp 
+6254 da200582 arg mem_kinit ,rega 
+6255 da400562 arg mem_random_number ,regb 
+6256 20407352 call xor16 
+6257 2434e2a7 nbranch send_lmp_follow ,master 
+6258 202062ad branch send_lmp_tid 
+
+send_lmp_inrand:
+6259 2040630b call generate_random_number 
+625a da200040 arg mem_plap ,rega 
+625b 20407255 call generate_kinit 
+
+send_lmp_rand:
+625c 18007e11 force 17 ,pdata 
+625d 20406298 call msg_send_lmp 
+625e d8c00562 arg mem_random_number ,contr 
+625f 20407ebf call memcpy16 
+6260 68008055 fetch 1 ,mem_conn_sm 
+6261 c00ce2b2 beq conn_sm_auth_wait ,send_lmp_request 
+6262 c00c62b2 beq conn_sm_pairing_wait ,send_lmp_request 
+6263 202062ad branch send_lmp_tid 
+
+send_lmp_aurand:
+6264 680089b5 fetch 1 ,mem_pairing_auth 
+6265 203a626a branch send_lmp_aurand_notpairing ,blank 
+6266 204062fc call check_localsm 
+6267 2040e2ef call tid_initiate ,true 
+6268 2440e2eb ncall tid_reply ,true 
+6269 2020626b branch send_lmp_aurand_common 
+
+send_lmp_aurand_notpairing:
+626a 204062ef call tid_initiate 
+
+send_lmp_aurand_common:
+626b 2040630b call generate_random_number 
+626c 2020625c branch send_lmp_rand 
+
+send_lmp_sres:
+626d da2040a0 arg mem_lap ,rega 
+626e 20407288 call function_e1 
+626f 18007e05 force 5 ,pdata 
+6270 20406298 call msg_send_lmp 
+6271 68020592 fetch 4 ,mem_input_store 
+6272 e0a20000 istore 4 ,contw 
+6273 d84004d5 arg mem_sres_tid ,temp 
+6274 204062e2 call special_tid_store 
+6275 20407386 call copy_aco 
+6276 204062fc call check_localsm 
+6277 2020e27c branch send_lmp_sres_master ,true 
+6278 7004d801 jam done_encryp ,mem_wait_encryption 
+6279 680089b5 fetch 1 ,mem_pairing_auth 
+627a 207a0000 rtn blank 
+627b 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 
+
+send_lmp_sres_master:
+627c 6800c1bd fetch 1 ,mem_link_key_exists 
+627d 207a0000 rtn blank 
+
+send_lmp_sres_startenc:
+627e 204062fc call check_localsm 
+627f 2420e284 nbranch send_lmp_sres_startenc_slave ,true 
+6280 680084d7 fetch 1 ,mem_auth_enable 
+6281 207a0000 rtn blank 
+6282 70007c0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 
+6283 20600000 rtn 
+
+send_lmp_sres_startenc_slave:
+6284 c6908000 rtnmark0 mark_slave_in_rand_accepted 
+6285 793f8021 set0 mark_slave_in_rand_accepted ,mark 
+6286 70007c0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 
+6287 20600000 rtn 
+
+send_lmp_start_encryption:
+6288 2040630b call generate_random_number 
+6289 2040728b call function_e3 
+628a 18007e11 force 17 ,pdata 
+628b 20406298 call msg_send_lmp 
+628c d8c00562 arg mem_random_number ,contr 
+628d 20407ebf call memcpy16 
+628e 202062ad branch send_lmp_tid 
+
+send_lmp_stop_encryption_req:
+628f 18007e01 force 1 ,pdata 
+6290 20406298 call msg_send_lmp 
+6291 202062ad branch send_lmp_tid 
+
+send_lmp_encryption_key_size_req:
+6292 18007e02 force 2 ,pdata 
+6293 20406298 call msg_send_lmp 
+6294 18007e10 force 16 ,pdata 
+6295 e0a08000 istore 1 ,contw 
+6296 60008054 store 1 ,mem_key_size 
+6297 202062ad branch send_lmp_tid 
+
+msg_send_lmp:
+6298 1fe9fe00 lshift3 pdata ,pdata 
+6299 1fe1fe07 or_into 0x07 ,pdata 
+629a 600084b6 store 1 ,mem_lmo_header_length 
+629b df200011 arg 17 ,loopcnt 
+629c d8a004b8 arg mem_lmo_payload ,contw 
+629d 20407ed4 call clear_mem 
+629e d8a004b8 arg mem_lmo_payload ,contw 
+629f 20600000 rtn 
+
+send_lmpext:
+62a0 1fe1227f and pdata ,0x7f ,rega 
+62a1 7000487f jam lmp_escape ,mem_lmp_to_send 
+62a2 18e27e00 deposit queue 
+62a3 20406298 call msg_send_lmp 
+62a4 1a227e00 deposit rega 
+62a5 e0a08000 istore 1 ,contw 
+62a6 20600000 rtn 
+
+send_lmp_follow:
+62a7 68008048 fetch 1 ,mem_lmp_to_send 
+62a8 1fe3fe00 lshift pdata ,pdata 
+62a9 6808804c fetcht 1 ,mem_state_map 
+62aa 284ffe01 isolate1 smap_lmptid ,temp 
+62ab 7920fe00 setflag true ,0 ,pdata 
+62ac 202062b7 branch send_lmp_exit 
+
+send_lmp_tid:
+62ad 6808804c fetcht 1 ,mem_state_map 
+62ae 18410401 and_into 1 ,temp 
+62af 202062b3 branch send_lmp_end 
+
+send_lmp_reply:
+62b0 18000400 force 0 ,temp 
+62b1 202062b3 branch send_lmp_end 
+
+send_lmp_request:
+62b2 18000401 force 1 ,temp 
+
+send_lmp_end:
+62b3 68008048 fetch 1 ,mem_lmp_to_send 
+62b4 1fe3fe00 lshift pdata ,pdata 
+62b5 7934fe00 setflag master ,0 ,pdata 
+62b6 9842fe00 ixor temp ,pdata 
+
+send_lmp_exit:
+62b7 600084b7 store 1 ,mem_lmo_header_opcode 
+62b8 70004800 jam 0 ,mem_lmp_to_send 
+62b9 204062c7 call lmo_fifo_process_lmo0empty 
+62ba 78347c00 enable user 
+62bb 20600000 rtn 
+
+lmo_fifo_check:
+62bc 6800807c fetch 1 ,mem_lmo_opcode2 
+62bd 207a0000 rtn blank 
+62be 204062c1 call lmo_fifo_process 
+62bf 6800807c fetch 1 ,mem_lmo_opcode2 
+62c0 20600000 rtn 
+
+lmo_fifo_process:
+62c1 47434030 bpatchx patch30_6 ,mem_patch30 
+62c2 68008048 fetch 1 ,mem_lmp_to_send 
+62c3 203a62c7 branch lmo_fifo_process_lmo0empty ,blank 
+62c4 68008078 fetch 1 ,mem_lmo_opcode1 
+62c5 247a0000 nrtn blank 
+62c6 202062d1 branch lmo_fifo_process_lmo2to1 
+
+lmo_fifo_process_lmo0empty:
+62c7 68008078 fetch 1 ,mem_lmo_opcode1 
+62c8 203a62d7 branch lmo_fifo_process_lmo1_empty ,blank 
+62c9 68018078 fetch 3 ,mem_lmo_opcode1 
+62ca 60018048 store 3 ,mem_lmp_to_send 
+62cb 6808807b fetcht 1 ,mem_lmo_tid1 
+62cc 6800804c fetch 1 ,mem_state_map 
+62cd 793ffe01 set0 smap_lmptid ,pdata 
+62ce 9841fe00 ior temp ,pdata 
+62cf 6000804c store 1 ,mem_state_map 
+62d0 70007800 jam 0 ,mem_lmo_opcode1 
+
+lmo_fifo_process_lmo2to1:
+62d1 6800807c fetch 1 ,mem_lmo_opcode2 
+62d2 207a0000 rtn blank 
+62d3 6802007c fetch 4 ,mem_lmo_opcode2 
+62d4 60020078 store 4 ,mem_lmo_opcode1 
+62d5 70007c00 jam 0 ,mem_lmo_opcode2 
+62d6 20600000 rtn 
+
+lmo_fifo_process_lmo1_empty:
+62d7 6800807c fetch 1 ,mem_lmo_opcode2 
+62d8 207a0000 rtn blank 
+62d9 6801807c fetch 3 ,mem_lmo_opcode2 
+62da 60018048 store 3 ,mem_lmp_to_send 
+62db 6808807f fetcht 1 ,mem_lmo_tid2 
+62dc 6800804c fetch 1 ,mem_state_map 
+62dd 793ffe01 set0 smap_lmptid ,pdata 
+62de 9841fe00 ior temp ,pdata 
+62df 6000804c store 1 ,mem_state_map 
+62e0 70007c00 jam 0 ,mem_lmo_opcode2 
+62e1 20600000 rtn 
+
+special_tid_store:
+62e2 4743c030 bpatchx patch30_7 ,mem_patch30 
+62e3 6800804c fetch 1 ,mem_state_map 
+62e4 1fe22600 copy pdata ,regc 
+62e5 e8408000 ifetch 1 ,temp 
+62e6 20405e52 call pop_tid_follow 
+62e7 204062a7 call send_lmp_follow 
+62e8 1a627e00 copy regc ,pdata 
+62e9 6000804c store 1 ,mem_state_map 
+62ea 20600000 rtn 
+
+tid_reply:
+62eb 6808804c fetcht 1 ,mem_state_map 
+62ec 793f8400 set0 smap_lmptidinit ,temp 
+62ed 6008804c storet 1 ,mem_state_map 
+62ee 20600000 rtn 
+
+tid_initiate:
+62ef 6808804c fetcht 1 ,mem_state_map 
+62f0 79200400 set1 smap_lmptidinit ,temp 
+62f1 6008804c storet 1 ,mem_state_map 
+62f2 20600000 rtn 
+
+tid_check:
+62f3 7d34fe01 nsetflag master ,smap_lmptid ,pdata 
+62f4 6808804c fetcht 1 ,mem_state_map 
+62f5 9842fe00 ixor temp ,pdata 
+62f6 2feffe01 isolate1 smap_lmptid ,pdata 
+62f7 20600000 rtn 
+
+tid_set_reply:
+62f8 6800804c fetch 1 ,mem_state_map 
+62f9 7934fe01 setflag master ,smap_lmptid ,pdata 
+62fa 6000804c store 1 ,mem_state_map 
+62fb 20600000 rtn 
+
+check_localsm:
+62fc 680089b4 fetch 1 ,mem_sp_localsm 
+62fd 2fe0fe01 compare local_statemachine ,pdata ,0x7f 
+62fe 20600000 rtn 
+
+setlocalsm_master:
+62ff 680089b4 fetch 1 ,mem_sp_localsm 
+6300 79207e07 set1 7 ,pdata 
+6301 600089b4 store 1 ,mem_sp_localsm 
+6302 20600000 rtn 
+
+setlocalsm_slave:
+6303 680089b4 fetch 1 ,mem_sp_localsm 
+6304 793ffe07 set0 7 ,pdata 
+6305 600089b4 store 1 ,mem_sp_localsm 
+6306 20600000 rtn 
+
+check_localsm_master:
+6307 680089b4 fetch 1 ,mem_sp_localsm 
+6308 2feffe07 isolate1 7 ,pdata 
+6309 600089b4 store 1 ,mem_sp_localsm 
+630a 20600000 rtn 
+
+generate_random_number:
+630b d8a00562 arg mem_random_number ,contw 
+
+generate_random:
+630c 18007210 force 16 ,loopcnt 
+
+generate_random_another:
+
+generate_random_loop:
+630d 180a7e00 random pdata 
+630e e0a08000 istore 1 ,contw 
+630f c200630d loop generate_random_another 
+6310 20600000 rtn 
+
+generate_linkkey:
+6311 20407259 call function_e21 
+6312 da2041be arg mem_link_key ,rega 
+6313 da400592 arg mem_input_store ,regb 
+6314 ea240000 ifetch 8 ,rega 
+6315 68088030 fetcht 1 ,mem_state 
+6316 7d3a0406 nsetflag blank ,state_combkey ,temp 
+6317 60088030 storet 1 ,mem_state 
+6318 1a220a00 copy rega ,contw 
+6319 20407352 call xor16 
+631a 202021c4 branch generate_linkkey_continue 
+
+process_conn_sm:
+631b 47444031 bpatchx patch31_0 ,mem_patch31 
+631c 204062bc call lmo_fifo_check 
+631d 247a0000 nrtn blank 
+
+process_conn_sm_continue:
+631e 68008055 fetch 1 ,mem_conn_sm 
+631f 207a0000 rtn blank 
+6320 c002636f beq conn_sm_send_conn_req ,host_create_conn_send_conn_req 
+6321 c002e374 beq conn_sm_wait_conn_accept ,host_create_conn_wait_accept 
+6322 c0016366 beq conn_sm_send_features ,host_create_conn_send_features 
+6323 c001e37c beq conn_sm_wait_features_res ,host_create_conn_waiting 
+6324 c0076369 beq conn_sm_send_switch ,host_create_conn_send_switch 
+6325 c0036398 beq conn_sm_auth_pair ,host_create_conn_auth_pair 
+6326 c003e3b0 beq conn_sm_auth_pair_wait ,host_create_conn_auth_pair_wait 
+6327 c004e3b1 beq conn_sm_encrypt ,host_create_conn_encrypt 
+6328 c00563ba beq conn_sm_encrypt_wait ,host_create_conn_encrypt_wait 
+6329 c005e3be beq conn_sm_encrypt_wait_clear ,host_create_conn_encrypt_wait_clear 
+632a c0066386 beq conn_sm_send_setup_complete ,host_create_conn_send_setup_complete 
+632b c006e389 beq conn_sm_wait_setup_complete ,host_create_conn_wait_setup_complete 
+632c c007e38f beq conn_sm_detach_delay ,host_create_conn_master_detach 
+632d c0096359 beq conn_sm_send_version ,host_create_conn_send_version 
+632e c009e37c beq conn_sm_wait_version ,host_create_conn_waiting 
+632f c008635c beq conn_sm_wait_switch_after_host_connection ,host_creat_conn_wait_switch 
+6330 c00a6356 beq conn_sm_send_features_ext ,host_creat_conn_send_feat_ext 
+6331 c00ae37c beq conn_sm_wait_features_ext ,host_create_conn_waiting 
+6332 c00b6350 beq conn_sm_pairing ,host_create_conn_pairing 
+6333 c00c6355 beq conn_sm_pairing_wait ,host_create_conn_pairing_wait 
+6334 c00be349 beq conn_sm_auth ,host_create_conn_auth 
+6335 c00ce34f beq conn_sm_auth_wait ,host_create_conn_auth_wait 
+6336 c00d633a beq conn_sm_done ,host_create_conn_done 
+6337 c00de344 beq conn_sm_wait_done ,host_create_conn_done_wait 
+6338 70005500 jam conn_sm_standby ,mem_conn_sm 
+6339 20600000 rtn 
+
+host_create_conn_done:
+633a 680084d1 fetch 1 ,mem_lmp_conn_state 
+633b c4010000 rtnbit0 received_setup_complete 
+633c c4018000 rtnbit0 sent_setup_complete 
+633d 70005500 jam conn_sm_standby ,mem_conn_sm 
+633e 20406340 call host_conn_judge_encrypt 
+633f 20206cef branch scheduler_start_upper_sm 
+
+host_conn_judge_encrypt:
+6340 6800816d fetch 1 ,mem_connection_options 
+6341 c4008000 rtnbit0 connection_encrypt 
+6342 7000550a jam conn_sm_encrypt_wait ,mem_conn_sm 
+6343 20600000 rtn 
+
+host_create_conn_done_wait:
+6344 d8e00007 arg enpt_delay_timer ,queue 
+6345 20407f16 call timer_check 
+6346 247a0000 nrtn blank 
+6347 7000551a jam conn_sm_done ,mem_conn_sm 
+6348 20600000 rtn 
+
+host_create_conn_auth:
+6349 6800816d fetch 1 ,mem_connection_options 
+634a 793ffe00 set0 connection_auth ,pdata 
+634b 6000816d store 1 ,mem_connection_options 
+634c 70005519 jam conn_sm_auth_wait ,mem_conn_sm 
+634d 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 
+634e 20600000 rtn 
+
+host_create_conn_auth_wait:
+634f 20600000 rtn 
+
+host_create_conn_pairing:
+6350 680084d4 fetch 1 ,mem_pincode_state 
+6351 c1810000 rtnne pincode_state_pincode_ready 
+6352 204063c0 call host_auth 
+6353 70005518 jam conn_sm_pairing_wait ,mem_conn_sm 
+6354 20600000 rtn 
+
+host_create_conn_pairing_wait:
+6355 20600000 rtn 
+
+host_creat_conn_send_feat_ext:
+6356 70005515 jam conn_sm_wait_features_ext ,mem_conn_sm 
+6357 70007c83 jam lmp_ext_features_req ,mem_lmo_opcode2 
+6358 20600000 rtn 
+
+host_create_conn_send_version:
+6359 70005513 jam conn_sm_wait_version ,mem_conn_sm 
+635a 70007c25 jam lmp_version_req ,mem_lmo_opcode2 
+635b 20600000 rtn 
+
+host_creat_conn_wait_switch:
+635c 6800c55b fetch 1 ,mem_switch_flag 
+635d c1000000 rtneq switch_flag_init 
+635e c000e364 beq switch_flag_accept ,host_create_conn_switch_accept 
+635f d8e00006 arg switch_wait_timer ,queue 
+6360 20407f16 call timer_check 
+6361 247a0000 nrtn blank 
+6362 70455b00 jam switch_flag_init ,mem_switch_flag 
+6363 2020637d branch host_create_conn_switch 
+
+host_create_conn_switch_accept:
+6364 20748000 rtn master 
+6365 20206398 branch host_create_conn_auth_pair 
+
+host_create_conn_send_features:
+6366 70005503 jam conn_sm_wait_features_res ,mem_conn_sm 
+6367 70007c27 jam lmp_features_req ,mem_lmo_opcode2 
+6368 20600000 rtn 
+
+host_create_conn_send_switch:
+6369 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 
+636a 79200003 set1 mark_switch_initiated ,mark 
+636b 70005505 jam conn_sm_wait_conn_accept ,mem_conn_sm 
+636c 580001ff setarg 0x1ff 
+636d 600104d2 store 2 ,mem_soft_timer 
+636e 20600000 rtn 
+
+host_create_conn_send_conn_req:
+636f 70005505 jam conn_sm_wait_conn_accept ,mem_conn_sm 
+6370 7004d2ff jam 0xff ,mem_soft_timer 
+6371 793f8022 set0 mark_reconn_recieve_switch ,mark 
+6372 70007c33 jam lmp_host_connection_req ,mem_lmo_opcode2 
+6373 20205d04 branch init_lmp_reinit 
+
+host_create_conn_wait_accept:
+6374 c6110000 rtnmark1 mark_reconn_recieve_switch 
+6375 680104d2 fetch 2 ,mem_soft_timer 
+6376 1fe67e01 sub pdata ,1 ,pdata 
+6377 2022e37a branch host_create_conn_resend ,zero 
+6378 600104d2 store 2 ,mem_soft_timer 
+6379 20600000 rtn 
+
+host_create_conn_resend:
+637a 7000550e jam conn_sm_send_switch ,mem_conn_sm 
+637b 20600000 rtn 
+
+host_create_conn_waiting:
+637c 20600000 rtn 
+
+host_create_conn_switch:
+637d 680084d1 fetch 1 ,mem_lmp_conn_state 
+637e c4018000 rtnbit0 sent_setup_complete 
+637f c4010000 rtnbit0 received_setup_complete 
+6380 6800816d fetch 1 ,mem_connection_options 
+6381 793ffe02 set0 connection_switch ,pdata 
+6382 6000816d store 1 ,mem_connection_options 
+6383 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 
+6384 70005510 jam conn_sm_wait_switch_after_host_connection ,mem_conn_sm 
+6385 20600000 rtn 
+
+host_create_conn_send_setup_complete:
+6386 7000550d jam conn_sm_wait_setup_complete ,mem_conn_sm 
+6387 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 
+6388 20600000 rtn 
+
+host_create_conn_wait_setup_complete:
+6389 680084d1 fetch 1 ,mem_lmp_conn_state 
+638a c4010000 rtnbit0 received_setup_complete 
+638b 70005500 jam conn_sm_standby ,mem_conn_sm 
+638c 20600000 rtn 
+
+host_create_conn_wait_setup_complete_rtn:
+638d 70005506 jam conn_sm_auth_pair ,mem_conn_sm 
+638e 20600000 rtn 
+
+host_create_conn_master_detach:
+638f 680084d2 fetch 1 ,mem_soft_timer 
+6390 1fe0ffff increase -1 ,pdata 
+6391 203a6394 branch host_create_conn_send_detach ,blank 
+6392 600084d2 store 1 ,mem_soft_timer 
+6393 20600000 rtn 
+
+host_create_conn_send_detach:
+6394 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+6395 7004ca16 jam local_host ,mem_disconn_reason_send 
+6396 70005500 jam 0 ,mem_conn_sm 
+6397 20600000 rtn 
+
+host_create_conn_auth_pair:
+6398 6800816d fetch 1 ,mem_connection_options 
+6399 c281637d bbit1 connection_switch ,host_create_conn_switch 
+639a c280639d bbit1 connection_auth ,host_create_conn_auth_pair_true 
+
+host_create_conn_sm_done:
+639b 7000551a jam conn_sm_done ,mem_conn_sm 
+639c 20600000 rtn 
+
+host_create_conn_auth_pair_true:
+639d 6800c1bd fetch 1 ,mem_link_key_exists 
+639e 203a63a9 branch host_create_conn_auth_pair_nokey ,blank 
+639f 680084d1 fetch 1 ,mem_lmp_conn_state 
+63a0 c4018000 rtnbit0 sent_setup_complete 
+63a1 c4010000 rtnbit0 received_setup_complete 
+63a2 680204e9 fetch 4 ,mem_aurand_send_delay_time 
+63a3 d8400064 arg 100 ,temp 
+63a4 98408400 iadd temp ,temp 
+63a5 1c427e00 copy clkn_bt ,pdata 
+63a6 98467c00 isub temp ,null 
+63a7 24610000 nrtn positive 
+63a8 20206349 branch host_create_conn_auth 
+
+host_create_conn_auth_pair_nokey:
+63a9 70005516 jam conn_sm_pairing ,mem_conn_sm 
+63aa 70468904 jam 4 ,mem_pin_length 
+63ab 58003030 setarg 0x3030 
+63ac 6001468a store 2 ,mem_pin 
+63ad e0a10000 istore 2 ,contw 
+63ae 7004d402 jam pincode_state_pincode_ready ,mem_pincode_state 
+63af 20206350 branch host_create_conn_pairing 
+
+host_create_conn_auth_pair_wait:
+63b0 20600000 rtn 
+
+host_create_conn_encrypt:
+63b1 6800816d fetch 1 ,mem_connection_options 
+63b2 c280e3b5 bbit1 connection_encrypt ,host_create_conn_encrypt_start 
+63b3 7000551a jam conn_sm_done ,mem_conn_sm 
+63b4 20600000 rtn 
+
+host_create_conn_encrypt_start:
+63b5 6800816d fetch 1 ,mem_connection_options 
+63b6 793ffe01 set0 connection_encrypt ,pdata 
+63b7 6000816d store 1 ,mem_connection_options 
+63b8 70007c0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 
+63b9 20600000 rtn 
+
+host_create_conn_encrypt_wait:
+63ba 680084d8 fetch 1 ,mem_wait_encryption 
+63bb 207a0000 rtn blank 
+63bc 70005500 jam conn_sm_standby ,mem_conn_sm 
+63bd 202063b5 branch host_create_conn_encrypt_start 
+
+host_create_conn_encrypt_wait_clear:
+63be 7000550c jam conn_sm_send_setup_complete ,mem_conn_sm 
+63bf 20600000 rtn 
+
+host_auth:
+63c0 6800804b fetch 1 ,mem_op 
+63c1 c28163c5 bbit1 op_inrand_req ,remote_auth 
+63c2 204062ef call tid_initiate 
+63c3 70007c08 jam lmp_in_rand ,mem_lmo_opcode2 
+63c4 20204d04 branch cmd_exit 
+
+remote_auth:
+63c5 6800804b fetch 1 ,mem_op 
+63c6 793ffe02 set0 op_inrand_req ,pdata 
+63c7 6000804b store 1 ,mem_op 
+63c8 20406001 call lmp_accept_inrand 
+63c9 204062f8 call tid_set_reply 
+63ca 20204d04 branch cmd_exit 
+
+pincode_reinit:
+63cb 58000004 setarg 4 
+63cc 6000c689 store 1 ,mem_pin_length 
+63cd 58003030 setarg 0x3030 
+63ce e0a10000 istore 2 ,contw 
+63cf e0a10000 istore 2 ,contw 
+63d0 20600000 rtn 
+
+twspi_reset:
+63d1 47464031 bpatchx patch31_4 ,mem_patch31 
+63d2 68108073 hfetch 1 ,core_gpio_oe3 
+63d3 d8400006 arg 0x06 ,temp 
+63d4 9841fe00 ior temp ,pdata 
+63d5 60108073 hstore 1 ,core_gpio_oe3 
+63d6 68108077 hfetch 1 ,core_gpio_out3 
+63d7 9841fe00 ior temp ,pdata 
+63d8 60108077 hstore 1 ,core_gpio_out3 
+63d9 204063ee call twspi_disable 
+63da 68108077 hfetch 1 ,core_gpio_out3 
+63db 793ffe01 set0 1 ,pdata 
+63dc 793ffe02 set0 2 ,pdata 
+63dd 60108077 hstore 1 ,core_gpio_out3 
+63de 2000001e nop 30 
+63df 202063f2 branch twspi_enable 
+
+twspi_reset2:
+63e0 68108073 hfetch 1 ,core_gpio_oe3 
+63e1 d84000c0 arg 0xc0 ,temp 
+63e2 9841fe00 ior temp ,pdata 
+63e3 60108073 hstore 1 ,core_gpio_oe3 
+63e4 68108077 hfetch 1 ,core_gpio_out3 
+63e5 9841fe00 ior temp ,pdata 
+63e6 60108077 hstore 1 ,core_gpio_out3 
+63e7 204063ee call twspi_disable 
+63e8 68108077 hfetch 1 ,core_gpio_out3 
+63e9 793ffe06 set0 6 ,pdata 
+63ea 793ffe07 set0 7 ,pdata 
+63eb 60108077 hstore 1 ,core_gpio_out3 
+63ec 2000001e nop 30 
+63ed 202063f6 branch twspi_enable2 
+
+twspi_disable:
+63ee 68108081 hfetch 1 ,core_gpio_sel1 
+63ef 1fe17efc and pdata ,0xfc ,pdata 
+63f0 60108081 hstore 1 ,core_gpio_sel1 
+63f1 20600000 rtn 
+
+twspi_enable:
+63f2 68108081 hfetch 1 ,core_gpio_sel1 
+63f3 1fe1fe01 or pdata ,0x01 ,pdata 
+63f4 60108081 hstore 1 ,core_gpio_sel1 
+63f5 20600000 rtn 
+
+twspi_enable2:
+63f6 68108081 hfetch 1 ,core_gpio_sel1 
+63f7 1fe1fe03 or pdata ,0x03 ,pdata 
+63f8 793ffe04 set0 4 ,pdata 
+63f9 60108081 hstore 1 ,core_gpio_sel1 
+63fa 20600000 rtn 
+
+sensor_read:
+63fb 1fe22400 copy pdata ,regb 
+63fc 2040640f call spi_ncs_enable 
+63fd 20000064 nop 100 
+63fe 1a427e00 copy regb ,pdata 
+63ff 20406414 call twspi_read 
+6400 1fe22400 copy pdata ,regb 
+6401 20406411 call spi_ncs_disable 
+6402 20000064 nop 100 
+6403 1a427e00 copy regb ,pdata 
+6404 20600000 rtn 
+
+sensor_write:
+6405 1fe22400 copy pdata ,regb 
+6406 2040640f call spi_ncs_enable 
+6407 20000064 nop 100 
+6408 1a427e00 copy regb ,pdata 
+6409 20406413 call twspi_write 
+640a 20406411 call spi_ncs_disable 
+640b 20000064 nop 100 
+640c 20600000 rtn 
+
+spi_ncs_gpio_init:
+640d 6808c214 fetcht 1 ,mem_spi_ncs_gpio 
+640e 2020680e branch gpio_config_output 
+
+spi_ncs_enable:
+640f 6808c214 fetcht 1 ,mem_spi_ncs_gpio 
+6410 20206829 branch gpio_out_active 
+
+spi_ncs_disable:
+6411 6808c214 fetcht 1 ,mem_spi_ncs_gpio 
+6412 20206825 branch gpio_out_inactive 
+
+twspi_write:
+6413 202064ec branch spid_write_reg 
+
+twspi_read:
+6414 202064f3 branch spid_read_reg 
+
+read_function_aes:
+6415 24346419 nbranch read_function ,user 
+6416 68108085 hfetch 1 ,core_gpio_key2 
+6417 1fe1fe02 or_into 0x2 ,pdata 
+6418 60108085 hstore 1 ,core_gpio_key2 
+
+read_function:
+6419 18427c00 copy temp ,null 
+641a 2022e41c branch read_fuction_zero ,zero 
+641b 1a627a00 copy regc ,pc 
+
+read_fuction_zero:
+641c 2fcc0000 isolate0 0 ,null 
+641d 202064b9 branch set_ucode_status 
+
+get_block_header:
+641e 18000404 force 4 ,temp 
+
+get_block_header0:
+641f da2001fe arg mem_ucode_buf ,rega 
+6420 68108085 hfetch 1 ,core_gpio_key2 
+6421 1fe17efd and_into 0xfd ,pdata 
+6422 60108085 hstore 1 ,core_gpio_key2 
+6423 20406419 call read_function 
+6424 da2055aa arg 0x55aa ,rega 
+6425 680101fe fetch 2 ,mem_ucode_buf 
+6426 e8c90000 ifetcht 2 ,contr 
+6427 9a267c00 isub rega ,null 
+6428 20600000 rtn 
+
+read_first_block:
+6429 d8400002 arg 2 ,temp 
+642a da200204 arg mem_ucode_ptr ,rega 
+642b 20406419 call read_function 
+642c 68010204 fetch 2 ,mem_ucode_ptr 
+642d 600101f7 store 2 ,mem_addr_mi 
+642e 20546430 call get_iv ,user 
+642f 20600000 rtn 
+
+get_iv:
+6430 d8400010 arg 16 ,temp 
+6431 da200206 arg mem_ucode_keybuf ,rega 
+6432 68108085 hfetch 1 ,core_gpio_key2 
+6433 1fe17efd and_into 0xfd ,pdata 
+6434 60108085 hstore 1 ,core_gpio_key2 
+6435 20406419 call read_function 
+6436 d8c00206 arg mem_ucode_keybuf ,contr 
+6437 df200010 arg 16 ,loopcnt 
+6438 20407478 call aes_load_data 
+6439 20407428 call aes_init 
+643a 20407491 call aes_clear_data 
+643b 20207422 branch do_aes_cbc 
+
+load_storage:
+643c 7856fc00 disable match 
+643d 2040641e call get_block_header 
+643e 24628000 nrtn zero 
+643f 7836fc00 enable match 
+6440 70802380 jam 0x80 ,core_ucode_ctrl 
+6441 70802200 jam 0 ,core_ucode_hi 
+6442 70802400 jam 0 ,core_ucode_low 
+6443 da208025 arg core_ucode_data ,rega 
+6444 20406415 call read_function_aes 
+6445 70802300 jam 0x0 ,core_ucode_ctrl 
+
+load_storage_loop:
+6446 d8400006 arg 6 ,temp 
+6447 2040641f call get_block_header0 
+6448 24628000 nrtn zero 
+6449 e8c10000 ifetch 2 ,contr 
+644a 98002200 iforce rega 
+644b 20406419 call read_function 
+644c 20206446 branch load_storage_loop 
+
+reload_eeprom:
+644d 20407f99 call clean_mem 
+644e 58001000 setarg 0x1000 
+644f 600101f7 store 2 ,mem_addr_mi 
+6450 da6065e5 arg iicd_read_eep ,regc 
+6451 df200002 arg 2 ,loopcnt 
+
+reload_eeprom_loop:
+6452 2040641e call get_block_header 
+6453 24628000 nrtn zero 
+6454 680101f7 fetch 2 ,mem_addr_mi 
+6455 1ff0fe00 byteswap pdata ,pdata 
+6456 9840fe00 iadd temp ,pdata 
+6457 1ff0fe00 byteswap pdata ,pdata 
+6458 600101f7 store 2 ,mem_addr_mi 
+6459 c2006452 loop reload_eeprom_loop 
+645a 20206446 branch load_storage_loop 
+
+loadcode:
+645b 20407f99 call clean_mem 
+645c 78547c00 disable user 
+645d 2040666a call otp_enable_chgpump 
+645e 58000000 setarg otp_ucode_flag 
+645f da2001f3 arg mem_otp_ucode_flag ,rega 
+6460 d8400002 arg 2 ,temp 
+6461 204066b3 call otpd_read_data 
+6462 680101f3 fetch 2 ,mem_otp_ucode_flag 
+6463 c303e46e bbit0 otp_uflag_aes ,loadcode_otp 
+6464 70805025 jam 0x25 ,core_clkoff 
+6465 580007f0 setarg otp_ucode_aeskey 
+6466 da200206 arg mem_ucode_keybuf ,rega 
+6467 d8400010 arg 16 ,temp 
+6468 204066b3 call otpd_read_data 
+6469 70800608 jam lock_otp ,core_misc_ctrl 
+646a 7920002b set1 mark_otp_encrypt ,mark 
+646b d8c00206 arg mem_ucode_keybuf ,contr 
+646c 20407484 call load_key 
+646d 78347c00 enable user 
+
+loadcode_otp:
+646e 7041da00 jam 0 ,mem_loadcode_times 
+
+loadcode_otp_2:
+646f 204064b0 call loadcode_check_times 
+6470 680101f3 fetch 2 ,mem_otp_ucode_flag 
+6471 1ff0fe00 byteswap pdata ,pdata 
+6472 d84007ff arg 0x7ff ,temp 
+6473 98417e00 iand temp ,pdata 
+6474 2022e47b branch loadcode_iic ,zero 
+6475 2040666f call otp_set_addr 
+6476 da6066b8 arg otpd_read_code ,regc 
+6477 20546430 call get_iv ,user 
+6478 2040643c call load_storage 
+6479 680081f2 fetch 1 ,mem_ucode_status 
+647a c300646f bbit0 0 ,loadcode_otp_2 
+
+loadcode_iic:
+647b 2040666d call otp_disable_chgpump 
+647c 7041da00 jam 0 ,mem_loadcode_times 
+
+loadcode_iic_2:
+647d 204064b0 call loadcode_check_times 
+647e 204065c2 call clear_eeprom_size_2k 
+647f 680081f3 fetch 1 ,mem_otp_ucode_flag 
+6480 c283648e bbit1 otp_uflag_skip_eep ,loadcode_spi 
+6481 204064aa call loadcode_iic_by_eeprom 
+6482 2436e486 nbranch loadcode_iic_eeprom_2k ,match 
+6483 680081f2 fetch 1 ,mem_ucode_status 
+6484 c300647d bbit0 0 ,loadcode_iic_2 
+6485 2020649b branch loadcode_hci 
+
+loadcode_iic_eeprom_2k:
+6486 204065bf call set_eeprom_size_2k 
+6487 680081f3 fetch 1 ,mem_otp_ucode_flag 
+6488 c283648e bbit1 otp_uflag_skip_eep ,loadcode_spi 
+6489 204064aa call loadcode_iic_by_eeprom 
+648a 2436e48e nbranch loadcode_spi ,match 
+648b 680081f2 fetch 1 ,mem_ucode_status 
+648c c300647d bbit0 0 ,loadcode_iic_2 
+648d 2020649b branch loadcode_hci 
+
+loadcode_spi:
+648e 7041da00 jam 0 ,mem_loadcode_times 
+
+loadcode_spi_2:
+648f 204064b0 call loadcode_check_times 
+6490 680081f3 fetch 1 ,mem_otp_ucode_flag 
+6491 c282e49b bbit1 otp_uflag_skip_flash ,loadcode_hci 
+6492 58000000 setarg 0x0 
+6493 600181f6 store 3 ,mem_addr_hi 
+6494 20406502 call spid_init_flash 
+6495 da606578 arg spid_load_flash ,regc 
+6496 20406429 call read_first_block 
+6497 2040643c call load_storage 
+6498 2436e49b nbranch loadcode_hci ,match 
+6499 680081f2 fetch 1 ,mem_ucode_status 
+649a c300648f bbit0 0 ,loadcode_spi_2 
+
+loadcode_hci:
+649b c515e49d bmark1 mark_otp_encrypt ,loadcode_hci_enc 
+649c 204064a3 call clear_key_buf 
+
+loadcode_hci_enc:
+649d 680081f3 fetch 1 ,mem_otp_ucode_flag 
+649e c30264a3 bbit0 otp_uflag_hci ,clear_key_buf 
+649f 70805021 jam 0x21 ,core_clkoff 
+64a0 20404c0e call hci_init 
+
+loadcode_hci_loop:
+64a1 20404c2e call hci_rx_packet 
+64a2 202064a1 branch loadcode_hci_loop 
+
+clear_key_buf:
+64a3 58000000 setarg 0 
+64a4 60040206 store 8 ,mem_ucode_keybuf 
+64a5 6004020e store 8 ,mem_ucode_keybuf + 8 
+64a6 18007004 force regidx_key ,regext_index 
+64a7 20407492 call aes_clear 
+64a8 70805021 jam 0x21 ,core_clkoff 
+64a9 20600000 rtn 
+
+loadcode_iic_by_eeprom:
+64aa 58000000 setarg 0x0 
+64ab 600101f7 store 2 ,mem_addr_mi 
+64ac da6065e5 arg iicd_read_eep ,regc 
+64ad 204065a3 call iicd_init_12m 
+64ae 20406429 call read_first_block 
+64af 2020643c branch load_storage 
+
+loadcode_check_times:
+64b0 6800c1da fetch 1 ,mem_loadcode_times 
+64b1 1fe0fe01 increase 1 ,pdata 
+64b2 1fe67c03 sub pdata ,3 ,null 
+64b3 242164b6 nbranch loadcode_error ,positive 
+64b4 6000c1da store 1 ,mem_loadcode_times 
+64b5 20600000 rtn 
+
+loadcode_error:
+64b6 204064a3 call clear_key_buf 
+64b7 20407fa1 call ice_break 
+64b8 20600000 rtn 
+
+set_ucode_status:
+64b9 680081f2 fetch 1 ,mem_ucode_status 
+64ba 1fe3fe00 lshift pdata ,pdata 
+64bb 7920fe00 setflag true ,0 ,pdata 
+64bc 2a2c000f isolate0 15 ,rega 
+64bd 20608000 rtn true 
+64be 600081f2 store 1 ,mem_ucode_status 
+64bf 20600000 rtn 
+
+decrypt_code:
+64c0 68108085 hfetch 1 ,core_gpio_key2 
+64c1 c4008000 rtnbit0 1 
+64c2 202064c6 branch decrypt_code_skip 
+
+decrypt_code_loop:
+64c3 6810812c hfetch 1 ,core_dma_status 
+64c4 afefffff qisolate1 pdata 
+64c5 20608000 rtn true 
+
+decrypt_code_skip:
+64c6 68108108 hfetch 1 ,core_misc_status 
+64c7 c300e4c3 bbit0 1 ,decrypt_code_loop 
+64c8 20407422 call do_aes_cbc 
+64c9 202064c3 branch decrypt_code_loop 
+
+load_ucode:
+64ca 68014199 fetch 2 ,mem_patch_ptr 
+64cb 207a0000 rtn blank 
+64cc 70802380 jam 0x80 ,core_ucode_ctrl 
+64cd 70802200 jam 0 ,core_ucode_hi 
+64ce 70802400 jam 0 ,core_ucode_low 
+64cf 6809419b fetcht 2 ,mem_patch_len 
+64d0 184bf200 lshift2 temp ,loopcnt 
+64d1 98000c00 iforce contr 
+
+load_ucode_loop:
+64d2 e8c08000 ifetch 1 ,contr 
+64d3 60108025 hstore 1 ,core_ucode_data 
+64d4 c20064d2 loop load_ucode_loop 
+64d5 70802300 jam 0x0 ,core_ucode_ctrl 
+64d6 20600000 rtn 
+
+spid_init:
+64d7 4746c031 bpatchx patch31_5 ,mem_patch31 
+64d8 204064dd call spid_init_common 
+64d9 202063f2 branch twspi_enable 
+
+spid_init2:
+64da 204064dd call spid_init_common 
+64db 204063ee call twspi_disable 
+64dc 202063f6 branch twspi_enable2 
+
+spid_init_common:
+64dd 6800c212 fetch 1 ,mem_spi_init_clk 
+64de 60108086 hstore 1 ,core_spid_ctrl 
+64df 6800c213 fetch 1 ,mem_spi_init_delay_time 
+64e0 60108087 hstore 1 ,core_spid_delay 
+64e1 580001f5 setarg mem_spid_tbuf 
+64e2 6011008a hstore 2 ,core_spid_txaddr 
+64e3 580001fa setarg mem_spid_rbuf 
+64e4 6011008c hstore 2 ,core_spid_rxaddr 
+64e5 202063ee branch twspi_disable 
+
+spid_reset:
+64e6 68108086 hfetch 1 ,core_spid_ctrl 
+64e7 79207e07 set1 7 ,pdata 
+64e8 60108086 hstore 1 ,core_spid_ctrl 
+64e9 793ffe07 set0 7 ,pdata 
+64ea 60108086 hstore 1 ,core_spid_ctrl 
+64eb 20600000 rtn 
+
+spid_write_reg:
+64ec 79207e07 set1 7 ,pdata 
+64ed 600101f5 store 2 ,mem_spid_tbuf 
+64ee 47474031 bpatchx patch31_6 ,mem_patch31 
+64ef 70808802 jam 2 ,core_spid_txlen 
+64f0 70808e00 jam 0 ,core_spid_rxlen 
+64f1 70800602 jam spid_start ,core_misc_ctrl 
+64f2 202064fc branch wait_spid_done 
+
+spid_read_reg:
+64f3 18000401 force 1 ,temp 
+
+spid_read_regs:
+64f4 600081f5 store 1 ,mem_spid_tbuf 
+64f5 4747c031 bpatchx patch31_7 ,mem_patch31 
+64f6 70808801 jam 1 ,core_spid_txlen 
+64f7 6019008e hstoret 2 ,core_spid_rxlen 
+64f8 70800602 jam spid_start ,core_misc_ctrl 
+64f9 204064fc call wait_spid_done 
+64fa 680081fa fetch 1 ,mem_spid_rbuf 
+64fb 20600000 rtn 
+
+wait_spid_done:
+64fc 680140d6 fetch 2 ,mem_afh_error_total 
+64fd 1fe0fe01 increase 1 ,pdata 
+64fe 600140d6 store 2 ,mem_afh_error_total 
+64ff 6810812c hfetch 1 ,core_dma_status 
+6500 c301e4fc bbit0 spid_done ,wait_spid_done 
+6501 20600000 rtn 
+
+spid_init_flash:
+6502 70808640 jam 0x40 ,core_spid_ctrl 
+6503 70808700 jam 0x0 ,core_spid_delay 
+6504 68108081 hfetch 1 ,core_gpio_sel1 
+6505 793ffe00 set0 0 ,pdata 
+6506 79207e01 set1 1 ,pdata 
+6507 60108081 hstore 1 ,core_gpio_sel1 
+6508 58000000 setarg 0 
+6509 600201f5 store 4 ,mem_spid_tbuf 
+650a 20600000 rtn 
+
+spid_unlock_flash:
+650b 58000000 setarg 0 
+650c 6011008e hstore 2 ,core_spid_rxlen 
+650d 58000001 setarg 1 
+650e 60110088 hstore 2 ,core_spid_txlen 
+650f 580001f5 setarg mem_spid_tbuf 
+6510 6011008a hstore 2 ,core_spid_txaddr 
+6511 7001f506 jam 6 ,mem_spid_tbuf 
+6512 70800602 jam spid_start ,core_misc_ctrl 
+6513 202064fc branch wait_spid_done 
+
+flash_write:
+6514 78547c00 disable user 
+6515 1fe22400 copy pdata ,regb 
+6516 6800c239 fetch 1 ,mem_spi_write_flash_sm 
+6517 c1800000 rtnne flash_sm_no_buys 
+6518 78347c00 enable user 
+6519 1a427e00 copy regb ,pdata 
+651a 20206522 branch flash_write_start 
+
+flash_write_spi_sm_timer:
+651b 6800c239 fetch 1 ,mem_spi_write_flash_sm 
+651c c000e522 beq flash_sm_start ,flash_write_start 
+651d c0016528 beq flash_sm_erase_sector ,flash_erase_sector 
+651e c001e530 beq flash_sm_wait_erase_sector ,flash_wait_erase_sector 
+651f c0026537 beq flash_sm_write_data ,flash_write_data 
+6520 c002e53d beq flash_sm_wait_write_data ,flash_wait_write_data 
+6521 20600000 rtn 
+
+flash_write_start:
+6522 6001c232 store 3 ,mem_spi_write_addr 
+6523 1a227e00 copy rega ,pdata 
+6524 60014235 store 2 ,mem_spi_write_ptr 
+6525 60094237 storet 2 ,mem_spi_write_len 
+6526 70423902 jam flash_sm_erase_sector ,mem_spi_write_flash_sm 
+6527 20206502 branch spid_init_flash 
+
+flash_erase_sector:
+6528 20406502 call spid_init_flash 
+6529 70423903 jam flash_sm_wait_erase_sector ,mem_spi_write_flash_sm 
+652a 2040650b call spid_unlock_flash 
+652b da2001f5 arg mem_spid_tbuf ,rega 
+652c 6801c232 fetch 3 ,mem_spi_write_addr 
+652d 70808804 jam 4 ,core_spid_txlen 
+652e d8400020 arg flash_command_sector_erase ,temp 
+652f 20206556 branch spid_write_flash_common 
+
+flash_wait_erase_sector:
+6530 20406502 call spid_init_flash 
+6531 2040650b call spid_unlock_flash 
+6532 58000005 setarg flash_read_satus 
+6533 204064f3 call spid_read_reg 
+6534 c3800000 rtnbit1 flash_status_wip 
+6535 70423904 jam flash_sm_write_data ,mem_spi_write_flash_sm 
+6536 20600000 rtn 
+
+flash_write_data:
+6537 20406502 call spid_init_flash 
+6538 70423905 jam flash_sm_wait_write_data ,mem_spi_write_flash_sm 
+6539 2040650b call spid_unlock_flash 
+653a 2040654a call flash_data_preserve 
+653b 20406552 call spid_write_flash 
+653c 20206545 branch flash_data_recover 
+
+flash_wait_write_data:
+653d 20406502 call spid_init_flash 
+653e 2040650b call spid_unlock_flash 
+653f 58000005 setarg flash_read_satus 
+6540 204064f3 call spid_read_reg 
+6541 c3800000 rtnbit1 flash_status_wip 
+6542 70423900 jam flash_sm_no_buys ,mem_spi_write_flash_sm 
+6543 68014201 fetch 2 ,mem_cb_spi_flash_write_complate 
+6544 20207f9c branch callback_func 
+
+flash_data_recover:
+6545 68020aa2 fetch 4 ,mem_temp 
+6546 68094235 fetcht 2 ,mem_spi_write_ptr 
+6547 184085fc increase -4 ,temp 
+6548 e0420000 istore 4 ,temp 
+6549 20600000 rtn 
+
+flash_data_preserve:
+654a 68094235 fetcht 2 ,mem_spi_write_ptr 
+654b 18422200 copy temp ,rega 
+654c 184085fc increase -4 ,temp 
+654d e8420000 ifetch 4 ,temp 
+654e 60020aa2 store 4 ,mem_temp 
+654f 68094237 fetcht 2 ,mem_spi_write_len 
+6550 6801c232 fetch 3 ,mem_spi_write_addr 
+6551 20600000 rtn 
+
+spid_write_flash:
+6552 18408404 increase 4 ,temp 
+6553 60190088 hstoret 2 ,core_spid_txlen 
+6554 d8400002 arg flash_command_write_data ,temp 
+6555 1a20a3fc increase -4 ,rega 
+
+spid_write_flash_common:
+6556 e2288000 istoret 1 ,rega 
+6557 1ff10400 rshift16 pdata ,temp 
+6558 e0a88000 istoret 1 ,contw 
+6559 1fec8400 rshift8 pdata ,temp 
+655a e0a88000 istoret 1 ,contw 
+655b e0a08000 istore 1 ,contw 
+655c 1a227e00 deposit rega 
+655d 6011008a hstore 2 ,core_spid_txaddr 
+655e 58000000 setarg 0 
+655f 6011008e hstore 2 ,core_spid_rxlen 
+6560 70800602 jam spid_start ,core_misc_ctrl 
+6561 202064fc branch wait_spid_done 
+
+spid_read_flash:
+6562 6019008e hstoret 2 ,core_spid_rxlen 
+6563 1ff10400 rshift16 pdata ,temp 
+6564 600881f6 storet 1 ,mem_addr_hi 
+6565 1fec8400 rshift8 pdata ,temp 
+6566 600881f7 storet 1 ,mem_addr_mi 
+6567 600081f8 store 1 ,mem_addr_lo 
+6568 58000004 setarg 4 
+6569 60110088 hstore 2 ,core_spid_txlen 
+656a 7001f503 jam flash_command_read_data ,mem_spid_tbuf 
+656b 580001f5 setarg mem_spid_tbuf 
+656c 6011008a hstore 2 ,core_spid_txaddr 
+656d 1a227e00 deposit rega 
+656e 6011008c hstore 2 ,core_spid_rxaddr 
+656f 68108086 hfetch 1 ,core_spid_ctrl 
+6570 2a2c000f isolate0 15 ,rega 
+6571 7920fe06 setflag true ,6 ,pdata 
+6572 60108086 hstore 1 ,core_spid_ctrl 
+6573 70800602 jam spid_start ,core_misc_ctrl 
+
+spi_read_flash_wait:
+6574 6810812c hfetch 1 ,core_dma_status 
+6575 c283e574 bbit1 7 ,spi_read_flash_wait 
+6576 d8e00003 arg spid_done ,queue 
+6577 202064fc branch wait_spid_done 
+
+spid_load_flash:
+6578 6019008e hstoret 2 ,core_spid_rxlen 
+6579 58000004 setarg 4 
+657a 60110088 hstore 2 ,core_spid_txlen 
+657b 7001f503 jam 3 ,mem_spid_tbuf 
+657c 580001f5 setarg mem_spid_tbuf 
+657d 6011008a hstore 2 ,core_spid_txaddr 
+657e 1a227e00 deposit rega 
+657f 6011008c hstore 2 ,core_spid_rxaddr 
+6580 68108086 hfetch 1 ,core_spid_ctrl 
+6581 2a2c000f isolate0 15 ,rega 
+6582 7920fe06 setflag true ,6 ,pdata 
+6583 60108086 hstore 1 ,core_spid_ctrl 
+6584 70800602 jam spid_start ,core_misc_ctrl 
+
+spi_load_flash_wait:
+6585 6810812c hfetch 1 ,core_dma_status 
+6586 c283e585 bbit1 7 ,spi_load_flash_wait 
+6587 d8e00003 arg spid_done ,queue 
+6588 204064c0 call decrypt_code 
+6589 204064fc call wait_spid_done 
+658a 2feffe02 isolate1 spid_crcok ,pdata 
+658b 204064b9 call set_ucode_status 
+658c 680081f6 fetch 1 ,mem_addr_hi 
+658d 1ff02400 lshift16 pdata ,regb 
+658e 680081f7 fetch 1 ,mem_addr_mi 
+658f 1fed7e00 lshift8 pdata ,pdata 
+6590 9a41a400 ior regb ,regb 
+6591 680081f8 fetch 1 ,mem_addr_lo 
+6592 9a41fe00 ior regb ,pdata 
+6593 9840fe00 iadd temp ,pdata 
+6594 600081f8 store 1 ,mem_addr_lo 
+6595 1fecfe00 rshift8 pdata ,pdata 
+6596 600081f7 store 1 ,mem_addr_mi 
+6597 1fecfe00 rshift8 pdata ,pdata 
+6598 600081f6 store 1 ,mem_addr_hi 
+6599 20600000 rtn 
+
+soft_reset_chip:
+659a 70801001 jam 1 ,core_reset 
+659b 20600000 rtn 
+
+iic_init_390k:
+659c 7080910c jam 12 ,core_iicd_scl_low 
+659d 7080920d jam 13 ,core_iicd_scl_high 
+659e 7080930d jam 13 ,core_iicd_start_setup 
+659f 7080940d jam 13 ,core_iicd_start_hold 
+65a0 7080950d jam 13 ,core_iicd_stop_setup 
+65a1 7080960c jam 12 ,core_iicd_data_setup 
+65a2 202065a9 branch iicd_init_gpio 
+
+iicd_init_12m:
+65a3 70809105 jam 5 ,core_iicd_scl_low 
+65a4 70809207 jam 7 ,core_iicd_scl_high 
+65a5 70809307 jam 7 ,core_iicd_start_setup 
+65a6 70809407 jam 7 ,core_iicd_start_hold 
+65a7 70809507 jam 7 ,core_iicd_stop_setup 
+65a8 70809605 jam 5 ,core_iicd_data_setup 
+
+iicd_init_gpio:
+65a9 6810807b hfetch 1 ,core_gpio_pu3 
+65aa 1fe1fec0 or_into 0xc0 ,pdata 
+65ab 6010807b hstore 1 ,core_gpio_pu3 
+65ac 68108081 hfetch 1 ,core_gpio_sel1 
+65ad 1fe1fe10 or_into 0x10 ,pdata 
+65ae 60108081 hstore 1 ,core_gpio_sel1 
+65af 20600000 rtn 
+
+wait_iicd_done:
+65b0 6810812c hfetch 1 ,core_dma_status 
+65b1 c302e5b0 bbit0 iicd_done ,wait_iicd_done 
+65b2 20600000 rtn 
+
+iicd_read_data:
+65b3 60110098 hstore 2 ,core_iicd_txlen 
+65b4 1a227e00 deposit rega 
+65b5 6011009a hstore 2 ,core_iicd_txaddr 
+65b6 1a427e00 deposit regb 
+65b7 6011009c hstore 2 ,core_iicd_rxaddr 
+65b8 18427e00 deposit temp 
+65b9 6011009e hstore 2 ,core_iicd_rxlen 
+65ba d8400001 arg 1 ,temp 
+65bb 7d3a0401 nsetflag blank ,1 ,temp 
+65bc 60108090 hstore 1 ,core_iicd_ctrl 
+65bd 70800604 jam iicd_start ,core_misc_ctrl 
+65be 202065b0 branch wait_iicd_done 
+
+set_eeprom_size_2k:
+65bf 79200028 set1 mark_eeprom_size ,mark 
+65c0 70421108 jam 0x08 ,mem_eeprom_block_size 
+65c1 20600000 rtn 
+
+clear_eeprom_size_2k:
+65c2 793f8028 set0 mark_eeprom_size ,mark 
+65c3 70421120 jam 0x20 ,mem_eeprom_block_size 
+65c4 20600000 rtn 
+
+iicd_read_eep_data_size_2k:
+65c5 6800c203 fetch 1 ,mem_eeprom_base 
+65c6 9a40fe00 iadd regb ,pdata 
+65c7 600081f7 store 1 ,mem_addr_mi 
+65c8 202065cc branch iicd_read_eep_size_2k 
+
+iicd_read_eep_size_2k_lcadcode:
+65c9 680101f7 fetch 2 ,mem_addr_mi 
+65ca 1ff0fe00 byteswap pdata ,pdata 
+65cb 600081f7 store 1 ,mem_addr_mi 
+
+iicd_read_eep_size_2k:
+65cc 58000003 setarg 3 
+65cd 60110098 hstore 2 ,core_iicd_txlen 
+65ce 7001f6a0 jam 0xa0 ,mem_iicd_tbuf 
+65cf 7001f8a1 jam 0xa1 ,mem_iicd_tbuf + 2 
+65d0 202065eb branch iicd_read_eep_common 
+
+iicd_write_protect_eep_data:
+65d1 60090aa2 storet 2 ,mem_temp 
+65d2 204065d6 call iicd_eeprom_write_enable 
+65d3 68090aa2 fetcht 2 ,mem_temp 
+65d4 20406606 call iicd_write_eep_data 
+65d5 202065dd branch iicd_eeprom_write_disable 
+
+iicd_eeprom_write_enable:
+65d6 6800c23a fetch 1 ,mem_eeprom_wp_gpio 
+65d7 c17f8000 rtneq gpio_disable 
+65d8 c30365db bbit0 6 ,iicd_wp_gpio_output_low 
+65d9 580249f0 setarg 150000 
+65da 20402a8f call sleep 
+
+iicd_wp_gpio_output_low:
+65db 6808c23a fetcht 1 ,mem_eeprom_wp_gpio 
+65dc 20206829 branch gpio_out_active 
+
+iicd_eeprom_write_disable:
+65dd 6808c23a fetcht 1 ,mem_eeprom_wp_gpio 
+65de 20206825 branch gpio_out_inactive 
+
+iicd_read_eep_data:
+65df 47484032 bpatchx patch32_0 ,mem_patch32 
+65e0 c51465c5 bmark1 mark_eeprom_size ,iicd_read_eep_data_size_2k 
+65e1 68014203 fetch 2 ,mem_eeprom_base 
+65e2 9a40fe00 iadd regb ,pdata 
+65e3 1ff0fe00 byteswap pdata ,pdata 
+65e4 600101f7 store 2 ,mem_addr_mi 
+
+iicd_read_eep:
+65e5 4748c032 bpatchx patch32_1 ,mem_patch32 
+65e6 c51465c9 bmark1 mark_eeprom_size ,iicd_read_eep_size_2k_lcadcode 
+65e7 58000004 setarg 4 
+65e8 60110098 hstore 2 ,core_iicd_txlen 
+65e9 7001f6a0 jam 0xa0 ,mem_iicd_tbuf 
+65ea 7001f9a1 jam 0xa1 ,mem_iicd_tbuf + 3 
+
+iicd_read_eep_common:
+65eb 580001f6 setarg mem_iicd_tbuf 
+65ec 6011009a hstore 2 ,core_iicd_txaddr 
+65ed 6019009e hstoret 2 ,core_iicd_rxlen 
+65ee 1a227e00 deposit rega 
+65ef 6011009c hstore 2 ,core_iicd_rxaddr 
+65f0 58000002 setarg 2 
+65f1 2a2c000f isolate0 15 ,rega 
+65f2 7920fe00 setflag true ,0 ,pdata 
+65f3 60108090 hstore 1 ,core_iicd_ctrl 
+65f4 70800604 jam iicd_start ,core_misc_ctrl 
+65f5 d8e00005 arg iicd_done ,queue 
+65f6 204064c0 call decrypt_code 
+65f7 204065b0 call wait_iicd_done 
+65f8 2feffe04 isolate1 iicd_crcok ,pdata 
+65f9 204064b9 call set_ucode_status 
+65fa c5146601 bmark1 mark_eeprom_size ,iicd_read_eep_load_code_size_2k 
+65fb 680101f7 fetch 2 ,mem_addr_mi 
+65fc 1ff0fe00 byteswap pdata ,pdata 
+65fd 9840fe00 iadd temp ,pdata 
+65fe 1ff0fe00 byteswap pdata ,pdata 
+65ff 600101f7 store 2 ,mem_addr_mi 
+6600 20600000 rtn 
+
+iicd_read_eep_load_code_size_2k:
+6601 680081f7 fetch 1 ,mem_addr_mi 
+6602 9840fe00 iadd temp ,pdata 
+6603 1ff0fe00 byteswap pdata ,pdata 
+6604 600101f7 store 2 ,mem_addr_mi 
+6605 20600000 rtn 
+
+iicd_write_eep_data:
+6606 68014203 fetch 2 ,mem_eeprom_base 
+6607 9a40fe00 iadd regb ,pdata 
+
+iicd_write_ota_data:
+6608 60010a9a store 2 ,mem_pdatatemp 
+6609 47494032 bpatchx patch32_2 ,mem_patch32 
+660a 60090aa2 storet 2 ,mem_temp 
+660b 1a227e00 copy rega ,pdata 
+660c 60010ab9 store 2 ,mem_contr 
+
+iicd_write_eep_loop:
+660d 2040661d call iicd_eep_transparency 
+660e 68090ab2 fetcht 2 ,mem_regb 
+660f 68010ab9 fetch 2 ,mem_contr 
+6610 1fe22200 copy pdata ,rega 
+6611 68010a9a fetch 2 ,mem_pdatatemp 
+6612 2040663d call iicd_write_eep 
+6613 68010ab2 fetch 2 ,mem_regb 
+6614 68090ab9 fetcht 2 ,mem_contr 
+6615 98408400 iadd temp ,temp 
+6616 60090ab9 storet 2 ,mem_contr 
+6617 68090a9a fetcht 2 ,mem_pdatatemp 
+6618 98408400 iadd temp ,temp 
+6619 60090a9a storet 2 ,mem_pdatatemp 
+661a 68010aa2 fetch 2 ,mem_temp 
+661b 243a660d nbranch iicd_write_eep_loop ,blank 
+661c 20600000 rtn 
+
+iicd_eep_transparency:
+661d 4749c032 bpatchx patch32_3 ,mem_patch32 
+661e 6800c211 fetch 1 ,mem_eeprom_block_size 
+661f 1fe0ffff increase -1 ,pdata 
+6620 68090a9a fetcht 2 ,mem_pdatatemp 
+6621 9841fe00 ior temp ,pdata 
+6622 1fe0fe01 increase 1 ,pdata 
+6623 60018ab6 store 3 ,mem_regc 
+6624 68010aa2 fetch 2 ,mem_temp 
+6625 9840fe00 iadd temp ,pdata 
+6626 68098ab6 fetcht 3 ,mem_regc 
+6627 98467e00 isub temp ,pdata 
+6628 2421662f nbranch iicd_eep_deal_short_packet ,positive 
+6629 60010aa2 store 2 ,mem_temp 
+662a 68018ab6 fetch 3 ,mem_regc 
+662b 68090a9a fetcht 2 ,mem_pdatatemp 
+662c 98467e00 isub temp ,pdata 
+662d 60010ab2 store 2 ,mem_regb 
+662e 20600000 rtn 
+
+iicd_eep_deal_short_packet:
+662f 68010aa2 fetch 2 ,mem_temp 
+6630 60010ab2 store 2 ,mem_regb 
+6631 58000000 setarg 0 
+6632 60010aa2 store 2 ,mem_temp 
+6633 20600000 rtn 
+
+iicd_write_eep_size_2k:
+6634 18408402 increase 2 ,temp 
+6635 60190098 hstoret 2 ,core_iicd_txlen 
+6636 1a20a3fe increase -2 ,rega 
+6637 ea298000 ifetcht 3 ,rega 
+6638 18422400 copy temp ,regb 
+6639 d84000a0 arg 0xa0 ,temp 
+663a e2288000 istoret 1 ,rega 
+663b e0a08000 istore 1 ,contw 
+663c 2020664a branch iicd_write_eep_common 
+
+iicd_write_eep:
+663d 1fe22400 copy pdata ,regb 
+663e 474a4032 bpatchx patch32_4 ,mem_patch32 
+663f c5146634 bmark1 mark_eeprom_size ,iicd_write_eep_size_2k 
+6640 1a427e00 copy regb ,pdata 
+6641 18408403 increase 3 ,temp 
+6642 60190098 hstoret 2 ,core_iicd_txlen 
+6643 1a20a3fd increase -3 ,rega 
+6644 ea298000 ifetcht 3 ,rega 
+6645 18422400 copy temp ,regb 
+6646 d84000a0 arg 0xa0 ,temp 
+6647 e2288000 istoret 1 ,rega 
+6648 1ff0fe00 byteswap pdata ,pdata 
+6649 e0a10000 istore 2 ,contw 
+
+iicd_write_eep_common:
+664a 1a227e00 deposit rega 
+664b 6011009a hstore 2 ,core_iicd_txaddr 
+664c 58000000 setarg 0 
+664d 6011009e hstore 2 ,core_iicd_rxlen 
+664e 70809001 jam 1 ,core_iicd_ctrl 
+664f 70800604 jam iicd_start ,core_misc_ctrl 
+6650 204065b0 call wait_iicd_done 
+6651 1a427e00 copy regb ,pdata 
+6652 e2218000 istore 3 ,rega 
+
+iic_check_eeprom_standby:
+6653 474ac032 bpatchx patch32_5 ,mem_patch32 
+6654 7001f900 jam 0 ,mem_iicd_tbuf + 3 
+
+iic_check_eeprom_standby_wait:
+6655 58000001 setarg 1 
+6656 60110098 hstore 2 ,core_iicd_txlen 
+6657 7001f6a0 jam 0xa0 ,mem_iicd_tbuf 
+6658 580001f6 setarg mem_iicd_tbuf 
+6659 6011009a hstore 2 ,core_iicd_txaddr 
+665a 58000000 setarg 0 
+665b 6011009e hstore 2 ,core_iicd_rxlen 
+665c 6011009c hstore 2 ,core_iicd_rxaddr 
+665d 58000003 setarg 3 
+665e 60108090 hstore 1 ,core_iicd_ctrl 
+665f 70800604 jam iicd_start ,core_misc_ctrl 
+6660 204065b0 call wait_iicd_done 
+6661 6810812c hfetch 1 ,core_dma_status 
+6662 c4030000 rtnbit0 iicd_ack 
+6663 200005dc nop 1500 
+6664 680081f9 fetch 1 ,mem_iicd_tbuf + 3 
+6665 1fe0fe01 increase 1 ,pdata 
+6666 600081f9 store 1 ,mem_iicd_tbuf + 3 
+6667 1fe67c28 sub pdata ,40 ,null 
+6668 24610000 nrtn positive 
+6669 20206655 branch iic_check_eeprom_standby_wait 
+
+otp_enable_chgpump:
+666a 70897370 jam 0x70 ,rfen_chgpump 
+666b 20000bb8 nop param_chgpump_delay 
+666c 20600000 rtn 
+
+otp_disable_chgpump:
+666d 70897330 jam 0x30 ,rfen_chgpump 
+666e 20600000 rtn 
+
+otp_set_addr:
+666f 1fe9fe00 lshift3 pdata ,pdata 
+6670 60110045 hstore 2 ,core_otp_addr 
+6671 70804b00 jam 0 ,core_otpd_ctrl 
+6672 20600000 rtn 
+
+otp_write:
+6673 2040666f call otp_set_addr 
+6674 204066a0 call otp_ce 
+
+otp_program:
+6675 ea288000 ifetcht 1 ,rega 
+6676 1a20a201 increase 1 ,rega 
+6677 18000e00 force 0 ,queue 
+
+otp_program_bit:
+6678 a84c0000 qisolate0 temp 
+6679 2020e697 branch otp_skip_0 ,true 
+667a 68108046 hfetch 1 ,core_otp_din 
+667b 79207e06 set1 6 ,pdata 
+667c 79207e07 set1 7 ,pdata 
+667d 60108046 hstore 1 ,core_otp_din 
+667e 70804702 jam 0x02 ,core_otp_ctrl 
+667f 70804782 jam 0x82 ,core_otp_ctrl 
+6680 793ffe07 set0 7 ,pdata 
+6681 60108046 hstore 1 ,core_otp_din 
+6682 7080478a jam 0x8a ,core_otp_ctrl 
+6683 2000000b nop 11 
+6684 708047ca jam 0xca ,core_otp_ctrl 
+6685 20000021 nop 33 
+6686 7080474a jam 0x4a ,core_otp_ctrl 
+6687 2000002c nop 44 
+6688 708047ca jam 0xca ,core_otp_ctrl 
+6689 20000016 nop 22 
+668a 7080478a jam 0x8a ,core_otp_ctrl 
+668b 20000021 nop 33 
+668c 70804782 jam 0x82 ,core_otp_ctrl 
+668d 20000001 nop 1 
+668e 70804792 jam 0x92 ,core_otp_ctrl 
+668f 2000000a nop 10 
+6690 708047b2 jam 0xb2 ,core_otp_ctrl 
+6691 68108007 hfetch 1 ,core_otp_rdata 
+6692 70804792 jam 0x92 ,core_otp_ctrl 
+6693 20000001 nop 1 
+6694 70804782 jam 0x82 ,core_otp_ctrl 
+6695 afec0000 qisolate0 pdata 
+6696 2020e678 branch otp_program_bit ,true 
+
+otp_skip_0:
+6697 68110045 hfetch 2 ,core_otp_addr 
+6698 1fe0fe01 increase 1 ,pdata 
+6699 60110045 hstore 2 ,core_otp_addr 
+669a 18e08e01 increase 1 ,queue 
+669b 28e01e08 compare 8 ,queue ,0xf 
+669c 2420e678 nbranch otp_program_bit ,true 
+669d c2006675 loop otp_program 
+669e 70804783 jam 0x83 ,core_otp_ctrl 
+669f 20600000 rtn 
+
+otp_ce:
+66a0 70804782 jam 0x82 ,core_otp_ctrl 
+66a1 2000000c nop 12 
+66a2 70804780 jam 0x80 ,core_otp_ctrl 
+66a3 70804782 jam 0x82 ,core_otp_ctrl 
+66a4 20000096 nop 150 
+66a5 20600000 rtn 
+
+otpd_read_init:
+66a6 204066a0 call otp_ce 
+66a7 708047a2 jam 0xa2 ,core_otp_ctrl 
+66a8 1a227e00 deposit rega 
+66a9 60110048 hstore 2 ,core_otpd_addr 
+66aa 7920040b set1 11 ,temp 
+66ab 2fec000f isolate0 15 ,pdata 
+66ac 7920840f setflag true ,15 ,temp 
+66ad 6019004a hstoret 2 ,core_otpd_len 
+66ae 70800601 jam otpd_start ,core_misc_ctrl 
+66af 20600000 rtn 
+
+otpd_wait_end:
+66b0 6810812c hfetch 1 ,core_dma_status 
+66b1 c300e6b0 bbit0 otpd_done ,otpd_wait_end 
+66b2 20600000 rtn 
+
+otpd_read_data:
+66b3 2040666f call otp_set_addr 
+66b4 204066a6 call otpd_read_init 
+66b5 204066b0 call otpd_wait_end 
+66b6 70804783 jam 0x83 ,core_otp_ctrl 
+66b7 20600000 rtn 
+
+otpd_read_code:
+66b8 68110124 hfetch 2 ,core_current_otp_addr 
+66b9 60110045 hstore 2 ,core_otp_addr 
+66ba 204066a6 call otpd_read_init 
+66bb d8e00001 arg otpd_done ,queue 
+66bc 204064c0 call decrypt_code 
+66bd 204066b0 call otpd_wait_end 
+66be 2feffe00 isolate1 otpd_crcok ,pdata 
+66bf 204064b9 call set_ucode_status 
+66c0 70804783 jam 0x83 ,core_otp_ctrl 
+66c1 20600000 rtn 
+
+uartd_prepare_tx:
+66c2 6811005e hfetch 2 ,core_uart_twptr 
+66c3 98001400 iforce contwu 
+66c4 20600000 rtn 
+
+uartd_send:
+66c5 19427e00 deposit contwu 
+66c6 6011005e hstore 2 ,core_uart_twptr 
+66c7 20600000 rtn 
+
+uartd_rxdone:
+66c8 18627e00 deposit contru 
+66c9 60110058 hstore 2 ,core_uart_rrptr 
+66ca 20600000 rtn 
+
+uartd_prepare_rx:
+66cb 68110058 hfetch 2 ,core_uart_rrptr 
+66cc 1fe20600 copy pdata ,contru 
+66cd 20600000 rtn 
+
+uart_set_baud_by_mem:
+66ce 68014243 fetch uart_baud_len ,mem_baud 
+66cf 60110052 hstore uart_baud_len ,core_uart_baud 
+66d0 20600000 rtn 
+
+uart_copy_tx_bytes_fast:
+66d1 1f227e00 deposit loopcnt 
+66d2 207a0000 rtn blank 
+
+uart_copy_tx_bytes_fast_loop:
+66d3 1f20f3f8 increase -8 ,loopcnt 
+66d4 204166de call uart_tx_8_bytes ,positive 
+66d5 20628000 rtn zero 
+66d6 202166d3 branch uart_copy_tx_bytes_fast_loop ,positive 
+66d7 1f20f208 increase 8 ,loopcnt 
+
+uart_copy_tx_bytes_fast_loop_four:
+66d8 1f20f3fc increase -4 ,loopcnt 
+66d9 204166e1 call uart_tx_4_bytes ,positive 
+66da 20628000 rtn zero 
+66db 202166d8 branch uart_copy_tx_bytes_fast_loop_four ,positive 
+66dc 1f20f204 increase 4 ,loopcnt 
+66dd 202066e4 branch uart_copy_tx_bytes 
+
+uart_tx_8_bytes:
+66de e8c40000 ifetch 8 ,contr 
+66df e1440000 istore 8 ,contwu 
+66e0 20600000 rtn 
+
+uart_tx_4_bytes:
+66e1 e8c20000 ifetch 4 ,contr 
+66e2 e1420000 istore 4 ,contwu 
+66e3 20600000 rtn 
+
+uart_copy_tx_bytes:
+66e4 1f227e00 deposit loopcnt 
+66e5 207a0000 rtn blank 
+
+uart_copy_tx_bytes_loop:
+66e6 e8c08000 ifetch 1 ,contr 
+66e7 e1408000 istore 1 ,contwu 
+66e8 c20066e6 loop uart_copy_tx_bytes_loop 
+66e9 20600000 rtn 
+
+uart_copy_rx_bytes_fast:
+66ea 1f227e00 deposit loopcnt 
+66eb 207a0000 rtn blank 
+
+uart_copy_rx_bytes_fast_loop:
+66ec 1f20f3f8 increase -8 ,loopcnt 
+66ed 204166f7 call uart_rx_8_bytes ,positive 
+66ee 20628000 rtn zero 
+66ef 202166ec branch uart_copy_rx_bytes_fast_loop ,positive 
+66f0 1f20f208 increase 8 ,loopcnt 
+
+uart_copy_rx_bytes_fast_loop_four:
+66f1 1f20f3fc increase -4 ,loopcnt 
+66f2 204166fa call uart_rx_4_bytes ,positive 
+66f3 20628000 rtn zero 
+66f4 202166f1 branch uart_copy_rx_bytes_fast_loop_four ,positive 
+66f5 1f20f204 increase 4 ,loopcnt 
+66f6 202066fd branch uart_copy_rx_bytes 
+
+uart_rx_8_bytes:
+66f7 e8640000 ifetch 8 ,contru 
+66f8 e0a40000 istore 8 ,contw 
+66f9 20600000 rtn 
+
+uart_rx_4_bytes:
+66fa e8620000 ifetch 4 ,contru 
+66fb e0a20000 istore 4 ,contw 
+66fc 20600000 rtn 
+
+uart_copy_rx_bytes:
+66fd 1f227e00 deposit loopcnt 
+66fe 207a0000 rtn blank 
+
+uart_copy_rx_bytes_loop:
+66ff e8608000 ifetch 1 ,contru 
+6700 e0a08000 istore 1 ,contw 
+6701 c20066ff loop uart_copy_rx_bytes_loop 
+6702 20600000 rtn 
+
+uart_copy_rx2tx:
+6703 1f227e00 deposit loopcnt 
+6704 207a0000 rtn blank 
+
+uart_copy_rx2tx_loop:
+6705 e8608000 ifetch 1 ,contru 
+6706 e1408000 istore 1 ,contwu 
+6707 c2006705 loop uart_copy_rx2tx_loop 
+6708 20600000 rtn 
+
+app_store_nvram_event:
+6709 700a993d jam bt_evt_store_nvram ,mem_fifo_temp 
+670a 20207d86 branch ui_ipc_send_event 
+
+check_51cmd_store_reconn_info:
+
+check_51cmd_update_device_record:
+670b 474b4032 bpatchx patch32_6 ,mem_patch32 
+670c 6800c217 fetch 1 ,mem_nv_data_number 
+670d 207a0000 rtn blank 
+670e 204067a3 call check_nvram 
+670f 2042e7a9 call init_device_list ,zero 
+6710 2040673e call nvram_find_addr_from_bd_list 
+
+write_device_record:
+6711 6800c217 fetch 1 ,mem_nv_data_number 
+6712 1fe22600 icopy regc 
+6713 68094215 fetcht 2 ,mem_nv_data_ptr 
+6714 6009018c storet 2 ,mem_list_item_ptr 
+
+write_device_loop_find:
+6715 1a627e00 copy regc ,pdata 
+6716 203a6709 branch app_store_nvram_event ,blank 
+6717 1a60a7ff increase -1 ,regc 
+6718 18422200 copy temp ,rega 
+6719 ea208000 ifetch 1 ,rega 
+671a 68088184 fetcht 1 ,mem_select_list_item 
+671b 98467c00 isub temp ,null 
+671c 2042e725 call set_index_finded_device ,zero 
+671d 20216721 branch write_device_loop_find0 ,positive 
+671e ea208000 ifetch 1 ,rega 
+671f 1fe0fe01 increase 1 ,pdata 
+6720 e2208000 istore 1 ,rega 
+
+write_device_loop_find0:
+6721 6809018c fetcht 2 ,mem_list_item_ptr 
+6722 18408422 increase nv_data_len ,temp 
+6723 6009018c storet 2 ,mem_list_item_ptr 
+6724 20206715 branch write_device_loop_find 
+
+set_index_finded_device:
+6725 58000000 setarg 0 
+6726 e2208000 istore 1 ,rega 
+6727 68008185 fetch 1 ,mem_temp_reconn_record 
+6728 e0a08000 istore 1 ,contw 
+6729 c099e733 bne rec_3_mode ,set_index_finded_device_ble_mode 
+672a da4041be arg mem_link_key ,regb 
+
+set_index_find_device_master_addr:
+672b e8c30000 ifetch 6 ,contr 
+672c e0a40000 istore 8 ,contw 
+672d 58000000 setarg 0 
+672e e0a40000 istore 8 ,contw 
+672f 1a420c00 copy regb ,contr 
+
+store_rec_data_common:
+6730 20407ebf call memcpy16 
+6731 18007c01 force 1 ,null 
+6732 20600000 rtn 
+
+set_index_finded_device_ble_mode:
+6733 c01b6737 beq rec_4_mode_random_resolvable_private_address ,set_index_finded_device_irk 
+6734 c01be73b beq rec_4_mode_random_non_resolvable_private_address ,set_index_finded_device_ediv 
+6735 da404419 arg mem_le_ltk ,regb 
+6736 2020672b branch set_index_find_device_master_addr 
+
+set_index_finded_device_irk:
+6737 d8c044d5 arg mem_le_irk ,contr 
+6738 20407ebf call memcpy16 
+
+store_ble_rec_data_common:
+6739 d8c04419 arg mem_le_ltk ,contr 
+673a 20206730 branch store_rec_data_common 
+
+set_index_finded_device_ediv:
+673b d8c044cd arg mem_le_rand ,contr 
+673c 20407ebf call memcpy16 
+673d 20206739 branch store_ble_rec_data_common 
+
+nvram_find_addr_from_bd_list:
+673e 20407fe9 call disable_user 
+673f 6800c217 fetch 1 ,mem_nv_data_number 
+6740 207a0000 rtn blank 
+6741 68014682 fetch 2 ,mem_ui_state_map 
+6742 c2806754 bbit1 ui_state_bt_connected ,find_addr_from_bd_list_spp_mode 
+
+find_addr_from_bd_list_ble_mode:
+6743 474bc032 bpatchx patch32_7 ,mem_patch32 
+6744 6800c48e fetch 1 ,mem_le_conn_peer_addr_type 
+6745 c000674d beq master_public_addr ,find_addr_from_bd_list_static_addr 
+6746 68008454 fetch 1 ,mem_le_plap + 5 
+6747 2fe180c0 compare 0xc0 ,pdata ,0xc0 
+6748 2020e74d branch find_addr_from_bd_list_static_addr ,true 
+6749 2fe18040 compare 0x40 ,pdata ,0xc0 
+674a 2020e752 branch find_addr_from_bd_list_random_addr ,true 
+674b 2fe18000 compare 0x00 ,pdata ,0xc0 
+674c 2020e750 branch find_addr_from_bd_list_random_non_resolvable_private_address ,true 
+
+find_addr_from_bd_list_static_addr:
+674d 70018535 jam rec_4_mode_static_address ,mem_temp_reconn_record 
+674e 6803044f fetch 6 ,mem_le_plap 
+674f 20206757 branch find_addr_from_bd_list_common 
+
+find_addr_from_bd_list_random_non_resolvable_private_address:
+6750 70018537 jam rec_4_mode_random_non_resolvable_private_address ,mem_temp_reconn_record 
+6751 20206757 branch find_addr_from_bd_list_common 
+
+find_addr_from_bd_list_random_addr:
+6752 70018536 jam rec_4_mode_random_resolvable_private_address ,mem_temp_reconn_record 
+6753 20206757 branch find_addr_from_bd_list_common 
+
+find_addr_from_bd_list_spp_mode:
+6754 474c4033 bpatchx patch33_0 ,mem_patch33 
+6755 70018533 jam rec_3_mode ,mem_temp_reconn_record 
+6756 68030040 fetch 6 ,mem_plap 
+
+find_addr_from_bd_list_common:
+6757 60030186 store 6 ,mem_temp_reconn_record + 1 
+6758 68014215 fetch 2 ,mem_nv_data_ptr 
+6759 efe88000 ifetcht 1 ,pdata 
+675a 1fe0fe01 pincrease 1 
+675b 6001018c store 2 ,mem_list_item_ptr 
+675c 60088184 storet 1 ,mem_select_list_item 
+675d 6800c217 fetch 1 ,mem_nv_data_number 
+675e 1fe22600 icopy regc 
+
+nvram_find_addr_from_list:
+675f 6801018c fetch 2 ,mem_list_item_ptr 
+6760 1fe22200 copy pdata ,rega 
+6761 2040676f call nvram_find_addr_from_list_compare 
+6762 20740000 rtn user 
+6763 6809018c fetcht 2 ,mem_list_item_ptr 
+6764 18408422 increase nv_data_len ,temp 
+6765 6009018c storet 2 ,mem_list_item_ptr 
+6766 184085ff increase -1 ,temp 
+6767 e8408000 ifetch 1 ,temp 
+6768 60008184 store 1 ,mem_select_list_item 
+6769 1a60a7ff increase -1 ,regc 
+676a 2422e75f nbranch nvram_find_addr_from_list ,zero 
+676b 6800c217 fetch 1 ,mem_nv_data_number 
+676c 1fe0ffff pincrease decreased_one 
+676d 60008184 store 1 ,mem_select_list_item 
+676e 20600000 rtn 
+
+nvram_find_addr_from_list_compare:
+676f 68008185 fetch 1 ,mem_temp_reconn_record 
+6770 c099e776 bne rec_3_mode ,find_addr_from_list_compare_ble_mode 
+
+find_master_addr_from_list_compare:
+6771 da400185 arg mem_temp_reconn_record ,regb 
+6772 df200007 arg 7 ,loopcnt 
+6773 20407f88 call string_compare 
+6774 2022ffe7 branch enable_user ,zero 
+6775 20600000 rtn 
+
+find_addr_from_list_compare_ble_mode:
+6776 c01b6779 beq rec_4_mode_random_resolvable_private_address ,find_irk_form_list_compare 
+6777 c01be794 beq rec_4_mode_random_non_resolvable_private_address ,find_ediv_form_list_compare 
+6778 20206771 branch find_master_addr_from_list_compare 
+
+find_irk_form_list_compare:
+6779 ea288000 ifetcht 1 ,rega 
+677a 98467c00 isub temp ,null 
+677b 24628000 nrtn zero 
+677c d8a00ac2 arg mem_le_prand ,contw 
+677d df200010 arg 16 ,loopcnt 
+677e 20407ed4 call clear_mem 
+677f 68018452 fetch 3 ,mem_le_plap + 3 
+6780 60018ac2 store 3 ,mem_le_prand 
+6781 2040678b call genernate_master_macaddress 
+6782 68010adf fetch 2 ,mem_le_aes_128 + 13 
+6783 1ff0fe00 byteswap pdata ,pdata 
+6784 1fed0400 lshift8 pdata ,temp 
+6785 e8c08000 ifetch 1 ,contr 
+6786 9840fe00 iadd temp ,pdata 
+6787 6809844f fetcht 3 ,mem_le_plap 
+6788 98467c00 isub temp ,null 
+6789 2022ffe7 branch enable_user ,zero 
+678a 20600000 rtn 
+
+genernate_master_macaddress:
+678b d8c00ac2 arg mem_le_prand ,contr 
+678c 20407486 call load_data128 
+678d ea208000 ifetch 1 ,rega 
+678e 20407487 call load_regext 
+678f 18006c38 force 0x38 ,aes_ctrl 
+6790 18006c00 force 0x0 ,aes_ctrl 
+6791 2040741d call wait_aes 
+6792 d8a00ad2 arg mem_le_aes_128 ,contw 
+6793 20207497 branch store_aes_result 
+
+find_ediv_form_list_compare:
+6794 ea288000 ifetcht 1 ,rega 
+6795 98467c00 isub temp ,null 
+6796 24628000 nrtn zero 
+6797 18c22200 copy contr ,rega 
+6798 18c0a608 add contr ,8 ,regc 
+6799 da4044cd arg mem_le_rand ,regb 
+679a df200008 arg 8 ,loopcnt 
+679b 20407f88 call string_compare 
+679c 2022ffe7 branch enable_user ,zero 
+679d 1a622200 copy regc ,rega 
+679e da4044d5 arg mem_le_irk ,regb 
+679f df200008 arg 8 ,loopcnt 
+67a0 20407f88 call string_compare 
+67a1 2022ffe7 branch enable_user ,zero 
+67a2 20600000 rtn 
+
+check_nvram:
+67a3 68014215 fetch 2 ,mem_nv_data_ptr 
+67a4 efe88000 ifetcht 1 ,pdata 
+67a5 1fe0fe22 pincrease nv_data_len 
+67a6 efe08000 ifetch 1 ,pdata 
+67a7 98467c00 isub temp ,null 
+67a8 20600000 rtn 
+
+init_device_list:
+67a9 6800c217 fetch 1 ,mem_nv_data_number 
+67aa 1fe27200 icopy loopcnt 
+67ab 68094215 fetcht 2 ,mem_nv_data_ptr 
+67ac 58000000 setarg 0 
+
+init_device_list_loop:
+67ad e0408000 istore 1 ,temp 
+67ae 18408422 increase nv_data_len ,temp 
+67af 1fe0fe01 pincrease 1 
+67b0 c20067ad loop init_device_list_loop 
+67b1 20600000 rtn 
+
+load_device_list:
+67b2 474cc033 bpatchx patch33_1 ,mem_patch33 
+67b3 2040673e call nvram_find_addr_from_bd_list 
+67b4 68008030 fetch 1 ,mem_state 
+67b5 79347e06 setflag user ,state_combkey ,pdata 
+67b6 60008030 store 1 ,mem_state 
+67b7 243467bc nbranch clear_key_exists ,user 
+67b8 1a208c0a add rega ,10 ,contr 
+67b9 d8a041be arg mem_link_key ,contw 
+67ba 20407ebf call memcpy16 
+67bb 202067d7 branch check_link_key_load 
+
+clear_key_exists:
+67bc 7041bd00 jam 0 ,mem_link_key_exists 
+67bd 20600000 rtn 
+
+load_device_list_mode_4:
+67be 6804c4cb fetch 9 ,mem_le_ediv 
+67bf 203a67ca branch clear_ltk_exists ,blank 
+67c0 2040673e call nvram_find_addr_from_bd_list 
+67c1 243467ca nbranch clear_ltk_exists ,user 
+67c2 6801018c fetch 2 ,mem_list_item_ptr 
+67c3 1fe08c01 add pdata ,1 ,contr 
+67c4 d8a044d5 arg mem_le_irk ,contw 
+67c5 20407ebf call memcpy16 
+67c6 d8a04419 arg mem_le_ltk ,contw 
+67c7 20407ebf call memcpy16 
+67c8 70442901 jam 1 ,mem_ltk_exists 
+67c9 20600000 rtn 
+
+clear_ltk_exists:
+67ca 70442900 jam 0 ,mem_ltk_exists 
+67cb 20600000 rtn 
+
+eeprom_store_le_reconn_info:
+67cc 6803044f fetch 6 ,mem_le_plap 
+67cd 60030186 store 6 ,mem_temp_lap 
+67ce 70018534 jam rec_4_mode ,mem_record_bt_mode 
+67cf 202067d3 branch eeprom_store_reconn_info 
+
+eeprom_store_bd_reconn_info:
+67d0 68030040 fetch 6 ,mem_plap 
+67d1 60030186 store 6 ,mem_temp_lap 
+67d2 70018533 jam rec_3_mode ,mem_record_bt_mode 
+
+eeprom_store_reconn_info:
+67d3 6800c092 fetch 1 ,mem_device_option 
+67d4 c005670b beq dvc_op_module ,check_51cmd_update_device_record 
+67d5 c28342da bbit1 dvc_op_mouse ,mouse_store_remote_bdaddr 
+67d6 20600000 rtn 
+
+check_link_key_load:
+67d7 680441be fetch 8 ,mem_link_key 
+67d8 680c41c6 fetcht 8 ,mem_link_key + 8 
+67d9 9841fe00 ior temp ,pdata 
+67da 207a0000 rtn blank 
+67db 7041bd01 jam 1 ,mem_link_key_exists 
+67dc 20600000 rtn 
+
+gpio_set_wake_by_current_state:
+67dd 474d4033 bpatchx patch33_2 ,mem_patch33 
+67de 79200407 set1 7 ,temp 
+67df 2040681d call gpio_get_bit 
+67e0 7d208407 nsetflag true ,7 ,temp 
+
+gpio_set_wake:
+67e1 474dc033 bpatchx patch33_3 ,mem_patch33 
+67e2 18467cff sub temp ,ui_button_gpio_disable ,null 
+67e3 20628000 rtn zero 
+67e4 284c0007 isolate0 7 ,temp 
+67e5 18410e1f and temp ,0x1f ,queue 
+67e6 680200a1 fetch 4 ,mem_gpio_wakeup_low 
+67e7 f920fe00 qsetflag true ,pdata 
+67e8 600200a1 store 4 ,mem_gpio_wakeup_low 
+67e9 680200a5 fetch 4 ,mem_gpio_wakeup_high 
+67ea fd20fe00 nqsetflag true ,pdata 
+67eb 600200a5 store 4 ,mem_gpio_wakeup_high 
+67ec 20600000 rtn 
+
+gpio_clr_wake:
+67ed 474e4033 bpatchx patch33_4 ,mem_patch33 
+67ee 18467cff sub temp ,ui_button_gpio_disable ,null 
+67ef 20628000 rtn zero 
+67f0 284c0007 isolate0 7 ,temp 
+67f1 18410e1f and temp ,0x1f ,queue 
+67f2 680200a1 fetch 4 ,mem_gpio_wakeup_low 
+67f3 f93ffe00 qset0 pdata 
+67f4 600200a1 store 4 ,mem_gpio_wakeup_low 
+67f5 680200a5 fetch 4 ,mem_gpio_wakeup_high 
+67f6 f93ffe00 qset0 pdata 
+67f7 600200a5 store 4 ,mem_gpio_wakeup_high 
+67f8 20600000 rtn 
+
+gpio_config_input_nowake:
+67f9 204067ed call gpio_clr_wake 
+67fa 202067fe branch gpio_config_input_without_wake 
+
+gpio_config_input:
+67fb 18467cff sub temp ,ui_button_gpio_disable ,null 
+67fc 20628000 rtn zero 
+67fd 2455e7e1 ncall gpio_set_wake ,wake 
+
+gpio_config_input_without_wake:
+67fe d8a0807c arg core_gpio_pd0 ,contw 
+67ff 20406830 call gpio_set_bit 
+6800 79400407 setflip gpio_active_bit ,temp 
+6801 d8a08078 arg core_gpio_pu0 ,contw 
+6802 20406830 call gpio_set_bit 
+6803 793f8407 set0 gpio_active_bit ,temp 
+6804 d8a08070 arg core_gpio_oe0 ,contw 
+6805 20206830 branch gpio_set_bit 
+
+gpio_set_high_impedance:
+6806 d8a0807c arg core_gpio_pd0 ,contw 
+6807 20406830 call gpio_set_bit 
+6808 793f8407 set0 gpio_active_bit ,temp 
+6809 d8a08078 arg core_gpio_pu0 ,contw 
+680a 20406830 call gpio_set_bit 
+680b 793f8407 set0 gpio_active_bit ,temp 
+680c d8a08070 arg core_gpio_oe0 ,contw 
+680d 20206830 branch gpio_set_bit 
+
+gpio_config_output:
+680e 18467cff sub temp ,ui_button_gpio_disable ,null 
+680f 20628000 rtn zero 
+6810 79400407 setflip gpio_active_bit ,temp 
+6811 2040682f call gpio_out 
+
+gpio_config_output0:
+6812 79200407 set1 gpio_active_bit ,temp 
+6813 d8a08070 arg core_gpio_oe0 ,contw 
+6814 20206830 branch gpio_set_bit 
+
+gpio_common:
+6815 18410e07 and temp ,0x07 ,queue 
+6816 18497e00 rshift3 temp ,pdata 
+6817 1fe17e03 and_into 3 ,pdata 
+6818 98a08a00 iadd contw ,contw 
+6819 e8a08000 ifetch 1 ,contw 
+681a 20600000 rtn 
+
+gpio_check_active:
+681b d8a08074 arg core_gpio_out0 ,contw 
+681c 2020681e branch get_bit_common 
+
+gpio_get_bit:
+681d d8a0811c arg core_gpio_in ,contw 
+
+get_bit_common:
+681e 20406815 call gpio_common 
+681f 284ffe07 isolate1 gpio_active_bit ,temp 
+6820 2020e823 branch gpio_get_bit_reverse ,true 
+6821 afec0000 qisolate0 pdata 
+6822 20600000 rtn 
+
+gpio_get_bit_reverse:
+6823 afefffff qisolate1 pdata 
+6824 20600000 rtn 
+
+gpio_out_inactive:
+6825 18467cff sub temp ,ui_button_gpio_disable ,null 
+6826 20628000 rtn zero 
+6827 2fcffe07 isolate1 7 ,null 
+6828 2020682c branch gpio_out_flag 
+
+gpio_out_active:
+6829 18467cff sub temp ,ui_button_gpio_disable ,null 
+682a 20628000 rtn zero 
+682b 2fcc0007 isolate0 7 ,null 
+
+gpio_out_flag:
+682c 58000000 setarg 0 
+682d 7d20fe07 nsetflag true ,gpio_active_bit ,pdata 
+682e 98428400 ixor temp ,temp 
+
+gpio_out:
+682f d8a08074 arg core_gpio_out0 ,contw 
+
+gpio_set_bit:
+6830 20406815 call gpio_common 
+6831 284ffe07 isolate1 gpio_active_bit ,temp 
+6832 f920fe00 qsetflag true ,pdata 
+6833 e0a08000 istore 1 ,contw 
+6834 20600000 rtn 
+
+gpio_set_before_lpm_common:
+6835 da3fffff arg -1 ,rega 
+6836 68108081 hfetch 1 ,core_gpio_sel1 
+6837 2fe00602 compare 0x02 ,pdata ,0x03 
+6838 2040e878 call neglact4_from_23_pin ,true 
+6839 2fe00601 compare 0x01 ,pdata ,0x03 
+683a 2040e87a call neglact2_form_25_pin ,true 
+683b 2fe00603 compare 0x03 ,pdata ,0x03 
+683c 2040e87a call neglact2_form_25_pin ,true 
+683d 2feffe02 isolate1 2 ,pdata 
+683e 2040e874 call neglect2_from_6_pin ,true 
+683f 2feffe03 isolate1 3 ,pdata 
+6840 2040e876 call neglect4_from_9_pin ,true 
+6841 2feffe04 isolate1 4 ,pdata 
+6842 2040e87c call neglact2_form_30_pin ,true 
+6843 2feffe06 isolate1 6 ,pdata 
+6844 7d20a204 nsetflag true ,04 ,rega 
+6845 2feffe07 isolate1 7 ,pdata 
+6846 7d20a205 nsetflag true ,05 ,rega 
+6847 68108082 hfetch 1 ,core_gpio_sel2 
+6848 2feffe00 isolate1 0 ,pdata 
+6849 7d20a21b nsetflag true ,27 ,rega 
+684a 2feffe01 isolate1 1 ,pdata 
+684b 7d20a21c nsetflag true ,28 ,rega 
+684c 2feffe02 isolate1 2 ,pdata 
+684d 7d20a203 nsetflag true ,03 ,rega 
+684e 2feffe03 isolate1 3 ,pdata 
+684f 7d20a208 nsetflag true ,08 ,rega 
+6850 2feffe04 isolate1 4 ,pdata 
+6851 7d20a214 nsetflag true ,20 ,rega 
+6852 2feffe05 isolate1 5 ,pdata 
+6853 7d20a215 nsetflag true ,21 ,rega 
+6854 2feffe06 isolate1 6 ,pdata 
+6855 7d20a216 nsetflag true ,22 ,rega 
+6856 2feffe07 isolate1 7 ,pdata 
+6857 7d20a217 nsetflag true ,23 ,rega 
+6858 68108080 hfetch 1 ,core_gpio_sel 
+6859 2feffe00 isolate1 0 ,pdata 
+685a 7d20a205 nsetflag true ,05 ,rega 
+685b 2feffe01 isolate1 1 ,pdata 
+685c 7d20a206 nsetflag true ,06 ,rega 
+685d 2feffe02 isolate1 2 ,pdata 
+685e 7d20a207 nsetflag true ,07 ,rega 
+685f 2feffe03 isolate1 3 ,pdata 
+6860 7d20a212 nsetflag true ,18 ,rega 
+6861 2feffe04 isolate1 4 ,pdata 
+6862 7d20a213 nsetflag true ,19 ,rega 
+6863 2feffe05 isolate1 5 ,pdata 
+6864 7d20a214 nsetflag true ,20 ,rega 
+6865 2feffe06 isolate1 6 ,pdata 
+6866 7d20a215 nsetflag true ,21 ,rega 
+6867 2feffe07 isolate1 7 ,pdata 
+6868 7d20a216 nsetflag true ,22 ,rega 
+6869 68108062 hfetch 1 ,core_uart_ctrl 
+686a 2feffe04 isolate1 4 ,pdata 
+686b 2040e87e call neglact2_form_2_pin ,true 
+686c 474ec033 bpatchx patch33_5 ,mem_patch33 
+686d 68120078 hfetch 4 ,core_gpio_pu0 
+686e 681a007c hfetcht 4 ,core_gpio_pd0 
+686f 9841fe00 ior temp ,pdata 
+6870 1fe47e00 invert pdata ,pdata 
+6871 9a217e00 iand rega ,pdata 
+6872 60120070 hstore 4 ,core_gpio_oe0 
+6873 20600000 rtn 
+
+neglect2_from_6_pin:
+6874 d8e00006 arg 6 ,queue 
+6875 20206884 branch neglect_2_pin 
+
+neglect4_from_9_pin:
+6876 d8e00009 arg 9 ,queue 
+6877 20206882 branch neglact_4_pin 
+
+neglact4_from_23_pin:
+6878 d8e00017 arg 23 ,queue 
+6879 20206882 branch neglact_4_pin 
+
+neglact2_form_25_pin:
+687a d8e00019 arg 25 ,queue 
+687b 20206884 branch neglect_2_pin 
+
+neglact2_form_30_pin:
+687c d8e0001e arg 30 ,queue 
+687d 20206884 branch neglect_2_pin 
+
+neglact2_form_2_pin:
+687e d8e00002 arg 2 ,queue 
+687f 20206884 branch neglect_2_pin 
+
+neglact_1_pin:
+6880 df200001 arg 1 ,loopcnt 
+6881 20206885 branch neglect_pin_loop 
+
+neglact_4_pin:
+6882 df200004 arg 4 ,loopcnt 
+6883 20206885 branch neglect_pin_loop 
+
+neglect_2_pin:
+6884 df200002 arg 2 ,loopcnt 
+
+neglect_pin_loop:
+6885 f93fa200 qset0 rega 
+6886 18e08e01 increase 1 ,queue 
+6887 c2006885 loop neglect_pin_loop 
+6888 20600000 rtn 
+
+gpio_cfg_uart_tx_output:
+6889 20406895 call gpio_uart2gpio 
+688a d8400006 arg uart_wakeup_tx ,temp 
+688b 2020680e branch gpio_config_output 
+
+gpio_pu_uart_tx:
+688c 20406889 call gpio_cfg_uart_tx_output 
+688d d8400006 arg uart_wakeup_tx ,temp 
+688e 20206825 branch gpio_out_inactive 
+
+gpio_rx_config_input_with_pu:
+688f 20406895 call gpio_uart2gpio 
+6890 68108078 hfetch 1 ,core_gpio_pu0 
+6891 79207e07 set1 uart_wakeup_rx ,pdata 
+6892 60108078 hstore 1 ,core_gpio_pu0 
+6893 d8400007 arg uart_wakeup_rx ,temp 
+6894 202067fb branch gpio_config_input 
+
+gpio_uart2gpio:
+6895 68108081 hfetch 1 ,core_gpio_sel1 
+6896 1fe17efb and_into 0xfb ,pdata 
+6897 60108081 hstore 1 ,core_gpio_sel1 
+6898 20600000 rtn 
+
+gpio_check_uart_state:
+6899 68108081 hfetch 1 ,core_gpio_sel1 
+689a 2feffe02 isolate1 2 ,pdata 
+689b 20600000 rtn 
+
+load_chip_option:
+689c 2040666a call otp_enable_chgpump 
+689d 580007e0 setarg otp_chip_functions 
+689e da204150 arg mem_chip_functions ,rega 
+689f d8400002 arg 0x02 ,temp 
+68a0 204066b3 call otpd_read_data 
+68a1 2020666d branch otp_disable_chgpump 
+
+load_adc_init:
+68a2 2040666a call otp_enable_chgpump 
+68a3 580007e2 setarg otp_adc_io_0_5v_addr 
+68a4 da20421d arg mem_0_5_adc_io_data ,rega 
+68a5 d840000e arg 14 ,temp 
+68a6 204066b3 call otpd_read_data 
+68a7 2020666d branch otp_disable_chgpump 
+
+adc_init_data:
+68a8 474f4033 bpatchx patch33_6 ,mem_patch33 
+68a9 204068a2 call load_adc_init 
+68aa 6800c22d fetch 1 ,mem_adc_config_flag 
+68ab c00068af beq adc_config_vinlpm ,adc_init_data_vinlpm 
+68ac c000e8c3 beq adc_config_hvin ,adc_init_data_hvin 
+68ad c00168d7 beq adc_config_gpio ,adc_init_data_io 
+68ae 20600000 rtn 
+
+adc_init_data_vinlpm:
+68af 68094229 fetcht 2 ,mem_otp_adc_flag 
+68b0 5800aa55 setarg otp_adc_flag 
+68b1 98467c00 isub temp ,null 
+68b2 2022e8b8 branch adc_check_data_vinlpm ,zero 
+68b3 58004dfa setarg 0x4dfa 
+68b4 60014227 store 2 ,mem_3v_adc_vinlpm_data 
+68b5 58004894 setarg 0x4894 
+68b6 60014221 store 2 ,mem_2v_adc_vinlpm_data 
+68b7 202068c0 branch set_vdd_reference_voltage_1v 
+
+adc_check_data_vinlpm:
+68b8 68014227 fetch 2 ,mem_3v_adc_vinlpm_data 
+68b9 243a68bc nbranch adc_check_2v_vinlpm ,blank 
+68ba 58004dfa setarg 0x4dfa 
+68bb 60014227 store 2 ,mem_3v_adc_vinlpm_data 
+
+adc_check_2v_vinlpm:
+68bc 68014221 fetch 2 ,mem_2v_adc_vinlpm_data 
+68bd 243a68c0 nbranch set_vdd_reference_voltage_1v ,blank 
+68be 58004894 setarg 0x4894 
+68bf 60014221 store 2 ,mem_2v_adc_vinlpm_data 
+
+set_vdd_reference_voltage_1v:
+68c0 58000064 setarg 100 
+68c1 6001422b store 2 ,mem_reference_voltage 
+68c2 20600000 rtn 
+
+adc_init_data_hvin:
+68c3 68094229 fetcht 2 ,mem_otp_adc_flag 
+68c4 5800aa55 setarg otp_adc_flag 
+68c5 98467c00 isub temp ,null 
+68c6 2022e8cc branch adc_check_data_hvin ,zero 
+68c7 58005932 setarg 0x5932 
+68c8 60014225 store 2 ,mem_5v_adc_hvin_data 
+68c9 58004323 setarg 0x4323 
+68ca 6001421f store 2 ,mem_1v_adc_hvin_data 
+68cb 202068d4 branch set_vdd_reference_voltage_4v 
+
+adc_check_data_hvin:
+68cc 68014225 fetch 2 ,mem_5v_adc_hvin_data 
+68cd 243a68d0 nbranch adc_check_1v_hvin ,blank 
+68ce 58005932 setarg 0x5932 
+68cf 60014225 store 2 ,mem_5v_adc_hvin_data 
+
+adc_check_1v_hvin:
+68d0 6801421f fetch 2 ,mem_1v_adc_hvin_data 
+68d1 243a68d4 nbranch set_vdd_reference_voltage_4v ,blank 
+68d2 58004323 setarg 0x4323 
+68d3 6001421f store 2 ,mem_1v_adc_hvin_data 
+
+set_vdd_reference_voltage_4v:
+68d4 58000190 setarg 400 
+68d5 6001422b store 2 ,mem_reference_voltage 
+68d6 20600000 rtn 
+
+adc_init_data_io:
+68d7 68094229 fetcht 2 ,mem_otp_adc_flag 
+68d8 5800aa55 setarg otp_adc_flag 
+68d9 98467c00 isub temp ,null 
+68da 2022e8e0 branch adc_check_data_io ,zero 
+68db 58006946 setarg 0x6946 
+68dc 60014223 store 2 ,mem_1v_adc_io_data 
+68dd 58005377 setarg 0x5377 
+68de 6001421d store 2 ,mem_0_5_adc_io_data 
+68df 202068e8 branch set_vdd_reference_voltage_0_5v 
+
+adc_check_data_io:
+68e0 68014223 fetch 2 ,mem_1v_adc_io_data 
+68e1 243a68e4 nbranch adc_check_0_5v_io ,blank 
+68e2 58006946 setarg 0x6946 
+68e3 60014223 store 2 ,mem_1v_adc_io_data 
+
+adc_check_0_5v_io:
+68e4 6801421d fetch 2 ,mem_0_5_adc_io_data 
+68e5 243a68e8 nbranch set_vdd_reference_voltage_0_5v ,blank 
+68e6 58005377 setarg 0x5377 
+68e7 6001421d store 2 ,mem_0_5_adc_io_data 
+
+set_vdd_reference_voltage_0_5v:
+68e8 58000032 setarg 50 
+68e9 6001422b store 2 ,mem_reference_voltage 
+68ea 20600000 rtn 
+
+adc_set_mode:
+68eb 6800c22d fetch 1 ,mem_adc_config_flag 
+68ec c00068f0 beq adc_config_vinlpm ,adc_check_vinlpm 
+68ed c000e8f2 beq adc_config_hvin ,adc_check_hvin 
+68ee c00168f4 beq adc_config_gpio ,adc_check_gpio 
+68ef 20600000 rtn 
+
+adc_check_vinlpm:
+68f0 708971bf jam 0xbf ,rf_adc_mode 
+68f1 202068f8 branch read_adc 
+
+adc_check_hvin:
+68f2 708971af jam 0xaf ,rf_adc_mode 
+68f3 202068f8 branch read_adc 
+
+adc_check_gpio:
+68f4 7089718f jam 0x8f ,rf_adc_mode 
+68f5 6800c22e fetch 1 ,mem_adc_channel 
+68f6 60108973 hstore 1 ,rf_adc_ch 
+68f7 202068f8 branch read_adc 
+
+read_adc:
+68f8 474fc033 bpatchx patch33_7 ,mem_patch33 
+68f9 68108053 hfetch 1 ,core_uart_baud + 1 
+68fa 79207e07 set1 7 ,pdata 
+68fb 60108053 hstore 1 ,core_uart_baud + 1 
+68fc 68108973 hfetch 1 ,rf_adc_ch 
+68fd 1fe1fe30 or_into 0x30 ,pdata 
+68fe 60108973 hstore 1 ,rf_adc_ch 
+68ff 7089067c jam 0x7c ,rfen_adc 
+6900 708972aa jam 0xaa ,rf_adc_gc 
+6901 20001388 nop 5000 
+6902 68190150 hfetcht 2 ,core_adc_sum 
+6903 68108053 hfetch 1 ,core_uart_baud + 1 
+6904 793ffe07 set0 7 ,pdata 
+6905 60108053 hstore 1 ,core_uart_baud + 1 
+6906 6009422f storet 2 ,mem_adc_current_value 
+6907 20600000 rtn 
+
+vdd_calculate_by_mode:
+6908 47504034 bpatchx patch34_0 ,mem_patch34 
+6909 6800c22d fetch 1 ,mem_adc_config_flag 
+690a c000690e beq adc_config_vinlpm ,vdd_calculate_vinlpm 
+690b c000e912 beq adc_config_hvin ,vdd_calculate_hvin 
+690c c0016916 beq adc_config_gpio ,vdd_calculate_io 
+690d 20600000 rtn 
+
+vdd_calculate_vinlpm:
+690e 68014227 fetch 2 ,mem_3v_adc_vinlpm_data 
+690f 68094221 fetcht 2 ,mem_2v_adc_vinlpm_data 
+6910 da6000c8 arg 200 ,regc 
+6911 2020691a branch vdd_calculate 
+
+vdd_calculate_hvin:
+6912 68014225 fetch 2 ,mem_5v_adc_hvin_data 
+6913 6809421f fetcht 2 ,mem_1v_adc_hvin_data 
+6914 da600064 arg 100 ,regc 
+6915 2020691a branch vdd_calculate 
+
+vdd_calculate_io:
+6916 68014223 fetch 2 ,mem_1v_adc_io_data 
+6917 6809421d fetcht 2 ,mem_0_5_adc_io_data 
+6918 da600032 arg 50 ,regc 
+6919 2020691a branch vdd_calculate 
+
+vdd_calculate:
+691a 98462200 isub temp ,rega 
+691b 6801422f fetch 2 ,mem_adc_current_value 
+691c 98467e00 isub temp ,pdata 
+691d 24216927 nbranch vdd_calculate1 ,positive 
+691e 6809422b fetcht 2 ,mem_reference_voltage 
+691f 984fa400 imul32 temp ,regb 
+6920 1a627e00 copy regc ,pdata 
+6921 9a2ffe00 imul32 rega ,pdata 
+6922 9a40fe00 iadd regb ,pdata 
+
+vdd_calculate2:
+6923 9a26fc00 idiv rega 
+6924 20407f86 call wait_div_end 
+6925 1807fe00 quotient pdata 
+6926 20600000 rtn 
+
+vdd_calculate1:
+6927 18427e00 copy temp ,pdata 
+6928 6809422f fetcht 2 ,mem_adc_current_value 
+6929 98467e00 isub temp ,pdata 
+692a 6809422b fetcht 2 ,mem_reference_voltage 
+692b 984fa400 imul32 temp ,regb 
+692c 1a627e00 copy regc ,pdata 
+692d 9a2ffe00 imul32 rega ,pdata 
+692e 9a467e00 isub regb ,pdata 
+692f 20206923 branch vdd_calculate2 
+
+adc_bat_percent_lowpower_out:
+6930 ea240000 ifetch 8 ,rega 
+6931 60040a9a store 8 ,mem_pdatatemp 
+6932 68010a9a fetch 2 ,mem_pdatatemp 
+6933 68090a9c fetcht 2 ,mem_pdatatemp + 2 
+6934 98462200 isub temp ,rega 
+6935 68010aa0 fetch 2 ,mem_pdatatemp + 6 
+6936 98462400 isub temp ,regb 
+6937 68090a9e fetcht 2 ,mem_pdatatemp + 4 
+6938 98467c00 isub temp ,null 
+6939 24416940 ncall adc_set_low_power_flag ,positive 
+693a 1a4ffe64 mul32 regb ,100 ,pdata 
+693b 9a26fc00 idiv rega 
+693c 20407f86 call wait_div_end 
+693d 1807fe00 quotient pdata 
+693e 205a6944 call adc_set_no_power_flag ,blank 
+693f 20600000 rtn 
+
+adc_set_low_power_flag:
+6940 6800c231 fetch 1 ,mem_adc_power_flag 
+6941 79207e00 set1 0 ,pdata 
+6942 6000c231 store 1 ,mem_adc_power_flag 
+6943 20600000 rtn 
+
+adc_set_no_power_flag:
+6944 6808c231 fetcht 1 ,mem_adc_power_flag 
+6945 79200401 set1 1 ,temp 
+6946 6008c231 storet 1 ,mem_adc_power_flag 
+6947 20600000 rtn 
+
+keyscan_key_init:
+6948 6801423d fetch 2 ,mem_key_num_ptr 
+6949 efe08000 ifetch 1 ,pdata 
+
+keyscan_key_init_next:
+694a 207a0000 rtn blank 
+694b 1fe27200 copy pdata ,loopcnt 
+694c 6801423d fetch 2 ,mem_keyscan_ptr 
+694d 1fe0fe03 increase 3 ,pdata 
+694e 1fe22200 copy pdata ,rega 
+
+keyscan_key_init_lp1:
+694f ea288000 ifetcht 1 ,rega 
+6950 204067fb call gpio_config_input 
+6951 1a20a201 increase key_conf_struct_len ,rega 
+6952 c200694f loop keyscan_key_init_lp1 
+
+keyscan_key_init_end:
+6953 20600000 rtn 
+
+keyscan_scan_key:
+6954 6801423d fetch 2 ,mem_keyscan_ptr 
+6955 1fe0fe03 increase 3 ,pdata 
+6956 1fe22200 copy pdata ,rega 
+6957 18002400 force 0 ,regb 
+6958 700b1200 jam 0 ,mem_key_value_temp 
+
+keyscan_scan_key_lp1:
+6959 ea288000 ifetcht 1 ,rega 
+695a 2040681d call gpio_get_bit 
+695b 4750c034 bpatchx patch34_1 ,mem_patch34 
+695c 68010b12 fetch 2 ,mem_key_value_temp 
+695d 1a420e00 copy regb ,queue 
+695e f920fe00 qsetflag true ,pdata 
+695f 60010b12 store 2 ,mem_key_value_temp 
+6960 1a20a201 increase key_conf_struct_len ,rega 
+6961 1a40a401 increase 1 ,regb 
+6962 6801423d fetch 2 ,mem_key_num_ptr 
+6963 efe08000 ifetch 1 ,pdata 
+
+keyscan_scan_key_lp1_next:
+6964 9a42fc00 ixor regb ,null 
+6965 2422e959 nbranch keyscan_scan_key_lp1 ,zero 
+6966 68010b12 fetch 2 ,mem_key_value_temp 
+6967 68090b14 fetcht 2 ,mem_key_value 
+6968 9842fc00 ixor temp ,null 
+6969 20628000 rtn zero 
+696a 78347c00 enable user 
+696b 20600000 rtn 
+
+keyscan_process_lpm_before:
+696c 6801423d fetch 2 ,mem_key_num_ptr 
+696d efe08000 ifetch 1 ,pdata 
+
+keyscan_process_lpm_before_next:
+696e 207a0000 rtn blank 
+696f 1fe27200 copy pdata ,loopcnt 
+6970 6801423d fetch 2 ,mem_keyscan_ptr 
+6971 1fe0fe03 increase 3 ,pdata 
+6972 1fe22200 copy pdata ,rega 
+
+keyscan_process_lpm_before_lp1:
+6973 ea288000 ifetcht 1 ,rega 
+6974 204067dd call gpio_set_wake_by_current_state 
+6975 1a20a201 increase key_conf_struct_len ,rega 
+6976 c2006973 loop keyscan_process_lpm_before_lp1 
+
+keyscan_process_lpm_before_end:
+6977 20600000 rtn 
+
+keyscan_key_process:
+6978 d8e00009 arg key_scan_timer ,queue 
+6979 20407f16 call timer_check 
+697a 247a0000 nrtn blank 
+697b 58000020 setarg 0x20 
+697c d8e00009 arg key_scan_timer ,queue 
+697d 20407f08 call timer_init 
+697e 78547c00 disable user 
+697f 2040696c call keyscan_process_lpm_before 
+6980 47514034 bpatchx patch34_2 ,mem_patch34 
+6981 6801423d fetch 2 ,mem_key_num_ptr 
+6982 efe08000 ifetch 1 ,pdata 
+
+keyscan_key_process_next:
+6983 207a0000 rtn blank 
+6984 20406954 call keyscan_scan_key 
+6985 24347d02 nbranch lpm_button_clean_wake_lock ,user 
+6986 20407d00 call lpm_button_get_wake_lock 
+6987 78547c00 disable user 
+6988 68010b12 fetch 2 ,mem_key_value_temp 
+6989 60010b19 store 2 ,mem_key_value_temp4 
+698a 700b1b00 jam 0 ,mem_key_value_temp6 
+698b 18000e00 force 0 ,queue 
+
+keyscan_key_lp1:
+698c 68010b14 fetch 2 ,mem_key_value 
+698d 1fe30400 rshift pdata ,temp 
+698e 60090b14 storet 2 ,mem_key_value 
+698f 1fe17e01 and pdata ,0x01 ,pdata 
+6990 68090b19 fetcht 2 ,mem_key_value_temp4 
+6991 18412201 and temp ,0x01 ,rega 
+6992 18430400 rshift temp ,temp 
+6993 60090b19 storet 2 ,mem_key_value_temp4 
+6994 9a22fc00 ixor rega ,null 
+6995 2442e9a1 ncall keyscan_send_key_data ,zero 
+6996 6801423d fetch 2 ,mem_key_num_ptr 
+6997 efe08000 ifetch 1 ,pdata 
+
+keyscan_key_lp1_next:
+6998 68088b1b fetcht 1 ,mem_key_value_temp6 
+6999 18408401 increase 1 ,temp 
+699a 60088b1b storet 1 ,mem_key_value_temp6 
+699b 18420e00 copy temp ,queue 
+699c 98e2fc00 ixor queue ,null 
+699d 2422e98c nbranch keyscan_key_lp1 ,zero 
+699e 68010b12 fetch 2 ,mem_key_value_temp 
+699f 60010b14 store 2 ,mem_key_value 
+69a0 20600000 rtn 
+
+keyscan_send_key_data:
+69a1 4751c034 bpatchx patch34_3 ,mem_patch34 
+69a2 6801423d fetch 2 ,mem_keyscan_ptr 
+69a3 1fe0fe01 increase 1 ,pdata 
+69a4 efe10000 ifetch 2 ,pdata 
+69a5 20207f9c branch callback_func 
+
+pwm_init:
+69a6 68108042 hfetch 1 ,core_clksel 
+69a7 9a21fe00 ior rega ,pdata 
+69a8 60108042 hstore 1 ,core_clksel 
+69a9 68110050 hfetch 2 ,core_clkoff 
+69aa 793ffe0d set0 clock_off_pwm ,pdata 
+69ab 60110050 hstore 2 ,core_clkoff 
+69ac 20000064 nop 100 
+69ad 20600000 rtn 
+
+pwm_out_set:
+69ae 68098a9c fetcht 3 ,mem_pdatatemp + 2 
+69af 58b71b00 setarg pwm_12mhz 
+69b0 9846fc00 idiv temp 
+69b1 20407f86 call wait_div_end 
+69b2 18078400 quotient temp 
+69b3 68008a9f fetch 1 ,mem_pdatatemp + 5 
+69b4 984ffe00 imul32 temp ,pdata 
+69b5 1fe6fc64 div pdata ,100 
+69b6 20407f86 call wait_div_end 
+69b7 1807a200 quotient rega 
+69b8 18427e00 copy temp ,pdata 
+69b9 9a262400 isub rega ,regb 
+69ba 68008a9b fetch 1 ,mem_pdatatemp + 1 
+69bb 204069be call pwm_duty_cycle_set 
+69bc 68008a9a fetch 1 ,mem_pdatatemp 
+69bd 202069d5 branch pwm_enable 
+
+pwm_duty_cycle_set:
+69be c00069c4 beq 0 ,pwm_pwm0_duty_set 
+69bf c000e9c6 beq 1 ,pwm_pwm1_duty_set 
+69c0 c00169c8 beq 2 ,pwm_pwm2_duty_set 
+69c1 c001e9ca beq 3 ,pwm_pwm3_duty_set 
+69c2 c00269cc beq 4 ,pwm_pwm4_duty_set 
+69c3 c002e9ce beq 5 ,pwm_pwm5_duty_set 
+
+pwm_pwm0_duty_set:
+69c4 d8a080a0 arg core_pwm_pcnt0 ,contw 
+69c5 202069d0 branch pwm_set_pncnt 
+
+pwm_pwm1_duty_set:
+69c6 d8a080a4 arg core_pwm_pcnt1 ,contw 
+69c7 202069d0 branch pwm_set_pncnt 
+
+pwm_pwm2_duty_set:
+69c8 d8a080a8 arg core_pwm_pcnt2 ,contw 
+69c9 202069d0 branch pwm_set_pncnt 
+
+pwm_pwm3_duty_set:
+69ca d8a08064 arg core_pwm_pcnt3 ,contw 
+69cb 202069d0 branch pwm_set_pncnt 
+
+pwm_pwm4_duty_set:
+69cc d8a08068 arg core_pwm_pcnt4 ,contw 
+69cd 202069d0 branch pwm_set_pncnt 
+
+pwm_pwm5_duty_set:
+69ce d8a0806c arg core_pwm_pcnt5 ,contw 
+69cf 202069d0 branch pwm_set_pncnt 
+
+pwm_set_pncnt:
+69d0 1a227e00 copy rega ,pdata 
+69d1 e0a10000 istore 2 ,contw 
+69d2 1a427e00 copy regb ,pdata 
+69d3 e0a10000 istore 2 ,contw 
+69d4 20600000 rtn 
+
+pwm_enable:
+69d5 78347c00 enable user 
+69d6 202069d8 branch pwm_gpio_set 
+
+pwm_disable:
+69d7 78547c00 disable user 
+
+pwm_gpio_set:
+69d8 c00269e3 beq 4 ,pwm_gpio4_set 
+69d9 c002e9e5 beq 5 ,pwm_gpio5_set 
+69da c00de9e7 beq 27 ,pwm_gpio27_set 
+69db c00e69e9 beq 28 ,pwm_gpio28_set 
+69dc c001e9eb beq 3 ,pwm_gpio3_set 
+69dd c00469ed beq 8 ,pwm_gpio8_set 
+69de c00a69ef beq 20 ,pwm_gpio20_set 
+69df c00ae9f1 beq 21 ,pwm_gpio21_set 
+69e0 c00b69f3 beq 22 ,pwm_gpio22_set 
+69e1 c00be9f5 beq 23 ,pwm_gpio23_set 
+69e2 20600000 rtn 
+
+pwm_gpio4_set:
+69e3 d8e00006 arg 6 ,queue 
+69e4 202069ff branch pwm_one_set_select 
+
+pwm_gpio5_set:
+69e5 d8e00007 arg 7 ,queue 
+69e6 202069ff branch pwm_one_set_select 
+
+pwm_gpio27_set:
+69e7 d8e00008 arg 8 ,queue 
+69e8 202069ff branch pwm_one_set_select 
+
+pwm_gpio28_set:
+69e9 d8e00009 arg 9 ,queue 
+69ea 202069ff branch pwm_one_set_select 
+
+pwm_gpio3_set:
+69eb d8e0000a arg 10 ,queue 
+69ec 202069ff branch pwm_one_set_select 
+
+pwm_gpio8_set:
+69ed d8e0000b arg 11 ,queue 
+69ee 202069ff branch pwm_one_set_select 
+
+pwm_gpio20_set:
+69ef d8e0000c arg 12 ,queue 
+69f0 20206a01 branch pwm_tw0_set_select 
+
+pwm_gpio21_set:
+69f1 d8e0000d arg 13 ,queue 
+69f2 20206a01 branch pwm_tw0_set_select 
+
+pwm_gpio22_set:
+69f3 d8e0000e arg 14 ,queue 
+69f4 20206a01 branch pwm_tw0_set_select 
+
+pwm_gpio23_set:
+69f5 d8e0000f arg 15 ,queue 
+69f6 20206a01 branch pwm_tw0_set_select 
+
+pwm_set_select:
+69f7 68110081 hfetch 2 ,core_gpio_sel1 
+69f8 f9347e00 qsetflag user ,pdata 
+69f9 60110081 hstore 2 ,core_gpio_sel1 
+69fa 1a220e00 copy rega ,queue 
+69fb 68108085 hfetch 1 ,core_gpio_key2 
+69fc f9347e00 qsetflag user ,pdata 
+69fd 60108085 hstore 1 ,core_gpio_key2 
+69fe 20600000 rtn 
+
+pwm_one_set_select:
+69ff 18e0a3fc add queue ,-4 ,rega 
+6a00 202069f7 branch pwm_set_select 
+
+pwm_tw0_set_select:
+6a01 18e0a3f6 add queue ,-10 ,rega 
+6a02 202069f7 branch pwm_set_select 
+
+rfcomm_init:
+6a03 20758000 rtn wake 
+6a04 70456700 jam 0 ,mem_rfcomm_send_more_pkt 
+6a05 7004ed03 jam bits9600 ,memremoterpnbitrate 
+6a06 7004ee03 jam databits8 ,memremoteprndatabits 
+6a07 7004f211 jam 0x11 ,memremoteprnxon 
+6a08 7004f313 jam 0x13 ,memremoteprnxoff 
+6a09 58000000 setarg 0 
+6a0a 600184ef store 3 ,memremoteprnstopbit 
+6a0b 6000c254 store 1 ,mem_spp_state 
+6a0c 70468100 jam 0 ,memui_reconnect_mode 
+
+rfcomm_init_spp:
+6a0d 47524034 bpatchx patch34_4 ,mem_patch34 
+6a0e 58000000 setarg 0 
+6a0f 6000c254 store 1 ,mem_spp_state 
+6a10 6000c564 store 1 ,mem_remote_spp_channel 
+6a11 6000c55d store 1 ,mem_pn_dlci 
+6a12 6800c56b fetch 1 ,mem_credit_flag 
+6a13 c000ea16 beq credit_enable ,rfcomm_init_spp_with_credit 
+6a14 70456950 jam 0x50 ,mem_credit_given 
+6a15 20600000 rtn 
+
+rfcomm_init_spp_with_credit:
+6a16 70456900 jam 0x00 ,mem_credit_given 
+6a17 20600000 rtn 
+
+set_cr_bit:
+6a18 18418402 or_into 0x02 ,temp 
+6a19 20600000 rtn 
+
+rfcomm_calculate_fcs_sabm:
+6a1a 18427e00 copy temp ,pdata 
+6a1b 1fedfe00 reverse pdata ,pdata 
+6a1c 6000c562 store 1 ,memfcstemp3 
+6a1d 18007e3f force ini_tx_sabm ,pdata 
+6a1e 1fedfe00 reverse pdata ,pdata 
+6a1f 6000c561 store 1 ,memfcstemp2 
+6a20 18007e01 force 0x01 ,pdata 
+6a21 1fedfe00 reverse pdata ,pdata 
+6a22 6000c560 store 1 ,memfcstemp1 
+6a23 20406a50 call caculate_fcs 
+6a24 18427e00 copy temp ,pdata 
+6a25 20600000 rtn 
+
+rfcomm_calculate_fcs_ua:
+6a26 1fedfe00 reverse pdata ,pdata 
+6a27 6000c562 store 1 ,memfcstemp3 
+6a28 18007e73 force rsp_tx_ua ,pdata 
+6a29 1fedfe00 reverse pdata ,pdata 
+6a2a 6000c561 store 1 ,memfcstemp2 
+6a2b 18007e01 force 0x01 ,pdata 
+6a2c 1fedfe00 reverse pdata ,pdata 
+6a2d 6000c560 store 1 ,memfcstemp1 
+6a2e 20206a50 branch caculate_fcs 
+
+rfcomm_calculate_fcs_dlci0:
+6a2f 6800c563 fetch 1 ,mem_rfcomm_initiator 
+6a30 203a6a33 branch rfcomm_calculate_fcs_dlci0_res ,blank 
+6a31 58000070 setarg 0x70 
+6a32 20600000 rtn 
+
+rfcomm_calculate_fcs_dlci0_res:
+6a33 580000aa setarg 0xaa 
+6a34 20600000 rtn 
+
+rfcomm_save_fcs_uih:
+6a35 1fedfe00 reverse pdata ,pdata 
+6a36 6000c562 store 1 ,memfcstemp3 
+6a37 18007eef force rsp_rx_uih ,pdata 
+6a38 20406a44 call caculate_uihdata_fcs 
+6a39 680904f7 fetcht 2 ,mem_contw_temp 
+6a3a 18420a00 copy temp ,contw 
+6a3b e0a08000 istore 1 ,contw 
+6a3c 18a20400 copy contw ,temp 
+6a3d 600904f7 storet 2 ,mem_contw_temp 
+6a3e 18007eff force rsp_rx_uih_wdata ,pdata 
+6a3f 20406a44 call caculate_uihdata_fcs 
+6a40 680904f7 fetcht 2 ,mem_contw_temp 
+6a41 18420a00 copy temp ,contw 
+6a42 e0a08000 istore 1 ,contw 
+6a43 20600000 rtn 
+
+caculate_uihdata_fcs:
+6a44 1fedfe00 reverse pdata ,pdata 
+6a45 6000c561 store 1 ,memfcstemp2 
+6a46 68014561 fetch 2 ,memfcstemp2 
+6a47 1fed7e00 lshift8 pdata ,pdata 
+6a48 600184f4 store 3 ,mem_mod2div_temp 
+6a49 da200107 arg 0x107 ,rega 
+6a4a da40000f arg 0xf ,regb 
+6a4b 20406a5d call mod2div 
+6a4c 1fe2fed7 xor_into 0xd7 ,pdata 
+6a4d 1fe47e00 invert pdata ,pdata 
+6a4e 1fedfe00 reverse pdata ,pdata 
+6a4f 20600000 rtn 
+
+caculate_fcs:
+6a50 6801c560 fetch 3 ,memfcstemp1 
+6a51 600184f4 store 3 ,mem_mod2div_temp 
+6a52 da200107 arg 0x107 ,rega 
+6a53 da40000f arg 0xf ,regb 
+6a54 20406a5d call mod2div 
+6a55 1fed7e00 lshift8 pdata ,pdata 
+6a56 da400007 arg 0x7 ,regb 
+6a57 20406a5d call mod2div 
+6a58 1fe2fe2b xor_into 0x2b ,pdata 
+6a59 1fe47e00 invert pdata ,pdata 
+6a5a 1fedfe00 reverse pdata ,pdata 
+6a5b 1fe20400 copy pdata ,temp 
+6a5c 20600000 rtn 
+
+mod2div:
+6a5d da600000 arg 0 ,regc 
+6a5e 1a427200 copy regb ,loopcnt 
+6a5f 20407e71 call right_shift_n 
+6a60 1fe20400 icopy temp 
+
+mod2div_loop:
+6a61 18427e00 copy temp ,pdata 
+6a62 1a63a600 lshift regc ,regc 
+6a63 c3046a66 bbit0 8 ,mod2div_not_enough_reduction 
+6a64 9a228400 ixor rega ,temp 
+6a65 1a60a601 increase 1 ,regc 
+
+mod2div_not_enough_reduction:
+6a66 18438400 lshift temp ,temp 
+6a67 680184f4 fetch 3 ,mem_mod2div_temp 
+6a68 1a40a5ff increase -1 ,regb 
+6a69 2a41feff compare 0xff ,regb ,0xff 
+6a6a 2020ea70 branch mod2div_end ,true 
+6a6b 1a427200 copy regb ,loopcnt 
+6a6c 20407e71 call right_shift_n 
+6a6d 2feffe00 isolate1 0 ,pdata 
+6a6e 79208400 setflag true ,0 ,temp 
+6a6f 20206a61 branch mod2div_loop 
+
+mod2div_end:
+6a70 18437e00 rshift temp ,pdata 
+6a71 20600000 rtn 
+
+get_rfcomm_snd_adss:
+6a72 6808c55d fetcht 1 ,mem_pn_dlci 
+
+dlci_to_address_cmd:
+6a73 184b8400 lshift2 temp ,temp 
+6a74 79200400 set1 rfcomm_address_ext_len ,temp 
+6a75 6800c563 fetch 1 ,mem_rfcomm_initiator 
+6a76 245a6a18 ncall set_cr_bit ,blank 
+6a77 6008850d storet 1 ,mem_rfcomm_send_adss 
+6a78 20600000 rtn 
+
+channel_to_dlci:
+6a79 18438400 lshift temp ,temp 
+6a7a 6800c563 fetch 1 ,mem_rfcomm_initiator 
+6a7b 793a0400 setflag blank ,0 ,temp 
+6a7c 20600000 rtn 
+
+rfcomm_rx_process_dlci0_sabm:
+6a7d 680884fc fetcht 1 ,mem_current_channel 
+6a7e 7004fed7 jam 0xd7 ,mem_current_fcs 
+6a7f 20406bb6 call rfcomm_send_ua 
+6a80 6800c251 fetch 1 ,mem_rfcomm_state 
+6a81 79207e06 set1 l2cap_channel_rfcomm_only_sabm ,pdata 
+6a82 79207e07 set1 l2cap_channel_rfcomm_only_ua ,pdata 
+6a83 6000c251 store 1 ,mem_rfcomm_state 
+6a84 70456300 jam 0 ,mem_rfcomm_initiator 
+6a85 20206b97 branch rfcomm_rx_process_end 
+
+rfcomm_rx_process_dlci0_ua:
+6a86 6800c251 fetch 1 ,mem_rfcomm_state 
+6a87 79207e07 set1 l2cap_channel_rfcomm_only_ua ,pdata 
+6a88 6000c251 store 1 ,mem_rfcomm_state 
+6a89 20206b97 branch rfcomm_rx_process_end 
+
+rfcomm_rx_process:
+6a8a 4752c034 bpatchx patch34_5 ,mem_patch34 
+6a8b 6800c681 fetch 1 ,memui_reconnect_mode 
+6a8c c0006a8e beq no_reconnection ,rfcomm_rx_process_remote_page 
+6a8d 20206b4c branch rfcomm_rx_process_reconn 
+
+rfcomm_rx_process_remote_page:
+6a8e 68010264 fetch 2 ,mem_l2cap_payload_ptr 
+6a8f 1fe20c00 copy pdata ,contr 
+6a90 20406ab8 call get_rfcomm_head_struct 
+6a91 680084fc fetch 1 ,mem_current_channel 
+6a92 c0006a94 beq 0 ,parse_dlci0_rp 
+6a93 20206b18 branch parse_uih_rp 
+
+parse_dlci0_rp:
+6a94 47534034 bpatchx patch34_6 ,mem_patch34 
+6a95 680084fd fetch 1 ,mem_current_frame_type 
+6a96 c01fea7d beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm 
+6a97 c039ea86 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua 
+6a98 c077ea9b beq rfcomm_frame_type_uih ,parse_dlci0_rp_uih 
+6a99 c029eb44 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn_send_event 
+6a9a 20600000 rtn 
+
+parse_dlci0_rp_uih:
+6a9b 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr 
+6a9c 1fe20c00 copy pdata ,contr 
+6a9d 20406ac3 call get_rfcomm_uih_head_struct 
+6a9e 68008503 fetch 1 ,mem_uih_cmd_type 
+6a9f c020eaa5 beq uih_param_neg_cmd ,parse_dlci0_rp_uih_pn_cmd 
+6aa0 c0206aad beq uih_param_neg_res ,parse_dlci0_rp_uih_pn_res 
+6aa1 c038eae6 beq uih_modem_status_cmd ,parse_dlci0_rp_uih_ms_cmd 
+6aa2 c0386af2 beq uih_modem_status_res ,parse_dlci0_rp_uih_ms_res 
+6aa3 c024eafd beq uih_param_cmd_remove_port ,parse_dlci0_rp_uih_cmd_port 
+6aa4 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_rp_uih_pn_cmd:
+6aa5 20406aaf call parse_dlci0_rp_uih_pn_res_common 
+6aa6 20206aa7 branch parse_dlci0_rp_uih_pn_cmd_spp 
+
+parse_dlci0_rp_uih_pn_cmd_spp:
+6aa7 6800c254 fetch 1 ,mem_spp_state 
+6aa8 79207e00 set1 rfcomm_channel_state_pn_cmd ,pdata 
+6aa9 79207e01 set1 rfcomm_channel_state_pn_res ,pdata 
+6aaa 6000c254 store 1 ,mem_spp_state 
+6aab 20406be0 call rfcomm_send_param_neg_res 
+6aac 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_rp_uih_pn_res:
+6aad 20406aaf call parse_dlci0_rp_uih_pn_res_common 
+6aae 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_rp_uih_pn_res_common:
+6aaf 20406acb call get_param_payload_ptr 
+6ab0 20206ad7 branch get_rfcomm_prarmer_negotiation 
+
+get_rfcomm_param_modem_status:
+6ab1 20406acb call get_param_payload_ptr 
+6ab2 e8c08000 ifetch 1 ,contr 
+6ab3 1fe97e00 rshift3 pdata ,pdata 
+6ab4 6000c56a store 1 ,mem_ms_channel 
+6ab5 e8c08000 ifetch 1 ,contr 
+6ab6 60008508 store 1 ,mem_ms_param 
+6ab7 20600000 rtn 
+
+get_rfcomm_head_struct:
+6ab8 e8c08000 ifetch 1 ,contr 
+6ab9 600084fb store 1 ,mem_current_adss 
+6aba 1fe97e00 rshift3 pdata ,pdata 
+6abb 600084fc store 1 ,mem_current_channel 
+6abc e8c08000 ifetch 1 ,contr 
+6abd 600084fd store 1 ,mem_current_frame_type 
+
+get_rfcomm_current_length:
+6abe 20406ace call get_rfcomm_length_common 
+6abf 600904ff storet 2 ,mem_current_length 
+6ac0 18c27e00 copy contr ,pdata 
+6ac1 60010501 store 2 ,mem_rfcomm_uih_payload_ptr 
+6ac2 20600000 rtn 
+
+get_rfcomm_uih_head_struct:
+6ac3 e8c08000 ifetch 1 ,contr 
+6ac4 1fe37e00 rshift pdata ,pdata 
+6ac5 60008503 store 1 ,mem_uih_cmd_type 
+6ac6 20406ace call get_rfcomm_length_common 
+6ac7 60090504 storet 2 ,mem_uih_length 
+6ac8 18c27e00 copy contr ,pdata 
+6ac9 60010506 store 2 ,mem_param_payload_ptr 
+6aca 20600000 rtn 
+
+get_param_payload_ptr:
+6acb 68010506 fetch 2 ,mem_param_payload_ptr 
+6acc 1fe20c00 copy pdata ,contr 
+6acd 20600000 rtn 
+
+get_rfcomm_length_common:
+6ace e8c08000 ifetch 1 ,contr 
+6acf 1fe20400 copy pdata ,temp 
+6ad0 18430400 rshift temp ,temp 
+6ad1 c3800000 rtnbit1 0 
+6ad2 e8c08000 ifetch 1 ,contr 
+6ad3 1fe9fe00 lshift3 pdata ,pdata 
+6ad4 1ff27e00 lshift4 pdata ,pdata 
+6ad5 98408400 iadd temp ,temp 
+6ad6 20600000 rtn 
+
+get_rfcomm_prarmer_negotiation:
+6ad7 e8c08000 ifetch 1 ,contr 
+6ad8 6000c55d store 1 ,mem_pn_dlci 
+6ad9 e8c08000 ifetch 1 ,contr 
+6ada 60008509 store 1 ,mem_pn_credit_flow_type_info 
+6adb e8c08000 ifetch 1 ,contr 
+6adc 6000850a store 1 ,mem_pn_priority 
+6add e8c08000 ifetch 1 ,contr 
+6ade 6000850b store 1 ,mem_pn_acknowledg_timer 
+6adf e8c10000 ifetch 2 ,contr 
+6ae0 6001455e store 2 ,mem_pn_max_frame_size 
+6ae1 e8c08000 ifetch 1 ,contr 
+6ae2 6000850c store 1 ,mem_pn_max_retrans 
+6ae3 e8c08000 ifetch 1 ,contr 
+6ae4 6000c568 store 1 ,mem_remote_credits 
+6ae5 20600000 rtn 
+
+parse_dlci0_rp_uih_ms_cmd:
+6ae6 20406ab1 call get_rfcomm_param_modem_status 
+6ae7 20206ae8 branch parse_dlci0_rp_uih_ms_cmd_spp 
+
+parse_dlci0_rp_uih_ms_cmd_spp:
+6ae8 6800c254 fetch 1 ,mem_spp_state 
+6ae9 79207e05 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata 
+6aea 79207e06 set1 rfcomm_channel_state_snd_ms_res ,pdata 
+6aeb 6000c254 store 1 ,mem_spp_state 
+6aec 6808c55d fetcht 1 ,mem_pn_dlci 
+6aed 184b8400 lshift2 temp ,temp 
+6aee 18418403 or_into 3 ,temp 
+6aef 20406c11 call rfcomm_send_modem_status_res 
+6af0 70456703 jam more_pkt_msc_cmd_spp ,mem_rfcomm_send_more_pkt 
+6af1 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_rp_uih_ms_res:
+6af2 700a9908 jam bt_evt_spp_connected ,mem_fifo_temp 
+6af3 20407d86 call ui_ipc_send_event 
+6af4 20406ab1 call get_rfcomm_param_modem_status 
+6af5 6800c56a fetch 1 ,mem_ms_channel 
+6af6 1fe67c01 sub pdata ,1 ,null 
+6af7 2022eaf9 branch parse_dlci0_rp_uih_ms_res_spp ,zero 
+6af8 20202a8c branch assert 
+
+parse_dlci0_rp_uih_ms_res_spp:
+6af9 6800c254 fetch 1 ,mem_spp_state 
+6afa 79207e07 set1 rfcomm_channel_state_rcv_ms_res ,pdata 
+6afb 6000c254 store 1 ,mem_spp_state 
+6afc 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_rp_uih_cmd_port:
+6afd 20406acb call get_param_payload_ptr 
+6afe e8c08000 ifetch 1 ,contr 
+6aff 60008ac2 store 1 ,mem_rpn_dlci 
+6b00 204052d2 call l2cap_malloc_rfcomm_channel 
+6b01 204052e0 call l2cap_get_rfcomm_tx_buff 
+6b02 5800000e setarg 0x000e 
+6b03 e0a10000 istore 2 ,contw 
+6b04 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6b05 e0a10000 istore 2 ,contw 
+6b06 6800c563 fetch 1 ,mem_rfcomm_initiator 
+6b07 1fe3fe00 lshift pdata ,pdata 
+6b08 79207e00 set1 0 ,pdata 
+6b09 e0a08000 istore 1 ,contw 
+6b0a 4753c034 bpatchx patch34_7 ,mem_patch34 
+6b0b 580015ef setarg 0x15ef 
+6b0c e0a10000 istore 2 ,contw 
+6b0d 58001191 setarg 0x1191 
+6b0e e0a10000 istore 2 ,contw 
+6b0f 68008ac2 fetch 1 ,mem_rpn_dlci 
+6b10 e0a08000 istore 1 ,contw 
+6b11 58000007 setarg 0x000007 
+6b12 e0a28000 istore 5 ,contw 
+6b13 58000001 setarg 0x01 
+6b14 e0a10000 istore 2 ,contw 
+6b15 20406a2f call rfcomm_calculate_fcs_dlci0 
+6b16 e0a08000 istore 1 ,contw 
+6b17 20600000 rtn 
+
+parse_uih_rp:
+6b18 20206b19 branch parse_uih_rp_spp 
+
+parse_uih_rp_spp:
+6b19 47544035 bpatchx patch35_0 ,mem_patch35 
+6b1a 680084fd fetch 1 ,mem_current_frame_type 
+6b1b c039eb21 beq rfcomm_frame_type_ua ,parse_uih_rp_spp_ua 
+6b1c c01feb25 beq rfcomm_frame_type_sabm ,parse_uih_rp_spp_sabm 
+6b1d c077eb3f beq rfcomm_frame_type_uih ,parse_uih_spp_uih 
+6b1e c07feb37 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits 
+6b1f c029eb46 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn 
+6b20 20600000 rtn 
+
+parse_uih_rp_spp_ua:
+6b21 6800c254 fetch 1 ,mem_spp_state 
+6b22 79207e03 set1 rfcomm_channel_state_ua ,pdata 
+6b23 6000c254 store 1 ,mem_spp_state 
+6b24 20206b97 branch rfcomm_rx_process_end 
+
+parse_uih_rp_spp_sabm:
+6b25 6800c254 fetch 1 ,mem_spp_state 
+6b26 79207e03 set1 rfcomm_channel_state_ua ,pdata 
+6b27 79207e02 set1 rfcomm_channel_state_sabm ,pdata 
+6b28 6000c254 store 1 ,mem_spp_state 
+6b29 680084fb fetch 1 ,mem_current_adss 
+6b2a 20406a26 call rfcomm_calculate_fcs_ua 
+6b2b 600084fe store 1 ,mem_current_fcs 
+6b2c 20406bb6 call rfcomm_send_ua 
+6b2d 680084fb fetch 1 ,mem_current_adss 
+6b2e 1feb7e00 rshift2 pdata ,pdata 
+6b2f 6000c55d store 1 ,mem_pn_dlci 
+6b30 1febfe00 lshift2 pdata ,pdata 
+6b31 793ffe01 set0 rfcomm_address_cr ,pdata 
+6b32 79207e00 set1 rfcomm_address_ext_len ,pdata 
+6b33 d8404565 arg mem_hiufcs_spp ,temp 
+6b34 600904f7 storet 2 ,mem_contw_temp 
+6b35 20406a35 call rfcomm_save_fcs_uih 
+6b36 20206b97 branch rfcomm_rx_process_end 
+
+parse_uih_spp_uih_credits:
+6b37 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr 
+6b38 1fe20c00 copy pdata ,contr 
+6b39 1fe0fe01 increase 1 ,pdata 
+6b3a 60010501 store 2 ,mem_rfcomm_uih_payload_ptr 
+6b3b e8c08000 ifetch 1 ,contr 
+6b3c 6808c568 fetcht 1 ,mem_remote_credits 
+6b3d 9840fe00 iadd temp ,pdata 
+6b3e 6000c568 store 1 ,mem_remote_credits 
+
+parse_uih_spp_uih:
+6b3f 20406c42 call rfcomm_increase_credit_given 
+
+parse_uih_spp_uih_cont:
+6b40 20406a72 call get_rfcomm_snd_adss 
+6b41 20406c28 call rfcomm_send_uih_without_payload 
+6b42 20406c4b call spp_process_rx_data 
+6b43 20206b97 branch rfcomm_rx_process_end 
+
+parse_uih_rp_spp_disconn_send_event:
+6b44 700a9909 jam bt_evt_spp_disconnected ,mem_fifo_temp 
+6b45 20407d86 call ui_ipc_send_event 
+
+parse_uih_rp_spp_disconn:
+6b46 20406a0d call rfcomm_init_spp 
+6b47 680084fb fetch 1 ,mem_current_adss 
+6b48 20406a26 call rfcomm_calculate_fcs_ua 
+6b49 600084fe store 1 ,mem_current_fcs 
+6b4a 20406bb6 call rfcomm_send_ua 
+6b4b 20206b97 branch rfcomm_rx_process_end 
+
+rfcomm_rx_process_reconn:
+6b4c 68010264 fetch 2 ,mem_l2cap_payload_ptr 
+6b4d 1fe20c00 copy pdata ,contr 
+6b4e 20406ab8 call get_rfcomm_head_struct 
+6b4f 680084fc fetch 1 ,mem_current_channel 
+6b50 c0006b52 beq 0 ,parse_dlci0_reconn 
+6b51 20206b86 branch parse_uih_reconn 
+
+parse_dlci0_reconn:
+6b52 4754c035 bpatchx patch35_1 ,mem_patch35 
+6b53 680084fd fetch 1 ,mem_current_frame_type 
+6b54 c01fea7d beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm 
+6b55 c039ea86 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua 
+6b56 c077eb58 beq rfcomm_frame_type_uih ,parse_dlci0_reconn_uih 
+6b57 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_reconn_uih:
+6b58 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr 
+6b59 1fe20c00 copy pdata ,contr 
+6b5a 20406ac3 call get_rfcomm_uih_head_struct 
+6b5b 68008503 fetch 1 ,mem_uih_cmd_type 
+6b5c c020eb61 beq uih_param_neg_cmd ,parse_dlci0_reconn_uih_pn_cmd 
+6b5d c0206b61 beq uih_param_neg_res ,parse_dlci0_reconn_uih_pn_cmd 
+6b5e c038eb6c beq uih_modem_status_cmd ,parse_dlci0_reconn_uih_ms_cmd 
+6b5f c0386b7c beq uih_modem_status_res ,parse_dlci0_reconn_uih_ms_res 
+6b60 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_reconn_uih_pn_cmd:
+6b61 20406aaf call parse_dlci0_rp_uih_pn_res_common 
+6b62 6800c55d fetch 1 ,mem_pn_dlci 
+6b63 1fe37e00 rshift pdata ,pdata 
+6b64 6808c564 fetcht 1 ,mem_remote_spp_channel 
+6b65 98467c00 isub temp ,null 
+6b66 2022eb68 branch parse_dlci0_reconn_uih_pn_cmd_spp ,zero 
+6b67 20202a8c branch assert 
+
+parse_dlci0_reconn_uih_pn_cmd_spp:
+6b68 6800c254 fetch 1 ,mem_spp_state 
+6b69 79207e01 set1 rfcomm_channel_state_pn_res ,pdata 
+6b6a 6000c254 store 1 ,mem_spp_state 
+6b6b 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_reconn_uih_ms_cmd:
+6b6c 20406ab1 call get_rfcomm_param_modem_status 
+6b6d 6800c56a fetch 1 ,mem_ms_channel 
+6b6e 6808c564 fetcht 1 ,mem_remote_spp_channel 
+6b6f 98467c00 isub temp ,null 
+6b70 2022eb73 branch parse_dlci0_reconn_uih_ms_cmd_spp ,zero 
+6b71 20202a8c branch assert 
+6b72 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_reconn_uih_ms_cmd_spp:
+6b73 6800c254 fetch 1 ,mem_spp_state 
+6b74 79207e05 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata 
+6b75 79207e06 set1 rfcomm_channel_state_snd_ms_res ,pdata 
+6b76 6000c254 store 1 ,mem_spp_state 
+6b77 6808c55d fetcht 1 ,mem_pn_dlci 
+6b78 184b8400 lshift2 temp ,temp 
+6b79 18418403 or_into 3 ,temp 
+6b7a 20406c11 call rfcomm_send_modem_status_res 
+6b7b 20206b97 branch rfcomm_rx_process_end 
+
+parse_dlci0_reconn_uih_ms_res:
+6b7c 20406ab1 call get_rfcomm_param_modem_status 
+6b7d 6800c56a fetch 1 ,mem_ms_channel 
+6b7e 6808c564 fetcht 1 ,mem_remote_spp_channel 
+6b7f 98467c00 isub temp ,null 
+6b80 2022eb82 branch parse_dlci0_reconn_uih_ms_res_spp ,zero 
+6b81 20202a8c branch assert 
+
+parse_dlci0_reconn_uih_ms_res_spp:
+6b82 6800c254 fetch 1 ,mem_spp_state 
+6b83 79207e07 set1 rfcomm_channel_state_rcv_ms_res ,pdata 
+6b84 6000c254 store 1 ,mem_spp_state 
+6b85 20206b97 branch rfcomm_rx_process_end 
+
+parse_uih_reconn:
+6b86 680084fc fetch 1 ,mem_current_channel 
+6b87 6808c564 fetcht 1 ,mem_remote_spp_channel 
+6b88 98467c00 isub temp ,null 
+6b89 2022eb8c branch parse_uih_reconn_spp ,zero 
+6b8a 20202a8c branch assert 
+6b8b 20206b97 branch rfcomm_rx_process_end 
+
+parse_uih_reconn_spp:
+6b8c 680084fd fetch 1 ,mem_current_frame_type 
+6b8d c039eb91 beq rfcomm_frame_type_ua ,parse_uih_reconn_spp_ua 
+6b8e c077eb3f beq rfcomm_frame_type_uih ,parse_uih_spp_uih 
+6b8f c07feb37 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits 
+6b90 c029eb96 beq rfcomm_frame_type_disconn ,parse_uih_reconn_spp_disconn 
+
+parse_uih_reconn_spp_ua:
+6b91 6800c254 fetch 1 ,mem_spp_state 
+6b92 79207e03 set1 rfcomm_channel_state_ua ,pdata 
+6b93 6000c254 store 1 ,mem_spp_state 
+6b94 20206b97 branch rfcomm_rx_process_end 
+
+parse_uih_reconn_spp_sabm:
+6b95 20206b95 branch parse_uih_reconn_spp_sabm 
+
+parse_uih_reconn_spp_disconn:
+6b96 20206b46 branch parse_uih_rp_spp_disconn 
+
+rfcomm_rx_process_end:
+6b97 20600000 rtn 
+
+rfcomm_send_more_pkt:
+6b98 6800c567 fetch 1 ,mem_rfcomm_send_more_pkt 
+6b99 207a0000 rtn blank 
+6b9a c001eb9c beq more_pkt_msc_cmd_spp ,rfcomm_send_more_pkt_msc_cmd_spp 
+6b9b 20202a8c branch assert 
+
+rfcomm_send_more_pkt_msc_cmd_spp:
+6b9c 70456700 jam 0 ,mem_rfcomm_send_more_pkt 
+6b9d 204052d2 call l2cap_malloc_rfcomm_channel 
+6b9e d8400001 arg spp_slave_channel ,temp 
+6b9f 6808c55d fetcht 1 ,mem_pn_dlci 
+6ba0 184b8400 lshift2 temp ,temp 
+
+rfcomm_send_more_pkt_msc_cmd_spp0:
+6ba1 18418403 or_into 0x03 ,temp 
+6ba2 da2000aa arg 0xaa ,rega 
+6ba3 20406bfc call rfcomm_send_modem_status_cmd 
+6ba4 204052e0 call l2cap_get_rfcomm_tx_buff 
+6ba5 18a20c00 copy contw ,contr 
+6ba6 e8c10000 ifetch 2 ,contr 
+6ba7 203a2a8c branch assert ,blank 
+6ba8 20600000 rtn 
+
+rfcomm_send_sabm:
+6ba9 204052e0 call l2cap_get_rfcomm_tx_buff 
+6baa 58000004 setarg 0x0004 
+6bab e0a10000 istore 2 ,contw 
+6bac 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6bad e0a10000 istore 2 ,contw 
+6bae 680084fb fetch 1 ,mem_current_adss 
+6baf e0a08000 istore 1 ,contw 
+6bb0 47554035 bpatchx patch35_2 ,mem_patch35 
+6bb1 5800013f setarg 0x013f 
+6bb2 e0a10000 istore 2 ,contw 
+6bb3 680084fe fetch 1 ,mem_current_fcs 
+6bb4 e0a08000 istore 1 ,contw 
+6bb5 20600000 rtn 
+
+rfcomm_send_ua:
+6bb6 204052d2 call l2cap_malloc_rfcomm_channel 
+6bb7 204052e0 call l2cap_get_rfcomm_tx_buff 
+6bb8 58000004 setarg 0x0004 
+6bb9 e0a10000 istore 2 ,contw 
+6bba 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6bbb e0a10000 istore 2 ,contw 
+6bbc 680084fb fetch 1 ,mem_current_adss 
+6bbd e0a08000 istore 1 ,contw 
+6bbe 4755c035 bpatchx patch35_3 ,mem_patch35 
+6bbf 58000173 setarg 0x0173 
+6bc0 e0a10000 istore 2 ,contw 
+6bc1 680084fe fetch 1 ,mem_current_fcs 
+6bc2 e0a08000 istore 1 ,contw 
+6bc3 20600000 rtn 
+
+rfcomm_send_param_neg_cmd:
+6bc4 204052e0 call l2cap_get_rfcomm_tx_buff 
+6bc5 5800000e setarg 0x000e 
+6bc6 e0a10000 istore 2 ,contw 
+6bc7 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6bc8 e0a10000 istore 2 ,contw 
+6bc9 6800c563 fetch 1 ,mem_rfcomm_initiator 
+6bca 1fe3fe00 lshift pdata ,pdata 
+6bcb 79207e00 set1 0 ,pdata 
+6bcc e0a08000 istore 1 ,contw 
+6bcd 47564035 bpatchx patch35_4 ,mem_patch35 
+6bce 580015ef setarg 0x15ef 
+6bcf e0a10000 istore 2 ,contw 
+6bd0 58001183 setarg 0x1183 
+6bd1 e0a10000 istore 2 ,contw 
+6bd2 18427e00 copy temp ,pdata 
+6bd3 e0a08000 istore 1 ,contw 
+6bd4 580000f0 setarg 0x0000f0 
+6bd5 e0a18000 istore 3 ,contw 
+6bd6 5800007f setarg rfcomm_max_frame_size 
+6bd7 e0a10000 istore 2 ,contw 
+6bd8 58000000 setarg 0 
+6bd9 e0a08000 istore 1 ,contw 
+6bda 58000001 setarg 0x01 
+6bdb e0a08000 istore 1 ,contw 
+6bdc 20406a2f call rfcomm_calculate_fcs_dlci0 
+6bdd e0a08000 istore 1 ,contw 
+6bde 70456910 jam 0x10 ,mem_credit_given 
+6bdf 20600000 rtn 
+
+rfcomm_send_param_neg_res:
+6be0 204052d2 call l2cap_malloc_rfcomm_channel 
+6be1 204052e0 call l2cap_get_rfcomm_tx_buff 
+6be2 5800000e setarg 0x000e 
+6be3 e0a10000 istore 2 ,contw 
+6be4 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6be5 e0a10000 istore 2 ,contw 
+6be6 6800c563 fetch 1 ,mem_rfcomm_initiator 
+6be7 1fe3fe00 lshift pdata ,pdata 
+6be8 79207e00 set1 0 ,pdata 
+6be9 e0a08000 istore 1 ,contw 
+6bea 4756c035 bpatchx patch35_5 ,mem_patch35 
+6beb 580015ef setarg 0x15ef 
+6bec e0a10000 istore 2 ,contw 
+6bed 58001181 setarg 0x1181 
+6bee e0a10000 istore 2 ,contw 
+6bef 6800c55d fetch 1 ,mem_pn_dlci 
+6bf0 e0a08000 istore 1 ,contw 
+6bf1 580000e0 setarg 0x0000e0 
+6bf2 e0a18000 istore 3 ,contw 
+6bf3 6801456c fetch 2 ,mem_rfcomm_max_frame_size 
+6bf4 e0a10000 istore 2 ,contw 
+6bf5 58000000 setarg 0x00 
+6bf6 e0a08000 istore 1 ,contw 
+6bf7 6800c56e fetch 1 ,mem_rfcomm_credit_init_data 
+6bf8 e0a08000 istore 1 ,contw 
+6bf9 20406a2f call rfcomm_calculate_fcs_dlci0 
+6bfa e0a08000 istore 1 ,contw 
+6bfb 20600000 rtn 
+
+rfcomm_send_modem_status_cmd:
+6bfc 204052e0 call l2cap_get_rfcomm_tx_buff 
+6bfd 58000008 setarg 0x0008 
+6bfe e0a10000 istore 2 ,contw 
+6bff 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6c00 e0a10000 istore 2 ,contw 
+6c01 6800c563 fetch 1 ,mem_rfcomm_initiator 
+6c02 1fe3fe00 lshift pdata ,pdata 
+6c03 79207e00 set1 0 ,pdata 
+6c04 e0a08000 istore 1 ,contw 
+6c05 47574035 bpatchx patch35_6 ,mem_patch35 
+6c06 580009ef setarg 0x09ef 
+6c07 e0a10000 istore 2 ,contw 
+6c08 580005e3 setarg 0x05e3 
+6c09 e0a10000 istore 2 ,contw 
+6c0a 18427e00 copy temp ,pdata 
+6c0b e0a08000 istore 1 ,contw 
+6c0c 5800008d setarg 0x8d 
+6c0d e0a08000 istore 1 ,contw 
+6c0e 20406a2f call rfcomm_calculate_fcs_dlci0 
+6c0f e0a08000 istore 1 ,contw 
+6c10 20600000 rtn 
+
+rfcomm_send_modem_status_res:
+6c11 204052d2 call l2cap_malloc_rfcomm_channel 
+6c12 204052e0 call l2cap_get_rfcomm_tx_buff 
+6c13 58000008 setarg 0x0008 
+6c14 e0a10000 istore 2 ,contw 
+6c15 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6c16 e0a10000 istore 2 ,contw 
+6c17 18421600 copy temp ,timeup 
+6c18 6800c563 fetch 1 ,mem_rfcomm_initiator 
+6c19 1fe3fe00 lshift pdata ,pdata 
+6c1a 79207e00 set1 0 ,pdata 
+6c1b e0a08000 istore 1 ,contw 
+6c1c 4757c035 bpatchx patch35_7 ,mem_patch35 
+6c1d 580009ef setarg 0x09ef 
+6c1e e0a10000 istore 2 ,contw 
+6c1f 580005e1 setarg 0x05e1 
+6c20 e0a10000 istore 2 ,contw 
+6c21 19627e00 copy timeup ,pdata 
+6c22 e0a08000 istore 1 ,contw 
+6c23 5800008d setarg 0x8d 
+6c24 e0a08000 istore 1 ,contw 
+6c25 20406a2f call rfcomm_calculate_fcs_dlci0 
+6c26 e0a08000 istore 1 ,contw 
+6c27 20600000 rtn 
+
+rfcomm_send_uih_without_payload:
+6c28 47584036 bpatchx patch36_0 ,mem_patch36 
+6c29 6800c569 fetch 1 ,mem_credit_given 
+6c2a 207a0000 rtn blank 
+6c2b 68110112 hfetch 2 ,core_uart_rxitems 
+6c2c 247a0000 nrtn blank 
+6c2d 1a227e00 copy rega ,pdata 
+6c2e 60008a9b store 1 ,mem_pdatatemp + 1 
+6c2f 60088a9a storet 1 ,mem_pdatatemp 
+6c30 2040526e call l2cap_malloc_is_fifo_full 
+6c31 247a0000 nrtn blank 
+6c32 204052d2 call l2cap_malloc_rfcomm_channel 
+6c33 204052e0 call l2cap_get_rfcomm_tx_buff 
+6c34 58000005 setarg 0x05 
+6c35 e0a10000 istore 2 ,contw 
+6c36 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6c37 e0a10000 istore 2 ,contw 
+6c38 6800850d fetch 1 ,mem_rfcomm_send_adss 
+6c39 e0a08000 istore 1 ,contw 
+6c3a 580001ff setarg 0x01ff 
+6c3b e0a10000 istore 2 ,contw 
+6c3c 6800c569 fetch 1 ,mem_credit_given 
+6c3d e0a08000 istore 1 ,contw 
+6c3e 6800c566 fetch 1 ,mem_hiufcs_spp_wcredits 
+6c3f e0a08000 istore 1 ,contw 
+6c40 70456900 jam 0 ,mem_credit_given 
+6c41 20600000 rtn 
+
+rfcomm_increase_credit_given:
+6c42 4758c036 bpatchx patch36_1 ,mem_patch36 
+6c43 6800c56b fetch 1 ,mem_credit_flag 
+6c44 c1008000 rtneq credit_enable 
+6c45 680104ff fetch 2 ,mem_current_length 
+6c46 207a0000 rtn blank 
+6c47 6800c569 fetch 1 ,mem_credit_given 
+6c48 1fe0fe01 increase 1 ,pdata 
+6c49 6000c569 store 1 ,mem_credit_given 
+6c4a 20600000 rtn 
+
+spp_process_rx_data:
+6c4b 6801456f fetch 2 ,mem_cb_receive_spp_data 
+6c4c 20207f9c branch callback_func 
+
+spp_tx_rfcomm_packet:
+6c4d 47594036 bpatchx patch36_2 ,mem_patch36 
+6c4e 6800c568 fetch 1 ,mem_remote_credits 
+6c4f 207a0000 rtn blank 
+6c50 1fe0ffff increase -1 ,pdata 
+6c51 6000c568 store 1 ,mem_remote_credits 
+6c52 6801455e fetch 2 ,mem_pn_max_frame_size 
+6c53 6809469f fetcht 2 ,mem_current_packet_length 
+6c54 98467c00 isub temp ,null 
+6c55 20216c57 branch ssp_tx_rfcomm_from_uart ,positive 
+6c56 6001469f store 2 ,mem_current_packet_length 
+
+ssp_tx_rfcomm_from_uart:
+6c57 6800c569 fetch 1 ,mem_credit_given 
+6c58 203a6c5f branch ssp_tx_rfcomm_from_uart_without_credit ,blank 
+6c59 70051001 jam 1 ,mem_rfcomm_send_offset 
+6c5a 6800c566 fetch 1 ,mem_hiufcs_spp_wcredits 
+6c5b 6000850f store 1 ,mem_rfcomm_send_fcs 
+6c5c 580000ff setarg rsp_rx_uih_wdata 
+6c5d 6000850e store 1 ,mem_rfcomm_send_frame_type 
+6c5e 20206c64 branch ssp_tx_rfcomm_from_uart_common 
+
+ssp_tx_rfcomm_from_uart_without_credit:
+6c5f 70051000 jam 0 ,mem_rfcomm_send_offset 
+6c60 6800c565 fetch 1 ,mem_hiufcs_spp 
+6c61 6000850f store 1 ,mem_rfcomm_send_fcs 
+6c62 580000ef setarg rsp_tx_uih 
+6c63 6000850e store 1 ,mem_rfcomm_send_frame_type 
+
+ssp_tx_rfcomm_from_uart_common:
+6c64 4759c036 bpatchx patch36_3 ,mem_patch36 
+6c65 6801469f fetch 2 ,mem_current_packet_length 
+6c66 1fe67c7f sub pdata ,127 ,null 
+6c67 20216c6b branch ssp_tx_rfcomm_from_uart_common0 ,positive 
+6c68 68008510 fetch 1 ,mem_rfcomm_send_offset 
+6c69 1fe0fe01 increase 1 ,pdata 
+6c6a 60008510 store 1 ,mem_rfcomm_send_offset 
+
+ssp_tx_rfcomm_from_uart_common0:
+6c6b 20406a72 call get_rfcomm_snd_adss 
+6c6c 6801469f fetch 2 ,mem_current_packet_length 
+6c6d 1fe0fe08 increase 8 ,pdata 
+6c6e 68088510 fetcht 1 ,mem_rfcomm_send_offset 
+6c6f 9840a200 iadd temp ,rega 
+6c70 20405240 call l2cap_malloc 
+6c71 60010277 store 2 ,mem_rfcomm_tx_buff_ptr 
+6c72 1fe0fe04 increase 4 ,pdata 
+6c73 60010279 store 2 ,mem_rfcomm_tx_payload_ptr 
+6c74 1fe20a00 copy pdata ,contw 
+6c75 6800850d fetch 1 ,mem_rfcomm_send_adss 
+6c76 e0a08000 istore 1 ,contw 
+6c77 6800850e fetch 1 ,mem_rfcomm_send_frame_type 
+6c78 e0a08000 istore 1 ,contw 
+6c79 20406c95 call ssp_tx_write_length 
+6c7a 20406ca6 call ssp_tx_write_given_credit 
+6c7b 475a4036 bpatchx patch36_4 ,mem_patch36 
+6c7c 68014571 fetch 2 ,mem_nl_rx_data_src 
+6c7d 1fe20600 copy pdata ,contru 
+6c7e 6801469f fetch 2 ,mem_current_packet_length 
+6c7f 1fe27200 copy pdata ,loopcnt 
+6c80 204066ea call uart_copy_rx_bytes_fast 
+6c81 18a20400 copy contw ,temp 
+6c82 18627e00 copy contru ,pdata 
+6c83 60014571 store 2 ,mem_nl_rx_data_src 
+6c84 18420a00 copy temp ,contw 
+6c85 6800850f fetch 1 ,mem_rfcomm_send_fcs 
+6c86 e0a08000 istore 1 ,contw 
+6c87 68010277 fetch 2 ,mem_rfcomm_tx_buff_ptr 
+6c88 1fe20a00 copy pdata ,contw 
+6c89 6801469f fetch 2 ,mem_current_packet_length 
+6c8a 68088510 fetcht 1 ,mem_rfcomm_send_offset 
+6c8b 9840fe00 iadd temp ,pdata 
+6c8c 1fe0fe04 increase 4 ,pdata 
+6c8d e0a10000 istore 2 ,contw 
+6c8e 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6c8f e0a10000 istore 2 ,contw 
+6c90 70456900 jam 0 ,mem_credit_given 
+6c91 68014573 fetch 2 ,mem_nl_rx_len_all 
+6c92 c0003a97 beq 0 ,module_hci_command_tx_spp_tx_complete 
+6c93 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet 
+6c94 20600000 rtn 
+
+ssp_tx_write_length:
+6c95 475ac036 bpatchx patch36_5 ,mem_patch36 
+6c96 6801469f fetch 2 ,mem_current_packet_length 
+6c97 1fe67c7f sub pdata ,0x7f ,null 
+6c98 24216c9d nbranch ssp_tx_write_long_packet ,positive 
+6c99 1fe3fe00 lshift pdata ,pdata 
+6c9a 79207e00 set1 0 ,pdata 
+6c9b e0a08000 istore 1 ,contw 
+6c9c 20600000 rtn 
+
+ssp_tx_write_long_packet:
+6c9d 6801469f fetch 2 ,mem_current_packet_length 
+6c9e 1fe97e00 rshift3 pdata ,pdata 
+6c9f 1ff18400 rshift4 pdata ,temp 
+6ca0 1fe17e7f and_into 0x7f ,pdata 
+6ca1 1fe3fe00 lshift pdata ,pdata 
+6ca2 793ffe00 set0 0 ,pdata 
+6ca3 e0a08000 istore 1 ,contw 
+6ca4 e0a88000 istoret 1 ,contw 
+6ca5 20600000 rtn 
+
+ssp_tx_write_given_credit:
+6ca6 6800c569 fetch 1 ,mem_credit_given 
+6ca7 207a0000 rtn blank 
+6ca8 e0a08000 istore 1 ,contw 
+6ca9 20600000 rtn 
+
+scheduler_process:
+6caa 475b4036 bpatchx patch36_6 ,mem_patch36 
+6cab 20407d9c call check_51cmd 
+6cac 204032f6 call app_process_bb_event 
+6cad 2040631b call process_conn_sm 
+6cae 475bc036 bpatchx patch36_7 ,mem_patch36 
+6caf 204076dc call sp_calc_sequence 
+6cb0 204076b5 call simple_pairing_sequence 
+6cb1 204076c6 call master_simple_paring_sequence 
+6cb2 2040526e call l2cap_malloc_is_fifo_full 
+6cb3 247a0000 nrtn blank 
+6cb4 20404da9 call l2cap_call_proc_sigal_pending 
+6cb5 2040526e call l2cap_malloc_is_fifo_full 
+6cb6 247a0000 nrtn blank 
+6cb7 475c4037 bpatchx patch37_0 ,mem_patch37 
+6cb8 20406cf5 call process_upper_sm 
+6cb9 20404f64 call l2cap_send_config_req 
+6cba 20406b98 call rfcomm_send_more_pkt 
+
+scheduler_process0:
+6cbb 20406cbe call scheduler_tx_disconnect_hid 
+6cbc 475cc037 bpatchx patch37_1 ,mem_patch37 
+6cbd 202032f2 branch app_process_bt 
+
+scheduler_tx_disconnect_hid:
+6cbe 6800827f fetch 1 ,mem_control_tasks 
+6cbf c2805087 bbit1 l2cap_disconnect_interrupt ,l2cap_disconnect_interrupt_req 
+6cc0 c283d091 bbit1 l2cap_disconnect_control ,l2cap_disconnect_control_req 
+6cc1 20600000 rtn 
+
+scheduler_tx_l2cap_pkt:
+6cc2 475d4037 bpatchx patch37_2 ,mem_patch37 
+6cc3 20405274 call l2cap_malloc_is_fifo_empty 
+6cc4 207a0000 rtn blank 
+6cc5 6800804b fetch 1 ,mem_op 
+6cc6 c3830000 rtnbit1 op_txl2cap 
+6cc7 20405258 call l2cap_malloc_fifo_out 
+6cc8 6001016f store 2 ,mem_txptr 
+6cc9 1fe20c00 copy pdata ,contr 
+6cca e8c10000 ifetch 2 ,contr 
+6ccb 1fe0fe04 increase 4 ,pdata 
+6ccc 600141dc store 2 ,mem_tx_len 
+6ccd 7041db06 jam 6 ,mem_tx_lch 
+6cce 475dc037 bpatchx patch37_3 ,mem_patch37 
+6ccf 68014246 fetch 2 ,mem_l2cap_tx_multi_offset 
+6cd0 203a6cdd branch scheduler_tx_l2cap_start_pkt ,blank 
+6cd1 6800804b fetch 1 ,mem_op 
+6cd2 c4038000 rtnbit0 op_pkt_comp 
+6cd3 793ffe07 set0 op_pkt_comp ,pdata 
+6cd4 6000804b store 1 ,mem_op 
+6cd5 7041db05 jam 5 ,mem_tx_lch 
+6cd6 68094246 fetcht 2 ,mem_l2cap_tx_multi_offset 
+6cd7 6801016f fetch 2 ,mem_txptr 
+6cd8 9840fe00 iadd temp ,pdata 
+6cd9 6001016f store 2 ,mem_txptr 
+6cda 680141dc fetch 2 ,mem_tx_len 
+6cdb 98467e00 isub temp ,pdata 
+6cdc 600141dc store 2 ,mem_tx_len 
+
+scheduler_tx_l2cap_start_pkt:
+6cdd 475e4037 bpatchx patch37_4 ,mem_patch37 
+6cde 680141dc fetch 2 ,mem_tx_len 
+6cdf 203a2a8c branch assert ,blank 
+6ce0 d8400104 arg l2cap_max_pkt_len ,temp 
+6ce1 98467e00 isub temp ,pdata 
+6ce2 24216ce9 nbranch scheduler_tx_l2cap_last_pkt ,positive 
+6ce3 475ec037 bpatchx patch37_5 ,mem_patch37 
+6ce4 600941dc storet 2 ,mem_tx_len 
+6ce5 68014246 fetch 2 ,mem_l2cap_tx_multi_offset 
+6ce6 9840fe00 iadd temp ,pdata 
+6ce7 60014246 store 2 ,mem_l2cap_tx_multi_offset 
+6ce8 20206ceb branch scheduler_tx_l2cap_pkt_end 
+
+scheduler_tx_l2cap_last_pkt:
+6ce9 58000000 setarg 0 
+6cea 60014246 store 2 ,mem_l2cap_tx_multi_offset 
+
+scheduler_tx_l2cap_pkt_end:
+6ceb 6800804b fetch 1 ,mem_op 
+6cec 79207e06 set1 op_txl2cap ,pdata 
+6ced 6000804b store 1 ,mem_op 
+6cee 20600000 rtn 
+
+scheduler_start_upper_sm:
+6cef 6800c684 fetch 1 ,mem_ui_profile_supported 
+6cf0 c2806cf3 bbit1 support_hid ,scheduler_start_upper_sm_hid 
+6cf1 70028701 jam uppersm_reconn_sdp_conn ,mem_upper_sm_reconn 
+6cf2 20600000 rtn 
+
+scheduler_start_upper_sm_hid:
+6cf3 7002870f jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn 
+6cf4 20600000 rtn 
+
+process_upper_sm:
+6cf5 6800c681 fetch 1 ,memui_reconnect_mode 
+6cf6 243a6cfb nbranch process_upper_sm_reconn ,blank 
+
+process_upper_sm_remote_page:
+6cf7 68008286 fetch 1 ,mem_upper_sm_remote_page 
+6cf8 207a0000 rtn blank 
+6cf9 70028600 jam 0 ,mem_upper_sm_remote_page 
+
+process_upper_sm_rp_wait:
+6cfa 20600000 rtn 
+
+process_upper_sm_reconn:
+6cfb 475f4037 bpatchx patch37_6 ,mem_patch37 
+6cfc 68008287 fetch 1 ,mem_upper_sm_reconn 
+6cfd 207a0000 rtn blank 
+6cfe c000ed1b beq uppersm_reconn_sdp_conn ,process_upper_sm_reconn_sdp_conn 
+6cff c0016d74 beq uppersm_reconn_sdp_conn_wait ,process_upper_sm_reconn_sdp_conn_wait 
+6d00 c001ed21 beq uppersm_reconn_sdp_cfg ,process_upper_sm_reconn_sdp_cfg 
+6d01 c0026d78 beq uppersm_reconn_sdp_cfg_wait ,process_upper_sm_reconn_sdp_cfg_wait 
+6d02 c01ded2b beq uppersm_reconn_ss_spp ,process_upper_sm_reconn_ss_spp 
+6d03 c01e6d7b beq uppersm_reconn_ss_spp_wait ,process_upper_sm_reconn_ss_spp_wait 
+6d04 c006ed30 beq uppersm_reconn_sdp_disconn ,process_upper_sm_reconn_sdp_disconn 
+6d05 c0076d80 beq uppersm_reconn_sdp_disconn_wait ,process_upper_sm_reconn_sdp_disconn_wait 
+6d06 c007ed33 beq uppersm_reconn_hid_ctrl_conn ,process_upper_sm_reconn_hid_ctrl_conn 
+6d07 c0086d86 beq uppersm_reconn_hid_ctrl_conn_wait ,process_upper_sm_reconn_hid_ctrl_conn_wait 
+6d08 c008ed39 beq uppersm_reconn_hid_ctrl_cfg ,process_upper_sm_reconn_hid_ctrl_cfg 
+6d09 c0096d8a beq uppersm_reconn_hid_ctrl_cfg_wait ,process_upper_sm_reconn_hid_ctrl_cfg_wait 
+6d0a c009ed3f beq uppersm_reconn_hid_int_conn ,process_upper_sm_reconn_hid_int_conn 
+6d0b c00a6d8e beq uppersm_reconn_hid_int_conn_wait ,process_upper_sm_reconn_hid_int_conn_wait 
+6d0c c00aed45 beq uppersm_reconn_hid_int_cfg ,process_upper_sm_reconn_hid_int_cfg 
+6d0d c00b6d92 beq uppersm_reconn_hid_int_cfg_wait ,process_upper_sm_reconn_hid_int_cfg_wait 
+6d0e c00bed4b beq uppersm_reconn_rfcomm_conn ,process_upper_sm_reconn_rfcomm_conn 
+6d0f c00c6d97 beq uppersm_reconn_rfcomm_conn_wait ,process_upper_sm_reconn_rfcomm_conn_wait 
+6d10 c00ced51 beq uppersm_reconn_rfcomm_cfg ,process_upper_sm_reconn_rfcomm_cfg 
+6d11 c00d6d9b beq uppersm_reconn_rfcomm_cfg_wait ,process_upper_sm_reconn_rfcomm_cfg_wait 
+6d12 c00ded57 beq uppersm_reconn_rfcomm_sabm ,process_upper_sm_reconn_rfcomm_sabm 
+6d13 c00e6d9f beq uppersm_reconn_rfcomm_sabm_wait ,process_upper_sm_reconn_rfcomm_sabm_wait 
+6d14 c00eed5d beq uppersm_reconn_spp_cmd_pn ,process_upper_sm_reconn_spp_cmd_pn 
+6d15 c00f6da4 beq uppersm_reconn_spp_cmd_pn_wait ,process_upper_sm_reconn_spp_cmd_pn_wait 
+6d16 c00fed63 beq uppersm_reconn_spp_sabm ,process_upper_sm_reconn_spp_sabm 
+6d17 c0106da8 beq uppersm_reconn_spp_sabm_wait ,process_upper_sm_reconn_spp_sabm_wait 
+6d18 c010ed6e beq uppersm_reconn_spp_cmd_ms ,process_upper_sm_reconn_spp_cmd_ms 
+6d19 c0116dac beq uppersm_reconn_spp_cmd_ms_wait ,process_upper_sm_reconn_spp_cmd_ms_wait 
+
+process_upper_sm_reconn_wait:
+6d1a 20600000 rtn 
+
+process_upper_sm_reconn_sdp_conn:
+6d1b 20406db7 call upper_sm_send_sdp_conn 
+6d1c 70028702 jam uppersm_reconn_sdp_conn_wait ,mem_upper_sm_reconn 
+6d1d 6800c250 fetch 1 ,mem_sdp_state 
+6d1e 79207e00 set1 l2cap_channel_state_conn_req ,pdata 
+6d1f 6000c250 store 1 ,mem_sdp_state 
+6d20 20600000 rtn 
+
+process_upper_sm_reconn_sdp_cfg:
+6d21 70028704 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn 
+6d22 6800c250 fetch 1 ,mem_sdp_state 
+6d23 c3810000 rtnbit1 l2cap_channel_state_snd_cfg_req 
+6d24 70028703 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn 
+6d25 20406dbe call upper_sm_send_sdp_cfg 
+6d26 70028704 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn 
+6d27 6800c250 fetch 1 ,mem_sdp_state 
+6d28 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+6d29 6000c250 store 1 ,mem_sdp_state 
+6d2a 20600000 rtn 
+
+process_upper_sm_reconn_ss_spp:
+6d2b 20405274 call l2cap_malloc_is_fifo_empty 
+6d2c 247a0000 nrtn blank 
+6d2d 20406dcd call upper_sm_send_ss_spp 
+6d2e 7002873c jam uppersm_reconn_ss_spp_wait ,mem_upper_sm_reconn 
+6d2f 20600000 rtn 
+
+process_upper_sm_reconn_sdp_disconn:
+6d30 20406dc3 call upper_sm_send_sdp_disconn 
+6d31 7002870e jam uppersm_reconn_sdp_disconn_wait ,mem_upper_sm_reconn 
+6d32 20600000 rtn 
+
+process_upper_sm_reconn_hid_ctrl_conn:
+6d33 20406ddd call upper_sm_send_hid_ctrl_conn 
+6d34 70028710 jam uppersm_reconn_hid_ctrl_conn_wait ,mem_upper_sm_reconn 
+6d35 6800c252 fetch 1 ,mem_hid_control_state 
+6d36 79207e00 set1 l2cap_channel_state_conn_req ,pdata 
+6d37 6000c252 store 1 ,mem_hid_control_state 
+6d38 20600000 rtn 
+
+process_upper_sm_reconn_hid_ctrl_cfg:
+6d39 20406de4 call upper_sm_send_hid_ctrl_cfg 
+6d3a 70028712 jam uppersm_reconn_hid_ctrl_cfg_wait ,mem_upper_sm_reconn 
+6d3b 6800c252 fetch 1 ,mem_hid_control_state 
+6d3c 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+6d3d 6000c252 store 1 ,mem_hid_control_state 
+6d3e 20600000 rtn 
+
+process_upper_sm_reconn_hid_int_conn:
+6d3f 20406de9 call upper_sm_send_hid_int_conn 
+6d40 70028714 jam uppersm_reconn_hid_int_conn_wait ,mem_upper_sm_reconn 
+6d41 6800c253 fetch 1 ,mem_hid_interrupt_state 
+6d42 79207e00 set1 l2cap_channel_state_conn_req ,pdata 
+6d43 6000c253 store 1 ,mem_hid_interrupt_state 
+6d44 20600000 rtn 
+
+process_upper_sm_reconn_hid_int_cfg:
+6d45 20406df0 call upper_sm_send_hid_int_cfg 
+6d46 70028716 jam uppersm_reconn_hid_int_cfg_wait ,mem_upper_sm_reconn 
+6d47 6800c253 fetch 1 ,mem_hid_interrupt_state 
+6d48 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+6d49 6000c253 store 1 ,mem_hid_interrupt_state 
+6d4a 20600000 rtn 
+
+process_upper_sm_reconn_rfcomm_conn:
+6d4b 20406dd1 call upper_sm_send_rfcomm_conn 
+6d4c 70028718 jam uppersm_reconn_rfcomm_conn_wait ,mem_upper_sm_reconn 
+6d4d 6800c251 fetch 1 ,mem_rfcomm_state 
+6d4e 79207e00 set1 l2cap_channel_state_conn_req ,pdata 
+6d4f 6000c251 store 1 ,mem_rfcomm_state 
+6d50 20600000 rtn 
+
+process_upper_sm_reconn_rfcomm_cfg:
+6d51 20406dd8 call upper_sm_send_rfcomm_cfg 
+6d52 7002871a jam uppersm_reconn_rfcomm_cfg_wait ,mem_upper_sm_reconn 
+6d53 6800c251 fetch 1 ,mem_rfcomm_state 
+6d54 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata 
+6d55 6000c251 store 1 ,mem_rfcomm_state 
+6d56 20600000 rtn 
+
+process_upper_sm_reconn_rfcomm_sabm:
+6d57 20406df5 call upper_sm_send_rfcomm_sabm 
+6d58 7002871c jam uppersm_reconn_rfcomm_sabm_wait ,mem_upper_sm_reconn 
+6d59 6800c251 fetch 1 ,mem_rfcomm_state 
+6d5a 79207e06 set1 l2cap_channel_rfcomm_only_sabm ,pdata 
+6d5b 6000c251 store 1 ,mem_rfcomm_state 
+6d5c 20600000 rtn 
+
+process_upper_sm_reconn_spp_cmd_pn:
+6d5d 20406dfc call upper_sm_send_spp_cmd_pn 
+6d5e 6800c254 fetch 1 ,mem_spp_state 
+6d5f 79207e00 set1 rfcomm_channel_state_pn_cmd 
+6d60 6000c254 store 1 ,mem_spp_state 
+6d61 7002871e jam uppersm_reconn_spp_cmd_pn_wait ,mem_upper_sm_reconn 
+6d62 20600000 rtn 
+
+process_upper_sm_reconn_spp_sabm:
+6d63 20406e02 call upper_sm_send_spp_sabm 
+6d64 6800c254 fetch 1 ,mem_spp_state 
+6d65 79207e02 set1 rfcomm_channel_state_sabm 
+6d66 6000c254 store 1 ,mem_spp_state 
+6d67 70028720 jam uppersm_reconn_spp_sabm_wait ,mem_upper_sm_reconn 
+6d68 6800c564 fetch 1 ,mem_remote_spp_channel 
+6d69 1fe9fe00 lshift3 pdata ,pdata 
+6d6a 1fe1fe03 or_into 3 ,pdata 
+6d6b d8404565 arg mem_hiufcs_spp ,temp 
+6d6c 600904f7 storet 2 ,mem_contw_temp 
+6d6d 20206a35 branch rfcomm_save_fcs_uih 
+
+process_upper_sm_reconn_spp_cmd_ms:
+6d6e 20406e0c call upper_sm_send_spp_cmd_ms 
+6d6f 6800c254 fetch 1 ,mem_spp_state 
+6d70 79207e04 set1 rfcomm_channel_state_snd_ms_cmd 
+6d71 6000c254 store 1 ,mem_spp_state 
+6d72 70028722 jam uppersm_reconn_spp_cmd_ms_wait ,mem_upper_sm_reconn 
+6d73 20600000 rtn 
+
+process_upper_sm_reconn_sdp_conn_wait:
+6d74 6800c250 fetch 1 ,mem_sdp_state 
+6d75 c4008000 rtnbit0 l2cap_channel_state_conn_res 
+6d76 70028703 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn 
+6d77 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_sdp_cfg_wait:
+6d78 6800c250 fetch 1 ,mem_sdp_state 
+6d79 c19f8000 rtnne l2cap_channel_setup_complete 
+6d7a 7002873b jam uppersm_reconn_ss_spp ,mem_upper_sm_reconn 
+
+process_upper_sm_reconn_ss_spp_wait:
+6d7b 68008285 fetch 1 ,mem_message_to_uppersm 
+6d7c c18b8000 rtnne recieve_ss_reasult_hf 
+6d7d 70028500 jam 0 ,mem_message_to_uppersm 
+6d7e 7002870d jam uppersm_reconn_sdp_disconn ,mem_upper_sm_reconn 
+6d7f 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_sdp_disconn_wait:
+6d80 6800c250 fetch 1 ,mem_sdp_state 
+6d81 247a0000 nrtn blank 
+6d82 6800c684 fetch 1 ,mem_ui_profile_supported 
+6d83 c2806daf bbit1 support_hid ,process_upper_sm_reconn_setup_hid 
+6d84 c2836db1 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm 
+6d85 20206db5 branch process_upper_sm_reconn_termination 
+
+process_upper_sm_reconn_hid_ctrl_conn_wait:
+6d86 6800c252 fetch 1 ,mem_hid_control_state 
+6d87 c4008000 rtnbit0 l2cap_channel_state_conn_res 
+6d88 70028711 jam uppersm_reconn_hid_ctrl_cfg ,mem_upper_sm_reconn 
+6d89 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_hid_ctrl_cfg_wait:
+6d8a 6800c252 fetch 1 ,mem_hid_control_state 
+6d8b c19f8000 rtnne l2cap_channel_setup_complete 
+6d8c 70028713 jam uppersm_reconn_hid_int_conn ,mem_upper_sm_reconn 
+6d8d 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_hid_int_conn_wait:
+6d8e 6800c253 fetch 1 ,mem_hid_interrupt_state 
+6d8f c4008000 rtnbit0 l2cap_channel_state_conn_res 
+6d90 70028715 jam uppersm_reconn_hid_int_cfg ,mem_upper_sm_reconn 
+6d91 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_hid_int_cfg_wait:
+6d92 6800c253 fetch 1 ,mem_hid_interrupt_state 
+6d93 c19f8000 rtnne l2cap_channel_setup_complete 
+6d94 6800c684 fetch 1 ,mem_ui_profile_supported 
+6d95 c2836db1 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm 
+6d96 20206db5 branch process_upper_sm_reconn_termination 
+
+process_upper_sm_reconn_rfcomm_conn_wait:
+6d97 6800c251 fetch 1 ,mem_rfcomm_state 
+6d98 c4008000 rtnbit0 l2cap_channel_state_conn_res 
+6d99 70028719 jam uppersm_reconn_rfcomm_cfg ,mem_upper_sm_reconn 
+6d9a 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_rfcomm_cfg_wait:
+6d9b 6800c251 fetch 1 ,mem_rfcomm_state 
+6d9c c19f8000 rtnne l2cap_channel_setup_complete 
+6d9d 7002871b jam uppersm_reconn_rfcomm_sabm ,mem_upper_sm_reconn 
+6d9e 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_rfcomm_sabm_wait:
+6d9f 6800c251 fetch 1 ,mem_rfcomm_state 
+6da0 c1ff8000 rtnne l2cap_channel_rfcomm_dlci0_opened 
+6da1 6800c684 fetch 1 ,mem_ui_profile_supported 
+6da2 c2836db3 bbit1 support_spp ,process_upper_sm_reconn_setup_spp 
+6da3 20206db5 branch process_upper_sm_reconn_termination 
+
+process_upper_sm_reconn_spp_cmd_pn_wait:
+6da4 6800c254 fetch 1 ,mem_spp_state 
+6da5 c4008000 rtnbit0 rfcomm_channel_state_pn_res 
+6da6 7002871f jam uppersm_reconn_spp_sabm ,mem_upper_sm_reconn 
+6da7 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_spp_sabm_wait:
+6da8 6800c254 fetch 1 ,mem_spp_state 
+6da9 c4018000 rtnbit0 rfcomm_channel_state_ua 
+6daa 70028721 jam uppersm_reconn_spp_cmd_ms ,mem_upper_sm_reconn 
+6dab 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_spp_cmd_ms_wait:
+6dac 6800c254 fetch 1 ,mem_spp_state 
+6dad c1ff8000 rtnne rfcomm_channel_setup_complete 
+6dae 20206db5 branch process_upper_sm_reconn_termination 
+
+process_upper_sm_reconn_setup_hid:
+6daf 7002870f jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn 
+6db0 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_setup_rfcomm:
+6db1 70028717 jam uppersm_reconn_rfcomm_conn ,mem_upper_sm_reconn 
+6db2 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_setup_spp:
+6db3 7002871d jam uppersm_reconn_spp_cmd_pn ,mem_upper_sm_reconn 
+6db4 20206cfb branch process_upper_sm_reconn 
+
+process_upper_sm_reconn_termination:
+6db5 70028700 jam 0 ,mem_upper_sm_reconn 
+6db6 20600000 rtn 
+
+upper_sm_send_sdp_conn:
+6db7 475fc037 bpatchx patch37_7 ,mem_patch37 
+6db8 204052b8 call l2cap_malloc_signal_channel 
+6db9 58000001 setarg psm_sdp 
+6dba 1fe20400 copy pdata ,temp 
+6dbb 58000050 setarg l2cap_sdp_channel 
+6dbc 1fe21600 copy pdata ,timeup 
+6dbd 202050a8 branch ml2cap_send_signal_connect_req 
+
+upper_sm_send_sdp_cfg:
+6dbe 47604038 bpatchx patch38_0 ,mem_patch38 
+6dbf 204052b8 call l2cap_malloc_signal_channel 
+6dc0 68014248 fetch 2 ,mem_sdp_remote_cid 
+6dc1 1fe20400 copy pdata ,temp 
+6dc2 202050b7 branch ml2cap_send_signal_config_req 
+
+upper_sm_send_sdp_disconn:
+6dc3 4760c038 bpatchx patch38_1 ,mem_patch38 
+6dc4 204052b8 call l2cap_malloc_signal_channel 
+6dc5 68014248 fetch 2 ,mem_sdp_remote_cid 
+6dc6 1fe20400 copy pdata ,temp 
+6dc7 d9600050 arg l2cap_sdp_channel ,timeup 
+6dc8 204050cc call ml2cap_send_signal_disconn_req 
+6dc9 6800c250 fetch 1 ,mem_sdp_state 
+6dca 793ffe05 set0 l2cap_channel_state_rcv_cfg_res ,pdata 
+6dcb 6000c250 store 1 ,mem_sdp_state 
+6dcc 20600000 rtn 
+
+upper_sm_send_ss_spp:
+6dcd 47614038 bpatchx patch38_2 ,mem_patch38 
+6dce 204052c5 call l2cap_malloc_sdp_channel 
+6dcf 20407138 call sdp_send_spp_request 
+6dd0 202050e7 branch msdp_send_req_done 
+
+upper_sm_send_rfcomm_conn:
+6dd1 4761c038 bpatchx patch38_3 ,mem_patch38 
+6dd2 204052b8 call l2cap_malloc_signal_channel 
+6dd3 58000003 setarg psm_rfcomm 
+6dd4 1fe20400 copy pdata ,temp 
+6dd5 58000051 setarg l2cap_rfcomm_channel 
+6dd6 1fe21600 copy pdata ,timeup 
+6dd7 202050a8 branch ml2cap_send_signal_connect_req 
+
+upper_sm_send_rfcomm_cfg:
+6dd8 47624038 bpatchx patch38_4 ,mem_patch38 
+6dd9 204052b8 call l2cap_malloc_signal_channel 
+6dda 6801424a fetch 2 ,mem_rfcomm_remote_cid 
+6ddb 1fe20400 copy pdata ,temp 
+6ddc 202050b7 branch ml2cap_send_signal_config_req 
+
+upper_sm_send_hid_ctrl_conn:
+6ddd 4762c038 bpatchx patch38_5 ,mem_patch38 
+6dde 204052b8 call l2cap_malloc_signal_channel 
+6ddf 58000011 setarg psm_hid_control 
+6de0 1fe20400 copy pdata ,temp 
+6de1 58000052 setarg l2cap_hid_control_channel 
+6de2 1fe21600 copy pdata ,timeup 
+6de3 202050a8 branch ml2cap_send_signal_connect_req 
+
+upper_sm_send_hid_ctrl_cfg:
+6de4 47634038 bpatchx patch38_6 ,mem_patch38 
+6de5 204052b8 call l2cap_malloc_signal_channel 
+6de6 6801424c fetch 2 ,mem_hid_ctrl_remote_cid 
+6de7 1fe20400 copy pdata ,temp 
+6de8 202050b7 branch ml2cap_send_signal_config_req 
+
+upper_sm_send_hid_int_conn:
+6de9 4763c038 bpatchx patch38_7 ,mem_patch38 
+6dea 204052b8 call l2cap_malloc_signal_channel 
+6deb 58000013 setarg psm_hid_interrupt 
+6dec 1fe20400 copy pdata ,temp 
+6ded 58000053 setarg l2cap_hid_interrupt_channel 
+6dee 1fe21600 copy pdata ,timeup 
+6def 202050a8 branch ml2cap_send_signal_connect_req 
+
+upper_sm_send_hid_int_cfg:
+6df0 47644039 bpatchx patch39_0 ,mem_patch39 
+6df1 204052b8 call l2cap_malloc_signal_channel 
+6df2 6801424e fetch 2 ,mem_hid_int_remote_cid 
+6df3 1fe20400 copy pdata ,temp 
+6df4 202050b7 branch ml2cap_send_signal_config_req 
+
+upper_sm_send_rfcomm_sabm:
+6df5 4764c039 bpatchx patch39_1 ,mem_patch39 
+6df6 204052d2 call l2cap_malloc_rfcomm_channel 
+6df7 7004fb03 jam 3 ,mem_current_adss 
+6df8 7004fe1c jam 0x1c ,mem_current_fcs 
+6df9 20406ba9 call rfcomm_send_sabm 
+6dfa 70456301 jam 1 ,mem_rfcomm_initiator 
+6dfb 20600000 rtn 
+
+upper_sm_send_spp_cmd_pn:
+6dfc 47654039 bpatchx patch39_2 ,mem_patch39 
+6dfd 204052d2 call l2cap_malloc_rfcomm_channel 
+6dfe 6808c564 fetcht 1 ,mem_remote_spp_channel 
+6dff 20406a79 call channel_to_dlci 
+6e00 6008c55d storet 1 ,mem_pn_dlci 
+6e01 20206bc4 branch rfcomm_send_param_neg_cmd 
+
+upper_sm_send_spp_sabm:
+6e02 4765c039 bpatchx patch39_3 ,mem_patch39 
+6e03 204052d2 call l2cap_malloc_rfcomm_channel 
+6e04 6808c55d fetcht 1 ,mem_pn_dlci 
+6e05 20406a73 call dlci_to_address_cmd 
+6e06 20406a1a call rfcomm_calculate_fcs_sabm 
+6e07 600084fe store 1 ,mem_current_fcs 
+6e08 6808c55d fetcht 1 ,mem_pn_dlci 
+6e09 20406a73 call dlci_to_address_cmd 
+6e0a 600884fb storet 1 ,mem_current_adss 
+6e0b 20206ba9 branch rfcomm_send_sabm 
+
+upper_sm_send_spp_cmd_ms:
+6e0c 47664039 bpatchx patch39_4 ,mem_patch39 
+6e0d 204052d2 call l2cap_malloc_rfcomm_channel 
+6e0e 6808c55d fetcht 1 ,mem_pn_dlci 
+6e0f 20406a73 call dlci_to_address_cmd 
+6e10 20206bfc branch rfcomm_send_modem_status_cmd 
+
+sdp_process:
+6e11 4766c039 bpatchx patch39_5 ,mem_patch39 
+6e12 68010264 fetch 2 ,mem_l2cap_payload_ptr 
+6e13 98000c00 iforce contr 
+6e14 e8c08000 ifetch 1 ,contr 
+6e15 1fe22400 copy pdata ,regb 
+6e16 6000851b store 1 ,mem_sdp_pduid 
+6e17 e8c10000 ifetch 2 ,contr 
+6e18 6001051c store 2 ,mem_sdp_transactionid 
+6e19 e8c08000 ifetch 1 ,contr 
+6e1a 1fed1600 lshift8 pdata ,timeup 
+6e1b e8c08000 ifetch 1 ,contr 
+6e1c 99609600 iadd timeup ,timeup 
+6e1d 47674039 bpatchx patch39_6 ,mem_patch39 
+6e1e 18c20400 copy contr ,temp 
+6e1f df200004 arg 4 ,loopcnt 
+6e20 d8a0052a arg mem_sdp_handle_list ,contw 
+6e21 20407ec6 call memset0 
+6e22 18420c00 copy temp ,contr 
+6e23 1a427e00 deposit regb 
+6e24 c000efba beq sdp_error_res ,sdp_process_error_res 
+6e25 c0016e2c beq sdp_search_req ,sdp_process_ss_req 
+6e26 c001efba beq sdp_search_res ,sdp_process_ss_res 
+6e27 c0026e54 beq sdp_attribute_req ,sdp_process_sa_req 
+6e28 c002efba beq sdp_attribute_res ,sdp_process_sa_res 
+6e29 c0036f02 beq sdp_searchattrib_req ,sdp_process_ssa_req 
+6e2a c003efba beq sdp_searchattrib_res ,sdp_process_ssa_res 
+6e2b 20206fc1 branch sdp_insufficient_resource 
+
+sdp_process_ss_req:
+6e2c 4767c039 bpatchx patch39_7 ,mem_patch39 
+6e2d 20406fd0 call ask_serviceclassid 
+6e2e 2841fe01 compare 1 ,temp ,0xff 
+6e2f 2020f040 branch ss_empty_rsp ,true 
+6e30 2841feff compare 0xff ,temp ,0xff 
+6e31 2020efc4 branch sdp_invalid_request_syntax ,true 
+6e32 e8c10000 ifetch 2 ,contr 
+6e33 60010522 store 2 ,mem_sdp_record_maxcnt 
+6e34 196097fe increase -2 ,timeup 
+6e35 196097ff increase -1 ,timeup 
+6e36 2422efbe nbranch sdp_invalid_pdu_size ,zero 
+6e37 d9600511 arg mem_sdp_uuid_search_ptr ,timeup 
+6e38 e9610000 ifetch 2 ,timeup 
+6e39 207a0000 rtn blank 
+6e3a 20407082 call search_all_uuid 
+6e3b 204052d0 call l2cap_get_sdp_tx_payload 
+6e3c 18007e03 force 3 ,pdata 
+6e3d e0a08000 istore 1 ,contw 
+6e3e 6801051c fetch 2 ,mem_sdp_transactionid 
+6e3f e0a10000 istore 2 ,contw 
+6e40 18ebfe00 lshift2 queue ,pdata 
+6e41 1fe0fe05 add pdata ,5 ,pdata 
+6e42 1fe0a605 add pdata ,5 ,regc 
+6e43 1ff0fe00 byteswap pdata ,pdata 
+6e44 e0a10000 istore 2 ,contw 
+6e45 18e27e00 deposit queue 
+6e46 1ff0fe00 byteswap pdata ,pdata 
+6e47 e0a10000 istore 2 ,contw 
+6e48 e0a10000 istore 2 ,contw 
+6e49 d8c0052a arg mem_sdp_handle_list ,contr 
+6e4a 18e27200 copy queue ,loopcnt 
+6e4b 2022ee4f branch ss_req_blank ,zero 
+
+ss_req_loop:
+6e4c e8c20000 ifetch 4 ,contr 
+6e4d e0a20000 istore 4 ,contw 
+6e4e c2006e4c loop ss_req_loop 
+
+ss_req_blank:
+6e4f 18007e00 force 0 ,pdata 
+6e50 e0a08000 istore 1 ,contw 
+6e51 1a627e00 deposit regc 
+6e52 60010275 store 2 ,mem_sdp_tx_pkt_length 
+6e53 20600000 rtn 
+
+sdp_process_sa_req:
+6e54 4768403a bpatchx patch3a_0 ,mem_patch3a 
+6e55 e8c20000 ifetch 4 ,contr 
+6e56 60020524 store 4 ,mem_sdp_record_handle 
+6e57 196097fc increase -4 ,timeup 
+6e58 20406f2e call sdp_store_maxbyte 
+6e59 60010520 store 2 ,mem_sdp_attribute_maxbyte 
+6e5a 196097fe increase -2 ,timeup 
+6e5b 20407028 call dataelementtype6 
+6e5c 2022efc4 branch sdp_invalid_request_syntax ,zero 
+6e5d 2a21fe05 compare 5 ,rega ,0xff 
+6e5e 2020ee62 branch sa_judge_wholerange ,true 
+
+sa_isnot_wholerange:
+6e5f d8a0052a arg mem_sdp_attrib_list ,contw 
+6e60 18000e00 force 0 ,queue 
+6e61 20206e71 branch sa_req_loop 
+
+sa_judge_wholerange:
+6e62 e8c08000 ifetch 1 ,contr 
+6e63 c0856fc4 bne sdp_attribute_range ,sdp_invalid_request_syntax 
+6e64 e8c10000 ifetch 2 ,contr 
+6e65 243a6e6f nbranch sa_judge_wholerange_false1 ,blank 
+6e66 e8c08000 ifetch 1 ,contr 
+6e67 c0ffee6d bne 0xff ,sa_judge_wholerange_false2 
+6e68 e8c08000 ifetch 1 ,contr 
+6e69 c0ffee6b bne 0xff ,sa_judge_wholerange_false3 
+6e6a 20206eb8 branch sa_req_all 
+
+sa_judge_wholerange_false3:
+6e6b 18c08dfb increase -5 ,contr 
+6e6c 20206e5f branch sa_isnot_wholerange 
+
+sa_judge_wholerange_false2:
+6e6d 18c08dfc increase -4 ,contr 
+6e6e 20206e5f branch sa_isnot_wholerange 
+
+sa_judge_wholerange_false1:
+6e6f 18c08dfd increase -3 ,contr 
+6e70 20206e5f branch sa_isnot_wholerange 
+
+sa_req_loop:
+6e71 e8c08000 ifetch 1 ,contr 
+6e72 c004ee86 beq sdp_attribute_id ,sa_req_one_id 
+6e73 c0056e74 beq sdp_attribute_range ,sa_req_range 
+
+sa_req_range:
+6e74 e8c10000 ifetch 2 ,contr 
+6e75 e0a10000 istore 2 ,contw 
+6e76 18e08e01 increase 1 ,queue 
+6e77 1ff0a400 byteswap pdata ,regb 
+6e78 e8c10000 ifetch 2 ,contr 
+6e79 1ff0fe00 byteswap pdata ,pdata 
+
+sa_req_range_id_increase:
+6e7a 1a40a401 increase 1 ,regb 
+6e7b 9a467c00 isub regb ,null 
+6e7c 24216e83 nbranch sa_req_range_id_finish ,positive 
+6e7d 1fe22600 copy pdata ,regc 
+6e7e 1a50fe00 byteswap regb ,pdata 
+6e7f e0a10000 istore 2 ,contw 
+6e80 18e08e01 increase 1 ,queue 
+6e81 1a627e00 copy regc ,pdata 
+6e82 20206e7a branch sa_req_range_id_increase 
+
+sa_req_range_id_finish:
+6e83 196097fb increase -5 ,timeup 
+6e84 1a20a3fb increase -5 ,rega 
+6e85 20206e8b branch sa_req_check_next_id 
+
+sa_req_one_id:
+6e86 e8c10000 ifetch 2 ,contr 
+6e87 e0a10000 istore 2 ,contw 
+6e88 18e08e01 increase 1 ,queue 
+6e89 196097fd increase -3 ,timeup 
+6e8a 1a20a3fd increase -3 ,rega 
+
+sa_req_check_next_id:
+6e8b 24216fc4 nbranch sdp_invalid_request_syntax ,positive 
+6e8c 2422ee71 nbranch sa_req_loop ,zero 
+6e8d 196097ff increase -1 ,timeup 
+6e8e 2422efc4 nbranch sdp_invalid_request_syntax ,zero 
+6e8f 204052d0 call l2cap_get_sdp_tx_payload 
+6e90 18a08a0a increase 10 ,contw 
+6e91 da20052a arg mem_sdp_attrib_list ,rega 
+
+sa_req_handle_attributelist_next:
+6e92 18e27e00 copy queue ,pdata 
+6e93 203a6ea5 branch sa_req_handle_attributelist_end ,blank 
+6e94 ea210000 ifetch 2 ,rega 
+6e95 203a6ea5 branch sa_req_handle_attributelist_end ,blank 
+6e96 98002400 iforce regb 
+6e97 68020524 fetch 4 ,mem_sdp_record_handle 
+6e98 98000400 iforce temp 
+6e99 204070e7 call search_handle_attrib 
+6e9a 18c27e00 copy contr ,pdata 
+6e9b 203a6ea2 branch sa_req_handle_attributelist_notfound ,blank 
+6e9c 18c08dfd increase -3 ,contr 
+6e9d e8c18000 ifetch 3 ,contr 
+6e9e e0a18000 istore 3 ,contw 
+6e9f 2040705b call sdp_data_len 
+6ea0 98007200 iforce loopcnt 
+6ea1 20407f01 call memcpy 
+
+sa_req_handle_attributelist_notfound:
+6ea2 1a20a202 increase 2 ,rega 
+6ea3 18e08fff increase -1 ,queue 
+6ea4 20206e92 branch sa_req_handle_attributelist_next 
+
+sa_req_handle_attributelist_end:
+6ea5 da200005 arg sdp_attribute_res ,rega 
+6ea6 20406f84 call ssa_req_range_lastfreg_common 
+6ea7 68010275 fetch 2 ,mem_sdp_tx_pkt_length 
+6ea8 c005f043 beq 11 ,sa_empty_rsp 
+6ea9 20206f9a branch ssa_req_range_attrbutes_length_no_continue 
+
+sdp_store_continue_common:
+6eaa e8c08000 ifetch 1 ,contr 
+6eab c0006eae beq 0 ,sdp_store_continue_0byte 
+6eac c000eeb0 beq 1 ,sdp_store_continue_1byte 
+6ead c0016eb3 beq 2 ,sdp_store_continue_2byte 
+
+sdp_store_continue_0byte:
+6eae 196097ff increase -1 ,timeup 
+6eaf 20206eb6 branch sdp_store_continue_end 
+
+sdp_store_continue_1byte:
+6eb0 e8c08000 ifetch 1 ,contr 
+6eb1 196097fe increase -2 ,timeup 
+6eb2 20206eb6 branch sdp_store_continue_end 
+
+sdp_store_continue_2byte:
+6eb3 e8c10000 ifetch 2 ,contr 
+6eb4 1ff0fe00 byteswap pdata ,pdata 
+6eb5 196097fd increase -3 ,timeup 
+
+sdp_store_continue_end:
+6eb6 60010519 store 2 ,mem_sdp_continue_byte 
+6eb7 20600000 rtn 
+
+sa_req_all:
+6eb8 196097fb increase -5 ,timeup 
+6eb9 20406eaa call sdp_store_continue_common 
+6eba 2422efbe nbranch sdp_invalid_pdu_size ,zero 
+6ebb 680a0524 fetcht 4 ,mem_sdp_record_handle 
+6ebc 204070b1 call search_handle 
+6ebd 2422efbb nbranch sdp_invalid_service_record_handle ,zero 
+6ebe 18c22200 copy contr ,rega 
+6ebf 204052d0 call l2cap_get_sdp_tx_payload 
+6ec0 1a220c00 copy rega ,contr 
+6ec1 18a08a03 increase 3 ,contw 
+6ec2 18c21600 copy contr ,timeup 
+6ec3 20407062 call sdp_get_data 
+6ec4 1fe22200 copy pdata ,rega 
+6ec5 68010519 fetch 2 ,mem_sdp_continue_byte 
+6ec6 1fe22400 copy pdata ,regb 
+6ec7 1a227e00 copy rega ,pdata 
+6ec8 9a462400 isub regb ,regb 
+6ec9 68010520 fetch 2 ,mem_sdp_attribute_maxbyte 
+6eca 9a467c00 isub regb ,null 
+6ecb 24216ee7 nbranch sa_req_all_fragment_sdp ,positive 
+6ecc 78547c00 disable user 
+6ecd 68010519 fetch 2 ,mem_sdp_continue_byte 
+6ece 203a6eda branch sa_req_all_fisrt_fragment ,blank 
+6ecf 99608c00 iadd timeup ,contr 
+6ed0 1a40a403 increase 3 ,regb 
+6ed1 1a427200 copy regb ,loopcnt 
+6ed2 1f227e00 copy loopcnt ,pdata 
+6ed3 1fe0fe03 increase 3 ,pdata 
+6ed4 1ff0fe00 byteswap pdata ,pdata 
+6ed5 e0a10000 istore 2 ,contw 
+6ed6 1f227e00 copy loopcnt ,pdata 
+6ed7 1ff0fe00 byteswap pdata ,pdata 
+6ed8 e0a10000 istore 2 ,contw 
+6ed9 20206ef5 branch sa_req_all_answer_attributelist_full_loop 
+
+sa_req_all_fisrt_fragment:
+6eda 1a20f206 add rega ,6 ,loopcnt 
+6edb 20346ede branch sa_req_all_parlength_continue_byte ,user 
+6edc 1f30fe00 byteswap loopcnt ,pdata 
+6edd 20206ee1 branch sa_req_all_parlength_continue_byte_end 
+
+sa_req_all_parlength_continue_byte:
+6ede 1f227e00 copy loopcnt ,pdata 
+6edf 1fe0fe02 increase 2 ,pdata 
+6ee0 1ff0fe00 byteswap pdata ,pdata 
+
+sa_req_all_parlength_continue_byte_end:
+6ee1 e0a10000 istore 2 ,contw 
+6ee2 1f20f3fd increase -3 ,loopcnt 
+6ee3 1f30fe00 byteswap loopcnt ,pdata 
+6ee4 e0a10000 istore 2 ,contw 
+6ee5 19620c00 copy timeup ,contr 
+6ee6 20206ef5 branch sa_req_all_answer_attributelist_full_loop 
+
+sa_req_all_fragment_sdp:
+6ee7 78347c00 enable user 
+6ee8 68010520 fetch 2 ,mem_sdp_attribute_maxbyte 
+6ee9 1fe22200 copy pdata ,rega 
+6eea 1a227200 copy rega ,loopcnt 
+6eeb 68010519 fetch 2 ,mem_sdp_continue_byte 
+6eec 203a6eda branch sa_req_all_fisrt_fragment ,blank 
+6eed 99608c00 iadd timeup ,contr 
+6eee 1a227e00 copy rega ,pdata 
+6eef 1fe0fe05 increase 5 ,pdata 
+6ef0 1ff0fe00 byteswap pdata ,pdata 
+6ef1 e0a10000 istore 2 ,contw 
+6ef2 1a227e00 copy rega ,pdata 
+6ef3 1ff0fe00 byteswap pdata ,pdata 
+6ef4 e0a10000 istore 2 ,contw 
+
+sa_req_all_answer_attributelist_full_loop:
+6ef5 20407f01 call memcpy 
+6ef6 24346efe nbranch sa_req_all_last_frag_continue ,user 
+6ef7 18007e02 force 2 ,pdata 
+6ef8 e0a08000 istore 1 ,contw 
+6ef9 18c27e00 copy contr ,pdata 
+6efa 99667e00 isub timeup ,pdata 
+6efb 1ff0fe00 byteswap pdata ,pdata 
+6efc e0a10000 istore 2 ,contw 
+6efd 20206f00 branch sa_req_all_frag_end 
+
+sa_req_all_last_frag_continue:
+6efe 18007e00 force 0 ,pdata 
+6eff e0a08000 istore 1 ,contw 
+
+sa_req_all_frag_end:
+6f00 da200005 arg sdp_attribute_res ,rega 
+6f01 20206fb0 branch ssa_req_range_common 
+
+sdp_process_ssa_req:
+6f02 4768c03a bpatchx patch3a_1 ,mem_patch3a 
+6f03 20406fd0 call ask_serviceclassid 
+6f04 2841feff compare 0xff ,temp ,0xff 
+6f05 2020efc4 branch sdp_invalid_request_syntax ,true 
+6f06 20406f2e call sdp_store_maxbyte 
+6f07 60010520 store 2 ,mem_sdp_attribute_maxbyte 
+6f08 196097fe increase -2 ,timeup 
+6f09 20407028 call dataelementtype6 
+6f0a d8a0052a arg mem_sdp_attrib_list ,contw 
+6f0b 18000e00 force 0 ,queue 
+
+ssa_req_loop:
+6f0c e8c08000 ifetch 1 ,contr 
+6f0d c0056f36 beq sdp_attribute_range ,ssa_req_range 
+6f0e e8c10000 ifetch 2 ,contr 
+6f0f e0a10000 istore 2 ,contw 
+6f10 18e08e01 increase 1 ,queue 
+6f11 196097fd increase -3 ,timeup 
+6f12 1a20a3fd increase -3 ,rega 
+6f13 24216fc4 nbranch sdp_invalid_request_syntax ,positive 
+6f14 2422ef0c nbranch ssa_req_loop ,zero 
+6f15 196097ff increase -1 ,timeup 
+6f16 2422efc4 nbranch sdp_invalid_request_syntax ,zero 
+6f17 204052d0 call l2cap_get_sdp_tx_payload 
+6f18 18a08a0d increase 13 ,contw 
+6f19 68010511 fetch 2 ,mem_sdp_uuid_search_ptr 
+6f1a 98002600 iforce regc 
+6f1b da20052a arg mem_sdp_attrib_list ,rega 
+
+ssa_req_attributelist_next:
+6f1c ea210000 ifetch 2 ,rega 
+6f1d 203a6f29 branch ssa_req_attributelist_end ,blank 
+6f1e 98002400 iforce regb 
+6f1f 204070c6 call search_attrib 
+6f20 203a6f27 branch ssa_req_attributelist_notfound ,blank 
+6f21 18c08dfd increase -3 ,contr 
+6f22 e8c18000 ifetch 3 ,contr 
+6f23 e0a18000 istore 3 ,contw 
+6f24 2040705b call sdp_data_len 
+6f25 98007200 iforce loopcnt 
+6f26 20407f01 call memcpy 
+
+ssa_req_attributelist_notfound:
+6f27 1a20a202 increase 2 ,rega 
+6f28 20206f1c branch ssa_req_attributelist_next 
+
+ssa_req_attributelist_end:
+6f29 20406f83 call ssa_req_range_lastfreg 
+6f2a 68010275 fetch 2 ,mem_sdp_tx_pkt_length 
+6f2b c0077046 beq 14 ,ssa_empty_rsp 
+6f2c 20406f9a call ssa_req_range_attrbutes_length_no_continue 
+6f2d 20206f9a branch ssa_req_range_attrbutes_length_no_continue 
+
+sdp_store_maxbyte:
+6f2e e8c10000 ifetch 2 ,contr 
+6f2f 1ff0fe00 byteswap pdata ,pdata 
+6f30 1fe0fffd increase -3 ,pdata 
+6f31 d84000c8 arg 200 ,temp 
+6f32 98467c00 isub temp ,null 
+6f33 24610000 nrtn positive 
+6f34 580000c8 setarg 200 
+6f35 20600000 rtn 
+
+ssa_req_range:
+6f36 18c08c04 increase 4 ,contr 
+6f37 196097fb increase -5 ,timeup 
+6f38 1a20a3fb increase -5 ,rega 
+6f39 2422efc4 nbranch sdp_invalid_request_syntax ,zero 
+6f3a 20406eaa call sdp_store_continue_common 
+6f3b 2422efbe nbranch sdp_invalid_pdu_size ,zero 
+6f3c d9600511 arg mem_sdp_uuid_search_ptr ,timeup 
+6f3d 20407082 call search_all_uuid 
+6f3e 18e27e00 deposit queue 
+6f3f 203a7046 branch ssa_empty_rsp ,blank 
+6f40 6000854e store 1 ,mem_handle_humber 
+6f41 1a427e00 copy regb ,pdata 
+6f42 6001054c store 2 ,mem_sdp_all_length 
+6f43 d8e00000 arg 0 ,queue 
+6f44 da200000 arg 0 ,rega 
+6f45 204052d0 call l2cap_get_sdp_tx_payload 
+6f46 18a08a0a increase 10 ,contw 
+
+ssa_req_range_find_handle:
+6f47 20406f6c call ssa_req_range_get_length 
+6f48 24342a8c nbranch assert ,user 
+6f49 18c21600 copy contr ,timeup 
+6f4a 1fe22600 copy pdata ,regc 
+6f4b 9a20a200 iadd rega ,rega 
+6f4c 68010519 fetch 2 ,mem_sdp_continue_byte 
+6f4d 1fe22400 copy pdata ,regb 
+6f4e 203a6f75 branch ssa_req_range_first_freg ,blank 
+
+ssa_req_range_later_freg_with_continue:
+6f4f 1a227e00 copy rega ,pdata 
+6f50 9a462400 isub regb ,regb 
+6f51 2022ef67 branch ssa_req_range_next_handle ,zero 
+6f52 24216f67 nbranch ssa_req_range_next_handle ,positive 
+6f53 68010520 fetch 2 ,mem_sdp_attribute_maxbyte 
+6f54 9a467c00 isub regb ,null 
+6f55 2022ef5e branch ssa_req_range_maxbyte_with_continue ,zero 
+6f56 24216f5e nbranch ssa_req_range_maxbyte_with_continue ,positive 
+
+ssa_req_range_send_not_maxbyte:
+6f57 1a427200 copy regb ,loopcnt 
+6f58 20406f61 call ssa_req_range_maxbyte_with_continue_cpy 
+6f59 6800854e fetch 1 ,mem_handle_humber 
+6f5a 18e08e01 increase 1 ,queue 
+6f5b 98e67c00 isub queue ,null 
+6f5c 2022ef83 branch ssa_req_range_lastfreg ,zero 
+6f5d 20206fa0 branch ssa_req_range_freg_with_continue 
+
+ssa_req_range_maxbyte_with_continue:
+6f5e 1fe27200 copy pdata ,loopcnt 
+6f5f 20406f61 call ssa_req_range_maxbyte_with_continue_cpy 
+6f60 20206fa0 branch ssa_req_range_freg_with_continue 
+
+ssa_req_range_maxbyte_with_continue_cpy:
+6f61 18a08bfd increase -3 ,contw 
+6f62 1f220400 copy loopcnt ,temp 
+6f63 1a627e00 copy regc ,pdata 
+6f64 9a467e00 isub regb ,pdata 
+6f65 99608c00 iadd timeup ,contr 
+6f66 20207f01 branch memcpy 
+
+ssa_req_range_next_handle:
+6f67 6800854e fetch 1 ,mem_handle_humber 
+6f68 18e08e01 increase 1 ,queue 
+6f69 98e67c00 isub queue ,null 
+6f6a 20628000 rtn zero 
+6f6b 20206f47 branch ssa_req_range_find_handle 
+
+ssa_req_range_get_length:
+6f6c 20407fe9 call disable_user 
+6f6d d8c0052a arg mem_sdp_handle_list ,contr 
+6f6e 18ebfe00 lshift2 queue ,pdata 
+6f6f 98c08c00 iadd contr ,contr 
+6f70 e8ca0000 ifetcht 4 ,contr 
+6f71 204070b1 call search_handle 
+6f72 24628000 nrtn zero 
+6f73 2040705b call sdp_data_len 
+6f74 20207fe7 branch enable_user 
+
+ssa_req_range_first_freg:
+6f75 68010520 fetch 2 ,mem_sdp_attribute_maxbyte 
+6f76 9a267c00 isub rega ,null 
+6f77 24216f8f nbranch ssa_req_range_firstfreg_maxbyte_with_continue ,positive 
+6f78 1a227200 copy rega ,loopcnt 
+6f79 1f220400 copy loopcnt ,temp 
+6f7a 19620c00 copy timeup ,contr 
+6f7b 20407f01 call memcpy 
+6f7c 6801054c fetch 2 ,mem_sdp_all_length 
+6f7d 9a267c00 isub rega ,null 
+6f7e 2022ef81 branch ssa_req_range_freg_no_continue ,zero 
+
+ssa_req_range_firstfreg_not_maxbyte_with_continue:
+6f7f 20406fa0 call ssa_req_range_freg_with_continue 
+6f80 20206f94 branch ssa_req_range_attrbutes_length 
+
+ssa_req_range_freg_no_continue:
+6f81 20406f83 call ssa_req_range_lastfreg 
+6f82 20206f94 branch ssa_req_range_attrbutes_length 
+
+ssa_req_range_lastfreg:
+6f83 da200007 arg sdp_searchattrib_res ,rega 
+
+ssa_req_range_lastfreg_common:
+6f84 18007e00 force 0 ,pdata 
+6f85 e0a08000 istore 1 ,contw 
+6f86 20406fb0 call ssa_req_range_common 
+6f87 68090275 fetcht 2 ,mem_sdp_tx_pkt_length 
+6f88 184085fb increase -5 ,temp 
+6f89 1850fe00 byteswap temp ,pdata 
+6f8a e0a10000 istore 2 ,contw 
+6f8b 184085fd increase -3 ,temp 
+6f8c 1850fe00 byteswap temp ,pdata 
+6f8d e0a10000 istore 2 ,contw 
+6f8e 20600000 rtn 
+
+ssa_req_range_firstfreg_maxbyte_with_continue:
+6f8f 1fe27200 copy pdata ,loopcnt 
+6f90 1f220400 copy loopcnt ,temp 
+6f91 19620c00 copy timeup ,contr 
+6f92 20407f01 call memcpy 
+6f93 20406fa0 call ssa_req_range_freg_with_continue 
+
+ssa_req_range_attrbutes_length:
+6f94 58000036 setarg 0x36 
+6f95 e0a08000 istore 1 ,contw 
+6f96 6801054c fetch 2 ,mem_sdp_all_length 
+6f97 1ff0fe00 byteswap pdata ,pdata 
+6f98 e0a10000 istore 2 ,contw 
+6f99 20600000 rtn 
+
+ssa_req_range_attrbutes_length_no_continue:
+6f9a 58000036 setarg 0x36 
+6f9b e0a08000 istore 1 ,contw 
+6f9c 184085fd increase -3 ,temp 
+6f9d 1850fe00 byteswap temp ,pdata 
+6f9e e0a10000 istore 2 ,contw 
+6f9f 20600000 rtn 
+
+ssa_req_range_freg_with_continue:
+6fa0 da200007 arg sdp_searchattrib_res ,rega 
+6fa1 58000002 setarg 2 
+6fa2 e0a08000 istore 1 ,contw 
+6fa3 68010519 fetch 2 ,mem_sdp_continue_byte 
+6fa4 98408400 iadd temp ,temp 
+6fa5 1850fe00 byteswap temp ,pdata 
+6fa6 e0a10000 istore 2 ,contw 
+6fa7 20406fb0 call ssa_req_range_common 
+6fa8 68090275 fetcht 2 ,mem_sdp_tx_pkt_length 
+6fa9 184085fb increase -5 ,temp 
+6faa 1850fe00 byteswap temp ,pdata 
+6fab e0a10000 istore 2 ,contw 
+6fac 184085fb increase -5 ,temp 
+6fad 1850fe00 byteswap temp ,pdata 
+6fae e0a10000 istore 2 ,contw 
+6faf 20600000 rtn 
+
+ssa_req_range_common:
+6fb0 68010273 fetch 2 ,mem_sdp_tx_payload_ptr 
+6fb1 98a67e00 isub contw ,pdata 
+6fb2 1fe67e00 sub pdata ,0 ,pdata 
+6fb3 60010275 store 2 ,mem_sdp_tx_pkt_length 
+6fb4 204052d0 call l2cap_get_sdp_tx_payload 
+6fb5 1a227e00 copy rega ,pdata 
+6fb6 e0a08000 istore 1 ,contw 
+6fb7 6801051c fetch 2 ,mem_sdp_transactionid 
+6fb8 e0a10000 istore 2 ,contw 
+6fb9 20600000 rtn 
+
+sdp_process_ssa_res:
+
+sdp_process_ss_res:
+
+sdp_process_sa_res:
+
+sdp_process_error_res:
+6fba 20600000 rtn 
+
+sdp_invalid_service_record_handle:
+6fbb 58000200 setarg 0x0200 
+6fbc 6001054a store 2 ,mem_sdp_error_code 
+6fbd 20206fc6 branch sdp_error_response 
+
+sdp_invalid_pdu_size:
+6fbe 58000400 setarg 0x0400 
+6fbf 6001054a store 2 ,mem_sdp_error_code 
+6fc0 20206fc6 branch sdp_error_response 
+
+sdp_insufficient_resource:
+6fc1 58000600 setarg 0x0600 
+6fc2 6001054a store 2 ,mem_sdp_error_code 
+6fc3 20206fc6 branch sdp_error_response 
+
+sdp_invalid_request_syntax:
+6fc4 58000300 setarg 0x0300 
+6fc5 6001054a store 2 ,mem_sdp_error_code 
+
+sdp_error_response:
+6fc6 204052d0 call l2cap_get_sdp_tx_payload 
+6fc7 e0a08000 istore 1 ,contw 
+6fc8 6801051c fetch 2 ,mem_sdp_transactionid 
+6fc9 e0a10000 istore 2 ,contw 
+6fca 58000200 setarg 0x0200 
+6fcb e0a10000 istore 2 ,contw 
+6fcc 6801054a fetch 2 ,mem_sdp_error_code 
+6fcd e0a10000 istore 2 ,contw 
+6fce 70027507 jam 7 ,mem_sdp_tx_pkt_length 
+6fcf 20600000 rtn 
+
+ask_serviceclassid:
+6fd0 da400000 arg 0 ,regb 
+6fd1 18000400 force 0 ,temp 
+6fd2 d8a00511 arg mem_sdp_uuid_search_ptr ,contw 
+6fd3 20407028 call dataelementtype6 
+6fd4 2022f026 branch asksrv_error ,zero 
+
+classidloop:
+6fd5 1a40a401 increase 1 ,regb 
+6fd6 e8c08000 ifetch 1 ,contr 
+6fd7 1a20a3ff increase -1 ,rega 
+6fd8 196097ff increase -1 ,timeup 
+6fd9 2fe1f018 compare 0x18 ,pdata ,0xf8 
+6fda 2420f026 nbranch asksrv_error ,true 
+6fdb 2fe00e04 compare 0x04 ,pdata ,0x07 
+6fdc 2420eff3 nbranch cmp032 ,true 
+6fdd 18000401 force 1 ,temp 
+
+skip2bytes:
+6fde e8c08000 ifetch 1 ,contr 
+6fdf 1a20a3ff increase -1 ,rega 
+6fe0 196097ff increase -1 ,timeup 
+6fe1 c0806fe7 bne 0x00 ,frstbwrong 
+6fe2 e8c08000 ifetch 1 ,contr 
+6fe3 1a20a3ff increase -1 ,rega 
+6fe4 196097ff increase -1 ,timeup 
+6fe5 c0006ff8 beq 0x00 ,cmpuuid 
+6fe6 20206fea branch scndbwrong 
+
+frstbwrong:
+6fe7 18c08c01 increase 1 ,contr 
+6fe8 1a20a3ff increase -1 ,rega 
+6fe9 196097ff increase -1 ,timeup 
+
+scndbwrong:
+6fea 18c08c02 increase 2 ,contr 
+6feb 1a20a3fe increase -2 ,rega 
+6fec 196097fe increase -2 ,timeup 
+6fed 2841fe00 compare 0x00 ,temp ,0xff 
+6fee 2020f020 branch loopornot ,true 
+6fef 18c08c0c increase 12 ,contr 
+6ff0 1a20a3f4 increase -12 ,rega 
+6ff1 196097f4 increase -12 ,timeup 
+6ff2 20207020 branch loopornot 
+
+cmp032:
+6ff3 2fe00e02 compare 0x02 ,pdata ,0x07 
+6ff4 2420eff6 nbranch cmp016 ,true 
+6ff5 20206fde branch skip2bytes 
+
+cmp016:
+6ff6 2fe00e01 compare 0x01 ,pdata ,0x07 
+6ff7 2420f026 nbranch asksrv_error ,true 
+
+cmpuuid:
+6ff8 1a20a3fe increase -2 ,rega 
+6ff9 196097fe increase -2 ,timeup 
+6ffa e8c10000 ifetch 2 ,contr 
+6ffb 1a467c04 sub regb ,4 ,null 
+6ffc 2022effe branch uuidsize ,zero 
+6ffd e0a10000 istore 2 ,contw 
+
+uuidsize:
+6ffe 2841fe00 compare 0x00 ,temp ,0xff 
+6fff 2020f020 branch loopornot ,true 
+7000 18c20400 copy contr ,temp 
+7001 e8c08000 ifetch 1 ,contr 
+7002 c0807019 bne 0x00 ,wrong12b 
+7003 e8c08000 ifetch 1 ,contr 
+7004 c0807019 bne 0x00 ,wrong12b 
+7005 e8c08000 ifetch 1 ,contr 
+7006 c0887019 bne 0x10 ,wrong12b 
+7007 e8c08000 ifetch 1 ,contr 
+7008 c0807019 bne 0x00 ,wrong12b 
+7009 e8c08000 ifetch 1 ,contr 
+700a c0c07019 bne 0x80 ,wrong12b 
+700b e8c08000 ifetch 1 ,contr 
+700c c0807019 bne 0x00 ,wrong12b 
+700d e8c08000 ifetch 1 ,contr 
+700e c0807019 bne 0x00 ,wrong12b 
+700f e8c08000 ifetch 1 ,contr 
+7010 c0c07019 bne 0x80 ,wrong12b 
+7011 e8c08000 ifetch 1 ,contr 
+7012 c0aff019 bne 0x5f ,wrong12b 
+7013 e8c08000 ifetch 1 ,contr 
+7014 c0cdf019 bne 0x9b ,wrong12b 
+7015 e8c08000 ifetch 1 ,contr 
+7016 c09a7019 bne 0x34 ,wrong12b 
+7017 e8c08000 ifetch 1 ,contr 
+7018 c07df01e beq 0xfb ,chck12dn 
+
+wrong12b:
+7019 18420c00 copy temp ,contr 
+
+wrong12b1:
+701a 18c08c0c increase 12 ,contr 
+701b 18000e00 force 0x00 ,queue 
+701c 18000400 force 0x00 ,temp 
+701d 2020701e branch chck12dn 
+
+chck12dn:
+701e 196097f4 increase -12 ,timeup 
+701f 1a20a3f4 increase -12 ,rega 
+
+loopornot:
+7020 18000400 force 0x00 ,temp 
+7021 2a21fe00 compare 0x00 ,rega ,0xff 
+7022 2420efd5 nbranch classidloop ,true 
+7023 18007e00 force 0 ,pdata 
+7024 e0a10000 istore 2 ,contw 
+7025 20600000 rtn 
+
+asksrv_error:
+7026 d84000ff arg 0xff ,temp 
+7027 20600000 rtn 
+
+dataelementtype6:
+7028 476a403a bpatchx patch3a_4 ,mem_patch3a 
+7029 e8c08000 ifetch 1 ,contr 
+702a 196097ff increase -1 ,timeup 
+702b 2fe1f030 compare 0x30 ,pdata ,0xf8 
+702c 2420f03e nbranch dsize_error ,true 
+702d 2fe00e07 compare 0x07 ,pdata ,0x07 
+702e 2020f037 branch dsize32 ,true 
+702f 2fe00e06 compare 0x06 ,pdata ,0x07 
+7030 2020f039 branch dsize16 ,true 
+7031 2fe00e05 compare 0x05 ,pdata ,0x07 
+7032 2420f03e nbranch dsize_error ,true 
+7033 e8c08000 ifetch 1 ,contr 
+7034 1fe22200 copy pdata ,rega 
+7035 196097ff increase -1 ,timeup 
+7036 2020703c branch dsize 
+
+dsize32:
+7037 18c08c02 increase 2 ,contr 
+7038 196097fe increase -2 ,timeup 
+
+dsize16:
+7039 e8c10000 ifetch 2 ,contr 
+703a 1ff0a200 byteswap pdata ,rega 
+703b 196097fe increase -2 ,timeup 
+
+dsize:
+703c 18007e01 force 0x01 ,pdata 
+703d 20600000 rtn 
+
+dsize_error:
+703e 18007e00 force 0x00 ,pdata 
+703f 20600000 rtn 
+
+ss_empty_rsp:
+7040 58000003 setarg sdp_search_res 
+7041 6000851b store 1 ,mem_sdp_pduid 
+7042 20207048 branch empty_response 
+
+sa_empty_rsp:
+7043 58000005 setarg sdp_attribute_res 
+7044 6000851b store 1 ,mem_sdp_pduid 
+7045 20207048 branch empty_response 
+
+ssa_empty_rsp:
+7046 58000007 setarg sdp_searchattrib_res 
+7047 6000851b store 1 ,mem_sdp_pduid 
+
+empty_response:
+7048 204052d0 call l2cap_get_sdp_tx_payload 
+7049 6800851b fetch 1 ,mem_sdp_pduid 
+704a 1fe22400 copy pdata ,regb 
+704b e0a08000 istore 1 ,contw 
+704c 6801051c fetch 2 ,mem_sdp_transactionid 
+704d e0a10000 istore 2 ,contw 
+704e 58000500 setarg 0x0500 
+704f e0a10000 istore 2 ,contw 
+7050 2a41fe05 compare sdp_attribute_res ,regb ,0xff 
+7051 2020f057 branch fullsearch ,true 
+7052 2a41fe07 compare sdp_searchattrib_res ,regb ,0xff 
+7053 2020f057 branch fullsearch ,true 
+7054 58000000 setarg 0x000000 
+7055 e0a28000 istore 5 ,contw 
+7056 20207059 branch outempty 
+
+fullsearch:
+7057 58350200 setarg 0x350200 
+7058 e0a28000 istore 5 ,contw 
+
+outempty:
+7059 7002750a jam 10 ,mem_sdp_tx_pkt_length 
+705a 20600000 rtn 
+
+sdp_data_len:
+705b 20407ea2 call store_contw 
+705c 20407ea5 call store_contr 
+705d 20407062 call sdp_get_data 
+705e 20407e9c call get_contw 
+705f 20407e9f call get_contr 
+7060 18427e00 copy temp ,pdata 
+7061 20600000 rtn 
+
+sdp_get_data:
+7062 e8c08000 ifetch 1 ,contr 
+7063 1fe17207 and pdata ,0x7 ,loopcnt 
+7064 1fe97e00 rshift3 pdata ,pdata 
+7065 c080706c bne 0 ,sdp_get_data_type_not0 
+
+sdp_get_data_type0:
+7066 18007e01 force 1 ,pdata 
+7067 18000401 force 1 ,temp 
+7068 20600000 rtn 
+
+sdp_get_data_type_not0_sizeindex01234:
+7069 20407e76 call left_shift_n 
+706a 1fe08401 add pdata ,1 ,temp 
+706b 20600000 rtn 
+
+sdp_get_data_type_not0:
+706c 1f227e00 deposit loopcnt 
+706d 1fe67c04 sub pdata ,4 ,null 
+706e 20217069 branch sdp_get_data_type_not0_sizeindex01234 ,positive 
+706f c002f073 beq 5 ,sdp_get_data_type_not0_sizeindex5 
+7070 c0037076 beq 6 ,sdp_get_data_type_not0_sizeindex6 
+7071 c003f07a beq 7 ,sdp_get_data_type_not0_sizeindex7 
+7072 20600000 rtn 
+
+sdp_get_data_type_not0_sizeindex5:
+7073 e8c08000 ifetch 1 ,contr 
+7074 1fe08402 add pdata ,2 ,temp 
+7075 20600000 rtn 
+
+sdp_get_data_type_not0_sizeindex6:
+7076 e8c10000 ifetch 2 ,contr 
+7077 1ff0fe00 byteswap pdata ,pdata 
+7078 1fe08403 add pdata ,3 ,temp 
+7079 20600000 rtn 
+
+sdp_get_data_type_not0_sizeindex7:
+707a e8c10000 ifetch 2 ,contr 
+707b 1ff0fe00 byteswap pdata ,pdata 
+707c e8c90000 ifetcht 2 ,contr 
+707d 18508400 byteswap temp ,temp 
+707e 18500400 lshift16 temp ,temp 
+707f 9840fe00 iadd temp ,pdata 
+7080 1fe08405 add pdata ,5 ,temp 
+7081 20600000 rtn 
+
+search_all_uuid:
+7082 476ac03a bpatchx patch3a_5 ,mem_patch3a 
+7083 18000e00 force 0 ,queue 
+7084 da400000 arg 0 ,regb 
+7085 d8a0052a arg mem_sdp_handle_list ,contw 
+
+search_all_uuid_llop:
+7086 e9610000 ifetch 2 ,timeup 
+7087 207a0000 rtn blank 
+7088 2040708d call search_uuid 
+7089 18e27e00 copy queue ,pdata 
+708a c1038000 rtneq sdp_max_handle_number 
+708b 19609602 increase 2 ,timeup 
+708c 20207086 branch search_all_uuid_llop 
+
+search_uuid:
+708d 98002600 iforce regc 
+708e 68014575 fetch 2 ,mem_ui_uuid_table 
+708f 98000c00 iforce contr 
+
+search_uuid_next:
+7090 18e27e00 copy queue ,pdata 
+7091 c1038000 rtneq sdp_max_handle_number 
+7092 78547c00 disable user 
+7093 e8c08000 ifetch 1 ,contr 
+7094 207a0000 rtn blank 
+7095 98007200 iforce loopcnt 
+
+search_uuid_loop:
+7096 e8c10000 ifetch 2 ,contr 
+7097 9a667c00 isub regc ,null 
+7098 2422f09a nbranch search_uuid_not_found ,zero 
+7099 78347c00 enable user 
+
+search_uuid_not_found:
+709a c2007096 loop search_uuid_loop 
+709b e8ca0000 ifetcht 4 ,contr 
+709c 18c22200 copy contr ,rega 
+709d 243470ad nbranch search_uuid_nomatch ,user 
+709e d8c0052a arg mem_sdp_handle_list ,contr 
+709f df200007 arg sdp_max_handle_number ,loopcnt 
+
+search_uuid_check_same_handle:
+70a0 e8c20000 ifetch 4 ,contr 
+70a1 203a70a6 branch search_uuid_store_handle ,blank 
+70a2 98467c00 isub temp ,null 
+70a3 2022f0ad branch search_uuid_nomatch ,zero 
+70a4 c20070a0 loop search_uuid_check_same_handle 
+70a5 20600000 rtn 
+
+search_uuid_store_handle:
+70a6 e0aa0000 istoret 4 ,contw 
+70a7 18e08e01 increase 1 ,queue 
+70a8 1a220c00 copy rega ,contr 
+70a9 2040705b call sdp_data_len 
+70aa 9a40a400 iadd regb ,regb 
+70ab 98c08c00 iadd contr ,contr 
+70ac 20207090 branch search_uuid_next 
+
+search_uuid_nomatch:
+70ad 1a220c00 copy rega ,contr 
+70ae 20407062 call sdp_get_data 
+70af 98c08c00 iadd contr ,contr 
+70b0 20207090 branch search_uuid_next 
+
+search_handle:
+70b1 476b403a bpatchx patch3a_6 ,mem_patch3a 
+70b2 68014575 fetch 2 ,mem_ui_uuid_table 
+70b3 98000c00 iforce contr 
+
+search_handle_loop:
+70b4 e8c08000 ifetch 1 ,contr 
+70b5 203a7fe3 branch disable_zero ,blank 
+70b6 1fe3fe00 lshift pdata ,pdata 
+70b7 98c08c00 iadd contr ,contr 
+70b8 e8c20000 ifetch 4 ,contr 
+70b9 98467c00 isub temp ,null 
+70ba 20628000 rtn zero 
+70bb 18a27e00 deposit contw 
+70bc 60010abb store 2 ,mem_contw 
+70bd 600c0aa2 storet 8 ,mem_temp 
+70be 20407062 call sdp_get_data 
+70bf 98c08c00 iadd contr ,contr 
+70c0 18c27e00 copy contr ,pdata 
+70c1 68090abb fetcht 2 ,mem_contw 
+70c2 18420a00 copy temp ,contw 
+70c3 680c0aa2 fetcht 8 ,mem_temp 
+70c4 1fe20c00 copy pdata ,contr 
+70c5 202070b4 branch search_handle_loop 
+
+search_attrib:
+70c6 476bc03a bpatchx patch3a_7 ,mem_patch3a 
+70c7 68014575 fetch 2 ,mem_ui_uuid_table 
+70c8 98000c00 iforce contr 
+
+search_attrib_next:
+70c9 e8c08000 ifetch 1 ,contr 
+70ca 203a70e4 branch search_attrib_end ,blank 
+70cb 98007200 iforce loopcnt 
+
+search_attrib_loop:
+70cc e8c10000 ifetch 2 ,contr 
+70cd 9a667c00 isub regc ,null 
+70ce 2022f0d4 branch search_attrib_found_uuid ,zero 
+70cf c20070cc loop search_attrib_loop 
+70d0 18c08c04 increase 4 ,contr 
+70d1 20407062 call sdp_get_data 
+70d2 98c08c00 iadd contr ,contr 
+70d3 202070c9 branch search_attrib_next 
+
+search_attrib_found_uuid:
+70d4 1f20f3ff increase -1 ,loopcnt 
+70d5 1f23fe00 lshift loopcnt ,pdata 
+70d6 98c08c00 iadd contr ,contr 
+70d7 18c08c04 increase 4 ,contr 
+70d8 20407062 call sdp_get_data 
+70d9 98c09600 iadd contr ,timeup 
+
+search_attrib_loop_attribs:
+70da 18c08c01 increase 1 ,contr 
+70db e8c10000 ifetch 2 ,contr 
+70dc 9a467c00 isub regb ,null 
+70dd 2022ffef branch disable_blank ,zero 
+70de 2040705b call sdp_data_len 
+70df 98c08c00 iadd contr ,contr 
+70e0 19627e00 deposit timeup 
+70e1 98c67c00 isub contr ,null 
+70e2 2022f0e4 branch search_attrib_end ,zero 
+70e3 202070da branch search_attrib_loop_attribs 
+
+search_attrib_end:
+70e4 18000c00 force 0 ,contr 
+70e5 18007e00 force 0 ,pdata 
+70e6 20600000 rtn 
+
+search_handle_attrib:
+70e7 476c403b bpatchx patch3b_0 ,mem_patch3b 
+70e8 68014575 fetch 2 ,mem_ui_uuid_table 
+70e9 98000c00 iforce contr 
+
+search_handle_attrib_next:
+70ea e8c08000 ifetch 1 ,contr 
+70eb 203a7100 branch search_handle_attrib_end ,blank 
+70ec 1fe3fe00 lshift pdata ,pdata 
+70ed 98c08c00 iadd contr ,contr 
+70ee e8c20000 ifetch 4 ,contr 
+70ef 98467c00 isub temp ,null 
+70f0 2022f0f4 branch search_handl_attrib_found_handle ,zero 
+70f1 20407062 call sdp_get_data 
+70f2 98c08c00 iadd contr ,contr 
+70f3 202070ea branch search_handle_attrib_next 
+
+search_handl_attrib_found_handle:
+70f4 20407062 call sdp_get_data 
+70f5 98c09600 iadd contr ,timeup 
+
+search_handle_attrib_loop_attribs:
+70f6 18c08c01 increase 1 ,contr 
+70f7 e8c10000 ifetch 2 ,contr 
+70f8 9a467c00 isub regb ,null 
+70f9 20628000 rtn zero 
+70fa 2040705b call sdp_data_len 
+70fb 98c08c00 iadd contr ,contr 
+70fc 19627e00 deposit timeup 
+70fd 98c67c00 isub contr ,null 
+70fe 2022f100 branch search_handle_attrib_end ,zero 
+70ff 202070f6 branch search_handle_attrib_loop_attribs 
+
+search_handle_attrib_end:
+7100 18000c00 force 0 ,contr 
+7101 20600000 rtn 
+
+search_rfcomm_cn:
+7102 da400400 arg 0x0400 ,regb 
+7103 204070f4 call search_handl_attrib_found_handle 
+7104 da400300 arg 0x0300 ,regb 
+7105 2040710d call search_uuid_in_data 
+7106 24740000 nrtn user 
+7107 1a267c03 sub rega ,3 ,null 
+7108 20217fe9 branch disable_user ,positive 
+7109 e8c08000 ifetch 1 ,contr 
+710a c0847fe9 bne 0x08 ,disable_user 
+710b e8c08000 ifetch 1 ,contr 
+710c 20600000 rtn 
+
+search_uuid_in_data:
+710d 476cc03b bpatchx patch3b_1 ,mem_patch3b 
+710e 20407062 call sdp_get_data 
+710f 1fe22200 copy pdata ,rega 
+
+search_uuid_in_data_loop:
+7110 e8c08000 ifetch 1 ,contr 
+7111 1fe17207 and pdata ,0x7 ,loopcnt 
+7112 1fe97e00 rshift3 pdata ,pdata 
+7113 1fe67c03 sub pdata ,3 ,null 
+7114 2022f129 branch search_uuid_in_data_found_uuid ,zero 
+7115 1f227e00 copy loopcnt ,pdata 
+7116 c002f120 beq 5 ,search_uuid_in_data_found_element_index5 
+7117 c0037123 beq 6 ,search_uuid_in_data_found_element_index6 
+7118 c003f126 beq 7 ,search_uuid_in_data_found_element_index7 
+7119 18c08dff increase -1 ,contr 
+711a 20407062 call sdp_get_data 
+711b 98c08c00 iadd contr ,contr 
+711c 1a227e00 copy rega ,pdata 
+711d 98462200 isub temp ,rega 
+711e 2022ffe9 branch disable_user ,zero 
+711f 20207110 branch search_uuid_in_data_loop 
+
+search_uuid_in_data_found_element_index5:
+7120 1a20a3fe increase -2 ,rega 
+7121 18c08c01 increase 1 ,contr 
+7122 20207110 branch search_uuid_in_data_loop 
+
+search_uuid_in_data_found_element_index6:
+7123 1a20a3fd increase -3 ,rega 
+7124 18c08c02 increase 2 ,contr 
+7125 20207110 branch search_uuid_in_data_loop 
+
+search_uuid_in_data_found_element_index7:
+7126 1a20a3fb increase -5 ,rega 
+7127 18c08c04 increase 4 ,contr 
+7128 20207110 branch search_uuid_in_data_loop 
+
+search_uuid_in_data_found_uuid:
+7129 1a20a3ff increase -1 ,rega 
+712a 1f227e00 copy loopcnt ,pdata 
+712b c000f132 beq 1 ,search_uuid_in_data_type_uuid_16 
+712c c0017130 beq 2 ,search_uuid_in_data_type_uuid_32 
+712d c002712f beq 4 ,search_uuid_in_data_type_uuid_128 
+712e 20207fe9 branch disable_user 
+
+search_uuid_in_data_type_uuid_128:
+712f 1a20a3f4 increase -12 ,rega 
+
+search_uuid_in_data_type_uuid_32:
+7130 e8c10000 ifetch 2 ,contr 
+7131 1a20a3fe increase -2 ,rega 
+
+search_uuid_in_data_type_uuid_16:
+7132 e8c10000 ifetch 2 ,contr 
+7133 9a467c00 isub regb ,null 
+7134 2022ffe7 branch enable_user ,zero 
+7135 1a20a3fe increase -2 ,rega 
+7136 2022ffe9 branch disable_user ,zero 
+7137 20207110 branch search_uuid_in_data_loop 
+
+sdp_send_spp_request:
+7138 204052d0 call l2cap_get_sdp_tx_payload 
+7139 1fe20a00 copy pdata ,contw 
+713a 58000006 setarg 6 
+713b e0a08000 istore 1 ,contw 
+713c 5800006e setarg sdp_tid_spp 
+713d e0a10000 istore 2 ,contw 
+713e 58000f00 setarg 0x0f00 
+713f e0a10000 istore 2 ,contw 
+7140 581a0535 setarg 0x1a0535 
+7141 e0a18000 istore 3 ,contw 
+7142 58000111 setarg 0x0111 
+7143 1ff07e00 lshift16 pdata ,pdata 
+7144 e0a20000 istore 4 ,contw 
+7145 58002600 setarg 0x2600 
+7146 e0a10000 istore 2 ,contw 
+7147 58000335 setarg 0x0335 
+7148 e0a10000 istore 2 ,contw 
+7149 58000009 setarg 0x0009 
+714a e0a10000 istore 2 ,contw 
+714b 58000004 setarg 0x0004 
+714c e0a10000 istore 2 ,contw 
+714d 70027514 jam 0x14 ,mem_sdp_tx_pkt_length 
+714e 20600000 rtn 
+
+function_g2:
+714f 476d403b bpatchx patch3b_2 ,mem_patch3b 
+7150 7005e550 jam 80 ,mem_aes_cmac_data_length 
+7151 d8a005e6 arg memdat ,contw 
+7152 d8c0443a arg mem_le_srand ,contr 
+7153 20407ebf call memcpy16 
+7154 d8c045d2 arg mem_le_pubkey_local_x_256 ,contr 
+7155 20407ebd call memcpy32 
+7156 d8c009be arg mem_le_pubkey_remote_x_256 ,contr 
+7157 20407ebd call memcpy32 
+7158 2040720a call inverse_memdat 
+7159 d8c0042f arg mem_le_mrand ,contr 
+715a 20407205 call store_inverse_k 
+715b 204071d0 call function_aes_cmac 
+715c d8a00af2 arg mem_aes_cmac_temp ,contw 
+715d 20407201 call load_inverse_result 
+715e 580f4240 setarg 1000000 
+715f 1fe22200 copy pdata ,rega 
+7160 68020af2 fetch 4 ,mem_aes_cmac_temp 
+7161 9a26fc00 idiv rega 
+7162 20407f86 call wait_div_end 
+7163 18077e00 remainder pdata 
+7164 600209ba store 4 ,mem_gkey 
+7165 20600000 rtn 
+
+function_f6_eb:
+7166 7005e541 jam 65 ,mem_aes_cmac_data_length 
+7167 d8a005e6 arg memdat ,contw 
+7168 204071b5 call store_addr_common_a 
+7169 204071b0 call store_addr_common_b 
+716a 6801c454 fetch 3 ,mem_le_pres + 1 
+716b e0a18000 istore 3 ,contw 
+716c 20407176 call get_r 
+716d d8c0042f arg mem_le_mrand ,contr 
+716e 20407ebf call memcpy16 
+716f d8c0443a arg mem_le_srand ,contr 
+7170 20407ebf call memcpy16 
+7171 2040720a call inverse_memdat 
+7172 d8c00b12 arg mem_le_mackey ,contr 
+7173 d8a00ac2 arg mem_aes_cmac_k ,contw 
+7174 20407ebf call memcpy16 
+7175 202071d0 branch function_aes_cmac 
+
+get_r:
+7176 680244c7 fetch 4 ,mem_le_tk 
+7177 e0a20000 istore 4 ,contw 
+7178 20407ecd call memset0_4 
+7179 20207eca branch memset0_8 
+
+function_f6_ea:
+717a 476dc03b bpatchx patch3b_3 ,mem_patch3b 
+717b 7005e541 jam 65 ,mem_aes_cmac_data_length 
+717c d8a005e6 arg memdat ,contw 
+717d 204071b0 call store_addr_common_b 
+717e 204071b5 call store_addr_common_a 
+717f 6801c44d fetch 3 ,mem_le_preq + 1 
+7180 e0a18000 istore 3 ,contw 
+7181 20407176 call get_r 
+7182 d8c0443a arg mem_le_srand ,contr 
+7183 20407ebf call memcpy16 
+7184 d8c0042f arg mem_le_mrand ,contr 
+7185 20407ebf call memcpy16 
+7186 2040720a call inverse_memdat 
+7187 d8c00b12 arg mem_le_mackey ,contr 
+7188 d8a00ac2 arg mem_aes_cmac_k ,contw 
+7189 20407ebf call memcpy16 
+718a 204071d0 call function_aes_cmac 
+718b d8a00af2 arg mem_aes_cmac_temp ,contw 
+718c 20207201 branch load_inverse_result 
+
+function_f5:
+718d 7005e520 jam 32 ,mem_aes_cmac_data_length 
+718e d8c009fe arg mem_le_dhkey_256 ,contr 
+718f d8a005e6 arg memdat ,contw 
+7190 20407ebd call memcpy32 
+7191 2040720a call inverse_memdat 
+7192 d8c0099e arg mem_le_slat ,contr 
+7193 20407205 call store_inverse_k 
+7194 204071d0 call function_aes_cmac 
+7195 d8a00ac2 arg mem_aes_cmac_k ,contw 
+7196 20407497 call store_aes_result 
+7197 d8400001 arg 1 ,temp 
+7198 2040719f call function_f5_common 
+7199 d8a04419 arg mem_le_ltk ,contw 
+719a 20407201 call load_inverse_result 
+719b d8400000 arg 0 ,temp 
+719c 2040719f call function_f5_common 
+719d d8a00b12 arg mem_le_mackey ,contw 
+719e 20207497 branch store_aes_result 
+
+function_f5_common:
+719f 476e403b bpatchx patch3b_4 ,mem_patch3b 
+71a0 7005e535 jam 53 ,mem_aes_cmac_data_length 
+71a1 58000100 setarg 0x100 
+71a2 600105e6 store 2 ,memdat 
+71a3 204071b0 call store_addr_common_b 
+71a4 204071b5 call store_addr_common_a 
+71a5 d8c0443a arg mem_le_srand ,contr 
+71a6 20407ebf call memcpy16 
+71a7 d8c0042f arg mem_le_mrand ,contr 
+71a8 20407ebf call memcpy16 
+71a9 58006c65 setarg 0x6c65 
+71aa e0a10000 istore 2 ,contw 
+71ab 58006274 setarg 0x6274 
+71ac e0a10000 istore 2 ,contw 
+71ad e0a88000 istoret 1 ,contw 
+71ae 2040720a call inverse_memdat 
+71af 202071d0 branch function_aes_cmac 
+
+store_addr_common_b:
+71b0 680344a0 fetch 6 ,mem_le_lap 
+71b1 e0a30000 istore 6 ,contw 
+71b2 6800c495 fetch 1 ,mem_le_conn_own_addr_type 
+71b3 e0a08000 istore 1 ,contw 
+71b4 20600000 rtn 
+
+store_addr_common_a:
+71b5 6803044f fetch 6 ,mem_le_plap 
+71b6 e0a30000 istore 6 ,contw 
+71b7 6800c48e fetch 1 ,mem_le_conn_peer_addr_type 
+71b8 e0a08000 istore 1 ,contw 
+71b9 20600000 rtn 
+
+function_f4_ca:
+71ba 7005e541 jam 65 ,mem_aes_cmac_data_length 
+71bb 6800c664 fetch 1 ,mem_passkey_1bit 
+71bc 600085e6 store 1 ,memdat 
+71bd d8c045d2 arg mem_le_pubkey_local_x_256 ,contr 
+71be 20407ebd call memcpy32 
+71bf d8c009be arg mem_le_pubkey_remote_x_256 ,contr 
+71c0 20407ebd call memcpy32 
+71c1 2040720a call inverse_memdat 
+71c2 d8c0042f arg mem_le_mrand ,contr 
+71c3 20407205 call store_inverse_k 
+71c4 202071d0 branch function_aes_cmac 
+
+function_f4_cb:
+71c5 7005e541 jam 65 ,mem_aes_cmac_data_length 
+71c6 6800c664 fetch 1 ,mem_passkey_1bit 
+71c7 600085e6 store 1 ,memdat 
+71c8 d8c009be arg mem_le_pubkey_remote_x_256 ,contr 
+71c9 20407ebd call memcpy32 
+71ca d8c045d2 arg mem_le_pubkey_local_x_256 ,contr 
+71cb 20407ebd call memcpy32 
+71cc 2040720a call inverse_memdat 
+71cd d8c0443a arg mem_le_srand ,contr 
+71ce 20407205 call store_inverse_k 
+71cf 202071d0 branch function_aes_cmac 
+
+function_aes_cmac:
+71d0 476ec03b bpatchx patch3b_5 ,mem_patch3b 
+71d1 2040721f call function_aes_cmac_generate_subkey 
+71d2 680085e5 fetch 1 ,mem_aes_cmac_data_length 
+71d3 1fe20400 copy pdata ,temp 
+
+function_ceil16:
+71d4 1fe0fe0f increase 15 ,pdata 
+71d5 1ff1fe00 rshift4 pdata ,pdata 
+71d6 1fe22400 copy pdata ,regb 
+71d7 203a71e2 branch function_aes_cmac_set_flag_0_balnk ,blank 
+71d8 18417e0f and temp ,0x0f ,pdata 
+71d9 243a71e5 nbranch function_aes_cmac_set_flag_0 ,blank 
+71da da600ad2 arg mem_aes_cmac_k1 ,regc 
+71db dfe005e6 arg memdat ,pdata 
+71dc 1fe0fff0 increase -16 ,pdata 
+71dd 9840a200 iadd temp ,rega 
+71de d8a00b02 arg mem_aes_cmac_m_last ,contw 
+71df df200004 arg 4 ,loopcnt 
+71e0 20407edd call xor_loop 
+71e1 202071f0 branch function_aes_cmac_aes 
+
+function_aes_cmac_set_flag_0_balnk:
+71e2 da400001 arg 1 ,regb 
+71e3 da200000 arg 0 ,rega 
+71e4 202071e6 branch function_aes_cmac_set_flag_0_common 
+
+function_aes_cmac_set_flag_0:
+71e5 1841220f and temp ,0x0f ,rega 
+
+function_aes_cmac_set_flag_0_common:
+71e6 dfe005e6 arg memdat ,pdata 
+71e7 9840fe00 iadd temp ,pdata 
+71e8 9a260c00 isub rega ,contr 
+71e9 d8a00af2 arg mem_aes_cmac_temp ,contw 
+71ea 20407245 call function_aes_cmac_padding 
+71eb da600ae2 arg mem_aes_cmac_k2 ,regc 
+71ec da200af2 arg mem_aes_cmac_temp ,rega 
+71ed d8a00b02 arg mem_aes_cmac_m_last ,contw 
+71ee df200004 arg 4 ,loopcnt 
+71ef 20407edd call xor_loop 
+
+function_aes_cmac_aes:
+71f0 20407491 call aes_clear_data 
+71f1 20407428 call aes_init 
+71f2 d8c005e6 arg memdat ,contr 
+
+function_aes_cmac_aes_loop:
+71f3 1a40a5ff increase -1 ,regb 
+71f4 1a427e00 deposit regb 
+71f5 203a71f9 branch function_aes_cmac_aes_loop_end ,blank 
+71f6 20407486 call load_data128 
+71f7 20407422 call do_aes_cbc 
+71f8 202071f3 branch function_aes_cmac_aes_loop 
+
+function_aes_cmac_aes_loop_end:
+71f9 d8a00af2 arg mem_aes_cmac_temp ,contw 
+71fa 20407497 call store_aes_result 
+71fb d8c00b02 arg mem_aes_cmac_m_last ,contr 
+71fc 20407486 call load_data128 
+71fd 20407428 call aes_init 
+71fe d8c00af2 arg mem_aes_cmac_temp ,contr 
+71ff 20407486 call load_data128 
+7200 20207422 branch do_aes_cbc 
+
+load_inverse_result:
+7201 18a22200 copy contw ,rega 
+7202 20407497 call store_aes_result 
+7203 df200010 arg 16 ,loopcnt 
+7204 20207ee5 branch inverse_data 
+
+store_inverse_k:
+7205 d8a00ac2 arg mem_aes_cmac_k ,contw 
+7206 20407ebf call memcpy16 
+
+inverse_k:
+7207 df200010 arg 16 ,loopcnt 
+7208 da200ac2 arg mem_aes_cmac_k ,rega 
+7209 20207ee5 branch inverse_data 
+
+inverse_memdat:
+720a 680085e5 fetch 1 ,mem_aes_cmac_data_length 
+720b 1fe27200 copy pdata ,loopcnt 
+720c da2005e6 arg memdat ,rega 
+720d 20207ee5 branch inverse_data 
+
+bn_lshift_0_inverse:
+720e ea208000 ifetch 1 ,rega 
+720f 1fe3fe00 lshift pdata ,pdata 
+7210 2a6ffe00 isolate1 0 ,regc 
+7211 7920fe00 setflag true ,0 ,pdata 
+7212 2feffe08 isolate1 8 ,pdata 
+7213 7920a600 setflag true ,0 ,regc 
+7214 e2208000 istore 1 ,rega 
+7215 1a20a3ff increase -1 ,rega 
+7216 c200720e loop bn_lshift_0_inverse 
+7217 20600000 rtn 
+
+function_aes_cmac_k1_inverse:
+7218 da200ad2 arg mem_aes_cmac_k1 ,rega 
+
+function_aes_cmac_inverse_common:
+7219 1a20a20f increase 15 ,rega 
+721a 18007210 force 16 ,loopcnt 
+721b 18002600 force 0 ,regc 
+721c 2020720e branch bn_lshift_0_inverse 
+
+function_aes_cmac_k2_inverse:
+721d da200ae2 arg mem_aes_cmac_k2 ,rega 
+721e 20207219 branch function_aes_cmac_inverse_common 
+
+function_aes_cmac_generate_subkey:
+721f d8c00ac2 arg mem_aes_cmac_k ,contr 
+7220 20407484 call load_key 
+7221 18007008 force regidx_xor ,regext_index 
+7222 20407492 call aes_clear 
+7223 20407491 call aes_clear_data 
+7224 2040741f call do_aes_ocb 
+7225 d8a00ad2 arg mem_aes_cmac_k1 ,contw 
+7226 20407497 call store_aes_result 
+
+function_aes_cmac_k1:
+7227 476f403b bpatchx patch3b_6 ,mem_patch3b 
+7228 68008ad2 fetch 1 ,mem_aes_cmac_k1 
+7229 2feffe07 isolate1 7 ,pdata 
+722a 2420f230 nbranch function_aes_cmac_k1_0 ,true 
+722b 20407218 call function_aes_cmac_k1_inverse 
+722c da600ad2 arg mem_aes_cmac_k1 ,regc 
+722d d8a00ad2 arg mem_aes_cmac_k1 ,contw 
+722e 2040723a call function_aes_cmac_xor_rb 
+722f 20207231 branch function_aes_cmac_k2 
+
+function_aes_cmac_k1_0:
+7230 20407218 call function_aes_cmac_k1_inverse 
+
+function_aes_cmac_k2:
+7231 d8c00ad2 arg mem_aes_cmac_k1 ,contr 
+7232 d8a00ae2 arg mem_aes_cmac_k2 ,contw 
+7233 20407ebf call memcpy16 
+7234 68008ae2 fetch 1 ,mem_aes_cmac_k2 
+7235 2feffe07 isolate1 7 ,pdata 
+7236 2420f21d nbranch function_aes_cmac_k2_inverse ,true 
+7237 2040721d call function_aes_cmac_k2_inverse 
+7238 da600ae2 arg mem_aes_cmac_k2 ,regc 
+7239 d8a00ae2 arg mem_aes_cmac_k2 ,contw 
+
+function_aes_cmac_xor_rb:
+723a df200003 arg 3 ,loopcnt 
+
+function_aes_cmac_xor_rb_loop:
+723b d8400000 arg 0 ,temp 
+723c 20407241 call function_aes_cmac_xor_loop_common 
+723d 1a60a604 increase 4 ,regc 
+723e c200723b loop function_aes_cmac_xor_rb_loop 
+723f d8408700 arg 0x8700 ,temp 
+7240 18500400 lshift16 temp ,temp 
+
+function_aes_cmac_xor_loop_common:
+7241 ea620000 ifetch 4 ,regc 
+7242 9842fe00 ixor temp ,pdata 
+7243 e0a20000 istore 4 ,contw 
+7244 20600000 rtn 
+
+function_aes_cmac_padding:
+7245 476fc03b bpatchx patch3b_7 ,mem_patch3b 
+7246 df200010 arg 16 ,loopcnt 
+7247 dfe00000 arg 0 ,pdata 
+
+function_aes_cmac_padding_loop:
+7248 9a267c00 isub rega ,null 
+7249 2022f250 branch function_aes_cmac_padding_beq_length ,zero 
+724a 20217253 branch function_aes_cmac_padding_big_length ,positive 
+724b e8c88000 ifetcht 1 ,contr 
+724c e0a88000 istoret 1 ,contw 
+
+function_aes_cmac_padding_loop2:
+724d 1fe0fe01 increase 1 ,pdata 
+724e c2007248 loop function_aes_cmac_padding_loop 
+724f 20600000 rtn 
+
+function_aes_cmac_padding_beq_length:
+7250 d8400080 arg 0x80 ,temp 
+
+function_aes_cmac_padding_common:
+7251 e0a88000 istoret 1 ,contw 
+7252 2020724d branch function_aes_cmac_padding_loop2 
+
+function_aes_cmac_padding_big_length:
+7253 d8400000 arg 0 ,temp 
+7254 20207251 branch function_aes_cmac_padding_common 
+
+generate_kinit:
+7255 20407268 call function_e22 
+7256 d8c00592 arg mem_input_store ,contr 
+7257 d8a00582 arg mem_kinit ,contw 
+7258 20207ebf branch memcpy16 
+
+function_e21:
+7259 78547c00 disable user 
+725a 2040735f call function_expand 
+725b d8c00562 arg mem_random_number ,contr 
+725c d8a005a2 arg mem_x ,contw 
+725d 1800720f force 15 ,loopcnt 
+725e 20407f01 call memcpy 
+725f e8c08000 ifetch 1 ,contr 
+7260 1fe2fe06 xor_into 6 ,pdata 
+7261 e0a08000 istore 1 ,contw 
+7262 580005b2 setarg mem_y 
+7263 600105d6 store 2 ,memp_ar_input 
+7264 580005a2 setarg mem_x 
+7265 600105d4 store 2 ,memp_ar_key 
+7266 79200012 set1 mark_ar2 ,mark 
+7267 202072a8 branch function_ar 
+
+function_e22:
+7268 6808c689 fetcht 1 ,mem_pin_length 
+7269 18002410 force 16 ,regb 
+726a 1840a606 add temp ,6 ,regc 
+726b 1a667c10 sub regc ,16 ,null 
+726c 2021726e branch function_e22_pin_init ,positive 
+726d 18002610 force 16 ,regc 
+
+function_e22_pin_init:
+726e d8a005a2 arg mem_x ,contw 
+
+function_e22_genx_pin:
+726f d8c0468a arg mem_pin ,contr 
+7270 18427200 copy temp ,loopcnt 
+7271 78547c00 disable user 
+
+function_e22_genx_loop:
+7272 e8c08000 ifetch 1 ,contr 
+7273 e0a08000 istore 1 ,contw 
+7274 1a40a5ff increase -1 ,regb 
+7275 2022f27c branch function_e22_genx_end ,zero 
+7276 c2007272 loop function_e22_genx_loop 
+7277 2034726f branch function_e22_genx_pin ,user 
+7278 78347c00 enable user 
+7279 18007206 force 6 ,loopcnt 
+727a 1a220c00 copy rega ,contr 
+727b 20207272 branch function_e22_genx_loop 
+
+function_e22_genx_end:
+727c d8c00562 arg mem_random_number ,contr 
+727d d8a005b2 arg mem_y ,contw 
+727e 20407ebf call memcpy16 
+727f 680085c1 fetch 1 ,mem_y15 
+7280 9a62fe00 ixor regc ,pdata 
+7281 600085c1 store 1 ,mem_y15 
+7282 580005b2 setarg mem_y 
+7283 600105d6 store 2 ,memp_ar_input 
+7284 580005a2 setarg mem_x 
+7285 600105d4 store 2 ,memp_ar_key 
+7286 79200012 set1 mark_ar2 ,mark 
+7287 202072a8 branch function_ar 
+
+function_e1:
+7288 78547c00 disable user 
+7289 2040735f call function_expand 
+728a 20207292 branch function_hash 
+
+function_e3:
+728b da200056 arg mem_aco ,rega 
+728c 78347c00 enable user 
+728d 2040735f call function_expand 
+728e 20407292 call function_hash 
+728f d8c00592 arg mem_input_store ,contr 
+7290 d8a00062 arg mem_kc ,contw 
+7291 20207ebf branch memcpy16 
+
+function_hash:
+7292 58000562 setarg mem_random_number 
+7293 600105d6 store 2 ,memp_ar_input 
+7294 580041be setarg mem_link_key 
+7295 600105d4 store 2 ,memp_ar_key 
+7296 793f8012 set0 mark_ar2 ,mark 
+7297 204072a8 call function_ar 
+7298 da200592 arg mem_input_store ,rega 
+7299 da400562 arg mem_random_number ,regb 
+729a d8a005a2 arg mem_x ,contw 
+729b 20407352 call xor16 
+729c da2005a2 arg mem_x ,rega 
+729d da4005b2 arg mem_y ,regb 
+729e 1a420a00 copy regb ,contw 
+729f 78347c00 enable user 
+72a0 20407350 call add16 
+72a1 2040736a call key_offset 
+72a2 580005b2 setarg mem_y 
+72a3 600105d6 store 2 ,memp_ar_input 
+72a4 580005a2 setarg mem_x 
+72a5 600105d4 store 2 ,memp_ar_key 
+72a6 79200012 set1 mark_ar2 ,mark 
+72a7 202072a8 branch function_ar 
+
+function_ar:
+72a8 7005d800 jam 0 ,mem_ar_hround 
+72a9 680105d4 fetch 2 ,memp_ar_key 
+72aa 98000c00 iforce contr 
+72ab d8a005c2 arg mem_key_store ,contw 
+72ac 20407ebf call memcpy16 
+72ad 680105d6 fetch 2 ,memp_ar_input 
+72ae 98000c00 iforce contr 
+72af d8a00592 arg mem_input_store ,contw 
+72b0 20407ebf call memcpy16 
+
+function_ar_loop:
+72b1 204072cf call key_scheduling 
+72b2 78547c00 disable user 
+72b3 c58972b9 bmark0 mark_ar2 ,function_ar_original 
+72b4 680085d8 fetch 1 ,mem_ar_hround 
+72b5 c08272b9 bne 4 ,function_ar_original 
+72b6 680105d6 fetch 2 ,memp_ar_input 
+72b7 98002400 iforce regb 
+72b8 20407301 call xor_mod32_ar2 
+
+function_ar_original:
+72b9 20407300 call xor_mod32 
+72ba 20407313 call el_boxes 
+72bb 680085d8 fetch 1 ,mem_ar_hround 
+72bc 1fe0fe01 increase 1 ,pdata 
+72bd 600085d8 store 1 ,mem_ar_hround 
+72be 204072cf call key_scheduling 
+72bf 78347c00 enable user 
+72c0 20407300 call xor_mod32 
+72c1 20407322 call pht 
+72c2 20407331 call permute 
+72c3 20407322 call pht 
+72c4 20407331 call permute 
+72c5 20407322 call pht 
+72c6 20407331 call permute 
+72c7 20407322 call pht 
+72c8 680085d8 fetch 1 ,mem_ar_hround 
+72c9 1fe0fe01 increase 1 ,pdata 
+72ca 600085d8 store 1 ,mem_ar_hround 
+72cb c08872b1 bne 16 ,function_ar_loop 
+72cc 204072cf call key_scheduling 
+72cd 78547c00 disable user 
+72ce 20207300 branch xor_mod32 
+
+key_scheduling:
+72cf 680085d8 fetch 1 ,mem_ar_hround 
+72d0 d8c005c2 arg mem_key_store ,contr 
+72d1 203a72f6 branch key_sched_zero ,blank 
+72d2 98002400 iforce regb 
+72d3 18007211 force 17 ,loopcnt 
+72d4 18c20a00 copy contr ,contw 
+
+key_rotateloop:
+72d5 e8c08000 ifetch 1 ,contr 
+72d6 1fe98400 lshift3 pdata ,temp 
+72d7 1feb7e00 rshift2 pdata ,pdata 
+72d8 1fe97e00 rshift3 pdata ,pdata 
+72d9 9841fe00 ior temp ,pdata 
+72da e0a08000 istore 1 ,contw 
+72db c20072d5 loop key_rotateloop 
+72dc 580005c2 setarg mem_key_store 
+72dd 9a408c00 iadd regb ,contr 
+72de 18007210 force 16 ,loopcnt 
+72df d8a00572 arg mem_round_key ,contw 
+
+key_select_octet_loop:
+72e0 e8c08000 ifetch 1 ,contr 
+72e1 e0a08000 istore 1 ,contw 
+72e2 28c1ffd3 compare mem_key_store_end ,contr ,0xff 
+72e3 2420f2e5 nbranch key_select_octet_nwrap ,true 
+72e4 18c08def increase -17 ,contr 
+
+key_select_octet_nwrap:
+72e5 c20072e0 loop key_select_octet_loop 
+72e6 18002200 force 0 ,rega 
+72e7 1a40a7ff add regb ,-1 ,regc 
+72e8 1a6ba600 lshift2 regc ,regc 
+72e9 1a6ba600 lshift2 regc ,regc 
+72ea 204074b9 call enable_authrom 
+72eb 58008400 setarg mem_b_box 
+72ec 9a60a600 iadd regc ,regc 
+72ed d8a00572 arg mem_round_key ,contw 
+72ee 18007210 force 16 ,loopcnt 
+
+bias_round_key_loop:
+72ef ea688000 ifetcht 1 ,regc 
+72f0 e8a08000 ifetch 1 ,contw 
+72f1 9840fe00 iadd temp ,pdata 
+72f2 e0a08000 istore 1 ,contw 
+72f3 1a60a601 increase 1 ,regc 
+72f4 c20072ef loop bias_round_key_loop 
+72f5 202074bd branch disable_authrom 
+
+key_sched_zero:
+72f6 18007210 force 16 ,loopcnt 
+72f7 18000400 force 0 ,temp 
+
+create_byte_16_loop:
+72f8 e8c08000 ifetch 1 ,contr 
+72f9 98428400 ixor temp ,temp 
+72fa c20072f8 loop create_byte_16_loop 
+72fb 18427e00 deposit temp 
+72fc e0c08000 istore 1 ,contr 
+72fd d8c005c2 arg mem_key_store ,contr 
+72fe d8a00572 arg mem_round_key ,contw 
+72ff 20207ebf branch memcpy16 
+
+xor_mod32:
+7300 da400572 arg mem_round_key ,regb 
+
+xor_mod32_ar2:
+7301 18007210 force 16 ,loopcnt 
+7302 da200592 arg mem_input_store ,rega 
+7303 1a220a00 copy rega ,contw 
+
+xor_mod32_loop:
+7304 ea288000 ifetcht 1 ,rega 
+7305 ea408000 ifetch 1 ,regb 
+7306 9842e000 ixor temp ,alarm 
+7307 1f212603 and loopcnt ,3 ,regc 
+7308 2434730a nbranch xor_mod32_invert ,user 
+7309 1a62a603 xor_into 3 ,regc 
+
+xor_mod32_invert:
+730a 1a662601 sub regc ,1 ,regc 
+730b 2021730d branch xor_even ,positive 
+730c 9840e000 iadd temp ,alarm 
+
+xor_even:
+730d 1e027e00 deposit alarm 
+730e e0a08000 istore 1 ,contw 
+730f 1a20a201 increase 1 ,rega 
+7310 1a40a401 increase 1 ,regb 
+7311 c2007304 loop xor_mod32_loop 
+7312 20600000 rtn 
+
+el_boxes:
+7313 204074b9 call enable_authrom 
+7314 18007210 force 16 ,loopcnt 
+7315 da200592 arg mem_input_store ,rega 
+
+el_box_loop:
+7316 ea208000 ifetch 1 ,rega 
+7317 d8c08500 arg mem_e_box ,contr 
+7318 1f212603 and loopcnt ,3 ,regc 
+7319 1a667c01 sub regc ,1 ,null 
+731a 2021731c branch e_boxes ,positive 
+731b d8c08600 arg mem_l_box ,contr 
+
+e_boxes:
+731c 98c08c00 iadd contr ,contr 
+731d e8c08000 ifetch 1 ,contr 
+731e e2208000 istore 1 ,rega 
+731f 1a20a201 increase 1 ,rega 
+7320 c2007316 loop el_box_loop 
+7321 202074bd branch disable_authrom 
+
+pht:
+7322 18007208 force 8 ,loopcnt 
+7323 d8c00592 arg mem_input_store ,contr 
+7324 18c20a00 copy contr ,contw 
+
+pht_loop:
+7325 e8c08000 ifetch 1 ,contr 
+7326 98002200 iforce rega 
+7327 e8c08000 ifetch 1 ,contr 
+7328 98002400 iforce regb 
+7329 1a23fe00 lshift rega ,pdata 
+732a 9a40fe00 iadd regb ,pdata 
+732b e0a08000 istore 1 ,contw 
+732c 1a227e00 deposit rega 
+732d 9a40fe00 iadd regb ,pdata 
+732e e0a08000 istore 1 ,contw 
+732f c2007325 loop pht_loop 
+7330 20600000 rtn 
+
+permute:
+7331 588ae42c setarg 0x8ae42c 
+7332 98000400 iforce temp 
+7333 18007207 force 7 ,loopcnt 
+7334 20407340 call permute_exchange 
+7335 580d751b setarg 0xd751b 
+7336 98000400 iforce temp 
+7337 18007205 force 5 ,loopcnt 
+7338 20407340 call permute_exchange 
+7339 680085a1 fetch 1 ,mem_input_store + 15 
+733a 98002200 iforce rega 
+733b 68008595 fetch 1 ,mem_input_store + 3 
+733c 600085a1 store 1 ,mem_input_store + 15 
+733d 1a227e00 deposit rega 
+733e 60008595 store 1 ,mem_input_store + 3 
+733f 20600000 rtn 
+
+permute_exchange:
+7340 1841240f and temp ,0xf ,regb 
+
+permute_loop:
+7341 18417e0f and temp ,0xf ,pdata 
+7342 d8a00592 arg mem_input_store ,contw 
+7343 98a08a00 iadd contw ,contw 
+7344 e8a08000 ifetch 1 ,contw 
+7345 98002600 iforce regc 
+7346 1a227e00 deposit rega 
+7347 e0a08000 istore 1 ,contw 
+7348 1a622200 copy regc ,rega 
+7349 18518400 rshift4 temp ,temp 
+734a c2007341 loop permute_loop 
+734b 58000592 setarg mem_input_store 
+734c 9a408a00 iadd regb ,contw 
+734d 1a227e00 deposit rega 
+734e e0a08000 istore 1 ,contw 
+734f 20600000 rtn 
+
+add16:
+7350 78347c00 enable user 
+7351 20207353 branch xor_add16 
+
+xor16:
+7352 78547c00 disable user 
+
+xor_add16:
+7353 18007210 force 16 ,loopcnt 
+
+xoradd_loop:
+7354 ea288000 ifetcht 1 ,rega 
+7355 ea408000 ifetch 1 ,regb 
+7356 20347359 branch xoradd_add ,user 
+7357 9842fe00 ixor temp ,pdata 
+7358 2020735a branch xoradd_store 
+
+xoradd_add:
+7359 9840fe00 iadd temp ,pdata 
+
+xoradd_store:
+735a e0a08000 istore 1 ,contw 
+735b 1a20a201 increase 1 ,rega 
+735c 1a40a401 increase 1 ,regb 
+735d c2007354 loop xoradd_loop 
+735e 20600000 rtn 
+
+function_expand:
+735f d8a005b2 arg mem_y ,contw 
+7360 ea230000 ifetch 6 ,rega 
+7361 e0a30000 istore 6 ,contw 
+7362 20347365 branch expand_12 ,user 
+7363 ea230000 ifetch 6 ,rega 
+7364 20207366 branch expand_cont 
+
+expand_12:
+7365 e8c30000 ifetch 6 ,contr 
+
+expand_cont:
+7366 e0a30000 istore 6 ,contw 
+7367 ea220000 ifetch 4 ,rega 
+7368 e0a20000 istore 4 ,contw 
+7369 20600000 rtn 
+
+key_offset:
+736a d8c041be arg mem_link_key ,contr 
+736b d8a005a2 arg mem_x ,contw 
+736c d8400000 arg 0 ,temp 
+736d 588395a7 setarg 0x8395a7 
+736e 2040738b call concatenate_temp24 
+736f 58b3c1df setarg 0xb3c1df 
+7370 2040738b call concatenate_temp24 
+7371 5800e5e9 setarg 0xe5e9 
+7372 2040738c call concatenate_temp16 
+7373 18422800 copy temp ,regab 
+7374 78547c00 disable user 
+7375 20407379 call key_addxor 
+7376 1a820400 copy regab ,temp 
+7377 78347c00 enable user 
+7378 20207379 branch key_addxor 
+
+key_addxor:
+7379 18007208 force 8 ,loopcnt 
+
+key_addxor_loop:
+737a e8c08000 ifetch 1 ,contr 
+737b 2f200201 compare 1 ,loopcnt ,1 
+737c 20347380 branch key_high ,user 
+737d 2020f381 branch key_xor ,true 
+
+key_add:
+737e 9840fe00 iadd temp ,pdata 
+737f 20207382 branch key_store 
+
+key_high:
+7380 2020f37e branch key_add ,true 
+
+key_xor:
+7381 9842fe00 ixor temp ,pdata 
+
+key_store:
+7382 e0a08000 istore 1 ,contw 
+7383 184c8400 rshift8 temp ,temp 
+7384 c200737a loop key_addxor_loop 
+7385 20600000 rtn 
+
+copy_aco:
+7386 68030596 fetch 6 ,mem_input_store + 4 
+7387 60030056 store 6 ,mem_aco 
+7388 e8c30000 ifetch 6 ,contr 
+7389 e0a30000 istore 6 ,contw 
+738a 20600000 rtn 
+
+concatenate_temp24:
+738b 184d0400 lshift8 temp ,temp 
+
+concatenate_temp16:
+738c 18500400 lshift16 temp ,temp 
+738d 98418400 ior temp ,temp 
+738e 20600000 rtn 
+
+loop1:
+738f 2020738f branch loop1 
+
+generate_stk:
+7390 4770403c bpatchx patch3c_0 ,mem_patch3c 
+7391 2040742b call function_s1 
+7392 d8a04419 arg mem_le_ltk ,contw 
+7393 20207497 branch store_aes_result 
+
+authenticate_rconfirm:
+7394 d8a0443a arg mem_le_srand ,contw 
+7395 2034f397 branch authenticate_mconfirm ,master 
+7396 d8a0042f arg mem_le_mrand ,contw 
+
+authenticate_mconfirm:
+7397 18c22200 copy contr ,rega 
+7398 20407ebf call memcpy16 
+7399 20407440 call function_c1 
+739a d8c0442a arg mem_le_rconfirm ,contr 
+739b 202074b0 branch compare_res 
+
+generate_confirm:
+739c da20042f arg mem_le_mrand ,rega 
+739d 2034f39f branch generate_mrand ,master 
+739e da20443a arg mem_le_srand ,rega 
+
+generate_mrand:
+739f 1a220a00 copy rega ,contw 
+73a0 2040630c call generate_random 
+73a1 20207440 branch function_c1 
+
+generate_sk:
+73a2 d8c044aa arg mem_le_skdm ,contr 
+73a3 20407486 call load_data128 
+73a4 d8c04419 arg mem_le_ltk ,contr 
+73a5 20407487 call load_regext 
+73a6 18006c38 force 0x38 ,aes_ctrl 
+73a7 18006c00 force 0x0 ,aes_ctrl 
+73a8 2040741d call wait_aes 
+73a9 d8a0047c arg mem_le_sk ,contw 
+73aa 20207497 branch store_aes_result 
+
+first_block_counter:
+73ab 18007e49 force 0x49 ,pdata 
+73ac 202073ae branch first_block 
+
+first_block_data:
+73ad 18007e01 force 1 ,pdata 
+
+first_block:
+73ae 18007000 force regidx_data ,regext_index 
+73af 184d5e00 lshift8 temp ,regext 
+73b0 9de1de00 ior regext ,regext 
+73b1 1f00f001 increase 1 ,regext_index 
+73b2 184cde00 rshift8 temp ,regext 
+73b3 1df15e00 rshift16 regext ,regext 
+73b4 68014411 fetch 2 ,mem_le_ivm 
+73b5 1ff07e00 lshift16 ,pdata ,pdata 
+73b6 9de1de00 ior regext ,regext 
+73b7 1f00f001 increase 1 ,regext_index 
+73b8 e8c20000 ifetch 4 ,contr 
+73b9 98005e00 iforce regext 
+73ba 1f00f001 increase 1 ,regext_index 
+73bb e8c10000 ifetch 2 ,contr 
+73bc 1a30de00 byteswap rega ,regext 
+73bd 1df05e00 lshift16 regext ,regext 
+73be 9de1de00 ior regext ,regext 
+73bf 1f00f001 increase 1 ,regext_index 
+73c0 20600000 rtn 
+
+generate_mic:
+73c1 1a608c01 add regc ,1 ,contr 
+73c2 e8c08000 ifetch 1 ,contr 
+73c3 98002200 iforce rega 
+73c4 204073ab call first_block_counter 
+73c5 2040741f call do_aes_ocb 
+73c6 18007000 force regidx_data ,regext_index 
+73c7 ea608000 ifetch 1 ,regc 
+73c8 1fe17e03 and_into 0x3 ,pdata 
+73c9 1ff05e00 lshift16 pdata ,regext 
+73ca 79205e08 set1 8 ,regext 
+73cb 2040748f call clear_hidata 
+73cc 20407422 call do_aes_cbc 
+73cd 1a227200 copy rega ,loopcnt 
+73ce 1a608c02 add regc ,2 ,contr 
+73cf 2040746e call padding_data 
+
+generate_mic_loop:
+73d0 20407478 call aes_load_data 
+73d1 20407422 call do_aes_cbc 
+73d2 1f227e00 deposit loopcnt 
+73d3 203a73d5 branch generate_mic_end ,blank 
+73d4 202073d0 branch generate_mic_loop 
+
+generate_mic_end:
+73d5 1800700c force regidx_result ,regext_index 
+73d6 1de27e00 deposit regext 
+73d7 60020417 store 4 ,mem_le_mic 
+73d8 20600000 rtn 
+
+aes_crypt_data:
+73d9 1a20a201 increase 1 ,rega 
+73da 204073ad call first_block_data 
+73db 1a620c00 copy regc ,contr 
+73dc 20407482 call aes_load_xor 
+73dd 20407425 call do_aes_ctr 
+73de 2040749e call store_enc_data 
+73df 1a60a610 increase 16 ,regc 
+73e0 1a40a5f0 increase -16 ,regb 
+73e1 202173d9 branch aes_crypt_data ,positive 
+73e2 20600000 rtn 
+
+le_encrypt:
+73e3 4770c03c bpatchx patch3c_1 ,mem_patch3c 
+73e4 da6043dc arg mem_le_txheader ,regc 
+73e5 680ac403 fetcht 5 ,mem_le_pcnt_tx 
+73e6 204073c1 call generate_mic 
+73e7 18007008 force regidx_xor ,regext_index 
+73e8 98005e00 iforce regext 
+73e9 18002200 force 0 ,rega 
+73ea 204073ad call first_block_data 
+73eb 20407425 call do_aes_ctr 
+73ec da6043de arg mem_le_txpayload ,regc 
+73ed 6800c3dd fetch 1 ,mem_le_txlen 
+73ee 1fe0a5ff add pdata ,-1 ,regb 
+73ef 9a608a00 iadd regc ,contw 
+73f0 1800700c force regidx_result ,regext_index 
+73f1 1de27e00 deposit regext 
+73f2 e0a20000 istore 4 ,contw 
+73f3 204073d9 call aes_crypt_data 
+73f4 6800c3dd fetch 1 ,mem_le_txlen 
+73f5 1fe0fe04 increase 4 ,pdata 
+73f6 6000c3dd store 1 ,mem_le_txlen 
+73f7 680ac403 fetcht 5 ,mem_le_pcnt_tx 
+73f8 18408401 increase 1 ,temp 
+73f9 600ac403 storet 5 ,mem_le_pcnt_tx 
+73fa 20600000 rtn 
+
+le_decrypt:
+73fb 4771403c bpatchx patch3c_2 ,mem_patch3c 
+73fc 680082da fetch 1 ,mem_le_rxbuf + 1 
+73fd 1fe67c14 sub pdata ,20 ,null 
+73fe 202173ff branch le_dec_cont ,positive 
+
+le_dec_cont:
+73ff da6002db arg mem_le_rxbuf + 2 ,regc 
+7400 1fe0a5ff add pdata ,-1 ,regb 
+7401 1fe0fffc increase -4 ,pdata 
+7402 600082da store 1 ,mem_le_rxbuf + 1 
+7403 9a608c00 iadd regc ,contr 
+7404 e8c20000 ifetch 4 ,contr 
+7405 18007008 force regidx_xor ,regext_index 
+7406 98005e00 iforce regext 
+7407 18002200 force 0 ,rega 
+7408 680ac408 fetcht 5 ,mem_le_pcnt_rx 
+7409 204073ad call first_block_data 
+740a 20407425 call do_aes_ctr 
+740b 1800700c force regidx_result ,regext_index 
+740c 1de27e00 deposit regext 
+740d 6002041b store 4 ,mem_le_peer_mic 
+740e 204073d9 call aes_crypt_data 
+740f da6002d9 arg mem_le_rxbuf ,regc 
+7410 204073c1 call generate_mic 
+7411 680a041b fetcht 4 ,mem_le_peer_mic 
+7412 98467e00 isub temp ,pdata 
+7413 247a0000 nrtn blank 
+7414 6802440d fetch 4 ,mem_le_last_mic 
+7415 98467e00 isub temp ,pdata 
+7416 207a0000 rtn blank 
+7417 600a440d storet 4 ,mem_le_last_mic 
+7418 6802c408 fetch 5 ,mem_le_pcnt_rx 
+7419 1fe0fe01 increase 1 ,pdata 
+741a 6002c408 store 5 ,mem_le_pcnt_rx 
+741b 18007e00 force 0 ,pdata 
+741c 20600000 rtn 
+
+wait_aes:
+741d 243bf41d nbranch wait_aes ,aes_ready 
+741e 20600000 rtn 
+
+do_aes_ocb:
+741f 18006c30 force 0x30 ,aes_ctrl 
+7420 18006c00 force 0x0 ,aes_ctrl 
+7421 2020741d branch wait_aes 
+
+do_aes_cbc:
+7422 18006c32 force 0x32 ,aes_ctrl 
+7423 18006c02 force 0x2 ,aes_ctrl 
+7424 2020741d branch wait_aes 
+
+do_aes_ctr:
+7425 18006c34 force 0x34 ,aes_ctrl 
+7426 18006c04 force 0x4 ,aes_ctrl 
+7427 2020741d branch wait_aes 
+
+aes_init:
+7428 18006c01 force 1 ,aes_ctrl 
+7429 18006c00 force 0 ,aes_ctrl 
+742a 20600000 rtn 
+
+function_s1:
+742b 18007000 force regidx_data ,regext_index 
+742c 6802042f fetch 4 ,mem_le_mrand 
+742d 98005e00 iforce regext 
+742e 1f00f001 increase 1 ,regext_index 
+742f e8c20000 ifetch 4 ,contr 
+7430 98005e00 iforce regext 
+7431 1f00f001 increase 1 ,regext_index 
+7432 6802443a fetch 4 ,mem_le_srand 
+7433 98005e00 iforce regext 
+7434 1f00f001 increase 1 ,regext_index 
+7435 e8c20000 ifetch 4 ,contr 
+7436 98005e00 iforce regext 
+7437 1f00f001 increase 1 ,regext_index 
+7438 20407492 call aes_clear 
+7439 1f00f1fc increase -4 ,regext_index 
+743a 680244c7 fetch 4 ,mem_le_tk 
+743b 1fe25e00 copy pdata ,regext 
+743c 1f00f004 increase 4 ,regext_index 
+743d 18006c38 force 0x38 ,aes_ctrl 
+743e 18006c08 force 0x8 ,aes_ctrl 
+743f 2020741d branch wait_aes 
+
+function_c1:
+7440 4771c03c bpatchx patch3c_3 ,mem_patch3c 
+7441 680344a0 fetch 6 ,mem_le_lap 
+7442 680b044f fetcht 6 ,mem_le_plap 
+7443 2034f446 branch function_c1_master ,master 
+7444 6803044f fetch 6 ,mem_le_plap 
+7445 680b44a0 fetcht 6 ,mem_le_lap 
+
+function_c1_master:
+7446 18007008 force regidx_xor ,regext_index 
+7447 18425e00 copy temp ,regext 
+7448 1f00f001 increase 1 ,regext_index 
+7449 184f5e00 rshift32 temp ,regext 
+744a 1ff07e00 lshift16 pdata ,pdata 
+744b 9de1de00 ior regext ,regext 
+744c 1f00f001 increase 1 ,regext_index 
+744d 1fef5e00 rshift32 pdata ,regext 
+744e 1f00f001 increase 1 ,regext_index 
+744f 18005e00 force 0 ,regext 
+7450 18007e00 force 0 ,pdata 
+7451 6800c48e fetch 1 ,mem_le_conn_peer_addr_type 
+7452 6808c485 fetcht 1 ,mem_le_adv_own_addr_type 
+7453 2434f456 nbranch function_c1_irat ,master 
+7454 6800c495 fetch 1 ,mem_le_conn_own_addr_type 
+7455 6808c48e fetcht 1 ,mem_le_conn_peer_addr_type 
+
+function_c1_irat:
+7456 6000c44a store 1 ,mem_le_iat 
+7457 6008c44b storet 1 ,mem_le_rat 
+7458 18007000 force regidx_data ,regext_index 
+7459 da40444a arg mem_le_iat ,regb 
+745a 18007204 force 4 ,loopcnt 
+
+function_c1_loop1:
+745b ea220000 ifetch 4 ,rega 
+745c ea4a0000 ifetcht 4 ,regb 
+745d 9842de00 ixor temp ,regext 
+745e 1f00f001 increase 1 ,regext_index 
+745f 1a20a204 increase 4 ,rega 
+7460 1a40a404 increase 4 ,regb 
+7461 c200745b loop function_c1_loop1 
+7462 20407492 call aes_clear 
+7463 1f00f1fc increase -4 ,regext_index 
+7464 680244c7 fetch 4 ,mem_le_tk 
+7465 1fe25e00 copy pdata ,regext 
+7466 1f00f004 increase 4 ,regext_index 
+7467 18006c38 force 0x38 ,aes_ctrl 
+7468 18006c0c force 0xc ,aes_ctrl 
+7469 2040741d call wait_aes 
+746a 20407491 call aes_clear_data 
+746b 18006c3a force 0x3a ,aes_ctrl 
+746c 18006c08 force 0x8 ,aes_ctrl 
+746d 2020741d branch wait_aes 
+
+padding_data:
+746e 2f200600 compare 0 ,loopcnt ,3 
+746f 20608000 rtn true 
+7470 18c27e00 deposit contr 
+7471 9f208a00 iadd loopcnt ,contw 
+7472 18007e00 force 0 ,pdata 
+
+padding_loop:
+7473 e0a08000 istore 1 ,contw 
+7474 1f20f201 increase 1 ,loopcnt 
+7475 2f200600 compare 0 ,loopcnt ,3 
+7476 20608000 rtn true 
+7477 20207473 branch padding_loop 
+
+aes_load_data:
+7478 18007000 force regidx_data ,regext_index 
+
+load_data_loop:
+7479 1f227e00 deposit loopcnt 
+747a 203a747d branch load_data_padding ,blank 
+747b e8c20000 ifetch 4 ,contr 
+747c 1f20f3fc increase -4 ,loopcnt 
+
+load_data_padding:
+747d 98005e00 iforce regext 
+747e 1f00f001 increase 1 ,regext_index 
+747f 2f001e04 compare regidx_key ,regext_index ,0xf 
+7480 20608000 rtn true 
+7481 20207479 branch load_data_loop 
+
+aes_load_xor:
+7482 18007008 force regidx_xor ,regext_index 
+7483 20207487 branch load_regext 
+
+load_key:
+7484 18007004 force regidx_key ,regext_index 
+7485 20207487 branch load_regext 
+
+load_data128:
+7486 18007000 force regidx_data ,regext_index 
+
+load_regext:
+7487 18007204 force 4 ,loopcnt 
+
+load_regext_loop:
+7488 e8c20000 ifetch 4 ,contr 
+7489 98005e00 iforce regext 
+748a 1f00f001 increase 1 ,regext_index 
+748b c2007488 loop load_regext_loop 
+748c 20600000 rtn 
+
+load_sk:
+748d d8c0047c arg mem_le_sk ,contr 
+748e 20207484 branch load_key 
+
+clear_hidata:
+748f 18007204 force 4 ,loopcnt 
+7490 20207494 branch clear_data_rest 
+
+aes_clear_data:
+7491 18007000 force regidx_data ,regext_index 
+
+aes_clear:
+7492 18007204 force 4 ,loopcnt 
+
+clear_loop:
+7493 18005e00 force 0 ,regext 
+
+clear_data_rest:
+7494 1f00f001 increase 1 ,regext_index 
+7495 c2007493 loop clear_loop 
+7496 20600000 rtn 
+
+store_aes_result:
+7497 1800700c force regidx_result ,regext_index 
+7498 18007204 force 4 ,loopcnt 
+
+send_aes_result_loop:
+7499 1de27e00 deposit regext 
+749a e0a20000 istore 4 ,contw 
+749b 1f00f001 increase 1 ,regext_index 
+749c c2007499 loop send_aes_result_loop 
+749d 20600000 rtn 
+
+store_enc_data:
+749e 1800700c force regidx_result ,regext_index 
+749f 1a620a00 copy regc ,contw 
+74a0 1a40f201 add regb ,1 ,loopcnt 
+74a1 1f267c0f sub loopcnt ,15 ,null 
+74a2 202174a4 branch store_enc_loop ,positive 
+74a3 18007210 force 16 ,loopcnt 
+
+store_enc_loop:
+74a4 1de27e00 deposit regext 
+74a5 1f267c03 sub loopcnt ,3 ,null 
+74a6 202174ac branch store_enc_byte ,positive 
+74a7 e0a20000 istore 4 ,contw 
+74a8 1f20f3fc increase -4 ,loopcnt 
+74a9 20628000 rtn zero 
+74aa 1f00f001 increase 1 ,regext_index 
+74ab 202074a4 branch store_enc_loop 
+
+store_enc_byte:
+74ac e0a08000 istore 1 ,contw 
+74ad 1fecfe00 rshift8 pdata ,pdata 
+74ae c20074ac loop store_enc_byte 
+74af 20600000 rtn 
+
+compare_res:
+74b0 1800700c force regidx_result ,regext_index 
+74b1 18007204 force 4 ,loopcnt 
+
+compare_res_loop:
+74b2 e8c20000 ifetch 4 ,contr 
+74b3 9de67c00 isub regext ,null 
+74b4 24628000 nrtn zero 
+74b5 1f00f001 increase 1 ,regext_index 
+74b6 c20074b2 loop compare_res_loop 
+74b7 18007c00 force 0 ,null 
+74b8 20600000 rtn 
+
+enable_authrom:
+74b9 68108050 hfetch 1 ,core_clkoff 
+74ba 793ffe00 set0 clock_off_auth_rom ,pdata 
+74bb 60108050 hstore 1 ,core_clkoff 
+74bc 20600000 rtn 
+
+disable_authrom:
+74bd 68108050 hfetch 1 ,core_clkoff 
+74be 79207e00 set1 clock_off_auth_rom ,pdata 
+74bf 60108050 hstore 1 ,core_clkoff 
+74c0 20600000 rtn 
+
+init_memp:
+74c1 d8a00886 arg mem_p ,contw 
+74c2 3803ffff setsect 0 ,0x3ffff 
+74c3 3807ffff setsect 1 ,0x3ffff 
+74c4 380bffff setsect 2 ,0x3ffff 
+74c5 380ffbff setsect 3 ,0x3fbff 
+74c6 e0a48000 istore 9 ,contw 
+74c7 3803ffff setsect 0 ,0x3ffff 
+74c8 3807ffff setsect 1 ,0x3ffff 
+74c9 380bffff setsect 2 ,0x3ffff 
+74ca 380fffff setsect 3 ,0x3ffff 
+74cb e0a48000 istore 9 ,contw 
+74cc 3803ffff setsect 0 ,0x3ffff 
+74cd 3807ffff setsect 1 ,0x3ffff 
+74ce 380bcfff setsect 2 ,0x3cfff 
+74cf 380fffff setsect 3 ,0x3ffff 
+74d0 e0a48000 istore 9 ,contw 
+74d1 3803ffff setsect 0 ,0x3ffff 
+74d2 3807ffff setsect 1 ,0x3ffff 
+74d3 380bffef setsect 2 ,0x3ffef 
+74d4 380fffff setsect 3 ,0x3ffff 
+74d5 e0a48000 istore 9 ,contw 
+74d6 3803ffff setsect 0 ,0x3ffff 
+74d7 3807ffff setsect 1 ,0x3ffff 
+74d8 380bffff setsect 2 ,0x3ffff 
+74d9 380fffff setsect 3 ,0x3ffff 
+74da e0a48000 istore 9 ,contw 
+74db 3803ffff setsect 0 ,0x3ffff 
+74dc 38066c7f setsect 1 ,0x26c7f 
+74dd 3808146b setsect 2 ,0x146b 
+74de 380f7bb3 setsect 3 ,0x37bb3 
+74df e0a48000 istore 9 ,contw 
+74e0 3801feb8 setsect 0 ,0x1feb8 
+74e1 38050c12 setsect 1 ,0x10c12 
+74e2 380ab722 setsect 2 ,0x2b722 
+74e3 380e9fa6 setsect 3 ,0x29fa6 
+74e4 e0a48000 istore 9 ,contw 
+74e5 3800e70f setsect 0 ,0xe70f 
+74e6 38056720 setsect 1 ,0x16720 
+74e7 3808519e setsect 2 ,0x519e 
+74e8 380d9084 setsect 3 ,0x19084 
+74e9 e0a48000 istore 9 ,contw 
+74ea 38031012 setsect 0 ,0x31012 
+74eb 380760bf setsect 1 ,0x360bf 
+74ec 380bf0af setsect 2 ,0x3f0af 
+74ed 380c03d3 setsect 3 ,0x3d3 
+74ee e0a48000 istore 9 ,contw 
+74ef 3803a188 setsect 0 ,0x3a188 
+74f0 38043ad0 setsect 1 ,0x3ad0 
+74f1 380bcbf2 setsect 2 ,0x3cbf2 
+74f2 380e43d9 setsect 3 ,0x243d9 
+74f3 e0a48000 istore 9 ,contw 
+74f4 3802b030 setsect 0 ,0x2b030 
+74f5 38076a03 setsect 1 ,0x36a03 
+74f6 38091188 setsect 2 ,0x11188 
+74f7 380de520 setsect 3 ,0x1e520 
+74f8 e0a48000 istore 9 ,contw 
+74f9 3803a11e setsect 0 ,0x3a11e 
+74fa 3804fe5d setsect 1 ,0xfe5d 
+74fb 3808dd57 setsect 2 ,0xdd57 
+74fc 380dac93 setsect 3 ,0x1ac93 
+74fd e0a48000 istore 9 ,contw 
+74fe 380011ed setsect 0 ,0x11ed 
+74ff 380618c4 setsect 1 ,0x218c4 
+7500 38088da7 setsect 2 ,0x8da7 
+7501 380e57ff setsect 3 ,0x257ff 
+7502 e0a48000 istore 9 ,contw 
+7503 3803192b setsect 0 ,0x3192b 
+7504 38074641 setsect 1 ,0x34641 
+7505 3809be0c setsect 2 ,0x1be0c 
+7506 380f66ad setsect 3 ,0x366ad 
+7507 e0a48000 istore 9 ,contw 
+7508 38001f83 setsect 0 ,0x1f83 
+7509 38055a23 setsect 1 ,0x15a23 
+750a 380bf9b0 setsect 2 ,0x3f9b0 
+750b 380c3949 setsect 3 ,0x3949 
+750c e0a48000 istore 9 ,contw 
+750d 38013a51 setsect 0 ,0x13a51 
+750e 380553fd setsect 1 ,0x153fd 
+750f 380b372a setsect 2 ,0x3372a 
+7510 380cf1bb setsect 3 ,0xf1bb 
+7511 e0a48000 istore 9 ,contw 
+7512 3803ae85 setsect 0 ,0x3ae85 
+7513 3805eed9 setsect 1 ,0x1eed9 
+7514 38089e66 setsect 2 ,0x9e66 
+7515 380c01a8 setsect 3 ,0x1a8 
+7516 e0a40000 istore 8 ,contw 
+7517 20600000 rtn 
+
+init_memp_256:
+7518 d8a0091e arg mem_p_256 ,contw 
+7519 3803ffff setsect 0 ,0x3ffff 
+751a 3807ffff setsect 1 ,0x3ffff 
+751b 380bffff setsect 2 ,0x3ffff 
+751c 380fffff setsect 3 ,0x3ffff 
+751d e0a48000 istore 9 ,contw 
+751e 3803ffff setsect 0 ,0x3ffff 
+751f 3804003f setsect 1 ,0x3f 
+7520 38080000 setsect 2 ,0x0 
+7521 380c0000 setsect 3 ,0x0 
+7522 e0a48000 istore 9 ,contw 
+7523 38000000 setsect 0 ,0x0 
+7524 38040000 setsect 1 ,0x0 
+7525 38081000 setsect 2 ,0x1000 
+7526 380c0000 setsect 3 ,0x0 
+7527 e0a48000 istore 9 ,contw 
+7528 3803ff00 setsect 0 ,0x3ff00 
+7529 3807ffff setsect 1 ,0x3ffff 
+752a 380bffcf setsect 2 ,0x3ffcf 
+752b 380fffff setsect 3 ,0x3ffff 
+752c e0a48000 istore 9 ,contw 
+752d 3803ffff setsect 0 ,0x3ffff 
+752e 3807ffff setsect 1 ,0x3ffff 
+752f 380bffff setsect 2 ,0x3ffff 
+7530 380c03ff setsect 3 ,0x3ff 
+7531 e0a48000 istore 9 ,contw 
+7532 38000000 setsect 0 ,0x0 
+7533 38040000 setsect 1 ,0x0 
+7534 38080000 setsect 2 ,0x0 
+7535 380c0000 setsect 3 ,0x0 
+7536 e0a48000 istore 9 ,contw 
+7537 38010000 setsect 0 ,0x10000 
+7538 38040000 setsect 1 ,0x0 
+7539 380bf000 setsect 2 ,0x3f000 
+753a 380fffff setsect 3 ,0x3ffff 
+753b e0a48000 istore 9 ,contw 
+753c 380296ff setsect 0 ,0x296ff 
+753d 38062630 setsect 1 ,0x22630 
+753e 380b945d setsect 2 ,0x3945d 
+753f 380fd284 setsect 3 ,0x3d284 
+7540 e0a48000 istore 9 ,contw 
+7541 380333a0 setsect 0 ,0x333a0 
+7542 38044b7a setsect 1 ,0x4b7a 
+7543 380837d8 setsect 2 ,0x37d8 
+7544 380fc9dc setsect 3 ,0x3c9dc 
+7545 e0a48000 istore 9 ,contw 
+7546 3803a440 setsect 0 ,0x3a440 
+7547 3805b958 setsect 1 ,0x1b958 
+7548 380b8bce setsect 2 ,0x38bce 
+7549 380d091f setsect 3 ,0x1091f 
+754a e0a48000 istore 9 ,contw 
+754b 3802e12c setsect 0 ,0x2e12c 
+754c 3805f47c setsect 1 ,0x1f47c 
+754d 380b56b1 setsect 2 ,0x356b1 
+754e 380efd47 setsect 3 ,0x2fd47 
+754f e0a48000 istore 9 ,contw 
+7550 38006837 setsect 0 ,0x6837 
+7551 3806ed90 setsect 1 ,0x2ed90 
+7552 3809ecec setsect 2 ,0x1ecec 
+7553 380dacc5 setsect 3 ,0x1acc5 
+7554 e0a48000 istore 9 ,contw 
+7555 38023357 setsect 0 ,0x23357 
+7556 38058af3 setsect 1 ,0x18af3 
+7557 3808f9e1 setsect 2 ,0xf9e1 
+7558 380d29f0 setsect 3 ,0x129f0 
+7559 e0a48000 istore 9 ,contw 
+755a 3802e7eb setsect 0 ,0x2e7eb 
+755b 3807e6e3 setsect 1 ,0x3e6e3 
+755c 380be1a7 setsect 2 ,0x3e1a7 
+755d 380d0b8b setsect 3 ,0x10b8b 
+755e e0a48000 istore 9 ,contw 
+755f 38024fe3 setsect 0 ,0x24fe3 
+7560 380420ef setsect 1 ,0x20ef 
+7561 3809b5a6 setsect 2 ,0x1b5a6 
+7562 380cdc2f setsect 3 ,0xdc2f 
+7563 e0a48000 istore 9 ,contw 
+7564 38013860 setsect 0 ,0x13860 
+7565 3806bd69 setsect 1 ,0x2bd69 
+7566 3808391a setsect 2 ,0x391a 
+7567 380db222 setsect 3 ,0x1b222 
+7568 e0a48000 istore 9 ,contw 
+7569 20600000 rtn 
+
+publickey_init:
+756a 6800c65a fetch 1 ,mem_ssp_enable 
+756b 243a757d nbranch sp_initialize ,blank 
+756c 20207a77 branch sp_initialize_256 
+
+sp_calc_sequence_256_check:
+756d 4772403c bpatchx patch3c_4 ,mem_patch3c 
+756e 6800c65a fetch 1 ,mem_ssp_enable 
+756f 207a0000 rtn blank 
+7570 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 
+7571 c1808000 rtnne sp_key_valid 
+7572 6800c4be fetch 1 ,mem_le_secure_connect_enable 
+7573 207a0000 rtn blank 
+7574 6800c4c3 fetch 1 ,mem_le_sc_local_key_invalid 
+7575 c1018000 rtneq sp_key_valid_256 
+7576 68014682 fetch 2 ,mem_ui_state_map 
+7577 c280757b bbit1 ui_state_bt_connected ,stop_publickey_calc_256 
+7578 6800c4c0 fetch 1 ,mem_le_sc_calc 
+7579 c0007a77 beq sp_calc_standby ,sp_initialize_256 
+757a 20600000 rtn 
+
+stop_publickey_calc_256:
+757b 7044c000 jam sp_calc_standby ,mem_le_sc_calc 
+757c 20600000 rtn 
+
+sp_initialize:
+757d 4772c03c bpatchx patch3c_5 ,mem_patch3c 
+757e 6800c65a fetch 1 ,mem_ssp_enable 
+757f 203a612b branch ssp_disable ,blank 
+7580 20406124 call ssp_enable 
+7581 20407583 call sp_clear_flags 
+7582 2020766d branch sp_pubkey_calc 
+
+sp_clear_flags:
+7583 58000000 setarg 0 
+7584 600409ae store 8 ,mem_sp_state_start 
+7585 600209b6 store 4 ,mem_sp_flag_start 
+7586 6003c65e store 7 ,mem_sp_iocap_remote 
+7587 20600000 rtn 
+
+sp_generate_local_key:
+7588 7009b001 jam sp_flag_commit ,mem_sp_flag 
+7589 2020758d branch sp_generate_local_key0 
+
+sp_master_generate_local_key:
+758a 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 
+758b c000f68a beq sp_key_valid ,sp_dhkey_calc 
+758c 20202a8c branch assert 
+
+sp_generate_local_key0:
+758d 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 
+758e c000f590 beq sp_key_valid ,sp_start_send_pubkey 
+758f 2020766d branch sp_pubkey_calc 
+
+sp_start_send_pubkey:
+7590 2040768a call sp_dhkey_calc 
+7591 680089af fetch 1 ,mem_master_sp_state 
+7592 247a0000 nrtn blank 
+7593 7009ae03 jam sp_stat_key_send ,mem_sp_state 
+7594 20600000 rtn 
+
+sp_calc_check_publickey_256:
+7595 204075b0 call sp_calc_b256 
+7596 da2009de arg mem_le_pubkey_remote_y_256 ,rega 
+7597 d8a00866 arg mem_t7_256 ,contw 
+7598 20407c79 call bn_sqrmod_256 
+7599 da2009be arg mem_le_pubkey_remote_x_256 ,rega 
+759a d8a00826 arg mem_t2_256 ,contw 
+759b 20407c79 call bn_sqrmod_256 
+759c da200826 arg mem_t2_256 ,rega 
+759d da4009be arg mem_le_pubkey_remote_x_256 ,regb 
+759e d8a00826 arg mem_t2_256 ,contw 
+759f 20407be1 call bn_mulmod_256 
+75a0 da20093e arg mem_a_256 ,rega 
+75a1 da4009be arg mem_le_pubkey_remote_x_256 ,regb 
+75a2 d8a00846 arg mem_t3_256 ,contw 
+75a3 20407be1 call bn_mulmod_256 
+75a4 da200846 arg mem_t3_256 ,rega 
+75a5 da400826 arg mem_t2_256 ,regb 
+75a6 d8a00826 arg mem_t2_256 ,contw 
+75a7 20407c7d call bn_addmod_256 
+75a8 da200806 arg mem_t0_256 ,rega 
+75a9 da400826 arg mem_t2_256 ,regb 
+75aa d8a00806 arg mem_t0_256 ,contw 
+75ab 20407c7d call bn_addmod_256 
+75ac df200020 arg 32 ,loopcnt 
+75ad da200866 arg mem_t7_256 ,rega 
+75ae da400806 arg mem_t0_256 ,regb 
+75af 20207f88 branch string_compare 
+
+sp_calc_b256:
+75b0 da20097e arg mem_gy_256 ,rega 
+75b1 d8a00806 arg mem_t0_256 ,contw 
+75b2 20407c79 call bn_sqrmod_256 
+75b3 da20095e arg mem_gx_256 ,rega 
+75b4 d8a00826 arg mem_t2_256 ,contw 
+75b5 20407c79 call bn_sqrmod_256 
+75b6 da200826 arg mem_t2_256 ,rega 
+75b7 da40095e arg mem_gx_256 ,regb 
+75b8 d8a00826 arg mem_t2_256 ,contw 
+75b9 20407be1 call bn_mulmod_256 
+75ba da20093e arg mem_a_256 ,rega 
+75bb da40095e arg mem_gx_256 ,regb 
+75bc d8a00846 arg mem_t3_256 ,contw 
+75bd 20407be1 call bn_mulmod_256 
+75be da200846 arg mem_t3_256 ,rega 
+75bf da400826 arg mem_t2_256 ,regb 
+75c0 d8a00826 arg mem_t2_256 ,contw 
+75c1 20407c7d call bn_addmod_256 
+75c2 da200806 arg mem_t0_256 ,rega 
+75c3 da400826 arg mem_t2_256 ,regb 
+75c4 d8a00806 arg mem_t0_256 ,contw 
+75c5 20207c96 branch bn_submod_256 
+
+sp_calc_check_publickey:
+75c6 204075e1 call sp_calc_b 
+75c7 da2009e6 arg mem_sp_pubkey_remote_y ,rega 
+75c8 d8a00866 arg mem_t7_256 ,contw 
+75c9 204077a8 call bn_sqrmod 
+75ca da2009c6 arg mem_sp_pubkey_remote_x ,rega 
+75cb d8a00826 arg mem_t2_256 ,contw 
+75cc 204077a8 call bn_sqrmod 
+75cd da200826 arg mem_t2_256 ,rega 
+75ce da4009c6 arg mem_sp_pubkey_remote_x ,regb 
+75cf d8a00826 arg mem_t2_256 ,contw 
+75d0 20407786 call bn_mulmod 
+75d1 da20089e arg mem_a ,rega 
+75d2 da4009c6 arg mem_sp_pubkey_remote_x ,regb 
+75d3 d8a00846 arg mem_t3_256 ,contw 
+75d4 20407786 call bn_mulmod 
+75d5 da200846 arg mem_t3_256 ,rega 
+75d6 da400826 arg mem_t2_256 ,regb 
+75d7 d8a00826 arg mem_t2_256 ,contw 
+75d8 20407755 call bn_addmod 
+75d9 da200806 arg mem_t0_256 ,rega 
+75da da400826 arg mem_t2_256 ,regb 
+75db d8a00806 arg mem_t0_256 ,contw 
+75dc 20407755 call bn_addmod 
+75dd df200018 arg 24 ,loopcnt 
+75de da200866 arg mem_t7_256 ,rega 
+75df da400806 arg mem_t0_256 ,regb 
+75e0 20207f88 branch string_compare 
+
+sp_calc_b:
+75e1 da2008e6 arg mem_gy ,rega 
+75e2 d8a00806 arg mem_t0_256 ,contw 
+75e3 204077a8 call bn_sqrmod 
+75e4 da2008ce arg mem_gx ,rega 
+75e5 d8a00826 arg mem_t2_256 ,contw 
+75e6 204077a8 call bn_sqrmod 
+75e7 da200826 arg mem_t2_256 ,rega 
+75e8 da4008ce arg mem_gx ,regb 
+75e9 d8a00826 arg mem_t2_256 ,contw 
+75ea 20407786 call bn_mulmod 
+75eb da20089e arg mem_a ,rega 
+75ec da4008ce arg mem_gx ,regb 
+75ed d8a00846 arg mem_t3_256 ,contw 
+75ee 20407786 call bn_mulmod 
+75ef da200846 arg mem_t3_256 ,rega 
+75f0 da400826 arg mem_t2_256 ,regb 
+75f1 d8a00826 arg mem_t2_256 ,contw 
+75f2 20407755 call bn_addmod 
+75f3 da200806 arg mem_t0_256 ,rega 
+75f4 da400826 arg mem_t2_256 ,regb 
+75f5 d8a00806 arg mem_t0_256 ,contw 
+75f6 20207758 branch bn_submod 
+
+sp_calculate_commitment:
+75f7 680089b2 fetch 1 ,mem_sp_calc 
+75f8 c0807615 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc 
+75f9 20407612 call sp_local_random_key_generator 
+75fa d8a00a7e arg mem_sp_prarm_stack ,contw 
+75fb 58000a2e setarg mem_sp_random_local_end 
+75fc e0a10000 istore 2 ,contw 
+75fd 58004642 setarg mem_sp_pubkey_local_x_end 
+75fe e0a10000 istore 2 ,contw 
+75ff 580009de setarg mem_sp_pubkey_remote_x_end 
+7600 e0a10000 istore 2 ,contw 
+7601 20207609 branch sp_calculate_commitment0 
+
+master_sp_calculate_commitment:
+7602 d8a00a7e arg mem_sp_prarm_stack ,contw 
+7603 58000a3e setarg mem_sp_random_remote_end 
+7604 e0a10000 istore 2 ,contw 
+7605 580009de setarg mem_sp_pubkey_remote_x_end 
+7606 e0a10000 istore 2 ,contw 
+7607 58004642 setarg mem_sp_pubkey_local_x_end 
+7608 e0a10000 istore 2 ,contw 
+
+sp_calculate_commitment0:
+7609 204079a0 call function_f1 
+760a 680089af fetch 1 ,mem_master_sp_state 
+760b c002760f beq sp_stat_commit_calc ,master_sp_calculate_commitment0 
+760c 7009b001 jam sp_flag_commit ,mem_sp_flag 
+760d 7009ae05 jam sp_stat_commit_send ,mem_sp_state 
+760e 20600000 rtn 
+
+master_sp_calculate_commitment0:
+760f 7009af14 jam sp_stat_commitment_compare ,mem_master_sp_state 
+7610 2040758a call sp_master_generate_local_key 
+7611 202076d8 branch master_set_mem_master_sp_flag 
+
+sp_local_random_key_generator:
+7612 d8a00a1e arg mem_sp_random_local ,contw 
+7613 18000e08 force 8 ,queue 
+7614 202076a2 branch random_generator 
+
+sp_calculate_commitment_wait_dhkey_calc:
+7615 7009b001 jam sp_flag_commit ,mem_sp_flag 
+7616 20600000 rtn 
+
+sp_confirm_check:
+7617 4773403c bpatchx patch3c_6 ,mem_patch3c 
+7618 d8a00727 arg mem_addr_value ,contw 
+7619 680340a0 fetch 6 ,mem_lap 
+761a e0a30000 istore 6 ,contw 
+761b 68030040 fetch 6 ,mem_plap 
+761c e0a30000 istore 6 ,contw 
+761d 6801c65e fetch 3 ,mem_sp_iocap_remote 
+761e e0a18000 istore 3 ,contw 
+761f 20407a0d call function_f3a 
+7620 da200a4e arg mem_sp_calc_result_high ,rega 
+7621 da400a5e arg mem_sp_check_result ,regb 
+7622 18000e04 force 4 ,queue 
+7623 204076a7 call compare4 
+7624 2420f631 nbranch sp_confirm_check_failed ,true 
+7625 20407628 call sp_confirm_check_success 
+7626 70007d41 jam lmp_dhkey_check ,mem_lmi_opcode2 
+7627 202062f8 branch tid_set_reply 
+
+sp_confirm_check_success:
+7628 680089af fetch 1 ,mem_master_sp_state 
+7629 c004f62e beq sp_stat_confirm_check ,sp_confirm_check_success_master 
+762a 7009ae0a jam sp_stat_confirm_calc ,mem_sp_state 
+762b 7009b001 jam sp_flag_commit ,mem_sp_flag 
+762c 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+762d 20600000 rtn 
+
+sp_confirm_check_success_master:
+762e 70007c03 jam lmp_accepted ,mem_lmo_opcode2 
+762f 7009af15 jam sp_state_end ,mem_master_sp_state 
+7630 202076d8 branch master_set_mem_master_sp_flag 
+
+sp_confirm_check_failed:
+7631 680089af fetch 1 ,mem_master_sp_state 
+7632 c004f637 beq sp_stat_confirm_check ,sp_confirm_check_failed_master 
+7633 7009ae00 jam sp_stat_null ,mem_sp_state 
+7634 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 
+7635 70007e05 jam authentication_failure_error ,mem_lmo_reason2 
+7636 20600000 rtn 
+
+sp_confirm_check_failed_master:
+7637 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 
+7638 7009af00 jam sp_stat_null ,mem_master_sp_state 
+7639 20600000 rtn 
+
+sp_confirm_calc:
+763a 680089b3 fetch 1 ,mem_sp_dh_ready 
+763b c000f63e beq sp_flag_commit ,sp_confirm_calc_ready 
+763c 7009af0a jam sp_stat_confirm_calc ,mem_master_sp_state 
+763d 202076d8 branch master_set_mem_master_sp_flag 
+
+sp_confirm_calc_ready:
+763e d8a00727 arg mem_addr_value ,contw 
+763f 68030040 fetch 6 ,mem_plap 
+7640 e0a30000 istore 6 ,contw 
+7641 680340a0 fetch 6 ,mem_lap 
+7642 e0a30000 istore 6 ,contw 
+7643 6801c65b fetch 3 ,mem_sp_iocap_local 
+7644 e0a18000 istore 3 ,contw 
+7645 20407a24 call function_f3b 
+7646 680089af fetch 1 ,mem_master_sp_state 
+7647 c005764b beq sp_stat_confirm_calc ,sp_confirm_calc_master 
+7648 7009ae0b jam sp_stat_confirm_send ,mem_sp_state 
+7649 7009b001 jam sp_flag_commit ,mem_sp_flag 
+764a 20600000 rtn 
+
+sp_confirm_calc_master:
+764b 7009af0b jam sp_stat_confirm_send ,mem_master_sp_state 
+764c 7009b101 jam sp_flag_commit ,mem_master_sp_flag 
+764d 20600000 rtn 
+
+sp_master_key_prarm_push:
+764e d8a00a7e arg mem_sp_prarm_stack ,contw 
+764f 68030040 fetch 6 ,mem_plap 
+7650 e0a30000 istore 6 ,contw 
+7651 680340a0 fetch 6 ,mem_lap 
+7652 e0a30000 istore 6 ,contw 
+7653 58000a2e setarg mem_sp_random_local_end 
+7654 e0a10000 istore 2 ,contw 
+7655 58000a3e setarg mem_sp_random_remote_end 
+7656 e0a10000 istore 2 ,contw 
+7657 20207662 branch sp_link_key_calc 
+
+sp_link_key_prarm_push:
+7658 7009ae0f jam sp_stat_done ,mem_sp_state 
+7659 d8a00a7e arg mem_sp_prarm_stack ,contw 
+765a 680340a0 fetch 6 ,mem_lap 
+765b e0a30000 istore 6 ,contw 
+765c 68030040 fetch 6 ,mem_plap 
+765d e0a30000 istore 6 ,contw 
+765e 58000a3e setarg mem_sp_random_remote_end 
+765f e0a10000 istore 2 ,contw 
+7660 58000a2e setarg mem_sp_random_local_end 
+7661 e0a10000 istore 2 ,contw 
+
+sp_link_key_calc:
+7662 d8a00727 arg mem_addr_value ,contw 
+7663 68030a7e fetch 6 ,mem_sp_prarm_stack 
+7664 e0a30000 istore 6 ,contw 
+7665 68030a84 fetch 6 ,mem_sp_prarm_stack + 6 
+7666 e0a30000 istore 6 ,contw 
+7667 204079d7 call function_f2 
+7668 7041bd01 jam 1 ,mem_link_key_exists 
+7669 d8a041be arg mem_link_key ,contw 
+766a d8c00a4e arg mem_sp_calc_result_high ,contr 
+766b 20407ebf call memcpy16 
+766c 202021c4 branch generate_linkkey_continue 
+
+sp_pubkey_calc:
+766d 4773c03c bpatchx patch3c_7 ,mem_patch3c 
+766e 6800c5b1 fetch 1 ,mem_sp_local_key_invalid 
+766f c1800000 rtnne sp_key_invalid 
+7670 680089b2 fetch 1 ,mem_sp_calc 
+7671 c1800000 rtnne sp_calc_standby 
+7672 d8a04612 arg mem_sp_private_key ,contw 
+7673 18000e0b force 11 ,queue 
+7674 204076a2 call random_generator 
+7675 180a7e00 random pdata 
+7676 1fe37e00 rshift pdata ,pdata 
+7677 e0a10000 istore 2 ,contw 
+7678 d8a006be arg mem_k ,contw 
+7679 d8c04612 arg mem_sp_private_key ,contr 
+767a 20407ebe call memcpy24 
+767b d8a005e6 arg mem_ax ,contw 
+767c d8c008ce arg mem_gx ,contr 
+767d 20407ebc call memcpy48 
+767e d8a00616 arg mem_az ,contw 
+767f 20407ec5 call bn_zero 
+7680 70061601 jam 1 ,mem_az 
+7681 20407a5d call eckp_calc_init 
+7682 7009b201 jam sp_calc_pubkey ,mem_sp_calc 
+7683 20600000 rtn 
+
+sp_pubkey_generated:
+7684 d8a0462a arg mem_sp_pubkey_local ,contw 
+7685 d8c0062e arg mem_bx ,contr 
+7686 20407ebc call memcpy48 
+7687 7045b101 jam sp_key_valid ,mem_sp_local_key_invalid 
+7688 7009b200 jam sp_calc_standby ,mem_sp_calc 
+7689 20600000 rtn 
+
+sp_dhkey_calc:
+768a 4774403d bpatchx patch3d_0 ,mem_patch3d 
+768b 680089b9 fetch 1 ,mem_sp_dhkey_invalid 
+768c c1800000 rtnne sp_key_invalid 
+768d 680089b2 fetch 1 ,mem_sp_calc 
+768e c1800000 rtnne sp_calc_standby 
+768f d8a006be arg mem_k ,contw 
+7690 d8c04612 arg mem_sp_private_key ,contr 
+7691 20407ebe call memcpy24 
+7692 d8a005e6 arg mem_ax ,contw 
+7693 d8c009c6 arg mem_sp_pubkey_remote ,contr 
+7694 20407ebc call memcpy48 
+7695 d8a00616 arg mem_az ,contw 
+7696 20407ec5 call bn_zero 
+7697 70061601 jam 1 ,mem_az 
+7698 20407a5d call eckp_calc_init 
+7699 7009b202 jam sp_calc_dhkey ,mem_sp_calc 
+769a 20600000 rtn 
+
+sp_dhkey_generated:
+769b 7009b301 jam sp_flag_commit ,mem_sp_dh_ready 
+769c d8a00a06 arg mem_sp_dhkey ,contw 
+769d d8c0062e arg mem_bx ,contr 
+769e 20407ebe call memcpy24 
+769f 7009b901 jam sp_key_valid ,mem_sp_dhkey_invalid 
+76a0 7009b200 jam sp_calc_standby ,mem_sp_calc 
+76a1 20600000 rtn 
+
+random_generator:
+76a2 18e08fff increase -1 ,queue 
+76a3 24610000 nrtn positive 
+76a4 180a7e00 random pdata 
+76a5 e0a10000 istore 2 ,contw 
+76a6 202076a2 branch random_generator 
+
+compare4:
+76a7 18e08fff increase -1 ,queue 
+76a8 242176b3 nbranch compare4_success ,positive 
+76a9 ea220000 ifetch 4 ,rega 
+76aa 1fe20400 copy pdata ,temp 
+76ab ea420000 ifetch 4 ,regb 
+76ac 9842fe00 iflip temp ,pdata 
+76ad 2422f6b1 nbranch compare4_failed ,zero 
+76ae 1a20a204 increase 4 ,rega 
+76af 1a40a404 increase 4 ,regb 
+76b0 202076a7 branch compare4 
+
+compare4_failed:
+76b1 7840fc00 disable true 
+76b2 20600000 rtn 
+
+compare4_success:
+76b3 7820fc00 enable true 
+76b4 20600000 rtn 
+
+simple_pairing_sequence:
+76b5 4774c03d bpatchx patch3d_1 ,mem_patch3d 
+76b6 680089b0 fetch 1 ,mem_sp_flag 
+76b7 207a0000 rtn blank 
+76b8 204062bc call lmo_fifo_check 
+76b9 247a0000 nrtn blank 
+76ba 7009b000 jam sp_flag_standby ,mem_sp_flag 
+76bb 680089ae fetch 1 ,mem_sp_state 
+76bc c001e1fd beq sp_stat_key_send ,sp_send_lmp_encapsulated_header 
+76bd c002e21a beq sp_stat_commit_send ,sp_send_lmp_simple_pairing_comfirm 
+76be c003e225 beq sp_stat_random_send ,sp_send_lmp_simple_pairing_number 
+76bf c005e23a beq sp_stat_confirm_send ,sp_send_lmp_dhkey_check 
+76c0 c0017588 beq sp_stat_key_generate ,sp_generate_local_key 
+76c1 c00275f7 beq sp_stat_commit_calc ,sp_calculate_commitment 
+76c2 c004f617 beq sp_stat_confirm_check ,sp_confirm_check 
+76c3 c005763a beq sp_stat_confirm_calc ,sp_confirm_calc 
+76c4 c0067658 beq sp_stat_link_key_calc ,sp_link_key_prarm_push 
+76c5 20600000 rtn 
+
+master_simple_paring_sequence:
+76c6 4775403d bpatchx patch3d_2 ,mem_patch3d 
+76c7 680089b1 fetch 1 ,mem_master_sp_flag 
+76c8 207a0000 rtn blank 
+76c9 204062bc call lmo_fifo_check 
+76ca 247a0000 nrtn blank 
+76cb 7009b100 jam sp_flag_standby ,mem_master_sp_flag 
+76cc 680089af fetch 1 ,mem_master_sp_state 
+76cd c00961e0 beq sp_master_stat_start_skip ,sp_master_send_io_cap_get 
+76ce c009e1e5 beq sp_master_stat_start_done ,sp_master_send_io_cap_send 
+76cf c001e1e9 beq sp_stat_key_send ,sp_master_send_lmp_encapsulated_header 
+76d0 c0027602 beq sp_stat_commit_calc ,master_sp_calculate_commitment 
+76d1 c00a61ed beq sp_stat_commitment_compare ,sp_master_commitment_compare 
+76d2 c003e1fb beq sp_stat_random_send ,sp_master_send_lmp_simple_pairing_number 
+76d3 c005763a beq sp_stat_confirm_calc ,sp_confirm_calc 
+76d4 c005e239 beq sp_stat_confirm_send ,master_sp_send_lmp_dhkey_check 
+76d5 c004f617 beq sp_stat_confirm_check ,sp_confirm_check 
+76d6 c00ae233 beq sp_state_end ,master_sp_sm_end 
+76d7 20600000 rtn 
+
+master_set_mem_master_sp_flag:
+76d8 7009b101 jam sp_flag_commit ,mem_master_sp_flag 
+76d9 20600000 rtn 
+
+master_clear_mem_master_sp_flag:
+76da 7009b100 jam sp_flag_standby ,mem_master_sp_flag 
+76db 20600000 rtn 
+
+sp_calc_sequence:
+76dc 4775c03d bpatchx patch3d_3 ,mem_patch3d 
+76dd 6800c65a fetch 1 ,mem_ssp_enable 
+76de 207a0000 rtn blank 
+76df 680089b2 fetch 1 ,mem_sp_calc 
+76e0 207a0000 rtn blank 
+76e1 1fe0fe80 increase 0x80 ,pdata 
+76e2 600089b2 store 1 ,mem_sp_calc 
+76e3 c3838000 rtnbit1 7 
+76e4 680085e3 fetch 1 ,mem_ec_loopc 
+76e5 203a76e7 branch sp_calc_sequence_done ,blank 
+76e6 20207a68 branch eckp_calc 
+
+sp_calc_sequence_done:
+76e7 204078d3 call ecunmapz 
+76e8 680089b2 fetch 1 ,mem_sp_calc 
+76e9 c000f684 beq sp_calc_pubkey ,sp_pubkey_generated 
+76ea c001769b beq sp_calc_dhkey ,sp_dhkey_generated 
+76eb 20600000 rtn 
+
+bn_testbit:
+76ec 1fe10e07 and pdata ,7 ,queue 
+76ed 1fe97e00 rshift3 pdata ,pdata 
+76ee 98c08c00 iadd contr ,contr 
+76ef e8c08000 ifetch 1 ,contr 
+76f0 afec0000 qisolate0 pdata 
+76f1 20600000 rtn 
+
+ec_copy:
+76f2 20407ebe call memcpy24 
+76f3 20407ebe call memcpy24 
+76f4 20207ebe branch memcpy24 
+
+bn_eq_zero:
+76f5 e8c40000 ifetch 8 ,contr 
+76f6 247a0000 nrtn blank 
+76f7 e8c40000 ifetch 8 ,contr 
+76f8 247a0000 nrtn blank 
+76f9 e8c40000 ifetch 8 ,contr 
+76fa 20600000 rtn 
+
+bn_eq_0:
+76fb ea220000 ifetch 4 ,rega 
+76fc 98000400 iforce temp 
+76fd ea420000 ifetch 4 ,regb 
+76fe 98467c00 isub temp ,null 
+76ff 24628000 nrtn zero 
+7700 1a20a204 increase 4 ,rega 
+7701 1a40a404 increase 4 ,regb 
+7702 c20076fb loop bn_eq_0 
+7703 20600000 rtn 
+
+bn_bigeq:
+7704 18007206 force 6 ,loopcnt 
+7705 1a20a214 increase 20 ,rega 
+7706 1a40a414 increase 20 ,regb 
+
+bn_bigeq_0:
+7707 ea420000 ifetch 4 ,regb 
+7708 98000400 iforce temp 
+7709 ea220000 ifetch 4 ,rega 
+770a 98467e00 isub temp ,pdata 
+770b 24610000 nrtn positive 
+770c 247a0000 nrtn blank 
+770d 1a20a3fc increase -4 ,rega 
+770e 1a40a5fc increase -4 ,regb 
+770f c2007707 loop bn_bigeq_0 
+7710 20600000 rtn 
+
+bn_add:
+7711 18007206 force 6 ,loopcnt 
+7712 18002600 force 0 ,regc 
+
+bn_add_0:
+7713 ea220000 ifetch 4 ,rega 
+7714 98000400 iforce temp 
+7715 ea420000 ifetch 4 ,regb 
+7716 9840fe00 iadd temp ,pdata 
+7717 9a60fe00 iadd regc ,pdata 
+7718 e0a20000 istore 4 ,contw 
+7719 2feffe20 isolate1 32 ,pdata 
+771a 7920a600 setflag true ,0 ,regc 
+771b 1a20a204 increase 4 ,rega 
+771c 1a40a404 increase 4 ,regb 
+771d c2007713 loop bn_add_0 
+771e 20600000 rtn 
+
+bn_sub:
+771f 18007206 force 6 ,loopcnt 
+7720 18002600 force 0 ,regc 
+
+bn_sub_0:
+7721 ea420000 ifetch 4 ,regb 
+7722 98000400 iforce temp 
+7723 ea220000 ifetch 4 ,rega 
+7724 98467e00 isub temp ,pdata 
+7725 9a667e00 isub regc ,pdata 
+7726 e0a20000 istore 4 ,contw 
+7727 2feffe20 isolate1 32 ,pdata 
+7728 7920a600 setflag true ,0 ,regc 
+7729 1a20a204 increase 4 ,rega 
+772a 1a40a404 increase 4 ,regb 
+772b c2007721 loop bn_sub_0 
+772c 20600000 rtn 
+
+bn_rshift6:
+772d 18007206 force 6 ,loopcnt 
+772e 1a20a214 increase 20 ,rega 
+
+bn_rshift:
+772f 18002600 force 0 ,regc 
+
+bn_rshift_0:
+7730 ea220000 ifetch 4 ,rega 
+7731 2feffe00 isolate1 0 ,pdata 
+7732 7920a601 setflag true ,1 ,regc 
+7733 1fe37e00 rshift pdata ,pdata 
+7734 2a6ffe00 isolate1 0 ,regc 
+7735 7920fe1f setflag true ,31 ,pdata 
+7736 e2220000 istore 4 ,rega 
+7737 1a20a3fc increase -4 ,rega 
+7738 1a632600 rshift regc ,regc 
+7739 c2007730 loop bn_rshift_0 
+773a 20600000 rtn 
+
+bn_lshift:
+773b 18007206 force 6 ,loopcnt 
+773c 18002600 force 0 ,regc 
+
+bn_lshift_0:
+773d ea220000 ifetch 4 ,rega 
+773e 2feffe1f isolate1 31 ,pdata 
+773f 7920a601 setflag true ,1 ,regc 
+7740 1fe3fe00 lshift pdata ,pdata 
+7741 2a6ffe00 isolate1 0 ,regc 
+7742 7920fe00 setflag true ,0 ,pdata 
+7743 e2220000 istore 4 ,rega 
+7744 1a20a204 increase 4 ,rega 
+7745 1a632600 rshift regc ,regc 
+7746 c200773d loop bn_lshift_0 
+7747 20600000 rtn 
+
+bn_lshiftmod:
+7748 2040773b call bn_lshift 
+
+bn_lshiftmod_ismod:
+7749 2a6ffe00 isolate1 0 ,regc 
+774a 2020f751 branch bn_lshiftmod_0 ,true 
+774b da400886 arg mem_p ,regb 
+774c 1a222600 copy rega ,regc 
+774d 1a20a3e8 increase -24 ,rega 
+774e 20407704 call bn_bigeq 
+774f 24610000 nrtn positive 
+7750 1a622200 copy regc ,rega 
+
+bn_lshiftmod_0:
+7751 1a20a3e8 increase -24 ,rega 
+7752 da400886 arg mem_p ,regb 
+7753 1a220a00 copy rega ,contw 
+7754 2020771f branch bn_sub 
+
+bn_addmod:
+7755 20407711 call bn_add 
+7756 18a22200 copy contw ,rega 
+7757 20207749 branch bn_lshiftmod_ismod 
+
+bn_submod:
+7758 2040771f call bn_sub 
+7759 2a6c0000 isolate0 0 ,regc 
+775a 20608000 rtn true 
+775b da400886 arg mem_p ,regb 
+775c 18a0a3e8 add contw ,-24 ,rega 
+775d 1a220a00 copy rega ,contw 
+775e 20207711 branch bn_add 
+
+bn_p192mod:
+775f 18a21600 copy contw ,timeup 
+7760 1a226000 copy rega ,alarm 
+7761 da400716 arg mem_tmp2 ,regb 
+7762 1a420a00 copy regb ,contw 
+7763 1a208c18 add rega ,24 ,contr 
+7764 e8c40000 ifetch 8 ,contr 
+7765 e0a40000 istore 8 ,contw 
+7766 e0a40000 istore 8 ,contw 
+7767 18007e00 force 0 ,pdata 
+7768 e0a40000 istore 8 ,contw 
+7769 19620a00 copy timeup ,contw 
+776a 20407755 call bn_addmod 
+776b da400716 arg mem_tmp2 ,regb 
+776c 1a420a00 copy regb ,contw 
+776d 18007e00 force 0 ,pdata 
+776e e0a40000 istore 8 ,contw 
+776f 1e008c20 add alarm ,32 ,contr 
+7770 e8c40000 ifetch 8 ,contr 
+7771 e0a40000 istore 8 ,contw 
+7772 e0a40000 istore 8 ,contw 
+7773 19622200 copy timeup ,rega 
+7774 1a220a00 copy rega ,contw 
+7775 20407755 call bn_addmod 
+7776 da400716 arg mem_tmp2 ,regb 
+7777 1a420a00 copy regb ,contw 
+7778 1e008c28 add alarm ,40 ,contr 
+7779 e8c40000 ifetch 8 ,contr 
+777a e0a40000 istore 8 ,contw 
+777b e0a40000 istore 8 ,contw 
+777c e0a40000 istore 8 ,contw 
+777d 19622200 copy timeup ,rega 
+777e 1a220a00 copy rega ,contw 
+777f 20207755 branch bn_addmod 
+
+bn_load:
+7780 18007206 force 6 ,loopcnt 
+
+bn_load_0:
+7781 e8c20000 ifetch 4 ,contr 
+7782 98005e00 iforce regext 
+7783 1f00f001 increase 1 ,regext_index 
+7784 c2007781 loop bn_load_0 
+7785 20600000 rtn 
+
+bn_mulmod:
+7786 18a21600 copy contw ,timeup 
+7787 d8a006e6 arg mem_tmp1 ,contw 
+7788 20407ec5 call bn_zero 
+7789 d8a006e6 arg mem_tmp1 ,contw 
+778a 1a220c00 copy rega ,contr 
+778b 18007000 force 0 ,regext_index 
+778c 20407780 call bn_load 
+778d 1a420c00 copy regb ,contr 
+778e 20407780 call bn_load 
+778f 18002400 force 0 ,regb 
+
+bn_mulmod_1:
+7790 18000400 force 0 ,temp 
+7791 18002606 force 6 ,regc 
+
+bn_mulmod_0:
+7792 e8a20000 ifetch 4 ,contw 
+7793 98002200 iforce rega 
+7794 1a427000 copy regb ,regext_index 
+7795 1de27e00 deposit regext 
+7796 1a627000 copy regc ,regext_index 
+7797 9deffe00 imul32 regext ,pdata 
+7798 9a20fe00 iadd rega ,pdata 
+7799 9840fe00 iadd temp ,pdata 
+779a e0a20000 istore 4 ,contw 
+779b 1fef0400 rshift32 pdata ,temp 
+779c 1a60a601 increase 1 ,regc 
+779d 2a61fe0c compare 12 ,regc ,0xff 
+779e 2420f792 nbranch bn_mulmod_0 ,true 
+779f 18427e00 deposit temp 
+77a0 e0a20000 istore 4 ,contw 
+77a1 18a08be8 increase -24 ,contw 
+77a2 1a40a401 increase 1 ,regb 
+77a3 2a41fe06 compare 6 ,regb ,0xff 
+77a4 2420f790 nbranch bn_mulmod_1 ,true 
+77a5 da2006e6 arg mem_tmp1 ,rega 
+77a6 19620a00 copy timeup ,contw 
+77a7 2020775f branch bn_p192mod 
+
+bn_sqrmod:
+77a8 1a222400 copy rega ,regb 
+77a9 20207786 branch bn_mulmod 
+
+bn_rshifteven:
+77aa 1a226000 copy rega ,alarm 
+
+bn_rshifteven_1:
+77ab 1e022200 copy alarm ,rega 
+77ac ea208000 ifetch 1 ,rega 
+77ad 2feffe00 isolate1 0 ,pdata 
+77ae 20608000 rtn true 
+77af 2040772d call bn_rshift6 
+77b0 ea408000 ifetch 1 ,regb 
+77b1 2fec0000 isolate0 0 ,pdata 
+77b2 2020f7ba branch bn_rshifteven_0 ,true 
+77b3 da200886 arg mem_p ,rega 
+77b4 1a420a00 copy regb ,contw 
+77b5 20407711 call bn_add 
+77b6 ea408000 ifetch 1 ,regb 
+77b7 9a60fe00 iadd regc ,pdata 
+77b8 e2408000 istore 1 ,regb 
+77b9 1a40a5e8 increase -24 ,regb 
+
+bn_rshifteven_0:
+77ba 1a40a218 add regb ,24 ,rega 
+77bb 18007207 force 7 ,loopcnt 
+77bc 2040772f call bn_rshift 
+77bd 202077ab branch bn_rshifteven_1 
+
+bn_invmod:
+77be 18a21600 copy contw ,timeup 
+77bf d8a00746 arg mem_tmp0 ,contw 
+77c0 20407ec5 call bn_zero 
+77c1 18007e00 force 0 ,pdata 
+77c2 600206fe store 4 ,mem_tmp5 
+77c3 6002075e store 4 ,mem_t2 
+77c4 70074601 jam 1 ,mem_tmp0 
+77c5 d8a006e6 arg mem_tmp1 ,contw 
+77c6 20407ec5 call bn_zero 
+77c7 d8c00886 arg mem_p ,contr 
+77c8 d8a00716 arg mem_tmp2 ,contw 
+77c9 20407ebe call memcpy24 
+77ca 1a220c00 copy rega ,contr 
+77cb d8a0072e arg mem_tmp3 ,contw 
+77cc 20407ebe call memcpy24 
+
+bn_invmod_2:
+77cd d8c0072e arg mem_tmp3 ,contr 
+77ce 204076f5 call bn_eq_zero 
+77cf 203a77f6 branch bn_invmod_0 ,blank 
+77d0 da20072e arg mem_tmp3 ,rega 
+77d1 da400746 arg mem_tmp0 ,regb 
+77d2 204077aa call bn_rshifteven 
+77d3 da200716 arg mem_tmp2 ,rega 
+77d4 da4006e6 arg mem_tmp1 ,regb 
+77d5 204077aa call bn_rshifteven 
+77d6 da20072e arg mem_tmp3 ,rega 
+77d7 da400716 arg mem_tmp2 ,regb 
+77d8 20407704 call bn_bigeq 
+77d9 202177e8 branch bn_invmod_1 ,positive 
+77da da200716 arg mem_tmp2 ,rega 
+77db da40072e arg mem_tmp3 ,regb 
+77dc 1a220a00 copy rega ,contw 
+77dd 2040771f call bn_sub 
+77de da200746 arg mem_tmp0 ,rega 
+77df da4006e6 arg mem_tmp1 ,regb 
+77e0 1a420a00 copy regb ,contw 
+77e1 20407711 call bn_add 
+77e2 ea208000 ifetch 1 ,rega 
+77e3 9a60a600 iadd regc ,regc 
+77e4 ea408000 ifetch 1 ,regb 
+77e5 9a60fe00 iadd regc ,pdata 
+77e6 e2408000 istore 1 ,regb 
+77e7 202077cd branch bn_invmod_2 
+
+bn_invmod_1:
+77e8 da20072e arg mem_tmp3 ,rega 
+77e9 da400716 arg mem_tmp2 ,regb 
+77ea 1a220a00 copy rega ,contw 
+77eb 2040771f call bn_sub 
+77ec da2006e6 arg mem_tmp1 ,rega 
+77ed da400746 arg mem_tmp0 ,regb 
+77ee 1a420a00 copy regb ,contw 
+77ef 20407711 call bn_add 
+77f0 ea208000 ifetch 1 ,rega 
+77f1 9a60a600 iadd regc ,regc 
+77f2 ea408000 ifetch 1 ,regb 
+77f3 9a60fe00 iadd regc ,pdata 
+77f4 e2408000 istore 1 ,regb 
+77f5 202077cd branch bn_invmod_2 
+
+bn_invmod_0:
+77f6 d8a00746 arg mem_tmp0 ,contw 
+77f7 20407ec5 call bn_zero 
+77f8 680086fe fetch 1 ,mem_tmp5 
+77f9 60008746 store 1 ,mem_tmp0 
+77fa 6000874e store 1 ,mem_tmp0a 
+77fb da200746 arg mem_tmp0 ,rega 
+77fc da4006e6 arg mem_tmp1 ,regb 
+77fd 1a420a00 copy regb ,contw 
+77fe 20407755 call bn_addmod 
+77ff da200886 arg mem_p ,rega 
+7800 da4006e6 arg mem_tmp1 ,regb 
+7801 19620a00 copy timeup ,contw 
+7802 20207758 branch bn_submod 
+
+ecdbl:
+7803 da2006a6 arg mem_cz ,rega 
+7804 d8a0075e arg mem_t2 ,contw 
+7805 204077a8 call bn_sqrmod 
+7806 da20075e arg mem_t2 ,rega 
+7807 d8a00776 arg mem_t3 ,contw 
+7808 204077a8 call bn_sqrmod 
+7809 da20089e arg mem_a ,rega 
+780a da400776 arg mem_t3 ,regb 
+780b d8a00776 arg mem_t3 ,contw 
+780c 20407786 call bn_mulmod 
+780d da200676 arg mem_cx ,rega 
+780e d8a0075e arg mem_t2 ,contw 
+780f 204077a8 call bn_sqrmod 
+7810 d8c0075e arg mem_t2 ,contr 
+7811 d8a0072e arg mem_t1 ,contw 
+7812 20407ebe call memcpy24 
+7813 da20072e arg mem_t1 ,rega 
+7814 20407748 call bn_lshiftmod 
+7815 da20075e arg mem_t2 ,rega 
+7816 da40072e arg mem_t1 ,regb 
+7817 d8a0075e arg mem_t2 ,contw 
+7818 20407755 call bn_addmod 
+7819 da20075e arg mem_t2 ,rega 
+781a da400776 arg mem_t3 ,regb 
+781b d8a0075e arg mem_t2 ,contw 
+781c 20407755 call bn_addmod 
+781d d8c00676 arg mem_cx ,contr 
+781e d8a0072e arg mem_t1 ,contw 
+781f 20407ebe call memcpy24 
+7820 da20068e arg mem_cy ,rega 
+7821 d8a00776 arg mem_t3 ,contw 
+7822 204077a8 call bn_sqrmod 
+7823 da20072e arg mem_t1 ,rega 
+7824 20407748 call bn_lshiftmod 
+7825 da20072e arg mem_t1 ,rega 
+7826 20407748 call bn_lshiftmod 
+7827 da20072e arg mem_t1 ,rega 
+7828 da400776 arg mem_t3 ,regb 
+7829 d8a0072e arg mem_t1 ,contw 
+782a 20407786 call bn_mulmod 
+782b da200776 arg mem_t3 ,rega 
+782c d8a00746 arg mem_t0 ,contw 
+782d 204077a8 call bn_sqrmod 
+782e da200746 arg mem_t0 ,rega 
+782f 20407748 call bn_lshiftmod 
+7830 da200746 arg mem_t0 ,rega 
+7831 20407748 call bn_lshiftmod 
+7832 da200746 arg mem_t0 ,rega 
+7833 20407748 call bn_lshiftmod 
+7834 d8c0068e arg mem_cy ,contr 
+7835 d8a00776 arg mem_t3 ,contw 
+7836 20407ebe call memcpy24 
+7837 da200776 arg mem_t3 ,rega 
+7838 20407748 call bn_lshiftmod 
+7839 da200776 arg mem_t3 ,rega 
+783a da4006a6 arg mem_cz ,regb 
+783b d8a006a6 arg mem_cz ,contw 
+783c 20407786 call bn_mulmod 
+783d da20075e arg mem_t2 ,rega 
+783e d8a00776 arg mem_t3 ,contw 
+783f 204077a8 call bn_sqrmod 
+7840 da200776 arg mem_t3 ,rega 
+7841 da40072e arg mem_t1 ,regb 
+7842 d8a00776 arg mem_t3 ,contw 
+7843 20407758 call bn_submod 
+7844 da200776 arg mem_t3 ,rega 
+7845 da40072e arg mem_t1 ,regb 
+7846 d8a00676 arg mem_cx ,contw 
+7847 20407758 call bn_submod 
+7848 da20072e arg mem_t1 ,rega 
+7849 da400676 arg mem_cx ,regb 
+784a d8a00776 arg mem_t3 ,contw 
+784b 20407758 call bn_submod 
+784c da200776 arg mem_t3 ,rega 
+784d da40075e arg mem_t2 ,regb 
+784e d8a00776 arg mem_t3 ,contw 
+784f 20407786 call bn_mulmod 
+7850 da200776 arg mem_t3 ,rega 
+7851 da400746 arg mem_t0 ,regb 
+7852 d8a0068e arg mem_cy ,contw 
+7853 20207758 branch bn_submod 
+
+ecadd:
+7854 da200616 arg mem_az ,rega 
+7855 d8a0078e arg mem_t7 ,contw 
+7856 204077a8 call bn_sqrmod 
+7857 da200676 arg mem_cx ,rega 
+7858 da40078e arg mem_t7 ,regb 
+7859 d8a00746 arg mem_t0 ,contw 
+785a 20407786 call bn_mulmod 
+785b da200616 arg mem_az ,rega 
+785c da40078e arg mem_t7 ,regb 
+785d d8a0078e arg mem_t7 ,contw 
+785e 20407786 call bn_mulmod 
+785f da20068e arg mem_cy ,rega 
+7860 da40078e arg mem_t7 ,regb 
+7861 d8a0072e arg mem_t1 ,contw 
+7862 20407786 call bn_mulmod 
+7863 da2006a6 arg mem_cz ,rega 
+7864 d8a0078e arg mem_t7 ,contw 
+7865 204077a8 call bn_sqrmod 
+7866 da2005e6 arg mem_ax ,rega 
+7867 da40078e arg mem_t7 ,regb 
+7868 d8a0075e arg mem_t2 ,contw 
+7869 20407786 call bn_mulmod 
+786a da2006a6 arg mem_cz ,rega 
+786b da40078e arg mem_t7 ,regb 
+786c d8a0078e arg mem_t7 ,contw 
+786d 20407786 call bn_mulmod 
+786e da2005fe arg mem_ay ,rega 
+786f da40078e arg mem_t7 ,regb 
+7870 d8a00776 arg mem_t3 ,contw 
+7871 20407786 call bn_mulmod 
+7872 da200746 arg mem_t0 ,rega 
+7873 da40075e arg mem_t2 ,regb 
+7874 d8a0078e arg mem_t7 ,contw 
+7875 20407758 call bn_submod 
+7876 da200746 arg mem_t0 ,rega 
+7877 da40075e arg mem_t2 ,regb 
+7878 d8a00746 arg mem_t0 ,contw 
+7879 20407755 call bn_addmod 
+787a da20072e arg mem_t1 ,rega 
+787b da400776 arg mem_t3 ,regb 
+787c d8a0075e arg mem_t2 ,contw 
+787d 20407758 call bn_submod 
+787e da20072e arg mem_t1 ,rega 
+787f da400776 arg mem_t3 ,regb 
+7880 d8a0072e arg mem_t1 ,contw 
+7881 20407755 call bn_addmod 
+7882 da20072e arg mem_t1 ,rega 
+7883 da40078e arg mem_t7 ,regb 
+7884 d8a0072e arg mem_t1 ,contw 
+7885 20407786 call bn_mulmod 
+7886 da2006a6 arg mem_cz ,rega 
+7887 da400616 arg mem_az ,regb 
+7888 d8a00776 arg mem_t3 ,contw 
+7889 20407786 call bn_mulmod 
+788a da200776 arg mem_t3 ,rega 
+788b da40078e arg mem_t7 ,regb 
+788c d8a006a6 arg mem_cz ,contw 
+788d 20407786 call bn_mulmod 
+788e da20078e arg mem_t7 ,rega 
+788f d8a0078e arg mem_t7 ,contw 
+7890 204077a8 call bn_sqrmod 
+7891 da20078e arg mem_t7 ,rega 
+7892 da400746 arg mem_t0 ,regb 
+7893 d8a00776 arg mem_t3 ,contw 
+7894 20407786 call bn_mulmod 
+7895 da20078e arg mem_t7 ,rega 
+7896 da40072e arg mem_t1 ,regb 
+7897 d8a0072e arg mem_t1 ,contw 
+7898 20407786 call bn_mulmod 
+7899 da20075e arg mem_t2 ,rega 
+789a d8a00676 arg mem_cx ,contw 
+789b 204077a8 call bn_sqrmod 
+789c da200676 arg mem_cx ,rega 
+789d da400776 arg mem_t3 ,regb 
+789e d8a00676 arg mem_cx ,contw 
+789f 20407758 call bn_submod 
+78a0 d8c00676 arg mem_cx ,contr 
+78a1 d8a0078e arg mem_t7 ,contw 
+78a2 20407ebe call memcpy24 
+78a3 da20078e arg mem_t7 ,rega 
+78a4 20407748 call bn_lshiftmod 
+78a5 da200776 arg mem_t3 ,rega 
+78a6 da40078e arg mem_t7 ,regb 
+78a7 d8a00776 arg mem_t3 ,contw 
+78a8 20407758 call bn_submod 
+78a9 da200776 arg mem_t3 ,rega 
+78aa da40075e arg mem_t2 ,regb 
+78ab d8a0075e arg mem_t2 ,contw 
+78ac 20407786 call bn_mulmod 
+78ad da20075e arg mem_t2 ,rega 
+78ae da40072e arg mem_t1 ,regb 
+78af d8a0068e arg mem_cy ,contw 
+78b0 20407758 call bn_submod 
+78b1 da20068e arg mem_cy ,rega 
+78b2 da400886 arg mem_p ,regb 
+78b3 d8a0068e arg mem_cy ,contw 
+78b4 18002600 force 0 ,regc 
+78b5 6800868e fetch 1 ,mem_cy 
+78b6 2feffe00 isolate1 0 ,pdata 
+78b7 2040f711 call bn_add ,true 
+78b8 1a626000 copy regc ,alarm 
+78b9 da20068e arg mem_cy ,rega 
+78ba 2040772d call bn_rshift6 
+78bb 680086a5 fetch 1 ,mem_cy5 
+78bc 2e0ffe00 isolate1 0 ,alarm 
+78bd 7920fe07 setflag true ,7 ,pdata 
+78be 600086a5 store 1 ,mem_cy5 
+78bf 20600000 rtn 
+
+eckp_0:
+78c0 680085e3 fetch 1 ,mem_ec_loopc 
+78c1 1fe0ffff increase -1 ,pdata 
+78c2 24610000 nrtn positive 
+78c3 600085e3 store 1 ,mem_ec_loopc 
+78c4 680085e2 fetch 1 ,mem_ec_infinite 
+78c5 205a7803 call ecdbl ,blank 
+78c6 680085e3 fetch 1 ,mem_ec_loopc 
+78c7 d8c006be arg mem_k ,contr 
+78c8 204076ec call bn_testbit 
+78c9 2020f8c0 branch eckp_0 ,true 
+78ca 680085e2 fetch 1 ,mem_ec_infinite 
+78cb 243a78ce nbranch eckp_1 ,blank 
+78cc 20407854 call ecadd 
+78cd 202078c0 branch eckp_0 
+
+eckp_1:
+78ce 7005e200 jam 0 ,mem_ec_infinite 
+78cf d8c005e6 arg mem_ax ,contr 
+78d0 d8a00676 arg mem_cx ,contw 
+78d1 204076f2 call ec_copy 
+78d2 202078c0 branch eckp_0 
+
+ecunmapz:
+78d3 da2006a6 arg mem_cz ,rega 
+78d4 d8a00776 arg mem_t3 ,contw 
+78d5 204077be call bn_invmod 
+78d6 da200776 arg mem_t3 ,rega 
+78d7 d8a0072e arg mem_t1 ,contw 
+78d8 204077a8 call bn_sqrmod 
+78d9 da200676 arg mem_cx ,rega 
+78da da40072e arg mem_t1 ,regb 
+78db d8a0062e arg mem_bx ,contw 
+78dc 20407786 call bn_mulmod 
+78dd da200776 arg mem_t3 ,rega 
+78de da40072e arg mem_t1 ,regb 
+78df d8a0075e arg mem_t2 ,contw 
+78e0 20407786 call bn_mulmod 
+78e1 da20068e arg mem_cy ,rega 
+78e2 da40075e arg mem_t2 ,regb 
+78e3 d8a00646 arg mem_by ,contw 
+78e4 20207786 branch bn_mulmod 
+
+sha_endian_swap2:
+78e5 e8c20000 ifetch 4 ,contr 
+78e6 18002204 force 4 ,rega 
+78e7 18a08a03 increase 3 ,contw 
+
+sha_endian_loop:
+78e8 e0a08000 istore 1 ,contw 
+78e9 1fecfe00 rshift8 pdata ,pdata 
+78ea 18a08bfe increase -2 ,contw 
+78eb 1a20a3ff increase -1 ,rega 
+78ec 2422f8e8 nbranch sha_endian_loop ,zero 
+78ed 18a08a05 increase 5 ,contw 
+78ee c20078e5 loop sha_endian_swap2 
+78ef 20600000 rtn 
+
+sha_getw:
+78f0 18ebfe00 lshift2 queue ,pdata 
+78f1 99608c00 iadd timeup ,contr 
+78f2 e8c20000 ifetch 4 ,contr 
+78f3 20600000 rtn 
+
+sha_r:
+78f4 18006010 force 16 ,alarm 
+78f5 d96005e6 arg memdat ,timeup 
+
+sha_r_loop:
+78f6 1e008ff9 add alarm ,-7 ,queue 
+78f7 204078f0 call sha_getw 
+78f8 98000400 iforce temp 
+78f9 1e008ff0 add alarm ,-16 ,queue 
+78fa 204078f0 call sha_getw 
+78fb 98408400 iadd temp ,temp 
+78fc 1e008ffe add alarm ,-2 ,queue 
+78fd 204078f0 call sha_getw 
+78fe 1fee7e01 shasx pdata ,1 ,pdata 
+78ff 98408400 iadd temp ,temp 
+7900 1e008ff1 add alarm ,-15 ,queue 
+7901 204078f0 call sha_getw 
+7902 1fee7e00 shasx pdata ,0 ,pdata 
+7903 98408400 iadd temp ,temp 
+7904 1e0bfe00 lshift2 alarm ,pdata 
+7905 99608a00 iadd timeup ,contw 
+7906 e0aa0000 istoret 4 ,contw 
+7907 1e00e001 increase 1 ,alarm 
+7908 2e01fe40 compare 64 ,alarm ,0xff 
+7909 2420f8f6 nbranch sha_r_loop ,true 
+790a 20600000 rtn 
+
+sha_init:
+790b d8c008fe arg memh0 ,contr 
+790c 18007007 force 7 ,regext_index 
+
+sha_init_0:
+790d e8c20000 ifetch 4 ,contr 
+790e 98005e00 iforce regext 
+790f 1f00f1ff increase -1 ,regext_index 
+7910 2021790d branch sha_init_0 ,positive 
+7911 20600000 rtn 
+
+sha:
+7912 4776403d bpatchx patch3d_4 ,mem_patch3d 
+7913 204078f4 call sha_r 
+7914 d8a006e6 arg memahbak ,contw 
+7915 18007000 force 0 ,regext_index 
+
+sha_0:
+7916 1de27e00 deposit regext 
+7917 e0a20000 istore 4 ,contw 
+7918 1f00f001 increase 1 ,regext_index 
+7919 2f01fe08 compare 8 ,regext_index ,0xff 
+791a 2420f916 nbranch sha_0 ,true 
+791b 204074b9 call enable_authrom 
+791c d9608700 arg memk ,timeup 
+791d de0005e6 arg memdat ,alarm 
+791e 18007240 force 64 ,loopcnt 
+
+sha_loop:
+791f ee0a0000 ifetcht 4 ,alarm 
+7920 e9620000 ifetch 4 ,timeup 
+7921 19609604 increase 4 ,timeup 
+7922 1e00e004 increase 4 ,alarm 
+7923 9840fe00 iadd temp ,pdata 
+7924 18007007 force 7 ,regext_index 
+7925 9de08400 iadd regext ,temp 
+7926 18007004 force 4 ,regext_index 
+7927 1dee7e03 shasx regext ,3 ,pdata 
+7928 98408400 iadd temp ,temp 
+7929 18007005 force 5 ,regext_index 
+792a 1de27e00 deposit regext 
+792b 18007006 force 6 ,regext_index 
+792c 9de2fe00 ixor regext ,pdata 
+792d 18007004 force 4 ,regext_index 
+792e 9de17e00 iand regext ,pdata 
+792f 18007006 force 6 ,regext_index 
+7930 9de2fe00 ixor regext ,pdata 
+7931 98408400 iadd temp ,temp 
+7932 18007007 force 7 ,regext_index 
+7933 18425e00 copy temp ,regext 
+7934 18007003 force 3 ,regext_index 
+7935 1de27e00 deposit regext 
+7936 9840de00 iadd temp ,regext 
+7937 18007000 force 0 ,regext_index 
+7938 1de27e00 deposit regext 
+7939 18007001 force 1 ,regext_index 
+793a 9de10400 iand regext ,temp 
+793b 9de1fe00 ior regext ,pdata 
+793c 18007002 force 2 ,regext_index 
+793d 9de17e00 iand regext ,pdata 
+793e 98418400 ior temp ,temp 
+793f 18007000 force 0 ,regext_index 
+7940 1dee7e02 shasx regext ,2 ,pdata 
+7941 9840fe00 iadd temp ,pdata 
+7942 18007007 force 7 ,regext_index 
+7943 9de0de00 iadd regext ,regext 
+7944 980efc00 regexrot 
+7945 c200791f loop sha_loop 
+7946 d8c006e6 arg memahbak ,contr 
+7947 18007000 force 0 ,regext_index 
+
+sha_1:
+7948 e8c20000 ifetch 4 ,contr 
+7949 9de0de00 iadd regext ,regext 
+794a 1f00f001 increase 1 ,regext_index 
+794b 2f01fe08 compare 8 ,regext_index ,0xff 
+794c 2420f948 nbranch sha_1 ,true 
+794d 202074bd branch disable_authrom 
+
+sha_result:
+794e d8a00a3e arg memresult ,contw 
+794f 18007007 force 7 ,regext_index 
+
+sha_regext_save:
+7950 1de27e00 deposit regext 
+7951 e0a20000 istore 4 ,contw 
+7952 1f00f1ff increase -1 ,regext_index 
+7953 20217950 branch sha_regext_save ,positive 
+7954 20600000 rtn 
+
+pad_xor:
+7955 d8a005e6 arg memdat ,contw 
+7956 18c08dfc increase -4 ,contr 
+7957 1f262210 sub loopcnt ,16 ,rega 
+
+pad_xor_0:
+7958 e8c20000 ifetch 4 ,contr 
+7959 9842fe00 ixor temp ,pdata 
+795a e0a20000 istore 4 ,contw 
+795b 18c08df8 increase -8 ,contr 
+795c c2007958 loop pad_xor_0 
+795d 1a227200 copy rega ,loopcnt 
+795e 18427e00 deposit temp 
+
+pad_xor_1:
+795f e0a20000 istore 4 ,contw 
+7960 c200795f loop pad_xor_1 
+7961 20600000 rtn 
+
+g_noninit_number_confirm:
+7962 20407967 call g_noninit0 
+7963 2040794e call sha_result 
+7964 2020798d branch g_common0 
+
+g_noninit:
+7965 20407967 call g_noninit0 
+7966 2020798d branch g_common0 
+
+g_noninit0:
+7967 d8c009de arg mem_sp_pubkey_remote_x_end ,contr 
+7968 d8a005e6 arg memdat ,contw 
+7969 18007206 force 6 ,loopcnt 
+796a 20407a71 call memcpy_dword_swap 
+796b d8c04642 arg mem_sp_pubkey_local_x_end ,contr 
+796c 18007206 force 6 ,loopcnt 
+796d 20407a71 call memcpy_dword_swap 
+796e d8c00a3e arg mem_sp_random_remote_end ,contr 
+796f 20407a70 call memcpy_dword_swap4 
+7970 2040790b call sha_init 
+7971 20407912 call sha 
+7972 d8c00a2e arg mem_sp_random_local_end ,contr 
+7973 d8a005e6 arg memdat ,contw 
+7974 20207984 branch g_common 
+
+g_init:
+7975 d8c04642 arg mem_sp_pubkey_local_x_end ,contr 
+7976 d8a005e6 arg memdat ,contw 
+7977 18007206 force 6 ,loopcnt 
+7978 20407a71 call memcpy_dword_swap 
+7979 d8c009de arg mem_sp_pubkey_remote_x_end ,contr 
+797a 18007206 force 6 ,loopcnt 
+797b 20407a71 call memcpy_dword_swap 
+797c d8c00a2e arg mem_sp_random_local_end ,contr 
+797d 20407a70 call memcpy_dword_swap4 
+797e 2040790b call sha_init 
+797f 20407912 call sha 
+7980 d8c00a3e arg mem_sp_random_remote_end ,contr 
+7981 d8a005e6 arg memdat ,contw 
+7982 20407984 call g_common 
+7983 2020798d branch g_common0 
+
+g_common:
+7984 20407a70 call memcpy_dword_swap4 
+7985 58800000 setarg 0x800000 
+7986 1fed7e00 lshift8 pdata ,pdata 
+7987 e0a20000 istore 4 ,contw 
+7988 18007205 force 5 ,loopcnt 
+7989 20407ec6 call memset0 
+798a 58000280 setarg 640 
+798b e0a20000 istore 4 ,contw 
+798c 20207912 branch sha 
+
+g_common0:
+798d 68020a3e fetch 4 ,memresult 
+798e da2003e8 arg 1000 ,rega 
+798f 9a26fc00 idiv rega 
+7990 20407f86 call wait_div_end 
+7991 18077e00 remainder pdata 
+7992 600209ba store 4 ,mem_gkey 
+7993 1807fe00 quotient pdata 
+7994 da2003e8 arg 1000 ,rega 
+7995 9a26fc00 idiv rega 
+7996 20407f86 call wait_div_end 
+7997 18077e00 remainder pdata 
+7998 da2003e8 arg 1000 ,rega 
+7999 9a2ffe00 imul32 rega ,pdata 
+799a 680a09ba fetcht 4 ,mem_gkey 
+799b 9840fe00 iadd temp ,pdata 
+799c 600209ba store 4 ,mem_gkey 
+799d 20600000 rtn 
+
+function_f1_no_key:
+799e 70466400 jam 0 ,mem_passkey_1bit 
+799f 202079a2 branch function_f1_common 
+
+function_f1:
+79a0 6800c662 fetch 1 ,mem_ssp_mode_flag 
+79a1 c081799e bne ssp_mode_passkey_entry_flag ,function_f1_no_key 
+
+function_f1_common:
+79a2 4776c03d bpatchx patch3d_5 ,mem_patch3d 
+79a3 58363636 setarg 0x363636 
+79a4 1fed0400 lshift8 pdata ,temp 
+79a5 18418436 or_into 0x36 ,temp 
+79a6 68010a7e fetch 2 ,mem_sp_prarm_stack 
+79a7 1fe20c00 copy pdata ,contr 
+79a8 18007204 force 4 ,loopcnt 
+79a9 20407955 call pad_xor 
+79aa 2040790b call sha_init 
+79ab 20407912 call sha 
+79ac 68010a80 fetch 2 ,mem_sp_prarm_stack + 2 
+79ad 1fe20c00 copy pdata ,contr 
+79ae d8a005e6 arg memdat ,contw 
+79af 18007206 force 6 ,loopcnt 
+79b0 20407a71 call memcpy_dword_swap 
+79b1 68010a82 fetch 2 ,mem_sp_prarm_stack + 4 
+79b2 1fe20c00 copy pdata ,contr 
+79b3 18007206 force 6 ,loopcnt 
+79b4 20407a71 call memcpy_dword_swap 
+79b5 58800000 setarg 0x800000 
+79b6 e0a18000 istore 3 ,contw 
+79b7 6800c664 fetch 1 ,mem_passkey_1bit 
+79b8 e0a08000 istore 1 ,contw 
+79b9 18007e00 force 0 ,pdata 
+79ba e0a40000 istore 8 ,contw 
+79bb 58000388 setarg 0x0388 
+79bc e0a20000 istore 4 ,contw 
+79bd 20407912 call sha 
+79be 2040794e call sha_result 
+79bf d8c00a3e arg memresult ,contr 
+79c0 d8a00706 arg memahsave ,contw 
+79c1 20407ebd call memcpy32 
+79c2 585c5c5c setarg 0x5c5c5c 
+79c3 1fed0400 lshift8 pdata ,temp 
+79c4 1841845c or_into 0x5c ,temp 
+79c5 68010a7e fetch 2 ,mem_sp_prarm_stack 
+79c6 1fe20c00 copy pdata ,contr 
+79c7 18007204 force 4 ,loopcnt 
+79c8 20407955 call pad_xor 
+79c9 2040790b call sha_init 
+79ca 20407912 call sha 
+79cb d8c00726 arg memahsave_end ,contr 
+79cc d8a005e6 arg memdat ,contw 
+79cd 18007208 force 8 ,loopcnt 
+79ce 20407a71 call memcpy_dword_swap 
+79cf 58800000 setarg 0x800000 
+79d0 1fed7e00 lshift8 pdata ,pdata 
+79d1 e0a20000 istore 4 ,contw 
+79d2 20407ec5 call bn_zero 
+79d3 58000300 setarg 0x0300 
+79d4 e0a20000 istore 4 ,contw 
+79d5 20407912 call sha 
+79d6 2020794e branch sha_result 
+
+function_f2:
+79d7 58363636 setarg 0x363636 
+79d8 1fed0400 lshift8 pdata ,temp 
+79d9 18418436 or_into 0x36 ,temp 
+79da d8c00a1e arg mem_sp_dhkey_end ,contr 
+79db 18007206 force 6 ,loopcnt 
+79dc 20407955 call pad_xor 
+79dd 2040790b call sha_init 
+79de 20407912 call sha 
+79df 68010a8a fetch 2 ,mem_sp_prarm_stack + 12 
+79e0 1fe20c00 copy pdata ,contr 
+79e1 d8a005e6 arg memdat ,contw 
+79e2 20407a70 call memcpy_dword_swap4 
+79e3 68010a8c fetch 2 ,mem_sp_prarm_stack + 14 
+79e4 1fe20c00 copy pdata ,contr 
+79e5 20407a70 call memcpy_dword_swap4 
+79e6 5862746c setarg 0x62746c 
+79e7 1fed7e00 lshift8 pdata ,pdata 
+79e8 1fe1fe6b or_into 0x6b ,pdata 
+79e9 e0a20000 istore 4 ,contw 
+79ea d8c00733 arg mem_addr_value_end ,contr 
+79eb 18007203 force 3 ,loopcnt 
+79ec 20407a71 call memcpy_dword_swap 
+79ed 58800000 setarg 0x800000 
+79ee 1fed7e00 lshift8 pdata ,pdata 
+79ef e0a20000 istore 4 ,contw 
+79f0 18007e00 force 0 ,pdata 
+79f1 e0a40000 istore 8 ,contw 
+79f2 58000380 setarg 0x0380 
+79f3 e0a20000 istore 4 ,contw 
+79f4 20407912 call sha 
+79f5 2040794e call sha_result 
+79f6 d8c00a3e arg memresult ,contr 
+79f7 d8a00706 arg memahsave ,contw 
+79f8 20407ebd call memcpy32 
+79f9 585c5c5c setarg 0x5c5c5c 
+79fa 1fed0400 lshift8 pdata ,temp 
+79fb 1841845c or_into 0x5c ,temp 
+79fc d8c00a1e arg mem_sp_dhkey_end ,contr 
+79fd 18007206 force 6 ,loopcnt 
+79fe 20407955 call pad_xor 
+79ff 2040790b call sha_init 
+7a00 20407912 call sha 
+7a01 d8c00726 arg memahsave_end ,contr 
+7a02 d8a005e6 arg memdat ,contw 
+7a03 18007208 force 8 ,loopcnt 
+7a04 20407a71 call memcpy_dword_swap 
+7a05 58800000 setarg 0x800000 
+7a06 1fed7e00 lshift8 pdata ,pdata 
+7a07 e0a20000 istore 4 ,contw 
+7a08 20407ec5 call bn_zero 
+7a09 58000300 setarg 0x0300 
+7a0a e0a20000 istore 4 ,contw 
+7a0b 20407912 call sha 
+7a0c 2020794e branch sha_result 
+
+function_f3a:
+7a0d 6800c662 fetch 1 ,mem_ssp_mode_flag 
+7a0e c0817a1e bne ssp_mode_passkey_entry_flag ,function_f3a_no_pin 
+
+function_f3a_common:
+7a0f 4777403d bpatchx patch3d_6 ,mem_patch3d 
+7a10 58363636 setarg 0x363636 
+7a11 1fed0400 lshift8 pdata ,temp 
+7a12 18418436 or_into 0x36 ,temp 
+7a13 d8c00a1e arg mem_sp_dhkey_end ,contr 
+7a14 18007206 force 6 ,loopcnt 
+7a15 20407955 call pad_xor 
+7a16 2040790b call sha_init 
+7a17 20407912 call sha 
+7a18 d8c00a3e arg mem_sp_random_remote_end ,contr 
+7a19 d8a005e6 arg memdat ,contw 
+7a1a 20407a70 call memcpy_dword_swap4 
+7a1b d8c00a2e arg mem_sp_random_local_end ,contr 
+7a1c 20407a70 call memcpy_dword_swap4 
+7a1d 20207a33 branch function_f3_common 
+
+function_f3a_no_pin:
+7a1e 58000000 setarg 0 
+7a1f 6002468a store 4 ,mem_pin 
+7a20 20207a0f branch function_f3a_common 
+
+function_f3b_no_pin:
+7a21 58000000 setarg 0 
+7a22 6002468a store 4 ,mem_pin 
+7a23 20207a26 branch function_f3b_common 
+
+function_f3b:
+7a24 6800c662 fetch 1 ,mem_ssp_mode_flag 
+7a25 c0817a21 bne ssp_mode_passkey_entry_flag ,function_f3b_no_pin 
+
+function_f3b_common:
+7a26 58363636 setarg 0x363636 
+7a27 1fed0400 lshift8 pdata ,temp 
+7a28 18418436 or_into 0x36 ,temp 
+7a29 d8c00a1e arg mem_sp_dhkey_end ,contr 
+7a2a 18007206 force 6 ,loopcnt 
+7a2b 20407955 call pad_xor 
+7a2c 2040790b call sha_init 
+7a2d 20407912 call sha 
+7a2e d8c00a2e arg mem_sp_random_local_end ,contr 
+7a2f d8a005e6 arg memdat ,contw 
+7a30 20407a70 call memcpy_dword_swap4 
+7a31 d8c00a3e arg mem_sp_random_remote_end ,contr 
+7a32 20407a70 call memcpy_dword_swap4 
+
+function_f3_common:
+7a33 58000000 setarg 0x0 
+7a34 e0a40000 istore 8 ,contw 
+7a35 e0a20000 istore 4 ,contw 
+7a36 6802468a fetch 4 ,mem_pin 
+7a37 e0a20000 istore 4 ,contw 
+7a38 18a20400 copy contw ,temp 
+7a39 70072680 jam 0x80 ,mem_addr_padding 
+7a3a 18420a00 copy temp ,contw 
+7a3b d8c00736 arg mem_addr_iocap_end ,contr 
+7a3c 20407a70 call memcpy_dword_swap4 
+7a3d 20407912 call sha 
+7a3e d8a005e6 arg memdat ,contw 
+7a3f 18007207 force 7 ,loopcnt 
+7a40 20407ec6 call memset0 
+7a41 e0a20000 istore 4 ,contw 
+7a42 580003f8 setarg 0x03F8 
+7a43 e0a20000 istore 4 ,contw 
+7a44 20407912 call sha 
+7a45 2040794e call sha_result 
+7a46 d8c00a3e arg memresult ,contr 
+7a47 d8a00706 arg memahsave ,contw 
+7a48 20407ebd call memcpy32 
+7a49 585c5c5c setarg 0x5c5c5c 
+7a4a 1fed0400 lshift8 pdata ,temp 
+7a4b 1841845c or_into 0x5c ,temp 
+7a4c d8c00a1e arg mem_sp_dhkey_end ,contr 
+7a4d 18007206 force 6 ,loopcnt 
+7a4e 20407955 call pad_xor 
+7a4f 2040790b call sha_init 
+7a50 20407912 call sha 
+7a51 d8c00726 arg memahsave_end ,contr 
+7a52 d8a005e6 arg memdat ,contw 
+7a53 18007208 force 8 ,loopcnt 
+7a54 20407a71 call memcpy_dword_swap 
+7a55 58800000 setarg 0x800000 
+7a56 1fed7e00 lshift8 pdata ,pdata 
+7a57 e0a20000 istore 4 ,contw 
+7a58 20407ec5 call bn_zero 
+7a59 58000300 setarg 0x0300 
+7a5a e0a20000 istore 4 ,contw 
+7a5b 20407912 call sha 
+7a5c 2020794e branch sha_result 
+
+eckp_calc_init:
+7a5d 7005e3c0 jam 192 ,mem_ec_loopc 
+
+eckp_calc_init_1:
+7a5e 680085e3 fetch 1 ,mem_ec_loopc 
+7a5f 207a0000 rtn blank 
+7a60 1fe0ffff increase -1 ,pdata 
+7a61 600085e3 store 1 ,mem_ec_loopc 
+7a62 d8c006be arg mem_k ,contr 
+7a63 204076ec call bn_testbit 
+7a64 2020fa5e branch eckp_calc_init_1 ,true 
+7a65 d8c005e6 arg mem_ax ,contr 
+7a66 d8a00676 arg mem_cx ,contw 
+7a67 202076f2 branch ec_copy 
+
+eckp_calc:
+7a68 20407803 call ecdbl 
+7a69 680085e3 fetch 1 ,mem_ec_loopc 
+7a6a 1fe0ffff increase -1 ,pdata 
+7a6b 600085e3 store 1 ,mem_ec_loopc 
+7a6c d8c006be arg mem_k ,contr 
+7a6d 204076ec call bn_testbit 
+7a6e 20608000 rtn true 
+7a6f 20207854 branch ecadd 
+
+memcpy_dword_swap4:
+7a70 18007204 force 4 ,loopcnt 
+
+memcpy_dword_swap:
+7a71 18c08dfc increase -4 ,contr 
+
+memcpy_dword_swap_loop:
+7a72 e8c20000 ifetch 4 ,contr 
+7a73 e0a20000 istore 4 ,contw 
+7a74 18c08df8 increase -8 ,contr 
+7a75 c2007a72 loop memcpy_dword_swap_loop 
+7a76 20600000 rtn 
+
+sp_initialize_256:
+7a77 4777c03d bpatchx patch3d_7 ,mem_patch3d 
+7a78 6800c4be fetch 1 ,mem_le_secure_connect_enable 
+7a79 203a5af0 branch le_secure_connection_disable ,blank 
+7a7a 20405aec call le_secure_connection_enable 
+7a7b 20407583 call sp_clear_flags 
+7a7c 20207a7d branch sp_pubkey_calc_256 
+
+sp_pubkey_calc_256:
+7a7d 6800c4c3 fetch 1 ,mem_le_sc_local_key_invalid 
+7a7e c1800000 rtnne sp_key_invalid 
+7a7f 6800c4c0 fetch 1 ,mem_le_sc_calc 
+7a80 c1800000 rtnne sp_calc_standby 
+7a81 d8a045b2 arg mem_le_private_key_256 ,contw 
+7a82 18000e0f force 15 ,queue 
+7a83 204076a2 call random_generator 
+7a84 180a7e00 random pdata 
+7a85 1fe37e00 rshift pdata ,pdata 
+7a86 e0a10000 istore 2 ,contw 
+7a87 d8a00766 arg mem_k_256 ,contw 
+7a88 d8c045b2 arg mem_le_private_key_256 ,contr 
+7a89 20407ebd call memcpy32 
+7a8a d8a00646 arg mem_ax_256 ,contw 
+7a8b d8c0095e arg mem_gx_256 ,contr 
+7a8c 20407eb3 call memcpy64 
+7a8d d8a00686 arg mem_az_256 ,contw 
+7a8e 20407ed0 call clear_mem_256 
+7a8f 70068601 jam 1 ,mem_az_256 
+7a90 20407ac7 call eckp_calc_init_256 
+7a91 7044c003 jam sp_calc_pubkey_256 ,mem_le_sc_calc 
+7a92 20600000 rtn 
+
+sp_pubkey_generated_256:
+7a93 d8a045d2 arg mem_le_pubkey_local_x_256 ,contw 
+7a94 d8c006a6 arg mem_bx_256 ,contr 
+7a95 20407eb3 call memcpy64 
+7a96 7044c303 jam sp_key_valid_256 ,mem_le_sc_local_key_invalid 
+7a97 7044c000 jam sp_calc_standby ,mem_le_sc_calc 
+7a98 20600000 rtn 
+
+sp_dhkey_calc_256:
+7a99 680089b9 fetch 1 ,mem_sp_dhkey_invalid 
+7a9a c1800000 rtnne sp_key_invalid 
+7a9b 6800c4c0 fetch 1 ,mem_le_sc_calc 
+7a9c c1800000 rtnne sp_calc_standby 
+7a9d d8a00766 arg mem_k_256 ,contw 
+7a9e d8c045b2 arg mem_le_private_key_256 ,contr 
+7a9f 20407ebd call memcpy32 
+7aa0 d8a00646 arg mem_ax_256 ,contw 
+7aa1 d8c009be arg mem_le_pubkey_remote_x_256 ,contr 
+7aa2 20407eb3 call memcpy64 
+7aa3 d8a00686 arg mem_az_256 ,contw 
+7aa4 20407ed0 call clear_mem_256 
+7aa5 70068601 jam 1 ,mem_az_256 
+7aa6 20407ac7 call eckp_calc_init_256 
+7aa7 7044c004 jam sp_calc_dhkey_256 ,mem_le_sc_calc 
+7aa8 20600000 rtn 
+
+sp_dhkey_generated_256:
+7aa9 d8a009fe arg mem_le_dhkey_256 ,contw 
+7aaa d8c006a6 arg mem_bx_256 ,contr 
+7aab 20407ebd call memcpy32 
+7aac 7009b903 jam sp_key_valid_256 ,mem_sp_dhkey_invalid 
+7aad 7044c000 jam sp_calc_standby ,mem_le_sc_calc 
+7aae 20600000 rtn 
+
+sp_calc_sequence_256:
+7aaf 6800c4be fetch 1 ,mem_le_secure_connect_enable 
+7ab0 207a0000 rtn blank 
+7ab1 6800c4c0 fetch 1 ,mem_le_sc_calc 
+7ab2 207a0000 rtn blank 
+7ab3 1fe0fe80 increase 0x80 ,pdata 
+7ab4 6000c4c0 store 1 ,mem_le_sc_calc 
+7ab5 c3838000 rtnbit1 7 
+7ab6 680105e3 fetch 2 ,mem_ec_loopc 
+7ab7 203a7ab9 branch sp_calc_sequence_done_256 ,blank 
+7ab8 20207abf branch eckp_calc_256 
+
+sp_calc_sequence_done_256:
+7ab9 4778403e bpatchx patch3e_0 ,mem_patch3e 
+7aba 20407ad4 call ecunmapz_256 
+7abb 6800c4c0 fetch 1 ,mem_le_sc_calc 
+7abc c001fa93 beq sp_calc_pubkey_256 ,sp_pubkey_generated_256 
+7abd c0027aa9 beq sp_calc_dhkey_256 ,sp_dhkey_generated_256 
+7abe 20600000 rtn 
+
+eckp_calc_256:
+7abf 20407ae6 call ecdbl_256 
+7ac0 680105e3 fetch 2 ,mem_ec_loopc 
+7ac1 1fe0ffff increase -1 ,pdata 
+7ac2 600105e3 store 2 ,mem_ec_loopc 
+7ac3 d8c00766 arg mem_k_256 ,contr 
+7ac4 204076ec call bn_testbit 
+7ac5 20608000 rtn true 
+7ac6 20207b37 branch ecadd_256 
+
+eckp_calc_init_256:
+7ac7 4778c03e bpatchx patch3e_1 ,mem_patch3e 
+7ac8 58000100 setarg 256 ,pdata 
+7ac9 600105e3 store 2 ,mem_ec_loopc 
+
+eckp_calc_init_256_1:
+7aca 680105e3 fetch 2 ,mem_ec_loopc 
+7acb 207a0000 rtn blank 
+7acc 1fe0ffff increase -1 ,pdata 
+7acd 600105e3 store 2 ,mem_ec_loopc 
+7ace d8c00766 arg mem_k_256 ,contr 
+7acf 204076ec call bn_testbit 
+7ad0 2020faca branch eckp_calc_init_256_1 ,true 
+7ad1 d8c00646 arg mem_ax_256 ,contr 
+7ad2 d8a00706 arg mem_cx_256 ,contw 
+7ad3 20207eb2 branch memcpy96 
+
+ecunmapz_256:
+7ad4 da200746 arg mem_cz_256 ,rega 
+7ad5 d8a00846 arg mem_t3_256 ,contw 
+7ad6 20407ba3 call bn_invmod_256 
+7ad7 da200846 arg mem_t3_256 ,rega 
+7ad8 d8a007e6 arg mem_t1_256 ,contw 
+7ad9 20407c79 call bn_sqrmod_256 
+7ada da200706 arg mem_cx_256 ,rega 
+7adb da4007e6 arg mem_t1_256 ,regb 
+7adc d8a006a6 arg mem_bx_256 ,contw 
+7add 20407be1 call bn_mulmod_256 
+7ade da200846 arg mem_t3_256 ,rega 
+7adf da4007e6 arg mem_t1_256 ,regb 
+7ae0 d8a00826 arg mem_t2_256 ,contw 
+7ae1 20407be1 call bn_mulmod_256 
+7ae2 da200726 arg mem_cy_256 ,rega 
+7ae3 da400826 arg mem_t2_256 ,regb 
+7ae4 d8a006c6 arg mem_by_256 ,contw 
+7ae5 20207be1 branch bn_mulmod_256 
+
+ecdbl_256:
+7ae6 da200746 arg mem_cz_256 ,rega 
+7ae7 d8a00826 arg mem_t2_256 ,contw 
+7ae8 20407c79 call bn_sqrmod_256 
+7ae9 da200826 arg mem_t2_256 ,rega 
+7aea d8a00846 arg mem_t3_256 ,contw 
+7aeb 20407c79 call bn_sqrmod_256 
+7aec da20093e arg mem_a_256 ,rega 
+7aed da400846 arg mem_t3_256 ,regb 
+7aee d8a00846 arg mem_t3_256 ,contw 
+7aef 20407be1 call bn_mulmod_256 
+7af0 da200706 arg mem_cx_256 ,rega 
+7af1 d8a00826 arg mem_t2_256 ,contw 
+7af2 20407c79 call bn_sqrmod_256 
+7af3 d8c00826 arg mem_t2_256 ,contr 
+7af4 d8a007e6 arg mem_t1_256 ,contw 
+7af5 20407ebd call memcpy32 
+7af6 da2007e6 arg mem_t1_256 ,rega 
+7af7 20407c80 call bn_lshiftmod_256 
+7af8 da200826 arg mem_t2_256 ,rega 
+7af9 da4007e6 arg mem_t1_256 ,regb 
+7afa d8a00826 arg mem_t2_256 ,contw 
+7afb 20407c7d call bn_addmod_256 
+7afc da200826 arg mem_t2_256 ,rega 
+7afd da400846 arg mem_t3_256 ,regb 
+7afe d8a00826 arg mem_t2_256 ,contw 
+7aff 20407c7d call bn_addmod_256 
+7b00 d8c00706 arg mem_cx_256 ,contr 
+7b01 d8a007e6 arg mem_t1_256 ,contw 
+7b02 20407ebd call memcpy32 
+7b03 da200726 arg mem_cy_256 ,rega 
+7b04 d8a00846 arg mem_t3_256 ,contw 
+7b05 20407c79 call bn_sqrmod_256 
+7b06 da2007e6 arg mem_t1_256 ,rega 
+7b07 20407c80 call bn_lshiftmod_256 
+7b08 da2007e6 arg mem_t1_256 ,rega 
+7b09 20407c80 call bn_lshiftmod_256 
+7b0a da2007e6 arg mem_t1_256 ,rega 
+7b0b da400846 arg mem_t3_256 ,regb 
+7b0c d8a007e6 arg mem_t1_256 ,contw 
+7b0d 20407be1 call bn_mulmod_256 
+7b0e da200846 arg mem_t3_256 ,rega 
+7b0f d8a00806 arg mem_t0_256 ,contw 
+7b10 20407c79 call bn_sqrmod_256 
+7b11 da200806 arg mem_t0_256 ,rega 
+7b12 20407c80 call bn_lshiftmod_256 
+7b13 da200806 arg mem_t0_256 ,rega 
+7b14 20407c80 call bn_lshiftmod_256 
+7b15 da200806 arg mem_t0_256 ,rega 
+7b16 20407c80 call bn_lshiftmod_256 
+7b17 d8c00726 arg mem_cy_256 ,contr 
+7b18 d8a00846 arg mem_t3_256 ,contw 
+7b19 20407ebd call memcpy32 
+7b1a da200846 arg mem_t3_256 ,rega 
+7b1b 20407c80 call bn_lshiftmod_256 
+7b1c da200846 arg mem_t3_256 ,rega 
+7b1d da400746 arg mem_cz_256 ,regb 
+7b1e d8a00746 arg mem_cz_256 ,contw 
+7b1f 20407be1 call bn_mulmod_256 
+7b20 da200826 arg mem_t2_256 ,rega 
+7b21 d8a00846 arg mem_t3_256 ,contw 
+7b22 20407c79 call bn_sqrmod_256 
+7b23 da200846 arg mem_t3_256 ,rega 
+7b24 da4007e6 arg mem_t1_256 ,regb 
+7b25 d8a00846 arg mem_t3_256 ,contw 
+7b26 20407c96 call bn_submod_256 
+7b27 da200846 arg mem_t3_256 ,rega 
+7b28 da4007e6 arg mem_t1_256 ,regb 
+7b29 d8a00706 arg mem_cx_256 ,contw 
+7b2a 20407c96 call bn_submod_256 
+7b2b da2007e6 arg mem_t1_256 ,rega 
+7b2c da400706 arg mem_cx_256 ,regb 
+7b2d d8a00846 arg mem_t3_256 ,contw 
+7b2e 20407c96 call bn_submod_256 
+7b2f da200846 arg mem_t3_256 ,rega 
+7b30 da400826 arg mem_t2_256 ,regb 
+7b31 d8a00846 arg mem_t3_256 ,contw 
+7b32 20407be1 call bn_mulmod_256 
+7b33 da200846 arg mem_t3_256 ,rega 
+7b34 da400806 arg mem_t0_256 ,regb 
+7b35 d8a00726 arg mem_cy_256 ,contw 
+7b36 20207c96 branch bn_submod_256 
+
+ecadd_256:
+7b37 da200686 arg mem_az_256 ,rega 
+7b38 d8a00866 arg mem_t7_256 ,contw 
+7b39 20407c79 call bn_sqrmod_256 
+7b3a da200706 arg mem_cx_256 ,rega 
+7b3b da400866 arg mem_t7_256 ,regb 
+7b3c d8a00806 arg mem_t0_256 ,contw 
+7b3d 20407be1 call bn_mulmod_256 
+7b3e da200686 arg mem_az_256 ,rega 
+7b3f da400866 arg mem_t7_256 ,regb 
+7b40 d8a00866 arg mem_t7_256 ,contw 
+7b41 20407be1 call bn_mulmod_256 
+7b42 da200726 arg mem_cy_256 ,rega 
+7b43 da400866 arg mem_t7_256 ,regb 
+7b44 d8a007e6 arg mem_t1_256 ,contw 
+7b45 20407be1 call bn_mulmod_256 
+7b46 da200746 arg mem_cz_256 ,rega 
+7b47 d8a00866 arg mem_t7_256 ,contw 
+7b48 20407c79 call bn_sqrmod_256 
+7b49 da200646 arg mem_ax_256 ,rega 
+7b4a da400866 arg mem_t7_256 ,regb 
+7b4b d8a00826 arg mem_t2_256 ,contw 
+7b4c 20407be1 call bn_mulmod_256 
+7b4d da200746 arg mem_cz_256 ,rega 
+7b4e da400866 arg mem_t7_256 ,regb 
+7b4f d8a00866 arg mem_t7_256 ,contw 
+7b50 20407be1 call bn_mulmod_256 
+7b51 da200666 arg mem_ay_256 ,rega 
+7b52 da400866 arg mem_t7_256 ,regb 
+7b53 d8a00846 arg mem_t3_256 ,contw 
+7b54 20407be1 call bn_mulmod_256 
+7b55 da400806 arg mem_t0_256 ,regb 
+7b56 da200826 arg mem_t2_256 ,rega 
+7b57 d8a00866 arg mem_t7_256 ,contw 
+7b58 20407c96 call bn_submod_256 
+7b59 da200806 arg mem_t0_256 ,rega 
+7b5a da400826 arg mem_t2_256 ,regb 
+7b5b d8a00806 arg mem_t0_256 ,contw 
+7b5c 20407c7d call bn_addmod_256 
+7b5d da4007e6 arg mem_t1_256 ,regb 
+7b5e da200846 arg mem_t3_256 ,rega 
+7b5f d8a00826 arg mem_t2_256 ,contw 
+7b60 20407c96 call bn_submod_256 
+7b61 da2007e6 arg mem_t1_256 ,rega 
+7b62 da400846 arg mem_t3_256 ,regb 
+7b63 d8a007e6 arg mem_t1_256 ,contw 
+7b64 20407c7d call bn_addmod_256 
+7b65 da2007e6 arg mem_t1_256 ,rega 
+7b66 da400866 arg mem_t7_256 ,regb 
+7b67 d8a007e6 arg mem_t1_256 ,contw 
+7b68 20407be1 call bn_mulmod_256 
+7b69 da200746 arg mem_cz_256 ,rega 
+7b6a da400686 arg mem_az_256 ,regb 
+7b6b d8a00846 arg mem_t3_256 ,contw 
+7b6c 20407be1 call bn_mulmod_256 
+7b6d da200846 arg mem_t3_256 ,rega 
+7b6e da400866 arg mem_t7_256 ,regb 
+7b6f d8a00746 arg mem_cz_256 ,contw 
+7b70 20407be1 call bn_mulmod_256 
+7b71 da200866 arg mem_t7_256 ,rega 
+7b72 d8a00866 arg mem_t7_256 ,contw 
+7b73 20407c79 call bn_sqrmod_256 
+7b74 da200866 arg mem_t7_256 ,rega 
+7b75 da400806 arg mem_t0_256 ,regb 
+7b76 d8a00846 arg mem_t3_256 ,contw 
+7b77 20407be1 call bn_mulmod_256 
+7b78 da200866 arg mem_t7_256 ,rega 
+7b79 da4007e6 arg mem_t1_256 ,regb 
+7b7a d8a007e6 arg mem_t1_256 ,contw 
+7b7b 20407be1 call bn_mulmod_256 
+7b7c da200826 arg mem_t2_256 ,rega 
+7b7d d8a00706 arg mem_cx_256 ,contw 
+7b7e 20407c79 call bn_sqrmod_256 
+7b7f da200706 arg mem_cx_256 ,rega 
+7b80 da400846 arg mem_t3_256 ,regb 
+7b81 d8a00706 arg mem_cx_256 ,contw 
+7b82 20407c96 call bn_submod_256 
+7b83 d8c00706 arg mem_cx_256 ,contr 
+7b84 d8a00866 arg mem_t7_256 ,contw 
+7b85 20407ebd call memcpy32 
+7b86 da200866 arg mem_t7_256 ,rega 
+7b87 20407c80 call bn_lshiftmod_256 
+7b88 da200846 arg mem_t3_256 ,rega 
+7b89 da400866 arg mem_t7_256 ,regb 
+7b8a d8a00846 arg mem_t3_256 ,contw 
+7b8b 20407c96 call bn_submod_256 
+7b8c da200846 arg mem_t3_256 ,rega 
+7b8d da400826 arg mem_t2_256 ,regb 
+7b8e d8a00826 arg mem_t2_256 ,contw 
+7b8f 20407be1 call bn_mulmod_256 
+7b90 da200826 arg mem_t2_256 ,rega 
+7b91 da4007e6 arg mem_t1_256 ,regb 
+7b92 d8a00726 arg mem_cy_256 ,contw 
+7b93 20407c96 call bn_submod_256 
+7b94 da200726 arg mem_cy_256 ,rega 
+7b95 da40091e arg mem_p_256 ,regb 
+7b96 d8a00726 arg mem_cy_256 ,contw 
+7b97 18002600 force 0 ,regc 
+7b98 68008726 fetch 1 ,mem_cy_256 
+7b99 2feffe00 isolate1 0 ,pdata 
+7b9a 2040fc7b call bn_add_256 ,true 
+7b9b 1a626000 copy regc ,alarm 
+7b9c da200726 arg mem_cy_256 ,rega 
+7b9d 20407cab call bn_rshift_256 
+7b9e 68008745 fetch 1 ,mem_cy5_256 
+7b9f 2e0ffe00 isolate1 0 ,alarm 
+7ba0 7920fe07 setflag true ,7 ,pdata 
+7ba1 60008745 store 1 ,mem_cy5_256 
+7ba2 20600000 rtn 
+
+bn_invmod_256:
+7ba3 18a21600 copy contw ,timeup 
+7ba4 d8a00806 arg mem_tmp0_256 ,contw 
+7ba5 20407ed0 call clear_mem_256 
+7ba6 18007e00 force 0 ,pdata 
+7ba7 60020826 store 4 ,mem_t2_256 
+7ba8 70080601 jam 1 ,mem_tmp0_256 
+7ba9 d8a00786 arg mem_tmp1_256 ,contw 
+7baa 20407ed2 call clear_mem_512 
+7bab d8c0091e arg mem_p_256 ,contr 
+7bac d8a007c6 arg mem_tmp2_256 ,contw 
+7bad 20407ebd call memcpy32 
+7bae 1a220c00 copy rega ,contr 
+7baf d8a007e6 arg mem_tmp3_256 ,contw 
+7bb0 20407ebd call memcpy32 
+
+bn_invmod_256_2:
+7bb1 d8c007e6 arg mem_tmp3_256 ,contr 
+7bb2 20407cb5 call bn_eq_zero_256 
+7bb3 203a7bda branch bn_invmod_256_0 ,blank 
+7bb4 da2007e6 arg mem_tmp3_256 ,rega 
+7bb5 da400806 arg mem_tmp0_256 ,regb 
+7bb6 20407cb8 call bn_rshifteven_256 
+7bb7 da2007c6 arg mem_tmp2_256 ,rega 
+7bb8 da400786 arg mem_tmp1_256 ,regb 
+7bb9 20407cb8 call bn_rshifteven_256 
+7bba da2007e6 arg mem_tmp3_256 ,rega 
+7bbb da4007c6 arg mem_tmp2_256 ,regb 
+7bbc 20407cb1 call bn_bigeq_256 
+7bbd 20217bcc branch bn_invmod_256_1 ,positive 
+7bbe da2007c6 arg mem_tmp2_256 ,rega 
+7bbf da4007e6 arg mem_tmp3_256 ,regb 
+7bc0 1a220a00 copy rega ,contw 
+7bc1 20407ca9 call bn_sub_256 
+7bc2 da200806 arg mem_tmp0_256 ,rega 
+7bc3 da400786 arg mem_tmp1_256 ,regb 
+7bc4 1a420a00 copy regb ,contw 
+7bc5 20407c7b call bn_add_256 
+7bc6 ea208000 ifetch 1 ,rega 
+7bc7 9a60a600 iadd regc ,regc 
+7bc8 ea408000 ifetch 1 ,regb 
+7bc9 9a60fe00 iadd regc ,pdata 
+7bca e2408000 istore 1 ,regb 
+7bcb 20207bb1 branch bn_invmod_256_2 
+
+bn_invmod_256_1:
+7bcc da2007e6 arg mem_tmp3_256 ,rega 
+7bcd da4007c6 arg mem_tmp2_256 ,regb 
+7bce 1a220a00 copy rega ,contw 
+7bcf 20407ca9 call bn_sub_256 
+7bd0 da200786 arg mem_tmp1_256 ,rega 
+7bd1 da400806 arg mem_tmp0_256 ,regb 
+7bd2 1a420a00 copy regb ,contw 
+7bd3 20407c7b call bn_add_256 
+7bd4 ea208000 ifetch 1 ,rega 
+7bd5 9a60a600 iadd regc ,regc 
+7bd6 ea408000 ifetch 1 ,regb 
+7bd7 9a60fe00 iadd regc ,pdata 
+7bd8 e2408000 istore 1 ,regb 
+7bd9 20207bb1 branch bn_invmod_256_2 
+
+bn_invmod_256_0:
+7bda da200786 arg mem_tmp1_256 ,rega 
+7bdb 19620a00 copy timeup ,contw 
+7bdc 20407c0a call bn_p256mod 
+7bdd da20091e arg mem_p_256 ,rega 
+7bde 19622400 copy timeup ,regb 
+7bdf 19620a00 copy timeup ,contw 
+7be0 20207c96 branch bn_submod_256 
+
+bn_mulmod_256:
+7be1 18a21600 copy contw ,timeup 
+7be2 18007000 force 0 ,regext_index 
+7be3 d8a00786 arg mem_tmp1_256 ,contw 
+7be4 20407ed2 call clear_mem_512 
+7be5 d8a00ad2 arg mem_regext ,contw 
+7be6 20407ed2 call clear_mem_512 
+7be7 1a220c00 copy rega ,contr 
+7be8 700ad200 jam 0 ,mem_regext 
+7be9 58000000 setarg 0 
+7bea 20407c73 call bn_load_mem 
+7beb 1a420c00 copy regb ,contr 
+7bec 20407c77 call bn_load_256 
+7bed 18000e00 force 0 ,queue 
+7bee d8a00786 arg mem_tmp1_256 ,contw 
+
+bn_mulmod_256_1:
+7bef d8400ad2 arg mem_regext ,temp 
+7bf0 18e22400 copy queue ,regb 
+7bf1 1a4bfe00 lshift2 regb ,pdata 
+7bf2 9840a400 iadd temp ,regb 
+7bf3 18000400 force 0 ,temp 
+7bf4 18002600 force 0 ,regc 
+
+bn_mulmod_256_0:
+7bf5 e8a20000 ifetch 4 ,contw 
+7bf6 98002200 iforce rega 
+7bf7 ea420000 ifetch 4 ,regb 
+7bf8 1a627000 copy regc ,regext_index 
+7bf9 9deffe00 imul32 regext ,pdata 
+7bfa 9a20fe00 iadd rega ,pdata 
+7bfb 9840fe00 iadd temp ,pdata 
+7bfc e0a20000 istore 4 ,contw 
+7bfd 1fef0400 rshift32 pdata ,temp 
+7bfe 1a60a601 increase 1 ,regc 
+7bff 2a61fe08 compare 8 ,regc ,0xff 
+7c00 2420fbf5 nbranch bn_mulmod_256_0 ,true 
+7c01 18427e00 deposit temp 
+7c02 e0a20000 istore 4 ,contw 
+7c03 18a08be0 increase -32 ,contw 
+7c04 18e08e01 increase 1 ,queue 
+7c05 28e1fe08 compare 8 ,queue ,0xff 
+7c06 2420fbef nbranch bn_mulmod_256_1 ,true 
+7c07 da200786 arg mem_tmp1_256 ,rega 
+7c08 19620a00 copy timeup ,contw 
+7c09 20207c0a branch bn_p256mod 
+
+bn_p256mod:
+7c0a 4779403e bpatchx patch3e_2 ,mem_patch3e 
+7c0b 18a21600 copy contw ,timeup 
+7c0c 1a226000 copy rega ,alarm 
+7c0d da4007c6 arg mem_tmp2_256 ,regb 
+7c0e 1a420a00 copy regb ,contw 
+7c0f 20407ecd call memset0_4 
+7c10 e0a40000 istore 8 ,contw 
+7c11 1a208c2c add rega ,44 ,contr 
+7c12 20407eb9 call memcpy8 
+7c13 20407eb5 call memcpy12 
+7c14 1a422200 copy regb ,rega 
+7c15 20407c80 call bn_lshiftmod_256 
+7c16 da4007c6 arg mem_tmp2_256 ,regb 
+7c17 1e022200 copy alarm ,rega 
+7c18 19620a00 copy timeup ,contw 
+7c19 20407c7d call bn_addmod_256 
+7c1a da4007c6 arg mem_tmp2_256 ,regb 
+7c1b 1a420a00 copy regb ,contw 
+7c1c 20407ecd call memset0_4 
+7c1d e0a40000 istore 8 ,contw 
+7c1e 1e008c30 add alarm ,48 ,contr 
+7c1f 20407ebf call memcpy16 
+7c20 20407ecd call memset0_4 
+7c21 1a422200 copy regb ,rega 
+7c22 20407c80 call bn_lshiftmod_256 
+7c23 da4007c6 arg mem_tmp2_256 ,regb 
+7c24 19622200 copy timeup ,rega 
+7c25 1a220a00 copy rega ,contw 
+7c26 20407c7d call bn_addmod_256 
+7c27 da4007c6 arg mem_tmp2_256 ,regb 
+7c28 1a420a00 copy regb ,contw 
+7c29 1e008c20 add alarm ,32 ,contr 
+7c2a 20407eb5 call memcpy12 
+7c2b 20407ecd call memset0_4 
+7c2c e0a40000 istore 8 ,contw 
+7c2d 1e008c38 add alarm ,56 ,contr 
+7c2e 20407eb9 call memcpy8 
+7c2f 19622200 copy timeup ,rega 
+7c30 1a220a00 copy rega ,contw 
+7c31 20407c7d call bn_addmod_256 
+7c32 da4007c6 arg mem_tmp2_256 ,regb 
+7c33 1a420a00 copy regb ,contw 
+7c34 1e008c24 add alarm ,36 ,contr 
+7c35 20407eb5 call memcpy12 
+7c36 1e008c34 add alarm ,52 ,contr 
+7c37 20407eb5 call memcpy12 
+7c38 1e008c34 add alarm ,52 ,contr 
+7c39 20407eb6 call memcpy4 
+7c3a 1e008c20 add alarm ,32 ,contr 
+7c3b 20407eb6 call memcpy4 
+7c3c 19622200 copy timeup ,rega 
+7c3d 1a220a00 copy rega ,contw 
+7c3e 20407c7d call bn_addmod_256 
+7c3f da4007c6 arg mem_tmp2_256 ,regb 
+7c40 1a420a00 copy regb ,contw 
+7c41 1e008c2c add alarm ,44 ,contr 
+7c42 20407eb5 call memcpy12 
+7c43 20407ecd call memset0_4 
+7c44 e0a40000 istore 8 ,contw 
+7c45 1e008c20 add alarm ,32 ,contr 
+7c46 20407eb6 call memcpy4 
+7c47 1e008c28 add alarm ,40 ,contr 
+7c48 20407eb6 call memcpy4 
+7c49 19622200 copy timeup ,rega 
+7c4a 1a220a00 copy rega ,contw 
+7c4b 20407c96 call bn_submod_256 
+7c4c da4007c6 arg mem_tmp2_256 ,regb 
+7c4d 1a420a00 copy regb ,contw 
+7c4e 1e008c30 add alarm ,48 ,contr 
+7c4f 20407eb9 call memcpy8 
+7c50 20407eb9 call memcpy8 
+7c51 18007e00 force 0 ,pdata 
+7c52 e0a40000 istore 8 ,contw 
+7c53 1e008c24 add alarm ,36 ,contr 
+7c54 20407eb6 call memcpy4 
+7c55 1e008c2c add alarm ,44 ,contr 
+7c56 20407eb6 call memcpy4 
+7c57 19622200 copy timeup ,rega 
+7c58 1a220a00 copy rega ,contw 
+7c59 20407c96 call bn_submod_256 
+7c5a da4007c6 arg mem_tmp2_256 ,regb 
+7c5b 1a420a00 copy regb ,contw 
+7c5c 1e008c34 add alarm ,52 ,contr 
+7c5d 20407eb5 call memcpy12 
+7c5e 1e008c20 add alarm ,32 ,contr 
+7c5f 20407eb5 call memcpy12 
+7c60 20407ecd call memset0_4 
+7c61 1e008c30 add alarm ,48 ,contr 
+7c62 20407eb6 call memcpy4 
+7c63 19622200 copy timeup ,rega 
+7c64 1a220a00 copy rega ,contw 
+7c65 20407c96 call bn_submod_256 
+7c66 da4007c6 arg mem_tmp2_256 ,regb 
+7c67 1a420a00 copy regb ,contw 
+7c68 1e008c38 add alarm ,56 ,contr 
+7c69 20407eb9 call memcpy8 
+7c6a 20407ecd call memset0_4 
+7c6b 1e008c24 add alarm ,36 ,contr 
+7c6c 20407eb5 call memcpy12 
+7c6d 20407ecd call memset0_4 
+7c6e 1e008c34 add alarm ,52 ,contr 
+7c6f 20407eb6 call memcpy4 
+7c70 19622200 copy timeup ,rega 
+7c71 1a220a00 copy rega ,contw 
+7c72 20207c96 branch bn_submod_256 
+
+bn_load_mem:
+7c73 18007220 force 32 ,loopcnt 
+7c74 d8a00ad2 arg mem_regext ,contw 
+7c75 98a08a00 iadd contw ,contw 
+7c76 20207f01 branch memcpy 
+
+bn_load_256:
+7c77 18007208 force 8 ,loopcnt 
+7c78 20207781 branch bn_load_0 
+
+bn_sqrmod_256:
+7c79 1a222400 copy rega ,regb 
+7c7a 20207be1 branch bn_mulmod_256 
+
+bn_add_256:
+7c7b 18007208 force 8 ,loopcnt 
+7c7c 20207712 branch bn_add + 1 
+
+bn_addmod_256:
+7c7d 20407c7b call bn_add_256 
+7c7e 18a22200 copy contw ,rega 
+7c7f 20207c81 branch bn_lshiftmod_ismod_256 
+
+bn_lshiftmod_256:
+7c80 20407cae call bn_lshift_256 
+
+bn_lshiftmod_ismod_256:
+7c81 2a6ffe00 isolate1 0 ,regc 
+7c82 2020fc8a branch bn_lshiftmod_p_256 ,true 
+7c83 da40091e arg mem_p_256 ,regb 
+7c84 1a222600 copy rega ,regc 
+7c85 1a20a3e0 increase -32 ,rega 
+7c86 20407cb1 call bn_bigeq_256 
+7c87 24610000 nrtn positive 
+7c88 1a622200 copy regc ,rega 
+7c89 20207c92 branch sub_p2_256 
+
+bn_lshiftmod_p_256:
+7c8a 20407c92 call sub_p2_256 
+7c8b 1a222600 copy rega ,regc 
+7c8c 1a20a3e0 increase -32 ,rega 
+7c8d da40091e arg mem_p_256 ,regb 
+7c8e 20407cb1 call bn_bigeq_256 
+7c8f 24610000 nrtn positive 
+7c90 1a622200 copy regc ,rega 
+7c91 20207c92 branch sub_p2_256 
+
+sub_p2_256:
+7c92 1a20a3e0 increase -32 ,rega 
+7c93 da40091e arg mem_p_256 ,regb 
+7c94 1a220a00 copy rega ,contw 
+7c95 20207ca9 branch bn_sub_256 
+
+bn_submod_256:
+7c96 20407ca9 call bn_sub_256 
+7c97 2020fca0 branch bn_submod_256_np ,true 
+7c98 18a0a3e0 add contw ,-32 ,rega 
+7c99 da40091e arg mem_p_256 ,regb 
+7c9a 20407cb1 call bn_bigeq_256 
+7c9b 24610000 nrtn positive 
+7c9c da40091e arg mem_p_256 ,regb 
+7c9d 18a0a3e0 add contw ,-32 ,rega 
+7c9e 1a220a00 copy rega ,contw 
+7c9f 20207ca9 branch bn_sub_256 
+
+bn_submod_256_np:
+7ca0 18a0a3e0 add contw ,-32 ,rega 
+7ca1 da40091e arg mem_p_256 ,regb 
+7ca2 1a220a00 copy rega ,contw 
+7ca3 20407c7b call bn_add_256 
+7ca4 20608000 rtn true 
+7ca5 18a0a3e0 add contw ,-32 ,rega 
+7ca6 da40091e arg mem_p_256 ,regb 
+7ca7 1a220a00 copy rega ,contw 
+7ca8 20207c7b branch bn_add_256 
+
+bn_sub_256:
+7ca9 18007208 force 8 ,loopcnt 
+7caa 20207720 branch bn_sub + 1 
+
+bn_rshift_256:
+7cab 18007208 force 8 ,loopcnt 
+7cac 1a20a21c increase 28 ,rega 
+7cad 2020772f branch bn_rshift 
+
+bn_lshift_256:
+7cae 18007208 force 8 ,loopcnt 
+7caf 18002600 force 0 ,regc 
+7cb0 2020773d branch bn_lshift_0 
+
+bn_bigeq_256:
+7cb1 18007208 force 8 ,loopcnt 
+7cb2 1a20a21c increase 28 ,rega 
+7cb3 1a40a41c increase 28 ,regb 
+7cb4 20207707 branch bn_bigeq_0 
+
+bn_eq_zero_256:
+7cb5 e8c40000 ifetch 8 ,contr 
+7cb6 247a0000 nrtn blank 
+7cb7 202076f5 branch bn_eq_zero 
+
+bn_rshifteven_256:
+7cb8 1a226000 copy rega ,alarm 
+
+bn_rshifteven_256_1:
+7cb9 1e022200 copy alarm ,rega 
+7cba ea208000 ifetch 1 ,rega 
+7cbb 2feffe00 isolate1 0 ,pdata 
+7cbc 20608000 rtn true 
+7cbd 20407cab call bn_rshift_256 
+7cbe ea408000 ifetch 1 ,regb 
+7cbf 2fec0000 isolate0 0 ,pdata 
+7cc0 2020fcc8 branch bn_rshifteven_256_0 ,true 
+7cc1 da20091e arg mem_p_256 ,rega 
+7cc2 1a420a00 copy regb ,contw 
+7cc3 20407c7b call bn_add_256 
+7cc4 ea408000 ifetch 1 ,regb 
+7cc5 9a60fe00 iadd regc ,pdata 
+7cc6 e2408000 istore 1 ,regb 
+7cc7 1a40a5e0 increase -32 ,regb 
+
+bn_rshifteven_256_0:
+7cc8 1a40a220 add regb ,32 ,rega 
+7cc9 18007209 force 9 ,loopcnt 
+7cca 2040772f call bn_rshift 
+7ccb 20207cb9 branch bn_rshifteven_256_1 
+
+ui_init:
+7ccc 20402c65 call lpm_disable_exen_output 
+7ccd 20758000 rtn wake 
+7cce 20407cd3 call ui_button_init 
+7ccf 20407d75 call ui_timer_init 
+7cd0 20207d08 branch ui_led_init_global 
+
+ui_dispatch:
+7cd1 20407d29 call ui_led_dispatch 
+7cd2 20207d64 branch ui_timer_check 
+
+ui_button_init:
+7cd3 6800c686 fetch 1 ,mem_ui_button_gpio 
+7cd4 c17f8000 rtneq ui_button_gpio_disable 
+7cd5 98000400 iforce temp 
+7cd6 2040680e call gpio_config_output 
+7cd7 6808c686 fetcht 1 ,mem_ui_button_gpio 
+7cd8 20406825 call gpio_out_inactive 
+7cd9 20000064 nop 100 
+7cda 6808c686 fetcht 1 ,mem_ui_button_gpio 
+7cdb 204067fb call gpio_config_input 
+7cdc 20207cdd branch ui_button_polling 
+
+ui_button_polling:
+7cdd 4779c03e bpatchx patch3e_3 ,mem_patch3e 
+7cde 6800c686 fetch 1 ,mem_ui_button_gpio 
+7cdf c17f8000 rtneq ui_button_gpio_disable 
+7ce0 1fe20400 copy pdata ,temp 
+7ce1 2040681d call gpio_get_bit 
+7ce2 2420fcef nbranch ui_button_up ,true 
+
+ui_button_down:
+7ce3 20407cf9 call ui_button_check_long_press 
+7ce4 68014682 fetch 2 ,mem_ui_state_map 
+7ce5 79207e0c set1 ui_state_btn_down 
+7ce6 60014682 store 2 ,mem_ui_state_map 
+7ce7 6800c679 fetch 1 ,mem_ui_button_last_state 
+7ce8 c1000000 rtneq ui_button_state_down 
+7ce9 70467900 jam ui_button_state_down ,mem_ui_button_last_state 
+7cea 6800c685 fetch 1 ,mem_ui_button_timeout 
+7ceb 6000c678 store 1 ,mem_ui_button_timer 
+7cec 20407d00 call lpm_button_get_wake_lock 
+7ced 700a992c jam bt_evt_button_down ,mem_fifo_temp 
+7cee 20207d86 branch ui_ipc_send_event 
+
+ui_button_up:
+7cef 68014682 fetch 2 ,mem_ui_state_map 
+7cf0 793ffe0c set0 ui_state_btn_down 
+7cf1 60014682 store 2 ,mem_ui_state_map 
+7cf2 6800c679 fetch 1 ,mem_ui_button_last_state 
+7cf3 c1008000 rtneq ui_button_state_up 
+7cf4 70467901 jam ui_button_state_up ,mem_ui_button_last_state 
+7cf5 70467800 jam 0 ,mem_ui_button_timer 
+7cf6 20407d02 call lpm_button_clean_wake_lock 
+7cf7 700a992d jam bt_evt_button_up ,mem_fifo_temp 
+7cf8 20207d86 branch ui_ipc_send_event 
+
+ui_button_check_long_press:
+7cf9 6800c678 fetch 1 ,mem_ui_button_timer 
+7cfa 207a0000 rtn blank 
+7cfb 1fe0ffff increase -1 ,pdata 
+7cfc 6000c678 store 1 ,mem_ui_button_timer 
+7cfd 247a0000 nrtn blank 
+7cfe 700a9910 jam bt_evt_button_long_pressed ,mem_fifo_temp 
+7cff 20207d86 branch ui_ipc_send_event 
+
+lpm_button_get_wake_lock:
+7d00 d8e00007 arg wake_lock_button ,queue 
+7d01 20202c32 branch lpm_get_wake_lock 
+
+lpm_button_clean_wake_lock:
+7d02 d8e00007 arg wake_lock_button ,queue 
+7d03 20202c36 branch lpm_put_wake_lock 
+
+calc_curr_struct_prt:
+7d04 6801421b fetch 2 ,mem_ui_led_struct_ptr 
+7d05 1a2fa40b mul32 rega ,led_offset_length ,regb 
+7d06 9a40a400 iadd regb ,regb 
+7d07 20600000 rtn 
+
+ui_led_init_global:
+7d08 6800c21a fetch 1 ,mem_ui_led_struct_num 
+7d09 207a0000 rtn blank 
+7d0a 1fe27200 copy pdata ,loopcnt 
+7d0b 6801421b fetch 2 ,mem_ui_led_struct_ptr 
+7d0c 1fe22400 copy pdata ,regb 
+
+ui_led_init_loop:
+7d0d 1a40a602 add regb ,led_offset_led_gpio ,regc 
+7d0e ea688000 ifetcht 1 ,regc 
+7d0f 2040680e call gpio_config_output 
+7d10 20407d32 call ui_led_off_static 
+7d11 1a40a40b increase led_offset_length ,regb 
+7d12 c2007d0d loop ui_led_init_loop 
+7d13 20600000 rtn 
+
+ui_led_on_global:
+7d14 20407d04 call calc_curr_struct_prt 
+7d15 58000002 setarg ui_led_state_lighting 
+7d16 e2408000 istore 1 ,regb 
+7d17 20407d5e call ui_led_stop_timer 
+7d18 20207d35 branch ui_led_on_static 
+
+ui_led_blink_stop_global:
+
+ui_led_off_global:
+7d19 20407d04 call calc_curr_struct_prt 
+7d1a 58000003 setarg ui_led_state_darking 
+7d1b e2408000 istore 1 ,regb 
+7d1c 20407d5e call ui_led_stop_timer 
+7d1d 20207d32 branch ui_led_off_static 
+
+ui_led_blink_start_global:
+7d1e 20407d04 call calc_curr_struct_prt 
+7d1f 58000001 setarg ui_led_state_blink_start 
+7d20 e2408000 istore 1 ,regb 
+7d21 580000ff setarg led_infinite_flash_num 
+7d22 e0a08000 istore 1 ,contw 
+7d23 20207d32 branch ui_led_off_static 
+
+ui_led_set_style_global:
+7d24 20407d04 call calc_curr_struct_prt 
+7d25 df20000b arg led_offset_length ,loopcnt 
+7d26 1a620c00 copy regc ,contr 
+7d27 1a420a00 copy regb ,contw 
+7d28 20207ef4 branch memcpy_fast 
+
+ui_led_dispatch:
+7d29 6800c21a fetch 1 ,mem_ui_led_struct_num 
+7d2a 207a0000 rtn blank 
+7d2b da200000 arg 0 ,rega 
+
+ui_led_blink_polling:
+7d2c 20407d38 call ui_led_change_style_by_type 
+7d2d 1a20a201 increase 1 ,rega 
+7d2e 6800c21a fetch 1 ,mem_ui_led_struct_num 
+7d2f 9a267c00 isub rega ,null 
+7d30 20628000 rtn zero 
+7d31 20207d2c branch ui_led_blink_polling 
+
+ui_led_off_static:
+7d32 1a40a602 add regb ,led_offset_led_gpio ,regc 
+7d33 ea688000 ifetcht 1 ,regc 
+7d34 20206825 branch gpio_out_inactive 
+
+ui_led_on_static:
+7d35 1a40a602 add regb ,led_offset_led_gpio ,regc 
+7d36 ea688000 ifetcht 1 ,regc 
+7d37 20206829 branch gpio_out_active 
+
+ui_led_change_style_by_type:
+7d38 1a208e0b add rega ,ui_led_blink ,queue 
+7d39 20407f16 call timer_check 
+7d3a 247a0000 nrtn blank 
+7d3b 20407d04 call calc_curr_struct_prt 
+7d3c ea408000 ifetch 1 ,regb 
+7d3d c0017d35 beq ui_led_state_lighting ,ui_led_on_static 
+7d3e c001fd32 beq ui_led_state_darking ,ui_led_off_static 
+7d3f c0007d32 beq ui_led_state_blink_stop ,ui_led_off_static 
+7d40 c002fd4c beq ui_led_state_blink_darking ,ui_led_blink_state_darking 
+
+ui_led_blink_state_lighting:
+7d41 20407d35 call ui_led_on_static 
+7d42 1a40a607 add regb ,led_offset_cb_ledon ,regc 
+7d43 20407e7c call push_stack 
+7d44 ea610000 ifetch 2 ,regc 
+7d45 20407f9c call callback_func 
+7d46 20407e8c call pop_stack 
+7d47 58000005 setarg ui_led_state_blink_darking 
+7d48 e2408000 istore 1 ,regb 
+7d49 1a40a603 add regb ,led_offset_on_time ,regc 
+7d4a ea610000 ifetch 2 ,regc 
+7d4b 20207d5c branch ui_led_blink_timer_start 
+
+ui_led_blink_state_darking:
+7d4c 20407d32 call ui_led_off_static 
+7d4d 1a40a609 add regb ,led_offset_cb_ledoff ,regc 
+7d4e 20407e7c call push_stack 
+7d4f ea610000 ifetch 2 ,regc 
+7d50 20407f9c call callback_func 
+7d51 20407e8c call pop_stack 
+7d52 1a40a601 add regb ,led_offset_blink_count ,regc 
+7d53 ea608000 ifetch 1 ,regc 
+7d54 c07ffd58 beq led_infinite_flash_num ,ui_led_blink_infinite 
+7d55 1fe0ffff increase -1 ,pdata 
+7d56 e2608000 istore 1 ,regc 
+7d57 203a7d19 branch ui_led_blink_stop_global ,blank 
+
+ui_led_blink_infinite:
+7d58 58000004 setarg ui_led_state_blink_lighting 
+7d59 e2408000 istore 1 ,regb 
+7d5a 1a40a605 add regb ,led_offset_off_time ,regc 
+7d5b ea610000 ifetch 2 ,regc 
+
+ui_led_blink_timer_start:
+7d5c 1a208e0b add rega ,ui_led_blink ,queue 
+7d5d 20207f08 branch timer_init 
+
+ui_led_stop_timer:
+7d5e 58000000 setarg 0 
+7d5f 20207d5c branch ui_led_blink_timer_start 
+
+ui_timer_timeout:
+7d60 58001000 setarg 0x1000 
+7d61 1ff07e00 lshift16 pdata ,pdata 
+7d62 9a40a400 iadd regb ,regb 
+7d63 20600000 rtn 
+
+ui_timer_check:
+7d64 477a403e bpatchx patch3e_4 ,mem_patch3e 
+7d65 da200000 arg 0 ,rega 
+7d66 680a467a fetcht 4 ,mem_ui_timer_last_btclk 
+7d67 1c422400 copy clkn_bt ,regb 
+7d68 1a427e00 copy regb ,pdata 
+7d69 98467c00 isub temp ,null 
+7d6a 24417d60 ncall ui_timer_timeout ,positive 
+
+ui_timer_check_loop:
+7d6b 1a427e00 copy regb ,pdata 
+7d6c 184084a0 increase 160 ,temp 
+7d6d 184084a0 increase 160 ,temp 
+7d6e 98467c00 isub temp ,null 
+7d6f 24217d78 nbranch ui_timer_check_end ,positive 
+7d70 1a20a201 increase 1 ,rega 
+7d71 1a217e0f and rega ,0x0f ,pdata 
+7d72 243a7d6b nbranch ui_timer_check_loop ,blank 
+7d73 da200000 arg 0 ,rega 
+7d74 20407d7f call ui_timer_check_send_evt 
+
+ui_timer_init:
+7d75 1c427e00 copy clkn_bt ,pdata 
+7d76 6002467a store 4 ,mem_ui_timer_last_btclk 
+7d77 20600000 rtn 
+
+ui_timer_check_end:
+7d78 477ac03e bpatchx patch3e_5 ,mem_patch3e 
+7d79 1a227e00 copy rega ,pdata 
+7d7a 207a0000 rtn blank 
+7d7b 18408560 increase -160 ,temp 
+7d7c 18408560 increase -160 ,temp 
+7d7d 793f841c set0 28 ,temp 
+7d7e 600a467a storet 4 ,mem_ui_timer_last_btclk 
+
+ui_timer_check_send_evt:
+7d7f 2020335f branch app_evt_timer 
+
+ui_ipc_get_lock:
+7d80 70466601 jam 1 ,mem_ipc_lock_bt 
+
+ui_ipc_get_lock_wait:
+7d81 6800c667 fetch 1 ,mem_ipc_lock_c51 
+7d82 243a7d81 nbranch ui_ipc_get_lock_wait ,blank 
+7d83 20600000 rtn 
+
+ui_ipc_put_lock:
+7d84 70466600 jam 0 ,mem_ipc_lock_bt 
+7d85 20600000 rtn 
+
+ui_ipc_send_event:
+7d86 477b403e bpatchx patch3e_6 ,mem_patch3e 
+7d87 20407d80 call ui_ipc_get_lock 
+7d88 1a227e00 copy rega ,pdata 
+7d89 60020a91 store 4 ,mem_ipc_rega_temp 
+7d8a da204668 arg mem_ipc_fifo_bt2c51 ,rega 
+7d8b 20407fb8 call fifo_in 
+7d8c 68020a91 fetch 4 ,mem_ipc_rega_temp 
+7d8d 1fe22200 copy pdata ,rega 
+7d8e 20207d84 branch ui_ipc_put_lock 
+
+ui_ipc_send_cmd:
+7d8f 477bc03e bpatchx patch3e_7 ,mem_patch3e 
+7d90 20407d80 call ui_ipc_get_lock 
+7d91 1a227e00 copy rega ,pdata 
+7d92 60020a91 store 4 ,mem_ipc_rega_temp 
+7d93 da204670 arg mem_ipc_fifo_c512bt ,rega 
+7d94 20407fb8 call fifo_in 
+7d95 68020a91 fetch 4 ,mem_ipc_rega_temp 
+7d96 1fe22200 copy pdata ,rega 
+7d97 20207d84 branch ui_ipc_put_lock 
+
+ui_ipc_clean_all_fifo:
+7d98 58000000 setarg 0 
+7d99 60044670 store util_fifo_len ,mem_ipc_fifo_c512bt 
+7d9a 60044668 store util_fifo_len ,mem_ipc_fifo_bt2c51 
+7d9b 20600000 rtn 
+
+check_51cmd:
+7d9c 477c403f bpatchx patch3f_0 ,mem_patch3f 
+7d9d 6800c1ce fetch 1 ,mem_hci_cmd 
+7d9e 247a0000 nrtn blank 
+7d9f da204670 arg mem_ipc_fifo_c512bt ,rega 
+7da0 20407fd0 call fifo_is_empty 
+7da1 207a0000 rtn blank 
+7da2 700a9000 jam ipc_continue_process ,mem_ipc_skip_continue_proc 
+7da3 20407da7 call check_51cmd_once 
+7da4 68008a90 fetch 1 ,mem_ipc_skip_continue_proc 
+7da5 203a7d9c branch check_51cmd ,blank 
+7da6 20600000 rtn 
+
+check_51cmd_once:
+7da7 20407d80 call ui_ipc_get_lock 
+7da8 da204670 arg mem_ipc_fifo_c512bt ,rega 
+7da9 20407fc4 call fifo_out 
+7daa 1fe20400 copy pdata ,temp 
+7dab 20407d84 call ui_ipc_put_lock 
+7dac 477cc03f bpatchx patch3f_1 ,mem_patch3f 
+7dad 18427e00 copy temp ,pdata 
+7dae 207a0000 rtn blank 
+7daf c000fddd beq bt_cmd_start_discovery ,check_51cmd_start_discovery 
+7db0 c0017de2 beq bt_cmd_stop_discovery ,check_51cmd_stop_discovery 
+7db1 c001fde8 beq bt_cmd_reconnect ,check_51cmd_reconnect 
+7db2 c003fded beq bt_cmd_enter_sniff_subrating ,check_51cmd_enter_sniff_subrating 
+7db3 c0047dee beq bt_cmd_exit_sniff_subrating ,check_51cmd_exit_sniff_subrating 
+7db4 c004fdef beq bt_cmd_sniff_test ,check_51cmd_sniff_test 
+7db5 c005fdf2 beq bt_cmd_start_inquiry ,check_51cmd_inq 
+7db6 c0067df3 beq bt_cmd_stop_inquiry ,check_51cmd_stop_inq 
+7db7 c006fdf4 beq bt_cmd_start_adv ,check_51cmd_adv 
+7db8 c0077dfa beq bt_cmd_stop_adv ,check_51cmd_stop_adv 
+7db9 c007fdff beq bt_cmd_start_direct_adv ,check_51cmd_direct_adv 
+7dba c0087e05 beq bt_cmd_stop_direct_adv ,check_51cmd_stop_direct_adv 
+7dbb c009fe0f beq bt_cmd_led_off ,check_51cmd_led_off 
+7dbc c00a7e11 beq bt_cmd_led_on ,check_51cmd_led_on 
+7dbd c00afe13 beq bt_cmd_led_blink ,check_51cmd_led_start_blink 
+7dbe c00b7e15 beq bt_cmd_le_start_conn ,check_51cmd_le_start_con 
+7dbf c00bfe18 beq bt_cmd_le_start_scan ,check_51cmd_start_scan 
+7dc0 c00c7e1a beq bt_cmd_le_stop_scan ,check_51cmd_stop_scan 
+7dc1 c00cfe1d beq bt_cmd_enter_hibernate ,check_51cmd_hibernate 
+7dc2 c00dfe25 beq bt_cmd_le_smp_security_request ,check_51cmd_le_smp_sec_req 
+7dc3 c00f7e2f beq bt_cmd_bb_reconn_cancel ,check_51cmd_bb_reconn_cancel 
+7dc4 60008a99 store 1 ,mem_fifo_temp 
+7dc5 477d403f bpatchx patch3f_2 ,mem_patch3f 
+7dc6 204062bc call lmo_fifo_check 
+7dc7 243a7ddb nbranch check_51cmd_restore ,blank 
+
+check_51cmd_once_continue:
+7dc8 68008a99 fetch 1 ,mem_fifo_temp 
+7dc9 c584fdd6 bmark0 mark_context ,check_51cmd_check_idle 
+7dca c0027dea beq bt_cmd_disconnect ,check_51cmd_disconnect 
+7dcb c002cd17 beq bt_cmd_enter_sniff ,cmd_in_sniff 
+7dcc c0034d26 beq bt_cmd_exit_sniff ,cmd_exit_sniff 
+7dcd c0057df0 beq bt_cmd_set_pin_code ,check_51cmd_pincode 
+7dce c008fe0a beq bt_cmd_le_disconnect ,check_51cmd_le_disconnect 
+7dcf c0097e0e beq bt_cmd_le_update_conn ,check_51cmd_ble_update_connect_param 
+7dd0 c00efe26 beq bt_cmd_role_switch ,check_51cmd_role_switch 
+7dd1 c00fe7cc beq bt_cmd_store_reconn_info_le ,eeprom_store_le_reconn_info 
+7dd2 c01067d0 beq bt_cmd_store_reconn_info_bt ,eeprom_store_bd_reconn_info 
+7dd3 c010fe31 beq bt_cmd_dhkey_not_accept ,check_51cmd_dhkey_not_accept 
+7dd4 c012e70b beq bt_cmd_store_reconn_info ,check_51cmd_store_reconn_info 
+7dd5 20600000 rtn 
+
+check_51cmd_check_idle:
+7dd6 60008a99 store 1 ,mem_fifo_temp 
+7dd7 20402252 call context_check_idle 
+7dd8 2022fddb branch check_51cmd_restore ,zero 
+7dd9 2040225a call context_search_plap 
+7dda 24628000 nrtn zero 
+
+check_51cmd_restore:
+7ddb 700a9001 jam ipc_skip_continue_process ,mem_ipc_skip_continue_proc 
+7ddc 20207d8f branch ui_ipc_send_cmd 
+
+check_51cmd_start_discovery:
+7ddd 68014682 fetch 2 ,mem_ui_state_map 
+7dde 79207e06 set1 ui_state_bt_discovery 
+7ddf 60014682 store 2 ,mem_ui_state_map 
+7de0 70409303 jam 3 ,mem_scan_mode 
+7de1 20600000 rtn 
+
+check_51cmd_stop_discovery:
+7de2 70468000 jam 0 ,mem_hid_handshake_timer_count 
+7de3 70409300 jam 0 ,mem_scan_mode 
+7de4 68014682 fetch 2 ,mem_ui_state_map 
+7de5 793ffe06 set0 ui_state_bt_discovery 
+7de6 60014682 store 2 ,mem_ui_state_map 
+7de7 20600000 rtn 
+
+check_51cmd_reconnect:
+7de8 7041ce05 jam hci_cmd_create_conn ,mem_hci_cmd 
+7de9 20600000 rtn 
+
+check_51cmd_disconnect:
+7dea 70007c07 jam lmp_detach ,mem_lmo_opcode2 
+7deb 7004ca13 jam other_end_terminated ,mem_disconn_reason_send 
+7dec 20600000 rtn 
+
+check_51cmd_enter_sniff_subrating:
+7ded 20600000 rtn 
+
+check_51cmd_exit_sniff_subrating:
+7dee 20600000 rtn 
+
+check_51cmd_sniff_test:
+7def 20600000 rtn 
+
+check_51cmd_pincode:
+7df0 7004d402 jam pincode_state_pincode_ready ,mem_pincode_state 
+7df1 20204d0a branch cmd_pair 
+
+check_51cmd_inq:
+7df2 20600000 rtn 
+
+check_51cmd_stop_inq:
+7df3 20600000 rtn 
+
+check_51cmd_adv:
+7df4 70436e01 jam on ,mem_le_adv_enable 
+7df5 70448400 jam adv_ind ,mem_le_adv_type 
+7df6 68014682 fetch 2 ,mem_ui_state_map 
+7df7 79207e0b set1 ui_state_ble_adv ,pdata 
+7df8 60014682 store 2 ,mem_ui_state_map 
+7df9 20600000 rtn 
+
+check_51cmd_stop_adv:
+7dfa 68014682 fetch 2 ,mem_ui_state_map 
+7dfb 793ffe0b set0 ui_state_ble_adv ,pdata 
+7dfc 60014682 store 2 ,mem_ui_state_map 
+7dfd 70436e00 jam off ,mem_le_adv_enable 
+7dfe 20600000 rtn 
+
+check_51cmd_direct_adv:
+7dff 70436e01 jam on ,mem_le_adv_enable 
+7e00 70448401 jam adv_direct_ind ,mem_le_adv_type 
+7e01 68014682 fetch 2 ,mem_ui_state_map 
+7e02 79207e0b set1 ui_state_ble_adv ,pdata 
+7e03 60014682 store 2 ,mem_ui_state_map 
+7e04 20600000 rtn 
+
+check_51cmd_stop_direct_adv:
+7e05 68014682 fetch 2 ,mem_ui_state_map 
+7e06 793ffe0b set0 ui_state_ble_adv ,pdata 
+7e07 60014682 store 2 ,mem_ui_state_map 
+7e08 70436e00 jam off ,mem_le_adv_enable 
+7e09 20600000 rtn 
+
+check_51cmd_le_disconnect:
+7e0a 58000014 setarg 20 
+7e0b 6001046d store 2 ,mem_le_superto 
+7e0c 600144ba store 2 ,mem_le_init_superto 
+7e0d 20205c92 branch le_send_terminate_ind_user_terminated 
+
+check_51cmd_ble_update_connect_param:
+7e0e 20205abf branch le_l2cap_tx_update_req 
+
+check_51cmd_led_off:
+7e0f da200000 arg 0 ,rega 
+7e10 20207d19 branch ui_led_off_global 
+
+check_51cmd_led_on:
+7e11 da200000 arg 0 ,rega 
+7e12 20207d14 branch ui_led_on_global 
+
+check_51cmd_led_start_blink:
+7e13 da200000 arg 0 ,rega 
+7e14 20207d1e branch ui_led_blink_start_global 
+
+check_51cmd_le_start_con:
+7e15 70436901 jam on ,mem_le_scan_enable 
+7e16 7041ce1b jam hci_cmd_le_create_conn ,mem_hci_cmd 
+7e17 20600000 rtn 
+
+check_51cmd_start_scan:
+7e18 70436901 jam on ,mem_le_scan_enable 
+7e19 20600000 rtn 
+
+check_51cmd_stop_scan:
+7e1a 70436900 jam off ,mem_le_scan_enable 
+7e1b 7041ce00 jam 0 ,mem_hci_cmd 
+7e1c 20600000 rtn 
+
+check_51cmd_hibernate:
+7e1d 680141eb fetch 2 ,mem_cb_before_hibernate 
+7e1e 20407f9c call callback_func 
+7e1f 6800c686 fetch 1 ,mem_ui_button_gpio 
+7e20 c07ffe23 beq ui_button_gpio_disable ,check_51cmd_hibernate_btn_disabled 
+7e21 1fe20400 copy pdata ,temp 
+7e22 204067fb call gpio_config_input 
+
+check_51cmd_hibernate_btn_disabled:
+7e23 20407d98 call ui_ipc_clean_all_fifo 
+7e24 20202b1f branch lpm_hibernate 
+
+check_51cmd_le_smp_sec_req:
+7e25 20205b02 branch le_send_smp_security_request 
+
+check_51cmd_role_switch:
+7e26 70007c34 jam lmp_slot_offset ,mem_lmo_opcode2 
+7e27 79200003 set1 mark_switch_initiated ,mark 
+7e28 24748000 nrtn master 
+7e29 70455b00 jam switch_flag_init ,mem_switch_flag 
+7e2a 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 
+7e2b 6800816d fetch 1 ,mem_connection_options 
+7e2c 793ffe02 set0 connection_switch ,pdata 
+7e2d 6000816d store 1 ,mem_connection_options 
+7e2e 20600000 rtn 
+
+check_51cmd_bb_reconn_cancel:
+7e2f 18000e03 force page_length_timer ,queue 
+7e30 20207f07 branch timer_stop 
+
+check_51cmd_dhkey_not_accept:
+7e31 204062f8 call tid_set_reply 
+7e32 70007d41 jam lmp_dhkey_check ,mem_lmi_opcode2 
+7e33 20205f9d branch parse_lmp_dhkey_check_reject 
+
+ui_check_paring_button:
+7e34 6800c682 fetch 1 ,mem_ui_state_map 
+7e35 c4060000 rtnbit0 ui_state_btn_down 
+7e36 c4038000 rtnbit0 ui_state_bt_reconnect 
+7e37 20207e2f branch check_51cmd_bb_reconn_cancel 
+
+queue_init:
+7e38 68014218 fetch 2 ,mem_queue_ptr 
+7e39 1fe08a02 add pdata ,queue_offset_curr_num ,contw 
+7e3a 58000000 setarg 0 
+7e3b e0a18000 istore 3 ,contw 
+7e3c 20600000 rtn 
+
+queue_push:
+7e3d 20407fe9 call disable_user 
+7e3e 20407e69 call queue_full 
+7e3f 207a0000 rtn blank 
+7e40 68014218 fetch 2 ,mem_queue_ptr 
+7e41 1fe0a402 add pdata ,queue_offset_curr_num ,regb 
+7e42 ea488000 ifetcht 1 ,regb 
+7e43 18408401 increase 1 ,temp 
+7e44 e2488000 istoret 1 ,regb 
+7e45 efe88000 ifetcht 1 ,pdata 
+7e46 18427200 copy temp ,loopcnt 
+7e47 1fe0a404 add pdata ,queue_offset_write_ptr ,regb 
+7e48 ea408000 ifetch 1 ,regb 
+7e49 984ffe00 imul32 temp ,pdata 
+7e4a 98c08a00 iadd contr ,contw 
+7e4b 1a220c00 copy rega ,contr 
+
+calc_queue_next_ptr:
+7e4c 20407f01 call memcpy 
+7e4d 20407e6d call queue_get_size 
+7e4e 1fe0ffff pincrease -1 
+7e4f ea488000 ifetcht 1 ,regb 
+7e50 18408401 increase 1 ,temp 
+7e51 98410400 iand temp ,temp 
+7e52 e2488000 istoret 1 ,regb 
+7e53 20207fe7 branch enable_user 
+
+queue_pop:
+7e54 20407fe9 call disable_user 
+7e55 20407e65 call queue_empty 
+7e56 207a0000 rtn blank 
+7e57 68014218 fetch 2 ,mem_queue_ptr 
+7e58 1fe0a402 add pdata ,queue_offset_curr_num ,regb 
+7e59 ea488000 ifetcht 1 ,regb 
+7e5a 184085ff increase -1 ,temp 
+7e5b e2488000 istoret 1 ,regb 
+7e5c efe88000 ifetcht 1 ,pdata 
+7e5d 18427200 copy temp ,loopcnt 
+7e5e 1fe0a403 add pdata ,queue_offset_read_ptr ,regb 
+7e5f ea408000 ifetch 1 ,regb 
+7e60 984ffe00 imul32 temp ,pdata 
+7e61 98c08c00 iadd contr ,contr 
+7e62 18c08c01 increase 1 ,contr 
+7e63 1a220a00 copy rega ,contw 
+7e64 20207e4c branch calc_queue_next_ptr 
+
+queue_empty:
+7e65 68014218 fetch 2 ,mem_queue_ptr 
+7e66 1fe08c02 add pdata ,queue_offset_curr_num ,contr 
+7e67 e8c08000 ifetch 1 ,contr 
+7e68 20600000 rtn 
+
+queue_full:
+7e69 20407e6d call queue_get_size 
+7e6a e8c88000 ifetcht 1 ,contr 
+7e6b 98467e00 isub temp ,pdata 
+7e6c 20600000 rtn 
+
+queue_get_size:
+7e6d 68014218 fetch 2 ,mem_queue_ptr 
+7e6e 1fe08c01 add pdata ,queue_offset_length ,contr 
+7e6f e8c08000 ifetch 1 ,contr 
+7e70 20600000 rtn 
+
+right_shift_n:
+7e71 1f267c00 sub loopcnt ,0 ,null 
+7e72 20628000 rtn zero 
+
+right_shift_n_loop:
+7e73 1fe37e00 rshift pdata ,pdata 
+7e74 c2007e73 loop right_shift_n_loop 
+7e75 20600000 rtn 
+
+left_shift_n:
+7e76 18007e01 force 1 ,pdata 
+7e77 1f267c00 sub loopcnt ,0 ,null 
+7e78 20628000 rtn zero 
+
+left_shift_n_loop:
+7e79 1fe3fe00 lshift pdata ,pdata 
+7e7a c2007e79 loop left_shift_n_loop 
+7e7b 20600000 rtn 
+
+push_stack:
+7e7c 18a27e00 deposit contw 
+7e7d 60010abb store 2 ,mem_contw 
+7e7e 600c0aa2 storet 8 ,mem_temp 
+7e7f 19627e00 deposit timeup 
+7e80 60020aaa store 4 ,mem_timeup 
+7e81 20407e85 call push_stack_rega_b_c 
+7e82 18c27e00 deposit contr 
+7e83 60010ab9 store 2 ,mem_contr 
+7e84 20600000 rtn 
+
+push_stack_rega_b_c:
+7e85 1a227e00 deposit rega 
+7e86 60020aae store 4 ,mem_rega 
+7e87 1a427e00 deposit regb 
+7e88 60020ab2 store 4 ,mem_regb 
+7e89 1a627e00 deposit regc 
+7e8a 60018ab6 store 3 ,mem_regc 
+7e8b 20600000 rtn 
+
+pop_stack:
+7e8c 680c0aa2 fetcht 8 ,mem_temp 
+7e8d 68020aaa fetch 4 ,mem_timeup 
+7e8e 98001600 iforce timeup 
+7e8f 20407e95 call pop_stack_rega_b_c 
+7e90 68010abb fetch 2 ,mem_contw 
+7e91 98000a00 iforce contw 
+7e92 68010ab9 fetch 2 ,mem_contr 
+7e93 98000c00 iforce contr 
+7e94 20600000 rtn 
+
+pop_stack_rega_b_c:
+7e95 68020aae fetch 4 ,mem_rega 
+7e96 98002200 iforce rega 
+7e97 68020ab2 fetch 4 ,mem_regb 
+7e98 98002400 iforce regb 
+7e99 68018ab6 fetch 3 ,mem_regc 
+7e9a 98002600 iforce regc 
+7e9b 20600000 rtn 
+
+get_contw:
+7e9c 68010abb fetch 2 ,mem_contw 
+7e9d 1fe20a00 copy pdata ,contw 
+7e9e 20600000 rtn 
+
+get_contr:
+7e9f 68010ab9 fetch 2 ,mem_contr 
+7ea0 1fe20c00 copy pdata ,contr 
+7ea1 20600000 rtn 
+
+store_contw:
+7ea2 18a27e00 copy contw ,pdata 
+7ea3 60010abb store 2 ,mem_contw 
+7ea4 20600000 rtn 
+
+store_contr:
+7ea5 18c27e00 copy contr ,pdata 
+7ea6 60010ab9 store 2 ,mem_contr 
+7ea7 20600000 rtn 
+
+save_cont_pointers:
+7ea8 18a27e00 copy contw ,pdata 
+7ea9 60010a97 store 2 ,mem_hold_contw 
+7eaa 18c27e00 copy contr ,pdata 
+7eab 60010a95 store 2 ,mem_hold_contr 
+7eac 20600000 rtn 
+
+load_cont_pointers:
+7ead 68010a97 fetch 2 ,mem_hold_contw 
+7eae 1fe20a00 copy pdata ,contw 
+7eaf 68010a95 fetch 2 ,mem_hold_contr 
+7eb0 1fe20c00 copy pdata ,contr 
+7eb1 20600000 rtn 
+
+memcpy96:
+7eb2 20407ebd call memcpy32 
+
+memcpy64:
+7eb3 20407ebd call memcpy32 
+7eb4 20207ebd branch memcpy32 
+
+memcpy12:
+7eb5 20407eb9 call memcpy8 
+
+memcpy4:
+7eb6 e8c20000 ifetch 4 ,contr 
+7eb7 e0a20000 istore 4 ,contw 
+7eb8 20600000 rtn 
+
+memcpy8:
+7eb9 e8c40000 ifetch 8 ,contr 
+7eba e0a40000 istore 8 ,contw 
+7ebb 20600000 rtn 
+
+memcpy48:
+7ebc 20407ebf call memcpy16 
+
+memcpy32:
+7ebd 20407eb9 call memcpy8 
+
+memcpy24:
+7ebe 20407eb9 call memcpy8 
+
+memcpy16:
+7ebf 20407eb9 call memcpy8 
+7ec0 20207eb9 branch memcpy8 
+
+delay_10ms:
+7ec1 df20000a arg 10 ,loopcnt 
+
+delay_ms_wait:
+7ec2 20002ee0 nop 12000 
+7ec3 c2007ec2 loop delay_ms_wait 
+7ec4 20600000 rtn 
+
+bn_zero:
+7ec5 18007203 force 3 ,loopcnt 
+
+memset0:
+7ec6 18007e00 force 0 ,pdata 
+
+memset8:
+7ec7 e0a40000 istore 8 ,contw 
+7ec8 c2007ec7 loop memset8 
+7ec9 20600000 rtn 
+
+memset0_8:
+7eca 18007e00 force 0 ,pdata 
+7ecb e0a40000 istore 8 ,contw 
+7ecc 20600000 rtn 
+
+memset0_4:
+7ecd 18007e00 force 0 ,pdata 
+7ece e0a20000 istore 4 ,contw 
+7ecf 20600000 rtn 
+
+clear_mem_256:
+7ed0 18007204 force 4 ,loopcnt 
+7ed1 20207ec6 branch memset0 
+
+clear_mem_512:
+7ed2 18007208 force 8 ,loopcnt 
+7ed3 20207ec6 branch memset0 
+
+clear_mem:
+7ed4 1f227e00 deposit loopcnt 
+7ed5 207a0000 rtn blank 
+7ed6 58000000 setarg 0 
+
+clear_mem_loop:
+7ed7 e0a08000 istore 1 ,contw 
+7ed8 c2007ed7 loop clear_mem_loop 
+7ed9 20600000 rtn 
+
+clear_temp_block:
+7eda df200020 arg 32 ,loopcnt 
+7edb d8a00ac2 arg mem_temp_block0 ,contw 
+7edc 20207ed4 branch clear_mem 
+
+xor_loop:
+7edd ea620000 ifetch 4 ,regc 
+7ede ea2a0000 ifetcht 4 ,rega 
+7edf 9842fe00 ixor temp ,pdata 
+7ee0 e0a20000 istore 4 ,contw 
+7ee1 1a20a204 increase 4 ,rega 
+7ee2 1a60a604 increase 4 ,regc 
+7ee3 c2007edd loop xor_loop 
+7ee4 20600000 rtn 
+
+inverse_data:
+7ee5 477dc03f bpatchx patch3f_3 ,mem_patch3f 
+7ee6 1f227e00 copy loopcnt ,pdata 
+7ee7 1fe67c01 sub pdata ,1 ,null 
+7ee8 20610000 rtn positive 
+7ee9 9a20a400 iadd rega ,regb 
+7eea 1a40a5ff increase -1 ,regb 
+7eeb 1f237200 rshift loopcnt ,loopcnt 
+
+inverse_loop:
+7eec ea288000 ifetcht 1 ,rega 
+7eed ea408000 ifetch 1 ,regb 
+7eee e2208000 istore 1 ,rega 
+7eef e2488000 istoret 1 ,regb 
+7ef0 1a40a5ff increase -1 ,regb 
+7ef1 1a20a201 increase 1 ,rega 
+7ef2 c2007eec loop inverse_loop 
+7ef3 20600000 rtn 
+
+memcpy_fast:
+7ef4 1f227e00 deposit loopcnt 
+7ef5 207a0000 rtn blank 
+
+memcpy_fast_loop:
+7ef6 1f20f3f8 increase -8 ,loopcnt 
+7ef7 20417eb9 call memcpy8 ,positive 
+7ef8 20628000 rtn zero 
+7ef9 20217ef6 branch memcpy_fast_loop ,positive 
+7efa 1f20f208 increase 8 ,loopcnt 
+
+memcpy_fast_loop_four:
+7efb 1f20f3fc increase -4 ,loopcnt 
+7efc 20417eb6 call memcpy4 ,positive 
+7efd 20628000 rtn zero 
+7efe 20217efb branch memcpy_fast_loop_four ,positive 
+7eff 1f20f204 increase 4 ,loopcnt 
+7f00 20207f01 branch memcpy 
+
+memcpy:
+7f01 1f227e00 deposit loopcnt 
+7f02 207a0000 rtn blank 
+
+memcpy_loop:
+7f03 e8c08000 ifetch 1 ,contr 
+7f04 e0a08000 istore 1 ,contw 
+7f05 c2007f03 loop memcpy_loop 
+7f06 20600000 rtn 
+
+timer_stop:
+7f07 58000000 setarg 0 
+
+timer_init:
+7f08 1c430400 rshift clkn_bt ,temp 
+7f09 600a4094 storet 4 ,mem_last_clkn 
+7f0a d8a0419d arg mem_timers ,contw 
+7f0b 98000400 iforce temp 
+7f0c 18e3fe00 lshift queue ,pdata 
+7f0d 98a08a00 iadd contw ,contw 
+7f0e e0a90000 istoret 2 ,contw 
+7f0f 477e403f bpatchx patch3f_4 ,mem_patch3f 
+7f10 20600000 rtn 
+
+timer_check_timeout:
+7f11 d9600800 arg 0x800 ,timeup 
+7f12 19701600 lshift16 timeup ,timeup 
+7f13 9960fe00 iadd timeup ,pdata 
+7f14 20600000 rtn 
+
+timer_reinit:
+7f15 d8e00000 arg 0 ,queue 
+
+timer_check:
+7f16 477ec03f bpatchx patch3f_5 ,mem_patch3f 
+7f17 680a4094 fetcht 4 ,mem_last_clkn 
+7f18 1c437e00 rshift clkn_bt ,pdata 
+7f19 60024094 store 4 ,mem_last_clkn 
+7f1a 98467c00 isub temp ,null 
+7f1b 24417f11 ncall timer_check_timeout ,positive 
+7f1c 98461600 isub temp ,timeup 
+7f1d 19620400 copy timeup ,temp 
+7f1e d8c0419d arg mem_timers ,contr 
+7f1f 18c20a00 copy contr ,contw 
+7f20 df200010 arg 16 ,loopcnt 
+
+timer_loop:
+7f21 e8c10000 ifetch 2 ,contr 
+7f22 98467e00 isub temp ,pdata 
+7f23 20217f25 branch timer_counting ,positive 
+7f24 18007e00 force 0 ,pdata 
+
+timer_counting:
+7f25 e0a10000 istore 2 ,contw 
+7f26 c2007f21 loop timer_loop 
+7f27 d8c0419d arg mem_timers ,contr 
+7f28 18e3fe00 lshift queue ,pdata 
+7f29 98c08c00 iadd contr ,contr 
+7f2a e8c10000 ifetch 2 ,contr 
+7f2b 20600000 rtn 
+
+clk_add:
+7f2c 98408400 iadd temp ,temp 
+7f2d 18427200 copy temp ,loopcnt 
+7f2e 58000ea6 setarg 3750 
+7f2f 9f267e00 isub loopcnt ,pdata 
+7f30 20610000 rtn positive 
+7f31 1fe67e00 sub pdata ,0 ,pdata 
+7f32 18510400 rshift16 temp ,temp 
+7f33 18408401 increase 1 ,temp 
+7f34 18500400 lshift16 temp ,temp 
+7f35 98418400 ior temp ,temp 
+7f36 20600000 rtn 
+
+clk_diff_rt:
+7f37 20407f39 call clk_diff 
+7f38 20207f43 branch clk2rt 
+
+clk_diff:
+7f39 78547c00 disable user 
+7f3a 98467e00 isub temp ,pdata 
+7f3b 20217f3e branch clk_diff_pos ,positive 
+7f3c 78347c00 enable user 
+7f3d 1fe67e00 sub pdata ,0 ,pdata 
+
+clk_diff_pos:
+7f3e c4078000 rtnbit0 15 
+7f3f d85f0ea6 arg -61786 ,temp 
+7f40 9840fe00 iadd temp ,pdata 
+7f41 793ffe40 set0 64 ,pdata 
+7f42 20600000 rtn 
+
+clk2rt:
+7f43 98000c00 iforce contr 
+7f44 1ff17e00 rshift16 pdata ,pdata 
+7f45 d8400ea6 arg 3750 ,temp 
+7f46 984ffe00 imul32 temp ,pdata 
+7f47 98c0fe00 iadd contr ,pdata 
+7f48 20600000 rtn 
+
+clk2lpo:
+7f49 1fed7e00 lshift8 pdata ,pdata 
+7f4a 1ff27e00 lshift4 pdata ,pdata 
+7f4b 6809c16f fetcht 3 ,mem_clks_per_lpo 
+7f4c 9846fc00 idiv temp 
+7f4d 20407f86 call wait_div_end 
+7f4e 18078400 quotient temp 
+7f4f 20600000 rtn 
+
+clk2bt:
+7f50 d8400ea6 arg 3750 ,temp 
+7f51 9846fc00 idiv temp 
+7f52 20407f86 call wait_div_end 
+7f53 1807fe00 quotient pdata 
+7f54 1ff07e00 lshift16 pdata ,pdata 
+7f55 18070400 remainder temp 
+7f56 98418400 ior temp ,temp 
+7f57 20600000 rtn 
+
+string2dec_from_uart:
+7f58 d8400000 arg 0 ,temp 
+
+string2dec_from_uart_done:
+7f59 18422600 copy temp ,regc 
+7f5a e8608000 ifetch 1 ,contru 
+7f5b 20407f64 call uchar2dialog 
+7f5c 1a620400 copy regc ,temp 
+7f5d 20407f95 call swap 
+7f5e da40000a arg 10 ,regb 
+7f5f 9a4ffe00 imul32 regb ,pdata 
+7f60 9840fe00 iadd temp ,pdata 
+7f61 1fe20400 copy pdata ,temp 
+7f62 c2007f59 loop string2dec_from_uart_done 
+7f63 20600000 rtn 
+
+uchar2dialog:
+7f64 d840003a arg 0x3a ,temp 
+7f65 98467c00 isub temp ,null 
+7f66 24217f6d nbranch uchar2dialog_number ,positive 
+7f67 d8400061 arg 0x61 ,temp 
+7f68 98467c00 isub temp ,null 
+7f69 20217f70 branch uchar2dialog_a2f ,positive 
+7f6a d8400037 arg 0x37 ,temp 
+7f6b 98467e00 isub temp ,pdata 
+7f6c 20600000 rtn 
+
+uchar2dialog_number:
+7f6d d8400030 arg 0x30 ,temp 
+7f6e 98467e00 isub temp ,pdata 
+7f6f 20600000 rtn 
+
+uchar2dialog_a2f:
+7f70 d8400057 arg 0x57 ,temp 
+7f71 98467e00 isub temp ,pdata 
+7f72 20600000 rtn 
+
+pn9:
+7f73 18426000 copy temp ,alarm 
+7f74 580001ff setarg 0x1ff 
+7f75 18002400 force 0 ,regb 
+
+pn9_loop:
+7f76 1fe92200 rshift3 pdata ,rega 
+7f77 1a232200 rshift rega ,rega 
+7f78 9a22a200 ixor rega ,rega 
+7f79 2a2ffe00 isolate1 0 ,rega 
+7f7a 7920fe09 setflag true ,9 ,pdata 
+7f7b 18430400 rshift temp ,temp 
+7f7c 2feffe00 isolate1 0 ,pdata 
+7f7d 79208407 setflag true ,7 ,temp 
+7f7e 1fe37e00 rshift pdata ,pdata 
+7f7f 1a40a401 increase 1 ,regb 
+7f80 2a400e00 compare 0 ,regb ,0x7 
+7f81 2420ff76 nbranch pn9_loop ,true 
+7f82 e0a88000 istoret 1 ,contw 
+7f83 c2007f76 loop pn9_loop 
+7f84 1e020400 copy alarm ,temp 
+7f85 20600000 rtn 
+
+wait_div_end:
+7f86 207a8000 rtn modone 
+7f87 20207f86 branch wait_div_end 
+
+compare_loop:
+
+string_compare:
+7f88 ea208000 ifetch 1 ,rega 
+7f89 ea488000 ifetcht 1 ,regb 
+7f8a 98467c00 isub temp ,null 
+7f8b 24628000 nrtn zero 
+7f8c 1a20a201 increase 1 ,rega 
+7f8d 1a40a401 increase 1 ,regb 
+7f8e c2007f88 loop string_compare 
+7f8f 18007c00 force 0 ,null 
+7f90 20600000 rtn 
+
+ceiling:
+7f91 98467c00 isub temp ,null 
+7f92 24610000 nrtn positive 
+7f93 18427e00 deposit temp 
+7f94 20600000 rtn 
+
+swap:
+7f95 9840fe00 iadd temp ,pdata 
+7f96 98460400 isub temp ,temp 
+7f97 98467e00 isub temp ,pdata 
+7f98 20600000 rtn 
+
+clean_mem:
+7f99 df200200 arg 0x200 ,loopcnt 
+7f9a d8a04000 arg 0x4000 ,contw 
+7f9b 20207ec6 branch memset0 
+
+callback_func:
+7f9c 207a0000 rtn blank 
+7f9d 1fe27a00 copy pdata ,pc 
+
+wait_uarttx:
+7f9e 6811010e hfetch 2 ,core_uart_txitems 
+7f9f 243a7f9e nbranch wait_uarttx ,blank 
+7fa0 20600000 rtn 
+
+ice_break:
+7fa1 70820301 jam 0x1 ,core_ice_ctrl 
+7fa2 20600000 rtn 
+
+ice_setbp:
+7fa3 60110205 hstore 2 ,core_ice_break0 
+7fa4 68108203 hfetch 1 ,core_ice_ctrl 
+7fa5 79207e04 set1 4 ,pdata 
+7fa6 60108203 hstore 1 ,core_ice_ctrl 
+7fa7 20600000 rtn 
+
+ice_setbp2:
+7fa8 60110207 hstore 2 ,core_ice_break1 
+7fa9 68108203 hfetch 1 ,core_ice_ctrl 
+7faa 79207e06 set1 6 ,pdata 
+7fab 60108203 hstore 1 ,core_ice_ctrl 
+7fac 20600000 rtn 
+
+ice_set_write_bp:
+7fad 60110205 hstore 2 ,core_ice_break0 
+7fae 70820330 jam 0x30 ,core_ice_ctrl 
+7faf 20600000 rtn 
+
+test_enable_white:
+7fb0 68108043 hfetch 1 ,core_config 
+7fb1 793ffe04 set0 whiteoff_bit ,pdata 
+7fb2 60108043 hstore 1 ,core_config 
+7fb3 20600000 rtn 
+
+check_uart_tx_buff:
+7fb4 6811010e hfetch 2 ,core_uart_txitems 
+7fb5 d8400200 arg uart_air_control_threshold ,temp 
+
+pdata_sub_temp:
+7fb6 98467c00 isub temp ,null 
+7fb7 20600000 rtn 
+
+fifo_in:
+7fb8 477f403f bpatchx patch3f_6 ,mem_patch3f 
+7fb9 ea2c0000 ifetcht util_fifo_len ,rega 
+7fba 18417eff and temp ,0xff ,pdata 
+7fbb 243a7fbe nbranch fifo_in_push ,blank 
+7fbc 184cfe00 rshift8 temp ,pdata 
+7fbd e2240000 istore util_fifo_len ,rega 
+
+fifo_in_push:
+7fbe 1a20a207 increase util_fifo_len + util_fifo_offset ,rega 
+7fbf ea208000 ifetch 1 ,rega 
+7fc0 243a2a8c nbranch assert ,blank 
+7fc1 68008a99 fetch 1 ,mem_fifo_temp 
+7fc2 e2208000 istore 1 ,rega 
+7fc3 20600000 rtn 
+
+fifo_out:
+7fc4 477fc03f bpatchx patch3f_7 ,mem_patch3f 
+7fc5 df200008 arg util_fifo_len ,loopcnt 
+7fc6 ea240000 ifetch util_fifo_len ,rega 
+7fc7 207a0000 rtn blank 
+
+fifo_out_loop:
+7fc8 ea208000 ifetch 1 ,rega 
+7fc9 243a7fcd nbranch fifo_out_end ,blank 
+7fca 1a20a201 increase 1 ,rega 
+7fcb c2007fc8 loop fifo_out_loop 
+7fcc 20202a8c branch assert 
+
+fifo_out_end:
+7fcd d8400000 arg 0 ,temp 
+7fce e2288000 istoret 1 ,rega 
+7fcf 20600000 rtn 
+
+fifo_is_empty:
+7fd0 ea240000 ifetch util_fifo_len ,rega 
+7fd1 20600000 rtn 
+
+fifo_is_full:
+7fd2 ea208000 ifetch 1 ,rega 
+7fd3 20600000 rtn 
+
+fifo_is_near_full:
+7fd4 ea210000 ifetch 2 ,rega 
+7fd5 20600000 rtn 
+
+fifo_content_count:
+7fd6 d8400000 arg 0 ,temp 
+
+fifo_content_count_loop:
+7fd7 68008006 fetch 1 ,contr 
+7fd8 c2007fd7 loop fifo_content_count_loop ,blank 
+7fd9 18408401 increase 1 ,temp 
+7fda c2007fd7 loop fifo_content_count_loop 
+7fdb 18427e00 copy temp ,pdata 
+7fdc 20600000 rtn 
+
+not_greater_than:
+7fdd 98467c00 isub temp ,null 
+7fde 24610000 nrtn positive 
+7fdf 18427e00 copy temp ,pdata 
+7fe0 20600000 rtn 
+
+disable_positive:
+7fe1 18007dff force -1 ,null 
+7fe2 20600000 rtn 
+
+enable_positive:
+
+disable_zero:
+7fe3 18007c01 force 1 ,null 
+7fe4 20600000 rtn 
+
+enable_zero:
+7fe5 18007c00 force 0 ,null 
+7fe6 20600000 rtn 
+
+enable_user:
+7fe7 78347c00 enable user 
+7fe8 20600000 rtn 
+
+disable_user:
+7fe9 78547c00 disable user 
+7fea 20600000 rtn 
+
+enable_user2:
+7feb 78367c00 enable user2 
+7fec 20600000 rtn 
+
+disable_user2:
+7fed 78567c00 disable user2 
+7fee 20600000 rtn 
+
+disable_blank:
+7fef 58000001 setarg 1 
+7ff0 20600000 rtn 
+
+enable_blank:
+7ff1 58000000 setarg 0 
+7ff2 20600000 rtn 
+
+reverse_byte:
+7ff3 1f227e00 copy loopcnt ,pdata 
+7ff4 207a0000 rtn blank 
+7ff5 18c27e00 copy contr ,pdata 
+7ff6 9f20fe00 iadd loopcnt ,pdata 
+7ff7 1fe0ffff increase -1 ,pdata 
+7ff8 1fe20c00 copy pdata ,contr 
+
+reverse_loop:
+7ff9 e8c08000 ifetch 1 ,contr 
+7ffa 18c08dfe increase -2 ,contr 
+7ffb e0a08000 istore 1 ,contw 
+7ffc c2007ff9 loop reverse_loop 
+7ffd 20600000 rtn 
+rtn 
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/ramcode.rom
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/ramcode.rom	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/ramcode.rom	(working copy)
@@ -0,0 +1,1192 @@
+c2840012
+c0000027
+c000802a
+c0010032
+c0428473
+c0448444
+c050803b
+c0588040
+c059004a
+c06202ce
+c064832d
+c0650331
+c07183c2
+c07303ce
+c07503d7
+c07583dc
+c07603ed
+20202a8e
+c01f8015
+c04603f1
+20202a8e
+70890f36
+70890b5f
+783b7c00
+70891407
+6800c1e0
+207a0000
+70890ab8
+20600000
+1fe22200
+6808cc70
+58004c77
+98408a00
+1a227e00
+e0a08000
+18408401
+18410407
+6008cc70
+20600000
+6810813b
+6000cb26
+20202002
+d8a009ae
+df20000c
+20407ed4
+20406a03
+20405cf6
+2455ac65
+20407ccd
+2020200c
+2055b2e3
+2040756a
+2055ab41
+204076dc
+6800c65a
+203a2012
+6800c5b1
+203a0035
+20202012
+58000a06
+6001c510
+58001d87
+60014513
+20202aa2
+c6130000
+6800c79c
+203a7fef
+6800c7c4
+c000ffef
+68014248
+243a7fef
+6800c806
+243a7fef
+20207ff1
+c6930000
+6800ccf5
+c000805b
+204000e4
+24340070
+204000cb
+20400106
+6800cbc5
+c1ff8000
+20400417
+20400076
+24740000
+204002bf
+5800ec54
+20407f49
+600a415b
+20202b2a
+2040028b
+24740000
+20400067
+2020004d
+704cf500
+704cf600
+704bf000
+6800cbdb
+6000cbda
+20600000
+6800cbdc
+20200063
+6800cbf0
+1fe0fe01
+6000cbf0
+c0020065
+c0028061
+20600000
+704cf501
+704cf600
+20600000
+6800cbe1
+205a007f
+20400076
+24740000
+6801cbe4
+20200058
+78347c00
+20402afa
+6801c16f
+203a7fe9
+6800c091
+203a7fe9
+6800ccf5
+c000ffe9
+202002c2
+704be101
+704cea00
+20400093
+6000cb51
+58000000
+6003cb52
+68024bec
+60024b59
+704bb50c
+6800cbb6
+79207e03
+6000cbb6
+204000e7
+20200050
+204068a8
+680240a0
+60024bec
+20600000
+704ceb01
+704ced00
+6800cbb6
+1fe17e07
+6000cbb6
+20600000
+6800cbb6
+79207e04
+6000cbb6
+6000cb71
+20600000
+6800cbb6
+793ffe04
+6000cbb6
+20600000
+2040040d
+6800ccec
+c00080a5
+c00100a9
+20600000
+704ced02
+704ce900
+704ceb00
+20200093
+704cea00
+202000a6
+68014bbb
+1fe0fe01
+60014bbb
+c2830149
+6800ccea
+c00080b4
+704cea01
+6800ccea
+c0808093
+6800cce8
+1fe0fe01
+6000cce8
+c00200bb
+20400203
+704bfa02
+20200106
+2040040d
+704ce800
+20200093
+704ced02
+704ceb01
+704cea00
+20200093
+6800ccec
+c00180bf
+6800cbb6
+2fec0004
+20208091
+6800ccec
+c00080be
+c00100bf
+20600000
+6800cbc5
+c1ff8000
+204000d0
+245600d8
+20600000
+78567c00
+6800cceb
+c1808000
+6800cced
+c1800000
+704cec01
+704bfa04
+20207feb
+6800cced
+203a00df
+1fe0ffff
+6000cced
+704cec02
+704bfa04
+20200203
+704cec03
+6800ccea
+243a00b2
+704bfa02
+20200203
+6800cbc5
+c0ff815d
+204000ea
+204001f1
+704bba01
+20600000
+68014ce6
+20407f9c
+203400f0
+6803cb52
+207a0000
+20207fe7
+704be100
+1a20fe01
+6000cbb5
+20400093
+6000cb51
+e8a88000
+ea408000
+9841fe00
+e0a08000
+1a40a401
+ea420000
+e0a20000
+1a40a404
+d8a04b57
+df200002
+ea408000
+e8a88000
+9840fe00
+e0a08000
+1a40a401
+c20000ff
+20600000
+704bbe00
+d9600d00
+34730200
+20400122
+6800cbf1
+c1008000
+242c0131
+24378131
+2040011d
+2040014d
+20400409
+6800cbb4
+1fe0fe01
+6000cbb4
+6800cbc5
+c0ff8120
+204000c2
+58000000
+60014bbb
+6000cbbd
+6000cce9
+704bba00
+20600000
+df200004
+d8a04b51
+20207ec6
+20400406
+20200177
+7857fc00
+2040026a
+6800cbf1
+c000812f
+18002a00
+68024bdd
+98001200
+68088017
+2040291f
+20402924
+20400226
+20578262
+20600000
+20400262
+20200111
+6800cbbd
+1fe0fe01
+6000cbbd
+6800cbc5
+c0ff8145
+6808cbbe
+18408401
+6008cbbe
+6800cbfa
+98467e00
+243a0107
+6800ccec
+c00180ab
+6800cce9
+1fe0fe01
+6000cce9
+c00100a0
+20400097
+704bfa01
+20200106
+6800cbbd
+c1ff8000
+704bbd00
+2020014b
+58000000
+60014bbb
+700a993a
+20207d86
+204001d6
+6800cbb3
+207a0000
+98007200
+d8c04b31
+d8a04b93
+20207f01
+79200026
+20400158
+704bc501
+20600000
+7041de20
+704bb400
+704bbf4e
+68024bc1
+202001e3
+6800cbba
+c000ffe7
+6800cbc5
+c0008164
+c0010167
+c001816a
+20202a8c
+704bc511
+70119eaa
+2020016c
+704bc512
+70119e55
+2020016c
+704bc513
+70119e22
+6800cbb6
+1fe17e07
+6000919f
+68024bec
+600211a0
+7011a400
+da20119e
+d8400007
+204001d1
+204000e7
+20207fe7
+6800cbc5
+c17f8000
+c008817d
+c009017f
+c0098181
+20600000
+704bc502
+20200117
+704bc503
+20200117
+704bc5ff
+700a9939
+20407d86
+68024b95
+204001e3
+20200117
+793f8026
+204001c7
+6800cbc5
+c1ff8000
+2040019c
+58000000
+60014be2
+20402afa
+200007d0
+6800cbe2
+c07f814b
+20400122
+242c01a5
+243781a5
+79200026
+58000000
+60014be2
+700a993c
+20407d86
+2040011d
+2020006d
+70119eff
+6800cbb6
+6000919f
+68024bec
+600211a0
+d8400006
+da20119e
+204001d1
+202001f1
+68014be2
+1fe0fe01
+60014be2
+20400203
+2020018e
+793f8026
+204001c5
+2040019c
+704be200
+20402afa
+200007d0
+6800cbe2
+c07f814b
+20400122
+242c01bb
+243781bb
+2040014d
+68024bdd
+680a4bc1
+98467c00
+20228154
+20200195
+6800cbe2
+1fe0fe01
+6000cbe2
+6800ccf3
+1fe0fe01
+1fe17e01
+6000ccf3
+c00001c9
+c00081cb
+20600000
+7041de20
+20400328
+204001e4
+20200203
+204001c5
+202001ae
+20400158
+202001ae
+793f8026
+204053ce
+d8e00003
+202043d2
+6008cbb5
+18427200
+d8a04b51
+1a220c00
+20207f01
+6800cb30
+1fe97e00
+6000cbb3
+1fe0fe01
+d8c04b30
+98c08c00
+e8c18000
+6001cbf2
+6800cb30
+1fe37e00
+1fe17e03
+6000cbf8
+20600000
+60024bdd
+da200000
+df200004
+d8c04bdd
+e8c08000
+9a20a200
+c20001e7
+1a227e00
+60014c66
+6800cc66
+6808cc67
+9840fe00
+6000cc68
+20600000
+6800cbb5
+1fe0fe02
+6000cbb7
+6800cbb6
+6000cb71
+6800cbb5
+1fe9fe00
+6808cbb4
+18410403
+18438400
+9841fe00
+6808cbf1
+9840fe00
+e0a08000
+6800cbb5
+98007200
+d8c04b51
+20207f01
+6808cbc0
+20400207
+6008cbc0
+20600000
+2040020b
+18408401
+18410403
+20600000
+6800cbdd
+1fe17e03
+1fefa204
+58004bc6
+9a20fe00
+98408c00
+e8c08000
+6000cbbf
+20600000
+7844fc00
+7843fc00
+58555555
+98001e00
+6800cbbf
+1fed8400
+79200401
+18431c00
+20600000
+204053c4
+68024bdd
+98001200
+20402918
+6808cbbf
+2040291f
+58000500
+20402a8f
+20402924
+20400214
+7857fc00
+7826fc00
+7830fc00
+78507c00
+78287c00
+68014bb8
+98003600
+37c18400
+242c0266
+7846fc00
+7825fc00
+7823fc00
+7824fc00
+2040025f
+6000cc69
+6808cc68
+98467c00
+24228262
+2040025f
+6000cb2f
+6800cbfb
+1fe67c02
+20228242
+6800cb2f
+6808cbb6
+a8400e00
+24208262
+2040025f
+e0a08000
+1fe97e00
+1fe1721f
+2022824a
+2040025f
+e0a08000
+c2000247
+18a22200
+2040025f
+6000ccf0
+1a220a00
+09800018
+78287c00
+db600664
+1fef7e00
+1ff17e00
+e0a18000
+7845fc00
+20230262
+7837fc00
+68008017
+1fe0a200
+20402981
+7846fc00
+20402918
+6800ccf0
+2040001d
+20600000
+09800008
+19897e00
+20600000
+784dfc00
+7845fc00
+2040264d
+20600000
+20200262
+20402918
+6808cbbf
+20202933
+204053c4
+68024bdd
+98001200
+20400214
+20400267
+79202a00
+782efc00
+78307c00
+7850fc00
+19317e00
+1fecfe00
+1ff1fe00
+08008628
+784efc00
+782dfc00
+7823fc00
+7824fc00
+6800cc68
+08008608
+6800cbb7
+98007200
+d8c04b71
+e8c08000
+08008608
+c2000280
+78247c00
+08008618
+78447c00
+37d38200
+20000064
+784efc00
+784dfc00
+20600000
+20407fe9
+680a4bd6
+1c427e00
+98467c00
+24412d18
+1fe22400
+68024bd6
+6808cbda
+98408400
+1a427e00
+98467c00
+24610000
+793ffe1c
+60024bd6
+20207fe7
+204029bb
+207a0000
+6808cc6f
+da200d9e
+204002a1
+6008cc6f
+20600000
+1a227e00
+98408a00
+68008018
+e0a08000
+18408401
+18410407
+20600000
+d8400000
+df200008
+1a220c00
+e8c08000
+98408400
+c20002ab
+18497e00
+1fe20400
+c6930000
+1fe6fc0a
+20407f86
+1807fe00
+1ff27e00
+18070400
+98418400
+20600000
+20600000
+c6130000
+204002c2
+6800c040
+c30002bf
+680080a0
+247a0000
+58000000
+600400a1
+20600000
+204002cb
+204002bf
+20403ebf
+68120070
+681a0078
+98418400
+18440400
+601a007c
+20600000
+6800cafe
+207a0000
+202003c3
+20403416
+203582d6
+6800c1de
+6000cc6c
+20400406
+6800c685
+6000c6da
+204043ca
+204002db
+202074b9
+6800cc6c
+6000c1de
+20600000
+2455831a
+204002f9
+20758000
+2040034d
+6800cb26
+c28102e3
+20404083
+c00282e7
+20200335
+204002d8
+6800c210
+20600000
+680246d3
+c4088000
+c3818000
+c6130000
+20404482
+d8e00003
+204043ce
+58000000
+600146ae
+6000c6b4
+60014be2
+204042ca
+20200154
+680246d3
+c30a3d66
+6800c77a
+c07fbd66
+20203d80
+70421276
+20203d36
+204002f9
+204040c0
+6800c6e0
+c002c0d5
+204040d9
+c0180309
+c018830b
+204040d1
+200003e8
+202002ff
+704afe01
+2040640f
+204002fb
+20206411
+20400310
+202040e0
+20400310
+6800c6de
+c03840e8
+7046e001
+20600000
+58008006
+20406413
+20002ee0
+202002f4
+58000006
+20406414
+1fe1fe08
+1fed7e00
+1fe0fe06
+20206413
+2040008d
+68108a00
+793ffe04
+60108a00
+20403e1e
+58000000
+60014154
+20403e54
+2040659c
+680246d3
+2feffe19
+2440e5c2
+2040443f
+2040032a
+20400373
+202065df
+204033c4
+2022c316
+20203dcb
+d8400002
+da200aaa
+da400062
+202065d1
+d8400002
+da200a9a
+da400062
+202033c8
+202001aa
+680246d3
+c30f033d
+68008abd
+2fec0003
+2420833d
+204002fb
+20400314
+6800c71f
+6000c71e
+680246d3
+c4088000
+20400344
+203401aa
+20200187
+df200002
+d8c04bdd
+20407fe7
+5800ffff
+e8c90000
+98467c00
+2442ffe9
+c2000348
+20600000
+58000364
+600141f5
+58000352
+60014ce6
+20600000
+20200357
+20404401
+6801469f
+207a0000
+2020006d
+20400475
+20200354
+6801469f
+207a0000
+70480601
+70480702
+20600000
+20405814
+70479c01
+20200310
+20407e34
+20403d6a
+20203ee0
+1a627e00
+c01c8369
+c01d0377
+c01e0382
+2020417d
+70478b01
+d8e00003
+204043d2
+58000000
+60014707
+7046a700
+2040405d
+2040006d
+20400373
+202065d1
+da204bdd
+da40005b
+d8400004
+20600000
+704cf500
+204002d8
+204001cd
+2020659a
+7041bd00
+20404316
+df200003
+d8c04722
+20400346
+203403bf
+202002e4
+20203f8d
+78347c00
+68120138
+79347e1a
+6012004c
+20402c21
+2040038d
+204074bd
+20404482
+20403e9f
+202002c4
+6800cafe
+207a0000
+704afe00
+20200314
+20400396
+204003b6
+2040039b
+20404234
+2020423a
+da604807
+da400399
+2020336d
+70480600
+20600000
+6800c6f5
+c2824394
+20404083
+c00383a7
+6800c685
+6000c6da
+6800c6db
+c1008000
+7046db01
+d8e00009
+204043d2
+202043ca
+70479e28
+204003aa
+202043b0
+da6046da
+da4003ad
+2020336d
+68014682
+2feffe0b
+2040c2d4
+68014682
+2feffe07
+2040c392
+d8e00009
+204043ce
+202043b8
+6800c79d
+207a0000
+6800c79e
+203a03bd
+1fe0ffff
+6000c79e
+20600000
+70479d00
+2020340a
+70479d01
+70479e28
+20600000
+2040424a
+6800c6e0
+c00303c6
+20203d81
+6800c77a
+205a03cc
+6800c77a
+c000bd8a
+c001bd8e
+20203d8c
+70477a01
+20600000
+78547c00
+58000000
+6003469b
+20403fb5
+20404079
+2040407e
+20404099
+24740000
+20203fa0
+70479d00
+70479e00
+280ffe26
+204081cd
+2020426d
+204002d8
+70479c00
+68014682
+c28583e2
+680246d3
+c30c03e2
+20403418
+68014687
+600146ac
+70016d06
+58000000
+600146b0
+600146ae
+d8e00007
+204043ce
+204043ca
+202042c4
+58000000
+600146ac
+20400310
+202042cb
+68108077
+1fe17efd
+60108077
+68188073
+18418402
+60188073
+204063ee
+184104fd
+2000000d
+204063f2
+60188073
+20600000
+204062bc
+243a7ddb
+68008a99
+c584fdd6
+c0090403
+20207dca
+20405890
+247a0000
+20205abf
+704cf101
+704cee00
+20600000
+6800ccee
+1fe0fe01
+6000ccee
+20600000
+6800ccee
+1fe67c02
+24410415
+6800ccee
+c1000000
+1fe0ffff
+6000ccee
+20600000
+704cee03
+20600000
+20600000
+68014682
+c3858000
+c3838000
+c3830000
+da204c77
+204002a8
+6008ccef
+58000082
+c5130422
+58000080
+98467c00
+2421043a
+6800ccee
+1fe67c02
+2421042a
+6800ccee
+c000043b
+20600000
+6800ccee
+c1900000
+704cee00
+6808ccef
+58000077
+c5130431
+58000075
+98467c00
+24610000
+6800ccf1
+c0000442
+1fe0ffff
+6000ccf1
+c0000442
+7041de00
+20600000
+704cee00
+6800ccf1
+c0010440
+1fe0fe01
+6000ccf1
+c0008438
+7041de02
+20600000
+7041de04
+20600000
+60088017
+1840a200
+20402981
+58000500
+20402a8f
+70890601
+7089003c
+708901e0
+2000000a
+70890201
+7089023d
+2000000a
+708903b7
+2000000a
+7089027d
+6800c1de
+c001045c
+c0020461
+c0100470
+20400466
+708955d0
+708956e0
+7089586c
+2020294b
+2040046b
+708955d0
+708956e0
+7089583c
+20202953
+20400466
+708955d0
+708956c0
+7089586c
+2020295b
+70894c5b
+70894d96
+70894e2c
+70894f46
+20600000
+70894cfb
+70894def
+70894eec
+70894f5e
+20600000
+708956c5
+708955d0
+20600000
+18002a08
+202028fa
+6800cb2e
+1fe0fe01
+6000cb2e
+1fe67c32
+20210481
+1fe67c64
+2021048c
+1fe67c96
+20210494
+1fe67cc8
+2021049c
+20600000
+58000005
+60014b28
+58000000
+60014b2a
+6000cb2c
+6000cb27
+6000cb2d
+78347c00
+da200007
+da404b27
+20600000
+58000005
+60014b2a
+58000000
+60014b28
+6000cb2c
+6000cb27
+6000cb2d
+20200488
+5800fffb
+60014b28
+58000000
+60014b2a
+6000cb2c
+6000cb27
+6000cb2d
+20200488
+6800cb2e
+c06404a6
+5800fffb
+60014b2a
+58000000
+60014b28
+6000cb2c
+6000cb27
+6000cb2d
+20200488
+704b2e00
+2020049e
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/romcode.rom
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/romcode.rom	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/romcode.rom	(working copy)
@@ -0,0 +1,24576 @@
+20402abc
+44804000
+20800000
+2040640d
+2040296c
+204065a3
+20402a96
+20404d6a
+4480c000
+20406a03
+20405cf6
+20407ccc
+204032d8
+2455e89c
+44814000
+2055b2e3
+2040756a
+2055ab41
+4481c000
+204076dc
+20407aaf
+2040756d
+2040535c
+44824000
+20402038
+204032ed
+2040208f
+204022f8
+2040236a
+20402021
+20402b6a
+20402c72
+20202012
+20402026
+c6848000
+793f8009
+20402223
+202053ce
+4482c000
+2040225e
+2422a02f
+2040220a
+1a208c01
+e8c08000
+c2805360
+c280a166
+202023cf
+2040222b
+1f227c00
+20628000
+2040220a
+68008030
+c281a0d3
+68008031
+c280a166
+202023cf
+6800c1ce
+207a0000
+c000a048
+c001204d
+c001a050
+c002a055
+c00da045
+20402257
+20628000
+2040225a
+20628000
+7041ce00
+20600000
+70049b1b
+7041ce00
+20600000
+7920001c
+793f801e
+70008fff
+70008d1f
+20202043
+793f801c
+18003600
+20202043
+2040225a
+20628000
+18000401
+70016e05
+2020205c
+44834000
+680341d0
+203a2043
+70468101
+70005503
+2020205b
+18000425
+4483c000
+680080f1
+203a2062
+1fe9fe00
+1ff27e00
+1fe0ffff
+6000c0a6
+600080f0
+70008e1f
+793f800c
+2040223b
+2422a083
+20402a6f
+60008077
+6008807c
+680341d0
+60030040
+44844001
+20407f15
+18007e00
+2841fe01
+7d20fe05
+79207e03
+60008030
+700a9903
+20407d86
+18007e00
+7920fe04
+6000804c
+58000000
+79207e01
+60008031
+7834fc00
+20402223
+7854fc00
+18000e03
+680140b9
+20407f08
+20202043
+4484c001
+680341d0
+60030040
+2841fe01
+2020a089
+20202043
+d8a00101
+df200008
+20407ec6
+700a9904
+20407d86
+20202043
+c68e0000
+18000e01
+20407f16
+7d3a001c
+243a2095
+20600000
+44854001
+680940bb
+18000e04
+2040271c
+20740000
+204028a4
+18004800
+20618000
+793f800b
+793f8000
+1c40c201
+280ffe1e
+7920c802
+2c200400
+2420a0be
+4485c001
+68008012
+1fe0fe01
+60008012
+204028d8
+204028d2
+204028f2
+20402a51
+20402a56
+20402a64
+2040264d
+204020b1
+2020209c
+44864001
+6800808d
+1fe0ffff
+6000808d
+20610000
+70008d1f
+6800808f
+1fe0ffff
+6000808f
+20610000
+7940001e
+70008fff
+20600000
+4486c001
+204028d8
+204028cc
+204028f2
+20402a5b
+204029eb
+20402a0d
+202c20c8
+204020b1
+2020209f
+44874001
+204029bb
+20402a6b
+2040251e
+793f8001
+c6858000
+4487c001
+68008013
+1fe0fe01
+60008013
+20600000
+44884002
+7834fc00
+78387c00
+680140b5
+203a20db
+18000e08
+20407f16
+247a0000
+4488c002
+680940b7
+18000e28
+2040271c
+20342114
+18000e03
+20407f16
+243a20f0
+6800804c
+c28220e6
+202020e9
+d8a00101
+df200008
+20407ec6
+44894002
+70003000
+20405cf7
+70468100
+700a9913
+20407d86
+20202114
+4489c002
+18001600
+34730200
+680080f2
+1fe0ffff
+9c42fe00
+2fe00600
+2420a0f0
+18827e00
+60008181
+18004c00
+18004800
+448a4002
+2021a114
+204028dc
+d9600600
+34730200
+448ac002
+680200f2
+98004200
+1fe0fe01
+600200f2
+280ffe0c
+7920c802
+2c200400
+2420a128
+6800800c
+1fe0fe01
+6000800c
+204028d2
+20402a51
+20402a56
+20402a64
+2040264d
+2040211a
+202020fc
+448b4002
+7854fc00
+680140b5
+207a0000
+18000e08
+20207f08
+448bc002
+6800808e
+1fe0ffff
+6000808e
+20610000
+70008e1f
+680080f0
+1fe0ffff
+600080f0
+20610000
+7940000c
+6800c0a6
+600080f0
+20600000
+448c4003
+204028cc
+20402a5b
+204029eb
+20402a0d
+202c2130
+2040211a
+20202101
+2040264d
+6800800d
+1fe0fe01
+6000800d
+18003600
+680200f2
+448cc003
+20402a4f
+204028dc
+1cc0cc01
+1c2143fd
+1c8149fc
+204028d2
+20402a51
+20402a56
+20402a64
+1c427e00
+60020161
+18000800
+18000202
+20402a6b
+20402766
+448d4003
+20402a4d
+1c21c202
+1c8149fc
+204028cc
+20402a5b
+204029eb
+20402a0d
+204c264d
+202c2155
+68008010
+203a20fc
+1fe0ffff
+60008010
+20202136
+448dc003
+6800800e
+1fe0fe01
+6000800e
+20402435
+204022f2
+202c215f
+20402455
+243a215a
+202020fc
+448e4003
+68008030
+793ffe03
+60008030
+20402440
+7854fc00
+20600000
+448ec003
+7834fc00
+78387c00
+204021e1
+20740000
+20402c69
+20402a4f
+1c40c201
+204028e2
+18004803
+20406cc2
+20402489
+204028d2
+20402a51
+20402a56
+20402a64
+20402762
+448f4003
+20405d08
+204022e4
+2436a180
+20402a88
+20402728
+6800800f
+1fe0fe01
+6000800f
+448fc003
+20406caa
+2040218b
+24748000
+204026f3
+243a2188
+7854fc00
+20600000
+20402489
+204022da
+20202177
+2036a18e
+20402a7f
+2021219c
+204021a7
+2434219c
+6800804c
+c4020000
+c3818000
+6800804b
+c3818000
+204021ae
+247a0000
+6800816e
+1fe0ffff
+6000816e
+247a0000
+20206006
+44904004
+2040245d
+7854fc00
+6800804c
+c28221a2
+20600000
+6800804c
+c3818000
+d8a00101
+df200008
+20207ec6
+4490c004
+78347c00
+6800804b
+c4018000
+204021ae
+247a0000
+20207fe9
+68008072
+1fe0ffff
+60008072
+20600000
+44914004
+68008030
+c283a1bb
+680089b5
+203a21bb
+7009b500
+700a9918
+20407d86
+202021bb
+4491c004
+20402254
+68008030
+79207e07
+60008030
+7041bd01
+68008055
+c08b21c3
+20600000
+7009b501
+68008030
+793ffe07
+60008030
+20600000
+44924004
+78547c00
+68010032
+d840ffff
+98467c00
+24628000
+68020034
+203821d3
+9d067e00
+202021d4
+9c467e00
+1fe67c04
+24610000
+18007e00
+60010032
+20207fe7
+1fe20400
+4492c004
+600a0034
+70455b01
+5800ffff
+60010032
+70007301
+20600000
+44934004
+204021c9
+24740000
+78547c00
+70001120
+793f800b
+20402a4f
+204022e6
+c505a1f4
+20402455
+243a21e7
+4493c004
+78547c00
+1c427e00
+600240ca
+78387c00
+7834fc00
+700a992a
+20207d86
+44944005
+20402a4d
+d8200010
+204022dc
+78587c00
+7854fc00
+20402818
+20402435
+4494c005
+2040247c
+2036a202
+20402455
+243a21fc
+202021ec
+68008031
+793ffe01
+60008031
+20402a88
+20402841
+78347c00
+700a992b
+20207d86
+44954005
+79200009
+1a227e00
+6001001e
+18007250
+d8a0043f
+1a208c01
+e8c08000
+1a220c00
+c2807f01
+d8a00030
+20407f01
+78577c00
+68008077
+98000800
+70008a01
+2034a21c
+70008a01
+68008030
+c4008000
+68008073
+6000808a
+68008074
+6000808b
+20600000
+4495c005
+6801001e
+98000a00
+18007250
+d8c0043f
+203b7f01
+d8c00030
+20207f01
+df200001
+68088015
+18408401
+2841fe01
+2420a231
+d8400000
+60088015
+184ffe50
+da204040
+9a20a200
+ea208000
+c280a239
+c3800000
+c3818000
+c200222d
+20600000
+44964005
+da60226a
+20402261
+24628000
+1a227e00
+6001001e
+18007c00
+20600000
+20402725
+2020a24b
+6801001e
+1fe08a17
+68008047
+e0a08000
+da6022aa
+20202261
+68008047
+2feffe03
+2020a250
+18007c01
+20600000
+18007c00
+20600000
+da6022a7
+20202261
+6809001e
+da6022cf
+20202261
+6808c1cf
+da602275
+20202261
+4496c005
+680b41d0
+da60226e
+20202261
+da60227b
+20202261
+da6022c6
+44974005
+da204040
+df200001
+ea208000
+1a627a00
+1a20a250
+c2002264
+18007c01
+20600000
+c2802266
+c281a266
+18007c00
+20600000
+c281a270
+c3002266
+1a208c10
+e8c30000
+98467c00
+20628000
+20202266
+c3002266
+1a208c16
+e8c08000
+98467c00
+20628000
+20202266
+c300a266
+204022b3
+20402297
+98467e00
+1fe0fe01
+20212291
+18c22400
+60048aa2
+6800c4c0
+243a2289
+68048aa2
+1a420c00
+1fe0fe05
+2020228c
+68048aa2
+1a420c00
+1fe0fe14
+24212266
+18424200
+204022bf
+18007c00
+20600000
+98002400
+1a208c02
+e8c10000
+203a228d
+204022bf
+2020227c
+1ff11600
+196c9600
+2022a2a1
+29601e0f
+24608000
+18511600
+196c9600
+24628000
+7920041c
+20600000
+18511600
+196c9600
+29601e0f
+24608000
+79207e1c
+20600000
+c3002266
+18007c00
+20600000
+c3002266
+1a208c01
+e8c08000
+c2802266
+1a208c17
+e8c08000
+c301a266
+18007c00
+20600000
+1a208c01
+e8c88000
+1c427e00
+284ffe01
+1a208c04
+e8ca0000
+20608000
+1a208c08
+e8c30000
+20402854
+1d027e00
+20600000
+1a208c02
+1a208a04
+e8c10000
+98409600
+19627e00
+e0a20000
+20205449
+c300a266
+204022b3
+9b60fe00
+9b60fe00
+98e0fe00
+98467c00
+24212266
+18007c00
+20600000
+c3002266
+18427e00
+9a267c00
+203f2266
+1a208c01
+e8c08000
+c2802266
+ea208000
+793ffe07
+e2208000
+20202266
+4497c005
+20402a4f
+1c40c201
+204028e2
+18004803
+204028d2
+20402a51
+20402a56
+20402a64
+20202762
+44984006
+20402a4d
+1c40c201
+204028e2
+18004803
+204028cc
+2040242a
+204029f1
+20402a5b
+204029eb
+20402a0d
+246c0000
+204029bb
+2020251c
+4498c006
+68008181
+98000800
+18000201
+204022da
+202022e4
+6800c093
+c4000000
+18000e04
+20407f16
+247a0000
+680940ad
+18000e04
+2040271c
+20740000
+20402308
+18000e04
+680140af
+242c7f08
+180a7e00
+9ea17e00
+20207f08
+44994006
+70018100
+78587c00
+78577c00
+204028a4
+1c4143fc
+18004801
+204028d8
+204028cc
+7940001d
+68008006
+1fe0fe01
+60008006
+204028f2
+204029eb
+20402a14
+246c0000
+4499c006
+18003600
+204028f9
+68008007
+1fe0fe01
+60008007
+204028d8
+20402a4d
+1c21c202
+18004801
+204028d2
+204028f2
+20402a51
+20402a5f
+1c427e00
+60020161
+20402a64
+18000202
+18000800
+20402a6b
+20402766
+20402332
+1c2143fd
+1cc0cc01
+20600000
+449a4006
+6800c0d1
+207a0000
+d8a0018e
+6800c515
+1fe27200
+1fe0fe01
+e0a08000
+18a20400
+1fe0fe01
+600141dc
+18420a00
+58000009
+e0a08000
+d8c04516
+20407f01
+da60458d
+df200004
+20402354
+da604577
+df200001
+20402354
+1800020a
+7041db02
+5800018e
+6001016f
+20402a4d
+204028d2
+20402a51
+20402a5f
+20402a64
+20402a6b
+20402766
+20600000
+18a20400
+1a620c00
+e8c08000
+207a0000
+1fe3fe00
+c2002358
+1fe22200
+1fe0fe02
+1fe20e00
+680141dc
+98e0fe00
+600141dc
+18420a00
+1a227e00
+1fe0fe01
+e0a08000
+1a620c00
+e8c08000
+e8c08000
+e0a08000
+1a227200
+20207f01
+6800c093
+c4008000
+18000e05
+20407f16
+247a0000
+680940b1
+18000e28
+2040271c
+20740000
+18000800
+70001008
+793f800b
+2040237a
+18000e05
+680140b3
+20207f08
+449ac006
+78587c00
+204028a4
+68008008
+1fe0fe01
+60008008
+18004c00
+204028e2
+1c40c201
+18004802
+449b4006
+204028cc
+204029eb
+20402a14
+246c0000
+204028f9
+68008009
+1fe0fe01
+60008009
+18003600
+20402a4d
+1c21c202
+18004801
+204028d2
+20402a51
+20402a5f
+20402a64
+2040264d
+18000800
+d9600600
+35330200
+1d01d003
+1c2143fd
+449bc006
+1cc0cc01
+204028cc
+204029eb
+20402a07
+242c23a4
+20402a6b
+2040251e
+c505a3ab
+449c4007
+68008010
+207a0000
+1fe0ffff
+60008010
+20402a4f
+2020239b
+449cc007
+793fd001
+79205000
+6800800a
+1fe0fe01
+6000800a
+20402a4d
+1c21c202
+204028d2
+20402a51
+20402a5f
+20402a64
+2040264d
+2d000603
+2020a3bc
+37cb8200
+202023b8
+68020165
+1fe1fe03
+1fe25000
+449d4007
+68030178
+60030040
+20402435
+2040247c
+2036a3c8
+20402455
+243a23c3
+20600000
+449dc007
+20402440
+2040223b
+24628000
+70003100
+20402841
+20202223
+449e4007
+20402850
+204023f3
+20740000
+449ec007
+20402c69
+20406caa
+20402514
+2436a3e2
+20402a88
+20406cc2
+20402489
+20402757
+20402728
+20405d08
+6800800b
+1fe0fe01
+6000800b
+20402841
+449f4007
+20402bb1
+20402a7f
+202123eb
+204021a7
+243423eb
+204026f3
+243a23d3
+20600000
+449fc007
+70015100
+70017f00
+2040245d
+793f8011
+20407fb0
+68008030
+20600000
+44a04008
+204021c9
+24740000
+18820400
+20402a6f
+60008181
+18420800
+70001120
+44a0c008
+20402a4f
+18000202
+2040274f
+1c427e00
+60020161
+20402762
+20402a4d
+7837fc00
+204024f6
+202c240d
+204028f9
+20402455
+243a23fb
+c6820000
+70007c34
+79200003
+20600000
+78387c00
+20402435
+204028a4
+44a14008
+204022f2
+202c2419
+20402455
+243a2410
+78587c00
+1d027e00
+600240ca
+20600000
+7834fc00
+c582241f
+793f8004
+70007c03
+70007d33
+204062f8
+18827e00
+60008077
+18007e00
+60030038
+68008031
+79207e01
+60008031
+20402a88
+7854fc00
+78347c00
+20600000
+44a1c008
+7856fc00
+793f8005
+793f800a
+793f8010
+793f800f
+68008047
+793ffe05
+79207e04
+60008047
+20600000
+44a24008
+70001120
+70004750
+680140bf
+6001003e
+1c427e00
+600240ca
+20780000
+1d027e00
+600240ca
+20600000
+44a2c008
+20405d04
+20402459
+60008046
+58000000
+6001025d
+58001c80
+60010051
+68008030
+79207e00
+60008030
+70004b00
+70004c00
+7000a000
+20202a88
+44a34008
+18007e00
+600441be
+e0a40000
+204021c5
+20202254
+68008011
+1fe0ffff
+60008011
+20600000
+6800c0cf
+1fe0fe01
+6000c0cf
+20600000
+44a3c008
+6800c1ce
+c001a462
+68008048
+c080a466
+20404d06
+2422a466
+204021a4
+7041ce00
+44a44009
+204033af
+204026e9
+700a9902
+20407d86
+20405cf7
+20404d6b
+2040757d
+68008030
+793ffe00
+60008030
+70468100
+6800804c
+2fe18000
+2020a476
+793f8001
+68008047
+c301a478
+6800804b
+c4030000
+793f8002
+20600000
+44a4c009
+68008174
+207a0000
+1fe20800
+20402514
+24768000
+18000200
+20402757
+18827e00
+60008077
+18007e00
+60008174
+20600000
+44a54009
+68008030
+c3012496
+18000207
+c583a495
+20402725
+2420a496
+20372496
+204024c1
+58000002
+600140c8
+20600000
+24770000
+44a5c009
+20402243
+2422a4a7
+68008047
+c301a4b0
+c502a4b4
+6800817f
+c28324ba
+680140c8
+1fe0ffff
+600140c8
+203a24a5
+6800c0c5
+98000200
+20600000
+44a64009
+20402687
+20402725
+2020a4b0
+2040600a
+203424be
+6800804b
+c28324c0
+c502a4b4
+6800817f
+c28324ba
+18000201
+20748000
+18000200
+20600000
+44a6c009
+68008019
+98000200
+c1808000
+18000200
+20600000
+68008158
+1fe1020f
+79200005
+20600000
+18000213
+202024c1
+204024ca
+44a74009
+68088047
+79200403
+60088047
+18227e00
+6000c0c5
+5800ffff
+600140c8
+20600000
+44a7c009
+6800804c
+2feffe05
+680141dc
+2020a4e0
+18000203
+1fe67c11
+20610000
+18000204
+1fe67c1b
+20610000
+1800020a
+1fe67c79
+20610000
+1800020b
+1fe67cb7
+20610000
+1800020e
+1fe67ce0
+20610000
+1800020f
+20600000
+18000203
+1fe67c11
+20610000
+18000204
+1fe67c36
+20610000
+1800020a
+d840016f
+98467c00
+24610000
+1800020e
+d84002a7
+98467c00
+24610000
+1800020f
+20600000
+68008030
+c300a4f5
+68010032
+203a24f5
+243724f7
+20402a4f
+1d00c201
+78287c00
+6801003e
+1fe37e00
+d8400500
+9840fe00
+20402a24
+204028ea
+18004803
+204028cc
+2040242a
+204029f1
+44a8400a
+6801003e
+1fe37e00
+20402a24
+204029eb
+7826fc00
+6801003e
+d84003bb
+9840b600
+37c18400
+1b420400
+600b009a
+7846fc00
+246c0000
+dd2003bb
+1c225000
+2035ab05
+20600000
+44a8c00a
+204024f0
+242c28f9
+204029bb
+c588a51c
+680100f6
+1fe0fe01
+600100f6
+1c230400
+18419c40
+44a9400a
+7823fc00
+78257c00
+7825fc00
+09800003
+198cfe00
+6000815d
+09800004
+08008007
+19827e00
+60008019
+09800003
+198cfe00
+6000815e
+68008019
+1fe67c03
+20212533
+c003a533
+6800804c
+2feffe05
+7920aa01
+44a9c00a
+09800008
+7845fc00
+78457c00
+20232631
+c588a53c
+680100f8
+1fe0fe01
+600100f8
+44aa400a
+6800815d
+2fe00e00
+7920800a
+2020a54c
+a8800e00
+2020a54b
+c583a64d
+680880b0
+a8400e00
+2420a64d
+68008047
+793ffe05
+79207e04
+60008047
+7836fc00
+44aac00a
+68008019
+1fe20200
+c505255b
+6808815e
+68008047
+793ffe00
+284ffe00
+7920fe00
+284ffe01
+7920fe01
+60008047
+284c0001
+2020a55b
+20402687
+44ab400a
+d8400000
+20402a1c
+18217e0f
+c000a587
+c000264d
+c0012659
+6808815e
+68008047
+a8400800
+2420a569
+c5852568
+c303a569
+7920000f
+44abc00a
+18227e00
+c001a589
+c002258d
+c003a578
+c004258c
+d8400004
+20402a1c
+c0052588
+c005a58b
+d8400008
+20402a1c
+c0072588
+c007a58b
+20600000
+44ac400b
+7826fc00
+7824fc00
+78277c00
+d8a000d1
+1800721e
+09800008
+19897e00
+e0a08000
+c200257e
+c583a64d
+09800010
+7d230008
+2023263d
+20202620
+2020264d
+79200010
+78267c00
+2020258e
+79200010
+79202a02
+7826fc00
+44acc00b
+c500a64d
+2aac0001
+2020a59a
+7843fc00
+7826fc00
+78467c00
+1c409602
+34530400
+242c263d
+79200010
+7823fc00
+44ad400b
+78277c00
+7824fc00
+09800003
+198cfe00
+60008180
+09800005
+c50825a5
+19897200
+1f297200
+202025a8
+09800005
+19837200
+09800003
+44adc00b
+1f227e00
+6001015f
+203a25e8
+9ea67c00
+2021263d
+44ae400b
+793f8000
+68008180
+1fe17e03
+d8a00551
+c001a5ba
+c508a5e4
+68008180
+1fe17e03
+c00125bf
+c000a5d3
+2020263d
+6801015f
+1fe67c70
+2421263d
+c507a620
+202025e4
+44aec00b
+c507a620
+6801015f
+d84002e0
+98467c00
+2021263d
+68008263
+c30025c9
+c300a5ce
+2020264d
+70026101
+6801025d
+c080264d
+d8a01000
+202025e4
+70026102
+6801025f
+c080264d
+d8a01400
+202025e4
+44af400b
+c507a620
+6801015f
+d84002e0
+98467c00
+2021263d
+68008261
+c000a5dd
+c00125e1
+2020264d
+d8a01000
+6801025d
+98a08a00
+202025e4
+d8a01400
+6801025f
+98a08a00
+09800008
+19897e00
+e0a08000
+c20025e4
+44afc00b
+09800010
+20232637
+6800c363
+c000a64d
+c508a60d
+c507a64a
+68008180
+2fe00603
+2020a60d
+6801015f
+203a260d
+44b0400c
+68008261
+c000a5f9
+c0012603
+20202a8c
+6801025d
+6809015f
+9840fe00
+6001025d
+c0002a8c
+68091000
+18408404
+98467c00
+2042a747
+2020260d
+6801025f
+6809015f
+9840fe00
+6001025f
+c0002a8c
+68091400
+18408404
+98467c00
+2042a74b
+2020260d
+44b0c00c
+6808804c
+68008180
+2fe00603
+79208406
+7d208407
+6008804c
+2420a616
+79200001
+c588a620
+284ffe06
+2020a620
+680100fa
+1fe0fe01
+600100fa
+79200005
+793f8407
+793f8001
+6008804c
+44b1400c
+6808815e
+68008047
+79207e05
+284ffe02
+7920fe02
+280ffe0a
+7920fe07
+60008047
+6801015f
+243a264d
+6800804c
+793ffe07
+6000804c
+68008180
+2fe00e01
+2020264d
+44b1c00c
+7856fc00
+6801001a
+1fe0fe01
+6001001a
+2020264d
+6801001c
+1fe0fe01
+6001001c
+2040263e
+c588a63d
+79200005
+2020264d
+44b2400c
+68008180
+2fe00603
+2420a646
+6808804c
+793f8406
+6008804c
+20600000
+6808804c
+793f8407
+6008804c
+20204c0b
+68008047
+79207e05
+60008047
+44b2c00c
+784efc00
+784e7c00
+7846fc00
+78467c00
+7844fc00
+78477c00
+7843fc00
+2030a8f9
+37d38200
+20000064
+202028f9
+44b3400c
+7824fc00
+78267c00
+09800048
+2feffe3a
+79208000
+1c020400
+57e04000
+57e03c00
+782afc00
+380bffff
+380cffff
+20000020
+29a80000
+1d827e00
+60018178
+1da27e00
+6000817b
+18424000
+2020a66e
+2020263d
+44b3c00c
+09800048
+57e03e00
+57e00800
+57e05c00
+57e02400
+18007e00
+09800010
+2023263d
+5ffffffc
+9a417e00
+60020165
+1ba27e00
+60018175
+1b827e00
+60008173
+18827e00
+60008174
+1dc27e00
+6001017c
+1c227e00
+08008220
+28201e02
+7920800b
+2020264d
+44b4400d
+68008047
+c4018000
+793ffe03
+79407e06
+60008047
+6800c0c5
+c009a69c
+c1038000
+6800804b
+c4030000
+793ffe06
+79207e07
+6000804b
+793f8002
+68014246
+247a0000
+6800804b
+793ffe07
+6000804b
+2020525d
+44b4c00d
+680084b7
+1fe37e00
+c008a6b8
+c00926c0
+c00c26e9
+c03fa6a8
+c1818000
+680084b8
+c015a6b0
+c008a6ab
+20600000
+680084b8
+79207e07
+20600000
+20748000
+68008030
+c3820000
+70007c31
+20600000
+20748000
+68008031
+2feffe04
+2020a6b5
+20600000
+793ffe04
+60008031
+20600000
+44b5400d
+6800804c
+79207e02
+6000804c
+70801101
+68008030
+2feffe04
+20600000
+44b5c00d
+6800804c
+793ffe02
+6000804c
+70801100
+20600000
+44b6400d
+1c427e00
+6002420c
+1c40a203
+2034a6cc
+1d00a203
+68090032
+1a227e00
+793ffe1b
+9846fc00
+68010075
+20407f86
+18072600
+9a667e00
+202126d6
+9840fe00
+9a20fe00
+60020034
+70455b00
+68008030
+79207e01
+60008030
+68008073
+6000808a
+58000000
+6001c169
+6001c16c
+6000c159
+700a990b
+20407d86
+680140c1
+6001003e
+24748000
+18808fff
+20600000
+44b6c00d
+68008030
+c4008000
+793ffe01
+60008030
+680140bf
+6001003e
+7855fc00
+700a990c
+20207d86
+44b7400d
+78377c00
+68008030
+c280a700
+c6088000
+68008047
+c3818000
+68008048
+247a0000
+6800804b
+c3830000
+18007e00
+20600000
+c301270f
+6800808a
+c0012706
+68008047
+c281a718
+c5842718
+2434a718
+68008048
+243a2718
+680080ef
+1fe0ffff
+600080ef
+243a26fe
+7000ef10
+20202718
+6800808a
+c080a718
+6800808b
+203a2718
+1fe0ffff
+6000808b
+68008047
+c3818000
+24768000
+6800808a
+1fe0ffff
+6000808a
+20600000
+44b7c00d
+78487c00
+18423600
+20402260
+78547c00
+24628000
+18003600
+78347c00
+20600000
+6800c158
+a881fe00
+20600000
+44b8400e
+793f8001
+70026a00
+68008263
+207a0000
+2feffe00
+d8c01000
+2040cd79
+44b8c00e
+6800826a
+c000a73b
+70026a00
+68008263
+c4008000
+d8c01400
+20404d79
+6800826a
+c000a741
+20600000
+68008263
+793ffe00
+60008263
+58000000
+6001025d
+20600000
+68008263
+793ffe01
+60008263
+58000000
+6001025f
+20600000
+68008263
+79207e00
+60008263
+20600000
+68008263
+79207e01
+60008263
+20600000
+44b9400e
+1d00c201
+204028ea
+18004803
+204028d2
+20402a51
+20402a5f
+20202a64
+44b9c00e
+20402a4d
+1d027e00
+680a40ca
+98467e00
+c1808000
+28203e00
+2420a761
+68008019
+207a0000
+2040274f
+28203e10
+2020a64d
+1c230400
+18419c40
+44ba400e
+7823fc00
+78257c00
+782dfc00
+793f8010
+18827e00
+08008603
+18227e00
+08008604
+68008047
+08008004
+08008603
+78247c00
+08008608
+784dfc00
+78447c00
+78457c00
+793faa02
+d8400000
+20402a1c
+44bac00e
+18217e1f
+c009a7b4
+c000264d
+c000a64d
+c0012797
+c001a7c5
+c00227cb
+c003a78c
+c00427ca
+d8400004
+20402a1c
+c00527c7
+c005a7cd
+d8400008
+20402a1c
+c007a7cd
+202027c7
+44bb400e
+782efc00
+7824fc00
+78277c00
+1800721e
+d8c000b3
+e8c08000
+08008608
+c2002792
+c503a7f7
+2020264d
+44bbc00e
+68008181
+1fe20800
+68008090
+1fe23800
+6801c0aa
+1fe23a00
+680140a4
+1fe25c00
+7824fc00
+782e7c00
+1c022200
+204028e2
+782afc00
+20000020
+1c221600
+68020161
+1fe24200
+53c07e00
+79207e3a
+08008648
+53e07e00
+08008648
+19624200
+1a224000
+78247c00
+08008610
+78447c00
+2020264d
+44bc400f
+78277c00
+7824fc00
+782e7c00
+680084b6
+1fe105f8
+d8c004b6
+18408408
+1840a7b8
+242127c2
+e8c48000
+08008648
+1a620400
+202027bc
+e8c48000
+08418600
+202027f7
+782e7c00
+202027d0
+782e7c00
+79200010
+202027d0
+79202a02
+782efc00
+202027d0
+79202a02
+782efc00
+79200010
+44bcc00f
+6800804c
+c302a7e5
+18267c03
+202127e5
+78477c00
+784e7c00
+782efc00
+7843fc00
+79202a01
+2aaffe02
+2020a7df
+580abeee
+08008614
+202027e3
+585faeba
+08008618
+58000012
+08008606
+7823fc00
+79200010
+78277c00
+7824fc00
+c502a800
+6800c1db
+08008603
+680141dc
+98007200
+c50827ef
+08008605
+202027f0
+0800860d
+1f227e00
+203a27f7
+6801016f
+98000c00
+e8c08000
+08008608
+c20027f4
+78247c00
+08008610
+78447c00
+204024c1
+6800804c
+c302a64d
+18007e00
+08008606
+2020264d
+44bd400f
+c5082808
+68008180
+08008603
+6800815f
+98002600
+08008605
+2020280d
+68008180
+08008603
+6801015f
+98002600
+0800860d
+d8c00551
+1a627c00
+2022a814
+e8c08000
+08008608
+1a60a7ff
+2020280e
+680100fc
+1fe0fe01
+600100fc
+202027f7
+68020165
+1fe0a207
+68010171
+243a281e
+1a20a3fd
+20202826
+1feffe0c
+68190040
+18408401
+98467e00
+24212825
+1a20a3ff
+20202821
+1fe67e00
+37d18200
+2c400600
+2420a826
+98005200
+1a225000
+98005200
+20600000
+44bdc00f
+37d10200
+1b427e00
+98000c00
+1ff17e00
+9c467200
+1f217203
+2422a837
+18007e00
+2020283b
+d8400ea6
+18007e00
+9840fe00
+c2002839
+98c0fe00
+1fe6fc0c
+20407f86
+1807fe00
+60010171
+20600000
+44be400f
+1b427e00
+1b220400
+98467c00
+7d217e2c
+98460400
+58000ea6
+284c000f
+2020a84c
+5fff0ea6
+98408400
+600b0447
+207b0000
+600b0038
+20600000
+78587c00
+68030447
+203b2854
+68030038
+9b20e000
+1e00e00a
+58000ea6
+9e067e00
+2fec000f
+2020a85e
+5800f15a
+9e00e000
+1e023400
+20600000
+18007c00
+2020285c
+44bec00f
+20402918
+1c227e00
+1fe17f80
+2c800e03
+2420a869
+1fe97e00
+9ae0fe00
+2020286a
+1ae27e00
+1fe6fc4f
+782afc00
+20407f86
+18072200
+1a2085d8
+20212872
+1a238400
+20202874
+18438400
+18408401
+44bf400f
+68008031
+c301a885
+680240d2
+9c267c00
+20212885
+204028a4
+6800c0d9
+207a0000
+68008031
+79207e02
+60008031
+6802c0e7
+6002c0da
+e8c28000
+6002c0df
+204028a9
+68008031
+c4010000
+2c2ffe01
+2020a8a1
+18492200
+18410e07
+580040da
+9a20a200
+ea208000
+afec0000
+2020a892
+18427e00
+2020289e
+6800c0e4
+98002400
+1c227e00
+1fe17f80
+1fe97e00
+9ae0fe00
+9a46fc00
+580040f2
+20407f86
+18072200
+9a208c00
+e8c08000
+6000c0e5
+98000400
+20600000
+6800c0e5
+98000400
+20600000
+68008031
+793ffe02
+793ffe03
+60008031
+20600000
+44bfc00f
+d8a040f2
+1800720a
+20407ec6
+d8a040f2
+18002600
+18000e02
+6802c0da
+98000400
+28e1fe02
+2020a8b5
+18430400
+284c0000
+2020a8b9
+1a627e00
+e0a08000
+184b0400
+1a60a602
+2a61fc28
+2420a8c2
+6802c0df
+98000400
+28e1fe02
+2020a8c2
+18430400
+1a667c4e
+202128b5
+18002601
+18e08fff
+2422a8b0
+da2040f2
+18a27e00
+9a267e00
+6000c0e4
+20600000
+44c04010
+20402860
+6800817f
+c302a8d1
+680884cc
+2020291f
+44c0c010
+20402860
+6800817f
+c30228d7
+680884cb
+20202933
+18005a00
+6801c0a7
+98005800
+20600000
+44c14010
+6800c1d3
+1fe25a00
+6801c1d0
+1fe25800
+20600000
+44c1c010
+680140a4
+1fe25c00
+6800c0a3
+1fe25a00
+6801c0a0
+1fe25800
+20600000
+44c24010
+68010044
+1fe25c00
+68008043
+1fe25a00
+68018040
+1fe25800
+20600000
+c51028f5
+c68e8000
+c68f8000
+1d815900
+782afc00
+20000020
+20600000
+44c2c010
+2030a90a
+708955d4
+20000004
+708955d2
+20000004
+708955d1
+20000004
+6800c1de
+c0002908
+c000a915
+c0012908
+c001a915
+c0022915
+c0102915
+708955d0
+708956e0
+18002a00
+7850fc00
+78507c00
+782f7c00
+70890200
+70890100
+70890000
+70890300
+70890470
+70890600
+20600000
+708955d0
+708956c0
+2020290a
+44c34010
+70890200
+70890100
+70890018
+708903a7
+7089047f
+20600000
+44c3c010
+60088017
+1840a204
+70896d07
+20202981
+44c44011
+708901cf
+2000000a
+708900ff
+708903af
+708904ff
+2000000a
+708902a0
+20600000
+6800c1e0
+203a2931
+1840a202
+20600000
+1840a200
+20600000
+44c4c011
+60088017
+2040292d
+20402981
+58000500
+20402a8f
+70890601
+7089003c
+708901e0
+70896d12
+2000000a
+70890201
+7089023d
+2000000a
+708903b7
+2000000a
+7089027f
+6800c1de
+c000294b
+c000a94f
+c0012953
+c001a957
+c002295b
+c010295f
+708956f0
+20402965
+708955d8
+20600000
+708956df
+20402965
+708955df
+20600000
+708956ff
+20402965
+708955df
+20600000
+708956ce
+20402965
+708955d8
+20600000
+708956cb
+20402965
+708955d8
+20600000
+708955d0
+708956c0
+7089574c
+7089586c
+70895950
+20600000
+20000004
+708955d1
+20000004
+708955d2
+20000004
+708955d4
+20600000
+70804206
+680140c3
+c307296d
+98000c00
+d8408900
+e8c08000
+c07fa977
+98418a00
+e8c08000
+e0a08000
+20202971
+44c54011
+20402be5
+204029c9
+580007d0
+9c40fe00
+60020169
+79202a03
+18002a00
+2455a998
+202029ab
+44c5c011
+58000960
+9a208400
+6800c0bd
+70895f04
+984ffe00
+6808c0be
+9846fc00
+20407f86
+1807a200
+18077e00
+1ff07e00
+1ff27e00
+9846fc00
+20407f86
+1807fe00
+1fed7e00
+1fe3fe00
+9a21fe00
+60120960
+70895f44
+70895fc4
+20600000
+44c64011
+70890602
+5803d090
+20402a8f
+7089007f
+20000082
+70895230
+708901d0
+70895270
+708952f0
+18007232
+68108980
+c282a9a6
+c20029a3
+6000c0ce
+70890100
+70890000
+70890600
+20600000
+44c6c011
+6800c0ce
+79207e05
+60108952
+68188950
+18410407
+1fe9fe00
+9841fe00
+60108950
+68108951
+793ffe00
+60108951
+68108952
+793ffe05
+60108952
+20600000
+44c74011
+68110981
+1ff1fe00
+1fe97e00
+1fe67e00
+1fe17eff
+1fe6fc0a
+20407f86
+1807fe00
+1ff27e00
+18070400
+9841fe00
+60008018
+20600000
+70804206
+6810896b
+793ffe04
+793ffe05
+6010896b
+70890500
+70890400
+70890470
+708905ff
+6810896b
+79207e04
+79207e05
+6010896b
+204029e9
+68108968
+79207e07
+60108968
+793ffe07
+60108968
+79207e07
+60108968
+70804205
+20000001
+70804204
+6810896b
+1fe17ecf
+6010896b
+1fe1fe30
+6010896b
+20600000
+58000f0f
+20202c18
+5800080f
+20202c18
+44c7c011
+20402924
+78507c00
+7830fc00
+782b7c00
+20600000
+44c84012
+6800804c
+2feffe02
+7920fe00
+60108011
+d8c00062
+e8c48000
+98006400
+e8c38000
+98006600
+68008054
+1fe0e9ff
+782d7c00
+20600000
+1b427e00
+6003009a
+7846fc00
+242c28f9
+dd2003bb
+1d00d001
+1d0151fc
+20600000
+7826fc00
+37cb8400
+202c29ff
+2d000402
+2420aa08
+202029ff
+44c8c012
+d9600600
+7826fc00
+34730400
+7846fc00
+242c28f9
+20600000
+44c94012
+7826fc00
+37c18400
+7846fc00
+242c28f9
+dd2003bb
+1d0151fc
+20600000
+44c9c012
+98002200
+1c227e00
+98409600
+19627e00
+600240ca
+1a227e00
+20600000
+1fe20400
+44ca4012
+18427e00
+20407f50
+1c307e00
+79207e2c
+20407f39
+793ffe2c
+20402a77
+20407f39
+20740000
+20407f43
+98003600
+37c18200
+20600000
+44cac012
+20382a38
+35330200
+1d020400
+20202a3b
+20372a3a
+34730200
+1c420400
+20342a47
+28400601
+2420aa33
+44cb4012
+68008030
+c4000000
+680240ca
+98467e00
+24610000
+1fe67cff
+20212a33
+20600000
+28400603
+2420aa33
+20202a3e
+44cbc012
+d9600600
+20202a33
+78547c00
+20202a4a
+78347c00
+20202a4a
+44cc4013
+204029f1
+7850fc00
+78307c00
+20600000
+44ccc013
+d9600e43
+34730200
+782b7c00
+20600000
+44cd4013
+d9600d00
+34730200
+20600000
+44cdc013
+d9600e43
+35330200
+782b7c00
+20600000
+44ce4013
+51207e00
+782efc00
+79202a00
+08008648
+784efc00
+20600000
+1ca20400
+18418460
+18421c00
+20600000
+44cec013
+6800c090
+1fe0fe01
+c083aa74
+18007e01
+6000c090
+98000800
+20600000
+1b220400
+20748000
+1b420400
+20600000
+1c427e00
+20748000
+1d027e00
+20600000
+44cf4013
+680a004d
+20402a7b
+98461600
+19627e00
+68090051
+18438400
+98467e00
+20600000
+44cfc013
+20402a7b
+6002004d
+20600000
+44d04014
+20202a8c
+20202a8e
+207a0000
+1fe37e00
+1fe0fffd
+1fe0ffff
+2422aa92
+18007e00
+20600000
+df200010
+d8a00000
+20407ec6
+d8a0043f
+df20000a
+20407ec6
+7009b200
+700a9900
+70048c00
+70017f00
+7004d100
+44d0c014
+70016d00
+70015100
+70015c00
+589e8b33
+6001c0a7
+58000153
+60010083
+7000851e
+70008601
+70008807
+5812e904
+60018080
+70009060
+7040d005
+70001402
+6800c65a
+245a74c1
+6800c4be
+245a7518
+44d14014
+20758000
+58000000
+600141dc
+1c437e00
+60024094
+20600000
+5800ee21
+60110050
+6812011c
+60020abe
+6810813e
+60008abd
+c301e45b
+7835fc00
+c303aacc
+7855fc00
+1ce27e00
+243a2acc
+6810813b
+c2812acc
+d85fffff
+20202b3c
+6811813c
+6011804c
+e8c08000
+1fe1feef
+e0a08000
+20402c23
+6810804f
+79207e04
+6010804f
+20402c23
+2055aadf
+6810804e
+793ffe03
+6010804e
+20402c23
+2435e45b
+c6958000
+70800608
+20600000
+6800c198
+60108086
+6801c18d
+60118080
+68024181
+60120074
+6802417d
+60120070
+68044185
+60140078
+68044190
+98000000
+68140140
+600400a1
+204064ca
+20600000
+18027e00
+60044190
+68140070
+6004417d
+e8c40000
+e0a40000
+68118080
+6001c18d
+68108086
+6000c198
+20202c29
+68108063
+243a2b00
+6801c16f
+247a0000
+708063c0
+70800680
+6810812d
+c4008000
+68118149
+6001c16f
+20600000
+44d1c014
+1b427e00
+20407f37
+680a415f
+18467cff
+20610000
+1fed7e00
+1ff27e00
+9846fc00
+20407f86
+1807fe00
+d84000c8
+20407f91
+60008099
+24342b15
+1fe67e00
+6809c16f
+9840fe00
+6001c16f
+58000000
+6002415f
+20600000
+6800c177
+79207e02
+6000c177
+20202b23
+d85fffff
+6800c176
+793ffe07
+6000c176
+44d24014
+20402c29
+6800c157
+6000c17c
+6800c17a
+79207e07
+6000c17a
+44d2c014
+204029e7
+6802415f
+9840fe00
+6002415f
+20402aef
+6802c178
+6012004c
+1fef2200
+37d98200
+1b227e00
+60034163
+70800502
+37d98200
+37d98200
+1a227e00
+6010804f
+70800502
+37d98200
+37d98200
+601a004c
+70800510
+37df8200
+44d34014
+58000000
+1ce27c00
+2022ab4c
+6810813c
+6818813d
+98467c00
+20212b4a
+18427e00
+9ce67e00
+1fe0fe01
+1fe0fe08
+37d98200
+9e20fe00
+680a415b
+9840fe00
+6809c16f
+984ffe00
+1fecfe00
+1ff1fe00
+1fe0fe6e
+d8400ea6
+9846fc00
+20407f86
+1807fe00
+1ff07e00
+18070400
+9841fe00
+680b4163
+20407f2c
+18423200
+68034048
+20402854
+1b427e00
+60030a9a
+1ce27e00
+e0a08000
+6810811d
+1fe1fef0
+e0a08000
+20600000
+44d3c014
+20402afa
+6801c16f
+207a0000
+6800c091
+207a0000
+6800c65a
+203a2b74
+6800c5b1
+207a0000
+6800c4c0
+247a0000
+20402c3a
+247a0000
+6800c040
+2fe00e03
+2420ab9d
+68014042
+207a0000
+20758000
+44d44015
+680880a0
+68014042
+984ffe00
+18518400
+184b0400
+98467e00
+680a4044
+9840fe00
+6808c156
+98467e00
+1ff06000
+44d4c015
+6801404e
+1fe37e00
+20407f50
+1e027e00
+20407f39
+1b420400
+20407f37
+20740000
+20407f49
+44d54015
+6800c178
+98467c00
+20212b18
+600a415b
+20403328
+204052fb
+680a415b
+20202b2a
+44d5c015
+6800c040
+c3800000
+c3818000
+6800c65a
+203a2ba5
+6800c5b1
+207a0000
+44d64015
+6800c36e
+243a2baa
+6800c093
+207a0000
+68014154
+207a0000
+6808c156
+98467e00
+d8401d4c
+984ffe00
+20202b93
+44d6c015
+7855fc00
+68008030
+c4008000
+2436abd0
+20402bcb
+680140c1
+6001003e
+68008047
+c281abde
+c586abde
+20405274
+243a2bde
+6800c55c
+c280abde
+7000a000
+c586abde
+6800c174
+203a2be2
+1fe0ffff
+6000c174
+20600000
+d8e00001
+202060cd
+d8e00001
+202060d1
+70415900
+6801c169
+1fe0fe01
+6001c169
+20600000
+44d74015
+680940c1
+18430400
+6801003e
+9840fe00
+6001003e
+7000a000
+6801c16c
+1fe0fe01
+6001c16c
+6800c159
+1fe0fe01
+6000c159
+20600000
+7000a000
+6800c173
+6000c174
+20600000
+6808c172
+600880a0
+20600000
+44d7c015
+6800c178
+247a0000
+70804206
+58000f0c
+20402c18
+58030d40
+20402a8f
+37d98200
+1e226000
+204029e7
+70804204
+2000000a
+37d98200
+1e227e00
+9e067e00
+1fe0fe30
+d84000ff
+20407f91
+6000c178
+20007530
+20007530
+20007530
+20600000
+6800c178
+247a0000
+708044ff
+70804206
+204029e7
+580003e8
+9e20e000
+07e00000
+1e227e00
+20002ee0
+20002ee0
+20002ee0
+20002ee0
+20002ee0
+20002ee0
+20002ee0
+20002ee0
+20002ee0
+9e067e00
+1fe0fe30
+d84000ff
+20407f91
+6000c178
+20007530
+20007530
+20007530
+20600000
+d8a00fff
+98a10a00
+6800c175
+1fe17ef0
+1fed7e00
+98a1fe00
+6011004c
+e8c10000
+e0a10000
+58000001
+20202c24
+58000002
+37d98200
+60108005
+37d98200
+37d98200
+20600000
+44d84016
+680200a1
+6012004c
+58000004
+20402c24
+680200a5
+6012004c
+58000008
+20202c24
+68014152
+f9207e00
+60014152
+20600000
+68014152
+f93ffe00
+60014152
+20600000
+44d8c016
+20403326
+68014152
+1fe22200
+6800804c
+2feffe06
+7920a20b
+68008078
+6808807c
+9840fe00
+68088048
+9840fe00
+7d3a220a
+6800c4ff
+7d3a2201
+6801025d
+6809025f
+9840fe00
+7d3a220d
+68044668
+7d3a220f
+68044670
+7d3a220e
+6800c1ce
+7d3a2208
+6800c092
+2fe1fe0a
+2040ac5b
+5ffffff8
+9a212200
+1a227e00
+60014152
+20600000
+68110112
+7d3a2206
+6811010e
+7d3a2205
+20600000
+68120138
+793ffe1b
+6012004c
+20402c21
+20202a8c
+6812013c
+793ffe14
+6012004c
+20202c23
+68014150
+c2802a8c
+20600000
+68014150
+c280aa8c
+20600000
+68014150
+c2812a8c
+20600000
+44d94016
+20402c7a
+1a60a4cd
+ea408000
+c1000000
+c000ad06
+c0012c7f
+20600000
+68094241
+18422600
+20600000
+20402f3d
+2020307d
+20403084
+2040305a
+2040305e
+202030a2
+20403231
+5800004e
+2040322f
+204032ba
+1a60a292
+ea220000
+2020322c
+20402c7a
+1a60a491
+ea488000
+20402c90
+1a608a91
+20202e56
+20402c94
+18408401
+18410403
+20600000
+1a60a4ae
+ea408000
+1fe17e03
+1fefa204
+1a60fe97
+9a20fe00
+98408c00
+e8c08000
+2020322f
+2040326c
+2040666a
+580007e2
+da200aa2
+d8400004
+204066b3
+2040666d
+68020aa2
+20403227
+247a0000
+680240a0
+20203227
+20403241
+58000000
+2040323f
+2040323a
+1fe17e07
+2020323c
+2040323a
+79207e04
+2040323c
+20203235
+2040325d
+c000acb7
+c0012cbc
+20600000
+2040323e
+1a608ad1
+204032d6
+20403242
+20202cac
+2040325a
+20202cb8
+1a60a28c
+ea208000
+1fe0fe01
+1a608a8c
+e0a08000
+c0102dd2
+20403258
+c000acca
+58000001
+2040325b
+20403258
+c080acac
+1a60a2d3
+ea208000
+1fe0fe01
+20402cd5
+c0022cd2
+20402c8a
+20402d04
+20202d8f
+20402cd4
+20202cac
+58000000
+1a608ad3
+202032b4
+2040323e
+2040325a
+20403241
+20202cac
+2040325d
+c001acd8
+2040323a
+2fec0004
+2020aca9
+2040325d
+c000acd7
+c0012cd8
+20600000
+20403253
+c1ff8000
+20402ce9
+24562cf4
+20600000
+78567c00
+1a60a2ce
+ea208000
+c1808000
+1a60a2d0
+ea208000
+c1800000
+58000001
+20402cfd
+20403237
+20207feb
+1a60a2d0
+ea208000
+203a2cff
+1fe0ffff
+2040323f
+58000002
+20402cfd
+20402c8a
+20203237
+1a608ad2
+202032b4
+58000003
+20402cfd
+20403258
+243a2cc8
+20402c8a
+58000002
+20203238
+c6930000
+79200027
+44d9c016
+1a60a28e
+ea208000
+c000ad0f
+2040306a
+24342d16
+20402d1b
+1a608a8e
+204032d6
+20402d2c
+24342d7d
+20402ce4
+20402d8f
+20402e7a
+793f8027
+20600000
+20628000
+79207e1c
+20600000
+1a60a2c2
+ea208000
+1fe0fe01
+1a608ac2
+e0a08000
+c0022d23
+c002ad27
+20600000
+1a60a2ad
+ea208000
+1a608aab
+202032b4
+1a608ac2
+204032d6
+1a60a2ac
+ea208000
+20202d25
+20403253
+c0ffaeb1
+44da4016
+20402d3a
+24342d36
+20402d53
+20402e71
+58000001
+1a608a8b
+202032b4
+1a60a28b
+ea208000
+c000ffe7
+20600000
+1a6084d8
+e8410000
+20407f9c
+24740000
+1a227e00
+60008aae
+1a608ab2
+204032d6
+20402cac
+6000919e
+68008aae
+1fe22200
+1a208401
+d8a0119f
+1a227200
+1a420c00
+20407f01
+da20119e
+c6938000
+1a608a86
+e0a88000
+18427200
+1a608a22
+1a220c00
+20207f01
+1a60a286
+ea208000
+1fe0fe02
+1a608a88
+e0a08000
+2040323a
+20403235
+1a60a286
+ea208000
+1fe9fe00
+1a60a285
+ea288000
+18410403
+18438400
+9841fe00
+1a60a2c3
+ea288000
+9840fe00
+e0a08000
+1a60a286
+ea208000
+98007200
+1a608c22
+20207f01
+2040324f
+2040325a
+20402e6d
+20402cac
+6000919e
+20402d77
+2040323a
+79207e03
+2040323c
+20402d53
+20402d33
+20202d14
+6000919f
+20403224
+600211a0
+d8400006
+da20119e
+20202d4c
+1a60a2b2
+ea208000
+203a2d6b
+1a60a2da
+ea210000
+20207f9c
+20402c7a
+20402afa
+6801c16f
+207a0000
+1a6084dc
+e8410000
+20407f9c
+1a6084b6
+e8440000
+20407f49
+600a415b
+20202b2a
+20402c7a
+1a608a8f
+204032d6
+20402da4
+242c2dae
+2437adae
+20402dd6
+20402e75
+20402c7a
+1a60a285
+ea208000
+1fe0fe01
+20403232
+20403253
+c0ffaed0
+20402cdb
+58000000
+1a608a8c
+e0a10000
+58000000
+20202d34
+7857fc00
+20402df7
+20402c7a
+1a60a2c3
+ea208000
+c000adac
+20402e11
+20202e45
+20402e45
+20202d97
+44dac016
+1a60a28d
+ea208000
+1fe0fe01
+1a608a8d
+e0a08000
+20403253
+c0ffadcc
+1a60a28f
+ea288000
+18408401
+1a608a8f
+e0a88000
+1a60a2cc
+ea208000
+98467e00
+243a2d92
+44db4016
+2040325d
+c001acbe
+1a60a2d1
+ea208000
+1fe0fe01
+1a608ad1
+e0a08000
+c0012cb3
+20402caf
+58000001
+20403238
+20202d8f
+1a60a28d
+ea208000
+c1ff8000
+1a608a8d
+204032d6
+20202dd4
+1a608a8c
+204032d6
+700a993a
+20207d86
+20402dde
+1a60a284
+ea208000
+207a0000
+98007200
+1a608c02
+1a608a64
+20207f01
+2040325f
+1fe97e00
+1a608a84
+e0a08000
+1fe0fe01
+1a608c01
+98c08c00
+e8c18000
+1a608ac4
+e0a18000
+2040325f
+1fe37e00
+1fe17e03
+1a608aca
+e0a08000
+20600000
+7844fc00
+7843fc00
+58555555
+98001e00
+20600000
+20402918
+1a60a290
+ea288000
+20202933
+20402dee
+20402df3
+79202a00
+782efc00
+78307c00
+7850fc00
+204053c4
+2040322a
+98001200
+08008620
+7824fc00
+1a60a288
+ea208000
+98007200
+1a608c42
+e8c08000
+08008608
+c2002e06
+78247c00
+08008618
+78447c00
+37d38200
+44dbc016
+20000064
+784efc00
+20600000
+7857fc00
+18002a00
+1a60a290
+ea288000
+2040291f
+20402924
+20402dee
+7826fc00
+7830fc00
+78507c00
+204053c4
+2040322a
+98001200
+78287c00
+1a60a289
+ea210000
+98003600
+37c18400
+242c2e4d
+7824fc00
+09800008
+19897e00
+1a608a00
+e0a08000
+1a60a2cd
+ea208000
+c0012e33
+44dc4017
+1a60a200
+ea208000
+1a60a287
+ea288000
+a8400e00
+2420ae45
+09800008
+19897e00
+e0a08000
+1fe97e00
+1fe1721f
+2022ae3d
+09800008
+19897e00
+e0a08000
+c2002e39
+09800018
+1fef7e00
+1ff17e00
+e0a18000
+20232e45
+7837fc00
+7846fc00
+20600000
+784efc00
+7846fc00
+7844fc00
+7843fc00
+2030a8f9
+37d38200
+20000064
+202028f9
+20402e4f
+20202e45
+204029bb
+207a0000
+1a60a2ea
+ea288000
+da200d9e
+20402e58
+1a608aea
+e0a88000
+20600000
+da4000ff
+20202e5a
+1a227e00
+98408a00
+68008018
+e0a08000
+18408401
+1a427e00
+98410400
+20600000
+d8400000
+1a220c00
+e8c08000
+98408400
+c2002e64
+184c8400
+20600000
+20402c7a
+20402e9f
+58000001
+20403272
+58000000
+20402e73
+e0a08000
+20600000
+20403270
+1fe0fe01
+1a608afc
+202032b4
+1a60a2fd
+ea208000
+1fe0fe01
+1a608afd
+202032b4
+44dcc017
+20403270
+1fe67c7c
+20610000
+1a60a2fd
+ea288000
+98460400
+20402e6d
+58000102
+9a60a200
+ea208000
+98467c00
+24212e8d
+58000103
+9a60a200
+ea208000
+98467c00
+20212e99
+20600000
+1a60a2fe
+ea208000
+c0012e93
+1fe0fe01
+20403272
+c000ae9f
+5800000a
+204032b0
+58000000
+204032b2
+1a60a2ff
+20202ea5
+1a60a2fe
+ea208000
+c0002ea7
+1fe0ffff
+20403272
+c0002ea7
+58000005
+204032b0
+58000000
+204032b2
+58000100
+9a60a200
+ea208000
+2020326a
+58000002
+204032b0
+58000000
+204032b2
+58000101
+20202ea4
+79200026
+20402c83
+58000001
+20203256
+1a60a28b
+ea208000
+c000ffe7
+20403253
+c000aeb9
+c0012ebd
+c001aec1
+20202a8c
+58000011
+20403256
+70119eaa
+20202ec4
+58000012
+20403256
+70119e55
+20202ec4
+58000013
+20403256
+70119e22
+2040323a
+1fe17e07
+6000919f
+20403224
+600211a0
+7011a400
+da20119e
+d8400007
+20402d4c
+20402d53
+20402d33
+20207fe7
+20403253
+c17f8000
+c008aed6
+c0092ed9
+c009aedc
+20600000
+58000002
+20403256
+20202d9f
+58000003
+20403256
+20202d9f
+580000ff
+20403256
+700a9939
+20407d86
+1a60a266
+ea220000
+2040322c
+20202d9f
+793f8026
+20402f08
+20402f22
+20403263
+200007d0
+20403261
+c07fadd4
+20402da4
+242c2efa
+2437aefa
+20402dd6
+20402c7a
+1a60a292
+ea2a0000
+204030be
+2022aead
+20402c7a
+1a60a266
+ea220000
+c0002ee7
+2040322c
+20202f1c
+20403261
+1fe0fe01
+20403264
+20402f04
+1fe0fe01
+1fe17e01
+20402f06
+c0002f0c
+c000af0e
+20600000
+5800018b
+202032d0
+da20018b
+202032b3
+20403267
+20403224
+2040322c
+20202c8a
+20402f08
+20202ee8
+20402c83
+20202ee8
+793f8026
+20402c8a
+20403253
+c1ff8000
+20402f22
+20403263
+200007d0
+20403261
+c07fadd4
+20402da4
+242c2f27
+2437af27
+79200026
+20403263
+580000ff
+20403256
+700a993c
+20207d86
+79200027
+70119eff
+2040323a
+20402d77
+20202d53
+20403261
+1fe0fe01
+20403264
+20402c8a
+20202f16
+20403267
+580000ff
+20403256
+20202f10
+44dd4017
+20402c7a
+580031b0
+1a608ade
+e0a10000
+20402f3d
+204048ea
+204032b6
+44ddc017
+c0003055
+c000af45
+c007af41
+20202a8c
+2040326c
+df200080
+d8a00d9e
+20207ec6
+20402f4c
+20402f4f
+204048d3
+20202f42
+44de4017
+20402f4c
+20402f4f
+20402fbd
+204048d3
+20403019
+20202f47
+20403291
+20403296
+20203299
+2040328f
+c1800000
+20402f55
+20402f65
+2040316b
+20202f96
+20403294
+c3800000
+79207e00
+20403297
+20403267
+20403299
+700d3800
+2040324f
+20402f61
+1a608a00
+df200042
+20207ed4
+20403231
+2040327d
+2040322c
+20202c8a
+44dec017
+2040324c
+c000af8d
+20403245
+c000ac8a
+58000136
+9a60a200
+ea2a0000
+1c427e00
+98467c00
+24412d18
+1fe22400
+58000136
+9a60a200
+ea220000
+1fe20400
+5800013a
+9a60a200
+18427e00
+ea288000
+98408400
+1a427e00
+98467c00
+24610000
+793ffe1c
+58000136
+9a608a00
+e0a20000
+20402c8a
+20403278
+1fe0fe01
+2040327b
+c1810000
+2040327a
+2020324f
+1c427e00
+da200136
+204032bf
+e0a20000
+2020327a
+da200d9e
+20402f94
+1a608aeb
+e0a88000
+18467c50
+24610000
+20202c8a
+df200100
+20202e62
+20402f99
+20402fa5
+20202fb1
+58000180
+204032d0
+207a0000
+d8e0000b
+20407f16
+247a0000
+204032a7
+58000001
+60008d54
+58000000
+e0a38000
+202031b8
+5800017e
+204032d0
+207a0000
+d8e0000e
+20407f16
+247a0000
+204032aa
+d8a00d64
+df200002
+20407ec6
+700d6400
+202031ed
+5800017f
+204032d0
+207a0000
+d8e0000c
+20407f16
+247a0000
+204032ad
+d8a00d74
+df200002
+20407ec6
+700d7403
+20203207
+2040328f
+c1808000
+20402fc1
+20202fcb
+20403294
+c3808000
+79207e01
+20403297
+2040329c
+20402c83
+58000000
+da200106
+204032bf
+202032c5
+2040316e
+2437af5e
+1a608c00
+58000109
+9a608a00
+df200008
+20407f01
+5800010b
+204032d0
+c0552fd9
+c02aafed
+c0113001
+c07fb212
+20202f5e
+204032bd
+c000afdd
+c0012fe8
+20600000
+58000001
+20402ff7
+58000001
+20403289
+58000080
+da200130
+204032b3
+2040327d
+da200131
+204032bf
+2020322d
+58000001
+20402fff
+58000002
+20403289
+20202fe1
+204032bd
+c000aff1
+c0012ff9
+20600000
+20402fdf
+58000106
+204032d0
+c000aff6
+20600000
+58000002
+da200106
+202032b3
+20402fea
+58000107
+204032d0
+c000affe
+20600000
+58000002
+da200107
+202032b3
+204032bd
+c000b005
+c0013011
+20600000
+58000106
+204032d0
+c0013009
+20600000
+2040328b
+1fe1fe01
+2040328d
+58000000
+58000106
+9a608a00
+e0a10000
+20202f5e
+58000107
+204032d0
+c0803015
+20600000
+2040328b
+1fe1fe02
+2040328d
+2020300c
+68008d50
+207a0000
+700d5000
+68010d4e
+d84002ba
+98467c00
+24628000
+68008cb6
+c1dd0000
+68008cb7
+44df4017
+c050303b
+c050b02c
+c0533041
+c053b043
+c054b049
+c058304d
+700d4200
+20600000
+68008cb8
+c000b031
+c0423034
+c053b039
+2020302a
+2040328b
+60008cf7
+2020303f
+20403291
+20403296
+2040328b
+60008cf7
+2020303f
+700cf7a1
+2020303f
+68008cb8
+c040b03e
+2020302a
+20403090
+700d4201
+20600000
+700cf715
+2020303f
+2040328f
+c0003047
+c000b039
+20600000
+700cf7a0
+2020303f
+700cf700
+700cf800
+700cf901
+2020303f
+2040329c
+68008cb8
+1fe0fe02
+1fe27200
+d8c00cb6
+5800013c
+9a608a00
+20207f01
+44dfc017
+2040307d
+20402c7f
+204048d3
+20203057
+2040328f
+c1800000
+20402f51
+20203098
+2040328f
+c1808000
+20402fc1
+20402fcb
+2040328b
+207a0000
+20403286
+20402f4c
+20403093
+58000000
+1a608aa7
+2020322d
+20407fe9
+1a60a2a7
+ea2a0000
+1c427e00
+98467c00
+24412d18
+1fe22400
+1a60a2a7
+ea220000
+1a60a2ab
+ea288000
+98408400
+1a427e00
+98467c00
+24610000
+793ffe1c
+1a608aa7
+e0a20000
+20207fe7
+58000001
+20403287
+20403283
+580000ff
+1a608aab
+e0a08000
+20203067
+5800015c
+204032d0
+207a0000
+2040306a
+24740000
+20403281
+1fe0fe01
+1fe17e01
+20403284
+c0002f4c
+c000b090
+20600000
+58000001
+20403292
+20203296
+58000001
+204032a5
+58000280
+d8e00008
+20207f08
+204032a2
+207a0000
+d8e00008
+20407f16
+247a0000
+204032a4
+58000007
+20403292
+20403296
+20202f5e
+44e04018
+2040328f
+c1838000
+204030cb
+204030e0
+2040316e
+2437af5e
+204030bc
+2042b172
+20402f4c
+20403294
+79207e00
+20403297
+20402f5e
+20403093
+204030bc
+2022b0c1
+58000164
+204032d3
+204030be
+2022b0c5
+58000160
+204032d3
+204030be
+2022b0c8
+20600000
+5800012b
+204032d3
+2040322a
+98467c00
+20600000
+58000182
+204032d0
+1a608a91
+202032b4
+58000185
+204032d0
+202030c3
+58000188
+204032d0
+202030c3
+20403294
+c3838000
+79207e07
+20403297
+20403283
+2040329c
+58000000
+1a608af5
+e0a18000
+da200183
+204032bf
+e0a38000
+204030bc
+24628000
+1a60a291
+ea208000
+da200182
+204032b3
+1a60a290
+ea208000
+2020314a
+44e0c018
+20403281
+1fe0fe01
+1fe17e03
+20403284
+c000310e
+c000b132
+c00130ea
+c001b132
+20600000
+20402fdf
+58000160
+2040327e
+203a30e0
+2040322c
+58000189
+204032d0
+205a3108
+58000187
+204032d0
+2040322f
+1a60a2f7
+ea288000
+da200f9e
+20402e58
+1a608af7
+e0a88000
+20402f94
+1a608afa
+e0a88000
+18467c50
+24610000
+58000188
+20403275
+20402c90
+da200188
+204032c8
+e0a88000
+da200187
+202032b3
+58000001
+da200189
+204032b3
+d8400000
+20402c94
+20203106
+20402fea
+58000164
+2040327e
+203a30e0
+2040322c
+58000186
+204032d0
+205a312c
+58000184
+204032d0
+2040322f
+1a60a2f6
+ea288000
+da20109e
+20402e58
+1a608af6
+e0a88000
+20402f94
+1a608af9
+e0a88000
+18467c50
+24610000
+58000185
+20403275
+20402c90
+da200185
+204032c8
+e0a88000
+da200184
+202032b3
+58000001
+da200186
+204032b3
+d8400000
+20402c94
+2020312a
+20402fdf
+2040327d
+2040322c
+58000183
+204032d0
+205a314c
+2040314f
+1a60a2f5
+ea288000
+da200e9e
+20402e58
+1a608af5
+e0a88000
+20402f94
+1a608af8
+e0a88000
+18467c50
+24610000
+58000182
+20403275
+20402c90
+da200182
+204032c8
+e0a88000
+da200181
+202032b3
+58000001
+da200183
+204032b3
+58000181
+204032d0
+2020322f
+1a60a200
+ea208000
+2040323c
+20402dde
+2040325f
+2feffe00
+2020b15c
+2040315d
+20402d53
+20402df7
+20202e45
+44e14018
+1a608a86
+204032d6
+5800013b
+204032d0
+207a0000
+58000006
+1a608a86
+e0a08000
+df200006
+5800012f
+9a608c00
+1a608a22
+20207f01
+2040316e
+2437af5e
+20203172
+20402f5e
+20402e11
+24778000
+20203152
+44e1c018
+20403188
+24342f5e
+1a60a284
+ea208000
+203a2f5e
+1fe0fe02
+98007200
+1a608c00
+58000109
+9a608a00
+20407f01
+20403286
+204032b6
+205a3093
+5800010b
+204032d0
+c000b19e
+c00131c6
+c001b1f2
+c07fb212
+20202f5e
+20402c7a
+20407fe9
+1a60a2ca
+ea208000
+1a60a2cb
+ea288000
+98467c00
+2442ffe7
+1a60a2ca
+ea208000
+1a608acb
+e0a08000
+1a60a2c4
+ea218000
+1a60a2c7
+ea298000
+98467c00
+2442ffe7
+1a60a2c4
+ea218000
+1a608ac7
+202032c5
+20402f88
+2040324c
+60008aa2
+20403274
+68008aa2
+284ffe03
+7920fe00
+1a608ab2
+e0a08000
+c000b216
+20403245
+20403274
+284ffe04
+7920fe00
+20403249
+1a60a2de
+ea210000
+20207f9c
+58000001
+60008d54
+2040329e
+e0a38000
+2040329e
+245a31bd
+2040329e
+205a31c2
+700d5220
+68008d38
+79207e02
+60008d38
+20600000
+58000001
+204032a8
+58000140
+d8e0000b
+20207f08
+204032a7
+58000000
+d8e0000b
+20207f08
+20403274
+284ffe03
+2020b21b
+d8a00d64
+204031e0
+68040d64
+245a31e4
+68040d64
+205a31e9
+20402c7a
+68040d64
+da200168
+204032bf
+e0a40000
+58000170
+9a60a200
+ea2c0000
+98467c00
+2442b1ed
+58000168
+9a60a200
+ea240000
+da200170
+204032bf
+e0a40000
+20202f5e
+5800010b
+9a608c00
+df200009
+20207ff3
+58000001
+204032ab
+58000140
+d8e0000e
+20207f08
+204032aa
+58000000
+d8e0000e
+20207f08
+700d5110
+68008d38
+79207e01
+60008d38
+20600000
+d8a00d74
+204031e0
+68010d75
+245a3209
+68010d75
+205a320e
+20402c7a
+68018d74
+da200178
+204032c4
+5800017b
+9a60a200
+ea298000
+98467c00
+2442b207
+58000178
+9a60a200
+ea218000
+da20017b
+204032c4
+20202f5e
+700d5221
+202031b9
+58000001
+204032ae
+58000140
+d8e0000c
+20207f08
+204032ad
+58000000
+d8e0000c
+20207f08
+204032bd
+c000b216
+c001321b
+20600000
+5800010d
+2040327e
+da200160
+204032bf
+2020322d
+5800010d
+2040327e
+da200164
+204032bf
+2020322d
+20402c7a
+1a608acd
+e0a08000
+20600000
+20402c7a
+1a60a2be
+2020327f
+20402c7a
+1a608abe
+2020322d
+1a60a2ae
+2020327f
+1a608aae
+e0a20000
+20600000
+1a608a90
+202032b4
+58000000
+20402c7a
+1a608a85
+202032b4
+1a608a42
+202032b4
+58000004
+1a608acc
+202032b4
+1a60a287
+202032d1
+1a608a87
+202032b4
+58000002
+1a608ad0
+202032b4
+58000001
+20402c7a
+1a608ace
+202032b4
+20402c7a
+1a60a2b4
+202032d1
+58000001
+20402c7a
+1a608ab4
+202032b4
+20402c7a
+1a60a2b2
+202032d1
+58000001
+20402c7a
+1a608ab2
+202032b4
+20402c7a
+1a60a296
+202032d1
+1a608a96
+202032b4
+1a60a2cf
+202032d1
+58000000
+1a608acf
+202032b4
+1a60a2d2
+202032d1
+1a60a201
+202032d1
+1a60a2b5
+202032d1
+58000000
+20402c7a
+1a608ab5
+202032b4
+20402c7a
+1a60a2fb
+ea208000
+6000c1de
+20600000
+20402c7a
+6800c1de
+1a608afb
+202032b4
+1a60a2fc
+202032d1
+1a608afe
+202032b4
+58000109
+9a60a200
+ea288000
+20600000
+58000135
+202032d0
+58000000
+da200135
+202032b3
+5800012b
+204032cd
+ea220000
+20600000
+5800015f
+202032d0
+58000000
+da20015f
+202032b3
+58000000
+da20015c
+202032b3
+da20012f
+202032b3
+58000108
+202032d0
+da200108
+202032b3
+58000105
+202032d0
+58000000
+da200105
+202032b3
+58000104
+202032d0
+58000000
+da200104
+202032b3
+58000000
+da20013b
+202032b3
+58000001
+2020329a
+5800010c
+204032cd
+ea238000
+20600000
+5800015e
+202032d0
+58000000
+da20015e
+202032b3
+58000000
+da200180
+202032b3
+58000000
+da20017e
+202032b3
+58000000
+da20017f
+202032b3
+da200102
+202032b3
+da200103
+204032c7
+e0a08000
+20600000
+5800015d
+202032d0
+da20015d
+202032b3
+5800018a
+204032d0
+2020326a
+5800010c
+202032d0
+1fe20400
+1a227e00
+9a608a00
+18427e00
+20600000
+204032bf
+e0a18000
+20600000
+20402c7a
+1fe22400
+1a227e00
+9a608a00
+1a427e00
+20600000
+20402c7a
+9a60a200
+20600000
+204032cd
+ea208000
+20600000
+204032cd
+ea2a0000
+20600000
+58000000
+202032b4
+44e24018
+6800c092
+203a32d8
+c0022f30
+c007b436
+c004c5de
+c005392a
+c00735bf
+c00844a4
+c2833d00
+20600000
+44e2c018
+70015100
+70017f00
+70018000
+58000000
+600289ae
+6800c092
+203a32e3
+c0053962
+20600000
+20407cd1
+20407d9c
+204032f6
+680141f3
+20207f9c
+680141f1
+20207f9c
+680141ef
+20207f9c
+44e34018
+da204668
+20407fc4
+207a0000
+1fe22600
+204032ff
+20203324
+da600000
+20600000
+c000b311
+c0083357
+c002b335
+c009333c
+c0033353
+c0023394
+c0013399
+c009b394
+c00a334b
+c00ab34f
+c001b32e
+c005b340
+c0063347
+c00b335b
+c00c332a
+c015331a
+c015b318
+20600000
+68014682
+79207e00
+60014682
+6801420a
+793ffe00
+6001420a
+20600000
+70022900
+20600000
+68008229
+1fe0fe01
+60008229
+1fe67c01
+202133df
+70022900
+6801420a
+79207e09
+6001420a
+202033e9
+680141f5
+20207f9c
+680141e9
+20207f9c
+680141ed
+20207f9c
+6801420a
+79207e01
+6001420a
+20203412
+68014682
+79207e07
+60014682
+6801420a
+79207e02
+6001420a
+20600000
+68014682
+79207e01
+60014682
+6801420a
+79207e04
+6001420a
+20600000
+68014682
+79207e03
+60014682
+20600000
+68014682
+79207e05
+60014682
+6801420a
+79207e03
+6001420a
+20600000
+68014682
+793ffe05
+60014682
+20600000
+68014682
+79207e09
+60014682
+20600000
+68014682
+793ffe09
+60014682
+20203418
+68014682
+79207e02
+60014682
+20600000
+6801420a
+79207e00
+6001420a
+20600000
+6801420a
+79207e08
+6001420a
+202033e9
+44e3c018
+6000822a
+6800822a
+207a0000
+1fe0ffff
+6000822a
+20407cdd
+204033d6
+20403387
+2040338d
+2040651b
+680141fd
+20407f9c
+20203361
+ea608000
+207a0000
+1fe0ffff
+e2608000
+247a0000
+1a427e00
+20207f9c
+ea610000
+207a0000
+1fe0ffff
+e2610000
+247a0000
+1a427e00
+20207f9c
+6809423f
+1840a601
+da40337f
+2020336d
+2040342d
+c000b382
+2020340a
+58000002
+e2608000
+1840a408
+ea410000
+20207f9c
+da604205
+da40338a
+2020336d
+20402252
+2022b40e
+20600000
+da60467e
+da403390
+20203374
+204033f0
+20403408
+680141f7
+20207f9c
+204033ac
+68014682
+793ffe07
+60014682
+20600000
+70420500
+68014682
+c283b39e
+2fec0001
+2040b2fd
+44e44019
+68014682
+793ffe00
+793ffe01
+793ffe02
+793ffe03
+793ffe07
+60014682
+20203418
+204033a9
+2020340a
+58000000
+60014208
+20600000
+58000000
+6001420a
+20600000
+6801420a
+60014208
+58000000
+6001420a
+20600000
+6801420a
+79207e07
+60014208
+58000000
+6001420a
+20600000
+6800c682
+2feffe05
+20600000
+5800aa55
+60010aaa
+44e4c019
+d8400002
+da200aaa
+da4000c3
+20206606
+44e54019
+d8400002
+da200a9a
+da4000c3
+204065df
+68010a9a
+d840aa55
+98467c00
+20600000
+6800c55a
+6000c205
+20600000
+d8e00009
+20202c32
+d8e00009
+20202c36
+70420605
+202033d0
+da604206
+da4033d2
+2020336d
+70436301
+20600000
+70436300
+20600000
+700a990a
+20207d8f
+700a991d
+20207d8f
+44e5c019
+6800c207
+6000816d
+70022801
+700a9903
+20207d8f
+700a991e
+20207d8f
+700a9904
+20207d8f
+68014687
+6001467e
+20403404
+700a9901
+20207d8f
+58000000
+6001467e
+700a9902
+20207d8f
+700a990f
+20207d8f
+700a9910
+20207d8f
+700a990e
+20207d8f
+700a990d
+20207d8f
+700a9917
+20207d8f
+700a9918
+20207d8f
+700a9916
+20207d8f
+700a9911
+20207d8f
+700a9915
+20207d8f
+700a9914
+20207d8f
+700a9913
+20207d8f
+700a9919
+20207d8f
+700a9906
+20207d8f
+700a9905
+20207d8f
+700a991f
+20207d8f
+700a9920
+20207d8f
+700a9925
+20207d8f
+7920000d
+20600000
+793f800d
+20600000
+2040342d
+c0013424
+58000001
+e2608000
+1840a203
+1840a406
+ea288000
+1a60a601
+e2688000
+20203385
+58000000
+e2608000
+68014682
+c304b429
+20403402
+6809423f
+1840a202
+1840a404
+20203420
+6809423f
+1840a600
+ea608000
+20600000
+2040342d
+c0803434
+2020340a
+1840a40a
+20203385
+20758000
+70808100
+58003463
+600141eb
+5800696c
+600141ed
+580034f5
+600141f3
+580034f4
+600141ef
+5800347e
+600141f5
+580034b2
+600141fd
+58003465
+600141fb
+58003470
+600141e9
+58003501
+600141f9
+44e64019
+2040359b
+20406948
+204035ad
+20407d08
+20407cd3
+5800350b
+60014766
+580034fc
+6001475d
+580034f8
+6001475f
+5800346c
+60014761
+580035a2
+600146a9
+580035a4
+600146ab
+580035a9
+600146b4
+580035a6
+600146b6
+68014682
+c3860000
+2020340a
+20403586
+2020340a
+20405892
+247a0000
+da200b06
+20407e54
+24740000
+d8c00b06
+20204746
+68014797
+60014791
+70475301
+2020358f
+6800c79d
+c000b479
+68014682
+c304b479
+6800c79e
+c000b3d0
+6800c700
+243a33d0
+202033d2
+6800c79b
+6808c79c
+9841fe00
+c000b3d0
+202033d2
+1a627e00
+c016b431
+c008341a
+c00a34df
+c00ab4e8
+c0203485
+20600000
+68014509
+c000b48c
+680143d8
+203a34a2
+70478a02
+70478f3c
+20600000
+6801449a
+203a34a0
+70478a01
+680947b4
+68014496
+9840fe00
+60014496
+1fe22200
+68014498
+9840fe00
+60014498
+9a20fe00
+1fe30400
+680147c0
+9846fc00
+20407f86
+1807fe00
+6001449a
+70479001
+20600000
+70478a03
+20600000
+70417200
+70479000
+680143d6
+680947be
+98467c00
+79212200
+680147c0
+680943d6
+98467e00
+79212201
+2a200603
+20608000
+680447be
+60044496
+70479001
+20600000
+2040337b
+204034b9
+204034be
+204034d5
+204034ca
+204034c4
+202034d9
+da604799
+da4034bc
+2020336d
+70479a00
+20600000
+da604793
+da4034c1
+20203374
+da6046bf
+da40469e
+20203591
+da60478f
+da4034c7
+2020336d
+6801449a
+6000c172
+20600000
+da604790
+da4034cd
+2020336d
+6800843f
+2fe0c000
+2420b4d3
+70478a01
+20403416
+20205abf
+70479001
+20600000
+da604791
+da4034d8
+20203374
+2020341a
+da60478d
+da4034dc
+20203374
+680147a7
+6001478d
+202035af
+680147a7
+6001478d
+58000000
+60014793
+60014791
+2040355c
+20403586
+70417200
+202033f8
+58000000
+6002478d
+6001c78a
+60014509
+7047a001
+68014797
+60014791
+20407e38
+6800c759
+c1000000
+2040358f
+2020356e
+20203508
+6800c759
+c1810000
+20203508
+da6046cd
+20403582
+da6046c6
+20203584
+70436e00
+da6046db
+20403582
+da6046d4
+202034fb
+68008477
+c0093504
+20600000
+68010478
+c006b536
+c005b571
+20600000
+6800c753
+207a0000
+20206978
+1a227e00
+203a3510
+18e27e00
+c0003513
+20600000
+18e27e00
+c000351b
+20600000
+70479d01
+da6046f7
+20403582
+da6046f0
+20403584
+68014682
+c304b532
+20203521
+70479d00
+2020351d
+6800c79a
+c1808000
+70479905
+20600000
+6800c79a
+1fe0fe01
+6000c79a
+c000b527
+c001352b
+20600000
+2040355c
+70477101
+da60476c
+20203544
+70479a00
+70477102
+da60476c
+20403544
+6800c79e
+c000b551
+20600000
+68014797
+60014791
+2040355c
+2020358f
+44e6c019
+204036fc
+ea208000
+c001b53c
+c003b540
+20600000
+6800c79e
+c0003551
+c000b55c
+20600000
+ea408000
+c000b564
+c0003569
+20600000
+44e74019
+6800c78b
+2feffe00
+24608000
+1a608c06
+e8c10000
+1ff0fe00
+1fe0f205
+1a608c03
+204036f0
+e0c08000
+1a622200
+20207e3d
+6800c759
+207a0000
+70479e01
+da6046e9
+20403582
+da6046e2
+20403584
+70478004
+70478301
+da60477b
+20203544
+6800c79e
+207a0000
+70479e00
+20403586
+70478004
+70478300
+da60477b
+20203544
+70479f01
+70478007
+70478301
+da60477b
+20203544
+70479f00
+70478007
+70478300
+da60477b
+20203544
+6800c79f
+207a0000
+20203551
+ea210000
+6001478b
+2feffe00
+24608000
+6800c7a0
+207a0000
+7047a000
+680447b6
+60044496
+70479002
+204035af
+204035b9
+70478007
+6800c79f
+6000c783
+da60477b
+20203544
+da200001
+20203585
+da200000
+2020358c
+da200000
+20407d19
+da200001
+20407d19
+6800c7a1
+202069d7
+20407d04
+df200007
+20207d26
+da6046b8
+da40469a
+20403596
+20403584
+68014795
+60014793
+202033fa
+ea410000
+60014154
+e8c10000
+60014482
+20600000
+da200000
+204069a6
+680347a1
+60030a9a
+204069ae
+6800c7a1
+202069d7
+70479b01
+20600000
+70479b00
+20600000
+70479c00
+6800c7a1
+202069d7
+70479c01
+680347a1
+60030a9a
+202069ae
+70422d00
+202068a8
+204068eb
+20406908
+600147b0
+da2047aa
+20406930
+6000c7a9
+c00035be
+1fe67c64
+242135bc
+6000c783
+70478005
+da60477b
+20203544
+70478364
+202035b9
+2020341a
+20758000
+68108081
+1fe17ef0
+60108081
+58003631
+600141eb
+58003633
+600141ed
+5800340a
+600141f7
+58003635
+600141f3
+5800364b
+600141f5
+580033d0
+600141e9
+580036f6
+600141f9
+5800367a
+600141fd
+20402c7a
+58003722
+1a608ade
+e0a10000
+580035ed
+6001475b
+580035ef
+6001475f
+44e7c019
+20403628
+20407e38
+70417202
+7049f600
+6800c7cb
+6000c69a
+c00035ee
+6800c7cc
+6000c686
+70436e00
+2040360f
+20407cd3
+20407cdd
+7047f301
+68014682
+c3860000
+2020340a
+2020360f
+7047f302
+70436e01
+2040360f
+da200000
+20407d1e
+58000020
+204046f0
+d8a043b7
+6800c4a0
+1fe104f0
+18518400
+20403609
+e0a88000
+1fe1040f
+20403609
+e0a88000
+204057a6
+6808c3af
+18427200
+d8a04372
+d8c043b0
+20407f01
+6808c3af
+18427200
+d8a04392
+d8c043b0
+20207f01
+18467c09
+2021360d
+18408437
+20600000
+18408430
+20600000
+6800c7c0
+c0ffb621
+6800c7be
+c0ffb624
+6800c7c9
+c0ffb626
+6800c72c
+1fe27200
+5800472d
+1fe22200
+1a220c00
+e8c08000
+18c22200
+c07fb61f
+1fe20400
+2040680e
+c2003619
+20600000
+680447c0
+6004472f
+20203611
+6000c72d
+20203613
+6000c72e
+20203615
+da200000
+204069a6
+204037e4
+20402c7d
+2020362d
+7047cf64
+6800c7c9
+6000c744
+202068a8
+20406835
+2020696c
+2020696c
+20206978
+20403642
+204037ee
+20403639
+20203634
+68014682
+c3848000
+6800c9f6
+c000b63e
+20600000
+6800c7ea
+c1008000
+7047ea01
+20203654
+68014682
+c4048000
+20405892
+247a0000
+da204718
+20407e54
+24740000
+d8c04718
+20204746
+1a627e00
+c016b431
+c008341a
+c00a3651
+c00ab660
+20600000
+58000000
+20403220
+20203656
+680147eb
+600147ed
+7047ce14
+70409100
+204033f8
+20403416
+6800c7bd
+c000b65e
+da200000
+20207d14
+da200000
+20207d19
+58000002
+20403220
+58000000
+6002c79c
+58000004
+204069d7
+58000005
+204069d7
+58000014
+204069d7
+58000015
+204069d7
+58000016
+204069d7
+58000007
+204069d7
+20407e38
+70475e0a
+7047600a
+7047620a
+70417202
+da200000
+20407d1e
+58000020
+204046f0
+202033fa
+2040373b
+2040373e
+20403741
+2040337b
+204036c8
+204036a1
+2040368a
+20403683
+2020368f
+da60479a
+da403686
+2020336d
+20403847
+24608000
+70479b01
+20600000
+da6047ed
+da40368d
+20203374
+7047ea02
+20203662
+da6047f1
+da403692
+2020336d
+6800c7f2
+203a369e
+7047f102
+7047f200
+58000a02
+60014752
+6800c7b9
+c001b69b
+20203762
+58000a02
+60014754
+20203762
+58000000
+60024752
+20203762
+6800c7c8
+207a0000
+68014682
+c304b6c6
+da6047ce
+da4036a8
+2020336d
+6800c7cd
+6000c7ce
+6800c7d1
+247a0000
+204068eb
+20406908
+600147e8
+da2047e2
+20406930
+6808c7cf
+98467c00
+202136b6
+6000c7cf
+1fe20400
+6008c7d0
+6800c7ca
+98467c00
+204136c1
+6008c7db
+df200006
+d8c047d6
+204036f0
+6000c7dc
+da2047d3
+20207e3d
+6800c7d2
+247a0000
+7047d201
+da200001
+20207d1e
+da200001
+20207d19
+da6047a4
+da4036cb
+2020336d
+7047a405
+7047a600
+6800c7a5
+c000b6ee
+c00036ec
+d8c0479c
+18c22200
+df200008
+1a220c00
+e8c08000
+18c22200
+c00036e3
+c000b6e6
+c00136e9
+6800c7a6
+1fe0fe01
+6000c7a6
+c20036d3
+20600000
+6800c7a6
+da4047c0
+9a40a400
+ea488000
+20600000
+204036de
+20406825
+202036d9
+204036de
+20406829
+202036d9
+6800c7a5
+c000b6e3
+202036e6
+7047a501
+202036d0
+7047a500
+202036d0
+da200000
+e8c08000
+9a20a200
+c20036f1
+1a217eff
+20600000
+68008477
+c00936f9
+20600000
+68010478
+c00a3710
+20600000
+44e8401a
+ea228000
+60028b12
+68010b12
+d8406b5a
+98467c00
+24628000
+68010b15
+1ff0fe00
+60010b15
+1fe27200
+1a20a205
+1a220c00
+d8a00b17
+20407f01
+e8c08000
+60008b21
+da200b14
+da400b17
+20600000
+58000000
+6002c752
+6002c757
+204036fc
+1a420c00
+d8a04752
+df20000a
+20407f01
+44e8c01a
+ea208000
+c001374a
+c001b75c
+c0023762
+c002b762
+c00337b1
+c003b849
+c004384c
+20600000
+68014682
+c3848000
+680147eb
+600147ed
+7049f601
+5800010c
+204032cd
+20403710
+68008b14
+c002372e
+c002b72e
+20600000
+6800c752
+245a3735
+6800c754
+245a3737
+6800c756
+245a3739
+20600000
+7049f305
+20600000
+7049f405
+20600000
+7049f505
+20600000
+da6049f3
+da403744
+2020336d
+da6049f4
+da403746
+2020336d
+da6049f5
+da403748
+2020336d
+70475200
+20203762
+70475400
+20203762
+70475600
+20203762
+2040374c
+2020374f
+6800c752
+6000c75f
+20203773
+6800c75e
+20403754
+6800c753
+6000c75d
+20203770
+c0013758
+c001b75a
+6000c75e
+20600000
+70475e05
+20600000
+70475e0a
+20600000
+6800c752
+20403754
+6800c75e
+2040379e
+204037a1
+202069c4
+6800c7f0
+247a0000
+68034752
+6003475d
+6800c75e
+6808c760
+98417e00
+6808c762
+98417e00
+205a3779
+44e9401a
+20403770
+20403773
+20203776
+da404763
+d8c0475d
+2020377b
+da40476b
+d8c0475f
+2020377b
+da404773
+d8c04761
+2020377b
+7047d100
+20600000
+e8c08000
+c0003787
+c000b780
+c0013782
+20600000
+70477b00
+20203783
+70477b01
+e8c08000
+6000c77d
+ea440000
+2020378c
+ea408000
+204069d7
+1a40a401
+ea408000
+202069d7
+6004477e
+7047d101
+6800c77b
+c000379a
+6800c77f
+6000c780
+6800c77e
+204069d7
+6800c77d
+2040379e
+6000c785
+68034780
+60030a9a
+202069ae
+6800c77e
+6000c780
+6800c77f
+20203793
+1feffe05
+1fe0fe32
+20600000
+d8402ee0
+984ffe00
+1fe6fc64
+20407f86
+18078400
+18422200
+58002ee0
+98462400
+20600000
+68108082
+79207e02
+60108082
+5800009e
+60110068
+6011006a
+20600000
+6800c7f0
+247a0000
+68014752
+60014787
+6800c7ea
+c080b7b9
+680144a0
+60014787
+44e9c01a
+204037aa
+204037dc
+5800bb80
+20402a8f
+204037e0
+58001c20
+20402a8f
+df200010
+204037dc
+68014787
+c28037c9
+58001c20
+20402a8f
+204037e0
+202037cc
+58003840
+20402a8f
+204037e0
+58001c20
+20402a8f
+68014787
+1fe37e00
+60014787
+c20037c2
+7047f102
+7047f201
+58000a01
+60014752
+6800c7b9
+c001b7d9
+20203762
+58000a01
+60014754
+20203762
+68108085
+1fe1fe40
+60108085
+20600000
+68108085
+1fe17ebf
+60108085
+20600000
+6800c7bb
+c1000000
+20402c65
+6808c7bc
+6008c786
+204067fb
+20403847
+24608000
+70479a01
+20600000
+6800c7bb
+c1000000
+6800c79b
+247a0000
+68014682
+c284b7f6
+6800c7ea
+c1808000
+44ea401a
+20403847
+24608000
+58008ca0
+20402a8f
+20403847
+24608000
+2040383f
+20403842
+24610000
+20403847
+2020b7fe
+da200000
+df200010
+2040383f
+20403842
+24610000
+20403847
+2420b805
+58002a30
+20402a8f
+20403847
+2020b812
+58000000
+1a232200
+9a21a200
+c2003805
+2020381b
+58008000
+1a232200
+9a21a200
+2040383f
+20403842
+24610000
+20403847
+2020b816
+c2003805
+44eac01a
+1a227e00
+60014789
+60014797
+6800c7ea
+c000b827
+df200007
+d8c04792
+204036f0
+6000c799
+da20478f
+20207e3d
+6800c7ef
+1fe0fe01
+6000c7ef
+1fe6fc02
+20407f86
+18078400
+18077e00
+243a3838
+6800c7bf
+98467c00
+2042b83d
+dfe0479c
+184085ff
+9840a200
+dfe00000
+e2208000
+20600000
+dfe0479c
+9840a200
+dfe00002
+e2208000
+20600000
+7047f001
+20600000
+1c427e00
+6002478b
+20600000
+1c427e00
+680a478b
+98467e00
+1fe67cc8
+20600000
+6808c786
+2020681d
+68044752
+6004479c
+20600000
+6800c7b9
+6000c7af
+6800c7ba
+6000c7b0
+6800c7bb
+6000c7b1
+df20000d
+d8c047aa
+204036f0
+6000c7b7
+da2047a7
+20207e3d
+204065c2
+7046f67a
+2040386d
+20403867
+58003860
+600141fd
+da200000
+202069a6
+680146a1
+207a0000
+1fe0ffff
+600146a1
+c1800000
+7046a000
+20600000
+44eb401a
+6800c6a4
+1fe67c28
+20610000
+7046a400
+20600000
+da2046a4
+da400000
+d8400051
+202065df
+78547c00
+6800c6a3
+1fe27200
+da2046a5
+1a622400
+44ebc01a
+2040387c
+2022ffe7
+1a20a204
+c2003876
+20600000
+44ec401b
+ea218000
+ea498000
+98467c00
+20600000
+44ecc01b
+ea218000
+ea498000
+98467c00
+24628000
+e8c08000
+1fe67c00
+20628000
+1a208c03
+e8c88000
+98467c00
+20600000
+44ed401b
+78547c00
+6800c6a3
+1fe27200
+da2046a5
+1a622400
+20403881
+2022ffe7
+1a20a204
+c2003893
+20600000
+68008004
+1fe0fe01
+60008004
+da6002e5
+ea610000
+d84055aa
+98467c00
+24628000
+18c22600
+ea698000
+58ffffff
+98467c00
+2022b8a8
+2040388d
+203438a8
+20600000
+44edc01b
+1a60a604
+ea608000
+6808c6f6
+98467c00
+20628000
+6000c6f6
+68008003
+1fe0fe01
+60008003
+1a60a601
+ea608000
+6000c6f5
+1fe27200
+207a0000
+e8c08000
+c00038c2
+c000b8cf
+c00138d4
+c001b8d9
+c00238de
+c002b8e3
+c00338e8
+c07fb8ea
+c20038b7
+20600000
+18c22600
+6800c69a
+60008a9a
+d8400000
+60088a9b
+58002710
+60018a9c
+ea608000
+60008a9f
+204069ae
+1a610c01
+c20038b7
+20600000
+1a620c00
+6800c69b
+60008a9a
+d8400001
+202038c6
+1a620c00
+6800c69c
+60008a9a
+d8400002
+202038c6
+1a620c00
+6800c69d
+60008a9a
+d8400003
+202038c6
+1a620c00
+6800c69e
+60008a9a
+d8400004
+202038c6
+1a620c00
+6800c69f
+60008a9a
+d8400005
+202038c6
+e8c08000
+20600000
+18c22600
+6800c6a0
+c080b8ee
+204038f0
+1a610c04
+20600000
+44ee401b
+20403871
+203438fe
+6800c6a4
+1fe20400
+1fe0fe01
+6000c6a4
+20403867
+184b8400
+580046a5
+98408a00
+ea620000
+e0a20000
+20203903
+1a608c03
+e8c08000
+207a0000
+ea620000
+e2220000
+da2046a4
+da400000
+d8400051
+20206606
+6808c69a
+20406825
+20600000
+6808c69a
+20406829
+6808c69a
+20406825
+2040391d
+6800c6a7
+247a0000
+20402c29
+68120138
+793ffe0f
+6012004c
+20402c21
+d85fffff
+20202b2a
+6800c6a7
+203a56f9
+1fe0ffff
+6000c6a7
+202056f9
+1feffe14
+d8c046a8
+98c08c00
+e8c08000
+207a0000
+1fe22200
+1a227200
+d8a04372
+20407f01
+1a227e00
+1fe0fe02
+6000c36f
+20600000
+20758000
+204057a3
+204068a8
+58003982
+600141f3
+5800396e
+600141f1
+58003986
+600141f5
+5800396d
+600141ef
+58003969
+600141e9
+58003ab7
+600141fb
+58003c32
+6001456f
+58003cc2
+600141f9
+58003cd7
+600141fd
+2040397f
+44eec01b
+20403945
+20403964
+20402c6f
+20203c48
+680246aa
+60120054
+680246ae
+6012005a
+68108081
+1fe1fe04
+1fe17efc
+60108081
+70806200
+680146aa
+60110058
+680146ae
+6011005e
+60110060
+68120078
+79207e07
+60120078
+68110050
+793ffe0f
+60110050
+204066ce
+70804300
+70806281
+6800c6bf
+2feffe00
+68188062
+79208404
+60188062
+20600000
+2040397f
+20203945
+6808c69e
+2040680e
+204039e6
+6808c69c
+202067fb
+6808c69c
+2040681d
+2420b3d2
+202033d0
+20600000
+20403970
+20203ce9
+6800c682
+c302397f
+44ef401b
+58003eff
+680a46c5
+98408400
+1c427e00
+98467c00
+24610000
+68014682
+c282b97f
+6800c6bf
+c3830000
+20403cec
+2040340e
+1c427e00
+600246c5
+20600000
+20403ce9
+2040526e
+247a0000
+202039eb
+1a627e00
+c000b9d4
+c00139a3
+c00239d7
+c002b9c4
+c00439aa
+c004b9b1
+c00539c9
+c005b9b6
+c00639c2
+c009b9d7
+c00a39cf
+c00ab9c6
+c010b9ca
+c011b9cb
+c01239ce
+c0183c8a
+c018bc8c
+c0193c9a
+c019bc98
+c01a3c84
+c01abc73
+c01b3c82
+c01bbc8e
+c01c3c90
+c01dbca1
+c01ebc6a
+c020b9d9
+20600000
+2040397f
+6800c665
+245a3c8e
+204039d7
+68014682
+c4020000
+202039b1
+68014682
+79207e04
+60014682
+6800c6a7
+6000c172
+204039e6
+20203c1d
+68014682
+c4020000
+793ffe04
+60014682
+20203c21
+2040397f
+68014042
+1fe37e00
+680941e3
+98467c00
+2422b9bd
+20203416
+6800c6bf
+c3828000
+68110112
+245a3cf0
+2020340c
+20403cee
+20203418
+2040397f
+202039dd
+20405816
+204039d7
+20203c23
+202033dd
+20203cee
+6800c6bf
+c302b40e
+20203cf2
+20203cf2
+204058ba
+204039dd
+6800c6a8
+6000c172
+20203c1f
+70466100
+20403cee
+20203cf2
+20403a52
+202039db
+20405cc9
+20205b02
+6808c69e
+20206829
+204039df
+202039e6
+6800c6a1
+2feffe00
+2040b3f0
+6800c6a1
+2feffe01
+2040b3f8
+20600000
+6808c69e
+20206825
+6800c56b
+c1000000
+20206c28
+6810810c
+c281b9e8
+204066cb
+e8608000
+c080ba01
+68110112
+1fe67c02
+20610000
+e8608000
+60008b03
+e8688000
+18622200
+60088b04
+18408403
+68110112
+98460400
+24610000
+700b0501
+20403a17
+68008b05
+c1000000
+20203a12
+20407ec1
+20403c79
+20203a04
+44efc01b
+68110112
+207a0000
+204066cb
+e8608000
+1fe67c01
+2442ba16
+2422ba04
+e8608000
+c1028000
+c1148000
+186087ff
+20403a16
+20203a04
+204066cb
+18608602
+e8608000
+98608600
+202066c8
+44f0401c
+68008b03
+c0003a3f
+c000ba44
+c0013a49
+c001ba5f
+c0023a6b
+c002ba75
+c004ba9a
+c005bad7
+c0063ad8
+c006baec
+c0073af4
+c007bafa
+c0083b06
+c008bb0e
+c0093b12
+c0133b16
+c0143b1d
+c014bb2d
+c0153b36
+c015bb69
+c0163b6f
+c0183b76
+c018bb7c
+c0193b90
+c019bb98
+c01a3bbb
+c01abbc4
+c01b3bcd
+c01bbbd7
+c01c3bda
+c0203be2
+c0213bec
+c0243bf1
+c024bbfc
+c028bc02
+c030bc06
+c07fbc15
+20203c17
+68008b04
+c0833c17
+e8630000
+600340a0
+20203c1a
+68008b04
+c0833c17
+e8630000
+600344a0
+20203c1a
+68008b04
+c080bc17
+1a220600
+20403c1a
+e8688000
+6008c6a9
+68014682
+c3848000
+c3800000
+6800c6a1
+2feffe00
+2420ba58
+6808c6a9
+18417e03
+6000c093
+6800c6a1
+2feffe01
+24608000
+6808c6a9
+284ffe02
+2020b3fa
+202033f8
+68008b04
+1fe67c43
+24213c17
+6000c515
+df200008
+20407ec6
+68008b04
+1fe27200
+1a220600
+d8a04516
+204066ea
+20203c1a
+68008b04
+1fe67c1d
+24213c17
+6000c3af
+1fe27200
+1a220600
+d8a043b0
+204066ea
+204057a3
+20203c1a
+6800c682
+c3023c17
+204033ba
+2020ba86
+700b0500
+2040397f
+6800c568
+207a0000
+68014573
+c0803a84
+68008b04
+60014573
+1a220600
+18627e00
+60014571
+20403a88
+20206c4d
+700b0500
+20203cd1
+20403a8e
+68014573
+6809469f
+98467e00
+60014573
+20600000
+68014573
+d840006e
+20407fdd
+6809456c
+20407fdd
+6809455e
+20407fdd
+6001469f
+20600000
+700b0501
+700b0305
+20203c1a
+68014682
+c304bc17
+20403ad4
+20343c17
+700b0500
+6800c6bf
+c2823ab4
+6800c6c0
+247a0000
+700b0501
+e8610000
+600146c1
+18627e00
+600146c3
+68008b04
+1fe0fffe
+24213c17
+2022bc17
+6000c6c0
+700b0500
+20405814
+20403ab7
+20403ab7
+20403ab7
+6800c6bf
+c4020000
+700b0501
+20403cf6
+20203c1a
+6800c6c0
+207a0000
+20405892
+247a0000
+20403acf
+44f0c01c
+1840fffd
+6808c6c0
+20407fdd
+1fe22200
+18427e00
+9a267e00
+6000c6c0
+680946c1
+20405a64
+680146c3
+1fe20600
+1a227200
+204066ea
+18627e00
+600146c3
+6800c6c0
+247a0000
+20203cf4
+d8400017
+6800c6bf
+c3808000
+680944a8
+20600000
+6800c6bf
+c2815a42
+20207fe9
+20203c4c
+1a220600
+e8608000
+c0003adf
+c000bae2
+c0013ae8
+c001baea
+20203c17
+2040612b
+70465a00
+20203c1a
+58040003
+6001c65b
+6000c662
+20406124
+70465a01
+20203c1a
+58040002
+20203ae3
+58040001
+20203ae3
+68008b04
+1fe67c10
+24213c17
+6000c689
+1fe27200
+d8a0468a
+204066fd
+20203c1a
+1a220600
+e8608000
+68188062
+7d3a0404
+60188062
+20203c1a
+68008b04
+1fe27200
+1a220600
+20407f58
+596e3600
+9846fc00
+20407f86
+1807fe00
+60014243
+20403c1a
+20407f9e
+202066ce
+da200002
+da40469a
+d8400000
+20203c25
+60010ac2
+da400ac2
+d8400000
+20203c25
+68014682
+c3003c17
+20403c1a
+202033e9
+68014682
+c304bc17
+20403c1a
+20203402
+68008b04
+1fe27200
+1a220600
+68014215
+1fe20a00
+204066ea
+20203c1a
+6800c682
+c3003c17
+e8608000
+6808c661
+793a0400
+79200407
+6008c661
+20403c1a
+6800c661
+c2833b2b
+20600000
+70466100
+700a9921
+20207d8f
+c2805f95
+20203b28
+6800c682
+c4020000
+6800c56b
+c1000000
+e8608000
+6808c569
+98408400
+6008c569
+20600000
+df200040
+d8a0436f
+20407ed4
+58000000
+60008ab2
+1a220600
+18627e00
+60010ab6
+20403b64
+68008ab2
+68088aa2
+18408401
+9840fe00
+60008ab2
+1fe67c1f
+24213b50
+6808c36f
+58004370
+9840fe00
+60010abb
+68088aa2
+18408401
+6800c36f
+9840fe00
+6000c36f
+20203b59
+6808c38f
+58004390
+9840fe00
+60010abb
+68088aa2
+18408401
+6800c38f
+9840fe00
+6000c38f
+68010abb
+1fe20a00
+68010ab6
+1fe20600
+18427200
+204066ea
+68008b04
+68088ab2
+98467c00
+2422bb3c
+20203c1a
+e8608000
+60008aa2
+e8608000
+60008aae
+20600000
+d8400000
+da200002
+680146b4
+60010ac2
+da400ac2
+20203c25
+68008b04
+c080bc17
+e8608000
+6000c6b2
+58000000
+600146b4
+20203c1a
+e8620000
+6002468a
+70468904
+70466300
+20403c1a
+20205f31
+68008b04
+c081bc17
+e8608000
+c0003b82
+c000bb8a
+20203c17
+e8688000
+e8608000
+c0013b88
+7d3a0407
+204067fb
+20203c1a
+20406806
+20203c1a
+e8688000
+20406812
+e8608000
+2feffe00
+2040682c
+20203c1a
+68008b04
+c080bc17
+e8688000
+2040681d
+58000000
+7d20fe00
+da200001
+20203b0a
+1a220600
+e8608000
+1fe20400
+c040bba3
+c0413ba8
+c041bbae
+6000c4c6
+c0003bb3
+c000bbb6
+c0013bb8
+20203c17
+6800c4be
+203a3c17
+6008c4c6
+7044560d
+20203bb4
+6800c4be
+203a3c17
+6008c4c6
+7044560d
+70445401
+20203c1a
+6800c4be
+203a3c17
+6008c4c6
+7044560d
+20203bb9
+70445600
+70445403
+20203c1a
+70445605
+20203bb4
+70445605
+70445400
+20203c1a
+68008b04
+1fe67c1f
+24213c17
+6000c36f
+1fe27200
+1a220600
+d8a04370
+204066ea
+20203c1a
+68008b04
+1fe67c1f
+24213c17
+6000c38f
+1fe27200
+1a220600
+d8a04390
+204066ea
+20203c1a
+68014682
+c304bc17
+68008b04
+c0843c17
+1a220600
+e8640000
+60044496
+700a9912
+20407d8f
+20203c1a
+e8610000
+60014482
+20203c1a
+6800c4c6
+203a3c17
+6800c4c4
+c0803c17
+6800c4c5
+c0803c17
+20407e25
+20203c1a
+68008b04
+c082bc17
+e8608000
+6000c6a2
+e8620000
+600246a3
+6808c6a2
+2040680e
+20403cbc
+20203c1a
+68008b04
+c080bc17
+e8608000
+6000c1de
+20203c1a
+e8608000
+c000bbfa
+6800c4c1
+c001bbf8
+c0033bf8
+c003bbf8
+20203c17
+7044c201
+20203c1a
+20405b53
+20203c1a
+68008b04
+c080bc17
+20403c1a
+e8608000
+203a60cb
+202060c9
+20403c1a
+20407f9e
+70801001
+20202a8e
+68008b04
+c0003c17
+e8608000
+203a3c13
+68008b04
+c082bc17
+e8620000
+d84f4240
+98467c00
+20213c17
+600244c7
+2040580c
+20203c1a
+2040580e
+20203c1a
+70409100
+20203c1a
+d8400001
+da200000
+20203c25
+d8400000
+da200000
+20203c25
+700b0300
+20203c49
+700b0302
+20203c49
+700b0303
+20203c49
+700b0305
+20203c49
+68008b03
+1fe22600
+700b0306
+58000002
+9a20fe00
+20403ca7
+1a627e00
+e1408000
+e1488000
+1a227200
+1a420c00
+204066e4
+202066c5
+2040397f
+700b0307
+680084ff
+207a0000
+20403ca7
+680084ff
+1fe27200
+68010501
+1fe20c00
+204066d1
+202066c5
+700b0308
+6800c6b6
+1fe27200
+1fe0fe02
+20403ca7
+680146b9
+e1410000
+680146b7
+1fe20c00
+204066d1
+202066c5
+700b0309
+58000000
+20403ca7
+202066c5
+700b030a
+58000001
+20403ca7
+20403c5d
+68014682
+d8e00002
+afefffff
+79208403
+d8e00009
+afefffff
+79208405
+6800c682
+d8e00004
+afefffff
+79208404
+e1488000
+202066c5
+d8400000
+6800c093
+d8e00000
+afefffff
+79208400
+d8e00001
+afefffff
+79208401
+6800c36e
+d8e00000
+afefffff
+79208402
+20600000
+700b030d
+6800c217
+1feffe22
+1fe27200
+20403ca7
+68014215
+1fe20c00
+204066d1
+202066c5
+700b030e
+58000004
+20403ca7
+680209ba
+e1420000
+202066c5
+700b030f
+68110112
+d84000ff
+20407fdd
+1fe27200
+20403ca7
+204066cb
+20406703
+202066c5
+700b0310
+20203c49
+700b0311
+58000004
+20403ca7
+680244c7
+e1420000
+202066c5
+da200180
+20203c91
+da200080
+20203c91
+da200101
+20203c91
+da200001
+70466100
+700b0314
+58000002
+20403ca7
+1a227e00
+e1410000
+202066c5
+da600000
+20203c9b
+da600001
+700b0315
+58000001
+20403ca7
+1a627e00
+e1408000
+202066c5
+700b031d
+58000004
+20403ca7
+680209ba
+e1420000
+202066c5
+700b0202
+60008b04
+600c0aa2
+44f1401c
+20403cb1
+680c0aa2
+204066c2
+68018b02
+e1418000
+20600000
+20403cba
+20608000
+20403cb8
+680246a3
+1feb7e00
+207a0000
+20203cbe
+6808c6a2
+20206829
+6808c6a2
+2020681b
+6808c6a2
+20206825
+1fe0ffff
+20000026
+243a3cbe
+20600000
+20403ad4
+20740000
+1a227e00
+600146b7
+1a427e00
+6000c6b6
+68010478
+680946bb
+98467c00
+2022bccf
+680946bd
+98467c00
+24628000
+600146b9
+20203c3d
+6800c6bf
+c3828000
+20403cf0
+2020340c
+70417202
+20600000
+20203cd8
+6800c6b2
+207a0000
+6800c6b3
+207a0000
+1fe0ffff
+6000c6b3
+247a0000
+7046b30a
+204068eb
+20406908
+1fe6fc64
+20407f86
+1807fe00
+18070400
+6000c6b4
+6008c6b5
+20600000
+20407fb4
+202133d9
+202033db
+d8e00006
+20203cfc
+d8e00006
+20203cf8
+d8e00005
+20203cfc
+d8e00005
+20203cf8
+d8e00004
+20203cfc
+d8e00004
+20203cf8
+6800c6bf
+f93ffe00
+6000c6bf
+20600000
+6800c6bf
+f9207e00
+6000c6bf
+20600000
+20403d39
+2040640f
+204040c6
+20403d66
+20406411
+20758000
+20403d16
+20403d19
+680246d3
+c3880000
+20403d4e
+c6130000
+68014682
+c28642b0
+202042a2
+680246d3
+c40d8000
+df200014
+58030d40
+20402a8f
+c2007ec1
+20600000
+680246d3
+c4080000
+202048ea
+5800416d
+600141ef
+58003f77
+600141f1
+58003ebb
+600141ed
+5800417c
+600141f5
+58003de3
+600141f3
+58003eb3
+600141eb
+58003d5b
+600141f9
+20402c7a
+58004401
+1a608ad8
+e0a10000
+58004406
+1a608ada
+e0a10000
+58003ebf
+1a608adc
+e0a10000
+580041f9
+600141fd
+58003d36
+60014201
+20600000
+680246d3
+c30964d7
+202064da
+20758000
+20402c9d
+20403e6e
+20403e1e
+20403e54
+20405810
+20405839
+2040582c
+20405818
+680246d3
+c28a3d46
+c289c414
+20600000
+2040659c
+680246d3
+2feffe19
+2440e5c2
+2040443f
+20403dc9
+204041aa
+202065df
+680246d3
+c30f3d53
+68008abd
+2fec0003
+24608000
+6800c71f
+6000c71e
+6800c6f5
+c3830000
+680246d3
+c4088000
+c28eaee4
+20202f2c
+68008478
+1fe67e1a
+24628000
+700a9912
+20407d8f
+d8e00000
+202041b9
+6800c6b6
+c1008000
+7046b601
+20600000
+6800c6e1
+1fe17e0f
+6000c77a
+20203d80
+6808c6e7
+2040681d
+2420bd62
+6800c6b6
+c1000000
+7046b600
+6800c77a
+1fe0fe01
+1fe17e03
+6000c77a
+20403d7e
+680246d3
+c28a443b
+c289bd79
+20600000
+d840001e
+2040680e
+d840001f
+2040680e
+20204435
+44f1c01c
+2040424a
+6800c6e0
+c002bdaa
+c0023d96
+6800c77a
+c0003d8a
+c000bd88
+c0013d8c
+c001bd8e
+6800c780
+20203dbe
+6800c77f
+20203dbe
+6800c781
+20203dbe
+6800c782
+20203dbe
+6800c6e0
+c1030000
+6800c6b5
+1fe0fe01
+6000c6b5
+20600000
+6800c77a
+c0003d9d
+c000bd9b
+c0013d9f
+c001bda1
+6800c784
+20203da2
+6800c783
+20203da2
+6800c785
+20203da2
+6800c786
+6000c6b5
+1fed7e00
+1fe22200
+1fe0fe0d
+20406413
+1a227e00
+1fe0fe0e
+20206413
+6800c77a
+c0003db1
+c000bdaf
+c0013db3
+c001bdb5
+6800c788
+20203db6
+6800c787
+20203db6
+6800c789
+20203db6
+6800c78a
+6000c6b5
+204040c0
+6800c6b5
+1fe0fe80
+1fed7e00
+1fe0fe05
+1fe22200
+2020415a
+6000c6b5
+20403d90
+6800c6b5
+58000006
+20406414
+1fe104f8
+6800c6b5
+9840fe00
+1fed7e00
+1fe0fe06
+20206413
+204033c4
+2022c316
+2040441c
+204042e4
+202033bd
+68014707
+207a0000
+680246d3
+c4088000
+c3818000
+c6130000
+20404083
+c1838000
+20404482
+d8e00003
+204043ce
+58000000
+600146ae
+6000c6b4
+20403263
+68014682
+c283c392
+c284b402
+c28033e9
+204042ca
+20202ead
+20403dce
+20407e34
+20403d6a
+20403de9
+20403ee0
+20203df7
+680246d3
+c4080000
+204048d3
+202048fd
+68108a04
+c303bdf1
+c283bdf4
+20600000
+6800c6ff
+c4038000
+2020659a
+6800c6ff
+c3838000
+20204381
+20403ded
+68108a04
+6000c6ff
+c4038000
+20403e07
+680246f9
+6808c6fd
+98408400
+1c427e00
+98467c00
+24610000
+600246f9
+20403f97
+24740000
+700d3804
+20203e0f
+680a46f9
+1c427e00
+98467c00
+24413e0c
+20600000
+58000000
+600246f9
+20600000
+68008d38
+c4010000
+20203e12
+68108a04
+c4038000
+700d5220
+58000001
+60008d54
+6803c69a
+e0a38000
+20600000
+68110050
+793ffe0b
+60110050
+20600000
+58008c00
+60014575
+58008e7a
+600144bc
+58002402
+600140bd
+58002580
+6001c0aa
+70417303
+70415608
+7046d901
+58000200
+60014154
+7044a617
+7044a817
+58000a77
+60014212
+38000306
+38044440
+38090000
+380c4408
+6004c577
+38001224
+38044000
+38080000
+e0a28000
+3803ffff
+3806fe23
+380999d9
+380c020d
+60044098
+5800012c
+60014707
+204057a3
+680246d3
+c40f8000
+20403e44
+20203e4c
+6808c6f7
+204067fb
+6808c6f7
+2040681d
+7046f603
+20608000
+7046f602
+20600000
+6808c6f8
+204067fb
+6808c6f8
+2040681d
+70422d00
+20608000
+70422d02
+20600000
+6800c22d
+c0003e59
+c000be62
+c0013e6b
+20203e59
+68094221
+68014227
+98467e00
+1feffe14
+1fe6fc64
+20407f86
+1807fe00
+600146d0
+20600000
+6809421f
+68014225
+98467e00
+1feffee6
+1fe6fd90
+20407f86
+1807fe00
+600146d0
+20600000
+68014223
+600146d0
+20600000
+6808c23a
+2040680e
+204048fb
+6808c6e2
+204067fb
+6808c6e3
+204067fb
+6808c6e4
+204067fb
+6808c6f3
+204067fb
+6808c6dc
+2040680e
+6808c6e8
+204067fb
+6808c6e9
+204067fb
+6808c6ea
+204067fb
+6808c6eb
+204067fb
+6808c6e5
+204067fb
+6808c6e6
+204067fb
+6808c6ef
+2040680e
+6808c6f0
+2040680e
+6808c6f1
+2040680e
+6808c6f2
+2040680e
+6808c6f4
+2040680e
+6808c6ed
+204067fb
+6808c6ec
+204067fb
+6808c6e7
+202067fb
+6808c6e8
+204067dd
+6808c6e9
+204067dd
+6808c6ea
+204067dd
+6808c6eb
+202067dd
+6808c6e8
+20403ea7
+6808c6e9
+20403ea7
+6808c6ea
+20403ea7
+6808c6eb
+20203ea7
+18467cff
+20628000
+18410e7f
+6812011c
+afefffff
+68120078
+f920fe00
+60120078
+6812007c
+fd20fe00
+6012007c
+20600000
+78347c00
+68120138
+79347e1a
+6012004c
+20402c21
+20404482
+20403e9f
+20203ebf
+20403ebf
+680080a0
+247a0000
+202067ed
+20403ee0
+d8400019
+680246d3
+2feffe12
+2040bede
+2040680e
+204063ee
+6808c6e2
+204067dd
+6808c6e3
+204067dd
+6808c6e4
+204067dd
+6808c6e5
+204067dd
+6808c6e6
+204067dd
+6808c6e7
+204067dd
+6808c6ed
+204067dd
+6808c6e8
+204067dd
+6808c6e9
+204067dd
+6808c6ea
+204067dd
+6808c6eb
+204067dd
+6808c6f3
+202067e1
+d840001e
+20600000
+44f2401c
+20403eee
+20403f36
+6800c6b8
+6808c6b7
+6000c6b7
+98467c00
+2422b3d4
+6800c6be
+6808c6bd
+6000c6bd
+98467c00
+2422b3d4
+20600000
+6800c6ea
+c17f8000
+da200000
+6808c6ea
+2040681d
+7920a200
+6808c6eb
+2040681d
+7920a201
+1a227e00
+6000c6b8
+c000befe
+c0013f02
+6800c6b9
+c283bf0e
+20600000
+6800c6b7
+c0003f06
+c001bf08
+20600000
+6800c6b7
+c0003f0a
+c001bf0c
+20600000
+7046b982
+20600000
+7046b981
+20600000
+7046b980
+20600000
+7046b983
+20600000
+6800c6b9
+793ffe07
+6000c6b9
+c0003f16
+c000bf19
+c0013f1c
+c001bf1f
+20600000
+6800c6b8
+c001bf22
+20600000
+6800c6b8
+c0003f22
+20600000
+6800c6b8
+c001bf2c
+20600000
+6800c6b8
+c0003f2c
+20600000
+6800c6bc
+1fe0fe01
+6000c6bc
+1fe67c01
+20610000
+7046bc00
+6800c6ba
+1fe0fe01
+6000c6ba
+20600000
+6800c6bb
+1fe0fe01
+6000c6bb
+1fe67c01
+20610000
+7046bb00
+6800c6ba
+1fe0ffff
+6000c6ba
+20600000
+6800c6e8
+c17f8000
+da200000
+6808c6e8
+2040681d
+7920a200
+6808c6e9
+2040681d
+7920a201
+1a227e00
+6000c6be
+c000bf46
+c0013f4a
+6800c6bf
+c283bf56
+20600000
+6800c6bd
+c0003f4e
+c001bf50
+20600000
+6800c6bd
+c0003f52
+c001bf54
+20600000
+7046bf82
+20600000
+7046bf81
+20600000
+7046bf80
+20600000
+7046bf83
+20600000
+6800c6bf
+793ffe07
+6000c6bf
+c0003f5e
+c000bf61
+c0013f64
+c001bf67
+20600000
+6800c6be
+c001bf6a
+20600000
+6800c6be
+c0003f6a
+20600000
+6800c6be
+c001bf6f
+20600000
+6800c6be
+c0003f6f
+20600000
+7046c200
+6800c6c0
+1fe0fe01
+6000c6c0
+20600000
+7046c100
+6800c6c0
+1fe0ffff
+6000c6c0
+20600000
+58000002
+6000c680
+20600000
+6800c1e2
+207a0000
+20405271
+247a0000
+680246d3
+c281bf8a
+c2803f8a
+c282bf8a
+20403f97
+24740000
+da200009
+20404d63
+6801424e
+e0a10000
+580002a1
+e0a10000
+6803c69a
+e0a38000
+20600000
+58000000
+6003c69a
+20203f81
+680146aa
+600146b0
+20600000
+44f2c01c
+da200007
+6809446f
+20405a64
+6803c69a
+e0a38000
+20600000
+44f3401c
+78547c00
+58000000
+6003469b
+20403fb5
+20404079
+2040407e
+20404099
+24740000
+20403f8d
+d8e00008
+202043ce
+6801469b
+1fe67e00
+6001469b
+20207fe7
+6801469d
+1fe67e00
+6001469d
+20207fe7
+6801469d
+1fe67e00
+6001469d
+6801469b
+1fe67e00
+6001469b
+20404002
+20207fe7
+20404002
+20207fe7
+6800c239
+c1800000
+6800c6e0
+c0003fe2
+c000bfe2
+c0013fe2
+c001bfe2
+c0023fc4
+c002c010
+c0033fe2
+20203fe2
+6800c6a7
+205a405d
+7046a701
+20600000
+20403fc0
+6808c6f3
+2040681d
+24608000
+58000000
+20406414
+c09840d1
+58000002
+20406414
+c4038000
+2040405d
+20403fde
+6000c6a1
+1ff1fe00
+20404169
+6000c69c
+6800c6a1
+1fe17e0f
+20404169
+6000c69e
+6800c6f6
+c0003fa3
+c000bfab
+c0013fa7
+c001bfb3
+20600000
+58000012
+20206414
+c018bfea
+202040d1
+20403fc0
+78547c00
+6808c6f3
+2040681d
+24608000
+58000000
+20406414
+c0983fe0
+58000002
+20406414
+c4038000
+2040405d
+6800c69b
+20404165
+6001469b
+6800c69d
+20404165
+6001469d
+6800c6f6
+c0003ffa
+c000bffc
+c0013ffe
+c001c000
+20600000
+20403fa3
+202040b3
+20403fab
+202040b3
+20403fa7
+202040b3
+20403fb3
+202040b3
+6801469d
+6809469b
+6001469b
+6009469d
+20600000
+2040640f
+20000064
+1a427e00
+20406414
+1fe22400
+20406411
+20000064
+1a427e00
+20600000
+78547c00
+6808c6f3
+2040681d
+24608000
+da400002
+20404007
+c4038000
+da400000
+20404007
+6000c6dd
+c09f4145
+6800c6a7
+205a4039
+7046a701
+20404039
+6800c6a1
+1ff1fe00
+20404169
+6000c69c
+6800c6a1
+1fe17e0f
+20404169
+6000c69e
+6800c6f6
+c0004031
+c000c035
+c0014033
+c001c037
+20600000
+6800c6a4
+c0004051
+c000c045
+20600000
+20403fa3
+2020402d
+20403fa7
+2020402d
+20403fab
+2020402d
+20403fb3
+2020402d
+2040640f
+2040405d
+dfe00005
+20406414
+6000c6a1
+dfe00007
+20406414
+6000c6a2
+dfe00008
+20406414
+6000c6a3
+20206411
+6800c6a2
+c1800000
+6800c6a3
+1fe67c2d
+20610000
+7046a400
+5800ba41
+20406405
+58000032
+20406405
+5800b541
+20206405
+6800c6a2
+c1800000
+6800c6a3
+1fe67c2d
+24610000
+7046a401
+5800ba41
+20406405
+58008032
+20406405
+5800b541
+20206405
+dfe00003
+20406414
+6001469b
+dfe00004
+20406414
+6001469d
+20600000
+d840001b
+204067fb
+d840001b
+2040681d
+20608000
+68108109
+79207e04
+60108109
+20600000
+6808c6c0
+68108109
+9840fe00
+207a0000
+6000c69f
+7046c000
+20207fe7
+6808c6c0
+68108109
+9840fe00
+6000c6c0
+20600000
+6800c6c0
+207a0000
+6000c69f
+7046c000
+20207fe7
+6800c6ba
+207a0000
+6000c6a0
+7046ba00
+20207fe7
+da200000
+6808c6e2
+2040681d
+7920a200
+6808c6e3
+2040681d
+7920a201
+6808c6e4
+2040681d
+7920a202
+20404090
+1a227e00
+20600000
+6800c6e5
+c17f8000
+6808c6e5
+2040681d
+7920a203
+6808c6e6
+2040681d
+7920a204
+20600000
+20404083
+204040a8
+204040a3
+1a227e00
+6808c69a
+6000c69a
+9842fe00
+1fe67c00
+20628000
+20207fe7
+c6930000
+1a227e00
+207a0000
+6000c69a
+20207fe7
+68014682
+c284c0ad
+68014682
+c28040b0
+20600000
+1a227e00
+243a5820
+20205822
+1a227e00
+243a2bc7
+20202bc9
+44f3c01c
+d840001a
+680246d3
+2feffe12
+2040c0be
+2040681d
+20608000
+5800000a
+20406414
+200003e8
+202040b3
+d840001f
+20600000
+680246d3
+c28940c4
+d840001a
+202067fe
+d840001f
+202067fe
+20403d36
+20758000
+204040c0
+6800c6e0
+c002c0d5
+204040d9
+c01840e0
+c018c0ea
+204040d1
+200003e8
+202040cb
+44f4401d
+680246d3
+c28963e0
+202063d1
+204040d9
+c01f414b
+20404145
+202040d5
+58000001
+20406414
+6000c6de
+58000000
+20406414
+6000c6dd
+20600000
+6800c6de
+c068c139
+c06940f8
+c00140ee
+c02a40e6
+20600000
+7046e002
+20600000
+7046e006
+20600000
+6800c6de
+c03840e8
+7046e001
+20600000
+7046e004
+204040f6
+58003426
+20406413
+58000419
+20406413
+58000009
+20206413
+58005a09
+20206413
+7046e003
+204040f6
+58000f0d
+20406413
+5800e31d
+20406413
+5800d27d
+20406413
+20404102
+2020411a
+5800351b
+20406413
+5800b428
+20406413
+58004629
+20406413
+5800962a
+20406413
+58008c2b
+20406413
+58006e2c
+20406413
+5800642d
+20406413
+58005f38
+20406413
+58000f39
+20406413
+5800323a
+20406413
+5800473b
+20406413
+58001042
+20206413
+58002e54
+20406413
+5800f255
+20406413
+5800f461
+20406413
+58007063
+20406413
+58005275
+20406413
+58004176
+20406413
+5800ed77
+20406413
+58002378
+20406413
+58004679
+20406413
+5800e57a
+20406413
+5800487c
+20406413
+5800777e
+20406413
+5800017f
+20406413
+5800000b
+20406413
+5800007f
+20406413
+202040f4
+7046e000
+204040f6
+5800100d
+20406413
+5800ed1d
+20406413
+5800807d
+20406413
+20404102
+58000943
+20406413
+2020411a
+6808c6dc
+20406829
+20407ec1
+6808c6dc
+20406825
+20207ec1
+7046e005
+5800ba41
+20406405
+58000d11
+20406405
+5800041b
+20406405
+5800041c
+20406405
+58000f1d
+20406405
+58000032
+20406405
+5800b541
+20206405
+5800ba41
+20406405
+20000fa0
+5800ff7f
+20406405
+1a227e00
+20406405
+5800007f
+20406405
+5800b541
+20206405
+c4038000
+d840ff00
+9841fe00
+20600000
+c4018000
+d84000f0
+9841fe00
+20600000
+20405892
+247a0000
+6800c6c5
+1fe17e03
+c1818000
+680246d3
+c281c179
+c2804179
+c282c179
+20403f97
+24740000
+20203f90
+58000000
+6003c69a
+20203f90
+1a627e00
+c00a41c3
+c000c2ca
+c00ac1d9
+c00141d9
+c002c1d6
+c008426c
+c009429b
+c00341d5
+c00241cc
+c009c1cc
+c00541ca
+c01733cd
+c018c1b4
+c01941b6
+c01f4191
+c013c38e
+c01cc19c
+c01d4192
+c01e419a
+20600000
+20203410
+70478b01
+6800c71e
+243a4492
+6800c720
+6808c703
+98467c00
+2022b40a
+20600000
+70478b01
+20600000
+70478b01
+d8e00003
+204043d2
+58000000
+60014707
+7046a700
+6800c6e0
+1fe67c05
+2042c039
+2442c05d
+68008004
+c289c1af
+204041aa
+202065d1
+20402c7a
+1a60a2ae
+da40005b
+d8400004
+20600000
+20402c7a
+1a60a4ae
+ea408000
+6000c77b
+20204435
+d8e00002
+202041b9
+7046c602
+d8e00001
+202041b9
+6800c6c5
+f9207e00
+6000c6c5
+20600000
+6800c6c5
+f93ffe00
+6000c6c5
+20600000
+7046c500
+20600000
+6801420a
+793ffe00
+6001420a
+58000000
+600146ae
+20403f8d
+202042ca
+204063cb
+202033dd
+6800c71e
+243a4492
+68014682
+c28642b0
+680246d3
+c28041d7
+c282c2b0
+c281aead
+202033a7
+20203f74
+20600000
+204043c0
+2020659a
+44f4c01d
+204041e7
+680246d3
+c28041d7
+c281aead
+6800c71e
+243a4492
+68014208
+c283c1f5
+c28033a9
+c280c1ef
+c28141f2
+c281c1f2
+202042b0
+58000000
+600446b7
+e0a20000
+7046b400
+7046a700
+7041e200
+70442900
+20600000
+c282c1f2
+c281c1f2
+202042b0
+68014682
+c28642b0
+202033a7
+204041c1
+68014208
+c28033a9
+202033a7
+204043d6
+20404243
+20404246
+20404250
+2040445d
+20404443
+20404333
+204043a5
+204043eb
+20404209
+20404231
+20404234
+20404237
+2040423a
+2040423d
+20204240
+6800c711
+207a0000
+1fe0ffff
+6000c711
+247a0000
+2020420f
+6800c712
+c1000000
+c002c216
+20404225
+70471205
+70471105
+20600000
+2040422c
+70471204
+70471105
+20600000
+58008006
+20406413
+200003e8
+70471100
+70471200
+202040e0
+5800a006
+20406413
+5800a005
+20206413
+70471100
+6800c6e0
+c0024220
+58000106
+20406413
+5800a105
+20206413
+70471100
+58000906
+20206413
+70471105
+70471201
+20600000
+da604680
+da40429b
+2020336d
+da6046ac
+da404264
+20203374
+da6046ae
+da404266
+20203374
+da6046b0
+da40426a
+20203374
+da6046c4
+da404478
+2020336d
+da6046c6
+da40425e
+2020336d
+da604704
+da404249
+2020336d
+da604707
+da404249
+20203374
+20600000
+680246d3
+c40b8000
+7046df0a
+6800c6f4
+6000c715
+20600000
+da6046df
+da404253
+2020336d
+6800c6f4
+6000c715
+58000190
+60014716
+60014718
+da200000
+6808c77a
+18408401
+6008c714
+70471301
+20600000
+6800c6c5
+c3810000
+700a9912
+20407d8f
+d8e00000
+202041b9
+204042ca
+2020340a
+204033f6
+6800c71e
+243a4492
+2020340a
+c5137e1d
+20204386
+44f5401d
+7046b400
+20404386
+204041c1
+202042b0
+680341d0
+203a33eb
+2040427e
+70016d17
+6800c65a
+243a33e1
+70016d04
+202033e1
+680146a8
+600146ae
+2040427e
+20403418
+20207df4
+580000c8
+60014716
+60014718
+20204285
+580003e8
+60014716
+60014718
+6800c720
+c000c28a
+c001428c
+c001c28e
+20600000
+6800c6f0
+2020428f
+6800c6f1
+2020428f
+6800c6f2
+60008aa2
+20404482
+68008aa2
+6000c715
+da200000
+70471301
+20207d1e
+da200000
+20207d19
+da200000
+20207d14
+202041c1
+7041e201
+20403416
+20403412
+58000000
+6001467e
+6000c680
+2020340e
+2040435f
+6800c720
+6808c703
+98467c00
+2022c2ab
+6800c210
+c019c271
+c01a4279
+202042b0
+20403d57
+c6130000
+6800c71e
+243a4492
+20600000
+44f5c01d
+68014682
+c285c2b7
+680246d3
+c30c42b7
+180a7e00
+6000c4a1
+20403418
+68014687
+600146ac
+70016d06
+58000000
+600146b0
+600146ae
+d8e00007
+204043ce
+204043ca
+6800c092
+2feffe01
+2040fdf4
+6800c092
+2feffe00
+2040fddd
+680246d3
+c28e422e
+20204282
+44f6401d
+6800c092
+2feffe01
+2040c2d4
+6800c092
+2feffe00
+2040c2d7
+680246d3
+c28e421a
+20204482
+58000000
+600146ae
+20207dfa
+58000000
+600146ac
+20207de2
+680246d3
+c4038000
+d8e00007
+204043d2
+204042e8
+204042fb
+680246d3
+c289c435
+c28a42e4
+20600000
+d8400058
+da204720
+da400000
+202065d1
+68008185
+c01a42ec
+c019c2ef
+20600000
+6000c6c7
+6803044f
+202042f1
+6000c6c7
+68030040
+600346c8
+6803c6c7
+d8c04721
+df200003
+e8cb8000
+98467c00
+2022c310
+18c08c16
+c20042f5
+20600000
+da204721
+6800c720
+1fe0ffff
+1feffe1d
+9a20a200
+68008185
+e2208000
+c01a4305
+c019c30c
+20600000
+6803044f
+e0a30000
+d8c04419
+20407ebf
+680344a0
+e0a30000
+20600000
+68030040
+e0a30000
+d8c041be
+20207ebf
+18c08dfa
+18c20a00
+680b46c8
+18408403
+e0ab0000
+20600000
+d8400058
+da204720
+da400000
+204065df
+da204721
+6800c720
+6808c703
+98467c00
+20628000
+1fe0ffff
+1feffe1d
+9a20a200
+ea208000
+6000c210
+c019c327
+c01a432c
+20600000
+e8c30000
+600341d0
+d8a041be
+20407ebf
+202067d7
+e8c30000
+600341d0
+d8a04419
+20407ebf
+e8c30000
+600344a0
+20600000
+6800c6f5
+c282c349
+c2834359
+20204337
+20404083
+c003433e
+7046d81e
+6800c6d9
+c1008000
+7046d901
+20600000
+20404343
+6800c6d9
+c1000000
+7046d900
+202043c0
+6800c6d8
+207a0000
+1fe0ffff
+6000c6d8
+247a0000
+20204370
+6800c6ed
+c17f8000
+6808c6ed
+2040681d
+2020c354
+6800c6d9
+c1008000
+7046d901
+680246d3
+c3830000
+20204370
+6800c6d9
+c1000000
+7046d900
+d8e00006
+202043d2
+68008004
+c4030000
+6800c720
+c000c369
+c001436c
+20600000
+68008004
+c4030000
+6808c6ed
+2040681d
+2020c366
+70472001
+20600000
+6800c703
+6000c720
+20600000
+6808c6ed
+2420c370
+20600000
+6808c6ed
+2040681d
+2020c354
+20600000
+6808c720
+18408401
+6800c6d2
+98467c00
+244143cc
+6008c720
+7041bd00
+2040437a
+204043c0
+2020437e
+d8400001
+da204720
+da400000
+20206606
+20404381
+204043c2
+202041d7
+68014682
+c283c392
+c284b402
+c28033e9
+202042ca
+44f6c01d
+58000000
+600146b0
+68014682
+c284b402
+68014682
+c28033e9
+20600000
+58000001
+60030040
+70018533
+202042df
+204043c4
+20207e2f
+6800c6ec
+c17f8000
+6808c6ec
+2040681d
+2020c39f
+6800c685
+6000c6da
+6800c6db
+c1008000
+7046db01
+202043ca
+204043b5
+6800c6db
+c1000000
+7046db00
+20407e2f
+202043c8
+6800c6f5
+c2824394
+20404083
+c003c3af
+6800c685
+6000c6da
+6800c6db
+c1008000
+7046db01
+202043ca
+204043b5
+6800c6db
+c1000000
+7046db00
+20407e2f
+202043c8
+da6046da
+da4043b8
+2020336d
+d8e00006
+204043ce
+20403357
+2020426c
+d8e00001
+202043ce
+d8e00001
+202043d2
+d8e00000
+202043ce
+d8e00000
+202043d2
+d8e00002
+202043ce
+d8e00002
+202043d2
+d8e00005
+202043ce
+d8e00005
+202043d2
+d8400001
+20600000
+680246d3
+f9207e00
+600246d3
+20600000
+680246d3
+f93ffe00
+600246d3
+20600000
+680246d3
+c40d0000
+6800c6ce
+1fe0fe01
+6000c6ce
+1fe67c0a
+20610000
+7046ce00
+204068eb
+20406908
+6001470f
+da204709
+20406930
+6800c231
+c280c4a0
+c30043e9
+202043e7
+d8e00004
+202043ce
+d8e00004
+202043d2
+680246d3
+c4020000
+6800c6ef
+6000c715
+6800c6cf
+1fe0fe01
+6000c6cf
+1fe67c14
+244143f9
+c00143fb
+c00243fe
+c00343fb
+c00443fe
+20600000
+7046cf01
+202043fe
+da200000
+70471302
+20207d14
+da200000
+70471302
+20207d19
+20403f97
+24740000
+da200007
+da40469a
+20600000
+6800c78b
+207a0000
+6808c6e7
+2040681d
+2040c410
+6800c704
+247a0000
+20404083
+247a0000
+20202d83
+6800c6e7
+c17f8000
+7047040a
+20600000
+20404423
+68014778
+d840aa55
+98467c00
+2022c42b
+60094778
+2040441c
+20204435
+680344a0
+60034738
+1fe0ff00
+60034755
+1fe0ff00
+60034772
+20600000
+58004778
+d8404720
+98460400
+6801c700
+9840fe00
+d8400002
+da204778
+20206562
+5800477f
+d8404720
+98460400
+6801c700
+da204720
+20406562
+2040431a
+6802477b
+20402c7a
+2020322c
+5800477f
+d8404720
+98460400
+da204720
+6801c700
+20206514
+d8400001
+da20477a
+da40005a
+202065d1
+d8400001
+da20477a
+da40005a
+202065df
+c6130000
+680246d3
+c40b0000
+6800c705
+1fe0fe01
+1fe17e07
+6000c705
+c1838000
+68014682
+c280444f
+c284c44f
+20600000
+44f7401d
+6800c706
+247a0000
+680246d3
+c4040000
+6800c6a5
+204063fb
+6000c6a6
+1fe67c10
+2021445b
+70470600
+20600000
+7047061e
+20600000
+da604706
+da404460
+2020336d
+6800c6a5
+20406414
+1fe67c10
+24610000
+680246d3
+c4040000
+d8e00008
+204043d2
+70417200
+7046c41e
+20404482
+680246d3
+c28ac471
+6800c720
+c000c489
+c0014476
+20600000
+6800c720
+c000c489
+c001448c
+c001c48f
+20600000
+6800c6f0
+2020428f
+70417220
+20204482
+6800c6f0
+c17f8000
+6000c715
+20204296
+6800c6f1
+c17f8000
+6000c715
+20204296
+20404296
+2040447a
+2040447e
+6800c6f2
+c17f8000
+6000c715
+20204296
+6800c6f0
+6000c715
+20204298
+6800c6f1
+6000c715
+20204298
+6800c6f2
+6000c715
+20204298
+44f7c01d
+6800c71e
+1fe0ffff
+6000c71e
+6808c720
+18408401
+6800c6d2
+98467c00
+244143cc
+6008c720
+7041bd00
+2040437a
+204042fb
+202042a2
+20404482
+58000000
+600400a1
+20202b1f
+20758000
+68108081
+1fe17ef0
+60108081
+20406948
+580044e6
+600141eb
+580044e9
+600141ed
+580044ef
+600141f3
+580044f2
+600141f5
+580033d0
+600141e9
+20402c7a
+580045c2
+1a608ad8
+e0a10000
+580044ea
+1a608ada
+e0a10000
+580044e9
+1a608adc
+e0a10000
+5800450e
+600141fd
+580044da
+6001475b
+580044d6
+6001475f
+58004560
+6001470f
+44f8401e
+204044e2
+20407e38
+70417202
+6800c72b
+6000c69a
+c00044d5
+6800c72c
+6000c686
+204044db
+20407cd3
+20407cdd
+70475701
+68014682
+c3860000
+2020340a
+70475702
+204044db
+da200000
+20407d1e
+20202ee4
+202044db
+44f8c01e
+6800c729
+c0ffc4e0
+6808c706
+2020680e
+6000c706
+202044de
+20402c9d
+68014753
+60014755
+20204515
+20406835
+204044e9
+2020340a
+2020696c
+6800c765
+207a0000
+20202d83
+20600000
+20206978
+20404544
+20404503
+202044ee
+1a627e00
+c016b431
+c008341a
+c01cc4fb
+c01e44ff
+c01d44f9
+20600000
+70476501
+20600000
+70476501
+70476301
+70476401
+20600000
+70476501
+70476301
+70476401
+20600000
+6800c763
+c1000000
+6800c762
+c1008000
+70476201
+da200000
+20207d19
+da200000
+20407d19
+204044db
+2020340a
+2040337b
+20204510
+6800c72d
+207a0000
+da604755
+da40450a
+20203374
+2040451a
+6009471a
+2040451f
+6009471c
+20600000
+6801471a
+6001471e
+20404540
+20404525
+6000c724
+6801471c
+6001471e
+20404542
+20404525
+6000c725
+20600000
+68014720
+1fe22200
+6801471e
+2040452e
+6800c719
+243a4537
+24610000
+6809471e
+20600000
+98467e00
+20214534
+1fe67e00
+70471801
+9a267c00
+20600000
+70471800
+9a267c00
+20600000
+2421453e
+6800c718
+243a453c
+58000001
+20600000
+58000002
+20600000
+58000000
+20600000
+70422e33
+202068eb
+70422e34
+202068eb
+6800c72a
+c1808000
+44f9401e
+70471901
+2040451a
+68014724
+68094722
+98467c00
+20628000
+60014722
+20404550
+20204554
+6800c724
+203a455a
+1fe0ffff
+20204557
+6800c725
+203a455d
+1fe0fe01
+1fe20e00
+da200001
+20204560
+d8e00000
+da200000
+20204560
+d8e00002
+da200000
+20204560
+1a227e00
+6000c761
+6800c763
+c0002ee4
+68014753
+60014755
+6800c761
+203a4580
+44f9c01e
+da200000
+20407d14
+18e27e00
+c00245a3
+c002c5a5
+c00345a7
+2040458b
+c0004574
+c001457a
+c001c574
+20600000
+18e27e00
+c000458f
+c000c591
+c0014593
+c001c595
+20600000
+18e27e00
+c0004597
+c000c59a
+c001459d
+c001c5a0
+20600000
+44fa401e
+da200000
+20407d19
+18e27e00
+c00245bc
+c002c5bc
+2040458b
+c00045a9
+c00145af
+c001c5a9
+20600000
+6800c728
+6808c727
+9841fe00
+20600000
+70473401
+202045be
+70473402
+202045be
+70473601
+202045be
+70473602
+202045be
+70473401
+70473601
+202045be
+70473402
+70473602
+202045be
+70473402
+70473601
+202045be
+70473401
+70473602
+202045be
+70473801
+202045be
+70473802
+202045be
+70474101
+202045c0
+18e27e00
+c00045b5
+c000c5b5
+c00145b7
+c001c5b7
+20600000
+18e27e00
+c00045b9
+c000c5b9
+c00145b9
+c001c5b9
+20600000
+70473400
+202045be
+70473600
+202045be
+70473400
+70473600
+202045be
+70473800
+202045be
+da20472e
+20207e3d
+da20473b
+20207e3d
+6800c764
+c000c5cc
+da204744
+20407e54
+243445d1
+d8c04744
+e8c08000
+1fe22200
+da404745
+20600000
+70476400
+78347c00
+da200001
+da404766
+20600000
+6800c747
+c00245d5
+c002c5d5
+20600000
+6800c74a
+243a45dc
+6800c74c
+243a45dc
+6800c74e
+243a45dc
+20600000
+78347c00
+202045c7
+20758000
+68108081
+1fe17efc
+60108081
+580046b4
+600141eb
+580046b3
+600141ed
+5800340a
+600141f7
+580046b1
+600141f3
+58004612
+600141f5
+5800460c
+600141e9
+5800476a
+600141f9
+58004686
+600141fd
+58004729
+600146e7
+58004806
+600146e2
+58004807
+600146e4
+204057a3
+204047da
+20404788
+2040476d
+20406948
+2040477a
+20407e38
+20407d08
+20404793
+204047c7
+44fac01e
+2040464f
+6800c6dd
+c0004609
+6800c6de
+6000c686
+2020480e
+704686ff
+7046df01
+202046d9
+6800c6df
+c00133d0
+2040527e
+6800c256
+243a33d0
+202033d2
+1a627e00
+c000c626
+c0014629
+c0024631
+c002c633
+c0034635
+c003c638
+c009463c
+c009c644
+c013c645
+c0174648
+c01ec649
+c00a4658
+c00ac65c
+c01fc65f
+c0204665
+c008466b
+c016466c
+c016c677
+20600000
+7046ad00
+7046ac00
+20600000
+2040462b
+20204631
+7041e200
+70468000
+70420500
+7046ac00
+7046ad00
+20207e38
+204033a9
+202046c2
+204046b6
+20203408
+58000002
+6000c680
+20600000
+7046ac00
+58000001
+6000c6ad
+20600000
+6800c1e2
+c1008000
+7041e201
+20403416
+20403414
+204046b6
+20403408
+2020340e
+20204631
+58000005
+6000c6ac
+20600000
+202033cd
+da400000
+6800c217
+1fef8422
+68014215
+1fe22200
+20206606
+da400000
+6800c69a
+c4008000
+6800c217
+207a0000
+1fef8422
+68014215
+1fe22200
+202065df
+204046b6
+58000000
+600146b7
+20203408
+20407e38
+7046b000
+202046d9
+20407e38
+7046b001
+680446c1
+60044496
+20403416
+20205abf
+68014509
+c1000000
+680446c9
+207a0000
+60044496
+20205abf
+2020481f
+6800c6dd
+c1000000
+6800c6df
+c1808000
+20404672
+20203406
+7048df01
+df20000b
+d8a048e0
+d8c048c9
+20207f01
+6800c6dd
+c1000000
+6800c6df
+c000c67c
+2020481b
+6800c8df
+c1808000
+7048df00
+68014682
+c2803408
+c284b408
+df20000b
+d8c048e0
+d8a048c9
+20207f01
+2040468c
+20404693
+2040469e
+204046a6
+204046a9
+202046ac
+da6046db
+da40468f
+20203374
+7046df02
+20403408
+204046f4
+2020480b
+da6048ec
+da404696
+2020336d
+68014682
+c284c80b
+c280480b
+6800c8c9
+c000c80b
+c002480b
+c002c80b
+2020340a
+da6046ac
+da4046a1
+2020336d
+6800827f
+79207e00
+79207e07
+6000827f
+20600000
+da604680
+da40463c
+2020336d
+da6046ad
+da4033e9
+2020336d
+6800c6df
+c1808000
+da6046b7
+da4046c2
+20203374
+2040473a
+20206978
+2020696c
+20406835
+202046b3
+6800c69a
+c280c6be
+c28046ba
+20600000
+680146d7
+600146d9
+600146db
+202033f8
+680146d3
+600146d9
+600146db
+202033f0
+6800c6df
+c1808000
+6800c69a
+c280c6c8
+c28046cc
+20600000
+680146d1
+600146d9
+600146db
+202033eb
+68014682
+c3848000
+680146d5
+600146d9
+600146db
+680146b3
+204046f0
+20403404
+680246bd
+600248cc
+68014682
+c3858000
+202033fa
+6800c6df
+c1808000
+6800c69a
+c280c6df
+c28046e4
+20600000
+204046f8
+203a46c2
+20403406
+204033f0
+202033e1
+680146b7
+680946b5
+600946b7
+247a0000
+680146b1
+204046f0
+20403404
+680246b9
+600248cc
+68014682
+c3858000
+202033fa
+60014154
+1fe0fffc
+60014482
+20600000
+68014682
+c284b402
+c28033e9
+202046b6
+6800c217
+1fe27200
+68014215
+1fe22200
+ea210000
+c0004701
+1a20a222
+c20046fc
+20207ff1
+e8c30000
+600341d0
+18c08c0a
+d8a041be
+20407ebf
+204067d7
+20207fef
+20407fe9
+68014682
+c280470d
+c284c710
+20600000
+6800c253
+c19f8000
+20207fe7
+6800c6b0
+207a0000
+20207fe7
+20407fe9
+68014682
+c3800000
+c3848000
+20207fe7
+6800c69a
+c280c71c
+c280471f
+20600000
+6800c093
+c1818000
+202046d9
+202046d9
+78567c00
+680146d9
+600146db
+20404713
+20344718
+20404708
+24740000
+78367c00
+20600000
+20404720
+24760000
+1a227e00
+203a4730
+20403406
+da6046f1
+20204732
+20403408
+da604719
+dfe00005
+98effe00
+9a60a600
+ea608000
+207a0000
+20404762
+1a60a601
+20204735
+68014682
+c284c73e
+c280474e
+20600000
+20405892
+247a0000
+20404765
+24740000
+1fe0ffff
+1feffe05
+d8404741
+98408c00
+e8c08000
+1fe22200
+e8c90000
+20407ea5
+20405a64
+1a227200
+20407e9f
+20207f01
+20405271
+247a0000
+20404765
+24740000
+1fe0ffff
+1feffe05
+d84047a0
+98408c00
+e8c28000
+6002c79b
+6800c79b
+1fe22200
+20404d63
+6801424e
+e0a10000
+580000a1
+e0a08000
+6802479c
+e0a48000
+20600000
+60008a9a
+da200a9a
+20207e3d
+da200a9a
+20407e54
+24740000
+68008a9a
+20600000
+68010478
+c00c465f
+20600000
+58000002
+6000c8eb
+58200008
+600246c1
+592c0005
+e0a20000
+7044a617
+5800001b
+600144fa
+20405810
+2040582c
+20405839
+20205818
+df200028
+d8a04741
+d8c0949f
+20407ef4
+df200028
+d8a047a0
+d8c094c7
+20207ef4
+df20017e
+d8c0913a
+20207ef4
+df2001e7
+d8c092b8
+20207ef4
+204047ae
+24740000
+6800c69f
+20404790
+6800c6a0
+20404790
+6800c6a1
+20204790
+207a0000
+1fe18480
+202067f9
+204047ae
+24740000
+20404797
+202047b4
+da200000
+6800c69f
+204047a9
+7d3a2200
+6800c6a0
+204047a9
+7d3a2201
+6800c6a1
+204047a9
+7d3a2202
+1a227e00
+6000c6a9
+6800c69e
+9a2ffe00
+6809469c
+9840fe00
+600146aa
+20600000
+207a0000
+1fe18480
+2040681d
+2420fff1
+20207fef
+20407fe9
+6800c6a8
+247a0000
+6800c69b
+207a0000
+20207fe7
+2040666a
+680146aa
+da200ac2
+6808c69e
+204066b3
+2040666d
+68008ac2
+1fe27200
+6000c3af
+20407ef4
+68008ac2
+1fe27200
+6000c515
+20407ef4
+e8c08000
+6000c6e6
+e8c08000
+6000c6dd
+20600000
+6800c69a
+c4008000
+d8400003
+680146a4
+1fe22400
+da2046a6
+204065df
+680946a6
+58001b3a
+98467c00
+24628000
+6800c6a8
+207a0000
+1fe20400
+680146a4
+1fe0a403
+da200ac2
+204065df
+202047e8
+680146a2
+207a0000
+2040666a
+d8400001
+da2046a8
+204066b3
+6800c6a8
+207a0000
+680146a2
+1fe0fe01
+da200ac2
+6808c6a8
+204066b3
+2040666d
+204047ba
+e8c10000
+207a0000
+1fe20a00
+e8c88000
+18427200
+20407f01
+202047e9
+6800c69a
+c4008000
+680146ae
+1fe22400
+d8400004
+da200ac2
+204065df
+68008ac2
+c080c7f9
+58000001
+60008ac2
+18007203
+2040630d
+680146ae
+1fe22400
+d8400004
+da200ac2
+20406606
+68018ac3
+6001c0a0
+6001c4a0
+20600000
+202046d9
+da200000
+da6048d4
+20407d24
+204046f4
+6800c8eb
+6000c8ec
+20600000
+58000000
+20404816
+70467901
+20407cd3
+20407cdd
+68014682
+c3860000
+2020340a
+6809423f
+e0408000
+e8a08000
+6000c685
+20600000
+6801423f
+efe08000
+c1800000
+2020340a
+6809423f
+e8408000
+c000c82a
+58000001
+6809423f
+e0408000
+18408c02
+e8c08000
+e0a08000
+e8c10000
+20207f9c
+58000002
+20404816
+18408c05
+e8c10000
+203a340a
+20207f9c
+60030101
+68008101
+6000810c
+e8c08000
+6000810b
+e8c08000
+6000810a
+e8c08000
+60008109
+e8c08000
+60008108
+e8c08000
+60008107
+68030107
+20600000
+204068a2
+6800c223
+6000c4a0
+6800c225
+e0a08000
+6800c227
+e0a08000
+6801c4a0
+6001c0a0
+20600000
+68014203
+9a40fe00
+1ff0fe00
+600101f7
+18422400
+2040489b
+580000a0
+2040488d
+680081f7
+2040488d
+c5144856
+680081f8
+2040488d
+204048a1
+2040489b
+580000a1
+2040488d
+2040487f
+e2208000
+1a20a201
+1a40a5ff
+2422c85a
+202048a1
+1a50fe00
+600101f7
+18422400
+2040489b
+580000a0
+2040488d
+680081f7
+2040488d
+c514486b
+680081f8
+2040488d
+ea208000
+2040488d
+1a20a201
+1a40a5ff
+2422c86b
+202048a1
+df20000a
+204048be
+204048a6
+204048d2
+204048c7
+203a48a9
+c2004875
+202048a9
+204048a9
+204048af
+204048d2
+204048a6
+204048d2
+202048a9
+df200008
+da600000
+204048be
+204048a6
+204048d2
+1a63a600
+204048c7
+9a60a600
+204048d2
+204048a9
+c2004882
+20404879
+1a627e00
+20600000
+df200008
+1fe22600
+204048a9
+2a6ffe07
+2040c8ac
+2440c8af
+1a63a600
+204048d2
+204048a6
+204048d2
+204048a9
+204048d2
+c2004890
+20204871
+204048ac
+204048a6
+204048d2
+204048af
+204048d2
+202048a9
+204048af
+204048a6
+204048d2
+204048ac
+202048d2
+78347c00
+6800cffe
+202048b2
+78547c00
+6800cffe
+202048b2
+78347c00
+6800cfff
+202048b2
+78547c00
+6800cfff
+202048b2
+1fe10e07
+1fe97e00
+d8408070
+98408400
+e8408000
+f9207e00
+e0408000
+18408404
+e8408000
+f9347e00
+e0408000
+20600000
+6800cfff
+1fe10e07
+1fe97e00
+d8408070
+98408400
+e8408000
+f93ffe00
+e0408000
+20600000
+20000004
+6800cfff
+1fe10e07
+1fe97e00
+d840811c
+98408400
+58000000
+e8488000
+a84fffff
+7920fe00
+20600000
+20600000
+44fb401e
+68108a26
+2feffe07
+2040c8ea
+2040492e
+68108a26
+60008b22
+68108a27
+60008b23
+60108a27
+1fe47e00
+68088d37
+98417e00
+60008d37
+708a26e0
+68008b23
+2fe00201
+2040c941
+68008b22
+2fe00201
+2040c94a
+20404b61
+20204903
+44fbc01e
+20404919
+708a0000
+20002710
+708a10c0
+68110050
+793ffe0a
+60110050
+708a003c
+708a26ff
+708a27ff
+708a0400
+700c6b02
+58000d9d
+d8a00c6e
+98a67200
+20207ed4
+68088c6c
+202067fb
+68008d45
+207a0000
+68088c6c
+2040681d
+2020c8ea
+20600000
+d8e00000
+20407f16
+247a0000
+68008d46
+247a0000
+68008d45
+245a4bb7
+20600000
+d8a00b68
+38011212
+38048000
+38080000
+380d0000
+e0a48000
+38022412
+38048604
+38081000
+380c0008
+e0a48000
+38000001
+e0a08000
+20600000
+700c6b02
+58000000
+60008b67
+60010c65
+1fe0fe01
+60010c67
+1fe0fe01
+60010c69
+58008ffa
+60010b7c
+5800903a
+60010b7e
+d8a00b80
+d8c090fe
+20407eb3
+68008c6d
+245a492b
+2020490b
+60008ba2
+60008bbb
+20600000
+68108a26
+c2834931
+20600000
+20404936
+20407f15
+58000280
+d8e00000
+20207f08
+68008d36
+c081493b
+700d4600
+700d4700
+20600000
+68008d53
+207a0000
+700d5300
+700d3602
+700d4501
+20600000
+708a2701
+20204b37
+68008b22
+c2824955
+20600000
+68108a18
+e0a08000
+c2004946
+20600000
+44fc401f
+708a2611
+68108a20
+60008b24
+1fe27200
+203a4943
+d8a00c6e
+20404946
+68008b24
+1fe67c07
+20610000
+68008c6e
+1fe17e80
+c040495a
+c0004962
+20202a8c
+68008c6e
+1ff1fe00
+1fe37e00
+1fe17e03
+c000496a
+c000c970
+c0014975
+20202a8c
+68008c6e
+1ff1fe00
+1fe37e00
+1fe17e03
+c0004976
+c000c97e
+c0014983
+20202a8c
+68008c6f
+c004498a
+c00349a0
+c00549ea
+c00049fc
+20204984
+68008c6f
+c0014a2f
+c000ca33
+c001ca45
+20204984
+20204984
+68008c6f
+c000ca4f
+c001ca79
+c002caa3
+c004cabc
+c005cad7
+c003c984
+20204984
+68008c6f
+c0054ae8
+c004caf9
+c005cb11
+20204984
+20204984
+68108a11
+79207e00
+60108a11
+20204988
+708a1240
+20600000
+68008c6e
+c0c04984
+68008c72
+c0804984
+68008c73
+c0804984
+68008c74
+c080c984
+68008c75
+c0804984
+68008c70
+c0804984
+68008c71
+c0804984
+68008c6b
+c002499c
+c001c99e
+20204984
+da400001
+20204a14
+da400001
+20204a12
+44fcc01f
+793f8023
+68008c71
+c000c9b6
+c00149cf
+c001c9d2
+c010c9a9
+c01149e0
+20204984
+700d4b00
+68008c72
+c00049ae
+c000c9b2
+20204984
+da200b93
+ea208000
+98002400
+20204b21
+da200bac
+ea208000
+98002400
+20204b21
+68008d48
+245a49c7
+58000b68
+68088b68
+60010d3f
+60088d41
+68008c74
+98467c00
+242149c5
+68008d41
+98002400
+68010d3f
+1fe0fe01
+98002200
+20204b21
+68008c74
+202049c0
+68108a04
+245a49cb
+700d4800
+20600000
+68108a04
+79207e07
+60108a04
+20600000
+58000b80
+68088b80
+202049ba
+68008c70
+1fe67c03
+24214984
+68008c70
+da200be4
+c0004b1e
+79200023
+da200be9
+c000cb1e
+da200c07
+c0014b1e
+da200c47
+c001cb1e
+20600000
+68010c72
+c000c9e5
+68010b7c
+1fe22200
+20204b1e
+700d4501
+700d3601
+68010b7e
+1fe22200
+20204b1e
+68008c6b
+c0824984
+68008c6e
+c0c0c984
+68008c70
+c0804984
+68008c71
+c0804984
+68008c74
+c080c984
+68008c75
+c0804984
+68008c72
+c0804984
+68008c73
+c0804984
+da400001
+20204a12
+68008c6b
+c0014984
+68008c70
+c0804984
+68008c71
+c0804984
+68008c74
+c0814984
+68008c75
+c0804984
+68008c73
+c0804984
+68008c6e
+c0404a0d
+c040ca18
+c0414a1c
+20204984
+68008c72
+c0804984
+da400002
+68008d39
+c000ca16
+da200c65
+20204b21
+da200c67
+20204b21
+da200c69
+20204b21
+68008c6b
+c0824984
+da400002
+20204a12
+68008c6b
+c0824984
+68008c72
+c040ca29
+c0414a2b
+c041ca2d
+1fe17e7f
+c0004a25
+20204984
+68008d3b
+da400002
+c000ca14
+20204a12
+68008d3c
+20204a26
+68008d3d
+20204a26
+68008d3e
+20204a26
+700d4c01
+da200d4d
+da400001
+20204b21
+68010c70
+d84001ba
+98467c00
+2422c984
+793f8023
+68008d42
+243a4a42
+700cf600
+68008c74
+98002400
+da200cf6
+20404b21
+d8a00cf6
+df200008
+20207ec6
+700d4200
+700cf601
+20204a3b
+68008c74
+c080c984
+700d4b01
+da400001
+68008d49
+c0004a4d
+c000ca4e
+20204a12
+20204a14
+20204a12
+68008c6b
+c0824984
+68008c74
+c0804984
+68008c75
+c0804984
+68008c71
+c0804984
+68008c73
+c0804984
+68008c6e
+c0004a5e
+c000ca66
+c0014a67
+20204984
+68008c70
+c080c984
+68108a00
+793ffe07
+60108a00
+700d3900
+700d3a01
+20204988
+20204984
+68008c70
+c0804984
+68008c72
+c040ca72
+c0414a75
+c041ca77
+1fe17e7f
+c0004a70
+20204984
+700d3b00
+20204988
+700d3c00
+700d5301
+20204988
+700d3d00
+20204a73
+700d3e00
+20204a73
+68008c74
+c0804984
+68008c75
+c0804984
+68008c6e
+c0004a82
+c000ca8f
+c0014a90
+20204984
+68008c70
+c080c984
+68108a00
+79207e07
+60108a00
+700d3901
+700d3603
+700d4300
+20404988
+20407f15
+58001388
+d8e0000f
+20207f08
+20204984
+68008c70
+c0804984
+68008c71
+c0804984
+68008c72
+c040ca9d
+c0414a9f
+c041caa1
+1fe17e7f
+c0004a9b
+20204984
+700d3b01
+20204988
+700d3c01
+20204988
+700d3d01
+20204988
+700d3e01
+20204988
+68008c6e
+c0804984
+68008c72
+c0804984
+68008c73
+c0804984
+68008c74
+c0804984
+68008c75
+c0804984
+68008c71
+c0804984
+68008c70
+1fe17e80
+c0804984
+68008c70
+c0804aba
+700c6b02
+68008c70
+60108a04
+20404988
+700d4801
+20600000
+700c6b03
+20204ab5
+68008c6b
+c0014984
+68008c6e
+c0804984
+68008c72
+c0804984
+68008c73
+c0804984
+68008c74
+c0804984
+68008c75
+c0804984
+68008c71
+c0804984
+68008c70
+1fe67c01
+24214984
+68008c6b
+c001cad1
+c0024ad1
+20204984
+68008c70
+c0004ad5
+700c6b04
+20204988
+700c6b03
+20204988
+68008c6b
+c0824984
+68008c6e
+c080c984
+68008c70
+c0804984
+68008c71
+c0804984
+68008c74
+c0804984
+68008c75
+c0804984
+68008c72
+c0804984
+68008c73
+c0804984
+20204988
+700d4c01
+68008c71
+60008d4d
+68008c72
+1fe67c01
+2042caf5
+68008d36
+c0824988
+700d3602
+20404988
+20007530
+20007530
+20600000
+700d4501
+700d3a00
+700d3604
+20600000
+700d5001
+20404b03
+68010c70
+60010d4e
+68008c74
+98007200
+d8c00c76
+d8a00cb6
+20407f01
+20204988
+68010c70
+d8400200
+98467c00
+24628000
+68010c72
+d8400000
+98467c00
+24628000
+68010c74
+d8400001
+98467c00
+24628000
+700d4301
+20600000
+68008c74
+c0804984
+68008c70
+c0004b17
+c000cb1a
+20204984
+700d4a00
+700d4901
+20204988
+700d4401
+700d4a01
+700d4900
+20204988
+ea208000
+98002400
+1a20a201
+44fd401f
+c591cb2c
+1a40fe01
+1fe3fe00
+60108a18
+708a1803
+68008c74
+1fe0fffe
+1fe37e00
+60008c74
+c0004b35
+68010c74
+9a467c00
+20214b30
+1fe22400
+1a227e00
+60010b65
+1a427e00
+60008b67
+20204b37
+d8e00000
+20204b57
+44fdc01f
+68008b67
+207a0000
+1fe27200
+1fe67c40
+20214b3e
+df200040
+68008b67
+9f267e00
+60008b67
+68010b65
+1fe20c00
+e8c08000
+60108a18
+c591cb47
+708a1800
+c2004b43
+18c27e00
+60010b65
+d8e00000
+20404b57
+68008b67
+247a0000
+68008d36
+c1808000
+700d3602
+20600000
+da208a19
+d8e00001
+e8c08000
+e2208000
+c2004b54
+58000000
+f9207e00
+60108a10
+68088d37
+9841fe00
+60008d37
+20600000
+d8e00002
+da208a1a
+20204b54
+44fe401f
+68008d38
+207a0000
+68008d37
+243a4bac
+68008d45
+203a4b86
+68008d36
+c001cbbf
+c0814b86
+68008d3a
+243a4b86
+20404b6f
+20204b7a
+68008d38
+c4008000
+68008d37
+c3808000
+68008d38
+793ffe01
+60008d38
+68008d51
+207a0000
+c0084ba8
+20202a8c
+68008d38
+c4010000
+68008d37
+c3810000
+68008d38
+793ffe02
+60008d38
+68008d52
+207a0000
+c0104b89
+c010cba4
+20202a8c
+d8a00d54
+df200006
+20207ec6
+68008d4c
+68088d4b
+98417e00
+203a4ba0
+68088d4a
+9840fe00
+c000cb91
+20204ba0
+700d5200
+68008d55
+c0014ba1
+c001cba1
+68008d55
+60008d54
+68008d56
+e0a08000
+68008d58
+e0a08000
+68008d5a
+e0a08000
+df200004
+d8c00d54
+20204b5e
+700d5200
+df200008
+d8c00d54
+20204b5e
+700d5200
+df200003
+d8c00d74
+20204b5e
+700d5100
+df200008
+d8c00d64
+20204b52
+68008d36
+c001cbb0
+c0014bb2
+20600000
+700d3700
+20600000
+68108a00
+79207e07
+60108a00
+700d4701
+20600000
+68008d36
+c1018000
+c0014bbb
+20600000
+68008d47
+207a0000
+700d4601
+20204bc2
+d8e0000f
+20407f16
+247a0000
+68108a00
+c4038000
+708a00fc
+20007530
+708a003c
+20600000
+44fec01f
+6800c1ce
+247a0000
+20404bce
+24544be6
+20600000
+44ff401f
+18622200
+d8400004
+e8608000
+c000cbd8
+18408401
+c0014bd8
+18627e00
+60110058
+20600000
+68110112
+98467c00
+24214bd8
+78547c00
+1a220600
+20404bee
+98408400
+68110112
+98467c00
+24214bdf
+1a220600
+e8608000
+c000cc3f
+20202a8c
+44ffc01f
+68110058
+98000600
+20404bee
+98608600
+18627e00
+60110058
+20600000
+e8608000
+18608602
+c0014bf3
+e8608000
+20600000
+e8610000
+20600000
+6811005e
+194095fb
+99409400
+20600000
+d8400004
+20204bfc
+d8400002
+47004020
+1f20f201
+6811005e
+1fe21400
+1f227e00
+e1488000
+1fe0ffff
+99409400
+19427e00
+60010258
+18427e00
+c1010000
+68010258
+6011005e
+20204c0b
+58000000
+60010258
+20600000
+20758000
+58004d28
+600141f3
+580001a0
+60014243
+58001800
+60110054
+58001bff
+60110056
+58001c00
+6011005a
+20404c28
+70806200
+58001c00
+6011005e
+60110060
+58001800
+60110058
+60010244
+68110050
+793ffe0f
+60110050
+204066ce
+70804301
+70806281
+20600000
+58001fff
+6011005c
+68108081
+1fe1fe07
+60108081
+20600000
+4700c020
+6810810c
+98002400
+c301cc37
+68110112
+98002600
+d840044f
+98467c00
+24628000
+68110058
+98000600
+20204bc8
+6818810c
+284ffe06
+2020cc3a
+60108015
+20600000
+47014020
+6800c1ce
+203a4c44
+78347c00
+20600000
+e8610000
+98006000
+98000e00
+e8608000
+98000400
+1e0b7e00
+1fecfe00
+c01fcc4d
+20600000
+4701c020
+18e27e00
+c0004cdc
+c000cc66
+c0014c6b
+c001cc7a
+c0024cb3
+c002ccdc
+c0034cc6
+c003cc5c
+c0084cc9
+c008ccd1
+c0094ca5
+c009cc85
+20204cdc
+20404cdc
+20407f9e
+2040688c
+204033d2
+204033d9
+2020688f
+70424500
+204033d0
+20404c13
+202033db
+20404cf2
+68110000
+e1410000
+18007206
+20204cdd
+e8610000
+60014243
+60110052
+20600000
+e8608000
+1fe20400
+60108024
+e8608000
+98408400
+79207e07
+60108023
+e8608000
+98408400
+1fe27200
+20600000
+c515ccc4
+20404c6f
+e8608000
+60108025
+98408400
+c2004c7c
+184104ff
+e8608000
+98467c00
+2422ccc4
+20204cdc
+c595ccc4
+20404c6f
+60040a9a
+20407422
+df200010
+d8a00ac2
+20404ca0
+600c0aa2
+d8a00ad2
+20407497
+da200ad2
+da400ac2
+d8a00ae2
+20407352
+df200010
+d8c00ae2
+20404c9c
+680c0aa2
+68040a9a
+1fe0fff0
+60040a9a
+243a4c88
+20204c80
+e8c08000
+60108025
+c2004c9c
+20600000
+e8608000
+e0a08000
+98408400
+c2004ca0
+20600000
+c595ccc4
+d8400000
+df200010
+d8a00ac2
+20404ca0
+68108085
+1fe17efd
+60108085
+d8c00ac2
+df200010
+20407478
+20407428
+20407491
+20204c80
+df200020
+d8a04000
+d8400000
+e8608000
+e0a08000
+98408400
+c2004cb6
+184104ff
+e8608000
+98467c00
+2422ccc4
+70802300
+20404cdc
+20404be6
+204064a3
+20407f9e
+20202001
+70802300
+20202000
+e8630000
+600340a0
+20204cdc
+e8608000
+6000825a
+1fe27200
+e8610000
+6001025b
+1fe20a00
+204066fd
+20204cdc
+e8608000
+6000825a
+1fe27200
+e8610000
+6001025b
+d8a01000
+204066fd
+6808825a
+da201000
+6801025b
+20206608
+18007204
+20404cf4
+18007e01
+e1408000
+1e027e00
+e1418000
+18000e0e
+47024020
+20404cf6
+18e27e00
+e1408000
+1f227e00
+e1408000
+18000e05
+1f20f202
+20204bf9
+18000eff
+20404cf4
+58000001
+e1408000
+18007201
+20204ce3
+1800140c
+20204cf7
+18001408
+20204cf7
+18001406
+20204bf5
+7827fc00
+7824fc00
+e9408000
+08008008
+c2004cfa
+78247c00
+08008010
+78447c00
+7844fc00
+7847fc00
+1ff0fe00
+20600000
+7041ce00
+20600000
+680341d0
+680b0040
+98467c00
+20600000
+6800804b
+c2814d0f
+204062ef
+70007c08
+20204d04
+793ffe02
+6000804b
+20406001
+58000000
+7934fe01
+6000807f
+20204d04
+20600000
+70007c17
+d8a004d9
+58000000
+2d0ffe1b
+7920fe01
+e0a08000
+58000000
+e0a10000
+680141e3
+e0a10000
+6800c1e5
+e0a10000
+6800c1e7
+e0a10000
+20204d04
+70007c18
+20204d04
+20406899
+20608000
+d8400007
+2040681d
+2420cd2f
+70424501
+20600000
+6800c245
+c1808000
+20404c62
+20204cec
+4702c020
+68010264
+1fe20c00
+e8c08000
+1fe1040f
+1ff1fe00
+c004cd53
+c003cd53
+c0054d5f
+c002cd4b
+c000cd3f
+20600000
+18427e00
+c002cd43
+c001cd4a
+20600000
+700a9927
+20407d86
+6800c092
+c4030000
+18427e00
+c002c38e
+20600000
+20600000
+20404d5f
+da200001
+20404d63
+6801424c
+e0a10000
+58000000
+e0a08000
+20600000
+da200001
+20404d63
+6801424c
+e0a10000
+58000000
+e0a08000
+700a8e01
+6800c252
+79207e06
+6000c252
+700a9912
+20207d86
+e8c08000
+c000cd62
+20600000
+20600000
+20405240
+1a220400
+60088a8e
+1fe20a00
+1a227e00
+e0a10000
+20600000
+2035cd6f
+58004365
+d8a04246
+98a67200
+20407ed4
+47034020
+58000551
+d8a00511
+98a67200
+20407ed4
+580002c9
+d8a0025d
+98a67200
+20407ed4
+20205318
+4703c020
+18c20400
+18420c00
+e8c10000
+60010266
+e8c10000
+60010268
+18c27e00
+60010264
+6800c681
+c0004d85
+202050ef
+68010266
+203a4dfc
+47044021
+68008268
+c000cd9d
+c0284de0
+c028cdf5
+c0294df3
+c029cdf3
+20204dfc
+4704c021
+2040527e
+6800c256
+c0004d9b
+c000cd9b
+c0014d9b
+c001cd9b
+c040cd9b
+c0604d9b
+c0404d9b
+c0204d9b
+20600000
+58000000
+20600000
+20404d8f
+247a0000
+204052b8
+20404e01
+6809026f
+203a4dfb
+204052c1
+6801026f
+e0a10000
+18007e01
+e0a10000
+20204dfc
+6800c364
+207a0000
+1fe22200
+47054021
+680202d5
+d8400100
+98408400
+1c427e00
+98467c00
+24610000
+70436400
+1a227e00
+c0284db7
+20202a8c
+d9000000
+204052b8
+20404e7a
+204052c3
+20407ea8
+20404ead
+204052c1
+5800000c
+e0a10000
+18007e01
+e0a10000
+20204dfc
+4705c021
+68010275
+1fe0fe04
+1ff1fe00
+1fe97e00
+1fe08401
+d8c04260
+e8c18000
+207a0000
+60018ac2
+68008ac2
+1fe22200
+20404dd3
+1a427e00
+6000c260
+20600000
+d8e00000
+da400000
+18e67c07
+24610000
+aa2fffff
+2020cdda
+20204dde
+18427e00
+203a4dde
+f9202400
+184085ff
+18e08e01
+20204dd5
+20405274
+247a0000
+20404d8f
+247a0000
+204052c5
+20406e11
+20404dc3
+20204dec
+20405274
+247a0000
+204052c5
+20406e11
+204052ce
+68010275
+203a4dfb
+e0a10000
+68014248
+e0a10000
+20204dfc
+20404d33
+20204dfc
+47064021
+70028400
+20406a8a
+68008284
+c1008000
+20204dfc
+20405264
+58000000
+60010266
+60010268
+70026a01
+20600000
+4706c021
+204052c3
+18002400
+68010266
+1fe22600
+68010264
+98000c00
+20404e10
+1a627e00
+1a60a7fc
+1fe0fffc
+243a4e08
+1a427e00
+6001026f
+20600000
+47074021
+e8c08000
+c000ce49
+c0014e51
+c001ced5
+c0024f05
+c002cfa2
+c0034fcb
+c003d01b
+c0045050
+c004d060
+c0054e1f
+c005d061
+20405062
+20600000
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+5800000b
+e0a08000
+18e27e00
+e0a08000
+e8c10000
+c0014e2d
+c001ce33
+20600000
+58020008
+e0a30000
+58000280
+e0a20000
+18007e0c
+20204e38
+5803000c
+e0a30000
+58000006
+e0a40000
+18007e10
+9a40a400
+20204e1e
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+e8c10000
+60010aa2
+1a627e00
+9a262600
+204052c3
+5800000b
+e0a08000
+18e27e00
+e0a08000
+68010aa2
+20204e2a
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+98c08c00
+1a627e00
+9a262600
+20204e1e
+20407ea8
+20407ead
+d9000000
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+e8c10000
+1fe20400
+e8c10000
+1fe21600
+4707c021
+18427e00
+c000ce64
+c001ce86
+c008ce92
+c009ce9d
+20405062
+20204ed4
+20407ea8
+d8400050
+68014248
+243a4ece
+19627e00
+60014248
+1c427e00
+600202d5
+20404e6e
+20204ea9
+600902d3
+19627e00
+600102c9
+1a227e00
+600102cb
+1a427e00
+600102cd
+1a627e00
+600102cf
+18e27e00
+600102d1
+20600000
+680902d3
+680102c9
+1fe21600
+680102cb
+1fe22200
+680102cd
+1fe22400
+680102cf
+1fe22600
+680102d1
+1fe20e00
+20600000
+20407ea8
+58000051
+d8400051
+6801424a
+243a4ece
+19627e00
+6001424a
+6800c251
+79207e00
+79207e01
+6000c251
+20204eb1
+20407ea8
+d8400052
+6801424c
+243a4ece
+19627e00
+6001424c
+6800c252
+79207e00
+79207e01
+6000c252
+20204eb1
+20407ea8
+1b427e00
+d8400053
+6801424e
+243a4ece
+19627e00
+6001424e
+6800c253
+79207e00
+79207e01
+6000c253
+20204eb1
+58000001
+6001027d
+70436450
+20204eb3
+6800c250
+79207e00
+79207e01
+6000c250
+58000000
+6001027d
+47084022
+20407ead
+58000003
+e0a08000
+18e27e00
+e0a08000
+58000008
+e0a10000
+18427e00
+e0a10000
+19627e00
+e0a10000
+6801027d
+c000cec9
+290c0000
+2020cec4
+58000004
+e0a10000
+18007e00
+e0a10000
+5800000c
+20204ed0
+e0a10000
+18007e02
+e0a10000
+5800000c
+20204ed0
+79201000
+20204eb1
+9a40a400
+1a627e00
+9a262600
+20204ed4
+20204e1e
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c10000
+1fe21600
+e8c10000
+1fe20400
+4708c022
+58000050
+98467c00
+2022ceed
+58000051
+98467c00
+2022cef3
+58000052
+98467c00
+2022ceff
+58000053
+98467c00
+2022cef9
+20600000
+19627e00
+60014248
+6800c250
+79207e01
+6000c250
+20204e1e
+19627e00
+6001424a
+6800c251
+79207e01
+6000c251
+20600000
+19627e00
+6001424c
+6800c253
+79207e01
+6000c253
+20600000
+19627e00
+6001424e
+6800c252
+79207e01
+6000c252
+20600000
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c10000
+1fe20400
+18422200
+47094022
+58000050
+98467c00
+2022cf1c
+58000051
+98467c00
+2022cf3a
+58000052
+98467c00
+2022cf26
+58000053
+98467c00
+2022cf30
+20205062
+18a21600
+6800c250
+79207e04
+79207e03
+6000c250
+19620a00
+d9600050
+68014248
+1fe20400
+20204f43
+18a21600
+6800c252
+79207e04
+79207e03
+6000c252
+19620a00
+d9600052
+6801424c
+1fe20400
+20204f43
+18a21600
+6800c253
+79207e04
+79207e03
+6000c253
+19620a00
+d9600053
+6801424e
+1fe20400
+20204f43
+18a21600
+6800c251
+79207e04
+79207e03
+6000c251
+19620a00
+d9600051
+6801424a
+1fe20400
+4709c022
+58000005
+e0a08000
+18e27e00
+e0a08000
+58000006
+e0a10000
+18427e00
+e0a10000
+18007e00
+e0a10000
+18007e00
+e0a10000
+18007e0a
+9a40a400
+60090282
+18e27e00
+60008281
+18007e50
+a961fe00
+2020cf59
+1fe0fe01
+20600000
+78547c00
+c3810000
+c4000000
+c4008000
+79207e02
+18c20a00
+18a08bff
+e0a08000
+78347c00
+20600000
+6800c250
+20404f5a
+24344f6b
+70028050
+68014248
+60010282
+20204f7f
+6800c251
+20404f5a
+24344f72
+70028051
+6801424a
+60010282
+20204f7f
+6800c252
+20404f5a
+24344f79
+70028052
+6801424c
+60010282
+20204f7f
+6800c253
+20404f5a
+24740000
+70028053
+6801424e
+60010282
+470a4022
+2040523a
+204052b8
+18002400
+204052c3
+18007e04
+e0a08000
+6800c255
+e0a08000
+58000008
+e0a10000
+68010282
+e0a10000
+58000000
+e0a10000
+18007e01
+e0a08000
+18007e02
+e0a08000
+68008280
+c028cf97
+58000030
+e0a10000
+20204f99
+580003e3
+e0a10000
+d840000c
+6009026f
+204052c1
+6801026f
+e0a10000
+18007e01
+e0a10000
+70028000
+20204e1e
+18c08c01
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c10000
+1fe22200
+470ac022
+58000050
+9a267c00
+2022cfba
+58000051
+9a267c00
+2022cfbe
+58000052
+9a267c00
+2022cfc2
+58000053
+9a267c00
+2022cfc6
+18c08c02
+e8c10000
+98007c00
+20204e1e
+6800c250
+79207e05
+6000c250
+20204e1e
+6800c251
+79207e05
+6000c251
+20204e1e
+6800c252
+79207e05
+6000c252
+20204e1e
+6800c253
+79207e05
+6000c253
+700a9906
+20207d86
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c10000
+1fe22200
+e8c10000
+1fe21600
+1a220400
+20407ea8
+470b4022
+58000050
+98467c00
+2022cff2
+58000051
+98467c00
+2022d002
+58000052
+98467c00
+2022cfe6
+58000053
+98467c00
+2022cfec
+20405062
+20205017
+19620400
+6801424c
+98467c00
+2022cff8
+20405062
+20205017
+19620400
+6801424e
+98467c00
+2022cffa
+20405062
+20205017
+19620400
+68014248
+98467c00
+2022cffe
+20405062
+20205017
+20405079
+2020500a
+2040507f
+6801424c
+203a500a
+2020500a
+20405074
+68008288
+243a500a
+2020500a
+19620400
+6801424a
+98467c00
+2022d008
+20405062
+20205017
+2040506f
+2020500a
+20407ead
+58000007
+e0a08000
+18e27e00
+e0a08000
+58000004
+e0a10000
+1a227e00
+e0a10000
+19627e00
+e0a10000
+18007e08
+20205019
+20407ead
+20205019
+9a40a400
+20204e1e
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c10000
+1fe21600
+e8c10000
+1fe20400
+20407ea8
+470bc022
+58000050
+98467c00
+2022d035
+58000051
+98467c00
+2022d03b
+58000052
+98467c00
+2022d041
+58000053
+98467c00
+2022d047
+20405062
+2020504f
+18422200
+19620400
+68014248
+98467c00
+2042d074
+2020504d
+18422200
+19620400
+6801424a
+98467c00
+2042d06f
+2020504d
+18422200
+19620400
+6801424c
+98467c00
+2042d079
+2020504d
+18422200
+19620400
+6801424e
+98467c00
+2042d07f
+2020504d
+20407ead
+20204e1e
+20204e1e
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+98c08c00
+58000009
+e0a08000
+18e27e00
+e0a08000
+18007e00
+e0a10000
+18007e04
+9a40a400
+1a627e00
+9a262600
+20204e1e
+20204e1e
+20204e1e
+18002400
+204052c3
+58000001
+e0a08000
+18e27e00
+e0a08000
+58000002
+e0a10000
+58000000
+e0a10000
+1a40a406
+da600004
+20204e1e
+58000000
+6001027b
+6001424a
+70425100
+20600000
+58000000
+60010275
+60014248
+70425000
+20600000
+58000000
+6001424c
+70425200
+6800c253
+c0005085
+20600000
+58000000
+6001424e
+70425300
+6800c252
+c0005085
+20600000
+700a9907
+20207d86
+6800827f
+793ffe00
+6000827f
+6801424e
+207a0000
+204052b8
+6801424e
+1fe22200
+18002453
+2020509a
+6800827f
+793ffe07
+6000827f
+6801424c
+207a0000
+204052b8
+6801424c
+1fe22200
+18002452
+2040523a
+204052c3
+18007e06
+e0a08000
+6800c255
+e0a08000
+58000004
+e0a10000
+1a227e00
+e0a10000
+1a427e00
+e0a10000
+18000408
+202050de
+470c4023
+2040523a
+204052c3
+58000002
+e0a08000
+6800c255
+e0a08000
+58000004
+e0a10000
+18427e00
+e0a10000
+19627e00
+e0a10000
+d8400008
+202050de
+470cc023
+2040523a
+204052c3
+58000004
+e0a08000
+6800c255
+e0a08000
+58000008
+e0a10000
+18427e00
+e0a10000
+58000000
+e0a10000
+58000001
+e0a08000
+58000002
+e0a08000
+580003e3
+e0a10000
+d840000c
+202050de
+470d4023
+2040523a
+204052c3
+58000006
+e0a08000
+6800c255
+1fe0fe01
+18a22200
+6000c255
+1a220a00
+e0a08000
+58000004
+e0a10000
+18427e00
+e0a10000
+19627e00
+e0a10000
+d8400008
+6009026f
+18427e00
+203a5264
+204052c1
+6801026f
+e0a10000
+18007e01
+e0a10000
+20600000
+68010275
+203a2a8c
+204052ce
+68010275
+e0a10000
+68014248
+e0a10000
+20600000
+68010266
+203a4dfc
+470dc023
+68008268
+c000d0f9
+c0284de8
+c028cdf5
+c0294df3
+c029cdf3
+20204dfc
+470e4023
+204052b8
+18002400
+204052c3
+1fe20a00
+68010266
+1fe22600
+68010264
+98000c00
+20405108
+1a60a7fc
+2422d102
+1a420400
+204050de
+20204dfc
+e8c08000
+c0015113
+c000d116
+c001d120
+c002d15c
+c002518e
+c003d213
+c00351e1
+c0045050
+c0054e3a
+2020522e
+20407ea8
+20407ead
+20204e51
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c08000
+1a20a3ff
+2422d11c
+20600000
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+e8c10000
+1fe21600
+e8c10000
+1fe20400
+e8c10000
+1fe67c00
+2022d132
+c001512e
+c002512e
+20205130
+700a9916
+20407d86
+e8c10000
+20205159
+20407ea8
+470ec023
+58000050
+98467c00
+2022d141
+58000051
+98467c00
+2022d147
+58000053
+98467c00
+2022d153
+58000052
+98467c00
+2022d14d
+20205159
+19627e00
+60014248
+6800c250
+79207e01
+6000c250
+20205158
+19627e00
+6001424a
+6800c251
+79207e01
+6000c251
+20205158
+19627e00
+6001424c
+6800c252
+79207e01
+6000c252
+20205158
+19627e00
+6001424e
+6800c253
+79207e01
+6000c253
+20407ead
+1a627e00
+9a262600
+20600000
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c10000
+1fe21600
+e8c10000
+e8c10000
+243a5188
+20407ea8
+19620400
+470f4023
+58000050
+98467c00
+2022d176
+58000051
+98467c00
+2022d17a
+58000052
+98467c00
+2022d17e
+58000053
+98467c00
+2022d182
+6800c250
+79207e05
+6000c250
+20600000
+6800c251
+79207e05
+6000c251
+20600000
+6800c252
+79207e05
+6000c252
+20600000
+6800c253
+79207e05
+6000c253
+700a9906
+20207d86
+20407ead
+1a20a3fa
+2022d18d
+18c08c01
+1a20a3ff
+20205189
+20600000
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c10000
+18c08c02
+1fe20400
+58000005
+e0a08000
+18e27e00
+e0a08000
+1a20a202
+1a227e00
+e0a10000
+20407ea8
+470fc023
+58000050
+98467c00
+2022d1ad
+58000051
+98467c00
+2022d1be
+58000052
+98467c00
+2022d1c4
+58000053
+98467c00
+2022d1ca
+202051cf
+6800c250
+79207e04
+79207e03
+6000c250
+c28151bb
+6808827f
+79200406
+6008827f
+18e27e00
+1fe0fe01
+60008281
+6800c250
+79207e02
+6000c250
+68014248
+60010282
+202051cf
+6800c251
+79207e04
+79207e03
+6000c251
+6801424a
+202051cf
+6800c252
+79207e04
+79207e03
+6000c252
+6801424c
+202051cf
+6800c253
+79207e04
+79207e03
+6000c253
+6801424e
+1fe21600
+20407ead
+19627e00
+e0a10000
+18007e00
+e0a10000
+18007e00
+e0a10000
+18007e0a
+9a40a400
+1a20a3fa
+2022d1e0
+e8c08000
+e0a08000
+1a40a401
+1a20a3ff
+202051da
+20600000
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+1a627e00
+9a262600
+e8c10000
+1fe22200
+e8c10000
+1fe21600
+20407ea8
+47104024
+58000050
+1a220400
+98467c00
+2022d1fa
+58000052
+1a220400
+98467c00
+2022d1ff
+58000053
+1a220400
+98467c00
+2022d201
+20205203
+58000000
+60010275
+60014248
+6000c250
+20205205
+20405079
+20205205
+2040507f
+20205205
+58000000
+6001027b
+20407ead
+58000007
+e0a08000
+18e27e00
+e0a08000
+58000004
+e0a10000
+1a227e00
+e0a10000
+19627e00
+e0a10000
+18007e08
+9a40a400
+20600000
+e8c08000
+1fe20e00
+e8c10000
+1fe22200
+e8c10000
+1fe21600
+e8c10000
+1fe20400
+20407ea8
+4710c024
+6800c255
+a8e1fe00
+2420d22a
+58000050
+98467c00
+2022d227
+58000051
+98467c00
+2022d22a
+2020522a
+70424800
+70425000
+2020522a
+20407ead
+1a627e00
+9a262600
+20600000
+58000001
+e0a08000
+e8c08000
+e0a08000
+58000002
+e0a10000
+58000000
+e0a10000
+58000006
+9a40a400
+18002604
+20600000
+6800c255
+1fe0fe01
+c080523e
+1fe0fe01
+6000c255
+20600000
+47114024
+da400000
+2040526e
+243a2a8c
+2040527e
+da401800
+d8e00000
+6808c256
+a84fffff
+2020d24f
+204052a0
+19667c00
+2021524f
+20405288
+20205255
+1a40a480
+18e08e01
+58000008
+98e67c00
+20215247
+da400000
+1a427e00
+203a2a8c
+20600000
+4711c024
+20405277
+18c08c01
+e8c10000
+20600000
+47124024
+20405277
+18c20a00
+18c20400
+58000000
+e0a18000
+20600000
+4712c024
+20405274
+203a2a8c
+6801c25d
+6001c260
+6801c25a
+6001c25d
+6801c257
+6001c25a
+20600000
+47134024
+6801c257
+20600000
+4713c024
+6801c25a
+20600000
+47144025
+6801c260
+20600000
+20405274
+203a2a8c
+d8c04257
+e8c18000
+203a527a
+18c08dfd
+20600000
+4714c025
+df200004
+d8c04257
+d8400000
+e8c18000
+1fe17eff
+98418400
+c2005282
+6008c256
+20600000
+47154025
+2040526e
+243a2a8c
+20405274
+203a5295
+6801c25a
+6001c257
+e8c18000
+e0a18000
+e8c18000
+e0a18000
+58000000
+e0a18000
+d8400000
+19627e00
+98e0fe00
+f9200400
+18e08e01
+98e67c00
+2422d298
+1a4d7e00
+9841fe00
+6001c260
+20600000
+4715c025
+2040527e
+18e22600
+d8400000
+d9600000
+18e27e00
+c00452b0
+6800c256
+afefffff
+2020d2b0
+18408480
+18e08e01
+1a227e00
+98467c00
+2022d2b0
+202152a5
+18427e00
+9a267c00
+242152b6
+18e27e00
+1a620400
+98461600
+1a620e00
+20600000
+47164025
+da20007f
+20405240
+6001026b
+1fe0fe04
+6001026d
+58000000
+6001026f
+20600000
+6801026b
+202052e2
+6801026d
+202052e2
+4716c025
+da2000fa
+20405240
+60010271
+1fe0fe04
+60010273
+58000000
+60010275
+20600000
+68010271
+202052e2
+68010273
+202052e2
+47174025
+20407e7c
+70028401
+2040526e
+247a0000
+da20007f
+20405240
+60010277
+1fe0fe04
+60010279
+58000000
+6001027b
+70028400
+20207e8c
+68010277
+202052e2
+203a2a8c
+1fe20a00
+20600000
+4717c025
+da400000
+da204257
+1a20a3fe
+1a20a202
+58004263
+9a267c00
+2022d2f5
+ea208000
+1a20a201
+203a52e9
+ea290000
+e8410000
+9a40a400
+1a40a404
+202052e9
+1a427e00
+20600000
+d8e0000c
+20202c32
+d8e0000c
+20202c36
+47184026
+2040527e
+6800c256
+207a0000
+204052e5
+d8400100
+98467c00
+202152f7
+204052f9
+d8a04263
+da204257
+58004263
+9a267c00
+20628000
+ea208000
+1a20a201
+243a530f
+e0a10000
+1a20a202
+20205306
+ea210000
+1a20a202
+1fe20c00
+e8c10000
+e0a10000
+1fe27200
+1f20f202
+20407f01
+20205306
+4718c026
+2040527e
+6800c256
+207a0000
+da204258
+1a20a3fd
+d8c04263
+1a20a203
+58004264
+9a267c00
+20628000
+e8c10000
+203a531f
+1fe0fe04
+1fe27200
+18c22400
+ea210000
+1fe20a00
+1a420c00
+18c08dfe
+20407f01
+2020531f
+47194026
+7855fc00
+70045501
+70043f03
+70045601
+5fffffff
+60010459
+18007e00
+60008457
+60008462
+6001c169
+6001c16c
+6002c403
+79207e27
+6002c408
+7043dc01
+7043dd00
+202056ed
+4719c026
+7834fc00
+70044003
+70047801
+70445a01
+5800ffff
+6001445c
+18007e00
+6002c408
+79207e27
+6002c403
+2020532e
+471a4026
+7854fc00
+58000017
+600144a8
+70044001
+70436e00
+7000a000
+7044c400
+7044c500
+6801046d
+600144ba
+68010441
+1feffe05
+1ff1fe00
+6001046d
+2020532e
+204053c4
+204055e8
+204056f0
+202053ce
+471ac026
+204053c4
+204032f4
+68008440
+c001d366
+2020537a
+471b4026
+7834fc00
+204056e4
+20215377
+20402c6c
+20405413
+2040561e
+7856fc00
+204054bf
+24768000
+471bc026
+68008005
+1fe0fe01
+60008005
+204055aa
+7854fc00
+20600000
+204053a9
+7854fc00
+20600000
+471c4027
+70450f00
+20407aaf
+20405c18
+78577c00
+204056e4
+202153a9
+20402c6c
+20405413
+20405489
+242c539b
+204053b7
+2036d388
+20205395
+471cc027
+6800c50f
+1fe0fe01
+6000c50f
+c0065395
+204055aa
+2040561e
+204054c7
+2040567e
+680141fb
+20407f9c
+204053a0
+203453a4
+471d4027
+20405be4
+20405bdb
+20407d9c
+68008462
+c281d3a9
+471dc027
+204057f4
+2040559d
+20405575
+20202841
+78547c00
+c5157fe7
+c514ffe7
+20600000
+471e4027
+78377c00
+204054c1
+2036d388
+20205395
+471ec027
+204053af
+204033b4
+20407a77
+700a9915
+20207d86
+58000000
+6004c4ff
+70045500
+70044000
+70043f00
+7044c500
+7044c400
+20600000
+471f4027
+68008005
+1fe0fe01
+60008005
+6800843f
+c3818000
+79207e03
+6000843f
+680144ba
+6001046d
+58000000
+600244e5
+20600000
+471fc027
+70890f36
+70890b5f
+783b7c00
+70891407
+20402c6c
+6800c1e0
+207a0000
+70890ab8
+20600000
+47204028
+70890f2e
+70890bff
+785b7c00
+70891403
+db600000
+20600000
+7844fc00
+7843fc00
+68018467
+98001e00
+68008016
+1fed8400
+79200401
+18431c00
+20600000
+204053e6
+2040291f
+58000500
+20402a8f
+20202924
+2036a939
+204053e6
+20202933
+4720c028
+20402918
+6800848c
+243a53f9
+68008016
+1fe67c24
+202153f3
+18000400
+c1128000
+18000418
+c1130000
+1800044e
+20600000
+1fe67c0a
+202153f6
+1fe0fe01
+1fe3fe00
+1fe08402
+20600000
+68008016
+1fe38400
+20600000
+d84001f4
+207a0000
+d84000fa
+c1008000
+d8400096
+c1010000
+d8400064
+c1018000
+d840004b
+c1020000
+d8400032
+c1028000
+d8400028
+c1030000
+d8400014
+20600000
+588e89be
+1fed7e00
+1fe1fed6
+98001200
+58555555
+60018467
+20600000
+47214028
+78287c00
+68020463
+98001200
+20405466
+58000200
+2034d41c
+6801044d
+1fe37e00
+d8400500
+9840fe00
+20402a24
+1b427e00
+60030491
+20600000
+4721c028
+68008016
+c012d428
+c013542e
+c013d434
+20205434
+6808c48d
+284ffe01
+2020d43f
+284ffe02
+2020d444
+2020543a
+6808c48d
+284ffe02
+2020d444
+284ffe00
+2020d43a
+2020543f
+6808c48d
+284ffe00
+2020d43a
+284ffe01
+2020d43f
+20205444
+70001625
+68008ac2
+79207e00
+60008ac2
+20600000
+70001626
+68008ac2
+79207e01
+60008ac2
+20600000
+70001627
+68008ac2
+79207e02
+60008ac2
+20600000
+47224028
+1a208c01
+e8c08000
+c4000000
+1a208a1a
+e8a10000
+1fe0fe01
+e0a10000
+1a208c19
+e8c08000
+1a208a18
+e8a88000
+9840fe00
+1fe67c24
+20215459
+1fe0ffdb
+e0a08000
+20600000
+4722c028
+6802846f
+18000400
+18007225
+c3005461
+18408401
+1fe37e00
+c200545f
+1840ffff
+60008461
+20600000
+47234028
+68008457
+98000e00
+680a846f
+a84fffff
+2020d47c
+4723c028
+68008461
+98e67e00
+20215472
+1fe60fff
+2020546c
+18e27200
+18000e00
+a84fffff
+2020d477
+1f20f201
+1f227e00
+203a547c
+18e08e01
+1f20f3ff
+20205474
+18e27e00
+60008016
+20600000
+2034d482
+37c18200
+20600000
+d9600ea0
+34730200
+20600000
+78487c00
+6801436c
+1fe21600
+2020548e
+47244029
+78287c00
+6801044d
+680a44e5
+98409600
+204053de
+4724c029
+204053d5
+7856fc00
+7826fc00
+7830fc00
+78507c00
+19623600
+37c18400
+2037549a
+1b420400
+600b009a
+242c264d
+203754a1
+dd2001e0
+1c225000
+6800843f
+c301d4a1
+2055ab05
+47254029
+204029bb
+7823fc00
+7824fc00
+09800008
+19897e00
+600082d9
+09800008
+19897e00
+e0a08000
+1fe1723f
+2022d4b1
+09800008
+19897e00
+e0a08000
+c20054ad
+4725c029
+09800018
+78287c00
+db600664
+1fef7e00
+1ff17e00
+e0a18000
+2023264d
+7836fc00
+68008017
+1fe0a200
+20402981
+7846fc00
+20202918
+47264029
+204054c9
+68088017
+2040291f
+20402924
+78287c00
+d960157c
+2020548f
+204054c9
+2020264d
+4726c029
+204053d5
+204053e3
+202054cd
+79202a00
+782efc00
+78307c00
+7850fc00
+2040547f
+19317e00
+1fecfe00
+1ff1fe00
+08008628
+7823fc00
+7824fc00
+47274029
+6800c3dc
+08008608
+e8c08000
+1fe1723f
+08008608
+2022d4e2
+e8c08000
+08008608
+c20054df
+78247c00
+08008618
+78447c00
+37d38200
+20000064
+784efc00
+20600000
+4727c029
+6800c484
+c000d4f9
+6800c485
+1ff27e00
+1febfe00
+6000c3dc
+6808c36f
+1840fe06
+6000c3dd
+680344a0
+600343de
+18427200
+d8c04370
+20407ef4
+20205504
+6800c486
+1ff27e00
+1febfe00
+1fe0fe01
+6000c3dc
+5800000c
+6000c3dd
+680344a0
+600343de
+680341d0
+e0a30000
+4728402a
+68008000
+1fe0fe01
+60008000
+db600708
+7856fc00
+202054bf
+4728c02a
+6800c49e
+c1808000
+68008000
+1fe0fe01
+60008000
+d8400c03
+6800c49f
+7d3a0406
+1a227e00
+7d3a0407
+600943dc
+680344a0
+e0a30000
+6803044f
+e0a30000
+202054bf
+4729402a
+d8400004
+6800c485
+7d3a0406
+6008c3dc
+6808c38f
+1840fe06
+6000c3dd
+680344a0
+600343de
+d8c04390
+18427200
+20407ef4
+204054c7
+20205706
+4729c02a
+18007fff
+38080001
+6002846f
+2040545b
+18007204
+d8a00463
+2040630d
+6801449c
+6001046d
+180a7e00
+1fe17e0f
+1fe67c04
+20215535
+60008458
+600086e6
+472a402a
+68094367
+60090441
+18422600
+1c40fe07
+9a66fc00
+20407f86
+18072200
+9a267e00
+9a60fe00
+68094365
+9840fe00
+60020443
+9c462200
+1a20a3fa
+da402205
+6800c495
+7d3a2406
+6800c48e
+7d3a2407
+1a427e00
+600143dc
+680344a0
+e0a30000
+6803044f
+e0a30000
+68020463
+e0a20000
+180a7e00
+e0a10000
+180a7e00
+e0a08000
+18007e02
+e0a08000
+1a2b7e00
+e0a10000
+1a6b7e00
+e0a10000
+472ac02a
+58000000
+e0a10000
+6801449c
+e0a10000
+6802846f
+e0a28000
+68008458
+d84000a0
+9841fe00
+e0a08000
+204054c7
+580043dc
+1fe08c12
+e8c18000
+60018467
+20600000
+472b402a
+7854fc00
+2020540c
+6800843f
+c4028000
+68010459
+6809045f
+98467e00
+24610000
+60010a9a
+472bc02a
+6800843f
+793ffe05
+793ffe03
+6000843f
+68020443
+68090441
+60090aa2
+98462200
+472c402b
+6800c3d3
+6000846a
+e8c90000
+e8c10000
+1febfe00
+60010441
+184b8400
+9840fe00
+e8ca0000
+600a046b
+9a20fe00
+1fe22800
+68010441
+68090aa2
+98467e00
+68090a9a
+984ffe00
+9a80fe00
+60020443
+20405713
+6801046d
+600144ba
+20600000
+472cc02b
+6800843f
+c4030000
+68010459
+6809045f
+98467e00
+24610000
+6800843f
+793ffe06
+6000843f
+6802c3ce
+6002846f
+2020545b
+472d402b
+204056ed
+204055c0
+680082d9
+2feffe04
+7920802a
+1fe37e00
+9842fe00
+2feffe02
+7920800f
+c6078000
+680082da
+203a55bc
+6800843f
+c30255bc
+2040748d
+204073fb
+247a0000
+68088456
+79400402
+60088456
+20600000
+472dc02b
+68088456
+284c0005
+20608000
+680082d9
+1fe3fe00
+9842fe00
+c4018000
+793f8405
+79400403
+60088456
+28400603
+24608000
+6800c3de
+c002d5d2
+6800c4c5
+c00155d6
+20600000
+6800843f
+79207e04
+6000843f
+20600000
+472e402b
+7044c500
+dfe00000
+6002440d
+6002c403
+79207e27
+6002c408
+6800843f
+793ffe04
+6000843f
+20600000
+472ec02b
+20405422
+20405485
+68008001
+1fe0fe01
+60008001
+20600000
+472f402b
+6800c369
+c1808000
+d8e00002
+20407f16
+247a0000
+6801436a
+6809436c
+98467e00
+d8e00002
+20407f08
+7854fc00
+20405572
+204055e1
+24768000
+472fc02b
+680302db
+6003044f
+68008002
+1fe0fe01
+60008002
+20405608
+20748000
+2040550b
+24768000
+4730402c
+68008004
+1fe0fe01
+60008004
+680482e1
+60048101
+20600000
+4730c02c
+6800849b
+c18d8000
+6803044f
+680b448f
+98467c00
+24628000
+2040223b
+24628000
+2040552b
+20405340
+4731402c
+7041ce00
+70047600
+70436900
+70049b00
+20202223
+da200001
+680082d9
+c3830000
+da200000
+20600000
+4731c02c
+68008456
+c3828000
+20405642
+20405873
+203a5664
+e8c08000
+e8c88000
+18422200
+9a267e00
+d840001b
+20407fdd
+1fe20400
+e8c08000
+1fe20200
+1a227e00
+98c08c00
+d8a043de
+18427200
+20407f01
+20405654
+20405666
+20405873
+e8c08000
+1fe22200
+18c22600
+e8c88000
+18422400
+9a467e00
+d840001b
+20407fdd
+9a40fe00
+e2608000
+9a267c00
+24628000
+20205896
+20405649
+c6148000
+6800c4e9
+c3015652
+20405876
+203a5652
+20205650
+20405873
+203a5652
+e8c08000
+e8c88000
+98467e00
+1fe67c1b
+20215652
+79200029
+20600000
+793f8029
+20600000
+1a227e00
+207a0000
+d8200001
+20600000
+4732402c
+18408401
+2040576a
+18c08dfe
+e8c10000
+d8402902
+98467c00
+24628000
+18c08c01
+18c22200
+e8c08000
+20600000
+18000400
+18000201
+4732c02c
+6008c3dd
+68088456
+79200405
+18417efc
+9821fe00
+60008456
+1fe17e1f
+280ffe29
+7920fe04
+6000c3dc
+6800c3dc
+28200601
+2420d676
+6800c3dd
+207a0000
+6800843f
+c4020000
+2040748d
+202073e3
+d8e00000
+20202c32
+d8e00000
+20202c36
+4733402c
+c6078000
+20405890
+247a0000
+680082d9
+1fe17e03
+6000c50c
+e8c08000
+1fe17e1f
+6000c50b
+207a0000
+18c27e00
+6001450d
+6800c50c
+c001dc64
+2040569a
+2434567a
+2040567c
+6801450d
+1fe20c00
+e8c10000
+600144fc
+4733c02c
+e8c10000
+c00258ab
+c0035af4
+c002dab6
+20600000
+6800c50c
+c00156a9
+c000d6c1
+20600000
+20407fe7
+d8400004
+9fe67c00
+20628000
+d8400005
+9fe67c00
+20628000
+d8400006
+9fe67c00
+20628000
+20207fe9
+6801450d
+1fe20c00
+e8c10000
+600144fc
+e8c10000
+2040569e
+24740000
+6808c50b
+6008c4fe
+680144fc
+1fe0fe04
+98467c00
+2022ffe7
+6800c50b
+1fe27200
+d8a00311
+6801450d
+1fe20c00
+20407f01
+20207fe9
+20407fe7
+6800c4fe
+247a0000
+20207fe9
+204056bd
+24740000
+6800c4fe
+d8a00311
+98a0a200
+6808c50b
+9840fe00
+6000c4fe
+6800c50b
+1fe27200
+1a220a00
+6801450d
+1fe20c00
+20407ef4
+58000311
+6001450d
+680144fc
+1fe0fe04
+6808c4fe
+98467c00
+2022ffe7
+20207fe9
+20407ea5
+d8a0445e
+680144fc
+1fe0fffb
+e0a08000
+1fe27200
+20407e9f
+20207ef4
+20407ea5
+d8a04471
+202056d9
+680141f9
+20207f9c
+680a045b
+20402a7b
+98461600
+19627e00
+6809046d
+18520400
+18438400
+98467e00
+20600000
+20402a7b
+6002045b
+20600000
+70001624
+700ac200
+4734402d
+6800c36e
+207a0000
+d8e00000
+20407f16
+247a0000
+4734c02d
+7854fc00
+78287c00
+20405572
+20405422
+204054e9
+2436d706
+68008003
+1fe0fe01
+60008003
+680082d9
+1fe17e0f
+c001d51c
+c002d728
+4735402d
+180a7e00
+d84001ff
+98417e00
+1fe0fefa
+20403cbe
+68008ac2
+6808c48d
+98467c00
+2422d6f2
+d8e00000
+68014482
+20207f08
+4735c02d
+68008476
+204053fc
+68010441
+984ffe00
+d8400177
+984ffe00
+d84186a0
+9846fc00
+6800846a
+d8404e20
+984ffe00
+9840fe00
+600244e5
+4736402d
+680140c1
+20407f86
+18078400
+9840fe00
+6001044d
+20600000
+4736c02d
+680302e1
+680b44a0
+98467c00
+24628000
+20405619
+1a227e00
+6000c48e
+680382ee
+60038101
+e8c40000
+e0a40000
+680302db
+6003044f
+18c08c06
+e8c40000
+60040463
+e8c90000
+4737402d
+184b8400
+e8c10000
+1febfe00
+60010441
+60020443
+98467e00
+1fe0d1fe
+e8c48000
+6004846b
+4737c02d
+e8c08000
+1ff18400
+18430400
+60088476
+1fe17e1f
+60008458
+20405713
+2040545b
+2040534c
+2040223b
+24628000
+4738402e
+20402841
+20405ad3
+700a9914
+20407d86
+20202223
+4738c02e
+6801445a
+98002400
+6801445c
+98002600
+680144bc
+98000c00
+78347c00
+20600000
+e8c10000
+207a0000
+9a467c00
+24610000
+9a667c00
+20628000
+20215768
+18007c01
+20600000
+18007e00
+20600000
+2040576d
+2022d779
+20600000
+4739402e
+680144bc
+98000c00
+e8c10000
+207a0000
+98467c00
+20628000
+e8c08000
+98c08c00
+e8c08000
+98c08c00
+20205770
+e8c08000
+98c08c00
+20600000
+4739c02e
+680144bc
+98000c00
+e8c10000
+207a0000
+e8c08000
+98c08c00
+18c08dfe
+e8c10000
+98467c00
+20628000
+e8c08000
+98c08c00
+2020577f
+6801049c
+2020578e
+473a402e
+680144bc
+98000c00
+18422200
+e8c10000
+203a5799
+9a267c00
+2022d79a
+e8c08000
+98c08c00
+e8c08000
+98c08c00
+20205790
+20207fef
+e8c08000
+600084a2
+1fe27200
+d8a004a3
+20407ef4
+e8c08000
+600084b3
+20407ea5
+20207ff1
+473ac02e
+204057a6
+202057b8
+d8402a00
+2040577c
+207a0000
+e8c08000
+18c20a00
+6808c3af
+18427200
+98467c00
+242157b5
+98460400
+d8c043b0
+20407f01
+18427200
+2442d7f0
+20600000
+1fe27200
+d8c043b0
+20207ef4
+da60438f
+da204370
+204057c5
+58000000
+79347e00
+60008a9a
+da6043af
+da204390
+204057c5
+20740000
+68008a9a
+203a2a8c
+20600000
+473b402e
+20407fe7
+20407eda
+da400000
+d8a00ac3
+204057df
+6800c3af
+1fe08401
+9a40a200
+1a20a202
+1a267c1f
+242157dd
+e0a88000
+d8400009
+e0a88000
+98007200
+20407ef4
+1a222400
+1a427e00
+60008ac2
+d8c00ac2
+5fffffe0
+9a608a00
+20207ebd
+20407fe9
+202057d7
+ea208000
+207a0000
+1fe0fe01
+e8c88000
+18467c09
+2022d7ee
+9a40a400
+1a220c00
+98007200
+20407ef4
+18c22200
+1a227e00
+9a667c00
+20610000
+202057df
+9a20a200
+202057ea
+58000020
+e0a08000
+c20057f0
+20600000
+473bc02e
+7855fc00
+203757f8
+2436d806
+20402bcb
+680140c1
+6001044d
+2436abde
+c507abde
+6800c50b
+243a2bde
+6800c3dd
+243a2bde
+6800c4e9
+c282abde
+6800843f
+c282abde
+20202bc0
+680940c1
+18430400
+6801044d
+9840fe00
+6001044d
+20202bd6
+d8e00000
+20205824
+d8e00000
+20205828
+d8e00001
+20205824
+d8e00001
+20205828
+d8e00002
+20205824
+d8e00002
+20205828
+d8e00003
+20205824
+d8e00003
+20205828
+d8e00004
+20205824
+d8e00004
+20205828
+d8e00005
+20205824
+d8e00005
+20205828
+6800c4e9
+f9207e00
+6000c4e9
+20600000
+6800c4e9
+f93ffe00
+6000c4e9
+20600000
+58112233
+6001c4ea
+58445566
+e0a18000
+58778899
+e0a18000
+58001122
+e0a18000
+58334455
+e0a18000
+58000066
+e0a08000
+20600000
+59000302
+60024453
+58010010
+6001c457
+7044c601
+20600000
+da200000
+d8200001
+20205850
+d8200003
+20405850
+1a427e00
+e0a08000
+20600000
+18000202
+1a20a204
+20405850
+1a20a3fc
+1a227e00
+e0a10000
+1a427e00
+e0a10000
+20600000
+1a267cf0
+24212a8c
+6800c4ff
+d8400001
+df200004
+98417c00
+2022d85a
+18438400
+c2005855
+20202a8c
+9842fe00
+6000c4ff
+1f267e04
+1ff27e00
+1ff27e00
+d8401800
+98408400
+df200000
+d8c04500
+e8c10000
+203a5869
+1f227e00
+1f20f201
+c0825863
+20202a8c
+18c08dfe
+e0c90000
+18420a00
+1a227e00
+e0a08000
+58000000
+e0a08000
+18227e00
+e0a08000
+20600000
+68014500
+1fe20c00
+20600000
+68014502
+1fe20c00
+20600000
+2040587c
+1fe20c00
+20600000
+68014506
+247a0000
+68014504
+247a0000
+68014502
+247a0000
+68014500
+20600000
+20405873
+18c08c03
+20600000
+20405873
+18c08c07
+20600000
+20405879
+18c08c07
+20600000
+20405879
+18c08c03
+20600000
+68014506
+20600000
+68014504
+20600000
+68014500
+20600000
+68014500
+d8401800
+98467e00
+1ff1fe00
+1ff18e00
+6800c4ff
+f93ffe00
+6000c4ff
+df200000
+1f23fe00
+d8404502
+98408400
+e8410000
+184085fe
+e0410000
+1f227e00
+1f20f201
+c081d89f
+58000000
+e0410000
+20600000
+e8c18000
+60018477
+c00158c1
+c001d8c9
+c00258cc
+c00358f2
+c004593f
+c00559bc
+c00659e4
+c00859fa
+c0095a2f
+c00b5a48
+c00c5a5b
+c0295a60
+20600000
+18002203
+20405a82
+58000002
+e0a08000
+680144a6
+e0a10000
+20600000
+204058c9
+18002203
+20405a82
+58000003
+e0a08000
+680144a6
+e0a10000
+20600000
+1fecfe00
+600144a8
+20600000
+20405ab1
+20407fe7
+202058cf
+d9600003
+20405756
+2040575f
+203a58f0
+242158ed
+18c08dfe
+20407ea5
+20407e9c
+243458e1
+20407e85
+20407fe9
+18002214
+20405a82
+20407e95
+58000005
+e0a08000
+58000001
+e0a08000
+20407e9f
+e8c10000
+e0a10000
+e8c08000
+1fe27200
+20407f01
+20407ea2
+196097ff
+2022d8f0
+e8c08000
+98c08c00
+202058d1
+e8c08000
+98c08c00
+202058ea
+20345a76
+20205aa5
+20405ab1
+e8c10000
+60014472
+20407ea5
+d8a0445e
+680144fc
+1fe0fff9
+204056db
+20205905
+78547c00
+6809445a
+6801445c
+98467c00
+24215902
+18427e00
+c1800000
+78347c00
+70047a01
+20205a77
+204058fb
+20740000
+68094472
+58002800
+98467c00
+2022d90c
+20205a76
+7004b400
+6809445a
+60090aa2
+2040578c
+243a5a76
+68090aa2
+2040578c
+243a5925
+18c22200
+680084b3
+1fe27200
+6808c45e
+98467c00
+2422d921
+da40445f
+20407f88
+2022d928
+680104a3
+68094472
+98467c00
+2022d930
+68010aa2
+1fe0fe01
+60010aa2
+20205911
+680084b4
+c000d930
+20205a76
+680104a3
+68094472
+98467c00
+2422d921
+7004b401
+68090aa2
+6009049e
+20205921
+680084b4
+c0005921
+7004b402
+68090aa2
+184085ff
+600904a0
+da200005
+20405a82
+58000007
+e0a08000
+6801049e
+e0a10000
+680104a0
+e0a10000
+20600000
+20405ab1
+204056df
+20205942
+6809445a
+60090aa2
+20405756
+2040576d
+18c08dfe
+18c27e00
+6001049c
+68094472
+58002a00
+98467c00
+2022d9a8
+58002803
+98467c00
+2422d990
+d9600002
+20405a88
+2421596d
+68090aa2
+2040578a
+c000d96d
+20405a94
+2422d96b
+2434596f
+78547c00
+da200014
+20405a82
+58000009
+e0a08000
+18a26000
+18a08a01
+2040597d
+20405a84
+2040578a
+20405984
+680084a2
+1fe0fe05
+e6008000
+680084a2
+c008596d
+196097ff
+2022d96d
+20405a84
+20205951
+20345a76
+20205aa5
+20405a97
+20405a84
+2040578a
+680084a2
+c008596d
+20407e9c
+68010aa2
+1fe0ffff
+e0a10000
+20405aa1
+20405984
+196097ff
+2022d96d
+2020596b
+68010aa2
+e0a10000
+680084b3
+1fe27200
+20407e9f
+20407ef4
+20207ea2
+20407e9c
+68010aa2
+e0a10000
+20407ea2
+680084a2
+1fe27200
+20407e9c
+20407e9f
+9f260c00
+18c08dff
+20407ef4
+20207ea2
+6809445a
+60090aa2
+20405a88
+24215a76
+2040578a
+c000da76
+20405a94
+2422d9a6
+da200014
+20405a82
+58000009
+e0a08000
+680084b3
+1fe27200
+1fe0fe02
+e0a08000
+68010aa2
+e0a10000
+20407e9f
+20407ef4
+20407ea2
+20205aa5
+20405a84
+20205992
+d8402a00
+2040577c
+207a0000
+18c08dfb
+e8c10000
+60010aa2
+da200014
+20405a82
+58000009
+e0a08000
+6800c3af
+1fe27200
+1fe0fe02
+e0a08000
+68010aa2
+e0a10000
+d8c043b0
+20407ef4
+20407ea2
+20205aa5
+68090478
+6800c4e9
+c281d9dd
+2040576a
+203a5a76
+18c08dfe
+e8c10000
+d8402a00
+98467c00
+2022d9d3
+e8c08000
+1fe67c16
+202159ca
+18007e16
+1fe22600
+20407ea5
+1a60a201
+20405a82
+5800000b
+e0a08000
+1a627200
+20407e9f
+20207f01
+20407ea5
+6800c3af
+1fe0a201
+20405a82
+5800000b
+e0a08000
+6800c3af
+1fe27200
+d8c043b0
+20207f01
+680144fa
+98467c00
+2422d9bf
+20405a42
+243459bf
+70047a05
+20205a77
+e8c10000
+6001445e
+da200014
+20405a82
+5800000d
+e0a08000
+6801445e
+98002200
+68090478
+2040576a
+203a5a76
+e8c08000
+9a267200
+24215a76
+1f267c16
+202159f5
+18007216
+1a227e00
+98c08c00
+20407ef4
+20407ea2
+20205aa5
+20405ab1
+204056d7
+202059fd
+d9600002
+6809445a
+60090aa2
+20405756
+2040576d
+18c08dfe
+18c27e00
+6001049c
+20405a88
+24215a25
+68090aa2
+2040578a
+c000da28
+20405a8c
+2422da23
+19627e00
+c0005a28
+24345a19
+78547c00
+da200014
+20405a82
+58000011
+e0a08000
+680084b3
+1fe0fe04
+e0a08000
+20407ea2
+20205a1f
+680084b3
+c0085a28
+68010aa2
+1fe0ffff
+600104a0
+20405a9c
+68010aa2
+6001049e
+20405a97
+196097ff
+20405a84
+20205a05
+68010aa2
+600104a0
+20205a2c
+68010aa2
+1fe0ffff
+600104a0
+20205a2c
+20345a76
+20405a9c
+20205aa5
+18c22200
+680144fc
+1fe0a5fd
+204056e2
+6800c4e9
+c3025a3d
+68090478
+680144fa
+98467c00
+2422da3d
+20405a42
+24345a3d
+70047a05
+20205a77
+18002201
+20405a82
+58000013
+e0a08000
+20600000
+20407fe9
+6800c4c6
+c1000000
+6800c040
+c3820000
+20207fe7
+18c0a202
+680144fc
+1fe0a5fb
+204056e2
+20205a4d
+680144fc
+1fe22200
+20405a82
+58000017
+e0a08000
+68010478
+e0a10000
+680144fc
+1fe0f3fb
+6801450d
+1fe08c07
+e8c10000
+e0a10000
+20207ef4
+18002201
+20405a82
+58000019
+e0a08000
+20600000
+18c22200
+680144fc
+1fe0a5fd
+202056e2
+18422600
+1a20a203
+20405a82
+1a20a3fd
+5800001b
+e0a08000
+1a620400
+e0a90000
+20600000
+18422600
+1a20a203
+20405a82
+1a20a3fd
+5800001d
+e0a08000
+1a620400
+e0a90000
+20600000
+70047a0a
+18002205
+20405a82
+58000001
+e0a08000
+68008477
+e0a08000
+68010478
+e0a10000
+6800847a
+e0a08000
+20600000
+18002404
+20205847
+68090aa2
+18408401
+60090aa2
+20600000
+68090aa2
+6801445c
+98467c00
+20600000
+6808c45e
+da20445f
+680084a2
+1fe27200
+98467c00
+24628000
+da4004a3
+20207f88
+6808c471
+da204472
+20205a8e
+680084b3
+60008101
+1fe27200
+20407e9f
+20207ef4
+20407e9c
+6801049e
+e0a10000
+680104a0
+e0a10000
+68008101
+1fe27200
+20407ef4
+20207ea2
+20407e9c
+2040588a
+18a27e00
+98c62200
+2040588d
+1a227e00
+e0c10000
+1a20a204
+20405879
+1a227e00
+e0c08000
+20600000
+1fecfe00
+6001445a
+e8c10000
+6001445c
+20600000
+e8c08000
+e8c88000
+e8c90000
+c009dabb
+20600000
+e8c10000
+60014509
+700a9940
+20207d86
+da20000c
+da600012
+20405ac7
+58000008
+e0a10000
+68044496
+e0a40000
+20600000
+20405acf
+da400005
+20405847
+1a627e00
+e0a08000
+6800c508
+e0a08000
+20600000
+6800c508
+1fe0fe01
+6000c508
+c1800000
+70450801
+20600000
+6800c4c6
+c0005ae4
+c000dae7
+c0015ae9
+c040dadd
+c0415adf
+c041dae2
+20600000
+7044560d
+20205ae5
+7044560d
+70445401
+20600000
+7044560d
+20205aea
+70445600
+70445403
+20600000
+70445605
+20205ae5
+70445605
+70445400
+20600000
+6800c456
+79207e03
+6000c456
+20600000
+6800c456
+793ffe03
+6000c456
+20600000
+e8c08000
+c000db09
+c001db30
+c0025b4d
+c002db5a
+c0035b80
+c003dbc4
+c0045baf
+c004dbc0
+c0055bc4
+c005dbc4
+c0065bc5
+c006dbca
+20600000
+18002202
+20405c62
+5800000b
+e0a08000
+6800c456
+e0a08000
+20600000
+6000c44c
+e8c30000
+e0a30000
+6800c4c6
+c0005b5f
+20405b2b
+20405b26
+7044c403
+6800c44d
+c0005b18
+c000db18
+c001db18
+6800c4c6
+c0015b1b
+c1418000
+dfe00000
+600244c7
+20600000
+6800c4e9
+c2805b24
+da2044c7
+1a220a00
+df200003
+2040630d
+680144c9
+1fe17e07
+600144c9
+700a9934
+20207d86
+6800c44f
+c3818000
+6800c4c6
+c4038000
+20203402
+18002207
+20405c62
+6803c453
+e0a38000
+20600000
+18c22200
+6800c4c6
+c041db37
+1a220c00
+d8a0442a
+20407ebf
+20205b3d
+1a220c00
+d8a0442a
+20407ebf
+7044bf02
+7044c108
+20600000
+6800c4c6
+c283db45
+2040739c
+18002211
+20405c62
+58000003
+e0a08000
+20207497
+d8a0443a
+2040630c
+204071c5
+18002211
+20405c62
+58000003
+e0a08000
+20207201
+18c22200
+6800c4c6
+c283db61
+1a220c00
+20407394
+2022db75
+70047b04
+18002202
+20405c62
+58000005
+e0a08000
+6800847b
+e0a08000
+18000e0a
+20407f07
+7044c400
+700a9930
+20207d86
+70047b05
+20205b54
+d8a0042f
+1a220c00
+20407ebf
+6800c4c6
+c041db6c
+2040714f
+20405b7a
+6800c4c6
+c1c10000
+700a993b
+20207d86
+204071ba
+d8a00af2
+20407201
+da200af2
+da40442a
+df200010
+20407f88
+2422db53
+20205b7a
+20407390
+700a9931
+20407d86
+70442901
+7044c405
+18002211
+20405c62
+58000004
+e0a08000
+d8c0443a
+20207ebf
+d8a0041f
+20207ebf
+18002211
+20405c62
+58000006
+e0a08000
+6800c4e9
+c280db8a
+d8c04419
+20207ebf
+d8c044ea
+20207ebf
+d8a044cb
+1800720a
+2040630d
+1800220b
+20405c62
+58000007
+e0a08000
+680144cb
+e0a10000
+680444cd
+e0a40000
+20600000
+18002211
+20405c62
+58000008
+e0a08000
+58000000
+e0a40000
+e0a40000
+20600000
+18002208
+20405c62
+58000009
+e0a08000
+6800c495
+e0a08000
+680344a0
+e0a30000
+20600000
+70047b08
+20205b54
+6800c458
+6808c458
+98417e00
+20600000
+d8a044d5
+20407ebf
+20405bab
+2fec0001
+2020dba9
+6800c092
+c1850000
+20405bb9
+24740000
+20203410
+20407fe9
+6800c48e
+c1000000
+68008454
+2fe180c0
+20608000
+20207fe7
+20405bab
+2fec0001
+2020dba9
+20600000
+20600000
+d8a009be
+20407eb3
+7044bf02
+7044c101
+20600000
+d8a00a6e
+20407ebf
+7044c106
+7044bf02
+20600000
+18002241
+20405c62
+5800000c
+e0a08000
+d8c045d2
+20207eb3
+20407166
+18002211
+20405c62
+5800000d
+e0a08000
+20207201
+6800c4c4
+c17f8000
+d8400003
+98467c00
+24610000
+d8e0000a
+20407f16
+247a0000
+20205ba9
+473c402f
+6800c4c4
+c0005bef
+c000dbf5
+c0015bef
+c001dbf7
+c002dbfb
+c003dc07
+c0045c09
+c004dc10
+20600000
+6800c4c5
+c1820000
+7044c5ff
+7044c4ff
+700a993f
+20207d86
+7044c402
+20205b02
+7044c404
+58017700
+d8e0000a
+20207f08
+6800c4c5
+c0025bfe
+20600000
+7044c407
+700a9929
+20407d86
+20405b82
+6800c092
+c1850000
+20405bb9
+20740000
+20203410
+7044c408
+20205b8c
+6800c452
+6808c459
+98417e00
+2fec0001
+2020dc12
+7044c409
+20205b98
+20405ba0
+20205c12
+18000e0a
+20407f07
+7044c5ff
+7044c4ff
+700a993e
+20207d86
+473cc02f
+6800c4c6
+c4038000
+6800c4bf
+c1810000
+7044bf00
+6800c4c1
+c000dc58
+c0015c5f
+c001dc52
+c0035c39
+c003dc30
+c0045c26
+20600000
+6800c663
+1fe20e00
+1fe0fe01
+6000c663
+680244c7
+afefffff
+58000080
+7920fe00
+6000c664
+20205c55
+6800c4c2
+7044c200
+c000dc35
+7044bf02
+20600000
+700a9931
+20407d86
+7044c405
+20205bd5
+680089b9
+c001dc3d
+7044bf02
+20600000
+2040718d
+6800c4c6
+c041dc41
+20405b18
+2040717a
+da200af2
+da400a6e
+df200010
+20407f88
+2022dc49
+70047b0b
+20205b54
+20407595
+2422dc47
+70442901
+6800c4c6
+c040dc35
+c041dc35
+7044bf02
+7044c107
+20600000
+6800c4c6
+c041dc56
+70466400
+20205b3d
+70466300
+20205b1b
+7044bf02
+6800c4c3
+c001dc5c
+20600000
+7044c102
+7009b900
+20207a99
+7044bf02
+7044c103
+20205bcf
+18002406
+20205847
+680082db
+c0005c7b
+c000dc83
+c0015c8e
+c001dcaa
+c0025ce1
+c002dce6
+c0035cea
+c003dcf5
+c0045c99
+c004dcf5
+c0055cef
+c005dcf5
+c0065c9f
+c006dcf5
+c0095ca6
+c009dcf5
+da200002
+da400007
+20405842
+680082db
+e0a08000
+20600000
+e8c48000
+6004c3d3
+e8c10000
+6001045f
+6800843f
+79207e05
+6000843f
+20600000
+e8c28000
+6002c3ce
+e8c10000
+6001045f
+68090459
+98467c00
+24215c8e
+6800843f
+79207e06
+6000843f
+20600000
+58000014
+6001046d
+600144ba
+20600000
+da600013
+da200002
+da400002
+20405842
+1a627e00
+e0a08000
+20600000
+da200009
+da400009
+20405842
+58000001
+e0a40000
+20600000
+20748000
+da200006
+da40000c
+20405842
+6802c510
+e0a28000
+20600000
+da400013
+20205ca8
+da200001
+20205842
+e8c40000
+600444cd
+e8c10000
+600144cb
+e8c40000
+600444aa
+e8c20000
+60024411
+20405ccf
+473d402f
+6800c4c4
+c002dcbc
+6800c4e9
+c280dcbf
+6800c217
+245a67be
+6800c429
+c0005cc4
+7044c501
+20405cdd
+202073a2
+70442901
+d8c044ea
+d8a04419
+20407ebf
+20205cbc
+473dc02f
+7044c500
+7044c400
+700a9941
+20207d86
+da200002
+da40000d
+20405842
+58000006
+e0a08000
+20600000
+d8a044b2
+18007208
+2040630d
+d8a04415
+18007204
+2040630d
+da20000d
+da400004
+20405842
+680444b2
+e0a40000
+68024415
+e0a20000
+20600000
+da400005
+20205ca8
+da400006
+20205ca8
+e8c40000
+600444b2
+e8c20000
+60024415
+202073a2
+6800843f
+79207e04
+6000843f
+20600000
+20748000
+700a9932
+20407d86
+7044c504
+20205cdf
+7044c502
+20405cf3
+700a9933
+20207d86
+da40000b
+20205ca8
+20600000
+20758000
+473e402f
+58000000
+60008048
+60008055
+60008078
+6000807c
+6000c158
+600084d7
+6000816d
+600089b5
+70455b00
+70022900
+7004d800
+7009b500
+7009b400
+7004d100
+20600000
+473ec02f
+2054e2ff
+2454e303
+204062bc
+247a0000
+6800804c
+c4030000
+793ffe06
+793f8001
+6000804c
+68008551
+6808804c
+2feffe00
+79208401
+6008804c
+18410402
+6008807f
+6808804c
+1fe37e00
+6000807d
+473f402f
+6800807d
+c03fdd66
+c001ddb1
+c0025dc2
+c01e5d59
+c002dd55
+c007dfa8
+c0085e24
+c011de42
+c01cdfc1
+c01c5fbc
+c018de27
+c01bdeb0
+c013deac
+c019dea9
+c012deae
+c0135e3e
+c003de36
+c016de2d
+c0175e2e
+c000dea5
+c0015e90
+c0145fb3
+c004de86
+c005de5f
+c0045e43
+c0065e6a
+c00fde3a
+c0105e3c
+c010deca
+c0115eca
+c01adecb
+c01b5ecc
+c0125eca
+c01a5ecd
+c00bded6
+c008def2
+c0095ef6
+c009def8
+c006df0a
+c0075f0a
+c017deaa
+c0185f0a
+c0055f0a
+c00c5f0b
+c0195f0a
+c01edf10
+c01f5f51
+c01fdf4b
+c0205f78
+c020df8a
+c0035fa7
+c01d5d57
+70007e19
+70007c04
+20600000
+70007c06
+20600000
+70007c3b
+20600000
+68020552
+1fe3fe00
+600240d2
+68008556
+6000c0d9
+68028557
+6002c0e7
+6802855c
+e0a28000
+68008031
+79207e03
+60008031
+20600000
+473fc02f
+68008552
+79207e07
+6000807d
+c040dd88
+c0415d8d
+c04adeb1
+c04b5eca
+c045debf
+c041dda5
+c0425da7
+c0485d7a
+c04bdd9e
+c04c5da3
+c04cdd7d
+c04d5d80
+c1420000
+70007c82
+70007e19
+20600000
+70007c82
+70007e2e
+20600000
+20405d82
+70007c9a
+20600000
+20405d82
+20205d86
+d8a0465e
+68018553
+e0a18000
+20600000
+2020f6d8
+20600000
+68008554
+79207e07
+600084c9
+c045dd92
+20600000
+68008554
+79207e07
+600084c9
+c045dd96
+20600000
+6800c15a
+6808804c
+7d3a0405
+6008804c
+68008030
+c4028000
+793ffe05
+60008030
+680084d7
+247a0000
+70007c31
+20600000
+2434dda1
+70007c12
+202062eb
+70007c97
+20600000
+204062eb
+20205ffe
+70007c84
+20600000
+68088555
+18410401
+600884d0
+6800c1ce
+c0a8ddad
+7041ce00
+68008055
+c18a8000
+70005504
+2020631b
+47404030
+68008552
+600084c9
+c019ddd8
+c0045de7
+c007ddee
+c0085df4
+c008ddf5
+c0095dfd
+c00c5e13
+c00bde16
+c009ddcf
+c01edf1e
+c01f5f6a
+c0205f20
+c020df3d
+20600000
+4740c030
+68008552
+600084c9
+c000de0a
+c019dde2
+c005ddfe
+c0045e01
+c009ddd2
+c0205e0b
+c020de0e
+c00c5e11
+c00bde22
+20600000
+700a9920
+20407d86
+202021dc
+700a9919
+20407d86
+70455b02
+58000050
+d8e00006
+20207f08
+680084d1
+79207e00
+600084d1
+700a9901
+20407d86
+70007c8b
+68008055
+c082dd07
+70005506
+20600000
+7004ca0b
+70007c07
+70005500
+2020dd07
+20600000
+6800c1bd
+247a0000
+2040244f
+20405ffc
+20748000
+79200021
+20600000
+24748000
+70007c10
+6800804c
+c4010000
+70007c12
+20600000
+20205ffe
+20406059
+68008030
+c3820000
+70007c31
+68008055
+c1850000
+7000550b
+20600000
+20600000
+70007c07
+7004ca13
+20600000
+68008553
+c0035e07
+c18c0000
+7004ca18
+70007c07
+20600000
+7004ca06
+70007c07
+20600000
+20600000
+7009ae00
+70007c07
+20205d07
+7009ae00
+70007c07
+20205d07
+700a9924
+20207d86
+700a9923
+20407d86
+202026e9
+700a9922
+20407d86
+58000000
+60010075
+680141e3
+1fe3fe00
+60010032
+6800c1e5
+60008073
+6800c1e7
+60008074
+202026c6
+700a9921
+20207d86
+68088552
+60088054
+20205e38
+680084d1
+79207e02
+600084d1
+c3818000
+70007c31
+20205d07
+20600000
+6800c0d0
+68088552
+98467c00
+20215e38
+70007c04
+70007e1f
+70007d2e
+20600000
+20406157
+20205e38
+70007c03
+20600000
+70007c21
+20600000
+70007c22
+20600000
+68008055
+c1098000
+70005502
+20600000
+20600000
+20405ff9
+7004d401
+700a990a
+20407d86
+204062f3
+2420e001
+2434de4e
+70007c04
+70007d08
+70007e23
+20600000
+6800804b
+79207e02
+6000804b
+20600000
+6808804c
+7d3a0401
+6008804c
+20600000
+6800807f
+1fe37e00
+1fe17e01
+20600000
+6800c217
+207a0000
+680089b5
+205a67b2
+20600000
+20405e5a
+20405e56
+600084d5
+20405ff9
+70007c0c
+6800c1bd
+247a0000
+68008030
+c3830000
+70007e06
+20205d53
+da200040
+20407288
+68020552
+680a0592
+98467c00
+2022de73
+70007c07
+7004ca05
+20600000
+20405e77
+6800c65a
+203a5f3e
+20600000
+20407386
+204021b2
+6800804b
+2feffe01
+793ffe01
+6000804b
+68008055
+c00cde81
+c00c5e81
+20600000
+680089b5
+c1800000
+6800804c
+c3810000
+202063b1
+da200552
+da400582
+d8a00562
+20407352
+da200040
+20406311
+70007c0b
+68008030
+c3035ffc
+20600000
+6801015f
+1fe0f3fd
+68088552
+58000101
+98408a00
+d8c00554
+20407f01
+68088053
+68008553
+98467e00
+1fe67c0e
+20215ea0
+1840fe0e
+60008053
+70007c01
+20600000
+6800804c
+79207e03
+6000804c
+c2826006
+20600000
+68008552
+6000807d
+70007c02
+20600000
+20205e38
+70007c30
+20600000
+70007c28
+20600000
+70007c26
+20600000
+20600000
+68010032
+98000400
+68008553
+60008095
+984f8400
+68010554
+1fe3fe00
+60010096
+68020556
+1fe3fe00
+60020091
+18427e00
+60010098
+20600000
+6808c15a
+68008553
+9842fc00
+2422dd77
+2feffe00
+6800804c
+7920fe05
+6000804c
+70007c81
+70007d8b
+20600000
+20600000
+20205e38
+20205e38
+68010552
+60010171
+20600000
+68010555
+6808c172
+984ffe00
+d8400640
+98467c00
+20600000
+68010557
+203a5ef0
+20405ed0
+20215ef0
+6800c092
+1fe67c0a
+2042bcd5
+68008030
+c280def0
+68010553
+1fe3fe00
+60010075
+68010555
+1fe3fe00
+60010032
+68010557
+60008073
+98000400
+68010559
+60008074
+98467c00
+24215eed
+60008073
+70007c03
+70007d17
+20600000
+70007e24
+20205d53
+20405e38
+20405ff9
+2040728b
+202026b8
+20405e38
+202026c0
+68020552
+1fe3fe00
+2034df04
+6808c1bd
+243a5f01
+70007c04
+70007d13
+70007e24
+20600000
+70007c34
+70005500
+202021d9
+204021d9
+79200022
+6800816d
+793ffe02
+6000816d
+20205e38
+20600000
+70007c03
+70007d18
+700a992e
+20407d86
+202026e9
+68008552
+c080df1c
+68008553
+c080df1c
+68008554
+c0985f1c
+204062fc
+2020df19
+7009ae01
+70007c03
+70007d3d
+20205d07
+70007e24
+20205d53
+70007c3e
+20600000
+6800c662
+c000df27
+c0015f2b
+204062fc
+20608000
+7009ae08
+20600000
+20407962
+700a9935
+20407d86
+20205f23
+204062fc
+20608000
+6800c663
+c009df3b
+1fe0fe01
+6000c663
+7009b001
+7009ae04
+6800c663
+1fe20e00
+6803468a
+afefffff
+58000080
+7920fe00
+6000c664
+20600000
+7009ae08
+20600000
+20405f43
+6800c665
+207a0000
+70466500
+700a9938
+20207d86
+204062fc
+2440f965
+2040f975
+204062fc
+20608000
+7009ae0c
+7009b001
+20600000
+d8a00a6e
+d8c00552
+20407ebf
+6800c662
+c1010000
+202076d8
+680089af
+c003df55
+680089ae
+c080df68
+680089b7
+1fe60a20
+24215f68
+d8a009c6
+98a08a00
+68040552
+e0a40000
+6804055a
+e0a40000
+680089b7
+1fe0fe10
+600089b7
+c0985e38
+204062fc
+2020de38
+7009b801
+7009ae02
+7009b001
+20205e38
+70007e24
+20205d53
+680089b6
+c0185f6e
+70007c3e
+20205d07
+204062fc
+2020df77
+6800c662
+c0015f75
+7009b001
+7009ae04
+20205d07
+700a9936
+20207d86
+20205d07
+680089af
+c003df7c
+680089ae
+c0835f88
+d8a00a2e
+68040552
+e0a40000
+6804055a
+e0a40000
+204062fc
+2020df86
+7009ae07
+7009b001
+20205e38
+7009af04
+202076d8
+70007e24
+20205d53
+680089af
+c005df8e
+680089ae
+c0845f9d
+d8a00a5e
+d8c00552
+20407ebf
+204062fc
+2020df9a
+6800c662
+c000df9f
+70466100
+7009ae09
+7009b001
+70007d41
+20205d07
+7009af09
+7009b101
+20205d07
+70007e24
+20205d53
+6800c661
+c283dfa4
+79207e06
+6000c661
+20600000
+c2805f95
+70466100
+20205f9d
+20205d07
+6800816d
+793ffe01
+6000816d
+20405e38
+24748000
+68008552
+6808804b
+793a0404
+7d3a0405
+6008804b
+20600000
+680c0552
+68008055
+c1818000
+6800816d
+c3025fba
+70005514
+20600000
+70005504
+20600000
+6800817f
+6000815b
+70007c03
+70007d38
+20600000
+70007c03
+70007d39
+18007209
+d8c00552
+d8a00152
+e8c08000
+1fe2fe55
+e0a08000
+c2005fc6
+68008152
+68088151
+793f8407
+793f8404
+c07fdfda
+c0005ff3
+c002dfe7
+c003dfe6
+c0035fe7
+c0045fe6
+c000dfdf
+c0015fdf
+c001dfdf
+c004dfdf
+c0025fdf
+20600000
+68008151
+79207e03
+79207e02
+60008151
+20600000
+79200404
+70018005
+68010159
+98007200
+6001015f
+d8a00551
+20407f73
+79200407
+79200402
+18007e00
+6000800b
+600100fa
+600100fc
+600100f8
+600100f6
+68008153
+2fe1fe00
+79208406
+60088151
+20600000
+793f8011
+70015100
+6800817f
+793ffe06
+6000817f
+20600000
+d8c00552
+d8a00562
+20207ebf
+70007c09
+20600000
+24748000
+70007c11
+20600000
+da2040a0
+20407255
+70007c03
+70007d08
+20600000
+7000720a
+70007c07
+7004ca16
+20600000
+47414030
+78547c00
+204062c1
+68008048
+207a0000
+c283e03f
+c000e16f
+c00160e4
+c001e04a
+c0026060
+c013e1db
+c0146108
+c01860f4
+c012e1d6
+c0136103
+c018e1c3
+c01be16a
+c019e15c
+c0046259
+c004e24f
+c005e264
+c006626d
+c007e162
+c0086292
+c008e288
+c003e152
+c015617e
+c005617f
+c00fe1bc
+c00360f9
+c010e15f
+c016e1b2
+c01761b7
+c011615f
+c01a6180
+c009e195
+c00be1a4
+c009628f
+c017e1aa
+c00c61af
+c01ee1ff
+c01f620b
+c01fe21d
+c0206227
+c020e23c
+c011e24b
+c01de246
+c002e24c
+c014e24d
+c01c624e
+c01ce175
+20202a8c
+20600000
+c040e06d
+c0426099
+c0416076
+c041e10d
+c045e118
+c04be14e
+c04ce0d5
+c04d60a4
+c04ae0da
+c04b60db
+20202a8c
+18007e02
+20406298
+68008049
+e0a08000
+204062a7
+4741c030
+68008049
+c0046080
+c007e084
+c008608f
+c00be05f
+c019e092
+c020e098
+c008e059
+20600000
+68008055
+207a0000
+7000551b
+5800000c
+d8e00007
+20207f08
+202026c6
+18007e03
+20406298
+68008049
+c005e068
+e0a08000
+6800804a
+e0a08000
+202062a7
+e0a08000
+6800804a
+e0a08000
+d84004d5
+202062e2
+18000e04
+204062a0
+5800007f
+e0a08000
+68008049
+793ffe07
+e0a08000
+68008049
+202062a7
+18000e05
+204062a0
+5800007f
+e0a08000
+68008049
+793ffe07
+e0a08000
+6800804a
+e0a08000
+202062a7
+2040244f
+204062f3
+20608000
+20205ffc
+6800804b
+c282e08b
+c4020000
+70007c12
+793ffe04
+204062eb
+2020608d
+70007c10
+793ffe05
+6000804b
+20600000
+204062fc
+2020dffe
+20600000
+70007c8b
+680084d1
+79207e00
+600084d1
+700a9901
+20207d86
+20600000
+18000e0c
+204062a0
+58000001
+e0a08000
+680104ce
+e0a10000
+58000000
+e0a18000
+58000000
+e0a20000
+202062b0
+18000e05
+204062a0
+6801c65b
+e0a18000
+204062b0
+70466501
+6800c65b
+c000e0b5
+c00160af
+c001e0bb
+20600000
+6800c65e
+c00060c7
+c000e0c7
+c00160c7
+c001e0c1
+20600000
+6800c65e
+c00060c1
+c000e0c5
+c00160c7
+c001e0c1
+20600000
+6800c65e
+c00060c1
+c000e0c1
+c00160c1
+c001e0c1
+20600000
+70466203
+6800c55c
+c28033e9
+20600000
+70466201
+20600000
+70466202
+20600000
+d8e00000
+202060cd
+d8e00000
+202060d1
+6800c55c
+f9207e00
+6000c55c
+20600000
+6800c55c
+f93ffe00
+6000c55c
+20600000
+18000e05
+204062a0
+6801c65b
+e0a18000
+202062b2
+20600000
+18000e09
+204062a0
+68008095
+e0a08000
+68010096
+e0a10000
+68020091
+e0a20000
+202062b0
+18007e11
+20406298
+68008049
+1fe20400
+c00060ec
+c00760ec
+c00e60ec
+20600000
+e0a08000
+6800c515
+e0a08000
+df20000e
+58004516
+98408c00
+20407f01
+202062b0
+18007e03
+20406298
+58000114
+e0a10000
+202062b0
+18007e03
+20406298
+68020165
+9c467e00
+2034e0ff
+1fe67e00
+1feb7e00
+793ffe0f
+e0a10000
+202062b0
+18007e06
+20406298
+6802c510
+e0a28000
+202062b0
+18007e09
+20406298
+68044098
+e0a40000
+202062b0
+18000e0c
+204062a0
+58000001
+e0a08000
+680104ce
+e0a10000
+58000000
+e0a18000
+58000000
+e0a20000
+202062b2
+18000e03
+204062a0
+6800c15a
+e0a08000
+78547c00
+204062b2
+24740000
+24748000
+6800c0d8
+c4000000
+20406132
+2020613c
+47424030
+6800c09e
+79207e03
+6000c09e
+58000101
+600104ce
+20600000
+4742c030
+6800c09e
+793ffe03
+6000c09e
+58000000
+600104ce
+20600000
+7040d803
+58000000
+60024142
+d8a040da
+20406140
+d8a040e7
+20406140
+d8a04146
+20406140
+20206147
+d8a040e7
+20406140
+20406147
+2020614a
+58ffffff
+e0a18000
+e0a18000
+e0a18000
+5800007f
+e0a08000
+20600000
+58000000
+600140d6
+20600000
+6800c0d8
+79207e02
+6000c0d8
+20600000
+18000e02
+204062a0
+2434e2b0
+202062b2
+18007e02
+20406298
+680084ca
+e0a08000
+204062b2
+6800804b
+79207e03
+6000804b
+70007232
+20600000
+18007e01
+20406298
+202062b2
+18007e01
+20406298
+202062b0
+18007e02
+20406298
+6800804c
+2fec0002
+7920fe00
+1fe17e01
+e0a08000
+202062b2
+18007e03
+20406298
+68010051
+e0a10000
+202062b2
+700072fa
+18007e02
+20406298
+68008053
+e0a08000
+202062b2
+18007e0a
+20406298
+d8c00152
+18007209
+e8c08000
+1fe2fe55
+e0a08000
+c2006179
+202062b2
+202062b2
+202062b2
+20748000
+2040282d
+18007e09
+20406298
+68010171
+e0a10000
+6801c0a0
+e0a18000
+6800c0a3
+e0a08000
+680140a4
+e0a10000
+c581e191
+793f8003
+204062b2
+70007c13
+20600000
+204062b0
+70007c03
+70007d13
+20600000
+d8400200
+2034e199
+1d027e00
+2020619a
+1c427e00
+1c227e00
+9840fe00
+1fe17ffc
+60020034
+18007e05
+20406298
+68020034
+1fe37e00
+e0a20000
+202062b2
+18007e0a
+20406298
+d8c004d9
+e8c48000
+e0a48000
+202062b2
+18007e03
+20406298
+58000114
+e0a10000
+202062b2
+18007e01
+20406298
+202062b2
+18007e02
+20406298
+6800c0d0
+e0a08000
+202062b2
+18007e02
+20406298
+58000005
+e0a08000
+202062b2
+18007e02
+20406298
+58000000
+e0a08000
+202062b2
+70007c2e
+20600000
+6800c092
+1fe67c0a
+2042e1c1
+68008030
+79207e04
+60008030
+1c427e00
+600204e9
+680084d1
+c281e1d4
+79207e03
+600084d1
+700a9905
+20407d86
+18007e01
+20406298
+202062b2
+70004800
+20600000
+18007e06
+20406298
+6802c510
+e0a28000
+202062b2
+18007e09
+20406298
+68044098
+e0a40000
+202062b2
+7009b101
+6800c5b1
+c1808000
+7009af13
+20600000
+204062ef
+70007c99
+7009af03
+20600000
+204062ef
+70007c3d
+7009af07
+20600000
+da200a4e
+da400a6e
+df200010
+20407f88
+2022e1f7
+7009af00
+204076da
+70007e24
+70007d40
+20205d53
+7009af0a
+204076d8
+70007d40
+20205e38
+70007c40
+20600000
+70007c3d
+20600000
+7009b600
+18007e04
+20406298
+18007e01
+e0a08000
+18007e01
+e0a08000
+18007e30
+e0a08000
+204062fc
+2020e2b2
+202062b0
+18007e11
+20406298
+680089b6
+d8c0462a
+98c08c00
+e8c40000
+e0a40000
+e8c40000
+e0a40000
+680089b6
+1fe0fe10
+600089b6
+204062fc
+2020e2b2
+202062b0
+7009ae06
+70007c3f
+20600000
+18007e11
+20406298
+d8c00a4e
+e8c40000
+e0a40000
+e8c40000
+e0a40000
+202062b0
+70007c40
+20600000
+204062fc
+2040f612
+18007e11
+20406298
+d8c00a1e
+e8c40000
+e0a40000
+e8c40000
+e0a40000
+204062fc
+2420e2b0
+2020e2b2
+7009af0f
+204062ef
+70007c0b
+20406307
+2020f64e
+20207658
+204062eb
+70007c41
+20600000
+18007e11
+20406298
+d8c00a4e
+e8c40000
+e0a40000
+e8c40000
+e0a40000
+204062fc
+2420e2b0
+2020e2b2
+18007e03
+20406298
+5800fffe
+e0a10000
+202062b0
+202062b2
+202062b2
+202062b2
+202062b2
+2040630b
+da2040a0
+20406311
+18007e11
+20406298
+da200582
+da400562
+20407352
+2434e2a7
+202062ad
+2040630b
+da200040
+20407255
+18007e11
+20406298
+d8c00562
+20407ebf
+68008055
+c00ce2b2
+c00c62b2
+202062ad
+680089b5
+203a626a
+204062fc
+2040e2ef
+2440e2eb
+2020626b
+204062ef
+2040630b
+2020625c
+da2040a0
+20407288
+18007e05
+20406298
+68020592
+e0a20000
+d84004d5
+204062e2
+20407386
+204062fc
+2020e27c
+7004d801
+680089b5
+207a0000
+70007c0b
+6800c1bd
+207a0000
+204062fc
+2420e284
+680084d7
+207a0000
+70007c0f
+20600000
+c6908000
+793f8021
+70007c0f
+20600000
+2040630b
+2040728b
+18007e11
+20406298
+d8c00562
+20407ebf
+202062ad
+18007e01
+20406298
+202062ad
+18007e02
+20406298
+18007e10
+e0a08000
+60008054
+202062ad
+1fe9fe00
+1fe1fe07
+600084b6
+df200011
+d8a004b8
+20407ed4
+d8a004b8
+20600000
+1fe1227f
+7000487f
+18e27e00
+20406298
+1a227e00
+e0a08000
+20600000
+68008048
+1fe3fe00
+6808804c
+284ffe01
+7920fe00
+202062b7
+6808804c
+18410401
+202062b3
+18000400
+202062b3
+18000401
+68008048
+1fe3fe00
+7934fe00
+9842fe00
+600084b7
+70004800
+204062c7
+78347c00
+20600000
+6800807c
+207a0000
+204062c1
+6800807c
+20600000
+47434030
+68008048
+203a62c7
+68008078
+247a0000
+202062d1
+68008078
+203a62d7
+68018078
+60018048
+6808807b
+6800804c
+793ffe01
+9841fe00
+6000804c
+70007800
+6800807c
+207a0000
+6802007c
+60020078
+70007c00
+20600000
+6800807c
+207a0000
+6801807c
+60018048
+6808807f
+6800804c
+793ffe01
+9841fe00
+6000804c
+70007c00
+20600000
+4743c030
+6800804c
+1fe22600
+e8408000
+20405e52
+204062a7
+1a627e00
+6000804c
+20600000
+6808804c
+793f8400
+6008804c
+20600000
+6808804c
+79200400
+6008804c
+20600000
+7d34fe01
+6808804c
+9842fe00
+2feffe01
+20600000
+6800804c
+7934fe01
+6000804c
+20600000
+680089b4
+2fe0fe01
+20600000
+680089b4
+79207e07
+600089b4
+20600000
+680089b4
+793ffe07
+600089b4
+20600000
+680089b4
+2feffe07
+600089b4
+20600000
+d8a00562
+18007210
+180a7e00
+e0a08000
+c200630d
+20600000
+20407259
+da2041be
+da400592
+ea240000
+68088030
+7d3a0406
+60088030
+1a220a00
+20407352
+202021c4
+47444031
+204062bc
+247a0000
+68008055
+207a0000
+c002636f
+c002e374
+c0016366
+c001e37c
+c0076369
+c0036398
+c003e3b0
+c004e3b1
+c00563ba
+c005e3be
+c0066386
+c006e389
+c007e38f
+c0096359
+c009e37c
+c008635c
+c00a6356
+c00ae37c
+c00b6350
+c00c6355
+c00be349
+c00ce34f
+c00d633a
+c00de344
+70005500
+20600000
+680084d1
+c4010000
+c4018000
+70005500
+20406340
+20206cef
+6800816d
+c4008000
+7000550a
+20600000
+d8e00007
+20407f16
+247a0000
+7000551a
+20600000
+6800816d
+793ffe00
+6000816d
+70005519
+70007c0b
+20600000
+20600000
+680084d4
+c1810000
+204063c0
+70005518
+20600000
+20600000
+70005515
+70007c83
+20600000
+70005513
+70007c25
+20600000
+6800c55b
+c1000000
+c000e364
+d8e00006
+20407f16
+247a0000
+70455b00
+2020637d
+20748000
+20206398
+70005503
+70007c27
+20600000
+70007c13
+79200003
+70005505
+580001ff
+600104d2
+20600000
+70005505
+7004d2ff
+793f8022
+70007c33
+20205d04
+c6110000
+680104d2
+1fe67e01
+2022e37a
+600104d2
+20600000
+7000550e
+20600000
+20600000
+680084d1
+c4018000
+c4010000
+6800816d
+793ffe02
+6000816d
+70007c13
+70005510
+20600000
+7000550d
+70007c31
+20600000
+680084d1
+c4010000
+70005500
+20600000
+70005506
+20600000
+680084d2
+1fe0ffff
+203a6394
+600084d2
+20600000
+70007c07
+7004ca16
+70005500
+20600000
+6800816d
+c281637d
+c280639d
+7000551a
+20600000
+6800c1bd
+203a63a9
+680084d1
+c4018000
+c4010000
+680204e9
+d8400064
+98408400
+1c427e00
+98467c00
+24610000
+20206349
+70005516
+70468904
+58003030
+6001468a
+e0a10000
+7004d402
+20206350
+20600000
+6800816d
+c280e3b5
+7000551a
+20600000
+6800816d
+793ffe01
+6000816d
+70007c0f
+20600000
+680084d8
+207a0000
+70005500
+202063b5
+7000550c
+20600000
+6800804b
+c28163c5
+204062ef
+70007c08
+20204d04
+6800804b
+793ffe02
+6000804b
+20406001
+204062f8
+20204d04
+58000004
+6000c689
+58003030
+e0a10000
+e0a10000
+20600000
+47464031
+68108073
+d8400006
+9841fe00
+60108073
+68108077
+9841fe00
+60108077
+204063ee
+68108077
+793ffe01
+793ffe02
+60108077
+2000001e
+202063f2
+68108073
+d84000c0
+9841fe00
+60108073
+68108077
+9841fe00
+60108077
+204063ee
+68108077
+793ffe06
+793ffe07
+60108077
+2000001e
+202063f6
+68108081
+1fe17efc
+60108081
+20600000
+68108081
+1fe1fe01
+60108081
+20600000
+68108081
+1fe1fe03
+793ffe04
+60108081
+20600000
+1fe22400
+2040640f
+20000064
+1a427e00
+20406414
+1fe22400
+20406411
+20000064
+1a427e00
+20600000
+1fe22400
+2040640f
+20000064
+1a427e00
+20406413
+20406411
+20000064
+20600000
+6808c214
+2020680e
+6808c214
+20206829
+6808c214
+20206825
+202064ec
+202064f3
+24346419
+68108085
+1fe1fe02
+60108085
+18427c00
+2022e41c
+1a627a00
+2fcc0000
+202064b9
+18000404
+da2001fe
+68108085
+1fe17efd
+60108085
+20406419
+da2055aa
+680101fe
+e8c90000
+9a267c00
+20600000
+d8400002
+da200204
+20406419
+68010204
+600101f7
+20546430
+20600000
+d8400010
+da200206
+68108085
+1fe17efd
+60108085
+20406419
+d8c00206
+df200010
+20407478
+20407428
+20407491
+20207422
+7856fc00
+2040641e
+24628000
+7836fc00
+70802380
+70802200
+70802400
+da208025
+20406415
+70802300
+d8400006
+2040641f
+24628000
+e8c10000
+98002200
+20406419
+20206446
+20407f99
+58001000
+600101f7
+da6065e5
+df200002
+2040641e
+24628000
+680101f7
+1ff0fe00
+9840fe00
+1ff0fe00
+600101f7
+c2006452
+20206446
+20407f99
+78547c00
+2040666a
+58000000
+da2001f3
+d8400002
+204066b3
+680101f3
+c303e46e
+70805025
+580007f0
+da200206
+d8400010
+204066b3
+70800608
+7920002b
+d8c00206
+20407484
+78347c00
+7041da00
+204064b0
+680101f3
+1ff0fe00
+d84007ff
+98417e00
+2022e47b
+2040666f
+da6066b8
+20546430
+2040643c
+680081f2
+c300646f
+2040666d
+7041da00
+204064b0
+204065c2
+680081f3
+c283648e
+204064aa
+2436e486
+680081f2
+c300647d
+2020649b
+204065bf
+680081f3
+c283648e
+204064aa
+2436e48e
+680081f2
+c300647d
+2020649b
+7041da00
+204064b0
+680081f3
+c282e49b
+58000000
+600181f6
+20406502
+da606578
+20406429
+2040643c
+2436e49b
+680081f2
+c300648f
+c515e49d
+204064a3
+680081f3
+c30264a3
+70805021
+20404c0e
+20404c2e
+202064a1
+58000000
+60040206
+6004020e
+18007004
+20407492
+70805021
+20600000
+58000000
+600101f7
+da6065e5
+204065a3
+20406429
+2020643c
+6800c1da
+1fe0fe01
+1fe67c03
+242164b6
+6000c1da
+20600000
+204064a3
+20407fa1
+20600000
+680081f2
+1fe3fe00
+7920fe00
+2a2c000f
+20608000
+600081f2
+20600000
+68108085
+c4008000
+202064c6
+6810812c
+afefffff
+20608000
+68108108
+c300e4c3
+20407422
+202064c3
+68014199
+207a0000
+70802380
+70802200
+70802400
+6809419b
+184bf200
+98000c00
+e8c08000
+60108025
+c20064d2
+70802300
+20600000
+4746c031
+204064dd
+202063f2
+204064dd
+204063ee
+202063f6
+6800c212
+60108086
+6800c213
+60108087
+580001f5
+6011008a
+580001fa
+6011008c
+202063ee
+68108086
+79207e07
+60108086
+793ffe07
+60108086
+20600000
+79207e07
+600101f5
+47474031
+70808802
+70808e00
+70800602
+202064fc
+18000401
+600081f5
+4747c031
+70808801
+6019008e
+70800602
+204064fc
+680081fa
+20600000
+680140d6
+1fe0fe01
+600140d6
+6810812c
+c301e4fc
+20600000
+70808640
+70808700
+68108081
+793ffe00
+79207e01
+60108081
+58000000
+600201f5
+20600000
+58000000
+6011008e
+58000001
+60110088
+580001f5
+6011008a
+7001f506
+70800602
+202064fc
+78547c00
+1fe22400
+6800c239
+c1800000
+78347c00
+1a427e00
+20206522
+6800c239
+c000e522
+c0016528
+c001e530
+c0026537
+c002e53d
+20600000
+6001c232
+1a227e00
+60014235
+60094237
+70423902
+20206502
+20406502
+70423903
+2040650b
+da2001f5
+6801c232
+70808804
+d8400020
+20206556
+20406502
+2040650b
+58000005
+204064f3
+c3800000
+70423904
+20600000
+20406502
+70423905
+2040650b
+2040654a
+20406552
+20206545
+20406502
+2040650b
+58000005
+204064f3
+c3800000
+70423900
+68014201
+20207f9c
+68020aa2
+68094235
+184085fc
+e0420000
+20600000
+68094235
+18422200
+184085fc
+e8420000
+60020aa2
+68094237
+6801c232
+20600000
+18408404
+60190088
+d8400002
+1a20a3fc
+e2288000
+1ff10400
+e0a88000
+1fec8400
+e0a88000
+e0a08000
+1a227e00
+6011008a
+58000000
+6011008e
+70800602
+202064fc
+6019008e
+1ff10400
+600881f6
+1fec8400
+600881f7
+600081f8
+58000004
+60110088
+7001f503
+580001f5
+6011008a
+1a227e00
+6011008c
+68108086
+2a2c000f
+7920fe06
+60108086
+70800602
+6810812c
+c283e574
+d8e00003
+202064fc
+6019008e
+58000004
+60110088
+7001f503
+580001f5
+6011008a
+1a227e00
+6011008c
+68108086
+2a2c000f
+7920fe06
+60108086
+70800602
+6810812c
+c283e585
+d8e00003
+204064c0
+204064fc
+2feffe02
+204064b9
+680081f6
+1ff02400
+680081f7
+1fed7e00
+9a41a400
+680081f8
+9a41fe00
+9840fe00
+600081f8
+1fecfe00
+600081f7
+1fecfe00
+600081f6
+20600000
+70801001
+20600000
+7080910c
+7080920d
+7080930d
+7080940d
+7080950d
+7080960c
+202065a9
+70809105
+70809207
+70809307
+70809407
+70809507
+70809605
+6810807b
+1fe1fec0
+6010807b
+68108081
+1fe1fe10
+60108081
+20600000
+6810812c
+c302e5b0
+20600000
+60110098
+1a227e00
+6011009a
+1a427e00
+6011009c
+18427e00
+6011009e
+d8400001
+7d3a0401
+60108090
+70800604
+202065b0
+79200028
+70421108
+20600000
+793f8028
+70421120
+20600000
+6800c203
+9a40fe00
+600081f7
+202065cc
+680101f7
+1ff0fe00
+600081f7
+58000003
+60110098
+7001f6a0
+7001f8a1
+202065eb
+60090aa2
+204065d6
+68090aa2
+20406606
+202065dd
+6800c23a
+c17f8000
+c30365db
+580249f0
+20402a8f
+6808c23a
+20206829
+6808c23a
+20206825
+47484032
+c51465c5
+68014203
+9a40fe00
+1ff0fe00
+600101f7
+4748c032
+c51465c9
+58000004
+60110098
+7001f6a0
+7001f9a1
+580001f6
+6011009a
+6019009e
+1a227e00
+6011009c
+58000002
+2a2c000f
+7920fe00
+60108090
+70800604
+d8e00005
+204064c0
+204065b0
+2feffe04
+204064b9
+c5146601
+680101f7
+1ff0fe00
+9840fe00
+1ff0fe00
+600101f7
+20600000
+680081f7
+9840fe00
+1ff0fe00
+600101f7
+20600000
+68014203
+9a40fe00
+60010a9a
+47494032
+60090aa2
+1a227e00
+60010ab9
+2040661d
+68090ab2
+68010ab9
+1fe22200
+68010a9a
+2040663d
+68010ab2
+68090ab9
+98408400
+60090ab9
+68090a9a
+98408400
+60090a9a
+68010aa2
+243a660d
+20600000
+4749c032
+6800c211
+1fe0ffff
+68090a9a
+9841fe00
+1fe0fe01
+60018ab6
+68010aa2
+9840fe00
+68098ab6
+98467e00
+2421662f
+60010aa2
+68018ab6
+68090a9a
+98467e00
+60010ab2
+20600000
+68010aa2
+60010ab2
+58000000
+60010aa2
+20600000
+18408402
+60190098
+1a20a3fe
+ea298000
+18422400
+d84000a0
+e2288000
+e0a08000
+2020664a
+1fe22400
+474a4032
+c5146634
+1a427e00
+18408403
+60190098
+1a20a3fd
+ea298000
+18422400
+d84000a0
+e2288000
+1ff0fe00
+e0a10000
+1a227e00
+6011009a
+58000000
+6011009e
+70809001
+70800604
+204065b0
+1a427e00
+e2218000
+474ac032
+7001f900
+58000001
+60110098
+7001f6a0
+580001f6
+6011009a
+58000000
+6011009e
+6011009c
+58000003
+60108090
+70800604
+204065b0
+6810812c
+c4030000
+200005dc
+680081f9
+1fe0fe01
+600081f9
+1fe67c28
+24610000
+20206655
+70897370
+20000bb8
+20600000
+70897330
+20600000
+1fe9fe00
+60110045
+70804b00
+20600000
+2040666f
+204066a0
+ea288000
+1a20a201
+18000e00
+a84c0000
+2020e697
+68108046
+79207e06
+79207e07
+60108046
+70804702
+70804782
+793ffe07
+60108046
+7080478a
+2000000b
+708047ca
+20000021
+7080474a
+2000002c
+708047ca
+20000016
+7080478a
+20000021
+70804782
+20000001
+70804792
+2000000a
+708047b2
+68108007
+70804792
+20000001
+70804782
+afec0000
+2020e678
+68110045
+1fe0fe01
+60110045
+18e08e01
+28e01e08
+2420e678
+c2006675
+70804783
+20600000
+70804782
+2000000c
+70804780
+70804782
+20000096
+20600000
+204066a0
+708047a2
+1a227e00
+60110048
+7920040b
+2fec000f
+7920840f
+6019004a
+70800601
+20600000
+6810812c
+c300e6b0
+20600000
+2040666f
+204066a6
+204066b0
+70804783
+20600000
+68110124
+60110045
+204066a6
+d8e00001
+204064c0
+204066b0
+2feffe00
+204064b9
+70804783
+20600000
+6811005e
+98001400
+20600000
+19427e00
+6011005e
+20600000
+18627e00
+60110058
+20600000
+68110058
+1fe20600
+20600000
+68014243
+60110052
+20600000
+1f227e00
+207a0000
+1f20f3f8
+204166de
+20628000
+202166d3
+1f20f208
+1f20f3fc
+204166e1
+20628000
+202166d8
+1f20f204
+202066e4
+e8c40000
+e1440000
+20600000
+e8c20000
+e1420000
+20600000
+1f227e00
+207a0000
+e8c08000
+e1408000
+c20066e6
+20600000
+1f227e00
+207a0000
+1f20f3f8
+204166f7
+20628000
+202166ec
+1f20f208
+1f20f3fc
+204166fa
+20628000
+202166f1
+1f20f204
+202066fd
+e8640000
+e0a40000
+20600000
+e8620000
+e0a20000
+20600000
+1f227e00
+207a0000
+e8608000
+e0a08000
+c20066ff
+20600000
+1f227e00
+207a0000
+e8608000
+e1408000
+c2006705
+20600000
+700a993d
+20207d86
+474b4032
+6800c217
+207a0000
+204067a3
+2042e7a9
+2040673e
+6800c217
+1fe22600
+68094215
+6009018c
+1a627e00
+203a6709
+1a60a7ff
+18422200
+ea208000
+68088184
+98467c00
+2042e725
+20216721
+ea208000
+1fe0fe01
+e2208000
+6809018c
+18408422
+6009018c
+20206715
+58000000
+e2208000
+68008185
+e0a08000
+c099e733
+da4041be
+e8c30000
+e0a40000
+58000000
+e0a40000
+1a420c00
+20407ebf
+18007c01
+20600000
+c01b6737
+c01be73b
+da404419
+2020672b
+d8c044d5
+20407ebf
+d8c04419
+20206730
+d8c044cd
+20407ebf
+20206739
+20407fe9
+6800c217
+207a0000
+68014682
+c2806754
+474bc032
+6800c48e
+c000674d
+68008454
+2fe180c0
+2020e74d
+2fe18040
+2020e752
+2fe18000
+2020e750
+70018535
+6803044f
+20206757
+70018537
+20206757
+70018536
+20206757
+474c4033
+70018533
+68030040
+60030186
+68014215
+efe88000
+1fe0fe01
+6001018c
+60088184
+6800c217
+1fe22600
+6801018c
+1fe22200
+2040676f
+20740000
+6809018c
+18408422
+6009018c
+184085ff
+e8408000
+60008184
+1a60a7ff
+2422e75f
+6800c217
+1fe0ffff
+60008184
+20600000
+68008185
+c099e776
+da400185
+df200007
+20407f88
+2022ffe7
+20600000
+c01b6779
+c01be794
+20206771
+ea288000
+98467c00
+24628000
+d8a00ac2
+df200010
+20407ed4
+68018452
+60018ac2
+2040678b
+68010adf
+1ff0fe00
+1fed0400
+e8c08000
+9840fe00
+6809844f
+98467c00
+2022ffe7
+20600000
+d8c00ac2
+20407486
+ea208000
+20407487
+18006c38
+18006c00
+2040741d
+d8a00ad2
+20207497
+ea288000
+98467c00
+24628000
+18c22200
+18c0a608
+da4044cd
+df200008
+20407f88
+2022ffe7
+1a622200
+da4044d5
+df200008
+20407f88
+2022ffe7
+20600000
+68014215
+efe88000
+1fe0fe22
+efe08000
+98467c00
+20600000
+6800c217
+1fe27200
+68094215
+58000000
+e0408000
+18408422
+1fe0fe01
+c20067ad
+20600000
+474cc033
+2040673e
+68008030
+79347e06
+60008030
+243467bc
+1a208c0a
+d8a041be
+20407ebf
+202067d7
+7041bd00
+20600000
+6804c4cb
+203a67ca
+2040673e
+243467ca
+6801018c
+1fe08c01
+d8a044d5
+20407ebf
+d8a04419
+20407ebf
+70442901
+20600000
+70442900
+20600000
+6803044f
+60030186
+70018534
+202067d3
+68030040
+60030186
+70018533
+6800c092
+c005670b
+c28342da
+20600000
+680441be
+680c41c6
+9841fe00
+207a0000
+7041bd01
+20600000
+474d4033
+79200407
+2040681d
+7d208407
+474dc033
+18467cff
+20628000
+284c0007
+18410e1f
+680200a1
+f920fe00
+600200a1
+680200a5
+fd20fe00
+600200a5
+20600000
+474e4033
+18467cff
+20628000
+284c0007
+18410e1f
+680200a1
+f93ffe00
+600200a1
+680200a5
+f93ffe00
+600200a5
+20600000
+204067ed
+202067fe
+18467cff
+20628000
+2455e7e1
+d8a0807c
+20406830
+79400407
+d8a08078
+20406830
+793f8407
+d8a08070
+20206830
+d8a0807c
+20406830
+793f8407
+d8a08078
+20406830
+793f8407
+d8a08070
+20206830
+18467cff
+20628000
+79400407
+2040682f
+79200407
+d8a08070
+20206830
+18410e07
+18497e00
+1fe17e03
+98a08a00
+e8a08000
+20600000
+d8a08074
+2020681e
+d8a0811c
+20406815
+284ffe07
+2020e823
+afec0000
+20600000
+afefffff
+20600000
+18467cff
+20628000
+2fcffe07
+2020682c
+18467cff
+20628000
+2fcc0007
+58000000
+7d20fe07
+98428400
+d8a08074
+20406815
+284ffe07
+f920fe00
+e0a08000
+20600000
+da3fffff
+68108081
+2fe00602
+2040e878
+2fe00601
+2040e87a
+2fe00603
+2040e87a
+2feffe02
+2040e874
+2feffe03
+2040e876
+2feffe04
+2040e87c
+2feffe06
+7d20a204
+2feffe07
+7d20a205
+68108082
+2feffe00
+7d20a21b
+2feffe01
+7d20a21c
+2feffe02
+7d20a203
+2feffe03
+7d20a208
+2feffe04
+7d20a214
+2feffe05
+7d20a215
+2feffe06
+7d20a216
+2feffe07
+7d20a217
+68108080
+2feffe00
+7d20a205
+2feffe01
+7d20a206
+2feffe02
+7d20a207
+2feffe03
+7d20a212
+2feffe04
+7d20a213
+2feffe05
+7d20a214
+2feffe06
+7d20a215
+2feffe07
+7d20a216
+68108062
+2feffe04
+2040e87e
+474ec033
+68120078
+681a007c
+9841fe00
+1fe47e00
+9a217e00
+60120070
+20600000
+d8e00006
+20206884
+d8e00009
+20206882
+d8e00017
+20206882
+d8e00019
+20206884
+d8e0001e
+20206884
+d8e00002
+20206884
+df200001
+20206885
+df200004
+20206885
+df200002
+f93fa200
+18e08e01
+c2006885
+20600000
+20406895
+d8400006
+2020680e
+20406889
+d8400006
+20206825
+20406895
+68108078
+79207e07
+60108078
+d8400007
+202067fb
+68108081
+1fe17efb
+60108081
+20600000
+68108081
+2feffe02
+20600000
+2040666a
+580007e0
+da204150
+d8400002
+204066b3
+2020666d
+2040666a
+580007e2
+da20421d
+d840000e
+204066b3
+2020666d
+474f4033
+204068a2
+6800c22d
+c00068af
+c000e8c3
+c00168d7
+20600000
+68094229
+5800aa55
+98467c00
+2022e8b8
+58004dfa
+60014227
+58004894
+60014221
+202068c0
+68014227
+243a68bc
+58004dfa
+60014227
+68014221
+243a68c0
+58004894
+60014221
+58000064
+6001422b
+20600000
+68094229
+5800aa55
+98467c00
+2022e8cc
+58005932
+60014225
+58004323
+6001421f
+202068d4
+68014225
+243a68d0
+58005932
+60014225
+6801421f
+243a68d4
+58004323
+6001421f
+58000190
+6001422b
+20600000
+68094229
+5800aa55
+98467c00
+2022e8e0
+58006946
+60014223
+58005377
+6001421d
+202068e8
+68014223
+243a68e4
+58006946
+60014223
+6801421d
+243a68e8
+58005377
+6001421d
+58000032
+6001422b
+20600000
+6800c22d
+c00068f0
+c000e8f2
+c00168f4
+20600000
+708971bf
+202068f8
+708971af
+202068f8
+7089718f
+6800c22e
+60108973
+202068f8
+474fc033
+68108053
+79207e07
+60108053
+68108973
+1fe1fe30
+60108973
+7089067c
+708972aa
+20001388
+68190150
+68108053
+793ffe07
+60108053
+6009422f
+20600000
+47504034
+6800c22d
+c000690e
+c000e912
+c0016916
+20600000
+68014227
+68094221
+da6000c8
+2020691a
+68014225
+6809421f
+da600064
+2020691a
+68014223
+6809421d
+da600032
+2020691a
+98462200
+6801422f
+98467e00
+24216927
+6809422b
+984fa400
+1a627e00
+9a2ffe00
+9a40fe00
+9a26fc00
+20407f86
+1807fe00
+20600000
+18427e00
+6809422f
+98467e00
+6809422b
+984fa400
+1a627e00
+9a2ffe00
+9a467e00
+20206923
+ea240000
+60040a9a
+68010a9a
+68090a9c
+98462200
+68010aa0
+98462400
+68090a9e
+98467c00
+24416940
+1a4ffe64
+9a26fc00
+20407f86
+1807fe00
+205a6944
+20600000
+6800c231
+79207e00
+6000c231
+20600000
+6808c231
+79200401
+6008c231
+20600000
+6801423d
+efe08000
+207a0000
+1fe27200
+6801423d
+1fe0fe03
+1fe22200
+ea288000
+204067fb
+1a20a201
+c200694f
+20600000
+6801423d
+1fe0fe03
+1fe22200
+18002400
+700b1200
+ea288000
+2040681d
+4750c034
+68010b12
+1a420e00
+f920fe00
+60010b12
+1a20a201
+1a40a401
+6801423d
+efe08000
+9a42fc00
+2422e959
+68010b12
+68090b14
+9842fc00
+20628000
+78347c00
+20600000
+6801423d
+efe08000
+207a0000
+1fe27200
+6801423d
+1fe0fe03
+1fe22200
+ea288000
+204067dd
+1a20a201
+c2006973
+20600000
+d8e00009
+20407f16
+247a0000
+58000020
+d8e00009
+20407f08
+78547c00
+2040696c
+47514034
+6801423d
+efe08000
+207a0000
+20406954
+24347d02
+20407d00
+78547c00
+68010b12
+60010b19
+700b1b00
+18000e00
+68010b14
+1fe30400
+60090b14
+1fe17e01
+68090b19
+18412201
+18430400
+60090b19
+9a22fc00
+2442e9a1
+6801423d
+efe08000
+68088b1b
+18408401
+60088b1b
+18420e00
+98e2fc00
+2422e98c
+68010b12
+60010b14
+20600000
+4751c034
+6801423d
+1fe0fe01
+efe10000
+20207f9c
+68108042
+9a21fe00
+60108042
+68110050
+793ffe0d
+60110050
+20000064
+20600000
+68098a9c
+58b71b00
+9846fc00
+20407f86
+18078400
+68008a9f
+984ffe00
+1fe6fc64
+20407f86
+1807a200
+18427e00
+9a262400
+68008a9b
+204069be
+68008a9a
+202069d5
+c00069c4
+c000e9c6
+c00169c8
+c001e9ca
+c00269cc
+c002e9ce
+d8a080a0
+202069d0
+d8a080a4
+202069d0
+d8a080a8
+202069d0
+d8a08064
+202069d0
+d8a08068
+202069d0
+d8a0806c
+202069d0
+1a227e00
+e0a10000
+1a427e00
+e0a10000
+20600000
+78347c00
+202069d8
+78547c00
+c00269e3
+c002e9e5
+c00de9e7
+c00e69e9
+c001e9eb
+c00469ed
+c00a69ef
+c00ae9f1
+c00b69f3
+c00be9f5
+20600000
+d8e00006
+202069ff
+d8e00007
+202069ff
+d8e00008
+202069ff
+d8e00009
+202069ff
+d8e0000a
+202069ff
+d8e0000b
+202069ff
+d8e0000c
+20206a01
+d8e0000d
+20206a01
+d8e0000e
+20206a01
+d8e0000f
+20206a01
+68110081
+f9347e00
+60110081
+1a220e00
+68108085
+f9347e00
+60108085
+20600000
+18e0a3fc
+202069f7
+18e0a3f6
+202069f7
+20758000
+70456700
+7004ed03
+7004ee03
+7004f211
+7004f313
+58000000
+600184ef
+6000c254
+70468100
+47524034
+58000000
+6000c254
+6000c564
+6000c55d
+6800c56b
+c000ea16
+70456950
+20600000
+70456900
+20600000
+18418402
+20600000
+18427e00
+1fedfe00
+6000c562
+18007e3f
+1fedfe00
+6000c561
+18007e01
+1fedfe00
+6000c560
+20406a50
+18427e00
+20600000
+1fedfe00
+6000c562
+18007e73
+1fedfe00
+6000c561
+18007e01
+1fedfe00
+6000c560
+20206a50
+6800c563
+203a6a33
+58000070
+20600000
+580000aa
+20600000
+1fedfe00
+6000c562
+18007eef
+20406a44
+680904f7
+18420a00
+e0a08000
+18a20400
+600904f7
+18007eff
+20406a44
+680904f7
+18420a00
+e0a08000
+20600000
+1fedfe00
+6000c561
+68014561
+1fed7e00
+600184f4
+da200107
+da40000f
+20406a5d
+1fe2fed7
+1fe47e00
+1fedfe00
+20600000
+6801c560
+600184f4
+da200107
+da40000f
+20406a5d
+1fed7e00
+da400007
+20406a5d
+1fe2fe2b
+1fe47e00
+1fedfe00
+1fe20400
+20600000
+da600000
+1a427200
+20407e71
+1fe20400
+18427e00
+1a63a600
+c3046a66
+9a228400
+1a60a601
+18438400
+680184f4
+1a40a5ff
+2a41feff
+2020ea70
+1a427200
+20407e71
+2feffe00
+79208400
+20206a61
+18437e00
+20600000
+6808c55d
+184b8400
+79200400
+6800c563
+245a6a18
+6008850d
+20600000
+18438400
+6800c563
+793a0400
+20600000
+680884fc
+7004fed7
+20406bb6
+6800c251
+79207e06
+79207e07
+6000c251
+70456300
+20206b97
+6800c251
+79207e07
+6000c251
+20206b97
+4752c034
+6800c681
+c0006a8e
+20206b4c
+68010264
+1fe20c00
+20406ab8
+680084fc
+c0006a94
+20206b18
+47534034
+680084fd
+c01fea7d
+c039ea86
+c077ea9b
+c029eb44
+20600000
+68010501
+1fe20c00
+20406ac3
+68008503
+c020eaa5
+c0206aad
+c038eae6
+c0386af2
+c024eafd
+20206b97
+20406aaf
+20206aa7
+6800c254
+79207e00
+79207e01
+6000c254
+20406be0
+20206b97
+20406aaf
+20206b97
+20406acb
+20206ad7
+20406acb
+e8c08000
+1fe97e00
+6000c56a
+e8c08000
+60008508
+20600000
+e8c08000
+600084fb
+1fe97e00
+600084fc
+e8c08000
+600084fd
+20406ace
+600904ff
+18c27e00
+60010501
+20600000
+e8c08000
+1fe37e00
+60008503
+20406ace
+60090504
+18c27e00
+60010506
+20600000
+68010506
+1fe20c00
+20600000
+e8c08000
+1fe20400
+18430400
+c3800000
+e8c08000
+1fe9fe00
+1ff27e00
+98408400
+20600000
+e8c08000
+6000c55d
+e8c08000
+60008509
+e8c08000
+6000850a
+e8c08000
+6000850b
+e8c10000
+6001455e
+e8c08000
+6000850c
+e8c08000
+6000c568
+20600000
+20406ab1
+20206ae8
+6800c254
+79207e05
+79207e06
+6000c254
+6808c55d
+184b8400
+18418403
+20406c11
+70456703
+20206b97
+700a9908
+20407d86
+20406ab1
+6800c56a
+1fe67c01
+2022eaf9
+20202a8c
+6800c254
+79207e07
+6000c254
+20206b97
+20406acb
+e8c08000
+60008ac2
+204052d2
+204052e0
+5800000e
+e0a10000
+6801424a
+e0a10000
+6800c563
+1fe3fe00
+79207e00
+e0a08000
+4753c034
+580015ef
+e0a10000
+58001191
+e0a10000
+68008ac2
+e0a08000
+58000007
+e0a28000
+58000001
+e0a10000
+20406a2f
+e0a08000
+20600000
+20206b19
+47544035
+680084fd
+c039eb21
+c01feb25
+c077eb3f
+c07feb37
+c029eb46
+20600000
+6800c254
+79207e03
+6000c254
+20206b97
+6800c254
+79207e03
+79207e02
+6000c254
+680084fb
+20406a26
+600084fe
+20406bb6
+680084fb
+1feb7e00
+6000c55d
+1febfe00
+793ffe01
+79207e00
+d8404565
+600904f7
+20406a35
+20206b97
+68010501
+1fe20c00
+1fe0fe01
+60010501
+e8c08000
+6808c568
+9840fe00
+6000c568
+20406c42
+20406a72
+20406c28
+20406c4b
+20206b97
+700a9909
+20407d86
+20406a0d
+680084fb
+20406a26
+600084fe
+20406bb6
+20206b97
+68010264
+1fe20c00
+20406ab8
+680084fc
+c0006b52
+20206b86
+4754c035
+680084fd
+c01fea7d
+c039ea86
+c077eb58
+20206b97
+68010501
+1fe20c00
+20406ac3
+68008503
+c020eb61
+c0206b61
+c038eb6c
+c0386b7c
+20206b97
+20406aaf
+6800c55d
+1fe37e00
+6808c564
+98467c00
+2022eb68
+20202a8c
+6800c254
+79207e01
+6000c254
+20206b97
+20406ab1
+6800c56a
+6808c564
+98467c00
+2022eb73
+20202a8c
+20206b97
+6800c254
+79207e05
+79207e06
+6000c254
+6808c55d
+184b8400
+18418403
+20406c11
+20206b97
+20406ab1
+6800c56a
+6808c564
+98467c00
+2022eb82
+20202a8c
+6800c254
+79207e07
+6000c254
+20206b97
+680084fc
+6808c564
+98467c00
+2022eb8c
+20202a8c
+20206b97
+680084fd
+c039eb91
+c077eb3f
+c07feb37
+c029eb96
+6800c254
+79207e03
+6000c254
+20206b97
+20206b95
+20206b46
+20600000
+6800c567
+207a0000
+c001eb9c
+20202a8c
+70456700
+204052d2
+d8400001
+6808c55d
+184b8400
+18418403
+da2000aa
+20406bfc
+204052e0
+18a20c00
+e8c10000
+203a2a8c
+20600000
+204052e0
+58000004
+e0a10000
+6801424a
+e0a10000
+680084fb
+e0a08000
+47554035
+5800013f
+e0a10000
+680084fe
+e0a08000
+20600000
+204052d2
+204052e0
+58000004
+e0a10000
+6801424a
+e0a10000
+680084fb
+e0a08000
+4755c035
+58000173
+e0a10000
+680084fe
+e0a08000
+20600000
+204052e0
+5800000e
+e0a10000
+6801424a
+e0a10000
+6800c563
+1fe3fe00
+79207e00
+e0a08000
+47564035
+580015ef
+e0a10000
+58001183
+e0a10000
+18427e00
+e0a08000
+580000f0
+e0a18000
+5800007f
+e0a10000
+58000000
+e0a08000
+58000001
+e0a08000
+20406a2f
+e0a08000
+70456910
+20600000
+204052d2
+204052e0
+5800000e
+e0a10000
+6801424a
+e0a10000
+6800c563
+1fe3fe00
+79207e00
+e0a08000
+4756c035
+580015ef
+e0a10000
+58001181
+e0a10000
+6800c55d
+e0a08000
+580000e0
+e0a18000
+6801456c
+e0a10000
+58000000
+e0a08000
+6800c56e
+e0a08000
+20406a2f
+e0a08000
+20600000
+204052e0
+58000008
+e0a10000
+6801424a
+e0a10000
+6800c563
+1fe3fe00
+79207e00
+e0a08000
+47574035
+580009ef
+e0a10000
+580005e3
+e0a10000
+18427e00
+e0a08000
+5800008d
+e0a08000
+20406a2f
+e0a08000
+20600000
+204052d2
+204052e0
+58000008
+e0a10000
+6801424a
+e0a10000
+18421600
+6800c563
+1fe3fe00
+79207e00
+e0a08000
+4757c035
+580009ef
+e0a10000
+580005e1
+e0a10000
+19627e00
+e0a08000
+5800008d
+e0a08000
+20406a2f
+e0a08000
+20600000
+47584036
+6800c569
+207a0000
+68110112
+247a0000
+1a227e00
+60008a9b
+60088a9a
+2040526e
+247a0000
+204052d2
+204052e0
+58000005
+e0a10000
+6801424a
+e0a10000
+6800850d
+e0a08000
+580001ff
+e0a10000
+6800c569
+e0a08000
+6800c566
+e0a08000
+70456900
+20600000
+4758c036
+6800c56b
+c1008000
+680104ff
+207a0000
+6800c569
+1fe0fe01
+6000c569
+20600000
+6801456f
+20207f9c
+47594036
+6800c568
+207a0000
+1fe0ffff
+6000c568
+6801455e
+6809469f
+98467c00
+20216c57
+6001469f
+6800c569
+203a6c5f
+70051001
+6800c566
+6000850f
+580000ff
+6000850e
+20206c64
+70051000
+6800c565
+6000850f
+580000ef
+6000850e
+4759c036
+6801469f
+1fe67c7f
+20216c6b
+68008510
+1fe0fe01
+60008510
+20406a72
+6801469f
+1fe0fe08
+68088510
+9840a200
+20405240
+60010277
+1fe0fe04
+60010279
+1fe20a00
+6800850d
+e0a08000
+6800850e
+e0a08000
+20406c95
+20406ca6
+475a4036
+68014571
+1fe20600
+6801469f
+1fe27200
+204066ea
+18a20400
+18627e00
+60014571
+18420a00
+6800850f
+e0a08000
+68010277
+1fe20a00
+6801469f
+68088510
+9840fe00
+1fe0fe04
+e0a10000
+6801424a
+e0a10000
+70456900
+68014573
+c0003a97
+700b0500
+20600000
+475ac036
+6801469f
+1fe67c7f
+24216c9d
+1fe3fe00
+79207e00
+e0a08000
+20600000
+6801469f
+1fe97e00
+1ff18400
+1fe17e7f
+1fe3fe00
+793ffe00
+e0a08000
+e0a88000
+20600000
+6800c569
+207a0000
+e0a08000
+20600000
+475b4036
+20407d9c
+204032f6
+2040631b
+475bc036
+204076dc
+204076b5
+204076c6
+2040526e
+247a0000
+20404da9
+2040526e
+247a0000
+475c4037
+20406cf5
+20404f64
+20406b98
+20406cbe
+475cc037
+202032f2
+6800827f
+c2805087
+c283d091
+20600000
+475d4037
+20405274
+207a0000
+6800804b
+c3830000
+20405258
+6001016f
+1fe20c00
+e8c10000
+1fe0fe04
+600141dc
+7041db06
+475dc037
+68014246
+203a6cdd
+6800804b
+c4038000
+793ffe07
+6000804b
+7041db05
+68094246
+6801016f
+9840fe00
+6001016f
+680141dc
+98467e00
+600141dc
+475e4037
+680141dc
+203a2a8c
+d8400104
+98467e00
+24216ce9
+475ec037
+600941dc
+68014246
+9840fe00
+60014246
+20206ceb
+58000000
+60014246
+6800804b
+79207e06
+6000804b
+20600000
+6800c684
+c2806cf3
+70028701
+20600000
+7002870f
+20600000
+6800c681
+243a6cfb
+68008286
+207a0000
+70028600
+20600000
+475f4037
+68008287
+207a0000
+c000ed1b
+c0016d74
+c001ed21
+c0026d78
+c01ded2b
+c01e6d7b
+c006ed30
+c0076d80
+c007ed33
+c0086d86
+c008ed39
+c0096d8a
+c009ed3f
+c00a6d8e
+c00aed45
+c00b6d92
+c00bed4b
+c00c6d97
+c00ced51
+c00d6d9b
+c00ded57
+c00e6d9f
+c00eed5d
+c00f6da4
+c00fed63
+c0106da8
+c010ed6e
+c0116dac
+20600000
+20406db7
+70028702
+6800c250
+79207e00
+6000c250
+20600000
+70028704
+6800c250
+c3810000
+70028703
+20406dbe
+70028704
+6800c250
+79207e02
+6000c250
+20600000
+20405274
+247a0000
+20406dcd
+7002873c
+20600000
+20406dc3
+7002870e
+20600000
+20406ddd
+70028710
+6800c252
+79207e00
+6000c252
+20600000
+20406de4
+70028712
+6800c252
+79207e02
+6000c252
+20600000
+20406de9
+70028714
+6800c253
+79207e00
+6000c253
+20600000
+20406df0
+70028716
+6800c253
+79207e02
+6000c253
+20600000
+20406dd1
+70028718
+6800c251
+79207e00
+6000c251
+20600000
+20406dd8
+7002871a
+6800c251
+79207e02
+6000c251
+20600000
+20406df5
+7002871c
+6800c251
+79207e06
+6000c251
+20600000
+20406dfc
+6800c254
+79207e00
+6000c254
+7002871e
+20600000
+20406e02
+6800c254
+79207e02
+6000c254
+70028720
+6800c564
+1fe9fe00
+1fe1fe03
+d8404565
+600904f7
+20206a35
+20406e0c
+6800c254
+79207e04
+6000c254
+70028722
+20600000
+6800c250
+c4008000
+70028703
+20206cfb
+6800c250
+c19f8000
+7002873b
+68008285
+c18b8000
+70028500
+7002870d
+20206cfb
+6800c250
+247a0000
+6800c684
+c2806daf
+c2836db1
+20206db5
+6800c252
+c4008000
+70028711
+20206cfb
+6800c252
+c19f8000
+70028713
+20206cfb
+6800c253
+c4008000
+70028715
+20206cfb
+6800c253
+c19f8000
+6800c684
+c2836db1
+20206db5
+6800c251
+c4008000
+70028719
+20206cfb
+6800c251
+c19f8000
+7002871b
+20206cfb
+6800c251
+c1ff8000
+6800c684
+c2836db3
+20206db5
+6800c254
+c4008000
+7002871f
+20206cfb
+6800c254
+c4018000
+70028721
+20206cfb
+6800c254
+c1ff8000
+20206db5
+7002870f
+20206cfb
+70028717
+20206cfb
+7002871d
+20206cfb
+70028700
+20600000
+475fc037
+204052b8
+58000001
+1fe20400
+58000050
+1fe21600
+202050a8
+47604038
+204052b8
+68014248
+1fe20400
+202050b7
+4760c038
+204052b8
+68014248
+1fe20400
+d9600050
+204050cc
+6800c250
+793ffe05
+6000c250
+20600000
+47614038
+204052c5
+20407138
+202050e7
+4761c038
+204052b8
+58000003
+1fe20400
+58000051
+1fe21600
+202050a8
+47624038
+204052b8
+6801424a
+1fe20400
+202050b7
+4762c038
+204052b8
+58000011
+1fe20400
+58000052
+1fe21600
+202050a8
+47634038
+204052b8
+6801424c
+1fe20400
+202050b7
+4763c038
+204052b8
+58000013
+1fe20400
+58000053
+1fe21600
+202050a8
+47644039
+204052b8
+6801424e
+1fe20400
+202050b7
+4764c039
+204052d2
+7004fb03
+7004fe1c
+20406ba9
+70456301
+20600000
+47654039
+204052d2
+6808c564
+20406a79
+6008c55d
+20206bc4
+4765c039
+204052d2
+6808c55d
+20406a73
+20406a1a
+600084fe
+6808c55d
+20406a73
+600884fb
+20206ba9
+47664039
+204052d2
+6808c55d
+20406a73
+20206bfc
+4766c039
+68010264
+98000c00
+e8c08000
+1fe22400
+6000851b
+e8c10000
+6001051c
+e8c08000
+1fed1600
+e8c08000
+99609600
+47674039
+18c20400
+df200004
+d8a0052a
+20407ec6
+18420c00
+1a427e00
+c000efba
+c0016e2c
+c001efba
+c0026e54
+c002efba
+c0036f02
+c003efba
+20206fc1
+4767c039
+20406fd0
+2841fe01
+2020f040
+2841feff
+2020efc4
+e8c10000
+60010522
+196097fe
+196097ff
+2422efbe
+d9600511
+e9610000
+207a0000
+20407082
+204052d0
+18007e03
+e0a08000
+6801051c
+e0a10000
+18ebfe00
+1fe0fe05
+1fe0a605
+1ff0fe00
+e0a10000
+18e27e00
+1ff0fe00
+e0a10000
+e0a10000
+d8c0052a
+18e27200
+2022ee4f
+e8c20000
+e0a20000
+c2006e4c
+18007e00
+e0a08000
+1a627e00
+60010275
+20600000
+4768403a
+e8c20000
+60020524
+196097fc
+20406f2e
+60010520
+196097fe
+20407028
+2022efc4
+2a21fe05
+2020ee62
+d8a0052a
+18000e00
+20206e71
+e8c08000
+c0856fc4
+e8c10000
+243a6e6f
+e8c08000
+c0ffee6d
+e8c08000
+c0ffee6b
+20206eb8
+18c08dfb
+20206e5f
+18c08dfc
+20206e5f
+18c08dfd
+20206e5f
+e8c08000
+c004ee86
+c0056e74
+e8c10000
+e0a10000
+18e08e01
+1ff0a400
+e8c10000
+1ff0fe00
+1a40a401
+9a467c00
+24216e83
+1fe22600
+1a50fe00
+e0a10000
+18e08e01
+1a627e00
+20206e7a
+196097fb
+1a20a3fb
+20206e8b
+e8c10000
+e0a10000
+18e08e01
+196097fd
+1a20a3fd
+24216fc4
+2422ee71
+196097ff
+2422efc4
+204052d0
+18a08a0a
+da20052a
+18e27e00
+203a6ea5
+ea210000
+203a6ea5
+98002400
+68020524
+98000400
+204070e7
+18c27e00
+203a6ea2
+18c08dfd
+e8c18000
+e0a18000
+2040705b
+98007200
+20407f01
+1a20a202
+18e08fff
+20206e92
+da200005
+20406f84
+68010275
+c005f043
+20206f9a
+e8c08000
+c0006eae
+c000eeb0
+c0016eb3
+196097ff
+20206eb6
+e8c08000
+196097fe
+20206eb6
+e8c10000
+1ff0fe00
+196097fd
+60010519
+20600000
+196097fb
+20406eaa
+2422efbe
+680a0524
+204070b1
+2422efbb
+18c22200
+204052d0
+1a220c00
+18a08a03
+18c21600
+20407062
+1fe22200
+68010519
+1fe22400
+1a227e00
+9a462400
+68010520
+9a467c00
+24216ee7
+78547c00
+68010519
+203a6eda
+99608c00
+1a40a403
+1a427200
+1f227e00
+1fe0fe03
+1ff0fe00
+e0a10000
+1f227e00
+1ff0fe00
+e0a10000
+20206ef5
+1a20f206
+20346ede
+1f30fe00
+20206ee1
+1f227e00
+1fe0fe02
+1ff0fe00
+e0a10000
+1f20f3fd
+1f30fe00
+e0a10000
+19620c00
+20206ef5
+78347c00
+68010520
+1fe22200
+1a227200
+68010519
+203a6eda
+99608c00
+1a227e00
+1fe0fe05
+1ff0fe00
+e0a10000
+1a227e00
+1ff0fe00
+e0a10000
+20407f01
+24346efe
+18007e02
+e0a08000
+18c27e00
+99667e00
+1ff0fe00
+e0a10000
+20206f00
+18007e00
+e0a08000
+da200005
+20206fb0
+4768c03a
+20406fd0
+2841feff
+2020efc4
+20406f2e
+60010520
+196097fe
+20407028
+d8a0052a
+18000e00
+e8c08000
+c0056f36
+e8c10000
+e0a10000
+18e08e01
+196097fd
+1a20a3fd
+24216fc4
+2422ef0c
+196097ff
+2422efc4
+204052d0
+18a08a0d
+68010511
+98002600
+da20052a
+ea210000
+203a6f29
+98002400
+204070c6
+203a6f27
+18c08dfd
+e8c18000
+e0a18000
+2040705b
+98007200
+20407f01
+1a20a202
+20206f1c
+20406f83
+68010275
+c0077046
+20406f9a
+20206f9a
+e8c10000
+1ff0fe00
+1fe0fffd
+d84000c8
+98467c00
+24610000
+580000c8
+20600000
+18c08c04
+196097fb
+1a20a3fb
+2422efc4
+20406eaa
+2422efbe
+d9600511
+20407082
+18e27e00
+203a7046
+6000854e
+1a427e00
+6001054c
+d8e00000
+da200000
+204052d0
+18a08a0a
+20406f6c
+24342a8c
+18c21600
+1fe22600
+9a20a200
+68010519
+1fe22400
+203a6f75
+1a227e00
+9a462400
+2022ef67
+24216f67
+68010520
+9a467c00
+2022ef5e
+24216f5e
+1a427200
+20406f61
+6800854e
+18e08e01
+98e67c00
+2022ef83
+20206fa0
+1fe27200
+20406f61
+20206fa0
+18a08bfd
+1f220400
+1a627e00
+9a467e00
+99608c00
+20207f01
+6800854e
+18e08e01
+98e67c00
+20628000
+20206f47
+20407fe9
+d8c0052a
+18ebfe00
+98c08c00
+e8ca0000
+204070b1
+24628000
+2040705b
+20207fe7
+68010520
+9a267c00
+24216f8f
+1a227200
+1f220400
+19620c00
+20407f01
+6801054c
+9a267c00
+2022ef81
+20406fa0
+20206f94
+20406f83
+20206f94
+da200007
+18007e00
+e0a08000
+20406fb0
+68090275
+184085fb
+1850fe00
+e0a10000
+184085fd
+1850fe00
+e0a10000
+20600000
+1fe27200
+1f220400
+19620c00
+20407f01
+20406fa0
+58000036
+e0a08000
+6801054c
+1ff0fe00
+e0a10000
+20600000
+58000036
+e0a08000
+184085fd
+1850fe00
+e0a10000
+20600000
+da200007
+58000002
+e0a08000
+68010519
+98408400
+1850fe00
+e0a10000
+20406fb0
+68090275
+184085fb
+1850fe00
+e0a10000
+184085fb
+1850fe00
+e0a10000
+20600000
+68010273
+98a67e00
+1fe67e00
+60010275
+204052d0
+1a227e00
+e0a08000
+6801051c
+e0a10000
+20600000
+20600000
+58000200
+6001054a
+20206fc6
+58000400
+6001054a
+20206fc6
+58000600
+6001054a
+20206fc6
+58000300
+6001054a
+204052d0
+e0a08000
+6801051c
+e0a10000
+58000200
+e0a10000
+6801054a
+e0a10000
+70027507
+20600000
+da400000
+18000400
+d8a00511
+20407028
+2022f026
+1a40a401
+e8c08000
+1a20a3ff
+196097ff
+2fe1f018
+2420f026
+2fe00e04
+2420eff3
+18000401
+e8c08000
+1a20a3ff
+196097ff
+c0806fe7
+e8c08000
+1a20a3ff
+196097ff
+c0006ff8
+20206fea
+18c08c01
+1a20a3ff
+196097ff
+18c08c02
+1a20a3fe
+196097fe
+2841fe00
+2020f020
+18c08c0c
+1a20a3f4
+196097f4
+20207020
+2fe00e02
+2420eff6
+20206fde
+2fe00e01
+2420f026
+1a20a3fe
+196097fe
+e8c10000
+1a467c04
+2022effe
+e0a10000
+2841fe00
+2020f020
+18c20400
+e8c08000
+c0807019
+e8c08000
+c0807019
+e8c08000
+c0887019
+e8c08000
+c0807019
+e8c08000
+c0c07019
+e8c08000
+c0807019
+e8c08000
+c0807019
+e8c08000
+c0c07019
+e8c08000
+c0aff019
+e8c08000
+c0cdf019
+e8c08000
+c09a7019
+e8c08000
+c07df01e
+18420c00
+18c08c0c
+18000e00
+18000400
+2020701e
+196097f4
+1a20a3f4
+18000400
+2a21fe00
+2420efd5
+18007e00
+e0a10000
+20600000
+d84000ff
+20600000
+476a403a
+e8c08000
+196097ff
+2fe1f030
+2420f03e
+2fe00e07
+2020f037
+2fe00e06
+2020f039
+2fe00e05
+2420f03e
+e8c08000
+1fe22200
+196097ff
+2020703c
+18c08c02
+196097fe
+e8c10000
+1ff0a200
+196097fe
+18007e01
+20600000
+18007e00
+20600000
+58000003
+6000851b
+20207048
+58000005
+6000851b
+20207048
+58000007
+6000851b
+204052d0
+6800851b
+1fe22400
+e0a08000
+6801051c
+e0a10000
+58000500
+e0a10000
+2a41fe05
+2020f057
+2a41fe07
+2020f057
+58000000
+e0a28000
+20207059
+58350200
+e0a28000
+7002750a
+20600000
+20407ea2
+20407ea5
+20407062
+20407e9c
+20407e9f
+18427e00
+20600000
+e8c08000
+1fe17207
+1fe97e00
+c080706c
+18007e01
+18000401
+20600000
+20407e76
+1fe08401
+20600000
+1f227e00
+1fe67c04
+20217069
+c002f073
+c0037076
+c003f07a
+20600000
+e8c08000
+1fe08402
+20600000
+e8c10000
+1ff0fe00
+1fe08403
+20600000
+e8c10000
+1ff0fe00
+e8c90000
+18508400
+18500400
+9840fe00
+1fe08405
+20600000
+476ac03a
+18000e00
+da400000
+d8a0052a
+e9610000
+207a0000
+2040708d
+18e27e00
+c1038000
+19609602
+20207086
+98002600
+68014575
+98000c00
+18e27e00
+c1038000
+78547c00
+e8c08000
+207a0000
+98007200
+e8c10000
+9a667c00
+2422f09a
+78347c00
+c2007096
+e8ca0000
+18c22200
+243470ad
+d8c0052a
+df200007
+e8c20000
+203a70a6
+98467c00
+2022f0ad
+c20070a0
+20600000
+e0aa0000
+18e08e01
+1a220c00
+2040705b
+9a40a400
+98c08c00
+20207090
+1a220c00
+20407062
+98c08c00
+20207090
+476b403a
+68014575
+98000c00
+e8c08000
+203a7fe3
+1fe3fe00
+98c08c00
+e8c20000
+98467c00
+20628000
+18a27e00
+60010abb
+600c0aa2
+20407062
+98c08c00
+18c27e00
+68090abb
+18420a00
+680c0aa2
+1fe20c00
+202070b4
+476bc03a
+68014575
+98000c00
+e8c08000
+203a70e4
+98007200
+e8c10000
+9a667c00
+2022f0d4
+c20070cc
+18c08c04
+20407062
+98c08c00
+202070c9
+1f20f3ff
+1f23fe00
+98c08c00
+18c08c04
+20407062
+98c09600
+18c08c01
+e8c10000
+9a467c00
+2022ffef
+2040705b
+98c08c00
+19627e00
+98c67c00
+2022f0e4
+202070da
+18000c00
+18007e00
+20600000
+476c403b
+68014575
+98000c00
+e8c08000
+203a7100
+1fe3fe00
+98c08c00
+e8c20000
+98467c00
+2022f0f4
+20407062
+98c08c00
+202070ea
+20407062
+98c09600
+18c08c01
+e8c10000
+9a467c00
+20628000
+2040705b
+98c08c00
+19627e00
+98c67c00
+2022f100
+202070f6
+18000c00
+20600000
+da400400
+204070f4
+da400300
+2040710d
+24740000
+1a267c03
+20217fe9
+e8c08000
+c0847fe9
+e8c08000
+20600000
+476cc03b
+20407062
+1fe22200
+e8c08000
+1fe17207
+1fe97e00
+1fe67c03
+2022f129
+1f227e00
+c002f120
+c0037123
+c003f126
+18c08dff
+20407062
+98c08c00
+1a227e00
+98462200
+2022ffe9
+20207110
+1a20a3fe
+18c08c01
+20207110
+1a20a3fd
+18c08c02
+20207110
+1a20a3fb
+18c08c04
+20207110
+1a20a3ff
+1f227e00
+c000f132
+c0017130
+c002712f
+20207fe9
+1a20a3f4
+e8c10000
+1a20a3fe
+e8c10000
+9a467c00
+2022ffe7
+1a20a3fe
+2022ffe9
+20207110
+204052d0
+1fe20a00
+58000006
+e0a08000
+5800006e
+e0a10000
+58000f00
+e0a10000
+581a0535
+e0a18000
+58000111
+1ff07e00
+e0a20000
+58002600
+e0a10000
+58000335
+e0a10000
+58000009
+e0a10000
+58000004
+e0a10000
+70027514
+20600000
+476d403b
+7005e550
+d8a005e6
+d8c0443a
+20407ebf
+d8c045d2
+20407ebd
+d8c009be
+20407ebd
+2040720a
+d8c0042f
+20407205
+204071d0
+d8a00af2
+20407201
+580f4240
+1fe22200
+68020af2
+9a26fc00
+20407f86
+18077e00
+600209ba
+20600000
+7005e541
+d8a005e6
+204071b5
+204071b0
+6801c454
+e0a18000
+20407176
+d8c0042f
+20407ebf
+d8c0443a
+20407ebf
+2040720a
+d8c00b12
+d8a00ac2
+20407ebf
+202071d0
+680244c7
+e0a20000
+20407ecd
+20207eca
+476dc03b
+7005e541
+d8a005e6
+204071b0
+204071b5
+6801c44d
+e0a18000
+20407176
+d8c0443a
+20407ebf
+d8c0042f
+20407ebf
+2040720a
+d8c00b12
+d8a00ac2
+20407ebf
+204071d0
+d8a00af2
+20207201
+7005e520
+d8c009fe
+d8a005e6
+20407ebd
+2040720a
+d8c0099e
+20407205
+204071d0
+d8a00ac2
+20407497
+d8400001
+2040719f
+d8a04419
+20407201
+d8400000
+2040719f
+d8a00b12
+20207497
+476e403b
+7005e535
+58000100
+600105e6
+204071b0
+204071b5
+d8c0443a
+20407ebf
+d8c0042f
+20407ebf
+58006c65
+e0a10000
+58006274
+e0a10000
+e0a88000
+2040720a
+202071d0
+680344a0
+e0a30000
+6800c495
+e0a08000
+20600000
+6803044f
+e0a30000
+6800c48e
+e0a08000
+20600000
+7005e541
+6800c664
+600085e6
+d8c045d2
+20407ebd
+d8c009be
+20407ebd
+2040720a
+d8c0042f
+20407205
+202071d0
+7005e541
+6800c664
+600085e6
+d8c009be
+20407ebd
+d8c045d2
+20407ebd
+2040720a
+d8c0443a
+20407205
+202071d0
+476ec03b
+2040721f
+680085e5
+1fe20400
+1fe0fe0f
+1ff1fe00
+1fe22400
+203a71e2
+18417e0f
+243a71e5
+da600ad2
+dfe005e6
+1fe0fff0
+9840a200
+d8a00b02
+df200004
+20407edd
+202071f0
+da400001
+da200000
+202071e6
+1841220f
+dfe005e6
+9840fe00
+9a260c00
+d8a00af2
+20407245
+da600ae2
+da200af2
+d8a00b02
+df200004
+20407edd
+20407491
+20407428
+d8c005e6
+1a40a5ff
+1a427e00
+203a71f9
+20407486
+20407422
+202071f3
+d8a00af2
+20407497
+d8c00b02
+20407486
+20407428
+d8c00af2
+20407486
+20207422
+18a22200
+20407497
+df200010
+20207ee5
+d8a00ac2
+20407ebf
+df200010
+da200ac2
+20207ee5
+680085e5
+1fe27200
+da2005e6
+20207ee5
+ea208000
+1fe3fe00
+2a6ffe00
+7920fe00
+2feffe08
+7920a600
+e2208000
+1a20a3ff
+c200720e
+20600000
+da200ad2
+1a20a20f
+18007210
+18002600
+2020720e
+da200ae2
+20207219
+d8c00ac2
+20407484
+18007008
+20407492
+20407491
+2040741f
+d8a00ad2
+20407497
+476f403b
+68008ad2
+2feffe07
+2420f230
+20407218
+da600ad2
+d8a00ad2
+2040723a
+20207231
+20407218
+d8c00ad2
+d8a00ae2
+20407ebf
+68008ae2
+2feffe07
+2420f21d
+2040721d
+da600ae2
+d8a00ae2
+df200003
+d8400000
+20407241
+1a60a604
+c200723b
+d8408700
+18500400
+ea620000
+9842fe00
+e0a20000
+20600000
+476fc03b
+df200010
+dfe00000
+9a267c00
+2022f250
+20217253
+e8c88000
+e0a88000
+1fe0fe01
+c2007248
+20600000
+d8400080
+e0a88000
+2020724d
+d8400000
+20207251
+20407268
+d8c00592
+d8a00582
+20207ebf
+78547c00
+2040735f
+d8c00562
+d8a005a2
+1800720f
+20407f01
+e8c08000
+1fe2fe06
+e0a08000
+580005b2
+600105d6
+580005a2
+600105d4
+79200012
+202072a8
+6808c689
+18002410
+1840a606
+1a667c10
+2021726e
+18002610
+d8a005a2
+d8c0468a
+18427200
+78547c00
+e8c08000
+e0a08000
+1a40a5ff
+2022f27c
+c2007272
+2034726f
+78347c00
+18007206
+1a220c00
+20207272
+d8c00562
+d8a005b2
+20407ebf
+680085c1
+9a62fe00
+600085c1
+580005b2
+600105d6
+580005a2
+600105d4
+79200012
+202072a8
+78547c00
+2040735f
+20207292
+da200056
+78347c00
+2040735f
+20407292
+d8c00592
+d8a00062
+20207ebf
+58000562
+600105d6
+580041be
+600105d4
+793f8012
+204072a8
+da200592
+da400562
+d8a005a2
+20407352
+da2005a2
+da4005b2
+1a420a00
+78347c00
+20407350
+2040736a
+580005b2
+600105d6
+580005a2
+600105d4
+79200012
+202072a8
+7005d800
+680105d4
+98000c00
+d8a005c2
+20407ebf
+680105d6
+98000c00
+d8a00592
+20407ebf
+204072cf
+78547c00
+c58972b9
+680085d8
+c08272b9
+680105d6
+98002400
+20407301
+20407300
+20407313
+680085d8
+1fe0fe01
+600085d8
+204072cf
+78347c00
+20407300
+20407322
+20407331
+20407322
+20407331
+20407322
+20407331
+20407322
+680085d8
+1fe0fe01
+600085d8
+c08872b1
+204072cf
+78547c00
+20207300
+680085d8
+d8c005c2
+203a72f6
+98002400
+18007211
+18c20a00
+e8c08000
+1fe98400
+1feb7e00
+1fe97e00
+9841fe00
+e0a08000
+c20072d5
+580005c2
+9a408c00
+18007210
+d8a00572
+e8c08000
+e0a08000
+28c1ffd3
+2420f2e5
+18c08def
+c20072e0
+18002200
+1a40a7ff
+1a6ba600
+1a6ba600
+204074b9
+58008400
+9a60a600
+d8a00572
+18007210
+ea688000
+e8a08000
+9840fe00
+e0a08000
+1a60a601
+c20072ef
+202074bd
+18007210
+18000400
+e8c08000
+98428400
+c20072f8
+18427e00
+e0c08000
+d8c005c2
+d8a00572
+20207ebf
+da400572
+18007210
+da200592
+1a220a00
+ea288000
+ea408000
+9842e000
+1f212603
+2434730a
+1a62a603
+1a662601
+2021730d
+9840e000
+1e027e00
+e0a08000
+1a20a201
+1a40a401
+c2007304
+20600000
+204074b9
+18007210
+da200592
+ea208000
+d8c08500
+1f212603
+1a667c01
+2021731c
+d8c08600
+98c08c00
+e8c08000
+e2208000
+1a20a201
+c2007316
+202074bd
+18007208
+d8c00592
+18c20a00
+e8c08000
+98002200
+e8c08000
+98002400
+1a23fe00
+9a40fe00
+e0a08000
+1a227e00
+9a40fe00
+e0a08000
+c2007325
+20600000
+588ae42c
+98000400
+18007207
+20407340
+580d751b
+98000400
+18007205
+20407340
+680085a1
+98002200
+68008595
+600085a1
+1a227e00
+60008595
+20600000
+1841240f
+18417e0f
+d8a00592
+98a08a00
+e8a08000
+98002600
+1a227e00
+e0a08000
+1a622200
+18518400
+c2007341
+58000592
+9a408a00
+1a227e00
+e0a08000
+20600000
+78347c00
+20207353
+78547c00
+18007210
+ea288000
+ea408000
+20347359
+9842fe00
+2020735a
+9840fe00
+e0a08000
+1a20a201
+1a40a401
+c2007354
+20600000
+d8a005b2
+ea230000
+e0a30000
+20347365
+ea230000
+20207366
+e8c30000
+e0a30000
+ea220000
+e0a20000
+20600000
+d8c041be
+d8a005a2
+d8400000
+588395a7
+2040738b
+58b3c1df
+2040738b
+5800e5e9
+2040738c
+18422800
+78547c00
+20407379
+1a820400
+78347c00
+20207379
+18007208
+e8c08000
+2f200201
+20347380
+2020f381
+9840fe00
+20207382
+2020f37e
+9842fe00
+e0a08000
+184c8400
+c200737a
+20600000
+68030596
+60030056
+e8c30000
+e0a30000
+20600000
+184d0400
+18500400
+98418400
+20600000
+2020738f
+4770403c
+2040742b
+d8a04419
+20207497
+d8a0443a
+2034f397
+d8a0042f
+18c22200
+20407ebf
+20407440
+d8c0442a
+202074b0
+da20042f
+2034f39f
+da20443a
+1a220a00
+2040630c
+20207440
+d8c044aa
+20407486
+d8c04419
+20407487
+18006c38
+18006c00
+2040741d
+d8a0047c
+20207497
+18007e49
+202073ae
+18007e01
+18007000
+184d5e00
+9de1de00
+1f00f001
+184cde00
+1df15e00
+68014411
+1ff07e00
+9de1de00
+1f00f001
+e8c20000
+98005e00
+1f00f001
+e8c10000
+1a30de00
+1df05e00
+9de1de00
+1f00f001
+20600000
+1a608c01
+e8c08000
+98002200
+204073ab
+2040741f
+18007000
+ea608000
+1fe17e03
+1ff05e00
+79205e08
+2040748f
+20407422
+1a227200
+1a608c02
+2040746e
+20407478
+20407422
+1f227e00
+203a73d5
+202073d0
+1800700c
+1de27e00
+60020417
+20600000
+1a20a201
+204073ad
+1a620c00
+20407482
+20407425
+2040749e
+1a60a610
+1a40a5f0
+202173d9
+20600000
+4770c03c
+da6043dc
+680ac403
+204073c1
+18007008
+98005e00
+18002200
+204073ad
+20407425
+da6043de
+6800c3dd
+1fe0a5ff
+9a608a00
+1800700c
+1de27e00
+e0a20000
+204073d9
+6800c3dd
+1fe0fe04
+6000c3dd
+680ac403
+18408401
+600ac403
+20600000
+4771403c
+680082da
+1fe67c14
+202173ff
+da6002db
+1fe0a5ff
+1fe0fffc
+600082da
+9a608c00
+e8c20000
+18007008
+98005e00
+18002200
+680ac408
+204073ad
+20407425
+1800700c
+1de27e00
+6002041b
+204073d9
+da6002d9
+204073c1
+680a041b
+98467e00
+247a0000
+6802440d
+98467e00
+207a0000
+600a440d
+6802c408
+1fe0fe01
+6002c408
+18007e00
+20600000
+243bf41d
+20600000
+18006c30
+18006c00
+2020741d
+18006c32
+18006c02
+2020741d
+18006c34
+18006c04
+2020741d
+18006c01
+18006c00
+20600000
+18007000
+6802042f
+98005e00
+1f00f001
+e8c20000
+98005e00
+1f00f001
+6802443a
+98005e00
+1f00f001
+e8c20000
+98005e00
+1f00f001
+20407492
+1f00f1fc
+680244c7
+1fe25e00
+1f00f004
+18006c38
+18006c08
+2020741d
+4771c03c
+680344a0
+680b044f
+2034f446
+6803044f
+680b44a0
+18007008
+18425e00
+1f00f001
+184f5e00
+1ff07e00
+9de1de00
+1f00f001
+1fef5e00
+1f00f001
+18005e00
+18007e00
+6800c48e
+6808c485
+2434f456
+6800c495
+6808c48e
+6000c44a
+6008c44b
+18007000
+da40444a
+18007204
+ea220000
+ea4a0000
+9842de00
+1f00f001
+1a20a204
+1a40a404
+c200745b
+20407492
+1f00f1fc
+680244c7
+1fe25e00
+1f00f004
+18006c38
+18006c0c
+2040741d
+20407491
+18006c3a
+18006c08
+2020741d
+2f200600
+20608000
+18c27e00
+9f208a00
+18007e00
+e0a08000
+1f20f201
+2f200600
+20608000
+20207473
+18007000
+1f227e00
+203a747d
+e8c20000
+1f20f3fc
+98005e00
+1f00f001
+2f001e04
+20608000
+20207479
+18007008
+20207487
+18007004
+20207487
+18007000
+18007204
+e8c20000
+98005e00
+1f00f001
+c2007488
+20600000
+d8c0047c
+20207484
+18007204
+20207494
+18007000
+18007204
+18005e00
+1f00f001
+c2007493
+20600000
+1800700c
+18007204
+1de27e00
+e0a20000
+1f00f001
+c2007499
+20600000
+1800700c
+1a620a00
+1a40f201
+1f267c0f
+202174a4
+18007210
+1de27e00
+1f267c03
+202174ac
+e0a20000
+1f20f3fc
+20628000
+1f00f001
+202074a4
+e0a08000
+1fecfe00
+c20074ac
+20600000
+1800700c
+18007204
+e8c20000
+9de67c00
+24628000
+1f00f001
+c20074b2
+18007c00
+20600000
+68108050
+793ffe00
+60108050
+20600000
+68108050
+79207e00
+60108050
+20600000
+d8a00886
+3803ffff
+3807ffff
+380bffff
+380ffbff
+e0a48000
+3803ffff
+3807ffff
+380bffff
+380fffff
+e0a48000
+3803ffff
+3807ffff
+380bcfff
+380fffff
+e0a48000
+3803ffff
+3807ffff
+380bffef
+380fffff
+e0a48000
+3803ffff
+3807ffff
+380bffff
+380fffff
+e0a48000
+3803ffff
+38066c7f
+3808146b
+380f7bb3
+e0a48000
+3801feb8
+38050c12
+380ab722
+380e9fa6
+e0a48000
+3800e70f
+38056720
+3808519e
+380d9084
+e0a48000
+38031012
+380760bf
+380bf0af
+380c03d3
+e0a48000
+3803a188
+38043ad0
+380bcbf2
+380e43d9
+e0a48000
+3802b030
+38076a03
+38091188
+380de520
+e0a48000
+3803a11e
+3804fe5d
+3808dd57
+380dac93
+e0a48000
+380011ed
+380618c4
+38088da7
+380e57ff
+e0a48000
+3803192b
+38074641
+3809be0c
+380f66ad
+e0a48000
+38001f83
+38055a23
+380bf9b0
+380c3949
+e0a48000
+38013a51
+380553fd
+380b372a
+380cf1bb
+e0a48000
+3803ae85
+3805eed9
+38089e66
+380c01a8
+e0a40000
+20600000
+d8a0091e
+3803ffff
+3807ffff
+380bffff
+380fffff
+e0a48000
+3803ffff
+3804003f
+38080000
+380c0000
+e0a48000
+38000000
+38040000
+38081000
+380c0000
+e0a48000
+3803ff00
+3807ffff
+380bffcf
+380fffff
+e0a48000
+3803ffff
+3807ffff
+380bffff
+380c03ff
+e0a48000
+38000000
+38040000
+38080000
+380c0000
+e0a48000
+38010000
+38040000
+380bf000
+380fffff
+e0a48000
+380296ff
+38062630
+380b945d
+380fd284
+e0a48000
+380333a0
+38044b7a
+380837d8
+380fc9dc
+e0a48000
+3803a440
+3805b958
+380b8bce
+380d091f
+e0a48000
+3802e12c
+3805f47c
+380b56b1
+380efd47
+e0a48000
+38006837
+3806ed90
+3809ecec
+380dacc5
+e0a48000
+38023357
+38058af3
+3808f9e1
+380d29f0
+e0a48000
+3802e7eb
+3807e6e3
+380be1a7
+380d0b8b
+e0a48000
+38024fe3
+380420ef
+3809b5a6
+380cdc2f
+e0a48000
+38013860
+3806bd69
+3808391a
+380db222
+e0a48000
+20600000
+6800c65a
+243a757d
+20207a77
+4772403c
+6800c65a
+207a0000
+6800c5b1
+c1808000
+6800c4be
+207a0000
+6800c4c3
+c1018000
+68014682
+c280757b
+6800c4c0
+c0007a77
+20600000
+7044c000
+20600000
+4772c03c
+6800c65a
+203a612b
+20406124
+20407583
+2020766d
+58000000
+600409ae
+600209b6
+6003c65e
+20600000
+7009b001
+2020758d
+6800c5b1
+c000f68a
+20202a8c
+6800c5b1
+c000f590
+2020766d
+2040768a
+680089af
+247a0000
+7009ae03
+20600000
+204075b0
+da2009de
+d8a00866
+20407c79
+da2009be
+d8a00826
+20407c79
+da200826
+da4009be
+d8a00826
+20407be1
+da20093e
+da4009be
+d8a00846
+20407be1
+da200846
+da400826
+d8a00826
+20407c7d
+da200806
+da400826
+d8a00806
+20407c7d
+df200020
+da200866
+da400806
+20207f88
+da20097e
+d8a00806
+20407c79
+da20095e
+d8a00826
+20407c79
+da200826
+da40095e
+d8a00826
+20407be1
+da20093e
+da40095e
+d8a00846
+20407be1
+da200846
+da400826
+d8a00826
+20407c7d
+da200806
+da400826
+d8a00806
+20207c96
+204075e1
+da2009e6
+d8a00866
+204077a8
+da2009c6
+d8a00826
+204077a8
+da200826
+da4009c6
+d8a00826
+20407786
+da20089e
+da4009c6
+d8a00846
+20407786
+da200846
+da400826
+d8a00826
+20407755
+da200806
+da400826
+d8a00806
+20407755
+df200018
+da200866
+da400806
+20207f88
+da2008e6
+d8a00806
+204077a8
+da2008ce
+d8a00826
+204077a8
+da200826
+da4008ce
+d8a00826
+20407786
+da20089e
+da4008ce
+d8a00846
+20407786
+da200846
+da400826
+d8a00826
+20407755
+da200806
+da400826
+d8a00806
+20207758
+680089b2
+c0807615
+20407612
+d8a00a7e
+58000a2e
+e0a10000
+58004642
+e0a10000
+580009de
+e0a10000
+20207609
+d8a00a7e
+58000a3e
+e0a10000
+580009de
+e0a10000
+58004642
+e0a10000
+204079a0
+680089af
+c002760f
+7009b001
+7009ae05
+20600000
+7009af14
+2040758a
+202076d8
+d8a00a1e
+18000e08
+202076a2
+7009b001
+20600000
+4773403c
+d8a00727
+680340a0
+e0a30000
+68030040
+e0a30000
+6801c65e
+e0a18000
+20407a0d
+da200a4e
+da400a5e
+18000e04
+204076a7
+2420f631
+20407628
+70007d41
+202062f8
+680089af
+c004f62e
+7009ae0a
+7009b001
+70007c03
+20600000
+70007c03
+7009af15
+202076d8
+680089af
+c004f637
+7009ae00
+70007c04
+70007e05
+20600000
+70007c04
+7009af00
+20600000
+680089b3
+c000f63e
+7009af0a
+202076d8
+d8a00727
+68030040
+e0a30000
+680340a0
+e0a30000
+6801c65b
+e0a18000
+20407a24
+680089af
+c005764b
+7009ae0b
+7009b001
+20600000
+7009af0b
+7009b101
+20600000
+d8a00a7e
+68030040
+e0a30000
+680340a0
+e0a30000
+58000a2e
+e0a10000
+58000a3e
+e0a10000
+20207662
+7009ae0f
+d8a00a7e
+680340a0
+e0a30000
+68030040
+e0a30000
+58000a3e
+e0a10000
+58000a2e
+e0a10000
+d8a00727
+68030a7e
+e0a30000
+68030a84
+e0a30000
+204079d7
+7041bd01
+d8a041be
+d8c00a4e
+20407ebf
+202021c4
+4773c03c
+6800c5b1
+c1800000
+680089b2
+c1800000
+d8a04612
+18000e0b
+204076a2
+180a7e00
+1fe37e00
+e0a10000
+d8a006be
+d8c04612
+20407ebe
+d8a005e6
+d8c008ce
+20407ebc
+d8a00616
+20407ec5
+70061601
+20407a5d
+7009b201
+20600000
+d8a0462a
+d8c0062e
+20407ebc
+7045b101
+7009b200
+20600000
+4774403d
+680089b9
+c1800000
+680089b2
+c1800000
+d8a006be
+d8c04612
+20407ebe
+d8a005e6
+d8c009c6
+20407ebc
+d8a00616
+20407ec5
+70061601
+20407a5d
+7009b202
+20600000
+7009b301
+d8a00a06
+d8c0062e
+20407ebe
+7009b901
+7009b200
+20600000
+18e08fff
+24610000
+180a7e00
+e0a10000
+202076a2
+18e08fff
+242176b3
+ea220000
+1fe20400
+ea420000
+9842fe00
+2422f6b1
+1a20a204
+1a40a404
+202076a7
+7840fc00
+20600000
+7820fc00
+20600000
+4774c03d
+680089b0
+207a0000
+204062bc
+247a0000
+7009b000
+680089ae
+c001e1fd
+c002e21a
+c003e225
+c005e23a
+c0017588
+c00275f7
+c004f617
+c005763a
+c0067658
+20600000
+4775403d
+680089b1
+207a0000
+204062bc
+247a0000
+7009b100
+680089af
+c00961e0
+c009e1e5
+c001e1e9
+c0027602
+c00a61ed
+c003e1fb
+c005763a
+c005e239
+c004f617
+c00ae233
+20600000
+7009b101
+20600000
+7009b100
+20600000
+4775c03d
+6800c65a
+207a0000
+680089b2
+207a0000
+1fe0fe80
+600089b2
+c3838000
+680085e3
+203a76e7
+20207a68
+204078d3
+680089b2
+c000f684
+c001769b
+20600000
+1fe10e07
+1fe97e00
+98c08c00
+e8c08000
+afec0000
+20600000
+20407ebe
+20407ebe
+20207ebe
+e8c40000
+247a0000
+e8c40000
+247a0000
+e8c40000
+20600000
+ea220000
+98000400
+ea420000
+98467c00
+24628000
+1a20a204
+1a40a404
+c20076fb
+20600000
+18007206
+1a20a214
+1a40a414
+ea420000
+98000400
+ea220000
+98467e00
+24610000
+247a0000
+1a20a3fc
+1a40a5fc
+c2007707
+20600000
+18007206
+18002600
+ea220000
+98000400
+ea420000
+9840fe00
+9a60fe00
+e0a20000
+2feffe20
+7920a600
+1a20a204
+1a40a404
+c2007713
+20600000
+18007206
+18002600
+ea420000
+98000400
+ea220000
+98467e00
+9a667e00
+e0a20000
+2feffe20
+7920a600
+1a20a204
+1a40a404
+c2007721
+20600000
+18007206
+1a20a214
+18002600
+ea220000
+2feffe00
+7920a601
+1fe37e00
+2a6ffe00
+7920fe1f
+e2220000
+1a20a3fc
+1a632600
+c2007730
+20600000
+18007206
+18002600
+ea220000
+2feffe1f
+7920a601
+1fe3fe00
+2a6ffe00
+7920fe00
+e2220000
+1a20a204
+1a632600
+c200773d
+20600000
+2040773b
+2a6ffe00
+2020f751
+da400886
+1a222600
+1a20a3e8
+20407704
+24610000
+1a622200
+1a20a3e8
+da400886
+1a220a00
+2020771f
+20407711
+18a22200
+20207749
+2040771f
+2a6c0000
+20608000
+da400886
+18a0a3e8
+1a220a00
+20207711
+18a21600
+1a226000
+da400716
+1a420a00
+1a208c18
+e8c40000
+e0a40000
+e0a40000
+18007e00
+e0a40000
+19620a00
+20407755
+da400716
+1a420a00
+18007e00
+e0a40000
+1e008c20
+e8c40000
+e0a40000
+e0a40000
+19622200
+1a220a00
+20407755
+da400716
+1a420a00
+1e008c28
+e8c40000
+e0a40000
+e0a40000
+e0a40000
+19622200
+1a220a00
+20207755
+18007206
+e8c20000
+98005e00
+1f00f001
+c2007781
+20600000
+18a21600
+d8a006e6
+20407ec5
+d8a006e6
+1a220c00
+18007000
+20407780
+1a420c00
+20407780
+18002400
+18000400
+18002606
+e8a20000
+98002200
+1a427000
+1de27e00
+1a627000
+9deffe00
+9a20fe00
+9840fe00
+e0a20000
+1fef0400
+1a60a601
+2a61fe0c
+2420f792
+18427e00
+e0a20000
+18a08be8
+1a40a401
+2a41fe06
+2420f790
+da2006e6
+19620a00
+2020775f
+1a222400
+20207786
+1a226000
+1e022200
+ea208000
+2feffe00
+20608000
+2040772d
+ea408000
+2fec0000
+2020f7ba
+da200886
+1a420a00
+20407711
+ea408000
+9a60fe00
+e2408000
+1a40a5e8
+1a40a218
+18007207
+2040772f
+202077ab
+18a21600
+d8a00746
+20407ec5
+18007e00
+600206fe
+6002075e
+70074601
+d8a006e6
+20407ec5
+d8c00886
+d8a00716
+20407ebe
+1a220c00
+d8a0072e
+20407ebe
+d8c0072e
+204076f5
+203a77f6
+da20072e
+da400746
+204077aa
+da200716
+da4006e6
+204077aa
+da20072e
+da400716
+20407704
+202177e8
+da200716
+da40072e
+1a220a00
+2040771f
+da200746
+da4006e6
+1a420a00
+20407711
+ea208000
+9a60a600
+ea408000
+9a60fe00
+e2408000
+202077cd
+da20072e
+da400716
+1a220a00
+2040771f
+da2006e6
+da400746
+1a420a00
+20407711
+ea208000
+9a60a600
+ea408000
+9a60fe00
+e2408000
+202077cd
+d8a00746
+20407ec5
+680086fe
+60008746
+6000874e
+da200746
+da4006e6
+1a420a00
+20407755
+da200886
+da4006e6
+19620a00
+20207758
+da2006a6
+d8a0075e
+204077a8
+da20075e
+d8a00776
+204077a8
+da20089e
+da400776
+d8a00776
+20407786
+da200676
+d8a0075e
+204077a8
+d8c0075e
+d8a0072e
+20407ebe
+da20072e
+20407748
+da20075e
+da40072e
+d8a0075e
+20407755
+da20075e
+da400776
+d8a0075e
+20407755
+d8c00676
+d8a0072e
+20407ebe
+da20068e
+d8a00776
+204077a8
+da20072e
+20407748
+da20072e
+20407748
+da20072e
+da400776
+d8a0072e
+20407786
+da200776
+d8a00746
+204077a8
+da200746
+20407748
+da200746
+20407748
+da200746
+20407748
+d8c0068e
+d8a00776
+20407ebe
+da200776
+20407748
+da200776
+da4006a6
+d8a006a6
+20407786
+da20075e
+d8a00776
+204077a8
+da200776
+da40072e
+d8a00776
+20407758
+da200776
+da40072e
+d8a00676
+20407758
+da20072e
+da400676
+d8a00776
+20407758
+da200776
+da40075e
+d8a00776
+20407786
+da200776
+da400746
+d8a0068e
+20207758
+da200616
+d8a0078e
+204077a8
+da200676
+da40078e
+d8a00746
+20407786
+da200616
+da40078e
+d8a0078e
+20407786
+da20068e
+da40078e
+d8a0072e
+20407786
+da2006a6
+d8a0078e
+204077a8
+da2005e6
+da40078e
+d8a0075e
+20407786
+da2006a6
+da40078e
+d8a0078e
+20407786
+da2005fe
+da40078e
+d8a00776
+20407786
+da200746
+da40075e
+d8a0078e
+20407758
+da200746
+da40075e
+d8a00746
+20407755
+da20072e
+da400776
+d8a0075e
+20407758
+da20072e
+da400776
+d8a0072e
+20407755
+da20072e
+da40078e
+d8a0072e
+20407786
+da2006a6
+da400616
+d8a00776
+20407786
+da200776
+da40078e
+d8a006a6
+20407786
+da20078e
+d8a0078e
+204077a8
+da20078e
+da400746
+d8a00776
+20407786
+da20078e
+da40072e
+d8a0072e
+20407786
+da20075e
+d8a00676
+204077a8
+da200676
+da400776
+d8a00676
+20407758
+d8c00676
+d8a0078e
+20407ebe
+da20078e
+20407748
+da200776
+da40078e
+d8a00776
+20407758
+da200776
+da40075e
+d8a0075e
+20407786
+da20075e
+da40072e
+d8a0068e
+20407758
+da20068e
+da400886
+d8a0068e
+18002600
+6800868e
+2feffe00
+2040f711
+1a626000
+da20068e
+2040772d
+680086a5
+2e0ffe00
+7920fe07
+600086a5
+20600000
+680085e3
+1fe0ffff
+24610000
+600085e3
+680085e2
+205a7803
+680085e3
+d8c006be
+204076ec
+2020f8c0
+680085e2
+243a78ce
+20407854
+202078c0
+7005e200
+d8c005e6
+d8a00676
+204076f2
+202078c0
+da2006a6
+d8a00776
+204077be
+da200776
+d8a0072e
+204077a8
+da200676
+da40072e
+d8a0062e
+20407786
+da200776
+da40072e
+d8a0075e
+20407786
+da20068e
+da40075e
+d8a00646
+20207786
+e8c20000
+18002204
+18a08a03
+e0a08000
+1fecfe00
+18a08bfe
+1a20a3ff
+2422f8e8
+18a08a05
+c20078e5
+20600000
+18ebfe00
+99608c00
+e8c20000
+20600000
+18006010
+d96005e6
+1e008ff9
+204078f0
+98000400
+1e008ff0
+204078f0
+98408400
+1e008ffe
+204078f0
+1fee7e01
+98408400
+1e008ff1
+204078f0
+1fee7e00
+98408400
+1e0bfe00
+99608a00
+e0aa0000
+1e00e001
+2e01fe40
+2420f8f6
+20600000
+d8c008fe
+18007007
+e8c20000
+98005e00
+1f00f1ff
+2021790d
+20600000
+4776403d
+204078f4
+d8a006e6
+18007000
+1de27e00
+e0a20000
+1f00f001
+2f01fe08
+2420f916
+204074b9
+d9608700
+de0005e6
+18007240
+ee0a0000
+e9620000
+19609604
+1e00e004
+9840fe00
+18007007
+9de08400
+18007004
+1dee7e03
+98408400
+18007005
+1de27e00
+18007006
+9de2fe00
+18007004
+9de17e00
+18007006
+9de2fe00
+98408400
+18007007
+18425e00
+18007003
+1de27e00
+9840de00
+18007000
+1de27e00
+18007001
+9de10400
+9de1fe00
+18007002
+9de17e00
+98418400
+18007000
+1dee7e02
+9840fe00
+18007007
+9de0de00
+980efc00
+c200791f
+d8c006e6
+18007000
+e8c20000
+9de0de00
+1f00f001
+2f01fe08
+2420f948
+202074bd
+d8a00a3e
+18007007
+1de27e00
+e0a20000
+1f00f1ff
+20217950
+20600000
+d8a005e6
+18c08dfc
+1f262210
+e8c20000
+9842fe00
+e0a20000
+18c08df8
+c2007958
+1a227200
+18427e00
+e0a20000
+c200795f
+20600000
+20407967
+2040794e
+2020798d
+20407967
+2020798d
+d8c009de
+d8a005e6
+18007206
+20407a71
+d8c04642
+18007206
+20407a71
+d8c00a3e
+20407a70
+2040790b
+20407912
+d8c00a2e
+d8a005e6
+20207984
+d8c04642
+d8a005e6
+18007206
+20407a71
+d8c009de
+18007206
+20407a71
+d8c00a2e
+20407a70
+2040790b
+20407912
+d8c00a3e
+d8a005e6
+20407984
+2020798d
+20407a70
+58800000
+1fed7e00
+e0a20000
+18007205
+20407ec6
+58000280
+e0a20000
+20207912
+68020a3e
+da2003e8
+9a26fc00
+20407f86
+18077e00
+600209ba
+1807fe00
+da2003e8
+9a26fc00
+20407f86
+18077e00
+da2003e8
+9a2ffe00
+680a09ba
+9840fe00
+600209ba
+20600000
+70466400
+202079a2
+6800c662
+c081799e
+4776c03d
+58363636
+1fed0400
+18418436
+68010a7e
+1fe20c00
+18007204
+20407955
+2040790b
+20407912
+68010a80
+1fe20c00
+d8a005e6
+18007206
+20407a71
+68010a82
+1fe20c00
+18007206
+20407a71
+58800000
+e0a18000
+6800c664
+e0a08000
+18007e00
+e0a40000
+58000388
+e0a20000
+20407912
+2040794e
+d8c00a3e
+d8a00706
+20407ebd
+585c5c5c
+1fed0400
+1841845c
+68010a7e
+1fe20c00
+18007204
+20407955
+2040790b
+20407912
+d8c00726
+d8a005e6
+18007208
+20407a71
+58800000
+1fed7e00
+e0a20000
+20407ec5
+58000300
+e0a20000
+20407912
+2020794e
+58363636
+1fed0400
+18418436
+d8c00a1e
+18007206
+20407955
+2040790b
+20407912
+68010a8a
+1fe20c00
+d8a005e6
+20407a70
+68010a8c
+1fe20c00
+20407a70
+5862746c
+1fed7e00
+1fe1fe6b
+e0a20000
+d8c00733
+18007203
+20407a71
+58800000
+1fed7e00
+e0a20000
+18007e00
+e0a40000
+58000380
+e0a20000
+20407912
+2040794e
+d8c00a3e
+d8a00706
+20407ebd
+585c5c5c
+1fed0400
+1841845c
+d8c00a1e
+18007206
+20407955
+2040790b
+20407912
+d8c00726
+d8a005e6
+18007208
+20407a71
+58800000
+1fed7e00
+e0a20000
+20407ec5
+58000300
+e0a20000
+20407912
+2020794e
+6800c662
+c0817a1e
+4777403d
+58363636
+1fed0400
+18418436
+d8c00a1e
+18007206
+20407955
+2040790b
+20407912
+d8c00a3e
+d8a005e6
+20407a70
+d8c00a2e
+20407a70
+20207a33
+58000000
+6002468a
+20207a0f
+58000000
+6002468a
+20207a26
+6800c662
+c0817a21
+58363636
+1fed0400
+18418436
+d8c00a1e
+18007206
+20407955
+2040790b
+20407912
+d8c00a2e
+d8a005e6
+20407a70
+d8c00a3e
+20407a70
+58000000
+e0a40000
+e0a20000
+6802468a
+e0a20000
+18a20400
+70072680
+18420a00
+d8c00736
+20407a70
+20407912
+d8a005e6
+18007207
+20407ec6
+e0a20000
+580003f8
+e0a20000
+20407912
+2040794e
+d8c00a3e
+d8a00706
+20407ebd
+585c5c5c
+1fed0400
+1841845c
+d8c00a1e
+18007206
+20407955
+2040790b
+20407912
+d8c00726
+d8a005e6
+18007208
+20407a71
+58800000
+1fed7e00
+e0a20000
+20407ec5
+58000300
+e0a20000
+20407912
+2020794e
+7005e3c0
+680085e3
+207a0000
+1fe0ffff
+600085e3
+d8c006be
+204076ec
+2020fa5e
+d8c005e6
+d8a00676
+202076f2
+20407803
+680085e3
+1fe0ffff
+600085e3
+d8c006be
+204076ec
+20608000
+20207854
+18007204
+18c08dfc
+e8c20000
+e0a20000
+18c08df8
+c2007a72
+20600000
+4777c03d
+6800c4be
+203a5af0
+20405aec
+20407583
+20207a7d
+6800c4c3
+c1800000
+6800c4c0
+c1800000
+d8a045b2
+18000e0f
+204076a2
+180a7e00
+1fe37e00
+e0a10000
+d8a00766
+d8c045b2
+20407ebd
+d8a00646
+d8c0095e
+20407eb3
+d8a00686
+20407ed0
+70068601
+20407ac7
+7044c003
+20600000
+d8a045d2
+d8c006a6
+20407eb3
+7044c303
+7044c000
+20600000
+680089b9
+c1800000
+6800c4c0
+c1800000
+d8a00766
+d8c045b2
+20407ebd
+d8a00646
+d8c009be
+20407eb3
+d8a00686
+20407ed0
+70068601
+20407ac7
+7044c004
+20600000
+d8a009fe
+d8c006a6
+20407ebd
+7009b903
+7044c000
+20600000
+6800c4be
+207a0000
+6800c4c0
+207a0000
+1fe0fe80
+6000c4c0
+c3838000
+680105e3
+203a7ab9
+20207abf
+4778403e
+20407ad4
+6800c4c0
+c001fa93
+c0027aa9
+20600000
+20407ae6
+680105e3
+1fe0ffff
+600105e3
+d8c00766
+204076ec
+20608000
+20207b37
+4778c03e
+58000100
+600105e3
+680105e3
+207a0000
+1fe0ffff
+600105e3
+d8c00766
+204076ec
+2020faca
+d8c00646
+d8a00706
+20207eb2
+da200746
+d8a00846
+20407ba3
+da200846
+d8a007e6
+20407c79
+da200706
+da4007e6
+d8a006a6
+20407be1
+da200846
+da4007e6
+d8a00826
+20407be1
+da200726
+da400826
+d8a006c6
+20207be1
+da200746
+d8a00826
+20407c79
+da200826
+d8a00846
+20407c79
+da20093e
+da400846
+d8a00846
+20407be1
+da200706
+d8a00826
+20407c79
+d8c00826
+d8a007e6
+20407ebd
+da2007e6
+20407c80
+da200826
+da4007e6
+d8a00826
+20407c7d
+da200826
+da400846
+d8a00826
+20407c7d
+d8c00706
+d8a007e6
+20407ebd
+da200726
+d8a00846
+20407c79
+da2007e6
+20407c80
+da2007e6
+20407c80
+da2007e6
+da400846
+d8a007e6
+20407be1
+da200846
+d8a00806
+20407c79
+da200806
+20407c80
+da200806
+20407c80
+da200806
+20407c80
+d8c00726
+d8a00846
+20407ebd
+da200846
+20407c80
+da200846
+da400746
+d8a00746
+20407be1
+da200826
+d8a00846
+20407c79
+da200846
+da4007e6
+d8a00846
+20407c96
+da200846
+da4007e6
+d8a00706
+20407c96
+da2007e6
+da400706
+d8a00846
+20407c96
+da200846
+da400826
+d8a00846
+20407be1
+da200846
+da400806
+d8a00726
+20207c96
+da200686
+d8a00866
+20407c79
+da200706
+da400866
+d8a00806
+20407be1
+da200686
+da400866
+d8a00866
+20407be1
+da200726
+da400866
+d8a007e6
+20407be1
+da200746
+d8a00866
+20407c79
+da200646
+da400866
+d8a00826
+20407be1
+da200746
+da400866
+d8a00866
+20407be1
+da200666
+da400866
+d8a00846
+20407be1
+da400806
+da200826
+d8a00866
+20407c96
+da200806
+da400826
+d8a00806
+20407c7d
+da4007e6
+da200846
+d8a00826
+20407c96
+da2007e6
+da400846
+d8a007e6
+20407c7d
+da2007e6
+da400866
+d8a007e6
+20407be1
+da200746
+da400686
+d8a00846
+20407be1
+da200846
+da400866
+d8a00746
+20407be1
+da200866
+d8a00866
+20407c79
+da200866
+da400806
+d8a00846
+20407be1
+da200866
+da4007e6
+d8a007e6
+20407be1
+da200826
+d8a00706
+20407c79
+da200706
+da400846
+d8a00706
+20407c96
+d8c00706
+d8a00866
+20407ebd
+da200866
+20407c80
+da200846
+da400866
+d8a00846
+20407c96
+da200846
+da400826
+d8a00826
+20407be1
+da200826
+da4007e6
+d8a00726
+20407c96
+da200726
+da40091e
+d8a00726
+18002600
+68008726
+2feffe00
+2040fc7b
+1a626000
+da200726
+20407cab
+68008745
+2e0ffe00
+7920fe07
+60008745
+20600000
+18a21600
+d8a00806
+20407ed0
+18007e00
+60020826
+70080601
+d8a00786
+20407ed2
+d8c0091e
+d8a007c6
+20407ebd
+1a220c00
+d8a007e6
+20407ebd
+d8c007e6
+20407cb5
+203a7bda
+da2007e6
+da400806
+20407cb8
+da2007c6
+da400786
+20407cb8
+da2007e6
+da4007c6
+20407cb1
+20217bcc
+da2007c6
+da4007e6
+1a220a00
+20407ca9
+da200806
+da400786
+1a420a00
+20407c7b
+ea208000
+9a60a600
+ea408000
+9a60fe00
+e2408000
+20207bb1
+da2007e6
+da4007c6
+1a220a00
+20407ca9
+da200786
+da400806
+1a420a00
+20407c7b
+ea208000
+9a60a600
+ea408000
+9a60fe00
+e2408000
+20207bb1
+da200786
+19620a00
+20407c0a
+da20091e
+19622400
+19620a00
+20207c96
+18a21600
+18007000
+d8a00786
+20407ed2
+d8a00ad2
+20407ed2
+1a220c00
+700ad200
+58000000
+20407c73
+1a420c00
+20407c77
+18000e00
+d8a00786
+d8400ad2
+18e22400
+1a4bfe00
+9840a400
+18000400
+18002600
+e8a20000
+98002200
+ea420000
+1a627000
+9deffe00
+9a20fe00
+9840fe00
+e0a20000
+1fef0400
+1a60a601
+2a61fe08
+2420fbf5
+18427e00
+e0a20000
+18a08be0
+18e08e01
+28e1fe08
+2420fbef
+da200786
+19620a00
+20207c0a
+4779403e
+18a21600
+1a226000
+da4007c6
+1a420a00
+20407ecd
+e0a40000
+1a208c2c
+20407eb9
+20407eb5
+1a422200
+20407c80
+da4007c6
+1e022200
+19620a00
+20407c7d
+da4007c6
+1a420a00
+20407ecd
+e0a40000
+1e008c30
+20407ebf
+20407ecd
+1a422200
+20407c80
+da4007c6
+19622200
+1a220a00
+20407c7d
+da4007c6
+1a420a00
+1e008c20
+20407eb5
+20407ecd
+e0a40000
+1e008c38
+20407eb9
+19622200
+1a220a00
+20407c7d
+da4007c6
+1a420a00
+1e008c24
+20407eb5
+1e008c34
+20407eb5
+1e008c34
+20407eb6
+1e008c20
+20407eb6
+19622200
+1a220a00
+20407c7d
+da4007c6
+1a420a00
+1e008c2c
+20407eb5
+20407ecd
+e0a40000
+1e008c20
+20407eb6
+1e008c28
+20407eb6
+19622200
+1a220a00
+20407c96
+da4007c6
+1a420a00
+1e008c30
+20407eb9
+20407eb9
+18007e00
+e0a40000
+1e008c24
+20407eb6
+1e008c2c
+20407eb6
+19622200
+1a220a00
+20407c96
+da4007c6
+1a420a00
+1e008c34
+20407eb5
+1e008c20
+20407eb5
+20407ecd
+1e008c30
+20407eb6
+19622200
+1a220a00
+20407c96
+da4007c6
+1a420a00
+1e008c38
+20407eb9
+20407ecd
+1e008c24
+20407eb5
+20407ecd
+1e008c34
+20407eb6
+19622200
+1a220a00
+20207c96
+18007220
+d8a00ad2
+98a08a00
+20207f01
+18007208
+20207781
+1a222400
+20207be1
+18007208
+20207712
+20407c7b
+18a22200
+20207c81
+20407cae
+2a6ffe00
+2020fc8a
+da40091e
+1a222600
+1a20a3e0
+20407cb1
+24610000
+1a622200
+20207c92
+20407c92
+1a222600
+1a20a3e0
+da40091e
+20407cb1
+24610000
+1a622200
+20207c92
+1a20a3e0
+da40091e
+1a220a00
+20207ca9
+20407ca9
+2020fca0
+18a0a3e0
+da40091e
+20407cb1
+24610000
+da40091e
+18a0a3e0
+1a220a00
+20207ca9
+18a0a3e0
+da40091e
+1a220a00
+20407c7b
+20608000
+18a0a3e0
+da40091e
+1a220a00
+20207c7b
+18007208
+20207720
+18007208
+1a20a21c
+2020772f
+18007208
+18002600
+2020773d
+18007208
+1a20a21c
+1a40a41c
+20207707
+e8c40000
+247a0000
+202076f5
+1a226000
+1e022200
+ea208000
+2feffe00
+20608000
+20407cab
+ea408000
+2fec0000
+2020fcc8
+da20091e
+1a420a00
+20407c7b
+ea408000
+9a60fe00
+e2408000
+1a40a5e0
+1a40a220
+18007209
+2040772f
+20207cb9
+20402c65
+20758000
+20407cd3
+20407d75
+20207d08
+20407d29
+20207d64
+6800c686
+c17f8000
+98000400
+2040680e
+6808c686
+20406825
+20000064
+6808c686
+204067fb
+20207cdd
+4779c03e
+6800c686
+c17f8000
+1fe20400
+2040681d
+2420fcef
+20407cf9
+68014682
+79207e0c
+60014682
+6800c679
+c1000000
+70467900
+6800c685
+6000c678
+20407d00
+700a992c
+20207d86
+68014682
+793ffe0c
+60014682
+6800c679
+c1008000
+70467901
+70467800
+20407d02
+700a992d
+20207d86
+6800c678
+207a0000
+1fe0ffff
+6000c678
+247a0000
+700a9910
+20207d86
+d8e00007
+20202c32
+d8e00007
+20202c36
+6801421b
+1a2fa40b
+9a40a400
+20600000
+6800c21a
+207a0000
+1fe27200
+6801421b
+1fe22400
+1a40a602
+ea688000
+2040680e
+20407d32
+1a40a40b
+c2007d0d
+20600000
+20407d04
+58000002
+e2408000
+20407d5e
+20207d35
+20407d04
+58000003
+e2408000
+20407d5e
+20207d32
+20407d04
+58000001
+e2408000
+580000ff
+e0a08000
+20207d32
+20407d04
+df20000b
+1a620c00
+1a420a00
+20207ef4
+6800c21a
+207a0000
+da200000
+20407d38
+1a20a201
+6800c21a
+9a267c00
+20628000
+20207d2c
+1a40a602
+ea688000
+20206825
+1a40a602
+ea688000
+20206829
+1a208e0b
+20407f16
+247a0000
+20407d04
+ea408000
+c0017d35
+c001fd32
+c0007d32
+c002fd4c
+20407d35
+1a40a607
+20407e7c
+ea610000
+20407f9c
+20407e8c
+58000005
+e2408000
+1a40a603
+ea610000
+20207d5c
+20407d32
+1a40a609
+20407e7c
+ea610000
+20407f9c
+20407e8c
+1a40a601
+ea608000
+c07ffd58
+1fe0ffff
+e2608000
+203a7d19
+58000004
+e2408000
+1a40a605
+ea610000
+1a208e0b
+20207f08
+58000000
+20207d5c
+58001000
+1ff07e00
+9a40a400
+20600000
+477a403e
+da200000
+680a467a
+1c422400
+1a427e00
+98467c00
+24417d60
+1a427e00
+184084a0
+184084a0
+98467c00
+24217d78
+1a20a201
+1a217e0f
+243a7d6b
+da200000
+20407d7f
+1c427e00
+6002467a
+20600000
+477ac03e
+1a227e00
+207a0000
+18408560
+18408560
+793f841c
+600a467a
+2020335f
+70466601
+6800c667
+243a7d81
+20600000
+70466600
+20600000
+477b403e
+20407d80
+1a227e00
+60020a91
+da204668
+20407fb8
+68020a91
+1fe22200
+20207d84
+477bc03e
+20407d80
+1a227e00
+60020a91
+da204670
+20407fb8
+68020a91
+1fe22200
+20207d84
+58000000
+60044670
+60044668
+20600000
+477c403f
+6800c1ce
+247a0000
+da204670
+20407fd0
+207a0000
+700a9000
+20407da7
+68008a90
+203a7d9c
+20600000
+20407d80
+da204670
+20407fc4
+1fe20400
+20407d84
+477cc03f
+18427e00
+207a0000
+c000fddd
+c0017de2
+c001fde8
+c003fded
+c0047dee
+c004fdef
+c005fdf2
+c0067df3
+c006fdf4
+c0077dfa
+c007fdff
+c0087e05
+c009fe0f
+c00a7e11
+c00afe13
+c00b7e15
+c00bfe18
+c00c7e1a
+c00cfe1d
+c00dfe25
+c00f7e2f
+60008a99
+477d403f
+204062bc
+243a7ddb
+68008a99
+c584fdd6
+c0027dea
+c002cd17
+c0034d26
+c0057df0
+c008fe0a
+c0097e0e
+c00efe26
+c00fe7cc
+c01067d0
+c010fe31
+c012e70b
+20600000
+60008a99
+20402252
+2022fddb
+2040225a
+24628000
+700a9001
+20207d8f
+68014682
+79207e06
+60014682
+70409303
+20600000
+70468000
+70409300
+68014682
+793ffe06
+60014682
+20600000
+7041ce05
+20600000
+70007c07
+7004ca13
+20600000
+20600000
+20600000
+20600000
+7004d402
+20204d0a
+20600000
+20600000
+70436e01
+70448400
+68014682
+79207e0b
+60014682
+20600000
+68014682
+793ffe0b
+60014682
+70436e00
+20600000
+70436e01
+70448401
+68014682
+79207e0b
+60014682
+20600000
+68014682
+793ffe0b
+60014682
+70436e00
+20600000
+58000014
+6001046d
+600144ba
+20205c92
+20205abf
+da200000
+20207d19
+da200000
+20207d14
+da200000
+20207d1e
+70436901
+7041ce1b
+20600000
+70436901
+20600000
+70436900
+7041ce00
+20600000
+680141eb
+20407f9c
+6800c686
+c07ffe23
+1fe20400
+204067fb
+20407d98
+20202b1f
+20205b02
+70007c34
+79200003
+24748000
+70455b00
+70007c13
+6800816d
+793ffe02
+6000816d
+20600000
+18000e03
+20207f07
+204062f8
+70007d41
+20205f9d
+6800c682
+c4060000
+c4038000
+20207e2f
+68014218
+1fe08a02
+58000000
+e0a18000
+20600000
+20407fe9
+20407e69
+207a0000
+68014218
+1fe0a402
+ea488000
+18408401
+e2488000
+efe88000
+18427200
+1fe0a404
+ea408000
+984ffe00
+98c08a00
+1a220c00
+20407f01
+20407e6d
+1fe0ffff
+ea488000
+18408401
+98410400
+e2488000
+20207fe7
+20407fe9
+20407e65
+207a0000
+68014218
+1fe0a402
+ea488000
+184085ff
+e2488000
+efe88000
+18427200
+1fe0a403
+ea408000
+984ffe00
+98c08c00
+18c08c01
+1a220a00
+20207e4c
+68014218
+1fe08c02
+e8c08000
+20600000
+20407e6d
+e8c88000
+98467e00
+20600000
+68014218
+1fe08c01
+e8c08000
+20600000
+1f267c00
+20628000
+1fe37e00
+c2007e73
+20600000
+18007e01
+1f267c00
+20628000
+1fe3fe00
+c2007e79
+20600000
+18a27e00
+60010abb
+600c0aa2
+19627e00
+60020aaa
+20407e85
+18c27e00
+60010ab9
+20600000
+1a227e00
+60020aae
+1a427e00
+60020ab2
+1a627e00
+60018ab6
+20600000
+680c0aa2
+68020aaa
+98001600
+20407e95
+68010abb
+98000a00
+68010ab9
+98000c00
+20600000
+68020aae
+98002200
+68020ab2
+98002400
+68018ab6
+98002600
+20600000
+68010abb
+1fe20a00
+20600000
+68010ab9
+1fe20c00
+20600000
+18a27e00
+60010abb
+20600000
+18c27e00
+60010ab9
+20600000
+18a27e00
+60010a97
+18c27e00
+60010a95
+20600000
+68010a97
+1fe20a00
+68010a95
+1fe20c00
+20600000
+20407ebd
+20407ebd
+20207ebd
+20407eb9
+e8c20000
+e0a20000
+20600000
+e8c40000
+e0a40000
+20600000
+20407ebf
+20407eb9
+20407eb9
+20407eb9
+20207eb9
+df20000a
+20002ee0
+c2007ec2
+20600000
+18007203
+18007e00
+e0a40000
+c2007ec7
+20600000
+18007e00
+e0a40000
+20600000
+18007e00
+e0a20000
+20600000
+18007204
+20207ec6
+18007208
+20207ec6
+1f227e00
+207a0000
+58000000
+e0a08000
+c2007ed7
+20600000
+df200020
+d8a00ac2
+20207ed4
+ea620000
+ea2a0000
+9842fe00
+e0a20000
+1a20a204
+1a60a604
+c2007edd
+20600000
+477dc03f
+1f227e00
+1fe67c01
+20610000
+9a20a400
+1a40a5ff
+1f237200
+ea288000
+ea408000
+e2208000
+e2488000
+1a40a5ff
+1a20a201
+c2007eec
+20600000
+1f227e00
+207a0000
+1f20f3f8
+20417eb9
+20628000
+20217ef6
+1f20f208
+1f20f3fc
+20417eb6
+20628000
+20217efb
+1f20f204
+20207f01
+1f227e00
+207a0000
+e8c08000
+e0a08000
+c2007f03
+20600000
+58000000
+1c430400
+600a4094
+d8a0419d
+98000400
+18e3fe00
+98a08a00
+e0a90000
+477e403f
+20600000
+d9600800
+19701600
+9960fe00
+20600000
+d8e00000
+477ec03f
+680a4094
+1c437e00
+60024094
+98467c00
+24417f11
+98461600
+19620400
+d8c0419d
+18c20a00
+df200010
+e8c10000
+98467e00
+20217f25
+18007e00
+e0a10000
+c2007f21
+d8c0419d
+18e3fe00
+98c08c00
+e8c10000
+20600000
+98408400
+18427200
+58000ea6
+9f267e00
+20610000
+1fe67e00
+18510400
+18408401
+18500400
+98418400
+20600000
+20407f39
+20207f43
+78547c00
+98467e00
+20217f3e
+78347c00
+1fe67e00
+c4078000
+d85f0ea6
+9840fe00
+793ffe40
+20600000
+98000c00
+1ff17e00
+d8400ea6
+984ffe00
+98c0fe00
+20600000
+1fed7e00
+1ff27e00
+6809c16f
+9846fc00
+20407f86
+18078400
+20600000
+d8400ea6
+9846fc00
+20407f86
+1807fe00
+1ff07e00
+18070400
+98418400
+20600000
+d8400000
+18422600
+e8608000
+20407f64
+1a620400
+20407f95
+da40000a
+9a4ffe00
+9840fe00
+1fe20400
+c2007f59
+20600000
+d840003a
+98467c00
+24217f6d
+d8400061
+98467c00
+20217f70
+d8400037
+98467e00
+20600000
+d8400030
+98467e00
+20600000
+d8400057
+98467e00
+20600000
+18426000
+580001ff
+18002400
+1fe92200
+1a232200
+9a22a200
+2a2ffe00
+7920fe09
+18430400
+2feffe00
+79208407
+1fe37e00
+1a40a401
+2a400e00
+2420ff76
+e0a88000
+c2007f76
+1e020400
+20600000
+207a8000
+20207f86
+ea208000
+ea488000
+98467c00
+24628000
+1a20a201
+1a40a401
+c2007f88
+18007c00
+20600000
+98467c00
+24610000
+18427e00
+20600000
+9840fe00
+98460400
+98467e00
+20600000
+df200200
+d8a04000
+20207ec6
+207a0000
+1fe27a00
+6811010e
+243a7f9e
+20600000
+70820301
+20600000
+60110205
+68108203
+79207e04
+60108203
+20600000
+60110207
+68108203
+79207e06
+60108203
+20600000
+60110205
+70820330
+20600000
+68108043
+793ffe04
+60108043
+20600000
+6811010e
+d8400200
+98467c00
+20600000
+477f403f
+ea2c0000
+18417eff
+243a7fbe
+184cfe00
+e2240000
+1a20a207
+ea208000
+243a2a8c
+68008a99
+e2208000
+20600000
+477fc03f
+df200008
+ea240000
+207a0000
+ea208000
+243a7fcd
+1a20a201
+c2007fc8
+20202a8c
+d8400000
+e2288000
+20600000
+ea240000
+20600000
+ea208000
+20600000
+ea210000
+20600000
+d8400000
+68008006
+c2007fd7
+18408401
+c2007fd7
+18427e00
+20600000
+98467c00
+24610000
+18427e00
+20600000
+18007dff
+20600000
+18007c01
+20600000
+18007c00
+20600000
+78347c00
+20600000
+78547c00
+20600000
+78367c00
+20600000
+78567c00
+20600000
+58000001
+20600000
+58000000
+20600000
+1f227e00
+207a0000
+18c27e00
+9f20fe00
+1fe0ffff
+1fe20c00
+e8c08000
+18c08dfe
+e0a08000
+c2007ff9
+20600000
+00000000
+0000a447
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/sched.rom
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/sched.rom	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/output/sched.rom	(working copy)
@@ -0,0 +1,965 @@
+
+00a1:00 00 00 00 00 00 00 00
+
+
+0c6c:ff
+
+
+
+
+
+
+
+
+
+
+
+
+119e:00 00 00 00 00 00 00 00 00 00
+4000:07
+4010:20
+02
+00 00 
+02
+00 
+06
+00 
+10
+06
+00 00 
+48
+1c
+4027:80
+4031:10
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+4091:01
+40
+40a0:20 51 17 01 20 20
+40ad:12 00
+00 02
+12 00
+00 02
+00 00 
+20 00
+00 40
+20 00
+00 00 
+80 04
+00 08
+
+8f 47
+
+
+
+
+40d1:01
+
+4172:20
+00 00 
+8f 1b ce	
+00 0a 0b ef 07
+41e3:
+0e 00 
+01 00 
+02
+
+
+4203:90 1f
+00 00 
+06
+4211:80
+00 00 
+ff
+421a:01
+
+
+13 47
+423a:14
+4241:00 84
+
+
+436f:1f
+
+
+02 01 05
+
+
+03 03 12 18
+
+
+03 19 c2 03
+
+438f:1f
+
+
+'\09BT5.0 Mouse
+
+
+
+43af:
+'BT5.0 Mouse
+
+
+446f:19 00
+448d:07 
+
+4496:
+07 00 
+07 00 
+20 00 
+2c 01 
+
+
+44a0:8e b1 3a 0e 8e ed
+
+44e5:50
+
+44fa:22 00
+
+
+4515:
+'BT3.0 Mouse
+455a:0a
+465a:01
+
+
+
+
+03 00 04
+4662:03
+4684:01
+1e
+
+ff
+08 07
+46a5:07
+00 00 
+50 00
+70 17 
+
+
+46d2:02 
+00 00 
+
+
+
+
+
+
+
+
+
+12
+
+
+
+
+
+
+
+
+41
+
+46db:01
+ff
+00 00 00 
+00
+02 
+06 
+08 
+04 
+ff
+ff 
+ff 
+1b 
+1c 
+ff 
+ff 
+ff 
+ff 
+ff 
+ff 
+05 
+ff 
+ff 
+03 
+ff 
+00 
+00 
+ff 
+ff 
+
+4703:02 
+
+
+
+
+
+
+4720:
+01
+ff
+ff ff ff ff ff ff
+
+
+
+
+
+
+
+
+
+477f:
+00
+01
+02
+03
+
+
+
+
+
+
+
+
+
+
+
+
+478e:03
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+4b ba
+55 d0
+56 e0
+57 88
+58 6c
+59 10
+ff
+47c5:20
+
+
+
+25 00 02 03 28 01 12 
+26 00 02 4d 2a 07 00 00 00 00 00 00 00 
+27 00 02 02 29 02 00 00
+28 00 02 08 29 02 11 01
+29 00 02 03 28 01 0e 
+2a 00 02 4d 2a 07 00 00 00 00 00 00 00
+2b 00 02 08 29 02 11 02
+
+  
+
+4b10:
+
+06 ff 06 00 03 00 80
+
+'\09BT5.0 Mouse
+
+4bb6:01        
+00 
+c0 12     
+4bc1:20 15 10 05
+ff
+00 13 2c 42
+06 15 36 48
+0f 1a 3a 4c
+11 23 31 4d
+4bda:19		
+19		
+1c	
+4be4:00 48 60
+
+4bfa:04
+01
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/24g.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/24g.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/24g.prog	(working copy)
@@ -0,0 +1,2647 @@
+ifdef COMPILE_24G
+
+g24_dispatch:
+	bpatch patch16_2,mem_patch16
+	call g24_head_ptr2regc
+	add regc,offset_24g_mode,regb
+	ifetch 1,regb
+	//fetch 1,mem_24g_mode
+	rtneq disable_24g
+	beq tx_24g,g24_transmit_process
+	beq rx_24g,g24_receive_process
+	rtn
+
+g24_head_ptr2regc:
+	fetcht 2,mem_24g_head_ptr
+	copy temp,regc
+	rtn
+
+g24_receive_process_init:
+	call g24_receive_init
+	branch g24_mode_switch_init
+
+g24_receive_process:
+	call g24_mode_switch
+	call g24_dongle_work_mode_auto
+	call g24_dongle_bind_mode_auto
+	branch g24_dongle_search_mode_auto
+	
+
+g24_pair_init:
+	//jam 0,mem_24g_pid
+	//jam G24_PAIR_CH,mem_24g_ch
+	call g24_set0_mem_pid
+	setarg G24_PAIR_CH
+	call g24_store_mem_ch
+	call g24_store_mem_pair_txpower
+	//fetch 4,mem_24g_paring_addr
+	//store 4,mem_24g_addr
+	add regc,offset_24g_paring_addr,rega
+	ifetch 4,rega
+	branch g24_store_mem_addr
+		
+g24_ch:
+	call g24_head_ptr2regc
+	add regc,offset_24g_current_ch_number,regb
+	ifetcht 1,regb
+	//fetcht 1,mem_24g_current_ch_number
+	call g24_ch_temp_incre_size4 //map size =4
+	add regc,offset_24g_current_ch_number,contw
+	//storet 1,mem_24g_current_ch_number
+	branch g24_contw_istoret_1byte
+
+g24_ch_temp_incre_size4:
+	call g24_ch_calc
+	increase 1,temp
+	and_into 3,temp
+	rtn
+
+g24_ch_calc:
+	add regc,offset_24g_addr,regb
+	ifetch 1,regb
+	//fetch 1,mem_24g_addr
+	and_into 0x03,pdata
+	mul32 pdata,4,rega			//24addr low bit0 bit1 ,00-map1,01-map2,10-map3,11-map4
+	add regc,offset_24g_ch_map1,pdata
+	//setarg mem_24g_ch_map1
+	iadd rega,pdata
+	iadd temp,contr
+	ifetch 1,contr
+	//store 1,mem_24g_ch
+	branch g24_store_mem_ch
+
+g24_set_device_addr:
+	call g24_store_mem_tx_power_temp
+	call otp_enable_chgpump
+	setarg 0x7e2
+	arg mem_temp,rega
+	arg 4,temp
+	call otpd_read_data
+	call otp_disable_chgpump
+	fetch 4,mem_temp	//adc data from otp
+	call g24_store_mem_device_addr
+	//store 4,mem_24g_device_addr	
+	nrtn blank
+	fetch 4,mem_lap
+	//store 4,mem_24g_device_addr
+	branch g24_store_mem_device_addr
+
+g24_transmit_rf_sta_init:
+	call g24_set1_mem_rf_last_sta
+	//jam 1,mem_24g_rf_last_sta
+	setarg 0
+	call g24_store_mem_sync_cnt
+	//jam 0,mem_24g_sync_cnt
+g24_transmit_rf_ctrl_clear:	
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	and_into bits_data,pdata
+	//store 1,mem_24g_data_type
+	branch g24_store_mem_data_type
+	
+g24_hop_ch_enable:
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	set1 bit_hop,pdata
+	call g24_store_mem_data_type
+	//store 1,mem_24g_data_type
+	//store 1,mem_24g_txpayload
+	branch g24_store_mem_txpayload
+	
+g24_transmit_hop_pac_fail:
+	call g24_fetch_mem_rf_work_stage
+	//fetch 1,mem_24g_rf_work_stage
+	beq 1,g24_transmit_hop_pac_fail_wo_hop
+	beq 2,g24_transmit_hop_pac_fail_hop_stage2
+	rtn
+	
+g24_transmit_hop_pac_fail_wo_hop:
+	call g24_set2_mem_sync_cnt
+	//jam 2,mem_24g_sync_cnt
+g24_transmit_hop_pac_fail_stage1:
+	add regc,offset_24g_hop_pac_retry,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_hop_pac_retry
+	call g24_store_mem_rf_last_sta
+	//jam 0,mem_24g_rf_last_sta
+	branch g24_transmit_rf_ctrl_clear
+
+g24_transmit_hop_pac_fail_hop_stage2:
+	call g24_set0_mem_rf_hop_ch
+	//jam 0,mem_24g_rf_hop_ch
+	branch g24_transmit_hop_pac_fail_stage1
+
+g24_transmit_pac_fail_hop_stage3:
+	add regc,offset_24g_txfail_cnt,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_txfail_cnt
+	increase 1,pdata
+	add regc,offset_24g_txfail_cnt,contw
+	istore 1,contw
+	//store 1,mem_24g_txfail_cnt
+	beq 0x20,g24_tx_attempt_fail
+	call g24_fetch_mem_rf_hop_ch
+	//fetch 1,mem_24g_rf_hop_ch
+	beq 1,g24_rf_hop_fastly
+	setarg 1
+	call g24_store_mem_rf_hop_ch
+	//jam 1,mem_24g_rf_hop_ch
+g24_rf_hop_attemp_again:
+	call g24_fetch_mem_rf_hop_ch
+	//fetch 1,mem_24g_rf_hop_ch
+	bne 1,g24_transmit_rf_ctrl_clear
+g24_rf_hop_fastly:
+	add regc,offset_24g_hop_fastly_cnt,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_hop_fastly_cnt
+	increase 1,pdata
+	call g24_store_mem_hop_fastly_cnt
+	//store 1,mem_24g_hop_fastly_cnt
+	beq 4,g24_rf_hop_fastly_exit
+	call g24_ch
+	call g24_set2_mem_max_retry
+	//jam 2,mem_24g_max_retry
+	branch g24_transmit_packet
+
+g24_rf_hop_fastly_exit:
+	call g24_set0_mem_hop_fastly_cnt
+	//jam 0,mem_24g_hop_fastly_cnt
+	branch g24_transmit_rf_ctrl_clear
+
+g24_set0_mem_hop_fastly_cnt:
+	setarg 0
+g24_store_mem_hop_fastly_cnt:
+	add regc,offset_24g_hop_fastly_cnt,contw
+	branch g24_contw_istore_1byte
+
+g24_transmit_hop_pac_succ_wo_hop:
+	call g24_set2_mem_sync_cnt
+	//jam 2,mem_24g_sync_cnt
+g24_transmit_hop_pac_succ:
+	call g24_set0_mem_rf_hop_ch
+	//jam 0,mem_24g_rf_hop_ch
+	call g24_set1_mem_rf_last_sta
+	//jam 1,mem_24g_rf_last_sta
+	branch g24_transmit_rf_ctrl_clear
+
+g24_transmit_succ_rf_config:
+	call g24_fetch_mem_rf_work_stage
+	//fetch 1,mem_24g_rf_work_stage
+	beq 3,g24_transmit_hop_pac_succ
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	isolate0 bit_hop,pdata
+	branch g24_transmit_rf_sta_init,true
+	call g24_fetch_mem_rf_work_stage
+	//fetch 1,mem_24g_rf_work_stage
+	beq 1,g24_transmit_hop_pac_succ_wo_hop
+	beq 2,g24_transmit_hop_pac_succ
+	rtn
+
+g24_rf_sta_check:
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call g24_rf_laststa_synccnt_check
+	ncall g24_rf_sync_cnt_check,user2
+	rtn
+
+g24_rf_laststa_synccnt_check:
+	disable user2
+	add regc,offset_24g_rf_last_sta,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rf_last_sta
+	rtnne 1
+	add regc,offset_24g_sync_cnt,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_sync_cnt
+	rtnne 0
+	setarg 1
+	call g24_store_mem_rf_work_stage
+	//jam 1,mem_24g_rf_work_stage
+	call g24_set4_mem_max_retry
+	//jam 4,mem_24g_max_retry
+	branch enable_user2
+
+g24_rf_sync_cnt_check:
+	add regc,offset_24g_sync_cnt,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_sync_cnt
+	branch g24_rf_hop_attemp,blank
+	increase -1,pdata
+	call g24_store_mem_sync_cnt
+	//store 1,mem_24g_sync_cnt
+	setarg 2
+	call g24_store_mem_rf_work_stage
+	//jam 2,mem_24g_rf_work_stage
+	call g24_ch
+	//jam 4,mem_24g_max_retry
+	branch g24_set4_mem_max_retry
+
+g24_store_mem_rf_work_stage:
+	add regc,offset_24g_rf_work_stage,contw
+	branch g24_contw_istore_1byte
+
+
+g24_rf_hop_attemp:
+	setarg 3
+	call g24_store_mem_rf_work_stage
+	//jam 3,mem_24g_rf_work_stage
+	call g24_fetch_mem_rf_hop_ch
+	//fetch 1,mem_24g_rf_hop_ch
+	nbranch g24_rf_hop_attemp_again,blank
+	call g24_ch
+	//jam 2,mem_24g_max_retry
+g24_set2_mem_max_retry:	
+	setarg 2
+	branch g24_store_mem_max_retry
+
+g24_transmit_process:
+	rtnmark0 mark_24g
+	set1 mark_24g_conext,mark
+	bpatch patch16_3,mem_patch16
+	add regc,offset_24g_tx_without_int,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_tx_without_int
+	beq 1,g24_transmit_without_int
+	call g24_timer_check
+	nbranch g24_transmit_exit,user
+	call g24_interval_calibrate
+g24_transmit_without_int:
+	add regc,offset_24g_tx_without_int,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_tx_without_int
+	call g24_txdata_prep
+	nbranch g24_enter_lpm,user
+	call g24_rf_sta_check
+g24_transmit_start:
+	call g24_transmit_packet
+	call g24_power_ctrl
+g24_transmit_exit:
+	set0 mark_24g_conext,mark
+	rtn
+
+g24_timer_timeout:
+	rtn zero
+	set1 28,pdata
+	rtn
+
+g24_interval_calibrate:
+	add regc,offset_24g_pac_index,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_pac_index
+	increase 1,pdata
+	add regc,offset_24g_pac_index,contw
+	istore 1,contw
+	//store 1,mem_24g_pac_index
+	beq 4,g24_interval_max
+	beq 5,g24_interval_min
+	rtn
+g24_interval_max:
+	add regc,offset_24g_interval_max,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_interval_max
+g24_interval_update:	
+	//store 1,mem_24g_interval
+	add regc,offset_24g_interval,contw
+	branch g24_contw_istore_1byte
+
+g24_interval_min:
+	add regc,offset_24g_pac_index,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_pac_index
+	add regc,offset_24g_interval_min,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_interval_min
+	branch g24_interval_update
+
+g24_txdata_prep:
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,g24_pairing_sm
+	bpatch patch16_4,mem_patch16
+	call g24_package_data
+	nbranch g24_txdata_last_pac,user
+	call g24_transmit_prep
+	call g24_power_ctrl_pac_incrs
+g24_txdata_enable_tx:
+	//jam ENSURE_ON_24G,mem_24g_ensure
+	setarg ENSURE_ON_24G
+g24_store_mem_ensure:	
+	add regc,offset_24g_ensure,contw
+	branch g24_contw_istore_1byte
+
+g24_txdata_last_pac:
+	add regc,offset_24g_ensure,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_ensure
+	beq ENSURE_ON_24G,enable_user
+	rtn
+
+g24_package_data:
+	//rega:length,regb:contr
+	add regc,offset_24g_cb_data,temp
+	ifetch 2,temp
+	//fetch 2,mem_24g_cb_data
+	call callback_func
+	nrtn user
+	copy rega,pdata
+	store 1,mem_rega
+	add regc,offset_24g_abort_pac,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_abort_pac
+	call g24_transmit_rf_ctrl_clear
+	store 1,mem_24g_common_temp
+	fetch 1,mem_rega
+	copy pdata,rega
+	add rega,1,temp
+	arg mem_24g_common_temp+1,contw
+	copy rega,loopcnt
+	copy regb,contr
+	call memcpy
+	arg mem_24g_common_temp,rega
+g24_put_data_in_buff:
+	rtnmark0 mark_24g_conext
+	add regc,offset_24g_datalen,contw
+	istoret 1,contw
+	//storet 1,mem_24g_datalen
+	copy temp,loopcnt
+	add regc,offset_24g_txbuf,contw
+	//arg mem_24g_txbuf,contw
+	copy rega,contr
+	branch memcpy
+
+g24_transmit_prep:
+// total length
+	add regc,offset_24g_datalen,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_datalen
+	increase 2,pdata
+	add regc,offset_24g_txlen,contw
+	istore 1,contw
+	//store 1,mem_24g_txlen
+// data type
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	call g24_store_mem_txpayload
+	//store 1,mem_24g_txpayload
+//prepare 5bit payload length, 2bit PID, 1bit NO_ACK
+	add regc,offset_24g_datalen,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_datalen
+	lshift3 pdata,pdata
+	add regc,offset_24g_pid,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_pid
+	and temp,0x03,temp
+	lshift temp,temp
+	ior temp,pdata
+	add regc,offset_24g_no_ack,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_no_ack
+	iadd temp,pdata
+	istore 1,contw
+//prepare payload data
+	add regc,offset_24g_datalen,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_datalen
+	iforce loopcnt
+	add regc,offset_24g_txbuf,contr
+	//arg mem_24g_txbuf,contr
+	branch memcpy
+
+g24_send_abort_packet:
+	call g24_set1_mem_abort_pac
+	//jam 1,mem_24g_abort_pac
+	call g24_set0_mem_rf_hop_ch
+	//jam 0,mem_24g_rf_hop_ch
+	call g24_power_ctrl_reinit
+	call g24_transmit_rf_ctrl_clear
+	store 1,mem_24g_common_temp
+	call g24_put_data_in_buff_pre
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	set1 bit_abort,pdata
+	call g24_store_mem_data_type
+	//store 1,mem_24g_data_type
+	call g24_transmit_prep
+	call g24_txdata_enable_tx
+	branch g24_transmit_start
+
+g24_put_data_in_buff_pre:
+	store 1,mem_24g_common_temp+1
+	call g24_fetch_mem_device_addr
+	//fetch 4,mem_24g_device_addr
+	store 4,mem_24g_common_temp+2
+	arg 6,temp
+	arg mem_24g_common_temp,rega
+	branch g24_put_data_in_buff
+
+g24_enter_lpm:
+	add regc,offset_24g_abort_pac,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_abort_pac
+	branch g24_send_abort_packet,blank
+g24_enter_lpm_prepare:
+ 	// some thing need to do and do not enter 24g long sleep
+	add regc,offset_24g_cb_lpm_prepare,rega
+	ifetch 2,rega
+	//fetch 2,mem_24g_cb_lpm_prepare
+	branch callback_func
+
+g24_lpm_long_sleep:
+	call g24_head_ptr2regc
+	//fetch 8,mem_24g_enter_hibernate
+	call lpo_calibration
+	fetch 3,mem_clks_per_lpo
+	rtn blank
+	add regc,offset_24g_cb_lpm_before,temp
+	ifetch 2,temp
+	//fetch 2,mem_24g_cb_lpm_before
+	call callback_func
+	add regc,offset_24g_enter_hibernate,temp
+	ifetch 8,temp
+	call clk2lpo
+	storet 4,mem_sleep_counter
+  	branch lpm_sleep
+
+g24_transmit_packet:
+	call g24_head_ptr2regc
+	add regc,offset_24g_retry,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_retry
+g24_transmit_loop:
+	call g24_transmit_receive_ack
+	nbranch g24_retransmit,sync
+	nbranch g24_retransmit,user3
+	call g24_ackpayload_parse
+	call g24_power_ctrl_ack_incrs
+g24_transmit_next_packet:
+	call g24_head_ptr2regc
+	add regc,offset_24g_pid,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_pid
+	increase 1,pdata
+	call g24_store_mem_pid
+	//store 1,mem_24g_pid
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,g24_paring_mode
+	call g24_transmit_succ_rf_config
+g24_transmit_abandon:
+	setarg 0
+	add regc,offset_24g_txfail_cnt,contw
+	istore 2,contw	//include mem_24g_get_ack_fail
+	//store 1,mem_24g_txfail_cnt
+	//store 1,mem_24g_get_ack_fail
+	//jam ENSURE_OFF_24G,mem_24g_ensure
+	setarg ENSURE_OFF_24G
+	branch g24_store_mem_ensure
+
+	
+g24_transmit_receive_ack:
+	disable user3
+	call g24_transmit
+	call g24_head_ptr2regc
+	add regc,offset_24g_no_ack,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_no_ack
+	beq no_ack_24g,g24_transmit_no_ack	//tx no ack
+	call g24_receive_packet
+	branch g24_end_of_packet
+g24_transmit_no_ack:
+	call g24_end_of_packet
+	branch g24_transmit_next_packet
+
+
+g24_retransmit:
+	bpatch patch16_5,mem_patch16
+	add regc,offset_24g_get_ack_fail,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_get_ack_fail
+	increase 1,pdata
+	add regc,offset_24g_get_ack_fail,contw
+	istore 1,contw
+	//store 1,mem_24g_get_ack_fail
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,g24_tx_paring_retry
+	add regc,offset_24g_retry,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_retry
+	increase 1,temp
+	add regc,offset_24g_retry,contw
+	istoret 1,contw
+	//storet 1,mem_24g_retry
+	add regc,offset_24g_max_retry,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_max_retry
+	isub temp,pdata
+	nbranch g24_transmit_loop,blank
+	bpatch patch16_6,mem_patch16
+	call g24_fetch_mem_rf_work_stage
+	//fetch 1,mem_24g_rf_work_stage
+	beq 3,g24_transmit_pac_fail_hop_stage3
+	add regc,offset_24g_hop_pac_retry,rega
+	ifetch 1,rega	
+	//fetch 1,mem_24g_hop_pac_retry
+	increase 1,pdata
+	add regc,offset_24g_hop_pac_retry,contw
+	istore 1,contw
+	//store 1,mem_24g_hop_pac_retry
+	beq 2,g24_transmit_hop_pac_fail
+	call g24_hop_ch_enable
+	setarg 1
+	call g24_store_mem_max_retry
+	//jam 1,mem_24g_max_retry
+	branch g24_transmit_packet
+
+g24_tx_paring_retry:
+	add regc,offset_24g_get_ack_fail,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_get_ack_fail
+	rtnne 0xff
+	add regc,offset_24g_get_ack_fail,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_get_ack_fail
+	branch g24_stop_24g_mode
+
+g24_tx_attempt_fail:
+	add regc,offset_24g_txfail_cnt,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_txfail_cnt
+g24_stop_24g_mode:
+	jam BT_EVT_24G_ATTEMPT_FAIL,mem_fifo_temp
+	branch ui_ipc_send_event
+
+g24_ackpayload_parse:
+	call g24_read_len_pid_crc
+	add regc,offset_24g_rxdata_length,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rxdata_length	//ack payload length 
+	rtn blank
+	iforce loopcnt
+	add regc,offset_24g_rxbuf_add2,contr
+	//arg mem_24g_rxbuf+2,contr
+	add regc,offset_24g_rxpayload,contw	
+	//arg mem_24g_rxpayload,contw	//ack payload buffer 
+	branch memcpy
+
+
+g24_read_len_pid_crc:
+//read control
+	call g24_fetch_mem_rxbuf_add1
+	//fetch 1,mem_24g_rxbuf+1
+	rshift3 pdata,pdata
+	add regc,offset_24g_rxdata_length,contw
+	istore 1,contw
+	//store 1,mem_24g_rxdata_length
+//get crc
+	increase 1,pdata
+	add regc,offset_24g_rxbuf_add1,contr
+	//arg mem_24g_rxbuf+1,contr
+	iadd contr,contr
+	ifetch 3,contr
+	add regc,offset_24g_sta_crc,contw
+	istore 3,contw
+	//store 3,mem_24g_sta_crc
+//read pid
+	call g24_fetch_mem_rxbuf_add1
+	//fetch 1,mem_24g_rxbuf+1
+	rshift pdata,pdata
+	and pdata,0x03,pdata
+	add regc,offset_24g_sta_pid,contw
+	istore 1,contw
+	//store 1,mem_24g_sta_pid
+	rtn
+
+g24_prep:
+	disable enable_crc
+	disable enable_white
+	setarg 0x555555
+	iforce crc24_init
+	rtn
+
+g24_set_freq_tx:
+	call set_sync_on
+	add regc,offset_24g_ch,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_ch
+	branch set_freq_tx
+
+g24_transmit:
+	call g24_prep
+	call g24_set_freq_tx
+	set1 TXGFSK,radio_ctrl
+	enable encode_fec0
+	enable is_tx
+	disable is_rx
+	call le_enable
+	call g24_fetch_mem_addr
+	//fetch 4,mem_24g_addr
+	iforce access
+	inject mod,32
+	enable enable_crc
+	add regc,offset_24g_txlen,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_txlen
+	iforce loopcnt
+	add regc,offset_24g_txpayload,contr
+	//arg mem_24g_txpayload,contr
+g24tr_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop g24tr_loop
+	enable enable_parity
+	inject mod,24	//crc
+	disable enable_parity
+	until null,tx_clear
+	bpatch patch16_7,mem_patch16
+	nop 100
+	disable encode_fec0
+	rtn
+
+g24_receive_packet:
+	disable user3
+	force 0,radio_ctrl
+	add regc,offset_24g_ch,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_ch
+	call set_freq_rx
+	call rf_rx_enable
+g24_receive_rxon:
+	call g24_prep
+	enable decode_fec0
+	enable is_rx
+	disable is_tx
+	call le_enable
+	call g24_fetch_mem_addr
+	//fetch 4,mem_24g_addr
+	iforce access
+	enable swfine
+	add regc,offset_24g_rx_window,rega
+	ifetch 2,rega
+	//fetch 2,mem_24g_rx_window
+	iforce stop_watch
+	correlate null,timeout
+	nbranch g24_sync_timeout,sync
+	enable enable_crc
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	add regc,offset_24g_rxbuf,contw
+	istore 1,contw	
+	//store 1,mem_24g_rxbuf	//device id
+	add regc,offset_24g_mode,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_mode
+	beq rx_24g,g24_receive_skip
+	bpatch patch17_0,mem_patch17
+	add regc,offset_24g_rxbuf,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rxbuf
+	add regc,offset_24g_data_type,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_data_type
+	icompare bits_data,temp
+	nbranch g24_end_of_packet,true
+g24_receive_skip:
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	rshift3 pdata,pdata
+	and pdata,0x1f,loopcnt	//max payload: 32bytes
+	branch g24rx_nopayload,zero
+g24rx_loop:
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	loop g24rx_loop
+g24rx_nopayload:
+	parse demod,bucket,24
+	rshift32 pdata,pdata
+	rshift16 pdata,pdata
+	istore 3,contw
+	branch g24_end_of_packet,crc_failed
+	enable user3
+	disable decode_fec0
+	rtn
+//	branch rssi_signal
+
+g24_end_of_packet:
+	disable encode_fec0
+	disable decode_fec0
+	disable enable_crc
+	disable enable_white
+	branch shutdown_radio,is_rx
+	until null,tx_clear
+	nop 100          /* flush out the last bit */
+	branch shutdown_radio
+
+g24_sync_timeout:
+	call rssi_noise
+	branch g24_end_of_packet
+
+rssi_noise:
+	call save_rssi
+	rtn blank
+	add regc,offset_rssi_noise_index,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_rssi_noise_index
+	arg mem_rssi_noise_buffer,rega
+	//arg mem_rssi_noise_buf,rega
+	call rssi_noise_store
+	add regc,offset_rssi_noise_index,contw
+	//storet 1,mem_rssi_noise_index
+g24_contw_istoret_1byte:	
+	istoret 1,contw
+	rtn
+
+rssi_noise_store:
+	arg RSSI_BUF_LEN_NOISE,regb
+	branch rssi_store
+	
+/*	
+rssi_signal:
+	call save_rssi
+	rtn blank
+	add regc,offset_rssi_signal_index,rega
+	ifetcht 1,rega	
+	//fetcht 1,mem_rssi_signal_index
+	add regc,offset_rssi_signal_buf,rega
+	//arg mem_rssi_signal_buf,rega
+	arg RSSI_BUF_LEN_SIGNAL,regb
+	call rssi_store
+	add regc,offset_rssi_signal_index,contw
+	istoret 1,contw	
+	//storet 1,mem_rssi_signal_index
+	rtn
+*/	
+rssi_store:	
+	copy rega,pdata
+	iadd temp,contw
+	fetch 1,mem_rssi
+	istore 1,contw
+	increase 1,temp
+	copy regb,pdata
+	iand_into temp
+	rtn
+	
+rssi_average:
+	arg 0,temp
+	copy rega,contr
+rssi_average_loop:	
+	ifetch 1,contr
+	iadd temp,temp
+	loop rssi_average_loop
+	rshift8 temp,temp
+	rtn
+
+g24_power_ctrl_init:
+	call g24_head_ptr2regc
+	call g24_power_ctrl_incrs_level1
+	setarg 1
+	call g24_store_mem_power_ctrl_level
+	//jam 1,mem_power_ctrl_level
+g24_power_ctrl_reinit:
+	setarg 0
+	call g24_store_mem_power_ctrl_pac
+	//jam 0,mem_power_ctrl_packet_cnt
+	istore 1,contw
+	//jam 0,mem_power_ctrl_ack_cnt
+	rtn
+
+g24_power_ctrl_pac_incrs:
+	call g24_fetch_mem_power_ctrl_pac
+	//fetch 1,mem_power_ctrl_packet_cnt
+	increase 1,pdata
+g24_store_mem_power_ctrl_pac:	
+	//store 1,mem_power_ctrl_packet_cnt
+	add regc,offset_power_ctrl_packet_cnt,contw
+	branch g24_contw_istore_1byte
+
+g24_power_ctrl_ack_incrs:
+	//fetch 1,mem_power_ctrl_ack_cnt
+	//store 1,mem_power_ctrl_ack_cnt
+	add regc,offset_power_ctrl_ack_cnt,rega
+	ifetch 1,rega
+	increase 1,pdata
+	add regc,offset_power_ctrl_ack_cnt,contw
+	branch g24_contw_istore_1byte
+
+g24_power_ctrl:
+	bpatch patch17_1,mem_patch17
+	call g24_fetch_mem_power_ctrl_pac
+	//fetch 1,mem_power_ctrl_packet_cnt
+	sub pdata,POWER_CTRL_MAX_PACKET_CNT,null
+	rtn positive
+	add regc,offset_power_ctrl_ack_cnt,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_power_ctrl_ack_cnt
+	isub temp,temp	//loss packet cnt
+	call g24_power_ctrl_reinit
+	setarg offset_power_ctrl_threshold_up
+	iadd regc,rega
+	ifetch 1,rega
+	//fetch 1,mem_power_ctrl_threshold_up
+	isub temp,null
+	nbranch g24_power_ctrl_incrs,positive
+	setarg offset_power_ctrl_threshold_down
+	iadd regc,rega
+	ifetch 1,rega	
+	//fetch 1,mem_power_ctrl_threshold_down
+	isub temp,null
+	branch g24_power_ctrl_decrs,positive
+	rtn
+
+g24_power_ctrl_incrs:	
+	add regc,offset_power_ctrl_level,rega
+	ifetch 1,rega
+	//fetch 1,mem_power_ctrl_level
+	beq 2,g24_power_ctrl_incrs_level2
+	increase 1,pdata
+	call g24_store_mem_power_ctrl_level
+	//store 1,mem_power_ctrl_level
+	beq 1,g24_power_ctrl_incrs_level1
+g24_power_ctrl_incrs_level2:
+	setarg POWER_CTRL_LOSSPAC_THRESH_UP2
+	call g24_store_mem_power_ctrl_threshold_up
+	//jam POWER_CTRL_LOSSPAC_THRESH_UP2,mem_power_ctrl_threshold_up
+	setarg POWER_CTRL_LOSSPAC_THRESH_DOWN2
+	call g24_store_mem_power_ctrl_threshold_down
+	//jam POWER_CTRL_LOSSPAC_THRESH_DOWN2,mem_power_ctrl_threshold_down
+//	jam POWER_CTRL_RSSI_THRESH_DOWN2,mem_rssi_ctrl_threshold_down
+	add regc,offset_power_ctrl_txpwr_level2,rega
+	//fetch 1,mem_power_ctrl_txpwr_level2
+	branch g24_ifetch_rega_store_mem_txpower
+
+g24_power_ctrl_decrs:
+	add regc,offset_power_ctrl_level,rega
+	ifetch 1,rega
+	//fetch 1,mem_power_ctrl_level
+	beq 0,g24_power_ctrl_decrs_level0
+	increase -1,pdata
+	call g24_store_mem_power_ctrl_level
+	//store 1,mem_power_ctrl_level
+	beq 0,g24_power_ctrl_decrs_level0
+g24_power_ctrl_decrs_level1:
+//	call rssi_check_distance
+//	nrtn user
+g24_power_ctrl_incrs_level1:
+	setarg POWER_CTRL_LOSSPAC_THRESH_UP1
+	call g24_store_mem_power_ctrl_threshold_up
+	//jam POWER_CTRL_LOSSPAC_THRESH_UP1,mem_power_ctrl_threshold_up
+	setarg POWER_CTRL_LOSSPAC_THRESH_DOWN1
+	call g24_store_mem_power_ctrl_threshold_down
+	//jam POWER_CTRL_LOSSPAC_THRESH_DOWN1,mem_power_ctrl_threshold_down
+//	jam POWER_CTRL_RSSI_THRESH_DOWN1,mem_rssi_ctrl_threshold_down
+	setarg offset_power_ctrl_txpwr_level1
+g24_iadd_offset_mem_txpower:	
+	iadd regc,rega
+g24_ifetch_rega_store_mem_txpower:	
+	ifetch 1,rega
+	//fetch 1,mem_power_ctrl_txpwr_level1
+	branch g24_store_mem_txpower
+	
+g24_power_ctrl_decrs_level0:
+//	call rssi_check_distance
+//	nrtn user
+	setarg POWER_CTRL_LOSSPAC_THRESH_UP0
+	call g24_store_mem_power_ctrl_threshold_up
+	//jam POWER_CTRL_LOSSPAC_THRESH_UP0,mem_power_ctrl_threshold_up
+	setarg POWER_CTRL_LOSSPAC_THRESH_DOWN0
+	call g24_store_mem_power_ctrl_threshold_down
+	//jam POWER_CTRL_LOSSPAC_THRESH_DOWN0,mem_power_ctrl_threshold_down
+//	jam POWER_CTRL_RSSI_THRESH_DOWN0,mem_rssi_ctrl_threshold_down
+	setarg offset_power_ctrl_txpwr_level0
+	//fetch 1,mem_power_ctrl_txpwr_level0
+	branch g24_iadd_offset_mem_txpower
+
+/*
+rssi_check_distance:
+	disable user
+	arg mem_rssi_signal_buf,rega
+	arg RSSI_BUF_LEN_SIGNAL+1,loopcnt
+	call rssi_average
+	storet 1,mem_rssi_signal_avg
+	fetch 1,mem_rssi_ctrl_threshold_down
+	isub temp,null
+	branch enable_user,positive
+	rtn
+*/
+g24_start_pairing_sm1:
+	set1 mark_24g,mark
+	call g24_pair_init
+g24_set_pairing_sm_1:
+	//jam STATE_24G_PAIRING_1,mem_24g_pairing_sm
+	setarg STATE_24G_PAIRING_1
+	branch g24_store_mem_pairing_sm
+
+g24_pairing_sm:
+	add regc,offset_24g_ensure,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_ensure
+	beq ENSURE_ON_24G,enable_user
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	beq STATE_24G_PAIRING_1,g24_pairing_sm_1
+	beq STATE_24G_PAIRING_2,g24_pairing_sm_2
+	beq STATE_24G_PAIRING_3,g24_pairing_sm_3
+	branch assert
+
+g24_pairing_sm_1:
+	setarg STATE_24G_PAIRING_1_WAITING_ACK
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_1_WAITING_ACK,mem_24g_pairing_sm
+	jam 0xaa,mem_24g_common_temp
+	branch g24_pairing_sm_common
+g24_pairing_sm_2:
+	setarg STATE_24G_PAIRING_2_WAITING_ACK
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_2_WAITING_ACK,mem_24g_pairing_sm
+	jam 0x55,mem_24g_common_temp
+	branch g24_pairing_sm_common
+g24_pairing_sm_3:
+	setarg STATE_24G_PAIRING_3_WAITING_ACK
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_3_WAITING_ACK,mem_24g_pairing_sm
+	jam 0x22,mem_24g_common_temp
+g24_pairing_sm_common:
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	and_into bits_data,pdata
+	store 1,mem_24g_common_temp+1
+	call g24_fetch_mem_device_addr
+	//fetch 4,mem_24g_device_addr
+	store 4,mem_24g_common_temp+2
+g24_put_pairing_data_in_buff:
+	jam 0,mem_24g_common_temp+6
+	arg mem_24g_common_temp,rega
+	arg 7,temp
+	call g24_put_data_in_buff	
+	call g24_transmit_prep
+	call g24_txdata_enable_tx
+	branch enable_user
+
+g24_paring_mode:
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	rtneq STATE_24G_PAIRING_SUCCESS
+	beq STATE_24G_PAIRING_1_WAITING_ACK,g24_pairing_sm_1_waiting_ack
+	beq STATE_24G_PAIRING_2_WAITING_ACK,g24_pairing_sm_2_waiting_ack
+	beq STATE_24G_PAIRING_3_WAITING_ACK,g24_pairing_sm_3_waiting_ack
+	rtn
+
+g24_pairing_sm_1_waiting_ack:
+	setarg STATE_24G_PAIRING_2
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_2,mem_24g_pairing_sm
+	branch g24_transmit_abandon
+g24_pairing_sm_2_waiting_ack:
+	setarg STATE_24G_PAIRING_3
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_3,mem_24g_pairing_sm
+	branch g24_transmit_abandon
+g24_pairing_sm_3_waiting_ack:
+	setarg STATE_24G_PAIRING_SUCCESS
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_SUCCESS,mem_24g_pairing_sm
+	jam BT_EVT_24G_PAIRING_COMPLETE,mem_fifo_temp
+	call ui_ipc_send_event
+	add regc,offset_24g_rxpayload_add2,rega
+	ifetch 4,rega
+	//fetch 4,mem_24g_rxpayload+2
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	branch g24_transmit_abandon
+
+g24_auto_pair_start:
+	set0 mark_24g,mark
+	call g24_auto_pair_set_device_info
+	call g24_tx_attemp_data_prep
+g24_auto_pair_restart:	
+	call g24_set0_mem_check_dongle_times
+g24_auto_pair_start_loop:
+	nop 2000
+	call g24_fetch_mem_check_dongle_times
+	beq 0xff,g24_stop_24g_mode
+	call g24_transmit_receive_ack
+	nbranch g24_auto_pair_retry,sync
+	nbranch g24_auto_pair_retry,user3
+	call g24_ackpayload_parse
+	call g24_head_ptr2regc
+	add regc,offset_24g_paring_addr,rega
+	ifetcht 4,rega
+	call g24_fetch_mem_addr_isub_temp
+	branch g24_start_pairing_sm1,zero
+	call g24_head_ptr2regc
+	add regc,offset_24g_rxpayload_add2,rega
+	ifetch 4,rega
+	beq 0,g24_auto_pair_restart
+	call g24_store_mem_addr
+	branch g24_tx_attemp_dongle_succ
+
+g24_auto_pair_retry:
+	call g24_fetch_mem_check_dongle_times
+	increase 1,pdata
+	call g24_store_mem_check_dongle_times
+
+	call g24_fetch_mem_auto_paring_switch
+	increase 1,pdata
+	and_into 1,pdata
+	call g24_store_mem_auto_paring_switch
+	beq 0,g24_auto_pair_device_attemp
+	beq 1,g24_auto_pair_pair_attemp
+	rtn
+
+g24_fetch_mem_auto_paring_switch:
+	setarg offset_24g_auto_pair_switch
+	branch g24_set_rega_ifetch_1byte
+g24_store_mem_auto_paring_switch:
+	arg offset_24g_auto_pair_switch,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_auto_pair_set_device_info:
+	call g24_store_mem_tx_power
+	call g24_fetch_mem_device_addr
+	call g24_store_mem_addr
+	branch g24_ch
+
+g24_auto_pair_device_attemp:
+	call g24_auto_pair_set_device_info
+	branch g24_auto_pair_start_loop
+
+g24_auto_pair_pair_attemp:
+	call g24_pair_init
+	branch g24_auto_pair_start_loop
+
+
+g24_start_24g_mode:
+	set0 mark_24g,mark
+	call g24_ch
+	call g24_fetch_mem_pairing_sm
+	//fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call g24_tx_attemp_data_prep
+	call g24_set0_mem_check_dongle_times
+	//jam 0,mem_24g_check_dongle_times
+g24_tx_attemp_dongle_loop:
+	nop 2000
+	call g24_fetch_mem_check_dongle_times
+	//fetch 1,mem_24g_check_dongle_times
+	beq 0xff,g24_stop_24g_mode
+	call g24_transmit_receive_ack
+	nbranch g24_attemp_txdata_retry,sync
+	nbranch g24_attemp_txdata_retry,user3
+g24_tx_attemp_dongle_succ:	
+	set1 mark_24g,mark
+	call g24_set0_mem_check_dongle_times
+	setarg STATE_24G_PAIRING_SUCCESS
+	call g24_store_mem_pairing_sm
+	//jam 0,mem_24g_check_dongle_times
+	jam BT_EVT_24G_ATTEMPT_SUCCESS,mem_fifo_temp
+	branch ui_ipc_send_event
+
+g24_tx_attemp_data_prep:
+	set1 mark_24g_conext,mark
+	jam 0xff,mem_24g_common_temp
+	call g24_fetch_mem_data_type
+	//fetch 1,mem_24g_data_type
+	call g24_put_data_in_buff_pre
+	branch g24_transmit_prep
+	
+g24_attemp_txdata_retry:
+	call g24_fetch_mem_check_dongle_times
+	//fetch 1,mem_24g_check_dongle_times
+	increase 1,pdata
+	call g24_store_mem_check_dongle_times
+	//store 1,mem_24g_check_dongle_times
+	call g24_ch
+	branch g24_tx_attemp_dongle_loop
+
+g24_check_51cmd_start_24g:
+	call g24_store_mem_tx_power
+	//fetch 1,mem_tx_power_temp
+	//store 1,mem_tx_power
+	setarg STATE_24G_PAIRING_SUCCESS
+	call g24_store_mem_pairing_sm
+	//jam STATE_24G_PAIRING_SUCCESS,mem_24g_pairing_sm
+	branch g24_start_24g_mode
+/*	
+g24_check_51cmd_stop_24g:
+	call g24_store_mem_tx_power
+	set0 mark_24g,mark
+	branch le_disable
+*/
+
+
+dongle_init:
+	bpatch patch17_2,mem_patch17
+	call g24_head_ptr2regc
+	setarg dongle_rxdata_type1
+	add regc,offset_24g_cb_rxdata_type1,contw
+	istore 2,contw
+	//store 2,mem_24g_cb_rxdata_type1
+	call g24_receive_init
+	call usb_init
+	call g24_fetch_mem_pair_mode
+	//fetch 1,mem_24g_pair_mode
+	bpatch patch17_3,mem_patch17
+	beq 0x00,dongle_auto_bind
+	beq 0x01,dongle_pc_bind
+	beq 0x0f,dongle_all_powerful
+	branch assert
+
+g24_receive_init:
+	call g24_store_mem_tx_power_temp
+	arg 0x80,loopcnt
+	arg mem_rssi_noise_buffer,contw
+	branch memset0
+
+dongle_all_powerful:
+	call dongle_check_mode
+dongle_all_powerful_loop:
+	call g24_dongle_work_mode
+	call usb_isr
+	branch dongle_all_powerful_loop
+
+dongle_pc_bind:
+	bpatch patch17_4,mem_patch17
+	call dongle_check_mode
+dongle_pc_bind_loop:	
+	call g24_dongle_work_mode
+	call g24_dongle_bind_mode
+	call usb_isr
+	call dongle_usb_dispatch
+	branch dongle_pc_bind_loop
+
+dongle_check_mode:
+	//jam DONGLE_WORK,mem_dongle_work_mode
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	//jam 0,mem_24g_ackpayload_enable
+	call g24_set_work_mem_dongle_work_mode
+	call g24_set0_mem_dongle_mode_init
+	branch g24_set0_mem_ackpayload_enable
+	
+g24_dongle_work_mode:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_WORK
+g24_dongle_work_mode_start:
+	call g24_dongle_work_init
+	call g24_ch_process
+	call g24_receive_packet_start
+	branch g24_blank_data_process
+
+g24_dongle_work_init:
+	call g24_fetch_mem_dongle_mode_init
+	//fetch 1,mem_dongle_mode_init
+	rtnbit1 DONGLE_WORK
+	set1 DONGLE_WORK,pdata
+	call g24_store_mem_dongle_mode_init
+	//store 1,mem_dongle_mode_init
+	call g24_store_mem_tx_power
+	//fetch 1,mem_tx_power_temp
+	//store 1,mem_tx_power
+	call g24_set0_mem_ackpayload_enable
+	//jam 0,mem_24g_ackpayload_enable
+	jam 0,mem_usb_tx_enable
+	call g24_set1_mem_abort_pac
+	//jam 1,mem_24g_abort_pac
+	call g24_dongle_init
+g24_rx_interrupt_clear:
+	add regc,offset_24g_rxbuf,contw
+	//arg mem_24g_rxbuf,contw
+	arg 66,loopcnt
+	branch clear_mem
+
+g24_dongle_init:
+	call g24_set0_mem_pid
+	//jam 0,mem_24g_pid
+	call g24_fetch_mem_rx_addr
+	//fetch 4,mem_24g_rx_addr
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	branch g24_ch
+
+g24_ch_process:
+	bpatch patch17_5,mem_patch17
+	call g24_fetch_mem_abort_pac
+	//fetch 1,mem_24g_abort_pac
+	beq 1,g24_noise_rssi
+	call g24_fetch_mem_hop_pac
+	//fetch 1,mem_24g_hop_pac
+	beq 1,g24_ch	
+	setarg offset_24g_hop_btclk
+	iadd regc,rega
+	ifetcht 4,rega
+	//fetcht 4,mem_24g_hop_btclk
+	copy clkn_bt,pdata
+	isub temp,null
+	ncall g24_timer_timeout,positive
+	copy pdata,regb
+	setarg offset_24g_hop_btclk
+	iadd regc,rega
+	ifetch 4,rega
+	copy pdata,temp
+	//fetch 4,mem_24g_hop_btclk
+	setarg offset_24g_hop_interval
+	iadd regc,rega
+	copy temp,pdata
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_hop_interval
+	iadd temp,temp
+	copy regb,pdata
+	isub temp,null
+	nrtn positive
+	set0 28,pdata
+	setarg offset_24g_hop_btclk
+	iadd regc,contw
+	istore 4,contw
+	//store 4,mem_24g_hop_btclk
+g24_ch_update:
+	call g24_ch
+	call g24_fetch_mem_rf_laststa
+	//fetch 1,mem_24g_rf_laststa
+	increase 1,pdata
+	call g24_store_mem_rf_laststa
+	//store 1,mem_24g_rf_laststa
+	rtnne 2
+	call g24_set0_mem_rf_laststa
+	//jam 0,mem_24g_rf_laststa
+	//jam 1,mem_24g_abort_pac
+	//rtn
+	branch g24_set1_mem_abort_pac
+	
+g24_ch_timer_reinit:
+	copy clkn_bt,pdata
+	arg offset_24g_hop_btclk,rega
+	call g24_set_contw_with_temp
+	istore 4,contw
+	//store 4,mem_24g_hop_btclk
+	//jam 0,mem_24g_rf_laststa
+	//rtn
+	branch g24_set0_mem_rf_laststa
+
+g24_noise_rssi:
+	arg mem_rssi_noise_buffer,rega
+	call g24_noise_rssi_average
+	add regc,offset_rssi_noise_avg,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_avg
+	sub temp,RSSI_THRESH_NOISE,null
+	nrtn positive	
+	branch g24_ch
+
+g24_noise_rssi_average:
+	arg RSSI_BUF_LEN_NOISE+1,loopcnt
+	branch rssi_average
+
+g24_blank_data_process:
+	call g24_ms_blank_data
+	call g24_kb_blank_data
+	branch g24_kb_mul_blank_data
+
+g24_ms_blank_data:
+	setarg offset_24g_ms_blank_data_enable
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ms_blank_data_enable
+	rtn blank
+	arg TIMER_MS_BLANK,queue
+	call timer_check
+	nrtn blank
+	call g24_set0_mem_ms_blank_data_enable
+	//jam 0,mem_24g_ms_blank_data_enable
+g24_ms_blank_data_2usb:
+	setarg MS_REPORT_ID
+	store 1,mem_usb_mouse_data
+	setarg 0
+	istore 7,contw
+	branch g24_data_type1_usbtx_enable
+
+g24_kb_blank_data:
+	setarg offset_24g_kb_blank_data_enable
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_kb_blank_data_enable
+	rtn blank
+	arg TIMER_KB_BLANK,queue
+	call timer_check
+	nrtn blank
+	call g24_set0_mem_kb_blank_data_enable
+	//jam 0,mem_24g_kb_blank_data_enable
+g24_kb_blank_data_2usb:	
+	arg mem_usb_kb_data,contw
+	arg 2,loopcnt
+	call memset0
+	jam KB_NORMAL_REPORT_ID,mem_usb_kb_data
+	branch g24_kb_data_into_ep1_fifo
+
+g24_kb_mul_blank_data:
+	setarg offset_24g_kb_mul_blank_data_enable
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_kb_mul_blank_data_enable
+	rtn blank
+	arg TIMER_KB_MUL_BLANK,queue
+	call timer_check
+	nrtn blank
+	call g24_set0_mem_kb_mul_blank_data_enable
+	//jam 0,mem_24g_kb_mul_blank_data_enable
+g24_kb_mul_blank_data_2usb:
+	arg mem_usb_kb_multikey,contw
+	arg 2,loopcnt
+	call memset0
+	jam KB_MULTIKEY_REPORT_ID,mem_usb_kb_multikey
+	branch g24_kb_mul_data_into_ep2_fifo
+
+g24_dongle_bind_mode:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_BIND
+	call g24_dongle_bind_init
+	branch g24_dongle_bind_data_process
+
+g24_dongle_bind_init:
+	call g24_fetch_mem_dongle_mode_init
+	//fetch 1,mem_dongle_mode_init
+	rtnbit1 DONGLE_BIND
+	set1 DONGLE_BIND,pdata
+	call g24_store_mem_dongle_mode_init
+	//store 1,mem_dongle_mode_init
+	call g24_set1_mem_ackpayload_enable
+	//jam 1,mem_24g_ackpayload_enable
+	call g24_pair_init
+	setarg 0
+	arg offset_dongle_ms_bind_step,rega
+	call g24_set_contw_with_temp
+	//store 3,mem_dongle_ms_bind_step
+	branch g24_contw_istore_3byte
+
+g24_dongle_bind_data_process:
+	call g24_receive_transmit_ack
+	nbranch g24_rx_interrupt_clear,user3	
+	add regc,offset_24g_rxbuf,contr
+	setarg offset_24g_rxdata_temp
+	iadd regc,contw
+	arg 8,loopcnt
+	call memcpy
+	setarg offset_24g_rxdata_temp_add2
+	call g24_set_rega_ifetch_1byte
+	beq DATATYPE_BIND,g24_dongle_bind_first_step	//bind step 1
+	beq DATATYPE_CONFIG,g24_dongle_bind_second_step
+	beq DATATYPE_OK,g24_dongle_bind_third_step
+	beq 0xff,g24_data_attemp
+	branch g24_rx_interrupt_clear
+
+g24_dongle_bind_first_step:
+	call g24_fetch_mem_rxdata_temp_add3_1byte
+	beq BIND_MOUSE,g24_dongle_bind_first_step_mouse
+	beq BIND_KEYBOARD,g24_dongle_bind_first_step_keyboard
+	rtn
+g24_dongle_bind_first_step_mouse:
+	setarg 1
+	call g24_store_mem_ms_bind_step
+	//jam 1,mem_dongle_ms_bind_step
+g24_dongle_bind_ms_payload_cfg:
+	setarg DATATYPE_MOUSE
+	call g24_store_mem_bind_payload
+	//jam DATATYPE_MOUSE,mem_24g_bind_payload
+g24_dongle_bind_payload_cfg:	
+	setarg 0x80
+	arg offset_24g_bind_payload_add1,rega
+	call g24_set_contw_with_regb_store_1byte
+	//jam 0x80,mem_24g_bind_payload+1
+	call g24_fetch_mem_rx_addr
+	//fetch 4,mem_24g_rx_addr
+	arg offset_24g_bind_payload_add2,rega
+	call g24_set_contw_with_temp
+	//store 4,mem_24g_bind_payload+2
+	branch g24_contw_istore_4byte
+
+g24_dongle_bind_first_step_keyboard:
+	setarg 1
+	call g24_store_mem_kb_bind_step
+	//jam 1,mem_dongle_kb_bind_step
+g24_dongle_bind_kb_payload_cfg:
+	setarg DATATYPE_KEYBOARD
+	call g24_store_mem_bind_payload
+	//jam DATATYPE_KEYBOARD,mem_24g_bind_payload
+	branch g24_dongle_bind_payload_cfg
+		
+g24_dongle_bind_second_step:
+	call g24_fetch_mem_rxdata_temp_add3_1byte
+	beq BIND_MOUSE,g24_dongle_bind_second_step_mouse
+	beq BIND_KEYBOARD,g24_dongle_bind_second_step_keyboard
+	rtn
+g24_dongle_bind_second_step_mouse:
+	call g24_dongle_bind_ms_payload_cfg
+	setarg offset_dongle_ms_bind_step
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_dongle_ms_bind_step
+	beq 1,g24_dongle_ms_bind_step_set2
+	rtn
+g24_dongle_ms_bind_step_set2:
+	setarg 2
+	//jam 2,mem_dongle_ms_bind_step
+g24_store_mem_ms_bind_step:
+	arg offset_dongle_ms_bind_step,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_dongle_bind_second_step_keyboard:
+	call g24_dongle_bind_kb_payload_cfg
+	setarg offset_dongle_kb_bind_step
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_dongle_kb_bind_step
+	beq 1,g24_dongle_kb_bind_step_set2
+	rtn
+g24_dongle_kb_bind_step_set2:
+	setarg 2
+	//jam 2,mem_dongle_kb_bind_step
+g24_store_mem_kb_bind_step:
+	arg offset_dongle_kb_bind_step,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_dongle_bind_third_step:
+	call g24_fetch_mem_rxdata_temp_add3_1byte
+	beq BIND_MOUSE,g24_dongle_bind_third_step_mouse
+	beq BIND_KEYBOARD,g24_dongle_bind_third_step_keyboard
+	rtn
+g24_dongle_bind_third_step_mouse:
+	setarg offset_dongle_ms_bind_step
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_dongle_ms_bind_step
+	beq 2,g24_dongle_ms_bind_step_success
+	rtn
+g24_dongle_ms_bind_step_success:
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	or_into 0x01,pdata
+	call g24_store_mem_bind_device_status
+	//store 1,mem_dongle_bind_device_status
+g24_dongle_bind_exit:	
+	setarg 0
+	setarg offset_dongle_ms_bind_step
+	iadd regc,contw
+	istore 2,contw
+	branch g24_rx_interrupt_clear
+
+g24_dongle_bind_third_step_keyboard:
+	setarg offset_dongle_kb_bind_step
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_dongle_kb_bind_step
+	bne 0,g24_dongle_kb_bind_step_success
+	rtn
+g24_dongle_kb_bind_step_success:
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	or_into 0x02,pdata
+	call g24_store_mem_bind_device_status
+	//store 1,mem_dongle_bind_device_status
+	branch g24_dongle_bind_exit
+
+	
+dongle_usb_dispatch:
+	fetch 1,mem_usb0_get_set_report
+	rtn blank
+	jam 0,mem_usb0_get_set_report
+	fetch 2,mem_usb_setup_bValue_temp
+	arg PC_SET_REPORT,temp
+	isub temp,null
+	nrtn zero
+	//get usb host command
+	fetch 1,mem_usb0_set_report_data
+	rtnne PC_REPORT_ID
+	fetch 1,mem_usb0_set_report_data+1
+	bpatch patch17_6,mem_patch17
+	beq COMMAND_MODE,dongle_dispose_cmd_mode
+	beq COMMAND_BIND,dongle_dispose_cmd_bind
+	beq COMMAND_CURRENT_PROJECT,dongle_dispose_cmd_current_project
+	beq COMMAND_CURRENT_MODE,dongle_dispose_cmd_current_mode
+	beq COMMAND_CURRENT_FW_VERSION,dongle_dispose_cmd_current_fw_version
+	beq COMMAND_USER_DEFINED,dongle_dispose_cmd_user_defined
+usb0_data_ready_report_set0:
+	jam 0,mem_usb0_data_ready_report
+	rtn
+dongle_dispose_cmd_bind:
+	fetch 1,mem_usb0_set_report_data+2
+	beq COM_BIND_GET,dongle_dispose_cmd_get_bind
+	beq COM_BIND_EXIT,dongle_dispose_cmd_exit_bind
+	beq COM_READ_MODE,dongle_dispose_cmd_read_mode
+	branch usb0_data_ready_report_set0
+dongle_dispose_cmd_get_bind:
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	store 1,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+dongle_dispose_cmd_exit_bind:
+	call g24_set_work_mem_dongle_work_mode
+	//jam DONGLE_WORK,mem_dongle_work_mode
+	call g24_set0_mem_dongle_mode_init
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	store 1,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_read_mode:
+dongle_dispose_in_bind_mode:
+	jam COMMAND_BIND,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_mode:
+	fetch 1,mem_usb0_set_report_data+2
+	beq COM_MODE_BIND,dongle_enter_bind_mode
+//	beq COM_MODE_TEST,dongle_enter_test_mode
+	branch usb0_data_ready_report_set0
+dongle_enter_bind_mode:
+	//jam DONGLE_BIND,mem_dongle_work_mode
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	call g24_bind_mode_enable
+usb0_data_ready_report_set1:
+	jam 1,mem_usb0_data_ready_report
+	rtn
+//dongle_enter_test_mode:
+//	jam DONGLE_TEST,mem_dongle_work_mode
+//	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_current_project:
+	jam PRODUCT_ID,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_current_mode:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	beq DONGLE_WORK,dongle_dispose_in_work_mode
+	beq DONGLE_BIND,dongle_dispose_in_bind_mode
+//	beq DONGLE_TEST,dongle_dispose_in_test_mode
+	rtn
+dongle_dispose_in_work_mode:
+	jam COMMAND_MODE,mem_usb0_get_report_data+1
+	branch usb0_data_ready_report_set1
+//dongle_dispose_in_test_mode:
+//	jam COMMAND_TEST,mem_usb0_get_report_data+1
+//	branch usb0_data_ready_report_set1
+	
+dongle_dispose_cmd_current_fw_version:
+	jam FW_VERSION0,mem_usb0_get_report_data+1
+	jam FW_VERSION1,mem_usb0_get_report_data+2
+	jam FW_VERSION2,mem_usb0_get_report_data+3
+	branch usb0_data_ready_report_set1
+
+dongle_dispose_cmd_user_defined:
+	//report_id|cmd|data_len|data
+	call g24_set1_mem_ackpayload_enable
+	fetch 1,mem_usb0_set_report_data+2	//data_len:max 30bytes
+	increase 2,pdata
+	copy pdata,loopcnt
+	arg mem_usb0_set_report_data,contr
+	setarg offset_24g_ackpayload
+	iadd regc,contw
+	branch memcpy
+
+
+dongle_auto_bind:
+	bpatch patch17_7,mem_patch17
+	call g24_mode_switch_init
+dongle_auto_bind_loop:
+	call g24_receive_process
+	call usb_isr
+	branch dongle_auto_bind_loop
+
+g24_dongle_work_mode_auto:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_WORK
+	call g24_dongle_work_mode_start
+	branch g24_rx_nodata_process
+
+g24_dongle_bind_mode_auto:
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_BIND
+	call g24_dongle_bind_init
+	call g24_dongle_bind_data_process
+	call g24_fetch_mem_bind_device_status
+	//fetch 1,mem_dongle_bind_device_status
+	rtn blank
+	call g24_set0_mem_mode_switch
+	//jam 0,mem_24g_mode_switch
+	call dongle_check_mode
+	call g24_enable_nodata_timer
+g24_timer_init:
+	setarg 0
+	add regc,offset_24g_tx_btclk,contw
+	//store 4,mem_24g_tx_btclk
+	branch g24_contw_istore_4byte
+
+g24_timer_check:
+	call disable_user
+	add regc,offset_24g_tx_btclk,rega
+	ifetcht 4,rega	
+	//fetcht 4,mem_24g_tx_btclk
+	copy clkn_bt,pdata
+	isub temp,null
+	ncall g24_timer_timeout,positive
+	copy pdata,regb
+	add regc,offset_24g_tx_btclk,rega
+	ifetch 4,rega
+	//fetch 4,mem_24g_tx_btclk
+	add regc,offset_24g_interval,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_24g_interval
+	iadd temp,temp
+	copy regb,pdata
+	isub temp,null
+	nrtn positive
+	set0 28,pdata
+	add regc,offset_24g_tx_btclk,contw
+	istore 4,contw
+	//store 4,mem_24g_tx_btclk
+	branch enable_user
+
+g24_mode_switch_init:
+	setarg 1
+	call g24_store_mem_mode_switch
+	//jam 1,mem_24g_mode_switch
+	call g24_set0_mem_time_slice
+	//jam 0,mem_24g_time_slice
+	setarg 0xff
+	add regc,offset_24g_interval,contw
+	istore 1,contw
+	//jam 0xff,mem_24g_interval
+	branch g24_timer_init
+
+g24_mode_switch:
+	setarg offset_24g_mode_switch
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_mode_switch
+	rtn blank
+	call g24_timer_check
+	nrtn user
+	call g24_fetch_mem_time_slice
+	//fetch 1,mem_24g_time_slice
+	increase 1,pdata
+	and_into 1,pdata
+	call g24_store_mem_time_slice
+	//store 1,mem_24g_time_slice
+	beq 0,dongle_check_mode
+	beq 1,g24_bind_mode_enable
+	rtn
+
+g24_bind_mode_enable:
+	//jam DONGLE_BIND,mem_dongle_work_mode
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	//rtn
+	setarg DONGLE_BIND
+	call g24_store_mem_dongle_work_mode
+	branch g24_set0_mem_dongle_mode_init
+
+g24_enable_nodata_timer:
+	setarg 1
+	call g24_store_mem_nodata_timer_enable
+	//jam 1,mem_24g_nodata_timer_enable
+g24_enable_nodata_timer_init:
+	setarg TIMER_NODATA_DELAY
+	arg TIMER_NODATA,queue
+	branch timer_init
+
+g24_rx_nodata_process:
+	call g24_fetch_mem_nodata_timer_enable
+	//fetch 1,mem_24g_nodata_timer_enable
+	rtn blank
+	arg TIMER_NODATA,queue
+	call timer_check
+	nrtn blank
+	call g24_set0_mem_nodata_timer_enable
+	//jam 0,mem_24g_nodata_timer_enable
+	//no data for more than 100ms,then go to search
+	setarg DONGLE_SEARCH
+	call g24_store_mem_dongle_work_mode	
+	//jam DONGLE_SEARCH,mem_dongle_work_mode
+	call g24_set0_mem_dongle_mode_init
+	//jam CLEAR_INIT,mem_dongle_mode_init
+	branch g24_rx_interrupt_clear
+
+g24_dongle_search_mode_auto:
+	bpatch patch18_0,mem_patch18
+	call g24_fetch_mem_dongle_work_mode
+	//fetch 1,mem_dongle_work_mode
+	rtnne DONGLE_SEARCH
+	call g24_dongle_search_mode_init
+	call g24_rx_auto_addr_ch_search
+	call g24_receive_transmit_ack
+	nbranch g24_rx_interrupt_clear,user3
+	//dongle addr,then parse rxdata
+	call g24_dongle_search_addr_check
+	call g24_receive_packet_parse,zero
+	//receive data,then go to paired
+	//jam DONGLE_WORK,mem_dongle_work_mode
+	//jam 0,mem_24g_ackpayload_enable
+	call dongle_check_mode
+	call g24_fetch_mem_dongle_mode_init
+	//fetch 1,mem_dongle_mode_init
+	set1 DONGLE_WORK,pdata
+	call g24_store_mem_dongle_mode_init
+	//store 1,mem_dongle_mode_init
+	call g24_rx_interrupt_clear
+	call g24_enable_nodata_timer
+	call g24_dongle_search_addr_check
+	branch g24_dg_ch_num_reinit,zero
+	setarg offset_24g_kb_addr
+	call g24_set_rega_ifetcht_4byte
+	//fetcht 4,mem_24g_kb_addr
+	call g24_fetch_mem_addr_isub_temp
+	branch g24_kb_ch_num_reinit,zero		
+	setarg offset_24g_mouse_addr
+	call g24_set_rega_ifetcht_4byte
+	//fetcht 4,mem_24g_mouse_addr
+	call g24_fetch_mem_addr_isub_temp
+	branch g24_ms_ch_num_reinit,zero
+	rtn
+
+g24_dongle_search_addr_check:
+	setarg offset_24g_rx_addr
+	call g24_set_rega_ifetcht_4byte
+	//fetcht 4,mem_24g_rx_addr
+g24_fetch_mem_addr_isub_temp:
+	call g24_fetch_mem_addr
+	//fetch 4,mem_24g_addr
+	isub temp,null
+	rtn
+
+g24_dg_ch_num_reinit:
+	setarg offset_24g_dg_ch_number
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_dg_ch_number
+g24_current_ch_num_reinit:
+	//store 1,mem_24g_current_ch_number
+	add regc,offset_24g_current_ch_number,contw
+	branch g24_contw_istore_1byte
+
+g24_kb_ch_num_reinit:
+	setarg offset_24g_kb_ch_number
+	call g24_set_rega_ifetch_1byte	
+	//fetch 1,mem_24g_kb_ch_number
+	branch g24_current_ch_num_reinit
+g24_ms_ch_num_reinit:
+	setarg offset_24g_ms_ch_number
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ms_ch_number
+	branch g24_current_ch_num_reinit
+
+g24_dongle_search_mode_init:
+	call g24_fetch_mem_dongle_mode_init
+	//fetch 1,mem_dongle_mode_init
+	rtnbit1 DONGLE_SEARCH
+	set1 DONGLE_SEARCH,pdata
+	call g24_store_mem_dongle_mode_init
+	//store 1,mem_dongle_mode_init
+	call g24_set0_mem_time_slice
+	//jam 0,mem_24g_time_slice
+	call g24_set1_mem_ackpayload_enable
+	//jam 1,mem_24g_ackpayload_enable
+	setarg 0
+	add regc,offset_rssi_noise_dg_index,contw
+	istore 3,contw
+	//store 3,mem_rssi_noise_dg_index
+	arg offset_24g_dg_config_ch_once,rega
+	call g24_set_contw_with_temp
+	istore 7,contw
+	//store 7,mem_24g_dg_config_ch_once
+
+	call g24_dongle_search_addr_check
+	nrtn zero
+	add regc,offset_24g_current_ch_number,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_current_ch_number
+	arg offset_24g_dg_ch_number,rega
+	call g24_set_contw_with_regb_store_1byte
+	//store 1,mem_24g_dg_ch_number
+	add regc,offset_24g_ch,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_ch
+	//store 1,mem_24g_dg_last_ch
+	branch g24_store_mem_dg_last_ch
+
+g24_rx_auto_addr_ch_search:
+	bpatch patch18_1,mem_patch18
+	call g24_fetch_mem_time_slice
+	//fetch 1,mem_24g_time_slice
+	increase 1,pdata
+	and_into 3,pdata
+	call g24_store_mem_time_slice
+	//store 1,mem_24g_time_slice
+	//pairing address and channel come first
+	beq 0,g24_rx_auto_bind_config_kb
+	beq 1,g24_rx_auto_bind_config_dongle
+	beq 2,g24_rx_auto_bind_config_mouse
+	beq 3,g24_rx_auto_bind_config_dongle
+	rtn
+
+g24_rx_auto_bind_config_mouse:
+	call g24_dongle_bind_ms_payload_cfg
+	setarg offset_24g_mouse_addr
+	call g24_set_rega_ifetch_4byte
+	//fetch 4,mem_24g_mouse_addr
+	branch g24_rx_auto_addr_ch_search,blank
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	setarg offset_24g_ms_config_ch_once
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ms_config_ch_once
+	call g24_ms_config_ch_once,blank
+	setarg offset_24g_ms_last_ch
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ms_last_ch
+	call g24_store_mem_ch
+	//store 1,mem_24g_ch
+	add regc,offset_rssi_noise_ms_index,rega
+	ifetcht 1,rega
+	//fetcht 1,mem_rssi_noise_ms_index
+	arg mem_rssi_noise_ms_buffer,rega
+	call rssi_noise_store
+	add regc,offset_rssi_noise_ms_index,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_ms_index
+	call g24_noise_rssi_average
+	add regc,offset_rssi_noise_ms_avg,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_ms_avg
+	sub temp,RSSI_THRESH_NOISE,null
+	nrtn positive
+	setarg offset_24g_ms_ch_number	
+	call g24_set_rega_ifetcht_1byte
+	//fetcht 1,mem_24g_ms_ch_number
+	call g24_ch_temp_incre_size4 //map size =4
+	arg offset_24g_ms_ch_number,rega
+	call g24_set_contw_with_regb2
+	istoret 1,contw
+	//storet 1,mem_24g_ms_ch_number
+g24_store_mem_ms_last_ch:
+	//store 1,mem_24g_ms_last_ch
+	arg offset_24g_ms_last_ch,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_ms_config_ch_once:
+	setarg 1
+	arg offset_24g_ms_config_ch_once,rega
+	call g24_set_contw_with_regb_store_1byte
+	//jam 1,mem_24g_ms_config_ch_once
+	arg 0,temp
+	call g24_ch_calc
+	//store 1,mem_24g_ms_last_ch
+	//rtn
+	branch g24_store_mem_ms_last_ch
+	
+g24_rx_auto_bind_config_kb:
+	call g24_dongle_bind_kb_payload_cfg
+	setarg offset_24g_kb_addr
+	call g24_set_rega_ifetch_4byte
+	//fetch 4,mem_24g_kb_addr
+	branch g24_rx_auto_addr_ch_search,blank
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	setarg offset_24g_kb_config_ch_once
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_kb_config_ch_once
+	call g24_kb_config_ch_once,blank
+	setarg offset_24g_kb_last_ch
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_kb_last_ch
+	call g24_store_mem_ch
+	//store 1,mem_24g_ch
+	add regc,offset_rssi_noise_kb_index,rega
+	ifetcht 1,rega	
+	//fetcht 1,mem_rssi_noise_kb_index
+	arg mem_rssi_noise_kb_buffer,rega
+	call rssi_noise_store
+	add regc,offset_rssi_noise_kb_index,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_kb_index
+	call g24_noise_rssi_average
+	add regc,offset_rssi_noise_kb_avg,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_kb_avg
+	sub temp,RSSI_THRESH_NOISE,null
+	nrtn positive
+	setarg offset_24g_kb_ch_number	
+	call g24_set_rega_ifetcht_1byte	
+	//fetcht 1,mem_24g_kb_ch_number
+	call g24_ch_temp_incre_size4 //map size =4
+	arg offset_24g_kb_ch_number,rega
+	call g24_set_contw_with_regb2	
+	istoret 1,contw
+	//storet 1,mem_24g_kb_ch_number
+g24_store_mem_kb_last_ch:
+	//store 1,mem_24g_kb_last_ch
+	arg offset_24g_kb_last_ch,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_kb_config_ch_once:
+	setarg 1
+	arg offset_24g_kb_config_ch_once,rega
+	call g24_set_contw_with_regb_store_1byte
+	//jam 1,mem_24g_kb_config_ch_once
+	arg 0,temp
+	call g24_ch_calc
+	//store 1,mem_24g_kb_last_ch
+	//rtn
+	branch g24_store_mem_kb_last_ch
+
+g24_rx_auto_bind_config_dongle:
+	call g24_dongle_bind_ms_payload_cfg
+	call g24_fetch_mem_rx_addr
+	//fetch 4,mem_24g_rx_addr
+	call g24_store_mem_addr
+	//store 4,mem_24g_addr
+	setarg offset_24g_dg_config_ch_once
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_dg_config_ch_once
+	call g24_dg_config_ch_once,blank
+	call g24_dg_store_config_ch
+	add regc,offset_rssi_noise_dg_index,rega
+	ifetcht 1,rega	
+	//fetcht 1,mem_rssi_noise_dg_index
+	arg mem_rssi_noise_dg_buffer,rega
+	call rssi_noise_store
+	add regc,offset_rssi_noise_dg_index,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_dg_index
+	call g24_noise_rssi_average
+	add regc,offset_rssi_noise_dg_avg,contw
+	istoret 1,contw
+	//storet 1,mem_rssi_noise_dg_avg
+	sub temp,RSSI_THRESH_NOISE,null
+	nrtn positive
+	setarg offset_24g_dg_ch_number	
+	call g24_set_rega_ifetcht_1byte	
+	//fetcht 1,mem_24g_dg_ch_number
+	call g24_ch_temp_incre_size4 //map size =4
+	arg offset_24g_dg_ch_number,rega
+	call g24_set_contw_with_regb2
+	istoret 1,contw
+	//storet 1,mem_24g_dg_ch_number
+g24_store_mem_dg_last_ch:
+	//store 1,mem_24g_dg_last_ch
+	//rtn
+	arg offset_24g_dg_last_ch,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+
+g24_dg_config_ch_once:
+	//jam 1,mem_24g_dg_config_ch_once
+	//fetch 1,mem_24g_dg_last_ch
+	//store 1,mem_24g_ch
+	//rtn
+	setarg 1
+	arg offset_24g_dg_config_ch_once,rega
+	call g24_set_contw_with_regb_store_1byte
+g24_dg_store_config_ch:
+	setarg offset_24g_dg_last_ch
+	call g24_set_rega_ifetch_1byte
+	branch g24_store_mem_ch
+
+
+g24_transmit_ack:
+//data type
+	add regc,offset_24g_rxbuf,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rxbuf
+	call g24_store_mem_data_type
+	//store 1,mem_24g_data_type
+//read len pid crc
+	call g24_read_len_pid_crc
+//read ack
+	call g24_fetch_mem_rxbuf_add1
+	//fetch 1,mem_24g_rxbuf+1
+	isolate1 bit_ack_24g,pdata
+	branch g24tx_no_ack,true
+g24tx_with_ack:
+	call g24_ackpayload_prep
+	call g24_transmit_prep
+	call g24_transmit
+g24tx_no_ack:
+	branch g24_end_of_packet
+
+g24_ackpayload_prep:
+	bpatch patch18_2,mem_patch18
+	add regc,offset_24g_datalen,contw
+	call g24_mem_set0
+	//jam 0,mem_24g_datalen
+	setarg offset_24g_ackpayload_enable
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_ackpayload_enable
+	rtn blank
+	setarg 0x06
+	add regc,offset_24g_datalen,contw
+	istore 1,contw
+	//jam 0x06,mem_24g_datalen
+	arg 0x06,loopcnt
+	setarg offset_24g_bind_payload
+	iadd regc,contr
+	//arg mem_24g_bind_payload,contr
+	add regc,offset_24g_txbuf,contw
+	//arg mem_24g_txbuf,contw
+	branch memcpy
+
+
+g24_receive_packet_start:
+	call g24_receive_transmit_ack
+	nbranch g24_rx_interrupt_clear,user3
+	branch g24_receive_packet_parse
+
+g24_receive_transmit_ack:
+	call g24_rx_interrupt_clear
+	call g24_receive_packet
+	nrtn user3
+	branch g24_transmit_ack
+
+g24_receive_packet_parse:
+	bpatch patch18_3,mem_patch18
+	call g24_receive_packet_parse_pid_crc
+	nbranch g24_rx_interrupt_clear,user
+	add regc,offset_24g_rxdata_length,rega
+	ifetch 1,rega
+	//fetch 1,mem_24g_rxdata_length
+	branch g24_rx_interrupt_clear,blank
+	increase 2,pdata
+	iforce loopcnt
+	add regc,offset_24g_rxbuf,contr
+	//arg mem_24g_rxbuf,contr
+	setarg offset_24g_rxdata_temp
+	iadd regc,contw
+	//arg mem_24g_rxdata_temp,contw
+	call memcpy
+	call g24_set0_mem_mode_switch
+	//jam 0,mem_24g_mode_switch
+	call g24_fetch_mem_pair_mode
+	//fetch 1,mem_24g_pair_mode
+	call g24_enable_nodata_timer,blank
+	setarg offset_24g_rxdata_temp_add2
+	call g24_set_rega_ifetch_1byte
+	//fetch 1,mem_24g_rxdata_temp+2
+	beq 0x01,g24_data_type1
+	beq 0x02,g24_data_type2
+	beq 0x03,g24_data_type3
+	beq 0xff,g24_data_attemp
+	branch g24_rx_interrupt_clear
+
+g24_receive_packet_parse_pid_crc:
+	call g24_head_ptr2regc
+	call disable_user
+	add regc,offset_24g_sta_pid,rega
+	ifetch 1,rega		
+	//fetch 1,mem_24g_sta_pid
+	add regc,offset_24g_last_pid,rega
+	ifetcht 1,rega		
+	//fetcht 1,mem_24g_last_pid
+	isub temp,null
+	ncall enable_user,zero
+	add regc,offset_24g_sta_pid,rega
+	ifetch 1,rega	
+	//fetch 1,mem_24g_sta_pid
+	add regc,offset_24g_last_pid,contw
+	istore 1,contw	
+	//store 1,mem_24g_last_pid
+	add regc,offset_24g_sta_crc,rega
+	ifetch 3,rega	
+	//fetch 3,mem_24g_sta_crc
+	add regc,offset_24g_last_crc,rega
+	ifetcht 3,rega	
+	//fetcht 3,mem_24g_last_crc
+	isub temp,null
+	ncall enable_user,zero
+	add regc,offset_24g_sta_crc,rega
+	ifetch 3,rega
+	//fetch 3,mem_24g_sta_crc
+	add regc,offset_24g_last_crc,contw
+	//store 3,mem_24g_last_crc
+	branch g24_contw_istore_3byte
+
+g24_data_type1:
+	call g24_ch_timer_reinit
+	call g24_fetch_mem_abort_pac
+	store 1,mem_temp
+	//fetch 1,mem_24g_abort_pac
+	call g24_fetcht_mem_rxdata_temp
+	fetch 1,mem_temp
+	//fetcht 1,mem_24g_rxdata_temp
+	isolate1 bit_abort,temp
+	setflag true,0,pdata
+	add regc,offset_24g_abort_pac,contw
+	istore 1,contw
+	//store 1,mem_24g_abort_pac
+	beq 1,g24_data_attemp_mouse
+	call g24_fetch_mem_hop_pac
+	//fetch 1,mem_24g_hop_pac
+	call g24_fetcht_mem_rxdata_temp
+	//fetcht 1,mem_24g_rxdata_temp
+	isolate1 bit_hop,temp
+	setflag true,0,pdata
+	call g24_store_mem_hop_pac
+	//store 1,mem_24g_hop_pac
+	add regc,offset_24g_cb_rxdata_type1,rega
+	ifetch 2,rega
+	//fetch 2,mem_24g_cb_rxdata_type1
+	branch callback_func
+
+dongle_rxdata_type1:
+	setarg MS_REPORT_ID
+	store 1,mem_usb_mouse_data	//report id
+	call g24_fetch_mem_rxdata_temp_add3_7byte
+	//fetch 7,mem_24g_rxdata_temp+3	//key
+	istore 7,contw
+	call g24_fetch_mem_rxdata_temp_add3_7byte
+	//fetch 7,mem_24g_rxdata_temp+3	//key
+	ncall g24_ms_enable_blank_data_forcibly,blank//get kb data
+	call g24_fetch_mem_rxdata_temp_add3_7byte
+	//fetch 7,mem_24g_rxdata_temp+3	//key
+	call g24_ms_disable_blank_data_forcibly,blank
+g24_data_type1_usbtx_enable:
+	jam USB_EP2_MS,mem_usb_ep2_data
+g24_data_type1_usbtx_enable_ep2:	
+	fetch 1,mem_usb_tx_enable
+	set1 2,pdata
+	store 1,mem_usb_tx_enable
+	rtn
+	
+g24_ms_enable_blank_data_forcibly:
+	setarg 1
+	call g24_store_mem_ms_blank_data_enable	
+	//jam 1,mem_24g_ms_blank_data_enable
+g24_ms_enable_blank_data_timer:
+	setarg TIMER_MS_BLANK_DELAY
+	arg TIMER_MS_BLANK,queue
+	branch timer_init
+g24_ms_disable_blank_data_forcibly:
+	call g24_set0_mem_ms_blank_data_enable
+	//jam 0,mem_24g_ms_blank_data_enable
+g24_ms_disable_blank_data_timer:	
+	setarg 0
+	arg TIMER_MS_BLANK,queue
+	branch timer_init
+	
+g24_data_type2:
+	call g24_fetcht_mem_rxdata_temp
+	//fetcht 1,mem_24g_rxdata_temp
+	isolate1 bit_abort,temp
+	branch g24_data_attemp_kbd,true
+	arg mem_usb_kb_data,contw
+	call g24_data_type2_reverse_data
+	fetch 8,mem_usb_kb_data
+	ncall g24_kb_enable_blank_data_forcibly,blank//get kb data
+	fetch 8,mem_usb_kb_data
+	call g24_kb_disable_blank_data_forcibly,blank
+	call g24_head_ptr2regc
+	fetch 8,mem_usb_kb_data
+	arg offset_24g_kb_data_sta_data,rega
+	call g24_set_contw_with_temp
+	istore 8,contw
+	//store 8,mem_24g_kb_data_sta_data
+	setarg offset_24g_kb_data_last_data
+	iadd regc,rega
+	ifetcht 8,rega
+	//fetcht 8,mem_24g_kb_data_last_data
+	isub temp,null
+	ncall g24_kb_data_dispose,zero
+	setarg offset_24g_kb_data_sta_data
+	iadd regc,rega
+	ifetch 8,rega
+	//fetch 8,mem_24g_kb_data_sta_data
+	arg offset_24g_kb_data_last_data,rega
+	call g24_set_contw_with_temp
+	istore 8,contw
+	//store 8,mem_24g_kb_data_last_data
+	branch g24_rx_interrupt_clear
+
+g24_data_type2_reverse_data:
+	setarg offset_24g_rxdata_temp_add2
+	iadd regc,contr
+	//arg mem_24g_rxdata_temp+2,contr
+	arg 9,loopcnt
+	branch reverse_byte
+
+g24_kb_enable_blank_data_forcibly:
+	setarg 1
+	call g24_store_mem_kb_blank_data_enable
+	//jam 1,mem_24g_kb_blank_data_enable
+g24_kb_enable_blank_data_timer:	
+	setarg TIMER_KB_BLANK_DELAY
+	arg TIMER_KB_BLANK,queue
+	branch timer_init
+
+g24_kb_disable_blank_data_forcibly:
+	call g24_set0_mem_kb_blank_data_enable
+	//jam 0,mem_24g_kb_blank_data_enable
+g24_kb_disable_blank_data_timer:	
+	setarg 0
+	arg TIMER_KB_BLANK,queue
+	branch timer_init
+
+g24_kb_data_dispose:
+g24_kb_data_into_ep1_fifo:
+	jam USB_EP1_KB,mem_usb_ep1_data
+	fetch 1,mem_usb_tx_enable
+	set1 1,pdata
+	store 1,mem_usb_tx_enable
+	rtn
+
+g24_data_type3:
+	arg mem_usb_kb_multikey,contw
+	call g24_data_type2_reverse_data
+	fetch 2,mem_usb_kb_multikey+1
+	ncall g24_kb_mul_enable_blank_data_forcibly,blank//get multikey data
+	fetch 2,mem_usb_kb_multikey+1
+	call g24_kb_mul_disable_blank_data_forcibly,blank
+	call g24_head_ptr2regc
+	fetch 3,mem_usb_kb_multikey
+	arg offset_24g_kb_multikey_sta_data,rega
+	call g24_set_contw_with_temp_store_3byte
+	//store 3,mem_24g_kb_multikey_sta_data
+	setarg offset_24g_kb_multikey_last_data
+	iadd regc,rega
+	ifetcht 3,rega
+	//fetcht 3,mem_24g_kb_multikey_last_data
+	isub temp,null
+	ncall g24_kb_mul_data_into_ep2_fifo,zero
+	setarg offset_24g_kb_multikey_sta_data
+	iadd regc,rega
+	ifetch 3,rega
+	//fetch 3,mem_24g_kb_multikey_sta_data
+	arg offset_24g_kb_multikey_last_data,rega
+	call g24_set_contw_with_temp_store_3byte
+	//store 3,mem_24g_kb_multikey_last_data
+	branch g24_rx_interrupt_clear
+
+g24_kb_mul_data_into_ep2_fifo:
+	jam USB_EP2_MULTIKEY,mem_usb_ep2_data
+	branch g24_data_type1_usbtx_enable_ep2
+
+g24_kb_mul_enable_blank_data_forcibly:
+	setarg 1
+	call g24_store_mem_kb_mul_blank_data_enable
+	//jam 1,mem_24g_kb_mul_blank_data_enable
+g24_kb_mul_enable_blank_data_timer:	
+	setarg TIMER_KB_MUL_BLANK_DELAY
+	arg TIMER_KB_MUL_BLANK,queue
+	branch timer_init
+
+g24_kb_mul_disable_blank_data_forcibly:
+	call g24_set0_mem_kb_mul_blank_data_enable
+	//jam 0,mem_24g_kb_mul_blank_data_enable
+g24_kb_mul_disable_blank_data_timer:	
+	setarg 0
+	arg TIMER_KB_MUL_BLANK,queue
+	branch timer_init
+	
+g24_data_attemp:
+	call g24_fetch_mem_rxdata_temp_add3_1byte
+	//fetch 1,mem_24g_rxdata_temp+3
+	beq DATATYPE_MOUSE,g24_data_attemp_mouse
+	beq DATATYPE_KEYBOARD,g24_data_attemp_kbd
+	rtn
+g24_data_attemp_mouse:
+	setarg offset_24g_rxdata_temp_add4
+	call g24_set_rega_ifetch_4byte
+	arg offset_24g_mouse_addr,rega
+	call g24_set_contw_with_temp
+	//fetch 4,mem_24g_rxdata_temp+4
+	//store 4,mem_24g_mouse_addr
+	branch g24_contw_istore_4byte
+
+g24_data_attemp_kbd:
+	setarg offset_24g_rxdata_temp_add4
+	call g24_set_rega_ifetch_4byte
+	arg offset_24g_kb_addr,rega
+	call g24_set_contw_with_temp
+	//fetch 4,mem_24g_rxdata_temp+4
+	//store 4,mem_24g_kb_addr
+	branch g24_contw_istore_4byte
+
+g24_store_mem_24g_mode:
+	call g24_head_ptr2regc
+	add regc,offset_24g_mode,contw
+	istore 1,contw
+	rtn
+
+g24_fetch_mem_device_addr:
+	call g24_head_ptr2regc
+	add regc,offset_24g_device_addr,rega
+	branch g24_rega_ifetch_4byte
+g24_store_mem_device_addr:
+	call g24_head_ptr2regc
+	add regc,offset_24g_device_addr,contw
+	branch g24_contw_istore_4byte
+
+g24_fetch_mem_addr:
+	add regc,offset_24g_addr,rega
+	branch g24_rega_ifetch_4byte
+g24_store_mem_addr:
+	add regc,offset_24g_addr,contw
+g24_contw_istore_4byte:	
+	istore 4,contw
+	rtn
+
+g24_store_mem_ch:
+	add regc,offset_24g_ch,contw
+	branch g24_contw_istore_1byte
+
+g24_set0_mem_pid:
+	setarg 0
+g24_store_mem_pid:
+	call g24_head_ptr2regc
+	add regc,offset_24g_pid,contw
+	branch g24_contw_istore_1byte
+
+g24_store_mem_txpayload:
+	add regc,offset_24g_txpayload,contw
+	branch g24_contw_istore_1byte
+
+g24_set4_mem_max_retry:
+	setarg 4
+g24_store_mem_max_retry:
+	add regc,offset_24g_max_retry,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_data_type:
+	add regc,offset_24g_data_type,rega
+	branch g24_rega_ifetch_1byte
+g24_store_mem_data_type:
+	add regc,offset_24g_data_type,contw
+	branch g24_contw_istore_1byte
+
+g24_set2_mem_sync_cnt:
+	setarg 2
+g24_store_mem_sync_cnt:
+	add regc,offset_24g_sync_cnt,contw
+	branch g24_contw_istore_1byte
+
+g24_set1_mem_rf_last_sta:
+	setarg 1
+g24_store_mem_rf_last_sta:
+	call g24_head_ptr2regc
+	add regc,offset_24g_rf_last_sta,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_hop_pac:
+	call g24_head_ptr2regc
+	add regc,offset_24g_hop_pac,rega
+	branch g24_rega_ifetch_1byte
+g24_set1_mem_hop_pac:
+	setarg 1
+g24_store_mem_hop_pac:
+	call g24_head_ptr2regc
+	add regc,offset_24g_hop_pac,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_abort_pac:
+	call g24_head_ptr2regc
+	add regc,offset_24g_abort_pac,rega
+	branch g24_rega_ifetch_1byte
+g24_set1_mem_abort_pac:
+	setarg 1
+g24_store_mem_abort_pac:
+	call g24_head_ptr2regc
+	add regc,offset_24g_abort_pac,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_pairing_sm:
+	call g24_head_ptr2regc
+	add regc,offset_24g_pairing_sm,rega
+	branch g24_rega_ifetch_1byte
+g24_store_mem_pairing_sm:
+	add regc,offset_24g_pairing_sm,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_rf_hop_ch:
+	add regc,offset_24g_rf_hop_ch,rega
+	branch g24_rega_ifetch_1byte
+g24_set0_mem_rf_hop_ch:
+	setarg 0
+g24_store_mem_rf_hop_ch:
+	add regc,offset_24g_rf_hop_ch,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_rf_work_stage:
+	add regc,offset_24g_rf_work_stage,rega
+	branch g24_rega_ifetch_1byte
+	
+g24_fetch_mem_rxbuf_add1:
+	add regc,offset_24g_rxbuf_add1,rega
+	branch g24_rega_ifetch_1byte
+
+g24_fetch_mem_check_dongle_times:
+	add regc,offset_24g_check_dongle_times,rega
+	branch g24_rega_ifetch_1byte
+g24_set0_mem_check_dongle_times:
+	setarg 0
+g24_store_mem_check_dongle_times:
+	call g24_head_ptr2regc
+	add regc,offset_24g_check_dongle_times,contw
+	branch g24_contw_istore_1byte
+
+g24_store_mem_tx_power:
+	call g24_head_ptr2regc
+	add regc,offset_tx_power_temp,rega
+	ifetch 1,rega
+g24_store_mem_txpower:
+	store 1,mem_tx_power
+	rtn
+
+g24_store_mem_tx_power_temp:
+	call g24_head_ptr2regc
+	fetch 1,mem_tx_power
+	//store 1,mem_tx_power_temp
+	add regc,offset_tx_power_temp,contw
+	branch g24_contw_istore_1byte
+
+g24_fetch_mem_power_ctrl_pac:	
+	add regc,offset_power_ctrl_packet_cnt,rega
+	branch g24_rega_ifetch_1byte
+
+g24_store_mem_power_ctrl_level:
+	add regc,offset_power_ctrl_level,contw
+	branch g24_contw_istore_1byte
+
+g24_fetcht_mem_rxdata_temp:
+	setarg offset_24g_rxdata_temp
+g24_set_rega_ifetcht_1byte:	
+	iadd regc,rega
+	ifetcht 1,rega
+	rtn
+
+g24_fetch_mem_rf_laststa:
+	setarg offset_24g_rf_laststa
+	branch g24_set_rega_ifetch_1byte
+g24_set0_mem_rf_laststa:
+	setarg 0
+g24_store_mem_rf_laststa:
+	arg offset_24g_rf_laststa,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_fetch_mem_rx_addr:
+	setarg offset_24g_rx_addr
+g24_set_rega_ifetch_4byte:	
+	call g24_set_rega
+g24_rega_ifetch_4byte:
+	ifetch 4,rega
+	rtn
+
+g24_fetch_mem_time_slice:
+	setarg offset_24g_time_slice
+	branch g24_set_rega_ifetch_1byte
+g24_set0_mem_time_slice:
+	setarg 0
+g24_store_mem_time_slice:
+	arg offset_24g_time_slice,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_set0_mem_mode_switch:
+	setarg 0
+g24_store_mem_mode_switch:
+	arg offset_24g_mode_switch,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_store_mem_bind_payload:
+	arg offset_24g_bind_payload,rega
+	branch g24_set_contw_with_regb_store_1byte	
+	
+g24_fetch_mem_bind_device_status:
+	setarg offset_dongle_bind_device_status
+	branch g24_set_rega_ifetch_1byte
+g24_store_mem_bind_device_status:
+	arg offset_dongle_bind_device_status,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_fetch_mem_dongle_work_mode:
+	setarg offset_dongle_work_mode
+	branch g24_set_rega_ifetch_1byte
+g24_set_work_mem_dongle_work_mode:
+	setarg DONGLE_WORK
+g24_store_mem_dongle_work_mode:
+	arg offset_dongle_work_mode,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_fetch_mem_dongle_mode_init:
+	setarg offset_dongle_mode_init
+	branch g24_set_rega_ifetch_1byte
+g24_set0_mem_dongle_mode_init:
+	setarg CLEAR_INIT
+g24_store_mem_dongle_mode_init:
+	arg offset_dongle_mode_init,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_set0_mem_ackpayload_enable:
+	setarg 0
+g24_store_mem_ackpayload_enable:
+	arg offset_24g_ackpayload_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+g24_set1_mem_ackpayload_enable:
+	setarg 1
+	branch g24_store_mem_ackpayload_enable
+
+g24_fetch_mem_rxdata_temp_add3_7byte:
+	setarg offset_24g_rxdata_temp_add3
+	call g24_set_rega
+	ifetch 7,rega
+	rtn
+
+g24_fetch_mem_nodata_timer_enable:
+	setarg offset_24g_nodata_timer_enable
+	branch g24_set_rega_ifetch_1byte
+g24_set0_mem_nodata_timer_enable:
+	setarg 0
+g24_store_mem_nodata_timer_enable:
+	arg offset_24g_nodata_timer_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_set0_mem_ms_blank_data_enable:
+	setarg 0
+g24_store_mem_ms_blank_data_enable:
+	arg offset_24g_ms_blank_data_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+
+g24_set0_mem_kb_blank_data_enable:
+	setarg 0
+g24_store_mem_kb_blank_data_enable:
+	arg offset_24g_kb_blank_data_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_set0_mem_kb_mul_blank_data_enable:
+	setarg 0
+g24_store_mem_kb_mul_blank_data_enable:
+	arg offset_24g_kb_mul_blank_data_enable,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_store_mem_power_ctrl_threshold_up:
+	arg offset_power_ctrl_threshold_up,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_store_mem_power_ctrl_threshold_down:
+	arg offset_power_ctrl_threshold_down,rega
+g24_set_contw_with_regb_store_1byte:
+	call g24_set_contw_with_regb
+g24_contw_istore_1byte:
+	istore 1,contw
+	rtn
+
+g24_fetch_mem_pair_mode:
+	setarg offset_24g_pair_mode
+	branch g24_set_rega_ifetch_1byte
+
+g24_store_mem_pair_mode:
+	arg offset_24g_pair_mode,rega
+	branch g24_set_contw_with_regb_store_1byte
+	
+g24_store_mem_pair_txpower:
+	setarg offset_24g_pair_txpower
+	call g24_set_rega_ifetch_1byte
+	branch g24_store_mem_txpower
+
+g24_fetch_mem_rxdata_temp_add3_1byte:
+	setarg offset_24g_rxdata_temp_add3
+	branch g24_set_rega_ifetch_1byte
+
+g24_set_contw_with_temp:
+	copy pdata,temp
+	copy rega,pdata
+	iadd regc,contw
+	copy temp,pdata
+	rtn
+	
+g24_set_contw_with_temp_store_3byte:
+	call g24_set_contw_with_temp
+g24_contw_istore_3byte:	
+	istore 3,contw
+	rtn
+
+g24_set_contw_with_regb:
+	call g24_head_ptr2regc
+g24_set_contw_with_regb2:
+	copy pdata,regb
+	copy rega,pdata
+	iadd regc,contw
+	copy regb,pdata
+	rtn
+
+g24_set_rega:
+	call g24_head_ptr2regc
+	iadd regc,rega
+	rtn
+
+g24_set_rega_ifetch_1byte:
+	call g24_set_rega
+g24_rega_ifetch_1byte:
+	ifetch 1,rega
+	rtn
+
+g24_set_rega_ifetcht_4byte:
+	call g24_set_rega
+	ifetcht 4,rega
+	rtn
+
+g24_mem_set0:
+	setarg 0
+	branch g24_contw_istore_1byte
+
+endif
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app.prog	(working copy)
@@ -0,0 +1,576 @@
+app_init:
+	bpatch patch18_4,mem_patch18
+	fetch 1,mem_device_option
+	branch app_init,blank				/* wait ram to be initialized */
+//	beq dvc_op_ukey,le_ukey_init
+	beq dvc_op_dongle,dongle_init
+	beq dvc_op_AntiLost,antilost_init
+	beq dvc_op_shutter,shutter_init
+	beq dvc_op_module,module_init
+	beq dvc_op_car,car_init
+	beq dvc_op_remote_car,remote_car_init
+	bbit1 dvc_op_mouse,mouse_init
+	rtn
+	
+app_lpm_init:
+	bpatch patch18_5,mem_patch18
+	jam 0,mem_tester_emulate
+	jam 0,mem_debug_config
+	jam 0, mem_lch_code
+	setarg 0
+	store 5,mem_sp_state_start
+	fetch 1,mem_device_option
+	branch app_lpm_init,blank				/* wait ram to be initialized */
+	beq dvc_op_module,module_lpm_init
+app_lpm_init0:
+	rtn
+
+	
+app_process_idle:
+	call ui_dispatch
+	call check_51cmd
+	call app_process_bb_event
+	fetch 2,mem_cb_idle_process
+	branch callback_func
+	
+app_process_bt:
+	fetch 2,mem_cb_bt_process
+	branch callback_func
+	
+app_process_ble:
+	fetch 2,mem_cb_le_process
+	branch callback_func
+
+app_process_bb_event:
+	bpatch patch18_6,mem_patch18
+	//return if c51 need to process bb event
+	arg mem_ipc_fifo_bt2c51,rega
+	call fifo_out
+	rtn blank
+	//reaching here mains c51 cannot get bb event.
+	copy pdata,regc
+	call app_event_normal_process
+	branch app_process_bb_event_priority
+	
+app_discard_event:
+	arg 0,regc
+	rtn
+
+//************************************************//
+//*APP BB EVENT NORMAL PROCESS**//
+//************************************************//
+app_event_normal_process:
+	beq BT_EVT_BB_CONNECTED,app_evt_bt_conn
+	beq BT_EVT_BUTTON_LONG_PRESSED,app_evt_button_long_pressed
+	beq BT_EVT_SETUP_COMPLETE,app_evt_setup_complete
+	beq BT_EVT_HID_HANDSHAKE,app_evt_hid_handshake
+	beq BT_EVT_HID_CONNECTED,app_bb_event_hid_connected
+	beq BT_EVT_RECONN_FAILED,app_bb_event_reconn_failed
+	beq BT_EVT_BB_DISCONNECTED,app_bb_event_bb_disconn
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,app_bb_event_reconn_failed	
+	beq BT_EVT_LE_CONNECTED,app_le_event_bb_connected
+	beq BT_EVT_LE_DISCONNECTED,app_le_event_bb_disconn
+	beq BT_EVT_RECONN_STARTED,app_event_reconn_start
+	beq BT_EVT_ENTER_SNIFF,app_event_enter_sniff
+	beq BT_EVT_EXIT_SNIFF,app_event_exit_sniff
+	
+	beq BT_EVT_ML2CAP_CONN_REFUSED,app_event_ml2cap_conn_refused
+	beq BT_EVT_LINKKEY_GENERATE,app_event_linkkey_generate
+	beq BT_EVT_SWITCH_FAIL_MASTER,app_event_switch_fail_master
+	beq BT_EVT_SWITCH_SUCCESS_MASTER,app_event_switch_success
+	rtn
+
+
+app_evt_bt_conn:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_CONNECTED,pdata
+	store 2,mem_ui_state_map
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set0 APP_DISC_BY_BUTTON ,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+app_event_switch_success:
+	jam 0,mem_switch_fail_master_count
+	rtn	
+
+app_event_switch_fail_master:
+	fetch 1,mem_switch_fail_master_count
+	increase 1,pdata
+	store 1,mem_switch_fail_master_count
+	sub pdata,1,null
+	branch app_bt_role_switch,positive
+	jam 0,mem_switch_fail_master_count
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_SWITCH_FAIL,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	branch app_bt_disconnect
+	
+app_process_bb_event_priority:
+	fetch 2,mem_cb_bb_event_process
+	branch callback_func
+
+app_check_wake_lock:
+	fetch 2,mem_cb_check_wakelock
+	branch callback_func
+	
+app_will_enter_lpm:
+	fetch 2,mem_cb_before_lpm
+	branch callback_func
+
+app_event_linkkey_generate:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_AFTER_PAIRING ,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	branch app_bt_store_reconn_info
+	
+app_event_reconn_start:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_RECONNECT,pdata
+	store 2,mem_ui_state_map
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_AFTER_RECONN,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+app_evt_setup_complete:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_SETUP_COMPLETE,pdata
+	store 2,mem_ui_state_map
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_AFTER_SETUP_DONE,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+app_evt_hid_handshake:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_HID_HANDSHAKE,pdata
+	store 2,mem_ui_state_map
+	rtn
+	
+app_event_enter_sniff:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_SNIFF,pdata
+	store 2,mem_ui_state_map
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_AFTER_SNIFF,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+	
+app_event_exit_sniff:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BT_SNIFF,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+app_le_event_bb_connected:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BLE_CONNECTED,pdata
+	store 2,mem_ui_state_map
+	rtn
+	
+app_le_event_bb_disconn:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BLE_CONNECTED,pdata
+	store 2,mem_ui_state_map
+	branch app_lpm_mult_disable
+	
+app_bb_event_hid_connected:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_HID_CONN,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+app_evt_button_long_pressed:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_BY_BUTTON,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+	
+app_event_ml2cap_conn_refused:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_L2CAP_REFUSED,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	branch  app_bt_disconnect
+
+
+app_evt_timer:
+	bpatch patch18_7,mem_patch18
+	store 1,mem_app_evt_timer_count
+app_evt_100ms_loop:
+	fetch 1,mem_app_evt_timer_count
+	rtn blank
+	increase -1,pdata
+	store 1,mem_app_evt_timer_count
+	call ui_button_polling
+	call app_lpm_wake_auto_lock_timer
+	call app_unsniff_delay_timer
+	call app_discovery_timer
+	call flash_write_spi_sm_timer
+	fetch 2,mem_cb_event_timer
+	call callback_func
+	branch app_evt_100ms_loop
+
+
+//regc:timer addr
+//regb:timer up call back fuction
+timer_single_step:
+	ifetch 1,regc
+	rtn blank
+	pincrease -1
+	istore 1,regc
+	nrtn blank
+	copy regb,pdata
+	branch callback_func
+
+//regc:timer addr
+//regb:timer up call back fuction
+timer_single_step_2B:
+	ifetch 2,regc
+	rtn blank
+	pincrease -1
+	istore 2,regc
+	nrtn blank
+	copy regb,pdata
+	branch callback_func
+	
+app_power_timer:
+	fetcht 2,mem_power_param_ptr
+	add temp,power_timer_offset,regc
+	arg app_power_timer_timeout,regb
+	branch timer_single_step
+	
+app_power_timer_timeout:
+	call app_got_power_state_common
+	beq POWER_STARTING,app_enter_power_stanby_state
+app_enter_power_off_state:
+	branch app_enter_hibernate
+app_enter_power_stanby_state:
+	setarg POWER_STANDBY
+	istore 1,regc
+	add temp,power_standby_cb_offset,regb
+app_power_cb_common:
+	ifetch 2,regb
+	branch callback_func
+
+app_unsniff_delay_timer:
+	arg mem_unsniff2sniff_timer_count,regc
+	arg app_unsniff_delay_timeout,regb
+	branch timer_single_step
+	
+app_unsniff_delay_timeout:
+	call context_check_idle
+	branch app_bt_enter_sniff,zero
+	rtn
+
+
+app_discovery_timer:
+	arg mem_discovery_timeout_timer_count,regc
+	arg app_discovery_timeout,regb
+	branch timer_single_step_2B
+	
+app_discovery_timeout:
+	call app_bt_stop_discovery
+	call app_led_off
+	fetch 2,mem_cb_discovry_timeout
+	branch callback_func
+
+	
+app_bb_event_reconn_failed:
+	call app_disconn_reason_flag_clear
+app_clear_reconnect_flag:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BT_RECONNECT,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+app_bb_event_bb_disconn:
+	jam 0,mem_unsniff2sniff_timer_count
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_RECONNECT,app_bb_event_bb_reconn_disconn
+	isolate0 UI_STATE_BT_SETUP_COMPLETE,pdata
+ 	call app_discard_event,true
+app_bb_event_bb_reconn_disconn:
+	bpatch patch19_0,mem_patch19
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BT_CONNECTED,pdata
+	set0 UI_STATE_BT_SETUP_COMPLETE,pdata
+	set0 UI_STATE_BT_HID_CONN,pdata
+	set0 UI_STATE_BT_HID_HANDSHAKE,pdata
+	set0 UI_STATE_BT_RECONNECT,pdata
+	store 2,mem_ui_state_map
+	branch app_lpm_mult_disable
+	
+app_bb_hibernate:
+	call app_disconn_reason_clear
+	branch app_enter_hibernate
+
+	
+app_disconn_reason_clear:
+	setarg 0
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	rtn
+app_disconn_reason_flag_clear:
+	setarg 0
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+app_disconn_reason_collect_bt:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	setarg 0
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+	
+app_disconn_reason_collect_ble:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set1 APP_DISC_BLE,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	setarg 0
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	rtn
+
+	
+//************************************************//
+//********APP SHARED FUNCSIONS*******//
+//************************************************//
+
+
+app_check_sniff:
+	fetch 1,mem_ui_state_map
+	isolate1 UI_STATE_BT_SNIFF,pdata
+	rtn
+
+//*****************************************//
+//*****************API********************//
+//*****************************************//
+//app_clearflag_store:
+//	setarg 0
+//	branch app_flag_store
+app_initflag_store:
+	setarg EEPROM_INIT_FLAG
+app_flag_store:
+	store 2,mem_timeup
+	bpatch patch19_1,mem_patch19
+	arg 2,temp
+	arg mem_timeup,rega
+	arg eeprom_module_init_flag,regb
+	branch iicd_write_eep_data
+
+//initflag is in eeprom to sure is eeprom nead to init
+app_initflag_check:
+	bpatch patch19_2,mem_patch19
+	arg 2,temp
+	arg mem_pdatatemp,rega
+	arg eeprom_module_init_flag,regb
+	call iicd_read_eep_data
+	fetch 2,mem_pdatatemp
+	arg EEPROM_INIT_FLAG,temp
+	isub  temp,null
+	rtn
+
+
+app_start_auto_sniff:
+	fetch 1,mem_unsniff2sniff_timer
+	store 1,mem_unsniff2sniff_timer_count
+	rtn	
+	
+app_get_lpm_wake_lock:
+	arg wake_lock_app,queue
+	branch lpm_get_wake_lock
+
+app_put_lpm_wake_lock:
+	arg wake_lock_app,queue
+	branch lpm_put_wake_lock
+	
+app_lpm_wake_auto_lock:
+	jam  LPM_WAKE_UP_DELAY_TIMER,mem_wake_up_delay_timer
+	branch app_get_lpm_wake_lock
+	
+app_lpm_wake_auto_lock_timer:
+	arg mem_wake_up_delay_timer,regc
+	arg app_put_lpm_wake_lock,regb
+	branch timer_single_step
+
+app_l2cap_flow_control_enable:
+	jam L2CAP_FLOW_CTRL_ENABLE,mem_l2cap_flow_ctrl_flag
+	rtn
+
+app_l2cap_flow_control_disable:
+	jam L2CAP_FLOW_CTRL_DISABLE,mem_l2cap_flow_ctrl_flag
+	rtn
+	
+app_bt_set_pincode:
+	jam BT_CMD_SET_PIN_CODE,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_bt_role_switch:
+	jam BT_CMD_ROLE_SWITCH,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_bt_start_reconnect:
+	bpatch patch19_3,mem_patch19
+	fetch 1,mem_app_connection_options
+	store 1,mem_connection_options
+	jam APP_FLAG_RECONNECT,mem_reconnect_flag
+	jam BT_CMD_RECONNECT,mem_fifo_temp
+	branch ui_ipc_send_cmd	
+	
+app_bt_reconnect_cancel:
+	jam BT_CMD_BB_RECONN_CANCEL,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_bt_disconnect:
+	jam BT_CMD_DISCONNECT,mem_fifo_temp
+	branch ui_ipc_send_cmd	
+
+app_bt_start_discovery_short:
+	fetch 2,mem_discovery_timeout
+	store 2,mem_discovery_timeout_timer_count
+app_bt_start_discovery_led_blink:
+	call app_led_start_blink
+app_bt_start_discovery:
+	jam BT_CMD_START_DISCOVERY,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_bt_stop_discovery:
+	setarg 0
+	store 2,mem_discovery_timeout_timer_count
+	jam BT_CMD_STOP_DISCOVERY,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_start_direct_adv:
+	jam BT_CMD_START_DIRECT_ADV,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_ble_stop_direct_adv:
+	jam BT_CMD_STOP_DIRECT_ADV,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_stop_adv:
+	jam BT_CMD_STOP_ADV,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_start_adv:	
+	jam BT_CMD_START_ADV,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_start_scan:
+	jam BT_CMD_LE_START_SCAN,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_stop_scan:
+	jam BT_CMD_LE_STOP_SCAN,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_start_conn:
+	jam BT_CMD_LE_START_CONN,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_ble_disconnect:
+	jam BT_CMD_LE_DISCONNECT,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_led_start_blink:	
+	jam BT_CMD_LED_BLINK,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_led_on:
+	jam BT_CMD_LED_ON,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_led_stop_blink:
+app_led_off:
+	jam BT_CMD_LED_OFF,mem_fifo_temp
+	branch ui_ipc_send_cmd
+	
+app_enter_hibernate:
+	jam BT_CMD_ENTER_HIBERNATE,mem_fifo_temp 
+	branch ui_ipc_send_cmd
+	
+app_bt_sniff_exit:
+	jam BT_CMD_EXIT_SNIFF,mem_fifo_temp
+	branch  ui_ipc_send_cmd
+	
+app_bt_enter_sniff:
+	jam BT_CMD_ENTER_SNIFF,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_ble_store_reconn_info:
+	jam BT_CMD_STORE_RECONN_INFO_LE,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_bt_store_reconn_info:
+	jam BT_CMD_STORE_RECONN_INFO_BT,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_store_reconn_info:
+	jam BT_CMD_STORE_RECONN_INFO,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+app_lpm_mult_enable:
+	set1 mark_lpm_mult_enable,mark
+	rtn
+
+app_lpm_mult_disable:
+	set0 mark_lpm_mult_enable,mark
+	rtn
+
+
+/*
+
+mem_power_param struct
+{
+	usigned char     mem_power_state
+	usigned char     mem_power_timer
+	usigned char	 mem_power_off_timeout
+	usigned char	 mem_power_starting_timeout
+	usigned long	 mem_power_off_cb
+	usigned long	 mem_power_starting_cb
+	usigned long	 mem_power_standby_cb
+	usigned long 	 mem_ui_butten_up_cb
+}
+    	functions:power state switching by mem_app_power_timer timeout or by button_long_pressed event
+    	(power off -> power starting->power standby->power off) and power timer initialization 
+ input parameters:mem_power_param_ptr should be point to the variable(mem_power_param) address where the input parameters stored in with its format
+output parameters:switched power state will be stored in variable mem_power_state*/
+app_button_long_pressed:
+	call app_got_power_state_common
+	beq POWER_STANDBY,app_power_shutting_down
+app_power_starting:
+	setarg POWER_STARTING
+	istore 1,regc
+	add temp,power_starting_timeout_offset,rega
+	add temp,power_starting_cb_offset,regb
+app_power_common:
+	ifetcht 1,rega
+	increase 1,regc
+	istoret 1,regc
+	branch app_power_cb_common
+	
+app_power_shutting_down:
+	setarg POWER_OFF
+	istore 1,regc
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,app_power_off_end
+	call app_ble_disconnect
+app_power_off_end:
+	fetcht 2,mem_power_param_ptr
+	add temp,power_off_timeout_offset,rega
+	add temp,power_off_cb_offset,regb
+	branch app_power_common
+	
+app_got_power_state_common:
+	fetcht 2,mem_power_param_ptr
+	add temp,power_state_offset,regc
+	ifetch 1,regc
+	rtn
+
+app_event_button_up:
+	call app_got_power_state_common
+	bne POWER_OFF,app_power_release
+	branch app_enter_hibernate
+app_power_release:
+	add temp,ui_butten_up_cb_offset,regb
+	branch app_power_cb_common
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_antiLost.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_antiLost.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_antiLost.prog	(working copy)
@@ -0,0 +1,565 @@
+ifdef COMPILE_AntiLost
+antilost_init:
+	rtn wake	
+	jam 0x00,core_gpio_sel1//1: GPIO[26:25] is two wire SPI, 2: GPIO[26:23] is SPI, 3: GPIO[26:23] is PCM
+	setarg antilost_le_before_hibernate
+	store 2,mem_cb_before_hibernate
+	setarg keyscan_process_lpm_before
+	store 2,mem_cb_before_lpm
+	setarg antilost_idle_process	//
+	store 2,mem_cb_idle_process
+	setarg antilost_le_conn_process	//
+	store 2,mem_cb_le_process
+	setarg antilost_bb_event_process 
+	store 2,mem_cb_bb_event_process
+	setarg antilost_le_bb_event_timer
+	store 2,mem_cb_event_timer
+	setarg antilost_le_notification
+	store 2,mem_cb_ble_transmit
+	setarg antilost_lpm_lock_process
+	store 2,mem_cb_check_wakelock
+	setarg antilost_le_receive_data_process
+	store 2,mem_cb_att_write
+	bpatch patch19_4,mem_patch19
+	call antilost_buzzer_pwm_init
+	call keyscan_key_init
+	call antilost_adc_init
+	call ui_led_init_global
+	call ui_button_init
+	setarg antilost_key_up_down
+	store 2,mem_cb_antl_key
+	setarg antilost_power_off_cb
+	store 2,mem_antl_power_off_cb
+	setarg antilost_power_starting_cb
+	store 2,mem_antl_power_starting_cb
+	setarg antilost_power_standby_cb
+	store 2,mem_antl_power_standby_cb
+	setarg antilost_led_on_cb
+	store 2,mem_antl_led_cb_on
+	setarg antilost_led_off_cb
+	store 2,mem_antl_led_cb_off
+	setarg antilost_buzzer_on
+	store 2,mem_antl_buzzer_cb_on
+	setarg antilost_buzzer_off
+	store 2,mem_antl_buzzer_cb_off
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+	branch app_enter_hibernate
+
+antilost_le_before_hibernate:
+	call antilost_led_buzzer_stop_blink
+	branch  app_enter_hibernate
+
+antilost_le_notification:
+	call le_fifo_check_nearly_full
+	nrtn blank
+	arg mem_temp_block5,rega
+	call queue_pop
+	nrtn user
+	arg mem_temp_block5,contr
+	branch le_send_notify_from_list
+
+antilost_power_standby_cb:
+	fetch 2,mem_antl_le_sleep_timeout
+	store 2,mem_antl_le_sleep_timer
+	jam 1,mem_antl_key_scan_enable
+	branch antilost_fast_adv_start
+	
+antilost_lpm_lock_process:
+	fetch 1,mem_antl_key_state
+	beq 1,antilost_lpm_ctrl_for_led_buzzer
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,antilost_lpm_ctrl_for_led_buzzer
+	fetch 1,mem_antl_lost_mode
+	beq 1,app_get_lpm_wake_lock
+	fetch 1, mem_antl_queue_curr_num
+	nbranch app_get_lpm_wake_lock,blank 
+	branch app_put_lpm_wake_lock
+	
+antilost_lpm_ctrl_for_led_buzzer:
+	fetch 1,mem_antl_led_state
+	fetcht 1,mem_antl_buzzer_state
+	ior temp,pdata
+	beq 1,app_get_lpm_wake_lock
+	branch app_put_lpm_wake_lock
+
+antilost_bb_event_process:
+	copy regc,pdata
+	beq BT_EVT_BUTTON_UP,app_event_button_up
+	beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed
+	beq BT_EVT_LE_CONNECTED,antilost_le_process_conn
+	beq BT_EVT_LE_DISCONNECTED,antilost_le_process_discon
+	beq BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,antilost_le_conn_param_update_rsp_recieved
+	rtn
+antilost_le_conn_param_update_rsp_recieved:
+	fetch 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	beq BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_REJECTED,antilost_le_conn_param_rejected
+antilost_le_conn_param_accepted:
+	fetch 2,mem_le_new_connslavelatency
+	branch antilost_master_nonsupport_latency,blank
+antilost_le_conn_param_updata_procedure_sucsess:
+	jam CONN_PARAM_UPDATA_PROCEDURE_COMPLETE,mem_antl_conn_updata_procedure_state
+	jam 60,mem_antl_conn_update_timer
+	rtn
+
+antilost_le_conn_param_rejected:
+	fetch 2,mem_le_latency
+	branch antilost_conn_param_updata_procedure_faild,blank
+antilost_conn_param_retransimiting:
+	jam CONN_PARAM_UPDATA_PROCEDURE_STARTING,mem_antl_conn_updata_procedure_state
+	fetcht 2,mem_interval_increment
+	fetch 2,mem_le_interval_min
+	iadd temp,pdata
+	store 2,mem_le_interval_min
+	copy pdata,rega
+	fetch 2,mem_le_interval_max
+	iadd temp,pdata
+	store 2,mem_le_interval_max
+	iadd rega,pdata
+	rshift pdata,temp
+	fetch 2,mem_antl_le_unnormal_interval_max
+	idiv temp
+	call wait_div_end
+	quotient pdata
+	store 2,mem_le_latency
+	jam 1,mem_antl_send_updata_le_param_timer
+	rtn
+antilost_conn_param_updata_procedure_faild:
+	jam CONN_PARAM_UPDATA_PROCEDURE_FAILD,mem_antl_conn_updata_procedure_state
+	rtn
+
+antilost_master_nonsupport_latency:
+	jam 0,mem_lpm_mult
+	jam 0,mem_antl_send_updata_le_param_timer
+	fetch 2,mem_le_new_conninterval	//interval from master
+	fetcht 2,mem_antl_le_unnormal_interval_min
+	isub temp,null
+	setflag positive,0,rega 
+	fetch 2,mem_antl_le_unnormal_interval_max //local intervalmax
+	fetcht 2,mem_le_new_conninterval//interval form master
+	isub temp,pdata
+	setflag positive,1,rega
+	compare	0x03,rega,0x03
+	rtn true //return if the new conn_interval in range through conn_interval_min to conn_interval_max already
+	fetch 8,mem_antl_le_unnormal_interval_min
+	store 8,mem_le_interval_min
+	jam 1,mem_antl_send_updata_le_param_timer
+	rtn                               
+
+
+antilost_le_bb_event_timer:
+	//call ui_button_check_long_press
+	call app_power_timer
+	call antilost_double_click_timer
+	call antilost_le_fast_adv_timer
+	call antilost_le_sleep_timer
+	call antilost_app_updata_le_param_timer
+	call antilost_conn_update_timer
+	branch antilost_adc_check_timer
+
+
+antilost_double_click_timer:
+	arg mem_double_click_timer,regc
+	arg antilost_double_click_timeout,regb
+	branch timer_single_step
+antilost_double_click_timeout:
+	jam 0,mem_butten_click_cnt
+	rtn
+antilost_le_fast_adv_timer:
+	arg mem_antl_fast_adv_timer,regc
+	arg antilost_le_fast_adv_timeout,regb
+	branch timer_single_step_2B
+antilost_le_fast_adv_timeout:
+	arg mem_antl_slow_adv_led_style,regc
+	arg mem_antl_slow_adv_lpm_interval,regb
+	branch antilost_adv_start_common
+	
+
+antilost_conn_update_timer:
+	arg mem_antl_conn_update_timer,regc
+	arg antilost_conn_update_timer_time_out,regb
+	branch timer_single_step
+	
+antilost_conn_update_timer_time_out:
+	fetch 2,mem_le_latency
+	store 1,mem_lpm_mult
+	rtn
+antilost_app_updata_le_param_timer:
+	arg mem_antl_send_updata_le_param_timer,regc
+	arg antilost_app_updata_le_param_timeout,regb
+	branch timer_single_step
+antilost_app_updata_le_param_timeout:
+	fetch 1,mem_le_state
+	compare 0,pdata,0x60
+	nbranch antilost_wait_for_updata_param_instant_expire,true
+	jam CONN_PARAM_UPDATA_PROCEDURE_STARTING,mem_antl_conn_updata_procedure_state
+	call  app_lpm_mult_enable
+	branch le_l2cap_tx_update_req	
+antilost_wait_for_updata_param_instant_expire:
+	jam 1,mem_antl_send_updata_le_param_timer
+	rtn
+	
+antilost_le_sleep_timer:
+	arg mem_antl_le_sleep_timer,regc
+	arg antilost_le_sleep_timer_timeout,regb
+	branch timer_single_step_2B
+
+
+antilost_le_sleep_timer_timeout:
+	branch app_button_long_pressed
+
+antilost_adc_check_timer:
+	//fetch 1,mem_antl_power_timer
+	//rtneq SHUTTER_POWER_OFF
+	arg mem_adc_timer,regc
+	arg antilost_adc_check_timer_timeout,regb
+	branch timer_single_step_2B
+antilost_adc_check_timer_timeout:
+	fetch 2,mem_adc_timeout
+	store 2,mem_adc_timer
+	branch antilost_battery_process
+
+
+antilost_le_process_conn:
+	fetch 2,mem_adc_timeout
+	store 2,mem_adc_timer
+	setarg 0
+	store 2,mem_antl_fast_adv_timer
+	store 2,mem_antl_le_sleep_timer
+	call antilost_alert_off
+	call antilost_led_buzzer_stop_blink
+	jam 0,mem_lpm_mult
+	branch app_ble_stop_adv
+	                                                      
+
+antilost_le_process_discon:
+	//setarg 0
+	//store 1,mem_hci_curr_len
+	setarg 0
+	store 4,mem_adc_timer
+	store 3,mem_antl_conn_updata_procedure_state
+	store 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	
+	jam 1,mem_alarm_config_notfy_cnt
+	fetch 2,mem_antl_le_sleep_timeout
+	store 2,mem_antl_le_sleep_timer
+	call queue_init
+	fetch 1,mem_antl_power_state
+	rtneq POWER_OFF
+	call antilost_fast_adv_start
+	branch antilost_on_off_alarm_after_disconn
+
+
+antilost_le_conn_process:
+//bpatch
+	branch antilost_key_process
+
+antilost_idle_process:
+
+	fetch 1,mem_antl_power_state
+	rtnne POWER_STANDBY
+	branch antilost_key_process
+
+
+//////////////////////////////////////////////////////////////////////////////////////////
+/////SOFT WTICH////////
+antilost_power_starting_cb:
+	arg mem_antl_power_starting_buzzer_style,regc
+	call antilost_buzzer_configuration
+	arg mem_antl_power_starting_led_style,regc
+antilost_power_common:
+	branch antilost_led_configuration
+
+antilost_power_off_cb:
+	jam OFF,mem_le_adv_enable
+	arg mem_antl_power_off_buzzer_style,regc
+	call antilost_buzzer_configuration
+	arg mem_antl_power_off_led_style,regc
+	branch antilost_power_common
+	
+antilost_le_receive_data_process:
+	fetch 1,mem_le_att_opcode
+	beq ATTOP_WRITE_REQUEST,antilost_le_parse_att_write_request
+	rtn
+antilost_le_parse_att_write_request:
+	fetch 2,mem_le_att_handle
+//	beq  ATT_WRITE_REQUEST_HANDLE,antilost_key_data_send
+	beq NEW_SPEC_WRITE_HANDLE,antilost_cmd_parse_for_application
+	beq NEW_SPEC_NOTIFICATION_ENABLE_HANDLE,antilost_notify_alarm_config_first_time
+	rtn
+/////////////////////////////////////////////////////////
+
+
+/////////key scan
+antilost_key_process:
+	fetch 1,mem_antl_key_scan_enable
+	rtn blank
+	branch keyscan_key_process
+
+	//queue = key index
+	//rega =1 press, =0 release
+antilost_key_up_down:
+	copy rega,pdata
+	branch antilost_key_is_up,blank
+antilost_key_is_down:
+	copy queue,pdata
+	beq 0,antilost_key0_down
+	rtn
+antilost_key_is_up:
+	copy queue,pdata
+	beq 0,antilost_key0_up
+	rtn
+
+antilost_key0_down:
+	jam 1,mem_antl_key_state
+	arg mem_antl_key_buzzer_style,regc
+	call antilost_buzzer_configuration
+	arg mem_antl_key_led_style,regc
+	call antilost_led_configuration
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,antilost_butten_down_while_disconn
+	branch antilost_butten_down_after_conn
+	
+antilost_key0_up:
+	jam 0,mem_antl_key_state
+	branch antilost_double_click_timer_init
+
+//////////////process for double-click
+
+antilost_double_click_timer_init:
+	fetch 1,mem_butten_click_cnt
+	rtnne 1
+	jam 5,mem_double_click_timer
+	rtn
+
+antilost_butten_down_after_conn:
+	fetch 1,mem_butten_click_cnt
+	pincrease 1
+	store 1,mem_butten_click_cnt
+	beq 1,antilost_click_once
+	beq 2,antilost_click_twice
+	rtn
+antilost_click_once:
+	call antilost_alert_off
+	jam OPCODE1_BUTTEN_CLICK_ONCE,mem_antl_key0_press+5//5 represent opcode offset
+	arg mem_antl_key0_press,regc
+	branch antilost_prepare_data_and_send
+antilost_click_twice:
+	jam 0,mem_butten_click_cnt
+	jam OPCODE2_BUTTEN_DOUBLE_CLICK,mem_antl_key0_press+5
+	arg mem_antl_key0_press,regc
+	call antilost_prepare_data_and_send
+	fetch 1,mem_antl_lost_mode
+	beq 1,antilost_alert_on
+	rtn   //rtn should be retaind
+	
+antilost_butten_down_while_disconn:
+	fetch 2,mem_antl_le_sleep_timeout
+	store 2,mem_antl_le_sleep_timer
+	call antilost_alert_off
+	branch antilost_fast_adv_start
+	
+///////////////////////NEW App Spcecific///////
+antilost_cmd_parse_for_application:
+	bpatch patch19_5,mem_patch19
+	call le_app_receive_data
+	ifetch 1,rega
+	beq OPCODE3_ANTL_START_ALRAM,antilost_on_of_alram
+	beq OPCODE7_ANTL_CONFIG_ALRAM,antilost_configuration_for_alram
+	rtn
+
+antilost_on_of_alram:
+	fetch 1,mem_antl_lost_mode
+	beq ANTI_LE_ALARM_OFF,antilost_alert_on
+	beq ANTI_LE_ALARM_ON,antilost_alert_off
+	rtn
+
+antilost_configuration_for_alram:
+	ifetch 1,regb
+	beq 1,antilost_set_start_alarm_after_disconn
+	beq 0,antilost_set_no_alarm_after_disconn
+	rtn
+/////////////////check////////////////////////
+
+/*input: 1)package data addr in regc
+output:no
+function:calculate check_out value and send data*/
+//mem_temp_block5
+antilost_prepare_data_and_send:
+	bpatch patch19_6,mem_patch19
+	fetch 1,mem_client_characteristic_configuration_descriptor
+	isolate1 NOTIFICATION_ENABLE_BIT,pdata
+	nrtn true
+	add regc,6,contr
+	ifetch 2,contr
+	byteswap pdata,pdata
+	add pdata,5,loopcnt
+	add regc,3,contr
+	call calc_check_sum_start
+	istore 1,contr
+	copy regc,rega
+	branch queue_push
+
+/////////////////NEW APP SPECIFIC check end////////////////////
+
+
+/////////alarm//////////////////////////////
+antilost_alert_on:
+	fetch 1,mem_antl_power_state
+	rtn blank
+	jam 1,mem_antl_lost_mode
+	arg mem_antl_alert_buzzer_stlye,regc
+	call antilost_buzzer_configuration
+	arg mem_antl_alert_led_stlye,regc
+	call antilost_led_configuration
+	jam OPCODE4_CURRENT_ALARM_STATE,mem_antl_key0_release+5//5 represent opcode offset
+	jam 1,mem_antl_key0_release+8 //8 represent data offset,digit 1 represent alarm is on at present
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+antilost_alert_off:
+	fetch 1,mem_antl_lost_mode
+	rtn blank
+	jam 0,mem_antl_lost_mode
+	call antilost_led_buzzer_stop_blink
+	jam OPCODE4_CURRENT_ALARM_STATE,mem_antl_key0_release+5//5 represent opcode offset
+	jam 0,mem_antl_key0_release+8 //8 represent data offset,digit 0 represent alarm is off at present
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+
+antilost_set_start_alarm_after_disconn:
+	jam 1,mem_alarm_config
+	jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5
+	jam 1,mem_antl_key0_release+8
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+antilost_set_no_alarm_after_disconn:
+	jam 0,mem_alarm_config
+	jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5
+	jam 0,mem_antl_key0_release+8
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+antilost_on_off_alarm_after_disconn:
+	fetch 1,mem_alarm_config
+	rtn blank
+	branch antilost_alert_on
+	
+antilost_notify_alarm_config_first_time:
+	ifetch 2,rega
+	store 2,mem_client_characteristic_configuration_descriptor
+	isolate1 NOTIFICATION_ENABLE_BIT,pdata
+	nrtn true
+	fetch 1,mem_alarm_config_notfy_cnt
+	rtn blank
+	jam 0,mem_alarm_config_notfy_cnt
+	fetch 8,mem_antl_le_interval_min
+	store 8,mem_le_interval_min
+	jam 2,mem_antl_send_updata_le_param_timer
+	call antilost_battery_process
+	call antilost_battery_calculate_end //send twice to combat the failure of reception first time
+	jam OPCODE7_ANTL_CONFIG_ALRAM,mem_antl_key0_release+5
+	fetch 1,mem_alarm_config
+	store 1,mem_antl_key0_release+8
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+
+//////////////alarm end//////////////////////////
+//sytle address in regc
+antilost_buzzer_configuration:
+	arg 1,rega
+	branch antilost_configuration_common
+antilost_led_configuration:
+	arg 0,rega
+antilost_configuration_common:
+	branch antilost_led_buzzer_style_configuration
+	
+antilost_led_buzzer_stop_blink:
+	arg 0,rega
+	call ui_led_blink_stop_global
+	arg 1,rega
+	call ui_led_blink_stop_global
+	fetch 1,mem_buzzer_pwm_conf
+	branch pwm_disable
+	
+antilost_led_buzzer_style_configuration:
+	call calc_curr_struct_prt
+	arg 7,loopcnt
+	branch ui_led_set_style_global+2
+
+
+
+antilost_fast_adv_start:
+	arg mem_antl_fast_adv_led_style,regc
+	arg mem_antl_lpm_interval,regb
+antilost_adv_start_common:
+	call antilost_adv_interval_lpm_interval_set
+	call antilost_led_configuration
+	fetch 2,mem_antl_fast_adv_timeout
+	store 2,mem_antl_fast_adv_timer
+	branch app_ble_start_adv
+	
+antilost_adv_interval_lpm_interval_set:
+	ifetch 2,regb
+	store 2,mem_lpm_interval
+	ifetch 2,contr
+	store 2,mem_le_adv_interval
+	rtn
+///////////////beep////////////
+antilost_buzzer_pwm_init:
+	arg 0,rega //sys clk 12mhz
+	call pwm_init
+	fetch 6,mem_buzzer_pwm_conf
+	store 6,mem_pdatatemp
+	call pwm_out_set
+	fetch 1,mem_buzzer_pwm_conf
+	branch pwm_disable
+	
+antilost_led_on_cb:
+	jam 1,mem_antl_led_state
+	rtn	
+antilost_led_off_cb:
+	jam 0,mem_antl_led_state
+	rtn
+
+
+
+antilost_buzzer_off:
+	jam 0,mem_antl_buzzer_state
+	fetch 1,mem_buzzer_pwm_conf
+	branch pwm_disable
+	
+antilost_buzzer_on:
+	jam 1,mem_antl_buzzer_state
+	fetch 6,mem_buzzer_pwm_conf
+	store 6,mem_pdatatemp
+	branch pwm_out_set
+
+////////////////beep end///////////////////////////
+/////////////adc start////////////////////////
+antilost_adc_init:
+	jam 0,mem_adc_config_flag
+	branch adc_init_data
+
+antilost_battery_process:
+	call adc_set_mode
+	call vdd_calculate_by_mode
+	store 2,mem_battery_current_voltage
+	arg mem_battery_calculate_set,rega
+	call adc_bat_percent_lowpower_out
+	store 1,mem_voltage_remain_percent //for debug
+	beq 0,antilost_low_battery
+	sub pdata,0x64,null
+	nbranch antilost_full_battery,positive
+	store 1,mem_antl_key0_release+8
+antilost_battery_calculate_end:
+	jam OPCODE5_BATTER_INFORMATION,mem_antl_key0_release+5
+	arg mem_antl_key0_release,regc
+	branch antilost_prepare_data_and_send
+antilost_full_battery:
+	jam 100,mem_antl_key0_release+8
+	branch antilost_battery_calculate_end
+
+antilost_low_battery:
+	branch app_button_long_pressed
+endif
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_car.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_car.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_car.prog	(working copy)
@@ -0,0 +1,888 @@
+ifdef COMPILE_CAR
+
+car_init:
+	rtn wake	
+	hfetch 1,core_gpio_sel1
+	and_into 0xf0,pdata
+	hstore 1,core_gpio_sel1
+	setarg car_le_before_hibernate
+	store 2,mem_cb_before_hibernate
+	
+	setarg car_le_process_lpm_before
+	store 2,mem_cb_before_lpm	
+	
+	setarg app_enter_hibernate
+	store 2,mem_cb_discovry_timeout
+	
+	setarg car_scale_process_idle	
+	store 2,mem_cb_idle_process	
+	
+	setarg car_scale_process_bb_event 
+	store 2,mem_cb_bb_event_process	
+	
+	setarg app_get_lpm_wake_lock
+	store 2,mem_cb_check_wakelock
+	
+	setarg car_le_receive_data
+	store 2,mem_cb_att_write
+	
+	setarg car_le_bb_event_timer
+	store 2,mem_cb_event_timer
+	
+	call g24_head_ptr2regc
+	setarg car_24g_receive_data
+	add regc,offset_24g_cb_rxdata_type1,contw
+	istore 2,contw
+
+	setarg car_power_off_signal
+	store 2,mem_remote_car_power_off_cb
+	
+	setarg car_soft_switch_power_on_signal
+	store 2,mem_remote_car_power_standby_cb
+	
+	bpatch patch19_7,mem_patch19
+	call car_init_environment
+	call queue_init
+	jam 2,mem_lpm_mult
+	jam POWER_ON,mem_car_24g_received_pac
+	fetch 1,mem_car_config_soft_switch_enable
+	store 1,mem_car_hard_soft_switch
+	beq HARD_SWITCH, car_hard_switch_power_on_signal
+	fetch 1,mem_car_config_soft_switch_gpio
+	store 1,mem_ui_button_gpio
+	jam OFF,mem_le_adv_enable
+car_soft_switch_power_on_init:
+	call car_ui_led_init
+	call ui_button_init
+	call ui_button_polling
+	jam POWER_STARTING,mem_car_power_state
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+ 	branch app_enter_hibernate
+
+car_power_off_signal:	
+	branch car_ui_led_init
+	
+car_hard_switch_power_on_signal:
+	jam POWER_STANDBY,mem_car_power_state
+car_soft_switch_power_on_signal:
+	jam ON,mem_le_adv_enable
+	call car_ui_led_init
+	arg 0,rega
+	call ui_led_blink_start_global
+	
+	setarg FAST_ADV_INTERVAL_VALUE_CAR
+	call shutter_ble_adv_interval_set
+car_le_modified_name_adv:
+	arg mem_le_name+7,contw
+	fetch 1,mem_le_lap
+car_name_loop:
+	and pdata,0xF0,temp
+	rshift4 temp,temp
+	call car_hex_to_ascii
+	istoret 1, contw
+	and pdata,0x0F,temp
+	call car_hex_to_ascii
+	istoret 1, contw
+	call le_modified_name_att_list
+	fetcht 1,mem_le_name_len
+	copy temp,loopcnt
+	arg mem_le_adv_data+2,contw
+	arg mem_le_name,contr
+	call memcpy
+car_le_modified_name_scan:
+	fetcht 1,mem_le_name_len
+	copy temp,loopcnt
+	arg mem_le_scan_data+2,contw
+	arg mem_le_name,contr
+	branch memcpy
+car_hex_to_ascii:
+	sub temp,9,null
+	branch car_hex_num,positive
+	add temp,55,temp
+	rtn
+car_hex_num:	
+	add temp,48,temp
+	rtn
+
+car_ui_led_init:
+	fetch 1,mem_car_config_blood_led1_gpio
+	bne INVALID_PIN_NUM,car_blood_led_gpio_set
+car_ui_led_init_1:
+	fetch 1,mem_car_config_pairing_led_gpio
+	bne INVALID_PIN_NUM,car_pairing_led_gpio_set
+car_ui_led_init_2:
+	fetch 1,mem_car_config_low_voltage_led_gpio
+	bne INVALID_PIN_NUM,car_low_voltage_led_gpio_set
+car_ui_led_init_3:
+	fetch 1, mem_car_led_num
+	copy pdata,loopcnt
+	setarg mem_car_led_map
+	copy pdata,rega
+car_in_lp1:
+	copy rega,contr
+	ifetch 1,contr
+	copy contr,rega
+	beq INVALID_PIN_NUM,car_in_lp1_end
+	copy pdata,temp
+	call gpio_config_output
+car_in_lp1_end:
+	loop car_in_lp1
+car_ui_led_init_end:
+	rtn
+car_blood_led_gpio_set:
+	fetch 8,mem_car_config_blood_led1_gpio
+	store 8,mem_car_led_map+2
+	branch car_ui_led_init_1
+car_pairing_led_gpio_set:
+	store 1,mem_car_led_map
+	branch car_ui_led_init_2
+car_low_voltage_led_gpio_set:
+	store 1,mem_car_led_map+1
+	branch car_ui_led_init_3
+
+
+car_init_environment:
+	arg 0,rega
+	call pwm_init
+	call car_ir_rx_init
+	call g24_receive_process_init
+	branch car_init_adc_hvin
+
+car_init_adc_hvin:
+	jam 100,mem_car_notify_vdd_value_last
+	fetch 1,mem_car_config_low_voltage_led_gpio
+	store 1,mem_car_style2_struct_led_gpio
+	branch adc_init_data
+	
+car_le_before_hibernate:
+	call gpio_set_before_lpm_common
+	branch keyscan_process_lpm_before
+
+car_le_process_lpm_before:
+	branch keyscan_process_lpm_before
+
+car_key_scan_process:
+//	fetch 1,mem_enable_key_scan
+//	rtn blank
+	branch keyscan_key_process
+
+car_scale_process_idle:
+	call car_le_send_packet
+	call car_ir_receive_process
+	call car_g24_status_process
+	branch car_key_scan_process
+
+car_g24_status_process:
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	fetch 1,mem_car_24g_received_pac
+	beq WORK_PAIRED,car_g24_connected_event
+	rtn
+car_g24_connected_event:
+	fetch 1,mem_car_24g_status
+	rtneq WORK_PAIRED
+	jam WORK_PAIRED,mem_car_24g_status
+	branch car_g24_connected
+
+car_le_send_packet:
+	fetch 2,mem_ui_state_map
+	rtnbit0 UI_STATE_BLE_CONNECTED
+	call le_fifo_check_nearly_full
+	nrtn blank
+	arg mem_car_pop_queue_buff,rega
+	call queue_pop
+	nrtn user
+	arg mem_car_pop_queue_buff,contr
+	branch le_send_notify_from_list
+ 
+car_scale_process_bb_event:
+	copy regc,pdata
+	beq BT_EVT_BUTTON_UP,app_event_button_up
+	beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed
+	beq BT_EVT_LE_CONNECTED,car_scale_event_le_conn
+	beq BT_EVT_LE_DISCONNECTED,car_scale_event_le_discon
+	rtn
+
+car_scale_event_le_conn:
+	setarg disable_24g
+	call g24_store_mem_24g_mode
+	branch car_scale_process_conn
+car_g24_connected:
+	fetch 2,mem_car_24g_no_data_timeout_count
+	store 2,mem_car_24g_no_data_timeout_timer
+car_scale_process_conn:
+	jam 0x14,mem_car_notify_vdd_timer
+	jam 0,mem_lpm_mode
+	call app_ble_stop_adv
+	call app_lpm_mult_enable
+	fetch 1,mem_car_config_pairing_led_conn_status
+	beq 0x01,car_pairing_led_conn_status_setting
+car_scale_process_conn_next:
+	arg 0,rega
+	branch ui_led_on_global
+car_pairing_led_conn_status_setting:
+	arg 0,rega
+	branch ui_led_blink_stop_global
+
+car_scale_event_le_discon:
+	setarg rx_24g
+	call g24_store_mem_24g_mode
+car_g24_disconnect:
+	setarg 0
+	store 5,mem_car_led_control
+	setarg 4
+	call pwm_disable
+	setarg 5
+	call pwm_disable
+	setarg 20
+	call pwm_disable
+	setarg 21
+	call pwm_disable
+	setarg 22
+	call pwm_disable
+	setarg 7
+	call pwm_disable
+	call queue_init
+	jam 10,mem_motor1_speed
+	jam 10,mem_motor2_speed
+	jam 10,mem_motor3_speed
+//	jam 1,mem_lpm_mode
+	jam 2,mem_lpm_mult
+	arg 0,rega
+	call ui_led_blink_start_global
+
+	setarg FAST_ADV_INTERVAL_VALUE_CAR
+	call shutter_ble_adv_interval_set
+	branch app_ble_start_adv
+
+car_le_bb_event_timer:
+//	call car_ui_power_timeout_timer
+	call car_moto1_blank_data_timer
+	call car_moto2_blank_data_timer
+	call car_moto3_blank_data_timer
+	call app_power_timer
+	call car_led_control_timer
+	call car_notify_vdd_timer
+	call car_24g_no_data_timeout_timer
+	call car_ir_breakdown_timer
+	branch car_attack_shake_timer
+
+car_ir_breakdown_timer:
+	arg mem_car_ir_breakdown_check_timer,regc
+	arg car_ir_breakdown_timeout,regb
+	branch timer_single_step
+car_ir_breakdown_timeout:
+	call car_ir_gpio_get_status
+	nrtn true
+	jam 1,mem_car_ir_breakdown_flag
+	rtn
+	
+car_24g_no_data_timeout_timer:
+	arg mem_car_24g_no_data_timeout_timer,regc
+	arg car_24g_no_data_timer_timeout,regb
+	branch timer_single_step_2B
+car_24g_no_data_timer_timeout:
+	jam WORK_SEARCH,mem_car_24g_status
+	branch car_g24_disconnect
+
+car_attack_shake_timer:
+	arg mem_car_attack_shake_timer,regc
+	arg car_attack_shake,regb
+	branch timer_single_step
+car_attack_shake:
+	fetch 1, mem_car_attack_shake_flag
+	branch car_attack_shake_stop,blank
+	jam 2,mem_car_attack_shake_timer
+	jam 0, mem_car_attack_shake_flag
+	setarg 0x0a02
+	store 2,mem_le_receive_payload
+	fetch 1,mem_car_config_device_select
+	beq DEVICE_BATTLE_TANK,car_attack_shake_front_battle_tank
+car_attack_shake_front_battle_car:
+	branch car_motor_control
+car_attack_shake_front_battle_tank:
+	setarg 0x0a02
+	store 2,mem_le_receive_payload+2
+	branch car_motor_control
+car_attack_shake_stop:
+	setarg 0
+	store 4,mem_le_receive_payload
+	branch car_motor_control
+
+car_notify_vdd_timer:
+	fetch 1,mem_car_config_bat_notify_enable
+	rtn blank
+ 	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,car_low_bat_led_off
+	arg mem_car_notify_vdd_timer,regc
+	arg car_notify_vdd,regb
+	branch timer_single_step
+car_notify_vdd:
+	fetch 1,mem_car_notify_vdd_count
+	store 1,mem_car_notify_vdd_timer
+ 	fetch 1,mem_car_working_flag
+ 	nrtn blank
+car_read_hvin:
+	call adc_set_mode
+	call vdd_calculate_by_mode
+	store 2,mem_vdd_now_vol
+	arg mem_vdd_calculate_set,rega
+	call adc_bat_percent_lowpower_out
+	fetcht 1,mem_car_notify_vdd_value_last
+	isub temp,null
+	branch car_notify_vdd_next2,positive
+	store 1,mem_car_notify_vdd_value_last
+	copy pdata,temp
+car_notify_vdd_next2:
+	storet 1,mem_car_notify_vdd_percent
+	fetch 1,mem_car_config_low_voltage_percent
+	isub temp,null
+	call car_enter_low_bat,positive
+	storet 1,mem_notify_bat_payload 
+	arg 6,loopcnt
+	arg mem_notify_bat_head,contr
+	call calc_check_sum_start
+	store 1,mem_notify_bat_check_sum
+	arg mem_notify_bat_packet,rega
+	branch queue_push
+car_enter_low_bat:
+	fetch 1,mem_low_bat_flag
+	nrtn blank
+	jam 1,mem_low_bat_flag
+	arg 1,rega
+	branch ui_led_blink_start_global
+car_low_bat_led_off:
+	arg 1,rega
+	branch ui_led_blink_stop_global
+
+car_led_control_timer:
+	arg mem_car_led_control_timer,regc
+	arg car_led_control,regb
+	branch timer_single_step
+car_led_control:
+	jam 5,mem_car_led_control_timer
+	jam 0,mem_car_led_no
+	fetch 1,mem_car_led_blink_status
+	beq LED_ON,car_led_control_blink_off
+	beq LED_OFF,car_led_control_blink_on
+car_led_control_set:
+	arg mem_car_led_control,contr
+	copy contr,rega
+	arg 8,loopcnt
+car_led_control_timer_next:
+	copy rega,contr
+	ifetch 1,contr
+	copy contr,rega
+	beq LED_OFF,car_led_control_off
+	beq LED_ON,car_led_control_on
+	beq LED_BLINK,car_led_control_blink
+car_led_control_timer_next_2:
+	fetch 1,mem_car_led_no
+	increase 1,pdata
+	store 1,mem_car_led_no
+	loop car_led_control_timer_next
+	rtn
+car_led_switch:
+	fetch 1,mem_car_led_no
+	arg mem_car_config_blood_led_gpio,regb
+	iadd regb,regb
+	ifetcht 1,regb
+	rtn
+car_led_control_off:
+	call car_led_switch
+	call gpio_out_inactive
+	branch car_led_control_timer_next_2
+car_led_control_on:
+	call car_led_switch
+	call gpio_out_active
+	branch car_led_control_timer_next_2
+car_led_control_blink:
+	fetch 1,mem_car_led_blink_status
+	beq LED_ON,car_led_control_off
+	branch car_led_control_on
+car_led_control_blink_on:
+	jam LED_ON,mem_car_led_blink_status
+	branch car_led_control_set
+car_led_control_blink_off:
+	jam LED_OFF,mem_car_led_blink_status
+	branch car_led_control_set
+	
+////////////////////////check sum////////////////////////
+//loopcnt = sum number,contr = ptr
+calc_check_sum_start:
+	arg 0,rega
+calc_check_sum_loop:
+	ifetch 1,contr
+	iadd rega,rega
+	loop calc_check_sum_loop
+calc_check_sum_and:
+	and rega,0xff,pdata
+	rtn
+
+car_le_receive_data:	
+	fetch 1,mem_le_att_opcode
+	beq ATTOP_WRITE_REQUEST,car_le_parse_att_write_request
+	rtn
+car_le_parse_att_write_request:
+	fetch 2,mem_le_att_handle
+	beq ATT_CAR_CONTROL_HANDLE,car_control_le_receive
+	rtn
+
+/*
+*	typedef struct
+*	{
+*		2byte	packet_head				(mem_app_receive_temp)
+*		1byte	packet_cmd				(mem_app_receive_temp+2)
+*		2byte	packet_payload_length	(mem_app_receive_temp+3)
+*		10byte	packet_payload			(mem_app_receive_temp+5)
+*		1byte	packet_check_sum		(mem_app_receive_temp+15)
+*	}
+*/
+le_app_receive_data:
+	bpatch patch1a_0,mem_patch1a
+	ifetch 5,rega
+	store 5,mem_app_receive_temp
+	fetch 2,mem_app_receive_temp
+	arg LE_RECEIVE_PACKET_HEAD,temp
+	isub temp,null
+	nrtn zero
+	fetch 2,mem_app_receive_temp+3
+	byteswap pdata,pdata
+	store 2,mem_app_receive_temp+3
+	copy pdata,loopcnt
+	increase 5,rega
+	copy rega,contr
+	arg mem_app_receive_temp+5,contw
+	call memcpy
+	ifetch 1,contr
+	store 1,mem_app_receive_temp+15
+	arg mem_app_receive_temp+2,rega
+	arg mem_app_receive_temp+5,regb
+	rtn
+
+car_control_le_receive:
+	setarg 0
+	store 5,mem_le_receive_payload
+	store 5,mem_le_receive_payload+5
+	call le_app_receive_data
+	copy regb,contr
+	arg mem_le_receive_payload,contw
+	arg 10,loopcnt
+	call memcpy
+car_receive_cmd_select:
+	bpatch patch1a_1,mem_patch1a
+	ifetch 1,rega
+	beq CAR_CMD_OLD_CAR_CONTROL,car_drive_old
+	beq CAR_CMD_OLD_SPEED_CONTROL,car_speed_set_old
+	beq CAR_CMD_L_R_MOTOR_CONTROL,car_motor_control
+	beq CAR_CMD_F_B_MOTOR_CONTROL,car_motor_control
+	beq CAR_CMD_IR_CONTROL,car_ir_data_rx_from_app
+	beq CAR_CMD_LED_CONTROL,car_led_control_receive
+	beq CAR_CMD_DEVICE_INFO,car_info_request
+	rtn
+
+car_24g_receive_data:
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	
+	fetch 2,mem_car_24g_no_data_timeout_count
+	store 2,mem_car_24g_no_data_timeout_timer
+	
+	jam WORK_PAIRED,mem_car_24g_received_pac
+	
+	setarg offset_24g_rxdata_temp_add3
+	call g24_set_rega
+	call car_control_le_receive
+
+	fetch 1,mem_app_receive_temp+2	//cmd
+	beq CAR_CMD_L_R_MOTOR_CONTROL,car_24g_receive_data_next
+	beq CAR_CMD_F_B_MOTOR_CONTROL,car_24g_receive_data_next
+	rtn
+car_24g_receive_data_next:
+	fetch 1,mem_le_receive_payload	//moto1
+	ncall car_moto1_enable_blank_data_timer,blank
+	fetch 1,mem_le_receive_payload+2	//moto2
+	ncall car_moto2_enable_blank_data_timer,blank
+	fetch 1,mem_le_receive_payload+4	//moto3
+	ncall car_moto3_enable_blank_data_timer,blank
+	rtn
+
+car_moto1_enable_blank_data_timer:
+	jam 5,mem_car_moto1_blank_timer
+	rtn
+car_moto2_enable_blank_data_timer:
+	jam 5,mem_car_moto2_blank_timer
+	rtn
+car_moto3_enable_blank_data_timer:
+	jam 5,mem_car_moto3_blank_timer
+	rtn
+
+car_moto1_blank_data_timer:
+	arg mem_car_moto1_blank_timer,regc
+	arg car_moto1_blank_data,regb
+	branch timer_single_step
+car_moto2_blank_data_timer:	
+	arg mem_car_moto2_blank_timer,regc
+	arg car_moto2_blank_data,regb
+	branch timer_single_step
+car_moto3_blank_data_timer:		
+	arg mem_car_moto3_blank_timer,regc
+	arg car_moto3_blank_data,regb
+	branch timer_single_step
+
+car_moto1_blank_data:
+	jam 0,mem_le_receive_payload
+	branch car_motor_control
+car_moto2_blank_data:
+	jam 0,mem_le_receive_payload+2
+	branch car_motor_control
+car_moto3_blank_data:
+	jam 0,mem_le_receive_payload+4
+	branch car_motor_control
+	
+	
+///////////////////////Motor//////////////////////////////////////////
+
+car_drive_old:	
+	call car_left_right_control_old
+	branch car_front_back_control_old
+car_left_right_control_old:
+	fetch 1,mem_le_receive_payload
+	store 1,mem_motor2_status
+	branch car_motor2_control
+car_front_back_control_old:
+	fetch 1,mem_motor1_speed
+	call car_reset_old_speed
+	fetch 1,mem_le_receive_payload+1
+	store 1,mem_motor1_status
+	branch car_motor1_control
+car_reset_old_speed:
+	beq SPEED_LEVEL_2,car_reset_old_speed2
+	beq SPEED_LEVEL_3,car_reset_old_speed3
+	store 1,mem_motor1_speed
+	rtn
+car_reset_old_speed2:
+	jam SPEED_LEVEL_5,mem_motor1_speed
+	rtn
+car_reset_old_speed3:
+	jam SPEED_LEVEL_10,mem_motor1_speed
+	rtn
+car_speed_set_old:
+	fetch 1,mem_le_receive_payload
+	call car_reset_old_speed
+	fetch 1,mem_motor1_speed
+	call car_motor_speed_duty_setting
+	call car_motor_speed_duty_transform
+	branch pwm_pwm0_duty_set
+
+car_motor_control:
+	fetch 1,mem_car_24g_go_die_flag
+	nrtn blank
+	fetch 6,mem_le_receive_payload
+	store 6,mem_motor1_status
+	fetch 1,mem_motor1_speed
+	fetcht 1,mem_motor2_speed
+	iand temp,pdata
+	fetcht 1,mem_motor3_speed
+	iand temp,pdata
+	call car_motor_working_flag,blank
+	bpatch patch1a_2,mem_patch1a
+	call car_motor1_control
+	call car_motor2_control
+	branch car_motor3_control
+car_motor1_control:
+	arg mem_motor1_pwm_set,regb
+	arg mem_motor1_status,contr
+	branch car_motor_status_select
+car_motor2_control:
+	arg mem_motor2_pwm_set,regb
+	arg mem_motor2_status,contr
+	branch car_motor_status_select
+car_motor3_control:
+	arg mem_motor3_pwm_set,regb
+	arg mem_motor3_status,contr
+	branch car_motor_status_select
+car_motor_working_flag:
+	jam 0,mem_car_working_flag
+	rtn
+
+car_motor_status_select:
+	ifetch 1,contr
+	beq MOTOR_STOP,car_motor_stop
+	beq GO_FRONT,car_motor_positive
+	beq GO_BACK,car_motor_negative
+	rtn
+car_motor_positive:
+	jam 0,mem_motor_select_p_n
+	branch car_motor_negative+1
+car_motor_negative:
+	jam 1,mem_motor_select_p_n
+	ifetch 1,contr
+	store 1,mem_car_motor_speed
+	ifetch 8,regb
+	branch car_motor_work
+
+car_motor_stop:
+	ifetch 1,regb
+	call pwm_disable
+	increase 1,regb
+	ifetch 1,regb
+	branch pwm_disable
+car_motor_work:
+	store 8,mem_motor_pwm_pin1_set
+	jam 1,mem_car_working_flag
+	fetch 1,mem_motor_select_p_n
+	beq 0,car_motor_select_positive
+car_motor_select_negative:
+	fetch 1,mem_motor_pwm_pin2_set
+	store 1,mem_motor_pwm_pin_set
+	fetch 1,mem_motor_pwm_pin1_set
+car_motor_work_next:
+	call pwm_disable
+	fetch 1,mem_car_motor_speed
+	call car_motor_speed_duty_setting
+	store 1,mem_motor_pwm_dute_set
+	fetch 6,mem_motor_pwm_pin_set
+	store 6,mem_pdatatemp
+	branch pwm_out_set
+car_motor_select_positive:
+	fetch 1,mem_motor_pwm_pin1_set
+	store 1,mem_motor_pwm_pin_set
+	fetch 1,mem_motor_pwm_pin2_set
+	branch car_motor_work_next
+
+car_motor_speed_duty_setting:
+	mul32 pdata,5,pdata
+	add pdata,50,pdata
+	rtn
+car_motor_speed_duty_transform:
+	arg 12000,temp
+	imul32 temp,pdata
+	div pdata,100
+	call wait_div_end
+	quotient temp
+	copy temp,rega
+	setarg 12000
+	isub temp,regb
+	rtn
+
+/////////////////////IR PROCESS/////////////////////
+car_ir_init:
+	hfetch 1,core_gpio_sel2		// select GPIO3 as pwm4
+	set1 2,pdata
+	hstore 1,core_gpio_sel2
+	setarg 158
+	hstore 2,core_pwm_pcnt4
+	hstore 2,core_pwm_ncnt4
+	rtn
+
+car_ir_data_rx_from_app:
+	fetch 1,mem_car_24g_go_die_flag
+	nrtn blank
+	fetch 2,mem_le_receive_payload
+	store 2,mem_ir_data
+	fetch 1,mem_car_24g_status
+	bne WORK_PAIRED,car_ir_data_tx
+	fetch 2,mem_le_lap
+	store 2,mem_ir_data
+car_ir_data_tx:
+	bpatch patch1a_3,mem_patch1a
+	call car_ir_init
+	call car_ir_enable
+	setarg 48000
+	call sleep
+	call car_ir_disable
+	setarg 7200
+	call sleep
+	arg 16,loopcnt
+car_ir_send_loop:
+	call car_ir_enable
+	fetch 2,mem_ir_data
+	bbit1 0,car_ir_is_bit1
+	setarg 7200
+	call sleep
+	call car_ir_disable
+	branch car_ir_wait_finish
+	
+car_ir_is_bit1:
+	setarg 14400
+	call sleep
+	call car_ir_disable
+car_ir_wait_finish:
+	setarg 7200
+	call sleep
+	fetch 2,mem_ir_data
+	rshift pdata,pdata	
+	store 2,mem_ir_data
+	loop car_ir_send_loop
+
+	jam 2,mem_car_attack_shake_timer
+	jam 1, mem_car_attack_shake_flag
+	setarg 0x0a01
+	store 2,mem_le_receive_payload
+	fetch 1,mem_car_config_device_select
+	beq DEVICE_BATTLE_TANK,car_attack_shake_back_battle_tank
+car_attack_shake_back_battle_car:
+	branch car_motor_control
+car_attack_shake_back_battle_tank:
+	setarg 0x0a01
+	store 2,mem_le_receive_payload+2
+	branch car_motor_control
+	
+car_ir_enable:
+	hfetch 1,core_gpio_key2			// PWM4_enable
+	or_into 0x40,pdata
+	hstore 1,core_gpio_key2	
+	rtn
+car_ir_disable:
+	hfetch 1,core_gpio_key2			// PWM4_disable
+	and_into 0xbf,pdata
+	hstore 1,core_gpio_key2
+	rtn
+	
+car_ir_rx_init:
+	fetch 1,mem_car_config_ir_enable
+	rtneq 0x00
+	call lpm_disable_exen_output
+	fetcht 1,mem_car_config_ir_rx_gpio
+	storet 1,mem_ir_rx_gpio
+	call gpio_config_input
+	call car_ir_gpio_get_status
+	nrtn true
+	jam 1,mem_car_ir_breakdown_check_timer
+	rtn
+
+car_ir_receive_process:
+	fetch 1,mem_car_config_ir_enable
+	rtneq FLAG_IR_DISABLE	
+	fetch 1,mem_car_ir_breakdown_flag
+	nrtn blank
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,car_ir_receive_process_next
+	fetch 1,mem_car_24g_status
+	rtnne WORK_PAIRED
+car_ir_receive_process_next:
+	bpatch patch1a_4,mem_patch1a
+	call car_ir_gpio_get_status
+	nrtn true
+	setarg 36000
+	call sleep
+	call car_ir_gpio_get_status
+	nrtn true
+	call car_ir_clk_get
+car_ir_packet_head_wait_end:
+	call car_ir_clk_check
+	nrtn positive
+	call car_ir_gpio_get_status
+	branch car_ir_packet_head_wait_end,true
+	arg 0,rega
+	arg 16,loopcnt
+	call car_ir_clk_get
+car_ir_receive_process_loop:
+	call car_ir_clk_check
+	nrtn positive
+	call car_ir_gpio_get_status
+	nbranch car_ir_receive_process_loop,true
+	setarg 10800
+	call sleep
+	call car_ir_gpio_get_status
+	branch car_ir_get_bit1,true
+car_ir_get_bit0:
+	setarg 0
+ 	rshift rega,rega
+	ior rega,rega
+	loop car_ir_receive_process_loop
+	branch car_ir_receive_process_end
+car_ir_get_bit1:
+	setarg 0x8000
+	rshift rega,rega
+	ior rega,rega
+	call car_ir_clk_get
+car_ir_get_bit1_wait_low_end:
+	call car_ir_clk_check
+	nrtn positive
+	call car_ir_gpio_get_status
+	branch car_ir_get_bit1_wait_low_end,true
+	loop car_ir_receive_process_loop
+car_ir_receive_process_end:
+	bpatch patch1a_5,mem_patch1a
+	copy rega,pdata
+	store 2,mem_ir_rx_buf
+	store 2,mem_ir_notify_data+8
+	fetch 1,mem_car_24g_status
+	beq WORK_PAIRED,car_ir_24g_receive_attack
+car_ir_data_notify:
+	arg 0x07,loopcnt
+	arg mem_ir_notify_data_head,contr
+	call calc_check_sum_start
+	store 1,mem_ir_notify_data_check_sum
+	arg mem_ir_notify_data,rega
+	branch queue_push
+
+car_ir_24g_receive_attack:
+	fetch 1,mem_car_24g_ir_receive_attack_count
+	increase 1,pdata
+	store 1,mem_car_24g_ir_receive_attack_count
+	div pdata,2
+	call wait_div_end
+	quotient temp
+	remainder pdata
+	nbranch car_ir_24g_receive_attack_blink,blank
+car_ir_24g_receive_attack_off:
+	fetch 1,mem_car_config_led_num
+	isub temp,null
+	call car_ir_24g_go_die,zero
+	arg mem_car_led_control,pdata
+	increase -1,temp
+	iadd temp,rega
+	arg 0,pdata
+	istore 1,rega
+	rtn
+car_ir_24g_receive_attack_blink:
+	arg mem_car_led_control,pdata
+	iadd temp,rega
+	arg 2,pdata
+	istore 1,rega
+	rtn
+car_ir_24g_go_die:
+	jam 1,mem_car_24g_go_die_flag
+	rtn
+car_ir_clk_get:
+	copy clkn_bt,pdata
+	store 4,mem_ir_receive_clkn
+	rtn
+car_ir_clk_check:
+	copy clkn_bt,pdata
+	fetcht 4,mem_ir_receive_clkn
+	isub temp,pdata
+	sub pdata,200,null
+	rtn
+
+car_ir_gpio_get_status:
+	fetcht 1,mem_ir_rx_gpio
+	branch gpio_get_bit
+
+car_led_control_receive:
+	fetch 8,mem_le_receive_payload
+	store 8,mem_car_led_control
+	rtn
+
+car_info_request:
+	fetch 1,mem_car_config_device_select
+	store 1,mem_car_info_request_payload
+	fetch 1,mem_car_config_motor_layout
+	store 1,mem_car_info_request_payload+1
+	fetch 1,mem_car_config_ir_enable
+	store 1,mem_car_info_request_payload+2
+	arg 13,loopcnt
+	arg mem_car_info_request_head,contr
+	call calc_check_sum_start
+	store 1,mem_car_info_request_checksum
+	arg mem_car_info_request,rega
+	branch queue_push
+    
+endif
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_light.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_light.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_light.prog	(working copy)
@@ -0,0 +1,227 @@
+
+light_init:
+	call clear_eeprom_size_2k
+	jam 0x7a,mem_curr_packet_num
+	call light_load_controler_list
+	call light_init_crr_cmd_count
+	setarg light_pairing_timer
+	store 2,mem_cb_event_timer
+	arg 0,rega
+	branch pwm_init
+
+light_pairing_timer:
+	fetch 2,mem_light_pairing_timer
+	rtn blank
+	increase -1,pdata
+	store 2,mem_light_pairing_timer
+	rtnne 0
+	jam 0,mem_light_pairing_enable
+	rtn
+
+light_init_crr_cmd_count:
+	bpatch patch1a_6,mem_patch1a
+	fetch 1,mem_light_next_record
+	sub pdata,40,null
+	rtn positive
+	jam 0,mem_light_next_record
+	rtn
+
+light_load_controler_list:
+	arg mem_light_next_record,rega
+	arg 0,regb
+	arg 81,temp
+	branch iicd_read_eep_data
+
+//output user:group record find
+light_find_controler_pairing:
+	disable user
+	fetch 1,mem_light_cnum
+	copy pdata,loopcnt
+	
+	arg mem_light_clist,rega
+	copy regc,regb
+light_find_controler_pairing_loop:
+	bpatch patch1a_7,mem_patch1a
+	call light_compare_addr_record
+	branch enable_user,zero
+light_find_single_pairing_diff:
+	increase 4,rega
+	loop light_find_controler_pairing_loop
+	rtn
+
+//rega: regb:
+light_compare_addr_record:
+	bpatch patch1b_0,mem_patch1b
+	ifetch 3,rega
+	ifetcht 3,regb
+	isub temp,null
+	rtn
+//rega: regb:
+light_compare_single_record:
+	bpatch patch1b_1,mem_patch1b
+	ifetch 3,rega
+	ifetcht 3,regb
+	isub temp,null
+	nrtn zero
+	ifetch 1,contr
+	sub pdata,0,null //0 zero
+	rtn zero
+	add rega,3,contr
+	ifetcht 1,contr
+	isub temp,null
+	rtn
+
+//output:find single controler
+light_find_controler_cmd:
+	bpatch patch1b_2,mem_patch1b
+	disable user
+	fetch 1,mem_light_cnum
+	copy pdata,loopcnt
+	
+	arg mem_light_clist,rega
+	copy regc,regb
+light_find_controler_cmd_loop:
+	call light_compare_single_record
+	branch enable_user,zero
+	increase 4,rega
+	loop light_find_controler_cmd_loop
+	rtn
+
+//regc
+light_recv_adv:
+	fetch 1,mem_le_scanrsp_rcv
+	increase 1,pdata
+	store 1,mem_le_scanrsp_rcv
+	arg mem_le_rxbuf+12,regc
+
+light_anylize_command:
+	ifetch 2,regc
+	arg 0x55aa,temp
+	isub temp,null
+	nrtn zero
+	copy contr,regc
+	ifetcht 3,regc
+	setarg 0xffffff
+	isub temp,null
+	branch light_parse_cmd,zero
+	call light_find_controler_cmd
+	branch light_parse_cmd,user
+	rtn
+
+light_parse_cmd:
+	bpatch patch1b_3,mem_patch1b
+	increase 4,regc
+	ifetch 1,regc
+	fetcht 1,mem_curr_packet_num
+	isub temp,null
+	rtn zero
+	store 1,mem_curr_packet_num
+	fetch 1,mem_le_req_rcv
+	increase 1,pdata
+	store 1,mem_le_req_rcv
+	
+	increase 1,regc
+	ifetch 1,regc
+	store 1,mem_light_crr_cmd_count
+	copy pdata,loopcnt
+	rtn blank
+light_parse_cmd_loop:
+	ifetch 1,contr
+	beq LIGHT_CMD_PWM0,light_parse_cmd_pwm0
+	beq LIGHT_CMD_PWM1,light_parse_cmd_pwm1
+	beq LIGHT_CMD_PWM2,light_parse_cmd_pwm2
+	beq LIGHT_CMD_PWM3,light_parse_cmd_pwm3
+	beq LIGHT_CMD_PWM4,light_parse_cmd_pwm4
+	beq LIGHT_CMD_PWM5,light_parse_cmd_pwm5
+	beq LIGHT_CMD_AUTO_MODE,light_parse_auto_mode
+	beq LIGHT_CMD_PAIRING,light_parse_pairing
+	loop light_parse_cmd_loop
+	rtn
+
+light_parse_cmd_pwm0:
+	copy contr,regc
+	fetch 1,mem_light_pwm0
+	store 1,mem_pdatatemp
+	arg 0,temp
+light_parse_cmd_pwm_common:
+	storet 1,mem_pdatatemp+1
+	setarg 10000
+	store 3,mem_pdatatemp+2
+	ifetch 1,regc
+	store 1,mem_pdatatemp+5
+	call  pwm_out_set
+	and regc,1,contr
+	loop light_parse_cmd_loop
+	rtn
+light_parse_cmd_pwm1:
+	copy regc,contr
+	fetch 1,mem_light_pwm1
+	store 1,mem_pdatatemp
+	arg 1,temp
+	branch light_parse_cmd_pwm_common
+light_parse_cmd_pwm2:
+	copy regc,contr
+	fetch 1,mem_light_pwm2
+	store 1,mem_pdatatemp
+	arg 2,temp
+	branch light_parse_cmd_pwm_common
+light_parse_cmd_pwm3:
+	copy regc,contr
+	fetch 1,mem_light_pwm3
+	store 1,mem_pdatatemp
+	arg 3,temp
+	branch light_parse_cmd_pwm_common
+light_parse_cmd_pwm4:
+	copy regc,contr
+	fetch 1,mem_light_pwm4
+	store 1,mem_pdatatemp
+	arg 4,temp
+	branch light_parse_cmd_pwm_common
+light_parse_cmd_pwm5:
+	copy regc,contr
+	fetch 1,mem_light_pwm5
+	store 1,mem_pdatatemp
+	arg 5,temp
+	branch light_parse_cmd_pwm_common
+
+light_parse_auto_mode:
+	ifetch 1,contr
+	rtn
+
+light_parse_pairing:
+	copy contr,regc
+	fetch 1,mem_light_pairing_enable
+	bne 1,light_parse_pairing_abandon
+	call update_controler_list
+light_parse_pairing_abandon:
+	and regc,4,contr
+	rtn
+update_controler_list:
+	bpatch patch1b_4,mem_patch1b
+	call light_find_controler_pairing
+	branch update_conrtoler_list_found,user
+	fetch 1,mem_light_next_record
+	copy pdata,temp
+	increase 1,pdata
+	store 1,mem_light_next_record
+	call light_init_crr_cmd_count
+	lshift2 temp,temp
+	setarg mem_light_clist
+	iadd temp,contw
+	ifetch 4,regc
+	istore 4,contw
+	branch update_conrtoler_store_list
+update_conrtoler_list_found:
+	add regc,3,contr
+	ifetch 1,contr
+	rtn blank
+	ifetch 4,regc
+	istore 4,rega
+update_conrtoler_store_list:
+	arg mem_light_next_record,rega
+	arg 0,regb
+	arg 81,temp
+	branch iicd_write_eep_data
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_lightC.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_lightC.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_lightC.prog	(working copy)
@@ -0,0 +1,55 @@
+lightc_init:
+	//key scan init
+
+	//gpio init
+	fetcht 1,mem_lightc_led_gpio
+	call gpio_out_inactive
+	rtn
+
+
+lightc_dispatch:
+	//key scan 
+	
+	fetcht 1,mem_lightc_led_gpio
+	call gpio_out_active
+
+
+	fetcht 1,mem_lightc_led_gpio
+	call gpio_out_inactive
+
+	//
+	call lightc_start_adv
+
+	fetch 1,mem_adv_time
+	nrtn blank
+	//sleep 
+	call lpm_write_gpio_wakeup
+	hfetch 4,core_lpm_ctrl
+	set0 15,pdata						/* lowest lpo */
+	hstore 4,core_lpm_reg
+	call lpm_write_ctrl
+	arg param_hibernate_clks,temp
+	branch lpm_sleep
+
+lightc_adv:
+	fetch 1,mem_adv_time
+	branch le_adv_loop_tx,blank
+	increase -1,pdata
+	store 1,mem_adv_time
+	branch le_adv_loop_tx
+
+lightc_start_adv:
+	mul32 pdata,20,pdata
+	arg mem_cmd0_string,contr
+	iadd contr,contr
+	ifetch 1,contr
+	rtn blank
+	copy pdata,rega
+	copy rega,loopcnt
+	arg mem_le_adv_data+2,contw
+	call memcpy
+	copy rega,pdata
+	increase 2,pdata
+	store 1,mem_le_adv_data_len
+	rtn
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_module.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_module.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_module.prog	(working copy)
@@ -0,0 +1,1506 @@
+
+ifdef COMPILE_MODULE
+
+
+
+
+module_init:
+	
+	rtn wake
+	call le_modified_name
+	call adc_init_data
+	setarg module_process_idle
+	store 2,mem_cb_idle_process
+	setarg module_bt_conn_process
+	store 2,mem_cb_bt_process
+	setarg module_process_bb_event
+	store 2,mem_cb_bb_event_process
+	setarg module_le_conn_process
+	store 2,mem_cb_le_process
+	setarg module_lpm_lock
+	store 2,mem_cb_check_wakelock
+	setarg module_hci_cmd_transmit_le_notify
+	store 2,mem_cb_ble_transmit
+	setarg module_hci_event_receive_spp_data
+	store 2,mem_cb_receive_spp_data
+	setarg module_le_receive_data
+	store 2,mem_cb_att_write
+	setarg module_bb_event_timer
+	store 2,mem_cb_event_timer
+
+	call module_spp_clear_last_transmite_clock
+	bpatch patch1b_5,mem_patch1b
+	call module_lpm_uart_init
+	call module_gpio_init
+	call check_module_disabled
+	branch module_hci_event_enter_standby_mode
+
+
+module_lpm_uart_init:
+	fetch 4,mem_module_uart_rx_buffer
+	hstore 4,core_uart_rsaddr
+
+	fetch 4,mem_module_uart_tx_buffer
+	hstore 4,core_uart_tsaddr
+
+	hfetch 1,core_gpio_sel1
+	or_into 0x04,pdata
+	and_into 0xfc,pdata
+	hstore 1,core_gpio_sel1
+	jam 0x00,core_uart_ctrl
+
+	fetch 2,mem_module_uart_rx_buffer
+	hstore 2,core_uart_rrptr
+	fetch 2,mem_module_uart_tx_buffer
+	hstore 2,core_uart_twptr
+	hstore 2,core_uart_trptrp
+
+	hfetch 4,core_gpio_pu0
+	set1 7,pdata
+	hstore 4,core_gpio_pu0
+	
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_UART,pdata
+	hstore 2,core_clkoff
+	call uart_set_baud_by_mem
+	jam uartclk_crystal,core_uart_clksel
+	jam uart_ctrl_h4,core_uart_ctrl
+
+	fetch 1,mem_module_flag
+	isolate1 MODULE_FLAG_UART_FLOW_CONTROL,pdata
+	hfetcht 1,core_uart_ctrl
+	setflag true,4,temp
+	hstoret 1,core_uart_ctrl
+	rtn
+	
+
+
+module_lpm_init:
+	call module_spp_clear_last_transmite_clock
+	branch module_lpm_uart_init
+//	branch module_gpio_init
+	
+module_gpio_init:
+	//module state pin
+//	call ui_led_init	
+//	call app_led_start_blink
+	//module conn state pin
+	fetcht 1,mem_module_connect_state_gpio
+	call gpio_config_output
+	call module_set_conn_pin_low
+	
+	fetcht 1,mem_module_wake_up_gpio
+	branch gpio_config_input
+
+module_lpm_lock:
+	fetcht 1,mem_module_wake_up_gpio
+	call gpio_get_bit
+	nbranch app_put_lpm_wake_lock,true
+	branch app_get_lpm_wake_lock
+
+	
+module_le_conn_process:
+	rtn
+
+module_bt_conn_process:
+	call module_spp_enter_sniff
+	branch module_control_air_flow
+
+module_spp_enter_sniff:
+	fetch 1,mem_ui_state_map
+	bbit0 UI_STATE_BT_SPP_CONN,module_spp_clear_last_transmite_clock
+	bpatch patch1b_6,mem_patch1b
+	setarg 0x3eff
+	fetcht 4,mem_last_transmite_clock
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_SNIFF,module_spp_clear_last_transmite_clock
+	fetch 1,mem_module_flag
+	rtnbit1 MOUDLE_TASK_SNIFF
+	call module_set_sniff_task_flag
+	call app_bt_enter_sniff
+module_spp_clear_last_transmite_clock:
+	copy clkn_bt,pdata
+	store 4,mem_last_transmite_clock
+	rtn
+	
+
+module_process_idle:
+	call module_control_air_flow
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	branch module_process
+
+	
+module_process_bb_event:
+	copy regc,pdata
+	beq BT_EVT_BB_CONNECTED,module_process_bb_conn
+	beq BT_EVT_BB_DISCONNECTED,module_process_bb_event_disconned
+	beq BT_EVT_RECONN_FAILED,module_process_reconn_fail
+	beq BT_EVT_SETUP_COMPLETE,module_process_setup_complete
+	beq BT_EVT_SPP_CONNECTED,module_process_spp_connected
+	beq BT_EVT_SPP_DISCONNECTED,module_process_spp_disconnected
+	beq BT_EVT_PINCODE_REQ,module_process_evt_pincode_req
+	beq BT_EVT_ENTER_SNIFF,module_process_enter_sniff
+	beq BT_EVT_EXIT_SNIFF,module_process_exit_sniff
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,module_process_page_time_out
+	beq BT_EVT_LE_CONNECTED,module_process_le_conn
+	beq BT_EVT_LE_DISCONNECTED,module_process_bb_even_le_disconn
+	beq BT_EVT_SNIFF_NOT_ACCEPT,module_process_sniff_not_accept
+	beq BT_EVT_UNSNIFF_ACCEPT,module_process_unsniff_accept
+	beq BT_EVT_UNSNIFF_NOT_ACCEPT,module_process_unsniff_not_accept
+	beq BT_EVT_LE_PAIRING_FAIL,module_hci_event_le_pairing_fail
+	beq BT_EVT_LE_PAIRING_SUCCESS,module_hci_event_le_pairing_success
+	beq BT_EVT_LE_START_ENC,module_hci_event_start_enc
+	beq BT_EVT_LE_PAUSE_ENC,module_hci_event_pause_enc
+	beq BT_EVT_LE_TK_GENERATE,module_hci_event_le_tk
+	beq BT_EVT_BT_GKEY_GENERATE,module_hci_event_gkey_generate
+	beq BT_EVT_BT_GET_PASSKEY,module_hci_event_passkey_entry_mode
+	beq BT_EVT_BT_PAIRING_FAIL,module_hci_event_bt_pairing_fail	
+	beq BT_EVT_BT_PAIRING_SUCCESS,module_hci_event_bt_pairing_success
+ifdef SECURE_CONNECTION	
+	beq BT_EVT_LE_GKEY_GENERATE,module_hci_event_le_gkey
+endif
+	beq BT_EVT_STORE_NVRAM,module_hci_event_store_device
+	beq BT_EVT_LE_LTK_LOST,module_process_ble_ltk_lost
+	rtn
+
+	
+module_process_bb_event_disconned:
+	call module_spp_clear_last_transmite_clock
+	fetch 1,mem_flag_pairing_state
+	ncall module_hci_event_bt_pairing_fail,blank
+	call module_disconn_start
+	fetch 2,mem_ui_state_map
+	rtnbit0 UI_STATE_BT_SPP_CONN
+	branch  module_spp_disconnected
+
+module_process_spp_connected:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_SPP_CONN,pdata
+	store 2,mem_ui_state_map
+	fetch 1,mem_module_spp_lpm_mult
+	store 1,mem_lpm_mult
+	call module_set_conn_pin_low
+	branch module_hci_event_spp_connect
+
+module_process_spp_disconnected:
+//	branch module_spp_disconnected
+module_spp_disconnected:
+	fetch 2,mem_ui_state_map
+	rtnbit0 UI_STATE_BT_SPP_CONN
+	set0 UI_STATE_BT_SPP_CONN ,pdata
+	store 2,mem_ui_state_map
+	branch module_hci_event_spp_disconnect
+
+
+module_process_enter_sniff:
+
+module_sniff_param_check:
+	call module_spp_clear_last_transmite_clock
+	//fetch 1,mem_context
+	//rtnbit0 state_insniff
+	fetch 2,mem_context+coffset_tsniff
+	rshift pdata,pdata
+	fetcht 2,mem_sniff_param_interval
+	isub temp,null
+	nbranch module_sniff_param_check_unsniff,zero
+	branch app_lpm_mult_enable
+module_sniff_param_check_unsniff:
+	fetch 1,mem_module_flag
+	rtnbit1 MOUDLE_TASK_UNSNIFF
+	hfetch 2,core_uart_rxitems    //*
+	ncall module_set_unsniff_task_flag,blank    //*加这两句话
+	branch app_bt_sniff_exit
+
+module_process_exit_sniff:
+	call module_clear_sniff_task_flag
+	branch app_lpm_mult_disable
+ 	
+module_process_setup_complete:
+	call module_spp_clear_last_transmite_clock
+	branch module_conn_start
+	
+module_process_bb_even_le_disconn:
+	call le_clr_config_more_data
+	call module_disconn_start
+	branch module_hci_event_le_disconnect
+
+module_process_evt_pincode_req:
+	branch  app_bt_set_pincode
+	
+
+module_process_sniff_not_accept:
+	branch module_clear_sniff_task_flag
+
+
+module_process_unsniff_accept:
+	fetch 1,mem_module_flag
+	bbit0 MOUDLE_TASK_UNSNIFF,app_bt_enter_sniff
+	branch module_clear_unsniff_task_flag
+
+	
+module_process_unsniff_not_accept:
+	branch module_clear_unsniff_task_flag
+
+	
+module_process_le_conn:
+	call le_send_att_exchange_mtu_requset
+	call module_conn_start
+	fetch 1,mem_module_le_lpm_mult
+	store 1,mem_lpm_mult
+	branch module_hci_event_le_connect
+
+
+module_process_bb_conn:
+	jam 0,mem_flag_mode_ssp_pin
+	call module_clear_sniff_task_flag
+	branch module_clear_unsniff_task_flag
+
+module_process_page_time_out:
+module_process_reconn_fail:
+module_disconn_start:
+	call module_start_adv_discovery_by_command
+	branch module_set_conn_pin_high
+
+
+module_process_ble_ltk_lost:
+	call le_send_reject_ind
+	branch le_send_smp_security_request
+
+
+module_set_conn_pin_high:
+	fetcht 1,mem_module_connect_state_gpio
+	branch gpio_out_active
+
+module_conn_start:
+	call module_stop_adv_discovery
+	branch module_set_conn_pin_low
+	
+module_stop_adv_discovery:
+	fetch 1,mem_module_state
+	isolate1 MOUDLE_STATE_BT_BIT,pdata
+	call app_bt_stop_discovery,true
+	fetch 1,mem_module_state
+	isolate1 MOUDLE_STATE_BLE_BIT,pdata
+	call app_ble_stop_adv,true
+	rtn
+module_set_conn_pin_low:
+	fetcht 1,mem_module_connect_state_gpio
+	branch gpio_out_inactive
+
+module_process_with_credit:
+	fetch 1,mem_credit_flag
+	rtneq CREDIT_DISABLE
+	branch rfcomm_send_uih_without_payload
+
+module_process:
+	hfetch 1,core_uart_status
+	bbit1 uart_status_rx_fifo_empty,module_process_with_credit  //rx no data
+	call uartd_prepare_rx
+	ifetch 1,contru
+	bne 0x01,module_hci_in_excp
+	hfetch 2,core_uart_rxitems
+	sub pdata,2,null
+	rtn positive
+	ifetch 1,contru
+	store 1,mem_module_uart_opcode
+	ifetcht 1,contru
+	copy contru,rega
+	storet 1,mem_module_uart_len
+	add temp,3,temp
+	hfetch 2,core_uart_rxitems
+	isub temp,temp
+	nrtn positive
+	jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	call module_hci_cmd_control
+	fetch 1,mem_module_temp_nl_discard_packet
+	rtneq HCI_NOT_DISCARD_PACKET
+	branch module_hci_dicard_packet //discard this packet
+
+module_hci_in_excp:
+	call delay_10ms
+	call module_hci_event_invalid_packet
+	branch module_hci_release_except
+
+
+module_hci_release_except:
+	bpatch patch1b_7,mem_patch1b
+	hfetch 2,core_uart_rxitems
+	rtn blank
+	call uartd_prepare_rx
+	ifetch 1,contru
+	sub pdata,0x01,null
+	ncall module_hci_dicard_bytes,zero
+	nbranch module_hci_release_except,zero
+	ifetch 1,contru
+	rtneq HCI_CMD_SPP_DATA_REQ
+	rtneq HCI_CMD_SET_CREDIT_GIVEN
+	increase -1,contru
+	call module_hci_dicard_bytes
+	branch module_hci_release_except
+
+module_hci_dicard_packet:
+	call uartd_prepare_rx
+	increase 2,contru
+	ifetch 1,contru
+	iadd contru,contru
+module_hci_dicard_bytes:
+	branch uartd_rxdone
+	
+/*********************HCI CONTROL*********************/
+module_hci_cmd_control:
+	bpatch patch1c_0,mem_patch1c
+	fetch 1,mem_module_uart_opcode
+	beq HCI_CMD_SET_BT_ADDR_REQ,module_hci_cmd_set_bt_addr
+	beq HCI_CMD_SET_LE_ADDR_REQ,module_hci_cmd_set_le_addr
+	beq HCI_CMD_SET_VISIBILITY_REQ,module_hci_cmd_set_visibility	
+	beq HCI_CMD_SET_BT_NAME_REQ,module_hci_cmd_set_bt_name
+	beq HCI_CMD_SET_LE_NAME_REQ,module_hci_cmd_set_le_name
+	beq HCI_CMD_SPP_DATA_REQ,module_hci_cmd_receive_spp_data
+	beq HCI_CMD_LE_DATA_REQ,module_hci_cmd_receive_le_data
+	beq HCI_CMD_STATUS_IRQ,module_hci_cmd_inquire_status
+	beq HCI_CMD_SET_PAIRING_REQ,module_hci_cmd_set_pairing_mode
+	beq HCI_CMD_SET_PINCODE_REQ,module_hci_cmd_set_pincode	
+	beq HCI_CMD_SET_UARTCONTROL_REQ,module_hci_cmd_set_uart_control_mode
+	beq HCI_CMD_SET_UART_BAUD_REQ,module_hci_cmd_set_uart_baud
+	beq HCI_CMD_VERSION_REQ,module_hci_cmd_version_request
+	beq HCI_CMD_BT_DISCONNECT,module_hci_cmd_bt_disconnect
+	beq HCI_CMD_BLE_DISCONNECT,module_hci_cmd_ble_disconnect
+	beq HCI_CMD_SET_NVRAM_REQ,module_hci_cmd_set_nvram
+	beq HCI_CMD_CONFIRM_GKEY,module_hci_cmd_confirm_gkey
+	beq HCI_CMD_SET_CREDIT_GIVEN,module_hci_cmd_set_credit_given
+	beq HCI_CMD_AUTO_ADV_SCAN,module_hci_cmd_auto_adv
+	beq HCI_CMD_POWER_REQ,module_hci_cmd_power_request
+	beq HCI_CMD_POWER_SET,module_hci_cmd_power_set
+	beq HCI_CMD_PASSKEY_ENTRY,module_hci_cmd_passkey_entry
+	beq HCI_CMD_SET_GPIO,module_hci_cmd_set_gpio
+	beq HCI_CMD_READ_GPIO,module_hci_cmd_read_gpio
+	beq HCI_CMD_LE_SET_PAIRING,module_hci_cmd_le_set_pairing_mode
+	beq HCI_CMD_LE_SET_ADV_DATA,module_hci_cmd_le_set_adv_data
+	beq HCI_CMD_LE_SET_SCAN_DATA,module_hci_cmd_le_set_scan_data
+	beq HCI_CMD_LE_SEND_CONN_UPDATE_REQ,module_hci_cmd_le_send_conn_update_req
+	beq HCI_CMD_LE_SET_ADV_PARM,module_hci_cmd_set_le_adv_parameter
+	beq HCI_CMD_LE_START_PAIRING,module_hci_cmd_le_start_pairing
+	beq HCI_CMD_SET_WAKE_GPIO,module_hci_cmd_set_wake_gpio
+	beq HCI_CMD_SET_TX_POWER,module_hci_cmd_set_tx_power
+	beq HCI_CMD_LE_CONFIRM_GKEY,module_hci_cmd_le_confirm_gkey
+	beq HCI_CMD_REJECT_JUSTWORK,module_hci_cmd_set_reject_justwork_flag
+	beq HCI_CMD_RESET_CHIP_REQ,module_hci_cmd_reset_chip
+	beq HCI_CMD_LE_SET_FIXED_PASSKEY,module_hci_cmd_le_set_fixed_passkey
+	beq HCI_TEST_CMD_CLOSE_LPM,module_hci_test_cmde_close_lpm
+	branch  module_hci_event_receive_invalid_cmd
+
+/*********************HCI COMMAND*********************/
+
+//command opcode 0x00
+module_hci_cmd_set_bt_addr:
+	fetch 1,mem_module_uart_len
+	bne 6,module_hci_event_receive_invalid_cmd
+	ifetch 6,contru
+	store 6,mem_lap
+	branch module_hci_event_receive_valid_cmd
+
+//command opcode 0x01
+module_hci_cmd_set_le_addr:
+	fetch 1,mem_module_uart_len
+	bne 6,module_hci_event_receive_invalid_cmd
+	ifetch 6,contru
+	store 6,mem_le_lap
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x02
+module_hci_cmd_set_visibility:
+	fetch 1,mem_module_uart_len
+	bne 1,module_hci_event_receive_invalid_cmd
+	copy rega,contru
+	call module_hci_event_receive_valid_cmd
+	ifetcht 1,contru
+	storet 1,mem_module_bluetooth_stauts_by_command
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	rtnbit1 UI_STATE_BT_CONNECTED
+module_start_adv_discovery_by_command:
+	fetch 1,mem_module_state
+	isolate1 MOUDLE_STATE_BT_BIT,pdata
+	nbranch moudle_start_adv_by_command,true
+	fetcht 1,mem_module_bluetooth_stauts_by_command
+	and temp,0x03,pdata
+	store 1,mem_scan_mode
+moudle_start_adv_by_command:
+	fetch 1,mem_module_state
+	isolate1 MOUDLE_STATE_BLE_BIT,pdata
+	nrtn true
+	fetcht 1,mem_module_bluetooth_stauts_by_command
+	isolate1 2,temp
+	branch app_ble_start_adv,true
+	branch app_ble_stop_adv
+
+
+//command opcode 0x03
+module_hci_cmd_set_bt_name:
+	fetch 1,mem_module_uart_len
+	sub pdata,67,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_local_name_length
+	arg 8,loopcnt
+	call memset0
+	fetch 1,mem_module_uart_len
+	copy pdata,loopcnt
+	copy rega,contru
+	arg mem_local_name,contw
+	call uart_copy_rx_bytes_fast
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x04
+module_hci_cmd_set_le_name:
+	fetch 1,mem_module_uart_len
+	sub pdata,29,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_le_name_len
+	copy pdata,loopcnt
+	copy rega,contru
+	arg mem_le_name,contw
+	call uart_copy_rx_bytes_fast
+	call le_modified_name
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x05
+module_hci_cmd_receive_spp_data:
+	fetch 1,mem_ui_state_map
+	bbit0 UI_STATE_BT_SPP_CONN,module_hci_event_receive_invalid_cmd
+	call app_check_sniff
+	branch module_hci_cmd_spp_exit_sniff,true
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+//	call p_nl_clear_last_transmite_clock
+	call module_spp_clear_last_transmite_clock
+	fetch 1,mem_remote_credits
+	rtn blank
+	fetch 2,mem_nl_rx_len_all
+	bne 0,module_hci_cmd_pass_init_ng_rx_len_all
+	fetch 1,mem_module_uart_len
+	store 2,mem_nl_rx_len_all
+
+	copy rega,contru
+//	ifetch 2,contru
+//	store 2,mem_nl_rx_handle
+	copy contru,pdata
+	store 2,mem_nl_rx_data_src
+module_hci_cmd_pass_init_ng_rx_len_all:
+	call module_hci_cmd_get_current_packet_len_and_remain_len
+	branch spp_tx_rfcomm_packet
+	
+module_hci_cmd_spp_exit_sniff:
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	branch module_exit_sniff
+
+module_hci_cmd_get_current_packet_len_and_remain_len:
+	call module_hci_cmd_get_current_patcket_len
+	fetch 2,mem_nl_rx_len_all
+	fetcht 2,mem_current_packet_length
+	isub temp,pdata
+	store 2,mem_nl_rx_len_all
+	rtn
+
+module_hci_cmd_get_current_patcket_len:
+	fetch 2,mem_nl_rx_len_all
+	arg DM_REFCOM_BUFF_LEN,temp
+	call not_greater_than
+	fetcht 2,mem_rfcomm_max_frame_size
+	call not_greater_than
+	fetcht 2,mem_pn_max_frame_size
+	call not_greater_than
+	store 2,mem_current_packet_length
+	rtn
+
+module_hci_command_tx_spp_tx_complete:
+	jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	jam HCI_CMD_SPP_DATA_REQ,mem_module_uart_opcode
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x09
+module_hci_cmd_receive_le_data:
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd
+	call module_check_ble_encrypt_state
+	branch module_hci_event_receive_invalid_cmd,user
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet 
+	fetch 1,mem_module_flag
+	bbit1 MODULE_FLAG_BLE_DATA_FINISH,module_hci_cmd_receive_le_data_finish
+	fetch 1,mem_module_hci_notify_len
+	nrtn blank
+	jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet 
+	ifetch 2,contru		//handle
+	store 2,mem_module_hci_notify_handle
+	copy contru,pdata
+	store 2,mem_module_hci_nofiy_addr
+	fetch 1,mem_module_uart_len
+	pincrease -2
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	branch module_hci_event_receive_invalid_cmd,zero
+	store 1,mem_module_hci_notify_len
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	call le_set_config_more_data
+	call module_hci_cmd_transmit_le_notify
+	call module_hci_cmd_transmit_le_notify
+	call module_hci_cmd_transmit_le_notify
+	fetch 1,mem_module_flag
+	rtnbit0 MODULE_FLAG_BLE_DATA_FINISH
+module_hci_cmd_receive_le_data_finish:
+	jam HCI_DISCARD_PACKET,mem_module_temp_nl_discard_packet 
+	call module_clear_le_tx_data_flag
+	branch module_hci_event_receive_valid_cmd
+
+module_hci_cmd_transmit_le_notify:
+	fetch 1,mem_module_hci_notify_len
+	rtn blank
+	call le_fifo_check_nearly_full
+	nrtn blank				//no fifo
+	call module_get_le_remote_mtu
+	bpatch patch1c_1,mem_patch1c
+	add temp,-3,pdata		//sub handle and opcode
+	fetcht 1,mem_module_hci_notify_len
+	call not_greater_than
+	copy pdata,rega
+	copy temp,pdata
+	isub rega,pdata
+	store 1,mem_module_hci_notify_len
+	fetcht 2,mem_module_hci_notify_handle
+	call le_att_malloc_tx_notify
+	fetch 2,mem_module_hci_nofiy_addr
+	copy pdata,contru
+	copy rega,loopcnt
+	call uart_copy_rx_bytes_fast
+	copy contru,pdata
+	store 2,mem_module_hci_nofiy_addr
+	fetch 1,mem_module_hci_notify_len
+	nrtn blank
+	branch module_set_le_tx_data_flag
+
+
+//output: temp is master mtu
+module_get_le_remote_mtu:
+	arg 0x17,temp
+	fetch 1,mem_module_flag
+	rtnbit1 MODULE_FLAG_BLE_SEND_MTU23
+	fetcht 2,mem_le_remote_mtu
+	rtn
+
+module_check_ble_encrypt_state:
+	fetch 1,mem_module_flag
+	bbit1 MODULE_FLAG_BLE_DATA_ENCRYPT,le_check_encrypt_state
+	branch disable_user
+	
+
+//command opcode 0x0b
+module_hci_cmd_inquire_status:
+	branch module_hci_event_status_res
+
+
+//command opcode 0x0c
+module_hci_cmd_set_pairing_mode:
+	copy rega,contru
+	ifetch 1,contru
+	beq PAIRING_PINCODE,module_hci_pairing_pincode_mode
+	beq PAIRING_JUSTWORK,module_hci_pairing_just_work_mode
+	beq PAIRING_PASSKEY,module_hci_pairing_passkey
+	beq PAIRING_CONFIRM,module_hci_pairing_numeric_comparison
+	branch module_hci_event_receive_invalid_cmd
+module_hci_pairing_pincode_mode:
+	call ssp_disable
+	jam 0,mem_ssp_enable
+	branch module_hci_event_receive_valid_cmd
+module_hci_pairing_just_work_mode:
+	setarg SSP_MODE_JUST_WORK_IO_CAP_DATA
+module_hci_sspairing_mode:	
+	store 3,mem_sp_iocap_local
+	store 1,mem_ssp_mode_flag
+	call ssp_enable
+	jam 1,mem_ssp_enable
+	branch module_hci_event_receive_valid_cmd
+module_hci_pairing_passkey:
+	setarg SSP_MODE_PASSKEY_IO_CAP_DATA
+	branch module_hci_sspairing_mode
+
+module_hci_pairing_numeric_comparison:
+	setarg SSP_MODE_SSP_PIN_IO_CAP_DATA
+	branch module_hci_sspairing_mode
+
+//command opcode 0x0d
+module_hci_cmd_set_pincode:
+	fetch 1,mem_module_uart_len
+	sub pdata,16,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_pin_length
+	copy pdata,loopcnt
+	arg mem_pin,contw
+	call uart_copy_rx_bytes
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x0e
+module_hci_cmd_set_uart_control_mode:
+	copy rega,contru
+	ifetch 1,contru
+	hfetcht 1,core_uart_ctrl
+	nsetflag blank,4,temp
+	hstoret 1,core_uart_ctrl
+ 	branch module_hci_event_receive_valid_cmd
+
+ 	
+//command opcode 0x0f
+module_hci_cmd_set_uart_baud:
+	fetch 1,mem_module_uart_len
+	copy pdata,loopcnt
+	copy rega,contru
+	call string2dec_from_uart
+	setarg uart_clk_24
+	idiv temp
+	call wait_div_end
+	quotient pdata
+module_hci_cmd_set_uart_baud_ok:
+	store uart_baud_len,mem_baud
+	call module_hci_event_receive_valid_cmd
+	call wait_uarttx
+	branch uart_set_baud_by_mem
+
+
+//command opcode 0x10
+module_hci_cmd_version_request:
+	arg 2,rega
+	arg mem_soft_version_num,regb
+	arg 0,temp
+	branch module_hci_event_set_cmd
+module_hci_event_set_cmd_send_response:
+	store 2,mem_event_cmd_response_content
+	arg mem_event_cmd_response_content,regb
+	arg 0,temp
+	branch module_hci_event_set_cmd
+
+
+//command opcode 0x11
+module_hci_cmd_bt_disconnect:
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BT_CONNECTED,module_hci_event_receive_invalid_cmd
+module_hci_cmd_bt_disconnect_doing:
+	call module_hci_event_receive_valid_cmd
+	branch app_bt_disconnect
+
+	
+//command opcode 0x12
+module_hci_cmd_ble_disconnect:
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd
+module_hci_cmd_ble_disconnect_doing:
+	call module_hci_event_receive_valid_cmd
+	branch app_ble_disconnect
+
+
+
+
+//command opcode 0x26
+module_hci_cmd_set_nvram:
+	fetch 1,mem_module_uart_len
+	copy pdata,loopcnt
+	copy rega,contru
+	fetch 2,mem_nv_data_ptr
+	icopy contw
+	call uart_copy_rx_bytes_fast
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x28
+module_hci_cmd_confirm_gkey:
+	fetch 1,mem_ui_state_map
+	bbit0 UI_STATE_BT_CONNECTED,module_hci_event_receive_invalid_cmd	
+	ifetch 1,contru
+	fetcht 1,mem_flag_mode_ssp_pin
+	setflag blank,FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,temp
+	set1 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT ,temp
+	storet 1,mem_flag_mode_ssp_pin
+
+	call module_hci_event_receive_valid_cmd
+
+	fetch 1,mem_flag_mode_ssp_pin
+	bbit1 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT,module_hci_cmd_spp_number_comparison_result_is1
+	rtn
+
+dhkey_not_accept:
+	jam 0,mem_flag_mode_ssp_pin
+	jam BT_CMD_DHKEY_NOT_ACCEPT,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+
+module_hci_cmd_spp_number_comparison_result_is1:
+	bbit1 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,number_comparison_successed
+	branch dhkey_not_accept	
+
+
+//command opcode 0x29
+module_hci_cmd_set_credit_given:
+	fetch 1,mem_ui_state_map
+	rtnbit0 UI_STATE_BT_SPP_CONN
+	fetch 1,mem_credit_flag
+	rtneq CREDIT_DISABLE
+	ifetch 1,contru
+	fetcht 1,mem_credit_given
+	iadd temp,temp
+	storet 1,mem_credit_given
+	rtn
+
+	
+//command opcode 0x2a
+module_hci_cmd_auto_adv:
+	arg 0x40,loopcnt
+	arg mem_le_adv_data_len,contw
+	call clear_mem
+	setarg 0
+	store 1,mem_regb
+	copy rega,contru
+module_hci_cmd_auto_adv_loop:
+	copy contru,pdata
+	store 2,mem_regc
+	call module_hci_cmd_auto_adv_adv_analys
+
+	fetch 1,mem_regb
+	fetcht 1,mem_temp
+	increase 1,temp
+	iadd temp,pdata
+	store 1,mem_regb
+
+	sub pdata,31,null
+	nbranch module_hci_cmd_auto_adv_store_scan,positive
+module_hci_cmd_auto_adv_store_adv:
+	fetcht 1,mem_le_adv_data_len
+	setarg mem_le_adv_data
+	iadd temp,pdata
+	store 2,mem_contw
+	fetcht 1,mem_temp
+	increase 1,temp
+	fetch 1,mem_le_adv_data_len
+	iadd temp,pdata
+	store 1,mem_le_adv_data_len
+	branch module_hci_cmd_auto_adv_store_common
+module_hci_cmd_auto_adv_store_scan:
+	fetcht 1,mem_le_scan_data_len
+	setarg mem_le_scan_data
+	iadd temp,pdata
+	store 2,mem_contw
+	fetcht 1,mem_temp
+	increase 1,temp
+	fetch 1,mem_le_scan_data_len
+	iadd temp,pdata
+	store 1,mem_le_scan_data_len
+module_hci_cmd_auto_adv_store_common:
+	fetch 2,mem_contw
+	copy pdata,contw
+	fetch 2,mem_regc
+	copy pdata,contru
+
+	copy temp,loopcnt
+	call uart_copy_rx_bytes_fast
+
+	fetch 1,mem_module_uart_len
+	fetcht 1,mem_regb
+	isub temp,null
+	nbranch  module_hci_cmd_auto_adv_loop,zero
+	branch module_hci_event_receive_valid_cmd
+
+//block of adv len in mem_temp
+module_hci_cmd_auto_adv_adv_analys:
+	ifetch 1,contru
+	store 1,mem_temp
+	ifetch 1,contru
+	store 1,mem_rega
+	rtn
+
+
+//command opcode 0x2b
+module_hci_cmd_power_request:
+	arg 0,temp
+	arg 2,rega
+	fetch 2,mem_module_vdd_quotient
+	store 2,mem_event_cmd_response_content
+	arg mem_event_cmd_response_content,regb
+	branch module_hci_event_set_cmd
+
+
+//command opcode 0x2c
+module_hci_cmd_power_set:
+	fetch 1,mem_module_uart_len
+	bne 1,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	store 1,mem_module_read_vdd_flag
+	setarg 0x00
+	store 2,mem_module_vdd_quotient
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x30
+module_hci_cmd_passkey_entry:
+	ifetch 4,contru
+	store 4,mem_pin
+	jam 4,mem_pin_length
+	jam 0,mem_authentication_passkey_times
+	call module_hci_event_receive_valid_cmd
+	branch authentication_passkey
+
+
+//command opcode 0x31
+module_hci_cmd_set_gpio:
+	fetch 1,mem_module_uart_len
+	bne 3,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	beq HCI_CMD_CONFIG_GPIO_INPUT,module_set_gpio_input
+	beq HCI_CMD_CONFIG_GPIO_OUTPUT,module_set_gpio_output
+	branch module_hci_event_receive_invalid_cmd
+
+module_set_gpio_input:
+	ifetcht 1,contru
+	ifetch 1,contru
+	beq GPIO_INPUT_HIGH_IMPEDANCE,module_set_gpio_high_impedance
+	nsetflag blank,7,temp
+	call gpio_config_input
+	branch module_hci_event_receive_valid_cmd
+
+module_set_gpio_high_impedance:
+	call gpio_set_high_impedance
+	branch module_hci_event_receive_valid_cmd
+	
+module_set_gpio_output:
+	ifetcht 1,contru
+	call gpio_config_output0
+	ifetch 1,contru	
+	isolate1 0,pdata
+	call gpio_out_flag
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x32
+module_hci_cmd_read_gpio:
+	fetch 1,mem_module_uart_len
+	bne 1,module_hci_event_receive_invalid_cmd
+	ifetcht 1,contru
+	call gpio_get_bit
+	setarg 0x0
+	nsetflag true,0,pdata
+	arg 1,rega
+	branch module_hci_event_set_cmd_send_response
+
+
+//command opcode 0x33
+module_hci_cmd_le_set_pairing_mode:
+	copy rega,contru
+	ifetch 1,contru
+	copy pdata,temp
+ifdef SECURE_CONNECTION
+	beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,module_le_set_pairing_mode_secure_justwork
+	beq LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC,module_le_set_pairing_mode_secure_numeric
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,module_le_set_pairing_mode_secure_passkey
+endif
+	store 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_NONE, module_le_set_no_pairing
+	beq LE_PAIRING_MODE_LAGACY_JUSTWORK,module_le_set_pairing_mode_lagacy_just_work
+	beq LE_PAIRING_MODE_LAGACY_PASSKEY,module_le_set_pairing_mode_lagacy_passkey
+	branch module_hci_event_receive_invalid_cmd
+		
+ifdef SECURE_CONNECTION	
+module_le_set_pairing_mode_secure_justwork:
+	fetch 1,mem_le_secure_connect_enable
+	branch module_hci_event_receive_invalid_cmd,blank
+	storet 1,mem_le_pairing_mode
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	branch module_le_set_noinputnooutput
+module_le_set_pairing_mode_secure_numeric:
+	fetch 1,mem_le_secure_connect_enable
+	branch module_hci_event_receive_invalid_cmd,blank
+	storet 1,mem_le_pairing_mode
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	jam FLAG_IOCAP_DISPLAYYESNO,mem_le_pres_iocap
+	branch module_hci_event_receive_valid_cmd	
+module_le_set_pairing_mode_secure_passkey:	
+	fetch 1,mem_le_secure_connect_enable
+	branch module_hci_event_receive_invalid_cmd,blank
+	storet 1,mem_le_pairing_mode
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	branch module_le_set_displayonly
+endif
+module_le_set_no_pairing:
+	jam FLAG_LE_NO_BONDING_NO_MITM,mem_le_pres_auth
+module_le_set_noinputnooutput:	
+	jam FLAG_IOCAP_NOINPUTNOOUTPUT,mem_le_pres_iocap
+	branch module_hci_event_receive_valid_cmd	
+module_le_set_pairing_mode_lagacy_just_work:
+	jam FLAG_LE_BONDING_MITM,mem_le_pres_auth
+	branch module_le_set_noinputnooutput
+module_le_set_pairing_mode_lagacy_passkey:
+	jam FLAG_LE_BONDING_MITM,mem_le_pres_auth
+module_le_set_displayonly:	
+	jam FLAG_IOCAP_DISPLAYONLY,mem_le_pres_iocap
+	branch module_hci_event_receive_valid_cmd	
+
+	
+//command opcode 0x34
+module_hci_cmd_le_set_adv_data:
+	fetch 1,mem_module_uart_len
+	sub pdata,31,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_le_adv_data_len
+	copy pdata,loopcnt
+	copy rega,contru
+	arg mem_le_adv_data,contw
+	call uart_copy_rx_bytes_fast
+	branch module_hci_event_receive_valid_cmd
+	
+
+//command opcode 0x35
+module_hci_cmd_le_set_scan_data:
+	fetch 1,mem_module_uart_len
+	sub pdata,31,null
+	nbranch module_hci_event_receive_invalid_cmd,positive
+	store 1,mem_le_scan_data_len
+	copy pdata,loopcnt
+	copy rega,contru
+	arg mem_le_scan_data,contw
+	call uart_copy_rx_bytes_fast	
+	branch module_hci_event_receive_valid_cmd	
+
+	
+//command opcode 0x36
+module_hci_cmd_le_send_conn_update_req:
+	fetch 2,mem_ui_state_map
+	bbit0 UI_STATE_BLE_CONNECTED,module_hci_event_receive_invalid_cmd
+	fetch 1,mem_module_uart_len
+	bne 0x08,module_hci_event_receive_invalid_cmd
+	copy rega,contru
+	ifetch 8,contru
+	store 8,mem_le_interval_min
+	jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp
+	call  ui_ipc_send_cmd
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x37
+module_hci_cmd_set_le_adv_parameter:
+	ifetch 2,contru
+	store 2,mem_le_adv_interval
+	branch module_hci_event_receive_valid_cmd
+	
+	
+//command opcode 0x38
+module_hci_cmd_le_start_pairing:
+	fetch 1,mem_le_pairing_mode
+	branch module_hci_event_receive_invalid_cmd,blank
+	fetch 1,mem_le_pairing_state
+	bne FLAG_LE_PAIRING_NULL,module_hci_event_receive_invalid_cmd
+	fetch 1,mem_le_enc_state
+	bne FLAG_LE_ENC_NULL,module_hci_event_receive_invalid_cmd
+	call check_51cmd_le_smp_sec_req
+	branch module_hci_event_receive_valid_cmd	
+
+
+//command opcode 0x40
+module_hci_cmd_set_wake_gpio:
+	fetch 1,mem_module_uart_len
+	bne 5,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	store 1,mem_module_mcu_wake_pin
+	ifetch 4,contru
+	store 4, mem_module_mcu_wake_delay_us
+	fetcht 1,mem_module_mcu_wake_pin
+	call gpio_config_output
+	call module_set_mcu_wake_pin_low
+	branch module_hci_event_receive_valid_cmd
+	
+
+//command opcode 0x42
+module_hci_cmd_set_tx_power:
+	fetch 1,mem_module_uart_len
+	bne 0x01,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	store 1,mem_tx_power
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x48
+module_hci_cmd_le_confirm_gkey:
+	ifetch 1,contru
+	beq 0x01,module_hci_cmd_le_confirm_gkey_fail
+	fetch 1,mem_le_secure_connect_state
+	beq LE_SC_STAT_SEND_PUBLIC_KEY,module_hci_cmd_le_confirm_gkey_ok
+	beq LE_SC_STAT_RECEIVE_DHKEY,module_hci_cmd_le_confirm_gkey_ok
+	beq LE_SC_STAT_WAIT_CONFIRM_GKEY,module_hci_cmd_le_confirm_gkey_ok
+	branch module_hci_event_receive_invalid_cmd		
+module_hci_cmd_le_confirm_gkey_ok:
+	jam FLAG_LE_SC_CONFRIM_GKEY_OK,mem_le_sc_confirm_gkey_flag
+	branch module_hci_event_receive_valid_cmd	
+	
+module_hci_cmd_le_confirm_gkey_fail:
+	call le_send_pairing_confirm_value_failed
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0x49
+module_hci_cmd_set_reject_justwork_flag:
+	fetch 1,mem_module_uart_len
+	bne 0x01,module_hci_event_receive_invalid_cmd
+	call module_hci_event_receive_valid_cmd
+	ifetch 1,contru
+	branch classic_bt_clr_reject_justwork_flag,blank
+	branch classic_bt_set_reject_justwork_flag
+
+
+//command opcode 0x51
+module_hci_cmd_reset_chip:
+	call module_hci_event_receive_valid_cmd
+	call wait_uarttx
+	jam 0x01,core_reset // rest YC1021
+	branch loop
+
+
+//command opcode 0x61
+module_hci_cmd_le_set_fixed_passkey:
+	fetch 1,mem_module_uart_len
+	beq 0,module_hci_event_receive_invalid_cmd
+	ifetch 1,contru
+	branch module_hci_cmd_le_set_random_passkey,blank
+	fetch 1,mem_module_uart_len
+	bne 5,module_hci_event_receive_invalid_cmd
+	ifetch 4,contru
+	arg 1000000,temp
+	isub temp,null
+	branch module_hci_event_receive_invalid_cmd,positive
+	store 4,mem_le_tk
+	call le_set_config_fixed_tk
+	branch module_hci_event_receive_valid_cmd
+
+module_hci_cmd_le_set_random_passkey:
+	call le_clr_config_fixed_tk
+	branch module_hci_event_receive_valid_cmd
+
+
+//command opcode 0xff
+module_hci_test_cmde_close_lpm:
+	jam 0,mem_lpm_mode
+	branch module_hci_event_receive_valid_cmd
+	
+
+/*********************HCI EVENT*********************/
+
+module_hci_event_receive_invalid_cmd:
+	arg 1,temp
+	arg 0,rega
+	branch module_hci_event_set_cmd
+
+
+module_hci_event_receive_valid_cmd:
+	arg 0,temp
+	arg 0,rega
+	branch module_hci_event_set_cmd
+
+
+//event opcode 0x00
+module_hci_event_spp_connect:
+	jam  HCI_EVENT_SPP_CONN_REP,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x02
+module_hci_event_le_connect:
+	jam  HCI_EVENT_LE_CONN_REP,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x03
+module_hci_event_spp_disconnect:
+	jam  HCI_EVENT_SPP_DIS_REP,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x05
+module_hci_event_le_disconnect:
+	jam  HCI_EVENT_LE_DIS_REP,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x06
+//input:
+//	temp: success 0; fail 1
+//	rega:Response Content length
+//	regb:Response Content address
+module_hci_event_set_cmd:
+	fetch 1,mem_module_uart_opcode
+	copy pdata,regc
+	jam  HCI_EVENT_CMD_RES,mem_module_uart_opcode
+	setarg 2
+	iadd rega,pdata
+	call module_hci_prepare_tx
+	copy regc,pdata
+	istore 1,contwu
+	istoret 1,contwu
+	copy rega,loopcnt
+	copy regb,contr
+	call uart_copy_tx_bytes
+	branch uartd_send
+
+
+//event opcode 0x07
+module_hci_event_receive_spp_data:
+//	call p_nl_clear_last_transmite_clock
+	call module_spp_clear_last_transmite_clock
+	jam HCI_EVENT_SPP_DATA_REP,mem_module_uart_opcode
+	fetch 1,mem_current_length
+	rtn blank
+	call module_hci_prepare_tx
+	fetch 1,mem_current_length
+	copy pdata,loopcnt
+	fetch 2,mem_rfcomm_uih_payload_ptr
+	copy pdata,contr
+	call uart_copy_tx_bytes_fast
+	branch uartd_send
+
+
+//event opcode 0x08
+module_hci_event_receive_le_data:
+	jam HCI_EVENT_LE_DATA_REP,mem_module_uart_opcode
+	fetch 1,mem_module_le_rx_data_len
+	icopy loopcnt
+	increase 2,pdata
+	call module_hci_prepare_tx
+	fetch 2,mem_module_le_rx_data_handle // Attribute handle
+	istore 2,contwu
+	fetch 2,mem_module_le_rx_data_address
+	icopy contr
+	call uart_copy_tx_bytes_fast
+	branch uartd_send
+
+
+//event opcode 0x09
+module_hci_event_enter_standby_mode:
+	jam HCI_EVENT_STANDBY_REP,mem_module_uart_opcode
+module_hci_event_enter_standby_mode_len0:
+	setarg 0
+	call module_hci_prepare_tx
+	branch uartd_send
+
+
+//event opcode 0x0a
+module_hci_event_status_res:
+	jam HCI_EVENT_STATUS_RES,mem_module_uart_opcode
+	setarg 1
+	call module_hci_prepare_tx
+	
+	call module_hci_read_bt_status
+	
+	fetch 2,mem_ui_state_map	
+	arg UI_STATE_BT_HID_CONN,queue
+	qisolate1 pdata
+	setflag true,3,temp
+
+	arg UI_STATE_BLE_CONNECTED,queue
+	qisolate1 pdata
+	setflag true,5,temp	
+	
+	fetch 1,mem_ui_state_map
+	arg UI_STATE_BT_SPP_CONN,queue
+	qisolate1 pdata
+	setflag true,4,temp	
+	
+	istoret 1,contwu
+	branch uartd_send
+
+//	temp: bit0 3.0 inquiry;bit1 3.0 scan;bit2 ble adv;
+
+module_hci_read_bt_status:
+	arg 0,temp
+	fetch 1,mem_scan_mode
+	arg inq_scan_mode,queue
+	qisolate1 pdata
+	setflag true,0,temp
+	arg page_scan_mode,queue
+	qisolate1 pdata
+	setflag true,1,temp	
+
+	fetch 1,mem_le_adv_enable
+	arg 0,queue
+	qisolate1 pdata
+	setflag true,2,temp	
+	rtn
+
+
+//event opcode 0x0d
+module_hci_event_store_device:
+	jam HCI_EVENT_NVRAM_REP,mem_module_uart_opcode
+	fetch 1,mem_nv_data_number
+	mul32 pdata,34,pdata
+	icopy loopcnt
+	call module_hci_prepare_tx
+	fetch 2,mem_nv_data_ptr
+	icopy contr
+	call uart_copy_tx_bytes_fast
+	branch uartd_send
+
+
+//event opcode 0x0e
+module_hci_event_gkey_generate:
+	jam HCI_EVENT_GKEY,mem_module_uart_opcode
+	setarg 4
+	call module_hci_prepare_tx
+	fetch 4,mem_gkey
+	istore 4,contwu
+	branch uartd_send
+
+
+//event opcode 0x0f
+module_hci_event_invalid_packet:
+	jam HCI_EVENT_INVALID_PACKET,mem_module_uart_opcode
+	hfetch 2,core_uart_rxitems
+	arg 0xff,temp
+	call not_greater_than
+	copy pdata,loopcnt
+	call module_hci_prepare_tx
+	call uartd_prepare_rx
+	call uart_copy_rx2tx
+	branch uartd_send
+
+
+//event opcode 0x10
+module_hci_event_passkey_entry_mode:
+	jam  HCI_EVENT_GET_PASSKEY,mem_module_uart_opcode
+	branch module_hci_event_enter_standby_mode_len0
+
+
+//event opcode 0x11
+module_hci_event_le_tk:
+	jam HCI_EVENT_LE_TK,mem_module_uart_opcode
+	setarg 4
+	call module_hci_prepare_tx
+	fetch 4,mem_le_tk
+	istore 4,contwu
+	branch uartd_send
+
+
+//event opcode 0x14
+module_hci_event_le_pairing_fail:
+	arg FLAG_BLE_PAIRING_FAIL,rega
+	branch module_hci_event_pairing_completed
+
+module_hci_event_le_pairing_success:
+	arg FLAG_BLE_PAIRING_SUCCESS,rega
+	branch module_hci_event_pairing_completed
+
+module_hci_event_bt_pairing_fail:
+	arg FLAG_BT_PAIRING_FAIL,rega
+	branch module_hci_event_pairing_completed
+
+module_hci_event_bt_pairing_success:
+	arg FLAG_BT_PAIRING_SUCCESS,rega
+
+module_hci_event_pairing_completed:
+	jam 0,mem_flag_mode_ssp_pin
+	jam HCI_EVENT_LE_PAIRING_STATE,mem_module_uart_opcode
+	setarg 2
+	call module_hci_prepare_tx
+	copy rega,pdata
+	istore 2,contwu
+	branch uartd_send
+
+
+//event opcode 0x15
+module_hci_event_pause_enc:
+	arg FLAG_EVENT_PAUSE_ENC,regc
+	branch module_hci_event_enc
+
+module_hci_event_start_enc:
+	arg FLAG_EVENT_START_ENC,regc
+
+module_hci_event_enc:
+	jam HCI_EVENT_LE_ENCRYPTION_STATE,mem_module_uart_opcode
+	setarg 1
+	call module_hci_prepare_tx
+	copy regc,pdata
+	istore 1,contwu
+	branch uartd_send
+
+
+//event opcode 0x1d
+module_hci_event_le_gkey:
+	jam HCI_EVENT_LE_GKEY,mem_module_uart_opcode
+	setarg 4
+	call module_hci_prepare_tx
+	fetch 4,mem_gkey
+	istore 4,contwu
+	branch uartd_send
+
+
+//****************************************************************//
+	//module_hci_prepare_tx
+	//function:write hci packet header
+	//input: pdata-----packet length  (1byte)
+	//input: mem_uart_opcode------opcode (1byte)
+	//output:contwu --- pointer to packet payload
+	//use reg: contwu,pdata
+//****************************************************************//	
+module_hci_prepare_tx:
+	jam 0x02,mem_module_uart_cmd
+	store 1,mem_module_uart_len
+	storet 8,mem_temp
+	bpatch patch1c_2,mem_patch1c
+	call module_set_mcu_wake_pin_high_delay
+	fetcht 8,mem_temp
+	call uartd_prepare_tx
+	fetch 3,mem_module_uart_cmd
+	istore 3,contwu
+	rtn
+
+
+module_set_mcu_wake_pin_high_delay:
+	call module_check_mcu_wake_pin_high
+	rtn true
+module_set_mcu_wake_pin_h_delay:
+	call module_set_mcu_wake_pin_high
+	fetch 4,mem_module_mcu_wake_delay_us
+	rshift2 pdata,pdata
+	rtn blank
+	branch delay
+
+module_set_mcu_wake_pin_high:
+	//call ice_break
+	fetcht 1,mem_module_mcu_wake_pin
+	branch gpio_out_active
+
+module_check_mcu_wake_pin_high:
+	fetcht 1,mem_module_mcu_wake_pin
+	branch gpio_check_active
+
+module_set_mcu_wake_pin_low:
+	fetcht 1,mem_module_mcu_wake_pin
+	branch gpio_out_inactive
+
+
+delay:
+	increase -1,pdata
+	nop 38
+	nbranch delay,blank
+	rtn
+
+/*********************hci command end*********************/
+
+/*********************hci ble receive data start*********************/
+
+//rega is le rx data address
+//regb is le rx data length
+//mem_le_att_handle is write handle
+module_le_receive_data:
+	call module_check_ble_encrypt_state
+	rtn user
+	copy rega,pdata
+	store 2,mem_module_le_rx_data_address
+	copy regb,pdata
+	store 1,mem_module_le_rx_data_len
+	fetch 2,mem_le_att_handle
+	fetcht 2,mem_module_data_write_handle
+	isub temp,null
+	branch module_le_receive_data_ok,zero
+	fetcht 2,mem_module_data_write_handle2
+	isub temp,null
+	nrtn zero
+module_le_receive_data_ok:	
+	store 2,mem_module_le_rx_data_handle
+	branch module_hci_event_receive_le_data
+
+
+/*********************hci ble receive data end*********************/
+
+module_exit_sniff:
+	fetch 1,mem_module_flag
+	rtnbit1 MOUDLE_TASK_UNSNIFF
+	call module_set_unsniff_task_flag	
+	branch app_bt_sniff_exit
+
+
+module_set_lpm_mult_2:
+	jam 2,mem_lpm_mult
+	rtn
+
+
+
+module_bb_event_timer:
+	branch module_read_vdd_timer
+
+module_read_vdd_timer:
+	fetch 1,mem_module_read_vdd_flag
+	rtn blank
+	fetch 1,mem_module_read_vdd_count
+	rtn blank
+	increase -1,pdata
+	store 1,mem_module_read_vdd_count
+	nrtn blank
+	jam FLAG_MODULE_READ_VDD_COUNT,mem_module_read_vdd_count
+	call adc_set_mode
+	call vdd_calculate_by_mode
+	div pdata,0x64
+	call wait_div_end
+	quotient pdata
+	remainder temp
+	store 1,mem_module_vdd_quotient
+	storet 1,mem_module_vdd_remainder
+	rtn	
+	
+
+module_control_air_flow:
+	call check_uart_tx_buff
+	branch app_l2cap_flow_control_enable,positive
+	branch app_l2cap_flow_control_disable
+
+
+/**************module state *******************/
+module_set_sniff_task_flag:
+	arg MOUDLE_TASK_SNIFF,queue
+	branch module_set_state
+
+module_clear_sniff_task_flag:
+	arg MOUDLE_TASK_SNIFF,queue
+	branch module_clr_state
+
+module_set_unsniff_task_flag:
+	arg MOUDLE_TASK_UNSNIFF,queue
+	branch module_set_state
+
+module_clear_unsniff_task_flag:
+	arg MOUDLE_TASK_UNSNIFF,queue
+	branch module_clr_state
+
+module_set_le_tx_data_flag:
+	arg MODULE_FLAG_BLE_DATA_FINISH,queue
+	branch module_set_state
+	
+module_clear_le_tx_data_flag:
+	arg MODULE_FLAG_BLE_DATA_FINISH,queue
+	branch module_clr_state
+
+module_clr_state:
+	fetch 1,mem_module_flag
+	qset0 pdata
+	store 1,mem_module_flag
+	rtn
+
+module_set_state:
+	fetch 1,mem_module_flag
+	qset1 pdata
+	store 1,mem_module_flag
+	rtn
+	
+/**************module state end*******************/
+
+
+else
+
+endif
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_mouse.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_mouse.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_mouse.prog	(working copy)
@@ -0,0 +1,2658 @@
+
+
+//define FPGA_DEBUG
+
+
+ifdef COMPILE_MOUSE
+mouse_init:
+	call mouse_setting_config
+	call spi_ncs_enable
+	call mouse_init_sunt
+	call mouse_dpi_config
+	call spi_ncs_disable
+	rtn wake
+	call mouse_cheak_enable_usb
+	call mouse_cb_fuction
+//	fetch 1,mem_wakup_from_power_flag
+//	isolate0 gpio_latch,pdata
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit1 MOUSE_ENABLE_USB
+	call mouse_wakeup_from_power//,true	// enter 
+ifdef FPGA_DEBUG
+	arg MOUSE_FPGA_DEBUG_GPIO,temp
+	call gpio_config_output
+	arg MOUSE_FPGA_RF_WORK_DEBUG_GPIO,temp
+	call gpio_config_output
+	arg MOUSE_FPGA_DEBUG_GPIO,temp
+	call gpio_out_active
+endif
+	rtnmark1 mark_24g
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery
+	branch mouse_check_reconn_target
+
+
+mouse_delay_4s:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_INIT_DELAY
+	arg 20,loopcnt
+mouse_delay_20ms:
+	setarg 200000
+	call sleep
+	loop delay_10ms
+	rtn
+
+	
+mouse_cheak_enable_usb:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_USB
+	branch usb_init
+	
+
+mouse_cb_fuction:
+	setarg mouse_le
+	store 2,mem_cb_le_process
+	setarg mouse_send_process
+	store 2,mem_cb_bt_process
+	setarg mouse_process_lpm_before
+	store 2,mem_cb_before_lpm
+	setarg mouse_priority_bb_event
+	store 2,mem_cb_bb_event_process
+	setarg mouse_idle
+	store 2,mem_cb_idle_process
+	setarg mouse_before_hibernate
+	store 2,mem_cb_before_hibernate
+	setarg le_mouse_bb_event_connect_complete
+	store 2,mem_cb_att_write
+
+	call g24_head_ptr2regc
+	setarg mouse_g24_package_data
+	add regc,offset_24g_cb_data,contw
+	istore 2,contw
+	setarg mouse_g24_enter_lpm
+	add regc,offset_24g_cb_lpm_prepare,contw
+	istore 2,contw
+	setarg mouse_lpm_before_common
+	add regc,offset_24g_cb_lpm_before,contw
+	istore 2,contw
+	
+	setarg mouse_bb_event_timer
+	store 2,mem_cb_event_timer
+	setarg mouse_spi_write_flash_cb
+	store 2,mem_cb_spi_flash_write_complate
+	rtn
+mouse_spi_write_flash_cb:
+mouse_spi_init:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_SPI2,spid_init
+	branch spid_init2
+
+mouse_setting_config:
+	rtn wake
+	call g24_set_device_addr
+	call mouse_gpio_init
+	call mouse_param_init
+	call mouse_adc_init
+	call le_set_config_fixed_ltk
+	call le_set_justwork
+	call le_set_fixed_ltk
+	call le_set_config_read_authentication
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_EEPROM,mouse_init_iic
+	bbit1 MOUSE_ENABLE_FLASH,mouse_load_flash_info_cheak
+	rtn
+
+mouse_init_iic:
+	call iic_init_390k
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	isolate1 MOUSE_ENABLE_2K_EEPROM,pdata
+	ncall clear_eeprom_size_2k,true
+	call mouse_load_eeprom_dpi
+	call mouse_init_environment
+	call mouse_set_24g_addr_eeprom
+	branch iicd_read_eep_data
+
+mouse_wakeup_from_power:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_WAKEUP_FROM_POWER,mouse_wakeup_no_from_power
+	fetch 1,mem_wakup_from_power_flag
+	isolate0 gpio_latch,pdata
+	nrtn true
+mouse_wakeup_no_from_power:
+	fetch 1,mem_reconn_times_init
+	store 1,mem_reconn_times
+	fetch 1,mem_config_function_enable
+	rtnbit1 ENABLE_SELECT_DEVICE_BY_SWITCH
+mouse_start_24g_mode:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_24G
+	bbit1 MOUSE_ENABLE_AUTO_24G_PARING,g24_auto_pair_start
+	branch g24_check_51cmd_start_24g
+le_mouse_bb_event_connect_complete:
+	fetch 1,mem_le_att_handle
+	sub pdata,26,pdata
+	nrtn zero
+	jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp
+	call ui_ipc_send_cmd
+mouse_le_write_enable:	
+	arg WRITE_REQ_ENABLE_FLAG,queue
+	branch mouse_le_enable_connect_flag
+
+mouse_dpi_up:
+	fetch 1,mem_mouse_dpi_button_state
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_mouse_dpi_button_state
+	rtn
+mouse_dpi_config:
+	fetch 1,mem_config_sensor_motion
+	and pdata,0x0f,pdata
+	store 1,mem_mouse_dpi
+	branch mouse_seting_dpi+2
+
+
+mouse_dpi_cheak:
+	fetcht 1,mem_dpi_button_gpio
+	call gpio_get_bit
+	nbranch mouse_dpi_up,true
+mouse_dpi_down:
+	fetch 1,mem_mouse_dpi_button_state
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_mouse_dpi_button_state
+	fetch 1,mem_mouse_dpi
+	increase 1,pdata
+	and pdata,0x03,pdata
+	store 1,mem_mouse_dpi
+	call mouse_seting_dpi
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_EEPROM,mouse_store_eerpom_dpi
+	bbit1 MOUSE_ENABLE_FLASH,mouse_before_store_flash_cpi
+	rtn
+mouse_before_store_flash_cpi:
+	arg MOUSE_SPI2_CLK_GPIO,temp
+	call gpio_config_output				//hold high
+	arg MOUSE_SPI2_SDIO_GPIO,temp
+	call gpio_config_output 			//hold high 
+	branch mouse_store_flash_device_info
+
+mouse_seting_dpi:
+	bpatch patch1c_3,mem_patch1c
+	call mosue_dpi_led_blink_init
+	fetch 1,mem_config_sensor_type
+	beq P3610,mouse_seting_3610_dpi
+	beq P3212,mouse_seting_3212_dpi
+	fetch 1,mem_mouse_dpi
+	beq MOUSE_DPI_LEVEL1,mouse_set_cpi1
+	beq MOUSE_DPI_LEVEL2,mouse_set_cpi2
+	beq MOUSE_DPI_LEVEL3,mouse_set_cpi3
+	beq MOUSE_DPI_LEVEL4,mouse_set_cpi4
+mouse_set_cpi2:
+	fetch 1,mem_320x_dpi_2
+	branch mouse_p3205_dpi
+mouse_set_cpi1:
+	fetch 1,mem_320x_dpi_1
+	branch mouse_p3205_dpi
+mouse_set_cpi3:
+	fetch 1,mem_320x_dpi_3
+	branch mouse_p3205_dpi
+mouse_set_cpi4:
+	fetch 1,mem_320x_dpi_4
+	branch mouse_p3205_dpi
+moue_seting_cpi_count:
+	fetch 1,mem_config_sensor_type
+	rtneq P3065_XY
+	fetch 1 ,mem_mouse_cpi_count
+	increase 1,pdata
+	store 1,mem_mouse_cpi_count
+	rtn
+
+mouse_seting_3212_dpi:
+	fetch 1,mem_mouse_dpi
+	beq MOUSE_DPI_LEVEL1,mouse_set_p3212_cpi1
+	beq MOUSE_DPI_LEVEL2,mouse_set_p3212_cpi2
+	beq MOUSE_DPI_LEVEL3,mouse_set_p3212_cpi3
+	beq MOUSE_DPI_LEVEL4,mouse_set_p3212_cpi4
+mouse_set_p3212_cpi2:
+	fetch 1,mem_3212_dpi_2
+	branch mouse_p3212_dpi
+mouse_set_p3212_cpi1:
+	fetch 1,mem_3212_dpi_1
+	branch mouse_p3212_dpi
+mouse_set_p3212_cpi3:
+	fetch 1,mem_3212_dpi_3
+	branch mouse_p3212_dpi
+mouse_set_p3212_cpi4:
+	fetch 1,mem_3212_dpi_4
+mouse_p3212_dpi:
+	store 1,mem_mouse_cpi_count
+	lshift8 pdata,pdata
+	copy pdata,rega
+	add pdata,MOUSE_P3212_DPI_XADDRESS,pdata
+  	call twspi_write
+ 	copy rega,pdata
+  	add pdata,MOUSE_P3212_DPI_YADDRESS,pdata
+	branch twspi_write
+	
+mouse_seting_3610_dpi:
+	fetch 1,mem_mouse_dpi
+	beq MOUSE_DPI_LEVEL1,mouse_set_p3610_cpi1
+	beq MOUSE_DPI_LEVEL2,mouse_set_p3610_cpi2
+	beq MOUSE_DPI_LEVEL3,mouse_set_p3610_cpi3
+	beq MOUSE_DPI_LEVEL4,mouse_set_p3610_cpi4
+mouse_set_p3610_cpi2:
+	fetch 1,mem_3610_dpi_2
+	branch mouse_p3610_dpi
+mouse_set_p3610_cpi1:
+	fetch 1,mem_3610_dpi_1
+	branch mouse_p3610_dpi
+mouse_set_p3610_cpi3:
+	fetch 1,mem_3610_dpi_3
+	branch mouse_p3610_dpi
+mouse_set_p3610_cpi4:
+	fetch 1,mem_3610_dpi_4
+mouse_p3610_dpi:
+	store 1,mem_mouse_cpi_count
+	call mouse_spi_sdio_gpio_pollup
+	fetch 1,mem_mouse_cpi_count
+mouse_reset_p3610_dpi:
+	add pdata,0x80,pdata
+	lshift8 pdata,pdata
+	add pdata,MOUSE_P3610_DPI_ADDRESS,pdata
+	copy pdata,rega
+	branch mouse_set_sensor_reg
+	
+mouse_p3205_dpi:
+	store 1,mem_mouse_cpi_count
+	call moue_seting_cpi_count
+	fetch 1,mem_mouse_cpi_count
+	setarg MOUSE_DPI_ADDRESS
+	call twspi_read
+	and pdata,0xf8,temp
+	fetch 1,mem_mouse_cpi_count
+	iadd temp,pdata
+	lshift8 pdata,pdata
+	add pdata,MOUSE_DPI_ADDRESS,pdata
+	branch twspi_write
+	
+
+mouse_init_environment:
+	call app_initflag_check
+	branch mouse_eeprom_load_recon_info,zero
+	call mouse_ble_init_address
+	call mouse_store_eeprom_device_info
+	branch app_initflag_store
+
+
+mouse_24g_pairing_button:
+	fetch 2,mem_24g_pairing_timer_count
+	rtn blank
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_24G
+	rtnbit1 MOSUE_24G_PAIRING_FLAG
+	rtnmark1 mark_24g
+	call mouse_check_key_gpio
+	rtnne MOUSE_LMR_BUTTON
+	call mouse_devce_led_off
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	call mouse_enable_function_flag
+	setarg 0
+	store 2,mem_mouse_direct_timer
+	store 1,mem_mouse_send_blank_timer
+	call g24_set0_mem_check_dongle_times
+	
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_RECONNECT,mouse_cancel_reconnect
+	bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect
+	bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect
+	call mouse_stop_discovery
+	branch g24_start_pairing_sm1
+	
+ifdef FPGA_DEBUG
+mouse_fpga_rf_working_normal:
+	fetch 1,mem_le_req_rcv
+	and pdata,0xfe,pdata
+	call mouse_fpga_working_fail,blank
+	fetch 1,mem_le_req_rcv
+	and pdata,0xfe,pdata
+	ncall mouse_fpga_working_normal,blank
+//	fetch 1,mem_inquiryscan_rcvcnt
+//	and pdata,0xfe,pdata
+//	call mouse_fpga_working_fail,blank
+//	fetch 1,mem_inquiryscan_rcvcnt
+//	and pdata,0xfe,pdata
+//	ncall mouse_fpga_working_normal,blank
+	rtn
+
+mouse_fpga_working_fail:
+	arg MOUSE_FPGA_RF_WORK_DEBUG_GPIO,temp
+	branch gpio_out_inactive
+
+mouse_fpga_working_normal:
+	arg MOUSE_FPGA_RF_WORK_DEBUG_GPIO,temp
+	branch gpio_out_active
+
+
+
+endif
+
+mouse_idle:
+ifdef FPGA_DEBUG
+	call mouse_fpga_rf_working_normal
+endif
+	call mouse_24g_pairing_button
+	call ui_check_paring_button
+	call mouse_dpi_cheak
+	call mouse_usb_isr
+	call mouse_wheel_check
+	branch mouse_usb_mode
+mouse_usb_isr:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_USB
+	call usb_isr	
+	branch usb_offline_state
+
+mouse_cheak_usb:
+	hfetch 1,core_usb_addr
+	bbit0 7,mouse_usb_no_exsit
+	bbit1 7,mouse_usb_exsit
+	rtn
+mouse_usb_no_exsit:
+	fetch 1,mem_usb_addr
+	rtnbit0 7
+	branch soft_reset_chip
+mouse_usb_exsit:
+	fetch 1,mem_usb_addr
+	rtnbit1 7
+	branch mouse_stop_bluetooth_mode
+	
+mouse_usb_mode:
+	call mouse_cheak_usb
+	hfetch 1,core_usb_addr
+	store 1,mem_usb_addr
+	rtnbit0 7
+	call mouse_clkn_check 
+	fetch 4,mem_btclk_sensor
+	fetcht 1,mem_wire_usb_interval
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	store 4,mem_btclk_sensor
+	call mouse_motion
+	nrtn user
+	jam 4,mem_usb_tx_enable
+	branch mouse_wired_to_usb
+
+mouse_clkn_check:
+	fetcht 4,mem_btclk_sensor
+	copy clkn_bt,pdata
+	isub temp,null
+	ncall mouse_clkn_timeout,positive
+	rtn
+mouse_clkn_timeout:
+	setarg 0
+	store 4,mem_btclk_sensor
+	rtn
+
+
+	
+mouse_wired_to_usb:
+	fetch 1,mem_usb_tx_enable
+	rtnbit0 2
+	branch mouse_data_push
+mouse_data_push:
+	hfetch 1,core_usb_addr
+	rtnbit0 7
+	jam USB_EP2_MS,mem_usb_ep2_data
+	setarg MS_REPORT_ID
+	store 1,mem_usb_mouse_data	
+	fetch 7,mem_mouse_key
+	istore 7,contw
+	rtn
+
+
+mouse_enable_clock_qdecoder:
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_QDECODER,pdata
+	hstore 2,core_clkoff
+	rtn
+
+mouse_param_init:
+	setarg 0x8c00				//bt sdp start address
+	store 2,mem_ui_uuid_table
+	setarg 0x8e7a				//ble attlist start address
+	store 2,mem_ui_le_uuid_table
+	setarg 0x2402
+	store 2,mem_fcomp_mul
+	setarg 0x2580
+	store 3,mem_class
+	jam 3,mem_lpm_mult_timeout
+	jam 8,mem_lpm_overhead
+	jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue
+	setarg 0x0200
+	store 2,mem_lpm_interval
+	jam 0x17,mem_le_local_mtu
+	jam 0x17,mem_le_remote_mtu
+//===========init spi param==============================
+	setarg 0x0a77
+	store 2,mem_spi_init_clk
+//===========default bt reconnect address===================	
+//	jam 1,mem_device_flag
+//	setarg 0x332211
+//	store 3,mem_device1_addr
+//	store 3,mem_device2_addr
+//	store 3,mem_device3_addr
+//	setarg 0x665544
+//	store 3,mem_device1_addr+3
+//	store 3,mem_device2_addr+3
+//	store 3,mem_device3_addr+3
+//	setarg 0x34
+//	store 1,mem_device1_type
+//	store 1,mem_device2_type
+//	store 1,mem_device3_type
+//===========all 16bit uuid==================================
+	setsect 0,0x306
+	setsect 1,0x4440
+	setsect 2,0x10000
+	setsect 3,0x4408
+	store 9,mem_all_uuid_16bits
+	setsect 0,0x1224
+	setsect 1,0x4000
+	setsect 2,0x0
+	istore 5,contw
+//===========features=====================================
+	setsect 0,0x3ffff
+	setsect 1,0x2fe23
+	setsect 2,0x199d9
+	setsect 3,0x20d
+	store 8,mem_features
+//======================================================	
+	setarg 0x012c  				//24g ban pairing timer init
+	store 2,mem_24g_pairing_timer_count
+	call le_modified_name
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag 
+	rtnbit0 MOUSE_ENABLE_GPIO_CONTROL_ADC_SENSOR
+	call mouse_sensor_set_angle
+	branch mouse_select_adc
+
+mouse_sensor_set_angle:
+	fetcht 1,mem_select_sensor_angle_gpio
+	call gpio_config_input
+	fetcht 1,mem_select_sensor_angle_gpio
+	call gpio_get_bit
+	jam MOUSE_3CLK_ANGLE,mem_config_sensor_angle
+	rtn true
+	jam MOUSE_12CLK_ANGLE,mem_config_sensor_angle
+	rtn
+
+mouse_select_adc:
+	fetcht 1,mem_select_adc_gpio
+	call gpio_config_input
+	fetcht 1,mem_select_adc_gpio
+	call gpio_get_bit
+	jam ADC_CONFIG_VINLPM,mem_adc_config_flag
+	rtn true
+	jam ADC_CONFIG_GPIO,mem_adc_config_flag
+	rtn
+	
+	
+mouse_adc_init:
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_VINLPM,mouse_adc_init_data_vinlpm
+	beq ADC_CONFIG_HVIN,mouse_adc_init_data_hvin
+	beq ADC_CONFIG_GPIO,mouse_adc_init_data_io
+	branch mouse_adc_init_data_vinlpm
+	
+mouse_adc_init_data_vinlpm:
+	fetcht 2,mem_2v_adc_vinlpm_data
+	fetch 2,mem_3v_adc_vinlpm_data
+	isub temp,pdata
+	mul32 pdata,20,pdata 
+	div pdata,100
+	call wait_div_end
+	quotient pdata
+	store 2,mem_adc_reference_voltage //vinlpm :2v2 low alter
+	rtn
+mouse_adc_init_data_hvin:
+	fetcht 2,mem_1v_adc_hvin_data
+	fetch 2,mem_5v_adc_hvin_data
+	isub temp,pdata
+	mul32 pdata,230,pdata 
+	div pdata,400
+	call wait_div_end
+	quotient pdata
+	store 2,mem_adc_reference_voltage //hvin :3v3 low alter
+	rtn
+mouse_adc_init_data_io:
+	fetch 2,mem_1v_adc_io_data
+	store 2,mem_adc_reference_voltage  //vio :1v low alter
+	rtn
+mouse_gpio_init:
+	fetcht 1,mem_eeprom_wp_gpio
+	call gpio_config_output
+	call usb_offline_check_init
+	fetcht 1,mem_lbutton_gpio
+	call gpio_config_input
+	fetcht 1,mem_rbutton_gpio
+	call gpio_config_input
+	fetcht 1,mem_mbutton_gpio
+	call gpio_config_input
+	fetcht 1,mem_sensor_data_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_sensor_reset_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_whee_a_data_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_whee_b_data_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_whee_ta_data_gpio
+	call gpio_config_input
+	fetcht 1,mem_whee_tb_data_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_bk_button_gpio
+	call gpio_config_input
+	fetcht 1,mem_fw_button_gpio
+	call gpio_config_input
+
+	fetcht 1,mem_config_low_voltage_alarm_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_config_device1_led_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_config_device2_led_gpio
+	call gpio_config_output
+	
+	fetcht 1,mem_config_device3_led_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_dpi_led_gpio
+	call gpio_config_output
+
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_config_input
+	
+	fetcht 1,mem_config_bt_button_gpio
+	call gpio_config_input	
+
+	fetcht 1,mem_dpi_button_gpio
+	branch gpio_config_input
+
+mouse_wheel_gpio_set_wake:
+	fetcht 1,mem_whee_a_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_b_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_ta_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_tb_data_gpio
+	branch gpio_set_wake_by_current_state
+	
+mouse_before_hibernate_wheel_gpio_set:
+	fetcht 1,mem_whee_a_data_gpio
+	call mouse_gpio_set_pupd_by_input
+	fetcht 1,mem_whee_b_data_gpio
+	call mouse_gpio_set_pupd_by_input
+	fetcht 1,mem_whee_ta_data_gpio
+	call mouse_gpio_set_pupd_by_input
+	fetcht 1,mem_whee_tb_data_gpio
+	branch mouse_gpio_set_pupd_by_input
+
+mouse_gpio_set_pupd_by_input:
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	and temp,0x7f,queue
+	hfetch 4,core_gpio_in
+	qisolate1 pdata
+	hfetch 4,core_gpio_pu0
+	qsetflag true,pdata
+	hstore 4,core_gpio_pu0
+	hfetch 4,core_gpio_pd0
+	nqsetflag true,pdata
+	hstore 4,core_gpio_pd0
+	rtn
+	
+mouse_before_hibernate:
+	enable user
+	hfetch 4,0x8138
+	setflag user,26,pdata
+	hstore 4,core_lpm_reg
+	call lpm_write_ctrl
+	call mouse_devce_led_off
+	call mouse_before_hibernate_wheel_gpio_set
+//	call gpio_set_before_lpm_common
+	branch mouse_lpm_before_common
+
+
+	
+mouse_process_lpm_before:
+	call mouse_lpm_before_common
+	fetch 1,mem_lpm_current_mult
+	nrtn blank					// 7.5ms, no gpio wakeup
+	branch gpio_clr_wake
+
+mouse_lpm_before_common:
+	call mouse_wheel_check
+	arg MOUSE_SPI1_CLK_GPIO,temp					// set sclk high
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	isolate1 MOUSE_ENABLE_SPI2,pdata
+	call mouse_spi_clk_gpio,true
+	call gpio_config_output
+	call twspi_disable
+
+
+
+	fetcht 1,mem_lbutton_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_rbutton_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_mbutton_gpio
+	call gpio_set_wake_by_current_state
+
+	fetcht 1,mem_bk_button_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_fw_button_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_dpi_button_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_a_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_b_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_ta_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_whee_tb_data_gpio
+	call gpio_set_wake_by_current_state
+	fetcht 1,mem_sensor_data_gpio
+	branch gpio_set_wake
+	
+
+	
+mouse_spi_clk_gpio:
+	arg MOUSE_SPI2_CLK_GPIO,temp
+	rtn
+
+mouse_wheel_check:
+	bpatch patch1c_4,mem_patch1c
+	call mouse_t_wheel_scan
+	call mouse_wheel_scan
+	fetch 1,mem_wheel_tb_new_pinlevel
+	fetcht 1,mem_wheel_tb_old_pinlevel
+	store 1,mem_wheel_tb_old_pinlevel
+	isub temp,null
+	nbranch app_lpm_wake_auto_lock,zero
+	fetch 1,mem_mwheel_b_new_pinlevel
+	fetcht 1,mem_mwheel_b_old_pinlevel
+	store 1,mem_mwheel_b_old_pinlevel
+	isub temp,null
+	nbranch app_lpm_wake_auto_lock,zero
+	rtn
+mouse_t_wheel_scan:
+	fetch 1,mem_whee_ta_data_gpio
+	rtneq GPIO_DISABLE
+	arg 0,rega
+	fetcht 1,mem_whee_ta_data_gpio
+	call gpio_get_bit
+	setflag true,0,rega
+	fetcht 1,mem_whee_tb_data_gpio
+	call gpio_get_bit
+	setflag true,1,rega
+	copy rega,pdata
+	store 1,mem_wheel_tb_new_pinlevel
+	beq 0x01,mouse_t_wheel_scan_judge1
+	beq 0x02,mouse_t_wheel_scan_judge2
+	fetch 1,mem_wheel_tog
+	bbit1 7,mouse_t_wheel_scan_judge3
+	rtn
+
+mouse_t_wheel_scan_judge1:
+	fetch 1,mem_wheel_tb_old_pinlevel
+	beq 0,mouse_t_wheel_scan_judge11
+	beq 3,mouse_t_wheel_scan_judge12
+	rtn
+mouse_t_wheel_scan_judge2:
+	fetch 1,mem_wheel_tb_old_pinlevel
+	beq 0,mouse_t_wheel_scan_judge21
+	beq 3,mouse_t_wheel_scan_judge22
+	rtn
+mouse_t_wheel_scan_judge11:
+	jam 0x82,mem_wheel_tog
+	rtn
+mouse_t_wheel_scan_judge12:
+	jam 0x81,mem_wheel_tog
+	rtn
+mouse_t_wheel_scan_judge21:
+	jam 0x80,mem_wheel_tog
+	rtn
+mouse_t_wheel_scan_judge22:
+	jam 0x83,mem_wheel_tog
+	rtn
+mouse_t_wheel_scan_judge3:
+	fetch 1,mem_wheel_tog
+	set0 7,pdata
+	store 1,mem_wheel_tog
+	beq 0,mouse_t_wheel_scan_judge30
+	beq 1,mouse_t_wheel_scan_judge31
+	beq 2,mouse_t_wheel_scan_judge32
+	beq 3,mouse_t_wheel_scan_judge33
+	rtn
+mouse_t_wheel_scan_judge30:
+	fetch 1,mem_wheel_tb_new_pinlevel
+	beq 3,mouse_wheel_t_forward
+	rtn
+mouse_t_wheel_scan_judge31:
+	fetch 1,mem_wheel_tb_new_pinlevel
+	beq 0,mouse_wheel_t_forward
+	rtn
+mouse_t_wheel_scan_judge32:
+	fetch 1,mem_wheel_tb_new_pinlevel
+	beq 3,mouse_wheel_t_back
+	rtn
+mouse_t_wheel_scan_judge33:
+	fetch 1,mem_wheel_tb_new_pinlevel
+	beq 0,mouse_wheel_t_back
+	rtn
+mouse_wheel_t_forward:
+	fetch 1,mem_mouse_tz_data_count1
+	increase 1,pdata
+	store 1,mem_mouse_tz_data_count1
+	sub pdata,1,null
+	rtn positive
+	jam 0,mem_mouse_tz_data_count1
+	fetch 1,mem_mouse_tz_data
+	increase 1,pdata
+	store 1,mem_mouse_tz_data
+	rtn
+mouse_wheel_t_back:
+	fetch 1,mem_mouse_tz_data_count
+	increase 1,pdata
+	store 1,mem_mouse_tz_data_count
+	sub pdata,1,null
+	rtn positive
+	jam 0,mem_mouse_tz_data_count
+	fetch 1,mem_mouse_tz_data
+	increase -1,pdata
+	store 1,mem_mouse_tz_data
+	rtn
+
+
+mouse_wheel_scan:
+	fetch 1,mem_whee_a_data_gpio
+	rtneq GPIO_DISABLE
+	arg 0,rega
+	fetcht 1,mem_whee_a_data_gpio
+	call gpio_get_bit
+	setflag true,0,rega
+	fetcht 1,mem_whee_b_data_gpio
+	call gpio_get_bit
+	setflag true,1,rega
+	copy rega,pdata
+	store 1,mem_mwheel_b_new_pinlevel
+	beq 0x01,mouse_wheel_scan_judge1
+	beq 0x02,mouse_wheel_scan_judge2
+	fetch 1,mem_mwheel_tog
+	bbit1 7,mouse_wheel_scan_judge3
+	rtn
+
+mouse_wheel_scan_judge1:
+	fetch 1,mem_mwheel_b_old_pinlevel
+	beq 0,mouse_wheel_scan_judge11
+	beq 3,mouse_wheel_scan_judge12
+	rtn
+mouse_wheel_scan_judge2:
+	fetch 1,mem_mwheel_b_old_pinlevel
+	beq 0,mouse_wheel_scan_judge21
+	beq 3,mouse_wheel_scan_judge22
+	rtn
+mouse_wheel_scan_judge11:
+	jam 0x82,mem_mwheel_tog
+	rtn
+mouse_wheel_scan_judge12:
+	jam 0x81,mem_mwheel_tog
+	rtn
+mouse_wheel_scan_judge21:
+	jam 0x80,mem_mwheel_tog
+	rtn
+mouse_wheel_scan_judge22:
+	jam 0x83,mem_mwheel_tog
+	rtn
+mouse_wheel_scan_judge3:
+	fetch 1,mem_mwheel_tog
+	set0 7,pdata
+	store 1,mem_mwheel_tog
+	beq 0,mouse_wheel_scan_judge30
+	beq 1,mouse_wheel_scan_judge31
+	beq 2,mouse_wheel_scan_judge32
+	beq 3,mouse_wheel_scan_judge33
+	rtn
+mouse_wheel_scan_judge30:
+	fetch 1,mem_mwheel_b_new_pinlevel
+	beq 3,mouse_wheel_forward
+	rtn
+mouse_wheel_scan_judge31:
+	fetch 1,mem_mwheel_b_new_pinlevel
+	beq 0,mouse_wheel_forward
+	rtn
+mouse_wheel_scan_judge32:
+	fetch 1,mem_mwheel_b_new_pinlevel
+	beq 3,mouse_wheel_back
+	rtn
+mouse_wheel_scan_judge33:
+	fetch 1,mem_mwheel_b_new_pinlevel
+	beq 0,mouse_wheel_back
+	rtn
+mouse_wheel_forward:
+	jam 0,mem_mouse_z_data_count1
+	fetch 1,mem_mouse_z_data
+	increase 1,pdata
+	store 1,mem_mouse_z_data
+	rtn
+mouse_wheel_back:
+	jam 0,mem_mouse_z_data_count
+	fetch 1,mem_mouse_z_data
+	increase -1,pdata
+	store 1,mem_mouse_z_data
+	rtn
+	
+	
+mouse_hid_connected:
+	setarg HID_HANDSHAKE_TIMEOUT
+	store 1,mem_hid_handshake_timer_count
+	rtn
+	
+mouse_send_process:
+	fetch 1,mem_app_handshake_flag
+	rtn blank
+	call l2cap_malloc_is_fifo_nearly_full
+	nrtn blank
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOSUE_24G_PAIRING_FLAG,mouse_send_empty_data
+	bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_send_empty_data
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_send_empty_data
+	call mouse_motion
+	nrtn user
+mouse_send_data:
+	arg 9,rega
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_int_remote_cid
+	istore 2,contw
+	setarg 0x02a1
+	istore 2,contw
+	fetch 7,mem_mouse_key
+	istore 7,contw
+	rtn
+
+	
+mouse_send_empty_data:
+	setarg 0
+	store 7,mem_mouse_key
+	branch mouse_send_data
+
+
+mouse_no_data_timer_init:
+	fetch 2,mem_mouse_no_data_timeout
+	store 2,mem_mouse_no_data_timer
+	rtn
+
+	
+mouse_fill_data_le:
+	bpatch patch1c_5,mem_patch1c
+	arg 7,rega //len
+	fetcht 2,mem_le_notify_handle
+	call le_att_malloc_tx_notify
+	fetch 7,mem_mouse_key
+	istore 7,contw
+	rtn
+
+mouse_motion:
+	bpatch patch1c_6,mem_patch1c
+	disable user
+	setarg 0
+	store 6,mem_mouse_x
+	call mouse_cheak_sensor_data
+	call mouse_zwheel
+	call mouse_t_zwheel
+	call mouse_key
+	nrtn user
+	call mouse_no_data_timer_init
+	arg MOUSE_STATUE_UP_FLAG,queue
+	branch mouse_enable_function_flag
+	
+motion_6clk_direction_dispose:
+	fetch 2,mem_mouse_x
+	sub pdata,0,pdata
+	store 2,mem_mouse_x
+	branch enable_user
+motion_12clk_direction_dispose:
+	fetch 2,mem_mouse_y
+	sub pdata,0,pdata
+	store 2,mem_mouse_y
+	branch enable_user
+motion_9clk_direction_dispose:
+	fetch 2,mem_mouse_y
+	sub pdata,0,pdata
+	store 2,mem_mouse_y
+	fetch 2,mem_mouse_x
+	sub pdata,0,pdata
+	store 2,mem_mouse_x
+	call mouse_sensor_data_swap_places
+	branch enable_user
+motion_3clk_direction_dispose:
+	call mouse_sensor_data_swap_places
+	branch enable_user
+mouse_cheak_sensor_data:
+	fetch 1,mem_spi_write_flash_sm
+	rtnne FLASH_SM_NO_BUYS
+	fetch 1,mem_config_sensor_type
+	beq P3205,mouse_p32xx_sensor_motion
+	beq P3065,mouse_p32xx_sensor_motion
+	beq KA8,mouse_p32xx_sensor_motion
+	beq P3204,mouse_p32xx_sensor_motion
+	beq P3212,mouse_p3212_sensor_motion
+	beq P3610,mouse_p3610_sensor_motion
+	beq P3065_xy,mouse_p32xx_sensor_motion
+	branch mouse_p32xx_sensor_motion
+	
+mouse_clear_sensor_data:
+	fetch 1,mem_mouse_move_flag
+	call mouse_read_sensor_common,blank
+	jam 1,mem_mouse_move_flag
+	rtn
+
+
+mouse_p3212_sensor_motion:
+	call mouse_clear_sensor_data
+	fetcht 1,mem_sensor_data_gpio
+	call gpio_get_bit
+	nrtn true
+	setarg PAN_REG_PID_L
+	call twspi_read
+	bne P32XX_ID1,mouse_twspi_reset
+	setarg PAN_REG_MOTION_STAUS
+	call twspi_read
+	rtnbit0 7
+	call mouse_read_sensor_common
+	call mouse_read_3212sensor_xy_high
+	store 1,mem_mouse_xy_h
+	rshift4 pdata,pdata
+	call extsign_bit3
+	store 1,mem_mouse_x+1
+	fetch 1,mem_mouse_xy_h
+	and pdata,0x0f,pdata
+	call extsign_bit3
+	store 1,mem_mouse_y+1
+	fetch 1,mem_config_sensor_angle
+	beq MOUSE_6CLK_ANGLE,motion_6clk_direction_dispose
+	beq MOUSE_9CLK_ANGLE,motion_9clk_direction_dispose
+	beq MOUSE_12CLK_ANGLE,motion_12clk_direction_dispose
+	beq MOUSE_3CLK_ANGLE,motion_3clk_direction_dispose
+	rtn
+
+mouse_read_3212sensor_xy_high:
+	setarg 0x12
+	branch twspi_read
+	
+mouse_p3065_judge:
+	beq P3065_ID1,mouse_p32xx_sensor_motion_1
+	branch mouse_twspi_reset
+	
+mouse_p32xx_sensor_motion:
+	call mouse_clear_sensor_data
+	disable user
+	fetcht 1,mem_sensor_data_gpio
+	call gpio_get_bit
+	nrtn true
+	setarg PAN_REG_PID_L
+	call twspi_read
+	bne P32XX_ID1,mouse_p3065_judge   
+mouse_p32xx_sensor_motion_1:
+	setarg PAN_REG_MOTION_STAUS
+	call twspi_read
+	rtnbit0 7
+	call mouse_read_sensor_common
+	fetch 1,mem_mouse_x
+	call extsign
+	store 2,mem_mouse_x
+	fetch 1,mem_mouse_y
+	call extsign
+	store 2,mem_mouse_y
+	fetch 1,mem_config_sensor_angle
+	beq MOUSE_6CLK_ANGLE,motion32xx_6clk_direction_selection
+	beq MOUSE_9CLK_ANGLE,motion32xx_9clk_direction_selection
+	beq MOUSE_12CLK_ANGLE,motion32xx_12clk_direction_selection
+	beq MOUSE_3CLK_ANGLE,motion32xx_3clk_direction_selection
+	rtn
+	
+motion32xx_6clk_direction_selection:
+	call motion_6clk_direction_dispose
+	branch mouse_sensor_sdio_low
+motion32xx_9clk_direction_selection:
+	call motion_9clk_direction_dispose
+	branch mouse_sensor_sdio_low
+motion32xx_12clk_direction_selection:
+	call motion_12clk_direction_dispose
+	branch mouse_sensor_sdio_low
+motion32xx_3clk_direction_selection:
+	call motion_3clk_direction_dispose
+	branch mouse_sensor_sdio_low
+	
+mouse_sensor_data_swap_places:
+	fetch 2, mem_mouse_y
+	fetcht 2,mem_mouse_x
+	store 2,mem_mouse_x
+	storet 2,mem_mouse_y
+	rtn
+//input regb  output:pdata
+mouse_p3610sensor_read:
+	call spi_ncs_enable
+	nop 100
+	copy regb,pdata
+	call twspi_read
+	copy pdata,regb
+	call spi_ncs_disable
+	nop 100
+	copy regb,pdata
+	rtn	
+mouse_p3610_sensor_motion:
+	disable user
+	fetcht 1,mem_sensor_data_gpio
+	call gpio_get_bit
+	nrtn true
+	arg PAN_REG_MOTION_STAUS,regb
+	call mouse_p3610sensor_read
+	rtnbit0 7
+	arg PAN_REG_PID_L,regb
+	call mouse_p3610sensor_read
+	store 1,mem_sensor_id1
+	bne P3610_ID1,mouse_init_3610sensor_reset
+	fetch 1,mem_mouse_move_flag
+	call mouse_read_sensor3610_data,blank
+	jam 1,mem_mouse_move_flag
+	call mouse_read_sensor3610_data
+	fetch 1,mem_mouse_xy_h
+	rshift4 pdata,pdata
+	call extsign_bit3
+	store 1,mem_mouse_x+1
+	fetch 1,mem_mouse_xy_h
+	and pdata,0x0f,pdata
+	call extsign_bit3
+	store 1,mem_mouse_y+1
+	fetch 1,mem_config_sensor_angle
+	beq 0,motion3610_6clk_direction_selection
+	beq 1,motion3610_9clk_direction_selection
+	beq 2,motion3610_12clk_direction_selection
+	beq 3,motion3610_3clk_direction_selection
+	rtn
+
+mouse_3610_smart_select:
+	fetch 1,mem_sensor_smart_flag
+	beq P3610_SMART_ENABLE,mouse_3610_smart_disable
+	beq P3610_SMART_DISABLE,mouse_3610_smart_enable
+	rtn
+
+
+motion3610_6clk_direction_selection:
+	call motion_6clk_direction_dispose
+	branch mouse_3610_smart_select
+	
+motion3610_12clk_direction_selection:
+	call motion_12clk_direction_dispose
+	branch mouse_3610_smart_select
+	
+motion3610_9clk_direction_selection:
+	call motion_9clk_direction_dispose
+	branch mouse_3610_smart_select
+	
+motion3610_3clk_direction_selection:
+	call motion_3clk_direction_dispose
+	branch mouse_3610_smart_select
+	
+mouse_read_sensor3610_data:
+	call spi_ncs_enable
+	call mouse_read_sensor_common
+	arg 5,pdata
+	call twspi_read
+	store 1,mem_mouse_xy_h
+	arg 7,pdata
+	call twspi_read
+	store 1,mem_sensor_shutter_hi
+	arg 8,pdata
+	call twspi_read
+	store 1,mem_sensor_shutter_lo
+	branch spi_ncs_disable
+
+
+mouse_3610_smart_enable:
+	fetch 1,mem_sensor_shutter_hi
+	rtnne 0
+	fetch 1,mem_sensor_shutter_lo
+	sub pdata,45,null
+	rtn positive
+	jam P3610_SMART_ENABLE,mem_sensor_smart_flag
+	setarg 0xba41
+	call sensor_write
+	setarg 0x0032
+	call sensor_write
+	setarg 0xb541
+	branch sensor_write
+mouse_3610_smart_disable:
+	fetch 1,mem_sensor_shutter_hi
+	rtnne 0
+	fetch 1,mem_sensor_shutter_lo
+	sub pdata,45,null
+	nrtn positive
+	jam P3610_SMART_DISABLE,mem_sensor_smart_flag
+	setarg 0xba41
+	call sensor_write
+	setarg 0x8032
+	call sensor_write
+	setarg 0xb541
+	branch sensor_write
+
+
+
+mouse_read_sensor_common:
+	arg PAN_REG_DELTA_X,pdata
+	call twspi_read
+	store 2,mem_mouse_x
+	arg PAN_REG_DELTA_Y,pdata
+	call twspi_read
+	store 2,mem_mouse_y
+	rtn
+
+mouse_set_qdecoder_x:
+	arg MOUSE_DEFAULT_XA_GPIO,temp
+	call gpio_config_input
+	arg MOUSE_DEFAULT_XA_GPIO,temp
+	call gpio_get_bit
+	rtn true
+	hfetch 1,core_qdec_cntx
+	set1 4,pdata
+	hstore 1,core_qdec_cntx
+	rtn
+
+mouse_hardware_zwheel:
+	fetcht 1,mem_mouse_z_data
+	hfetch 1,core_qdec_cntx
+	iadd temp,pdata
+	rtn blank
+	store 1,mem_mouse_z
+	jam 0,mem_mouse_z_data
+	branch enable_user
+mouse_hardware_zwheel_beforelpm:
+	fetcht 1,mem_mouse_z_data
+	hfetch 1,core_qdec_cntx
+	iadd temp,pdata
+	store 1,mem_mouse_z_data
+	rtn
+mouse_zwheel:
+	fetch 1,mem_mouse_z_data
+	rtn blank	
+	store 1,mem_mouse_z
+	jam 0,mem_mouse_z_data
+	branch enable_user
+	
+mouse_t_zwheel:
+	fetch 1,mem_mouse_tz_data
+	rtn blank	
+	store 1,mem_mouse_tz
+	jam 0,mem_mouse_tz_data
+	branch enable_user
+	
+mouse_check_key_gpio:
+	arg 0,rega
+	fetcht 1,mem_lbutton_gpio
+	call gpio_get_bit
+	setflag true,0,rega
+	fetcht 1,mem_rbutton_gpio
+	call gpio_get_bit
+	setflag true,1,rega
+	fetcht 1,mem_mbutton_gpio
+	call gpio_get_bit
+	setflag true,2,rega
+	call mouse_check_s_key_gpio
+	copy rega,pdata
+	rtn
+mouse_check_s_key_gpio:
+	fetch 1,mem_bk_button_gpio
+	rtneq GPIO_DISABLE
+	fetcht 1,mem_bk_button_gpio
+	call gpio_get_bit
+	setflag true,3,rega
+	fetcht 1,mem_fw_button_gpio
+	call gpio_get_bit
+	setflag true,4,rega
+	rtn
+
+mouse_key:
+	call mouse_check_key_gpio
+	call mouse_set_mult
+	call mouse_24g_key
+	copy rega,pdata
+	fetcht 1,mem_mouse_key
+	store 1,mem_mouse_key	
+	ixor temp,pdata
+	sub pdata,0,null
+	rtn zero
+	branch enable_user
+
+mouse_24g_key:
+	rtnmark0 mark_24g
+	copy rega,pdata
+	rtn blank
+	store 1,mem_mouse_key
+	branch enable_user
+
+//short mult: no key 
+mouse_set_mult:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,mouse_set_ble_mult
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,mouse_set_bt_mult
+	rtn
+mouse_set_ble_mult:
+	copy rega,pdata
+	nbranch le_set_config_short_mult,blank
+	branch le_clr_config_short_mult
+mouse_set_bt_mult:
+	copy rega,pdata
+	nbranch classic_bt_set_mult_short_flag,blank
+	branch classic_bt_clr_mult_short_flag
+	
+	/* sdio high will cost extra 9mA */
+mouse_sensor_sdio_low:
+	bpatch patch1c_7,mem_patch1c
+	arg MOUSE_SPI1_SDIO_GPIO,temp
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	isolate1 MOUSE_ENABLE_SPI2,pdata
+	call mouse_sensor_sdio_low2,true
+	call gpio_get_bit
+	rtn true
+	setarg 0x0a
+	call twspi_read
+	nop 1000
+	branch mouse_sensor_sdio_low
+mouse_sensor_sdio_low2:
+	arg MOUSE_SPI2_SDIO_GPIO,temp
+	rtn
+
+mouse_spi_sdio_gpio_pollup:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_SPI2,mouse_spi2_sdio_gpio_pollup
+mouse_spi1_sdio_gpio_pollup:
+	arg MOUSE_SPI1_SDIO_GPIO,temp
+	branch gpio_config_input_without_wake
+mouse_spi2_sdio_gpio_pollup:
+	arg MOUSE_SPI2_SDIO_GPIO,temp
+	branch gpio_config_input_without_wake
+
+	
+mouse_init_sunt:
+	call mouse_spi_init
+	rtn wake
+	call mouse_spi_sdio_gpio_pollup
+	fetch 1,mem_config_sensor_type
+	beq P3610,mouse_init_3610sensor
+mouse_init_sensor:
+	call mouse_read_sensor_id
+	beq P32XX_ID1,mouse_init_p32xx_id2_judge
+	beq P3065_ID1,mouse_p3065_init_param
+	call mouse_twspi_reset
+	nop 1000
+	branch mouse_init_sensor
+mouse_twspi_reset:
+	bpatch patch1d_0,mem_patch1d
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_SPI2,twspi_reset2
+	branch twspi_reset
+
+mouse_init_3610sensor:
+	call mouse_read_sensor_id
+	beq P3610_ID1,mouse_init_p3610
+	call mouse_init_3610sensor_reset
+	branch mouse_init_3610sensor
+	
+mouse_read_sensor_id:
+	setarg PAN_REG_PID_H
+	call twspi_read
+	store 1,mem_sensor_id2
+	setarg PAN_REG_PID_L
+	call twspi_read
+	store 1,mem_sensor_id1
+	rtn
+mouse_init_p32xx_id2_judge:
+	fetch 1,mem_sensor_id2
+	beq P3205_TJ3T_ID2,mouse_3205_3t_init_param
+	beq P3204_TJ3L_ID2,mouse_3204_3l_init_param
+	beq P3212_ID2,mouse_3212_init_param
+	beq PKA8_ID2,mouse_ka8_init_param
+	rtn
+mouse_ka8_init_param:
+	jam KA8,mem_config_sensor_type
+	rtn
+mouse_p3065xy_init_param:
+	jam P3065_XY,mem_config_sensor_type
+	rtn
+mouse_p3065_init_param:
+	fetch 1,mem_sensor_id2
+	beq P3065_XY_ID2,mouse_p3065xy_init_param
+	jam P3065,mem_config_sensor_type
+	rtn
+mouse_3212_init_param:
+	jam P3212,mem_config_sensor_type
+	call mouse_sensor_disable_wp
+	setarg 0x3426
+	call twspi_write
+	setarg 0x0419
+	call twspi_write
+mouse_sensor_enable_wp:
+	setarg 0x0009
+	branch twspi_write
+mouse_sensor_disable_wp:
+	setarg 0x5a09
+	branch twspi_write
+
+mouse_3204_3l_init_param:
+	jam P3204,mem_config_sensor_type
+	call mouse_sensor_disable_wp
+	setarg 0x0f0d//
+	call twspi_write
+	setarg 0xe31d//
+	call twspi_write
+	setarg 0xd27d
+	call twspi_write
+	call mouse_32xx_init_param
+	branch mouse_32xx_init_param_1
+	
+mouse_32xx_init_param:
+	setarg 0x351b
+	call twspi_write
+	setarg 0xb428
+	call twspi_write
+	setarg 0x4629
+	call twspi_write
+	setarg 0x962a
+	call twspi_write
+	setarg 0x8c2b
+	call twspi_write
+	setarg 0x6e2c
+	call twspi_write
+	setarg 0x642d
+	call twspi_write
+	setarg 0x5f38
+	call twspi_write
+	setarg 0x0f39
+	call twspi_write
+	setarg 0x323a
+	call twspi_write
+	setarg 0x473b
+	call twspi_write
+	setarg 0x1042
+	branch twspi_write
+mouse_32xx_init_param_1:	
+	setarg 0x2e54
+	call twspi_write
+	setarg 0xf255
+	call twspi_write
+	setarg 0xf461
+	call twspi_write
+	setarg 0x7063
+	call twspi_write
+	setarg 0x5275
+	call twspi_write
+	setarg 0x4176
+	call twspi_write
+	setarg 0xed77
+	call twspi_write
+	setarg 0x2378
+	call twspi_write
+	setarg 0x4679
+	call twspi_write
+	setarg 0xe57a
+	call twspi_write
+	setarg 0x487c
+	call twspi_write
+	setarg 0x777e
+	call twspi_write
+	setarg 0x017f
+	call twspi_write
+	setarg 0x000b
+	call twspi_write
+	setarg 0x007f
+	call twspi_write
+	branch mouse_sensor_enable_wp
+	
+
+mouse_3205_3t_init_param:
+	jam P3205,mem_config_sensor_type
+	call mouse_sensor_disable_wp
+	setarg 0x100d//
+	call twspi_write
+	setarg 0xed1d//
+	call twspi_write
+	setarg 0x807d
+	call twspi_write
+	call mouse_32xx_init_param
+	setarg 0x0943
+	call twspi_write
+	branch mouse_32xx_init_param_1
+	
+	
+mouse_init_3610sensor_reset:
+	fetcht 1,mem_sensor_reset_gpio
+	call gpio_out_active
+	call delay_10ms
+	fetcht 1,mem_sensor_reset_gpio
+	call gpio_out_inactive
+	branch delay_10ms
+
+mouse_init_p3610:
+	jam P3610,mem_config_sensor_type
+	setarg 0xba41
+	call sensor_write
+	setarg 0x0d11
+	call sensor_write
+	setarg 0x041b
+	call sensor_write
+	setarg 0x041c
+	call sensor_write
+	setarg 0x0f1d
+	call sensor_write
+	setarg 0x0032
+	call sensor_write
+	setarg 0xb541
+	branch sensor_write
+	
+	
+//input-rega
+mouse_set_sensor_reg:
+	setarg 0xba41
+	call sensor_write
+	nop 4000
+	setarg 0xff7f
+	call sensor_write
+	copy rega,pdata
+	call sensor_write
+	setarg 0x007f
+	call sensor_write
+	setarg 0xb541
+	branch sensor_write
+
+extsign:
+	rtnbit0 7
+	arg 0xff00,temp
+	ior temp,pdata
+	rtn
+
+extsign_bit3:
+	rtnbit0 3
+	arg 0xf0,temp
+	ior temp,pdata
+	rtn
+
+
+mouse_le:
+	call le_fifo_check_nearly_full
+	nrtn blank
+	fetch 1,mem_le_connect_status_flag
+	and pdata,0x03,pdata
+	rtnne 0x03
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOSUE_24G_PAIRING_FLAG,mouse_le_send_empty_packet
+	bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_le_send_empty_packet
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_le_send_empty_packet
+	call mouse_motion
+	nrtn user
+	branch mouse_fill_data_le
+
+mouse_le_send_empty_packet:
+	setarg 0
+	store 7,mem_mouse_key
+	branch mouse_fill_data_le
+
+mouse_priority_bb_event:	
+	copy regc,pdata
+	beq BT_EVT_LE_CONNECTED,mouse_le_bb_event_connected
+	beq BT_EVT_BB_CONNECTED,mouse_stop_discovery
+	beq BT_EVT_LE_DISCONNECTED,mouse_bb_disconnected
+	beq BT_EVT_BB_DISCONNECTED,mouse_bb_disconnected
+	beq BT_EVT_SETUP_COMPLETE,mouse_bt_event_setup_complete
+	beq BT_EVT_BUTTON_LONG_PRESSED,mouse_bb_event_discovery_btn
+	beq BT_EVT_HID_HANDSHAKE,mouse_bt_hid_handshake
+	beq BT_EVT_HID_CONNECTED,mouse_bt_hid_connected
+	beq BT_EVT_RECONN_FAILED,mouse_bb_event_reconn_failed
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,mouse_bb_event_reconn_timeout
+	beq BT_EVT_PINCODE_REQ,mouse_bb_event_pincode
+	beq BT_EVT_REMOTE_UNSNIFF,app_start_auto_sniff
+	beq BT_EVT_LE_PAIRING_SUCCESS,mouse_le_pairing_success
+	beq BT_EVT_LE_START_ENC,mouse_le_ll_start_encryt
+	beq BT_EVT_LE_PAIRING_COMPLETE,mouse_le_pairing_complete
+	beq BT_EVT_VIRTUAL_CABLE_UNPLUG,mouse_irtual_cable_unplug
+	beq BT_EVT_24G_PAIRING_COMPLETE,mouse_24g_pairing_complete
+	beq BT_EVT_24G_ATTEMPT_FAIL,mouse_24g_attempt_fail
+	beq BT_EVT_24G_ATTEMPT_SUCCESS,mouse_24g_attempt_success
+	rtn
+
+
+mouse_le_pairing_complete:
+	branch app_ble_store_reconn_info
+
+mouse_24g_attempt_fail:
+	jam 1,mem_mouse_24g_enter_lpm_enable
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	fetch 1,mem_device_flag
+	fetcht 1,mem_24g_device_number
+	isub temp,null
+	branch app_enter_hibernate,zero
+	rtn
+mouse_24g_attempt_success:
+	jam 1,mem_mouse_24g_enter_lpm_enable
+	rtn
+mouse_24g_pairing_complete:
+	jam 1,mem_mouse_24g_enter_lpm_enable
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	call mouse_disable_function_flag
+	setarg 0
+	store 2,mem_24g_pairing_timer_count
+	jam 0,mem_mouse_move_flag
+	
+	fetch 1,mem_config_sensor_type
+	sub pdata,P3610,null
+	call mouse_read_sensor3610_data,zero
+	ncall mouse_read_sensor_common,zero
+
+	fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_FLASH,mouse_store_flash_24g_address
+	call mouse_set_24g_addr_eeprom	//store rx dongle addr to eeprom
+	branch iicd_write_protect_eep_data
+
+mouse_set_24g_addr_eeprom:
+	call g24_head_ptr2regc
+	add regc,offset_24g_addr,rega
+	arg MOUSE_G24_ADDR_EEPROM_OFFECT,regb
+	arg 4,temp
+	rtn
+
+mouse_store_flash_24g_address:
+	call g24_head_ptr2regc
+	add regc,offset_24g_addr,regb
+	ifetch 1,regb
+	store 1,mem_mouse_24g_addr
+	branch mouse_store_flash_device_info
+	
+
+mouse_le_pairing_success:
+	arg LL_PAIRING_SUCCESS_FLAG,queue
+	branch mouse_le_enable_connect_flag
+mouse_le_ll_start_encryt:
+	jam 2,mem_le_start_encrypt_timer
+	arg LL_START_ENC_FLAG,queue
+	branch mouse_le_enable_connect_flag
+
+	
+mouse_le_enable_connect_flag:
+	fetch 1,mem_le_connect_status_flag
+	qset1 pdata
+	store 1,mem_le_connect_status_flag
+	rtn
+
+mouse_le_disable_connect_flag:
+	fetch 1,mem_le_connect_status_flag
+	qset0 pdata
+	store 1,mem_le_connect_status_flag
+	rtn
+mouse_le_clean_connect_flag:
+	jam 0,mem_le_connect_status_flag
+	rtn
+
+mouse_le_bb_event_connected:
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	set0 APP_DISC_BY_BUTTON ,pdata
+	store APP_DISC_RSN_SIZE,mem_app_disconn_reason_flag
+	setarg 0
+	store 2,mem_mouse_direct_timer
+	call mouse_no_data_timer_init
+	branch mouse_stop_discovery
+
+mouse_bb_event_pincode:
+	call pincode_reinit
+	branch app_bt_set_pincode
+mouse_bb_event_reconn_timeout:
+ifdef FPGA_DEBUG
+	arg MOUSE_FPGA_DEBUG_GPIO,temp
+	call gpio_config_output
+	arg MOUSE_FPGA_DEBUG_GPIO,temp
+	call gpio_out_inactive
+endif
+mouse_bb_event_reconn_failed:
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_soft_reset
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_start_discovery
+	bbit1 MOSUE_24G_PAIRING_FLAG,g24_start_pairing_sm1
+	branch app_bb_hibernate
+
+	
+mouse_bt_hid_connected:
+	branch mouse_hid_connected
+
+mouse_bt_event_setup_complete:
+	rtn
+
+mouse_soft_reset:
+	call mouse_select_device_enable
+	branch soft_reset_chip
+
+mouse_bb_disconnected:
+	bpatch patch1d_1,mem_patch1d
+	call mouse_bb_discon_clear_stack
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_SELECT_DEVICE_FLAG,mouse_soft_reset
+	bbit1 MOSUE_24G_PAIRING_FLAG,g24_start_pairing_sm1
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	bbit1 APP_DISC_BLE,mouse4_0_event_bb_disconn
+	bbit1 APP_DISC_BY_BUTTON,app_disconn_reason_clear
+	bbit1 APP_DISC_AFTER_PAIRING,mouse_event_light_state_pairing
+	bbit1 APP_DISC_AFTER_RECONN,mouse_event_light_state_hibernate
+	bbit1 APP_DISC_AFTER_SNIFF,mouse_event_light_state_hibernate
+	branch mouse_start_discovery
+mouse_bb_discon_clear_stack:
+	setarg 0
+	store 8,mem_wheel_tb_old_pinlevel
+	istore 4,contw             //clean wheel statue
+	jam 0,mem_mouse_send_blank_timer
+	jam 0,mem_mouse_move_flag
+	jam APP_HANDSHAKE_NULL,mem_app_handshake_flag
+	jam 0,mem_ltk_exists
+	rtn
+
+mouse_event_light_state_pairing:
+	bbit1 APP_DISC_AFTER_HANDSHAKE,mouse_event_light_state_hibernate
+	bbit1 APP_DISC_AFTER_SNIFF,mouse_event_light_state_hibernate
+	branch mouse_start_discovery
+mouse_event_light_state_hibernate:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery
+	branch app_bb_hibernate
+
+mouse4_0_event_bb_disconn:
+	call mouse_le_clean_connect_flag
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	bbit1 APP_DISC_BY_BUTTON,app_disconn_reason_clear
+	branch app_bb_hibernate
+
+mouse_bb_event_timer:
+	call mouse_adc_read
+	call mouse_24g_delay_timer
+	call mouse_ban_24g_pairing_timer
+	call mouse_dpi_led_blink_delay_timer
+	call mouse_statue_up_timer
+	//poll
+	call mouse_statue_cheak_timer
+	call mouse_select_device
+	call mouse_bt_discovery_cheak
+	call mouse_low_voltage_led_timer
+	call mouse_sensor_led_contrl_timer
+	call mouse_check_hid_handshake_timer
+	call mouse_check_discovery_timeout_timer
+	call mouse_check_direct_timeout_timer
+	call mouse_check_no_data_timeout_timer
+	call mouse_check_mouse_state_timer
+	branch mouse_le_enable_att_list_timer
+
+
+
+mouse_sensor_led_contrl_timer:
+	fetch 1,mem_mouse_sensor_timer_count
+	rtn blank
+	increase -1,pdata
+	store 1,mem_mouse_sensor_timer_count
+	nrtn blank
+	branch mouse_sensor_led_contrl
+mouse_sensor_led_contrl:
+	fetch 1,mem_sensor_led_style
+	rtneq UI_LED_STATE_BLINK_STOP
+	beq UI_LED_STATE_BLINK_DARKING,mouse_sensor_led_blink_state_darking
+mouse_sensor_led_blink_state_lighting:
+	call mouse_sensor_led_on
+	jam UI_LED_STATE_BLINK_DARKING,mem_sensor_led_style
+	jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count
+	rtn
+mouse_sensor_led_blink_state_darking:
+	call mouse_sensor_led_off
+	jam UI_LED_STATE_BLINK_LIGHTING,mem_sensor_led_style
+	jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count
+	rtn
+	
+mouse_sensor_led_blink_stop:
+mouse_sensor_reset:
+	setarg 0x8006
+	call twspi_write
+    nop 1000
+	jam 0x00,mem_mouse_sensor_timer_count
+	jam UI_LED_STATE_BLINK_STOP,mem_sensor_led_style
+	branch mouse_init_p32xx_id2_judge
+	
+mouse_p3212sensor_led_on:
+	setarg 0xa006
+	call twspi_write
+	setarg 0xa005
+	branch twspi_write
+mouse_sensor_led_on_global:
+	jam 0,mem_mouse_sensor_timer_count
+mouse_sensor_led_on:
+	fetch 1,mem_config_sensor_type
+	beq P3212,mouse_p3212sensor_led_on
+	setarg 0x0106
+	call twspi_write
+	setarg 0xa105
+	branch twspi_write
+	
+mouse_sensor_led_off_global:
+	jam 0,mem_mouse_sensor_timer_count	
+mouse_sensor_led_off:
+	setarg 0x0906
+	branch twspi_write
+mouse_sensor_start_blink:
+	jam LED_SENSOR_BLINK_CNT,mem_mouse_sensor_timer_count
+	jam UI_LED_STATE_BLINK_START,mem_sensor_led_style
+	rtn
+	
+mouse_check_hid_handshake_timer:
+	arg mem_hid_handshake_timer_count,regc
+	arg mouse_bt_hid_handshake,regb
+	branch timer_single_step
+
+mouse_check_discovery_timeout_timer:	
+	arg mem_mouse_discovery_timer,regc
+	arg mouse_check_discovery_timeout,regb
+	branch timer_single_step_2B
+
+mouse_check_direct_timeout_timer:	
+	arg mem_mouse_direct_timer,regc
+	arg mouse_check_direct_timeout,regb
+	branch timer_single_step_2B
+	
+mouse_check_no_data_timeout_timer:	
+	arg mem_mouse_no_data_timer,regc
+	arg mouse_check_no_data_timeout,regb
+	branch timer_single_step_2B
+	
+mouse_check_mouse_state_timer:
+	arg mem_mouse_statue_led_timer,regc
+	arg mouse_statue_led_off,regb
+	branch timer_single_step
+
+
+
+mouse_le_enable_att_list_timer:
+	arg mem_le_start_encrypt_timer,regc
+	arg mouse_le_enable_att_list,regb
+	branch timer_single_step
+
+mouse_24g_delay_timer:
+	arg mem_24g_enter_lpm_timer,regc
+	arg mouse_24g_delay,regb
+	branch timer_single_step
+
+mouse_ban_24g_pairing_timer:
+	arg mem_24g_pairing_timer_count,regc
+	arg mouse_ban_24g_pairing,regb
+	branch timer_single_step_2B
+mouse_ban_24g_pairing:
+mouse_24g_delay:
+	rtn
+
+
+mosue_dpi_led_blink_init:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_DPI_LED_BLINK
+	jam 10,mem_mouse_dpi_led_delay_count  //delay 1s led blink
+	fetch 1,mem_dpi_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	rtn
+
+
+mouse_dpi_led_blink_delay_timer:
+	arg mem_mouse_dpi_led_delay_count,regc
+	arg mouse_dpi_led_setting,regb
+	branch timer_single_step	
+mouse_dpi_led_setting:
+	fetch 1,mem_dpi_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	setarg LED_DPI_BLINK
+	store 2,mem_mouse_on_time
+	store 2,mem_mouse_off_time
+	arg 0,rega
+	fetcht 1,mem_mouse_dpi
+	increase 1,temp
+	storet 1,mem_mouse_blink_count
+	jam UI_LED_STATE_BLINK_START,mem_mouse_led_type
+	rtn
+	
+mouse_le_enable_att_list:	
+	fetch 1,mem_le_connect_status_flag
+	rtnbit1 LL_PAIRING_SUCCESS_FLAG
+	jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp
+	call ui_ipc_send_cmd
+	arg WRITE_REQ_ENABLE_FLAG,queue
+	branch mouse_le_enable_connect_flag
+
+
+mouse_check_discovery_timeout:
+	call mouse_stop_discovery
+	branch app_enter_hibernate
+
+mouse_check_direct_timeout:
+	call app_ble_stop_direct_adv
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	branch app_enter_hibernate
+
+mouse_check_no_data_timeout:
+	bmark1 mark_24g,check_51cmd_hibernate
+	branch mouse_disconnect
+
+	
+
+mouse_bb_event_discovery_btn:
+	bpatch patch1d_2,mem_patch1d
+	jam 0,mem_mouse_send_blank_timer
+	call mouse_disconnect
+	call mouse_le_clean_connect_flag
+	branch mouse_start_discovery
+
+
+
+mouse3_0_check_reconn_target:
+	fetch 6,mem_hci_plap
+	branch app_bt_start_discovery_short,blank
+	call mouse_reconn_setting_led_gpio
+	jam 0x17,mem_connection_options  //ssp
+	fetch 1,mem_ssp_enable
+	nbranch app_bt_start_reconnect,blank
+	jam 0x04,mem_connection_options  //no ssp
+	branch app_bt_start_reconnect
+	
+mouse4_0_check_reconn_target:
+	fetch 2,mem_mouse_direct_timeout
+	store 2,mem_mouse_direct_timer
+	call mouse_reconn_setting_led_gpio
+	call app_lpm_mult_disable
+	branch check_51cmd_adv
+
+mouse_reconn_setting_led_gpio:
+	setarg LED_RECONNECT_BLINK
+	store 2,mem_mouse_on_time
+	store 2,mem_mouse_off_time
+	branch mouse_setting_led_gpio_comman
+	
+mouse_discover_setting_led_gpio:
+	setarg LED_DISCOVERY_BLINK
+	store 2,mem_mouse_on_time
+	store 2,mem_mouse_off_time	
+mouse_setting_led_gpio_comman:
+	fetch 1,mem_device_flag
+	beq MODE_BT_DEVICE1,mouse_device_led1
+	beq MODE_BT_DEVICE2,mouse_device_led2
+	beq MODE_BT_DEVICE3,mouse_device_led3
+	rtn
+mouse_device_led1:
+	fetch 1,mem_config_device1_led_gpio
+	branch mouse_led_blink
+mouse_device_led2:
+	fetch 1,mem_config_device2_led_gpio
+	branch mouse_led_blink
+mouse_device_led3:
+	fetch 1,mem_config_device3_led_gpio
+mouse_led_blink:
+	store 1,mem_temp
+	call mouse_devce_led_off
+	fetch 1,mem_temp
+	store 1,mem_mouse_struct_led_gpio
+	arg 0,rega
+	jam UI_LED_STATE_BLINK_START,mem_mouse_led_type
+	branch ui_led_blink_start_global
+
+mouse_led_off:
+	arg 0,rega
+	branch ui_led_off_global
+mouse_led_on:
+	arg 0,rega
+	branch ui_led_on_global
+
+mouse4_0_bb_event_discovery_btn:
+	branch mouse_le_clean_connect_flag
+	
+mouse_bt_hid_handshake:
+	jam APP_HANDSHAKE_DONE,mem_app_handshake_flag
+	call app_lpm_mult_enable
+	call app_bt_store_reconn_info
+	setarg 0
+	store 2,mem_discovery_timeout_timer_count
+	store 1,mem_hid_handshake_timer_count
+	branch app_bt_enter_sniff
+
+mouse_check_reconn_target:
+	call mouse_cheak_select_device_by_switch
+	fetch 1,mem_device_flag
+	fetcht 1,mem_24g_device_number
+	isub temp,null
+	branch mouse_connect_24g_mode,zero
+	fetch 1,mem_xrecord_mode
+	beq REC_3_MODE,mouse3_0_check_reconn_target
+	beq REC_4_MODE,mouse4_0_check_reconn_target
+	branch mouse_start_discovery
+mouse_connect_24g_mode:
+	call mouse_start_24g_mode
+	rtnmark1 mark_24g
+	fetch 1,mem_reconn_times
+	nbranch mouse_polling_device,blank
+	rtn
+	
+mouse_start_discovery:
+	bpatch patch1d_3,mem_patch1d
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_ADV,mouse_start_discovery_norandom
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_BLE_RANDOM_ADDRE,mouse_start_discovery_norandom
+	random pdata					//random ble addr
+	store 1,mem_le_lap+1
+mouse_start_discovery_norandom:
+	call app_lpm_mult_disable
+	fetch 2,mem_discovery_timeout
+	store 2,mem_mouse_discovery_timer
+	jam 6,mem_connection_options
+	setarg 0
+	store 2,mem_mouse_no_data_timer
+	store 2,mem_mouse_direct_timer
+	arg MOUSE_STORE_EEPROM_FLAG,queue
+	call mouse_enable_function_flag
+	call mouse_bt_discovery_button_down_disable
+	fetch 1,mem_device_option
+	isolate1 MODE_4_MOUSE,pdata
+	call check_51cmd_adv,true
+	fetch 1,mem_device_option
+	isolate1 MODE_3_MOUSE,pdata
+	call check_51cmd_start_discovery,true
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_DISCOVERY_SENSOR_LED,mouse_sensor_start_blink
+	branch mouse_discover_setting_led_gpio
+
+mouse_stop_discovery:
+	bpatch patch1d_4,mem_patch1d
+	fetch 1,mem_device_option
+	isolate1 MODE_4_MOUSE,pdata
+	call mouse_stop_le_adv,true
+	fetch 1,mem_device_option
+	isolate1 MODE_3_MOUSE,pdata
+	call mouse_stop_bt3_discovery,true
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_DISCOVERY_SENSOR_LED,mouse_sensor_led_blink_stop
+	branch mouse_devce_led_off
+mouse_stop_le_adv:
+	setarg 0
+	store 2,mem_mouse_direct_timer
+	branch check_51cmd_stop_adv
+mouse_stop_bt3_discovery:
+	setarg 0
+	store 2,mem_mouse_discovery_timer
+	branch check_51cmd_stop_discovery
+
+	
+
+
+
+mouse_store_remote_bdaddr:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_STORE_EEPROM_FLAG
+	arg MOUSE_STORE_EEPROM_FLAG,queue
+	call mouse_disable_function_flag
+	call mouse_check_device_addr
+mouse_unplug_clean_bdaddr:
+	call mouse_before_store_reconn_info
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_FLASH,mouse_store_flash_device_info
+	bbit1 MOUSE_ENABLE_EEPROM,mouse_store_eeprom_device_info	
+	rtn
+mouse_store_eeprom_device_info:
+	arg 88,temp
+	arg mem_device_flag,rega
+	arg MOUSE_INFO_EEPROM_OFFECT,regb
+	branch iicd_write_protect_eep_data
+
+mouse_check_device_addr:
+	fetch 1,mem_record_bt_mode
+	beq REC_4_MODE,mouse_check_le_device_addr
+	beq REC_3_MODE,mouse_check_bt_device_addr
+	rtn
+mouse_check_le_device_addr:
+	store 1,mem_device_addr_temp
+	fetch 6,mem_le_plap
+	branch mouse_check_bt_device_addr_common
+mouse_check_bt_device_addr:
+	store 1,mem_device_addr_temp
+	fetch 6,mem_plap
+mouse_check_bt_device_addr_common:
+	store 6,mem_device_addr_temp+1
+	fetch 7,mem_device_addr_temp
+	arg mem_device1_type,contr
+	arg 3,loopcnt
+mouse_check_device_addr_end:
+	ifetcht 7,contr
+	isub temp,null
+	branch mouse_clean_addr,zero
+	increase 22,contr
+	loop mouse_check_device_addr_end
+	rtn
+mouse_before_store_reconn_info:
+	arg mem_device1_type,rega
+	fetch 1,mem_device_flag
+	increase -1,pdata
+	mul32 pdata,29,pdata
+	iadd rega,rega
+	fetch 1,mem_record_bt_mode
+	istore 1,rega
+	beq REC_4_MODE,mouse_store_le_device
+	beq REC_3_MODE,mouse_store_bt_device
+	rtn
+	
+mouse_store_le_device:
+	fetch 6,mem_le_plap
+	istore 6,contw
+	arg mem_le_ltk,contr
+	call memcpy16
+	fetch 6,mem_le_lap
+	istore 6,contw
+	rtn
+mouse_store_bt_device:
+	fetch 6,mem_plap
+	istore 6,contw
+	arg mem_link_key,contr
+	branch memcpy16
+
+mouse_clean_addr:
+	increase -6,contr
+	copy contr,contw
+	fetcht 6,mem_device_addr_temp+1
+	increase 3,temp
+	istoret 6,contw
+	rtn
+
+
+
+mouse_eeprom_load_recon_info:
+	arg 88,temp
+	arg mem_device_flag,rega
+	arg MOUSE_INFO_EEPROM_OFFECT,regb
+	call iicd_read_eep_data
+mouse_select_reconn_device:
+	arg mem_device1_type,rega
+	fetch 1,mem_device_flag
+	fetcht 1,mem_24g_device_number
+	isub temp,null
+	rtn zero
+	increase -1,pdata
+	mul32 pdata,29,pdata
+	iadd rega,rega
+	ifetch 1,rega
+	store 1,mem_xrecord_mode
+	beq REC_3_MODE,mouse_load_bt_device
+	beq REC_4_MODE,mouse_load_le_device
+	rtn
+
+mouse_load_bt_device:
+	ifetch 6,contr
+mouse_load_bt_device_end:
+	store 6,mem_hci_plap
+	arg mem_link_key,contw
+	call memcpy16
+	branch check_link_key_load
+
+mouse_load_le_device:
+	ifetch 6,contr
+mouse_load_le_device_end:
+	store 6,mem_hci_plap
+	arg mem_le_ltk,contw
+	call memcpy16
+	ifetch 6,contr
+	store 6,mem_le_lap
+	rtn
+
+
+mouse_select_device:
+	fetch 1,mem_config_function_enable
+	bbit1 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON,mouse_select_device_by_button
+	bbit1 ENABLE_SELECT_DEVICE_BY_SWITCH,mouse_select_device_by_switch
+	branch mouse_select_device_by_combination_key
+
+mouse_select_device_by_combination_key:
+	call mouse_check_key_gpio
+	beq MOUSE_RM_BUTTON,mouse_select_device_commbination_key_down
+mouse_select_device_commbination_key_up:
+	jam 30,mem_combination_select_device_count	//combination key timer init 
+	fetch 1,mem_select_device_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue	
+	rtn
+	
+mouse_select_device_commbination_key_down:
+	call mouse_combination_select_device_timer
+	fetch 1,mem_select_device_button_statue
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_select_device_button_statue
+	branch mouse_select_device_enable
+
+mouse_combination_select_device_timer:
+	fetch 1,mem_combination_select_device_count
+	rtn blank
+	pincrease -1
+	store 1,mem_combination_select_device_count
+	nrtn blank
+	branch mouse_ready_reconnection_by_button
+	
+mouse_select_device_by_button:
+	fetch 1,mem_config_select_device_button_gpio
+	rtneq GPIO_DISABLE
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_get_bit
+	branch mouse_select_device_button_down,true
+mouse_select_device_button_up:
+	fetch 1,mem_select_device_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_select_device_button_statue	
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit1 MOUSE_LONG_BT_BUTTON_FLAG
+	branch mouse_ready_reconnection_by_button
+
+mouse_select_device_button_down:
+	fetch 1,mem_select_device_button_statue
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_select_device_button_statue
+	arg MOUSE_LONG_BT_BUTTON_FLAG,queue
+	branch mouse_disable_function_flag
+
+
+
+mouse_select_device_by_switch:
+	fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 ENABLE_SELECT_DEVICE_BY_SWITCH
+	fetch 1,mem_device_flag
+	beq MODE_BT_DEVICE1,mouse_select1_device
+	beq MODE_24G_DEVICE,mouse_select2_device
+	rtn
+mouse_cheak_select_device_by_switch:
+	fetch 1,MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 ENABLE_SELECT_DEVICE_BY_SWITCH
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_get_bit
+	branch mouse_cheak_select_24gdevice,true
+mouse_select_btdevice:
+	jam MODE_BT_DEVICE1,mem_device_flag
+	rtn
+mouse_cheak_select_24gdevice:
+	fetch 1,mem_24g_device_number
+	store 1,mem_device_flag
+	rtn
+mouse_select1_device:
+	fetcht 1,mem_config_select_device_button_gpio
+	nbranch mouse_ready_reconnection_by_button,true
+	rtn
+mouse_select2_device:
+	fetcht 1,mem_config_select_device_button_gpio
+	call gpio_get_bit
+	branch mouse_select_device_button_down,true
+	rtn
+
+
+	
+
+mouse_ready_reconnection_by_button:
+	fetcht 1,mem_device_flag
+	increase 1,temp
+	fetch 1,mem_device_number
+	isub temp,null
+	ncall mouse_select_device_count_clean,positive
+	storet 1,mem_device_flag
+	jam 0,mem_link_key_exists
+	call mouse_store_device_number2eeprom
+	call mouse_select_device_enable
+//	call p_select_reconn_device
+	branch mouse_set_reconnection
+
+mouse_store_device_number2eeprom:
+	arg 1,temp
+	arg mem_device_flag,rega
+	arg 0,regb
+	branch iicd_write_eep_data
+
+mouse_set_reconnection:
+	call mouse_stop_bluetooth_mode
+	call mouse_select_device_disable
+	branch mouse_soft_reset
+mouse_stop_bluetooth_mode:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_RECONNECT,mouse_cancel_reconnect
+	bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect
+	bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect
+	branch mouse_stop_discovery
+
+mouse_disconnect:
+	bpatch patch1d_5,mem_patch1d
+	setarg 0
+	store 2,mem_mouse_no_data_timer
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect
+	rtn
+
+mouse_irtual_cable_unplug:
+	setarg 0x01
+	store 6,mem_plap
+	jam REC_3_MODE,mem_record_bt_mode
+	branch mouse_unplug_clean_bdaddr
+
+	
+mouse_cancel_reconnect:
+	call mouse_bt_cannel_reconn_enable
+	branch check_51cmd_bb_reconn_cancel
+
+mouse_bt_discovery_by_button:
+	fetch 1,mem_config_bt_button_gpio
+	rtneq GPIO_DISABLE
+	fetcht 1,mem_config_bt_button_gpio
+	call gpio_get_bit
+	branch mouse_bt_discovery_button_down,true
+mouse_bt_discovery_button_up:
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_combination_ui_button_count	//combination key timer init 	
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_bt_discovey_button_statue	
+	branch mouse_bt_discovery_button_down_disable
+mouse_bt_discovery_button_down:
+	call mouse_bt_discovry_timer
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_bt_discovey_button_statue
+	call check_51cmd_bb_reconn_cancel
+	branch mouse_bt_discovery_button_down_enable
+
+	
+mouse_bt_discovery_cheak:
+	fetch 1,mem_config_function_enable
+	bbit1 ENABLE_BT_BUTTON,mouse_bt_discovery_by_button
+mouse_bt_discovery_commbination_key:
+	call mouse_check_key_gpio
+	beq MOUSE_LMR_BUTTON,mouse_bt_discovery_commbination_key_down
+mouse_bt_discovery_commbination_key_up:
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_combination_ui_button_count	//combination key timer init 
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_bt_discovey_button_statue	
+	branch mouse_bt_discovery_button_down_disable
+	
+	
+mouse_bt_discovery_commbination_key_down:
+	call mouse_bt_discovry_timer
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_DOWN
+	jam DPI_BUTTON_STATE_DOWN,mem_bt_discovey_button_statue
+	call check_51cmd_bb_reconn_cancel
+	branch mouse_bt_discovery_button_down_enable
+
+mouse_bt_discovry_timer:
+	arg mem_combination_ui_button_count,regc
+	arg mouse_long_button_bt_discovry,regb
+	branch timer_single_step
+	
+mouse_long_button_bt_discovry:
+	arg MOUSE_LONG_BT_BUTTON_FLAG,queue
+	call mouse_enable_function_flag
+	call app_evt_button_long_pressed
+	branch mouse_bb_event_discovery_btn
+
+
+mouse_cpi_enable:
+	arg MOUSE_CPI_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_cpi_disable:
+	arg MOUSE_CPI_FLAG,queue
+	branch mouse_disable_function_flag
+mouse_select_device_enable:
+	arg MOUSE_SELECT_DEVICE_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_select_device_disable:
+	arg MOUSE_SELECT_DEVICE_FLAG,queue
+	branch mouse_disable_function_flag
+mouse_bt_cannel_reconn_enable:
+	arg MOUSE_BT_CANNEL_RECONN_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_bt_cannel_reconn_disable:
+	arg MOUSE_BT_CANNEL_RECONN_FLAG,queue
+	branch mouse_disable_function_flag
+mouse_bt_discovery_button_down_enable:
+	arg MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_bt_discovery_button_down_disable:
+	arg MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,queue
+	branch mouse_disable_function_flag
+
+
+
+mouse_select_device_count_clean:
+	arg 1,temp
+	rtn
+
+mouse_enable_function_flag:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	qset1 pdata
+	store MOUSE_FLAG_LEN,mem_mouse_flag
+	rtn
+
+mouse_disable_function_flag:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	qset0 pdata
+	store MOUSE_FLAG_LEN,mem_mouse_flag
+	rtn
+	
+mouse_adc_read:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_ADC
+	fetch 1,mem_adc_read_timer
+	increase 1,pdata
+	store 1,mem_adc_read_timer
+	sub pdata,10,null              //1s read adc
+	rtn positive
+	jam 0,mem_adc_read_timer
+	call adc_set_mode
+	call vdd_calculate_by_mode
+	store 2,mem_mouse_vdd_now_vol
+	arg mem_mouse_vdd_calculate_set,rega
+	call adc_bat_percent_lowpower_out
+	fetch 1,mem_adc_power_flag
+	bbit1 1,mouse_power_down
+	bbit0 0,mouse_adc_no_low_voltage
+	branch mouse_adc_low_voltage
+mouse_adc_low_voltage:
+	arg MOUSE_LOW_VOLTAGE_FLAG,queue
+	branch mouse_enable_function_flag
+mouse_adc_no_low_voltage:
+	arg MOUSE_LOW_VOLTAGE_FLAG,queue
+	branch mouse_disable_function_flag
+
+mouse_low_voltage_led_timer:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_LOW_VOLTAGE_FLAG
+	fetch 1,mem_config_low_voltage_alarm_gpio
+	store 1,mem_mouse_struct_led_gpio
+	fetch 1,mem_adc_low_volatage_led_timer_count
+	pincrease 1
+	store 1,mem_adc_low_volatage_led_timer_count
+	sub pdata,20,null
+	ncall mouse_adc_low_volatage_led_timer_count_clean,positive
+	beq 2,mouse_low_voltage_led_on
+	beq 4,mouse_low_voltage_led_off
+	beq 6,mouse_low_voltage_led_on
+	beq 8,mouse_low_voltage_led_off
+	rtn
+mouse_adc_low_volatage_led_timer_count_clean:
+	jam 1,mem_adc_low_volatage_led_timer_count
+	branch mouse_low_voltage_led_off
+mouse_low_voltage_led_on:
+	arg 0,rega
+	jam UI_LED_STATE_LIGHTING,mem_mouse_led_type
+	branch ui_led_on_global
+mouse_low_voltage_led_off:
+	arg 0,rega
+	jam UI_LED_STATE_LIGHTING,mem_mouse_led_type
+	branch ui_led_off_global
+
+mouse_g24_package_data:
+	call mouse_motion
+	nrtn user
+	arg 7,rega	//length
+	arg mem_mouse_key,regb //tx buff
+	rtn
+	
+mouse_g24_enter_lpm:
+	fetch 1,mem_mouse_24g_enter_lpm_enable
+	rtn blank
+	//do not enter lpm when condition is unallowed
+	fetcht 1,mem_dpi_button_gpio
+	call gpio_get_bit
+	call mouse_24g_dpi_delay_init,true
+	fetch 1,mem_24g_enter_lpm_timer
+	nrtn blank
+	call mouse_check_key_gpio
+	nrtn blank
+	branch g24_lpm_long_sleep
+
+mouse_24g_dpi_delay_init:
+	fetch 1,mem_dpi_button_gpio
+	rtneq UI_BUTTON_GPIO_DISABLE
+	jam 10,mem_24g_enter_lpm_timer
+	rtn
+
+	
+mouse_load_flash_info_cheak:
+	call mouse_load_flash_flag
+	fetch 2,mem_store_flag
+	arg EEPROM_INIT_FLAG,temp
+	isub temp,null
+	branch mouse_load_flash_device_info,zero
+	storet 2,mem_store_flag
+	call mouse_ble_init_address
+	branch mouse_store_flash_device_info
+mouse_ble_init_address:
+	fetch 6,mem_le_lap
+	store 6,mem_device1_locall_addr
+	add pdata,0x0100,pdata
+	store 6,mem_device2_locall_addr
+	add pdata,0x0100,pdata
+	store 6,mem_device3_locall_addr
+	rtn
+	
+	
+mouse_load_flash_flag:
+	setarg mem_store_flag
+	arg mem_mouse_information_start,temp
+	isub temp,temp
+	fetch 3,mem_flash_base
+	iadd temp,pdata
+	arg 2,temp
+	arg mem_store_flag,rega
+	branch spid_read_flash
+
+	
+mouse_load_flash_device_info:
+	setarg mem_mouse_information_end
+	arg mem_mouse_information_start,temp
+	isub temp,temp
+	fetch 3,mem_flash_base
+	arg mem_mouse_information_start,rega
+	call spid_read_flash
+	call mouse_select_reconn_device
+	fetch 4,mem_mouse_24g_addr
+	call g24_head_ptr2regc
+	branch g24_store_mem_addr
+
+mouse_store_flash_device_info:	
+	setarg mem_mouse_information_end
+	arg mem_mouse_information_start,temp
+	isub temp,temp
+	arg mem_mouse_information_start,rega
+	fetch 3,mem_flash_base
+	branch flash_write
+
+mouse_store_eerpom_dpi:
+	arg 1,temp
+	arg mem_mouse_dpi,rega
+	arg MOUSE_DPI_EEPROM_OFFECT,regb
+	branch iicd_write_protect_eep_data
+
+mouse_load_eeprom_dpi:
+	arg 1,temp
+	arg mem_mouse_dpi,rega
+	arg MOUSE_DPI_EEPROM_OFFECT,regb
+	branch iicd_read_eep_data
+
+mouse_statue_cheak_timer:
+	rtnmark1 mark_24g
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_STATUE_UP
+	fetch 1,mem_mouse_1step_up_count
+	pincrease 1
+	and pdata,0x07,pdata
+	store 1,mem_mouse_1step_up_count
+	rtnne 0x07         //800ms read sensor
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,mouse_check_statue_up
+	bbit1 UI_STATE_BLE_CONNECTED,mouse_check_statue_up
+	rtn
+
+
+
+//mosue 
+mouse_check_statue_up:
+	bpatch patch1d_6,mem_patch1d
+	fetch 1,mem_mouse_2step_up_count
+	nrtn blank
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_STATUE_UP_FLAG
+	fetch 1,mem_sensor_squal_reg
+	call sensor_read
+	store 1,mem_sensor_iqc
+	sub pdata,0x10,null
+	branch mouse_statue_up_timer_init,positive
+	jam 0,mem_mouse_2step_up_count
+	rtn
+
+mouse_statue_up_timer_init:
+	jam 30,mem_mouse_2step_up_count
+	rtn
+mouse_statue_up_timer:
+	arg mem_mouse_2step_up_count,regc
+	arg mouse_statue_up,regb
+	branch timer_single_step
+
+mouse_statue_up:
+	fetch 1,mem_sensor_squal_reg
+	call twspi_read
+	sub pdata,0x10,null
+	nrtn positive
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_STATUE_UP_FLAG
+	arg MOUSE_STATUE_UP_FLAG,queue
+	call mouse_disable_function_flag
+	jam 0,mem_lpm_mult
+	jam 30,mem_mouse_statue_led_timer         // led on3s
+	call mouse_devce_led_off
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_ENABLE_STATUE_UP_THREE_LED,mouse_three_device_statue_up
+mouse_two_device_statue_up:
+	fetch 1,mem_device_flag
+	beq MODE_BT_DEVICE1,mouse_device1_led_on  		//device_1
+	beq MODE_BT_DEVICE2,mouse_device_blink_led_init		//device_2
+	rtn
+mouse_three_device_statue_up:
+	fetch 1,mem_device_flag
+	beq MODE_BT_DEVICE1,mouse_device1_led_on  		//device_1
+	beq MODE_BT_DEVICE2,mouse_device2_led_on		//device_2
+	beq MODE_BT_DEVICE3,mouse_device3_led_on		//device_3
+	rtn
+	
+mouse_device_blink_led_init:
+	fetch 1,mem_config_device1_led_gpio
+	branch mouse_led_blink
+
+
+
+mouse_statue_led_off:
+	jam 0x20,mem_lpm_mult
+	branch mouse_devce_led_off
+
+
+
+mouse_devce1_led_off:
+	fetch 1,mem_config_device1_led_gpio
+	rtneq GPIO_DISABLE
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_off
+
+mouse_devce2_led_off:
+	fetch 1,mem_config_device2_led_gpio
+	rtneq GPIO_DISABLE
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_off
+	
+mouse_devce_led_off:
+	call mouse_led_off
+	call mouse_devce1_led_off
+	call mouse_devce2_led_off
+mouse_devce3_led_off:
+	fetch 1,mem_config_device3_led_gpio
+	rtneq GPIO_DISABLE
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_off
+
+mouse_device1_led_on:
+	fetch 1,mem_config_device1_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_on
+mouse_device2_led_on:
+	fetch 1,mem_config_device2_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_on
+mouse_device3_led_on:
+	fetch 1,mem_config_device3_led_gpio
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_on
+
+
+
+mouse_polling_device:
+	bpatch patch1d_7,mem_patch1d
+	fetch 1,mem_reconn_times
+	increase -1,pdata
+	store 1,mem_reconn_times
+	fetcht 1,mem_device_flag
+	increase 1,temp
+	fetch 1,mem_device_number
+	isub temp,null
+	ncall mouse_select_device_count_clean,positive
+	storet 1,mem_device_flag
+	jam 0,mem_link_key_exists
+	call mouse_store_device_number2eeprom
+	call mouse_before_store_reconn_info
+	branch mouse_check_reconn_target
+	
+mouse_power_down:
+	call mouse_devce_led_off
+	setarg 0
+	store 8,mem_gpio_wakeup_low
+	branch lpm_hibernate
+
+
+
+
+
+
+endif
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_remote_car.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_remote_car.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_remote_car.prog	(working copy)
@@ -0,0 +1,480 @@
+ifdef COMPILE_REMOTE_CAR
+
+remote_car_init:
+	rtn wake	
+	hfetch 1,core_gpio_sel1
+	and_into 0xf0,pdata
+	hstore 1,core_gpio_sel1
+	call keyscan_key_init
+	setarg remote_car_le_before_hibernate
+	store 2,mem_cb_before_hibernate
+	
+	setarg remote_car_process_lpm_before
+	store 2,mem_cb_before_lpm	
+	
+	setarg remote_car_scale_process_idle	
+	store 2,mem_cb_idle_process	
+	
+	setarg remote_car_scale_process_bb_event 
+	store 2,mem_cb_bb_event_process	
+	
+	setarg app_get_lpm_wake_lock
+	store 2,mem_cb_check_wakelock	
+
+	call g24_head_ptr2regc
+	setarg remote_car_g24_package_data
+	add regc,offset_24g_cb_data,contw
+	istore 2,contw
+	
+	setarg remote_car_g24_enter_lpm
+	add regc,offset_24g_cb_lpm_prepare,contw
+	istore 2,contw
+	
+	setarg remote_car_process_lpm_before
+	add regc,offset_24g_cb_lpm_before,contw
+	istore 2,contw
+
+	setarg remote_car_event_timer
+	store 2,mem_cb_event_timer
+	
+	setarg remote_car_power_off_signal
+	store 2,mem_remote_car_power_off_cb
+	
+	setarg remote_car_soft_switch_power_on_signal
+	store 2,mem_remote_car_power_standby_cb
+	
+	setarg remote_car_send_key_data
+	store 2,mem_cb_remote_car_keyscan
+	
+	bpatch patch1e_0,mem_patch1e
+	call remote_car_init_environment
+	call queue_init
+	jam 2,mem_lpm_mult
+	fetch 1,mem_remote_car_config_soft_switch_enable
+	store 1,mem_remote_car_hard_soft_switch
+	beq HARD_SWITCH, remote_car_hard_switch_power_on_signal
+	fetch 1,mem_remote_car_config_soft_switch_gpio
+	store 1,mem_ui_button_gpio
+remote_car_soft_switch_power_on_init:
+	call remote_car_ui_led_init
+	call ui_button_init
+	call ui_button_polling
+	jam POWER_STARTING,mem_remote_car_power_state
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+	branch app_enter_hibernate
+
+
+
+remote_car_hard_switch_power_on_signal:
+	jam POWER_STANDBY,mem_remote_car_power_state
+remote_car_soft_switch_power_on_signal:
+	call remote_car_ui_led_init
+//	fetch 1,mem_remote_car_led_map
+	arg 0,rega
+	call ui_led_blink_start_global
+remote_car_connect_24g_mode:
+	branch g24_auto_pair_start
+
+remote_car_power_off_signal:	
+	branch remote_car_ui_led_init
+	
+remote_car_ui_led_init:
+	bpatch patch1e_1,mem_patch1e
+	fetch 1,mem_remote_car_config_connect_led_gpio
+	bne INVALID_PIN_NUM,remote_car_pairing_led_gpio_set
+remote_car_ui_led_init_1:
+	fetcht 1, mem_remote_car_led_map
+	branch gpio_config_output
+remote_car_pairing_led_gpio_set:
+	store 1,mem_remote_car_led_map
+	branch remote_car_ui_led_init_1
+
+
+remote_car_init_environment:
+	call g24_set_device_addr
+	fetch 2,mem_remote_car_no_data_timeout
+	store 2,mem_remote_car_no_data_timer
+	branch remote_car_get_adc_default_data
+
+remote_car_le_before_hibernate:
+//	call keyscan_scan_key
+//	fetch 2, mem_key_value_temp
+//	branch remote_car_in_enter_hibernate,blank
+//	branch app_enter_hibernate
+remote_car_in_enter_hibernate:	
+	call gpio_set_before_lpm_common
+	call remote_car_process_lpm_before
+	branch app_enter_hibernate
+
+remote_car_process_lpm_before:
+	branch keyscan_process_lpm_before
+
+remote_car_g24_enter_lpm:
+	fetch 1,mem_remote_car_24g_enter_lpm_enable
+	rtn blank
+	//do not enter lpm when condition is unallowed
+	branch g24_lpm_long_sleep
+
+remote_car_process_auto_pair_exit:
+	rtn
+
+remote_car_key_scan_process:
+	branch keyscan_key_process
+
+remote_car_scale_process_idle:
+	call remote_car_rocker_process
+	call remote_car_24g_status_process
+	branch remote_car_key_scan_process
+
+remote_car_scale_process_bb_event:
+	copy regc,pdata
+	beq BT_EVT_BUTTON_UP,app_event_button_up
+	beq BT_EVT_BUTTON_LONG_PRESSED,app_button_long_pressed
+	beq BT_EVT_24G_PAIRING_COMPLETE,remote_car_24g_pairing_complete
+	beq BT_EVT_24G_ATTEMPT_SUCCESS,remote_car_24g_attempt_success
+	beq BT_EVT_24G_ATTEMPT_FAIL,remote_car_24g_attempt_fail
+	rtn
+
+remote_car_24g_attempt_fail:
+	jam 1,mem_remote_car_24g_enter_lpm_enable
+	rtn
+
+remote_car_24g_pairing_complete:
+	jam 1,mem_remote_car_24g_enter_lpm_enable
+	jam WORK_PAIRED,mem_remote_car_24g_auto_work_step
+	jam WORK_PAIRED,mem_remote_car_24g_pair_success_flag
+	rtn
+
+remote_car_24g_attempt_success:
+	jam 1,mem_remote_car_24g_enter_lpm_enable
+	jam WORK_PAIRED,mem_remote_car_24g_auto_work_step
+	jam WORK_PAIRED,mem_remote_car_24g_pair_success_flag
+	rtn
+
+remote_car_24g_status_process:
+	fetch 1,mem_remote_car_24g_auto_work_step
+	rtneq POWER_ON
+	fetch 1,mem_remote_car_24g_status
+	rtneq WORK_PAIRED
+	jam WORK_PAIRED,mem_remote_car_24g_status
+remote_car_scale_process_paired:
+	arg 0,rega
+	branch ui_led_off_global
+remote_car_scale_process_shutdown:
+	arg 0,rega
+	call ui_led_off_global
+	call remote_car_ui_led_init
+	branch app_enter_hibernate
+	
+remote_car_event_timer:
+	call app_power_timer
+	branch remote_car_no_data_timer
+
+remote_car_no_data_timer:
+	fetch 1,mem_remote_car_config_timeout_shutdown_enable
+	rtn blank
+	arg mem_remote_car_no_data_timer,regc
+	arg remote_car_scale_process_shutdown,regb
+	branch timer_single_step_2B
+	
+////////////////////////////////////rocker/////////////////////////////
+remote_car_get_adc_default_data:
+	call remote_car_rocker_get_x
+	storet 2,mem_current_vdd_value_default_mid_x
+	call remote_car_rocker_get_y
+	storet 2,mem_current_vdd_value_default_mid_y
+	rtn
+remote_car_rocker_data_get:
+remote_car_rocker_get_x:
+	fetch 2,mem_current_vdd_value_default_mid_x
+	store 2,mem_current_vdd_value_default_mid_temp
+	call remote_car_get_adc_from_gpio6
+	call remote_car_rocker_get_value
+	store 1,mem_rocker_status
+remote_car_rocker_get_y:
+	fetch 2,mem_current_vdd_value_default_mid_y
+	store 2,mem_current_vdd_value_default_mid_temp
+	call remote_car_get_adc_from_gpio7
+	call remote_car_rocker_get_value
+	store 1,mem_rocker_status+1
+	rtn
+remote_car_rocker_get_value:
+	fetch 2,mem_current_vdd_default_range
+	copy pdata,rega
+	fetch 2,mem_current_vdd_value_default_mid_temp
+	call remote_car_rocker_mid_value_adjust
+	fetch 1,mem_rocker_work_status
+	nbranch remote_car_rocker_translate_key,blank
+	nrtn positive
+	fetcht 2,mem_current_vdd_value_default_mid_temp
+	rtn	
+remote_car_rocker_mid_value_adjust:
+	isub temp,pdata
+	branch remote_car_rocker_mid_adjust_positive,positive
+	sub pdata,0,pdata		//negative adjust
+	jam 1,mem_rocker_negative_flag
+	isub rega,null
+	rtn
+remote_car_rocker_mid_adjust_positive:
+	jam 0,mem_rocker_negative_flag
+	isub rega,null
+	rtn
+remote_car_rocker_translate_key:
+	nbranch remote_car_rocker_middle_key,positive
+	fetch 1,mem_rocker_negative_flag
+	nbranch remote_car_rocker_negative_key,blank
+remote_car_rocker_positive_key:	
+	setarg ROCKER_POSITIVE_KEY
+	rtn
+remote_car_rocker_negative_key:
+	setarg ROCKER_NEGATIVE_KEY
+	rtn
+remote_car_rocker_middle_key:
+	setarg ROCKER_MIDDLE_KEY
+	rtn
+remote_car_get_adc_from_gpio6:
+	jam 0x33,mem_adc_channel
+	branch adc_set_mode
+remote_car_get_adc_from_gpio7:
+	jam 0x34,mem_adc_channel
+	branch adc_set_mode
+
+
+remote_car_rocker_process:
+	fetch 1,mem_remote_car_config_check_way
+	rtnne CAR_REMOTE_CHECK_ROCKER	
+remote_car_read_rocker_check_start:
+	bpatch patch1e_2,mem_patch1e
+	jam 1,mem_rocker_work_status
+	call remote_car_rocker_data_get
+	fetch 2,mem_rocker_status
+	fetcht 2,mem_rocker_last_status
+	isub temp,null
+	rtn zero
+	store 2,mem_rocker_last_status
+	call remote_car_rocker_x_to_key
+	branch remote_car_rocker_y_to_key
+	
+remote_car_rocker_x_to_key:
+	fetch 1,mem_rocker_x_status
+	branch rocker_to_queue_set_0,blank
+	increase -1,pdata
+	branch remote_car_rocker_to_key
+remote_car_rocker_y_to_key:
+	fetch 1,mem_rocker_y_status
+	branch rocker_to_queue_set_2,blank
+	increase 1,pdata
+remote_car_rocker_to_key:
+	copy pdata,queue
+	arg 1,rega
+	branch remote_car_send_key_data
+	
+rocker_to_queue_set_0:
+	arg 0,queue
+	arg 0,rega
+	branch remote_car_send_key_data
+rocker_to_queue_set_2:
+	arg 2,queue
+	arg 0,rega
+	branch remote_car_send_key_data
+	
+remote_car_send_key_data:
+	copy rega,pdata
+	store 1,mem_remote_key_status
+	fetch 1,mem_remote_car_24g_auto_work_step
+	beq POWER_ON,g24_auto_pair_start
+	fetch 2,mem_remote_car_no_data_timeout
+	store 2,mem_remote_car_no_data_timer
+	fetch 1,mem_remote_key_status
+	branch remote_car_key_is_release,blank
+remote_car_key_is_press:
+	bpatch patch1e_3,mem_patch1e
+	arg 0,rega
+	call ui_led_on_global
+remote_car_attack_key_press:
+	copy queue,pdata
+	beq 4,remote_car_send_attack_key4_press
+	beq 5,remote_car_send_attack_key5_press
+	beq 6,remote_car_send_fire_key6_press
+//	fetch 1,mem_remote_car_config_check_way
+//	rtneq CAR_REMOTE_CHECK_ROCKER
+remote_car_motor_key_press:
+	call remote_car_device_layout_select
+	beq CONTROL_F_B_TEN,remote_car_single_motor_key_is_press
+	beq CONTROL_L_R_TEN,remote_car_double_motor_key_press
+	beq CONTROL_L_R_LR,remote_car_single_motor_key_is_press
+	rtn
+	
+remote_car_single_motor_key_is_press:
+	copy queue,pdata
+	beq 0,remote_car_send_motor1_key0_press
+	beq 1,remote_car_send_motor1_key1_press
+	beq 2,remote_car_send_motor2_key2_press
+	beq 3,remote_car_send_motor2_key3_press
+	rtn
+	
+remote_car_double_motor_key_press:
+	copy queue,pdata
+	beq 0,remote_car_send_double_motor_key0_press
+	beq 1,remote_car_send_double_motor_key1_press
+	beq 2,remote_car_send_double_motor_key2_press
+	beq 3,remote_car_send_double_motor_key3_press
+	rtn
+
+remote_car_key_is_release:
+	bpatch patch1e_4,mem_patch1e
+	arg 0,rega
+	call ui_led_off_global
+remote_car_attack_key_release:
+	copy queue,pdata
+	beq 4,remote_car_send_attack_key4_rel
+	beq 5,remote_car_send_attack_key5_rel
+//	fetch 1,mem_remote_car_config_check_way
+//	rtneq CAR_REMOTE_CHECK_ROCKER
+remote_car_motor_key_release:
+	call remote_car_device_layout_select
+	beq CONTROL_F_B_TEN,remote_car_single_motor_key_rel
+	beq CONTROL_L_R_TEN,remote_car_double_motor_key_rel
+	beq CONTROL_L_R_LR,remote_car_single_motor_key_rel
+	rtn
+
+remote_car_device_layout_select:
+	fetch 1,mem_remote_car_config_layout
+	fetcht 1,mem_remote_car_config_key_map
+	ior temp,pdata
+	rtn
+
+//cross key,control front-back motor layout
+remote_car_send_motor1_key0_press:	//front
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload
+	branch remote_car_send_key
+remote_car_send_motor1_key1_press:	//back
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload
+	branch remote_car_send_key
+remote_car_send_motor2_key2_press:	//left
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+remote_car_send_motor2_key3_press:	//right
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+
+//cross key,control left-right motor layout
+remote_car_send_double_motor_key0_press:	//front
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+remote_car_send_double_motor_key1_press:	//back
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+remote_car_send_double_motor_key2_press:	//left
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor1_payload
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+remote_car_send_double_motor_key3_press:	//right
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor1_payload
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+	
+//attack motor control
+remote_car_send_attack_key4_press:	//attack left
+	jam MOTOR_POSITIVE,mem_remote_car_24g_motor3_payload
+	branch remote_car_send_key
+remote_car_send_attack_key5_press:	//attack right
+	jam MOTOR_NEGATIVE,mem_remote_car_24g_motor3_payload
+	branch remote_car_send_key
+
+remote_car_send_fire_key6_press:
+	jam 0x01,mem_remote_car_24g_fire_send_payload
+	branch remote_car_send_attack
+
+remote_car_single_motor_key_rel:
+	copy queue,pdata
+	beq 0,remote_car_send_motor1_key0_rel
+	beq 1,remote_car_send_motor1_key1_rel
+	beq 2,remote_car_send_motor2_key2_rel
+	beq 3,remote_car_send_motor2_key3_rel
+	rtn
+
+remote_car_double_motor_key_rel:
+	copy queue,pdata
+	beq 0,remote_car_send_double_motor_key0_rel
+	beq 1,remote_car_send_double_motor_key1_rel
+	beq 2,remote_car_send_double_motor_key2_rel
+	beq 3,remote_car_send_double_motor_key3_rel
+	rtn
+
+remote_car_send_motor1_key0_rel:
+remote_car_send_motor1_key1_rel:
+	jam MOTOR_STOP,mem_remote_car_24g_motor1_payload
+	branch remote_car_send_key
+remote_car_send_motor2_key2_rel:
+remote_car_send_motor2_key3_rel:
+	jam MOTOR_STOP,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+	
+remote_car_send_double_motor_key0_rel:
+remote_car_send_double_motor_key1_rel:
+remote_car_send_double_motor_key2_rel:
+remote_car_send_double_motor_key3_rel:
+	jam MOTOR_STOP,mem_remote_car_24g_motor1_payload
+	jam MOTOR_STOP,mem_remote_car_24g_motor2_payload
+	branch remote_car_send_key
+	
+remote_car_send_attack_key4_rel:
+remote_car_send_attack_key5_rel:
+	jam MOTOR_STOP,mem_remote_car_24g_motor3_payload
+	branch remote_car_send_key
+
+remote_car_send_key:
+	arg mem_remote_car_24g_motor_packet,rega
+	branch queue_push
+remote_car_send_attack:
+	arg mem_remote_car_24g_fire_packet,rega
+	branch queue_push
+
+remote_car_g24_package_data:
+	fetch 1,mem_remote_car_24g_pair_success_flag
+	beq WORK_PAIRED,remote_car_g24_send_empty
+	arg mem_remote_car_24g_tx_temp,rega
+	call queue_pop
+	nbranch remote_car_moto_data,user
+remote_car_g24_package_data_continue:
+	arg mem_remote_car_24g_tx_temp,contr
+	ifetch 1,contr
+	copy pdata,rega
+	arg mem_remote_car_24g_tx_temp+1,regb
+	//rega: length
+	//regb: tx buffer
+	rtn
+	
+remote_car_g24_send_empty:
+	jam 0,mem_remote_car_24g_pair_success_flag
+	enable user
+	arg 1,rega
+	arg mem_remote_car_empty_packet,regb
+	rtn
+	
+remote_car_moto_data:
+	fetch 1,mem_remote_car_24g_tx_temp+3	//cmd
+	beq CAR_CMD_L_R_MOTOR_CONTROL,remote_car_moto_data_next
+	beq CAR_CMD_F_B_MOTOR_CONTROL,remote_car_moto_data_next
+	rtn
+remote_car_moto_data_next:
+	fetch 1,mem_remote_car_24g_tx_temp+6	//data moto1
+	nbranch remote_car_moto_data_enable_user,blank
+	fetch 1,mem_remote_car_24g_tx_temp+8	//data moto2
+	nbranch remote_car_moto_data_enable_user,blank
+	fetch 1,mem_remote_car_24g_tx_temp+10	//data moto3
+	nbranch remote_car_moto_data_enable_user,blank
+	rtn
+remote_car_moto_data_enable_user:
+	enable user
+	branch remote_car_g24_package_data_continue
+
+endif
+
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_shutter.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_shutter.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_shutter.prog	(working copy)
@@ -0,0 +1,1170 @@
+
+ifdef COMPILE_SHUTTER
+
+shutter_init:
+	rtn wake	
+	hfetch 1,core_gpio_sel1
+	and_into 0xfc,pdata
+	hstore 1,core_gpio_sel1
+	setarg shutter_le_before_hibernate
+	store 2,mem_cb_before_hibernate
+
+	setarg shutter_process_lpm_before
+	store 2,mem_cb_before_lpm
+	
+	setarg app_enter_hibernate
+	store 2,mem_cb_discovry_timeout
+	
+	setarg shutter_process_idle
+	store 2,mem_cb_idle_process
+		
+	setarg shutter_process_bb_event 
+	store 2,mem_cb_bb_event_process
+
+	setarg shutter_le_scale_lpm_lock
+	store 2,mem_cb_check_wakelock
+	
+	setarg ble_shutter_receive_data
+	store 2,mem_cb_att_write
+
+	setarg shutter_le_bb_event_timer
+	store 2,mem_cb_event_timer
+
+	setarg shutter_key_change
+	store 2,mem_cb_shutter_keycan
+
+	setarg shutter_soft_swtich_power_on
+	store 2,mem_shutter_soft_switch_poweron_callback_function
+	setarg shutter_soft_swtich_power_off
+	store 2,mem_shutter_soft_switch_poweroff_callback_function
+
+	call le_modified_name
+	call shutter_load_bluetooth_config_by_user_config
+	call shutter_init_bluetooth_config
+	call shutter_init_param	
+	call keyscan_key_init
+	call shutter_load_buffer_config_form_DataRom
+	call queue_init
+	call ui_led_init_global
+	call shutter_load_bluetooth_config
+	call shutter_load_bluetooth_config_by_eeprom
+	
+	bpatch patch1e_5,mem_patch1e
+	call classic_shutter_load_reconn_info
+	fetch 1, mem_shutter_hard_soft_switch_case
+	beq HARD_SWITCH, shutter_hart_swtich_power_on
+	fetch 1,mem_shutter_soft_switch_button_gpio
+	store 1,mem_ui_button_gpio
+	branch ui_soft_swtich_init
+
+/**************hard swtich function**************/
+shutter_hart_swtich_power_on:
+	jam UI_BUTTON_GPIO_DISABLE,mem_ui_button_gpio
+	jam SS_STATE_POWER_ON,mem_shutter_soft_switch_power_state
+	branch shutter_start_reconnect
+/****************************/
+
+/**************lpm lock callback function**************/
+shutter_le_scale_lpm_lock:
+	fetch 1,mem_shutter_soft_switch_power_state
+	beq SS_STATE_POWER_OFF,app_get_lpm_wake_lock
+	call l2cap_malloc_get_full_map
+	fetch 1,mem_used_map
+	nbranch app_get_lpm_wake_lock,blank
+	branch app_put_lpm_wake_lock
+/****************************/
+
+/**************c512bt event callback function*************/
+shutter_process_bb_event:
+	copy regc,pdata
+/**************classic shutter event*****************/
+	beq BT_EVT_BB_CONNECTED,classic_shutter_process_baseband_connect
+	beq BT_EVT_BB_DISCONNECTED,classic_shutter_process_baseband_disconnect
+	beq BT_EVT_RECONN_FAILED,classic_shutter_process_reconnect_failed
+	beq BT_EVT_SETUP_COMPLETE,classic_shutter_process_setup_complete
+	beq BT_EVT_HID_CONNECTED,classic_shutter_process_hid_connect
+	beq BT_EVT_HID_DISCONNECTED,classic_shutter_process_hid_disconnect
+	beq BT_EVT_HID_HANDSHAKE,classic_shutter_process_hid_handshake
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,classic_shutter_process_reconnect_page_timeout
+	beq BT_EVT_VIRTUAL_CABLE_UNPLUG,classic_shutter_process_virtual_cable_unplug
+	beq BT_EVT_REMOTE_UNSNIFF,classic_shutter_process_remote_unsniff
+	beq BT_EVT_STORE_NVRAM,classic_shutter_process_store_reconnect_information
+/**************ble shutter event*****************/
+	beq BT_EVT_LE_CONNECTED,ble_shutter_process_baseband_connect
+	beq BT_EVT_LE_DISCONNECTED,ble_shutter_process_baseband_disconnect
+	beq BT_EVT_LE_RECONNECT_COMPLETE,ble_shutter_process_reconnect_complete
+	beq BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,ble_shutter_process_parse_connect_parameter_update_response
+/***************soft swtich event****************/
+	beq BT_EVT_BUTTON_LONG_PRESSED,shutter_process_soft_swtich_button_long_press
+	beq BT_EVT_BUTTON_DOWN,shutter_process_soft_swtich_button_down
+	beq BT_EVT_BUTTON_UP,shutter_process_soft_swtich_button_up
+	rtn
+/****************************/
+
+
+/******************classic shutter event**********************/
+classic_shutter_process_baseband_connect:
+	jam 0,mem_classic_shutter_hid_disconn_count
+	jam 0,mem_classic_shutter_cable_unplug_conut	
+	rtn
+
+
+classic_shutter_process_baseband_disconnect:
+	call classic_shutter_disconnect_clear_flag
+	branch classic_shutter_process_reconnect_failed
+
+classic_shutter_disconnect_clear_flag:
+	jam APP_HANDSHAKE_NULL,mem_app_handshake_flag
+	jam 0,mem_hid_handshake_timer_count
+	jam 0,mem_unsniff2sniff_timer_count
+	jam 0,mem_classic_shutter_cable_unplug_conut
+	jam 0,mem_classic_shutter_hid_disconn_count
+	branch queue_init
+
+
+classic_shutter_process_reconnect_failed:
+	call app_disconn_reason_clear
+	branch shutter_start_bluetooth_discovery
+
+
+classic_shutter_process_setup_complete:
+	call shutter_stop_bluetooth_discovery
+	branch app_led_stop_blink
+
+
+classic_shutter_process_hid_connect:
+	setarg HID_HANDSHAKE_TIMEOUT
+	store 1,mem_hid_handshake_timer_count
+	rtn	
+
+
+classic_shutter_process_hid_disconnect:
+	jam 0,mem_classic_shutter_cable_unplug_conut	
+	setarg FLAG_SHUTTER_HID_DISCONN_TIMEOUT
+	store 1,mem_classic_shutter_hid_disconn_count
+	rtn
+
+
+classic_shutter_process_hid_handshake:
+	fetch 1,mem_app_handshake_flag
+	rtneq APP_HANDSHAKE_DONE
+	jam APP_HANDSHAKE_DONE,mem_app_handshake_flag
+	call app_lpm_mult_enable
+	call app_store_reconn_info
+	call shutter_stop_bluetooth_discovery
+	call app_led_off
+	branch app_bt_enter_sniff
+
+
+classic_shutter_process_reconnect_page_timeout:
+	branch classic_shutter_process_reconnect_failed
+
+
+classic_shutter_process_virtual_cable_unplug:
+	setarg FLAG_SHUTTER_CABLE_UNPLUG_TIMEOUT
+	store 1,mem_classic_shutter_cable_unplug_conut
+	rtn
+
+
+classic_shutter_process_remote_unsniff:
+	branch app_start_auto_sniff
+
+
+/***************classic shutter store reconn info***********************/
+classic_shutter_process_store_reconnect_information:
+	arg NVRAM_EEPROM_OFFSET,regb
+	fetch 1,mem_nv_data_number
+	mul32 pdata,34,temp
+	fetch 2,mem_nv_data_ptr
+	copy pdata,rega
+	branch iicd_write_eep_data
+
+classic_shutter_load_reconn_info:
+	arg NVRAM_EEPROM_OFFSET,regb
+	fetch 1,mem_shutter_bluetooth_type
+	rtnbit0 CLASSIC_SHUTTER
+	fetch 1,mem_nv_data_number
+	rtn blank
+	mul32 pdata,34,temp
+	fetch 2,mem_nv_data_ptr
+	copy pdata,rega
+	branch iicd_read_eep_data
+/**************************************/
+
+/******************ble shutter event**********************/
+ble_shutter_process_baseband_connect:
+	call shutter_stop_bluetooth_discovery
+	setarg 0
+	store 2,mem_ble_shutter_reconn_timer
+	branch app_led_off
+
+
+ble_shutter_process_baseband_disconnect:
+	call queue_init
+	jam 0,mem_ble_shutter_enable_notify
+	branch shutter_start_reconnect
+
+
+ble_shutter_process_reconnect_complete:
+	call queue_init
+	jam 1,mem_ble_shutter_enable_notify
+	fetch 8,mem_ble_shutter_interval_min
+	store 8,mem_le_interval_min
+	call app_lpm_mult_enable
+	branch le_l2cap_tx_update_req
+
+
+ble_shutter_process_parse_connect_parameter_update_response:
+	fetch 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	rtneq BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_ACCEPTED
+	fetch 8,mem_ble_shutter_interval_min_new
+	rtn blank
+	store 8,mem_le_interval_min
+	branch le_l2cap_tx_update_req
+/**************************************/
+
+/******************soft swtich event**********************/
+shutter_process_soft_swtich_button_long_press:
+	branch ui_soft_switch_botton_long_press
+
+shutter_process_soft_swtich_button_down:
+	fetch 1,mem_shutter_hard_soft_switch_case
+	rtneq HARD_SWITCH
+	fetch 1,mem_shutter_soft_switch_power_state
+	rtnne SS_STATE_POWER_ON
+	call shutter_store_currenct_led_state
+	branch app_led_on
+	
+shutter_store_currenct_led_state:
+	jam 1,mem_shutter_soft_swtich_botton_down
+	arg 11,loopcnt
+	arg mem_shutter_soft_swtich_led_struct_temp,contw
+	arg mem_shutter_led_struct_app_led,contr
+	branch memcpy
+	
+shutter_process_soft_swtich_button_up:
+	fetch 1,mem_shutter_hard_soft_switch_case
+	rtneq HARD_SWITCH
+	fetch 1,mem_shutter_soft_switch_power_state
+	beq SS_STATE_POWER_ON,shutter_load_currenct_led_state
+	branch ui_soft_switch_botton_up
+
+shutter_load_currenct_led_state:
+	fetch 1,mem_shutter_soft_swtich_botton_down
+	rtnne 1
+	jam 0,mem_shutter_soft_swtich_botton_down
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,app_led_off
+	bbit1 UI_STATE_BLE_CONNECTED,app_led_off
+	arg 11,loopcnt
+	arg mem_shutter_soft_swtich_led_struct_temp,contr
+	arg mem_shutter_led_struct_app_led,contw
+	branch memcpy
+	
+/**************************************/
+
+
+shutter_le_bb_event_timer:
+/**************shutter check sleep timer**********************/
+	call shutter_check_sleep_timer
+/************************************/
+/**************soft reset power off timer**********************/
+	call shutter_check_power_off_timer
+/************************************/
+/**************classic shutter timer**********************/
+	call classic_shutter_check_unplug_timer
+	call classic_shutter_hid_handshake_timer
+	call classic_shutter_hid_disconn_timer
+/************************************/
+/**************ble shutter timer**********************/
+	branch ble_shutter_reconn_timer
+/************************************/
+
+/**************shutter check sleep timer**********************/
+shutter_check_sleep_timer:
+	arg mem_shutter_sleep_timer,regc
+	arg shutter_sleep_timeout,regb
+	branch timer_single_step_2B
+shutter_sleep_timeout:
+	jam SS_STATE_POWER_OFF,mem_shutter_soft_switch_power_state
+	call app_led_off
+	call shutter_disconnect_current_connection
+	branch shutter_wait_power_off
+
+/**************soft reset power off timer**********************/
+shutter_check_power_off_timer:
+	arg mem_shutter_power_off_timer,regc
+	arg shutter_check_power_off_timeout,regb
+	branch timer_single_step
+
+shutter_check_power_off_timeout:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,shutter_wait_power_off
+	bbit1 UI_STATE_BT_CONNECTED,shutter_wait_power_off
+	fetch 1,mem_shutter_led_struct_app_led_type
+	beq UI_LED_STATE_BLINK_START,shutter_wait_power_off
+	beq UI_LED_STATE_BLINK_LIGHTING,shutter_wait_power_off
+	beq UI_LED_STATE_BLINK_DARKING,shutter_wait_power_off
+	branch app_enter_hibernate
+/************************************/
+
+/**************classic shutter timer**********************/
+classic_shutter_check_unplug_timer:
+	arg mem_classic_shutter_cable_unplug_conut,regc
+	arg classic_shutter_unplug_timeout,regb
+	branch timer_single_step
+	
+classic_shutter_unplug_timeout:
+	fetch 1,mem_CONTROL_tasks
+	set1  L2CAP_DISCONNECT_INTERRUPT, pdata
+	set1  L2CAP_DISCONNECT_CONTROL, pdata
+	store 1,mem_CONTROL_tasks	
+	rtn
+
+classic_shutter_hid_handshake_timer:
+	arg mem_hid_handshake_timer_count,regc
+	arg classic_shutter_process_hid_handshake,regb
+	branch timer_single_step
+
+classic_shutter_hid_disconn_timer:
+	arg mem_classic_shutter_hid_disconn_count,regc
+	arg app_bt_disconnect,regb
+	branch timer_single_step
+
+/************************************/
+
+/**************ble shutter timer**********************/
+ble_shutter_reconn_timer:
+	fetch 1,mem_shutter_soft_switch_power_state
+	rtnne SS_STATE_POWER_ON
+	arg mem_ble_shutter_reconn_timer,regc
+	arg shutter_start_bluetooth_discovery,regb
+	branch timer_single_step_2B
+/************************************/
+
+shutter_process_idle:
+	call shutter_send_data_to_master
+	branch keyscan_key_process
+
+
+shutter_process_lpm_before:
+	branch keyscan_process_lpm_before
+
+shutter_le_before_hibernate:
+	call gpio_set_before_lpm_common
+	branch shutter_process_lpm_before
+
+//////////////////////////////////////////////////////////////////////////////////////////
+
+
+/****************shutter bluetooth control**********************/
+shutter_stop_bluetooth_discovery:
+	fetch 1,mem_shutter_bluetooth_type
+	bbit1 CLASSIC_SHUTTER,classic_shutter_stop_bluetooth_discovery
+	bbit1 BLE_SHUTTER,ble_shutter_stop_bluetooth_discovery
+	rtn
+
+ble_shutter_stop_bluetooth_discovery:
+	fetch 2,mem_ble_shutter_connect_timeout
+	store 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+	branch app_ble_stop_adv
+	
+classic_shutter_stop_bluetooth_discovery:
+	fetch 2,mem_classic_shutter_connect_timeout
+	store 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+	branch app_bt_stop_discovery
+
+shutter_start_bluetooth_discovery:
+	fetch 1,mem_shutter_soft_switch_power_state
+	rtnne SS_STATE_POWER_ON
+	fetch 1,mem_shutter_bluetooth_type
+	bbit1 CLASSIC_SHUTTER,classic_shutter_start_discovery
+	bbit1 BLE_SHUTTER,ble_shutter_start_discovery
+	rtn
+	
+classic_shutter_start_discovery:
+	fetch 2,mem_classic_shutter_discovery_timeout,
+	store 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+	branch app_bt_start_discovery_short
+
+ble_shutter_start_discovery:
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	fetch 2,mem_ble_shutter_discovery_timeout
+	store 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+	fetch 2,mem_ble_shutter_discovery_adv_interval
+	call shutter_ble_adv_interval_set
+	call app_led_start_blink
+	fetch 4,mem_ble_shutter_discovery_blink_on_time
+	store 4,mem_shutter_led_struct_app_led_on_time
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_ADV
+	branch app_ble_start_adv
+
+
+shutter_start_reconnect:
+	fetch 1,mem_shutter_soft_switch_power_state
+	rtnne SS_STATE_POWER_ON
+	fetch 1,mem_shutter_bluetooth_type
+	bbit1 CLASSIC_SHUTTER,classic_shutter_start_reconnect
+	bbit1 BLE_SHUTTER,ble_shutter_start_reconnect
+	rtn
+
+classic_shutter_start_reconnect:
+	call app_check_reconn_target
+	branch shutter_start_bluetooth_discovery,blank
+	call app_led_on	
+	call app_bt_stop_discovery
+	branch app_bt_start_reconnect	
+
+ble_shutter_start_reconnect:
+	fetch 2,mem_ble_shutter_reconn_timer
+	fetcht 2,mem_ble_shutter_reconn_timeout
+	storet 2,mem_ble_shutter_reconn_timer
+	nrtn blank
+	fetch 2,mem_ble_shutter_reconn_dav_interval
+	call shutter_ble_adv_interval_set
+	call app_led_start_blink
+	fetch 4,mem_ble_shutter_reconn_blink_on_time
+	store 4,mem_shutter_led_struct_app_led_on_time
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_ADV
+	branch app_ble_start_adv
+
+//pdata:adv interval value
+shutter_ble_adv_interval_set:
+	store 2,mem_lpm_interval
+	increase -4,pdata
+	store 2,mem_le_adv_interval
+	rtn
+
+
+shutter_disconnect_current_connection:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,app_ble_disconnect
+	bbit1 UI_STATE_BT_CONNECTED,app_bt_disconnect
+	branch shutter_stop_bluetooth_discovery
+/**************************************/
+
+/******************classic shutter load reconnect*********************/
+app_check_reconn_target:
+	fetch 1,mem_nv_data_number
+	copy pdata,loopcnt
+	fetch 2,mem_nv_data_ptr
+	copy pdata,rega
+app_check_reconn_target_loop:
+	ifetch 2,rega
+	beq 0,found_reconn_device
+	increase NV_DATA_LEN,rega
+	loop app_check_reconn_target_loop
+	branch enable_blank
+
+found_reconn_device:
+	ifetch 6,contr
+	store 6,mem_hci_plap
+	increase 10,contr
+	arg mem_link_key,contw
+	call  memcpy16
+	call check_link_key_load
+	branch disable_blank
+	
+/**************************************/
+
+/////////////////////////////////////////////////////////////////////////
+//output:if user is enable,mean,can send data
+shutter_check_data_enable:
+	call disable_user
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,shutter_check_bt_data_enable
+	bbit1 UI_STATE_BLE_CONNECTED,shutter_check_ble_data_enable
+	rtn
+
+shutter_check_bt_data_enable:
+	fetch 1,mem_hid_interrupt_state
+	rtnne 0x3f	
+	branch enable_user
+
+shutter_check_ble_data_enable:
+	fetch 1,mem_ble_shutter_enable_notify
+	rtn blank
+	branch enable_user
+/////////////////////////////////////////////////////////////////////////
+
+/////////////////////////////////////////////////////////////////////////
+//output:if user is enable,mean,bluetooth disconnect
+shutter_check_bluetooth_conn:
+	call disable_user
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BT_CONNECTED
+	rtnbit1 UI_STATE_BLE_CONNECTED
+	branch enable_user
+/////////////////////////////////////////////////////////////////////////
+
+/////////////////////////////////////////////////////////////////////////
+shutter_change_bluetooth_status_bt_disconn:
+	fetch 1,mem_shutter_bluetooth_type
+	bbit1 CLASSIC_SHUTTER,classic_shutter_change_bluetooth_status_bt_disconn
+	bbit1 BLE_SHUTTER,ble_shutter_change_bluetooth_status_bt_disconn
+	rtn
+	
+classic_shutter_change_bluetooth_status_bt_disconn:
+	fetch 1,mem_scan_mode
+	rtnne 0x03
+	branch shutter_start_reconnect
+	
+ble_shutter_change_bluetooth_status_bt_disconn:
+	branch shutter_start_reconnect
+
+/////////////////////////////////////////////////////////////////////////
+shutter_check_send_data:
+	disable user2
+	fetch 2,mem_shutter_sleep_timeout
+	store 2,mem_shutter_sleep_timer
+
+	call shutter_check_bluetooth_conn
+	branch shutter_change_bluetooth_status_bt_disconn,user
+	
+	call shutter_check_data_enable
+	nrtn user
+	enable user2
+	rtn
+
+//queue = key index
+//rega =1 press, =0 release
+shutter_key_change:
+	call shutter_check_send_data
+	nrtn user2
+	deposit rega
+	branch shutter_key_release,blank
+shutter_key_press:
+	call app_led_on
+	arg mem_key0_press,regc
+	branch push_queue_press_or_release
+
+shutter_key_release:
+	call app_led_off
+	arg mem_key0_release,regc
+
+push_queue_press_or_release:
+	arg MAX_QUEUE_NUM,pdata
+	imul32 queue,pdata
+	iadd regc,regc
+	
+//input:regc the address that want push to queue buffer
+push_buffer_in_queue:
+	ifetch 1,regc
+	rtn blank
+	call queue_push_one_byte
+	increase 1,regc
+	branch push_buffer_in_queue
+
+
+shutter_send_data_to_master:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_CONNECTED,pop_queue_to_ble_data
+	bbit1 UI_STATE_BT_CONNECTED,pop_queue_to_classic_data
+	rtn
+
+pop_queue_to_ble_data:
+	call le_fifo_check_nearly_full
+	nrtn blank
+	call queue_pop_one_byte
+	nrtn user
+	pincrease -1
+	mul32 pdata,SHUTTER_BLE_DATA_BUFFER,pdata
+	arg mem_ble_data_buffer1,temp
+	iadd temp,contr
+le_send_notify_from_list:
+	ifetch 1,contr	//length 
+	copy pdata,rega
+	ifetcht 2,contr	//handle
+	call store_contr
+	call le_att_malloc_tx_notify
+	copy rega,loopcnt
+	call get_contr
+	branch memcpy
+
+
+pop_queue_to_classic_data:
+	call l2cap_malloc_is_fifo_nearly_full
+	nrtn blank
+	call queue_pop_one_byte
+	nrtn user
+	pincrease -1
+	mul32 pdata,SHUTTER_CLASSIC_DATA_BUFFER,pdata
+	arg mem_classic_data_buffer1,temp
+	iadd temp,contr
+	ifetch 5,contr
+	store 5,mem_classic_data_buffer
+classic_send_hid_data:
+	fetch 1,mem_classic_data_buffer
+	copy pdata,rega
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_int_remote_cid
+	istore 2,contw
+	setarg 0xa1
+	istore 1,contw
+	fetch 4,mem_classic_data_buffer + 1
+	istore 9,contw
+	rtn
+
+///////////queue function////////////
+//input:pdata is data that want push
+queue_push_one_byte:
+	store 1,mem_pdatatemp
+	arg mem_pdatatemp,rega
+	branch queue_push
+
+queue_pop_one_byte:
+	arg mem_pdatatemp,rega
+	call queue_pop
+	nrtn user
+	fetch 1,mem_pdatatemp
+	rtn
+
+///////////queue function ending////////////
+ble_shutter_receive_data:
+	fetch 2,mem_le_att_handle
+	beq GATT_KEYBOARD_WRITE_HANDLE,ble_shutter_process_reconnect_complete
+	rtn
+
+shutter_init_param:
+	setarg 0x02
+	store 1,mem_shutter_power_off_timeout
+/////////////ble connect interval//////////////
+	setarg 0x00200008
+	store 4,mem_ble_shutter_interval_min		//set min interval is 10ms,set max interval is 40ms
+	setarg 0x012c0005
+	istore 4,contw
+///////////////////////////////////////
+//////////////////MTU/////////////
+	jam 0x17,mem_le_local_mtu
+///////////////////////////////////////
+////////////////justwork/////////
+	setarg 0x1b
+ 	store 2,mem_le_pairing_handle
+ 	call le_set_config_fixed_ltk
+	call le_set_fixed_ltk
+	call le_set_justwork
+	branch le_set_config_read_authentication
+///////////////////////////////////////
+
+shutter_load_buffer_config_form_DataRom:
+///////load data Rom/////////
+	arg BLE_KEY_VALUE_LIST_SIZE,loopcnt
+	arg mem_ble_data_buffer1,contw
+	arg BLE_SHUTTER_KEY_VALUE_LIST,contr
+	call memcpy_fast
+	arg BT_KEY_VALUE_LIST_SIZE,loopcnt
+	arg mem_classic_data_buffer1,contw
+	arg CLASSIC_SHUTTER_KEY_VALUE_LIST,contr
+	branch memcpy_fast	
+
+
+shutter_load_ble_gatt_form_DataRom:
+	arg BLE_GATT_LIST_SIZE,loopcnt
+	arg BLE_SHUTTER_GATT_LIST,contr
+	branch memcpy_fast
+
+
+shutter_load_bt_sdp_form_DataRom:
+	arg BT_SDP_LIST_SIZE,loopcnt
+	arg CLASSIC_SHUTTER_SDP_LIST,contr
+	branch memcpy_fast
+	
+
+///////////////////////////////gpio config////////////////////////////////////
+shutter_init_bluetooth_config:
+	call shutter_check_load_config_flag
+	nrtn user
+	fetch 1,mem_shutter_config_select_gpio1
+	call shutter_init_bluetooth_config_gpio_input
+	fetch 1,mem_shutter_config_select_gpio2
+	call shutter_init_bluetooth_config_gpio_input
+	fetch 1,mem_shutter_config_select_gpio3
+	branch shutter_init_bluetooth_config_gpio_input
+	
+shutter_init_bluetooth_config_gpio_input:
+	rtn blank
+	or pdata,0x80,temp
+	branch gpio_config_input_nowake
+	
+
+shutter_load_bluetooth_config:
+	call shutter_check_load_config_flag
+	nrtn user
+	call shutter_load_bluetooth_config_label
+	branch shutter_load_bluetooth_config_by_otp
+
+shutter_load_bluetooth_config_label:
+	arg 0,rega
+	fetch 1,mem_shutter_config_select_gpio1
+	call shutter_load_bluetooth_config_read_gpio_input
+	nsetflag blank,0,rega
+	fetch 1,mem_shutter_config_select_gpio2
+	call shutter_load_bluetooth_config_read_gpio_input
+	nsetflag blank,1,rega
+	fetch 1,mem_shutter_config_select_gpio3
+	call shutter_load_bluetooth_config_read_gpio_input
+	nsetflag blank,2,rega
+	copy rega,pdata
+	store 1,mem_shutter_config_label
+	fetch 1,mem_shutter_config_size
+	imul32 rega,pdata
+	fetcht 2,mem_shutter_config_otp_base_address		//base address
+	iadd temp,pdata
+	store 2,mem_shutter_config_otp_addr
+	rtn
+
+shutter_load_bluetooth_config_read_gpio_input:
+	rtn blank
+	or pdata,0x80,temp
+	call gpio_get_bit
+	nbranch enable_blank,true
+	branch disable_blank
+	
+
+shutter_check_load_config_flag:
+	call disable_user
+	fetch 1,mem_shutter_config_user_size
+	nrtn blank
+	fetch 1,mem_shutter_config_enable
+	rtn blank
+	branch enable_user
+
+
+shutter_load_bluetooth_config_by_otp:
+	call otp_enable_chgpump
+	fetch 2,mem_shutter_config_otp_addr
+	arg mem_shutter_config_data_temp,rega
+	fetcht 1,mem_shutter_config_size
+	call otpd_read_data
+	call otp_disable_chgpump
+shutter_load_bluetooth_config_store_name:
+	fetch 1,mem_shutter_config_data_temp
+	copy pdata,loopcnt
+	store 1,mem_le_name_len
+	call memcpy_fast
+	fetch 1,mem_shutter_config_data_temp
+	copy pdata,loopcnt
+	store 1,mem_local_name_length
+	call memcpy_fast
+	ifetch 1,contr
+	store 1,mem_shutter_key_num
+	ifetch 1,contr
+	store 1,mem_shutter_hard_soft_switch_case
+	rtn
+
+
+shutter_load_bluetooth_config_by_eeprom:
+	fetch 1,mem_shutter_bluetooth_type
+	rtnbit0 CLASSIC_SHUTTER
+	arg 3,temp
+	fetch 2,mem_shutter_config_eeprom_offset_addr
+	copy pdata,regb
+	arg mem_shutter_config_eeprom_start_flag,rega
+	call iicd_read_eep_data
+	fetcht 2,mem_shutter_config_eeprom_start_flag
+	setarg SHUTTER_EEPROM_CONFIG_CRC
+	isub temp,null
+	nrtn zero
+	fetch 1,mem_shutter_config_user_size
+	rtn blank
+	copy pdata,temp
+	fetch 2,mem_shutter_config_eeprom_offset_addr
+	add pdata,3,regb
+	arg mem_shutter_config_data_temp,rega
+	call iicd_read_eep_data
+	branch shutter_store_config
+
+shutter_load_bluetooth_config_by_user_config:
+	fetch 2,mem_shutter_config_user_otp_address
+	rtn blank
+	call otp_enable_chgpump
+	arg 1,temp
+	arg mem_shutter_config_user_size,rega
+	call otpd_read_data
+	
+	fetch 1,mem_shutter_config_user_size
+	rtn blank
+	
+	fetch 2,mem_shutter_config_user_otp_address
+	pincrease 1
+	arg mem_shutter_config_data_temp,rega
+	fetcht 1,mem_shutter_config_user_size
+	call otpd_read_data
+	call otp_disable_chgpump
+shutter_store_config:
+	call shutter_load_bluetooth_config_store_name
+shutter_load_bluetooth_config_custom:
+	ifetch 2,contr
+	rtn blank
+	copy pdata,contw
+	ifetcht 1,contr
+	copy temp,loopcnt
+	call memcpy
+	branch shutter_load_bluetooth_config_custom
+///////////////////////////////////////////////////////////////////
+
+//////////////////////////random mac address//////////////////////////////
+shutter_random_mac_addr:
+	fetch 1,mem_shutter_bluetooth_type
+	rtnbit0 CLASSIC_SHUTTER
+	fetch 2,mem_classic_shutter_random_mac_offset_addr
+	copy pdata,regb
+	arg 4,temp
+	arg mem_shutter_random_mac_data_temp,rega
+	call iicd_read_eep_data
+	fetch 1,mem_shutter_random_mac_data_temp
+	bne 1,shutter_write_random_mac_addr_to_eeprom
+shutter_write_random_mac_addr_to_eeprom:
+	setarg 1
+	store 1,mem_shutter_random_mac_data_temp
+	force 3,loopcnt
+	call generate_random_loop
+	fetch 2,mem_classic_shutter_random_mac_offset_addr
+	copy pdata,regb
+	arg 4,temp
+	arg mem_shutter_random_mac_data_temp,rega
+	call iicd_write_eep_data
+shutter_write_random_mac_addr:
+	fetch 3,mem_shutter_random_mac_data_temp + 1
+	store 3,mem_lap
+	store 3,mem_le_lap
+	rtn
+	
+/////////////////////////////////////////////////////////////////
+shutter_soft_swtich_power_on:
+	branch shutter_start_reconnect
+
+
+shutter_soft_swtich_power_off:
+	arg 0,rega
+	arg mem_shutter_power_off_led_style,regc
+	call ui_led_set_style_global
+	call shutter_disconnect_current_connection
+shutter_wait_power_off:
+	fetch 1,mem_shutter_power_off_timeout
+	store 1,mem_shutter_power_off_timer
+	rtn
+	
+
+/*************soft swtich ui config*********************/
+ui_soft_swtich_init:
+	setarg SS_STATE_POWER_UP
+	call ui_soft_swtich_init_power_on_time
+	jam UI_BUTTON_STATE_UP,mem_ui_button_last_state
+	call ui_button_init
+	call ui_button_polling
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+	branch app_enter_hibernate
+
+ui_soft_swtich_init_power_on_time:
+	fetcht 2,mem_power_param_ptr
+	istore 1,temp		//init power state 
+	ifetch 1,contw		//power on time
+	store 1,mem_ui_button_timeout
+	rtn
+
+
+ui_soft_switch_botton_up:
+	fetch 2,mem_power_param_ptr
+	ifetch 1,pdata
+	rtnne SS_STATE_POWER_UP
+	branch app_enter_hibernate
+
+
+ui_soft_switch_botton_long_press:
+	fetcht 2,mem_power_param_ptr
+	ifetch 1,temp
+	beq SS_STATE_POWER_ON,ui_soft_switch_power_off
+ui_soft_switch_power_on:
+	setarg SS_STATE_POWER_ON
+	fetcht 2,mem_power_param_ptr
+	istore 1,temp		//init power state 
+	add temp,SS_POWER_OFF_TIME,contr
+	ifetch 1,contr
+	istore 1,mem_ui_button_timeout
+	ifetch 2,contr
+	branch callback_func
+
+ui_soft_switch_power_off:
+	setarg SS_STATE_POWER_OFF
+	call ui_soft_swtich_init_power_on_time
+	add temp,SS_POWER_OFF_CB,contr
+	ifetch 2,contr
+	branch app_enter_hibernate,blank		//no call back function , just enter hibernate
+	branch callback_func
+	
+/*************soft swtich ui config ending*********************/
+
+
+/*************unkown function*********************/
+shutter_byteswap:
+	store 6,mem_tmp_buffer
+	fetch 1,mem_tmp_buffer
+	store 1,mem_tmp_buffer+11
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+10
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+9
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+8
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+7
+	ifetch 1,contr
+	store 1,mem_tmp_buffer+6
+	fetch 6,mem_tmp_buffer+6
+	rtn
+
+shutter_random_addr_by_otp:
+	call load_adc_init
+	fetch 1,mem_1v_adc_io_data
+	store 1,mem_le_lap
+	fetch 1,mem_5v_adc_hvin_data
+	istore 1,contw
+	fetch 1,mem_3v_adc_vinlpm_data
+	istore 1,contw
+	fetch 3,mem_le_lap
+	store 3,mem_lap
+	rtn
+
+
+
+//iic read function
+//function name:sim_iic_read_eep_data
+//input:
+//temp:the length that simulation iic want to read eeprom data
+//rega:the memmory point that simulation iic read data store
+//regb:the eeprom address offset
+//mark_eeprom_size:select 02 or other
+//output:nc
+sim_iic_read_eep_data:
+	fetch 2,mem_eeprom_base
+	iadd regb,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+	copy temp,regb
+	
+	call sim_iic_start
+	setarg 0xa0
+	call sim_iic_send_byte
+	fetch 1,mem_addr_mi
+	call sim_iic_send_byte
+	bmark1 mark_eeprom_size,sim_iic_read_eep_data_2k
+	fetch 1,mem_addr_mi + 1
+	call sim_iic_send_byte
+sim_iic_read_eep_data_2k:
+	call sim_iic_stop
+
+	call sim_iic_start
+	setarg 0xa1
+	call sim_iic_send_byte
+
+sim_iic_read_eep_data_loop:
+	call sim_iic_read_byte
+	istore 1,rega
+	increase 1,rega
+	increase -1,regb
+	nbranch sim_iic_read_eep_data_loop,zero
+	branch sim_iic_stop
+
+
+//iic write data function
+//function name:sim_iic_write_eep_data
+//input:
+//temp:the length that simulation iic want to write eeprom data
+//rega:the memmory point that simulation iic write data read
+//regb:the eeprom address
+//mark_eeprom_size:select 02 or other
+//output:nc
+sim_iic_write_eep_data:
+	byteswap regb,pdata
+	store 2,mem_addr_mi
+	copy temp,regb
+
+	call sim_iic_start
+	setarg 0xa0
+	call sim_iic_send_byte
+
+	fetch 1,mem_addr_mi
+	call sim_iic_send_byte
+	bmark1 mark_eeprom_size,sim_iic_write_eep_data_loop
+	fetch 1,mem_addr_mi + 1
+	call sim_iic_send_byte
+sim_iic_write_eep_data_loop:
+	ifetch 1,rega
+	call sim_iic_send_byte
+	increase 1,rega
+	increase -1,regb
+	nbranch sim_iic_write_eep_data_loop,zero
+	branch sim_iic_stop
+//	bmark1 mark_eeprom_size
+
+//use reg:pdata,contr,contw,loopcnt
+sim_iic_wait_ack:
+	arg 10,loopcnt
+	call sim_iic_release_sda
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+sim_iic_wait_ack_loop:
+	call sim_iic_read_sda_level
+	branch sim_iic_scl_output_low,blank	//scl = 0
+	loop sim_iic_wait_ack_loop
+	branch sim_iic_scl_output_low		//scl = 0	
+
+
+//use reg:pdata,contr,contw,rega,queue
+sim_iic_ack_slave:
+	call sim_iic_scl_output_low		//scl = 0	
+	call sim_iic_sda_output_low		//sda = 0
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	branch sim_iic_scl_output_low	//scl = 0	
+
+
+//output:pdata receive byte data
+//use reg:pdata,contr,contw,loopcnt,regc,rega
+sim_iic_read_byte:
+	arg 8,loopcnt
+	arg 0,regc
+	call sim_iic_release_sda
+sim_iic_read_byte_loop:
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	lshift regc,regc	
+	call sim_iic_read_sda_level
+	iadd regc,regc
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_scl_output_low		//scl = 0	
+	loop sim_iic_read_byte_loop
+	call sim_iic_ack_slave
+	copy regc,pdata
+	rtn
+
+//input:pdata send byte data
+//use reg:pdata,contr,contw,loopcnt,regc,rega
+sim_iic_send_byte:
+	arg 8,loopcnt
+	copy pdata,regc
+	call sim_iic_scl_output_low		//scl = 0	
+sim_iic_send_byte_loop:
+	isolate1 7,regc
+	call sim_iic_sda_output_high,true	//sda = 1
+	ncall sim_iic_sda_output_low,true	//sda = 0
+	lshift regc,regc
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_scl_output_low		//scl = 0	
+	call sim_iic_delay				//delay 2.5us
+	loop sim_iic_send_byte_loop
+	branch sim_iic_wait_ack
+
+
+//use reg:pdata,contr,contw,rega
+sim_iic_start:
+	call sim_iic_sda_output_high	//sda = 1
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_sda_output_low		//sda = 0
+	call sim_iic_delay				//delay 2.5us
+	branch sim_iic_scl_output_low		//scl = 0
+
+
+//use reg:pdata,contr,contw,rega
+sim_iic_stop:
+	call sim_iic_sda_output_low		//sda = 0
+	call sim_iic_scl_output_high	//scl = 1
+	call sim_iic_delay				//delay 2.5us
+	call sim_iic_sda_output_high	//sda = 1
+	branch sim_iic_delay				//delay 2.5us
+
+
+//scl = 1
+sim_iic_scl_output_high:
+	enable user
+	fetch 1,SIM_IIC_SCL_GPIO_NUM
+	branch sim_iic_config_gpio
+
+//scl = 0
+sim_iic_scl_output_low:
+	disable user
+	fetch 1,SIM_IIC_SCL_GPIO_NUM
+	branch sim_iic_config_gpio
+
+//sda = 1
+sim_iic_sda_output_high:
+	enable user
+	fetch 1,SIM_IIC_SDA_GPIO_NUM
+	branch sim_iic_config_gpio
+
+//sda = 0
+sim_iic_sda_output_low:
+	disable user
+	fetch 1,SIM_IIC_SDA_GPIO_NUM
+	branch sim_iic_config_gpio
+
+//input:pdata the gpio number
+//input:user flag, if enable user,config gpio output high level; if disable user, config gpio output low level
+//use reg:pdata,contr,contw,queue,rega
+sim_iic_config_gpio:
+	and pdata,0x07,queue
+	rshift3 pdata,pdata
+	arg core_gpio_oe0,temp
+	iadd temp,temp
+	ifetch 1,temp
+	qset1 pdata
+	istore 1,temp
+	increase 4,temp
+	ifetch 1,temp
+	qsetflag user,pdata
+	istore 1,temp
+	rtn
+
+
+sim_iic_release_sda:
+	fetch 1,SIM_IIC_SDA_GPIO_NUM
+	and pdata,0x07,queue
+	rshift3 pdata,pdata
+	arg core_gpio_oe0,temp
+	iadd temp,temp
+	ifetch 1,temp
+	qset0 pdata
+	istore 1,temp
+	rtn	
+
+//get sda level
+//output:if sda high level ,pdata is 1;if sda low level ,pdata is 0
+//use reg:pdata,contr,contw,queue,rega,temp
+sim_iic_read_sda_level:
+	nop 4
+	fetch 1,SIM_IIC_SDA_GPIO_NUM
+	and pdata,0x07,queue
+	rshift3 pdata,pdata
+	arg core_gpio_in,temp
+	iadd temp,temp
+	setarg 0
+	ifetcht 1,temp
+	qisolate1 temp
+	setflag true,0,pdata
+	rtn	
+
+//delay 2.5us
+sim_iic_delay:
+//	nop 1
+	rtn
+
+/**********************************/
+
+
+else
+        branch assert
+	
+endif
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_usb.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_usb.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/app_usb.prog	(working copy)
@@ -0,0 +1,997 @@
+
+usb_isr:
+	bpatch patch1e_6,mem_patch1e
+	hfetch 1,core_usb_status
+	isolate1 7,pdata
+	call usb_init,true
+	call usb_nak_state_judge
+	hfetch 1,core_usb_status
+	store 1,mem_usb_status
+	hfetch 1,core_usb_fifo_empty
+	store 1,mem_usb_fifo_empty
+	hstore 1,core_usb_fifo_empty
+	pinvert
+	fetcht 1,mem_usb_tx_wait
+	iand temp,pdata
+	store 1,mem_usb_tx_wait
+	jam 0xe0,core_usb_status
+	fetch 1,mem_usb_fifo_empty
+	compare 0x1,pdata,0x1
+	call usb0_fifo_empty,true
+	fetch 1,mem_usb_status	
+	compare 0x1,pdata,0x1  
+	call usb_status1,true
+	call usb_tx
+	branch usb_nak_state
+
+usb_init:
+	bpatch patch1e_7,mem_patch1e
+	call usb_init_param
+	jam 0x00,core_usb_config
+ifndef SIM
+	nop 10000
+endif
+	jam 0xc0,core_usb_trig
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_USB,pdata
+	hstore 2,core_clkoff
+	jam 0x3c,core_usb_config
+	jam 0xff,core_usb_status
+	jam 0xff,core_usb_fifo_empty
+	jam 0,core_usb_addr
+	jam DEV_DEFAULT,mem_usb0_state
+	setarg mem_usb_clear_mem_end
+	arg mem_usb_clear_mem_start,contw
+	isub contw,loopcnt
+	branch clear_mem
+
+usb_offline_check_init:
+	fetcht 1,mem_usb_offline_check_gpio
+	branch gpio_config_input
+usb_offline_state:
+	fetch 1,mem_usb_device_enumeration_endflag
+	rtn blank
+	fetcht 1,mem_usb_offline_check_gpio
+	call gpio_get_bit
+	branch usb_init,true
+	rtn
+
+
+usb_nak_state:
+	arg TIMER_NAK,queue
+	call timer_check
+	nrtn blank
+	fetch 1 ,mem_usb_wakestate_onetime_flag
+	nrtn blank
+	fetch 1,mem_usb_device_enumeration_endflag
+	ncall usb_mac_wakeup_judge,blank
+	rtn
+
+usb_mem_devicedesc_init:
+	arg mem_devicedesc,contw
+	setsect 0,0x11212
+	setsect 1,0x8000
+	setsect 2,0x0
+	setsect 3,0x10000
+	istore 9,contw
+	setsect 0,0x22412
+	setsect 1,0x8604
+	setsect 2,0x1000
+	setsect 3,0x8
+	istore 9,contw
+	setsect 0,0x1
+	istore 1,contw
+	rtn
+	
+usb_init_param:
+	jam 2,mem_usb0_state
+	setarg 0x0
+	store 1,mem_remain
+	store 2,mem_usb_zero_packet
+	pincrease 1
+	store 2,mem_usb_ones_packet
+	pincrease 1
+	store 2,mem_usb_two_packet
+	setarg HID_KBDATA_ADDR
+	store 2,mem_hidreportdesc_kb
+	setarg HID_MSDATA_ADDR
+	store 2,mem_hidreportdesc_m
+	arg mem_confdesc,contw
+	arg HID_CONFDATA_ADDR,contr
+	call memcpy64
+	fetch 1,mem_usb_tx_interval
+	ncall usb_tx_interval_config,blank
+	branch usb_mem_devicedesc_init
+	
+usb_tx_interval_config:
+	store 1,mem_confdesc+34
+	store 1,mem_confdesc+59
+	rtn
+usb_nak_state_judge:
+	hfetch 1,core_usb_status
+	bbit1 USB_STATUS_NAK,usb_nak_state_timer_init
+	rtn
+	
+usb_nak_state_timer_init:
+	call usb0_attached_state_judge
+	call timer_reinit
+	setarg TIMER_NAK_DELAY
+	arg TIMER_NAK,queue
+	branch timer_init
+	
+usb0_attached_state_judge:
+	fetch 1,mem_usb_state
+	bne USB_CONNECTED,usb_clear_halt_dispose
+	jam 0,mem_usb_wakestate_onetime_flag
+	jam 0,mem_usb_mac_wakeup_trig
+	rtn
+usb_clear_halt_dispose:
+	fetch 1,mem_usb_clear_halt
+	rtn blank
+	jam 0,mem_usb_clear_halt
+	jam USB_CONNECTED,mem_usb_state
+	jam 1,mem_usb_device_enumeration_endflag
+	rtn
+    	
+usb0_fifo_empty:
+	jam 0x1,core_usb_fifo_empty
+	branch usb0_tx
+
+usb_rx_no_data:
+	fetch 1,mem_usb_status
+	bbit1 USB_STATUS_SETUP,usb_class_type
+	rtn
+
+usb_rx_read:
+	hfetch 1,core_usb_ep
+	istore 1,contw
+	loop usb_rx_read
+	rtn
+
+usb_status1:
+	bpatch patch1f_0,mem_patch1f
+	jam 0x11,core_usb_status
+	hfetch 1,core_usb_ep_len
+	store 1,mem_usb_read_len
+	copy pdata,loopcnt
+	branch usb_rx_no_data,blank
+	arg mem_usb_setup,contw
+	call usb_rx_read
+	fetch 1,mem_usb_read_len
+	sub pdata,7,null
+	rtn positive
+usb_class_type:
+	fetch 1,mem_usb_setup_bmRequestType
+	and_into 0x80,pdata
+	beq IN_DEVICE,usb_in_device
+	beq OUT_DEVICE,usb_out_device
+	branch assert
+
+usb_in_device:
+	fetch 1,mem_usb_setup_bmRequestType
+	rshift4 pdata,pdata
+	rshift pdata,pdata
+	and_into 0x03,pdata
+	beq STANDARD_REQ,usb_in_standard_req
+	beq CLASS_REQ,usb_in_class_req
+	beq MANUFACTURER_REQ,usb_in_manufacturer_req
+	branch assert
+
+usb_out_device:
+	fetch 1,mem_usb_setup_bmRequestType
+	rshift4 pdata,pdata
+	rshift pdata,pdata
+	and_into 0x03,pdata
+	beq STANDARD_REQ,usb_out_standard_req
+	beq CLASS_REQ,usb_out_class_req	
+	beq MANUFACTURER_REQ,usb_out_manufacturer_req
+	branch assert
+
+usb_in_standard_req:
+	fetch 1,mem_usb_setup_bRequest
+	beq GET_CONFIGURATION,usb0_request_get_configuration
+	beq GET_DESCRIPTOR,usb0_request_get_descriptor
+	beq GET_INTERFACE,usb0_request_get_interface
+	beq GET_STATUS,usb0_request_get_status
+	branch usb0_force_stall
+
+usb_in_class_req:
+	fetch 1,mem_usb_setup_bRequest
+	beq GET_IDLE,usb_get_idle
+	beq GET_REPORT,usb_get_report
+	beq GET_PROTOCOL,usb_get_protocol_req
+	branch usb0_force_stall
+
+usb_in_manufacturer_req:
+	branch usb0_force_stall
+
+usb_out_standard_req:
+	fetch 1,mem_usb_setup_bRequest
+	beq CLEAR_FEATURE,usb0_request_clear_feature
+	beq SET_FEATURE,usb0_request_set_feature
+	beq SET_ADDRESS,usb0_request_set_address
+	beq SET_CONFIGURATION,usb0_request_set_configuration
+	beq SET_INTERFACE,usb0_request_set_interface
+	beq SET_DESCRIPTOR,usb0_force_stall
+	branch usb0_force_stall
+
+usb_out_class_req:
+	fetch 1,mem_usb_setup_bRequest
+	beq SET_IDLE,usb_set_idle
+	beq SET_REPORT,usb_set_report
+	beq SET_PROTOCOL,usb_set_protocol_req
+	branch usb0_force_stall
+
+usb_out_manufacturer_req:
+	branch usb0_force_stall
+
+usb0_force_stall:
+	hfetch 1,core_usb_stall
+	set1 0,pdata
+	hstore 1,core_usb_stall
+	branch usb0_reply_zerolen
+	
+usb0_reply_zerolen:
+	jam 0x40,core_usb_clear
+	rtn
+
+usb0_request_get_configuration:
+	fetch 1,mem_usb_setup_bmRequestType
+	bne IN_DEVICE,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 1,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb0_state
+	beq DEV_CONFIGURED,usb0_request_get_cfg_dev_cfg
+	beq DEV_ADDRESS,usb0_request_get_cfg_dev_addr
+	branch usb0_force_stall
+//Return current config : 1
+usb0_request_get_cfg_dev_cfg:
+	arg 1,regb
+	branch usb_send_ones_packet
+//Config do not work, return default config : 0
+usb0_request_get_cfg_dev_addr:
+	arg 1,regb
+	branch usb_send_zero_packet
+
+usb0_request_get_descriptor:
+	bpatch patch1f_1,mem_patch1f
+	set0 mark_isstr,mark
+	fetch 1,mem_usb_setup_bValueH
+	beq DSC_DEVICE,dsc_device_info
+	beq DSC_CONFIG,dsc_config_info	
+	beq DSC_STRING,dsc_string_info
+	beq DSC_HID,dsc_hid_info
+	beq DSC_HID_REPORT,dsc_hid_report_info
+	branch usb0_force_stall
+
+dsc_hid_info:
+	jam 0,mem_usb_get_protocol_flag
+	fetch 1,mem_usb_setup_wIndex
+	beq 0,dsc_hid_info_interface0
+	beq 1,dsc_hid_info_interface1
+	branch usb0_force_stall
+//class_descriptor hid_descriptor--keyboard 
+dsc_hid_info_interface0:	
+	arg mem_confdesc+19,rega
+	ifetch 1,rega
+	iforce regb
+	branch usb0_respond
+//class_descriptor hid_descriptor--mouse 
+dsc_hid_info_interface1:	
+	arg mem_confdesc+44,rega
+	ifetch 1,rega
+	iforce regb
+	branch usb0_respond
+
+dsc_device_info:
+//input : pdata : data poniter 
+//input : temp: data len
+//sets the data pointer and len to correct descriptor
+	fetch 1,mem_usb_set_high_addr_flag
+	ncall usb_set_high_addr,blank
+	setarg mem_devicedesc
+	fetcht 1,mem_devicedesc
+dsc_info_set_data_len:
+	store 2,mem_dsc_info_data_pointer
+	storet 1,mem_dsc_info_len
+	fetch 1,mem_usb_setup_bLength
+	isub temp,null
+	nbranch dsc_info_set_current_data_len,positive
+dsc_info_set_initial_data_len:
+	fetch 1,mem_dsc_info_len
+dsc_info_set_data_size_completed:	
+	iforce regb
+	fetch 2,mem_dsc_info_data_pointer
+	add pdata,1,pdata
+	iforce rega
+	branch usb0_respond
+dsc_info_set_current_data_len:
+	fetch 1,mem_usb_setup_bLength
+	branch dsc_info_set_data_size_completed
+
+usb_set_high_addr:
+	hfetch 1,core_usb_addr
+	ncall usb0_set_addr,blank
+	jam 0,mem_usb_set_high_addr_flag
+	rtn
+usb0_set_addr:
+	hfetch 1,core_usb_addr
+   	set1 7,pdata
+	hstore 1,core_usb_addr
+	rtn
+
+dsc_config_info:
+	setarg mem_confdesc
+	fetcht 1,mem_confdesc
+	branch dsc_info_set_data_len
+
+dsc_string_info:
+	fetch 1,mem_usb_setup_bValue
+	sub pdata,3,null
+	nbranch usb0_force_stall,positive
+	fetch 1,mem_usb_setup_bValue
+	arg mem_string0,rega
+	beq 0,usb0_respond_length	
+	set1 mark_isstr,mark
+	arg mem_string1,rega
+	beq 1,usb0_respond_length
+	arg mem_string2,rega
+	beq 2,usb0_respond_length
+	arg mem_string3,rega
+	beq 3,usb0_respond_length
+	rtn
+
+dsc_hid_report_info:
+	fetch 2,mem_usb_setup_wIndex
+	beq 1,dsc_hid_report_info0
+	fetch 2,mem_hidreportdesc_kb
+	copy pdata,rega
+//	arg mem_hidreportdesc_kb,rega
+	branch usb0_respond_length
+dsc_hid_report_info0:
+	jam 1,mem_usb_device_enumeration_endflag
+	jam USB_GOT_REPORT_REQ,mem_usb_state
+	fetch 2,mem_hidreportdesc_m
+	copy pdata,rega
+//	arg mem_hidreportdesc_m,rega
+	branch usb0_respond_length
+
+
+usb0_request_get_interface:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall		
+	fetch 1,mem_usb_setup_bmRequestType
+	bne IN_INTERFACE,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 1,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	arg 1,regb
+	branch usb_send_zero_packet
+
+
+usb0_request_get_status:
+	fetch 1,mem_usb0_state
+	beq DEV_DEFAULT,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 2,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bmRequestType
+	beq IN_DEVICE,usb0_get_status_in_device
+	beq IN_INTERFACE,usb0_get_status_in_interface
+	beq IN_ENDPOINT,usb0_get_status_in_endpoint
+	branch usb0_force_stall
+
+usb0_get_status_in_device:
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	arg 2,regb
+	fetch 1,mem_usb_remote_wakeup
+	beq 0x01,usb_send_two_packet
+//regb:length
+usb_send_zero_packet:
+	arg mem_usb_zero_packet,rega
+	branch usb0_respond
+usb_send_ones_packet:
+	arg mem_usb_ones_packet,rega
+	branch usb0_respond
+usb_send_two_packet:
+	arg mem_usb_two_packet,rega
+	branch usb0_respond
+
+usb0_get_status_in_interface:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall
+	arg 2,regb
+	branch usb_send_zero_packet
+
+usb0_get_status_in_endpoint:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	beq IN_EP1,usb0_get_status_in_ep_in_ep1
+	beq IN_EP2,usb0_get_status_in_ep_in_ep2
+	beq IN_EP3,usb0_get_status_in_ep_in_ep3
+	and_into 0x7f,pdata
+	beq 0x00,usb0_get_status_in_ep_in_ep0
+	branch usb0_force_stall
+	
+usb0_get_status_in_ep_in_ep0:
+	fetch 1,mem_usb_ep0_stall_status
+usb0_get_status_in_ep_in_ack:
+	arg 2,regb
+	beq 1,usb_send_ones_packet
+	branch usb_send_zero_packet
+usb0_get_status_in_ep_in_ep1:
+	fetch 1,mem_usb_ep1_stall_status
+	branch usb0_get_status_in_ep_in_ack
+usb0_get_status_in_ep_in_ep2:
+	fetch 1,mem_usb_ep2_stall_status
+	branch usb0_get_status_in_ep_in_ack
+usb0_get_status_in_ep_in_ep3:
+	fetch 1,mem_usb_ep3_stall_status
+	branch usb0_get_status_in_ep_in_ack
+
+usb_get_idle:
+	jam 1,mem_usb_idle_flag
+	arg mem_usb_idle_rate,rega
+	arg 1,regb
+	branch usb0_respond
+
+usb_get_report:
+	fetch 2,mem_usb_setup_bValue
+	arg PC_GET_REPORT,temp
+	isub temp,null
+	nbranch usb0_force_stall,zero
+	set0 mark_isstr,mark
+usb_get_report_dispose:	
+	fetch 1,mem_usb0_data_ready_report
+	nbranch usb_get_report_data_success,blank
+	jam PC_GET_NONDATA,mem_usb0_get_report_data
+usb_get_report_send_data:
+	fetch 1,mem_usb_setup_bLength
+	iforce regb
+	arg mem_usb0_get_report_data,rega
+	call usb0_respond
+usb_get_report_data_release:	
+	arg mem_usb0_get_report_data,contw
+	arg 8,loopcnt
+	branch memset0
+usb_get_report_data_success:
+	jam 0,mem_usb0_data_ready_report
+	jam PC_GET_DATA,mem_usb0_get_report_data
+	branch usb_get_report_send_data
+
+usb_get_protocol_req:
+	fetch 1,mem_usb_setup_bLength
+	bne 1,usb0_force_stall
+	jam 1,mem_usb_get_protocol_flag
+	arg 1,regb //length
+	fetch 1,mem_usb_set_protocol_value
+	beq 0,usb_get_report_protocol
+	beq 1,usb_get_boot_protocol
+	branch usb_send_zero_packet
+usb_get_report_protocol:
+	branch usb_send_ones_packet
+usb_get_boot_protocol:
+	branch usb_send_zero_packet
+
+
+
+//in device
+usb0_request_clear_feature:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bmRequestType
+	beq OUT_DEVICE,usb0_request_clear_feature_out_device
+	beq OUT_INTERFACE,usb0_request_clear_feature_out_interface
+	beq OUT_ENDPOINT,usb0_request_clear_feature_out_endpoint
+	branch usb0_force_stall
+
+usb0_request_clear_feature_out_device:
+	fetch 1,mem_usb_setup_bValue
+	bne DEVICE_REMOTE_WAKEUP,usb0_force_stall
+	hfetch 1,core_usb_config
+	set0 7,pdata
+	hstore 1,core_usb_config
+	jam 0,mem_usb_remote_wakeup
+	jam 1,mem_usb_clear_remote_wakeup
+	branch usb0_reply_zerolen
+
+usb0_request_clear_feature_out_interface:
+	branch usb0_force_stall
+
+usb0_request_clear_feature_out_endpoint:
+	fetch 1,mem_usb_setup_bValue
+	bne ENDPOINT_HALT,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	beq IN_EP1,usb0_force_stall_ep1_in_off
+	beq IN_EP2,usb0_force_stall_ep2_in_off
+	beq IN_EP3,usb0_force_stall_ep3_in_off
+	and_into 0x7f,pdata
+	beq 0x00,usb0_force_stall_ep0_in_off
+	branch usb0_force_stall
+
+usb0_force_stall_ep0_in_off:
+	jam 0,mem_usb_ep0_stall_status
+	branch usb0_reply_zerolen
+usb0_force_stall_ep1_in_off:
+	jam 0,mem_usb_ep1_stall_status
+usb0_force_stall_ep1_in_off_reply:	
+	jam 1,mem_usb_clear_halt
+	branch usb0_reply_zerolen
+usb0_force_stall_ep2_in_off:
+	jam 0,mem_usb_ep2_stall_status
+	branch usb0_force_stall_ep1_in_off_reply
+usb0_force_stall_ep3_in_off:
+	jam 0,mem_usb_ep3_stall_status
+	branch usb0_force_stall_ep1_in_off_reply
+
+
+usb0_request_set_feature:
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bmRequestType
+	beq OUT_DEVICE,usb0_request_set_feature_out_device
+	beq OUT_INTERFACE,usb0_request_set_feature_out_interface
+	beq OUT_ENDPOINT,usb0_request_set_feature_out_endpoint
+	branch usb0_force_stall
+
+usb0_request_set_feature_out_device:
+	fetch 1,mem_usb_setup_bValue
+	bne DEVICE_REMOTE_WAKEUP,usb0_force_stall
+	hfetch 1,core_usb_config
+	set1 7,pdata
+	hstore 1,core_usb_config
+	jam 1,mem_usb_remote_wakeup
+	jam USB_SLEEP,mem_usb_state
+	jam 0,mem_usb_tx_win_enable
+	call usb0_reply_zerolen
+usb_wakeup_timer_reinit:
+	call timer_reinit
+	setarg TIMER_WAKEUP_DELAY
+	arg TIMER_WAKEUP,queue
+	branch timer_init
+	
+usb0_request_set_feature_out_interface:
+	branch usb0_force_stall
+
+usb0_request_set_feature_out_endpoint:
+	fetch 1,mem_usb_setup_bValue
+	bne ENDPOINT_HALT,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	beq IN_EP1,usb0_force_stall_ep1_in_on
+	beq IN_EP2,usb0_force_stall_ep2_in_on
+	beq IN_EP3,usb0_force_stall_ep3_in_on
+	and_into 0x7f,pdata
+	beq 0x00,usb0_force_stall_ep0_in_on
+	branch usb0_force_stall
+
+usb0_force_stall_ep0_in_on:
+	jam 1,mem_usb_ep0_stall_status
+	branch usb0_reply_zerolen
+usb0_force_stall_ep1_in_on:
+	jam 1,mem_usb_ep1_stall_status
+	branch usb0_reply_zerolen
+usb0_force_stall_ep2_in_on:
+	jam 1,mem_usb_ep2_stall_status
+	branch usb0_reply_zerolen
+usb0_force_stall_ep3_in_on:
+	jam 1,mem_usb_ep3_stall_status
+	branch usb0_reply_zerolen
+
+
+usb0_request_set_address:
+	fetch 1,mem_usb_setup_bmRequestType
+	bne OUT_DEVICE,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	and_into 0x80,pdata
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb_usb0_state_set_dev_addr
+usb_usb0_state_set_dev_default:	
+	jam DEV_DEFAULT,mem_usb0_state
+usb0_request_set_wait_address:
+	fetch 1,mem_usb_setup_bValue
+	hstore 1,core_usb_addr
+	call usb0_reply_zerolen
+	jam 1,mem_usb_set_high_addr_flag
+	rtn
+usb_usb0_state_set_dev_addr:
+	jam DEV_ADDRESS,mem_usb0_state
+	branch usb0_request_set_wait_address
+
+
+usb0_request_set_configuration:
+	fetch 1,mem_usb0_state
+	beq DEV_DEFAULT,usb0_force_stall
+	fetch 1,mem_usb_setup_bmRequestType
+	bne OUT_DEVICE,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue+1
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	sub pdata,USB_MAX_NUM_CFG,null
+	nbranch usb0_force_stall,positive
+	fetch 1,mem_usb0_state
+	beq DEV_ADDRESS,usb0_request_set_cfg_addr_state
+	beq DEV_CONFIGURED,usb0_request_set_cfg_cfg_state
+	branch usb0_force_stall
+ // This software only supports config = 0,1
+usb0_request_set_cfg_addr_state:
+usb0_request_set_cfg_cfg_state:
+	fetch 1,mem_usb_setup_bValue	//1:Configured state   0:Address state
+	beq 0,usb0_request_set_cfg_stay_addr_state
+	jam DEV_CONFIGURED,mem_usb0_state
+	branch usb0_reply_zerolen
+usb0_request_set_cfg_stay_addr_state:
+	jam DEV_ADDRESS,mem_usb0_state
+	branch usb0_reply_zerolen
+
+
+usb0_request_set_interface:
+	fetch 1,mem_usb0_state
+	bne DEV_CONFIGURED,usb0_force_stall		
+	fetch 1,mem_usb_setup_bmRequestType
+	bne OUT_INTERFACE,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValueH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bLengthH
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_wIndex+1
+	bne 0,usb0_force_stall
+	branch usb0_reply_zerolen
+
+
+usb_set_idle:
+	jam 1,mem_usb_idle_flag
+	fetch 1,mem_usb_setup_bValueH
+	store 1,mem_usb_idle_rate
+	fetch 1,mem_usb_setup_wIndex
+	sub pdata,1,null
+	call usb_clear_remote_wakeup_set0,zero
+	fetch 1,mem_usb_state
+	bne USB_RESUME,usb0_reply_zerolen
+	jam USB_CONNECTED,mem_usb_state
+	call usb0_reply_zerolen
+	nop 30000
+	nop 30000
+	rtn
+usb_clear_remote_wakeup_set0:
+	jam 1,mem_usb_device_enumeration_endflag
+	jam 0,mem_usb_clear_remote_wakeup
+	jam USB_RESUME,mem_usb_state
+	rtn
+
+
+usb_set_report:
+	jam 1,mem_usb0_get_set_report
+	call usb_set_report_resume_judge
+	fetch 2,mem_usb_setup_bValue
+	store 2,mem_usb_setup_bValue_temp
+	fetch 1,mem_usb_setup_bLength	//max 0x40
+	iforce loopcnt
+	arg mem_usb0_setup,contr
+	arg mem_usb0_set_report_data,contw
+	call memcpy
+	branch usb0_reply_zerolen
+	
+usb_set_report_resume_judge:
+	fetch 2,mem_usb_setup_bValue
+	arg PC_SET_REPORT_bValue,temp
+	isub temp,null
+	nrtn zero
+	fetch 2,mem_usb_setup_wIndex
+	arg PC_SET_REPORT_wIndex,temp
+	isub temp,null
+	nrtn zero
+	fetch 2,mem_usb_setup_bLength
+	arg PC_SET_REPORT_bLength,temp
+	isub temp,null
+	nrtn zero
+	jam 1,mem_usb_tx_win_enable
+	rtn
+
+
+usb_set_protocol_req:
+	fetch 1,mem_usb_setup_bLength
+	bne 0,usb0_force_stall
+	fetch 1,mem_usb_setup_bValue
+	beq BOOT_PROTOCOL,usb_set_boot_protocol
+	beq REPORT_PROTOCOL,usb_set_report_protocol
+	branch usb0_force_stall
+usb_set_boot_protocol:
+	jam 0,mem_usb_set_protocol_status
+	jam 1,mem_usb_set_protocol_value
+	branch usb0_reply_zerolen
+usb_set_report_protocol:
+	jam 1,mem_usb_tx_mac_enable
+	jam 1,mem_usb_set_protocol_status
+	jam 0,mem_usb_set_protocol_value
+	branch usb0_reply_zerolen
+
+
+usb0_respond_length:
+	ifetch 1,rega
+	iforce regb
+	increase 1,rega
+//rega=*buff,reb=size	
+usb0_respond:
+	bpatch patch1f_2,mem_patch1f
+	bmark0 mark_isstr,usb0_respond0
+	add regb,1,pdata
+	lshift pdata,pdata
+	hstore 1,core_usb_dfifo0 
+	jam 3,core_usb_dfifo0
+	fetch 1,mem_usb_setup_bLength
+	increase -2,pdata
+	rshift pdata,pdata
+	store 1,mem_usb_setup_bLength
+	beq 0,usb_no_respond_data
+usb0_respond0:
+	fetch 2,mem_usb_setup_bLength
+	isub regb,null
+	branch usb0_respond1,positive
+	copy pdata,regb	
+usb0_respond1:
+	deposit rega
+	store 2,mem_bufptr
+	deposit regb
+	store 1,mem_remain
+	branch usb0_tx
+
+usb_no_respond_data:
+	arg 0,queue
+	branch usb_trig
+
+//mem_bufptr=*buff,mem_remain=size,loopcnt=i,rega=len
+usb0_tx:
+	bpatch patch1f_3,mem_patch1f
+	fetch 1,mem_remain
+	rtn blank
+	copy pdata,loopcnt
+	sub pdata,EP0_PACKET_SIZE,null
+	branch usb0_tx_info,positive
+	arg EP0_PACKET_SIZE,loopcnt	
+usb0_tx_info:
+	fetch 1,mem_remain
+	isub loopcnt,pdata
+	store 1,mem_remain//mem_remain -= len
+	fetch 2,mem_bufptr
+	copy pdata,contr	
+usb0_tx0:
+	ifetch 1,contr
+	hstore 1,core_usb_dfifo0
+	bmark0 mark_isstr,usb0_tx1
+	jam 0,core_usb_dfifo0
+usb0_tx1:
+	loop usb0_tx0
+	copy contr,pdata
+	store 2,mem_bufptr//mem_bufptr += len
+	arg 0,queue
+	call usb_trig
+	fetch 1,mem_remain
+	nrtn blank
+	fetch 1,mem_usb_state
+	rtnne USB_GOT_REPORT_REQ
+	jam USB_CONNECTED,mem_usb_state
+	rtn
+
+
+usb_tx_ep1:
+	arg core_usb_dfifo1,rega
+	arg 1,queue
+usb_tx_loop:
+	ifetch 1,contr
+	istore 1,rega
+	loop usb_tx_loop
+usb_trig:
+	setarg 0
+	qset1 pdata
+	hstore 1,core_usb_trig
+	fetcht 1,mem_usb_tx_wait
+	ior temp,pdata
+	store 1,mem_usb_tx_wait
+	rtn
+
+usb_tx_ep2:
+	arg 2,queue
+	arg core_usb_dfifo2,rega
+	branch usb_tx_loop
+
+usb_tx:
+	bpatch patch1f_4,mem_patch1f
+	fetch 1,mem_usb_tx_enable
+	rtn blank
+	fetch 1,mem_usb_tx_wait
+	nbranch usb_inwake_state_tx_dispose,blank
+	fetch 1,mem_usb_device_enumeration_endflag
+	branch usb_tx_fifo_release,blank
+	fetch 1,mem_usb_state
+	beq USB_SLEEP,usb_windows_wakeup
+	bne USB_CONNECTED,usb_tx_fifo_release
+	fetch 1,mem_usb_clear_remote_wakeup
+	nbranch usb_tx_fifo_release,blank
+	call usb_tx_data_ep1
+	branch usb_tx_data_ep2
+
+usb_tx_data_ep1:
+	fetch 1,mem_usb_tx_enable
+	rtnbit0 1
+	fetch 1,mem_usb_tx_wait
+	rtnbit1 1
+	fetch 1,mem_usb_tx_enable
+	set0 1,pdata
+	store 1,mem_usb_tx_enable
+	fetch 1,mem_usb_ep1_data
+	rtn blank
+	beq USB_EP1_KB,usb_tx_kb_normal_data
+	branch assert
+
+usb_tx_data_ep2:
+	fetch 1,mem_usb_tx_enable
+	rtnbit0 2
+	fetch 1,mem_usb_tx_wait
+	rtnbit1 2
+	fetch 1,mem_usb_tx_enable
+	set0 2,pdata
+	store 1,mem_usb_tx_enable
+	fetch 1,mem_usb_ep2_data
+	rtn blank
+	beq USB_EP2_MS,usb_tx_ms_data
+	beq USB_EP2_MULTIKEY,usb_tx_kb_multikey_data
+	branch assert
+
+usb_tx_fifo_release:
+	//clear mem_usb_mouse_data/mem_usb_kb_data/mem_usb_kb_multikey
+	arg mem_usb_mouse_data,contw
+	arg 6,loopcnt
+	branch memset0
+	
+usb_tx_ms_data:
+	fetch 1,mem_usb_idle_flag
+	fetcht 1,mem_usb_get_protocol_flag
+	iand temp,pdata
+	branch usb_tx_ms_data_normal_mode,blank
+	fetcht 1,mem_usb_set_protocol_status
+	iadd temp,pdata
+	beq MAC_BOOT_MODE,usb_tx_ms_data_mac_boot_mode
+	branch usb_tx_ms_data_normal_mode
+
+usb_tx_ms_data_mac_boot_mode:
+	jam 0,mem_usb_ep2_data
+usb_tx_ms_data_mac_boot_regroup:
+	fetch 1,mem_usb_mouse_data+1	//key
+	beq R_KEY,usb_tx_mac_boot_ms_regroup_r_or_lrkey
+	beq LR_KEY,usb_tx_mac_boot_ms_regroup_r_or_lrkey
+	fetch 1,mem_usb_mouse_data+1	//key
+	store 1,mem_usb_mouse_data
+	fetch 1,mem_usb_mouse_data+2	//x low
+	istore 1,contw
+	fetch 1,mem_usb_mouse_data+4	//y low
+	istore 1,contw
+	fetch 1,mem_usb_mouse_data+6	//wheel
+	istore 1,contw
+	arg 4,loopcnt
+	arg mem_usb_mouse_data,contr
+	branch usb_tx_ep2
+	
+usb_tx_ms_data_normal_mode:
+	jam 0,mem_usb_ep2_data
+usb_tx_mac_boot_ms_regroup_r_or_lrkey:	
+	arg 8,loopcnt		
+	arg mem_usb_mouse_data,contr
+	branch usb_tx_ep2
+
+usb_tx_kb_multikey_data:
+	jam 0,mem_usb_ep2_data
+	arg 3,loopcnt
+	arg mem_usb_kb_multikey,contr
+	branch usb_tx_ep2
+
+usb_tx_kb_normal_data:
+	jam 0,mem_usb_ep1_data
+	arg 8,loopcnt
+	arg mem_usb_kb_data,contr
+	branch usb_tx_ep1
+
+usb_inwake_state_tx_dispose:
+	fetch 1,mem_usb_state
+	beq USB_SLEEP,usb_clear_tx_wait
+	beq USB_CONNECTED, usb_mac_wakeup_trig
+	rtn
+usb_clear_tx_wait:
+	jam 0,mem_usb_tx_wait
+	rtn	
+usb_mac_wakeup_trig:
+	hfetch 1,core_usb_config
+	set1 7,pdata
+	hstore 1,core_usb_config
+	jam 1,mem_usb_mac_wakeup_trig
+	rtn
+
+usb_mac_wakeup_judge:
+	fetch 1,mem_usb_state
+	rtneq USB_SLEEP
+	beq USB_CONNECTED,usb_mac_wakeup
+	rtn
+usb_mac_wakeup:
+	fetch 1,mem_usb_mac_wakeup_trig
+	rtn blank
+	jam 1,mem_usb_wakestate_onetime_flag
+	branch usb_wakeup
+
+usb_windows_wakeup:
+	arg TIMER_WAKEUP,queue
+	call timer_check
+	nrtn blank
+usb_wakeup:
+	hfetch 1,core_usb_config
+	rtnbit0 7	//endpoint wakeup enable
+	jam 0xfc,core_usb_config
+	nop 30000
+	jam 0x3c,core_usb_config
+	rtn
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/bt.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/bt.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/bt.prog	(working copy)
@@ -0,0 +1,4176 @@
+define REVD
+//define FPGA
+define ROMCODE
+define PATCH
+define ADC
+//define RAM_VERSION
+//define CLK24M
+//define DEBUG_MALLOC
+//define DEBUG_H4LOG_ENABLE
+//define DEBUG_LIGHT_STATE
+//define E2_LOG
+//define LMP_DBG
+//define ACL_DEBUG
+//define DCDC
+define NVRAM
+define RELEASE
+define SECURE_CONNECTION
+define DEBUG_RF_INIT
+//define SPI_SIMULATE
+//define ROM_RESPIN_OPTIONAL
+
+define SIMPLE_PAIRING
+define COMPILE_RFCOMM
+define COMPILE_SHUTTER
+define COMPILE_AntiLost
+//define COMPILE_IR
+define COMPILE_KEYBOARD
+define COMPILE_MOUSE
+define COMPILE_MODULE
+//define COMPILE_AT
+//define COMPILE_PRCP
+//define COMPILE_USB
+//define COMPILE_DONGLE
+define COMPILE_LE
+define COMPILE_24G
+define COMPILE_CAR
+define COMPILE_REMOTE_CAR
+
+
+INCLUDE "bt_format"
+
+org 0x0000		// start from patch ram address start
+ifdef SIM
+include sim.prog
+else
+include patch.prog
+endif
+
+/******************************************/
+/***********   ROM Start   ***************/
+/******************************************/
+
+org 0x2000		// start from rom address start
+start:
+	call lpmstate
+
+soft_reset:
+	bpatch patch00_0,mem_patch00
+	clear_stack
+	call spi_ncs_gpio_init  // 0xff disable spi ncs gpio init
+	call initialize_radio
+	call iicd_init_12m
+	call init_param
+	call l2cap_init
+	bpatch patch00_1,mem_patch00
+	call rfcomm_init
+	call init_lmp
+	call ui_init
+	call app_init
+	ncall load_chip_option,wake
+	bpatch patch00_2,mem_patch00
+	call app_lpm_init,wake
+ifdef SIMPLE_PAIRING
+	call publickey_init
+else
+	call ssp_disable
+ifdef SECURE_CONNECTION
+	call publickey_init
+
+endif
+endif
+soft_reset_2:
+	call lpm_recover_clk,wake
+main_loop:	
+	bpatch patch00_3,mem_patch00
+ifdef SIMPLE_PAIRING
+	call sp_calc_sequence
+endif
+ifdef SECURE_CONNECTION
+	call sp_calc_sequence_256
+endif
+ifdef SIMPLE_PAIRING
+ifdef SECURE_CONNECTION
+	call sp_calc_sequence_256_check
+endif
+endif
+	call le_dispatch
+	bpatch patch00_4,mem_patch00
+	call idle_dispatch
+	call app_process_idle
+	call inquiry_dispatch
+	call inquiry_scan_dispatch
+	call page_scan_dispatch
+	call connection_dispatch
+	call lpm_dispatch
+	call g24_dispatch
+	branch main_loop
+
+connection_dispatch:
+	call connection_incontext
+	rtnmark0 mark_context
+	set0 mark_context,mark
+	call context_save
+	branch le_disable
+	
+connection_incontext:
+	bpatch patch00_5,mem_patch00
+	call context_search_insniff
+	nbranch connection_nosniff,zero
+	call context_load
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	bbit1 mode_le,le_conn_dispatch
+	bbit1 mode_master, master_dispatch
+	branch slave_dispatch
+connection_nosniff:
+	call context_get_next
+	copy loopcnt,null
+	rtn zero
+	call context_load
+	fetch 1,mem_state
+	bbit1 state_inpage,master_page
+	fetch 1,mem_mode
+	bbit1 mode_master, master_dispatch
+	branch slave_dispatch
+
+
+
+/**************************************/
+/**************idle dispatch*********/
+/**************************************/
+	
+idle_dispatch:
+	fetch 1,mem_hci_cmd
+	rtn blank
+	beq hci_cmd_inquiry,idle_inquiry
+	beq hci_cmd_inquiry_cancel,idle_inquiry_cancel
+	beq hci_cmd_remote_name_req,idle_remote_name_req
+	beq hci_cmd_create_conn,idle_create_conn
+	beq hci_cmd_le_create_conn,idle_le_create_conn
+	call context_search_conn_handle
+	rtn zero
+	call context_search_plap
+	rtn zero
+idle_exit:
+	jam 0,mem_hci_cmd
+	rtn
+
+idle_le_create_conn:
+	jam hci_cmd_le_create_conn,mem_cmd_le_create_conn
+	jam 0,mem_hci_cmd
+	rtn
+	
+idle_inquiry:
+	set1 mark_inquiry_on,mark
+	set0 mark_inquiry_trainb,mark
+	jam param_ninquiry,mem_ninqy_index
+	jam 31,mem_nfreq_index_inq
+	branch idle_exit
+
+idle_inquiry_cancel:
+	set0 mark_inquiry_on,mark
+	force 0,stop_watch
+	branch idle_exit
+
+idle_remote_name_req:
+	call context_search_plap
+	rtn zero
+	force LMP_NAME_REQ,temp
+	jam 5,mem_nameres_cnt
+	branch idle_start_page
+
+idle_create_conn:
+	bpatch patch00_6,mem_patch00
+idle_create_conn_device:
+	fetch 6,mem_hci_plap
+	branch idle_exit,blank
+	jam RECONNECT_HID,memui_reconnect_mode
+	//jam HS_INIT_CALL,mem_hs_mode //init as master
+	jam CONN_SM_WAIT_FEATURES_RES,mem_conn_sm
+	branch idle_create_conn_cont
+	
+idle_create_conn_cont:
+	force LMP_VERSION_REQ,temp
+idle_start_page:
+	bpatch patch00_7,mem_patch00
+	fetch 1,mem_page_mode
+	branch idle_page_mode_r0,blank
+	lshift3 pdata,pdata
+	lshift4 pdata,pdata
+	increase -1,pdata
+idle_page_mode_r0:
+	store 1,mem_npage
+	store 1,mem_npage_index
+	jam 31,mem_nfreq_index_page
+	set0 mark_page_trainb,mark
+	call context_new
+	nbranch idle_page_fail,zero
+	call get_free_amaddr
+	store 1,mem_amaddr
+	storet 1,mem_lmo_opcode2
+	fetch 6,mem_hci_plap
+	store 6,mem_plap
+	bpatch patch01_0,mem_patch01
+	call timer_reinit
+	force 0,pdata
+	compare LMP_NAME_REQ,temp,0xff
+	nsetflag true,state_init_seq,pdata
+	set1 state_inpage,pdata
+	store 1,mem_state
+	jam BT_EVT_RECONN_STARTED,mem_fifo_temp
+	call ui_ipc_send_event
+	force 0,pdata
+	setflag true,smap_name_req,pdata
+	store 1,mem_state_map
+	setarg 0
+	set1 mode_master,pdata
+	store 1,mem_mode
+	enable master
+	call context_save
+	disable master
+	force page_length_timer,queue
+	fetch 2,mem_page_to
+	call timer_init
+	branch idle_exit
+idle_page_fail:
+	bpatch patch01_1,mem_patch01
+	fetch 6,mem_hci_plap
+	store 6,mem_plap
+	compare LMP_NAME_REQ,temp,0xff
+	branch idle_name_fail,true
+	branch idle_exit
+idle_name_fail:
+	arg mem_tmp_buffer,contw
+	arg 8,loopcnt
+	call memset0
+	jam BT_EVT_RECONN_FAILED,mem_fifo_temp
+	call ui_ipc_send_event
+	branch idle_exit
+	
+
+/******************************************/
+/**************  Inquiry  *****************/
+/******************************************/
+
+inquiry_dispatch:
+	rtnmark0 mark_inquiry_on
+	force inquiry_length_timer,queue
+	call timer_check
+	nsetflag blank,mark_inquiry_on,mark
+	nbranch inquiry_start,blank
+	rtn
+	
+
+
+inquiry_start:
+	bpatch patch01_2,mem_patch01
+	fetcht 2,mem_inq_window
+	force 4,queue
+	call sniff_check_window
+	rtn user
+	call afh_clear
+	force 0,freq_mode
+inquiry_restart:
+	rtn timeout
+	set0 mark_fhs_already_good,mark
+	set0 mark_fhs_eir,mark
+inquiry_rx_restart:
+	add clkn_bt,1,bt_clk
+	isolate1 mark_inquiry_trainb,mark
+	setflag true,2,freq_mode
+	compare 0x00,bt_clk,0x02      /* see if this is even slot */
+	nbranch inquiry_receive,true
+
+inquiry_transmit:
+	bpatch patch01_3,mem_patch01
+	fetch 1,mem_inquiry_transmit
+	increase 1,pdata
+	store 1,mem_inquiry_transmit
+	call fetch_giac
+	call tx_radio_freq
+	call fetch_diac
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_native
+	call send_access_word
+	call end_of_packet
+	call inquiry_check_train
+	branch inquiry_restart
+
+inquiry_check_train:
+	bpatch patch01_4,mem_patch01
+	fetch 1,mem_nfreq_index_inq
+	increase -1,pdata
+	store 1,mem_nfreq_index_inq
+	rtn positive  /* if it's time to incremnt N */
+	jam 31,mem_nfreq_index_inq
+	fetch 1,mem_ninqy_index
+	increase -1,pdata
+	store 1,mem_ninqy_index
+	rtn positive      /* if it's time to change train */
+	setflip mark_inquiry_trainb,mark
+	jam param_ninquiry,mem_ninqy_index
+	rtn
+
+inquiry_receive:
+	bpatch patch01_5,mem_patch01
+	call fetch_giac
+	call rx_radio_freq
+	call fetch_diac
+	call start_rx_native
+	call start_receiver	/* get ready for that id packet */
+	call wait_access_clkn_rt
+	branch inquiry_sync,sync   /* try look for id packet again if not found */
+	call inquiry_check_train
+	branch inquiry_rx_restart
+inquiry_sync:
+	bpatch patch01_6,mem_patch01
+	call save_rssi
+	call scan_mode_whiten
+	call receive_packet_whitened
+	set0 mark_rxbuf_inuse,mark
+	rtnmark0 mark_fhs_already_good
+inquiry_receive_rtn:
+	bpatch patch01_7,mem_patch01
+inquiry_receive_eir_rtn:
+	fetch 1,mem_inquiry_rcv
+	increase 1,pdata
+	store 1,mem_inquiry_rcv
+	rtn
+		
+/******************************************/
+/**************  Master Dispatch  *************/
+/******************************************/
+
+
+
+master_page:
+	bpatch patch02_0,mem_patch02
+	enable master
+	enable clknt
+	fetch 2,mem_page_interval
+	branch master_page_no_interval,blank
+	force page_interval_timer,queue
+	call timer_check               
+	nrtn blank
+master_page_no_interval:
+	bpatch patch02_1,mem_patch02
+	fetcht 2,mem_page_window
+	force 40,queue
+	call sniff_check_window
+	branch page_exit,user
+	force page_length_timer,queue
+	call timer_check
+	nbranch page_start,blank
+	fetch 1,mem_state_map
+	bbit1 smap_name_req,master_npage_timeout
+	branch master_page_timeout
+master_npage_timeout:
+	arg mem_tmp_buffer,contw
+	arg 8,loopcnt
+	call memset0
+master_page_timeout:
+	bpatch patch02_2,mem_patch02
+	jam 0,mem_state
+	call init_lmp_work
+	jam 0,memui_reconnect_mode
+	jam BT_EVT_RECONN_PAGE_TIMEOUT,mem_fifo_temp
+	call ui_ipc_send_event	
+	branch page_exit
+
+page_start:
+	bpatch patch02_3,mem_patch02
+	force 0,timeup
+	until clkn_rt,meet
+	fetch 1,mem_page_clk
+	increase -1,pdata
+	ixor clkn_bt,pdata
+	compare 0,pdata,3
+	nbranch page_start,true
+	deposit am_addr
+	store 1,mem_fhs_am_addr
+	force 0,N_tx_slot
+	force 0,freq_mode
+
+page_restart:
+	bpatch patch02_4,mem_patch02
+	branch page_exit,timeout
+	call fetch_page_bt_adr
+	arg param_rf_setup, timeup
+	until clkn_rt,meet         /* wait for the start_receiver time against native real clk  */
+page_rx_restart:
+	bpatch patch02_5,mem_patch02
+	fetch 4,mem_page_clk    /* deposit clk_estimate */
+	iforce bt_clk
+	increase 1,pdata
+	store 4,mem_page_clk
+	isolate1 mark_page_trainb,mark
+	setflag true,2,freq_mode
+	compare 0x00,bt_clk,0x02      /* see if this is even slot */
+	nbranch page_receive,true
+	fetch 1, mem_page_transmit
+	increase 1,pdata
+	store 1, mem_page_transmit
+	call tx_radio_freq
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_native
+	call send_access_word
+	call end_of_packet
+	call page_check_train
+	branch page_restart	
+page_exit:
+	bpatch patch02_6,mem_patch02
+	disable master
+	fetch 2,mem_page_interval      
+	rtn blank
+	force page_interval_timer,queue
+	branch timer_init              
+
+page_check_train:
+	bpatch patch02_7,mem_patch02
+	fetch 1,mem_nfreq_index_page
+	increase -1,pdata
+	store 1,mem_nfreq_index_page
+	rtn positive
+	jam 31,mem_nfreq_index_page
+	fetch 1,mem_npage_index
+	increase -1,pdata                 /* increment N */
+	store 1,mem_npage_index
+	rtn positive      			/* if it's time to change train */
+	setflip mark_page_trainb,mark             /* change train */
+	fetch 1,mem_npage
+	store 1,mem_npage_index
+	rtn
+	
+page_receive:
+	bpatch patch03_0,mem_patch03
+	call rx_radio_freq
+	call start_rx_native
+	call start_receiver	/* get ready for that id packet */
+	call wait_access_clkn_rt	/* try id look for id packet again */
+	branch page_sync,sync         /* restart if didn't receive anything */
+	call page_check_train
+	branch page_rx_restart
+page_sync:
+	call end_of_packet
+	fetch 1, mem_page_rcv
+	increase 1,pdata
+	store 1, mem_page_rcv
+	force 0,stop_watch
+	fetch 4,mem_page_clk
+page_send_fhs:
+	bpatch patch03_1,mem_patch03
+	call rf_setup_time_master_slot
+	call fetch_page_bt_adr
+	increase 1,N_tx_slot
+page_send_fhs_continue:
+	and_into 0x1fd,bt_clk
+	and_into 0x1fc,freq_mode               /* master response = x00, even_train settin must remain the same */
+	call tx_radio_freq
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_native
+	call send_access_word
+	deposit clkn_bt
+	store 4,mem_clkn_bt
+	force 0,am_addr
+	force type_fhs,type
+	call scan_mode_whiten
+	call transmit_packet_whitened
+page_wait_fhs_reply:
+	bpatch patch03_2,mem_patch03
+	call rf_setup_time_slave_slot
+	or_into 0x02,bt_clk
+	and_into 0x1fc,freq_mode               /* master response sequence = x00, even train setting must be preserved */
+	call rx_radio_freq
+	call start_rx_native
+	call start_receiver	/* get ready for that id packet */
+	call wait_access_clkn_rt	/* look for that reply */
+	call end_of_packet,sync              /* id reply is enough */
+	branch page_wait_fhs_reply_ok,sync           /* no reply then send fhs again */
+	fetch 1,mem_fhs_wait_counter
+	branch page_restart,blank
+	increase -1,pdata
+	store 1,mem_fhs_wait_counter
+	branch page_send_fhs
+	
+page_wait_fhs_reply_ok:
+	bpatch patch03_3,mem_patch03
+	fetch 1, mem_page_rcv_fhs
+	increase 1,pdata
+	store 1, mem_page_rcv_fhs
+	call prepare_newconn
+master_newconn_loop:
+	call master_newconn_once
+	branch newconn_poll_responded,sync
+	call new_conn_timeout
+	nbranch master_newconn_loop,blank
+	branch page_restart
+
+newconn_poll_responded:
+	bpatch patch03_4,mem_patch03
+	fetch 1,mem_state
+	set0 state_inpage,pdata
+	store 1,mem_state
+	call newconn_init
+	disable master
+	rtn
+	
+
+master_dispatch:
+	bpatch patch03_5,mem_patch03
+	enable master
+	enable clknt
+	call role_switch_master
+	rtn user
+	call check_bt_disabled
+	call rf_setup_time_master_slot
+	add clkn_bt,1,bt_clk
+	call fetch_self_bt_adr
+	force 0x03,freq_mode
+	call scheduler_tx_l2cap_pkt
+	call prepare_tx
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_native
+	call send_access_word
+	call transmit_packet
+master_loop:
+	bpatch patch03_6,mem_patch03
+	call parse_lmp
+	call master_conn_recv_packet
+	nbranch master_notmatch,match
+	call supervision_flush
+	call parse_l2cap
+	fetch 1,mem_master_rcvcnt
+	increase 1,pdata
+	store 1,mem_master_rcvcnt
+master_notmatch:
+	bpatch patch03_7,mem_patch03
+	call scheduler_process
+	call check_master_disconnect
+	nrtn master					/* disconnected */
+	call check_attempt
+	nbranch master_attempt,blank
+master_exit:
+	disable master
+	rtn
+
+master_attempt:
+	call prepare_tx
+	call master_conn_send_packet
+	branch master_loop
+
+
+check_master_disconnect:
+	branch check_master_match,match
+	call supervision_update
+	branch master_disconnect,positive
+check_master_match:
+	call check_disconnect_timeout
+	nbranch master_disconnect,user
+	fetch 1,mem_state_map
+	rtnbit0 smap_name_req
+	rtnbit1 smap_name_res
+	fetch 1,mem_op
+	rtnbit1 op_disconn
+	call conn_timer_expired
+	nrtn blank
+	fetch 1,mem_nameres_cnt
+	increase -1,pdata
+	store 1,mem_nameres_cnt
+	nrtn blank
+	branch lmp_disconnect
+
+master_disconnect:
+	bpatch patch04_0,mem_patch04
+	call quit_connection
+	disable master
+	fetch 1,mem_state_map
+	bbit1 smap_name_req,master_name_disconnect
+	rtn
+	
+master_name_disconnect:
+	fetch 1,mem_state_map
+	rtnbit1 smap_name_res
+master_name_error:
+	arg mem_tmp_buffer,contw
+	arg 8,loopcnt
+	branch memset0
+	
+check_disconnect_timeout:
+	bpatch patch04_1,mem_patch04
+	enable user
+	fetch 1,mem_op
+	rtnbit0 op_disconn
+	call conn_timer_expired
+	nrtn blank
+	branch disable_user
+
+conn_timer_expired:
+	fetch 1,mem_conn_timer
+	increase -1,pdata
+	store 1,mem_conn_timer
+	rtn
+
+linkkey_ready:
+	bpatch patch04_2,mem_patch04
+	fetch 1,mem_state
+	bbit1 state_linkkey,linkkey_set
+	fetch 1,mem_pairing_auth
+	branch linkkey_set,blank
+	jam DEFALT_PAIRING_AUTH,mem_pairing_auth
+	jam BT_EVT_LINKKEY_GENERATE,mem_fifo_temp
+	call ui_ipc_send_event
+	branch linkkey_set
+linkkey_set:
+	bpatch patch04_3,mem_patch04
+	call context_traverse_linkkey
+	fetch 1,mem_state
+	set1 state_linkkey,pdata
+	store 1,mem_state
+	jam 1,mem_link_key_exists
+	fetch 1,mem_conn_sm
+	bne CONN_SM_PAIRING,linkkey_set_continue
+linkkey_set_continue:
+	rtn
+
+generate_linkkey_continue:
+	jam PAIRING_AUTH,mem_pairing_auth
+clear_linkstate:
+	fetch 1,mem_state
+	set0 state_linkkey,pdata
+	store 1,mem_state
+	rtn
+	
+
+	/* rtn user if switch */
+role_switch_check:
+	bpatch patch04_4,mem_patch04
+	disable user
+	fetch 2,mem_tsniff
+	arg 0xffff,temp
+	isub temp,null
+	nrtn zero
+	fetch 4,mem_sniff_anchor
+	branch role_switch_clkn,clknt
+	isub clke_bt,pdata
+	branch role_switch_clke
+role_switch_clkn:
+	isub clkn_bt,pdata
+role_switch_clke:
+	sub pdata,4,null
+	nrtn positive
+	force 0,pdata
+	store 2,mem_tsniff
+	branch enable_user
+
+
+	/* pdata: switch instant, set tsniff=0 for special sniff */	
+role_switch_prepare:
+	copy pdata,temp
+	bpatch patch04_5,mem_patch04
+	storet 4,mem_sniff_anchor
+role_switch_prepare0:
+	jam SWITCH_FLAG_ACCEPT,mem_switch_flag
+	setarg 0xffff
+	store 2,mem_tsniff
+	jam 1,mem_sniff_attempt
+	rtn
+
+
+role_switch_master:
+	bpatch patch04_6,mem_patch04
+	call role_switch_check
+	nrtn user
+	disable user
+	jam param_newconnto,mem_newconnto_counter
+	set0 mark_fhs_already_good,mark
+roles_waitfhs_loop:
+	call rf_setup_time_master_slot
+	call master_recv_packet
+	bmark1 mark_fhs_already_good,roles_replyto_fhs
+	call new_conn_timeout
+	nbranch roles_waitfhs_loop,blank
+role_switch_fail_master:
+	bpatch patch04_7,mem_patch04
+	disable user
+	deposit clkn_bt
+	store 4,mem_next_btclk
+	enable clknt
+	enable master
+	jam BT_EVT_SWITCH_FAIL_MASTER,mem_fifo_temp
+	branch ui_ipc_send_event
+	
+roles_replyto_fhs:
+	bpatch patch05_0,mem_patch05
+	call rf_setup_time_slave_slot
+	arg type_id,type
+	call master_send_packet
+	disable clknt
+	disable master
+	call apply_switch_clke
+	call prepare_newconn
+roles_newconns_loop:
+	bpatch patch05_1,mem_patch05
+	call slave_newconn_once
+	branch roles_newconns_responded,match
+	call new_conn_timeout
+	nbranch roles_newconns_loop,blank
+	branch role_switch_fail_master
+roles_newconns_responded:
+	fetch 1,mem_mode
+	set0 mode_master,pdata
+	store 1,mem_mode
+	call supervision_flush
+	call calc_clke_offset
+	enable user
+	jam BT_EVT_SWITCH_SUCCESS_MASTER,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+
+
+context_load:
+	bpatch patch05_2,mem_patch05
+	set1 mark_context,mark
+	deposit rega
+	store 2,mem_context_ptr
+	force context_size,loopcnt
+	arg mem_le_state,contw
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	copy rega,contr
+	bbit1 mode_le,memcpy
+	arg mem_state,contw
+	call memcpy
+	disable attempt
+	fetch 1,mem_amaddr
+	iforce am_addr
+	jam 1,mem_current_sniff_attempt
+	branch context_load_master,master
+	jam 1,mem_current_sniff_attempt
+context_load_master:
+	fetch 1,mem_state
+	rtnbit0 state_insniff
+	fetch 1,mem_sniff_attempt
+	store 1,mem_current_sniff_attempt
+	fetch 1,mem_sniff_timeout
+	store 1,mem_current_sniff_timeout
+	rtn
+	
+context_save:
+	bpatch patch05_3,mem_patch05
+	fetch 2,mem_context_ptr
+	iforce contw
+	force context_size,loopcnt
+	arg mem_le_state,contr
+	branch memcpy,le
+	arg mem_state,contr
+	branch memcpy
+
+	
+
+context_get_next:
+	arg context_num,loopcnt
+	fetcht 1,mem_current_context
+context_get_next_loop:
+	increase 1,temp
+	compare context_num,temp,0xff
+	nbranch context_get_next_cont,true
+	arg 0,temp
+context_get_next_cont:
+	storet 1,mem_current_context
+	mul32 temp,context_size,pdata
+	arg mem_context,rega
+	iadd rega,rega
+	ifetch 1,rega
+	bbit1 state_insniff,context_get_next_sniff
+	rtnbit1 state_inconn
+	rtnbit1 state_inpage
+context_get_next_sniff:
+	loop context_get_next_loop
+	rtn
+	
+context_new:
+	bpatch patch05_4,mem_patch05
+	arg context_search_empty,regc
+	call context_search
+	nrtn zero					// all occupied
+	deposit rega
+	store 2,mem_context_ptr
+	force 0,null
+	rtn
+	
+	//return zero if anyone's wack is 1.
+	//return nzero if all wack is 0
+context_check_all_wack:
+	call check_esco_amaddr
+	branch context_check_esco_wack,true
+	fetch 2,mem_context_ptr
+	add pdata,coffset_arq,contw
+	fetch 1,mem_arq
+	istore 1,contw
+	arg context_check_a_wack,regc
+	branch context_search
+
+context_check_esco_wack:
+	fetch 1,mem_arq
+	isolate1 wack,pdata
+	branch context_esco_wack,true
+	force 1,null
+	rtn
+context_esco_wack:
+	force 0,null
+	rtn
+	
+	//rtn nzero if idle(no conn)
+context_check_idle:
+	arg context_check_inconn,regc
+	branch context_search
+	
+context_traverse_linkkey:
+	fetcht 2,mem_context_ptr
+	arg context_traverse_clearkey,regc
+	branch context_search
+	
+	
+	/* return zero if conn handle is found */
+context_search_conn_handle:
+	fetcht 1,mem_hci_conn_handle
+context_search_conn_handle2:
+	arg context_search_handle,regc
+	branch context_search
+	/* return zero if plap is found */
+context_search_plap:
+	bpatch patch05_5,mem_patch05
+	fetcht 6,mem_hci_plap
+context_search_plap2:
+	arg context_search_lap,regc
+	branch context_search
+	/* return zero if sniff anchor is meet and rega pointers to context */
+context_search_insniff:
+	arg context_search_sniff,regc
+	branch context_search
+	/* return zero if sniff window is in content with current transaction */
+context_search_sniff_window:
+	arg context_search_window,regc
+context_search:
+	bpatch patch05_6,mem_patch05
+	arg mem_context,rega
+	arg context_num,loopcnt
+context_search_loop:
+	ifetch 1,rega
+	copy regc,pc
+context_search_next:
+	increase context_size,rega
+	loop context_search_loop
+	force 1,null
+	rtn
+
+context_search_empty:
+	bbit1 state_inconn,context_search_next
+	bbit1 state_inpage,context_search_next
+	force 0,null
+	rtn
+	
+context_search_lap:
+	bbit1 state_inpage,context_search_lap_cont
+	bbit0 state_inconn,context_search_next
+context_search_lap_cont:
+	add rega,coffset_plap,contr
+	ifetch 6,contr
+	isub temp,null
+	rtn zero
+	branch context_search_next
+
+context_search_handle:
+	bbit0 state_inconn,context_search_next
+	add rega,coffset_conn_handle,contr
+	ifetch 1,contr
+	isub temp,null
+	rtn zero
+	branch context_search_next
+
+context_search_sniff:
+	bbit0 state_insniff,context_search_next
+context_search_sniff_loop:
+	call context_get_anchor
+	call sign_pdata_temp
+	isub temp,pdata
+	increase 1,pdata
+	branch context_search_sniff_miss,positive
+	copy contr,regb
+	store 9,mem_temp
+	fetch 1,mem_le_sc_calc
+	nbranch context_search_sniff_sc,blank
+	fetch 9,mem_temp
+	copy regb,contr
+	increase 5,pdata  
+	branch context_search_meet1
+context_search_sniff_sc:
+	fetch 9,mem_temp
+	copy regb,contr	
+	increase 20,pdata  
+context_search_meet1:
+	nbranch context_search_next,positive
+context_search_meet:
+	copy temp,bt_clk
+	call context_next_anchor
+	force 0,null
+	rtn
+	
+	
+context_search_sniff_miss:
+	iforce regb
+	add rega,coffset_tsniff,contr
+	ifetch 2,contr
+	branch context_search_meet,blank
+	call context_next_anchor
+	branch context_search_sniff_loop
+
+sign_pdata_temp:
+	rshift16 pdata,timeup    
+	rshift8 timeup,timeup    
+	branch sign_pdata_temp_p0,zero    
+	compare 0xf,timeup,0xf    
+	nrtn true    
+	rshift16 temp,timeup    
+	rshift8 timeup,timeup    
+	nrtn zero    
+	set1 28,temp    
+	rtn
+sign_pdata_temp_p0:    
+	rshift16 temp,timeup    
+	rshift8 timeup,timeup    
+	compare 0xf,timeup,0xf    
+	nrtn true    
+	set1 28,pdata    
+	rtn
+
+context_check_inconn:
+	bbit0 state_inconn,context_search_next
+	force 0,null 				// found
+	rtn
+	
+context_check_a_wack:
+	bbit0 state_inconn,context_search_next
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	bbit1 mode_le,context_search_next
+	add rega,coffset_arq,contr
+	ifetch 1,contr
+	bbit0 wack,context_search_next
+	force 0,null 				// found
+	rtn
+
+context_get_anchor:
+	add rega,coffset_mode,contr
+	ifetcht 1,contr
+	deposit clkn_bt
+	isolate1 mode_master,temp
+	add rega,coffset_sniff_anchor,contr
+	ifetcht 4,contr
+	rtn true
+	add rega,coffset_clk_offset,contr
+	ifetch 6,contr
+	call calc_clke2
+	deposit clke_bt
+	rtn
+
+context_next_anchor:
+	add rega,coffset_tsniff,contr
+	add rega,coffset_sniff_anchor,contw
+	ifetch 2,contr
+	iadd temp,timeup			/* wrap to 28 bits */
+	deposit timeup
+	istore 4,contw
+	branch le_context_nexthop
+	
+
+context_search_window:
+	bbit0 state_insniff,context_search_next
+	call context_get_anchor
+	iadd stop_watch,pdata
+	iadd stop_watch,pdata
+	iadd queue,pdata
+	isub temp,null
+	nbranch context_search_next,positive
+	force 0,null
+	rtn
+
+context_traverse_clearkey:
+	bbit0 state_inconn,context_search_next
+	deposit temp
+	isub rega,null
+	branch context_search_next,null
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	bbit1 mode_le,context_search_next
+	ifetch 1,rega
+	set0 state_linkkey,pdata
+	istore 1,rega
+	branch context_search_next
+
+	
+master_conn_send_packet:
+	bpatch patch05_7,mem_patch05
+	call rf_setup_time_master_slot
+master_send_packet:
+	add clkn_bt,1,bt_clk          /* master start to use native clock */
+	call fetch_self_bt_adr
+	force 0x03,freq_mode          /* we are in connection!! */
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_native
+	call send_access_word
+	branch transmit_packet
+
+master_conn_recv_packet:
+	bpatch patch06_0,mem_patch06
+	call rf_setup_time_slave_slot
+master_recv_packet:
+	add clkn_bt,1,bt_clk          /* master start to use native clock */
+	call fetch_self_bt_adr
+	force 0x03,freq_mode          /* we are in connection!! */
+	call rx_radio_freq
+	call init_rx_packet_flags
+	call prep_crypt
+	call start_rx_native	/* start listening at start_rx time */
+	call start_receiver
+master_rx_conn_finish_packet:
+	call wait_access_clkn_rt	/* master use native clock */
+	nrtn sync
+	call save_rssi
+	branch receive_packet
+	
+	
+
+master_newconn_once:
+	bpatch patch06_1,mem_patch06
+	fetch 1,mem_fhs_am_addr
+	iforce am_addr			//review
+	force type_poll,type
+	call master_conn_send_packet
+	branch master_conn_recv_packet
+
+
+
+
+
+
+/******************************************/
+/************* Inquiry Scan ***************/
+/******************************************/
+
+inquiry_scan_dispatch:
+	fetch 1,mem_scan_mode
+	rtnbit0 inq_scan_mode
+	force iscan_interval_timer,queue
+	call timer_check
+	nrtn blank
+	fetcht 2,mem_iscan_window
+	force 4,queue
+	call sniff_check_window
+	rtn user
+	call inquiry_scan_start
+	force iscan_interval_timer,queue
+	fetch 2,mem_iscan_interval
+	nbranch timer_init,sync
+	random pdata				/* inquiry scan backoff */
+	iand mask3ff,pdata
+	branch timer_init
+	
+
+inquiry_scan_start:
+	bpatch patch06_2,mem_patch06
+	jam 0,mem_fhs_am_addr
+	disable clknt
+	disable attempt
+	call afh_clear
+	and clkn_bt,0x1fc,bt_clk      /* freeze the clock, set bit[1] 0, this is version 1.1 */
+	force 0x01,freq_mode     /* slave in inquiry scan, kind of same as inquriy_response, this is version 1.1 */
+	call fetch_giac
+	call rx_radio_freq
+	setflip mark_inquiry_state,mark
+	fetch 1,mem_inquiryscan_waitcnt
+	increase 1,pdata
+	store 1,mem_inquiryscan_waitcnt
+	call fetch_diac
+	call start_receiver	/* get ready for that id packet */
+	call wait_access_forever	/* until there is timeout, or matched (true) */
+	nrtn sync
+	bpatch patch06_3,mem_patch06
+	force 0,stop_watch
+	call shutdown_radio	/* must have heard */
+	fetch 1,mem_inquiryscan_rcvcnt
+	increase 1,pdata
+	store 1,mem_inquiryscan_rcvcnt
+	call fetch_giac
+	call rf_setup_time_slave_slot
+	or_into 0x002,bt_clk               /* put clk(1) to 1 */
+	force 0x01,freq_mode               /* slave in inquriy and page, response only */
+	call tx_radio_freq
+	call fetch_diac
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_external
+	deposit clkn_bt
+	store 4,mem_clkn_bt
+	call send_access_word
+	force type_fhs,type
+	force 0,am_addr                       /* put 0 into am_addr field for fhs */
+	call scan_mode_whiten
+	call transmit_packet_whitened
+	call send_eir
+	and_into 0x1fd,bt_clk                 /* put clk(1) back to 0 */
+	increase 1,N_tx_slot
+	rtn
+
+send_eir:
+	bpatch patch06_4,mem_patch06
+	fetch 1,mem_eir_enable
+	rtn blank
+	arg mem_eir,contw
+	fetch 1,mem_local_name_length
+	copy pdata,loopcnt
+	increase 1,pdata
+	istore 1,contw	
+	copy contw,temp
+	increase 1,pdata
+	store 2,mem_tx_len	
+	copy temp,contw
+	setarg 0x09  //type:name
+	istore 1,contw		
+	arg  mem_local_name,contr
+	call memcpy       //name
+
+	arg mem_all_uuid_128bits,regc
+	arg 4,loopcnt
+	call get_all_uuid
+	arg mem_all_uuid_16bits,regc
+	arg 1,loopcnt
+	call get_all_uuid
+
+	force type_dm3,type		/* DM3 */
+	jam 2,mem_tx_lch
+	setarg mem_eir
+	store 2,mem_txptr
+	call rf_setup_time_slave_slot
+	call tx_radio_freq
+	call start_transmitter	/* get ready for that id packet */
+	call start_tx_external
+	call send_access_word
+	call scan_mode_whiten
+	call transmit_packet_whitened
+	rtn
+
+
+get_all_uuid:
+	copy contw,temp
+	copy regc,contr
+	ifetch 1,contr
+	rtn blank
+lshift_loop:
+	lshift pdata,pdata
+	loop lshift_loop
+	copy pdata,rega
+	increase 2,pdata
+	copy pdata,queue
+	fetch 2,mem_tx_len
+	iadd queue,pdata
+	store 2,mem_tx_len
+	copy temp,contw
+	copy rega,pdata
+	increase 1,pdata
+	istore 1,contw
+	copy regc,contr
+	ifetch 1,contr
+	ifetch 1,contr	//fetch type
+	istore 1,contw
+	copy rega,loopcnt
+	branch memcpy  //copy uuid
+	
+/******************************************/
+/******** Slave dispatch ***********/
+/******************************************/
+
+page_scan_dispatch:	
+	fetch 1,mem_scan_mode
+	rtnbit0 page_scan_mode
+	force pscan_interval_timer,queue
+	call timer_check
+	nrtn blank
+	fetcht 2,mem_pscan_window
+	force 40,queue
+	call sniff_check_window
+	rtn user
+	force 0,am_addr
+	jam param_pagerespto,mem_fhs_wait_counter
+	set0 mark_fhs_already_good,mark
+	call page_scan_start
+	force pscan_interval_timer,queue
+	fetch 2,mem_pscan_interval
+	branch timer_init
+	
+
+page_scan_start:
+	bpatch patch06_5,mem_patch06
+	disable clknt
+	call afh_clear
+	fetch 1,mem_pagescan_waitcnt
+	increase 1,pdata
+	store 1,mem_pagescan_waitcnt
+	force 0,N_tx_slot
+	call fetch_self_bt_adr
+	add clkn_bt,1,bt_clk      /* freeze the clock on native clock until scan window is up */
+	force 0x02, freq_mode     /* slave in inquiry and page, not response */
+	bpatch patch06_6,mem_patch06
+	call rx_radio_freq
+	call start_receiver	/* wait for that id packet from master */
+	call wait_access_forever
+	nrtn sync                          /* pscan window timeout occured, back to dispatch */
+	call shutdown_radio	/* got the id packet */
+	fetch 1,mem_pagescan_rcvcnt
+	increase 1,pdata
+	store 1,mem_pagescan_rcvcnt
+	force 0,stop_watch
+	call rf_setup_time_slave_slot
+	or_into 0x002,bt_clk               /* put clk(1) to 1 */
+	force 0x01,freq_mode               /* slave in inquriy and page, response only */
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_external
+	call send_access_word
+	call end_of_packet
+	force 0,am_addr
+	arg param_rf_setup, timeup
+	until clke_rt,meet
+	or_into 0x03,clke_bt
+	and_into 0x1fd,bt_clk
+page_scan_wait_fhs_restart:
+	bpatch patch06_7,mem_patch06
+	increase 1,N_tx_slot
+	call rx_radio_freq
+	call start_receiver
+	call wait_access_mhalfbnd
+	nbranch page_scan_wait_fhs_again,sync	/* go back if didn't find access code */
+	call scan_mode_whiten
+	call receive_packet_whitened
+	bmark1 mark_fhs_already_good,page_scan_reply_to_fhs
+page_scan_wait_fhs_again:
+	bpatch patch07_0,mem_patch07
+	fetch 1,mem_fhs_wait_counter
+	rtn blank
+	increase -1,pdata
+	store 1,mem_fhs_wait_counter
+	call rf_setup_time_master_slot	/* set up expiration time */
+	branch page_scan_wait_fhs_restart
+
+
+page_scan_reply_to_fhs:
+	bpatch patch07_1,mem_patch07
+	set0 1,clke_bt
+	set1 0,clke_bt
+	fetch 1,mem_pagescan_rcvfhscnt
+	increase 1,pdata
+	store 1,mem_pagescan_rcvfhscnt
+	call rf_setup_time_slave_slot
+	or_into 0x02,bt_clk
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_external
+	call send_access_word
+	call end_of_packet
+slave_apply_clke_bt:
+	compare 0x03,clke_bt,0x03
+	branch slave_apply_clke_bt_now,true
+	until null,mhalfbnd
+	branch slave_apply_clke_bt
+slave_apply_clke_bt_now:
+	fetch 4,mem_clke_bt
+	or_into 0x03,pdata
+	icopy clke_bt
+
+start_slave_connection:
+	bpatch patch07_2,mem_patch07
+	fetch 6,extm_lap
+	store 6,mem_plap
+	call prepare_newconn
+slave_newconn_loop:
+	call slave_newconn_once
+	branch sconn_successful,match     /* we were talked to */
+	call new_conn_timeout
+	nbranch slave_newconn_loop,blank
+	rtn
+
+	
+sconn_successful:
+	bpatch patch07_3,mem_patch07
+	call newconn_init
+	call context_new
+	nrtn zero
+	jam 0,mem_mode
+	call calc_clke_offset
+	branch context_save
+
+
+
+
+slave_dispatch:
+	bpatch patch07_4,mem_patch07
+	call calc_clke
+	call role_switch_slave
+	rtn user
+slave_loop:
+	bpatch patch07_5,mem_patch07
+	call check_bt_disabled
+	call scheduler_process
+	call slave_conn_recv_packet	/* go listen for a packet */
+	nbranch slave_notmatch,match
+	call supervision_flush
+	call scheduler_tx_l2cap_pkt
+	call prepare_tx
+	call slave_conn_send_packet
+	call parse_l2cap
+	call parse_lmp
+	fetch 1,mem_slave_rcvcnt
+	increase 1,pdata
+	store 1,mem_slave_rcvcnt
+	call calc_clke_offset
+slave_notmatch:
+	bpatch patch07_6,mem_patch07
+	call lpm_set_mult
+	call supervision_update
+	branch slave_disconnect,positive
+	call check_disconnect_timeout
+	nbranch slave_disconnect,user
+	call check_attempt
+	nbranch slave_loop,blank
+	rtn
+
+slave_disconnect:
+	bpatch patch07_7,mem_patch07
+	jam 0,mem_tester_emulate
+	jam 0,mem_debug_config
+	call quit_connection
+	set0 mark_testmode,mark
+	call test_enable_white
+	fetch 1,mem_state
+	rtn
+
+
+role_switch_slave:
+	bpatch patch08_0,mem_patch08
+	call role_switch_check
+	nrtn user
+	copy am_addr,temp
+	call get_free_amaddr
+	store 1,mem_fhs_am_addr
+	copy temp,am_addr
+	jam param_newconnto,mem_newconnto_counter
+roles_sendfhs_loop:
+	bpatch patch08_1,mem_patch08
+	call rf_setup_time_master_slot
+	force type_fhs,type
+	call slave_send_access
+	deposit clkn_bt
+	store 4,mem_clkn_bt
+	call transmit_packet
+	call rf_setup_time_slave_slot
+	enable user3
+	call slave_receive_access
+	branch roles_got_fhs_reply,sync
+	call shutdown_radio
+	call new_conn_timeout
+	nbranch roles_sendfhs_loop,blank
+	rtnmark0 mark_accept_switch
+	jam LMP_SLOT_OFFSET,mem_lmo_opcode2
+	set1 mark_switch_initiated,mark
+	rtn
+roles_got_fhs_reply:
+	enable clknt
+	call prepare_newconn
+	call afh_clear
+roles_newconn_loop:
+	bpatch patch08_2,mem_patch08
+	call master_newconn_once
+	branch roles_newconn_responded,sync
+	call new_conn_timeout
+	nbranch roles_newconn_loop,blank
+	disable clknt
+	deposit clke_bt
+	store 4,mem_next_btclk
+	rtn
+roles_newconn_responded:
+	enable master
+	bmark0 mark_accept_switch,roles_newconn_nolmp
+	set0 mark_accept_switch,mark
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_HOST_CONNECTION_REQ,mem_lmi_opcode2
+	call tid_set_reply
+roles_newconn_nolmp:
+	deposit am_addr
+	store 1,mem_amaddr
+	force 0,pdata
+	store 6,mem_clk_offset
+	fetch 1,mem_mode
+	set1 mode_master,pdata
+	store 1,mem_mode
+	call supervision_flush
+	disable master
+	enable user
+	rtn
+
+	
+
+init_rx_packet_flags:
+	bpatch patch08_3,mem_patch08
+	disable match
+	set0 mark_loopback,mark
+	set0 mark_am_addr_broadcast,mark          /* initialize slave flags */
+	set0 mark_longpacket,mark
+	set0 mark_old_packet,mark
+	fetch 1,mem_arq    /* mem_arq + am_addr */
+	set0 arqnx,pdata
+	set1 flowx,pdata
+	store 1,mem_arq
+	rtn
+
+prepare_newconn:
+	bpatch patch08_4,mem_patch08
+	jam param_newconnto,mem_newconnto_counter
+	jam param_newconn_arq,mem_arq
+	fetch 2,mem_rx_window_init
+	store 2,mem_rx_window
+	deposit clkn_bt
+	store 4,mem_next_btclk
+	rtn clknt
+	deposit clke_bt
+	store 4,mem_next_btclk
+	rtn
+
+newconn_init:
+	bpatch patch08_5,mem_patch08
+	call init_lmp_reinit
+	call new_conn_handle
+	store 1,mem_conn_handle
+	setarg 0
+	store 2,mem_l2cap_rxbuff1_len
+	setarg param_supervision_to
+	store 2,mem_supervision_to
+	fetch 1,mem_state
+	set1 state_inconn,pdata
+	store 1,mem_state
+	jam 0,mem_op
+	jam 0,mem_state_map
+	jam 0,mem_lpm_current_mult
+	branch supervision_flush
+	
+
+clear_linkkey:
+	bpatch patch08_6,mem_patch08
+	force 0,pdata
+	store 8,mem_link_key
+	istore 8,contw
+	call clear_linkstate
+	branch context_traverse_linkkey
+	
+new_conn_timeout:
+	fetch 1,mem_newconnto_counter
+	increase -1,pdata
+	store 1,mem_newconnto_counter
+	rtn
+
+new_conn_handle:
+	fetch 1,mem_handle_num
+	increase 1,pdata
+	store 1,mem_handle_num
+	rtn
+
+
+quit_connection:
+	bpatch patch08_7,mem_patch08
+	fetch 1,mem_hci_cmd
+	beq hci_cmd_remote_name_req,quit_connection_name
+	fetch 1,mem_lmp_to_send
+	bne LMP_NAME_REQ,quit_connection_cont
+quit_connection_name:
+	call cmd_check_plap
+	nbranch quit_connection_cont,zero
+	call master_name_error
+	jam 0,mem_hci_cmd
+quit_connection_cont:
+	bpatch patch09_0,mem_patch09
+	call app_disconn_reason_collect_bt
+	call sniff_exit
+	jam BT_EVT_BB_DISCONNECTED,mem_fifo_temp
+	call ui_ipc_send_event
+	call init_lmp_work
+	call l2cap_init_work
+ifdef SIMPLE_PAIRING
+	call sp_initialize
+endif
+	fetch 1,mem_state
+	set0 state_inconn
+	store 1,mem_state
+	jam 0,memui_reconnect_mode
+
+	fetch 1,mem_state_map
+	compare 0x0,pdata,0xc0
+	branch quit_connection_not_clear_mark,true
+	set0 mark_rxbuf_inuse,mark
+quit_connection_not_clear_mark:
+	fetch 1,mem_arq
+	bbit0 wack,quit_connection_not_clear_tx
+quit_connection_not_clear_tx:
+	fetch 1,mem_op
+	rtnbit0 op_txl2cap
+	set0 mark_tx_l2cap,mark
+	rtn
+
+slave_newconn_once:
+	bpatch patch09_1,mem_patch09
+	fetch 1,extm_newconn_am_addr
+	rtn blank     
+	icopy am_addr
+	call slave_conn_recv_packet
+	nrtn match
+	force type_null,type
+	call slave_conn_send_packet
+	deposit am_addr
+	store 1,mem_amaddr                 /* now the new am_addr is official */
+	force 0,pdata
+	store 1,extm_newconn_am_addr
+	rtn
+
+
+/******************************************/
+/********  Time consuming task  ***********/
+/******************************************/
+prepare_tx:
+	bpatch patch09_2,mem_patch09
+	fetch 1,mem_state
+	bbit0 state_insco,prepare_tx_not_sco
+	force type_hv3,type
+	bmark0 mark_esco,prepare_tx_not_esco
+	call check_esco_amaddr
+	nbranch prepare_tx_not_sco,true
+	branch prepare_tx_not_sco,attempt	
+	call set_wait_ack					/* send esco only at the first attempt */
+	setarg 2		/* esco only has 1 retry */
+	store 2,mem_retransmission_cnt
+	rtn
+prepare_tx_not_esco:
+	nrtn attempt						/* send sco only at the first attempt */
+prepare_tx_not_sco:
+	bpatch patch09_3,mem_patch09
+	call context_check_all_wack			 //abandon mark_retransmit, use context_check_all_wack instead.
+	nbranch prepare_tx_no_retransmit,zero
+	fetch 1,mem_arq
+	bbit0 wack,prepare_tx_pollnull		/* other wack, tx buffer in use, but not me */
+prepare_tx_retransmit:
+	bmark1 mark_loopback,prepare_tx_loopback
+	fetch 1,mem_debug_config
+	bbit1 debug_tx_pattern,prepare_tx_txpat
+	fetch 2,mem_retransmission_cnt
+	increase -1,pdata
+	store 2,mem_retransmission_cnt
+	branch prepare_tx_nomore_retransmit,blank
+	fetch 1,mem_last_type
+	iforce type
+	rtn
+
+prepare_tx_nomore_retransmit:
+	bpatch patch09_4,mem_patch09
+	call clear_got_tx
+prepare_tx_no_retransmit:
+	call check_esco_amaddr
+	branch prepare_tx_pollnull,true
+	call send_lmp
+	branch prepare_tx_sendlmp,user
+	fetch 1,mem_op
+	bbit1 op_txl2cap,prepare_tx_sendl2cap
+	bmark1 mark_loopback,prepare_tx_loopback
+	fetch 1,mem_debug_config
+	bbit1 debug_tx_pattern,prepare_tx_txpat
+prepare_tx_pollnull:
+	force type_poll,type				/* POLL for master */
+	rtn master
+	force type_null,type				/* default is NULL */
+	rtn
+prepare_tx_loopback:
+	bpatch patch09_5,mem_patch09
+	fetch 1,mem_rx_type
+	iforce type
+	rtnne 1
+	force type_null,type
+	rtn
+prepare_tx_txpat:
+	fetch 1,test_mode_packet_type
+	and pdata,0xf,type
+	set1 mark_loopback,mark
+	rtn
+prepare_tx_sendlmp:
+	force type_lmp,type
+	branch set_wait_ack
+prepare_tx_sendl2cap:
+	call tx_l2cap_type
+
+set_wait_ack:
+	bpatch patch09_6,mem_patch09
+	fetcht 1,mem_arq
+	set1 wack,temp
+	storet 1,mem_arq
+	deposit type
+	store 1,mem_last_type
+	setarg 0xffff
+	store 2,mem_retransmission_cnt
+	rtn
+
+tx_l2cap_type:
+	bpatch patch09_7,mem_patch09
+	fetch 1,mem_state_map
+	isolate1 smap_edr,pdata
+	fetch 2,mem_tx_len
+	branch tx_l2cap_type_edr,true
+	force type_dm1,type		/* DM1 */
+	sub pdata,17,null			
+	rtn positive
+	force type_dh1,type		/* DH1 */
+	sub pdata,27,null				
+	rtn positive
+	force type_dm3,type		/* DM3 */
+	sub pdata,121,null
+	rtn positive
+	force type_dh3,type		/* DH3 */
+	sub pdata,183,null
+	rtn positive	
+	force type_dm5,type		/* DM5 */
+	sub pdata,224,null
+	rtn positive
+	force type_dh5,type		/* DH5 */
+	rtn
+tx_l2cap_type_edr:
+	force type_dm1,type
+	sub pdata,17,null
+	rtn positive
+	force type_dh1,type		/*2-DH1*/
+	sub pdata,54,null
+	rtn positive
+	force type_dm3,type		/*2-DH3*/
+	arg 367,temp
+	isub temp,null
+	nrtn positive
+	force type_dm5,type		/*2-DH5*/
+	arg 679,temp
+	isub temp,null
+	nrtn positive
+	force type_dh5,type		/*3-DH5*/
+	rtn
+
+
+/******************************************/
+/***********  Receive Packet  *************/
+/******************************************/
+
+
+
+slave_receive_master_slot:
+	fetch 1,mem_state
+	bbit0 state_insniff,slave_receive_notsniff
+	fetch 2,mem_tsniff
+	branch slave_receive_notsniff,blank		/* role switch */
+	nbranch slave_receive_sniff,attempt
+slave_receive_notsniff:
+	call rf_setup_time_master_slot
+slave_receive_access:
+	add clke_bt,1,bt_clk
+slave_receive_sniff:
+	enable swfine
+	fetch 2,mem_rx_window
+	rshift pdata,pdata
+	arg param_pll_setup,temp
+	iadd temp,pdata
+	call ahead_window
+	call fetch_extm_bt_adr
+	force 0x03,freq_mode          /* connection hop */
+	call rx_radio_freq
+	call init_rx_packet_flags
+	call prep_crypt
+	bpatch patch0a_0,mem_patch0a
+	fetch 2,mem_rx_window
+	rshift pdata,pdata
+	call ahead_window
+	call start_receiver
+	enable decode_fec0
+	fetch 2,mem_rx_window
+	arg param_clke_cal,temp
+	iadd temp,stop_watch
+	correlate null,timeout
+	copy clke,temp
+	storet 6,mem_sync_clke
+	disable decode_fec0
+	nrtn sync
+	arg param_clke_cal,clke_rt
+	copy bt_clk,clke_bt
+	branch lpm_adjust_clk,wake
+	rtn
+	
+
+slave_conn_recv_packet:
+	bpatch patch0a_1,mem_patch0a
+	call slave_receive_master_slot
+	nbranch shutdown_radio,sync
+	call save_rssi
+	bmark0 mark_testmode,receive_packet
+	fetch 2,mem_tst_pktcnt_sync
+	increase 1,pdata
+	store 2,mem_tst_pktcnt_sync
+receive_packet:
+	rshift bt_clk,temp
+	or temp,0x40,white_init
+receive_packet_whitened:
+	bpatch patch0a_2,mem_patch0a
+	enable enable_white
+	enable enable_hec
+	enable decode_fec1
+	parse demod,bucket,3  /* get am_addr */
+	rshift8 pwindow,pdata
+	store 1,mem_temp_am_addr
+	parse demod,bucket,4  /* get type */
+	inject bucket,7       /* align up to pwindow */
+	copy pwindow,pdata
+	store 1,mem_rx_type
+	parse demod,bucket,3  /* get arq */
+	rshift8 pwindow,pdata
+	store 1,mem_temp_arq
+	fetch 1,mem_rx_type
+	sub pdata,3,null
+	branch receive_packet_noedr,positive
+	beq 7,receive_packet_noedr		/* esco packet */
+	fetch 1,mem_state_map
+	isolate1 smap_edr,pdata
+	setflag true,PSK,radio_ctrl
+receive_packet_noedr:
+	bpatch patch0a_3,mem_patch0a
+	parse demod,bucket,8   /* cycle thru hec */
+	disable decode_fec1
+	disable enable_hec   /* at this moment, 1 seqn + 8 hec is in shift */
+	branch error_header,crc_failed  /* if hec error, nothing is valid */
+	bmark0 mark_testmode,receive_packet_amchk
+	fetch 2,mem_tst_pktcnt_hec
+	increase 1,pdata
+	store 2,mem_tst_pktcnt_hec
+receive_packet_amchk:	
+	bpatch patch0a_4,mem_patch0a
+	fetch 1,mem_temp_am_addr
+	compare 0,pdata,0x07           /* check for broadcast */
+	setflag true,mark_am_addr_broadcast,mark   /* received a broadcast message, can fire ar_addr if during unpark_req */
+	branch am_addr_ok,true
+	icompare 0x07,am_addr
+	branch am_addr_match,true
+	bmark0 mark_esco,end_of_packet
+	fetcht 1,mem_saved_amaddr
+	icompare 0x7,temp
+	nbranch end_of_packet,true
+	fetch 1,mem_arq    /* mem_arq + am_addr */
+	set0 arqnx,pdata
+	set1 flowx,pdata
+	store 1,mem_arq
+am_addr_match:
+	enable match
+am_addr_ok:
+	bpatch patch0a_5,mem_patch0a
+	fetch 1,mem_rx_type
+	icopy type
+	bmark1 mark_am_addr_broadcast,arqn_bypass        /* arqn doesn't make sense */
+	fetcht 1,mem_temp_arq
+	fetch 1,mem_arq
+	set0 flow,pdata
+	isolate1 flow,temp
+	setflag true,flow,pdata
+	isolate1 arqn,temp
+	setflag true,arqn,pdata
+	store 1,mem_arq
+	isolate0 arqn,temp
+	branch arqn_bypass,true
+	call clear_got_tx
+arqn_bypass:
+	bpatch patch0a_6,mem_patch0a
+	arg 0,temp
+	call reserve_slot
+	and type,0xf,pdata
+	beq type_poll,process_poll
+	beq type_null,end_of_packet	/* null */
+	beq type_fhs,process_fhs
+	fetcht 1,mem_temp_arq
+	fetch 1,mem_arq
+	icompare 0x04,temp    /* bit 2 is seqn */
+	nbranch rx_type_dispatch,true   /* different then it's new */
+	bmark0 mark_am_addr_broadcast,failed_seqn         /* seqn failed, and not broadcast */
+	bbit0 bcast1,rx_type_dispatch           /* first broadcast never fail seqn */
+failed_seqn:
+	set1 mark_old_packet,mark
+rx_type_dispatch:
+	bpatch patch0a_7,mem_patch0a
+	deposit type
+	beq type_dm1, process_dm1
+	beq type_dh1, process_dh1
+	beq type_hv3, process_hev
+	beq type_3dh1, process_3dh1
+	arg 4,temp
+	call reserve_slot
+	beq type_dm3, process_dm3
+	beq type_dh3, process_dh3
+	arg 8,temp
+	call reserve_slot
+	beq type_dm5, process_dm5
+	beq type_dh5, process_dh5
+	rtn
+
+
+process_hev:
+	bpatch patch0b_0,mem_patch0b
+	enable decode_fec0
+	enable enable_crc
+	enable encrypt
+	arg mem_sco_ibuf,contw
+	force 30,loopcnt
+process_hev_loop:	
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	loop process_hev_loop
+	bmark0 mark_esco,end_of_packet
+	parse demod,bucket,16  /* cycle through the crc */
+	nsetflag crc_failed,mark_esco_rxok,mark
+	branch error_payload,crc_failed
+	branch ack_payload
+
+
+process_poll:
+	branch end_of_packet
+
+process_dm3:
+process_dm5:
+	set1 mark_longpacket,mark
+process_dm1:
+	enable decode_fec2
+	branch process_dmh
+	
+process_dh3:
+process_dh5:
+	set1 mark_longpacket,mark
+process_3dh1:
+	set1 PSK3M,radio_ctrl
+process_dh1:
+	enable decode_fec0
+process_dmh:
+	bpatch patch0b_1,mem_patch0b
+	bmark1 mark_rxbuf_inuse,end_of_packet			/* buffer in use, nack */
+	isolate0 PSK,radio_ctrl
+	branch process_dmh_noedr,true
+	disable enable_white
+	enable decode_fec0
+	disable decode_fec2
+	add clkn_bt,2,timeup
+	correlate clkn_bt,meet
+	nbranch error_payload,sync
+	set1 mark_longpacket,mark
+	enable enable_white
+process_dmh_noedr:
+	bpatch patch0b_2,mem_patch0b
+	enable encrypt
+	enable enable_crc
+	parse demod,bucket,3  /* parse in lch+l2cap flow */
+	rshift8 pwindow,pdata
+	store 1,mem_lch_code		/* for loopback */
+	parse demod,bucket,5  /* parse in 5 bit packetlength */
+	bmark1 mark_longpacket,process_dmh_long
+	rshift3 pwindow,loopcnt
+	rshift3 loopcnt,loopcnt
+	branch process_dmh_common
+process_dmh_long:
+	parse demod,bucket,5		/* multi slot packet length of dh3 dh5 dm3 dm5 */
+	rshift pwindow,loopcnt
+	parse demod,bucket,3  /* undefined+bit 9 of length */
+process_dmh_common:	
+	bpatch patch0b_3,mem_patch0b
+	deposit loopcnt
+	store 2,mem_len
+	branch process_dmh_data_end,blank
+	isub mask3ff,null
+	branch error_payload,positive	/* packet too large, discard */
+	bpatch patch0b_4,mem_patch0b
+	set0 mark_fhs_eir,mark
+	fetch 1,mem_lch_code
+	and_into 0x03,pdata
+	arg mem_rxbuf,contw //lmp_data or test packet
+	beq LLID_LMP,process_lmp
+	bmark1 mark_testmode,process_dmh_data
+	//non-HCI mode
+	fetch 1,mem_lch_code
+	and_into 0x03,pdata
+	beq LLID_L2CAP_START,process_dmh_data_l2cap_start_pkt
+	beq LLID_L2CAP_CONT,process_dmh_data_l2cap_continue_pkt
+	branch error_payload
+
+process_lmp:
+	fetch 2,mem_len
+	sub pdata,0x70,null		//lmp buffer size
+	nbranch error_payload,positive
+	bmark1 mark_old_packet,ack_payload
+	branch process_dmh_data
+
+	
+process_dmh_data_l2cap_start_pkt:
+	bpatch patch0b_5,mem_patch0b
+	bmark1 mark_old_packet,ack_payload
+	fetch 2,mem_len
+	arg 0x2e0,temp //l2cap buffer size
+	isub temp,null
+	branch error_payload,positive
+	fetch 1,mem_l2cap_rxbuff_inuse
+	bbit0 L2CAP_INUSE_BUFF1,process_dmh_data_into_buff1
+	bbit0 L2CAP_INUSE_BUFF2,process_dmh_data_into_buff2
+	branch end_of_packet
+process_dmh_data_into_buff1:
+	jam 1,mem_l2cap_rxbuff_new //new data in buff 1
+	fetch 2,mem_l2cap_rxbuff1_len
+	bne 0,end_of_packet			//baseband head error
+	arg mem_l2cap_rxbuff1,contw
+	branch process_dmh_data
+process_dmh_data_into_buff2:
+	jam 2,mem_l2cap_rxbuff_new //new data in buff 2
+	fetch 2,mem_l2cap_rxbuff2_len
+	bne 0,end_of_packet
+	arg mem_l2cap_rxbuff2,contw
+	branch process_dmh_data
+	
+process_dmh_data_l2cap_continue_pkt:
+	bpatch patch0b_6,mem_patch0b
+	bmark1 mark_old_packet,ack_payload
+	fetch 2,mem_len
+	arg 0x2e0,temp //l2cap buffer size
+	isub temp,null
+	branch error_payload,positive
+	fetch 1,mem_l2cap_rxbuff_new
+	beq 1,process_dmh_data_l2cap_continue_pkt1
+	beq 2,process_dmh_data_l2cap_continue_pkt2
+	branch end_of_packet
+process_dmh_data_l2cap_continue_pkt1:
+	arg mem_l2cap_rxbuff1,contw
+	fetch 2,mem_l2cap_rxbuff1_len
+	iadd contw,contw
+	branch process_dmh_data
+process_dmh_data_l2cap_continue_pkt2:
+	arg mem_l2cap_rxbuff2,contw
+	fetch 2,mem_l2cap_rxbuff2_len
+	iadd contw,contw
+process_dmh_data:	
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	loop process_dmh_data
+process_dmh_data_end:	
+	bpatch patch0b_7,mem_patch0b
+	parse demod,bucket,16  /* cycle through the crc */
+	branch error_payload_crc,crc_failed
+	fetch 1,mem_l2cap_flow_ctrl_flag
+	beq L2CAP_FLOW_CTRL_ENABLE,end_of_packet
+	bmark1 mark_testmode,process_dmh_cont
+	bmark1 mark_old_packet,redundant_payload
+	fetch 1,mem_lch_code
+	compare 3,pdata,3
+	branch process_dmh_cont,true
+	fetch 2,mem_len
+	branch process_dmh_cont,blank
+	bpatch patch0c_0,mem_patch0c
+	fetch 1,mem_l2cap_rxbuff_new
+	beq 1,process_l2cap_pass_crc_buff1
+	beq 2,process_l2cap_pass_crc_buff2
+	branch assert
+process_l2cap_pass_crc_buff1:
+	fetch 2,mem_l2cap_rxbuff1_len
+	fetcht 2,mem_len
+	iadd temp,pdata
+	store 2,mem_l2cap_rxbuff1_len
+	beq 0,assert
+	fetcht 2,mem_l2cap_rxbuff1// l2cap payload length
+	increase 4,temp
+	isub temp,null
+	call l2cap_buff1_inuse,zero //l2cap pkts not ended
+	branch process_dmh_cont
+process_l2cap_pass_crc_buff2:
+	fetch 2,mem_l2cap_rxbuff2_len
+	fetcht 2,mem_len
+	iadd temp,pdata
+	store 2,mem_l2cap_rxbuff2_len
+	beq 0,assert
+	fetcht 2,mem_l2cap_rxbuff2// l2cap payload length 
+	add temp,4,temp
+	isub temp,null
+	call l2cap_buff2_inuse,zero //l2cap pkts not ended
+	branch process_dmh_cont
+process_dmh_cont:
+	bpatch patch0c_1,mem_patch0c
+	fetcht 1,mem_state_map
+	fetch 1,mem_lch_code
+	compare 3,pdata,0x03
+	setflag true,smap_rxlmp,temp
+	nsetflag true,smap_rxl2cap,temp
+	storet 1,mem_state_map
+	nbranch process_dmh_cont_rxbuf_not_use,true
+	set1 mark_rxbuf_inuse,mark
+process_dmh_cont_rxbuf_not_use:
+	bmark0 mark_testmode,ack_payload
+	isolate1 smap_rxlmp,temp
+	branch ack_payload,true
+	fetch 2,mem_tst_pktcnt_crc
+	increase 1,pdata
+	store 2,mem_tst_pktcnt_crc
+	set1 mark_loopback,mark
+	set0 smap_rxl2cap,temp
+	set0 mark_rxbuf_inuse,mark
+	storet 1,mem_state_map
+ack_payload:
+	bpatch patch0c_2,mem_patch0c
+	fetcht 1,mem_temp_arq
+	fetch 1,mem_arq
+	set1 arqnx,pdata
+	isolate1 seqn,temp            /* if accept, seqn always copies from the header */
+	setflag true,seqn,pdata
+	isolate1 mark_am_addr_broadcast,mark
+	setflag true,bcast1,pdata
+	store 1,mem_arq
+	fetch 2,mem_len
+	nbranch end_of_packet,blank
+	fetch 1,mem_state_map
+	set0 smap_rxl2cap,pdata//better to do this in l2cap_flow_ctrl_stop
+	store 1,mem_state_map
+	fetch 1,mem_lch_code
+	compare 0x01,pdata,0x07
+	//call l2cap_flow_ctrl_stop,true
+	branch end_of_packet
+	
+error_header:
+	bpatch patch0c_3,mem_patch0c
+	disable match
+	fetch 2,mem_rx_hec_err
+	increase 1,pdata
+	store 2,mem_rx_hec_err
+	branch end_of_packet
+error_payload_crc:
+	fetch 2,mem_rx_crc_err
+	increase 1,pdata
+	store 2,mem_rx_crc_err
+	call discard_pkt
+	bmark0 mark_testmode,error_payload
+	set1 mark_loopback,mark
+error_payload:
+	branch end_of_packet
+	
+discard_pkt:
+	bpatch patch0c_4,mem_patch0c
+	fetch 1,mem_lch_code
+	compare 3,pdata,0x03
+	nbranch discard_pkt_l2cap,true
+discard_pkt_lmp:	
+	fetcht 1,mem_state_map
+	set0 smap_rxlmp,temp
+	storet 1,mem_state_map
+	rtn
+discard_pkt_l2cap:
+//	isolate1 mark_testmode,mark
+//	setflag true,mark_loopback,mark
+	fetcht 1,mem_state_map
+	set0 smap_rxl2cap,temp
+	storet 1,mem_state_map
+	branch  h4_send_acl_trigger_clear
+
+redundant_payload:
+	fetch 1,mem_arq
+	set1 arqnx,pdata
+	store 1,mem_arq
+end_of_packet:
+	bpatch patch0c_5,mem_patch0c
+	disable encode_fec0
+	disable encode_fec2
+	disable decode_fec0
+	disable decode_fec2
+	disable enable_crc
+	disable encrypt
+	disable enable_white
+	branch shutdown_radio,is_rx
+	until null,tx_clear
+	nop 100          /* flush out the last bit */
+	branch shutdown_radio
+	
+process_fhs:
+	bpatch patch0c_6,mem_patch0c
+	enable enable_crc
+	enable decode_fec2
+	parse demod,bucket,72
+	isolate1 58,pdata
+	setflag true,mark_fhs_eir,mark
+	copy bt_adr,temp             /* save current address to aside */
+	ialigned bt_adr            /* send it to access gen */
+	ialigned fhs0			/* get fhs_misc */
+	pulse recalc                /* calc the lap just received from the other guy */
+	setsect 2,0xfffff             /* preset ms of shift reg as big mask */
+	setsect 3,0x0ffff             /* preset ms of shift reg as big mask */
+	nop 32                       /* 30 cycles after recalc */
+	iverify fhs_parity             /* check fhs_parity against ls 34 bits at shift reg, with msb 36 bits as mask */
+	deposit lap
+	store 3,extm_lap
+	deposit uap
+	store 1,extm_uap
+	copy temp,bt_adr             /* put the address back */
+	branch fhs_parity_ok,true     /* fhs parity failed */
+	branch error_payload
+fhs_parity_ok:
+	bpatch patch0c_7,mem_patch0c
+	parse demod,bucket,72
+	ialigned fhs1                   /* give host the information on class and fhs_misc */
+	ialigned am_addr                /* store the am_addr the master assigned us */
+	ialigned nap
+	ialigned regb                   /* store external clock in regb according to clock format */
+	force 0,pdata
+	parse demod,bucket,16  /* cycle through the crc */
+	branch error_payload,crc_failed
+	setarg 0x0ffffffc
+	iand regb,pdata
+	store 4,mem_clke_bt
+	deposit fhs_class
+	store 3,extm_class
+	deposit fhs_misc
+	store 1,extm_fhs_misc
+	deposit am_addr
+	store 1,extm_newconn_am_addr
+	deposit nap
+	store 2,extm_nap
+	deposit bt_clk
+	inject rxf,32
+	compare type_fhs,type,0x0f         /* see if this was fhs packet */
+	setflag true,mark_fhs_already_good,mark
+	branch end_of_packet
+
+clear_got_tx:
+	bpatch patch0d_0,mem_patch0d
+	fetch 1,mem_arq
+	rtnbit0 wack
+	set0 wack,pdata
+	setflip seqnx,pdata
+	store 1,mem_arq
+	fetch 1,mem_last_type
+	beq type_lmp,clear_got_txlmp
+	rtneq type_hv3
+	fetch 1,mem_op
+	rtnbit0 op_txl2cap,pdata
+	set0 op_txl2cap,pdata
+	set1 op_pkt_comp,pdata
+	store 1,mem_op
+	set0 mark_tx_l2cap,mark
+	fetch 2,mem_l2cap_tx_multi_offset
+	nrtn blank
+	fetch 1,mem_op
+	set0 op_pkt_comp,pdata
+	store 1,mem_op
+	branch l2cap_malloc_free
+
+clear_got_txlmp:
+	bpatch patch0d_1,mem_patch0d
+	fetch 1,mem_lmo_header_opcode
+	rshift pdata,pdata
+	beq LMP_START_ENCRYPTION_REQ,start_encryption
+	beq LMP_STOP_ENCRYPTION_REQ,stop_encryption
+	beq LMP_UNSNIFF_REQ, sniff_exit
+	beq LMP_ESCAPE,clear_lmp_escape
+	rtnne LMP_ACCEPTED
+	fetch 1,mem_lmo_payload
+	beq LMP_SCO_LINK_REQ,sco_link_req_by_slave
+	beq LMP_START_ENCRYPTION_REQ,clear_send_setup_complete
+	rtn
+
+clear_lmp_escape:
+	fetch 1,mem_lmo_payload
+	set1 7,pdata
+	rtn
+clear_send_setup_complete:
+	rtn master
+	fetch 1,mem_state
+	rtnbit1 state_conn_comp
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	rtn
+	
+// nokia BH-105  CALLING when reconnection
+sco_link_req_by_slave:
+	rtn master
+	fetch 1,mem_mode
+	isolate1 send_sco_when_slave,pdata
+	branch clean_mem_mode,true
+	//jam LMP_REMOVE_SCO_LINK_REQ,mem_lmo_opcode2
+	rtn
+clean_mem_mode:
+	set0 send_sco_when_slave,pdata
+	store 1,mem_mode
+	rtn
+	
+start_encryption:
+	bpatch patch0d_2,mem_patch0d
+	fetch 1,mem_state_map
+	set1 smap_encryption,pdata
+	store 1,mem_state_map
+	jam 1,core_encrypt
+	fetch 1,mem_state
+	isolate1 state_conn_comp,pdata
+	rtn
+
+stop_encryption:
+	bpatch patch0d_3,mem_patch0d
+	fetch 1,mem_state_map
+	set0 smap_encryption,pdata
+	store 1,mem_state_map
+	jam 0,core_encrypt
+	rtn
+
+
+sniff_init:
+	bpatch patch0d_4,mem_patch0d
+	copy clkn_bt,pdata
+	store 4,mem_lpm_delay_after_sniff
+	add clkn_bt,3,rega
+	branch sniff_init_master,master
+	add clke_bt,3,rega
+sniff_init_master:
+	fetcht 2,mem_tsniff
+	deposit rega
+	set0 27,pdata
+	idiv temp
+	fetch 2,mem_dsniff
+	call wait_div_end
+	remainder regc
+	isub regc,pdata
+	branch sniff_init_nowrap,positive
+	iadd temp,pdata
+sniff_init_nowrap:
+	iadd rega,pdata
+	store 4,mem_sniff_anchor
+	jam SWITCH_FLAG_INIT,mem_switch_flag
+	fetch 1,mem_state
+	set1 state_insniff,pdata
+	store 1,mem_state
+	fetch 1,mem_sniff_attempt
+	store 1,mem_current_sniff_attempt
+	setarg 0
+	store 3,mem_sniff_rcv
+	store 3,mem_sniff_lost
+	store 1,mem_sniff_unint_lost
+	jam BT_EVT_ENTER_SNIFF,mem_fifo_temp
+	call ui_ipc_send_event
+	fetch 2,mem_rx_window_sniff
+	store 2,mem_rx_window
+	nrtn master
+	add am_addr,-1,queue
+	rtn
+
+sniff_exit:
+	bpatch patch0d_5,mem_patch0d
+	fetch 1,mem_state
+	rtnbit0 state_insniff
+	set0 state_insniff,pdata
+	store 1,mem_state
+	fetch 2,mem_rx_window_init
+	store 2,mem_rx_window
+	disable wake
+	jam BT_EVT_EXIT_SNIFF,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+check_attempt:
+	bpatch patch0d_6,mem_patch0d
+	enable attempt
+	fetch 1,mem_state
+	bbit1 state_insniff,check_attempt_sniff
+	rtnmark1 mark_testmode						/* pdata won't be blank now, try attempt */
+	fetch 1,mem_arq
+	rtnbit1 wack
+	fetch 1,mem_lmp_to_send
+	nrtn blank
+	fetch 1,mem_op
+	rtnbit1 op_txl2cap
+check_attempt_nomore:
+	force 0,pdata
+	rtn
+
+check_attempt_sniff:
+	bbit0 state_insco,check_attempt_not_sco
+	fetch 1,mem_current_sniff_attempt
+	beq 2,check_attempt_sniff_restore_sco
+	fetch 1,mem_arq
+	bbit1 wack,check_attempt_notimeout
+	bmark0 mark_esco_rxok,check_attempt_notimeout
+check_attempt_sniff_restore_sco:
+	nbranch check_attempt_notimeout,master
+	fetch 1,mem_lmp_to_send
+	nbranch check_attempt_notimeout,blank
+check_attempt_sco_master:
+	fetch 1,mem_sco_poll
+	increase -1,pdata
+	store 1,mem_sco_poll
+	nbranch check_attempt_nomore,blank
+	jam param_sco_poll,mem_sco_poll
+	branch check_attempt_notimeout
+
+
+
+
+
+	
+check_attempt_not_sco:
+	fetch 1,mem_current_sniff_attempt
+	bne 1,check_attempt_notimeout
+	fetch 1,mem_current_sniff_timeout
+	branch check_attempt_notimeout,blank
+	increase -1,pdata
+	store 1,mem_current_sniff_timeout
+	fetch 1,mem_arq
+	rtnbit1 wack						// waiting for next ack
+	nrtn match						// waiting for next poll
+check_attempt_notimeout:
+	fetch 1,mem_current_sniff_attempt
+	increase -1,pdata
+	store 1,mem_current_sniff_attempt
+	rtn
+
+
+
+
+
+
+
+
+
+	/* enable user if sniff window vialation, queue is extra overhead */
+sniff_check_window:
+	bpatch patch0d_7,mem_patch0d
+	disable swfine
+	copy temp,stop_watch
+	call context_search_sniff_window
+	disable user
+	nrtn zero
+	force 0,stop_watch
+	enable user
+	rtn
+
+	//return true if it is esco context
+check_esco_amaddr:
+	fetch 1,mem_esco_addr
+	icompare 0xff,am_addr
+	rtn
+	
+
+parse_l2cap:	
+	bpatch patch0e_0,mem_patch0e
+	set0 mark_rxbuf_inuse,mark 
+parse_l2cap_cont:
+	jam L2CAP_RX_CLEAR,mem_l2cap_rx_done
+	fetch 1,mem_l2cap_rxbuff_inuse
+	rtn blank
+	isolate1 L2CAP_INUSE_BUFF1,pdata
+	arg mem_l2cap_rxbuff1,contr
+	call process_rx_l2cap_pkt,true
+	bpatch patch0e_1,mem_patch0e
+	fetch 1,mem_l2cap_rx_done
+	beq L2CAP_RX_DONE,parse_l2cap_release_buff1
+	
+	jam L2CAP_RX_CLEAR,mem_l2cap_rx_done
+	fetch 1,mem_l2cap_rxbuff_inuse
+	rtnbit0 L2CAP_INUSE_BUFF2
+	arg mem_l2cap_rxbuff2,contr	
+	call process_rx_l2cap_pkt
+	fetch 1,mem_l2cap_rx_done
+	beq L2CAP_RX_DONE,parse_l2cap_release_buff2
+	rtn
+		
+parse_l2cap_release_buff1:
+	fetch 1,mem_l2cap_rxbuff_inuse
+	set0 L2CAP_INUSE_BUFF1,pdata
+	store 1,mem_l2cap_rxbuff_inuse
+	setarg 0
+	store 2,mem_l2cap_rxbuff1_len
+	rtn
+parse_l2cap_release_buff2:
+	fetch 1,mem_l2cap_rxbuff_inuse
+	set0 L2CAP_INUSE_BUFF2,pdata
+	store 1,mem_l2cap_rxbuff_inuse
+	setarg 0
+	store 2,mem_l2cap_rxbuff2_len
+	rtn
+
+l2cap_buff1_inuse:
+	fetch 1,mem_l2cap_rxbuff_inuse
+	set1 L2CAP_INUSE_BUFF1,pdata
+	store 1,mem_l2cap_rxbuff_inuse
+	rtn
+
+l2cap_buff2_inuse:
+	fetch 1,mem_l2cap_rxbuff_inuse
+	set1 L2CAP_INUSE_BUFF2,pdata
+	store 1,mem_l2cap_rxbuff_inuse
+	rtn
+
+/******************************************/
+/**********  Transmit Packet  *************/
+/******************************************/
+
+slave_send_access:
+	bpatch patch0e_2,mem_patch0e
+	add clke_bt,1,bt_clk          /* slave start to use native clock */
+	call fetch_extm_bt_adr
+	force 0x03,freq_mode          /* connection frequency */
+	call tx_radio_freq
+	call start_transmitter
+	call start_tx_external
+	branch send_access_word
+	
+
+slave_conn_send_packet:
+	bpatch patch0e_3,mem_patch0e
+	call rf_setup_time_slave_slot
+	deposit clke_bt
+	fetcht 4,mem_next_btclk
+	isub temp,pdata
+	rtnne 1					/* missed slave slot */
+	compare type_null,type,0x1f
+	nbranch slave_conn_send_access,true
+	fetch 1,mem_rx_type
+	rtn blank					/* null packet, do nothing */
+slave_conn_send_access:
+	call slave_send_access
+transmit_packet:
+	compare type_id,type,0x1f        /* is this id only ? */
+	branch end_of_packet,true
+	rshift bt_clk,temp
+	or temp,0x40,white_init
+transmit_packet_whitened:
+	bpatch patch0e_4,mem_patch0e
+	enable enable_white
+	enable enable_hec
+	enable encode_fec1
+	set0 mark_longpacket,mark
+	deposit am_addr
+	inject mod,3             /* am_addr, temp is disabled */
+	deposit type
+	inject mod,4
+	fetch 1,mem_arq   /* aka mem_arq */
+	inject bucket,4  /* align up to flowx, arqnx, seqnx */
+	inject mod,3
+	enable enable_parity
+	inject mod,8   /* transmit parity */
+	disable encode_fec1
+	disable enable_parity
+	disable enable_hec
+	set0 PSK3M,radio_ctrl
+	arg 0,temp
+	call reserve_slot
+	bpatch patch0e_5,mem_patch0e
+	and type,0x1f,pdata
+	beq type_lmp, transmit_lmp
+	beq type_null, end_of_packet
+	beq type_poll, end_of_packet
+	beq type_fhs, transmit_fhs  /* master mode fhs need got_tx and ack */
+	beq type_dm1, transmit_dm1
+	beq type_dh1, transmit_dh1
+	beq type_hv3, transmit_hev
+	beq type_3dh1, transmit_3dh1
+	arg 4,temp
+	call reserve_slot
+	beq type_dm3, transmit_dm3
+	beq type_dh3, transmit_dh3
+	arg 8,temp
+	call reserve_slot
+	beq type_dh5, transmit_dh5
+	branch transmit_dm5	/* must be 14, dm5 */
+
+
+transmit_hev:
+	bpatch patch0e_6,mem_patch0e
+	enable encode_fec0
+	enable enable_crc
+	enable encrypt
+	force 30,loopcnt
+	arg mem_sco_obuf,contr
+transmit_ev_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop transmit_ev_loop
+	bmark1 mark_esco,transmit_end
+	branch end_of_packet
+	
+transmit_fhs:
+	bpatch patch0e_7,mem_patch0e
+	fetch 1,mem_fhs_am_addr            /* this is the am_addr to assign to slave */
+	icopy am_addr
+	fetch 1,mem_fhs_misc
+	icopy fhs_misc    /* [7:6]SR [5:4]SP [3:1]PS [0]undef  */
+	fetch 3,mem_class   /* store away class */
+	icopy fhs_class
+	fetch 2,mem_nap
+	icopy nap
+	enable enable_crc
+	enable encode_fec2
+	copy bt_adr,rega
+	call fetch_self_bt_adr
+	pulse recalc
+	nop 32                    /* 30 cycles after recalc for sync word generation */
+	copy bt_clk,timeup
+	fetch 4,mem_clkn_bt
+	icopy bt_clk
+	preload fhs0
+	set1 58,pdata		/* eir */
+	inject mod,72
+	preload fhs1
+	inject mod,72
+	copy timeup,bt_clk
+	copy rega,bt_adr
+	enable enable_parity
+	inject mod,16   /* generate CRC */
+	disable enable_parity
+	branch end_of_packet
+
+transmit_lmp:    /* expect the payload ready as in bb spec */
+	bpatch patch0f_0,mem_patch0f
+	enable encrypt
+	enable enable_crc
+	enable encode_fec2
+	fetch 1,mem_lmo_header_length   /* this is the payload header */
+	and pdata,0x1f8,temp       /* temp is number of bits, check payload header format */
+	arg mem_lmo_header_length,contr
+	increase 8,temp   /* temp is in bits */
+transmit_lmp_loop:
+	add temp,-72,regc   /* regc is remainder */
+	nbranch transmit_lmp_finish,positive
+	ifetch 9,contr
+	inject mod,72
+	copy regc,temp
+	branch transmit_lmp_loop
+transmit_lmp_finish:
+	ifetch 9,contr
+	iinject mod,temp
+	branch transmit_end
+
+transmit_dm1:
+	enable encode_fec2
+	branch transmit_dmh
+transmit_dm3:
+transmit_dm5:
+	enable encode_fec2
+	set1 mark_longpacket,mark
+	branch transmit_dmh
+
+transmit_3dh1:
+	set1 PSK3M,radio_ctrl
+transmit_dh1:
+	enable encode_fec0
+	branch transmit_dmh
+	
+transmit_dh3:
+transmit_dh5:
+	set1 PSK3M,radio_ctrl
+	enable encode_fec0
+	set1 mark_longpacket,mark
+
+transmit_dmh:
+	bpatch patch0f_1,mem_patch0f
+	fetch 1,mem_state_map
+	bbit0 smap_edr,transmit_noedr
+	sub type,3,null
+	branch transmit_noedr,positive
+	disable encrypt
+	disable encode_fec2
+	enable encode_fec0
+	disable enable_white
+	set1 PSK,radio_ctrl
+	isolate1 PSK3M,radio_ctrl
+	branch transmit_edr3m,true
+	setarg 0xabeee
+	inject mod,20
+	branch transmit_edr_sync_end
+transmit_edr3m:
+	setarg 0x5faeba
+	inject mod,24
+	setarg 0x12
+	inject mod,6
+transmit_edr_sync_end:	
+	enable enable_white
+	set1 mark_longpacket,mark
+transmit_noedr:
+	enable encrypt
+	enable enable_crc
+	bmark1 mark_loopback,transmit_loopback
+	fetch 1,mem_tx_lch
+	inject mod,3
+	fetch 2,mem_tx_len
+	iforce loopcnt
+	bmark1 mark_longpacket,transmit_long
+	inject mod,5
+	branch transmit_stuff
+transmit_long:	
+	inject mod,13
+transmit_stuff:
+	deposit loopcnt
+	branch transmit_end,blank
+	fetch 2,mem_txptr
+	iforce contr
+transmit_stuff_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop transmit_stuff_loop
+//	branch transmit_end
+
+transmit_end:
+	enable enable_parity
+	inject mod,16
+	disable enable_parity
+	call set_wait_ack
+	fetch 1,mem_state_map
+	bbit0 smap_edr,end_of_packet
+	force 0,pdata
+	inject mod,6				/* edr trailer */
+	branch end_of_packet
+
+
+transmit_loopback:
+	bpatch patch0f_2,mem_patch0f
+	bmark1 mark_longpacket,transmit_loopback_long
+transmit_loopback_short:
+	fetch 1,mem_lch_code
+	inject mod,3						/* LLID and FLOW */
+	fetch 1,mem_len	/* take packet length */
+	iforce regc
+	inject mod,5
+	branch transmit_loopback_cont
+transmit_loopback_long:
+	fetch 1,mem_lch_code
+	inject mod,3						/* LLID and FLOW */
+	fetch 2,mem_len	/* take packet length */
+	iforce regc
+	inject mod,13
+transmit_loopback_cont:
+	arg mem_rxbuf,contr
+transmit_loopback_loop:	
+	copy regc,null
+	branch transmit_loopback_end,zero
+	ifetch 1,contr
+	inject mod,8
+	increase -1,regc
+	branch transmit_loopback_loop
+transmit_loopback_end:
+	fetch 2,mem_tst_pktcnt_dmh
+	increase 1,pdata
+	store 2,mem_tst_pktcnt_dmh
+	branch transmit_end
+	
+
+apply_switch_clke:
+	fetch 4,mem_clke_bt
+	add pdata,7,rega
+	fetch 2,mem_slot_offset
+	nbranch apply_switch_nozero,blank
+	increase -3,rega
+	branch apply_switch_wait_loop
+apply_switch_nozero:
+	mul32 pdata,12,pdata
+	hfetcht 2,core_halfslot
+	increase 1,temp
+apply_switch_loop:
+	isub temp,pdata
+	nbranch apply_switch_bt,positive
+	increase -1,rega
+	branch apply_switch_loop
+apply_switch_bt:
+	sub pdata,0,pdata
+apply_switch_wait_loop:
+	until null,oneslot
+	compare 0,clkn_bt,3
+	nbranch apply_switch_wait_loop,true
+	iforce clke_rt
+	copy rega,clke_bt
+	iforce clke_rt
+	rtn
+	
+
+calc_slot_offset:
+	bpatch patch0f_3,mem_patch0f
+	until null,halfslot
+	deposit clke
+	iforce contr
+	rshift16,pdata,pdata
+	isub clkn_bt,loopcnt
+	and_into 3,loopcnt			/* bt portion */
+	nbranch calc_bt_portion,zero
+	force 0,pdata
+	branch calc_skip_bt
+calc_bt_portion:
+	arg 3750,temp
+	force 0,pdata
+calc_slot_offset_loop:
+	iadd temp,pdata
+	loop calc_slot_offset_loop
+calc_skip_bt:
+	iadd contr,pdata			/* add rt portion */
+	div pdata,12
+	call wait_div_end
+	quotient pdata
+	store 2,mem_slot_offset
+	rtn
+
+calc_clke_offset:
+	bpatch patch0f_4,mem_patch0f
+	deposit clke
+	copy clkn,temp
+	isub temp,null
+	nsetflag positive,44,pdata
+	isub temp,temp
+	setarg 3750
+	isolate0 15,temp
+	branch calc_clke_pos,true
+	setarg -61786
+	iadd temp,temp
+calc_clke_pos:
+	storet 6,mem_le_clk_offset
+	rtn le
+	storet 6,mem_clk_offset
+	rtn
+
+calc_clke:
+	disable clknt
+	fetch 6,mem_le_clk_offset
+	branch calc_clke2,le
+	fetch 6,mem_clk_offset
+calc_clke2:
+	iadd clkn,alarm
+	increase 10,alarm
+	setarg 3750
+	isub alarm,pdata
+	isolate0 15,pdata
+	branch calc_clke_pos_adj,true
+	setarg 0xf15a
+	iadd alarm,alarm
+calc_clke_pos2:
+	copy alarm,clke
+	rtn
+calc_clke_pos_adj:		/* add 2 clock */
+	force 0,null
+	branch calc_clke_pos2
+	
+/******************************************/
+/********* RF related functions ***********/
+/******************************************/
+
+
+calc_radio_freq:
+	bpatch patch0f_5,mem_patch0f
+	call set_sync_on
+	copy bt_clk,pdata
+	and_into 0x180,pdata
+	compare 3,freq_mode,0x07
+	nbranch freq_not_connection,true    /* don't do the hack if not in connection */
+	rshift3 pdata,pdata
+	iadd freq_index,pdata
+	branch do_hop_mod_now
+freq_not_connection:	
+	copy freq_index,pdata
+do_hop_mod_now:
+	div pdata,79
+	pulse recalc         /* now is good time to recalc id */
+	call wait_div_end
+	remainder rega
+	add rega,-40,temp
+	branch odd_half,positive
+	lshift rega,temp
+	branch freq_result
+odd_half:
+	lshift temp,temp
+	increase 1,temp
+freq_result:	
+	bpatch patch0f_6,mem_patch0f
+	fetch 1,mem_mode
+	bbit0 afh_change,afh_process_con
+afh_process_0:	
+	fetch 4, mem_afh_instant   
+	isub bt_clk, null
+	branch afh_process_con,positive
+	call afh_clear
+	fetch 1,mem_afh_new_mod
+	rtn blank
+	fetch 1,mem_mode
+	set1 afh_enable,pdata
+	store 1,mem_mode
+	fetch 5,mem_afh_map_new
+	store 5,mem_afh_map_lo
+	ifetch 5,contr
+	store 5,mem_afh_map_hi
+	call afh_process_freq_map
+afh_process_con:
+	fetch 1,mem_mode
+	rtnbit0 afh_enable
+	isolate1 1,bt_clk
+	branch afh_same_channel,true	/* at odd slot, use the same as last even */
+	rshift3 temp,rega
+	and temp,7,queue
+	setarg mem_afh_map_lo  
+	iadd rega, rega
+	ifetch 1, rega
+	qisolate0 pdata
+	branch afh_process_1,true		/* not in map, do afh */
+	deposit temp
+	branch afh_process_end
+afh_process_1:
+	fetch 1, mem_afh_used
+	iforce regb                     
+	deposit bt_clk
+	and_into 0x180, pdata
+	rshift3 pdata,pdata
+	iadd freq_index,pdata
+	idiv regb
+	setarg mem_afh_map     
+	call wait_div_end
+	remainder rega
+	iadd rega,contr
+	ifetch 1,contr
+afh_process_end:	
+	store 1,mem_afh_index
+	iforce temp  
+  	rtn
+
+afh_same_channel:
+	fetch 1, mem_afh_index           /* last afh index  */
+	iforce temp
+	rtn
+
+afh_clear:
+	fetch 1,mem_mode
+	set0 afh_enable,pdata
+	set0 afh_change,pdata
+	store 1,mem_mode
+	rtn
+/*
+fixed_frequency:
+	fetcht 1,mem_fixed_freq
+	rtn
+*/
+afh_process_freq_map:
+	bpatch patch0f_7,mem_patch0f
+	arg mem_afh_map,contw
+	force 10,loopcnt
+	call memset0
+	arg mem_afh_map,contw
+	force 0,regC
+	force 2,queue
+process_freq_3:	
+	fetch 5,mem_afh_map_lo
+	iforce temp
+	compare 2,queue,0xff
+	branch process_freq_1,true
+	rshift temp,temp
+process_freq_1:	
+	isolate0 0,temp
+	branch process_freq_0,true
+	deposit regC
+	istore 1,contw
+process_freq_0:
+	rshift2 temp,temp
+	increase 2,regC
+	compare 40,regC,0xfe
+	nbranch process_freq_2,true
+	fetch 5,mem_afh_map_hi
+	iforce temp
+	compare 2,queue,0xff
+	branch process_freq_2,true
+	rshift temp,temp
+process_freq_2:	
+	sub regC,78,null
+	branch process_freq_1,positive
+	force 1,regC
+	increase -1,queue
+	nbranch process_freq_3,zero
+	arg mem_afh_map,rega
+	deposit contw
+	isub rega,pdata
+	store 1,mem_afh_used
+	rtn
+
+rx_radio_freq:
+	bpatch patch10_0,mem_patch10
+	call calc_radio_freq
+	fetch 1,mem_debug_config
+	bbit0 debug_rx_fixed_freq,rx_radio_freq_now
+	fetcht 1,mem_rx_fixed_freq
+rx_radio_freq_now:
+	branch set_freq_rx
+	
+
+tx_radio_freq:
+	bpatch patch10_1,mem_patch10
+	call calc_radio_freq
+	fetch 1,mem_debug_config
+	bbit0 debug_tx_fixed_freq,tx_radio_freq_now
+	fetcht 1,mem_tx_fixed_freq
+tx_radio_freq_now:
+	branch set_freq_tx
+	
+
+fetch_giac:
+	force 0,uap
+	fetch 3,mem_glap
+	iforce lap
+	rtn
+
+fetch_page_bt_adr:
+	bpatch patch10_2,mem_patch10
+	fetch 1,mem_hci_puap
+	icopy uap
+	fetch 3,mem_hci_plap
+	icopy lap
+	rtn
+
+fetch_self_bt_adr:
+	bpatch patch10_3,mem_patch10
+	fetch 2,mem_nap
+	icopy nap
+	fetch 1,mem_uap
+	icopy uap
+	fetch 3,mem_lap
+	icopy lap                 /* copy self_adr,bt_adr */      /* use own address */
+	rtn
+
+fetch_extm_bt_adr:
+	bpatch patch10_4,mem_patch10
+	fetch 2,mem_pnap
+	icopy nap
+	fetch 1,mem_puap
+	icopy uap
+	fetch 3,mem_plap
+	icopy lap         
+	rtn
+
+
+fetch_diac:
+	bmark1 mark_all_diac,fetch_diac_do
+	rtnmark0 mark_inquiry_state
+	rtnmark0 mark_periodical_diac
+fetch_diac_do:
+	and_into -256,lap
+	pulse recalc
+	nop 32
+	rtn
+
+
+shutdown_radio:
+	bpatch patch10_5,mem_patch10
+	branch shutdown_radio0,is_rx
+	jam 0xd4, rf_tx_pa_ib
+	nop 4
+	jam 0xd2, rf_tx_pa_ib
+	nop 4
+	jam 0xd1, rf_tx_pa_ib
+	nop 4	
+	fetch 1,mem_tx_power
+	beq TX_POWER_0DB,shutdown_radio_0db
+	beq TX_POWER_3DB,shutdown_radio_3db
+	beq TX_POWER_5DB,shutdown_radio_5db
+	beq TX_POWER_f3DB,shutdown_radio_f3db
+	beq TX_POWER_f5DB,shutdown_radio_f5db
+	beq TX_POWER_PAIR,shutdown_radio_pair
+shutdown_radio_5db:	
+shutdown_radio_0db:
+	jam 0xd0, rf_tx_pa_ib
+	jam 0xe0, rf_tx_pa_gc
+shutdown_radio0:
+	force 0,radio_ctrl
+	disable is_rx
+	disable is_tx
+	pulse packet_end
+	jam 0x0,rfen_mdm
+	jam 0x0,rfen_tx
+	jam 0x0,rfen_rx
+	jam 0,rfen_sn
+	jam 0x70,rfen_msc
+	jam 0x0,rfen_adc
+	rtn
+	
+shutdown_radio_pair:
+shutdown_radio_f5db:
+shutdown_radio_f3db:
+shutdown_radio_3db:
+	jam 0xd0,rf_tx_pa_ib
+	jam 0xc0,rf_tx_pa_gc
+	branch shutdown_radio0
+
+set_sync_on:
+	bpatch patch10_6,mem_patch10
+	jam 0x0,rfen_mdm					/* if called from tx or rx */
+	jam 0x0,rfen_tx
+	jam 0x18,rfen_rx
+	jam 0xa7,rfen_sn
+	jam 0x7f,rfen_msc
+	rtn
+
+set_freq_rx:
+	bpatch patch10_7,mem_patch10
+		/* IF is +2MHz */
+	storet 1,mem_last_freq
+	add temp,rx_freq_offset,rega			/* index to frequency */
+	jam 0x07,rf_balun_ctrim                                         /*Max added, for best sensitivity*/
+	branch rf_write_freq
+rf_rx_enable:
+	bpatch patch11_0,mem_patch11
+	jam 0xcf,rfen_tx
+	nop 10					/* wait adc clk48 ready */
+	jam 0xff,rfen_rx
+	jam 0xaf,rfen_sn
+	jam 0xff,rfen_msc
+	nop 10
+	jam 0xa0,rfen_mdm
+	rtn
+	
+set_freq_tx_offset:
+	fetch 1,mem_250k_freq_enable	//default: 0
+	branch set_freq_tx_2M_offset,blank
+set_freq_tx_0M_offset:
+	add temp,2,rega			//250k
+	rtn
+set_freq_tx_2M_offset:
+	add temp,0,rega			// bt 2M Medium Frequency
+	rtn
+
+set_freq_tx:
+	bpatch patch11_1,mem_patch11
+	storet 1,mem_last_freq
+	call set_freq_tx_offset
+	call rf_write_freq
+	setarg param_pll_setup
+	call sleep
+txon:	
+	jam 0x1,rfen_adc
+	jam 0x3c,rfen_rx
+	jam 0xe0,rfen_tx
+	jam 0x12,rf_balun_ctrim
+	nop 10
+	jam 0x01,rfen_mdm
+	jam 0x3d,rfen_mdm
+	nop 10
+	jam 0xb7,rfen_sn
+	nop 10
+	jam 0x7f, rfen_mdm
+txon_power_select:	
+	fetch 1,mem_tx_power
+	beq TX_POWER_0DB,set_tx_power_0db
+	beq TX_POWER_3DB,set_tx_power_3db	
+	beq TX_POWER_5DB,set_tx_power_5db
+	beq TX_POWER_f3DB,set_tx_power_f3db	
+	beq TX_POWER_f5DB,set_tx_power_f5db
+	beq TX_POWER_PAIR,set_tx_power_pair
+set_tx_power_0db:	
+	jam 0xf0,rf_tx_pa_gc
+	call txon_common
+	jam 0xd8,rf_tx_pa_ib
+	rtn
+
+set_tx_power_3db:
+	jam 0xdf,rf_tx_pa_gc
+	call txon_common
+	jam 0xdf,rf_tx_pa_ib
+	rtn
+
+set_tx_power_5db:
+	jam 0xff,rf_tx_pa_gc
+	call txon_common
+	jam 0xdf,rf_tx_pa_ib
+	rtn
+set_tx_power_f3db:
+	jam 0xce,rf_tx_pa_gc
+	call txon_common
+	jam 0xd8,rf_tx_pa_ib
+	rtn
+
+set_tx_power_f5db:
+	jam 0xcb,rf_tx_pa_gc
+	call txon_common
+	jam 0xd8,rf_tx_pa_ib
+	rtn
+
+set_tx_power_pair:
+	jam 0xd0,rf_tx_pa_ib
+	jam 0xc0,rf_tx_pa_gc
+	jam 0x4c,0x8957
+	jam 0x6c,0x8958
+	jam 0x50,0x8959
+	rtn
+
+txon_common:
+	nop 4
+	jam 0xd1,rf_tx_pa_ib
+	nop 4
+	jam 0xd2,rf_tx_pa_ib
+	nop 4
+	jam 0xd4,rf_tx_pa_ib
+	rtn
+
+
+initialize_radio:
+	jam clksel_rc,core_clksel
+initialize_radio_wait:
+	fetch 2,mem_rf_init_ptr
+	bbit0 14,initialize_radio_wait
+	iforce contr
+	arg 0x8900,temp
+initialize_radio_loop:
+	ifetch 1,contr
+	beq 0xff,initialize_radio_cont
+	ior temp,contw
+	ifetch 1,contr
+	istore 1,contw
+	branch initialize_radio_loop
+initialize_radio_cont:
+	bpatch patch11_2,mem_patch11
+	call lpm_cal_xtal_startup
+	call switchto_dpllclk
+//	ncall check_dpll,wake
+	setarg param_dpll_start_delay
+	iadd clkn_bt,pdata
+	store 4,mem_dpll_clkn
+	set1 RESET,radio_ctrl
+	force 0,radio_ctrl
+	ncall do_rccal,wake
+	branch set_rccal
+
+	/* rega is frequency, 00=2400Mhz */
+rf_write_freq:
+	bpatch patch11_3,mem_patch11
+	setarg 2400
+	iadd rega,temp
+	fetch 1,mem_fcomp_mul
+	jam 0x04,rf_pll_rstn
+	imul32 temp,pdata
+	fetcht 1,mem_fcomp_div
+	idiv temp
+	call wait_div_end
+	quotient rega			/* rega is FLOOR(FVCO/fcomp) */
+	remainder pdata		
+	lshift16 pdata,pdata
+	lshift4 pdata,pdata		/* pdata is frac * 2^20 */
+	idiv temp
+	call wait_div_end
+	quotient pdata		/* pdata is frac *2^20/fcomp */
+	lshift8 pdata,pdata
+	lshift pdata,pdata
+	ior rega,pdata
+	hstore 4,rf_pll_intg
+	jam 0x44,rf_pll_rstn
+	jam 0xc4,rf_pll_rstn
+	rtn
+
+	
+do_rccal:
+	bpatch patch11_4,mem_patch11
+	jam 0x02,rfen_adc
+	setarg 250000
+	call sleep					/* wait clkpll&xtal stable */
+	jam 0x7f,rfen_rx
+	nop 130
+	jam 0x30,rf_rccal_ctrl
+	jam 0xd0,rfen_tx
+	jam 0x70,rf_rccal_ctrl
+	jam 0xf0,rf_rccal_ctrl
+	force 50,loopcnt
+do_rccal_loop:
+	hfetch 1,rf_rccal_result
+	bbit1 5,do_rccal_end
+	loop do_rccal_loop
+do_rccal_end:
+	store 1,mem_rf_rccal
+	jam 0,rfen_tx
+	jam 0,rfen_rx
+	jam 0x00,rfen_adc
+	rtn
+
+set_rccal:
+	bpatch patch11_5,mem_patch11
+	fetch 1,mem_rf_rccal
+	set1 5,pdata
+	hstore 1,rf_rccal_ctrl
+	hfetcht 1,rf_bpf_ctrim
+	and_into 7,temp
+	lshift3 pdata,pdata
+	ior temp,pdata
+	hstore 1,rf_bpf_ctrim
+	hfetch 1,rf_bpf_ib
+	set0 bpf_rccal,pdata
+	hstore 1,rf_bpf_ib
+	hfetch 1,rf_adc_rccal
+	set0 adc_rccal,pdata
+	hstore 1,rf_adc_rccal
+	rtn
+
+save_rssi:
+	bpatch patch11_6,mem_patch11
+	hfetch 2,rf_afc_d2a
+	rshift4 pdata,pdata
+	rshift3 pdata,pdata
+	sub pdata,0,pdata
+bcd:
+	and_into 0xff,pdata
+	div pdata,10
+	call wait_div_end
+	quotient pdata
+	lshift4 pdata,pdata
+	remainder temp
+	ior temp,pdata
+	store 1,mem_rssi			/* bcd value */
+	rtn
+
+	
+switchto_dpllclk:
+	jam clksel_rc,core_clksel
+	hfetch 1,rf_clkpll_frac+2
+	set0 4,pdata
+	set0 5,pdata
+	hstore 1,rf_clkpll_frac+2
+	jam 0x00,rfen_ck
+	jam 0x00,rfen_msc
+	jam 0x70,rfen_msc
+	jam 0xff,rfen_ck
+	hfetch 1,rf_clkpll_frac+2
+	set1 4,pdata
+	set1 5,pdata
+	hstore 1,rf_clkpll_frac+2
+	call init_lpm_ctrl
+	hfetch 1,rf_clkpll_int
+	set1 7,pdata
+	hstore 1,rf_clkpll_int
+	set0 7,pdata
+	hstore 1,rf_clkpll_int
+	set1 7,pdata
+	hstore 1,rf_clkpll_int
+	jam clksel_dpll,core_clksel
+	nop 1
+	jam clksel_xtal,core_clksel
+	hfetch 1,rf_clkpll_frac+2
+	and_into 0xcf,pdata
+	hstore 1,rf_clkpll_frac+2
+	or_into 0x30,pdata
+	hstore 1,rf_clkpll_frac+2
+	rtn
+
+	
+xtal_fast_wake:
+	setarg 0xf0f
+	branch lpm_write_config
+
+init_lpm_ctrl:
+	setarg 0x80f
+	branch lpm_write_config
+
+
+
+start_receiver:
+	bpatch patch11_7,mem_patch11
+	call rf_rx_enable
+	disable is_tx
+	enable is_rx
+	pulse init_encrypt
+	rtn
+
+prep_crypt:
+	bpatch patch12_0,mem_patch12
+	fetch 1,mem_state_map
+	isolate1 smap_encryption,pdata
+	setflag true,0,pdata
+	hstore 1,core_encrypt
+	arg mem_kc,contr
+	ifetch 9,contr
+	iforce kc_ls
+	ifetch 7,contr
+	iforce kc_ms
+	fetch 1,mem_key_size
+	add pdata,-1,g1l
+	pulse kc_p_activate               /* immediately start calculating primary Key */
+	rtn
+	
+wait_access_end:
+	deposit clke
+	store 6,mem_sync_clke
+	disable decode_fec0
+	nbranch shutdown_radio,sync
+	arg param_clke_cal,clke_rt
+	increase 1,clke_bt
+	and_into 0x1fc,clke_bt
+	rtn
+
+
+
+wait_access_mhalfbnd:
+	enable decode_fec0
+wait_access_mhalfbnd_correlate:
+	correlate null,mhalfbnd    /* keep correlating until sync is found, or clke half */
+	branch wait_access_end,sync
+	compare 0x02,clke_bt,0x02
+	nbranch wait_access_mhalfbnd_correlate,true
+	branch wait_access_end
+
+wait_access_clkn_rt:
+	bpatch patch12_1,mem_patch12
+	arg param_conn_access,timeup	/* found sync must occur within this time */
+	enable decode_fec0
+	correlate clkn_rt,meet    /* keep correlating until sync is found, or until clkn_rt timeup */
+	disable decode_fec0
+	nbranch shutdown_radio,sync
+	rtn
+
+wait_access_forever:
+	bpatch patch12_2,mem_patch12
+	enable decode_fec0
+	correlate null,timeout    /* keep correlating until sync is found, or timeout */
+	disable decode_fec0
+	nbranch shutdown_radio,sync
+	arg param_clke_cal,clke_rt
+	and_into 0x1fc,clke_bt
+	rtn
+
+	/* reserve slots for mult-slot packet */
+reserve_slot:
+	bpatch patch12_3,mem_patch12
+	iforce rega
+	deposit bt_clk
+	iadd temp,timeup
+	copy timeup,pdata
+	store 4,mem_next_btclk
+	deposit rega
+	rtn
+
+	/* pdata = clks ahead of bt_clk */
+ahead_window:
+	copy pdata,temp
+	bpatch patch12_4,mem_patch12
+	copy temp,pdata
+	call clk2bt
+	lshift16 bt_clk,pdata
+	set1 44,pdata
+	call clk_diff
+	set0 44,pdata
+	call get_clk
+	call clk_diff
+	rtn user
+	call clk2rt
+	iforce stop_watch
+	until null,timeout
+	rtn
+
+
+setup_clk:
+	bpatch patch12_5,mem_patch12
+	branch setup_clkn,clknt
+	until clke_rt,meet
+skip_setup_clke:
+	copy clke_bt,temp
+	branch setup_clknbt
+setup_clkn:
+	branch skip_setup_clkn,attempt
+	until clkn_rt,meet
+skip_setup_clkn:
+	copy clkn_bt,temp
+setup_clknbt:
+	branch setup_clk11,user
+	compare 1,temp,3
+	nbranch setup_clk,true
+setup_complete:
+	bpatch patch12_6,mem_patch12
+	fetch 1,mem_state
+	rtnbit0 state_inconn
+	fetch 4,mem_next_btclk
+	isub temp,pdata
+	nrtn positive
+	sub pdata,0xff,null
+	branch setup_clk,positive
+	rtn
+setup_clk11:
+	compare 3,temp,3
+	nbranch setup_clk,true
+	branch setup_complete
+
+rf_setup_time:
+	bpatch patch12_7,mem_patch12
+	arg param_rf_setup,timeup
+	branch setup_clk
+	
+rf_setup_time_slave_slot:
+	disable user
+	branch rf_setup_time
+
+rf_setup_time_master_slot:
+	enable user
+	branch rf_setup_time
+	
+start_transmitter:
+	bpatch patch13_0,mem_patch13
+	call prep_crypt
+	disable is_rx
+	enable is_tx
+	rtn
+
+
+
+start_tx_native:
+	bpatch patch13_1,mem_patch13
+	arg param_tx_setup,timeup
+	until clkn_rt,meet         /* wait until start_tx time */
+	pulse init_encrypt
+	rtn
+
+start_rx_native:
+	bpatch patch13_2,mem_patch13
+	arg param_rx_setup,timeup
+	until clkn_rt,meet
+	rtn
+
+
+start_tx_external:
+	bpatch patch13_3,mem_patch13
+	arg param_tx_setup,timeup
+	until clke_rt,meet         /* wait until start_tx time */
+	pulse init_encrypt
+	rtn
+
+send_access_word:
+	bpatch patch13_4,mem_patch13
+	preload access          /* load in access word ready to be sent */
+	enable encode_fec0
+	set1 TXGFSK,radio_ctrl
+	inject mod,72
+	disable encode_fec0
+	rtn
+
+
+scan_mode_whiten:
+	copy xin,temp
+	or_into 0x60,temp                /* extend xin with 5->1, 6->1 */
+	copy temp,white_init
+	rtn
+
+
+
+	/* return blank if free amaddr is found */
+get_free_amaddr:
+	bpatch patch13_5,mem_patch13
+	fetch 1,mem_current_amaddr
+	increase 1,pdata
+	bne param_esco_addr,get_free_amaddr_cont
+	force 1,pdata
+get_free_amaddr_cont:
+	store 1,mem_current_amaddr
+	iforce am_addr
+	rtn
+
+get_clk:
+	copy clkn,temp
+	rtn master
+	copy clke,temp
+	rtn
+
+get_clkbt:
+	deposit clkn_bt
+	rtn master
+	deposit clke_bt
+	rtn
+
+
+supervision_update:
+	bpatch patch13_6,mem_patch13
+	fetcht 4,mem_supervision_timer
+	call get_clkbt
+	isub temp,timeup					/* and to 28 bits */
+	deposit timeup
+	fetcht 2,mem_supervision_to
+	lshift temp,temp
+	isub temp,pdata
+	rtn
+	
+supervision_flush:
+	bpatch patch13_7,mem_patch13
+	call get_clkbt
+	store 4,mem_supervision_timer
+	rtn
+
+assert:
+	bpatch patch14_0,mem_patch14
+	branch assert
+	
+loop:
+	branch loop
+
+sleep:	
+	rtn blank
+	/* sleep pdata clocks, only even clocks are accurate */
+	rshift pdata,pdata
+	increase -3,pdata
+sleep_loop:	
+	increase -1,pdata
+	nbranch sleep_loop,zero
+	force 0,pdata
+	rtn
+
+
+
+init_param:
+	/* clear specified sched ram */
+	arg 0x10,loopcnt
+	arg 0,contw
+	call memset0
+	arg mem_le_state,contw
+	arg 10,loopcnt
+	call memset0
+	jam 0,mem_sp_calc
+	jam 0,mem_fifo_temp
+	jam 0,mem_le_testtype
+	jam 0,mem_debug_config
+	jam 0,mem_lmp_conn_state
+	bpatch patch14_1,mem_patch14
+	jam 0,mem_connection_options
+	jam 0,mem_tester_emulate
+	jam 0,mem_tester_cnt
+	setarg param_glap
+	store 3,mem_glap
+	setarg param_acl_pktlen
+	store 2,mem_acl_pktlen
+	jam param_sco_pktlen,mem_sco_pktlen
+	jam param_acl_pktcnt,mem_acl_pktcnt
+	jam param_sco_pktcnt,mem_sco_pktcnt
+	setarg param_hci_version
+	store 3,mem_hci_version
+//	setarg param_lmp_version
+//	store 3,mem_lmp_version
+//	setarg param_lmp_subversion
+//	store 2,mem_lmp_subversion
+	jam 0x60,mem_fhs_misc		/* R1 for 1.28s ps interval,P2 */
+	jam param_max_slot,mem_max_slot
+	jam 0x02,mem_fw_ver		/* set firmware version */
+ifdef SIMPLE_PAIRING
+	fetch 1,mem_ssp_enable
+	ncall init_memp,blank
+endif
+ifdef SECURE_CONNECTION
+	fetch 1,mem_le_secure_connect_enable
+	ncall init_memp_256,blank
+endif
+	bpatch patch14_2,mem_patch14
+	rtn wake
+	setarg 0
+	store 2,mem_tx_len
+	rshift clkn_bt,pdata
+	store 4,mem_last_clkn
+	rtn
+
+
+
+
+/*****************************************LPO************************************************/
+
+lpmstate:
+	setarg 0xee21
+	hstore 2,core_clkoff			// disable unused peripherals
+	hfetch 4,core_gpio_in
+	store 4,mem_saved_gpio_in
+	hfetch 1,core_lpm_ldocnt
+	store 1,mem_wakup_from_power_flag
+	bbit0 gpio_latch,loadcode		// power up boot
+	enable wake
+	bbit0 cold_wake,lpmwake		
+	disable wake
+	deposit auxcnt
+	nbranch lpmwake,blank		// sleep interrupted, wakeup
+	hfetch 1,core_lpm_ctrl + 3
+	bbit1 reload_code,lpmwake
+	arg param_hibernate_clks,temp
+	branch lpm_enter_sleep
+lpmwake:
+	hfetch 3,core_lpm_xtalcnt
+	hstore 3,core_lpm_reg
+	ifetch 1,contr
+	or_into isogate_mask,pdata		// open all isolation gate&power switch
+	istore 1,contw
+	call lpm_write_ctrl2
+	hfetch 1,core_lpm_isogate
+	set1 enable_retmem,pdata
+	hstore 1,core_lpm_isogate
+	call lpm_write_ctrl2
+	call lpm_load_context,wake
+	hfetch 1,core_lpm_reg+2
+	set0 gpio_latch,pdata			// enable gpio fuction
+	hstore 1,core_lpm_reg+2
+	call lpm_write_ctrl2
+	nbranch loadcode,wake		// wakeup from hibernate
+	rtnmark0 mark_otp_encrypt
+	jam lock_otp,core_misc_ctrl	// disable further read/write of key
+	rtn 
+
+lpm_load_context:
+	fetch 1,mem_saved_spidctrl
+	hstore 1,core_spid_ctrl
+	fetch 3,mem_saved_gsel
+	hstore 3,core_gpio_sel
+	fetch 4,mem_saved_gpio+4
+	hstore 4,core_gpio_out0
+	fetch 4,mem_saved_gpio
+	hstore 4,core_gpio_oe0
+	fetch 8,mem_saved_gpio+8
+	hstore 8,core_gpio_pu0	
+	fetch 8,mem_saved_mark
+	iforce mark
+	hfetch 8,core_gpio_wakeup_low
+	store 8,mem_gpio_wakeup_low
+	call load_ucode
+	rtn
+
+lpm_save_context:
+	deposit mark
+	store 8,mem_saved_mark
+	hfetch 8,core_gpio_oe0
+	store 8,mem_saved_gpio
+	ifetch 8,contr
+	istore 8,contw
+	hfetch 3,core_gpio_sel
+	store 3,mem_saved_gsel
+	hfetch 1,core_spid_ctrl
+	store 1,mem_saved_spidctrl
+	branch lpm_write_gpio_wakeup
+
+lpo_calibration:
+	hfetch 1,core_bist_ctrl
+	nbranch lpo_cal_inited,blank
+	fetch 3,mem_clks_per_lpo
+	nrtn blank
+	jam 0xc0,core_bist_ctrl
+	jam ccnt_start,core_misc_ctrl
+lpo_cal_inited:
+	hfetch 1,core_perf_status
+	rtnbit0 1
+	hfetch 3,core_clk_counter
+	store 3,mem_clks_per_lpo
+	rtn
+
+
+	/* temp is synced clke */
+lpm_adjust_clk:
+	bpatch patch14_3,mem_patch14
+	deposit clke
+	call clk_diff_rt
+	fetcht 4,mem_sleep_counter_all
+	sub temp,0xff,null
+	rtn positive				// interval too small
+	lshift8 pdata,pdata
+	lshift4 pdata,pdata
+	idiv temp
+	call wait_div_end
+	quotient pdata
+	arg param_lpm_adjmax,temp
+	call ceiling
+	store 1,mem_lpm_adjust
+	nbranch lpm_adjust_positive,user
+	sub pdata,0,pdata
+lpm_adjust_positive:
+	fetcht 3,mem_clks_per_lpo
+	iadd temp,pdata
+	store 3,mem_clks_per_lpo
+lpm_clear_counter:
+	setarg 0
+	store 4,mem_sleep_counter_all
+	rtn
+
+
+	/* temp is lpo counter for doze */
+lpm_doze:
+	fetch 1,mem_lpm_config+2
+	set1 reload_code,pdata
+	store 1,mem_lpm_config+2
+	branch lpm_hibernate_normal
+	
+
+	/* no retention memory at all */
+lpm_hibernate:
+	arg param_hibernate_clks,temp
+	fetch 1,mem_lpm_config+1
+	set0 7,pdata					/* lowest lpo */
+	store 1,mem_lpm_config+1
+lpm_hibernate_normal:
+	bpatch patch14_4,mem_patch14
+	call lpm_write_gpio_wakeup
+	fetch 1,mem_lpm_hibernate_switch
+	store 1,mem_lpm_xtalcnt + 4
+	fetch 1,mem_lpm_xtalcnt + 2
+	set1 cold_wake,pdata
+	store 1,mem_lpm_xtalcnt + 2
+
+	/* temp is lpo clocks to sleep */
+lpm_sleep:
+	bpatch patch14_5,mem_patch14
+	call xtal_fast_wake
+	fetch 4,mem_sleep_counter_all
+	iadd temp,pdata
+	store 4,mem_sleep_counter_all
+	call lpm_save_context
+	fetch 5,mem_lpm_xtalcnt
+	hstore 4,core_lpm_reg
+	rshift32 pdata,rega
+	until null,lpo_edge
+	deposit clkn
+	store 6,mem_sleep_clkn
+	jam lpmreg_sel_ctrl2,core_lpm_wr
+	until null,lpo_edge
+	until null,lpo_edge
+	deposit rega
+	hstore 1,core_lpm_isogate
+	jam lpmreg_sel_ctrl2,core_lpm_wr
+lpm_enter_sleep:
+	until null,lpo_edge
+	until null,lpo_edge
+	hstoret 4,core_lpm_reg
+	jam lpmreg_sel_counter,core_lpm_wr
+	until null,never
+
+
+
+
+lpm_recover_clk:
+	bpatch patch14_6,mem_patch14
+	setarg 0
+	copy auxcnt,null
+	branch lpm_recover_timeout,zero
+	hfetch 1,core_lpm_xtalcnt
+	hfetcht 1,core_lpm_buckcnt
+	isub temp,null
+	branch lpm_recover_xtal,positive
+	deposit temp
+lpm_recover_xtal:
+	isub auxcnt,pdata
+	increase 1,pdata
+lpm_recover_timeout:
+	increase 8,pdata
+	until null,lpo_edge
+	iadd lpo_time,pdata
+	fetcht 4,mem_sleep_counter
+	iadd temp,pdata
+	fetcht 3,mem_clks_per_lpo
+	imul32 temp,pdata
+	rshift8 pdata,pdata
+	rshift4 pdata,pdata
+	increase param_lpm_fix,pdata
+	arg 3750,temp
+	idiv temp
+	call wait_div_end
+	quotient pdata
+	lshift16 pdata,pdata
+	remainder temp
+	ior temp,pdata
+	fetcht 6,mem_sleep_clkn
+	call clk_add
+	copy temp,clkn
+	fetch 6,mem_context + coffset_clk_offset
+	call calc_clke2
+	deposit clke
+	store 6,mem_pdatatemp
+	deposit auxcnt
+	istore 1,contw
+	hfetch 1,core_gpio_in1
+	or_into 0xf0,pdata
+	istore 1,contw
+	rtn
+	
+lpm_dispatch:
+	bpatch patch14_7,mem_patch14
+	call lpo_calibration
+	fetch 3,mem_clks_per_lpo
+	rtn blank
+	fetch 1,mem_lpm_mode
+	rtn blank
+	fetch 1,mem_ssp_enable
+	branch lpm_dispatch_next,blank
+	fetch 1,mem_sp_local_key_invalid	// simple pairing is not ready
+	rtn blank
+lpm_dispatch_next:
+	fetch 1,mem_le_sc_calc
+	nrtn blank	
+	call lpm_check_wake_lock
+	nrtn blank
+	fetch 1,mem_context
+	compare 3,pdata,0x7							/* sco won't sleep */
+	nbranch lpm_dispatch_unconn,true
+	fetch 2,mem_context + coffset_tsniff
+	rtn blank										/* role switch */
+	rtn wake
+	bpatch patch15_0,mem_patch15
+lpm_dispatch_next2:
+	fetcht 1,mem_lpm_current_mult
+	fetch 2,mem_context + coffset_tsniff
+	imul32 temp,pdata
+	rshift4 temp,temp
+	rshift2 temp,temp
+	isub temp,pdata
+	fetcht 4,mem_context + coffset_sniff_anchor
+	iadd temp,pdata
+	fetcht 1,mem_lpm_overhead
+	isub temp,pdata
+	lshift16 pdata,alarm
+	bpatch patch15_1,mem_patch15
+	fetch 2,mem_context + coffset_rx_window
+	rshift pdata,pdata
+	call clk2bt
+	deposit alarm
+	call clk_diff
+	copy clke,temp
+	call clk_diff_rt
+	rtn user
+lpm_dispatch_sleep:
+	call clk2lpo
+lpm_dispatch_lpo:
+	bpatch patch15_2,mem_patch15
+	fetch 1,mem_lpm_xtalcnt
+	isub temp,null
+	branch lpm_clear_counter,positive
+	storet 4,mem_sleep_counter
+	call app_will_enter_lpm
+	call l2cap_lpm_save_txbuf
+	fetcht 4,mem_sleep_counter
+	branch lpm_sleep
+	
+lpm_dispatch_unconn:
+	bpatch patch15_3,mem_patch15
+	fetch 1,mem_context
+	rtnbit1 state_inconn					// wont sleep in connection
+	rtnbit1 state_inpage					// wont sleep when paging
+	fetch 1,mem_ssp_enable
+	branch lpm_unconn_nossp,blank
+	fetch 1,mem_sp_local_key_invalid	// simple pairing is not ready
+	rtn blank
+lpm_unconn_nossp:
+	bpatch patch15_4,mem_patch15
+	fetch 1,mem_le_adv_enable
+	nbranch lpm_unconn_cont,blank
+	fetch 1,mem_scan_mode
+	rtn blank
+lpm_unconn_cont:
+	fetch 2,mem_lpm_interval
+	rtn blank
+lpm_sleep_btclk:
+	fetcht 1,mem_lpm_overhead
+	isub temp,pdata
+	arg 7500,temp				/* 1.25ms */
+	imul32 temp,pdata
+	branch lpm_dispatch_sleep
+
+lpm_set_mult:
+	bpatch patch15_5,mem_patch15
+	disable wake
+	fetch 1,mem_state
+	rtnbit0 state_insniff
+	nbranch lpm_not_match,match
+	call lpm_match
+	fetch 2,mem_rx_window_sniff
+	store 2,mem_rx_window
+	fetch 1,mem_arq
+	bbit1 wack,lpm_mult_short
+	bmark0 mark_lpm_mult_enable,lpm_mult_short
+	call l2cap_malloc_is_fifo_empty
+	nbranch lpm_mult_short,blank
+	fetch 1,mem_classic_bt_flag
+	bbit1 SHORT_MULT_FLAG,lpm_mult_short
+lpm_mult_wait_timeout:
+	jam 0,mem_lpm_current_mult
+	bmark0 mark_lpm_mult_enable,lpm_mult_short
+	fetch 1,mem_lpm_mult_cnt
+	branch lpm_mult_long,blank
+	increase -1,pdata
+	store 1,mem_lpm_mult_cnt
+	rtn
+
+
+classic_bt_set_mult_short_flag:
+	arg SHORT_MULT_FLAG,queue
+	branch classic_bluetooth_set_flag
+	
+classic_bt_clr_mult_short_flag:
+	arg SHORT_MULT_FLAG,queue
+	branch classic_bluetooth_clr_flag
+
+
+
+lpm_match:
+	jam 0,mem_sniff_unint_lost
+	fetch 3,mem_sniff_rcv
+	increase 1,pdata
+	store 3,mem_sniff_rcv
+	rtn
+
+lpm_not_match:
+	bpatch patch15_6,mem_patch15
+	fetcht 2,mem_rx_window_sniff
+	rshift temp,temp
+	fetch 2,mem_rx_window
+	iadd temp,pdata
+	store 2,mem_rx_window
+lpm_lost:
+	jam 0,mem_lpm_current_mult
+	fetch 3,mem_sniff_lost
+	increase 1,pdata
+	store 3,mem_sniff_lost
+	fetch 1,mem_sniff_unint_lost
+	increase 1,pdata
+	store 1,mem_sniff_unint_lost
+	rtn
+
+lpm_mult_short:
+	jam 0,mem_lpm_current_mult
+	fetch 1,mem_lpm_mult_timeout
+	store 1,mem_lpm_mult_cnt
+	rtn
+
+lpm_mult_long:
+	fetcht 1,mem_lpm_mult
+	storet 1,mem_lpm_current_mult
+	rtn
+
+lpm_cal_xtal_startup:
+	bpatch patch15_7,mem_patch15
+	fetch 1,mem_lpm_xtalcnt
+	nrtn blank
+	jam clksel_rc,core_clksel
+	setarg 0xf0c
+	call lpm_write_config
+	setarg 200000
+	call sleep
+	until null,lpo_edge
+	copy lpo_time,alarm
+	call xtal_fast_wake
+	jam clksel_xtal,core_clksel
+	nop 10
+	until null,lpo_edge
+	deposit lpo_time
+	isub alarm,pdata
+	increase 0x30,pdata
+	arg 0xff,temp
+	call ceiling
+	store 1,mem_lpm_xtalcnt
+	nop 30000
+	nop 30000
+	nop 30000	
+	rtn
+
+lpm_cal_xtal_startup_by_snooze:
+	fetch 1,mem_lpm_xtalcnt
+	nrtn blank
+	jam 0xff,core_xtal_stable_time
+	jam clksel_rc,core_clksel
+	call xtal_fast_wake
+	setarg 1000
+	iadd lpo_time,alarm
+	snooze
+	deposit lpo_time
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	nop 12000	//delay about 1ms
+	isub alarm,pdata
+	add pdata,0x30,pdata
+	arg 0xff,temp
+	call ceiling
+	store 1,mem_lpm_xtalcnt
+	nop 30000
+	nop 30000
+	nop 30000	//delay 90000 nop
+	rtn
+
+
+
+	/* pdata is lpm_reg[11:0] */
+lpm_write_config:
+	arg 0xfff,contw
+	iand contw,contw
+	fetch 1,mem_lpm_config
+	and_into 0xf0,pdata
+	lshift8 pdata,pdata
+	ior contw,pdata
+	hstore 2,core_lpm_reg
+	ifetch 2,contr
+	istore 2,contw
+
+lpm_write_ctrl:
+	setarg lpmreg_sel_ctrl
+	branch lpm_write
+
+lpm_write_ctrl2:
+	setarg lpmreg_sel_ctrl2
+lpm_write:
+	until null,lpo_edge
+	hstore 1,core_lpm_wr
+	until null,lpo_edge
+	until null,lpo_edge
+	rtn
+
+
+lpm_write_gpio_wakeup:
+	bpatch patch16_0,mem_patch16
+	fetch 4,mem_gpio_wakeup_low
+	hstore 4,core_lpm_reg
+	setarg lpmreg_sel_gpiolow
+	call lpm_write
+	fetch 4,mem_gpio_wakeup_high
+	hstore 4,core_lpm_reg
+	setarg lpmreg_sel_gpiohigh
+	branch lpm_write
+
+lpm_get_wake_lock:
+	fetch 2,mem_lpm_wake_lock
+	qset1 pdata
+	store 2,mem_lpm_wake_lock
+	rtn
+
+lpm_put_wake_lock:
+	fetch 2,mem_lpm_wake_lock
+	qset0 pdata
+	store 2,mem_lpm_wake_lock
+	rtn
+
+
+
+lpm_check_wake_lock:
+	bpatch patch16_1,mem_patch16
+	call app_check_wake_lock
+	fetch 2,mem_lpm_wake_lock
+	copy pdata,rega
+	fetch 1,mem_state_map
+	isolate1 smap_rxlmp,pdata
+	setflag true,wake_lock_lmp_rx,rega
+	fetch 1,mem_lmo_opcode1
+	fetcht 1,mem_lmo_opcode2
+	iadd temp,pdata
+	fetcht 1,mem_lmp_to_send
+	iadd temp,pdata
+	nsetflag blank,wake_lock_lmp_tx,rega
+	fetch 1,mem_le_tx_buff_used
+	nsetflag blank,wake_lock_ble_tx,rega
+	fetch 2,mem_l2cap_rxbuff1_len
+	fetcht 2,mem_l2cap_rxbuff2_len
+	iadd temp,pdata
+	nsetflag blank,wake_lock_l2cap_rx,rega
+	fetch UTIL_FIFO_LEN,mem_ipc_fifo_bt2c51
+	nsetflag blank,wake_lock_ipc_bt2c51,rega
+	fetch UTIL_FIFO_LEN,mem_ipc_fifo_c512bt
+	nsetflag blank,wake_lock_ipc_c512bt,rega
+	fetch 1,mem_hci_cmd
+	nsetflag blank,wake_lock_cmd,rega
+	fetch 1,mem_device_option
+	compare dvc_op_module,pdata,0xff
+	call lpm_uart_wake_lock,true
+	setarg -8
+	iand rega,rega
+	copy rega,pdata
+	store 2,mem_lpm_wake_lock
+	rtn
+
+lpm_uart_wake_lock:
+	hfetch 2,core_uart_rxitems
+	nsetflag blank,wake_lock_uart_rx ,rega
+	hfetch 2,core_uart_txitems
+	nsetflag blank,wake_lock_uart_tx ,rega
+	rtn
+
+lpm_shut_down:
+	hfetch 4,core_lpm_ctrl
+	set0 27,pdata
+	hstore 4,core_lpm_reg
+	call lpm_write_ctrl
+	branch assert
+	
+lpm_disable_exen_output:
+	hfetch 4,core_lpm_xtalcnt
+	set0 20,pdata
+	hstore 4,core_lpm_reg
+	branch lpm_write_ctrl2
+
+check_bt_disabled:
+	fetch 2,mem_chip_functions
+	bbit1 bt_disabled,assert
+	rtn
+check_ble_disabled:
+	fetch 2,mem_chip_functions
+	bbit1 ble_disabled,assert
+	rtn
+check_module_disabled:
+	fetch 2,mem_chip_functions
+	bbit1 module_disable,assert
+	rtn
+
+
+
+
+
+
+
+//p_check_attempt_sniff:
+//	bbit0 state_insco,p_check_attempt_not_sco
+//	fetch 1,mem_current_sniff_attempt
+//	beq 2,p_check_attempt_sniff_restore_sco
+//	fetch 1,mem_arq
+//	bbit1 wack,p_check_attempt_notimeout
+//	bmark0 mark_esco_rxok,p_check_attempt_notimeout
+//p_check_attempt_sniff_restore_sco:
+//	nbranch p_check_attempt_notimeout,master
+//	fetch 1,mem_lmp_to_send
+//	nbranch p_check_attempt_notimeout,blank
+//p_check_attempt_sco_master:
+//	fetch 1,mem_sco_poll
+//	increase -1,pdata
+//	store 1,mem_sco_poll
+//	nbranch check_attempt_nomore,blank
+//	jam param_sco_poll,mem_sco_poll
+//	branch check_attempt_notimeout
+//p_check_attempt_not_sco:
+//	compare type_null,type,0x1f
+//	branch check_timeout,true
+//	compare type_poll,type,0x1f
+//	branch check_timeout,true
+//	branch check_anchor_end
+//p_check_attempt_notimeout:
+//check_atttemp_decrease:
+//	fetch 1,mem_current_sniff_attempt
+//	increase -1,pdata
+//	store 1,mem_current_sniff_attempt
+//	rtn
+//check_timeout:
+//	fetch 1,mem_sniff_timeout_temp
+//	increase 1,pdata
+//	store 1,mem_sniff_timeout_temp
+//check_anchor_end:
+//	fetch 1,mem_current_sniff_attempt
+//	branch check_anchor_end_attempt0,blank
+//	call check_atttemp_decrease
+//	nrtn blank
+//check_anchor_end_attempt0:  
+//	fetch 1,mem_sniff_timeout_temp
+//	fetcht 1,mem_current_sniff_timeout
+//	isub temp,null
+//	branch p_blank,positive
+//	arg 1,pdata
+//	rtn
+//p_blank:
+//	arg 0,pdata
+//	rtn
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/hci_h4.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/hci_h4.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/hci_h4.prog	(working copy)
@@ -0,0 +1,138 @@
+
+ifdef DEBUG_H4LOG_ENABLE
+hci_log:
+	copy regc,pdata
+	rtneq 0x11
+	fetch 1,mem_hci_log
+	increase 1,pdata
+	sub pdata,hci_log_cnt,null
+	branch hci_log_calc_ptr,positive
+	setarg 0
+hci_log_calc_ptr:
+	store 1,mem_hci_log
+	arg hci_log_size,temp
+	imul32 temp,pdata
+	arg mem_hci_log+hci_log_size,contw
+	iadd contw,contw
+hci_log_write_content:
+	fetch 1,mem_hci_log
+	istore 1,contw//counter
+	copy regb,pdata
+	istore 1,contw
+	fetch 2,mem_le_event_count
+	istore 1,contw
+	copy clke_bt,pdata
+	istore 3,contw
+	fetch 1,mem_last_freq
+	istore 1,contw
+	fetch 1,mem_le_rxbuf
+	istore 1,contw
+	rtn
+else
+
+endif
+
+hci_rx_h4:
+	bpatch patch1f_5,mem_patch1f
+	fetch 1,mem_hci_cmd
+	nrtn blank
+hci_rx_h4_1:
+	call hci_h4_parse_packet
+	ncall h4_rx_discard_packet,user
+	rtn
+	
+hci_h4_parse_packet:
+	bpatch patch1f_6,mem_patch1f
+	copy contru,rega
+	arg 4,temp
+	ifetch 1,contru //type
+	beq HCI_H4_TYPE_CMD,hci_h4_parse_packet_wait_len
+	increase 1,temp //acl packet has 2 bytes for length
+	beq HCI_H4_TYPE_ACL,hci_h4_parse_packet_wait_len
+	copy contru,pdata
+	hstore 2,core_uart_rrptr
+	rtn
+hci_h4_parse_packet_wait_len:
+	hfetch 2,core_uart_rxitems
+	isub temp,null
+	nbranch hci_h4_parse_packet_wait_len,positive // while(rxitems >= 4 or 5);
+	//Make sure length has been recieved.
+	disable user
+	copy rega,contru
+	call h4_get_rx_payload_len
+	iadd temp,temp
+hci_h4_parse_packet_wait:
+	hfetch 2,core_uart_rxitems
+	isub temp,null
+	nbranch hci_h4_parse_packet_wait,positive//wait for rcv a complete packet
+	copy rega,contru
+	ifetch 1,contru //HCI packet type
+	beq  HCI_H4_TYPE_CMD,process_hci_cmd
+	branch assert
+	
+h4_rx_discard_packet:
+	bpatch patch1f_7,mem_patch1f
+	hfetch 2,core_uart_rrptr
+	iforce contru
+	call h4_get_rx_payload_len
+	iadd contru,contru
+	deposit contru
+	hstore 2,core_uart_rrptr
+	rtn
+
+
+//contru = pointer to packet start
+//return len via pdata
+h4_get_rx_payload_len:
+	ifetch 1,contru
+	increase 2,contru
+	beq HCI_H4_TYPE_ACL,h4_get_rx_payload_len_acl
+	ifetch 1,contru
+	rtn
+h4_get_rx_payload_len_acl:
+	ifetch 2,contru
+	rtn
+
+h4_get_tx_ptr:
+	hfetch 2,core_uart_twptr
+	increase -5,contwu
+	iadd contwu,contwu
+	rtn
+
+h4_send_packet_event:
+	arg HCI_H4_TYPE_EVENT,temp //type
+	branch h4_send_packet
+h4_send_packet_acl: //upgoing ACL
+	arg HCI_H4_TYPE_ACL,temp //type
+h4_send_packet:
+	bpatchx patch20_0,mem_patch20
+	increase 1,loopcnt
+	hfetch 2,core_uart_twptr
+	copy pdata,contwu
+	copy loopcnt,pdata //length
+	istoret 1,contwu //packet type in temp
+	increase -1,pdata
+	iadd contwu,contwu
+	copy contwu,pdata
+	store 2,mem_hci_acl_tx_trigger_wptr
+	copy temp,pdata
+ifdef ACL_DEBUG
+	beq HCI_H4_TYPE_EVENT,h4_send_packet0
+	hfetch 1,core_uart_txitems
+	ncall ice_break,blank
+	
+h4_send_packet0:	
+	copy temp,pdata
+endif
+	rtneq HCI_H4_TYPE_ACL //not send acl packet immediately
+	fetch 2,mem_hci_acl_tx_trigger_wptr
+	hstore 2,core_uart_twptr
+	branch h4_send_acl_trigger_clear
+	
+	
+h4_send_acl_trigger_clear:
+	setarg 0
+	store 2,mem_hci_acl_tx_trigger_wptr
+	rtn
+
+	
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/hci_main.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/hci_main.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/hci_main.prog	(working copy)
@@ -0,0 +1,400 @@
+/*********************************/
+/**********   HCI  *****************/
+/*********************************/
+
+hci_init:
+	rtn wake
+	setarg hci_idle_dispatch
+	store 2,mem_cb_idle_process
+
+	setarg uart_baud_115200
+	store uart_baud_len,mem_baud
+hci_lpm_init:
+	setarg mem_h5rx_buf
+	hstore 2,core_uart_rsaddr
+	setarg mem_h5rx_buf_end
+	hstore 2,core_uart_readdr
+	setarg mem_h5tx_buf
+	hstore 2,core_uart_tsaddr
+	call hci_sel_init
+hci_reinit:
+	jam 0x0,core_uart_ctrl
+ 	setarg mem_h5tx_buf
+	hstore 2,core_uart_twptr
+	hstore 2,core_uart_trptrp
+	setarg mem_h5rx_buf
+	hstore 2,core_uart_rrptr
+	store 2,mem_h5rx_rptr
+hci_init_common:
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_UART,pdata
+	hstore 2,core_clkoff
+	call uart_set_baud_by_mem
+	jam uartclk_dpll,core_uart_clksel
+	jam uart_ctrl_h4,core_uart_ctrl
+	rtn
+
+hci_sel_init:
+	setarg mem_h5tx_buf_end
+	hstore 2,core_uart_teaddr
+	hfetch 1,core_gpio_sel1
+	or_into 0x07,pdata
+	hstore 1,core_gpio_sel1
+	rtn
+	
+	
+hci_rx_packet:
+	bpatchx patch20_1,mem_patch20
+	hfetch 1,core_uart_status
+	iforce regb
+	bbit0 uart_status_rx_fifo_empty,hci_rx_packet_cont
+	hfetch 2,core_uart_rxitems
+	iforce regc
+	arg 0x44f,temp
+	isub temp,null
+	nrtn zero
+hci_rx_packet_cont:
+	hfetch 2,core_uart_rrptr
+	iforce contru
+	branch hci_rx_h4
+	
+uart_send_byte:
+	hfetcht 1,core_uart_status
+	isolate1 6,temp
+	branch uart_send_byte,true
+	hstore 1,core_uart_txd
+	rtn
+	
+process_hci_cmd:
+	bpatchx patch20_2,mem_patch20
+	fetch 1,mem_hci_cmd
+	branch process_hci_cmd_cont,blank
+	enable user					/* last command still there */
+	rtn
+process_hci_cmd_cont:
+	ifetch 2,contru
+	iforce alarm				/* alarm is used for sending */
+	iforce queue				/* queue is OCF */
+	ifetch 1,contru		/* skip hci length */
+	iforce temp			/* temp has the length */
+	rshift2 alarm,pdata
+	rshift8 pdata,pdata
+	beq HCI_OGF_VENDOR_SPECIFIC,phci_grp_vendor_specific
+	rtn
+
+
+phci_grp_vendor_specific:
+	bpatchx patch20_3,mem_patch20
+	deposit queue
+	beq HCI_VENDOR_CMD_RESET,hci_normal_reply
+	beq HCI_VENDOR_CMD_CHIPID,phci_grp_vendor_chipid
+	beq HCI_VENDOR_CMD_BAUD,phci_grp_vendor_baud
+	beq HCI_VENDOR_CMD_PATCH,phci_grp_vendor_patch
+	beq HCI_VENDOR_CMD_PATCH_DONE,phci_grp_vendor_done
+	beq HCI_VENDOR_CMD_ECHO,hci_normal_reply
+	beq HCI_VENDOR_CMD_BDADDR,phci_grp_vendor_bdaddr
+	beq HCI_VENDOR_CMD_ENTER_LPM,phci_grp_vendor_enter_lpm
+	
+	beq HCI_VENDOR_CMD_MEM,phci_grp_vendor_mem
+	beq HCI_VENDOR_CMD_EEP,phci_grp_vendor_eep
+	beq HCI_VENDOR_CMD_PATCH_SEC_INIT,phci_grp_vendor_patch_sec_init
+	beq HCI_VENDOR_CMD_PATCH_SEC,phci_grp_vendor_patch_sec
+	branch hci_normal_reply
+
+phci_grp_vendor_enter_lpm:
+	call hci_normal_reply
+	call wait_uarttx
+	call gpio_pu_uart_tx
+hci_enter_lpm:
+	call app_put_lpm_wake_lock
+	call app_l2cap_flow_control_enable
+	branch gpio_rx_config_input_with_pu
+
+hci_exit_lpm:
+	jam HCI_RX_READY,mem_hci_lt_rx_state
+	call app_get_lpm_wake_lock
+	call hci_lpm_init
+	branch app_l2cap_flow_control_disable
+	
+phci_grp_vendor_chipid:
+	call hci_get_cmd_complete_ptr
+	hfetch 2,core_chipid
+	istore 2,contwu
+	force 6,loopcnt
+	branch hci_command_complete
+	
+phci_grp_vendor_baud:
+	ifetch 2,contru
+	store 2,mem_baud
+	hstore 2,core_uart_baud
+	rtn
+
+
+phci_grp_vendor_patch_common:
+	//jam 0x80,core_ucode_ctrl
+	ifetch 1,contru
+	copy pdata,temp //check sum via temp
+	hstore 1,core_ucode_low
+	ifetch 1,contru
+	iadd temp,temp
+	set1 7,pdata
+	hstore 1,core_ucode_ctrl
+	ifetch 1,contru
+	iadd temp,temp
+	copy pdata,loopcnt
+	rtn
+	
+phci_grp_vendor_patch:
+	bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad
+	call phci_grp_vendor_patch_common
+phci_grp_vendor_patch_loop:
+	ifetch 1,contru
+	hstore 1,core_ucode_data
+	iadd temp,temp
+	loop phci_grp_vendor_patch_loop
+phci_grp_vendor_patch_check_sum:	
+	and temp,0xff,temp
+	ifetch 1,contru
+	isub temp,null
+	nbranch phci_grp_vendor_patch_bad,zero
+	branch hci_normal_reply
+
+	
+phci_grp_vendor_patch_sec:
+	bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad
+	call phci_grp_vendor_patch_common
+	store 8,mem_pdatatemp
+phci_grp_vendor_patch_sec_loop:
+	call do_aes_cbc	
+	arg 16,loopcnt
+	arg mem_temp_block0,contw
+	call load_uart_sum_loop
+	storet 8,mem_temp
+	arg mem_temp_block2,contw
+	call store_aes_result
+	arg mem_temp_block2,rega
+	arg mem_temp_block0,regb
+	arg mem_temp_block3,contw
+	call xor16	
+	arg 16,loopcnt
+	arg mem_temp_block3,contr
+	call load_ucode_only_loop
+	fetcht 8,mem_temp
+	fetch 8,mem_pdatatemp
+	increase -16,pdata
+	store 8,mem_pdatatemp
+	nbranch phci_grp_vendor_patch_sec_loop,blank
+	branch phci_grp_vendor_patch_check_sum	
+	
+load_ucode_only_loop:
+	ifetch 1,contr
+	hstore 1,core_ucode_data
+	loop load_ucode_only_loop
+	rtn
+
+load_uart_sum_loop:
+	ifetch 1,contru
+	istore 1,contw
+	iadd temp,temp
+	loop load_uart_sum_loop
+	rtn
+
+phci_grp_vendor_patch_sec_init:
+	bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad
+	arg 0,temp
+	arg 16,loopcnt
+	arg mem_temp_block0,contw
+	call load_uart_sum_loop
+	hfetch 1,core_gpio_key2
+	and_into 0xfd,pdata   // disable aes for iv
+	hstore 1,core_gpio_key2
+	arg mem_temp_block0,contr
+	arg 16,loopcnt
+	call aes_load_data
+	call aes_init
+	call aes_clear_data
+	branch phci_grp_vendor_patch_check_sum
+
+
+phci_grp_vendor_done:
+	arg 0x20,loopcnt    //patch switch length
+	arg mem_patch00,contw
+	arg 0,temp //checksum
+phci_grp_vendor_done_loop:
+	ifetch 1,contru
+	istore 1,contw
+	iadd temp,temp
+	loop phci_grp_vendor_done_loop
+	and temp,0xff,temp
+	ifetch 1,contru
+	isub temp,null
+	nbranch phci_grp_vendor_patch_bad,zero
+	jam 0,core_ucode_ctrl
+	call hci_normal_reply
+	call h4_rx_discard_packet
+	call clear_key_buf
+	call wait_uarttx
+	branch soft_reset
+
+phci_grp_vendor_patch_bad:
+	jam 0,core_ucode_ctrl
+	branch start
+	
+phci_grp_vendor_bdaddr:
+	ifetch 6,contru
+	store 6,mem_lap
+	branch hci_normal_reply
+
+
+phci_grp_vendor_mem:
+	ifetch 1,contru
+	store 1,mem_hci_curr_len
+	copy pdata,loopcnt
+	ifetch 2,contru
+	store 2,mem_hci_curr_target
+	copy pdata,contw
+	call uart_copy_rx_bytes
+	branch hci_normal_reply
+
+
+phci_grp_vendor_eep:
+	ifetch 1,contru
+	store 1,mem_hci_curr_len
+	copy pdata,loopcnt
+	ifetch 2,contru
+	store 2,mem_hci_curr_target
+	arg mem_l2cap_rxbuff1,contw
+	call uart_copy_rx_bytes
+	fetcht 1,mem_hci_curr_len
+	arg mem_l2cap_rxbuff1,rega
+	fetch 2,mem_hci_curr_target
+	branch iicd_write_ota_data
+	
+	
+
+	
+hci_normal_reply:
+	force 4,loopcnt
+hci_command_complete:	/* loopcnt is hci length */
+	call hci_get_payload_ptr
+	force 0x1,pdata
+	istore 1,contwu
+	deposit alarm
+	istore 3,contwu
+	force HCI_EVENT_COMMAND_COMPLETE,queue
+hci_send_event:		/* queue:event code, loopcnt: length */
+	bpatchx patch20_4,mem_patch20
+	call hci_get_packet_ptr
+	deposit queue
+	istore 1,contwu
+	deposit loopcnt
+	istore 1,contwu
+hci_send_event_raw:
+	force 5,queue
+	increase 2,loopcnt
+hci_send_packet:
+	branch h4_send_packet_event
+
+hci_send_commu_ready_event:
+	force HCI_EVENT_VENDOR_SPECIFIC,queue
+	call hci_get_payload_ptr
+	setarg HCI_VENDOR_EVENT_COMMU_READY
+	istore 1,contwu
+	force 1,loopcnt
+	branch hci_send_event
+
+hci_get_cmd_complete_ptr:
+	force 12,contwu
+	branch hci_get_tx_ptr
+
+hci_get_payload_ptr:
+	force 8,contwu
+	branch hci_get_tx_ptr
+
+hci_get_packet_ptr:
+	force 6,contwu
+hci_get_tx_ptr:
+	branch h4_get_tx_ptr
+
+	
+
+calc_tx_crc16:
+	pulse crc16
+	enable enable_crc
+crcloop:
+	ifetch 1,contwu
+	inject bucket,8
+	loop crcloop
+	enable enable_parity
+	inject bucket,16
+	disable enable_parity
+	disable enable_crc
+	disable crc16
+	byteswap pdata,pdata
+	rtn
+
+
+
+cmd_exit:
+	jam 0,mem_hci_cmd
+	rtn
+cmd_check_plap:
+	fetch 6,mem_hci_plap
+	fetcht 6,mem_plap
+	isub temp,null
+	rtn
+
+	
+	
+//enable ssp master sm
+cmd_pair:
+	fetch 1,mem_op
+	bbit1 op_inrand_req,cmd_pair_passive
+	call tid_initiate
+	jam LMP_IN_RAND,mem_lmo_opcode2
+	branch cmd_exit
+cmd_pair_passive:
+	set0 op_inrand_req,pdata
+	store 1,mem_op
+	call lmp_accept_inrand
+	setarg 0
+	setflag master,smap_lmptid,pdata		
+	store 1,mem_lmo_tid2
+	branch cmd_exit
+	rtn
+cmd_in_sniff:
+	jam LMP_SNIFF_REQ,mem_lmo_opcode2
+	arg mem_sniff_payload,contw
+	setarg 0
+	isolate1 27,clke_bt
+	setflag true,1,pdata		/* use init 2 if bit27 of clke is 1 */
+	istore 1,contw	
+	setarg 0	/* dsniff */
+	istore 2,contw
+	fetch 2,mem_sniff_param_interval	/* tsniff */
+	istore 2,contw
+	fetch 1,mem_sniff_param_attempt	/* attempt */
+	istore 2,contw
+	fetch 1,mem_sniff_param_timeout	/* timeout */
+	istore 2,contw
+	branch cmd_exit
+	
+cmd_exit_sniff:
+	jam LMP_UNSNIFF_REQ,mem_lmo_opcode2
+	branch cmd_exit
+
+hci_idle_dispatch:
+	call gpio_check_uart_state
+	rtn true
+	arg UART_WAKEUP_RX,temp
+	call gpio_get_bit
+	nbranch uart_wake_up,true
+	jam HCI_RX_WAKE,mem_hci_lt_rx_state
+	rtn
+uart_wake_up:
+	fetch 1,mem_hci_lt_rx_state
+	rtnne HCI_RX_WAKE
+	call hci_exit_lpm
+	branch hci_send_commu_ready_event
+	
+	
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/hid.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/hid.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/hid.prog	(working copy)
@@ -0,0 +1,84 @@
+/**
+* the following API is to send the HID data
+* 
+*/
+
+/**
+* the following API is to process the hid  rx data
+* 
+*/
+//handle the hid data
+
+hid_rx_process:
+	bpatchx patch20_5,mem_patch20
+	fetch 2,mem_l2cap_payload_ptr
+	copy pdata,contr
+	ifetch 1,contr
+	and pdata,0x0f,temp
+	rshift4 pdata,pdata //hidtype
+	beq hid_type_set_idle,hid_rx_process_handshake
+	beq hid_type_set_protocol,hid_rx_process_handshake
+	beq hid_type_data,hid_rx_process_data
+	beq HID_TYPE_SET_REPORT,hid_rx_process_set_report
+	beq HID_TYPE_CONTROL,hid_rx_process_hid_control
+	rtn
+
+hid_rx_process_hid_control:
+	copy temp,pdata
+	beq HID_CONTROL_P_VIRTUALCABLEUNPLUG,hid_rx_process_virtual_cable_unplug
+	beq HID_CONTROL_P_SUSPEND,hid_rx_process_suspend
+	rtn
+	
+hid_rx_process_virtual_cable_unplug:
+	jam BT_EVT_VIRTUAL_CABLE_UNPLUG,mem_fifo_temp
+	call ui_ipc_send_event
+	fetch 1,mem_device_option
+	rtnbit0 dvc_op_mouse
+	copy temp,pdata
+	beq HID_CONTROL_P_VIRTUALCABLEUNPLUG,mouse_irtual_cable_unplug
+	rtn
+hid_rx_process_suspend:
+	rtn
+
+hid_rx_process_set_report:
+	call hid_rx_process_data
+	arg 0x01,rega
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_ctrl_remote_cid
+	istore 2,contw
+	setarg 0x00
+	istore 1,contw
+	rtn
+
+hid_rx_process_handshake:
+	arg 1,regA//payload length
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_ctrl_remote_cid
+	istore 2,contw
+	setarg 0
+	istore 1,contw
+	jam 1,mem_ui_data_txbuff_length
+	fetch 1,mem_hid_control_state
+	set1 l2cap_channel_hid_handshake_done
+	store 1,mem_hid_control_state
+	jam BT_EVT_HID_HANDSHAKE,mem_fifo_temp
+	branch ui_ipc_send_event
+
+hid_rx_process_data:
+	ifetch 1,contr
+	beq HID_REPORT_ID_KB,hid_rx_process_data_hid_kb
+	rtn
+
+hid_rx_process_data_hid_kb:
+	rtn
+
+	
+hid_malloc_tx_buff:
+	call l2cap_malloc
+	copy rega,temp
+	storet 1,mem_ui_data_txbuff_length
+	copy pdata,contw
+	copy rega,pdata
+	istore 2,contw //hid payload length
+	rtn
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/kscan_peipherals.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/kscan_peipherals.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/kscan_peipherals.prog	(working copy)
@@ -0,0 +1,152 @@
+
+
+
+ifdef COMPILE_KEYSCAN
+/****************************************key scan***************************************/
+/******the key_scan use explain******
+
+* First:call kscan_init
+* Second:call kscan_main
+* Finally: the key scanning reault is mem_kscan_value.
+
+******
+***************************************************************************************
+*/
+kscan_init:  
+	fetch 2,mem_kscan_ptr
+	copy pdata,regc
+	call kscan_row_num_select
+	branch kscan_col_num_select
+
+kscan_col_init:
+	setarg 0
+	add regc,KEYSCAN_OFFECT_SHIFT_COUNT,rega
+	istore 1,rega
+	add regc,KEYSCAN_OFFECT_COL_NUM,rega
+	ifetch 1,rega
+	branch kscan_value_init,blank
+	copy pdata,loopcnt
+	add regc,KEYSCAN_OFFECT_COL_CONF_PIN,regb
+kscan_col_loop: 
+	ifetcht 1, regb
+	call gpio_config_output
+	ifetcht 1, regb
+	call gpio_out_active
+	call kscan_value_init             
+	ifetcht 1,regb
+	call gpio_config_input
+	increase 1,regb
+	loop kscan_col_loop
+	rtn  
+kscan_row_num_select:          
+	add regc,KEYSCAN_OFFECT_ROW_NUM,contw
+	ifetch 1,contw 
+	rtn blank
+	copy pdata,loopcnt
+	add regc,KEYSCAN_OFFECT_ROW_CONF_PIN,rega
+	branch kscan_ioselect_input   
+kscan_col_num_select:           
+	add regc,KEYSCAN_OFFECT_COL_NUM,contw
+	ifetch 1,contw 
+	rtn blank
+	copy pdata,loopcnt
+	add regc,KEYSCAN_OFFECT_COL_CONF_PIN,rega
+	branch kscan_ioselect_input
+kscan_ioselect_input: 
+	ifetcht 1,rega
+	call gpio_config_input 
+	increase 1,rega
+	loop kscan_ioselect_input
+	rtn
+kscan_value_init:
+	setarg 0
+	add regc,KEYSCAN_OFFECT_ROW_COUNT,rega
+	istore 1,rega
+	add regc,KEYSCAN_OFFECT_ROW_CONF_PIN,rega
+kscan_save_vaule:
+	ifetcht 1,rega       
+	call gpio_get_bit   
+	add regc,KEYSCAN_OFFECT_VALUE_TEMP,temp
+	ifetch 2,temp
+ 	add regc,KEYSCAN_OFFECT_SHIFT_COUNT,contr
+	ifetcht 1,contr
+	copy temp,queue
+	qsetflag true,pdata
+
+	add regc,KEYSCAN_OFFECT_VALUE_TEMP,temp
+ 	istore 2,temp
+	increase 1,rega
+    
+	add regc,KEYSCAN_OFFECT_SHIFT_COUNT,contw
+	ifetch 1,contw 
+	increase 1,pdata
+	istore 1,contw
+    
+	add regc,KEYSCAN_OFFECT_ROW_COUNT,contw
+	ifetcht 1,contw 
+	increase 1,temp
+	istoret 1,contw
+	add regc,KEYSCAN_OFFECT_ROW_NUM,contw
+	ifetch 1,contw 
+	ixor temp,null  
+	nbranch kscan_save_vaule,zero
+	rtn       
+	
+	
+kscan_lpm_berfore:
+	fetch 2,mem_kscan_ptr
+	copy pdata,regc
+ 	add regc,KEYSCAN_OFFECT_ROW_NUM,contw
+ 	ifetch 1,contw 
+	copy pdata,loopcnt
+	add regc,KEYSCAN_OFFECT_COL_CONF_PIN,rega
+kscan_select_wake:    
+	ifetcht 1,rega
+	call gpio_set_wake   
+	increase 1,rega
+	loop kscan_select_wake
+	rtn
+
+kscan_clkn_bt_timer_check:
+	ifetcht 4,rega
+	copy clkn_bt,pdata
+	isub temp,null
+	rtn positive
+	setarg 0
+	istore 4,rega
+	rtn
+
+kscan_process:
+	fetch 2,mem_kscan_ptr
+	copy pdata,regc
+	add regc,KEYSCAN_OFFECT_BTCLK,rega
+	call kscan_clkn_bt_timer_check
+	ifetch 4,rega
+	add regc,KEYSCAN_OFFECT_BTCLK_INTERVAL,regb
+	ifetcht 1,regb
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	istore 4,rega
+	call kscan_col_init  
+	add regc,KEYSCAN_OFFECT_VALUE_TEMP,rega
+	ifetch 2,rega
+	add regc,KEYSCAN_OFFECT_LASVALUE,rega
+	ifetcht 2,rega
+	istore 2,rega
+	iand temp,pdata
+	add regc,KEYSCAN_OFFECT_VALUE,rega    
+	istore 2,rega 
+	rtn  
+
+endif
+	
+	
+
+
+
+	
+    
+	
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/l2cap.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/l2cap.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/l2cap.prog	(working copy)
@@ -0,0 +1,1929 @@
+/************************************/
+/*initialize L2CAP related variables*/
+/************************************/
+l2cap_init:
+	branch l2cap_init_wake,wake
+l2cap_init_work:
+	setarg mem_l2cap_xmem_end
+	arg mem_l2cap_xmem_start,contw
+	isub contw,loopcnt
+	call clear_mem
+l2cap_init_wake:	
+	bpatchx patch20_6,mem_patch20
+	setarg mem_sdp_mem_end
+	arg mem_sdp_mem_start,contw
+	isub contw,loopcnt
+	call clear_mem
+	setarg mem_l2cap_mem_end
+	arg mem_l2cap_mem_start,contw
+	isub contw,loopcnt
+	call clear_mem
+	branch l2cap_lpm_load_txbuf
+	
+process_rx_l2cap_pkt:
+	bpatchx patch20_7,mem_patch20
+	copy contr,temp
+	//call l2cap_malloc_is_fifo_full
+	//nrtn blank
+	copy temp,contr
+	ifetch 2,contr
+	store 2,mem_l2cap_rx_pkt_length
+	ifetch 2,contr
+	store 2,mem_l2cap_rx_cid
+	deposit contr
+	store 2,mem_l2cap_payload_ptr
+	fetch 1,memui_reconnect_mode
+	beq NO_RECONNECTION,l2cap_rx_multiplexing
+	branch ml2cap_rx_multiplexing
+
+l2cap_rx_multiplexing:
+	fetch 2, mem_l2cap_rx_pkt_length
+	branch l2cap_rx_reset_state,blank
+	bpatchx patch21_0,mem_patch21
+	fetch 1,mem_l2cap_rx_cid
+	beq L2CAP_signal_channel,l2cap_call_proc_signal
+l2cap_rx_multiplexing0:
+	beq L2CAP_SDP_channel,l2cap_call_proc_sdp
+	beq L2CAP_RFCOMM_channel,l2cap_call_proc_rfcomm
+	beq L2CAP_HID_Control_channel,l2cap_call_proc_hid
+	beq L2CAP_HID_Interrupt_channel,l2cap_call_proc_hid
+	branch l2cap_rx_reset_state
+
+l2cap_check_map:
+//	call l2cap_malloc_is_fifo_full
+//	nrtn blank
+	bpatchx patch21_1,mem_patch21
+	call l2cap_malloc_get_full_map
+	fetch 1,mem_used_map
+	beq 0,set_pdata_0
+	beq 1,set_pdata_0
+	beq 2,set_pdata_0
+	beq 3,set_pdata_0
+	beq 0x81,set_pdata_0
+	beq 0xc0,set_pdata_0
+	beq 0x80,set_pdata_0
+	beq 0x40,set_pdata_0
+	rtn
+
+set_pdata_0:
+	setarg 0
+	rtn
+
+
+l2cap_call_proc_signal:
+	call l2cap_check_map
+	nrtn blank
+l2cap_call_proc_signal0:
+	call l2cap_malloc_signal_channel
+	call l2cap_process_signal_pkt
+	fetcht 2,mem_l2cap_signal_tx_length
+	branch l2cap_call_proc_no_reply,blank
+	call l2cap_get_signal_tx_buff
+	fetch 2,mem_l2cap_signal_tx_length
+	istore 2,contw
+	force L2CAP_signal_channel,pdata
+	istore 2,contw
+	branch l2cap_rx_reset_state
+	
+l2cap_call_proc_sigal_pending:
+	fetch 1,mem_l2cap_pending_item
+	rtn blank
+	copy pdata,rega
+	bpatchx patch21_2,mem_patch21
+	fetch 4,mem_l2cap_sdpres_delay_time
+	arg 0x100,temp
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	jam 0,mem_l2cap_pending_item
+	copy rega,pdata
+	beq L2CAP_SDP_channel,l2cap_sdp_conn_succ
+	branch assert
+l2cap_sdp_conn_succ:
+	arg 0,debug
+	call l2cap_malloc_signal_channel
+	call restore_l2cap_req_param
+	call l2cap_get_signal_tx_payload
+	call save_cont_pointers
+	call send_connection_sdp_res
+	call l2cap_get_signal_tx_buff
+	//fetch 2,mem_l2cap_signal_tx_length
+	setarg 0x000c
+	istore 2,contw
+	force L2CAP_signal_channel,pdata
+	istore 2,contw
+	branch l2cap_rx_reset_state
+
+
+
+l2cap_reset_sdp_map:
+	bpatchx patch21_3,mem_patch21
+	fetch 2,mem_sdp_tx_pkt_length
+	increase 4,pdata
+	rshift4 pdata,pdata
+	rshift3 pdata,pdata
+	add pdata,1,temp ///temp: how many128
+	arg mem_tx_fifo3,contr
+	ifetch 3,contr
+	rtn blank
+	store 3,mem_tx_fifo_map_temp
+	fetch 1,mem_tx_fifo_map_temp
+	copy pdata,rega
+	call check_l2cap_map
+	copy regb,pdata
+	store 1,mem_tx_fifo3
+	rtn
+
+check_l2cap_map:
+	arg 0,queue
+	arg 0,regb
+
+check_l2cap_map_loop:
+	sub queue,7,null
+	nrtn positive
+	qisolate1 rega
+	branch check_l2cap_map_used,true
+	branch check_l2cap_map_used2
+
+check_l2cap_map_used:
+	copy temp,pdata
+	branch check_l2cap_map_used2,blank
+	qset1 regb
+	increase -1,temp
+
+check_l2cap_map_used2:
+	increase 1,queue
+	branch check_l2cap_map_loop
+
+l2cap_call_proc_sdp:
+	call l2cap_malloc_is_fifo_empty
+	nrtn blank// not process this packet until fifo empty
+	call l2cap_check_map
+	nrtn blank
+	call l2cap_malloc_sdp_channel
+	call sdp_process
+	call l2cap_reset_sdp_map
+	branch l2cap_call_proc_sdp_common
+
+	
+ml2cap_call_proc_sdp:
+	call l2cap_malloc_is_fifo_empty
+	nrtn blank// not process this packet until fifo empty
+	call l2cap_malloc_sdp_channel
+	call sdp_process
+l2cap_call_proc_sdp_common:
+	call l2cap_get_sdp_tx_buff
+	fetch 2,mem_sdp_tx_pkt_length
+	branch l2cap_call_proc_no_reply,blank
+	istore 2,contw
+	fetch 2,mem_sdp_remote_cid
+	istore 2,contw
+	branch l2cap_rx_reset_state
+
+l2cap_call_proc_hid:
+	call hid_rx_process
+	branch l2cap_rx_reset_state
+
+l2cap_call_proc_rfcomm:
+	bpatchx patch21_4,mem_patch21
+	jam RFCOMM_MALLOC_SUCCEED,mem_rfcomm_malloc_fail_flag
+	call rfcomm_rx_process
+	fetch 1,mem_rfcomm_malloc_fail_flag
+	rtneq RFCOMM_MALLOC_FAIL
+	branch l2cap_rx_reset_state
+l2cap_call_proc_no_reply:
+	call l2cap_malloc_discard
+	//fall through
+l2cap_rx_reset_state:
+	setarg 0
+	store 2,mem_l2cap_rx_pkt_length
+	store 2,mem_l2cap_rx_cid
+	jam L2CAP_RX_DONE,mem_l2cap_rx_done
+	rtn
+/* To process one L2CAP signalling pkt consisting of 1 or more signalling commands.	*/
+l2cap_process_signal_pkt:
+	bpatchx patch21_5,mem_patch21
+	call l2cap_get_signal_tx_payload
+	force 0,regB
+	fetch 2,mem_l2cap_rx_pkt_length
+	copy pdata,regC
+	fetch 2,mem_l2cap_payload_ptr
+	iforce contr
+l2cap_process_signal_pkt_loop:
+	call l2cap_process_one_signal
+	deposit regC
+	increase -4,regC
+	increase -4,pdata
+	nbranch l2cap_process_signal_pkt_loop,blank
+	copy regB,pdata
+	store 2,mem_l2cap_signal_tx_length
+	rtn
+
+l2cap_process_one_signal:
+	bpatchx patch21_6,mem_patch21
+	ifetch 1,contr
+	beq signal_cmd_reject,l2cap_proc_signal_cmd_reject
+	beq signal_connect_req,l2cap_proc_signal_connect_req
+	beq signal_connect_rsp,l2cap_proc_signal_connect_rsp
+	beq signal_config_req,l2cap_proc_signal_config_req
+	beq signal_config_rsp,l2cap_proc_signal_config_rsp
+	beq signal_disconnect_req,l2cap_proc_signal_disconnect_req
+	beq signal_disconnect_rsp,l2cap_proc_signal_disconnect_rsp
+	beq signal_echo_req,l2cap_proc_signal_echo_req
+	beq signal_echo_rsp,l2cap_proc_signal_echo_rsp
+	beq signal_info_req,l2cap_proc_signal_info_req
+	beq signal_info_rsp,l2cap_proc_signal_info_rsp
+	call l2cap_reject_command
+l2cap_process_one_signal_rtn:
+	rtn
+
+l2cap_proc_signal_info_req:
+	ifetch 1,contr //IDs
+	copy pdata,queue
+	ifetch 2,contr //length
+	copy pdata,rega
+	copy regc,pdata
+	isub rega,regc
+	setarg signal_info_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1, contw
+	ifetch 2,contr 
+l2cap_proc_signal_info_req_reply:
+	beq L2CAP_SIG_EXT_FEATRUE,l2cap_proc_signal_info_req_ext
+	beq L2CAP_SIG_FIX_FEATRUE,l2cap_proc_signal_info_req_fix
+	rtn
+l2cap_proc_signal_info_req_ext:
+	setarg 0x020008
+	istore 6, contw
+	setarg 0x0280
+	istore 4, contw
+	force 12,pdata
+	branch l2cap_proc_signal_info_req_common
+l2cap_proc_signal_info_req_fix:
+	setarg 0x3000c
+	istore 6, contw
+	setarg 0x0006
+	istore 8, contw
+	force 16,pdata
+l2cap_proc_signal_info_req_common:
+	iadd regb,regb
+	branch l2cap_process_one_signal_rtn
+	
+ml2cap_proc_signal_info_req:
+	ifetch 1,contr //IDs
+	copy pdata,queue
+	ifetch 2,contr //length
+	copy pdata,rega
+	ifetch 2,contr
+	store 2,mem_temp
+	copy regc,pdata
+	isub rega,regc 
+	call l2cap_get_signal_tx_payload
+	setarg signal_info_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw 
+	fetch 2,mem_temp
+	branch l2cap_proc_signal_info_req_reply
+
+
+/*  Respond to the command reject signal sent from the remote BD.   */
+l2cap_proc_signal_cmd_reject:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	iadd contr,contr
+	copy regC,pdata
+	isub regA,regC
+l2cap_proc_signal_cmd_reject_rtn:
+	branch l2cap_process_one_signal_rtn
+/* Respond to an L2CAP connection request from remote BD. (generate a connection_rsp)	*/
+l2cap_proc_signal_connect_req:
+	call save_cont_pointers
+	//fetch 6,mem_inquiry_bd_addr
+  	//store 6,mem_master_paged_bd_addr
+  	call load_cont_pointers
+	arg 0,debug
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	ifetch 2,contr
+	copy pdata,temp //PSM
+	ifetch 2,contr
+	copy pdata,timeup
+	bpatchx patch21_7,mem_patch21
+	copy temp,pdata
+	beq PSM_SDP,l2cap_proc_signal_connect_req_sdp
+	beq PSM_RFCOMM,l2cap_proc_signal_connect_req_rfcomm
+	beq PSM_HID_control,l2cap_proc_signal_connect_req_hid_ctrl
+	beq PSM_HID_interrupt,l2cap_proc_signal_connect_req_hid_int
+	call l2cap_reject_command
+	branch l2cap_proc_signal_connect_req_rtn
+
+l2cap_proc_signal_connect_req_sdp:
+	call save_cont_pointers
+	arg L2CAP_SDP_channel,temp
+	fetch 2,mem_sdp_remote_cid
+	nbranch already_connected,blank
+	copy timeup,pdata
+	store 2,mem_sdp_remote_cid
+	copy clkn_bt,pdata
+	store 4,mem_l2cap_sdpres_delay_time
+	call store_l2cap_req_param
+	branch  send_connection_pending
+
+store_l2cap_req_param:
+	storet 2,mem_psm
+	deposit timeup
+	store 2,mem_scid
+	deposit rega
+	store 2,mem_cmd_length
+	deposit regb
+	store 2,mem_tt2
+	deposit regc
+	store 2,mem_tt3
+	deposit queue
+	store 2,mem_id
+	rtn
+
+restore_l2cap_req_param:
+	fetcht 2,mem_psm
+	fetch 2,mem_scid
+	copy pdata,timeup
+	fetch 2,mem_cmd_length
+	copy pdata,rega
+	fetch 2,mem_tt2
+	copy pdata,regb
+	fetch 2,mem_tt3
+	copy pdata,regc
+	fetch 2,mem_id
+	copy pdata,queue
+	rtn
+
+l2cap_proc_signal_connect_req_rfcomm:
+	call save_cont_pointers
+	setarg L2CAP_RFCOMM_channel
+	arg L2CAP_RFCOMM_channel,temp
+	fetch 2,mem_RFCOMM_remote_CID
+	nbranch already_connected,blank
+	copy timeup,pdata
+	store 2,mem_RFCOMM_remote_CID
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_rfcomm_state
+	branch send_connection_res
+l2cap_proc_signal_connect_req_hid_ctrl:
+	call save_cont_pointers
+	arg L2CAP_HID_Control_channel,temp
+	fetch 2,mem_hid_ctrl_remote_cid
+	nbranch already_connected,blank
+	copy timeup,pdata
+	store 2,mem_hid_ctrl_remote_cid
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_hid_control_state
+	branch send_connection_res
+l2cap_proc_signal_connect_req_hid_int:
+	call save_cont_pointers
+	deposit clke
+	arg L2CAP_HID_Interrupt_channel,temp
+	fetch 2,mem_hid_int_remote_cid
+	nbranch already_connected,blank
+	copy timeup,pdata
+	store 2,mem_hid_int_remote_cid
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_hid_interrupt_state
+	branch send_connection_res
+
+send_connection_pending:
+	setarg L2CAP_connect_pending
+	store 2,memL2CAP_T1
+	jam L2CAP_SDP_channel,mem_l2cap_pending_item
+	branch send_connection_res0
+send_connection_sdp_res:
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_sdp_state
+send_connection_res:
+	setarg L2CAP_connect_successful
+	store 2,memL2CAP_T1
+send_connection_res0:
+	bpatchx patch22_0,mem_patch22
+	call load_cont_pointers
+	setarg signal_connect_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 0x0008
+	istore 2,contw
+	copy temp,pdata
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	fetch 2,memL2CAP_T1
+	beq L2CAP_connect_pending,connect_pending
+	isolate0 0,debug
+	branch connect_suc,true
+	setarg L2CAP_connect_refused_no_resources
+connect_suc:
+	istore 2,contw
+	force 0x0000,pdata
+	istore 2,contw
+	setarg 12
+	branch connect_req_update_byte_counts
+connect_pending:
+	istore 2,contw
+	force 0x0002,pdata
+	istore 2,contw
+	setarg 12
+	branch connect_req_update_byte_counts
+	
+already_connected:
+	set1 0,debug
+	branch send_connection_res
+connect_req_update_byte_counts:
+	iadd regB,regB
+	copy regC,pdata
+	isub regA,regC
+	branch l2cap_proc_signal_connect_req_rtn
+l2cap_proc_signal_connect_req_rtn:
+	branch l2cap_process_one_signal_rtn
+
+l2cap_proc_signal_connect_rsp:
+	ifetch 1,contr //identifier
+	copy pdata,queue
+	ifetch 2,contr //length
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr //remote cid
+	copy pdata,timeup
+	ifetch 2,contr //local cid
+	copy pdata,temp
+	bpatchx patch22_1,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch l2cap_proc_signal_connect_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch l2cap_proc_signal_connect_rsp_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch l2cap_proc_signal_connect_rsp_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch l2cap_proc_signal_connect_rsp_hid_int,zero
+	rtn
+
+l2cap_proc_signal_connect_rsp_sdp:
+	copy timeup,pdata
+	store 2,mem_sdp_remote_cid
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_sdp_state
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_connect_rsp_rfcomm:
+	copy timeup,pdata
+	store 2,mem_rfcomm_remote_CID
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_rfcomm_state
+	rtn
+l2cap_proc_signal_connect_rsp_hid_int:
+	copy timeup,pdata
+	store 2,mem_hid_ctrl_remote_cid
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_hid_interrupt_state
+	rtn
+l2cap_proc_signal_connect_rsp_hid_ctrl:
+	copy timeup,pdata
+	store 2,mem_hid_int_remote_cid
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	store 1,mem_hid_control_state
+	rtn
+
+l2cap_proc_signal_config_req:
+	ifetch 1,contr//identifier
+	copy pdata,queue
+	ifetch 2,contr//length
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr//dest cid
+	copy pdata,temp
+	copy temp,regA
+	bpatchx patch22_2,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch l2cap_proc_signal_config_req_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch l2cap_proc_signal_config_req_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch l2cap_proc_signal_config_req_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch l2cap_proc_signal_config_req_hid_int,zero
+	branch l2cap_reject_command
+	//branch L2CAP_proc_signal_config_req_rtn
+l2cap_proc_signal_config_req_sdp:
+	copy contw, timeup
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	//set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_sdp_state
+	copy timeup,contw
+	arg L2CAP_SDP_channel,timeup
+	fetch 2,mem_sdp_remote_cid
+	copy pdata,temp
+	branch l2cap_send_config_rsp
+l2cap_proc_signal_config_req_hid_ctrl:
+	copy contw, timeup
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	//set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_hid_control_state
+	copy timeup,contw
+	arg L2CAP_HID_Control_channel,timeup
+	fetch 2,mem_hid_ctrl_remote_cid
+	copy pdata,temp
+	branch l2cap_send_config_rsp
+l2cap_proc_signal_config_req_hid_int:
+	copy contw, timeup
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	//set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_hid_interrupt_state
+	copy timeup,contw
+	arg L2CAP_HID_Interrupt_channel,timeup
+	fetch 2,mem_hid_int_remote_cid
+	copy pdata,temp
+	branch l2cap_send_config_rsp
+l2cap_proc_signal_config_req_rfcomm:
+	copy contw, timeup
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	//set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_rfcomm_state
+//	jam UPPERSM_RP_SDP_CONN,mem_upper_sm_remote_page
+	copy timeup,contw
+	arg L2CAP_RFCOMM_channel,timeup
+	fetch 2,mem_RFCOMM_remote_CID
+	copy pdata,temp
+l2cap_send_config_rsp:
+	bpatchx patch22_3,mem_patch22
+	setarg  signal_config_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 0x0006
+	istore 2,contw
+	copy temp,pdata
+	istore 2,contw
+	force 0x00,pdata
+	istore 2,contw
+	force L2CAP_config_success,pdata
+	istore 2,contw
+	force 10,pdata
+	iadd regB,regB
+	//copy temp,pdata
+	storet 2,mem_config_req_dest_CID
+	copy queue,pdata
+	store 1,mem_config_identifier
+	force L2CAP_SDP_channel,pdata
+	icompare 0xff,timeup
+	branch l2cap_send_config_rsp_is_sdp,true
+	increase 1,pdata
+l2cap_send_config_rsp_is_sdp:
+	//store 1,mem_send_config_req
+	rtn
+l2cap_check_channel_state:
+	disable user
+	rtnbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	copy contr,contw
+	increase -1,contw
+	istore 1,contw
+	enable user
+	rtn
+l2cap_send_config_req:
+l2cap_send_config_req_sdp:
+	fetch 1,mem_sdp_state
+	call l2cap_check_channel_state
+	nbranch l2cap_send_config_req_rfcomm,user
+	jam L2CAP_SDP_channel,mem_send_config_req
+	fetch 2,mem_sdp_remote_cid
+	store 2,mem_config_req_dest_CID
+	branch l2cap_generate_config_req
+l2cap_send_config_req_rfcomm:
+	fetch 1,mem_rfcomm_state
+	call l2cap_check_channel_state
+	nbranch l2cap_send_config_req_hid_ctrl,user
+	jam L2CAP_RFCOMM_channel,mem_send_config_req
+	fetch 2,mem_RFCOMM_remote_CID
+	store 2,mem_config_req_dest_CID
+	branch l2cap_generate_config_req
+l2cap_send_config_req_hid_ctrl:
+	fetch 1,mem_hid_control_state
+	call l2cap_check_channel_state
+	nbranch l2cap_send_config_req_hid_int,user
+	jam L2CAP_HID_Control_channel,mem_send_config_req
+	fetch 2,mem_hid_ctrl_remote_cid
+	store 2,mem_config_req_dest_CID
+	branch l2cap_generate_config_req
+l2cap_send_config_req_hid_int:
+	fetch 1,mem_hid_interrupt_state
+	call l2cap_check_channel_state
+	nrtn user//End of sending config req
+	jam L2CAP_HID_Interrupt_channel,mem_send_config_req
+	fetch 2,mem_hid_int_remote_cid
+	store 2,mem_config_req_dest_CID
+	//branch L2CAP_generate_config_req
+
+l2cap_generate_config_req:
+	bpatchx patch22_4,mem_patch22
+	call l2cap_get_req_id
+	call l2cap_malloc_signal_channel
+	force 0,regB
+	call l2cap_get_signal_tx_payload
+	force signal_config_req,pdata
+	istore 1,contw
+	fetch 1,mem_ML2CAP_comm_id
+	istore 1,contw
+	setarg 0x0008
+	istore 2,contw
+	fetch 2,mem_config_req_dest_CID
+	istore 2,contw
+	setarg 0x0000
+	istore 2,contw
+	force 1,pdata
+	istore 1,contw
+	force 2,pdata
+	istore 1,contw
+	fetch 1,mem_send_config_req
+	beq L2CAP_RFCOMM_channel,l2cap_generate_config_req_rfcomm
+	setarg L2CAP_config_MTU_SDP
+	istore 2,contw
+	branch l2cap_generate_config_req_done
+l2cap_generate_config_req_rfcomm:
+	setarg L2CAP_config_MTU_RFCOMM
+	istore 2,contw
+l2cap_generate_config_req_done:
+	arg 0x0c,temp
+	storet 2,mem_l2cap_signal_tx_length
+	call l2cap_get_signal_tx_buff
+	fetch 2,mem_l2cap_signal_tx_length
+	istore 2,contw
+	force L2CAP_signal_channel,pdata
+	istore 2,contw
+	jam 0,mem_send_config_req
+l2cap_proc_signal_config_req_rtn:
+	branch l2cap_process_one_signal_rtn
+
+l2cap_proc_signal_config_rsp:
+	increase 1,contr
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr //source cid
+	copy pdata,regA
+	bpatchx patch22_5,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub rega,null
+	branch l2cap_proc_signal_config_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub rega,null
+	branch l2cap_proc_signal_config_rsp_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub rega,null
+	branch l2cap_proc_signal_config_rsp_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub rega,null
+	branch l2cap_proc_signal_config_rsp_hid_int,zero
+	increase 2,contr
+	ifetch 2,contr
+	iforce null
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_config_rsp_sdp:
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata
+	store 1,mem_sdp_state
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_config_rsp_rfcomm:
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata
+	store 1,mem_rfcomm_state
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_config_rsp_hid_ctrl:
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata
+	store 1,mem_hid_control_state
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_config_rsp_hid_int:
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES,pdata
+	store 1,mem_hid_interrupt_state
+	jam BT_EVT_HID_CONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event
+	
+
+
+l2cap_proc_signal_disconnect_req:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr
+	copy pdata,regA
+	ifetch 2,contr
+	copy pdata,timeup
+	copy regA,temp
+	call save_cont_pointers
+	bpatchx patch22_6,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_req_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_req_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_req_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_req_hid_int,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+l2cap_proc_signal_disconnect_req_hid_ctrl:
+	copy timeup,temp
+	fetch 2,mem_hid_ctrl_remote_cid
+	isub temp,null
+	branch l2cap_disconnect_hid_control_now,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+l2cap_proc_signal_disconnect_req_hid_int:
+	copy timeup,temp
+	fetch 2,mem_hid_int_remote_cid
+	isub temp,null
+	branch l2cap_disconnect_hid_interrupt_now,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+
+l2cap_proc_signal_disconnect_req_sdp:
+	copy timeup,temp
+	fetch 2,mem_sdp_remote_cid
+	isub temp,null
+	branch l2cap_disconnect_sdp_now,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+l2cap_disconnect_hid_control_now:
+	call l2cap_reset_hid_ctrl_state
+	branch l2cap_send_disconnect_rsp_pkt
+l2cap_disconnect_hid_interrupt_now:
+	call l2cap_reset_hid_int_state
+	fetch 2, mem_hid_ctrl_remote_cid
+	branch l2cap_send_disconnect_rsp_pkt, blank
+	//set the flag,hid channel close
+	//should we set here?
+	//call HID_mem_lock
+	//fetch 1, mem_hid_cb1
+	//set1 HID_CB_APP_HID_DISCONNECTED,pdata
+	//store 1, mem_hid_cb1
+	//call HID_mem_unlock
+	branch l2cap_send_disconnect_rsp_pkt
+
+l2cap_disconnect_sdp_now:
+	call l2cap_reset_sdp_channel_state
+	fetch 1,mem_upper_sm_ss
+	nbranch l2cap_send_disconnect_rsp_pkt,blank
+	//jam LMP_ENCRYPTION_MODE_REQ,mem_lmo_opcode2
+	//jam UPPERSM_RP_SDP_CONN,mem_upper_sm_remote_page
+	branch l2cap_send_disconnect_rsp_pkt
+l2cap_proc_signal_disconnect_req_rfcomm:
+	copy timeup,temp
+	fetch 2, mem_RFCOMM_remote_CID
+	isub temp,null
+	branch l2cap_disconnect_rfcomm_now,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_req_err_rtn
+l2cap_disconnect_rfcomm_now:
+	call l2cap_reset_rfcomm_channel_state
+	branch l2cap_send_disconnect_rsp_pkt
+l2cap_send_disconnect_rsp_pkt:
+	call load_cont_pointers
+	setarg signal_disconnect_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy regA,pdata
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	force 8,pdata
+	branch l2cap_proc_signal_disconnect_req_rtn
+l2cap_proc_signal_disconnect_req_err_rtn:
+	call load_cont_pointers
+	branch l2cap_proc_signal_disconnect_req_rtn
+l2cap_proc_signal_disconnect_req_rtn:
+	iadd regB,regB
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_disconnect_rsp:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr
+	copy pdata,timeup
+	ifetch 2,contr
+	copy pdata,temp
+	call save_cont_pointers
+	bpatchx patch22_7,mem_patch22
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_rsp_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_rsp_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch l2cap_proc_signal_disconnect_rsp_hid_int,zero
+	call l2cap_reject_command
+	branch l2cap_proc_signal_disconnect_rsp_err_rtn
+l2cap_proc_signal_disconnect_rsp_sdp:
+	copy temp,regA
+	copy timeup,temp
+	fetch 2,mem_sdp_remote_cid
+	isub temp,null
+	call l2cap_reset_sdp_channel_state,zero
+	branch l2cap_proc_signal_disconnect_rsp_rtn
+l2cap_proc_signal_disconnect_rsp_rfcomm:
+	copy temp,regA
+	copy timeup,temp
+	fetch 2,mem_rfcomm_remote_CID
+	isub temp,null
+	call l2cap_reset_rfcomm_channel_state,zero
+	branch l2cap_proc_signal_disconnect_rsp_rtn
+l2cap_proc_signal_disconnect_rsp_hid_ctrl:
+	copy temp,regA
+	copy timeup,temp
+	fetch 2,mem_hid_ctrl_remote_cid
+	isub temp,null
+	call  l2cap_reset_hid_ctrl_state,zero
+	branch l2cap_proc_signal_disconnect_rsp_rtn
+l2cap_proc_signal_disconnect_rsp_hid_int:
+	copy temp,regA
+	copy timeup,temp
+	fetch 2,mem_hid_int_remote_cid
+	isub temp,null
+	call l2cap_reset_hid_int_state,zero
+	branch l2cap_proc_signal_disconnect_rsp_rtn
+l2cap_proc_signal_disconnect_rsp_rtn:
+	call load_cont_pointers
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_disconnect_rsp_err_rtn:
+	branch l2cap_process_one_signal_rtn
+
+/* received an echo request from remote BD.  Will echo the 1st 1 byte back,		*/
+l2cap_proc_signal_echo_req:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	iadd contr,contr
+	setarg 9
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	force 0x0000,pdata
+	istore 2,contw
+	force 4,pdata
+	iadd regB,regB
+	copy regC,pdata
+	isub regA,regC
+	branch l2cap_process_one_signal_rtn
+l2cap_proc_signal_echo_rsp:
+	branch l2cap_process_one_signal_rtn
+
+l2cap_proc_signal_info_rsp:
+	branch l2cap_process_one_signal_rtn
+l2cap_reject_command:
+	force 0,regB
+	call l2cap_get_signal_tx_payload
+	setarg signal_cmd_reject
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 2
+	istore 2,contw
+	setarg cmd_not_understood
+	istore 2,contw
+	increase 6,regB
+	arg 4,regC
+	branch l2cap_process_one_signal_rtn
+
+
+
+l2cap_reset_rfcomm_channel_state:
+	setarg 0
+	store 2,mem_RFCOMM_Tx_pkt_length
+	store 2,mem_RFCOMM_remote_CID
+	jam 0,mem_rfcomm_state
+	rtn
+l2cap_reset_sdp_channel_state:
+	setarg 0
+	store 2,mem_sdp_tx_pkt_length
+	store 2,mem_sdp_remote_cid
+	jam 0,mem_sdp_state
+	rtn
+l2cap_reset_hid_ctrl_state:
+	setarg 0
+	store 2,mem_hid_ctrl_remote_cid
+	jam 0,mem_hid_control_state
+	fetch 1,mem_hid_interrupt_state
+	beq 0,l2cap_reset_hid_disconnected
+	rtn
+
+l2cap_reset_hid_int_state:
+	setarg 0
+	store 2,mem_hid_int_remote_cid
+	jam 0,mem_hid_interrupt_state
+	fetch 1,mem_hid_control_state
+	beq 0,l2cap_reset_hid_disconnected
+	rtn
+	
+l2cap_reset_hid_disconnected:
+	jam BT_EVT_HID_DISCONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event	
+
+l2cap_disconnect_interrupt_req:
+	fetch 1,mem_CONTROL_tasks
+	set0  L2CAP_DISCONNECT_INTERRUPT, pdata
+	store 1,mem_CONTROL_tasks
+	fetch 2, mem_hid_int_remote_cid
+	rtn blank
+	call l2cap_malloc_signal_channel
+	fetch 2, mem_hid_int_remote_cid
+	copy pdata,regA
+	force L2CAP_HID_Interrupt_channel,regB
+	branch l2cap_generate_disconnect_req
+l2cap_disconnect_control_req:
+	fetch 1,mem_CONTROL_tasks
+	set0  L2CAP_DISCONNECT_CONTROL, pdata
+	store 1,mem_CONTROL_tasks
+	fetch 2, mem_hid_ctrl_remote_cid
+	rtn blank
+	call l2cap_malloc_signal_channel
+	fetch 2, mem_hid_ctrl_remote_cid
+	copy pdata,regA
+	force L2CAP_HID_Control_channel,regB
+l2cap_generate_disconnect_req:
+	call l2cap_get_req_id
+	call l2cap_get_signal_tx_payload
+	force signal_disconnect_req,pdata
+	istore 1,contw
+	fetch  1,mem_ML2CAP_comm_id
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy regA,pdata
+	istore 2,contw
+	copy regB,pdata
+	istore 2,contw
+	force 0x08,temp //signal tx length in temp
+	branch ml2cap_send_signal
+
+ml2cap_send_signal_connect_req:
+	bpatchx patch23_0,mem_patch23
+	call l2cap_get_req_id
+	call l2cap_get_signal_tx_payload
+	setarg signal_connect_req
+	istore 1,contw
+	fetch 1,mem_ML2CAP_comm_id
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy temp,pdata	 //PSM
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	arg 8,temp
+	branch ml2cap_send_signal
+ml2cap_send_signal_config_req:
+	bpatchx patch23_1,mem_patch23
+	call l2cap_get_req_id
+	call l2cap_get_signal_tx_payload
+	setarg signal_config_req
+	istore 1,contw
+	fetch 1,mem_ML2CAP_comm_id
+	istore 1,contw
+	setarg 0x0008
+	istore 2,contw
+	/****modigy for nokia*****/
+	copy temp,pdata
+	/*setarg 0x0040*/
+	istore 2,contw
+	setarg 0x0000
+	istore 2,contw
+	setarg 0x01
+	istore 1,contw
+	setarg 0x02
+	istore 1,contw
+	setarg L2CAP_config_MTU_RFCOMM
+	istore 2,contw
+	arg 0xc,temp
+	branch ml2cap_send_signal
+ml2cap_send_signal_disconn_req:
+	bpatchx patch23_2,mem_patch23
+	call l2cap_get_req_id
+	call l2cap_get_signal_tx_payload
+	setarg signal_disconnect_req
+	istore 1,contw
+	fetch 1,mem_ML2CAP_comm_id
+	increase 1,pdata
+	copy contw,regA
+	store 1,mem_ML2CAP_comm_id
+	copy regA,contw
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy temp,pdata
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	arg 0x8,temp
+	//branch ml2cap_send_signal
+	//Fall through
+ml2cap_send_signal:
+	storet 2,mem_l2cap_signal_tx_length
+	copy temp,pdata
+	branch l2cap_malloc_discard,blank
+	call l2cap_get_signal_tx_buff
+	fetch 2,mem_l2cap_signal_tx_length
+	istore 2,contw //make sure that length is still in temp!
+	force L2CAP_signal_channel,pdata
+	istore 2,contw
+	rtn
+
+msdp_send_req_done:
+	fetch 2,mem_sdp_tx_pkt_length
+	branch assert,blank
+	call l2cap_get_sdp_tx_buff
+	fetch 2,mem_sdp_tx_pkt_length
+	istore 2,contw
+	fetch 2,mem_sdp_remote_cid
+	istore 2,contw
+	rtn
+ml2cap_rx_multiplexing:
+	fetch 2, mem_l2cap_rx_pkt_length
+	branch l2cap_rx_reset_state,blank
+	bpatchx patch23_3,mem_patch23
+	fetch 1,mem_l2cap_rx_cid
+	beq L2CAP_signal_channel,ml2cap_call_proc_signal
+	beq L2CAP_SDP_channel,ml2cap_call_proc_sdp
+	beq L2CAP_RFCOMM_channel,l2cap_call_proc_rfcomm
+	beq L2CAP_HID_Control_channel,l2cap_call_proc_hid
+	beq L2CAP_HID_Interrupt_channel,l2cap_call_proc_hid
+	branch l2cap_rx_reset_state
+
+ml2cap_call_proc_signal:
+	bpatchx patch23_4,mem_patch23
+	call l2cap_malloc_signal_channel
+	force 0,regB
+	call l2cap_get_signal_tx_payload
+	copy pdata,contw
+	fetch 2,mem_l2cap_rx_pkt_length
+	copy pdata,regC
+	fetch 2,mem_l2cap_payload_ptr
+	iforce contr
+ml2cap_proc_one_comm_loop:
+	call ml2cap_proc_one_comm
+	increase -4,regC
+	nbranch ml2cap_proc_one_comm_loop,zero
+	copy regB,temp
+	call ml2cap_send_signal
+	branch l2cap_rx_reset_state
+	
+ml2cap_proc_one_comm:
+	ifetch 1,contr
+	beq signal_connect_req,ml2cap_proc_signal_connect_req
+	beq signal_cmd_reject,ml2cap_proc_signal_cmd_reject
+	beq signal_connect_rsp,ml2cap_proc_signal_connect_rsp
+	beq signal_config_rsp,ml2cap_proc_signal_config_rsp
+	beq signal_config_req,ml2cap_proc_signal_config_req
+	beq signal_disconnect_rsp,ml2cap_proc_signal_disconn_rsp
+	beq signal_disconnect_req,ml2cap_proc_signal_disconn_req
+	beq signal_echo_req,l2cap_proc_signal_echo_req
+	beq signal_info_req,ml2cap_proc_signal_info_req
+	branch ml2cap_proc_send_reject
+
+ml2cap_proc_signal_connect_req:
+	call save_cont_pointers
+	//jam NO_RECONNECTION,memui_reconnect_mode
+	call load_cont_pointers
+	branch l2cap_proc_signal_connect_req
+ml2cap_proc_signal_cmd_reject:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+mvptr:
+	ifetch 1,contr
+	increase -1,regA
+	nbranch mvptr,zero
+	rtn
+ml2cap_proc_signal_connect_rsp:
+	ifetch 1,contr //id
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA	//length
+	ifetch 2,contr
+	copy pdata,timeup	//destination	cid
+	ifetch 2,contr
+	copy pdata,temp	//source	cid
+	ifetch 2,contr 		// result
+	sub pdata,0,null
+	branch ml2cap_proc_signal_connect_rsp_sucessful,zero
+	beq L2CAP_connect_refused_PSM_unsupported,ml2cap_proc_signal_connect_refused_result
+	beq L2CAP_connect_refused_no_resources,ml2cap_proc_signal_connect_refused_result
+	branch ml2cap_proc_signal_connect_rsp_mnosucc
+ml2cap_proc_signal_connect_refused_result:
+	jam BT_EVT_ML2CAP_CONN_REFUSED,mem_fifo_temp
+	call ui_ipc_send_event
+ml2cap_proc_signal_connect_rsp_mnosucc:
+	ifetch 2,contr //reason
+	branch mnosucc
+ml2cap_proc_signal_connect_rsp_sucessful:
+	call save_cont_pointers
+	//fetch 1,mem_ML2CAP_comm_id
+	//icompare 0xff,queue
+	//nbranch mnosucc1,true
+	bpatchx patch23_5,mem_patch23
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch ml2cap_proc_signal_connect_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch ml2cap_proc_signal_connect_rsp_rfcomm,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch ml2cap_proc_signal_connect_rsp_hid_int,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch ml2cap_proc_signal_connect_rsp_hid_ctrl,zero
+	branch mnosucc
+ml2cap_proc_signal_connect_rsp_sdp:
+	copy timeup,pdata
+	store 2,mem_sdp_remote_cid
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES
+	store 1,mem_sdp_state
+	branch mnosucc1
+ml2cap_proc_signal_connect_rsp_rfcomm:
+	copy timeup,pdata
+	store 2,mem_RFCOMM_remote_CID
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES
+	store 1,mem_rfcomm_state
+	branch mnosucc1
+ml2cap_proc_signal_connect_rsp_hid_ctrl:
+	copy timeup,pdata
+	store 2,mem_hid_ctrl_remote_cid
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES
+	store 1,mem_hid_control_state
+	branch mnosucc1
+ml2cap_proc_signal_connect_rsp_hid_int:
+	copy timeup,pdata
+	store 2,mem_hid_int_remote_cid
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_CONN_RES
+	store 1,mem_hid_interrupt_state
+	//branch mnosucc1
+
+mnosucc1:
+	call load_cont_pointers
+mnosucc:
+	copy regC,pdata
+	isub regA,regC
+	rtn
+
+ml2cap_proc_signal_config_rsp:
+	ifetch 1,contr		//	Ident
+	copy pdata,queue
+	ifetch 2,contr		//	SigLen
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr		//	DestnCID
+	copy pdata,timeup
+	ifetch 2,contr
+	ifetch 2,contr		//	Get the result value, check success
+	nbranch mcrsdone1,blank
+	call save_cont_pointers
+	//fetch 1,mem_ML2CAP_comm_id
+	//icompare 0xff,queue
+	//nbranch mcfrsdone,true
+	copy timeup,temp
+	bpatchx patch23_6,mem_patch23
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_rsp_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_rsp_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_rsp_hid_int,zero
+ml2cap_proc_signal_config_rsp_sdp:
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+	store 1,mem_sdp_state
+	rtn
+ml2cap_proc_signal_config_rsp_rfcomm:
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+	store 1,mem_rfcomm_state
+	rtn
+ml2cap_proc_signal_config_rsp_hid_ctrl:
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+	store 1,mem_hid_control_state
+	rtn
+ml2cap_proc_signal_config_rsp_hid_int:
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_RES
+	store 1,mem_hid_interrupt_state
+	jam BT_EVT_HID_CONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+mcfrsdone:
+	call load_cont_pointers
+mcrsdone1:
+	increase -6,regA
+mloop2:
+	branch mcrsdone,zero
+	increase 1,contr
+	increase -1,regA
+	branch mloop2
+mcrsdone:
+	rtn
+ml2cap_proc_signal_config_req:
+	ifetch 1,contr		//	Ident
+	copy pdata,queue
+	ifetch 2,contr		//	SigLen
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+	ifetch 2,contr		//	DestnCID
+	increase 2,contr
+	copy pdata,temp
+	setarg  signal_config_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	increase 2,regA
+	copy regA,pdata
+	istore 2,contw
+	call save_cont_pointers
+	bpatchx patch23_7,mem_patch23
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_req_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_req_rfcomm,zero
+	setarg L2CAP_HID_Control_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_req_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	isub temp,null
+	branch ml2cap_proc_signal_config_req_hid_int,zero
+	branch mcfgrq_done
+ml2cap_proc_signal_config_req_sdp:
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	store 1,mem_sdp_state
+	bbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,ml2cap_proc_signal_config_req_sdp_nsndreq
+	fetcht 1,mem_CONTROL_tasks
+	set1 L2CAP_init_Config_Req,temp
+	storet 1,mem_CONTROL_tasks
+	copy queue,pdata
+	increase 1,pdata
+	store 1,mem_config_identifier
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_sdp_state
+ml2cap_proc_signal_config_req_sdp_nsndreq:
+	fetch 2,mem_sdp_remote_cid
+	store 2,mem_config_req_dest_CID
+	branch mcfgrq_done
+ml2cap_proc_signal_config_req_rfcomm:
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	store 1,mem_rfcomm_state
+	fetch 2,mem_RFCOMM_remote_CID
+	branch mcfgrq_done
+ml2cap_proc_signal_config_req_hid_ctrl:
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	store 1,mem_hid_control_state
+	fetch 2,mem_hid_ctrl_remote_cid
+	branch mcfgrq_done
+ml2cap_proc_signal_config_req_hid_int:
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_RCV_CFG_REQ,pdata
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_RES,pdata
+	store 1,mem_hid_interrupt_state
+	fetch 2,mem_hid_int_remote_cid
+	//branch mcfgrq_done
+
+mcfgrq_done:
+	copy pdata,timeup
+	call load_cont_pointers
+/*******for Nokia**************/
+	copy timeup,pdata
+	/*setarg 0x0040*/
+	istore 2,contw
+	force 0x0000,pdata
+	istore 2,contw
+	force 0x0000,pdata
+	istore 2,contw
+	force 10,pdata
+	iadd regB,regB
+	increase -6,regA
+mloop1:
+	branch mcrqdone,zero
+	ifetch 1,contr
+	istore 1,contw
+	increase 1,regB
+	increase -1,regA
+	branch mloop1
+mcrqdone:
+	rtn
+ml2cap_proc_signal_disconn_req:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	copy regC,pdata
+	isub regA,regC
+
+	ifetch 2,contr
+	copy pdata,regA
+	ifetch 2,contr
+	copy pdata,timeup
+	call save_cont_pointers
+	bpatchx patch24_0,mem_patch24
+	setarg L2CAP_SDP_channel
+	copy regA,temp
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_sdp,zero
+	setarg L2CAP_HID_Control_channel
+	copy regA,temp
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_hid_ctrl,zero
+	setarg L2CAP_HID_Interrupt_channel
+	copy regA,temp
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_hid_int,zero
+	branch mclsrfc
+ml2cap_proc_signal_disconn_sdp:
+	setarg 0x0000
+	store 2,mem_sdp_tx_pkt_length
+	store 2,mem_sdp_remote_cid
+	store 1,mem_sdp_state
+	branch mclssdp
+ml2cap_proc_signal_disconn_hid_ctrl:
+	call l2cap_reset_hid_ctrl_state
+	branch mclssdp
+ml2cap_proc_signal_disconn_hid_int:
+	call l2cap_reset_hid_int_state
+	//call HID_mem_lock
+	//fetch 1, mem_hid_cb1
+	//set1 HID_CB_APP_HID_DISCONNECTED,pdata
+	//store 1, mem_hid_cb1
+	//call HID_mem_unlock
+	branch mclssdp
+mclsrfc:
+	setarg 0x0000
+	store 2,mem_RFCOMM_Tx_pkt_length
+mclssdp:
+	call load_cont_pointers
+	setarg signal_disconnect_rsp
+	istore 1,contw
+	copy queue,pdata
+	istore 1,contw
+	setarg 0x0004
+	istore 2,contw
+	copy regA,pdata
+	istore 2,contw
+	copy timeup,pdata
+	istore 2,contw
+	force 8,pdata
+	iadd regB,regB
+	rtn
+
+ml2cap_proc_signal_disconn_rsp:
+	ifetch 1,contr
+	copy pdata,queue
+	ifetch 2,contr
+	copy pdata,regA
+	ifetch 2,contr
+	copy pdata,timeup
+	ifetch 2,contr
+	copy pdata,temp
+	call save_cont_pointers
+	bpatchx patch24_1,mem_patch24
+	fetch 1,mem_ML2CAP_comm_id
+	icompare 0xff,queue
+	nbranch mdisdone,true
+	setarg L2CAP_SDP_channel
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_rsp_sdp,zero
+	setarg L2CAP_RFCOMM_channel
+	isub temp,null
+	branch ml2cap_proc_signal_disconn_rsp_rfcomm,zero
+	branch mdisdone
+ml2cap_proc_signal_disconn_rsp_sdp:
+	jam 0,mem_sdp_remote_cid
+	jam 0,mem_sdp_state
+	branch mdisdone
+ml2cap_proc_signal_disconn_rsp_rfcomm:
+	//
+	//
+mdisdone:
+	call load_cont_pointers
+	copy regC,pdata
+	isub regA,regC
+	rtn
+
+ml2cap_proc_send_reject:
+	setarg signal_cmd_reject
+	istore 1,contw
+	ifetch 1,contr
+	istore 1,contw
+	setarg 0x0002
+	istore 2,contw
+	setarg 0x0000
+	istore 2,contw
+	setarg 0x0006
+	iadd regB,regB
+	force 4,regC
+	rtn
+	
+//l2cap command id, 0 is not allowed
+l2cap_get_req_id:
+	fetch 1,mem_ML2CAP_comm_id
+	increase 1,pdata
+	bne 0,l2cap_get_req_id_ok
+	increase 1,pdata
+l2cap_get_req_id_ok:
+	store 1,mem_ML2CAP_comm_id
+	rtn
+
+
+/*********************************************************/
+//char* malloc(short len)
+//input: regA -> len
+//rtn: regB -> pbuff;return from pdata
+//val: queue -> i
+//val: timeup -> buff_cnt
+/*********************************************************/
+l2cap_malloc:
+	bpatchx patch24_2,mem_patch24
+	arg 0,regb
+	call l2cap_malloc_is_fifo_full
+	nbranch assert,blank//assert when fifo full
+	call l2cap_malloc_get_full_map
+ifdef DEBUG_MALLOC
+	call l2cap_malloc_log_get_ptr
+	copy regA,pdata
+	istore 2,contw
+	sub pdata,1024,null
+	branch assert,positive
+	branch assert,blank
+endif
+	arg mem_tx_buff0,regB//pbuff = buff0;
+	arg 0,queue // i = 0;
+l2cap_malloc_loop:
+	fetcht 1,mem_used_map
+	qisolate1 temp
+	branch l2cap_malloc_next,true//if(1 == (used_map & (1 << i)))goto next;
+	call l2cap_malloc_enough
+	sub timeup,0,null// (0 - timeup)
+	branch l2cap_malloc_next,positive//if(buff_cnt <= 0)goto next;
+	call l2cap_malloc_into_fifo
+	branch l2cap_malloc_rtn//return (pbuff);
+l2cap_malloc_next:
+	increase 128,regB//pbuff += BUFF_SIZE;//point to next buff
+	increase 1,queue
+	setarg 8//BUFF_MAX_COUNT
+	isub queue,null //BUFF_MAX_COUNT - i
+	branch l2cap_malloc_loop,positive//while(i < buff_max_count)
+	arg 0,regB//return NULL
+l2cap_malloc_rtn:
+ifdef DEBUG_MALLOC
+	call l2cap_malloc_log_get_ptr
+	copy regB,pdata
+	istore 2,contw
+endif
+	copy regB,pdata
+	branch assert,blank
+	rtn//return pointer via pdata
+	
+/*********************************************************/
+//void* l2cap_malloc_fifo_out(void)
+//output:len -> temp
+//output:ptr ->pdata
+//only get ptr,not free
+/*********************************************************/
+l2cap_malloc_fifo_out:
+	bpatchx patch24_3,mem_patch24
+	call l2cap_malloc_fifo_get_first_ptr
+	increase 1,contr
+	ifetch 2,contr //ptr ->pdata
+	rtn 
+
+/*********************************************************/
+//void free_first_buff_in_fifo(void)
+//only free the first one
+/*********************************************************/
+l2cap_malloc_free:
+	bpatchx patch24_4,mem_patch24
+	call l2cap_malloc_fifo_get_first_ptr
+	copy contr,contw
+	copy contr,temp
+	setarg 0
+	istore 3,contw
+ifdef DEBUG_MALLOC
+	call l2cap_malloc_log_get_ptr
+	setarg 0xaa
+	istore 1,contw
+	istoret 1,contw
+endif
+	rtn
+/*********************************************************/
+//void l2cap_malloc_discard(void)
+//discard the latest malloc
+/*********************************************************/
+l2cap_malloc_discard:
+	bpatchx patch24_5,mem_patch24
+	call l2cap_malloc_is_fifo_empty
+	branch assert,blank
+	fetch 3,mem_tx_fifo2
+	store 3,mem_tx_fifo3
+	fetch 3,mem_tx_fifo1
+	store 3,mem_tx_fifo2
+	fetch 3,mem_tx_fifo0
+	store 3,mem_tx_fifo1
+	rtn
+/*********************************************************/
+//bool fifo_is_full(void)
+//blank == 1: not full
+//blank == 0: full
+/*********************************************************/
+l2cap_malloc_is_fifo_full:
+	bpatchx patch24_6,mem_patch24
+	fetch 3,mem_tx_fifo0
+	rtn
+/*********************************************************/
+//bool fifo_nearly_full(void)
+//blank == 1: nearly full
+//blank == 0: not nearly full
+/*********************************************************/
+l2cap_malloc_is_fifo_nearly_full:
+	bpatchx patch24_7,mem_patch24
+	fetch 3,mem_tx_fifo1
+	rtn
+/*********************************************************/
+//bool fifo_is_empty(void)
+//blank == 1: empty
+//blank == 0: not empty
+/*********************************************************/
+l2cap_malloc_is_fifo_empty:
+	bpatchx patch25_0,mem_patch25
+	fetch 3,mem_tx_fifo3
+	rtn
+/*********************************************************/
+//char* l2cap_malloc_fifo_get_first_ptr(void)
+//output:contr  -->ptr
+/*********************************************************/	
+l2cap_malloc_fifo_get_first_ptr:
+	call l2cap_malloc_is_fifo_empty
+	branch assert,blank // fifo is empty
+	arg mem_tx_fifo0,contr
+ifdef DEBUG_MALLOC
+	arg 5,loopcnt
+l2cap_malloc_free_loop:
+	increase -1,loopcnt
+	copy loopcnt,pdata
+	branch assert,blank
+else
+l2cap_malloc_free_loop:
+endif
+	ifetch 3,contr
+	branch l2cap_malloc_free_loop,blank
+	increase -3,contr
+	rtn
+
+/*********************************************************/
+//char* l2cap_malloc_get_full_map(void)
+//output:mem_used_map  -->full_map
+//add all maps into one
+/*********************************************************/	
+l2cap_malloc_get_full_map:
+	bpatchx patch25_1,mem_patch25
+	arg 4,loopcnt
+	arg mem_tx_fifo0_map,contr
+	arg 0,temp
+l2cap_malloc_get_full_map_loop:	
+	ifetch 3,contr
+	and pdata,0xff,pdata
+	ior temp,temp
+	loop l2cap_malloc_get_full_map_loop
+	storet 1,mem_used_map
+	rtn
+/*********************************************************/
+//void buff_into_fifo(char buff_index, char buff_cnt, short len)
+//input: regA -> len
+//input: regC -> buff_index
+//input: timeup -> buff_cnt
+//val:temp ->   (fifo->map)
+/*********************************************************/
+l2cap_malloc_into_fifo:
+	bpatchx patch25_2,mem_patch25
+	call l2cap_malloc_is_fifo_full
+	nbranch assert,blank //fifo full
+	call l2cap_malloc_is_fifo_empty
+	branch l2cap_malloc_into_fifo_no_push,blank//fifo empty, no need to push
+	fetch 3,mem_tx_fifo1
+	store 3,mem_tx_fifo0
+	ifetch 3,contr//mem_tx_fifo2
+	istore 3,contw//mem_tx_fifo1
+	ifetch 3,contr//mem_tx_fifo3
+	istore 3,contw//mem_tx_fifo2
+	setarg 0
+	istore 3,contw//mem_tx_fifo3
+l2cap_malloc_into_fifo_no_push:
+	arg 0,temp
+	copy timeup,pdata
+	iadd queue,pdata
+l2cap_malloc_into_fifo_loop:
+	qset1 temp//fifo->map |= 1 << i;
+	increase 1,queue
+	isub queue,null
+	nbranch l2cap_malloc_into_fifo_loop,zero
+	//map in temp
+	lshift8 regB,pdata
+	ior temp,pdata
+	store 3,mem_tx_fifo3
+	rtn
+
+/*********************************************************/
+//char is_size_enough(char buff_index, short len)
+//input: regA -> len
+//input: queue -> buff_index
+//rtn: timeup -> buff_cnt
+//val: max_size_fom_buff_index -> temp
+//val: i -> loopcnt
+/*********************************************************/
+l2cap_malloc_enough:
+	bpatchx patch25_3,mem_patch25
+	call l2cap_malloc_get_full_map
+	copy queue,regC//restore buff_index to regC
+	arg 0,temp
+	arg 0,timeup//default return val
+	//increase 1,queue
+l2cap_malloc_enough_loop:
+	copy queue,pdata
+	beq 8,l2cap_malloc_enough_end
+	fetch 1,mem_used_map
+	qisolate1 pdata
+	branch l2cap_malloc_enough_end,true
+	increase 128,temp
+	increase 1,queue
+	copy regA,pdata
+	isub temp,null
+	branch l2cap_malloc_enough_end,zero//(max_size_fom_buff_index ==  len)
+	branch l2cap_malloc_enough_loop,positive//(max_size_fom_buff_index <  len)
+l2cap_malloc_enough_end:
+	copy temp,pdata
+	isub regA,null
+	nbranch l2cap_malloc_enough_rtn,positive// max_size_fom_buff_index - len > 0
+	copy queue,pdata//i
+	copy regC,temp//buff_index
+	isub temp,timeup//return (i - buff_index)
+l2cap_malloc_enough_rtn:
+	copy regC,queue//restore buff_index to queue
+	rtn
+	
+ifdef DEBUG_MALLOC
+l2cap_malloc_log_get_ptr:
+	fetch 2,mem_tx_malloc_log
+	increase 2,pdata
+	store 2,mem_tx_malloc_log
+	sub pdata,62,null
+	nbranch l2cap_malloc_log_clean,positive
+	increase -2,pdata
+	iadd contw,contw
+	rtn
+l2cap_malloc_log_clean:
+	jam 0x00,mem_tx_malloc_log
+	branch l2cap_malloc_log_get_ptr	
+endif
+
+l2cap_malloc_signal_channel:
+	bpatchx patch25_4,mem_patch25
+	arg L2CAP_SIGNAL_MALLOC_SIZE,regA
+	call l2cap_malloc
+	store 2,mem_l2cap_signal_tx_buff_ptr
+	increase 4,pdata
+	store 2,mem_l2cap_signal_tx_payload_ptr
+	setarg 0
+	store 2,mem_l2cap_signal_tx_length
+	rtn
+
+l2cap_get_signal_tx_buff:
+	fetch 2,mem_l2cap_signal_tx_buff_ptr
+	branch l2cap_util_pdata_to_contw
+
+l2cap_get_signal_tx_payload:
+	fetch 2,mem_l2cap_signal_tx_payload_ptr
+	branch l2cap_util_pdata_to_contw
+
+
+l2cap_malloc_sdp_channel:
+	bpatchx patch25_5,mem_patch25
+	arg SDP_MALLOC_SIZE,regA
+	call l2cap_malloc
+	store 2,mem_sdp_tx_buff_ptr
+	increase 4,pdata
+	store 2,mem_sdp_tx_payload_ptr
+	setarg 0
+	store 2,mem_sdp_tx_pkt_length
+	rtn
+
+l2cap_get_sdp_tx_buff:
+	fetch 2,mem_sdp_tx_buff_ptr
+	branch l2cap_util_pdata_to_contw
+
+l2cap_get_sdp_tx_payload:
+	fetch 2,mem_sdp_tx_payload_ptr
+	branch l2cap_util_pdata_to_contw
+
+
+l2cap_malloc_rfcomm_channel:
+	bpatchx patch25_6,mem_patch25
+	call push_stack
+	jam RFCOMM_MALLOC_FAIL,mem_rfcomm_malloc_fail_flag
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	arg RFCOMM_MALLOC_SIZE,regA
+	call l2cap_malloc
+	store 2,mem_rfcomm_tx_buff_ptr
+	increase 4,pdata
+	store 2,mem_rfcomm_tx_payload_ptr
+	setarg 0
+	store 2,mem_rfcomm_tx_pkt_length
+	jam RFCOMM_MALLOC_SUCCEED,mem_rfcomm_malloc_fail_flag
+	branch pop_stack
+
+l2cap_get_rfcomm_tx_buff:
+	fetch 2,mem_rfcomm_tx_buff_ptr
+	branch l2cap_util_pdata_to_contw
+	
+l2cap_util_pdata_to_contw:
+	branch assert,blank
+	copy pdata,contw
+	rtn
+	
+
+l2cap_lpm_save_calc_len:
+	bpatchx patch25_7,mem_patch25
+	arg 0,regb
+	arg mem_tx_fifo0_map,rega
+	increase -2,rega
+l2cap_lpm_save_calc_len_loop:
+	increase 2,rega
+	setarg mem_tx_fifo_end
+	isub rega,null
+	branch l2cap_lpm_save_calc_len_end,zero //end of 2lcap tx fifo
+	ifetch 1,rega
+	increase 1,rega
+	branch l2cap_lpm_save_calc_len_loop,blank
+	ifetcht 2,rega
+	ifetch 2,temp
+	iadd regb,regb
+	increase 4,regb //l2cap header len
+	branch l2cap_lpm_save_calc_len_loop
+l2cap_lpm_save_calc_len_end:
+	copy regb,pdata
+	rtn
+
+
+l2cap_lpm_get_wake_lock:
+	arg wake_lock_l2cap_tx,queue
+	branch lpm_get_wake_lock
+
+l2cap_lpm_put_wake_lock:
+	arg wake_lock_l2cap_tx,queue
+	branch lpm_put_wake_lock
+	
+l2cap_lpm_save_txbuf:
+	bpatchx patch26_0,mem_patch26
+	call l2cap_malloc_get_full_map
+	fetch 1,mem_used_map
+	rtn blank
+	call l2cap_lpm_save_calc_len
+	arg l2cap_lpm_txbuf_len,temp
+	isub temp,null
+	branch l2cap_lpm_get_wake_lock,positive //no enougth space to save l2cap tx data
+	call l2cap_lpm_put_wake_lock
+	arg mem_l2cap_lpm_txbuf,contw
+	arg mem_tx_fifo0,rega
+l2cap_lpm_save_txbuf_loop:
+	setarg mem_tx_fifo_end
+	isub rega,null
+	rtn zero //end of 2lcap tx fifo
+	ifetch 1,rega  //mem_tx_fifoX_map
+	increase 1,rega
+	nbranch l2cap_lpm_save_txbuf_nempty,blank
+	istore 2,contw // length = 0
+	increase 2,rega
+	branch l2cap_lpm_save_txbuf_loop
+l2cap_lpm_save_txbuf_nempty:
+	ifetch 2,rega //ptr
+	increase 2,rega
+	copy pdata,contr
+	ifetch 2,contr  //l2cap len
+	istore 2,contw
+	copy pdata,loopcnt
+	increase 2,loopcnt //add CID len
+	call memcpy
+	branch l2cap_lpm_save_txbuf_loop
+	
+l2cap_lpm_load_txbuf:
+	bpatchx patch26_1,mem_patch26
+	call l2cap_malloc_get_full_map
+	fetch 1,mem_used_map
+	rtn blank
+	arg mem_tx_fifo0_ptr,rega
+	increase -3,rega //mem_tx_fifo0_ptr -3
+	arg mem_l2cap_lpm_txbuf,contr
+l2cap_lpm_load_txbuf_loop:
+	increase 3,rega //mem_tx_fifoX_ptr
+	setarg mem_tx_fifo_end+1
+	isub rega,null
+	rtn zero //end of 2lcap tx fifo
+	ifetch 2,contr
+	branch l2cap_lpm_load_txbuf_loop,blank
+	increase 4,pdata //l2cap header len
+	copy pdata,loopcnt
+	copy contr,regb
+	ifetch 2,rega //ptr
+	copy pdata,contw
+	copy regb,contr
+	increase -2,contr
+	call memcpy
+	branch l2cap_lpm_load_txbuf_loop
+	
+
+
+	
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/le.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/le.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/le.prog	(working copy)
@@ -0,0 +1,1839 @@
+ifdef COMPILE_LE
+//******************************************//
+//*************LE INIT ****************//
+//******************************************//
+
+
+le_init_conn:
+	bpatchx patch26_2,mem_patch26
+	disable wake
+	jam 1,mem_le_conn_handle
+	jam 3,mem_le_state
+	jam 1,mem_le_arq
+	setarg -1
+	store 2,mem_le_event_count
+	force 0,pdata
+	store 1,mem_le_ch
+	store 1,mem_le_op
+	store 3,mem_sniff_rcv
+	store 3,mem_sniff_lost
+	store 5,mem_le_pcnt_tx
+	set1 39,pdata
+	store 5,mem_le_pcnt_rx
+	jam 1,mem_le_txheader
+	jam 0,mem_le_txlen
+	branch le_supervision_flush
+
+le_init_master:
+	bpatchx patch26_3,mem_patch26
+	enable master
+	jam lemode_master,mem_le_mode
+	jam 1,mem_le_att_handle
+	jam 1,mem_le_search_handle_start
+	setarg 0xffff
+	store 2,mem_le_search_handle_end
+	force 0,pdata
+	store 5,mem_le_pcnt_rx
+	set1 39,pdata
+	store 5,mem_le_pcnt_tx	
+	branch le_init_conn
+
+
+le_init_slave:
+	bpatchx patch26_4,mem_patch26
+	disable master
+ 	setarg 0x17
+ 	store 2,mem_le_remote_mtu
+	jam lemode_slave,mem_le_mode
+	jam 0,mem_le_adv_enable
+	jam 0,mem_lpm_current_mult
+	jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state
+	jam FLAG_LE_ENC_NULL,mem_le_enc_state
+	fetch 2,mem_le_superto
+	store 2,mem_le_init_superto
+	fetch 2,mem_le_tsniff
+	mul32 pdata,5,pdata
+	rshift4 pdata,pdata
+	store 2,mem_le_superto			// vol.6 part B 4.5.2 only 6*conninterval before establish
+	branch le_init_conn
+	
+
+//******************************************//
+//*************LE main process*********//
+//******************************************//
+le_dispatch:
+	call le_enable
+	call le_scan
+	call le_adv
+	branch le_disable
+
+le_conn_dispatch:
+	bpatchx patch26_5,mem_patch26
+	call le_enable
+	call app_process_ble
+	fetch 1,mem_le_mode
+	beq lemode_master,le_master_dispatch
+	branch le_slave_dispatch
+	
+//******************************************//
+//***********LE master process*********//
+//******************************************//
+	
+le_master_dispatch:
+	bpatchx patch26_6,mem_patch26
+	enable master
+	call le_supervision_update
+	branch le_master_disconn,positive
+	call check_ble_disabled
+	call le_setup
+	call le_prepare_tx
+	disable match
+	call le_transmit_receive_sifs
+	nrtn match
+	bpatchx patch26_7,mem_patch26
+	fetch 1,mem_le_conn_rcv
+	increase 1,pdata
+	store 1,mem_le_conn_rcv
+	call le_acknowledge
+	disable master
+	rtn
+	
+le_master_disconn:
+	call le_disconnect
+	disable master
+	rtn
+	
+//******************************************//
+//***********LE slave process***********//
+//******************************************//
+le_slave_dispatch:
+	bpatchx patch27_0,mem_patch27
+	jam 0,mem_le_md_count
+ifdef SECURE_CONNECTION
+	call sp_calc_sequence_256
+	call le_secure_connect_sm
+endif
+	disable attempt
+	call le_supervision_update
+	branch le_slave_disconn,positive
+	call check_ble_disabled
+	call le_setup
+	call le_receive_slave
+	nbranch le_slave_unsync,sync	// vol.6 part B 4.5.1 respond even crc error
+	call le_got_first_packet
+	branch le_slave_match,match
+	branch le_slave_cont
+	
+
+le_slave_match:
+	bpatchx patch27_1,mem_patch27
+	fetch 1,mem_le_md_count
+	pincrease 1
+	store 1,mem_le_md_count
+	beq LE_MD_MAX_COUNT,le_slave_cont
+	call le_acknowledge
+	call le_prepare_tx
+	call le_transmit_norx
+	call le_parse
+	fetch 2,mem_cb_ble_transmit
+	call callback_func
+	call le_check_md
+	branch le_slave_more_data,user
+le_slave_cont:
+	bpatchx patch27_2,mem_patch27
+	call le_pairing_sm
+ 	call le_check_paring_time
+	call check_51cmd
+	fetch 1,mem_le_op
+	bbit1 op_disconn,le_slave_disconn
+le_slave_unsync:
+	bpatchx patch27_3,mem_patch27
+	call le_lpm_set_mult
+	call le_update_channel_map
+	call le_update_param
+	branch calc_clke_offset
+
+
+le_check_md:
+	disable user
+	bmark1 mark_ble_rx_md,enable_user
+	bmark1 mark_ble_tx_md,enable_user
+	rtn
+
+
+le_slave_more_data:
+	bpatchx patch27_4,mem_patch27
+	enable attempt
+	call le_transmit_receive_sifs_notx
+	branch le_slave_match,match
+	branch le_slave_cont
+
+le_slave_disconn:
+
+	//fall through
+le_disconnect:
+	bpatchx patch27_5,mem_patch27
+	call le_clear_connection_info
+	call app_disconn_reason_collect_ble
+ifdef SECURE_CONNECTION
+	call sp_initialize_256
+endif
+	jam BT_EVT_LE_DISCONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event
+
+le_clear_connection_info:
+	setarg 0
+	store 9,mem_le_tx_buff_used
+	jam 0,mem_le_conn_handle
+	jam lemode_idle,mem_le_mode
+	jam 0,mem_le_state
+	jam FLAG_LE_ENC_NULL,mem_le_enc_state
+	jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state
+	rtn
+	
+le_got_first_packet:
+	bpatchx patch27_6,mem_patch27
+	fetch 1,mem_le_conn_rcv
+	increase 1,pdata
+	store 1,mem_le_conn_rcv
+	fetch 1,mem_le_state
+	rtnbit1 lestate_got_first_packet
+	set1 lestate_got_first_packet
+	store 1,mem_le_state
+	fetch 2,mem_le_init_superto
+	store 2,mem_le_superto
+	setarg 0
+	store 4,mem_le_transmit_window
+	rtn
+
+
+le_enable:
+	bpatchx patch27_7,mem_patch27
+	jam 0x36,rf_adc_goff        /*For BLE, tune AGC_gain_offset, Max added*/
+	jam 0x5f,rf_agc_nsat        //for BLE
+	enable le
+	jam 7,rfen_ulp			/* enable ulp */
+	call check_ble_disabled
+	fetch 1,mem_250k_freq_enable	//default: 0
+	rtn blank
+	jam 0xb8,rf_iq_gain
+	rtn
+	
+le_disable:
+	bpatchx patch28_0,mem_patch28
+	jam 0x2e,rf_adc_goff        /*For BR/EDR, tune AGC_gain_offset, Max added*/
+	jam 0xff,rf_agc_nsat         //for EDR&BR
+	disable le
+	jam 3,rfen_ulp
+	arg 0,stop_watch
+	rtn
+	
+le_prep:
+	disable enable_crc
+	disable enable_white
+	fetch 3,mem_le_crcinit
+	iforce crc24_init
+	fetch 1,mem_le_ch_mapped
+	reverse pdata,temp
+	set1 1,temp
+	rshift temp,white_init
+	rtn
+	
+
+lerx_setfreq:
+	call le_setfreq
+	call set_freq_rx
+	setarg param_pll_setup
+	call sleep
+	branch rf_rx_enable
+
+letx_setfreq:
+	branch txon,match
+letx_setfreq0:
+	call le_setfreq
+	branch set_freq_tx
+le_setfreq:
+	bpatchx patch28_1,mem_patch28
+	call set_sync_on
+	fetch 1, mem_le_testtype
+	nbranch le_ctf_test,blank
+	fetch 1,mem_le_ch_mapped
+	sub pdata,36,null
+	branch le_ctf_normal,positive
+	force 0,temp
+	rtneq 37
+	force 24,temp
+	rtneq 38
+	force 78,temp
+	rtn
+	
+le_ctf_normal:
+	sub pdata,10,null
+	branch le_ctf_low,positive
+	increase 1,pdata
+	
+le_ctf_low:	
+	lshift pdata,pdata
+	add pdata,2,temp
+	rtn
+	
+le_ctf_test:
+	fetch 1,mem_le_ch_mapped
+	lshift pdata,temp
+	rtn
+
+le_sca_map:
+	arg 500,temp
+	rtn blank
+	arg 250,temp
+	rtneq 1
+	arg 150,temp
+	rtneq 2
+	arg 100,temp
+	rtneq 3
+	arg 75,temp
+	rtneq 4
+	arg 50,temp
+	rtneq 5
+	arg 40,temp
+	rtneq 6
+	arg 20,temp
+	rtn
+
+
+	
+le_adv_access:
+	setarg 0x8e89be
+	lshift8 pdata,pdata
+	or_into 0xd6,pdata
+	iforce access
+	setarg 0x555555
+	store 3,mem_le_crcinit
+	rtn
+
+le_setup:
+	bpatchx patch28_2,mem_patch28
+	enable swfine
+	fetch 4,mem_le_access
+	iforce access
+	call le_map_channel
+	setarg 0x200
+	branch le_setup_master,master
+	fetch 2,mem_le_receive_window
+	rshift pdata,pdata
+le_setup_master:
+	arg param_pll_setup,temp
+	iadd temp,pdata
+	call ahead_window
+	deposit clke
+	store 6,mem_le_rxon_ts
+	rtn
+
+le_next_adv_channel:
+	bpatchx patch28_3,mem_patch28
+	fetch 1,mem_le_ch_mapped
+	beq 37,le_next_adv_channel_curr_channel_37
+	beq 38,le_next_adv_channel_curr_channel_38
+	beq 39,le_next_adv_channel_curr_channel_39
+	branch le_next_adv_channel_curr_channel_39
+
+le_next_adv_channel_curr_channel_37:
+	fetcht 1,mem_le_adv_channel_map
+	isolate1 BIT_ADV_CHANNEL_MAP_38,temp		//check 38 channel enable
+	branch set_le_next_adv_channel_38,true
+	isolate1 BIT_ADV_CHANNEL_MAP_39,temp		//check 39 channel enable
+	branch set_le_next_adv_channel_39,true
+	branch set_le_next_adv_channel_37
+
+
+le_next_adv_channel_curr_channel_38:
+	fetcht 1,mem_le_adv_channel_map
+	isolate1 BIT_ADV_CHANNEL_MAP_39,temp		//check 39 channel enable
+	branch set_le_next_adv_channel_39,true
+	isolate1 BIT_ADV_CHANNEL_MAP_37,temp		//check 37 channel enable
+	branch set_le_next_adv_channel_37,true
+	branch set_le_next_adv_channel_38
+
+
+le_next_adv_channel_curr_channel_39:
+	fetcht 1,mem_le_adv_channel_map
+	isolate1 BIT_ADV_CHANNEL_MAP_37,temp		//check 37 channel enable
+	branch set_le_next_adv_channel_37,true
+	isolate1 BIT_ADV_CHANNEL_MAP_38,temp		//check 38 channel enable
+	branch set_le_next_adv_channel_38,true
+	branch set_le_next_adv_channel_39
+
+
+
+set_le_next_adv_channel_37:
+	jam 37,mem_le_ch_mapped
+	fetch 1,mem_le_adv_channel_map_temp
+	set1 BIT_ADV_CHANNEL_MAP_37,pdata
+	store 1,mem_le_adv_channel_map_temp
+	rtn
+
+set_le_next_adv_channel_38:
+	jam 38,mem_le_ch_mapped
+	fetch 1,mem_le_adv_channel_map_temp
+	set1 BIT_ADV_CHANNEL_MAP_38,pdata
+	store 1,mem_le_adv_channel_map_temp
+	rtn
+
+set_le_next_adv_channel_39:
+	jam 39,mem_le_ch_mapped
+	fetch 1,mem_le_adv_channel_map_temp
+	set1 BIT_ADV_CHANNEL_MAP_39,pdata
+	store 1,mem_le_adv_channel_map_temp
+	rtn
+
+
+
+le_context_nexthop:
+	bpatchx patch28_4,mem_patch28
+	add rega,coffset_mode,contr
+	ifetch 1,contr
+	rtnbit0 mode_le
+	add rega,coffset_le_event_cnt,contw
+	ifetch 2,contw
+	increase 1,pdata
+	istore 2,contw
+	add rega,coffset_le_hop,contr
+	ifetch 1,contr
+	add rega,coffset_le_ch,contw
+	ifetcht 1,contw
+	iadd temp,pdata
+	sub pdata,36,null
+	branch le_nexthop_nowrap,positive
+	increase -37,pdata
+le_nexthop_nowrap:
+	istore 1,contw
+	rtn
+
+
+le_calc_channel_map:
+	bpatchx patch28_5,mem_patch28
+	fetch 5,mem_le_channel_map
+	force 0,temp
+	force 37,loopcnt
+le_count_channels_loop:
+	bbit0 0,le_count_channels_notused
+	increase 1,temp
+le_count_channels_notused:
+	rshift pdata,pdata
+	loop le_count_channels_loop
+	add temp,-1,pdata
+	store 1,mem_le_channels
+	rtn
+
+le_map_channel:
+	bpatchx patch28_6,mem_patch28
+	fetch 1,mem_le_ch
+	iforce queue
+	fetcht 5,mem_le_channel_map
+	qisolate1 temp
+	branch le_map_channel_end,true
+le_map_channel_next:
+	bpatchx patch28_7,mem_patch28
+	fetch 1,mem_le_channels
+	isub queue,pdata
+	branch le_map_channel_cont,positive
+	sub pdata,-1,queue
+	branch le_map_channel_next
+le_map_channel_cont:
+	copy queue,loopcnt
+	force 0,queue
+le_map_channel_loop:
+	qisolate1 temp
+	branch le_map_channel_skip,true
+	increase 1,loopcnt
+le_map_channel_skip:
+	deposit loopcnt
+	branch le_map_channel_end,blank
+	increase 1,queue
+	increase -1,loopcnt
+	branch le_map_channel_loop
+le_map_channel_end:
+	deposit queue
+	store 1,mem_le_ch_mapped
+	rtn
+
+
+le_wait_tx:
+	branch le_wait_master,master
+	until null,timeout
+	rtn
+	
+le_wait_master:
+	arg 0xea0,timeup
+	until clkn_rt,meet
+	rtn
+
+le_receive_adv:
+	disable swfine
+	fetch 2,mem_le_scan_window
+	copy pdata,timeup
+	branch le_receive_packet
+
+
+le_receive_slave:
+	bpatchx patch29_0,mem_patch29
+	enable swfine
+	fetch 2,mem_le_receive_window
+	fetcht 4,mem_le_transmit_window
+	iadd temp,timeup
+le_receive_packet:
+	call lerx_setfreq
+le_receive_rxon:
+	bpatchx patch29_1,mem_patch29
+	call le_prep
+	disable match
+	enable decode_fec0
+	enable is_rx
+	disable is_tx
+	copy timeup,stop_watch
+	correlate null,timeout
+	branch le_receive_on_attempt,attempt
+	copy clke,temp
+	storet 6,mem_sync_clke
+le_receive_on_attempt:
+	nbranch end_of_packet,sync
+	branch le_receive_skip,attempt
+	arg param_clke_cal_le,clke_rt
+	copy bt_clk,clke_bt
+	fetch 1,mem_le_state
+	bbit0 lestate_got_first_packet,le_receive_skip
+	call lpm_adjust_clk,wake
+le_receive_skip:
+	bpatchx patch29_2,mem_patch29
+	call save_rssi
+	enable enable_white
+	enable enable_crc
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	store 1,mem_le_rxbuf
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	and pdata,0x3f,loopcnt
+	branch lerx_nopayload,zero
+	
+lerx_loop:
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	istore 1,contw
+	loop lerx_loop
+	
+lerx_nopayload:
+	bpatchx patch29_3,mem_patch29
+	parse demod,bucket,24	
+	enable swfine
+	arg param_sifs,stop_watch		// start SIFS timer after last bit of crc
+	rshift32 pdata,pdata
+	rshift16 pdata,pdata
+	istore 3,contw
+	branch end_of_packet,crc_failed
+	enable match
+	fetch 1,mem_last_freq
+	add pdata,0,rega				// ble 2M Medium Frequency
+	call rf_write_freq				/* set frequency to tx mode freq */
+	disable decode_fec0
+	branch set_sync_on
+
+le_transmit_receive_sifs:
+	bpatchx patch29_4,mem_patch29
+	call le_transmit
+le_transmit_receive_sifs_notx:
+	fetcht 1,mem_last_freq
+	call set_freq_rx
+	call rf_rx_enable
+	enable swfine
+	arg 5500,timeup 
+	branch le_receive_rxon
+
+le_transmit_norx:
+	call le_transmit
+	branch end_of_packet
+	
+le_transmit:
+	bpatchx patch29_5,mem_patch29
+	call le_prep
+	call letx_setfreq
+	branch le_transmit0
+	
+le_transmit0:
+	set1 TXGFSK,radio_ctrl
+	enable encode_fec0
+	enable is_tx
+	disable is_rx
+	call le_wait_tx
+	rshift16 access,pdata
+	rshift8 pdata,pdata
+	rshift4 pdata,pdata
+	inject mod,40
+	enable enable_white
+	enable enable_crc
+	bpatchx patch29_6,mem_patch29
+	fetch 1,mem_le_txheader
+	inject mod,8
+	ifetch 1,contr
+	and pdata,0x3f,loopcnt
+	inject mod,8
+	branch letr_nopayload,zero
+letr_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop letr_loop
+	
+letr_nopayload:
+	enable enable_parity
+	inject mod,24
+	disable enable_parity
+	until null,tx_clear
+	nop 100          /* flush out the last bit */
+	disable encode_fec0
+	rtn
+	
+le_send_adv_ind:
+	bpatchx patch29_7,mem_patch29
+	fetch 1,mem_le_adv_type
+	beq ADV_DIRECT_IND,le_send_adv_direct_ind
+	fetch 1,mem_le_adv_own_addr_type
+	lshift4 pdata,pdata
+	lshift2 pdata,pdata
+	store 1,mem_le_txheader
+	fetcht 1,mem_le_adv_data_len
+	add temp,6,pdata
+	store 1,mem_le_txlen
+	fetch 6,mem_le_lap
+	store 6,mem_le_txpayload
+	copy temp,loopcnt
+	arg mem_le_adv_data,contr
+	call memcpy_fast
+	branch le_send_adv_transmit
+le_send_adv_direct_ind:
+	fetch 1,mem_le_adv_direct_addr_type
+	lshift4 pdata,pdata
+	lshift2 pdata,pdata
+	increase 1,pdata
+	store 1,mem_le_txheader
+	setarg 12
+	store 1,mem_le_txlen
+	fetch 6,mem_le_lap
+	store 6,mem_le_txpayload
+	fetch 6,mem_hci_plap
+	istore 6,contw
+le_send_adv_transmit:
+	bpatchx patch2a_0,mem_patch2a
+	fetch 1,mem_le_adv_transmit
+	increase 1,pdata
+	store 1,mem_le_adv_transmit
+	arg 1800,stop_watch
+	disable match
+	branch le_transmit_receive_sifs
+	
+le_send_scan_request:
+	bpatchx patch2a_1,mem_patch2a
+	fetch 1,mem_le_scan_type
+	rtnne LE_SCAN_TYPE_ACTIVE
+	fetch 1,mem_le_adv_transmit
+	increase 1,pdata
+	store 1,mem_le_adv_transmit
+	arg 0x0c03,temp// length + SCAN_REQ PDU
+	fetch 1,mem_le_scan_own_addr_type
+	nsetflag blank,LE_SENDER_ADDR_BIT,temp
+	copy regA,pdata
+	nsetflag blank,LE_RECEIVER_ADDR_BIT,temp	
+	storet 2,mem_le_txheader
+	fetch 6,mem_le_lap
+	istore 6,contw
+	fetch 6,mem_le_plap
+	istore 6,contw
+	branch le_transmit_receive_sifs
+
+
+le_send_scan_response:
+	bpatchx patch2a_2,mem_patch2a
+	arg SCAN_RSP,temp
+	fetch 1,mem_le_adv_own_addr_type
+	nsetflag blank,LE_SENDER_ADDR_BIT,temp
+	storet 1,mem_le_txheader
+	fetcht 1,mem_le_scan_data_len
+	add temp,6,pdata
+	store 1,mem_le_txlen
+	fetch 6,mem_le_lap
+	store 6,mem_le_txpayload
+	arg mem_le_scan_data,contr
+	copy temp,loopcnt
+	call memcpy_fast
+	call le_transmit_norx
+	branch le_adv_not_match
+
+le_connect_request:
+	bpatchx patch2a_3,mem_patch2a
+	force -1,pdata
+	setsect 2,1
+	store 5,mem_le_channel_map
+	call le_calc_channel_map	
+	force 4,loopcnt
+	arg mem_le_access,contw
+	call generate_random_loop	
+	fetch 2,mem_le_timeout
+	store 2,mem_le_superto
+le_con_req_hop_retry:
+	random pdata
+	and_into 0xf,pdata
+	sub pdata,4,null
+	branch le_con_req_hop_retry,positive
+	store 1,mem_le_hop
+	store 1,mem_tmp1
+	bpatchx patch2a_4,mem_patch2a
+	fetcht 2,mem_le_conn_interval
+	storet 2,mem_le_tsniff	
+	copy temp,regc			// tsniff in regc
+	add clkn_bt,7,pdata			// leave space for offset
+	idiv regc
+	call wait_div_end
+	remainder rega
+	isub rega,pdata
+	iadd regc,pdata
+	fetcht 2,mem_le_dsniff
+	iadd temp,pdata
+	store 4,mem_le_anchor
+	isub clkn_bt,rega
+	increase -6,rega			// window offset
+	arg 0x2205,regb			// length & CONN_REQ PDU
+	fetch 1,mem_le_conn_own_addr_type
+	nsetflag blank,LE_SENDER_ADDR_BIT,regb
+	fetch 1,mem_le_conn_peer_addr_type
+	nsetflag blank,LE_RECEIVER_ADDR_BIT,regb
+	copy regb,pdata
+	store 2,mem_le_txheader
+	fetch 6,mem_le_lap
+	istore 6,contw//own addr
+	fetch 6,mem_le_plap
+	istore 6,contw// peer addr
+	fetch 4,mem_le_access
+	istore 4,contw
+	random pdata
+	istore 2,contw				/* crc init */
+	random pdata
+	istore 1,contw
+	force 2,pdata				/* window size */	
+	istore 1,contw
+	rshift2 rega,pdata
+	istore 2,contw				/* window offset */
+	rshift2 regc,pdata			
+	istore 2,contw				/* conn Interval */
+	bpatchx patch2a_5,mem_patch2a
+	setarg 0					/* slave latency */
+	istore 2,contw
+	fetch 2,mem_le_timeout
+	istore 2,contw
+	fetch 5,mem_le_channel_map
+	istore 5,contw				/* channel map */
+	fetch 1,mem_le_hop
+	arg param_le_sca,temp
+	ior temp,pdata
+	istore 1,contw
+	call le_transmit_norx
+	setarg mem_le_txheader
+	add pdata,18,contr
+	ifetch 3,contr
+	store 3,mem_le_crcinit
+	rtn
+		
+le_init_adv:
+	bpatchx patch2a_6,mem_patch2a
+	disable master
+	branch le_adv_access
+	
+
+
+le_update_param:
+	fetch 1,mem_le_state
+	rtnbit0 lestate_update_param
+	fetch 2,mem_le_event_count
+	fetcht 2,mem_le_instant
+	isub temp,pdata
+	nrtn positive
+	store 2,mem_pdatatemp
+	bpatchx patch2a_7,mem_patch2a
+	fetch 1,mem_le_state
+	set0 lestate_update_param,pdata
+	set0 lestate_got_first_packet,pdata
+	store 1,mem_le_state
+	fetch 4,mem_le_anchor
+	fetcht 2,mem_le_tsniff
+	storet 2,mem_temp
+	isub temp,rega
+	bpatchx patch2b_0,mem_patch2b
+	fetch 1,mem_le_new_param
+	store 1,mem_le_window_size
+	ifetcht 2,contr
+	ifetch 2,contr
+	lshift2 pdata,pdata
+	store 2,mem_le_tsniff
+	lshift2 temp,temp
+	iadd temp,pdata
+	ifetcht 4,contr
+	storet 4,mem_le_slave_latency	// and superTO
+	iadd rega,pdata
+	copy pdata,regab
+	fetch 2,mem_le_tsniff
+	fetcht 2,mem_temp	//last sniff
+	isub temp,pdata		//last sniff - new sniff
+	fetcht 2,mem_pdatatemp
+	imul32 temp,pdata
+	iadd regab,pdata
+	store 4,mem_le_anchor
+	call le_receive_window_size
+	fetch 2,mem_le_superto
+	store 2,mem_le_init_superto
+	rtn
+
+
+le_update_channel_map:
+	bpatchx patch2b_1,mem_patch2b
+	fetch 1,mem_le_state
+	rtnbit0 lestate_update_map
+	fetch 2,mem_le_event_count
+	fetcht 2,mem_le_instant
+	isub temp,pdata
+	nrtn positive
+	fetch 1,mem_le_state
+	set0 lestate_update_map,pdata
+	store 1,mem_le_state
+ 	fetch 5,mem_le_new_map
+	store 5,mem_le_channel_map
+	branch le_calc_channel_map	
+	
+	
+le_acknowledge:
+	bpatchx patch2b_2,mem_patch2b
+	call le_supervision_flush
+	call le_check_wak
+	fetch 1,mem_le_rxbuf
+	isolate1 md,pdata
+	setflag true,mark_ble_rx_md,mark
+	rshift pdata,pdata
+	ixor temp,pdata
+	isolate1 nesn,pdata
+	setflag true,mark_old_packet,mark	/* retransmit */
+	rtnmark1 mark_old_packet
+	fetch 1,mem_le_rxbuf+1			
+	branch le_ack_unenc,blank		/* empty packet, no decryption */
+	fetch 1,mem_le_state
+	bbit0 lestate_encryption,le_ack_unenc
+	call load_sk
+	call le_decrypt
+	nrtn blank
+le_ack_unenc:
+	fetcht 1,mem_le_arq
+	setflip nesn,temp
+	storet 1,mem_le_arq
+	rtn
+
+	
+le_check_wak:
+	bpatchx patch2b_3,mem_patch2b
+	fetcht 1,mem_le_arq
+	isolate0 wak,temp
+	rtn true
+	fetch 1,mem_le_rxbuf
+	lshift pdata,pdata
+	ixor temp,pdata
+	rtnbit0 sn			/* received NESN is same as SN, NAK */
+	set0 wak,temp
+	setflip sn,temp
+	storet 1,mem_le_arq
+	compare 3,temp,3
+	nrtn true
+	fetch 1,mem_le_txpayload
+	beq LL_START_ENC_REQ,le_set_enc
+	fetch 1,mem_le_enc_state
+	beq FLAG_LE_ENC_PAUSE,le_clear_enc
+	rtn
+	
+
+le_set_enc:
+	fetch 1,mem_le_state
+	set1 lestate_encryption,pdata
+	store 1,mem_le_state
+	rtn	
+	
+le_clear_enc:
+	bpatchx patch2b_4,mem_patch2b
+	jam FLAG_LE_ENC_NULL,mem_le_enc_state
+	arg 0,pdata
+	store 4,mem_le_last_mic
+	store 5,mem_le_pcnt_tx
+	set1 39,pdata
+	store 5,mem_le_pcnt_rx
+	fetch 1,mem_le_state
+	set0 lestate_encryption,pdata
+	store 1,mem_le_state
+	rtn
+
+
+le_wait_adv:
+	bpatchx patch2b_5,mem_patch2b
+	call le_next_adv_channel
+	call le_receive_adv
+	fetch 1,mem_le_adv_waitcnt
+	increase 1,pdata
+	store 1,mem_le_adv_waitcnt
+	rtn
+
+
+le_scan:
+	bpatchx patch2b_6,mem_patch2b
+	fetch 1,mem_le_scan_enable
+	rtnne LE_SCAN_ENABLE
+	arg le_scan_interval_timer,queue
+	call timer_check
+	nrtn blank
+	fetch 2,mem_le_scan_interval
+	fetcht 2,mem_le_scan_window
+	isub temp,pdata
+	arg le_scan_interval_timer,queue
+	call timer_init
+	disable master
+	call le_init_adv
+	call le_wait_adv
+	nrtn match
+	bpatchx patch2b_7,mem_patch2b
+	fetch 6,mem_le_rxbuf+2
+	store 6,mem_le_plap
+//	call le_scan_dongle
+
+	fetch 1,mem_le_adv_rcv
+	increase 1,pdata
+	store 1,mem_le_adv_rcv
+	call le_create_conn
+	rtn master
+	call le_send_scan_request
+	nrtn match
+	bpatchx patch2c_0,mem_patch2c
+	fetch 1,mem_le_scanrsp_rcv
+	increase 1,pdata
+	store 1,mem_le_scanrsp_rcv
+	fetch 9,mem_le_rxbuf+8
+	store 9,mem_tmp_buffer
+	rtn
+	
+le_create_conn:
+	bpatchx patch2c_1,mem_patch2c
+	fetch 1,mem_cmd_le_create_conn
+	rtnne hci_cmd_le_create_conn
+	fetch 6,mem_le_plap
+	fetcht 6,mem_le_conn_peer_addr
+	isub temp,null
+	nrtn zero
+	call context_new
+	nrtn zero
+	call le_connect_request
+	call le_init_master
+	bpatchx patch2c_2,mem_patch2c
+	jam 0,mem_hci_cmd
+	jam 0,mem_le_peer_sca
+	jam 0,mem_le_scan_enable
+	jam 0,mem_cmd_le_create_conn
+	branch context_save
+	
+le_scan_check_sender_addr_type:
+	arg 1,rega// sender_addr_type
+	fetch 1,mem_le_rxbuf
+	rtnbit1 LE_SENDER_ADDR_BIT
+	arg 0,rega
+	rtn
+
+
+
+le_prepare_tx:
+	bpatchx patch2c_3,mem_patch2c
+	fetch 1,mem_le_arq
+	rtnbit1 wak
+	call le_check_tx_md
+	call le_fifo_get_first_tx_ptr	//no packet to send
+	branch le_send_empty,blank
+	ifetch 1,contr
+	ifetcht 1,contr
+	copy temp,rega
+	isub rega,pdata
+	arg LE_MAX_PAKET_LEN,temp
+	call not_greater_than
+	copy pdata,temp
+	ifetch 1,contr
+	copy pdata,type
+	copy rega,pdata
+	iadd contr,contr
+	arg mem_le_txpayload,contw
+	copy temp,loopcnt
+	call memcpy
+	call le_update_tx_type
+	call le_send_packet
+	
+	call le_fifo_get_first_tx_ptr
+	ifetch 1,contr
+	copy pdata,rega
+	copy contr,regc
+	ifetcht 1,contr
+	copy temp,regb
+	isub regb,pdata
+	arg LE_MAX_PAKET_LEN,temp
+	call not_greater_than
+	iadd regb,pdata
+	istore 1,regc
+	isub rega,null
+	nrtn zero
+	branch le_fifo_release_first_node
+
+	
+le_check_tx_md:
+	call le_check_continue
+	rtnmark1 mark_ble_tx_md
+	fetch 1,mem_le_configuration
+	bbit0 BIT_BLE_TRANSMIT_PACKET_BY_MD,le_clear_md
+	call le_fifo_get_second_tx_ptr	//no packet to send
+	branch le_clear_md,blank
+	branch le_set_md
+
+	
+le_check_continue:
+	call le_fifo_get_first_tx_ptr	//no packet to send
+	branch le_clear_md,blank
+	ifetch 1,contr				//pdata:length
+	ifetcht 1,contr				//temp:offest
+	isub temp,pdata			//pdata:length - offset
+	sub pdata,LE_MAX_PAKET_LEN,null	
+	branch le_clear_md,positive				//27 > length -offset
+le_set_md:
+	set1 mark_ble_tx_md,mark
+	rtn
+
+le_clear_md:
+	set0 mark_ble_tx_md,mark
+	rtn
+
+le_update_tx_type:
+	copy rega,pdata
+	rtn blank
+	arg LLID_CONTINUE,type
+	rtn
+
+
+le_att_check_notification_enable: // temp ->handle,output-> pdata,output :contr->rega
+	bpatchx patch2c_4,mem_patch2c
+	increase 1,temp
+	call le_att_get_handle_ptr
+	increase -2,contr
+	ifetch 2,contr
+	arg CLIENT_CHARACTERTIC_CONFIGURATION,temp
+	isub temp,null
+	nrtn zero
+	increase 1,contr
+	copy contr,rega
+	ifetch 1,contr
+	rtn
+	
+
+le_send_empty:
+	force 0,temp
+	force 1,type
+	
+le_send_packet:
+	bpatchx patch2c_5,mem_patch2c
+	storet 1,mem_le_txlen
+	fetcht 1,mem_le_arq
+	set1 wak,temp
+	and temp,0xfc,pdata
+	ior type,pdata
+	store 1,mem_le_arq
+	and_into 0x1f,pdata
+	isolate1 mark_ble_tx_md,mark
+	setflag true,md,pdata
+	store 1,mem_le_txheader
+
+	fetch 1,mem_le_txheader
+	compare 1,type,3
+	nbranch le_send_no_txlen,true
+	fetch 1,mem_le_txlen
+	rtn blank
+le_send_no_txlen:	
+	fetch 1,mem_le_state
+	rtnbit0 lestate_encryption
+	call load_sk
+	branch le_encrypt
+
+
+get_lpm_wake_ble_rx_lock:
+	arg wake_lock_ble_rx,queue
+	branch lpm_get_wake_lock
+
+put_lpm_wake_ble_rx_lock:
+	arg wake_lock_ble_rx,queue
+	branch lpm_put_wake_lock
+
+
+le_parse:
+	bpatchx patch2c_6,mem_patch2c
+	rtnmark1 mark_old_packet
+	call le_fifo_check_full
+	nrtn blank
+	fetch 1,mem_le_rxbuf
+	and pdata,0x3,pdata
+	store 1,mem_le_packet_llid
+	ifetch 1,contr
+	and pdata,0x1f,pdata
+	store 1,mem_le_packet_size
+	rtn blank							//empty rtn
+	copy contr,pdata
+	store 2,mem_le_payload_ptr
+	fetch 1,mem_le_packet_llid
+	beq LLID_LE_LL,le_parse_ll
+le_parse_l2cap:
+	call le_check_l2cap_complete
+	nbranch get_lpm_wake_ble_rx_lock,user
+	call put_lpm_wake_ble_rx_lock
+	fetch 2,mem_le_payload_ptr
+	copy pdata,contr
+	ifetch 2,contr	//l2cap len
+	store 2,mem_le_l2cap_size
+	bpatchx patch2c_7,mem_patch2c
+	ifetch 2,contr
+	beq LE_L2CAP_CID_ATT,le_parse_att
+	beq LE_L2CAP_CID_SMP,le_parse_smp
+	beq LE_L2CAP_CID_SIGNAL,le_parse_signaling
+	rtn
+
+
+le_check_l2cap_complete:
+	fetch 1,mem_le_packet_llid
+	beq LLID_START,le_check_l2cap_llid_start
+	beq LLID_CONTINUE,le_check_l2cap_llid_continue
+	rtn
+
+//input: pdata is CID number
+//output: 	if CID is legal ,enable user
+//		if ICD is illegal,disable user 
+le_check_l2cap_CID_legal:
+	call enable_user
+	arg LE_L2CAP_CID_ATT,temp
+	isub pdata,null
+	rtn zero
+	arg LE_L2CAP_CID_SIGNAL,temp
+	isub pdata,null
+	rtn zero
+	arg LE_L2CAP_CID_SMP,temp
+	isub pdata,null
+	rtn zero
+	branch disable_user
+
+	
+le_check_l2cap_llid_start:
+	fetch 2,mem_le_payload_ptr
+	copy pdata,contr
+	ifetch 2,contr
+	store 2,mem_le_l2cap_size
+	ifetch 2,contr			//CID
+	call le_check_l2cap_CID_legal
+	nrtn user
+	fetcht 1,mem_le_packet_size
+	storet 1,mem_le_packet_len_recved
+	fetch 2,mem_le_l2cap_size
+	increase 4,pdata
+	isub temp,null
+	branch enable_user,zero
+	fetch 1,mem_le_packet_size
+	copy pdata,loopcnt
+	arg mem_le_l2capbuf,contw
+	fetch 2,mem_le_payload_ptr
+	copy pdata,contr
+	call memcpy
+	branch disable_user
+
+//no input
+//output: 	if CID is legal ,enable user
+//		if ICD is illegal,disable user 
+le_check_l2cap_continue_legal:
+	call enable_user
+	fetch 1,mem_le_packet_len_recved
+	nrtn blank
+	branch disable_user
+
+le_check_l2cap_llid_continue:
+	call le_check_l2cap_continue_legal
+	nrtn user
+	fetch 1,mem_le_packet_len_recved
+	arg mem_le_l2capbuf,contw
+	iadd contw,rega
+	fetcht 1,mem_le_packet_size
+	iadd temp,pdata
+	store 1,mem_le_packet_len_recved
+	fetch 1,mem_le_packet_size
+	copy pdata,loopcnt
+	copy rega,contw
+	fetch 2,mem_le_payload_ptr
+	copy pdata,contr
+	call memcpy_fast
+	setarg mem_le_l2capbuf
+	store 2,mem_le_payload_ptr		//update ptr->mem_le_l2capbuff
+	fetch 2,mem_le_l2cap_size
+	increase 4,pdata
+	fetcht 1,mem_le_packet_len_recved
+	isub temp,null
+	branch enable_user,zero
+	branch disable_user
+
+
+
+
+	
+le_get_search_att_type:
+	call store_contr
+	arg mem_le_search_att_type_length,contw
+le_get_search_common:	
+	fetch 2,mem_le_l2cap_size
+	increase -5,pdata
+le_get_search_common2:		
+	istore 1,contw
+	copy pdata,loopcnt
+	call get_contr
+	branch memcpy_fast	
+	
+le_get_search_att_uuid:
+	call store_contr
+	arg mem_le_search_uuid_length,contw
+	branch le_get_search_common
+
+
+	/* rega pointers to data, regb is length */
+le_writeatt_cb:
+	fetch 2,mem_cb_att_write
+	branch callback_func
+	
+le_supervision_update:
+	fetcht 4,mem_le_supervision_timer
+	call get_clkbt
+	isub temp,timeup					/* and to 28 bits */
+	deposit timeup
+	fetcht 2,mem_le_superto
+	lshift4 temp,temp
+	lshift temp,temp
+	isub temp,pdata
+	rtn
+	
+le_supervision_flush:
+	call get_clkbt
+	store 4,mem_le_supervision_timer
+	rtn
+
+
+le_adv:
+	jam 36,mem_le_ch_mapped
+	jam 0,mem_le_adv_channel_map_temp
+le_adv_loop:
+	bpatchx patch2d_0,mem_patch2d
+	fetch 1,mem_le_adv_enable
+	rtn blank
+	arg le_adv_interval_timer,queue
+	call timer_check
+	nrtn blank
+	bpatchx patch2d_1,mem_patch2d
+le_adv_loop_tx:
+	disable master
+	enable swfine
+	call le_init_adv
+	call le_next_adv_channel
+	call le_send_adv_ind
+	nbranch le_adv_not_match,match
+	fetch 1,mem_le_req_rcv
+	increase 1,pdata
+	store 1,mem_le_req_rcv
+	fetch 1,mem_le_rxbuf
+	and pdata,0x0f,pdata
+	beq SCAN_REQ,le_send_scan_response
+	beq CONNECT_REQ,le_parse_connect_req
+le_adv_not_match:
+	bpatchx patch2d_2,mem_patch2d
+	random pdata 
+	arg 0x1ff,temp
+	iand temp,pdata
+	add pdata,250,pdata
+	call delay
+	fetch 1,mem_le_adv_channel_map_temp
+	fetcht 1,mem_le_adv_channel_map
+	isub temp,null
+	nbranch le_adv_loop,zero
+	arg le_adv_interval_timer,queue
+	fetch 2,mem_le_adv_interval
+	branch timer_init
+	
+
+le_receive_window_size:
+	bpatchx patch2d_3,mem_patch2d
+	fetch 1,mem_le_peer_sca
+	call le_sca_map
+	fetch 2,mem_le_tsniff
+	imul32 temp,pdata
+	arg 375,temp
+	imul32 temp,pdata
+	arg 100000,temp
+	idiv temp
+	fetch 1,mem_le_window_size
+	arg 20000,temp
+	imul32 temp,pdata
+	iadd temp,pdata
+	store 4,mem_le_transmit_window
+	bpatchx patch2d_4,mem_patch2d
+	fetch 2,mem_rx_window_sniff
+	call wait_div_end
+	quotient temp
+	iadd temp,pdata
+	store 2,mem_le_receive_window
+	rtn
+
+le_parse_connect_req:
+	bpatchx patch2d_5,mem_patch2d
+	fetch 6,mem_le_rxbuf+8
+	fetcht 6,mem_le_lap
+	isub temp,null
+	nrtn zero
+	call le_scan_check_sender_addr_type
+	copy rega,pdata
+	store 1,mem_le_conn_peer_addr_type
+	fetch 7,mem_le_rxbuf+21
+	store 7,mem_tmp_buffer
+	ifetch 8,contr
+	istore 8,contw
+	fetch 6,mem_le_rxbuf+2
+	store 6,mem_le_plap
+	increase 6,contr
+	ifetch 8,contr
+	store 8,mem_le_access 	// and crcinit & window size
+	ifetcht 2,contr				// transmit offset
+	bpatchx patch2d_6,mem_patch2d
+	lshift2 temp,temp			
+	ifetch 2,contr				// connInterval
+	lshift2 pdata,pdata
+	store 2,mem_le_tsniff
+	store 4,mem_le_anchor
+	isub temp,pdata
+	add pdata,-2,clke_bt
+	ifetch 9,contr
+	store 9,mem_le_slave_latency// and super to & channel map
+	bpatchx patch2d_7,mem_patch2d
+	ifetch 1,contr
+	rshift4 pdata,temp
+	rshift temp,temp
+	storet 1,mem_le_peer_sca
+	and_into 0x1f,pdata
+	store 1,mem_le_hop
+	call le_receive_window_size
+	call le_calc_channel_map
+	call le_init_slave
+	call context_new
+	nrtn zero
+	bpatchx patch2e_0,mem_patch2e
+	call calc_clke_offset
+	call le_l2cap_reset_signaling_identifier
+	jam BT_EVT_LE_CONNECTED,mem_fifo_temp
+	call ui_ipc_send_event
+	branch context_save
+	
+
+le_init_attlist_search:
+	bpatchx patch2e_1,mem_patch2e
+	fetch 2,mem_le_search_handle_start
+	iforce regb
+	fetch 2,mem_le_search_handle_end
+	iforce regc
+	fetch 2,mem_ui_le_uuid_table
+	iforce contr
+	enable user
+	rtn
+
+	/* return handle in pdata, blank:end of list, positive:in range */
+le_att_handle_inrange:
+	ifetch 2,contr
+	rtn blank
+	isub regb,null			/* less than start ? */
+	nrtn positive
+	isub regc,null			/* greater than end ? */
+	rtn zero
+	branch le_att_handle_blank,positive
+	force 1,null
+	rtn
+le_att_handle_blank:
+	force 0,pdata
+	rtn
+
+
+	/* handle in temp, return pointer in contr to length, blank not found */
+le_att_get_handle_ptr:
+	call le_att_get_handle_ptr2
+	branch le_att_get_handle_ptr_found,zero
+	rtn
+	
+le_att_get_handle_ptr2:
+	bpatchx patch2e_2,mem_patch2e
+	fetch 2,mem_ui_le_uuid_table
+	iforce contr
+le_att_get_handle_loop1:
+	ifetch 2,contr
+	rtn blank
+	isub temp,null
+	rtn zero
+	ifetch 1,contr
+	iadd contr,contr	
+	ifetch 1,contr			// length  
+	iadd contr,contr
+	branch le_att_get_handle_loop1
+le_att_get_handle_ptr_found:
+	ifetch 1,contr
+	iadd contr,contr	
+	rtn	
+
+
+
+le_att_get_short_uuid_ptr:
+	bpatchx patch2e_3,mem_patch2e
+	fetch 2,mem_ui_le_uuid_table
+	iforce contr
+le_att_get_short_uuid_loop:
+	ifetch 2,contr
+	rtn blank
+	ifetch 1,contr
+	iadd contr,contr
+	increase -2,contr
+	ifetch 2,contr
+	isub temp,null
+	rtn zero
+	ifetch 1,contr			 
+	iadd contr,contr
+	branch le_att_get_short_uuid_loop	
+
+
+
+le_att_get_handle_info_from_ptr:
+	fetch 2, mem_le_cur_attlist_start_ptr
+	branch le_att_get_handle_info_fast
+
+le_att_get_handle_info:
+	bpatchx patch2e_4,mem_patch2e
+	fetch 2,mem_ui_le_uuid_table
+le_att_get_handle_info_fast:
+	iforce contr
+	copy temp,rega
+le_att_get_handle_loop:
+	ifetch 2,contr
+	branch le_att_unfind_handle,blank
+	isub rega,null
+	branch le_att_finded_handle, zero
+	ifetch 1,contr			// length  
+	iadd contr,contr	
+	ifetch 1,contr			//length 
+	iadd contr,contr
+	branch le_att_get_handle_loop
+le_att_unfind_handle:
+	branch disable_blank
+
+le_att_finded_handle:
+	ifetch 1,contr
+	store 1,mem_le_cur_uuid_length
+	copy pdata,loopcnt
+	arg mem_le_cur_uuid,contw
+	call memcpy_fast
+	ifetch 1,contr
+	store 1,mem_le_curr_att_len
+	call store_contr
+	branch enable_blank
+
+	
+le_modified_name:
+	bpatchx patch2e_5,mem_patch2e
+	call le_modified_name_att_list
+	branch le_modified_name_adv
+
+le_modified_name_att_list:
+	arg UUID_CHRCTR_DEVICE_NAME,temp
+	call le_att_get_short_uuid_ptr
+	rtn blank
+	ifetch 1,contr						// attribute length
+	copy contr,contw
+	fetcht 1,mem_le_name_len
+	copy temp,loopcnt
+	isub temp,null
+	nbranch le_name_length_longer_than_att,positive
+	isub temp,temp
+	arg mem_le_name,contr
+	call memcpy
+	copy temp,loopcnt
+	ncall memcpy_empty,zero
+	rtn
+le_name_length_longer_than_att:
+	copy pdata,loopcnt
+	arg mem_le_name,contr
+	branch memcpy_fast
+
+
+le_modified_name_adv:
+	arg mem_le_adv_data_len+32,regc
+	arg mem_le_adv_data,rega
+	call le_modified_name_adv_and_scan
+	setarg 0
+	setflag user,0,pdata
+	store 1,mem_pdatatemp
+	arg mem_le_scan_data_len+32,regc
+	arg mem_le_scan_data,rega
+	call le_modified_name_adv_and_scan
+	rtn user
+	fetch 1,mem_pdatatemp
+	branch assert,blank
+	rtn
+
+
+le_modified_name_adv_and_scan:
+	bpatchx patch2e_6,mem_patch2e
+	call enable_user
+	call clear_temp_block
+	arg 0,regb	//current length
+	arg mem_le_data_temp,contw
+	call le_modified_name_adv_loop
+	fetch 1,mem_le_name_len
+	add pdata,1,temp
+	iadd regb,rega	
+	increase 2,rega
+	sub rega,0x1f,null
+	nbranch le_modified_name_adv_and_scan_name_overflow,positive
+	istoret 1,contw		//store ble name length
+	arg GAP_ADTYPE_LOCAL_NAME_COMPLETE,temp
+	istoret 1,contw		//store ble name type
+	iforce loopcnt
+	call memcpy_fast
+	copy rega,regb
+le_modified_name_adv_and_scan_store_data:
+	deposit regb
+	store 1,mem_le_data_len_temp
+	arg mem_le_data_len_temp,contr
+	setarg -32
+	iadd regc,contw
+	branch memcpy32
+
+le_modified_name_adv_and_scan_name_overflow:
+	call disable_user
+	branch le_modified_name_adv_and_scan_store_data
+	
+le_modified_name_adv_loop:
+	ifetch 1,rega		//pdata:length
+	rtn blank			//length is zero,ending find
+	pincrease 1		//length += 1
+	ifetcht 1,contr		//pdata:type
+	sub temp,GAP_ADTYPE_LOCAL_NAME_COMPLETE,null
+	branch le_modified_name_adv_found_name,zero
+	iadd regb,regb	
+	copy rega,contr
+	iforce loopcnt
+	call memcpy_fast
+	copy contr,rega
+le_modified_name_adv_loop2:
+	deposit rega
+	isub regc,null
+	rtn positive
+	branch le_modified_name_adv_loop
+
+le_modified_name_adv_found_name:
+	iadd rega,rega
+	branch le_modified_name_adv_loop2
+
+
+memcpy_empty:
+	setarg SPACE
+	istore 1,contw
+	loop memcpy_empty
+	rtn
+
+	
+le_lpm_set_mult:
+	bpatchx patch2e_7,mem_patch2e
+	disable wake
+	branch le_lpm_set_mult_attempt,attempt
+	nbranch le_lpm_lost,match
+le_lpm_set_mult_attempt:
+	call lpm_match
+	fetch 2,mem_rx_window_sniff
+	store 2,mem_le_receive_window
+
+	nbranch lpm_mult_short,match
+	bmark1 mark_old_packet,lpm_mult_short
+
+	fetch 1,mem_le_packet_size
+	nbranch lpm_mult_short,blank		// rx not empty, short interval
+	fetch 1,mem_le_txlen
+	nbranch lpm_mult_short,blank		// tx not empty, short interval
+	
+	fetch 1,mem_le_configuration
+	bbit1 BIT_BLE_SHORT_MULT,lpm_mult_short	//check flag,if flag is 1,always short mult
+	
+	fetch 1,mem_le_state
+	bbit1 lestate_update_param,lpm_mult_short
+	branch lpm_mult_wait_timeout
+	
+le_lpm_lost:
+	fetcht 2,mem_rx_window_sniff
+	rshift temp,temp
+	fetch 2,mem_le_receive_window
+	iadd temp,pdata
+	store 2,mem_le_receive_window
+	branch lpm_lost
+
+///////////////////////////////BLE CONFIG//////////////////////////////////////////
+le_set_config_fixed_tk:
+	arg BIT_BLE_PASSKEY_FIXED_KEY,queue
+	branch le_set_config
+
+le_clr_config_fixed_tk:
+	arg BIT_BLE_PASSKEY_FIXED_KEY,queue
+	branch le_clr_config
+
+le_set_config_fixed_ltk:
+	arg BIT_BLE_PAIRING_FIXED_LTK,queue
+	branch le_set_config
+
+le_clr_config_fixed_ltk:
+	arg BIT_BLE_PAIRING_FIXED_LTK,queue
+	branch le_clr_config
+
+le_set_config_more_data:
+	arg BIT_BLE_TRANSMIT_PACKET_BY_MD,queue
+	branch le_set_config
+
+le_clr_config_more_data:
+	arg BIT_BLE_TRANSMIT_PACKET_BY_MD,queue
+	branch le_clr_config
+
+le_set_config_read_authentication:
+	arg BIT_BLE_READ_AUTH,queue
+	branch le_set_config
+
+le_clr_config_read_authentication:
+	arg BIT_BLE_READ_AUTH,queue
+	branch le_clr_config
+
+le_set_config_write_authentication:
+	arg BIT_BLE_WRITE_AUTH,queue
+	branch le_set_config
+
+le_clr_config_write_authentication:
+	arg BIT_BLE_WRITE_AUTH,queue
+	branch le_clr_config
+
+le_set_config_short_mult:
+	arg BIT_BLE_SHORT_MULT,queue
+	branch le_set_config
+
+le_clr_config_short_mult:
+	arg BIT_BLE_SHORT_MULT,queue
+	branch le_clr_config
+
+
+le_set_config:
+	fetch 1,mem_le_configuration
+	qset1 pdata
+	store 1,mem_le_configuration
+	rtn
+
+le_clr_config:
+	fetch 1,mem_le_configuration
+	qset0 pdata
+	store 1,mem_le_configuration
+	rtn
+
+le_set_fixed_ltk:
+	setarg 0x112233
+	store 3,mem_le_fixed_ltk
+	setarg 0x445566
+	istore 3,contw
+	setarg 0x778899
+	istore 3,contw
+	setarg 0x001122
+	istore 3,contw
+	setarg 0x334455
+	istore 3,contw
+	setarg 0x66
+	istore 1,contw
+	rtn
+
+
+le_set_justwork:
+	setarg 0x01000302
+	store 4,mem_le_pres
+	setarg 0x010010
+	store 3,mem_le_pres_max_keysize
+	jam 1,mem_le_pairing_mode
+	rtn
+
+/////////////////////////////////////////////////////////////////////////
+
+le_fifo_malloc_tx_empty:
+	arg 0,rega
+	arg LLID_EMPTY,type
+	branch le_fifo_malloc_tx
+
+
+//rega:len regb:ll opcode
+le_fifo_malloc_tx_ll:
+	arg LLID_LE_LL,type
+	call le_fifo_malloc_tx
+	copy regb,pdata
+	istore 1,contw
+	rtn
+	
+
+//rega:len regb:cid
+le_fifo_malloc_tx_l2cap:
+	force LLID_L2CAP_START,type
+	increase 4,rega
+	call le_fifo_malloc_tx
+	increase -4,rega
+	copy rega,pdata
+	istore 2,contw
+	copy regb,pdata
+	istore 2,contw
+	rtn
+
+
+//rega:len type:llid
+le_fifo_malloc_tx:
+	sub rega,240,null			//check max len
+	nbranch assert,positive
+	fetch 1,mem_le_tx_buff_used
+	arg 1,temp
+	arg LE_TX_BUFF_COUNT,loopcnt
+le_fifo_malloc_tx_loop:
+	iand temp,null
+	branch le_fifo_malloc_tx_got_empty,zero
+	lshift temp,temp
+	loop le_fifo_malloc_tx_loop
+	branch assert				//no empty buff
+le_fifo_malloc_tx_got_empty:
+	ixor temp,pdata
+	store 1,mem_le_tx_buff_used
+	sub loopcnt,LE_TX_BUFF_COUNT,pdata
+	lshift4 pdata,pdata
+	lshift4 pdata,pdata
+	arg mem_le_tx_buffer0,temp
+	iadd temp,temp
+le_fifo_tx_find_empty_ptr:
+	arg 0,loopcnt
+	arg mem_le_tx_ptr0,contr
+le_fifo_tx_find_empty_ptr_loop:
+	ifetch 2,contr
+	branch le_fifo_tx_found_empty_ptr,blank
+	copy loopcnt,pdata
+	increase 1,loopcnt
+	bne LE_TX_BUFF_COUNT,le_fifo_tx_find_empty_ptr_loop
+	branch assert
+
+	
+le_fifo_tx_found_empty_ptr:
+	increase -2,contr
+	istoret 2,contr
+	copy temp,contw
+	copy rega,pdata
+	istore 1,contw				//lengh
+	setarg 0
+	istore 1,contw				//offset
+	copy type,pdata
+	istore 1,contw				//LLID
+	rtn
+
+
+
+le_fifo_get_first_tx_ptr:
+	fetch 2,mem_le_tx_ptr0
+	copy pdata,contr
+	rtn
+
+le_fifo_get_second_tx_ptr:
+	fetch 2,mem_le_tx_ptr1
+	copy pdata,contr
+	rtn
+
+le_fifo_get_last_tx_ptr:
+	call le_fifo_get_last_tx_ptr0
+	copy pdata,contr
+	rtn
+le_fifo_get_last_tx_ptr0:
+	fetch 2,mem_le_tx_ptr3
+	nrtn blank
+	fetch 2,mem_le_tx_ptr2
+	nrtn blank
+	fetch 2,mem_le_tx_ptr1
+	nrtn blank
+	fetch 2,mem_le_tx_ptr0
+	rtn
+
+le_fifo_get_first_l2cap_ptr:
+	call le_fifo_get_first_tx_ptr
+	increase 3,contr
+	rtn
+
+le_fifo_get_first_att_ptr:
+	call le_fifo_get_first_tx_ptr
+	increase 7,contr
+	rtn
+
+le_fifo_get_last_att_ptr:
+	call le_fifo_get_last_tx_ptr
+	increase 7,contr
+	rtn
+
+le_fifo_get_last_l2cap_ptr:
+	call le_fifo_get_last_tx_ptr
+	increase 3,contr
+	rtn
+
+	
+
+le_fifo_check_full:
+	fetch 2,mem_le_tx_ptr3
+	rtn
+
+
+le_fifo_check_nearly_full:
+	fetch 2,mem_le_tx_ptr2
+	rtn
+
+	
+le_fifo_check_empty:
+	fetch 2,mem_le_tx_ptr0
+	rtn
+
+
+le_fifo_release_first_node:
+	fetch 2,mem_le_tx_ptr0
+	arg mem_le_tx_buffer0,temp
+	isub temp,pdata
+	rshift4 pdata,pdata
+	rshift4 pdata,queue
+	fetch 1,mem_le_tx_buff_used
+	qset0 pdata
+	store 1,mem_le_tx_buff_used
+	arg 0,loopcnt
+le_fifo_release_first_node_loop:
+	lshift loopcnt,pdata
+	arg mem_le_tx_ptr1,temp
+	iadd temp,temp
+	ifetch 2,temp
+	increase -2,temp
+	istore 2,temp
+	copy loopcnt,pdata
+	increase 1,loopcnt
+	bne LE_TX_BUFF_UPDATE_LOOPCNT,le_fifo_release_first_node_loop
+	setarg 0
+	istore 2,temp
+	rtn
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/le_l2cap_att.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/le_l2cap_att.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/le_l2cap_att.prog	(working copy)
@@ -0,0 +1,713 @@
+
+
+le_parse_att:
+	ifetch 3,contr
+	store 3,mem_le_att_opcode
+	beq ATTOP_EXCHANGE_MTU_REQUEST,le_parse_att_exchange_mtu_request
+	beq ATTOP_EXCHANGE_MTU_RESPONSE,le_parse_att_exchange_mtu_response
+	beq ATTOP_FIND_INFORMATION_REQUEST,le_parse_att_find_information_request
+	beq ATTOP_FIND_BY_TYPE_VALUE_REQUEST,le_parse_att_find_by_type_value_request
+	beq ATTOP_READ_BY_TYPE_REQUEST,le_parse_att_read_by_type_request
+	beq ATTOP_READ_REQUEST,le_parse_att_read_request
+	beq ATTOP_READ_BLOB_REQUEST,le_parse_att_read_blob_request
+	beq ATTOP_READ_BY_GROUP_TYPE_REQUEST,le_parse_att_read_by_group_type_request
+	beq ATTOP_WRITE_REQUEST,le_parse_att_write_request
+	beq ATTOP_PREPARE_WRITE_REQUEST,le_parse_att_prepare_write_request
+	beq ATTOP_EXECUTE_WRITE_REQUEST,le_parse_att_execute_write_request
+	beq ATTOP_WRITE_COMMAND,le_parse_att_write_command
+	rtn
+
+
+le_send_att_exchange_mtu_requset:
+	force 3,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_EXCHANGE_MTU_REQUEST
+	istore 1,contw
+	fetch 2,mem_le_local_mtu
+	istore 2,contw
+	rtn
+
+
+le_parse_att_exchange_mtu_request:
+	call le_parse_att_exchange_mtu_response
+le_send_att_exchange_mtu_response:
+	force 3,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_EXCHANGE_MTU_RESPONSE
+	istore 1,contw
+	fetch 2,mem_le_local_mtu
+	istore 2,contw
+	rtn
+
+le_parse_att_exchange_mtu_response:
+	rshift8 pdata,pdata
+	store 2,mem_le_remote_mtu
+	rtn
+
+le_parse_att_find_information_request:
+	call le_get_search_handle_start_end_common
+	call enable_user
+	branch le_send_att_find_information_response
+	
+le_send_att_find_information_response:
+	arg 3,timeup
+	call le_init_attlist_search
+le_send_att_find_information_res_loop:
+	call le_att_handle_inrange
+	branch le_send_att_find_information_res_end,blank
+	nbranch le_send_att_find_information_res_next,positive
+	increase -2,contr
+	call store_contr
+	call get_contw
+	nbranch le_send_att_find_information_res_store_info,user
+	call push_stack_rega_b_c
+	call disable_user
+	force 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	call pop_stack_rega_b_c
+	setarg ATTOP_FIND_INFORMATION_RESPONSE
+	istore 1,contw
+	setarg UUID_SIZE_16BIT
+	istore 1,contw
+le_send_att_find_information_res_store_info:
+	call get_contr
+	ifetch 2,contr
+	istore 2,contw
+	ifetch 1,contr
+	copy pdata,loopcnt
+	call memcpy
+	call store_contw
+	increase -1,timeup
+	branch le_send_att_find_information_res_end,zero
+le_send_att_find_information_res_cont:
+	ifetch 1,contr
+	iadd contr,contr
+	branch le_send_att_find_information_res_loop
+le_send_att_find_information_res_next:
+	ifetch 1,contr
+	iadd contr,contr
+	branch le_send_att_find_information_res_cont
+le_send_att_find_information_res_end:
+	branch le_send_att_error_response_notfound,user
+	branch le_send_auto_len_by_mem
+
+
+le_parse_att_find_by_type_value_request:
+	call le_get_search_handle_start_end_common
+	ifetch 2,contr
+	store 2,mem_le_search_uuid
+	call store_contr
+	arg mem_le_search_att_type_length,contw
+	fetch 2,mem_le_l2cap_size
+	increase -7,pdata
+	call le_get_search_common2
+	branch le_send_att_find_by_type_value_response
+
+
+le_start_end_handle_check_1:
+	disable user
+	fetcht 2,mem_le_search_handle_start
+	fetch 2,mem_le_search_handle_end
+	isub temp,null
+	nbranch le_start_end_handle_check_1_fail,positive
+	deposit temp
+	rtnne 0
+le_start_end_handle_check_1_fail:
+	enable user
+	jam ATT_ERR_INVALID_HANDLE,mem_le_err_code
+	branch le_send_att_error_response
+
+
+le_send_att_find_by_type_value_response:
+	call le_start_end_handle_check_1
+	rtn user
+	fetcht 2,mem_le_search_uuid
+	setarg UUID_GATT_PRIMARY_SERVICE
+	isub temp,null
+	branch le_send_att_find_by_type_value_res_primary,zero
+	branch le_send_att_error_response_notfound
+	
+
+le_send_att_find_by_type_value_res_primary:
+	jam LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND,mem_le_search_res
+	fetcht 2,mem_le_search_handle_start
+	storet 2,mem_temp
+	call le_att_get_handle_info
+	nbranch le_send_att_error_response_notfound,blank
+le_send_att_find_primary_search_loop:
+	fetcht 2,mem_temp
+	call le_att_get_handle_info
+	nbranch le_send_att_error_response_notfound2,blank	
+	copy contr,rega
+	fetch 1,mem_le_curr_att_len
+	copy pdata,loopcnt
+	fetcht 1,mem_le_search_att_type_length
+	isub temp,null
+	nbranch le_send_att_find_primary_search_loop1,zero
+	arg mem_le_search_att_type,regb
+	call string_compare
+
+	branch le_send_att_find_primary_search_end_start_handle_found,zero
+
+	fetch 2,mem_le_cur_uuid
+	fetcht 2,mem_le_search_uuid
+	isub temp,null
+	branch le_send_att_find_primary_search_end_ending_handle_found,zero
+le_send_att_find_primary_search_loop1:
+	fetch 2,mem_temp
+	increase 1,pdata
+	store 2,mem_temp
+	branch le_send_att_find_primary_search_loop
+
+le_send_att_error_response_notfound2:
+	fetch 1,mem_le_search_res
+	beq LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE,le_send_att_find_primary_search_end_ending_handle_found
+	branch le_send_att_error_response_notfound
+
+	
+le_send_att_find_primary_search_end_start_handle_found:
+	fetch 2,mem_le_cur_uuid
+	fetcht 2,mem_le_search_uuid
+	isub temp,null
+	nbranch  le_send_att_find_primary_search_loop1,zero
+	jam LE_FIND_BY_TYPE_VAL_RES_FOUND_STARTING_HANDLE,mem_le_search_res
+//	copy rega,temp
+	fetcht 2,mem_temp
+	storet 2,mem_le_cur_handle_start
+	branch le_send_att_find_primary_search_loop1
+
+le_send_att_find_primary_search_end_ending_handle_found:
+	fetch 1,mem_le_search_res
+	beq LE_FIND_BY_TYPE_VAL_RES_NOT_FOUND,le_send_att_find_primary_search_loop1
+	jam LE_FIND_BY_TYPE_VAL_RES_FOUND_ENDING_HANDLE,mem_le_search_res
+	fetcht 2,mem_temp
+	increase -1,temp
+	storet 2,mem_le_cur_handle_end
+	
+le_send_att_find_primary_search_end:
+	arg 5,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_FIND_BY_TYPE_VALUE_RESPONSE
+	istore 1,contw
+	fetch 2,mem_le_cur_handle_start
+	istore 2,contw
+	fetch 2,mem_le_cur_handle_end
+	istore 2,contw
+	rtn
+
+
+
+le_parse_att_read_by_type_request:
+	call le_get_search_handle_start_end_common
+	call le_get_search_att_uuid
+	branch le_send_att_read_by_type_response
+	
+le_send_att_read_by_type_response:
+	fetcht 2,mem_le_search_handle_start
+	storet 2,mem_temp
+	call le_init_attlist_search
+	call le_att_get_handle_ptr2
+	increase -2,contr
+	copy contr,pdata
+	store 2,mem_le_cur_attlist_start_ptr
+
+	fetcht 2,mem_le_search_uuid
+	setarg UUID_CHRCTR_DEVICE_NAME
+	isub temp,null
+	branch le_send_att_read_by_type_res_device_name,zero
+	setarg UUID_GATT_CHARACTERISTIC
+	isub temp,null
+	nbranch le_send_att_read_by_type_res_not_characteristic,zero
+	arg 2,timeup
+le_send_att_read_by_type_response_loop:
+	call le_att_check_handle_end
+	nbranch le_send_att_read_by_type_response_end,positive
+	fetcht 2,mem_temp
+	call le_att_get_handle_info_from_ptr
+	beq 1,le_send_att_read_by_type_response_end
+	call le_att_same_uuid
+	nbranch le_send_att_read_by_type_response_next_handle,zero
+	nbranch le_send_att_read_by_type_res_found_next,user
+	disable user
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BY_TYPE_RESPONSE
+	istore 1,contw
+	copy contw,alarm
+	increase 1,contw
+	
+	call le_send_att_read_by_type_write_properties
+	call le_att_next_handle
+	call le_att_get_handle_info_from_ptr
+	call le_send_att_read_by_type_write_uuid
+	fetch 1,mem_le_cur_uuid_length
+	increase 5,pdata
+	istore 1,alarm
+	fetch 1,mem_le_cur_uuid_length
+	beq 16,le_send_att_read_by_type_response_end
+	increase -1,timeup
+	branch le_send_att_read_by_type_response_end,zero
+le_send_att_read_by_type_response_next_handle:
+	call le_att_next_handle
+	branch le_send_att_read_by_type_response_loop
+le_send_att_read_by_type_response_end:
+	branch le_send_att_error_response_notfound,user
+	branch le_send_auto_len_by_mem
+
+le_send_att_read_by_type_res_found_next:
+	call le_store_att_record
+	call le_att_next_handle
+	call le_att_get_handle_info_from_ptr
+	fetch 1,mem_le_cur_uuid_length
+	beq 16,le_send_att_read_by_type_response_end
+	
+	call get_contw
+	fetch 2,mem_temp
+	increase -1,pdata
+	istore 2,contw
+	call le_write_att_record_common
+	call le_send_att_read_by_type_write_uuid
+	increase -1,timeup
+	branch le_send_att_read_by_type_response_end,zero
+	branch le_send_att_read_by_type_response_next_handle
+
+	
+le_send_att_read_by_type_write_properties:
+	fetch 2,mem_temp
+	istore 2,contw
+	
+	fetch 1,mem_le_curr_att_len
+	copy pdata,loopcnt
+	call get_contr
+	call memcpy_fast
+	branch store_contw
+le_send_att_read_by_type_write_uuid:
+	call get_contw
+	fetch 2,mem_temp
+	istore 2,contw
+	call store_contw
+	fetch 1,mem_le_cur_uuid_length
+	copy pdata,loopcnt
+	call get_contw	
+	call get_contr
+	isub loopcnt,contr
+	increase -1,contr
+	call memcpy_fast
+	branch store_contw
+
+
+
+le_send_att_read_by_type_res_not_characteristic:
+	fetcht 2,mem_le_search_handle_start
+	storet 2,mem_temp
+le_send_att_read_by_type_res_not_char_loop:
+	call le_att_check_handle_end
+	nbranch le_send_att_error_response_notfound,positive
+	call le_att_get_handle_info_from_ptr
+	beq 1,le_send_att_error_response_notfound
+	call le_att_same_uuid
+	nbranch le_send_att_read_by_type_res_not_char_next,zero
+
+le_send_att_read_by_type_res_not_char_common:
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BY_TYPE_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_curr_att_len
+	copy pdata,loopcnt
+	increase 2,pdata
+	istore 1,contw
+	fetch 2,mem_temp
+	istore 2,contw
+	call get_contr
+	call memcpy_fast
+	call store_contw
+	branch le_send_auto_len_by_mem
+	
+le_send_att_read_by_type_res_not_char_next:
+ 	call le_att_next_handle
+	branch le_send_att_read_by_type_res_not_char_loop
+
+
+le_send_att_read_by_type_res_device_name:
+	arg UUID_CHRCTR_DEVICE_NAME,temp
+	call le_att_get_short_uuid_ptr
+	rtn blank
+	increase -5,contr // point to handle
+	ifetch 2,contr		
+	store 2,mem_temp
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BY_TYPE_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_name_len
+	copy pdata,loopcnt
+	increase 2,pdata
+	istore 1,contw
+	fetch 2,mem_temp
+	istore 2,contw
+	arg mem_le_name,contr
+	call memcpy_fast
+	call store_contw
+	branch le_send_auto_len_by_mem
+
+
+
+le_parse_att_read_request:
+	fetcht 2,mem_le_att_handle
+	fetch 1,mem_le_configuration
+	bbit1 BIT_BLE_READ_AUTH,le_send_att_read_response_check_auth
+
+le_send_att_read_response:
+	call le_att_get_handle_ptr
+	branch le_send_att_error_response_notfound,blank
+	increase -2,contr
+	ifetch 2,contr
+	arg UUID_CHRCTR_DEVICE_NAME,temp
+	isub temp,null
+	branch le_send_device_name,zero
+	ifetch 1,contr
+	sub pdata,22,null
+	branch le_send_att_read_response_less,positive
+	force 22,pdata
+le_send_att_read_response_less:
+	copy pdata,regc
+	call store_contr
+	add regc,1,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_RESPONSE
+	istore 1,contw
+	copy regc,loopcnt
+	call get_contr
+	branch memcpy
+
+le_send_device_name:
+	call store_contr
+	fetch 1,mem_le_name_len
+	add pdata,1,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_name_len
+	copy pdata,loopcnt
+	arg mem_le_name,contr
+	branch memcpy
+	
+	
+le_send_att_read_response_check_auth:
+	fetch 2,mem_le_pairing_handle
+	isub temp,null
+	nbranch le_send_att_read_response,zero
+//le_send_att_read_response_error_insufficient_auth:
+	call le_check_encrypt_state
+	nbranch le_send_att_read_response,user
+	jam ATT_ERR_INSUFFICIENT_AUTHENTICATION,mem_le_err_code
+	branch le_send_att_error_response
+
+
+le_parse_att_read_blob_request:
+	ifetch 2,contr
+	store 2,mem_le_att_offset
+le_send_att_read_blob_response:
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BLOB_RESPONSE
+	istore 1,contw
+	fetch 2,mem_le_att_offset
+	iforce rega
+	fetcht 2,mem_le_att_handle
+	call le_att_get_handle_ptr 
+	branch le_send_att_error_response_notfound,blank
+	ifetch 1,contr
+	isub rega,loopcnt
+	nbranch le_send_att_error_response_notfound,positive
+	sub loopcnt,22,null
+	branch le_send_att_read_blob_response_less,positive
+	force 22,loopcnt
+le_send_att_read_blob_response_less:
+	deposit rega
+	iadd contr,contr
+	call memcpy_fast
+	call store_contw
+	branch le_send_auto_len_by_mem
+
+
+le_parse_att_read_by_group_type_request:
+	call le_get_search_handle_start_end_common
+ 	call le_get_search_att_type
+	branch le_send_att_read_by_group_type_response
+	
+//mem_le_search_att_type
+//mem_le_search_handle_start
+//mem_le_search_handle_end
+le_send_att_read_by_group_type_response:
+	arg 2,timeup
+	fetcht 2,mem_le_search_handle_start
+//	arg 23,pdata
+//	isub temp,null
+//	call ice_break,zero
+	storet 2,mem_temp
+	call le_init_attlist_search
+	call le_att_get_handle_ptr2
+	increase -2,contr
+	copy contr,pdata
+	store 2,mem_le_cur_attlist_start_ptr
+le_send_att_read_by_group_type_response_loop:
+	call le_att_check_handle_end
+	nbranch le_send_att_read_by_group_type_end0,positive
+	fetcht 2,mem_temp
+	call le_att_get_handle_info_from_ptr
+	beq 1,le_send_att_read_by_group_type_end1
+
+	call le_att_same_type
+	nbranch le_send_att_read_by_group_type_next_handle,zero
+	copy timeup,pdata
+	beq 0,le_send_att_read_by_group_type_end1
+	nbranch le_send_att_read_by_group_type_store_write_record,user		//un first
+	disable user
+	//first att uuid
+	arg 20,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_READ_BY_GROUP_TYPE_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_curr_att_len
+	increase 4,pdata
+	istore 1,contw
+	call store_contw
+	branch le_send_att_read_by_group_type_store_record
+le_send_att_read_by_group_type_store_write_record:
+	fetch 1,mem_le_curr_att_len
+	beq 16,le_send_att_read_by_group_type_end1
+	fetch 2,mem_temp
+	increase -1,pdata
+	store 2,mem_le_cur_handle_end
+	call le_write_att_record
+le_send_att_read_by_group_type_store_record:
+	fetch 2,mem_temp
+	store 2,mem_le_cur_handle_start
+	call le_store_att_record
+	increase -1,timeup
+//	branch le_send_att_read_by_group_type_last_find,zero		
+le_send_att_read_by_group_type_next_handle:
+	call le_att_next_handle
+	branch le_send_att_read_by_group_type_response_loop
+
+le_send_att_read_by_group_type_end0:	//> att handle end
+	fetch 2,mem_temp
+	store 2,mem_le_cur_handle_end
+	branch le_send_att_read_by_group_type_end_common
+le_send_att_read_by_group_type_end1:	//>att max list handle or diff len 
+	fetch 2,mem_temp
+	increase -1,pdata
+	store 2,mem_le_cur_handle_end
+	branch le_send_att_read_by_group_type_end_common
+le_send_att_read_by_group_type_end_common:
+	branch le_send_att_error_response_notfound,user
+	call le_write_att_record
+	branch le_send_auto_len_by_mem
+
+
+
+
+le_parse_att_write_request:
+	copy contr,rega
+	fetch 2,mem_le_l2cap_size
+	add pdata,-3,regb
+	call le_writeatt_cb
+le_send_att_write_response_check_auth:
+	fetch 1,mem_le_configuration
+	bbit0 BIT_BLE_WRITE_AUTH,le_send_att_write_response
+	
+	fetcht 2,mem_le_att_handle
+	fetch 2,mem_le_pairing_handle
+	isub temp,null
+	nbranch le_send_att_write_response,zero
+	call le_check_encrypt_state
+	nbranch le_send_att_write_response,user
+	jam ATT_ERR_INSUFFICIENT_AUTHENTICATION,mem_le_err_code
+	branch le_send_att_error_response
+
+le_send_att_write_response:
+	force 1,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_WRITE_RESPONSE
+	istore 1,contw
+	rtn
+
+le_check_encrypt_state:
+	call disable_user
+	fetch 1,mem_le_pairing_mode
+	rtneq LE_PAIRING_MODE_NONE
+	fetch 1,mem_context
+	rtnbit1 lestate_encryption
+	branch enable_user
+
+
+le_parse_att_prepare_write_request:
+	add contr,2,rega
+	fetch 2,mem_le_l2cap_size
+	add pdata,-5,regb
+	call le_writeatt_cb
+	branch le_send_att_prepare_write_response
+
+
+le_send_att_prepare_write_response:
+	fetch 2,mem_le_l2cap_size
+	copy pdata,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_PREPARE_WRITE_RESPONSE
+	istore 1,contw
+	fetch 2,mem_le_att_handle
+	istore 2,contw
+	fetch 2,mem_le_l2cap_size
+	add pdata,-5,loopcnt	
+	fetch 2,mem_le_payload_ptr
+	add pdata,7,contr
+	ifetch 2,contr		//offset
+	istore 2,contw
+	branch memcpy_fast
+
+
+
+le_parse_att_execute_write_request:
+
+le_send_att_execute_write_response:
+	force 1,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_EXECUTE_WRITE_RESPONSE
+	istore 1,contw
+	rtn
+
+
+
+le_parse_att_write_command:
+	copy contr,rega
+	fetch 2,mem_le_l2cap_size
+	add pdata,-3,regb
+	branch le_writeatt_cb
+
+
+
+//rga:len temp:handle;rgea,regb,regc already used
+le_att_malloc_tx_notify:
+	copy temp,regc
+	increase 3,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	increase -3,rega
+	setarg ATTOP_HANDLE_VALUE_NOTIFICATION
+	istore 1,contw
+	copy regc,temp
+	istoret 2,contw
+	rtn
+
+//rga:len temp:handle;rgea,regb,regc already used
+le_att_malloc_tx_indication:
+	copy temp,regc
+	increase 3,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	increase -3,rega
+	setarg ATTOP_HANDLE_VALUE_INDICATION
+	istore 1,contw
+	copy regc,temp
+	istoret 2,contw
+	rtn
+
+
+///////////////////////////ATT common function////////////////////////////////////
+
+le_send_att_error_response_notfound:	
+	jam ATT_ERR_ATTRIBUTE_NOT_FOUND,mem_le_err_code
+le_send_att_error_response:	
+	force 5,rega
+	call le_fifo_malloc_tx_l2cap_gatt
+	setarg ATTOP_ERROR_RESPONSE
+	istore 1,contw
+	fetch 1,mem_le_att_opcode
+	istore 1,contw
+	fetch 2,mem_le_att_handle
+	istore 2,contw
+	fetch 1,mem_le_err_code
+	istore 1,contw
+	rtn
+
+
+le_fifo_malloc_tx_l2cap_gatt:
+	force LE_L2CAP_CID_ATT,regb
+	branch le_fifo_malloc_tx_l2cap
+
+
+le_att_next_handle:
+	fetcht 2,mem_temp
+	increase 1,temp
+	storet 2,mem_temp
+	rtn
+
+le_att_check_handle_end:
+	fetcht 2,mem_temp
+	fetch 2,mem_le_search_handle_end
+	isub temp,null
+	rtn
+
+
+le_att_same_type:
+	fetcht 1,mem_le_search_att_type_length
+	arg mem_le_search_att_type,rega
+le_att_check_same_common:
+	fetch 1,mem_le_cur_uuid_length
+	copy pdata,loopcnt
+	isub temp,null
+	nrtn zero
+	arg mem_le_cur_uuid ,regb
+	branch string_compare
+
+le_att_same_uuid:
+	fetcht 1,mem_le_search_uuid_length
+	arg mem_le_search_uuid,rega
+	branch le_att_check_same_common
+
+
+le_store_att_record:
+	fetch 1,mem_le_curr_att_len
+	store 1, mem_tmp_buffer
+	copy pdata,loopcnt
+	call get_contr
+	branch memcpy_fast
+
+
+le_write_att_record:
+	call get_contw
+	fetch 2,mem_le_cur_handle_start
+	istore 2,contw
+	fetch 2,mem_le_cur_handle_end
+	istore 2,contw
+le_write_att_record_common:
+	fetch 1,mem_tmp_buffer
+	copy pdata,loopcnt
+	call memcpy_fast
+	branch store_contw
+
+
+
+le_send_auto_len_by_mem:
+	call get_contw
+	call le_fifo_get_last_att_ptr
+	copy contw,pdata
+	isub contr,rega
+	call le_fifo_get_last_l2cap_ptr
+	copy rega,pdata
+	istore 2,contr
+	increase 4,rega
+	call le_fifo_get_last_tx_ptr
+	copy rega,pdata
+	istore 1,contr
+	rtn
+
+
+le_get_search_handle_start_end_common:
+	rshift8 pdata,pdata
+	store 2,mem_le_search_handle_start
+	ifetch 2,contr
+	store 2,mem_le_search_handle_end
+	rtn
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/le_l2cap_signalling.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/le_l2cap_signalling.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/le_l2cap_signalling.prog	(working copy)
@@ -0,0 +1,54 @@
+
+
+le_parse_signaling:
+	ifetch 1,contr
+	ifetcht 1,contr //id
+	ifetcht 2,contr //length
+	beq L2CAP_CONNECTION_PARAMETER_UPDATE_RESPONSE,le_l2cap_parse_conn_parameter_update_rsp
+	rtn
+le_l2cap_parse_conn_parameter_update_rsp:
+	ifetch 2,contr	//result
+	store 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	jam BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+//mem_le_interval_min:the ptr that connection parameter,
+//include 	ConnIntervalMin,ConnIntervalMax,
+//		ConnSlaveLatency,ConnSupervisionTimeout
+le_l2cap_tx_update_req:
+	arg 0x0c,rega
+	arg L2CAP_CONNECTION_PARAMETER_UPDATE_REQUEST,regc
+	call le_fifo_malloc_tx_l2cap_signaling
+	setarg 0x08
+	istore 2,contw
+	fetch 8,mem_le_interval_min
+	istore 8,contw
+	rtn
+
+
+//rega:len regc:signaling opcode
+le_fifo_malloc_tx_l2cap_signaling:
+	call le_l2cap_update_signaling_identifier
+	arg LE_L2CAP_CID_SIGNAL,regb
+	call le_fifo_malloc_tx_l2cap
+	copy regc,pdata
+	istore 1,contw
+	fetch 1,mem_le_signaling_identifier
+	istore 1,contw
+	rtn
+
+
+le_l2cap_update_signaling_identifier:
+	fetch 1,mem_le_signaling_identifier
+	//beq 0xff,le_l2cap_signaling_identifier_set_1
+	pincrease 1
+	store 1,mem_le_signaling_identifier
+	rtnne 0
+	
+le_l2cap_reset_signaling_identifier:
+	jam 1,mem_le_signaling_identifier
+	rtn
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/le_l2cap_smp.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/le_l2cap_smp.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/le_l2cap_smp.prog	(working copy)
@@ -0,0 +1,594 @@
+
+le_pairing_mode_init:
+	fetch  1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_NONE, le_set_no_pairing
+	beq LE_PAIRING_MODE_LAGACY_JUSTWORK,le_set_pairing_mode_lagacy_just_work
+	beq LE_PAIRING_MODE_LAGACY_PASSKEY,le_set_pairing_mode_lagacy_passkey
+ifdef SECURE_CONNECTION
+	beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,le_set_pairing_mode_secure_justwork
+	beq LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC,le_set_pairing_mode_secure_numeric
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_set_pairing_mode_secure_passkey
+endif
+	rtn
+
+ifdef SECURE_CONNECTION	
+le_set_pairing_mode_secure_justwork:
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	branch le_set_noinputnooutput
+le_set_pairing_mode_secure_numeric:
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	jam FLAG_IOCAP_DISPLAYYESNO,mem_le_pres_iocap
+	rtn
+le_set_pairing_mode_secure_passkey:	
+	jam FLAG_LE_BONDING_MITM_SECURE,mem_le_pres_auth
+	branch le_set_displayonly
+endif
+le_set_no_pairing:
+	jam FLAG_LE_NO_BONDING_NO_MITM,mem_le_pres_auth
+le_set_noinputnooutput:	
+	jam FLAG_IOCAP_NOINPUTNOOUTPUT,mem_le_pres_iocap
+	rtn
+le_set_pairing_mode_lagacy_just_work:
+	jam FLAG_LE_BONDING_MITM,mem_le_pres_auth
+	branch le_set_noinputnooutput
+le_set_pairing_mode_lagacy_passkey:
+	jam FLAG_LE_BONDING_MITM,mem_le_pres_auth
+le_set_displayonly:	
+	jam FLAG_IOCAP_DISPLAYONLY,mem_le_pres_iocap
+	rtn
+
+	
+le_secure_connection_enable:
+	fetch 1,mem_le_pres_auth
+	set1 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT,pdata
+	store 1,mem_le_pres_auth
+	rtn
+le_secure_connection_disable:
+	fetch 1,mem_le_pres_auth
+	set0 LE_AUTH_SECURE_CONNECTION_PAIRING_BIT,pdata
+	store 1,mem_le_pres_auth
+	rtn
+
+le_parse_smp:
+	ifetch 1,contr
+	beq SMP_PAIRING_REQUEST,le_parse_smp_pairing_request
+//	beq SMP_PAIRING_RESPONSE,le_parse_smp_pairing_response
+	beq SMP_PAIRING_CONFIRM,le_parse_smp_pairing_confirm
+	beq SMP_PAIRING_RANDOM,le_parse_smp_pairing_random
+	beq SMP_PAIRING_FAILED,le_parse_smp_pairing_failed
+	beq SMP_ENCRYPTION_INFORMATION,le_parse_smp_encryption_information
+	beq SMP_MASTER_IDENTIFICATION,le_parse_smp_master_identification
+	beq SMP_IDENTITY_INFORMATION,le_parse_smp_identity_information
+	beq SMP_IDENTITY_ADDRESS_INFORMATION,le_parse_smp_identity_address_information
+	beq SMP_SIGNING_INFORMATION,le_parse_smp_signing_information
+	beq SMP_SECURITY_REQUEST,le_parse_smp_security_request
+ifdef SECURE_CONNECTION
+	beq SMP_PAIRING_PUBLIC_KEY,le_parse_smp_public_key
+	beq SMP_PAIRING_DHKEY_CHECK,le_parse_smp_dhkey_check
+endif
+	rtn
+
+
+
+le_send_smp_security_request:
+	force 2,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_SECURITY_REQUEST
+	istore 1,contw
+	fetch 1,mem_le_pres_auth
+	istore 1,contw
+	rtn
+		
+le_parse_smp_pairing_request:
+	store 1,mem_le_preq
+	ifetch 6,contr
+	istore 6,contw
+	fetch 1,mem_le_pairing_mode
+	beq  LE_PAIRING_MODE_NONE,le_smp_pairing_fail_reason_not_support_pairing
+	call le_send_smp_pairing_response
+	call le_check_master_support_secure_connect
+	jam FLAG_LE_PAIRING_RCV_PAIRING_REQ,mem_le_pairing_state
+	fetch 1,mem_le_preq_iocap
+	beq  FLAG_IOCAP_DISPlAYONLY,le_set_tk_0
+	beq  FLAG_IOCAP_DISPLAYYESNO,le_set_tk_0
+	beq  FLAG_IOCAP_NOINPUTNOOUTPUT,le_set_tk_0
+	fetch 1,mem_le_pairing_mode	
+	beq LE_PAIRING_MODE_LAGACY_PASSKEY,le_parse_smp_pairing_req_passkey
+	rtneq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY
+le_set_tk_0:
+	arg 0,pdata
+	store 4,mem_le_tk
+	rtn
+
+le_parse_smp_pairing_req_passkey:
+	fetch 1,mem_le_configuration
+	bbit1 BIT_BLE_PASSKEY_FIXED_KEY,le_parse_smp_pairing_req_fixed_passkey
+le_genernate_tk:
+	arg mem_le_tk,rega
+	copy rega,contw
+	arg 3,loopcnt
+	call generate_random_loop
+	fetch 2,mem_le_tk + 2
+	and_into 0x7,pdata
+	store 2,mem_le_tk + 2
+le_parse_smp_pairing_req_fixed_passkey:
+	jam BT_EVT_LE_TK_GENERATE,mem_fifo_temp
+	branch ui_ipc_send_event
+
+le_check_master_support_secure_connect:
+	fetch 1,mem_le_preq_auth
+	rtnbit1  LE_AUTH_SECURE_CONNECTION_PAIRING_BIT
+	fetch 1,mem_le_pairing_mode
+	rtnbit0 LE_PAIRING_MODE_SECURE_CONNECT_BIT
+	branch app_ble_disconnect	
+
+le_send_smp_pairing_response:
+	force 7,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	fetch 7,mem_le_pres
+	istore 7,contw
+	rtn
+		
+
+le_parse_smp_pairing_confirm:
+ifdef SECURE_CONNECTION
+	copy contr,rega
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_parse_smp_pairing_confirm_secure_passkey
+	copy rega,contr
+endif
+	arg mem_le_rconfirm,contw
+	call memcpy16
+	branch le_send_smp_pairing_confirm
+ifdef SECURE_CONNECTION
+le_parse_smp_pairing_confirm_secure_passkey:
+	copy rega,contr
+	arg mem_le_rconfirm,contw
+	call memcpy16
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	jam LE_SC_STAT_PASSKEY_WAIT_CONFIRM,mem_le_secure_connect_state	
+	rtn
+endif	
+
+
+le_send_smp_pairing_confirm:
+ifdef SECURE_CONNECTION
+	fetch 1,mem_le_pairing_mode
+	bbit1 LE_PAIRING_MODE_SECURE_CONNECT_BIT,le_send_smp_pairing_confirm_sc
+endif
+	call generate_confirm
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_CONFIRM
+	istore 1,contw
+	branch  store_aes_result
+
+	
+ifdef SECURE_CONNECTION
+le_send_smp_pairing_confirm_sc:
+	arg mem_le_srand,contw	
+	call generate_random
+	call function_f4_cb
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_CONFIRM
+	istore 1,contw
+	branch  load_inverse_result
+
+endif
+
+	
+le_parse_smp_pairing_random:	
+ifdef SECURE_CONNECTION
+	copy contr,rega
+	fetch 1,mem_le_pairing_mode
+	bbit1 LE_PAIRING_MODE_SECURE_CONNECT_BIT,le_parse_smp_pairing_random_sc
+	copy rega,contr
+endif
+	call authenticate_rconfirm
+	branch le_parse_smp_pairing_random_success,zero
+le_send_pairing_confirm_value_failed:
+	jam PAIRING_FAILED_CONFIRM_VALUE_FAILED,mem_le_ll_pairing_fail_reason
+le_send_pairing_failed:
+	force 2,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_FAILED
+	istore 1,contw
+	fetch 1,mem_le_ll_pairing_fail_reason
+	istore 1,contw	
+le_parse_smp_pairing_failed:
+	force smp_pairing_timer,queue
+	call timer_stop
+	jam FLAG_LE_PAIRING_NULL,mem_le_pairing_state
+	jam BT_EVT_LE_PAIRING_FAIL,mem_fifo_temp
+	branch ui_ipc_send_event
+
+le_smp_pairing_fail_reason_not_support_pairing:
+	jam PAIRING_FAILED_PAIRING_NOT_SUPPORTED,mem_le_ll_pairing_fail_reason
+	branch le_send_pairing_failed
+	
+	
+ifdef SECURE_CONNECTION	
+le_parse_smp_pairing_random_sc:
+	arg mem_le_mrand,contw
+	copy rega,contr
+	call memcpy16	
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_parse_smp_pairing_random_sc_passkey
+	call function_g2
+//	jam LE_SC_STAT_RECEIVE_RANDOM,mem_le_secure_connect_state
+//	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	call le_send_smp_pairing_random
+	fetch 1,mem_le_pairing_mode
+	rtnne LE_PAIRING_MODE_SECURE_CONNECT_NUMERIC
+	jam BT_EVT_LE_GKEY_GENERATE,mem_fifo_temp
+	branch ui_ipc_send_event	
+	
+le_parse_smp_pairing_random_sc_passkey:
+	call function_f4_ca
+	arg mem_AES_CMAC_temp,contw
+	call load_inverse_result	
+	arg mem_AES_CMAC_temp,rega
+	arg mem_le_rconfirm ,regb
+	arg 16,loopcnt
+	call string_compare
+	nbranch le_send_pairing_confirm_value_failed,zero
+	branch le_send_smp_pairing_random
+endif
+	
+le_parse_smp_pairing_random_success:
+	call generate_stk
+	jam BT_EVT_LE_PAIRING_SUCCESS,mem_fifo_temp
+	call ui_ipc_send_event
+	jam 1,mem_ltk_exists
+	jam FLAG_LE_PAIRING_AFTER_AUTH,mem_le_pairing_state
+	
+le_send_smp_pairing_random:
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_RANDOM
+	istore 1,contw
+	arg mem_le_srand,contr
+	branch memcpy16
+	
+le_parse_smp_encryption_information:
+	arg mem_le_peer_ltk,contw
+	branch memcpy16
+
+le_send_smp_encryption_information:
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_ENCRYPTION_INFORMATION
+	istore 1,contw
+	fetch 1,mem_le_configuration
+	bbit1 BIT_BLE_PAIRING_FIXED_LTK,le_send_fixed_ltk
+	arg mem_le_ltk,contr
+	branch memcpy16
+
+le_send_fixed_ltk:
+	arg mem_le_fixed_ltk,contr
+	branch memcpy16
+
+
+le_send_smp_master_identification:
+	arg mem_le_ediv,contw
+	force 10,loopcnt
+	call generate_random_loop
+	force 11,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_MASTER_IDENTIFICATION
+	istore 1,contw
+	fetch 2,mem_le_ediv
+	istore 2,contw
+	fetch 8,mem_le_rand
+	istore 8,contw
+	rtn
+
+le_send_smp_identity_information:
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_IDENTITY_INFORMATION
+	istore 1,contw
+	setarg 0
+	istore 8,contw
+	istore 8,contw
+	rtn
+	
+
+le_send_smp_identity_address_information:
+	force 8,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_IDENTITY_ADDRESS_INFORMATION
+	istore 1,contw
+	fetch 1,mem_le_conn_own_addr_type
+	istore 1,contw
+	fetch 6,mem_le_lap	
+	istore 6,contw
+	rtn	
+
+
+le_send_pairing_fail_unspecified_reason:
+	jam PAIRING_FAILED_UNSPECIFIED_REASON,mem_le_ll_pairing_fail_reason
+	branch le_send_pairing_failed
+
+le_check_init_key_distribution:
+	fetch 1,mem_le_pres_init_key_distribution
+	fetcht 1,mem_le_pres_init_key_distribution
+	iand temp,pdata
+	rtn	
+
+le_parse_smp_identity_information:
+	arg mem_le_irk,contw
+	call memcpy16
+	call le_check_init_key_distribution
+	isolate0 LE_INITATOR_IRK_BIT,pdata
+	branch le_send_pairing_fail_unspecified_reason,true
+	fetch 1,mem_device_option
+	rtnne dvc_op_module
+	call le_check_master_addr_type
+	nrtn user
+	branch app_ble_store_reconn_info
+
+//output:user is enable ,random addr type
+le_check_master_addr_type:
+	call disable_user
+	fetch 1,mem_le_conn_peer_addr_type
+	rtneq MASTER_PUBLIC_ADDR
+	fetch 1,mem_le_plap+5
+	compare 0xc0,pdata,0xc0
+	rtn true
+	branch enable_user
+
+le_parse_smp_identity_address_information:
+	call le_check_init_key_distribution
+	isolate0 LE_INITATOR_IRK_BIT,pdata
+	branch le_send_pairing_fail_unspecified_reason,true
+	rtn
+
+le_parse_smp_master_identification:
+le_parse_smp_signing_information:	
+le_parse_smp_security_request:
+	rtn
+	
+ifdef SECURE_CONNECTION
+le_parse_smp_public_key:
+	arg mem_le_pubkey_remote_x_256,contw	
+	call memcpy64
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	jam LE_SC_STAT_RECEIVE_PUBLIC_KEY,mem_le_secure_connect_state
+	rtn
+
+le_parse_smp_dhkey_check:
+	arg mem_sp_confirm_remote,contw
+	call memcpy16	
+	jam LE_SC_STAT_RECEIVE_DHKEY,mem_le_secure_connect_state
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	rtn	
+
+le_send_smp_pairing_public_key:
+	force 65,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_PUBLIC_KEY
+	istore 1,contw	
+	arg mem_le_pubkey_local_x_256,contr
+	branch memcpy64
+	
+le_send_smp_pairing_dhkey_check:
+	call function_f6_eb	
+	force 17,rega
+	call le_fifo_malloc_tx_l2cap_smp
+	setarg SMP_PAIRING_DHKEY_CHECK
+	istore 1,contw
+	branch load_inverse_result
+	
+endif
+
+le_check_paring_time:
+	fetch 1,mem_le_pairing_state
+	rtneq FLAG_LE_PAIRING_END
+	arg FLAG_LE_PAIRING_RCV_PAIRING_REQ,temp
+	isub temp,null
+	nrtn positive
+	arg smp_pairing_timer,queue
+	call timer_check
+	nrtn blank
+	branch le_send_pairing_fail_unspecified_reason
+
+le_pairing_sm:
+	bpatchx patch2f_0,mem_patch2f
+	fetch 1,mem_le_pairing_state
+	beq FLAG_LE_PAIRING_NULL,le_pairing_sm_null
+	beq FLAG_LE_PAIRING_START,le_pairing_sm_start
+	beq FLAG_LE_PAIRING_SEND_RECURITY_REQ,le_pairing_sm_send_sec_req
+	beq FLAG_LE_PAIRING_RCV_PAIRING_REQ,le_pairing_sm_rcv_pairing_req
+	beq FLAG_LE_PAIRING_AFTER_AUTH,le_pairing_sm_after_auth
+	beq FLAG_LE_PARING_SEND_ENC_INFORMATION,le_pairng_sm_send_enc_information
+	beq FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION,le_pairng_sm_send_master_indentification
+	beq FLAG_LE_PARING_SEND_INDENTITY_INFORMATION,le_pairng_sm_send_indentity_information
+	rtn
+
+le_pairing_sm_null:
+le_pairing_sm_send_sec_req:
+	fetch 1,mem_le_enc_state
+	rtnne FLAG_LE_SEND_START_ENC_RSP
+	jam FLAG_LE_ENC_END,mem_le_enc_state
+	jam FLAG_LE_PAIRING_END,mem_le_pairing_state
+	jam BT_EVT_LE_RECONNECT_COMPLETE ,mem_fifo_temp
+	branch ui_ipc_send_event	
+	
+	
+le_pairing_sm_start:
+	jam FLAG_LE_PAIRING_SEND_RECURITY_REQ,mem_le_pairing_state
+	branch le_send_smp_security_request
+
+le_pairing_sm_rcv_pairing_req:
+	jam FLAG_LE_PAIRING_AUTH,mem_le_pairing_state
+	setarg TIMER_SMP_PAIRING_TIMEOUT
+	arg smp_pairing_timer,queue
+	branch timer_init
+	
+le_pairing_sm_after_auth:
+	fetch 1,mem_le_enc_state
+	beq FLAG_LE_SEND_START_ENC_RSP,le_pairing_sm_after_auth_start_enc
+	rtn
+	
+le_pairing_sm_after_auth_start_enc:
+	jam FLAG_LE_PARING_SEND_ENC_INFORMATION,mem_le_pairing_state
+	jam BT_EVT_LE_ENC_INFO,mem_fifo_temp
+	call ui_ipc_send_event
+	call le_send_smp_encryption_information
+	fetch 1,mem_device_option
+	rtnne dvc_op_module
+	call le_check_master_addr_type
+	rtn user
+	branch app_ble_store_reconn_info
+
+
+le_pairng_sm_send_enc_information:	
+	jam FLAG_LE_PARING_SEND_MASTER_IDENTIFICATION,mem_le_pairing_state
+	branch le_send_smp_master_identification
+
+le_pairng_sm_send_master_indentification:	
+	fetch 1,mem_le_preq_resp_key_distribution
+	fetcht 1,mem_le_pres_resp_key_distribution
+	iand temp,pdata
+	isolate0 LE_INITATOR_IRK_BIT,pdata
+	branch le_parse_start_enc_rsp_after_auth_end,true
+	jam FLAG_LE_PARING_SEND_INDENTITY_INFORMATION,mem_le_pairing_state
+	branch le_send_smp_identity_information
+
+le_pairng_sm_send_indentity_information:		
+	call le_send_smp_identity_address_information
+	branch le_parse_start_enc_rsp_after_auth_end
+
+
+le_parse_start_enc_rsp_after_auth_end:
+	force smp_pairing_timer,queue
+	call timer_stop
+	jam FLAG_LE_ENC_END,mem_le_enc_state
+	jam FLAG_LE_PAIRING_END,mem_le_pairing_state
+	jam BT_EVT_LE_PAIRING_COMPLETE ,mem_fifo_temp
+	branch ui_ipc_send_event	
+	
+
+ifdef SECURE_CONNECTION
+
+le_secure_connect_sm:
+	bpatchx patch2f_1,mem_patch2f
+	fetch 1,mem_le_pairing_mode
+	rtnbit0 LE_PAIRING_MODE_SECURE_CONNECT_BIT
+	fetch 1,mem_le_secure_connect_flag
+	rtnne LE_SP_FLAG_COMMIT_256
+	jam SP_FLAG_STANDBY,mem_le_secure_connect_flag
+	fetch    1,mem_le_secure_connect_state
+	beq  LE_SC_STAT_RECEIVE_PUBLIC_KEY,le_sc_sm_receive_public_key
+	beq LE_SC_STAT_WAIT_SEND_PUBLIC_KEY,le_sc_sm_wait_send_public_key
+	beq LE_SC_STAT_SEND_PUBLIC_KEY,le_sc_sm_send_public_key
+	beq LE_SC_STAT_RECEIVE_DHKEY,le_sc_sm_receive_dhkey
+	beq LE_SC_STAT_WAIT_CONFIRM_GKEY,le_sc_sm_wait_confirm_gkey
+	beq  LE_SC_STAT_PASSKEY_WAIT_CONFIRM,le_sc_sm_passkey_wait_confirm
+	rtn	
+
+
+le_sc_sm_passkey_wait_confirm:
+	fetch 1,mem_authentication_passkey_times
+	copy pdata,queue
+	increase 1,pdata
+	store 1,mem_authentication_passkey_times
+	fetch 4,mem_le_tk
+	qisolate1 pdata
+	setarg 0x80
+	setflag true,0,pdata
+	store 1,mem_passkey_1bit
+	branch le_sc_sm_ready_send_pairing_confirm
+	
+le_sc_sm_wait_confirm_gkey:
+	fetch 1,mem_le_sc_confirm_gkey_flag
+	jam FLAG_LE_SC_CONFRIM_NULL,mem_le_sc_confirm_gkey_flag
+	beq FLAG_LE_SC_CONFRIM_GKEY_OK,le_sc_confirm_gkey_ok
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	rtn
+	
+le_sc_confirm_gkey_ok:
+	jam BT_EVT_LE_PAIRING_SUCCESS,mem_fifo_temp
+	call ui_ipc_send_event	
+	jam FLAG_LE_PAIRING_AFTER_AUTH,mem_le_pairing_state
+	branch le_send_smp_pairing_dhkey_check
+
+le_sc_sm_receive_dhkey:
+	fetch 1,mem_sp_dhkey_invalid
+	beq SP_KEY_VALID_256,le_dhkey_ready
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	rtn
+
+le_dhkey_ready:
+	call function_f5
+//	arg mem_le_r,contw
+//	force 2,loopcnt
+//	call memset0
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY ,le_dhkey_ready_common
+	call le_set_tk_0 
+le_dhkey_ready_common:
+	call function_f6_ea
+	arg mem_AES_CMAC_temp,rega
+	arg mem_sp_confirm_remote ,regb
+	arg 16,loopcnt
+	call string_compare
+	branch le_dhkey_check_ok,zero
+le_dhkey_check_fail:	
+	jam PAIRING_FAILED_DHKEY_CHECK_FAILED,mem_le_ll_pairing_fail_reason
+	branch le_send_pairing_failed
+
+	
+le_dhkey_check_ok:
+	call sp_calc_check_publickey_256
+	nbranch le_dhkey_check_fail,zero
+	jam 1,mem_ltk_exists
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_JUSTWORK,le_sc_confirm_gkey_ok
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY ,le_sc_confirm_gkey_ok	
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	jam LE_SC_STAT_WAIT_CONFIRM_GKEY,mem_le_secure_connect_state	
+	rtn	
+
+le_sc_sm_send_public_key:
+	fetch 1,mem_le_pairing_mode
+	beq LE_PAIRING_MODE_SECURE_CONNECT_PASSKEY,le_sc_sm_send_public_key_passkey
+	jam 0,mem_passkey_1bit
+le_sc_sm_ready_send_pairing_confirm:
+	branch le_send_smp_pairing_confirm
+
+le_sc_sm_send_public_key_passkey:
+//	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+//	jam LE_SC_STAT_PASSKEY_WAIT_CONFIRM,mem_le_secure_connect_state	
+//	branch p_ng_event_le_get_passkey
+	jam 0,mem_authentication_passkey_times
+	branch le_parse_smp_pairing_req_passkey
+
+	
+le_sc_sm_receive_public_key:
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	fetch 1,mem_le_sc_local_key_invalid
+	beq SP_KEY_VALID_256,le_public_key_ready
+//	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	rtn
+	
+le_public_key_ready:
+	jam LE_SC_STAT_WAIT_SEND_PUBLIC_KEY,mem_le_secure_connect_state	
+	jam SP_KEY_INVALID,mem_sp_dhkey_invalid
+	branch sp_dhkey_calc_256	
+
+le_sc_sm_wait_send_public_key:
+	jam LE_SP_FLAG_COMMIT_256,mem_le_secure_connect_flag
+	jam LE_SC_STAT_SEND_PUBLIC_KEY,mem_le_secure_connect_state
+	branch le_send_smp_pairing_public_key
+
+endif
+
+
+le_fifo_malloc_tx_l2cap_smp:
+	force LE_L2CAP_CID_SMP,regb
+	branch le_fifo_malloc_tx_l2cap
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/le_ll.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/le_ll.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/le_ll.prog	(working copy)
@@ -0,0 +1,212 @@
+
+le_parse_ll:
+	fetch 1,mem_le_rxbuf+2
+	beq LL_CONNECTION_UPDATE_REQ,le_parse_connection_update_req
+	beq LL_CHANNEL_MAP_REQ,le_parse_channel_map_req
+	beq LL_TERMINATE_IND,le_parse_terminate_ind
+	beq LL_ENC_REQ,le_parse_enc_req
+	beq LL_ENC_RSP,le_parse_enc_rsp
+	beq LL_START_ENC_REQ,le_parse_start_enc_req
+	beq LL_START_ENC_RSP,le_parse_start_enc_rsp
+	beq LL_UNKNOWN_RSP,le_parse_unknown_rsp
+	beq LL_FEATURE_REQ,le_parse_feature_req
+	beq LL_FEATURE_RSP,le_parse_feature_rsp
+	beq LL_PAUSE_ENC_REQ,le_parse_pause_enc_req
+	beq LL_PAUSE_ENC_RSP,le_parse_pause_enc_rsp
+	beq LL_VERSION_IND,le_parse_version_ind
+	beq LL_REJECT_IND,le_parse_reject_ind
+	beq LL_PING_REQ,le_parse_ping_req
+	beq LL_PING_RSP,le_parse_ping_rsp
+	arg 2,rega
+	arg LL_UNKNOWN_RSP,regb
+	call le_fifo_malloc_tx_ll
+	fetch 1,mem_le_rxbuf+2
+	istore 1,contw
+	rtn	
+
+
+le_parse_connection_update_req:
+	ifetch 9,contr
+	store 9,mem_le_new_param
+	ifetch 2,contr
+	store 2,mem_le_instant
+	fetch 1,mem_le_state
+	set1 lestate_update_param,pdata
+	store 1,mem_le_state
+	rtn
+
+le_parse_channel_map_req:
+	ifetch 5,contr
+	store 5,mem_le_new_map
+	ifetch 2,contr
+	store 2,mem_le_instant
+	fetcht 2,mem_le_event_count
+	isub temp,null
+	nbranch le_parse_terminate_ind,positive
+	fetch 1,mem_le_state
+	set1 lestate_update_map,pdata
+	store 1,mem_le_state
+	rtn
+
+
+le_parse_terminate_ind:
+	setarg 20 // 200ms
+	store 2,mem_le_superto
+	store 2,mem_le_init_superto
+	rtn
+
+le_send_terminate_ind_user_terminated:
+	arg ERROR_REMOTE_USER_TERMINATED_CONNECTION,regc
+
+//regc:The ErrorCode field shall be set to inform the remote device why the connection is about to be terminated.
+le_send_terminate_ind:
+	arg 2,rega
+	arg LL_TERMINATE_IND,regb
+	call le_fifo_malloc_tx_ll
+	copy regc,pdata
+	istore 1,contw
+	rtn
+
+le_parse_feature_req:
+
+le_send_feature_rsp:
+	arg 9,rega
+	arg LL_FEATURE_RSP,regb
+	call le_fifo_malloc_tx_ll
+	setarg param_le_features
+	istore 8,contw
+	rtn
+
+
+le_parse_version_ind:
+	rtn master
+le_send_version_ind:
+	arg 6,rega
+	arg LL_VERSION_IND,regb
+	call le_fifo_malloc_tx_ll
+	fetch 5,mem_lmp_version
+	istore 5,contw
+	rtn
+
+
+le_parse_ping_req:
+	arg LL_PING_RSP,regb
+	branch le_send_ll_one_lenth
+
+//regb:ll opcode
+le_send_ll_one_lenth:
+	arg 1,rega
+	branch le_fifo_malloc_tx_ll
+
+	
+le_parse_enc_req:
+	ifetch 8,contr
+	store 8,mem_le_rand
+	ifetch 2,contr
+	store 2,mem_le_ediv
+	ifetch 8,contr
+	store 8,mem_le_skdm
+	ifetch 4,contr
+	store 4,mem_le_ivm
+	call le_send_enc_rsp
+	bpatchx patch2f_2,mem_patch2f
+	fetch 1,mem_le_pairing_state
+	beq FLAG_LE_PAIRING_AFTER_AUTH,le_parse_enc_req_after_auth
+	fetch 1,mem_le_configuration
+	bbit1  BIT_BLE_PAIRING_FIXED_LTK,le_parse_enc_req_fixed_ltk
+	fetch 1,mem_nv_data_number
+	ncall load_device_list_mode_4,blank
+	fetch 1,mem_ltk_exists
+	beq 0,le_ltk_lost
+le_parse_enc_req_after_auth:
+	jam FLAG_LE_RCV_ENC_START,mem_le_enc_state
+	call  le_send_start_enc_req
+	branch generate_sk
+
+le_parse_enc_req_fixed_ltk:
+	jam 1,mem_ltk_exists
+	arg mem_le_fixed_ltk,contr
+	arg mem_le_ltk,contw
+	call memcpy16
+	branch le_parse_enc_req_after_auth
+
+
+le_ltk_lost:
+	bpatchx patch2f_3,mem_patch2f
+	jam FLAG_LE_ENC_NULL,mem_le_enc_state
+	jam FLAG_LE_ENC_NULL,mem_le_pairing_state
+	jam BT_EVT_LE_LTK_LOST,mem_fifo_temp
+	branch ui_ipc_send_event
+
+le_send_reject_ind:
+	arg 2,rega
+	arg LL_REJECT_IND,regb
+	call le_fifo_malloc_tx_ll
+	setarg LE_ERR_PIN_OR_KEY_MISSING
+	istore 1,contw
+	rtn		
+	
+le_send_enc_rsp:
+	arg mem_le_skds,contw
+	force 8,loopcnt
+	call generate_random_loop
+	arg mem_le_ivs,contw
+	force 4,loopcnt
+	call generate_random_loop
+	arg 13,rega
+	arg LL_ENC_RSP,regb
+	call le_fifo_malloc_tx_ll
+	fetch 8,mem_le_skds
+	istore 8,contw
+	fetch 4,mem_le_ivs
+	istore 4,contw
+	rtn
+
+le_send_start_enc_req:
+	arg LL_START_ENC_REQ,regb
+	branch le_send_ll_one_lenth
+
+le_send_start_enc_rsp:
+	arg LL_START_ENC_RSP,regb
+	branch le_send_ll_one_lenth
+	
+	
+le_parse_enc_rsp:
+	ifetch 8,contr
+	store 8,mem_le_skds
+	ifetch 4,contr
+	store 4,mem_le_ivs
+	branch generate_sk
+	
+le_parse_start_enc_req:
+	fetch 1,mem_le_state
+	set1 lestate_encryption,pdata
+	store 1,mem_le_state
+	rtn
+	
+le_parse_start_enc_rsp:
+	rtn master
+	jam BT_EVT_LE_START_ENC,mem_fifo_temp
+	call ui_ipc_send_event	
+	jam FLAG_LE_SEND_START_ENC_RSP,mem_le_enc_state
+	branch le_send_start_enc_rsp
+	
+le_parse_pause_enc_req:
+	jam FLAG_LE_ENC_PAUSE,mem_le_enc_state
+	call le_send_pause_enc_rsp	
+	jam BT_EVT_LE_PAUSE_ENC,mem_fifo_temp
+	branch ui_ipc_send_event	
+
+le_send_pause_enc_rsp:
+	arg LL_PAUSE_ENC_RSP,regb
+	branch le_send_ll_one_lenth	
+			
+
+le_parse_feature_rsp:
+le_parse_unknown_rsp:
+le_parse_pause_enc_rsp:
+le_parse_reject_ind:
+le_parse_ping_rsp:
+	rtn
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/lmp.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/lmp.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/lmp.prog	(working copy)
@@ -0,0 +1,2521 @@
+	
+/******************************************/
+/*************   LMP Parse   **************/
+/******************************************/
+init_lmp:
+	rtn wake
+init_lmp_work:
+	bpatchx patch2f_4,mem_patch2f
+	setarg 0
+	store 1,mem_lmp_to_send
+	store 1,mem_conn_sm
+	store 1,mem_lmo_opcode1
+	store 1,mem_lmo_opcode2
+	store 1,mem_esco_addr
+	store 1,mem_auth_enable
+	store 1,mem_connection_options
+	store 1,mem_pairing_auth
+	jam SWITCH_FLAG_INIT,mem_switch_flag
+	jam 0,mem_switch_fail_master_count
+	jam NULL_ENCRYP,mem_wait_encryption
+init_lmp_reinit:	
+	jam 0,mem_pairing_auth
+	jam 0,mem_sp_localsm
+	jam 0,mem_lmp_conn_state
+	//fall through
+parse_rx_done:
+	rtn
+
+parse_lmp:
+	bpatchx patch2f_5,mem_patch2f
+	call setlocalsm_master,master	//use this flag in hci
+	ncall setlocalsm_slave,master
+	call lmo_fifo_check
+	nrtn blank
+	fetch 1,mem_state_map
+	rtnbit0 smap_rxlmp
+	set0 smap_rxlmp,pdata
+	set0 mark_rxbuf_inuse,mark
+	store 1,mem_state_map
+	fetch 1,mem_rxbuf
+	fetcht 1,mem_state_map
+	isolate1 smap_lmptidinit,pdata
+	setflag true,smap_lmptid,temp
+	storet 1,mem_state_map
+	and_into 0x2,temp //smap_lmptid only
+	storet 1,mem_lmo_tid2
+	fetcht 1,mem_state_map
+	rshift pdata,pdata			/* align lmp_opcode */
+  	store 1,mem_lmi_opcode2
+	bpatchx patch2f_6,mem_patch2f
+  	fetch 1,mem_lmi_opcode2
+  	beq LMP_ESCAPE,parse_lmp_escape//multi
+  	beq LMP_ACCEPTED,parse_lmp_accepted//multi
+	beq LMP_NOT_ACCEPTED,parse_lmp_not_accepted//multi
+  	beq LMP_SET_AFH, parse_lmp_set_afh
+  	beq LMP_CLKOFFSET_REQ, parse_lmp_clkoffset_req
+ 	beq LMP_ENCRYPTION_MODE_REQ, parse_lmp_encryption_mode_req
+ 	beq LMP_ENCRYPTION_KEY_SIZE_REQ,parse_lmp_crypt_key
+	beq LMP_AUTO_RATE,parse_lmp_auto_rate
+	beq LMP_TEST_CONTROL,parse_lmp_test_control//multi
+	beq LMP_TEST_ACTIVATE,parse_lmp_test_activate
+	beq LMP_SETUP_COMPLETE,parse_lmp_setup_complete
+	beq LMP_SUPERVISION_TIMEOUT,parse_lmp_supervision_timeout
+	beq LMP_FEATURES_REQ,parse_lmp_features_req
+	beq LMP_HOST_CONNECTION_REQ,parse_lmp_conn_req
+	beq LMP_VERSION_REQ,parse_lmp_version_req
+	beq LMP_VERSION_RES,parse_lmp_version_res
+	beq LMP_DETACH,parse_lmp_detach
+	beq LMP_MAX_SLOT,parse_lmp_max_slot
+	beq LMP_MAX_SLOT_REQ,parse_lmp_max_slot_req
+	beq LMP_NAME_REQ,parse_lmp_name_req
+	beq LMP_NAME_RES,parse_lmp_name_res
+	beq LMP_FEATURES_RES,parse_lmp_features_res
+	beq LMP_COMB_KEY,parse_lmp_comb_key
+	beq LMP_AU_RAND, parse_lmp_au_rand
+	beq LMP_IN_RAND,parse_lmp_in_rand
+	beq LMP_SRES,parse_lmp_sres
+	beq LMP_INCR_POWER_REQ,parse_lmp_incr_power
+	beq LMP_DECR_POWER_REQ,parse_lmp_decr_power
+	beq LMP_MAX_POWER, parse_lmp_max_power
+	beq LMP_MIN_POWER, parse_lmp_min_power
+	beq LMP_PAGE_MODE_REQ, parse_lmp_page_mode_req
+	beq LMP_PAGE_SCAN_MODE_REQ, parse_lmp_page_scan_mode_req
+	beq LMP_PREFERRED_RATE, parse_lmp_preferred_rate
+	beq LMP_SLOT_OFFSET, parse_lmp_slot_offset
+	beq LMP_SNIFF_REQ, parse_lmp_sniff_req
+	beq LMP_START_ENCRYPTION_REQ, parse_lmp_start_encryption_req
+	beq LMP_STOP_ENCRYPTION_REQ, parse_lmp_stop_encryption_req
+	beq LMP_SWITCH_REQ, parse_lmp_switch_req
+	beq LMP_TEMP_RAND, parse_lmp_temp_rand
+	beq LMP_TEMP_KEY, parse_lmp_temp_key
+	beq LMP_TIMING_ACCURACY_REQ, parse_lmp_timing_accuracy_req
+	beq LMP_TIMING_ACCURACY_RES, parse_lmp_timing_accuracy_res
+	beq LMP_UNIT_KEY, parse_lmp_unit_key
+	beq LMP_UNSNIFF_REQ, parse_lmp_unsniff_req
+	beq LMP_USE_SEMI_PERMANENT_KEY, parse_lmp_use_semi_permanend_key
+	beq  LMP_ENCAPSULATED_HEADER,parse_lmp_encapsulated_header
+	beq  LMP_ENCAPSULATED_PAYLOAD,parse_lmp_encapsulated_payload
+	beq	LMP_SIMPLE_PAIRING_CONFIRM,parse_simple_pairing_confirm
+	beq  LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_simple_pairing_number
+	beq  LMP_DHKEY_CHECK,parse_dhkey_check
+	beq LMP_CLKOFFSET_RES, parse_lmp_clkoffset_res
+	beq LMP_ENC_KEY_SIZE_MASK_REQ,parse_enc_key_size_mask_req
+/* lmp is not recognized, check to see if we respond to all messages */ 
+/* rejecting the unrecognized message with PDU not recognized */
+reject_unknown_packet:
+	jam UNKNOWN_LMP_PDU,mem_lmo_reason2
+reject_lmp_packet:
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	rtn
+
+parse_lmp_clkoffset_req:
+	jam LMP_CLKOFFSET_RES,mem_lmo_opcode2
+	rtn	
+
+parse_enc_key_size_mask_req:
+	jam LMP_ENC_KEY_SIZE_MASK_RES,mem_lmo_opcode2
+	rtn
+	
+parse_lmp_set_afh:
+	fetch 4,mem_rxbuf+1
+	lshift pdata,pdata
+	store 4,mem_afh_instant
+	fetch 1,mem_rxbuf+5
+	store 1,mem_afh_new_mod
+	fetch 5,mem_rxbuf+6
+	store 5,mem_afh_map_new
+	fetch 5,mem_rxbuf+11
+	istore 5,contw
+	fetch 1,mem_mode
+	set1 afh_change,pdata
+	store 1,mem_mode
+	rtn
+parse_lmp_escape:
+	bpatchx patch2f_7,mem_patch2f
+	fetch 1,mem_rxbuf+1
+	set1 7,pdata
+	store 1,mem_lmi_opcode2
+	beq LMP_EXT_ACCEPTED,parse_lmpext_accepted
+	beq LMP_NOT_ACCEPTED_EXT,parse_lmpext_not_accepted
+	beq LMP_SNIFF_SUBRATING_REQ, parse_lmp_sniff_subrating_req
+	beq LMP_SNIFF_SUBRATING_RES, parse_lmp_sniff_subrating_res
+	beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_packet_type_table_req
+	beq LMP_EXT_FEATURES_REQ,parse_lmpext_features_req
+	beq LMP_EXT_FEATURES_RES,parse_lmpext_features_res
+	beq LMP_EXT_CHN_CLASSIFICATION_REQ,parse_lmpext_chn_classification_req
+	beq LMP_PAUSE_ENCRYPTION_REQ,parse_lmpext_pause_encrypt
+	beq LMP_RESUME_ENCRYPTION_REQ,parse_lmpext_resume_encrypt
+	beq LMP_IO_CAP_REQ,parse_lmpext_iocap_req
+	beq LMP_IO_CAP_RES,parse_lmpext_iocap_res
+	rtneq LMP_EXT_FEATURES_RES
+
+
+reject_unknown_ext_packet:
+	jam LMP_NOT_ACCEPTED_EXT,mem_lmo_opcode2
+	jam UNKNOWN_LMP_PDU,mem_lmo_reason2
+	
+	rtn
+parse_lmpext_chn_classification_req:
+	jam LMP_NOT_ACCEPTED_EXT,mem_lmo_opcode2
+	jam NOT_SUPPORT_CHN_CLASSIFICATION,mem_lmo_reason2
+	rtn
+	
+parse_lmpext_iocap_req:
+	call iocap_lmpext_load
+	jam LMP_IO_CAP_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmpext_iocap_res:
+	call iocap_lmpext_load
+	branch iocap_lmpext_common
+	
+iocap_lmpext_load:
+	arg      mem_sp_iocap_remote,contw
+	fetch 3, mem_rxbuf+2
+	istore    3,contw
+	rtn
+	
+iocap_lmpext_common:
+ifdef SIMPLE_PAIRING
+	branch master_set_mem_master_sp_flag,true//is un very ok to use master flag,but we have to add many codes if wo don't
+endif
+	rtn
+parse_lmpext_accepted:
+	fetch 1,mem_rxbuf+3
+	set1 7,pdata
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_accepted_ptt
+	rtn
+
+	
+parse_lmpext_not_accepted:
+	fetch 1,mem_rxbuf+3
+	set1 7,pdata
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_PACKET_TYPE_TABLE_REQ,parse_lmpext_not_accepted_ptt
+	rtn
+
+parse_lmpext_accepted_ptt:
+	fetch 1,mem_ptt
+	fetcht 1,mem_state_map
+	nsetflag blank,smap_edr,temp
+	storet 1,mem_state_map
+parse_lmpext_not_accepted_ptt:
+	fetch 1,mem_state
+	rtnbit0 state_init_seq
+	set0 state_init_seq,pdata
+	store 1,mem_state
+	fetch 1,mem_auth_enable
+	nrtn blank
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	rtn
+
+parse_lmpext_pause_encrypt:
+	nbranch parse_lmpext_pause_encrypt_slave, master
+	jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2
+	branch tid_reply
+
+parse_lmpext_pause_encrypt_slave:	
+	jam LMP_PAUSE_ENCRYPTION_REQ, mem_lmo_opcode2
+	rtn
+
+parse_lmpext_resume_encrypt:
+//trans file to pc may cause pause/resume encrypt
+//if ms is conn_sm_wait_end the controllor won't send ack after recieved start_encypt_accept
+	call tid_reply
+	branch lmp_start_encryption
+
+parse_lmpext_features_req:
+	jam LMP_EXT_FEATURES_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmpext_features_res:
+	fetcht 1,mem_rxbuf+4
+	and temp,0x1,temp
+	storet 1,mem_remote_sppcap
+	fetch 1,mem_hci_cmd
+	bne hci_cmd_wait_remote_ext_feature,parse_lmpext_features_res_not_hci
+	jam 0,mem_hci_cmd
+parse_lmpext_features_res_not_hci:
+	fetch 1,mem_conn_sm
+	rtnne CONN_SM_WAIT_FEATURES_EXT
+	jam CONN_SM_SEND_CONN_REQ,mem_conn_sm
+	branch process_conn_sm
+
+parse_lmp_accepted:
+	bpatchx patch30_0,mem_patch30
+	fetch 1,mem_rxbuf+1
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_HOST_CONNECTION_REQ,parse_lmp_accepted_hostconn//ok
+	beq LMP_IN_RAND,parse_lmp_accepted_inrand//ok
+	beq LMP_ENCRYPTION_MODE_REQ,parse_lmp_accepted_enc_mode//ok
+	beq LMP_ENCRYPTION_KEY_SIZE_REQ,parse_lmp_accepted_enc_keysize//ok
+	beq LMP_START_ENCRYPTION_REQ,parse_lmp_accepted_start_enc//ok
+	beq LMP_STOP_ENCRYPTION_REQ,parse_lmp_accepted_stop_enc//ok
+	beq LMP_UNSNIFF_REQ,parse_lmp_accepted_unsniff_req//ok
+	beq LMP_SNIFF_REQ,parse_lmp_accepted_sniff_req//ok
+	beq LMP_SWITCH_REQ,parse_lmp_accepted_switch
+	// simple pairing 
+	beq LMP_ENCAPSULATED_HEADER,parse_lmp_accepted_encapsulated_header//ok
+	beq LMP_ENCAPSULATED_PAYLOAD,parse_lmp_accepted_encapsulated_payload//ok
+	beq LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_accepted_simple_pairing_number//ok
+	beq LMP_DHKEY_CHECK,parse_lmp_accepted_dhkey_check//ok
+	rtn
+	
+parse_lmp_not_accepted:
+	bpatchx patch30_1,mem_patch30
+	fetch 1,mem_rxbuf+1
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_NAME_REQ,parse_lmp_not_accepted_name_req//ok
+	beq LMP_HOST_CONNECTION_REQ,parse_lmp_not_accepted_hostconn//ok
+	beq LMP_AU_RAND,parse_lmp_not_accepted_aurand//ok
+	beq LMP_IN_RAND,parse_lmp_not_accepted_inrand//ok
+	beq LMP_SWITCH_REQ,parse_lmp_not_accepted_switch//ok
+	/* simple pairing support */
+	beq  LMP_SIMPLE_PAIRING_NUMBER,parse_lmp_not_accepted_simple_pairing_number//ok
+	beq  LMP_DHKEY_CHECK,parse_lmp_not_accepted_dhkey_check//ok
+	beq LMP_UNSNIFF_REQ,parse_lmp_not_accepted_unsniff_req
+	beq LMP_SNIFF_REQ,parse_lmp_not_acdcept_sniff_req
+	rtn
+
+parse_lmp_accepted_switch:
+	jam BT_EVT_SWITCH_ACCEPT,mem_fifo_temp
+	call ui_ipc_send_event
+	branch role_switch_prepare0
+parse_lmp_not_accepted_switch:
+	jam BT_EVT_SWITCH_NOT_ACCEPT,mem_fifo_temp
+	call ui_ipc_send_event
+	jam SWITCH_FLAG_NOT_ACCEPT,mem_switch_flag
+	setarg TIMER_SWITCH_WAITE
+	arg switch_wait_timer,queue
+	branch timer_init
+
+
+parse_lmp_accepted_hostconn:
+	//fetch 1,mem_state
+	//rtnbit0 state_init_seq
+	fetch 1,mem_lmp_conn_state
+	set1 RECEIVED_CONN_REQ,pdata
+	store 1,mem_lmp_conn_state
+	jam BT_EVT_BB_CONNECTED,mem_fifo_temp
+	call ui_ipc_send_event
+	jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmo_opcode2
+	//nbranch parse_lmp_accepted_hostconn_ctn,master
+parse_lmp_accepted_hostconn_ctn:
+	/* checking to see if we requested host connection */
+	fetch 1,mem_conn_sm
+	bne CONN_SM_WAIT_CONN_ACCEPT, parse_rx_done
+	//branch parse_lmp_accepted_hostconn_master,master
+	/* continuing on with host connection state machine */
+	jam CONN_SM_AUTH_PAIR,mem_conn_sm
+	rtn
+	//branch host_create_conn_auth_pair
+
+	/* we need to move fast and send au_rand...jumping to next part of state machine for conn */
+//parse_lmp_accepted_hostconn_master:
+	//jam CONN_SM_AUTH_PAIR ,mem_conn_sm
+//	rtn
+
+parse_lmp_not_accepted_hostconn:
+	jam ACL_CONNECTION_ALREADY_EXISTS,mem_disconn_reason_send
+	jam LMP_DETACH,mem_lmo_opcode2
+	/* clearing connection state machine */
+	jam CONN_SM_STANDBY,mem_conn_sm
+	/* sending error message to host */
+	branch parse_rx_done,true
+	rtn
+
+parse_lmp_accepted_inrand:
+	fetch 1,mem_link_key_exists
+	nrtn blank
+	call clear_linkkey
+	call  lmp_generate_key
+	rtn master
+	set1 mark_slave_in_rand_accepted,mark
+	rtn
+
+parse_lmp_accepted_enc_mode:
+	nrtn master
+	jam LMP_ENCRYPTION_KEY_SIZE_REQ,mem_lmo_opcode2
+	fetch 1,mem_state_map
+	rtnbit0 smap_encryption
+	jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2
+	rtn
+
+parse_lmp_accepted_enc_keysize:
+	branch lmp_start_encryption
+	
+parse_lmp_accepted_start_enc:
+	call send_create_conn_start_l2cap_timer_sm
+	fetch 1,mem_state
+	rtnbit1 state_conn_comp
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	fetch 1,mem_conn_sm
+	rtnne CONN_SM_ENCRYPT_WAIT
+	jam CONN_SM_ENCRYPT_WAIT_CLEAR,mem_conn_sm
+	rtn
+	
+parse_lmp_accepted_stop_enc:
+	/* again this won't work with multipoint. keep track of anyone else encrypting */
+	//jam HOST_STOP_ENCRYPTION,message_queue_B0
+	//jam 1,message_queue_B1
+	//jam HOST_RETURN_SUCCESS,message_queue_B2
+	//fetch 1,mem_lmp_state2
+	//set1 MESSAGE_QUEUE,pdata
+	//store 1,mem_lmp_state2
+	rtn
+
+parse_lmp_not_accepted_aurand:	
+parse_lmp_not_accepted_aurand_send_detach:	
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam OTHER_END_TERMINATED,mem_disconn_reason_send
+	rtn
+/*in pair remote cancel the pair*/
+parse_lmp_not_accepted_inrand:
+	fetch 1,mem_rxbuf+2
+	beq KEY_MISSING,parse_lmp_inrand_key_missing
+	rtnne PAIRING_NOT_ALLOWED
+	jam PAIRING_NOT_ALLOWED,mem_disconn_reason_send
+	jam LMP_DETACH,mem_lmo_opcode2
+	rtn	
+parse_lmp_inrand_key_missing:
+	jam KEY_MISSING,mem_disconn_reason_send
+	jam LMP_DETACH,mem_lmo_opcode2
+	rtn
+	
+parse_lmp_not_accepted_name_req:
+	rtn
+	
+parse_lmp_not_accepted_simple_pairing_number:
+	jam      SP_STAT_NULL,mem_sp_state
+	jam LMP_DETACH,mem_lmo_opcode2
+	branch   parse_rx_done
+	
+parse_lmp_not_accepted_dhkey_check:
+ifdef LMP_DBG
+	call ice_break
+endif
+	jam      SP_STAT_NULL,mem_sp_state
+	jam LMP_DETACH,mem_lmo_opcode2
+	branch   parse_rx_done
+parse_lmp_not_accepted_unsniff_req:
+	jam BT_EVT_UNSNIFF_NOT_ACCEPT,mem_fifo_temp
+	branch ui_ipc_send_event
+	
+parse_lmp_accepted_unsniff_req:
+	jam BT_EVT_UNSNIFF_ACCEPT,mem_fifo_temp
+	call ui_ipc_send_event
+	branch sniff_exit
+	
+parse_lmp_accepted_sniff_req:
+	jam BT_EVT_SNIFF_ACCEPT,mem_fifo_temp
+	call ui_ipc_send_event
+	setarg 0
+	store 2,mem_dsniff
+	fetch 2,mem_sniff_param_interval
+	lshift pdata,pdata
+	store 2,mem_tsniff
+	fetch 1,mem_sniff_param_attempt
+	store 1,mem_sniff_attempt
+	fetch 1,mem_sniff_param_timeout
+	store 1,mem_sniff_timeout
+	branch sniff_init
+	
+parse_lmp_not_acdcept_sniff_req:
+	jam BT_EVT_SNIFF_NOT_ACCEPT,mem_fifo_temp
+	branch ui_ipc_send_event
+	
+parse_lmp_crypt_key:
+	fetcht 1,mem_rxbuf+1
+	storet 1,mem_key_size
+	branch accept_lmp_msg
+	
+parse_lmp_setup_complete:
+	fetch 1,mem_lmp_conn_state
+	set1 RECEIVED_SETUP_COMPLETE,pdata
+	store 1,mem_lmp_conn_state
+	rtnbit1 SENT_SETUP_COMPLETE
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	branch parse_rx_done
+	
+parse_lmp_max_slot:
+	//jam LMP_MAX_SLOT,mem_lmi_opcode2
+	//branch accept_lmp_msg
+	rtn
+	
+parse_lmp_max_slot_req:
+	fetch 1,mem_max_slot
+	fetcht 1,mem_rxbuf+1
+	isub temp,null
+	//jam LMP_MAX_SLOT_REQ,mem_lmi_opcode2
+	branch accept_lmp_msg,positive
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	jam UNSPECIFIED_ERROR,mem_lmo_reason2
+	jam LMP_MAX_SLOT_REQ,mem_lmi_opcode2
+	rtn
+	
+parse_lmp_detach:
+	call prepare_disconnect
+	branch accept_lmp_msg
+	
+accept_lmp_msg:
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	rtn
+
+parse_lmp_incr_power:
+	jam LMP_MAX_POWER,mem_lmo_opcode2
+	rtn
+
+parse_lmp_decr_power:
+	jam LMP_MIN_POWER,mem_lmo_opcode2
+	rtn
+	
+parse_lmp_version_res:
+	fetch 1,mem_conn_sm
+	rtneq CONN_SM_WAIT_VERSION
+	/* continuing on with host connection state machine */
+	jam CONN_SM_SEND_FEATURES ,mem_conn_sm
+	/* we need to move fast and send au_rand...jumping to next part of state machine for conn */
+	rtn
+
+
+parse_lmp_auto_rate:
+	rtn	
+
+parse_lmp_in_rand:
+	call lmp_copy_rand
+	jam pincode_state_wait_pincode,mem_pincode_state
+	jam BT_EVT_PINCODE_REQ,mem_fifo_temp
+	call ui_ipc_send_event
+
+	call tid_check
+	nbranch lmp_accept_inrand,true
+	//fetch 1,mem_auth_enable
+	nbranch parse_lmp_inrand_res,master // ignore this because of not ssp temporary
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	jam LMP_IN_RAND,mem_lmi_opcode2
+	jam TRANSACTION_COLLISION,mem_lmo_reason2
+	rtn
+parse_lmp_inrand_res:
+	fetch 1,mem_op
+	set1 op_inrand_req,pdata
+	store 1,mem_op
+	rtn
+
+//store current tid
+pop_tid_follow:
+	fetcht 1,mem_state_map
+	nsetflag blank,smap_lmptid,temp
+	storet 1,mem_state_map
+	rtn
+	
+//restore current tid
+push_tid_follow:
+	fetch 1,mem_lmo_tid2
+	rshift pdata,pdata
+	and_into 1,pdata
+	rtn
+
+parse_lmp_au_rand_moudle:
+	fetch 1,mem_nv_data_number
+	rtn blank
+	fetch 1,mem_pairing_auth
+	call load_device_list,blank
+	rtn	
+
+parse_lmp_au_rand:
+	call parse_lmp_au_rand_moudle
+	call push_tid_follow
+	store 1,mem_sres_tid
+	call lmp_copy_rand
+	jam LMP_SRES,mem_lmo_opcode2
+	fetch 1,mem_link_key_exists
+	nrtn blank
+	fetch 1,mem_state
+	rtnbit1 state_combkey		/* we have comb key, but not verified */
+	jam KEY_MISSING,mem_lmo_reason2
+	branch reject_lmp_packet
+
+parse_lmp_sres:	
+	arg mem_plap,rega
+	call function_e1
+	fetch 4,mem_rxbuf+1
+	fetcht 4,mem_input_store
+	isub temp,null
+	branch authentication_ok,zero
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam AUTHENTICATION_FAILURE_ERROR,mem_disconn_reason_send	
+	rtn
+authentication_ok:
+	call authentication_ok_common
+	fetch 1,mem_ssp_enable
+	branch  pairing_success,blank
+	rtn
+
+	
+authentication_ok_common:
+	call copy_aco
+	call linkkey_ready///save link key
+	fetch 1,mem_op
+	isolate1 op_auth_req,pdata
+	set0 op_auth_req,pdata
+	store 1,mem_op
+	fetch 1,mem_conn_sm
+	beq CONN_SM_AUTH_WAIT,authentication_ok_conn_sm
+	beq CONN_SM_PAIRING_WAIT,authentication_ok_conn_sm
+	rtn
+authentication_ok_conn_sm:
+	fetch 1,mem_pairing_auth
+	rtnne DEFALT_PAIRING_AUTH
+	fetch 1,mem_state_map
+	rtnbit1 smap_encryption
+	branch host_create_conn_encrypt
+
+parse_lmp_comb_key:
+	arg mem_rxbuf+1,rega
+	arg mem_kinit,regb
+	arg mem_random_number,contw
+	call xor16
+	arg mem_plap,rega
+	call generate_linkkey
+	jam LMP_AU_RAND,mem_lmo_opcode2
+	fetch 1,mem_state
+	bbit0 state_combkey,lmp_generate_key
+	rtn
+	
+parse_lmp_name_res:
+	fetch 2,mem_len
+	add pdata,-3,loopcnt	//for remote name length error
+	fetcht 1,mem_rxbuf+1
+	setarg mem_tmp_buffer
+	iadd temp,contw
+	arg mem_rxbuf+3,contr
+	call memcpy
+	fetcht 1,mem_name_offset
+	fetch 1,mem_rxbuf+2
+	isub temp,pdata
+	sub pdata,14,null
+	branch parse_lmp_name_res_end,positive
+	add temp,14,pdata
+	store 1,mem_name_offset
+	jam LMP_NAME_REQ,mem_lmo_opcode2
+	rtn
+parse_lmp_name_res_end:
+	fetch 1,mem_state_map
+	set1 smap_name_res,pdata
+	store 1,mem_state_map
+	bbit1 smap_name_req,lmp_disconnect
+	rtn
+parse_lmp_name_req:
+	fetch 1,mem_rxbuf+1
+	store 1,mem_lmi_opcode2 //offset 
+	jam LMP_NAME_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmp_conn_req:
+	branch accept_lmp_msg
+
+parse_lmp_timing_accuracy_req:
+	jam LMP_TIMING_ACCURACY_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmp_features_req:
+	jam LMP_FEATURES_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmp_version_req:
+	jam LMP_VERSION_RES,mem_lmo_opcode2
+	rtn
+
+parse_lmp_supervision_timeout:
+//	fetch 2,mem_rxbuf+1
+//	store 2,mem_supervision_to
+	rtn
+	
+
+
+parse_lmp_sniff_subrating_req:
+	fetch 2,mem_tsniff
+	iforce temp
+	fetch 1,mem_rxbuf+2
+	store 1,mem_subsniff_rate
+	imul32 temp,temp
+	fetch 2,mem_rxbuf+3
+	lshift pdata,pdata
+	store 2,mem_subsniff_tcmax
+	fetch 4,mem_rxbuf+5
+	lshift pdata,pdata
+ 	store 4,mem_subsniff_instant
+	//product pdata
+	deposit temp
+	store 2,mem_subsniff_tsniff
+	rtn
+parse_lmpext_packet_type_table_req:
+	fetcht 1,mem_ptt
+	fetch 1,mem_rxbuf+2
+	ixor temp,null
+	nbranch reject_unknown_ext_packet,zero
+	isolate1 0,pdata
+	fetch 1,mem_state_map
+	setflag true,smap_edr,pdata
+	store 1,mem_state_map
+	jam LMP_EXT_ACCEPTED,mem_lmo_opcode2
+	jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmi_opcode2
+	rtn
+
+	
+parse_lmp_sniff_subrating_res:
+parse_lmp_preferred_rate:
+parse_lmp_max_power:
+parse_lmp_min_power:
+	rtn
+parse_lmp_page_mode_req:
+	//jam LMP_PAGE_MODE_REQ,mem_lmi_opcode2
+	branch accept_lmp_msg
+parse_lmp_page_scan_mode_req:
+	//this can influence connection. need accepted
+	//jam LMP_PAGE_SCAN_MODE_REQ,mem_lmi_opcode2
+	branch accept_lmp_msg
+
+
+	
+parse_lmp_slot_offset:
+	fetch 2,mem_rxbuf+1
+	store 2,mem_slot_offset
+	rtn
+
+parse_lmp_sniff_req_check_sniff_para:
+	fetch 2,mem_rxbuf+4 /* tsniff */
+	fetcht 1,mem_lpm_mult
+	imul32 temp,pdata
+	arg 0x640,temp
+	isub temp,null
+//	branch lmp_reject_sniff,positive
+	rtn
+	
+parse_lmp_sniff_req:
+	fetch 2,mem_rxbuf+6
+	branch lmp_reject_sniff,blank
+	call parse_lmp_sniff_req_check_sniff_para
+	branch lmp_reject_sniff,positive
+	fetch 1,mem_device_option
+	sub pdata,dvc_op_module,null
+	call module_set_lpm_mult_2,zero
+	fetch 1,mem_state
+	bbit1 state_insniff,lmp_reject_sniff
+	fetch 2,mem_rxbuf+2 /* dsniff */
+	lshift pdata,pdata
+	store 2,mem_dsniff	
+	fetch 2,mem_rxbuf+4 /* tsniff */
+	lshift pdata,pdata
+	store 2,mem_tsniff
+	fetch 2,mem_rxbuf+6 /* sniff attempt */
+	store 1,mem_sniff_attempt
+	iforce temp
+	fetch 2,mem_rxbuf+8 /* sniff timeout */
+	store 1,mem_sniff_timeout
+	isub temp,null
+	nbranch set_big_value_to_attempt,positive
+	store 1,mem_sniff_attempt
+set_big_value_to_attempt:	
+	//call sniff_init
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_SNIFF_REQ,mem_lmi_opcode2
+	rtn
+
+lmp_reject_sniff:
+	jam PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch reject_lmp_packet
+
+parse_lmp_start_encryption_req:
+	call accept_lmp_msg
+	call lmp_copy_rand
+	call function_e3
+	branch start_encryption
+	
+parse_lmp_stop_encryption_req:
+	call accept_lmp_msg
+	branch stop_encryption
+	
+
+parse_lmp_switch_req:
+	fetch 4,mem_rxbuf+1
+	lshift pdata,pdata
+	//branch parse_lmp_switch_req_not_accept
+	branch parse_lmp_switch_accept,master
+	fetcht 1,mem_link_key_exists
+	nbranch parse_lmp_switch_req_clear_mark,blank
+parse_lmp_switch_req_not_accept:
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	jam LMP_SWITCH_REQ,mem_lmi_opcode2
+	jam PDU_NOT_ALLOWED,mem_lmo_reason2
+	rtn
+parse_lmp_switch_req_clear_mark:
+	jam LMP_SLOT_OFFSET,mem_lmo_opcode2
+	jam 0,mem_conn_sm
+	branch role_switch_prepare
+
+parse_lmp_switch_accept:
+	call role_switch_prepare
+	set1 mark_reconn_recieve_switch,mark
+	fetch 1,mem_connection_options
+	set0 CONNECTION_SWITCH,pdata
+	store 1,mem_connection_options
+	branch accept_lmp_msg
+
+	
+
+parse_lmp_temp_rand:
+parse_lmp_temp_key:
+parse_lmp_timing_accuracy_res:	
+parse_lmp_unit_key:	
+parse_lmp_use_semi_permanend_key:
+	rtn
+
+	
+parse_lmp_unsniff_req:
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_UNSNIFF_REQ,mem_lmi_opcode2
+	jam BT_EVT_REMOTE_UNSNIFF,mem_fifo_temp
+	call ui_ipc_send_event
+	branch sniff_exit
+	
+parse_lmp_encapsulated_header:
+	fetch 1,mem_rxbuf+1
+	bne ENCAPSULATED_MAJOR_TYPE_P192,parse_lmp_encapsulated_header_reject
+	fetch 1,mem_rxbuf+2
+	bne ENCAPSULATED_MINOR_TYPE_P192,parse_lmp_encapsulated_header_reject
+	fetch 1,mem_rxbuf+3
+	bne ENCAPSULATED_LEN_P192,parse_lmp_encapsulated_header_reject
+	call check_localsm
+	branch parse_lmp_encapsulated_header_master,true
+	jam SP_STAT_KEY_RECV,mem_sp_state
+parse_lmp_encapsulated_header_master:
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_ENCAPSULATED_HEADER,mem_lmi_opcode2
+	branch parse_rx_done
+	
+parse_lmp_encapsulated_header_reject:
+	jam      PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch   reject_lmp_packet
+	
+parse_lmp_accepted_encapsulated_header:
+	//jam LMP_ENCAPSULATED_PAYLOAD,mem_lmi_opcode2
+	//branch   accept_lmp_msg  	
+	jam LMP_ENCAPSULATED_PAYLOAD,mem_lmo_opcode2
+      //   branch   accept_lmp_msg  	
+         rtn
+parse_lmp_accepted_simple_pairing_number:
+	fetch 1,mem_ssp_mode_flag
+	beq SSP_MODE_SSP_PIN_FLAG,parse_lmp_accepted_simple_pairing_number_ssp_pin
+	beq SSP_MODE_PASSKEY_ENTRY_FLAG,parse_lmp_accepted_simple_pairing_number_passkey
+parse_lmp_accepted_simple_pairing_number_common:
+	call check_localsm
+	rtn true
+	jam SP_STAT_CONFIRM_RECV,mem_sp_state
+	rtn
+
+parse_lmp_accepted_simple_pairing_number_ssp_pin:
+	call g_noninit_number_confirm
+	jam BT_EVT_BT_GKEY_GENERATE,mem_fifo_temp
+	call ui_ipc_send_event
+	branch parse_lmp_accepted_simple_pairing_number_common
+
+
+parse_lmp_accepted_simple_pairing_number_passkey:
+	call check_localsm
+	rtn true
+	fetch 1,mem_authentication_passkey_times
+	beq 19,authentication_passkey_end
+	increase 1,pdata
+	store 1,mem_authentication_passkey_times
+//	branch p_authentication_passkey
+
+authentication_passkey:
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	jam      SP_STAT_COMMIT_CALC,mem_sp_state 
+	fetch 1,mem_authentication_passkey_times
+	copy pdata,queue
+	fetch 6,mem_pin
+	qisolate1 pdata
+	setarg 0x80
+	setflag true,0,pdata
+	store 1,mem_passkey_1bit
+	rtn
+
+authentication_passkey_end:	
+	jam SP_STAT_CONFIRM_RECV,mem_sp_state
+	rtn
+
+parse_lmp_accepted_dhkey_check:
+	call parse_lmp_accepted_dhkey_check_common
+pairing_success:
+	fetch 1,mem_flag_pairing_state
+	rtn blank
+	jam FLAG_PAIRING_STATE_NOT_PAIRING,mem_flag_pairing_state
+	jam BT_EVT_BT_PAIRING_SUCCESS,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+parse_lmp_accepted_dhkey_check_common:
+	//here must be change***  shyd
+	call check_localsm
+ifdef SIMPLE_PAIRING
+	ncall g_noninit,true	//when be master  call g_init
+	call g_init,true
+endif
+	call check_localsm
+	rtn true
+	jam SP_STAT_LINK_KEY_CALC,mem_sp_state
+	jam SP_FLAG_COMMIT,mem_sp_flag
+	rtn
+
+parse_simple_pairing_confirm:
+	arg mem_sp_confirm_remote,contw
+	arg mem_rxbuf+1,contr
+	call memcpy16
+	fetch 1,mem_ssp_mode_flag
+	rtneq  SSP_MODE_PASSKEY_ENTRY_FLAG
+ifdef SIMPLE_PAIRING
+	branch master_set_mem_master_sp_flag
+endif
+	
+parse_lmp_encapsulated_payload:
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_RANDOM_SEND,parse_encapsulated_payload_master
+	fetch    1,mem_sp_state
+	bne SP_STAT_KEY_RECV,parse_lmp_encapsulated_payload_reject
+parse_encapsulated_payload_master:
+	fetch    1,mem_sp_remote_key_recv_count
+	sub      pdata,0x20,contw
+	nbranch  parse_lmp_encapsulated_payload_reject,positive
+	arg      mem_sp_pubkey_remote,contw
+	iadd     contw,contw
+	fetch 8,mem_rxbuf+1
+	istore   8,contw
+	fetch 8,mem_rxbuf+9
+	istore   8,contw
+	fetch    1,mem_sp_remote_key_recv_count
+	increase 16,pdata
+	store    1,mem_sp_remote_key_recv_count
+	bne ENCAPSULATED_LEN_P192,accept_lmp_msg
+parse_lmp_encapsulated_payload_completed:
+	call check_localsm
+	branch accept_lmp_msg,true
+	jam      SP_KEY_VALID,mem_sp_remote_key_invalid
+	jam      SP_STAT_KEY_GENERATE,mem_sp_state
+	jam      SP_FLAG_COMMIT,mem_sp_flag  
+	branch   accept_lmp_msg
+parse_lmp_encapsulated_payload_reject:
+	jam      PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch   reject_lmp_packet	
+parse_lmp_accepted_encapsulated_payload: 
+	fetch 1,mem_sp_local_key_send_count
+	beq	ENCAPSULATED_LEN_P192,parse_lmp_encapsulated_payload_all_accepted
+	jam LMP_ENCAPSULATED_PAYLOAD,mem_lmo_opcode2
+	branch   parse_rx_done 
+	
+parse_lmp_encapsulated_payload_all_accepted:   
+	call check_localsm
+	branch parse_lmp_encapsulated_payload_all_accepted_master,true
+	fetch 1,mem_ssp_mode_flag
+	beq SSP_MODE_PASSKEY_ENTRY_FLAG,parse_lmp_encapsulated_payload_all_accepted_get_passkey
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	jam      SP_STAT_COMMIT_CALC,mem_sp_state 
+	branch   parse_rx_done
+
+parse_lmp_encapsulated_payload_all_accepted_get_passkey:
+	jam BT_EVT_BT_GET_PASSKEY,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+parse_lmp_encapsulated_payload_all_accepted_master:
+	//call sp_master_generate_local_key
+	branch   parse_rx_done   
+
+parse_lmp_simple_pairing_number:
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_RANDOM_SEND,parse_lmp_simple_pairing_number_master
+	fetch    1,mem_sp_state
+	bne SP_STAT_RANDOM_RECV,parse_lmp_simple_pairing_number_reject
+parse_lmp_simple_pairing_number_master:
+	arg      mem_sp_random_remote,contw
+	fetch 8,mem_rxbuf+1
+	istore   8,contw
+	fetch 8,mem_rxbuf+9
+	istore   8,contw
+	call check_localsm
+	branch parse_lmp_simple_pairing_number_master0,true
+	jam      SP_STAT_RANDOM_SEND,mem_sp_state
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	branch accept_lmp_msg  
+parse_lmp_simple_pairing_number_master0:
+	jam SP_STAT_COMMIT_CALC,mem_master_sp_state
+ifdef SIMPLE_PAIRING
+	branch master_set_mem_master_sp_flag
+endif
+	//jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2
+	//branch accept_lmp_msg  
+parse_lmp_simple_pairing_number_reject:
+	jam      PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch reject_lmp_packet
+	
+parse_dhkey_check:
+	fetch    1,mem_master_sp_state
+	beq SP_STAT_CONFIRM_SEND,parse_dhkey_check_master
+	fetch    1,mem_sp_state
+	bne SP_STAT_CONFIRM_RECV,parse_lmp_dhkey_check_reject
+parse_dhkey_check_master:
+	arg      mem_sp_check_result,contw
+	arg mem_rxbuf+1,contr
+	call memcpy16
+	call check_localsm
+	branch parse_dhkey_check_master0,true
+	fetch 1,mem_ssp_mode_flag
+	beq SSP_MODE_SSP_PIN_FLAG,number_comparison_mode
+number_comparison_successed:
+	jam 0,mem_flag_mode_ssp_pin
+	jam SP_STAT_CONFIRM_CHECK,mem_sp_state
+	jam SP_FLAG_COMMIT,mem_sp_flag
+	jam LMP_DHKey_Check,mem_lmi_opcode2
+	branch   parse_rx_done
+	
+parse_dhkey_check_master0:
+	jam      SP_STAT_CONFIRM_CHECK,mem_master_sp_state
+	jam      SP_FLAG_COMMIT,mem_master_sp_flag
+	branch   parse_rx_done
+parse_lmp_dhkey_check_reject:
+	jam      PDU_NOT_ALLOWED,mem_lmo_reason2
+	branch reject_lmp_packet
+
+number_comparison_mode:
+	fetch 1,mem_flag_mode_ssp_pin
+	bbit1 FLAG_MODE_SSP_PIN_REVICEVE_COMPARISON_BIT ,comparison_result
+	set1 FLAG_MODE_SSP_PIN_RECIEVE_DHKEY_BIT,pdata
+	store 1,mem_flag_mode_ssp_pin
+	rtn
+	
+comparison_result:
+	bbit1 FLAG_MODE_SSP_PIN_COMPARISON_RESULT_BIT,number_comparison_successed
+	jam 0,mem_flag_mode_ssp_pin
+	branch parse_lmp_dhkey_check_reject
+
+	
+parse_lmp_clkoffset_res:
+	branch parse_rx_done
+		
+parse_lmp_encryption_mode_req:
+	fetch 1,mem_connection_options
+	set0 CONNECTION_ENCRYPT
+	store 1,mem_connection_options
+	call accept_lmp_msg
+	nrtn master					/* do sth only if we're master */
+	fetch 1,mem_rxbuf+1
+	fetcht 1,mem_op
+	setflag blank,op_stop_enc,temp
+	nsetflag blank,op_start_enc,temp
+	storet 1,mem_op
+	rtn 
+	
+parse_lmp_features_res:
+	fetcht 8,mem_rxbuf+1		/*fix bcp(baoshijie) err*/
+parse_lmp_features_res_not_hci:	
+	fetch 1,mem_conn_sm
+	rtnne CONN_SM_WAIT_FEATURES_RES
+
+	fetch 1,mem_connection_options
+	bbit0 CONNECTION_FEATURE_EXT,parse_lmp_send_conn
+
+	jam CONN_SM_SEND_FEATURES_EXT,mem_conn_sm
+	rtn
+parse_lmp_send_conn:
+	jam CONN_SM_SEND_CONN_REQ,mem_conn_sm
+	rtn
+parse_lmp_test_activate:
+	fetch 1,mem_debug_config
+	store 1,mem_test_mode_old_debug_config
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_TEST_ACTIVATE,mem_lmi_opcode2
+	rtn
+parse_lmp_test_control:
+	/* the 9 test control parameters are XORed with 0x55 */
+	/* doing the XOR here and storing in mem_temp_payload */
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_TEST_CONTROL,mem_lmi_opcode2
+	force 9,loopcnt
+	arg mem_rxbuf+1,contr
+	arg mem_temp_payload,contw
+parse_lmp_test_xor:
+	ifetch 1,contr
+	xor_into 0x55,pdata
+	istore 1,contw
+	loop parse_lmp_test_xor
+	fetch 1,test_mode_scenario
+	fetcht 1,mem_tester_emulate
+	set0 tester_no_whitening,temp
+	set0 tester_pattern_test,temp
+	beq EXIT_TEST_MODE,	 parse_lmp_test_control_exit
+	beq PAUSE_TEST_MODE,	 parse_lmp_test_control_pause
+	beq CLOSED_LOOP_BACK_ACL,	 parse_lmp_test_control_loopback
+	beq ACL_WITHOUT_WHITENING,	 parse_lmp_test_control_loopback_nowhite
+	beq CLOSED_LOOP_BACK_SCO,	 parse_lmp_test_control_loopback
+	beq SCO_WITHOUT_WHITENING,	 parse_lmp_test_control_loopback_nowhite
+	beq ZERO_PATTERN,	 parse_lmp_test_control_pattern
+	beq ONE_PATTERN,	 parse_lmp_test_control_pattern
+	beq ALT_PATTERN,	 parse_lmp_test_control_pattern
+	beq ALT2_PATTERN,	 parse_lmp_test_control_pattern
+	beq PSEUDORANDOM,	 parse_lmp_test_control_pattern
+	rtn
+parse_lmp_test_control_exit:
+	/* restoring old parameters */
+	fetch 1,mem_tester_emulate
+	set1 tester_exit,pdata
+	set1 tester_change,pdata
+	store 1,mem_tester_emulate
+	rtn
+parse_lmp_test_control_pattern:
+	set1 tester_pattern_test,temp
+	jam 5,mem_lch_code
+	fetch 2,test_mode_data_length
+	iforce loopcnt
+	store 2,mem_len
+	arg mem_rxbuf,contw
+	call pn9
+parse_lmp_test_control_loopback_nowhite:
+	set1 tester_no_whitening,temp
+parse_lmp_test_control_loopback:
+	set1 tester_change,temp
+	force 0,pdata
+	store 1,mem_slave_rcvcnt
+	store 2,mem_tst_pktcnt_crc
+	store 2,mem_tst_pktcnt_dmh
+	store 2,mem_tst_pktcnt_hec
+	store 2,mem_tst_pktcnt_sync
+	fetch 1,test_mode_hopping_mode
+	compare FIXED_FREQ,pdata,0xff
+	setflag true,tester_fixed_freq,temp
+	storet 1,mem_tester_emulate
+	rtn
+
+parse_lmp_test_control_pause:
+	set0 mark_testmode,mark
+	jam 0,mem_tester_emulate
+	fetch 1,mem_debug_config
+	set0 debug_tx_pattern,pdata
+	store 1,mem_debug_config
+	rtn
+
+
+	
+	
+
+lmp_copy_rand:	
+	arg mem_rxbuf+1,contr
+	arg mem_random_number,contw
+	branch memcpy16
+
+lmp_generate_key:
+	jam LMP_COMB_KEY,mem_lmo_opcode2
+	rtn
+
+lmp_start_encryption:
+	nrtn master
+	jam LMP_START_ENCRYPTION_REQ,mem_lmo_opcode2
+	rtn
+	
+lmp_accept_inrand:
+	arg mem_lap,rega
+	call generate_kinit
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_IN_RAND,mem_lmi_opcode2
+	rtn
+
+lmp_disconnect:
+	jam 10,mem_conn_timer
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam LOCAL_HOST,mem_disconn_reason_send	
+	rtn
+
+/*********************************/
+/*********lmp send*************/
+/********************************/
+	/* enable user if a lmp packet is to send */
+send_lmp:
+	bpatchx patch30_2,mem_patch30
+	disable user
+	call lmo_fifo_process
+	fetch 1,mem_lmp_to_send
+	rtn blank
+/* lmp message to be processed. this will either be because host??? */
+/* wants to send a lmp message or because one resulted from the LMP */
+/* processing section */
+/********* outgoing lmp lookup table *************/
+	bbit1 7,send_lmp_escape
+send_lmp0:
+	beq LMP_NAME_REQ,	 send_lmp_name_req
+	beq LMP_NAME_RES,	 send_lmp_name_res
+	beq LMP_ACCEPTED,	 send_lmp_accepted
+	beq LMP_NOT_ACCEPTED,	 send_lmp_not_accepted
+	beq LMP_FEATURES_REQ,	 send_lmp_features_req
+	beq LMP_FEATURES_RES,	 send_lmp_features_res
+	beq LMP_TIMING_ACCURACY_RES,	 send_lmp_timing_accuracy_res
+	beq LMP_VERSION_REQ,	 send_lmp_version_req
+	beq LMP_VERSION_RES,	 send_lmp_version_res
+	beq LMP_SETUP_COMPLETE,	 send_lmp_setup_complete
+	beq LMP_SUPERVISION_TIMEOUT,	 send_lmp_superto
+	beq LMP_HOST_CONNECTION_REQ,send_lmp_no_payload
+	beq LMP_IN_RAND,send_lmp_inrand
+	beq LMP_COMB_KEY,send_lmp_comb_key
+	beq LMP_AU_RAND,send_lmp_aurand
+	beq LMP_SRES,send_lmp_sres
+	beq LMP_ENCRYPTION_MODE_REQ,send_lmp_encryption_mode_req
+	beq LMP_ENCRYPTION_KEY_SIZE_REQ,send_lmp_encryption_key_size_req
+	beq LMP_START_ENCRYPTION_REQ,send_lmp_start_encryption
+	beq LMP_DETACH,send_lmp_detach
+	beq LMP_QUALITY_OF_SERVICE_REQ, send_lmp_quality_of_service_req
+	beq LMP_UNIT_KEY,send_lmp_unit_key
+	//Optional (O)
+	beq LMP_INCR_POWER_REQ,send_lmp_inc_power	
+	beq LMP_CLKOFFSET_RES, send_lmp_clkoffset_res	
+	beq LMP_MAX_POWER,send_lmp_nopayload_reply
+	beq LMP_MAX_SLOT, send_lmp_max_slot
+	beq LMP_MAX_SLOT_REQ, send_lmp_max_slot_req
+	beq LMP_MIN_POWER,send_lmp_nopayload_reply
+	beq LMP_SLOT_OFFSET, send_lmp_slot_offset
+	beq LMP_SWITCH_REQ, send_lmp_switch_req
+	beq LMP_SNIFF_REQ, send_lmp_sniff_req
+	beq LMP_STOP_ENCRYPTION_REQ, send_lmp_stop_encryption_req	
+	beq LMP_TIMING_ACCURACY_REQ, send_lmp_timing_accuracy_req
+	beq LMP_UNSNIFF_REQ, send_lmp_unsniff_req
+	beq LMP_ENCAPSULATED_HEADER,send_lmp_encapsulated_header
+	beq LMP_ENCAPSULATED_PAYLOAD,send_lmp_encapsulated_payload
+	beq LMP_SIMPLE_PAIRING_CONFIRM,send_lmp_simple_pairing_comfirm
+	beq LMP_SIMPLE_PAIRING_NUMBER,send_lmp_simple_pairing_number
+	beq LMP_DHKEY_CHECK,send_lmp_dhkey_check
+	beq LMP_AUTO_RATE,send_lmp_auto_rate
+	beq LMP_ENC_KEY_SIZE_MASK_RES,send_lmp_enc_key_size_mask_res
+	//master only must(M)
+	beq LMP_CLKOFFSET_REQ, send_lmp_clkoffset_req
+	beq LMP_QUALITY_OF_SERVICE, send_lmp_quality_of_service
+	beq LMP_TEST_ACTIVATE, send_lmp_test_activate
+	beq LMP_TEST_CONTROL, send_lmp_test_control
+send_lmp_error:
+	branch assert
+	rtn
+send_lmp_escape:
+	beq LMP_EXT_ACCEPTED,send_lmpext_accepted
+	beq LMP_EXT_FEATURES_RES,send_lmpext_features_res
+	beq LMP_NOT_ACCEPTED_EXT,send_lmpext_not_accepted
+	beq LMP_EXT_FEATURES_REQ,send_lmpext_features_req
+	beq LMP_PACKET_TYPE_TABLE_REQ,send_lmpext_packet_type_table_req
+	beq LMP_PAUSE_ENCRYPTION_REQ,send_lmpext_pause_encryption_req
+	beq LMP_IO_CAP_REQ,send_lmp_io_cap_req
+         beq LMP_IO_CAP_RES,send_lmpext_io_cap_res
+         beq LMP_SNIFF_SUBRATING_REQ,send_lmpext_sniff_subrating_req
+         beq LMP_SNIFF_SUBRATING_RES,send_lmpext_sniff_subrating_res
+	branch assert
+
+
+/******** LMP follow messages **********/
+/****** TID follow received packet  *******/
+
+send_lmp_accepted:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_lmi_opcode
+	istore 1,contw
+	call send_lmp_follow
+	bpatchx patch30_3,mem_patch30
+	fetch 1,mem_lmi_opcode
+	beq LMP_IN_RAND,send_lmp_accepted_inrand
+	beq LMP_ENCRYPTION_MODE_REQ,send_lmp_accepted_enc_mode
+	beq LMP_ENCRYPTION_KEY_SIZE_REQ,send_lmp_accepted_enc_key
+	beq LMP_SNIFF_REQ,send_lmp_accept_sniff_req
+	beq LMP_HOST_CONNECTION_REQ,send_lmp_accepted_connection
+	beq LMP_DHKEY_CHECK,send_lmp_accept_dhkey_check
+	beq LMP_START_ENCRYPTION_REQ,send_create_conn_start_l2cap_timer_sm  
+	rtn	
+	
+send_create_conn_start_l2cap_timer_sm:
+	fetch 1,mem_conn_sm
+	rtn blank
+	jam CONN_SM_WAIT_DONE,mem_conn_sm
+	setarg TIMER_ENPT_WAITE
+	arg enpt_delay_timer,queue
+	branch timer_init
+	
+send_lmp_accept_sniff_req:
+	branch sniff_init
+send_lmp_not_accepted:
+	force 3,pdata
+	call msg_send_lmp
+	fetch 1,mem_lmi_opcode
+	beq LMP_AU_RAND,send_not_accept_aurand
+	istore 1,contw
+	fetch 1,mem_lmo_reason
+	istore 1,contw
+	branch send_lmp_follow
+
+send_not_accept_aurand:
+	istore 1,contw
+	fetch 1,mem_lmo_reason
+	istore 1,contw
+	arg mem_sres_tid,temp
+	branch special_tid_store
+
+send_lmpext_accepted:	
+	force 4,queue
+	call send_lmpext
+	setarg LMP_ESCAPE
+	istore 1,contw
+	fetch 1,mem_lmi_opcode
+	set0 7,pdata
+	istore 1,contw
+	fetch 1,mem_lmi_opcode
+	branch send_lmp_follow
+
+send_lmpext_not_accepted:
+	force 5,queue
+	call send_lmpext
+	setarg LMP_ESCAPE
+	istore 1,contw
+	fetch 1,mem_lmi_opcode
+	set0 7,pdata
+	istore 1,contw
+	fetch 1,mem_lmo_reason
+	istore 1,contw
+	branch send_lmp_follow
+	
+
+send_lmp_accepted_inrand:
+	call clear_linkkey
+	call tid_check	
+	rtn true
+	branch lmp_generate_key
+
+send_lmp_accepted_enc_mode:
+	fetch 1,mem_op
+	bbit1 op_start_enc,send_lmp_accepted_enc_start
+	rtnbit0 op_stop_enc
+	jam LMP_STOP_ENCRYPTION_REQ,mem_lmo_opcode2
+	set0 op_stop_enc,pdata
+	call tid_reply
+	branch send_lmp_accepted_enc_exit
+send_lmp_accepted_enc_start:
+	jam LMP_ENCRYPTION_KEY_SIZE_REQ,mem_lmo_opcode2
+	set0 op_start_enc,pdata
+send_lmp_accepted_enc_exit:
+	store 1,mem_op
+	rtn
+
+send_lmp_accepted_enc_key:
+	call check_localsm
+	branch lmp_start_encryption,true
+	rtn
+
+send_lmp_accepted_connection:
+	jam LMP_PACKET_TYPE_TABLE_REQ,mem_lmo_opcode2
+	//jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	fetch 1,mem_lmp_conn_state
+	set1 RECEIVED_CONN_REQ,pdata
+	store 1,mem_lmp_conn_state
+	jam BT_EVT_BB_CONNECTED,mem_fifo_temp
+	branch ui_ipc_send_event
+
+
+send_lmp_accept_dhkey_check:
+	rtn
+/******** LMP reply messages **********/
+/****** TID always set to remote  *******/
+
+send_lmpext_features_res:
+	force 12,queue
+	call send_lmpext
+	setarg 0x01
+	istore 1,contw
+	fetch 2,mem_lmpext_ssp_enable
+	istore 2,contw
+	setarg 0
+	istore 3,contw
+	setarg 0x00
+	istore 4,contw
+	branch send_lmp_reply
+send_lmpext_io_cap_res:     
+	force 5,queue
+         call send_lmpext
+       	fetch 3,mem_sp_iocap_local
+         istore 3,contw
+	call send_lmp_reply
+	jam FLAG_PAIRING_STATE_PAIRING,mem_flag_pairing_state
+	fetch 1,mem_sp_iocap_local
+	beq DISPLAY_YESNO,responder_iocap_display_yesno
+	beq KEYBOARD_ONLY,responder_iocap_keyboard_only
+	beq NO_INPUT_NO_OUTPUT,responder_iocap_no_input_no_output
+	rtn
+
+responder_iocap_keyboard_only:
+	fetch 1,mem_sp_iocap_remote
+	beq DISPLAY_ONLY,responder_iocap_keyboard_only_initiator_iocap_display_only
+	beq DISPLAY_YESNO,responder_iocap_keyboard_only_initiator_iocap_display_yesno
+	beq KEYBOARD_ONLY,responder_iocap_keyboard_only_initiator_iocap_keyboard_only
+	beq NO_INPUT_NO_OUTPUT,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output
+	rtn
+
+
+responder_iocap_display_yesno:
+	fetch 1,mem_sp_iocap_remote
+	beq DISPLAY_ONLY,responder_iocap_display_yesno_initiator_iocap_display_only
+	beq DISPLAY_YESNO,responder_iocap_display_yesno_initiator_iocap_display_yesno
+	beq KEYBOARD_ONLY,responder_iocap_display_yesno_initiator_iocap_keyboard_only
+	beq NO_INPUT_NO_OUTPUT,responder_iocap_display_yesno_initiator_iocap_no_input_no_output
+	rtn
+
+	
+responder_iocap_no_input_no_output:
+	fetch 1,mem_sp_iocap_remote
+	beq DISPLAY_ONLY,responder_iocap_no_input_no_output_initiator_iocap_display_only
+	beq DISPLAY_YESNO,responder_iocap_no_input_no_output_initiator_iocap_display_yesno
+	beq KEYBOARD_ONLY,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only
+	beq NO_INPUT_NO_OUTPUT,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output
+	rtn
+
+responder_iocap_keyboard_only_initiator_iocap_no_input_no_output:
+responder_iocap_display_yesno_initiator_iocap_no_input_no_output:
+responder_iocap_display_yesno_initiator_iocap_display_only:
+responder_iocap_no_input_no_output_initiator_iocap_display_only:
+responder_iocap_no_input_no_output_initiator_iocap_display_yesno:
+responder_iocap_no_input_no_output_initiator_iocap_keyboard_only:
+responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output:
+set_ssp_mode_justwork: 
+	jam SSP_MODE_JUST_WORK_FLAG,mem_ssp_mode_flag
+	fetch 1,mem_classic_bt_flag
+	bbit1 FLAG_SSP_REJECT_JUSTWORK,app_bt_disconnect
+	rtn
+
+responder_iocap_display_yesno_initiator_iocap_display_yesno:
+set_ssp_mode_numeric_comparison: 
+	jam SSP_MODE_SSP_PIN_FLAG,mem_ssp_mode_flag
+	rtn
+
+responder_iocap_keyboard_only_initiator_iocap_display_yesno:
+responder_iocap_keyboard_only_initiator_iocap_keyboard_only:	
+responder_iocap_keyboard_only_initiator_iocap_display_only:	
+responder_iocap_display_yesno_initiator_iocap_keyboard_only:
+set_ssp_mode_passkey: 
+	jam SSP_MODE_PASSKEY_ENTRY_FLAG,mem_ssp_mode_flag
+	rtn
+
+
+classic_bt_set_reject_justwork_flag:
+	arg FLAG_SSP_REJECT_JUSTWORK,queue
+	branch classic_bluetooth_set_flag
+
+classic_bt_clr_reject_justwork_flag:
+	arg FLAG_SSP_REJECT_JUSTWORK,queue
+	branch classic_bluetooth_clr_flag
+
+classic_bluetooth_set_flag:
+	fetch 1,mem_classic_bt_flag
+	qset1 pdata
+	store 1,mem_classic_bt_flag
+	rtn
+
+classic_bluetooth_clr_flag:
+	fetch 1,mem_classic_bt_flag
+	qset0 pdata
+	store 1,mem_classic_bt_flag
+	rtn
+
+         
+send_lmp_io_cap_req:
+	force 5,queue
+	call send_lmpext
+	fetch 3,mem_sp_iocap_local
+	istore 3,contw
+	branch send_lmp_request
+	
+
+send_lmpext_sniff_subrating_req: 
+
+	rtn
+send_lmpext_sniff_subrating_res: 
+         force 9,queue
+         call send_lmpext
+         fetch 1,mem_subsniff_rate
+         istore 1,contw
+         fetch 2,mem_subsniff_tcmax
+         istore 2,contw
+         fetch 4,mem_subsniff_instant
+         istore 4,contw
+	branch send_lmp_reply
+
+send_lmp_name_res:
+	force 17,pdata
+	call msg_send_lmp
+	fetch 1,mem_lmi_opcode  /* loading name offset */
+	copy pdata,temp
+	beq 0x00,send_lmp_name_res_offset_ok
+	beq 0x0e,send_lmp_name_res_offset_ok
+	beq 0x1c,send_lmp_name_res_offset_ok
+	rtn
+send_lmp_name_res_offset_ok:
+	istore 1,contw	/* writing name offset */
+	fetch 1,mem_local_name_length
+	istore 1,contw	/* writing name length */
+	arg 14,loopcnt
+	setarg mem_local_name
+	iadd temp,contr	/* setting read location */
+	call memcpy
+	branch send_lmp_reply
+
+
+send_lmp_timing_accuracy_res:
+	force 3,pdata
+	call msg_send_lmp
+	setarg 0x0114
+	istore 2,contw
+	branch send_lmp_reply
+
+send_lmp_clkoffset_res:
+	// dopod s505 must wait for this res
+	force 3,pdata
+	call msg_send_lmp
+	fetch 4,mem_clke_bt
+	isub clkn_bt,pdata
+	branch send_lmp_clkoffset_res_master,master
+	sub pdata,0,pdata		/* our role is slave */
+send_lmp_clkoffset_res_master:	
+	// bit 16-2 of clkslave-clkmaster
+	rshift2 pdata,pdata
+	set0 15,pdata
+	istore 2,contw
+	branch send_lmp_reply
+
+send_lmp_version_res:
+	force 6,pdata
+	call msg_send_lmp
+	fetch 5,mem_lmp_version
+	istore 5,contw
+	branch send_lmp_reply
+
+send_lmp_features_res:
+	force 9,pdata
+	call msg_send_lmp
+	fetch 8,mem_features
+	istore 8,contw
+	branch send_lmp_reply  
+
+
+/******** LMP request messages **********/
+/****** TID always set to local initiated *******/
+	
+
+send_lmpext_features_req:
+	force 12,queue
+	call send_lmpext
+	setarg 0x01
+	istore 1,contw
+	fetch 2,mem_lmpext_ssp_enable
+	istore 2,contw
+	setarg 0
+	istore 3,contw
+	setarg 0x00
+	istore 4,contw
+	branch send_lmp_request
+
+send_lmpext_packet_type_table_req:
+	force 3,queue
+	call send_lmpext
+	fetch 1,mem_ptt
+	istore 1,contw
+	disable user
+	call send_lmp_request
+	nrtn user
+	nrtn master
+	fetch 1,mem_afh_cfg
+	rtnbit0 AFH_CFG_ON
+	call afh_init
+	branch afh_open_all_channels
+	
+//default:featrue is enable,extfeature is disable
+ssp_enable:
+	bpatchx patch30_4,mem_patch30
+	fetch 1,mem_features+6
+	set1 param_featrue_ssp,pdata
+	store 1,mem_features+6
+	setarg param_lmpext_ssp_enable
+	store 2,mem_lmpext_ssp_enable
+	rtn
+
+ssp_disable:
+	bpatchx patch30_5,mem_patch30
+	fetch 1,mem_features+6
+	set0 param_featrue_ssp,pdata
+	store 1,mem_features+6
+	setarg 0
+	store 2,mem_lmpext_ssp_enable
+	rtn
+	
+afh_init:
+	jam 0x3,mem_afh_cfg
+	setarg 0
+	store 4,mem_afh_timer
+	arg mem_afh_map_lo,contw
+	call afh_reset_map
+	arg mem_afh_map_new,contw
+	call afh_reset_map
+	arg mem_afh_classify_channel_map,contw
+	call afh_reset_map
+	branch afh_clear_error_counter
+afh_open_all_channels:
+	arg mem_afh_map_new,contw
+	call afh_reset_map
+	call afh_clear_error_counter
+	branch afh_set_send_flag
+
+
+afh_reset_map:
+	setarg 0xffffff
+	istore 3,contw
+	istore 3,contw
+	istore 3,contw
+	setarg 0x7f
+	istore 1,contw
+	rtn
+afh_clear_error_counter:
+	setarg 0
+	store 2,mem_afh_error_total
+	rtn
+afh_set_send_flag:
+	fetch 1,mem_afh_cfg
+	set1 send_lmp_set_afh,pdata
+	store 1,mem_afh_cfg
+	rtn
+
+
+send_lmpext_pause_encryption_req:
+	force 2,queue
+	call send_lmpext
+	nbranch send_lmp_reply,master
+	// assume slave will not send pause req firstly???
+	branch send_lmp_request
+
+
+	
+send_lmp_detach:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_disconn_reason_send
+	istore 1,contw
+	call send_lmp_request
+prepare_disconnect:
+	fetch 1,mem_op
+	set1 op_disconn,pdata
+	store 1,mem_op
+	jam 50,mem_conn_timer
+	rtn
+	
+
+send_lmp_no_payload:
+	force 1,pdata
+	call msg_send_lmp
+	branch send_lmp_request
+send_lmp_nopayload_reply:
+	force 1,pdata
+	call msg_send_lmp
+	branch send_lmp_reply
+	
+	
+send_lmp_encryption_mode_req:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_state_map
+	isolate0 smap_encryption,pdata
+	setflag true,0,pdata
+	and_into 1,pdata
+	istore 1,contw
+	branch send_lmp_request
+
+
+send_lmp_superto:
+	force 3,pdata
+	call msg_send_lmp
+	fetch 2,mem_supervision_to
+	istore 2,contw
+	branch send_lmp_request
+
+send_lmp_name_req:
+	jam 250,mem_conn_timer
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_name_offset
+	istore 1,contw
+	branch send_lmp_request
+
+send_lmp_test_control:
+	force 10,pdata
+	call msg_send_lmp
+	arg mem_temp_payload,contr
+	force 9,loopcnt
+send_lmp_test_control_loop:	
+	ifetch 1,contr
+	xor_into 0x55,pdata
+	istore 1,contw
+	loop send_lmp_test_control_loop
+	branch send_lmp_request  
+
+send_lmp_quality_of_service_req:
+	branch send_lmp_request
+send_lmp_unit_key:
+	branch send_lmp_request
+
+send_lmp_slot_offset:
+	rtn master
+	call calc_slot_offset
+	force 9,pdata
+	call msg_send_lmp
+	fetch 2,mem_slot_offset
+	istore 2,contw
+	fetch 3,mem_lap
+	istore 3,contw
+	fetch 1,mem_uap
+	istore 1,contw
+	fetch 2,mem_nap
+	istore 2,contw
+	bmark0 mark_switch_initiated,send_lmp_slot_offset_reply
+	set0 mark_switch_initiated,mark
+	call send_lmp_request
+	jam LMP_SWITCH_REQ,mem_lmo_opcode2
+	rtn
+send_lmp_slot_offset_reply:
+	call send_lmp_reply
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam LMP_SWITCH_REQ,mem_lmi_opcode2
+	rtn
+	
+send_lmp_switch_req:
+	arg 0x200,temp
+	branch switch_on_native,master
+	deposit clke_bt
+	branch switch_slack
+switch_on_native:
+	deposit clkn_bt
+switch_slack:
+	deposit bt_clk
+	iadd temp,pdata
+	and_into 0x1fc,pdata
+	store 4,mem_sniff_anchor
+	force 5,pdata
+	call msg_send_lmp
+	fetch 4,mem_sniff_anchor		/* reused as switch instant */
+	rshift pdata,pdata
+	istore 4,contw
+	branch send_lmp_request
+	
+send_lmp_sniff_req:
+	force 10,pdata
+	call msg_send_lmp
+	arg mem_sniff_payload,contr
+	ifetch 9,contr
+	istore 9,contw
+	branch send_lmp_request
+
+	
+send_lmp_timing_accuracy_req:
+/* default to TID_NORM_SEND */
+	force 3,pdata
+	call msg_send_lmp
+	setarg 0x0114
+	istore 2,contw
+	branch send_lmp_request
+	
+send_lmp_unsniff_req:
+//--------------------need to completa
+	force 1,pdata
+	call msg_send_lmp
+	//fetch 1,mem_unsniff_pending
+	//nbranch send_msg_done,blank
+	//jam 1,mem_unsniff_pending
+	//fetch 2,mem_sniff_attempt
+	//fetch 2,mem_nsniff_attempt
+	//lshift3 pdata,pdata
+	//lshift pdata,pdata
+	//store 1,mem_unsniff_cnt
+	branch send_lmp_request
+
+	
+send_lmp_max_slot:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_max_slot
+	istore 1,contw
+	branch send_lmp_request
+	
+	
+send_lmp_max_slot_req:
+	force 2,pdata
+	call msg_send_lmp
+	setarg 0x05		/*5 slot*/
+	istore 1,contw
+	branch send_lmp_request
+
+
+send_lmp_inc_power:
+	force 2,pdata
+	call msg_send_lmp
+	setarg 0x00		/*5 slot*/
+	istore 1,contw
+	branch send_lmp_request
+
+
+send_lmp_setup_complete_by_module:
+	jam LMP_MAX_SLOT_REQ,mem_lmo_opcode2
+	rtn
+send_lmp_setup_complete:
+	fetch 1,mem_device_option
+	sub pdata,dvc_op_module,null
+	call send_lmp_setup_complete_by_module,zero
+	fetch 1,mem_state
+	set1 state_conn_comp,pdata
+	store 1,mem_state
+	copy clkn_bt,pdata
+	store 4,mem_aurand_send_delay_time
+	fetch 1,mem_lmp_conn_state
+	bbit1 SENT_SETUP_COMPLETE,send_lmp_setup_complete_has_sent
+	set1 SENT_SETUP_COMPLETE,pdata
+	store 1,mem_lmp_conn_state
+	jam BT_EVT_SETUP_COMPLETE,mem_fifo_temp
+	call ui_ipc_send_event
+	force 1,pdata
+	call msg_send_lmp
+	branch send_lmp_request
+send_lmp_setup_complete_has_sent:
+	jam 0,mem_lmp_to_send
+	rtn
+	
+send_lmp_version_req:
+	force 6,pdata
+	call msg_send_lmp
+	fetch 5,mem_lmp_version
+	istore 5,contw
+	branch send_lmp_request
+
+send_lmp_features_req:
+	force 9,pdata
+	call msg_send_lmp
+	fetch 8,mem_features
+	istore 8,contw
+	branch send_lmp_request  
+
+sp_master_send_io_cap_get:
+	jam SP_FLAG_COMMIT,mem_master_sp_flag
+	fetch 1,mem_sp_local_key_invalid
+	rtnne SP_KEY_VALID
+	jam SP_MASTER_STAT_START_DONE,mem_master_sp_state
+	rtn
+
+sp_master_send_io_cap_send:
+	call tid_initiate
+	jam LMP_IO_CAP_REQ,mem_lmo_opcode2
+	jam SP_STAT_KEY_SEND,mem_master_sp_state
+	rtn
+	
+	
+sp_master_send_LMP_ENCAPSULATED_HEADER:
+	call tid_initiate
+	jam      LMP_ENCAPSULATED_HEADER,mem_lmo_opcode2
+	jam SP_STAT_RANDOM_SEND,mem_master_sp_state
+	rtn
+	
+sp_master_commitment_compare:
+	arg mem_sp_calc_result_high,rega
+	arg mem_sp_confirm_remote,regb
+	arg 16,loopcnt
+	call string_compare
+	branch sp_master_commitment_compare_success,zero
+	jam SP_STAT_NULL,mem_master_sp_state
+ifdef SIMPLE_PAIRING
+	call master_clear_mem_master_sp_flag
+endif
+	jam   PDU_NOT_ALLOWED,mem_lmo_reason2
+	jam 	LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2 
+ifdef LMP_DBG
+	call ice_break
+endif
+	branch reject_lmp_packet
+sp_master_commitment_compare_success:
+	jam 	SP_STAT_CONFIRM_CALC,mem_master_sp_state
+ifdef SIMPLE_PAIRING
+	call master_set_mem_master_sp_flag
+endif
+	jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmi_opcode2
+	branch accept_lmp_msg  
+	
+
+	
+sp_master_send_lmp_simple_pairing_number:
+	jam LMP_SIMPLE_PAIRING_NUMBER,mem_lmo_opcode2
+	rtn
+	
+
+
+sp_send_lmp_encapsulated_header:
+	// calculate the private & public key here
+	//jam      LMP_ENCAPSULATED_HEADER,mem_lmp_to_send
+	jam      LMP_ENCAPSULATED_HEADER,mem_lmo_opcode2
+	//jam      TID_PAIRING,mem_lmp_tid
+	rtn
+	//fetch 1,mem_tid_table
+	//set1 TID_PAIRING,pdata
+	//store 1,mem_tid_table
+     
+    
+send_lmp_encapsulated_header: 
+	jam 0,mem_sp_local_key_send_count
+	force 4,pdata
+	call msg_send_lmp
+	force ENCAPSULATED_MAJOR_TYPE_P192,pdata
+	istore 1,contw
+	force ENCAPSULATED_MINOR_TYPE_P192,pdata
+	istore 1,contw  
+	force ENCAPSULATED_LEN_P192,pdata
+	istore 1,contw 
+	call check_localsm
+	branch send_lmp_request,true
+	branch send_lmp_reply
+
+send_lmp_encapsulated_payload:
+	//jam      TID_PAIRING,mem_lmp_tid
+	 force 17,pdata
+	call msg_send_lmp
+	fetch 1,mem_sp_local_key_send_count
+	arg mem_sp_pubkey_local,contr
+	iadd contr,contr    
+	ifetch   8,contr
+	istore   8,contw
+	ifetch   8,contr
+	istore   8,contw
+	fetch    1,mem_sp_local_key_send_count
+	increase 16,pdata
+	store    1,mem_sp_local_key_send_count
+	call check_localsm
+	branch send_lmp_request,true
+	branch send_lmp_reply
+	//branch send_lmp_request
+	
+sp_send_lmp_simple_pairing_comfirm:
+        jam      SP_STAT_RANDOM_RECV,mem_sp_state
+        jam      LMP_SIMPLE_PAIRING_CONFIRM,mem_lmo_opcode2
+        rtn
+send_lmp_simple_pairing_comfirm:
+        //jam      SP_STAT_RANDOM_RECV,mem_sp_state
+        //jam      TID_PAIRING,mem_lmp_tid
+        force    17,pdata
+        call msg_send_lmp   
+        arg      mem_sp_calc_result_high,contr
+        ifetch   8,contr
+        istore   8,contw
+        ifetch   8,contr
+        istore   8,contw 
+        branch send_lmp_reply
+
+sp_send_lmp_simple_pairing_number:
+	jam      LMP_SIMPLE_PAIRING_NUMBER,mem_lmo_opcode2
+	rtn
+
+send_lmp_simple_pairing_number:
+	//jam      TID_PAIRING,mem_lmp_tid
+	call check_localsm
+ifdef SIMPLE_PAIRING
+	call sp_local_random_key_generator,true
+endif
+	force    17,pdata
+	call msg_send_lmp
+	arg      mem_sp_random_local,contr
+	ifetch   8,contr
+	istore   8,contw
+	ifetch   8,contr
+	istore   8,contw
+	call check_localsm
+	nbranch send_lmp_reply,true
+	branch send_lmp_request,true
+
+master_sp_sm_end:
+	//jam DEFAULT_STATEMACHINE,mem_sp_localsm
+	jam SP_STAT_DONE,mem_master_sp_state
+sp_aurand_send:
+	call tid_initiate
+	jam LMP_AU_RAND,mem_lmo_opcode2
+	call check_localsm_master
+ifdef SIMPLE_PAIRING
+	branch sp_master_key_prarm_push,true
+	branch sp_link_key_prarm_push
+endif
+master_sp_send_lmp_dhkey_check:
+	call tid_reply
+sp_send_lmp_dhkey_check: 
+	jam      LMP_DHKEY_CHECK,mem_lmo_opcode2
+	rtn
+send_lmp_dhkey_check: 
+	//jam      TID_PAIRING,mem_lmp_tid
+	force    17,pdata
+	call     msg_send_lmp
+	arg      mem_sp_calc_result_high,contr
+	ifetch   8,contr
+	istore   8,contw
+	ifetch   8,contr
+	istore   8,contw 
+	call check_localsm
+	nbranch send_lmp_reply,true
+	branch send_lmp_request,true
+
+send_lmp_enc_key_size_mask_res:
+	force 3,pdata
+	call msg_send_lmp   
+	setarg 0xfffe //enc key size mask
+	istore 2,contw
+	branch send_lmp_reply
+
+send_lmp_auto_rate:
+	branch send_lmp_request
+send_lmp_clkoffset_req:
+	branch send_lmp_request
+send_lmp_quality_of_service:
+	branch send_lmp_request
+send_lmp_test_activate:
+	branch send_lmp_request
+
+/******** LMP request/reply messages **********/
+/****** TID transaction specific *******/
+
+send_lmp_comb_key:
+	call generate_random_number
+	arg mem_lap,rega
+	call generate_linkkey
+	force 17,pdata
+	call msg_send_lmp
+	arg mem_kinit,rega
+	arg mem_random_number,regb
+	call xor16
+	nbranch send_lmp_follow,master
+	branch send_lmp_tid
+
+send_lmp_inrand:
+	call generate_random_number
+	arg mem_plap,rega
+	call generate_kinit
+send_lmp_rand:	/* used by in_rand,au_rand,start_encrypt */
+	force 17,pdata
+	call msg_send_lmp
+	arg mem_random_number,contr
+	call memcpy16
+	fetch 1,mem_conn_sm 
+	beq CONN_SM_AUTH_WAIT,send_lmp_request
+	beq CONN_SM_PAIRING_WAIT,send_lmp_request
+	branch send_lmp_tid
+
+send_lmp_aurand:
+	fetch 1,mem_pairing_auth
+	branch send_lmp_aurand_notpairing,blank
+	call check_localsm
+	call tid_initiate,true
+	ncall tid_reply,true
+	branch send_lmp_aurand_common
+send_lmp_aurand_notpairing:
+	call tid_initiate
+send_lmp_aurand_common:
+	call generate_random_number
+	branch send_lmp_rand
+
+send_lmp_sres:
+	arg mem_lap,rega
+	call function_e1
+	force 5,pdata
+	call msg_send_lmp
+	fetch 4,mem_input_store
+	istore 4,contw
+	arg mem_sres_tid,temp
+	call special_tid_store
+	call copy_aco
+	call check_localsm
+	branch send_lmp_sres_master,true
+	jam DONE_ENCRYP,mem_wait_encryption
+	fetch 1,mem_pairing_auth
+	rtn blank
+	jam LMP_AU_RAND,mem_lmo_opcode2
+send_lmp_sres_master:
+	fetch 1,mem_link_key_exists
+	rtn blank
+send_lmp_sres_startenc:
+	call check_localsm
+	nbranch send_lmp_sres_startenc_slave,true
+	fetch 1,mem_auth_enable
+	rtn blank
+	jam LMP_ENCRYPTION_MODE_REQ, mem_lmo_opcode2
+	rtn
+send_lmp_sres_startenc_slave:
+	rtnmark0 mark_slave_in_rand_accepted
+	set0 mark_slave_in_rand_accepted,mark
+	jam LMP_ENCRYPTION_MODE_REQ, mem_lmo_opcode2
+	rtn
+	
+
+	
+send_lmp_start_encryption:
+	call generate_random_number
+	call function_e3
+	force 17,pdata
+	call msg_send_lmp
+	arg mem_random_number,contr
+	call memcpy16
+	branch send_lmp_tid
+
+send_lmp_stop_encryption_req:
+	force 1,pdata
+	call msg_send_lmp
+	branch send_lmp_tid
+
+send_lmp_encryption_key_size_req:
+	force 2,pdata
+	call msg_send_lmp
+	force 16,pdata
+	istore 1,contw
+	store 1,mem_key_size
+	branch send_lmp_tid
+
+msg_send_lmp:
+/* FLOW is set high and LMP is indicated */
+	lshift3 pdata,pdata
+	or_into 0x07,pdata
+	store 1,mem_lmo_header_length
+	arg 17,loopcnt
+	arg mem_lmo_payload,contw
+	call clear_mem
+	arg mem_lmo_payload,contw
+	rtn
+
+send_lmpext:
+	and pdata,0x7f,rega
+	jam LMP_ESCAPE,mem_lmp_to_send
+	deposit queue
+	call msg_send_lmp
+	deposit rega
+	istore 1,contw
+	rtn
+
+send_lmp_follow:
+	fetch 1,mem_lmp_to_send
+	lshift pdata,pdata
+	fetcht 1,mem_state_map
+	isolate1 smap_lmptid,temp
+	setflag true,0,pdata
+	branch send_lmp_exit
+
+
+send_lmp_tid:
+	fetcht 1,mem_state_map
+	and_into 1,temp
+	branch send_lmp_end
+
+send_lmp_reply:
+	force 0,temp
+	branch send_lmp_end
+	
+send_lmp_request:
+	force 1,temp
+send_lmp_end:
+	fetch 1,mem_lmp_to_send
+	lshift pdata,pdata
+	setflag master,0,pdata
+	ixor temp,pdata
+send_lmp_exit:
+	store 1,mem_lmo_header_opcode
+	jam 0,mem_lmp_to_send
+	call lmo_fifo_process_lmo0empty
+	enable user
+	rtn
+
+//blank : not full 
+lmo_fifo_check:
+	fetch 1,mem_lmo_opcode2
+	rtn blank
+	call lmo_fifo_process
+	fetch 1,mem_lmo_opcode2
+	rtn
+
+lmo_fifo_process:
+	bpatchx patch30_6,mem_patch30
+	fetch 1,mem_lmp_to_send
+	branch lmo_fifo_process_lmo0empty,blank
+	fetch 1,mem_lmo_opcode1
+	nrtn blank
+	branch lmo_fifo_process_lmo2to1
+lmo_fifo_process_lmo0empty:
+	fetch 1,mem_lmo_opcode1
+	branch lmo_fifo_process_lmo1_empty,blank
+	fetch 3,mem_lmo_opcode1
+	store 3,mem_lmp_to_send//1=>0
+	fetcht 1,mem_lmo_tid1
+	fetch 1,mem_state_map
+	set0 smap_lmptid,pdata
+	ior temp,pdata
+	store 1,mem_state_map
+	jam 0,mem_lmo_opcode1
+lmo_fifo_process_lmo2to1:
+	fetch 1,mem_lmo_opcode2
+	rtn blank
+	fetch 4,mem_lmo_opcode2
+	store 4,mem_lmo_opcode1//2=>1
+	jam 0,mem_lmo_opcode2
+	rtn
+lmo_fifo_process_lmo1_empty:
+	fetch 1,mem_lmo_opcode2
+	rtn blank
+	fetch 3,mem_lmo_opcode2
+	store 3,mem_lmp_to_send//2=>0	
+	fetcht 1,mem_lmo_tid2
+	fetch 1,mem_state_map
+	set0 smap_lmptid,pdata
+	ior temp,pdata
+	store 1,mem_state_map
+	jam 0,mem_lmo_opcode2
+	rtn
+	
+//input:temp
+special_tid_store:
+	bpatchx patch30_7,mem_patch30
+	fetch 1,mem_state_map
+	copy pdata,regc
+	ifetch 1,temp
+	call pop_tid_follow
+	call send_lmp_follow
+	copy regc,pdata
+	store 1,mem_state_map
+	rtn
+	
+tid_reply:
+	fetcht 1,mem_state_map
+	set0 smap_lmptidinit,temp
+	storet 1,mem_state_map
+	rtn
+	
+tid_initiate:
+	fetcht 1,mem_state_map
+	set1 smap_lmptidinit,temp
+	storet 1,mem_state_map
+	rtn
+	
+	/* true if transaction from remote */
+tid_check:
+	nsetflag master,smap_lmptid,pdata //it is ok
+	fetcht 1,mem_state_map
+	ixor temp,pdata
+	isolate1 smap_lmptid,pdata
+	rtn	
+
+	/* set to remote */
+tid_set_reply:
+	fetch 1,mem_state_map
+	setflag master,smap_lmptid,pdata //it is ok
+	store 1,mem_state_map
+	rtn
+
+	/*rtn true when we lead lmp*/
+check_localsm:
+	fetch 1,mem_sp_localsm
+	compare 	LOCAL_STATEMACHINE,pdata,0x7f
+	rtn
+setlocalsm_master:
+	fetch 1,mem_sp_localsm
+	set1 7,pdata
+	store 1,mem_sp_localsm
+	rtn
+setlocalsm_slave:
+	fetch 1,mem_sp_localsm
+	set0 7,pdata
+	store 1,mem_sp_localsm
+	rtn
+check_localsm_master:
+	fetch 1,mem_sp_localsm
+	isolate1 7,pdata
+	store 1,mem_sp_localsm
+	rtn
+	
+generate_random_number:
+	/* generating a 16 byte random number,storing in ape_random_number */
+	arg mem_random_number,contw
+generate_random:
+	force 16,loopcnt
+generate_random_another:
+generate_random_loop:
+	random pdata
+	istore 1,contw
+	loop generate_random_another
+	rtn
+
+generate_linkkey:
+	call function_e21
+	arg mem_link_key,rega
+	arg mem_input_store,regb
+	ifetch 8,rega					/* check if already got comb key */
+	fetcht 1,mem_state
+	nsetflag blank,state_combkey,temp
+	storet 1,mem_state
+	copy rega,contw
+	call  xor16
+	branch generate_linkkey_continue
+
+/*********************************/
+/*********lmp send*************/
+/********************************/
+
+process_conn_sm:
+	//nrtn master
+	bpatchx patch31_0,mem_patch31
+
+	call lmo_fifo_check
+	nrtn blank
+process_conn_sm_continue:
+	fetch 1,mem_conn_sm
+	rtn blank
+	/* state machine begins in standby */
+	//beq CONN_SM_STANDBY, host_create_conn_begin
+	//beq CONN_SM_WAIT_PAGE, host_create_conn_wait_page
+	beq CONN_SM_SEND_CONN_REQ, host_create_conn_send_conn_req
+	beq CONN_SM_WAIT_CONN_ACCEPT, host_create_conn_wait_accept
+	beq CONN_SM_SEND_FEATURES, host_create_conn_send_features
+	beq CONN_SM_WAIT_FEATURES_RES, host_create_conn_waiting
+	beq CONN_SM_SEND_SWITCH,host_create_conn_send_switch
+	beq CONN_SM_AUTH_PAIR, host_create_conn_auth_pair
+	beq CONN_SM_AUTH_PAIR_WAIT, host_create_conn_auth_pair_wait
+	beq CONN_SM_ENCRYPT, host_create_conn_encrypt
+	beq CONN_SM_ENCRYPT_WAIT, host_create_conn_encrypt_wait
+	beq CONN_SM_ENCRYPT_WAIT_CLEAR, host_create_conn_encrypt_wait_clear
+	beq CONN_SM_SEND_SETUP_COMPLETE, host_create_conn_send_setup_complete
+	beq CONN_SM_WAIT_SETUP_COMPLETE, host_create_conn_wait_setup_complete
+	beq CONN_SM_DETACH_DELAY,host_create_conn_master_detach
+	beq CONN_SM_SEND_VERSION, host_create_conn_send_version
+	beq CONN_SM_WAIT_VERSION, host_create_conn_waiting
+	beq CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION, host_creat_conn_wait_switch
+	beq CONN_SM_SEND_FEATURES_EXT,host_creat_conn_send_feat_ext
+	beq CONN_SM_WAIT_FEATURES_EXT,host_create_conn_waiting
+	beq CONN_SM_PAIRING,host_create_conn_pairing
+	beq CONN_SM_PAIRING_WAIT,host_create_conn_pairing_wait
+	beq CONN_SM_AUTH,host_create_conn_auth
+	beq CONN_SM_AUTH_WAIT,host_create_conn_auth_wait
+	beq CONN_SM_DONE,host_create_conn_done
+	beq CONN_SM_WAIT_DONE,host_create_conn_done_wait
+	jam CONN_SM_STANDBY,mem_conn_sm
+	/* sending error message to host */
+	rtn
+host_create_conn_done:
+	fetch 1,mem_lmp_conn_state		
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	rtnbit0 SENT_SETUP_COMPLETE
+	jam CONN_SM_STANDBY,mem_conn_sm
+	call host_conn_judge_encrypt
+	branch scheduler_start_upper_sm
+	
+host_conn_judge_encrypt:
+	fetch 1,mem_connection_options
+	rtnbit0 CONNECTION_ENCRYPT
+	jam CONN_SM_ENCRYPT_WAIT,mem_conn_sm
+	rtn
+
+host_create_conn_done_wait:
+	arg enpt_delay_timer,queue
+	call timer_check
+	nrtn blank
+	jam CONN_SM_DONE,mem_conn_sm
+	rtn
+	
+host_create_conn_auth:
+	fetch 1,mem_connection_options
+	set0 CONNECTION_AUTH,pdata
+	store 1,mem_connection_options
+	jam CONN_SM_AUTH_WAIT,mem_conn_sm
+	jam LMP_AU_RAND,mem_lmo_opcode2
+	rtn 
+host_create_conn_auth_wait:
+	rtn
+host_create_conn_pairing:
+	fetch 1,mem_pincode_state
+	rtnne pincode_state_pincode_ready //wait for pincode
+	call host_auth
+	jam CONN_SM_PAIRING_WAIT,mem_conn_sm
+	rtn
+
+host_create_conn_pairing_wait:
+	rtn
+host_creat_conn_send_feat_ext:
+	jam CONN_SM_WAIT_FEATURES_EXT,mem_conn_sm
+	jam LMP_EXT_FEATURES_REQ,mem_lmo_opcode2
+	rtn
+host_create_conn_send_version:
+	jam CONN_SM_WAIT_VERSION,mem_conn_sm
+	jam LMP_VERSION_REQ,mem_lmo_opcode2
+	rtn 
+	
+host_creat_conn_wait_switch:
+	fetch 1,mem_switch_flag
+	rtneq SWITCH_FLAG_INIT
+	beq SWITCH_FLAG_ACCEPT,host_create_conn_switch_accept
+	arg switch_wait_timer,queue
+	call timer_check
+	nrtn blank
+	jam SWITCH_FLAG_INIT,mem_switch_flag
+	branch host_create_conn_switch
+host_create_conn_switch_accept:
+	rtn master
+	branch host_create_conn_auth_pair
+
+host_create_conn_send_features:
+	jam CONN_SM_WAIT_FEATURES_RES,mem_conn_sm
+	jam LMP_FEATURES_REQ,mem_lmo_opcode2
+	rtn 
+host_create_conn_send_switch:
+	jam LMP_SWITCH_REQ,mem_lmo_opcode2
+	set1 mark_switch_initiated,mark
+	jam CONN_SM_WAIT_CONN_ACCEPT,mem_conn_sm
+	setarg 0x1ff
+	store 2, mem_soft_timer
+	rtn
+host_create_conn_send_conn_req:
+	jam CONN_SM_WAIT_CONN_ACCEPT,mem_conn_sm
+	jam 0xff,mem_soft_timer
+	set0 mark_reconn_recieve_switch,mark
+	jam LMP_HOST_CONNECTION_REQ,mem_lmo_opcode2
+	branch init_lmp_reinit
+host_create_conn_wait_accept:
+	rtnmark1 mark_reconn_recieve_switch
+	fetch 2,mem_soft_timer
+	sub pdata,1,pdata
+	branch host_create_conn_resend,zero
+	store 2, mem_soft_timer
+	rtn
+host_create_conn_resend:
+	jam CONN_SM_SEND_SWITCH,mem_conn_sm
+	rtn
+host_create_conn_waiting:
+	/* we will exit waiting for connection request accepted, features res, or other commands to finish */
+	rtn 
+
+host_create_conn_switch:
+	fetch 1,mem_lmp_conn_state
+	rtnbit0 SENT_SETUP_COMPLETE
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	fetch 1,mem_connection_options
+	set0 CONNECTION_SWITCH,pdata
+	store 1,mem_connection_options
+	jam LMP_SWITCH_REQ,mem_lmo_opcode2
+	jam CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION,mem_conn_sm
+	rtn 
+
+host_create_conn_send_setup_complete:
+	jam CONN_SM_WAIT_SETUP_COMPLETE,mem_conn_sm	
+	jam LMP_SETUP_COMPLETE,mem_lmo_opcode2
+	rtn 
+
+host_create_conn_wait_setup_complete:
+	fetch 1,mem_lmp_conn_state
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	jam CONN_SM_STANDBY,mem_conn_sm	
+
+	rtn
+host_create_conn_wait_setup_complete_rtn:	
+	jam CONN_SM_AUTH_PAIR ,mem_conn_sm
+	rtn
+
+host_create_conn_master_detach:
+	fetch 1, mem_soft_timer
+	increase -1,pdata
+	branch host_create_conn_send_detach,blank//detach
+	store 1, mem_soft_timer
+	rtn 
+host_create_conn_send_detach:
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam LOCAL_HOST,mem_disconn_reason_send
+	jam 0,mem_conn_sm
+	rtn
+host_create_conn_auth_pair:
+	/* checking whether or not to do m/s switch */
+	fetch 1,mem_connection_options
+	bbit1 CONNECTION_SWITCH,host_create_conn_switch
+	bbit1 CONNECTION_AUTH,host_create_conn_auth_pair_true
+host_create_conn_sm_done:
+	jam CONN_SM_DONE,mem_conn_sm
+	rtn
+host_create_conn_auth_pair_true:
+	fetch 1,mem_link_key_exists
+	branch host_create_conn_auth_pair_nokey,blank
+	fetch 1,mem_lmp_conn_state
+	rtnbit0 SENT_SETUP_COMPLETE
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	fetch 4,mem_aurand_send_delay_time
+	arg 100,temp
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nrtn positive
+	branch host_create_conn_auth
+
+
+
+host_create_conn_auth_pair_nokey:
+	jam CONN_SM_PAIRING,mem_conn_sm
+	jam 4,mem_pin_length
+	setarg 0x3030
+	store 2,mem_pin
+	istore 2,contw
+	jam pincode_state_pincode_ready,mem_pincode_state
+	branch host_create_conn_pairing
+
+host_create_conn_auth_pair_wait:
+	rtn
+host_create_conn_encrypt:
+	fetch 1,mem_connection_options
+	bbit1 CONNECTION_ENCRYPT,host_create_conn_encrypt_start
+	jam CONN_SM_DONE,mem_conn_sm
+	rtn 
+
+host_create_conn_encrypt_start:
+	fetch 1,mem_connection_options
+	set0 CONNECTION_ENCRYPT,pdata
+	store 1,mem_connection_options
+	jam LMP_ENCRYPTION_MODE_REQ,mem_lmo_opcode2  
+	rtn
+
+host_create_conn_encrypt_wait:
+	fetch 1, mem_wait_encryption
+	rtn blank
+	jam CONN_SM_STANDBY,mem_conn_sm
+	branch host_create_conn_encrypt_start 
+
+host_create_conn_encrypt_wait_clear:
+	jam CONN_SM_SEND_SETUP_COMPLETE,mem_conn_sm
+	rtn 
+
+host_auth:
+	fetch 1,mem_op
+	bbit1 op_inrand_req,remote_auth
+	call tid_initiate
+	jam LMP_IN_RAND,mem_lmo_opcode2
+	branch cmd_exit
+remote_auth:
+	fetch 1,mem_op
+	set0 op_inrand_req,pdata
+	store 1,mem_op
+	call lmp_accept_inrand
+	call tid_set_reply
+	branch cmd_exit
+
+pincode_reinit:
+	setarg 4
+	store 1,mem_pin_length
+	setarg 0x3030
+	istore 2,contw
+	istore 2,contw
+	rtn
+	
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/patch.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/patch.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/patch.prog	(working copy)
@@ -0,0 +1,3453 @@
+//define DONGLE
+define MOUSE
+define G24
+//define BLE
+//define CLASSIC_BT
+//define MOUSE_SMOOTHER
+//define ADC_ENABLE
+//define P24G_LOG
+//define RF_DEBUG
+//define HIGH_REPORT
+define MS_ALL_POWER
+define MS_MATRIX
+//define XTAL_16M
+
+//define DEBUGLOG
+//define DEBUGLOG_CALLBACK
+//define DEBUGLOG_EVENT
+//define DEBUGLOG_CMD
+//define DEBUGLOG_MISC
+//define DEBUGLOG_STATUS
+//define DEBUGLOG_PARSE_LMP
+//define DEBUGLOG_SEND_LMP
+//define DEBUGLOG_CONN_SM
+//define DEBUGLOG_UPPER_SM
+
+ifdef PATCH
+	bbit1 8,pf_patch_ext
+	beq patch00_0,p_soft_reset
+	beq patch00_1,p_soft_reset_1
+	beq patch00_2,p_soft_reset_2
+	beq patch10_5,p_shutdown_radio
+	beq patch11_1,p_set_freq_tx
+ifdef XTAL_16M	
+	beq patch11_2,p_initialize_radio_cont
+endif
+ifdef CLASSIC_BT
+	beq patch03_3,p_page_wait_fhs_reply_ok
+	beq patch04_6,p_role_switch_master
+	beq patch09_2,p_prepare_tx
+ 	beq patch0b_1,p_process_dmh
+	beq patch0a_1,p_slave_conn_recv_packet
+	beq patch14_7,p_lpm_dispatch
+	beq patch15_5,p_lpm_set_mult
+	beq patch19_3,app_bt_start_reconnect+3
+	beq patch1d_1,p_mouse_bb_disconnected
+endif	
+	beq patch14_1,p_init_param
+	beq patch16_1,p_lpm_check_wake_lock
+	beq patch16_2,p_g24_dispatch
+	beq patch18_4,p_device_init
+	beq patch19_1,p_app_flag_store
+	beq patch19_2,p_app_initflag_check
+	beq patch1c_3,p_mouse_seting_dpi
+	beq patch1c_6,p_mouse_motion
+	beq patch1d_2,p_mouse_bb_event_discovery_btn
+	beq patch1d_3,p_mouse_start_discovery
+	beq patch1d_4,p_mouse_stop_discovery
+	branch loop
+pf_patch_ext:
+ifdef MS_ALL_POWER
+	beq patch27_7,p_le_enable
+endif
+ifdef BLE
+	beq patch27_1,p_le_slave_match
+	beq patch28_3,p_le_next_adv_channel
+	beq patch29_2,p_le_receive_skip
+	beq patch2a_7,p_le_update_param
+	beq patch2b_1,p_le_update_channel_map
+	beq patch2c_3,p_le_prepare_tx
+	beq patch2c_6,p_le_parse
+	beq patch2c_7,p_le_parse_l2cap
+	beq patch2d_2,p_le_adv_not_match
+	beq patch2e_7,p_le_lpm_setmult
+	beq patch3f_2,p_check_51cmd_once_continue
+endif	
+ifdef CLASSIC_BT
+	beq patch20_5,p_hid_rx_process
+	beq patch30_0,p_parse_lmp_accepted
+	beq patch30_2,p_send_lmp
+	beq patch31_0,p_process_conn_sm
+endif
+	beq patch31_4,p_twspi_reset
+ifdef DEBUGLOG
+	beq patch2f_6,p_parse_lmp_opcode
+	beq patch37_6,p_process_upper_sm_reconn
+	beq patch3e_6,p_ui_ipc_send_event
+	beq patch3e_7,p_ui_ipc_send_cmd
+endif
+	branch loop
+
+ifdef MS_ALL_POWER
+p_le_enable:
+	jam 0x36,rf_adc_goff        /*For BLE, tune AGC_gain_offset, Max added*/
+	jam 0x5f,rf_agc_nsat        //for BLE
+	enable le
+	jam 7,rfen_ulp			/* enable ulp */
+//	call check_ble_disabled
+	fetch 1,mem_250k_freq_enable	//default: 0
+	rtn blank
+	jam 0xb8,rf_iq_gain
+	rtn
+endif
+	
+
+ifdef MOUSE
+p_rssi_signal:
+	copy pdata,rega
+	fetcht 1,mem_rssi_signal_index
+	setarg mem_rssi_signal_buf
+	iadd temp,contw
+	copy rega,pdata
+	istore 1,contw
+	increase 1,temp
+	and_into RSSI_BUF_LEN_SIGNAL,temp
+	storet 1,mem_rssi_signal_index
+	rtn
+
+p_soft_reset:
+	hfetch 1,0x813b
+	store 1,mem_power_on_flag
+	branch soft_reset+1
+
+p_soft_reset_1:
+	arg mem_sp_state,contw
+	arg 12,loopcnt
+	call clear_mem
+ifdef BLE
+	call p_mouse_le_txbuff_load
+endif	
+	call rfcomm_init
+	call init_lmp
+	ncall lpm_disable_exen_output,wake
+	call ui_init+1
+	branch soft_reset+11
+
+p_soft_reset_2:
+	call app_lpm_init,wake
+ifdef SIMPLE_PAIRING
+	call publickey_init
+else
+	call ssp_disable
+ifdef SECURE_CONNECTION
+	call publickey_init
+
+endif
+endif
+	call lpm_recover_clk,wake
+p_sp_cal_loop:
+	call sp_calc_sequence
+	fetch 1,mem_ssp_enable
+	branch main_loop,blank
+	fetch 1,mem_sp_local_key_invalid // simple pairing is not ready
+	branch p_sp_cal_loop,blank
+	branch main_loop
+
+p_init_param:
+	setarg param_le_version
+	store 3,mem_lmp_version
+	setarg param_le_subversion
+	store 2,mem_lmp_version+3
+	branch init_param+12
+
+p_lpm_check_wake_lock:
+	rtnmark1 mark_24g
+	fetch 1,mem_mouse_clear_sensor_data_flag
+	branch disable_blank,blank
+	fetch 1,mem_mouse_le_conn_param_reject
+	beq LE_LPM_DISABLE,disable_blank
+	fetch 2,mem_sdp_remote_cid
+	nbranch disable_blank,blank
+	fetch 1,mem_mouse_wheel_trigger
+	nbranch disable_blank,blank
+	branch enable_blank
+
+
+ifdef G24
+p_g24_dispatch:
+	rtnmark0 mark_24g
+	fetch 1,mem_24g_transmit_by_interrupt
+	beq G24_TX_TIMER_INT_ENABLE,p_g24_transmit_by_interrupt
+p_g24_transmit_process:
+	call p_g24_txdata_prep
+	nbranch p_g24_nodata_transmit,user
+	call p_g24_rf_sta_check
+p_g24_transmit_start:
+	call p_g24_transmit_packet
+	fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call power_ctrl_start
+p_g24_short_sleep:	
+	call p_g24_lpm_wait
+	nrtn user
+	call p_clear_wake
+ifdef HIGH_REPORT
+	setarg G24_4MS_INTERVAL_PARAM
+else
+	setarg 60500
+endif
+p_g24_enter_sleep:	
+	call clk2lpo
+	storet 4,mem_sleep_counter
+  	branch lpm_sleep
+  	
+p_g24_transmit_by_interrupt:
+	call p_g24_timer_check
+	nrtn user
+	call p_g24_interval_calibrate
+ifndef MS_ALL_POWER
+	fetch 1,mem_24g_transmit_by_interrupt_exit_count
+	increase 1,pdata
+	store 1,mem_24g_transmit_by_interrupt_exit_count
+	sub pdata,25,null	//200ms
+	call p_g24_transmit_by_interrupt_exit,zero
+endif	
+	branch p_g24_transmit_process
+p_g24_transmit_by_interrupt_exit:
+	jam G24_TX_TIMER_INT_DISABLE,mem_24g_transmit_by_interrupt
+	jam 0,mem_24g_transmit_by_interrupt_exit_count
+p_g24_interval_min:
+	jam 0,mem_24g_pac_index
+	fetch 1,mem_24g_interval_min
+p_g24_current_interval_store:
+	store 1,mem_24g_interval
+	rtn
+p_g24_interval_max:
+	fetch 1,mem_24g_interval_max
+	branch p_g24_current_interval_store
+p_g24_interval_calibrate:
+	fetch 1,mem_24g_pac_index
+	increase 1,pdata
+	store 1,mem_24g_pac_index
+	beq 4,p_g24_interval_max
+	beq 5,p_g24_interval_min
+	rtn
+p_g24_transmit_by_interrupt_enable:
+	jam G24_TX_TIMER_INT_ENABLE,mem_24g_transmit_by_interrupt
+	jam 0,mem_24g_transmit_by_interrupt_exit_count
+	rtn
+
+p_g24_nodata_transmit:
+	fetch 1,mem_24g_abort_pac
+	call p_g24_send_abort_packet,blank
+p_g24_long_sleep:
+	call p_g24_lpm_wait
+	nrtn user
+	fetch 3,mem_24g_enter_hibernate
+  	branch p_g24_enter_sleep
+	
+p_g24_lpm_wait:
+	enable user
+	call lpo_calibration
+	fetch 3,mem_clks_per_lpo
+	branch disable_user,blank
+	fetch 1,mem_lpm_mode
+	branch disable_user,blank
+	fetch 1,mem_24g_transmit_by_interrupt
+	beq G24_TX_TIMER_INT_ENABLE,disable_user
+	branch p_mouse_setgpio_lpm
+
+p_g24_send_abort_packet:
+	jam 1,mem_24g_abort_pac
+	jam 0,mem_24g_rf_hop_ch
+	call p_g24_transmit_rf_ctrl_clear
+	store 1,mem_24g_txbuf
+	setarg 0
+	store 7,mem_24g_txbuf+1
+	fetch 4,mem_24g_device_addr
+	store 4,mem_24g_txbuf+8
+	jam 12,mem_24g_datalen
+	fetch 1,mem_24g_data_type
+	set1 bit_abort,pdata
+	store 1,mem_24g_data_type
+	call p_g24_txdata_enable_tx
+	branch p_g24_transmit_start
+
+p_g24_set_device_addr:
+	call adc_init_data
+	fetch 4,mem_lap
+	store 4,mem_24g_device_addr
+	rtn
+
+p_g24_transmit_rf_sta_init:
+	jam 1,mem_24g_rf_last_sta
+	jam 0,mem_24g_sync_cnt
+p_g24_transmit_rf_ctrl_clear:	
+	fetch 1,mem_24g_data_type
+	and_into bits_data,pdata
+	store 1,mem_24g_data_type
+	rtn
+	
+p_g24_hop_ch_enable:
+	fetch 1,mem_24g_data_type
+	set1 bit_hop,pdata
+	store 1,mem_24g_data_type
+	//update txpayload
+	store 1,mem_24g_txpayload
+	rtn
+p_g24_hop_ch_disable:
+	fetch 1,mem_24g_data_type
+	set0 bit_hop,pdata
+	store 1,mem_24g_data_type
+	rtn	
+
+p_g24_transmit_hop_pac_fail:
+	call power_ctrl_pac_succ_decrs
+	fetch 1,mem_24g_rf_work_stage
+	beq 1,p_g24_transmit_hop_pac_fail_wo_hop
+	beq 2,p_g24_transmit_hop_pac_fail_hop_stage2
+	rtn
+p_g24_transmit_hop_pac_fail_wo_hop:
+	jam 2,mem_24g_sync_cnt
+p_g24_transmit_hop_pac_fail_stage1:	
+	jam 0,mem_24g_hop_pac_retry
+	jam 0,mem_24g_rf_last_sta
+	branch p_g24_transmit_rf_ctrl_clear
+
+p_g24_transmit_hop_pac_fail_hop_stage2:
+	jam 0,mem_24g_rf_hop_ch
+	branch p_g24_transmit_hop_pac_fail_stage1
+
+	
+p_g24_transmit_pac_fail_hop_stage3:
+	fetch 2,mem_24g_txfail_cnt
+	increase 1,pdata
+	store 2,mem_24g_txfail_cnt
+ifdef MS_ALL_POWER
+	bbit1 6,p_g24_tx_attempt_fail	//1024ms * 8
+else	
+	bbit1 10,p_g24_tx_attempt_fail	//1024ms * 8
+endif
+	fetch 1,mem_24g_rf_hop_ch
+	beq 1,p_g24_rf_hop_fastly
+	jam 1,mem_24g_rf_hop_ch
+p_g24_rf_hop_attemp_again:
+	fetch 1,mem_24g_rf_hop_ch
+	bne 1,p_g24_transmit_rf_ctrl_clear
+p_g24_rf_hop_fastly:
+	fetch 1,mem_24g_hop_fastly_cnt
+	increase 1,pdata
+	store 1,mem_24g_hop_fastly_cnt
+	beq 4,p_g24_rf_hop_fastly_exit
+	call p_g24_ch
+	jam 2,mem_24g_max_retry
+	branch p_g24_transmit_packet
+
+p_g24_rf_hop_fastly_exit:
+	call power_ctrl_pac_succ_decrs
+	jam 0,mem_24g_hop_fastly_cnt
+	branch p_g24_transmit_rf_ctrl_clear
+
+p_g24_transmit_hop_pac_succ_wo_hop:
+	jam 2,mem_24g_sync_cnt
+p_g24_transmit_hop_pac_succ:
+	jam 1,mem_24g_rf_last_sta
+	jam 0,mem_24g_rf_hop_ch
+	branch p_g24_transmit_rf_ctrl_clear
+
+p_g24_transmit_succ_rf_config:
+	fetch 1,mem_24g_rf_work_stage
+	beq 3,p_g24_transmit_hop_pac_succ
+	fetch 1,mem_24g_data_type
+	isolate0 bit_hop,pdata
+	branch p_g24_transmit_rf_sta_init,true
+	fetch 1,mem_24g_rf_work_stage
+	beq 1,p_g24_transmit_hop_pac_succ_wo_hop
+	beq 2,p_g24_transmit_hop_pac_succ
+	rtn
+
+p_g24_rf_sta_check:
+	fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call p_g24_rf_laststa_synccnt_check
+	ncall p_g24_rf_sync_cnt_check,user2
+	rtn
+
+p_g24_rf_laststa_synccnt_check:
+	disable user2
+	fetch 1,mem_24g_rf_last_sta
+	rtnne 1
+	fetch 1,mem_24g_sync_cnt
+	rtnne 0
+	jam 1,mem_24g_rf_work_stage
+	jam 4,mem_24g_max_retry
+	branch enable_user2
+
+p_g24_rf_sync_cnt_check:
+	fetch 1,mem_24g_sync_cnt
+	branch p_g24_rf_hop_attemp,blank
+	increase -1,pdata
+	store 1,mem_24g_sync_cnt
+	jam 2,mem_24g_rf_work_stage
+	jam 4,mem_24g_max_retry
+	branch p_g24_ch
+
+p_g24_rf_hop_attemp:
+	jam 3,mem_24g_rf_work_stage
+	fetch 1,mem_24g_rf_hop_ch
+	nbranch p_g24_rf_hop_attemp_again,blank
+	jam 2,mem_24g_max_retry
+	branch p_g24_ch
+
+p_g24_txdata_prep:
+	fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,p_g24_pairing_sm	
+p_g24_txdata_prep_packeage_data:
+	call p_g24_package_data
+p_g24_txdata_enable_tx:	
+	call p_g24_transmit_prep
+	jam ENSURE_ON_24G,mem_24g_ensure
+	rtn
+
+p_g24_package_data:
+	fetch 2,mem_cb_24g_data
+	call callback_func
+	branch p_g24_accumulate_mouse_data,user
+	fetch 7,mem_24g_txbuf+1	//mouse data
+	rtn blank
+	branch enable_user	// retransmit
+p_g24_accumulate_mouse_data:
+	jam 0,mem_24g_abort_pac
+	add rega,1,pdata
+	store 1,mem_24g_datalen
+	call p_g24_transmit_rf_ctrl_clear
+	store 1,mem_24g_txbuf
+	ifetcht 1,contw
+	ifetch 1,regb
+	ior temp,pdata
+	istore 1,contw	//key
+	increase 1,regb
+	ifetch 4,regb
+	istore 4,contw	//x,y
+	increase 4,regb
+	arg mem_24g_txbuf+6,contw
+	arg 2,loopcnt
+p_g24_accumulation_loop:
+	ifetch 1,regb
+	ifetcht 1,contw	//wheel,twheel
+	iadd temp,pdata
+	istore 1,contw
+	increase 1,regb
+	loop p_g24_accumulation_loop
+	rtn
+
+p_g24_transmit_packet:
+	jam 0,mem_24g_retry
+p_g24_transmit_loop:
+	arg param_rx_setup,timeup
+	until clkn_rt,meet
+	call p_g24_transmit_receive_ack
+	fetch 1,mem_24g_no_ack	//tx noack
+	rtneq no_ack_24g
+	nbranch p_g24_retransmit,sync
+	nbranch p_g24_retransmit,user3
+	call p_g24_txbuf_clear
+	call p_g24_ackpayload_parse
+	call power_ctrl_pac_succ_incrs
+p_g24_transmit_next_packet:
+	fetch 1,mem_24g_pid
+	increase 1,pdata
+	store 1,mem_24g_pid
+	fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,p_g24_paring_mode_start
+	call p_g24_transmit_succ_rf_config
+p_g24_transmit_abandon:
+	setarg 0
+	store 2,mem_24g_txfail_cnt
+	store 1,mem_24g_get_ack_fail
+	store 1,mem_24g_hop_pac_retry
+	jam ENSURE_OFF_24G,mem_24g_ensure
+	rtn
+
+p_g24_txbuf_clear:
+	arg 4,loopcnt
+	arg mem_24g_txbuf,contw
+	branch memset0
+
+p_g24_paring_mode_start:
+	call power_ctrl_pac_succ_cnt_init
+	branch p_g24_paring_mode
+
+p_g24_transmit_receive_ack:
+	disable user3
+	call p_g24_transmit
+	
+ifdef RF_DEBUG
+	call test_gpio_low
+endif
+
+	fetch 1,mem_24g_no_ack
+	beq no_ack_24g,p_g24_transmit_no_ack	//tx no ack
+	force 0,radio_ctrl
+	fetch 4,mem_24g_addr
+	iforce access
+	fetcht 1,mem_last_freq
+	call set_freq_rx
+	call rf_rx_enable
+	call p_g24_receive_rxon
+	call p_g24_end_of_packet,user3
+	rtn
+p_g24_transmit_no_ack:
+	call p_g24_end_of_packet
+	branch p_g24_transmit_next_packet
+
+p_g24_retransmit:
+	fetch 1,mem_24g_get_ack_fail
+	increase 1,pdata
+	store 1,mem_24g_get_ack_fail
+	fetch 1,mem_24g_pairing_sm
+	bne STATE_24G_PAIRING_SUCCESS,p_g24_tx_paring_retry
+	fetcht 1,mem_24g_retry
+	increase 1,temp
+	storet 1,mem_24g_retry
+	fetch 1,mem_24g_max_retry
+	isub temp,pdata
+	nbranch p_g24_transmit_loop,blank
+	fetch 1,mem_24g_rf_work_stage
+	beq 3,p_g24_transmit_pac_fail_hop_stage3
+	fetch 1,mem_24g_hop_pac_retry
+	increase 1,pdata
+	store 1,mem_24g_hop_pac_retry
+	beq 2,p_g24_transmit_hop_pac_fail
+	call p_g24_hop_ch_enable
+	jam 1,mem_24g_max_retry
+	branch p_g24_transmit_packet
+
+p_g24_tx_paring_retry:
+	fetch 1,mem_24g_get_ack_fail
+	rtnne 0xff
+	jam 0,mem_24g_get_ack_fail
+	branch p_g24_stop_g24_mode
+
+p_g24_tx_attempt_fail:
+	setarg 0
+	store 2,mem_24g_txfail_cnt
+p_g24_stop_g24_mode:
+	jam BT_EVT_24G_ATTEMPT_FAIL,mem_fifo_temp
+	branch ui_ipc_send_event
+
+p_g24_ackpayload_parse:
+	call p_g24_read_len_pid_crc
+	fetch 1,mem_24g_rxdata_length	//ack payload length 
+	rtn blank
+	iforce loopcnt
+	arg mem_24g_rxbuf+2,contr
+	arg mem_24g_rxpayload,contw	//ack payload buffer 
+	branch memcpy
+
+p_g24_start_pairing_sm1:
+	set1 mark_24g,mark
+	call p_g24_pair_init
+p_g24_set_pairing_sm_1:
+	jam STATE_24G_PAIRING_1,mem_24g_pairing_sm
+	rtn
+
+p_g24_pair_init:
+	jam TX_POWER_PAIR,mem_tx_power
+	jam 0,mem_24g_pid
+	jam G24_PAIR_CH,mem_24g_ch
+	fetch 4,mem_24g_paring_addr
+	branch p_g24_update_addr_and_synccrc8
+
+p_g24_pairing_sm:
+	fetch 1,mem_24g_ensure
+	beq ENSURE_ON_24G,enable_user
+	fetch 1,mem_24g_pairing_sm
+	beq STATE_24G_PAIRING_1,p_g24_pairing_sm_1
+	beq STATE_24G_PAIRING_2,p_g24_pairing_sm_2
+	beq STATE_24G_PAIRING_3,p_g24_pairing_sm_3
+	branch assert
+
+p_g24_pairing_sm_1:
+	jam STATE_24G_PAIRING_1_WAITING_ACK,mem_24g_pairing_sm
+	jam 0xaa,mem_24g_common_temp
+	branch p_g24_pairing_sm_common
+p_g24_pairing_sm_2:
+	jam STATE_24G_PAIRING_2_WAITING_ACK,mem_24g_pairing_sm
+	jam 0x55,mem_24g_common_temp
+	branch p_g24_pairing_sm_common
+p_g24_pairing_sm_3:
+	jam STATE_24G_PAIRING_3_WAITING_ACK,mem_24g_pairing_sm
+	jam 0x22,mem_24g_common_temp
+p_g24_pairing_sm_common:
+	fetch 1,mem_24g_data_type
+	and_into bits_data,pdata
+	store 1,mem_24g_common_temp+1
+	fetch 4,mem_24g_device_addr
+	store 4,mem_24g_common_temp+2
+p_g24_put_pairing_data_in_buff:
+	jam 0,mem_24g_common_temp+6
+	arg mem_24g_common_temp,rega
+	arg 7,temp
+	call p_g24_put_data_in_buff
+	call p_g24_txdata_enable_tx
+	branch enable_user
+
+p_g24_paring_mode:
+	fetch 1,mem_24g_pairing_sm
+	rtneq STATE_24G_PAIRING_SUCCESS
+	beq STATE_24G_PAIRING_1_WAITING_ACK,p_g24_pairing_sm_1_waiting_ack
+	beq STATE_24G_PAIRING_2_WAITING_ACK,p_g24_pairing_sm_2_waiting_ack
+	beq STATE_24G_PAIRING_3_WAITING_ACK,p_g24_pairing_sm_3_waiting_ack
+	rtn
+
+
+p_g24_pairing_sm_1_waiting_ack:
+	jam STATE_24G_PAIRING_2,mem_24g_pairing_sm
+	branch p_g24_transmit_abandon
+p_g24_pairing_sm_2_waiting_ack:
+	jam STATE_24G_PAIRING_3,mem_24g_pairing_sm
+	branch p_g24_transmit_abandon
+p_g24_pairing_sm_3_waiting_ack:
+	jam STATE_24G_PAIRING_SUCCESS,mem_24g_pairing_sm
+	jam BT_EVT_24G_PAIRING_COMPLETE,mem_fifo_temp
+	call ui_ipc_send_event	
+	fetch 4,mem_24g_rxpayload+2
+	call p_g24_update_addr_and_synccrc8
+	branch p_g24_transmit_abandon
+
+p_g24_start_24g_mode:
+	set0 mark_24g,mark
+	call p_g24_ch_syncword_crc8_init
+	fetch 1,mem_24g_pairing_sm
+	rtnne STATE_24G_PAIRING_SUCCESS
+	call p_g24_tx_attemp_data_prep
+p_g24_tx_attemp_dongle:
+	setarg 0
+	store 2,mem_24g_check_dongle_times
+p_g24_tx_attemp_dongle_loop:
+	call lpo_calibration
+	nop 2000
+	fetch 1,mem_24g_check_dongle_times
+	beq 0xff,p_g24_stop_g24_mode
+	call p_g24_transmit_receive_ack
+	nbranch p_g24_attemp_txdata_retry,sync
+	nbranch p_g24_attemp_txdata_retry,user3
+p_g24_tx_attemp_dongle_succ:
+	set1 mark_24g,mark
+	setarg 0
+	store 2,mem_24g_check_dongle_times
+	jam BT_EVT_24G_ATTEMPT_SUCCESS,mem_fifo_temp
+	call ui_ipc_send_event
+	call p_g24_txbuf_clear
+	branch p_g24_transmit_by_interrupt_enable
+
+p_g24_tx_attemp_data_prep:
+	jam 0xff,mem_24g_common_temp
+	fetch 1,mem_24g_data_type
+	store 1,mem_24g_common_temp+1
+	fetch 4,mem_24g_device_addr
+	store 4,mem_24g_common_temp+2
+	arg 6,temp
+	arg mem_24g_common_temp,rega
+	call p_g24_put_data_in_buff
+	branch p_g24_transmit_prep
+	
+p_g24_attemp_txdata_retry:
+	fetch 2,mem_24g_check_dongle_times
+	increase 1,pdata
+	store 2,mem_24g_check_dongle_times
+	call p_g24_ch
+	branch p_g24_tx_attemp_dongle_loop
+
+p_g24_auto_pair_start:
+	set0 mark_24g,mark
+	call p_g24_auto_pair_all_powerful
+	call p_g24_tx_attemp_data_prep
+p_g24_auto_pair_restart:
+	jam 0,mem_24g_check_dongle_times
+p_g24_auto_pair_start_loop:
+	call lpo_calibration
+	nop 2000
+	fetch 1,mem_24g_check_dongle_times
+	beq 0xff,p_g24_stop_g24_mode
+	call p_g24_transmit_receive_ack
+	nbranch p_g24_auto_pair_retry,sync
+	nbranch p_g24_auto_pair_retry,user3
+	call p_g24_ackpayload_parse
+ifndef MS_ALL_POWER	
+	call p_mouse_tx_power_init
+endif
+	fetch 4,mem_24g_addr
+	fetcht 4,mem_24g_paring_addr
+	isub temp,null
+	branch p_g24_start_pairing_sm1,zero
+	branch p_g24_tx_attemp_dongle_succ
+
+p_g24_auto_pair_retry:
+	fetch 1,mem_24g_check_dongle_times
+	increase 1,pdata
+	store 1,mem_24g_check_dongle_times
+	fetch 1,mem_24g_auto_paring_switch
+	increase 1,pdata
+	and_into 1,pdata
+	store 1,mem_24g_auto_paring_switch
+	beq 0,p_g24_auto_pair_device_attemp
+	beq 1,p_g24_auto_pair_pair_attemp
+	rtn
+	
+p_g24_auto_pair_all_powerful:
+	jam TX_POWER_PAIR,mem_tx_power
+ifdef MS_ALL_POWER
+	call p_mouse_read_24g_addr
+else	
+	setarg 0x0f0f
+	store 2,mem_24g_addr
+	istore 2,contw
+endif
+p_g24_ch_syncword_crc8_init:	
+	call p_g24_syncword_crc8
+	branch p_g24_ch
+
+p_g24_auto_pair_device_attemp:
+	call p_g24_auto_pair_all_powerful
+	branch p_g24_auto_pair_start_loop
+
+p_g24_auto_pair_pair_attemp:
+	call p_g24_pair_init
+	branch p_g24_auto_pair_start_loop
+
+p_g24_check_51cmd_stop_24g:
+	set0 mark_24g,mark
+	call le_disable
+p_mouse_disable_g24_pairing_flag:
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	branch mouse_disable_function_flag
+
+p_g24_put_data_in_buff:
+	storet 1,mem_24g_datalen
+	copy temp,loopcnt
+	arg mem_24g_txbuf,contw
+	copy rega,contr
+	branch memcpy
+
+p_g24_read_len_pid_crc:
+//read control
+	fetch 1,mem_24g_rxbuf+1
+	rshift3 pdata,pdata
+	store 1,mem_24g_rxdata_length
+//get crc
+	increase 1,pdata
+	arg mem_24g_rxbuf+1,contr
+	iadd contr,contr
+	ifetch 3,contr
+	store 3,mem_24g_sta_crc
+//read pid
+	fetch 1,mem_24g_rxbuf+1
+	rshift pdata,pdata
+	and pdata,0x03,pdata
+	store 1,mem_24g_sta_pid
+	rtn
+
+p_g24_update_addr_and_synccrc8:	
+	store 4,mem_24g_addr
+//output: 1BYTE crc8
+p_g24_syncword_crc8:
+	arg 0,rega
+	arg 4,loopcnt
+	arg mem_24g_addr,contr
+p_g24_syncword_crc8_loop:
+	ifetch 1,contr
+	iadd rega,rega
+	loop p_g24_syncword_crc8_loop
+	copy rega,pdata
+	store 2,mem_24g_syncword
+	fetch 1,mem_24g_syncword
+	fetcht 1,mem_24g_syncword+1
+	iadd temp,pdata
+	store 1,mem_24g_syncword_crc8
+	rtn
+
+p_g24_transmit_prep:
+ifdef P24G_LOG
+	fetch 1,mem_24g_paccnt
+	increase 1,pdata
+	store 1,mem_24g_paccnt
+endif
+
+// total length
+	fetch 1,mem_24g_datalen
+	increase 2,pdata
+	store 1,mem_24g_txlen
+// data type
+	fetch 1,mem_24g_data_type
+	store 1,mem_24g_txpayload
+//prepare 5bit payload length, 2bit PID, 1bit NO_ACK
+	fetch 1,mem_24g_datalen
+	lshift3 pdata,pdata
+	fetcht 1,mem_24g_pid
+	and temp,0x03,temp
+	lshift temp,temp
+	ior temp,pdata
+	fetcht 1,mem_24g_no_ack
+	iadd temp,pdata
+	istore 1,contw
+//prepare payload data
+	fetch 1,mem_24g_datalen
+	iforce loopcnt
+	arg mem_24g_txbuf,contr
+	branch memcpy
+
+p_g24_ch:
+	fetcht 1,mem_24g_current_ch_number
+	call p_g24_ch_map_size
+	storet 1,mem_24g_current_ch_number
+	rtn
+
+p_g24_ch_map_size:
+	call p_g24_ch_calc
+	increase 1,temp
+	and_into 3,temp //map size =4
+	rtn
+	
+p_g24_ch_calc:
+	fetch 1,mem_24g_addr	
+	and_into 0x03,pdata
+	mul32 pdata,4,rega			//24addr low bit0 bit1 ,00-map1,01-map2,10-map3,11-map4
+	setarg mem_24g_ch_map1
+	iadd rega,pdata
+	iadd temp,contr
+	ifetch 1,contr
+	store 1,mem_24g_ch
+	rtn
+
+p_g24_prep:
+	disable enable_crc
+	disable enable_white
+	setarg 0x555555
+	iforce crc24_init
+	fetch 1,mem_24g_ch
+	reverse pdata,temp
+	set1 1,temp
+	rshift temp,white_init
+	rtn
+
+p_g24_receive_packet:
+	call le_enable
+	fetch 4,mem_24g_addr
+	iforce access
+	call set_sync_on
+	fetcht 1,mem_24g_ch
+	call set_freq_rx
+	setarg param_pll_setup
+	call sleep
+	call rf_rx_enable
+p_g24_receive_rxon:
+
+ifdef RF_DEBUG
+	call test_h_l_h
+endif
+
+	call p_g24_prep
+	disable user3
+	enable decode_fec0
+	enable is_rx
+	disable is_tx
+	enable swfine
+	fetch 2,mem_24g_rx_window
+	iforce stop_watch
+	correlate null,timeout
+	nbranch p_g24_sync_timeout,sync
+
+ifdef RF_DEBUG
+	call test_gpio_low
+	call test_gpio_high
+endif
+
+	disable decode_fec0
+	enable decode_fec1
+	enable enable_white
+	enable enable_crc
+	call p_g24_receive_byte
+	store 1,mem_24g_get_syncword_crc8
+	fetcht 1,mem_24g_syncword_crc8
+	isub temp,null
+	nbranch p_g24_end_of_packet,zero
+	call p_g24_receive_byte
+	store 1,mem_24g_rxbuf	//device id
+	fetch 1,mem_24g_mode
+	sub pdata,rx_24g,null
+	branch p_g24_receive_skip,zero
+	fetch 1,mem_24g_rxbuf
+	fetcht 1,mem_24g_data_type
+	icompare bits_data,temp
+	nbranch p_g24_end_of_packet,true
+p_g24_receive_skip:
+	call p_g24_receive_byte
+	istore 1,contw
+	rshift3 pdata,pdata
+	and pdata,0x1f,loopcnt	//max payload: 32bytes
+	branch p_g24rx_nopayload,zero
+p_g24rx_loop:
+	call p_g24_receive_byte
+	istore 1,contw
+	loop p_g24rx_loop
+p_g24rx_nopayload:
+ifdef MOUSE
+	//receive rssi hex
+	copy contw,rega
+	call p_g24_receive_byte
+	store 1,mem_rssi_hex_received
+	copy rega,contw
+endif
+	parse demod,bucket,24
+	enable swfine
+	arg param_sifs,stop_watch	
+	rshift32 pdata,pdata
+	rshift16 pdata,pdata
+	istore 3,contw
+	disable decode_fec1
+ifdef DONGLE
+	call save_rssi
+endif	
+	branch p_g24_end_of_packet,crc_failed
+
+ifdef RF_DEBUG
+	call test_gpio_low
+	call test_gpio_high
+endif
+
+	enable user3
+	fetch 1,mem_last_freq
+	add pdata,0,rega
+	call rf_write_freq
+	disable decode_fec0
+	call set_sync_on
+ifdef DONGLE
+	rtn
+endif
+ifdef MOUSE
+	fetch 1,mem_rssi_hex_received
+	call p_rssi_signal
+endif
+	rtn
+
+p_g24_receive_byte:
+	parse demod,bucket,8
+	rshift3 pwindow,pdata
+	rtn
+	
+p_g24_end_of_packet:
+	disable encode_fec1
+	disable decode_fec1
+	call end_of_packet
+ifdef RF_DEBUG
+	call test_gpio_low
+endif
+	rtn
+
+p_g24_sync_timeout:
+ifdef DONGLE
+	call p_rssi_noise
+endif
+	branch p_g24_end_of_packet
+
+p_g24_set_freq_tx:
+	call set_sync_on
+	fetcht 1,mem_24g_ch
+	branch set_freq_tx
+
+p_g24_transmit:
+	call le_enable
+	fetch 4,mem_24g_addr
+	iforce access
+	call p_g24_prep
+	call p_g24_set_freq_tx
+	set1 TXGFSK,radio_ctrl
+	enable encode_fec0
+	enable is_tx
+	disable is_rx
+
+ifdef RF_DEBUG
+	call test_gpio_high
+endif
+	
+	rshift16 access,pdata
+	rshift8 pdata,pdata
+	rshift4 pdata,pdata
+	inject mod,40
+	disable encode_fec0
+	enable encode_fec1
+	enable enable_white
+	enable enable_crc
+	fetch 1,mem_24g_syncword_crc8
+	inject mod,8
+	fetch 1,mem_24g_txlen
+	iforce loopcnt
+	arg mem_24g_txpayload,contr
+p_g24tr_loop:
+	ifetch 1,contr
+	inject mod,8
+	loop p_g24tr_loop
+ifdef DONGLE
+	fetch 1,mem_rssi_hex
+	inject mod,8
+endif
+
+ifdef P24G_LOG	
+	fetch 1,mem_tx_power
+	inject mod,8
+	fetch 1,mem_rssi_avg_received
+	inject mod,8
+	fetch 1,mem_24g_paccnt
+	inject mod,8
+endif
+
+	enable enable_parity
+	inject mod,24	//crc
+	disable enable_parity
+	until null,tx_clear
+	nop 100
+	disable encode_fec0
+	disable encode_fec1
+	rtn
+
+p_g24_timer_check:
+	call disable_user
+	fetcht 4,mem_24g_tx_btclk
+	copy clkn_bt,pdata
+	isub temp,null
+	ncall g24_timer_timeout,positive
+	copy pdata,regb
+	fetch 4,mem_24g_tx_btclk
+	fetcht 1,mem_24g_interval
+	iadd temp,temp
+	copy regb,pdata
+	isub temp,null
+	nrtn positive
+	set0 28,pdata
+	store 4,mem_24g_tx_btclk
+	branch enable_user
+
+p_rssi_noise:
+	call save_rssi
+	rtn blank
+	fetcht 1,mem_rssi_noise_index
+	arg mem_rssi_noise_buffer,rega
+	call p_rssi_store
+	storet 1,mem_rssi_noise_index
+	rtn
+	
+p_rssi_store:
+	copy rega,pdata
+	iadd temp,contw
+	fetch 1,mem_rssi
+	istore 1,contw
+	increase 1,temp
+ifdef DONGLE
+	and_into RSSI_BUF_LEN_NOISE,temp
+endif
+ifdef MOUSE
+	and_into RSSI_BUF_LEN_SIGNAL,temp
+endif
+	rtn
+p_rssi_average:
+	arg 0,temp
+ifdef DONGLE
+	arg RSSI_BUF_LEN_NOISE+1,loopcnt
+endif
+ifdef MOUSE
+	arg RSSI_BUF_LEN_SIGNAL+1,loopcnt
+endif
+	copy rega,contr
+ifdef DONGLE
+	branch rssi_average_loop
+endif
+ifdef MOUSE
+p_rssi_average_loop:
+	ifetch 1,contr
+	iadd temp,temp
+	loop p_rssi_average_loop
+	rshift3 temp,pdata
+	copy pdata,temp
+	rtnmark0 mark_24g
+	//2BCD
+	div pdata,10
+	call wait_div_end
+	quotient pdata
+	lshift4 pdata,pdata
+	remainder temp
+	ior temp,temp
+	rtn
+endif
+	rtn
+
+endif
+
+p_mouse_before_lpm:
+	rtnmark1 mark_24g
+ifdef BLE	
+	call p_mouse_le_txbuff_save
+endif	
+	call p_mouse_setgpio_lpm
+	fetch 1,mem_context
+	bbit0 state_inconn,p_clear_wake
+	fetch 1,mem_lpm_current_mult
+	nrtn blank
+p_clear_wake:
+	setarg 0
+	store 8,mem_gpio_wakeup_low
+	rtn
+
+p_mouse_setgpio_lpm:
+	call p_mouse_set_sdio_high
+	call p_clear_wake
+p_mouse_setgpio_lpm_before:
+	call mouse_lpm_before_common
+	hfetch 4,core_gpio_oe0
+	hfetcht 4,core_gpio_pu0
+	ior temp,temp
+	invert temp,temp
+	hstoret 4,core_gpio_pd0
+	rtn
+
+p_mouse_set_sdio_high:
+	fetch 1,mem_mouse_init_sensor_reset_flag
+	rtn blank
+	branch p_mouse_seting_dpi_diff// make sdio high to make 100uA less	
+
+p_device_init:
+ifdef DEBUGLOG
+	call debuglog_init
+ifdef DEBUGLOG_STATUS
+	setarg DEBUGLOG_DTYPE_STATUS
+	store 2,mem_debuglog_datatype
+	setarg STATUS_LPM_WAKE
+	store 2,mem_debuglog_dataval
+	call debuglog_push	
+endif
+endif
+	call app_lpm_mult_enable
+	branch p_device_init_common,wake
+ifdef DEBUGLOG
+ifdef DEBUGLOG_STATUS
+	setarg DEBUGLOG_DTYPE_STATUS
+	store 2,mem_debuglog_datatype
+	setarg STATUS_CODE_WAKE
+	store 2,mem_debuglog_dataval
+	call debuglog_push
+endif
+endif
+ifdef BLE
+	call p_mouse_data_init
+endif
+	fetch 1,mem_tx_power
+	store 1,mem_tx_power_temp
+	call power_ctrl_pac_succ_cnt_init
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_combination_ui_button_count	//combination key timer init
+	call mouse_bt_discovery_button_down_disable
+p_device_init_common:
+	call p_mouse_init
+	branch enable_authrom
+
+p_mouse_tx_power_init:
+	fetch 1,mem_tx_power_temp
+	store 1,mem_tx_power
+	rtn
+
+p_mouse_init:
+	ncall p_mouse_setting_config,wake
+	call p_mouse_spi_init
+	rtn wake
+ifdef RF_DEBUG
+	call test_gpio_init
+endif
+ifdef MOUSE_SMOOTHER	
+	call p_drawing_optima_init
+endif
+	call p_mouse_cb_fuction
+ifdef G24
+	fetch 1,mem_power_on_flag
+	bbit1 2,p_mouse_skip_24g_pair
+	call mouse_check_key_gpio
+	beq MOUSE_LM_BUTTON,p_mouse_24g_pairing_button
+p_mouse_skip_24g_pair:	
+endif	
+	branch p_mouse_wakeup_from_power
+
+p_mouse_check_reconn_target:
+	call p_mouse_tx_power_init
+	fetch 1,mem_xrecord_mode
+ifdef CLASSIC_BT
+	beq REC_3_MODE,p_mouse3_0_check_reconn_target
+endif
+ifdef BLE	
+	beq REC_4_MODE,p_mouse4_0_check_reconn_target
+endif
+	rtn
+
+ifdef CLASSIC_BT
+p_mouse3_0_check_reconn_target:
+	fetch 6,mem_hci_plap
+	branch app_bt_start_discovery_short,blank
+	branch mouse3_0_check_reconn_target+3
+endif	
+
+ifdef BLE
+p_mouse4_0_check_reconn_target:
+	jam 1,mem_mouse_le_reconnect_flag
+	fetch 2,mem_mouse_direct_timeout
+	store 2,mem_mouse_direct_timer
+	call app_lpm_mult_disable
+	call p_le_check_adv_flag
+	setarg ADV_FLAG_BREDR_NOT_SUPPORTED
+	istore 1,contr
+
+	arg mem_le_scan_data,contr
+	call p_le_adv_data_update
+	
+	branch check_51cmd_adv
+
+p_le_check_adv_flag:
+	arg mem_le_adv_data,rega
+p_le_check_adv_flag_loop:
+	ifetch 1,rega	//length
+	rtn blank
+	iadd contr,rega
+	ifetch 1,contr	//type
+	rtneq 0x01
+	branch p_le_check_adv_flag_loop
+endif
+
+ifdef G24
+p_mouse_24g_pairing_button:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_24G
+	rtnbit1 MOSUE_24G_PAIRING_FLAG
+	rtnmark1 mark_24g
+	call mouse_devce_led_off
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	call mouse_enable_function_flag
+	setarg 0
+	store 2,mem_mouse_direct_timer
+	store 1,mem_mouse_send_blank_timer
+	store 2,mem_24g_check_dongle_times
+	call mouse_stop_discovery
+	branch p_g24_start_pairing_sm1
+endif
+
+p_mouse_dpi_config:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_EEPROM,mouse_dpi_config
+	fetch 1,mem_mouse_dpi
+	beq 0xff,mouse_dpi_config
+	branch mouse_seting_dpi+2
+
+p_mouse_spi_init:
+	jam 0x76,mem_spi_init_clk
+	branch mouse_spi_init
+	
+p_mouse_init_sunt:
+	call p_mouse_spi_init
+	call mouse_spi_sdio_gpio_pollup
+	fetch 1,mem_config_sensor_type
+	beq P3610,mouse_init_3610sensor
+p_mouse_init_sensor:
+	call mouse_read_sensor_id
+	beq P32XX_ID1,p_mouse_init_p32xx_id2_judge
+	beq P3065_ID1,p_mouse_p3065_init_param
+	call mouse_twspi_reset
+	nop 1000
+	branch p_mouse_init_sensor
+
+p_mouse_init_sensor_reset:
+	jam 1,mem_mouse_init_sensor_reset_flag
+	call spi_ncs_enable
+	call p_mouse_init_sunt
+	branch spi_ncs_disable
+
+p_mouse_init_p32xx_id2_judge:
+	call p_mouse_sensor_poweron
+	branch mouse_init_p32xx_id2_judge
+
+
+p_mouse_p3065_init_param:
+	call p_mouse_sensor_poweron
+	fetch 1,mem_sensor_id2
+	beq P3065_XY_ID2,mouse_p3065xy_init_param
+	jam P3065,mem_config_sensor_type
+	rtn
+
+p_mouse_sensor_poweron:
+	setarg 0x8006	// reset to factory settings
+	call twspi_write
+	nop 12000
+	branch p_mouse_dpi_config
+p_mouse_sensor_powerdown:
+	setarg 0x06
+	call twspi_read
+	or pdata,0x08,pdata
+	lshift8 pdata,pdata
+	add pdata,0x06,pdata
+	branch twspi_write	//make sdio high
+
+p_mouse_setting_config:
+ifdef G24
+	call p_g24_set_device_addr
+endif
+	//disable usb function
+	hfetch 1,core_usb_config
+	set0 4,pdata
+	hstore 1,core_usb_config
+ifndef MS_MATRIX
+	call mouse_gpio_init
+endif
+	call mouse_param_init
+
+ifdef XTAL_16M
+	setarg 0x1802	//16M XTAL
+	store 2,mem_fcomp_mul
+endif	
+	
+ifdef CLASSIC_BT	
+	call p_mouse_bt_sdp_update
+endif	
+	setarg 0
+	store 2,mem_lpm_interval
+	call mouse_adc_init
+ifdef BLE	
+	call le_set_config_fixed_ltk
+	call le_set_justwork
+	call le_set_fixed_ltk
+	call le_set_config_read_authentication
+endif	
+p_mouse_init_iic:
+	call iic_init_390k
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	isolate1 MOUSE_ENABLE_2K_EEPROM,pdata
+	ncall clear_eeprom_size_2k,true
+	call mouse_load_eeprom_dpi
+	call p_mouse_init_environment
+p_mouse_read_24g_addr:	
+	call p_mouse_set_24g_addr_eeprom
+	branch iicd_read_eep_data
+
+ifdef CLASSIC_BT
+p_mouse_bt_sdp_update:
+	call enable_authrom
+	arg 0x8c00,contr
+	arg mem_mouse_uuid_list,contw
+	arg 369,loopcnt
+	call memcpy
+	//Attribute: HID SSR Host Max Latency
+	setarg 0x0f0209
+	istore 3,contw
+	setarg 0x120009
+	istore 3,contw
+	//Attribute: HID SSR Host Min Timeout
+	setarg 0x100209
+	istore 3,contw
+	setarg 0x000009
+	istore 3,contw
+	arg 0x8d71,contr
+	arg 265,loopcnt
+	call memcpy
+	
+	jam 0,mem_mouse_uuid_list+23	//Service Record Handle: 0x 00 01 00 00
+	jam 0x6d,mem_mouse_uuid_list+15	//total length
+	setarg 0x401f
+	store 2,mem_mouse_uuid_list+357	//timeout
+	setarg 0x6d04
+	store 2,mem_mouse_uuid_list+462	//VID
+	setarg 0x16b0
+	store 2,mem_mouse_uuid_list+468	//PID
+
+	setarg mem_mouse_uuid_list				//bt sdp start address
+	store 2,mem_ui_uuid_table
+	rtn
+endif	
+
+p_mouse_init_environment:
+	call app_initflag_check
+	branch mouse_eeprom_load_recon_info,zero
+ifdef BLE
+	call p_le_addr_random_config
+endif
+	branch mouse_init_environment+2
+
+p_app_flag_store:
+	arg 2,temp
+	arg mem_timeup,rega
+	arg MOUSE_EEPROM_MODULE_INIT_FLAG,regb
+	branch iicd_write_protect_eep_data
+
+p_app_initflag_check:
+	arg 2,temp
+	arg mem_pdatatemp,rega
+	arg MOUSE_EEPROM_MODULE_INIT_FLAG,regb
+	branch app_initflag_check+4
+
+p_mouse_wakeup_from_power:
+ifdef MS_ALL_POWER
+	branch p_g24_auto_pair_start
+endif
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_WAKEUP_FROM_POWER,p_mouse_wakeup_no_from_power
+	fetch 1,mem_wakup_from_power_flag
+	isolate0 gpio_latch,pdata
+	nbranch p_mouse_wakeup_no_from_power,true
+	call p_mouse_init_sunt
+	call p_mouse_sensor_powerdown
+p_mouse_wakeup_no_from_power:
+	fetch 1,mem_reconn_times_init
+	store 1,mem_reconn_times
+//	fetch 1,mem_config_function_enable	//standard do not need it
+//	rtnbit1 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON
+//	rtnbit1 ENABLE_SELECT_DEVICE_BY_SWITCH
+p_mouse_start_24g_mode:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_24G
+	call p_g24_factory_check
+	branch p_g24_auto_pair_start,user
+	branch p_g24_start_24g_mode
+
+p_g24_factory_check:
+	arg 2,loopcnt
+	arg mem_24g_addr,contr
+p_pdata_0xff_check:
+	call enable_user
+	setarg 0xffff
+p_pdata_0xff_check_loop:
+	ifetcht 2,contr
+	isub temp,null
+	ncall disable_user,zero
+	loop p_pdata_0xff_check_loop
+	rtn
+
+p_mouse_cb_fuction:
+	setarg p_mouse_priority_bb_event
+	store 2,mem_cb_bb_event_process
+ifdef G24
+	setarg p_mouse_g24_package_data
+	store 2,mem_cb_24g_data
+endif
+
+ifndef MS_ALL_POWER
+ifdef BLE
+	setarg p_mouse_le
+	store 2,mem_cb_le_process
+	setarg p_le_mouse_bb_event_connect_complete
+	store 2,mem_cb_att_write
+endif
+ifdef CLASSIC_BT
+	setarg p_mouse_bt
+	store 2,mem_cb_bt_process
+endif	
+	setarg p_mouse_before_lpm
+	store 2,mem_cb_before_lpm
+	setarg p_mouse_idle
+	store 2,mem_cb_idle_process
+	setarg p_mouse_before_hibernate
+	store 2,mem_cb_before_hibernate
+	setarg p_mouse_bb_event_timer
+	store 2,mem_cb_event_timer
+endif	
+	rtn
+
+ifdef G24
+p_mouse_g24_package_data:
+ifdef MS_ALL_POWER
+ifdef MS_MATRIX
+	branch p_mouse_g24_package_data_allpower
+else
+	branch p_mouse_g24_package_data_normal
+endif
+endif
+
+p_mouse_g24_package_data_normal:
+	call mouse_g24_package_data
+	fetch 2,mem_mouse_z
+	rtn blank
+	branch p_g24_transmit_by_interrupt_enable
+
+ifdef MS_MATRIX
+p_mouse_g24_package_data_allpower:
+	call p_g24_matrix_data
+	branch p_mouse_g24_package_data_normal+1
+endif
+	
+endif	
+	
+ifdef BLE
+p_mouse_le_txbuff_save:
+	arg mem_le_tx_buffer0,contr
+	arg mem_le_tx_buffer0_omemalloc,contw
+	call p_mouse_le_txbuff_copy
+	arg mem_le_tx_buffer1,contr
+	call p_mouse_le_txbuff_copy
+	arg mem_le_tx_buffer2,contr
+	call p_mouse_le_txbuff_copy
+	arg mem_le_tx_buffer3,contr
+p_mouse_le_txbuff_copy:	
+	arg 27,loopcnt
+	branch memcpy
+
+p_mouse_le_txbuff_load:
+	arg mem_le_tx_buffer0_omemalloc,contr
+	arg mem_le_tx_buffer0,contw
+	call p_mouse_le_txbuff_copy
+	arg mem_le_tx_buffer1,contw
+	call p_mouse_le_txbuff_copy
+	arg mem_le_tx_buffer2,contw
+	call p_mouse_le_txbuff_copy
+	arg mem_le_tx_buffer3,contw
+	branch p_mouse_le_txbuff_copy
+
+p_mouse_le:
+	call le_fifo_check_nearly_full
+	nrtn blank
+	fetch 1,mem_le_connect_status_flag
+	and pdata,0x03,pdata
+	rtnne 0x03
+	fetch 1,mem_mouse_clear_sensor_data_flag
+	call p_mouse_clear_sensor_data,blank
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_le_send_empty_packet
+	call mouse_motion
+ifdef HIGH_REPORT
+	nbranch p_bt_125hz_clear,user
+	call p_bt_125hz
+	nrtn user7
+else
+	nrtn user
+endif
+	call p_mouse_wheel_trigger
+	branch p_mouse_data_push
+
+ifdef HIGH_REPORT
+p_bt_125hz:
+	enable user7
+	fetch 1,mem_bt_125hz_cnt
+	beq 15,p_bt_125hz_clear
+	increase 1,pdata
+	store 1,mem_bt_125hz_cnt
+	rtn
+p_bt_125hz_clear:
+	jam 0,mem_bt_125hz_cnt
+	disable user7
+	rtn	
+endif
+
+p_mouse_data_init:
+	jam 7,mem_mouse_data_queue	//data length
+	jam 4,mem_mouse_data_queue+1	//fifo depth
+	setarg mem_mouse_data_queue
+	store 2,mem_queue_ptr
+	branch queue_init
+
+p_mouse_data_push:
+	arg mem_mouse_key,rega
+	call queue_push
+	call p_mouse_queue_increase,user
+	
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	setarg MISC_LOST_MOUSEDATA
+	store 2,mem_debuglog_dataval
+	nbranch debuglog_push,user
+
+	setarg MISC_PUSH_MOUSEDATA
+	store 2,mem_debuglog_dataval
+	call debuglog_push
+endif
+endif
+	rtn
+p_mouse_queue_increase:
+	fetch 1,mem_mouse_data_queue_num
+	increase 1,pdata
+	store 1, mem_mouse_data_queue_num
+	rtn
+	
+p_mouse_data_pull:
+	arg mem_mouse_key,rega
+	call queue_pop
+	branch p_mouse_fill_data_le,user
+	rtn
+
+p_mouse_fill_data_le:
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	setarg MISC_PULL_MOUSEDATA
+	store 2,mem_debuglog_dataval
+	call debuglog_push
+
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_mouse_x
+	store 1,mem_debuglog_dataval
+	fetch 1,mem_mouse_y
+	store 1,mem_debuglog_dataval+1
+	call debuglog_push	
+endif
+endif
+	call le_clear_md
+	fetch 1,mem_mouse_data_queue_num
+	sub pdata,1,null
+	ncall le_set_md,positive
+	fetch 1,mem_mouse_data_queue_num
+	rtn blank
+	increase -1,pdata
+	store 1, mem_mouse_data_queue_num
+	branch mouse_fill_data_le
+	
+endif
+
+p_mouse_wheel_trigger:
+	fetch 2,mem_mouse_z
+	rtn blank
+	jam 1,mem_mouse_wheel_trigger
+	jam 2,mem_mouse_wheel_trigger_timer
+	rtn
+
+ifdef CLASSIC_BT
+p_mouse_bt:
+	rtn attempt
+	fetch 1,mem_app_handshake_flag
+	rtn blank
+	call l2cap_malloc_is_fifo_nearly_full
+	nrtn blank
+	fetch 1,mem_mouse_clear_sensor_data_flag
+	call p_mouse_clear_sensor_data,blank
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG,mouse_send_empty_data
+	bbit1 MOUSE_BT_DISCOVERY_BUTTON_LONG_DOWN_FLAG,mouse_send_empty_data
+	call mouse_motion
+ifdef HIGH_REPORT
+	nbranch p_bt_125hz_clear,user
+	call p_bt_125hz
+	nrtn user7
+else
+	nrtn user
+endif
+	call p_mouse_wheel_trigger
+	fetch 1,mem_mouse_bt_boot_mode
+	beq 1,p_mouse_send_data_boot_mode	//boot
+	fetch 1,mem_mouse_bt_send_first_package_flag
+	rtn blank
+	branch mouse_send_data	//report
+
+p_mouse_send_data_boot_mode:
+	fetch 1,mem_mouse_key
+	store 1,mem_mouse_bt_boot_data
+	fetch 1,mem_mouse_x
+	istore 1,contw
+	fetch 1,mem_mouse_y
+	istore 1,contw
+	fetch 2,mem_mouse_z
+	istore 2,contw
+
+	arg 7,rega
+	call hid_malloc_tx_buff
+	fetch 2,mem_hid_int_remote_cid
+	istore 2,contw
+	setarg 0x02a1
+	istore 2,contw
+	fetch 5,mem_mouse_bt_boot_data
+	istore 5,contw
+	rtn
+endif
+	
+p_mouse_clear_sensor_data:
+	call le_set_config_more_data
+	jam 1,mem_mouse_clear_sensor_data_flag
+	branch p_mouse_sensor_poweron
+
+p_mouse_idle:
+	call ui_check_paring_button
+	call mouse_dpi_cheak
+	branch mouse_wheel_check
+
+p_mouse_priority_bb_event:
+	copy regc,pdata
+ifdef BLE	
+	beq BT_EVT_LE_CONNECTED,p_mouse_le_bb_event_connected
+	beq BT_EVT_LE_DISCONNECTED,p_mouse_le_bb_disconnected
+	beq BT_EVT_LE_ENC_INFO,p_mouse_le_enc_info
+	beq BT_EVT_LE_START_ENC,p_mouse_le_ll_start_encryt
+	beq BT_EVT_LE_PARSE_CONN_PAPA_UPDATE_RSP,p_mouse_le_conn_param_update_rsp_recieved
+endif
+ifdef CLASSIC_BT
+	beq BT_EVT_RECONN_FAILED,p_mouse_bb_event_reconn_failed
+	beq BT_EVT_RECONN_PAGE_TIMEOUT,p_mouse_bb_event_reconn_timeout
+	beq BT_EVT_VIRTUAL_CABLE_UNPLUG,p_mouse_irtual_cable_unplug
+	beq BT_EVT_SWITCH_NOT_ACCEPT,app_bt_role_switch	
+	beq BT_EVT_SNIFF_NOT_ACCEPT,p_mouse_sniff_not_accept
+	beq BT_EVT_BB_CONNECTED,p_mouse_bb_event_connected
+	beq BT_EVT_BB_DISCONNECTED,p_mouse_bb_event_disconnected
+	beq BT_EVT_SWITCH_SUCCESS_MASTER,p_mouse_enter_sniff_check
+endif
+ifdef G24
+	beq BT_EVT_24G_PAIRING_COMPLETE,p_mouse_24g_pairing_complete
+	beq BT_EVT_24G_ATTEMPT_FAIL,p_mouse_24g_attempt_fail
+	beq BT_EVT_24G_ATTEMPT_SUCCESS,p_mouse_24g_attempt_success
+endif
+	branch mouse_priority_bb_event+1
+
+ifdef BLE
+p_mouse_le_bb_event_connected:
+	fetch 1,mem_mouse_le_reconnect_flag
+	nbranch p_mouse_le_bb_event_connected_next,blank
+	jam 0x14,mem_mouse_send_secutiry_request_timer
+p_mouse_le_bb_event_connected_next:
+	call p_mouse_init_sensor_reset
+	call p_mouse_data_init
+	branch mouse_le_bb_event_connected
+
+p_mouse_le_bb_disconnected:
+	jam 0,mem_le_send_security_request_flag
+	call p_mouse_sensor_powerdown_check
+ifdef HIGH_REPORT
+	setarg LE_INTERVAL_7_5MS
+else 
+	setarg LE_INTERVAL_8_75MS
+endif
+	store 2,mem_le_interval_min
+	store 2,mem_le_interval_min+2
+	jam LE_LPM_ENABLE,mem_mouse_le_conn_param_reject
+	jam 0,mem_mouse_clear_sensor_data_flag
+	call p_mouse_data_init
+	call le_clr_config_more_data
+	branch mouse_bb_disconnected
+
+p_mouse_le_enc_info:
+p_app_updata_le_param:
+	jam BT_CMD_LE_UPDATE_CONN,mem_fifo_temp
+	branch ui_ipc_send_cmd
+
+p_mouse_le_ll_start_encryt:
+	fetch 1,mem_mouse_le_reconnect_flag
+	beq 1,p_mouse_le_ll_reconn_start_encryt
+	branch p_mouse_le_ll_enable_start_enc_flag
+
+p_mouse_le_ll_reconn_start_encryt:
+	call p_app_updata_le_param
+	jam 20,mem_le_start_encrypt_timer
+p_mouse_le_ll_enable_start_enc_flag:
+	arg LL_START_ENC_FLAG,queue
+	branch mouse_le_enable_connect_flag
+
+p_mouse_le_conn_param_update_rsp_recieved:
+	fetch 2,mem_le_l2cap_signaling_conn_param_update_rsp_result
+	rtneq BLE_SIGNALING_CONNECT_PARAMETER_UPDATE_ACCEPTED
+	fetch 1,mem_le_tsniff
+	rshift2 pdata,pdata
+	sub pdata,LE_INTERVAL_15MS,null
+	rtn positive
+	setarg LE_INTERVAL_11_25MS
+	store 2,mem_le_interval_min
+	store 2,mem_le_interval_min+2
+	call p_app_updata_le_param
+p_mouse_le_conn_param_lpm_disable:
+	jam LE_LPM_DISABLE,mem_mouse_le_conn_param_reject
+	rtn
+endif
+
+
+ifdef CLASSIC_BT
+p_mouse_bb_event_reconn_timeout:
+p_mouse_bb_event_reconn_failed:
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BTN_DOWN
+	rtnbit1 UI_STATE_BT_DISCOVERY
+	rtnbit1 UI_STATE_BLE_ADV
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit1 MOUSE_BT_DISCOVERY_BUTTON_DOWN_FLAG
+	branch app_bb_hibernate
+
+p_mouse_irtual_cable_unplug:
+	call mouse_irtual_cable_unplug
+	branch app_bb_hibernate
+
+p_mouse_sniff_not_accept:
+	fetch 1,mem_mouse_enter_sniff_count
+	rtneq 2
+	increase 1,pdata
+	store 1,mem_mouse_enter_sniff_count
+	jam CLASSIC_INTERVAL_11_25MS,mem_sniff_param_interval	//89Hz
+	branch app_bt_enter_sniff
+
+p_mouse_bb_event_connected:
+	jam 0,mem_mouse_send_switch_req_timer
+	call p_mouse_init_sensor_reset
+	branch mouse_stop_discovery
+
+p_mouse_bb_event_disconnected:
+	jam 0,mem_bt_rcvd_switch_req_accept
+	jam 0,mem_bt_send_lmp_setup_complete
+	jam 0,mem_mouse_bt_send_first_package_flag
+	call p_mouse_sensor_powerdown_check
+	branch mouse_bb_disconnected
+
+p_mouse_enter_sniff_check:
+	fetch 1,mem_mouse_enter_sniff_count
+	rtnne 2
+	jam 0,mem_mouse_enter_sniff_count
+ifdef HIGH_REPORT
+	jam CLASSIC_INTERVAL_7_5MS,mem_sniff_param_interval	//89Hz
+else
+	jam 0x0e,mem_sniff_param_interval	//89Hz
+endif
+	branch app_bt_enter_sniff
+	
+endif
+
+ifdef G24
+p_mouse_24g_pairing_complete:
+ifndef MS_MATRIX
+	call p_mouse_init_sensor_reset
+endif
+	jam 1,mem_mouse_24g_enter_lpm_enable
+	arg MOSUE_24G_PAIRING_FLAG,queue
+	call mouse_disable_function_flag
+	setarg 0
+	store 2,mem_24g_pairing_timer_count
+	jam 0,mem_mouse_move_flag
+	
+	call mouse_read_sensor_common
+
+ifdef MS_MATRIX
+	call p_g24_transmit_by_interrupt_enable
+endif
+ifndef MS_ALL_POWER
+	call p_mouse_tx_power_init
+endif
+	call p_mouse_set_24g_addr_eeprom	//store rx dongle addr to eeprom
+	branch iicd_write_protect_eep_data
+
+p_mouse_set_24g_addr_eeprom:
+	arg mem_24g_addr,rega
+	arg MOUSE_G24_ADDR_EEPROM_OFFECT,regb
+	arg 4,temp
+	rtn
+
+p_mouse_24g_attempt_fail:
+ifndef MS_MATRIX
+	call p_mouse_sensor_powerdown_check
+endif
+	jam G24_TX_TIMER_INT_DISABLE,mem_24g_transmit_by_interrupt
+	call p_mouse_tx_power_init
+	call p_g24_check_51cmd_stop_24g
+ifdef MS_ALL_POWER
+	branch soft_reset_chip
+endif	
+	jam 0,mem_link_key_exists
+	call mouse_eeprom_load_recon_info
+	arg 3,loopcnt
+	arg mem_device1_addr,contr
+	call p_pdata_0xff_check
+	branch p_mouse_null_enter_hibernate_count,user
+	branch p_mouse_check_reconn_target
+
+p_mouse_24g_attempt_success:
+ifndef MS_MATRIX
+	call p_mouse_init_sensor_reset
+endif
+	branch mouse_no_data_timer_init	
+endif
+
+
+p_mouse_before_hibernate:
+	enable user
+	hfetch 4,0x8138
+	setflag user,26,pdata
+	hstore 4,core_lpm_reg
+	call lpm_write_ctrl
+	call p_mouse_sensor_powerdown_check
+	call disable_authrom
+	call mouse_devce_led_off
+	call mouse_before_hibernate_wheel_gpio_set
+	branch p_mouse_setgpio_lpm_before
+	
+p_mouse_sensor_powerdown_check:
+	fetch 1,mem_mouse_init_sensor_reset_flag
+	rtn blank
+	jam 0,mem_mouse_init_sensor_reset_flag
+	branch p_mouse_sensor_powerdown
+
+
+p_mouse_bb_event_timer:
+ifdef ADC_ENABLE	
+	call p_mouse_adc_read
+	call mouse_low_voltage_led_timer
+endif
+	call p_mouse_wheel_trigger_timer
+	call p_mouse_null_enter_hibernate_check
+	call p_mouse_bt_discovery_check
+	call mouse_check_discovery_timeout_timer
+ifdef BLE	
+	call mouse_check_direct_timeout_timer
+	call p_mouse_le_enable_att_list_timer
+	call p_le_send_smp_security_request_timer
+endif
+ifdef CLASSIC_BT
+	call p_mouse_send_switch_req_timer
+	call mouse_check_hid_handshake_timer
+	call p_mouse_bt_check_sniff_req_timeout_timer
+endif
+	branch mouse_check_no_data_timeout_timer
+
+ifdef CLASSIC_BT
+p_mouse_send_switch_req_timer:
+	arg mem_mouse_send_switch_req_timer,regc
+	arg host_create_conn_resend,regb
+	branch timer_single_step
+
+p_mouse_bt_check_sniff_req_timeout_timer:
+	arg mem_mouse_bt_send_first_package_timer,regc
+	arg p_mouse_bt_send_first_package,regb
+	branch timer_single_step
+p_mouse_bt_send_first_package:
+	jam 1,mem_mouse_bt_send_first_package_flag
+	rtn
+endif
+
+
+ifdef BLE
+p_mouse_le_enable_att_list_timer:
+	arg mem_le_start_encrypt_timer,regc
+	arg mouse_le_write_enable,regb
+	branch timer_single_step
+
+p_le_send_smp_security_request_timer:
+	arg mem_mouse_send_secutiry_request_timer,regc
+	arg p_le_pairing_sm_start_check,regb
+	branch timer_single_step
+
+p_le_pairing_sm_start_check:
+	fetch 1,mem_le_send_security_request_flag
+	nrtn blank
+	branch le_pairing_sm_start
+
+endif
+
+p_mouse_wheel_trigger_timer:
+	arg mem_mouse_wheel_trigger_timer,regc
+	arg p_mouse_wheel_trigger_disable,regb
+	branch timer_single_step
+p_mouse_wheel_trigger_disable:
+	jam 0,mem_mouse_wheel_trigger
+	rtn
+
+p_mouse_bt_discovery_check:
+	fetch 1,mem_config_function_enable
+	bbit1 ENABLE_BT_BUTTON,mouse_bt_discovery_by_button
+p_mouse_bt_discovery_commbination_key:
+	call mouse_check_key_gpio
+	beq MOUSE_LMR_BUTTON,p_mouse_bt_discovery_commbination_key_down
+p_mouse_bt_discovery_commbination_key_up:
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_combination_ui_button_count	//combination key timer init 
+	fetch 1,mem_bt_discovey_button_statue
+	rtneq DPI_BUTTON_STATE_UP
+	jam DPI_BUTTON_STATE_UP,mem_bt_discovey_button_statue
+	arg MOUSE_BT_DISCOVERY_BUTTON_LONG_DOWN_FLAG,queue
+	call mouse_disable_function_flag
+	branch mouse_bt_discovery_button_down_disable
+p_mouse_bt_discovery_commbination_key_down:
+	jam 40,mem_mouse_null_enter_hibernate_timer
+	call p_mouse_bt_discovery_timer
+	branch mouse_bt_discovery_commbination_key_down+1
+
+p_mouse_bt_discovery_timer:
+	arg mem_combination_ui_button_count,regc
+	arg p_mouse_long_button_bt_discovery,regb
+	branch timer_single_step
+	
+p_mouse_long_button_bt_discovery:
+	fetch 2,mem_ui_state_map
+	isolate1 UI_STATE_BLE_ADV,pdata
+	call mouse_stop_le_adv,true		//reconnect adv
+	fetch 2,mem_ui_state_map
+	isolate1 UI_STATE_BT_RECONNECT,pdata
+	call mouse_cancel_reconnect,true
+	arg MOUSE_BT_DISCOVERY_BUTTON_LONG_DOWN_FLAG,queue
+	call mouse_enable_function_flag
+	branch mouse_long_button_bt_discovry
+
+p_mouse_null_enter_hibernate_check:
+	fetch 1,mem_mouse_null_enter_hibernate_flag
+	rtn blank
+	fetch 1,mem_mouse_null_enter_hibernate_timer
+	branch p_mouse_null_enter_hibernate,blank
+	increase -1,pdata
+	store 1,mem_mouse_null_enter_hibernate_timer
+	rtn
+p_mouse_null_enter_hibernate:
+	jam 0,mem_mouse_null_enter_hibernate_flag
+	branch app_enter_hibernate
+p_mouse_null_enter_hibernate_count:	//ble never connected
+	jam 1,mem_mouse_null_enter_hibernate_flag
+	jam 40,mem_mouse_null_enter_hibernate_timer	//lmr 3s
+	rtn	
+
+	
+ifdef ADC_ENABLE
+p_mouse_adc_read:
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	rtnbit0 MOUSE_ENABLE_ADC
+	fetch 1,mem_adc_read_timer
+	increase 1,pdata
+	store 1,mem_adc_read_timer
+	sub pdata,10,null              //1s read adc
+	rtn positive
+	jam 0,mem_adc_read_timer
+	call p_adc_set_mode
+	call vdd_calculate_by_mode
+	store 2,mem_mouse_vdd_now_vol
+	arg mem_mouse_vdd_calculate_set,rega
+	call p_adc_bat_percent_lowpower_out
+	fetch 1,mem_adc_power_flag
+	bbit1 1,app_enter_hibernate
+	bbit0 0,p_mouse_adc_no_low_voltage
+	jam 1,mem_mouse_adc_last_low_voltage_flag
+	branch mouse_adc_low_voltage
+p_mouse_adc_no_low_voltage:
+	call mouse_adc_no_low_voltage
+	fetch 1,mem_mouse_adc_last_low_voltage_flag
+	rtn blank
+	jam 0,mem_mouse_adc_last_low_voltage_flag
+	fetch 1,mem_config_low_voltage_alarm_gpio
+	store 1,mem_mouse_struct_led_gpio
+	branch mouse_led_off
+	
+p_adc_set_mode:
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_GPIO,p_adc_check_gpio
+	branch adc_set_mode+1
+p_adc_check_gpio:
+	hfetch 1,core_gpio_pu0	//gpio5 pull up disable
+	set0 5,pdata
+	hstore 1,core_gpio_pu0
+	call adc_check_gpio
+	hfetch 1,core_gpio_pu0	//gpio5 pull up enable
+	set1 5,pdata
+	hstore 1,core_gpio_pu0
+	rtn
+
+p_adc_bat_percent_lowpower_out:
+	ifetch 8,rega
+	store 8,mem_pdatatemp
+	fetcht 2,mem_pdatatemp+2	//shutdown voltage 0.9v
+	fetch 2,mem_pdatatemp+6		//now voltage
+	isub temp,null
+	nbranch adc_set_no_power_flag,positive
+	fetcht 2,mem_pdatatemp+4	//low voltage 1.0v
+	isub temp,null
+	nbranch adc_set_low_power_flag,positive
+p_adc_clear_low_power_flag:
+	fetch 1,mem_adc_power_flag
+	set0 0,pdata
+	store 1,mem_adc_power_flag
+	rtn	
+endif
+
+p_mouse_seting_dpi:
+	call mosue_dpi_led_blink_init
+p_mouse_seting_dpi_diff:
+	fetch 1,mem_config_sensor_type
+	beq P3065_XY,p_mouse_seting_3065XY_dpi
+	branch mouse_seting_dpi+3
+	
+p_mouse_seting_3065XY_dpi:
+	fetch 1,mem_mouse_dpi
+	call p_mouse_3065xy_dpi_recount,blank
+	fetch 1,mem_mouse_dpi
+	beq MOUSE_DPI_LEVEL2,mouse_set_cpi1
+	//beq MOUSE_DPI_LEVEL3,mouse_set_cpi3
+	beq MOUSE_DPI_LEVEL4,mouse_set_cpi4
+	branch mouse_set_cpi3
+p_mouse_3065xy_dpi_recount:
+	jam 1,mem_mouse_dpi
+	rtn
+
+p_mouse_motion:
+	disable user
+	setarg 0
+	store 6,mem_mouse_x
+	call mouse_cheak_sensor_data
+	call mouse_zwheel
+	call mouse_t_zwheel
+	call mouse_key
+ifdef MOUSE_SMOOTHER	
+	nbranch p_drawing_optima_init,user
+	call p_drawing_optima
+else
+	nrtn user
+endif
+	branch mouse_motion+9
+
+p_mouse_bb_event_discovery_btn:
+	jam 0,mem_mouse_null_enter_hibernate_flag
+	jam 0,mem_mouse_null_enter_hibernate_timer
+ifdef G24	
+	isolate1 mark_24g,mark
+	call p_g24_check_51cmd_stop_24g,true
+endif
+	branch mouse_bb_event_discovery_btn+1
+
+ifdef BLE
+p_le_addr_random_config:
+	call load_adc_init
+	fetch 2,mem_0_5_adc_io_data	//adc data from otp
+	branch p_le_otp_adc_empty,blank
+	store 2,mem_random_addr_increase_count
+p_le_addr_random_store:
+	branch p_mouse_store_eerpom_random_addr_increase_count
+p_le_otp_adc_empty:
+	setarg 0x1122
+	store 2,mem_random_addr_increase_count
+	branch p_le_addr_random_store
+
+p_mouse_store_eerpom_random_addr_increase_count:
+	arg 2,temp
+	arg mem_random_addr_increase_count,rega
+	arg MOUSE_RANDOM_ADDR_COUNT_EEPROM_OFFSET,regb
+	branch iicd_write_protect_eep_data
+p_mouse_load_eeprom_random_addr_increase_count:
+	arg 2,temp
+	arg mem_random_addr_increase_count,rega
+	arg MOUSE_RANDOM_ADDR_COUNT_EEPROM_OFFSET,regb
+	branch iicd_read_eep_data
+
+endif
+
+p_mouse_start_discovery:
+	call p_mouse_tx_power_init
+	jam 0,mem_mouse_clear_sensor_data_flag
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BLE_ADV,p_mouse_start_discovery_norandom
+	fetch MOUSE_FLAG_LEN,mem_mouse_flag
+	bbit0 MOUSE_ENABLE_BLE_RANDOM_ADDRE,p_mouse_start_discovery_norandom
+ifdef BLE
+	call p_mouse_load_eeprom_random_addr_increase_count
+	fetcht 2,mem_random_addr_increase_count
+	increase 1,temp
+	storet 2,mem_random_addr_increase_count
+	storet 2,mem_le_lap+1
+	call p_mouse_store_eerpom_random_addr_increase_count
+	random pdata
+	store 1,mem_le_lap
+endif
+p_mouse_start_discovery_norandom:
+	call app_lpm_mult_disable
+	fetch 2,mem_discovery_timeout
+	store 2,mem_mouse_discovery_timer
+	jam 6,mem_connection_options
+	setarg 0
+	store 2,mem_mouse_no_data_timer
+	store 2,mem_mouse_direct_timer
+	arg MOUSE_STORE_EEPROM_FLAG,queue
+	call mouse_enable_function_flag
+	call mouse_bt_discovery_button_down_disable
+ifdef BLE	
+	fetch 1,mem_device_option
+	isolate1 MODE_4_MOUSE,pdata
+	call p_check_51cmd_adv,true
+endif	
+	branch mouse_start_discovery_norandom+13
+
+ifdef BLE
+p_check_51cmd_adv:
+	jam 0,mem_mouse_le_reconnect_flag
+	call p_le_check_adv_flag
+	setarg ADV_FLAG_BREDR_NOT_SUPPORTED |ADV_FLAG_LIMITED_DISCOVERABLE
+	istore 1,contr
+
+	arg mem_le_adv_swift_pair,contr
+	call p_le_adv_data_update
+	
+	branch check_51cmd_adv
+
+p_le_adv_data_update:
+	arg mem_le_adv_data+11,contw
+	arg 19,loopcnt
+	call memcpy
+	branch le_modified_name_adv
+endif	
+
+p_mouse_stop_discovery:
+	setarg 0
+	store 2,mem_mouse_discovery_timer
+	call p_mouse_sensor_poweron		//clear sensor data,confirm the motion pin high
+	branch mouse_stop_discovery+1
+
+ifdef BLE
+p_le_slave_match:
+	fetch 1,mem_le_md_count
+	pincrease 1
+	store 1,mem_le_md_count
+	beq LE_MD_MAX_COUNT,le_slave_cont
+	call le_acknowledge
+	call le_prepare_tx
+	call power_ctrl_start
+	branch le_slave_match+7
+
+p_le_next_adv_channel:
+	fetch 1,mem_le_ch_mapped
+	increase 1,pdata
+	store 1,mem_le_ch_mapped
+	rtnne 40
+	jam 37,mem_le_ch_mapped
+	rtn
+
+p_le_receive_skip:
+	call save_rssi
+	call p_rssi_signal
+	branch le_receive_skip+2
+
+p_le_update_param:
+	call p_mouse_le_conn_param_check
+	branch le_update_param+8
+p_mouse_le_lpm_mult_reinit:
+	fetch 1,mem_lpm_mult_init
+	store 1,mem_lpm_mult
+p_mouse_le_conn_param_lpm_enable:
+	jam LE_LPM_ENABLE,mem_mouse_le_conn_param_reject
+	rtn
+
+p_mouse_le_conn_param_check:
+	fetch 1,mem_le_new_conninterval
+	sub pdata,LE_INTERVAL_15MS,null
+	nbranch p_mouse_le_conn_param_lpm_disable,positive
+	fetch 1,mem_le_new_connslavelatency
+	fetcht 1,mem_lpm_mult_init
+	isub temp,null
+	branch p_mouse_le_lpm_mult_reinit,positive
+	fetch 1,mem_le_new_connslavelatency
+	store 1,mem_lpm_mult
+	branch p_mouse_le_conn_param_lpm_enable
+
+p_le_update_channel_map:
+	fetch 1,mem_le_state
+	rtnbit0 lestate_update_map
+	call p_le_channel_map_overflow_check
+	nrtn user
+	branch le_update_channel_map+3
+p_le_channel_map_overflow_check:
+	enable user
+	fetch 1,mem_le_event_count+1
+	rshift4 pdata,pdata
+	rtnne 0x0f
+	fetch 1,mem_le_instant+1
+	rshift4 pdata,pdata
+	rtnne 0x00
+	branch disable_user
+
+p_le_prepare_tx:
+	fetch 1,mem_le_arq
+	bbit1 wak,p_le_prepare_tx_wak
+	call power_ctrl_pac_succ_incrs	
+	fetch 1,mem_empty_count
+	nbranch p_le_send_empyt,blank
+	fetch 1,mem_le_state 
+	bbit0 lestate_encryption,p_le_tx_4
+	fetch 1,mem_le_rxbuf+1  
+	branch p_le_tx_4,blank  
+	branch le_send_empty      // send empty data when got non empty packet
+p_le_send_empyt:
+	fetch 1,mem_empty_count
+	increase -1,pdata
+	store 1,mem_empty_count
+	branch le_send_empty
+p_le_tx_4:	
+	fetch 1,mem_le_pairing_state
+	bne FLAG_LE_PAIRING_AFTER_AUTH,p_in_le_tx_4
+	jam 3,mem_empty_count
+p_in_le_tx_4:
+	call le_fifo_check_nearly_full
+	call p_mouse_data_pull,blank
+	branch le_prepare_tx+4
+
+p_le_prepare_tx_wak:
+	call p_le_check_tx_retransmit_setmd
+	branch p_le_power_ctrl_pac_succ_decrs
+
+p_le_check_tx_retransmit_setmd:
+	fetch 1,mem_le_connect_status_flag
+	and pdata,0x03,pdata
+	rtnne 0x03
+	fetch 1,mem_mouse_data_queue_num
+	rtn blank
+	fetch 1,mem_le_txlen
+	rtn blank
+	fetch 1,mem_le_txheader
+	set1 md,pdata
+	store 1,mem_le_txheader
+	call le_set_md
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	setarg MISC_LE_RETRANSMIT_MD
+	store 2,mem_debuglog_dataval
+	call debuglog_push	
+endif
+endif
+	rtn
+
+	
+	
+p_le_power_ctrl_pac_succ_decrs:
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	setarg MISC_LE_RETRANSMIT
+	store 2,mem_debuglog_dataval
+	call debuglog_push	
+endif
+endif
+	branch power_ctrl_pac_succ_decrs
+
+p_mouse_le_reconn_write_enable_timer_reinit:
+	fetch 1,mem_mouse_le_reconnect_flag
+	rtn blank
+	fetch 1,mem_le_connect_status_flag
+	and pdata,0x03,pdata
+	rtneq 0x03
+	jam 10,mem_le_start_encrypt_timer
+	rtn
+
+p_le_parse:
+	rtnmark1 mark_old_packet
+	call le_fifo_check_full
+	nrtn blank
+	fetch 1,mem_le_rxbuf
+	and pdata,0x3,pdata
+	store 1,mem_le_packet_llid
+	ifetch 1,contr
+	and pdata,0x1f,pdata
+	store 1,mem_le_packet_size
+	rtn blank							//empty rtn
+	copy contr,pdata
+	store 2,mem_le_payload_ptr
+	fetch 1,mem_le_packet_llid
+	beq LLID_LE_LL,p_le_parse_ll
+	branch le_parse_l2cap
+p_le_parse_ll:
+	fetch 1,mem_le_rxbuf+2
+	beq LL_CHANNEL_MAP_REQ,p_le_parse_channel_map_req
+	branch le_parse_ll+1
+p_le_parse_channel_map_req:
+	ifetch 5,contr
+	store 5,mem_le_new_map
+	ifetch 2,contr
+	store 2,mem_le_instant
+	branch le_parse_channel_map_req+7	
+	
+p_le_parse_l2cap:
+	ifetch 2,contr
+	beq LE_L2CAP_CID_ATT,p_le_parse_att
+	beq LE_L2CAP_CID_SMP,p_le_parse_smp
+	branch le_parse_l2cap+11
+p_le_parse_att:
+	call store_contr
+	call p_mouse_le_reconn_write_enable_timer_reinit
+	call get_contr
+	ifetch 3,contr
+	store 3,mem_le_att_opcode
+	beq ATTOP_READ_BY_GROUP_TYPE_REQUEST,p_le_parse_att_read_by_group_type_request
+	rshift8 pdata,temp
+	sub temp,0x24,null
+	branch le_parse_att+2,positive
+	arg mem_mouse_le_uuid_sup,temp
+	storet 2,mem_ui_le_uuid_table
+	call le_parse_att+2
+	setarg 0x8e7a
+	store 2,mem_ui_le_uuid_table
+	rtn
+
+p_le_parse_att_read_by_group_type_request:
+	call le_parse_att_read_by_group_type_request
+	call le_fifo_get_last_tx_ptr
+	increase 7,contr
+	ifetch 1,contr
+	rtnne ATTOP_READ_BY_GROUP_TYPE_RESPONSE
+	increase 5,contr
+	ifetch 2,contr
+	arg UUID_SERVICE_HIDS,temp
+	isub temp,null
+	nrtn zero
+	increase -4,contr
+	setarg 0x2b
+	istore 2,contr
+	rtn
+
+p_le_parse_smp:
+	ifetch 1,contr
+	beq SMP_PAIRING_REQUEST,p_le_parse_smp_pairing_request
+	beq SMP_PAIRING_FAILED,p_le_parse_smp_pairing_failed
+	branch le_parse_smp+2
+	
+p_le_parse_smp_pairing_request:
+	jam 1,mem_le_send_security_request_flag
+	branch le_parse_smp_pairing_request
+
+p_le_parse_smp_pairing_failed:
+	call le_parse_smp_pairing_failed
+	fetch 1,mem_le_state	//disable update conn param
+	set0 lestate_update_param,pdata
+	store 1,mem_le_state
+	branch le_parse_terminate_ind
+
+p_le_adv_not_match:
+	fetch 1,mem_le_ch_mapped
+	bne 39,le_adv_loop
+	call p_le_adv_random_delay
+	arg le_adv_interval_timer,queue
+	fetch 2,mem_le_adv_interval
+	branch timer_init
+p_le_adv_random_delay:
+	random pdata
+	arg 0x1ff,temp
+	iand temp,pdata
+	add pdata,250,pdata
+	branch delay
+
+p_le_lpm_setmult:
+	disable wake
+	branch p_le_lpm_set_mult_attempt,attempt
+	nbranch le_lpm_lost,match
+p_le_lpm_set_mult_attempt:
+	call lpm_match
+	fetch 2,mem_rx_window_sniff
+	store 2,mem_le_receive_window
+	fetch 1,mem_le_connect_status_flag
+	compare 3,pdata,3
+	nbranch lpm_mult_short,true
+	branch le_lpm_set_mult_attempt+3
+
+p_le_mouse_bb_event_connect_complete:
+	fetch 1,mem_mouse_le_reconnect_flag
+	nrtn blank
+	fetch 1,mem_le_att_handle
+	sub pdata,26,pdata
+	nrtn zero
+	branch mouse_le_write_enable
+endif
+
+p_twspi_reset:
+	hfetch 1,core_gpio_out3
+	and_into 0xfd,pdata
+	hstore 1,core_gpio_out3
+	hfetcht 1,core_gpio_oe3
+	or_into 0x2,temp
+	hstoret 1,core_gpio_oe3
+	call twspi_disable
+	and_into 0xfd,temp
+	nop 13
+	call twspi_enable
+	hstoret 1,core_gpio_oe3
+	rtn
+
+p_check_51cmd_once_continue:
+	call lmo_fifo_check
+	nbranch check_51cmd_restore,blank  //process this cmd next time while lmo fifo is full
+	fetch 1,mem_fifo_temp
+	bmark0 mark_context,check_51cmd_check_idle
+	beq BT_CMD_LE_UPDATE_CONN,p_check_51cmd_ble_update_connect_param
+	branch check_51cmd_once_continue+2
+
+p_check_51cmd_ble_update_connect_param:
+	call le_fifo_check_full
+	nrtn blank
+	branch le_l2cap_tx_update_req
+
+ifdef CLASSIC_BT
+p_page_wait_fhs_reply_ok:
+ 	fetch 1, mem_page_rcv_fhs
+	increase 1,pdata
+	store 1, mem_page_rcv_fhs
+	call prepare_newconn
+p_master_newconn_loop:
+ 	set1 mark_first_packet,mark
+	call master_newconn_once
+	branch p_newconn_poll_responded,sync
+	set0 mark_first_packet,mark
+	call new_conn_timeout
+	nbranch p_master_newconn_loop,blank
+	branch page_restart	
+
+p_newconn_poll_responded:
+	set0 mark_first_packet,mark
+	branch newconn_poll_responded
+
+p_role_switch_master:
+	call role_switch_check
+	nrtn user
+p_wait_role_switch_anchor:
+	disable user
+	jam param_newconnto,mem_newconnto_counter
+	set0 mark_fhs_already_good,mark
+	set0 mark_role_switch_receive_fhs,mark
+p_roles_waitfhs_loop:
+	call rf_setup_time_master_slot
+	call master_recv_packet
+	bmark1 mark_fhs_already_good,p_roles_replyto_fhs
+	call new_conn_timeout
+	nbranch p_roles_waitfhs_loop,blank
+	bmark1 mark_role_switch_receive_fhs,p_roles_replyto_fhs1
+	branch role_switch_fail_master
+	
+p_roles_replyto_fhs:
+	call rf_setup_time_slave_slot
+	arg type_id,type
+	call master_send_packet
+	set1 mark_role_switch_receive_fhs,mark
+	set0 mark_fhs_already_good,mark
+	force 1,am_addr	/* process_fhs will update am_addr, so slave will not receive fhs succeffully sometimes */
+	jam 2,mem_newconnto_counter
+	branch p_roles_waitfhs_loop
+
+p_roles_replyto_fhs1:
+	fetch 4,mem_clke_bt		//wait for 2 fhs,need 2.5ms
+	pincrease 8
+	store 4,mem_clke_bt
+	branch roles_replyto_fhs+4
+
+p_process_dmh:
+	bmark1 mark_first_packet,end_of_packet
+	branch process_dmh+1
+
+p_prepare_tx:
+	fetch 1,mem_state
+	isolate1 state_inconn,pdata
+	call p_bt_power_ctrl,true
+	branch prepare_tx+1
+p_bt_power_ctrl:
+	fetch 1,mem_arq
+	isolate1 wack,pdata
+	call power_ctrl_pac_succ_decrs,true
+	ncall power_ctrl_pac_succ_incrs,true
+	branch power_ctrl_start
+
+p_slave_conn_recv_packet:
+	call slave_receive_master_slot
+	nbranch shutdown_radio,sync
+	call save_rssi
+	call p_rssi_signal
+	branch slave_conn_recv_packet+4
+
+p_lpm_dispatch:
+	rtnmark1 mark_24g
+	call lpo_calibration
+	fetch 3,mem_clks_per_lpo
+	rtn blank
+	fetch 1,mem_lpm_mode
+	rtn blank
+	fetch 1,mem_ssp_enable
+	branch p_lpm_dispatch_next,blank
+	fetch 1,mem_sp_local_key_invalid	// simple pairing is not ready
+	rtn blank
+p_lpm_dispatch_next:
+	fetch 1,mem_le_sc_calc
+	nrtn blank
+	call lpm_check_wake_lock
+	nrtn blank
+	fetch 1,mem_context
+	compare 3,pdata,0x7							//sco won't sleep 
+	nbranch lpm_dispatch_unconn,true
+	fetch 2,mem_context + coffset_tsniff	//role switch 
+	arg 0xffff,temp
+	isub temp,null
+	rtn zero
+	branch lpm_dispatch_next+9
+
+p_lpm_set_mult:
+	disable wake
+	fetch 1,mem_state
+	rtnbit0 state_insniff
+	nbranch lpm_not_match,match
+	call lpm_match
+	fetch 2,mem_rx_window_sniff
+	store 2,mem_rx_window
+	fetch 1,mem_arq
+	bbit1 wack,lpm_mult_short
+	bmark0 mark_lpm_mult_enable,lpm_mult_short
+	call l2cap_malloc_is_fifo_empty
+	nbranch lpm_mult_short,blank
+	call p_lpm_set_attemp_timeout,blank	//fixed bt3.0 connected high current
+	branch lpm_set_mult+13	
+p_lpm_set_attemp_timeout:
+	jam 1,mem_current_sniff_attempt
+	jam 0,mem_current_sniff_timeout
+	rtn	
+
+p_mouse_bb_disconnected:
+	jam 0,mem_mouse_enter_sniff_count
+ifdef HIGH_REPORT
+	jam CLASSIC_INTERVAL_7_5MS,mem_sniff_param_interval	//115Hz
+else
+	jam 0x0e,mem_sniff_param_interval	//115Hz
+endif
+	call mouse_bb_discon_clear_stack
+	fetch APP_DISC_RSN_SIZE,mem_app_disconn_reason
+	bbit1 APP_DISC_BLE,mouse4_0_event_bb_disconn
+	bbit1 APP_DISC_BY_BUTTON,app_disconn_reason_clear
+	bbit1 APP_DISC_AFTER_PAIRING,p_mouse_event_light_state_pairing
+	bbit1 APP_DISC_AFTER_RECONN,p_mouse_event_light_state_hibernate
+	bbit1 APP_DISC_AFTER_SNIFF,p_mouse_event_light_state_hibernate
+	branch mouse_start_discovery
+	
+p_mouse_event_light_state_pairing:
+	bbit1 APP_DISC_AFTER_HANDSHAKE,p_mouse_event_light_state_hibernate
+	bbit1 APP_DISC_AFTER_SNIFF,p_mouse_event_light_state_hibernate
+	branch mouse_start_discovery
+p_mouse_event_light_state_hibernate:
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BTN_DOWN,mouse_start_discovery
+	call app_disconn_reason_clear
+	call mouse_check_key_gpio
+	beq MOUSE_LMR_BUTTON,p_mouse_null_enter_hibernate_count
+	branch app_bb_hibernate
+
+p_hid_rx_process:
+	fetch 2,mem_l2cap_payload_ptr
+	copy pdata,contr
+	ifetch 1,contr
+	store 1,mem_l2cap_rcv
+	and pdata,0x0f,temp
+	rshift4 pdata,pdata //hidtype
+	beq hid_type_set_protocol,p_hid_rx_set_protocol
+	branch hid_rx_process+6
+p_hid_rx_set_protocol:
+	call hid_rx_process_handshake
+	jam 0,mem_mouse_bt_boot_mode
+	fetch 1,mem_l2cap_rcv
+	isolate1 0,pdata
+	rtn true
+	jam 1,mem_mouse_bt_boot_mode	//boot mode
+	rtn
+
+p_parse_lmp_accepted:
+	fetch 1,mem_rxbuf+1
+	store 1,mem_lmi_accepted_opcode
+	beq LMP_SWITCH_REQ,p_parse_lmp_accepted_switch
+	branch parse_lmp_accepted+3
+p_parse_lmp_accepted_switch:
+	call parse_lmp_accepted_switch
+	jam 1,mem_bt_rcvd_switch_req_accept
+	fetch 1,mem_bt_send_lmp_setup_complete
+	rtn blank
+	jam 2,mem_bt_send_lmp_setup_complete
+	rtn
+
+
+p_send_lmp:
+	disable user
+	call lmo_fifo_process
+
+ifdef DEBUGLOG
+ifdef DEBUGLOG_SEND_LMP
+	setarg DEBUGLOG_DTYPE_SEND_LMP
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_lmi_opcode
+	store 1,mem_debuglog_dataval+1
+	fetch 1,mem_lmp_to_send
+	store 1,mem_debuglog_dataval
+	fetch 1,mem_lmp_to_send
+	store 2,mem_debuglog_dataval
+	ncall debuglog_push,blank
+endif
+endif
+	
+	fetch 1,mem_lmp_to_send
+	rtn blank
+	bbit1 7,p_send_lmp_escape
+	beq LMP_ACCEPTED,p_send_lmp_accepted
+	beq LMP_SETUP_COMPLETE,p_send_lmp_setup_complete
+	beq LMP_SNIFF_REQ, p_send_lmp_sniff_req
+	branch send_lmp0
+p_send_lmp_escape:
+	beq LMP_EXT_FEATURES_RES,p_send_lmpext_features_res
+	beq LMP_EXT_FEATURES_REQ,p_send_lmpext_features_req	
+	branch send_lmp_escape
+p_send_lmpext_features_res:
+	call p_check_ssp_enable
+	fetch 1,mem_lmp_to_send
+	branch send_lmpext_features_res
+p_send_lmpext_features_req:
+	call p_check_ssp_enable
+	fetch 1,mem_lmp_to_send
+	branch send_lmpext_features_req
+p_check_ssp_enable:
+	fetch 1,mem_ssp_enable 
+	branch ssp_disable,blank
+	branch ssp_enable
+
+p_send_lmp_setup_complete:
+	jam 1,mem_bt_send_lmp_setup_complete
+	branch send_lmp_setup_complete
+
+p_send_lmp_sniff_req:
+	jam 4,mem_mouse_bt_send_first_package_timer
+	branch send_lmp_sniff_req
+	
+
+p_send_lmp_accepted:
+	force 2,pdata
+	call msg_send_lmp
+	fetch 1,mem_lmi_opcode
+	istore 1,contw
+	store 1,mem_lmi_opcode_temp
+	call send_lmp_follow
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_lmi_opcode_temp
+	store 1,mem_debuglog_dataval
+	call debuglog_push	
+endif
+endif
+	fetch 1,mem_lmi_opcode_temp
+	beq LMP_MAX_SLOT_REQ,p_send_lmp_accepted_max_slot_req	//sumsung a5100 patch
+	branch send_lmp_accepted+7
+
+
+p_send_lmp_accepted_max_slot_req:
+	fetch 1,mem_bt_rcvd_switch_req_accept
+	rtn blank
+	jam 0,mem_bt_rcvd_switch_req_accept
+	fetch 1,mem_bt_send_lmp_setup_complete
+	rtnne 2
+	jam 1,mem_bt_send_max_slot_req_accept_after_switch
+	copy clkn_bt,pdata
+	store 4,mem_aurand_send_delay_time
+	rtn
+
+p_process_conn_sm:
+	call lmo_fifo_check
+	nrtn blank
+p_process_conn_sm_continue:
+	fetch 1,mem_conn_sm
+	rtn blank
+ifdef DEBUGLOG
+ifdef DEBUGLOG_CONN_SM
+	call pdata_push
+	setarg DEBUGLOG_DTYPE_CONN_SM
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_conn_sm
+	store 2,mem_debuglog_dataval
+	call pdata_pull
+	call debuglog_push	
+endif
+endif
+	beq CONN_SM_SEND_CONN_REQ, p_host_create_conn_send_conn_req
+	beq CONN_SM_WAIT_SWITCH_AFTER_HOST_CONNECTION,p_host_creat_conn_wait_switch
+	branch process_conn_sm_continue+2
+
+
+p_host_creat_conn_wait_switch:
+	fetch 1,mem_switch_flag
+	rtneq SWITCH_FLAG_INIT
+	beq SWITCH_FLAG_ACCEPT,p_host_create_conn_switch_accept
+	branch host_creat_conn_wait_switch+3
+p_host_create_conn_switch_accept:
+	rtn master
+p_host_create_conn_auth_pair:
+	/* checking whether or not to do m/s switch */
+	fetch 1,mem_connection_options
+	bbit1 CONNECTION_AUTH,p_host_create_conn_auth_pair_true
+	branch host_create_conn_auth_pair+1
+p_host_create_conn_auth_pair_true:
+	fetch 1,mem_bt_send_lmp_setup_complete
+	beq 1,host_create_conn_auth_pair_true
+	//sumsung a5100 patch
+	fetch 1,mem_link_key_exists
+	branch host_create_conn_auth_pair_nokey,blank
+	fetch 1,mem_lmp_conn_state
+	rtnbit0 SENT_SETUP_COMPLETE
+	rtnbit0 RECEIVED_SETUP_COMPLETE
+	fetch 1,mem_bt_send_max_slot_req_accept_after_switch
+	rtn blank
+	jam 0,mem_bt_send_max_slot_req_accept_after_switch	
+	fetch 4,mem_aurand_send_delay_time
+	arg 20,temp
+	iadd temp,temp
+	copy clkn_bt,pdata
+	isub temp,null
+	nbranch p_bt_send_max_slot_req_accept_after_switch_wait,positive
+	branch host_create_conn_auth
+
+p_bt_send_max_slot_req_accept_after_switch_wait:
+	jam 1,mem_bt_send_max_slot_req_accept_after_switch
+	rtn
+
+p_host_create_conn_send_conn_req:
+	jam 20,mem_mouse_send_switch_req_timer
+	branch host_create_conn_send_conn_req
+
+	
+ifdef DEBUGLOG
+p_parse_lmp_opcode:
+ifdef DEBUGLOG
+ifdef DEBUGLOG_PARSE_LMP
+	setarg DEBUGLOG_DTYPE_PARSE_LMP
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_rxbuf+1
+	store 1,mem_debuglog_dataval+1 
+	fetch 1,mem_lmi_opcode2
+	store 1,mem_debuglog_dataval
+	fetch 1,mem_lmi_opcode2
+	store 2,mem_debuglog_dataval
+	call debuglog_push 
+endif
+endif
+	branch parse_lmp+21
+
+p_process_upper_sm_reconn:
+	fetch 1,mem_upper_sm_reconn
+	rtn blank
+ifdef DEBUGLOG
+ifdef DEBUGLOG_UPPER_SM
+	call pdata_push
+	setarg DEBUGLOG_DTYPE_UPPER_SM
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_upper_sm_reconn
+	store 2,mem_debuglog_dataval
+	call pdata_pull
+	call debuglog_push	
+endif
+endif
+	branch process_upper_sm_reconn+3
+
+endif	
+
+endif
+	
+ifdef DEBUGLOG
+p_ui_ipc_send_event:
+ifdef DEBUGLOG
+ifdef DEBUGLOG_EVENT
+	call pdata_push
+	setarg DEBUGLOG_DTYPE_EVENT
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_fifo_temp
+	store 2,mem_debuglog_dataval
+	call pdata_pull
+	call debuglog_push	
+endif
+endif
+	branch ui_ipc_send_event+1
+
+p_ui_ipc_send_cmd:
+ifdef DEBUGLOG
+ifdef DEBUGLOG_CMD
+	call pdata_push
+	setarg DEBUGLOG_DTYPE_CMD
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_fifo_temp
+	store 2,mem_debuglog_dataval
+	call pdata_pull
+	call debuglog_push
+endif
+endif
+	branch ui_ipc_send_cmd+1
+endif
+
+power_ctrl_pac_succ_cnt_init:
+	jam 1,mem_power_ctrl_level
+	jam 0,mem_power_ctrl_pac_succ_cnt
+	rtn
+power_ctrl_pac_succ_incrs:
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	increase 1,pdata
+	store 1,mem_power_ctrl_pac_succ_cnt
+	rtn
+power_ctrl_pac_succ_decrs:
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	sub pdata,2,null
+	ncall power_ctrl_pac_succ_cnt_reinit,positive
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	rtneq 0
+	increase -1,pdata
+	store 1,mem_power_ctrl_pac_succ_cnt
+	rtn
+power_ctrl_pac_succ_cnt_reinit:
+	jam 3,mem_power_ctrl_pac_succ_cnt
+	rtn
+
+power_ctrl_start:
+ifdef MS_ALL_POWER
+	rtn
+endif
+	fetch 2,mem_ui_state_map
+	rtnbit1 UI_STATE_BLE_ADV
+	rtnbit1 UI_STATE_BT_RECONNECT
+	rtnbit1 UI_STATE_BT_DISCOVERY
+	
+	arg mem_rssi_signal_buf,rega
+	call p_rssi_average
+	storet 1,mem_rssi_avg_received
+
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	store 1,mem_debuglog_dataval
+	fetch 1,mem_rssi_avg_received
+	store 1,mem_debuglog_dataval+1
+	call debuglog_push	
+endif
+endif
+	setarg RSSI_DIS_MAX_24G
+	bmark1 mark_24g,power_ctrl_start_next
+	setarg RSSI_DIS_MAX_BLE
+power_ctrl_start_next:	
+	isub temp,null
+	nbranch power_ctrl_txpower_incrs_force,positive
+
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	sub pdata,2,null
+	nbranch power_ctrl_txpower_decrs_check,positive
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	beq 0,power_ctrl_txpower_incrs
+	rtn
+
+power_ctrl_txpower_decrs_check:
+	fetch 1,mem_power_ctrl_pac_succ_cnt
+	rtnne 32
+	jam 0,mem_power_ctrl_pac_succ_cnt
+power_ctrl_txpower_decrs:
+	fetcht 1,mem_rssi_avg_received
+	setarg RSSI_DIS_MIN_24G
+	bmark1 mark_24g,power_ctrl_txpower_decrs_next
+	setarg RSSI_DIS_MIN_BLE	
+power_ctrl_txpower_decrs_next:	
+	isub temp,null
+	nrtn positive
+	fetch 1,mem_power_ctrl_level
+	beq 0,power_ctrl_decrs_level0
+	increase -1,pdata
+	store 1,mem_power_ctrl_level
+	beq 0,power_ctrl_decrs_level0
+power_ctrl_decrs_level1:
+power_ctrl_incrs_level1:	//0dBm
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	setarg MISC_TXPOWER_1
+	store 2,mem_debuglog_dataval
+	call debuglog_push
+endif
+endif
+	jam TX_POWER_0DB,mem_tx_power
+	rtn
+
+power_ctrl_txpower_incrs_force:
+	jam 0,mem_power_ctrl_pac_succ_cnt
+power_ctrl_txpower_incrs:
+	fetch 1,mem_power_ctrl_level
+	beq 2,power_ctrl_incrs_level2
+	increase 1,pdata
+	store 1,mem_power_ctrl_level
+	beq 1,power_ctrl_incrs_level1
+power_ctrl_incrs_level2:	//+6dBm
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	setarg MISC_TXPOWER_2
+	store 2,mem_debuglog_dataval
+	call debuglog_push
+endif
+endif
+
+	jam TX_POWER_5DB,mem_tx_power
+	rtn
+	
+power_ctrl_decrs_level0: //-5dBm
+ifdef DEBUGLOG
+ifdef DEBUGLOG_MISC
+	setarg DEBUGLOG_DTYPE_MISC
+	store 2,mem_debuglog_datatype
+	setarg MISC_TXPOWER_0
+	store 2,mem_debuglog_dataval
+	call debuglog_push
+endif
+endif
+	jam TX_POWER_f5DB,mem_tx_power
+	rtn
+
+endif
+
+p_set_freq_tx:
+	storet 1,mem_last_freq
+	add temp,0,rega			/* index to frequency */
+	call rf_write_freq
+	setarg param_pll_setup	//128us
+	call sleep
+p_rf_tx_enable:
+	jam 0x1,rfen_adc
+	jam 0x3c,rfen_rx
+	jam 0xe0,rfen_tx
+	nop 10 /* wait LDOs to turn ON*/
+	jam 0x01, rfen_mdm
+	jam 0x3d, rfen_mdm
+	nop 10 /* wait tx blocks to turn ON*/
+	jam 0xb7,rfen_sn
+	nop 10 /* wait tx lo buffer to turn ON*/
+	jam 0x7d, rfen_mdm
+	fetch 1,mem_tx_power
+//	beq TX_POWER_0DB,p_set_tx_power_0db
+//	beq TX_POWER_3DB,p_set_tx_power_3db	
+	beq TX_POWER_5DB,p_set_tx_power_5db
+//	beq TX_POWER_f3DB,p_set_tx_power_f3db	
+	beq TX_POWER_f5DB,p_set_tx_power_f5db
+	beq TX_POWER_PAIR,p_set_tx_power_pair
+//	branch p_set_tx_power_0db
+p_set_tx_power_0db:
+	call p_rx_low_sens
+//	jam 0xba,0x894b
+	jam 0xd0,0x8955
+	jam 0xe0,0x8956
+//	jam 0x88,0x8957
+	jam 0x6c,0x8958
+//	jam 0x10,0x8959
+	branch set_tx_power_0db	
+
+//p_set_tx_power_3db:
+//	call p_rx_high_sens
+//	jam 0xba,0x894b
+//	jam 0xd0,0x8955
+//	jam 0xe0,0x8956
+//	jam 0x88,0x8957
+//	jam 0x3c,0x8958
+//	jam 0x10,0x8959
+//	branch set_tx_power_3db
+	
+p_set_tx_power_5db:
+	call p_rx_high_sens
+//	jam 0xba,0x894b
+	jam 0xd0,0x8955
+	jam 0xe0,0x8956
+//	jam 0x88,0x8957
+	jam 0x3c,0x8958
+//	jam 0x10,0x8959
+	branch set_tx_power_5db
+
+//p_set_tx_power_f3db:
+//	call p_rx_low_sens
+//	jam 0xba,0x894b
+//	jam 0xd0,0x8955
+//	jam 0xc0,0x8956
+//	jam 0x88,0x8957
+//	jam 0x6c,0x8958
+//	jam 0x10,0x8959
+//	branch set_tx_power_f3db
+	
+p_set_tx_power_f5db:
+	call p_rx_low_sens
+//	jam 0xba,0x894b
+	jam 0xd0,0x8955
+	jam 0xc0,0x8956
+//	jam 0x88,0x8957
+	jam 0x6c,0x8958
+//	jam 0x10,0x8959
+	branch set_tx_power_f5db
+
+p_rx_low_sens:
+	jam 0x5b,0x894c
+	jam 0x96,0x894d
+	jam 0x2c,0x894e 
+	jam 0x46,0x894f
+	rtn
+
+p_rx_high_sens:
+	jam 0xfb,0x894c 
+	jam 0xef,0x894d
+	jam 0xec,0x894e 
+	jam 0x5e,0x894f
+	rtn
+		
+p_set_tx_power_pair:	//50-100cm distance
+//	jam 0xba,0x894b
+ifdef MS_ALL_POWER	
+ 	jam 0xc5,0x8956
+else
+ 	jam 0xc2,0x8956
+endif
+	jam 0xd0,0x8955
+	rtn	
+
+p_shutdown_radio:
+	force 8,radio_ctrl
+	branch shutdown_radio+1
+
+ifdef XTAL_16M
+p_initialize_radio_cont:
+	jam 0xe6,0x8968				//XTAL_SELECT_24M:	0xe4
+	call initialize_radio_cont+1
+	jam clksel_dpll,core_clksel	//XTAL_SELECT_24M:	clksel_rc
+	rtn
+endif
+
+ifdef DEBUGLOG 
+pdata_push:
+	store 8,mem_debuglog_pdata
+	rtn
+
+pdata_pull:
+	fetch 8,mem_debuglog_pdata
+	rtn
+	
+debuglog_init:
+	call pdata_push
+	call debuglog_uart_init
+	call debuglog_mem_init
+	branch pdata_pull
+ 
+debuglog_uart_init:
+	/*step1:SET IO TX:GPIO6	RX:GPIO7*/
+	hfetch 1,core_gpio_sel1
+	set1 2,pdata
+	hstore 1,core_gpio_sel1 //Open UARTGPIO MUX
+	hfetch 4,core_gpio_pu0	 //RX pull up
+	set1 7,pdata
+	hstore 4,core_gpio_pu0
+	
+	/*step2:sel UARTclk bit0	=0:crystal	 =1:48M*/
+	hfetch 1,core_uart_clksel
+	set1 0,pdata
+	hstore 1,core_uart_clksel
+
+	/*step3:Enable uart clk
+	core_clkoff(0x8050)bit15 = 0,Enable uart clk*/
+	hfetch 2,core_clkoff
+	set0 0x0f,pdata
+	hstore 2,core_clkoff
+
+	/*step3:Set Ring Buffer*/
+	setarg mem_module_rx_buf		//RX buf Start Addr
+	hstore 2,core_uart_rsaddr
+
+	setarg mem_module_rx_buf_end	//RX buf End Addr
+	hstore 2,core_uart_readdr
+
+	setarg mem_module_tx_buf		//TX BUF Start Addr
+	hstore 2,core_uart_tsaddr
+
+	setarg mem_module_tx_buf_end	//TX buf End Addr
+	hstore 2,core_uart_teaddr
+	
+	setarg mem_module_rx_buf		//RX buf RPTR
+	hstore 2,core_uart_rrptr
+
+	setarg mem_module_tx_buf		//TX buf WPTR
+	hstore 2,core_uart_twptr
+
+	hstore 2,core_uart_trptrp		//TX buf RPTR
+
+	/*step4:SET baud*/
+	//hstore 2,mem_baud
+	setarg 0x34
+	hstore 2,core_uart_baud
+
+	/*step5:SET DataLen,parity bit,flow control and enable UART
+	RW	0	Enable UART
+	RW	1	1: odd parity; 0: even parity
+	RW	2	UART Data length 1: 9 bits; 0: 8 bits
+	RW	3	1: HCI uart SLIP protocol
+	RW	4	1: enable RTS/CTS flow control
+	RW	5	1: enable 7816 smart card protocol
+	RW	6	1: enable half duplex single line UART
+	RW	7	1: Use baud settings 0:auto detect baud rate*/
+	jam 0x00,core_uart_ctrl
+	jam 0x81,core_uart_ctrl
+	rtn 
+
+debuglog_mem_init:
+	jam DEBUGLOG_HEAD,mem_debuglog_temp
+	jam DEBUGLOG_TYPE,mem_debuglog_type
+	jam DEBUGLOG_LEN ,mem_debuglog_datalen
+	jam DEBUGLOG_TAIL,mem_debuglog_tail
+	rtn	
+
+debuglog_push:
+	call pdata_push
+	hfetch 1,core_uart_status
+	rtnbit1 uart_status_tx_fifo_full
+	call uartd_prepare_tx
+	fetch 8,mem_debuglog_temp
+	istore 8,contwu
+	call uartd_send
+	branch pdata_pull 
+endif
+
+ifdef RF_DEBUG
+test_gpio_init:
+	arg TEST_GPIO,temp
+	call gpio_config_output
+test_gpio_low:
+	arg TEST_GPIO,temp
+	call gpio_out_active
+	nop 10
+	rtn
+test_gpio_high:
+	arg TEST_GPIO,temp
+	call gpio_out_inactive
+	nop 10
+	rtn
+
+test_h_l:
+	call test_gpio_high
+	branch test_gpio_low
+test_h_l_h:
+	call test_gpio_high
+	call test_gpio_low	
+	branch test_gpio_high
+endif
+
+ifdef MOUSE_SMOOTHER
+//notice: need to call p_mouse_drawing_optima_init when waked from mult
+p_drawing_optima_init:
+	arg 5,loopcnt
+	arg mem_mouse_asm_flag,contw
+	branch clear_mem
+
+p_drawing_optima:
+	fetch 4,mem_mouse_x
+	rtn blank
+	call p_data_abs_check
+	setarg 0x06	//asm_flag enable condition
+	call p_data_greater_than_check
+	setarg 0x03	//asm_flag disable condition
+	call p_data_less_than_check
+	fetch 1,mem_mouse_asm_flag
+	beq 1,p_drawing_optima_modify
+	branch p_drawing_optima_init
+
+p_drawing_optima_modify:
+	fetch 2,mem_mouse_x_pre
+	store 2,mem_data_pre
+	fetch 2,mem_mouse_x
+	store 2,mem_data_current
+	call p_drawing_optima_data
+	fetch 2,mem_data_pre
+	store 2,mem_mouse_x_pre
+	fetch 2,mem_data_current
+	store 2,mem_mouse_x
+
+	fetch 2,mem_mouse_y_pre
+	store 2,mem_data_pre
+	fetch 2,mem_mouse_y
+	store 2,mem_data_current
+	call p_drawing_optima_data
+	fetch 2,mem_data_pre
+	store 2,mem_mouse_y_pre
+	fetch 2,mem_data_current
+	store 2,mem_mouse_y
+	rtn
+
+/**********
+input:data_pre,data_current
+output:data_pre,data_current after optima
+***********/
+p_drawing_optima_data:
+	fetch 2,mem_data_pre
+	fetcht 2,mem_data_current
+	iadd temp,pdata
+	store 3,mem_data_sum
+	isolate1 16,pdata
+	branch p_data_sum_overflow,true
+	fetch 1,mem_data_sum+1
+	beq 0xff,p_data_sum_n
+	fetch 1,mem_data_sum
+p_data_store_pre:
+	rshift pdata,pdata
+	store 2,mem_data_pre
+	store 2,mem_data_current
+	rtn
+p_data_sum_overflow:
+	fetch 1,mem_data_sum+1	//sum positive
+	beq 0,p_data_sum_overflow_p
+	fetch 3,mem_data_sum	//鍏ㄨ礋鐩稿姞
+	branch p_data_store_pre
+p_data_sum_overflow_p:
+	jam 0,mem_data_sum+2
+	fetch 1,mem_data_sum
+	branch p_data_store_pre
+
+p_data_sum_n:
+	fetch 1,mem_data_sum	//sum negetive
+	call p_pdata_get_half
+	store 1,mem_data_pre
+	store 1,mem_data_current
+	branch p_data_zero,blank
+	setarg 0xff
+p_data_set_direction:	
+	store 1,mem_data_pre+1
+	store 1,mem_data_current+1
+	rtn
+p_data_zero:
+	setarg 0
+	branch p_data_set_direction
+
+p_pdata_get_half:
+	sub pdata,0,pdata
+	store 1,mem_rega
+	fetch 1,mem_rega
+	rshift pdata,pdata
+	store 1,mem_rega
+	fetch 1,mem_rega
+	sub pdata,0,pdata
+	rtn
+
+//rega mouse_x, regb mouse_y, pdata refer
+p_data_greater_than_check:
+	isub rega,null
+	nbranch p_enable_asm,positive
+	isub regb,null
+	nbranch p_enable_asm,positive
+p_disable_asm:
+	jam 0,mem_mouse_asm_flag
+	rtn
+p_data_less_than_check:
+	isub rega,null
+	nrtn positive
+	isub regb,null
+	nrtn positive
+	branch p_disable_asm
+p_enable_asm:
+	jam 1,mem_mouse_asm_flag
+	rtn
+
+p_data_abs_check:
+	fetch 2,mem_mouse_x
+	store 2,mem_data_current
+	call p_data_abs
+	copy pdata,rega
+	fetch 2,mem_mouse_y
+	store 2,mem_data_current
+	call p_data_abs
+	copy pdata,regb
+	rtn
+
+/***********
+input: data_current
+output:pdata,abs
+************/
+p_data_abs:
+	fetch 1,mem_data_current+1
+	beq 0xff,p_data_reversal
+	fetch 1,mem_data_current
+p_data_abs_store:
+	and_into 0xff,pdata
+	//output:pdata
+	rtn
+p_data_reversal:
+	fetch 2,mem_data_current
+	sub pdata,0,pdata
+	branch p_data_abs_store
+
+endif
+
+ifdef MS_MATRIX
+//1 mem_m_key
+//2 mem_m_x
+//2 mem_m_y
+//1 mem_m_z
+//1 mem_m_tz
+//1 mem_24g_matrix_cnt
+p_g24_matrix_data:
+	fetch 1,mem_24g_matrix_cnt
+	increase 1,pdata
+	store 1,mem_24g_matrix_cnt
+	sub pdata,50,null
+	branch p_ms_x_right,positive
+	sub pdata,100,null
+	branch p_ms_y_up,positive
+	sub pdata,150,null
+	branch p_ms_x_left,positive
+	sub pdata,200,null
+	branch p_ms_y_down,positive
+	rtn
+p_ms_x_right:
+	setarg 0x05
+	store 2,mem_m_x
+	setarg 0
+	store 2,mem_m_y
+	store 1,mem_m_z
+	store 1,mem_m_key
+	store 1,mem_m_tz
+p_data:	
+	enable user
+	arg 7,rega
+	arg mem_m_key,regb
+	rtn
+p_ms_y_up:
+	setarg 0x05
+	store 2,mem_m_y
+	setarg 0
+	store 2,mem_m_x
+	store 1,mem_m_z
+	store 1,mem_m_key
+	store 1,mem_m_tz
+	branch p_data
+p_ms_x_left:
+	setarg 0xfffb
+	store 2,mem_m_x
+	setarg 0
+	store 2,mem_m_y
+	store 1,mem_m_z
+	store 1,mem_m_key
+	store 1,mem_m_tz
+	branch p_data
+p_ms_y_down:
+	fetch 1,mem_24g_matrix_cnt
+	beq 200,p_mem_usb_data_square_cnt_set0
+	setarg 0xfffb
+	store 2,mem_m_y
+	setarg 0
+	store 2,mem_m_x
+	store 1,mem_m_z
+	store 1,mem_m_key
+	store 1,mem_m_tz
+	branch p_data
+p_mem_usb_data_square_cnt_set0:
+	jam 0,mem_24g_matrix_cnt
+	branch p_ms_y_down+2
+endif
+ifdef MEMLOG
+p_hci_log:
+	fetch 1,0x4d00
+	increase 1,pdata
+	sub pdata,50,null
+	branch p_hci_log_calc_ptr,positive
+	setarg 0
+p_hci_log_calc_ptr:
+	store 1,0x4d00
+	arg 8,temp
+	imul32 temp,pdata
+	arg 0x4d08,contw
+	iadd contw,contw
+p_hci_log_write_content:
+	fetch 1,0x4d00
+	istore 1,contw//counter
+	fetch 4,mem_le_supervision_timer
+	istore 4,contw
+	fetch 2,mem_le_superto
+	istore 2,contw	
+	rtn
+endif	
+
+endif
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/peripherals.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/peripherals.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/peripherals.prog	(working copy)
@@ -0,0 +1,2440 @@
+
+/* ===================== two wire SPI gpio ======================= */
+
+twspi_reset:
+	bpatchx patch31_4,mem_patch31
+	hfetch 1,core_gpio_oe3
+	arg 0x06,temp
+	ior temp,pdata
+	hstore 1,core_gpio_oe3
+	hfetch 1,core_gpio_out3
+	ior temp,pdata
+	hstore 1,core_gpio_out3
+	call twspi_disable
+	hfetch 1,core_gpio_out3
+	set0 1,pdata
+	set0 2,pdata
+	hstore 1,core_gpio_out3	
+	nop 30  
+	branch twspi_enable
+
+twspi_reset2:
+	hfetch 1,core_gpio_oe3
+	arg 0xc0,temp
+	ior temp,pdata
+	hstore 1,core_gpio_oe3
+	hfetch 1,core_gpio_out3
+	ior temp,pdata
+	hstore 1,core_gpio_out3
+	call twspi_disable
+	hfetch 1,core_gpio_out3
+	set0 6,pdata
+	set0 7,pdata
+	hstore 1,core_gpio_out3	
+	nop 30  
+	branch twspi_enable2
+
+twspi_disable:
+	hfetch 1,core_gpio_sel1
+	and pdata,0xfc,pdata
+	hstore 1,core_gpio_sel1  //disable spi
+	rtn
+twspi_enable:
+	hfetch 1,core_gpio_sel1
+	or pdata,0x01,pdata
+	hstore 1,core_gpio_sel1  //enable spi
+	rtn
+twspi_enable2:
+	hfetch 1,core_gpio_sel1
+	or pdata,0x03,pdata
+	set0 4,pdata
+	hstore 1,core_gpio_sel1  //enable spi2
+	rtn
+
+// input read reg number: pdata 
+//output reg data: pdata
+sensor_read:
+	copy pdata,regb
+	call spi_ncs_enable
+	nop 100
+	copy regb,pdata
+	call twspi_read
+	copy pdata,regb
+	call spi_ncs_disable
+	nop 100
+	copy regb,pdata
+	rtn
+// input write reg number: pdata 
+sensor_write:
+	copy pdata,regb
+	call spi_ncs_enable
+	nop 100
+	copy regb,pdata
+	call twspi_write
+	call spi_ncs_disable
+	nop 100
+	rtn
+//spi gpio init .
+//0xff :disable spi ncs gpio init
+spi_ncs_gpio_init:
+	fetcht 1,mem_spi_ncs_gpio
+	branch gpio_config_output
+
+//nsc gpio ouput low
+spi_ncs_enable:
+	fetcht 1,mem_spi_ncs_gpio
+	branch gpio_out_active
+
+//ncs gpio output high
+spi_ncs_disable:
+	fetcht 1,mem_spi_ncs_gpio
+	branch gpio_out_inactive
+
+
+twspi_write:
+	branch spid_write_reg
+	
+twspi_read:
+	branch spid_read_reg
+
+
+
+/* ===================== code loading ======================= */
+
+
+read_function_aes:
+	nbranch read_function,user
+	hfetch 1,core_gpio_key2
+	or_into 0x2,pdata   	// enable aes 
+	hstore 1,core_gpio_key2
+read_function:
+	copy temp,null
+	branch read_fuction_zero,zero
+	copy regc,pc
+read_fuction_zero:
+	isolate0 0,null
+	branch set_ucode_status
+	
+/* return temp = block length */
+get_block_header:
+	force 4,temp
+get_block_header0:
+	arg mem_ucode_buf,rega
+	hfetch 1,core_gpio_key2
+	and_into 0xfd,pdata   	// disable aes for header
+	hstore 1,core_gpio_key2
+	call read_function
+	arg 0x55aa,rega
+	fetch 2,mem_ucode_buf
+	ifetcht 2,contr
+	isub rega,null
+	rtn	
+
+read_first_block:
+	arg 2,temp
+	arg mem_ucode_ptr,rega
+	call read_function
+	fetch 2,mem_ucode_ptr
+	store 2,mem_addr_mi
+	call get_iv,user
+	rtn
+	
+get_iv:
+	arg 16,temp
+	arg mem_ucode_keybuf,rega
+	hfetch 1,core_gpio_key2
+	and_into 0xfd,pdata   // disable aes for iv
+	hstore 1,core_gpio_key2
+	call read_function
+	arg mem_ucode_keybuf,contr
+	arg 16,loopcnt
+	call aes_load_data
+	call aes_init
+	call aes_clear_data
+	branch do_aes_cbc					/* generate first IV */
+
+load_storage:
+	disable match
+	call get_block_header
+	nrtn zero
+	enable match
+	jam 0x80, core_ucode_ctrl
+	jam 0,core_ucode_hi
+	jam 0,core_ucode_low
+	arg core_ucode_data,rega
+	call read_function_aes
+	jam 0x0, core_ucode_ctrl
+load_storage_loop:
+	arg 6,temp
+	call get_block_header0
+	nrtn zero
+	ifetch 2,contr
+	iforce rega
+	call read_function
+	branch load_storage_loop
+
+	
+	/* only load memory data from eeprom */
+reload_eeprom:
+	call clean_mem
+	setarg 0x1000
+	store 2,mem_addr_mi
+	arg iicd_read_eep,regc
+	arg 2,loopcnt
+reload_eeprom_loop:
+	call get_block_header
+	nrtn zero
+	fetch 2,mem_addr_mi
+	byteswap pdata,pdata
+	iadd temp,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+	loop reload_eeprom_loop
+	branch load_storage_loop
+	
+loadcode:
+	call clean_mem
+	disable user
+	call otp_enable_chgpump
+	setarg otp_ucode_flag
+	arg mem_otp_ucode_flag,rega
+	arg 2,temp
+	call otpd_read_data
+	fetch 2,mem_otp_ucode_flag
+	bbit0 otp_uflag_aes, loadcode_otp
+	jam 0x25,core_clkoff			// disable debug uart
+	setarg otp_ucode_aeskey
+	arg mem_ucode_keybuf,rega
+	arg 16,temp
+	call otpd_read_data
+	jam lock_otp,core_misc_ctrl	// disable further read/write of key
+	set1 mark_otp_encrypt,mark	
+	arg mem_ucode_keybuf,contr
+	call load_key
+	enable user					// set user for aes
+loadcode_otp:
+	jam 0,mem_loadcode_times
+loadcode_otp_2:
+	call loadcode_check_times
+	fetch 2,mem_otp_ucode_flag
+	byteswap pdata,pdata
+	arg 0x7ff,temp
+	iand temp,pdata
+	branch loadcode_iic, zero
+	call otp_set_addr
+	arg otpd_read_code,regc
+	call get_iv,user
+	call load_storage
+	fetch 1,mem_ucode_status
+	bbit0 0,loadcode_otp_2			// crc error, try again
+	
+loadcode_iic:
+	call otp_disable_chgpump
+	jam 0,mem_loadcode_times
+loadcode_iic_2:	
+	call loadcode_check_times
+	call clear_eeprom_size_2k
+	fetch 1,mem_otp_ucode_flag
+	bbit1 otp_uflag_skip_eep,loadcode_spi
+	call loadcode_iic_by_eeprom
+	nbranch loadcode_iic_eeprom_2k,match
+	fetch 1,mem_ucode_status
+	bbit0 0,loadcode_iic_2			// crc error, try again
+	branch loadcode_hci
+loadcode_iic_eeprom_2k:
+	call set_eeprom_size_2k
+	fetch 1,mem_otp_ucode_flag
+	bbit1 otp_uflag_skip_eep,loadcode_spi
+	call loadcode_iic_by_eeprom
+	nbranch loadcode_spi,match
+	fetch 1,mem_ucode_status
+	bbit0 0,loadcode_iic_2			// crc error, try again
+	branch loadcode_hci
+	
+loadcode_spi:
+	jam 0,mem_loadcode_times
+loadcode_spi_2:
+	call loadcode_check_times
+	fetch 1,mem_otp_ucode_flag
+	bbit1 otp_uflag_skip_flash, loadcode_hci
+	setarg 0x0
+	store 3,mem_addr_hi
+	call spid_init_flash
+	arg spid_load_flash,regc
+	call read_first_block
+	call load_storage
+	nbranch loadcode_hci,match
+	fetch 1,mem_ucode_status
+	bbit0 0,loadcode_spi_2			// crc error, try again
+
+loadcode_hci:
+	bmark1 mark_otp_encrypt,loadcode_hci_enc
+	call clear_key_buf
+loadcode_hci_enc:
+	fetch 1,mem_otp_ucode_flag
+	bbit0 otp_uflag_hci,clear_key_buf
+	jam 0x21,core_clkoff			// enable debug uart
+	call hci_init
+loadcode_hci_loop:
+	call hci_rx_packet
+	branch loadcode_hci_loop
+
+clear_key_buf:
+	setarg 0
+	store 8,mem_ucode_keybuf
+	store 8,mem_ucode_keybuf+8
+	force regidx_key,regext_index
+	call aes_clear
+	jam 0x21,core_clkoff		// enable debug uart
+	rtn
+	
+
+loadcode_iic_by_eeprom:
+	setarg 0x0
+	store 2,mem_addr_mi
+	arg iicd_read_eep,regc
+	call iicd_init_12m
+	call read_first_block
+	branch load_storage
+
+
+loadcode_check_times:
+	fetch 1,mem_loadcode_times
+	increase 1,pdata
+	sub pdata,3,null
+	nbranch loadcode_error,positive
+	store 1,mem_loadcode_times
+	rtn
+
+loadcode_error:
+	call clear_key_buf
+	call ice_break
+	rtn
+
+
+/* true flag is set into status */
+set_ucode_status:
+	fetch 1,mem_ucode_status
+	lshift pdata,pdata
+	setflag true,0,pdata
+	isolate0 15,rega
+	rtn true
+	store 1,mem_ucode_status
+	rtn
+
+	/* queue is bit position of hw done status */
+decrypt_code:
+	hfetch 1,core_gpio_key2
+	rtnbit0 1
+	branch decrypt_code_skip	/* skip to key generation at first for speed */
+decrypt_code_loop:
+	hfetch 1,core_dma_status
+	qisolate1 pdata
+	rtn true
+decrypt_code_skip:
+	hfetch 1,core_misc_status
+	bbit0 1,decrypt_code_loop
+	call do_aes_cbc
+	branch decrypt_code_loop
+
+
+
+load_ucode:
+	fetch 2,mem_patch_ptr
+	rtn blank
+	jam 0x80, core_ucode_ctrl
+	jam 0,core_ucode_hi
+	jam 0,core_ucode_low
+	fetcht 2,mem_patch_len
+	lshift2 temp,loopcnt
+	iforce contr
+load_ucode_loop:
+	ifetch 1,contr
+	hstore 1,core_ucode_data
+	loop load_ucode_loop
+	jam 0x0, core_ucode_ctrl
+	rtn
+
+
+/* ===================== SPI dma ======================= */
+
+spid_init:
+	bpatchx patch31_5,mem_patch31
+	call spid_init_common
+	branch twspi_enable
+
+spid_init2:
+	call spid_init_common
+	call twspi_disable
+	branch twspi_enable2
+	
+spid_init_common:
+	fetch 1,mem_spi_init_clk
+	hstore 1,core_spid_ctrl	// A7530 should at least 34, or write fail
+	fetch 1,mem_spi_init_delay_time
+	hstore 1,core_spid_delay	// 4us delay
+	setarg mem_spid_tbuf
+	hstore 2,core_spid_txaddr
+	setarg mem_spid_rbuf
+	hstore 2,core_spid_rxaddr
+	branch twspi_disable
+	
+spid_reset:
+	hfetch 1,core_spid_ctrl
+	set1 7,pdata
+	hstore 1,core_spid_ctrl
+	set0 7,pdata
+	hstore 1,core_spid_ctrl
+	rtn
+
+
+/* pdata 6:0 is reg address, 15:8 is data to write */
+spid_write_reg:
+	set1 7,pdata
+	store 2,mem_spid_tbuf
+	bpatchx patch31_6,mem_patch31
+	jam 2,core_spid_txlen
+	jam 0,core_spid_rxlen
+	jam spid_start,core_misc_ctrl
+	branch wait_spid_done
+
+/* pdata 6:0 is reg address */
+spid_read_reg:
+	force 1,temp
+/* pdata 6:0 is burst reg address, temp is bytes to read */
+spid_read_regs:
+//	nop 100
+	store 1,mem_spid_tbuf
+	bpatchx patch31_7,mem_patch31
+	jam 1,core_spid_txlen
+	hstoret 2,core_spid_rxlen
+	jam spid_start,core_misc_ctrl
+	call wait_spid_done
+	fetch 1,mem_spid_rbuf
+	rtn
+
+wait_spid_done:
+	fetch 2,mem_afh_error_total
+	increase 1,pdata
+	store 2,mem_afh_error_total
+	hfetch 1,core_dma_status
+	bbit0 spid_done,wait_spid_done
+	rtn
+
+spid_init_flash:
+	jam 0x40,core_spid_ctrl
+	jam 0x0,core_spid_delay
+	hfetch 1,core_gpio_sel1
+	set0 0,pdata
+	set1 1,pdata
+	hstore 1,core_gpio_sel1
+	setarg 0
+	store 4,mem_spid_tbuf
+	rtn
+
+
+spid_unlock_flash:
+	setarg 0
+	hstore 2,core_spid_rxlen
+	setarg 1
+	hstore 2,core_spid_txlen
+	setarg mem_spid_tbuf
+	hstore 2,core_spid_txaddr
+	jam 6,mem_spid_tbuf
+	jam spid_start,core_misc_ctrl
+	branch wait_spid_done
+
+
+/**
+ ******************************************************************************
+ ** \brief  write flash
+ **
+ ** \param [in]  rega: 2byte write ptr    
+ **			pdata:3byte flash address  
+ ** 			temp:2byte write data length
+ **
+ ** \retval user  0: flash buys 1:write flash setting complate
+ **
+ ******************************************************************************/
+
+flash_write:
+	disable user
+	copy pdata,regb
+	fetch 1,mem_spi_write_flash_sm
+	rtnne FLASH_SM_NO_BUYS
+	enable user
+	copy regb,pdata
+	branch flash_write_start
+
+
+flash_write_spi_sm_timer:
+	fetch 1,mem_spi_write_flash_sm 	
+	beq FLASH_SM_START,flash_write_start
+	beq FLASH_SM_ERASE_SECTOR,flash_erase_sector
+	beq FLASH_SM_WAIT_ERASE_SECTOR,flash_wait_erase_sector
+	beq FLASH_SM_WRITE_DATA,flash_write_data
+	beq FLASH_SM_WAIT_WRITE_DATA,flash_wait_write_data
+	rtn
+
+flash_write_start:
+	store 3,mem_spi_write_addr
+	copy rega,pdata
+	store 2,mem_spi_write_ptr
+	storet 2,mem_spi_write_len
+	jam FLASH_SM_ERASE_SECTOR,mem_spi_write_flash_sm
+	branch spid_init_flash
+flash_erase_sector:
+	call spid_init_flash
+	jam FLASH_SM_WAIT_ERASE_SECTOR,mem_spi_write_flash_sm
+	call spid_unlock_flash
+	arg mem_spid_tbuf,rega
+	fetch 3,mem_spi_write_addr
+	jam 4,core_spid_txlen
+	arg FLASH_COMMAND_SECTOR_ERASE,temp
+	branch spid_write_flash_common
+	
+flash_wait_erase_sector:
+	call spid_init_flash
+	call spid_unlock_flash
+	setarg FLASH_READ_SATUS
+	call spid_read_reg
+	rtnbit1 FLASH_STATUS_WIP
+	jam FLASH_SM_WRITE_DATA,mem_spi_write_flash_sm
+	rtn
+flash_write_data:
+	call spid_init_flash
+	jam FLASH_SM_WAIT_WRITE_DATA,mem_spi_write_flash_sm
+	call spid_unlock_flash
+	call flash_data_preserve
+	call spid_write_flash
+	branch flash_data_recover
+flash_wait_write_data:
+	call spid_init_flash
+	call spid_unlock_flash
+	setarg FLASH_READ_SATUS
+	call spid_read_reg
+	rtnbit1 FLASH_STATUS_WIP
+	jam FLASH_SM_NO_BUYS,mem_spi_write_flash_sm
+	fetch 2,mem_cb_spi_flash_write_complate
+	branch callback_func
+flash_data_recover:
+	fetch 4,mem_temp
+	fetcht 2,mem_spi_write_ptr
+	increase -4,temp
+	istore 4,temp
+	rtn
+flash_data_preserve:
+	fetcht 2,mem_spi_write_ptr
+	copy temp,rega
+	increase -4,temp
+	ifetch 4,temp
+	store 4,mem_temp
+	fetcht 2,mem_spi_write_len
+	fetch 3,mem_spi_write_addr
+	rtn
+
+
+/* pdata is flash address, rega pointers to txdata(4 ahead bytes should be left), temp is length */
+spid_write_flash:
+	increase 4,temp
+	hstoret 2,core_spid_txlen
+	arg FLASH_COMMAND_WRITE_DATA,temp
+	increase -4,rega
+spid_write_flash_common:
+
+	istoret 1,rega
+	rshift16 pdata,temp
+	istoret 1,contw
+	rshift8 pdata,temp
+	istoret 1,contw
+	istore 1,contw
+	deposit rega
+	hstore 2,core_spid_txaddr
+	setarg 0
+	hstore 2,core_spid_rxlen
+	jam spid_start,core_misc_ctrl
+	branch wait_spid_done
+
+
+/* temp is length, rega pointers to buf   */
+spid_read_flash:
+	hstoret 2,core_spid_rxlen
+	rshift16 pdata,temp
+	storet 1,mem_addr_hi
+	rshift8 pdata,temp
+	storet 1,mem_addr_mi
+	store 1,mem_addr_lo
+	setarg 4
+	hstore 2,core_spid_txlen
+	jam FLASH_COMMAND_READ_DATA,mem_spid_tbuf
+	setarg mem_spid_tbuf
+	hstore 2,core_spid_txaddr
+	deposit rega
+	hstore 2,core_spid_rxaddr
+	hfetch 1,core_spid_ctrl
+	isolate0 15,rega
+	setflag true,6,pdata
+	hstore 1,core_spid_ctrl
+	jam spid_start,core_misc_ctrl
+spi_read_flash_wait:
+	hfetch 1,core_dma_status
+	bbit1 7,spi_read_flash_wait			// waiting for spid write
+	arg spid_done,queue
+	branch wait_spid_done
+
+
+/* temp is length, rega pointers to buf  */
+spid_load_flash:
+	hstoret 2,core_spid_rxlen
+	setarg 4
+	hstore 2,core_spid_txlen
+	jam 3,mem_spid_tbuf
+	setarg mem_spid_tbuf
+	hstore 2,core_spid_txaddr
+	deposit rega
+	hstore 2,core_spid_rxaddr
+	hfetch 1,core_spid_ctrl
+	isolate0 15,rega
+	setflag true,6,pdata
+	hstore 1,core_spid_ctrl
+	jam spid_start,core_misc_ctrl
+spi_load_flash_wait:
+	hfetch 1,core_dma_status
+	bbit1 7,spi_load_flash_wait			// waiting for spid write
+	arg spid_done,queue
+	call decrypt_code
+	call wait_spid_done
+	isolate1 spid_crcok,pdata
+	call set_ucode_status
+	fetch 1,mem_addr_hi
+	lshift16 pdata,regb
+	fetch 1,mem_addr_mi
+	lshift8 pdata,pdata
+	ior regb,regb
+	fetch 1,mem_addr_lo
+	ior regb,pdata
+	iadd temp,pdata
+	store 1,mem_addr_lo
+	rshift8 pdata,pdata
+	store 1,mem_addr_mi
+	rshift8 pdata,pdata
+	store 1,mem_addr_hi
+	rtn
+
+/*****************************************************************************
+*soft reset chip
+*****************************************************************************/
+soft_reset_chip:
+	jam 1,core_reset
+	rtn
+
+
+
+/* ===================== I2C dma ======================= */
+
+iic_init_390k:	//390khz
+	jam 12,core_iicd_scl_low
+	jam 13,core_iicd_scl_high
+	jam 13,core_iicd_start_setup
+	jam 13,core_iicd_start_hold
+	jam 13,core_iicd_stop_setup
+	jam 12,core_iicd_data_setup
+  	branch iicd_init_gpio	
+
+
+iicd_init_12m:
+	jam 5,core_iicd_scl_low
+ 	jam 7,core_iicd_scl_high
+	jam 7,core_iicd_start_setup
+	jam 7,core_iicd_start_hold
+	jam 7,core_iicd_stop_setup
+	jam 5,core_iicd_data_setup
+iicd_init_gpio:	
+	hfetch 1,core_gpio_pu3
+	or_into 0xc0,pdata
+	hstore 1,core_gpio_pu3
+	hfetch 1,core_gpio_sel1
+	or_into 0x10,pdata
+	hstore 1,core_gpio_sel1
+	rtn
+
+
+
+wait_iicd_done:
+	hfetch 1,core_dma_status
+	bbit0 iicd_done,wait_iicd_done
+	rtn
+
+/*
+pdata is tx length
+rega is points to tx buffer
+regb is points to rx buffer
+temp is rx length
+*/
+iicd_read_data:
+	hstore 2,core_iicd_txlen
+	deposit rega
+	hstore 2,core_iicd_txaddr	
+	deposit regb
+	hstore 2,core_iicd_rxaddr
+	deposit temp	
+	hstore 2,core_iicd_rxlen
+	arg 1,temp
+	nsetflag blank,1,temp
+	hstore 1,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	branch wait_iicd_done
+
+
+set_eeprom_size_2k:
+	set1 mark_eeprom_size,mark
+	jam 0x08,mem_eeprom_block_size
+	rtn
+
+clear_eeprom_size_2k:
+	set0 mark_eeprom_size,mark
+	jam 0x20,mem_eeprom_block_size
+	rtn
+
+
+iicd_read_eep_data_size_2k:
+ 	fetch 1,mem_eeprom_base
+	iadd regb,pdata
+	store 1,mem_addr_mi
+	branch iicd_read_eep_size_2k
+
+iicd_read_eep_size_2k_lcadcode:
+	fetch 2,mem_addr_mi
+	byteswap pdata,pdata
+	store 1,mem_addr_mi
+	
+//length:temp 
+//mem ptr:rega
+//eeprom addr:pdata
+iicd_read_eep_size_2k:
+ 	setarg 3
+	hstore 2,core_iicd_txlen
+	jam 0xa0,mem_iicd_tbuf
+	jam 0xa1,mem_iicd_tbuf+2
+	branch iicd_read_eep_common
+
+
+//length:temp 
+//mem ptr:rega
+//eeprom addr:regb
+iicd_write_protect_eep_data:
+	storet 2,mem_temp
+	call iicd_eeprom_write_enable
+	fetcht 2,mem_temp
+	call iicd_write_eep_data
+	branch iicd_eeprom_write_disable
+	
+iicd_eeprom_write_enable:
+	fetch 1,mem_eeprom_wp_gpio
+	rtneq GPIO_DISABLE
+	bbit0 6,iicd_wp_gpio_output_low
+	setarg 150000
+	call sleep
+iicd_wp_gpio_output_low:
+	fetcht 1,mem_eeprom_wp_gpio
+	branch gpio_out_active
+	
+iicd_eeprom_write_disable:
+	fetcht 1,mem_eeprom_wp_gpio
+	branch gpio_out_inactive
+	
+//length:temp 
+//mem ptr:rega
+//eeprom addr offset:regb
+iicd_read_eep_data:
+	bpatchx patch32_0,mem_patch32
+	bmark1 mark_eeprom_size,iicd_read_eep_data_size_2k
+	fetch 2,mem_eeprom_base
+	iadd regb,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+
+/* rega pointers to buf, temp is length  */
+iicd_read_eep:
+	bpatchx patch32_1,mem_patch32
+	bmark1 mark_eeprom_size,iicd_read_eep_size_2k_lcadcode
+	setarg 4
+	hstore 2,core_iicd_txlen
+	jam 0xa0,mem_iicd_tbuf
+	jam 0xa1,mem_iicd_tbuf+3
+iicd_read_eep_common:	
+	setarg mem_iicd_tbuf
+	hstore 2,core_iicd_txaddr
+	hstoret 2,core_iicd_rxlen
+	deposit rega
+	hstore 2,core_iicd_rxaddr
+	setarg 2
+	isolate0 15,rega
+	setflag true,0,pdata
+	hstore 1,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	arg iicd_done,queue
+	call decrypt_code
+	call wait_iicd_done
+	isolate1 iicd_crcok,pdata
+	call set_ucode_status
+	bmark1 mark_eeprom_size,iicd_read_eep_load_code_size_2k
+	fetch 2,mem_addr_mi
+	byteswap pdata,pdata
+	iadd temp,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+	rtn
+
+iicd_read_eep_load_code_size_2k:
+	fetch 1,mem_addr_mi
+	iadd temp,pdata
+	byteswap pdata,pdata
+	store 2,mem_addr_mi
+	rtn
+	
+
+//length:temp 
+//mem ptr:rega
+//eeprom addr offset:regb
+iicd_write_eep_data:
+	fetch 2,mem_eeprom_base
+	iadd regb,pdata
+
+//cuur ptr:pdata length:temp buf:rega
+iicd_write_ota_data:
+	store 2,mem_pdatatemp //curr ptr
+	bpatchx patch32_2,mem_patch32
+	storet 2,mem_temp	//len
+	copy rega,pdata
+	store 2,mem_contr
+iicd_write_eep_loop:
+	call iicd_eep_transparency
+
+	fetcht 2,mem_regb
+	fetch 2,mem_contr
+	copy pdata,rega
+	fetch 2,mem_pdatatemp
+	
+	call iicd_write_eep
+	
+	fetch 2,mem_regb
+	fetcht 2,mem_contr
+	iadd temp,temp
+	storet 2,mem_contr
+	fetcht 2,mem_pdatatemp
+	iadd temp,temp
+	storet 2,mem_pdatatemp
+	fetch 2,mem_temp
+	nbranch iicd_write_eep_loop,blank
+	rtn
+	
+//in:
+//1.size 2.len 3.src 4.des
+//mem_regc page's area
+//mem_pdatatemp curr ptr
+//mem_temp all len      
+//mem_regb curr len
+iicd_eep_transparency:
+	bpatchx patch32_3,mem_patch32
+	fetch 1,mem_eeprom_block_size
+	increase -1,pdata
+	fetcht 2,mem_pdatatemp
+	ior temp,pdata
+	increase 1,pdata
+	store 3,mem_regc
+
+	fetch 2,mem_temp
+	iadd temp,pdata
+
+	fetcht 3,mem_regc
+	isub temp,pdata
+	nbranch iicd_eep_deal_short_packet,positive
+	store 2,mem_temp
+	fetch 3,mem_regc
+	fetcht 2,mem_pdatatemp
+	isub temp,pdata
+	store 2,mem_regb
+	rtn
+iicd_eep_deal_short_packet:
+	fetch 2,mem_temp
+	store 2,mem_regb
+	setarg 0
+	store 2,mem_temp
+	rtn
+
+iicd_write_eep_size_2k:
+	increase 2,temp
+	hstoret 2,core_iicd_txlen
+	increase -2,rega
+	ifetcht 3,rega
+	copy temp,regb
+	arg 0xa0,temp
+	istoret 1,rega
+//	byteswap pdata,pdata
+	istore 1,contw
+	branch iicd_write_eep_common
+
+	/* pdata is eeprom address, rega pointers to txdata(3 ahead bytes should be left), temp is length */
+iicd_write_eep:
+	copy pdata,regb
+	bpatchx patch32_4,mem_patch32
+	bmark1 mark_eeprom_size,iicd_write_eep_size_2k
+	copy regb,pdata
+	increase 3,temp
+	hstoret 2,core_iicd_txlen
+	increase -3,rega
+	ifetcht 3,rega
+	copy temp,regb
+	arg 0xa0,temp
+	istoret 1,rega
+	byteswap pdata,pdata
+	istore 2,contw
+iicd_write_eep_common:	
+	deposit rega
+	hstore 2,core_iicd_txaddr
+	setarg 0
+	hstore 2,core_iicd_rxlen
+	jam 1,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	call wait_iicd_done
+	copy regb,pdata
+	istore 3,rega
+	
+iic_check_eeprom_standby:
+	bpatchx patch32_5,mem_patch32
+	jam 0,mem_iicd_tbuf+3
+iic_check_eeprom_standby_wait:
+	setarg 1
+	hstore 2,core_iicd_txlen
+	jam 0xa0,mem_iicd_tbuf
+	setarg mem_iicd_tbuf
+	hstore 2,core_iicd_txaddr
+	setarg 0
+	hstore 2,core_iicd_rxlen
+	hstore 2,core_iicd_rxaddr
+	setarg 3
+	hstore 1,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	call wait_iicd_done
+	hfetch 1,core_dma_status
+	rtnbit0 iicd_ack
+	nop 1500
+	fetch 1,mem_iicd_tbuf+3
+	increase 1,pdata
+	store 1,mem_iicd_tbuf+3
+	sub pdata,40,null
+	nrtn positive//polling timeout 6ms
+	branch iic_check_eeprom_standby_wait
+
+/* ===================== OTP ======================= */
+
+otp_enable_chgpump:
+	jam 0x70,rfen_chgpump
+	nop param_chgpump_delay
+	rtn
+
+otp_disable_chgpump:
+	jam 0x30,rfen_chgpump
+	rtn
+	
+otp_set_addr:
+	lshift3 pdata,pdata
+	hstore 2,core_otp_addr
+	jam 0,core_otpd_ctrl
+	rtn	
+
+/* pdata = otp address, rega pointers data, loopcnt is count */
+otp_write:
+	call otp_set_addr
+	call otp_ce
+otp_program:
+	ifetcht 1,rega
+	increase 1,rega
+	force 0,queue
+otp_program_bit:
+	qisolate0 temp
+	branch otp_skip_0,true
+	hfetch 1,core_otp_din
+	set1 6,pdata				/* din */
+	set1 7,pdata				/* dle */
+	hstore 1,core_otp_din
+	jam 0x02,core_otp_ctrl	/* web */
+	jam 0x82,core_otp_ctrl
+	set0 7,pdata				/* dle */
+	hstore 1,core_otp_din
+	jam 0x8a,core_otp_ctrl	/* pgmen */
+	nop 11
+	jam 0xca,core_otp_ctrl	/* vppen */
+	nop 33
+	jam 0x4a,core_otp_ctrl	/* web 2nd */
+	nop 44
+	jam 0xca,core_otp_ctrl	/* release web */
+	nop 22
+	jam 0x8a,core_otp_ctrl	/* release vppen */
+	nop 33
+	jam 0x82,core_otp_ctrl	/* release pgmen */
+	nop 1
+	jam 0x92,core_otp_ctrl	/* pgmvfy */
+	nop 10
+	jam 0xb2,core_otp_ctrl	/* readen */
+	hfetch 1,core_otp_rdata
+	jam 0x92,core_otp_ctrl	/* release readen */
+	nop 1
+	jam 0x82,core_otp_ctrl	/* release pgmvfy */
+	qisolate0 pdata
+	branch otp_program_bit,true	/* program error */
+otp_skip_0:
+	hfetch 2,core_otp_addr
+	increase 1,pdata
+	hstore 2,core_otp_addr
+	increase 1,queue
+	compare 8,queue,0xf
+	nbranch otp_program_bit,true
+	loop otp_program
+	jam 0x83,core_otp_ctrl
+	rtn
+
+otp_ce:
+	jam 0x82,core_otp_ctrl	/* ceb */
+	nop 12
+	jam 0x80,core_otp_ctrl	/* rstn */
+	jam 0x82,core_otp_ctrl	/* release rstn */
+	nop 150					/* waiting for vdd25 stable */
+	rtn
+
+	/* rega points to data, temp is count */
+otpd_read_init:
+	call otp_ce
+	jam 0xa2,core_otp_ctrl	/* readen */
+	deposit rega
+	hstore 2,core_otpd_addr
+	set1 11,temp
+	isolate0 15,pdata
+	setflag true,15,temp
+	hstoret 2,core_otpd_len
+	jam otpd_start,core_misc_ctrl
+	rtn
+
+otpd_wait_end:
+	hfetch 1,core_dma_status
+	bbit0 otpd_done,otpd_wait_end
+	rtn
+	
+	/* pdata=otp address, rega points to data, temp is count */
+otpd_read_data:
+	call otp_set_addr
+	call otpd_read_init
+	call otpd_wait_end
+	jam 0x83,core_otp_ctrl	/* release ceb */
+	rtn
+
+
+
+/* rega pointers to buf, temp is length */
+otpd_read_code:	
+	hfetch 2,core_current_otp_addr
+	hstore 2,core_otp_addr
+	call otpd_read_init
+	arg otpd_done,queue
+	call decrypt_code
+	call otpd_wait_end
+	isolate1 otpd_crcok,pdata	
+	call set_ucode_status
+	jam 0x83,core_otp_ctrl	/* release ceb */
+	rtn
+
+/* ===================== uart dma ======================= */
+uartd_prepare_tx:
+	hfetch 2,core_uart_twptr
+	iforce contwu
+	rtn
+
+uartd_send:
+	deposit contwu
+	hstore 2,core_uart_twptr
+	rtn
+
+uartd_rxdone:
+	deposit contru
+	hstore 2,core_uart_rrptr
+	rtn
+
+uartd_prepare_rx:
+	hfetch 2,core_uart_rrptr
+	copy pdata,contru
+	rtn
+
+uart_set_baud_by_mem:
+	fetch uart_baud_len,mem_baud
+	hstore uart_baud_len,core_uart_baud
+	rtn
+
+uart_copy_tx_bytes_fast:
+	deposit loopcnt
+	rtn blank
+uart_copy_tx_bytes_fast_loop:
+	increase -8,loopcnt
+	call uart_tx_8_bytes,positive
+	rtn zero
+	branch uart_copy_tx_bytes_fast_loop,positive
+	increase 8,loopcnt
+uart_copy_tx_bytes_fast_loop_four:
+	increase -4,loopcnt
+	call uart_tx_4_bytes,positive
+	rtn zero
+	branch uart_copy_tx_bytes_fast_loop_four,positive
+	increase 4,loopcnt
+	branch uart_copy_tx_bytes
+
+uart_tx_8_bytes:
+	ifetch 8,contr
+	istore 8,contwu
+	rtn
+
+uart_tx_4_bytes:
+	ifetch 4,contr
+	istore 4,contwu
+	rtn
+
+uart_copy_tx_bytes:
+	deposit loopcnt
+	rtn blank
+uart_copy_tx_bytes_loop:
+	ifetch 1,contr
+	istore 1,contwu
+	loop uart_copy_tx_bytes_loop
+	rtn
+
+uart_copy_rx_bytes_fast:
+	deposit loopcnt
+	rtn blank
+uart_copy_rx_bytes_fast_loop:
+	increase -8,loopcnt
+	call uart_rx_8_bytes,positive
+	rtn zero
+	branch uart_copy_rx_bytes_fast_loop,positive
+	increase 8,loopcnt
+uart_copy_rx_bytes_fast_loop_four:
+	increase -4,loopcnt
+	call uart_rx_4_bytes,positive
+	rtn zero
+	branch uart_copy_rx_bytes_fast_loop_four,positive
+	increase 4,loopcnt
+	branch uart_copy_rx_bytes
+
+uart_rx_8_bytes:
+	ifetch 8,contru
+	istore 8,contw
+	rtn
+
+uart_rx_4_bytes:
+	ifetch 4,contru
+	istore 4,contw
+	rtn
+
+
+uart_copy_rx_bytes:
+	deposit loopcnt
+	rtn blank
+uart_copy_rx_bytes_loop:
+	ifetch 1,contru
+	istore 1,contw
+	loop uart_copy_rx_bytes_loop
+	rtn
+
+
+uart_copy_rx2tx:
+	deposit loopcnt
+	rtn blank
+uart_copy_rx2tx_loop:
+	ifetch 1,contru
+	istore 1,contwu
+	loop uart_copy_rx2tx_loop
+	rtn
+
+
+/* ===================== eeprom data ======================= */
+
+app_store_nvram_event:
+	jam BT_EVT_STORE_NVRAM,mem_fifo_temp
+	branch ui_ipc_send_event
+
+check_51cmd_store_reconn_info:
+check_51cmd_update_device_record:
+	bpatchx patch32_6,mem_patch32
+	fetch 1,mem_nv_data_number
+	rtn blank		// not nv data
+	call check_nvram
+	call init_device_list,zero
+	call nvram_find_addr_from_bd_list
+write_device_record:
+	fetch 1,mem_nv_data_number
+	icopy regc
+	fetcht 2,mem_nv_data_ptr
+	storet 2,mem_list_item_ptr
+write_device_loop_find:
+	copy regc,pdata
+	branch app_store_nvram_event,blank  //EEPROM
+	increase -1,regc
+	copy temp,rega
+	ifetch 1,rega
+	fetcht 1,mem_select_list_item
+	isub temp,null
+	call set_index_finded_device,zero
+	branch write_device_loop_find0,positive
+	ifetch 1,rega
+	increase 1,pdata
+	istore 1,rega
+write_device_loop_find0:
+	fetcht 2,mem_list_item_ptr
+	increase NV_DATA_LEN,temp
+	storet 2,mem_list_item_ptr
+	branch write_device_loop_find
+
+set_index_finded_device:
+	setarg 0
+	istore 1,rega
+	fetch 1,mem_temp_reconn_record
+	istore 1,contw	
+	bne REC_3_MODE,set_index_finded_device_ble_mode
+	arg mem_link_key,regb
+set_index_find_device_MASTER_ADDR:
+	ifetch 6,contr
+	istore 8,contw
+	setarg 0
+	istore 8,contw
+	copy regb,contr
+store_rec_data_common:
+	call memcpy16
+	force 1,null
+	rtn
+
+set_index_finded_device_ble_mode:
+	beq REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,set_index_finded_device_IRK
+	beq REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,set_index_finded_device_EDIV
+	arg mem_le_ltk,regb
+	branch set_index_find_device_MASTER_ADDR
+
+set_index_finded_device_IRK:
+	arg mem_le_irk,contr
+	call memcpy16
+store_ble_rec_data_common:
+	arg mem_le_ltk,contr
+	branch store_rec_data_common
+
+set_index_finded_device_EDIV:
+	arg mem_le_rand,contr
+	call memcpy16
+	branch store_ble_rec_data_common
+
+
+nvram_find_addr_from_bd_list:
+	call disable_user
+	fetch 1,mem_nv_data_number
+	rtn blank		// not nv data
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,find_addr_from_bd_list_SPP_mode
+find_addr_from_bd_list_ble_mode:
+	bpatchx patch32_7,mem_patch32
+	fetch 1,mem_le_conn_peer_addr_type
+	beq MASTER_PUBLIC_ADDR,find_addr_from_bd_list_static_addr
+	fetch 1,mem_le_plap+5
+	compare 0xc0,pdata,0xc0
+	branch find_addr_from_bd_list_static_addr,true
+	compare 0x40,pdata,0xc0
+	branch find_addr_from_bd_list_random_addr,true
+	compare 0x00,pdata,0xc0
+	branch find_addr_from_bd_list_random_non_resolvable_private_address,true
+find_addr_from_bd_list_static_addr:
+	jam REC_4_MODE_STATIC_ADDRESS,mem_temp_reconn_record
+	fetch 6,mem_le_plap
+	branch find_addr_from_bd_list_common
+	
+find_addr_from_bd_list_random_non_resolvable_private_address:	
+	jam REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,mem_temp_reconn_record
+	branch find_addr_from_bd_list_common
+
+//input :pdata EDIV and rands
+find_addr_from_bd_list_random_addr:
+	jam REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,mem_temp_reconn_record
+	branch find_addr_from_bd_list_common
+	
+//input :pdata EDIV and rands
+find_addr_from_bd_list_SPP_mode:
+	bpatchx patch33_0,mem_patch33
+	jam REC_3_MODE,mem_temp_reconn_record
+	fetch 6,mem_plap
+find_addr_from_bd_list_common:
+	store 6,mem_temp_reconn_record+1
+	fetch 2,mem_nv_data_ptr
+	ifetcht 1,pdata
+	pincrease 1
+	store 2,mem_list_item_ptr
+	storet 1,mem_select_list_item
+	fetch 1,mem_nv_data_number
+	icopy regc
+nvram_find_addr_from_list:
+	fetch 2,mem_list_item_ptr
+	copy pdata,rega
+	call nvram_find_addr_from_list_compare
+	rtn user
+	fetcht 2,mem_list_item_ptr
+	increase NV_DATA_LEN,temp
+	storet 2,mem_list_item_ptr
+	increase -1,temp
+	ifetch 1,temp
+	store 1,mem_select_list_item
+	increase -1,regc
+	nbranch nvram_find_addr_from_list,zero
+	fetch 1,mem_nv_data_number
+	pincrease DECREASED_ONE
+	store 1,mem_select_list_item
+	rtn
+nvram_find_addr_from_list_compare:
+	fetch 1,mem_temp_reconn_record
+	bne REC_3_MODE,find_addr_from_list_compare_ble_mode
+find_master_addr_from_list_compare:
+	arg mem_temp_reconn_record,regb
+	arg 7,loopcnt
+	call string_compare
+	branch enable_user,zero
+	rtn
+
+find_addr_from_list_compare_ble_mode:
+	beq REC_4_MODE_RANDOM_RESOLVABLE_PRIVATE_ADDRESS,find_irk_form_list_compare
+	beq REC_4_MODE_RANDOM_NON_RESOLVABLE_PRIVATE_ADDRESS,find_ediv_form_list_compare
+	branch find_master_addr_from_list_compare
+
+find_irk_form_list_compare:
+	ifetcht 1,rega
+	isub temp,null
+	nrtn zero
+	arg mem_le_prand,contw
+	arg 16,loopcnt
+	call clear_mem
+	fetch 3,mem_le_plap+3
+	store 3,mem_le_prand
+	call genernate_master_MacAddress
+	fetch 2,mem_le_aes_128+13
+	byteswap pdata,pdata
+	lshift8 pdata,temp
+	ifetch 1,contr
+	iadd temp,pdata
+	fetcht 3,mem_le_plap
+	isub temp,null
+	branch enable_user,zero
+	rtn
+
+
+genernate_master_MacAddress:
+	arg mem_le_prand ,contr
+	call load_data128
+//	arg mem_le_irk,contr
+	ifetch 1,rega
+	call load_regext
+	force 0x38,aes_ctrl
+	force 0x0,aes_ctrl
+	call wait_aes
+	arg mem_le_aes_128,contw
+	branch store_aes_result
+
+find_ediv_form_list_compare:
+	ifetcht 1,rega
+	isub temp,null
+	nrtn zero
+	copy contr,rega
+	add contr,8,regc
+	arg mem_le_rand,regb
+	arg 8,loopcnt
+	call string_compare
+	branch enable_user,zero
+	copy regc,rega
+	arg mem_le_irk,regb
+	arg 8,loopcnt
+	call string_compare
+	branch enable_user,zero
+	rtn
+
+check_nvram:
+	fetch 2,mem_nv_data_ptr
+	ifetcht 1,pdata
+	pincrease NV_DATA_LEN
+	ifetch 1,pdata
+	isub temp,null
+	rtn
+
+init_device_list:
+	fetch 1,mem_nv_data_number
+	icopy loopcnt
+	fetcht 2,mem_nv_data_ptr
+	setarg 0
+init_device_list_loop:
+	istore 1,temp
+	increase NV_DATA_LEN,temp
+	pincrease 1
+	loop init_device_list_loop
+	rtn
+
+load_device_list:
+	bpatchx patch33_1,mem_patch33
+	call nvram_find_addr_from_bd_list
+	fetch 1,mem_state
+	setflag user,state_combkey,pdata	/* we have link key */
+	store 1,mem_state
+	nbranch clear_key_exists,user
+	add rega,10,contr
+//	copy rega,contr
+	arg mem_link_key,contw
+	call  memcpy16
+	branch check_link_key_load
+clear_key_exists:
+	jam 0,mem_link_key_exists
+	rtn
+
+load_device_list_mode_4:
+	fetch 9,mem_le_ediv
+	branch clear_ltk_exists,blank
+	call nvram_find_addr_from_bd_list
+	nbranch clear_ltk_exists,user
+	fetch 2,mem_list_item_ptr
+	add pdata,1,contr
+	arg mem_le_irk,contw
+	call  memcpy16
+	arg mem_le_ltk,contw
+	call  memcpy16
+	jam 1,mem_ltk_exists
+	rtn
+
+clear_ltk_exists:
+	jam 0,mem_ltk_exists
+	rtn
+
+
+eeprom_store_le_reconn_info:
+	fetch 6,mem_le_plap
+	store 6,mem_temp_lap
+	jam REC_4_MODE,mem_record_bt_mode
+	branch eeprom_store_reconn_info
+eeprom_store_bd_reconn_info:
+	fetch 6,mem_plap
+	store 6,mem_temp_lap
+	jam REC_3_MODE,mem_record_bt_mode
+eeprom_store_reconn_info:
+	fetch 1,mem_device_option
+	beq dvc_op_module,check_51cmd_update_device_record
+	bbit1 dvc_op_mouse,mouse_store_remote_bdaddr
+	rtn
+	
+
+check_link_key_load:
+	fetch 8,mem_link_key
+	fetcht 8,mem_link_key+8
+	ior temp,pdata
+	rtn blank
+	jam 1,mem_link_key_exists
+	rtn
+	
+
+/* =============== GPIO CONTROL ================= */
+
+
+	//temp [4:0]=GPIO number, 0-31, 
+gpio_set_wake_by_current_state:
+	bpatchx patch33_2,mem_patch33
+	set1 7,temp
+	call gpio_get_bit
+	nsetflag true,7,temp
+	//branch gpio_set_wake
+	//fall through
+	
+	//temp [4:0]=GPIO number, 0-31, [7]=0, low active
+gpio_set_wake:
+	bpatchx patch33_3,mem_patch33
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	isolate0 7,temp
+	and temp,0x1f,queue
+	fetch 4,mem_gpio_wakeup_low
+	qsetflag true,pdata
+	store 4,mem_gpio_wakeup_low
+	fetch 4,mem_gpio_wakeup_high
+	nqsetflag true,pdata
+	store 4,mem_gpio_wakeup_high
+	rtn
+	
+	//temp [4:0]=GPIO number, 0-31, [7]=0, low active
+gpio_clr_wake:
+	bpatchx patch33_4,mem_patch33
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	isolate0 7,temp
+	and temp,0x1f,queue
+	fetch 4,mem_gpio_wakeup_low
+	qset0 pdata
+	store 4,mem_gpio_wakeup_low
+	fetch 4,mem_gpio_wakeup_high
+	qset0 pdata
+	store 4,mem_gpio_wakeup_high
+	rtn
+
+
+gpio_config_input_nowake:
+	call gpio_clr_wake
+	branch gpio_config_input_without_wake
+
+	//temp [4:0]=GPIO number, 0-31, [7]=0, low active
+gpio_config_input:
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	ncall gpio_set_wake,wake
+
+gpio_config_input_without_wake:
+	arg core_gpio_pd0,contw
+	call gpio_set_bit
+	setflip gpio_active_bit,temp
+	arg core_gpio_pu0,contw
+	call gpio_set_bit
+	set0 gpio_active_bit,temp
+	arg core_gpio_oe0,contw
+	branch gpio_set_bit
+
+
+gpio_set_high_impedance:
+	arg core_gpio_pd0,contw
+	call gpio_set_bit
+	set0 gpio_active_bit,temp
+	arg core_gpio_pu0,contw
+	call gpio_set_bit
+	set0 gpio_active_bit,temp
+	arg core_gpio_oe0,contw
+	branch gpio_set_bit
+
+
+	//temp [4:0]=GPIO number, 0-31, [7]=0, low active. set gpio to inactive state
+gpio_config_output:	
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	setflip gpio_active_bit,temp
+	call gpio_out
+gpio_config_output0:
+	set1 gpio_active_bit,temp
+	arg core_gpio_oe0,contw
+	branch gpio_set_bit
+	
+gpio_common:
+	and temp,0x07,queue
+	rshift3 temp,pdata
+	and_into 3,pdata
+	iadd contw,contw
+	ifetch 1,contw
+	rtn
+
+gpio_check_active:
+	arg core_gpio_out0,contw
+	branch get_bit_common
+
+	
+	/* temp is gpio number, return true if gpio active */
+gpio_get_bit:
+	arg core_gpio_in,contw
+get_bit_common:
+	call gpio_common
+	isolate1 gpio_active_bit,temp
+	branch gpio_get_bit_reverse,true
+	qisolate0 pdata
+	rtn
+gpio_get_bit_reverse:
+	qisolate1 pdata
+	rtn
+
+gpio_out_inactive:
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	isolate1 7,null
+	branch gpio_out_flag
+
+gpio_out_active:
+	sub temp,UI_BUTTON_GPIO_DISABLE,null
+	rtn zero
+	isolate0 7,null
+
+	/* temp is gpio number,  [7]=1,set out equa true flag if gpio active */
+gpio_out_flag:
+	setarg 0
+	nsetflag true,gpio_active_bit,pdata
+	ixor temp,temp
+	
+	/* temp is gpio number,0-31, [7]=out bit value */
+gpio_out:
+	arg core_gpio_out0,contw
+
+	//temp [4:0]=GPIO number, 0-31, [7]=bit value; contw is gpio reg base
+gpio_set_bit:
+	call gpio_common
+	isolate1 gpio_active_bit,temp
+	qsetflag true,pdata
+	istore 1,contw
+	rtn
+
+gpio_set_before_lpm_common:
+	arg -1,rega
+	hfetch 1,core_gpio_sel1
+	compare 0x02,pdata,0x03
+	call neglact4_from_23_pin,true	//spi
+
+	compare 0x01,pdata,0x03
+	call neglact2_form_25_pin,true	//two spi gpio25 26
+
+	compare 0x03,pdata,0x03
+	call neglact2_form_25_pin,true	//two spi gpio30 31
+	 	 
+	isolate1 2,pdata
+	call neglect2_from_6_pin,true	//uart
+	 
+	isolate1 3,pdata
+	call neglect4_from_9_pin,true	//spi
+
+	isolate1 4,pdata
+	call neglact2_form_30_pin,true	//IIC GPIO30 31
+
+	isolate1 6,pdata
+	nsetflag true,04,rega			//pwm0 gpio4
+
+	isolate1 7,pdata
+	nsetflag true,05,rega			//pwm1 gpio5
+
+	hfetch 1,core_gpio_sel2
+	isolate1 0,pdata
+	nsetflag true,27,rega			//pwm2 gpio27
+	isolate1 1,pdata
+	nsetflag true,28,rega			//pwm3 gpio28
+	isolate1 2,pdata
+	nsetflag true,03,rega			//pwm4 gpio03
+	isolate1 3,pdata
+	nsetflag true,08,rega			//pwm5 gpio08
+	isolate1 4,pdata
+	nsetflag true,20,rega			//pwm0 gpio20
+	isolate1 5,pdata
+	nsetflag true,21,rega			//pwm1 gpio21
+	isolate1 6,pdata
+	nsetflag true,22,rega			//pwm2 gpio22
+	isolate1 7,pdata
+	nsetflag true,23,rega			//pwm3 gpio23
+		
+	hfetch 1,core_gpio_sel
+	isolate1 0,pdata
+	nsetflag true,05,rega			//ADC GPIO05
+	isolate1 1,pdata
+	nsetflag true,06,rega			//ADC GPIO06
+	isolate1 2,pdata
+	nsetflag true,07,rega			//ADC GPIO07
+	isolate1 3,pdata
+	nsetflag true,18,rega			//ADC GPIO18
+	isolate1 4,pdata
+	nsetflag true,19,rega			//ADC GPIO19
+	isolate1 5,pdata
+	nsetflag true,20,rega			//ADC GPIO20
+	isolate1 6,pdata
+	nsetflag true,21,rega			//ADC GPIO21
+	isolate1 7,pdata
+	nsetflag true,22,rega			//ADC GPIO22
+	
+	hfetch 1,core_uart_ctrl
+	isolate1 4,pdata
+	call neglact2_form_2_pin,true
+	bpatchx patch33_5,mem_patch33
+
+	hfetch 4,core_gpio_pu0
+	hfetcht 4,core_gpio_pd0
+	ior temp,pdata
+	invert pdata,pdata
+	iand rega,pdata
+	//set0 4,pdata //revc
+	hstore 4,core_gpio_oe0
+	rtn
+	
+	
+neglect2_from_6_pin: //uart
+	 arg 6,queue
+	 branch neglect_2_pin
+neglect4_from_9_pin:
+	 arg 9,queue
+	 branch neglact_4_pin
+neglact4_from_23_pin:
+	 arg 23,queue
+	 branch neglact_4_pin
+neglact2_form_25_pin:
+	 arg 25,queue
+	 branch neglect_2_pin
+neglact2_form_30_pin:
+	 arg 30,queue
+	 branch neglect_2_pin
+neglact2_form_2_pin:
+	 arg 2,queue
+	 branch neglect_2_pin
+neglact_1_pin:
+	arg 1,loopcnt
+	branch neglect_pin_loop
+neglact_4_pin:
+	 arg 4,loopcnt
+	 branch neglect_pin_loop
+neglect_2_pin:
+	 arg 2,loopcnt
+neglect_pin_loop:
+	 qset0 rega
+	 increase 1,queue
+	 loop neglect_pin_loop
+	 rtn
+
+
+
+
+
+
+/* ===================== sniff GPIO CONTROL ======================= */
+gpio_cfg_uart_tx_output:
+	call gpio_uart2gpio
+	arg UART_WAKEUP_TX,temp
+	branch gpio_config_output
+
+gpio_pu_uart_tx:
+	call gpio_cfg_uart_tx_output
+	arg UART_WAKEUP_TX,temp
+	branch gpio_out_inactive
+
+
+
+gpio_rx_config_input_with_pu:
+	call gpio_uart2gpio
+	hfetch 1, core_gpio_pu0
+	set1 UART_WAKEUP_RX,pdata
+	hstore 1,core_gpio_pu0
+	arg UART_WAKEUP_RX,temp
+	branch gpio_config_input
+	
+gpio_uart2gpio:
+	hfetch 1,core_gpio_sel1
+	and_into 0xfb,pdata
+	hstore 1,core_gpio_sel1
+	rtn
+
+gpio_check_uart_state:
+	hfetch 1,core_gpio_sel1
+	isolate1 2,pdata
+	rtn
+
+load_chip_option:
+	call otp_enable_chgpump
+	setarg OTP_CHIP_FUNCTIONS
+	arg mem_chip_functions,rega
+	arg 0x02,temp
+	call otpd_read_data
+	branch otp_disable_chgpump
+
+
+load_adc_init:
+	call otp_enable_chgpump
+	setarg otp_adc_io_0_5V_addr
+	arg mem_0_5_adc_io_data,rega
+	arg 14,temp
+	call otpd_read_data
+	branch otp_disable_chgpump
+
+
+//mem_adc_config_flag 0:vinlpm 1:Hvin 2: GPIO
+adc_init_data:
+	bpatchx patch33_6,mem_patch33
+
+	call load_adc_init
+	
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_VINLPM,adc_init_data_vinlpm
+	beq ADC_CONFIG_HVIN,adc_init_data_hvin
+	beq ADC_CONFIG_GPIO,adc_init_data_io
+	rtn	
+
+adc_init_data_vinlpm:
+	fetcht 2,mem_otp_adc_flag
+	setarg OTP_ADC_FLAG
+	isub temp,null
+	branch adc_check_data_vinlpm,zero
+	setarg 0x4dfa
+	store 2,mem_3v_adc_vinlpm_data	
+	setarg 0x4894
+	store 2,mem_2v_adc_vinlpm_data
+	branch set_vdd_reference_voltage_1v
+
+adc_check_data_vinlpm:
+	fetch 2,mem_3v_adc_vinlpm_data
+	nbranch adc_check_2v_vinlpm,blank
+	setarg 0x4dfa
+	store 2,mem_3v_adc_vinlpm_data
+adc_check_2v_vinlpm:	
+	fetch 2,mem_2v_adc_vinlpm_data
+	nbranch set_vdd_reference_voltage_1v,blank
+	setarg 0x4894
+	store 2,mem_2v_adc_vinlpm_data
+set_vdd_reference_voltage_1v:
+	setarg 100
+	store 2,mem_reference_voltage //set reference voltage = 1V
+	rtn		
+
+adc_init_data_hvin:
+	fetcht 2,mem_otp_adc_flag
+	setarg OTP_ADC_FLAG
+	isub temp,null
+	branch adc_check_data_hvin,zero
+	setarg 0x5932
+	store 2,mem_5v_adc_hvin_data	
+	setarg 0x4323
+	store 2,mem_1v_adc_hvin_data
+	branch set_vdd_reference_voltage_4v
+
+adc_check_data_hvin:
+	fetch 2,mem_5v_adc_hvin_data
+	nbranch adc_check_1v_hvin,blank
+	setarg 0x5932
+	store 2,mem_5v_adc_hvin_data
+adc_check_1v_hvin:	
+	fetch 2,mem_1v_adc_hvin_data
+	nbranch set_vdd_reference_voltage_4v,blank
+	setarg 0x4323
+	store 2,mem_1v_adc_hvin_data
+set_vdd_reference_voltage_4v:
+	setarg 400
+	store 2,mem_reference_voltage //set reference voltage = 4V
+	rtn 	
+
+adc_init_data_io:
+	fetcht 2,mem_otp_adc_flag
+	setarg OTP_ADC_FLAG
+	isub temp,null
+	branch adc_check_data_io,zero
+	setarg 0x6946
+	store 2,mem_1v_adc_io_data	
+	setarg 0x5377
+	store 2,mem_0_5_adc_io_data
+	branch set_vdd_reference_voltage_0_5v
+
+adc_check_data_io:
+	fetch 2,mem_1v_adc_io_data
+	nbranch adc_check_0_5v_io,blank
+	setarg 0x6946
+	store 2,mem_1v_adc_io_data
+adc_check_0_5v_io:
+	fetch 2,mem_0_5_adc_io_data
+	nbranch set_vdd_reference_voltage_0_5v,blank
+	setarg 0x5377
+	store 2,mem_0_5_adc_io_data
+set_vdd_reference_voltage_0_5v:
+	setarg 50
+	store 2,mem_reference_voltage //set reference voltage = 0.5V
+	rtn	
+
+
+adc_set_mode:
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_VINLPM,adc_check_vinlpm
+	beq ADC_CONFIG_HVIN,adc_check_hvin
+	beq ADC_CONFIG_GPIO,adc_check_gpio
+	rtn
+adc_check_vinlpm:
+	jam 0xbf,rf_adc_mode	//read VINLPM voltage directly	
+	branch read_adc
+adc_check_hvin:
+	jam 0xaf,rf_adc_mode	//read HVIN voltage directly
+	branch read_adc
+adc_check_gpio:
+	jam 0x8f,rf_adc_mode
+	fetch 1,mem_adc_channel
+	hstore 1,rf_adc_ch
+	branch read_adc
+read_adc:
+	bpatchx patch33_7,mem_patch33
+	hfetch 1,core_uart_baud + 1
+	set1 7,pdata
+	hstore 1,core_uart_baud + 1 
+	hfetch 1,rf_adc_ch
+	or_into 0x30,pdata
+	hstore 1,rf_adc_ch
+	jam 0x7c,rfen_adc
+	jam 0xaa,rf_adc_gc
+	nop 5000
+	hfetcht 2,core_adc_sum
+	hfetch 1,core_uart_baud + 1
+	set0 7,pdata
+	hstore 1,core_uart_baud + 1
+	storet 2,mem_adc_current_value
+	rtn
+
+vdd_calculate_by_mode:
+	bpatchx patch34_0,mem_patch34
+	fetch 1,mem_adc_config_flag
+	beq ADC_CONFIG_VINLPM,vdd_calculate_vinlpm
+	beq ADC_CONFIG_HVIN,vdd_calculate_hvin
+	beq ADC_CONFIG_GPIO,vdd_calculate_io
+	rtn
+
+vdd_calculate_vinlpm:
+	fetch 2,mem_3v_adc_vinlpm_data
+	fetcht 2,mem_2v_adc_vinlpm_data
+	arg 200,regc
+	branch vdd_calculate
+
+vdd_calculate_hvin:
+	fetch 2,mem_5v_adc_hvin_data
+	fetcht 2,mem_1v_adc_hvin_data
+	arg 100,regc
+	branch vdd_calculate
+
+vdd_calculate_io:
+	fetch 2,mem_1v_adc_io_data
+	fetcht 2,mem_0_5_adc_io_data
+	arg 50,regc
+	branch vdd_calculate
+	
+vdd_calculate:
+	isub temp,rega
+	fetch 2,mem_adc_current_value
+	isub temp,pdata
+	nbranch vdd_calculate1,positive
+	fetcht 2,mem_reference_voltage
+	imul32 temp,regb
+	copy regc,pdata
+	imul32 rega,pdata
+	iadd regb,pdata
+vdd_calculate2:
+	idiv rega
+	call wait_div_end
+	quotient pdata	
+	rtn
+
+vdd_calculate1:
+	copy temp,pdata
+	fetcht 2,mem_adc_current_value
+	isub temp,pdata
+	fetcht 2,mem_reference_voltage
+	imul32 temp,regb
+	copy regc,pdata
+	imul32 rega,pdata
+	isub regb,pdata
+	branch vdd_calculate2
+
+/*	typedef struct
+*	{
+*		uint16 full_vol
+*		uint16 empty_vol
+*		uint16 low_vol
+*		uint16 now_vol
+*	}bat_calculate;
+*/
+//out:	pdata->bat percent
+adc_bat_percent_lowpower_out:
+	ifetch 8,rega
+	store 8,mem_pdatatemp
+	fetch 2,mem_pdatatemp
+	fetcht 2,mem_pdatatemp+2
+	isub temp,rega
+	fetch 2,mem_pdatatemp+6
+	isub temp,regb
+	fetcht 2,mem_pdatatemp+4
+	isub temp,null
+	ncall adc_set_low_power_flag,positive
+	mul32 regb,100,pdata
+	idiv rega
+	call wait_div_end
+	quotient pdata
+	call adc_set_no_power_flag,blank
+	rtn
+adc_set_low_power_flag:
+	fetch 1,mem_adc_power_flag
+	set1 0,pdata
+	store 1,mem_adc_power_flag
+	rtn
+adc_set_no_power_flag:
+	fetcht 1,mem_adc_power_flag
+	set1 1,temp
+	storet 1,mem_adc_power_flag
+	rtn
+
+ifdef SPI_SIMULATE
+/******************************simulate spi slave start**********************************/
+
+/*
+// Define SPI struct, gpio config
+mem_spi_simulate_struct:
+02	#cs
+03	#sclk
+04	#mosi
+05	#miso
+08	#motion
+*/
+
+/*
+Brief: spi_simulate_init_slave
+Input: None
+Output: None
+Return: None
+Brief: cs_gpio,sclk_gpio,mosi_gpio : input
+	miso_gpio : output
+*/
+spi_simulate_init_slave:
+	call spi_simulate_variable_release_slave
+	branch spi_simulate_gpio_config_slave
+
+spi_simulate_variable_release_slave:
+	arg mem_spi_simulate_read_byte_slave,contw
+	arg 53,loopcnt
+	call buffer_release
+	arg mem_spi_simulate_write_byte_slave,contw
+	arg 54,loopcnt
+	branch buffer_release
+
+buffer_release:
+	setarg 0
+buffer_release_loop:
+	istore 1,contw
+	loop buffer_release_loop
+	rtn
+	
+spi_simulate_gpio_config_slave:
+	fetcht 1,mem_spi_simulate_cs_gpio
+	call gpio_config_input
+	fetcht 1,mem_spi_simulate_sclk_gpio
+	call gpio_config_input
+	fetcht 1,mem_spi_simulate_mosi_gpio
+	call gpio_config_input
+	fetcht 1,mem_spi_simulate_miso_gpio
+	call gpio_config_output
+	fetcht 1,mem_spi_simulate_motion_gpio
+	call gpio_config_output
+	branch spi_simulate_motion_disable
+
+spi_simulate_motion_enable:
+	fetcht 1,mem_spi_simulate_motion_gpio
+	branch gpio_out_inactive
+spi_simulate_motion_disable:
+	fetcht 1,mem_spi_simulate_motion_gpio
+	branch gpio_out_active
+	
+/*
+Brief: spi_simulate_read_byte_slave
+Input: rega: read length
+Output: mem_spi_simulate_read_byte_slave: read buffer
+Return: None
+Brief: when the cs_gpio is low level,slave reads data from master at the rising edge of the sclk gpio
+*/
+spi_simulate_read_byte_slave:
+	copy rega,pdata
+	store 1,mem_spi_simulate_read_length_slave
+	fetcht 1,mem_spi_simulate_cs_gpio
+	call gpio_get_bit
+	nrtn true
+spi_simulate_read_byte_slave1:	
+	jam 0,mem_spi_simulate_read_byte_slave_temp
+	arg 8,loopcnt
+spi_simulate_read_byte_slave_loop:
+	fetcht 1,mem_spi_simulate_cs_gpio
+	call gpio_get_bit
+	nbranch spi_simulate_read_byte_slave_end,true
+	
+	fetcht 1, mem_spi_simulate_sclk_gpio
+	call gpio_get_bit
+	branch spi_simulate_read_byte_slave_loop,true	
+	fetch 1,mem_spi_simulate_read_byte_slave_temp
+	lshift pdata,pdata
+	store 1,mem_spi_simulate_read_byte_slave_temp
+	fetcht 1, mem_spi_simulate_mosi_gpio
+	call gpio_get_bit
+	ncall spi_simulate_read_byte_or_one,true
+spi_simulate_read_byte_slave_loop1:	
+	fetcht 1,mem_spi_simulate_cs_gpio
+	call gpio_get_bit
+	nbranch spi_simulate_read_byte_slave_end,true
+
+	fetcht 1, mem_spi_simulate_sclk_gpio
+	call gpio_get_bit
+	nbranch spi_simulate_read_byte_slave_loop1,true
+	loop spi_simulate_read_byte_slave_loop
+	
+	fetcht 1,mem_spi_simulate_read_length_slave_temp
+	setarg mem_spi_simulate_read_byte_slave
+	iadd temp,contw
+	copy contw,regb
+	increase 1,temp
+	storet 1,mem_spi_simulate_read_length_slave_temp
+	fetch 1,mem_spi_simulate_read_byte_slave_temp
+	copy regb,contw
+	istore 1,contw
+
+	fetch 1,mem_spi_simulate_read_length_slave
+	increase -1,pdata
+	store 1,mem_spi_simulate_read_length_slave
+	nbranch spi_simulate_read_byte_slave1,blank
+	
+spi_simulate_read_byte_slave_loop2:	
+	fetcht 1, mem_spi_simulate_cs_gpio
+	call gpio_get_bit
+	nbranch spi_simulate_read_byte_slave_loop2,true
+spi_simulate_read_byte_slave_end:	
+	jam 0,mem_spi_simulate_read_length_slave
+	jam 0,mem_spi_simulate_read_length_slave_temp
+	jam 0,mem_spi_simulate_read_byte_slave_temp
+	rtn
+
+spi_simulate_read_byte_or_one:
+	fetch 1,mem_spi_simulate_read_byte_slave_temp
+	or_into 1,pdata
+	store 1,mem_spi_simulate_read_byte_slave_temp
+	rtn
+
+
+/*
+Brief: spi_simulate_write_byte_slave
+Input: rega: write length;  write buffer:mem_spi_simulate_write_byte_slave;
+Output: None
+Return: None
+Brief: when the cs_gpio is low level,slave writes data to master at the falling edge of the sclk gpio
+*/
+spi_simulate_write_byte_slave:
+	copy rega,pdata
+	store 1,mem_spi_simulate_write_length_slave
+	jam 0,mem_spi_simulate_write_length_slave_temp
+	jam 0,mem_spi_simulate_write_byte_slave_temp
+	fetcht 1,mem_spi_simulate_cs_gpio
+	call gpio_get_bit
+	nrtn true
+spi_simulate_write_byte_slave1:
+	fetcht 1,mem_spi_simulate_write_length_slave_temp
+	setarg mem_spi_simulate_write_byte_slave
+	iadd temp,contr
+	copy contr,regb
+	increase 1,temp
+	storet 1,mem_spi_simulate_write_length_slave_temp
+	copy regb,contr
+	ifetch 1,contr
+	store 1,mem_spi_simulate_write_byte_slave_temp
+	
+	arg 8,loopcnt
+spi_simulate_write_byte_slave_loop:
+	fetcht 1,mem_spi_simulate_cs_gpio
+	call gpio_get_bit
+	nbranch spi_simulate_write_byte_slave_end,true
+	fetcht 1, mem_spi_simulate_sclk_gpio
+	call gpio_get_bit
+	branch spi_simulate_write_byte_slave_loop,true
+spi_simulate_write_byte_slave_loop1:
+	fetch 1,mem_spi_simulate_write_byte_slave_temp
+	store 1,mem_spi_simulate_write_byte_slave_temp_temp
+	and_into 0x80,pdata
+	beq 0x80,spi_simulate_set_miso_gpio_high
+	call spi_simulate_set_miso_gpio_low
+spi_simulate_write_byte_slave_loop2:
+	fetcht 1,mem_spi_simulate_cs_gpio
+	call gpio_get_bit
+	nbranch spi_simulate_write_byte_slave_end,true
+	fetcht 1, mem_spi_simulate_sclk_gpio
+	call gpio_get_bit
+	nbranch spi_simulate_write_byte_slave_loop2,true	
+	fetch 1,mem_spi_simulate_write_byte_slave_temp_temp
+	lshift pdata,pdata
+	store 1,mem_spi_simulate_write_byte_slave_temp
+	loop spi_simulate_write_byte_slave_loop
+
+	fetch 1,mem_spi_simulate_write_length_slave
+	increase -1,pdata
+	store 1,mem_spi_simulate_write_length_slave
+	nbranch spi_simulate_write_byte_slave1,blank
+	
+spi_simulate_write_byte_slave_loop3:
+	fetcht 1,mem_spi_simulate_cs_gpio
+	call gpio_get_bit
+	branch spi_simulate_write_byte_slave_loop3,true
+spi_simulate_write_byte_slave_end:	
+	jam 0,mem_spi_simulate_write_length_slave_temp
+	jam 0,mem_spi_simulate_write_byte_slave_temp
+	jam 0,mem_spi_simulate_write_byte_slave_temp_temp
+	rtn
+	
+spi_simulate_set_miso_gpio_high:
+	fetcht 1,mem_spi_simulate_miso_gpio
+	call gpio_out_inactive
+	branch spi_simulate_write_byte_slave_loop2
+spi_simulate_set_miso_gpio_low:
+	fetcht 1,mem_spi_simulate_miso_gpio
+	branch gpio_out_active	
+
+/******************************simulate spi slave end**********************************/
+
+endif  //SPI_SIMULATE
+
+
+/****************************************key scan***************************************/
+keyscan_key_init:
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_key_init_next:
+	rtn blank
+	copy pdata,loopcnt
+//	copy contr,rega
+	fetch 2,mem_keyscan_ptr
+	increase 3,pdata	//mem_key_conf0_pin
+	copy pdata,rega
+keyscan_key_init_lp1:
+	ifetcht 1, rega
+	call gpio_config_input
+	increase KEY_CONF_STRUCT_LEN,rega
+	loop keyscan_key_init_lp1
+keyscan_key_init_end:
+	rtn
+	
+keyscan_scan_key:
+	fetch 2,mem_keyscan_ptr
+	increase 3,pdata	//mem_key_conf0_pin
+	copy pdata,rega
+//	arg mem_key_conf0_pin,rega
+	force 0,regb
+	jam 0,mem_key_value_temp
+keyscan_scan_key_lp1:
+	ifetcht 1, rega
+	call gpio_get_bit
+	bpatchx patch34_1,mem_patch34
+	fetch 2, mem_key_value_temp
+	copy regb,queue
+	qsetflag true,pdata
+	store 2, mem_key_value_temp
+	increase KEY_CONF_STRUCT_LEN,rega
+	increase 1,regb
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_scan_key_lp1_next:
+	ixor regb,null
+	nbranch keyscan_scan_key_lp1,zero
+	fetch 2,mem_key_value_temp
+	fetcht 2,mem_key_value
+	ixor temp,null
+	rtn zero
+	enable user
+	rtn
+
+keyscan_process_lpm_before:
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_process_lpm_before_next:
+	rtn blank
+	copy pdata,loopcnt
+	fetch 2,mem_keyscan_ptr 
+	increase 3,pdata	//mem_key_conf0_pin
+	copy pdata,rega
+keyscan_process_lpm_before_lp1:
+	ifetcht 1, rega
+	call gpio_set_wake_by_current_state
+	increase KEY_CONF_STRUCT_LEN,rega
+	loop keyscan_process_lpm_before_lp1
+keyscan_process_lpm_before_end:
+	rtn
+
+keyscan_key_process:
+	arg key_scan_timer,queue
+	call timer_check
+	nrtn blank
+	setarg 0x20
+	arg key_scan_timer,queue
+	call timer_init
+	disable user
+	call keyscan_process_lpm_before
+	bpatchx patch34_2,mem_patch34
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_key_process_next:
+	rtn blank
+	call keyscan_scan_key
+	nbranch lpm_button_clean_wake_lock,user
+	call lpm_button_get_wake_lock
+	disable user
+	fetch 2, mem_key_value_temp
+	store 2,mem_key_value_temp4
+	jam 0,mem_key_value_temp6
+	force 0,queue
+keyscan_key_lp1:
+	fetch 2, mem_key_value
+	rshift pdata,temp
+	storet 2,mem_key_value
+	and pdata,0x01,pdata
+	fetcht 2, mem_key_value_temp4
+	and temp,0x01,rega
+	rshift temp,temp
+	storet 2,mem_key_value_temp4
+	ixor rega,null
+	ncall keyscan_send_key_data,zero
+	fetch 2,mem_key_num_ptr
+	ifetch 1,pdata
+keyscan_key_lp1_next:
+	fetcht 1, mem_key_value_temp6
+	increase 1,temp
+	storet 1, mem_key_value_temp6
+	copy temp,queue
+	ixor queue,null
+	nbranch keyscan_key_lp1,zero
+	fetch 2,mem_key_value_temp
+	store 2, mem_key_value
+	rtn
+keyscan_send_key_data:
+	bpatchx patch34_3,mem_patch34
+	fetch 2,mem_keyscan_ptr
+	increase 1,pdata
+	ifetch 2,pdata
+	branch callback_func
+
+
+/*************************************pwm*************************************/
+
+//rega:clk select(0:system clk; 1:system clk undivied; 2:lpo)
+/*rega:clk select
+			0x00:select system clock 12M;
+			0x40:select undivied system clock 24M/48M;
+			0x80:select lpo clock:33K
+*/
+pwm_init:
+	hfetch 1,core_clksel
+	ior rega,pdata
+	hstore 1,core_clksel
+	hfetch 2,core_clkoff
+	set0 CLOCK_OFF_PWM,pdata
+	hstore 2,core_clkoff
+	nop 100
+	rtn
+
+/*	typedef struct
+*	{
+*		uint8 gpio_num
+*		uint8 pwm_channel
+*		uint24 frequency
+*		uint8 duty_cycle   //0-100
+*	}PWM_Style;
+	addr: mem_pdatatemp
+*/
+pwm_out_set:
+	fetcht 3,mem_pdatatemp+2
+	setarg PWM_12MHZ
+	idiv temp
+	call wait_div_end
+	quotient temp
+	fetch 1,mem_pdatatemp+5
+	imul32 temp,pdata
+	div pdata,100
+	call wait_div_end
+	quotient rega
+	copy temp,pdata
+	isub rega,regb	
+	fetch 1,mem_pdatatemp+1
+	call pwm_duty_cycle_set
+	fetch 1,mem_pdatatemp
+	branch pwm_enable
+
+//rega:pcnt ;regb:ncnt ;pdata:pwm channel select
+pwm_duty_cycle_set:
+	beq 0,pwm_pwm0_duty_set
+	beq 1,pwm_pwm1_duty_set
+	beq 2,pwm_pwm2_duty_set
+	beq 3,pwm_pwm3_duty_set
+	beq 4,pwm_pwm4_duty_set
+	beq 5,pwm_pwm5_duty_set
+pwm_pwm0_duty_set:
+	arg core_pwm_pcnt0,contw
+	branch pwm_set_pncnt
+pwm_pwm1_duty_set:
+	arg core_pwm_pcnt1,contw
+	branch pwm_set_pncnt
+pwm_pwm2_duty_set:
+	arg core_pwm_pcnt2,contw
+	branch pwm_set_pncnt
+pwm_pwm3_duty_set:
+	arg core_pwm_pcnt3,contw
+	branch pwm_set_pncnt
+pwm_pwm4_duty_set:
+	arg core_pwm_pcnt4,contw
+	branch pwm_set_pncnt
+pwm_pwm5_duty_set:
+	arg core_pwm_pcnt5,contw
+	branch pwm_set_pncnt
+pwm_set_pncnt:
+	copy rega,pdata
+	istore 2,contw
+	copy regb,pdata
+	istore 2,contw
+	rtn
+
+
+//pdata:gpio select
+pwm_enable:
+	enable user
+	branch pwm_gpio_set
+pwm_disable:
+	disable user
+pwm_gpio_set:
+	beq 4,pwm_gpio4_set
+	beq 5,pwm_gpio5_set
+	beq 27,pwm_gpio27_set
+	beq 28,pwm_gpio28_set
+	beq 3,pwm_gpio3_set
+	beq 8,pwm_gpio8_set
+	beq 20,pwm_gpio20_set
+	beq 21,pwm_gpio21_set
+	beq 22,pwm_gpio22_set
+	beq 23,pwm_gpio23_set
+	rtn
+
+
+pwm_gpio4_set:	//pwm 0
+	arg 6,queue
+	branch pwm_one_set_select
+pwm_gpio5_set:	//pwm 1
+  	arg 7,queue
+	branch pwm_one_set_select
+pwm_gpio27_set:	//pwm 2
+  	arg 8,queue
+	branch pwm_one_set_select
+pwm_gpio28_set:	//pwm 3
+	arg 9,queue
+	branch pwm_one_set_select
+pwm_gpio3_set:	//pwm 4
+ 	arg 10,queue
+	branch pwm_one_set_select
+pwm_gpio8_set:	//pwm 5
+  	arg 11,queue
+	branch pwm_one_set_select
+pwm_gpio20_set:	//pwm 0
+  	arg 12,queue
+	branch pwm_tw0_set_select
+pwm_gpio21_set:	//pwm 1
+  	arg 13,queue
+	branch pwm_tw0_set_select
+pwm_gpio22_set:	//pwm 2
+   	arg 14,queue
+	branch pwm_tw0_set_select
+pwm_gpio23_set:	//pwm 3
+    	arg 15,queue
+	branch pwm_tw0_set_select
+
+pwm_set_select:
+	hfetch 2,core_gpio_sel1
+	qsetflag user,pdata
+	hstore 2,core_gpio_sel1
+	copy rega,queue
+	hfetch 1,core_gpio_key2
+   	qsetflag user,pdata
+   	hstore 1,core_gpio_key2
+	rtn
+
+pwm_one_set_select:
+	add queue,-4,rega
+	branch pwm_set_select
+
+pwm_tw0_set_select:
+	add queue,-10,rega
+	branch pwm_set_select
+
+
+	
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/rfcomm.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/rfcomm.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/rfcomm.prog	(working copy)
@@ -0,0 +1,960 @@
+
+ifdef COMPILE_RFCOMM
+rfcomm_init:
+	rtn wake
+	jam 0,mem_rfcomm_send_more_pkt
+	jam BITS9600,memRemoteRPNBitRate        
+	jam DATABITS8,memRemotePRNDataBits      
+	jam 0x11,memRemotePRNXon
+	jam 0x13,memRemotePRNXoff
+	setarg 0
+	store 3,memRemotePRNStopBit
+	store 1,mem_spp_state                  
+	jam 0,memui_reconnect_mode
+	//branch rfcomm_init_spp
+rfcomm_init_spp:
+	bpatchx patch34_4,mem_patch34
+	setarg 0
+	store 1,mem_spp_state
+	store 1,mem_remote_spp_channel
+	store 1,mem_pn_dlci
+	fetch 1,mem_credit_flag
+	beq CREDIT_ENABLE,rfcomm_init_spp_with_credit
+	jam 0x50,mem_credit_given
+	rtn
+
+rfcomm_init_spp_with_credit:
+	jam 0x00,mem_credit_given
+	rtn
+
+set_CR_bit:
+	or_into 0x02,temp
+	rtn
+
+
+/*below added by koufan*/
+
+/*rfcomm_send */
+
+
+
+	/*rfcomm_calculate_FCS_sabm*/
+	/*input: address in temp*/
+	/*output: FCS in pdata  */
+rfcomm_calculate_FCS_sabm:
+	copy temp,pdata
+	reverse pdata,pdata //address
+	store 1,memFCStemp3
+	force INI_TX_SABM,pdata
+	reverse pdata,pdata
+	store 1,memFCStemp2
+	force 0x01,pdata                        
+	reverse pdata,pdata
+	store 1,memFCStemp1
+	call caculate_fcs
+	copy temp,pdata                        
+	rtn
+rfcomm_calculate_FCS_ua:
+	reverse pdata,pdata //address
+	store 1,memFCStemp3
+	force   RSP_TX_UA, pdata
+	reverse pdata, pdata
+	store   1, memFCStemp2
+	force   0x01, pdata
+	reverse pdata, pdata
+	store   1, memFCStemp1
+	branch caculate_fcs
+	/* FCS return from temp                */
+rfcomm_calculate_FCS_dlci0:
+	fetch 1,mem_rfcomm_initiator
+	branch rfcomm_calculate_FCS_dlci0_res,blank
+	setarg 0x70 //FCS of initiator
+	rtn
+rfcomm_calculate_FCS_dlci0_res:
+	setarg 0xaa//FCS of responder
+	rtn
+	
+rfcomm_save_FCS_uih:
+	reverse pdata, pdata //address 
+	store 1,memFCStemp3                     /* contw distroided                    */
+	force RSP_RX_UIH,pdata 
+	call caculate_UIHdata_fcs
+	fetcht 2,mem_contw_temp
+	copy temp,contw
+	istore 1,contw                      /* save FCS for later use              */
+	copy contw,temp
+	storet 2,mem_contw_temp
+	force RSP_RX_UIH_WDATA,pdata             /* P/F =1 + RSP_RX_UIH                 */
+	call caculate_UIHdata_fcs
+	fetcht 2,mem_contw_temp
+	copy temp,contw
+	istore 1,contw             /* save FCS for later use              */
+	rtn	
+/**********************************************************************/
+/* This subroutine caculates the FCS for UIH data                     */
+/* Input:                                                             */
+/*        the address byte at memFCStemp3(bit reversed), control byte */
+/*        at pdata (not bit reversed)                                 */
+/* Output:                                                            */
+/*        pdata: the FCS                                              */
+/**********************************************************************/  
+caculate_UIHdata_fcs:
+	reverse pdata,pdata
+	store   1,memFCStemp2
+	fetch   2, memFCStemp2                     
+	lshift8 pdata,pdata
+	store 3,mem_mod2div_temp
+	arg     0x107,regA
+	arg 0xf,regB
+	call mod2div
+	xor_into     0xd7, pdata
+	invert  pdata,pdata
+	reverse pdata,pdata
+	rtn
+	
+/**********************************************************************/
+/* This subroutine caculates the FCS                                  */
+/* Input:                                                             */
+/*        the address byte at memFCStemp3, control byte at memFCStemp2*/  
+/*        lenght at memFCStemp1 (all above data are bit reversed)     */
+/* Output:                                                            */
+/*        temp: the FCS                                               */
+/**********************************************************************/     
+caculate_fcs:
+	fetch 3, memFCStemp1                    /* load 3 bytes start at memFCStemp1   */
+	store 3,mem_mod2div_temp
+	arg 0x107,regA
+	arg 0xf,regB  //24bit(memFCStemp1+..+memFCStemp3) - 9bit(regA) = 15bit
+	call mod2div
+	lshift8 pdata,pdata 
+	arg 0x7, regB  //16bit(lshift8 pdata,pdata ) - 9bit(regA) = 7bit
+	call mod2div
+	xor_into     0x2b, pdata		//0x3d
+	invert  pdata, pdata                        
+	reverse pdata, pdata                      /* FCS at pdata                        */
+	copy    pdata, temp
+	rtn
+
+mod2div:
+	arg 0,regC
+	copy regB,loopcnt
+	call right_shift_n // right shift pdata (regB)bit
+	icopy temp
+mod2div_loop:
+	//jam 1,0x1fff
+//mod2div_loop1:
+	//fetch 1,0x1fff
+	//nbranch mod2div_loop1,blank
+	copy temp,pdata
+	lshift regC,regC//quotient
+	bbit0 8, mod2div_not_enough_reduction//the high bit of 0x107
+	ixor regA,temp// temp----remainer
+	increase 1,regC// quotient
+mod2div_not_enough_reduction: //Minuend smaller than Subtrahend
+	lshift temp,temp
+	fetch 3,mem_mod2div_temp
+	increase -1,regB
+	compare 0xff,regB,0xff
+	branch mod2div_end,true
+	copy regB,loopcnt
+	call right_shift_n // right shift pdata (regB)bit
+	isolate1 0,pdata
+	setflag true,0,temp //move a new bit from Dividend(queue) into Minuend(pdata)
+	branch mod2div_loop
+mod2div_end:
+	//output:remainer in pdata
+	rshift  temp,pdata
+	rtn
+
+get_rfcomm_snd_adss:
+	fetcht 1,mem_pn_dlci
+dlci_to_address_cmd:
+	//input DLCI from temp
+	lshift2 temp,temp
+	set1 RFCOMM_ADDRESS_EXT_LEN,temp
+	fetch 1,mem_rfcomm_initiator
+	ncall set_CR_bit,blank
+	storet 1,mem_rfcomm_send_adss
+	rtn
+
+channel_to_dlci:
+	//input channel from temp
+	lshift temp,temp
+	fetch 1,mem_rfcomm_initiator
+	setflag blank,0,temp //direction in dlci
+	//output dlci to temp
+	rtn
+rfcomm_rx_process_DLCI0_sabm:
+	fetcht 1,mem_current_channel //address
+	jam 0xd7,mem_current_fcs //FCS
+	call rfcomm_send_ua
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_RFCOMM_ONLY_SABM,pdata
+	set1 L2CAP_CHANNEL_RFCOMM_ONLY_UA,pdata
+	store 1,mem_rfcomm_state
+	jam 0,mem_rfcomm_initiator
+	branch rfcomm_rx_process_end
+rfcomm_rx_process_DLCI0_ua:
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_RFCOMM_ONLY_UA,pdata
+	store 1,mem_rfcomm_state
+	branch rfcomm_rx_process_end
+
+	
+rfcomm_rx_process:
+	bpatchx patch34_5,mem_patch34
+	fetch 1,memui_reconnect_mode
+	beq NO_RECONNECTION,rfcomm_rx_process_remote_page
+	branch rfcomm_rx_process_reconn
+
+rfcomm_rx_process_remote_page:
+	fetch 2,mem_l2cap_payload_ptr
+	copy pdata,contr
+	call get_rfcomm_head_struct
+	fetch 1,mem_current_channel
+	beq 0,parse_dlci0_rp
+	branch parse_uih_rp
+parse_dlci0_rp:
+	bpatchx patch34_6,mem_patch34
+	fetch 1,mem_current_frame_type
+	beq RFCOMM_FRAME_TYPE_SABM,rfcomm_rx_process_DLCI0_sabm
+	beq RFCOMM_FRAME_TYPE_UA,rfcomm_rx_process_DLCI0_ua
+	beq RFCOMM_FRAME_TYPE_UIH,parse_DLCI0_rp_uih
+	beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_rp_spp_disconn_send_event
+	rtn
+
+
+parse_DLCI0_rp_uih:
+	fetch 2,mem_rfcomm_uih_payload_ptr
+	copy pdata,contr
+	call get_rfcomm_uih_head_struct
+	fetch 1,mem_uih_cmd_type
+	beq UIH_PARAM_NEG_CMD,parse_DLCI0_rp_uih_pn_cmd
+	beq UIH_PARAM_NEG_RES,parse_DLCI0_rp_uih_pn_res
+	beq UIH_MODEM_STATUS_CMD,parse_DLCI0_rp_uih_ms_cmd
+	beq UIH_MODEM_STATUS_RES,parse_DLCI0_rp_uih_ms_res
+	beq UIH_PARAM_CMD_REMOVE_PORT,parse_DLCI0_rp_uih_cmd_port	
+	branch rfcomm_rx_process_end
+	
+parse_DLCI0_rp_uih_pn_cmd:
+	call parse_DLCI0_rp_uih_pn_res_common
+
+	branch parse_DLCI0_rp_uih_pn_cmd_spp
+
+parse_DLCI0_rp_uih_pn_cmd_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_PN_CMD,pdata
+	set1 RFCOMM_CHANNEL_STATE_PN_RES,pdata
+	store 1,mem_spp_state
+	call rfcomm_send_param_neg_res
+	branch rfcomm_rx_process_end
+	
+parse_DLCI0_rp_uih_pn_res:
+	call parse_DLCI0_rp_uih_pn_res_common
+	branch rfcomm_rx_process_end
+
+parse_DLCI0_rp_uih_pn_res_common:
+	call get_param_payload_ptr
+	branch  get_rfcomm_prarmer_negotiation
+
+get_rfcomm_param_modem_status:
+	call get_param_payload_ptr
+	ifetch 1,contr
+	rshift3 pdata,pdata
+	store 1,mem_ms_channel
+	ifetch 1,contr
+	store 1,mem_ms_param
+	rtn
+
+
+get_rfcomm_head_struct:
+	ifetch 1,contr
+	store 1,mem_current_adss
+	rshift3 pdata,pdata
+	store 1,mem_current_channel
+	ifetch 1,contr
+	store 1,mem_current_frame_type
+get_rfcomm_current_length:
+	call get_rfcomm_length_common
+	storet 2,mem_current_length
+	copy contr,pdata
+	store 2,mem_rfcomm_uih_payload_ptr
+	rtn
+
+get_rfcomm_uih_head_struct:
+	ifetch 1,contr
+	rshift pdata,pdata
+	store 1,mem_uih_cmd_type
+	call get_rfcomm_length_common
+	storet 2,mem_uih_length
+	copy contr,pdata
+	store 2,mem_param_payload_ptr
+	rtn
+
+
+get_param_payload_ptr:
+	fetch 2,mem_param_payload_ptr
+	copy pdata,contr
+	rtn
+
+get_rfcomm_length_common:
+	ifetch 1,contr
+	copy pdata,temp
+	rshift temp,temp
+	rtnbit1 0
+	ifetch 1,contr
+	lshift3 pdata,pdata
+	lshift4 pdata,pdata
+	iadd temp,temp
+	rtn
+
+get_rfcomm_prarmer_negotiation:
+	ifetch 1,contr
+	store 1,mem_pn_dlci
+	ifetch 1,contr
+	store 1,mem_pn_credit_flow_type_info
+	ifetch 1,contr
+	store 1,mem_pn_priority
+	ifetch 1,contr
+	store 1,mem_pn_acknowledg_timer
+	ifetch 2,contr
+	store 2,mem_pn_max_frame_size
+	ifetch 1,contr
+	store 1,mem_pn_max_retrans
+	ifetch 1,contr
+	store 1,mem_remote_credits
+	rtn
+
+
+parse_DLCI0_rp_uih_ms_cmd:
+	call get_rfcomm_param_modem_status
+
+	branch parse_DLCI0_rp_uih_ms_cmd_spp
+
+parse_DLCI0_rp_uih_ms_cmd_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_RCV_MS_CMD,pdata
+	set1 RFCOMM_CHANNEL_STATE_SND_MS_RES,pdata
+	store 1,mem_spp_state
+	fetcht 1,mem_pn_dlci
+	lshift2 temp,temp
+	or_into 3,temp
+	call rfcomm_send_modem_status_res
+	jam MORE_PKT_MSC_CMD_SPP,mem_rfcomm_send_more_pkt
+	branch rfcomm_rx_process_end
+	
+parse_DLCI0_rp_uih_ms_res:
+	jam BT_EVT_SPP_CONNECTED,mem_fifo_temp
+	call ui_ipc_send_event
+	call get_rfcomm_param_modem_status
+	fetch 1,mem_ms_channel
+	sub pdata,1,null
+	branch parse_DLCI0_rp_uih_MS_RES_spp,zero
+	branch assert
+parse_DLCI0_rp_uih_ms_res_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_RCV_MS_RES,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+
+parse_DLCI0_rp_uih_cmd_port:
+	call get_param_payload_ptr
+	ifetch 1,contr
+	store 1,mem_rpn_dlci
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x000e
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_rfcomm_initiator
+	//setarg 5
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch34_7,mem_patch34
+	setarg 0x15ef
+	istore 2,contw
+	setarg 0x1191
+	istore 2,contw
+	//fetch 1,mem_pn_dlci
+	//setarg 0x0b
+	fetch 1,mem_rpn_dlci
+	istore 1,contw //DLCI
+	setarg 0x000007
+	istore 5,contw
+//	setarg 0 //max frame size
+//	istore 2,contw 
+	setarg 0x01 //max retrans
+	istore 2,contw
+//	setarg 0x00
+//	istore 1,contw // init credits
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	rtn
+
+
+
+parse_uih_rp:
+	branch parse_uih_rp_spp
+
+parse_uih_rp_spp:
+	bpatchx patch35_0,mem_patch35
+	fetch 1,mem_current_frame_type
+	beq RFCOMM_FRAME_TYPE_UA,parse_uih_rp_spp_ua
+	beq RFCOMM_FRAME_TYPE_SABM,parse_uih_rp_spp_sabm
+	beq RFCOMM_FRAME_TYPE_UIH,parse_uih_spp_uih
+	beq RFCOMM_FRAME_TYPE_UIH_CREDITS,parse_uih_spp_uih_credits
+	beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_rp_spp_disconn
+	rtn
+parse_uih_rp_spp_ua:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_UA,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+parse_uih_rp_spp_sabm:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_UA,pdata
+	set1 RFCOMM_CHANNEL_STATE_SABM,pdata
+	store 1,mem_spp_state
+	fetch 1,mem_current_adss
+	call rfcomm_calculate_FCS_ua
+	store 1,mem_current_fcs
+	call rfcomm_send_ua
+	fetch 1,mem_current_adss
+	rshift2 pdata,pdata
+	store 1,mem_pn_dlci
+	lshift2 pdata,pdata
+	set0 RFCOMM_ADDRESS_CR,pdata
+	set1 RFCOMM_ADDRESS_EXT_LEN,pdata 
+	arg mem_HIUfcs_spp,temp // mem_HIUfcs_HF_WCredits in regB++
+	storet 2,mem_contw_temp
+	call rfcomm_save_FCS_uih
+	branch rfcomm_rx_process_end
+	
+parse_uih_spp_uih_credits:
+	fetch 2,mem_rfcomm_uih_payload_ptr
+	copy pdata,contr
+	increase 1,pdata
+	store 2,mem_rfcomm_uih_payload_ptr
+	ifetch 1,contr //remote credits
+	fetcht 1,mem_remote_credits
+	iadd temp,pdata
+	store 1,mem_remote_credits
+parse_uih_spp_uih:
+	call rfcomm_increase_credit_given
+parse_uih_spp_uih_cont:
+	call get_rfcomm_snd_adss
+	call rfcomm_send_uih_without_payload
+	call spp_process_rx_data
+	branch rfcomm_rx_process_end
+
+parse_uih_rp_spp_disconn_send_event:
+	jam BT_EVT_SPP_DISCONNECTED,mem_fifo_temp
+	call ui_ipc_send_event	
+parse_uih_rp_spp_disconn:
+	call rfcomm_init_spp
+	fetch 1,mem_current_adss
+	call rfcomm_calculate_FCS_ua
+	store 1,mem_current_fcs
+	call rfcomm_send_ua
+	branch rfcomm_rx_process_end
+	
+///////////////////////////////////////////
+///////////////////////////////////////////
+///////////////////////////////////////////
+rfcomm_rx_process_reconn:
+	fetch 2,mem_l2cap_payload_ptr
+	copy pdata,contr
+	call get_rfcomm_head_struct
+	fetch 1,mem_current_channel
+	beq 0,parse_DLCI0_reconn
+	branch parse_uih_reconn
+		
+parse_DLCI0_reconn:
+	bpatchx patch35_1,mem_patch35
+	fetch 1,mem_current_frame_type
+	beq RFCOMM_FRAME_TYPE_SABM,rfcomm_rx_process_DLCI0_sabm
+	beq RFCOMM_FRAME_TYPE_UA,rfcomm_rx_process_DLCI0_ua
+	beq RFCOMM_FRAME_TYPE_UIH,parse_DLCI0_reconn_uih
+	branch rfcomm_rx_process_end
+parse_DLCI0_reconn_uih:
+	fetch 2,mem_rfcomm_uih_payload_ptr
+	copy pdata,contr
+	call get_rfcomm_uih_head_struct
+	fetch 1,mem_uih_cmd_type
+	beq UIH_PARAM_NEG_CMD,parse_DLCI0_reconn_uih_pn_cmd
+	beq UIH_PARAM_NEG_RES,parse_DLCI0_reconn_uih_pn_cmd
+	beq UIH_MODEM_STATUS_CMD,parse_DLCI0_reconn_uih_ms_cmd
+	beq UIH_MODEM_STATUS_RES,parse_DLCI0_reconn_uih_ms_res
+	branch rfcomm_rx_process_end
+
+parse_DLCI0_reconn_uih_pn_cmd:
+	call parse_DLCI0_rp_uih_pn_res_common
+	fetch 1,mem_pn_dlci
+	rshift pdata,pdata
+	fetcht 1,mem_remote_spp_channel
+	isub temp,null
+	branch parse_DLCI0_reconn_uih_pn_cmd_spp,zero
+	branch assert
+parse_DLCI0_reconn_uih_pn_cmd_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_PN_RES,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+
+parse_DLCI0_reconn_uih_ms_cmd:
+	call get_rfcomm_param_modem_status
+	fetch 1,mem_ms_channel
+	fetcht 1,mem_remote_spp_channel
+	isub temp,null
+	branch parse_DLCI0_reconn_uih_ms_cmd_spp,zero
+	branch assert
+	branch rfcomm_rx_process_end
+parse_DLCI0_reconn_uih_ms_cmd_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_RCV_MS_CMD,pdata
+	set1 RFCOMM_CHANNEL_STATE_SND_MS_RES,pdata
+	store 1,mem_spp_state
+	fetcht 1,mem_pn_dlci
+	lshift2 temp,temp
+	or_into 3,temp
+	call rfcomm_send_modem_status_res
+	branch rfcomm_rx_process_end
+	
+parse_DLCI0_reconn_uih_ms_res:
+	call get_rfcomm_param_modem_status
+	fetch 1,mem_ms_channel
+	fetcht 1,mem_remote_spp_channel
+	isub temp,null
+	branch parse_DLCI0_reconn_uih_ms_res_spp,zero
+	branch assert
+parse_DLCI0_reconn_uih_ms_res_spp:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_RCV_MS_RES,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+
+parse_uih_reconn:
+	fetch 1,mem_current_channel
+	fetcht 1,mem_remote_spp_channel
+	isub temp,null
+	branch parse_uih_reconn_spp,zero
+	branch assert
+	branch rfcomm_rx_process_end
+
+parse_uih_reconn_spp:
+	fetch 1,mem_current_frame_type
+	beq RFCOMM_FRAME_TYPE_UA,parse_uih_reconn_spp_ua
+	beq RFCOMM_FRAME_TYPE_UIH,parse_uih_spp_uih
+	beq RFCOMM_FRAME_TYPE_UIH_CREDITS,parse_uih_spp_uih_credits
+	beq RFCOMM_FRAME_TYPE_DISCONN,parse_uih_reconn_spp_disconn
+parse_uih_reconn_spp_ua:
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_UA,pdata
+	store 1,mem_spp_state
+	branch rfcomm_rx_process_end
+parse_uih_reconn_spp_sabm:
+	branch parse_uih_reconn_spp_sabm//loop
+parse_uih_reconn_spp_disconn:
+	branch parse_uih_rp_spp_disconn
+rfcomm_rx_process_end:
+	rtn
+	
+rfcomm_send_more_pkt:
+	fetch 1,mem_rfcomm_send_more_pkt
+	rtn blank
+	beq MORE_PKT_MSC_CMD_SPP,rfcomm_send_more_pkt_msc_cmd_spp
+	branch assert
+	
+rfcomm_send_more_pkt_msc_cmd_spp:
+	jam 0,mem_rfcomm_send_more_pkt
+	call l2cap_malloc_rfcomm_channel
+	arg SPP_SLAVE_CHANNEL,temp
+	fetcht 1,mem_pn_dlci
+	lshift2 temp,temp
+rfcomm_send_more_pkt_msc_cmd_spp0:
+	or_into 0x03,temp
+	arg 0xaa,regA
+	call rfcomm_send_modem_status_cmd
+	call l2cap_get_rfcomm_tx_buff
+	copy contw,contr
+	ifetch 2, contr
+	branch assert,blank
+	rtn
+
+rfcomm_send_sabm:
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x0004
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_current_adss
+	istore 1,contw //address
+	bpatchx patch35_2,mem_patch35
+	setarg 0x013f
+	istore 2,contw
+	fetch 1,mem_current_fcs
+	istore 1,contw
+	rtn
+rfcomm_send_ua:
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x0004
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_current_adss
+	istore 1,contw //address
+	bpatchx patch35_3,mem_patch35
+	setarg 0x0173
+	istore 2,contw
+	fetch 1,mem_current_fcs
+	istore 1,contw
+	rtn
+rfcomm_send_param_neg_cmd:
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x000e
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_rfcomm_initiator
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch35_4,mem_patch35
+	setarg 0x15ef
+	istore 2,contw
+	setarg 0x1183
+	istore 2,contw
+	copy temp,pdata //DLCI in temp
+	istore 1,contw
+	setarg 0x0000f0
+	istore 3,contw
+	setarg RFCOMM_MAX_FRAME_SIZE
+	istore 2,contw
+	setarg 0
+	istore 1,contw
+	setarg 0x01		//change here later
+	istore 1,contw
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	jam 0x10,mem_credit_given
+	rtn
+rfcomm_send_param_neg_res:
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x000e
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_rfcomm_initiator
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch35_5,mem_patch35
+	setarg 0x15ef
+	istore 2,contw
+	setarg 0x1181
+	istore 2,contw
+	fetch 1,mem_pn_dlci
+	istore 1,contw //DLCI
+	setarg 0x0000e0
+	istore 3,contw
+	fetch 2,mem_rfcomm_max_frame_size
+	istore 2,contw 
+	setarg 0x00 //max retrans
+	istore 1,contw
+	fetch 1,mem_rfcomm_credit_init_data
+	istore 1,contw // init credits
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	rtn
+rfcomm_send_modem_status_cmd:
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x0008
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	fetch 1,mem_rfcomm_initiator
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch35_6,mem_patch35
+	setarg 0x09ef
+	istore 2,contw
+	setarg 0x05e3
+	istore 2,contw
+	copy temp,pdata //DLCI adress
+	istore 1,contw
+	setarg 0x8d
+	istore 1,contw
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	rtn
+
+rfcomm_send_modem_status_res:
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x0008
+	istore 2,contw //l2cap len
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw//cid
+	copy temp,timeup
+	fetch 1,mem_rfcomm_initiator
+	lshift pdata,pdata
+	set1 0,pdata //ext len
+	istore 1,contw //DLCI0 address
+	bpatchx patch35_7,mem_patch35
+	setarg 0x09ef
+	istore 2,contw
+	setarg 0x05e1
+	istore 2,contw
+	copy timeup,pdata //DLCI address in temp
+	istore 1,contw
+	setarg 0x8d
+	istore 1,contw
+	call rfcomm_calculate_FCS_dlci0
+	istore 1,contw
+	rtn
+
+rfcomm_send_uih_without_payload:
+	bpatchx patch36_0,mem_patch36
+	fetch 1,mem_credit_given
+	rtn blank
+	hfetch 2,core_uart_rxitems
+	nrtn blank
+	copy rega,pdata
+	store 1,mem_pdatatemp+1
+	storet 1,mem_pdatatemp
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	call l2cap_malloc_rfcomm_channel
+	call l2cap_get_rfcomm_tx_buff
+	setarg 0x05
+	istore 2,contw
+	fetch 2,mem_RFCOMM_remote_CID
+	istore 2,contw
+	fetch 1,mem_rfcomm_send_adss
+	istore 1,contw
+	setarg 0x01ff
+	istore 2,contw
+	fetch 1,mem_credit_given
+	istore 1,contw
+	fetch 1,mem_HIUfcs_SPP_WCredits
+	istore 1,contw
+	jam 0,mem_credit_given
+	rtn
+	
+rfcomm_increase_credit_given:
+	bpatchx patch36_1,mem_patch36
+	fetch 1,mem_credit_flag
+	rtneq CREDIT_ENABLE
+	fetch 2,mem_current_length
+	rtn blank
+	fetch 1,mem_credit_given
+	increase 1,pdata
+	store 1,mem_credit_given
+	rtn
+
+spp_process_rx_data:
+	fetch 2,mem_cb_receive_spp_data
+	branch callback_func
+
+spp_tx_rfcomm_packet:
+	bpatchx patch36_2,mem_patch36
+	//credit
+	fetch 1,mem_remote_credits
+	rtn blank
+	increase -1,pdata
+	store 1,mem_remote_credits
+	fetch 2,mem_pn_max_frame_size
+	fetcht 2,mem_current_packet_length
+	isub temp,null
+	branch ssp_tx_rfcomm_from_uart,positive
+	store 2,mem_current_packet_length
+ssp_tx_rfcomm_from_uart:
+	fetch 1,mem_credit_given
+	branch ssp_tx_rfcomm_from_uart_without_credit,blank
+	jam 1,mem_rfcomm_send_offset
+	fetch 1,mem_HIUfcs_SPP_WCredits
+	store 1,mem_rfcomm_send_fcs
+	setarg RSP_RX_UIH_WDATA
+	store 1,mem_rfcomm_send_frame_type
+	branch ssp_tx_rfcomm_from_uart_common
+ssp_tx_rfcomm_from_uart_without_credit:
+	jam 0,mem_rfcomm_send_offset
+	fetch 1,mem_HIUfcs_SPP
+	store 1,mem_rfcomm_send_fcs
+	setarg RSP_TX_UIH
+	store 1,mem_rfcomm_send_frame_type
+ssp_tx_rfcomm_from_uart_common:
+	bpatchx patch36_3,mem_patch36
+	fetch 2,mem_current_packet_length
+	sub pdata,127,null
+	branch ssp_tx_rfcomm_from_uart_common0,positive
+	fetch 1,mem_rfcomm_send_offset
+	increase 1,pdata
+	store 1,mem_rfcomm_send_offset
+ssp_tx_rfcomm_from_uart_common0:
+	call get_rfcomm_snd_adss
+	fetch 2,mem_current_packet_length
+	increase 8,pdata	//fcs + rfcommhead + l2caphead == 8
+	fetcht 1,mem_rfcomm_send_offset
+	iadd temp,rega
+	//rfcomm payload
+	call l2cap_malloc
+	store 2,mem_rfcomm_tx_buff_ptr
+	increase 4,pdata
+	store 2,mem_rfcomm_tx_payload_ptr
+	copy pdata,contw
+	fetch 1,mem_rfcomm_send_adss
+	istore 1,contw
+	fetch 1,mem_rfcomm_send_frame_type
+	istore 1,contw
+	call ssp_tx_write_length
+	call ssp_tx_write_given_credit
+	bpatchx patch36_4,mem_patch36
+	fetch 2,mem_nl_rx_data_src		//src
+	copy pdata,contru
+	fetch 2,mem_current_packet_length
+	copy pdata,loopcnt
+	call uart_copy_rx_bytes_fast
+	copy contw,temp
+	copy contru,pdata
+	store 2,mem_nl_rx_data_src
+	copy temp,contw	
+	fetch 1,mem_rfcomm_send_fcs
+	istore 1,contw
+	fetch 2,mem_rfcomm_tx_buff_ptr
+	copy pdata,contw
+	fetch 2,mem_current_packet_length
+	fetcht 1,mem_rfcomm_send_offset
+	iadd temp,pdata
+	increase 4,pdata
+	istore 2,contw
+	fetch 2,mem_rfcomm_remote_cid
+	istore 2,contw
+	jam 0,mem_credit_given	//whatever mem_credit_given is set to 0
+	fetch 2,mem_nl_rx_len_all
+	beq 0,module_hci_command_tx_spp_tx_complete
+	jam HCI_NOT_DISCARD_PACKET,mem_module_temp_nl_discard_packet
+	rtn
+
+ssp_tx_write_length:
+	bpatchx patch36_5,mem_patch36
+	fetch 2,mem_current_packet_length
+	sub pdata,0x7f,null
+	nbranch ssp_tx_write_long_packet,positive
+	lshift pdata,pdata
+	set1 0,pdata
+	istore 1,contw
+	rtn
+ssp_tx_write_long_packet:
+	fetch 2,mem_current_packet_length
+	rshift3 pdata,pdata
+	rshift4 pdata,temp
+	and_into 0x7f,pdata
+	lshift pdata,pdata
+	set0 0,pdata
+	istore 1,contw
+	istoret 1,contw
+	rtn
+ssp_tx_write_given_credit:
+	fetch 1,mem_credit_given
+	rtn blank
+	istore 1,contw
+	rtn
+
+	
+
+
+else
+
+rfcomm_init:
+	rtn
+rfcomm_init_spp:
+set_CR_bit:
+rfcomm_calculate_FCS_sabm:
+rfcomm_calculate_FCS_ua:
+rfcomm_calculate_FCS_dlci0:
+rfcomm_calculate_FCS_dlci0_res:
+rfcomm_save_FCS_uih:
+caculate_UIHdata_fcs:
+caculate_fcs:
+mod2div:
+mod2div_loop:
+mod2div_not_enough_reduction:
+mod2div_end:
+get_rfcomm_snd_adss:
+dlci_to_address_cmd:
+dlci_to_address_res:
+channel_to_dlci:
+rfcomm_rx_process_DLCI0_sabm:
+rfcomm_rx_process_DLCI0_ua:
+rfcomm_rx_process:
+rfcomm_rx_process_remote_page:
+parse_dlci0_rp:
+parse_DLCI0_rp_uih:
+parse_DLCI0_rp_uih_pn_cmd:
+parse_DLCI0_rp_uih_pn_cmd_spp:
+parse_DLCI0_rp_uih_pn_res:
+parse_DLCI0_rp_uih_pn_res_common:
+get_rfcomm_param_modem_status:
+get_rfcomm_head_struct:
+get_rfcomm_current_length:
+get_rfcomm_uih_head_struct:
+get_param_payload_ptr:
+get_rfcomm_param_length_common:
+get_rfcomm_length_common:
+get_rfcomm_prarmer_negotiation:
+parse_DLCI0_rp_uih_ms_cmd:
+parse_DLCI0_rp_uih_ms_cmd_spp:
+parse_DLCI0_rp_uih_ms_res:
+parse_DLCI0_rp_uih_ms_res_spp:
+parse_uih_rp:
+parse_uih_rp_spp:
+parse_uih_rp_spp_ua:
+parse_uih_rp_spp_sabm:
+parse_uih_spp_uih_credits:
+parse_uih_spp_uih:
+parse_uih_spp_uih_cont:
+parse_uih_rp_spp_disconn:
+rfcomm_rx_process_reconn:
+	branch assert 
+parse_DLCI0_reconn:
+parse_DLCI0_reconn_uih:
+parse_DLCI0_reconn_uih_pn_cmd:
+parse_DLCI0_reconn_uih_pn_cmd_spp:
+parse_DLCI0_reconn_uih_ms_cmd:
+parse_DLCI0_reconn_uih_ms_cmd_spp:
+parse_DLCI0_reconn_uih_ms_res:
+parse_DLCI0_reconn_uih_ms_res_noext:
+parse_DLCI0_reconn_uih_ms_res_spp:
+parse_uih_reconn:
+parse_uih_reconn_spp:
+parse_uih_reconn_spp_ua:
+parse_uih_reconn_spp_sabm:
+parse_uih_reconn_spp_disconn:
+rfcomm_rx_process_end:
+rfcomm_send_more_pkt:
+rfcomm_send_more_pkt_msc_cmd_spp:
+rfcomm_send_sabm:
+rfcomm_send_ua:
+rfcomm_send_param_neg_cmd:
+rfcomm_send_param_neg_res:
+rfcomm_send_modem_status_cmd:
+rfcomm_send_modem_status_res:
+rfcomm_send_uih_without_payload:
+rfcomm_increase_credit_given:
+spp_process_rx_data:
+spp_tx_rfcomm_packet:
+ssp_tx_rfcomm_from_uart:
+ssp_tx_rfcomm_from_uart_without_credit:
+ssp_tx_rfcomm_from_uart_common:
+ssp_tx_rfcomm_from_uart_common0:
+ssp_tx_write_length:
+ssp_tx_write_long_packet:
+ssp_tx_write_given_credit:
+	branch assert
+endif
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/scheduler.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/scheduler.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/scheduler.prog	(working copy)
@@ -0,0 +1,461 @@
+scheduler_process:
+	bpatchx patch36_6,mem_patch36
+	call check_51cmd
+	call app_process_bb_event
+	call process_conn_sm
+/* check the connection state sequence byte */
+	bpatchx patch36_7,mem_patch36
+ifdef SIMPLE_PAIRING
+	call sp_calc_sequence
+	call simple_pairing_sequence
+	call master_simple_paring_sequence
+endif
+//return if it is hci mode. 'cause the following is host part.
+//notify BB to tx a l2cap packet
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	//for conn to MTK 
+	call l2cap_call_proc_sigal_pending
+	call l2cap_malloc_is_fifo_full
+	nrtn blank
+	bpatchx patch37_0,mem_patch37
+//to generat a new l2cap packet
+	call process_upper_sm
+	call l2cap_send_config_req
+ifdef COMPILE_RFCOMM
+	call rfcomm_send_more_pkt//use this function to send msc_cmd after msc_rep sent
+endif
+scheduler_process0:
+	call scheduler_tx_disconnect_hid //may not used
+	bpatchx patch37_1,mem_patch37
+//	call l2cap_malloc_is_fifo_full
+//	nrtn blank
+	branch app_process_bt
+	
+scheduler_tx_disconnect_hid:
+	fetch 1,mem_CONTROL_tasks		
+	bbit1 L2CAP_DISCONNECT_INTERRUPT,L2CAP_disconnect_interrupt_req
+	bbit1 L2CAP_DISCONNECT_CONTROL,L2CAP_disconnect_control_req
+	rtn
+	
+scheduler_tx_l2cap_pkt:
+	bpatchx patch37_2,mem_patch37
+	call l2cap_malloc_is_fifo_empty
+	rtn blank //empty
+	fetch 1,mem_op
+	rtnbit1 op_txl2cap
+	call l2cap_malloc_fifo_out
+	store 2,mem_txptr
+	copy pdata,contr
+	ifetch 2,contr
+	increase 4,pdata
+	store 2,mem_tx_len
+	jam 6,mem_tx_lch//start pkt
+	bpatchx patch37_3,mem_patch37
+	fetch 2,mem_l2cap_tx_multi_offset
+	branch scheduler_tx_l2cap_start_pkt,blank
+	fetch 1,mem_op
+	rtnbit0 op_pkt_comp
+	set0 op_pkt_comp,pdata
+	store 1,mem_op
+	jam 5,mem_tx_lch//continue pkt
+	fetcht 2,mem_l2cap_tx_multi_offset
+	fetch 2,mem_txptr
+	iadd temp,pdata
+	store 2,mem_txptr
+	fetch 2,mem_tx_len
+	isub temp,pdata
+	store 2,mem_tx_len
+scheduler_tx_l2cap_start_pkt:
+	bpatchx patch37_4,mem_patch37
+	fetch 2,mem_tx_len
+	branch assert,blank
+	arg l2cap_max_pkt_len,temp //max len of dh3 pkt
+	isub temp,pdata
+	nbranch scheduler_Tx_l2cap_last_pkt,positive
+	bpatchx patch37_5,mem_patch37
+	storet 2,mem_tx_len //l2cap_max_pkt_len
+	fetch 2,mem_l2cap_tx_multi_offset
+	iadd temp,pdata
+	store 2,mem_l2cap_tx_multi_offset
+	branch scheduler_Tx_l2cap_pkt_end
+scheduler_Tx_l2cap_last_pkt:
+	setarg 0
+	store 2,mem_l2cap_tx_multi_offset
+scheduler_Tx_l2cap_pkt_end:
+	fetch 1,mem_op
+	set1 op_txl2cap,pdata
+	store 1,mem_op
+	rtn
+
+scheduler_start_upper_sm:
+	fetch 1,mem_UI_profile_supported
+	bbit1 support_HID,scheduler_start_upper_sm_hid
+	jam UPPERSM_RECONN_SDP_CONN,mem_upper_sm_reconn
+	rtn
+scheduler_start_upper_sm_hid:
+	jam UPPERSM_RECONN_HID_CTRL_CONN,mem_upper_sm_reconn
+	rtn
+	
+process_upper_sm:
+	fetch 1,memui_reconnect_mode
+	nbranch process_upper_sm_reconn,blank
+process_upper_sm_remote_page:
+	fetch 1,mem_upper_sm_remote_page
+	//beq UPPERSM_RP_IDLE,process_upper_sm_rp_idle
+	rtn blank
+	//nothing to do when remote page to create a connection.
+	jam 0,mem_upper_sm_remote_page
+process_upper_sm_rp_wait:
+	rtn
+
+
+process_upper_sm_reconn:
+	bpatchx patch37_6,mem_patch37
+	fetch 1,mem_upper_sm_reconn
+	rtn blank
+	beq UPPERSM_RECONN_SDP_CONN,process_upper_sm_reconn_sdp_conn
+	beq UPPERSM_RECONN_SDP_CONN_WAIT,process_upper_sm_reconn_sdp_conn_wait
+	beq UPPERSM_RECONN_SDP_CFG,process_upper_sm_reconn_sdp_cfg
+	beq UPPERSM_RECONN_SDP_CFG_WAIT,process_upper_sm_reconn_sdp_cfg_wait
+	beq UPPERSM_RECONN_SS_SPP,process_upper_sm_reconn_ss_spp
+	beq UPPERSM_RECONN_SS_SPP_WAIT,process_upper_sm_reconn_ss_spp_wait
+	beq UPPERSM_RECONN_SDP_DISCONN,process_upper_sm_reconn_sdp_disconn
+	beq UPPERSM_RECONN_SDP_DISCONN_WAIT,process_upper_sm_reconn_sdp_disconn_wait
+	beq UPPERSM_RECONN_HID_CTRL_CONN,process_upper_sm_reconn_hid_ctrl_conn
+	beq UPPERSM_RECONN_HID_CTRL_CONN_WAIT,process_upper_sm_reconn_hid_ctrl_conn_wait
+	beq UPPERSM_RECONN_HID_CTRL_CFG,process_upper_sm_reconn_hid_ctrl_cfg
+	beq UPPERSM_RECONN_HID_CTRL_CFG_WAIT,process_upper_sm_reconn_hid_ctrl_cfg_wait
+	beq UPPERSM_RECONN_HID_INT_CONN,process_upper_sm_reconn_hid_int_conn
+	beq UPPERSM_RECONN_HID_INT_CONN_WAIT,process_upper_sm_reconn_hid_int_conn_wait
+	beq UPPERSM_RECONN_HID_INT_CFG,process_upper_sm_reconn_hid_int_cfg
+	beq UPPERSM_RECONN_HID_INT_CFG_WAIT,process_upper_sm_reconn_hid_int_cfg_wait
+	beq UPPERSM_RECONN_RFCOMM_CONN,process_upper_sm_reconn_rfcomm_conn
+	beq UPPERSM_RECONN_RFCOMM_CONN_WAIT,process_upper_sm_reconn_rfcomm_conn_wait
+	beq UPPERSM_RECONN_RFCOMM_CFG,process_upper_sm_reconn_rfcomm_cfg
+	beq UPPERSM_RECONN_RFCOMM_CFG_WAIT,process_upper_sm_reconn_rfcomm_cfg_wait
+	beq UPPERSM_RECONN_RFCOMM_SABM,process_upper_sm_reconn_rfcomm_sabm
+	beq UPPERSM_RECONN_RFCOMM_SABM_WAIT,process_upper_sm_reconn_rfcomm_sabm_wait
+	beq UPPERSM_RECONN_SPP_CMD_PN,process_upper_sm_reconn_spp_cmd_pn
+	beq UPPERSM_RECONN_SPP_CMD_PN_WAIT,process_upper_sm_reconn_spp_cmd_pn_wait
+	beq UPPERSM_RECONN_SPP_SABM,process_upper_sm_reconn_spp_sabm
+	beq UPPERSM_RECONN_SPP_SABM_WAIT,process_upper_sm_reconn_spp_sabm_wait
+	beq UPPERSM_RECONN_SPP_CMD_MS,process_upper_sm_reconn_spp_cmd_ms
+	beq UPPERSM_RECONN_SPP_CMD_MS_WAIT,process_upper_sm_reconn_spp_cmd_ms_wait
+process_upper_sm_reconn_wait:
+	rtn
+process_upper_sm_reconn_sdp_conn:
+	call upper_sm_send_sdp_conn //return n-user if sending failed
+	jam UPPERSM_RECONN_SDP_CONN_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	store 1,mem_sdp_state
+	rtn
+process_upper_sm_reconn_sdp_cfg:
+	jam UPPERSM_RECONN_SDP_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_sdp_state
+	rtnbit1 L2CAP_CHANNEL_STATE_SND_CFG_REQ
+	jam UPPERSM_RECONN_SDP_CFG,mem_upper_sm_reconn
+	call upper_sm_send_sdp_cfg //return n-user if sending failed
+	jam UPPERSM_RECONN_SDP_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_sdp_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_sdp_state
+	rtn
+process_upper_sm_reconn_ss_spp:
+	call l2cap_malloc_is_fifo_empty
+	nrtn blank
+	call upper_sm_send_ss_spp
+	jam UPPERSM_RECONN_SS_SPP_WAIT,mem_upper_sm_reconn
+	rtn
+process_upper_sm_reconn_sdp_disconn:
+	call upper_sm_send_sdp_disconn
+	jam UPPERSM_RECONN_SDP_DISCONN_WAIT,mem_upper_sm_reconn
+	rtn
+process_upper_sm_reconn_hid_ctrl_conn:
+	call upper_sm_send_hid_ctrl_conn
+	jam UPPERSM_RECONN_HID_CTRL_CONN_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	store 1,mem_hid_control_state
+	rtn
+process_upper_sm_reconn_hid_ctrl_cfg:    
+	call upper_sm_send_hid_ctrl_cfg
+	jam UPPERSM_RECONN_HID_CTRL_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_hid_control_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_hid_control_state
+	rtn
+process_upper_sm_reconn_hid_int_conn:
+	call upper_sm_send_hid_int_conn
+	jam UPPERSM_RECONN_HID_INT_CONN_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	store 1,mem_hid_interrupt_state
+	rtn
+process_upper_sm_reconn_hid_int_cfg:    
+	call upper_sm_send_hid_int_cfg
+	jam UPPERSM_RECONN_HID_INT_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_hid_interrupt_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_hid_interrupt_state
+	rtn
+process_upper_sm_reconn_rfcomm_conn:
+	call upper_sm_send_rfcomm_conn
+	jam UPPERSM_RECONN_RFCOMM_CONN_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_CONN_REQ,pdata
+	store 1,mem_rfcomm_state
+	rtn
+process_upper_sm_reconn_rfcomm_cfg: 
+	call upper_sm_send_rfcomm_cfg
+	jam UPPERSM_RECONN_RFCOMM_CFG_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_STATE_SND_CFG_REQ,pdata
+	store 1,mem_rfcomm_state
+	rtn
+process_upper_sm_reconn_rfcomm_sabm:
+	call upper_sm_send_rfcomm_sabm
+	jam UPPERSM_RECONN_RFCOMM_SABM_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_rfcomm_state
+	set1 L2CAP_CHANNEL_RFCOMM_ONLY_SABM,pdata
+	store 1,mem_rfcomm_state
+	rtn
+process_upper_sm_reconn_spp_cmd_pn: 
+	call upper_sm_send_spp_cmd_pn
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_PN_CMD
+	store 1,mem_spp_state
+	jam UPPERSM_RECONN_SPP_CMD_PN_WAIT,mem_upper_sm_reconn
+	rtn
+process_upper_sm_reconn_spp_sabm:   
+	call upper_sm_send_spp_sabm
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_SABM
+	store 1,mem_spp_state
+	jam UPPERSM_RECONN_SPP_SABM_WAIT,mem_upper_sm_reconn
+	fetch 1,mem_remote_spp_channel //address in pdata
+	lshift3 pdata,pdata
+	or_into 3,pdata
+	arg mem_HIUfcs_SPP,temp // mem_HIUfcs_spp_WCredits in regB++
+	storet 2,mem_contw_temp
+	branch rfcomm_save_FCS_uih
+process_upper_sm_reconn_spp_cmd_ms: 
+	call upper_sm_send_spp_cmd_ms
+	fetch 1,mem_spp_state
+	set1 RFCOMM_CHANNEL_STATE_SND_MS_CMD
+	store 1,mem_spp_state
+	jam UPPERSM_RECONN_SPP_CMD_MS_WAIT,mem_upper_sm_reconn
+	rtn
+
+process_upper_sm_reconn_sdp_conn_wait:
+	fetch 1,mem_sdp_state
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES
+	jam UPPERSM_RECONN_SDP_CFG,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_sdp_cfg_wait:
+	fetch 1,mem_sdp_state
+	rtnne L2CAP_CHANNEL_SETUP_COMPLETE
+	jam UPPERSM_RECONN_SS_SPP ,mem_upper_sm_reconn
+process_upper_sm_reconn_ss_spp_wait:
+	fetch 1,mem_message_to_uppersm
+	rtnne RECIEVE_SS_REASULT_HF
+	jam 0,mem_message_to_uppersm
+	jam UPPERSM_RECONN_SDP_DISCONN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_sdp_disconn_wait:
+	fetch 1,mem_sdp_state
+	nrtn blank
+	fetch 1,mem_UI_profile_supported
+	bbit1 support_HID,process_upper_sm_reconn_setup_hid
+	bbit1 support_SPP,process_upper_sm_reconn_setup_rfcomm
+	branch process_upper_sm_reconn_termination
+process_upper_sm_reconn_hid_ctrl_conn_wait:
+	fetch 1,mem_hid_control_state
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES
+	jam UPPERSM_RECONN_HID_CTRL_CFG,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_hid_ctrl_cfg_wait:
+	fetch 1,mem_hid_control_state
+	rtnne L2CAP_CHANNEL_SETUP_COMPLETE
+	jam UPPERSM_RECONN_HID_INT_CONN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_hid_int_conn_wait:  
+	fetch 1,mem_hid_interrupt_state
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES
+	jam UPPERSM_RECONN_HID_INT_CFG,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_hid_int_cfg_wait:  
+	fetch 1,mem_hid_interrupt_state
+	rtnne L2CAP_CHANNEL_SETUP_COMPLETE
+	fetch 1,mem_UI_profile_supported
+	bbit1 support_SPP,process_upper_sm_reconn_setup_rfcomm
+	branch process_upper_sm_reconn_termination
+process_upper_sm_reconn_rfcomm_conn_wait: 
+	fetch 1,mem_rfcomm_state
+	rtnbit0 L2CAP_CHANNEL_STATE_CONN_RES
+	jam UPPERSM_RECONN_RFCOMM_CFG,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_rfcomm_cfg_wait:
+	fetch 1,mem_rfcomm_state
+	rtnne L2CAP_CHANNEL_SETUP_COMPLETE
+	jam UPPERSM_RECONN_RFCOMM_SABM,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_rfcomm_sabm_wait:  
+	fetch 1,mem_rfcomm_state
+	rtnne L2CAP_CHANNEL_RFCOMM_DLCI0_OPENED
+	fetch 1,mem_UI_profile_supported
+	bbit1 support_SPP,process_upper_sm_reconn_setup_spp
+	branch process_upper_sm_reconn_termination
+process_upper_sm_reconn_spp_cmd_pn_wait:
+	fetch 1,mem_spp_state
+	rtnbit0 RFCOMM_CHANNEL_STATE_PN_RES
+	jam UPPERSM_RECONN_SPP_SABM,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_spp_sabm_wait:
+	fetch 1,mem_spp_state
+	rtnbit0 RFCOMM_CHANNEL_STATE_UA
+	jam UPPERSM_RECONN_SPP_CMD_MS ,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_spp_cmd_ms_wait: 
+	fetch 1,mem_spp_state
+	rtnne RFCOMM_CHANNEL_SETUP_COMPLETE
+	branch process_upper_sm_reconn_termination
+
+process_upper_sm_reconn_setup_hid:
+	jam UPPERSM_RECONN_HID_CTRL_CONN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+
+process_upper_sm_reconn_setup_rfcomm:
+	jam UPPERSM_RECONN_RFCOMM_CONN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+process_upper_sm_reconn_setup_spp:
+	jam UPPERSM_RECONN_SPP_CMD_PN,mem_upper_sm_reconn
+	branch process_upper_sm_reconn
+
+
+
+process_upper_sm_reconn_termination:
+	jam 0,mem_upper_sm_reconn
+	rtn
+upper_sm_send_sdp_conn:
+	bpatchx patch37_7,mem_patch37
+	call l2cap_malloc_signal_channel
+	setarg PSM_SDP
+	copy pdata,temp
+	setarg L2CAP_SDP_channel
+	copy pdata,timeup
+	branch ML2CAP_send_signal_connect_req
+	
+upper_sm_send_sdp_cfg:
+	bpatchx patch38_0,mem_patch38
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_SDP_remote_CID
+	copy pdata,temp
+	branch ML2CAP_send_signal_config_req
+	
+upper_sm_send_sdp_disconn:
+	bpatchx patch38_1,mem_patch38
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_SDP_remote_CID
+	copy pdata,temp
+	arg L2CAP_SDP_channel,timeup
+	call ML2CAP_send_signal_disconn_req
+	fetch 1,mem_sdp_state
+	set0 L2CAP_CHANNEL_STATE_RCV_CFG_RES ,pdata
+	store 1,mem_sdp_state
+	rtn
+//service search
+upper_sm_send_ss_spp:
+	bpatchx patch38_2,mem_patch38
+	call l2cap_malloc_sdp_channel
+	call sdp_send_spp_request
+	branch MSDP_send_req_done
+
+upper_sm_send_rfcomm_conn:
+	bpatchx patch38_3,mem_patch38
+	call l2cap_malloc_signal_channel
+	setarg PSM_RFCOMM
+	copy pdata,temp
+	setarg L2CAP_RFCOMM_channel
+	copy pdata,timeup
+	branch ML2CAP_send_signal_connect_req
+
+upper_sm_send_rfcomm_cfg:
+	bpatchx patch38_4,mem_patch38
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_rfcomm_remote_cid
+	copy pdata,temp
+	branch ML2CAP_send_signal_config_req
+
+upper_sm_send_hid_ctrl_conn:
+	bpatchx patch38_5,mem_patch38
+	call l2cap_malloc_signal_channel
+	setarg PSM_HID_control
+	copy pdata,temp
+	setarg L2CAP_HID_Control_channel
+	copy pdata,timeup
+	branch ML2CAP_send_signal_connect_req
+
+upper_sm_send_hid_ctrl_cfg:
+	bpatchx patch38_6,mem_patch38
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_hid_ctrl_remote_cid
+	copy pdata,temp
+	branch ML2CAP_send_signal_config_req
+
+upper_sm_send_hid_int_conn:
+	bpatchx patch38_7,mem_patch38
+	call l2cap_malloc_signal_channel
+	setarg PSM_HID_interrupt
+	copy pdata,temp
+	setarg L2CAP_HID_interrupt_channel
+	copy pdata,timeup
+	branch ML2CAP_send_signal_connect_req
+	
+upper_sm_send_hid_int_cfg:
+	bpatchx patch39_0,mem_patch39
+	call l2cap_malloc_signal_channel
+	fetch 2,mem_hid_int_remote_cid
+	copy pdata,temp
+	branch ML2CAP_send_signal_config_req
+
+upper_sm_send_rfcomm_sabm:
+	bpatchx patch39_1,mem_patch39
+	call l2cap_malloc_rfcomm_channel
+	//force 3,temp //address
+	jam 3,mem_current_adss
+	jam 0x1c,mem_current_fcs
+	call rfcomm_send_sabm
+	jam 1,mem_rfcomm_initiator
+	rtn
+
+upper_sm_send_spp_cmd_pn:
+	bpatchx patch39_2,mem_patch39
+	call l2cap_malloc_rfcomm_channel
+	fetcht 1,mem_remote_spp_channel
+	call channel_to_dlci
+	storet 1,mem_pn_dlci
+	branch rfcomm_send_param_neg_cmd
+
+upper_sm_send_spp_sabm:
+	bpatchx patch39_3,mem_patch39
+	call l2cap_malloc_rfcomm_channel
+	fetcht 1,mem_pn_dlci
+	call dlci_to_address_cmd
+	call rfcomm_calculate_FCS_sabm //sabm fcs use once only,not need to save
+	store 1,mem_current_fcs
+	fetcht 1,mem_pn_dlci
+	call dlci_to_address_cmd
+	storet 1,mem_current_adss
+	branch rfcomm_send_sabm
+
+upper_sm_send_spp_cmd_ms:
+	bpatchx patch39_4,mem_patch39
+	call l2cap_malloc_rfcomm_channel
+	fetcht 1,mem_pn_dlci
+	call dlci_to_address_cmd //address in temp
+	branch rfcomm_send_modem_status_cmd
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/sdp.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/sdp.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/sdp.prog	(working copy)
@@ -0,0 +1,1206 @@
+/**********************************************************************/
+/* Subroutine: sdp_process                                         */
+/* Process Service Discovery Request                                  */
+/* Called from L2CAP, check PDUID, branch to different req processings*/
+/*                                                                    */  
+/* Input:       mem_L2CAP_Rx_payload                                  */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length	      */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process:
+	bpatchx patch39_5,mem_patch39
+	fetch 2,mem_l2cap_payload_ptr
+	iforce contr
+//	ifetchr regb,1,contr				/* PDUID */
+//	storer regb,1,mem_sdp_pduid
+	ifetch 1,contr
+	copy pdata,regb
+	store 1,mem_sdp_pduid
+	ifetch 2,contr
+	store 2,mem_sdp_transactionid			/* save transaction id */
+	ifetch 1,contr				/* higher byte of parameter length */
+	lshift8 pdata,timeup				
+	ifetch 1,contr				/* lower byte of parameter length */
+	iadd timeup,timeup				/* parameter length stored in "timeup" */
+	bpatchx patch39_6,mem_patch39
+	copy contr,temp
+	arg 4,loopcnt
+	arg mem_sdp_handle_list,contw
+	call memset0
+	copy temp,contr 
+	deposit regb						/* PDUID  */
+	beq SDP_ERROR_RES,sdp_process_error_res
+	beq SDP_SEARCH_REQ,sdp_process_ss_req
+	beq SDP_SEARCH_RES,sdp_process_ss_res
+	beq SDP_ATTRIBUTE_REQ,sdp_process_sa_req
+	beq SDP_ATTRIBUTE_RES,sdp_process_sa_res
+	beq SDP_SEARCHATTRIB_REQ,sdp_process_ssa_req
+	beq SDP_SEARCHATTRIB_RES,sdp_process_ssa_res
+	branch sdp_insufficient_resource
+
+/**********************************************************************/
+/* ss_req			                              */
+/* Processing Service Search Request                                  */
+/* Call: ask_serviceclassid, empty_response                     */
+/*                                                                    */  
+/* Input:       mem_L2CAP_Rx_payload pointer in contr                 */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length	      */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process_ss_req:
+	bpatchx patch39_7,mem_patch39
+	call ask_serviceclassid
+	compare 1,temp,0xff
+	branch ss_empty_rsp,true
+	compare 0xff,temp,0xff
+	branch sdp_invalid_request_syntax,true
+
+	ifetch 2,contr				/* max aservice record count */
+	store 2,mem_sdp_record_maxcnt
+	increase -2,timeup
+
+	increase -1,timeup				/* continuation state 1 byte (0) */
+	nbranch sdp_invalid_pdu_size,zero		/* invalid pdu size */
+	arg mem_sdp_uuid_search_ptr,timeup
+	ifetch 2,timeup
+	rtn blank
+	call search_all_uuid
+	call l2cap_get_sdp_tx_payload			/* put the pointer to Tx buffer  */
+	force 3,pdata						/* PDUID 3, Service Search Response */
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid			/* write transaction id */
+	istore 2,contw
+	lshift2 queue,pdata
+	add pdata,5,pdata
+	add pdata,5,regc
+	byteswap pdata,pdata
+	istore 2,contw							/* write parLength */
+	deposit queue
+	byteswap pdata,pdata
+	istore 2,contw							/* write TotSrvRecCount */
+	istore 2,contw							/* write CurSrvRecCount */
+	arg mem_sdp_handle_list,contr
+	copy queue,loopcnt
+	branch ss_req_blank,zero
+ss_req_loop:	
+	ifetch 4,contr
+	istore 4,contw
+	loop ss_req_loop
+ss_req_blank:	
+	force 0,pdata
+	istore 1,contw							/* continuation state */
+	deposit regc
+	store 2,mem_sdp_tx_pkt_length
+//	branch assert,blank
+	rtn
+
+/**********************************************************************/
+/* sa_req			                              */
+/* Processing Service Attribute Request                               */
+/* Call: ask_attributeid, empty_response (if 3 stored attr.     */
+/* not asked) or answer_attributelist                              */  
+/* Input:       mem_L2CAP_Rx_payload pointer in contr                 */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length	      */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process_sa_req:
+	bpatchx patch3a_0,mem_patch3a
+	ifetch 4,contr				/* service record handle */
+	store 4,mem_sdp_record_handle	 
+	increase -4,timeup
+	call sdp_store_maxbyte
+	store 2,mem_sdp_attribute_maxbyte
+	increase -2,timeup
+	call dataelementtype6		/* result: data size stored in rega */
+	branch sdp_invalid_request_syntax,zero
+	compare 5,rega,0xff  // length
+	//branch sa_req_all,true
+	branch sa_judge_wholerange,true
+sa_isnot_wholerange:
+	arg mem_sdp_attrib_list,contw
+	force 0,queue
+	branch sa_req_loop
+sa_judge_wholerange:
+	ifetch 1,contr
+	bne SDP_ATTRIBUTE_RANGE,sdp_invalid_request_syntax
+	ifetch 2,contr
+	nbranch sa_judge_wholerange_false1,blank
+	ifetch 1,contr
+	bne 0xff,sa_judge_wholerange_false2
+	ifetch 1,contr
+	bne 0xff,sa_judge_wholerange_false3		//also exist potential bug because mem_sdp_attrib_list length is only 7f
+	branch sa_req_all
+sa_judge_wholerange_false3:
+	increase -5,contr
+	branch sa_isnot_wholerange
+sa_judge_wholerange_false2:
+	increase -4,contr
+	branch sa_isnot_wholerange
+sa_judge_wholerange_false1:
+	increase -3,contr
+	branch sa_isnot_wholerange
+sa_req_loop:	
+	ifetch 1,contr
+	beq SDP_ATTRIBUTE_ID, sa_req_one_id
+	beq SDP_ATTRIBUTE_RANGE, sa_req_range
+sa_req_range:
+	ifetch 2, contr
+	istore 2, contw
+	increase 1,queue
+	byteswap pdata,regb
+	ifetch 2, contr
+	byteswap pdata,pdata
+sa_req_range_id_increase:	
+	increase 1, regb
+	isub regb, null
+	nbranch sa_req_range_id_finish,positive
+	copy pdata, regc
+	byteswap regb,pdata
+	istore 2, contw
+	increase 1,queue
+	copy regc, pdata
+	branch sa_req_range_id_increase
+sa_req_range_id_finish:
+	increase -5,timeup
+	increase -5,rega
+	branch sa_req_check_next_id
+sa_req_one_id:
+	ifetch 2,contr
+	istore 2,contw //save the attribute id in mem_sdp_attrib_list
+	increase 1,queue
+	increase -3,timeup
+	increase -3,rega
+sa_req_check_next_id:	
+	nbranch sdp_invalid_request_syntax,positive
+	nbranch sa_req_loop,zero //another attribute 
+	increase -1,timeup
+	nbranch sdp_invalid_request_syntax,zero
+	
+	call l2cap_get_sdp_tx_payload
+	increase 10,contw
+	arg mem_sdp_attrib_list,rega
+sa_req_handle_attributelist_next:
+	copy queue,pdata
+	branch sa_req_handle_attributelist_end,blank
+	ifetch 2,rega
+	branch sa_req_handle_attributelist_end,blank
+	iforce regb /* regb is the attribute ID */
+	fetch 4,mem_sdp_record_handle	
+	iforce temp
+	call search_handle_attrib
+	copy contr,pdata
+	branch sa_req_handle_attributelist_notfound,blank
+	increase -3,contr
+	ifetch 3,contr
+	istore 3,contw
+	call sdp_data_len
+	iforce loopcnt	
+	call memcpy
+sa_req_handle_attributelist_notfound:
+	increase 2,rega
+	increase -1, queue
+	branch sa_req_handle_attributelist_next
+
+sa_req_handle_attributelist_end:	
+	arg SDP_ATTRIBUTE_RES,rega
+	call ssa_req_range_lastfreg_common
+	fetch 2,mem_sdp_tx_pkt_length	
+	beq 11,sa_empty_rsp
+	branch  ssa_req_range_attrbutes_length_no_continue
+
+
+sdp_store_continue_common:
+	ifetch 1, contr
+	beq 0, sdp_store_continue_0byte
+	beq 1,sdp_store_continue_1byte
+	beq 2, sdp_store_continue_2byte
+sdp_store_continue_0byte:	
+	increase -1,timeup				/* continuation state byte (0) */
+	branch sdp_store_continue_end
+sdp_store_continue_1byte:
+	ifetch 1, contr
+	increase -2,timeup				/* continuation state byte (1) */
+	branch sdp_store_continue_end
+sdp_store_continue_2byte:
+	ifetch 2, contr
+	byteswap pdata,pdata
+	increase -3,timeup				/* continuation state byte (2) */
+sdp_store_continue_end:
+	store 2, mem_sdp_continue_byte	
+	rtn
+	
+sa_req_all:	
+	increase -5,timeup
+	call sdp_store_continue_common
+	nbranch sdp_invalid_pdu_size,zero
+	fetcht 4,mem_sdp_record_handle		
+	call search_handle
+	nbranch sdp_invalid_service_record_handle,zero
+	copy contr,rega
+	call l2cap_get_sdp_tx_payload
+	copy rega,contr
+	increase 3,contw//arg mem_SDP_Tx_payload+3,contw
+	copy contr,timeup //sdp start pointer
+	call sdp_get_data
+	copy pdata, rega //sdp total length
+//	fetchr regb,2,mem_sdp_continue_byte
+	fetch 2,mem_sdp_continue_byte
+	copy pdata,regb
+	copy rega,pdata
+	isub regb,regb //total_length - continue_byte in regb
+	fetch 2, mem_sdp_attribute_maxbyte
+	isub regb, null
+	nbranch sa_req_all_fragment_sdp, positive
+	// the last fragment
+	disable user
+	fetch 2, mem_sdp_continue_byte
+	branch sa_req_all_fisrt_fragment,blank
+	iadd timeup, contr //set the read pointer
+	increase 3,regb //include the total length field, 3 bytes
+	copy regb, loopcnt
+	copy loopcnt, pdata
+	increase 3, pdata
+	byteswap pdata,pdata
+	istore 2, contw
+	copy loopcnt, pdata
+	byteswap pdata,pdata
+	istore 2, contw
+	branch sa_req_all_answer_attributelist_full_loop
+sa_req_all_fisrt_fragment:
+	add rega,6,loopcnt
+	branch sa_req_all_parlength_continue_byte, user
+	byteswap loopcnt,pdata
+	branch sa_req_all_parlength_continue_byte_end
+sa_req_all_parlength_continue_byte:
+	copy loopcnt, pdata
+	increase 2, pdata
+	byteswap pdata,pdata
+sa_req_all_parlength_continue_byte_end:
+	istore 2,contw				/* ParLength */
+	increase -3,loopcnt
+	byteswap loopcnt,pdata			
+	istore 2,contw				/* AttrListByteCount */
+	copy timeup,contr
+	branch sa_req_all_answer_attributelist_full_loop
+sa_req_all_fragment_sdp:
+	enable user
+//	fetchr rega,2,mem_sdp_attribute_maxbyte
+	fetch 2,mem_sdp_attribute_maxbyte
+	copy pdata,rega
+	copy rega,loopcnt
+	fetch 2, mem_sdp_continue_byte
+	branch sa_req_all_fisrt_fragment,blank
+	iadd timeup, contr
+	copy rega,pdata
+	increase 5,pdata
+	byteswap pdata,pdata	
+	istore 2, contw
+	copy rega,pdata
+	byteswap pdata,pdata
+	istore 2, contw
+sa_req_all_answer_attributelist_full_loop:
+	call memcpy
+	nbranch sa_req_all_last_frag_continue, user
+	force 2,pdata
+	istore 1,contw
+	copy contr, pdata
+	isub timeup, pdata
+	byteswap pdata,pdata
+	istore 2, contw   // continuation length
+	branch sa_req_all_frag_end
+sa_req_all_last_frag_continue:
+	force 0,pdata
+	istore 1,contw
+sa_req_all_frag_end:	
+	arg SDP_ATTRIBUTE_RES,rega
+	branch ssa_req_range_common	
+	
+/**********************************************************************/
+/* ssa_req                          		      */
+/* Processing Service Search Attribute Request                        */
+/* Call: ask_serviceclassid, ask_attributeid, empty_response */
+/*       or answer_attributelist                                   */  
+/* Input:       contr                                                 */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length             */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process_ssa_req:
+	bpatchx patch3a_1,mem_patch3a
+	call ask_serviceclassid
+	compare 0xff,temp,0xff
+	branch sdp_invalid_request_syntax,true
+	call sdp_store_maxbyte
+	store 2,mem_sdp_attribute_maxbyte
+	increase -2,timeup
+	call dataelementtype6
+	arg mem_sdp_attrib_list,contw
+	force 0,queue
+ssa_req_loop:	
+	ifetch 1,contr 
+	beq SDP_ATTRIBUTE_RANGE,ssa_req_range
+	ifetch 2,contr 
+	istore 2,contw //save the attribute id in mem_sdp_attrib_list
+	increase 1,queue
+	increase -3,timeup
+	increase -3,rega
+	nbranch sdp_invalid_request_syntax,positive
+	nbranch ssa_req_loop,zero
+	increase -1,timeup
+	nbranch sdp_invalid_request_syntax,zero
+	call l2cap_get_sdp_tx_payload
+	increase 13,contw//arg mem_SDP_Tx_payload+13,contw
+	fetch 2,mem_sdp_uuid_search_ptr
+	iforce regc
+	arg mem_sdp_attrib_list,rega
+ssa_req_attributelist_next:	
+	ifetch 2,rega
+	branch ssa_req_attributelist_end,blank
+	iforce regb						/* regb is the attribute ID */
+	call search_attrib
+	branch ssa_req_attributelist_notfound,blank
+	increase -3,contr
+	ifetch 3,contr
+	istore 3,contw
+	call sdp_data_len
+	iforce loopcnt	
+  	call memcpy
+ssa_req_attributelist_notfound:
+	increase 2,rega
+	branch ssa_req_attributelist_next
+
+ssa_req_attributelist_end:
+	call ssa_req_range_lastfreg
+	fetch 2,mem_sdp_tx_pkt_length	
+	beq 14,ssa_empty_rsp
+	call ssa_req_range_attrbutes_length_no_continue
+	branch ssa_req_range_attrbutes_length_no_continue
+
+
+sdp_store_maxbyte:	
+	ifetch 2,contr				 
+	byteswap pdata,pdata
+	increase -3,pdata	
+	arg 200,temp
+	isub temp,null
+	nrtn positive
+	setarg 200
+	rtn
+	
+
+ssa_req_range:
+	increase 4,contr
+	increase -5,timeup
+	increase -5,rega
+	nbranch sdp_invalid_request_syntax,zero
+	call 	sdp_store_continue_common
+	nbranch sdp_invalid_pdu_size,zero
+	arg mem_sdp_uuid_search_ptr,timeup
+	call search_all_uuid  
+	deposit queue
+	branch ssa_empty_rsp,blank
+	store 1,mem_handle_humber
+//	storer regb,2,mem_sdp_all_length
+	copy regb,pdata
+	store 2,mem_sdp_all_length
+	arg 0,queue
+	arg 0,rega
+	call l2cap_get_sdp_tx_payload
+	increase 10,contw 
+ssa_req_range_find_handle:
+	call ssa_req_range_get_length	
+	nbranch assert,user
+	copy contr,timeup
+	copy pdata,regc
+	iadd rega,rega
+//	copy pdata,rega 
+//	fetch 2,mem_sdp_all_length
+	fetch 2,mem_sdp_continue_byte
+	copy pdata,regb
+	branch ssa_req_range_first_freg,blank
+ssa_req_range_later_freg_with_continue:
+	copy rega,pdata
+	isub regb,regb //total_length - continue_byte in rega
+	branch ssa_req_range_next_handle,zero
+	nbranch ssa_req_range_next_handle,positive
+	fetch 2, mem_sdp_attribute_maxbyte
+	isub regb, null
+	branch ssa_req_range_maxbyte_with_continue,zero
+	nbranch ssa_req_range_maxbyte_with_continue, positive  
+	
+ // data length < =maxbyte 
+ssa_req_range_send_not_maxbyte:
+ 	copy regb,loopcnt
+	call ssa_req_range_maxbyte_with_continue_cpy
+ 	fetch 1,mem_handle_humber
+	increase 1,queue
+	isub queue,null
+	branch ssa_req_range_lastfreg,zero
+	branch ssa_req_range_freg_with_continue
+	
+ssa_req_range_maxbyte_with_continue:
+ 	copy pdata,loopcnt
+ 	call ssa_req_range_maxbyte_with_continue_cpy
+ 	branch ssa_req_range_freg_with_continue
+ 	
+ssa_req_range_maxbyte_with_continue_cpy:
+	increase -3,contw   
+	copy loopcnt,temp
+ 	copy regc,pdata
+	isub regb,pdata
+	iadd timeup,contr
+ 	branch memcpy
+
+ssa_req_range_next_handle:
+	fetch 1,mem_handle_humber
+	increase 1,queue
+	isub queue,null
+	rtn zero //
+	branch ssa_req_range_find_handle
+
+ssa_req_range_get_length:	
+	call disable_user
+	arg mem_sdp_handle_list,contr
+	lshift2 queue,pdata
+	iadd contr,contr
+	ifetcht 4, contr
+	call search_handle
+	nrtn zero
+	call sdp_data_len
+	branch enable_user
+
+ssa_req_range_first_freg:
+	fetch 2, mem_sdp_attribute_maxbyte
+	isub rega, null
+	nbranch ssa_req_range_firstfreg_maxbyte_with_continue,positive
+	copy rega,loopcnt
+	copy loopcnt,temp
+	copy timeup,contr
+	call memcpy
+	fetch 2,mem_sdp_all_length
+	isub rega,null
+	branch ssa_req_range_freg_no_continue,zero
+ssa_req_range_firstfreg_not_maxbyte_with_continue:
+	call ssa_req_range_freg_with_continue
+	branch ssa_req_range_attrbutes_length
+	
+ssa_req_range_freg_no_continue:
+	call ssa_req_range_lastfreg
+	branch ssa_req_range_attrbutes_length
+	
+ssa_req_range_lastfreg:
+	arg SDP_SEARCHATTRIB_RES,rega  //PUD ID
+ssa_req_range_lastfreg_common:
+	force 0,pdata
+	istore 1,contw
+	call ssa_req_range_common
+	fetcht 2,mem_sdp_tx_pkt_length
+	increase -5,temp
+	byteswap temp,pdata
+	istore 2, contw
+	increase -3,temp
+	byteswap temp,pdata
+	istore 2, contw  //attribute length
+	rtn
+
+ssa_req_range_firstfreg_maxbyte_with_continue:
+	copy pdata,loopcnt
+	copy loopcnt,temp
+	copy timeup,contr
+	call memcpy
+	call ssa_req_range_freg_with_continue
+ssa_req_range_attrbutes_length:	
+	setarg 0x36
+	istore 1,contw
+	fetch 2,mem_sdp_all_length
+	byteswap pdata,pdata
+	istore 2, contw 
+	rtn	
+
+ssa_req_range_attrbutes_length_no_continue:	
+	setarg 0x36
+	istore 1,contw
+	increase -3,temp
+	byteswap temp,pdata
+	istore 2, contw 
+	rtn	
+
+ssa_req_range_freg_with_continue:
+	arg SDP_SEARCHATTRIB_RES,rega  //PUD ID
+	setarg 2
+	istore 1,contw	
+	fetch 2,mem_sdp_continue_byte
+	iadd temp,temp
+	byteswap temp,pdata
+	istore 2,contw
+	call ssa_req_range_common
+	fetcht 2,mem_sdp_tx_pkt_length
+	increase -5,temp
+	byteswap temp,pdata
+	istore 2, contw
+	increase -5,temp
+	byteswap temp,pdata
+	istore 2, contw 
+	rtn	
+
+ssa_req_range_common:
+	fetch 2,mem_sdp_tx_payload_ptr
+	isub contw,pdata
+	sub pdata,0,pdata
+	store 2,mem_sdp_tx_pkt_length
+	call l2cap_get_sdp_tx_payload 
+	copy rega,pdata  //PUD ID
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid
+	istore 2,contw
+	rtn
+
+
+
+
+/**********************************************************************/
+/* ssa_res			                      */
+/* Processing Service Search Attribute Response                       */
+/* Call: dataelementtype6, attribute_reading                    */
+/* Input:       contr                                                 */
+/* Output:      mem_sdp_record_handle,mem_sdp_search_failed           */
+/*                                                                    */
+/**********************************************************************/     
+sdp_process_ssa_res:
+sdp_process_ss_res:
+sdp_process_sa_res:
+sdp_process_error_res:
+	rtn
+/*
+sdp_process_ss_res:
+	bpatchx patch3a_2,mem_patch3a
+	ifetch 2,contr
+	ifetch 2,contr
+	byteswap pdata,pdata
+	bne 1,assert
+	ifetch 4,contr
+	store 4,mem_sdp_record_handle
+	fetchr regc,2,mem_sdp_l2capch_ptr
+	add regc,offset_lc_state,regc
+	ifetch 1,regc
+	set1 L2CAP_CHANNEL_STATE_RECV_SEARCH_RES,pdata
+	istore 1,regc
+	rtn
+	
+sdp_process_sa_res:
+	bpatchx patch3a_3,mem_patch3a
+	fetchr regc,2,mem_sdp_l2capch_ptr
+	add regc,offset_lc_state,regc
+	ifetch 1,regc
+	set1 L2CAP_CHANNEL_STATE_RECV_ATTRIB_RES,pdata
+	istore 1,regc
+	copy temp,contr
+	ifetch 2,contr
+	call search_rfcomm_cn
+	store 1,mem_profile_channel	
+	rtn
+*/
+
+				    
+
+sdp_invalid_service_record_handle:		
+	setarg 0x0200
+	store 2,mem_sdp_error_code
+	branch sdp_error_response
+sdp_invalid_pdu_size:				
+	setarg 0x0400
+	store 2,mem_sdp_error_code
+	branch sdp_error_response
+sdp_insufficient_resource:			
+	setarg 0x0600
+	store 2,mem_sdp_error_code
+	branch sdp_error_response
+sdp_invalid_request_syntax:			
+	setarg 0x0300
+	store 2,mem_sdp_error_code
+sdp_error_response:	
+	call l2cap_get_sdp_tx_payload
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid			
+	istore 2,contw
+	setarg 0x0200					
+	istore 2,contw
+	fetch 2,mem_sdp_error_code			
+	istore 2,contw
+	jam  7,mem_sdp_tx_pkt_length
+	rtn
+
+
+//store uuid in mem_sdp_uuid_search_ptr,
+//return temp 0xff if wrong 
+ask_serviceclassid:  
+	arg 0,regb
+	force 0,temp					/* use "temp" to mark syntax error or to mark 128 bit uuid */
+	arg mem_sdp_uuid_search_ptr,contw
+	call dataelementtype6
+	branch asksrv_error,zero
+classidloop:
+	increase 1,regb
+	ifetch 1,contr
+	increase -1,rega
+	increase -1,timeup
+	compare 0x18,pdata,0xf8			/* 5 MSB: b00011: uuid */
+	nbranch asksrv_error,true
+	compare 0x04,pdata,0x07			/* 3 LSB: b100 128 bits uuid */
+	nbranch cmp032,true
+	force 1,temp					/* mark it as 128 bit uuid */
+skip2bytes:
+	ifetch 1,contr
+	increase -1,rega	
+	increase -1,timeup
+	bne 0x00, frstbwrong
+	ifetch 1,contr
+	increase -1,rega	
+	increase -1,timeup
+	beq 0x00, cmpuuid
+	branch scndbwrong
+frstbwrong:  
+	increase 1,contr
+	increase -1,rega	
+	increase -1,timeup
+scndbwrong:  
+	increase 2,contr				/* skip 2 bytes, first 2 bytes already wrong */
+	increase -2,rega	
+	increase -2,timeup
+	compare 0x00,temp,0xff                        /* 128 bits or 32 bits ? */
+	branch loopornot,true
+	increase 12,contr				/* skip 12 bytes, first 2 bytes already wrong */
+	increase -12,rega	
+	increase -12,timeup
+	branch loopornot
+cmp032:
+	compare 0x02,pdata,0x07			/* 3 LSB: b010 32 bits uuid */
+	nbranch cmp016,true
+	branch skip2bytes			
+cmp016:
+	compare 0x01,pdata,0x07			/* 3 LSB: b001 16 bit uuid */
+	nbranch asksrv_error,true
+cmpuuid:
+	increase -2,rega
+	increase -2,timeup
+	ifetch 2,contr				/* higher order byte */
+	sub regb,4,null
+	branch uuidsize,zero //max store uuids =3 
+	istore 2,contw
+uuidsize:
+	compare 0x00,temp,0xff			/* is this 128 bits uuid */
+	branch loopornot,true
+	copy contr,temp
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x10, wrong12b
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x80, wrong12b
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x00, wrong12b
+	ifetch 1,contr
+	bne 0x80, wrong12b
+	ifetch 1,contr
+	bne 0x5f, wrong12b
+	ifetch 1,contr
+	bne 0x9b, wrong12b
+	ifetch 1,contr
+	bne 0x34, wrong12b
+	ifetch 1,contr
+	beq 0xfb, chck12dn
+wrong12b:
+	copy temp,contr  
+wrong12b1:
+	increase 12,contr				/* skip 12 bytes */
+	force 0x00,queue
+	force 0x00,temp
+	branch chck12dn
+
+chck12dn:
+	increase -12,timeup
+	increase -12,rega
+loopornot:
+	force 0x00,temp
+	compare 0x00,rega,0xff
+	nbranch classidloop,true
+	force 0,pdata
+	istore 2,contw			/* end list with null */
+	rtn
+asksrv_error:
+	arg 0xff,temp
+	rtn
+
+/**********************************************************************/
+/* Subroutine: dataelementtype6                                    */
+/* Parse Data Element Sequence, obtain the data size                  */
+/* Input:  SDP Rx Buf Pointer in contr, parameter count in timeup     */
+/* Output: data length in rega, data pointer in contr             */
+/*         and  parameter count in timeup, return with zero flag set: */
+/*         syntax error                                               */
+/**********************************************************************/     
+dataelementtype6:
+	bpatchx patch3a_4,mem_patch3a
+	ifetch 1,contr
+	increase -1,timeup
+	compare 0x30,pdata,0xf8			/* 5 MSB: b00110: type 6 */
+	nbranch dsize_error,true
+	compare 0x07,pdata,0x07			/* 3 LSB: b111: 32 bits */
+	branch dsize32,true
+	compare 0x06,pdata,0x07			/* 3 LSB: b110: 16 bits */
+	branch dsize16,true
+	compare 0x05,pdata,0x07			/* 3 LSB: b101: 8 bits */
+	nbranch dsize_error,true
+//	ifetchr rega,1,contr				/* data length in reg A */
+	ifetch 1,contr
+	copy pdata,rega
+	increase -1,timeup
+	branch dsize
+dsize32:
+	increase 2,contr				 
+	increase -2,timeup
+dsize16:
+	ifetch 2,contr
+	byteswap pdata,rega
+	increase -2,timeup
+dsize:
+	force 0x01,pdata
+	rtn
+dsize_error:
+	force 0x00,pdata
+	rtn
+
+/**********************************************************************/
+/* Subroutine: sa_empty_rsp                                      */
+/* Send empty response                                                */
+/*                                                                    */
+/* Input:       mem_sdp_pduid, mem_sdp_transactionid                  */
+/* Output:      mem_SDP_Tx_payload, mem_SDP_Tx_pkt_length             */
+/*                                                                    */
+/**********************************************************************/     
+ss_empty_rsp:
+	setarg SDP_SEARCH_RES
+	store 1, mem_sdp_pduid
+	branch empty_response
+sa_empty_rsp:
+	setarg SDP_ATTRIBUTE_RES
+	store 1, mem_sdp_pduid
+	branch empty_response
+ssa_empty_rsp:
+	setarg SDP_SEARCHATTRIB_RES
+	store 1, mem_sdp_pduid
+empty_response:
+	call l2cap_get_sdp_tx_payload			/* empty attribute list */
+//	fetchr regb,1,mem_sdp_pduid				/* PDUID */
+//	istorer regb,1,contw
+	fetch 1,mem_sdp_pduid
+	copy pdata,regb
+	istore 1,contw 
+	fetch 2,mem_sdp_transactionid			/* copy back transaction id */
+	istore 2,contw
+	setarg 0x0500
+	istore 2, contw
+	compare SDP_ATTRIBUTE_RES,regb,0xff			 
+	branch fullsearch,true
+	compare SDP_SEARCHATTRIB_RES,regb,0xff			 
+	branch fullsearch,true
+	setarg 0x000000
+	istore 5,contw
+	branch outempty
+
+fullsearch:					/* pduid must be 5 or 7 */
+	setarg 0x350200
+	istore 5,contw
+outempty:
+	jam 10,mem_sdp_tx_pkt_length
+	rtn
+
+//return length in pdata(whole element ,include header and data ), contr not change
+sdp_data_len:
+	call store_contw
+	call store_contr
+	call sdp_get_data
+	call get_contw
+	call get_contr
+	copy temp,pdata
+	rtn
+
+//return data length in pdata, contr is data pionter,return length in temp(whole element ,include header and data )
+sdp_get_data:
+	ifetch 1,contr
+	and pdata,0x7,loopcnt
+	rshift3 pdata,pdata
+	bne 0,sdp_get_data_type_not0
+sdp_get_data_type0:	
+	force 1,pdata
+	force 1,temp
+	rtn
+	
+sdp_get_data_type_not0_sizeindex01234:
+	call left_shift_n
+	add pdata,1,temp  //add header length
+	rtn
+sdp_get_data_type_not0:
+	deposit loopcnt
+	sub pdata,4,null
+	branch sdp_get_data_type_not0_sizeindex01234,positive
+	beq 5,sdp_get_data_type_not0_sizeindex5
+	beq 6,sdp_get_data_type_not0_sizeindex6
+	beq 7,sdp_get_data_type_not0_sizeindex7
+	rtn
+	
+sdp_get_data_type_not0_sizeindex5:
+	ifetch 1,contr
+	add pdata,2,temp  //add header length
+	rtn
+sdp_get_data_type_not0_sizeindex6:
+	ifetch 2,contr
+	byteswap pdata,pdata
+	add pdata,3,temp  //add header length
+	rtn
+sdp_get_data_type_not0_sizeindex7:
+	ifetch 2,contr	
+	byteswap pdata,pdata
+	ifetcht 2,contr	
+	byteswap temp,temp
+	lshift16 temp,temp
+	iadd temp,pdata
+	add pdata,5,temp  //add header length
+	rtn
+
+/* find with uuids
+input uuids pionter in timeup
+return handles in mem_sdp_handle_list; handles number in queue if found 
+return regb all length*/
+search_all_uuid:
+	bpatchx patch3a_5,mem_patch3a
+	force 0,queue
+	arg 0,regb
+	arg mem_sdp_handle_list,contw
+search_all_uuid_llop:
+	ifetch 2,timeup
+ 	rtn blank
+	call search_uuid
+	copy queue,pdata
+	rtneq SDP_MAX_HANDLE_NUMBER 
+	increase 2,timeup
+ 	branch search_all_uuid_llop
+	
+search_uuid:
+//	arg 0,regb
+	iforce regc
+//	force 0,queue
+	fetch 2, mem_ui_uuid_table
+	iforce contr
+search_uuid_next:
+	copy queue,pdata
+	rtneq SDP_MAX_HANDLE_NUMBER   
+	disable user
+	ifetch 1,contr
+	rtn blank
+	iforce loopcnt
+search_uuid_loop:	
+	ifetch 2,contr
+	isub regc,null
+	nbranch search_uuid_not_found,zero
+	enable user					// uuid match
+search_uuid_not_found:
+	loop search_uuid_loop
+	ifetcht 4,contr					// get handle 
+	copy contr,rega
+	nbranch search_uuid_nomatch,user
+	arg mem_sdp_handle_list,contr
+	arg SDP_MAX_HANDLE_NUMBER,loopcnt 
+search_uuid_check_same_handle:
+	ifetch 4,contr
+	branch search_uuid_store_handle,blank
+	isub temp,null
+	branch search_uuid_nomatch,zero
+	loop search_uuid_check_same_handle
+	rtn 
+search_uuid_store_handle:
+	istoret 4,contw
+	increase 1,queue
+	copy rega,contr
+	call sdp_data_len
+	iadd regb,regb
+	iadd contr,contr		 
+	branch search_uuid_next
+search_uuid_nomatch:	
+	copy rega,contr
+	call sdp_get_data
+	iadd contr,contr			// next paragraph 
+	branch search_uuid_next
+
+/* temp is handle,
+return zero  if found
+return data pointer in contr 
+*/
+search_handle:
+	bpatchx patch3a_6,mem_patch3a
+	fetch 2,mem_ui_uuid_table
+	iforce contr
+search_handle_loop:	
+	ifetch 1,contr
+	branch disable_zero,blank
+	lshift pdata,pdata
+	iadd contr,contr
+	ifetch 4,contr
+	isub temp,null
+	rtn zero
+	deposit contw
+	store 2,mem_contw
+	storet 8,mem_temp
+	call sdp_get_data
+	iadd contr,contr
+	copy contr,pdata
+	fetcht 2,mem_contw
+	copy temp,contw
+	fetcht 8,mem_temp
+	copy pdata,contr
+	branch search_handle_loop
+
+/**
+* input regb and regc.regb is the attribute ID and regc is UUID.
+* set contr if find attribute or 0 if not
+*/
+search_attrib:
+	bpatchx patch3a_7,mem_patch3a
+	fetch 2,mem_ui_uuid_table
+	iforce contr
+search_attrib_next:
+	ifetch 1,contr
+	branch search_attrib_end, blank
+	iforce loopcnt
+search_attrib_loop:	
+	ifetch 2,contr
+	isub regc,null						/* regc is UUID, compare it */
+	branch search_attrib_found_uuid,zero
+	loop search_attrib_loop
+	increase 4,contr
+	call sdp_get_data
+	iadd contr,contr			/* next paragraph */
+	branch search_attrib_next	
+search_attrib_found_uuid:
+	increase -1,loopcnt
+	lshift loopcnt,pdata
+	iadd contr,contr
+	increase 4,contr
+	call sdp_get_data
+	iadd contr,timeup					/* attribute list end */
+search_attrib_loop_attribs:	
+	increase 1,contr
+	ifetch 2,contr
+	isub regb,null
+	//force 0x1,pdata,zero
+//	setflag zero, 0,pdata
+//	copy timeup, timeup
+	branch disable_blank,zero			/* attribute found */
+	call sdp_data_len
+	iadd contr,contr
+	deposit timeup
+	isub contr,null
+	branch search_attrib_end, zero /*attribute end, not found the attribute, return contr = 0*/
+	branch search_attrib_loop_attribs	
+search_attrib_end:
+	force 0,contr
+	force 0,pdata
+	rtn
+	
+
+//search the attribute according the record handle
+//record handle in temp, attribute in regb
+//set the contr to zero if not found
+search_handle_attrib:	
+	bpatchx patch3b_0,mem_patch3b
+	fetch 2,mem_ui_uuid_table
+	iforce contr
+search_handle_attrib_next:
+	ifetch 1,contr
+	branch search_handle_attrib_end, blank
+	lshift pdata,pdata
+	iadd contr, contr
+	ifetch 4,contr
+	isub temp,null						/* regc is UUID, compare it */
+	branch search_handl_attrib_found_handle,zero
+	call sdp_get_data
+	iadd contr,contr			/* next paragraph */
+	branch search_handle_attrib_next	
+search_handl_attrib_found_handle:
+	call sdp_get_data
+	iadd contr,timeup					/* attribute list end */
+search_handle_attrib_loop_attribs:	
+	increase 1,contr
+	ifetch 2,contr
+	isub regb,null
+	rtn zero							/* attribute found */
+	call sdp_data_len
+	iadd contr,contr
+	deposit timeup
+	isub contr,null
+	branch search_handle_attrib_end, zero /*attribute end, not found the attribute, return contr = 0*/
+	branch search_handle_attrib_loop_attribs
+search_handle_attrib_end:
+	force 0,contr
+	rtn	
+
+
+//enable user if find rfcomm channel number, pdata is channel number
+search_rfcomm_cn:
+	arg 0x0400,regb  // attribute protocol edscriptor list
+	call search_handl_attrib_found_handle
+	arg 0x0300,regb  // uuid rfcomm
+	call search_uuid_in_data
+	nrtn user
+	sub rega,3,null
+	branch disable_user,positive
+	ifetch 1,contr
+	bne 0x08,disable_user
+	ifetch 1,contr
+	rtn
+	
+ //input timeup is lenth
+ //input contr is data ptr
+ //return contr is end of uuid; enable user if found uuid
+search_uuid_in_data:
+	bpatchx patch3b_1,mem_patch3b
+	call sdp_get_data
+	copy pdata,rega
+search_uuid_in_data_loop:	
+	ifetch 1,contr
+	and pdata,0x7,loopcnt
+	rshift3 pdata,pdata
+	sub pdata,3,null
+	branch search_uuid_in_data_found_uuid,zero
+	copy loopcnt,pdata
+	beq 5,search_uuid_in_data_found_element_index5
+	beq 6,search_uuid_in_data_found_element_index6
+	beq 7,search_uuid_in_data_found_element_index7
+	increase -1,contr
+	call sdp_get_data
+	iadd contr,contr
+	copy rega,pdata
+	isub temp,rega
+	branch disable_user,zero
+	branch search_uuid_in_data_loop
+	
+search_uuid_in_data_found_element_index5:
+	increase -2,rega
+	increase 1,contr
+	branch search_uuid_in_data_loop
+search_uuid_in_data_found_element_index6:
+	increase -3,rega
+	increase 2,contr
+	branch search_uuid_in_data_loop
+search_uuid_in_data_found_element_index7:
+	increase -5,rega
+	increase 4,contr
+	branch search_uuid_in_data_loop		
+	
+search_uuid_in_data_found_uuid:
+	increase -1,rega
+	copy loopcnt,pdata
+	beq 1,search_uuid_in_data_type_uuid_16
+	beq 2,search_uuid_in_data_type_uuid_32
+	beq 4,search_uuid_in_data_type_uuid_128
+	branch disable_user 
+search_uuid_in_data_type_uuid_128:
+	increase -12,rega
+search_uuid_in_data_type_uuid_32:
+	ifetch 2,contr
+	increase -2,rega
+search_uuid_in_data_type_uuid_16:
+	ifetch 2,contr
+	isub regb,null
+	branch enable_user,zero
+	increase -2,rega
+	branch disable_user,zero
+	branch search_uuid_in_data_loop
+
+/*
+//rega:l2cap len ,mem_search_uuid:uuid to search
+sdp_send_search_req:
+	call l2cap_malloc_sdp_req
+	setarg SDP_SEARCH_REQ
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid_local
+	byteswap pdata,pdata
+	istore 2,contw
+	increase -5,rega
+	byteswap rega,rega
+	//istorer rega,2,contw
+	copy rega,pdata
+	istore 2,contw
+	setarg 0x0335
+	istore 2,contw
+	setarg 0x19
+	istore 1,contw
+	fetch 2,mem_search_uuid
+	istore 2,contw
+	setarg 0x0008
+	istore 2,contw
+	setarg 0
+	istore 1,contw
+	rtn
+
+//rega:l2cap len
+sdp_send_attribute_req:
+	call l2cap_malloc_sdp_req
+	setarg SDP_ATTRIBUTE_REQ
+	istore 1,contw
+	fetch 2,mem_sdp_transactionid_local
+	byteswap pdata,pdata
+	istore 2,contw
+	increase -5,rega
+	byteswap rega,rega
+//	istorer rega,2,contw
+	copy rega,pdata
+	istore 2,contw
+	fetch 4,mem_sdp_record_handle
+	istore 4,contw
+	setarg 0x2c01
+	istore 2,contw
+	setarg 0x0535
+	istore 2,contw
+	setarg 0x0a
+	istore 1,contw
+	setarg 0
+	istore 2,contw
+	setarg -1
+	istore 2,contw
+	setarg 0
+	istore 1,contw
+	rtn
+*/	
+	
+
+sdp_send_spp_request:
+	call l2cap_get_sdp_tx_payload
+	copy pdata,contw
+	setarg 6//Search Attr Req
+	istore 1,contw
+	setarg sdp_tid_spp					
+	istore 2,contw
+	setarg 0x0f00 //length15
+	istore 2,contw
+	setarg 0x1a0535
+	istore 3,contw
+	setarg 0x0111
+	lshift16 pdata,pdata //UUID
+	istore 4,contw
+	setarg 0x2600 //max return len
+	istore 2,contw
+	setarg 0x0335
+	istore 2,contw
+	setarg 0x0009
+	istore 2,contw
+	setarg 0x0004
+	istore 2,contw
+	jam 0x14,mem_sdp_tx_pkt_length
+	rtn
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/security.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/security.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/security.prog	(working copy)
@@ -0,0 +1,1642 @@
+
+ifdef SECURE_CONNECTION
+	
+function_g2:
+	bpatchx patch3b_2,mem_patch3b
+	jam 80,mem_AES_CMAC_data_length
+	arg memdat,contw
+	arg mem_le_srand,contr
+	call memcpy16
+	arg mem_le_pubkey_local_x_256,contr
+	call memcpy32
+	arg mem_le_pubkey_remote_x_256,contr
+	call memcpy32
+	call inverse_memdat	
+	arg mem_le_mrand,contr
+	call store_inverse_k	
+	call function_AES_CMAC	
+
+	arg mem_AES_CMAC_temp,contw
+	call load_inverse_result
+	setarg 1000000
+	copy pdata,rega
+	fetch 4,mem_AES_CMAC_temp
+	idiv rega
+	call wait_div_end
+	remainder pdata
+	store 4,mem_gkey
+//call ice_break
+	rtn
+
+function_f6_eb:
+	jam 65,mem_AES_CMAC_data_length
+	arg memdat,contw
+	call store_addr_common_a
+	call store_addr_common_b
+	fetch 3,mem_le_pres+1
+	istore 3,contw
+//	arg mem_le_r,contr
+//	call memcpy16	
+	call get_r
+	
+	arg mem_le_mrand,contr
+	call memcpy16
+	arg mem_le_srand,contr
+	call memcpy16
+	call inverse_memdat
+	arg mem_le_mackey ,contr
+	arg mem_AES_CMAC_k,contw
+	call memcpy16
+//	call p_store_inverse_k	
+	branch function_AES_CMAC
+//	arg mem_AES_CMAC_temp,contw
+//	branch p_load_inverse_result
+
+get_r:
+	fetch 4,mem_le_tk
+	istore 4,contw
+	call memset0_4
+	branch memset0_8
+
+function_f6_ea:
+	bpatchx patch3b_3,mem_patch3b
+	jam 65,mem_AES_CMAC_data_length
+	arg memdat,contw
+	call store_addr_common_b
+	call store_addr_common_a
+	fetch 3,mem_le_preq+1
+	istore 3,contw
+//	arg mem_le_r,contr
+//	call memcpy16	
+	call get_r
+	arg mem_le_srand,contr
+	call memcpy16
+	arg mem_le_mrand,contr
+	call memcpy16
+	call inverse_memdat
+	arg mem_le_mackey ,contr
+	arg mem_AES_CMAC_k,contw
+	call memcpy16
+//	call p_store_inverse_k	
+	call function_AES_CMAC
+	arg mem_AES_CMAC_temp,contw
+	branch load_inverse_result
+
+function_f5:
+	jam 32,mem_AES_CMAC_data_length
+	arg mem_le_dhkey_256 ,contr
+	arg memdat,contw
+	call memcpy32
+	call inverse_memdat
+	arg mem_le_slat,contr
+	call store_inverse_k	
+	call function_AES_CMAC
+	arg mem_AES_CMAC_k,contw
+	call store_aes_result
+	arg 1,temp
+	call function_f5_common
+	arg mem_le_ltk,contw
+	call load_inverse_result
+	arg 0,temp
+	call function_f5_common
+	arg mem_le_mackey,contw
+//	branch p_load_inverse_result
+	branch store_aes_result
+
+
+function_f5_common:
+	bpatchx patch3b_4,mem_patch3b
+	jam 53,mem_AES_CMAC_data_length
+	setarg 0x100
+	store 2,memdat
+	call store_addr_common_b
+	call store_addr_common_a
+	arg mem_le_srand,contr
+	call memcpy16
+	arg mem_le_mrand,contr
+	call memcpy16
+//	fetch 4,mem_le_keyid 0x62746c65
+	setarg 0x6c65
+	istore 2,contw
+	setarg 0x6274
+	istore 2,contw
+	istoret 1,contw   //counter
+	call inverse_memdat	
+	branch function_AES_CMAC
+
+store_addr_common_b:
+	fetch 6,mem_le_lap
+	istore 6,contw
+	fetch 1,mem_le_conn_own_addr_type
+	istore 1,contw
+	rtn
+
+store_addr_common_a:
+	fetch 6,mem_le_plap
+	istore 6,contw
+//	setarg 0x2dcfc1
+//	istore 3,contw
+//	setarg 0xa71370
+//	istore 3,contw
+	fetch 1,mem_le_conn_peer_addr_type
+	istore 1,contw
+	rtn
+
+function_f4_ca:
+	jam 65,mem_AES_CMAC_data_length
+	fetch 1,mem_passkey_1bit
+	store 1,memdat
+	arg mem_le_pubkey_local_x_256,contr
+	call memcpy32
+	arg mem_le_pubkey_remote_x_256,contr
+	call memcpy32
+	call inverse_memdat
+	arg mem_le_mrand,contr
+	call store_inverse_k	
+	branch function_AES_CMAC
+	
+
+function_f4_cb:
+	jam 65,mem_AES_CMAC_data_length
+	fetch 1,mem_passkey_1bit
+	store 1,memdat
+	arg mem_le_pubkey_remote_x_256,contr
+	call memcpy32
+	arg mem_le_pubkey_local_x_256,contr
+	call memcpy32
+	call inverse_memdat
+	arg mem_le_srand,contr
+	call store_inverse_k	
+	branch function_AES_CMAC
+
+function_AES_CMAC:
+	bpatchx patch3b_5,mem_patch3b
+	call function_AES_CMAC_Generate_Subkey
+//call ice_break
+//	jam 65,mem_AES_CMAC_data_length
+//call ice_break
+	fetch 1,mem_AES_CMAC_data_length
+	copy pdata,temp
+function_ceil16:
+	increase 15,pdata
+	rshift4 pdata,pdata
+	copy pdata,regb
+	branch function_AES_CMAC_set_flag_0_balnk,blank
+	and temp,0x0f,pdata
+	nbranch function_AES_CMAC_set_flag_0,blank
+//	flag =1;
+	arg mem_AES_CMAC_k1,regc
+	arg memdat,pdata
+	increase -16,pdata
+//	iadd temp,pdata
+//	isub rega,rega
+	iadd temp,rega	
+	arg mem_AES_CMAC_M_last,contw
+	arg 4,loopcnt	
+	call xor_loop
+//call ice_break
+//	arg mem_f4_k1,contr
+//	call load_key
+	branch function_AES_CMAC_aes
+
+function_AES_CMAC_set_flag_0_balnk:
+	arg 1,regb
+	arg 0,rega
+//	arg mem_f4_test_data,pdata
+	branch function_AES_CMAC_set_flag_0_common
+//call ice_break
+
+function_AES_CMAC_set_flag_0:
+//	flag = 0;
+	and temp,0x0f,rega
+function_AES_CMAC_set_flag_0_common:
+	arg memdat,pdata
+	iadd temp,pdata
+	isub rega,contr
+//call ice_break
+	arg mem_AES_CMAC_temp,contw
+	call function_AES_CMAC_padding
+//call ice_break
+	arg mem_AES_CMAC_k2,regc
+	arg mem_AES_CMAC_temp,rega
+	arg mem_AES_CMAC_M_last,contw
+	arg 4,loopcnt	
+	call xor_loop	
+//call ice_break
+
+//	arg mem_f4_k2,contr
+//	call load_key
+
+//	branch p_function_f4_aes
+function_AES_CMAC_aes:
+//	arg mem_f4_k,contr
+//	call load_key
+//	arg mem_AES_CMAC_xor,contr
+//	call load_data128
+	call aes_clear_data
+	call aes_init	
+//	arg mem_f4_k,contr
+//	call load_key
+	arg memdat,contr
+function_AES_CMAC_aes_loop:
+//generate_mic_loop:
+	increase -1,regb
+	deposit regb
+	branch function_AES_CMAC_aes_loop_end,blank
+	call load_data128
+	call do_aes_cbc
+	branch function_AES_CMAC_aes_loop
+//generate_mic_end:
+function_AES_CMAC_aes_loop_end:	
+	arg mem_AES_CMAC_temp,contw
+	call store_aes_result
+	arg mem_AES_CMAC_M_last,contr
+	call load_data128
+	call aes_init	
+	arg mem_AES_CMAC_temp,contr
+	call load_data128	
+	branch do_aes_cbc
+
+
+
+load_inverse_result:
+//	arg mem_AES_CMAC_temp,contw
+	copy contw,rega
+	call store_aes_result
+//	arg mem_AES_CMAC_temp,rega
+	arg 16,loopcnt
+	branch inverse_data
+	
+store_inverse_k:
+	arg mem_AES_CMAC_k,contw
+	call memcpy16
+inverse_k:	
+	arg 16,loopcnt
+	arg mem_AES_CMAC_k,rega	
+	branch inverse_data
+	
+inverse_memdat:
+	fetch 1,mem_AES_CMAC_data_length
+	copy pdata,loopcnt
+	arg memdat,rega
+	branch inverse_data
+
+bn_lshift_0_inverse:
+	ifetch 1,regA
+	lshift pdata,pdata
+	isolate1 0,regC
+	setflag true,0,pdata	
+	isolate1 8,pdata
+	setflag true,0,regC	
+	istore 1,rega
+         increase -1,rega
+	loop bn_lshift_0_inverse
+	rtn	
+
+function_AES_CMAC_k1_inverse:
+	arg mem_AES_CMAC_k1,regA
+function_AES_CMAC_inverse_common:
+	increase 15,rega
+	force 16,loopcnt
+	force 0,regC
+	branch  bn_lshift_0_inverse	
+
+function_AES_CMAC_k2_inverse:
+	arg mem_AES_CMAC_k2,regA
+	branch function_AES_CMAC_inverse_common
+	
+
+function_AES_CMAC_Generate_Subkey:
+	arg mem_AES_CMAC_k,contr
+	call load_key
+//	arg mem_AES_CMAC_xor,contr
+//	call aes_load_xor
+	force regidx_xor,regext_index
+	call aes_clear
+	call aes_clear_data
+	call do_aes_ocb
+	
+//	force 0x38,aes_ctrl
+//	force 0x0,aes_ctrl
+//	call wait_aes
+	arg mem_AES_CMAC_k1,contw
+	call store_aes_result
+function_AES_CMAC_k1:
+	bpatchx patch3b_6,mem_patch3b
+	fetch 1,mem_AES_CMAC_k1
+	isolate1 7,pdata
+	nbranch function_AES_CMAC_k1_0,true	
+	call function_AES_CMAC_k1_inverse
+	
+//p_function_f4_k1_xor:
+	arg mem_AES_CMAC_k1,regc
+//	arg mem_AES_CMAC_rb,rega
+	arg mem_AES_CMAC_k1,contw
+//	arg 3,loopcnt
+//	call xor_loop
+	call function_AES_CMAC_xor_rb
+	branch function_AES_CMAC_k2
+function_AES_CMAC_k1_0:	
+	call function_AES_CMAC_k1_inverse
+function_AES_CMAC_k2:
+//call ice_break
+	arg mem_AES_CMAC_k1,contr
+	arg mem_AES_CMAC_k2,contw
+	call memcpy16
+	fetch 1,mem_AES_CMAC_k2
+	isolate1 7,pdata
+	nbranch function_AES_CMAC_k2_inverse,true		
+	call function_AES_CMAC_k2_inverse
+//p_function_f4_k2_xor:
+	arg mem_AES_CMAC_k2,regc
+//	arg mem_AES_CMAC_rb,rega
+	arg mem_AES_CMAC_k2,contw
+//	arg 3,loopcnt
+//	branch xor_loop	
+
+
+//rb:00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 87 
+function_AES_CMAC_xor_rb:
+	arg 3,loopcnt
+function_AES_CMAC_xor_rb_loop:	
+	arg 0,temp
+	call function_AES_CMAC_xor_loop_common	
+	increase 4,regc
+	loop  function_AES_CMAC_xor_rb_loop
+	arg 0x8700,temp
+	lshift16 temp,temp
+function_AES_CMAC_xor_loop_common:	
+	ifetch   4,regc
+	ixor  temp,pdata
+	istore   4,contw	
+	rtn
+		
+
+
+
+//input rega :length <16	contr,contw
+function_AES_CMAC_padding:
+	bpatchx patch3b_7,mem_patch3b
+	arg 16,loopcnt
+	arg 0,pdata
+function_AES_CMAC_padding_loop:
+	isub rega,null
+	branch function_AES_CMAC_padding_beq_length,zero
+	branch function_AES_CMAC_padding_big_length,positive
+	ifetcht 1,contr
+	istoret 1,contw
+function_AES_CMAC_padding_loop2:	
+	increase 1,pdata
+	loop function_AES_CMAC_padding_loop
+	rtn
+function_AES_CMAC_padding_beq_length:	
+	arg 0x80,temp
+function_AES_CMAC_padding_common:
+	istoret 1,contw
+	branch  function_AES_CMAC_padding_loop2
+
+function_AES_CMAC_padding_big_length:
+	arg 0,temp
+	branch function_AES_CMAC_padding_common
+
+endif
+	
+generate_kinit:
+	call function_e22
+	arg mem_input_store,contr
+	arg mem_kinit,contw		/* Kinit is ready */
+	branch memcpy16
+
+
+function_e21:	/* rega pointers to bdaddr */
+	disable user
+	call function_expand
+	arg mem_random_number,contr
+	arg mem_x,contw
+	force 15,loopcnt
+	call memcpy			
+	ifetch 1,contr
+	xor_into 6,pdata
+	istore 1,contw
+	setarg mem_y
+	store 2,memp_ar_input
+	setarg mem_x
+	store 2,memp_ar_key
+	set1 mark_ar2,mark
+	branch function_ar
+
+
+	
+function_e22:		/* rega pointers to bdaddr */
+	fetcht 1,mem_pin_length
+	force 16,regb			/* total 16 bytes */
+	add temp,6,regc		/* regc is l' */
+	sub regc,16,null		
+	branch function_e22_pin_init,positive 
+	force 16,regc
+function_e22_pin_init:			/* generate x from pin and bdaddr */
+	arg mem_x,contw
+function_e22_genx_pin:
+	arg mem_pin,contr
+	copy temp,loopcnt
+	disable user
+function_e22_genx_loop:
+	ifetch 1,contr
+	istore 1,contw
+	increase -1,regb
+	branch function_e22_genx_end,zero
+	loop function_e22_genx_loop
+	branch function_e22_genx_pin,user
+	enable user
+	force 6,loopcnt
+	copy rega,contr
+	branch function_e22_genx_loop
+function_e22_genx_end:
+	arg mem_random_number,contr
+	arg mem_y,contw
+	call memcpy16
+	fetch 1,mem_y15
+	ixor regc,pdata
+	store 1,mem_y15	/* inpy[15] = rand_num[15]^l'; */
+	setarg mem_y
+	store 2,memp_ar_input
+	setarg mem_x
+	store 2,memp_ar_key
+	set1 mark_ar2,mark
+	branch function_ar
+
+
+
+
+function_e1:	/* rega pointers to bdaddr */
+	disable user
+	call function_expand
+	branch function_hash
+
+function_e3:
+	arg mem_aco,rega
+	enable user
+	call function_expand
+	call function_hash
+	arg mem_input_store,contr
+	arg mem_kc,contw
+	branch memcpy16
+
+	/* costs 41769 clocks */
+function_hash:
+	setarg mem_random_number
+	store 2,memp_ar_input
+	setarg mem_link_key
+	store 2,memp_ar_key
+	set0 mark_ar2,mark
+	call function_ar
+	arg mem_input_store,rega
+	arg mem_random_number,regb
+	arg mem_x,contw
+	call xor16
+	arg mem_x,rega
+	arg mem_y,regb
+	copy regb,contw
+	enable user
+	call add16
+	call key_offset
+	setarg mem_y
+	store 2,memp_ar_input
+	setarg mem_x
+	store 2,memp_ar_key
+	set1 mark_ar2,mark
+	branch function_ar
+	
+
+	/* totally costs 20700 clocks */
+function_ar:
+	jam 0,mem_ar_hround
+	fetch 2,memp_ar_key
+	iforce contr
+	arg mem_key_store,contw
+	call memcpy16
+	fetch 2,memp_ar_input
+	iforce contr
+	arg mem_input_store,contw
+	call memcpy16
+	
+function_ar_loop:
+	call key_scheduling
+	disable user
+	bmark0 mark_ar2,function_ar_original
+	fetch 1,mem_ar_hround
+	bne 4,function_ar_original
+	fetch 2,memp_ar_input
+	iforce regb
+	call xor_mod32_ar2
+function_ar_original:
+	call xor_mod32
+	call el_boxes
+	fetch 1,mem_ar_hround
+	increase 1,pdata
+	store 1,mem_ar_hround
+
+	call key_scheduling
+	enable user
+	call xor_mod32
+	call pht
+	call permute
+	call pht
+	call permute
+	call pht
+	call permute
+	call pht
+	fetch 1,mem_ar_hround
+	increase 1,pdata
+	store 1,mem_ar_hround
+	bne 16,function_ar_loop
+	call key_scheduling
+	disable user
+	branch xor_mod32
+	
+/* input round number and temp key in mem_key_store, and output the next temp key in mem_key_store */
+/* round key is generated and store in mem_round_key */
+key_scheduling:
+	fetch 1,mem_ar_hround
+	arg mem_key_store,contr
+	branch key_sched_zero,blank
+	iforce regb      			/* regb is half round */
+	force 17,loopcnt
+	copy contr,contw
+key_rotateloop:
+	ifetch 1,contr
+	lshift3 pdata,temp
+	rshift2 pdata,pdata
+	rshift3 pdata,pdata
+	ior temp,pdata
+	istore 1,contw
+	loop key_rotateloop
+	setarg mem_key_store
+	iadd regb,contr
+	force 16,loopcnt    
+	arg mem_round_key,contw
+key_select_octet_loop:
+	ifetch 1,contr
+	istore 1,contw
+	compare mem_key_store_end,contr,0xff
+	nbranch key_select_octet_nwrap,true
+	increase -17,contr
+key_select_octet_nwrap:
+	loop key_select_octet_loop
+	force 0,rega         /* rega is index of octet within row */
+	add regb,-1,regc    /* this is the row index, half_round#1 is 0 */
+	lshift2 regc,regc
+	lshift2 regc,regc
+	call enable_authrom
+	setarg mem_b_box
+	iadd regc,regc       /* regc hold the starting address of the row */
+	arg mem_round_key,contw
+	force 16,loopcnt
+bias_round_key_loop:
+	ifetcht 1,regc
+	ifetch 1,contw
+	iadd temp,pdata
+	istore 1,contw
+	increase 1,regc
+	loop bias_round_key_loop
+	branch disable_authrom
+
+key_sched_zero:    /* round 0, key1 */
+	force 16,loopcnt
+	force 0,temp
+create_byte_16_loop:
+	ifetch 1,contr
+	ixor temp,temp
+	loop create_byte_16_loop
+	deposit temp
+	istore 1,contr    	/* store the byte #16 */
+	arg mem_key_store,contr
+	arg mem_round_key,contw
+	branch memcpy16
+
+xor_mod32:     /* xor on 0,3, add on 1,2. if user is set, invert. x in rega and y in regb, out in contw */
+	arg mem_round_key,regb
+xor_mod32_ar2:
+	force 16,loopcnt
+	arg mem_input_store,rega
+	copy rega,contw
+xor_mod32_loop:	
+	ifetcht 1,rega
+	ifetch 1,regb
+	ixor temp,alarm
+	and loopcnt,3,regc
+	nbranch xor_mod32_invert,user
+	xor_into 3,regc
+xor_mod32_invert:
+	sub regc,1,regc
+	branch xor_even,positive
+	iadd temp,alarm
+xor_even:
+	deposit alarm
+	istore 1,contw
+	increase 1,rega
+	increase 1,regb
+	loop xor_mod32_loop
+	rtn
+
+el_boxes:
+	call enable_authrom
+	force 16,loopcnt
+	arg mem_input_store,rega
+el_box_loop:	
+	ifetch 1,rega
+	arg mem_e_box,contr
+	and loopcnt,3,regc
+	sub regc,1,null
+	branch e_boxes,positive
+	arg mem_l_box,contr
+e_boxes:
+	iadd contr,contr
+	ifetch 1,contr
+	istore 1,rega
+	increase 1,rega
+	loop el_box_loop
+	branch disable_authrom
+
+pht:				
+	force 8,loopcnt
+	arg mem_input_store,contr
+	copy contr,contw
+pht_loop:
+	ifetch 1,contr
+	iforce rega
+	ifetch 1,contr
+	iforce regb
+	lshift rega,pdata
+	iadd regb,pdata
+	istore 1,contw
+	deposit rega
+	iadd regb,pdata
+	istore 1,contw
+	loop pht_loop
+	rtn
+
+/* 8 11 12 15 2 1 6 5 10 9 14 13 0 7 4 3 */
+permute:			
+	setarg 0x8ae42c
+	iforce temp
+	force 7,loopcnt
+	call permute_exchange
+	setarg 0xd751b
+	iforce temp
+	force 5,loopcnt
+	call permute_exchange
+	fetch 1,mem_input_store+15
+	iforce rega
+	fetch 1,mem_input_store+3
+	store 1,mem_input_store+15
+	deposit rega
+	store 1,mem_input_store+3
+	rtn
+
+permute_exchange:
+	and temp,0xf,regb
+permute_loop:
+	and temp,0xf,pdata
+	arg mem_input_store,contw
+	iadd contw,contw
+	ifetch 1,contw
+	iforce regc
+	deposit rega
+	istore 1,contw
+	copy regc,rega
+	rshift4 temp,temp
+	loop permute_loop	
+	setarg mem_input_store
+	iadd regb,contw
+	deposit rega
+	istore 1,contw
+	rtn
+
+add16:
+	enable user
+	branch xor_add16
+
+xor16:
+	disable user
+xor_add16:	/* if user is set, do add, else do xor */
+	force 16,loopcnt	/* rega and regb pointers to src, contw is result */
+xoradd_loop:
+	ifetcht 1,rega
+	ifetch 1,regb
+	branch xoradd_add,user
+	ixor temp,pdata
+	branch xoradd_store
+xoradd_add:	
+	iadd temp,pdata
+xoradd_store:	
+	istore 1,contw
+	increase 1,rega
+	increase 1,regb
+	loop xoradd_loop
+	rtn
+
+	
+function_expand:		/* rega pointers to bdaddr, or aco and user is set */
+	arg mem_y,contw
+	ifetch 6,rega
+	istore 6,contw
+	branch expand_12,user
+	ifetch 6,rega
+	branch expand_cont
+expand_12:
+	ifetch 6,contr
+expand_cont:
+	istore 6,contw
+	ifetch 4,rega
+	istore 4,contw
+	rtn
+
+key_offset:
+	arg mem_link_key,contr
+	arg mem_x,contw
+	arg 0,temp
+	setarg 0x8395a7
+	call concatenate_temp24
+	setarg 0xb3c1df
+	call concatenate_temp24
+	setarg 0xe5e9
+	call concatenate_temp16
+	copy temp,regab
+	disable user
+	call key_addxor
+	copy regab,temp
+	enable user
+	branch key_addxor
+
+key_addxor:
+	force 8,loopcnt
+key_addxor_loop:	
+	ifetch 1,contr
+	compare 1,loopcnt,1
+	branch key_high,user
+	branch key_xor,true
+key_add:	
+	iadd temp,pdata
+	branch key_store
+key_high:
+	branch key_add,true
+key_xor:
+	ixor temp,pdata
+key_store:
+	istore 1,contw
+	rshift8 temp,temp
+	loop key_addxor_loop
+	rtn
+
+copy_aco:
+	fetch 6,mem_input_store+4
+	store 6,mem_aco
+	ifetch 6,contr
+	istore 6,contw
+	rtn
+	
+concatenate_temp24:
+	lshift8 temp,temp
+concatenate_temp16:
+	lshift16 temp,temp
+	ior temp,temp
+	rtn
+
+ifdef TESTING
+test_security:
+	fetch 1,0xff
+	branch test_security,blank
+
+	/* inrand */
+	setarg 0x1BC683
+	store 3,0x0
+	setarg 0x122980
+	istore 3,contw
+	setarg 0xD0DB17
+	istore 3,contw
+	setarg 0x2B1D78
+	istore 3,contw
+	setarg 0x2743A6
+	istore 3,contw
+	setarg 0xD8
+	istore 1,contw
+
+	/* comb A */
+	setarg 0xA6D0C9
+	store 3,0x10
+	setarg 0xA9E86C
+	istore 3,contw
+	setarg 0x9E89D5
+	istore 3,contw
+	setarg 0xC61838
+	istore 3,contw
+	setarg 0x6F0318
+	istore 3,contw
+	setarg 0x9F
+	istore 1,contw
+
+	/* comb B */
+	setarg 0x7F6833
+	store 3,0x20
+	setarg 0xE62E1B
+	istore 3,contw
+	setarg 0x9F67FC
+	istore 3,contw
+	setarg 0x8D3712
+	istore 3,contw
+	setarg 0x0B846C
+	istore 3,contw
+	setarg 0x4A
+	istore 1,contw
+
+	/* auth rand A */
+	setarg 0xFBB686
+	store 3,0x30
+	setarg 0x19FE7F
+	istore 3,contw
+	setarg 0x16A439
+	istore 3,contw
+	setarg 0xF4F6A4
+	istore 3,contw
+	setarg 0x10D61D
+	istore 3,contw
+	setarg 0xDE
+	istore 1,contw
+
+	/* auth rand B */
+	setarg 0x735B0C
+	store 3,0x40
+	setarg 0xA7F06B
+	istore 3,contw
+	setarg 0x04625E
+	istore 3,contw
+	setarg 0x3463B0
+	istore 3,contw
+	setarg 0xB8F17A
+	istore 3,contw
+	setarg 0x7C
+	istore 1,contw
+
+	/* address A */
+	setarg 0xf91330
+	store 3,0xb0
+	setarg 0x664c7d
+	istore 3,contw
+
+	/* address B */
+	setarg 0xdc7100
+	store 3,0xb8
+	setarg 0x2ea003
+	istore 3,contw
+
+	/* sres A */
+	setarg 0x2EEE19
+	store 3,0x50
+	setarg 0x7E
+	istore 1,contw
+
+	/* sres B */
+	setarg 0x4231A4
+	store 3,0x58
+	setarg 0xD1
+	istore 1,contw
+
+	/* linkA */
+	setarg 0xa6a026
+	store 3,0x60
+	setarg 0x2569d2
+	istore 3,contw
+	setarg 0xab4a9d
+	istore 3,contw
+	setarg 0x5e87c0
+	istore 3,contw
+	setarg 0x792aa9
+	istore 3,contw
+	setarg 0x4b
+	istore 1,contw
+
+	/* linkB */
+	setarg 0xa1f07d
+	store 3,0x70
+	setarg 0xec97a6
+	istore 3,contw
+	setarg 0xae31eb
+	istore 3,contw
+	setarg 0x6fe3c4
+	istore 3,contw
+	setarg 0xa1ae1a
+	istore 3,contw
+	setarg 0x3a
+	istore 1,contw
+
+	/* linkkey */
+	setarg 0x07505b
+	store 3,0x80
+	setarg 0xc9fe74
+	istore 3,contw
+	setarg 0x057b76
+	istore 3,contw
+	setarg 0x316404
+	istore 3,contw
+	setarg 0xd884b3
+	istore 3,contw
+	setarg 0x71
+	istore 1,contw
+
+	/* K */
+	setarg 0x0c333f
+	store 3,0x90
+	setarg 0x41de70
+	istore 3,contw
+	setarg 0x9b05a2
+	istore 3,contw
+	setarg 0xb954a2
+	istore 3,contw
+	setarg 0xb37516
+	istore 3,contw
+	setarg 0x36
+	istore 1,contw
+
+	/* kinit */
+	setarg 0x5ff91a
+	store 3,0xa0
+	setarg 0x39b5a4
+	istore 3,contw
+	setarg 0x258f2d
+	istore 3,contw
+	setarg 0x5d4a85
+	istore 3,contw
+	setarg 0x656ad3
+	istore 3,contw
+	setarg 0xab
+	istore 1,contw
+
+	arg 0,contr
+	arg mem_random_number,contw
+	call memcpy16
+	setarg 0x3131
+	store 2,mem_pin
+	istore 2,contw
+	jam 4,mem_pin_length
+	arg 0xb8,rega
+	call function_e22
+	arg mem_input_store,contr
+	arg mem_kinit,contw
+	call memcpy16
+	arg 0x10,rega
+	arg mem_kinit,regb
+	arg mem_random_number,contw
+	call xor16
+	arg 0xb0,rega
+	call function_e21
+	arg 0x60,regb
+	call compare16
+error_lka:
+	nbranch error_lka,zero
+	arg mem_input_store,contr
+	arg mem_link_key,contw	
+	call memcpy16
+	arg 0x20,rega
+	arg mem_kinit,regb
+	arg mem_random_number,contw
+	call xor16
+	arg 0xb8,rega
+	call function_e21
+	arg 0x70,regb
+	call compare16
+error_lkb:
+	nbranch error_lkb,zero
+	arg mem_input_store,rega
+	arg mem_link_key,regb
+	arg mem_link_key,contw
+	call xor16
+	arg 0x30,contr
+	arg mem_random_number,contw
+	call memcpy16
+	arg 0xb8,rega
+	call function_e1
+	arg 0x50,regb
+	force 4,loopcnt
+	call compare_key
+error_sresa:
+	nbranch error_sresa,zero
+	arg 0x40,contr
+	arg mem_random_number,contw
+	call memcpy16
+	arg 0xb0,rega
+	call function_e1
+	arg 0x58,regb
+	force 4,loopcnt
+	call compare_key
+error_sresb:
+	nbranch error_sresb,zero
+	branch loop1
+	
+	arg 0,contr
+	arg mem_random_number,contw
+	call memcpy16
+	force 12,loopcnt
+	call memcpy
+	arg 0x1c,contr
+	arg mem_link_key,contw
+	call memcpy16
+	arg 0x10,rega
+	call function_e3
+	branch loop1
+
+compare16:
+	force 16,loopcnt
+compare_key:
+	arg mem_input_store,rega
+	branch compare_loop
+
+compare_loop:
+	ifetch 1,rega
+	ifetcht 1,regb
+	isub temp,null
+	nrtn zero
+	increase 1,rega
+	increase 1,regb
+	loop compare_loop
+	force 0,pdata
+	rtn
+
+endif
+
+
+loop1:	
+	branch loop1
+
+/* ==================== LE security ================= */
+
+generate_stk:
+	bpatchx patch3c_0,mem_patch3c
+	call function_s1
+	arg mem_le_ltk,contw
+	branch store_aes_result
+
+	/* contr = rand pointer */
+authenticate_rconfirm:
+	arg mem_le_srand,contw
+	branch authenticate_mconfirm,master
+	arg mem_le_mrand,contw
+authenticate_mconfirm:
+	copy contr,rega
+	call memcpy16
+	call function_c1
+	arg mem_le_rconfirm,contr
+	branch compare_res
+
+generate_confirm:
+	arg mem_le_mrand,rega
+	branch generate_mrand,master
+	arg mem_le_srand,rega
+generate_mrand:
+	copy rega,contw
+	call generate_random
+	branch function_c1
+
+generate_sk:
+	arg mem_le_skdm,contr
+	call load_data128
+	arg mem_le_ltk,contr
+	call load_regext
+	force 0x38,aes_ctrl
+	force 0x0,aes_ctrl
+	call wait_aes
+	arg mem_le_sk,contw
+	branch store_aes_result
+
+	/* temp=packet counter, rega = length or block counter*/
+first_block_counter:
+	force 0x49,pdata
+	branch first_block
+first_block_data:
+	force 1,pdata
+first_block:
+	force regidx_data,regext_index			/* B0 */
+	lshift8 temp,regext
+	ior regext,regext
+	increase 1,regext_index
+	rshift8 temp,regext
+	rshift16 regext,regext
+	fetch 2,mem_le_ivm
+	lshift16,pdata,pdata
+	ior regext,regext				/* octet3&octet4 of counter and low 16 bit of IV */
+	increase 1,regext_index
+	ifetch 4,contr					/* IV2-IV5 */
+	iforce regext
+	increase 1,regext_index
+	ifetch 2,contr					/* IV6-IV7 */
+	byteswap rega,regext
+	lshift16 regext,regext
+	ior regext,regext
+	increase 1,regext_index
+	rtn
+
+
+	/* temp=packet counter, regc pointers to data */	
+generate_mic:
+	add regc,1,contr
+	ifetch 1,contr
+	iforce rega
+	call first_block_counter
+	call do_aes_ocb
+
+	force regidx_data,regext_index			/* B1 */
+	ifetch 1,regc
+	and_into 0x3,pdata
+	lshift16 pdata,regext
+	set1 8,regext
+	call clear_hidata
+	call do_aes_cbc
+
+	copy rega,loopcnt
+	add regc,2,contr
+	call padding_data
+generate_mic_loop:
+	call aes_load_data
+	call do_aes_cbc
+	deposit loopcnt
+	branch generate_mic_end,blank
+	branch generate_mic_loop
+generate_mic_end:
+	force regidx_result,regext_index
+	deposit regext
+	store 4,mem_le_mic
+	rtn
+
+aes_crypt_data:
+	increase 1,rega
+	call first_block_data
+	copy regc,contr
+	call aes_load_xor
+	call do_aes_ctr
+	call store_enc_data
+	increase 16,regc
+	increase -16,regb
+	branch aes_crypt_data,positive
+	rtn
+	
+le_encrypt:
+	bpatchx patch3c_1,mem_patch3c
+	arg mem_le_txheader,regc
+	fetcht 5,mem_le_pcnt_tx
+	call generate_mic
+	force regidx_xor,regext_index
+	iforce regext
+	force 0,rega					/* rega is block counter */
+	call first_block_data
+	call do_aes_ctr
+	arg mem_le_txpayload,regc
+	fetch 1,mem_le_txlen
+	add pdata,-1,regb
+	iadd regc,contw
+	force regidx_result,regext_index
+	deposit regext
+	istore 4,contw	
+	call aes_crypt_data
+	fetch 1,mem_le_txlen
+	increase 4,pdata
+	store 1,mem_le_txlen
+	fetcht 5,mem_le_pcnt_tx
+	increase 1,temp
+	storet 5,mem_le_pcnt_tx
+	rtn
+
+le_decrypt:
+	bpatchx patch3c_2,mem_patch3c
+	fetch 1,mem_le_rxbuf+1
+	sub pdata,20,null
+	branch le_dec_cont,positive
+le_dec_cont:
+	arg mem_le_rxbuf+2,regc
+	add pdata,-1,regb
+	increase -4,pdata				/* mic will be discarded */
+	store 1,mem_le_rxbuf+1
+	iadd regc,contr
+	ifetch 4,contr
+	force regidx_xor,regext_index
+	iforce regext
+	force 0,rega					/* rega is block counter */
+	fetcht 5,mem_le_pcnt_rx
+	call first_block_data
+	call do_aes_ctr
+	force regidx_result,regext_index
+	deposit regext
+	store 4,mem_le_peer_mic
+	call aes_crypt_data
+	arg mem_le_rxbuf,regc
+	call generate_mic
+	fetcht 4,mem_le_peer_mic
+	isub temp,pdata				/* MIC ok? */
+	nrtn blank
+	fetch 4,mem_le_last_mic			/* reduntdant packet? */
+	isub temp,pdata
+	rtn blank
+	storet 4,mem_le_last_mic
+	fetch 5,mem_le_pcnt_rx
+	increase 1,pdata
+	store 5,mem_le_pcnt_rx
+	force 0,pdata
+	rtn
+
+wait_aes:
+	nbranch wait_aes,aes_ready
+	rtn
+
+do_aes_ocb:
+	force 0x30,aes_ctrl
+	force 0x0,aes_ctrl
+	branch wait_aes
+
+do_aes_cbc:
+	force 0x32,aes_ctrl
+	force 0x2,aes_ctrl
+	branch wait_aes
+
+do_aes_ctr:
+	force 0x34,aes_ctrl
+	force 0x4,aes_ctrl
+	branch wait_aes
+
+	
+aes_init:
+	force 1,aes_ctrl
+	force 0,aes_ctrl
+	rtn
+function_s1:
+	force regidx_data,regext_index
+	fetch 4,mem_le_mrand
+	iforce regext
+	increase 1,regext_index
+	ifetch 4,contr
+	iforce regext
+	increase 1,regext_index
+	fetch 4,mem_le_srand
+	iforce regext
+	increase 1,regext_index
+	ifetch 4,contr
+	iforce regext
+	increase 1,regext_index
+	call aes_clear
+	increase -4,regext_index
+	fetch 4,mem_le_tk
+	copy pdata,regext
+	increase 4,regext_index
+	force 0x38,aes_ctrl
+	force 0x8,aes_ctrl
+	branch wait_aes
+
+	/* rega pointers to random number */
+function_c1:
+	bpatchx patch3c_3,mem_patch3c
+	fetch 6,mem_le_lap
+	fetcht 6,mem_le_plap
+	branch function_c1_master,master
+	fetch 6,mem_le_plap
+	fetcht 6,mem_le_lap
+function_c1_master:
+	force regidx_xor,regext_index
+	copy temp,regext
+	increase 1,regext_index
+	rshift32 temp,regext
+	lshift16 pdata,pdata
+	ior regext,regext
+	increase 1,regext_index
+	rshift32 pdata,regext
+	increase 1,regext_index
+	force 0,regext					/* p2 = ia || ra */
+	force 0,pdata
+	fetch 1,mem_le_conn_peer_addr_type
+	fetcht 1,mem_le_adv_own_addr_type
+	nbranch function_c1_irat,master
+	//conn as master
+	fetch 1,mem_le_conn_own_addr_type
+	fetcht 1,mem_le_conn_peer_addr_type
+function_c1_irat:
+	store 1,mem_le_iat
+	storet 1,mem_le_rat
+	force regidx_data,regext_index
+	arg mem_le_iat,regb
+	force 4,loopcnt
+function_c1_loop1:
+	ifetch 4,rega		
+	ifetcht 4,regb
+	ixor temp,regext
+	increase 1,regext_index
+	increase 4,rega
+	increase 4,regb
+	loop function_c1_loop1		/* p1 ^ r */
+	call aes_clear				/* k = 0 */
+	increase -4,regext_index
+	fetch 4,mem_le_tk
+	copy pdata,regext
+	increase 4,regext_index
+	force 0x38,aes_ctrl
+	force 0xc,aes_ctrl
+	call wait_aes
+
+	call aes_clear_data
+	force 0x3a,aes_ctrl
+	force 0x8,aes_ctrl
+	branch wait_aes
+
+padding_data:
+	compare 0,loopcnt,3
+	rtn true
+	deposit contr
+	iadd loopcnt,contw
+	force 0,pdata
+padding_loop:
+	istore 1,contw
+	increase 1,loopcnt
+	compare 0,loopcnt,3
+	rtn true
+	branch padding_loop
+
+aes_load_data:
+	force regidx_data,regext_index
+load_data_loop:
+	deposit loopcnt
+	branch load_data_padding,blank
+	ifetch 4,contr
+	increase -4,loopcnt
+load_data_padding:
+	iforce regext
+	increase 1,regext_index
+	compare regidx_key,regext_index,0xf
+	rtn true
+	branch load_data_loop
+
+aes_load_xor:
+	force regidx_xor,regext_index
+	branch load_regext
+load_key:
+	force regidx_key,regext_index
+	branch load_regext
+load_data128:
+	force regidx_data,regext_index
+load_regext:
+	force 4,loopcnt
+load_regext_loop:
+	ifetch 4,contr
+	iforce regext
+	increase 1,regext_index
+	loop load_regext_loop
+	rtn
+
+load_sk:
+	arg mem_le_sk,contr
+	branch load_key
+
+clear_hidata:
+	force 4,loopcnt
+	branch clear_data_rest
+
+aes_clear_data:
+	force regidx_data,regext_index
+aes_clear:
+	force 4,loopcnt
+clear_loop:
+	force 0,regext
+clear_data_rest:
+	increase 1,regext_index
+	loop clear_loop
+	rtn
+
+store_aes_result:
+	force regidx_result,regext_index
+	force 4,loopcnt
+send_aes_result_loop:
+	deposit regext
+	istore 4,contw
+	increase 1,regext_index
+	loop send_aes_result_loop
+	rtn
+
+store_enc_data:
+	force regidx_result,regext_index
+	copy regc,contw
+	add regb,1,loopcnt
+	sub loopcnt,15,null
+	branch store_enc_loop,positive
+	force 16,loopcnt
+store_enc_loop:
+	deposit regext
+	sub loopcnt,3,null
+	branch store_enc_byte,positive
+	istore 4,contw
+	increase -4,loopcnt
+	rtn zero
+	increase 1,regext_index
+	branch store_enc_loop
+store_enc_byte:
+	istore 1,contw
+	rshift8 pdata,pdata
+	loop store_enc_byte
+	rtn
+	
+	/* contr pointers to value to be compared */
+compare_res:
+	force regidx_result,regext_index
+	force 4,loopcnt
+compare_res_loop:
+	ifetch 4,contr
+	isub regext,null
+	nrtn zero
+	increase 1,regext_index
+	loop compare_res_loop
+	force 0,null
+	rtn
+
+enable_authrom:
+	hfetch 1,core_clkoff
+	set0 CLOCK_OFF_AUTH_ROM,pdata
+	hstore 1,core_clkoff
+	rtn
+
+disable_authrom:
+	hfetch 1,core_clkoff
+	set1 CLOCK_OFF_AUTH_ROM,pdata
+	hstore 1,core_clkoff
+	rtn
+
+init_memp:
+	arg mem_p,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3ffff
+	setsect 3,0x3fbff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3ffff
+	setsect 3,0x3ffff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3cfff
+	setsect 3,0x3ffff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3ffef
+	setsect 3,0x3ffff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x3ffff
+	setsect 2,0x3ffff
+	setsect 3,0x3ffff
+	istore 9,contw
+	setsect 0,0x3ffff
+	setsect 1,0x26c7f
+	setsect 2,0x146b
+	setsect 3,0x37bb3
+	istore 9,contw
+	setsect 0,0x1feb8
+	setsect 1,0x10c12
+	setsect 2,0x2b722
+	setsect 3,0x29fa6
+	istore 9,contw
+	setsect 0,0xe70f
+	setsect 1,0x16720
+	setsect 2,0x519e
+	setsect 3,0x19084
+	istore 9,contw
+	setsect 0,0x31012
+	setsect 1,0x360bf
+	setsect 2,0x3f0af
+	setsect 3,0x3d3
+	istore 9,contw
+	setsect 0,0x3a188
+	setsect 1,0x3ad0
+	setsect 2,0x3cbf2
+	setsect 3,0x243d9
+	istore 9,contw
+	setsect 0,0x2b030
+	setsect 1,0x36a03
+	setsect 2,0x11188
+	setsect 3,0x1e520
+	istore 9,contw
+	setsect 0,0x3a11e
+	setsect 1,0xfe5d
+	setsect 2,0xdd57
+	setsect 3,0x1ac93
+	istore 9,contw
+	setsect 0,0x11ed
+	setsect 1,0x218c4
+	setsect 2,0x8da7
+	setsect 3,0x257ff
+	istore 9,contw
+	setsect 0,0x3192b
+	setsect 1,0x34641
+	setsect 2,0x1be0c
+	setsect 3,0x366ad
+	istore 9,contw
+	setsect 0,0x1f83
+	setsect 1,0x15a23
+	setsect 2,0x3f9b0
+	setsect 3,0x3949
+	istore 9,contw
+	setsect 0,0x13a51
+	setsect 1,0x153fd
+	setsect 2,0x3372a
+	setsect 3,0xf1bb
+	istore 9,contw
+	setsect 0,0x3ae85
+	setsect 1,0x1eed9
+	setsect 2,0x9e66
+	setsect 3,0x1a8
+	istore 8,contw
+	rtn
+	
+ifdef SECURE_CONNECTION
+
+
+init_memp_256:
+ 	arg mem_p_256,contw
+        setsect 0,0x3ffff
+        setsect 1,0x3ffff
+        setsect 2,0x3ffff
+        setsect 3,0x3ffff
+        istore 9,contw
+        setsect 0,0x3ffff
+        setsect 1,0x3f
+        setsect 2,0x0
+        setsect 3,0x0
+        istore 9,contw
+        setsect 0,0x0
+        setsect 1,0x0
+        setsect 2,0x1000
+        setsect 3,0x0
+        istore 9,contw
+        setsect 0,0x3ff00
+        setsect 1,0x3ffff
+        setsect 2,0x3ffcf
+        setsect 3,0x3ffff
+        istore 9,contw
+        setsect 0,0x3ffff
+        setsect 1,0x3ffff
+        setsect 2,0x3ffff
+        setsect 3,0x3ff
+        istore 9,contw
+        setsect 0,0x0
+        setsect 1,0x0
+        setsect 2,0x0
+        setsect 3,0x0
+        istore 9,contw
+        setsect 0,0x10000
+        setsect 1,0x0
+        setsect 2,0x3f000
+        setsect 3,0x3ffff
+        istore 9,contw
+        setsect 0,0x296ff
+        setsect 1,0x22630
+        setsect 2,0x3945d
+        setsect 3,0x3d284
+        istore 9,contw
+        setsect 0,0x333a0
+        setsect 1,0x4b7a
+        setsect 2,0x37d8
+        setsect 3,0x3c9dc
+        istore 9,contw
+        setsect 0,0x3a440
+        setsect 1,0x1b958
+        setsect 2,0x38bce
+        setsect 3,0x1091f
+        istore 9,contw
+        setsect 0,0x2e12c
+        setsect 1,0x1f47c
+        setsect 2,0x356b1
+        setsect 3,0x2fd47
+        istore 9,contw
+        setsect 0,0x6837
+        setsect 1,0x2ed90
+        setsect 2,0x1ecec
+        setsect 3,0x1acc5
+        istore 9,contw
+        setsect 0,0x23357
+        setsect 1,0x18af3
+        setsect 2,0xf9e1
+        setsect 3,0x129f0
+        istore 9,contw
+        setsect 0,0x2e7eb
+        setsect 1,0x3e6e3
+        setsect 2,0x3e1a7
+        setsect 3,0x10b8b
+        istore 9,contw
+        setsect 0,0x24fe3
+        setsect 1,0x20ef
+        setsect 2,0x1b5a6
+        setsect 3,0xdc2f
+        istore 9,contw
+        setsect 0,0x13860
+        setsect 1,0x2bd69
+        setsect 2,0x391a
+        setsect 3,0x1b222
+        istore 9,contw
+        rtn
+endif
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/sim.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/sim.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/sim.prog	(working copy)
@@ -0,0 +1,518 @@
+simstart:
+	force 8,radio_ctrl
+	force 0,radio_ctrl
+	jam 0xe0,0x8907			// set if_phase=7 for simulation environment
+	jam 0xe0,0x890a
+	jam 0x25,0x8912
+	jam 0xff,rfen_ck
+	jam 5,core_clksel
+//	call init_24m
+//	branch sim_usb
+//	branch sim_iic
+//	branch sim_clk
+//	call sim_uart
+//	branch sim_lpm
+//	branch sim_c1
+//	branch loop
+//	call sim_spi
+//	call sim_eep
+//	branch test_tx
+//	branch sim_le
+//	branch sim_250k
+	branch sim_main
+
+
+
+
+sim_lpm:
+	hfetch 1,0xffd
+	beq 1,sim_assert
+	branch sim_lpm_do
+	setarg 0
+	set1 31,pdata
+	store 8,mem_gpio_wakeup_low
+	branch lpm_hibernate
+sim_lpm_sleep:
+	jam 1,mem_context
+	branch sim_lpm_wait,wake
+	jam 0x70,core_bist_ctrl
+	jam ccnt_start,core_misc_ctrl
+sim_lpm_wait:
+	call lpo_calibration
+	fetch 3,mem_clks_per_lpo
+	branch sim_lpm_wait,blank
+	call lpm_recover_clk,wake
+	jam 0x1b,mem_lpm_ldocnt
+	arg sim_assert,loopcnt
+	hfetch 1,core_gpio_wakeup_low+2
+	bbit0 2,sim_lpm_loop
+	until null,lpo_edge
+	jam 0x20,core_misc_ctrl
+	until null,lpo_edge
+sim_lpm_loop:
+	hfetch 1,core_misc_status
+	bbit1 6,sim_lpm_loop
+	hfetch 1,core_gpio_in+3
+	compare 0x20,pdata,0x20
+	setarg 0
+	setflag true,29,pdata
+	setflag true,30,pdata
+	store 4,mem_gpio_wakeup_low
+	setarg 0
+	nsetflag true,29,pdata
+	nsetflag true,30,pdata
+	store 4,mem_gpio_wakeup_high
+sim_lpm_do:
+	arg 30,temp
+	branch lpm_sleep
+
+sim_assert:
+	branch sim_assert
+
+
+sim_main:
+	call init_param
+	jam 0,core_clkoff
+	hfetch 1,0x17fd
+	beq 1,sim_slave
+
+	arg 3,temp
+	call set_freq_tx
+	nop 500
+	enable encode_fec0
+	disable is_rx
+	enable is_tx
+	set1 TXGFSK,radio_ctrl
+	call sim_access
+	preload access
+	inject mod,72
+	setarg 0x123456
+	inject mod,72
+	set1 PSK,radio_ctrl
+	setarg 0xabeee
+	inject mod,20
+	setarg 0x22aa33
+	inject mod,72
+	branch s_loop
+
+
+	jam dvc_op_hci,mem_device_option
+	fetch 6,mem_lap
+	store 6,mem_hci_plap
+	setarg 0xbdbdbd
+	store 3,mem_lap
+	istore 3,contw
+	jam hci_cmd_create_conn,mem_hci_cmd
+	force 0xf,pdata
+	add pdata,-2,clkn_bt
+	store 4,mem_page_clk
+	rshift clkn_bt,pdata
+	store 4,mem_last_clkn
+	jam 0,mem_scan_mode
+sim_loop:
+	call idle_dispatch
+	fetch 1,mem_context
+	bbit0 state_inconn,sim_skip
+	set1 mark_tx_l2cap,mark
+	fetch 1,mem_context + coffset_op		
+	set1 op_txl2cap,pdata
+	store 1,mem_context + coffset_op
+	jam 0,mem_context + coffset_lmp_to_send
+	jam 0,mem_lmo_opcode2
+	setarg 700
+	store 2,mem_tx_len
+	setarg mem_tmp_buffer
+	store 2,mem_txptr
+	jam 6,mem_tx_lch
+	jam 1,mem_hci_conn_handle
+sim_skip:
+	call connection_dispatch
+	branch sim_loop		
+
+sim_slave:
+
+	arg 3,temp
+	call set_freq_rx
+	call rf_rx_enable
+	call sim_access
+	enable is_rx
+	enable decode_fec0
+	correlate null,never
+	set1 PSK,radio_ctrl
+	correlate null,never
+	parse demod,bucket,72
+	branch s_loop
+
+
+	jam 2,mem_scan_mode
+	call page_scan_dispatch
+	branch sim_slave
+
+sim_access:
+	setarg 0x1234567
+	iforce lap
+	pulse recalc
+	nop 32
+	rtn
+
+sim_iic:
+	call iicd_init_12m
+	setarg 3
+	hstore 2,core_iicd_txlen
+	setarg 0x1f051e
+	store 3,mem_iicd_addr
+	setarg mem_iicd_addr
+	hstore 2,core_iicd_txaddr
+	setarg 1
+	hstore 2,core_iicd_rxlen
+	jam 3,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	call wait_iicd_done
+	nop 300
+	setarg 0xd321d2
+	store 3,mem_iicd_addr
+	jam iicd_start,core_misc_ctrl
+	call wait_iicd_done
+s_loop:
+	branch s_loop
+
+sim_usb:
+	call usb_init
+sim_usb_loop:
+	call usb_isr
+	branch sim_usb_loop
+
+init_24m:
+	jam 0x4b,core_halfslot
+	jam 0x1d,core_halfslot + 1
+	jam 1,core_clksel
+	rtn
+
+
+p_transmit_sw:
+	reverse uap,regc				// hec init
+	enable encode_fec0
+	set0 mark_longpacket,mark
+	copy am_addr,temp
+	arg 3,loopcnt
+	call p_head
+	copy type,temp
+	arg 4,loopcnt
+	call p_head
+	fetch 1,mem_arq
+	lshift4 pdata,temp
+	arg 3,loopcnt
+	call p_head
+	copy regc,temp
+	arg 8,loopcnt
+	call p_head
+	reverse uap,regc
+	lshift8 regc,regc				// crc init
+	and type,0x1f,pdata
+	beq type_fhs, p_transmit_fhs
+
+
+
+p_transmit_fhs:
+	call fetch_self_bt_adr
+	pulse recalc
+	enable user
+	call p_fec2_init
+	fetch 1,mem_fhs_am_addr            /* this is the am_addr to assign to slave */
+	icopy am_addr
+	fetch 1,mem_fhs_misc
+	icopy fhs_misc    /* [7:6]SR [5:4]SP [3:1]PS [0]undef  */
+	fetch 3,mem_class   /* store away class */
+	icopy fhs_class
+	copy bt_adr,rega
+	nop 12                    /* 30 cycles after recalc for sync word generation */
+	copy bt_clk,timeup
+	fetch 4,mem_clkn_bt
+	icopy bt_clk
+	preload fhs0
+	iforce temp
+	arg 32,loopcnt
+	call p_fec2
+	preload fhs0
+	set1 58,pdata		/* eir */
+	rshift32 pdata,temp
+	arg 40,loopcnt
+	call p_fec2
+	preload fhs1
+	iforce temp
+	arg 32,loopcnt
+	call p_fec2
+	preload fhs1
+	rshift32 pdata,temp
+	arg 40,loopcnt
+	call p_fec2
+	copy timeup,bt_clk
+	copy rega,bt_adr
+	copy regc,temp
+	arg 16,loopcnt
+	disable user
+	call p_fec2
+	branch end_of_packet
+	
+// hec or crc is in regc
+p_hec:
+	deposit temp
+	ixor regc,pdata
+	rshift regc,regc
+	rtnbit0 0
+	xor_into 0xe5,regc
+	rtn
+
+// hec or crc is in regc
+p_crc:
+	deposit temp
+	ixor regc,pdata
+	rshift regc,regc
+	rtnbit0 0
+	setarg 0x8408
+	ixor regc,regc
+	rtn
+
+
+// white is in debug
+p_white:
+	isolate1 6,debug
+	lshift debug,debug
+	nrtn true
+	xor_into 0x11,debug
+	xor_into 1,temp
+	rtn
+
+// data in temp, length in loopcnt
+p_head:
+	call p_hec
+	call p_white
+	isolate0 0,temp
+	setarg 0
+	branch p_fec1_0,true
+	setarg 7
+p_fec1_0:
+	inject mod,3
+	rshift temp,temp
+	loop p_head
+	rtn
+
+p_fec0:
+	call p_white
+	deposit temp
+	inject mod,1
+	loop p_fec0
+	rtn
+
+p_fec2:
+	call p_crc,user
+	call p_white
+	deposit temp
+	ixor alarm,pdata
+	rshift alarm,alarm
+	bbit0 0,p_fec2_zero
+	xor_into 0x15,alarm
+p_fec2_zero:
+	deposit temp
+	inject mod,1
+	rshift temp,temp
+	increase -1,queue
+	nbranch p_fec2_nf,zero
+	deposit alarm
+	inject mod,5
+	call p_fec2_init
+p_fec2_nf:
+	loop p_fec2	
+	rtn
+
+p_fec2_init:
+	arg 10,queue
+	arg 0,alarm
+	rtn
+
+
+ifdef NULL
+sim_250k:
+	call init_250k
+	hfetch 1,1
+	bbit1 7,sim_250k_rx
+	call tx_radio_freq
+	call start_transmitter	/* get ready for that id packet */
+	nop 600
+	enable encode_fec0
+	set1 TXGFSK,radio_ctrl
+	force 0,pdata
+	inject mod,9
+	setarg 0xaa
+	inject mod,8
+	preload access
+	inject mod,32
+	setarg 0x1da861
+	inject mod,24
+	setarg 0x94445b
+	inject mod,24
+	setarg 0x1275f
+	inject mod,24
+	branch loop
+sim_250k_rx:
+	call rx_radio_freq
+	call start_receiver	/* wait for that id packet from master */
+	enable decode_fec0
+	correlate null,never
+	parse demod,bucket,72
+	branch loop
+
+	
+
+
+
+sim_uart:
+	setarg mem_le_test_uart_rxbuf
+	hstore 2,core_uart_tsaddr
+	hstore 2,core_uart_twptr
+	hstore 2,core_uart_trptrp
+	increase 0x80,pdata
+	hstore 2,core_uart_teaddr
+	hstore 2,core_uart_rsaddr
+	hstore 2,core_uart_rrptr
+	increase 0x80,pdata
+	hstore 2,core_uart_readdr
+	increase 1,pdata
+	jam 0x84,core_gpio_sel1
+	jam 0x80,core_gpio_pu2
+	jam 0xe5,core_uart_ctrl
+	setarg 0x30
+	hstore 2,core_uart_baud
+	hfetch 1,1
+	bbit1 7,sim_uart_wait
+	setarg 0x1357d9a
+	store 4,mem_le_test_uart_rxbuf
+	setarg 0x55aa69
+	istore 3,contw
+	setarg 0xfedcb3
+	istore 3,contw
+	deposit contw
+	hstore 2,core_uart_twptr
+sim_uart_wait:
+	nop 20000
+	rtn
+
+sim_spi:
+	call spid_init_flash
+	call spid_unlock_flash
+	call spid_init
+	setarg 0x35
+	call spid_read_reg
+	nop 200
+	force 4,temp
+	setarg 0x42
+	branch spid_read_regs
+
+sim_eep:
+	call iicd_init_12m
+	setarg 3
+	hstore 2,core_iicd_txlen
+	setarg 0x1f051e
+	store 3,mem_iicd_addr
+	setarg mem_iicd_addr
+	hstore 2,core_iicd_txaddr
+	setarg 1
+	hstore 2,core_iicd_rxlen
+	jam 3,core_iicd_ctrl
+	jam iicd_start,core_misc_ctrl
+	call wait_iicd_done
+	nop 200
+	setarg 0x18f7a3b
+	store 4,mem_iicd_addr
+	arg mem_iicd_addr,rega
+	arg 4,temp
+	setarg 0x1235
+	call iicd_write_eep
+	nop 300
+	arg mem_ucode_keybuf,rega
+	arg 1,temp
+	setarg 0x3512
+	store 2,mem_addr_mi
+	call iicd_read_eep
+	arg 1,temp
+	setarg 0x3512
+	store 2,mem_addr_mi
+	call iicd_read_eep
+	nop 200
+	setarg 0xa1
+	arg 3,temp
+	arg mem_ucode_keybuf,rega
+	branch iicd_read_data
+
+sim_otp:
+	setarg 0x123456
+	store 3,0x800
+	setarg 0x10
+	arg 0x800,rega
+	arg 0x10,loopcnt
+	branch otp_write
+
+sim_clk:
+	add lpo_time,12,alarm
+	snooze
+clock_loop:
+	nop 100
+	jam 1,core_config
+	setflag user,0,pdata
+	random pdata
+	and_into 0x1f,pdata
+	hstore 1,core_clksel
+	nop 70
+	jam 2,core_kick
+	nop 200
+	branch clock_loop
+	jam 2,core_clksel
+	setarg 1500
+	call sleep
+	jam 0x42,core_clksel
+	add lpo_time,200,alarm
+	snooze
+	branch 0x4000
+
+sim_c1:
+	setarg 0xb4b5b6
+	store 3,mem_le_lap
+	setarg 0xb1b2b3
+	istore 3,contw
+	setarg 0xa4a5a6
+	store 3,mem_le_plap
+	setarg 0xa1a2a3
+	istore 3,contw
+	setarg 0x101
+	store 4,mem_le_preq
+	setarg 0x70710
+	istore 3,contw
+	setarg 0x302
+	store 4,mem_le_pres
+	setarg 0x50008
+	istore 3,contw
+
+	arg regidx_key,regext_index
+	arg 4,loopcnt
+sim_clear_key_loop:
+	arg 0,regext
+	increase 1,regext_index
+	loop sim_clear_key_loop
+
+	setarg 0x702EE0
+	store 3,mem_le_rconfirm
+	setarg 0x274EC6
+	istore 3,contw
+	setarg 0x0E6388
+	istore 3,contw
+	setarg 0x56AD6F
+	istore 3,contw
+	setarg 0x83D521
+	istore 3,contw
+	setarg 0x57	
+	istore 1,contw
+	arg mem_le_rconfirm,rega
+	call aes_init
+	call function_c1
+	branch loop
+endif
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/simple_pairing.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/simple_pairing.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/simple_pairing.prog	(working copy)
@@ -0,0 +1,2362 @@
+
+publickey_init:
+	fetch 1,mem_ssp_enable
+	nbranch sp_initialize,blank
+	branch sp_initialize_256
+
+sp_calc_sequence_256_check:
+	bpatchx patch3c_4,mem_patch3c
+	fetch 1,mem_ssp_enable
+	rtn blank
+	fetch 1,mem_sp_local_key_invalid
+	rtnne SP_KEY_VALID
+	fetch 1,mem_le_secure_connect_enable
+	rtn blank
+	fetch 1,mem_le_sc_local_key_invalid
+	rtneq SP_KEY_VALID_256
+	fetch 2,mem_ui_state_map
+	bbit1 UI_STATE_BT_CONNECTED,stop_publickey_calc_256
+	fetch 1,mem_le_sc_calc
+	beq SP_CALC_STANDBY,sp_initialize_256
+	rtn
+stop_publickey_calc_256:
+	jam SP_CALC_STANDBY,mem_le_sc_calc	
+	rtn
+	
+ifdef SIMPLE_PAIRING
+
+sp_initialize:
+	bpatchx patch3c_5,mem_patch3c
+	fetch 1,mem_ssp_enable 
+	branch ssp_disable, blank
+	call ssp_enable
+	call sp_clear_flags
+	branch sp_pubkey_calc 
+	
+sp_clear_flags:
+	setarg 0
+	store 8,mem_sp_state_start
+	store 4,mem_sp_flag_start
+	store 7,mem_sp_iocap_remote
+	rtn
+
+sp_generate_local_key:
+	jam SP_FLAG_COMMIT,mem_sp_flag  
+	branch sp_generate_local_key0
+sp_master_generate_local_key:
+	fetch 1,mem_sp_local_key_invalid
+	beq SP_KEY_VALID,sp_dhkey_calc
+	branch assert
+sp_generate_local_key0:
+	fetch 1,mem_sp_local_key_invalid
+	beq SP_KEY_VALID,sp_start_send_pubkey
+	branch sp_pubkey_calc
+    
+sp_start_send_pubkey:
+	call sp_dhkey_calc
+	fetch 1,mem_master_sp_state
+	nrtn blank
+	jam SP_STAT_KEY_SEND,mem_sp_state
+	rtn
+
+
+sp_calc_check_publickey_256:
+	call sp_calc_b256
+	arg mem_le_pubkey_remote_y_256,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod_256   
+	arg mem_le_pubkey_remote_x_256,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod_256   
+  	arg mem_t2_256,regA
+	arg mem_le_pubkey_remote_x_256,regB
+	arg mem_t2_256,contw
+	call bn_mulmod_256	
+  	arg mem_a_256,regA
+	arg mem_le_pubkey_remote_x_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256	
+  	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod_256	 
+  	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	call bn_addmod_256	 
+	arg 32,loopcnt
+  	arg mem_t7_256,regA
+	arg mem_t0_256,regB
+	branch  string_compare
+	
+sp_calc_b256:
+	arg mem_gy_256,regA
+	arg mem_t0_256,contw
+	call bn_sqrmod_256   
+	arg mem_gx_256,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod_256    
+  	arg mem_t2_256,regA
+	arg mem_gx_256,regB
+	arg mem_t2_256,contw
+	call bn_mulmod_256	
+  	arg mem_a_256,regA
+	arg mem_gx_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256	 
+  	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod_256	 
+  	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	branch  bn_submod_256	
+	
+sp_calc_check_publickey:
+	call sp_calc_b
+	arg mem_sp_pubkey_remote_y,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod 
+	arg mem_sp_pubkey_remote_x,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod
+  	arg mem_t2_256,regA
+	arg mem_sp_pubkey_remote_x,regB
+	arg mem_t2_256,contw
+	call bn_mulmod	
+  	arg mem_a,regA
+	arg mem_sp_pubkey_remote_x,regB
+	arg mem_t3_256,contw
+	call bn_mulmod	
+  	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod	 
+  	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	call bn_addmod	 
+ 	arg 24,loopcnt
+ 	arg mem_t7_256,regA
+	arg mem_t0_256,regB
+	branch  string_compare
+	
+sp_calc_b:
+	arg mem_gy,regA
+	arg mem_t0_256,contw
+	call bn_sqrmod   
+	arg mem_gx,regA
+	arg mem_t2_256,contw
+  	call bn_sqrmod
+  	arg mem_t2_256,regA
+	arg mem_gx,regB
+	arg mem_t2_256,contw
+	call bn_mulmod	
+	arg mem_a,regA
+	arg mem_gx,regB
+	arg mem_t3_256,contw
+	call bn_mulmod	 
+  	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod	 
+  	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	branch  bn_submod	
+
+   
+sp_calculate_commitment:
+	fetch 1,mem_sp_calc
+	bne SP_CALC_STANDBY,sp_calculate_commitment_wait_dhkey_calc
+	call sp_local_random_key_generator
+	arg mem_sp_prarm_stack,contw
+	setarg mem_sp_random_local_end
+	istore 2,contw
+	setarg mem_sp_pubkey_local_x_end
+	istore 2,contw
+	setarg mem_sp_pubkey_remote_x_end
+	istore 2,contw
+	branch sp_calculate_commitment0
+master_sp_calculate_commitment:
+	arg mem_sp_prarm_stack,contw
+	setarg mem_sp_random_remote_end
+	istore 2,contw
+	setarg mem_sp_pubkey_remote_x_end
+	istore 2,contw
+	setarg mem_sp_pubkey_local_x_end
+	istore 2,contw
+sp_calculate_commitment0:
+	call function_f1
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_COMMIT_CALC,master_sp_calculate_commitment0
+	jam SP_FLAG_COMMIT,mem_sp_flag
+	jam SP_STAT_COMMIT_SEND,mem_sp_state
+	rtn
+master_sp_calculate_commitment0:
+	jam SP_STAT_COMMITMENT_COMPARE,mem_master_sp_state
+	call sp_master_generate_local_key
+	branch master_set_mem_master_sp_flag 
+
+sp_local_random_key_generator:
+	arg mem_sp_random_local,contw
+	force 8,queue
+	branch random_generator
+  
+sp_calculate_commitment_wait_dhkey_calc:
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	rtn
+    
+sp_confirm_check:
+    /* calculate Ea here */
+	bpatchx patch3c_6,mem_patch3c
+	arg      mem_addr_value,contw
+	fetch    6,mem_lap
+	istore   6,contw
+	fetch    6,mem_plap
+	istore   6,contw
+	fetch    3,mem_sp_iocap_remote
+	istore   3,contw 
+
+	call     function_f3a
+
+	arg      mem_sp_calc_result_high,regA
+	arg      mem_sp_check_result,regB    
+	force    4,queue 
+	call     compare4
+	nbranch  sp_confirm_check_failed,true  
+
+	call sp_confirm_check_success
+	jam LMP_DHKey_Check,mem_lmi_opcode2
+	branch tid_set_reply
+    
+sp_confirm_check_success:
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_CONFIRM_CHECK,sp_confirm_check_success_master
+	jam SP_STAT_CONFIRM_CALC,mem_sp_state
+	jam SP_FLAG_COMMIT,mem_sp_flag  
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	rtn
+sp_confirm_check_success_master:
+	jam LMP_ACCEPTED,mem_lmo_opcode2
+	jam SP_STATE_END,mem_master_sp_state
+	branch master_set_mem_master_sp_flag
+	//accept opcode?
+	
+sp_confirm_check_failed:
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_CONFIRM_CHECK,sp_confirm_check_failed_master
+	jam SP_STAT_NULL,mem_sp_state
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	//accept opcode?
+	jam      AUTHENTICATION_FAILURE_ERROR,mem_lmo_reason2 
+	rtn
+sp_confirm_check_failed_master:
+	jam LMP_NOT_ACCEPTED,mem_lmo_opcode2
+	jam SP_STAT_NULL,mem_master_sp_state
+	rtn
+    
+sp_confirm_calc:
+	fetch 1,mem_sp_dh_ready
+	beq SP_FLAG_COMMIT, sp_confirm_calc_ready
+	jam 	SP_STAT_CONFIRM_CALC,mem_master_sp_state
+	branch master_set_mem_master_sp_flag
+sp_confirm_calc_ready:
+	arg      mem_addr_value,contw
+	fetch    6,mem_plap
+	istore   6,contw
+	fetch    6,mem_lap
+	istore   6,contw
+	fetch    3,mem_sp_iocap_local
+	istore   3,contw 
+
+	call     function_f3b
+	fetch 1,mem_master_sp_state
+	beq SP_STAT_CONFIRM_CALC,sp_confirm_calc_master
+	jam      SP_STAT_CONFIRM_SEND,mem_sp_state
+	jam      SP_FLAG_COMMIT,mem_sp_flag
+	rtn
+sp_confirm_calc_master:
+	jam      SP_STAT_CONFIRM_SEND,mem_master_sp_state
+	jam      SP_FLAG_COMMIT,mem_master_sp_flag
+	rtn   
+
+sp_master_key_prarm_push:
+	arg mem_sp_prarm_stack,contw
+	fetch    6,mem_plap
+	istore   6,contw
+	fetch    6,mem_lap
+	istore   6,contw
+	setarg mem_sp_random_local_end
+	istore 2,contw
+	setarg mem_sp_random_remote_end
+	istore 2,contw
+	branch sp_link_key_calc
+sp_link_key_prarm_push:
+	jam      SP_STAT_DONE,mem_sp_state    
+	arg mem_sp_prarm_stack,contw
+	fetch    6,mem_lap
+	istore   6,contw
+	fetch    6,mem_plap
+	istore   6,contw
+	setarg mem_sp_random_remote_end
+	istore 2,contw
+	setarg mem_sp_random_local_end
+	istore 2,contw
+sp_link_key_calc:
+    /*calculate Link key here */
+	arg      mem_addr_value,contw
+	fetch    6,mem_sp_prarm_stack
+	istore   6,contw
+	fetch    6,mem_sp_prarm_stack+6
+	istore   6,contw
+	
+	call     function_f2    
+
+	/*handle linkkey  */
+	jam 1,mem_link_key_exists
+	arg mem_link_key,contw
+	arg mem_sp_calc_result_high,contr
+	call memcpy16
+	branch  generate_linkkey_continue
+
+    
+sp_pubkey_calc:
+	bpatchx patch3c_7,mem_patch3c
+	fetch    1,mem_sp_local_key_invalid
+	rtnne SP_KEY_INVALID
+	fetch    1,mem_sp_calc
+	rtnne  SP_CALC_STANDBY
+	arg      mem_sp_private_key,contw 
+	force    11,queue
+	call     random_generator
+	random   pdata
+	rshift   pdata,pdata
+	istore   2,contw 
+/* we don't need fixed private key,generate random key instead */ 
+	arg      mem_k,contw
+	arg      mem_sp_private_key,contr	
+	call     memcpy24 //mem_sp_private_key=>mem_k 24BYTES
+
+	arg      mem_ax,contw
+	arg      mem_gx,contr
+	call     memcpy48 //mem_gx=>mem_ax 48bytes
+
+	arg      mem_az,contw
+	call     bn_zero
+	jam      1,mem_az //0=>mem_az 24bytes
+
+	call     eckp_calc_init
+	jam SP_CALC_PUBKEY,mem_sp_calc
+	rtn    
+	
+sp_pubkey_generated:
+	arg      mem_sp_pubkey_local,contw
+	arg      mem_bx,contr
+	call     memcpy48   
+	jam      SP_KEY_VALID,mem_sp_local_key_invalid
+	jam      SP_CALC_STANDBY,mem_sp_calc
+	rtn
+
+sp_dhkey_calc:
+	bpatchx patch3d_0,mem_patch3d
+	fetch    1,mem_sp_dhkey_invalid
+	rtnne  SP_KEY_INVALID
+	fetch    1,mem_sp_calc
+	rtnne  SP_CALC_STANDBY
+
+	arg      mem_k,contw
+	arg      mem_sp_private_key,contr	
+	call     memcpy24
+
+	arg      mem_ax,contw
+	arg      mem_sp_pubkey_remote,contr
+	call     memcpy48
+
+	arg      mem_az,contw
+	call     bn_zero
+	jam      1,mem_az
+
+	call     eckp_calc_init
+	jam      SP_CALC_DHKEY,mem_sp_calc
+	rtn 	
+	
+sp_dhkey_generated:
+	jam SP_FLAG_COMMIT,mem_sp_dh_ready
+	arg mem_sp_dhkey,contw
+	arg mem_bx,contr
+	call memcpy24
+	jam SP_KEY_VALID,mem_sp_dhkey_invalid
+	jam SP_CALC_STANDBY,mem_sp_calc
+	rtn
+
+random_generator:
+	increase -1,queue
+	nrtn     positive
+	random   pdata
+	istore   2,contw  
+	branch   random_generator
+compare4:
+	increase -1,queue
+	nbranch  compare4_success,positive
+	ifetch   4,regA
+	copy     pdata,temp
+	ifetch   4,regB
+	iflip    temp,pdata
+	nbranch  compare4_failed,zero
+	increase 4,regA
+	increase 4,regB
+	branch   compare4
+compare4_failed:
+	disable  true
+	rtn
+compare4_success:
+	enable   true
+	rtn
+
+/*************************************************/
+/** Message state machine routines ***************/
+/*************************************************/
+// simple pairing support 
+
+simple_pairing_sequence:
+	bpatchx patch3d_1,mem_patch3d
+         fetch 1,mem_sp_flag
+         rtn blank
+	call lmo_fifo_check
+	nrtn blank
+	jam      SP_FLAG_STANDBY,mem_sp_flag
+	fetch    1,mem_sp_state
+	beq  SP_STAT_KEY_SEND,sp_send_LMP_ENCAPSULATED_HEADER
+	beq  SP_STAT_COMMIT_SEND,sp_send_LMP_SIMPLE_PAIRING_COMFIRM
+	beq  SP_STAT_RANDOM_SEND,sp_send_LMP_SIMPLE_PAIRING_NUMBER
+	beq  SP_STAT_CONFIRM_SEND,sp_send_LMP_DHKEY_CHECK
+	beq  SP_STAT_KEY_GENERATE,sp_generate_local_key
+	beq  SP_STAT_COMMIT_CALC,sp_calculate_commitment
+	beq  SP_STAT_CONFIRM_CHECK,sp_confirm_check
+	beq  SP_STAT_CONFIRM_CALC,sp_confirm_calc
+	beq  SP_STAT_LINK_KEY_CALC,sp_link_key_prarm_push
+	//beq  SP_STAT_FEATURE_EXT_SEND,send_LMP_FEATURES_REQ_EXT
+	rtn  
+
+master_simple_paring_sequence:
+	bpatchx patch3d_2,mem_patch3d
+	fetch 1,mem_master_sp_flag
+	rtn blank
+	call lmo_fifo_check
+	nrtn blank
+	jam SP_FLAG_STANDBY,mem_master_sp_flag
+	fetch 1,mem_master_sp_state
+	beq SP_MASTER_STAT_START_SKIP,sp_master_send_io_cap_get
+	beq SP_MASTER_STAT_START_DONE,sp_master_send_io_cap_send
+	beq SP_STAT_KEY_SEND,sp_master_send_LMP_ENCAPSULATED_HEADER
+	beq SP_STAT_COMMIT_CALC,master_sp_calculate_commitment
+	beq SP_STAT_COMMITMENT_COMPARE,sp_master_commitment_compare
+	beq SP_STAT_RANDOM_SEND,sp_master_send_LMP_SIMPLE_PAIRING_NUMBER
+	beq SP_STAT_CONFIRM_CALC,sp_confirm_calc
+	beq SP_STAT_CONFIRM_SEND,master_sp_send_lmp_dhkey_check
+	beq SP_STAT_CONFIRM_CHECK,sp_confirm_check
+	beq SP_STATE_END,master_sp_sm_end
+	rtn
+
+master_set_mem_master_sp_flag:
+	jam SP_FLAG_COMMIT,mem_master_sp_flag
+	rtn
+	
+master_clear_mem_master_sp_flag:
+	jam SP_FLAG_STANDBY,mem_master_sp_flag
+	rtn
+sp_calc_sequence:
+	bpatchx patch3d_3,mem_patch3d
+	fetch 1,mem_ssp_enable
+	rtn blank
+	fetch 1,mem_sp_calc
+	rtn blank
+	increase 0x80,pdata
+	store    1,mem_sp_calc
+	rtnbit1 7
+	fetch    1,mem_ec_loopc
+	branch   sp_calc_sequence_done,blank
+	branch   eckp_calc
+
+sp_calc_sequence_done:    
+	call ecunmapz
+	fetch 1,mem_sp_calc
+	beq  SP_CALC_PUBKEY,sp_pubkey_generated
+	beq  SP_CALC_DHKEY,sp_dhkey_generated
+	rtn
+
+
+bn_testbit:
+	and pdata,7,queue
+	rshift3 pdata,pdata
+	iadd contr,contr
+	ifetch 1,contr
+	qisolate0 pdata
+	rtn
+
+
+ec_copy:
+	call memcpy24
+	call memcpy24
+	branch memcpy24
+	
+	
+bn_eq_zero:
+	ifetch 8,contr
+	nrtn blank
+	ifetch 8,contr
+	nrtn blank
+	ifetch 8,contr
+	rtn
+	
+	
+	/* return zero if eq */
+
+bn_eq_0:	
+	ifetch 4,regA
+	iforce temp
+	ifetch 4,regB
+	isub temp,null
+	nrtn zero
+	increase 4,regA
+	increase 4,regB
+	loop bn_eq_0
+	rtn
+
+	/* return positive if A >= B */
+bn_bigeq:
+	force 6,loopcnt
+	increase 20,regA
+	increase 20,regB
+bn_bigeq_0:	
+	ifetch 4,regB
+	iforce temp
+	ifetch 4,regA
+	isub temp,pdata
+	nrtn positive
+	nrtn blank
+	increase -4,regA
+	increase -4,regB
+	loop bn_bigeq_0
+	rtn
+
+bn_add:
+	force 6,loopcnt
+	force 0,regC
+bn_add_0:	
+	ifetch 4,regA
+	iforce temp
+	ifetch 4,regB
+	iadd temp,pdata
+	iadd regC,pdata
+	istore 4,contw
+	isolate1 32,pdata
+	setflag true,0,regC
+	increase 4,regA
+	increase 4,regB
+	loop bn_add_0
+	rtn
+
+bn_sub:
+	force 6,loopcnt
+	force 0,regC
+bn_sub_0:	
+	ifetch 4,regB
+	iforce temp
+	ifetch 4,regA
+	isub temp,pdata
+	isub regC,pdata
+	istore 4,contw
+	isolate1 32,pdata
+	setflag true,0,regC
+	increase 4,regA
+	increase 4,regB
+	loop bn_sub_0
+	rtn
+
+bn_rshift6:
+	force 6,loopcnt
+	increase 20,regA
+bn_rshift:
+	force 0,regC
+bn_rshift_0:	
+	ifetch 4,regA
+	isolate1 0,pdata
+	setflag true,1,regC
+	rshift pdata,pdata
+	isolate1 0,regC
+	setflag true,31,pdata
+	istore 4,regA
+	increase -4,regA
+	rshift regC,regC
+	loop bn_rshift_0
+	rtn
+
+bn_lshift:
+	force 6,loopcnt
+	force 0,regC
+bn_lshift_0:	
+	ifetch 4,regA
+	isolate1 31,pdata
+	setflag true,1,regC
+	lshift pdata,pdata
+	isolate1 0,regC
+	setflag true,0,pdata
+	istore 4,regA
+	increase 4,regA
+	rshift regC,regC
+	loop bn_lshift_0
+	rtn
+	
+bn_lshiftmod:
+	call bn_lshift
+bn_lshiftmod_ismod:	
+	isolate1 0,regC
+	branch bn_lshiftmod_0,true
+	arg mem_p,regB
+	copy regA,regC
+	increase -24,regA
+	call bn_bigeq
+	nrtn positive
+	copy regC,regA
+bn_lshiftmod_0:
+	increase -24,regA
+	arg mem_p,regB
+	copy regA,contw
+	branch bn_sub
+	
+
+bn_addmod:
+	call bn_add
+	copy contw,regA
+	branch bn_lshiftmod_ismod
+	
+bn_submod:
+	call bn_sub
+	isolate0 0,regC
+	rtn true
+	arg mem_p,regB
+	add contw,-24,regA
+	copy regA,contw
+	branch bn_add
+	
+
+bn_p192mod:
+	copy contw,timeup				/* save result ptr */
+	copy regA,alarm				/* temp save regA */
+	arg mem_tmp2,regB
+	copy regB,contw
+	add regA,24,contr
+	ifetch 8,contr
+	istore 8,contw
+	istore 8,contw
+	force 0,pdata
+	istore 8,contw
+	copy timeup,contw
+	call bn_addmod
+	arg mem_tmp2,regB
+	copy regB,contw
+	force 0,pdata
+	istore 8,contw
+	add alarm,32,contr
+	ifetch 8,contr
+	istore 8,contw
+	istore 8,contw
+	copy timeup,regA
+	copy regA,contw
+	call bn_addmod
+	arg mem_tmp2,regB
+	copy regB,contw
+	add alarm,40,contr
+	ifetch 8,contr
+	istore 8,contw
+	istore 8,contw
+	istore 8,contw
+	copy timeup,regA
+	copy regA,contw
+	branch bn_addmod
+		
+
+bn_load:
+	force 6,loopcnt
+bn_load_0:	
+	ifetch 4,contr
+	iforce regext
+	increase 1,regext_index
+	loop bn_load_0
+	rtn
+
+
+	/* cost 1562 clks */	
+bn_mulmod:
+	copy contw,timeup					/* save result ptr */
+	arg mem_tmp1,contw
+	call bn_zero
+	arg mem_tmp1,contw
+	copy regA,contr
+	force 0,regext_index
+	call bn_load
+	copy regB,contr
+	call bn_load
+	force 0,regB
+bn_mulmod_1:	
+	force 0,temp
+	force 6,regC
+bn_mulmod_0:
+	ifetch 4,contw					/* d[i+j] */
+	iforce regA
+	copy regB,regext_index
+	deposit regext
+	copy regC,regext_index
+	imul32 regext,pdata
+	iadd regA,pdata					/* uv = a[i]*b[j] + d[i+j] */
+	iadd temp,pdata					/* uv += u */
+	istore 4,contw					/* ->d[i+j] */
+	rshift32 pdata,temp				/* temp = u = uv >> 32 */
+	increase 1,regC
+	compare 12,regC,0xff
+	nbranch bn_mulmod_0,true
+	deposit temp
+	istore 4,contw					/* d[i + 12] = u */
+	increase -24,contw
+	increase 1,regB
+	compare 6,regB,0xff
+	nbranch bn_mulmod_1,true
+	arg mem_tmp1,regA
+	copy timeup,contw
+	branch bn_p192mod
+
+	
+bn_sqrmod:
+	copy regA,regB
+	branch bn_mulmod
+
+bn_rshifteven:
+	copy regA,alarm
+bn_rshifteven_1:
+	copy alarm,regA
+	ifetch 1,regA
+	isolate1 0,pdata
+	rtn true
+	call bn_rshift6
+	ifetch 1,regB
+	isolate0 0,pdata
+	branch bn_rshifteven_0,true
+	arg mem_p,regA
+	copy regB,contw
+	call bn_add
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB						/* [6] */
+	increase -24,regB
+bn_rshifteven_0:
+	add regB,24,regA
+	force 7,loopcnt
+	call bn_rshift
+	branch bn_rshifteven_1
+
+	/* cost 141910 clks */
+bn_invmod:
+	copy contw,timeup					/* save result ptr */
+	arg mem_tmp0,contw				/* x */
+	call bn_zero
+	force 0,pdata
+	store 4,mem_tmp5
+	store 4,mem_t2
+	jam 1,mem_tmp0
+	arg mem_tmp1,contw				/* y */
+	call bn_zero
+	arg mem_p,contr
+	arg mem_tmp2,contw				/* a */
+	call memcpy24
+	copy regA,contr
+	arg mem_tmp3,contw				/* b */
+	call memcpy24
+bn_invmod_2:	
+	arg mem_tmp3,contr
+	call bn_eq_zero
+	branch bn_invmod_0,blank
+	arg mem_tmp3,regA
+	arg mem_tmp0,regB
+	call bn_rshifteven
+
+	arg mem_tmp2,regA
+	arg mem_tmp1,regB
+	call bn_rshifteven
+	arg mem_tmp3,regA
+	arg mem_tmp2,regB
+	call bn_bigeq
+	branch bn_invmod_1,positive
+	arg mem_tmp2,regA
+	arg mem_tmp3,regB
+	copy regA,contw
+	call bn_sub
+	arg mem_tmp0,regA
+	arg mem_tmp1,regB
+	copy regB,contw
+	call bn_add
+	ifetch 1,regA
+	iadd regC,regC
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB
+	branch bn_invmod_2
+bn_invmod_1:
+	arg mem_tmp3,regA
+	arg mem_tmp2,regB
+	copy regA,contw
+	call bn_sub
+	arg mem_tmp1,regA
+	arg mem_tmp0,regB
+	copy regB,contw
+	call bn_add
+	ifetch 1,regA
+	iadd regC,regC
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB
+	branch bn_invmod_2
+bn_invmod_0:
+	arg mem_tmp0,contw
+	call bn_zero
+	fetch 1,mem_tmp5
+	store 1,mem_tmp0
+	store 1,mem_tmp0a
+	arg mem_tmp0,regA
+	arg mem_tmp1,regB
+	copy regB,contw
+	call bn_addmod
+	arg mem_p,regA
+	arg mem_tmp1,regB
+	copy timeup,contw
+	branch bn_submod
+	
+
+
+	/* cost 64742 clks */
+ecdbl:
+	arg mem_cz,regA
+	arg mem_t2,contw
+	call bn_sqrmod
+	arg mem_t2,regA
+	arg mem_t3,contw
+	call bn_sqrmod
+	arg mem_a,regA
+	arg mem_t3,regB
+	arg mem_t3,contw
+	call bn_mulmod		/* t3=a*z4	*/
+	arg mem_cx,regA
+	arg mem_t2,contw
+	call bn_sqrmod
+	arg mem_t2,contr
+	arg mem_t1,contw
+	call memcpy24
+	arg mem_t1,regA
+	call bn_lshiftmod
+	arg mem_t2,regA
+	arg mem_t1,regB
+	arg mem_t2,contw
+	call bn_addmod
+	arg mem_t2,regA
+	arg mem_t3,regB
+	arg mem_t2,contw
+	call bn_addmod		/* t2=3*x2 + z*z4		D  */
+	arg mem_cx,contr
+	arg mem_t1,contw
+	call memcpy24
+	arg mem_cy,regA
+	arg mem_t3,contw
+	call bn_sqrmod
+	arg mem_t1,regA
+	call bn_lshiftmod
+	arg mem_t1,regA
+	call bn_lshiftmod
+	arg mem_t1,regA		
+	arg mem_t3,regB
+	arg mem_t1,contw
+	call bn_mulmod		/* t1=4x*y2	B	*/
+	arg mem_t3,regA
+	arg mem_t0,contw
+	call bn_sqrmod
+	arg mem_t0,regA
+	call bn_lshiftmod
+	arg mem_t0,regA
+	call bn_lshiftmod		
+	arg mem_t0,regA		
+	call bn_lshiftmod		/* t0=8*y4		C */
+	arg mem_cy,contr
+	arg mem_t3,contw
+	call memcpy24
+	arg mem_t3,regA
+	call bn_lshiftmod
+	arg mem_t3,regA
+	arg mem_cz,regB
+	arg mem_cz,contw
+	call bn_mulmod		
+	arg mem_t2,regA
+	arg mem_t3,contw
+	call bn_sqrmod
+	arg mem_t3,regA
+	arg mem_t1,regB
+	arg mem_t3,contw
+	call bn_submod
+	arg mem_t3,regA
+	arg mem_t1,regB
+	arg mem_cx,contw
+	call bn_submod
+	arg mem_t1,regA
+	arg mem_cx,regB
+	arg mem_t3,contw
+	call bn_submod
+	arg mem_t3,regA
+	arg mem_t2,regB
+	arg mem_t3,contw
+	call bn_mulmod		
+	arg mem_t3,regA
+	arg mem_t0,regB
+	arg mem_cy,contw
+	branch bn_submod
+	
+
+	/* cost 104904	clks */
+ecadd:
+	arg mem_az,regA
+	arg mem_t7,contw
+	call bn_sqrmod
+	arg mem_cx,regA
+	arg mem_t7,regB
+	arg mem_t0,contw
+	call bn_mulmod		/* n1=t0=xa*zb2  */
+	arg mem_az,regA
+	arg mem_t7,regB
+	arg mem_t7,contw
+	call bn_mulmod	
+	arg mem_cy,regA
+	arg mem_t7,regB
+	arg mem_t1,contw
+	call bn_mulmod		/* n2=t1=ya*zb3 */
+	arg mem_cz,regA
+	arg mem_t7,contw
+	call bn_sqrmod
+	arg mem_ax,regA
+	arg mem_t7,regB
+	arg mem_t2,contw
+	call bn_mulmod		/* n3=t2=xb*za2 */
+	arg mem_cz,regA
+	arg mem_t7,regB
+	arg mem_t7,contw
+	call bn_mulmod	
+	arg mem_ay,regA
+	arg mem_t7,regB
+	arg mem_t3,contw
+	call bn_mulmod		/* n4=t3=yb*za3 */
+	arg mem_t0,regA
+	arg mem_t2,regB
+	arg mem_t7,contw
+	call bn_submod		/* n5=t7=n1-n3=t0-t2 */
+	arg mem_t0,regA
+	arg mem_t2,regB
+	arg mem_t0,contw
+	call bn_addmod		/* n7=t0=n1+n3=t0+t2 */
+	arg mem_t1,regA
+	arg mem_t3,regB
+	arg mem_t2,contw
+	call bn_submod		/* n6=t2=n2-n4=t1-t3 */
+	arg mem_t1,regA
+	arg mem_t3,regB
+	arg mem_t1,contw
+	call bn_addmod		/* n8=t1=n2+n4=t1+t3 */
+	arg mem_t1,regA
+	arg mem_t7,regB
+	arg mem_t1,contw
+	call bn_mulmod		/* t1=n8*n5 */
+	arg mem_cz,regA
+	arg mem_az,regB
+	arg mem_t3,contw
+	call bn_mulmod	
+	arg mem_t3,regA
+	arg mem_t7,regB
+	arg mem_cz,contw
+	call bn_mulmod		/* z=za*zb*n5 */
+	arg mem_t7,regA
+	arg mem_t7,contw
+	call bn_sqrmod		/* t7=n5^2 */
+	arg mem_t7,regA
+	arg mem_t0,regB
+	arg mem_t3,contw
+	call bn_mulmod		/* t3=n5^2*n7 */
+	arg mem_t7,regA
+	arg mem_t1,regB
+	arg mem_t1,contw
+	call bn_mulmod		/* t1=n8*n5^3 */
+	arg mem_t2,regA
+	arg mem_cx,contw
+	call bn_sqrmod		
+	arg mem_cx,regA
+	arg mem_t3,regB
+	arg mem_cx,contw
+	call bn_submod		/* x=n6^2-n5^2*n7 */
+	arg mem_cx,contr
+	arg mem_t7,contw
+	call memcpy24
+	arg mem_t7,regA
+	call bn_lshiftmod		/* t7=2*x */
+	arg mem_t3,regA
+	arg mem_t7,regB
+	arg mem_t3,contw
+	call bn_submod		/* t3=n9 */
+	arg mem_t3,regA
+	arg mem_t2,regB
+	arg mem_t2,contw
+	call bn_mulmod		/* t2=n9*n6 */
+	arg mem_t2,regA
+	arg mem_t1,regB
+	arg mem_cy,contw
+	call bn_submod	
+	arg mem_cy,regA
+	arg mem_p,regB
+	arg mem_cy,contw
+	force 0,regC
+	fetch 1,mem_cy
+	isolate1 0,pdata
+	call bn_add,true
+	copy regC,alarm
+	arg mem_cy,regA
+	call bn_rshift6
+	fetch 1,mem_cy5
+	isolate1 0,alarm
+	setflag true,7,pdata
+	store 1,mem_cy5
+	rtn
+
+	/* cost 22276983 clks */
+
+eckp_0:	
+	fetch 1,mem_ec_loopc
+	increase -1,pdata
+	nrtn positive
+	store 1,mem_ec_loopc
+	fetch 1,mem_ec_infinite
+	call ecdbl,blank
+	fetch 1,mem_ec_loopc
+	arg mem_k,contr
+	call bn_testbit
+	branch eckp_0,true
+	fetch 1,mem_ec_infinite
+	nbranch eckp_1,blank
+	call ecadd
+	branch eckp_0
+eckp_1:
+	jam 0,mem_ec_infinite
+	arg mem_ax,contr
+	arg mem_cx,contw
+	call ec_copy
+	branch eckp_0
+
+	/* cost 162522 clks */
+ecunmapz:
+	arg mem_cz,regA
+	arg mem_t3,contw
+	call bn_invmod			/* t3 = 1/z */
+	arg mem_t3,regA
+	arg mem_t1,contw		
+	call bn_sqrmod			/* t1 = 1/z2 */
+	arg mem_cx,regA
+	arg mem_t1,regB
+	arg mem_bx,contw
+	call bn_mulmod
+	arg mem_t3,regA
+	arg mem_t1,regB
+	arg mem_t2,contw			
+	call bn_mulmod			/* t2 = 1/z3 */
+	arg mem_cy,regA
+	arg mem_t2,regB
+	arg mem_by,contw
+	branch bn_mulmod		
+	
+	
+
+sha_endian_swap2:	
+	ifetch 4,contr
+	force 4,regA
+	increase 3,contw
+sha_endian_loop:	
+	istore 1,contw
+	rshift8 pdata,pdata
+	increase -2,contw
+	increase -1,regA
+	nbranch sha_endian_loop,zero
+	increase 5,contw
+	loop sha_endian_swap2
+	rtn	
+
+
+sha_getw:
+	lshift2 queue,pdata
+	iadd timeup,contr
+	ifetch 4,contr
+	rtn
+	
+sha_r:
+	force 16,alarm
+	arg memdat,timeup
+sha_r_loop:	
+	add alarm,-7,queue
+	call sha_getw
+	iforce temp						/* W[t - 7] */
+	add alarm,-16,queue
+	call sha_getw
+	iadd temp,temp					/* W[t-7] + W[t-16] */
+	add alarm,-2,queue
+	call sha_getw
+	shasx pdata,1,pdata
+	iadd temp,temp					/* S1(W[t -  2]) + W[t-7] + W[t-16] */
+	add alarm,-15,queue
+	call sha_getw
+	shasx pdata,0,pdata
+	iadd temp,temp					/* S0(W[t - 15]) + S1(W[t -  2]) + W[t-7] + W[t-16] */
+	lshift2 alarm,pdata
+	iadd timeup,contw
+	istoret 4,contw
+	increase 1,alarm
+	compare 64,alarm,0xff
+	nbranch sha_r_loop,true
+	rtn
+	
+
+sha_init:
+	arg memh0,contr
+	force 7,regext_index
+sha_init_0:	
+	ifetch 4,contr
+	iforce regext
+	increase -1,regext_index
+	branch sha_init_0,positive
+	rtn
+
+sha:
+	bpatchx patch3d_4,mem_patch3d
+	call sha_r		/* preprocessing data into R() */
+	arg memahbak,contw
+	force 0,regext_index
+sha_0:	
+	deposit regext
+	istore 4,contw
+	increase 1,regext_index
+	compare 8,regext_index,0xff
+	nbranch sha_0,true
+	call enable_authrom
+	arg memk,timeup
+	arg memdat,alarm
+	force 64,loopcnt
+sha_loop:	
+	ifetcht 4,alarm
+	ifetch 4,timeup
+	increase 4,timeup
+	increase 4,alarm
+	iadd temp,pdata			/* x+K */
+	force 7,regext_index
+	iadd regext,temp			/* x+K+h */
+	force 4,regext_index
+	shasx regext,3,pdata
+	iadd temp,temp			/* temp = s3(e)+x+K+h */
+	force 5,regext_index
+	deposit regext
+	force 6,regext_index
+	ixor regext,pdata
+	force 4,regext_index
+	iand regext,pdata			/* (e & (f ^ g)) */
+	force 6,regext_index
+	ixor regext,pdata			/* F1(e, f, g) = g ^ (e & (f ^ g)) */
+	iadd temp,temp			/* temp1 = h + S3(e) + F1(e,f,g) + K + x */
+	force 7,regext_index
+	copy temp,regext			/* save to H */
+	force 3,regext_index
+	deposit regext
+	iadd temp,regext			/* save to D */
+	force 0,regext_index
+	deposit regext
+	force 1,regext_index
+	iand regext,temp			/* a & b */
+	ior regext,pdata			/* a | b */			
+	force 2,regext_index
+	iand regext,pdata			/* (c & (a | b)) */
+	ior temp,temp				/* F0:(a & b) | (c & (a | b)) */
+	force 0,regext_index
+	shasx regext,2,pdata
+	iadd temp,pdata			/* temp2 = S2(a) + F0(a,b,c) */
+	force 7,regext_index
+	iadd regext,regext			/* h = temp1 + temp2 */
+	regexrot					/* rotate move h,a-g => a-h */
+	loop sha_loop
+	arg memahbak,contr
+	force 0,regext_index
+sha_1:	
+	ifetch 4,contr
+	iadd regext,regext
+	increase 1,regext_index
+	compare 8,regext_index,0xff
+	nbranch sha_1,true
+	branch disable_authrom
+
+	
+sha_result:
+	arg   memresult,contw
+	force 7,regext_index
+sha_regext_save:
+	deposit regext
+	istore  4,contw 
+	increase -1,regext_index
+	branch   sha_regext_save,positive
+	rtn	
+
+pad_xor:
+//	arg memx_end,contr
+	arg      memdat,contw
+	increase -4,contr
+	sub      loopcnt,16,regA
+pad_xor_0:	    
+	ifetch   4,contr
+	ixor     temp,pdata
+	istore   4,contw	
+	increase -8,contr	
+	loop  pad_xor_0
+	copy     regA,loopcnt
+	deposit  temp
+pad_xor_1:	
+	istore 4,contw
+	loop pad_xor_1
+	rtn
+
+g_noninit_number_confirm:
+	call g_noninit0
+	call sha_result
+	branch g_common0
+
+g_noninit:
+	call g_noninit0
+	branch g_common0
+	
+g_noninit0:
+ 	arg      mem_sp_pubkey_remote_x_end,contr
+	arg      memdat,contw
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	arg      mem_sp_pubkey_local_x_end,contr
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	arg      mem_sp_random_remote_end,contr
+	call     memcpy_dword_swap4
+	call     sha_init
+	call     sha	
+ 	arg      mem_sp_random_local_end,contr
+	arg      memdat,contw
+	branch g_common
+	
+g_init:
+ 	arg      mem_sp_pubkey_local_x_end,contr
+	arg      memdat,contw
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	arg      mem_sp_pubkey_remote_x_end,contr
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	arg      mem_sp_random_local_end,contr
+	call     memcpy_dword_swap4
+	call     sha_init
+	call     sha	
+ 	arg      mem_sp_random_remote_end,contr
+	arg      memdat,contw
+	call g_common
+	branch g_common0
+	
+g_common:	
+	call     memcpy_dword_swap4
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	force    5,loopcnt
+	call memset0
+	setarg 640
+	istore 4,contw
+	branch sha
+g_common0:
+	fetch 4,memresult
+//	store 4,mem_gkey
+	arg 1000,rega
+	idiv rega
+	call wait_div_end
+	remainder pdata
+	store 4,mem_gkey
+	quotient pdata
+	arg 1000,rega
+	idiv rega
+	call wait_div_end
+	remainder pdata
+	arg 1000,rega
+	imul32 rega,pdata
+	fetcht 4,mem_gkey
+	iadd temp,pdata
+	store 4,mem_gkey
+	rtn
+
+function_f1_no_key:
+	jam 0,mem_passkey_1bit
+	branch function_f1_common
+	
+function_f1:
+	fetch 1,mem_ssp_mode_flag
+	bne  SSP_MODE_PASSKEY_ENTRY_FLAG,function_f1_no_key
+function_f1_common:
+	bpatchx patch3d_5,mem_patch3d
+	setarg   0x363636
+	lshift8  pdata,temp
+	or_into       0x36,temp
+	fetch 2,mem_sp_prarm_stack
+	copy pdata,contr
+	force    4,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	fetch 2,mem_sp_prarm_stack+2
+	copy pdata,contr
+	arg      memdat,contw
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	fetch 2,mem_sp_prarm_stack+4
+	copy pdata,contr
+	force    6,loopcnt
+	call     memcpy_dword_swap
+	setarg   0x800000
+	istore   3,contw
+	
+	fetch 1,mem_passkey_1bit
+	
+	istore   1,contw
+	force    0,pdata
+	istore   8,contw
+	setarg   0x0388
+	istore   4,contw
+	call     sha
+	call     sha_result
+	arg      memresult,contr
+	arg      memahsave,contw 
+	call     memcpy32
+    
+	setarg   0x5c5c5c
+	lshift8  pdata,temp
+	or_into       0x5c,temp
+	fetch 2,mem_sp_prarm_stack
+	copy pdata,contr
+	force    4,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	arg      memahsave_end,contr
+	arg      memdat,contw
+	force    8,loopcnt
+	call     memcpy_dword_swap
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	call		bn_zero
+	setarg   0x0300
+	istore   4,contw
+	call     sha
+	branch     sha_result
+	
+	
+function_f2:
+	setarg   0x363636
+	lshift8  pdata,temp
+	or_into       0x36,temp
+	arg      mem_sp_dhkey_end,contr
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	fetch 2,mem_sp_prarm_stack+12
+	copy pdata,contr
+	arg      memdat,contw
+	call     memcpy_dword_swap4
+	fetch 2,mem_sp_prarm_stack+14
+	copy pdata,contr
+	call     memcpy_dword_swap4
+
+	setarg   0x62746c
+	lshift8  pdata,pdata
+	or_into       0x6b,pdata       
+	istore   4,contw
+	arg      mem_addr_value_end,contr
+	force    3,loopcnt
+	call     memcpy_dword_swap
+	
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	force    0,pdata
+	istore   8,contw
+	setarg   0x0380
+	istore   4,contw
+	call     sha
+
+	call     sha_result
+	arg      memresult,contr
+	arg      memahsave,contw 
+	call     memcpy32
+    
+	setarg   0x5c5c5c
+	lshift8  pdata,temp
+	or_into       0x5c,temp
+	arg      mem_sp_dhkey_end,contr 
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	arg      memahsave_end,contr
+	arg      memdat,contw
+	force    8,loopcnt
+	call     memcpy_dword_swap
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	call bn_zero
+	setarg   0x0300
+	istore   4,contw
+	call     sha
+	branch     sha_result
+	
+
+function_f3a:
+	fetch 1,mem_ssp_mode_flag
+	bne  SSP_MODE_PASSKEY_ENTRY_FLAG,function_f3a_no_pin
+function_f3a_common:
+	bpatchx patch3d_6,mem_patch3d
+	setarg   0x363636
+	lshift8  pdata,temp
+	or_into       0x36,temp
+	arg      mem_sp_dhkey_end,contr
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	arg      mem_sp_random_remote_end,contr
+	arg      memdat,contw
+	call     memcpy_dword_swap4
+	arg      mem_sp_random_local_end,contr
+	call     memcpy_dword_swap4
+	branch function_f3_common
+
+function_f3a_no_pin:
+	setarg 0
+	store 4,mem_pin
+	branch function_f3a_common
+
+function_f3b_no_pin:
+	setarg 0
+	store 4,mem_pin
+	branch function_f3b_common
+
+
+function_f3b:
+	fetch 1,mem_ssp_mode_flag
+	bne  SSP_MODE_PASSKEY_ENTRY_FLAG,function_f3b_no_pin
+function_f3b_common:
+	setarg   0x363636
+	lshift8  pdata,temp
+	or_into       0x36,temp
+	arg      mem_sp_dhkey_end,contr
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+
+	arg      mem_sp_random_local_end,contr
+	arg      memdat,contw
+	call     memcpy_dword_swap4
+	arg      mem_sp_random_remote_end,contr
+	call     memcpy_dword_swap4
+function_f3_common:    
+	setarg   0x0    
+	istore   8,contw
+	istore   4,contw
+	fetch 4,mem_pin
+	istore   4,contw
+	
+	copy     contw,temp
+	jam      0x80,mem_addr_padding
+	copy     temp,contw
+	arg      mem_addr_iocap_end,contr
+	call     memcpy_dword_swap4
+
+	call     sha
+    
+	arg      memdat,contw
+	force 7,loopcnt
+	call memset0
+	istore   4,contw
+	setarg   0x03F8
+	istore   4,contw
+	call     sha
+	call     sha_result
+	
+	arg      memresult,contr
+	arg      memahsave,contw 
+	call     memcpy32
+    
+	setarg   0x5c5c5c
+	lshift8  pdata,temp
+	or_into       0x5c,temp
+	arg      mem_sp_dhkey_end,contr 
+	force    6,loopcnt
+	call     pad_xor
+	call     sha_init
+	call     sha
+	arg      memahsave_end,contr
+	arg      memdat,contw
+	force    8,loopcnt
+	call     memcpy_dword_swap
+	setarg   0x800000
+	lshift8  pdata,pdata 
+	istore   4,contw
+	call bn_zero
+	setarg   0x0300
+	istore   4,contw
+	call     sha	
+	branch     sha_result
+		
+/*
+eckp:
+	jam 192,mem_ec_loopc
+	jam 1,mem_ec_infinite
+*/
+eckp_calc_init:
+	jam      192,mem_ec_loopc
+eckp_calc_init_1:    
+	fetch    1,mem_ec_loopc
+	rtn      blank
+	increase -1,pdata
+	store    1,mem_ec_loopc 	
+	arg      mem_k,contr
+	call     bn_testbit
+	branch eckp_calc_init_1,true
+	arg      mem_ax,contr
+	arg      mem_cx,contw
+	branch     ec_copy	
+	
+eckp_calc:
+	call     ecdbl  
+	fetch    1,mem_ec_loopc
+	increase -1,pdata
+	store    1,mem_ec_loopc
+	arg      mem_k,contr
+	call     bn_testbit
+	rtn	true
+	branch     ecadd                
+	             
+memcpy_dword_swap4:
+	force 4,loopcnt
+memcpy_dword_swap:
+	increase -4,contr
+memcpy_dword_swap_loop:
+	ifetch   4,contr
+	istore   4,contw
+	increase -8,contr
+	loop   memcpy_dword_swap_loop 
+    	rtn
+
+else
+sp_initialize:
+	rtn
+
+endif
+	
+
+ifdef SECURE_CONNECTION
+
+sp_initialize_256:	
+	bpatchx patch3d_7,mem_patch3d
+	fetch 1,mem_le_secure_connect_enable
+	branch  le_secure_connection_disable,blank
+	call le_secure_connection_enable
+	call sp_clear_flags
+//	jam SP_KEY_INVALID_256,mem_le_sc_local_key_invalid
+	branch sp_pubkey_calc_256
+    	
+
+
+
+sp_pubkey_calc_256:
+	fetch    1,mem_le_sc_local_key_invalid
+	rtnne SP_KEY_INVALID
+	fetch    1,mem_le_sc_calc
+	rtnne  SP_CALC_STANDBY
+	
+	arg      mem_le_private_key_256,contw 
+	force    15,queue
+	call     random_generator
+	random   pdata
+	rshift   pdata,pdata
+	istore   2,contw 
+
+	arg      mem_k_256,contw
+	arg      mem_le_private_key_256,contr	
+	call     memcpy32 //mem_sp_private_key=>mem_k 
+
+	arg      mem_ax_256,contw
+	arg      mem_gx_256,contr
+	call     memcpy64 //mem_gx=>mem_ax 
+	
+	arg      mem_az_256,contw
+	call      clear_mem_256
+	jam      1,mem_az_256 //0=>mem_az 
+
+	call     eckp_calc_init_256
+	jam SP_CALC_PUBKEY_256,mem_le_sc_calc
+	rtn    
+
+sp_pubkey_generated_256:
+	arg      mem_le_pubkey_local_x_256,contw
+	arg      mem_bx_256,contr
+	call     memcpy64   
+	jam      SP_KEY_VALID_256,mem_le_sc_local_key_invalid
+	jam      SP_CALC_STANDBY,mem_le_sc_calc
+	rtn
+	
+
+
+sp_dhkey_calc_256:
+	fetch    1,mem_sp_dhkey_invalid
+	rtnne  SP_KEY_INVALID
+	fetch    1,mem_le_sc_calc
+	rtnne  SP_CALC_STANDBY
+
+	arg      mem_k_256,contw
+	arg      mem_le_private_key_256,contr	
+	call     memcpy32
+
+	arg      mem_ax_256,contw
+	arg      mem_le_pubkey_remote_x_256,contr
+	call     memcpy64
+
+	arg      mem_az_256,contw
+	call     clear_mem_256
+	jam      1,mem_az_256 //0=>mem_az 
+
+	call     eckp_calc_init_256
+	jam     SP_CALC_DHKEY_256,mem_le_sc_calc
+	rtn 
+
+
+sp_dhkey_generated_256:
+//	jam SP_FLAG_COMMIT,mem_sp_dh_ready
+	arg mem_le_dhkey_256,contw
+	arg mem_bx_256,contr
+	call memcpy32
+	jam SP_KEY_VALID_256,mem_sp_dhkey_invalid
+	jam SP_CALC_STANDBY,mem_le_sc_calc
+	rtn
+
+
+
+sp_calc_sequence_256:
+	fetch 1,mem_le_secure_connect_enable
+	rtn blank
+	fetch 1,mem_le_sc_calc
+	rtn blank
+	increase 0x80,pdata
+	store    1,mem_le_sc_calc
+	rtnbit1 7
+	fetch    2,mem_ec_loopc
+	branch   sp_calc_sequence_done_256,blank
+	branch   eckp_calc_256
+
+sp_calc_sequence_done_256:    
+	bpatchx patch3e_0,mem_patch3e
+	call ecunmapz_256
+	fetch 1,mem_le_sc_calc
+	beq  SP_CALC_PUBKEY_256,sp_pubkey_generated_256
+	beq  SP_CALC_DHKEY_256,sp_dhkey_generated_256
+	rtn
+
+
+eckp_calc_256:
+	call     ecdbl_256  
+	fetch    2,mem_ec_loopc
+	increase -1,pdata
+	store    2,mem_ec_loopc
+	arg      mem_k_256,contr
+	call     bn_testbit
+	rtn	true
+	branch     ecadd_256   
+
+eckp_calc_init_256:
+	bpatchx patch3e_1,mem_patch3e
+	setarg 256,pdata
+	store 2,mem_ec_loopc
+eckp_calc_init_256_1:    
+	fetch    2,mem_ec_loopc
+	rtn      blank
+	increase -1,pdata
+	store    2,mem_ec_loopc
+	arg      mem_k_256,contr
+	call     bn_testbit
+	branch eckp_calc_init_256_1,true
+	arg      mem_ax_256,contr
+	arg      mem_cx_256,contw
+	branch     memcpy96	
+
+
+ecunmapz_256:
+	arg mem_cz_256,regA
+	arg mem_t3_256,contw
+	call bn_invmod_256			/* t3 = 1/z */
+	arg mem_t3_256,regA
+	arg mem_t1_256,contw		
+	call bn_sqrmod_256			/* t1 = 1/z2 */
+	arg mem_cx_256,regA
+	arg mem_t1_256,regB
+	arg mem_bx_256,contw
+	call bn_mulmod_256
+	arg mem_t3_256,regA
+	arg mem_t1_256,regB
+	arg mem_t2_256,contw			
+	call bn_mulmod_256			/* t2 = 1/z3 */
+	arg mem_cy_256,regA
+	arg mem_t2_256,regB
+	arg mem_by_256,contw
+	branch bn_mulmod_256	
+	
+ecdbl_256:
+	arg mem_cz_256,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod_256
+	arg mem_t2_256,regA
+	arg mem_t3_256,contw
+	call bn_sqrmod_256
+//call ice_break
+	arg mem_a_256,regA
+	arg mem_t3_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256		/* t3=a*z4	*/
+	arg mem_cx_256,regA
+	arg mem_t2_256,contw
+	call bn_sqrmod_256
+//call ice_break
+	arg mem_t2_256,contr
+	arg mem_t1_256,contw
+	call memcpy32
+	arg mem_t1_256,regA
+	call bn_lshiftmod_256
+	arg mem_t2_256,regA
+	arg mem_t1_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod_256
+//call ice_break
+	arg mem_t2_256,regA
+	arg mem_t3_256,regB
+	arg mem_t2_256,contw
+	call bn_addmod_256		/* t2=3*x2 + z*z4		D  */
+//call ice_break
+	arg mem_cx_256,contr
+	arg mem_t1_256,contw
+	call memcpy32
+	arg mem_cy_256,regA
+	arg mem_t3_256,contw
+	call bn_sqrmod_256
+	arg mem_t1_256,regA
+	call bn_lshiftmod_256
+	arg mem_t1_256,regA
+	call bn_lshiftmod_256
+	arg mem_t1_256,regA		
+	arg mem_t3_256,regB
+	arg mem_t1_256,contw
+	call bn_mulmod_256		//S = 4X1Y1^2/* t1=4x*y2	B	*/
+	arg mem_t3_256,regA
+	arg mem_t0_256,contw
+	call bn_sqrmod_256
+	arg mem_t0_256,regA
+	call bn_lshiftmod_256
+	arg mem_t0_256,regA
+	call bn_lshiftmod_256		
+	arg mem_t0_256,regA		
+	call bn_lshiftmod_256	//T = 8Y1^4	/* t0=8*y4		C */
+	arg mem_cy_256,contr
+	arg mem_t3_256,contw
+	call memcpy32
+	arg mem_t3_256,regA
+	call bn_lshiftmod_256
+	arg mem_t3_256,regA
+	arg mem_cz_256,regB
+	arg mem_cz_256,contw
+	call bn_mulmod_256		//z = 2Y1Z1
+
+
+	arg mem_t2_256,regA
+	arg mem_t3_256,contw
+	call bn_sqrmod_256   // M ^2
+//call ice_break
+	arg mem_t3_256,regA
+	arg mem_t1_256,regB
+	arg mem_t3_256,contw
+	call bn_submod_256  // t2^2 - 4*cx *cy^2 
+	arg mem_t3_256,regA
+	arg mem_t1_256,regB
+	arg mem_cx_256,contw
+	call bn_submod_256   //X2
+	arg mem_t1_256,regA
+	arg mem_cx_256,regB
+	arg mem_t3_256,contw
+	call bn_submod_256   //S-X2
+	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256	//M(S-X2)	
+	arg mem_t3_256,regA
+	arg mem_t0_256,regB
+	arg mem_cy_256,contw
+	branch bn_submod_256  //M(S-X2)-T Y2	
+
+ecadd_256:
+
+	arg mem_az_256,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod_256
+	arg mem_cx_256,regA
+	arg mem_t7_256,regB
+	arg mem_t0_256,contw
+	call bn_mulmod_256		/* n1=t0=xa*zb2 U1 = X1Z0^2*/
+
+
+	arg mem_az_256,regA
+	arg mem_t7_256,regB
+	arg mem_t7_256,contw
+	call bn_mulmod_256	
+	arg mem_cy_256,regA
+	arg mem_t7_256,regB
+	arg mem_t1_256,contw
+	call bn_mulmod_256		/* n2=t1=ya*zb3   S1 = Y1Z0^3*/
+
+
+	arg mem_cz_256,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod_256
+	arg mem_ax_256,regA
+	arg mem_t7_256,regB
+	arg mem_t2_256,contw
+	call bn_mulmod_256		/* n3=t2=xb*za2  U0 = X0Z1^2*/
+
+	arg mem_cz_256,regA
+	arg mem_t7_256,regB
+	arg mem_t7_256,contw
+	call bn_mulmod_256	
+	arg mem_ay_256,regA
+	arg mem_t7_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256		/* n4=t3=yb*za3 S0 = Y0Z1^3*/
+
+
+//	arg mem_t0_256,regA
+//	arg mem_t2_256,regB
+	arg mem_t0_256,regb
+	arg mem_t2_256,rega
+	arg mem_t7_256,contw
+	call bn_submod_256		/* n5=t7=n1-n3=t0-t2   W=U1-U0*/
+	arg mem_t0_256,regA
+	arg mem_t2_256,regB
+	arg mem_t0_256,contw
+	call bn_addmod_256		/* n7=t0=n1+n3=t0+t2    T=U1+U0 */
+//	arg mem_t1_256,regA
+//	arg mem_t3_256,regB
+	arg mem_t1_256,regb
+	arg mem_t3_256,rega
+	arg mem_t2_256,contw
+	call bn_submod_256		/* n6=t2=n2-n4=t1-t3  S1-S0 */
+	arg mem_t1_256,regA
+	arg mem_t3_256,regB
+	arg mem_t1_256,contw
+	call bn_addmod_256		/* n8=t1=n2+n4=t1+t3 M=S1+S0*/
+	arg mem_t1_256,regA
+	arg mem_t7_256,regB
+	arg mem_t1_256,contw
+	call bn_mulmod_256		/* t1=n8*n5     MW */
+	arg mem_cz_256,regA
+	arg mem_az_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256	      //Z0Z1
+	arg mem_t3_256,regA
+	arg mem_t7_256,regB
+	arg mem_cz_256,contw
+	call bn_mulmod_256		/* z=za*zb*n5   Z0Z1W */
+
+	arg mem_t7_256,regA
+	arg mem_t7_256,contw
+	call bn_sqrmod_256		/* t7=n5^2 */
+	arg mem_t7_256,regA
+	arg mem_t0_256,regB
+	arg mem_t3_256,contw
+	call bn_mulmod_256		/* t3=n5^2*n7 */
+	arg mem_t7_256,regA
+	arg mem_t1_256,regB
+	arg mem_t1_256,contw
+	call bn_mulmod_256		/* t1=n8*n5^3 */
+	arg mem_t2_256,regA
+	arg mem_cx_256,contw
+	call bn_sqrmod_256		
+	arg mem_cx_256,regA
+	arg mem_t3_256,regB
+	arg mem_cx_256,contw
+	call bn_submod_256		/* x=n6^2-n5^2*n7 */
+	arg mem_cx_256,contr
+	arg mem_t7_256,contw
+	call memcpy32
+	arg mem_t7_256,regA
+	call bn_lshiftmod_256		/* t7=2*x */
+	arg mem_t3_256,regA
+	arg mem_t7_256,regB
+	arg mem_t3_256,contw
+	call bn_submod_256		/* t3=n9 */
+	arg mem_t3_256,regA
+	arg mem_t2_256,regB
+	arg mem_t2_256,contw
+	call bn_mulmod_256		/* t2=n9*n6 */
+	arg mem_t2_256,regA
+	arg mem_t1_256,regB
+	arg mem_cy_256,contw
+	call bn_submod_256	
+	arg mem_cy_256,regA
+	arg mem_p_256,regB
+	arg mem_cy_256,contw
+	force 0,regC
+	fetch 1,mem_cy_256
+	isolate1 0,pdata
+	call bn_add_256,true
+	copy regC,alarm
+	arg mem_cy_256,regA
+	call bn_rshift_256
+	fetch 1,mem_cy5_256
+	isolate1 0,alarm
+	setflag true,7,pdata
+	store 1,mem_cy5_256
+	rtn	
+
+bn_invmod_256:
+	copy contw,timeup					 
+	arg mem_tmp0_256,contw			 
+	call clear_mem_256
+	force 0,pdata
+//	store 4,mem_tmp52
+	store 4,mem_t2_256
+	jam 1,mem_tmp0_256      //y1
+	arg mem_tmp1_256,contw	//y2			 
+	call clear_mem_512      
+	arg mem_p_256,contr
+	arg mem_tmp2_256,contw		//j		 
+	call memcpy32
+	copy regA,contr
+	arg mem_tmp3_256,contw		//i		 
+	call memcpy32
+	
+//	arg mem_tmp22,regA
+//	arg mem_tmp32,regB
+//	call p_bn_bigeq_256
+//	branch assert,positive
+bn_invmod_256_2:	
+	arg mem_tmp3_256,contr
+	call bn_eq_zero_256
+	branch bn_invmod_256_0,blank
+//call ice_break    	
+//fetch 1,0x4ffe
+//increase 1,pdata
+//store 1,0x4ffe
+	arg mem_tmp3_256,regA
+	arg mem_tmp0_256,regB
+	call bn_rshifteven_256
+	arg mem_tmp2_256,regA
+	arg mem_tmp1_256,regB
+	call bn_rshifteven_256
+	
+	arg mem_tmp3_256,regA
+	arg mem_tmp2_256,regB
+	call bn_bigeq_256
+	branch bn_invmod_256_1,positive
+	arg mem_tmp2_256,regA
+	arg mem_tmp3_256,regB
+	copy regA,contw
+	call bn_sub_256
+	arg mem_tmp0_256,regA
+	arg mem_tmp1_256,regB
+	copy regB,contw
+	call bn_add_256
+	ifetch 1,regA
+	iadd regC,regC
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB
+	branch bn_invmod_256_2
+bn_invmod_256_1:
+	arg mem_tmp3_256,regA
+	arg mem_tmp2_256,regB
+	copy regA,contw
+	call bn_sub_256
+	arg mem_tmp1_256,regA
+	arg mem_tmp0_256,regB
+	copy regB,contw
+	call bn_add_256
+	ifetch 1,regA
+	iadd regC,regC
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB
+	branch bn_invmod_256_2
+bn_invmod_256_0:
+//call ice_break
+	arg mem_tmp1_256,regA
+	copy timeup,contw
+	call  bn_p256mod
+//call ice_break
+	arg mem_p_256,regA
+	copy timeup,regB
+	copy timeup,contw
+	branch bn_submod_256
+
+
+bn_mulmod_256:
+	copy contw,timeup					/* save result ptr */
+	
+	force 0,regext_index
+	
+	arg mem_tmp1_256,contw
+	call clear_mem_512
+	arg mem_regext,contw
+	call clear_mem_512
+//	jam 0,mem_regext_index
+
+//	arg mem_tmp12,contw
+	copy regA,contr
+//	force 0,regext_index
+	jam 0,mem_regext
+	setarg 0
+	call bn_load_mem
+	copy regB,contr
+	call bn_load_256
+//	force 0,regB
+//	jam 0,mem_regb
+	force 0,queue
+	arg mem_tmp1_256,contw	
+bn_mulmod_256_1:	
+//	copy regb,pdata
+//	store 1,
+	arg mem_regext,temp
+	copy queue,regb
+	lshift2 regb,pdata
+//	lshift4 pdata,pdata
+	iadd temp,regb	
+	force 0,temp
+	force 0,regC
+bn_mulmod_256_0:
+//	copy contw,pdata
+//	store 2,mem_contw
+//call ice_break
+//	copy pdata,contw
+	ifetch 4,contw					/* d[i+j] */
+	iforce regA
+//	copy regB,regext_index
+//	deposit regext
+	ifetch 4,regb
+	copy regC,regext_index
+	imul32 regext,pdata
+	iadd regA,pdata					/* uv = a[i]*b[j] + d[i+j] */
+	iadd temp,pdata					/* uv += u */
+	istore 4,contw					/* ->d[i+j] */
+	rshift32 pdata,temp				/* temp = u = uv >> 32 */
+	increase 1,regC
+	compare 8,regC,0xff
+	nbranch bn_mulmod_256_0,true
+//call ice_break
+	deposit temp
+	istore 4,contw					/* d[i + 12] = u */
+	increase -32,contw
+//	fetch 1,mem_regb
+//	copy pdata,regb
+	increase 1,queue
+	compare 8,queue,0xff
+	nbranch bn_mulmod_256_1,true
+	arg mem_tmp1_256,regA
+	copy timeup,contw
+	branch bn_p256mod
+
+bn_p256mod:
+	bpatchx patch3e_2,mem_patch3e
+	copy contw,timeup				/* save result ptr */
+	copy regA,alarm				/* temp save regA */
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	call memset0_4	
+	istore 8,contw
+	add regA,44,contr
+	call memcpy8
+	call memcpy12
+	copy regb,rega
+	call  bn_lshiftmod_256 //2S1
+	arg mem_tmp2_256,regB
+	copy alarm,rega   
+	copy timeup,contw
+	call bn_addmod_256 //T+2S1
+//call ice_break	
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	call memset0_4	
+	istore 8,contw
+	add alarm,48,contr
+	call memcpy16
+	call memset0_4	
+	copy regb,rega
+	call  bn_lshiftmod_256 //2S2
+//call ice_break	
+//	arg 0,regB
+
+	arg mem_tmp2_256,regB
+	copy timeup,rega   
+	copy regA,contw	
+	call bn_addmod_256  //+2S2
+//call ice_break	
+//	arg 0,regB
+		
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,32,contr
+	call memcpy12
+	call memset0_4	
+	istore 8,contw
+	add alarm,56,contr
+	call memcpy8
+	copy timeup,regA
+	copy regA,contw
+	call bn_addmod_256 //+S3
+//call ice_break	
+//	arg 0,regB
+
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,36,contr
+	call memcpy12
+	add alarm,52,contr	
+	call memcpy12
+	add alarm,52,contr
+	call memcpy4
+	add alarm,32,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	call bn_addmod_256 //+S4	
+//call ice_break	
+//	arg 1,regB
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,44,contr
+	call memcpy12
+	call memset0_4	
+	istore 8,contw
+	add alarm,32,contr
+	call memcpy4
+	add alarm,40,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	call bn_submod_256 //-D1	
+//call ice_break	
+//	arg 2,regB
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,48,contr
+	call memcpy8
+	call memcpy8
+	force 0,pdata
+	istore 8,contw
+	add alarm,36,contr
+	call memcpy4
+	add alarm,44,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	call bn_submod_256 //-D2	
+//call ice_break	
+//	arg 3,regB
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,52,contr
+	call memcpy12
+	add alarm,32,contr
+	call memcpy12
+	call memset0_4	
+	add alarm,48,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	call bn_submod_256 //-D3
+//call ice_break	
+//	arg 4,regB
+	arg mem_tmp2_256,regB
+	copy regB,contw
+	add alarm,56,contr
+	call memcpy8
+	call memset0_4	
+	add alarm,36,contr
+	call memcpy12
+	call memset0_4	
+	add alarm,52,contr
+	call memcpy4
+	copy timeup,regA
+	copy regA,contw
+	branch  bn_submod_256 //-D4	
+
+
+bn_load_mem:
+	force 32,loopcnt
+	arg mem_regext,contw
+	iadd contw,contw
+	branch memcpy
+
+bn_load_256:
+	force 8,loopcnt
+	branch bn_load_0
+
+bn_sqrmod_256:
+	copy regA,regB
+	branch bn_mulmod_256
+
+bn_add_256:
+	force 8,loopcnt
+ 	branch bn_add+1
+
+bn_addmod_256:
+	call bn_add_256
+	copy contw,regA
+	branch bn_lshiftmod_ismod_256
+
+bn_lshiftmod_256:
+	call bn_lshift_256
+bn_lshiftmod_ismod_256:	
+	isolate1 0,regC
+	branch bn_lshiftmod_p_256,true
+	arg mem_p_256,regB
+	copy regA,regC
+	increase -32,regA
+	call bn_bigeq_256
+	nrtn positive
+	copy regC,regA
+	branch sub_p2_256
+	
+bn_lshiftmod_p_256:
+	call sub_p2_256
+//	nrtn true
+	copy regA,regC
+	increase -32,regA
+	arg mem_p_256,regB
+	call bn_bigeq_256
+	nrtn positive
+	copy regC,regA
+	branch sub_p2_256
+		
+	
+sub_p2_256:
+	increase -32,regA
+	arg mem_p_256,regB
+	copy regA,contw
+	branch bn_sub_256
+	
+
+
+	
+bn_submod_256:
+	call bn_sub_256
+//	isolate1 0,regC
+	branch  bn_submod_256_np,true
+//	copy regA,regC
+//	increase -32,regA
+	add contw,-32,regA
+	arg mem_p_256,regB
+	call bn_bigeq_256
+	nrtn positive
+	arg mem_p_256,regB
+	add contw,-32,regA
+//	copy regC,regA
+	copy rega,contw
+	branch  bn_sub_256
+bn_submod_256_np:	
+	add contw,-32,regA
+	arg mem_p_256,regB
+	copy regA,contw
+	call bn_add_256
+//	isolate1 0,regC
+	rtn true
+	add contw,-32,regA
+	arg mem_p_256,regB
+	copy regA,contw
+	branch bn_add_256	
+
+
+ 
+bn_sub_256:
+	force 8,loopcnt
+	branch bn_sub+1
+
+bn_rshift_256:
+	force 8,loopcnt
+	increase 28,regA
+	branch bn_rshift
+
+bn_lshift_256:
+	force 8,loopcnt
+	force 0,regC
+	branch bn_lshift_0
+
+bn_bigeq_256:
+	force 8,loopcnt
+	increase 28,regA
+	increase 28,regB
+	branch bn_bigeq_0
+
+
+bn_eq_zero_256:
+	ifetch 8,contr
+	nrtn blank
+	branch bn_eq_zero
+
+
+
+	
+bn_rshifteven_256:
+	copy regA,alarm
+bn_rshifteven_256_1:
+	copy alarm,regA
+	ifetch 1,regA
+	isolate1 0,pdata
+	rtn true
+	call bn_rshift_256
+	ifetch 1,regB
+	isolate0 0,pdata
+	branch bn_rshifteven_256_0,true
+	arg mem_p_256,regA
+	copy regB,contw
+	call bn_add_256
+	ifetch 1,regB
+	iadd regC,pdata
+	istore 1,regB						 
+	increase -32,regB
+bn_rshifteven_256_0:
+	add regB,32,regA
+	force 9,loopcnt
+	call bn_rshift
+	branch bn_rshifteven_256_1		
+
+else
+sp_initialize_256:
+	rtn
+
+endif
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/ui.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/ui.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/ui.prog	(working copy)
@@ -0,0 +1,701 @@
+ui_init:
+	call lpm_disable_exen_output
+	rtn wake
+	call ui_button_init
+	call ui_timer_init
+	branch ui_led_init_global
+
+ui_dispatch:
+	call ui_led_dispatch
+	
+	branch ui_timer_check
+	
+ui_button_init:
+	fetch 1,mem_ui_button_gpio
+	rtneq UI_BUTTON_GPIO_DISABLE
+	iforce temp
+	call gpio_config_output
+	fetcht 1,mem_ui_button_gpio
+	call gpio_out_inactive
+	nop 100
+	fetcht 1,mem_ui_button_gpio
+	call gpio_config_input
+	branch ui_button_polling
+
+
+	
+ui_button_polling:
+	bpatchx patch3e_3,mem_patch3e
+	fetch 1,mem_ui_button_gpio
+	rtneq UI_BUTTON_GPIO_DISABLE
+	copy pdata,temp
+	call gpio_get_bit
+	nbranch ui_button_up,true
+	//fall through
+ui_button_down:
+	call ui_button_check_long_press
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BTN_DOWN
+	store 2,mem_ui_state_map
+	fetch 1,mem_ui_button_last_state
+	rtneq UI_BUTTON_STATE_DOWN
+	jam UI_BUTTON_STATE_DOWN,mem_ui_button_last_state
+	//Down Edge
+	fetch 1,mem_ui_button_timeout
+	store 1,mem_ui_button_timer //start long press timer
+	call lpm_button_get_wake_lock
+	jam BT_EVT_BUTTON_DOWN,mem_fifo_temp
+	branch ui_ipc_send_event
+ui_button_up:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BTN_DOWN
+	store 2,mem_ui_state_map
+	fetch 1,mem_ui_button_last_state
+	rtneq UI_BUTTON_STATE_UP
+	jam UI_BUTTON_STATE_UP,mem_ui_button_last_state
+	//Up Edge
+	jam 0,mem_ui_button_timer//stop long press timer
+	call lpm_button_clean_wake_lock
+	jam BT_EVT_BUTTON_UP,mem_fifo_temp
+	branch ui_ipc_send_event
+
+ui_button_check_long_press:
+	fetch 1,mem_ui_button_timer
+	rtn blank
+	increase -1,pdata
+	store 1,mem_ui_button_timer
+	nrtn blank
+	//Long Press
+	jam BT_EVT_BUTTON_LONG_PRESSED,mem_fifo_temp
+	branch ui_ipc_send_event
+
+lpm_button_get_wake_lock:
+	arg wake_lock_button,queue
+	branch lpm_get_wake_lock
+	
+lpm_button_clean_wake_lock:
+	arg wake_lock_button,queue
+	branch lpm_put_wake_lock
+
+
+
+/***********************ui led function****************************/
+/******************
+led function
+
+ui_led_init_global
+ui_led_on_global
+
+ui_led_off_global
+//input:rega :struct number
+ui_led_blink_start_global
+
+//input:rega :struct number
+//contr: the point that want to set led style address
+ui_led_set_style_global
+
+******************/
+//input:rega :struct number
+//output:regb :current strutct starting pointer
+calc_curr_struct_prt:
+	fetch 2,mem_ui_led_struct_ptr
+	mul32 rega,LED_OFFSET_LENGTH,regb
+	iadd regb,regb
+	rtn
+
+
+ui_led_init_global:
+	fetch 1,mem_ui_led_struct_num
+	rtn blank
+	copy pdata,loopcnt
+	fetch 2,mem_ui_led_struct_ptr
+	copy pdata,regb
+ui_led_init_loop:
+	add regb,LED_OFFSET_LED_GPIO,regc
+	ifetcht 1,regc
+	call gpio_config_output
+	call ui_led_off_static
+	increase LED_OFFSET_LENGTH,regb
+	loop ui_led_init_loop
+	rtn
+
+	
+//input:rega :struct number
+ui_led_on_global:
+	call calc_curr_struct_prt
+	setarg UI_LED_STATE_LIGHTING
+	istore 1,regb
+	call ui_led_stop_timer
+	branch ui_led_on_static
+
+	
+//input:rega :struct number
+ui_led_blink_stop_global:
+ui_led_off_global:
+	call calc_curr_struct_prt
+	setarg UI_LED_STATE_DARKING
+	istore 1,regb
+	call ui_led_stop_timer
+	branch ui_led_off_static
+
+
+//input:rega :struct number
+ui_led_blink_start_global:
+	call calc_curr_struct_prt
+	setarg UI_LED_STATE_BLINK_START
+	istore 1,regb
+	setarg LED_INFINITE_FLASH_NUM
+	istore 1,contw
+	branch ui_led_off_static
+
+
+//input:rega :struct number
+//REGC: the point that want to set led style address
+ui_led_set_style_global:
+	call calc_curr_struct_prt
+	arg LED_OFFSET_LENGTH,loopcnt
+	copy regc,contr
+	copy regb,contw
+	branch memcpy_fast
+
+
+
+ui_led_dispatch:
+	fetch 1,mem_ui_led_struct_num
+	rtn blank
+	arg 0,rega
+ui_led_blink_polling:
+	call ui_led_change_style_by_type
+	increase 1,rega
+	fetch 1,mem_ui_led_struct_num
+	isub rega,null
+	rtn zero
+	branch ui_led_blink_polling
+
+
+ui_led_off_static:
+	add regb,LED_OFFSET_LED_GPIO,regc
+	ifetcht 1,regc
+	branch gpio_out_inactive
+
+
+ui_led_on_static:
+	add regb,LED_OFFSET_LED_GPIO,regc
+	ifetcht 1,regc
+	branch gpio_out_active
+
+
+//input:rega :struct number
+ui_led_change_style_by_type:
+	add rega,ui_led_blink,queue
+	call timer_check
+	nrtn blank			//timer out
+	
+	call calc_curr_struct_prt
+
+	ifetch 1,regb			//led type
+
+	beq UI_LED_STATE_LIGHTING,ui_led_on_static
+	beq UI_LED_STATE_DARKING,ui_led_off_static
+	beq UI_LED_STATE_BLINK_STOP,ui_led_off_static
+	beq UI_LED_STATE_BLINK_DARKING,ui_led_blink_state_darking
+ui_led_blink_state_lighting:
+	call ui_led_on_static
+	add regb,LED_OFFSET_CB_LEDON,regc
+	call push_stack
+	ifetch 2,regc
+	call callback_func
+	call pop_stack
+	setarg UI_LED_STATE_BLINK_DARKING
+	istore 1,regb
+	add regb,LED_OFFSET_ON_TIME,regc
+	ifetch 2,regc
+	branch ui_led_blink_timer_start
+	
+
+ui_led_blink_state_darking:
+	call ui_led_off_static
+	add regb,LED_OFFSET_CB_LEDOFF,regc
+	call push_stack
+	ifetch 2,regc
+	call callback_func
+	call pop_stack
+	
+	add regb,LED_OFFSET_BLINK_COUNT,regc
+	ifetch 1,regc
+	beq LED_INFINITE_FLASH_NUM,ui_led_blink_infinite
+	increase -1,pdata
+	istore 1,regc
+	branch ui_led_blink_stop_global,blank		//End of flicker
+ui_led_blink_infinite:
+	setarg UI_LED_STATE_BLINK_LIGHTING
+	istore 1,regb
+	add regb,LED_OFFSET_OFF_TIME,regc
+	ifetch 2,regc
+ui_led_blink_timer_start:
+	add rega,ui_led_blink,queue
+	branch timer_init
+
+ui_led_stop_timer:
+	setarg 0
+	branch ui_led_blink_timer_start
+
+/***********************ui led function ending****************************/
+
+
+
+ui_timer_timeout:
+	setarg 0x1000
+	lshift16 pdata,pdata
+	iadd regb,regb
+	rtn
+	
+ui_timer_check:
+	bpatchx patch3e_4,mem_patch3e
+	arg 0,rega
+	fetcht 4,mem_ui_timer_last_btclk
+	copy clkn_bt,regb
+	copy regb,pdata
+	isub temp,null
+	ncall ui_timer_timeout,positive
+	//call ice_break
+ui_timer_check_loop:
+	copy regb,pdata
+	increase 160,temp    //320btclk = 100ms
+	increase 160,temp
+	isub temp,null
+	nbranch ui_timer_check_end,positive
+	increase 1,rega   //increase 1 every 100ms count
+	and rega,0x0f,pdata
+	nbranch ui_timer_check_loop,blank
+	arg 0,rega  //reset timer if it's longer than 1.5s between 2 checks
+	call ui_timer_check_send_evt
+ui_timer_init:
+	copy clkn_bt,pdata
+	store 4,mem_ui_timer_last_btclk
+	rtn
+ui_timer_check_end:
+	bpatchx patch3e_5,mem_patch3e
+	copy rega,pdata
+	rtn blank
+	increase -160,temp    //320btclk = 100ms
+	increase -160,temp
+	set0 28,temp
+	storet 4,mem_ui_timer_last_btclk
+ui_timer_check_send_evt:
+	branch app_evt_timer
+
+	
+
+//**********************************************************//
+//************UI Inter-Processor Communication*******//
+//**********************************************************//
+ui_ipc_get_lock:
+	jam 1,mem_ipc_lock_bt
+ui_ipc_get_lock_wait:
+	fetch 1,mem_ipc_lock_c51
+	nbranch ui_ipc_get_lock_wait,blank
+	rtn
+	
+ui_ipc_put_lock:
+	jam 0,mem_ipc_lock_bt
+	rtn
+	
+
+	
+ui_ipc_send_event:
+	bpatchx patch3e_6,mem_patch3e
+	call ui_ipc_get_lock
+	copy rega,pdata
+	store 4,mem_ipc_rega_temp
+	arg mem_ipc_fifo_bt2c51,rega
+	call fifo_in
+	fetch 4,mem_ipc_rega_temp
+	copy pdata,rega
+	branch ui_ipc_put_lock
+
+ui_ipc_send_cmd:
+	bpatchx patch3e_7,mem_patch3e
+	call ui_ipc_get_lock
+	copy rega,pdata
+	store 4,mem_ipc_rega_temp	
+	arg mem_ipc_fifo_c512bt,rega
+	call fifo_in
+	fetch 4,mem_ipc_rega_temp
+	copy pdata,rega	
+	branch ui_ipc_put_lock
+
+ui_ipc_clean_all_fifo:
+	setarg 0
+	store UTIL_FIFO_LEN,mem_ipc_fifo_c512bt
+	store UTIL_FIFO_LEN,mem_ipc_fifo_bt2c51
+	rtn
+	
+check_51cmd:
+	bpatchx patch3f_0,mem_patch3f
+	fetch 1,mem_hci_cmd
+	nrtn blank
+	arg mem_ipc_fifo_c512bt,rega
+	call fifo_is_empty
+	rtn blank
+	jam IPC_CONTINUE_PROCESS,mem_ipc_skip_continue_proc
+	call check_51cmd_once
+	fetch 1,mem_ipc_skip_continue_proc
+	branch check_51cmd,blank
+	rtn
+
+check_51cmd_once:
+	call ui_ipc_get_lock
+	arg mem_ipc_fifo_c512bt,rega
+	call fifo_out
+	copy pdata,temp
+	call ui_ipc_put_lock
+	bpatchx patch3f_1,mem_patch3f
+	copy temp,pdata
+	rtn blank
+ 	beq BT_CMD_START_DISCOVERY,check_51cmd_start_discovery
+  	beq BT_CMD_STOP_DISCOVERY,check_51cmd_stop_discovery
+  	beq BT_CMD_RECONNECT,check_51cmd_reconnect
+  	beq BT_CMD_ENTER_SNIFF_SUBRATING,check_51cmd_enter_sniff_subrating
+  	beq BT_CMD_EXIT_SNIFF_SUBRATING,check_51cmd_exit_sniff_subrating
+  	beq BT_CMD_SNIFF_TEST,check_51cmd_sniff_test
+	beq BT_CMD_START_INQUIRY,check_51cmd_inq
+	beq BT_CMD_STOP_INQUIRY,check_51cmd_stop_inq
+	beq BT_CMD_START_ADV,check_51cmd_adv
+	beq BT_CMD_STOP_ADV,check_51cmd_stop_adv
+	beq BT_CMD_START_DIRECT_ADV,check_51cmd_direct_adv
+	beq BT_CMD_STOP_DIRECT_ADV,check_51cmd_stop_direct_adv
+	beq BT_CMD_LED_OFF,check_51cmd_led_off
+	beq BT_CMD_LED_ON,check_51cmd_led_on
+	beq BT_CMD_LED_BLINK,check_51cmd_led_start_blink
+	beq BT_CMD_LE_START_CONN,check_51cmd_le_start_con
+	beq BT_CMD_LE_START_SCAN,check_51cmd_start_scan
+	beq BT_CMD_LE_STOP_SCAN,check_51cmd_stop_scan
+	beq BT_CMD_ENTER_HIBERNATE,check_51cmd_hibernate
+	beq BT_CMD_LE_SMP_SECURITY_REQUEST,check_51cmd_le_smp_sec_req
+	beq BT_CMD_BB_RECONN_CANCEL,check_51cmd_bb_reconn_cancel
+	//context related, process in context
+	store 1,mem_fifo_temp
+	bpatchx patch3f_2,mem_patch3f
+	call lmo_fifo_check
+	nbranch check_51cmd_restore,blank  //process this cmd next time while lmo fifo is full
+check_51cmd_once_continue:
+	fetch 1,mem_fifo_temp
+	bmark0 mark_context,check_51cmd_check_idle
+	beq BT_CMD_DISCONNECT,check_51cmd_disconnect
+  	beq BT_CMD_ENTER_SNIFF,cmd_in_sniff
+  	beq BT_CMD_EXIT_SNIFF,cmd_exit_sniff
+  	beq BT_CMD_SET_PIN_CODE,check_51cmd_pincode
+	beq BT_CMD_LE_DISCONNECT,check_51cmd_le_disconnect
+	beq BT_CMD_LE_UPDATE_CONN,check_51cmd_ble_update_connect_param
+	beq BT_CMD_ROLE_SWITCH,check_51cmd_role_switch
+	beq BT_CMD_STORE_RECONN_INFO_LE,eeprom_store_le_reconn_info
+	beq BT_CMD_STORE_RECONN_INFO_BT,eeprom_store_bd_reconn_info
+	beq BT_CMD_DHKEY_NOT_ACCEPT,check_51cmd_dhkey_not_accept
+	beq BT_CMD_STORE_RECONN_INFO,check_51cmd_store_reconn_info
+	rtn
+
+check_51cmd_check_idle:
+	store 1,mem_fifo_temp
+  	call context_check_idle
+	branch check_51cmd_restore,zero
+	call context_search_plap
+	nrtn zero
+check_51cmd_restore:
+	jam IPC_SKIP_CONTINUE_PROCESS,mem_ipc_skip_continue_proc
+	branch ui_ipc_send_cmd
+  
+ /******************** 51COMMAND*********************/
+
+//command opcode 0x01	
+check_51cmd_start_discovery:
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BT_DISCOVERY
+	store 2,mem_ui_state_map
+	jam 3,mem_scan_mode
+	rtn
+
+
+//command opcode 0x02	
+check_51cmd_stop_discovery:
+	jam 0,mem_hid_handshake_timer_count
+	jam 0,mem_scan_mode
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BT_DISCOVERY
+	store 2,mem_ui_state_map
+	rtn	
+
+
+//command opcode 0x03	
+check_51cmd_reconnect:	
+	jam hci_cmd_create_conn,mem_hci_cmd
+	rtn	
+
+
+//command opcode 0x04
+check_51cmd_disconnect:
+	jam LMP_DETACH,mem_lmo_opcode2
+	jam OTHER_END_TERMINATED,mem_disconn_reason_send
+	rtn
+
+	
+//command opcode 0x07
+check_51cmd_enter_sniff_subrating:
+	rtn
+
+
+//command opcode 0x08
+check_51cmd_exit_sniff_subrating:
+	rtn	
+
+
+//command opcode 0x09
+check_51cmd_sniff_test:
+	rtn	
+
+
+//command opcode 0x10
+check_51cmd_pincode:
+	jam pincode_state_pincode_ready,mem_pincode_state
+	branch cmd_pair
+
+
+//command opcode 0x11
+check_51cmd_inq:
+	rtn
+
+
+//command opcode 0x12
+check_51cmd_stop_inq:
+	rtn
+
+
+//command opcode 0x13
+check_51cmd_adv:
+	jam ON,mem_le_adv_enable
+	jam ADV_IND,mem_le_adv_type
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BLE_ADV,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+
+//command opcode 0x14
+check_51cmd_stop_adv:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BLE_ADV,pdata
+	store 2,mem_ui_state_map
+	jam OFF,mem_le_adv_enable
+	rtn
+
+
+//command opcode 0x15
+check_51cmd_direct_adv:
+	jam ON,mem_le_adv_enable
+	jam ADV_DIRECT_IND,mem_le_adv_type
+	fetch 2,mem_ui_state_map
+	set1 UI_STATE_BLE_ADV,pdata
+	store 2,mem_ui_state_map
+	rtn
+
+
+//command opcode 0x16
+check_51cmd_stop_direct_adv:
+	fetch 2,mem_ui_state_map
+	set0 UI_STATE_BLE_ADV,pdata
+	store 2,mem_ui_state_map
+	jam OFF,mem_le_adv_enable
+	rtn
+
+
+//command opcode 0x17
+check_51cmd_le_disconnect:
+	setarg 20 // 100ms
+	store 2,mem_le_superto
+	store 2,mem_le_init_superto
+	branch le_send_terminate_ind_user_terminated
+
+
+//command opcode 0x18
+check_51cmd_ble_update_connect_param:
+	branch le_l2cap_tx_update_req
+
+
+//command opcode 19
+check_51cmd_led_off:
+	arg 0,rega
+	branch ui_led_off_global
+
+
+//command opcode 20
+check_51cmd_led_on:
+	arg 0,rega
+	branch ui_led_on_global
+
+
+//command opcode 21
+check_51cmd_led_start_blink:
+	arg 0,rega
+	branch ui_led_blink_start_global
+
+
+//command opcode 0x22
+check_51cmd_le_start_con:
+	jam ON,mem_le_scan_enable
+	jam hci_cmd_le_create_conn,mem_hci_cmd
+//	fetch 6,mem_app_peer_addr
+//	store 6,mem_le_conn_peer_addr
+	rtn
+
+
+//command opcode 0x23
+check_51cmd_start_scan:
+	jam ON,mem_le_scan_enable
+	rtn
+
+
+//command opcode 0x24
+check_51cmd_stop_scan:
+	jam OFF,mem_le_scan_enable
+	jam 0,mem_hci_cmd
+	rtn
+
+
+//command opcode 0x25
+check_51cmd_hibernate:
+	fetch 2,mem_cb_before_hibernate
+	call callback_func
+	fetch 1,mem_ui_button_gpio
+	beq UI_BUTTON_GPIO_DISABLE,check_51cmd_hibernate_btn_disabled
+	copy pdata,temp
+	call gpio_config_input
+check_51cmd_hibernate_btn_disabled:
+	call ui_ipc_clean_all_fifo
+	branch lpm_hibernate	
+
+
+//command opcode 0x27
+check_51cmd_le_smp_sec_req:
+	branch le_send_smp_security_request
+
+
+//command opcode 0x29
+check_51cmd_role_switch:
+  	jam LMP_SLOT_OFFSET,mem_lmo_opcode2
+	set1 mark_switch_initiated,mark
+	nrtn master
+	jam SWITCH_FLAG_INIT,mem_switch_flag
+	jam LMP_SWITCH_REQ ,mem_lmo_opcode2
+	fetch 1,mem_connection_options
+	set0 CONNECTION_SWITCH,pdata
+	store 1,mem_connection_options
+	rtn
+
+
+//command opcode 0x30
+check_51cmd_bb_reconn_cancel:
+	force page_length_timer,queue
+	branch timer_stop
+
+
+//command opcode 0x33
+check_51cmd_dhkey_not_accept:
+	call tid_set_reply
+	jam LMP_DHKey_Check,mem_lmi_opcode2
+	branch parse_lmp_dhkey_check_reject	
+
+
+ui_check_paring_button:
+	fetch 1,mem_ui_state_map
+	rtnbit0 UI_STATE_BTN_DOWN
+	rtnbit0 UI_STATE_BT_RECONNECT
+	branch check_51cmd_bb_reconn_cancel
+
+
+
+///////////queue function////////////
+queue_init:
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_CURR_NUM,contw
+	setarg 0
+	istore 3,contw
+	rtn
+	
+//input:rega:the address of the data to which you want to input queue
+//output:if user is disable,mean queue no have space
+queue_push:
+	call disable_user
+	call queue_full
+	rtn blank
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_CURR_NUM,regb
+	ifetcht 1,regb
+	increase 1,temp
+	istoret 1,regb	//number add 
+	
+	ifetcht 1,pdata	//temp:each length
+	copy temp,loopcnt
+	add pdata,QUEUE_OFFSET_WRITE_PTR,regb
+	ifetch 1,regb
+	imul32 temp,pdata	//offset
+	iadd contr,contw
+	copy rega,contr
+calc_queue_next_ptr:
+	call memcpy
+	call queue_get_size
+	pincrease -1
+	ifetcht 1,regb
+	increase 1,temp
+	iand temp,temp
+	istoret 1,regb
+	branch enable_user
+
+
+//input:rega:the address of the data to which you want to output queue
+//output:if user is disable,mean queue no have data
+queue_pop:
+	call disable_user
+	call queue_empty
+	rtn blank
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_CURR_NUM,regb
+	ifetcht 1,regb
+	increase -1,temp
+	istoret 1,regb
+	ifetcht 1,pdata		//each size
+	copy temp,loopcnt
+	add pdata,QUEUE_OFFSET_READ_PTR,regb
+	ifetch 1,regb
+	imul32 temp,pdata	//offset
+	iadd contr,contr
+	increase 1,contr
+	copy rega,contw
+	branch calc_queue_next_ptr
+
+
+//output:if blank is 1,mean queue is empty
+queue_empty:
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_CURR_NUM,contr
+	ifetch 1,contr
+	rtn
+
+//output:if blank is 1,mean queue is full
+queue_full:
+	call queue_get_size
+	ifetcht 1,contr
+	isub temp,pdata
+	rtn
+
+//output:pdata is queue size
+queue_get_size:
+	fetch 2,mem_queue_ptr
+	add pdata,QUEUE_OFFSET_LENGTH,contr
+	ifetch 1,contr
+	rtn
+
+///////////queue function end////////////
+
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/utility.prog
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/utility.prog	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/program/utility.prog	(working copy)
@@ -0,0 +1,614 @@
+
+right_shift_n: //rshiftN pdata,pdata
+	sub loopcnt,0,null
+	rtn zero
+right_shift_n_loop: 
+	rshift pdata,pdata
+	loop right_shift_n_loop
+	rtn
+
+/* lshift. 0:1 byte; 1:2byte; 2:4byte; 3:8byte; 4:16byte*/
+left_shift_n:
+	force 1,pdata
+	sub loopcnt,0,null
+	rtn zero
+left_shift_n_loop:
+	lshift pdata,pdata
+	loop left_shift_n_loop
+	rtn
+push_stack:
+	deposit contw
+	store 2, mem_contw
+	storet 8,mem_temp
+	deposit timeup
+	store 4,mem_timeup
+	call push_stack_rega_b_c
+	deposit contr
+	store 2, mem_contr
+	rtn
+
+push_stack_rega_b_c:
+	deposit rega
+	store 4, mem_rega
+	deposit regb
+	store 4, mem_regb
+	deposit regc
+	store 3, mem_regc
+	rtn
+
+pop_stack:
+	fetcht 8,mem_temp
+	fetch 4,mem_timeup
+	iforce timeup
+	call pop_stack_rega_b_c
+	fetch 2, mem_contw
+	iforce contw
+	fetch 2, mem_contr
+	iforce contr
+	rtn
+
+pop_stack_rega_b_c:
+	fetch 4, mem_rega
+	iforce rega
+	fetch 4, mem_regb
+	iforce regb
+	fetch 3,mem_regc
+	iforce regc
+	rtn
+
+get_contw:
+	fetch 2,mem_contw
+	copy pdata,contw
+	rtn
+get_contr:
+	fetch 2,mem_contr
+	copy pdata,contr
+	rtn
+store_contw:
+	copy contw,pdata
+	store 2,mem_contw
+	rtn
+store_contr:
+	copy contr,pdata
+	store 2,mem_contr
+	rtn	
+	
+
+//
+save_cont_pointers:
+	copy contw,pdata
+	store 2,mem_hold_contw
+	copy contr,pdata
+	store 2,mem_hold_contr
+	rtn
+load_cont_pointers:
+	fetch 2,mem_hold_contw
+	copy pdata,contw
+	fetch 2,mem_hold_contr
+	copy pdata,contr
+	rtn
+
+memcpy96:
+	call memcpy32
+memcpy64:
+	call memcpy32
+	branch memcpy32
+memcpy12:
+	call memcpy8
+memcpy4:
+	ifetch 4,contr
+	istore 4,contw
+	rtn	
+memcpy8:
+	ifetch 8,contr
+	istore 8,contw
+	rtn	
+
+memcpy48:
+	call memcpy16
+memcpy32:
+	call memcpy8
+memcpy24:
+	call memcpy8
+memcpy16:
+	call memcpy8
+	branch memcpy8
+
+
+
+delay_10ms:
+	arg 10,loopcnt
+delay_ms_wait:
+	nop 12000
+	loop delay_ms_wait
+	rtn
+
+bn_zero:
+	force 3,loopcnt
+memset0:
+	force 0,pdata
+memset8:
+	istore   8,contw
+	loop   memset8
+	rtn
+
+memset0_8:
+	force 0,pdata
+	istore 8,contw
+	rtn
+memset0_4:
+	force 0,pdata
+	istore 4,contw
+	rtn	
+	
+clear_mem_256:
+	force 4,loopcnt
+	branch memset0 
+clear_mem_512:
+	force 8,loopcnt
+	branch memset0 
+
+clear_mem:
+	deposit loopcnt
+	rtn blank
+	setarg 0
+clear_mem_loop:
+	istore 1,contw
+	loop clear_mem_loop
+	rtn
+	
+
+clear_temp_block:
+	arg 32,loopcnt
+	arg mem_temp_block0,contw
+	branch clear_mem
+	
+xor_loop:
+	ifetch   4,regc
+	ifetcht 4,rega
+	ixor     temp,pdata
+	istore   4,contw	
+	increase 4,rega
+	increase 4,regc
+	loop  xor_loop
+	rtn
+	
+// 11 22 -> 22 11; 11 22 33 -> 33 22 11 
+// rega:data addr ;loopnct:length
+inverse_data:
+	bpatchx patch3f_3,mem_patch3f
+	copy loopcnt,pdata
+	sub pdata,1,null
+	rtn positive
+	iadd rega,regb	
+	increase -1,regb
+	rshift loopcnt,loopcnt
+inverse_loop:
+	ifetcht 1,rega
+	ifetch 1,regb
+	istore 1,rega
+	istoret 1,regb
+	increase -1,regb
+	increase 1,rega
+	loop inverse_loop
+	rtn
+
+
+memcpy_fast:
+	deposit loopcnt
+	rtn blank
+memcpy_fast_loop:
+	increase -8,loopcnt
+	call memcpy8,positive
+	rtn zero
+	branch memcpy_fast_loop,positive
+	increase 8,loopcnt
+memcpy_fast_loop_four:
+	increase -4,loopcnt
+	call memcpy4,positive
+	rtn zero
+	branch memcpy_fast_loop_four,positive
+	increase 4,loopcnt
+	branch memcpy
+ 
+memcpy:
+	deposit loopcnt
+	rtn blank
+memcpy_loop:
+	ifetch 1,contr
+	istore 1,contw
+	loop memcpy_loop
+	rtn
+
+timer_stop:
+	setarg 0
+timer_init:
+	rshift clkn_bt,temp
+	storet 4,mem_last_clkn
+	arg mem_timers,contw
+	iforce temp
+	lshift queue,pdata
+	iadd contw,contw
+	istoret 2,contw
+	bpatchx patch3f_4,mem_patch3f
+	rtn
+
+timer_check_timeout:
+	arg 0x800,timeup
+	lshift16 timeup,timeup
+	iadd timeup,pdata
+	rtn
+
+
+timer_reinit:
+	arg 0,queue
+timer_check:
+	bpatchx patch3f_5,mem_patch3f
+	fetcht 4,mem_last_clkn
+	rshift clkn_bt,pdata
+	store 4,mem_last_clkn	
+	isub temp,null
+	ncall timer_check_timeout,positive	
+	isub temp,timeup
+	copy timeup,temp
+	arg mem_timers,contr
+	copy contr,contw
+	arg 16,loopcnt
+timer_loop:
+	ifetch 2,contr
+	isub temp,pdata
+	branch timer_counting,positive
+	force 0,pdata
+timer_counting:
+	istore 2,contw
+	loop timer_loop	
+	arg mem_timers,contr
+	lshift queue,pdata
+	iadd contr,contr
+	ifetch 2,contr
+	rtn
+
+
+
+	/* pdata 28+16 bit add temp 26+16 bit, result in temp */
+clk_add:
+	iadd temp,temp
+	copy temp, loopcnt
+	setarg 3750
+	isub loopcnt,pdata
+	rtn positive
+	sub pdata,0,pdata
+	rshift16 temp,temp
+	increase 1,temp
+	lshift16 temp,temp
+	ior temp,temp
+	rtn
+
+clk_diff_rt:
+	call clk_diff
+	branch clk2rt
+
+/* pdata -temp -> pdata, all are 28+16 bits, set user if negative */
+clk_diff:
+	disable user
+	isub temp,pdata
+	branch clk_diff_pos,positive
+	enable user
+	sub pdata,0,pdata
+clk_diff_pos:
+	rtnbit0 15
+	arg -61786,temp
+	iadd temp,pdata
+	set0 64,pdata
+	rtn
+
+clk2rt:
+	iforce contr
+	rshift16 pdata,pdata
+	arg 3750,temp
+	imul32 temp,pdata
+	iadd contr,pdata
+	rtn
+
+	/* pdata = clks in, temp = lpo out */
+clk2lpo:
+	lshift8 pdata,pdata
+	lshift4 pdata,pdata
+	fetcht 3,mem_clks_per_lpo
+	idiv temp
+	call wait_div_end
+	quotient temp
+	rtn
+
+	/* rt clk -> bt+rt clk */
+clk2bt:
+	arg 3750,temp
+	idiv temp
+	call wait_div_end
+	quotient pdata
+	lshift16 pdata,pdata
+	remainder temp
+	ior temp,temp
+	rtn
+
+
+
+//input:contru 
+//output:temp
+//used register: temp regc
+string2dec_from_uart:
+	arg 0,temp
+string2dec_from_uart_done:
+         copy temp,regc
+	ifetch 1,contru
+	call uchar2dialog	
+	copy regc,temp
+	call swap
+	arg 10,regb
+	imul32 regb,pdata
+	iadd temp,pdata
+	copy pdata,temp
+	loop string2dec_from_uart_done
+	rtn
+	
+
+
+uchar2dialog:
+	arg 0x3a,temp
+	isub temp,null
+	nbranch uchar2dialog_number,positive
+	arg 0x61,temp
+	isub temp,null
+	branch uchar2dialog_a2f,positive
+	arg 0x37,temp
+	isub temp,pdata
+	rtn
+uchar2dialog_number:
+	arg 0x30,temp
+	isub temp,pdata
+	rtn
+uchar2dialog_a2f:
+	arg 0x57,temp
+	isub temp,pdata
+	rtn
+
+pn9:
+	copy temp,alarm
+	setarg 0x1ff
+	force 0,regb
+pn9_loop:	
+	rshift3 pdata,rega
+	rshift rega,rega
+	ixor rega,rega
+	isolate1 0,rega
+	setflag true,9,pdata
+	rshift temp,temp
+	isolate1 0,pdata
+	setflag true,7,temp
+	rshift pdata,pdata
+	increase 1,regb
+	compare 0,regb,0x7
+	nbranch pn9_loop,true
+	istoret 1,contw
+	loop pn9_loop
+	copy alarm,temp
+	rtn
+
+
+wait_div_end:	
+	rtn modone
+	branch wait_div_end
+
+
+
+//input:
+//	count:loopcnt str1:rega str2:regb
+//output:
+//	same:set falg true ,diff set falg false
+// using:
+//	reg:temp null flag:zero
+compare_loop:
+string_compare:
+	ifetch 1,rega
+	ifetcht 1,regb
+	isub temp,null
+	nrtn zero
+	increase 1,rega
+	increase 1,regb
+	loop string_compare
+	force 0,null
+	rtn
+
+	/* pdata = temp if pdata > temp */
+ceiling:
+	isub temp,null
+	nrtn positive
+	deposit temp
+	rtn
+	
+swap:
+	iadd temp,pdata
+	isub temp,temp
+	isub temp,pdata
+	rtn
+
+clean_mem:
+	arg 0x200,loopcnt
+	arg 0x4000,contw
+	branch memset0				// clear xram at boot
+
+	//cb function ptr in pdata
+callback_func:
+	rtn blank
+	copy pdata,pc	//rtn through cb functon.
+	//branch assert
+
+wait_uarttx:
+	hfetch 2,core_uart_txitems
+	nbranch wait_uarttx,blank
+	rtn
+
+ice_break:
+	jam 0x1,core_ice_ctrl
+	rtn
+
+ice_setbp:
+	hstore 2,core_ice_break0
+	hfetch 1,core_ice_ctrl
+	set1 4,pdata
+	hstore 1,core_ice_ctrl
+	rtn
+ice_setbp2:
+	hstore 2,core_ice_break1
+	hfetch 1,core_ice_ctrl
+	set1 6,pdata
+	hstore 1,core_ice_ctrl
+	rtn
+	
+ice_set_write_bp:
+	hstore 2,core_ice_break0
+	jam 0x30,core_ice_ctrl
+	rtn
+	
+
+
+test_enable_white:
+	hfetch 1,core_config
+	set0 whiteoff_bit,pdata
+	hstore 1,core_config			/* whitening on */
+	rtn
+
+check_uart_tx_buff:
+	hfetch 2,core_uart_txitems
+	arg UART_AIR_CONTROL_THRESHOLD,temp
+pdata_sub_temp:
+	isub temp,null
+	rtn
+
+	//fuction fifo_in
+	//rega pointer to fifo memory , *(rega+len) is the end of fifo
+	//mem_fifo_temp data into fifo
+	//assert if fifo was full
+fifo_in:
+	bpatchx patch3f_6,mem_patch3f
+	ifetcht UTIL_FIFO_LEN,rega
+	and temp,0xff,pdata
+	nbranch fifo_in_push,blank
+	rshift8 temp,pdata
+	istore UTIL_FIFO_LEN,rega
+fifo_in_push:
+	increase UTIL_FIFO_LEN+UTIL_FIFO_OFFSET,rega
+	ifetch 1,rega
+	nbranch assert,blank //fifo full
+	fetch 1,mem_fifo_temp
+	istore 1,rega
+	rtn
+	
+	//fuction fifo_out
+	//rega pointer to fifo memory
+	//pdata  data from fifo, blank mains fifo empty
+fifo_out:
+	bpatchx patch3f_7,mem_patch3f
+	arg UTIL_FIFO_LEN,loopcnt
+	ifetch UTIL_FIFO_LEN,rega
+	rtn blank
+fifo_out_loop:
+	ifetch 1,rega
+	nbranch fifo_out_end,blank
+	increase 1,rega
+	loop fifo_out_loop
+	branch assert
+fifo_out_end:
+	arg 0,temp
+	istoret 1,rega
+	rtn
+
+	//fuction fifo_is_empty
+	//rega pointer to fifo memory
+	//blank--- fifo is empty
+fifo_is_empty:
+	ifetch UTIL_FIFO_LEN,rega
+	rtn
+
+	//fuction fifo_is_full
+	//rega pointer to fifo memory
+	//blank--- fifo is NOT full
+fifo_is_full:
+	ifetch 1,rega
+	rtn
+	//rega pointer to fifo memory
+	//blank--- fifo is NOT near full
+fifo_is_near_full:
+	ifetch 2,rega
+	rtn
+
+	//rega pointer to fifo memory
+	//count output via pdata
+fifo_content_count:
+	arg 0,temp
+fifo_content_count_loop:
+	fetch 1,contr
+	loop fifo_content_count_loop,blank
+	increase 1,temp
+	loop fifo_content_count_loop
+	copy temp,pdata
+	rtn
+	
+not_greater_than:
+	isub temp,null
+	nrtn positive
+	copy temp,pdata
+	rtn
+
+
+disable_positive:
+	force -1,null
+	rtn
+enable_positive:
+disable_zero:
+	force 1,null
+	rtn
+enable_zero:
+	force 0,null
+	rtn
+
+enable_user:
+	enable user
+	rtn
+	
+disable_user:
+	disable user
+	rtn
+	
+enable_user2:
+	enable user2
+	rtn
+	
+disable_user2:
+	disable user2
+	rtn
+
+disable_blank:
+	setarg 1
+	rtn
+
+enable_blank:
+	setarg 0
+	rtn
+
+
+reverse_byte:
+	copy loopcnt,pdata
+	rtn blank
+	copy contr,pdata
+	iadd loopcnt,pdata
+	increase -1,pdata
+	copy pdata,contr	
+reverse_loop:
+	ifetch 1,contr
+	increase -2,contr
+	istore 1,contw
+	loop reverse_loop
+	rtn
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/109x.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/109x.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/109x.dat	(working copy)
@@ -0,0 +1,37 @@
+
+mem_lpm_config:8f 1b ce	#4khz
+mem_lpm_xtalcnt:00 0a 0b ef 07
+mem_lpm_hibernate_switch:00
+mem_gpio_wakeup_low:00 00 00 00 00 00 00 00
+#mem_fcomp_mul:02
+#mem_fcomp_div:24
+mem_iscan_window:12 00
+mem_iscan_interval:00 02
+mem_pscan_window:12 00
+mem_pscan_interval:00 02
+mem_inq_window:20 00
+mem_page_window:20 00
+mem_page_to:00 40
+mem_rx_window_init:80 04
+mem_rx_window_sniff:00 08
+
+mem_seqi:00
+
+#write to null
+mem_24g_head_ptr:00 84
+
+
+mem_tx_power:00#0dbm
+mem_rf_init_data_new:
+# tx power
+4b ba
+55 d0
+56 e0
+57 88
+58 6c
+59 10
+ff
+mem_rf_init_ptr:mem_rf_init_data_new
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/AntiLost.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/AntiLost.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/AntiLost.dat	(working copy)
@@ -0,0 +1,174 @@
+mem_antl_queue_width:0a 08
+mem_queue_ptr:mem_antl_queue_width
+mem_antl_lpm_interval:14 00
+mem_antl_adv_interval:10 00
+mem_antl_slow_adv_lpm_interval:a0 00
+mem_antl_slow_adv_adv_interval:3b 06
+
+
+#mem_le_notify_handle:0a 00
+mem_device_option:0f
+mem_le_adv_channel_map:07 
+#mem_ssp_enable:01
+
+mem_ui_button_gpio:08
+mem_ui_button_timeout:1e
+mem_ui_button_last_state:01
+
+mem_antl_fast_adv_timeout:64 00
+mem_antl_le_sleep_timeout:b0 04
+
+mem_power_param_ptr:mem_antl_power_param
+mem_antl_power_off_timeout:0f 0c
+mem_ui_led_struct_num:02
+mem_ui_led_struct_ptr:mem_antl_led_style
+mem_antl_led_gpio:1b
+mem_antl_buzzer_gpio:83
+
+
+mem_antl_fast_adv_led_style:01 ff 1b 32 00 f0 00
+mem_antl_slow_adv_led_style:01 ff 1b 32 00 4e 0c
+mem_antl_power_starting_led_style:01 03 1b 96 00 96 00
+mem_antl_power_starting_buzzer_style:01 03 83 96 00 96 00
+mem_antl_power_off_led_style:01 01 1b 80 0c 00 00
+mem_antl_power_off_buzzer_style:01 01 83 80 0c 00 00
+mem_antl_alert_led_stlye:01 ff 1b 32 00 0e 06
+mem_antl_alert_buzzer_stlye:01 ff 83 32 00 0e 06
+mem_antl_key_led_style:01 01             1b 32 00 32 00
+mem_antl_key_buzzer_style:01 01              83 32 00 32 00
+
+
+
+#mem_le_pres:02 03 00 01 10 02 01
+mem_le_pres_auth:01
+mem_le_pres:02 03 00 05 10 02 03
+mem_le_transmit_window:50
+mem_rx_window_sniff_inc:00 40
+mem_le_local_mtu:17
+
+
+mem_le_lap:0a 89 73 70 b4 c1
+mem_le_name_len:
+#with 5 spaces
+'TrackerPA     
+
+mem_le_adv_data_len:1e
+mem_le_adv_data:
+#appearance
+03 19 c1 03
+#flags
+02 01 05
+#tx power level
+02 0a 00
+#complete uuid
+03 03 f0 ff
+#complete local name
+#with 5 spaces
+'\09TrackerPA     
+mem_le_scan_data_len:10
+mem_le_scan_data:
+#with 5 spaces
+'\09TrackerPA     
+
+#mem_adv_lap_ptr:mem_le_adv_data+2
+
+
+mem_keyscan_ptr:mem_antl_key_num
+mem_lpm_mode:01
+mem_lpm_overhead:06
+mem_lpm_mult_timeout:02
+
+mem_interval_increment:04 00
+mem_antl_le_interval_min:
+18 00 #min interval
+20 00 #max interval
+10 00 #latency
+58 02 #timeout
+mem_antl_le_unnormal_interval_min:
+10 01 #min interval
+90 01 #max interval
+00 00 #latency
+58 02 #timeout
+
+mem_antl_led_num:01
+mem_antl_led_gpio_map:
+1b
+ff
+ff
+ff
+
+
+mem_antl_key_num:01
+mem_antl_key_conf0:
+#0
+08
+#1
+ff
+#2
+ff
+#3
+ff
+mem_antl_key0_press:
+06
+0a 00
+5a 6b #header
+00    #opcode(from 01 to fe) #6th byte
+00 00 #data length
+00    #sum
+#key0release for doubleclick
+mem_antl_key0_release:
+07 #0th byte
+0a 00
+5a 6b #header
+00    #opcode(from 01 to fe)for doubleclick #5th byte
+00 01 #data length 0x0001 (not 0x0100,byteswaped after loading)
+00   #8th byte
+00	 #sum
+mem_adc_config_flag:00
+mem_adc_timeout:b0 04
+mem_battery_calculate_set:
+2c 01
+fa 00
+00 00
+00 00
+
+#mem_empty_count:03
+mem_alarm_config:01
+mem_alarm_config_notfy_cnt:01
+
+#beep
+mem_buzzer_pwm_conf:
+03	#pwm gpio
+04	#pwm channel
+a0	#three  byte frequency
+0f
+00
+32 #duty cycle (by percent %)
+
+mem_ui_le_uuid_table:mem_AntiLost_le_att_list
+#attribute list: handle 2bytes  uuid 2bytes  length 1bytes  attribute Nbytes
+mem_AntiLost_le_att_list:
+#Primary service GAP ------
+01 00  02 00 28 02 00 18
+#Device name
+02 00 02 03 28 01 0a
+03 00 02 00 2a 04 31 32 33 34
+#Appearance
+04 00 02 03 28 01 02
+05 00 02 01 2a 02 c8 00 #3c2=hid mouse
+#Peripheral Preferred Connection Parameters
+06 00 02 03 28 01 02
+07 00 02 04 2a 08 08 00 20 00 10 00 58 02 # interval 6ms, latency 100, timeout 600
+#Primary service yichip transmit ------
+08 00 02 00 28 02 f0 ff
+
+09 00 02 03 28 01 12
+0a 00 02 f1 ff 08 00 00 00 00 00 00 00 00
+0b 00 02 02 29 02 00 00
+
+0c 00 02 03 28 01 08
+0d 00 02 f2 ff 08 00 00 00 00 00 00 00 00
+#End of Attribute list
+00 00
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/DM_module.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/DM_module.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/DM_module.dat	(working copy)
@@ -0,0 +1,435 @@
+
+mem_device_option:0a
+mem_ui_profile_supported:40
+mem_app_connection_options:13
+
+mem_features:
+ff
+ff
+8f
+f8      #fe--EDR  F8--BR
+9b      #AFHclose 83
+9d
+59
+83
+
+##############ADC CONFIG##############
+mem_module_read_vdd_count:01
+mem_module_read_vdd_flag:01
+#####################################
+
+##############NVRAM CONFIG##############
+mem_nv_data_ptr:mem_module_nv_data
+mem_nv_data_number:05
+#####################################
+
+##############SPP CONFIG##############
+mem_credit_flag:00
+mem_rfcomm_max_frame_size:7f 00
+mem_rfcomm_credit_init_data:07
+#####################################
+
+##############SSP CONFIG##############
+mem_sp_iocap_local:03 00 04
+mem_ssp_enable:01
+mem_pin_length:04  30 30 30 30 30
+#####################################
+
+##############UART CONFIG##############
+mem_baud:D0 00
+mem_module_uart_rx_buffer:00 1c
+mem_module_uart_rx_buffer_end:ff 1f
+mem_module_uart_tx_buffer:00 4c
+mem_module_uart_tx_buffer_end:ef 4f
+#####################################
+
+
+
+##############BLUETOOTH CONFIG##############
+###commom###
+mem_soft_version_num:00 01
+mem_module_state:03
+mem_module_bluetooth_stauts_by_command:07
+mem_class:24 04 04
+
+mem_module_flag:00
+#bit0 MODULE_FLAG_UART_FLOW_CONTROL
+#bit1 MODULE_FLAG_BLE_SEND_MTU23
+#bit2 MODULE_FLAG_BLE_DATA_ENCRYPT
+
+mem_ui_button_gpio:ff
+mem_lpm_mode:01
+mem_lpm_interval:00 01
+mem_lpm_overhead:08
+mem_lpm_mult_timeout:02
+
+mem_module_wake_up_gpio:1b
+
+###3.0###
+mem_scan_mode:00
+mem_module_spp_lpm_mult:28
+mem_lap:77 1a 21 31 10 3a
+mem_local_name_length:
+'YichipFPGA
+
+###3.0 sinff param###
+mem_sniff_param_interval:20 00
+mem_sniff_param_attempt:01
+mem_sniff_param_timeout:00
+
+
+###ble###
+mem_le_pairing_handle:2a 00
+mem_le_configuration:08
+
+mem_le_secure_connect_enable:00
+mem_le_adv_channel_map:07
+mem_le_pairing_mode:01
+
+mem_module_data_write_handle:2d 00
+mem_module_data_write_handle2:2f 00
+
+
+mem_le_adv_enable:00
+mem_le_adv_interval:f0 00
+mem_module_le_lpm_mult:05
+mem_le_lap:2a 31 00 33 02 3a
+mem_le_name_len:
+'Yichip 1021s Mou
+
+mem_le_adv_data_len:03
+mem_le_adv_data:
+02 01 0e
+
+mem_le_scan_data_len:0e
+
+mem_le_scan_data:# 1 byte length + 1 byte type + N bytes data
+'\09Yichip 1021s Mou
+
+mem_le_pres:02 03 00 05 10 02 03
+
+mem_le_interval_min:
+08 00 #min interval
+10 00 #max interval
+00 00 #latency
+2c 01 #timeout
+
+
+mem_le_local_mtu:b5
+mem_le_remote_mtu:17
+
+
+#####################################
+
+
+mem_eir_enable:01
+mem_all_uuid_16bits: 
+05
+03#Type: Complete list of 16-bit UUIDs
+0012 0001 0100 0111 0300 
+
+mem_all_uuid_128bits:
+00
+
+
+mem_ui_uuid_table:mem_module_uuid_list
+
+mem_module_uuid_list:
+03
+12
+00
+01
+00
+00
+01
+00
+01
+00
+01
+36
+00
+52
+09
+00
+00
+0a
+00
+01
+00
+01
+09
+00
+01
+35
+03
+19
+12
+00
+09
+00
+04
+35
+0d
+35
+06
+19
+01
+00
+09
+00
+01
+35
+03
+19
+00
+01
+09
+00
+09
+35
+08
+35
+06
+19
+12
+00
+09
+01
+00
+09
+02
+00
+09
+01
+03
+09
+02
+01
+09
+05
+ac
+09
+02
+02
+09
+02
+39
+09
+02
+03
+09
+06
+44
+09
+02
+04
+28
+01
+09
+02
+05
+09
+00
+02
+03
+11
+01
+00
+03
+01
+00
+00
+01
+00
+03
+36
+00
+46
+09
+00
+00
+0a
+00
+01
+00
+03
+09
+00
+01
+35
+03
+19
+11
+01
+09
+00
+02
+0a
+00
+00
+00
+00
+09
+00
+04
+35
+0c
+35
+03
+19
+01
+00
+35
+05
+19
+00
+03
+08
+01
+09
+00
+06
+35
+09
+09
+65
+6e
+09
+00
+6a
+09
+01
+00
+09
+01
+00
+25
+0a
+53
+50
+50
+20
+73
+6c
+61
+76
+65
+00
+00
+00
+01
+00
+
+
+mem_ui_le_uuid_table:mem_module_le_att_list
+
+#attribute list: handle 2bytes, uuid 2bytes, length 1bytes, attribute Nbytes
+mem_module_le_att_list:
+#Primary service GAP ------
+01 00 02 00 28 02 00 18
+
+
+#Appearance
+02 00 02 03 28 01 02
+03 00 02 01 2a 02 c8 00 #3c2=hid mouse
+
+#Device name
+04 00 02 03 28 01 0a
+05 00 02 00 2a 14 41 73 74 20 4c 45 20 4d 6f 75 73 65 20 20 20 20 20 20 20 20
+
+
+#Peripheral Preferred Connection Parameters
+06 00 02 03 28 01 02
+07 00 02 04 2a 08 06 00 06 00 64 00 2c 01 # interval 6ms, latency 100, timeout 300
+
+
+#privcy flag
+08 00 02 03 28 01 02
+09 00 02 02 2a 01 01
+
+#reconnecting addr 
+0a 00 02 03 28 01 08
+0b 00 02 03 2a 06 00 00 00 00 00 00
+
+#Primary service GATT ------
+0c 00 02 00 28 02 01 18
+
+#Service changed
+0d 00 02 03 28 01 20
+0e 00 02 05 2a 00
+#Client Characteristic Configuration
+0f 00 02 02 29 02 00 00
+
+#Primary service TX power ------
+10 00 02 00 28 02 04 18
+#Characteristic Tx power level
+11 00 02 03 28 01 16
+12 00 02 07 2a 01 00
+13 00 02 02 29 02 00 00
+
+#Primary service Battery ------
+14 00 02 00 28 02 0f 18
+#Characteristic Battery level
+15 00 02 03 28 01 12
+16 00 02 19 2a 01 38
+
+#Primary service device infomation
+17 00 02 00 28 02 0a 18
+#Characteristic system id
+18 00 02 03 28 01 02
+19 00 02 23 2a 03 00 00 00
+
+#Characteristic manufactor name
+1a 00 02 03 28 01 02
+1b 00 02 29 2a 08 46 6c 61 67 74 72 69 70
+
+#Characteristic module number
+1c 00 02 03 28 01 02
+1d 00 02 24 2a 06 79 69 63 68 69 70
+
+#Characteristic serial number
+1e 00 02 03 28 01 02
+1f 00 02 25 2a 04 63 6f 6d 33
+
+#Characteristic firmware version
+20 00 02 03 28 01 02
+21 00 02 26 2a 03 31 2e 30
+
+#Characteristic software version
+22 00 02 03 28 01 02
+23 00 02 28 2a 03 31 2e 30
+
+#Characteristic hardware version
+24 00 02 03 28 01 02
+25 00 02 2a 2a 03 31 2e 30
+
+#Characteristic regulatory version
+26 00 02 03 28 01 02
+27 00 02 25 2a 04 63 6f 6d 33
+
+#Primary service yichip transmit ------
+28 00 02 00 28 10 55 e4 05 d2 af 9f a9 8f e5 4a 7d fe 43 53 53 49
+#Characteristic tx--notify read
+29 00 02 03 28 01 12
+2a 00 10 16 96 24 47 C6 23 61 BA D9 4B 4D 1E 43 53 53 49 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+#Client Characteristic Configuration
+2b 00 02 02 29 02 00 00
+
+#Characteristic rx--write
+2c 00 02 03 28 01 08
+2d 00 10 b3 9b 72 34 be ec d4 a8 f4 43 41 88 43 53 53 49 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+
+#Characteristic rx-- write without Response
+2e 00 02 03 28 01 04
+2f 00 10 fe 69 ca 9a 56 19 f6 ab 02 4d aa 6d 43 53 53 49 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+
+#Characteristic rx tx --read write notify
+30 00 02 03 28 01 1a
+31 0010 18 03 A6 28 5E D8 EC 91 1C 48 A3 AC 43 53 53 49 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+#Client Characteristic Configuration
+32 00 02 02 29 02 00 00
+
+#End of Attribute list
+00 00
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/car.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/car.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/car.dat	(working copy)
@@ -0,0 +1,176 @@
+mem_device_option:0e
+mem_le_adv_channel_map:07 
+mem_le_adv_enable:00
+
+
+mem_spi_ncs_gpio:ff
+
+mem_le_pres_auth:01
+mem_le_local_mtu:17
+mem_le_adv_interval:60 01 
+
+
+
+mem_le_lap:56 78 01 98 07 2b
+mem_le_name_len:
+'YC-CAR-aa
+
+mem_le_adv_data_len:1f
+mem_le_adv_data:
+17 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 02 01 05 03 02 ff f0
+
+mem_le_scan_data_len:1f
+mem_le_scan_data:
+1e 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
+
+
+mem_car_le_att_list:
+
+#Primary service: GATT
+01 00 02 00 28 02 01 18
+#Characteristic: Service changed
+02 00 02 03 28 01 20
+03 00 02 05 2a 01 00
+#Client Characteristic Configuration
+04 00 02 02 29 02 00 00
+
+#Primary Service: GAP
+05 00 02 00 28 02 00 18 
+#Characteristic: Device Name
+06 00 02 03 28 01 02
+07 00 02 00 2a 11 55 43 48 4f 4e 20 30 31 20 20 20 20 20 20 20 20 20
+#Characteristic: Appearance
+08 00 02 03 28 01 02 
+09 00 02 01 2a 02 c8 00 
+#Characteristic: Peripheral Preferred Connection Parameters
+0a 00 02 03 28 01 02
+0b 00 02 04 2a 08 06 00 06 00 64 00 2c 01 # interval 6ms, latency 100, timeout 300
+
+#Primary Service: Device Information
+0c 00 02 00 28 02 0a 18 
+#Characteristic: pnp id
+0d 00 02 03 28 01 02
+0e 00 02 50 2a 07 02 8a 24 66 82 01 00
+
+#Primary Service:Car
+0f 00 02 00 28 02 f0 ff
+#Characteristic: Notify/Read UUID
+10 00 02 03 28 01 12
+11 00 02 f1 ff 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+12 00 02 02 29 02 00 00
+#Characteristic: Write UUID
+13 00 02 03 28 01 08
+14 00 02 f2 ff 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+
+#End of Attribute list
+00 00
+
+
+
+mem_ui_le_uuid_table:mem_car_le_att_list
+
+mem_lpm_mode:00
+mem_lpm_overhead:06
+mem_lpm_mult_timeout:02
+mem_car_hard_soft_switch:00
+
+mem_power_param_ptr:mem_car_soft_power
+mem_car_power_off_timeout:0c 0c
+
+mem_ui_button_gpio:ff
+mem_ui_button_timeout:14
+mem_ui_button_last_state:01
+
+
+mem_ui_led_struct_ptr:mem_car_style1_led_type
+mem_ui_led_struct_num:02
+
+#style:01
+mem_car_style1_blink_count:ff
+mem_car_style1_struct_led_gpio:02
+mem_car_style1_on_time:96 02
+mem_car_style1_off_time:3a 07
+
+#style:02
+mem_car_style2_blink_count:ff
+mem_car_style2_struct_led_gpio:ff
+mem_car_style2_on_time:40 01
+mem_car_style2_off_time:40 01
+
+
+mem_car_led_num:0a
+mem_car_led_map:
+02
+ff
+ff
+ff
+ff
+ff
+ff
+ff
+ff
+ff
+
+mem_car_queue_each_size:14 06
+
+mem_queue_ptr:mem_car_queue_each_size
+
+mem_car_config_pairing_led_conn_status:00
+mem_car_config_soft_switch_enable:00
+mem_car_config_pairing_led_gpio:ff
+mem_car_config_low_voltage_led_gpio:07
+mem_car_config_soft_switch_gpio:ff
+mem_car_config_low_voltage_percent:14
+mem_car_config_bat_notify_enable:01
+mem_car_config_device_select:03
+mem_car_config_ir_enable:01
+mem_car_config_motor_layout:03
+mem_car_config_ir_rx_gpio:06
+mem_car_config_led_num:08
+mem_car_config_blood_led_gpio:08 09 0a 0b 0c 0d 0e 0f
+
+
+mem_motor1_speed:0a
+mem_motor2_speed:0a
+mem_motor3_speed:0a
+mem_motor1_pwm_set:04 14 00 00 e8 03 00 00
+mem_motor2_pwm_set:05 15 00 01 e8 03 00 00
+mem_motor3_pwm_set:16 1b 00 02 e8 03 00 00
+
+mem_car_notify_vdd_count:14
+mem_notify_bat_packet:07 11 00 5a 6b 01 00 01 00 00
+
+mem_vdd_calculate_set:e0 01 90 01 9a 01 00 00	#full_vol;	empty_vol;	low_vol;	now_vol
+
+mem_ir_notify_data:08 11 00 5a 6b 06 00 02 00 00 00
+
+mem_adc_config_flag:01
+
+mem_car_info_request:0e 11 00 5a 6b 08 00 08 00 00 00 00 00 00 00 00 00
+
+mem_car_led_control_timer:05
+
+mem_car_24g_no_data_timeout_count:b8 0b
+
+#mem_car_led_control:01 01 01 01 01 01 01 01
+
+
+mem_tx_power:02
+mem_250k_freq_enable:00
+mem_24g_head_ptr:mem_24g_car_head_ptr
+mem_24g_car_head_ptr+394:4#offset_24g_pair_txpower
+mem_24g_car_head_ptr+146:20 15 10 05#offset_24g_paring_addr
+mem_24g_car_head_ptr+151:00 13 2c 42#offset_24g_ch_map1
+mem_24g_car_head_ptr+155:06 15 36 48#offset_24g_ch_map2
+mem_24g_car_head_ptr+159:0f 1a 3a 4c#offset_24g_ch_map3
+mem_24g_car_head_ptr+163:11 23 31 4d#offset_24g_ch_map4
+mem_24g_car_head_ptr+195:00#offset_24g_no_ack
+mem_24g_car_head_ptr+205:02#offset_24g_mode
+mem_24g_car_head_ptr+137:30 75#offset_24g_rx_window
+mem_24g_car_head_ptr+349:00#offset_24g_pair_mode auto pair
+mem_24g_car_head_ptr+314:38#offset_24g_hop_interval
+mem_24g_car_head_ptr+315:00#offset_24g_ackpayload_enable
+mem_24g_car_head_ptr+299:16 16 17 02#offset_24g_rx_addr
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/fpga.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/fpga.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/fpga.dat	(working copy)
@@ -0,0 +1,36 @@
+
+
+
+4010:c0
+4011:0f
+4022:80
+4023:02
+
+mem_fcomp_mul:02
+mem_fcomp_div:24
+mem_iscan_window:12 00
+mem_iscan_interval:00 10
+mem_pscan_window:12 00
+mem_pscan_interval:00 08
+
+mem_inq_window:20 00
+mem_page_window:20 00
+mem_page_to:00 20
+mem_rx_window_init:80 04
+mem_rx_window_sniff:00 08
+
+
+mem_lpm_xtalcnt:00 0a 1b ef 07
+
+mem_lmp_version:08 0e 05 03 00
+
+mem_eeprom_base:30 ff
+mem_eeprom_block_size:80
+
+mem_context_number:01
+
+mem_rf_init_data:
+ff
+mem_rf_init_ptr:mem_rf_init_data
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/gatt.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/gatt.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/gatt.dat	(working copy)
@@ -0,0 +1,86 @@
+
+#attribute list: handle 2bytes, uuid 2bytes, length 1bytes, attribute Nbytes
+mem_le_att_list:
+
+#Primary service GAP ------
+01 00 00 28 02 00 18
+
+#Device name
+02 00 03 28 01 0a
+03 00 00 2a 0c 41 73 74 20 4c 45 20 4d 6f 75 73 65
+
+#Appearance
+04 00 03 28 01 02
+05 00 01 2a 02 c2 03 #3c2=hid mouse
+
+#Peripheral Preferred Connection Parameters
+06 00 03 28 01 02
+07 00 04 2a 08 06 00 06 00 64 00 2c 01 # interval 6ms, latency 100, timeout 300
+
+#Primary service GATT ------
+08 00 00 28 02 01 18
+
+#Service changed
+09 00 03 28 01 20
+0a 00 05 2a 00
+
+#Client Characteristic Configuration
+0b 00 02 29 02 00 00
+
+#Primary service TX power ------
+0c 00 00 28 02 04 18
+#Characteristic Tx power level
+0d 00 03 28 01 06
+0e 00 07 2a 01 00
+
+
+#Primary service Battery ------
+0f 00 00 28 02 0f 18
+#Characteristic Battery level
+10 00 03 28 01 12
+11 00 19 2a 01 38
+
+#Primary service yichip transmit ------
+12 00 00 28 02 f0 18
+#Characteristic tx--notify
+13 00 03 28 01 12
+14 00 f1 2a 14	# for Android device, ATT MTU is just 23 bytes, so payload is 20 bytes max
+'Test read initial va
+#Client Characteristic Configuration
+15 00 02 29 02 00 00
+#Characteristic rx--write
+16 00 03 28 01 0c
+17 00 f0 2a 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+
+#End of Attribute list
+00 00
+
+mem_le_adv_enable:01
+mem_le_adv_data_len:03
+
+mem_le_adv_data:02 01 05
+#flags NOTE: should be included here, or Android will not do connectgatt()
+
+
+mem_le_scan_data_len:17
+
+mem_le_scan_data:	# 1 byte length + 1 byte type + N bytes data
+
+#complete local name
+0e 09 
+#'Ast LE2Serial
+'YiChip BLE2IR
+
+#16bit uuid
+03 03 00 f0
+
+#Apperance
+03 19 40 02
+
+
+mem_le_adv_interval:00 08 
+mem_le_adv_direct_addr_type:01
+mem_le_adv_channel_map:07 
+
+mem_lap:77 11 00 33 00 00
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/hci.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/hci.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/hci.dat	(working copy)
@@ -0,0 +1,8 @@
+#device parameters
+mem_lap:88 11 00 33 00 00
+mem_local_name_length:09
+mem_local_name:'Bluetooth
+mem_device_option:01
+mem_ssp_enable:01
+mem_lpm_mode:01
+mem_3v_adc_data:00 00
\ No newline at end of file
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/hci_boot.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/hci_boot.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/hci_boot.dat	(working copy)
@@ -0,0 +1,11 @@
+
+mem_patch00:01
+mem_lpm_config:8f 10 ca
+mem_le_att_list+485:
+68 e4
+69 00
+6a 00
+6b 30
+ff
+mem_rf_init_ptr:mem_le_att_list+485
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/le_prcp.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/le_prcp.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/le_prcp.dat	(working copy)
@@ -0,0 +1,80 @@
+#attribute list: handle 2bytes, uuid 2bytes, length 1bytes, attribute Nbytes
+mem_le_att_list:
+
+#Primary service GAP ------
+01 00 00 28 02 00 18
+
+#Device name
+02 00 03 28 01 0a
+03 00 00 2a 0c 41 73 74 20 4c 45 20 4d 6f 75 73 65
+
+#Appearance
+04 00 03 28 01 02
+05 00 01 2a 02 c2 03 #3c2=hid mouse
+
+#Peripheral Preferred Connection Parameters
+06 00 03 28 01 02
+07 00 04 2a 08 06 00 06 00 64 00 2c 01 # interval 6ms, latency 100, timeout 300
+
+#Primary service GATT ------
+08 00 00 28 02 01 18
+
+#Service changed
+09 00 03 28 01 20
+0a 00 05 2a 00
+
+#Client Characteristic Configuration
+0b 00 02 29 02 00 00
+
+#Primary service TX power ------
+0c 00 00 28 02 04 18
+#Characteristic Tx power level
+0d 00 03 28 01 06
+0e 00 07 2a 01 00
+
+
+#Primary service Battery ------
+0f 00 00 28 02 0f 18
+#Characteristic Battery level
+10 00 03 28 01 12
+11 00 19 2a 01 38
+
+#Primary service yichip PRCP ------
+12 00 00 28 02 f1 18
+#Characteristic device tx
+13 00 03 28 01 12
+14 00 f3 2a 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+#Client Characteristic Configuration
+15 00 02 29 02 00 00
+#Characteristic device rx
+16 00 03 28 01 0e
+17 00 f2 2a 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+#End of Attribute list
+00 00
+
+mem_le_adv_data_len:1b
+mem_le_adv_data:0c 09
+'Yichip Temp
+ 03 19 40 02 02 01 05 02 0a 00 03 03 f1 18
+mem_le_scan_data_len:00
+#mem_le_adv_param:00 08 00 08 00 01 00 00 00 00 00 00 00 07 00
+mem_le_adv_enable:01
+
+
+mem_le_adv_interval:20 00 
+mem_le_adv_type:00 
+mem_le_adv_own_addr_type:01 
+mem_le_adv_direct_addr_type:01
+mem_le_adv_direct_addr:00 00 00 00 00 00 
+mem_le_adv_channel_map:07 
+
+mem_le_notify_handle:14
+
+mem_lpm_mode:00
+#mem_lpm_ctrl:0f 0f 10 06
+mem_lpm_xtalcnt:0c 10 ca 1f
+mem_device_option:0d
+mem_fcomp_div:24
+mem_fcomp_mul:02
+mem_le_lap:45 67 78 89 90 56
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/le_transmit_uuid.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/le_transmit_uuid.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/le_transmit_uuid.dat	(working copy)
@@ -0,0 +1,62 @@
+mem_device_option: 01
+
+#attribute list: handle 2bytes, uuid 2bytes, length 1bytes, attribute Nbytes
+mem_le_att_list:
+
+#Primary service GAP ------
+01 00 00 28 02 00 18
+
+#Device name
+02 00 03 28 01 0a
+03 00 00 2a 0c 41 73 74 20 4c 45 20 4d 6f 75 73 65
+
+#Appearance
+04 00 03 28 01 02
+05 00 01 2a 02 c2 03 #3c2=hid mouse
+
+#Peripheral Preferred Connection Parameters
+06 00 03 28 01 02
+07 00 04 2a 08 06 00 06 00 64 00 2c 01 # interval 6ms, latency 100, timeout 300
+
+#Primary service GATT ------
+08 00 00 28 02 01 18
+
+#Service changed
+09 00 03 28 01 20
+0a 00 05 2a 00
+
+#Client Characteristic Configuration
+0b 00 02 29 02 00 00
+
+#Primary service TX power ------
+0c 00 00 28 02 04 18
+#Characteristic Tx power level
+0d 00 03 28 01 06
+0e 00 07 2a 01 00
+
+
+#Primary service Battery ------
+0f 00 00 28 02 0f 18
+#Characteristic Battery level
+10 00 03 28 01 12
+11 00 19 2a 01 38
+
+#Primary service yichip transmit ------
+12 00 00 28 02 f0 18
+#Characteristic tx--notify
+13 00 03 28 01 12
+14 00 f1 2a 17 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+#Client Characteristic Configuration
+15 00 02 29 02 00 00
+#Characteristic rx--write
+16 00 03 28 01 0c
+17 00 f0 2a 17 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+
+#End of Attribute list
+00 00
+
+mem_le_adv_data_len:1b
+mem_le_adv_data:0c 09 52 74 72 69 76 72 5f 52 36 32 31 03 19 40 02 02 01 05 02 0a 00 03 03 00 f0
+mem_le_scan_data_len:00
+mem_le_adv_param:00 08 00 08 00 01 00 00 00 00 00 00 00 07 00
+mem_le_adv_enable:01
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/light.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/light.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/light.dat	(working copy)
@@ -0,0 +1,18 @@
+mem_patch3a:02
+mem_patch1f:20
+
+mem_light_pwm0:04
+mem_light_pwm1:05
+mem_light_pwm2:1b
+mem_light_pwm3:1c
+mem_light_pwm4:03
+mem_light_pwm5:08
+mem_ui_button_gpio:ff
+
+mem_light_cnum:14
+mem_light_pairing_timer:00 02
+mem_light_pairing_enable:01
+mem_le_scan_enable:01
+mem_le_scan_interval:50 00
+mem_le_scan_window:40 00
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/mouse.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/mouse.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/mouse.dat	(working copy)
@@ -0,0 +1,929 @@
+#G24 allpowerful
+mem_patch00:07
+mem_patch10:20
+mem_patch11:02
+mem_patch14:02
+mem_patch16:06
+mem_patch18:10
+mem_patch19:06
+mem_patch1c:48
+mem_patch1d:1c
+mem_patch27:80
+mem_patch31:10
+
+#mem_patch00:02
+#mem_patch03:08
+#mem_patch04:40
+#mem_patch09:04
+#mem_patch0a:02
+#mem_patch0b:02
+#mem_patch10:20
+#mem_patch11:02
+#mem_patch14:82
+#mem_patch15:20
+#mem_patch16:06
+#mem_patch18:10
+#mem_patch19:0e
+#mem_patch1c:48
+#mem_patch1d:1e
+#mem_patch20:20
+#mem_patch27:02
+#mem_patch28:08
+#mem_patch29:04
+#mem_patch2a:80
+#mem_patch2b:02
+#mem_patch2c:c8
+#mem_patch2d:04
+#mem_patch2e:80
+#mem_patch30:05
+#mem_patch31:11
+#mem_patch3f:04
+
+
+#debug
+#mem_patch2f:40
+#mem_patch37:40
+#mem_patch3e:c0
+
+
+mem_device_option:40
+mem_lpm_mode:01
+mem_lpm_mult:20
+mem_lpm_mult_init:20
+#mem_lpm_interval:00 00
+
+mem_mouse_function_enable:
+#bit0 MOUSE_ENABLE_USB
+#bit1 MOUSE_ENABLE_24G
+#bit2 MOUSE_ENABLE_SPI2
+#bit3 MOUSE_ENABLE_FLASH
+#bit4 MOUSE_ENABLE_EEPROM
+#bit5 MOUSE_ENABLE_STATUE_UP_THREE_LED
+#bit6 MOUSE_ENABLE_STATUE_UP
+#bit7 MOUSE_ENABLE_DPI_LED_BLINK
+12
+#bit0 MOUSE_ENABLE_BLE_RANDOM_ADDRE
+#bit1 MOUSE_ENABLE_2K_EEPROM
+#bit2 MOUSE_ENABLE_ADC
+#bit3 MOUSE_ENABLE_INIT_DELAY
+#bit4 MOUSE_ENABLE_DISCOVERY_SENSOR_LED
+#bit5 MOUSE_ENABLE_AUTO_24G_PARING
+#bit6 MOUSE_ENABLE_WAKEUP_FROM_POWER
+#bit7 MOUSE_ENABLE_GPIO_CONTROL_ADC_SENSOR
+41
+
+mem_app_connection_options:06
+mem_lap:20 51 17 01 20 20
+mem_local_name_length:
+'BT3.0 Mouse
+mem_sniff_param_interval:
+0e 00 ##mem_sniff_param_interval:0e 00 report 115hz,0c 00 report 125hz
+01 00 ##mem_sniff_param_attempt:01 00
+02##mem_sniff_param_timeout:00 00
+
+
+mem_unsniff2sniff_timer:0a
+mem_ssp_mode_flag:03
+mem_ssp_enable:01
+##mem_all_uuid_16bits:
+##06
+##03#Type: Complete list of 16-bit UUIDs
+##0011 0100 1002 1124  1200  0001
+mem_all_uuid_128bits:00
+mem_ptt:00
+
+
+mem_sp_iocap_local:03 00 04
+mem_ui_profile_supported:01
+mem_eir_enable:01
+
+mem_le_adv_data_len:1f
+mem_le_adv_data:
+#flag 
+02 01 05
+
+#uuid
+03 03 12 18
+
+#appearance
+03 19 c2 03
+
+mem_le_adv_swift_pair:
+#microsoft swift pair
+06 ff 06 00 03 00 80
+#name
+'\09BT5.0 Mouse
+
+mem_le_scan_data_len:1f
+mem_le_scan_data:
+#name
+'\09BT5.0 Mouse
+
+
+#max 20bytes, att list data rom limits
+mem_le_name_len:
+'BT5.0 Mouse
+
+
+mem_le_interval_min:
+07 00 #min interval	if need 125hz,set 0x0006;else 115hz set 0x0007
+07 00 #max interval 	if nedd 125hz,set 0x0006;else 115hz set 0x0007
+20 00 #latency
+2c 01 #timeout
+
+
+mem_le_adv_interval:00 00
+mem_le_adv_type:00 
+mem_le_adv_own_addr_type:00
+mem_le_adv_channel_map:07 
+
+mem_le_lap:8e b1 3a 0e 8e ed
+
+mem_le_transmit_window:50
+
+mem_le_notify_handle:19 00
+mem_le_pairing_handle:22 00
+
+
+mem_discovery_timeout:08 07#3min
+mem_mouse_direct_timeout:50 00#8s
+mem_mouse_no_data_timeout:70 17 #10min
+
+
+mem_spi_ncs_gpio:ff
+mem_ui_button_gpio:ff
+mem_ui_button_timeout:1e
+
+mem_device_number:02 #max device number
+mem_24g_device_number:02 #devie 2 :24g mode
+#mem_adc_config_flag:02 #0 vinlpm 1 hvin 2 gpio
+#mem_adc_channel:32 #gpio5
+#mem_mouse_vdd_full_vol:96 00#1.5v
+#5a 00#mem_mouse_vdd_empty_vol:5a 00#0.9v
+#64 00#mem_mouse_vdd_low_vol:64 00  #1v
+
+mem_config_sensor_type:00
+02 #mem_config_sensor_motion:02
+06 #mem_lbutton_gpio:04
+08 #mem_rbutton_gpio:1b
+04 #mem_mbutton_gpio:17
+ff#mem_bk_button_gpio:ff
+ff #mem_fw_button_gpio:ff
+ff #mem_dpi_button_gpio:06
+1b #mem_whee_a_data_gpio:02
+1c #mem_whee_b_data_gpio:03
+ff #mem_whee_ta_data_gpio:ff
+ff #mem_whee_tb_data_gpio:ff
+ff #mem_config_bt_button_gpio:ff
+ff #mem_config_select_device_button_gpio:ff
+ff #mem_config_paraing_led_gpio:ff
+ff #mem_config_low_voltage_alarm_gpio:08
+05 #mem_config_device1_led_gpio:08
+ff #mem_config_device2_led_gpio:ff
+ff #mem_config_device3_led_gpio:ff
+03 #mem_sensor_data_gpio:18
+ff #mem_dpi_led_gpio:08
+00 #mem_config_function_enable:04
+00 #mem_config_sensor_angle:00
+ff #mem_select_sensor_angle_gpio:ff
+ff #mem_select_adc_gpio:ff
+
+mem_eeprom_wp_gpio:14
+mem_sensor_reset_gpio:ff
+mem_sensor_squal_reg:07# 07:3205         	06:3610
+mem_usb_offline_check_gpio:ff
+#mem_wire_usb_interval:19 #128
+
+#mem_config_function_enable:
+#bit0 ENABLE_BT_DISCOVERY_BY_GPIO_LED
+#bit1 ENABLE_MODE_LED
+#bit2 ENABLE_LOW_VOLTAGE_LED
+#bit3 ENABLE_DEVICE_LED
+#bit4 ENABLE_BT_BUTTON
+#bit5 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON
+#bit6 ENABLE_SELECT_DEVICE_BY_SWITCH
+#00
+
+mem_mouse_dpi_seting:
+00##mem_320x_dpi_1
+01##mem_320x_dpi_2
+02##mem_320x_dpi_3
+03##mem_320x_dpi_4
+
+#15##mem_3212_dpi_1
+#1a##mem_3212_dpi_2
+#22##mem_3212_dpi_3
+#2a##mem_3212_dpi_4
+
+#04##mem_3610_dpi_1
+#05##mem_3610_dpi_2
+#07##mem_3610_dpi_3
+#08##mem_3610_dpi_4
+
+
+mem_ui_led_struct_ptr:mem_mouse_led_type
+mem_ui_led_struct_num:01
+
+
+mem_mouse_le_uuid_sup:
+25 00 02 03 28 01 12 
+26 00 02 4d 2a 07 00 00 00 00 00 00 00 
+27 00 02 02 29 02 00 00
+28 00 02 08 29 02 11 01
+29 00 02 03 28 01 0e 
+2a 00 02 4d 2a 07 00 00 00 00 00 00 00
+2b 00 02 08 29 02 11 02
+
+  
+#24g init
+mem_24g_mode:01#tx
+mem_24g_data_type:01        #mouse 1,kb 2
+mem_24g_max_retry:04#max tx retry
+mem_24g_no_ack:00#with ack
+mem_24g_rx_window:c0 12     #400us
+mem_24g_interval:19		#0x19 24g report 125hz;0x0c,24g report 250hz
+mem_24g_interval_min:19		#0x19 24g report 125hz;0x0c,24g report 250hz
+mem_24g_interval_max:1c	#0x1c 24g report 125hz;0x10,24g report 250hz
+mem_24g_ch_map1:00 13 2c 42
+mem_24g_ch_map2:06 15 36 48
+mem_24g_ch_map3:0f 1a 3a 4c
+mem_24g_ch_map4:11 23 31 4d
+mem_24g_pairing_sm:ff
+mem_24g_paring_addr:20 15 10 05
+mem_24g_common_temp:00 00 00 00 00 00 00 00 00 00
+mem_24g_enter_hibernate:00 48 60
+
+mem_device_flag:
+01
+ff
+ff ff ff ff ff ff
+#mem_device2_type:
+#34
+#11 22 33 44 55 66
+#mem_device3_type:
+#34
+#11 22 33 44 55 66
+
+
+#mem_flash_base:00 70 00
+mem_eeprom_base:90 1f
+mem_eeprom_block_size:80
+mem_reconn_times_init:00
+mem_bt_discovey_button_statue:01#default: button up
+mem_empty_count:03
+
+
+#yichip sdp
+#04 0011 0100 1002 1124
+#00 01 00 00
+#36 01 6d
+#09
+#00
+#00
+#0a
+#00
+#01
+#00
+#00
+#09
+#00
+#01
+#35
+#03
+#19
+#11
+#24
+#09
+#00
+#04
+#35
+#0d
+#35
+#06
+#19
+#01
+#00
+#09
+#00
+#11
+#35
+#03
+#19
+#00
+#11
+#09
+#00
+#05
+#35
+#03
+#19
+#10
+#02
+#09
+#00
+#06
+#35
+#09
+#09
+#65
+#6e
+#09
+#00
+#6a
+#09
+#01
+#00
+#09
+#00
+#09
+#35
+#08
+#35
+#06
+#19
+#11
+#24
+#09
+#01
+#00
+#09
+#00
+#0d
+#35
+#0f
+#35
+#0d
+#35
+#06
+#19
+#01
+#00
+#09
+#00
+#13
+#35
+#03
+#19
+#00
+#11
+#09
+#01
+#00
+#25
+#16
+#59
+#69
+#43
+#68
+#69
+#70
+#20
+#42
+#6c
+#75
+#65
+#74
+#6f
+#6f
+#74
+#68
+#20
+#4d
+#6f
+#75
+#73
+#65
+#09
+#01
+#01
+#25
+#05
+#4d
+#6f
+#75
+#73
+#65
+#09
+#01
+#02
+#25
+#06
+#59
+#69
+#43
+#68
+#69
+#70
+#09
+#02
+#00
+#09
+#01
+#00
+#09
+#02
+#01
+#09
+#01
+#11
+#09
+#02
+#02
+#08
+#80
+#09
+#02
+#03
+#08
+#21
+#09
+#02
+#04
+#28
+#01
+#09
+#02
+#05
+#28
+#01
+#09
+#02
+#06
+#35
+#81
+#35
+#7f
+#08
+#22
+#25
+#7b
+#05
+#01
+#09
+#02
+#a1
+#01
+#85
+#02
+#09
+#01
+#a1
+#00
+#05
+#09
+#19
+#01
+#29
+#08
+#15
+#00
+#25
+#01
+#75
+#01
+#95
+#08
+#81
+#02
+#05
+#01
+#09
+#30
+#09
+#31
+#16
+#01
+#f8
+#26
+#ff
+#07
+#75
+#10
+#95
+#02
+#81
+#06
+#09
+#38
+#15
+#81
+#25
+#7f
+#75
+#08
+#95
+#01
+#81
+#06
+#05
+#0c
+#0a
+#38
+#02
+#75
+#08
+#95
+#01
+#81
+#06
+#c0
+#c0
+#05
+#0c
+#09
+#01
+#a1
+#01
+#85
+#03
+#75
+#10
+#95
+#02
+#15
+#01
+#26
+#8c
+#02
+#19
+#01
+#2a
+#8c
+#02
+#81
+#60
+#c0
+#06
+#00
+#ff
+#09
+#01
+#a1
+#01
+#85
+#10
+#75
+#08
+#95
+#06
+#15
+#00
+#26
+#ff
+#00
+#09
+#01
+#81
+#00
+#09
+#01
+#91
+#00
+#c0
+#09
+#02
+#07
+#35
+#08
+#35
+#06
+#09
+#04
+#09
+#09
+#01
+#00
+#09
+#02
+#08
+#28
+#00
+#09
+#02
+#09
+#28
+#01
+#09
+#02
+#0a
+#28
+#01
+#09
+#02
+#0b
+#09
+#01
+#00
+#09
+#02
+#0c
+#09
+#1f
+#40
+#09
+#02
+#0d
+#28
+#00
+#09
+#02
+#0e
+#28
+#01
+#09
+#02
+#0f
+#09
+#00
+#12
+#09
+#02
+#10
+#09
+#00
+#00
+#
+#04 1002 1200 0100 0001
+#00 01 00 01
+#36 00 5a
+#09
+#00
+#00
+#0a
+#00
+#01
+#00
+#01
+#09
+#00
+#01
+#35
+#03
+#19
+#12
+#00
+#09
+#00
+#04
+#35
+#0d
+#35
+#06
+#19
+#01
+#00
+#09
+#00
+#01
+#35
+#03
+#19
+#00
+#01
+#09
+#00
+#05
+#35
+#03
+#19
+#10
+#02
+#09
+#00
+#09
+#35
+#08
+#35
+#06
+#19
+#12
+#00
+#09
+#01
+#00
+#09
+#02
+#00
+#09
+#01
+#03
+#09
+#02
+#01
+#09
+#04
+#6d
+#09
+#02
+#02
+#09
+#b0
+#16
+#09
+#02
+#03
+#09
+#01
+#29
+#09
+#02
+#04
+#28
+#01
+#09
+#02
+#05
+#09
+#00
+#02
+#00
+#00
+#
+#01 0001
+#00 01 00 01
+#36 00 5a
+#09
+#00
+#00
+#0a
+#00
+#01
+#00
+#01
+#09
+#00
+#01
+#35
+#03
+#19
+#12
+#00
+#09
+#00
+#04
+#35
+#0d
+#35
+#06
+#19
+#01
+#00
+#09
+#00
+#01
+#35
+#03
+#19
+#00
+#01
+#09
+#00
+#05
+#35
+#03
+#19
+#10
+#02
+#09
+#00
+#09
+#35
+#08
+#35
+#06
+#19
+#12
+#00
+#09
+#01
+#00
+#09
+#02
+#00
+#09
+#01
+#00
+#09
+#02
+#01
+#09
+#05
+#ac
+#09
+#02
+#02
+#09
+#02
+#39
+#09
+#02
+#03
+#09
+#00
+#44
+#09
+#02
+#04
+#28
+#01
+#09
+#02
+#05
+#09
+#00
+#02
+#
+#03 1101 0003 0100
+#00 01 00 02
+#36 00 2f
+#09
+#00
+#00
+#0a
+#00
+#01
+#00
+#02
+#09
+#00
+#01
+#35
+#03
+#19
+#11
+#01
+#09
+#00
+#04
+#35
+#0c
+#35
+#03
+#19
+#01
+#00
+#35
+#05
+#19
+#00
+#03
+#08
+#01
+#09
+#01
+#00
+#25
+#09
+#53
+#50
+#50
+#20
+#73
+
+
+
+#logi sdp
+#04 1000 0100 0001 1002
+#00 00 00 00
+#36 00 92 
+#09 00 00 0a 00 00 00 00 09 00 01 35 03 19 10 00 09 00 04 35 0d 35 06 
+#19 01 00 09 00 01 35 03 19 00 01 09 00 05 35 03 19 10 02 09 00 06 35 
+#09 09 65 6e 09 00 6a 09 01 00 09 00 09 35 08 35 06 19 01 00 09 01 00 
+#09 01 00 25 2c 4c 6f 67 69 74 65 63 68 20 42 6c 75 65 74 6f 6f 74 68 20 
+#57 69 72 65 6c 65 73 73 20 4d 6f 75 73 65 20 53 44 50 20 53 65 72 76 65 
+#72 09 01 01 25 0f 42 6c 75 65 74 6f 6f 74 68 20 4d 6f 75 73 65 09 02 00 35 03 09 01 00
+
+#04 1124 0100 0011 1002
+#00 01 00 00
+#36 01 ee 
+#09 00 00 0a 00 01 00 00 09 00 01 35 03 19 11 24 09 00 04 35 
+#0d 35 06 19 01 00 09 00 11 35 03 19 00 11 09 00 05 35 03 19 10 02 
+#09 00 06 35 09 09 65 6e 09 00 6a 09 01 00 09 00 09 35 08 35 06 19 11 24 
+#09 01 01 09 00 0d 35 0f 35 0d 35 06 19 01 00 09 00 13 35 03 19 00 11 09 01 
+#00 25 21 4c 6f 67 69 74 65 63 68 20 42 6c 75 65 74 6f 6f 74 68 20 57 69 72 65 6c 
+#65 73 73 20 4d 6f 75 73 65 09 01 01 25 0f 42 6c 75 65 74 6f 6f 74 68 20 4d 6f 75 
+#73 65 09 01 02 25 08 4c 6f 67 69 74 65 63 68 09 02 01 09 01 11 09 02 02 08 80 09 02 
+#03 08 21 09 02 04 28 01 09 02 05 28 01 09 02 06 35 fc 35 fa 08 22 25 f6 05 01 09 02 a1 01 
+#85 02 09 01 a1 00 05 09 19 01 29 08 15 00 25 01 75 01 95 08 81 02 05 01 09 30 09 31 16 01 
+#f8 26 ff 07 75 0c 95 02 81 06 09 38 15 81 25 7f 75 08 95 01 81 06 05 0c 0a 38 02 75 08 95 01 81 
+#06 c0 c0 05 0c 09 01 a1 01 85 03 05 06 09 20 15 00 26 64 00 75 08 95 01 81 02 c0 06 00 ff 09 01 
+#a1 01 85 10 75 08 95 06 15 00 26 ff 00 09 01 81 00 09 01 91 00 c0 06 00 ff 09 02 a1 01 85 11 75 
+#08 95 13 15 00 26 ff 00 09 02 81 00 09 02 91 00 c0 05 01 09 06 a1 01 85 04 75 01 95 08 05 07 
+#19 e0 29 e7 15 00 25 01 81 02 95 01 75 08 81 03 95 05 75 01 05 08 19 01 29 05 91 02 95 01 
+#75 03 91 03 95 06 75 08 15 00 26 ff 00 05 07 19 00 29 ff 81 00 c0 05 0c 09 01 a1 01 85 05 
+#15 00 25 01 75 01 95 02 0a 25 02 0a 24 02 81 02 95 01 75 06 81 03 c0 09 02 07 35 08 35 
+#06 09 04 09 09 01 00 09 02 09 28 01 09 02 0a 28 01 09 02 0c 09 1f 40 09 02 0d 28 00 09 
+#02 0e 28 01 09 02 0f 09 00 12 09 02 10 09 00 00
+
+#04 1200 0100 0001 1002
+#00 01 00 01
+#36 00 ad 
+#09 00 00 0a 00 01 00 01 09 00 01 35 03 19 12 00 09 00 04 35 0d 35 06 19 01 
+#00 09 00 01 35 03 19 00 01 09 00 05 35 03 19 10 02 09 00 06 35 09 09 65 
+#6e 09 00 6a 09 01 00 09 00 09 35 08 35 06 19 12 00 09 01 00 09 01 00 
+#25 2c 4c 6f 67 69 74 65 63 68 20 42 6c 75 65 74 6f 6f 74 68 20 57 69 72 
+#65 6c 65 73 73 20 4d 6f 75 73 65 20 50 6e 50 20 53 65 72 76 65 72 09 01 
+#01 25 0f 42 6c 75 65 74 6f 6f 74 68 20 4d 6f 75 73 65 09 02 00 09 01 03 09 
+#02 01 09 04 6d 09 02 02 09 b0 16 09 02 03 09 12 03 09 02 04 28 01 09 02 05 09 00 02 00
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/remote_car.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/remote_car.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/remote_car.dat	(working copy)
@@ -0,0 +1,106 @@
+mem_device_option:10
+
+
+mem_spi_ncs_gpio:ff
+mem_ui_button_gpio:ff
+mem_ui_button_timeout:14
+mem_ui_button_last_state:01
+
+mem_remote_car_queue_each_size:0f 06
+
+mem_queue_ptr:mem_remote_car_queue_each_size
+
+mem_lpm_mode:00
+mem_lpm_overhead:06
+mem_lpm_mult_timeout:02
+mem_remote_car_hard_soft_switch:00
+
+mem_ui_led_struct_ptr:mem_remote_style_led_type
+mem_ui_led_struct_num:01
+
+mem_remote_style_blink_count:ff
+mem_remote_style_struct_led_gpio:1b
+mem_remote_style_on_time:96 02
+mem_remote_style_off_time:3a 07
+
+mem_remote_car_led_num:01
+mem_remote_car_led_map:
+1b
+ff
+ff
+ff
+ff
+ff
+ff
+ff
+ 
+mem_power_param_ptr:mem_remote_car_soft_power
+mem_remote_car_power_off_timeout:0c 0c
+
+mem_keyscan_ptr:mem_remote_car_keyscan
+mem_remote_car_key_num:07
+mem_remote_car_key_conf0:
+#0
+03
+#1
+04
+#2
+05
+#3
+06
+#4
+02
+#5
+07
+#6
+17
+
+
+mem_remote_car_config_soft_switch_enable:00
+mem_remote_car_config_connect_led_gpio:ff
+mem_remote_car_config_soft_switch_gpio:19
+mem_remote_car_config_key_map:00				#00:TEN shape	01:L+R shape
+mem_remote_car_config_layout:00					#00:F_B_MOTOR	02:L_R_MOTOR
+mem_remote_car_config_check_way:00				#00:key  01:rocker
+mem_remote_car_config_timeout_shutdown_enable:00	#00:don't shutdown        	;01:timeout to shutdown
+
+mem_current_vdd_value_default_mid_x:55 4e
+mem_current_vdd_value_default_mid_y:55 4e
+mem_current_vdd_default_range:00 07
+
+mem_adc_config_flag:02
+
+mem_remote_car_24g_motor_packet:       0c        5a 6b 04 00 06 00 0a 00 0a 00 0a 00  
+mem_remote_car_24g_fire_packet:08 5a 6b 06 00 02 00 00 00
+
+mem_remote_car_no_data_timeout:b8 0b
+
+mem_lap:01 02 03 04 05 06
+
+mem_tx_power:01#0dbm
+mem_250k_freq_enable:00
+mem_24g_common_temp:00 00 00 00 00 00 00 00 00 00
+mem_24g_head_ptr:mem_24g_RC_head_ptr
+mem_24g_RC_head_ptr+394:4#offset_24g_pair_txpower
+mem_24g_RC_head_ptr+146:20 15 10 05#offset_24g_paring_addr
+mem_24g_RC_head_ptr+151:00 13 2c 42#offset_24g_ch_map1
+mem_24g_RC_head_ptr+155:06 15 36 48#offset_24g_ch_map2
+mem_24g_RC_head_ptr+159:0f 1a 3a 4c#offset_24g_ch_map3
+mem_24g_RC_head_ptr+163:11 23 31 4d#offset_24g_ch_map4
+mem_24g_RC_head_ptr+195:00#offset_24g_no_ack
+mem_24g_RC_head_ptr+205:01#offset_24g_mode
+mem_24g_RC_head_ptr+135:01#offset_24g_data_type 1ms 2kb
+mem_24g_RC_head_ptr+137:c0 12#offset_24g_rx_window
+mem_24g_RC_head_ptr+204:04#offset_24g_max_retry
+mem_24g_RC_head_ptr+171:19#offset_24g_interval
+mem_24g_RC_head_ptr+172:19#offset_24g_interval_min
+mem_24g_RC_head_ptr+173:1c#offset_24g_interval_max
+mem_24g_RC_head_ptr+150:ff#offset_24g_pairing_sm
+mem_24g_RC_head_ptr+182:00 48 60 00 00 00 00 00#offset_24g_enter_hibernate
+mem_24g_RC_head_ptr+257:10#offset_power_ctrl_txpwr_level0-5dbm
+mem_24g_RC_head_ptr+256:01#offset_power_ctrl_txpwr_level1 0dbm
+mem_24g_RC_head_ptr+255:02#offset_power_ctrl_txpwr_level2 3dbm
+
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/rtrivr_uuid.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/rtrivr_uuid.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/rtrivr_uuid.dat	(working copy)
@@ -0,0 +1,75 @@
+#attribute list: handle 2bytes, uuid 2bytes, length 1bytes, attribute Nbytes
+mem_le_att_list:
+
+#Primary service GAP ------
+01 00 00 28 02 00 18
+
+#Device name
+02 00 03 28 01 0a
+03 00 00 2a 0c 41 73 74 20 4c 45 20 4d 6f 75 73 65
+
+#Appearance
+04 00 03 28 01 02
+05 00 01 2a 02 c2 03 #3c2=hid mouse
+
+#Peripheral Preferred Connection Parameters
+06 00 03 28 01 02
+07 00 04 2a 08 06 00 06 00 64 00 2c 01 # interval 6ms, latency 100, timeout 300
+
+#Primary service GATT ------
+08 00 00 28 02 01 18
+
+#Service changed
+09 00 03 28 01 20
+0a 00 05 2a 00
+
+#Client Characteristic Configuration
+0b 00 02 29 02 00 00
+
+#Primary service TX power ------
+0c 00 00 28 02 04 18
+#Characteristic Tx power level
+0d 00 03 28 01 06
+0e 00 07 2a 01 00
+
+#Primary service Immediate alert ------
+0f 00 00 28 02 02 18
+#Characteristic Alert level
+10 00 03 28 01 04
+11 00 06 2a 01 00
+
+#Primary service UUID:f003 ------
+12 00 00 28 02 03 f0
+#Characteristic UUID:f803
+13 00 03 28 01 04
+14 00 03 f8 01 00
+
+
+#Primary service Link loss alert ------
+15 00 00 28 02 03 f0
+#Characteristic Alert level
+16 00 03 28 01 0a
+17 00 06 2a 01 00
+
+#Primary service UUID:f002 ------
+18 00 00 28 02 02 f0
+#Characteristic UUID:f802
+19 00 03 28 01 12
+1a 00 02 f8 01 28
+1b 00 02 29 02 00 00
+
+#Primary service Battery ------
+1c 00 00 28 02 0f 18
+#Characteristic Battery level
+1d 00 03 28 01 12
+1e 00 19 2a 01 38
+
+
+#End of Attribute list
+00 00
+
+mem_le_adv_data_len:1b
+mem_le_adv_data:0c 09 52 74 72 69 76 72 5f 52 36 32 31 03 19 40 02 02 01 05 02 0a 00 03 03 00 f0
+mem_le_scan_data_len:00
+mem_le_adv_param:00 08 00 08 00 01 00 00 00 00 00 00 00 07 00
+mem_le_adv_enable:01
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/shutter.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/shutter.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/shutter.dat	(working copy)
@@ -0,0 +1,229 @@
+
+
+mem_shutter_bluetooth_type:
+01
+
+
+mem_le_lap:72 31 20 98 07 2a
+mem_le_name_len:
+'Shutter 1021s
+
+mem_lap:21 00 24 00 20 00
+mem_local_name_length:#0b
+#mem_local_name:
+'ZRP Shutter
+
+mem_classic_shutter_random_mac_offset_addr:
+30 00
+
+mem_shutter_config_eeprom_offset_addr:
+00 00
+
+mem_shutter_config_enable:
+00
+
+mem_shutter_config_otp_base_address:
+fb 05
+
+mem_shutter_config_size:20
+
+mem_shutter_config_user_otp_address:
+00 00
+#da 05
+
+mem_key0_press:
+01 00
+mem_key0_release:
+06 00
+
+mem_key1_press:
+01 00
+mem_key1_release:
+06 00
+
+mem_key2_press:
+07 00
+mem_key2_release:
+08 00
+
+mem_ui_button_gpio:ff
+mem_shutter_hard_soft_switch_case:00
+mem_shutter_soft_switch_button_gpio:
+08
+mem_power_param_ptr:
+mem_shutter_soft_switch_power_state
+mem_shutter_soft_switch_power_state:
+00 #mem_shutter_soft_switch_power_state
+14 #mem_shutter_soft_switch_poweron_time
+20 #mem_shutter_soft_switch_poweroff_time
+
+
+mem_lpm_mode:01
+mem_lpm_interval:00 01
+mem_lpm_overhead:08
+mem_lpm_mult:05
+mem_lpm_mult_timeout:02
+
+mem_shutter_config_select_gpio1:09 0a 0b
+
+mem_sniff_param_interval:30 00
+01
+00
+mem_unsniff2sniff_timer:0a
+
+mem_ble_shutter_reconn_blink_on_time:
+96 00
+96 00
+
+mem_ble_shutter_discovery_blink_on_time:
+96 02
+96 02
+
+
+mem_ble_shutter_interval_min_new:
+10 00
+20 00
+02 00
+2c 01
+
+mem_ui_led_struct_num:01
+mem_ui_led_struct_ptr:mem_shutter_led_struct_app_led
+
+mem_shutter_led_struct_app_led:
+00		#type:stop blink
+00		#blink count:no blink
+1b		#led gpio number:GPIO01
+a0 01	#led blink light time
+a0 01	#led blink dark time
+00 00	#call back function when light time
+00 00	#call back function when dark time
+
+#mem_shutter_power_off_led_style
+01		#type:start blink
+07		#blink count:no blink
+1b		#led gpio number:GPIO01
+a0 03	#led blink light time
+a0 03	#led blink dark time
+00 00	#call back function when light time
+00 00	#call back function when dark time
+
+
+mem_ble_shutter_reconn_dav_interval:10 00	#100ms
+mem_ble_shutter_discovery_adv_interval:40 01
+mem_le_adv_interval:40 01 
+mem_ble_shutter_reconn_timeout:50 00		#8s
+
+mem_device_option:09
+mem_le_adv_channel_map:07 
+mem_le_adv_enable:00
+
+mem_classic_shutter_discovery_timeout:
+00 FF	#mem_classic_shutter_discovery_timeout
+00 FF	#mem_classic_shutter_connect_timeout
+00 FF	#mem_ble_shutter_discovery_timeout
+00 FF	#mem_ble_shutter_connect_timeout
+	
+
+
+mem_queue_ptr: mem_queue_each_size
+
+mem_queue_each_size:
+01
+20
+
+
+mem_le_adv_data_len:1f
+mem_le_adv_data:
+02 01 05
+03 02 12 18
+03 19 c1 03
+mem_le_scan_data_len:1f
+mem_le_scan_data:
+0d 09 56 30 2d 53 68 75 74 74 65 72 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
+
+
+
+mem_keyscan_ptr:mem_shutter_keyscan
+mem_shutter_key_num:02
+mem_shutter_key_conf0:
+#0
+18
+#1
+05
+#2
+0d
+
+##############NVRAM CONFIG##############
+
+mem_app_connection_options:17
+
+mem_nv_data_ptr:mem_shutter_nv_data
+mem_nv_data_number:05
+
+mem_class: 4025
+
+mem_sp_iocap_local:03 00 04
+mem_ssp_mode_flag:03
+mem_ssp_enable:01
+mem_ui_profile_supported:01
+
+
+mem_ptt:00
+mem_features:
+ff
+ff
+8f
+f8	#openACL3M fe
+9b	#AFHclose 83
+9d
+59
+83
+
+
+#####################################
+
+
+##########BT shutter ################
+
+
+
+
+
+
+
+
+################classic kb val list#######################
+
+################classic kb val list end#######################
+
+################ble kb val list#######################
+
+
+################ble kb val list end#######################
+
+
+##############BLE ATT LIST####################
+
+mem_ui_le_uuid_table:3a 91 #0x913A BLE_SHUTTER_GATT_LIST
+
+
+##############BLE ATT LIST END####################
+
+
+##############BT SDP LIST####################
+
+mem_eir_enable:01
+
+mem_all_uuid_16bits: 
+06
+03#Type: Complete list of 16-bit UUIDs
+1100  0001 0210 2411 0012 0100
+
+mem_all_uuid_128bits:
+00
+
+mem_ui_uuid_table:b8 92 #0x92B8 CLASSIC_SHUTTER_SDP_LIST
+
+##############BT SDP LIST END####################
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/sim.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/sim.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/sim.dat	(working copy)
@@ -0,0 +1,16 @@
+mem_page_window:20 00
+mem_page_to:00 20
+mem_pscan_window:00 02
+mem_iscan_window:00 02
+mem_pscan_interval:00 08
+mem_lap:01 02 03
+mem_lpm_xtalcnt:03 0a 1b af 07
+#mem_lpm_hibernate_switch:08
+mem_fcomp_mul:02
+mem_fcomp_div:24
+
+
+mem_patch00:01
+
+4580:ff
+mem_rf_init_ptr:80 45		
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/spp.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/spp.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/spp.dat	(working copy)
@@ -0,0 +1,206 @@
+#device option
+mem_device_option:04
+
+#spp uuid
+mem_uuid_list:
+04
+10
+02
+12
+00
+01
+00
+00
+01
+00
+01
+00
+01
+36
+00
+5a
+09
+00
+00
+0a
+00
+01
+00
+01
+09
+00
+01
+35
+03
+19
+12
+00
+09
+00
+04
+35
+0d
+35
+06
+19
+01
+00
+09
+00
+01
+35
+03
+19
+00
+01
+09
+00
+05
+35
+03
+19
+10
+02
+09
+00
+09
+35
+08
+35
+06
+19
+12
+00
+09
+01
+00
+09
+02
+00
+09
+01
+03
+09
+02
+01
+09
+05
+ac
+09
+02
+02
+09
+02
+39
+09
+02
+03
+09
+06
+44
+09
+02
+04
+28
+01
+09
+02
+05
+09
+00
+02
+03
+11
+01
+00
+03
+01
+00
+00
+01
+00
+03
+36
+00
+4e
+09
+00
+00
+0a
+00
+01
+00
+03
+09
+00
+01
+35
+03
+19
+11
+01
+09
+00
+02
+0a
+00
+00
+00
+00
+09
+00
+04
+35
+0c
+35
+03
+19
+01
+00
+35
+05
+19
+00
+03
+08
+01
+09
+00
+05
+35
+03
+19
+10
+02
+09
+00
+06
+35
+09
+09
+65
+6e
+09
+00
+6a
+09
+01
+00
+09
+01
+00
+25
+0a
+53
+50
+50
+20
+73
+6c
+61
+76
+65
+00
+00
+00
+01
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/ssp.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/ssp.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/ssp.dat	(working copy)
@@ -0,0 +1,261 @@
+#memk, for reva-c only
+4b00:
+98    
+2f    
+8a    
+42    
+91    
+44    
+37    
+71    
+CF    
+FB   
+C0   
+B5    
+A5    
+DB   
+B5    
+E9    
+5B    
+C2    
+56   
+39    
+F1    
+11    
+F1    
+59    
+A4    
+82    
+3F    
+92    
+D5    
+5E    
+1C    
+AB    
+98    
+AA    
+07    
+D8    
+01   
+5B    
+83   
+12    
+BE    
+85   
+31    
+24    
+C3    
+7D    
+0C    
+55    
+74   
+5D    
+BE    
+72    
+FE    
+B1    
+DE    
+80    
+A7    
+06    
+DC    
+9B    
+74    
+F1    
+9B    
+C1    
+C1    
+69    
+9B    
+E4    
+86    
+47    
+BE    
+EF    
+C6    
+9D    
+C1    
+0F    
+CC    
+A1    
+0C    
+24    
+6F    
+2C    
+E9    
+2D    
+AA    
+84    
+74    
+4A    
+DC    
+A9    
+B0    
+5C    
+DA    
+88    
+F9    
+76    
+52    
+51    
+3E    
+98    
+6D    
+C6    
+31    
+A8    
+C8    
+27   
+03    
+B0    
+C7    
+7F    
+59    
+BF    
+F3    
+0B    
+E0    
+C6    
+47    
+91    
+A7    
+D5    
+51   
+63    
+CA    
+06    
+67    
+29    
+29    
+14    
+85    
+0A    
+B7    
+27    
+38    
+21    
+1B    
+2E    
+FC    
+6D   
+2C    
+4D    
+13    
+0D    
+38    
+53    
+54    
+73    
+0A    
+65    
+BB   
+0A   
+6A    
+76    
+2E   
+C9   
+C2   
+81    
+85   
+2C   
+72    
+92    
+A1    
+E8    
+BF    
+A2    
+4B    
+66    
+1A    
+A8    
+70    
+8B    
+4B    
+C2    
+A3    
+51    
+6C    
+C7    
+19    
+E8    
+92    
+D1    
+24    
+06   
+99   
+D6   
+85   
+35   
+0E    
+F4  
+70    
+A0    
+6A    
+10    
+16    
+C1    
+A4    
+19    
+08   
+6C    
+37    
+1E    
+4C    
+77    
+48    
+27    
+B5    
+BC    
+B0    
+34    
+B3    
+0C    
+1C    
+39    
+4A    
+AA    
+D8   
+4E    
+4F    
+CA   
+9C   
+5B    
+F3   
+6F    
+2E   
+68    
+EE    
+82   
+8F   
+74    
+6F   
+63    
+A5    
+78    
+14    
+78    
+C8    
+84   
+08    
+02   
+C7    
+8C   
+FA   
+FF    
+BE    
+90   
+EB    
+6C    
+50   
+A4   
+F7    
+A3    
+F9    
+BE    
+F2    
+78    
+71    
+C6    
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/test.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/test.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/test.dat	(working copy)
@@ -0,0 +1,40 @@
+mem_patch06:0c
+mem_patch0e:80
+mem_patch10:20
+
+mem_iscan_window:20 00
+mem_iscan_interval:00 03
+mem_pscan_window:12 00
+mem_pscan_interval:00 08
+
+
+
+mem_lap:77 11 00 33 00 00
+mem_le_lap:88 11 00 33 00 00
+mem_device_option:07
+mem_local_name_length:
+'REVB
+
+mem_seqi:7f
+
+mem_lpm_mult:20
+mem_lpm_mult_timeout:03
+mem_lpm_overhead:05
+mem_scan_mode:03
+mem_le_adv_enable:00
+mem_le_scan_enable:00
+
+mem_class:cc 25 00
+mem_features:
+ff
+ff
+8f
+f8	#fe--EDR  F8--BR
+9b	#AFHclose 83
+9d
+59
+83
+
+
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/usb.dat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/usb.dat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/sched/usb.dat	(working copy)
@@ -0,0 +1,51 @@
+mem_patch10:20 
+mem_patch11:40
+mem_patch18:10
+mem_patch1f:01
+
+
+#usb initial
+mem_devicedesc+9: 12 24#VID
+mem_devicedesc+11: 12 18#PID
+mem_string0:04 04 03 09 04
+mem_string1:
+'YICHIP
+
+#string length less than 32
+mem_string2:
+'Wireless Mouse
+mem_string3:
+'b120300001
+
+mem_usb_tx_interval:00
+#usb initial end
+
+
+#24g rx init
+mem_tx_power:02
+mem_24g_mode:02#rx
+mem_24g_pair_mode:00
+mem_24g_no_ack:00#no ack
+mem_24g_rx_window:30 75#rx
+mem_24g_hop_interval:2a
+mem_24g_ackpayload_enable:00#ack payload enable
+mem_24g_ch_map1:00 13 2c 42
+mem_24g_ch_map2:06 15 36 48
+mem_24g_ch_map3:0f 1a 3a 4c
+mem_24g_ch_map4:11 23 31 4d
+mem_24g_paring_addr:20 15 10 05
+mem_24g_rx_addr:36 20 04 07
+#24g rx init end
+
+mem_rf_init_data_new:
+# tx power
+4b ba
+55 d0
+56 e0
+57 88
+58 3c
+59 10
+ff
+mem_rf_init_ptr:mem_rf_init_data_new
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/DeleteNote.pl
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/DeleteNote.pl	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/DeleteNote.pl	(working copy)
@@ -0,0 +1,27 @@
+
+#print "输入注释的标志:";
+
+#chomp ($text = <STDIN>);
+
+#print $text;
+
+###########################
+#该脚本的功能为删除，#为注释的注释代码。
+
+$Sched_path=$ARGV[0];
+
+open(Sched,$Sched_path)||die("Cannot open files\n");
+@sched=<Sched>;
+close(Sched);
+
+foreach $sched(@sched)
+{
+	$sched_begin = $sched;
+	@Sched = split(/[#]+/, $sched);
+	chomp @Sched[0];
+	$sched = @Sched[0]."\n";
+}
+
+open(Sched,">$Sched_path")||die("Cannot open files\n");
+print Sched @sched;
+close(Sched);
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/crc16.exe
===================================================================
Cannot display: file marked as a binary type.
svn:mime-type = application/octet-stream

Property changes on: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/crc16.exe
___________________________________________________________________
Added: svn:mime-type
## -0,0 +1 ##
+application/octet-stream
\ No newline at end of property
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/crc16.pl
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/crc16.pl	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/crc16.pl	(working copy)
@@ -0,0 +1,27 @@
+$debug = 0;
+$crc = 0xffff;
+$i = 0;
+$offset = 0xffff;
+$source_file = $ARGV[0];
+$offset = $ARGV[1];
+
+open(EEP,"$source_file") or die $!;
+
+while (<EEP>) {    
+	$c = hex();
+
+  if($i >= $offset){
+  	if($debug){printf "%02x\t", $c;}
+  	$crc  = ($crc >> 8) | ($crc << 8);
+		$crc ^= $c & 0xff;
+		$crc ^= ($crc & 0xff) >> 4;
+		$crc ^= $crc << 12;
+		$crc ^= ($crc & 0xff) << 5;
+		$crc &= 0xffff;
+  }
+  $i ++;
+  if($debug){printf "%02x\t", $crc;}
+  printf "%02x\n", $c;
+}
+
+printf "%02x\n%02x\n", (($crc >> 8) & 0xff),($crc & 0xff);
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/eeprom2fulleeprom.exe
===================================================================
Cannot display: file marked as a binary type.
svn:mime-type = application/octet-stream

Property changes on: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/eeprom2fulleeprom.exe
___________________________________________________________________
Added: svn:mime-type
## -0,0 +1 ##
+application/octet-stream
\ No newline at end of property
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/eeprom2fulleeprom.pl
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/eeprom2fulleeprom.pl	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/eeprom2fulleeprom.pl	(working copy)
@@ -0,0 +1,18 @@
+
+
+
+$source_file = $ARGV[0];
+$eeprom_size = $ARGV[1];
+
+open(EEP,"$source_file") or die("cannot open files");
+for ($i = 1 ;$i<=$eeprom_size*128-2;$i++)
+{
+
+    while (<EEP>) { 
+        $c = hex();
+        printf "%02x\n", $c;
+        $i++;
+    }
+
+	printf "FF\n";
+}
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/get_link_key.bat
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/get_link_key.bat	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/get_link_key.bat	(working copy)
@@ -0,0 +1,19 @@
+@echo off
+e pu
+if exist "link_key.txt" (
+echo ERROR:it had link_key.txt 
+echo ERROR:please delete link_key.txt
+goto end) else (goto get_link_key)
+
+:get_link_key
+e 41bel10>link_key.txt
+
+perl get_link_key.pl
+del link_key.txt
+
+goto end
+
+
+:end
+
+pause
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/get_link_key.pl
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/get_link_key.pl	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/get_link_key.pl	(working copy)
@@ -0,0 +1,31 @@
+open(LINK_KEY,"link_key.txt") || die ("cannot open link_key.txt");
+
+@link_key = <LINK_KEY>;
+
+close(LINK_KEY);
+
+print @link_key;
+@Temporary_variables = split (/41b0 :/,@link_key[1]);
+
+@link_key_low = split (/[ \n\t]/,@Temporary_variables[1]);
+
+@Temporary_variables = split (/41c0 :/,@link_key[2]);
+
+@link_key_high = split (/[ \n\t]/,@Temporary_variables[1]);
+
+@link_key = (@link_key_low,@link_key_high);
+
+#print "#########################\n";
+#print "#########################\n";
+#print "#########################\n";
+print "link key :\n";
+
+print "merlinII :";
+for($i=0;$i<=@link_key-1;$i++) {
+    print $link_key [$i];
+}
+print "\nfrontline:";
+for ($i=@link_key;$i>=0;$i--){
+	print $link_key[$i];
+	}
+print "\n";
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/memalloc.pl
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/memalloc.pl	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/memalloc.pl	(working copy)
@@ -0,0 +1,74 @@
+#!/usr/bin/perl
+$path="output/bt_format.meta";
+open file, $path;
+@f = <file>;
+close file;
+open file, ">$path";
+$path =~ s/\/.*//;
+open file1, ">output/memmap.format";
+$xaddr = 0x4000;
+$addr = 0;
+if($#ARGV == 1) {
+	$addr = hex($ARGV[0]);
+	$xaddr = hex($ARGV[1]);
+}
+for($i = 0;$i < @f;$i++) { $cmalloc[$i] = (); }
+for($i = 0;$i < @f;$i++) { 
+	$_ = $f[$i];
+	$start = 1 if(/^\s*memalloc\s*\(\s*$/);
+	$start = 2 if(/^\s*xmemalloc\s*\(\s*$/);
+	$start = 3 if(/^\s*omemalloc\s*\(\s*$/);
+	$start = 10 + $1 if(/^\s*cmemalloc\s+([0-9])\s*\(\s*$/);
+	if($start) {
+		if(/^\s*([0-9]+)\s+([a-zA-Z0-9_]+)\s*(.*)$/) {
+			if($start == 1) {
+				$str = sprintf "0x%04x %s%s\n", $addr, $2, $3;
+				$addr += $1;
+				$bstr .= $str;
+				$sstr .= $str;
+			} elsif($start == 2) {
+				$str = sprintf "0x%04x %s%s\n", $xaddr, $2, $3;
+				$xaddr += $1;
+				$xstr .= $str;
+			} else {
+				push @ostr, $_;
+			}
+		}
+		if(/^\s*\)\s*$/) {
+			if(@ostr > 0) {
+				if($start == 3) {
+					push @omalloc,[@ostr];
+				} elsif($start > 9) {
+					$j = $start - 10;
+					push @{$cmalloc[$j]},@ostr;
+				} 
+			}
+			$start = 0;
+			@ostr = ();
+		}
+	} else {
+		$sstr .= $_;
+	}
+}
+for($i = 0;$i <= $#cmalloc;$i++) {
+	push @omalloc,$cmalloc[$i];
+#	for($j = 0;$j <= $#{$cmalloc[$i]};$j++) {		print $cmalloc[$i][$j];	}
+}
+
+$xend = $xaddr;
+for($i = 0;$i <= $#omalloc;$i++) {
+	for($j = 0, $oaddr = $xaddr;$j <= $#{$omalloc[$i]};$j++) {
+		if($omalloc[$i][$j] =~ /^\s*([0-9]+)\s+([a-zA-Z0-9_]+)\s*(.*)$/) {
+			$str = sprintf "0x%04x %s%s\n", $oaddr, $2, $3;
+			$oaddr += $1;
+			$xstr .= $str;
+		}
+	}
+}
+$xend = $oaddr if($oaddr > $xend);
+print file $xstr, $sstr;
+print file1 $bstr, $xstr;
+close file;
+close file1;
+printf "\nLast allocated address is %04x\n", $addr;
+printf "\nLast allocated xmem address is %04x\n", $xend;
\ No newline at end of file
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/mergepatch.pl
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/mergepatch.pl	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/mergepatch.pl	(working copy)
@@ -0,0 +1,44 @@
+#!/usr/bin/perl
+$defs = "";
+$fmt = 0;
+
+
+sub parseif {
+	my($fname) = @_;
+	open file, $fname;
+	@f = <file>;
+	close file;
+	open file, ">$fname";
+	@valid = (1);
+	for($i = 0;$i < @f;$i++) { 
+		$_ = $f[$i];
+		$defs .= $1 . " " if(/^define\s+(\w+)\s*/);
+		if(/^ifdef\s+(\w+)\s*/) {
+			push @valid, ($defs =~ /(^|\s)$1(\s|$)/ ? 1 : 0) & $valid[$#valid];
+		} elsif(/^ifndef\s+(\w+)\s*/) {
+			push @valid, ($defs =~ /(^|\s)$1(\s|$)/ ? 0 : 1) & $valid[$#valid];
+		} elsif(/^else/) {
+			printf "%s\nelse without if at line %d\n", $f[$i - 3], $i if($#valid == 0);
+			$valid[$#valid] = (1 - $valid[$#valid]) & $valid[$#valid - 1];
+		} elsif(/^endif/) {
+			printf "%s\nendif without if at line %d\n", $_, $i if($#valid == 0);
+			pop @valid;
+		} elsif($valid[$#valid]) {
+			if(/^include\s+(.+)\s*/) {
+				open file2, "program/$1";
+				@f2 = <file2>;
+				close file2;
+				splice(@f, $i + 1, 0, @f2);
+			} else {
+				print file $_;
+			}
+		}
+	}
+	close file;
+}
+
+parseif("output/bt_program23.meta");
+$fmt = 1;
+parseif("output/bt_format.meta");
+
+
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/sortsched.pl
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/sortsched.pl	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/sortsched.pl	(working copy)
@@ -0,0 +1,163 @@
+
+
+$Sched_path=$ARGV[0];
+$Sched_test_path=$ARGV[1];
+
+open(Sched,"$Sched_path")||die("Cannot open files1\n");
+@sched=<Sched>;
+@sched[-1] = "";
+close(Sched);
+#open(Sched_test,">ResultsFile.rom")||die("Cannot open files2\n");
+#print Sched_test ("");
+#close (Sched_test);
+#open(Sched_test,">ResultsFile.rom")||die("Cannot open file3s\n");
+open(Sched_test1,">$Sched_test_path")||die("Cannot open files4\n");
+#@Sched_test=<Sched_test>;
+@Data[0]="";
+$Data_num=0;
+@Address_num;
+@OriginalRecord;
+foreach $sched (@sched)
+{
+	if($sched=~/[0-9a-fA-F][0-9a-fA-F][0-9a-fA-F][0-9a-fA-F]:/)
+	{
+		#$lap_flag = 0;
+		#$le_lap_flag = 0;
+		#if($sched=~/40a0:/)
+		#{
+		#	$lap_data = $sched;
+		#	$lap_flag = 1;
+		#}
+		#elsif($sched =~ /44a0:/)
+		#{
+		#	$le_lap_data = $sched;
+		#	$le_lap_flag = 1;
+		#}
+		#else
+		#{
+			$Data_num++;
+			@OriginalRecord[$Data_num]=$sched;
+			@snap_variable=split(/[#\n]/,$sched);
+			@Data[$Data_num]=@snap_variable[0]."\n";
+		#}
+	}
+	else
+	{
+		#if($lap_flag == 1)
+		#{
+		#	$lap_data .= $sched;
+		#}
+		#elsif($le_lap_flag == 1)
+		#{
+		#	$le_lap_data .= $sched;
+		#}
+		#else
+		#{
+			@OriginalRecord[$Data_num].=$sched;
+			@snap_variable=split(/[#\n]/,$sched);
+			@Data[$Data_num].=@snap_variable[0]."\n";
+		#}
+	}
+}
+@sort_Data = sort(@Data);
+@OriginalRecord=sort(@OriginalRecord);
+$PreviousADDR=0;
+$CurrentADDR=0;
+$PreviousData="";
+$CurrentData="";
+$I=0;
+$len_sort_Data=@sort_Data;
+$NextADDR="";
+for($i=0;$i<$len_sort_Data;$i++)
+{
+	$sort_Data=@sort_Data[$i];
+	@snap_variable=split(/:/,$sort_Data);
+	$WData=@snap_variable[1];
+	
+	if($WData =~ /[1-9a-fA-F]/ && hex(@snap_variable[0]) >= 16384){
+	$WADDR=@snap_variable[0];
+	@sort_Data[$i]=@OriginalRecord[$i];
+	@LLL[$i]=0;
+	if($NextADDR eq $WADDR){
+		@snap_variable=split(/[0-9a-fA-F][0-9a-fA-F][0-9a-fA-F][0-9a-fA-F]:/,@OriginalRecord[$i]);
+		@sort_Data[$i]=@snap_variable[1];
+		@LLL[$i]=1;
+	}
+	if(@LLL[$i]==0 && hex($PreviousADDR)+6>hex($WADDR)){
+		$LEN=hex($WADDR) - hex($NextADDR);
+		#print $LEN;
+		for($j=0;$j<$LEN;$j++)
+		{
+			@sort_Data[$i-1].="00 "
+		}
+		@sort_Data[$i-1].="\n";
+		@snap_variable=split(/[0-9a-fA-F][0-9a-fA-F][0-9a-fA-F][0-9a-fA-F]:/,@OriginalRecord[$i]);
+		@sort_Data[$i]=@snap_variable[1];
+		@LLL[$i]=1;
+	}
+	if($PreviousADDR eq $WADDR){
+		@sort_Data[$i-1]="";
+		if(@LLL[$i-1]==1){
+			@snap_variable=split(/[0-9a-fA-F][0-9a-fA-F][0-9a-fA-F][0-9a-fA-F]:/,@OriginalRecord[$i]);
+			@sort_Data[$i]=@snap_variable[1];
+			@LLL[$i]=1;
+		}
+	}
+	else{
+		@DataNum=split(/[0-9a-fA-F][0-9a-fA-F]/,$WData);
+		$DataNum=@DataNum;
+		$PreviousADDR=$WADDR;
+		#@sort_Data[$i].="      ".$DataNum."\n";
+		$NextADDR = &hex_add($WADDR,$DataNum);
+	}
+	}
+	else{
+		if(hex(@snap_variable[0]) >= 16384)
+		{
+			@sort_Data[$i]="";
+		}
+	}
+	#@sort_Data[$i].="      ".$NextADDR."\n";
+	#$sort_Data =~ s/\n//;
+	#$sort_Data.="\n";
+}
+#print Sched_test @OriginalRecord;
+#print Sched_test1 $lap_data;
+#print Sched_test1 $le_lap_data;
+print Sched_test1 @sort_Data;
+#print  $lap_data;
+#print  $le_lap_data;
+#for($i=0;$i<$len_sort_Data;$i++)
+#foreach $sort_Data (@sort_Data)
+#{	
+	#$sort_Data=@sort_Data[$i];
+	#print Sched_test $PreviousData;
+	#@snap_variable=split(/:/,$sort_Data);
+	#$CurrentADDR=@snap_variable[0];
+	#$CurrentData=$sort_Data;
+	#print ($CurrentADDR);
+	#if($CurrentADDR-$PreviousADDR==1)
+	#{
+	#	$CurrentVal=@snap_variable[1];
+	#	@snap_variable=split(/\n/,$PreviousData);
+		
+	#	$PreviousData.=" ".$CurrentVal;
+	#	$CurrentData=$PreviousData;
+	#	@sort_Data[$i]="";
+	#	@sort_Data[$i-1]=$CurrentData;
+		#print ($CurrentData."\n");
+	#}
+	#$PreviousADDR=$CurrentADDR;
+	#$PreviousData=$CurrentData;
+	#print Sched_test $CurrentData;
+#}
+#print Sched_test @sort_Data;
+#close(Sched_test);
+close(Sched_test1);
+
+sub hex_add{
+	my($ADDR,$Len)=@_;
+	$data=hex($ADDR);
+	$data=$data+$Len-1;
+	return(sprintf("%04x",$data));
+}
\ No newline at end of file
Index: 1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/transform_name2addr.pl
===================================================================
--- /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/transform_name2addr.pl	(nonexistent)
+++ /branch/mouse_project/TestTools/1062_1012_1011_Mouse_24G_universal_Matrix_Pattern/24M_Standard/util/transform_name2addr.pl	(working copy)
@@ -0,0 +1,107 @@
+###########################
+#该脚本的功能为：将文件中的寄存器名字改成寄存器地址
+#两者之间的映射关系为$Memmap_path文件中的映射表
+
+$Sched_path=$ARGV[0];
+$Sched_test_path=$ARGV[1];
+$Memmap_path=$ARGV[2];
+open(Sched,$Sched_path)||die("Cannot open files\n");
+@sched=<Sched>;
+close(Sched);
+open(Sched_test,">$Sched_test_path");
+print Sched_test ("");
+close(Sched_test);
+open(Sched_test,">$Sched_test_path");
+open(Memmap,$Memmap_path)||die("Cannot open files\n");
+@memmap=<Memmap>;
+close(Memmap);
+$type_add=0;
+$type_exchange=0;
+foreach $sched(@sched)
+{
+	$sched_begin = $sched;
+	@Sched = split(/[#]+/, $sched);
+	$sched = @Sched[0];
+	@Sched[0] = "";
+	if($sched =~ /mem[\w]+/)
+	{
+		@memmap_name = split(/[\W]+/, $sched);
+		foreach $memmap_name(@memmap_name)
+		{
+			if($memmap_name =~ /mem[\w]+/)
+			{
+				$Memmap_name=$memmap_name;
+				$type_add = 0;
+				$type_exchange = 0;
+				if($sched =~ /$Memmap_name[+]/)
+				{
+					$type_add = 1;#修改的类型第一种，加
+					@ADD_Num=split(/[^0-9\+xa-fA-F]/,$sched);
+					foreach $ADD_Num(@ADD_Num)
+					{
+						if($ADD_Num =~ /\+/)
+						{
+							if($ADD_Num =~ /0x/)
+							{
+								@add_num = split(/\+0x/,$ADD_Num);
+								$add_num1 =@add_num[1];
+								$add_num_begin = "0x".$add_num1;
+								$add_num = hex($add_num1);
+							}
+							else
+							{
+								@add_num = split(/\+/,$ADD_Num);
+								$add_num1 =@add_num[1];
+								$add_num_begin = $add_num1;
+								$add_num = int($add_num1);
+							}
+						}#$add_num是匹配出的需要加的数值，字符串形式
+					}
+				}
+				if($sched =~ /[:] *\t*$Memmap_name/)
+				{
+					$type_exchange = 1;#修改的类型第二种，高低位交换
+				}
+				foreach $memmap(@memmap)
+				{
+					if($memmap =~ /$Memmap_name/ && $memmap !~ /$Memmap_name[\w]+/)
+					{
+						@Memmap=split(/[ \t\n]/,$memmap);
+						$memmap_address=@Memmap[0];
+						$memmap_address =~ s/0x//;
+						if($type_add==1)
+						{
+							$memmap_address_D = hex($memmap_address);
+							$memmap_address_D = $memmap_address_D+$add_num;
+							$memmap_address_H = sprintf("%x", $memmap_address_D);
+							$memmap_address = $memmap_address_H;
+							$memmap_address_add_finish = $memmap_address;
+							$sched_begin =~ s/$Memmap_name\+$add_num_begin/$memmap_address/;
+						}
+						if($type_exchange==1)
+						{
+							$memmap_address_High = substr($memmap_address,0,2);
+							$memmap_address_Low = substr($memmap_address,2,2);
+							$memmap_address = $memmap_address_Low." ".$memmap_address_High;
+							if($type_add==0)
+							{
+								$sched_begin =~ s/$Memmap_name/$memmap_address/;
+							}
+							else
+							{
+								$sched_begin =~ s/$memmap_address_add_finish/$memmap_address/;
+							}
+						}
+					}
+				}
+				$sched_begin =~ s/$Memmap_name/$memmap_address/;
+			}
+		}
+		printf Sched_test ("%s",$sched_begin);
+	}
+	else
+	{
+		printf Sched_test ("%s",$sched_begin);
+	}	
+}
+close(Sched_test);
